@base44-preview/cli 0.0.51-pr.503.9478486 → 0.0.51-pr.503.c2ae47f

package/dist/cli/index.js

@@ -988,7 +988,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
         this._exitCallback = (err) => {
           if (err.code !== "commander.executeSubCommandAsync") {
             throw err;
-          } else {}
+          }
         };
       }
       return this;
@@ -8933,10 +8933,10 @@ var require_ejs = __commonJS((exports) => {
   exports.localsName = _DEFAULT_LOCALS_NAME;
   exports.promiseImpl = new Function("return this;")().Promise;
   exports.resolveInclude = function(name2, filename, isDir) {
-    var dirname6 = path11.dirname;
+    var dirname7 = path11.dirname;
     var extname = path11.extname;
     var resolve2 = path11.resolve;
-    var includePath = resolve2(isDir ? filename : dirname6(filename), name2);
+    var includePath = resolve2(isDir ? filename : dirname7(filename), name2);
     var ext = extname(name2);
     if (!ext) {
       includePath += ".ejs";
@@ -16067,7 +16067,7 @@ var require_lodash = __commonJS((exports, module) => {
         }
         return mapped.length && mapped[0] === arrays[0] ? baseIntersection(mapped, undefined2, comparator) : [];
       });
-      function join12(array2, separator) {
+      function join13(array2, separator) {
         return array2 == null ? "" : nativeJoin.call(array2, separator);
       }
       function last(array2) {
@@ -17999,7 +17999,7 @@ __p += '`;
       lodash.isUndefined = isUndefined;
       lodash.isWeakMap = isWeakMap;
       lodash.isWeakSet = isWeakSet;
-      lodash.join = join12;
+      lodash.join = join13;
       lodash.kebabCase = kebabCase;
       lodash.last = last;
       lodash.lastIndexOf = lastIndexOf;
@@ -27503,7 +27503,7 @@ function cleanDoc(doc2) {
   return mapDoc(doc2, (currentDoc) => cleanDocFn(currentDoc));
 }
 function replaceEndOfLine(doc2, replacement = literalline) {
-  return mapDoc(doc2, (currentDoc) => typeof currentDoc === "string" ? join19(replacement, currentDoc.split(`
+  return mapDoc(doc2, (currentDoc) => typeof currentDoc === "string" ? join21(replacement, currentDoc.split(`
 `)) : currentDoc);
 }
 function canBreakFn(doc2) {
@@ -27583,7 +27583,7 @@ function indentIfBreak(contents, options) {
     negate: options.negate
   };
 }
-function join19(separator, docs) {
+function join21(separator, docs) {
   assertDoc(separator);
   assertDocArray(docs);
   const parts = [];
@@ -28294,7 +28294,7 @@ var init_doc = __esm(() => {
   MODE_FLAT = Symbol("MODE_FLAT");
   DOC_FILL_PRINTED_LENGTH = Symbol("DOC_FILL_PRINTED_LENGTH");
   builders = {
-    join: join19,
+    join: join21,
     line,
     softline,
     hardline,
@@ -133208,7 +133208,7 @@ Expected it to be ${EXPECTED_TYPE_VALUES}.`;
       return mapDoc2(doc2, (currentDoc) => cleanDocFn2(currentDoc));
     }
     function replaceEndOfLine2(doc2, replacement = literalline2) {
-      return mapDoc2(doc2, (currentDoc) => typeof currentDoc === "string" ? join21(replacement, currentDoc.split(`
+      return mapDoc2(doc2, (currentDoc) => typeof currentDoc === "string" ? join23(replacement, currentDoc.split(`
 `)) : currentDoc);
     }
     function canBreakFn2(doc2) {
@@ -133294,7 +133294,7 @@ Expected it to be ${EXPECTED_TYPE_VALUES}.`;
         negate: options8.negate
       };
     }
-    function join21(separator, docs) {
+    function join23(separator, docs) {
       assertDoc2(separator);
       assertDocArray2(docs);
       const parts = [];
@@ -133959,7 +133959,7 @@ Expected it to be ${EXPECTED_TYPE_VALUES}.`;
       }
     }
     var builders2 = {
-      join: join21,
+      join: join23,
       line: line3,
       softline: softline2,
       hardline: hardline4,
@@ -134606,7 +134606,7 @@ var require_prettier = __commonJS((exports, module) => {
     prettier.util = (init_public(), __toCommonJS(public_exports3));
     prettier.doc = require_doc();
     prettier.version = (init_version_evaluate(), __toCommonJS(version_evaluate_exports)).default;
-  } else {}
+  }
   module.exports = prettier;
 });
 
