diff --git a/CLAUDE.md b/CLAUDE.md
index c0d900a..7b60c04 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -64,3 +64,25 @@ Wenn das Ziel reine Token-Ersparnis ist: Updates code-only halten.
 
 **graphify-eigene memory:** `graphify-out/memory/` hält gespeicherte Query-Antworten
 (z. B. den Lyra-Traceability-Trace) und fließt beim `--update` zurück in den Graphen.
+
+## Agent-Verhaltensregel: Keine eigenmächtigen Code-Änderungen
+
+> ⚠️ HARTREGEL — vom User explizit verlangt
+
+- **Nie** Code schreiben, ändern oder erstellen, nur weil etwas „offensichtlich" erscheint.
+- **Keine Implementierung** ohne ausdrückliches „Go" des Users.
+- **Ausnahme:** Der User gibt einen konkreten, knappen und verständlichen Implementierungstask.
+- Vorher sind Fragen, Planen und Recherche erlaubt und gewollt — aber erst nach einem klaren „mach das" wird Code produziert.
+
+## Session-Kontext-Limit: Stop & Prompt
+
+> ⚠️ HARTREGEL — vom User explizit verlangt
+
+Wenn Anzeichen dafür bestehen, dass der Session-Kontext voll läuft oder alte Details verloren gehen (z. B. ich vergesse wiederholt Werte wie `hardwareId`, UDIDs oder bereits besprochene Fakten), dann:
+
+1. **Sofort stoppen** — keine weiteren Code-Änderungen, keine langen Analysen.
+2. **Kurzen Status-Block notieren** — was wurde besprochen, was steht noch aus, welche Dateien betroffen sind.
+3. **Dem User einen einfachen Copy-Paste-Prompt geben**, mit dem er die nächste Session nahtlos fortsetzen kann.
+4. **Den User bitten, diese Session zu beenden** und die neue mit dem Prompt zu starten.
+
+Das verhindert, dass bereits erledigte Arbeit oder wichtige Kontextdetails erneut aufgebaut werden müssen.
diff --git a/apps/rebreak-magic/.gitignore b/apps/rebreak-magic/.gitignore
new file mode 100644
index 0000000..da1105f
--- /dev/null
+++ b/apps/rebreak-magic/.gitignore
@@ -0,0 +1,38 @@
+# Dependencies
+node_modules
+
+# Nuxt
+.nuxt
+.output
+.dist
+
+# Tauri
+src-tauri/target
+src-tauri/gen
+src-tauri/debug
+src-tauri/release
+
+# Logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+
+# Editor
+.idea
+.vscode
+*.swp
+*.swo
+*~
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Build artifacts
+*.dmg
+*.exe
+*.msi
+dist
+*.bak
diff --git a/apps/rebreak-magic/PLAN.md b/apps/rebreak-magic/PLAN.md
new file mode 100644
index 0000000..d9db74a
--- /dev/null
+++ b/apps/rebreak-magic/PLAN.md
@@ -0,0 +1,136 @@
+# ReBreak Magic — Unified Desktop App (Nuxt + Tauri)
+
+## Ziel
+
+Eine einheitliche Cross-Platform-Desktop-App für Mac und Windows, die:
+- Mac + iPhone in den ReBreak-Schutz einbindet
+- Windows-PC in den ReBreak-Schutz einbindet
+- iOS-Supervision ohne Erase über `supervise-magic` durchführt
+- Sideload-Protect-Profil über lokalen HTTP-Server + QR-Code installiert
+- Später ABM/ADE-Silent-Enrollment vorbereitet
+
+## Tech-Stack
+
+- **Frontend:** Nuxt 4.1.3 + @nuxt/ui 4.5.1 + Tailwind CSS 4 + Vue 3
+- **Desktop-Runtime:** Tauri 2.x (Rust Core + WebView)
+- **System-Zugriff:** Rust-Tauri-Commands + Sidecars
+- **iOS-Supervision:** `supervise-magic` Go-Binary als Sidecar
+- **Profile-Transfer:** Lokaler Rust-HTTP-Server + QR-Code
+
+## Vergleich: Aktuelle Mac vs. Windows
+
+| Bereich | Mac (SwiftUI) | Windows (Tauri/React) | Unified (Nuxt+Tauri) |
+|---|---|---|---|
+| **UI-Framework** | SwiftUI | React + Vite | **Nuxt + NuxtUI** |
+| **Desktop-Runtime** | Native App | Tauri 2 | **Tauri 2** |
+| **System-Core** | Swift Services | Rust | **Rust** |
+| **Login** | Supabase JWT | 6-stelliger Pairing-Code | **Nur Pairing-Code** |
+| **iPhone Detection** | `libimobiledevice` via Shell | — | **`libimobiledevice` Sidecar** |
+| **iOS Supervision** | `supervise-magic` Go-Binary | — | **`supervise-magic` Sidecar** |
+| **Sideload-Profil** | AirDrop | — | **Lokaler HTTP-Server + QR-Code** |
+| **MDM-Enrollment** | NanoMDM HTTP-API | — | **NanoMDM HTTP-API** |
+| **Mac-PC-Schutz** | `.mobileconfig` DNS-Profil | — | **`.mobileconfig` + `profiles` command** |
+| **Windows-PC-Schutz** | — | DoH via PowerShell | **DoH + Tamper-Service** |
+| **Tamper-Protection** | MDM/NanoMDM | SYSTEM-Service | **Plattformabhängig** |
+| **Token-Speicher** | macOS Keychain | Windows Credential Manager | **Rust `keyring` crate** |
+| **Installer** | DMG + Notarization | NSIS | **DMG (Mac) + NSIS/MSI (Win)** |
+
+## Gemeinsamer Wizard-Flow
+
+1. **Welcome** — Plattform erkennen, Willkommen
+2. **Pairing** — 6-stelliger Pairing-Code aus der ReBreak-App
+3. **Device Detection** — iPhone per USB erkennen (Mac) / PC-Info sammeln (Win)
+4. **Pre-Flight** — Find-My-iPhone prüfen, Voraussetzungen checken
+5. **Supervise** — `supervise-magic` ausführen, iPhone rebootet
+6. **Sideload Profile** — Lokaler Server starten, QR-Code anzeigen, User installiert Profil
+7. **MDM Enrollment** — QR-Code/Download für NanoMDM-Enrollment-Profil
+8. **Configure** — NanoMDM Commands pushen (Take-Management + mdmSupervised=true)
+9. **Protection Active** — Schutzstatus anzeigen, Release-Cooldown verwalten
+
+## Plattformspezifische Rust-Module
+
+```
+src-tauri/src/
+├── main.rs                 # Entry + Tauri-Setup
+├── lib.rs                  # Öffentliche Commands
+├── platform/
+│   ├── mod.rs              # Trait + Dispatcher
+│   ├── macos.rs            # Mac-spezifisch (DNS-Profil, Keychain, USB)
+│   └── windows.rs          # Windows-spezifisch (DoH, Service, Credential Manager)
+├── sidecar/
+│   └── supervise_magic.rs  # Go-Binary Management
+├── server/
+│   └── local_http.rs       # Lokaler HTTP-Server für Profile
+├── config.rs               # App-Konfiguration
+├── backend/
+│   └── api.rs              # /api/magic/* Client
+└── error.rs                # Gemeinsame Fehler-Typen
+```
+
+## Frontend-Struktur (Nuxt)
+
+```
+app/
+├── app.vue                 # Tauri-Root + Layout
+├── pages/
+│   ├── index.vue           # Welcome / Wizard-Start
+│   ├── pair.vue            # Pairing-Code (UPinInput)
+│   ├── detect.vue          # Geräte-Erkennung
+│   ├── supervise.vue       # Supervision-Step
+│   ├── sideload.vue        # Lokaler Server + QR-Code
+│   ├── enroll.vue          # MDM-Enrollment
+│   ├── protect.vue         # Schutz aktivieren
+│   └── status.vue          # Status + Release
+├── components/
+│   ├── WizardStep.vue
+│   ├── QrDisplay.vue
+│   ├── DeviceCard.vue
+│   └── ProtectionStatus.vue
+├── composables/
+│   ├── useTauri.ts
+│   ├── useMagicApi.ts
+│   └── useLocalServer.ts
+└── assets/
+    └── css/main.css
+```
+
+## Wichtige Entscheidungen
+
+1. **Nuxt statt React:** Einheitlicher Stack mit Admin/Marketing, besseres Ökosystem-Sharing.
+2. **Tauri statt Electron:** Kleinere Bundle-Größe, Rust-Performance, bessere System-Integration.
+3. **Lokaler HTTP-Server statt AirDrop:** Plattformunabhängiger Profil-Transfer.
+4. **Sidecar für Go-Binary:** `supervise-magic` muss nicht nach Rust portiert werden.
+5. **ABM vorbereiten:** Architektur soll später Silent-Enrollment unterstützen, aber aktuell manuell.
+
+## Risiken / Offene Punkte
+
+- `supervise-magic` Windows-Build noch nicht verifiziert
+- Verhalten von `PayloadRemovalDisallowed` bei Webserver-Download noch nicht getestet
+- ABM-Beantragung dauert Wochen
+- macOS Code-Signing + Notarization erforderlich für Production
+- Windows Code-Signing (EV empfohlen) für Production
+
+## Aktueller Stand
+
+- ✅ Nuxt 4 + Tauri 2 Skelett unter `apps/rebreak-magic`
+- ✅ Wizard-Pages mit NuxtUI: Welcome, Pair, Detect, Supervise, Sideload, Enroll, Status
+- ✅ Rust-Module: Config, Backend-API, Platform-Abstraction, lokaler HTTP-Server, Sidecar-Integration
+- ✅ `supervise-magic` Go-Binary als Tauri-Sidecar eingebunden
+- ✅ Lokaler HTTP-Server für Sideload-Profil + QR-Code-Generierung
+- ✅ `cargo check` erfolgreich
+- ✅ `pnpm build` erfolgreich (Nuxt mit `nitro.preset: "static"` erzeugt `index.html`)
+- ✅ `.app` Bundle mit `rebreak-magic` + `supervise-magic` Sidecar wird erzeugt
+- ✅ Komplette Backend-Logik: Pairing-Code einlösen, Gerät registrieren, Status/Device-Liste abrufen, Release anfragen/abbrechen
+- ✅ Token sicher im System-Keyring gespeichert
+- ✅ Profil-Download vom Backend + lokaler QR-Code-Server für Sideload
+- ✅ Release-Cooldown in Status-Seite angezeigt
+- ⚠️ `.app` Bundle nur (kein DMG, um Bundling-Probleme zu vermeiden)
+
+## Nächste Schritte
+
+1. Plattformspezifische Schutzmechanismen implementieren (Mac DNS-Profil, Windows DoH + Service)
+2. Echte Backend-API-Calls für Pairing / Status implementieren
+3. Profil-Generierung in Rust ergänzen (statt hartcodiertem `/tmp/...` Pfad)
+4. Windows-Build der `supervise-magic` Sidecar verifizieren
+5. Code-Signing + Notarization für Production vorbereiten
+6. CI-Pipeline für Mac + Windows Builds
diff --git a/apps/rebreak-magic/app/app.vue b/apps/rebreak-magic/app/app.vue
new file mode 100644
index 0000000..b3f6428
--- /dev/null
+++ b/apps/rebreak-magic/app/app.vue
@@ -0,0 +1,6 @@
+<template>
+  <UApp>
+    <NuxtPage />
+    <DevLogDrawer />
+  </UApp>
+</template>
diff --git a/apps/rebreak-magic/app/assets/css/main.css b/apps/rebreak-magic/app/assets/css/main.css
new file mode 100644
index 0000000..120ecac
--- /dev/null
+++ b/apps/rebreak-magic/app/assets/css/main.css
@@ -0,0 +1,25 @@
+@import "tailwindcss";
+@import "@nuxt/ui";
+@import url('https://fonts.googleapis.com/css2?family=Nunito:wght@400;500;600;700;800&display=swap');
+
+:root {
+  --rebreak-primary: #2e7fd4;
+  --rebreak-primary-light: #4a9af0;
+  --rebreak-primary-dark: #1e5fa3;
+  --font-family: 'Nunito', system-ui, -apple-system, sans-serif;
+}
+
+html,
+body,
+#__nuxt {
+  height: 100%;
+  width: 100%;
+  margin: 0;
+  padding: 0;
+  font-family: var(--font-family);
+}
+
+/* Nunito for all UI components */
+* {
+  font-family: var(--font-family);
+}
diff --git a/apps/rebreak-magic/app/assets/rebreak-icon.png b/apps/rebreak-magic/app/assets/rebreak-icon.png
new file mode 100644
index 0000000..721cabe
Binary files /dev/null and b/apps/rebreak-magic/app/assets/rebreak-icon.png differ
diff --git a/apps/rebreak-magic/app/components/DevLogDrawer.vue b/apps/rebreak-magic/app/components/DevLogDrawer.vue
new file mode 100644
index 0000000..41b6ad2
--- /dev/null
+++ b/apps/rebreak-magic/app/components/DevLogDrawer.vue
@@ -0,0 +1,115 @@
+<template>
+  <div>
+    <!-- Toggle button (small, bottom-right) -->
+    <UButton icon="i-heroicons-bug-ant" color="neutral" variant="ghost" size="xs"
+      class="fixed bottom-3 right-3 z-50 opacity-60 hover:opacity-100" @click="open = true">
+      Logs
+    </UButton>
+
+    <UDrawer v-model:open="open" direction="bottom" :handle="true" :dismissible="true">
+      <template #body>
+        <div class="flex flex-col h-full">
+          <div class="flex items-center justify-end gap-2 pb-3 border-b border-gray-200">
+            <UButton size="xs" color="neutral" variant="ghost" icon="i-heroicons-clipboard-document" @click="copyLogs">
+              Kopieren
+            </UButton>
+            <UButton size="xs" color="error" variant="ghost" icon="i-heroicons-trash" @click="clear">
+              Löschen
+            </UButton>
+          </div>
+
+          <div class="flex-1 overflow-auto pt-3 space-y-2 bg-gray-950 -mx-4 px-4">
+            <div v-for="entry in logs" :key="entry.id" class="text-xs font-mono p-2 rounded border"
+              :class="entryClass(entry.level)">
+              <div class="flex items-center gap-2 opacity-70">
+                <span>{{ formatTime(entry.timestamp) }}</span>
+                <UBadge :color="badgeColor(entry.level)" size="xs" variant="solid">
+                  {{ entry.level.toUpperCase() }}
+                </UBadge>
+              </div>
+              <div class="mt-1 whitespace-pre-wrap break-all">{{ entry.message }}</div>
+              <details v-if="entry.details" class="mt-2 group">
+                <summary class="cursor-pointer hover:underline flex items-center gap-2">
+                  <span>Details</span>
+                  <UButton size="2xs" color="neutral" variant="ghost" icon="i-heroicons-clipboard-document"
+                    class="opacity-0 group-hover:opacity-100 transition-opacity"
+                    @click.stop="copyDetails(entry.details)">
+                    Kopieren
+                  </UButton>
+                </summary>
+                <div class="mt-1 p-2 bg-black/30 rounded whitespace-pre-wrap break-all">{{ entry.details }}</div>
+              </details>
+            </div>
+
+            <div v-if="logs.length === 0" class="text-gray-500 text-center py-8">
+              Noch keine Logs vorhanden.
+            </div>
+          </div>
+        </div>
+      </template>
+    </UDrawer>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, onMounted, onUnmounted } from "vue";
+import { useLogger, useLoggerState, type LogEntry } from "~/composables/useLogger";
+
+const open = ref(false);
+const logs = useLoggerState();
+const { clear, exportLogs } = useLogger();
+
+function entryClass(level: LogEntry["level"]) {
+  switch (level) {
+    case "error": return "bg-red-950/50 border-red-800 text-red-100";
+    case "warn": return "bg-yellow-950/50 border-yellow-800 text-yellow-100";
+    case "info": return "bg-blue-950/50 border-blue-800 text-blue-100";
+    default: return "bg-gray-900 border-gray-800 text-gray-200";
+  }
+}
+
+function badgeColor(level: LogEntry["level"]) {
+  switch (level) {
+    case "error": return "red";
+    case "warn": return "yellow";
+    case "info": return "blue";
+    default: return "neutral";
+  }
+}
+
+function formatTime(date: Date) {
+  return date.toLocaleTimeString("de-DE", { hour12: false }) + "." + String(date.getMilliseconds()).padStart(3, "0");
+}
+
+async function copyLogs() {
+  try {
+    await navigator.clipboard.writeText(exportLogs());
+  } catch {
+    // ignore
+  }
+}
+
+async function copyDetails(details: string) {
+  try {
+    await navigator.clipboard.writeText(details);
+  } catch {
+    // ignore
+  }
+}
+
+// Keyboard shortcut: Cmd/Ctrl + Shift + L
+function onKeyDown(e: KeyboardEvent) {
+  if ((e.metaKey || e.ctrlKey) && e.shiftKey && e.key.toLowerCase() === "l") {
+    e.preventDefault();
+    open.value = !open.value;
+  }
+}
+
+onMounted(() => {
+  window.addEventListener("keydown", onKeyDown);
+});
+
+onUnmounted(() => {
+  window.removeEventListener("keydown", onKeyDown);
+});
+</script>
diff --git a/apps/rebreak-magic/app/components/IosDeviceSection.vue b/apps/rebreak-magic/app/components/IosDeviceSection.vue
index 282b069..d6b9a72 100644
--- a/apps/rebreak-magic/app/components/IosDeviceSection.vue
+++ b/apps/rebreak-magic/app/components/IosDeviceSection.vue
@@ -32,10 +32,12 @@
         :device="device"
         :iphone="iphone"
         :is-connected="device.deviceId === connectedDeviceId"
+        :is-searching="device.deviceId === searchingForDeviceId"
         :in-grace-period="inGracePeriod"
         @sync="emit('sync', $event)"
         @open="emit('open', $event)"
         @remove="emit('remove', $event)"
+        @connect="emit('connect', $event)"
       />
     </div>
   </section>
@@ -52,12 +54,14 @@ const props = defineProps<{
   loading: boolean;
   hasRefreshed: boolean;
   inGracePeriod?: boolean;
+  searchingForDeviceId?: string | null;
 }>();
 
 const emit = defineEmits<{
   (e: "sync", device: ComputedDevice): void;
   (e: "open", device: ComputedDevice): void;
   (e: "remove", device: ComputedDevice): void;
+  (e: "connect", device: ComputedDevice): void;
 }>();
 
 function matchesIphone(device: ComputedDevice, iphone: IphoneDeviceState): boolean {
diff --git a/apps/rebreak-magic/app/components/PreflightItem.vue b/apps/rebreak-magic/app/components/PreflightItem.vue
new file mode 100644
index 0000000..a29420e
--- /dev/null
+++ b/apps/rebreak-magic/app/components/PreflightItem.vue
@@ -0,0 +1,43 @@
+<template>
+  <button
+    class="w-full text-left"
+    @click="toggle"
+  >
+    <div
+      class="flex items-start gap-3 p-4 rounded-xl transition-colors"
+      :class="checked || auto ? 'bg-green-50/50 ring-1 ring-green-100' : 'bg-gray-50 hover:bg-gray-100'"
+    >
+      <UIcon
+        :name="checked || auto ? 'i-heroicons-check-circle-solid' : 'i-heroicons-circle'"
+        class="w-6 h-6 shrink-0"
+        :class="checked || auto ? 'text-green-600' : 'text-gray-400'"
+      />
+      <div>
+        <div class="font-bold text-gray-900">{{ title }}</div>
+        <div class="text-sm text-gray-500 mt-0.5">{{ detail }}</div>
+        <div v-if="auto && !checked" class="text-xs text-green-600 font-semibold mt-1">
+          Automatisch erkannt ✓
+        </div>
+      </div>
+    </div>
+  </button>
+</template>
+
+<script setup lang="ts">
+const props = defineProps<{
+  modelValue: boolean;
+  title: string;
+  detail: string;
+  auto?: boolean;
+}>();
+
+const emit = defineEmits<{
+  (e: "update:modelValue", value: boolean): void;
+}>();
+
+const checked = computed(() => props.modelValue || props.auto);
+
+function toggle() {
+  emit("update:modelValue", !props.modelValue);
+}
+</script>
diff --git a/apps/rebreak-magic/app/components/StatusBadge.vue b/apps/rebreak-magic/app/components/StatusBadge.vue
new file mode 100644
index 0000000..82719c3
--- /dev/null
+++ b/apps/rebreak-magic/app/components/StatusBadge.vue
@@ -0,0 +1,16 @@
+<template>
+  <div
+    class="flex items-center gap-1.5 px-2 py-1.5 rounded-lg"
+    :class="ok ? 'bg-green-50 text-green-700' : 'bg-gray-100 text-gray-500'"
+  >
+    <UIcon :name="ok ? 'i-heroicons-check-circle' : 'i-heroicons-x-circle'" class="w-3.5 h-3.5" />
+    <span>{{ label }}</span>
+  </div>
+</template>
+
+<script setup lang="ts">
+defineProps<{
+  ok: boolean;
+  label: string;
+}>();
+</script>
diff --git a/apps/rebreak-magic/app/components/StepButton.vue b/apps/rebreak-magic/app/components/StepButton.vue
new file mode 100644
index 0000000..523ca63
--- /dev/null
+++ b/apps/rebreak-magic/app/components/StepButton.vue
@@ -0,0 +1,46 @@
+<template>
+  <button
+    class="w-full text-left p-4 rounded-xl transition-colors flex items-center justify-between"
+    :class="buttonClass"
+    :disabled="loading"
+    @click="$emit('click')"
+  >
+    <div class="flex items-center gap-3">
+      <UIcon
+        :name="icon"
+        class="w-6 h-6"
+      />
+      <div>
+        <div class="font-bold">{{ title }}</div>
+        <div v-if="error" class="text-xs text-red-600 mt-0.5">{{ error }}</div>
+        <div v-else-if="done" class="text-xs text-green-700 mt-0.5">Abgeschlossen</div>
+      </div>
+    </div>
+    <UIcon v-if="loading" name="i-heroicons-arrow-path" class="w-5 h-5 animate-spin" />
+  </button>
+</template>
+
+<script setup lang="ts">
+const props = defineProps<{
+  title: string;
+  done: boolean;
+  loading: boolean;
+  error?: string | null;
+}>();
+
+defineEmits<{
+  (e: "click"): void;
+}>();
+
+const icon = computed(() => {
+  if (props.error) return "i-heroicons-x-circle";
+  if (props.done) return "i-heroicons-check-circle-solid";
+  return "i-heroicons-circle";
+});
+
+const buttonClass = computed(() => {
+  if (props.error) return "bg-red-50 text-red-700 ring-1 ring-red-100";
+  if (props.done) return "bg-green-50 text-green-700 ring-1 ring-green-100";
+  return "bg-white ring-1 ring-gray-200 hover:ring-[var(--rebreak-primary)]/30";
+});
+</script>
diff --git a/apps/rebreak-magic/app/composables/useLogger.ts b/apps/rebreak-magic/app/composables/useLogger.ts
new file mode 100644
index 0000000..b6a6e18
--- /dev/null
+++ b/apps/rebreak-magic/app/composables/useLogger.ts
@@ -0,0 +1,97 @@
+export interface LogEntry {
+  id: string;
+  timestamp: Date;
+  level: "debug" | "info" | "warn" | "error";
+  message: string;
+  details?: string;
+}
+
+let nextId = 1;
+
+export function useLoggerState() {
+  return useState<LogEntry[]>("dev-logs", () => []);
+}
+
+export function useLogger() {
+  const logs = useLoggerState();
+
+  function log(level: LogEntry["level"], message: string, details?: string) {
+    const entry: LogEntry = {
+      id: String(nextId++),
+      timestamp: new Date(),
+      level,
+      message,
+      details,
+    };
+    logs.value.unshift(entry);
+
+    // Keep max 200 entries
+    if (logs.value.length > 200) {
+      logs.value = logs.value.slice(0, 200);
+    }
+
+    // Also mirror to console
+    const consoleMsg = details ? `${message} | ${details}` : message;
+    if (level === "error") console.error(consoleMsg);
+    else if (level === "warn") console.warn(consoleMsg);
+    else if (level === "debug") console.debug(consoleMsg);
+    else console.log(consoleMsg);
+  }
+
+  function debug(message: string, details?: string) {
+    log("debug", message, details);
+  }
+
+  function info(message: string, details?: string) {
+    log("info", message, details);
+  }
+
+  function warn(message: string, details?: string) {
+    log("warn", message, details);
+  }
+
+  function error(message: string, details?: string) {
+    log("error", message, details);
+  }
+
+  function clear() {
+    logs.value = [];
+  }
+
+  function exportLogs(): string {
+    return logs.value
+      .slice()
+      .reverse()
+      .map(
+        (entry) =>
+          `[${entry.timestamp.toISOString()}] [${entry.level.toUpperCase()}] ${entry.message}${
+            entry.details ? `\n  Details: ${entry.details}` : ""
+          }`,
+      )
+      .join("\n---\n");
+  }
+
+  return {
+    logs,
+    debug,
+    info,
+    warn,
+    error,
+    clear,
+    exportLogs,
+  };
+}
+
+export function formatError(err: unknown): { message: string; details?: string } {
+  if (err instanceof Error) {
+    return { message: err.message, details: err.stack };
+  }
+  if (typeof err === "string") {
+    return { message: err };
+  }
+  try {
+    return { message: JSON.stringify(err) };
+  } catch {
+    return { message: "Unknown error" };
+  }
+}
diff --git a/apps/rebreak-magic/app/composables/useTauri.ts b/apps/rebreak-magic/app/composables/useTauri.ts
index 85fee67..745fc42 100644
--- a/apps/rebreak-magic/app/composables/useTauri.ts
+++ b/apps/rebreak-magic/app/composables/useTauri.ts
@@ -290,6 +290,22 @@ export function useTauri() {
     await invokeLogged("link_mdm_device", { deviceId, mdmId });
   }
 
+  async function reportDeviceProtectionState(
+    deviceId: string,
+    platform: string,
+    protectionType: string,
+    active: boolean,
+    reason?: string,
+  ): Promise<void> {
+    await invokeLogged("report_device_protection_state", {
+      deviceId,
+      platform,
+      protectionType,
+      active,
+      reason,
+    });
+  }
+
   return {
     getPlatform,
     redeemPairingCode,
@@ -328,5 +344,6 @@ export function useTauri() {
     getMdmStatus,
     getMdmStatusByUdid,
     linkMdmDevice,
+    reportDeviceProtectionState,
   };
 }
diff --git a/apps/rebreak-magic/app/pages/configure.vue b/apps/rebreak-magic/app/pages/configure.vue
new file mode 100644
index 0000000..1117757
--- /dev/null
+++ b/apps/rebreak-magic/app/pages/configure.vue
@@ -0,0 +1,199 @@
+<template>
+  <div class="min-h-screen flex flex-col items-center justify-center bg-gray-50 p-6">
+    <div class="max-w-md w-full space-y-6">
+      <div class="text-center">
+        <h1 class="text-2xl font-bold text-gray-900">Schutz aktivieren</h1>
+        <p class="text-gray-600 mt-2">
+          Wir richten die ReBreak-App ein und installieren das Lock-Profil. Scanne die QR-Codes mit deinem iPhone.
