@cerefox/memory 1.0.1-beta.1 → 1.0.1

package/dist/bin/cerefox.js

@@ -7184,7 +7184,7 @@ var exports_meta = {};
 __export(exports_meta, {
   PKG_VERSION: () => PKG_VERSION
 });
-var PKG_VERSION = "1.0.1-beta.1";
+var PKG_VERSION = "1.0.1";
 var init_meta = () => {};
 
 // ../../node_modules/.bun/tslib@2.8.1/node_modules/tslib/tslib.js
@@ -7792,7 +7792,7 @@ var require_tslib = __commonJS((exports, module) => {
   });
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.110.7/node_modules/@supabase/functions-js/dist/main/helper.js
+// ../../node_modules/.bun/@supabase+functions-js@2.111.0/node_modules/@supabase/functions-js/dist/main/helper.js
 var require_helper = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.resolveFetch = undefined;
@@ -7805,7 +7805,7 @@ var require_helper = __commonJS((exports) => {
   exports.resolveFetch = resolveFetch;
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.110.7/node_modules/@supabase/functions-js/dist/main/types.js
+// ../../node_modules/.bun/@supabase+functions-js@2.111.0/node_modules/@supabase/functions-js/dist/main/types.js
 var require_types = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionRegion = exports.FunctionsHttpError = exports.FunctionsRelayError = exports.FunctionsFetchError = exports.FunctionsError = undefined;
@@ -7866,7 +7866,7 @@ var require_types = __commonJS((exports) => {
   })(FunctionRegion || (exports.FunctionRegion = FunctionRegion = {}));
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.110.7/node_modules/@supabase/functions-js/dist/main/FunctionsClient.js
+// ../../node_modules/.bun/@supabase+functions-js@2.111.0/node_modules/@supabase/functions-js/dist/main/FunctionsClient.js
 var require_FunctionsClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionsClient = undefined;
@@ -7886,9 +7886,10 @@ var require_FunctionsClient = __commonJS((exports) => {
     }
     invoke(functionName_1) {
       return tslib_1.__awaiter(this, arguments, undefined, function* (functionName, options = {}) {
-        var _a;
+        var _a, _b;
         let timeoutId;
         let timeoutController;
+        let onAbort;
         try {
           const { headers, method, body: functionArgs, signal, timeout } = options;
           let _headers = {};
@@ -7929,7 +7930,8 @@ var require_FunctionsClient = __commonJS((exports) => {
             timeoutId = setTimeout(() => timeoutController.abort(), timeout);
             if (signal) {
               effectiveSignal = timeoutController.signal;
-              signal.addEventListener("abort", () => timeoutController.abort());
+              onAbort = () => timeoutController.abort();
+              signal.addEventListener("abort", onAbort);
             } else {
               effectiveSignal = timeoutController.signal;
             }
@@ -7949,7 +7951,7 @@ var require_FunctionsClient = __commonJS((exports) => {
           if (!response.ok) {
             throw new types_1.FunctionsHttpError(response);
           }
-          let responseType = ((_a = response.headers.get("Content-Type")) !== null && _a !== undefined ? _a : "text/plain").split(";")[0].trim();
+          let responseType = ((_a = response.headers.get("Content-Type")) !== null && _a !== undefined ? _a : "text/plain").split(";")[0].trim().toLowerCase();
           let data;
           if (responseType === "application/json") {
             data = yield response.json();
@@ -7973,6 +7975,9 @@ var require_FunctionsClient = __commonJS((exports) => {
           if (timeoutId) {
             clearTimeout(timeoutId);
           }
+          if (onAbort) {
+            (_b = options.signal) === null || _b === undefined || _b.removeEventListener("abort", onAbort);
+          }
         }
       });
     }
@@ -7980,7 +7985,7 @@ var require_FunctionsClient = __commonJS((exports) => {
   exports.FunctionsClient = FunctionsClient;
 });
 
-// ../../node_modules/.bun/@supabase+functions-js@2.110.7/node_modules/@supabase/functions-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+functions-js@2.111.0/node_modules/@supabase/functions-js/dist/main/index.js
 var require_main = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.FunctionRegion = exports.FunctionsRelayError = exports.FunctionsHttpError = exports.FunctionsFetchError = exports.FunctionsError = exports.FunctionsClient = undefined;
@@ -8006,7 +8011,7 @@ var require_main = __commonJS((exports) => {
   } });
 });
 
-// ../../node_modules/.bun/@supabase+postgrest-js@2.110.7/node_modules/@supabase/postgrest-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+postgrest-js@2.111.0/node_modules/@supabase/postgrest-js/dist/index.mjs
 function sleep(ms, signal) {
   return new Promise((resolve) => {
     if (signal === null || signal === undefined ? undefined : signal.aborted) {
@@ -8817,7 +8822,7 @@ var init_dist = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/websocket-factory.js
 var require_websocket_factory = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocketFactory = undefined;
@@ -8894,14 +8899,14 @@ Suggested solution: ${env.workaround}`;
   exports.default = WebSocketFactory;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/lib/version.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/version.js
 var require_version = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.version = undefined;
-  exports.version = "2.110.7";
+  exports.version = "2.111.0";
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/lib/constants.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/constants.js
 var require_constants = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CONNECTION_STATE = exports.TRANSPORTS = exports.CHANNEL_EVENTS = exports.CHANNEL_STATES = exports.SOCKET_STATES = exports.MAX_PUSH_BUFFER_SIZE = exports.WS_CLOSE_NORMAL = exports.DEFAULT_TIMEOUT = exports.VERSION = exports.DEFAULT_VSN = exports.VSN_2_0_0 = exports.VSN_1_0_0 = exports.DEFAULT_VERSION = undefined;
@@ -8946,7 +8951,7 @@ var require_constants = __commonJS((exports) => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/lib/serializer.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/serializer.js
 var require_serializer = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
 
@@ -9098,7 +9103,7 @@ var require_serializer = __commonJS((exports) => {
   exports.default = Serializer;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/lib/transformers.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/transformers.js
 var require_transformers = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.httpEndpointURL = exports.toTimestampString = exports.toArray = exports.toJson = exports.toNumber = exports.toBoolean = exports.convertCell = exports.convertColumn = exports.convertChangeData = exports.PostgresTypes = undefined;
@@ -10683,7 +10688,7 @@ var require_phoenix_cjs = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/phoenix/presenceAdapter.js
 var require_presenceAdapter = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var phoenix_1 = require_phoenix_cjs();
@@ -10739,10 +10744,12 @@ var require_presenceAdapter = __commonJS((exports) => {
   exports.default = PresenceAdapter;
   function transformState(presences) {
     return presences.metas.map((presence) => {
-      presence["presence_ref"] = presence["phx_ref"];
-      delete presence["phx_ref"];
-      delete presence["phx_ref_prev"];
-      return presence;
+      const descriptors = Object.getOwnPropertyDescriptors(presence);
+      const transformedPresence = Object.defineProperties({}, descriptors);
+      transformedPresence["presence_ref"] = transformedPresence["phx_ref"];
+      delete transformedPresence["phx_ref"];
+      delete transformedPresence["phx_ref_prev"];
+      return transformedPresence;
     });
   }
   function cloneState(state) {
@@ -10756,7 +10763,7 @@ var require_presenceAdapter = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/RealtimePresence.js
 var require_RealtimePresence = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.REALTIME_PRESENCE_LISTEN_EVENTS = undefined;
@@ -10781,7 +10788,7 @@ var require_RealtimePresence = __commonJS((exports) => {
   exports.default = RealtimePresence;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/lib/normalizeChannelError.js
 var require_normalizeChannelError = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.normalizeChannelError = normalizeChannelError;
@@ -10804,7 +10811,7 @@ var require_normalizeChannelError = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/phoenix/channelAdapter.js
 var require_channelAdapter = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var constants_1 = require_constants();
@@ -10906,7 +10913,7 @@ var require_channelAdapter = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/RealtimePostgresFilterBuilder.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/RealtimePostgresFilterBuilder.js
 var require_RealtimePostgresFilterBuilder = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.postgresChangesFilter = exports.RealtimePostgresFilterBuilder = undefined;
@@ -10996,7 +11003,7 @@ var require_RealtimePostgresFilterBuilder = __commonJS((exports) => {
   exports.postgresChangesFilter = postgresChangesFilter;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/RealtimeChannel.js
 var require_RealtimeChannel = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.REALTIME_CHANNEL_STATES = exports.REALTIME_SUBSCRIBE_STATES = exports.REALTIME_LISTEN_TYPES = exports.REALTIME_POSTGRES_CHANGES_LISTEN_EVENT = exports.postgresChangesFilter = exports.RealtimePostgresFilterBuilder = undefined;
@@ -11386,7 +11393,7 @@ var require_RealtimeChannel = __commonJS((exports) => {
   exports.default = RealtimeChannel;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/phoenix/socketAdapter.js
 var require_socketAdapter = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var phoenix_1 = require_phoenix_cjs();
@@ -11499,7 +11506,7 @@ var require_socketAdapter = __commonJS((exports) => {
   exports.default = SocketAdapter;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/RealtimeClient.js
 var require_RealtimeClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -11952,7 +11959,7 @@ var require_RealtimeClient = __commonJS((exports) => {
   exports.default = RealtimeClient;
 });
 
