@cerefox/memory 1.0.0 → 1.0.1

package/dist/bin/cerefox.js

@@ -7184,7 +7184,7 @@ var exports_meta = {};
 __export(exports_meta, {
   PKG_VERSION: () => PKG_VERSION
 });
-var PKG_VERSION = "1.0.0";
+var PKG_VERSION = "1.0.1";
 var init_meta = () => {};
 
 // ../../node_modules/.bun/tslib@2.8.1/node_modules/tslib/tslib.js
@@ -7792,7 +7792,7 @@ var require_tslib = __commonJS((exports, module) => {
   });
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.110.2/node_modules/@supabase/functions-js/dist/main/helper.js
+// ../../node_modules/.bun/@supabase+functions-js@2.111.0/node_modules/@supabase/functions-js/dist/main/helper.js
 var require_helper = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.resolveFetch = undefined;
@@ -7805,7 +7805,7 @@ var require_helper = __commonJS((exports) => {
   exports.resolveFetch = resolveFetch;
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.110.2/node_modules/@supabase/functions-js/dist/main/types.js
+// ../../node_modules/.bun/@supabase+functions-js@2.111.0/node_modules/@supabase/functions-js/dist/main/types.js
 var require_types = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionRegion = exports.FunctionsHttpError = exports.FunctionsRelayError = exports.FunctionsFetchError = exports.FunctionsError = undefined;
@@ -7866,7 +7866,7 @@ var require_types = __commonJS((exports) => {
   })(FunctionRegion || (exports.FunctionRegion = FunctionRegion = {}));
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.110.2/node_modules/@supabase/functions-js/dist/main/FunctionsClient.js
+// ../../node_modules/.bun/@supabase+functions-js@2.111.0/node_modules/@supabase/functions-js/dist/main/FunctionsClient.js
 var require_FunctionsClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionsClient = undefined;
@@ -7886,9 +7886,10 @@ var require_FunctionsClient = __commonJS((exports) => {
     }
     invoke(functionName_1) {
       return tslib_1.__awaiter(this, arguments, undefined, function* (functionName, options = {}) {
-        var _a;
+        var _a, _b;
         let timeoutId;
         let timeoutController;
+        let onAbort;
         try {
           const { headers, method, body: functionArgs, signal, timeout } = options;
           let _headers = {};
@@ -7929,7 +7930,8 @@ var require_FunctionsClient = __commonJS((exports) => {
             timeoutId = setTimeout(() => timeoutController.abort(), timeout);
             if (signal) {
               effectiveSignal = timeoutController.signal;
-              signal.addEventListener("abort", () => timeoutController.abort());
+              onAbort = () => timeoutController.abort();
+              signal.addEventListener("abort", onAbort);
             } else {
               effectiveSignal = timeoutController.signal;
             }
@@ -7949,7 +7951,7 @@ var require_FunctionsClient = __commonJS((exports) => {
           if (!response.ok) {
             throw new types_1.FunctionsHttpError(response);
           }
-          let responseType = ((_a = response.headers.get("Content-Type")) !== null && _a !== undefined ? _a : "text/plain").split(";")[0].trim();
+          let responseType = ((_a = response.headers.get("Content-Type")) !== null && _a !== undefined ? _a : "text/plain").split(";")[0].trim().toLowerCase();
           let data;
           if (responseType === "application/json") {
             data = yield response.json();
@@ -7973,6 +7975,9 @@ var require_FunctionsClient = __commonJS((exports) => {
           if (timeoutId) {
             clearTimeout(timeoutId);
           }
+          if (onAbort) {
+            (_b = options.signal) === null || _b === undefined || _b.removeEventListener("abort", onAbort);
+          }
         }
       });
     }
@@ -7980,7 +7985,7 @@ var require_FunctionsClient = __commonJS((exports) => {
   exports.FunctionsClient = FunctionsClient;
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.110.2/node_modules/@supabase/functions-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+functions-js@2.111.0/node_modules/@supabase/functions-js/dist/main/index.js
 var require_main = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionRegion = exports.FunctionsRelayError = exports.FunctionsHttpError = exports.FunctionsFetchError = exports.FunctionsError = exports.FunctionsClient = undefined;
@@ -8006,7 +8011,7 @@ var require_main = __commonJS((exports) => {
   } });
 });
 
-// ../../node_modules/.bun/@supabase+postgrest-js@2.110.2/node_modules/@supabase/postgrest-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+postgrest-js@2.111.0/node_modules/@supabase/postgrest-js/dist/index.mjs
 function sleep(ms, signal) {
   return new Promise((resolve) => {
     if (signal === null || signal === undefined ? undefined : signal.aborted) {
@@ -8817,7 +8822,7 @@ var init_dist = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js
 var require_websocket_factory = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocketFactory = undefined;
@@ -8894,14 +8899,14 @@ Suggested solution: ${env.workaround}`;
   exports.default = WebSocketFactory;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/lib/version.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/version.js
 var require_version = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.version = undefined;
-  exports.version = "2.110.2";
+  exports.version = "2.111.0";
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/lib/constants.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/constants.js
 var require_constants = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CONNECTION_STATE = exports.TRANSPORTS = exports.CHANNEL_EVENTS = exports.CHANNEL_STATES = exports.SOCKET_STATES = exports.MAX_PUSH_BUFFER_SIZE = exports.WS_CLOSE_NORMAL = exports.DEFAULT_TIMEOUT = exports.VERSION = exports.DEFAULT_VSN = exports.VSN_2_0_0 = exports.VSN_1_0_0 = exports.DEFAULT_VERSION = undefined;
@@ -8946,7 +8951,7 @@ var require_constants = __commonJS((exports) => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/lib/serializer.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/serializer.js
 var require_serializer = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
 
@@ -8990,12 +8995,13 @@ var require_serializer = __commonJS((exports) => {
     }
     _encodeUserBroadcastPush(message, encodingType, encodedPayload) {
       var _a, _b;
-      const topic = message.topic;
-      const ref = (_a = message.ref) !== null && _a !== undefined ? _a : "";
-      const joinRef = (_b = message.join_ref) !== null && _b !== undefined ? _b : "";
-      const userEvent = message.payload.event;
+      const encoder = new TextEncoder;
+      const topic = encoder.encode(message.topic);
+      const ref = encoder.encode((_a = message.ref) !== null && _a !== undefined ? _a : "");
+      const joinRef = encoder.encode((_b = message.join_ref) !== null && _b !== undefined ? _b : "");
+      const userEvent = encoder.encode(message.payload.event);
       const rest = this.allowedMetadataKeys ? this._pick(message.payload, this.allowedMetadataKeys) : {};
-      const metadata = Object.keys(rest).length === 0 ? "" : JSON.stringify(rest);
+      const metadata = encoder.encode(Object.keys(rest).length === 0 ? "" : JSON.stringify(rest));
       if (joinRef.length > 255) {
         throw new Error(`joinRef length ${joinRef.length} exceeds maximum of 255`);
       }
@@ -9013,7 +9019,8 @@ var require_serializer = __commonJS((exports) => {
       }
       const metaLength = this.USER_BROADCAST_PUSH_META_LENGTH + joinRef.length + ref.length + topic.length + userEvent.length + metadata.length;
       const header = new ArrayBuffer(this.HEADER_LENGTH + metaLength);
-      let view = new DataView(header);
+      const view = new DataView(header);
+      const bytes = new Uint8Array(header);
       let offset = 0;
       view.setUint8(offset++, this.KINDS.userBroadcastPush);
       view.setUint8(offset++, joinRef.length);
@@ -9022,11 +9029,16 @@ var require_serializer = __commonJS((exports) => {
       view.setUint8(offset++, userEvent.length);
       view.setUint8(offset++, metadata.length);
       view.setUint8(offset++, encodingType);
-      Array.from(joinRef, (char) => view.setUint8(offset++, char.charCodeAt(0)));
-      Array.from(ref, (char) => view.setUint8(offset++, char.charCodeAt(0)));
-      Array.from(topic, (char) => view.setUint8(offset++, char.charCodeAt(0)));
-      Array.from(userEvent, (char) => view.setUint8(offset++, char.charCodeAt(0)));
-      Array.from(metadata, (char) => view.setUint8(offset++, char.charCodeAt(0)));
+      bytes.set(joinRef, offset);
+      offset += joinRef.length;
+      bytes.set(ref, offset);
+      offset += ref.length;
+      bytes.set(topic, offset);
+      offset += topic.length;
+      bytes.set(userEvent, offset);
+      offset += userEvent.length;
+      bytes.set(metadata, offset);
+      offset += metadata.length;
       var combined = new Uint8Array(header.byteLength + encodedPayload.byteLength);
       combined.set(new Uint8Array(header), 0);
       combined.set(new Uint8Array(encodedPayload), header.byteLength);
@@ -9091,7 +9103,7 @@ var require_serializer = __commonJS((exports) => {
   exports.default = Serializer;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/lib/transformers.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/transformers.js
 var require_transformers = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.httpEndpointURL = exports.toTimestampString = exports.toArray = exports.toJson = exports.toNumber = exports.toBoolean = exports.convertCell = exports.convertColumn = exports.convertChangeData = exports.PostgresTypes = undefined;
@@ -9260,7 +9272,7 @@ var require_transformers = __commonJS((exports) => {
   exports.httpEndpointURL = httpEndpointURL;
 });
 