+        </p>
+      </div>
+
+      <UCard>
+        <div class="space-y-4">
+          <div class="space-y-3">
+            <StepButton
+              title="1. ReBreak-App einrichten"
+              :done="appDone"
+              :loading="appLoading"
+              :error="appError"
+              @click="setupApp"
+            />
+            <StepButton
+              title="2. Lock-Profil installieren"
+              :done="lockDone"
+              :loading="lockLoading"
+              :error="lockError"
+              @click="setupLockProfile"
+            />
+          </div>
+
+          <div v-if="qrDataUrl" class="flex justify-center">
+            <img :src="qrDataUrl" alt="QR Code" class="w-48 h-48 rounded-xl shadow-md">
+          </div>
+
+          <div v-if="lastCommand" class="text-xs bg-gray-100 p-3 rounded break-all">
+            <p class="font-semibold">Letzter Command:</p>
+            <p>{{ lastCommand }}</p>
+            <p class="font-mono mt-1">{{ lastResponse }}</p>
+          </div>
+
+          <div v-if="logs.length > 0" class="text-xs bg-gray-100 p-3 rounded overflow-auto max-h-40">
+            <pre class="whitespace-pre-wrap">{{ logs.join('\n') }}</pre>
+          </div>
+        </div>
+      </UCard>
+
+      <div class="flex justify-between">
+        <UButton to="/enroll" variant="ghost" color="neutral">
+          Zurück
+        </UButton>
+        <UButton
+          to="/done"
+          variant="solid"
+          color="primary"
+          :disabled="!allDone"
+        >
+          Weiter
+        </UButton>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, computed } from "vue";
+import QRCode from "qrcode";
+import {
+  useTauri,
+  type LocalServerInfo,
+  type MdmCommandResult,
+} from "~/composables/useTauri";
+import { useIphoneDevice } from "~/composables/useMagicState";
+import StepButton from "~/components/StepButton.vue";
+
+const {
+  mdmPing,
+  mdmInstallApp,
+  mdmSetSupervisedMode,
+  mdmTakeManagement,
+  mdmInstallLockProfile,
+  startLocalProfileServer,
+  stopLocalProfileServer,
+  getInstalledProfiles,
+} = useTauri();
+
+const iphone = useIphoneDevice();
+
+const appLoading = ref(false);
+const appDone = ref(false);
+const appError = ref<string | null>(null);
+const lockLoading = ref(false);
+const lockDone = ref(false);
+const lockError = ref<string | null>(null);
+const logs = ref<string[]>([]);
+const lastCommand = ref<string>("");
+const lastResponse = ref<string>("");
+const qrDataUrl = ref<string>("");
+
+const LOCK_PROFILE_PATH = "/Users/chahinebrini/mono/rebreak-monorepo/ops/mdm/profiles/rebreak-content-filter-sideload.mobileconfig";
+
+const allDone = computed(() => appDone.value && lockDone.value);
+
+async function setupApp() {
+  appLoading.value = true;
+  appError.value = null;
+  logs.value = [];
+  qrDataUrl.value = "";
+
+  try {
+    if (!iphone.value?.udid) {
+      throw new Error("Kein iPhone erkannt.");
+    }
+
+    logs.value.push("→ Ping NanoMDM …");
+    const version = await mdmPing();
+    logs.value.push(`✓ NanoMDM ${version.trim()}`);
+
+    const udid = iphone.value.udid;
+
+    logs.value.push("→ InstallApplication …");
+    const r1 = await mdmInstallApp(udid);
+    logCommand("InstallApplication", r1);
+
+    logs.value.push("→ Settings mdmSupervised=true …");
+    const r2 = await mdmSetSupervisedMode(udid);
+    logCommand("Settings", r2);
+
+    if (iphone.value.installedAppBundleIDs?.includes("org.rebreak.app")) {
+      logs.value.push("→ Take Management …");
+      const r3 = await mdmTakeManagement(udid);
+      logCommand("TakeManagement", r3);
+    }
+
+    appDone.value = true;
+    logs.value.push("✓ App-Setup abgeschlossen.");
+  } catch (e: any) {
+    appError.value = e?.message ?? "App-Setup fehlgeschlagen";
+    logs.value.push(`✗ ${appError.value}`);
+  } finally {
+    appLoading.value = false;
+  }
+}
+
+async function setupLockProfile() {
+  lockLoading.value = true;
+  lockError.value = null;
+  qrDataUrl.value = "";
+
+  try {
+    if (!iphone.value?.udid) {
+      throw new Error("Kein iPhone erkannt.");
+    }
+
+    // Try MDM push first
+    logs.value.push("→ Versuche Lock-Profil per MDM …");
+    const r = await mdmInstallLockProfile(iphone.value.udid, LOCK_PROFILE_PATH);
+    logCommand("InstallProfile (Lock)", r);
+
+    // Also start local QR server as fallback / confirmation
+    logs.value.push("→ Starte lokalen Server für Lock-Profil …");
+    const serverInfo: LocalServerInfo = await startLocalProfileServer(LOCK_PROFILE_PATH);
+    logs.value.push(`✓ QR: ${serverInfo.url}`);
+
+    qrDataUrl.value = await QRCode.toDataURL(serverInfo.qr_payload, {
+      width: 192,
+      margin: 2,
+    });
+
+    await refreshProfileList();
+    lockDone.value = true;
+    logs.value.push("✓ Lock-Profil-Installation initiiert.");
+  } catch (e: any) {
+    lockError.value = e?.message ?? "Lock-Profil fehlgeschlagen";
+    logs.value.push(`✗ ${lockError.value}`);
+  } finally {
+    lockLoading.value = false;
+  }
+}
+
+async function refreshProfileList() {
+  try {
+    const ids = await getInstalledProfiles();
+    if (iphone.value) {
+      iphone.value.installedProfileIDs = ids;
+    }
+  } catch (e: any) {
+    logs.value.push(`Profil-Liste nicht lesbar: ${e?.message ?? e}`);
+  }
+}
+
+function logCommand(name: string, result: MdmCommandResult) {
+  lastCommand.value = name;
+  lastResponse.value = `${result.command_uuid}: ${result.response_body.substring(0, 200)}`;
+  logs.value.push(`✓ ${name}: ${result.command_uuid}`);
+}
+
+onUnmounted(async () => {
+  await stopLocalProfileServer();
+});
+</script>
diff --git a/apps/rebreak-magic/app/pages/desktop-enroll.vue b/apps/rebreak-magic/app/pages/desktop-enroll.vue
new file mode 100644
index 0000000..e914d06
--- /dev/null
+++ b/apps/rebreak-magic/app/pages/desktop-enroll.vue
@@ -0,0 +1,108 @@
+<template>
+  <div class="min-h-screen flex flex-col items-center justify-center bg-gray-50 p-6">
+    <div class="max-w-md w-full space-y-6">
+      <div class="text-center">
+        <h1 class="text-2xl font-bold text-gray-900">Schutz aktivieren</h1>
+        <p class="text-gray-600 mt-2">
+          Aktiviere den ReBreak-DNS-Schutz auf diesem Computer.
+        </p>
+      </div>
+
+      <UCard>
+        <div class="space-y-4">
+          <div class="text-sm text-gray-600">
+            <p v-if="platform === 'MacOS'">
+              Das Schutz-Profil wird in den Systemeinstellungen geöffnet. Bestätige die Installation mit deinem Admin-Passwort.
+            </p>
+            <p v-else-if="platform === 'Windows'">
+              Der DoH-Schutz wird auf System-Ebene konfiguriert. Administratorrechte erforderlich.
+            </p>
+            <p v-else>
+              Plattform nicht erkannt.
+            </p>
+          </div>
+
+          <UButton
+            color="primary"
+            block
+            size="lg"
+            :loading="activating"
+            :disabled="!canActivate"
+            @click="activate"
+          >
+            Schutz aktivieren
+          </UButton>
+
+          <p v-if="result" class="text-sm text-center" :class="result.success ? 'text-green-600' : 'text-red-600'">
+            {{ result.success ? '✅ ' + result.message : '❌ ' + result.message }}
+          </p>
+        </div>
+      </UCard>
+
+      <div class="flex justify-between">
+        <UButton to="/status" variant="ghost" color="neutral">
+          Zurück
+        </UButton>
+        <UButton to="/status" variant="solid" color="primary">
+          Weiter
+        </UButton>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, onMounted } from "vue";
+import { useTauri, type PlatformInfo } from "~/composables/useTauri";
+import { useMagicSession } from "~/composables/useMagicState";
+
+const { getPlatform, activateProtection, downloadProfile, setDesktopProtectionStatus } = useTauri();
+const session = useMagicSession();
+
+const platform = ref<string>("");
+const activating = ref(false);
+const canActivate = ref(false);
+const result = ref<{ success: boolean; message: string } | null>(null);
+
+onMounted(async () => {
+  const info: PlatformInfo = await getPlatform();
+  platform.value = info.platform;
+  canActivate.value = info.platform === "MacOS" || info.platform === "Windows";
+});
+
+async function activate() {
+  if (!session.value?.profileUrl) {
+    result.value = { success: false, message: "Kein Profil verfügbar. Bitte zuerst koppeln." };
+    return;
+  }
+
+  activating.value = true;
+  result.value = null;
+
+  try {
+    let path: string;
+    if (platform.value === "MacOS") {
+      path = await downloadProfile(session.value.profileUrl);
+    } else {
+      path = session.value.dnsToken;
+    }
+
+    await activateProtection(path);
+    try {
+      await setDesktopProtectionStatus(true, platform.value);
+    } catch (e: any) {
+      console.warn("Could not persist desktop protection status:", e);
+    }
+    result.value = {
+      success: true,
+      message: platform.value === "MacOS"
+        ? "Systemeinstellungen geöffnet. Bitte Profil manuell installieren."
+        : "DoH-Schutz aktiviert.",
+    };
+  } catch (e: any) {
+    result.value = { success: false, message: e?.message ?? "Aktivierung fehlgeschlagen" };
+  } finally {
+    activating.value = false;
+  }
+}
+</script>
diff --git a/apps/rebreak-magic/app/pages/detect.vue b/apps/rebreak-magic/app/pages/detect.vue
new file mode 100644
index 0000000..3d55cce
--- /dev/null
+++ b/apps/rebreak-magic/app/pages/detect.vue
@@ -0,0 +1,175 @@
+<template>
+  <div class="min-h-screen flex flex-col items-center justify-center bg-gray-50 p-6">
+    <div class="max-w-md w-full space-y-6">
+      <div class="text-center">
+        <h1 class="text-2xl font-bold text-gray-900">Gerät erkennen</h1>
+        <p class="text-gray-600 mt-2">
+          Verbinde dein iPhone per USB und bestätige „Diesem Computer vertrauen".
+        </p>
+      </div>
+
+      <UCard>
+        <div v-if="info" class="space-y-2 text-sm">
+          <p><strong>Computer:</strong> {{ info.platform }}</p>
+          <p><strong>Version:</strong> {{ info.version }}</p>
+          <p>
+            <strong>iOS-Supervision:</strong>
+            {{ info.supports_ios_supervision ? "Unterstützt" : "Nicht unterstützt" }}
+          </p>
+        </div>
+        <div v-else class="text-gray-500 text-sm">
+          Lade Plattform-Informationen...
+        </div>
+      </UCard>
+
+      <UCard>
+        <div class="space-y-4">
+          <UButton
+            size="lg"
+            color="primary"
+            block
+            :loading="detecting"
+            @click="detectIphone"
+          >
+            iPhone suchen
+          </UButton>
+
+          <div v-if="iphone" class="space-y-3">
+            <div class="text-sm space-y-1">
+              <p><strong>Gerät:</strong> {{ iphone.name }}</p>
+              <p><strong>Modell:</strong> {{ displayModel(iphone.productType) }}</p>
+              <p><strong>UDID:</strong> {{ iphone.udid }}</p>
+              <p><strong>iOS:</strong> {{ iphone.productVersion }}</p>
+            </div>
+
+            <div class="grid grid-cols-2 gap-2 text-xs">
+              <div
+                class="flex items-center gap-2 p-2 rounded-lg"
+                :class="iphone.isSupervised ? 'bg-green-50 text-green-700' : 'bg-gray-100 text-gray-500'"
+              >
+                <UIcon :name="iphone.isSupervised ? 'i-heroicons-check-circle' : 'i-heroicons-x-circle'" class="w-4 h-4" />
+                <span>{{ iphone.isSupervised ? 'Supervised' : 'Nicht supervised' }}</span>
+              </div>
+              <div
+                v-if="iphone.organizationName"
+                class="flex items-center gap-2 p-2 rounded-lg bg-blue-50 text-blue-700"
+              >
+                <UIcon name="i-heroicons-building-office" class="w-4 h-4" />
+                <span>{{ iphone.organizationName }}</span>
+              </div>
+              <div
+                class="flex items-center gap-2 p-2 rounded-lg"
+                :class="hasEnrollmentProfile ? 'bg-green-50 text-green-700' : 'bg-gray-100 text-gray-500'"
+              >
+                <UIcon :name="hasEnrollmentProfile ? 'i-heroicons-check-circle' : 'i-heroicons-x-circle'" class="w-4 h-4" />
+                <span>Enrollment</span>
+              </div>
+              <div
+                class="flex items-center gap-2 p-2 rounded-lg"
+                :class="hasLockProfile ? 'bg-green-50 text-green-700' : 'bg-amber-50 text-amber-700'"
+              >
+                <UIcon :name="hasLockProfile ? 'i-heroicons-check-circle' : 'i-heroicons-exclamation-triangle'" class="w-4 h-4" />
+                <span>Lock-Profil</span>
+              </div>
+              <div
+                class="flex items-center gap-2 p-2 rounded-lg"
+                :class="hasReBreakApp ? 'bg-green-50 text-green-700' : 'bg-gray-100 text-gray-500'"
+              >
+                <UIcon :name="hasReBreakApp ? 'i-heroicons-check-circle' : 'i-heroicons-x-circle'" class="w-4 h-4" />
+                <span>ReBreak-App</span>
+              </div>
+            </div>
+          </div>
+
+          <div v-if="rawOutput" class="text-xs bg-gray-100 p-3 rounded overflow-auto max-h-48">
+            <p class="font-semibold text-gray-700 mb-1">Roh-Output:</p>
+            <pre class="whitespace-pre-wrap break-all">{{ rawOutput }}</pre>
+          </div>
+
+          <p v-if="error" class="text-sm text-red-600">
+            {{ error }}
+          </p>
+        </div>
+      </UCard>
+
+      <div class="flex justify-between">
+        <UButton to="/status" variant="ghost" color="neutral">
+          Zurück
+        </UButton>
+        <UButton
+          to="/preflight"
+          variant="solid"
+          color="primary"
+          :disabled="!iphone"
+        >
+          Weiter
+        </UButton>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, onMounted, computed } from "vue";
+import { useTauri, type PlatformInfo, type IphoneDeviceState } from "~/composables/useTauri";
+import { useIphoneDevice } from "~/composables/useMagicState";
+
+const { getPlatform, detectIphoneState } = useTauri();
+const iphone = useIphoneDevice();
+const info = ref<PlatformInfo | null>(null);
+const detecting = ref(false);
+const error = ref<string | null>(null);
+const rawOutput = ref<string | null>(null);
+
+const ENROLLMENT_PROFILE_ID = "org.rebreak.mdm.enrollment";
+const LOCK_PROFILE_ID = "org.rebreak.protection.contentfilter.sideload";
+
+const hasEnrollmentProfile = computed(() =>
+  iphone.value?.installedProfileIDs?.includes(ENROLLMENT_PROFILE_ID) ?? false,
+);
+const hasLockProfile = computed(() =>
+  iphone.value?.installedProfileIDs?.includes(LOCK_PROFILE_ID) ?? false,
+);
+const hasReBreakApp = computed(() =>
+  iphone.value?.installedAppBundleIDs?.includes("org.rebreak.app") ?? false,
+);
+
+onMounted(async () => {
+  info.value = await getPlatform();
+});
+
+async function detectIphone() {
+  detecting.value = true;
+  error.value = null;
+  rawOutput.value = null;
+
+  try {
+    const state = await detectIphoneState();
+    iphone.value = state;
+    rawOutput.value = state ? JSON.stringify(state, null, 2) : "Kein iPhone erkannt";
+    if (!state) {
+      error.value = "Kein iPhone verbunden. Bitte per USB anschließen und \"Diesem Computer vertrauen\" bestätigen.";
+    }
+  } catch (e: any) {
+    error.value = e?.message ?? "Fehler bei der Geräteerkennung";
+    rawOutput.value = e?.stack || String(e);
+  } finally {
+    detecting.value = false;
+  }
+}
+
+function displayModel(productType: string) {
+  const map: Record<string, string> = {
+    "iPhone18,4": "iPhone Air",
+    "iPhone17,1": "iPhone 16 Pro",
+    "iPhone17,2": "iPhone 16 Pro Max",
+    "iPhone17,3": "iPhone 16",
+    "iPhone17,4": "iPhone 16 Plus",
+    "iPhone16,1": "iPhone 15 Pro",
+    "iPhone16,2": "iPhone 15 Pro Max",
+    "iPhone15,4": "iPhone 15",
+    "iPhone15,5": "iPhone 15 Plus",
+  };
+  return map[productType] || productType;
+}
+</script>
diff --git a/apps/rebreak-magic/app/pages/done.vue b/apps/rebreak-magic/app/pages/done.vue
new file mode 100644
index 0000000..c81a4d1
--- /dev/null
+++ b/apps/rebreak-magic/app/pages/done.vue
@@ -0,0 +1,37 @@
+<template>
+  <div class="min-h-screen flex flex-col items-center justify-center bg-gray-50 p-6">
+    <div class="max-w-md w-full space-y-6 text-center">
+      <div class="w-20 h-20 mx-auto rounded-full bg-green-100 flex items-center justify-center">
+        <UIcon name="i-heroicons-check-badge" class="w-10 h-10 text-green-600" />
+      </div>
+
+      <div>
+        <h1 class="text-2xl font-bold text-gray-900">Schutz aktiv!</h1>
+        <p class="text-gray-600 mt-2">
+          Dein iPhone ist jetzt mit ReBreak verbunden. Der Schutz wird im Hintergrund aufrecht erhalten.
+        </p>
+      </div>
+
+      <UCard>
+        <div class="space-y-3 text-left text-sm">
+          <div class="flex items-center gap-2">
+            <UIcon name="i-heroicons-shield-check" class="w-5 h-5 text-green-600" />
+            <span>Supervision aktiv</span>
+          </div>
+          <div class="flex items-center gap-2">
+            <UIcon name="i-heroicons-device-phone-mobile" class="w-5 h-5 text-green-600" />
+            <span>ReBreak-App verwaltet</span>
+          </div>
+          <div class="flex items-center gap-2">
+            <UIcon name="i-heroicons-lock-closed" class="w-5 h-5 text-green-600" />
+            <span>Lock-Profil installiert</span>
+          </div>
+        </div>
+      </UCard>
+
+      <UButton to="/status" variant="solid" color="primary" size="lg" block>
+        Zum Dashboard
+      </UButton>
+    </div>
+  </div>
+</template>
diff --git a/apps/rebreak-magic/app/pages/enroll.vue b/apps/rebreak-magic/app/pages/enroll.vue
new file mode 100644
index 0000000..77648b4
--- /dev/null
+++ b/apps/rebreak-magic/app/pages/enroll.vue
@@ -0,0 +1,203 @@
+<template>
+  <div class="min-h-screen flex flex-col items-center justify-center bg-gray-50 p-6">
+    <div class="max-w-md w-full space-y-6">
+      <div class="text-center">
+        <h1 class="text-2xl font-bold text-gray-900">MDM-Enrollment</h1>
+        <p class="text-gray-600 mt-2">
+          Scanne den QR-Code mit deinem iPhone und installiere das Verbindungs-Profil.
+        </p>
+      </div>
+
+      <UCard>
+        <div class="space-y-4">
+          <div v-if="!profilePath" class="text-center">
+            <UButton
+              color="primary"
+              block
+              size="lg"
+              :loading="downloading"
+              @click="downloadEnrollmentProfile"
+            >
+              Enrollment-Profil laden
+            </UButton>
+          </div>
+
+          <div v-else class="space-y-4">
+            <div class="flex justify-center">
+              <img :src="qrDataUrl" alt="QR Code" class="w-48 h-48 rounded-xl shadow-md">
+            </div>
+
+            <div class="text-sm text-center text-gray-600">
+              <p>Scanne den Code mit der Kamera-App.</p>
+              <p class="text-xs mt-1 break-all">{{ serverUrl }}</p>
+            </div>
+
+            <UButton
+              color="primary"
+              variant="soft"
+              block
+              :loading="checking"
+              @click="checkEnrollment"
+            >
+              Installation prüfen
+            </UButton>
+          </div>
+
+          <div v-if="status" class="text-sm p-3 rounded-lg" :class="status.ok ? 'bg-green-50 text-green-700' : 'bg-amber-50 text-amber-700'">
+            <p><strong>Push-Status:</strong> {{ status.ok ? '✓ Gerät erreichbar' : '✗ Nicht erreichbar' }}</p>
+            <p v-if="status.result" class="text-xs break-all mt-1">{{ status.result }}</p>
+          </div>
+
+          <div v-if="iphone" class="grid grid-cols-2 gap-2 text-xs">
+            <div
+              class="flex items-center gap-2 p-2 rounded-lg"
+              :class="hasEnrollmentProfile ? 'bg-green-50 text-green-700' : 'bg-gray-100 text-gray-500'"
+            >
+              <UIcon :name="hasEnrollmentProfile ? 'i-heroicons-check-circle' : 'i-heroicons-x-circle'" class="w-4 h-4" />
+              <span>Enrollment-Profil</span>
+            </div>
+          </div>
+
+          <p v-if="error" class="text-sm text-red-600">
+            {{ error }}
+          </p>
+
+          <div v-if="logs.length > 0" class="text-xs bg-gray-100 p-3 rounded overflow-auto max-h-32">
+            <pre class="whitespace-pre-wrap">{{ logs.join('\n') }}</pre>
+          </div>
+        </div>
+      </UCard>
+
+      <div class="flex justify-between">
+        <UButton to="/supervise" variant="ghost" color="neutral">
+          Zurück
+        </UButton>
+        <UButton
+          to="/configure"
+          variant="solid"
+          color="primary"
+          :disabled="!canContinue"
+        >
+          Weiter
+        </UButton>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, computed, onMounted, onUnmounted } from "vue";
+import QRCode from "qrcode";
+import {
+  useTauri,
+  type LocalServerInfo,
+} from "~/composables/useTauri";
+import { useIphoneDevice } from "~/composables/useMagicState";
+
+const {
+  downloadAndPatchEnrollmentProfile,
+  startLocalProfileServer,
+  stopLocalProfileServer,
+  getInstalledProfiles,
+  mdmPush,
+} = useTauri();
+
+const iphone = useIphoneDevice();
+const profilePath = ref<string | null>(null);
+const serverInfo = ref<LocalServerInfo | null>(null);
+const qrDataUrl = ref<string>("");
+const downloading = ref(false);
+const checking = ref(false);
+const error = ref<string | null>(null);
+const logs = ref<string[]>([]);
+const status = ref<{ ok: boolean; result?: string } | null>(null);
+
+const ENROLLMENT_PROFILE_ID = "org.rebreak.mdm.enrollment";
+
+const hasEnrollmentProfile = computed(() =>
+  iphone.value?.installedProfileIDs?.includes(ENROLLMENT_PROFILE_ID) ?? false,
+);
+
+const serverUrl = computed(() => serverInfo.value?.url ?? "");
+
+const canContinue = computed(() =>
+  hasEnrollmentProfile.value || status.value?.ok === true,
+);
+
+onMounted(async () => {
+  if (iphone.value?.udid) {
+    await refreshProfileList();
+  }
+});
+
+onUnmounted(async () => {
+  await stopLocalProfileServer();
+});
+
+async function refreshProfileList() {
+  try {
+    const ids = await getInstalledProfiles();
+    if (iphone.value) {
+      iphone.value.installedProfileIDs = ids;
+    }
+  } catch (e: any) {
+    logs.value.push(`Profil-Liste nicht lesbar: ${e?.message ?? e}`);
+  }
+}
+
+async function downloadEnrollmentProfile() {
+  downloading.value = true;
+  error.value = null;
+  logs.value = [];
+
+  try {
+    if (!iphone.value?.udid) {
+      throw new Error("Kein iPhone erkannt. Bitte zurück zu Schritt 1.");
+    }
+
+    const url = `https://mdm.rebreak.org/enrollment/rebreak-enrollment.mobileconfig`;
+    logs.value.push(`→ Lade ${url}`);
+
+    const path = await downloadAndPatchEnrollmentProfile(url, iphone.value.udid);
+    profilePath.value = path;
+    logs.value.push(`✓ Profil gespeichert: ${path}`);
+
+    serverInfo.value = await startLocalProfileServer(path);
+    logs.value.push(`✓ Lokaler Server: ${serverInfo.value.url}`);
+
+    qrDataUrl.value = await QRCode.toDataURL(serverInfo.value.qr_payload, {
+      width: 192,
+      margin: 2,
+    });
+  } catch (e: any) {
+    error.value = e?.message ?? "Download fehlgeschlagen";
+    logs.value.push(`✗ ${error.value}`);
+  } finally {
+    downloading.value = false;
+  }
+}
+
+async function checkEnrollment() {
+  checking.value = true;
+  error.value = null;
+  status.value = null;
+
+  try {
+    await refreshProfileList();
+
+    if (!iphone.value?.udid) {
+      throw new Error("Kein iPhone erkannt.");
+    }
+
+    const push = await mdmPush(iphone.value.udid);
+    status.value = { ok: true, result: push.push_result };
+    logs.value.push(`✓ Push erreichbar: ${push.push_result}`);
+  } catch (e: any) {
+    status.value = { ok: false, result: e?.message ?? String(e) };
+    error.value = e?.message ?? "Prüfung fehlgeschlagen";
+    logs.value.push(`✗ ${error.value}`);
+  } finally {
+    checking.value = false;
+  }
+}
+</script>
diff --git a/apps/rebreak-magic/app/pages/index.vue b/apps/rebreak-magic/app/pages/index.vue
new file mode 100644
index 0000000..ea5568d
--- /dev/null
+++ b/apps/rebreak-magic/app/pages/index.vue
@@ -0,0 +1,30 @@
+<template>
+  <div class="min-h-screen flex flex-col items-center justify-center bg-gray-50 p-6">
+    <div class="max-w-md w-full text-center space-y-6">
+      <div class="w-20 h-20 mx-auto bg-[var(--rebreak-primary)] rounded-2xl flex items-center justify-center">
+        <UIcon name="i-heroicons-shield-check" class="w-10 h-10 text-white" />
+      </div>
+
+      <h1 class="text-3xl font-bold text-gray-900">
+        ReBreak Magic
+      </h1>
+      <p class="text-gray-600">
+        Öffne die ReBreak-App auf deinem iPhone, erzeuge einen Pairing-Code und gib ihn hier ein.
+      </p>
+
+      <UButton
+        to="/pair"
+        size="lg"
+        color="primary"
+        variant="solid"
+        block
+      >
+        Pairing-Code eingeben
+      </UButton>
+
+      <p class="text-xs text-gray-400">
+        ReBreak Magic für macOS & Windows
+      </p>
+    </div>
+  </div>
+</template>
diff --git a/apps/rebreak-magic/app/pages/pair.vue b/apps/rebreak-magic/app/pages/pair.vue
new file mode 100644
index 0000000..472c96b
--- /dev/null
+++ b/apps/rebreak-magic/app/pages/pair.vue
@@ -0,0 +1,131 @@
+<template>
+  <div class="min-h-screen flex flex-col items-center justify-center bg-gray-50 p-6">
+    <div class="max-w-md w-full space-y-6">
+      <div class="text-center">
+        <h1 class="text-2xl font-bold text-gray-900">Pairing-Code</h1>
+        <p class="text-gray-600 mt-2">
+          Erstelle in der ReBreak-App einen 6-stelligen Pairing-Code.
+        </p>
+      </div>
+
+      <UCard>
+        <div class="space-y-6">
+          <div class="flex justify-center">
+            <UPinInput
+              v-model="code"
+              :length="6"
+              type="numeric"
+              otp
+              autofocus
+              placeholder="0"
+              class="font-mono text-lg"
+              :disabled="loading"
+              @complete="redeem"
+            />
+          </div>
+
+          <UButton
+            color="primary"
+            block
+            :loading="loading"
+            :disabled="codeString.length < 6 || loading"
+            @click="redeem"
+          >
+            {{ loading ? "Wird geladen…" : "Koppeln" }}
+          </UButton>
+
+          <div v-if="loading && loadingMessage" class="flex items-center justify-center gap-2 text-sm text-gray-600">
+            <UIcon name="i-heroicons-arrow-path" class="w-4 h-4 animate-spin text-[var(--rebreak-primary)]" />
+            <span>{{ loadingMessage }}</span>
+          </div>
+
+          <p v-else-if="error" class="text-sm text-center text-red-600">
+            {{ error }}
+          </p>
+        </div>
+      </UCard>
+
+      <UButton to="/" variant="ghost" color="neutral" block :disabled="loading">
+        Zurück
+      </UButton>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, computed } from "vue";
+import { useTauri } from "~/composables/useTauri";
+import { useMagicSession, useMagicDevices } from "~/composables/useMagicState";
+
+const {
+  redeemPairingCode,
+  getPlatform,
+  getHardwareId,
+  registerDevice,
+  fetchMe,
+  getMagicDevices,
+  getMagicStatus,
+} = useTauri();
+
+const session = useMagicSession();
+const devices = useMagicDevices();
+
+// UPinInput can return either a string or an array of characters
+const code = ref<string | string[]>("");
+const loading = ref(false);
+const error = ref<string | null>(null);
+const loadingMessage = ref<string | null>(null);
+
+const codeString = computed(() => {
+  if (Array.isArray(code.value)) {
+    return code.value.join("");
+  }
+  return code.value;
+});
+
+async function redeem() {
+  const value = codeString.value;
+  if (value.length < 6) return;
+
+  loading.value = true;
+  loadingMessage.value = "Pairing-Code wird eingelöst…";
+  error.value = null;
+
+  try {
+    await redeemPairingCode(value);
+
+    loadingMessage.value = "Registriere dieses Gerät…";
+    const [platformInfo, hardwareId] = await Promise.all([
+      getPlatform(),
+      getHardwareId(),
+    ]);
+
+    const registered = await registerDevice(platformInfo.platform, platformInfo.version);
+
+    session.value = {
+      deviceId: registered.deviceId,
+      hardwareId,
+      dnsToken: registered.dnsToken,
+      profileUrl: registered.profileUrl,
+    };
+
+    loadingMessage.value = "Lade Profil und Geräte…";
+    const [_, deviceList] = await Promise.all([
+      fetchMe(),
+      getMagicDevices(),
+    ]);
+
+    devices.value = deviceList;
+
+    loadingMessage.value = "Prüfe Schutzstatus…";
+    await getMagicStatus(registered.dnsToken);
+
+    await navigateTo("/status");
+  } catch (e: any) {
+    error.value = e?.message ?? "Koppeln fehlgeschlagen";
+    loadingMessage.value = null;
+  } finally {
+    loading.value = false;
+  }
+}
+</script>
diff --git a/apps/rebreak-magic/app/pages/preflight.vue b/apps/rebreak-magic/app/pages/preflight.vue
new file mode 100644
index 0000000..66d9749
--- /dev/null
+++ b/apps/rebreak-magic/app/pages/preflight.vue
@@ -0,0 +1,79 @@
+<template>
+  <div class="min-h-screen flex flex-col items-center justify-center bg-gray-50 p-6">
+    <div class="max-w-md w-full space-y-6">
+      <div class="text-center">
+        <h1 class="text-2xl font-bold text-gray-900">Pre-Flight Check</h1>
+        <p class="text-gray-600 mt-2">
+          Bevor wir dein iPhone supervisieren, müssen ein paar Apple-Sicherheitschecks erledigt sein.
