@docbox-nz/hapi-gateway 0.3.0 → 0.3.1

package/dist/index.node.esm.js

@@ -40,7 +40,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	value: mod,
 	enumerable: true
 }) : target, mod));
-var __require = /* @__PURE__ */ createRequire(import.meta.url);
+var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();
 //#endregion
 //#region node_modules/.pnpm/@hapi+hoek@11.0.7/node_modules/@hapi/hoek/lib/assertError.js
 var require_assertError = /* @__PURE__ */ __commonJSMin(((exports, module) => {
@@ -71,9 +71,10 @@ var require_assert = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const assert = module.exports = function(condition, ...args) {
 		if (condition) return;
 		if (args.length === 1 && args[0] instanceof Error) throw args[0];
-		throw new AssertError(args.filter((arg) => arg !== "").map((arg) => {
+		const msgs = args.filter((arg) => arg !== "").map((arg) => {
 			return typeof arg === "string" ? arg : arg instanceof Error ? arg.message : Stringify(arg);
-		}).join(" "), assert);
+		});
+		throw new AssertError(msgs.join(" "), assert);
 	};
 }));
 //#endregion
@@ -131,7 +132,7 @@ var require_types = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		weakMap: WeakMap.prototype,
 		weakSet: WeakSet.prototype
 	};
-	internals.typeMap = new Map([
+	internals.typeMap = /* @__PURE__ */ new Map([
 		["[object Error]", exports.error],
 		["[object Map]", exports.map],
 		["[object Promise]", exports.promise],
@@ -164,7 +165,7 @@ var require_clone = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const Types = require_types();
 	const Utils = require_utils();
 	const internals = {
-		needsProtoHack: new Set([
+		needsProtoHack: /* @__PURE__ */ new Set([
 			Types.set,
 			Types.map,
 			Types.weakSet,
@@ -308,8 +309,9 @@ var require_applyToDefaults = /* @__PURE__ */ __commonJSMin(((exports, module) =
 		if (options.shallow) return internals.applyToDefaultsWithShallow(defaults, source, options);
 		const copy = Clone(defaults);
 		if (source === true) return copy;
+		const nullOverride = options.nullOverride !== void 0 ? options.nullOverride : false;
 		return Merge(copy, source, {
-			nullOverride: options.nullOverride !== void 0 ? options.nullOverride : false,
+			nullOverride,
 			mergeArrays: false
 		});
 	};
@@ -327,8 +329,9 @@ var require_applyToDefaults = /* @__PURE__ */ __commonJSMin(((exports, module) =
 		const copy = Clone(defaults, {}, seen);
 		if (!merge) return copy;
 		for (const key of merge) internals.reachCopy(copy, source, key);
+		const nullOverride = options.nullOverride !== void 0 ? options.nullOverride : false;
 		return Merge(copy, source, {
-			nullOverride: options.nullOverride !== void 0 ? options.nullOverride : false,
+			nullOverride,
 			mergeArrays: false
 		});
 	};
@@ -689,7 +692,7 @@ var require_escapeHtml = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	internals.isSafe = function(charCode) {
 		return internals.safeCharCodes.has(charCode);
 	};
-	internals.namedHtml = new Map([
+	internals.namedHtml = /* @__PURE__ */ new Map([
 		[38, "&"],
 		[60, "<"],
 		[62, ">"],
@@ -718,7 +721,7 @@ var require_escapeJson = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	internals.escape = function(char) {
 		return internals.replacements.get(char);
 	};
-	internals.replacements = new Map([
+	internals.replacements = /* @__PURE__ */ new Map([
 		["<", "\\u003c"],
 		[">", "\\u003e"],
 		["&", "\\u0026"],
@@ -838,10 +841,10 @@ var require_lib$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 	exports.wait = require_wait();
 }));
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/bind.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/bind.js
 var import_lib = (/* @__PURE__ */ __commonJSMin(((exports) => {
 	const Hoek = require_lib$1();
-	const internals = { codes: new Map([
+	const internals = { codes: /* @__PURE__ */ new Map([
 		[100, "Continue"],
 		[101, "Switching Protocols"],
 		[102, "Processing"],
@@ -1214,10 +1217,46 @@ function bind(fn, thisArg) {
 	};
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/utils.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/utils.js
 const { toString } = Object.prototype;
 const { getPrototypeOf } = Object;
 const { iterator, toStringTag } = Symbol;
+const hasOwnProperty = (({ hasOwnProperty }) => (obj, prop) => hasOwnProperty.call(obj, prop))(Object.prototype);
+/**
+* Walk the prototype chain (excluding the shared Object.prototype) looking for
+* an own `prop`. This distinguishes genuine own/inherited members — including
+* class accessors and template prototypes — from members injected via
+* Object.prototype pollution (e.g. `Object.prototype.username = '...'`), which
+* live on Object.prototype itself and are therefore never matched.
+*
+* @param {*} thing The value whose chain to inspect
+* @param {string|symbol} prop The property key to look for
+*
+* @returns {boolean} True when `prop` is owned below Object.prototype
+*/
+const hasOwnInPrototypeChain = (thing, prop) => {
+	let obj = thing;
+	const seen = [];
+	while (obj != null && obj !== Object.prototype) {
+		if (seen.indexOf(obj) !== -1) return false;
+		seen.push(obj);
+		if (hasOwnProperty(obj, prop)) return true;
+		obj = getPrototypeOf(obj);
+	}
+	return false;
+};
+/**
+* Read `obj[prop]` only when it is safe from Object.prototype pollution. Own
+* properties and members inherited from a non-Object.prototype source (a class
+* instance or template object) are honored; a value reachable only through a
+* polluted Object.prototype is ignored and `undefined` is returned.
+*
+* @param {*} obj The source object
+* @param {string|symbol} prop The property key to read
+*
+* @returns {*} The resolved value, or undefined when unsafe/absent
+*/
+const getSafeProp = (obj, prop) => obj != null && hasOwnInPrototypeChain(obj, prop) ? obj[prop] : void 0;
 const kindOf = ((cache) => (thing) => {
 	const str = toString.call(thing);
 	return cache[str] || (cache[str] = str.slice(8, -1).toLowerCase());
@@ -1320,9 +1359,9 @@ const isBoolean = (thing) => thing === true || thing === false;
 * @returns {boolean} True if value is a plain Object, otherwise false
 */
 const isPlainObject = (val) => {
-	if (kindOf(val) !== "object") return false;
+	if (!isObject(val)) return false;
 	const prototype = getPrototypeOf(val);
-	return (prototype === null || prototype === Object.prototype || Object.getPrototypeOf(prototype) === null) && !(toStringTag in val) && !(iterator in val);
+	return (prototype === null || prototype === Object.prototype || getPrototypeOf(prototype) === null) && !hasOwnInPrototypeChain(val, toStringTag) && !hasOwnInPrototypeChain(val, iterator);
 };
 /**
 * Determine if a value is an empty object (safely handles Buffers)
@@ -1532,14 +1571,24 @@ function merge(...objs) {
 	const result = {};
 	const assignValue = (val, key) => {
 		if (key === "__proto__" || key === "constructor" || key === "prototype") return;
-		const targetKey = caseless && findKey(result, key) || key;
+		const targetKey = caseless && typeof key === "string" && findKey(result, key) || key;
 		const existing = hasOwnProperty(result, targetKey) ? result[targetKey] : void 0;
 		if (isPlainObject(existing) && isPlainObject(val)) result[targetKey] = merge(existing, val);
 		else if (isPlainObject(val)) result[targetKey] = merge({}, val);
 		else if (isArray(val)) result[targetKey] = val.slice();
 		else if (!skipUndefined || !isUndefined(val)) result[targetKey] = val;
 	};
-	for (let i = 0, l = objs.length; i < l; i++) objs[i] && forEach(objs[i], assignValue);
+	for (let i = 0, l = objs.length; i < l; i++) {
+		const source = objs[i];
+		if (!source || isBuffer(source)) continue;
+		forEach(source, assignValue);
+		if (typeof source !== "object" || isArray(source)) continue;
+		const symbols = Object.getOwnPropertySymbols(source);
+		for (let j = 0; j < symbols.length; j++) {
+			const symbol = symbols[j];
+			if (propertyIsEnumerable.call(source, symbol)) assignValue(source[symbol], symbol);
+		}
+	}
 	return result;
 }
 /**
@@ -1718,7 +1767,7 @@ const toCamelCase = (str) => {
 		return p1.toUpperCase() + p2;
 	});
 };
-const hasOwnProperty = (({ hasOwnProperty }) => (obj, prop) => hasOwnProperty.call(obj, prop))(Object.prototype);
+const { propertyIsEnumerable } = Object.prototype;
 /**
 * Determine if a value is a RegExp object
 *
@@ -1860,6 +1909,18 @@ const _setImmediate = ((setImmediateSupported, postMessageSupported) => {
 */
 const asap = typeof queueMicrotask !== "undefined" ? queueMicrotask.bind(_global) : typeof process !== "undefined" && process.nextTick || _setImmediate;
 const isIterable = (thing) => thing != null && isFunction$1(thing[iterator]);
+/**
+* Determine if a value is iterable via an iterator that is NOT sourced solely
+* from a polluted Object.prototype. Use this instead of `isIterable` whenever
+* the iterable comes from untrusted input (e.g. user-supplied header sources),
+* so `Object.prototype[Symbol.iterator] = ...` cannot turn an ordinary object
+* into an attacker-controlled entries iterator.
+*
+* @param {*} thing The value to test
+*
+* @returns {boolean} True if value has a non-polluted iterator
+*/
+const isSafeIterable = (thing) => thing != null && hasOwnInPrototypeChain(thing, iterator) && isIterable(thing);
 var utils_default = {
 	isArray,
 	isArrayBuffer,
@@ -1904,6 +1965,8 @@ var utils_default = {
 	isHTMLForm,
 	hasOwnProperty,
 	hasOwnProp: hasOwnProperty,
+	hasOwnInPrototypeChain,
+	getSafeProp,
 	reduceDescriptors,
 	freezeMethods,
 	toObjectSet,
@@ -1919,10 +1982,11 @@ var utils_default = {
 	isThenable,
 	setImmediate: _setImmediate,
 	asap,
-	isIterable
+	isIterable,
+	isSafeIterable
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/parseHeaders.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/parseHeaders.js
 const ignoreDuplicateOf = utils_default.toObjectSet([
 	"age",
 	"authorization",
@@ -1973,7 +2037,7 @@ var parseHeaders_default = (rawHeaders) => {
 	return parsed;
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/sanitizeHeaderValue.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/sanitizeHeaderValue.js
 function trimSPorHTAB(str) {
 	let start = 0;
 	let end = str.length;
@@ -2005,7 +2069,7 @@ function toByteStringHeaderObject(headers) {
 	return byteStringHeaders;
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/core/AxiosHeaders.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/core/AxiosHeaders.js
 const $internals = Symbol("internals");
 function normalizeHeader(header) {
 	return header && String(header).trim().toLowerCase();
@@ -2058,18 +2122,22 @@ var AxiosHeaders$1 = class {
 		const self = this;
 		function setHeader(_value, _header, _rewrite) {
 			const lHeader = normalizeHeader(_header);
-			if (!lHeader) throw new Error("header name must be a non-empty string");
+			if (!lHeader) return;
 			const key = utils_default.findKey(self, lHeader);
 			if (!key || self[key] === void 0 || _rewrite === true || _rewrite === void 0 && self[key] !== false) self[key || _header] = normalizeValue(_value);
 		}
 		const setHeaders = (headers, _rewrite) => utils_default.forEach(headers, (_value, _header) => setHeader(_value, _header, _rewrite));
 		if (utils_default.isPlainObject(header) || header instanceof this.constructor) setHeaders(header, valueOrRewrite);
 		else if (utils_default.isString(header) && (header = header.trim()) && !isValidHeaderName(header)) setHeaders(parseHeaders_default(header), valueOrRewrite);
-		else if (utils_default.isObject(header) && utils_default.isIterable(header)) {
-			let obj = {}, dest, key;
+		else if (utils_default.isObject(header) && utils_default.isSafeIterable(header)) {
+			let obj = Object.create(null), dest, key;
 			for (const entry of header) {
-				if (!utils_default.isArray(entry)) throw TypeError("Object iterator must return a key-value pair");
-				obj[key = entry[0]] = (dest = obj[key]) ? utils_default.isArray(dest) ? [...dest, entry[1]] : [dest, entry[1]] : entry[1];
+				if (!utils_default.isArray(entry)) throw new TypeError("Object iterator must return a key-value pair");
+				key = entry[0];
+				if (utils_default.hasOwnProp(obj, key)) {
+					dest = obj[key];
+					obj[key] = utils_default.isArray(dest) ? [...dest, entry[1]] : [dest, entry[1]];
+				} else obj[key] = entry[1];
 			}
 			setHeaders(obj, valueOrRewrite);
 		} else header != null && setHeader(valueOrRewrite, header, rewrite);
@@ -2207,7 +2275,7 @@ utils_default.reduceDescriptors(AxiosHeaders$1.prototype, ({ value }, key) => {
 });
 utils_default.freezeMethods(AxiosHeaders$1);
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/core/AxiosError.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/core/AxiosError.js
 const REDACTED = "[REDACTED ****]";
 function hasOwnOrPrototypeToJSON(source) {
 	if (utils_default.hasOwnProp(source, "toJSON")) return true;
@@ -2253,7 +2321,13 @@ function redactConfig(config, redactKeys) {
 var AxiosError$1 = class AxiosError$1 extends Error {
 	static from(error, code, config, request, response, customProps) {
 		const axiosError = new AxiosError$1(error.message, code || error.code, config, request, response);
-		axiosError.cause = error;
+		Object.defineProperty(axiosError, "cause", {
+			__proto__: null,
+			value: error,
+			writable: true,
+			enumerable: false,
+			configurable: true
+		});
 		axiosError.name = error.name;
 		if (error.status != null && axiosError.status == null) axiosError.status = error.status;
 		customProps && Object.assign(axiosError, customProps);
@@ -9984,7 +10058,7 @@ var require_asynckit = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 }));
 //#endregion
-//#region node_modules/.pnpm/es-object-atoms@1.1.1/node_modules/es-object-atoms/index.js
+//#region node_modules/.pnpm/es-object-atoms@1.1.2/node_modules/es-object-atoms/index.js
 var require_es_object_atoms = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	/** @type {import('.')} */
 	module.exports = Object;
@@ -10304,7 +10378,7 @@ var require_get_proto = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	} : null;
 }));
 //#endregion
-//#region node_modules/.pnpm/hasown@2.0.3/node_modules/hasown/index.js
+//#region node_modules/.pnpm/hasown@2.0.4/node_modules/hasown/index.js
 var require_hasown = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var call = Function.prototype.call;
 	var $hasOwn = Object.prototype.hasOwnProperty;
@@ -10669,7 +10743,7 @@ var require_es_set_tostringtag = /* @__PURE__ */ __commonJSMin(((exports, module
 	};
 }));
 //#endregion
-//#region node_modules/.pnpm/form-data@4.0.5/node_modules/form-data/lib/populate.js
+//#region node_modules/.pnpm/form-data@4.0.6/node_modules/form-data/lib/populate.js
 var require_populate = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = function(dst, src) {
 		Object.keys(src).forEach(function(prop) {
@@ -10694,6 +10768,17 @@ var FormData_default = (/* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin((
 	var hasOwn = require_hasown();
 	var populate = require_populate();
 	/**
+	* Escape CR, LF, and `"` in a multipart `name`/`filename` parameter, so a field
+	* name or filename can not break out of its header line to inject headers or
+	* smuggle additional parts. Matches the WHATWG HTML multipart/form-data encoding.
