@flaredev/cli 0.12.0 → 0.12.1

package/dist/index.js

@@ -204,10 +204,12 @@ var PROVIDERS = {
     hint: { both: "a CDN with an uploader" },
     stacks: ["cloudflare", "next"],
     vars: {
-      cloudflare: [{ name: "UPLOADTHING_TOKEN" }, { name: "UPLOADTHING_APP_ID", example: "a1b2c3d4e5" }],
-      next: [{ name: "UPLOADTHING_TOKEN" }, { name: "UPLOADTHING_APP_ID", example: "a1b2c3d4e5" }]
+      // One variable, not two. The token is base64 JSON carrying the app id, so the
+      // driver reads the id out of it rather than asking for it a second time.
+      cloudflare: [{ name: "UPLOADTHING_TOKEN" }],
+      next: [{ name: "UPLOADTHING_TOKEN" }]
     },
-    where: "UploadThing dashboard \u2192 your app \u2192 API Keys (the app id is in the same place)",
+    where: "UploadThing dashboard \u2192 your app \u2192 API Keys",
     console: "https://uploadthing.com/dashboard",
     docs: `${DOCS}/uploadthing/`,
     install: "uploadthing",
@@ -276,13 +278,17 @@ function storageEnvExample(name, stack) {
   lines.push("", `# Or switch driver: ${others.join(", ")} \u2014 see the guide above.`, "");
   return lines.join("\n");
 }
-function storageSetupSteps(name, stack) {
+function storageSetupSteps(name, stack, options2 = {}) {
   const provider = STORAGE_PROVIDERS[name];
   const vars = storageVars(name, stack);
   const steps = [];
-  if (provider.install) steps.push(`Install its SDK: ${provider.install}`);
+  const readyLocally = options2.local !== false && vars.length > 0 && vars.every((variable) => variable.local);
   if (vars.length > 0 && provider.console) {
-    steps.push(`Get ${vars.map((variable) => variable.name).join(", ")} from ${provider.where ?? provider.console}`);
+    if (readyLocally) {
+      steps.push(`Works locally as it is. When you deploy, replace ${vars.map((variable) => variable.name).join(", ")}:`);
+    } else {
+      steps.push(`Get ${vars.map((variable) => variable.name).join(", ")} from ${provider.where ?? provider.console}`);
+    }
     steps.push(provider.console);
   }
   if (provider.caveat) steps.push(provider.caveat);
@@ -388,6 +394,9 @@ var NEXT_DEV_DEPENDENCIES = {
   tailwindcss: "^4.3.3",
   typescript: "~5.9.3"
 };
+var STORAGE_DEPENDENCIES = {
+  uploadthing: "^7.7.4"
+};
 var CLOUDFLARE_ONLY = [
   "wrangler.jsonc",
   "vite.config.ts",
@@ -502,7 +511,15 @@ function installArgs(pm) {
 }
 
