@ivotoby/openapi-mcp-server 1.12.1 → 1.12.3

package/dist/cli.js

@@ -8883,11 +8883,11 @@ var require_mime_types = __commonJS({
       }
       return exts[0];
     }
-    function lookup(path) {
-      if (!path || typeof path !== "string") {
+    function lookup(path2) {
+      if (!path2 || typeof path2 !== "string") {
         return false;
       }
-      var extension2 = extname2("x." + path).toLowerCase().substr(1);
+      var extension2 = extname2("x." + path2).toLowerCase().substr(1);
       if (!extension2) {
         return false;
       }
@@ -9976,6 +9976,7 @@ var require_es_set_tostringtag = __commonJS({
 // node_modules/form-data/lib/populate.js
 var require_populate = __commonJS({
   "node_modules/form-data/lib/populate.js"(exports, module) {
+    "use strict";
     module.exports = function(dst, src) {
       Object.keys(src).forEach(function(prop) {
         dst[prop] = dst[prop] || src[prop];
@@ -9988,20 +9989,21 @@ var require_populate = __commonJS({
 // node_modules/form-data/lib/form_data.js
 var require_form_data = __commonJS({
   "node_modules/form-data/lib/form_data.js"(exports, module) {
+    "use strict";
     var CombinedStream = require_combined_stream();
     var util3 = __require("util");
-    var path = __require("path");
-    var http3 = __require("http");
+    var path2 = __require("path");
+    var http4 = __require("http");
     var https2 = __require("https");
     var parseUrl = __require("url").parse;
-    var fs = __require("fs");
+    var fs2 = __require("fs");
     var Stream = __require("stream").Stream;
+    var crypto3 = __require("crypto");
     var mime = require_mime_types();
     var asynckit = require_asynckit();
     var setToStringTag = require_es_set_tostringtag();
+    var hasOwn = require_hasown();
     var populate = require_populate();
-    module.exports = FormData3;
-    util3.inherits(FormData3, CombinedStream);
     function FormData3(options) {
       if (!(this instanceof FormData3)) {
         return new FormData3(options);
@@ -10015,16 +10017,17 @@ var require_form_data = __commonJS({
         this[option] = options[option];
       }
     }
+    util3.inherits(FormData3, CombinedStream);
     FormData3.LINE_BREAK = "\r\n";
     FormData3.DEFAULT_CONTENT_TYPE = "application/octet-stream";
     FormData3.prototype.append = function(field, value, options) {
       options = options || {};
-      if (typeof options == "string") {
+      if (typeof options === "string") {
         options = { filename: options };
       }
       var append2 = CombinedStream.prototype.append.bind(this);
-      if (typeof value == "number") {
-        value = "" + value;
+      if (typeof value === "number" || value == null) {
+        value = String(value);
       }
       if (Array.isArray(value)) {
         this._error(new Error("Arrays are not supported."));
@@ -10040,7 +10043,7 @@ var require_form_data = __commonJS({
     FormData3.prototype._trackLength = function(header, value, options) {
       var valueLength = 0;
       if (options.knownLength != null) {
-        valueLength += +options.knownLength;
+        valueLength += Number(options.knownLength);
       } else if (Buffer.isBuffer(value)) {
         valueLength = value.length;
       } else if (typeof value === "string") {
@@ -10048,7 +10051,7 @@ var require_form_data = __commonJS({
       }
       this._valueLength += valueLength;
       this._overheadLength += Buffer.byteLength(header) + FormData3.LINE_BREAK.length;
-      if (!value || !value.path && !(value.readable && Object.prototype.hasOwnProperty.call(value, "httpVersion")) && !(value instanceof Stream)) {
+      if (!value || !value.path && !(value.readable && hasOwn(value, "httpVersion")) && !(value instanceof Stream)) {
         return;
       }
       if (!options.knownLength) {
@@ -10056,26 +10059,25 @@ var require_form_data = __commonJS({
       }
     };
     FormData3.prototype._lengthRetriever = function(value, callback) {
-      if (Object.prototype.hasOwnProperty.call(value, "fd")) {
+      if (hasOwn(value, "fd")) {
         if (value.end != void 0 && value.end != Infinity && value.start != void 0) {
           callback(null, value.end + 1 - (value.start ? value.start : 0));
         } else {
-          fs.stat(value.path, function(err, stat) {
-            var fileSize;
+          fs2.stat(value.path, function(err, stat) {
             if (err) {
               callback(err);
               return;
             }
-            fileSize = stat.size - (value.start ? value.start : 0);
+            var fileSize = stat.size - (value.start ? value.start : 0);
             callback(null, fileSize);
           });
         }
-      } else if (Object.prototype.hasOwnProperty.call(value, "httpVersion")) {
-        callback(null, +value.headers["content-length"]);
-      } else if (Object.prototype.hasOwnProperty.call(value, "httpModule")) {
+      } else if (hasOwn(value, "httpVersion")) {
+        callback(null, Number(value.headers["content-length"]));
+      } else if (hasOwn(value, "httpModule")) {
         value.on("response", function(response) {
           value.pause();
-          callback(null, +response.headers["content-length"]);
+          callback(null, Number(response.headers["content-length"]));
         });
         value.resume();
       } else {
@@ -10083,7 +10085,7 @@ var require_form_data = __commonJS({
       }
     };
     FormData3.prototype._multiPartHeader = function(field, value, options) {
-      if (typeof options.header == "string") {
+      if (typeof options.header === "string") {
         return options.header;
       }
       var contentDisposition = this._getContentDisposition(value, options);
@@ -10095,12 +10097,12 @@ var require_form_data = __commonJS({
         // if no content type. allow it to be empty array
         "Content-Type": [].concat(contentType || [])
       };
-      if (typeof options.header == "object") {
+      if (typeof options.header === "object") {
         populate(headers, options.header);
       }
       var header;
       for (var prop in headers) {
-        if (Object.prototype.hasOwnProperty.call(headers, prop)) {
+        if (hasOwn(headers, prop)) {