@@ -134614,11 +134614,11 @@ var require_prettier = __commonJS((exports, module) => {
 var require_formatter = __commonJS((exports) => {
   var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P9, generator) {
     function adopt(value) {
-      return value instanceof P9 ? value : new P9(function(resolve8) {
-        resolve8(value);
+      return value instanceof P9 ? value : new P9(function(resolve9) {
+        resolve9(value);
       });
     }
-    return new (P9 || (P9 = Promise))(function(resolve8, reject) {
+    return new (P9 || (P9 = Promise))(function(resolve9, reject) {
       function fulfilled(value) {
         try {
           step(generator.next(value));
@@ -134634,7 +134634,7 @@ var require_formatter = __commonJS((exports) => {
         }
       }
       function step(result) {
-        result.done ? resolve8(result.value) : adopt(result.value).then(fulfilled, rejected);
+        result.done ? resolve9(result.value) : adopt(result.value).then(fulfilled, rejected);
       }
       step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
@@ -139287,7 +139287,7 @@ var require_url = __commonJS((exports) => {
   };
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.parse = undefined;
-  exports.resolve = resolve8;
+  exports.resolve = resolve9;
   exports.cwd = cwd;
   exports.getProtocol = getProtocol;
   exports.getExtension = getExtension;
@@ -139315,7 +139315,7 @@ var require_url = __commonJS((exports) => {
   var urlDecodePatterns = [/%23/g, "#", /%24/g, "$", /%26/g, "&", /%2C/g, ",", /%40/g, "@"];
   var parse11 = (u4) => new URL(u4);
   exports.parse = parse11;
-  function resolve8(from, to5) {
+  function resolve9(from, to5) {
     const fromUrl = new URL((0, convert_path_to_posix_1.default)(from), "https://aaa.nonexistanturl.com");
     const resolvedUrl = new URL((0, convert_path_to_posix_1.default)(to5), fromUrl);
     const endSpaces = to5.match(/(\s*)$/)?.[1] || "";
@@ -139451,7 +139451,7 @@ var require_url = __commonJS((exports) => {
   }
   function relative4(from, to5) {
     if (!isFileSystemPath(from) || !isFileSystemPath(to5)) {
-      return resolve8(from, to5);
+      return resolve9(from, to5);
     }
     const fromDir = path_1.default.dirname(stripHash(from));
     const toPath4 = stripHash(to5);
@@ -140127,7 +140127,7 @@ var require_plugins = __commonJS((exports) => {
     let plugin;
     let lastError;
     let index = 0;
-    return new Promise((resolve8, reject) => {
+    return new Promise((resolve9, reject) => {
       runNextPlugin();
       function runNextPlugin() {
         plugin = plugins[index++];
@@ -140155,7 +140155,7 @@ var require_plugins = __commonJS((exports) => {
         }
       }
       function onSuccess(result) {
-        resolve8({
+        resolve9({
           plugin,
           result
         });
@@ -141488,11 +141488,11 @@ var require_lib3 = __commonJS((exports) => {
 var require_resolver = __commonJS((exports) => {
   var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P9, generator) {
     function adopt(value) {
-      return value instanceof P9 ? value : new P9(function(resolve8) {
-        resolve8(value);
+      return value instanceof P9 ? value : new P9(function(resolve9) {
+        resolve9(value);
       });
     }
-    return new (P9 || (P9 = Promise))(function(resolve8, reject) {
+    return new (P9 || (P9 = Promise))(function(resolve9, reject) {
       function fulfilled(value) {
         try {
           step(generator.next(value));
@@ -141508,7 +141508,7 @@ var require_resolver = __commonJS((exports) => {
         }
       }
       function step(result) {
-        result.done ? resolve8(result.value) : adopt(result.value).then(fulfilled, rejected);
+        result.done ? resolve9(result.value) : adopt(result.value).then(fulfilled, rejected);
       }
       step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
@@ -141629,11 +141629,11 @@ var require_optionValidator = __commonJS((exports) => {
 var require_src3 = __commonJS((exports) => {
   var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P9, generator) {
     function adopt(value) {
-      return value instanceof P9 ? value : new P9(function(resolve8) {
-        resolve8(value);
+      return value instanceof P9 ? value : new P9(function(resolve9) {
+        resolve9(value);
       });
     }
-    return new (P9 || (P9 = Promise))(function(resolve8, reject) {
+    return new (P9 || (P9 = Promise))(function(resolve9, reject) {
       function fulfilled(value) {
         try {
           step(generator.next(value));
@@ -141649,7 +141649,7 @@ var require_src3 = __commonJS((exports) => {
         }
       }
       function step(result) {
-        result.done ? resolve8(result.value) : adopt(result.value).then(fulfilled, rejected);
+        result.done ? resolve9(result.value) : adopt(result.value).then(fulfilled, rejected);
       }
       step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
@@ -145360,7 +145360,7 @@ var require_dbcs_codec = __commonJS((exports) => {
           if (resCode !== undefined) {
             dbcsCode = resCode;
             nextChar = uCode;
-          } else {}
+          }
         }
         seqObj = undefined;
       } else if (uCode >= 0) {
@@ -145425,7 +145425,7 @@ var require_dbcs_codec = __commonJS((exports) => {
           newBuf[j10++] = dbcsCode >> 8;
           newBuf[j10++] = dbcsCode & 255;
         }
-      } else {}
+      }
       this.seqObj = undefined;
     }
     if (this.leadSurrogate !== -1) {
@@ -147274,11 +147274,11 @@ var require_raw_body = __commonJS((exports, module) => {
     if (done) {
       return readStream(stream, encoding, length, limit, wrap(done));
     }
-    return new Promise(function executor(resolve8, reject) {
+    return new Promise(function executor(resolve9, reject) {
       readStream(stream, encoding, length, limit, function onRead2(err, buf) {
         if (err)
           return reject(err);
-        resolve8(buf);
+        resolve9(buf);
       });
     });
   }
@@ -160399,11 +160399,11 @@ var require_view = __commonJS((exports, module) => {
   var debug = require_src4()("express:view");
   var path18 = __require("node:path");
   var fs28 = __require("node:fs");
-  var dirname15 = path18.dirname;
+  var dirname17 = path18.dirname;
   var basename4 = path18.basename;
   var extname2 = path18.extname;
-  var join22 = path18.join;
-  var resolve8 = path18.resolve;
+  var join24 = path18.join;
+  var resolve9 = path18.resolve;
   module.exports = View;
   function View(name2, options8) {
     var opts = options8 || {};
@@ -160437,8 +160437,8 @@ var require_view = __commonJS((exports, module) => {
     debug('lookup "%s"', name2);
     for (var i5 = 0;i5 < roots.length && !path19; i5++) {
       var root2 = roots[i5];
-      var loc = resolve8(root2, name2);
-      var dir = dirname15(loc);
+      var loc = resolve9(root2, name2);
+      var dir = dirname17(loc);
       var file2 = basename4(loc);
       path19 = this.resolve(dir, file2);
     }
@@ -160462,14 +160462,14 @@ var require_view = __commonJS((exports, module) => {
     });
     sync = false;
   };
-  View.prototype.resolve = function resolve9(dir, file2) {
+  View.prototype.resolve = function resolve10(dir, file2) {
     var ext = this.ext;
-    var path19 = join22(dir, file2);
+    var path19 = join24(dir, file2);
     var stat2 = tryStat(path19);
     if (stat2 && stat2.isFile()) {
       return path19;
     }
-    path19 = join22(dir, basename4(file2, ext), "index" + ext);
+    path19 = join24(dir, basename4(file2, ext), "index" + ext);
     stat2 = tryStat(path19);
     if (stat2 && stat2.isFile()) {
       return path19;
@@ -162621,7 +162621,7 @@ var require_application = __commonJS((exports, module) => {
   var compileETag = require_utils10().compileETag;
   var compileQueryParser = require_utils10().compileQueryParser;
   var compileTrust = require_utils10().compileTrust;
-  var resolve8 = __require("node:path").resolve;
+  var resolve9 = __require("node:path").resolve;
   var once9 = require_once();
   var Router = require_router();
   var slice = Array.prototype.slice;
@@ -162675,7 +162675,7 @@ var require_application = __commonJS((exports, module) => {
     this.mountpath = "/";
     this.locals.settings = this.settings;
     this.set("view", View);
-    this.set("views", resolve8("views"));
+    this.set("views", resolve9("views"));
     this.set("jsonp callback name", "callback");
     if (env3 === "production") {
       this.enable("view cache");
@@ -164164,9 +164164,9 @@ var require_send = __commonJS((exports, module) => {
   var Stream2 = __require("stream");
   var util2 = __require("util");
   var extname2 = path18.extname;
-  var join22 = path18.join;
+  var join24 = path18.join;
   var normalize2 = path18.normalize;
-  var resolve8 = path18.resolve;
+  var resolve9 = path18.resolve;
   var sep = path18.sep;
   var BYTES_RANGE_REGEXP = /^ *bytes=/;
   var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1000;
@@ -164195,7 +164195,7 @@ var require_send = __commonJS((exports, module) => {
     this._maxage = opts.maxAge || opts.maxage;
     this._maxage = typeof this._maxage === "string" ? ms8(this._maxage) : Number(this._maxage);
     this._maxage = !isNaN(this._maxage) ? Math.min(Math.max(0, this._maxage), MAX_MAXAGE) : 0;
-    this._root = opts.root ? resolve8(opts.root) : null;
+    this._root = opts.root ? resolve9(opts.root) : null;
   }
   util2.inherits(SendStream, Stream2);
   SendStream.prototype.error = function error48(status, err) {
@@ -164336,7 +164336,7 @@ var require_send = __commonJS((exports, module) => {
         return res;
       }
       parts = path19.split(sep);
-      path19 = normalize2(join22(root2, path19));
+      path19 = normalize2(join24(root2, path19));
     } else {
       if (UP_PATH_REGEXP.test(path19)) {
         debug('malicious path "%s"', path19);
@@ -164344,7 +164344,7 @@ var require_send = __commonJS((exports, module) => {
         return res;
       }
       parts = normalize2(path19).split(sep);
-      path19 = resolve8(path19);
+      path19 = resolve9(path19);
     }
     if (containsDotFile(parts)) {
       debug('%s dotfile "%s"', this._dotfiles, path19);
@@ -164476,7 +164476,7 @@ var require_send = __commonJS((exports, module) => {
           return self2.onStatError(err);
         return self2.error(404);
       }
-      var p4 = join22(path19, self2._index[i5]);
+      var p4 = join24(path19, self2._index[i5]);
       debug('stat "%s"', p4);
       fs28.stat(p4, function(err2, stat2) {
         if (err2)
@@ -164672,7 +164672,7 @@ var require_response = __commonJS((exports, module) => {
   var cookie = require_cookie();
   var send = require_send();
   var extname2 = path18.extname;
-  var resolve8 = path18.resolve;
+  var resolve9 = path18.resolve;
   var vary = require_vary();
   var { Buffer: Buffer7 } = __require("node:buffer");
   var res = Object.create(http.ServerResponse.prototype);
@@ -164881,7 +164881,7 @@ var require_response = __commonJS((exports, module) => {
     }
     opts = Object.create(opts);
     opts.headers = headers;
-    var fullPath = !opts.root ? resolve8(path19) : path19;
+    var fullPath = !opts.root ? resolve9(path19) : path19;
     return this.sendFile(fullPath, opts, done);
   };
   res.contentType = res.type = function contentType(type) {
@@ -165142,7 +165142,7 @@ var require_serve_static = __commonJS((exports, module) => {
   var encodeUrl = require_encodeurl();
   var escapeHtml = require_escape_html();
   var parseUrl = require_parseurl();
-  var resolve8 = __require("path").resolve;
+  var resolve9 = __require("path").resolve;
   var send = require_send();
   var url3 = __require("url");
   module.exports = serveStatic;
@@ -165161,7 +165161,7 @@ var require_serve_static = __commonJS((exports, module) => {
       throw new TypeError("option setHeaders must be function");
     }
     opts.maxage = opts.maxage || opts.maxAge || 0;
-    opts.root = resolve8(root2);
+    opts.root = resolve9(root2);
     var onDirectory = redirect ? createRedirectDirectoryListener() : createNotFoundDirectoryListener();
     return function serveStatic2(req, res, next) {
       if (req.method !== "GET" && req.method !== "HEAD") {
@@ -168535,8 +168535,8 @@ var require_executor = __commonJS((exports, module) => {
     }
     resetBuffer() {
       this.buffer = new Waterfall;
-      this.buffer.chain(new Promise((resolve8) => {
-        this._triggerBuffer = resolve8;
+      this.buffer.chain(new Promise((resolve9) => {
+        this._triggerBuffer = resolve9;
       }));
       if (this.ready)
         this._triggerBuffer();
@@ -169556,7 +169556,7 @@ var require_storage = __commonJS((exports, module) => {
       throw e8;
     }
   };
-  var writeFileLinesAsync = (filename, lines, mode = DEFAULT_FILE_MODE) => new Promise((resolve8, reject) => {
+  var writeFileLinesAsync = (filename, lines, mode = DEFAULT_FILE_MODE) => new Promise((resolve9, reject) => {
     try {
       const stream = writeFileStream(filename, { mode });
       const readable2 = Readable6.from(lines);
@@ -169573,7 +169573,7 @@ var require_storage = __commonJS((exports, module) => {
           if (err)
             reject(err);
           else
-            resolve8();
+            resolve9();
         });
       });
       readable2.on("error", (err) => {
@@ -169744,7 +169744,7 @@ var require_persistence = __commonJS((exports, module) => {
       return { data: tdata, indexes };
     }
     treatRawStreamAsync(rawStream) {
-      return new Promise((resolve8, reject) => {
+      return new Promise((resolve9, reject) => {
         const dataById = {};
         const indexes = {};
         let corruptItems = 0;
@@ -169787,7 +169787,7 @@ var require_persistence = __commonJS((exports, module) => {
             }
           }
           const data = Object.values(dataById);
-          resolve8({ data, indexes });
+          resolve9({ data, indexes });
         });
         lineStream.on("error", function(err) {
           reject(err, null);
@@ -190013,7 +190013,7 @@ var require_socket = __commonJS((exports) => {
         } else {
           this.remoteAddress = req.connection.remoteAddress;
         }
-      } else {}
+      }
       this.pingTimeoutTimer = null;
       this.pingIntervalTimer = null;
       this.setTransport(transport);
@@ -195398,13 +195398,13 @@ var require_broadcast_operator = __commonJS((exports) => {
       return true;
     }
     emitWithAck(ev2, ...args) {
-      return new Promise((resolve8, reject) => {
+      return new Promise((resolve9, reject) => {
         args.push((err, responses) => {
           if (err) {
             err.responses = responses;
             return reject(err);
           } else {
-            return resolve8(responses);
+            return resolve9(responses);
           }
         });
         this.emit(ev2, ...args);
@@ -195592,12 +195592,12 @@ var require_socket2 = __commonJS((exports) => {
     }
     emitWithAck(ev2, ...args) {
       const withErr = this.flags.timeout !== undefined;
-      return new Promise((resolve8, reject) => {
+      return new Promise((resolve9, reject) => {
         args.push((arg1, arg2) => {
           if (withErr) {
-            return arg1 ? reject(arg1) : resolve8(arg2);
+            return arg1 ? reject(arg1) : resolve9(arg2);
           } else {
-            return resolve8(arg1);
+            return resolve9(arg1);
           }
         });
         this.emit(ev2, ...args);
@@ -196052,13 +196052,13 @@ var require_namespace = __commonJS((exports) => {
       return true;
     }
     serverSideEmitWithAck(ev2, ...args) {
-      return new Promise((resolve8, reject) => {
+      return new Promise((resolve9, reject) => {
         args.push((err, responses) => {
           if (err) {
             err.responses = responses;
             return reject(err);
           } else {
-            return resolve8(responses);
+            return resolve9(responses);
           }
         });
         this.serverSideEmit(ev2, ...args);
@@ -196742,7 +196742,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         return localSockets;
       }
       const requestId = randomId();
-      return new Promise((resolve8, reject) => {
+      return new Promise((resolve9, reject) => {
         const timeout3 = setTimeout(() => {
           const storedRequest2 = this.requests.get(requestId);
           if (storedRequest2) {
@@ -196752,7 +196752,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         }, opts.flags.timeout || DEFAULT_TIMEOUT);
         const storedRequest = {
           type: MessageType.FETCH_SOCKETS,
-          resolve: resolve8,
+          resolve: resolve9,
           timeout: timeout3,
           current: 0,
           expected: expectedResponseCount,
@@ -196962,7 +196962,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         return localSockets;
       }
       const requestId = randomId();
-      return new Promise((resolve8, reject) => {
+      return new Promise((resolve9, reject) => {
         const timeout3 = setTimeout(() => {
           const storedRequest2 = this.customRequests.get(requestId);
           if (storedRequest2) {
@@ -196972,7 +196972,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         }, opts.flags.timeout || DEFAULT_TIMEOUT);
         const storedRequest = {
           type: MessageType.FETCH_SOCKETS,
-          resolve: resolve8,
+          resolve: resolve9,
           timeout: timeout3,
           missingUids: new Set([...this.nodesMap.keys()]),
           responses: localSockets
@@ -197701,13 +197701,13 @@ var require_dist4 = __commonJS((exports, module) => {
       this.engine.close();
       (0, uws_1.restoreAdapter)();
       if (this.httpServer) {
-        return new Promise((resolve8) => {
+        return new Promise((resolve9) => {
           this.httpServer.close((err) => {
             fn9 && fn9(err);
             if (err) {
               debug("server was not running");
             }
-            resolve8();
+            resolve9();
           });
         });
       } else {
@@ -214616,7 +214616,7 @@ var require_buffer_list = __commonJS((exports, module) => {
       }
     }, {
       key: "join",
-      value: function join22(s5) {
+      value: function join24(s5) {
         if (this.length === 0)
           return "";
         var p4 = this.head;
@@ -215914,14 +215914,14 @@ var require_async_iterator = __commonJS((exports, module) => {
     };
   }
   function readAndResolve(iter) {
-    var resolve8 = iter[kLastResolve];
-    if (resolve8 !== null) {
+    var resolve9 = iter[kLastResolve];
+    if (resolve9 !== null) {
       var data = iter[kStream].read();
       if (data !== null) {
         iter[kLastPromise] = null;
         iter[kLastResolve] = null;
         iter[kLastReject] = null;
-        resolve8(createIterResult(data, false));
+        resolve9(createIterResult(data, false));
       }
     }
   }
@@ -215929,13 +215929,13 @@ var require_async_iterator = __commonJS((exports, module) => {
     process.nextTick(readAndResolve, iter);
   }
   function wrapForNext(lastPromise, iter) {
-    return function(resolve8, reject) {
+    return function(resolve9, reject) {
       lastPromise.then(function() {
         if (iter[kEnded]) {
-          resolve8(createIterResult(undefined, true));
+          resolve9(createIterResult(undefined, true));
           return;
         }
-        iter[kHandlePromise](resolve8, reject);
+        iter[kHandlePromise](resolve9, reject);
       }, reject);
     };
   }
@@ -215954,12 +215954,12 @@ var require_async_iterator = __commonJS((exports, module) => {
         return Promise.resolve(createIterResult(undefined, true));
       }
       if (this[kStream].destroyed) {
-        return new Promise(function(resolve8, reject) {
+        return new Promise(function(resolve9, reject) {
           process.nextTick(function() {
             if (_this[kError]) {
               reject(_this[kError]);
             } else {
-              resolve8(createIterResult(undefined, true));
+              resolve9(createIterResult(undefined, true));
             }
           });
         });
@@ -215982,13 +215982,13 @@ var require_async_iterator = __commonJS((exports, module) => {
     return this;
   }), _defineProperty(_Object$setPrototypeO, "return", function _return() {
     var _this2 = this;
-    return new Promise(function(resolve8, reject) {
+    return new Promise(function(resolve9, reject) {
       _this2[kStream].destroy(null, function(err) {
         if (err) {
           reject(err);
           return;
         }
-        resolve8(createIterResult(undefined, true));
+        resolve9(createIterResult(undefined, true));
       });
     });
   }), _Object$setPrototypeO), AsyncIteratorPrototype);
@@ -216010,15 +216010,15 @@ var require_async_iterator = __commonJS((exports, module) => {
       value: stream._readableState.endEmitted,
       writable: true
     }), _defineProperty(_Object$create, kHandlePromise, {
-      value: function value(resolve8, reject) {
+      value: function value(resolve9, reject) {
         var data = iterator[kStream].read();
         if (data) {
           iterator[kLastPromise] = null;
           iterator[kLastResolve] = null;
           iterator[kLastReject] = null;
-          resolve8(createIterResult(data, false));
+          resolve9(createIterResult(data, false));
         } else {
-          iterator[kLastResolve] = resolve8;
+          iterator[kLastResolve] = resolve9;
           iterator[kLastReject] = reject;
         }
       },
@@ -216037,12 +216037,12 @@ var require_async_iterator = __commonJS((exports, module) => {
         iterator[kError] = err;
         return;
       }
-      var resolve8 = iterator[kLastResolve];
-      if (resolve8 !== null) {
+      var resolve9 = iterator[kLastResolve];
+      if (resolve9 !== null) {
         iterator[kLastPromise] = null;
         iterator[kLastResolve] = null;
         iterator[kLastReject] = null;
-        resolve8(createIterResult(undefined, true));
+        resolve9(createIterResult(undefined, true));
       }
       iterator[kEnded] = true;
     });
@@ -216054,7 +216054,7 @@ var require_async_iterator = __commonJS((exports, module) => {
 