-// ../../node_modules/.bun/@supabase+phoenix@0.4.4/node_modules/@supabase/phoenix/priv/static/phoenix.cjs.js
+// ../../node_modules/.bun/@supabase+phoenix@0.4.5/node_modules/@supabase/phoenix/priv/static/phoenix.cjs.js
 var require_phoenix_cjs = __commonJS((exports, module) => {
   var __defProp2 = Object.defineProperty;
   var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -9306,6 +9318,7 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
   var DEFAULT_VSN = "2.0.0";
   var DEFAULT_TIMEOUT = 1e4;
   var WS_CLOSE_NORMAL = 1000;
+  var MAX_LONGPOLL_BATCH_SIZE = 100;
   var SOCKET_STATES = { connecting: 0, open: 1, closing: 2, closed: 3 };
   var CHANNEL_STATES = {
     closed: "closed",
@@ -9848,17 +9861,23 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
         }, 0);
       }
     }
-    batchSend(messages) {
+    batchSend(messages, offset = 0) {
       this.awaitingBatchAck = true;
-      this.ajax("POST", { "Content-Type": "application/x-ndjson" }, messages.join(`
+      const next = offset + MAX_LONGPOLL_BATCH_SIZE;
+      const batch = messages.slice(offset, next);
+      this.ajax("POST", { "Content-Type": "application/x-ndjson" }, batch.join(`
 `), () => this.onerror("timeout"), (resp) => {
-        this.awaitingBatchAck = false;
         if (!resp || resp.status !== 200) {
+          this.awaitingBatchAck = false;
           this.onerror(resp && resp.status);
           this.closeAndRetry(1011, "internal server error", false);
+        } else if (next < messages.length) {
+          this.batchSend(messages, next);
         } else if (this.batchBuffer.length > 0) {
           this.batchSend(this.batchBuffer);
           this.batchBuffer = [];
+        } else {
+          this.awaitingBatchAck = false;
         }
       });
     }
@@ -9895,7 +9914,7 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
   var Presence = class _Presence {
     constructor(channel, opts = {}) {
       let events = opts.events || { state: "presence_state", diff: "presence_diff" };
-      this.state = {};
+      this.state = /* @__PURE__ */ Object.create(null);
       this.pendingDiffs = [];
       this.channel = channel;
       this.joinRef = null;
@@ -9940,9 +9959,10 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
       return !this.joinRef || this.joinRef !== this.channel.joinRef();
     }
     static syncState(currentState, newState, onJoin, onLeave) {
-      let state = this.clone(currentState);
-      let joins = {};
-      let leaves = {};
+      let state = this.toNullProtoObj(this.clone(currentState));
+      newState = this.toNullProtoObj(newState);
+      let joins = /* @__PURE__ */ Object.create(null);
+      let leaves = /* @__PURE__ */ Object.create(null);
       this.map(state, (key, presence) => {
         if (!newState[key]) {
           leaves[key] = presence;
@@ -9970,6 +9990,7 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
       return this.syncDiff(state, { joins, leaves }, onJoin, onLeave);
     }
     static syncDiff(state, diff, onJoin, onLeave) {
+      state = this.toNullProtoObj(state);
       let { joins, leaves } = this.clone(diff);
       if (!onJoin) {
         onJoin = function() {};
@@ -10016,6 +10037,16 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
     static map(obj2, func) {
       return Object.getOwnPropertyNames(obj2).map((key) => func(key, obj2[key]));
     }
+    static toNullProtoObj(obj2) {
+      if (Object.getPrototypeOf(obj2) === null) {
+        return obj2;
+      }
+      let cleaned = /* @__PURE__ */ Object.create(null);
+      Object.getOwnPropertyNames(obj2).forEach((key) => {
+        cleaned[key] = obj2[key];
+      });
+      return cleaned;
+    }
     static clone(obj2) {
       return JSON.parse(JSON.stringify(obj2));
     }
@@ -10042,24 +10073,43 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
     },
     binaryEncode(message) {
       let { join_ref, ref, event, topic, payload } = message;
-      let metaLength = this.META_LENGTH + join_ref.length + ref.length + topic.length + event.length;
+      let encoder = new TextEncoder;
+      let joinRefBytes = encoder.encode(join_ref);
+      let refBytes = encoder.encode(ref);
+      let topicBytes = encoder.encode(topic);
+      let eventBytes = encoder.encode(event);
+      this.assertFieldSize(joinRefBytes.byteLength, "join_ref");
+      this.assertFieldSize(refBytes.byteLength, "ref");
+      this.assertFieldSize(topicBytes.byteLength, "topic");
+      this.assertFieldSize(eventBytes.byteLength, "event");
+      let metaLength = this.META_LENGTH + joinRefBytes.byteLength + refBytes.byteLength + topicBytes.byteLength + eventBytes.byteLength;
       let header = new ArrayBuffer(this.HEADER_LENGTH + metaLength);
+      let headerBytes = new Uint8Array(header);
       let view = new DataView(header);
       let offset = 0;
       view.setUint8(offset++, this.KINDS.push);
-      view.setUint8(offset++, join_ref.length);
-      view.setUint8(offset++, ref.length);
-      view.setUint8(offset++, topic.length);
-      view.setUint8(offset++, event.length);
-      Array.from(join_ref, (char) => view.setUint8(offset++, char.charCodeAt(0)));
-      Array.from(ref, (char) => view.setUint8(offset++, char.charCodeAt(0)));
-      Array.from(topic, (char) => view.setUint8(offset++, char.charCodeAt(0)));
-      Array.from(event, (char) => view.setUint8(offset++, char.charCodeAt(0)));
+      view.setUint8(offset++, joinRefBytes.byteLength);
+      view.setUint8(offset++, refBytes.byteLength);
+      view.setUint8(offset++, topicBytes.byteLength);
+      view.setUint8(offset++, eventBytes.byteLength);
+      headerBytes.set(joinRefBytes, offset);
+      offset += joinRefBytes.byteLength;
+      headerBytes.set(refBytes, offset);
+      offset += refBytes.byteLength;
+      headerBytes.set(topicBytes, offset);
+      offset += topicBytes.byteLength;
+      headerBytes.set(eventBytes, offset);
+      offset += eventBytes.byteLength;
       var combined = new Uint8Array(header.byteLength + payload.byteLength);
-      combined.set(new Uint8Array(header), 0);
+      combined.set(headerBytes, 0);
       combined.set(new Uint8Array(payload), header.byteLength);
       return combined.buffer;
     },
+    assertFieldSize(size, name) {
+      if (size > 255) {
+        throw new Error(`unable to convert ${name} to binary: must be less than or equal to 255 bytes, but is ${size} bytes`);
+      }
+    },
     binaryDecode(buffer) {
       let view = new DataView(buffer);
       let kind = view.getUint8(0);
@@ -10220,7 +10270,7 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
           this.connect();
         });
       }, this.reconnectAfterMs);
-      this.authToken = opts.authToken;
+      this.authToken = opts.authToken && closure(opts.authToken);
     }
     getLongPollTransport() {
       return LongPoll;
@@ -10331,7 +10381,7 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
       this.closeWasClean = false;
       let protocols = undefined;
       if (this.authToken) {
-        protocols = ["phoenix", `${AUTH_TOKEN_PREFIX}${btoa(this.authToken).replace(/=/g, "")}`];
+        protocols = ["phoenix", `${AUTH_TOKEN_PREFIX}${btoa(this.authToken()).replace(/=/g, "")}`];
       }
       this.conn = new this.transport(this.endPointURL(), protocols);
       this.conn.binaryType = this.binaryType;
@@ -10638,7 +10688,7 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js
 var require_presenceAdapter = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var phoenix_1 = require_phoenix_cjs();
@@ -10694,10 +10744,12 @@ var require_presenceAdapter = __commonJS((exports) => {
   exports.default = PresenceAdapter;
   function transformState(presences) {
     return presences.metas.map((presence) => {
-      presence["presence_ref"] = presence["phx_ref"];
-      delete presence["phx_ref"];
-      delete presence["phx_ref_prev"];
-      return presence;
+      const descriptors = Object.getOwnPropertyDescriptors(presence);
+      const transformedPresence = Object.defineProperties({}, descriptors);
+      transformedPresence["presence_ref"] = transformedPresence["phx_ref"];
+      delete transformedPresence["phx_ref"];
+      delete transformedPresence["phx_ref_prev"];
+      return transformedPresence;
     });
   }
   function cloneState(state) {
@@ -10711,7 +10763,7 @@ var require_presenceAdapter = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js
 var require_RealtimePresence = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.REALTIME_PRESENCE_LISTEN_EVENTS = undefined;
@@ -10736,7 +10788,7 @@ var require_RealtimePresence = __commonJS((exports) => {
   exports.default = RealtimePresence;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js
 var require_normalizeChannelError = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.normalizeChannelError = normalizeChannelError;
@@ -10759,7 +10811,7 @@ var require_normalizeChannelError = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js
 var require_channelAdapter = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var constants_1 = require_constants();
@@ -10861,7 +10913,7 @@ var require_channelAdapter = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/RealtimePostgresFilterBuilder.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/RealtimePostgresFilterBuilder.js
 var require_RealtimePostgresFilterBuilder = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.postgresChangesFilter = exports.RealtimePostgresFilterBuilder = undefined;
@@ -10951,7 +11003,7 @@ var require_RealtimePostgresFilterBuilder = __commonJS((exports) => {
   exports.postgresChangesFilter = postgresChangesFilter;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js
 var require_RealtimeChannel = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.REALTIME_CHANNEL_STATES = exports.REALTIME_SUBSCRIBE_STATES = exports.REALTIME_LISTEN_TYPES = exports.REALTIME_POSTGRES_CHANGES_LISTEN_EVENT = exports.postgresChangesFilter = exports.RealtimePostgresFilterBuilder = undefined;
@@ -11111,7 +11163,7 @@ var require_RealtimeChannel = __commonJS((exports) => {
         type: "presence",
         event: "track",
         payload
-      }, opts.timeout || this.timeout);
+      }, opts);
     }
     async untrack(opts = {}) {
       return await this.send({
@@ -11341,7 +11393,7 @@ var require_RealtimeChannel = __commonJS((exports) => {
   exports.default = RealtimeChannel;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js
 var require_socketAdapter = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var phoenix_1 = require_phoenix_cjs();
@@ -11454,7 +11506,7 @@ var require_socketAdapter = __commonJS((exports) => {
   exports.default = SocketAdapter;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js
 var require_RealtimeClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -11907,7 +11959,7 @@ var require_RealtimeClient = __commonJS((exports) => {
   exports.default = RealtimeClient;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.2/node_modules/@supabase/realtime-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/index.js
 var require_main2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocketFactory = exports.REALTIME_CHANNEL_STATES = exports.REALTIME_SUBSCRIBE_STATES = exports.REALTIME_PRESENCE_LISTEN_EVENTS = exports.REALTIME_POSTGRES_CHANGES_LISTEN_EVENT = exports.REALTIME_LISTEN_TYPES = exports.postgresChangesFilter = exports.RealtimePostgresFilterBuilder = exports.RealtimeClient = exports.RealtimeChannel = exports.RealtimePresence = undefined;
@@ -12243,7 +12295,7 @@ var init_dist2 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+storage-js@2.110.2/node_modules/@supabase/storage-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+storage-js@2.111.0/node_modules/@supabase/storage-js/dist/index.mjs
 function _typeof2(o) {
   "@babel/helpers - typeof";
   return _typeof2 = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(o$1) {
@@ -12382,7 +12434,7 @@ var StorageError, StorageApiError, StorageUnknownError, resolveFetch = (customFe
   if (bucketName.includes("/") || bucketName.includes("\\"))
     return false;
   return /^[\w!.\*'() &$@=;:+,?-]+$/.test(bucketName);
-}, _getErrorMessage = (err) => {
+}, encodeStoragePath = (path) => path.split("/").map(encodeURIComponent).join("/"), _getErrorMessage = (err) => {
   if (typeof err === "object" && err !== null) {
     const e = err;
     if (typeof e.msg === "string")
@@ -12551,7 +12603,7 @@ var StorageError, StorageApiError, StorageUnknownError, resolveFetch = (customFe
       throw error;
     }
   }
-}, DEFAULT_SEARCH_OPTIONS, DEFAULT_FILE_OPTIONS, StorageFileApi, version = "2.110.2", DEFAULT_HEADERS, StorageBucketApi, StorageAnalyticsClient, VectorIndexApi, VectorDataApi, VectorBucketApi, StorageVectorsClient, VectorBucketScope, VectorIndexScope, StorageClient;
+}, DEFAULT_SEARCH_OPTIONS, DEFAULT_FILE_OPTIONS, StorageFileApi, version = "2.111.0", DEFAULT_HEADERS, StorageBucketApi, StorageAnalyticsClient, VectorIndexApi, VectorDataApi, VectorBucketApi, StorageVectorsClient, VectorBucketScope, VectorIndexScope, StorageClient;
 var init_dist3 = __esm(() => {
   init_dist2();
   StorageError = class extends Error {
@@ -12841,7 +12893,7 @@ var init_dist3 = __esm(() => {
     async purgeCache(path, options, parameters) {
       var _this13 = this;
       return _this13.handleOperation(async () => {
-        const _path = _this13._getFinalPath(path);
+        const _path = encodeStoragePath(_this13._getFinalPath(path));
         const query = new URLSearchParams;
         if (options === null || options === undefined ? undefined : options.transformations)
           query.set("transformations", "true");
@@ -12964,7 +13016,7 @@ var init_dist3 = __esm(() => {
         if (options === null || options === undefined ? undefined : options.transformations)
           query.set("transformations", "true");
         const queryString = query.toString();
-        return await remove(_this7.fetch, `${_this7.url}/cdn/${id}${queryString ? `?${queryString}` : ""}`, {}, { headers: _this7.headers }, parameters);
+        return await remove(_this7.fetch, `${_this7.url}/cdn/${encodeStoragePath(id)}${queryString ? `?${queryString}` : ""}`, {}, { headers: _this7.headers }, parameters);
       });
     }
     listBucketOptionsToQueryString(options) {
@@ -13284,17 +13336,17 @@ var init_dist3 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/version.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/version.js
 var require_version2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.version = undefined;
-  exports.version = "2.110.2";
+  exports.version = "2.111.0";
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/constants.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/constants.js
 var require_constants2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
-  exports.JWKS_TTL = exports.BASE64URL_REGEX = exports.API_VERSIONS = exports.API_VERSION_HEADER_NAME = exports.NETWORK_FAILURE = exports.DEFAULT_HEADERS = exports.AUDIENCE = exports.STORAGE_KEY = exports.GOTRUE_URL = exports.REFRESH_FAILURE_COOLDOWN_MS = exports.EXPIRY_MARGIN_MS = exports.AUTO_REFRESH_TICK_THRESHOLD = exports.AUTO_REFRESH_TICK_DURATION_MS = undefined;
+  exports.JWKS_TTL = exports.PKCE_MAX_CONCURRENT_FLOWS = exports.PKCE_FLOW_ID_PARAM = exports.BASE64URL_REGEX = exports.API_VERSIONS = exports.API_VERSION_HEADER_NAME = exports.NETWORK_FAILURE = exports.DEFAULT_HEADERS = exports.AUDIENCE = exports.STORAGE_KEY = exports.GOTRUE_URL = exports.REFRESH_FAILURE_COOLDOWN_MS = exports.EXPIRY_MARGIN_MS = exports.AUTO_REFRESH_TICK_THRESHOLD = exports.AUTO_REFRESH_TICK_DURATION_MS = undefined;
   var version_1 = require_version2();
   exports.AUTO_REFRESH_TICK_DURATION_MS = 30 * 1000;
   exports.AUTO_REFRESH_TICK_THRESHOLD = 3;
@@ -13316,10 +13368,12 @@ var require_constants2 = __commonJS((exports) => {
     }
   };
   exports.BASE64URL_REGEX = /^([a-z0-9_-]{4})*($|[a-z0-9_-]{3}$|[a-z0-9_-]{2}$)$/i;
+  exports.PKCE_FLOW_ID_PARAM = "sb_flow_id";
+  exports.PKCE_MAX_CONCURRENT_FLOWS = 5;
   exports.JWKS_TTL = 10 * 60 * 1000;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/errors.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/errors.js
 var require_errors = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.AuthInvalidJwtError = exports.AuthWeakPasswordError = exports.AuthRefreshDiscardedError = exports.AuthRetryableFetchError = exports.AuthPKCECodeVerifierMissingError = exports.AuthPKCEGrantCodeExchangeError = exports.AuthImplicitGrantRedirectError = exports.AuthInvalidCredentialsError = exports.AuthInvalidTokenResponseError = exports.AuthSessionMissingError = exports.CustomAuthError = exports.AuthUnknownError = exports.AuthApiError = exports.AuthError = undefined;
@@ -13488,7 +13542,7 @@ var require_errors = __commonJS((exports) => {
   exports.AuthInvalidJwtError = AuthInvalidJwtError;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/base64url.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/base64url.js
 var require_base64url = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.byteToBase64URL = byteToBase64URL;
@@ -13676,10 +13730,10 @@ var require_base64url = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/helpers.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/helpers.js
 var require_helpers = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
-  exports.Deferred = exports.removeItemAsync = exports.getItemAsync = exports.setItemAsync = exports.looksLikeFetchResponse = exports.resolveFetch = exports.supportsLocalStorage = exports.isBrowser = undefined;
+  exports.pkceVerifierSlotKey = exports.Deferred = exports.removeItemAsync = exports.getItemAsync = exports.setItemAsync = exports.looksLikeFetchResponse = exports.resolveFetch = exports.supportsLocalStorage = exports.isBrowser = undefined;
   exports.expiresAt = expiresAt;
   exports.generateCallbackId = generateCallbackId;
   exports.parseParametersFromURL = parseParametersFromURL;
@@ -13688,6 +13742,13 @@ var require_helpers = __commonJS((exports) => {
   exports.retryable = retryable;
   exports.generatePKCEVerifier = generatePKCEVerifier;
   exports.generatePKCEChallenge = generatePKCEChallenge;
+  exports.validatePKCEFlowId = validatePKCEFlowId;
+  exports.generatePKCEFlowId = generatePKCEFlowId;
+  exports.storePKCEVerifier = storePKCEVerifier;
+  exports.retrievePKCEVerifier = retrievePKCEVerifier;
+  exports.removePKCEVerifier = removePKCEVerifier;
+  exports.removeAllPKCEVerifiers = removeAllPKCEVerifiers;
+  exports.appendFlowIdToRedirectTo = appendFlowIdToRedirectTo;
   exports.getCodeChallengeAndMethod = getCodeChallengeAndMethod;
   exports.parseResponseAPIVersion = parseResponseAPIVersion;
   exports.validateExp = validateExp;
@@ -13879,16 +13940,103 @@ var require_helpers = __commonJS((exports) => {
     const hashed = await sha256(verifier);
     return btoa(hashed).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
   }
-  async function getCodeChallengeAndMethod(storage, storageKey, isPasswordRecovery = false) {
+  var PKCE_FLOW_ID_PATTERN = /^[a-zA-Z0-9_-]{8,64}$/;
+  function validatePKCEFlowId(flowId) {
+    return typeof flowId === "string" && PKCE_FLOW_ID_PATTERN.test(flowId) ? flowId : null;
+  }
+  function generatePKCEFlowId() {
+    if (typeof crypto !== "undefined" && typeof crypto.getRandomValues === "function") {
+      const bytes = new Uint8Array(16);
+      crypto.getRandomValues(bytes);
+      return Array.from(bytes, dec2hex).join("");
+    }
+    let flowId = "";
+    for (let i = 0;i < 32; i++) {
+      flowId += Math.floor(Math.random() * 16).toString(16);
+    }
+    return flowId;
+  }
+  var pkceVerifierSlotKey = (storageKey, flowId) => `${storageKey}-flow-${flowId}-code-verifier`;
+  exports.pkceVerifierSlotKey = pkceVerifierSlotKey;
+  var pkceFlowIndexKey = (storageKey) => `${storageKey}-flows-code-verifier`;
+  async function getPKCEFlowIndex(storage, storageKey) {
+    const index = await (0, exports.getItemAsync)(storage, pkceFlowIndexKey(storageKey));
+    return Array.isArray(index) ? index.filter((id) => validatePKCEFlowId(id) !== null) : [];
+  }
+  async function storePKCEVerifier(storage, storageKey, flowId, verifier, onEvictFlow) {
+    await (0, exports.setItemAsync)(storage, (0, exports.pkceVerifierSlotKey)(storageKey, flowId), verifier);
+    const index = (await getPKCEFlowIndex(storage, storageKey)).filter((id) => id !== flowId);
+    index.push(flowId);
+    while (index.length > constants_1.PKCE_MAX_CONCURRENT_FLOWS) {
+      const evicted = index.shift();
+      await (0, exports.removeItemAsync)(storage, (0, exports.pkceVerifierSlotKey)(storageKey, evicted));
+      onEvictFlow === null || onEvictFlow === undefined || onEvictFlow(evicted);
+    }
+    await (0, exports.setItemAsync)(storage, pkceFlowIndexKey(storageKey), index);
+    await (0, exports.setItemAsync)(storage, `${storageKey}-code-verifier`, verifier);
+  }
+  async function retrievePKCEVerifier(storage, storageKey, flowId) {
+    if (flowId) {
+      const verifier2 = await (0, exports.getItemAsync)(storage, (0, exports.pkceVerifierSlotKey)(storageKey, flowId));
+      return { verifier: typeof verifier2 === "string" ? verifier2 : null, flowId };
+    }
+    const verifier = await (0, exports.getItemAsync)(storage, `${storageKey}-code-verifier`);
+    return { verifier: typeof verifier === "string" ? verifier : null, flowId: null };
+  }
+  async function removePKCEVerifier(storage, storageKey, flowId) {
+    const legacyKey = `${storageKey}-code-verifier`;
+    if (!flowId) {
+      await (0, exports.removeItemAsync)(storage, legacyKey);
+      return;
+    }
+    const slotKey = (0, exports.pkceVerifierSlotKey)(storageKey, flowId);
+    const slotValue = await (0, exports.getItemAsync)(storage, slotKey);
+    await (0, exports.removeItemAsync)(storage, slotKey);
+    const index = await getPKCEFlowIndex(storage, storageKey);
+    const remaining = index.filter((id) => id !== flowId);
+    if (remaining.length !== index.length) {
+      if (remaining.length > 0) {
+        await (0, exports.setItemAsync)(storage, pkceFlowIndexKey(storageKey), remaining);
+      } else {
+        await (0, exports.removeItemAsync)(storage, pkceFlowIndexKey(storageKey));
+      }
+    }
+    if (slotValue != null && slotValue === await (0, exports.getItemAsync)(storage, legacyKey)) {
+      await (0, exports.removeItemAsync)(storage, legacyKey);
+    }
+  }
+  async function removeAllPKCEVerifiers(storage, storageKey) {
+    const index = await getPKCEFlowIndex(storage, storageKey);
+    for (const flowId of index) {
+      await (0, exports.removeItemAsync)(storage, (0, exports.pkceVerifierSlotKey)(storageKey, flowId));
+    }
+    await (0, exports.removeItemAsync)(storage, pkceFlowIndexKey(storageKey));
+    await (0, exports.removeItemAsync)(storage, `${storageKey}-code-verifier`);
+  }
+  function appendFlowIdToRedirectTo(redirectTo, flowId) {
+    const hashIndex = redirectTo.indexOf("#");
+    let base = hashIndex === -1 ? redirectTo : redirectTo.slice(0, hashIndex);
+    const fragment = hashIndex === -1 ? "" : redirectTo.slice(hashIndex);
+    const queryIndex = base.indexOf("?");
+    if (queryIndex !== -1) {
+      const path = base.slice(0, queryIndex);
+      const remaining = base.slice(queryIndex + 1).split("&").filter((pair) => pair !== "" && pair !== constants_1.PKCE_FLOW_ID_PARAM && !pair.startsWith(`${constants_1.PKCE_FLOW_ID_PARAM}=`));
+      base = remaining.length > 0 ? `${path}?${remaining.join("&")}` : path;
+    }
+    const separator = base.includes("?") ? "&" : "?";
+    return `${base}${separator}${constants_1.PKCE_FLOW_ID_PARAM}=${encodeURIComponent(flowId)}${fragment}`;
+  }
+  async function getCodeChallengeAndMethod(storage, storageKey, isPasswordRecovery = false, onEvictFlow) {
     const codeVerifier = generatePKCEVerifier();
     let storedCodeVerifier = codeVerifier;
     if (isPasswordRecovery) {
       storedCodeVerifier += "/recovery";
     }
-    await (0, exports.setItemAsync)(storage, `${storageKey}-code-verifier`, storedCodeVerifier);
+    const flowId = generatePKCEFlowId();
+    await storePKCEVerifier(storage, storageKey, flowId, storedCodeVerifier, onEvictFlow);
     const codeChallenge = await generatePKCEChallenge(codeVerifier);
     const codeChallengeMethod = codeVerifier === codeChallenge ? "plain" : "s256";
-    return [codeChallenge, codeChallengeMethod];
+    return [codeChallenge, codeChallengeMethod, flowId];
   }
   var API_VERSION_REGEX = /^2[0-9]{3}-(0[1-9]|1[0-2])-(0[1-9]|1[0-9]|2[0-9]|3[0-1])$/i;
   function parseResponseAPIVersion(response) {
@@ -13991,7 +14139,7 @@ var require_helpers = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/fetch.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/fetch.js
 var require_fetch = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.handleError = handleError2;
@@ -14105,7 +14253,6 @@ var require_fetch = __commonJS((exports) => {
     try {
       result = await fetcher(url, Object.assign({}, requestParams));
     } catch (e) {
-      console.error(e);
       throw new errors_1.AuthRetryableFetchError(_getErrorMessage2(e), 0);
     }
     if (!result.ok) {
@@ -14173,14 +14320,14 @@ var require_fetch = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/types.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/types.js
 var require_types2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.SIGN_OUT_SCOPES = undefined;
   exports.SIGN_OUT_SCOPES = ["global", "local", "others"];
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js
 var require_GoTrueAdminApi = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -14627,7 +14774,7 @@ var require_GoTrueAdminApi = __commonJS((exports) => {
   exports.default = GoTrueAdminApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/local-storage.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/local-storage.js
 var require_local_storage = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.memoryLocalStorageAdapter = memoryLocalStorageAdapter;
@@ -14646,7 +14793,7 @@ var require_local_storage = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/locks.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/locks.js
 var require_locks = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.ProcessLockAcquireTimeoutError = exports.NavigatorLockAcquireTimeoutError = exports.LockAcquireTimeoutError = exports.internals = undefined;
@@ -14820,7 +14967,7 @@ var require_locks = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/polyfills.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/polyfills.js
