@hasna/domains 0.0.45 → 0.0.47

package/dist/mcp/index.js

@@ -4013,7 +4013,7 @@ var init_zod = __esm(() => {
   init_external();
 });
 
-// ../../node_modules/.bun/@smithy+types@4.16.1/node_modules/@smithy/types/dist-cjs/index.js
+// ../../node_modules/.bun/@smithy+types@4.17.2/node_modules/@smithy/types/dist-cjs/index.js
 var require_dist_cjs = __commonJS((exports) => {
   var HttpAuthLocation;
   (function(HttpAuthLocation2) {
@@ -4104,7 +4104,7 @@ var require_dist_cjs = __commonJS((exports) => {
   exports.resolveDefaultRuntimeConfig = resolveDefaultRuntimeConfig;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/submodules/transport/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/transport/index.js
 var require_transport = __commonJS((exports) => {
   var { SMITHY_CONTEXT_KEY } = require_dist_cjs();
   var getSmithyContext = (context) => context[SMITHY_CONTEXT_KEY] || (context[SMITHY_CONTEXT_KEY] = {});
@@ -4271,7 +4271,7 @@ var require_transport = __commonJS((exports) => {
   exports.toEndpointV1 = toEndpointV1;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/submodules/schema/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/schema/index.js
 var require_schema = __commonJS((exports) => {
   var { getSmithyContext, HttpResponse, toEndpointV1 } = require_transport();
   var deref = (schemaRef) => {
@@ -4404,8 +4404,6 @@ var require_schema = __commonJS((exports) => {
 
   class ListSchema extends Schema {
     static symbol = Symbol.for("@smithy/lis");
-    name;
-    traits;
     valueSchema;
     symbol = ListSchema.symbol;
   }
@@ -4418,8 +4416,6 @@ var require_schema = __commonJS((exports) => {
 
   class MapSchema extends Schema {
     static symbol = Symbol.for("@smithy/map");
-    name;
-    traits;
     keySchema;
     valueSchema;
     symbol = MapSchema.symbol;
@@ -4434,8 +4430,6 @@ var require_schema = __commonJS((exports) => {
 
   class OperationSchema extends Schema {
     static symbol = Symbol.for("@smithy/ope");
-    name;
-    traits;
     input;
     output;
     symbol = OperationSchema.symbol;
@@ -4450,8 +4444,6 @@ var require_schema = __commonJS((exports) => {
 
   class StructureSchema extends Schema {
     static symbol = Symbol.for("@smithy/str");
-    name;
-    traits;
     memberNames;
     memberList;
     symbol = StructureSchema.symbol;
@@ -4786,9 +4778,7 @@ var require_schema = __commonJS((exports) => {
 
   class SimpleSchema extends Schema {
     static symbol = Symbol.for("@smithy/sim");
-    name;
     schemaRef;
-    traits;
     symbol = SimpleSchema.symbol;
   }
   var sim = (namespace, name, schemaRef, traits) => Schema.assign(new SimpleSchema, {
@@ -4950,7 +4940,7 @@ var require_schema = __commonJS((exports) => {
   exports.translateTraits = translateTraits;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/submodules/client/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/client/index.js
 var require_client = __commonJS((exports) => {
   var { getSmithyContext, normalizeProvider } = require_transport();
   exports.getSmithyContext = getSmithyContext;
@@ -5238,7 +5228,7 @@ var require_client = __commonJS((exports) => {
     };
   };
   var sleep = (seconds) => {
-    return new Promise((resolve3) => setTimeout(resolve3, seconds * 1000));
+    return new Promise((resolve4) => setTimeout(resolve4, seconds * 1000));
   };
   var waiterServiceDefaults = {
     minDelay: 2,
@@ -5367,8 +5357,8 @@ var require_client = __commonJS((exports) => {
   };
   var abortTimeout = (abortSignal) => {
     let onAbort;
-    const promise = new Promise((resolve3) => {
-      onAbort = () => resolve3({ state: WaiterState.ABORTED });
+    const promise = new Promise((resolve4) => {
+      onAbort = () => resolve4({ state: WaiterState.ABORTED });
       if (typeof abortSignal.addEventListener === "function") {
         abortSignal.addEventListener("abort", onAbort);
       } else {
@@ -6019,10 +6009,10 @@ var require_client = __commonJS((exports) => {
   exports.withBaseException = withBaseException;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/submodules/config/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/config/index.js
 var require_config = __commonJS((exports) => {
-  var { homedir: homedir2 } = __require("os");
-  var { sep, join: join3 } = __require("path");
+  var { homedir: homedir4 } = __require("os");
+  var { sep, join: join5 } = __require("path");
   var { createHash: createHash2 } = __require("crypto");
   var { readFile: readFile$1 } = __require("fs/promises");
   var { IniSectionType } = require_dist_cjs();
@@ -6171,7 +6161,7 @@ var require_config = __commonJS((exports) => {
       return `${HOMEDRIVE}${HOMEPATH}`;
     const homeDirCacheKey = getHomeDirCacheKey();
     if (!homeDirCache[homeDirCacheKey])
-      homeDirCache[homeDirCacheKey] = homedir2();
+      homeDirCache[homeDirCacheKey] = homedir4();
     return homeDirCache[homeDirCacheKey];
   };
   var ENV_PROFILE = "AWS_PROFILE";
@@ -6180,7 +6170,7 @@ var require_config = __commonJS((exports) => {
   var getSSOTokenFilepath = (id) => {
     const hasher = createHash2("sha1");
     const cacheName = hasher.update(id).digest("hex");
-    return join3(getHomeDir(), ".aws", "sso", "cache", `${cacheName}.json`);
+    return join5(getHomeDir(), ".aws", "sso", "cache", `${cacheName}.json`);
   };
   var tokenIntercept = {};
   var getSSOTokenFromFile = async (id) => {
@@ -6207,9 +6197,9 @@ var require_config = __commonJS((exports) => {
     ...data.default && { default: data.default }
   });
   var ENV_CONFIG_PATH = "AWS_CONFIG_FILE";
-  var getConfigFilepath = () => process.env[ENV_CONFIG_PATH] || join3(getHomeDir(), ".aws", "config");
+  var getConfigFilepath = () => process.env[ENV_CONFIG_PATH] || join5(getHomeDir(), ".aws", "config");
   var ENV_CREDENTIALS_PATH = "AWS_SHARED_CREDENTIALS_FILE";
-  var getCredentialsFilepath = () => process.env[ENV_CREDENTIALS_PATH] || join3(getHomeDir(), ".aws", "credentials");
+  var getCredentialsFilepath = () => process.env[ENV_CREDENTIALS_PATH] || join5(getHomeDir(), ".aws", "credentials");
   var prefixKeyRegex = /^([\w-]+)\s(["'])?([\w-@+.%:/]+)\2$/;
   var profileNameBlockList = ["__proto__", "profile __proto__"];
   var parseIni = (iniData) => {
@@ -6275,11 +6265,11 @@ var require_config = __commonJS((exports) => {
     const relativeHomeDirPrefix = "~/";
     let resolvedFilepath = filepath;
     if (filepath.startsWith(relativeHomeDirPrefix)) {
-      resolvedFilepath = join3(homeDir2, filepath.slice(2));
+      resolvedFilepath = join5(homeDir2, filepath.slice(2));
     }
     let resolvedConfigFilepath = configFilepath;
     if (configFilepath.startsWith(relativeHomeDirPrefix)) {
-      resolvedConfigFilepath = join3(homeDir2, configFilepath.slice(2));
+      resolvedConfigFilepath = join5(homeDir2, configFilepath.slice(2));
     }
     const parsedFiles = await Promise.all([
       readFile(resolvedConfigFilepath, {
@@ -6496,7 +6486,7 @@ var require_config = __commonJS((exports) => {
   };
   var imdsRequest = async (options) => {
     const { request } = __require("http");
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       const req = request({
         hostname: options.hostname,
         port: options.port,
@@ -6524,7 +6514,7 @@ var require_config = __commonJS((exports) => {
         const chunks = [];
         res.on("data", (chunk) => chunks.push(chunk));
         res.on("end", () => {
-          resolve3(Buffer.concat(chunks));
+          resolve4(Buffer.concat(chunks));
           req.destroy();
         });
       });
@@ -6714,7 +6704,7 @@ var require_config = __commonJS((exports) => {
   exports.resolveRegionConfig = resolveRegionConfig;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/submodules/endpoints/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/endpoints/index.js
 var require_endpoints = __commonJS((exports) => {
   var { CONFIG_PREFIX_SEPARATOR, booleanSelector, SelectorType, loadConfig } = require_config();
   var { toEndpointV1, getSmithyContext, normalizeProvider, isValidHostLabel } = require_transport();
@@ -7526,7 +7516,7 @@ var require_endpoints = __commonJS((exports) => {
   exports.resolveParams = resolveParams;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/submodules/serde/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/serde/index.js
 var require_serde = __commonJS((exports) => {
   var { createHmac, createHash: createHash2, getRandomValues } = __require("crypto");
   var { ReadStream, lstatSync, fstatSync } = __require("fs");
@@ -8875,7 +8865,7 @@ ${value}\r
     if (isReadableStream(stream)) {
       return headStream$1(stream, bytes);
     }
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       const collector = new Collector$1;
       collector.limit = bytes;
       stream.pipe(collector);
@@ -8886,7 +8876,7 @@ ${value}\r
       collector.on("error", reject);
       collector.on("finish", function() {
         const bytes2 = concatBytes(this.buffers);
-        resolve3(bytes2);
+        resolve4(bytes2);
       });
     });
   };
@@ -9000,7 +8990,7 @@ ${value}\r
     if (isReadableStream(stream)) {
       return collectReadableStream(stream);
     }
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       const collector = new Collector;
       const nodeStream = stream;
       nodeStream.pipe(collector);
@@ -9011,7 +9001,7 @@ ${value}\r
       collector.on("error", reject);
       collector.on("finish", function() {
         const bytes = concatBytes(this.bufferedBytes);
-        resolve3(bytes);
+        resolve4(bytes);
       });
     });
   };
@@ -9164,7 +9154,7 @@ ${value}\r
   exports.v4 = v4;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/submodules/checksum/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/checksum/index.js
 var require_checksum = __commonJS((exports) => {
   var { createReadStream } = __require("fs");
   var { Writable } = __require("stream");
@@ -9203,7 +9193,7 @@ var require_checksum = __commonJS((exports) => {
       callback();
     }
   }
-  var fileStreamHasher = (hashCtor, fileStream) => new Promise((resolve3, reject) => {
+  var fileStreamHasher = (hashCtor, fileStream) => new Promise((resolve4, reject) => {
     if (!isReadStream(fileStream)) {
       reject(new Error("Unable to calculate hash for non-file streams."));
       return;
@@ -9221,7 +9211,7 @@ var require_checksum = __commonJS((exports) => {
     });
     hashCalculator.on("error", reject);
     hashCalculator.on("finish", function() {
-      hash.digest().then(resolve3).catch(reject);
+      hash.digest().then(resolve4).catch(reject);
     });
   });
   var isReadStream = (stream) => typeof stream.path === "string";
@@ -9232,14 +9222,14 @@ var require_checksum = __commonJS((exports) => {
     const hash = new hashCtor;
     const hashCalculator = new HashCalculator(hash);
     readableStream.pipe(hashCalculator);
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       readableStream.on("error", (err) => {
         hashCalculator.end();
         reject(err);
       });
       hashCalculator.on("error", reject);
       hashCalculator.on("finish", () => {
-        hash.digest().then(resolve3).catch(reject);
+        hash.digest().then(resolve4).catch(reject);
       });
     });
   };
@@ -9780,7 +9770,7 @@ var require_checksum = __commonJS((exports) => {
   exports.readableStreamHasher = readableStreamHasher;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/submodules/event-streams/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/event-streams/index.js
 var require_event_streams = __commonJS((exports) => {
   var { Crc32 } = require_checksum();
   var { toHex, fromHex, toUtf8, fromUtf8 } = require_serde();
@@ -9855,27 +9845,27 @@ var require_event_streams = __commonJS((exports) => {
     formatHeaderValue(header) {
       switch (header.type) {
         case "boolean":
-          return Uint8Array.from([header.value ? HEADER_VALUE_TYPE.boolTrue : HEADER_VALUE_TYPE.boolFalse]);
+          return Uint8Array.from([header.value ? 0 : 1]);
         case "byte":
-          return Uint8Array.from([HEADER_VALUE_TYPE.byte, header.value]);
+          return Uint8Array.from([2, header.value]);
         case "short":
           const shortView = new DataView(new ArrayBuffer(3));
-          shortView.setUint8(0, HEADER_VALUE_TYPE.short);
+          shortView.setUint8(0, 3);
           shortView.setInt16(1, header.value, false);
           return new Uint8Array(shortView.buffer);
         case "integer":
           const intView = new DataView(new ArrayBuffer(5));
-          intView.setUint8(0, HEADER_VALUE_TYPE.integer);
+          intView.setUint8(0, 4);
           intView.setInt32(1, header.value, false);
           return new Uint8Array(intView.buffer);
         case "long":
           const longBytes = new Uint8Array(9);
-          longBytes[0] = HEADER_VALUE_TYPE.long;
+          longBytes[0] = 5;
           longBytes.set(header.value.bytes, 1);
           return longBytes;
         case "binary":
           const binView = new DataView(new ArrayBuffer(3 + header.value.byteLength));
-          binView.setUint8(0, HEADER_VALUE_TYPE.byteArray);
+          binView.setUint8(0, 6);
           binView.setUint16(1, header.value.byteLength, false);
           const binBytes = new Uint8Array(binView.buffer);
           binBytes.set(header.value, 3);
@@ -9883,14 +9873,14 @@ var require_event_streams = __commonJS((exports) => {
         case "string":
           const utf8Bytes = this.fromUtf8(header.value);
           const strView = new DataView(new ArrayBuffer(3 + utf8Bytes.byteLength));
-          strView.setUint8(0, HEADER_VALUE_TYPE.string);
+          strView.setUint8(0, 7);
           strView.setUint16(1, utf8Bytes.byteLength, false);
           const strBytes = new Uint8Array(strView.buffer);
           strBytes.set(utf8Bytes, 3);
           return strBytes;
         case "timestamp":
           const tsBytes = new Uint8Array(9);
-          tsBytes[0] = HEADER_VALUE_TYPE.timestamp;
+          tsBytes[0] = 8;
           tsBytes.set(Int64.fromNumber(header.value.valueOf()).bytes, 1);
           return tsBytes;
         case "uuid":
@@ -9898,7 +9888,7 @@ var require_event_streams = __commonJS((exports) => {
             throw new Error(`Invalid UUID received: ${header.value}`);
           }
           const uuidBytes = new Uint8Array(17);
-          uuidBytes[0] = HEADER_VALUE_TYPE.uuid;
+          uuidBytes[0] = 9;
           uuidBytes.set(fromHex(header.value.replace(/-/g, "")), 1);
           return uuidBytes;
       }
@@ -9911,46 +9901,46 @@ var require_event_streams = __commonJS((exports) => {
         const name = this.toUtf8(new Uint8Array(headers.buffer, headers.byteOffset + position, nameLength));
         position += nameLength;
         switch (headers.getUint8(position++)) {
-          case HEADER_VALUE_TYPE.boolTrue:
+          case 0:
             out[name] = {
               type: BOOLEAN_TAG,
               value: true
             };
             break;
-          case HEADER_VALUE_TYPE.boolFalse:
+          case 1:
             out[name] = {
               type: BOOLEAN_TAG,
               value: false
             };
             break;
-          case HEADER_VALUE_TYPE.byte:
+          case 2:
             out[name] = {
               type: BYTE_TAG,
               value: headers.getInt8(position++)
             };
             break;
-          case HEADER_VALUE_TYPE.short:
+          case 3:
             out[name] = {
               type: SHORT_TAG,
               value: headers.getInt16(position, false)
             };
             position += 2;
             break;
-          case HEADER_VALUE_TYPE.integer:
+          case 4:
             out[name] = {
               type: INT_TAG,
               value: headers.getInt32(position, false)
             };
             position += 4;
             break;
-          case HEADER_VALUE_TYPE.long:
+          case 5:
             out[name] = {
               type: LONG_TAG,
               value: new Int64(new Uint8Array(headers.buffer, headers.byteOffset + position, 8))
             };
             position += 8;
             break;
-          case HEADER_VALUE_TYPE.byteArray:
+          case 6:
             const binaryLength = headers.getUint16(position, false);
             position += 2;
             out[name] = {
@@ -9959,7 +9949,7 @@ var require_event_streams = __commonJS((exports) => {
             };
             position += binaryLength;
             break;
-          case HEADER_VALUE_TYPE.string:
+          case 7:
             const stringLength = headers.getUint16(position, false);
             position += 2;
             out[name] = {
@@ -9968,14 +9958,14 @@ var require_event_streams = __commonJS((exports) => {
             };
             position += stringLength;
             break;
-          case HEADER_VALUE_TYPE.timestamp:
+          case 8:
             out[name] = {
               type: TIMESTAMP_TAG,
               value: new Date(new Int64(new Uint8Array(headers.buffer, headers.byteOffset + position, 8)).valueOf())
             };
             position += 8;
             break;
-          case HEADER_VALUE_TYPE.uuid:
+          case 9:
             const uuidBytes = new Uint8Array(headers.buffer, headers.byteOffset + position, 16);
             position += 16;
             out[name] = {
@@ -10345,7 +10335,7 @@ var require_event_streams = __commonJS((exports) => {
       streamEnded = true;
     });
     while (!generationEnded) {
-      const value = await new Promise((resolve3) => setTimeout(() => resolve3(records.shift()), 0));
+      const value = await new Promise((resolve4) => setTimeout(() => resolve4(records.shift()), 0));
       if (value) {
         yield value;
       }
@@ -10398,7 +10388,7 @@ var require_event_streams = __commonJS((exports) => {
       this.defaultContentType = defaultContentType;
       this.compositeErrorRegistry = compositeErrorRegistry;
     }
-    async serializeEventStream({ eventStream, requestSchema, initialRequest }) {
+    async serializeEventStream({ eventStream, requestSchema, initialRequest, initialMessageType }) {
       const marshaller = this.marshaller;
       const eventStreamMember = requestSchema.getEventStreamMember();
       const unionSchema = requestSchema.getMemberSchema(eventStreamMember);
@@ -10409,7 +10399,7 @@ var require_event_streams = __commonJS((exports) => {
         async* [Symbol.asyncIterator]() {
           if (initialRequest) {
             const headers = {
-              ":event-type": { type: "string", value: "initial-request" },
+              ":event-type": { type: "string", value: initialMessageType ?? "initial-request" },
               ":message-type": { type: "string", value: "event" },
               ":content-type": { type: "string", value: defaultContentType }
             };
@@ -10453,7 +10443,7 @@ var require_event_streams = __commonJS((exports) => {
         };
       });
     }
-    async deserializeEventStream({ response, responseSchema, initialResponseContainer }) {
+    async deserializeEventStream({ response, responseSchema, initialResponseContainer, initialMessageType }) {
       const marshaller = this.marshaller;
       const eventStreamMember = responseSchema.getEventStreamMember();
       const unionSchema = responseSchema.getMemberSchema(eventStreamMember);
@@ -10468,7 +10458,7 @@ var require_event_streams = __commonJS((exports) => {
           }
         }
         const body = event[unionMember].body;
-        if (unionMember === "initial-response") {
+        if (unionMember === (initialMessageType ?? "initial-response")) {
           const dataObject = await this.deserializer.read(responseSchema, body);
           delete dataObject[eventStreamMember];
           return {
@@ -10663,7 +10653,7 @@ var require_event_streams = __commonJS((exports) => {
   exports.universalEventStreamSerdeProvider = eventStreamSerdeProvider$1;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/submodules/protocols/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/protocols/index.js
 var require_protocols = __commonJS((exports) => {
   var { Uint8ArrayBlobAdapter, sdkStreamMixin, splitEvery, splitHeader, fromBase64, _parseEpochTimestamp, _parseRfc7231DateTime, _parseRfc3339DateTimeWithOffset, LazyJsonString, NumericValue, toUtf8, fromUtf8, generateIdempotencyToken, toBase64, dateToUtcString, quoteHeader } = require_serde();
   var { TypeRegistry, NormalizedSchema, translateTraits } = require_schema();
@@ -11136,10 +11126,9 @@ var require_protocols = __commonJS((exports) => {
         if (eventStreamMember) {
           if (input[eventStreamMember]) {
             const initialRequest = {};
-            for (const [memberName, memberSchema] of ns.structIterator()) {
-              if (memberName !== eventStreamMember && input[memberName]) {
-                serializer.write(memberSchema, input[memberName]);
-                initialRequest[memberName] = serializer.flush();
+            for (const [memberName] of ns.structIterator()) {
+              if (memberName !== eventStreamMember && input[memberName] != null) {
+                initialRequest[memberName] = input[memberName];
               }
             }
             payload = await this.serializeEventStream({
@@ -11226,8 +11215,8 @@ var require_protocols = __commonJS((exports) => {
     async build() {
       const { hostname, protocol = "https", port, path: basePath } = await this.context.endpoint();
       this.path = basePath;
-      for (const resolvePath of this.resolvePathStack) {
-        resolvePath(this.path);
+      for (const resolvePath2 of this.resolvePathStack) {
+        resolvePath2(this.path);
       }
       return new HttpRequest({
         protocol,
@@ -11548,24 +11537,27 @@ var require_protocols = __commonJS((exports) => {
     }
   }
   var getHttpHandlerExtensionConfiguration = (runtimeConfig) => {
+    if (runtimeConfig.logger && runtimeConfig.logger.constructor?.name !== "NoOpLogger") {
+      runtimeConfig.requestHandler?.updateHttpClientConfig?.(Symbol.for("logger"), runtimeConfig.logger);
+    }
     return {
       setHttpHandler(handler) {
-        runtimeConfig.httpHandler = handler;
+        runtimeConfig.requestHandler = handler;
       },
       httpHandler() {
-        return runtimeConfig.httpHandler;
+        return runtimeConfig.requestHandler;
       },
       updateHttpClientConfig(key, value) {
-        runtimeConfig.httpHandler?.updateHttpClientConfig(key, value);
+        runtimeConfig.requestHandler?.updateHttpClientConfig(key, value);
       },
       httpHandlerConfigs() {
-        return runtimeConfig.httpHandler.httpHandlerConfigs();
+        return runtimeConfig.requestHandler.httpHandlerConfigs();
       }
     };
   };
   var resolveHttpHandlerRuntimeConfig = (httpHandlerExtensionConfiguration) => {
     return {
-      httpHandler: httpHandlerExtensionConfiguration.httpHandler()
+      requestHandler: httpHandlerExtensionConfiguration.httpHandler()
     };
   };
   var CONTENT_LENGTH_HEADER = "content-length";
@@ -11577,10 +11569,12 @@ var require_protocols = __commonJS((exports) => {
         if (body && Object.keys(headers).map((str) => str.toLowerCase()).indexOf(CONTENT_LENGTH_HEADER) === -1) {
           try {
             const length = bodyLengthChecker(body);
-            request.headers = {
-              ...request.headers,
-              [CONTENT_LENGTH_HEADER]: String(length)
-            };
+            if (length != null) {
+              request.headers = {
+                ...request.headers,
+                [CONTENT_LENGTH_HEADER]: String(length)
+              };
+            }
           } catch (ignored) {}
         }
       }
@@ -11649,7 +11643,7 @@ var require_protocols = __commonJS((exports) => {
   exports.resolvedPath = resolvedPath;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/submodules/retry/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/retry/index.js
 var require_retry = __commonJS((exports) => {
   var { Readable } = __require("stream");
   var { NoOpLogger, normalizeProvider } = require_client();
@@ -11836,7 +11830,7 @@ var require_retry = __commonJS((exports) => {
       }
     };
   }
-  var cooldown = (ms) => new Promise((resolve3) => setTimeout(resolve3, ms));
+  var cooldown = (ms) => new Promise((resolve4) => setTimeout(resolve4, ms));
   var isRetryStrategyV2 = (retryStrategy) => typeof retryStrategy.acquireInitialRetryToken !== "undefined" && typeof retryStrategy.refreshRetryTokenForRetry !== "undefined" && typeof retryStrategy.recordSuccess !== "undefined";
   var getRetryErrorInfo = (error, logger) => {
     const errorInfo = {
@@ -11935,7 +11929,7 @@ var require_retry = __commonJS((exports) => {
       this.refillTokenBucket();
       while (amount > this.availableTokens) {
         const delay = (amount - this.availableTokens) / this.fillRate * 1000;
-        await new Promise((resolve3) => DefaultRateLimiter.setTimeoutFn(resolve3, delay));
+        await new Promise((resolve4) => DefaultRateLimiter.setTimeoutFn(resolve4, delay));
         this.refillTokenBucket();
       }
       this.availableTokens = this.availableTokens - amount;
@@ -12277,7 +12271,7 @@ var require_retry = __commonJS((exports) => {
             const delayFromResponse = getDelayFromRetryAfterHeader(err.$response);
             const delay = Math.max(delayFromResponse || 0, delayFromDecider);
             totalDelay += delay;
-            await new Promise((resolve3) => setTimeout(resolve3, delay));
+            await new Promise((resolve4) => setTimeout(resolve4, delay));
             continue;
           }
           if (!err.$metadata) {
@@ -12575,7 +12569,7 @@ var require_invoke_store = __commonJS((exports) => {
   exports.InvokeStoreBase = InvokeStoreBase;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/index.js
 var require_dist_cjs2 = __commonJS((exports) => {
   var { getSmithyContext } = require_transport();
   exports.getSmithyContext = getSmithyContext;
@@ -13741,7 +13735,7 @@ var require_es5 = __commonJS((exports, module) => {
   });
 });
 