+	*
+	* @param {string} str - the parameter value to escape
+	* @returns {string} the escaped value
+	*/
+	function escapeHeaderParam(str) {
+		return String(str).replace(/\r/g, "%0D").replace(/\n/g, "%0A").replace(/"/g, "%22");
+	}
+	/**
 	* Create readable "multipart/form-data" streams.
 	* Can be used to submit forms
 	* and file uploads to other web applications.
@@ -10763,7 +10848,7 @@ var FormData_default = (/* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin((
 		var contentType = this._getContentType(value, options);
 		var contents = "";
 		var headers = {
-			"Content-Disposition": ["form-data", "name=\"" + field + "\""].concat(contentDisposition || []),
+			"Content-Disposition": ["form-data", "name=\"" + escapeHeaderParam(field) + "\""].concat(contentDisposition || []),
 			"Content-Type": [].concat(contentType || [])
 		};
 		if (typeof options.header === "object") populate(headers, options.header);
@@ -10781,7 +10866,7 @@ var FormData_default = (/* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin((
 		if (typeof options.filepath === "string") filename = path.normalize(options.filepath).replace(/\\/g, "/");
 		else if (options.filename || value && (value.name || value.path)) filename = path.basename(options.filename || value && (value.name || value.path));
 		else if (value && value.readable && hasOwn(value, "httpVersion")) filename = path.basename(value.client._httpMessage.path || "");
-		if (filename) return "filename=\"" + filename + "\"";
+		if (filename) return "filename=\"" + escapeHeaderParam(filename) + "\"";
 	};
 	FormData.prototype._getContentType = function(value, options) {
 		var contentType = options.contentType;
@@ -10911,8 +10996,6 @@ var FormData_default = (/* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin((
 	setToStringTag(FormData.prototype, "FormData");
 	module.exports = FormData;
 })))(), 1)).default;
-//#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/toFormData.js
 /**
 * Determines if the given thing is a array or js object.
 *
@@ -11001,15 +11084,34 @@ function toFormData$1(obj, formData, options) {
 	const _Blob = options.Blob || typeof Blob !== "undefined" && Blob;
 	const maxDepth = options.maxDepth === void 0 ? 100 : options.maxDepth;
 	const useBlob = _Blob && utils_default.isSpecCompliantForm(formData);
+	const stack = [];
 	if (!utils_default.isFunction(visitor)) throw new TypeError("visitor must be a function");
 	function convertValue(value) {
 		if (value === null) return "";
 		if (utils_default.isDate(value)) return value.toISOString();
 		if (utils_default.isBoolean(value)) return value.toString();
 		if (!useBlob && utils_default.isBlob(value)) throw new AxiosError$1("Blob is not supported. Use a Buffer instead.");
-		if (utils_default.isArrayBuffer(value) || utils_default.isTypedArray(value)) return useBlob && typeof Blob === "function" ? new Blob([value]) : Buffer.from(value);
+		if (utils_default.isArrayBuffer(value) || utils_default.isTypedArray(value)) {
+			if (useBlob && typeof _Blob === "function") return new _Blob([value]);
+			if (typeof Buffer !== "undefined") return Buffer.from(value);
+			throw new AxiosError$1("Blob is not supported. Use a Buffer instead.", AxiosError$1.ERR_NOT_SUPPORT);
+		}
 		return value;
 	}
+	function throwIfMaxDepthExceeded(depth) {
+		if (depth > maxDepth) throw new AxiosError$1("Object is too deeply nested (" + depth + " levels). Max depth: " + maxDepth, AxiosError$1.ERR_FORM_DATA_DEPTH_EXCEEDED);
+	}
+	function stringifyWithDepthLimit(value, depth) {
+		if (maxDepth === Infinity) return JSON.stringify(value);
+		const ancestors = [];
+		return JSON.stringify(value, function limitDepth(_key, currentValue) {
+			if (!utils_default.isObject(currentValue)) return currentValue;
+			while (ancestors.length && ancestors[ancestors.length - 1] !== this) ancestors.pop();
+			ancestors.push(currentValue);
+			throwIfMaxDepthExceeded(depth + ancestors.length - 1);
+			return currentValue;
+		});
+	}
 	/**
 	* Default visitor.
 	*
@@ -11029,7 +11131,7 @@ function toFormData$1(obj, formData, options) {
 		if (value && !path && typeof value === "object") {
 			if (utils_default.endsWith(key, "{}")) {
 				key = metaTokens ? key : key.slice(0, -2);
-				value = JSON.stringify(value);
+				value = stringifyWithDepthLimit(value, 1);
 			} else if (utils_default.isArray(value) && isFlatArray(value) || (utils_default.isFileList(value) || utils_default.endsWith(key, "[]")) && (arr = utils_default.toArray(value))) {
 				key = removeBrackets(key);
 				arr.forEach(function each(el, index) {
@@ -11042,7 +11144,6 @@ function toFormData$1(obj, formData, options) {
 		formData.append(renderKey(path, key, dots), convertValue(value));
 		return false;
 	}
-	const stack = [];
 	const exposedHelpers = Object.assign(predicates, {
 		defaultVisitor,
 		convertValue,
@@ -11050,8 +11151,8 @@ function toFormData$1(obj, formData, options) {
 	});
 	function build(value, path, depth = 0) {
 		if (utils_default.isUndefined(value)) return;
-		if (depth > maxDepth) throw new AxiosError$1("Object is too deeply nested (" + depth + " levels). Max depth: " + maxDepth, AxiosError$1.ERR_FORM_DATA_DEPTH_EXCEEDED);
-		if (stack.indexOf(value) !== -1) throw Error("Circular reference detected in " + path.join("."));
+		throwIfMaxDepthExceeded(depth);
+		if (stack.indexOf(value) !== -1) throw new Error("Circular reference detected in " + path.join("."));
 		stack.push(value);
 		utils_default.forEach(value, function each(el, key) {
 			if ((!(utils_default.isUndefined(el) || el === null) && visitor.call(formData, el, utils_default.isString(key) ? key.trim() : key, path, exposedHelpers)) === true) build(el, path ? path.concat(key) : [key], depth + 1);
@@ -11063,7 +11164,7 @@ function toFormData$1(obj, formData, options) {
 	return formData;
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/AxiosURLSearchParams.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/AxiosURLSearchParams.js
 /**
 * It encodes a string by replacing all characters that are not in the unreserved set with
 * their percent-encoded equivalents
@@ -11102,15 +11203,13 @@ prototype.append = function append(name, value) {
 	this._pairs.push([name, value]);
 };
 prototype.toString = function toString(encoder) {
-	const _encode = encoder ? function(value) {
-		return encoder.call(this, value, encode$1);
-	} : encode$1;
+	const _encode = encoder ? (value) => encoder.call(this, value, encode$1) : encode$1;
 	return this._pairs.map(function each(pair) {
 		return _encode(pair[0]) + "=" + _encode(pair[1]);
 	}, "").join("&");
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/buildURL.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/buildURL.js
 /**
 * It replaces URL-encoded forms of `:`, `$`, `,`, and spaces with
 * their plain counterparts (`:`, `$`, `,`, `+`).
@@ -11133,9 +11232,10 @@ function encode(val) {
 */
 function buildURL(url, params, options) {
 	if (!params) return url;
-	const _encode = options && options.encode || encode;
+	url = url || "";
 	const _options = utils_default.isFunction(options) ? { serialize: options } : options;
-	const serializeFn = _options && _options.serialize;
+	const _encode = utils_default.getSafeProp(_options, "encode") || encode;
+	const serializeFn = utils_default.getSafeProp(_options, "serialize");
 	let serializedParams;
 	if (serializeFn) serializedParams = serializeFn(params, _options);
 	else serializedParams = utils_default.isURLSearchParams(params) ? params.toString() : new AxiosURLSearchParams(params, _options).toString(_encode);
@@ -11147,7 +11247,7 @@ function buildURL(url, params, options) {
 	return url;
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/core/InterceptorManager.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/core/InterceptorManager.js
 var InterceptorManager = class {
 	constructor() {
 		this.handlers = [];
@@ -11205,18 +11305,20 @@ var InterceptorManager = class {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/defaults/transitional.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/defaults/transitional.js
 var transitional_default = {
 	silentJSONParsing: true,
 	forcedJSONParsing: true,
 	clarifyTimeoutError: false,
-	legacyInterceptorReqResOrdering: true
+	legacyInterceptorReqResOrdering: true,
+	advertiseZstdAcceptEncoding: false,
+	validateStatusUndefinedResolves: true
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/platform/node/classes/URLSearchParams.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/platform/node/classes/URLSearchParams.js
 var URLSearchParams_default = url.URLSearchParams;
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/platform/node/index.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/platform/node/index.js
 const ALPHA = "abcdefghijklmnopqrstuvwxyz";
 const DIGIT = "0123456789";
 const ALPHABET = {
@@ -11249,7 +11351,7 @@ var node_default = {
 	]
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/platform/common/utils.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/platform/common/utils.js
 var utils_exports = /* @__PURE__ */ __exportAll({
 	hasBrowserEnv: () => hasBrowserEnv,
 	hasStandardBrowserEnv: () => hasStandardBrowserEnv,
@@ -11290,16 +11392,18 @@ const hasStandardBrowserEnv = hasBrowserEnv && (!_navigator || [
 * `typeof window !== 'undefined' && typeof document !== 'undefined'`.