+        </p>
+      </div>
+
+      <UCard>
+        <div class="space-y-3">
+          <PreflightItem
+            v-model="checks.fmi"
+            title="Find My iPhone deaktiviert"
+            detail="Settings → [Apple-ID] → Wo ist? → Mein iPhone suchen → AUS. Ohne das blockiert Apple das Supervisieren."
+            :auto="iphone?.findMyEnabled === false"
+          />
+          <PreflightItem
+            v-model="checks.sdp"
+            title="Stolen Device Protection ausgeschaltet"
+            detail="Settings → Face ID & Code → Schutz für gestohlene Geräte → AUS. SDP zwingt FMI an."
+          />
+          <PreflightItem
+            v-model="checks.appleId"
+            title="Apple-ID-Passwort griffbereit"
+            detail="Apple fragt evtl. dein Apple-ID-PW während des FMI-Toggles ab."
+          />
+          <PreflightItem
+            v-model="checks.appInstalled"
+            title="ReBreak-App ist auf dem iPhone installiert"
+            detail="Über TestFlight. Erst danach kann der Wizard die App in den Managed-State versetzen."
+            :auto="hasReBreakApp"
+          />
+        </div>
+      </UCard>
+
+      <div class="flex justify-between">
+        <UButton to="/detect" variant="ghost" color="neutral">
+          Zurück
+        </UButton>
+        <UButton
+          to="/supervise"
+          variant="solid"
+          color="primary"
+          :disabled="!allChecked"
+        >
+          Supervisieren starten →
+        </UButton>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, computed } from "vue";
+import { useIphoneDevice } from "~/composables/useMagicState";
+import PreflightItem from "~/components/PreflightItem.vue";
+
+const iphone = useIphoneDevice();
+
+const checks = ref({
+  fmi: false,
+  sdp: false,
+  appleId: false,
+  appInstalled: false,
+});
+
+const hasReBreakApp = computed(() =>
+  iphone.value?.installedAppBundleIDs?.includes("org.rebreak.app") ?? false,
+);
+
+const allChecked = computed(() =>
+  (checks.value.fmi || iphone.value?.findMyEnabled === false) &&
+  checks.value.sdp &&
+  checks.value.appleId &&
+  (checks.value.appInstalled || hasReBreakApp.value),
+);
+</script>
diff --git a/apps/rebreak-magic/app/pages/sideload.vue b/apps/rebreak-magic/app/pages/sideload.vue
new file mode 100644
index 0000000..6d4018c
--- /dev/null
+++ b/apps/rebreak-magic/app/pages/sideload.vue
@@ -0,0 +1,132 @@
+<template>
+  <div class="min-h-screen flex flex-col items-center justify-center bg-gray-50 p-6">
+    <div class="max-w-md w-full space-y-6">
+      <div class="text-center">
+        <div class="w-16 h-16 mx-auto bg-[var(--rebreak-primary)] rounded-xl flex items-center justify-center mb-4">
+          <UIcon name="i-heroicons-qr-code" class="w-8 h-8 text-white" />
+        </div>
+        <h1 class="text-2xl font-bold text-gray-900">
+          Schutz-Profil installieren
+        </h1>
+        <p class="text-gray-600 mt-2">
+          Scanne den QR-Code mit deinem iPhone und installiere das Schutz-Profil.
+        </p>
+      </div>
+
+      <UCard class="text-center">
+        <div class="space-y-4">
+          <UButton
+            v-if="!serverInfo"
+            size="lg"
+            color="primary"
+            block
+            :loading="starting"
+            @click="startServer"
+          >
+            QR-Code generieren
+          </UButton>
+
+          <div v-else class="space-y-4">
+            <div class="bg-white p-4 rounded-lg inline-block">
+              <img :src="qrCodeDataUrl" alt="QR Code" class="w-48 h-48">
+            </div>
+            <p class="text-sm text-gray-500 break-all">
+              {{ serverInfo.url }}
+            </p>
+            <UButton
+              size="sm"
+              color="neutral"
+              variant="ghost"
+              @click="stopServer"
+            >
+              Server stoppen
+            </UButton>
+          </div>
+
+          <p v-if="error" class="text-sm text-red-600">
+            {{ error }}
+          </p>
+        </div>
+      </UCard>
+
+      <div class="bg-blue-50 text-blue-800 text-sm p-4 rounded-lg">
+        <p class="font-semibold mb-1">So geht's:</p>
+        <ol class="list-decimal list-inside space-y-1">
+          <li>iPhone-Kamera öffnen und QR-Code scannen</li>
+          <li>Link in Safari öffnen</li>
+          <li>„Einstellungen" → „Profil installieren" tippen</li>
+          <li>Geräte-Passcode eingeben und bestätigen</li>
+        </ol>
+      </div>
+
+      <div class="flex justify-between">
+        <UButton to="/supervise" variant="ghost" color="neutral">
+          Zurück
+        </UButton>
+        <UButton to="/enroll" variant="solid" color="primary" :disabled="!serverInfo">
+          Weiter
+        </UButton>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, watch, onUnmounted } from "vue";
+import QRCode from "qrcode";
+import { useTauri, type LocalServerInfo } from "~/composables/useTauri";
+import { useMagicSession } from "~/composables/useMagicState";
+
+const { startLocalProfileServer, stopLocalProfileServer, downloadProfile } = useTauri();
+const session = useMagicSession();
+
+const starting = ref(false);
+const serverInfo = ref<LocalServerInfo | null>(null);
+const qrCodeDataUrl = ref("");
+const error = ref<string | null>(null);
+
+watch(
+  serverInfo,
+  async (info) => {
+    if (info) {
+      qrCodeDataUrl.value = await QRCode.toDataURL(info.qr_payload, {
+        width: 192,
+        margin: 2,
+      });
+    } else {
+      qrCodeDataUrl.value = "";
+    }
+  },
+  { immediate: true },
+);
+
+onUnmounted(async () => {
+  if (serverInfo.value) {
+    await stopLocalProfileServer();
+  }
+});
+
+async function startServer() {
+  starting.value = true;
+  error.value = null;
+
+  try {
+    if (!session.value?.profileUrl) {
+      error.value = "Kein Profil verfügbar. Bitte zuerst das iPhone koppeln.";
+      return;
+    }
+
+    const profilePath = await downloadProfile(session.value.profileUrl);
+    serverInfo.value = await startLocalProfileServer(profilePath);
+  } catch (e: any) {
+    error.value = e?.message ?? "QR-Code konnte nicht erzeugt werden";
+  } finally {
+    starting.value = false;
+  }
+}
+
+async function stopServer() {
+  await stopLocalProfileServer();
+  serverInfo.value = null;
+}
+</script>
diff --git a/apps/rebreak-magic/app/pages/status.vue b/apps/rebreak-magic/app/pages/status.vue
index 597b73c..ad68f5d 100644
--- a/apps/rebreak-magic/app/pages/status.vue
+++ b/apps/rebreak-magic/app/pages/status.vue
@@ -74,9 +74,11 @@
         :loading="loading"
         :has-refreshed="hasRefreshed"
         :in-grace-period="subscriptionInGracePeriod"
+        :searching-for-device-id="searchingForDeviceId"
         @sync="onIosSync"
         @open="openDevice"
         @remove="onIosRemove"
+        @connect="startIphoneSearch"
       />
 
       <!-- Other devices list -->
@@ -134,8 +136,8 @@
 </template>
 
 <script setup lang="ts">
-import { ref, computed, onMounted } from "vue";
-import { useTauri, type UserProfile } from "~/composables/useTauri";
+import { ref, computed, onMounted, onUnmounted } from "vue";
+import { useTauri, type UserProfile, type IphoneDeviceState } from "~/composables/useTauri";
 import { useMagicSession, useMagicDevices, useIphoneDevice } from "~/composables/useMagicState";
 import { useProtectionStatus } from "~/composables/useProtectionStatus";
 import { useDeviceStatus, type ComputedDevice } from "~/composables/useDeviceStatus";
@@ -169,6 +171,8 @@ const error = ref<string | null>(null);
 const sheetOpen = ref(false);
 const selectedDevice = ref<ComputedDevice | null>(null);
 const platformInfo = ref<{ platform: string } | null>(null);
+const searchingForDeviceId = ref<string | null>(null);
+let searchInterval: ReturnType<typeof setInterval> | null = null;
 
 // TODO: populate from backend once subscription/grace-period endpoint exists.
 const subscriptionInGracePeriod = ref(false);
@@ -200,6 +204,43 @@ onMounted(async () => {
   await initCurrentDevice();
 });
 
+onUnmounted(() => {
+  stopIphoneSearch();
+});
+
+function matchesIphone(device: ComputedDevice, iphone: IphoneDeviceState): boolean {
+  if (device.mdmId && device.mdmId === iphone.udid) return true;
+  const modelMatch = (device.model ?? "").toLowerCase() === iphone.productType.toLowerCase();
+  const nameMatch = (device.name ?? "").toLowerCase() === iphone.name.toLowerCase();
+  return modelMatch || nameMatch;
+}
+
+async function startIphoneSearch(device: ComputedDevice) {
+  if (searchInterval) return;
+  searchingForDeviceId.value = device.deviceId;
+  error.value = null;
+
+  const check = async () => {
+    await protection.refreshIphone();
+    if (iphone.value && matchesIphone(device, iphone.value)) {
+      stopIphoneSearch();
+    }
+  };
+
+  await check();
+  if (!searchingForDeviceId.value) return;
+
+  searchInterval = setInterval(check, 1100);
+}
+
+function stopIphoneSearch() {
+  if (searchInterval) {
+    clearInterval(searchInterval);
+    searchInterval = null;
+  }
+  searchingForDeviceId.value = null;
+}
+
 async function initCurrentDevice() {
   try {
     const hardwareId = await getHardwareId();
diff --git a/apps/rebreak-magic/app/pages/supervise.vue b/apps/rebreak-magic/app/pages/supervise.vue
new file mode 100644
index 0000000..e04b4dc
--- /dev/null
+++ b/apps/rebreak-magic/app/pages/supervise.vue
@@ -0,0 +1,137 @@
+<template>
+  <div class="min-h-screen flex flex-col items-center justify-center bg-gray-50 p-6">
+    <div class="max-w-md w-full space-y-6">
+      <div class="text-center">
+        <div class="w-16 h-16 mx-auto bg-[var(--rebreak-primary)] rounded-xl flex items-center justify-center mb-4">
+          <UIcon name="i-heroicons-lock-closed" class="w-8 h-8 text-white" />
+        </div>
+        <h1 class="text-2xl font-bold text-gray-900">
+          iPhone supervisieren
+        </h1>
+        <p class="text-gray-600 mt-2">
+          Wir schreiben die Supervision-Metadaten auf dein iPhone und starten es neu. Apps, Daten und Logins bleiben erhalten.
+        </p>
+      </div>
+
+      <UCard>
+        <div class="space-y-4">
+          <div
+            v-if="status"
+            class="text-sm space-y-1 p-3 rounded-lg"
+            :class="status.isSupervised ? 'bg-green-50 text-green-700' : 'bg-gray-100 text-gray-600'"
+          >
+            <p><strong>Status:</strong> {{ status.isSupervised ? 'Bereits supervised' : 'Nicht supervised' }}</p>
+            <p v-if="status.organizationName"><strong>Organisation:</strong> {{ status.organizationName }}</p>
+            <p v-if="status.findMyEnabled !== undefined"><strong>Find My:</strong> {{ status.findMyEnabled ? 'An' : 'Aus' }}</p>
+          </div>
+
+          <UButton
+            size="lg"
+            color="primary"
+            block
+            :loading="supervising"
+            :disabled="skipBecauseOwned"
+            @click="runSupervise"
+          >
+            {{ skipBecauseOwned ? 'Bereits von ReBreak supervised' : 'Supervision starten' }}
+          </UButton>
+
+          <div v-if="result" class="text-sm">
+            <p v-if="result.success" class="text-green-600">
+              ✅ Supervision abgeschlossen. Das iPhone startet neu.
+            </p>
+            <div v-else class="text-red-600 space-y-1">
+              <p>❌ Supervision fehlgeschlagen</p>
+              <pre class="text-xs bg-gray-100 p-2 rounded overflow-auto">{{ result.stderr || result.stdout }}</pre>
+            </div>
+          </div>
+
+          <div v-if="logs.length > 0" class="text-xs bg-gray-100 p-3 rounded overflow-auto max-h-48">
+            <p class="font-semibold text-gray-700 mb-1">Logs:</p>
+            <pre class="whitespace-pre-wrap break-all">{{ logs.join('\n') }}</pre>
+          </div>
+        </div>
+      </UCard>
+
+      <div class="flex justify-between">
+        <UButton to="/preflight" variant="ghost" color="neutral">
+          Zurück
+        </UButton>
+        <UButton
+          to="/enroll"
+          variant="solid"
+          color="primary"
+          :disabled="!canContinue"
+        >
+          Weiter
+        </UButton>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, onMounted, computed } from "vue";
+import { useTauri, type SuperviseResult, type SuperviseStatus } from "~/composables/useTauri";
+import { useIphoneDevice } from "~/composables/useMagicState";
+
+const { getSuperviseStatus, runSuperviseMagic } = useTauri();
+const iphone = useIphoneDevice();
+const status = ref<SuperviseStatus | null>(null);
+const supervising = ref(false);
+const result = ref<SuperviseResult | null>(null);
+const logs = ref<string[]>([]);
+
+const skipBecauseOwned = computed(() =>
+  status.value?.isSupervised && status.value?.organizationName?.toLowerCase() === "rebreak",
+);
+
+const canContinue = computed(() =>
+  skipBecauseOwned.value || result.value?.success === true,
+);
+
+onMounted(async () => {
+  try {
+    status.value = await getSuperviseStatus();
+    if (skipBecauseOwned.value) {
+      logs.value.push("✓ Bereits von ReBreak supervised — überspringe.");
+      if (iphone.value) {
+        iphone.value.isSupervised = true;
+        iphone.value.organizationName = "ReBreak";
+      }
+    }
+  } catch (e: any) {
+    logs.value.push(`✗ Status konnte nicht gelesen werden: ${e?.message ?? e}`);
+  }
+});
+
+async function runSupervise() {
+  supervising.value = true;
+  result.value = null;
+  logs.value = [];
+
+  try {
+    const force = !status.value?.isSupervised;
+    const args = ["-org", "ReBreak", "-yes"];
+    if (force) args.push("-force");
+
+    logs.value.push(`→ supervise-magic supervise ${args.join(" ")}`);
+    result.value = await runSuperviseMagic("supervise", args);
+
+    if (result.value.success) {
+      logs.value.push("✓ Supervision abgeschlossen.");
+      if (iphone.value) {
+        iphone.value.isSupervised = true;
+        iphone.value.organizationName = "ReBreak";
+      }
+    } else {
+      logs.value.push(`✗ Fehler: ${result.value.stderr || result.value.stdout}`);
+    }
+  } catch (e: any) {
+    result.value = { success: false, stdout: "", stderr: e?.message ?? String(e) };
+    logs.value.push(`✗ Exception: ${e?.message ?? e}`);
+  } finally {
+    supervising.value = false;
+  }
+}
+</script>
diff --git a/apps/rebreak-magic/nuxt.config.ts b/apps/rebreak-magic/nuxt.config.ts
new file mode 100644
index 0000000..a7b3dd2
--- /dev/null
+++ b/apps/rebreak-magic/nuxt.config.ts
@@ -0,0 +1,30 @@
+// https://nuxt.com/docs/api/configuration/nuxt-config
+export default defineNuxtConfig({
+  compatibilityDate: "2026-06-14",
+  devtools: { enabled: false },
+  ssr: false,
+  srcDir: "app/",
+  nitro: {
+    preset: "static",
+  },
+  modules: ["@nuxt/ui", "@vueuse/nuxt"],
+  css: ["~/assets/css/main.css"],
+  colorMode: {
+    preference: "light",
+    fallback: "light",
+  },
+  ui: {
+    theme: {
+      colors: {
+        primary: "blue",
+      },
+    },
+  },
+  vite: {
+    // Tauri nutzt sein eigenes Dev-Server-Schema; CORS-Policy anpassen
+    server: {
+      strictPort: true,
+      port: 1420,
+    },
+  },
+});
diff --git a/apps/rebreak-magic/package.json b/apps/rebreak-magic/package.json
new file mode 100644
index 0000000..4a24874
--- /dev/null
+++ b/apps/rebreak-magic/package.json
@@ -0,0 +1,34 @@
+{
+  "name": "@rebreak/magic",
+  "type": "module",
+  "private": true,
+  "version": "0.1.0",
+  "scripts": {
+    "dev": "nuxt dev --port 1420",
+    "build": "nuxt build",
+    "generate": "nuxt generate",
+    "preview": "nuxt preview",
+    "postinstall": "nuxt prepare",
+    "tauri": "tauri",
+    "tauri:dev": "tauri dev",
+    "tauri:build": "tauri build"
+  },
+  "dependencies": {
+    "@nuxt/ui": "^4.5.1",
+    "@nuxt/icon": "^1.10.0",
+    "@vueuse/core": "^14.2.1",
+    "@vueuse/nuxt": "^14.2.1",
+    "nuxt": "4.1.3",
+    "qrcode": "^1.5.4",
+    "tailwindcss": "^4.1.18",
+    "vue": "^3.5.22",
+    "vue-router": "^4.5.1"
+  },
+  "devDependencies": {
+    "@iconify-json/heroicons": "^1.2.3",
+    "@tauri-apps/api": "^2.0.0",
+    "@tauri-apps/cli": "^2.0.0",
+    "@types/qrcode": "^1.5.5",
+    "typescript": "^5.9.3"
+  }
+}
diff --git a/apps/rebreak-magic/src-tauri/Cargo.lock b/apps/rebreak-magic/src-tauri/Cargo.lock
new file mode 100644
index 0000000..98737a3
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/Cargo.lock
@@ -0,0 +1,5680 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "adler2"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "alloc-no-stdlib"
+version = "2.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc7bb162ec39d46ab1ca8c77bf72e890535becd1751bb45f64c597edb4c8c6b3"
+
+[[package]]
+name = "alloc-stdlib"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94fb8275041c72129eb51b7d0322c29b8387a0386127718b096429201a5d6ece"
+dependencies = [
+ "alloc-no-stdlib",
+]
+
+[[package]]
+name = "android_system_properties"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.102"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
+
+[[package]]
+name = "ascii"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d92bec98840b8f03a5ff5413de5293bfcd8bf96467cf5452609f939ec6f5de16"
+
+[[package]]
+name = "atk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "241b621213072e993be4f6f3a9e4b45f65b7e6faad43001be957184b7bb1824b"
+dependencies = [
+ "atk-sys",
+ "glib",
+ "libc",
+]
+
+[[package]]
+name = "atk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5e48b684b0ca77d2bbadeef17424c2ea3c897d44d566a1617e7e8f30614d086"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "autocfg"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
+
+[[package]]
+name = "base64"
+version = "0.21.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "bit-set"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08807e080ed7f9d5433fa9b275196cfc35414f66a0c79d864dc51a0d825231a3"
+dependencies = [
+ "bit-vec",
+]
+
+[[package]]
+name = "bit-vec"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e764a1d40d510daf35e07be9eb06e75770908c27d411ee6c92109c9840eaaf7"
+
+[[package]]
+name = "bitflags"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+
+[[package]]
+name = "bitflags"
+version = "2.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4388bee8683e3d04af747c73422af53102d2bd24d9eadb6cbc100baef4b43f8"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2",
+]
+
+[[package]]
+name = "brotli"
+version = "8.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8119e4516436f5708bbc474a9d395bf12f1b5395e93a92a56e647ac3388c8610"
+dependencies = [
+ "alloc-no-stdlib",
+ "alloc-stdlib",
+ "brotli-decompressor",
+]
+
+[[package]]
+name = "brotli-decompressor"
+version = "5.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5962523e1b92ce1b5e793d9169b9943eece10d39f62550bc04bb605d75b94924"
+dependencies = [
+ "alloc-no-stdlib",
+ "alloc-stdlib",
+]
+
+[[package]]
+name = "bs58"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf88ba1141d185c399bee5288d850d63b8369520c1eafc32a0430b5b6c287bf4"
+dependencies = [
+ "tinyvec",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.20.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649"
+
+[[package]]
+name = "bytemuck"
+version = "1.25.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8efb64bd706a16a1bdde310ae86b351e4d21550d98d056f22f8a7f7a2183fec"
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "bytes"
+version = "1.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "cairo-rs"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ca26ef0159422fb77631dc9d17b102f253b876fe1586b03b803e63a309b4ee2"
+dependencies = [
+ "bitflags 2.13.0",
+ "cairo-sys-rs",
+ "glib",
+ "libc",
+ "once_cell",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "cairo-sys-rs"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "685c9fa8e590b8b3d678873528d83411db17242a73fccaed827770ea0fedda51"
+dependencies = [
+ "glib-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "camino"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e629a66d692cb9ff1a1c664e41771b3dcaf961985a9774c0eb0bd1b51cf60a48"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "cargo-platform"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e35af189006b9c0f00a064685c727031e3ed2d8020f7ba284d78cc2671bd36ea"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "cargo_metadata"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd5eb614ed4c27c5d706420e4320fbe3216ab31fa1c33cd8246ac36dae4479ba"
+dependencies = [
+ "camino",
+ "cargo-platform",
+ "semver",
+ "serde",
+ "serde_json",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "cargo_toml"
+version = "0.22.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "374b7c592d9c00c1f4972ea58390ac6b18cbb6ab79011f3bdc90a0b82ca06b77"
+dependencies = [
+ "serde",
+ "toml 0.9.12+spec-1.1.0",
+]
+
+[[package]]
+name = "cc"
+version = "1.2.64"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dad887fd958be91b5098c0248def011f4523ab786cd411be668777e55063501f"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "cesu8"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6d43a04d8753f35258c91f8ec639f792891f748a1edbd759cf1dcea3382ad83c"
+
+[[package]]
+name = "cfb"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d38f2da7a0a2c4ccf0065be06397cc26a81f4e528be095826eee9d4adbb8c60f"
+dependencies = [
+ "byteorder",
+ "fnv",
+ "uuid",
+]
+
+[[package]]
+name = "cfg-expr"
+version = "0.15.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d067ad48b8650848b989a59a86c6c36a995d02d2bf778d45c3c5d57bc2718f02"
+dependencies = [
+ "smallvec",
+ "target-lexicon",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
+
+[[package]]
+name = "chrono"
+version = "0.4.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1aa79e62e7697b8e29b513a68abacf485adcd1fe8284a4316c5ae868e6633327"
+dependencies = [
+ "iana-time-zone",
+ "js-sys",
+ "num-traits",
+ "serde",
+ "wasm-bindgen",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "chunked_transfer"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e4de3bc4ea267985becf712dc6d9eed8b04c953b3fcfb339ebc87acd9804901"
+
+[[package]]
+name = "combine"
+version = "4.6.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba5a308b75df32fe02788e748662718f03fde005016435c444eea572398219fd"
+dependencies = [
+ "bytes",
+ "memchr",
+]
+
+[[package]]
+name = "cookie"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ddef33a339a91ea89fb53151bd0a4689cfce27055c291dfa69945475d22c747"
+dependencies = [
+ "percent-encoding",
+ "time",
+ "version_check",
+]
+
+[[package]]
+name = "cookie_store"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "15b2c103cf610ec6cae3da84a766285b42fd16aad564758459e6ecf128c75206"
+dependencies = [
+ "cookie",
+ "document-features",
+ "idna",
+ "log",
+ "publicsuffix",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "time",
+ "url",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+
+[[package]]
+name = "core-graphics"
+version = "0.25.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "064badf302c3194842cf2c5d61f56cc88e54a759313879cdf03abdd27d0c3b97"
+dependencies = [
+ "bitflags 2.13.0",
+ "core-foundation 0.10.1",
+ "core-graphics-types",
+ "foreign-types",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics-types"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d44a101f213f6c4cdc1853d4b78aef6db6bdfa3468798cc1d9912f4735013eb"
+dependencies = [
+ "bitflags 2.13.0",
+ "core-foundation 0.10.1",
+ "libc",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc32fast"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "crossbeam-channel"
+version = "0.5.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82b8f8f868b36967f9606790d1903570de9ceaf870a7bf9fbbd3016d636a2cb2"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-utils"
+version = "0.8.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "cssparser"
+version = "0.36.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dae61cf9c0abb83bd659dab65b7e4e38d8236824c85f0f804f173567bda257d2"
+dependencies = [
+ "cssparser-macros",
+ "dtoa-short",
+ "itoa",
+ "phf",
+ "smallvec",
+]
+
+[[package]]
+name = "cssparser-macros"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13b588ba4ac1a99f7f2964d24b3d896ddc6bf847ee3855dbd4366f058cfcd331"
+dependencies = [
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "ctor"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "352d39c2f7bef1d6ad73db6f5160efcaed66d94ef8c6c573a8410c00bf909a98"
+dependencies = [
+ "ctor-proc-macro",
+ "dtor",
+]
+
+[[package]]
+name = "ctor-proc-macro"
+version = "0.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52560adf09603e58c9a7ee1fe1dcb95a16927b17c127f0ac02d6e768a0e25bc1"
+
+[[package]]
+name = "darling"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc7f46116c46ff9ab3eb1597a45688b6715c6e628b5c133e288e709a29bcb4ee"
+dependencies = [
+ "darling_core 0.20.11",
+ "darling_macro 0.20.11",
+]
+
+[[package]]
+name = "darling"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "25ae13da2f202d56bd7f91c25fba009e7717a1e4a1cc98a76d844b65ae912e9d"
+dependencies = [
+ "darling_core 0.23.0",
+ "darling_macro 0.23.0",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d00b9596d185e565c2207a0b01f8bd1a135483d02d9b7b0a54b11da8d53412e"
+dependencies = [
+ "fnv",
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9865a50f7c335f53564bb694ef660825eb8610e0a53d3e11bf1b0d3df31e03b0"
+dependencies = [
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "darling_macro"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc34b93ccb385b40dc71c6fceac4b2ad23662c7eeb248cf10d529b7e055b6ead"
+dependencies = [
+ "darling_core 0.20.11",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "darling_macro"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3984ec7bd6cfa798e62b4a642426a5be0e68f9401cfc2a01e3fa9ea2fcdb8d"
+dependencies = [
+ "darling_core 0.23.0",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "data-url"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be1e0bca6c3637f992fc1cc7cbc52a78c1ef6db076dbf1059c4323d6a2048376"
+
+[[package]]
+name = "dbus"
+version = "0.9.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b942602992bb7acfd1f51c49811c58a610ef9181b6e66f3e519d79b540a3bf73"
+dependencies = [
+ "libc",
+ "libdbus-sys",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "deranged"
+version = "0.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7cd812cc2bc1d69d4764bd80df88b4317eaef9e773c75226407d9bc0876b211c"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "derive_builder"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "507dfb09ea8b7fa618fcf76e953f4f5e192547945816d5358edffe39f6f94947"
+dependencies = [
+ "derive_builder_macro",
+]
+
+[[package]]
+name = "derive_builder_core"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d5bcf7b024d6835cfb3d473887cd966994907effbe9227e8c8219824d06c4e8"
+dependencies = [
+ "darling 0.20.11",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "derive_builder_macro"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab63b0e2bf4d5928aff72e83a7dace85d7bba5fe12dcc3c5a572d78caffd3f3c"
+dependencies = [
+ "derive_builder_core",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "derive_more"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134"
+dependencies = [
+ "derive_more-impl",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
+
+[[package]]
+name = "dirs"
+version = "5.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44c45a9d03d6676652bcb5e724c7e988de1acad23a711b5217ab9cbecbec2225"
+dependencies = [
+ "dirs-sys 0.4.1",
+]
+
+[[package]]
+name = "dirs"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3e8aa94d75141228480295a7d0e7feb620b1a5ad9f12bc40be62411e38cce4e"
+dependencies = [
+ "dirs-sys 0.5.0",
+]
+
+[[package]]
+name = "dirs-sys"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "520f05a5cbd335fae5a99ff7a6ab8627577660ee5cfd6a94a6a929b52ff0321c"
+dependencies = [
+ "libc",
+ "option-ext",
+ "redox_users 0.4.6",
+ "windows-sys 0.48.0",
+]
+
+[[package]]
+name = "dirs-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e01a3366d27ee9890022452ee61b2b63a67e6f13f58900b651ff5665f0bb1fab"
+dependencies = [
+ "libc",
+ "option-ext",
+ "redox_users 0.5.2",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "dispatch2"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e0e367e4e7da84520dedcac1901e4da967309406d1e51017ae1abfb97adbd38"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2",
+ "libc",
+ "objc2",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ac70aa55017e108007fbaf5aa0f54b021c98f92ff8af59d42eda9da96e3dd4f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "dlopen2"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e2c5bd4158e66d1e215c49b837e11d62f3267b30c92f1d171c4d3105e3dc4d4"
+dependencies = [
+ "dlopen2_derive",
+ "libc",
+ "once_cell",
+ "winapi",
+]
+
+[[package]]
+name = "dlopen2_derive"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fbbb781877580993a8707ec48672673ec7b81eeba04cfd2310bd28c08e47c8f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "document-features"
+version = "0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4b8a88685455ed29a21542a33abd9cb6510b6b129abadabdcef0f4c55bc8f61"
+dependencies = [
+ "litrs",
+]
+
+[[package]]
+name = "dom_query"
+version = "0.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521e380c0c8afb8d9a1e83a1822ee03556fc3e3e7dbc1fd30be14e37f9cb3f89"