-// ../../node_modules/.bun/@supabase+realtime-js@2.110.7/node_modules/@supabase/realtime-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+realtime-js@2.111.0/node_modules/@supabase/realtime-js/dist/main/index.js
 var require_main2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocketFactory = exports.REALTIME_CHANNEL_STATES = exports.REALTIME_SUBSCRIBE_STATES = exports.REALTIME_PRESENCE_LISTEN_EVENTS = exports.REALTIME_POSTGRES_CHANGES_LISTEN_EVENT = exports.REALTIME_LISTEN_TYPES = exports.postgresChangesFilter = exports.RealtimePostgresFilterBuilder = exports.RealtimeClient = exports.RealtimeChannel = exports.RealtimePresence = undefined;
@@ -12288,7 +12295,7 @@ var init_dist2 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+storage-js@2.110.7/node_modules/@supabase/storage-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+storage-js@2.111.0/node_modules/@supabase/storage-js/dist/index.mjs
 function _typeof2(o) {
   "@babel/helpers - typeof";
   return _typeof2 = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(o$1) {
@@ -12427,7 +12434,7 @@ var StorageError, StorageApiError, StorageUnknownError, resolveFetch = (customFe
   if (bucketName.includes("/") || bucketName.includes("\\"))
     return false;
   return /^[\w!.\*'() &$@=;:+,?-]+$/.test(bucketName);
-}, _getErrorMessage = (err) => {
+}, encodeStoragePath = (path) => path.split("/").map(encodeURIComponent).join("/"), _getErrorMessage = (err) => {
   if (typeof err === "object" && err !== null) {
     const e = err;
     if (typeof e.msg === "string")
@@ -12596,7 +12603,7 @@ var StorageError, StorageApiError, StorageUnknownError, resolveFetch = (customFe
       throw error;
     }
   }
-}, DEFAULT_SEARCH_OPTIONS, DEFAULT_FILE_OPTIONS, StorageFileApi, version = "2.110.7", DEFAULT_HEADERS, StorageBucketApi, StorageAnalyticsClient, VectorIndexApi, VectorDataApi, VectorBucketApi, StorageVectorsClient, VectorBucketScope, VectorIndexScope, StorageClient;
+}, DEFAULT_SEARCH_OPTIONS, DEFAULT_FILE_OPTIONS, StorageFileApi, version = "2.111.0", DEFAULT_HEADERS, StorageBucketApi, StorageAnalyticsClient, VectorIndexApi, VectorDataApi, VectorBucketApi, StorageVectorsClient, VectorBucketScope, VectorIndexScope, StorageClient;
 var init_dist3 = __esm(() => {
   init_dist2();
   StorageError = class extends Error {
@@ -12886,7 +12893,7 @@ var init_dist3 = __esm(() => {
     async purgeCache(path, options, parameters) {
       var _this13 = this;
       return _this13.handleOperation(async () => {
-        const _path = _this13._getFinalPath(path);
+        const _path = encodeStoragePath(_this13._getFinalPath(path));
         const query = new URLSearchParams;
         if (options === null || options === undefined ? undefined : options.transformations)
           query.set("transformations", "true");
@@ -13009,7 +13016,7 @@ var init_dist3 = __esm(() => {
         if (options === null || options === undefined ? undefined : options.transformations)
           query.set("transformations", "true");
         const queryString = query.toString();
-        return await remove(_this7.fetch, `${_this7.url}/cdn/${id}${queryString ? `?${queryString}` : ""}`, {}, { headers: _this7.headers }, parameters);
+        return await remove(_this7.fetch, `${_this7.url}/cdn/${encodeStoragePath(id)}${queryString ? `?${queryString}` : ""}`, {}, { headers: _this7.headers }, parameters);
       });
     }
     listBucketOptionsToQueryString(options) {
@@ -13329,17 +13336,17 @@ var init_dist3 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/version.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/version.js
 var require_version2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.version = undefined;
-  exports.version = "2.110.7";
+  exports.version = "2.111.0";
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/constants.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/constants.js
 var require_constants2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
-  exports.JWKS_TTL = exports.BASE64URL_REGEX = exports.API_VERSIONS = exports.API_VERSION_HEADER_NAME = exports.NETWORK_FAILURE = exports.DEFAULT_HEADERS = exports.AUDIENCE = exports.STORAGE_KEY = exports.GOTRUE_URL = exports.REFRESH_FAILURE_COOLDOWN_MS = exports.EXPIRY_MARGIN_MS = exports.AUTO_REFRESH_TICK_THRESHOLD = exports.AUTO_REFRESH_TICK_DURATION_MS = undefined;
+  exports.JWKS_TTL = exports.PKCE_MAX_CONCURRENT_FLOWS = exports.PKCE_FLOW_ID_PARAM = exports.BASE64URL_REGEX = exports.API_VERSIONS = exports.API_VERSION_HEADER_NAME = exports.NETWORK_FAILURE = exports.DEFAULT_HEADERS = exports.AUDIENCE = exports.STORAGE_KEY = exports.GOTRUE_URL = exports.REFRESH_FAILURE_COOLDOWN_MS = exports.EXPIRY_MARGIN_MS = exports.AUTO_REFRESH_TICK_THRESHOLD = exports.AUTO_REFRESH_TICK_DURATION_MS = undefined;
   var version_1 = require_version2();
   exports.AUTO_REFRESH_TICK_DURATION_MS = 30 * 1000;
   exports.AUTO_REFRESH_TICK_THRESHOLD = 3;
@@ -13361,10 +13368,12 @@ var require_constants2 = __commonJS((exports) => {
     }
   };
   exports.BASE64URL_REGEX = /^([a-z0-9_-]{4})*($|[a-z0-9_-]{3}$|[a-z0-9_-]{2}$)$/i;
+  exports.PKCE_FLOW_ID_PARAM = "sb_flow_id";
+  exports.PKCE_MAX_CONCURRENT_FLOWS = 5;
   exports.JWKS_TTL = 10 * 60 * 1000;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/errors.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/errors.js
 var require_errors = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.AuthInvalidJwtError = exports.AuthWeakPasswordError = exports.AuthRefreshDiscardedError = exports.AuthRetryableFetchError = exports.AuthPKCECodeVerifierMissingError = exports.AuthPKCEGrantCodeExchangeError = exports.AuthImplicitGrantRedirectError = exports.AuthInvalidCredentialsError = exports.AuthInvalidTokenResponseError = exports.AuthSessionMissingError = exports.CustomAuthError = exports.AuthUnknownError = exports.AuthApiError = exports.AuthError = undefined;
@@ -13533,7 +13542,7 @@ var require_errors = __commonJS((exports) => {
   exports.AuthInvalidJwtError = AuthInvalidJwtError;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/base64url.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/base64url.js
 var require_base64url = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.byteToBase64URL = byteToBase64URL;
@@ -13721,10 +13730,10 @@ var require_base64url = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/helpers.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/helpers.js
 var require_helpers = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
-  exports.Deferred = exports.removeItemAsync = exports.getItemAsync = exports.setItemAsync = exports.looksLikeFetchResponse = exports.resolveFetch = exports.supportsLocalStorage = exports.isBrowser = undefined;
+  exports.pkceVerifierSlotKey = exports.Deferred = exports.removeItemAsync = exports.getItemAsync = exports.setItemAsync = exports.looksLikeFetchResponse = exports.resolveFetch = exports.supportsLocalStorage = exports.isBrowser = undefined;
   exports.expiresAt = expiresAt;
   exports.generateCallbackId = generateCallbackId;
   exports.parseParametersFromURL = parseParametersFromURL;
@@ -13733,6 +13742,13 @@ var require_helpers = __commonJS((exports) => {
   exports.retryable = retryable;
   exports.generatePKCEVerifier = generatePKCEVerifier;
   exports.generatePKCEChallenge = generatePKCEChallenge;
+  exports.validatePKCEFlowId = validatePKCEFlowId;
+  exports.generatePKCEFlowId = generatePKCEFlowId;
+  exports.storePKCEVerifier = storePKCEVerifier;
+  exports.retrievePKCEVerifier = retrievePKCEVerifier;
+  exports.removePKCEVerifier = removePKCEVerifier;
+  exports.removeAllPKCEVerifiers = removeAllPKCEVerifiers;
+  exports.appendFlowIdToRedirectTo = appendFlowIdToRedirectTo;
   exports.getCodeChallengeAndMethod = getCodeChallengeAndMethod;
   exports.parseResponseAPIVersion = parseResponseAPIVersion;
   exports.validateExp = validateExp;
@@ -13924,16 +13940,103 @@ var require_helpers = __commonJS((exports) => {
     const hashed = await sha256(verifier);
     return btoa(hashed).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
   }
-  async function getCodeChallengeAndMethod(storage, storageKey, isPasswordRecovery = false) {
+  var PKCE_FLOW_ID_PATTERN = /^[a-zA-Z0-9_-]{8,64}$/;
+  function validatePKCEFlowId(flowId) {
+    return typeof flowId === "string" && PKCE_FLOW_ID_PATTERN.test(flowId) ? flowId : null;
+  }
+  function generatePKCEFlowId() {
+    if (typeof crypto !== "undefined" && typeof crypto.getRandomValues === "function") {
+      const bytes = new Uint8Array(16);
+      crypto.getRandomValues(bytes);
+      return Array.from(bytes, dec2hex).join("");
+    }
+    let flowId = "";
+    for (let i = 0;i < 32; i++) {
+      flowId += Math.floor(Math.random() * 16).toString(16);
+    }
+    return flowId;
+  }
+  var pkceVerifierSlotKey = (storageKey, flowId) => `${storageKey}-flow-${flowId}-code-verifier`;
+  exports.pkceVerifierSlotKey = pkceVerifierSlotKey;
+  var pkceFlowIndexKey = (storageKey) => `${storageKey}-flows-code-verifier`;
+  async function getPKCEFlowIndex(storage, storageKey) {
+    const index = await (0, exports.getItemAsync)(storage, pkceFlowIndexKey(storageKey));
+    return Array.isArray(index) ? index.filter((id) => validatePKCEFlowId(id) !== null) : [];
+  }
+  async function storePKCEVerifier(storage, storageKey, flowId, verifier, onEvictFlow) {
+    await (0, exports.setItemAsync)(storage, (0, exports.pkceVerifierSlotKey)(storageKey, flowId), verifier);
+    const index = (await getPKCEFlowIndex(storage, storageKey)).filter((id) => id !== flowId);
+    index.push(flowId);
+    while (index.length > constants_1.PKCE_MAX_CONCURRENT_FLOWS) {
+      const evicted = index.shift();
+      await (0, exports.removeItemAsync)(storage, (0, exports.pkceVerifierSlotKey)(storageKey, evicted));
+      onEvictFlow === null || onEvictFlow === undefined || onEvictFlow(evicted);
+    }
+    await (0, exports.setItemAsync)(storage, pkceFlowIndexKey(storageKey), index);
+    await (0, exports.setItemAsync)(storage, `${storageKey}-code-verifier`, verifier);
+  }
+  async function retrievePKCEVerifier(storage, storageKey, flowId) {
+    if (flowId) {
+      const verifier2 = await (0, exports.getItemAsync)(storage, (0, exports.pkceVerifierSlotKey)(storageKey, flowId));
+      return { verifier: typeof verifier2 === "string" ? verifier2 : null, flowId };
+    }
+    const verifier = await (0, exports.getItemAsync)(storage, `${storageKey}-code-verifier`);
+    return { verifier: typeof verifier === "string" ? verifier : null, flowId: null };
+  }
+  async function removePKCEVerifier(storage, storageKey, flowId) {
+    const legacyKey = `${storageKey}-code-verifier`;
+    if (!flowId) {
+      await (0, exports.removeItemAsync)(storage, legacyKey);
+      return;
+    }
+    const slotKey = (0, exports.pkceVerifierSlotKey)(storageKey, flowId);
+    const slotValue = await (0, exports.getItemAsync)(storage, slotKey);
+    await (0, exports.removeItemAsync)(storage, slotKey);
+    const index = await getPKCEFlowIndex(storage, storageKey);
+    const remaining = index.filter((id) => id !== flowId);
+    if (remaining.length !== index.length) {
+      if (remaining.length > 0) {
+        await (0, exports.setItemAsync)(storage, pkceFlowIndexKey(storageKey), remaining);
+      } else {
+        await (0, exports.removeItemAsync)(storage, pkceFlowIndexKey(storageKey));
+      }
+    }
+    if (slotValue != null && slotValue === await (0, exports.getItemAsync)(storage, legacyKey)) {
+      await (0, exports.removeItemAsync)(storage, legacyKey);
+    }
+  }
+  async function removeAllPKCEVerifiers(storage, storageKey) {
+    const index = await getPKCEFlowIndex(storage, storageKey);
+    for (const flowId of index) {
+      await (0, exports.removeItemAsync)(storage, (0, exports.pkceVerifierSlotKey)(storageKey, flowId));
+    }
+    await (0, exports.removeItemAsync)(storage, pkceFlowIndexKey(storageKey));
+    await (0, exports.removeItemAsync)(storage, `${storageKey}-code-verifier`);
+  }
+  function appendFlowIdToRedirectTo(redirectTo, flowId) {
+    const hashIndex = redirectTo.indexOf("#");
+    let base = hashIndex === -1 ? redirectTo : redirectTo.slice(0, hashIndex);
+    const fragment = hashIndex === -1 ? "" : redirectTo.slice(hashIndex);
+    const queryIndex = base.indexOf("?");
+    if (queryIndex !== -1) {
+      const path = base.slice(0, queryIndex);
+      const remaining = base.slice(queryIndex + 1).split("&").filter((pair) => pair !== "" && pair !== constants_1.PKCE_FLOW_ID_PARAM && !pair.startsWith(`${constants_1.PKCE_FLOW_ID_PARAM}=`));
+      base = remaining.length > 0 ? `${path}?${remaining.join("&")}` : path;
+    }
+    const separator = base.includes("?") ? "&" : "?";
+    return `${base}${separator}${constants_1.PKCE_FLOW_ID_PARAM}=${encodeURIComponent(flowId)}${fragment}`;
+  }
+  async function getCodeChallengeAndMethod(storage, storageKey, isPasswordRecovery = false, onEvictFlow) {
     const codeVerifier = generatePKCEVerifier();
     let storedCodeVerifier = codeVerifier;
     if (isPasswordRecovery) {
       storedCodeVerifier += "/recovery";
     }
-    await (0, exports.setItemAsync)(storage, `${storageKey}-code-verifier`, storedCodeVerifier);
+    const flowId = generatePKCEFlowId();
+    await storePKCEVerifier(storage, storageKey, flowId, storedCodeVerifier, onEvictFlow);
     const codeChallenge = await generatePKCEChallenge(codeVerifier);
     const codeChallengeMethod = codeVerifier === codeChallenge ? "plain" : "s256";
-    return [codeChallenge, codeChallengeMethod];
+    return [codeChallenge, codeChallengeMethod, flowId];
   }
   var API_VERSION_REGEX = /^2[0-9]{3}-(0[1-9]|1[0-2])-(0[1-9]|1[0-9]|2[0-9]|3[0-1])$/i;
   function parseResponseAPIVersion(response) {
@@ -14036,7 +14139,7 @@ var require_helpers = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/fetch.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/fetch.js