 // src/commands/create.ts
-var ALLOW_BUILDS = ["'@prisma/engines': false", "esbuild: true", "prisma: true", "sharp: false", "workerd: true"].map((line) => `  ${line}`).join("\n");
+var SEED_ADMIN = { email: "admin@example.com", password: "Password", name: "Admin" };
+var ALLOW_BUILDS = [
+  "'@prisma/engines': false",
+  "esbuild: true",
+  "msgpackr-extract: false",
+  "prisma: true",
+  "sharp: false",
+  "workerd: true"
+].map((line) => `  ${line}`).join("\n");
 function toAppName(dir) {
   const name = basename(resolve2(dir)).toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "");
   if (!name) throw new Error(`Cannot derive an app name from "${dir}". Use letters, digits, and dashes.`);
@@ -574,12 +591,22 @@ storage/
     // Which stack this app targets. `flare gen` reads it; don't change it by hand.
     flare: { stack },
     scripts: stack === "next" ? {
+      // Prisma 7 generates its client into lib/generated/prisma, which is
+      // git-ignored and therefore absent from every fresh checkout — including
+      // the one `create` has just written. Without this the first `dev` fails on
+      // `Can't resolve './generated/prisma/client'` before serving a page, and
+      // so does `flare user:add`, which imports lib/db. postinstall rather than a
+      // step in `dev`, so a teammate cloning the repo is covered by the same line.
+      postinstall: "prisma generate",
       dev: "next dev",
       build: "prisma generate && next build",
       start: "next start",
       deploy: "vercel deploy --prod",
       "db:generate": "prisma generate",
       "db:migrate": "prisma migrate dev",
+      // An account to sign in with, so the app is reachable the moment the tables
+      // exist. Safe to run twice: --skip-existing makes a second run a no-op.
+      "db:seed": `flare user:add ${SEED_ADMIN.email} --password ${SEED_ADMIN.password} --name ${SEED_ADMIN.name} --role admin --skip-existing`,
       "db:studio": "prisma studio"
     } : {
       dev: "flare dev",
@@ -592,7 +619,10 @@ storage/
     },
     dependencies: {
       "@flaredev/core": flarePackageSpec("core", dir, packageManager),
-      ...stack === "next" ? { ...uiOnly, ...shared, ...NEXT_DEPENDENCIES } : APP_DEPENDENCIES
+      ...stack === "next" ? { ...uiOnly, ...shared, ...NEXT_DEPENDENCIES } : APP_DEPENDENCIES,
+      // The chosen provider's SDK, where it has one, so the first upload works without
+      // a second install.
+      ...storage in STORAGE_DEPENDENCIES ? { [storage]: STORAGE_DEPENDENCIES[storage] } : {}
     },
     devDependencies: {
       "@flaredev/cli": flarePackageSpec("cli", dir, packageManager),
@@ -651,9 +681,15 @@ function copyLockfile(packageManager, dir, stack) {
 function printNextSteps(result, installed) {
   const rel = relative(process.cwd(), result.dir) || ".";
   const pm = result.packageManager;
+  const database = result.stack === "next" ? [
+    ["docker compose up -d", "Postgres, on the address .env already has"],
+    [`${pm} run db:migrate`, "create the tables"],
+    [`${pm} run db:seed`, "an account to sign in with"]
+  ] : [];
   const commands = [
     [`cd ${rel}`, "your new app"],
     ...installed ? [] : [[`${pm} install`, "dependencies first"]],
+    ...database,
     [`${pm} run dev`, "http://localhost:3000"],
     ["npx flare gen resource Contact", "a table, API and admin screens"],
     ["npx flare seed:resource Contact 1000", "fill it with sample rows"]
@@ -661,10 +697,20 @@ function printNextSteps(result, installed) {
   const width = Math.max(...commands.map(([command]) => command.length)) + 2;
   const steps = commands.map(([command, note2]) => `${pc.cyan(command.padEnd(width))}${pc.dim(note2)}`);
   prompts.note(steps.join("\n"), "Next");
-  const storage = storageSetupSteps(result.storage, result.stack);
+  const storage = storageSetupSteps(result.storage, result.stack, { local: true });
   if (storage.length > 0) {
     prompts.note(storage.map((line) => line.startsWith("http") ? pc.cyan(line) : line).join("\n"), `Uploads \xB7 ${result.storage}`);
   }
+  if (result.stack === "next") {
+    prompts.note(
+      [
+        `${pc.cyan(SEED_ADMIN.email)}  ${pc.dim("\xB7")}  ${pc.cyan(SEED_ADMIN.password)}`,
+        "",
+        pc.dim(`Made by ${pm} run db:seed, as an admin. Change it before this app is anywhere but your machine.`)
+      ].join("\n"),
+      "Sign in with"
+    );
+  }
   prompts.outro(`${pc.bold(result.name)} is ready ${pc.dim("\xB7")} ${pc.cyan("https://flare-docs.codetotech.com/start/quickstart/")}`);
 }
 