 // ../../node_modules/readable-stream/lib/internal/streams/from.js
 var require_from = __commonJS((exports, module) => {
-  function asyncGeneratorStep(gen, resolve8, reject, _next, _throw, key2, arg) {
+  function asyncGeneratorStep(gen, resolve9, reject, _next, _throw, key2, arg) {
     try {
       var info = gen[key2](arg);
       var value = info.value;
@@ -216063,7 +216063,7 @@ var require_from = __commonJS((exports, module) => {
       return;
     }
     if (info.done) {
-      resolve8(value);
+      resolve9(value);
     } else {
       Promise.resolve(value).then(_next, _throw);
     }
@@ -216071,13 +216071,13 @@ var require_from = __commonJS((exports, module) => {
   function _asyncToGenerator(fn9) {
     return function() {
       var self2 = this, args = arguments;
-      return new Promise(function(resolve8, reject) {
+      return new Promise(function(resolve9, reject) {
         var gen = fn9.apply(self2, args);
         function _next(value) {
-          asyncGeneratorStep(gen, resolve8, reject, _next, _throw, "next", value);
+          asyncGeneratorStep(gen, resolve9, reject, _next, _throw, "next", value);
         }
         function _throw(err) {
-          asyncGeneratorStep(gen, resolve8, reject, _next, _throw, "throw", err);
+          asyncGeneratorStep(gen, resolve9, reject, _next, _throw, "throw", err);
         }
         _next(undefined);
       });
@@ -218270,7 +218270,7 @@ var require_dist5 = __commonJS((exports, module) => {
 });
 
 // src/cli/index.ts
-import { dirname as dirname19, join as join25 } from "node:path";
+import { dirname as dirname21, join as join27 } from "node:path";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 
 // ../../node_modules/@clack/core/dist/index.mjs
@@ -219478,7 +219478,7 @@ var {
 } = import__.default;
 
 // src/cli/commands/agents/pull.ts
-import { dirname as dirname7, join as join12 } from "node:path";
+import { dirname as dirname8, join as join13 } from "node:path";
 // ../../node_modules/chalk/source/vendor/ansi-styles/index.js
 var ANSI_BACKGROUND_OFFSET = 10;
 var wrapAnsi16 = (offset = 0) => (code) => `\x1B[${code + offset}m`;
@@ -231128,7 +231128,7 @@ function finalize(ctx, schema) {
     result.$schema = "http://json-schema.org/draft-07/schema#";
   } else if (ctx.target === "draft-04") {
     result.$schema = "http://json-schema.org/draft-04/schema#";
-  } else if (ctx.target === "openapi-3.0") {} else {}
+  } else if (ctx.target === "openapi-3.0") {}
   if (ctx.external?.uri) {
     const id = ctx.external.registry.get(schema)?.id;
     if (!id)
@@ -231376,7 +231376,7 @@ var literalProcessor = (schema, ctx, json, _params) => {
     if (val === undefined) {
       if (ctx.unrepresentable === "throw") {
         throw new Error("Literal `undefined` cannot be represented in JSON Schema");
-      } else {}
+      }
     } else if (typeof val === "bigint") {
       if (ctx.unrepresentable === "throw") {
         throw new Error("BigInt literals cannot be represented in JSON Schema");
@@ -234622,6 +234622,12 @@ var SiteConfigSchema = exports_external.object({
   outputDirectory: exports_external.string().optional(),
   installCommand: exports_external.string().optional()
 });
+var PluginMetadataSchema = exports_external.object({
+  id: exports_external.string().min(1, "Plugin id cannot be empty").regex(/^[a-zA-Z0-9_-]+$/, "Plugin id can only contain letters, numbers, underscores, and dashes")
+});
+var PluginReferenceSchema = exports_external.object({
+  source: exports_external.string().min(1, "Plugin source cannot be empty")
+});
 var ProjectConfigSchema = exports_external.object({
   name: exports_external.string({
     error: "App name cannot be empty"
@@ -234633,7 +234639,8 @@ var ProjectConfigSchema = exports_external.object({
   agentsDir: exports_external.string().optional().default("agents"),
   connectorsDir: exports_external.string().optional().default("connectors"),
   authDir: exports_external.string().optional().default("auth"),
-  plugins: exports_external.array(exports_external.string()).optional().default([])
+  plugin: PluginMetadataSchema.optional(),
+  plugins: exports_external.array(PluginReferenceSchema).optional().default([])
 });
 var AppConfigSchema = exports_external.object({
   id: exports_external.string().min(1, "id cannot be empty")
@@ -241580,8 +241587,43 @@ var generateGlobTasks = normalizeArguments(generateTasks);
 var generateGlobTasksSync = normalizeArgumentsSync(generateTasksSync);
 
 // src/core/project/config.ts
+import { dirname as dirname6, join as join9 } from "node:path";
+
+// src/core/project/plugins.ts
 import { createRequire as createRequire2 } from "node:module";
-import { dirname as dirname5, join as join8, resolve } from "node:path";
+import { dirname as dirname3, join as join3, resolve } from "node:path";
+function resolvePluginRoot(pluginSource, fromRoot) {
+  if (pluginSource.startsWith(".")) {
+    return resolve(fromRoot, pluginSource);
+  }
+  const req = createRequire2(join3(fromRoot, "package.json"));
+  return dirname3(req.resolve(`${pluginSource}/package.json`));
+}
+function requirePluginId(project, pluginSource, configPath) {
+  if (!project.plugin?.id) {
+    throw new ConfigInvalidError(`Plugin loaded from "${pluginSource}" must define plugin.id`, configPath);
+  }
+  return project.plugin.id;
+}
+function namespacePluginFunctions(functions, pluginId) {
+  return functions.map((fn) => ({
+    ...fn,
+    name: `${pluginId}__${fn.name}`,
+    source: {
+      type: "plugin",
+      id: pluginId
+    }
+  }));
+}
+function markPluginEntities(entities, pluginId) {
+  return entities.map((entity) => ({
+    ...entity,
+    source: {
+      type: "plugin",
+      id: pluginId
+    }
+  }));
+}
 