 var require_fetch = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.handleError = handleError2;
@@ -14150,7 +14253,6 @@ var require_fetch = __commonJS((exports) => {
     try {
       result = await fetcher(url, Object.assign({}, requestParams));
     } catch (e) {
-      console.error(e);
       throw new errors_1.AuthRetryableFetchError(_getErrorMessage2(e), 0);
     }
     if (!result.ok) {
@@ -14218,14 +14320,14 @@ var require_fetch = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/types.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/types.js
 var require_types2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.SIGN_OUT_SCOPES = undefined;
   exports.SIGN_OUT_SCOPES = ["global", "local", "others"];
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/GoTrueAdminApi.js
 var require_GoTrueAdminApi = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -14672,7 +14774,7 @@ var require_GoTrueAdminApi = __commonJS((exports) => {
   exports.default = GoTrueAdminApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/local-storage.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/local-storage.js
 var require_local_storage = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.memoryLocalStorageAdapter = memoryLocalStorageAdapter;
@@ -14691,7 +14793,7 @@ var require_local_storage = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/locks.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/locks.js
 var require_locks = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.ProcessLockAcquireTimeoutError = exports.NavigatorLockAcquireTimeoutError = exports.LockAcquireTimeoutError = exports.internals = undefined;
@@ -14865,7 +14967,7 @@ var require_locks = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/polyfills.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/polyfills.js
 var require_polyfills = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.polyfillGlobalThis = polyfillGlobalThis;
@@ -14889,7 +14991,7 @@ var require_polyfills = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/web3/ethereum.js
 var require_ethereum = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.getAddress = getAddress;
@@ -14966,7 +15068,7 @@ ${suffix}`;
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/webauthn.errors.js
 var require_webauthn_errors = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebAuthnUnknownError = exports.WebAuthnError = undefined;
@@ -15153,7 +15255,7 @@ var require_webauthn_errors = __commonJS((exports) => {
   }
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/lib/webauthn.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/lib/webauthn.js
 var require_webauthn = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebAuthnApi = exports.DEFAULT_REQUEST_OPTIONS = exports.DEFAULT_CREATION_OPTIONS = exports.webAuthnAbortService = exports.WebAuthnAbortService = exports.identifyAuthenticationError = exports.identifyRegistrationError = exports.isWebAuthnError = exports.WebAuthnError = undefined;
@@ -15607,7 +15709,7 @@ var require_webauthn = __commonJS((exports) => {
   exports.WebAuthnApi = WebAuthnApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/GoTrueClient.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/GoTrueClient.js
 var require_GoTrueClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -15906,6 +16008,7 @@ var require_GoTrueClient = __commonJS((exports) => {
     }
     async signUp(credentials) {
       var _a, _b, _c;
+      let flowId = null;
       try {
         let res;
         if ("email" in credentials) {
@@ -15913,11 +16016,11 @@ var require_GoTrueClient = __commonJS((exports) => {
           let codeChallenge = null;
           let codeChallengeMethod = null;
           if (this.flowType === "pkce") {
-            [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+            [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
           }
           res = await (0, fetch_1._request)(this.fetch, "POST", `${this.url}/signup`, {
             headers: this.headers,
-            redirectTo: options === null || options === undefined ? undefined : options.emailRedirectTo,
+            redirectTo: this._maybeAppendFlowIdToRedirect(options === null || options === undefined ? undefined : options.emailRedirectTo, flowId),
             body: {
               email,
               password,
@@ -15946,7 +16049,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
         const { data, error } = res;
         if (error || !data) {
-          await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+          await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
           return this._returnResult({ data: { user: null, session: null }, error });
         }
         const session = data.session;
@@ -15957,7 +16060,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
         return this._returnResult({ data: { user, session }, error: null });
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: { user: null, session: null }, error });
         }
@@ -16023,14 +16126,14 @@ var require_GoTrueClient = __commonJS((exports) => {
         skipBrowserRedirect: (_d = credentials.options) === null || _d === undefined ? undefined : _d.skipBrowserRedirect
       });
     }
-    async exchangeCodeForSession(authCode) {
+    async exchangeCodeForSession(authCode, options) {
       await this.initializePromise;
       if (this.lock != null) {
         return this._acquireLock(this.lockAcquireTimeout, async () => {
-          return this._exchangeCodeForSession(authCode);
+          return this._exchangeCodeForSession(authCode, options);
         });
       }
-      return this._exchangeCodeForSession(authCode);
+      return this._exchangeCodeForSession(authCode, options);
     }
     async signInWithWeb3(credentials) {
       const { chain } = credentials;
@@ -16234,8 +16337,13 @@ var require_GoTrueClient = __commonJS((exports) => {
         throw error;
       }
     }
-    async _exchangeCodeForSession(authCode) {
-      const storageItem = await (0, helpers_1.getItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+    async _exchangeCodeForSession(authCode, options) {
+      const hasExplicitFlowId = (options === null || options === undefined ? undefined : options.flowId) != null;
+      const requestedFlowId = hasExplicitFlowId ? (0, helpers_1.validatePKCEFlowId)(options === null || options === undefined ? undefined : options.flowId) : (0, helpers_1.isBrowser)() ? (0, helpers_1.validatePKCEFlowId)((0, helpers_1.parseParametersFromURL)(window.location.href)[constants_1.PKCE_FLOW_ID_PARAM]) : null;
+      if (hasExplicitFlowId && !requestedFlowId) {
+        this._debug("#_exchangeCodeForSession()", "provided flowId is not a valid flow id", options === null || options === undefined ? undefined : options.flowId);
+      }
+      const { verifier: storageItem, flowId } = hasExplicitFlowId && !requestedFlowId ? { verifier: null, flowId: null } : await (0, helpers_1.retrievePKCEVerifier)(this.storage, this.storageKey, requestedFlowId);
       const [codeVerifier, redirectType] = (storageItem !== null && storageItem !== undefined ? storageItem : "").split("/");
       try {
         if (!codeVerifier && this.flowType === "pkce") {
@@ -16249,7 +16357,7 @@ var require_GoTrueClient = __commonJS((exports) => {
           },
           xform: fetch_1._sessionResponse
         });
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if (error) {
           throw error;
         }
@@ -16266,7 +16374,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
         return this._returnResult({ data: Object.assign(Object.assign({}, data), { redirectType: redirectType !== null && redirectType !== undefined ? redirectType : null }), error });
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({
             data: { user: null, session: null, redirectType: null },
@@ -16311,13 +16419,14 @@ var require_GoTrueClient = __commonJS((exports) => {
     }
     async signInWithOtp(credentials) {
       var _a, _b, _c, _d, _f;
+      let flowId = null;
       try {
         if ("email" in credentials) {
           const { email, options } = credentials;
           let codeChallenge = null;
           let codeChallengeMethod = null;
           if (this.flowType === "pkce") {
-            [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+            [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
           }
           const { error } = await (0, fetch_1._request)(this.fetch, "POST", `${this.url}/otp`, {
             headers: this.headers,
@@ -16329,7 +16438,7 @@ var require_GoTrueClient = __commonJS((exports) => {
               code_challenge: codeChallenge,
               code_challenge_method: codeChallengeMethod
             },
-            redirectTo: options === null || options === undefined ? undefined : options.emailRedirectTo
+            redirectTo: this._maybeAppendFlowIdToRedirect(options === null || options === undefined ? undefined : options.emailRedirectTo, flowId)
           });
           return this._returnResult({ data: { user: null, session: null }, error });
         }
@@ -16352,7 +16461,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
         throw new errors_1.AuthInvalidCredentialsError("You must provide either an email or phone number.");
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: { user: null, session: null }, error });
         }
@@ -16396,24 +16505,25 @@ var require_GoTrueClient = __commonJS((exports) => {
       }
     }
     async signInWithSSO(params) {
-      var _a, _b, _c, _d, _f;
+      var _a, _b, _c, _d;
+      let flowId = null;
       try {
         let codeChallenge = null;
         let codeChallengeMethod = null;
         if (this.flowType === "pkce") {
-          [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+          [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
         }
         const result = await (0, fetch_1._request)(this.fetch, "POST", `${this.url}/sso`, {
-          body: Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, "providerId" in params ? { provider_id: params.providerId } : null), "domain" in params ? { domain: params.domain } : null), { redirect_to: (_b = (_a = params.options) === null || _a === undefined ? undefined : _a.redirectTo) !== null && _b !== undefined ? _b : undefined }), ((_c = params === null || params === undefined ? undefined : params.options) === null || _c === undefined ? undefined : _c.captchaToken) ? { gotrue_meta_security: { captcha_token: params.options.captchaToken } } : null), { skip_http_redirect: true, code_challenge: codeChallenge, code_challenge_method: codeChallengeMethod }),
+          body: Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, "providerId" in params ? { provider_id: params.providerId } : null), "domain" in params ? { domain: params.domain } : null), { redirect_to: this._maybeAppendFlowIdToRedirect((_a = params.options) === null || _a === undefined ? undefined : _a.redirectTo, flowId) }), ((_b = params === null || params === undefined ? undefined : params.options) === null || _b === undefined ? undefined : _b.captchaToken) ? { gotrue_meta_security: { captcha_token: params.options.captchaToken } } : null), { skip_http_redirect: true, code_challenge: codeChallenge, code_challenge_method: codeChallengeMethod }),
           headers: this.headers,
           xform: fetch_1._ssoResponse
         });
-        if (((_d = result.data) === null || _d === undefined ? undefined : _d.url) && (0, helpers_1.isBrowser)() && !((_f = params.options) === null || _f === undefined ? undefined : _f.skipBrowserRedirect)) {
+        if (((_c = result.data) === null || _c === undefined ? undefined : _c.url) && (0, helpers_1.isBrowser)() && !((_d = params.options) === null || _d === undefined ? undefined : _d.skipBrowserRedirect)) {
           window.location.assign(result.data.url);
         }
         return this._returnResult(result);
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: null, error });
         }
@@ -16451,6 +16561,7 @@ var require_GoTrueClient = __commonJS((exports) => {
       }
     }
     async resend(credentials) {
+      let flowId = null;
       try {
         const endpoint = `${this.url}/resend`;
         if ("email" in credentials) {
@@ -16458,7 +16569,7 @@ var require_GoTrueClient = __commonJS((exports) => {
           let codeChallenge = null;
           let codeChallengeMethod = null;
           if (this.flowType === "pkce") {
-            [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+            [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
           }
           const { error } = await (0, fetch_1._request)(this.fetch, "POST", endpoint, {
             headers: this.headers,
@@ -16469,10 +16580,10 @@ var require_GoTrueClient = __commonJS((exports) => {
               code_challenge: codeChallenge,
               code_challenge_method: codeChallengeMethod
             },
-            redirectTo: options === null || options === undefined ? undefined : options.emailRedirectTo
+            redirectTo: this._maybeAppendFlowIdToRedirect(options === null || options === undefined ? undefined : options.emailRedirectTo, flowId)
           });
           if (error) {
-            await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+            await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
           }
           return this._returnResult({ data: { user: null, session: null }, error });
         } else if ("phone" in credentials) {
@@ -16492,7 +16603,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
         throw new errors_1.AuthInvalidCredentialsError("You must provide either an email or phone number and a type");
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: { user: null, session: null }, error });
         }
@@ -16665,7 +16776,6 @@ var require_GoTrueClient = __commonJS((exports) => {
         if ((0, errors_1.isAuthError)(error)) {