@@ -3107,6 +3153,7 @@ ${result.output.trim()}`);
 // src/commands/user-add.ts
 var EMAIL = /^[^\s@'"\\]+@[^\s@'"\\]+\.[^\s@'"\\]+$/;
 var ROLE = /^[a-z][a-z0-9_-]{0,31}$/;
+var KEPT = -1;
 function generatePassword(length = 24) {
   const alphabet = "abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ23456789";
   const bytes = crypto.getRandomValues(new Uint8Array(length));
@@ -3153,7 +3200,8 @@ async function addUser(email, options2 = {}) {
   const password = options2.password ?? generatePassword();
   const generated = options2.password === void 0;
   const rows = await credentialUserRows({ email: address, password, name: options2.name, role: options2.role });
-  const code = readStack(appRoot) === "next" ? await addOnPrisma(appRoot, rows, log2) : await addOnD1(appRoot, rows, options2, log2);
+  const code = readStack(appRoot) === "next" ? await addOnPrisma(appRoot, rows, log2, options2.skipExisting) : await addOnD1(appRoot, rows, options2, log2);
+  if (code === KEPT) return 0;
   if (code !== 0) return code;
   log2(pc9.green(`\u2714 ${address} can now sign in${options2.role ? ` as ${options2.role}` : ""}.`));
   if (generated) {
@@ -3186,6 +3234,10 @@ async function addOnD1(appRoot, rows, options2, log2) {
 ${existing.output.trim()}`);
   const [found] = extractJson(existing.output);
   if ((found?.results ?? []).length > 0) {
+    if (options2.skipExisting) {
+      log2(pc9.dim(`${rows.user.email} already has an account \u2014 left as it is.`));
+      return KEPT;
+    }
     log2(pc9.red(`${rows.user.email} already has an account.`));
     log2(pc9.dim("To change their role: flare user:role <email> <role>"));
     return 1;
@@ -3195,7 +3247,7 @@ ${existing.output.trim()}`);
 ${result.output.trim()}`);
   return 0;
 }
-async function addOnPrisma(appRoot, rows, log2) {
+async function addOnPrisma(appRoot, rows, log2, skipExisting = false) {
   const runner = join15(appRoot, ".flare-user-add-runner.mts");
   const script = [
     `import "dotenv/config";`,
@@ -3222,6 +3274,10 @@ async function addOnPrisma(appRoot, rows, log2) {
   try {
     const code = await runNode([resolveBin(appRoot, "tsx", "tsx"), runner], appRoot);
     if (code === 3) {
+      if (skipExisting) {
+        log2(pc9.dim(`${rows.user.email} already has an account \u2014 left as it is.`));
+        return KEPT;
+      }
       log2(pc9.red(`${rows.user.email} already has an account.`));
       log2(pc9.dim("To change their role: flare user:role <email> <role>"));
       return 1;
@@ -7870,9 +7926,11 @@ function createCli() {
   cli.command("sync-types", "Regenerate schema, routes, clients, and validators from resource descriptors; report drift").option("--check", "Change nothing; exit 1 if anything is out of sync (CI)").option("--force", "Overwrite generated blocks that were edited by hand").action(async (options2) => {
     process.exitCode = await syncTypes(options2);
   });
-  cli.command("user:add <email>", "Create an account from the command line (the way in when signup is closed)").option("--role <role>", "Role to give them, e.g. admin").option("--password <password>", "Their password (generated and printed when omitted)").option("--name <name>", "Display name (default: the part before the @)").option("--remote", "Against the deployed database rather than the local one").option("--env <name>", "Wrangler environment").example("flare user:add ada@example.com --role admin").action(async (email, options2) => {
-    process.exitCode = await addUser(email, options2);
-  });
+  cli.command("user:add <email>", "Create an account from the command line (the way in when signup is closed)").option("--role <role>", "Role to give them, e.g. admin").option("--password <password>", "Their password (generated and printed when omitted)").option("--name <name>", "Display name (default: the part before the @)").option("--remote", "Against the deployed database rather than the local one").option("--env <name>", "Wrangler environment").option("--skip-existing", "Succeed quietly if the account is already there (for seeds)").example("flare user:add ada@example.com --role admin").action(
+    async (email, options2) => {
+      process.exitCode = await addUser(email, options2);
+    }
+  );
   cli.command("doctor", "Check the things that are usually wrong: versions, env, bindings, migrations, drift, policies").option("--offline", "Skip the checks that ask the database").example("flare doctor").action(async (options2) => {
     process.exitCode = await doctor(options2);
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flaredev/cli",
-  "version": "0.12.0",
+  "version": "0.12.1",
   "description": "The flare command-line tool: create, generate, migrate, and deploy Flare apps",
   "license": "MIT",
   "author": "Muke Johnbaptist",
@@ -41,7 +41,7 @@
     "jiti": "^2.7.0",
     "jsonc-parser": "^3.3.1",
     "picocolors": "^1.1.1",
-    "@flaredev/core": "0.12.0"
+    "@flaredev/core": "0.12.1"
   },
   "engines": {
     "node": ">=22"