 // src/core/resources/agent/schema.ts
 var EntityOperationSchema = exports_external.enum(["create", "update", "delete", "read"]);
@@ -241653,7 +241695,7 @@ async function fetchAgents() {
   return result.data;
 }
 // src/core/resources/agent/config.ts
-import { join as join3, normalize } from "node:path";
+import { join as join4, normalize } from "node:path";
 import { isDeepStrictEqual } from "node:util";
 async function readAgentFile(agentPath) {
   const raw2 = await readJsonFile(agentPath);
@@ -241698,12 +241740,12 @@ async function readAllAgents(agentsDir) {
   return [...nameToEntry.values()].map((e2) => e2.data);
 }
 function findAvailablePath(agentsDir, name2, claimedPaths) {
-  const base = join3(agentsDir, `${name2}.${CONFIG_FILE_EXTENSION}`);
+  const base = join4(agentsDir, `${name2}.${CONFIG_FILE_EXTENSION}`);
   if (!claimedPaths.has(base)) {
     return base;
   }
   for (let i = 1;; i++) {
-    const candidate = join3(agentsDir, `${name2}_${i}.${CONFIG_FILE_EXTENSION}`);
+    const candidate = join4(agentsDir, `${name2}_${i}.${CONFIG_FILE_EXTENSION}`);
     if (!claimedPaths.has(candidate)) {
       return candidate;
     }
@@ -241849,7 +241891,7 @@ async function pushAuthConfigToApi(config3) {
   return result.data.authConfig;
 }
 // src/core/resources/auth-config/config.ts
-import { join as join4 } from "node:path";
+import { join as join5 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual2 } from "node:util";
 var AUTH_CONFIG_FILENAME = `config.${CONFIG_FILE_EXTENSION}`;
 var DEFAULT_AUTH_CONFIG = {
@@ -241865,7 +241907,7 @@ var DEFAULT_AUTH_CONFIG = {
   useWorkspaceSSO: false
 };
 function getAuthConfigPath(authDir) {
-  return join4(authDir, AUTH_CONFIG_FILENAME);
+  return join5(authDir, AUTH_CONFIG_FILENAME);
 }
 async function readAuthConfig(authDir) {
   const filePath = getAuthConfigPath(authDir);
@@ -241976,7 +242018,11 @@ async function updateSocialLoginConfig(authDir, provider, enable, customOAuth) {
   const current = await readAuthConfig(authDir) ?? DEFAULT_AUTH_CONFIG;
   const merged = {
     ...current,
-    [providerInfo.field]: enable
+    [providerInfo.field]: enable,
+    ...enable && {
+      enableSSOLogin: false,
+      ssoProviderName: null
+    }
   };
   if (providerInfo.customOAuth) {
     const oauth = providerInfo.customOAuth;
@@ -242000,6 +242046,192 @@ async function pushCustomOAuthSecret(provider, clientSecret) {
     [providerInfo.customOAuth.secretKey]: clientSecret
   });
 }
+// src/core/resources/auth-config/sso/secret-keys.ts
+var SSOSecretKey;
+((SSOSecretKey2) => {
+  SSOSecretKey2["Name"] = "sso_name";
+  SSOSecretKey2["ClientId"] = "sso_client_id";
+  SSOSecretKey2["ClientSecret"] = "sso_client_secret";
+  SSOSecretKey2["Scope"] = "sso_scope";
+  SSOSecretKey2["DiscoveryUrl"] = "sso_discovery_url";
+  SSOSecretKey2["TenantId"] = "sso_tenant_id";
+  SSOSecretKey2["AuthEndpoint"] = "sso_auth_endpoint";
+  SSOSecretKey2["TokenEndpoint"] = "sso_token_endpoint";
+  SSOSecretKey2["UserinfoEndpoint"] = "sso_userinfo_endpoint";
+  SSOSecretKey2["OktaDomain"] = "sso_okta_domain";
+  SSOSecretKey2["JwksUri"] = "sso_jwks_uri";
+})(SSOSecretKey ||= {});
+var ALL_SSO_SECRET_KEYS = Object.values(SSOSecretKey);
+var DEFAULT_OIDC_SCOPE = "openid email profile";
+var DEFAULT_GITHUB_SCOPE = "user:email";
+
+// src/core/resources/auth-config/sso/providers/custom.ts
+var customProvider = {
+  requiredKeys: [
+    "sso_auth_endpoint" /* AuthEndpoint */,
+    "sso_token_endpoint" /* TokenEndpoint */,
+    "sso_userinfo_endpoint" /* UserinfoEndpoint */,
+    "sso_jwks_uri" /* JwksUri */
+  ],
+  defaults: {
+    ["sso_scope" /* Scope */]: DEFAULT_OIDC_SCOPE
+  }
+};
+
+// src/core/resources/auth-config/sso/providers/github.ts
+var githubProvider = {
+  requiredKeys: [],
+  defaults: {
+    ["sso_scope" /* Scope */]: DEFAULT_GITHUB_SCOPE,
+    ["sso_auth_endpoint" /* AuthEndpoint */]: "https://github.com/login/oauth/authorize",
+    ["sso_token_endpoint" /* TokenEndpoint */]: "https://github.com/login/oauth/access_token",
+    ["sso_userinfo_endpoint" /* UserinfoEndpoint */]: "https://api.github.com/user"
+  }
+};
+
+// src/core/resources/auth-config/sso/providers/google.ts
+var googleProvider = {
+  requiredKeys: [],
+  defaults: {
+    ["sso_scope" /* Scope */]: DEFAULT_OIDC_SCOPE,
+    ["sso_discovery_url" /* DiscoveryUrl */]: "https://accounts.google.com/.well-known/openid-configuration"
+  }
+};
+
+// src/core/resources/auth-config/sso/providers/microsoft.ts
+var microsoftProvider = {
+  requiredKeys: ["sso_tenant_id" /* TenantId */],
+  defaults: {
+    ["sso_scope" /* Scope */]: DEFAULT_OIDC_SCOPE
+  },
+  deriveDefaults: (secrets) => {
+    const tenantId = secrets["sso_tenant_id" /* TenantId */];
+    if (tenantId) {
+      return {
+        ["sso_discovery_url" /* DiscoveryUrl */]: `https://login.microsoftonline.com/${tenantId}/v2.0/.well-known/openid-configuration`
+      };
+    }
+    return {};
+  }
+};
+
+// src/core/resources/auth-config/sso/providers/okta.ts
+var oktaProvider = {
+  requiredKeys: ["sso_okta_domain" /* OktaDomain */],
+  defaults: {
+    ["sso_scope" /* Scope */]: DEFAULT_OIDC_SCOPE
+  },
+  deriveDefaults: (secrets) => {
+    const domain2 = secrets["sso_okta_domain" /* OktaDomain */];
+    if (domain2) {
+      return {
+        ["sso_discovery_url" /* DiscoveryUrl */]: `https://${domain2}/.well-known/openid-configuration`
+      };
+    }
+    return {};
+  }
+};
+
+// src/core/resources/auth-config/sso/providers/index.ts
+var SSO_PROVIDER_SCHEMAS = {
+  google: googleProvider,
+  microsoft: microsoftProvider,
+  github: githubProvider,
+  okta: oktaProvider,
+  custom: customProvider
+};
+
+// src/core/resources/auth-config/sso/types.ts
+var KNOWN_SSO_PROVIDERS = {
+  google: "google",
+  microsoft: "microsoft",
+  github: "github",
+  okta: "okta",
+  custom: "custom"
+};
+
+// src/core/resources/auth-config/sso/operations.ts
+var OPTION_TO_SECRET_KEY = {
+  scope: "sso_scope" /* Scope */,
+  discoveryUrl: "sso_discovery_url" /* DiscoveryUrl */,
+  tenantId: "sso_tenant_id" /* TenantId */,
+  oktaDomain: "sso_okta_domain" /* OktaDomain */,
+  authEndpoint: "sso_auth_endpoint" /* AuthEndpoint */,
+  tokenEndpoint: "sso_token_endpoint" /* TokenEndpoint */,
+  userinfoEndpoint: "sso_userinfo_endpoint" /* UserinfoEndpoint */,
+  jwksUri: "sso_jwks_uri" /* JwksUri */
+};
+async function updateSSOConfig(authDir, provider, enable) {
+  const current = await readAuthConfig(authDir) ?? DEFAULT_AUTH_CONFIG;
+  const merged = {
+    ...current,
+    enableSSOLogin: enable,
+    ssoProviderName: enable && provider ? provider : null,
+    ...enable && {
+      enableGoogleLogin: false,
+      enableMicrosoftLogin: false,
+      enableFacebookLogin: false,
+      enableAppleLogin: false
+    }
+  };
+  await writeAuthConfig(authDir, merged);
+  return merged;
+}
+
+class MissingSSOFieldsError extends InvalidInputError {
+  missingKeys;
+  provider;
+  constructor(provider, missingKeys) {
+    super(`Missing required fields for ${provider}: ${missingKeys.join(", ")}`);
+    this.provider = provider;
+    this.missingKeys = missingKeys;
+  }
+}
+function buildSSOSecrets(provider, options) {
+  const schema3 = SSO_PROVIDER_SCHEMAS[provider];
+  const secrets = {};
+  secrets["sso_name" /* Name */] = options.ssoName ?? provider;
+  secrets["sso_client_id" /* ClientId */] = options.clientId;
+  secrets["sso_client_secret" /* ClientSecret */] = options.clientSecret;
+  for (const [optionKey, secretKey] of Object.entries(OPTION_TO_SECRET_KEY)) {
+    const value = options[optionKey];
+    if (typeof value === "string" && value.length > 0) {
+      secrets[secretKey] = value;
+    }
+  }
+  if (schema3.deriveDefaults) {
+    const derived = schema3.deriveDefaults(secrets);
+    for (const [key, val] of Object.entries(derived)) {
+      if (!secrets[key]) {
+        secrets[key] = val;
+      }
+    }
+  }
+  for (const [key, val] of Object.entries(schema3.defaults)) {
+    if (!secrets[key]) {
+      secrets[key] = val;
+    }
+  }
+  const missing = [];
+  for (const key of schema3.requiredKeys) {
+    if (!secrets[key]) {
+      missing.push(key);
+    }
+  }
+  if (provider === KNOWN_SSO_PROVIDERS.custom && !options.ssoName) {
+    missing.push("sso_name" /* Name */);
+  }
+  if (missing.length > 0) {
+    throw new MissingSSOFieldsError(provider, missing);
+  }
+  return Object.fromEntries(Object.entries(secrets).filter(([, v]) => v.length > 0));
+}
+async function pushSSOSecrets(secrets) {
+  await setSecrets(secrets);
+}
+async function deleteSSOSecrets() {
+  await Promise.allSettled(ALL_SSO_SECRET_KEYS.map((key) => deleteSecret(key)));
+}
 // src/core/resources/connector/schema.ts
 var GoogleCalendarConnectorSchema = exports_external.object({
   type: exports_external.literal("googlecalendar"),
@@ -242327,7 +242559,7 @@ async function removeStripe() {
   return result.data;
 }
 // src/core/resources/connector/config.ts
-import { join as join5 } from "node:path";
+import { join as join6 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual3 } from "node:util";
 async function readConnectorFile(connectorPath) {
   const parsed = await readJsonFile(connectorPath);
@@ -242388,7 +242620,7 @@ async function writeConnectors(connectorsDir, remoteConnectors) {
     if (existing && isDeepStrictEqual3(existing.data, connector)) {
       continue;
     }
-    const filePath = existing?.filePath ?? join5(connectorsDir, `${connector.type}.${CONFIG_FILE_EXTENSION}`);
+    const filePath = existing?.filePath ?? join6(connectorsDir, `${connector.type}.${CONFIG_FILE_EXTENSION}`);
     await writeJsonFile(filePath, connector);
     written.push(connector.type);
   }
@@ -242543,6 +242775,17 @@ var connectorResource = {
   readAll: readAllConnectors,
   push: pushConnectors
 };
+// src/core/resources/types.ts
+var ResourceSourceSchema = exports_external.discriminatedUnion("type", [
+  exports_external.object({
+    type: exports_external.literal("project")
+  }),
+  exports_external.object({
+    type: exports_external.literal("plugin"),
+    id: exports_external.string().min(1, "Plugin id cannot be empty")
+  })
+]);
+
 // src/core/resources/entity/schema.ts
 var FieldConditionSchema = exports_external.union([
   exports_external.string(),
@@ -242649,7 +242892,8 @@ var EntitySchema = exports_external.looseObject({
   description: exports_external.string().optional(),
   properties: exports_external.record(exports_external.string(), PropertyDefinitionSchema).default({}),
   required: exports_external.array(exports_external.string()).optional(),
-  rls: EntityRLSSchema.optional()
+  rls: EntityRLSSchema.optional(),
+  source: ResourceSourceSchema.default({ type: "project" })
 });
 var SyncEntitiesResponseSchema = exports_external.object({
   created: exports_external.array(exports_external.string()),
@@ -242657,6 +242901,27 @@ var SyncEntitiesResponseSchema = exports_external.object({
   deleted: exports_external.array(exports_external.string())
 });
 