           if ((0, errors_1.isAuthSessionMissingError)(error)) {
             await this._removeSession();
-            await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
           }
           return this._returnResult({ data: { user: null }, error });
         }
@@ -16682,6 +16792,7 @@ var require_GoTrueClient = __commonJS((exports) => {
       return await this._updateUser(attributes, options);
     }
     async _updateUser(attributes, options = {}) {
+      let flowId = null;
       try {
         return await this._useSession(async (result) => {
           const { data: sessionData, error: sessionError } = result;
@@ -16695,11 +16806,11 @@ var require_GoTrueClient = __commonJS((exports) => {
           let codeChallenge = null;
           let codeChallengeMethod = null;
           if (this.flowType === "pkce" && attributes.email != null) {
-            [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+            [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
           }
           const { data, error: userError2 } = await (0, fetch_1._request)(this.fetch, "PUT", `${this.url}/user`, {
             headers: this.headers,
-            redirectTo: options === null || options === undefined ? undefined : options.emailRedirectTo,
+            redirectTo: this._maybeAppendFlowIdToRedirect(options === null || options === undefined ? undefined : options.emailRedirectTo, flowId),
             body: Object.assign(Object.assign({}, attributes), { code_challenge: codeChallenge, code_challenge_method: codeChallengeMethod }),
             jwt: session.access_token,
             xform: fetch_1._userResponse
@@ -16713,7 +16824,7 @@ var require_GoTrueClient = __commonJS((exports) => {
           return this._returnResult({ data: { user: session.user }, error: null });
         });
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: { user: null }, error });
         }
@@ -16843,11 +16954,14 @@ var require_GoTrueClient = __commonJS((exports) => {
           this._debug("#_initialize()", "begin", "is PKCE flow", true);
           if (!params.code)
             throw new errors_1.AuthPKCEGrantCodeExchangeError("No code detected.");
-          const { data: data2, error: error2 } = await this._exchangeCodeForSession(params.code);
+          const { data: data2, error: error2 } = await this._exchangeCodeForSession(params.code, {
+            flowId: params[constants_1.PKCE_FLOW_ID_PARAM]
+          });
           if (error2)
             throw error2;
           const url = new URL(window.location.href);
           url.searchParams.delete("code");
+          url.searchParams.delete(constants_1.PKCE_FLOW_ID_PARAM);
           window.history.replaceState(window.history.state, "", url.toString());
           return {
             data: { session: data2.session, redirectType: (_a = data2.redirectType) !== null && _a !== undefined ? _a : null },
@@ -16904,8 +17018,15 @@ var require_GoTrueClient = __commonJS((exports) => {
       return Boolean(params.access_token || params.error || params.error_description || params.error_code);
     }
     async _isPKCECallback(params) {
+      if (!params.code) {
+        return false;
+      }
+      const flowId = (0, helpers_1.validatePKCEFlowId)(params[constants_1.PKCE_FLOW_ID_PARAM]);
+      if (flowId && await (0, helpers_1.getItemAsync)(this.storage, (0, helpers_1.pkceVerifierSlotKey)(this.storageKey, flowId))) {
+        return true;
+      }
       const currentStorageContent = await (0, helpers_1.getItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
-      return !!(params.code && currentStorageContent);
+      return !!currentStorageContent;
     }
     async signOut(options = { scope: "global" }) {
       await this.initializePromise;
@@ -16921,7 +17042,6 @@ var require_GoTrueClient = __commonJS((exports) => {
         var _a;
         const removeCurrentSession = async () => {
           await this._removeSession();
-          await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
         };
         const { data, error: sessionError } = result;
         if (sessionError && !(0, errors_1.isAuthSessionMissingError)(sessionError)) {
@@ -16981,7 +17101,7 @@ var require_GoTrueClient = __commonJS((exports) => {
         } catch (err) {
           await ((_b = this.stateChangeEmitters.get(id)) === null || _b === undefined ? undefined : _b.callback("INITIAL_SESSION", null));
           this._debug("INITIAL_SESSION", "callback id", id, "error", err);
-          if ((0, errors_1.isAuthSessionMissingError)(err)) {
+          if ((0, errors_1.isAuthSessionMissingError)(err) || (0, errors_1.isAuthRetryableFetchError)(err) || (0, errors_1.isAuthApiError)(err) && (err.code === "refresh_token_not_found" || err.code === "refresh_token_already_used" || err.code === "session_expired")) {
             console.warn(err);
           } else {
             console.error(err);
@@ -16992,8 +17112,9 @@ var require_GoTrueClient = __commonJS((exports) => {
     async resetPasswordForEmail(email, options = {}) {
       let codeChallenge = null;
       let codeChallengeMethod = null;
+      let flowId = null;
       if (this.flowType === "pkce") {
-        [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey, true);
+        [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod(true);
       }
       try {
         return await (0, fetch_1._request)(this.fetch, "POST", `${this.url}/recover`, {
@@ -17004,10 +17125,10 @@ var require_GoTrueClient = __commonJS((exports) => {
             gotrue_meta_security: { captcha_token: options.captchaToken }
           },
           headers: this.headers,
-          redirectTo: options.redirectTo
+          redirectTo: this._maybeAppendFlowIdToRedirect(options.redirectTo, flowId)
         });
       } catch (error) {
-        await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+        await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, flowId);
         if ((0, errors_1.isAuthError)(error)) {
           return this._returnResult({ data: null, error });
         }
@@ -17036,18 +17157,20 @@ var require_GoTrueClient = __commonJS((exports) => {
     }
     async linkIdentityOAuth(credentials) {
       var _a;
+      let flowId = null;
       try {
         const { data, error } = await this._useSession(async (result) => {
           var _a2, _b, _c, _d, _f;
           const { data: data2, error: error2 } = result;
           if (error2)
             throw error2;
-          const url = await this._getUrlForProvider(`${this.url}/user/identities/authorize`, credentials.provider, {
+          const { url, flowId: urlFlowId } = await this._getUrlForProvider(`${this.url}/user/identities/authorize`, credentials.provider, {
             redirectTo: (_a2 = credentials.options) === null || _a2 === undefined ? undefined : _a2.redirectTo,
             scopes: (_b = credentials.options) === null || _b === undefined ? undefined : _b.scopes,
             queryParams: (_c = credentials.options) === null || _c === undefined ? undefined : _c.queryParams,
             skipBrowserRedirect: true
           });
+          flowId = urlFlowId;
           return await (0, fetch_1._request)(this.fetch, "GET", url, {
             headers: this.headers,
             jwt: (_f = (_d = data2.session) === null || _d === undefined ? undefined : _d.access_token) !== null && _f !== undefined ? _f : undefined
@@ -17059,12 +17182,15 @@ var require_GoTrueClient = __commonJS((exports) => {
           window.location.assign(data === null || data === undefined ? undefined : data.url);
         }
         return this._returnResult({
-          data: { provider: credentials.provider, url: data === null || data === undefined ? undefined : data.url },
+          data: { provider: credentials.provider, url: data === null || data === undefined ? undefined : data.url, flowId },
           error: null
         });
       } catch (error) {
         if ((0, errors_1.isAuthError)(error)) {
-          return this._returnResult({ data: { provider: credentials.provider, url: null }, error });
+          return this._returnResult({
+            data: { provider: credentials.provider, url: null, flowId },
+            error
+          });
         }
         throw error;
       }
@@ -17105,7 +17231,7 @@ var require_GoTrueClient = __commonJS((exports) => {
           }
           return this._returnResult({ data, error });
         } catch (error) {
-          await (0, helpers_1.removeItemAsync)(this.storage, `${this.storageKey}-code-verifier`);
+          await (0, helpers_1.removePKCEVerifier)(this.storage, this.storageKey, null);
           if ((0, errors_1.isAuthError)(error)) {
             return this._returnResult({ data: { user: null, session: null }, error });
           }
@@ -17167,7 +17293,7 @@ var require_GoTrueClient = __commonJS((exports) => {
       return isValidSession;
     }
     async _handleProviderSignIn(provider, options) {
-      const url = await this._getUrlForProvider(`${this.url}/authorize`, provider, {
+      const { url, flowId } = await this._getUrlForProvider(`${this.url}/authorize`, provider, {
         redirectTo: options.redirectTo,
         scopes: options.scopes,
         queryParams: options.queryParams
@@ -17176,7 +17302,7 @@ var require_GoTrueClient = __commonJS((exports) => {
       if ((0, helpers_1.isBrowser)() && !options.skipBrowserRedirect) {
         window.location.assign(url);
       }
-      return { data: { provider, url }, error: null };
+      return { data: { provider, url, flowId }, error: null };
     }
     async _recoverAndRefresh() {
       var _a, _b;
@@ -17243,7 +17369,11 @@ var require_GoTrueClient = __commonJS((exports) => {
         }
       } catch (err) {
         this._debug(debugName, "error", err);
-        console.error(err);
+        if ((0, errors_1.isAuthRetryableFetchError)(err)) {
+          console.warn(err);
+        } else {
+          console.error(err);
+        }
         return;
       } finally {
         this._debug(debugName, "end");
@@ -17389,7 +17519,7 @@ var require_GoTrueClient = __commonJS((exports) => {
       this.lastRefreshFailure = null;
       this.suppressGetSessionWarning = false;
       await (0, helpers_1.removeItemAsync)(this.storage, this.storageKey);
-      await (0, helpers_1.removeItemAsync)(this.storage, this.storageKey + "-code-verifier");
+      await (0, helpers_1.removeAllPKCEVerifiers)(this.storage, this.storageKey);
       await (0, helpers_1.removeItemAsync)(this.storage, this.storageKey + "-user");
       if (this.userStorage) {
         await (0, helpers_1.removeItemAsync)(this.userStorage, this.storageKey + "-user");
@@ -17574,15 +17704,22 @@ var require_GoTrueClient = __commonJS((exports) => {
       }
     }
     async _getUrlForProvider(url, provider, options) {
+      let redirectTo = options === null || options === undefined ? undefined : options.redirectTo;
+      let codeChallenge = null;
+      let codeChallengeMethod = null;
+      let flowId = null;
+      if (this.flowType === "pkce") {
+        [codeChallenge, codeChallengeMethod, flowId] = await this._getCodeChallengeAndMethod();
+        redirectTo = this._maybeAppendFlowIdToRedirect(redirectTo, flowId);
+      }
       const urlParams = [`provider=${encodeURIComponent(provider)}`];
-      if (options === null || options === undefined ? undefined : options.redirectTo) {
-        urlParams.push(`redirect_to=${encodeURIComponent(options.redirectTo)}`);
+      if (redirectTo) {
+        urlParams.push(`redirect_to=${encodeURIComponent(redirectTo)}`);
       }
       if (options === null || options === undefined ? undefined : options.scopes) {
         urlParams.push(`scopes=${encodeURIComponent(options.scopes)}`);
       }
-      if (this.flowType === "pkce") {
-        const [codeChallenge, codeChallengeMethod] = await (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey);
+      if (codeChallenge != null && codeChallengeMethod != null) {
         const flowParams = new URLSearchParams({
           code_challenge: `${encodeURIComponent(codeChallenge)}`,
           code_challenge_method: `${encodeURIComponent(codeChallengeMethod)}`
@@ -17596,7 +17733,16 @@ var require_GoTrueClient = __commonJS((exports) => {
       if (options === null || options === undefined ? undefined : options.skipBrowserRedirect) {
         urlParams.push(`skip_http_redirect=${options.skipBrowserRedirect}`);
       }
-      return `${url}?${urlParams.join("&")}`;
+      return { url: `${url}?${urlParams.join("&")}`, flowId };
+    }
+    _maybeAppendFlowIdToRedirect(redirectTo, flowId) {
+      if (!redirectTo || !flowId || !this.experimental.appendPkceFlowIdToRedirects) {
+        return redirectTo !== null && redirectTo !== undefined ? redirectTo : undefined;
+      }
+      return (0, helpers_1.appendFlowIdToRedirectTo)(redirectTo, flowId);
+    }
+    async _getCodeChallengeAndMethod(isPasswordRecovery = false) {
+      return (0, helpers_1.getCodeChallengeAndMethod)(this.storage, this.storageKey, isPasswordRecovery, (evictedFlowId) => this._debug("#_getCodeChallengeAndMethod()", "evicted oldest pending PKCE verifier slot", evictedFlowId));
     }
     async _unenroll(params) {
       try {
@@ -18302,7 +18448,7 @@ var require_GoTrueClient = __commonJS((exports) => {
   exports.default = GoTrueClient;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/AuthAdminApi.js
 var require_AuthAdminApi = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -18311,7 +18457,7 @@ var require_AuthAdminApi = __commonJS((exports) => {
   exports.default = AuthAdminApi;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/AuthClient.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/AuthClient.js
 var require_AuthClient = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -18320,7 +18466,7 @@ var require_AuthClient = __commonJS((exports) => {
   exports.default = AuthClient;
 });
 