package/templates/app/.dev.vars.example

@@ -19,9 +19,8 @@ MAIL_FROM=
 # CLOUDINARY_API_KEY=
 # CLOUDINARY_API_SECRET=
 
-# STORAGE_DRIVER=uploadthing   # needs: pnpm add uploadthing
-# UPLOADTHING_TOKEN=
-# UPLOADTHING_APP_ID=
+# STORAGE_DRIVER=uploadthing
+# UPLOADTHING_TOKEN=            # the app id is inside it; there is no second variable
 
 # Both serve files from their own CDN, so a read URL is public and does not expire.
 # Set this to keep every read signed and proxied by the app instead.

package/templates/app/lib/storage/uploadthing.ts

@@ -22,10 +22,13 @@ export interface UploadThingOptions {
   /** From the UploadThing dashboard. Defaults to `UPLOADTHING_TOKEN`. */
   token?: string;
   /**
-   * The app id, which is the subdomain files are served from. Defaults to
-   * `UPLOADTHING_APP_ID`.
+   * The app id, which is the subdomain files are served from.
+   *
+   * Almost never passed: it is already inside the token, and {@link appIdFromToken}
+   * reads it from there. Pass it only to serve from a different subdomain than the
+   * token names.
    */
-  appId: string;
+  appId?: string;
   /**
    * Serve reads from UploadThing's CDN. Default true, which is the reason to use it.
    * See {@link StorageBucket.publicUrl}: those files are readable by anyone with the
@@ -50,6 +53,38 @@ export function customIdFor(key: string): string {
   return key.replace(/[^A-Za-z0-9.-]/g, (char) => `_${char.charCodeAt(0).toString(16).padStart(2, "0")}`);
 }
 
+/**
+ * The app id carried inside an UploadThing token.
+ *
+ * A v7 token is base64 JSON — `{ apiKey, appId, regions }` — so the id of the app it
+ * belongs to is already in your hands the moment you have the token. Asking for
+ * `UPLOADTHING_APP_ID` as well was asking for a value that cannot disagree with the
+ * token without being wrong, and the failure it produced was a quiet one: uploads
+ * succeeded and every read 404'd from a subdomain belonging to another app.
+ *
+ * Only the `appId` is read here. The apiKey stays in the token, which is what the SDK
+ * itself is given.
+ */
+export function appIdFromToken(token: string): string {
+  let decoded: string;
+  try {
+    decoded = typeof atob === "function" ? atob(token) : Buffer.from(token, "base64").toString("utf8");
+  } catch {
+    throw new Error("UPLOADTHING_TOKEN is not valid base64. Copy it again from https://uploadthing.com/dashboard.");
+  }
+  let parsed: unknown;
+  try {
+    parsed = JSON.parse(decoded);
+  } catch {
+    throw new Error("UPLOADTHING_TOKEN does not decode to JSON. Copy it again from https://uploadthing.com/dashboard.");
+  }
+  const appId = (parsed as { appId?: unknown } | null)?.appId;
+  if (typeof appId !== "string" || appId === "") {
+    throw new Error("UPLOADTHING_TOKEN has no appId in it. Copy it again from https://uploadthing.com/dashboard.");
+  }
+  return appId;
+}
+
 /**
  * The part of UTApi this driver uses.
  *
@@ -82,7 +117,10 @@ async function api(token: string | undefined): Promise<UTApiLike> {
 
 export function uploadThingBucket(options: UploadThingOptions): StorageBucket {
   const publicDelivery = options.publicDelivery ?? true;
-  const deliveryUrl = (key: string) => `https://${options.appId}.ufs.sh/f/${customIdFor(key)}`;
+  // Read once rather than per request, so a malformed token is an error at startup
+  // instead of a 404 on somebody's first upload.
+  const appId = options.appId ?? appIdFromToken(options.token ?? process.env.UPLOADTHING_TOKEN ?? "");
+  const deliveryUrl = (key: string) => `https://${appId}.ufs.sh/f/${customIdFor(key)}`;
 