+dependencies = [
+ "bit-set",
+ "cssparser",
+ "foldhash 0.2.0",
+ "html5ever",
+ "precomputed-hash",
+ "selectors",
+ "tendril",
+]
+
+[[package]]
+name = "dpi"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b14ccef22fc6f5a8f4d7d768562a182c04ce9a3b3157b91390b52ddfdf1a76"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "dtoa"
+version = "1.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c3cf4824e2d5f025c7b531afcb2325364084a16806f6d47fbc1f5fbd9960590"
+
+[[package]]
+name = "dtoa-short"
+version = "0.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd1511a7b6a56299bd043a9c167a6d2bfb37bf84a6dfceaba651168adfb43c87"
+dependencies = [
+ "dtoa",
+]
+
+[[package]]
+name = "dtor"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1057d6c64987086ff8ed0fd3fbf377a6b7d205cc7715868cd401705f715cbe4"
+dependencies = [
+ "dtor-proc-macro",
+]
+
+[[package]]
+name = "dtor-proc-macro"
+version = "0.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f678cf4a922c215c63e0de95eb1ff08a958a81d47e485cf9da1e27bf6305cfa5"
+
+[[package]]
+name = "dunce"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
+
+[[package]]
+name = "dyn-clone"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
+
+[[package]]
+name = "either"
+version = "1.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91622ff5e7162018101f2fea40d6ebf4a78bbe5a49736a2020649edf9693679e"
+
+[[package]]
+name = "embed-resource"
+version = "3.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c31a88c8d26de40ed18fe748c547845aa39de1db3afd958f8cb91579f3644bcb"
+dependencies = [
+ "cc",
+ "memchr",
+ "rustc_version",
+ "toml 1.1.2+spec-1.1.0",
+ "vswhom",
+ "winreg",
+]
+
+[[package]]
+name = "embed_plist"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ef6b89e5b37196644d8796de5268852ff179b44e96276cf4290264843743bb7"
+
+[[package]]
+name = "encoding_rs"
+version = "0.8.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75030f3c4f45dafd7586dd6780965a8c7e8e285a5ecb86713e63a79c5b2766f3"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "erased-serde"
+version = "0.4.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2add8a07dd6a8d93ff627029c51de145e12686fbc36ecb298ac22e74cf02dec"
+dependencies = [
+ "serde",
+ "serde_core",
+ "typeid",
+]
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "fastrand"
+version = "2.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f1f227452a390804cdb637b74a86990f2a7d7ba4b7d5693aac9b4dd6defd8d6"
+
+[[package]]
+name = "fdeflate"
+version = "0.3.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e6853b52649d4ac5c0bd02320cddc5ba956bdb407c4b75a2c6b75bf51500f8c"
+dependencies = [
+ "simd-adler32",
+]
+
+[[package]]
+name = "field-offset"
+version = "0.3.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38e2275cc4e4fc009b0669731a1e5ab7ebf11f469eaede2bab9309a5b4d6057f"
+dependencies = [
+ "memoffset",
+ "rustc_version",
+]
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
+
+[[package]]
+name = "flate2"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843fba2746e448b37e26a819579957415c8cef339bf08564fe8b7ddbd959573c"
+dependencies = [
+ "crc32fast",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foldhash"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
+
+[[package]]
+name = "foldhash"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
+
+[[package]]
+name = "foreign-types"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d737d9aa519fb7b749cbc3b962edcf310a8dd1f4b67c91c4f83975dbdd17d965"
+dependencies = [
+ "foreign-types-macros",
+ "foreign-types-shared",
+]
+
+[[package]]
+name = "foreign-types-macros"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a5c6c585bc94aaf2c7b51dd4c2ba22680844aba4c687be581871a6f518c5742"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "foreign-types-shared"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aa9a19cbb55df58761df49b23516a86d432839add4af60fc256da840f66ed35b"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
+
+[[package]]
+name = "futures-macro"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
+
+[[package]]
+name = "futures-task"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
+
+[[package]]
+name = "futures-util"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
+dependencies = [
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "gdk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9f245958c627ac99d8e529166f9823fb3b838d1d41fd2b297af3075093c2691"
+dependencies = [
+ "cairo-rs",
+ "gdk-pixbuf",
+ "gdk-sys",
+ "gio",
+ "glib",
+ "libc",
+ "pango",
+]
+
+[[package]]
+name = "gdk-pixbuf"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50e1f5f1b0bfb830d6ccc8066d18db35c487b1b2b1e8589b5dfe9f07e8defaec"
+dependencies = [
+ "gdk-pixbuf-sys",
+ "gio",
+ "glib",
+ "libc",
+ "once_cell",
+]
+
+[[package]]
+name = "gdk-pixbuf-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9839ea644ed9c97a34d129ad56d38a25e6756f99f3a88e15cd39c20629caf7"
+dependencies = [
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "gdk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c2d13f38594ac1e66619e188c6d5a1adb98d11b2fcf7894fc416ad76aa2f3f7"
+dependencies = [
+ "cairo-sys-rs",
+ "gdk-pixbuf-sys",
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "pango-sys",
+ "pkg-config",
+ "system-deps",
+]
+
+[[package]]
+name = "gdkwayland-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "140071d506d223f7572b9f09b5e155afbd77428cd5cc7af8f2694c41d98dfe69"
+dependencies = [
+ "gdk-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "pkg-config",
+ "system-deps",
+]
+
+[[package]]
+name = "gdkx11"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3caa00e14351bebbc8183b3c36690327eb77c49abc2268dd4bd36b856db3fbfe"
+dependencies = [
+ "gdk",
+ "gdkx11-sys",
+ "gio",
+ "glib",
+ "libc",
+ "x11",
+]
+
+[[package]]
+name = "gdkx11-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e7445fe01ac26f11601db260dd8608fe172514eb63b3b5e261ea6b0f4428d"
+dependencies = [
+ "gdk-sys",
+ "glib-sys",
+ "libc",
+ "system-deps",
+ "x11",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
+[[package]]
+name = "gethostname"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1bd49230192a3797a9a4d6abe9b3eed6f7fa4c8a8a4947977c6f80025f92cbd8"
+dependencies = [
+ "rustix",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "wasi",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "r-efi 5.3.0",
+ "wasip2",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 6.0.0",
+ "wasip2",
+ "wasip3",
+]
+
+[[package]]
+name = "getset"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6cf442baaabe4213ce7d1239afc26c039180b6456da2cededa316ae2c8a77a77"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "gio"
+version = "0.18.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4fc8f532f87b79cbc51a79748f16a6828fb784be93145a322fa14d06d354c73"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-util",
+ "gio-sys",
+ "glib",
+ "libc",
+ "once_cell",
+ "pin-project-lite",
+ "smallvec",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "gio-sys"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37566df850baf5e4cb0dfb78af2e4b9898d817ed9263d1090a2df958c64737d2"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+ "winapi",
+]
+
+[[package]]
+name = "glib"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "233daaf6e83ae6a12a52055f568f9d7cf4671dabb78ff9560ab6da230ce00ee5"
+dependencies = [
+ "bitflags 2.13.0",
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-task",
+ "futures-util",
+ "gio-sys",
+ "glib-macros",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "memchr",
+ "once_cell",
+ "smallvec",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "glib-macros"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bb0228f477c0900c880fd78c8759b95c7636dbd7842707f49e132378aa2acdc"
+dependencies = [
+ "heck 0.4.1",
+ "proc-macro-crate 2.0.2",
+ "proc-macro-error",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "glib-sys"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "063ce2eb6a8d0ea93d2bf8ba1957e78dbab6be1c2220dd3daca57d5a9d869898"
+dependencies = [
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "glob"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cc23270f6e1808e30a928bdc84dea0b9b4136a8bc82338574f23baf47bbd280"
+
+[[package]]
+name = "gobject-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0850127b514d1c4a4654ead6dedadb18198999985908e6ffe4436f53c785ce44"
+dependencies = [
+ "glib-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "gtk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd56fb197bfc42bd5d2751f4f017d44ff59fbb58140c6b49f9b3b2bdab08506a"
+dependencies = [
+ "atk",
+ "cairo-rs",
+ "field-offset",
+ "futures-channel",
+ "gdk",
+ "gdk-pixbuf",
+ "gio",
+ "glib",
+ "gtk-sys",
+ "gtk3-macros",
+ "libc",
+ "pango",
+ "pkg-config",
+]
+
+[[package]]
+name = "gtk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f29a1c21c59553eb7dd40e918be54dccd60c52b049b75119d5d96ce6b624414"
+dependencies = [
+ "atk-sys",
+ "cairo-sys-rs",
+ "gdk-pixbuf-sys",
+ "gdk-sys",
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "pango-sys",
+ "system-deps",
+]
+
+[[package]]
+name = "gtk3-macros"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ff3c5b21f14f0736fed6dcfc0bfb4225ebf5725f3c0209edeec181e4d73e9d"
+dependencies = [
+ "proc-macro-crate 1.3.1",
+ "proc-macro-error",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "h2"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "171fefbc92fe4a4de27e0698d6a5b392d6a0e333506bc49133760b3bcf948733"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http",
+ "indexmap 2.14.0",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888"
+
+[[package]]
+name = "hashbrown"
+version = "0.15.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
+dependencies = [
+ "foldhash 0.1.5",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.17.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"
+
+[[package]]
+name = "heck"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95505c38b4572b2d910cecb0281560f54b440a19336cbbcb27bf6ce6adc6f5a8"
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "html5ever"
+version = "0.38.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1054432bae2f14e0061e33d23402fbaa67a921d319d56adc6bcf887ddad1cbc2"
+dependencies = [
+ "log",
+ "markup5ever",
+]
+
+[[package]]
+name = "http"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6970f50e31d6fc17d3fa27329444bfa74e196cf62e95052a3f6fee181dba6425"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "httpdate"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
+
+[[package]]
+name = "hyper"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55281c53a1894c864990125767da440a4e630446785086f52523b20033b74498"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "httparse",
+ "itoa",
+ "pin-project-lite",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33ca68d021ef39cf6463ab54c1d0f5daf03377b70561305bb89a8f83aab66e0f"
+dependencies = [
+ "http",
+ "hyper",
+ "hyper-util",
+ "rustls",
+ "tokio",
+ "tokio-rustls",
+ "tower-service",
+ "webpki-roots",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "futures-channel",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2",
+ "system-configuration",
+ "tokio",
+ "tower-service",
+ "tracing",
+ "windows-registry",
+]
+
+[[package]]
+name = "iana-time-zone"
+version = "0.1.65"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
+dependencies = [
+ "android_system_properties",
+ "core-foundation-sys",
+ "iana-time-zone-haiku",
+ "js-sys",
+ "log",
+ "wasm-bindgen",
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "iana-time-zone-haiku"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "ico"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e795dff5605e0f04bff85ca41b51a96b83e80b281e96231bcaaf1ac35103371"
+dependencies = [
+ "byteorder",
+ "png 0.17.16",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2984d1cd16c883d7935b9e07e44071dca8d917fd52ecc02c04d5fa0b5a3f191c"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "utf8_iter",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92219b62b3e2b4d88ac5119f8904c10f8f61bf7e95b640d25ba3075e6cac2c29"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c56e5ee99d6e3d33bd91c5d85458b6005a22140021cc324cea84dd0e72cff3b4"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da3be0ae77ea334f4da67c12f149704f19f81d1adf7c51cf482943e84a2bad38"
+
+[[package]]
+name = "icu_properties"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bee3b67d0ea5c2cca5003417989af8996f8604e34fb9ddf96208a033901e70de"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e2bbb201e0c04f7b4b3e14382af113e17ba4f63e2c9d2ee626b720cbce54a14"
+
+[[package]]
+name = "icu_provider"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "139c4cf31c8b5f33d7e199446eff9c1e02decfc2f0eec2c8d71f65befa45b421"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "id-arena"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d3067d79b975e8844ca9eb072e16b31c3c1c36928edf9c6789548c524d0d954"
+
+[[package]]
+name = "ident_case"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb68373c0d6620ef8105e855e7745e18b0d00d3bdb07fb532e434244cdb9a714"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "indexmap"
+version = "1.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99"
+dependencies = [
+ "autocfg",
+ "hashbrown 0.12.3",
+ "serde",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d466e9454f08e4a911e14806c24e16fba1b4c121d1ea474396f396069cf949d9"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.17.1",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "infer"
+version = "0.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a588916bfdfd92e71cacef98a63d9b1f0d74d6599980d11894290e7ddefffcf7"
+dependencies = [
+ "cfb",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d98f6fed1fde3f8c21bc40a1abb88dd75e67924f9cffc3ef95607bad8017f8e2"
+
+[[package]]
+name = "is-docker"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "928bae27f42bc99b60d9ac7334e3a21d10ad8f1835a4e12ec3ec0464765ed1b3"
+dependencies = [
+ "once_cell",
+]
+
+[[package]]
+name = "is-wsl"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "173609498df190136aa7dea1a91db051746d339e18476eed5ca40521f02d7aa5"
+dependencies = [
+ "is-docker",
+ "once_cell",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "javascriptcore-rs"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca5671e9ffce8ffba57afc24070e906da7fc4b1ba66f2cabebf61bf2ea257fcc"
+dependencies = [
+ "bitflags 1.3.2",
+ "glib",
+ "javascriptcore-rs-sys",
+]
+
+[[package]]
+name = "javascriptcore-rs-sys"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af1be78d14ffa4b75b66df31840478fef72b51f8c2465d4ca7c194da9f7a5124"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "jni"
+version = "0.21.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a87aa2bb7d2af34197c04845522473242e1aa17c12f4935d5856491a7fb8c97"
+dependencies = [
+ "cesu8",
+ "cfg-if",
+ "combine",
+ "jni-sys 0.3.1",
+ "log",
+ "thiserror 1.0.69",
+ "walkdir",
+ "windows-sys 0.45.0",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41a652e1f9b6e0275df1f15b32661cf0d4b78d4d87ddec5e0c3c20f097433258"
+dependencies = [
+ "jni-sys 0.4.1",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6377a88cb3910bee9b0fa88d4f42e1d2da8e79915598f65fb0c7ee14c878af2"
+dependencies = [
+ "jni-sys-macros",
+]
+
+[[package]]
+name = "jni-sys-macros"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38c0b942f458fe50cdac086d2f946512305e5631e720728f2a61aabcd47a6264"
+dependencies = [
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "js-sys"
+version = "0.3.102"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03d04c30968dffe80775bd4d7fb676131cd04a1fb46d2686dbffbaec2d9dfd31"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "json-patch"
+version = "3.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "863726d7afb6bc2590eeff7135d923545e5e964f004c2ccf8716c25e70a86f08"
+dependencies = [
+ "jsonptr",
+ "serde",
+ "serde_json",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "jsonptr"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5dea2b27dd239b2556ed7a25ba842fe47fd602e7fc7433c2a8d6106d4d9edd70"
+dependencies = [
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "keyboard-types"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b750dcadc39a09dbadd74e118f6dd6598df77fa01df0cfcdc52c28dece74528a"
+dependencies = [
+ "bitflags 2.13.0",
+ "serde",
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "keyring"
+version = "3.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eebcc3aff044e5944a8fbaf69eb277d11986064cba30c468730e8b9909fb551c"
+dependencies = [
+ "byteorder",
+ "log",
+ "security-framework 2.11.1",
+ "security-framework 3.7.0",
+ "windows-sys 0.60.2",
+ "zeroize",
+]
+
+[[package]]
+name = "leb128fmt"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2"
+
+[[package]]
+name = "libappindicator"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03589b9607c868cc7ae54c0b2a22c8dc03dd41692d48f2d7df73615c6a95dc0a"
+dependencies = [
+ "glib",
+ "gtk",
+ "gtk-sys",
+ "libappindicator-sys",
+ "log",
+]
+
+[[package]]
+name = "libappindicator-sys"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e9ec52138abedcc58dc17a7c6c0c00a2bdb4f3427c7f63fa97fd0d859155caf"
+dependencies = [
+ "gtk-sys",
+ "libloading",
+ "once_cell",
+]
+
+[[package]]
+name = "libc"
+version = "0.2.186"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
+
+[[package]]
+name = "libdbus-sys"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "328c4789d42200f1eeec05bd86c9c13c7f091d2ba9a6ea35acdf51f31bc0f043"
+dependencies = [
+ "pkg-config",
+]
+
+[[package]]
+name = "libloading"
+version = "0.7.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b67380fd3b2fbe7527a606e18729d21c6f3951633d0500574c4dc22d2d638b9f"
+dependencies = [
+ "cfg-if",
+ "winapi",
+]
+
+[[package]]
+name = "libredox"
+version = "0.1.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f02ab6bace2054fb888a3c16f990117b579d14a3088e472d63c6011fa185c9d3"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
+
+[[package]]
+name = "litemap"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92daf443525c4cce67b150400bc2316076100ce0b3686209eb8cf3c31612e6f0"
+
+[[package]]
+name = "litrs"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11d3d7f243d5c5a8b9bb5d6dd2b1602c0cb0b9db1621bafc7ed66e35ff9fe092"
+
+[[package]]
+name = "local-ip-address"
+version = "0.6.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aa08fb2b1ec3ea84575e94b489d06d4ce0cbf052d12acd515838f50e3c3d63e3"
+dependencies = [
+ "libc",
+ "neli",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "953f07c43838f8e6f9758cab68bf5bed85465e7587ebe0b823f1bcd81978ad3a"
+
+[[package]]
+name = "lru-slab"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
+
+[[package]]
+name = "markup5ever"
+version = "0.38.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8983d30f2915feeaaab2d6babdd6bc7e9ed1a00b66b5e6d74df19aa9c0e91862"
+dependencies = [
+ "log",
+ "tendril",
+ "web_atoms",
+]
+
+[[package]]
+name = "memchr"
+version = "2.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88904434abc2901f197fe8cc55f0445e7ded921dba5911dad2e2b39b48e663c4"
+
+[[package]]
+name = "memoffset"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "mime"
+version = "0.3.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
+
+[[package]]
+name = "miniz_oxide"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
+dependencies = [
+ "adler2",
+ "simd-adler32",
+]
+
+[[package]]
+name = "mio"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02bd0af71c67b473010cbbc60715ee815645a4dc942899111f494b4b737d6fda"
+dependencies = [
+ "libc",
+ "wasi",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "muda"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47a2e3dff89cd322c66647942668faee0a2b1f88ea6cbb4d374b4a8d7e92528c"
+dependencies = [
+ "crossbeam-channel",
+ "dpi",
+ "gtk",
+ "keyboard-types",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "once_cell",
+ "png 0.18.1",
+ "serde",
+ "thiserror 2.0.18",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "ndk"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3f42e7bbe13d351b6bead8286a43aac9534b82bd3cc43e47037f012ebfd62d4"
+dependencies = [
+ "bitflags 2.13.0",
+ "jni-sys 0.3.1",
+ "log",
+ "ndk-sys",
+ "num_enum",
+ "raw-window-handle",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "ndk-sys"
+version = "0.6.0+11769913"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee6cda3051665f1fb8d9e08fc35c96d5a244fb1be711a03b71118828afc9a873"
+dependencies = [
+ "jni-sys 0.3.1",
+]
+
+[[package]]
+name = "neli"
+version = "0.7.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22f9786d56d972959e1408b6a93be6af13b9c1392036c5c1fafa08a1b0c6ee87"
+dependencies = [
+ "bitflags 2.13.0",
+ "byteorder",
+ "derive_builder",
+ "getset",
+ "libc",
+ "log",
+ "neli-proc-macros",
+ "parking_lot",
+]
+
+[[package]]
+name = "neli-proc-macros"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05d8d08c6e98f20a62417478ebf7be8e1425ec9acecc6f63e22da633f6b71609"
+dependencies = [
+ "either",
+ "proc-macro2",
+ "quote",
+ "serde",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "new_debug_unreachable"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "650eef8c711430f1a879fdd01d4745a7deea475becfb90269c06775983bbf086"
+
+[[package]]
+name = "nix"
+version = "0.31.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d"
+dependencies = [
+ "bitflags 2.13.0",
+ "cfg-if",
+ "cfg_aliases",
+ "libc",
+]
+
+[[package]]
+name = "num-conv"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521739c6d2bac4aa25192232afe6841231376b2b26d4d9fae5ecf8ca5772e441"
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "num_enum"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d0bca838442ec211fa11de3a8b0e0e8f3a4522575b5c4c06ed722e005036f26"
+dependencies = [
+ "num_enum_derive",
+ "rustversion",
+]
+
+[[package]]
+name = "num_enum_derive"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "680998035259dcfcafe653688bf2aa6d3e2dc05e98be6ab46afb089dc84f1df8"
+dependencies = [
+ "proc-macro-crate 3.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "objc2"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a12a8ed07aefc768292f076dc3ac8c48f3781c8f2d5851dd3d98950e8c5a89f"
+dependencies = [
+ "objc2-encode",
+ "objc2-exception-helper",
+]
+
+[[package]]
+name = "objc2-app-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d49e936b501e5c5bf01fda3a9452ff86dc3ea98ad5f283e1455153142d97518c"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-cloud-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73ad74d880bb43877038da939b7427bba67e9dd42004a18b809ba7d87cee241c"
+dependencies = [
+ "bitflags 2.13.0",
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-data"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b402a653efbb5e82ce4df10683b6b28027616a2715e90009947d50b8dd298fa"
+dependencies = [
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
+dependencies = [
+ "bitflags 2.13.0",
+ "dispatch2",
+ "objc2",
+]
+
+[[package]]
+name = "objc2-core-graphics"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e022c9d066895efa1345f8e33e584b9f958da2fd4cd116792e15e07e4720a807"
+dependencies = [
+ "bitflags 2.13.0",
+ "dispatch2",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-io-surface",
+]
+
+[[package]]
+name = "objc2-core-image"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5d563b38d2b97209f8e861173de434bd0214cf020e3423a52624cd1d989f006"
+dependencies = [
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-location"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca347214e24bc973fc025fd0d36ebb179ff30536ed1f80252706db19ee452009"
+dependencies = [
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-text"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cde0dfb48d25d2b4862161a4d5fcc0e3c24367869ad306b0c9ec0073bfed92d"
+dependencies = [
+ "bitflags 2.13.0",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+]
+
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
+[[package]]
+name = "objc2-exception-helper"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7a1c5fbb72d7735b076bb47b578523aedc40f3c439bea6dfd595c089d79d98a"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "objc2-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3e0adef53c21f888deb4fa59fc59f7eb17404926ee8a6f59f5df0fd7f9f3272"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2",
+ "libc",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-io-surface"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "180788110936d59bab6bd83b6060ffdfffb3b922ba1396b312ae795e1de9d81d"
+dependencies = [
+ "bitflags 2.13.0",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96c1358452b371bf9f104e21ec536d37a650eb10f7ee379fff67d2e08d537f1f"
+dependencies = [
+ "bitflags 2.13.0",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-ui-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d87d638e33c06f577498cbcc50491496a3ed4246998a7fbba7ccb98b1e7eab22"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2",
+ "objc2",
+ "objc2-cloud-kit",
+ "objc2-core-data",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-core-image",
+ "objc2-core-location",
+ "objc2-core-text",
+ "objc2-foundation",
+ "objc2-quartz-core",
+ "objc2-user-notifications",
+]
+
+[[package]]
+name = "objc2-user-notifications"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9df9128cbbfef73cda168416ccf7f837b62737d748333bfe9ab71c245d76613e"
+dependencies = [
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-web-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2e5aaab980c433cf470df9d7af96a7b46a9d892d521a2cbbb2f8a4c16751e7f"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "open"
+version = "5.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2fbaa89d2ddc8473c78a3adf69eea8cffa28c483b8e02a971ef31527cd0fc92c"
+dependencies = [
+ "dunce",
+ "is-wsl",
+ "libc",
+ "pathdiff",
+]
+
+[[package]]
+name = "option-ext"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
+
+[[package]]
+name = "os_info"
+version = "3.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9cf20a545b305cf1da722b236b5155c9bb35f1d5ceb28c048bd96ca842f41b5b"
+dependencies = [
+ "android_system_properties",
+ "log",
+ "nix",
+ "objc2",
+ "objc2-foundation",
+ "objc2-ui-kit",
+ "serde",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "os_pipe"
+version = "1.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d8fae84b431384b68627d0f9b3b1245fcf9f46f6c0e3dc902e9dce64edd1967"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "pango"
+version = "0.18.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ca27ec1eb0457ab26f3036ea52229edbdb74dee1edd29063f5b9b010e7ebee4"
+dependencies = [
+ "gio",
+ "glib",
+ "libc",
+ "once_cell",
+ "pango-sys",
+]
+
+[[package]]
+name = "pango-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "436737e391a843e5933d6d9aa102cb126d501e815b83601365a948a518555dc5"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall",
+ "smallvec",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "pathdiff"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df94ce210e5bc13cb6651479fa48d14f601d9858cfe0467f43ae157023b938d3"
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "phf"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1562dc717473dbaa4c1f85a36410e03c047b2e7df7f45ee938fbef64ae7fadf"
+dependencies = [
+ "phf_macros",
+ "phf_shared",
+ "serde",
+]
+
+[[package]]
+name = "phf_codegen"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49aa7f9d80421bca176ca8dbfebe668cc7a2684708594ec9f3c0db0805d5d6e1"
+dependencies = [
+ "phf_generator",
+ "phf_shared",
+]
+
+[[package]]
+name = "phf_generator"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "135ace3a761e564ec88c03a77317a7c6b80bb7f7135ef2544dbe054243b89737"
+dependencies = [
+ "fastrand",
+ "phf_shared",
+]
+
+[[package]]
+name = "phf_macros"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812f032b54b1e759ccd5f8b6677695d5268c588701effba24601f6932f8269ef"
+dependencies = [
+ "phf_generator",
+ "phf_shared",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "phf_shared"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e57fef6bc5981e38c2ce2d63bfa546861309f875b8a75f092d1d54ae2d64f266"
+dependencies = [
+ "siphasher",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+
+[[package]]
+name = "pkg-config"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19f132c84eca552bf34cab8ec81f1c1dcc229b811638f9d283dceabe58c5569e"
+
+[[package]]
+name = "plist"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "092791278e026273c1b65bbdcfbba3a300f2994c896bd01ab01da613c29c46f1"
+dependencies = [
+ "base64 0.22.1",
+ "indexmap 2.14.0",
+ "quick-xml",
+ "serde",
+ "time",
+]
+
+[[package]]
+name = "png"
+version = "0.17.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82151a2fc869e011c153adc57cf2789ccb8d9906ce52c0b39a6b5697749d7526"
+dependencies = [
+ "bitflags 1.3.2",
+ "crc32fast",
+ "fdeflate",
+ "flate2",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "png"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "60769b8b31b2a9f263dae2776c37b1b28ae246943cf719eb6946a1db05128a61"
+dependencies = [
+ "bitflags 2.13.0",
+ "crc32fast",
+ "fdeflate",
+ "flate2",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "potential_utf"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0103b1cef7ec0cf76490e969665504990193874ea05c85ff9bab8b911d0a0564"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "powerfmt"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "precomputed-hash"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "925383efa346730478fb4838dbe9137d2a47675ad789c546d150a6e1dd4ab31c"