           header = headers[prop];
           if (header == null) {
             continue;
@@ -10116,34 +10118,33 @@ var require_form_data = __commonJS({
       return "--" + this.getBoundary() + FormData3.LINE_BREAK + contents + FormData3.LINE_BREAK;
     };
     FormData3.prototype._getContentDisposition = function(value, options) {
-      var filename, contentDisposition;
+      var filename;
       if (typeof options.filepath === "string") {
-        filename = path.normalize(options.filepath).replace(/\\/g, "/");
-      } else if (options.filename || value.name || value.path) {
-        filename = path.basename(options.filename || value.name || value.path);
-      } else if (value.readable && Object.prototype.hasOwnProperty.call(value, "httpVersion")) {
-        filename = path.basename(value.client._httpMessage.path || "");
+        filename = path2.normalize(options.filepath).replace(/\\/g, "/");
+      } else if (options.filename || value && (value.name || value.path)) {
+        filename = path2.basename(options.filename || value && (value.name || value.path));
+      } else if (value && value.readable && hasOwn(value, "httpVersion")) {
+        filename = path2.basename(value.client._httpMessage.path || "");
       }
       if (filename) {
-        contentDisposition = 'filename="' + filename + '"';
+        return 'filename="' + filename + '"';
       }
-      return contentDisposition;
     };
     FormData3.prototype._getContentType = function(value, options) {
       var contentType = options.contentType;
-      if (!contentType && value.name) {
+      if (!contentType && value && value.name) {
         contentType = mime.lookup(value.name);
       }
-      if (!contentType && value.path) {
+      if (!contentType && value && value.path) {
         contentType = mime.lookup(value.path);
       }
-      if (!contentType && value.readable && Object.prototype.hasOwnProperty.call(value, "httpVersion")) {
+      if (!contentType && value && value.readable && hasOwn(value, "httpVersion")) {
         contentType = value.headers["content-type"];
       }
       if (!contentType && (options.filepath || options.filename)) {
         contentType = mime.lookup(options.filepath || options.filename);
       }
-      if (!contentType && typeof value == "object") {
+      if (!contentType && value && typeof value === "object") {
         contentType = FormData3.DEFAULT_CONTENT_TYPE;
       }
       return contentType;
@@ -10167,13 +10168,16 @@ var require_form_data = __commonJS({
         "content-type": "multipart/form-data; boundary=" + this.getBoundary()
       };
       for (header in userHeaders) {
-        if (Object.prototype.hasOwnProperty.call(userHeaders, header)) {
+        if (hasOwn(userHeaders, header)) {
           formHeaders[header.toLowerCase()] = userHeaders[header];
         }
       }
       return formHeaders;
     };
     FormData3.prototype.setBoundary = function(boundary) {
+      if (typeof boundary !== "string") {
+        throw new TypeError("FormData boundary must be a string");
+      }
       this._boundary = boundary;
     };
     FormData3.prototype.getBoundary = function() {
@@ -10200,11 +10204,7 @@ var require_form_data = __commonJS({
       return Buffer.concat([dataBuffer, Buffer.from(this._lastBoundary())]);
     };
     FormData3.prototype._generateBoundary = function() {
-      var boundary = "--------------------------";
-      for (var i = 0; i < 24; i++) {
-        boundary += Math.floor(Math.random() * 10).toString(16);
-      }
-      this._boundary = boundary;
+      this._boundary = "--------------------------" + crypto3.randomBytes(12).toString("hex");
     };
     FormData3.prototype.getLengthSync = function() {
       var knownLength = this._overheadLength + this._valueLength;
@@ -10244,8 +10244,10 @@ var require_form_data = __commonJS({
       });
     };
     FormData3.prototype.submit = function(params, cb) {
-      var request, options, defaults2 = { method: "post" };
-      if (typeof params == "string") {
+      var request;
+      var options;
+      var defaults2 = { method: "post" };
+      if (typeof params === "string") {
         params = parseUrl(params);
         options = populate({
           port: params.port,
@@ -10256,14 +10258,14 @@ var require_form_data = __commonJS({
       } else {
         options = populate(params, defaults2);
         if (!options.port) {
-          options.port = options.protocol == "https:" ? 443 : 80;
+          options.port = options.protocol === "https:" ? 443 : 80;
         }
       }
       options.headers = this.getHeaders(params.headers);
-      if (options.protocol == "https:") {
+      if (options.protocol === "https:") {
         request = https2.request(options);
       } else {
-        request = http3.request(options);
+        request = http4.request(options);
       }
       this.getLength(function(err, length) {
         if (err && err !== "Unknown stream") {
@@ -10298,7 +10300,8 @@ var require_form_data = __commonJS({
     FormData3.prototype.toString = function() {
       return "[object FormData]";
     };
-    setToStringTag(FormData3, "FormData");
+    setToStringTag(FormData3.prototype, "FormData");
+    module.exports = FormData3;
   }
 });
 
@@ -11160,7 +11163,7 @@ var require_follow_redirects = __commonJS({
   "node_modules/follow-redirects/index.js"(exports, module) {
     var url2 = __require("url");
     var URL2 = url2.URL;
-    var http3 = __require("http");
+    var http4 = __require("http");
     var https2 = __require("https");
     var Writable = __require("stream").Writable;
     var assert = __require("assert");
@@ -11168,7 +11171,7 @@ var require_follow_redirects = __commonJS({
     (function detectUnsupportedEnvironment() {
       var looksLikeNode = typeof process !== "undefined";
       var looksLikeBrowser = typeof window !== "undefined" && typeof document !== "undefined";
-      var looksLikeV8 = isFunction3(Error.captureStackTrace);
+      var looksLikeV8 = isFunction4(Error.captureStackTrace);
       if (!looksLikeNode && (looksLikeBrowser || !looksLikeV8)) {
         console.warn("The follow-redirects package should be excluded from browser builds.");