+// src/core/resources/entity/api.ts
+async function syncEntities(entities) {
+  const appClient = getAppClient();
+  const schemaSyncPayload = Object.fromEntries(entities.map(({ source: _source, ...entity }) => [entity.name, entity]));
+  let response;
+  try {
+    response = await appClient.put("entity-schemas", {
+      json: {
+        entityNameToSchema: schemaSyncPayload
+      },
+      timeout: 60000
+    });
+  } catch (error48) {
+    throw await ApiError.fromHttpError(error48, "syncing entities");
+  }
+  const result = SyncEntitiesResponseSchema.safeParse(await response.json());
+  if (!result.success) {
+    throw new SchemaValidationError("Invalid response from server", result.error);
+  }
+  return result.data;
+}
 // src/core/resources/entity/config.ts
 async function readEntityFile(entityPath) {
   const parsed = await readJsonFile(entityPath);
@@ -242675,57 +242940,20 @@ async function readAllEntities(entitiesDir) {
     absolute: true
   });
   const entities = await Promise.all(files.map((filePath) => readEntityFile(filePath)));
-  return entities;
-}
-function mergeEntities(appEntities, pluginEntities) {
-  const appEntitiesByName = new Map(appEntities.map((entity) => [entity.name, entity]));
-  let mergedEntities = [];
-  pluginEntities.forEach((pluginEntity) => {
-    const appEntityToMerge = appEntitiesByName.get(pluginEntity.name);
-    if (appEntityToMerge) {
-      const appEntityProperties = Object.keys(appEntityToMerge.properties);
-      const pluginEntityProperties = Object.keys(pluginEntity.properties);
-      const collidingProperties = appEntityProperties.filter((prop) => pluginEntityProperties.includes(prop));
-      if (collidingProperties.length) {
-        const collidingPropertiesNames = collidingProperties.map((name2) => `"${name2}"`).join(", ");
-        throw new ConfigInvalidError(`Entity "${appEntityToMerge.name}" cannot override plugin-defined properties: ${collidingPropertiesNames}.
-        Plugin properties are protected — remove or rename them in your local entity.`);
-      }
-      mergedEntities.push({
-        ...pluginEntity,
-        properties: {
-          ...pluginEntity.properties,
-          ...appEntityToMerge.properties
-        }
+  const names = new Set;
+  for (const entity of entities) {
+    if (names.has(entity.name)) {
+      throw new InvalidInputError(`Duplicate entity name "${entity.name}"`, {
+        hints: [
+          {
+            message: `Remove duplicate entities with name "${entity.name}" - only one entity per name is allowed`
+          }
+        ]
       });
-      appEntitiesByName.delete(appEntityToMerge.name);
-    } else {
-      mergedEntities.push(pluginEntity);
     }
-  });
-  return [...mergedEntities, ...appEntitiesByName.values()];
-}
-
-// src/core/resources/entity/api.ts
-async function syncEntities(entities) {
-  const appClient = getAppClient();
-  const schemaSyncPayload = Object.fromEntries(entities.map((entity) => [entity.name, entity]));
-  let response;
-  try {
-    response = await appClient.put("entity-schemas", {
-      json: {
-        entityNameToSchema: schemaSyncPayload
-      },
-      timeout: 60000
-    });
-  } catch (error48) {
-    throw await ApiError.fromHttpError(error48, "syncing entities");
+    names.add(entity.name);
   }
-  const result = SyncEntitiesResponseSchema.safeParse(await response.json());
-  if (!result.success) {
-    throw new SchemaValidationError("Invalid response from server", result.error);
-  }
-  return result.data;
+  return entities;
 }
 // src/core/resources/entity/deploy.ts
 async function pushEntities(entities) {
@@ -242739,6 +242967,57 @@ var entityResource = {
   readAll: readAllEntities,
   push: pushEntities
 };
+// src/core/resources/entity/merge.ts
+function mergePluginEntity(pluginEntity, projectEntity, configPath) {
+  const unsupportedFields = [
+    projectEntity.title ? "title" : null,
+    projectEntity.description ? "description" : null,
+    projectEntity.rls ? "rls" : null
+  ].filter(Boolean);
+  if (unsupportedFields.length > 0) {
+    throw new ConfigInvalidError(`Project entity "${projectEntity.name}" extends a plugin entity and cannot override fields: ${unsupportedFields.join(", ")}.`, configPath);
+  }
+  const projectProperties = projectEntity.properties ?? {};
+  const addedPropertyNames = new Set(Object.keys(projectProperties));
+  for (const propertyName of addedPropertyNames) {
+    if (propertyName in pluginEntity.properties) {
+      throw new ConfigInvalidError(`Cannot override plugin-defined property "${propertyName}"`, configPath);
+    }
+  }
+  for (const requiredProperty of projectEntity.required ?? []) {
+    if (!addedPropertyNames.has(requiredProperty)) {
+      throw new ConfigInvalidError(`Required property "${requiredProperty}" must be declared in project entity "${projectEntity.name}" properties`, configPath);
+    }
+  }
+  const required2 = pluginEntity.required || projectEntity.required ? [
+    ...new Set([
+      ...pluginEntity.required ?? [],
+      ...projectEntity.required ?? []
+    ])
+  ] : undefined;
+  return {
+    ...pluginEntity,
+    properties: {
+      ...pluginEntity.properties,
+      ...projectProperties
+    },
+    ...required2 ? { required: required2 } : {}
+  };
+}
+function mergeProjectAndPluginEntities(projectEntities, pluginEntities, configPath) {
+  const projectEntitiesByName = new Map(projectEntities.map((entity) => [entity.name, entity]));
+  const pluginEntityNames = new Set(pluginEntities.map((entity) => entity.name));
+  const resolvedPluginEntities = pluginEntities.map((pluginEntity) => {
+    const projectEntity = projectEntitiesByName.get(pluginEntity.name);
+    if (!projectEntity) {
+      return pluginEntity;
+    }
+    return mergePluginEntity(pluginEntity, projectEntity, configPath);
+  });
+  const projectOnlyEntities = projectEntities.filter((entity) => !pluginEntityNames.has(entity.name));
+  return [...resolvedPluginEntities, ...projectOnlyEntities];
+}
+
 // src/core/resources/function/schema.ts
 var FunctionNameSchema = exports_external.string().trim().min(1, "Function name cannot be empty").regex(/^[^.]+$/, "Function name cannot contain dots");
 var FunctionFileSchema = exports_external.object({
@@ -242836,7 +243115,8 @@ var FunctionConfigSchema = exports_external.object({
 });
 var BackendFunctionSchema = FunctionConfigSchema.extend({
   entryPath: exports_external.string().min(1, "Entry path cannot be empty"),
-  filePaths: exports_external.array(exports_external.string()).min(1, "Function must have at least one file")
+  filePaths: exports_external.array(exports_external.string()).min(1, "Function must have at least one file"),
+  source: ResourceSourceSchema
 });
 var DeploySingleFunctionResponseSchema = exports_external.object({
   status: exports_external.enum(["deployed", "unchanged"])
@@ -242941,7 +243221,7 @@ async function fetchFunctionLogs(functionName, filters = {}) {
   return result.data;
 }
 // src/core/resources/function/config.ts
-import { basename as basename2, dirname as dirname3, join as join6, relative } from "node:path";
+import { basename as basename2, dirname as dirname4, join as join7, relative } from "node:path";
 async function readFunctionConfig(configPath) {
   const parsed = await readJsonFile(configPath);
   const result = FunctionConfigSchema.safeParse(parsed);
@@ -242952,8 +243232,8 @@ async function readFunctionConfig(configPath) {
 }
 async function readFunction(configPath) {
   const config6 = await readFunctionConfig(configPath);
-  const functionDir = dirname3(configPath);
-  const entryPath = join6(functionDir, config6.entry);
+  const functionDir = dirname4(configPath);
+  const entryPath = join7(functionDir, config6.entry);
   if (!await pathExists(entryPath)) {
     throw new InvalidInputError(`Function entry file not found: ${entryPath} (referenced in ${configPath})`, {
       hints: [{ message: "Check the 'entry' field in your function config" }]
@@ -242963,7 +243243,12 @@ async function readFunction(configPath) {
     cwd: functionDir,
     absolute: true
   });
-  const functionData = { ...config6, entryPath, filePaths };
+  const functionData = {
+    ...config6,
+    entryPath,
+    filePaths,
+    source: { type: "project" }
+  };
   return functionData;
 }
 async function readAllFunctions(functionsDir) {
@@ -242979,11 +243264,11 @@ async function readAllFunctions(functionsDir) {
     absolute: true,
     ignore: ENTRY_IGNORE_DOT_PATHS
   });
-  const configFilesDirs = new Set(configFiles.map((f) => dirname3(f)));
-  const entryFilesWithoutConfig = entryFiles.filter((entryFile) => !configFilesDirs.has(dirname3(entryFile)));
+  const configFilesDirs = new Set(configFiles.map((f) => dirname4(f)));
+  const entryFilesWithoutConfig = entryFiles.filter((entryFile) => !configFilesDirs.has(dirname4(entryFile)));
   const functionsFromConfig = await Promise.all(configFiles.map((configPath) => readFunction(configPath)));
   const functionsWithoutConfig = await Promise.all(entryFilesWithoutConfig.map(async (entryFile) => {
-    const functionDir = dirname3(entryFile);
+    const functionDir = dirname4(entryFile);
     const filePaths = await globby("**/*.{js,ts,json}", {
       cwd: functionDir,
       absolute: true
@@ -242999,7 +243284,14 @@ async function readAllFunctions(functionsDir) {
       });
     }
     const entry = basename2(entryFile);
-    return { name: name2, entry, entryPath: entryFile, filePaths };
+    const functionData = {
+      name: name2,
+      entry,
+      entryPath: entryFile,
+      filePaths,
+      source: { type: "project" }
+    };
+    return functionData;
   }));
   const functions = [...functionsFromConfig, ...functionsWithoutConfig];
   const names = new Set;
@@ -243018,9 +243310,9 @@ async function readAllFunctions(functionsDir) {
   return functions;
 }
 // src/core/resources/function/deploy.ts
-import { dirname as dirname4, relative as relative2 } from "node:path";
+import { dirname as dirname5, relative as relative2 } from "node:path";
 async function loadFunctionCode(fn) {
-  const functionDir = dirname4(fn.entryPath);
+  const functionDir = dirname5(fn.entryPath);
   const resolvedFiles = await Promise.all(fn.filePaths.map(async (filePath) => {
     const content = await readTextFile(filePath);
     const path11 = relative2(functionDir, filePath).split(/[/\\]/).join("/");
@@ -243087,14 +243379,14 @@ async function pruneRemovedFunctions(localFunctionNames, options) {
   return results;
 }
 // src/core/resources/function/pull.ts
-import { join as join7 } from "node:path";
+import { join as join8 } from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual4 } from "node:util";
 async function writeFunctions(functionsDir, functions) {
   const written = [];
   const skipped = [];
   for (const fn of functions) {
-    const functionDir = join7(functionsDir, fn.name);
-    const configPath = join7(functionDir, "function.jsonc");
+    const functionDir = join8(functionsDir, fn.name);
+    const configPath = join8(functionDir, "function.jsonc");
     if (await isFunctionUnchanged(functionDir, fn)) {
       skipped.push(fn.name);
       continue;
@@ -243108,7 +243400,7 @@ async function writeFunctions(functionsDir, functions) {
     }
     await writeJsonFile(configPath, config6);
     for (const file2 of fn.files) {
-      await writeFile(join7(functionDir, file2.path), file2.content);
+      await writeFile(join8(functionDir, file2.path), file2.content);
     }
     written.push(fn.name);
   }
@@ -243118,7 +243410,7 @@ async function isFunctionUnchanged(functionDir, fn) {
   if (!await pathExists(functionDir)) {
     return false;
   }
-  const configPath = join7(functionDir, "function.jsonc");
+  const configPath = join8(functionDir, "function.jsonc");
   try {
     const localConfig = await readJsonFile(configPath);
     if (localConfig.entry !== fn.entry) {
@@ -243131,7 +243423,7 @@ async function isFunctionUnchanged(functionDir, fn) {
     return false;
   }
   for (const file2 of fn.files) {
-    const filePath = join7(functionDir, file2.path);
+    const filePath = join8(functionDir, file2.path);
     if (!await pathExists(filePath)) {
       return false;
     }
@@ -243152,13 +243444,6 @@ var functionResource = {
   push: (functions) => deployFunctionsSequentially(functions)
 };
 // src/core/project/config.ts
-function resolvePluginRoot(pluginRef, fromRoot) {
-  if (pluginRef.startsWith(".")) {
-    return resolve(fromRoot, pluginRef);
-  }
-  const req = createRequire2(join8(fromRoot, "package.json"));
-  return dirname5(req.resolve(`${pluginRef}/package.json`));
-}
 async function findConfigInDir(dir) {
   const files = await globby(PROJECT_CONFIG_PATTERNS, {
     cwd: dir,
@@ -243168,56 +243453,141 @@ async function findConfigInDir(dir) {
 }
 async function findProjectRoot(startPath) {
   let current = startPath || process.cwd();
-  while (current !== dirname5(current)) {
+  while (current !== dirname6(current)) {
     const configPath = await findConfigInDir(current);
     if (configPath) {
       return { root: current, configPath };
     }
-    current = dirname5(current);
+    current = dirname6(current);
   }
   return null;
 }
-async function readProjectConfig(projectRoot) {
-  let found;
-  if (projectRoot) {
-    const configPath2 = await findConfigInDir(projectRoot);
-    found = configPath2 ? { root: projectRoot, configPath: configPath2 } : null;
-  } else {
-    found = await findProjectRoot();
+
+class ProjectConfigReader {
+  pluginIds = new Set;
+  async readProjectConfig(projectRoot) {
+    const { root, configPath } = await this.findConfigOrThrow(projectRoot);
+    const project = await this.readConfigFile(configPath);
+    this.assertPluginProjectDoesNotLoadPlugins(project, configPath);
+    const localResources = await this.readProjectResources(configPath, project);
+    const pluginResources = await this.readPlugins(project.plugins, root);
+    const entities = mergeProjectAndPluginEntities(localResources.entities, pluginResources.entities, configPath);
+    const functions = [
+      ...localResources.functions,
+      ...pluginResources.functions
+    ];
+    return {
+      project: { ...project, root, configPath },
+      entities,
+      functions,
+      agents: localResources.agents,
+      connectors: localResources.connectors,
+      authConfig: localResources.authConfig
+    };
+  }
+  async findConfigOrThrow(projectRoot) {
+    let found;
+    if (projectRoot) {
+      const configPath = await findConfigInDir(projectRoot);
+      found = configPath ? { root: projectRoot, configPath } : null;
+    } else {
+      found = await findProjectRoot();
+    }
+    if (!found) {
+      throw new ConfigNotFoundError(`Project root not found. Please ensure config.jsonc or config.json exists in the project directory or ${PROJECT_SUBDIR}/ subdirectory.`);
+    }
+    return found;
   }
-  if (!found) {
-    throw new ConfigNotFoundError(`Project root not found. Please ensure config.jsonc or config.json exists in the project directory or ${PROJECT_SUBDIR}/ subdirectory.`);
+  async readConfigFile(configPath) {
+    const parsed = await readJsonFile(configPath);
+    const result = ProjectConfigSchema.safeParse(parsed);
+    if (!result.success) {
+      throw new SchemaValidationError("Invalid project configuration", result.error, configPath);
+    }
+    return result.data;
   }
-  const { root, configPath } = found;
-  const parsed = await readJsonFile(configPath);
-  const result = ProjectConfigSchema.safeParse(parsed);
-  if (!result.success) {
-    throw new SchemaValidationError("Invalid project configuration", result.error, configPath);
-  }
-  const project = result.data;
-  const configDir = dirname5(configPath);
-  const [appEntities, functions, agents, connectors, authConfig] = await Promise.all([
-    entityResource.readAll(join8(configDir, project.entitiesDir)),
-    functionResource.readAll(join8(configDir, project.functionsDir)),
-    agentResource.readAll(join8(configDir, project.agentsDir)),
-    connectorResource.readAll(join8(configDir, project.connectorsDir)),
-    authConfigResource.readAll(join8(configDir, project.authDir))
-  ]);
-  let entities = appEntities;
-  for (const pluginRef of project.plugins) {
-    const plugin = await readProjectConfig(resolvePluginRoot(pluginRef, root));
-    entities = mergeEntities(appEntities, plugin.entities);
-    functions.push(...plugin.functions);
-    agents.push(...plugin.agents);
+  async readProjectResources(configPath, project) {
+    const configDir = dirname6(configPath);
+    const [entities, functions, agents, connectors, authConfig] = await Promise.all([
+      entityResource.readAll(join9(configDir, project.entitiesDir)),
+      functionResource.readAll(join9(configDir, project.functionsDir)),
+      agentResource.readAll(join9(configDir, project.agentsDir)),
+      connectorResource.readAll(join9(configDir, project.connectorsDir)),
+      authConfigResource.readAll(join9(configDir, project.authDir))
+    ]);
+    return { entities, functions, agents, connectors, authConfig };
+  }
+  assertPluginProjectDoesNotLoadPlugins(project, configPath) {
+    if (project.plugin && project.plugins.length > 0) {
+      throw new ConfigInvalidError("Plugin projects cannot define plugins in this version.", configPath);
+    }
+  }
+  registerPluginId(pluginId, configPath) {
+    if (this.pluginIds.has(pluginId)) {
+      throw new ConfigInvalidError(`Duplicate plugin id "${pluginId}" in project configuration`, configPath, {
+        hints: [
+          {
+            message: "Remove the plugin or change plugin id"
+          }
+        ]
+      });
+    }
+    this.pluginIds.add(pluginId);
+  }
+  async readPluginConfig(plugin, hostRoot) {
+    const pluginRoot = resolvePluginRoot(plugin.source, hostRoot);
+    const { configPath } = await this.findConfigOrThrow(pluginRoot);
+    const project = await this.readConfigFile(configPath);
+    const pluginId = requirePluginId(project, plugin.source, configPath);
+    this.assertPluginProjectDoesNotLoadPlugins(project, configPath);
+    return { configPath, pluginId, project };
+  }
+  async readPluginResources(project, configPath, pluginId) {
+    const resources = await this.readProjectResources(configPath, project);
+    return {
+      entities: markPluginEntities(resources.entities, pluginId),
+      functions: namespacePluginFunctions(resources.functions, pluginId),
+      agents: [],
+      connectors: [],
+      authConfig: []
+    };
+  }
+  async readPlugins(plugins, projectRoot) {
+    const entities = [];
+    const functions = [];
+    const entityNameByPluginId = new Map;
+    for (const plugin of plugins) {
+      const { configPath, pluginId, project } = await this.readPluginConfig(plugin, projectRoot);
+      this.registerPluginId(pluginId, configPath);
+      const pluginData = await this.readPluginResources(project, configPath, pluginId);
+      for (const entity of pluginData.entities) {
+        const existingPluginId = entityNameByPluginId.get(entity.name);
+        if (existingPluginId) {
+          throw new ConfigInvalidError(`Entity "${entity.name}" is defined by more than one plugin: "${existingPluginId}" and "${pluginId}".`, configPath, {
+            hints: [
+              {
+                message: "Plugin entity names are not namespaced. Remove one plugin or rename one of the entities."
+              }
+            ]
+          });
+        }
+        entityNameByPluginId.set(entity.name, pluginId);
+      }
+      entities.push(...pluginData.entities);
+      functions.push(...pluginData.functions);
+    }
+    return {
+      entities,
+      functions,
+      agents: [],
+      connectors: [],
+      authConfig: []
+    };
   }
-  return {
-    project: { ...project, root, configPath },
-    entities,
-    functions,
-    agents,
-    connectors,
-    authConfig
-  };
+}
+async function readProjectConfig(projectRoot) {
+  const reader = new ProjectConfigReader;
+  return await reader.readProjectConfig(projectRoot);
 }
 