-// ../../node_modules/.bun/@aws-sdk+core@3.977.6/node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js
+// ../../node_modules/.bun/@aws-sdk+core@3.977.8/node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js
 var require_client2 = __commonJS((exports) => {
   var { Retry, RETRY_MODES } = require_retry();
   var { HttpRequest, parseUrl } = require_protocols();
@@ -14679,7 +14673,7 @@ More information can be found at: https://a.co/c895JFp`);
   exports.userAgentMiddleware = userAgentMiddleware;
 });
 
-// ../../node_modules/.bun/@smithy+signature-v4@5.6.12/node_modules/@smithy/signature-v4/dist-cjs/index.js
+// ../../node_modules/.bun/@smithy+signature-v4@5.7.2/node_modules/@smithy/signature-v4/dist-cjs/index.js
 var require_dist_cjs3 = __commonJS((exports) => {
   var { fromUtf8, fromHex, toHex, toUint8Array, isArrayBuffer } = require_serde();
   var { normalizeProvider } = require_client();
@@ -14703,27 +14697,27 @@ var require_dist_cjs3 = __commonJS((exports) => {
     formatHeaderValue(header) {
       switch (header.type) {
         case "boolean":
-          return Uint8Array.from([header.value ? HEADER_VALUE_TYPE.boolTrue : HEADER_VALUE_TYPE.boolFalse]);
+          return Uint8Array.from([header.value ? 0 : 1]);
         case "byte":
-          return Uint8Array.from([HEADER_VALUE_TYPE.byte, header.value]);
+          return Uint8Array.from([2, header.value]);
         case "short":
           const shortView = new DataView(new ArrayBuffer(3));
-          shortView.setUint8(0, HEADER_VALUE_TYPE.short);
+          shortView.setUint8(0, 3);
           shortView.setInt16(1, header.value, false);
           return new Uint8Array(shortView.buffer);
         case "integer":
           const intView = new DataView(new ArrayBuffer(5));
-          intView.setUint8(0, HEADER_VALUE_TYPE.integer);
+          intView.setUint8(0, 4);
           intView.setInt32(1, header.value, false);
           return new Uint8Array(intView.buffer);
         case "long":
           const longBytes = new Uint8Array(9);
-          longBytes[0] = HEADER_VALUE_TYPE.long;
+          longBytes[0] = 5;
           longBytes.set(header.value.bytes, 1);
           return longBytes;
         case "binary":
           const binView = new DataView(new ArrayBuffer(3 + header.value.byteLength));
-          binView.setUint8(0, HEADER_VALUE_TYPE.byteArray);
+          binView.setUint8(0, 6);
           binView.setUint16(1, header.value.byteLength, false);
           const binBytes = new Uint8Array(binView.buffer);
           binBytes.set(header.value, 3);
@@ -14731,14 +14725,14 @@ var require_dist_cjs3 = __commonJS((exports) => {
         case "string":
           const utf8Bytes = fromUtf8(header.value);
           const strView = new DataView(new ArrayBuffer(3 + utf8Bytes.byteLength));
-          strView.setUint8(0, HEADER_VALUE_TYPE.string);
+          strView.setUint8(0, 7);
           strView.setUint16(1, utf8Bytes.byteLength, false);
           const strBytes = new Uint8Array(strView.buffer);
           strBytes.set(utf8Bytes, 3);
           return strBytes;
         case "timestamp":
           const tsBytes = new Uint8Array(9);
-          tsBytes[0] = HEADER_VALUE_TYPE.timestamp;
+          tsBytes[0] = 8;
           tsBytes.set(Int64.fromNumber(header.value.valueOf()).bytes, 1);
           return tsBytes;
         case "uuid":
@@ -14746,7 +14740,7 @@ var require_dist_cjs3 = __commonJS((exports) => {
             throw new Error(`Invalid UUID received: ${header.value}`);
           }
           const uuidBytes = new Uint8Array(17);
-          uuidBytes[0] = HEADER_VALUE_TYPE.uuid;
+          uuidBytes[0] = 9;
           uuidBytes.set(fromHex(header.value.replace(/-/g, "")), 1);
           return uuidBytes;
       }
@@ -15219,7 +15213,7 @@ ${toHex(hashedRequest)}`;
   exports.signatureV4aContainer = signatureV4aContainer;
 });
 