       }
@@ -11263,7 +11266,7 @@ var require_follow_redirects = __commonJS({
       if (!isString2(data) && !isBuffer2(data)) {
         throw new TypeError("data should be a string, Buffer or Uint8Array");
       }
-      if (isFunction3(encoding)) {
+      if (isFunction4(encoding)) {
         callback = encoding;
         encoding = null;
       }
@@ -11283,10 +11286,10 @@ var require_follow_redirects = __commonJS({
       }
     };
     RedirectableRequest.prototype.end = function(data, encoding, callback) {
-      if (isFunction3(data)) {
+      if (isFunction4(data)) {
         callback = data;
         data = encoding = null;
-      } else if (isFunction3(encoding)) {
+      } else if (isFunction4(encoding)) {
         callback = encoding;
         encoding = null;
       }
@@ -11487,7 +11490,7 @@ var require_follow_redirects = __commonJS({
       if (redirectUrl.protocol !== currentUrlParts.protocol && redirectUrl.protocol !== "https:" || redirectUrl.host !== currentHost && !isSubdomain(redirectUrl.host, currentHost)) {
         removeMatchingHeaders(/^(?:(?:proxy-)?authorization|cookie)$/i, this._options.headers);
       }
-      if (isFunction3(beforeRedirect)) {
+      if (isFunction4(beforeRedirect)) {
         var responseDetails = {
           headers: response.headers,
           statusCode
@@ -11522,7 +11525,7 @@ var require_follow_redirects = __commonJS({
             options = validateUrl(input);
             input = { protocol };
           }
-          if (isFunction3(options)) {
+          if (isFunction4(options)) {
             callback = options;
             options = null;
           }
@@ -11602,7 +11605,7 @@ var require_follow_redirects = __commonJS({
     }
     function createErrorType(code, message, baseClass) {
       function CustomError(properties) {
-        if (isFunction3(Error.captureStackTrace)) {
+        if (isFunction4(Error.captureStackTrace)) {
           Error.captureStackTrace(this, this.constructor);
         }
         Object.assign(this, properties || {});
@@ -11637,7 +11640,7 @@ var require_follow_redirects = __commonJS({
     function isString2(value) {
       return typeof value === "string" || value instanceof String;
     }
-    function isFunction3(value) {
+    function isFunction4(value) {
       return typeof value === "function";
     }
     function isBuffer2(value) {
@@ -11646,7 +11649,7 @@ var require_follow_redirects = __commonJS({
     function isURL(value) {
       return URL2 && value instanceof URL2;
     }
-    module.exports = wrap2({ http: http3, https: https2 });
+    module.exports = wrap2({ http: http4, https: https2 });
     module.exports.wrap = wrap2;
   }
 });
@@ -11656,7 +11659,14 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 
 // src/server.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { ListToolsRequestSchema, CallToolRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+import {
+  ListToolsRequestSchema,
+  CallToolRequestSchema,
+  ListPromptsRequestSchema,
+  GetPromptRequestSchema,
+  ListResourcesRequestSchema,
+  ReadResourceRequestSchema
+} from "@modelcontextprotocol/sdk/types.js";
 
 // src/openapi-loader.ts
 import { readFile } from "fs/promises";
@@ -12525,6 +12535,18 @@ function charFromCodepoint(c) {
     (c - 65536 & 1023) + 56320
   );
 }
+function setProperty(object, key, value) {
+  if (key === "__proto__") {
+    Object.defineProperty(object, key, {
+      configurable: true,
+      enumerable: true,
+      writable: true,
+      value
+    });
+  } else {
+    object[key] = value;
+  }
+}
 var simpleEscapeCheck = new Array(256);
 var simpleEscapeMap = new Array(256);
 for (i = 0; i < 256; i++) {
@@ -12644,7 +12666,7 @@ function mergeMappings(state, destination, source, overridableKeys) {
   for (index = 0, quantity = sourceKeys.length; index < quantity; index += 1) {
     key = sourceKeys[index];
     if (!_hasOwnProperty$1.call(destination, key)) {
-      destination[key] = source[key];
+      setProperty(destination, key, source[key]);
       overridableKeys[key] = true;
     }
   }
@@ -12684,16 +12706,7 @@ function storeMappingPair(state, _result, overridableKeys, keyTag, keyNode, valu
       state.position = startPos || state.position;
       throwError(state, "duplicated mapping key");
     }
-    if (keyNode === "__proto__") {
-      Object.defineProperty(_result, keyNode, {
-        configurable: true,
-        enumerable: true,
-        writable: true,
-        value: valueNode
-      });
-    } else {
-      _result[keyNode] = valueNode;
-    }
+    setProperty(_result, keyNode, valueNode);
     delete overridableKeys[keyNode];
   }
   return _result;
@@ -14281,7 +14294,6 @@ var jsYaml = {
   safeLoadAll,
   safeDump
 };
-var js_yaml_default = jsYaml;
 
 // src/openapi-loader.ts
 import crypto from "crypto";
@@ -14377,8 +14389,8 @@ function parseToolId(toolId) {
   if (!pathPart) {
     return { method, path: "" };
   }
-  const path = pathPart.replace(/__/g, "/");
-  return { method, path: "/" + path };
+  const path2 = pathPart.replace(/__/g, "/");
+  return { method, path: "/" + path2 };
 }
 function sanitizeForToolId(input) {
   let result = input.replace(/[^A-Za-z0-9_.-]/g, "").replace(/_{3,}/g, "__");
@@ -14388,8 +14400,8 @@ function sanitizeForToolId(input) {
 function collapseExcessiveHyphens(input) {
   return input.replace(/-{4,}/g, "---");
 }
-function generateToolId(method, path) {
-  const cleanPath = path.replace(/^\//, "").replace(/\/+/g, "/").replace(/\{([^}]+)\}/g, "---$1").replace(/\//g, "__");
+function generateToolId(method, path2) {
+  const cleanPath = path2.replace(/^\//, "").replace(/\/+/g, "/").replace(/\{([^}]+)\}/g, "---$1").replace(/\//g, "__");
   const sanitizedPath = sanitizeForToolId(cleanPath);
   return `${method.toUpperCase()}::${sanitizedPath}`;
 }
@@ -14456,7 +14468,7 @@ var OpenAPISpecLoader = class {
    * Load spec content from standard input
    */
   async loadFromStdin() {
-    return new Promise((resolve5, reject) => {
+    return new Promise((resolve6, reject) => {
       let data = "";
       process.stdin.setEncoding("utf8");
       process.stdin.on("data", (chunk) => {