 // src/core/project/app-config.ts
@@ -243394,12 +243764,12 @@ async function getSiteUrl(projectId) {
 // src/core/project/template.ts
 var import_ejs = __toESM(require_ejs(), 1);
 var import_front_matter = __toESM(require_front_matter(), 1);
-import { dirname as dirname6, join as join10 } from "node:path";
+import { dirname as dirname7, join as join11 } from "node:path";
 
 // src/core/assets.ts
 import { cpSync, existsSync } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 // package.json
 var package_default = {
   name: "base44",
@@ -243498,18 +243868,18 @@ var package_default = {
 };
 
 // src/core/assets.ts
-var ASSETS_DIR = join9(homedir2(), ".base44", "assets", package_default.version);
+var ASSETS_DIR = join10(homedir2(), ".base44", "assets", package_default.version);
 function getTemplatesDir() {
-  return join9(ASSETS_DIR, "templates");
+  return join10(ASSETS_DIR, "templates");
 }
 function getTemplatesIndexPath() {
-  return join9(ASSETS_DIR, "templates", "templates.json");
+  return join10(ASSETS_DIR, "templates", "templates.json");
 }
 function getDenoWrapperPath() {
-  return join9(ASSETS_DIR, "deno-runtime", "main.ts");
+  return join10(ASSETS_DIR, "deno-runtime", "main.ts");
 }
 function getExecWrapperPath() {
-  return join9(ASSETS_DIR, "deno-runtime", "exec.ts");
+  return join10(ASSETS_DIR, "deno-runtime", "exec.ts");
 }
 function ensureNpmAssets(sourceDir) {
   if (existsSync(ASSETS_DIR))
@@ -243530,23 +243900,23 @@ async function listTemplates() {
   return result.data.templates;
 }
 async function renderTemplate(template, destPath, data) {
-  const templateDir = join10(getTemplatesDir(), template.path);
+  const templateDir = join11(getTemplatesDir(), template.path);
   const files = await globby("**/*", {
     cwd: templateDir,
     dot: true,
     onlyFiles: true
   });
   for (const file2 of files) {
-    const srcPath = join10(templateDir, file2);
+    const srcPath = join11(templateDir, file2);
     try {
       if (file2.endsWith(".ejs")) {
         const rendered = await import_ejs.default.renderFile(srcPath, data);
         const { attributes, body } = import_front_matter.default(rendered);
-        const destFile = attributes.outputFileName ? join10(dirname6(file2), attributes.outputFileName) : file2.replace(/\.ejs$/, "");
-        const destFilePath = join10(destPath, destFile);
+        const destFile = attributes.outputFileName ? join11(dirname7(file2), attributes.outputFileName) : file2.replace(/\.ejs$/, "");
+        const destFilePath = join11(destPath, destFile);
         await writeFile(destFilePath, body);
       } else {
-        const destFilePath = join10(destPath, file2);
+        const destFilePath = join11(destPath, file2);
         await copyFile(srcPath, destFilePath);
       }
     } catch (error48) {
@@ -243621,7 +243991,7 @@ async function getSiteFilePaths(outputDir) {
 // src/core/site/deploy.ts
 import { randomUUID } from "node:crypto";
 import { tmpdir } from "node:os";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 async function deploySite(siteOutputDir) {
   if (!await pathExists(siteOutputDir)) {
     throw new InvalidInputError(`Output directory does not exist: ${siteOutputDir}. Make sure to build your project first.`, {
@@ -243638,7 +244008,7 @@ async function deploySite(siteOutputDir) {
       ]
     });
   }
-  const archivePath = join11(tmpdir(), `base44-site-${randomUUID()}.tar.gz`);
+  const archivePath = join12(tmpdir(), `base44-site-${randomUUID()}.tar.gz`);
   try {
     await createArchive(siteOutputDir, archivePath);
     return await uploadSite(archivePath);
@@ -250825,8 +251195,8 @@ async function pullAgentsAction({
   runTask: runTask2
 }) {
   const { project: project2 } = await readProjectConfig();
-  const configDir = dirname7(project2.configPath);
-  const agentsDir = join12(configDir, project2.agentsDir);
+  const configDir = dirname8(project2.configPath);
+  const agentsDir = join13(configDir, project2.agentsDir);
   const remoteAgents = await runTask2("Fetching agents from Base44", async () => {
     return await fetchAgents();
   }, {
@@ -250890,12 +251260,12 @@ function getAgentsCommand() {
 }
 
 // src/cli/commands/auth/password-login.ts
-import { dirname as dirname8, join as join13 } from "node:path";
+import { dirname as dirname9, join as join14 } from "node:path";
 async function passwordLoginAction({ log, runTask: runTask2 }, action) {
   const shouldEnable = action === "enable";
   const { project: project2 } = await readProjectConfig();
-  const configDir = dirname8(project2.configPath);
-  const authDir = join13(configDir, project2.authDir);
+  const configDir = dirname9(project2.configPath);
+  const authDir = join14(configDir, project2.authDir);
   const updated = await runTask2("Updating local auth config", async () => {
     const current = await readAuthConfig(authDir) ?? DEFAULT_AUTH_CONFIG;
     const merged = { ...current, enableUsernamePassword: shouldEnable };
@@ -250915,14 +251285,14 @@ function getPasswordLoginCommand() {
 }
 
 // src/cli/commands/auth/pull.ts
-import { dirname as dirname9, join as join14 } from "node:path";
+import { dirname as dirname10, join as join15 } from "node:path";
 async function pullAuthAction({
   log,
   runTask: runTask2
 }) {
   const { project: project2 } = await readProjectConfig();
-  const configDir = dirname9(project2.configPath);
-  const authDir = join14(configDir, project2.authDir);
+  const configDir = dirname10(project2.configPath);
+  const authDir = join15(configDir, project2.authDir);
   const remoteConfig = await runTask2("Fetching auth config from Base44", async () => {
     return await pullAuthConfig();
   }, {
@@ -250986,7 +251356,7 @@ function getAuthPushCommand() {
 }
 
 // src/cli/commands/auth/social-login.ts
-import { dirname as dirname10, join as join15, resolve as resolve3 } from "node:path";
+import { dirname as dirname11, join as join16, resolve as resolve3 } from "node:path";
 var PROVIDER_LABELS = {
   google: "Google",
   microsoft: "Microsoft",
@@ -251056,8 +251426,8 @@ async function socialLoginAction({ log, isNonInteractive, runTask: runTask2 }, p
     }
   }
   const { project: project2 } = await readProjectConfig();
-  const configDir = dirname10(project2.configPath);
-  const authDir = join15(configDir, project2.authDir);
+  const configDir = dirname11(project2.configPath);
+  const authDir = join16(configDir, project2.authDir);
   const { config: updated } = await runTask2("Updating local auth config", async () => updateSocialLoginConfig(authDir, provider, shouldEnable, useCustomOAuth && options.clientId ? { clientId: options.clientId } : undefined));
   if (clientSecret) {
     await runTask2("Saving client secret", async () => pushCustomOAuthSecret(provider, clientSecret));
@@ -251081,9 +251451,213 @@ function getSocialLoginCommand() {
   ])).option("--client-id <id>", "custom OAuth client ID (Google only)").option("--client-secret <secret>", "custom OAuth client secret (Google only)").option("--client-secret-stdin", "read client secret from stdin (Google only)").option("--env-file <path>", "read client secret from a .env file (Google only)").action(socialLoginAction);
 }
 