 var require_polyfills = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.polyfillGlobalThis = polyfillGlobalThis;
@@ -14844,7 +14991,7 @@ var require_polyfills = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js
 var require_ethereum = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.getAddress = getAddress;
@@ -14921,7 +15068,7 @@ ${suffix}`;
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js
 var require_webauthn_errors = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebAuthnUnknownError = exports.WebAuthnError = undefined;
@@ -15108,7 +15255,7 @@ var require_webauthn_errors = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/lib/webauthn.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/webauthn.js
 var require_webauthn = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebAuthnApi = exports.DEFAULT_REQUEST_OPTIONS = exports.DEFAULT_CREATION_OPTIONS = exports.webAuthnAbortService = exports.WebAuthnAbortService = exports.identifyAuthenticationError = exports.identifyRegistrationError = exports.isWebAuthnError = exports.WebAuthnError = undefined;
@@ -15562,7 +15709,7 @@ var require_webauthn = __commonJS((exports) => {
   exports.WebAuthnApi = WebAuthnApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/GoTrueClient.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/GoTrueClient.js
 var require_GoTrueClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -15861,6 +16008,7 @@ var require_GoTrueClient = __commonJS((exports) => {
     }
     async signUp(credentials) {
       var _a, _b, _c;
+      let flowId = null;
       try {
         let res;
         if ("email" in credentials) {
@@ -15868,11 +16016,11 @@ var require_GoTrueClient = __commonJS((exports) => {
           let codeChallenge = null;
           let codeChallengeMethod = null;
           if (this.flowType === "pkce") {
-            [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+            [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
           }
           res = await (0, fetch_1._request)(this.fetch, "POST", `${this.url}/signup`, {
             headers: this.headers,
-            redirectTo: options === null || options === undefined ? undefined : options.emailRedirectTo,
+            redirectTo: this._maybeAppendFlowIdToRedirect(options === null || options === undefined ? undefined : options.emailRedirectTo, flowId),
             body: {
               email,
               password,
@@ -15901,7 +16049,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
         const { data, error } = res;
         if (error || !data) {
-          await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+          await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
           return this._returnResult({ data: { user: null, session: null }, error });
         }
         const session = data.session;
@@ -15912,7 +16060,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
         return this._returnResult({ data: { user, session }, error: null });
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: { user: null, session: null }, error });
         }
@@ -15978,14 +16126,14 @@ var require_GoTrueClient = __commonJS((exports) => {
         skipBrowserRedirect: (_d = credentials.options) === null || _d === undefined ? undefined : _d.skipBrowserRedirect
       });
     }
-    async exchangeCodeForSession(authCode) {
+    async exchangeCodeForSession(authCode, options) {
       await this.initializePromise;
       if (this.lock != null) {
         return this._acquireLock(this.lockAcquireTimeout, async () => {
-          return this._exchangeCodeForSession(authCode);
+          return this._exchangeCodeForSession(authCode, options);
         });
       }
-      return this._exchangeCodeForSession(authCode);
+      return this._exchangeCodeForSession(authCode, options);
     }
     async signInWithWeb3(credentials) {
       const { chain } = credentials;
@@ -16189,8 +16337,13 @@ var require_GoTrueClient = __commonJS((exports) => {
         throw error;
       }
     }
-    async _exchangeCodeForSession(authCode) {
-      const storageItem = await (0, helpers_1.getItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+    async _exchangeCodeForSession(authCode, options) {
+      const hasExplicitFlowId = (options === null || options === undefined ? undefined : options.flowId) != null;
+      const requestedFlowId = hasExplicitFlowId ? (0, helpers_1.validatePKCEFlowId)(options === null || options === undefined ? undefined : options.flowId) : (0, helpers_1.isBrowser)() ? (0, helpers_1.validatePKCEFlowId)((0, helpers_1.parseParametersFromURL)(window.location.href)[constants_1.PKCE_FLOW_ID_PARAM]) : null;
+      if (hasExplicitFlowId && !requestedFlowId) {
+        this._debug("#_exchangeCodeForSession()", "provided flowId is not a valid flow id", options === null || options === undefined ? undefined : options.flowId);
+      }
+      const { verifier: storageItem, flowId } = hasExplicitFlowId && !requestedFlowId ? { verifier: null, flowId: null } : await (0, helpers_1.retrievePKCEVerifier)(this.storage, this.storageKey, requestedFlowId);
       const [codeVerifier, redirectType] = (storageItem !== null && storageItem !== undefined ? storageItem : "").split("/");
       try {
         if (!codeVerifier && this.flowType === "pkce") {
@@ -16204,7 +16357,7 @@ var require_GoTrueClient = __commonJS((exports) => {
           },
           xform: fetch_1._sessionResponse
         });
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if (error) {
           throw error;
         }
@@ -16221,7 +16374,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
         return this._returnResult({ data: Object.assign(Object.assign({}, data), { redirectType: redirectType !== null && redirectType !== undefined ? redirectType : null }), error });
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({
             data: { user: null, session: null, redirectType: null },
@@ -16266,13 +16419,14 @@ var require_GoTrueClient = __commonJS((exports) => {
     }
     async signInWithOtp(credentials) {
       var _a, _b, _c, _d, _f;
+      let flowId = null;
       try {
         if ("email" in credentials) {
           const { email, options } = credentials;
           let codeChallenge = null;
           let codeChallengeMethod = null;
           if (this.flowType === "pkce") {
-            [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+            [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
           }
           const { error } = await (0, fetch_1._request)(this.fetch, "POST", `${this.url}/otp`, {
             headers: this.headers,
@@ -16284,7 +16438,7 @@ var require_GoTrueClient = __commonJS((exports) => {
               code_challenge: codeChallenge,
               code_challenge_method: codeChallengeMethod
             },
-            redirectTo: options === null || options === undefined ? undefined : options.emailRedirectTo
+            redirectTo: this._maybeAppendFlowIdToRedirect(options === null || options === undefined ? undefined : options.emailRedirectTo, flowId)
           });
           return this._returnResult({ data: { user: null, session: null }, error });
         }
@@ -16307,7 +16461,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
         throw new errors_1.AuthInvalidCredentialsError("You must provide either an email or phone number.");
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: { user: null, session: null }, error });
         }
@@ -16351,24 +16505,25 @@ var require_GoTrueClient = __commonJS((exports) => {
       }
     }
     async signInWithSSO(params) {
-      var _a, _b, _c, _d, _f;
+      var _a, _b, _c, _d;
+      let flowId = null;
       try {
         let codeChallenge = null;
         let codeChallengeMethod = null;
         if (this.flowType === "pkce") {
-          [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+          [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
         }
         const result = await (0, fetch_1._request)(this.fetch, "POST", `${this.url}/sso`, {
-          body: Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, "providerId" in params ? { provider_id: params.providerId } : null), "domain" in params ? { domain: params.domain } : null), { redirect_to: (_b = (_a = params.options) === null || _a === undefined ? undefined : _a.redirectTo) !== null && _b !== undefined ? _b : undefined }), ((_c = params === null || params === undefined ? undefined : params.options) === null || _c === undefined ? undefined : _c.captchaToken) ? { gotrue_meta_security: { captcha_token: params.options.captchaToken } } : null), { skip_http_redirect: true, code_challenge: codeChallenge, code_challenge_method: codeChallengeMethod }),
+          body: Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, "providerId" in params ? { provider_id: params.providerId } : null), "domain" in params ? { domain: params.domain } : null), { redirect_to: this._maybeAppendFlowIdToRedirect((_a = params.options) === null || _a === undefined ? undefined : _a.redirectTo, flowId) }), ((_b = params === null || params === undefined ? undefined : params.options) === null || _b === undefined ? undefined : _b.captchaToken) ? { gotrue_meta_security: { captcha_token: params.options.captchaToken } } : null), { skip_http_redirect: true, code_challenge: codeChallenge, code_challenge_method: codeChallengeMethod }),
           headers: this.headers,
           xform: fetch_1._ssoResponse
         });
-        if (((_d = result.data) === null || _d === undefined ? undefined : _d.url) && (0, helpers_1.isBrowser)() && !((_f = params.options) === null || _f === undefined ? undefined : _f.skipBrowserRedirect)) {
+        if (((_c = result.data) === null || _c === undefined ? undefined : _c.url) && (0, helpers_1.isBrowser)() && !((_d = params.options) === null || _d === undefined ? undefined : _d.skipBrowserRedirect)) {
           window.location.assign(result.data.url);
         }
         return this._returnResult(result);
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: null, error });
         }
@@ -16406,6 +16561,7 @@ var require_GoTrueClient = __commonJS((exports) => {
       }
     }
     async resend(credentials) {
+      let flowId = null;
       try {
         const endpoint = `${this.url}/resend`;
         if ("email" in credentials) {
@@ -16413,7 +16569,7 @@ var require_GoTrueClient = __commonJS((exports) => {
           let codeChallenge = null;
           let codeChallengeMethod = null;
           if (this.flowType === "pkce") {
-            [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+            [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
           }
           const { error } = await (0, fetch_1._request)(this.fetch, "POST", endpoint, {
             headers: this.headers,
@@ -16424,10 +16580,10 @@ var require_GoTrueClient = __commonJS((exports) => {
               code_challenge: codeChallenge,
               code_challenge_method: codeChallengeMethod
             },
-            redirectTo: options === null || options === undefined ? undefined : options.emailRedirectTo
+            redirectTo: this._maybeAppendFlowIdToRedirect(options === null || options === undefined ? undefined : options.emailRedirectTo, flowId)
           });
           if (error) {
-            await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+            await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
           }
           return this._returnResult({ data: { user: null, session: null }, error });
         } else if ("phone" in credentials) {
@@ -16447,7 +16603,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
         throw new errors_1.AuthInvalidCredentialsError("You must provide either an email or phone number and a type");
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: { user: null, session: null }, error });
         }
@@ -16620,7 +16776,6 @@ var require_GoTrueClient = __commonJS((exports) => {
         if ((0, errors_1.isAuthError)(error)) {
           if ((0, errors_1.isAuthSessionMissingError)(error)) {
             await this._removeSession();
-            await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
           }
           return this._returnResult({ data: { user: null }, error });
         }
@@ -16637,6 +16792,7 @@ var require_GoTrueClient = __commonJS((exports) => {
       return await this._updateUser(attributes, options);
     }
     async _updateUser(attributes, options = {}) {
+      let flowId = null;
       try {
         return await this._useSession(async (result) => {
           const { data: sessionData, error: sessionError } = result;
@@ -16650,11 +16806,11 @@ var require_GoTrueClient = __commonJS((exports) => {
           let codeChallenge = null;
           let codeChallengeMethod = null;
           if (this.flowType === "pkce" && attributes.email != null) {
-            [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+            [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
           }
           const { data, error: userError2 } = await (0, fetch_1._request)(this.fetch, "PUT", `${this.url}/user`, {
             headers: this.headers,
-            redirectTo: options === null || options === undefined ? undefined : options.emailRedirectTo,
+            redirectTo: this._maybeAppendFlowIdToRedirect(options === null || options === undefined ? undefined : options.emailRedirectTo, flowId),
             body: Object.assign(Object.assign({}, attributes), { code_challenge: codeChallenge, code_challenge_method: codeChallengeMethod }),
             jwt: session.access_token,
             xform: fetch_1._userResponse
@@ -16668,7 +16824,7 @@ var require_GoTrueClient = __commonJS((exports) => {
           return this._returnResult({ data: { user: session.user }, error: null });
         });
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: { user: null }, error });
         }
@@ -16798,11 +16954,14 @@ var require_GoTrueClient = __commonJS((exports) => {
           this._debug("#_initialize()", "begin", "is PKCE flow", true);
           if (!params.code)
             throw new errors_1.AuthPKCEGrantCodeExchangeError("No code detected.");
-          const { data: data2, error: error2 } = await this._exchangeCodeForSession(params.code);
+          const { data: data2, error: error2 } = await this._exchangeCodeForSession(params.code, {
+            flowId: params[constants_1.PKCE_FLOW_ID_PARAM]
+          });
           if (error2)
             throw error2;
           const url = new URL(window.location.href);
           url.searchParams.delete("code");
+          url.searchParams.delete(constants_1.PKCE_FLOW_ID_PARAM);
           window.history.replaceState(window.history.state, "", url.toString());
           return {
             data: { session: data2.session, redirectType: (_a = data2.redirectType) !== null && _a !== undefined ? _a : null },
@@ -16859,8 +17018,15 @@ var require_GoTrueClient = __commonJS((exports) => {
       return Boolean(params.access_token || params.error || params.error_description || params.error_code);
     }
     async _isPKCECallback(params) {
+      if (!params.code) {
+        return false;
+      }
+      const flowId = (0, helpers_1.validatePKCEFlowId)(params[constants_1.PKCE_FLOW_ID_PARAM]);
+      if (flowId && await (0, helpers_1.getItemAsync)(this.storage, (0, helpers_1.pkceVerifierSlotKey)(this.storageKey, flowId))) {
+        return true;
+      }
       const currentStorageContent = await (0, helpers_1.getItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
-      return !!(params.code && currentStorageContent);
+      return !!currentStorageContent;
     }
     async signOut(options = { scope: "global" }) {
       await this.initializePromise;
@@ -16876,7 +17042,6 @@ var require_GoTrueClient = __commonJS((exports) => {
         var _a;
         const removeCurrentSession = async () => {
           await this._removeSession();
-          await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
         };
         const { data, error: sessionError } = result;
         if (sessionError && !(0, errors_1.isAuthSessionMissingError)(sessionError)) {
@@ -16936,7 +17101,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         } catch (err) {
           await ((_b = this.stateChangeEmitters.get(id)) === null || _b === undefined ? undefined : _b.callback("INITIAL_SESSION", null));
           this._debug("INITIAL_SESSION", "callback id", id, "error", err);
-          if ((0, errors_1.isAuthSessionMissingError)(err)) {
+          if ((0, errors_1.isAuthSessionMissingError)(err) || (0, errors_1.isAuthRetryableFetchError)(err) || (0, errors_1.isAuthApiError)(err) && (err.code === "refresh_token_not_found" || err.code === "refresh_token_already_used" || err.code === "session_expired")) {
             console.warn(err);
           } else {
             console.error(err);
@@ -16947,8 +17112,9 @@ var require_GoTrueClient = __commonJS((exports) => {
     async resetPasswordForEmail(email, options = {}) {
       let codeChallenge = null;
       let codeChallengeMethod = null;
+      let flowId = null;
       if (this.flowType === "pkce") {
-        [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey, true);
+        [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod(true);
       }
       try {
         return await (0, fetch_1._request)(this.fetch, "POST", `${this.url}/recover`, {
@@ -16959,10 +17125,10 @@ var require_GoTrueClient = __commonJS((exports) => {
             gotrue_meta_security: { captcha_token: options.captchaToken }
           },
           headers: this.headers,
-          redirectTo: options.redirectTo
+          redirectTo: this._maybeAppendFlowIdToRedirect(options.redirectTo, flowId)
         });
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: null, error });
         }
@@ -16991,18 +17157,20 @@ var require_GoTrueClient = __commonJS((exports) => {
     }
     async linkIdentityOAuth(credentials) {
       var _a;
+      let flowId = null;
       try {
         const { data, error } = await this._useSession(async (result) => {
           var _a2, _b, _c, _d, _f;
           const { data: data2, error: error2 } = result;
           if (error2)
             throw error2;
-          const url = await this._getUrlForProvider(`${this.url}/user/identities/authorize`, credentials.provider, {
+          const { url, flowId: urlFlowId } = await this._getUrlForProvider(`${this.url}/user/identities/authorize`, credentials.provider, {
             redirectTo: (_a2 = credentials.options) === null || _a2 === undefined ? undefined : _a2.redirectTo,
             scopes: (_b = credentials.options) === null || _b === undefined ? undefined : _b.scopes,
             queryParams: (_c = credentials.options) === null || _c === undefined ? undefined : _c.queryParams,
             skipBrowserRedirect: true
           });
+          flowId = urlFlowId;
           return await (0, fetch_1._request)(this.fetch, "GET", url, {
             headers: this.headers,
             jwt: (_f = (_d = data2.session) === null || _d === undefined ? undefined : _d.access_token) !== null && _f !== undefined ? _f : undefined
@@ -17014,12 +17182,15 @@ var require_GoTrueClient = __commonJS((exports) => {
           window.location.assign(data === null || data === undefined ? undefined : data.url);
         }
         return this._returnResult({
-          data: { provider: credentials.provider, url: data === null || data === undefined ? undefined : data.url },
+          data: { provider: credentials.provider, url: data === null || data === undefined ? undefined : data.url, flowId },
           error: null
         });
       } catch (error) {
         if ((0, errors_1.isAuthError)(error)) {
-          return this._returnResult({ data: { provider: credentials.provider, url: null }, error });
+          return this._returnResult({
+            data: { provider: credentials.provider, url: null, flowId },
+            error
+          });
         }
         throw error;
       }
@@ -17060,7 +17231,7 @@ var require_GoTrueClient = __commonJS((exports) => {
           }
           return this._returnResult({ data, error });
         } catch (error) {
-          await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+          await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, null);
           if ((0, errors_1.isAuthError)(error)) {
             return this._returnResult({ data: { user: null, session: null }, error });
           }
@@ -17122,7 +17293,7 @@ var require_GoTrueClient = __commonJS((exports) => {
       return isValidSession;
     }
     async _handleProviderSignIn(provider, options) {
-      const url = await this._getUrlForProvider(`${this.url}/authorize`, provider, {
+      const { url, flowId } = await this._getUrlForProvider(`${this.url}/authorize`, provider, {
         redirectTo: options.redirectTo,
         scopes: options.scopes,
         queryParams: options.queryParams
@@ -17131,7 +17302,7 @@ var require_GoTrueClient = __commonJS((exports) => {
       if ((0, helpers_1.isBrowser)() && !options.skipBrowserRedirect) {
         window.location.assign(url);
       }
-      return { data: { provider, url }, error: null };
+      return { data: { provider, url, flowId }, error: null };
     }
     async _recoverAndRefresh() {
       var _a, _b;
@@ -17198,7 +17369,11 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
       } catch (err) {
         this._debug(debugName, "error", err);
-        console.error(err);
+        if ((0, errors_1.isAuthRetryableFetchError)(err)) {
+          console.warn(err);
+        } else {
+          console.error(err);
+        }
         return;
       } finally {
         this._debug(debugName, "end");
@@ -17321,7 +17496,6 @@ var require_GoTrueClient = __commonJS((exports) => {
     async _saveSession(session) {
       this._debug("#_saveSession()", session);
       this.suppressGetSessionWarning = true;
-      await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
       const sessionToProcess = Object.assign({}, session);
       const userIsProxy = sessionToProcess.user && sessionToProcess.user.__isUserNotAvailableProxy === true;
       if (this.userStorage) {
@@ -17345,7 +17519,7 @@ var require_GoTrueClient = __commonJS((exports) => {
       this.lastRefreshFailure = null;
       this.suppressGetSessionWarning = false;
       await (0, helpers_1.removeItemAsync)(this.storage, this.storageKey);
-      await (0, helpers_1.removeItemAsync)(this.storage, this.storageKey + "-code-verifier");
+      await (0, helpers_1.removeAllPKCEVerifiers)(this.storage, this.storageKey);
       await (0, helpers_1.removeItemAsync)(this.storage, this.storageKey + "-user");
       if (this.userStorage) {
         await (0, helpers_1.removeItemAsync)(this.userStorage, this.storageKey + "-user");
@@ -17530,15 +17704,22 @@ var require_GoTrueClient = __commonJS((exports) => {
       }
     }
     async _getUrlForProvider(url, provider, options) {
+      let redirectTo = options === null || options === undefined ? undefined : options.redirectTo;
+      let codeChallenge = null;
+      let codeChallengeMethod = null;
+      let flowId = null;
+      if (this.flowType === "pkce") {
+        [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
+        redirectTo = this._maybeAppendFlowIdToRedirect(redirectTo, flowId);
+      }
       const urlParams = [`provider=${encodeURIComponent(provider)}`];
-      if (options === null || options === undefined ? undefined : options.redirectTo) {
-        urlParams.push(`redirect_to=${encodeURIComponent(options.redirectTo)}`);
+      if (redirectTo) {
+        urlParams.push(`redirect_to=${encodeURIComponent(redirectTo)}`);
       }
       if (options === null || options === undefined ? undefined : options.scopes) {
         urlParams.push(`scopes=${encodeURIComponent(options.scopes)}`);
       }
-      if (this.flowType === "pkce") {
-        const [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+      if (codeChallenge != null && codeChallengeMethod != null) {
         const flowParams = new URLSearchParams({
           code_challenge: `${encodeURIComponent(codeChallenge)}`,
           code_challenge_method: `${encodeURIComponent(codeChallengeMethod)}`
@@ -17552,7 +17733,16 @@ var require_GoTrueClient = __commonJS((exports) => {
       if (options === null || options === undefined ? undefined : options.skipBrowserRedirect) {
         urlParams.push(`skip_http_redirect=${options.skipBrowserRedirect}`);
       }
-      return `${url}?${urlParams.join("&")}`;
+      return { url: `${url}?${urlParams.join("&")}`, flowId };
+    }
+    _maybeAppendFlowIdToRedirect(redirectTo, flowId) {
+      if (!redirectTo || !flowId || !this.experimental.appendPkceFlowIdToRedirects) {
+        return redirectTo !== null && redirectTo !== undefined ? redirectTo : undefined;
+      }
+      return (0, helpers_1.appendFlowIdToRedirectTo)(redirectTo, flowId);
+    }
+    async _getCodeChallengeAndMethod(isPasswordRecovery = false) {
+      return (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey, isPasswordRecovery, (evictedFlowId) => this._debug("#_getCodeChallengeAndMethod()", "evicted oldest pending PKCE verifier slot", evictedFlowId));
     }
     async _unenroll(params) {
       try {
@@ -18258,7 +18448,7 @@ var require_GoTrueClient = __commonJS((exports) => {
   exports.default = GoTrueClient;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js
 var require_AuthAdminApi = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -18267,7 +18457,7 @@ var require_AuthAdminApi = __commonJS((exports) => {
   exports.default = AuthAdminApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/AuthClient.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/AuthClient.js
 var require_AuthClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -18276,7 +18466,7 @@ var require_AuthClient = __commonJS((exports) => {
   exports.default = AuthClient;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.2/node_modules/@supabase/auth-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/index.js
 var require_main3 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.processLock = exports.lockInternals = exports.NavigatorLockAcquireTimeoutError = exports.navigatorLock = exports.AuthClient = exports.AuthAdminApi = exports.GoTrueClient = exports.GoTrueAdminApi = undefined;
@@ -18306,7 +18496,7 @@ var require_main3 = __commonJS((exports) => {
   } });
 });
 