@@ -14466,7 +14478,7 @@ var OpenAPISpecLoader = class {
         if (data.trim().length === 0) {
           reject(new Error("No data received from stdin"));
         } else {
-          resolve5(data);
+          resolve6(data);
         }
       });
       process.stdin.on("error", (error) => {
@@ -14486,7 +14498,9 @@ var OpenAPISpecLoader = class {
       return JSON.parse(specContent);
     } catch (jsonError) {
       try {
-        const yamlResult = js_yaml_default.load(specContent);
+        const yamlResult = jsYaml.load(specContent, {
+          schema: CORE_SCHEMA
+        });
         if (!yamlResult || typeof yamlResult !== "object") {
           throw new Error("YAML parsing resulted in invalid object");
         }
@@ -14646,8 +14660,8 @@ var OpenAPISpecLoader = class {
    * - "/api/v1/users/{id}/posts" -> "posts"
    * - "/health" -> "health"
    */
-  extractResourceName(path) {
-    const segments = path.replace(/^\//, "").split("/");
+  extractResourceName(path2) {
+    const segments = path2.replace(/^\//, "").split("/");
     for (let i = segments.length - 1; i >= 0; i--) {
       const segment = segments[i];
       if (!segment.includes("{") && !segment.includes("}") && segment.length > 0) {
@@ -14661,7 +14675,7 @@ var OpenAPISpecLoader = class {
    */
   parseOpenAPISpec(spec) {
     const tools = /* @__PURE__ */ new Map();
-    for (const [path, pathItem] of Object.entries(spec.paths)) {
+    for (const [path2, pathItem] of Object.entries(spec.paths)) {
       if (!pathItem) continue;
       const pathLevelParameters = [];
       if (pathItem.parameters) {
@@ -14703,16 +14717,16 @@ var OpenAPISpecLoader = class {
         if (!["get", "post", "put", "patch", "delete", "options", "head"].includes(
           method.toLowerCase()
         )) {
-          console.warn(`Skipping non-HTTP method "${method}" for path ${path}`);
+          console.warn(`Skipping non-HTTP method "${method}" for path ${path2}`);
           continue;
         }
         const op = operation;
-        const toolId = generateToolId(method, path);
-        const nameSource = op.operationId || op.summary || `${method.toUpperCase()} ${path}`;
+        const toolId = generateToolId(method, path2);
+        const nameSource = op.operationId || op.summary || `${method.toUpperCase()} ${path2}`;
         const name = this.abbreviateOperationId(nameSource);
         const tool = {
           name,
-          description: op.description || `Make a ${method.toUpperCase()} request to ${path}`,
+          description: op.description || `Make a ${method.toUpperCase()} request to ${path2}`,
           inputSchema: {
             type: "object",
             properties: {}
@@ -14720,10 +14734,10 @@ var OpenAPISpecLoader = class {
           // Add metadata for filtering
           tags: op.tags || [],
           httpMethod: method.toUpperCase(),
-          resourceName: this.extractResourceName(path),
-          originalPath: path
+          resourceName: this.extractResourceName(path2),
+          originalPath: path2
         };
-        tool["x-original-path"] = path;
+        tool["x-original-path"] = path2;
         const requiredParams = [];
         const parameterMap = /* @__PURE__ */ new Map();
         for (const pathParam of pathLevelParameters) {
@@ -15240,6 +15254,16 @@ var isPlainObject = (val) => {
   const prototype3 = getPrototypeOf(val);
   return (prototype3 === null || prototype3 === Object.prototype || Object.getPrototypeOf(prototype3) === null) && !(toStringTag in val) && !(iterator in val);
 };
+var isEmptyObject = (val) => {
+  if (!isObject2(val) || isBuffer(val)) {
+    return false;
+  }
+  try {
+    return Object.keys(val).length === 0 && Object.getPrototypeOf(val) === Object.prototype;
+  } catch (e) {
+    return false;
+  }
+};
 var isDate = kindOfTest("Date");
 var isFile = kindOfTest("File");
 var isBlob = kindOfTest("Blob");
@@ -15267,6 +15291,9 @@ function forEach(obj, fn, { allOwnKeys = false } = {}) {
       fn.call(null, obj[i], i, obj);
     }
   } else {
+    if (isBuffer(obj)) {
+      return;
+    }
     const keys = allOwnKeys ? Object.getOwnPropertyNames(obj) : Object.keys(obj);
     const len = keys.length;
     let key;
@@ -15277,6 +15304,9 @@ function forEach(obj, fn, { allOwnKeys = false } = {}) {
   }
 }
 function findKey(obj, key) {
+  if (isBuffer(obj)) {
+    return null;
+  }
   key = key.toLowerCase();
   const keys = Object.keys(obj);
   let i = keys.length;
@@ -15295,7 +15325,7 @@ var _global = (() => {
 })();
 var isContextDefined = (context) => !isUndefined(context) && context !== _global;
 function merge2() {
-  const { caseless } = isContextDefined(this) && this || {};
+  const { caseless, skipUndefined } = isContextDefined(this) && this || {};
   const result = {};
   const assignValue = (val, key) => {
     const targetKey = caseless && findKey(result, key) || key;
@@ -15305,7 +15335,7 @@ function merge2() {
       result[targetKey] = merge2({}, val);
     } else if (isArray(val)) {
       result[targetKey] = val.slice();
-    } else {
+    } else if (!skipUndefined || !isUndefined(val)) {
       result[targetKey] = val;
     }
   };
@@ -15467,6 +15497,9 @@ var toJSONObject = (obj) => {
       if (stack.indexOf(source) >= 0) {
         return;
       }
+      if (isBuffer(source)) {
+        return source;
+      }
       if (!("toJSON" in source)) {
         stack[i] = source;
         const target = isArray(source) ? [] : {};
@@ -15516,6 +15549,7 @@ var utils_default = {
   isBoolean: isBoolean2,
   isObject: isObject2,
   isPlainObject,
+  isEmptyObject,
   isReadableStream,
   isRequest,
   isResponse,
@@ -15632,9 +15666,13 @@ AxiosError.from = (error, code, config, request, response, customProps) => {
   }, (prop) => {
     return prop !== "isAxiosError";
   });
-  AxiosError.call(axiosError, error.message, code, config, request, response);
-  axiosError.cause = error;
-  axiosError.name = error.name;
+  const msg = error && error.message ? error.message : "Error";
+  const errCode = code == null && error ? error.code : code;
+  AxiosError.call(axiosError, msg, errCode, config, request, response);
+  if (error && axiosError.cause == null) {