+
+[[package]]
+name = "prettyplease"
+version = "0.2.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
+dependencies = [
+ "proc-macro2",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "1.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f4c021e1093a56626774e81216a4ce732a735e5bad4868a03f3ed65ca0c3919"
+dependencies = [
+ "once_cell",
+ "toml_edit 0.19.15",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b00f26d3400549137f92511a46ac1cd8ce37cb5598a96d382381458b992a5d24"
+dependencies = [
+ "toml_datetime 0.6.3",
+ "toml_edit 0.20.2",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "3.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e67ba7e9b2b56446f1d419b1d807906278ffa1a658a8a5d8a39dcb1f5a78614f"
+dependencies = [
+ "toml_edit 0.25.12+spec-1.1.0",
+]
+
+[[package]]
+name = "proc-macro-error"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c"
+dependencies = [
+ "proc-macro-error-attr",
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+ "version_check",
+]
+
+[[package]]
+name = "proc-macro-error-attr"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "version_check",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "psl-types"
+version = "2.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33cb294fe86a74cbcf50d4445b37da762029549ebeea341421c7c70370f86cac"
+
+[[package]]
+name = "publicsuffix"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6f42ea446cab60335f76979ec15e12619a2165b5ae2c12166bef27d283a9fadf"
+dependencies = [
+ "idna",
+ "psl-types",
+]
+
+[[package]]
+name = "quick-xml"
+version = "0.39.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdcc8dd4e2f670d309a5f0e83fe36dfdc05af317008fea29144da1a2ac858e5e"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "quinn"
+version = "0.11.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "pin-project-lite",
+ "quinn-proto",
+ "quinn-udp",
+ "rustc-hash",
+ "rustls",
+ "socket2",
+ "thiserror 2.0.18",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-proto"
+version = "0.11.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098"
+dependencies = [
+ "bytes",
+ "getrandom 0.3.4",
+ "lru-slab",
+ "rand",
+ "ring",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "slab",
+ "thiserror 2.0.18",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-udp"
+version = "0.5.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "once_cell",
+ "socket2",
+ "tracing",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "r-efi"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
+
+[[package]]
+name = "rand"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
+dependencies = [
+ "rand_chacha",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "raw-window-handle"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20675572f6f24e9e76ef639bc5552774ed45f1c30e2951e1e99c59888861c539"
+
+[[package]]
+name = "rebreak-magic"
+version = "0.1.0"
+dependencies = [
+ "alloc-stdlib",
+ "anyhow",
+ "base64 0.22.1",
+ "brotli-decompressor",
+ "chrono",
+ "dirs 5.0.1",
+ "keyring",
+ "local-ip-address",
+ "reqwest 0.12.28",
+ "serde",
+ "serde_json",
+ "tauri",
+ "tauri-build",
+ "tauri-plugin-fs",
+ "tauri-plugin-http",
+ "tauri-plugin-os",
+ "tauri-plugin-shell",
+ "tiny_http",
+ "tokio",
+ "uuid",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags 2.13.0",
+]
+
+[[package]]
+name = "redox_users"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba009ff324d1fc1b900bd1fdb31564febe58a8ccc8a6fdbb93b543d33b13ca43"
+dependencies = [
+ "getrandom 0.2.17",
+ "libredox",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "redox_users"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4e608c6638b9c18977b00b475ac1f28d14e84b27d8d42f70e0bf1e3dec127ac"
+dependencies = [
+ "getrandom 0.2.17",
+ "libredox",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "ref-cast"
+version = "1.0.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f354300ae66f76f1c85c5f84693f0ce81d747e2c3f21a45fef496d89c960bf7d"
+dependencies = [
+ "ref-cast-impl",
+]
+
+[[package]]
+name = "ref-cast-impl"
+version = "1.0.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7186006dcb21920990093f30e3dea63b7d6e977bf1256be20c3563a5db070da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "regex"
+version = "1.12.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1292b7759ae1cb9ec195452d1390a074f0cd8541ab7a5a8c31cd6db45d4a6ba"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
+
+[[package]]
+name = "reqwest"
+version = "0.12.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "cookie",
+ "cookie_store",
+ "encoding_rs",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "mime",
+ "percent-encoding",
+ "pin-project-lite",
+ "quinn",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tokio-rustls",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "webpki-roots",
+]
+
+[[package]]
+name = "reqwest"
+version = "0.13.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "219c5811de6525e5416c7d5d53bb656d3afdbc6c5af816e0802bcfa42dbdc1c3"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "serde",
+ "serde_json",
+ "sync_wrapper",
+ "tokio",
+ "tokio-util",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wasm-streams",
+ "web-sys",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94300abf3f1ae2e2b8ffb7b58043de3d399c73fa6f4b73826402a5c457614dbe"
+
+[[package]]
+name = "rustc_version"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+dependencies = [
+ "semver",
+]
+
+[[package]]
+name = "rustix"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+dependencies = [
+ "bitflags 2.13.0",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.40"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef86cd5876211988985292b91c96a8f2d298df24e75989a43a3c73f2d4d8168b"
+dependencies = [
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30a7197ae7eb376e574fe940d068c30fe0462554a3ddbe4eca7838e049c937a9"
+dependencies = [
+ "web-time",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+
+[[package]]
+name = "ryu"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"
+
+[[package]]
+name = "same-file"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "schemars"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3fbf2ae1b8bc8e02df939598064d22402220cd5bbcca1c76f7d6a310974d5615"
+dependencies = [
+ "dyn-clone",
+ "indexmap 1.9.3",
+ "schemars_derive",
+ "serde",
+ "serde_json",
+ "url",
+ "uuid",
+]
+
+[[package]]
+name = "schemars"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd191f9397d57d581cddd31014772520aa448f65ef991055d7f61582c65165f"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "schemars"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2b42f36aa1cd011945615b92222f6bf73c599a102a300334cd7f8dbeec726cc"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "schemars_derive"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32e265784ad618884abaea0600a9adf15393368d840e0222d101a072f3f7534d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "serde_derive_internals",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "security-framework"
+version = "2.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "897b2245f0b511c87893af39b033e5ca9cce68824c4d7e7630b5a1d339658d02"
+dependencies = [
+ "bitflags 2.13.0",
+ "core-foundation 0.9.4",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework"
+version = "3.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d"
+dependencies = [
+ "bitflags 2.13.0",
+ "core-foundation 0.10.1",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework-sys"
+version = "2.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2691df843ecc5d231c0b14ece2acc3efb62c0a398c7e1d875f3983ce020e3"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "selectors"
+version = "0.36.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5d9c0c92a92d33f08817311cf3f2c29a3538a8240e94a6a3c622ce652d7e00c"
+dependencies = [
+ "bitflags 2.13.0",
+ "cssparser",
+ "derive_more",
+ "log",
+ "new_debug_unreachable",
+ "phf",
+ "phf_codegen",
+ "precomputed-hash",
+ "rustc-hash",
+ "servo_arc",
+ "smallvec",
+]
+
+[[package]]
+name = "semver"
+version = "1.0.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd"
+dependencies = [
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde-untagged"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9faf48a4a2d2693be24c6289dbe26552776eb7737074e6722891fadbe6c5058"
+dependencies = [
+ "erased-serde",
+ "serde",
+ "serde_core",
+ "typeid",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "serde_derive_internals"
+version = "0.29.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18d26a20a969b9e3fdf2fc2d9f21eda6c40e2de84c9408bb5d3b05d499aae711"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.150"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8014e44b4736ed0538adeecded0fce2a272f22dc9578a7eb6b2d9993c74cfb9"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_repr"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "175ee3e80ae9982737ca543e96133087cbd9a485eecc3bc4de9c1a37b47ea59c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "0.6.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6662b5879511e06e8999a8a235d848113e942c9124f211511b16466ee2995f26"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "serde_with"
+version = "3.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a5c54c7310e7b8b9577c286d7e399ddd876c3e12b3ed917a8aabc4b96e9e8c"
+dependencies = [
+ "base64 0.22.1",
+ "bs58",
+ "chrono",
+ "hex",
+ "indexmap 1.9.3",
+ "indexmap 2.14.0",
+ "schemars 0.9.0",
+ "schemars 1.2.1",
+ "serde_core",
+ "serde_json",
+ "serde_with_macros",
+ "time",
+]
+
+[[package]]
+name = "serde_with_macros"
+version = "3.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "84d57bc0c8b9a17920c178daa6bb924850d54a9c97ab45194bb8c17ad66bb660"
+dependencies = [
+ "darling 0.23.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "serialize-to-javascript"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04f3666a07a197cdb77cdf306c32be9b7f598d7060d50cfd4d5aa04bfd92f6c5"
+dependencies = [
+ "serde",
+ "serde_json",
+ "serialize-to-javascript-impl",
+]
+
+[[package]]
+name = "serialize-to-javascript-impl"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "772ee033c0916d670af7860b6e1ef7d658a4629a6d0b4c8c3e67f09b3765b75d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "servo_arc"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "170fb83ab34de17dc69aa7c67482b22218ddb85da56546f9bd6b929e32a05930"
+dependencies = [
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "shared_child"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e362d9935bc50f019969e2f9ecd66786612daae13e8f277be7bfb66e8bed3f7"
+dependencies = [
+ "libc",
+ "sigchld",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "shlex"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
+
+[[package]]
+name = "sigchld"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47106eded3c154e70176fc83df9737335c94ce22f821c32d17ed1db1f83badb1"
+dependencies = [
+ "libc",
+ "os_pipe",
+ "signal-hook",
+]
+
+[[package]]
+name = "signal-hook"
+version = "0.3.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d881a16cf4426aa584979d30bd82cb33429027e42122b169753d6ef1085ed6e2"
+dependencies = [
+ "libc",
+ "signal-hook-registry",
+]
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "simd-adler32"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "703d5c7ef118737c72f1af64ad2f6f8c5e1921f818cdcb97b8fe6fc69bf66214"
+
+[[package]]
+name = "siphasher"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ee5873ec9cce0195efcb7a4e9507a04cd49aec9c83d0389df45b1ef7ba2e649"
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "smallvec"
+version = "1.15.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ed6a63f02c8539c91a8685a86f4099661ba3da017932f6ebbea6de3f0fa7c90"
+
+[[package]]
+name = "socket2"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52d1cfed4120b4d927bf7c0f86d2087a4a7d6027c906d9f9d525a80573b9be51"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "softbuffer"
+version = "0.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aac18da81ebbf05109ab275b157c22a653bb3c12cf884450179942f81bcbf6c3"
+dependencies = [
+ "bytemuck",
+ "js-sys",
+ "ndk",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-foundation",
+ "objc2-quartz-core",
+ "raw-window-handle",
+ "redox_syscall",
+ "tracing",
+ "wasm-bindgen",
+ "web-sys",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "soup3"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "471f924a40f31251afc77450e781cb26d55c0b650842efafc9c6cbd2f7cc4f9f"
+dependencies = [
+ "futures-channel",
+ "gio",
+ "glib",
+ "libc",
+ "soup3-sys",
+]
+
+[[package]]
+name = "soup3-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ebe8950a680a12f24f15ebe1bf70db7af98ad242d9db43596ad3108aab86c27"
+dependencies = [
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "string_cache"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a18596f8c785a729f2819c0f6a7eae6ebeebdfffbfe4214ae6b087f690e31901"
+dependencies = [
+ "new_debug_unreachable",
+ "parking_lot",
+ "phf_shared",
+ "precomputed-hash",
+]
+
+[[package]]
+name = "string_cache_codegen"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "585635e46db231059f76c5849798146164652513eb9e8ab2685939dd90f29b69"
+dependencies = [
+ "phf_generator",
+ "phf_shared",
+ "proc-macro2",
+ "quote",
+]
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "swift-rs"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4057c98e2e852d51fdcfca832aac7b571f6b351ad159f9eda5db1655f8d0c4d7"
+dependencies = [
+ "base64 0.21.7",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "syn"
+version = "1.0.109"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
+dependencies = [
+ "proc-macro2",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.117"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "sys-locale"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8eab9a99a024a169fe8a903cf9d4a3b3601109bcc13bd9e3c6fff259138626c4"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "system-configuration"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a13f3d0daba03132c0aa9767f98351b3488edc2c100cda2d2ec2b04f3d8d3c8b"
+dependencies = [
+ "bitflags 2.13.0",
+ "core-foundation 0.9.4",
+ "system-configuration-sys",
+]
+
+[[package]]
+name = "system-configuration-sys"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e1d1b10ced5ca923a1fcb8d03e96b8d3268065d724548c0211415ff6ac6bac4"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "system-deps"
+version = "6.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a3e535eb8dded36d55ec13eddacd30dec501792ff23a0b1682c38601b8cf2349"
+dependencies = [
+ "cfg-expr",
+ "heck 0.5.0",
+ "pkg-config",
+ "toml 0.8.2",
+ "version-compare",
+]
+
+[[package]]
+name = "tao"
+version = "0.35.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1c93047acf68669466a34690ac58cca7010bd1b201e1ec86f1fd0a75d3dd4a9"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2",
+ "core-foundation 0.10.1",
+ "core-graphics",
+ "crossbeam-channel",
+ "dbus",
+ "dispatch2",
+ "dlopen2",
+ "dpi",
+ "gdkwayland-sys",
+ "gdkx11-sys",
+ "gtk",
+ "jni",
+ "libc",
+ "log",
+ "ndk",
+ "ndk-sys",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-foundation",
+ "objc2-ui-kit",
+ "once_cell",
+ "parking_lot",
+ "percent-encoding",
+ "raw-window-handle",
+ "tao-macros",
+ "unicode-segmentation",
+ "url",
+ "windows",
+ "windows-core 0.61.2",
+ "windows-version",
+ "x11-dl",
+]
+
+[[package]]
+name = "tao-macros"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f4e16beb8b2ac17db28eab8bca40e62dbfbb34c0fcdc6d9826b11b7b5d047dfd"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "target-lexicon"
+version = "0.12.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
+
+[[package]]
+name = "tauri"
+version = "2.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "437404997acf375d85f1177afa7e11bb971f274ed6a7b83a2a3e339015f4cc28"
+dependencies = [
+ "anyhow",
+ "bytes",
+ "cookie",
+ "dirs 6.0.0",
+ "dunce",
+ "embed_plist",
+ "getrandom 0.3.4",
+ "glob",
+ "gtk",
+ "heck 0.5.0",
+ "http",
+ "jni",
+ "libc",
+ "log",
+ "mime",
+ "muda",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-foundation",
+ "objc2-ui-kit",
+ "objc2-web-kit",
+ "percent-encoding",
+ "plist",
+ "raw-window-handle",
+ "reqwest 0.13.4",
+ "serde",
+ "serde_json",
+ "serde_repr",
+ "serialize-to-javascript",
+ "swift-rs",
+ "tauri-build",
+ "tauri-macros",
+ "tauri-runtime",
+ "tauri-runtime-wry",
+ "tauri-utils",
+ "thiserror 2.0.18",
+ "tokio",
+ "tray-icon",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "window-vibrancy",
+ "windows",
+]
+
+[[package]]
+name = "tauri-build"
+version = "2.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4aa1f9055fc23919a54e4e125052bed16ed04aef0487086e758fe01a67b451c7"
+dependencies = [
+ "anyhow",
+ "cargo_toml",
+ "dirs 6.0.0",
+ "glob",
+ "heck 0.5.0",
+ "json-patch",
+ "schemars 0.8.22",
+ "semver",
+ "serde",
+ "serde_json",
+ "tauri-utils",
+ "tauri-winres",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-codegen"
+version = "2.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4a0319528a025a38c4078e7dae2c446f4e63620ddb0659a643ede1cb38f90e9"
+dependencies = [
+ "base64 0.22.1",
+ "brotli",
+ "ico",
+ "json-patch",
+ "plist",
+ "png 0.17.16",
+ "proc-macro2",
+ "quote",
+ "semver",
+ "serde",
+ "serde_json",
+ "sha2",
+ "syn 2.0.117",
+ "tauri-utils",
+ "thiserror 2.0.18",
+ "time",
+ "url",
+ "uuid",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-macros"
+version = "2.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae6cb4e3896c21d2f6da5b31251d2faea0153bba56ed0e970f918115dbee4924"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+ "tauri-codegen",
+ "tauri-utils",
+]
+
+[[package]]
+name = "tauri-plugin"
+version = "2.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e126abc9e84e35cdfd01596140a73a1850cdb0df0a23acf0185776c30b469a6e"
+dependencies = [
+ "anyhow",
+ "glob",
+ "plist",
+ "schemars 0.8.22",
+ "serde",
+ "serde_json",
+ "tauri-utils",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-plugin-fs"
+version = "2.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7ecc274121aca0c036a2b42d1cbe83d368d348f54e0bb8a735c2b1548e8f371"
+dependencies = [
+ "anyhow",
+ "dunce",
+ "glob",
+ "log",
+ "objc2-foundation",
+ "percent-encoding",
+ "schemars 0.8.22",
+ "serde",
+ "serde_json",
+ "serde_repr",
+ "tauri",
+ "tauri-plugin",
+ "tauri-utils",
+ "thiserror 2.0.18",
+ "toml 1.1.2+spec-1.1.0",
+ "url",
+]
+
+[[package]]
+name = "tauri-plugin-http"
+version = "2.5.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5bd512048e1985b7ec78f96d99083e2ddaf7e0d906b2b63c44ce5bb8b894067"
+dependencies = [
+ "bytes",
+ "cookie_store",
+ "data-url",
+ "http",
+ "regex",
+ "reqwest 0.12.28",
+ "schemars 0.8.22",
+ "serde",
+ "serde_json",
+ "tauri",
+ "tauri-plugin",
+ "tauri-plugin-fs",
+ "thiserror 2.0.18",
+ "tokio",
+ "url",
+ "urlpattern",
+]
+
+[[package]]
+name = "tauri-plugin-os"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8f08346c8deb39e96f86973da0e2d76cbb933d7ac9b750f6dc4daf955a6f997"
+dependencies = [
+ "gethostname",
+ "log",
+ "os_info",
+ "serde",
+ "serde_json",
+ "serialize-to-javascript",
+ "sys-locale",
+ "tauri",
+ "tauri-plugin",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "tauri-plugin-shell"
+version = "2.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8457dbf9e2bab1edd8df22bb2c20857a59a9868e79cb3eac5ed639eec4d0c73b"
+dependencies = [
+ "encoding_rs",
+ "log",
+ "open",
+ "os_pipe",
+ "regex",
+ "schemars 0.8.22",
+ "serde",
+ "serde_json",
+ "shared_child",
+ "tauri",
+ "tauri-plugin",
+ "thiserror 2.0.18",
+ "tokio",
+]
+
+[[package]]
+name = "tauri-runtime"
+version = "2.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "48222d7116c8807eaa6fe2f372e023fae125084e61e6eca6d70b7961cdf129ef"
+dependencies = [
+ "cookie",
+ "dpi",
+ "gtk",
+ "http",
+ "jni",
+ "objc2",
+ "objc2-ui-kit",
+ "objc2-web-kit",
+ "raw-window-handle",
+ "serde",
+ "serde_json",
+ "tauri-utils",
+ "thiserror 2.0.18",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "windows",
+]
+
+[[package]]
+name = "tauri-runtime-wry"
+version = "2.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b83849ee63ecb27a8e8d0fe51915ca215076914aca43f96db1179f0f415f6cd9"
+dependencies = [
+ "gtk",
+ "http",
+ "jni",
+ "log",
+ "objc2",
+ "objc2-app-kit",
+ "once_cell",
+ "percent-encoding",
+ "raw-window-handle",
+ "softbuffer",
+ "tao",
+ "tauri-runtime",
+ "tauri-utils",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "windows",
+ "wry",
+]
+
+[[package]]
+name = "tauri-utils"
+version = "2.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "092379df9a707631978e6c56b1bc2401d387f01e2d4a3c123360d167bbb9aa95"
+dependencies = [
+ "anyhow",
+ "brotli",
+ "cargo_metadata",
+ "ctor",
+ "dom_query",
+ "dunce",
+ "glob",
+ "http",
+ "infer",
+ "json-patch",
+ "log",
+ "memchr",
+ "phf",
+ "plist",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "schemars 0.8.22",
+ "semver",
+ "serde",
+ "serde-untagged",
+ "serde_json",
+ "serde_with",
+ "swift-rs",
+ "thiserror 2.0.18",
+ "toml 1.1.2+spec-1.1.0",
+ "url",
+ "urlpattern",
+ "uuid",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-winres"
+version = "0.3.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc65d45c68858bfe420dd29e834b5d15dbecf8a07a8a16cf4d532c7b1f69d4b6"
+dependencies = [
+ "dunce",
+ "embed-resource",
+ "toml 1.1.2+spec-1.1.0",
+]
+
+[[package]]
+name = "tendril"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4790fc369d5a530f4b544b094e31388b9b3a37c0f4652ade4505945f5660d24"
+dependencies = [
+ "new_debug_unreachable",
+ "utf-8",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
+dependencies = [
+ "thiserror-impl 2.0.18",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "time"
+version = "0.3.49"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "711a53c2d47bbd818258c498c8dbfe186a2526c631495cfe7e078567f86b8469"
+dependencies = [
+ "deranged",
+ "num-conv",
+ "powerfmt",
+ "serde_core",
+ "time-core",
+ "time-macros",
+]
+
+[[package]]
+name = "time-core"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e1c906769ad99c88eaa54e728060edef082f8e358ff32030cb7c7d315e81109"
+
+[[package]]
+name = "time-macros"
+version = "0.2.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "71c652a3727a9cbb9a02f707f530b618ce00d0ccd762009c8c23bd191df3c17d"
+dependencies = [
+ "num-conv",
+ "time-core",
+]
+
+[[package]]
+name = "tiny_http"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "389915df6413a2e74fb181895f933386023c71110878cd0825588928e64cdc82"
+dependencies = [
+ "ascii",
+ "chunked_transfer",
+ "httpdate",
+ "log",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8323304221c2a851516f22236c5722a72eaa19749016521d6dff0824447d96d"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e61e67053d25a4e82c844e8424039d9745781b3fc4f32b8d55ed50f5f667ef3"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.52.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fc7f01b389ac15039e4dc9531aa973a135d7a4135281b12d7c1bc79fd57fffe"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "pin-project-lite",
+ "socket2",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "385a6cb71ab9ab790c5fe8d67f1645e6c450a7ce006a33de03daa956cf70a496"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
+dependencies = [
+ "rustls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "toml"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "185d8ab0dfbb35cf1399a6344d8484209c088f75f8f68230da55d48d95d43e3d"
+dependencies = [
+ "serde",
+ "serde_spanned 0.6.9",
+ "toml_datetime 0.6.3",
+ "toml_edit 0.20.2",
+]
+
+[[package]]
+name = "toml"
+version = "0.9.12+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf92845e79fc2e2def6a5d828f0801e29a2f8acc037becc5ab08595c7d5e9863"
+dependencies = [
+ "indexmap 2.14.0",
+ "serde_core",
+ "serde_spanned 1.1.1",
+ "toml_datetime 0.7.5+spec-1.1.0",
+ "toml_parser",
+ "toml_writer",
+ "winnow 0.7.15",
+]
+
+[[package]]
+name = "toml"
+version = "1.1.2+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "81f3d15e84cbcd896376e6730314d59fb5a87f31e4b038454184435cd57defee"
+dependencies = [
+ "indexmap 2.14.0",
+ "serde_core",
+ "serde_spanned 1.1.1",
+ "toml_datetime 1.1.1+spec-1.1.0",
+ "toml_parser",
+ "toml_writer",
+ "winnow 1.0.3",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7cda73e2f1397b1262d6dfdcef8aafae14d1de7748d66822d3bfeeb6d03e5e4b"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.7.5+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "1.1.1+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3165f65f62e28e0115a00b2ebdd37eb6f3b641855f9d636d3cd4103767159ad7"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.19.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b5bb770da30e5cbfde35a2d7b9b8a2c4b8ef89548a7a6aeab5c9a576e3e7421"
+dependencies = [
+ "indexmap 2.14.0",
+ "toml_datetime 0.6.3",
+ "winnow 0.5.40",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "396e4d48bbb2b7554c944bde63101b5ae446cff6ec4a24227428f15eb72ef338"
+dependencies = [
+ "indexmap 2.14.0",
+ "serde",
+ "serde_spanned 0.6.9",
+ "toml_datetime 0.6.3",
+ "winnow 0.5.40",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.25.12+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2153edc6955a6c354fad8f5efd38b6a8769bdccf9fe50f8e1329f81b0baa5d7"
+dependencies = [
+ "indexmap 2.14.0",
+ "toml_datetime 1.1.1+spec-1.1.0",
+ "toml_parser",
+ "winnow 1.0.3",
+]
+
+[[package]]
+name = "toml_parser"
+version = "1.1.2+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2abe9b86193656635d2411dc43050282ca48aa31c2451210f4202550afb7526"
+dependencies = [
+ "winnow 1.0.3",
+]
+
+[[package]]
+name = "toml_writer"
+version = "1.1.1+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "756daf9b1013ebe47a8776667b466417e2d4c5679d441c26230efd9ef78692db"
+
+[[package]]
+name = "tower"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cfcf7e2740e6fc6d4d688b4ef00650406bb94adf4731e43c096c3a19fe40840"
+dependencies = [
+ "bitflags 2.13.0",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "url",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "pin-project-lite",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+]
+
+[[package]]
+name = "tray-icon"
+version = "0.23.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "15edbb0d80583e85ee8df283410038e17314df5cba30da2087a54a85216c0773"
+dependencies = [
+ "crossbeam-channel",
+ "dirs 6.0.0",
+ "libappindicator",
+ "muda",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-foundation",
+ "once_cell",
+ "png 0.18.1",
+ "serde",
+ "thiserror 2.0.18",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "typeid"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc7d623258602320d5c55d1bc22793b57daff0ec7efc270ea7d55ce1d5f5471c"
+
+[[package]]
+name = "typenum"
+version = "1.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
+
+[[package]]
+name = "unic-char-property"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8c57a407d9b6fa02b4795eb81c5b6652060a15a7903ea981f3d723e6c0be221"
+dependencies = [
+ "unic-char-range",
+]
+
+[[package]]
+name = "unic-char-range"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0398022d5f700414f6b899e10b8348231abf9173fa93144cbc1a43b9793c1fbc"
+
+[[package]]
+name = "unic-common"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "80d7ff825a6a654ee85a63e80f92f054f904f21e7d12da4e22f9834a4aaa35bc"
+
+[[package]]
+name = "unic-ucd-ident"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e230a37c0381caa9219d67cf063aa3a375ffed5bf541a452db16e744bdab6987"
+dependencies = [
+ "unic-char-property",
+ "unic-char-range",
+ "unic-ucd-version",
+]
+
+[[package]]
+name = "unic-ucd-version"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96bd2f2237fe450fcd0a1d2f5f4e91711124f7857ba2e964247776ebeeb7b0c4"
+dependencies = [
+ "unic-common",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.13.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6f5d3c3b1bf09027a88a6bc961fc00497d651009560b5463668dc81b0fa87a8"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+ "serde_derive",
+]
+
+[[package]]
+name = "urlpattern"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70acd30e3aa1450bc2eece896ce2ad0d178e9c079493819301573dae3c37ba6d"
+dependencies = [
+ "regex",
+ "serde",
+ "unic-ucd-ident",
+ "url",
+]
+
+[[package]]
+name = "utf-8"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9"
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "uuid"
+version = "1.23.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "144d6b123cef80b301b8f72a9e2ca4370ddec21950d0a103dd22c437006d2db7"
+dependencies = [
+ "getrandom 0.4.2",
+ "js-sys",
+ "serde_core",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "version-compare"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03c2856837ef78f57382f06b2b8563a2f512f7185d732608fd9176cb3b8edf0e"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "vswhom"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be979b7f07507105799e854203b470ff7c78a1639e330a58f183b5fea574608b"
+dependencies = [
+ "libc",
+ "vswhom-sys",
+]
+
+[[package]]
+name = "vswhom-sys"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb067e4cbd1ff067d1df46c9194b5de0e98efd2810bbc95c5d5e5f25a3231150"