-// ../../node_modules/.bun/@aws-sdk+core@3.977.6/node_modules/@aws-sdk/core/dist-cjs/submodules/httpAuthSchemes/index.js
+// ../../node_modules/.bun/@aws-sdk+core@3.977.8/node_modules/@aws-sdk/core/dist-cjs/submodules/httpAuthSchemes/index.js
 var require_httpAuthSchemes = __commonJS((exports) => {
   var { ProviderError, booleanSelector, SelectorType, loadConfig } = require_config();
   var { setCredentialFeature } = require_client2();
@@ -15549,7 +15543,7 @@ var require_httpAuthSchemes = __commonJS((exports) => {
   exports.validateSigningProperties = validateSigningProperties;
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-env@3.972.67/node_modules/@aws-sdk/credential-provider-env/dist-es/fromEnv.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-env@3.972.69/node_modules/@aws-sdk/credential-provider-env/dist-es/fromEnv.js
 var import_client3, import_config, ENV_KEY = "AWS_ACCESS_KEY_ID", ENV_SECRET = "AWS_SECRET_ACCESS_KEY", ENV_SESSION = "AWS_SESSION_TOKEN", ENV_EXPIRATION = "AWS_CREDENTIAL_EXPIRATION", ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE", ENV_ACCOUNT_ID = "AWS_ACCOUNT_ID", fromEnv = (init) => async () => {
   init?.logger?.debug("@aws-sdk/credential-provider-env - fromEnv");
   const accessKeyId = process.env[ENV_KEY];
@@ -15577,7 +15571,7 @@ var init_fromEnv = __esm(() => {
   import_config = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-env@3.972.67/node_modules/@aws-sdk/credential-provider-env/dist-es/index.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-env@3.972.69/node_modules/@aws-sdk/credential-provider-env/dist-es/index.js
 var exports_dist_es = {};
 __export(exports_dist_es, {
   fromEnv: () => fromEnv,
@@ -15592,7 +15586,7 @@ var init_dist_es = __esm(() => {
   init_fromEnv();
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/ImdsCredentials.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/ImdsCredentials.js
 var isImdsCredentials = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.AccessKeyId === "string" && typeof arg.SecretAccessKey === "string" && typeof arg.Token === "string" && typeof arg.Expiration === "string", fromImdsCredentials = (creds) => ({
   accessKeyId: creds.AccessKeyId,
   secretAccessKey: creds.SecretAccessKey,
@@ -15601,16 +15595,16 @@ var isImdsCredentials = (arg) => Boolean(arg) && typeof arg === "object" && type
   ...creds.AccountId && { accountId: creds.AccountId }
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/RemoteProviderInit.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/RemoteProviderInit.js
 var DEFAULT_TIMEOUT = 1000, DEFAULT_MAX_RETRIES = 0, providerConfigFromInit = ({ maxRetries = DEFAULT_MAX_RETRIES, timeout = DEFAULT_TIMEOUT }) => ({ maxRetries, timeout });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/node-http.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/node-http.js
 import node_http from "http";
 var init_node_http = () => {};
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/httpRequest.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/httpRequest.js
 function httpRequest(options) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const req = node_http.request({
       method: "GET",
       ...options,
@@ -15635,7 +15629,7 @@ function httpRequest(options) {
         chunks.push(chunk);
       });
       res.on("end", () => {
-        resolve3(Buffer.concat(chunks));
+        resolve4(Buffer.concat(chunks));
         req.destroy();
       });
     });
@@ -15648,7 +15642,7 @@ var init_httpRequest = __esm(() => {
   import_config2 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/retry.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/retry.js
 var retry = (toRetry, maxRetries) => {
   let promise = toRetry();
   for (let i = 0;i < maxRetries; i++) {
@@ -15657,7 +15651,7 @@ var retry = (toRetry, maxRetries) => {
   return promise;
 };
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/fromContainerMetadata.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/fromContainerMetadata.js
 var import_config3, ENV_CMDS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI", ENV_CMDS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI", ENV_CMDS_AUTH_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN", fromContainerMetadata = (init = {}) => {
   const { timeout, maxRetries } = providerConfigFromInit(init);
   return () => retry(async () => {
@@ -15727,7 +15721,7 @@ var init_fromContainerMetadata = __esm(() => {
   GREENGRASS_PROTOCOLS = new Set(["http:", "https:"]);
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/error/InstanceMetadataV1FallbackError.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/error/InstanceMetadataV1FallbackError.js
 var import_config4, InstanceMetadataV1FallbackError;
 var init_InstanceMetadataV1FallbackError = __esm(() => {
   import_config4 = __toESM(require_config(), 1);
@@ -15742,7 +15736,7 @@ var init_InstanceMetadataV1FallbackError = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/config/Endpoint.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/config/Endpoint.js
 var Endpoint;
 var init_Endpoint = __esm(() => {
   (function(Endpoint2) {
@@ -15751,7 +15745,7 @@ var init_Endpoint = __esm(() => {
   })(Endpoint || (Endpoint = {}));
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointConfigOptions.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointConfigOptions.js
 var ENV_ENDPOINT_NAME = "AWS_EC2_METADATA_SERVICE_ENDPOINT", CONFIG_ENDPOINT_NAME = "ec2_metadata_service_endpoint", ENDPOINT_CONFIG_OPTIONS;
 var init_EndpointConfigOptions = __esm(() => {
   ENDPOINT_CONFIG_OPTIONS = {
@@ -15761,7 +15755,7 @@ var init_EndpointConfigOptions = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointMode.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointMode.js
 var EndpointMode;
 var init_EndpointMode = __esm(() => {
   (function(EndpointMode2) {
@@ -15770,7 +15764,7 @@ var init_EndpointMode = __esm(() => {
   })(EndpointMode || (EndpointMode = {}));
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointModeConfigOptions.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointModeConfigOptions.js
 var ENV_ENDPOINT_MODE_NAME = "AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE", CONFIG_ENDPOINT_MODE_NAME = "ec2_metadata_service_endpoint_mode", ENDPOINT_MODE_CONFIG_OPTIONS;
 var init_EndpointModeConfigOptions = __esm(() => {
   init_EndpointMode();
@@ -15781,7 +15775,7 @@ var init_EndpointModeConfigOptions = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/utils/getInstanceMetadataEndpoint.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/utils/getInstanceMetadataEndpoint.js
 var import_config5, import_protocols, getInstanceMetadataEndpoint = async () => import_protocols.parseUrl(await getFromEndpointConfig() || await getFromEndpointModeConfig()), getFromEndpointConfig = async () => import_config5.loadConfig(ENDPOINT_CONFIG_OPTIONS)(), getFromEndpointModeConfig = async () => {
   const endpointMode = await import_config5.loadConfig(ENDPOINT_MODE_CONFIG_OPTIONS)();
   switch (endpointMode) {
@@ -15802,7 +15796,7 @@ var init_getInstanceMetadataEndpoint = __esm(() => {
   import_protocols = __toESM(require_protocols(), 1);
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/utils/getExtendedInstanceMetadataCredentials.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/utils/getExtendedInstanceMetadataCredentials.js
 var STATIC_STABILITY_REFRESH_INTERVAL_SECONDS, STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS, STATIC_STABILITY_DOC_URL = "https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html", getExtendedInstanceMetadataCredentials = (credentials, logger) => {
   const refreshInterval = STATIC_STABILITY_REFRESH_INTERVAL_SECONDS + Math.floor(Math.random() * STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS);
   const newExpiration = new Date(Date.now() + refreshInterval * 1000);
@@ -15820,7 +15814,7 @@ var init_getExtendedInstanceMetadataCredentials = __esm(() => {
   STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS = 5 * 60;
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/utils/staticStabilityProvider.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/utils/staticStabilityProvider.js
 var staticStabilityProvider = (provider, options = {}) => {
   const logger = options?.logger || console;
   let pastCredentials;
@@ -15847,7 +15841,7 @@ var init_staticStabilityProvider = __esm(() => {
   init_getExtendedInstanceMetadataCredentials();
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/fromInstanceMetadata.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/fromInstanceMetadata.js
 var import_config6, IMDS_PATH = "/latest/meta-data/iam/security-credentials/", IMDS_TOKEN_PATH = "/latest/api/token", AWS_EC2_METADATA_V1_DISABLED = "AWS_EC2_METADATA_V1_DISABLED", PROFILE_AWS_EC2_METADATA_V1_DISABLED = "ec2_metadata_v1_disabled", X_AWS_EC2_METADATA_TOKEN = "x-aws-ec2-metadata-token", fromInstanceMetadata = (init = {}) => staticStabilityProvider(getInstanceMetadataProvider(init), { logger: init.logger }), getInstanceMetadataProvider = (init = {}) => {
   let disableFetchToken = false;
   const { logger, profile } = init;
@@ -15859,9 +15853,9 @@ var import_config6, IMDS_PATH = "/latest/meta-data/iam/security-credentials/", I
       let fallbackBlockedFromProcessEnv = false;
       const configValue = await import_config6.loadConfig({
         environmentVariableSelector: (env) => {
-          const envValue = env[AWS_EC2_METADATA_V1_DISABLED];
-          fallbackBlockedFromProcessEnv = !!envValue && envValue !== "false";
-          if (envValue === undefined) {
+          const envValue2 = env[AWS_EC2_METADATA_V1_DISABLED];
+          fallbackBlockedFromProcessEnv = !!envValue2 && envValue2 !== "false";
+          if (envValue2 === undefined) {
             throw new import_config6.CredentialsProviderError(`${AWS_EC2_METADATA_V1_DISABLED} not set in env, checking config file next.`, { logger: init.logger });
           }
           return fallbackBlockedFromProcessEnv;
@@ -15967,7 +15961,7 @@ var init_fromInstanceMetadata = __esm(() => {
   import_config6 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.4.16/node_modules/@smithy/credential-provider-imds/dist-es/index.js
+// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/index.js
 var exports_dist_es2 = {};
 __export(exports_dist_es2, {
   providerConfigFromInit: () => providerConfigFromInit,
@@ -15990,7 +15984,7 @@ var init_dist_es2 = __esm(() => {
   init_Endpoint();
 });
 
-// ../../node_modules/.bun/@smithy+node-http-handler@4.9.13/node_modules/@smithy/node-http-handler/dist-cjs/index.js
+// ../../node_modules/.bun/@smithy+node-http-handler@4.11.2/node_modules/@smithy/node-http-handler/dist-cjs/index.js
 var require_dist_cjs4 = __commonJS((exports) => {
   var { buildQueryString, HttpResponse } = require_protocols();
   var node_https = __require("https");
@@ -16129,21 +16123,21 @@ var require_dist_cjs4 = __commonJS((exports) => {
     let sendBody = true;
     if (!externalAgent && expect === "100-continue") {
       sendBody = await Promise.race([
-        new Promise((resolve3) => {
-          timeoutId = Number(timing.setTimeout(() => resolve3(true), Math.max(MIN_WAIT_TIME, maxContinueTimeoutMs)));
+        new Promise((resolve4) => {
+          timeoutId = Number(timing.setTimeout(() => resolve4(true), Math.max(MIN_WAIT_TIME, maxContinueTimeoutMs)));
         }),
-        new Promise((resolve3) => {
+        new Promise((resolve4) => {
           httpRequest2.on("continue", () => {
             timing.clearTimeout(timeoutId);
-            resolve3(true);
+            resolve4(true);
           });
           httpRequest2.on("response", () => {
             timing.clearTimeout(timeoutId);
-            resolve3(false);
+            resolve4(false);
           });
           httpRequest2.on("error", () => {
             timing.clearTimeout(timeoutId);
-            resolve3(false);
+            resolve4(false);
           });
         })
       ]);
@@ -16218,13 +16212,13 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       return socketWarningTimestamp;
     }
     constructor(options) {
-      this.configProvider = new Promise((resolve3, reject) => {
+      this.configProvider = new Promise((resolve4, reject) => {
         if (typeof options === "function") {
           options().then((_options) => {
-            resolve3(this.resolveDefaultConfig(_options));
+            resolve4(this.resolveDefaultConfig(_options));
           }).catch(reject);
         } else {
-          resolve3(this.resolveDefaultConfig(options));
+          resolve4(this.resolveDefaultConfig(options));
         }
       });
     }
@@ -16237,6 +16231,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
         this.config = await this.configProvider;
       }
       const config = this.config;
+      const logger = config.logger;
       const isSSL = request.protocol === "https:";
       if (!isSSL && !this.config.httpAgent) {
         this.config.httpAgent = await this.config.httpAgentProvider();
@@ -16255,7 +16250,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
           timing.clearTimeout(socketTimeoutId);
           timing.clearTimeout(keepAliveTimeoutId);
         };
-        const resolve3 = async (arg) => {
+        const resolve4 = async (arg) => {
           await writeRequestBodyPromise;
           clearTimeouts();
           _resolve(arg);
@@ -16280,7 +16275,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
           });
         }
         socketWarningTimeoutId = timing.setTimeout(() => {
-          this.socketWarningTimestamp = NodeHttpHandler.checkSocketUsage(agent, this.socketWarningTimestamp, config.logger);
+          this.socketWarningTimestamp = NodeHttpHandler.checkSocketUsage(agent, this.socketWarningTimestamp, logger);
         }, config.socketAcquisitionWarningTimeout ?? (config.requestTimeout ?? 2000) + (config.connectionTimeout ?? 1000));
         const queryString = request.query ? buildQueryString(request.query) : "";
         let auth = undefined;
@@ -16319,7 +16314,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             headers: getTransformedHeaders(res.headers),
             body: res
           });
-          resolve3({ response: httpResponse });
+          resolve4({ response: httpResponse });
         });
         req.on("error", (err) => {
           if (NODEJS_TIMEOUT_ERROR_CODES.includes(err.code)) {
@@ -16344,7 +16339,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
         }
         const effectiveRequestTimeout = requestTimeout ?? config.requestTimeout;
         connectionTimeoutId = setConnectionTimeout(req, reject, config.connectionTimeout);
-        requestTimeoutId = setRequestTimeout(req, reject, effectiveRequestTimeout, config.throwOnRequestTimeout, config.logger ?? console);
+        requestTimeoutId = setRequestTimeout(req, reject, effectiveRequestTimeout, config.throwOnRequestTimeout, logger ?? console);
         socketTimeoutId = setSocketTimeout(req, reject, config.socketTimeout);
         const httpAgent = nodeHttpsOptions.agent;
         if (typeof httpAgent === "object" && "keepAlive" in httpAgent) {
@@ -16362,6 +16357,12 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
     updateHttpClientConfig(key, value) {
       this.config = undefined;
       this.configProvider = this.configProvider.then((config) => {
+        if (key === Symbol.for("logger")) {
+          return {
+            ...config,
+            logger: config.logger ?? value
+          };
+        }
         return {
           ...config,
           [key]: value
@@ -16645,13 +16646,13 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       return new NodeHttp2Handler(instanceOrOptions);
     }
     constructor(options) {
-      this.configProvider = new Promise((resolve3, reject) => {
+      this.configProvider = new Promise((resolve4, reject) => {
         if (typeof options === "function") {
           options().then((opts) => {
-            resolve3(opts || {});
+            resolve4(opts || {});
           }).catch(reject);
         } else {
-          resolve3(options || {});
+          resolve4(options || {});
         }
       });
     }
@@ -16676,7 +16677,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       return new Promise((_resolve, _reject) => {
         let fulfilled = false;
         let writeRequestBodyPromise = undefined;
-        const resolve3 = async (arg) => {
+        const resolve4 = async (arg) => {
           await writeRequestBodyPromise;
           _resolve(arg);
         };
@@ -16761,7 +16762,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             body: clientHttp2Stream
           });
           fulfilled = true;
-          resolve3({ response: httpResponse });
+          resolve4({ response: httpResponse });
           if (useIsolatedSession) {
             session.close();
           }
@@ -16797,7 +16798,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
   exports.NodeHttpHandler = NodeHttpHandler;
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.69/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/checkUrl.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.71/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/checkUrl.js
 var import_config7, ECS_CONTAINER_HOST = "169.254.170.2", EKS_CONTAINER_HOST_IPv4 = "169.254.170.23", EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]", checkUrl = (url, logger) => {
   if (url.protocol === "https:") {
     return;
@@ -16831,7 +16832,7 @@ var init_checkUrl = __esm(() => {
   import_config7 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.69/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/requestHelpers.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.71/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/requestHelpers.js
 function createGetRequest(url) {
   return new import_protocols2.HttpRequest({
     protocol: url.protocol,
@@ -16880,21 +16881,21 @@ var init_requestHelpers = __esm(() => {
   import_serde2 = __toESM(require_serde(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.69/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/retry-wrapper.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.71/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/retry-wrapper.js
 var retryWrapper = (toRetry, maxRetries, delayMs) => {
   return async () => {
     for (let i = 0;i < maxRetries; ++i) {
       try {
         return await toRetry();
       } catch (e) {
-        await new Promise((resolve3) => setTimeout(resolve3, delayMs));
+        await new Promise((resolve4) => setTimeout(resolve4, delayMs));
       }
     }
     return await toRetry();
   };
 };
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.69/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.71/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
 import fs from "fs/promises";
 var import_client4, import_config9, import_node_http_handler, AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI", DEFAULT_LINK_LOCAL_HOST = "http://169.254.170.2", AWS_CONTAINER_CREDENTIALS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI", AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE", AWS_CONTAINER_AUTHORIZATION_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN", fromHttp = (options = {}) => {
   options.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");
@@ -16960,7 +16961,7 @@ var init_fromHttp = __esm(() => {
   import_node_http_handler = __toESM(require_dist_cjs4(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.69/node_modules/@aws-sdk/credential-provider-http/dist-es/index.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.71/node_modules/@aws-sdk/credential-provider-http/dist-es/index.js
 var exports_dist_es3 = {};
 __export(exports_dist_es3, {
   fromHttp: () => fromHttp
@@ -16969,16 +16970,16 @@ var init_dist_es3 = __esm(() => {
   init_fromHttp();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.11/node_modules/@aws-sdk/credential-provider-sso/dist-es/isSsoProfile.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/isSsoProfile.js
 var isSsoProfile = (arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string");
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1103.0/node_modules/@aws-sdk/token-providers/dist-es/constants.js
+// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/constants.js
 var EXPIRE_WINDOW_MS, REFRESH_MESSAGE = `To refresh this SSO session run 'aws sso login' with the corresponding profile.`;
 var init_constants = __esm(() => {
   EXPIRE_WINDOW_MS = 5 * 60 * 1000;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.31.1/node_modules/@smithy/core/dist-cjs/submodules/cbor/index.js
+// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/cbor/index.js
 var require_cbor = __commonJS((exports) => {
   var { nv, NumericValue, calculateBodyLength, generateIdempotencyToken, fromBase64, _parseEpochTimestamp } = require_serde();
   var { HttpRequest: HttpRequest2, collectBody, SerdeContext, RpcProtocol } = require_protocols();
@@ -19072,9 +19073,9 @@ var require_cbor = __commonJS((exports) => {
           this.serializer.write(15, {});
           request.body = this.serializer.flush();
         }
-        try {
+        if (request.body instanceof Uint8Array) {
           request.headers["content-length"] = String(request.body.byteLength);
-        } catch (ignored) {}
+        }
       }
       const { service, operation } = getSmithyContext2(context);
       const path = `/service/${service}/operation/${operation}`;
@@ -19346,7 +19347,7 @@ var require_cbor = __commonJS((exports) => {
   exports.tagSymbol = tagSymbol;
 });
 