+    Object.defineProperty(axiosError, "cause", { value: error, configurable: true });
+  }
+  axiosError.name = error && error.name || "Error";
   customProps && Object.assign(axiosError, customProps);
   return axiosError;
 };
@@ -15651,9 +15689,9 @@ function isVisitable(thing) {
 function removeBrackets(key) {
   return utils_default.endsWith(key, "[]") ? key.slice(0, -2) : key;
 }
-function renderKey(path, key, dots) {
-  if (!path) return key;
-  return path.concat(key).map(function each(token, i) {
+function renderKey(path2, key, dots) {
+  if (!path2) return key;
+  return path2.concat(key).map(function each(token, i) {
     token = removeBrackets(token);
     return !dots && i ? "[" + token + "]" : token;
   }).join(dots ? "." : "");
@@ -15701,9 +15739,9 @@ function toFormData(obj, formData, options) {
     }
     return value;
   }
-  function defaultVisitor(value, key, path) {
+  function defaultVisitor(value, key, path2) {
     let arr = value;
-    if (value && !path && typeof value === "object") {
+    if (value && !path2 && typeof value === "object") {
       if (utils_default.endsWith(key, "{}")) {
         key = metaTokens ? key : key.slice(0, -2);
         value = JSON.stringify(value);
@@ -15722,7 +15760,7 @@ function toFormData(obj, formData, options) {
     if (isVisitable(value)) {
       return true;
     }
-    formData.append(renderKey(path, key, dots), convertValue(value));
+    formData.append(renderKey(path2, key, dots), convertValue(value));
     return false;
   }
   const stack = [];
@@ -15731,10 +15769,10 @@ function toFormData(obj, formData, options) {
     convertValue,
     isVisitable
   });
-  function build(value, path) {
+  function build(value, path2) {
     if (utils_default.isUndefined(value)) return;
     if (stack.indexOf(value) !== -1) {
-      throw Error("Circular reference detected in " + path.join("."));
+      throw Error("Circular reference detected in " + path2.join("."));
     }
     stack.push(value);
     utils_default.forEach(value, function each(el, key) {
@@ -15742,11 +15780,11 @@ function toFormData(obj, formData, options) {
         formData,
         el,
         utils_default.isString(key) ? key.trim() : key,
-        path,
+        path2,
         exposedHelpers
       );
       if (result === true) {
-        build(el, path ? path.concat(key) : [key]);
+        build(el, path2 ? path2.concat(key) : [key]);
       }
     });
     stack.pop();
@@ -15794,7 +15832,7 @@ var AxiosURLSearchParams_default = AxiosURLSearchParams;
 
 // node_modules/axios/lib/helpers/buildURL.js
 function encode2(val) {
-  return encodeURIComponent(val).replace(/%3A/gi, ":").replace(/%24/g, "$").replace(/%2C/gi, ",").replace(/%20/g, "+").replace(/%5B/gi, "[").replace(/%5D/gi, "]");
+  return encodeURIComponent(val).replace(/%3A/gi, ":").replace(/%24/g, "$").replace(/%2C/gi, ",").replace(/%20/g, "+");
 }
 function buildURL(url2, params, options) {
   if (!params) {
@@ -15850,7 +15888,7 @@ var InterceptorManager = class {
    *
    * @param {Number} id The ID that was returned by `use`
    *
-   * @returns {Boolean} `true` if the interceptor was removed, `false` otherwise
+   * @returns {void}
    */
   eject(id) {
     if (this.handlers[id]) {
@@ -15957,15 +15995,16 @@ var platform_default = {
 
 // node_modules/axios/lib/helpers/toURLEncodedForm.js
 function toURLEncodedForm(data, options) {
-  return toFormData_default(data, new platform_default.classes.URLSearchParams(), Object.assign({
-    visitor: function(value, key, path, helpers) {
+  return toFormData_default(data, new platform_default.classes.URLSearchParams(), {
+    visitor: function(value, key, path2, helpers) {
       if (platform_default.isNode && utils_default.isBuffer(value)) {
         this.append(key, value.toString("base64"));
         return false;
       }
       return helpers.defaultVisitor.apply(this, arguments);
-    }
-  }, options));
+    },
+    ...options
+  });
 }
 
 // node_modules/axios/lib/helpers/formDataToJSON.js
@@ -15987,11 +16026,11 @@ function arrayToObject(arr) {
   return obj;
 }
 function formDataToJSON(formData) {
-  function buildPath(path, value, target, index) {
-    let name = path[index++];
+  function buildPath(path2, value, target, index) {
+    let name = path2[index++];
     if (name === "__proto__") return true;
     const isNumericKey = Number.isFinite(+name);
-    const isLast = index >= path.length;
+    const isLast = index >= path2.length;
     name = !name && utils_default.isArray(target) ? target.length : name;
     if (isLast) {
       if (utils_default.hasOwnProp(target, name)) {
@@ -16004,7 +16043,7 @@ function formDataToJSON(formData) {
     if (!target[name] || !utils_default.isObject(target[name])) {
       target[name] = [];
     }
-    const result = buildPath(path, value, target[name], index);
+    const result = buildPath(path2, value, target[name], index);
     if (result && utils_default.isArray(target[name])) {
       target[name] = arrayToObject(target[name]);
     }
@@ -16090,7 +16129,7 @@ var defaults = {
       const silentJSONParsing = transitional2 && transitional2.silentJSONParsing;
       const strictJSONParsing = !silentJSONParsing && JSONRequested;
       try {
-        return JSON.parse(data);
+        return JSON.parse(data, this.parseReviver);
       } catch (e) {
         if (strictJSONParsing) {
           if (e.name === "SyntaxError") {
@@ -16433,10 +16472,10 @@ utils_default.inherits(CanceledError, AxiosError_default, {
 var CanceledError_default = CanceledError;
 
 // node_modules/axios/lib/core/settle.js
-function settle(resolve5, reject, response) {
+function settle(resolve6, reject, response) {
   const validateStatus2 = response.config.validateStatus;
   if (!response.status || !validateStatus2 || validateStatus2(response.status)) {
-    resolve5(response);
+    resolve6(response);
   } else {
     reject(new AxiosError_default(
       "Request failed with status code " + response.status,
@@ -16472,11 +16511,12 @@ var import_proxy_from_env = __toESM(require_proxy_from_env(), 1);
 var import_follow_redirects = __toESM(require_follow_redirects(), 1);
 import http from "http";
 import https from "https";