-// ../../node_modules/.bun/@supabase+auth-js@2.110.7/node_modules/@supabase/auth-js/dist/main/index.js
+// ../../node_modules/.bun/@supabase+auth-js@2.111.0/node_modules/@supabase/auth-js/dist/main/index.js
 var require_main3 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.processLock = exports.lockInternals = exports.NavigatorLockAcquireTimeoutError = exports.navigatorLock = exports.AuthClient = exports.AuthAdminApi = exports.GoTrueClient = exports.GoTrueAdminApi = undefined;
@@ -18350,7 +18496,7 @@ var require_main3 = __commonJS((exports) => {
   } });
 });
 
-// ../../node_modules/.bun/@supabase+supabase-js@2.110.7/node_modules/@supabase/supabase-js/dist/index.mjs
+// ../../node_modules/.bun/@supabase+supabase-js@2.111.0/node_modules/@supabase/supabase-js/dist/index.mjs
 var exports_dist = {};
 __export(exports_dist, {
   createClient: () => createClient,
@@ -18598,7 +18744,7 @@ function validateSupabaseUrl(supabaseUrl) {
   }
 }
 function shouldShowDeprecationWarning() {
-  if (typeof window !== "undefined")
+  if (typeof window !== "undefined" || globalThis["Deno"] !== undefined)
     return false;
   const _process = globalThis["process"];
   if (!_process)
@@ -18611,7 +18757,7 @@ function shouldShowDeprecationWarning() {
     return false;
   return parseInt(versionMatch[1], 10) <= 20;
 }
-var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.110.7", JS_ENV = "", JS_RUNTIME_VERSION, _Deno$version, _process$version, _runtimeMeta, DEFAULT_HEADERS2, DEFAULT_GLOBAL_OPTIONS, DEFAULT_DB_OPTIONS, DEFAULT_AUTH_OPTIONS, DEFAULT_REALTIME_OPTIONS, DEFAULT_TRACE_PROPAGATION_OPTIONS, otelModulePromise = null, OTEL_PKG = "@opentelemetry/api", resolveFetch2 = (customFetch) => {
+var import_functions_js, import_realtime_js, import_auth_js, version2 = "2.111.0", JS_ENV = "", JS_RUNTIME_VERSION, _Deno$version, _process$version, _runtimeMeta, DEFAULT_HEADERS2, DEFAULT_GLOBAL_OPTIONS, DEFAULT_DB_OPTIONS, DEFAULT_AUTH_OPTIONS, DEFAULT_REALTIME_OPTIONS, DEFAULT_TRACE_PROPAGATION_OPTIONS, otelModulePromise = null, OTEL_PKG = "@opentelemetry/api", resolveFetch2 = (customFetch) => {
   if (customFetch)
     return (...args) => customFetch(...args);
   return (...args) => fetch(...args);
@@ -58858,7 +59004,7 @@ var init_v4_mini = __esm(() => {
   init_mini();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
 function isZ4Schema(s) {
   const schema = s;
   return !!schema._zod;
@@ -59665,7 +59811,7 @@ var init_v4 = __esm(() => {
   init_classic();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
 var LATEST_PROTOCOL_VERSION = "2025-11-25", SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task", JSONRPC_VERSION = "2.0", AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams = (value) => TaskAugmentedRequestParamsSchema.safeParse(value).success, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest = (value) => JSONRPCRequestSchema.safeParse(value).success, JSONRPCNotificationSchema, isJSONRPCNotification = (value) => JSONRPCNotificationSchema.safeParse(value).success, JSONRPCResultResponseSchema, isJSONRPCResultResponse = (value) => JSONRPCResultResponseSchema.safeParse(value).success, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse = (value) => JSONRPCErrorResponseSchema.safeParse(value).success, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError;
 var init_types4 = __esm(() => {
   init_v4();
@@ -60493,7 +60639,7 @@ var init_types4 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
 function isTerminal(status) {
   return status === "completed" || status === "failed" || status === "cancelled";
 }
@@ -60711,7 +60857,7 @@ var init_esm = __esm(() => {
   init_zodToJsonSchema();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
 function getMethodLiteral(schema) {
   const shape = getObjectShape(schema);
   const methodSchema = shape?.method;
@@ -60736,7 +60882,7 @@ var init_zod_json_schema_compat = __esm(() => {
   init_esm();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
 class Protocol {
   constructor(_options) {
     this._options = _options;
@@ -64583,7 +64729,7 @@ var require_data = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/fast-uri@3.1.3/node_modules/fast-uri/lib/utils.js
+// ../../node_modules/.bun/fast-uri@3.1.5/node_modules/fast-uri/lib/utils.js
 var require_utils2 = __commonJS((exports, module) => {
   var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
   var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
@@ -64894,7 +65040,7 @@ var require_utils2 = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/fast-uri@3.1.3/node_modules/fast-uri/lib/schemes.js
+// ../../node_modules/.bun/fast-uri@3.1.5/node_modules/fast-uri/lib/schemes.js
 var require_schemes = __commonJS((exports, module) => {
   var { isUUID } = require_utils2();
   var URN_REG = /([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-.:;=@]|%[\da-f]{2})+)/iu;
@@ -65068,7 +65214,7 @@ var require_schemes = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/fast-uri@3.1.3/node_modules/fast-uri/index.js
+// ../../node_modules/.bun/fast-uri@3.1.5/node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS((exports, module) => {
   var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils2();
   var { SCHEMES, getSchemeHandler } = require_schemes();
@@ -65082,7 +65228,12 @@ var require_fast_uri = __commonJS((exports, module) => {
   }
   function resolve4(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-    const resolved = resolveComponent(parse8(baseURI, schemelessOptions), parse8(relativeURI, schemelessOptions), schemelessOptions, true);
+    const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed } = parseWithStatus(baseURI, schemelessOptions);
+    const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed } = parseWithStatus(relativeURI, schemelessOptions);
+    if (baseMalformed || relativeMalformed) {
+      throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
+    }
+    const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
@@ -65208,6 +65359,8 @@ var require_fast_uri = __commonJS((exports, module) => {
     return uriTokens.join("");
   }
   var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
+  var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
+  var AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
   function getParseError(parsed, matches) {
     if (matches[2] !== undefined && parsed.path && parsed.path[0] !== "/") {
       return 'URI path must start with "/" when authority is present.';
@@ -65237,6 +65390,25 @@ var require_fast_uri = __commonJS((exports, module) => {
         uri = "//" + uri;
       }
     }
+    const authorityMatch = uri.match(AUTHORITY_PREFIX);
+    if (authorityMatch !== null && authorityMatch[1].indexOf("\\") !== -1) {
+      parsed.error = "URI authority must not contain a literal backslash.";
+      malformedAuthorityOrPort = true;
+    }
+    const introducerMatch = uri.match(AUTHORITY_INTRODUCER_REGION);
+    if (introducerMatch !== null) {
+      const region = introducerMatch[1];
+      const normalizedRegion = region.replace(/[\t\n\r]/g, "");
+      if (normalizedRegion.length >= 2) {
+        if (normalizedRegion.slice(0, 2) !== "//") {
+          parsed.error = parsed.error || "URI authority must not contain a literal backslash.";
+          malformedAuthorityOrPort = true;
+        } else if (region.length !== normalizedRegion.length) {
+          parsed.error = parsed.error || "URI authority introducer must not contain whitespace.";
+          malformedAuthorityOrPort = true;
+        }
+      }
+    }
     const matches = uri.match(URI_PARSE);
     if (matches) {
       parsed.scheme = matches[1];
@@ -68140,7 +68312,7 @@ var require_dist3 = __commonJS((exports, module) => {
   exports.default = formatsPlugin;
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/validation/ajv-provider.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/validation/ajv-provider.js
 function createDefaultAjvInstance() {
   const ajv = new import_ajv.default({
     strict: false,
@@ -68183,7 +68355,7 @@ var init_ajv_provider = __esm(() => {
   import_ajv_formats = __toESM(require_dist3(), 1);
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/server.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/server.js
 class ExperimentalServerTasks {
   constructor(_server) {
     this._server = _server;
@@ -68264,7 +68436,7 @@ var init_server = __esm(() => {
   init_types4();
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/helpers.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/helpers.js
 function assertToolsCallTaskCapability(requests, method, entityName) {
   if (!requests) {
     throw new Error(`${entityName} does not support task creation (required for ${method})`);
@@ -68299,7 +68471,7 @@ function assertClientRequestTaskCapability(requests, method, entityName) {
   }
 }
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/index.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/index.js
 var Server;
 var init_server2 = __esm(() => {
   init_protocol();
@@ -68354,16 +68526,7 @@ var init_server2 = __esm(() => {
       if (!methodSchema) {
         throw new Error("Schema is missing a method literal");
       }
-      let methodValue;
-      if (isZ4Schema(methodSchema)) {
-        const v4Schema = methodSchema;
-        const v4Def = v4Schema._zod?.def;
-        methodValue = v4Def?.value ?? v4Schema.value;
-      } else {
-        const v3Schema = methodSchema;
-        const legacyDef = v3Schema._def;
-        methodValue = legacyDef?.value ?? v3Schema.value;
-      }
+      const methodValue = getLiteralValue(methodSchema);
       if (typeof methodValue !== "string") {
         throw new Error("Schema method literal must be a string");
       }
@@ -68640,9 +68803,17 @@ var init_server2 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
 class ReadBuffer {
+  constructor(options) {
+    this._maxBufferSize = options?.maxBufferSize ?? STDIO_DEFAULT_MAX_BUFFER_SIZE;
+  }
   append(chunk) {
+    const newSize = (this._buffer?.length ?? 0) + chunk.length;
+    if (newSize > this._maxBufferSize) {
+      this.clear();
+      throw new Error(`ReadBuffer exceeded maximum size of ${this._maxBufferSize} bytes`);
+    }
     this._buffer = this._buffer ? Buffer.concat([this._buffer, chunk]) : chunk;
   }
   readMessage() {
@@ -68669,26 +68840,33 @@ function serializeMessage(message) {
   return JSON.stringify(message) + `
 `;
 }
+var STDIO_DEFAULT_MAX_BUFFER_SIZE;
 var init_stdio = __esm(() => {
   init_types4();
+  STDIO_DEFAULT_MAX_BUFFER_SIZE = 10 * 1024 * 1024;
 });
 
-// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.29.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
+// ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0+759ce506b1ed1a42/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 import process9 from "node:process";
 
 class StdioServerTransport {
-  constructor(_stdin = process9.stdin, _stdout = process9.stdout) {
+  constructor(_stdin = process9.stdin, _stdout = process9.stdout, options) {
     this._stdin = _stdin;
     this._stdout = _stdout;
-    this._readBuffer = new ReadBuffer;
     this._started = false;
     this._ondata = (chunk) => {
-      this._readBuffer.append(chunk);
-      this.processReadBuffer();
+      try {
+        this._readBuffer.append(chunk);
+        this.processReadBuffer();
+      } catch (error3) {
+        this.onerror?.(error3);
+        this.close().catch(() => {});
+      }
     };
     this._onerror = (error3) => {
       this.onerror?.(error3);
     };
+    this._readBuffer = new ReadBuffer({ maxBufferSize: options?.maxBufferSize });
   }
   async start() {
     if (this._started) {
@@ -69270,7 +69448,7 @@ import { homedir as homedir4, platform } from "node:os";
 import { dirname, join as join4 } from "node:path";
 import { spawnSync } from "node:child_process";
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/date.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/date.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69390,7 +69568,7 @@ class TomlDate extends Date {
   }
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/error.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/error.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69460,7 +69638,7 @@ ${codeblock}`, options);
   }
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/primitive.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/primitive.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69640,7 +69818,7 @@ function parseValue(value, toml, ptr, integersAsBigInt) {
   return date;
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/util.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/util.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69715,6 +69893,8 @@ function skipUntil(str, ptr, sep, end, banNewLines = false) {
     let c2 = str[i];
     if (c2 === "#") {
       i = indexOfNewline(str, i);
+      if (i < 0)
+        break;
     } else if (c2 === sep) {
       return i + 1;
     } else if (c2 === end || banNewLines && (c2 === `
@@ -69729,7 +69909,7 @@ function skipUntil(str, ptr, sep, end, banNewLines = false) {
   });
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/extract.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/extract.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69824,7 +70004,7 @@ function extractValue(str, ptr, end, depth, integersAsBigInt) {
   ];
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/struct.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/struct.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -69995,7 +70175,7 @@ function parseArray(str, ptr, depth, integersAsBigInt) {
   return [res, ptr];
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/parse.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/parse.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -70136,7 +70316,7 @@ function parse(toml, { maxDepth = 1000, integersAsBigInt } = {}) {
   return res;
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/stringify.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/stringify.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -70310,7 +70490,7 @@ function stringify(obj2, { maxDepth = 1000, numbersAsFloat = false } = {}) {
   return str;
 }
 