-// ../../node_modules/.bun/@aws-sdk+xml-builder@3.972.37/node_modules/@aws-sdk/xml-builder/dist-cjs/index.js
+// ../../node_modules/.bun/@aws-sdk+xml-builder@3.972.39/node_modules/@aws-sdk/xml-builder/dist-cjs/index.js
 var require_dist_cjs5 = __commonJS((exports) => {
   var ATTR_ESCAPE_RE = /[&<>"]/g;
   var ATTR_ESCAPE_MAP = {
@@ -19714,7 +19715,7 @@ var require_dist_cjs5 = __commonJS((exports) => {
   exports.parseXML = parseXML;
 });
 
-// ../../node_modules/.bun/@aws-sdk+core@3.977.6/node_modules/@aws-sdk/core/dist-cjs/submodules/protocols/index.js
+// ../../node_modules/.bun/@aws-sdk+core@3.977.8/node_modules/@aws-sdk/core/dist-cjs/submodules/protocols/index.js
 var require_protocols2 = __commonJS((exports) => {
   var { SmithyRpcV2CborProtocol, loadSmithyRpcV2CborErrorCode } = require_cbor();
   var { TypeRegistry, NormalizedSchema, deref } = require_schema();
@@ -22555,7 +22556,7 @@ var require_protocols2 = __commonJS((exports) => {
   exports.parseXmlErrorBody = parseXmlErrorBody;
 });
 
-// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.41/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/index.js
+// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.43/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/index.js
 var require_sso_oidc = __commonJS((exports) => {
   var { awsEndpointFunctions, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$1, createDefaultUserAgentProvider, NODE_APP_ID_CONFIG_OPTIONS, getAwsRegionExtensionConfiguration, resolveAwsRegionExtensionConfiguration, resolveUserAgentConfig, resolveHostHeaderConfig, getUserAgentPlugin, getHostHeaderPlugin, getLoggerPlugin, getRecursionDetectionPlugin } = require_client2();
   var { NoAuthSigner, getHttpAuthSchemeEndpointRuleSetPlugin, DefaultIdentityProviderConfig, getHttpSigningPlugin } = require_dist_cjs2();
@@ -22633,7 +22634,7 @@ var require_sso_oidc = __commonJS((exports) => {
     Region: { type: "builtInParams", name: "region" },
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
   };
-  var version = "3.997.40";
+  var version = "3.997.42";
   var packageInfo = {
     version
   };
@@ -23310,7 +23311,7 @@ var require_sso_oidc = __commonJS((exports) => {
   exports.errorTypeRegistries = errorTypeRegistries;
 });
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1103.0/node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js
+// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js
 var getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {
   const { SSOOIDCClient } = await Promise.resolve().then(() => __toESM(require_sso_oidc(), 1));
   const coalesce = (prop) => init.clientConfig?.[prop] ?? init.parentClientConfig?.[prop] ?? callerClientConfig?.[prop];
@@ -23322,7 +23323,7 @@ var getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {
   return ssoOidcClient;
 };
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1103.0/node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js
+// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js
 var getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConfig) => {
   const { CreateTokenCommand } = await Promise.resolve().then(() => __toESM(require_sso_oidc(), 1));
   const ssoOidcClient = await getSsoOidcClient(ssoRegion, init, callerClientConfig);
@@ -23335,7 +23336,7 @@ var getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConf
 };
 var init_getNewSsoOidcToken = () => {};
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1103.0/node_modules/@aws-sdk/token-providers/dist-es/validateTokenExpiry.js
+// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/validateTokenExpiry.js
 var import_config11, validateTokenExpiry = (token) => {
   if (token.expiration && token.expiration.getTime() < Date.now()) {
     throw new import_config11.TokenProviderError(`Token is expired. ${REFRESH_MESSAGE}`, false);
@@ -23346,7 +23347,7 @@ var init_validateTokenExpiry = __esm(() => {
   import_config11 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1103.0/node_modules/@aws-sdk/token-providers/dist-es/validateTokenKey.js
+// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/validateTokenKey.js
 var import_config12, validateTokenKey = (key, value, forRefresh = false) => {
   if (typeof value === "undefined") {
     throw new import_config12.TokenProviderError(`Value not present for '${key}' in SSO Token${forRefresh ? ". Cannot refresh" : ""}. ${REFRESH_MESSAGE}`, false);
@@ -23357,7 +23358,7 @@ var init_validateTokenKey = __esm(() => {
   import_config12 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1103.0/node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js
+// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js
 import { promises as fsPromises } from "fs";
 var import_config13, writeFile, writeSSOTokenToFile = (id, ssoToken) => {
   const tokenFilepath = import_config13.getSSOTokenFilepath(id);
@@ -23369,7 +23370,7 @@ var init_writeSSOTokenToFile = __esm(() => {
   ({ writeFile } = fsPromises);
 });
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1103.0/node_modules/@aws-sdk/token-providers/dist-es/fromSso.js
+// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/fromSso.js
 var import_config14, lastRefreshAttemptTime, fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
   init.logger?.debug("@aws-sdk/token-providers - fromSso");
   const profiles = await import_config14.parseKnownFiles(init);
@@ -23448,12 +23449,12 @@ var init_fromSso = __esm(() => {
   lastRefreshAttemptTime = new Date(0);
 });
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1103.0/node_modules/@aws-sdk/token-providers/dist-es/index.js
+// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/index.js
 var init_dist_es4 = __esm(() => {
   init_fromSso();
 });
 
-// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.41/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso/index.js
+// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.43/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso/index.js
 function createAwsAuthSigv4HttpAuthOption2(authParameters) {
   return {
     schemeId: "aws.auth#sigv4",
@@ -23504,7 +23505,7 @@ var awsEndpointFunctions, emitWarningIfUnsupportedVersion$1, createDefaultUserAg
     useFipsEndpoint: options.useFipsEndpoint ?? false,
     defaultSigningName: "awsssoportal"
   });
-}, commonParams2, version = "3.997.40", packageInfo, k = "ref", a = -1, b = true, c = "isSet", d = "PartitionResult", e = "booleanEquals", f = "getAttr", g, h, i, j, _data, root = 2, r = 1e8, nodes, bdd, cache, defaultEndpointResolver = (endpointParams, context = {}) => {
+}, commonParams2, version = "3.997.42", packageInfo, k = "ref", a = -1, b = true, c = "isSet", d = "PartitionResult", e = "booleanEquals", f = "getAttr", g, h, i, j, _data, root = 2, r = 1e8, nodes, bdd, cache, defaultEndpointResolver = (endpointParams, context = {}) => {
   return cache.get(endpointParams, () => decideEndpoint(bdd, {
     endpointParams,
     logger: context.logger
@@ -23901,7 +23902,7 @@ var init_sso = __esm(() => {
   $SSOClient = SSOClient;
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.11/node_modules/@aws-sdk/credential-provider-sso/dist-es/loadSso.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/loadSso.js
 var exports_loadSso = {};
 __export(exports_loadSso, {
   SSOClient: () => $SSOClient,
@@ -23911,7 +23912,7 @@ var init_loadSso = __esm(() => {
   init_sso();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.11/node_modules/@aws-sdk/credential-provider-sso/dist-es/resolveSSOCredentials.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/resolveSSOCredentials.js
 var import_client5, import_config15, SHOULD_FAIL_CREDENTIAL_CHAIN = false, resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger }) => {
   let token;
   const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;
@@ -24000,7 +24001,7 @@ var init_resolveSSOCredentials = __esm(() => {
   import_config15 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.11/node_modules/@aws-sdk/credential-provider-sso/dist-es/validateSsoProfile.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/validateSsoProfile.js
 var import_config16, validateSsoProfile = (profile, logger) => {
   const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;
   if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {
@@ -24013,7 +24014,7 @@ var init_validateSsoProfile = __esm(() => {
   import_config16 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.11/node_modules/@aws-sdk/credential-provider-sso/dist-es/fromSSO.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/fromSSO.js
 var import_config17, fromSSO = (init = {}) => async ({ callerClientConfig } = {}) => {
   init.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");
   const { ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession } = init;
@@ -24095,7 +24096,7 @@ var init_fromSSO = __esm(() => {
   import_config17 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.11/node_modules/@aws-sdk/credential-provider-sso/dist-es/index.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/index.js
 var exports_dist_es4 = {};
 __export(exports_dist_es4, {
   validateSsoProfile: () => validateSsoProfile,
@@ -24107,7 +24108,7 @@ var init_dist_es5 = __esm(() => {
   init_validateSsoProfile();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.12/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveCredentialSource.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveCredentialSource.js
 var import_client6, import_config18, resolveCredentialSource = (credentialSource, profileName, logger) => {
   const sourceProvidersMap = {
     EcsContainer: async (options) => {
@@ -24138,7 +24139,7 @@ var init_resolveCredentialSource = __esm(() => {
   import_config18 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+signature-v4-multi-region@3.996.43/node_modules/@aws-sdk/signature-v4-multi-region/dist-cjs/index.js
+// ../../node_modules/.bun/@aws-sdk+signature-v4-multi-region@3.996.45/node_modules/@aws-sdk/signature-v4-multi-region/dist-cjs/index.js
 var require_dist_cjs6 = __commonJS((exports) => {
   var { SignatureV4, signatureV4aContainer } = require_dist_cjs3();
   var signatureV4CrtContainer = {
@@ -24270,7 +24271,7 @@ var require_dist_cjs6 = __commonJS((exports) => {
   exports.signatureV4CrtContainer = signatureV4CrtContainer;
 });
 
-// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.41/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js
+// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.43/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js
 var require_sts = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions2, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$12, createDefaultUserAgentProvider: createDefaultUserAgentProvider2, NODE_APP_ID_CONFIG_OPTIONS: NODE_APP_ID_CONFIG_OPTIONS2, getAwsRegionExtensionConfiguration: getAwsRegionExtensionConfiguration2, resolveAwsRegionExtensionConfiguration: resolveAwsRegionExtensionConfiguration2, resolveUserAgentConfig: resolveUserAgentConfig2, resolveHostHeaderConfig: resolveHostHeaderConfig2, getUserAgentPlugin: getUserAgentPlugin2, getHostHeaderPlugin: getHostHeaderPlugin2, getLoggerPlugin: getLoggerPlugin2, getRecursionDetectionPlugin: getRecursionDetectionPlugin2, setCredentialFeature: setCredentialFeature5, stsRegionDefaultResolver } = require_client2();
   var { NoAuthSigner: NoAuthSigner2, getHttpAuthSchemeEndpointRuleSetPlugin: getHttpAuthSchemeEndpointRuleSetPlugin2, DefaultIdentityProviderConfig: DefaultIdentityProviderConfig2, getHttpSigningPlugin: getHttpSigningPlugin2 } = require_dist_cjs2();
@@ -24601,7 +24602,7 @@ var require_sts = __commonJS((exports) => {
     Region: { type: "builtInParams", name: "region" },
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
   };
-  var version2 = "3.997.40";
+  var version2 = "3.997.42";
   var packageInfo2 = {
     version: version2
   };
@@ -25292,7 +25293,7 @@ var require_sts = __commonJS((exports) => {
   exports.getDefaultRoleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity;
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.12/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveAssumeRoleCredentials.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveAssumeRoleCredentials.js
 var import_client7, import_config19, isAssumeRoleProfile = (arg, { profile = "default", logger } = {}) => {
   return Boolean(arg) && typeof arg === "object" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1 && ["undefined", "string"].indexOf(typeof arg.external_id) > -1 && ["undefined", "string"].indexOf(typeof arg.mfa_serial) > -1 && (isAssumeRoleWithSourceProfile(arg, { profile, logger }) || isCredentialSourceProfile(arg, { profile, logger }));
 }, isAssumeRoleWithSourceProfile = (arg, { profile, logger }) => {
@@ -25360,7 +25361,7 @@ var init_resolveAssumeRoleCredentials = __esm(() => {
   import_config19 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.41/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/signin/index.js
+// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.43/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/signin/index.js
 var require_signin = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions2, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$12, createDefaultUserAgentProvider: createDefaultUserAgentProvider2, NODE_APP_ID_CONFIG_OPTIONS: NODE_APP_ID_CONFIG_OPTIONS2, getAwsRegionExtensionConfiguration: getAwsRegionExtensionConfiguration2, resolveAwsRegionExtensionConfiguration: resolveAwsRegionExtensionConfiguration2, resolveUserAgentConfig: resolveUserAgentConfig2, resolveHostHeaderConfig: resolveHostHeaderConfig2, getUserAgentPlugin: getUserAgentPlugin2, getHostHeaderPlugin: getHostHeaderPlugin2, getLoggerPlugin: getLoggerPlugin2, getRecursionDetectionPlugin: getRecursionDetectionPlugin2 } = require_client2();
   var { NoAuthSigner: NoAuthSigner2, getHttpAuthSchemeEndpointRuleSetPlugin: getHttpAuthSchemeEndpointRuleSetPlugin2, DefaultIdentityProviderConfig: DefaultIdentityProviderConfig2, getHttpSigningPlugin: getHttpSigningPlugin2 } = require_dist_cjs2();
@@ -25438,7 +25439,7 @@ var require_signin = __commonJS((exports) => {
     Region: { type: "builtInParams", name: "region" },
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
   };
-  var version2 = "3.997.40";
+  var version2 = "3.997.42";
   var packageInfo2 = {
     version: version2
   };
@@ -26092,11 +26093,11 @@ var require_signin = __commonJS((exports) => {
   exports.errorTypeRegistries = errorTypeRegistries2;
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.74/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.76/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
 import { createHash as createHash2, createPrivateKey, createPublicKey, sign } from "crypto";
 import { promises as fs2 } from "fs";
-import { homedir as homedir2 } from "os";
-import { dirname as dirname3, join as join3 } from "path";
+import { homedir as homedir4 } from "os";
+import { dirname as dirname3, join as join5 } from "path";
 var import_config20, import_protocols3, LoginCredentialsFetcher;
 var init_LoginCredentialsFetcher = __esm(() => {
   import_config20 = __toESM(require_config(), 1);
@@ -26263,10 +26264,10 @@ var init_LoginCredentialsFetcher = __esm(() => {
       await fs2.writeFile(tokenFilePath, JSON.stringify(token, null, 2), "utf8");
     }
     getTokenFilePath() {
-      const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join3(homedir2(), ".aws", "login", "cache");
+      const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join5(homedir4(), ".aws", "login", "cache");
       const loginSessionBytes = Buffer.from(this.loginSession, "utf8");
       const loginSessionSha256 = createHash2("sha256").update(loginSessionBytes).digest("hex");
-      return join3(directory, `${loginSessionSha256}.json`);
+      return join5(directory, `${loginSessionSha256}.json`);
     }
     derToRawSignature(derSignature) {
       let offset = 2;
@@ -26356,7 +26357,7 @@ var init_LoginCredentialsFetcher = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.74/node_modules/@aws-sdk/credential-provider-login/dist-es/fromLoginCredentials.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.76/node_modules/@aws-sdk/credential-provider-login/dist-es/fromLoginCredentials.js
 var import_client8, import_config21, fromLoginCredentials = (init) => async ({ callerClientConfig } = {}) => {
   init?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");
   const profiles = await import_config21.parseKnownFiles(init || {});
@@ -26380,7 +26381,7 @@ var init_fromLoginCredentials = __esm(() => {
   import_config21 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.74/node_modules/@aws-sdk/credential-provider-login/dist-es/index.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.76/node_modules/@aws-sdk/credential-provider-login/dist-es/index.js
 var exports_dist_es5 = {};
 __export(exports_dist_es5, {
   fromLoginCredentials: () => fromLoginCredentials
@@ -26389,7 +26390,7 @@ var init_dist_es6 = __esm(() => {
   init_fromLoginCredentials();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.12/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveLoginCredentials.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveLoginCredentials.js
 var import_client9, isLoginProfile = (data) => {
   return Boolean(data && data.login_session);
 }, resolveLoginCredentials = async (profileName, options, callerClientConfig) => {
@@ -26404,7 +26405,7 @@ var init_resolveLoginCredentials = __esm(() => {
   import_client9 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.67/node_modules/@aws-sdk/credential-provider-process/dist-es/getValidatedProcessCredentials.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.69/node_modules/@aws-sdk/credential-provider-process/dist-es/getValidatedProcessCredentials.js
 var import_client10, getValidatedProcessCredentials = (profileName, data, profiles) => {
   if (data.Version !== 1) {
     throw Error(`Profile ${profileName} credential_process did not return Version 1.`);
@@ -26438,7 +26439,7 @@ var init_getValidatedProcessCredentials = __esm(() => {
   import_client10 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.67/node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.69/node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js
 import { exec } from "child_process";
 import { promisify } from "util";
 var import_config22, resolveProcessCredentials = async (profileName, profiles, logger) => {
@@ -26473,7 +26474,7 @@ var init_resolveProcessCredentials = __esm(() => {
   import_config22 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.67/node_modules/@aws-sdk/credential-provider-process/dist-es/fromProcess.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.69/node_modules/@aws-sdk/credential-provider-process/dist-es/fromProcess.js
 var import_config23, fromProcess = (init = {}) => async ({ callerClientConfig } = {}) => {
   init.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");
   const profiles = await import_config23.parseKnownFiles(init);
@@ -26486,7 +26487,7 @@ var init_fromProcess = __esm(() => {
   import_config23 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.67/node_modules/@aws-sdk/credential-provider-process/dist-es/index.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.69/node_modules/@aws-sdk/credential-provider-process/dist-es/index.js
 var exports_dist_es6 = {};
 __export(exports_dist_es6, {
   fromProcess: () => fromProcess
@@ -26495,7 +26496,7 @@ var init_dist_es7 = __esm(() => {
   init_fromProcess();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.12/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProcessCredentials.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProcessCredentials.js
 var import_client11, isProcessProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.credential_process === "string", resolveProcessCredentials2 = async (options, profile) => {
   const { fromProcess: fromProcess2 } = await Promise.resolve().then(() => (init_dist_es7(), exports_dist_es6));
   const credentials = await fromProcess2({
@@ -26508,7 +26509,7 @@ var init_resolveProcessCredentials2 = __esm(() => {
   import_client11 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.12/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveSsoCredentials.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveSsoCredentials.js
 var import_client12, resolveSsoCredentials = async (profile, profileData, options = {}, callerClientConfig) => {
   const { fromSSO: fromSSO2 } = await Promise.resolve().then(() => (init_dist_es5(), exports_dist_es4));
   return fromSSO2({
@@ -26530,7 +26531,7 @@ var init_resolveSsoCredentials = __esm(() => {
   import_client12 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.12/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveStaticCredentials.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveStaticCredentials.js
 var import_client13, isStaticCredsProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.aws_access_key_id === "string" && typeof arg.aws_secret_access_key === "string" && ["undefined", "string"].indexOf(typeof arg.aws_session_token) > -1 && ["undefined", "string"].indexOf(typeof arg.aws_account_id) > -1, resolveStaticCredentials = async (profile, options) => {
   options?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");
   const credentials = {
@@ -26546,7 +26547,7 @@ var init_resolveStaticCredentials = __esm(() => {
   import_client13 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.73/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.75/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js
 var fromWebToken = (init) => async (awsIdentityProperties) => {
   init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");
   const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;
@@ -26573,7 +26574,7 @@ var fromWebToken = (init) => async (awsIdentityProperties) => {
   });
 };
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.73/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.75/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
 import { readFileSync as readFileSync4 } from "fs";
 var import_client14, import_config24, ENV_TOKEN_FILE = "AWS_WEB_IDENTITY_TOKEN_FILE", ENV_ROLE_ARN = "AWS_ROLE_ARN", ENV_ROLE_SESSION_NAME = "AWS_ROLE_SESSION_NAME", fromTokenFile = (init = {}) => async (awsIdentityProperties) => {
   init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");
@@ -26601,7 +26602,7 @@ var init_fromTokenFile = __esm(() => {
   import_config24 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.73/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/index.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.75/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/index.js
 var exports_dist_es7 = {};
 __export(exports_dist_es7, {
   fromWebToken: () => fromWebToken,
@@ -26611,7 +26612,7 @@ var init_dist_es8 = __esm(() => {
   init_fromTokenFile();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.12/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveWebIdentityCredentials.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveWebIdentityCredentials.js
 var import_client15, isWebIdentityProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.web_identity_token_file === "string" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1, resolveWebIdentityCredentials = async (profile, options, callerClientConfig) => {
   const { fromTokenFile: fromTokenFile2 } = await Promise.resolve().then(() => (init_dist_es8(), exports_dist_es7));
   const credentials = await fromTokenFile2({
@@ -26630,7 +26631,7 @@ var init_resolveWebIdentityCredentials = __esm(() => {
   import_client15 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.12/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProfileData.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProfileData.js
 var import_config25, resolveProfileData = async (profileName, profiles, options, callerClientConfig, visitedProfiles = {}, isAssumeRoleRecursiveCall = false) => {
   const data = profiles[profileName];
   if (Object.keys(visitedProfiles).length > 0 && isStaticCredsProfile(data)) {
@@ -26666,7 +26667,7 @@ var init_resolveProfileData = __esm(() => {
   import_config25 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.12/node_modules/@aws-sdk/credential-provider-ini/dist-es/fromIni.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/fromIni.js
 var import_config26, fromIni = (init = {}) => async ({ callerClientConfig } = {}) => {
   init.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");
   const profiles = await import_config26.parseKnownFiles(init);
@@ -26679,7 +26680,7 @@ var init_fromIni = __esm(() => {
   import_config26 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.12/node_modules/@aws-sdk/credential-provider-ini/dist-es/index.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/index.js
 var exports_dist_es8 = {};
 __export(exports_dist_es8, {
   fromIni: () => fromIni
@@ -26840,9 +26841,9 @@ async function startMcpHttpServer(buildServer, options) {
     res.writeHead(404, { "Content-Type": "text/plain" });
     res.end("Not Found");
   });
-  await new Promise((resolve3, reject) => {
+  await new Promise((resolve4, reject) => {
     httpServer.once("error", reject);
-    httpServer.listen(requestedPort, host, () => resolve3());
+    httpServer.listen(requestedPort, host, () => resolve4());
   });
   const addr = httpServer.address();
   const port = typeof addr === "object" && addr ? addr.port : requestedPort;
@@ -26850,8 +26851,8 @@ async function startMcpHttpServer(buildServer, options) {
   return {
     port,
     host,
-    close: () => new Promise((resolve3, reject) => {
-      httpServer.close((err) => err ? reject(err) : resolve3());
+    close: () => new Promise((resolve4, reject) => {
+      httpServer.close((err) => err ? reject(err) : resolve4());
     })
   };
 }
@@ -26995,6 +26996,7 @@ import { StdioServerTransport as StdioServerTransport2 } from "@modelcontextprot
 // ../contracts/dist/client/storage.js
 import { isIP } from "net";
 import { readFileSync, statSync } from "fs";
+import { createRequire } from "module";
 import { join } from "path";
 function envToken(name) {
   return name.toUpperCase().replace(/-/g, "_");
@@ -27010,6 +27012,9 @@ function credentialOverrideEnvKey(name) {
   return `HASNA_${envToken(name)}_API_KEY_OVERRIDE`;
 }
 var CREDENTIAL_PROFILE_ENV_KEY = "HASNA_PROFILE";
+function credentialPointerEnvKey(name) {
+  return `HASNA_${envToken(name)}_API_KEY_REF`;
+}
 