+import http2 from "http2";
 import util2 from "util";
 import zlib from "zlib";
 
 // node_modules/axios/lib/env/data.js
-var VERSION = "1.10.0";
+var VERSION = "1.13.2";
 
 // node_modules/axios/lib/helpers/parseProtocol.js
 function parseProtocol(url2) {
@@ -16818,7 +16858,7 @@ function throttle(fn, freq) {
       clearTimeout(timer);
       timer = null;
     }
-    fn.apply(null, args);
+    fn(...args);
   };
   const throttled = (...args) => {
     const now = Date.now();
@@ -16875,6 +16915,57 @@ var progressEventDecorator = (total, throttled) => {
 };
 var asyncDecorator = (fn) => (...args) => utils_default.asap(() => fn(...args));
 
+// node_modules/axios/lib/helpers/estimateDataURLDecodedBytes.js
+function estimateDataURLDecodedBytes(url2) {
+  if (!url2 || typeof url2 !== "string") return 0;
+  if (!url2.startsWith("data:")) return 0;
+  const comma = url2.indexOf(",");
+  if (comma < 0) return 0;
+  const meta = url2.slice(5, comma);
+  const body = url2.slice(comma + 1);
+  const isBase64 = /;base64/i.test(meta);
+  if (isBase64) {
+    let effectiveLen = body.length;
+    const len = body.length;
+    for (let i = 0; i < len; i++) {
+      if (body.charCodeAt(i) === 37 && i + 2 < len) {
+        const a = body.charCodeAt(i + 1);
+        const b = body.charCodeAt(i + 2);
+        const isHex = (a >= 48 && a <= 57 || a >= 65 && a <= 70 || a >= 97 && a <= 102) && (b >= 48 && b <= 57 || b >= 65 && b <= 70 || b >= 97 && b <= 102);
+        if (isHex) {
+          effectiveLen -= 2;
+          i += 2;
+        }
+      }
+    }
+    let pad = 0;
+    let idx = len - 1;
+    const tailIsPct3D = (j) => j >= 2 && body.charCodeAt(j - 2) === 37 && // '%'
+    body.charCodeAt(j - 1) === 51 && // '3'
+    (body.charCodeAt(j) === 68 || body.charCodeAt(j) === 100);
+    if (idx >= 0) {
+      if (body.charCodeAt(idx) === 61) {
+        pad++;
+        idx--;
+      } else if (tailIsPct3D(idx)) {
+        pad++;
+        idx -= 3;
+      }
+    }
+    if (pad === 1 && idx >= 0) {
+      if (body.charCodeAt(idx) === 61) {
+        pad++;
+      } else if (tailIsPct3D(idx)) {
+        pad++;
+      }
+    }
+    const groups = Math.floor(effectiveLen / 4);
+    const bytes = groups * 3 - (pad || 0);
+    return bytes > 0 ? bytes : 0;
+  }
+  return Buffer.byteLength(body, "utf8");
+}
+
 // node_modules/axios/lib/adapters/http.js
 var zlibOptions = {
   flush: zlib.constants.Z_SYNC_FLUSH,
@@ -16894,6 +16985,76 @@ var flushOnFinish = (stream4, [throttled, flush]) => {
   stream4.on("end", flush).on("error", flush);
   return throttled;
 };
+var Http2Sessions = class {
+  constructor() {
+    this.sessions = /* @__PURE__ */ Object.create(null);
+  }
+  getSession(authority, options) {
+    options = Object.assign({
+      sessionTimeout: 1e3
+    }, options);
+    let authoritySessions = this.sessions[authority];
+    if (authoritySessions) {
+      let len = authoritySessions.length;
+      for (let i = 0; i < len; i++) {
+        const [sessionHandle, sessionOptions] = authoritySessions[i];
+        if (!sessionHandle.destroyed && !sessionHandle.closed && util2.isDeepStrictEqual(sessionOptions, options)) {
+          return sessionHandle;
+        }
+      }
+    }
+    const session = http2.connect(authority, options);
+    let removed;
+    const removeSession = () => {
+      if (removed) {
+        return;
+      }
+      removed = true;
+      let entries = authoritySessions, len = entries.length, i = len;
+      while (i--) {
+        if (entries[i][0] === session) {
+          if (len === 1) {
+            delete this.sessions[authority];
+          } else {
+            entries.splice(i, 1);
+          }
+          return;
+        }
+      }
+    };
+    const originalRequestFn = session.request;
+    const { sessionTimeout } = options;
+    if (sessionTimeout != null) {
+      let timer;
+      let streamsCount = 0;
+      session.request = function() {
+        const stream4 = originalRequestFn.apply(this, arguments);
+        streamsCount++;
+        if (timer) {
+          clearTimeout(timer);
+          timer = null;
+        }
+        stream4.once("close", () => {
+          if (!--streamsCount) {
+            timer = setTimeout(() => {
+              timer = null;
+              removeSession();
+            }, sessionTimeout);
+          }
+        });
+        return stream4;
+      };
+    }
+    session.once("close", removeSession);
+    let entry = [
+      session,
+      options
+    ];
+    authoritySessions ? authoritySessions.push(entry) : authoritySessions = this.sessions[authority] = [entry];
+    return session;
+  }
+};
+var http2Sessions = new Http2Sessions();
 function dispatchBeforeRedirect(options, responseDetails) {
   if (options.beforeRedirects.proxy) {
     options.beforeRedirects.proxy(options);
@@ -16937,7 +17098,7 @@ function setProxy(options, configProxy, location) {
 }
 var isHttpAdapterSupported = typeof process !== "undefined" && utils_default.kindOf(process) === "process";
 var wrapAsync = (asyncExecutor) => {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     let onDone;
     let isDone;
     const done = (value, isRejected) => {
@@ -16947,7 +17108,7 @@ var wrapAsync = (asyncExecutor) => {
     };
     const _resolve = (value) => {
       done(value);
-      resolve5(value);
+      resolve6(value);
     };
     const _reject = (reason) => {
       done(reason, true);
@@ -16966,14 +17127,54 @@ var resolveFamily = ({ address, family }) => {
   };
 };
 var buildAddressEntry = (address, family) => resolveFamily(utils_default.isObject(address) ? address : { address, family });
+var http2Transport = {
+  request(options, cb) {
+    const authority = options.protocol + "//" + options.hostname + ":" + (options.port || 80);
+    const { http2Options, headers } = options;
+    const session = http2Sessions.getSession(authority, http2Options);
+    const {
+      HTTP2_HEADER_SCHEME,
+      HTTP2_HEADER_METHOD,
+      HTTP2_HEADER_PATH,
+      HTTP2_HEADER_STATUS
+    } = http2.constants;
+    const http2Headers = {
+      [HTTP2_HEADER_SCHEME]: options.protocol.replace(":", ""),
+      [HTTP2_HEADER_METHOD]: options.method,