 * This leads to a problem when axios post `FormData` in webWorker
 */
-const hasStandardBrowserWebWorkerEnv = typeof WorkerGlobalScope !== "undefined" && self instanceof WorkerGlobalScope && typeof self.importScripts === "function";
+const hasStandardBrowserWebWorkerEnv = (() => {
+	return typeof WorkerGlobalScope !== "undefined" && self instanceof WorkerGlobalScope && typeof self.importScripts === "function";
+})();
 const origin = hasBrowserEnv && window.location.href || "http://localhost";
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/platform/index.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/platform/index.js
 var platform_default = {
 	...utils_exports,
 	...node_default
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/toURLEncodedForm.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/toURLEncodedForm.js
 function toURLEncodedForm(data, options) {
 	return toFormData$1(data, new platform_default.classes.URLSearchParams(), {
 		visitor: function(value, key, path, helpers) {
@@ -11313,7 +11417,11 @@ function toURLEncodedForm(data, options) {
 	});
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/formDataToJSON.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/formDataToJSON.js
+const MAX_DEPTH = 100;
+function throwIfDepthExceeded(index) {
+	if (index > MAX_DEPTH) throw new AxiosError$1("FormData field is too deeply nested (" + index + " levels). Max depth: 100", AxiosError$1.ERR_FORM_DATA_DEPTH_EXCEEDED);
+}
 /**
 * It takes a string like `foo[x][y][z]` and returns an array like `['foo', 'x', 'y', 'z']
 *
@@ -11322,9 +11430,14 @@ function toURLEncodedForm(data, options) {
 * @returns An array of strings.
 */
 function parsePropPath(name) {
-	return utils_default.matchAll(/\w+|\[(\w*)]/g, name).map((match) => {
-		return match[0] === "[]" ? "" : match[1] || match[0];
-	});
+	const path = [];
+	const pattern = /\w+|\[(\w*)]/g;
+	let match;
+	while ((match = pattern.exec(name)) !== null) {
+		throwIfDepthExceeded(path.length);
+		path.push(match[0] === "[]" ? "" : match[1] || match[0]);
+	}
+	return path;
 }
 /**
 * Convert an array to an object.
@@ -11354,6 +11467,7 @@ function arrayToObject(arr) {
 */
 function formDataToJSON(formData) {
 	function buildPath(path, value, target, index) {
+		throwIfDepthExceeded(index);
 		let name = path[index++];
 		if (name === "__proto__") return true;
 		const isNumericKey = Number.isFinite(+name);
@@ -11378,7 +11492,7 @@ function formDataToJSON(formData) {
 	return null;
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/defaults/index.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/defaults/index.js
 const own = (obj, key) => obj != null && utils_default.hasOwnProp(obj, key) ? obj[key] : void 0;
 /**
 * It takes a string, tries to parse it, and if it fails, it returns the stringified version
@@ -11486,7 +11600,7 @@ utils_default.forEach([
 	defaults.headers[method] = {};
 });
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/core/transformData.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/core/transformData.js
 /**
 * Transform the data for a request or a response
 *
@@ -11507,12 +11621,12 @@ function transformData(fns, response) {
 	return data;
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/cancel/isCancel.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/cancel/isCancel.js
 function isCancel$1(value) {
 	return !!(value && value.__CANCEL__);
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/cancel/CanceledError.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/cancel/CanceledError.js
 var CanceledError$1 = class extends AxiosError$1 {
 	/**
 	* A `CanceledError` is an object that is thrown when an operation is canceled.
@@ -11530,7 +11644,7 @@ var CanceledError$1 = class extends AxiosError$1 {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/core/settle.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/core/settle.js
 /**
 * Resolve or reject a Promise based on response status.
 *
@@ -11546,7 +11660,7 @@ function settle(resolve, reject, response) {
 	else reject(new AxiosError$1("Request failed with status code " + response.status, response.status >= 400 && response.status < 500 ? AxiosError$1.ERR_BAD_REQUEST : AxiosError$1.ERR_BAD_RESPONSE, response.config, response.request, response));
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/isAbsoluteURL.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/isAbsoluteURL.js
 /**
 * Determines whether the specified URL is absolute
 *
@@ -11559,7 +11673,7 @@ function isAbsoluteURL(url) {
 	return /^([a-z][a-z\d+\-.]*:)?\/\//i.test(url);
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/combineURLs.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/combineURLs.js
 /**
 * Creates a new URL by combining the specified URLs
 *
@@ -11572,7 +11686,20 @@ function combineURLs(baseURL, relativeURL) {
 	return relativeURL ? baseURL.replace(/\/?\/$/, "") + "/" + relativeURL.replace(/^\/+/, "") : baseURL;
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/core/buildFullPath.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/core/buildFullPath.js
+const malformedHttpProtocol = /^https?:(?!\/\/)/i;
+const httpProtocolControlCharacters = /[\t\n\r]/g;
+function stripLeadingC0ControlOrSpace(url) {
+	let i = 0;
+	while (i < url.length && url.charCodeAt(i) <= 32) i++;
+	return url.slice(i);
+}
+function normalizeURLForProtocolCheck(url) {
+	return stripLeadingC0ControlOrSpace(url).replace(httpProtocolControlCharacters, "");
+}
+function assertValidHttpProtocolURL(url, config) {
+	if (typeof url === "string" && malformedHttpProtocol.test(normalizeURLForProtocolCheck(url))) throw new AxiosError$1("Invalid URL: missing \"//\" after protocol", AxiosError$1.ERR_INVALID_URL, config);
+}
 /**
 * Creates a new URL by combining the baseURL with the requestedURL,
 * only when the requestedURL is not already an absolute URL.
@@ -11583,9 +11710,13 @@ function combineURLs(baseURL, relativeURL) {
 *
 * @returns {string} The combined full path
 */
-function buildFullPath(baseURL, requestedURL, allowAbsoluteUrls) {
+function buildFullPath(baseURL, requestedURL, allowAbsoluteUrls, config) {
+	assertValidHttpProtocolURL(requestedURL, config);
 	let isRelativeUrl = !isAbsoluteURL(requestedURL);
-	if (baseURL && (isRelativeUrl || allowAbsoluteUrls === false)) return combineURLs(baseURL, requestedURL);
+	if (baseURL && (isRelativeUrl || allowAbsoluteUrls === false)) {
+		assertValidHttpProtocolURL(baseURL, config);
+		return combineURLs(baseURL, requestedURL);
+	}
 	return requestedURL;
 }
 //#endregion
@@ -12530,7 +12661,8 @@ var require_src = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 						req.onSocket(socket);
 						return;
 					}
-					onerror(/* @__PURE__ */ new Error(`no Duplex stream was returned to agent-base for \`${req.method} ${req.path}\``));
+					const err = /* @__PURE__ */ new Error(`no Duplex stream was returned to agent-base for \`${req.method} ${req.path}\``);
+					onerror(err);
 				};
 				if (typeof this.callback !== "function") {
 					onerror(/* @__PURE__ */ new Error("`callback` is not defined"));
@@ -13242,18 +13374,18 @@ var require_follow_redirects = /* @__PURE__ */ __commonJSMin(((exports, module)
 	module.exports.wrap = wrap;
 }));
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/env/data.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/env/data.js
 var import_dist = /* @__PURE__ */ __toESM(require_dist(), 1);
 var import_follow_redirects = /* @__PURE__ */ __toESM(require_follow_redirects(), 1);
-const VERSION$1 = "1.16.1";
+const VERSION$1 = "1.18.1";
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/parseProtocol.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/parseProtocol.js
 function parseProtocol(url) {
 	const match = /^([-+\w]{1,25}):(?:\/\/)?/.exec(url);
 	return match && match[1] || "";
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/fromDataURI.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/fromDataURI.js
 const DATA_URL_PATTERN = /^([^,;]+\/[^,;]+)?((?:;[^,;=]+=[^,;]+)*)(;base64)?,([\s\S]*)$/;
 /**
 * Parse data uri to a Buffer or Blob
@@ -13277,10 +13409,10 @@ function fromDataURI(uri, asBlob, options) {
 		const params = match[2];
 		const encoding = match[3] ? "base64" : "utf8";
 		const body = match[4];
-		let mime;
+		let mime = "";
 		if (type) mime = params ? type + params : type;
 		else if (params) mime = "text/plain" + params;
-		const buffer = Buffer.from(decodeURIComponent(body), encoding);
+		const buffer = encoding === "base64" ? Buffer.from(body, "base64") : Buffer.from(decodeURIComponent(body), encoding);
 		if (asBlob) {
 			if (!_Blob) throw new AxiosError$1("Blob is not supported", AxiosError$1.ERR_NOT_SUPPORT);
 			return new _Blob([buffer], { type: mime });
@@ -13290,7 +13422,7 @@ function fromDataURI(uri, asBlob, options) {
 	throw new AxiosError$1("Unsupported protocol " + protocol, AxiosError$1.ERR_NOT_SUPPORT);
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/AxiosTransformStream.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/AxiosTransformStream.js
 const kInternals = Symbol("internals");
 var AxiosTransformStream = class extends stream.Transform {
 	constructor(options) {
@@ -13384,7 +13516,7 @@ var AxiosTransformStream = class extends stream.Transform {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/readBlob.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/readBlob.js
 const { asyncIterator } = Symbol;
 const readBlob = async function* (blob) {
 	if (blob.stream) yield* blob.stream();
@@ -13393,7 +13525,7 @@ const readBlob = async function* (blob) {
 	else yield blob;
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/formDataToStream.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/formDataToStream.js
 const BOUNDARY_ALPHABET = platform_default.ALPHABET.ALPHA_DIGIT + "-_";
 const textEncoder = typeof TextEncoder === "function" ? new TextEncoder() : new util.TextEncoder();
 const CRLF = "\r\n";
@@ -13432,8 +13564,8 @@ var FormDataPart = class {
 };
 const formDataToStream = (form, headersHandler, options) => {
 	const { tag = "form-data-boundary", size = 25, boundary = tag + "-" + platform_default.generateString(size, BOUNDARY_ALPHABET) } = options || {};
-	if (!utils_default.isFormData(form)) throw TypeError("FormData instance required");
-	if (boundary.length < 1 || boundary.length > 70) throw Error("boundary must be 1-70 characters long");
+	if (!utils_default.isFormData(form)) throw new TypeError("FormData instance required");
+	if (boundary.length < 1 || boundary.length > 70) throw new Error("boundary must be 1-70 characters long");
 	const boundaryBytes = textEncoder.encode("--" + boundary + CRLF);
 	const footerBytes = textEncoder.encode("--" + boundary + "--\r\n");
 	let contentLength = footerBytes.byteLength;
@@ -13456,7 +13588,7 @@ const formDataToStream = (form, headersHandler, options) => {
 	})());
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/ZlibHeaderTransformStream.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/ZlibHeaderTransformStream.js
 var ZlibHeaderTransformStream = class extends stream.Transform {
 	__transform(chunk, encoding, callback) {
 		this.push(chunk);
@@ -13476,7 +13608,67 @@ var ZlibHeaderTransformStream = class extends stream.Transform {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/callbackify.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/Http2Sessions.js
+var Http2Sessions = class {
+	constructor() {
+		this.sessions = Object.create(null);
+	}
+	getSession(authority, options) {
+		options = Object.assign({ sessionTimeout: 1e3 }, options);
+		let authoritySessions = this.sessions[authority];
+		if (authoritySessions) {
+			let len = authoritySessions.length;
+			for (let i = 0; i < len; i++) {
+				const [sessionHandle, sessionOptions] = authoritySessions[i];
+				if (!sessionHandle.destroyed && !sessionHandle.closed && util.isDeepStrictEqual(sessionOptions, options)) return sessionHandle;
+			}
+		}
+		const session = http2.connect(authority, options);
+		let removed;
+		let timer;
+		const removeSession = () => {
+			if (removed) return;
+			removed = true;
+			if (timer) {
+				clearTimeout(timer);
+				timer = null;
+			}
+			let entries = authoritySessions, len = entries.length, i = len;
+			while (i--) if (entries[i][0] === session) {
+				if (len === 1) delete this.sessions[authority];
+				else entries.splice(i, 1);
+				if (!session.closed) session.close();
+				return;
+			}
+		};
+		const originalRequestFn = session.request;
+		const { sessionTimeout } = options;
+		if (sessionTimeout != null) {
+			let streamsCount = 0;
+			session.request = function() {
+				const stream = originalRequestFn.apply(this, arguments);
+				streamsCount++;
+				if (timer) {
+					clearTimeout(timer);
+					timer = null;
+				}
+				stream.once("close", () => {
+					if (!--streamsCount) timer = setTimeout(() => {
+						timer = null;
+						removeSession();
+					}, sessionTimeout);
+				});
+				return stream;
+			};
+		}
+		session.once("close", removeSession);
+		let entry = [session, options];
+		authoritySessions ? authoritySessions.push(entry) : authoritySessions = this.sessions[authority] = [entry];
+		return session;
+	}
+};
+//#endregion
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/callbackify.js
 const callbackify = (fn, reducer) => {
 	return utils_default.isAsyncFn(fn) ? function(...args) {
 		const cb = args.pop();
@@ -13490,14 +13682,29 @@ const callbackify = (fn, reducer) => {
 	} : fn;
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/shouldBypassProxy.js
-const LOOPBACK_HOSTNAMES = new Set(["localhost"]);
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/shouldBypassProxy.js
+const LOOPBACK_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "0.0.0.0"]);
 const isIPv4Loopback = (host) => {
 	const parts = host.split(".");
 	if (parts.length !== 4) return false;
 	if (parts[0] !== "127") return false;
 	return parts.every((p) => /^\d+$/.test(p) && Number(p) >= 0 && Number(p) <= 255);
 };
+const isIPv6ZeroGroup = (group) => /^0{1,4}$/.test(group);
+const isIPv6Unspecified = (host) => {
+	if (host === "::") return true;
+	const compressionIndex = host.indexOf("::");
+	if (compressionIndex !== -1) {
+		if (compressionIndex !== host.lastIndexOf("::")) return false;
+		const left = host.slice(0, compressionIndex);
+		const right = host.slice(compressionIndex + 2);
+		const leftGroups = left ? left.split(":") : [];
+		const rightGroups = right ? right.split(":") : [];
+		return leftGroups.length + rightGroups.length < 8 && leftGroups.every(isIPv6ZeroGroup) && rightGroups.every(isIPv6ZeroGroup);
+	}
+	const groups = host.split(":");
+	return groups.length === 8 && groups.every(isIPv6ZeroGroup);
+};
 const isIPv6Loopback = (host) => {
 	if (host === "::1") return true;
 	const v4MappedDotted = host.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/i);
@@ -13518,6 +13725,7 @@ const isLoopback = (host) => {
 	if (!host) return false;
 	if (LOOPBACK_HOSTNAMES.has(host)) return true;
 	if (isIPv4Loopback(host)) return true;
+	if (isIPv6Unspecified(host)) return true;
 	return isIPv6Loopback(host);
 };
 const DEFAULT_PORTS = {
@@ -13590,7 +13798,7 @@ function shouldBypassProxy(location) {
 	});
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/speedometer.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/speedometer.js
 /**
 * Calculate data maxRate
 * @param {Number} [samplesCount= 10]
@@ -13625,7 +13833,7 @@ function speedometer(samplesCount, min) {
 	};
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/throttle.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/throttle.js
 /**
 * Throttle decorator
 * @param {Function} fn
@@ -13662,7 +13870,7 @@ function throttle(fn, freq) {
 	return [throttled, flush];
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/progressEventReducer.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/progressEventReducer.js
 const progressEventReducer = (listener, isDownloadStream, freq = 3) => {
 	let bytesNotified = 0;
 	const _speedometer = speedometer(50, 250);
@@ -13697,16 +13905,18 @@ const progressEventDecorator = (total, throttled) => {
 };
 const asyncDecorator = (fn) => (...args) => utils_default.asap(() => fn(...args));
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/estimateDataURLDecodedBytes.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/estimateDataURLDecodedBytes.js
 /**
 * Estimate decoded byte length of a data:// URL *without* allocating large buffers.