 class CredentialResolutionError extends Error {
   appName;
@@ -27022,31 +27027,55 @@ class CredentialResolutionError extends Error {
   }
 }
 var HASNA_STATE_DIR = ".hasna";
-var FLEET_CREDENTIAL_DIR = "cloud";
+var FLEET_CREDENTIAL_DIR = "fleet-env";
+var LEGACY_CLOUD_DIR = "cloud";
 var CONFIG_DIR = ".config";
 var CONFIG_NAMESPACE = "hasna";
+var LEGACY_CLOUD_REMOVAL_DEADLINE = "2026-10-01";
 var MAX_CREDENTIAL_FILE_BYTES = 64 * 1024;
 var SAFE_APP_SLUG = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
 var SAFE_PROFILE = /^[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/;
 var ILLEGAL_IN_HEADER_VALUE = /[^\t\x20-\x7e]/;
+var VAULT_POINTER_SHAPE = /^[a-z0-9][a-z0-9-]*(?:\/[a-z0-9][a-z0-9-_.]*){2,}$/;
 function homeDir(env) {
   const home = env.HOME?.trim();
   return home ? home : null;
 }
-function credentialDiskSources(name, env) {
-  return profileDiskSources(name, env, null);
-}
-function profileDiskSources(name, env, profile) {
+function credentialDiskSourceList(name, env, profile = null) {
   const home = homeDir(env);
   if (!home || !SAFE_APP_SLUG.test(name))
     return [];
   const stem = profile ? `${name}.${profile}` : name;
   const configStem = profile ? `${name}-${profile}` : name;
   return [
-    join(home, HASNA_STATE_DIR, FLEET_CREDENTIAL_DIR, `${stem}.env`),
-    join(home, CONFIG_DIR, CONFIG_NAMESPACE, `${configStem}-cloud.env`)
+    {
+      path: join(home, HASNA_STATE_DIR, FLEET_CREDENTIAL_DIR, `${stem}.env`),
+      tier: "fleet-env",
+      deprecated: false
+    },
+    {
+      path: join(home, HASNA_STATE_DIR, LEGACY_CLOUD_DIR, `${stem}.env`),
+      tier: "legacy-cloud",
+      deprecated: true
+    },
+    {
+      path: join(home, CONFIG_DIR, CONFIG_NAMESPACE, `${configStem}.env`),
+      tier: "config",
+      deprecated: false
+    },
+    {
+      path: join(home, CONFIG_DIR, CONFIG_NAMESPACE, `${configStem}-cloud.env`),
+      tier: "config-legacy",
+      deprecated: true
+    }
   ];
 }
+function credentialDiskSources(name, env) {
+  return credentialDiskSourceList(name, env, null).map((s) => s.path);
+}
+function profileDiskSources(name, env, profile) {
+  return credentialDiskSourceList(name, env, profile).map((s) => s.path);
+}
 function parseEnvFile(text) {
   const values = new Map;
   for (const rawLine of text.split(/\r?\n/)) {
@@ -27114,6 +27143,9 @@ function appConfigDiskValue(name, env, keys) {
   return null;
 }
 function assertUsableCredential(appName, source, value) {
+  if (VAULT_POINTER_SHAPE.test(value)) {
+    throw new CredentialResolutionError(appName, `The credential from ${source} looks like a secrets-vault pointer (a path-shaped reference like ` + `'namespace/app/live/api_key'). A vault path is NEVER accepted as a literal API key. ` + `Use ${credentialPointerEnvKey(appName)} to resolve the key through the vault, or provide the actual key value.`, [source]);
+  }
   if (!ILLEGAL_IN_HEADER_VALUE.test(value))
     return;
   throw new CredentialResolutionError(appName, `The credential from ${source} contains characters that cannot be sent in an HTTP header ` + `(a control character or non-ASCII byte). A file written with CR-only line endings is the usual ` + `cause. Rewrite that credential file with one LF-terminated KEY=value line. ` + `The value is not shown here, and is deliberately never logged.`, [source]);
@@ -27138,6 +27170,14 @@ function sealCredential(fields) {
     writable: false,
     configurable: false
   });
+  if (fields.pointerVaultKey !== undefined) {
+    Object.defineProperty(sealed, "pointerVaultKey", {
+      value: fields.pointerVaultKey,
+      enumerable: false,
+      writable: false,
+      configurable: false
+    });
+  }
   Object.defineProperty(sealed, INSPECT_CUSTOM, {
     value: () => ({ ...visible, apiKey: "[redacted]" }),
     enumerable: false,
@@ -27189,7 +27229,8 @@ function validateAndSealResolvedCredential(appName, credential) {
     deliberate: credential.deliberate,
     deprecated: credential.deprecated,
     diskCandidates: credential.diskCandidates,
-    warning: credential.warning
+    warning: credential.warning,
+    ...credential.pointerVaultKey !== undefined ? { pointerVaultKey: credential.pointerVaultKey } : {}
   });
 }
 function firstEnvValue(env, keys) {
@@ -27250,6 +27291,27 @@ function resolveCredential(name, env, options = {}) {
       warning: null
     });
   }
+  const pointerKeyName = credentialPointerEnvKey(name);
+  const pointerRaw = env[pointerKeyName];
+  if (pointerRaw !== undefined) {
+    const pointer = pointerRaw.trim();
+    if (!pointer) {
+      throw new CredentialResolutionError(name, `${pointerKeyName} is set but empty. It is a deliberate vault pointer, so it is not resolved around: ` + `either give it a vault item key or unset it to fall back to the credential on disk.`, [pointerKeyName]);
+    }
+    if (!VAULT_POINTER_SHAPE.test(pointer)) {
+      throw new CredentialResolutionError(name, `${pointerKeyName} must name a vault ITEM KEY (a path-shaped reference like ` + `'namespace/app/live/api_key'), not a credential value. A pointer that carries a literal is refused.`, [pointerKeyName]);
+    }
+    return sealCredential({
+      apiKey: "",
+      pointerVaultKey: pointer,
+      tier: "pointer",
+      source: pointerKeyName,
+      deliberate: true,
+      deprecated: false,
+      diskCandidates: diskPaths,
+      warning: null
+    });
+  }
   const profile = options.profile?.trim() || env[CREDENTIAL_PROFILE_ENV_KEY]?.trim();
   if (profile) {
     const profileSource = options.profile?.trim() ? "explicit profile argument" : CREDENTIAL_PROFILE_ENV_KEY;
@@ -27274,26 +27336,42 @@ function resolveCredential(name, env, options = {}) {
     }
     throw new CredentialResolutionError(name, `Profile '${profile}' (from ${profileSource}) has no ${apiKeyKeys[0]} for '${name}'. ` + `Looked in: ${paths.join(", ") || "<no HOME in this environment>"}. ` + `A profile names WHICH identity to use, so it is never resolved around \u2014 ` + `create the profile's credential file or unset ${CREDENTIAL_PROFILE_ENV_KEY}.`, paths);
   }
-  const diskHits = diskPaths.map((path) => ({ path, value: readCredentialFile(path, apiKeyKeys) })).filter((hit) => hit.value !== null);
+  const diskSourceList = credentialDiskSourceList(name, env, null);
+  const diskHits = diskSourceList.map((src) => ({ src, value: readCredentialFile(src.path, apiKeyKeys) })).filter((hit) => hit.value !== null);
   if (diskHits.length > 0) {
     const winner = diskHits[0];
-    assertUsableCredential(name, winner.path, winner.value);
+    assertUsableCredential(name, winner.src.path, winner.value);
     const divergentSources = [
-      ...diskHits.slice(1).filter((hit) => hit.value !== winner.value).map((hit) => hit.path),
+      ...diskHits.slice(1).filter((hit) => hit.value !== winner.value).map((hit) => hit.src.path),
       ...(() => {
         const legacyHit = firstEnvValue(env, apiKeyKeys);
         return legacyHit && legacyHit.value !== winner.value ? [legacyHit.key] : [];
       })()
     ];
-    const warning = divergentSources.length > 0 ? `Credential sources disagree for '${name}': ${winner.path} and ` + `${divergentSources.join(", ")} hold different keys. ${winner.path} wins, because a file on ` + `disk is re-read on every call while an environment variable is a snapshot. Reconcile them \u2014 ` + `a rotation that updated only one leaves the other to fail 401 wherever it is loaded first.` : null;
+    const warning = divergentSources.length > 0 ? `Credential sources disagree for '${name}': ${winner.src.path} and ` + `${divergentSources.join(", ")} hold different keys. ${winner.src.path} wins, because a file on ` + `disk is re-read on every call while an environment variable is a snapshot. Reconcile them \u2014 ` + `a rotation that updated only one leaves the other to fail 401 wherever it is loaded first.` : null;
+    let deprecated = winner.src.deprecated;
+    let finalWarning = warning;
+    if (winner.src.deprecated) {
+      deprecated = true;
+      const sink = options.onDeprecation ?? defaultDeprecationSink;
+      const notified = deprecationNotified();
+      const noticeKey = `${name}:${winner.src.path}`;
+      if (!notified.has(noticeKey)) {
+        notified.add(noticeKey);
+        const target = diskSourceList[0]?.path ?? "<none>";
+        const message = `[${name}] DEPRECATED: the API key came from ${winner.src.path} \u2014 a legacy credential location. ` + `The primary location is ${target} (~/.hasna/fleet-env/<app>.env). The legacy 'cloud' tiers are ` + `removed after ${LEGACY_CLOUD_REMOVAL_DEADLINE}. Migrate the key to the primary location.`;
+        sink(message);
+      }
+      finalWarning = [warning, `Legacy credential source: ${winner.src.path}. Removed after ${LEGACY_CLOUD_REMOVAL_DEADLINE}.`].filter(Boolean).join(" ") || null;
+    }
     return sealCredential({
       apiKey: winner.value,
-      tier: "disk",
-      source: winner.path,
+      tier: winner.src.tier,
+      source: winner.src.path,
       deliberate: false,
-      deprecated: false,
+      deprecated,
       diskCandidates: diskPaths,
-      warning
+      warning: finalWarning
     });
   }
   const legacy = firstEnvValue(env, apiKeyKeys);
@@ -27319,6 +27397,47 @@ function resolveCredential(name, env, options = {}) {
   }
   return null;
 }
+var SECRETS_PACKAGE_SPECIFIER = "@hasna/" + "secrets";
+var requireSecretsSdk = createRequire(import.meta.url);
+async function completePointerCredential(name, pointerResolution, env = process.env) {
+  const vaultKey = pointerResolution.pointerVaultKey;
+  const pointerEnvKey = pointerResolution.source;
+  if (!vaultKey) {
+    throw new CredentialResolutionError(name, `Pointer resolution from ${pointerEnvKey} carries no vault item key; this is a defect in the resolver.`, [pointerEnvKey]);
+  }
+  let secretsSdk;
+  try {
+    secretsSdk = requireSecretsSdk(SECRETS_PACKAGE_SPECIFIER);
+  } catch {
+    throw new CredentialResolutionError(name, `${pointerEnvKey} names vault item '${vaultKey}', but the secrets SDK (@hasna/secrets) is not installed ` + `in this process. A vault pointer is TERMINAL: install @hasna/secrets to resolve it, or unset ${pointerEnvKey}.`, [pointerEnvKey]);
+  }
+  let client;
+  try {
+    client = secretsSdk.createSecretsClientFromEnv(env);
+  } catch {
+    throw new CredentialResolutionError(name, `${pointerEnvKey} names vault item '${vaultKey}', but the secrets client could not be configured from this ` + `environment (the secrets service URL and key env are missing or invalid). A vault pointer is TERMINAL and ` + `never falls through to a literal or disk credential.`, [pointerEnvKey]);
+  }
+  let secret;
+  try {
+    secret = await client.getSecret({ key: vaultKey });
+  } catch {
+    throw new CredentialResolutionError(name, `${pointerEnvKey} names vault item '${vaultKey}', but the vault could not be reached or the item is ` + `unavailable. A vault pointer is TERMINAL and never falls through to a literal or disk credential.`, [pointerEnvKey]);
+  }
+  const value = secret.value;
+  if (!value) {
+    throw new CredentialResolutionError(name, `${pointerEnvKey} resolved vault item '${vaultKey}', but it holds no value. A vault pointer is TERMINAL.`, [pointerEnvKey]);
+  }
+  assertUsableCredential(name, `${pointerEnvKey} -> vault:${vaultKey}`, value);
+  return sealCredential({
+    apiKey: value,
+    tier: "pointer",
+    source: `${pointerEnvKey} -> vault:${vaultKey}`,
+    deliberate: true,
+    deprecated: false,
+    diskCandidates: pointerResolution.diskCandidates,
+    warning: null
+  });
+}
 var ASCII_CONTROL_PATTERN = /[\u0000-\u001f\u007f]/;
 var DNS_LABEL_PATTERN = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
 function isValidDnsDomain(value) {
@@ -27564,6 +27683,13 @@ function currentCredential(name, apiKey) {
   }
   return explicitCredential(name, apiKey);
 }
+async function resolveRequestCredential(name, apiKey, env = process.env) {
+  const resolved = currentCredential(name, apiKey);
+  if (resolved.tier === "pointer") {
+    return completePointerCredential(name, resolved, env);
+  }
+  return resolved;
+}
 function authFailureGuidance(credential) {
   const origin = `The API key for this request came from ${credential.source}`;
   if (credential.deliberate) {
@@ -27719,7 +27845,7 @@ function createHasnaHttpTransport(options) {
     const retry = resolveRetry(opts.retry);
     const methodRetryable = IDEMPOTENT_METHODS.has(upper) || Boolean(opts.idempotencyKey);
     const maxAttempts = retry && methodRetryable ? retry.retries + 1 : 1;
-    const credential = currentCredential(options.name, options.apiKey);
+    const credential = await resolveRequestCredential(options.name, options.apiKey);
     let last = null;
     for (let attempt = 1;attempt <= maxAttempts; attempt++) {
       const result = await once(upper, rel, url, body, opts, credential);
@@ -27884,6 +28010,7 @@ function resolveStorageClient(name, env = process.env, overrides) {
 }
 
 // ../contracts/dist/client/transport.js
+import { createRequire as createRequire2 } from "module";
 function envToken2(name) {
   return name.toUpperCase().replace(/-/g, "_");
 }
@@ -27898,6 +28025,8 @@ var MAX_CREDENTIAL_FILE_BYTES2 = 64 * 1024;
 var INSPECT_CUSTOM2 = Symbol.for("nodejs.util.inspect.custom");
 var CREDENTIAL_SEAL2 = Symbol.for("hasna:contracts:sealedCredential");
 var DEPRECATION_REGISTRY2 = Symbol.for("hasna:contracts:credentialDeprecationNotices");
+var SECRETS_PACKAGE_SPECIFIER2 = "@hasna/" + "secrets";
+var requireSecretsSdk2 = createRequire2(import.meta.url);
 var IDEMPOTENT_METHODS2 = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
 var AUTHORITY_OVERRIDE_HEADERS2 = new Set([
   "host",
@@ -27912,15 +28041,15 @@ import { Database } from "bun:sqlite";
 import { createHash } from "crypto";
 import {
   copyFileSync,
-  existsSync,
+  existsSync as existsSync2,
   mkdirSync,
   readFileSync as readFileSync2,
   readdirSync,
   statSync as statSync2,
   writeFileSync
 } from "fs";
-import { dirname, join as join2, resolve } from "path";
-import { homedir } from "os";
+import { dirname, join as join4, resolve as resolve2 } from "path";
+import { homedir as homedir3 } from "os";
 
 // src/db/migrations.ts
 var MIGRATIONS = [
@@ -28189,10 +28318,116 @@ var MIGRATIONS = [
   }
 ];
 
+// src/lib/app-home.ts
+import { existsSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join3, resolve } from "path";
+
+// ../../node_modules/.bun/@hasna+paths@0.1.0/node_modules/@hasna/paths/dist/index.js
+import { homedir } from "os";
+import { join as join2 } from "path";
+var KIND_ENV = {
+  config: "HASNA_CONFIG_HOME",
+  data: "HASNA_DATA_HOME",
+  state: "HASNA_STATE_HOME",
+  cache: "HASNA_CACHE_HOME"
+};
+var APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function assertApp(app) {
+  if (typeof app !== "string" || app.length === 0) {
+    throw new TypeError("paths: app must be a non-empty string");
+  }
+  if (!APP_SLUG_RE.test(app)) {
+    throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
+  }
+}
+function envOf(options) {
+  return options.env ?? process.env;
+}
+function envValue(options, kind) {
+  const value = envOf(options)[KIND_ENV[kind]];
+  return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function isMacOS(platform) {
+  return platform === "darwin";
+}
+function baseDir(kind, options) {
+  const override = envValue(options, kind);
+  if (override)
+    return override;
+  const home = options.home ?? homedir();
+  const platform = options.platform ?? process.platform;
+  if (isMacOS(platform)) {
+    switch (kind) {
+      case "config":
+      case "data":
+        return join2(home, "Library", "Application Support", "Hasna");
+      case "cache":
+        return join2(home, "Library", "Caches", "Hasna");
+      case "state":
+        return join2(home, "Library", "Logs", "Hasna");
+    }
+  }
+  switch (kind) {
+    case "config":
+      return join2(home, ".config", "hasna");
+    case "data":
+      return join2(home, ".local", "share", "hasna");
+    case "state":
+      return join2(home, ".local", "state", "hasna");
+    case "cache":
+      return join2(home, ".cache", "hasna");
+  }
+}
+function resolvePath(kind, options) {
+  assertApp(options.app);
+  const appSegment = options.internal === true ? join2("internal", options.app) : options.app;
+  return join2(baseDir(kind, options), appSegment);
+}
+function dataDir(options) {
+  return resolvePath("data", options);
+}
+
+// src/lib/app-home.ts
+var APP = "domains";
+function effectiveHome(env = process.env) {
+  return env["HOME"] || env["USERPROFILE"] || homedir2();
+}
+function legacyHomeDir(env = process.env) {
+  return join3(effectiveHome(env), ".hasna", APP);
+}
+function resolverHome(env = process.env) {
+  const home = env["HOME"] || env["USERPROFILE"];
+  return dataDir({ app: APP, home, env });
+}
+function adoptResolverHome(resolved, env = process.env) {
+  const dataOverride = env.HASNA_DATA_HOME;
+  if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
+    return true;
+  return existsSync(join3(resolved, "domains.db"));
+}
+function exactAppOverride(env = process.env) {
+  const override = env["HASNA_DOMAINS_HOME"] ?? env["DOMAINS_HOME"] ?? env["HASNA_DOMAINS_DIR"] ?? env["DOMAINS_DIR"];
+  return override && override.trim() ? override.trim() : undefined;
+}
+function appHome(env = process.env) {
+  const override = exactAppOverride(env);
+  if (override)
+    return resolve(override);
+  const resolved = resolverHome(env);
+  return adoptResolverHome(resolved, env) ? resolve(resolved) : resolve(legacyHomeDir(env));
+}
+function getDefaultDbPath(env = process.env) {
+  return join3(appHome(env), `${APP}.db`);
+}
+function getDefaultConfigPath(env = process.env) {
+  return join3(appHome(env), "config.json");
+}
+
 // src/db/database.ts
 var _db = null;
 function canonicalHome(env) {
-  return env["HOME"] || env["USERPROFILE"] || homedir();
+  return env["HOME"] || env["USERPROFILE"] || homedir3();
 }
 function sha256File(path) {
   return createHash("sha256").update(readFileSync2(path)).digest("hex");
@@ -28200,20 +28435,20 @@ function sha256File(path) {
 function migrateLegacyDataDir(env = process.env, dryRun = false) {
   const report = { dryRun, wouldCopy: [], copied: [] };
   const home = canonicalHome(env);
-  const xdgData = env["XDG_DATA_HOME"]?.trim() || join2(home, ".local", "share");
-  const oldDir = join2(xdgData, "open-domains");
-  const oldDb = join2(oldDir, "domains.db");
-  if (!existsSync(oldDb))
+  const xdgData = env["XDG_DATA_HOME"]?.trim() || join4(home, ".local", "share");
+  const oldDir = join4(xdgData, "open-domains");
+  const oldDb = join4(oldDir, "domains.db");
+  if (!existsSync2(oldDb))
     return report;
-  const canonicalDir = join2(home, ".hasna", "domains");
-  const newDb = join2(canonicalDir, "domains.db");
-  if (existsSync(newDb))
+  const canonicalDir = join4(home, ".hasna", "domains");
+  const newDb = join4(canonicalDir, "domains.db");
+  if (existsSync2(newDb))
     return report;
-  if (existsSync(join2(canonicalDir, ".migrated-from-xdg.receipt.json")))
+  if (existsSync2(join4(canonicalDir, ".migrated-from-xdg.receipt.json")))
     return report;
   if (dryRun) {
     for (const name of ["domains.db", "domains.db-wal", "domains.db-shm"]) {
-      if (existsSync(join2(oldDir, name)) && !existsSync(join2(canonicalDir, name))) {
+      if (existsSync2(join4(oldDir, name)) && !existsSync2(join4(canonicalDir, name))) {
         report.wouldCopy.push(name);
       }
     }
@@ -28222,11 +28457,11 @@ function migrateLegacyDataDir(env = process.env, dryRun = false) {
   mkdirSync(canonicalDir, { recursive: true });
   const copied = [];
   for (const name of ["domains.db", "domains.db-wal", "domains.db-shm"]) {
-    const from = join2(oldDir, name);
-    if (!existsSync(from))
+    const from = join4(oldDir, name);
+    if (!existsSync2(from))
       continue;
-    const to = join2(canonicalDir, name);
-    if (existsSync(to))
+    const to = join4(canonicalDir, name);
+    if (existsSync2(to))
       continue;
     copyFileSync(from, to);
     copied.push({ name, bytes: statSync2(to).size, sha256: sha256File(to) });
@@ -28235,7 +28470,7 @@ function migrateLegacyDataDir(env = process.env, dryRun = false) {
   if (statSync2(newDb).size !== statSync2(oldDb).size || sha256File(newDb) !== sha256File(oldDb)) {
     throw new Error(`Refusing migration: copied ${newDb} does not byte-match ${oldDb}; the canonical root was not populated.`);
   }
-  writeFileSync(join2(canonicalDir, ".migrated-from-xdg.receipt.json"), `${JSON.stringify({
+  writeFileSync(join4(canonicalDir, ".migrated-from-xdg.receipt.json"), `${JSON.stringify({
     migratedAt: new Date().toISOString(),
     from: oldDir,
     to: canonicalDir,
@@ -28249,26 +28484,26 @@ function getDbPath(env = process.env) {
     return env["DOMAINS_DB_PATH"];
   if (env["HASNA_DOMAINS_DB_PATH"])
     return env["HASNA_DOMAINS_DB_PATH"];
-  const explicit = env["DOMAINS_DIR"] ?? env["HASNA_DOMAINS_DIR"];
+  const explicit = exactAppOverride(env);
   if (explicit) {
-    return join2(explicit, "domains.db");
+    return join4(explicit, "domains.db");
   }
-  const home = canonicalHome(env);
-  const canonicalDir = join2(home, ".hasna", "domains");
-  migrateLegacyDataDir(env);
-  migrateDotfile("domains", canonicalDir, env);
-  return join2(canonicalDir, "domains.db");
+  if (!adoptResolverHome(resolverHome(env), env)) {
+    migrateLegacyDataDir(env);
+    migrateDotfile("domains", legacyHomeDir(env), env);
+  }
+  return getDefaultDbPath(env);
 }
 function migrateDotfile(name, newDir, env) {
   const home = canonicalHome(env);
-  const oldDir = join2(home, `.${name}`);
-  if (!existsSync(oldDir) || existsSync(newDir))
+  const oldDir = join4(home, `.${name}`);
+  if (!existsSync2(oldDir) || existsSync2(newDir))
     return;
   mkdirSync(newDir, { recursive: true });
   for (const file of readdirSync(oldDir)) {
-    const oldPath = join2(oldDir, file);
+    const oldPath = join4(oldDir, file);
     if (statSync2(oldPath).isFile())
-      copyFileSync(oldPath, join2(newDir, file));
+      copyFileSync(oldPath, join4(newDir, file));
   }
 }
 function getDatabase() {
@@ -28276,7 +28511,7 @@ function getDatabase() {
     return _db;
   const dbPath = getDbPath();
   if (dbPath !== ":memory:") {
-    const dir = dirname(resolve(dbPath));
+    const dir = dirname(resolve2(dbPath));
     mkdirSync(dir, { recursive: true });
   }
   _db = new Database(dbPath);
@@ -29167,7 +29402,7 @@ function deleteDomainReputation(id) {
 }
 