+      [HTTP2_HEADER_PATH]: options.path
+    };
+    utils_default.forEach(headers, (header, name) => {
+      name.charAt(0) !== ":" && (http2Headers[name] = header);
+    });
+    const req = session.request(http2Headers);
+    req.once("response", (responseHeaders) => {
+      const response = req;
+      responseHeaders = Object.assign({}, responseHeaders);
+      const status = responseHeaders[HTTP2_HEADER_STATUS];
+      delete responseHeaders[HTTP2_HEADER_STATUS];
+      response.headers = responseHeaders;
+      response.statusCode = +status;
+      cb(response);
+    });
+    return req;
+  }
+};
 var http_default = isHttpAdapterSupported && function httpAdapter(config) {
-  return wrapAsync(async function dispatchHttpRequest(resolve5, reject, onDone) {
-    let { data, lookup, family } = config;
+  return wrapAsync(async function dispatchHttpRequest(resolve6, reject, onDone) {
+    let { data, lookup, family, httpVersion = 1, http2Options } = config;
     const { responseType, responseEncoding } = config;
     const method = config.method.toUpperCase();
     let isDone;
     let rejected = false;
     let req;
+    httpVersion = +httpVersion;
+    if (Number.isNaN(httpVersion)) {
+      throw TypeError(`Invalid protocol version: '${config.httpVersion}' is not a number`);
+    }
+    if (httpVersion !== 1 && httpVersion !== 2) {
+      throw TypeError(`Unsupported protocol version '${httpVersion}'`);
+    }
+    const isHttp2 = httpVersion === 2;
     if (lookup) {
       const _lookup = callbackify_default(lookup, (value) => utils_default.isArray(value) ? value : [value]);
       lookup = (hostname, opt, cb) => {
@@ -16986,7 +17187,15 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
         });
       };
     }
-    const emitter = new EventEmitter();
+    const abortEmitter = new EventEmitter();
+    function abort(reason) {
+      try {
+        abortEmitter.emit("abort", !reason || reason.type ? new CanceledError_default(null, config, req) : reason);
+      } catch (err) {
+        console.warn("emit error", err);
+      }
+    }
+    abortEmitter.once("abort", reject);
     const onFinished = () => {
       if (config.cancelToken) {
         config.cancelToken.unsubscribe(abort);
@@ -16994,32 +17203,49 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
       if (config.signal) {
         config.signal.removeEventListener("abort", abort);
       }
-      emitter.removeAllListeners();
+      abortEmitter.removeAllListeners();
     };
-    onDone((value, isRejected) => {
-      isDone = true;
-      if (isRejected) {
-        rejected = true;
-        onFinished();
-      }
-    });
-    function abort(reason) {
-      emitter.emit("abort", !reason || reason.type ? new CanceledError_default(null, config, req) : reason);
-    }
-    emitter.once("abort", reject);
     if (config.cancelToken || config.signal) {
       config.cancelToken && config.cancelToken.subscribe(abort);
       if (config.signal) {
         config.signal.aborted ? abort() : config.signal.addEventListener("abort", abort);
       }
     }
+    onDone((response, isRejected) => {
+      isDone = true;
+      if (isRejected) {
+        rejected = true;
+        onFinished();
+        return;
+      }
+      const { data: data2 } = response;
+      if (data2 instanceof stream3.Readable || data2 instanceof stream3.Duplex) {
+        const offListeners = stream3.finished(data2, () => {
+          offListeners();
+          onFinished();
+        });
+      } else {
+        onFinished();
+      }
+    });
     const fullPath = buildFullPath(config.baseURL, config.url, config.allowAbsoluteUrls);
     const parsed = new URL(fullPath, platform_default.hasBrowserEnv ? platform_default.origin : void 0);
     const protocol = parsed.protocol || supportedProtocols[0];
     if (protocol === "data:") {
+      if (config.maxContentLength > -1) {
+        const dataUrl = String(config.url || fullPath || "");
+        const estimated = estimateDataURLDecodedBytes(dataUrl);
+        if (estimated > config.maxContentLength) {
+          return reject(new AxiosError_default(
+            "maxContentLength size of " + config.maxContentLength + " exceeded",
+            AxiosError_default.ERR_BAD_RESPONSE,
+            config
+          ));
+        }
+      }
       let convertedData;
       if (method !== "GET") {
-        return settle(resolve5, reject, {
+        return settle(resolve6, reject, {
           status: 405,
           statusText: "method not allowed",
           headers: {},
@@ -17041,7 +17267,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
       } else if (responseType === "stream") {
         convertedData = stream3.Readable.from(convertedData);
       }
-      return settle(resolve5, reject, {
+      return settle(resolve6, reject, {
         data: convertedData,
         status: 200,
         statusText: "OK",
@@ -17139,9 +17365,9 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
       auth = urlUsername + ":" + urlPassword;
     }
     auth && headers.delete("authorization");
-    let path;
+    let path2;
     try {
-      path = buildURL(
+      path2 = buildURL(
         parsed.pathname + parsed.search,
         config.params,
         config.paramsSerializer
@@ -17159,7 +17385,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
       false
     );
     const options = {
-      path,
+      path: path2,
       method,
       headers: headers.toJSON(),
       agents: { http: config.httpAgent, https: config.httpsAgent },
@@ -17167,7 +17393,8 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
       protocol,
       family,
       beforeRedirect: dispatchBeforeRedirect,
-      beforeRedirects: {}
+      beforeRedirects: {},
+      http2Options
     };
     !utils_default.isUndefined(lookup) && (options.lookup = lookup);
     if (config.socketPath) {
@@ -17180,18 +17407,22 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
     let transport;
     const isHttpsRequest = isHttps.test(options.protocol);
     options.agent = isHttpsRequest ? config.httpsAgent : config.httpAgent;
-    if (config.transport) {
-      transport = config.transport;
-    } else if (config.maxRedirects === 0) {