-// ../../node_modules/.bun/@supabase+supabase-js@2.110.2/node_modules/@supabase/supabase-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+supabase-js@2.111.0/node_modules/@supabase/supabase-js/dist/index.mjs
 var exports_dist = {};
 __export(exports_dist, {
   createClient: () => createClient,
@@ -18554,7 +18744,7 @@ function validateSupabaseUrl(supabaseUrl) {
   }
 }
 function shouldShowDeprecationWarning() {
-  if (typeof window !== "undefined")
+  if (typeof window !== "undefined" || globalThis["Deno"] !== undefined)
     return false;
   const _process = globalThis["process"];
   if (!_process)
@@ -18567,26 +18757,38 @@ function shouldShowDeprecationWarning() {
     return false;
   return parseInt(versionMatch[1], 10) <= 20;
 }
-var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.110.2", JS_ENV = "", JS_RUNTIME_VERSION, _Deno$version, _process$version, _runtimeMeta, DEFAULT_HEADERS2, DEFAULT_GLOBAL_OPTIONS, DEFAULT_DB_OPTIONS, DEFAULT_AUTH_OPTIONS, DEFAULT_REALTIME_OPTIONS, DEFAULT_TRACE_PROPAGATION_OPTIONS, otelModulePromise = null, OTEL_PKG = "@opentelemetry/api", resolveFetch2 = (customFetch) => {
+var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.111.0", JS_ENV = "", JS_RUNTIME_VERSION, _Deno$version, _process$version, _runtimeMeta, DEFAULT_HEADERS2, DEFAULT_GLOBAL_OPTIONS, DEFAULT_DB_OPTIONS, DEFAULT_AUTH_OPTIONS, DEFAULT_REALTIME_OPTIONS, DEFAULT_TRACE_PROPAGATION_OPTIONS, otelModulePromise = null, OTEL_PKG = "@opentelemetry/api", resolveFetch2 = (customFetch) => {
   if (customFetch)
     return (...args) => customFetch(...args);
   return (...args) => fetch(...args);
 }, resolveHeadersConstructor = () => {
   return Headers;
-}, fetchWithAuth = (supabaseKey, supabaseUrl, getAccessToken, customFetch, tracePropagationOptions) => {
+}, isNewApiKey = (key) => key.startsWith("sb_publishable_") || key.startsWith("sb_secret_"), TEMP_KEY_PREFIX = "sb_temp_", warnedKeySubtypes, checkApiKeyFormat = (key) => {
+  var _key$match$, _key$match;
+  if (!key.startsWith("sb_") || isNewApiKey(key) || key.startsWith(TEMP_KEY_PREFIX))
+    return;
+  const subtype = (_key$match$ = (_key$match = key.match(/^sb_[a-zA-Z0-9]+_/)) === null || _key$match === undefined ? undefined : _key$match[0]) !== null && _key$match$ !== undefined ? _key$match$ : "unknown";
+  if (warnedKeySubtypes.has(subtype))
+    return;
+  warnedKeySubtypes.add(subtype);
+  console.warn("@supabase/supabase-js: Unrecognized Supabase API key format. The client will proceed and send this key as-is; if you see authentication errors you may need to upgrade @supabase/supabase-js to a version that recognizes this key type.");
+}, fetchWithAuth = (supabaseKey, supabaseUrl, getAccessToken, customFetch, tracePropagationOptions, options) => {
   const fetch$1 = resolveFetch2(customFetch);
   const HeadersConstructor = resolveHeadersConstructor();
   const traceEnabled = (tracePropagationOptions === null || tracePropagationOptions === undefined ? undefined : tracePropagationOptions.enabled) === true;
   const respectSampling = (tracePropagationOptions === null || tracePropagationOptions === undefined ? undefined : tracePropagationOptions.respectSamplingDecision) !== false;
   const traceTargets = traceEnabled ? getDefaultPropagationTargets(supabaseUrl) : null;
+  const allowKeyAsBearer = !((options === null || options === undefined ? undefined : options.omitApiKeyAsBearer) && isNewApiKey(supabaseKey));
   return async (input, init) => {
-    var _await$getAccessToken;
-    const accessToken = (_await$getAccessToken = await getAccessToken()) !== null && _await$getAccessToken !== undefined ? _await$getAccessToken : supabaseKey;
+    const realToken = await getAccessToken();
     let headers = new HeadersConstructor(init === null || init === undefined ? undefined : init.headers);
     if (!headers.has("apikey"))
       headers.set("apikey", supabaseKey);
-    if (!headers.has("Authorization"))
-      headers.set("Authorization", `Bearer ${accessToken}`);
+    if (!headers.has("Authorization")) {
+      const bearer = realToken !== null && realToken !== undefined ? realToken : allowKeyAsBearer ? supabaseKey : null;
+      if (bearer)
+        headers.set("Authorization", `Bearer ${bearer}`);
+    }
     if (traceTargets) {
       const traceHeaders = await getTraceHeaders(input, traceTargets, respectSampling);
       if (traceHeaders) {
@@ -18608,6 +18810,7 @@ var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.110.2
     const baseUrl = validateSupabaseUrl(supabaseUrl);
     if (!supabaseKey)
       throw new Error("supabaseKey is required.");
+    checkApiKeyFormat(supabaseKey);
     this.realtimeUrl = new URL("realtime/v1", baseUrl);
     this.realtimeUrl.protocol = this.realtimeUrl.protocol.replace("http", "ws");
     this.authUrl = new URL("auth/v1", baseUrl);
@@ -18634,7 +18837,8 @@ var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.110.2
         throw new Error(`@supabase/supabase-js: Supabase Client is configured with the accessToken option, accessing supabase.auth.${String(prop)} is not possible`);
       } });
     }
-    this.fetch = fetchWithAuth(supabaseKey, supabaseUrl, this._getAccessToken.bind(this), settings.global.fetch, settings.tracePropagation);
+    this.fetch = fetchWithAuth(supabaseKey, supabaseUrl, this._getSessionToken.bind(this), settings.global.fetch, settings.tracePropagation);
+    this.functionsFetch = fetchWithAuth(supabaseKey, supabaseUrl, this._getSessionToken.bind(this), settings.global.fetch, settings.tracePropagation, { omitApiKeyAsBearer: true });
     this.realtime = this._initRealtimeClient(_objectSpread23({
       headers: this.headers,
       accessToken: this._getAccessToken.bind(this),
@@ -18656,7 +18860,7 @@ var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.110.2
   get functions() {
     return new import_functions_js.FunctionsClient(this.functionsUrl.href, {
       headers: this.headers,
-      customFetch: this.fetch
+      customFetch: this.functionsFetch
     });
   }
   from(relation) {
@@ -18684,13 +18888,18 @@ var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.110.2
   removeAllChannels() {
     return this.realtime.removeAllChannels();
   }
-  async _getAccessToken() {
+  async _getSessionToken() {
     var _this = this;
     var _data$session$access_, _data$session;
     if (_this.accessToken)
       return await _this.accessToken();
     const { data } = await _this.auth.getSession();
-    return (_data$session$access_ = (_data$session = data.session) === null || _data$session === undefined ? undefined : _data$session.access_token) !== null && _data$session$access_ !== undefined ? _data$session$access_ : _this.supabaseKey;
+    return (_data$session$access_ = (_data$session = data.session) === null || _data$session === undefined ? undefined : _data$session.access_token) !== null && _data$session$access_ !== undefined ? _data$session$access_ : null;
+  }
+  async _getAccessToken() {
+    var _this2 = this;
+    var _await$this$_getSessi;
+    return (_await$this$_getSessi = await _this2._getSessionToken()) !== null && _await$this$_getSessi !== undefined ? _await$this$_getSessi : _this2.supabaseKey;
   }
   _initSupabaseAuthClient({ autoRefreshToken, persistSession, detectSessionInUrl, storage, userStorage, storageKey, flowType, lock, debug, throwOnError, experimental, lockAcquireTimeout, skipAutoInitialize }, headers, fetch$1) {
     const authHeaders = {
@@ -18726,7 +18935,7 @@ var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.110.2
     });
   }
   _handleTokenChanged(event, source, token) {
-    if ((event === "TOKEN_REFRESHED" || event === "SIGNED_IN") && this.changedAccessToken !== token) {
+    if ((event === "TOKEN_REFRESHED" || event === "SIGNED_IN" || event === "INITIAL_SESSION") && this.changedAccessToken !== token) {
       this.changedAccessToken = token;
       this.realtime.setAuth(token);
     } else if (event === "SIGNED_OUT") {
@@ -18756,7 +18965,8 @@ var init_dist4 = __esm(() => {
     JS_ENV = "react-native";
   else {
     JS_ENV = "node";
-    JS_RUNTIME_VERSION = typeof process !== "undefined" ? (_process$version = process.version) === null || _process$version === undefined ? undefined : _process$version.replace(/^v/, "") : undefined;
+    const _process = globalThis["process"];
+    JS_RUNTIME_VERSION = _process === null || _process === undefined || (_process$version = _process["version"]) === null || _process$version === undefined ? undefined : _process$version.replace(/^v/, "");
   }
   _runtimeMeta = [`runtime=${JS_ENV}`];
   if (JS_RUNTIME_VERSION)
@@ -18775,6 +18985,7 @@ var init_dist4 = __esm(() => {
     enabled: false,
     respectSamplingDecision: true
   };
+  warnedKeySubtypes = /* @__PURE__ */ new Set;
   SupabaseAuthClient = class extends import_auth_js.AuthClient {
     constructor(options) {
       super(options);
@@ -58793,7 +59004,7 @@ var init_v4_mini = __esm(() => {
   init_mini();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
 function isZ4Schema(s) {
   const schema = s;
   return !!schema._zod;
@@ -59600,7 +59811,7 @@ var init_v4 = __esm(() => {
   init_classic();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
 var LATEST_PROTOCOL_VERSION = "2025-11-25", SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task", JSONRPC_VERSION = "2.0", AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams = (value) => TaskAugmentedRequestParamsSchema.safeParse(value).success, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest = (value) => JSONRPCRequestSchema.safeParse(value).success, JSONRPCNotificationSchema, isJSONRPCNotification = (value) => JSONRPCNotificationSchema.safeParse(value).success, JSONRPCResultResponseSchema, isJSONRPCResultResponse = (value) => JSONRPCResultResponseSchema.safeParse(value).success, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse = (value) => JSONRPCErrorResponseSchema.safeParse(value).success, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError;
 var init_types4 = __esm(() => {
   init_v4();
@@ -60428,7 +60639,7 @@ var init_types4 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
 function isTerminal(status) {
   return status === "completed" || status === "failed" || status === "cancelled";
 }
@@ -60646,7 +60857,7 @@ var init_esm = __esm(() => {
   init_zodToJsonSchema();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
 function getMethodLiteral(schema) {
   const shape = getObjectShape(schema);
   const methodSchema = shape?.method;
@@ -60671,7 +60882,7 @@ var init_zod_json_schema_compat = __esm(() => {
   init_esm();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
 class Protocol {
   constructor(_options) {
     this._options = _options;
@@ -64518,7 +64729,7 @@ var require_data = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/fast-uri@3.1.3/node_modules/fast-uri/lib/utils.js
+// ../../node_modules/.bun/fast-uri@3.1.5/node_modules/fast-uri/lib/utils.js
 var require_utils2 = __commonJS((exports, module) => {
   var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
   var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
@@ -64829,7 +65040,7 @@ var require_utils2 = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/fast-uri@3.1.3/node_modules/fast-uri/lib/schemes.js
+// ../../node_modules/.bun/fast-uri@3.1.5/node_modules/fast-uri/lib/schemes.js
 var require_schemes = __commonJS((exports, module) => {
   var { isUUID } = require_utils2();
   var URN_REG = /([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-.:;=@]|%[\da-f]{2})+)/iu;
@@ -65003,7 +65214,7 @@ var require_schemes = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/fast-uri@3.1.3/node_modules/fast-uri/index.js
+// ../../node_modules/.bun/fast-uri@3.1.5/node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS((exports, module) => {
   var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils2();
   var { SCHEMES, getSchemeHandler } = require_schemes();
@@ -65017,7 +65228,12 @@ var require_fast_uri = __commonJS((exports, module) => {
   }
   function resolve4(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-    const resolved = resolveComponent(parse8(baseURI, schemelessOptions), parse8(relativeURI, schemelessOptions), schemelessOptions, true);
+    const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed } = parseWithStatus(baseURI, schemelessOptions);
+    const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed } = parseWithStatus(relativeURI, schemelessOptions);
+    if (baseMalformed || relativeMalformed) {
+      throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
+    }
+    const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
@@ -65143,6 +65359,8 @@ var require_fast_uri = __commonJS((exports, module) => {
     return uriTokens.join("");
   }
   var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
+  var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
+  var AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
   function getParseError(parsed, matches) {
     if (matches[2] !== undefined && parsed.path && parsed.path[0] !== "/") {
       return 'URI path must start with "/" when authority is present.';
@@ -65172,6 +65390,25 @@ var require_fast_uri = __commonJS((exports, module) => {
         uri = "//" + uri;
       }
     }
+    const authorityMatch = uri.match(AUTHORITY_PREFIX);
+    if (authorityMatch !== null && authorityMatch[1].indexOf("\\") !== -1) {
+      parsed.error = "URI authority must not contain a literal backslash.";
+      malformedAuthorityOrPort = true;
+    }
+    const introducerMatch = uri.match(AUTHORITY_INTRODUCER_REGION);
+    if (introducerMatch !== null) {
+      const region = introducerMatch[1];
+      const normalizedRegion = region.replace(/[\t\n\r]/g, "");
+      if (normalizedRegion.length >= 2) {
+        if (normalizedRegion.slice(0, 2) !== "//") {
+          parsed.error = parsed.error || "URI authority must not contain a literal backslash.";
+          malformedAuthorityOrPort = true;
+        } else if (region.length !== normalizedRegion.length) {
+          parsed.error = parsed.error || "URI authority introducer must not contain whitespace.";
+          malformedAuthorityOrPort = true;
+        }
+      }
+    }
     const matches = uri.match(URI_PARSE);
     if (matches) {
       parsed.scheme = matches[1];
@@ -68075,7 +68312,7 @@ var require_dist3 = __commonJS((exports, module) => {
   exports.default = formatsPlugin;
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/validation/ajv-provider.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/validation/ajv-provider.js
 function createDefaultAjvInstance() {
   const ajv = new import_ajv.default({
     strict: false,
@@ -68118,7 +68355,7 @@ var init_ajv_provider = __esm(() => {
   import_ajv_formats = __toESM(require_dist3(), 1);
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/server.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/server.js
 class ExperimentalServerTasks {
   constructor(_server) {
     this._server = _server;
@@ -68199,7 +68436,7 @@ var init_server = __esm(() => {
   init_types4();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/helpers.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/helpers.js
 function assertToolsCallTaskCapability(requests, method, entityName) {
   if (!requests) {
     throw new Error(`${entityName} does not support task creation (required for ${method})`);
@@ -68234,7 +68471,7 @@ function assertClientRequestTaskCapability(requests, method, entityName) {
   }
 }
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/index.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/index.js
 var Server;
 var init_server2 = __esm(() => {
   init_protocol();
@@ -68289,16 +68526,7 @@ var init_server2 = __esm(() => {
       if (!methodSchema) {
         throw new Error("Schema is missing a method literal");
       }
-      let methodValue;
-      if (isZ4Schema(methodSchema)) {
-        const v4Schema = methodSchema;
-        const v4Def = v4Schema._zod?.def;
-        methodValue = v4Def?.value ?? v4Schema.value;
-      } else {
-        const v3Schema = methodSchema;
-        const legacyDef = v3Schema._def;
-        methodValue = legacyDef?.value ?? v3Schema.value;
-      }
+      const methodValue = getLiteralValue(methodSchema);
       if (typeof methodValue !== "string") {
         throw new Error("Schema method literal must be a string");
       }
@@ -68575,9 +68803,17 @@ var init_server2 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
 class ReadBuffer {
+  constructor(options) {
+    this._maxBufferSize = options?.maxBufferSize ?? STDIO_DEFAULT_MAX_BUFFER_SIZE;
+  }
   append(chunk) {
+    const newSize = (this._buffer?.length ?? 0) + chunk.length;
+    if (newSize > this._maxBufferSize) {
+      this.clear();
+      throw new Error(`ReadBuffer exceeded maximum size of ${this._maxBufferSize} bytes`);
+    }
     this._buffer = this._buffer ? Buffer.concat([this._buffer, chunk]) : chunk;
   }
   readMessage() {
@@ -68604,26 +68840,33 @@ function serializeMessage(message) {
   return JSON.stringify(message) + `
 `;
 }
+var STDIO_DEFAULT_MAX_BUFFER_SIZE;
 var init_stdio = __esm(() => {
   init_types4();
+  STDIO_DEFAULT_MAX_BUFFER_SIZE = 10 * 1024 * 1024;
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 import process9 from "node:process";
 