-// ../../node_modules/.bun/smol-toml@1.7.0/node_modules/smol-toml/dist/index.js
+// ../../node_modules/.bun/smol-toml@1.7.1/node_modules/smol-toml/dist/index.js
 /*!
  * Copyright (c) Squirrel Chat et al., All rights reserved.
  * SPDX-License-Identifier: BSD-3-Clause
@@ -70915,6 +71095,14 @@ async function action9(options) {
   }
   println(c.green(`
 ✓ All prerequisites satisfied.`));
+  if (doFunctions && process.platform === "darwin" && !process.env.SUPABASE_ACCESS_TOKEN) {
+    println(c.cyan(`
+  ℹ  Heads-up (macOS): the Supabase CLI will read its login token from the
+` + `     Keychain — expect a password dialog per function (click "Always Allow").
+` + `     To skip the dialogs entirely, put a personal access token
+` + `     (supabase.com/dashboard/account/tokens) in ~/.cerefox/.env:
+` + "       SUPABASE_ACCESS_TOKEN=sbp_…"));
+  }
   let schemaMode = "unknown";
   let pending = [];
   if (doSchema) {
@@ -70957,11 +71145,13 @@ Plan:`));
 ⚠  --dry-run: nothing was deployed.`));
     process.exit(0);
   }
-  const proceed = await confirm(`
+  if (!options.yes) {
+    const proceed = await confirm(`
 Proceed with deployment to Supabase?`, true);
-  if (!proceed) {
-    println(c.dim("Aborted."));
-    process.exit(0);
+    if (!proceed) {
+      println(c.dim("Aborted."));
+      process.exit(0);
+    }
   }
   if (doSchema) {
     if (schemaMode === "fresh") {
@@ -71062,7 +71252,7 @@ Proceed with deployment to Supabase?`, true);
   println(c.dim("Verify with: cerefox doctor"));
 }
 function registerDeployServer(program2) {
-  program2.command("deploy-server").description("Deploy/update the Cerefox server side (schema + RPCs + Edge Functions) on Supabase.").option("--dry-run", "Print the plan + pre-flight without deploying.").option("--schema-only", "Deploy/update only the schema + RPCs (skip Edge Functions).").option("--functions-only", "Deploy only the Edge Functions (skip the schema/RPCs).").option("--project-ref <ref>", "Supabase project ref for Edge Function deploys (default: derived from CEREFOX_SUPABASE_URL).").action(action9);
+  program2.command("deploy-server").description("Deploy/update the Cerefox server side (schema + RPCs + Edge Functions) on Supabase.").option("--dry-run", "Print the plan + pre-flight without deploying.").option("--schema-only", "Deploy/update only the schema + RPCs (skip Edge Functions).").option("--functions-only", "Deploy only the Edge Functions (skip the schema/RPCs).").option("--project-ref <ref>", "Supabase project ref for Edge Function deploys (default: derived from CEREFOX_SUPABASE_URL).").option("--yes", "Non-interactive (skip the deployment confirmation).").action(action9);
 }
 
 // src/cli/commands/document-edit.ts
@@ -73872,7 +74062,7 @@ __export(exports_symbols, {
   error: () => error
 });
 
-// ../../node_modules/.bun/yoctocolors@2.1.2/node_modules/yoctocolors/base.js
+// ../../node_modules/.bun/yoctocolors@2.2.0/node_modules/yoctocolors/base.js
 import tty2 from "node:tty";
 var hasColors = tty2?.WriteStream?.prototype?.hasColors?.() ?? false;
 var format = (open, close) => {
@@ -73905,6 +74095,10 @@ var bold = format(1, 22);
 var dim = format(2, 22);
 var italic = format(3, 23);
 var underline = format(4, 24);
+var underlineDouble = format("4:2", 24);
+var underlineCurly = format("4:3", 24);
+var underlineDotted = format("4:4", 24);
+var underlineDashed = format("4:5", 24);
 var overline = format(53, 55);
 var inverse = format(7, 27);
 var hidden = format(8, 28);
@@ -73941,6 +74135,22 @@ var bgBlueBright = format(104, 49);
 var bgMagentaBright = format(105, 49);
 var bgCyanBright = format(106, 49);
 var bgWhiteBright = format(107, 49);
+var underlineBlack = format("58;5;0", 59);
+var underlineRed = format("58;5;1", 59);
+var underlineGreen = format("58;5;2", 59);
+var underlineYellow = format("58;5;3", 59);
+var underlineBlue = format("58;5;4", 59);
+var underlineMagenta = format("58;5;5", 59);
+var underlineCyan = format("58;5;6", 59);
+var underlineWhite = format("58;5;7", 59);
+var underlineGray = format("58;5;8", 59);
+var underlineRedBright = format("58;5;9", 59);
+var underlineGreenBright = format("58;5;10", 59);
+var underlineYellowBright = format("58;5;11", 59);
+var underlineBlueBright = format("58;5;12", 59);
+var underlineMagentaBright = format("58;5;13", 59);
+var underlineCyanBright = format("58;5;14", 59);
+var underlineWhiteBright = format("58;5;15", 59);
 
 // ../../node_modules/.bun/is-unicode-supported@2.1.0/node_modules/is-unicode-supported/index.js
 import process6 from "node:process";
@@ -74731,7 +74941,7 @@ import { homedir as homedir6 } from "node:os";
 import { join as join9 } from "node:path";
 
 // ../../_shared/ef-meta/index.ts
-var EF_VERSION = "1.0.0-rc.4";
+var EF_VERSION = "1.0.1";
 
 // src/cli/util/checks.ts
 init_config();
@@ -76738,38 +76948,34 @@ async function action22(options) {
     }
     projectId = project.id;
   }
-  let query = client.raw.from("cerefox_documents").select("id, title, source, metadata, created_at, updated_at, review_status, deleted_at").limit(limit);
+  const docCols = "id, title, source, metadata, created_at, updated_at, review_status, deleted_at";
+  const selectCols = projectId ? `${docCols}, cerefox_document_projects!inner(project_id)` : docCols;
+  let query = client.raw.from("cerefox_documents").select(selectCols).limit(limit);
   query = deleted ? query.not("deleted_at", "is", null).order("deleted_at", { ascending: false, nullsFirst: false }) : query.is("deleted_at", null).order("updated_at", { ascending: false, nullsFirst: false });
   if (projectId) {
-    const { data: junctionRows, error: junctionError } = await client.raw.from("cerefox_document_projects").select("document_id").eq("project_id", projectId);
-    if (junctionError) {
-      throw systemError(`Project membership lookup failed: ${junctionError.message}`);
-    }
-    const docIds = (junctionRows ?? []).map((r) => r.document_id);
-    if (docIds.length === 0) {
-      if (options.json) {
-        printJson([]);
-      } else {
-        process.stdout.write(`(no documents in project "${options.project}")
-`);
-      }
-      return;
-    }
-    query = query.in("id", docIds);
+    query = query.eq("cerefox_document_projects.project_id", projectId);
   }
   const { data, error: error2 } = await query;
   if (error2) {
     throw systemError(`Could not list documents: ${error2.message}`);
   }
-  const rows = data ?? [];
+  const rows = (data ?? []).map((row) => {
+    const { cerefox_document_projects: _junction, ...doc } = row;
+    return doc;
+  });
   if (options.json) {
     printJson(rows);
     return;
   }
   if (rows.length === 0) {
-    process.stdout.write(deleted ? `(trash is empty)
+    if (projectId) {
+      process.stdout.write(`(no documents in project "${options.project}")
+`);
+    } else {
+      process.stdout.write(deleted ? `(trash is empty)
 ` : `(no documents)
 `);
+    }
     return;
   }
   printTable(rows.map((doc) => {
@@ -77678,15 +77884,15 @@ init_sync_self_docs();
 // src/cli/commands/web.ts
 init_cli_core();
 
-// ../../node_modules/.bun/@hono+node-server@2.0.10+03fc3fa7f287427f/node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.12+711a9a789551665d/node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
 var X_ALREADY_SENT = "x-hono-already-sent";
 
-// ../../node_modules/.bun/@hono+node-server@2.0.10+03fc3fa7f287427f/node_modules/@hono/node-server/dist/index.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.12+711a9a789551665d/node_modules/@hono/node-server/dist/index.mjs
 import { STATUS_CODES, createServer } from "node:http";
 import { Http2ServerRequest, constants } from "node:http2";
 import { Readable } from "node:stream";
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/helper/websocket/index.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/helper/websocket/index.js
 var WSContext = class {
   #init;
   constructor(init) {
@@ -77734,7 +77940,7 @@ var defineWebSocketHelper = (handler11) => {
   };
 };
 
-// ../../node_modules/.bun/@hono+node-server@2.0.10+03fc3fa7f287427f/node_modules/@hono/node-server/dist/index.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.12+711a9a789551665d/node_modules/@hono/node-server/dist/index.mjs
 var RequestError = class extends Error {
   constructor(message, options) {
     super(message, options);
@@ -77940,8 +78146,10 @@ var normalizeIncomingMethod = (method) => {
     case "GET":
     case "HEAD":
     case "OPTIONS":
+    case "PATCH":
     case "POST":
     case "PUT":
+    case "QUERY":
       return method;
   }
   const upper = method.toUpperCase();
@@ -78280,16 +78488,15 @@ var Response$1 = class Response$12 {
   constructor(body, init) {
     let headers;
     this.#body = body;
-    if (init instanceof Response$12) {
+    if (init instanceof GlobalResponse) {
       const cachedGlobalResponse = init[responseCache];
       if (cachedGlobalResponse) {
         this.#init = cachedGlobalResponse;
         this[getResponseCache]();
         return;
-      } else {
-        this.#init = init.#init;
-        headers = new Headers(init.headers);
       }
+      this.#init = init instanceof Response$12 ? init.#init : init;
+      headers = new Headers(init.headers);
     } else
       this.#init = init;
     if (body == null || typeof body === "string" || typeof body?.getReader !== "undefined" || body instanceof Blob || body instanceof Uint8Array)
@@ -79007,7 +79214,7 @@ var serve = (options, listeningListener) => {
   return server;
 };
 