 // src/db/store.ts
-var APP = "domains";
+var APP2 = "domains";
 var DOMAINS_PAGE_SIZE = 1000;
 class LocalStore {
   transport = "local";
@@ -29780,7 +30015,7 @@ function assertNoStoreConflict(env) {
   throw new Error(`Refusing to resolve the hosted domains store while ${pathVar} is set: that variable ` + `names a local sqlite file, so the configuration asks for BOTH stores at once and ` + `nothing here can tell which you meant. Writing to the wrong one is silent \u2014 a plain ` + `\`bun run\` script that set ${pathVar} put 230 rows into the production portfolio on ` + `2026-08-07 while reporting success. Pick one: unset HASNA_DOMAINS_API_URL and ` + `HASNA_DOMAINS_API_KEY to use ${pathVar}; unset ${pathVar} to use the hosted store; or set ` + `${ALLOW_CLOUD_WITH_LOCAL_PATH}=1 if you really intend the hosted store with that variable present.`);
 }
 function requireHostedClient(env, flip) {
-  const resolved = resolveStorageClient(APP, withoutRetiredModeKeys(env));
+  const resolved = resolveStorageClient(APP2, withoutRetiredModeKeys(env));
   if (resolved.transport !== "http") {
     throw new Error(`Hosted domains client was requested (${flip.urlSource} + ${flip.keySource}) but ` + `@hasna/contracts resolved transport '${resolved.transport}'. Refusing to read the wrong dataset.`);
   }
@@ -29801,7 +30036,7 @@ import { domainToASCII } from "url";
 
 // src/lib/version.ts
 import { readFileSync as readFileSync3 } from "fs";
-import { dirname as dirname2, resolve as resolve2 } from "path";
+import { dirname as dirname2, resolve as resolve3 } from "path";
 import { fileURLToPath } from "url";
 var cachedVersion = null;
 function getPackageVersion() {
@@ -29809,7 +30044,7 @@ function getPackageVersion() {
     return cachedVersion;
   try {
     const moduleDir = dirname2(fileURLToPath(import.meta.url));
-    const packageJsonPath = resolve2(moduleDir, "../../package.json");
+    const packageJsonPath = resolve3(moduleDir, "../../package.json");
     const pkg = JSON.parse(readFileSync3(packageJsonPath, "utf8"));
     cachedVersion = pkg.version ?? "0.0.0";
   } catch {
@@ -31005,7 +31240,7 @@ async function syncToLocalDb2(dbFns) {
   return result;
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/Route53Client.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/Route53Client.js
 var import_client23 = __toESM(require_client2(), 1);
 var import_core = __toESM(require_dist_cjs2(), 1);
 var import_client24 = __toESM(require_client(), 1);
@@ -31015,7 +31250,7 @@ var import_protocols7 = __toESM(require_protocols(), 1);
 var import_retry4 = __toESM(require_retry(), 1);
 var import_schema2 = __toESM(require_schema(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/auth/httpAuthSchemeProvider.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/auth/httpAuthSchemeProvider.js
 var import_httpAuthSchemes = __toESM(require_httpAuthSchemes(), 1);
 var import_client2 = __toESM(require_client(), 1);
 var defaultRoute53HttpAuthSchemeParametersProvider = async (config, context, input) => {
@@ -31057,7 +31292,7 @@ var resolveHttpAuthSchemeConfig = (config) => {
   });
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/endpoint/EndpointParameters.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/endpoint/EndpointParameters.js
 var resolveClientEndpointParameters = (options) => {
   return Object.assign(options, {
     useDualstackEndpoint: options.useDualstackEndpoint ?? false,
@@ -31071,10 +31306,10 @@ var commonParams = {
   Region: { type: "builtInParams", name: "region" },
   UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
 };
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/package.json
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/package.json
 var package_default = {
   name: "@aws-sdk/client-route-53",
-  version: "3.1106.0",
+  version: "3.1112.0",
   description: "AWS SDK for JavaScript Route 53 Client for Node.js, Browser and React Native",
   homepage: "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-route-53",
   license: "Apache-2.0",
@@ -31123,13 +31358,13 @@ var package_default = {
     "test:integration:watch": "yarn g:vitest watch --passWithNoTests -c vitest.config.integ.mts",
     "test:e2e": "yarn g:vitest run -c vitest.config.e2e.mts",
     "test:e2e:watch": "yarn g:vitest watch -c vitest.config.e2e.mts",
-    "test:index": "tsc --noEmit ./test/index-types.ts && node ./test/index-objects.spec.mjs"
+    "test:index": "tsc -p tsconfig.test.json && node ./test/index-objects.spec.mjs"
   },
   dependencies: {
-    "@aws-sdk/core": "^3.977.6",
-    "@aws-sdk/credential-provider-node": "^3.972.78",
-    "@aws-sdk/middleware-sdk-route53": "^3.972.23",
-    "@aws-sdk/types": "^3.974.2",
+    "@aws-sdk/core": "^3.977.8",
+    "@aws-sdk/credential-provider-node": "^3.972.80",
+    "@aws-sdk/middleware-sdk-route53": "^3.972.25",
+    "@aws-sdk/types": "^3.974.4",
     "@smithy/core": "^3.31.1",
     "@smithy/fetch-http-handler": "^5.6.13",
     "@smithy/node-http-handler": "^4.9.13",
@@ -31143,7 +31378,7 @@ var package_default = {
     concurrently: "7.0.0",
     "downlevel-dts": "0.10.1",
     premove: "4.0.0",
-    typescript: "~5.8.3",
+    typescript: "~7.0.2",
     vitest: "^4.0.17"
   },
   engines: {
@@ -31151,15 +31386,15 @@ var package_default = {
   }
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeConfig.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeConfig.js
 var import_client19 = __toESM(require_client2(), 1);
 var import_httpAuthSchemes3 = __toESM(require_httpAuthSchemes(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.78/node_modules/@aws-sdk/credential-provider-node/dist-es/defaultProvider.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.80/node_modules/@aws-sdk/credential-provider-node/dist-es/defaultProvider.js
 init_dist_es();
 var import_config27 = __toESM(require_config(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.78/node_modules/@aws-sdk/credential-provider-node/dist-es/remoteProvider.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.80/node_modules/@aws-sdk/credential-provider-node/dist-es/remoteProvider.js
 var import_config10 = __toESM(require_config(), 1);
 var ENV_IMDS_DISABLED = "AWS_EC2_METADATA_DISABLED";
 var remoteProvider = async (init) => {
@@ -31178,7 +31413,7 @@ var remoteProvider = async (init) => {
   return fromInstanceMetadata2(init);
 };
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.78/node_modules/@aws-sdk/credential-provider-node/dist-es/runtime/memoize-chain.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.80/node_modules/@aws-sdk/credential-provider-node/dist-es/runtime/memoize-chain.js
 function memoizeChain(providers, treatAsExpired) {
   const chain2 = internalCreateChain(providers);
   let activeLock;
@@ -31242,7 +31477,7 @@ var internalCreateChain = (providers) => async (awsIdentityProperties) => {
   throw lastProviderError;
 };
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.78/node_modules/@aws-sdk/credential-provider-node/dist-es/defaultProvider.js
+// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.80/node_modules/@aws-sdk/credential-provider-node/dist-es/defaultProvider.js
 var multipleCredentialSourceWarningEmitted = false;
 var defaultProvider = (init = {}) => memoizeChain([
   async () => {
@@ -31308,14 +31543,14 @@ var defaultProvider = (init = {}) => memoizeChain([
   }
 ], credentialsTreatedAsExpired);
 var credentialsTreatedAsExpired = (credentials) => credentials?.expiration !== undefined && credentials.expiration.getTime() - Date.now() < 300000;
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeConfig.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeConfig.js
 var import_client20 = __toESM(require_client(), 1);
 var import_config28 = __toESM(require_config(), 1);
 var import_retry3 = __toESM(require_retry(), 1);
 var import_serde4 = __toESM(require_serde(), 1);
 var import_node_http_handler2 = __toESM(require_dist_cjs4(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeConfig.shared.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeConfig.shared.js
 var import_httpAuthSchemes2 = __toESM(require_httpAuthSchemes(), 1);
 var import_protocols4 = __toESM(require_protocols2(), 1);
 var import_checksum = __toESM(require_checksum(), 1);
@@ -31323,11 +31558,11 @@ var import_client18 = __toESM(require_client(), 1);
 var import_protocols5 = __toESM(require_protocols(), 1);
 var import_serde3 = __toESM(require_serde(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/endpoint/endpointResolver.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/endpoint/endpointResolver.js
 var import_client16 = __toESM(require_client2(), 1);
 var import_endpoints2 = __toESM(require_endpoints(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/endpoint/bdd.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/endpoint/bdd.js
 var import_endpoints = __toESM(require_endpoints(), 1);
 var s = "ref";
 var t = "authSchemes";
@@ -31487,7 +31722,7 @@ var nodes2 = new Int32Array([
 ]);
 var bdd2 = import_endpoints.BinaryDecisionDiagram.from(nodes2, root2, _data2.conditions, _data2.results);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/endpoint/endpointResolver.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/endpoint/endpointResolver.js
 var cache2 = new import_endpoints2.EndpointCache({
   size: 50,
   params: ["Endpoint", "Region", "UseDualStack", "UseFIPS"]
@@ -31500,10 +31735,10 @@ var defaultEndpointResolver2 = (endpointParams, context = {}) => {
 };
 import_endpoints2.customEndpointFunctions.aws = import_client16.awsEndpointFunctions;
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/schemas/schemas_0.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/schemas/schemas_0.js
 var import_schema = __toESM(require_schema(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/models/Route53ServiceException.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/models/Route53ServiceException.js
 var import_client17 = __toESM(require_client(), 1);
 class Route53ServiceException extends import_client17.ServiceException {
   constructor(options) {
@@ -31512,7 +31747,7 @@ class Route53ServiceException extends import_client17.ServiceException {
   }
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/models/errors.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/models/errors.js
 class ConcurrentModification extends Route53ServiceException {
   name = "ConcurrentModification";
   $fault = "client";
@@ -32424,7 +32659,7 @@ class ConflictingTypes extends Route53ServiceException {
   }
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/schemas/schemas_0.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/schemas/schemas_0.js
 var _A = "Action";
 var _AI = "AlarmIdentifier";
 var _AKSK = "ActivateKeySigningKey";
@@ -36103,7 +36338,7 @@ var UpdateTrafficPolicyInstance$ = [
   () => UpdateTrafficPolicyInstanceResponse$
 ];
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeConfig.shared.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeConfig.shared.js
 var getRuntimeConfig2 = (config) => {
   return {
     apiVersion: "2013-04-01",
@@ -36137,7 +36372,7 @@ var getRuntimeConfig2 = (config) => {
   };
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeConfig.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeConfig.js
 var getRuntimeConfig3 = (config) => {
   import_client20.emitWarningIfUnsupportedVersion(process.version);
   const defaultsMode = import_config28.resolveDefaultsModeConfig(config);
@@ -36171,12 +36406,12 @@ var getRuntimeConfig3 = (config) => {
   };
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeExtensions.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeExtensions.js
 var import_client21 = __toESM(require_client2(), 1);
 var import_client22 = __toESM(require_client(), 1);
 var import_protocols6 = __toESM(require_protocols(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/auth/httpAuthExtensionConfiguration.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/auth/httpAuthExtensionConfiguration.js
 var getHttpAuthExtensionConfiguration2 = (runtimeConfig) => {
   const _httpAuthSchemes = runtimeConfig.httpAuthSchemes;
   let _httpAuthSchemeProvider = runtimeConfig.httpAuthSchemeProvider;
@@ -36215,14 +36450,14 @@ var resolveHttpAuthRuntimeConfig2 = (config) => {
   };
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeExtensions.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/runtimeExtensions.js
 var resolveRuntimeExtensions2 = (runtimeConfig, extensions) => {
   const extensionConfiguration = Object.assign(import_client21.getAwsRegionExtensionConfiguration(runtimeConfig), import_client22.getDefaultExtensionConfiguration(runtimeConfig), import_protocols6.getHttpHandlerExtensionConfiguration(runtimeConfig), getHttpAuthExtensionConfiguration2(runtimeConfig));
   extensions.forEach((extension) => extension.configure(extensionConfiguration));
   return Object.assign(runtimeConfig, import_client21.resolveAwsRegionExtensionConfiguration(extensionConfiguration), import_client22.resolveDefaultRuntimeConfig(extensionConfiguration), import_protocols6.resolveHttpHandlerRuntimeConfig(extensionConfiguration), resolveHttpAuthRuntimeConfig2(extensionConfiguration));
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/Route53Client.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/Route53Client.js
 class Route53Client extends import_client24.Client {
   config;
   constructor(...[configuration]) {
@@ -36258,10 +36493,10 @@ class Route53Client extends import_client24.Client {
   }
 }
 
-// ../../node_modules/.bun/@aws-sdk+middleware-sdk-route53@3.972.23/node_modules/@aws-sdk/middleware-sdk-route53/dist-es/constants.js
+// ../../node_modules/.bun/@aws-sdk+middleware-sdk-route53@3.972.25/node_modules/@aws-sdk/middleware-sdk-route53/dist-es/constants.js
 var IDENTIFIER_PREFIX_PATTERN = /^\/(hostedzone|change|delegationset)\//;
 