+dependencies = [
+ "cc",
+ "libc",
+]
+
+[[package]]
+name = "walkdir"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
+dependencies = [
+ "same-file",
+ "winapi-util",
+]
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.4+wasi-0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487"
+dependencies = [
+ "wit-bindgen 0.57.1",
+]
+
+[[package]]
+name = "wasip3"
+version = "0.4.0+wasi-0.3.0-rc-2026-01-06"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5428f8bf88ea5ddc08faddef2ac4a67e390b88186c703ce6dbd955e1c145aca5"
+dependencies = [
+ "wit-bindgen 0.51.0",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.125"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ddb3f79143bced6de84270411622a2699cee572fc0875aeaf1e7867cf9fca1a"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.75"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "503b14d284f2c8dac03b819967e155ea753f573586193b2b2c95990cb5d69280"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.125"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e21a184b13fb19e157296e2c46056aec9092264fab83e4ba59e68c61b323c3d"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.125"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fecefd9c35bd935a20fc3fc344b5f29138961e4f47fb03297d88f2587afb5ebd"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.125"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23939e44bb9a5d7576fa2b563dc2e136628f1224e88a8deed09e04858b77871f"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-encoder"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"
+dependencies = [
+ "leb128fmt",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasm-metadata"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"
+dependencies = [
+ "anyhow",
+ "indexmap 2.14.0",
+ "wasm-encoder",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasm-streams"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d1ec4f6517c9e11ae630e200b2b65d193279042e28edd4a2cda233e46670bbb"
+dependencies = [
+ "futures-util",
+ "js-sys",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "wasmparser"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe"
+dependencies = [
+ "bitflags 2.13.0",
+ "hashbrown 0.15.5",
+ "indexmap 2.14.0",
+ "semver",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.102"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6430a72df5eb332242960fe84b3002a241163998241eb596d4f739b9757061d"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web_atoms"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7cff6eef815df1834fd250e3a2ff436044d82a9f1bc1980ca1dbdf07effc538"
+dependencies = [
+ "phf",
+ "phf_codegen",
+ "string_cache",
+ "string_cache_codegen",
+]
+
+[[package]]
+name = "webkit2gtk"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1027150013530fb2eaf806408df88461ae4815a45c541c8975e61d6f2fc4793"
+dependencies = [
+ "bitflags 1.3.2",
+ "cairo-rs",
+ "gdk",
+ "gdk-sys",
+ "gio",
+ "gio-sys",
+ "glib",
+ "glib-sys",
+ "gobject-sys",
+ "gtk",
+ "gtk-sys",
+ "javascriptcore-rs",
+ "libc",
+ "once_cell",
+ "soup3",
+ "webkit2gtk-sys",
+]
+
+[[package]]
+name = "webkit2gtk-sys"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "916a5f65c2ef0dfe12fff695960a2ec3d4565359fdbb2e9943c974e06c734ea5"
+dependencies = [
+ "bitflags 1.3.2",
+ "cairo-sys-rs",
+ "gdk-sys",
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "gtk-sys",
+ "javascriptcore-rs-sys",
+ "libc",
+ "pkg-config",
+ "soup3-sys",
+ "system-deps",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52f5ee44c96cf55f1b349600768e3ece3a8f26010c05265ab73f945bb1a2eb9d"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "webview2-com"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7130243a7a5b33c54a444e54842e6a9e133de08b5ad7b5861cd8ed9a6a5bc96a"
+dependencies = [
+ "webview2-com-macros",
+ "webview2-com-sys",
+ "windows",
+ "windows-core 0.61.2",
+ "windows-implement",
+ "windows-interface",
+]
+
+[[package]]
+name = "webview2-com-macros"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67a921c1b6914c367b2b823cd4cde6f96beec77d30a939c8199bb377cf9b9b54"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "webview2-com-sys"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "381336cfffd772377d291702245447a5251a2ffa5bad679c99e61bc48bacbf9c"
+dependencies = [
+ "thiserror 2.0.18",
+ "windows",
+ "windows-core 0.61.2",
+]
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-util"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "window-vibrancy"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9bec5a31f3f9362f2258fd0e9c9dd61a9ca432e7306cc78c444258f0dce9a9c"
+dependencies = [
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "raw-window-handle",
+ "windows-sys 0.59.0",
+ "windows-version",
+]
+
+[[package]]
+name = "windows"
+version = "0.61.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9babd3a767a4c1aef6900409f85f5d53ce2544ccdfaa86dad48c91782c6d6893"
+dependencies = [
+ "windows-collections",
+ "windows-core 0.61.2",
+ "windows-future",
+ "windows-link 0.1.3",
+ "windows-numerics",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3beeceb5e5cfd9eb1d76b381630e82c4241ccd0d27f1a39ed41b2760b255c5e8"
+dependencies = [
+ "windows-core 0.61.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0fdd3ddb90610c7638aa2b3a3ab2904fb9e5cdbecc643ddb3647212781c4ae3"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link 0.1.3",
+ "windows-result 0.3.4",
+ "windows-strings 0.4.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link 0.2.1",
+ "windows-result 0.4.1",
+ "windows-strings 0.5.1",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc6a41e98427b19fe4b73c550f060b59fa592d7d686537eebf9385621bfbad8e"
+dependencies = [
+ "windows-core 0.61.2",
+ "windows-link 0.1.3",
+ "windows-threading",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.59.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e6ad25900d524eaabdbbb96d20b4311e1e7ae1699af4fb28c17ae66c80d798a"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-numerics"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9150af68066c4c5c07ddc0ce30421554771e528bde427614c61038bc2c92c2b1"
+dependencies = [
+ "windows-core 0.61.2",
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-registry"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02752bf7fbdcce7f2a27a742f798510f3e5ad88dbe84871e5168e2120c3d5720"
+dependencies = [
+ "windows-link 0.2.1",
+ "windows-result 0.4.1",
+ "windows-strings 0.5.1",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56f42bd332cc6c8eac5af113fc0c1fd6a8fd2aa08a0119358686e5160d0586c6"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56e6c93f3a0c3b36176cb1327a4958a0353d5d166c2a35cb268ace15e91d3b57"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.45.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75283be5efb2831d37ea142365f009c02ec203cd29a3ebecbc093d52315b66d0"
+dependencies = [
+ "windows-targets 0.42.2",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.48.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9"
+dependencies = [
+ "windows-targets 0.48.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.59.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+dependencies = [
+ "windows-targets 0.53.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e5180c00cd44c9b1c88adb3693291f1cd93605ded80c250a75d472756b4d071"
+dependencies = [
+ "windows_aarch64_gnullvm 0.42.2",
+ "windows_aarch64_msvc 0.42.2",
+ "windows_i686_gnu 0.42.2",
+ "windows_i686_msvc 0.42.2",
+ "windows_x86_64_gnu 0.42.2",
+ "windows_x86_64_gnullvm 0.42.2",
+ "windows_x86_64_msvc 0.42.2",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a2fa6e2155d7247be68c096456083145c183cbbbc2764150dda45a87197940c"
+dependencies = [
+ "windows_aarch64_gnullvm 0.48.5",
+ "windows_aarch64_msvc 0.48.5",
+ "windows_i686_gnu 0.48.5",
+ "windows_i686_msvc 0.48.5",
+ "windows_x86_64_gnu 0.48.5",
+ "windows_x86_64_gnullvm 0.48.5",
+ "windows_x86_64_msvc 0.48.5",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm 0.52.6",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.53.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
+dependencies = [
+ "windows-link 0.2.1",
+ "windows_aarch64_gnullvm 0.53.1",
+ "windows_aarch64_msvc 0.53.1",
+ "windows_i686_gnu 0.53.1",
+ "windows_i686_gnullvm 0.53.1",
+ "windows_i686_msvc 0.53.1",
+ "windows_x86_64_gnu 0.53.1",
+ "windows_x86_64_gnullvm 0.53.1",
+ "windows_x86_64_msvc 0.53.1",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b66463ad2e0ea3bbf808b7f1d371311c80e115c0b71d60efc142cafbcfb057a6"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-version"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4060a1da109b9d0326b7262c8e12c84df67cc0dbc9e33cf49e01ccc2eb63631"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "597a5118570b68bc08d8d59125332c54f1ba9d9adeedeef5b99b02ba2b0698f8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b38e32f0abccf9987a4e3079dfb67dcd799fb61361e53e2882c3cbaf0d905d8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e08e8864a60f06ef0d0ff4ba04124db8b0fb3be5776a5cd47641e942e58c4d43"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc35310971f3b2dbbf3f0690a219f40e2d9afcf64f9ab7cc1be722937c26b4bc"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c61d927d8da41da96a81f029489353e68739737d3beca43145c8afec9a31a84f"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a75915e7def60c94dcef72200b9a8e58e5091744960da64ec734a6c6e9b3743e"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44d840b6ec649f480a41c8d80f9c65108b92d89345dd94027bfe06ac444d1060"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f55c233f70c4b27f66c523580f78f1004e8b5a8b659e05a4eb49d4166cca406"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8de912b8b8feb55c064867cf047dda097f92d51efad5b491dfb98f6bbb70cb36"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53d40abd2583d23e4718fddf1ebec84dbff8381c07cae67ff7768bbf19c6718e"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26d41b46a36d453748aedef1486d5c7a85db22e56aff34643984ea85514e94a3"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b7b52767868a23d5bab768e390dc5f5c55825b6d30b86c844ff2dc7414044cc"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9aec5da331524158c6d1a4ac0ab1541149c0b9505fde06423b02f5ef0106b9f0"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed94fce61571a4006852b7389a063ab983c02eb1bb37b47f8272ce92d06d9538"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
+
+[[package]]
+name = "winnow"
+version = "0.5.40"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f593a95398737aeed53e489c785df13f3618e41dbcd6718c6addbf1395aa6876"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winnow"
+version = "0.7.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
+
+[[package]]
+name = "winnow"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0592e1c9d151f854e6fd382574c3a0855250e1d9b2f99d9281c6e6391af352f1"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winreg"
+version = "0.55.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb5a765337c50e9ec252c2069be9bf91c7df47afb103b642ba3a53bf8101be97"
+dependencies = [
+ "cfg-if",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "wit-bindgen"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
+dependencies = [
+ "wit-bindgen-rust-macro",
+]
+
+[[package]]
+name = "wit-bindgen"
+version = "0.57.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
+
+[[package]]
+name = "wit-bindgen-core"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc"
+dependencies = [
+ "anyhow",
+ "heck 0.5.0",
+ "wit-parser",
+]
+
+[[package]]
+name = "wit-bindgen-rust"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c566e0f4b284dd6561c786d9cb0142da491f46a9fbed79ea69cdad5db17f21"
+dependencies = [
+ "anyhow",
+ "heck 0.5.0",
+ "indexmap 2.14.0",
+ "prettyplease",
+ "syn 2.0.117",
+ "wasm-metadata",
+ "wit-bindgen-core",
+ "wit-component",
+]
+
+[[package]]
+name = "wit-bindgen-rust-macro"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c0f9bfd77e6a48eccf51359e3ae77140a7f50b1e2ebfe62422d8afdaffab17a"
+dependencies = [
+ "anyhow",
+ "prettyplease",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+ "wit-bindgen-core",
+ "wit-bindgen-rust",
+]
+
+[[package]]
+name = "wit-component"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2"
+dependencies = [
+ "anyhow",
+ "bitflags 2.13.0",
+ "indexmap 2.14.0",
+ "log",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "wasm-encoder",
+ "wasm-metadata",
+ "wasmparser",
+ "wit-parser",
+]
+
+[[package]]
+name = "wit-parser"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ecc8ac4bc1dc3381b7f59c34f00b67e18f910c2c0f50015669dde7def656a736"
+dependencies = [
+ "anyhow",
+ "id-arena",
+ "indexmap 2.14.0",
+ "log",
+ "semver",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "unicode-xid",
+ "wasmparser",
+]
+
+[[package]]
+name = "writeable"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ffae5123b2d3fc086436f8834ae3ab053a283cfac8fe0a0b8eaae044768a4c4"
+
+[[package]]
+name = "wry"
+version = "0.55.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "186f9871daa55fd9c016578b810d149de58367113db7fb72b462d2323ce19514"
+dependencies = [
+ "base64 0.22.1",
+ "block2",
+ "cookie",
+ "crossbeam-channel",
+ "dirs 6.0.0",
+ "dom_query",
+ "dpi",
+ "dunce",
+ "gdkx11",
+ "gtk",
+ "http",
+ "javascriptcore-rs",
+ "jni",
+ "libc",
+ "ndk",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "objc2-ui-kit",
+ "objc2-web-kit",
+ "once_cell",
+ "percent-encoding",
+ "raw-window-handle",
+ "sha2",
+ "soup3",
+ "tao-macros",
+ "thiserror 2.0.18",
+ "url",
+ "webkit2gtk",
+ "webkit2gtk-sys",
+ "webview2-com",
+ "windows",
+ "windows-core 0.61.2",
+ "windows-version",
+ "x11-dl",
+]
+
+[[package]]
+name = "x11"
+version = "2.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "502da5464ccd04011667b11c435cb992822c2c0dbde1770c988480d312a0db2e"
+dependencies = [
+ "libc",
+ "pkg-config",
+]
+
+[[package]]
+name = "x11-dl"
+version = "2.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38735924fedd5314a6e548792904ed8c6de6636285cb9fec04d5b1db85c1516f"
+dependencies = [
+ "libc",
+ "once_cell",
+ "pkg-config",
+]
+
+[[package]]
+name = "yoke"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "709fe23a0424b6a435d82152b1bd3fdfb0833487d5fa90d05d42762a9891fef5"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de844c262c8848816172cef550288e7dc6c7b7814b4ee56b3e1553f275f1858e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+ "synstructure",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.52"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce1022995ff5ff5d841ad7d994facc23098cd40152f2c1d11cd607c6f530653f"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.52"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ae7f38b72ec2a254e2b87ef277cf2cd4fb97cbebf944faa6f33354da0867930"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ec05a11813ea801ff6d75110ad09cd0824ddba17dfe17128ea0d5f68e6c5272"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11532158c46691caf0f2593ea8358fed6bbf68a0315e80aae9bd41fbade684a1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+ "synstructure",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"
+
+[[package]]
+name = "zerotrie"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f9152d31db0792fa83f70fb2f83148effb5c1f5b8c7686c3459e361d9bc20bf"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "90f911cbc359ab6af17377d242225f4d75119aec87ea711a880987b18cd7b239"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "625dc425cab0dca6dc3c3319506e6593dcb08a9f387ea3b284dbd52a92c40555"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
diff --git a/apps/rebreak-magic/src-tauri/Cargo.toml b/apps/rebreak-magic/src-tauri/Cargo.toml
new file mode 100644
index 0000000..4970e47
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/Cargo.toml
@@ -0,0 +1,45 @@
+[package]
+name = "rebreak-magic"
+version = "0.1.0"
+description = "ReBreak Magic — Unified Desktop Protection (macOS + Windows)"
+authors = ["Rebreak"]
+edition = "2021"
+
+[lib]
+name = "rebreak_magic_lib"
+crate-type = ["staticlib", "cdylib", "rlib"]
+
+[build-dependencies]
+tauri-build = { version = "2", features = [] }
+
+[dependencies]
+tauri = { version = "2", features = [] }
+tauri-plugin-shell = "2"
+tauri-plugin-fs = "2"
+tauri-plugin-http = "2"
+tauri-plugin-os = "2"
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+chrono = { version = "0.4", features = ["serde"] }
+reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
+tokio = { version = "1", features = ["macros", "rt-multi-thread", "sync"] }
+anyhow = "1"
+uuid = { version = "1", features = ["v4"] }
+base64 = "0.22"
+dirs = "5"
+tiny_http = "0.12"
+local-ip-address = "0.6"
+# Pin brotli family to avoid alloc-no-stdlib version conflict
+brotli-decompressor = "=5.0.1"
+alloc-stdlib = "=0.2.2"
+
+# Plattform-spezifischer Credential-Speicher
+[target.'cfg(windows)'.dependencies]
+keyring = { version = "3", features = ["windows-native"] }
+
+[target.'cfg(not(windows))'.dependencies]
+keyring = { version = "3", features = ["apple-native"] }
+
+[profile.release]
+strip = true
+lto = true
diff --git a/apps/rebreak-magic/src-tauri/binaries/README.md b/apps/rebreak-magic/src-tauri/binaries/README.md
new file mode 100644
index 0000000..2b31225
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/binaries/README.md
@@ -0,0 +1,45 @@
+# Tauri Sidecar Binaries
+
+This directory holds native binaries that are bundled with the ReBreak Magic app.
+
+## `supervise-magic`
+
+Go binary that puts an iPhone/iPad into supervised mode without erasing data.
+
+### Build
+
+```bash
+cd ../../ops/mdm/supervise-magic
+
+# macOS (Apple Silicon)
+make build-arm64
+
+# macOS (Intel)
+make build-amd64
+
+# Windows (x86_64)
+make build-windows-amd64
+```
+
+### Naming convention for Tauri
+
+Tauri expects sidecar binaries in this directory with the following naming pattern:
+
+```
+supervise-magic-<target-triple>[.exe]
+```
+
+Common target triples:
+- `aarch64-apple-darwin` (Apple Silicon)
+- `x86_64-apple-darwin` (Intel Mac)
+- `x86_64-pc-windows-msvc` (Windows)
+
+After building, copy or symlink the binary into this directory with the correct target-triple name.
+
+Example:
+```bash
+cp ops/mdm/supervise-magic/bin/supervise-magic-darwin-arm64 \
+   apps/rebreak-magic/src-tauri/binaries/supervise-magic-aarch64-apple-darwin
+```
+
+Tauri will bundle the matching binary at build time.
diff --git a/apps/rebreak-magic/src-tauri/binaries/supervise-magic-aarch64-apple-darwin b/apps/rebreak-magic/src-tauri/binaries/supervise-magic-aarch64-apple-darwin
new file mode 100755
index 0000000..67a7faa
Binary files /dev/null and b/apps/rebreak-magic/src-tauri/binaries/supervise-magic-aarch64-apple-darwin differ
diff --git a/apps/rebreak-magic/src-tauri/build.rs b/apps/rebreak-magic/src-tauri/build.rs
new file mode 100644
index 0000000..d860e1e
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/build.rs
@@ -0,0 +1,3 @@
+fn main() {
+    tauri_build::build()
+}
diff --git a/apps/rebreak-magic/src-tauri/capabilities/default.json b/apps/rebreak-magic/src-tauri/capabilities/default.json
new file mode 100644
index 0000000..3f7752e
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/capabilities/default.json
@@ -0,0 +1,21 @@
+{
+  "$schema": "../gen/schemas/desktop-schema.json",
+  "identifier": "default",
+  "description": "Default capabilities for ReBreak Magic",
+  "windows": ["main"],
+  "permissions": [
+    "core:default",
+    "shell:default",
+    "shell:allow-execute",
+    "shell:allow-spawn",
+    "fs:default",
+    "fs:allow-read-file",
+    "fs:allow-write-file",
+    "fs:allow-read-dir",
+    "fs:allow-app-read",
+    "fs:allow-app-write",
+    "http:default",
+    "http:allow-fetch",
+    "os:default"
+  ]
+}
diff --git a/apps/rebreak-magic/src-tauri/entitlements.plist b/apps/rebreak-magic/src-tauri/entitlements.plist
new file mode 100644
index 0000000..f77faa5
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/entitlements.plist
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <!-- Allow JIT compilation for the web runtime -->
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+    <!-- Allow unsigned executable memory (needed for Tauri + sidecars) -->
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+    <!-- Disable library validation so the supervise-magic sidecar can load its own libs -->
+    <key>com.apple.security.cs.disable-library-validation</key>
+    <true/>
+    <!-- USB device access for iPhone/iPad detection -->
+    <key>com.apple.security.device.usb</key>
+    <true/>
+    <!-- Apple Events automation (helper tools may need this) -->
+    <key>com.apple.security.automation.apple-events</key>
+    <true/>
+    <!-- Files: user-selected and application-support for session/config storage -->
+    <key>com.apple.security.files.user-selected.read-write</key>
+    <true/>
+    <key>com.apple.security.files.bookmarks.app-scope</key>
+    <true/>
+</dict>
+</plist>
diff --git a/apps/rebreak-magic/src-tauri/icons/128x128.png b/apps/rebreak-magic/src-tauri/icons/128x128.png
new file mode 100644
index 0000000..22540d5
Binary files /dev/null and b/apps/rebreak-magic/src-tauri/icons/128x128.png differ
diff --git a/apps/rebreak-magic/src-tauri/icons/128x128@2x.png b/apps/rebreak-magic/src-tauri/icons/128x128@2x.png
new file mode 100644
index 0000000..1cf005a
Binary files /dev/null and b/apps/rebreak-magic/src-tauri/icons/128x128@2x.png differ
diff --git a/apps/rebreak-magic/src-tauri/icons/32x32.png b/apps/rebreak-magic/src-tauri/icons/32x32.png
new file mode 100644
index 0000000..fe4d68e
Binary files /dev/null and b/apps/rebreak-magic/src-tauri/icons/32x32.png differ
diff --git a/apps/rebreak-magic/src-tauri/icons/icon.ico b/apps/rebreak-magic/src-tauri/icons/icon.ico
new file mode 100644
index 0000000..71ae3d2
Binary files /dev/null and b/apps/rebreak-magic/src-tauri/icons/icon.ico differ
diff --git a/apps/rebreak-magic/src-tauri/icons/icon.png b/apps/rebreak-magic/src-tauri/icons/icon.png
new file mode 100644
index 0000000..721cabe
Binary files /dev/null and b/apps/rebreak-magic/src-tauri/icons/icon.png differ
diff --git a/apps/rebreak-magic/src-tauri/icons/source.png b/apps/rebreak-magic/src-tauri/icons/source.png
new file mode 100644
index 0000000..ec9b4d7
Binary files /dev/null and b/apps/rebreak-magic/src-tauri/icons/source.png differ
diff --git a/apps/rebreak-magic/src-tauri/src/backend/api.rs b/apps/rebreak-magic/src-tauri/src/backend/api.rs
index 71c8530..7e07648 100644
--- a/apps/rebreak-magic/src-tauri/src/backend/api.rs
+++ b/apps/rebreak-magic/src-tauri/src/backend/api.rs
@@ -125,6 +125,18 @@ pub struct MdmLinkRequest {
     pub mdm_id: String,
 }
 
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ReportProtectionStateRequest {
+    #[serde(rename = "deviceId")]
+    pub device_id: String,
+    pub platform: String,
+    #[serde(rename = "protectionType")]
+    pub protection_type: String,
+    pub active: bool,
+    pub reason: Option<String>,
+    pub source: Option<String>,
+}
+
 #[derive(Debug, Clone, Serialize, Deserialize)]
 pub struct ApiEnvelope<T> {
     pub success: bool,
@@ -437,6 +449,38 @@ impl MagicApiClient {
             .map(|_| ())
     }
 
+    pub async fn report_device_protection_state(
+        &self,
+        token: &str,
+        device_id: &str,
+        platform: &str,
+        protection_type: &str,
+        active: bool,
+        reason: Option<&str>,
+    ) -> AppResult<()> {
+        let url = format!("{}/api/devices/protection-state", self.base_url);
+
+        let response = self
+            .client
+            .post(&url)
+            .header("Authorization", format!("Bearer {}", token))
+            .json(&ReportProtectionStateRequest {
+                device_id: device_id.to_string(),
+                platform: platform.to_string(),
+                protection_type: protection_type.to_string(),
+                active,
+                reason: reason.map(|s| s.to_string()),
+                source: Some("magic".to_string()),
+            })
+            .send()
+            .await
+            .map_err(|e| AppError::new(format!("Network error: {}", e)))?;
+
+        Self::handle_response::<ApiEnvelope<serde_json::Value>>(response)
+            .await
+            .map(|_| ())
+    }
+
     async fn handle_response<T: serde::de::DeserializeOwned>(
         response: reqwest::Response,
     ) -> AppResult<T> {
diff --git a/apps/rebreak-magic/src-tauri/src/backend/mod.rs b/apps/rebreak-magic/src-tauri/src/backend/mod.rs
new file mode 100644
index 0000000..e5fdf85
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/src/backend/mod.rs
@@ -0,0 +1 @@
+pub mod api;
diff --git a/apps/rebreak-magic/src-tauri/src/error.rs b/apps/rebreak-magic/src-tauri/src/error.rs
new file mode 100644
index 0000000..3bd66b7
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/src/error.rs
@@ -0,0 +1,43 @@
+use serde::{Deserialize, Serialize};
+use std::fmt;
+
+#[derive(Debug, Serialize, Deserialize)]
+pub struct AppError {
+    pub message: String,
+}
+
+impl fmt::Display for AppError {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(f, "{}", self.message)
+    }
+}
+
+impl std::error::Error for AppError {}
+
+impl AppError {
+    pub fn new(message: impl Into<String>) -> Self {
+        Self {
+            message: message.into(),
+        }
+    }
+}
+
+impl From<anyhow::Error> for AppError {
+    fn from(value: anyhow::Error) -> Self {
+        Self::new(value.to_string())
+    }
+}
+
+impl From<std::io::Error> for AppError {
+    fn from(value: std::io::Error) -> Self {
+        Self::new(value.to_string())
+    }
+}
+
+impl From<serde_json::Error> for AppError {
+    fn from(value: serde_json::Error) -> Self {
+        Self::new(value.to_string())
+    }
+}
+
+pub type AppResult<T> = Result<T, AppError>;
diff --git a/apps/rebreak-magic/src-tauri/src/ios_device.rs b/apps/rebreak-magic/src-tauri/src/ios_device.rs
new file mode 100644
index 0000000..ca686c3
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/src/ios_device.rs
@@ -0,0 +1,410 @@
+use crate::config::AppConfig;
+use crate::error::{AppError, AppResult};
+use crate::sidecar::supervise_magic::run_supervise_magic_raw;
+use serde::{Deserialize, Serialize};
+use std::process::Command;
+
+const CFGUTIL_CANDIDATES: &[&str] = &[
+    "/Applications/Apple Configurator.app/Contents/MacOS/cfgutil",
+    "/Applications/Apple Configurator 2.app/Contents/MacOS/cfgutil",
+];
+
+fn first_executable(candidates: &[&str]) -> Option<String> {
+    candidates
+        .iter()
+        .find(|path| std::path::Path::new(path).is_file())
+        .map(|path| path.to_string())
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct IphoneDeviceState {
+    pub udid: String,
+    pub name: String,
+    pub product_type: String,
+    pub product_version: String,
+    pub is_supervised: bool,
+    pub organization_name: Option<String>,
+    pub find_my_enabled: Option<bool>,
+    #[serde(rename = "installedProfileIDs")]
+    pub installed_profile_ids: Vec<String>,
+    #[serde(rename = "installedAppBundleIDs")]
+    pub installed_app_bundle_ids: Vec<String>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct SuperviseStatus {
+    pub is_supervised: bool,
+    pub organization_name: Option<String>,
+    pub find_my_enabled: Option<bool>,
+}
+
+fn normalize_org_name(value: &str) -> String {
+    value
+        .trim()
+        .trim_matches(|c| c == '"' || c == '\'')
+        .to_string()
+}
+
+/// Parse `  Key:    Value` (check Format).
+fn parse_colon(stdout: &str, key: &str) -> Option<String> {
+    for raw in stdout.lines() {
+        let trimmed = raw.trim();
+        if let Some(rest) = trimmed.strip_prefix(&format!("{}:", key)) {
+            return Some(rest.trim().to_string());
+        }
+    }
+    None
+}
+
+/// Parse `  Key                 = Value` (cloud-config Format).
+fn parse_equals(stdout: &str, key: &str) -> Option<String> {
+    for raw in stdout.lines() {
+        let trimmed = raw.trim();
+        if let Some((k, v)) = trimmed.split_once('=') {
+            if k.trim() == key {
+                return Some(v.trim().to_string());
+            }
+        }
+    }
+    None
+}
+
+async fn run_supervise_magic_cmd(
+    app: tauri::AppHandle,
+    action: &str,
+    args: &[&str],
+) -> AppResult<String> {
+    let result = run_supervise_magic_raw(app, action, args).await?;
+    if !result.success {
+        return Err(AppError::new(format!(
+            "supervise-magic {} failed: {}",
+            action,
+            result.stderr
+        )));
+    }
+    Ok(result.stdout)
+}
+
+fn run_cfgutil(binary: &str, args: &[&str]) -> AppResult<(String, String, bool)> {
+    let output = Command::new(binary)
+        .args(args)
+        .output()
+        .map_err(|e| AppError::new(format!("Failed to run cfgutil ({}): {}", binary, e)))?;
+
+    let stdout = String::from_utf8_lossy(&output.stdout).to_string();
+    let stderr = String::from_utf8_lossy(&output.stderr).to_string();
+    Ok((stdout, stderr, output.status.success()))
+}
+
+pub async fn read_supervise_status(app: tauri::AppHandle) -> AppResult<SuperviseStatus> {
+    let mut status = SuperviseStatus {
+        is_supervised: false,
+        organization_name: None,
+        find_my_enabled: None,
+    };
+
+    // 1) cloud-config liest IsSupervised + OrganizationName direkt aus MCInstall.