 class StdioServerTransport {
-  constructor(_stdin = process9.stdin, _stdout = process9.stdout) {
+  constructor(_stdin = process9.stdin, _stdout = process9.stdout, options) {
     this._stdin = _stdin;
     this._stdout = _stdout;
-    this._readBuffer = new ReadBuffer;
     this._started = false;
     this._ondata = (chunk) => {
-      this._readBuffer.append(chunk);
-      this.processReadBuffer();
+      try {
+        this._readBuffer.append(chunk);
+        this.processReadBuffer();
+      } catch (error3) {
+        this.onerror?.(error3);
+        this.close().catch(() => {});
+      }
     };
     this._onerror = (error3) => {
       this.onerror?.(error3);
     };
+    this._readBuffer = new ReadBuffer({ maxBufferSize: options?.maxBufferSize });
   }
   async start() {
     if (this._started) {
@@ -69205,7 +69448,7 @@ import { homedir as homedir4, platform } from "node:os";
 import { dirname, join as join4 } from "node:path";
 import { spawnSync } from "node:child_process";
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/date.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/date.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69325,7 +69568,7 @@ class TomlDate extends Date {
   }
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/error.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/error.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69395,7 +69638,7 @@ ${codeblock}`, options);
   }
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/primitive.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/primitive.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69575,7 +69818,7 @@ function parseValue(value, toml, ptr, integersAsBigInt) {
   return date;
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/util.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/util.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69650,6 +69893,8 @@ function skipUntil(str, ptr, sep, end, banNewLines = false) {
     let c2 = str[i];
     if (c2 === "#") {
       i = indexOfNewline(str, i);
+      if (i < 0)
+        break;
     } else if (c2 === sep) {
       return i + 1;
     } else if (c2 === end || banNewLines && (c2 === `
@@ -69664,7 +69909,7 @@ function skipUntil(str, ptr, sep, end, banNewLines = false) {
   });
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/extract.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/extract.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69759,7 +70004,7 @@ function extractValue(str, ptr, end, depth, integersAsBigInt) {
   ];
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/struct.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/struct.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69930,7 +70175,7 @@ function parseArray(str, ptr, depth, integersAsBigInt) {
   return [res, ptr];
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/parse.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/parse.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -70071,7 +70316,7 @@ function parse(toml, { maxDepth = 1000, integersAsBigInt } = {}) {
   return res;
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/stringify.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/stringify.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -70245,7 +70490,7 @@ function stringify(obj2, { maxDepth = 1000, numbersAsFloat = false } = {}) {
   return str;
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/index.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/index.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -70850,6 +71095,14 @@ async function action9(options) {
   }
   println(c.green(`
 ✓ All prerequisites satisfied.`));
+  if (doFunctions && process.platform === "darwin" && !process.env.SUPABASE_ACCESS_TOKEN) {
+    println(c.cyan(`
+  ℹ  Heads-up (macOS): the Supabase CLI will read its login token from the
+` + `     Keychain — expect a password dialog per function (click "Always Allow").
+` + `     To skip the dialogs entirely, put a personal access token
+` + `     (supabase.com/dashboard/account/tokens) in ~/.cerefox/.env:
+` + "       SUPABASE_ACCESS_TOKEN=sbp_…"));
+  }
   let schemaMode = "unknown";
   let pending = [];
   if (doSchema) {
@@ -70892,11 +71145,13 @@ Plan:`));
 ⚠  --dry-run: nothing was deployed.`));
     process.exit(0);
   }
-  const proceed = await confirm(`
+  if (!options.yes) {
+    const proceed = await confirm(`
 Proceed with deployment to Supabase?`, true);
-  if (!proceed) {
-    println(c.dim("Aborted."));
-    process.exit(0);
+    if (!proceed) {
+      println(c.dim("Aborted."));
+      process.exit(0);
+    }
   }
   if (doSchema) {
     if (schemaMode === "fresh") {
@@ -70997,7 +71252,7 @@ Proceed with deployment to Supabase?`, true);
   println(c.dim("Verify with: cerefox doctor"));
 }
 function registerDeployServer(program2) {
-  program2.command("deploy-server").description("Deploy/update the Cerefox server side (schema + RPCs + Edge Functions) on Supabase.").option("--dry-run", "Print the plan + pre-flight without deploying.").option("--schema-only", "Deploy/update only the schema + RPCs (skip Edge Functions).").option("--functions-only", "Deploy only the Edge Functions (skip the schema/RPCs).").option("--project-ref <ref>", "Supabase project ref for Edge Function deploys (default: derived from CEREFOX_SUPABASE_URL).").action(action9);
+  program2.command("deploy-server").description("Deploy/update the Cerefox server side (schema + RPCs + Edge Functions) on Supabase.").option("--dry-run", "Print the plan + pre-flight without deploying.").option("--schema-only", "Deploy/update only the schema + RPCs (skip Edge Functions).").option("--functions-only", "Deploy only the Edge Functions (skip the schema/RPCs).").option("--project-ref <ref>", "Supabase project ref for Edge Function deploys (default: derived from CEREFOX_SUPABASE_URL).").option("--yes", "Non-interactive (skip the deployment confirmation).").action(action9);
 }
 