+// src/cli/commands/auth/sso.ts
+import { dirname as dirname12, join as join17, resolve as resolve4 } from "node:path";
+var SSOConfigFileSchema = exports_external.object({
+  provider: exports_external.enum(Object.values(KNOWN_SSO_PROVIDERS)),
+  clientId: exports_external.string(),
+  clientSecret: exports_external.string(),
+  scope: exports_external.string().optional(),
+  discoveryUrl: exports_external.string().optional(),
+  tenantId: exports_external.string().optional(),
+  oktaDomain: exports_external.string().optional(),
+  authEndpoint: exports_external.string().optional(),
+  tokenEndpoint: exports_external.string().optional(),
+  userinfoEndpoint: exports_external.string().optional(),
+  jwksUri: exports_external.string().optional(),
+  ssoName: exports_external.string().optional()
+});
+async function loadSSOConfigFile(filePath) {
+  const resolved = resolve4(filePath);
+  const raw2 = await readJsonFile(resolved);
+  const result = SSOConfigFileSchema.safeParse(raw2);
+  if (!result.success) {
+    throw new SchemaValidationError("Invalid SSO config file", result.error, filePath);
+  }
+  return result.data;
+}
+function mergeFileWithFlags(fileConfig, options) {
+  return {
+    provider: options.provider ?? fileConfig.provider,
+    clientId: options.clientId ?? fileConfig.clientId,
+    clientSecret: options.clientSecret ?? fileConfig.clientSecret,
+    clientSecretStdin: options.clientSecretStdin,
+    envFile: options.envFile,
+    scope: options.scope ?? fileConfig.scope,
+    discoveryUrl: options.discoveryUrl ?? fileConfig.discoveryUrl,
+    tenantId: options.tenantId ?? fileConfig.tenantId,
+    oktaDomain: options.oktaDomain ?? fileConfig.oktaDomain,
+    authEndpoint: options.authEndpoint ?? fileConfig.authEndpoint,
+    tokenEndpoint: options.tokenEndpoint ?? fileConfig.tokenEndpoint,
+    userinfoEndpoint: options.userinfoEndpoint ?? fileConfig.userinfoEndpoint,
+    jwksUri: options.jwksUri ?? fileConfig.jwksUri,
+    ssoName: options.ssoName ?? fileConfig.ssoName
+  };
+}
+var providerNames = Object.keys(KNOWN_SSO_PROVIDERS);
+var SECRET_KEY_TO_FLAG = {
+  ["sso_name" /* Name */]: "--sso-name",
+  ["sso_client_id" /* ClientId */]: "--client-id",
+  ["sso_client_secret" /* ClientSecret */]: "--client-secret",
+  ["sso_scope" /* Scope */]: "--scope",
+  ["sso_discovery_url" /* DiscoveryUrl */]: "--discovery-url",
+  ["sso_tenant_id" /* TenantId */]: "--tenant-id",
+  ["sso_auth_endpoint" /* AuthEndpoint */]: "--auth-endpoint",
+  ["sso_token_endpoint" /* TokenEndpoint */]: "--token-endpoint",
+  ["sso_userinfo_endpoint" /* UserinfoEndpoint */]: "--userinfo-endpoint",
+  ["sso_okta_domain" /* OktaDomain */]: "--okta-domain",
+  ["sso_jwks_uri" /* JwksUri */]: "--jwks-uri"
+};
+function secretKeyToFlag(key) {
+  return SECRET_KEY_TO_FLAG[key];
+}
+function exampleCommand(provider) {
+  let cmd = `base44 auth sso enable --provider ${provider} --client-id <id> --client-secret <secret>`;
+  if (provider === KNOWN_SSO_PROVIDERS.microsoft)
+    cmd += " --tenant-id <id>";
+  if (provider === KNOWN_SSO_PROVIDERS.okta)
+    cmd += " --okta-domain <domain>";
+  if (provider === KNOWN_SSO_PROVIDERS.custom)
+    cmd += " --sso-name <name> --auth-endpoint <url> --token-endpoint <url> --userinfo-endpoint <url> --jwks-uri <url>";
+  return cmd;
+}
+function validateProvider(provider) {
+  if (!provider) {
+    throw new InvalidInputError("Missing --provider.", {
+      hints: [
+        {
+          message: `Valid providers: ${providerNames.join(", ")}`,
+          command: "base44 auth sso enable --provider <provider> --client-id <id> --client-secret <secret>"
+        }
+      ]
+    });
+  }
+  return provider;
+}
+async function ssoEnableAction({ isNonInteractive, runTask: runTask2 }, options) {
+  if (options.file && options.envFile) {
+    throw new InvalidInputError("--file and --env-file cannot be used together. Provide the client secret either inside --file or via --env-file.");
+  }
+  let merged = options;
+  if (options.file) {
+    const fileConfig = await loadSSOConfigFile(options.file);
+    merged = mergeFileWithFlags(fileConfig, options);
+  }
+  const provider = validateProvider(merged.provider);
+  if (!merged.clientId) {
+    throw new InvalidInputError("Missing --client-id.", {
+      hints: [
+        {
+          message: `Example: base44 auth sso enable --provider ${provider} --client-id <id> --client-secret <secret>`,
+          command: `base44 auth sso enable --provider ${provider} --client-id <id> --client-secret <secret>`
+        }
+      ]
+    });
+  }
+  let clientSecret;
+  if (merged.envFile && !merged.clientSecret) {
+    const secrets2 = await parseEnvFile(resolve4(merged.envFile));
+    const value = secrets2.sso_client_secret;
+    if (!value) {
+      throw new InvalidInputError(`Key "sso_client_secret" not found in ${merged.envFile}.`);
+    }
+    clientSecret = value;
+  } else {
+    clientSecret = await resolveSecret({
+      flagValue: merged.clientSecret,
+      fromStdin: merged.clientSecretStdin,
+      envVar: "sso_client_secret",
+      promptMessage: "Enter SSO client secret",
+      isNonInteractive,
+      name: "client secret",
+      hints: [
+        {
+          message: `Provide via flag:   base44 auth sso enable --provider ${provider} --client-id <id> --client-secret <secret>`,
+          command: `base44 auth sso enable --provider ${provider} --client-id <id> --client-secret <secret>`
+        },
+        {
+          message: `Provide via stdin:  echo <secret> | base44 auth sso enable --provider ${provider} --client-id <id> --client-secret-stdin`
+        },
+        {
+          message: `Provide via env:    sso_client_secret=<secret> base44 auth sso enable --provider ${provider} --client-id <id>`
+        }
+      ]
+    });
+  }
+  const secretOptions = {
+    clientId: merged.clientId,
+    clientSecret,
+    scope: merged.scope,
+    discoveryUrl: merged.discoveryUrl,
+    tenantId: merged.tenantId,
+    oktaDomain: merged.oktaDomain,
+    authEndpoint: merged.authEndpoint,
+    tokenEndpoint: merged.tokenEndpoint,
+    userinfoEndpoint: merged.userinfoEndpoint,
+    jwksUri: merged.jwksUri,
+    ssoName: merged.ssoName
+  };
+  let secrets;
+  try {
+    secrets = buildSSOSecrets(provider, secretOptions);
+  } catch (error48) {
+    if (error48 instanceof MissingSSOFieldsError) {
+      const flagNames = error48.missingKeys.map(secretKeyToFlag);
+      throw new InvalidInputError(`Missing required fields for ${error48.provider}: ${flagNames.join(", ")}`, {
+        hints: [
+          {
+            message: `Example: ${exampleCommand(provider)}`,
+            command: exampleCommand(provider)
+          }
+        ]
+      });
+    }
+    throw error48;
+  }
+  const { project: project2 } = await readProjectConfig();
+  const configDir = dirname12(project2.configPath);
+  const authDir = join17(configDir, project2.authDir);
+  await runTask2("Updating local auth config", async () => updateSSOConfig(authDir, provider, true));
+  await runTask2("Saving SSO credentials", async () => pushSSOSecrets(secrets));
+  return {
+    outroMessage: `SSO configured with ${provider} in local config. Run \`base44 auth push\` or \`base44 deploy\` to apply.`
+  };
+}
+function hasEnableOnlyOptions(options) {
+  return Boolean(options.provider || options.clientId || options.clientSecret || options.clientSecretStdin || options.envFile || options.file || options.scope || options.discoveryUrl || options.tenantId || options.oktaDomain || options.authEndpoint || options.tokenEndpoint || options.userinfoEndpoint || options.jwksUri || options.ssoName);
+}
+async function ssoDisableAction({ log, runTask: runTask2 }, options) {
+  if (hasEnableOnlyOptions(options)) {
+    throw new InvalidInputError("Configuration options cannot be used with disable. To disable SSO: base44 auth sso disable");
+  }
+  const { project: project2 } = await readProjectConfig();
+  const configDir = dirname12(project2.configPath);
+  const authDir = join17(configDir, project2.authDir);
+  const updated = await runTask2("Updating local auth config", async () => updateSSOConfig(authDir, null, false));
+  await runTask2("Removing SSO credentials", async () => deleteSSOSecrets());
+  if (!hasAnyLoginMethod(updated)) {
+    log.warn("Disabling SSO will leave no login methods enabled. Users will be locked out.");
+  }
+  return {
+    outroMessage: "SSO disabled in local config and credentials removed. Run `base44 auth push` or `base44 deploy` to apply."
+  };
+}
+async function ssoAction(context, action, options) {
+  if (action === "disable") {
+    return ssoDisableAction(context, options);
+  }
+  return ssoEnableAction(context, options);
+}
+function getSSOCommand() {
+  return new Base44Command("sso").description("Configure SSO identity provider (google, microsoft, github, okta, custom). SSO and social login are mutually exclusive — enabling one disables the other in the local auth config.").addArgument(new Argument("<action>", "enable or disable SSO").choices([
+    "enable",
+    "disable"
+  ])).addOption(new Option("--provider <provider>", "SSO provider").choices(Object.values(KNOWN_SSO_PROVIDERS))).option("--client-id <id>", "OAuth client ID").option("--client-secret <secret>", "OAuth client secret").option("--client-secret-stdin", "Read client secret from stdin").option("--env-file <path>", "Read client secret from a .env file (key: sso_client_secret)").option("--file <path>", "JSON config file with all SSO settings").option("--scope <scope>", "OAuth scope (defaults per provider)").option("--discovery-url <url>", "OIDC discovery URL").option("--tenant-id <id>", "Microsoft tenant ID (required for microsoft)").option("--okta-domain <domain>", "Okta domain (required for okta)").option("--auth-endpoint <url>", "Authorization endpoint (required for custom)").option("--token-endpoint <url>", "Token endpoint (required for custom)").option("--userinfo-endpoint <url>", "Userinfo endpoint (required for custom)").option("--jwks-uri <url>", "JWKS URI (required for custom)").option("--sso-name <name>", "Provider display name (required for custom)").action(ssoAction);
+}
+
 // src/cli/commands/auth/index.ts
 function getAuthCommand() {
-  return new Command("auth").description("Manage app authentication settings").addCommand(getPasswordLoginCommand()).addCommand(getSocialLoginCommand()).addCommand(getAuthPullCommand()).addCommand(getAuthPushCommand());
+  return new Command("auth").description("Manage app authentication settings").addCommand(getPasswordLoginCommand()).addCommand(getSocialLoginCommand()).addCommand(getSSOCommand()).addCommand(getAuthPullCommand()).addCommand(getAuthPushCommand());
 }
 
 // src/cli/commands/auth/login.ts
@@ -251145,14 +251719,14 @@ function getConnectorsListAvailableCommand() {
 }
 
 // src/cli/commands/connectors/pull.ts
-import { dirname as dirname11, join as join16 } from "node:path";
+import { dirname as dirname13, join as join18 } from "node:path";
 async function pullConnectorsAction({
   log,
   runTask: runTask2
 }) {
   const { project: project2 } = await readProjectConfig();
-  const configDir = dirname11(project2.configPath);
-  const connectorsDir = join16(configDir, project2.connectorsDir);
+  const configDir = dirname13(project2.configPath);
+  const connectorsDir = join18(configDir, project2.connectorsDir);
   const remoteConnectors = await runTask2("Fetching connectors from Base44", async () => {
     return await pullAllConnectors();
   }, {
@@ -251681,19 +252255,19 @@ var baseOpen = async (options) => {
   }
   const subprocess = childProcess3.spawn(command2, cliArguments, childProcessOptions);
   if (options.wait) {
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       subprocess.once("error", reject);
       subprocess.once("close", (exitCode) => {
         if (!options.allowNonzeroExitCode && exitCode !== 0) {
           reject(new Error(`Exited with code ${exitCode}`));
           return;
         }
-        resolve4(subprocess);
+        resolve5(subprocess);
       });
     });
   }
   if (isFallbackAttempt) {
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       subprocess.once("error", reject);
       subprocess.once("spawn", () => {
         subprocess.once("close", (exitCode) => {
@@ -251703,17 +252277,17 @@ var baseOpen = async (options) => {
             return;
           }
           subprocess.unref();
-          resolve4(subprocess);
+          resolve5(subprocess);
         });
       });
     });
   }
   subprocess.unref();
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     subprocess.once("error", reject);
     subprocess.once("spawn", () => {
       subprocess.off("error", reject);
-      resolve4(subprocess);
+      resolve5(subprocess);
     });
   });
 };
@@ -252156,6 +252730,11 @@ async function deployFunctionsAction({ log }, names, options) {
       formatDeployResult(result, log);
     }
   });
+  const hasFailures = results.some((r) => r.status === "error");
+  if (hasFailures) {
+    log.message(buildDeploySummary(results));
+    throw new CLIExitError(1);
+  }
   if (options.force) {
     const allLocalNames = functions.map((f) => f.name);
     let pruneCompleted = 0;
@@ -252207,25 +252786,38 @@ function getListCommand() {
 }
 
 // src/cli/commands/functions/pull.ts
-import { dirname as dirname12, join as join17 } from "node:path";
+import { dirname as dirname14, join as join19 } from "node:path";
 async function pullFunctionsAction({ log, runTask: runTask2 }, name2) {
-  const { project: project2 } = await readProjectConfig();
-  const configDir = dirname12(project2.configPath);
-  const functionsDir = join17(configDir, project2.functionsDir);
+  const { project: project2, functions } = await readProjectConfig();
+  const configDir = dirname14(project2.configPath);
+  const functionsDir = join19(configDir, project2.functionsDir);
+  const pluginFunctionNames = new Set(functions.filter((fn) => fn.source.type === "plugin").map((fn) => fn.name));
   const remoteFunctions = await runTask2("Fetching functions from Base44", async () => {
-    const { functions } = await listDeployedFunctions();
-    return functions;
+    const { functions: functions2 } = await listDeployedFunctions();
+    return functions2;
   }, {
     successMessage: "Functions fetched successfully",
     errorMessage: "Failed to fetch functions"
   });
-  const toPull = name2 ? remoteFunctions.filter((f) => f.name === name2) : remoteFunctions;
-  if (name2 && toPull.length === 0) {
+  const matchingRemote = name2 ? remoteFunctions.filter((f) => f.name === name2) : remoteFunctions;
+  if (name2 && pluginFunctionNames.has(name2)) {
+    return {
+      outroMessage: `Function "${name2}" is managed by a plugin and was not pulled into ${functionsDir}`
+    };
+  }
+  if (name2 && matchingRemote.length === 0) {
     return {
       outroMessage: `Function "${name2}" not found on remote`
     };
   }
+  const skippedPluginOwned = matchingRemote.filter((fn) => pluginFunctionNames.has(fn.name));
+  const toPull = matchingRemote.filter((fn) => !pluginFunctionNames.has(fn.name));
   if (toPull.length === 0) {
+    if (skippedPluginOwned.length > 0) {
+      return {
+        outroMessage: `Skipped ${skippedPluginOwned.length} plugin-owned function${skippedPluginOwned.length !== 1 ? "s" : ""}; no project-owned functions to pull`
+      };
+    }
     return { outroMessage: "No functions found on remote" };
   }
   const { written, skipped } = await runTask2("Writing function files", async () => {
@@ -252240,8 +252832,11 @@ async function pullFunctionsAction({ log, runTask: runTask2 }, name2) {
   for (const name3 of skipped) {
     log.info(`${name3.padEnd(25)} unchanged`);
   }
+  for (const fn of skippedPluginOwned) {
+    log.info(`${fn.name.padEnd(25)} plugin-owned, skipped`);
+  }
   return {
-    outroMessage: `Pulled ${toPull.length} function${toPull.length !== 1 ? "s" : ""} to ${functionsDir}`
+    outroMessage: `Pulled ${toPull.length} function${toPull.length !== 1 ? "s" : ""} to ${functionsDir}${skippedPluginOwned.length > 0 ? `; skipped ${skippedPluginOwned.length} plugin-owned` : ""}`
   };
 }
 function getPullCommand() {
@@ -252254,7 +252849,7 @@ function getFunctionsCommand() {
 }
 