 * - For base64: compute exact decoded size using length and padding;
 *               handle %XX at the character-count level (no string allocation).
-* - For non-base64: use UTF-8 byteLength of the encoded body as a safe upper bound.
+* - For non-base64: compute the exact percent-decoded UTF-8 byte length.
 *
 * @param {string} url
 * @returns {number}
 */
+const isHexDigit = (charCode) => charCode >= 48 && charCode <= 57 || charCode >= 65 && charCode <= 70 || charCode >= 97 && charCode <= 102;
+const isPercentEncodedByte = (str, i, len) => i + 2 < len && isHexDigit(str.charCodeAt(i + 1)) && isHexDigit(str.charCodeAt(i + 2));
 function estimateDataURLDecodedBytes(url) {
 	if (!url || typeof url !== "string") return 0;
 	if (!url.startsWith("data:")) return 0;
@@ -13720,7 +13930,7 @@ function estimateDataURLDecodedBytes(url) {
 		for (let i = 0; i < len; i++) if (body.charCodeAt(i) === 37 && i + 2 < len) {
 			const a = body.charCodeAt(i + 1);
 			const b = body.charCodeAt(i + 2);
-			if ((a >= 48 && a <= 57 || a >= 65 && a <= 70 || a >= 97 && a <= 102) && (b >= 48 && b <= 57 || b >= 65 && b <= 70 || b >= 97 && b <= 102)) {
+			if (isHexDigit(a) && isHexDigit(b)) {
 				effectiveLen -= 2;
 				i += 2;
 			}
@@ -13744,11 +13954,13 @@ function estimateDataURLDecodedBytes(url) {
 		const bytes = Math.floor(effectiveLen / 4) * 3 - (pad || 0);
 		return bytes > 0 ? bytes : 0;
 	}
-	if (typeof Buffer !== "undefined" && typeof Buffer.byteLength === "function") return Buffer.byteLength(body, "utf8");
 	let bytes = 0;
 	for (let i = 0, len = body.length; i < len; i++) {
 		const c = body.charCodeAt(i);
-		if (c < 128) bytes += 1;
+		if (c === 37 && isPercentEncodedByte(body, i, len)) {
+			bytes += 1;
+			i += 2;
+		} else if (c < 128) bytes += 1;
 		else if (c < 2048) bytes += 2;
 		else if (c >= 55296 && c <= 56319 && i + 1 < len) {
 			const next = body.charCodeAt(i + 1);
@@ -13761,7 +13973,7 @@ function estimateDataURLDecodedBytes(url) {
 	return bytes;
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/adapters/http.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/adapters/http.js
 const zlibOptions = {
 	flush: zlib.constants.Z_SYNC_FLUSH,
 	finishFlush: zlib.constants.Z_SYNC_FLUSH
@@ -13770,7 +13982,14 @@ const brotliOptions = {
 	flush: zlib.constants.BROTLI_OPERATION_FLUSH,
 	finishFlush: zlib.constants.BROTLI_OPERATION_FLUSH
 };
+const zstdOptions = {
+	flush: zlib.constants.ZSTD_e_flush,
+	finishFlush: zlib.constants.ZSTD_e_flush
+};
 const isBrotliSupported = utils_default.isFunction(zlib.createBrotliDecompress);
+const isZstdSupported = utils_default.isFunction(zlib.createZstdDecompress);
+const ACCEPT_ENCODING = "gzip, compress, deflate" + (isBrotliSupported ? ", br" : "");
+const ACCEPT_ENCODING_WITH_ZSTD = ACCEPT_ENCODING + (isZstdSupported ? ", zstd" : "");
 const { http: httpFollow, https: httpsFollow } = import_follow_redirects.default;
 const isHttps = /https:?/;
 const FORM_DATA_CONTENT_HEADERS$1 = ["content-type", "content-length"];
@@ -13788,6 +14007,25 @@ const kAxiosCurrentReq = Symbol("axios.http.currentReq");
 const kAxiosInstalledTunnel = Symbol("axios.http.installedTunnel");
 const tunnelingAgentCache = /* @__PURE__ */ new Map();
 const tunnelingAgentCacheUser = /* @__PURE__ */ new WeakMap();
+const NODE_NATIVE_ENV_PROXY_SUPPORT = {
+	22: 21,
+	24: 5
+};
+function isNodeNativeEnvProxySupported(nodeVersion = process.versions && process.versions.node) {
+	if (!nodeVersion) return false;
+	const [major, minor] = nodeVersion.split(".").map((part) => Number(part));
+	if (!Number.isInteger(major) || !Number.isInteger(minor)) return false;
+	if (major > 24) return true;
+	return NODE_NATIVE_ENV_PROXY_SUPPORT[major] != null && minor >= NODE_NATIVE_ENV_PROXY_SUPPORT[major];
+}
+function isNodeEnvProxyEnabled(agent, nodeVersion = process.versions && process.versions.node) {
+	if (!isNodeNativeEnvProxySupported(nodeVersion)) return false;
+	const agentOptions = agent && agent.options;
+	return Boolean(agentOptions && utils_default.hasOwnProp(agentOptions, "proxyEnv") && agentOptions.proxyEnv != null);
+}
+function getProxyEnvAgent(options, configHttpAgent, configHttpsAgent) {
+	return isHttps.test(options.protocol) ? configHttpsAgent || https.globalAgent : configHttpAgent || http.globalAgent;
+}
 function getTunnelingAgent(agentOptions, userHttpsAgent) {
 	const key = agentOptions.protocol + "//" + agentOptions.hostname + ":" + (agentOptions.port || "") + "#" + (agentOptions.auth || "");
 	const cache = userHttpsAgent ? tunnelingAgentCacheUser.get(userHttpsAgent) || tunnelingAgentCacheUser.set(userHttpsAgent, /* @__PURE__ */ new Map()).get(userHttpsAgent) : tunnelingAgentCache;
@@ -13797,6 +14035,16 @@ function getTunnelingAgent(agentOptions, userHttpsAgent) {
 		...userHttpsAgent.options,
 		...agentOptions
 	} : agentOptions);
+	if (userHttpsAgent && userHttpsAgent.options) {
+		const originTLSOptions = { ...userHttpsAgent.options };
+		const callback = agent.callback;
+		agent.callback = function axiosTunnelingAgentCallback(req, opts) {
+			return callback.call(this, req, {
+				...originTLSOptions,
+				...opts
+			});
+		};
+	}
 	agent[kAxiosInstalledTunnel] = true;
 	cache.set(key, agent);
 	return agent;
@@ -13804,7 +14052,7 @@ function getTunnelingAgent(agentOptions, userHttpsAgent) {
 const supportedProtocols = platform_default.protocols.map((protocol) => {
 	return protocol + ":";
 });
-const decodeURIComponentSafe = (value) => {
+const decodeURIComponentSafe$1 = (value) => {
 	if (!utils_default.isString(value)) return value;
 	try {
 		return decodeURIComponent(value);
@@ -13816,64 +14064,10 @@ const flushOnFinish = (stream, [throttled, flush]) => {
 	stream.on("end", flush).on("error", flush);
 	return throttled;
 };
-var Http2Sessions = class {
-	constructor() {
-		this.sessions = Object.create(null);
-	}
-	getSession(authority, options) {
-		options = Object.assign({ sessionTimeout: 1e3 }, options);
-		let authoritySessions = this.sessions[authority];
-		if (authoritySessions) {
-			let len = authoritySessions.length;
-			for (let i = 0; i < len; i++) {
-				const [sessionHandle, sessionOptions] = authoritySessions[i];
-				if (!sessionHandle.destroyed && !sessionHandle.closed && util.isDeepStrictEqual(sessionOptions, options)) return sessionHandle;
-			}
-		}
-		const session = http2.connect(authority, options);
-		let removed;
-		const removeSession = () => {
-			if (removed) return;
-			removed = true;
-			let entries = authoritySessions, len = entries.length, i = len;
-			while (i--) if (entries[i][0] === session) {
-				if (len === 1) delete this.sessions[authority];
-				else entries.splice(i, 1);
-				if (!session.closed) session.close();
-				return;
-			}
-		};
-		const originalRequestFn = session.request;
-		const { sessionTimeout } = options;
-		if (sessionTimeout != null) {
-			let timer;
-			let streamsCount = 0;
-			session.request = function() {
-				const stream = originalRequestFn.apply(this, arguments);
-				streamsCount++;
-				if (timer) {
-					clearTimeout(timer);
-					timer = null;
-				}
-				stream.once("close", () => {
-					if (!--streamsCount) timer = setTimeout(() => {
-						timer = null;
-						removeSession();
-					}, sessionTimeout);
-				});
-				return stream;
-			};
-		}
-		session.once("close", removeSession);
-		let entry = [session, options];
-		authoritySessions ? authoritySessions.push(entry) : authoritySessions = this.sessions[authority] = [entry];
-		return session;
-	}
-};
 const http2Sessions = new Http2Sessions();
 /**
-* If the proxy or config beforeRedirects functions are defined, call them with the options
-* object.
+* If the proxy, auth, sensitive header, or config beforeRedirects functions are defined,
+* call them with the options object.
 *
 * @param {Object<string, any>} options - The options object that was passed to the request.