 // src/cli/commands/document-edit.ts
@@ -71057,6 +71312,9 @@ async function action10(documentId, options) {
   }
   const author = resolveAuthor(options.author);
   const authorType = resolveAuthorType(options.authorType);
+  if (author === "unknown") {
+    warn("No --author / CEREFOX_AUTHOR_NAME set — audit log will record this write as 'unknown'.");
+  }
   await client.raw.rpc("cerefox_create_audit_entry", {
     p_document_id: documentId,
     p_operation: "update-metadata",
@@ -71251,6 +71509,9 @@ async function setArchived(versionId, archived, options) {
     throw notFound(`Version ${versionId} not found.`);
   const author = resolveAuthor(options.author);
   const authorType = resolveAuthorType(options.authorType);
+  if (author === "unknown") {
+    warn("No --author / CEREFOX_AUTHOR_NAME set — audit log will record this write as 'unknown'.");
+  }
   const op = archived ? "archive" : "unarchive";
   await client.raw.rpc("cerefox_create_audit_entry", {
     p_document_id: data.document_id,
@@ -73801,7 +74062,7 @@ __export(exports_symbols, {
   error: () => error
 });
 
-// ../../node_modules/.bun/yoctocolors@2.1.2/node_modules/yoctocolors/base.js
+// ../../node_modules/.bun/yoctocolors@2.2.0/node_modules/yoctocolors/base.js
 import tty2 from "node:tty";
 var hasColors = tty2?.WriteStream?.prototype?.hasColors?.() ?? false;
 var format = (open, close) => {
@@ -73834,6 +74095,10 @@ var bold = format(1, 22);
 var dim = format(2, 22);
 var italic = format(3, 23);
 var underline = format(4, 24);
+var underlineDouble = format("4:2", 24);
+var underlineCurly = format("4:3", 24);
+var underlineDotted = format("4:4", 24);
+var underlineDashed = format("4:5", 24);
 var overline = format(53, 55);
 var inverse = format(7, 27);
 var hidden = format(8, 28);
@@ -73870,6 +74135,22 @@ var bgBlueBright = format(104, 49);
 var bgMagentaBright = format(105, 49);
 var bgCyanBright = format(106, 49);
 var bgWhiteBright = format(107, 49);
+var underlineBlack = format("58;5;0", 59);
+var underlineRed = format("58;5;1", 59);
+var underlineGreen = format("58;5;2", 59);
+var underlineYellow = format("58;5;3", 59);
+var underlineBlue = format("58;5;4", 59);
+var underlineMagenta = format("58;5;5", 59);
+var underlineCyan = format("58;5;6", 59);
+var underlineWhite = format("58;5;7", 59);
+var underlineGray = format("58;5;8", 59);
+var underlineRedBright = format("58;5;9", 59);
+var underlineGreenBright = format("58;5;10", 59);
+var underlineYellowBright = format("58;5;11", 59);
+var underlineBlueBright = format("58;5;12", 59);
+var underlineMagentaBright = format("58;5;13", 59);
+var underlineCyanBright = format("58;5;14", 59);
+var underlineWhiteBright = format("58;5;15", 59);
 
 // ../../node_modules/.bun/is-unicode-supported@2.1.0/node_modules/is-unicode-supported/index.js
 import process6 from "node:process";
@@ -74660,7 +74941,7 @@ import { homedir as homedir6 } from "node:os";
 import { join as join9 } from "node:path";
 
 // ../../_shared/ef-meta/index.ts
-var EF_VERSION = "1.0.0-rc.4";
+var EF_VERSION = "1.0.1";
 