   return {
     async get(key: string): Promise<StorageObjectBody | null> {

package/templates/app/lib/storage.ts

@@ -74,8 +74,8 @@ function selectBucket(): StorageBucket {
       });
     case "uploadthing":
       return uploadThingBucket({
+        // The app id lives inside the token; the driver reads it from there.
         token: required("UPLOADTHING_TOKEN"),
-        appId: required("UPLOADTHING_APP_ID"),
         publicDelivery,
       });
     case "r2":

package/templates/locks/cloudflare/package-lock.json

@@ -4290,9 +4290,9 @@
       "license": "MIT"
     },
     "node_modules/@tailwindcss/node": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/node/-/node-4.3.4.tgz",
-      "integrity": "sha512-b7QK/QG04v3j04NbpG82XLCedRyulnkuwUDwRa9oK/ypnJIzMapz2Wg+0TltVczjUzDaJJHIa1+jj9aMUOFMTQ==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/node/-/node-4.3.5.tgz",
+      "integrity": "sha512-yT53FzV4ke0cr/BguDxhWMpm5MJu1O2muzk+tKw6lKHjODAsYArBbWwFbJiaksfzFv1tpkO9QHGzmfs1hJT66g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -4302,37 +4302,37 @@
         "lightningcss": "1.33.0",
         "magic-string": "^1.1.0",
         "source-map-js": "^1.2.1",
-        "tailwindcss": "4.3.4"
+        "tailwindcss": "4.3.5"
       }
     },
     "node_modules/@tailwindcss/oxide": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide/-/oxide-4.3.4.tgz",
-      "integrity": "sha512-riqsRw2sLF7B1sNCCkTl3KYXEqvhTiABzZ/4oxxHfZ3c3Td60bCBfOrUuUGOiHagd3E7V+zG46c+XBDWZGFBcg==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide/-/oxide-4.3.5.tgz",
+      "integrity": "sha512-PynqGLZsZvwM9tqD/CUxkOIfyd6K5elZ2MooauzJryP/UqXYgi3yYbtt3N0Xe+MHV/eFKPFQCEfIKAqlAS1CBg==",
       "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">= 20"
       },
       "optionalDependencies": {
-        "@tailwindcss/oxide-android-arm64": "4.3.4",
-        "@tailwindcss/oxide-darwin-arm64": "4.3.4",
-        "@tailwindcss/oxide-darwin-x64": "4.3.4",
-        "@tailwindcss/oxide-freebsd-x64": "4.3.4",
-        "@tailwindcss/oxide-linux-arm-gnueabihf": "4.3.4",
-        "@tailwindcss/oxide-linux-arm64-gnu": "4.3.4",
-        "@tailwindcss/oxide-linux-arm64-musl": "4.3.4",
-        "@tailwindcss/oxide-linux-x64-gnu": "4.3.4",
-        "@tailwindcss/oxide-linux-x64-musl": "4.3.4",
-        "@tailwindcss/oxide-wasm32-wasi": "4.3.4",
-        "@tailwindcss/oxide-win32-arm64-msvc": "4.3.4",
-        "@tailwindcss/oxide-win32-x64-msvc": "4.3.4"
+        "@tailwindcss/oxide-android-arm64": "4.3.5",
+        "@tailwindcss/oxide-darwin-arm64": "4.3.5",
+        "@tailwindcss/oxide-darwin-x64": "4.3.5",
+        "@tailwindcss/oxide-freebsd-x64": "4.3.5",
+        "@tailwindcss/oxide-linux-arm-gnueabihf": "4.3.5",
+        "@tailwindcss/oxide-linux-arm64-gnu": "4.3.5",
+        "@tailwindcss/oxide-linux-arm64-musl": "4.3.5",
+        "@tailwindcss/oxide-linux-x64-gnu": "4.3.5",
+        "@tailwindcss/oxide-linux-x64-musl": "4.3.5",
+        "@tailwindcss/oxide-wasm32-wasi": "4.3.5",