 *
@@ -13881,8 +14075,24 @@ const http2Sessions = new Http2Sessions();
 */
 function dispatchBeforeRedirect(options, responseDetails, requestDetails) {
 	if (options.beforeRedirects.proxy) options.beforeRedirects.proxy(options);
+	if (options.beforeRedirects.auth) options.beforeRedirects.auth(options);
+	if (options.beforeRedirects.sensitiveHeaders) options.beforeRedirects.sensitiveHeaders(options, requestDetails);
 	if (options.beforeRedirects.config) options.beforeRedirects.config(options, responseDetails, requestDetails);
 }
+function stripMatchingHeaders(headers, sensitiveSet) {
+	if (!headers) return;
+	Object.keys(headers).forEach((header) => {
+		if (sensitiveSet.has(header.toLowerCase())) delete headers[header];
+	});
+}
+function isSameOriginRedirect(redirectOptions, requestDetails) {
+	if (!requestDetails) return false;
+	try {
+		return new URL(requestDetails.url).origin === new URL(redirectOptions.href).origin;
+	} catch (e) {
+		return false;
+	}
+}
 /**
 * If the proxy or config afterRedirects functions are defined, call them with the options
 *
@@ -13892,9 +14102,10 @@ function dispatchBeforeRedirect(options, responseDetails, requestDetails) {
 *
 * @returns {http.ClientRequestArgs}
 */
-function setProxy(options, configProxy, location, isRedirect, configHttpsAgent) {
+function setProxy(options, configProxy, location, isRedirect, configHttpsAgent, configHttpAgent) {
 	let proxy = configProxy;
-	if (!proxy && proxy !== false) {
+	const proxyEnvAgent = getProxyEnvAgent(options, configHttpAgent, configHttpsAgent);
+	if (!proxy && proxy !== false && !isNodeEnvProxyEnabled(proxyEnvAgent)) {
 		const proxyUrl = getProxyForUrl(location);
 		if (proxyUrl) {
 			if (!shouldBypassProxy(location)) proxy = new URL(proxyUrl);
@@ -13958,7 +14169,7 @@ function setProxy(options, configProxy, location, isRedirect, configHttpsAgent)
 		}
 	}
 	options.beforeRedirects.proxy = function beforeRedirect(redirectOptions) {
-		setProxy(redirectOptions, configProxy, redirectOptions.href, true, configHttpsAgent);
+		setProxy(redirectOptions, configProxy, redirectOptions.href, true, configHttpsAgent, configHttpAgent);
 	};
 }
 const isHttpAdapterSupported = typeof process !== "undefined" && utils_default.kindOf(process) === "process";
@@ -14020,16 +14231,25 @@ const http2Transport = { request(options, cb) {
 } };
 var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 	return wrapAsync(async function dispatchHttpRequest(resolve$1, reject, onDone) {
-		const own = (key) => utils_default.hasOwnProp(config, key) ? config[key] : void 0;
+		const own = (key) => utils_default.getSafeProp(config, key);
+		const transitional = own("transitional") || transitional_default;
 		let data = own("data");
 		let lookup = own("lookup");
 		let family = own("family");
 		let httpVersion = own("httpVersion");
 		if (httpVersion === void 0) httpVersion = 1;
 		let http2Options = own("http2Options");
+		const httpAgent = own("httpAgent");
+		const httpsAgent = own("httpsAgent");
+		const configProxy = own("proxy");
 		const responseType = own("responseType");
 		const responseEncoding = own("responseEncoding");
-		const method = config.method.toUpperCase();
+		const socketPath = own("socketPath");
+		const method = own("method").toUpperCase();
+		const maxRedirects = own("maxRedirects");
+		const maxBodyLength = own("maxBodyLength");
+		const maxContentLength = own("maxContentLength");
+		const decompress = own("decompress");
 		let isDone;
 		let rejected = false;
 		let req;
@@ -14052,9 +14272,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 		function abort(reason) {
 			try {
 				abortEmitter.emit("abort", !reason || reason.type ? new CanceledError$1(null, config, req) : reason);
-			} catch (err) {
-				console.warn("emit error", err);
-			}
+			} catch (err) {}
 		}
 		function clearConnectPhaseTimer() {
 			if (connectPhaseTimer) {
@@ -14063,9 +14281,10 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 			}
 		}
 		function createTimeoutError() {
-			let timeoutErrorMessage = config.timeout ? "timeout of " + config.timeout + "ms exceeded" : "timeout exceeded";
-			const transitional = config.transitional || transitional_default;
-			if (config.timeoutErrorMessage) timeoutErrorMessage = config.timeoutErrorMessage;
+			const configTimeout = own("timeout");
+			let timeoutErrorMessage = configTimeout ? "timeout of " + configTimeout + "ms exceeded" : "timeout exceeded";
+			const configTimeoutErrorMessage = own("timeoutErrorMessage");
+			if (configTimeoutErrorMessage) timeoutErrorMessage = configTimeoutErrorMessage;
 			return new AxiosError$1(timeoutErrorMessage, transitional.clarifyTimeoutError ? AxiosError$1.ETIMEDOUT : AxiosError$1.ECONNABORTED, config, req);
 		}
 		abortEmitter.once("abort", reject);
@@ -14095,12 +14314,13 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 				});
 			} else onFinished();
 		});
-		const fullPath = buildFullPath(config.baseURL, config.url, config.allowAbsoluteUrls);
-		const parsed = new URL(fullPath, platform_default.hasBrowserEnv ? platform_default.origin : void 0);
+		const fullPath = buildFullPath(own("baseURL"), own("url"), own("allowAbsoluteUrls"), config);
+		const urlBase = socketPath ? "http://localhost" : platform_default.hasBrowserEnv ? platform_default.origin : void 0;
+		const parsed = new URL(fullPath, urlBase);
 		const protocol = parsed.protocol || supportedProtocols[0];
 		if (protocol === "data:") {
-			if (config.maxContentLength > -1) {
-				if (estimateDataURLDecodedBytes(String(config.url || fullPath || "")) > config.maxContentLength) return reject(new AxiosError$1("maxContentLength size of " + config.maxContentLength + " exceeded", AxiosError$1.ERR_BAD_RESPONSE, config));
+			if (maxContentLength > -1) {
+				if (estimateDataURLDecodedBytes(String(own("url") || fullPath || "")) > maxContentLength) return reject(new AxiosError$1("maxContentLength size of " + maxContentLength + " exceeded", AxiosError$1.ERR_BAD_RESPONSE, config));
 			}
 			let convertedData;
 			if (method !== "GET") return settle(resolve$1, reject, {
@@ -14110,7 +14330,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 				config
 			});
 			try {
-				convertedData = fromDataURI(config.url, responseType === "blob", { Blob: config.env && config.env.Blob });
+				convertedData = fromDataURI(own("url"), responseType === "blob", { Blob: config.env && config.env.Blob });
 			} catch (err) {
 				throw AxiosError$1.from(err, AxiosError$1.ERR_BAD_REQUEST, config);
 			}
@@ -14128,7 +14348,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 		}
 		if (supportedProtocols.indexOf(protocol) === -1) return reject(new AxiosError$1("Unsupported protocol " + protocol, AxiosError$1.ERR_BAD_REQUEST, config));
 		const headers = AxiosHeaders$1.from(config.headers).normalize();
-		headers.set("User-Agent", "axios/1.16.1", false);
+		headers.set("User-Agent", "axios/1.18.1", false);
 		const { onUploadProgress, onDownloadProgress } = config;
 		const maxRate = config.maxRate;
 		let maxUploadRate = void 0;
@@ -14138,7 +14358,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 			data = formDataToStream(data, (formHeaders) => {
 				headers.set(formHeaders);
 			}, {
-				tag: `axios-1.16.1-boundary`,
+				tag: `axios-1.18.1-boundary`,
 				boundary: userBoundary && userBoundary[1] || void 0
 			});
 		} else if (utils_default.isFormData(data) && utils_default.isFunction(data.getHeaders) && data.getHeaders !== Object.prototype.getHeaders) {
@@ -14156,7 +14376,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 			else if (utils_default.isString(data)) data = Buffer.from(data, "utf-8");
 			else return reject(new AxiosError$1("Data after transformation must be a string, an ArrayBuffer, a Buffer, or a Stream", AxiosError$1.ERR_BAD_REQUEST, config));
 			headers.setContentLength(data.length, false);
-			if (config.maxBodyLength > -1 && data.length > config.maxBodyLength) return reject(new AxiosError$1("Request body larger than maxBodyLength limit", AxiosError$1.ERR_BAD_REQUEST, config));
+			if (maxBodyLength > -1 && data.length > maxBodyLength) return reject(new AxiosError$1("Request body larger than maxBodyLength limit", AxiosError$1.ERR_BAD_REQUEST, config));
 		}
 		const contentLength = utils_default.toFiniteNumber(headers.getContentLength());
 		if (utils_default.isArray(maxRate)) {
@@ -14171,34 +14391,33 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 		let auth = void 0;
 		const configAuth = own("auth");
 		if (configAuth) {
-			const username = configAuth.username || "";
-			const password = configAuth.password || "";
+			const username = utils_default.getSafeProp(configAuth, "username") || "";
+			const password = utils_default.getSafeProp(configAuth, "password") || "";
 			auth = username + ":" + password;
 		}
-		if (!auth && parsed.username) {
-			const urlUsername = decodeURIComponentSafe(parsed.username);
-			const urlPassword = decodeURIComponentSafe(parsed.password);
+		if (!auth && (parsed.username || parsed.password)) {
+			const urlUsername = decodeURIComponentSafe$1(parsed.username);
+			const urlPassword = decodeURIComponentSafe$1(parsed.password);
 			auth = urlUsername + ":" + urlPassword;
 		}
 		auth && headers.delete("authorization");
 		let path;
 		try {
-			path = buildURL(parsed.pathname + parsed.search, config.params, config.paramsSerializer).replace(/^\?/, "");
+			path = buildURL(parsed.pathname + parsed.search, own("params"), own("paramsSerializer")).replace(/^\?/, "");
 		} catch (err) {
-			const customErr = new Error(err.message);
-			customErr.config = config;
-			customErr.url = config.url;
-			customErr.exists = true;
-			return reject(customErr);
+			return reject(AxiosError$1.from(err, AxiosError$1.ERR_BAD_REQUEST, config, null, null, {
+				url: own("url"),
+				exists: true
+			}));
 		}
-		headers.set("Accept-Encoding", "gzip, compress, deflate" + (isBrotliSupported ? ", br" : ""), false);
+		headers.set("Accept-Encoding", utils_default.hasOwnProp(transitional, "advertiseZstdAcceptEncoding") && transitional.advertiseZstdAcceptEncoding === true ? ACCEPT_ENCODING_WITH_ZSTD : ACCEPT_ENCODING, false);
 		const options = Object.assign(Object.create(null), {
 			path,
 			method,
 			headers: toByteStringHeaderObject(headers),
 			agents: {
-				http: config.httpAgent,
-				https: config.httpsAgent
+				http: httpAgent,
+				https: httpsAgent
 			},
 			auth,
 			protocol,
@@ -14208,38 +14427,66 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 			http2Options
 		});
 		!utils_default.isUndefined(lookup) && (options.lookup = lookup);
-		if (config.socketPath) {
-			if (typeof config.socketPath !== "string") return reject(new AxiosError$1("socketPath must be a string", AxiosError$1.ERR_BAD_OPTION_VALUE, config));
-			if (config.allowedSocketPaths != null) {
-				const allowed = Array.isArray(config.allowedSocketPaths) ? config.allowedSocketPaths : [config.allowedSocketPaths];
-				const resolvedSocket = resolve(config.socketPath);
-				if (!allowed.some((entry) => typeof entry === "string" && resolve(entry) === resolvedSocket)) return reject(new AxiosError$1(`socketPath "${config.socketPath}" is not permitted by allowedSocketPaths`, AxiosError$1.ERR_BAD_OPTION_VALUE, config));
+		if (socketPath) {
+			if (typeof socketPath !== "string") return reject(new AxiosError$1("socketPath must be a string", AxiosError$1.ERR_BAD_OPTION_VALUE, config));
+			const allowedSocketPaths = own("allowedSocketPaths");
+			if (allowedSocketPaths != null) {
+				const allowed = Array.isArray(allowedSocketPaths) ? allowedSocketPaths : [allowedSocketPaths];
+				const resolvedSocket = resolve(socketPath);
+				if (!allowed.some((entry) => typeof entry === "string" && resolve(entry) === resolvedSocket)) return reject(new AxiosError$1(`socketPath "${socketPath}" is not permitted by allowedSocketPaths`, AxiosError$1.ERR_BAD_OPTION_VALUE, config));
 			}
-			options.socketPath = config.socketPath;
+			options.socketPath = socketPath;
 		} else {
 			options.hostname = parsed.hostname.startsWith("[") ? parsed.hostname.slice(1, -1) : parsed.hostname;
 			options.port = parsed.port;
-			setProxy(options, config.proxy, protocol + "//" + parsed.hostname + (parsed.port ? ":" + parsed.port : "") + options.path, false, config.httpsAgent);