 // src/cli/util/checks.ts
 init_config();
@@ -75179,9 +75460,9 @@ async function checkEdgeFunctionsCompat() {
     case "above-min-but-old":
       return {
         name: "edge functions",
-        status: "warn",
-        detail: `Deployed EF v${deployed} works but is older than the bundled Edge Functions (v${EF_VERSION}).`,
-        hint: "Update the Edge Functions (see remediation below)."
+        status: "skipped",
+        detail: `Deployed Edge Functions (v${deployed}) are older than the ones bundled with this client (v${EF_VERSION}). Compatible — nothing is broken — but redeploying ` + `picks up the latest server-side fixes.`,
+        hint: "Redeploy with: cerefox server deploy --functions-only"
       };
     default:
       return {
@@ -76013,8 +76294,9 @@ async function readContent(path, paste) {
 }
 async function action18(path, options) {
   const { content, titleFromPath } = await readContent(path, Boolean(options.paste));
-  const title = options.title ?? titleFromPath;
-  if (!title || title.trim() === "") {
+  const updatingById = Boolean(options.documentId);
+  let title = options.title ?? (updatingById ? null : titleFromPath);
+  if (title !== null && (!title || title.trim() === "")) {
     throw userError(options.paste ? "--title is required with --paste." : "Cannot derive a title from the file path; pass --title explicitly.");
   }
   const author = resolveAuthor(options.author);
@@ -76039,6 +76321,14 @@ async function action18(path, options) {
   const supabase = createClient(settings.supabaseUrl, settings.supabaseKey, {
     auth: { persistSession: false }
   });
+  if (title === null) {
+    const { data, error: error2 } = await supabase.from("cerefox_documents").select("title").eq("id", options.documentId).maybeSingle();
+    if (error2 || !data?.title) {
+      throw userError(`Could not resolve document ${options.documentId} to keep its title` + `${error2 ? ` (${error2.message})` : ""}.`, "Pass --title explicitly, or check the --document-id.");
+    }
+    title = data.title;
+    println(c.dim(`  (keeping existing title: ${JSON.stringify(title)})`));
+  }
   const pipeline = new IngestionPipeline({
     supabase,
     openAiApiKey: settings.openaiApiKey
@@ -76658,38 +76948,34 @@ async function action22(options) {
     }
     projectId = project.id;
   }
-  let query = client.raw.from("cerefox_documents").select("id, title, source, metadata, created_at, updated_at, review_status, deleted_at").limit(limit);
+  const docCols = "id, title, source, metadata, created_at, updated_at, review_status, deleted_at";
+  const selectCols = projectId ? `${docCols}, cerefox_document_projects!inner(project_id)` : docCols;
+  let query = client.raw.from("cerefox_documents").select(selectCols).limit(limit);
   query = deleted ? query.not("deleted_at", "is", null).order("deleted_at", { ascending: false, nullsFirst: false }) : query.is("deleted_at", null).order("updated_at", { ascending: false, nullsFirst: false });
   if (projectId) {
-    const { data: junctionRows, error: junctionError } = await client.raw.from("cerefox_document_projects").select("document_id").eq("project_id", projectId);
-    if (junctionError) {
-      throw systemError(`Project membership lookup failed: ${junctionError.message}`);
-    }
-    const docIds = (junctionRows ?? []).map((r) => r.document_id);
-    if (docIds.length === 0) {
-      if (options.json) {
-        printJson([]);
-      } else {
-        process.stdout.write(`(no documents in project "${options.project}")
-`);
-      }
-      return;
-    }
-    query = query.in("id", docIds);
+    query = query.eq("cerefox_document_projects.project_id", projectId);
   }
   const { data, error: error2 } = await query;
   if (error2) {
     throw systemError(`Could not list documents: ${error2.message}`);
   }
-  const rows = data ?? [];
+  const rows = (data ?? []).map((row) => {
+    const { cerefox_document_projects: _junction, ...doc } = row;
+    return doc;
+  });
   if (options.json) {
     printJson(rows);
     return;
   }
   if (rows.length === 0) {
-    process.stdout.write(deleted ? `(trash is empty)
+    if (projectId) {
+      process.stdout.write(`(no documents in project "${options.project}")
+`);
+    } else {
+      process.stdout.write(deleted ? `(trash is empty)
 ` : `(no documents)
 `);
+    }
     return;
   }
   printTable(rows.map((doc) => {
@@ -77354,13 +77640,13 @@ async function action30(options) {
   println("");
   println(c.green(`✓ Upgraded to ${target}.`));
   println("");
-  println(c.dim("Refreshing bundled-docs ingest…"));
-  try {
-    const { runSyncSelfDocs: runSyncSelfDocs2 } = await Promise.resolve().then(() => (init_sync_self_docs(), exports_sync_self_docs));
-    await runSyncSelfDocs2({});
-  } catch (err) {
-    println(cErr.yellow("⚠ ") + `Could not refresh self-docs: ${err instanceof Error ? err.message : String(err)}`);
-    println(c.dim("  Run `cerefox sync-self-docs` manually after a successful `cerefox init`."));
+  println(c.dim("Refreshing bundled-docs ingest (using the new version)…"));
+  const sync = spawnSync5(process.execPath, [process.argv[1], "guides", "ingest"], {
+    stdio: "inherit"
+  });
+  if (sync.status !== 0) {
+    println(cErr.yellow("⚠ ") + "Could not refresh self-docs (see output above).");
+    println(c.dim("  Run `cerefox guides ingest` manually after a successful `cerefox init`."));
   }
 }
 function registerSelfUpdate(program2) {
@@ -77598,15 +77884,15 @@ init_sync_self_docs();
 // src/cli/commands/web.ts
 init_cli_core();
 
-// ../../node_modules/.bun/@hono+node-server@2.0.8+68404363cdc13251/node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.12+711a9a789551665d/node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
 var X_ALREADY_SENT = "x-hono-already-sent";
 
-// ../../node_modules/.bun/@hono+node-server@2.0.8+68404363cdc13251/node_modules/@hono/node-server/dist/index.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.12+711a9a789551665d/node_modules/@hono/node-server/dist/index.mjs
 import { STATUS_CODES, createServer } from "node:http";
 import { Http2ServerRequest, constants } from "node:http2";
 import { Readable } from "node:stream";
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/helper/websocket/index.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/helper/websocket/index.js
 var WSContext = class {
   #init;
   constructor(init) {
@@ -77654,7 +77940,7 @@ var defineWebSocketHelper = (handler11) => {
   };
 };
 
-// ../../node_modules/.bun/@hono+node-server@2.0.8+68404363cdc13251/node_modules/@hono/node-server/dist/index.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.12+711a9a789551665d/node_modules/@hono/node-server/dist/index.mjs
 var RequestError = class extends Error {
   constructor(message, options) {
     super(message, options);
@@ -77711,6 +77997,62 @@ var newHeadersFromIncoming = (incoming) => {
   return new Headers(headerRecord);
 };
 var wrapBodyStream = Symbol("wrapBodyStream");
+var byteExactEncodings = new Set([
+  "latin1",
+  "binary",
+  "hex",
+  "base64",
+  "base64url"
+]);
+var isByteExactEncoding = (encoding) => encoding === null || byteExactEncodings.has(encoding);
+var bodyBufferedBeforeDisconnectKey = Symbol("bodyBufferedBeforeDisconnect");
+var bodyBufferedLengthBeforeDisconnectKey = Symbol("bodyBufferedLengthBeforeDisconnect");
+var toBufferChunk = (chunk, encoding) => Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk, encoding ?? "utf8");
+var isRecoverableDisconnectedIncoming = (incoming) => !(incoming instanceof Http2ServerRequest) && !!incoming.complete && !!incoming.readableAborted && typeof incoming.read === "function" && isByteExactEncoding(incoming.readableEncoding);
+var recordBodyBufferedBeforeDisconnect = (incoming) => {
+  if (incoming.readableDidRead || !isRecoverableDisconnectedIncoming(incoming))
+    return;
+  const incomingWithRecovery = incoming;
+  incomingWithRecovery[bodyBufferedLengthBeforeDisconnectKey] ??= incoming.readableLength;
+};
+var readBodyBufferedBeforeDisconnect = (incoming, chunks) => {
+  if (incoming.readableDidRead && !chunks || !isRecoverableDisconnectedIncoming(incoming))
+    return;
+  const incomingWithRecovery = incoming;
+  if (incomingWithRecovery[bodyBufferedBeforeDisconnectKey] !== undefined)
+    return incomingWithRecovery[bodyBufferedBeforeDisconnectKey];
+  let result;
+  const errored = incoming.errored;
+  if (errored && errored.code !== "ECONNRESET")
+    result = errored;
+  else if (incomingWithRecovery[bodyBufferedLengthBeforeDisconnectKey] !== undefined && incoming.readableLength !== incomingWithRecovery[bodyBufferedLengthBeforeDisconnectKey])
+    result = newBodyUnusableError();
+  else {
+    const bodyChunks = chunks ?? [];
+    const chunk = incoming.read();
+    if (chunk !== null)
+      bodyChunks.push(toBufferChunk(chunk, incoming.readableEncoding));
+    const buffer2 = bodyChunks.length === 1 ? bodyChunks[0] : Buffer.concat(bodyChunks);
+    result = buffer2;
+    const contentLength = incoming.headers["content-length"];
+    if (typeof contentLength === "string" && /^\d+$/.test(contentLength)) {
+      const expectedLength = Number(contentLength);
+      if (Number.isSafeInteger(expectedLength) && buffer2.length !== expectedLength)
+        result = newBodyUnusableError();
+    }
+  }
+  incomingWithRecovery[bodyBufferedBeforeDisconnectKey] = result;
+  return result;
+};
+var enqueueBufferedBody = (controller, buffered) => {
+  if (buffered instanceof Error) {
+    controller.error(buffered);
+    return;
+  }
+  if (buffered.length > 0)
+    controller.enqueue(buffered);
+  controller.close();
+};
 var newRequestFromIncoming = (method, url, headers, incoming, abortController) => {
   const init = {
     method,
@@ -77735,6 +78077,13 @@ var newRequestFromIncoming = (method, url, headers, incoming, abortController) =
       let reader;
       init.body = new ReadableStream({ async pull(controller) {
         try {
+          if (!reader) {
+            const buffered = readBodyBufferedBeforeDisconnect(incoming);
+            if (buffered !== undefined) {
+              enqueueBufferedBody(controller, buffered);
+              return;
+            }
+          }
           reader ||= Readable.toWeb(incoming).getReader();
           const { done, value } = await reader.read();
           if (done)
@@ -77745,8 +78094,15 @@ var newRequestFromIncoming = (method, url, headers, incoming, abortController) =
           controller.error(error3);
         }
       } });
-    } else
-      init.body = Readable.toWeb(incoming);
+    } else {
+      const buffered = readBodyBufferedBeforeDisconnect(incoming);
+      if (buffered !== undefined)
+        init.body = new ReadableStream({ start(controller) {
+          enqueueBufferedBody(controller, buffered);
+        } });
+      else
+        init.body = Readable.toWeb(incoming);
+    }
   return new Request$1(url, init);
 };
 var getRequestCache = Symbol("getRequestCache");
@@ -77790,8 +78146,10 @@ var normalizeIncomingMethod = (method) => {
     case "GET":
     case "HEAD":
     case "OPTIONS":
+    case "PATCH":
     case "POST":
     case "PUT":
+    case "QUERY":
       return method;
   }
   const upper = method.toUpperCase();
@@ -77847,14 +78205,29 @@ var readRawBodyIfAvailable = (request) => {
   if ("rawBody" in incoming && incoming.rawBody instanceof Buffer)
     return incoming.rawBody;
 };
+var normalizeAbortError = (request, incoming) => {
+  if (incoming.errored)
+    return incoming.errored;
+  const reason = request[abortReasonKey];
+  if (reason !== undefined)
+    return reason instanceof Error ? reason : new Error(String(reason));
+  return /* @__PURE__ */ new Error("Client connection prematurely closed.");
+};
 var readBodyDirect = (request) => {
   if (request[bodyBufferKey])
     return Promise.resolve(request[bodyBufferKey]);
   if (request[bodyReadPromiseKey])
     return request[bodyReadPromiseKey];
   const incoming = request[incomingKey];
-  if (Readable.isDisturbed(incoming))
+  if (incoming.readableDidRead)
     return rejectBodyUnusable();
+  const buffered = readBodyBufferedBeforeDisconnect(incoming);
+  if (buffered !== undefined) {
+    if (buffered instanceof Error)
+      return Promise.reject(buffered);
+    request[bodyBufferKey] = buffered;
+    return Promise.resolve(buffered);
+  }
   const promise2 = new Promise((resolve5, reject) => {
     const chunks = [];
     let settled = false;
@@ -77865,8 +78238,25 @@ var readBodyDirect = (request) => {
       cleanup();
       callback();
     };
+    const recoverCompleteBodyAfterDisconnect = (error3) => {
+      const streamError = incoming.errored ?? error3;
+      if (!isRecoverableDisconnectedIncoming(incoming) || streamError && streamError.code !== "ECONNRESET")
+        return false;
+      finish(() => {
+        const recovered = readBodyBufferedBeforeDisconnect(incoming, chunks);
+        if (recovered instanceof Error)
+          reject(recovered);
+        else if (recovered === undefined)
+          reject(error3 ?? normalizeAbortError(request, incoming));
+        else {
+          request[bodyBufferKey] = recovered;
+          resolve5(recovered);
+        }
+      });
+      return true;
+    };
     const onData = (chunk) => {
-      chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+      chunks.push(toBufferChunk(chunk, incoming.readableEncoding));
     };
     const onEnd = () => {
       finish(() => {
@@ -77876,6 +78266,8 @@ var readBodyDirect = (request) => {
       });
     };
     const onError = (error3) => {
+      if (recoverCompleteBodyAfterDisconnect(error3))
+        return;
       finish(() => {
         reject(error3);
       });
@@ -77885,17 +78277,10 @@ var readBodyDirect = (request) => {
         onEnd();
         return;
       }
+      if (recoverCompleteBodyAfterDisconnect())
+        return;
       finish(() => {
-        if (incoming.errored) {
-          reject(incoming.errored);
-          return;
-        }
-        const reason = request[abortReasonKey];
-        if (reason !== undefined) {
-          reject(reason instanceof Error ? reason : new Error(String(reason)));
-          return;
-        }
-        reject(/* @__PURE__ */ new Error("Client connection prematurely closed."));
+        reject(normalizeAbortError(request, incoming));
       });
     };
     const cleanup = () => {
@@ -78103,16 +78488,15 @@ var Response$1 = class Response$12 {
   constructor(body, init) {
     let headers;
     this.#body = body;
-    if (init instanceof Response$12) {
+    if (init instanceof GlobalResponse) {
       const cachedGlobalResponse = init[responseCache];
       if (cachedGlobalResponse) {
         this.#init = cachedGlobalResponse;
         this[getResponseCache]();
         return;
-      } else {
-        this.#init = init.#init;
-        headers = new Headers(init.headers);
       }
+      this.#init = init instanceof Response$12 ? init.#init : init;
+      headers = new Headers(init.headers);
     } else
       this.#init = init;
     if (body == null || typeof body === "string" || typeof body?.getReader !== "undefined" || body instanceof Blob || body instanceof Uint8Array)
@@ -78328,10 +78712,13 @@ var drainIncoming = (incoming) => {
   incoming.resume();
 };
 var makeCloseHandler = (req, incoming, outgoing, needsBodyCleanup) => () => {
-  if (incoming.errored)
+  if (incoming.errored) {
+    recordBodyBufferedBeforeDisconnect(incoming);
     req[abortRequest](incoming.errored.toString());
-  else if (!outgoing.writableFinished)
+  } else if (!outgoing.writableFinished) {
+    recordBodyBufferedBeforeDisconnect(incoming);
     req[abortRequest]("Client connection prematurely closed.");
+  }
   if (needsBodyCleanup && !incoming.readableEnded)
     setTimeout(() => {
       if (!incoming.readableEnded)
@@ -78580,6 +78967,28 @@ var CloseEvent2 = globalThis.CloseEvent ?? class extends Event {
     return this.#eventInitDict.reason ?? "";
   }
 };
+var ErrorEvent = globalThis.ErrorEvent ?? class extends Event {
+  #eventInitDict;
+  constructor(type, eventInitDict = {}) {
+    super(type, eventInitDict);
+    this.#eventInitDict = eventInitDict;
+  }
+  get message() {
+    return this.#eventInitDict.message ?? "";
+  }
+  get filename() {
+    return this.#eventInitDict.filename ?? "";
+  }
+  get lineno() {
+    return this.#eventInitDict.lineno ?? 0;
+  }
+  get colno() {
+    return this.#eventInitDict.colno ?? 0;
+  }
+  get error() {
+    return this.#eventInitDict.error ?? null;
+  }
+};
 var generateConnectionSymbol = () => Symbol("connection");
 var CONNECTION_SYMBOL_KEY = Symbol("CONNECTION_SYMBOL_KEY");
 var WAIT_FOR_WEBSOCKET_SYMBOL = Symbol("WAIT_FOR_WEBSOCKET_SYMBOL");
@@ -78637,10 +79046,18 @@ var setupWebSocket = (options) => {
       waiterMap.delete(request);
     }
   });
+  const rejectWaiter = (request) => {
+    const waiter = waiterMap.get(request);
+    if (waiter) {
+      waiterMap.delete(request);
+      waiter.reject(/* @__PURE__ */ new Error("WebSocket handshake aborted"));
+    }
+  };
   const waitForWebSocket = (request, connectionSymbol) => {
-    return new Promise((resolve5) => {
+    return new Promise((resolve5, reject) => {
       waiterMap.set(request, {
         resolve: resolve5,
+        reject,
         connectionSymbol
       });
     });
@@ -78669,7 +79086,7 @@ var setupWebSocket = (options) => {
     }
     const waiter = waiterMap.get(request);
     if (!waiter || waiter.connectionSymbol !== env4[CONNECTION_SYMBOL_KEY]) {
-      waiterMap.delete(request);
+      rejectWaiter(request);
       if (server.listenerCount("upgrade") === 1)
         rejectUpgradeRequest(socket, status, responseHeaders);
       return;
@@ -78677,9 +79094,12 @@ var setupWebSocket = (options) => {
     const addResponseHeaders = (headers) => {
       appendResponseHeaders(headers, responseHeaders);
     };
+    const reclaimWaiterOnClose = () => rejectWaiter(request);
+    socket.once("close", reclaimWaiterOnClose);
     wss.on("headers", addResponseHeaders);
     try {
       wss.handleUpgrade(request, socket, head2, (ws) => {
+        socket.off("close", reclaimWaiterOnClose);
         wss.emit("connection", ws, request);
       });
     } finally {
@@ -78700,7 +79120,12 @@ var upgradeWebSocket = defineWebSocketHelper(async (c2, events, options) => {
   const connectionSymbol = generateConnectionSymbol();
   env4[CONNECTION_SYMBOL_KEY] = connectionSymbol;
   (async () => {
-    const ws = await waitForWebSocket(env4.incoming, connectionSymbol);
+    let ws;
+    try {
+      ws = await waitForWebSocket(env4.incoming, connectionSymbol);
+    } catch {
+      return;
+    }
     const messagesReceivedInStarting = [];
     const bufferMessage = (data, isBinary) => {
       messagesReceivedInStarting.push([data, isBinary]);
@@ -78789,7 +79214,7 @@ var serve = (options, listeningListener) => {
   return server;
 };
 