-// ../../node_modules/.bun/@hono+node-server@2.0.10+03fc3fa7f287427f/node_modules/@hono/node-server/dist/utils/stream.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.12+711a9a789551665d/node_modules/@hono/node-server/dist/utils/stream.mjs
 import { Readable as Readable2 } from "node:stream";
 import { versions as versions2 } from "node:process";
 var pr54206Applied = () => {
@@ -79073,7 +79280,7 @@ var createStreamBody = (stream, useNativeReadableToWeb = useReadableToWeb) => {
   });
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/utils/mime.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/mime.js
 var getMimeType = (filename, mimes = baseMimes) => {
   const regexp = /\.([a-zA-Z0-9]+?)$/;
   const match = filename.match(regexp);
@@ -79142,7 +79349,7 @@ var _baseMimes = {
 };
 var baseMimes = _baseMimes;
 
-// ../../node_modules/.bun/@hono+node-server@2.0.10+03fc3fa7f287427f/node_modules/@hono/node-server/dist/serve-static.mjs
+// ../../node_modules/.bun/@hono+node-server@2.0.12+711a9a789551665d/node_modules/@hono/node-server/dist/serve-static.mjs
 import { createReadStream, existsSync as existsSync15, statSync as statSync5 } from "node:fs";
 import { join as join13 } from "node:path";
 var COMPRESSIBLE_CONTENT_TYPE_REGEX = /^\s*(?:text\/[^;\s]+|application\/(?:javascript|json|xml|xml-dtd|ecmascript|dart|postscript|rtf|tar|toml|vnd\.dart|vnd\.ms-fontobject|vnd\.ms-opentype|wasm|x-httpd-php|x-javascript|x-ns-proxy-autoconfig|x-sh|x-tar|x-virtualbox-hdd|x-virtualbox-ova|x-virtualbox-ovf|x-virtualbox-vbox|x-virtualbox-vdi|x-virtualbox-vhd|x-virtualbox-vmdk|x-www-form-urlencoded)|font\/(?:otf|ttf)|image\/(?:bmp|vnd\.adobe\.photoshop|vnd\.microsoft\.icon|vnd\.ms-dds|x-icon|x-ms-bmp)|message\/rfc822|model\/gltf-binary|x-shader\/x-fragment|x-shader\/x-vertex|[^;\s]+?\+(?:json|text|xml|yaml))(?:[;\s]|$)/i;
@@ -79304,7 +79511,7 @@ import { existsSync as existsSync19 } from "node:fs";
 import { readFileSync as readFileSync17 } from "node:fs";
 import { join as join17 } from "node:path";
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/compose.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/compose.js
 var compose = (middleware, onError, onNotFound) => {
   return (context, next) => {
     let index = -1;
@@ -79348,10 +79555,10 @@ var compose = (middleware, onError, onNotFound) => {
   };
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/request/constants.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = /* @__PURE__ */ Symbol();
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/utils/buffer.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/buffer.js
 var bufferToFormData = (arrayBuffer, contentType2) => {
   const response = new Response(arrayBuffer, {
     headers: {
@@ -79361,7 +79568,7 @@ var bufferToFormData = (arrayBuffer, contentType2) => {
   return response.formData();
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/utils/body.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/body.js
 var isRawRequest = (request) => ("headers" in request);
 var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) => {
   const { all = false, dot = false } = options;
@@ -79374,6 +79581,9 @@ var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) =
   return {};
 };
 async function parseFormData(request, options) {
+  if (!isRawRequest(request) && request.bodyCache.formData) {
+    return convertFormDataToBodyData(await request.bodyCache.formData, options);
+  }
   const headers = isRawRequest(request) ? request.headers : request.raw.headers;
   const arrayBuffer = await request.arrayBuffer();
   const formDataPromise = bufferToFormData(arrayBuffer, headers.get("Content-Type") || "");
@@ -79440,7 +79650,7 @@ var handleParsingNestedValues = (form, key, value) => {
   });
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/utils/url.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/url.js
 var splitPath = (path) => {
   const paths = path.split("/");
   if (paths[0] === "") {
@@ -79597,7 +79807,7 @@ var _getQueryParam = (url, key, multiple) => {
       return;
     }
   }
-  const results = {};
+  const results = /* @__PURE__ */ Object.create(null);
   encoded ??= /[%+]/.test(url);
   let keyIndex = url.indexOf("?", 8);
   while (keyIndex !== -1) {
@@ -79640,7 +79850,7 @@ var getQueryParams = (url, key) => {
 };
 var decodeURIComponent_ = decodeURIComponent;
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/request.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/request.js
 var tryDecodeURIComponent = (str) => tryDecode2(str, decodeURIComponent_);
 var HonoRequest = class {
   raw;
@@ -79687,7 +79897,7 @@ var HonoRequest = class {
     if (name) {
       return this.raw.headers.get(name) ?? undefined;
     }
-    const headerData = {};
+    const headerData = /* @__PURE__ */ Object.create(null);
     this.raw.headers.forEach((value, key) => {
       headerData[key] = value;
     });
@@ -79754,7 +79964,7 @@ var HonoRequest = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/utils/html.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/html.js
 var HtmlEscapedCallbackPhase = {
   Stringify: 1,
   BeforeStream: 2,
@@ -79792,7 +80002,7 @@ var resolveCallback = async (str, phase, preserveCallbacks, context, buffer2) =>
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/context.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/context.js
 var TEXT_PLAIN = "text/plain; charset=UTF-8";
 var setDefaultContentType = (contentType2, headers) => {
   return {
@@ -79959,7 +80169,7 @@ var Context = class {
   };
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/router.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router.js
 var METHOD_NAME_ALL = "ALL";
 var METHOD_NAME_ALL_LOWERCASE = "all";
 var METHODS = ["get", "post", "put", "delete", "options", "patch"];
@@ -79967,10 +80177,10 @@ var MESSAGE_MATCHER_IS_ALREADY_BUILT = "Can not add a route since the matcher is
 var UnsupportedPathError = class extends Error {
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/utils/constants.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/constants.js
 var COMPOSED_HANDLER = "__COMPOSED_HANDLER";
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/hono-base.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/hono-base.js
 var notFoundHandler = (c2) => {
   return c2.text("404 Not Found", 404);
 };
@@ -80194,7 +80404,7 @@ var Hono = class _Hono {
   };
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/router/reg-exp-router/matcher.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/reg-exp-router/matcher.js
 var emptyParam = [];
 function match(method, path) {
   const matchers = this.buildAllMatchers();
@@ -80215,7 +80425,7 @@ function match(method, path) {
   return match2(method, path);
 }
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/router/reg-exp-router/node.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/reg-exp-router/node.js
 var LABEL_REG_EXP_STR = "[^/]+";
 var ONLY_WILDCARD_REG_EXP_STR = ".*";
 var TAIL_WILDCARD_REG_EXP_STR = "(?:|/.*)";
@@ -80319,7 +80529,7 @@ var Node = class _Node {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/router/reg-exp-router/trie.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/reg-exp-router/trie.js
 var Trie = class {
   #context = { varIndex: 0 };
   #root = new Node;
@@ -80375,7 +80585,7 @@ var Trie = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/router/reg-exp-router/router.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/reg-exp-router/router.js
 var nullMatcher = [/^$/, [], /* @__PURE__ */ Object.create(null)];
 var wildcardRegExpCache = /* @__PURE__ */ Object.create(null);
 function buildWildcardRegExp(path) {
@@ -80540,7 +80750,7 @@ var RegExpRouter = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/router/reg-exp-router/prepared-router.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/reg-exp-router/prepared-router.js
 var PreparedRegExpRouter = class {
   name = "PreparedRegExpRouter";
   #matchers;
@@ -80612,7 +80822,7 @@ var PreparedRegExpRouter = class {
   match = match;
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/router/smart-router/router.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/smart-router/router.js
 var SmartRouter = class {
   name = "SmartRouter";
   #routers = [];
@@ -80667,7 +80877,7 @@ var SmartRouter = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/router/trie-router/node.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/trie-router/node.js
 var emptyParams = /* @__PURE__ */ Object.create(null);
 var hasChildren = (children) => {
   for (const _ in children) {
@@ -80839,7 +81049,7 @@ var Node2 = class _Node2 {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/router/trie-router/router.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/router/trie-router/router.js
 var TrieRouter = class {
   name = "TrieRouter";
   #node;
@@ -80861,7 +81071,7 @@ var TrieRouter = class {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/hono.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/hono.js
 var Hono2 = class extends Hono {
   constructor(options = {}) {
     super(options);
@@ -80871,7 +81081,7 @@ var Hono2 = class extends Hono {
   }
 };
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/utils/color.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/utils/color.js
 function getColorEnabled() {
   const { process: process10, Deno: Deno2 } = globalThis;
   const isNoColor = typeof Deno2?.noColor === "boolean" ? Deno2.noColor : process10 !== undefined ? "NO_COLOR" in process10?.env : false;
@@ -80890,7 +81100,7 @@ async function getColorEnabledAsync() {
   return !isNoColor;
 }
 
-// ../../node_modules/.bun/hono@4.12.30/node_modules/hono/dist/middleware/logger/index.js
+// ../../node_modules/.bun/hono@4.12.33/node_modules/hono/dist/middleware/logger/index.js
 var humanize = (times) => {
   const [delimiter, separator] = [",", "."];
   const orderTimes = times.map((v) => v.replace(/(\d)(?=(\d\d\d)+(?!\d))/g, "$1" + delimiter));