+    if let Ok(stdout) = run_supervise_magic_cmd(app.clone(), "cloud-config", &[]).await {
+        if let Some(v) = parse_equals(&stdout, "IsSupervised") {
+            status.is_supervised = v.to_lowercase() == "true";
+        }
+        if let Some(v) = parse_equals(&stdout, "OrganizationName") {
+            status.organization_name = Some(normalize_org_name(&v));
+        }
+    }
+
+    // 2) check gibt zusätzlich FindMyEnabled. Wenn check fehlschlägt, ist kein
+    //    Gerät verbunden — dann liefern wir den Default-Status zurück.
+    let check_stdout = match run_supervise_magic_cmd(app.clone(), "check", &[]).await {
+        Ok(stdout) => stdout,
+        Err(_) => return Ok(status),
+    };
+
+    if let Some(v) = parse_colon(&check_stdout, "FindMyEnabled") {
+        status.find_my_enabled = Some(v.to_lowercase() == "true");
+    }
+    if !status.is_supervised {
+        if let Some(v) = parse_colon(&check_stdout, "IsSupervised") {
+            status.is_supervised = v.to_lowercase() == "true";
+        }
+    }
+    if status.organization_name.is_none() {
+        if let Some(v) = parse_colon(&check_stdout, "OrganizationName")
+            .or_else(|| parse_colon(&check_stdout, "SupervisionOrganizationName"))
+        {
+            status.organization_name = Some(normalize_org_name(&v));
+        }
+    }
+
+    Ok(status)
+}
+
+pub fn installed_profile_ids() -> AppResult<Vec<String>> {
+    #[cfg(target_os = "macos")]
+    {
+        let cfgutil = first_executable(CFGUTIL_CANDIDATES)
+            .ok_or_else(|| AppError::new("cfgutil nicht gefunden — bitte Apple Configurator installieren.".to_string()))?;
+        let args = ["--foreach", "get", "configurationProfiles"];
+        eprintln!("[ios_device] cfgutil profiles: binary={} args={:?}", cfgutil, args);
+        let (stdout, stderr, success) = run_cfgutil(&cfgutil, &args)?;
+        eprintln!(
+            "[ios_device] cfgutil profiles: success={} stderr_len={} stdout_len={} stderr={:?}",
+            success, stderr.len(), stdout.len(), stderr
+        );
+        eprintln!("[ios_device] cfgutil profiles stdout:\n{}", stdout);
+        // cfgutil mit --foreach liefert auf manchen Setups Exit-Code 1, obwohl die Ausgabe gültig ist.
+        // Wir behandeln es als Fehler nur, wenn stderr einen Fehler enthält.
+        if !success && !stderr.trim().is_empty() {
+            return Err(AppError::new(format!("cfgutil failed: {}", stderr)));
+        }
+        let list = parse_cfgutil_list(&stdout);
+        eprintln!("[ios_device] cfgutil profiles parsed: {:?}", list);
+        return Ok(list);
+    }
+    #[cfg(not(target_os = "macos"))]
+    {
+        // cfgutil is only available on macOS. On Windows we cannot enumerate profiles locally.
+        Ok(Vec::new())
+    }
+}
+
+pub fn installed_app_bundle_ids() -> AppResult<Vec<String>> {
+    #[cfg(target_os = "macos")]
+    {
+        let cfgutil = first_executable(CFGUTIL_CANDIDATES)
+            .ok_or_else(|| AppError::new("cfgutil nicht gefunden — bitte Apple Configurator installieren.".to_string()))?;
+        let args = ["--foreach", "get", "installedApps"];
+        eprintln!("[ios_device] cfgutil apps: binary={} args={:?}", cfgutil, args);
+        let (stdout, stderr, success) = run_cfgutil(&cfgutil, &args)?;
+        eprintln!(
+            "[ios_device] cfgutil apps: success={} stderr_len={} stdout_len={} stderr={:?}",
+            success, stderr.len(), stdout.len(), stderr
+        );
+        eprintln!("[ios_device] cfgutil apps stdout:\n{}", stdout);
+        if !success && !stderr.trim().is_empty() {
+            return Err(AppError::new(format!("cfgutil failed: {}", stderr)));
+        }
+        let list = parse_cfgutil_list(&stdout);
+        eprintln!("[ios_device] cfgutil apps parsed: {:?}", list);
+        return Ok(list);
+    }
+    #[cfg(not(target_os = "macos"))]
+    {
+        Ok(Vec::new())
+    }
+}
+
+fn parse_cfgutil_list(stdout: &str) -> Vec<String> {
+    stdout
+        .lines()
+        .filter_map(|line| {
+            let trimmed = line.trim();
+            if trimmed.is_empty() {
+                return None;
+            }
+            // First token = identifier (split by tab or space)
+            trimmed
+                .split(|c: char| c == '\t' || c == ' ')
+                .next()
+                .map(|s| s.to_string())
+        })
+        .collect()
+}
+
+fn install_profile_via_cfgutil(path: &str) -> AppResult<()> {
+    #[cfg(not(target_os = "macos"))]
+    {
+        return Err(AppError::new("Lokale Profil-Installation via cfgutil ist nur auf macOS verfügbar. Bitte das Profil per QR-Code installieren.".to_string()));
+    }
+    #[cfg(target_os = "macos")]
+    let cfgutil = first_executable(CFGUTIL_CANDIDATES)
+        .ok_or_else(|| AppError::new("cfgutil nicht gefunden — bitte Apple Configurator installieren.".to_string()))?;
+    #[cfg(target_os = "macos")]
+    let (_, stderr, success) = run_cfgutil(&cfgutil, &["--foreach", "install-profile", path])?;
+    #[cfg(target_os = "macos")]
+    if !success {
+        let err = stderr.trim();
+        if err.to_lowercase().contains("device is locked") {
+            return Err(AppError::new("iPhone ist gesperrt. Bitte entsperren und erneut versuchen.".to_string()));
+        }
+        if err.to_lowercase().contains("user interaction")
+            || err.to_lowercase().contains("benutzerinteraktion")
+            || err.contains("MCInstallationErrorDomain Code: 4009")
+        {
+            return Err(AppError::new("iOS verlangt eine Bestätigung direkt am iPhone.".to_string()));
+        }
+        if err.contains("DMCInstallationErrorDomain") && err.contains("Code: 4020") {
+            return Err(AppError::new("Lokale Profil-Installation ist durch iOS-Policy blockiert (DMC 4020).".to_string()));
+        }
+        return Err(AppError::new(format!("Profil-Installation fehlgeschlagen: {}", err)));
+    }
+    Ok(())
+}
+
+pub async fn detect_device_state(app: tauri::AppHandle) -> AppResult<Option<IphoneDeviceState>> {
+    let check_stdout = match run_supervise_magic_cmd(app.clone(), "check", &[]).await {
+        Ok(stdout) => stdout,
+        Err(_) => return Ok(None), // Kein Gerät verbunden
+    };
+
+    let udid = match parse_colon(&check_stdout, "UDID") {
+        Some(v) => v,
+        None => return Ok(None),
+    };
+    let name = parse_colon(&check_stdout, "Name").unwrap_or_else(|| "iPhone".to_string());
+    let product_type = parse_colon(&check_stdout, "Type").unwrap_or_default();
+    let product_version = parse_colon(&check_stdout, "iOS")
+        .or_else(|| parse_colon(&check_stdout, "ProductVersion"))
+        .unwrap_or_default();
+
+    let status = read_supervise_status(app.clone()).await?;
+
+    let installed_profile_ids = tokio::task::spawn_blocking(installed_profile_ids)
+        .await
+        .map_err(|e| AppError::new(format!("profile detection task failed: {}", e)))?
+        .unwrap_or_else(|e| {
+            eprintln!("[ios_device] installed_profile_ids failed: {}", e);
+            Vec::new()
+        });
+    let installed_app_bundle_ids = tokio::task::spawn_blocking(installed_app_bundle_ids)
+        .await
+        .map_err(|e| AppError::new(format!("app detection task failed: {}", e)))?
+        .unwrap_or_else(|e| {
+            eprintln!("[ios_device] installed_app_bundle_ids failed: {}", e);
+            Vec::new()
+        });
+
+    eprintln!(
+        "[ios_device] detect result: udid={} profiles={:?} apps={:?}",
+        udid, installed_profile_ids, installed_app_bundle_ids
+    );
+
+    Ok(Some(IphoneDeviceState {
+        udid,
+        name,
+        product_type,
+        product_version,
+        is_supervised: status.is_supervised,
+        organization_name: status.organization_name,
+        find_my_enabled: status.find_my_enabled,
+        installed_profile_ids,
+        installed_app_bundle_ids,
+    }))
+}
+
+// MARK: - Tauri Commands
+
+#[tauri::command]
+pub async fn detect_iphone_state(app: tauri::AppHandle) -> AppResult<Option<IphoneDeviceState>> {
+    detect_device_state(app).await
+}
+
+#[tauri::command]
+pub async fn get_supervise_status(app: tauri::AppHandle) -> AppResult<SuperviseStatus> {
+    read_supervise_status(app).await
+}
+
+#[tauri::command]
+pub fn get_installed_profiles() -> AppResult<Vec<String>> {
+    installed_profile_ids()
+}
+
+#[tauri::command]
+pub fn get_installed_apps() -> AppResult<Vec<String>> {
+    installed_app_bundle_ids()
+}
+
+#[tauri::command]
+pub fn install_profile(path: String) -> AppResult<()> {
+    install_profile_via_cfgutil(&path)
+}
+
+#[tauri::command]
+pub async fn download_and_patch_enrollment_profile(url: String, udid: String) -> AppResult<String> {
+    let response = reqwest::get(&url)
+        .await
+        .map_err(|e| AppError::new(format!("Failed to download enrollment profile: {}", e)))?;
+
+    if !response.status().is_success() {
+        return Err(AppError::new(format!(
+            "MDM server returned status {}",
+            response.status()
+        )));
+    }
+
+    let mut text = response
+        .text()
+        .await
+        .map_err(|e| AppError::new(format!("Failed to read enrollment profile: {}", e)))?;
+
+    text = text.replace("%SerialNumber%", &udid);
+    text = text.replace("%UDID%", &udid);
+
+    let config_dir = AppConfig::config_dir()?;
+    std::fs::create_dir_all(&config_dir)?;
+    let profile_path = config_dir.join("rebreak-enrollment.mobileconfig");
+    std::fs::write(&profile_path, text)?;
+
+    Ok(profile_path.to_string_lossy().to_string())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn parse_equals_handles_multiple_spaces() {
+        let input = "OrganizationName                         = ReBreak\nIsSupervised = true";
+        assert_eq!(
+            parse_equals(input, "OrganizationName"),
+            Some("ReBreak".to_string())
+        );
+        assert_eq!(
+            parse_equals(input, "IsSupervised"),
+            Some("true".to_string())
+        );
+    }
+
+    #[test]
+    fn parse_cfgutil_list_extracts_bundle_ids() {
+        let input = "com.example.app\tExample App v1\norg.rebreak.app\tReBreak v2\n\n";
+        let list = parse_cfgutil_list(input);
+        assert_eq!(list, vec!["com.example.app", "org.rebreak.app"]);
+    }
+
+    #[test]
+    fn parse_cfgutil_list_handles_empty_profile_output() {
+        // cfgutil --foreach get configurationProfiles kann leere stdout + Exit 1 liefern.
+        assert!(parse_cfgutil_list("").is_empty());
+        assert!(parse_cfgutil_list("   \n\n").is_empty());
+    }
+
+    #[test]
+    fn iphone_state_serializes_id_casing() {
+        let state = IphoneDeviceState {
+            udid: "u".into(),
+            name: "n".into(),
+            product_type: "iPhone".into(),
+            product_version: "26".into(),
+            is_supervised: true,
+            organization_name: None,
+            find_my_enabled: None,
+            installed_profile_ids: vec!["org.rebreak.mdm.enrollment".into()],
+            installed_app_bundle_ids: vec!["org.rebreak.app".into()],
+        };
+        let json = serde_json::to_value(&state).unwrap();
+        assert!(json.get("installedProfileIDs").is_some(), "expected installedProfileIDs");
+        assert!(json.get("installedAppBundleIDs").is_some(), "expected installedAppBundleIDs");
+        assert!(json.get("installedProfileIds").is_none(), "unexpected installedProfileIds");
+    }
+
+    #[test]
+    #[cfg(target_os = "macos")]
+    #[ignore = "requires connected iOS device"]
+    fn cfgutil_live_outputs() {
+        eprintln!("installed_profile_ids = {:?}", installed_profile_ids());
+        eprintln!("installed_app_bundle_ids = {:?}", installed_app_bundle_ids());
+    }
+}
diff --git a/apps/rebreak-magic/src-tauri/src/lib.rs b/apps/rebreak-magic/src-tauri/src/lib.rs
index dbb2a23..1601b4f 100644
--- a/apps/rebreak-magic/src-tauri/src/lib.rs
+++ b/apps/rebreak-magic/src-tauri/src/lib.rs
@@ -54,6 +54,7 @@ pub fn run() {
             get_mdm_status,
             get_mdm_status_by_udid,
             link_mdm_device,
+            report_device_protection_state,
             get_desktop_protection_status,
             set_desktop_protection_status,
             get_hostname,
@@ -236,6 +237,29 @@ async fn link_mdm_device(device_id: String, mdm_id: String) -> AppResult<()> {
     client.link_mdm_device(&session.access_token, &device_id, &mdm_id).await
 }
 
+#[tauri::command]
+async fn report_device_protection_state(
+    device_id: String,
+    platform: String,
+    protection_type: String,
+    active: bool,
+    reason: Option<String>,
+) -> AppResult<()> {
+    let session = require_session()?;
+    let config = AppConfig::load();
+    let client = MagicApiClient::new(&config);
+    client
+        .report_device_protection_state(
+            &session.access_token,
+            &device_id,
+            &platform,
+            &protection_type,
+            active,
+            reason.as_deref(),
+        )
+        .await
+}
+
 #[tauri::command]
 async fn get_mdm_status_by_udid(udid: String) -> AppResult<MdmStatusByUdidData> {
     let session = require_session()?;
diff --git a/apps/rebreak-magic/src-tauri/src/main.rs b/apps/rebreak-magic/src-tauri/src/main.rs
new file mode 100644
index 0000000..a61552e
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/src/main.rs
@@ -0,0 +1,6 @@
+// Prevents additional console window on Windows in release, DO NOT REMOVE!!
+#![cfg_attr(not(debug_assertions), windows_subsystem = "windows")]
+
+fn main() {
+    rebreak_magic_lib::run();
+}
diff --git a/apps/rebreak-magic/src-tauri/src/mdm/client.rs b/apps/rebreak-magic/src-tauri/src/mdm/client.rs
new file mode 100644
index 0000000..477e5e9
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/src/mdm/client.rs
@@ -0,0 +1,142 @@
+use crate::config::AppConfig;
+use crate::error::{AppError, AppResult};
+use serde::{Deserialize, Serialize};
+
+const HTTP_TIMEOUT_SECONDS: u64 = 30;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct MdmPushStatus {
+    pub udid: String,
+    pub push_result: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct MdmEnqueueResult {
+    pub command_uuid: String,
+    pub response_body: String,
+}
+
+pub struct MdmClient {
+    client: reqwest::Client,
+    server: String,
+    auth_header: String,
+}
+
+impl MdmClient {
+    pub fn new() -> AppResult<Self> {
+        let cfg = AppConfig::load_binder_config()?;
+        let creds = format!("{}:{}", cfg.mdm_user, cfg.mdm_api_key);
+        use base64::{engine::general_purpose::STANDARD, Engine};
+        let auth_header = format!("Basic {}", STANDARD.encode(creds));
+
+        Ok(Self {
+            client: reqwest::Client::builder()
+                .timeout(std::time::Duration::from_secs(HTTP_TIMEOUT_SECONDS))
+                .build()
+                .map_err(|e| AppError::new(format!("reqwest client build: {}", e)))?,
+            server: cfg.mdm_server,
+            auth_header,
+        })
+    }
+
+    fn url(&self, path: &str) -> AppResult<String> {
+        let base = self.server.trim_end_matches('/');
+        Ok(format!("{}{}", base, path))
+    }
+
+    fn request(&self, method: reqwest::Method, path: &str) -> AppResult<reqwest::RequestBuilder> {
+        let url = self.url(path)?;
+        Ok(self
+            .client
+            .request(method, &url)
+            .header("Authorization", &self.auth_header))
+    }
+
+    pub async fn ping(&self) -> AppResult<String> {
+        let resp = self
+            .request(reqwest::Method::GET, "/version")?
+            .send()
+            .await
+            .map_err(|e| AppError::new(format!("MDM ping failed: {}", e)))?;
+
+        let status = resp.status();
+        let body = resp
+            .text()
+            .await
+            .unwrap_or_else(|_| "Unknown error".to_string());
+
+        if !status.is_success() {
+            return Err(AppError::new(format!("MDM ping HTTP {}: {}", status, body)));
+        }
+        Ok(body)
+    }
+
+    pub async fn push(&self, udid: &str) -> AppResult<MdmPushStatus> {
+        let resp = self
+            .request(reqwest::Method::GET, &format!("/v1/push/{}", udid))?
+            .send()
+            .await
+            .map_err(|e| AppError::new(format!("MDM push failed: {}", e)))?;
+
+        let status = resp.status();
+        let body = resp
+            .text()
+            .await
+            .unwrap_or_else(|_| "Unknown error".to_string());
+
+        if !status.is_success() {
+            return Err(AppError::new(format!("MDM push HTTP {}: {}", status, body)));
+        }
+
+        // Parse NanoMDM response: { "status": { "<udid>": { "push_result": "..." } } }
+        let parsed: serde_json::Value = serde_json::from_str(&body)
+            .map_err(|e| AppError::new(format!("MDM push parse error: {} — body: {}", e, body)))?;
+
+        let push_result = parsed
+            .get("status")
+            .and_then(|s| s.get(udid))
+            .and_then(|d| d.get("push_result"))
+            .and_then(|v| v.as_str())
+            .ok_or_else(|| AppError::new(format!("MDM push response unerwartet: {}", body)))?
+            .to_string();
+
+        Ok(MdmPushStatus {
+            udid: udid.to_string(),
+            push_result,
+        })
+    }
+
+    pub async fn enqueue(&self, udid: &str, command: serde_json::Value) -> AppResult<MdmEnqueueResult> {
+        let command_uuid = uuid::Uuid::new_v4().to_string();
+        let envelope = serde_json::json!({
+            "CommandUUID": command_uuid,
+            "Command": command,
+        });
+
+        // NanoMDM expects plist, but also accepts JSON in newer versions.
+        // For maximum compatibility we send JSON here; if it fails, the caller
+        // will see the error.
+        let resp = self
+            .request(reqwest::Method::PUT, &format!("/v1/enqueue/{}?push=1", udid))?
+            .header("Content-Type", "application/json")
+            .json(&envelope)
+            .send()
+            .await
+            .map_err(|e| AppError::new(format!("MDM enqueue failed: {}", e)))?;
+
+        let status = resp.status();
+        let body = resp
+            .text()
+            .await
+            .unwrap_or_else(|_| "Unknown error".to_string());
+
+        if !status.is_success() {
+            return Err(AppError::new(format!("MDM enqueue HTTP {}: {}", status, body)));
+        }
+
+        Ok(MdmEnqueueResult {
+            command_uuid,
+            response_body: body,
+        })
+    }
+}
diff --git a/apps/rebreak-magic/src-tauri/src/mdm/mod.rs b/apps/rebreak-magic/src-tauri/src/mdm/mod.rs
new file mode 100644
index 0000000..63dfda4
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/src/mdm/mod.rs
@@ -0,0 +1,89 @@
+pub mod client;
+
+use crate::error::AppResult;
+use client::MdmClient;
+use serde::{Deserialize, Serialize};
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct MdmCommandResult {
+    pub command_uuid: String,
+    pub response_body: String,
+}
+
+#[tauri::command]
+pub async fn mdm_ping() -> AppResult<String> {
+    MdmClient::new()?.ping().await
+}
+
+#[tauri::command]
+pub async fn mdm_push(udid: String) -> AppResult<client::MdmPushStatus> {
+    MdmClient::new()?.push(&udid).await
+}
+
+#[tauri::command]
+pub async fn mdm_install_app(udid: String) -> AppResult<MdmCommandResult> {
+    let command = serde_json::json!({
+        "RequestType": "InstallApplication",
+        "ManifestURL": "https://mdm.rebreak.org/install/manifest.plist",
+        "ManagementFlags": 0,
+    });
+    let r = MdmClient::new()?.enqueue(&udid, command).await?;
+    Ok(MdmCommandResult {
+        command_uuid: r.command_uuid,
+        response_body: r.response_body,
+    })
+}
+
+#[tauri::command]
+pub async fn mdm_set_supervised_mode(udid: String) -> AppResult<MdmCommandResult> {
+    let command = serde_json::json!({
+        "RequestType": "Settings",
+        "Settings": [
+            {
+                "Item": "ApplicationConfiguration",
+                "Identifier": "org.rebreak.app",
+                "Configuration": {
+                    "mdmSupervised": true,
+                },
+            },
+        ],
+    });
+    let r = MdmClient::new()?.enqueue(&udid, command).await?;
+    Ok(MdmCommandResult {
+        command_uuid: r.command_uuid,
+        response_body: r.response_body,
+    })
+}
+
+#[tauri::command]
+pub async fn mdm_take_management(udid: String) -> AppResult<MdmCommandResult> {
+    let command = serde_json::json!({
+        "RequestType": "InstallApplication",
+        "Identifier": "org.rebreak.app",
+        "ChangeManagementState": "Managed",
+        "ManagementFlags": 0,
+    });
+    let r = MdmClient::new()?.enqueue(&udid, command).await?;
+    Ok(MdmCommandResult {
+        command_uuid: r.command_uuid,
+        response_body: r.response_body,
+    })
+}
+
+#[tauri::command]
+pub async fn mdm_install_lock_profile(udid: String, profile_path: String) -> AppResult<MdmCommandResult> {
+    let bytes = std::fs::read(&profile_path)?;
+    let payload_b64 = {
+        use base64::{engine::general_purpose::STANDARD, Engine};
+        STANDARD.encode(&bytes)
+    };
+    let command = serde_json::json!({
+        "RequestType": "InstallProfile",
+        "Payload": payload_b64,
+    });
+    let r = MdmClient::new()?.enqueue(&udid, command).await?;
+    Ok(MdmCommandResult {
+        command_uuid: r.command_uuid,
+        response_body: r.response_body,
+    })
+}
diff --git a/apps/rebreak-magic/src-tauri/src/server/local_http.rs b/apps/rebreak-magic/src-tauri/src/server/local_http.rs
new file mode 100644
index 0000000..4da1802
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/src/server/local_http.rs
@@ -0,0 +1,87 @@
+use crate::error::{AppError, AppResult};
+use serde::{Deserialize, Serialize};
+use std::fs;
+use std::net::SocketAddr;
+use std::path::PathBuf;
+use std::sync::atomic::{AtomicBool, Ordering};
+use std::thread;
+use tiny_http::{Response, Server};
+
+static SERVER_RUNNING: AtomicBool = AtomicBool::new(false);
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct LocalServerInfo {
+    pub url: String,
+    pub qr_payload: String,
+}
+
+#[tauri::command]
+pub fn start_local_profile_server(profile_path: String) -> AppResult<LocalServerInfo> {
+    if SERVER_RUNNING.load(Ordering::SeqCst) {
+        return Err(AppError::new("Local server is already running"));
+    }
+
+    let path = PathBuf::from(profile_path);
+    if !path.exists() {
+        return Err(AppError::new(format!(
+            "Profile not found at {}",
+            path.display()
+        )));
+    }
+
+    // Try to bind to a port; fall back if 8123 is taken
+    let port = find_free_port(8123)?;
+    let addr: SocketAddr = format!("0.0.0.0:{}", port).parse().map_err(|e| {
+        AppError::new(format!("Failed to parse socket address: {}", e))
+    })?;
+
+    let server = Server::http(addr).map_err(|e| {
+        AppError::new(format!("Failed to start local HTTP server: {}", e))
+    })?;
+
+    let local_ip = local_ip_address::local_ip().ok();
+    let host = local_ip
+        .map(|ip| ip.to_string())
+        .unwrap_or_else(|| "localhost".to_string());
+
+    let url = format!("http://{}:{}/profile.mobileconfig", host, port);
+    let qr_payload = url.clone();
+    let profile_bytes = fs::read(&path)?;
+
+    SERVER_RUNNING.store(true, Ordering::SeqCst);
+
+    thread::spawn(move || {
+        for request in server.incoming_requests() {
+            let response = Response::from_data(profile_bytes.clone())
+                .with_header(
+                    tiny_http::Header::from_bytes(
+                        &b"Content-Type"[..],
+                        &b"application/x-apple-aspen-config"[..],
+                    )
+                    .unwrap(),
+                );
+            let _ = request.respond(response);
+        }
+        SERVER_RUNNING.store(false, Ordering::SeqCst);
+    });
+
+    Ok(LocalServerInfo { url, qr_payload })
+}
+
+#[tauri::command]
+pub fn stop_local_profile_server() -> AppResult<()> {
+    // tiny_http does not support graceful shutdown out of the box.
+    // In a real implementation, store the server handle and close it.
+    SERVER_RUNNING.store(false, Ordering::SeqCst);
+    Ok(())
+}
+
+fn find_free_port(start: u16) -> AppResult<u16> {
+    for port in start..start + 100 {
+        match std::net::TcpListener::bind(format!("0.0.0.0:{}", port)) {
+            Ok(_) => return Ok(port),
+            Err(_) => continue,
+        }
+    }
+    Err(AppError::new("No free port found in range 8123-8222"))
+}
diff --git a/apps/rebreak-magic/src-tauri/src/server/mod.rs b/apps/rebreak-magic/src-tauri/src/server/mod.rs
new file mode 100644
index 0000000..dedd97c
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/src/server/mod.rs
@@ -0,0 +1 @@
+pub mod local_http;
diff --git a/apps/rebreak-magic/src-tauri/src/sidecar/mod.rs b/apps/rebreak-magic/src-tauri/src/sidecar/mod.rs
new file mode 100644
index 0000000..5e31c5d
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/src/sidecar/mod.rs
@@ -0,0 +1 @@
+pub mod supervise_magic;
diff --git a/apps/rebreak-magic/src-tauri/src/sidecar/supervise_magic.rs b/apps/rebreak-magic/src-tauri/src/sidecar/supervise_magic.rs
new file mode 100644
index 0000000..6404ebe
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/src/sidecar/supervise_magic.rs
@@ -0,0 +1,63 @@
+use crate::error::{AppError, AppResult};
+use serde::{Deserialize, Serialize};
+use std::process::Command;
+use tauri_plugin_shell::ShellExt;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct SuperviseResult {
+    pub success: bool,
+    pub stdout: String,
+    pub stderr: String,
+}
+
+pub async fn run_supervise_magic_raw(
+    app: tauri::AppHandle,
+    action: &str,
+    args: &[&str],
+) -> AppResult<SuperviseResult> {
+    let sidecar = app
+        .shell()
+        .sidecar("supervise-magic")
+        .map_err(|e| AppError::new(format!("Failed to locate supervise-magic sidecar: {}", e)))?;
+
+    let mut cmd = sidecar.arg(action);
+    for a in args {
+        cmd = cmd.arg(a);
+    }
+
+    let output = cmd
+        .output()
+        .await
+        .map_err(|e| AppError::new(format!("Failed to run supervise-magic: {}", e)))?;
+
+    Ok(SuperviseResult {
+        success: output.status.success(),
+        stdout: String::from_utf8_lossy(&output.stdout).to_string(),
+        stderr: String::from_utf8_lossy(&output.stderr).to_string(),
+    })
+}
+
+#[tauri::command]
+pub async fn run_supervise_magic(
+    app: tauri::AppHandle,
+    action: String,
+    args: Option<Vec<String>>,
+) -> AppResult<SuperviseResult> {
+    let args: Vec<&str> = args.as_ref().map(|v| v.iter().map(|s| s.as_str()).collect()).unwrap_or_default();
+    run_supervise_magic_raw(app, &action, &args).await
+}
+
+// Synchronous fallback for direct shell execution
+#[allow(dead_code)]
+pub fn run_supervise_magic_sync(binary_path: &str, action: &str) -> AppResult<SuperviseResult> {
+    let output = Command::new(binary_path)
+        .arg(action)
+        .output()
+        .map_err(|e| AppError::new(format!("Failed to run supervise-magic: {}", e)))?;
+
+    Ok(SuperviseResult {
+        success: output.status.success(),
+        stdout: String::from_utf8_lossy(&output.stdout).to_string(),
+        stderr: String::from_utf8_lossy(&output.stderr).to_string(),
+    })
+}
diff --git a/apps/rebreak-magic/src-tauri/tauri.conf.json b/apps/rebreak-magic/src-tauri/tauri.conf.json
new file mode 100644
index 0000000..50a4941
--- /dev/null
+++ b/apps/rebreak-magic/src-tauri/tauri.conf.json
@@ -0,0 +1,46 @@
+{
+  "$schema": "https://schema.tauri.app/config/2",
+  "productName": "ReBreak Magic",
+  "version": "0.1.0",
+  "identifier": "org.rebreak.magic",
+  "build": {
+    "beforeDevCommand": "pnpm dev",
+    "devUrl": "http://localhost:1420",
+    "beforeBuildCommand": "pnpm build",
+    "frontendDist": "../.output/public"
+  },
+  "app": {
+    "windows": [
+      {
+        "title": "ReBreak Magic",
+        "width": 900,
+        "height": 700,
+        "minWidth": 800,
+        "minHeight": 600,
+        "center": true,
+        "resizable": true
+      }
+    ],
+    "security": {
+      "csp": null,
+      "capabilities": ["default"]
+    }
+  },
+  "bundle": {
+    "active": true,
+    "targets": ["app", "nsis"],
+    "icon": [
+      "icons/32x32.png",
+      "icons/128x128.png",
+      "icons/128x128@2x.png",
+      "icons/icon.ico",
+      "icons/icon.png"
+    ],
+    "externalBin": ["binaries/supervise-magic"],
+    "macOS": {
+      "entitlements": "./entitlements.plist",
+      "frameworks": [],
+      "minimumSystemVersion": "10.13"
+    }
+  }
+}
diff --git a/apps/rebreak-magic/tsconfig.json b/apps/rebreak-magic/tsconfig.json
new file mode 100644
index 0000000..4b34df1
--- /dev/null
+++ b/apps/rebreak-magic/tsconfig.json
@@ -0,0 +1,3 @@
+{
+  "extends": "./.nuxt/tsconfig.json"
+}
diff --git a/docs/internal/IOS_NEFILTER_ARCHITECTURE.md b/docs/internal/IOS_NEFILTER_ARCHITECTURE.md
new file mode 100644
index 0000000..170a25f
--- /dev/null
+++ b/docs/internal/IOS_NEFILTER_ARCHITECTURE.md
@@ -0,0 +1,212 @@
+# iOS-Schutz / NEFilter – Architektur-Übersicht
+
+> Stand: 2026-06-17
+> Zusammengefasst aus `apps/rebreak-native`, `backend/server` und `apps/rebreak-magic`.