-// ../../node_modules/.bun/@hono+node-server@2.0.8+68404363cdc13251/node_modules/@hono/node-server/dist/utils/stream.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.12+711a9a789551665d/node_modules/@hono/node-server/dist/utils/stream.mjs
 import { Readable as Readable2 } from "node:stream";
 import { versions as versions2 } from "node:process";
 var pr54206Applied = () => {
@@ -78855,7 +79280,7 @@ var createStreamBody = (stream, useNativeReadableToWeb = useReadableToWeb) => {
   });
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/utils/mime.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/mime.js
 var getMimeType = (filename, mimes = baseMimes) => {
   const regexp = /\.([a-zA-Z0-9]+?)$/;
   const match = filename.match(regexp);
@@ -78924,7 +79349,7 @@ var _baseMimes = {
 };
 var baseMimes = _baseMimes;
 
-// ../../node_modules/.bun/@hono+node-server@2.0.8+68404363cdc13251/node_modules/@hono/node-server/dist/serve-static.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.12+711a9a789551665d/node_modules/@hono/node-server/dist/serve-static.mjs
 import { createReadStream, existsSync as existsSync15, statSync as statSync5 } from "node:fs";
 import { join as join13 } from "node:path";
 var COMPRESSIBLE_CONTENT_TYPE_REGEX = /^\s*(?:text\/[^;\s]+|application\/(?:javascript|json|xml|xml-dtd|ecmascript|dart|postscript|rtf|tar|toml|vnd\.dart|vnd\.ms-fontobject|vnd\.ms-opentype|wasm|x-httpd-php|x-javascript|x-ns-proxy-autoconfig|x-sh|x-tar|x-virtualbox-hdd|x-virtualbox-ova|x-virtualbox-ovf|x-virtualbox-vbox|x-virtualbox-vdi|x-virtualbox-vhd|x-virtualbox-vmdk|x-www-form-urlencoded)|font\/(?:otf|ttf)|image\/(?:bmp|vnd\.adobe\.photoshop|vnd\.microsoft\.icon|vnd\.ms-dds|x-icon|x-ms-bmp)|message\/rfc822|model\/gltf-binary|x-shader\/x-fragment|x-shader\/x-vertex|[^;\s]+?\+(?:json|text|xml|yaml))(?:[;\s]|$)/i;
@@ -78941,6 +79366,47 @@ var getStats = (path) => {
   } catch {}
   return stats;
 };
+var BYTE_RANGE_PATTERN = /^(?:bytes=)?(?!-$)(\d*)-(\d*)$/;
+var parseByteRange = (range) => {
+  const match = range.match(BYTE_RANGE_PATTERN);
+  if (!match)
+    return;
+  const [, start, end] = match;
+  if (start === "")
+    return {
+      type: "suffix",
+      length: Number(end)
+    };
+  if (end === "")
+    return {
+      type: "open-ended",
+      start: Number(start)
+    };
+  return {
+    type: "bounded",
+    start: Number(start),
+    end: Number(end)
+  };
+};
+var resolveByteRange = (spec, size2) => {
+  if (size2 === 0)
+    return;
+  if (spec.type === "suffix") {
+    if (spec.length === 0)
+      return;
+    return {
+      start: Math.max(size2 - spec.length, 0),
+      end: size2 - 1
+    };
+  }
+  const end = spec.type === "bounded" ? Math.min(spec.end, size2 - 1) : size2 - 1;
+  if (spec.start >= size2 || spec.start > end)
+    return;
+  return {
+    start: spec.start,
+    end
+  };
+};
 var tryDecode = (str, decoder) => {
   try {
     return decoder(str);
@@ -79016,19 +79482,24 @@ var serveStatic = (options = { root: "" }) => {
       result = c2.body(createStreamBody(createReadStream(path)), 200);
     } else {
       c2.header("Accept-Ranges", "bytes");
-      const parts = range.replace(/bytes=/, "").split("-", 2);
-      const start = parseInt(parts[0], 10) || 0;
-      let end = parseInt(parts[1], 10) || size2 - 1;
-      if (size2 < end - start + 1)
-        end = size2 - 1;
-      const chunksize = end - start + 1;
-      const stream = createReadStream(path, {
-        start,
-        end
-      });
-      c2.header("Content-Length", chunksize.toString());
-      c2.header("Content-Range", `bytes ${start}-${end}/${stats.size}`);
-      result = c2.body(createStreamBody(stream), 206);
+      const resolvedRange = resolveByteRange(parseByteRange(range) ?? {
+        type: "open-ended",
+        start: 0
+      }, size2);
+      if (!resolvedRange) {
+        c2.header("Content-Range", `bytes */${size2}`);
+        result = c2.body(null, 416);
+      } else {
+        const { start, end } = resolvedRange;
+        const chunkSize = end - start + 1;
+        const stream = createReadStream(path, {
+          start,
+          end
+        });
+        c2.header("Content-Length", chunkSize.toString());
+        c2.header("Content-Range", `bytes ${start}-${end}/${size2}`);
+        result = c2.body(createStreamBody(stream), 206);
+      }
     }
     await options.onFound?.(path, c2);
     return result;
@@ -79040,7 +79511,7 @@ import { existsSync as existsSync19 } from "node:fs";
 import { readFileSync as readFileSync17 } from "node:fs";
 import { join as join17 } from "node:path";
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/compose.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/compose.js
 var compose = (middleware, onError, onNotFound) => {
   return (context, next) => {
     let index = -1;
@@ -79084,10 +79555,10 @@ var compose = (middleware, onError, onNotFound) => {
   };
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/request/constants.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = /* @__PURE__ */ Symbol();
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/utils/buffer.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/buffer.js
 var bufferToFormData = (arrayBuffer, contentType2) => {
   const response = new Response(arrayBuffer, {
     headers: {
@@ -79097,7 +79568,7 @@ var bufferToFormData = (arrayBuffer, contentType2) => {
   return response.formData();
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/utils/body.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/body.js
 var isRawRequest = (request) => ("headers" in request);
 var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) => {
   const { all = false, dot = false } = options;
@@ -79110,6 +79581,9 @@ var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) =
   return {};
 };
 async function parseFormData(request, options) {
+  if (!isRawRequest(request) && request.bodyCache.formData) {
+    return convertFormDataToBodyData(await request.bodyCache.formData, options);
+  }
   const headers = isRawRequest(request) ? request.headers : request.raw.headers;
   const arrayBuffer = await request.arrayBuffer();
   const formDataPromise = bufferToFormData(arrayBuffer, headers.get("Content-Type") || "");
@@ -79176,7 +79650,7 @@ var handleParsingNestedValues = (form, key, value) => {
   });
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/utils/url.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/url.js
 var splitPath = (path) => {
   const paths = path.split("/");
   if (paths[0] === "") {
@@ -79333,7 +79807,7 @@ var _getQueryParam = (url, key, multiple) => {
       return;
     }
   }
-  const results = {};
+  const results = /* @__PURE__ */ Object.create(null);
   encoded ??= /[%+]/.test(url);
   let keyIndex = url.indexOf("?", 8);
   while (keyIndex !== -1) {
@@ -79376,7 +79850,7 @@ var getQueryParams = (url, key) => {
 };
 var decodeURIComponent_ = decodeURIComponent;
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/request.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/request.js
 var tryDecodeURIComponent = (str) => tryDecode2(str, decodeURIComponent_);
 var HonoRequest = class {
   raw;
@@ -79423,7 +79897,7 @@ var HonoRequest = class {
     if (name) {
       return this.raw.headers.get(name) ?? undefined;
     }
-    const headerData = {};
+    const headerData = /* @__PURE__ */ Object.create(null);
     this.raw.headers.forEach((value, key) => {
       headerData[key] = value;
     });
@@ -79490,7 +79964,7 @@ var HonoRequest = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/utils/html.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/html.js
 var HtmlEscapedCallbackPhase = {
   Stringify: 1,
   BeforeStream: 2,
@@ -79528,7 +80002,7 @@ var resolveCallback = async (str, phase, preserveCallbacks, context, buffer2) =>
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/context.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/context.js
 var TEXT_PLAIN = "text/plain; charset=UTF-8";
 var setDefaultContentType = (contentType2, headers) => {
   return {
@@ -79695,7 +80169,7 @@ var Context = class {
   };
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/router.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router.js
 var METHOD_NAME_ALL = "ALL";
 var METHOD_NAME_ALL_LOWERCASE = "all";
 var METHODS = ["get", "post", "put", "delete", "options", "patch"];
@@ -79703,10 +80177,10 @@ var MESSAGE_MATCHER_IS_ALREADY_BUILT = "Can not add a route since the matcher is
 var UnsupportedPathError = class extends Error {
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/utils/constants.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/constants.js
 var COMPOSED_HANDLER = "__COMPOSED_HANDLER";
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/hono-base.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/hono-base.js
 var notFoundHandler = (c2) => {
   return c2.text("404 Not Found", 404);
 };
@@ -79930,7 +80404,7 @@ var Hono = class _Hono {
   };
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/router/reg-exp-router/matcher.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/reg-exp-router/matcher.js
 var emptyParam = [];
 function match(method, path) {
   const matchers = this.buildAllMatchers();
@@ -79951,7 +80425,7 @@ function match(method, path) {
   return match2(method, path);
 }
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/router/reg-exp-router/node.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/reg-exp-router/node.js
 var LABEL_REG_EXP_STR = "[^/]+";
 var ONLY_WILDCARD_REG_EXP_STR = ".*";
 var TAIL_WILDCARD_REG_EXP_STR = "(?:|/.*)";
@@ -80055,7 +80529,7 @@ var Node = class _Node {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/router/reg-exp-router/trie.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/reg-exp-router/trie.js
 var Trie = class {
   #context = { varIndex: 0 };
   #root = new Node;
@@ -80111,7 +80585,7 @@ var Trie = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/router/reg-exp-router/router.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/reg-exp-router/router.js
 var nullMatcher = [/^$/, [], /* @__PURE__ */ Object.create(null)];
 var wildcardRegExpCache = /* @__PURE__ */ Object.create(null);
 function buildWildcardRegExp(path) {
@@ -80276,7 +80750,7 @@ var RegExpRouter = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/router/reg-exp-router/prepared-router.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/reg-exp-router/prepared-router.js
 var PreparedRegExpRouter = class {
   name = "PreparedRegExpRouter";
   #matchers;
@@ -80348,7 +80822,7 @@ var PreparedRegExpRouter = class {
   match = match;
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/router/smart-router/router.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/smart-router/router.js
 var SmartRouter = class {
   name = "SmartRouter";
   #routers = [];
@@ -80403,7 +80877,7 @@ var SmartRouter = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/router/trie-router/node.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/trie-router/node.js
 var emptyParams = /* @__PURE__ */ Object.create(null);
 var hasChildren = (children) => {
   for (const _ in children) {
@@ -80575,7 +81049,7 @@ var Node2 = class _Node2 {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/router/trie-router/router.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/trie-router/router.js
 var TrieRouter = class {
   name = "TrieRouter";
   #node;
@@ -80597,7 +81071,7 @@ var TrieRouter = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/hono.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/hono.js
 var Hono2 = class extends Hono {
   constructor(options = {}) {
     super(options);
@@ -80607,7 +81081,7 @@ var Hono2 = class extends Hono {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/utils/color.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/color.js
 function getColorEnabled() {
   const { process: process10, Deno: Deno2 } = globalThis;
   const isNoColor = typeof Deno2?.noColor === "boolean" ? Deno2.noColor : process10 !== undefined ? "NO_COLOR" in process10?.env : false;
@@ -80626,7 +81100,7 @@ async function getColorEnabledAsync() {
   return !isNoColor;
 }
 
-// ../../node_modules/.bun/hono@4.12.29/node_modules/hono/dist/middleware/logger/index.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/middleware/logger/index.js
 var humanize = (times) => {
   const [delimiter, separator] = [",", "."];
   const orderTimes = times.map((v) => v.replace(/(\d)(?=(\d\d\d)+(?!\d))/g, "$1" + delimiter));