+        "@tailwindcss/oxide-win32-arm64-msvc": "4.3.5",
+        "@tailwindcss/oxide-win32-x64-msvc": "4.3.5"
       }
     },
     "node_modules/@tailwindcss/oxide-android-arm64": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-android-arm64/-/oxide-android-arm64-4.3.4.tgz",
-      "integrity": "sha512-qkjxt+EFocOi3mtsUS3ndlj6yj4SHubwBdvBynLnS8T4mvSzX0Enn0CpypJKmBEtczUAXOHVZKA2zTGzSNU2Sg==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-android-arm64/-/oxide-android-arm64-4.3.5.tgz",
+      "integrity": "sha512-Se0z5xMqcSQanJD1IYmO0cGpK3iv0fp3ZsIT7xRJZ1Da5PghvNoc46zz4jIQn+aan3dV9T8AermFNN9QPmsh0Q==",
       "cpu": [
         "arm64"
       ],
@@ -4347,9 +4347,9 @@
       }
     },
     "node_modules/@tailwindcss/oxide-darwin-arm64": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-arm64/-/oxide-darwin-arm64-4.3.4.tgz",
-      "integrity": "sha512-i/awUA/7mJQAbA3AzCW8aQtUh5goMieUdF1zOoclLaJUCxDvsXQ8VJqpQZY3dfcHS6PJjd3tw25nNneD/mEviQ==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-arm64/-/oxide-darwin-arm64-4.3.5.tgz",
+      "integrity": "sha512-UPrgTDuUbvmqGMZuCnmI3FKee/tYKzKdp00/kuB4oSGB213VYg8QTdF7lVhnPoBXq/mIfJ+ILoBFqNOboWcMwQ==",
       "cpu": [
         "arm64"
       ],
@@ -4364,9 +4364,9 @@
       }
     },
     "node_modules/@tailwindcss/oxide-darwin-x64": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-x64/-/oxide-darwin-x64-4.3.4.tgz",
-      "integrity": "sha512-q56V9U6AnoYz/yj/alkDLhSQ9AZoXQSEl93f7WETa0+32CudbqM57BXdYXfMYPKudueXKaA+MG6L/0KRseF7Jg==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-x64/-/oxide-darwin-x64-4.3.5.tgz",
+      "integrity": "sha512-E+p7HEtjI0b8D7kbbWxH067cGui6d4c79COGko9fAPVE3rwc1E7ld2HFCbaG86AOGWS5VKQYqZOaf38ya4uxTQ==",
       "cpu": [
         "x64"
       ],
@@ -4381,9 +4381,9 @@
       }
     },
     "node_modules/@tailwindcss/oxide-freebsd-x64": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-freebsd-x64/-/oxide-freebsd-x64-4.3.4.tgz",
-      "integrity": "sha512-r0W7A+Z9HTHh7bwihJl45E/zZKLjxD50/jToVF/E/RZHSl8+EWO+4yKKJpPMcUooT9hdoip3Zx1uWnbMg4N79g==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-freebsd-x64/-/oxide-freebsd-x64-4.3.5.tgz",
+      "integrity": "sha512-yWEWcWyAG7rWOcTpJTjdhQ3pcaFY2h+0bqTRfgU3G2fz87ZU3AKdvdZKhslD+kyHnjBUWKvNdRYwIYC5dI1tIg==",
       "cpu": [
         "x64"
       ],
@@ -4398,9 +4398,9 @@
       }
     },
     "node_modules/@tailwindcss/oxide-linux-arm-gnueabihf": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm-gnueabihf/-/oxide-linux-arm-gnueabihf-4.3.4.tgz",
-      "integrity": "sha512-3aih/sRxzeYfi2Bkh+bGYNf2YU9Llamb2mpA7BNF1obYzdgEeWDAMQzK6BSwzLhs/eTdOaSur92qrGfchagUtQ==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm-gnueabihf/-/oxide-linux-arm-gnueabihf-4.3.5.tgz",
+      "integrity": "sha512-WmeVjtJhZlr+smpqcdR2kQkkn6arHIJnUIBxTO2EJcTLGY1ecVXNo2hbSn8xc0IH2aEtys936iMWKGyj0GaKnA==",
       "cpu": [
         "arm"
       ],
@@ -4415,9 +4415,9 @@
       }
     },
     "node_modules/@tailwindcss/oxide-linux-arm64-gnu": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-gnu/-/oxide-linux-arm64-gnu-4.3.4.tgz",