-// ../../node_modules/.bun/@aws-sdk+middleware-sdk-route53@3.972.23/node_modules/@aws-sdk/middleware-sdk-route53/dist-es/change-resource-record-sets.js
+// ../../node_modules/.bun/@aws-sdk+middleware-sdk-route53@3.972.25/node_modules/@aws-sdk/middleware-sdk-route53/dist-es/change-resource-record-sets.js
 function changeResourceRecordSetsMiddleware() {
   return (next) => async (args) => {
     const { ChangeBatch } = args.input;
@@ -36306,7 +36541,7 @@ var getChangeResourceRecordSetsPlugin = (unused) => ({
     clientStack.add(changeResourceRecordSetsMiddleware(), changeResourceRecordSetsMiddlewareOptions);
   }
 });
-// ../../node_modules/.bun/@aws-sdk+middleware-sdk-route53@3.972.23/node_modules/@aws-sdk/middleware-sdk-route53/dist-es/id-normalizer.js
+// ../../node_modules/.bun/@aws-sdk+middleware-sdk-route53@3.972.25/node_modules/@aws-sdk/middleware-sdk-route53/dist-es/id-normalizer.js
 var IDENTIFIER_PARAMETERS = ["DelegationSetId", "HostedZoneId", "Id"];
 function idNormalizerMiddleware() {
   return (next) => async (args) => {
@@ -36334,7 +36569,7 @@ var getIdNormalizerPlugin = (unused) => ({
     clientStack.add(idNormalizerMiddleware(), idNormalizerMiddlewareOptions);
   }
 });
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/commandBuilder.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/commandBuilder.js
 var import_client25 = __toESM(require_client(), 1);
 var import_endpoints4 = __toESM(require_endpoints(), 1);
 var command2 = import_client25.makeBuilder(commonParams, "AWSDnsV20130401", "Route53Client", import_endpoints4.getEndpointPlugin);
@@ -36347,31 +36582,31 @@ var _mw1 = (Command, cs, config, o2) => [
   getIdNormalizerPlugin(config)
 ];
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/ChangeResourceRecordSetsCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/ChangeResourceRecordSetsCommand.js
 class ChangeResourceRecordSetsCommand extends command2(_ep02, _mw1, "ChangeResourceRecordSets", ChangeResourceRecordSets$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/CreateHostedZoneCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/CreateHostedZoneCommand.js
 class CreateHostedZoneCommand extends command2(_ep02, _mw02, "CreateHostedZone", CreateHostedZone$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/DeleteHostedZoneCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/DeleteHostedZoneCommand.js
 class DeleteHostedZoneCommand extends command2(_ep02, _mw02, "DeleteHostedZone", DeleteHostedZone$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/GetHostedZoneCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/GetHostedZoneCommand.js
 class GetHostedZoneCommand extends command2(_ep02, _mw02, "GetHostedZone", GetHostedZone$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/ListHostedZonesCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/ListHostedZonesCommand.js
 class ListHostedZonesCommand extends command2(_ep02, _mw02, "ListHostedZones", ListHostedZones$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1106.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/ListResourceRecordSetsCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53@3.1112.0/node_modules/@aws-sdk/client-route-53/dist-es/commands/ListResourceRecordSetsCommand.js
 class ListResourceRecordSetsCommand extends command2(_ep02, _mw02, "ListResourceRecordSets", ListResourceRecordSets$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/Route53DomainsClient.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/Route53DomainsClient.js
 var import_client34 = __toESM(require_client2(), 1);
 var import_core2 = __toESM(require_dist_cjs2(), 1);
 var import_client35 = __toESM(require_client(), 1);
@@ -36381,7 +36616,7 @@ var import_protocols11 = __toESM(require_protocols(), 1);
 var import_retry6 = __toESM(require_retry(), 1);
 var import_schema4 = __toESM(require_schema(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/auth/httpAuthSchemeProvider.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/auth/httpAuthSchemeProvider.js
 var import_httpAuthSchemes4 = __toESM(require_httpAuthSchemes(), 1);
 var import_client26 = __toESM(require_client(), 1);
 var defaultRoute53DomainsHttpAuthSchemeParametersProvider = async (config, context, input) => {
@@ -36423,7 +36658,7 @@ var resolveHttpAuthSchemeConfig3 = (config) => {
   });
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/endpoint/EndpointParameters.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/endpoint/EndpointParameters.js
 var resolveClientEndpointParameters3 = (options) => {
   return Object.assign(options, {
     useDualstackEndpoint: options.useDualstackEndpoint ?? false,
@@ -36437,10 +36672,10 @@ var commonParams3 = {
   Region: { type: "builtInParams", name: "region" },
   UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
 };
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/package.json
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/package.json
 var package_default2 = {
   name: "@aws-sdk/client-route-53-domains",
-  version: "3.1106.0",
+  version: "3.1112.0",
   description: "AWS SDK for JavaScript Route 53 Domains Client for Node.js, Browser and React Native",
   homepage: "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-route-53-domains",
   license: "Apache-2.0",
@@ -36485,12 +36720,12 @@ var package_default2 = {
     "generate:client": "node ../../scripts/generate-clients/single-service",
     "test:e2e": "yarn g:vitest run -c vitest.config.e2e.mts",
     "test:e2e:watch": "yarn g:vitest watch -c vitest.config.e2e.mts",
-    "test:index": "tsc --noEmit ./test/index-types.ts && node ./test/index-objects.spec.mjs"
+    "test:index": "tsc -p tsconfig.test.json && node ./test/index-objects.spec.mjs"
   },
   dependencies: {
-    "@aws-sdk/core": "^3.977.6",
-    "@aws-sdk/credential-provider-node": "^3.972.78",
-    "@aws-sdk/types": "^3.974.2",
+    "@aws-sdk/core": "^3.977.8",
+    "@aws-sdk/credential-provider-node": "^3.972.80",
+    "@aws-sdk/types": "^3.974.4",
     "@smithy/core": "^3.31.1",
     "@smithy/fetch-http-handler": "^5.6.13",
     "@smithy/node-http-handler": "^4.9.13",
@@ -36503,14 +36738,14 @@ var package_default2 = {
     concurrently: "7.0.0",
     "downlevel-dts": "0.10.1",
     premove: "4.0.0",
-    typescript: "~5.8.3"
+    typescript: "~7.0.2"
   },
   engines: {
     node: ">=20.0.0"
   }
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeConfig.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeConfig.js
 var import_client30 = __toESM(require_client2(), 1);
 var import_httpAuthSchemes6 = __toESM(require_httpAuthSchemes(), 1);
 var import_client31 = __toESM(require_client(), 1);
@@ -36519,7 +36754,7 @@ var import_retry5 = __toESM(require_retry(), 1);
 var import_serde6 = __toESM(require_serde(), 1);
 var import_node_http_handler3 = __toESM(require_dist_cjs4(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeConfig.shared.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeConfig.shared.js
 var import_httpAuthSchemes5 = __toESM(require_httpAuthSchemes(), 1);
 var import_protocols8 = __toESM(require_protocols2(), 1);
 var import_checksum2 = __toESM(require_checksum(), 1);
@@ -36527,11 +36762,11 @@ var import_client29 = __toESM(require_client(), 1);
 var import_protocols9 = __toESM(require_protocols(), 1);
 var import_serde5 = __toESM(require_serde(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/endpoint/endpointResolver.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/endpoint/endpointResolver.js
 var import_client27 = __toESM(require_client2(), 1);
 var import_endpoints6 = __toESM(require_endpoints(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/endpoint/bdd.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/endpoint/bdd.js
 var import_endpoints5 = __toESM(require_endpoints(), 1);
 var k3 = "ref";
 var a3 = -1;
@@ -36614,7 +36849,7 @@ var nodes3 = new Int32Array([
 ]);
 var bdd3 = import_endpoints5.BinaryDecisionDiagram.from(nodes3, root3, _data3.conditions, _data3.results);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/endpoint/endpointResolver.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/endpoint/endpointResolver.js
 var cache3 = new import_endpoints6.EndpointCache({
   size: 50,
   params: ["Endpoint", "Region", "UseDualStack", "UseFIPS"]
@@ -36627,10 +36862,10 @@ var defaultEndpointResolver3 = (endpointParams, context = {}) => {
 };
 import_endpoints6.customEndpointFunctions.aws = import_client27.awsEndpointFunctions;
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/schemas/schemas_0.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/schemas/schemas_0.js
 var import_schema3 = __toESM(require_schema(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/models/Route53DomainsServiceException.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/models/Route53DomainsServiceException.js
 var import_client28 = __toESM(require_client(), 1);
 class Route53DomainsServiceException extends import_client28.ServiceException {
   constructor(options) {
@@ -36639,7 +36874,7 @@ class Route53DomainsServiceException extends import_client28.ServiceException {
   }
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/models/errors.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/models/errors.js
 class DomainLimitExceeded extends Route53DomainsServiceException {
   name = "DomainLimitExceeded";
   $fault = "client";
@@ -36748,7 +36983,7 @@ class TLDInMaintenance extends Route53DomainsServiceException {
   }
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/schemas/schemas_0.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/schemas/schemas_0.js
 var _A2 = "Availability";
 var _ACE = "AbuseContactEmail";
 var _ACP = "AbuseContactPhone";
@@ -37300,7 +37535,7 @@ var UpdateDomainNameservers$ = [
   () => UpdateDomainNameserversResponse$
 ];
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeConfig.shared.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeConfig.shared.js
 var getRuntimeConfig4 = (config) => {
   return {
     apiVersion: "2014-05-15",
@@ -37334,7 +37569,7 @@ var getRuntimeConfig4 = (config) => {
   };
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeConfig.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeConfig.js
 var getRuntimeConfig5 = (config) => {
   import_client31.emitWarningIfUnsupportedVersion(process.version);
   const defaultsMode = import_config30.resolveDefaultsModeConfig(config);
@@ -37368,12 +37603,12 @@ var getRuntimeConfig5 = (config) => {
   };
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeExtensions.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeExtensions.js
 var import_client32 = __toESM(require_client2(), 1);
 var import_client33 = __toESM(require_client(), 1);
 var import_protocols10 = __toESM(require_protocols(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/auth/httpAuthExtensionConfiguration.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/auth/httpAuthExtensionConfiguration.js
 var getHttpAuthExtensionConfiguration3 = (runtimeConfig) => {
   const _httpAuthSchemes = runtimeConfig.httpAuthSchemes;
   let _httpAuthSchemeProvider = runtimeConfig.httpAuthSchemeProvider;
@@ -37412,14 +37647,14 @@ var resolveHttpAuthRuntimeConfig3 = (config) => {
   };
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeExtensions.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/runtimeExtensions.js
 var resolveRuntimeExtensions3 = (runtimeConfig, extensions) => {
   const extensionConfiguration = Object.assign(import_client32.getAwsRegionExtensionConfiguration(runtimeConfig), import_client33.getDefaultExtensionConfiguration(runtimeConfig), import_protocols10.getHttpHandlerExtensionConfiguration(runtimeConfig), getHttpAuthExtensionConfiguration3(runtimeConfig));
   extensions.forEach((extension) => extension.configure(extensionConfiguration));
   return Object.assign(runtimeConfig, import_client32.resolveAwsRegionExtensionConfiguration(extensionConfiguration), import_client33.resolveDefaultRuntimeConfig(extensionConfiguration), import_protocols10.resolveHttpHandlerRuntimeConfig(extensionConfiguration), resolveHttpAuthRuntimeConfig3(extensionConfiguration));
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/Route53DomainsClient.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/Route53DomainsClient.js
 class Route53DomainsClient extends import_client35.Client {
   config;
   constructor(...[configuration]) {
@@ -37455,38 +37690,38 @@ class Route53DomainsClient extends import_client35.Client {
   }
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commandBuilder.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commandBuilder.js
 var import_client36 = __toESM(require_client(), 1);
 var import_endpoints8 = __toESM(require_endpoints(), 1);
 var command3 = import_client36.makeBuilder(commonParams3, "Route53Domains_v20140515", "Route53DomainsClient", import_endpoints8.getEndpointPlugin);
 var _ep03 = {};
 var _mw03 = (Command, cs, config, o2) => [];
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/CheckDomainAvailabilityCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/CheckDomainAvailabilityCommand.js
 class CheckDomainAvailabilityCommand extends command3(_ep03, _mw03, "CheckDomainAvailability", CheckDomainAvailability$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/GetDomainDetailCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/GetDomainDetailCommand.js
 class GetDomainDetailCommand extends command3(_ep03, _mw03, "GetDomainDetail", GetDomainDetail$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/GetOperationDetailCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/GetOperationDetailCommand.js
 class GetOperationDetailCommand extends command3(_ep03, _mw03, "GetOperationDetail", GetOperationDetail$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/ListDomainsCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/ListDomainsCommand.js
 class ListDomainsCommand extends command3(_ep03, _mw03, "ListDomains", ListDomains$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/ListPricesCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/ListPricesCommand.js
 class ListPricesCommand extends command3(_ep03, _mw03, "ListPrices", ListPrices$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/RegisterDomainCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/RegisterDomainCommand.js
 class RegisterDomainCommand extends command3(_ep03, _mw03, "RegisterDomain", RegisterDomain$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1106.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/UpdateDomainNameserversCommand.js
+// ../../node_modules/.bun/@aws-sdk+client-route-53-domains@3.1112.0/node_modules/@aws-sdk/client-route-53-domains/dist-es/commands/UpdateDomainNameserversCommand.js
 class UpdateDomainNameserversCommand extends command3(_ep03, _mw03, "UpdateDomainNameservers", UpdateDomainNameservers$) {
 }
 
@@ -39465,24 +39700,24 @@ async function syncAll(dbFns) {
 
 // src/lib/config.ts
 import { createHash as createHash3 } from "crypto";
-import { copyFileSync as copyFileSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync2 } from "fs";
-import { homedir as homedir3 } from "os";
-import { dirname as dirname4, join as join4 } from "path";
+import { copyFileSync as copyFileSync2, existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync2 } from "fs";
+import { homedir as homedir5 } from "os";
+import { dirname as dirname4, join as join6 } from "path";
 function canonicalHome2(env) {
-  return env["HOME"] || env["USERPROFILE"] || homedir3();
+  return env["HOME"] || env["USERPROFILE"] || homedir5();
 }
 function migrateLegacyConfig(env = process.env, dryRun = false) {
   const report = { dryRun, wouldCopy: false, copied: false };
   const home = canonicalHome2(env);
-  const canonicalDir = join4(home, ".hasna", "domains");
-  const newPath = join4(canonicalDir, "config.json");
-  if (existsSync2(newPath))
+  const canonicalDir = join6(home, ".hasna", "domains");
+  const newPath = join6(canonicalDir, "config.json");
+  if (existsSync3(newPath))
     return report;
-  if (existsSync2(join4(canonicalDir, ".migrated-from-xdg-config.receipt.json")))
+  if (existsSync3(join6(canonicalDir, ".migrated-from-xdg-config.receipt.json")))
     return report;
-  const xdgConfig = env["XDG_CONFIG_HOME"]?.trim() || join4(home, ".config");
-  const oldPath = join4(xdgConfig, "open-domains", "config.json");
-  if (!existsSync2(oldPath))
+  const xdgConfig = env["XDG_CONFIG_HOME"]?.trim() || join6(home, ".config");
+  const oldPath = join6(xdgConfig, "open-domains", "config.json");
+  if (!existsSync3(oldPath))
     return report;
   report.wouldCopy = true;
   if (dryRun)
@@ -39494,7 +39729,7 @@ function migrateLegacyConfig(env = process.env, dryRun = false) {
   if (!oldBytes.equals(newBytes)) {
     throw new Error(`Refusing migration: copied ${newPath} does not byte-match ${oldPath}; the canonical config was not populated.`);
   }
-  writeFileSync2(join4(canonicalDir, ".migrated-from-xdg-config.receipt.json"), `${JSON.stringify({
+  writeFileSync2(join6(canonicalDir, ".migrated-from-xdg-config.receipt.json"), `${JSON.stringify({
     migratedAt: new Date().toISOString(),
     from: oldPath,
     to: newPath,
@@ -39510,13 +39745,15 @@ function getConfigPath(env = process.env) {
     return env["DOMAINS_CONFIG_PATH"];
   const dir = env["DOMAINS_CONFIG_DIR"];
   if (dir)
-    return join4(dir, "config.json");
-  migrateLegacyConfig(env);
-  return join4(canonicalHome2(env), ".hasna", "domains", "config.json");
+    return join6(dir, "config.json");
+  if (!adoptResolverHome(resolverHome(env), env)) {
+    migrateLegacyConfig(env);
+  }
+  return getDefaultConfigPath(env);
 }
 function loadConfig4(env = process.env) {
   const path = getConfigPath(env);
-  if (!existsSync2(path))
+  if (!existsSync3(path))
     return {};
   try {
     return JSON.parse(readFileSync5(path, "utf-8"));