+			setProxy(options, configProxy, protocol + "//" + parsed.hostname + (parsed.port ? ":" + parsed.port : "") + options.path, false, httpsAgent, httpAgent);
 		}
 		let transport;
 		let isNativeTransport = false;
+		let transportEnforcesMaxBodyLength = false;
 		const isHttpsRequest = isHttps.test(options.protocol);
-		if (options.agent == null) options.agent = isHttpsRequest ? config.httpsAgent : config.httpAgent;
+		if (options.agent == null) options.agent = isHttpsRequest ? httpsAgent : httpAgent;
 		if (isHttp2) transport = http2Transport;
 		else {
 			const configTransport = own("transport");
 			if (configTransport) transport = configTransport;
-			else if (config.maxRedirects === 0) {
+			else if (maxRedirects === 0) {
 				transport = isHttpsRequest ? https : http;
 				isNativeTransport = true;
 			} else {
-				if (config.maxRedirects) options.maxRedirects = config.maxRedirects;
+				transportEnforcesMaxBodyLength = true;
+				options.sensitiveHeaders = [];
+				if (maxRedirects) options.maxRedirects = maxRedirects;
 				const configBeforeRedirect = own("beforeRedirect");
 				if (configBeforeRedirect) options.beforeRedirects.config = configBeforeRedirect;
+				if (auth) {
+					const requestOrigin = parsed.origin;
+					const authToRestore = auth;
+					options.beforeRedirects.auth = function beforeRedirectAuth(redirectOptions) {
+						try {
+							if (new URL(redirectOptions.href).origin === requestOrigin) redirectOptions.auth = authToRestore;
+						} catch (e) {}
+					};
+				}
+				const sensitiveHeaders = own("sensitiveHeaders");
+				if (sensitiveHeaders != null) {
+					if (!utils_default.isArray(sensitiveHeaders)) return reject(new AxiosError$1("sensitiveHeaders must be an array of strings", AxiosError$1.ERR_BAD_OPTION_VALUE, config));
+					const sensitiveSet = /* @__PURE__ */ new Set();
+					for (const header of sensitiveHeaders) {
+						if (!utils_default.isString(header)) return reject(new AxiosError$1("sensitiveHeaders must be an array of strings", AxiosError$1.ERR_BAD_OPTION_VALUE, config));
+						sensitiveSet.add(header.toLowerCase());
+					}
+					if (sensitiveSet.size) {
+						options.sensitiveHeaders = Array.from(sensitiveSet);
+						options.beforeRedirects.sensitiveHeaders = function beforeRedirectSensitiveHeaders(redirectOptions, requestDetails) {
+							if (!isSameOriginRedirect(redirectOptions, requestDetails)) stripMatchingHeaders(redirectOptions.headers, sensitiveSet);
+						};
+					}
+				}
 				transport = isHttpsRequest ? httpsFollow : httpFollow;
 			}
 		}
-		if (config.maxBodyLength > -1) options.maxBodyLength = config.maxBodyLength;
+		if (maxBodyLength > -1) options.maxBodyLength = maxBodyLength;
 		else options.maxBodyLength = Infinity;
 		options.insecureHTTPParser = Boolean(own("insecureHTTPParser"));
 		req = transport.request(options, function handleResponse(res) {
@@ -14254,7 +14501,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 			}
 			let responseStream = res;
 			const lastRequest = res.req || req;
-			if (config.decompress !== false && res.headers["content-encoding"]) {
+			if (decompress !== false && res.headers["content-encoding"]) {
 				if (method === "HEAD" || res.statusCode === 204) delete res.headers["content-encoding"];
 				switch ((res.headers["content-encoding"] || "").toLowerCase()) {
 					case "gzip":
@@ -14269,10 +14516,18 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 						streams.push(zlib.createUnzip(zlibOptions));
 						delete res.headers["content-encoding"];
 						break;
-					case "br": if (isBrotliSupported) {
-						streams.push(zlib.createBrotliDecompress(brotliOptions));
-						delete res.headers["content-encoding"];
-					}
+					case "br":
+						if (isBrotliSupported) {
+							streams.push(zlib.createBrotliDecompress(brotliOptions));
+							delete res.headers["content-encoding"];
+						}
+						break;
+					case "zstd":
+						if (isZstdSupported) {
+							streams.push(zlib.createZstdDecompress(zstdOptions));
+							delete res.headers["content-encoding"];
+						}
+						break;
 				}
 			}
 			responseStream = streams.length > 1 ? stream.pipeline(streams, utils_default.noop) : streams[0];
@@ -14284,8 +14539,8 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 				request: lastRequest
 			};
 			if (responseType === "stream") {
-				if (config.maxContentLength > -1) {
-					const limit = config.maxContentLength;
+				if (maxContentLength > -1) {
+					const limit = maxContentLength;
 					const source = responseStream;
 					async function* enforceMaxContentLength() {
 						let totalResponseBytes = 0;
@@ -14305,10 +14560,10 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 				responseStream.on("data", function handleStreamData(chunk) {
 					responseBuffer.push(chunk);
 					totalResponseBytes += chunk.length;
-					if (config.maxContentLength > -1 && totalResponseBytes > config.maxContentLength) {
+					if (maxContentLength > -1 && totalResponseBytes > maxContentLength) {
 						rejected = true;
 						responseStream.destroy();
-						abort(new AxiosError$1("maxContentLength size of " + config.maxContentLength + " exceeded", AxiosError$1.ERR_BAD_RESPONSE, config, lastRequest));
+						abort(new AxiosError$1("maxContentLength size of " + maxContentLength + " exceeded", AxiosError$1.ERR_BAD_RESPONSE, config, lastRequest));
 					}
 				});
 				responseStream.on("aborted", function handlerStreamAborted() {
@@ -14351,7 +14606,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 		});
 		const boundSockets = /* @__PURE__ */ new Set();
 		req.on("socket", function handleRequestSocket(socket) {
-			socket.setKeepAlive(true, 1e3 * 60);
+			if (typeof socket.setKeepAlive === "function") socket.setKeepAlive(true, 1e3 * 60);
 			if (!socket[kAxiosSocketListener]) {
 				socket.on("error", function handleSocketError(err) {
 					const current = socket[kAxiosCurrentReq];
@@ -14367,8 +14622,8 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 			for (const socket of boundSockets) if (socket[kAxiosCurrentReq] === req) socket[kAxiosCurrentReq] = null;
 			boundSockets.clear();
 		});
-		if (config.timeout) {
-			const timeout = parseInt(config.timeout, 10);
+		if (own("timeout")) {
+			const timeout = parseInt(own("timeout"), 10);
 			if (Number.isNaN(timeout)) {
 				abort(new AxiosError$1("error trying to parse `config.timeout` to int", AxiosError$1.ERR_BAD_OPTION_VALUE, config, req));
 				return;
@@ -14394,8 +14649,8 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 				if (!ended && !errored) abort(new CanceledError$1("Request stream has been aborted", config, req));
 			});
 			let uploadStream = data;
-			if (config.maxBodyLength > -1 && config.maxRedirects === 0) {
-				const limit = config.maxBodyLength;
+			if (maxBodyLength > -1 && !transportEnforcesMaxBodyLength) {
+				const limit = maxBodyLength;
 				let bytesSent = 0;
 				uploadStream = stream.pipeline([data, new stream.Transform({ transform(chunk, _enc, cb) {
 					bytesSent += chunk.length;
@@ -14414,13 +14669,13 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
 	});
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/isURLSameOrigin.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/isURLSameOrigin.js
 var isURLSameOrigin_default = platform_default.hasStandardBrowserEnv ? ((origin, isMSIE) => (url) => {
 	url = new URL(url, platform_default.origin);
 	return origin.protocol === url.protocol && origin.host === url.host && (isMSIE || origin.port === url.port);
 })(new URL(platform_default.origin), platform_default.navigator && /(msie|trident)/i.test(platform_default.navigator.userAgent)) : () => true;
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/cookies.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/cookies.js
 var cookies_default = platform_default.hasStandardBrowserEnv ? {
 	write(name, value, expires, path, domain, secure, sameSite) {
 		if (typeof document === "undefined") return;
@@ -14438,7 +14693,11 @@ var cookies_default = platform_default.hasStandardBrowserEnv ? {
 		for (let i = 0; i < cookies.length; i++) {
 			const cookie = cookies[i].replace(/^\s+/, "");
 			const eq = cookie.indexOf("=");
-			if (eq !== -1 && cookie.slice(0, eq) === name) return decodeURIComponent(cookie.slice(eq + 1));
+			if (eq !== -1 && cookie.slice(0, eq) === name) try {
+				return decodeURIComponent(cookie.slice(eq + 1));
+			} catch (e) {
+				return cookie.slice(eq + 1);
+			}
 		}
 		return null;
 	},
@@ -14453,7 +14712,7 @@ var cookies_default = platform_default.hasStandardBrowserEnv ? {
 	remove() {}
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/core/mergeConfig.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/core/mergeConfig.js
 const headersToObject = (thing) => thing instanceof AxiosHeaders$1 ? { ...thing } : thing;
 /**
 * Config-specific merge-function which creates a new config-object
@@ -14465,6 +14724,7 @@ const headersToObject = (thing) => thing instanceof AxiosHeaders$1 ? { ...thing
 * @returns {Object} New object resulting from merging config2 to config1
 */
 function mergeConfig$1(config1, config2) {
+	config1 = config1 || {};
 	config2 = config2 || {};
 	const config = Object.create(null);
 	Object.defineProperty(config, "hasOwnProperty", {
@@ -14491,6 +14751,14 @@ function mergeConfig$1(config1, config2) {
 		if (!utils_default.isUndefined(b)) return getMergedValue(void 0, b);
 		else if (!utils_default.isUndefined(a)) return getMergedValue(void 0, a);
 	}
+	function getMergedTransitionalOption(prop) {
+		const transitional2 = utils_default.hasOwnProp(config2, "transitional") ? config2.transitional : void 0;
+		if (!utils_default.isUndefined(transitional2)) if (utils_default.isPlainObject(transitional2)) {
+			if (utils_default.hasOwnProp(transitional2, prop)) return transitional2[prop];
+		} else return;
+		const transitional1 = utils_default.hasOwnProp(config1, "transitional") ? config1.transitional : void 0;
+		if (utils_default.isPlainObject(transitional1) && utils_default.hasOwnProp(transitional1, prop)) return transitional1[prop];
+	}
 	function mergeDirectKeys(a, b, prop) {
 		if (utils_default.hasOwnProp(config2, prop)) return getMergedValue(a, b);
 		else if (utils_default.hasOwnProp(config1, prop)) return getMergedValue(void 0, a);
@@ -14536,17 +14804,19 @@ function mergeConfig$1(config1, config2) {
 		const configValue = merge(utils_default.hasOwnProp(config1, prop) ? config1[prop] : void 0, utils_default.hasOwnProp(config2, prop) ? config2[prop] : void 0, prop);
 		utils_default.isUndefined(configValue) && merge !== mergeDirectKeys || (config[prop] = configValue);
 	});
+	if (utils_default.hasOwnProp(config2, "validateStatus") && utils_default.isUndefined(config2.validateStatus) && getMergedTransitionalOption("validateStatusUndefinedResolves") === false) if (utils_default.hasOwnProp(config1, "validateStatus")) config.validateStatus = getMergedValue(void 0, config1.validateStatus);
+	else delete config.validateStatus;
 	return config;
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/resolveConfig.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/resolveConfig.js
 const FORM_DATA_CONTENT_HEADERS = ["content-type", "content-length"];
 function setFormDataHeaders(headers, formHeaders, policy) {
 	if (policy !== "content-only") {
 		headers.set(formHeaders);
 		return;
 	}
-	Object.entries(formHeaders).forEach(([key, val]) => {
+	Object.entries(formHeaders || {}).forEach(([key, val]) => {
 		if (FORM_DATA_CONTENT_HEADERS.includes(key.toLowerCase())) headers.set(key, val);
 	});
 }
@@ -14558,8 +14828,8 @@ function setFormDataHeaders(headers, formHeaders, policy) {
 *
 * @returns {string} UTF-8 bytes as a Latin-1 string
 */
-const encodeUTF8 = (str) => encodeURIComponent(str).replace(/%([0-9A-F]{2})/gi, (_, hex) => String.fromCharCode(parseInt(hex, 16)));
-var resolveConfig_default = (config) => {
+const encodeUTF8$1 = (str) => encodeURIComponent(str).replace(/%([0-9A-F]{2})/gi, (_, hex) => String.fromCharCode(parseInt(hex, 16)));
+function resolveConfig(config) {
 	const newConfig = mergeConfig$1({}, config);
 	const own = (key) => utils_default.hasOwnProp(newConfig, key) ? newConfig[key] : void 0;