-      "integrity": "sha512-ktJSrPGQou4OqL88rDEx5CkeM9BjzrwZvYo8u7B7VL1zkBa2XBm351o4MQrek95qikb2M++26Y7w7vbH6Mgl8g==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-gnu/-/oxide-linux-arm64-gnu-4.3.5.tgz",
+      "integrity": "sha512-DTCSyucc6ShMp1QMqV5R94Z7xlgNgUzkGmFF1rL5HH2Qjy4eSmEqy+YLGkqqYvWa4sILtgrBt1JjRKbneQtiFQ==",
       "cpu": [
         "arm64"
       ],
@@ -4435,9 +4435,9 @@
       }
     },
     "node_modules/@tailwindcss/oxide-linux-arm64-musl": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-musl/-/oxide-linux-arm64-musl-4.3.4.tgz",
-      "integrity": "sha512-rt3hjUxT7utAtcB+df6wHyaXDyxhE7Zd1x7L/nvB5Jb2qBb8dZwFUoWqeRja1BaF5OlSqkKSjBmVXj9OsevmCQ==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-musl/-/oxide-linux-arm64-musl-4.3.5.tgz",
+      "integrity": "sha512-H9lsvO4x9E4nE4Hi8h7NHHw0O/kcVSu+iOyFHNGdYzazGgDjFHZbE6S3hQ8kMcbNXSBlMdNi67LV5EVqtpaJtw==",
       "cpu": [
         "arm64"
       ],
@@ -4455,9 +4455,9 @@
       }
     },
     "node_modules/@tailwindcss/oxide-linux-x64-gnu": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-gnu/-/oxide-linux-x64-gnu-4.3.4.tgz",
-      "integrity": "sha512-XE3jO2yOOWjttpeGvpwf3/b274NMi3QapQSAI/EzsgrmYNan1Tw8dXT9JQkN7K0OgvuqiC8mcCyNvGzEkpVJPQ==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-gnu/-/oxide-linux-x64-gnu-4.3.5.tgz",
+      "integrity": "sha512-4uxQvtBvPuIdl13WfUBj9xMZHH14PtHZ8OZdtLmdyDtG66sCa1t599NZT+jagkUzRtWhuul1qRZQ1nAJscXN5g==",
       "cpu": [
         "x64"
       ],
@@ -4475,9 +4475,9 @@
       }
     },
     "node_modules/@tailwindcss/oxide-linux-x64-musl": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-musl/-/oxide-linux-x64-musl-4.3.4.tgz",
-      "integrity": "sha512-PaAZ2FjJaZk9SQLYtKIfQWiFm/xtl7pX2MKPgCzn0mS/VU54yu+vP457AJdB2XFLxU3gO2abLCt8N7Lg4EbKNg==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-musl/-/oxide-linux-x64-musl-4.3.5.tgz",
+      "integrity": "sha512-0JQAzs7jwbA7O6+z/adU+Jk3AXwsu3npAhtr5escXS7TqEqWcaDV7qHuI+0Vy/KQRuVGnLQREcSJWYauyV3oqg==",
       "cpu": [
         "x64"
       ],
@@ -4495,9 +4495,9 @@
       }
     },
     "node_modules/@tailwindcss/oxide-wasm32-wasi": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.3.4.tgz",
-      "integrity": "sha512-bjO9WmoM687p8AoCIyw1DUqzpAs4JICLvNmIPxIWDmhw8IOsdubtWQLShyJmISnDKtRy1BBApHVOUl6sNFQQJA==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.3.5.tgz",
+      "integrity": "sha512-OJhFmlEfdzMr+avACdi40RPtnkW0B6hXyxL/8r+tnEHBWZji36CYRjEXrrvgBmaYsD3oEOBqwYFRKsYvzFe7Bw==",
       "bundleDependencies": [
         "@napi-rs/wasm-runtime",
         "@emnapi/core",
@@ -4591,9 +4591,9 @@
       "optional": true
     },
     "node_modules/@tailwindcss/oxide-win32-arm64-msvc": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-arm64-msvc/-/oxide-win32-arm64-msvc-4.3.4.tgz",
-      "integrity": "sha512-jCrwCvWVtt7ruMXp6dFPd5KBNU8o1tWtEdZbTL/w/hvD3lUYZA0E2mmfvTzW4QLHIx5wGQU9HeY7997R1QTrEg==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-arm64-msvc/-/oxide-win32-arm64-msvc-4.3.5.tgz",