+
+## 1. Ziel
+
+Auf iOS gibt es zwei Schutz-Layer:
+
+1. **NEFilter (Content Filter)** – aktiviert durch ein `webcontent-filter`-Profil (Sideload/MDM). Das ist der bevorzugte Weg für supervised/managed Geräte.
+2. **Packet-Tunnel DNS-Sinkhole** – Fallback für unsupervised Geräte, sichtbar als VPN.
+
+Dieses Dokument beschreibt, wie NEFilter aufgebaut ist und wie das Backend erkennt, ob es aktiv ist – **ohne** einen neuen Endpoint anlegen zu müssen.
+
+---
+
+## 2. Native iOS-Module (Expo)
+
+Hauptdateien unter `apps/rebreak-native/modules/rebreak-protection/ios/`:
+
+| Datei | Aufgabe |
+|-------|---------|
+| `RebreakProtectionModule.swift` | React-Native-Brücke, zentrale API (`isNeFilterActive`, `activateUrlFilter`, `getDeviceState`) |
+| `RebreakContentFilter/FilterDataProvider.swift` | `NEFilterDataProvider`, prüft URLs gegen `blocklist.bin` |
+| `RebreakPacketTunnelExtension/PacketTunnelProvider.swift` | VPN-DNS-Sinkhole Fallback |
+| `RebreakPacketTunnelExtension/DnsFilter.swift` / `HashList.swift` / `DomainHasher.swift` | Domain-Blocking-Logik für den VPN-Pfad |
+| `RebreakURLFilterExtension/` | NEURLFilter (iOS 26), aktuell nicht im Standard-Flow aktiv |
+
+Konfiguration/Targets:
+
+- `apps/rebreak-native/plugins/with-rebreak-protection-ios.js`
+- `apps/rebreak-native/app.config.ts` (`appExtensions` Block für EAS)
+
+---
+
+## 3. Wie NEFilter erkannt wird
+
+Die App liest den System-Status direkt aus:
+
+```swift
+// apps/rebreak-native/modules/rebreak-protection/ios/RebreakProtectionModule.swift ~782
+AsyncFunction("isNeFilterActive") { () async -> [String: Any] in
+  var enabled = false
+  do {
+    let manager = NEFilterManager.shared()
+    try await manager.loadFromPreferences()
+    enabled = manager.isEnabled
+  } catch let e as NSError { ... }
+  return ["enabled": enabled]
+}
+```
+
+Wichtig:
+
+- Build 19+ aktiviert die ContentFilter-Extension **nicht mehr selbst**.
+- Das `webcontent-filter`-Profil installiert die Extension autonom.
+- Die App fragt nur noch ab, ob sie aktiv ist.
+
+### Supervised vs. Unsupervised
+
+```swift
+// RebreakProtectionModule.swift ~172
+if supervised {
+  return await Self.activateContentFilter()   // NEFilter
+}
+// ... PacketTunnel (VPN) Fallback
+```
+
+- `supervised = true` → `NEFilterDataProvider` (Content Filter)
+- `supervised = false` → `NEPacketTunnelProvider` (VPN/DNS-Sinkhole)
+
+---
+
+## 4. Backend: Wie das NEFilter-Tracking funktioniert
+
+### 4.1 App reportet Status
+
+Die iOS-App postet den nativ gemessenen NEFilter-Status an einen **bereits existierenden** Endpoint:
+
+```ts
+// apps/rebreak-native/hooks/useProtectionState.ts ~152
+if (Platform.OS === "ios") {
+  protection.isNeFilterActive().then((res) => {
+    apiFetch('/api/users/me/mdm-status', {
+      method: 'POST',
+      body: { mdmManaged: res.enabled },
+    }).catch(() => {});
+  });
+}
+```
+
+### 4.2 Backend-Endpoint
+
+`backend/server/api/users/me/mdm-status.post.ts`:
+
+```ts
+const { mdmManaged } = Body.parse(await readBody(event));
+const result = await setMdmManaged(user.id, mdmManaged);
+```
+
+Dieser Endpoint ist **nicht neu** – er existiert schon und wird von der iOS-App genutzt.
+
+### 4.3 Datenbank
+
+`backend/prisma/schema.prisma` – `Profile`:
+
+```prisma
+mdmManaged    Boolean   @default(false) @map("mdm_managed")
+mdmDetectedAt DateTime? @map("mdm_detected_at")
+```
+
+`setMdmManaged` in `backend/server/db/profile.ts`:
+
+- Setzt `mdmManaged` auf true/false.
+- Schreibt `mdmDetectedAt` nur beim ersten Mal true (Audit-Trail).
+
+### 4.4 Auslesen
+
+`backend/server/api/protection/state.get.ts`:
+
+```ts
+const mdmManaged = profile?.mdmManaged ?? false;
+return {
+  data: {
+    protectionShouldBeActive,
+    cooldown: { ... },
+    plan,
+    mdmManaged,
+  },
+};
+```
+
+Jeder Consumer kann also über `GET /api/protection/state` prüfen, ob der aktuelle User MDM/NEFilter-geschützt ist.
+
+---
+
+## 5. Der DNS-Token-Handshake (separater Weg)
+
+Es gibt noch `ProtectedDevice` + `lastDnsQueryAt`, aber das ist ein **anderer Mechanismus**:
+
+- Genutzt für: Desktop-DNS-Schutz, Android-VPN, iOS Packet-Tunnel-Fallback.
+- Funktioniert über: `dnsToken` im DoH-Profil.
+- Endpoint: `POST /api/devices/protected/handshake` (server-to-server, aufgerufen vom DoH-Server).
+- DB: `backend/server/db/protectedDevices.ts`.
+
+Warum nicht für NEFilter?
+
+- Der `NEFilterDataProvider` lädt `blocklist.bin` direkt aus der App Group.
+- Er führt keine DNS-Queries gegen einen per-Device-DoH-Endpoint aus.
+- Darum kann er nicht über den DNS-Handshake tracked werden.
+
+**Fazit:** Für den NEFilter/Sideload-Profil-Pfad ist `profile.mdmManaged` die einzige sinnvolle Backend-Quelle.
+
+---
+
+## 6. Was das für ReBreak Magic bedeutet
+
+Aktuell setzt `backend/server/api/magic/devices/[deviceId]/mdm.get.ts` `lockProfileInstalled` aus `deviceProtectionState(nefilter)`. Das funktioniert nur, wenn ein Client aktiv reportet.
+
+Die iOS-App macht das bereits über `POST /api/users/me/mdm-status`. Für Magic/Mac gilt:
+
+- Wenn ein iPhone per USB erkannt wird, kann Magic prüfen, ob das Lock-Profil installiert ist (`installedProfileIDs` enthält `org.rebreak.protection.contentfilter.sideload`).
+- Um das Backend zu aktualisieren, **muss nicht zwingend ein neuer Endpoint** angelegt werden.
+- Mögliche Optionen:
+  1. Magic ruft ebenfalls `POST /api/users/me/mdm-status` mit `mdmManaged: true/false` auf (User-Scope, nicht Device-Scope).
+  2. Magic ruft den existierenden `POST /api/devices/protection-state` mit `protectionType: "nefilter"` auf (Device-Scope).
+  3. Backend `mdm.get.ts` könnte zusätzlich `profile.mdmManaged` berücksichtigen.
+
+Option 2 ist bereits vorhanden und am geräte-spezifischsten.
+
+---
+
+## 7. Wichtige Dateien im Überblick
+
+### Native iOS
+
+- `apps/rebreak-native/modules/rebreak-protection/ios/RebreakProtectionModule.swift`
+- `apps/rebreak-native/modules/rebreak-protection/ios/RebreakContentFilter/FilterDataProvider.swift`
+- `apps/rebreak-native/modules/rebreak-protection/ios/RebreakPacketTunnelExtension/PacketTunnelProvider.swift`
+- `apps/rebreak-native/modules/rebreak-protection/ios/RebreakPacketTunnelExtension/DnsFilter.swift`
+- `apps/rebreak-native/modules/rebreak-protection/ios/RebreakPacketTunnelExtension/HashList.swift`
+- `apps/rebreak-native/modules/rebreak-protection/ios/RebreakPacketTunnelExtension/DomainHasher.swift`
+- `apps/rebreak-native/plugins/with-rebreak-protection-ios.js`
+- `apps/rebreak-native/app.config.ts`
+
+### App-Logik
+
+- `apps/rebreak-native/app/(app)/blocker.tsx`
+- `apps/rebreak-native/hooks/useProtectionState.ts`
+- `apps/rebreak-native/lib/protection.ts`
+
+### Backend
+
+- `backend/server/api/users/me/mdm-status.post.ts`
+- `backend/server/api/protection/state.get.ts`
+- `backend/server/db/profile.ts`
+- `backend/server/api/devices/protection-state.post.ts`
+- `backend/server/db/device-protection.ts`
+- `backend/server/api/devices/protected/handshake.post.ts`
+- `backend/server/db/protectedDevices.ts`
+- `backend/server/api/magic/devices/[deviceId]/mdm.get.ts`
+
+---
+
+## 8. Zusammenfassung
+
+- NEFilter wird vom iOS-System über ein `webcontent-filter`-Profil aktiviert.
+- Die App erkennt ihn via `NEFilterManager.shared().loadFromPreferences()`.
+- Der Status fließt über den **bereits existierenden** Endpoint `POST /api/users/me/mdm-status` in `profile.mdmManaged`.
+- `GET /api/protection/state` liefert diesen Status zurück.
+- Kein neuer Backend-Endpoint nötig – nur der richtige Client-Aufruf bzw. die Verknüpfung in Magic/Mac.
+- `ProtectedDevice`/`lastDnsQueryAt` ist für den DNS/Packet-Tunnel-Pfad, nicht für NEFilter.
diff --git a/docs/superpowers/plans/2026-06-18-mdm-health-check.md b/docs/superpowers/plans/2026-06-18-mdm-health-check.md
new file mode 100644
index 0000000..ed40c3c
--- /dev/null
+++ b/docs/superpowers/plans/2026-06-18-mdm-health-check.md
@@ -0,0 +1,510 @@
+# MDM Healthcheck Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Ein Nitro-Cron-Healthcheck prüft alle 5 Minuten alle über `UserDevice.mdmId` mit NanoMDM verknüpften iOS-Geräte und persistiert Enrollment-, Supervision-Status sowie letzten Check-In auf `UserDevice`.
+
+**Architecture:** Ein neues Nitro-Plugin orchestriert den Lauf. `backend/server/db/mdm.ts` bekommt Bulk-Lesefunktionen für NanoMDM und ein Update für `UserDevice`. Die benötigten Spalten werden per Prisma-Migration auf `UserDevice` ergänzt. Keine neue Tabelle.
+
+**Tech Stack:** Nuxt/Nitro, Prisma, PostgreSQL (NanoMDM), TypeScript, Vitest.
+
+---
+
+## Files
+
+- `backend/prisma/schema.prisma` — `UserDevice` um `mdmEnrolled`, `mdmSupervised`, `mdmLastSeenAt` erweitern
+- `backend/prisma/migrations/20250618_add_mdm_health_columns/migration.sql` — idempotente Migration
+- `backend/server/db/mdm.ts` — Bulk-Abfrage von NanoMDM, Update der UserDevice-Health-Spalten
+- `backend/server/plugins/mdm-health-cron.ts` — 5-Minuten-Cron
+- `backend/tests/devices/mdm-health.test.ts` — Unit-Tests für DB-Layer und Cron-Logik
+
+---
+
+### Task 1: Extend UserDevice Prisma schema
+
+**Files:**
+- Modify: `backend/prisma/schema.prisma:1111-1114`
+
+- [ ] **Step 1: Add three new fields after `mdmId`**
+
+```prisma
+    // ─── NanoMDM iOS Enrollment ─────────────────────────────────────────────
+    /// Apple-Geräte-UDID wie von NanoMDM verwendet (z.B. 00008101-000544261E87001E).
+    /// NULL → Gerät ist nicht mit einem MDM-UDID verknüpft.
+    mdmId String? @map("mdm_id")
+
+    /// Gespiegelter Enrollment-Status aus NanoMDM enrollments.enabled.
+    mdmEnrolled Boolean? @map("mdm_enrolled")
+
+    /// Gespiegelter Supervision-Status aus NanoMDM devices.unlock_token IS NOT NULL.
+    mdmSupervised Boolean? @map("mdm_supervised")
+
+    /// Letzter NanoMDM Check-In (enrollments.last_seen_at).
+    mdmLastSeenAt DateTime? @map("mdm_last_seen_at") @db.Timestamptz(6)
+```
+
+- [ ] **Step 2: Validate schema**
+
+Run: `cd backend && pnpm prisma validate`
+Expected: `Prisma schema validation - (get config )`
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add backend/prisma/schema.prisma
+git commit -m "feat(mdm): add mdmEnrolled, mdmSupervised, mdmLastSeenAt to UserDevice schema"
+```
+
+---
+
+### Task 2: Create migration for MDM health columns
+
+**Files:**
+- Create: `backend/prisma/migrations/20250618_add_mdm_health_columns/migration.sql`
+
+- [ ] **Step 1: Write idempotent migration**
+
+```sql
+-- Spiegel-Spalten für NanoMDM Enrollment/Supervision-Status auf UserDevice.
+-- mdm_id wurde manuell hinzugefügt; IF NOT EXISTS macht die Migration idempotent.
+
+ALTER TABLE "rebreak"."user_devices"
+    ADD COLUMN IF NOT EXISTS "mdm_id" TEXT,
+    ADD COLUMN IF NOT EXISTS "mdm_enrolled" BOOLEAN,
+    ADD COLUMN IF NOT EXISTS "mdm_supervised" BOOLEAN,
+    ADD COLUMN IF NOT EXISTS "mdm_last_seen_at" TIMESTAMPTZ(6);
+
+CREATE INDEX IF NOT EXISTS "user_devices_mdm_id_idx"
+    ON "rebreak"."user_devices"("mdm_id");
+```
+
+- [ ] **Step 2: Apply migration locally**
+
+Run: `cd backend && pnpm prisma migrate dev --name add_mdm_health_columns`
+Expected: Migration applies successfully; Prisma Client is regenerated.
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add backend/prisma/migrations/20250618_add_mdm_health_columns
+git commit -m "feat(mdm): add migration for UserDevice MDM health columns"
+```
+
+---
+
+### Task 3: Extend mdm.ts DB layer
+
+**Files:**
+- Modify: `backend/server/db/mdm.ts`
+
+- [ ] **Step 1: Add types and select constant after `MdmDeviceStatus`**
+
+```typescript
+export interface MdmEnrollmentStatus {
+  enrolled: boolean;
+  supervised: boolean;
+  lastSeenAt: Date | null;
+}
+
+export interface UserDeviceMdmHealthRecord {
+  id: string;
+  userId: string;
+  deviceId: string;
+  platform: string;
+  mdmId: string;
+  mdmEnrolled: boolean | null;
+  mdmSupervised: boolean | null;
+  mdmLastSeenAt: Date | null;
+}
+
+const USER_DEVICE_MDM_HEALTH_SELECT = {
+  id: true,
+  userId: true,
+  deviceId: true,
+  platform: true,
+  mdmId: true,
+  mdmEnrolled: true,
+  mdmSupervised: true,
+  mdmLastSeenAt: true,
+} as const;
+```
+
+- [ ] **Step 2: Add `getLinkedUserDevices`**
+
+```typescript
+/**
+ * Load all iOS devices that have a NanoMDM UDID link.
+ */
+export async function getLinkedUserDevices(): Promise<UserDeviceMdmHealthRecord[]> {
+  const db = usePrisma();
+  return db.userDevice.findMany({
+    where: { platform: "ios", mdmId: { not: null } },
+    select: USER_DEVICE_MDM_HEALTH_SELECT,
+  }) as Promise<UserDeviceMdmHealthRecord[]>;
+}
+```
+
+- [ ] **Step 3: Add `getMdmEnrollmentStatusesByUdids`**
+
+```typescript
+/**
+ * Bulk-query NanoMDM for enrollment/supervision/last-seen status.
+ * Returns a map keyed by UDID. Missing devices are omitted.
+ */
+export async function getMdmEnrollmentStatusesByUdids(
+  udids: string[],
+): Promise<Map<string, MdmEnrollmentStatus>> {
+  if (udids.length === 0) {
+    return new Map();
+  }
+
+  const pool = useMdmPool();
+  const result = await pool.query<{
+    udid: string;
+    enrolled: boolean;
+    supervised: boolean;
+    last_seen_at: Date | null;
+  }>(
+    `SELECT
+       d.id AS udid,
+       (e.enabled = TRUE) AS enrolled,
+       (d.unlock_token IS NOT NULL) AS supervised,
+       e.last_seen_at
+     FROM devices d
+     LEFT JOIN enrollments e ON e.device_id = d.id
+     WHERE d.id = ANY($1::text[])`,
+    [udids],
+  );
+
+  const map = new Map<string, MdmEnrollmentStatus>();
+  for (const row of result.rows) {
+    map.set(row.udid, {
+      enrolled: row.enrolled,
+      supervised: row.supervised,
+      lastSeenAt: row.last_seen_at,
+    });
+  }
+  return map;
+}
+```
+
+- [ ] **Step 4: Add `updateUserDeviceMdmHealth`**
+
+```typescript
+/**
+ * Persist mirrored MDM health status on a UserDevice row.
+ */
+export async function updateUserDeviceMdmHealth(
+  id: string,
+  status: MdmEnrollmentStatus,
+): Promise<void> {
+  const db = usePrisma();
+  await db.userDevice.update({
+    where: { id },
+    data: {
+      mdmEnrolled: status.enrolled,
+      mdmSupervised: status.supervised,
+      mdmLastSeenAt: status.lastSeenAt,
+    },
+  });
+}
+```
+
+- [ ] **Step 5: Run typecheck**
+
+Run: `cd backend && pnpm typecheck`
+Expected: No type errors.
+
+- [ ] **Step 6: Commit**
+
+```bash
+git add backend/server/db/mdm.ts
+git commit -m "feat(mdm): add bulk MDM health status read/write helpers"
+```
+
+---
+
+### Task 4: Create mdm-health-cron.ts plugin
+
+**Files:**
+- Create: `backend/server/plugins/mdm-health-cron.ts`
+
+- [ ] **Step 1: Write the cron plugin**
+
+```typescript
+/**
+ * MDM Healthcheck Cron
+ *
+ * Läuft alle 5 Minuten. Prüft für alle mit NanoMDM verknüpften iOS-Geräte
+ * den aktuellen Enrollment-/Supervision-Status und spiegelt ihn auf UserDevice.
+ */
+import { consola } from "consola";
+import {
+  getLinkedUserDevices,
+  getMdmEnrollmentStatusesByUdids,
+  updateUserDeviceMdmHealth,
+  type MdmEnrollmentStatus,
+} from "../db/mdm";
+
+const FIVE_MINUTES = 5 * 60 * 1000;
+const INITIAL_DELAY_MS = 30 * 1000;
+
+export default defineNitroPlugin((nitro) => {
+  if (import.meta.dev) {
+    consola.info("[mdm-health-cron] Skipping cron in dev mode");
+    return;
+  }
+
+  consola.info("[mdm-health-cron] Starting (5min interval)");
+
+  const initialTimer = setTimeout(() => {
+    runMdmHealthCheck().catch(() => {});
+  }, INITIAL_DELAY_MS);
+
+  const interval = setInterval(() => {
+    runMdmHealthCheck().catch(() => {});
+  }, FIVE_MINUTES);
+
+  nitro.hooks.hook("close", () => {
+    clearTimeout(initialTimer);
+    clearInterval(interval);
+  });
+});
+
+async function runMdmHealthCheck() {
+  const start = Date.now();
+  try {
+    const devices = await getLinkedUserDevices();
+    if (devices.length === 0) {
+      consola.info("[mdm-health-cron] No linked iOS devices");
+      return;
+    }
+
+    const statuses = await getMdmEnrollmentStatusesByUdids(
+      devices.map((d) => d.mdmId),
+    );
+
+    let updated = 0;
+    let unchanged = 0;
+
+    for (const device of devices) {
+      const status = statuses.get(device.mdmId) ?? {
+        enrolled: false,
+        supervised: false,
+        lastSeenAt: null,
+      };
+
+      const changed =
+        device.mdmEnrolled !== status.enrolled ||
+        device.mdmSupervised !== status.supervised ||
+        !sameNullableDate(device.mdmLastSeenAt, status.lastSeenAt);
+
+      if (changed) {
+        await updateUserDeviceMdmHealth(device.id, status);
+        updated++;
+      } else {
+        unchanged++;
+      }
+    }
+
+    consola.success(
+      `[mdm-health-cron] Checked ${devices.length} devices in ${Date.now() - start}ms (${updated} updated, ${unchanged} unchanged)`,
+    );
+  } catch (err: any) {
+    consola.error("[mdm-health-cron] run failed:", err?.message ?? err);
+  }
+}
+
+function sameNullableDate(a: Date | null, b: Date | null): boolean {
+  if (a === null && b === null) return true;
+  if (a === null || b === null) return false;
+  return a.getTime() === b.getTime();
+}
+```
+
+- [ ] **Step 2: Typecheck**
+
+Run: `cd backend && pnpm typecheck`
+Expected: No errors.
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add backend/server/plugins/mdm-health-cron.ts
+git commit -m "feat(mdm): add 5-minute MDM healthcheck cron"
+```
+
+---
+
+### Task 5: Write tests for MDM healthcheck
+
+**Files:**
+- Create: `backend/tests/devices/mdm-health.test.ts`
+
+- [ ] **Step 1: Write tests for DB helpers**
+
+```typescript
+/**
+ * Tests für MDM-Healthcheck DB-Layer.
+ */
+import { describe, expect, it, vi, beforeEach } from "vitest";
+import {
+  getLinkedUserDevices,
+  getMdmEnrollmentStatusesByUdids,
+  updateUserDeviceMdmHealth,
+} from "../../server/db/mdm";
+
+const mockPrisma = {
+  userDevice: {
+    findMany: vi.fn(),
+    update: vi.fn(),
+  },
+};
+
+vi.mock("../../server/utils/prisma", () => ({
+  usePrisma: () => mockPrisma,
+}));
+
+const mockPool = {
+  query: vi.fn(),
+};
+
+vi.mock("pg", () => ({
+  default: { Pool: vi.fn(() => mockPool) },
+  Pool: vi.fn(() => mockPool),
+}));
+
+vi.mock("../../server/utils/runtime-config", () => ({
+  useRuntimeConfig: () => ({ mdmDatabaseUrl: "postgres://fake" }),
+}));
+
+describe("getLinkedUserDevices", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it("returns only iOS devices with a non-null mdmId", async () => {
+    mockPrisma.userDevice.findMany.mockResolvedValue([
+      { id: "d1", userId: "u1", deviceId: "cap1", platform: "ios", mdmId: "udid-1", mdmEnrolled: true, mdmSupervised: true, mdmLastSeenAt: null },
+    ]);
+
+    const result = await getLinkedUserDevices();
+
+    expect(result).toHaveLength(1);
+    expect(result[0].mdmId).toBe("udid-1");
+    expect(mockPrisma.userDevice.findMany).toHaveBeenCalledWith(
+      expect.objectContaining({
+        where: { platform: "ios", mdmId: { not: null } },
+      }),
+    );
+  });
+});
+
+describe("getMdmEnrollmentStatusesByUdids", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it("returns an empty map for empty input", async () => {
+    const result = await getMdmEnrollmentStatusesByUdids([]);
+    expect(result.size).toBe(0);
+    expect(mockPool.query).not.toHaveBeenCalled();
+  });
+
+  it("maps NanoMDM rows to status objects", async () => {
+    const lastSeen = new Date("2026-06-15T11:25:00Z");
+    mockPool.query.mockResolvedValue({
+      rows: [
+        { udid: "udid-1", enrolled: true, supervised: true, last_seen_at: lastSeen },
+        { udid: "udid-2", enrolled: false, supervised: true, last_seen_at: null },
+      ],
+    });
+
+    const result = await getMdmEnrollmentStatusesByUdids(["udid-1", "udid-2"]);
+
+    expect(result.get("udid-1")).toEqual({ enrolled: true, supervised: true, lastSeenAt: lastSeen });
+    expect(result.get("udid-2")).toEqual({ enrolled: false, supervised: true, lastSeenAt: null });
+  });
+});
+
+describe("updateUserDeviceMdmHealth", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it("updates the mirrored status columns", async () => {
+    mockPrisma.userDevice.update.mockResolvedValue({ id: "d1" });
+
+    await updateUserDeviceMdmHealth("d1", {
+      enrolled: true,
+      supervised: false,
+      lastSeenAt: new Date("2026-06-15T11:25:00Z"),
+    });
+
+    expect(mockPrisma.userDevice.update).toHaveBeenCalledWith({
+      where: { id: "d1" },
+      data: {
+        mdmEnrolled: true,
+        mdmSupervised: false,
+        mdmLastSeenAt: new Date("2026-06-15T11:25:00Z"),
+      },
+    });
+  });
+});
+```
+
+- [ ] **Step 2: Run tests**
+
+Run: `cd backend && pnpm test backend/tests/devices/mdm-health.test.ts`
+Expected: All tests pass.
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add backend/tests/devices/mdm-health.test.ts
+git commit -m "test(mdm): add MDM healthcheck DB-layer tests"
+```
+
+---
+
+### Task 6: Apply migration and verify
+
+- [ ] **Step 1: Apply migration to the target database**
+
+Run: `cd backend && pnpm prisma migrate deploy`
+Expected: Migration `20250618_add_mdm_health_columns` applies successfully.
+
+- [ ] **Step 2: Regenerate Prisma Client**
+
+Run: `cd backend && pnpm prisma generate`
+Expected: Client generated.
+
+- [ ] **Step 3: Run full test suite (at least device tests)**
+
+Run: `cd backend && pnpm test backend/tests/devices/`
+Expected: All tests pass.
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add backend/prisma/schema.prisma backend/prisma/migrations backend/server/db/mdm.ts backend/server/plugins/mdm-health-cron.ts backend/tests/devices/mdm-health.test.ts
+git commit -m "feat(mdm): implement MDM healthcheck cron with mirrored status columns"
+```
+
+---
+
+## Self-Review
+
+**Spec coverage:**
+- Healthcheck runs every 5 minutes → Task 4.
+- Supervised devices checked → Task 3 query filters via `unlock_token IS NOT NULL`.
+- Enrollment status changes persisted → Task 3 `updateUserDeviceMdmHealth`.
+- No new table → only `UserDevice` columns added → Tasks 1-2.
+
+**Placeholder scan:**
+- No TBD/TODO/fill-in-details.
+- All code blocks contain concrete implementation.
+
+**Type consistency:**
+- `MdmEnrollmentStatus` used consistently across Tasks 3, 4, 5.
+- Column names `mdmEnrolled`, `mdmSupervised`, `mdmLastSeenAt` match in schema, migration, DB layer, tests.