 	const data = own("data");
@@ -14572,10 +14842,18 @@ var resolveConfig_default = (config) => {
 	const allowAbsoluteUrls = own("allowAbsoluteUrls");
 	const url = own("url");
 	newConfig.headers = headers = AxiosHeaders$1.from(headers);
-	newConfig.url = buildURL(buildFullPath(baseURL, url, allowAbsoluteUrls), config.params, config.paramsSerializer);
-	if (auth) headers.set("Authorization", "Basic " + btoa((auth.username || "") + ":" + (auth.password ? encodeUTF8(auth.password) : "")));
+	newConfig.url = buildURL(buildFullPath(baseURL, url, allowAbsoluteUrls, newConfig), own("params"), own("paramsSerializer"));
+	if (auth) {
+		const username = utils_default.getSafeProp(auth, "username") || "";
+		const password = utils_default.getSafeProp(auth, "password") || "";
+		try {
+			headers.set("Authorization", "Basic " + btoa(username + ":" + (password ? encodeUTF8$1(password) : "")));
+		} catch (e) {
+			throw AxiosError$1.from(e, AxiosError$1.ERR_BAD_OPTION_VALUE, config);
+		}
+	}
 	if (utils_default.isFormData(data)) {
-		if (platform_default.hasStandardBrowserEnv || platform_default.hasStandardBrowserWebWorkerEnv) headers.setContentType(void 0);
+		if (platform_default.hasStandardBrowserEnv || platform_default.hasStandardBrowserWebWorkerEnv || utils_default.isReactNative(data)) headers.setContentType(void 0);
 		else if (utils_default.isFunction(data.getHeaders)) setFormDataHeaders(headers, data.getHeaders(), own("formDataHeaderPolicy"));
 	}
 	if (platform_default.hasStandardBrowserEnv) {
@@ -14586,10 +14864,10 @@ var resolveConfig_default = (config) => {
 		}
 	}
 	return newConfig;
-};
+}
 var xhr_default = typeof XMLHttpRequest !== "undefined" && function(config) {
 	return new Promise(function dispatchXhrRequest(resolve, reject) {
-		const _config = resolveConfig_default(config);
+		const _config = resolveConfig(config);
 		let requestData = _config.data;
 		const requestHeaders = AxiosHeaders$1.from(_config.headers).normalize();
 		let { responseType, onUploadProgress, onDownloadProgress } = _config;
@@ -14680,13 +14958,14 @@ var xhr_default = typeof XMLHttpRequest !== "undefined" && function(config) {
 		const protocol = parseProtocol(_config.url);
 		if (protocol && !platform_default.protocols.includes(protocol)) {
 			reject(new AxiosError$1("Unsupported protocol " + protocol + ":", AxiosError$1.ERR_BAD_REQUEST, config));
+			done();
 			return;
 		}
 		request.send(requestData || null);
 	});
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/composeSignals.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/composeSignals.js
 const composeSignals = (signals, timeout) => {
 	signals = signals ? signals.filter(Boolean) : [];
 	if (!timeout && !signals.length) return;
@@ -14713,13 +14992,13 @@ const composeSignals = (signals, timeout) => {
 		});
 		signals = null;
 	};
-	signals.forEach((signal) => signal.addEventListener("abort", onabort));
+	signals.forEach((signal) => signal.addEventListener("abort", onabort, { once: true }));
 	const { signal } = controller;
 	signal.unsubscribe = () => utils_default.asap(unsubscribe);
 	return signal;
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/trackStream.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/trackStream.js
 const streamChunk = function* (chunk, chunkSize) {
 	let len = chunk.byteLength;
 	if (!chunkSize || len < chunkSize) {
@@ -14787,9 +15066,26 @@ const trackStream = (stream, chunkSize, onProgress, onFinish) => {
 	}, { highWaterMark: 2 });
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/adapters/fetch.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/adapters/fetch.js
 const DEFAULT_CHUNK_SIZE = 64 * 1024;
 const { isFunction } = utils_default;
+/**
+* Encode a UTF-8 string to a Latin-1 byte string for use with btoa().
+* This is a modern replacement for the deprecated unescape(encodeURIComponent(str)) pattern.
+*
+* @param {string} str The string to encode
+*
+* @returns {string} UTF-8 bytes as a Latin-1 string
+*/
+const encodeUTF8 = (str) => encodeURIComponent(str).replace(/%([0-9A-F]{2})/gi, (_, hex) => String.fromCharCode(parseInt(hex, 16)));
+const decodeURIComponentSafe = (value) => {
+	if (!utils_default.isString(value)) return value;
+	try {
+		return decodeURIComponent(value);
+	} catch (error) {
+		return value;
+	}
+};
 const test = (fn, ...args) => {
 	try {
 		return !!fn(...args);
@@ -14797,6 +15093,12 @@ const test = (fn, ...args) => {
 		return false;
 	}
 };
+const maybeWithAuthCredentials = (url) => {
+	const protocolIndex = url.indexOf("://");
+	let urlToCheck = url;
+	if (protocolIndex !== -1) urlToCheck = urlToCheck.slice(protocolIndex + 3);
+	return urlToCheck.includes("@") || urlToCheck.includes(":");
+};
 const factory = (env) => {
 	const globalObject = utils_default.global !== void 0 && utils_default.global !== null ? utils_default.global : globalThis;
 	const { ReadableStream, TextEncoder } = globalObject;
@@ -14827,19 +15129,21 @@ const factory = (env) => {
 	});
 	const supportsResponseStream = isResponseSupported && isReadableStreamSupported && test(() => utils_default.isReadableStream(new Response("").body));
 	const resolvers = { stream: supportsResponseStream && ((res) => res.body) };
-	isFetchSupported && [
-		"text",
-		"arrayBuffer",
-		"blob",
-		"formData",
-		"stream"
-	].forEach((type) => {
-		!resolvers[type] && (resolvers[type] = (res, config) => {
-			let method = res && res[type];
-			if (method) return method.call(res);
-			throw new AxiosError$1(`Response type '${type}' is not supported`, AxiosError$1.ERR_NOT_SUPPORT, config);
+	isFetchSupported && (() => {
+		[
+			"text",
+			"arrayBuffer",
+			"blob",
+			"formData",
+			"stream"
+		].forEach((type) => {
+			!resolvers[type] && (resolvers[type] = (res, config) => {
+				let method = res && res[type];
+				if (method) return method.call(res);
+				throw new AxiosError$1(`Response type '${type}' is not supported`, AxiosError$1.ERR_NOT_SUPPORT, config);
+			});
 		});
-	});
+	})();
 	const getBodyLength = async (body) => {
 		if (body == null) return 0;
 		if (utils_default.isBlob(body)) return body.size;
@@ -14856,9 +15160,10 @@ const factory = (env) => {
 		return length == null ? getBodyLength(body) : length;
 	};
 	return async (config) => {
-		let { url, method, data, signal, cancelToken, timeout, onDownloadProgress, onUploadProgress, responseType, headers, withCredentials = "same-origin", fetchOptions, maxContentLength, maxBodyLength } = resolveConfig_default(config);
+		let { url, method, data, signal, cancelToken, timeout, onDownloadProgress, onUploadProgress, responseType, headers, withCredentials = "same-origin", fetchOptions, maxContentLength, maxBodyLength } = resolveConfig(config);
 		const hasMaxContentLength = utils_default.isNumber(maxContentLength) && maxContentLength > -1;
 		const hasMaxBodyLength = utils_default.isNumber(maxBodyLength) && maxBodyLength > -1;
+		const own = (key) => utils_default.hasOwnProp(config, key) ? config[key] : void 0;
 		let _fetch = envFetch || fetch;
 		responseType = responseType ? (responseType + "").toLowerCase() : "text";
 		let composedSignal = composeSignals([signal, cancelToken && cancelToken.toAbortSignal()], timeout);
@@ -14867,34 +15172,70 @@ const factory = (env) => {
 			composedSignal.unsubscribe();
 		});
 		let requestContentLength;
+		let pendingBodyError = null;
+		const maxBodyLengthError = () => new AxiosError$1("Request body larger than maxBodyLength limit", AxiosError$1.ERR_BAD_REQUEST, config, request);
 		try {
+			let auth = void 0;
+			const configAuth = own("auth");
+			if (configAuth) auth = {
+				username: utils_default.getSafeProp(configAuth, "username") || "",
+				password: utils_default.getSafeProp(configAuth, "password") || ""
+			};
+			if (maybeWithAuthCredentials(url)) {
+				const parsedURL = new URL(url, platform_default.origin);
+				if (!auth && (parsedURL.username || parsedURL.password)) auth = {
+					username: decodeURIComponentSafe(parsedURL.username),
+					password: decodeURIComponentSafe(parsedURL.password)
+				};
+				if (parsedURL.username || parsedURL.password) {
+					parsedURL.username = "";
+					parsedURL.password = "";
+					url = parsedURL.href;
+				}
+			}
+			if (auth) {
+				headers.delete("authorization");
+				headers.set("Authorization", "Basic " + btoa(encodeUTF8((auth.username || "") + ":" + (auth.password || ""))));
+			}
 			if (hasMaxContentLength && typeof url === "string" && url.startsWith("data:")) {
 				if (estimateDataURLDecodedBytes(url) > maxContentLength) throw new AxiosError$1("maxContentLength size of " + maxContentLength + " exceeded", AxiosError$1.ERR_BAD_RESPONSE, config, request);
 			}
 			if (hasMaxBodyLength && method !== "get" && method !== "head") {
-				const outboundLength = await resolveBodyLength(headers, data);
-				if (typeof outboundLength === "number" && isFinite(outboundLength) && outboundLength > maxBodyLength) throw new AxiosError$1("Request body larger than maxBodyLength limit", AxiosError$1.ERR_BAD_REQUEST, config, request);
-			}
-			if (onUploadProgress && supportsRequestStream && method !== "get" && method !== "head" && (requestContentLength = await resolveBodyLength(headers, data)) !== 0) {
-				let _request = new Request(url, {
-					method: "POST",
-					body: data,
-					duplex: "half"
-				});
-				let contentTypeHeader;
-				if (utils_default.isFormData(data) && (contentTypeHeader = _request.headers.get("content-type"))) headers.setContentType(contentTypeHeader);
-				if (_request.body) {
-					const [onProgress, flush] = progressEventDecorator(requestContentLength, progressEventReducer(asyncDecorator(onUploadProgress)));
-					data = trackStream(_request.body, DEFAULT_CHUNK_SIZE, onProgress, flush);
+				const outboundLength = await getBodyLength(data);
+				if (typeof outboundLength === "number" && isFinite(outboundLength)) {
+					requestContentLength = outboundLength;
+					if (outboundLength > maxBodyLength) throw maxBodyLengthError();
 				}
 			}
+			const mustEnforceStreamBody = hasMaxBodyLength && (utils_default.isReadableStream(data) || utils_default.isStream(data));
+			const trackRequestStream = (stream, onProgress, flush) => trackStream(stream, DEFAULT_CHUNK_SIZE, (loadedBytes) => {
+				if (hasMaxBodyLength && loadedBytes > maxBodyLength) throw pendingBodyError = maxBodyLengthError();
+				onProgress && onProgress(loadedBytes);
+			}, flush);
+			if (supportsRequestStream && method !== "get" && method !== "head" && (onUploadProgress || mustEnforceStreamBody)) {
+				requestContentLength = requestContentLength == null ? await resolveBodyLength(headers, data) : requestContentLength;
+				if (requestContentLength !== 0 || mustEnforceStreamBody) {
+					let _request = new Request(url, {
+						method: "POST",
+						body: data,
+						duplex: "half"
+					});
+					let contentTypeHeader;
+					if (utils_default.isFormData(data) && (contentTypeHeader = _request.headers.get("content-type"))) headers.setContentType(contentTypeHeader);
+					if (_request.body) {
+						const [onProgress, flush] = onUploadProgress && progressEventDecorator(requestContentLength, progressEventReducer(asyncDecorator(onUploadProgress))) || [];
+						data = trackRequestStream(_request.body, onProgress, flush);
+					}
+				}
+			} else if (mustEnforceStreamBody && !isRequestSupported && isReadableStreamSupported && method !== "get" && method !== "head") data = trackRequestStream(data);
+			else if (mustEnforceStreamBody && isRequestSupported && !supportsRequestStream && method !== "get" && method !== "head") throw new AxiosError$1("Stream request bodies are not supported by the current fetch implementation", AxiosError$1.ERR_NOT_SUPPORT, config, request);
 			if (!utils_default.isString(withCredentials)) withCredentials = withCredentials ? "include" : "omit";
 			const isCredentialsSupported = isRequestSupported && "credentials" in Request.prototype;
 			if (utils_default.isFormData(data)) {
 				const contentType = headers.getContentType();
 				if (contentType && /^multipart\/form-data/i.test(contentType) && !/boundary=/i.test(contentType)) headers.delete("content-type");
 			}
-			headers.set("User-Agent", "axios/" + VERSION$1, false);
+			headers.set("User-Agent", "axios/1.18.1", false);