 // src/cli/commands/project/create.ts
-import { basename as basename3, join as join18, resolve as resolve4 } from "node:path";
+import { basename as basename3, join as join20, resolve as resolve5 } from "node:path";
 var import_kebabCase = __toESM(require_kebabCase(), 1);
 var DEFAULT_TEMPLATE_ID = "backend-only";
 async function getTemplateById(templateId) {
@@ -252319,7 +252914,7 @@ async function createInteractive(options, ctx) {
   }, ctx);
 }
 async function createNonInteractive(options, ctx) {
-  ctx.log.info(`Creating a new project at ${resolve4(options.path)}`);
+  ctx.log.info(`Creating a new project at ${resolve5(options.path)}`);
   const template2 = await getTemplateById(options.template ?? DEFAULT_TEMPLATE_ID);
   return await executeCreate({
     template: template2,
@@ -252340,7 +252935,7 @@ async function executeCreate({
   isInteractive
 }, { log, runTask: runTask2 }) {
   const name2 = rawName.trim();
-  const resolvedPath = resolve4(projectPath);
+  const resolvedPath = resolve5(projectPath);
   const { projectId } = await runTask2("Setting up your project...", async () => {
     return await createProjectFiles({
       name: name2,
@@ -252391,7 +252986,7 @@ async function executeCreate({
         updateMessage("Building project...");
         await execa({ cwd: resolvedPath, shell: true })`${buildCommand}`;
         updateMessage("Deploying site...");
-        return await deploySite(join18(resolvedPath, outputDirectory));
+        return await deploySite(join20(resolvedPath, outputDirectory));
       }, {
         successMessage: theme.colors.base44Orange("Site deployed successfully"),
         errorMessage: "Failed to deploy site"
@@ -252856,7 +253451,7 @@ function getSecretsListCommand() {
 }
 
 // src/cli/commands/secrets/set.ts
-import { resolve as resolve5 } from "node:path";
+import { resolve as resolve6 } from "node:path";
 function parseEntries(entries) {
   const secrets = {};
   for (const entry of entries) {
@@ -252887,7 +253482,7 @@ async function setSecretsAction({ log, runTask: runTask2 }, entries, options) {
   validateInput(entries, options);
   let secrets;
   if (options.envFile) {
-    secrets = await parseEnvFile(resolve5(options.envFile));
+    secrets = await parseEnvFile(resolve6(options.envFile));
     if (Object.keys(secrets).length === 0) {
       throw new InvalidInputError("The env file contains no valid KEY=VALUE entries.");
     }
@@ -252916,7 +253511,7 @@ function getSecretsCommand() {
 }
 
 // src/cli/commands/site/deploy.ts
-import { resolve as resolve6 } from "node:path";
+import { resolve as resolve7 } from "node:path";
 async function deployAction2({ isNonInteractive, runTask: runTask2 }, options) {
   if (isNonInteractive && !options.yes) {
     throw new InvalidInputError("--yes is required in non-interactive mode");
@@ -252931,7 +253526,7 @@ async function deployAction2({ isNonInteractive, runTask: runTask2 }, options) {
       ]
     });
   }
-  const outputDir = resolve6(project2.root, project2.site.outputDirectory);
+  const outputDir = resolve7(project2.root, project2.site.outputDirectory);
   if (!options.yes) {
     const shouldDeploy = await Re({
       message: `Deploy site from ${project2.site.outputDirectory}?`
@@ -253057,10 +253652,10 @@ function toPascalCase(name2) {
   return name2.split(/[-_\s]+/).map((w8) => w8.charAt(0).toUpperCase() + w8.slice(1)).join("");
 }
 // src/core/types/update-project.ts
-import { join as join21 } from "node:path";
+import { join as join23 } from "node:path";
 var TYPES_INCLUDE_PATH = `${PROJECT_SUBDIR}/${TYPES_OUTPUT_SUBDIR}/*.d.ts`;
 async function updateProjectConfig(projectRoot) {
-  const tsconfigPath = join21(projectRoot, "tsconfig.json");
+  const tsconfigPath = join23(projectRoot, "tsconfig.json");
   if (!await pathExists(tsconfigPath)) {
     return false;
   }
@@ -253108,7 +253703,7 @@ import process21 from "node:process";
 // src/cli/dev/dev-server/main.ts
 var import_cors = __toESM(require_lib4(), 1);
 var import_express6 = __toESM(require_express(), 1);
-import { dirname as dirname17, join as join24 } from "node:path";
+import { dirname as dirname19, join as join26 } from "node:path";
 
 // ../../node_modules/get-port/index.js
 import net from "node:net";
@@ -253135,14 +253730,14 @@ var getLocalHosts = () => {
   }
   return results;
 };
-var checkAvailablePort = (options8) => new Promise((resolve8, reject) => {
+var checkAvailablePort = (options8) => new Promise((resolve9, reject) => {
   const server = net.createServer();
   server.unref();
   server.on("error", reject);
   server.listen(options8, () => {
     const { port } = server.address();
     server.close(() => {
-      resolve8(port);
+      resolve9(port);
     });
   });
 });
@@ -253402,7 +253997,7 @@ class FunctionManager {
     });
   }
   waitForReady(name2, runningFunc) {
-    return new Promise((resolve8, reject) => {
+    return new Promise((resolve9, reject) => {
       runningFunc.process.on("exit", (code2) => {
         if (!runningFunc.ready) {
           clearTimeout(timeout3);
@@ -253425,7 +254020,7 @@ class FunctionManager {
           runningFunc.ready = true;
           clearTimeout(timeout3);
           runningFunc.process.stdout?.off("data", onData);
-          resolve8(runningFunc.port);
+          resolve9(runningFunc.port);
         }
       };
       runningFunc.process.stdout?.on("data", onData);
@@ -253726,7 +254321,8 @@ class Database {
       return {
         name: "User",
         type: "object",
-        properties: { ...builtInFields, role: { type: "string" } }
+        properties: { ...builtInFields, role: { type: "string" } },
+        source: { type: "project" }
       };
     }
     for (const field of Object.keys(builtInFields)) {
@@ -255346,9 +255942,9 @@ class NodeFsHandler {
     if (this.fsw.closed) {
       return;
     }
-    const dirname16 = sp2.dirname(file2);
+    const dirname18 = sp2.dirname(file2);
     const basename5 = sp2.basename(file2);
-    const parent = this.fsw._getWatchedDir(dirname16);
+    const parent = this.fsw._getWatchedDir(dirname18);
     let prevStats = stats;
     if (parent.has(basename5))
       return;
@@ -255375,7 +255971,7 @@ class NodeFsHandler {
             prevStats = newStats2;
           }
         } catch (error48) {
-          this.fsw._remove(dirname16, basename5);
+          this.fsw._remove(dirname18, basename5);
         }
       } else if (parent.has(basename5)) {
         const at13 = newStats.atimeMs;
@@ -255464,7 +256060,7 @@ class NodeFsHandler {
         this._addToNodeFs(path19, initialAdd, wh2, depth + 1);
       }
     }).on(EV.ERROR, this._boundHandleError);
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       if (!stream)
         return reject();
       stream.once(STR_END, () => {
@@ -255473,7 +256069,7 @@ class NodeFsHandler {
           return;
         }
         const wasThrottled = throttler ? throttler.clear() : false;
-        resolve9(undefined);
+        resolve10(undefined);
         previous.getChildren().filter((item) => {
           return item !== directory && !current.has(item);
         }).forEach((item) => {
@@ -256384,7 +256980,7 @@ async function createDevServer(options8) {
     }
     remoteProxy(req, res, next);
   });
-  const server = await new Promise((resolve10, reject) => {
+  const server = await new Promise((resolve11, reject) => {
     const s5 = app.listen(port, "127.0.0.1", (err) => {
       if (err) {
         if ("code" in err && err.code === "EADDRINUSE") {
@@ -256393,7 +256989,7 @@ async function createDevServer(options8) {
           reject(err);
         }
       } else {
-        resolve10(s5);
+        resolve11(s5);
       }
     });
   });
@@ -256402,8 +256998,8 @@ async function createDevServer(options8) {
     broadcastEntityEvent(io6, appId, entityName, event);
   };
   const base44ConfigWatcher = new WatchBase44({
-    functions: join24(dirname17(project2.configPath), project2.functionsDir),
-    entities: join24(dirname17(project2.configPath), project2.entitiesDir)
+    functions: join26(dirname19(project2.configPath), project2.functionsDir),
+    entities: join26(dirname19(project2.configPath), project2.entitiesDir)
   }, devLogger);
   base44ConfigWatcher.on("change", async (name2) => {
     try {
@@ -256510,13 +257106,13 @@ async function runScript(options8) {
 }
 // src/cli/commands/exec.ts
 function readStdin2() {
-  return new Promise((resolve10, reject) => {
+  return new Promise((resolve11, reject) => {
     let data = "";
     process.stdin.setEncoding("utf-8");
     process.stdin.on("data", (chunk) => {
       data += chunk;
     });
-    process.stdin.on("end", () => resolve10(data));
+    process.stdin.on("end", () => resolve11(data));
     process.stdin.on("error", reject);
   });
 }
@@ -256555,7 +257151,7 @@ Examples:
 }
 
 // src/cli/commands/project/eject.ts
-import { resolve as resolve10 } from "node:path";
+import { resolve as resolve11 } from "node:path";
 var import_kebabCase2 = __toESM(require_kebabCase(), 1);
 async function eject(ctx, options8) {
   const { log, runTask: runTask2, isNonInteractive } = ctx;
@@ -256611,7 +257207,7 @@ async function eject(ctx, options8) {
     Ne("Operation cancelled.");
     throw new CLIExitError(0);
   }
-  const resolvedPath = resolve10(selectedPath);
+  const resolvedPath = resolve11(selectedPath);
   await runTask2("Downloading your project's code...", async (updateMessage) => {
     await createProjectFilesForExistingProject({
       projectId,
@@ -256692,7 +257288,7 @@ var import_detect_agent = __toESM(require_dist5(), 1);
 import { release, type } from "node:os";
 
 // ../../node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
-import { dirname as dirname18, posix, sep } from "path";
+import { dirname as dirname20, posix, sep } from "path";
 function createModulerModifier() {
   const getModuleFromFileName = createGetModuleFromFilename();
   return async (frames) => {
@@ -256701,7 +257297,7 @@ function createModulerModifier() {
     return frames;
   };
 }
-function createGetModuleFromFilename(basePath = process.argv[1] ? dirname18(process.argv[1]) : process.cwd(), isWindows5 = sep === "\\") {
+function createGetModuleFromFilename(basePath = process.argv[1] ? dirname20(process.argv[1]) : process.cwd(), isWindows5 = sep === "\\") {
   const normalizedBase = isWindows5 ? normalizeWindowsPath2(basePath) : basePath;
   return (filename) => {
     if (!filename)
@@ -258979,14 +259575,14 @@ async function addSourceContext(frames) {
   return frames;
 }
 function getContextLinesFromFile(path19, ranges, output) {
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     const stream = createReadStream2(path19);
     const lineReaded = createInterface2({
       input: stream
     });
     function destroyStreamAndResolve() {
       stream.destroy();
-      resolve11();
+      resolve12();
     }
     let lineNumber = 0;
     let currentRangeIndex = 0;
@@ -260098,15 +260694,15 @@ class PostHogBackendClient extends PostHogCoreStateless {
       return true;
     if (this.featureFlagsPoller === undefined)
       return false;
-    return new Promise((resolve11) => {
+    return new Promise((resolve12) => {
       const timeout3 = setTimeout(() => {
         cleanup();
-        resolve11(false);
+        resolve12(false);
       }, timeoutMs);
       const cleanup = this._events.on("localEvaluationFlagsLoaded", (count2) => {
         clearTimeout(timeout3);
         cleanup();
-        resolve11(count2 > 0);
+        resolve12(count2 > 0);
       });
     });
   }
@@ -260890,9 +261486,9 @@ function addCommandInfoToErrorReporter(program2, errorReporter) {
   });
 }
 // src/cli/index.ts
-var __dirname4 = dirname19(fileURLToPath6(import.meta.url));
+var __dirname4 = dirname21(fileURLToPath6(import.meta.url));
 async function runCLI(options8) {
-  ensureNpmAssets(join25(__dirname4, "../assets"));
+  ensureNpmAssets(join27(__dirname4, "../assets"));
   const errorReporter = new ErrorReporter;
   errorReporter.registerProcessErrorHandlers();
   const isNonInteractive = !process.stdin.isTTY || !process.stdout.isTTY;
@@ -260929,4 +261525,4 @@ export {
   CLIExitError
 };
 
-//# debugId=C4526820B868590164756E2164756E21
+//# debugId=6F53421EFB4CBB2764756E2164756E21