+      "integrity": "sha512-9o8jgthi+QE5eandnboiJT64VQfnIArfZzSTdgbhEK5aafdiu2jTW9Honi/mwYHxBZuH1vAC57IFyrh+0iK5Gg==",
       "cpu": [
         "arm64"
       ],
@@ -4608,9 +4608,9 @@
       }
     },
     "node_modules/@tailwindcss/oxide-win32-x64-msvc": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-x64-msvc/-/oxide-win32-x64-msvc-4.3.4.tgz",
-      "integrity": "sha512-cge1wcedn1FrRSXL22lF5sNDYr8c9+VImk7zFYLPs12jkDmchSrZNfzWqOKub+5Hb/aYRdDEqERGGDKONBlOzQ==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-x64-msvc/-/oxide-win32-x64-msvc-4.3.5.tgz",
+      "integrity": "sha512-XiKFfIy1RWe7qK4WqByxNW7Oz1/nkOy8o/BWhHminyV1PmpUd8Eedj5v2A8h2kpqeVlz6xRnwk9Fr/ZXNLcZfg==",
       "cpu": [
         "x64"
       ],
@@ -4625,17 +4625,17 @@
       }
     },
     "node_modules/@tailwindcss/postcss": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/postcss/-/postcss-4.3.4.tgz",
-      "integrity": "sha512-6O0QLY+1CseO8ivlYK2Y7IxNPaQ8D5ypxrV+ws34mbxknWH824J+gEWtJ0gyFiYAudmdEeXdF8kqwgXIaZRyHw==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/postcss/-/postcss-4.3.5.tgz",
+      "integrity": "sha512-FAV37Tlx9wBiT/hkfgVD0Q6CWsP2oUX3lf28nrfjW8+ksILjnpuFulUqWDfNR4/ZiEHHDRBX8DUTzD1Rys687A==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@alloc/quick-lru": "^5.2.0",
-        "@tailwindcss/node": "4.3.4",
-        "@tailwindcss/oxide": "4.3.4",
+        "@tailwindcss/node": "4.3.5",
+        "@tailwindcss/oxide": "4.3.5",
         "postcss": "^8.5.25",
-        "tailwindcss": "4.3.4"
+        "tailwindcss": "4.3.5"
       }
     },
     "node_modules/@types/estree": {
@@ -7842,9 +7842,9 @@
       "license": "MIT"
     },
     "node_modules/schema-utils": {
-      "version": "4.8.2",
-      "resolved": "https://registry.npmjs.org/schema-utils/-/schema-utils-4.8.2.tgz",
-      "integrity": "sha512-iKlak3OFHF0dgD1nZRvgWQzG+P1TiEcMnLSBtIVBg937z5Jd6WE1c3SyZkXIyCfPHowL35yMsVvIjotm1c1qiw==",
+      "version": "4.8.3",
+      "resolved": "https://registry.npmjs.org/schema-utils/-/schema-utils-4.8.3.tgz",
+      "integrity": "sha512-qIfo3f+lRNqnMPgpXSKvUhsT3pY5U+ppmgGr4j8LanFP3W/Ze+xj8DY/dPb5qVu3m6qFIMyMWKVRLNKxrNhxWg==",
       "license": "MIT",
       "peer": true,
       "dependencies": {
@@ -7864,7 +7864,7 @@
         "url": "https://opencollective.com/webpack"
       },
       "peerDependencies": {
-        "webpack": "^5.112.0"
+        "webpack": "^5.0.0"
       },
       "peerDependenciesMeta": {
         "webpack": {
@@ -8044,9 +8044,9 @@
       }
     },
     "node_modules/tailwindcss": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.3.4.tgz",
-      "integrity": "sha512-PCJZTFFdG+sL3gvnP1Do9o6GbkvH2q0p04xSs3f7cSvmAeK+sttG+/7ncK1fdRwKFfC7n+wDDJaOMBSefkI9ow==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.3.5.tgz",
+      "integrity": "sha512-FcQk9BuffmEHJP2G0XmB2SplU1aLTI7j07Kunk+U74Ny+XiWOtzXz9aujFZ/avntw1e2cOv/3PkgzflQ7gX2vQ==",
       "dev": true,
       "license": "MIT"
     },