 			const resolvedOptions = {
 				...fetchOptions,
 				signal: composedSignal,
@@ -14906,8 +15247,9 @@ const factory = (env) => {
 			};
 			request = isRequestSupported && new Request(url, resolvedOptions);
 			let response = await (isRequestSupported ? _fetch(request, fetchOptions) : _fetch(url, resolvedOptions));
+			const responseHeaders = AxiosHeaders$1.from(response.headers);
 			if (hasMaxContentLength) {
-				const declaredLength = utils_default.toFiniteNumber(response.headers.get("content-length"));
+				const declaredLength = utils_default.toFiniteNumber(responseHeaders.getContentLength());
 				if (declaredLength != null && declaredLength > maxContentLength) throw new AxiosError$1("maxContentLength size of " + maxContentLength + " exceeded", AxiosError$1.ERR_BAD_RESPONSE, config, request);
 			}
 			const isStreamResponse = supportsResponseStream && (responseType === "stream" || responseType === "response");
@@ -14920,7 +15262,7 @@ const factory = (env) => {
 				].forEach((prop) => {
 					options[prop] = response[prop];
 				});
-				const responseContentLength = utils_default.toFiniteNumber(response.headers.get("content-length"));
+				const responseContentLength = utils_default.toFiniteNumber(responseHeaders.getContentLength());
 				const [onProgress, flush] = onDownloadProgress && progressEventDecorator(responseContentLength, progressEventReducer(asyncDecorator(onDownloadProgress), true)) || [];
 				let bytesRead = 0;
 				const onChunkProgress = (loadedBytes) => {
@@ -14963,10 +15305,34 @@ const factory = (env) => {
 				const canceledError = composedSignal.reason;
 				canceledError.config = config;
 				request && (canceledError.request = request);
-				err !== canceledError && (canceledError.cause = err);
+				if (err !== canceledError) Object.defineProperty(canceledError, "cause", {
+					__proto__: null,
+					value: err,
+					writable: true,
+					enumerable: false,
+					configurable: true
+				});
 				throw canceledError;
 			}
-			if (err && err.name === "TypeError" && /Load failed|fetch/i.test(err.message)) throw Object.assign(new AxiosError$1("Network Error", AxiosError$1.ERR_NETWORK, config, request, err && err.response), { cause: err.cause || err });
+			if (pendingBodyError) {
+				request && !pendingBodyError.request && (pendingBodyError.request = request);
+				throw pendingBodyError;
+			}
+			if (err instanceof AxiosError$1) {
+				request && !err.request && (err.request = request);
+				throw err;
+			}
+			if (err && err.name === "TypeError" && /Load failed|fetch/i.test(err.message)) {
+				const networkError = new AxiosError$1("Network Error", AxiosError$1.ERR_NETWORK, config, request, err && err.response);
+				Object.defineProperty(networkError, "cause", {
+					__proto__: null,
+					value: err.cause || err,
+					writable: true,
+					enumerable: false,
+					configurable: true
+				});
+				throw networkError;
+			}
 			throw AxiosError$1.from(err, err && err.code, config, request, err && err.response);
 		}
 	};
@@ -14991,7 +15357,7 @@ const getFetch = (config) => {
 };
 getFetch();
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/adapters/adapters.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/adapters/adapters.js
 /**
 * Known adapters mapping.
 * Provides environment-specific adapters for Axios:
@@ -15063,7 +15429,7 @@ function getAdapter$1(adapters, config) {
 	}
 	if (!adapter) {
 		const reasons = Object.entries(rejectedReasons).map(([id, state]) => `adapter ${id} ` + (state === false ? "is not supported by the environment" : "is not available in the build"));
-		throw new AxiosError$1(`There is no suitable adapter to dispatch the request ` + (length ? reasons.length > 1 ? "since :\n" + reasons.map(renderReason).join("\n") : " " + renderReason(reasons[0]) : "as no adapter specified"), "ERR_NOT_SUPPORT");
+		throw new AxiosError$1(`There is no suitable adapter to dispatch the request ` + (length ? reasons.length > 1 ? "since :\n" + reasons.map(renderReason).join("\n") : " " + renderReason(reasons[0]) : "as no adapter specified"), AxiosError$1.ERR_NOT_SUPPORT);
 	}
 	return adapter;
 }
@@ -15083,7 +15449,7 @@ var adapters_default = {
 	adapters: knownAdapters
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/core/dispatchRequest.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/core/dispatchRequest.js
 /**
 * Throws a `CanceledError` if cancellation has been requested.
 *
@@ -15138,7 +15504,7 @@ function dispatchRequest(config) {
 	});
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/validator.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/validator.js
 const validators$1 = {};
 [
 	"object",
@@ -15164,7 +15530,7 @@ const deprecatedWarnings = {};
 */
 validators$1.transitional = function transitional(validator, version, message) {
 	function formatMessage(opt, desc) {
-		return "[Axios v" + VERSION$1 + "] Transitional option '" + opt + "'" + desc + (message ? ". " + message : "");
+		return "[Axios v1.18.1] Transitional option '" + opt + "'" + desc + (message ? ". " + message : "");
 	}
 	return (value, opt, opts) => {
 		if (validator === false) throw new AxiosError$1(formatMessage(opt, " has been removed" + (version ? " in " + version : "")), AxiosError$1.ERR_DEPRECATED);
@@ -15191,7 +15557,7 @@ validators$1.spelling = function spelling(correctSpelling) {
 * @returns {object}
 */
 function assertOptions(options, schema, allowUnknown) {
-	if (typeof options !== "object") throw new AxiosError$1("options must be an object", AxiosError$1.ERR_BAD_OPTION_VALUE);
+	if (typeof options !== "object" || options === null) throw new AxiosError$1("options must be an object", AxiosError$1.ERR_BAD_OPTION_VALUE);
 	const keys = Object.keys(options);
 	let i = keys.length;
 	while (i-- > 0) {
@@ -15211,7 +15577,7 @@ var validator_default = {
 	validators: validators$1
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/core/Axios.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/core/Axios.js
 const validators = validator_default.validators;
 /**
 * Create a new instance of Axios
@@ -15272,7 +15638,9 @@ var Axios$1 = class {
 			silentJSONParsing: validators.transitional(validators.boolean),
 			forcedJSONParsing: validators.transitional(validators.boolean),
 			clarifyTimeoutError: validators.transitional(validators.boolean),
-			legacyInterceptorReqResOrdering: validators.transitional(validators.boolean)
+			legacyInterceptorReqResOrdering: validators.transitional(validators.boolean),
+			advertiseZstdAcceptEncoding: validators.transitional(validators.boolean),
+			validateStatusUndefinedResolves: validators.transitional(validators.boolean)
 		}, false);
 		if (paramsSerializer != null) if (utils_default.isFunction(paramsSerializer)) config.paramsSerializer = { serialize: paramsSerializer };
 		else validator_default.assertOptions(paramsSerializer, {
@@ -15349,7 +15717,7 @@ var Axios$1 = class {
 	}
 	getUri(config) {
 		config = mergeConfig$1(this.defaults, config);
-		return buildURL(buildFullPath(config.baseURL, config.url, config.allowAbsoluteUrls), config.params, config.paramsSerializer);
+		return buildURL(buildFullPath(config.baseURL, config.url, config.allowAbsoluteUrls, config), config.params, config.paramsSerializer);
 	}
 };
 utils_default.forEach([
@@ -15362,7 +15730,7 @@ utils_default.forEach([
 		return this.request(mergeConfig$1(config || {}, {
 			method,
 			url,
-			data: (config || {}).data
+			data: config && utils_default.hasOwnProp(config, "data") ? config.data : void 0
 		}));
 	};
 });
@@ -15386,7 +15754,7 @@ utils_default.forEach([
 	if (method !== "query") Axios$1.prototype[method + "Form"] = generateHTTPMethod(true);
 });
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/cancel/CancelToken.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/cancel/CancelToken.js
 /**
 * A `CancelToken` is an object that can be used to request cancellation of an operation.
 *
@@ -15474,7 +15842,7 @@ var CancelToken$1 = class CancelToken$1 {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/spread.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/spread.js
 /**
 * Syntactic sugar for invoking a function and expanding an array for arguments.
 *
@@ -15502,7 +15870,7 @@ function spread$1(callback) {
 	};
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/isAxiosError.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/isAxiosError.js
 /**
 * Determines whether the payload is an error thrown by Axios
 *
@@ -15514,7 +15882,7 @@ function isAxiosError$1(payload) {
 	return utils_default.isObject(payload) && payload.isAxiosError === true;
 }
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/helpers/HttpStatusCode.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/helpers/HttpStatusCode.js
 const HttpStatusCode$1 = {
 	Continue: 100,
 	SwitchingProtocols: 101,
@@ -15590,7 +15958,7 @@ Object.entries(HttpStatusCode$1).forEach(([key, value]) => {
 	HttpStatusCode$1[value] = key;
 });
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/lib/axios.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/lib/axios.js
 /**
 * Create an instance of Axios
 *
@@ -15629,7 +15997,7 @@ axios.getAdapter = adapters_default.getAdapter;
 axios.HttpStatusCode = HttpStatusCode$1;
 axios.default = axios;
 //#endregion
-//#region node_modules/.pnpm/axios@1.16.1/node_modules/axios/index.js
+//#region node_modules/.pnpm/axios@1.18.1/node_modules/axios/index.js
 const { Axios, AxiosError, CanceledError, isCancel, CancelToken, VERSION, all, Cancel, isAxiosError, spread, toFormData, AxiosHeaders, HttpStatusCode, formToJSON, getAdapter, mergeConfig, create } = axios;
 //#endregion
 //#region src/error.ts
@@ -15702,7 +16070,10 @@ function createDocboxRoutes(options) {
 				if (scope === void 0 || typeof scope !== "string") return (0, import_lib.badRequest)("scope must be defined and a string");
 				const path = request.path.substring(basePath.length);
 				if (!await options.isAllowedWrite(request, scope, path)) return (0, import_lib.forbidden)("you don't have permission to access this resource");
-				return forwardRequest(axiosInstance, request, await options.getRequestTenant(request), await getRequestUser(request), await getApiKey(), h, path);
+				const tenant = await options.getRequestTenant(request);
+				const user = await getRequestUser(request);
+				const apiKey = await getApiKey();
+				return forwardRequest(axiosInstance, request, tenant, user, apiKey, h, path);
 			},
 			options: baseRouteOptions
 		},
@@ -15714,7 +16085,10 @@ function createDocboxRoutes(options) {
 				if (scope === void 0 || typeof scope !== "string") return (0, import_lib.badRequest)("scope must be defined and a string");
 				const path = request.path.substring(basePath.length);
 				if (!await options.isAllowedRead(request, scope, path)) return (0, import_lib.forbidden)("you don't have permission to access this resource");
-				return forwardRequest(axiosInstance, request, await options.getRequestTenant(request), await getRequestUser(request), await getApiKey(), h, path);
+				const tenant = await options.getRequestTenant(request);
+				const user = await getRequestUser(request);
+				const apiKey = await getApiKey();
+				return forwardRequest(axiosInstance, request, tenant, user, apiKey, h, path);
 			},
 			options: {
 				...baseRouteOptions,
@@ -15734,7 +16108,10 @@ function createDocboxRoutes(options) {
 				if (scope === void 0 || typeof scope !== "string") return (0, import_lib.badRequest)("scope must be defined and a string");
 				const path = request.path.substring(basePath.length);
 				if (!await (isWriteRequest(request, path) ? options.isAllowedWrite : options.isAllowedRead)(request, scope, path)) return (0, import_lib.forbidden)("you don't have permission to access this resource");
-				return forwardRequest(axiosInstance, request, await options.getRequestTenant(request), await getRequestUser(request), await getApiKey(), h, path);
+				const tenant = await options.getRequestTenant(request);
+				const user = await getRequestUser(request);
+				const apiKey = await getApiKey();
+				return forwardRequest(axiosInstance, request, tenant, user, apiKey, h, path);
 			},
 			options: {
 				...baseRouteOptions,