-      transport = isHttpsRequest ? https : http;
+    if (isHttp2) {
+      transport = http2Transport;
     } else {
-      if (config.maxRedirects) {
-        options.maxRedirects = config.maxRedirects;
-      }
-      if (config.beforeRedirect) {
-        options.beforeRedirects.config = config.beforeRedirect;
+      if (config.transport) {
+        transport = config.transport;
+      } else if (config.maxRedirects === 0) {
+        transport = isHttpsRequest ? https : http;
+      } else {
+        if (config.maxRedirects) {
+          options.maxRedirects = config.maxRedirects;
+        }
+        if (config.beforeRedirect) {
+          options.beforeRedirects.config = config.beforeRedirect;
+        }
+        transport = isHttpsRequest ? httpsFollow : httpFollow;
       }
-      transport = isHttpsRequest ? httpsFollow : httpFollow;
     }
     if (config.maxBodyLength > -1) {
       options.maxBodyLength = config.maxBodyLength;
@@ -17204,7 +17435,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
     req = transport.request(options, function handleResponse(res) {
       if (req.destroyed) return;
       const streams = [res];
-      const responseLength = +res.headers["content-length"];
+      const responseLength = utils_default.toFiniteNumber(res.headers["content-length"]);
       if (onDownloadProgress || maxDownloadRate) {
         const transformStream = new AxiosTransformStream_default({
           maxRate: utils_default.toFiniteNumber(maxDownloadRate)
@@ -17246,10 +17477,6 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
         }
       }
       responseStream = streams.length > 1 ? stream3.pipeline(streams, utils_default.noop) : streams[0];
-      const offListeners = stream3.finished(responseStream, () => {
-        offListeners();
-        onFinished();
-      });
       const response = {
         status: res.statusCode,
         statusText: res.statusMessage,
@@ -17259,7 +17486,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
       };
       if (responseType === "stream") {
         response.data = responseStream;
-        settle(resolve5, reject, response);
+        settle(resolve6, reject, response);
       } else {
         const responseBuffer = [];
         let totalResponseBytes = 0;
@@ -17269,7 +17496,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
           if (config.maxContentLength > -1 && totalResponseBytes > config.maxContentLength) {
             rejected = true;
             responseStream.destroy();
-            reject(new AxiosError_default(
+            abort(new AxiosError_default(
               "maxContentLength size of " + config.maxContentLength + " exceeded",
               AxiosError_default.ERR_BAD_RESPONSE,
               config,
@@ -17307,19 +17534,22 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
           } catch (err) {
             return reject(AxiosError_default.from(err, null, config, response.request, response));
           }
-          settle(resolve5, reject, response);
+          settle(resolve6, reject, response);
         });
       }
-      emitter.once("abort", (err) => {
+      abortEmitter.once("abort", (err) => {
         if (!responseStream.destroyed) {
           responseStream.emit("error", err);
           responseStream.destroy();
         }
       });
     });
-    emitter.once("abort", (err) => {
-      reject(err);
-      req.destroy(err);
+    abortEmitter.once("abort", (err) => {
+      if (req.close) {
+        req.close();
+      } else {
+        req.destroy(err);
+      }
     });
     req.on("error", function handleRequestError(err) {
       reject(AxiosError_default.from(err, null, config, req));
@@ -17330,7 +17560,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
     if (config.timeout) {
       const timeout = parseInt(config.timeout, 10);
       if (Number.isNaN(timeout)) {
-        reject(new AxiosError_default(
+        abort(new AxiosError_default(
           "error trying to parse `config.timeout` to int",
           AxiosError_default.ERR_BAD_OPTION_VALUE,
           config,
@@ -17345,14 +17575,15 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
         if (config.timeoutErrorMessage) {
           timeoutErrorMessage = config.timeoutErrorMessage;
         }
-        reject(new AxiosError_default(
+        abort(new AxiosError_default(
           timeoutErrorMessage,
           transitional2.clarifyTimeoutError ? AxiosError_default.ETIMEDOUT : AxiosError_default.ECONNABORTED,
           config,
           req
         ));
-        abort();
       });
+    } else {
+      req.setTimeout(0);
     }
     if (utils_default.isStream(data)) {
       let ended = false;
@@ -17371,7 +17602,8 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config) {
       });
       data.pipe(req);
     } else {
-      req.end(data);
+      data && req.write(data);
+      req.end();
     }
   });
 };
@@ -17389,20 +17621,33 @@ var isURLSameOrigin_default = platform_default.hasStandardBrowserEnv ? /* @__PUR
 var cookies_default = platform_default.hasStandardBrowserEnv ? (
   // Standard browser envs support document.cookie
   {
-    write(name, value, expires, path, domain, secure) {
-      const cookie = [name + "=" + encodeURIComponent(value)];
-      utils_default.isNumber(expires) && cookie.push("expires=" + new Date(expires).toGMTString());
-      utils_default.isString(path) && cookie.push("path=" + path);
-      utils_default.isString(domain) && cookie.push("domain=" + domain);
-      secure === true && cookie.push("secure");
+    write(name, value, expires, path2, domain, secure, sameSite) {
+      if (typeof document === "undefined") return;
+      const cookie = [`${name}=${encodeURIComponent(value)}`];
+      if (utils_default.isNumber(expires)) {
+        cookie.push(`expires=${new Date(expires).toUTCString()}`);
+      }
+      if (utils_default.isString(path2)) {
+        cookie.push(`path=${path2}`);
+      }
+      if (utils_default.isString(domain)) {
+        cookie.push(`domain=${domain}`);
+      }
+      if (secure === true) {
+        cookie.push("secure");
+      }
+      if (utils_default.isString(sameSite)) {
+        cookie.push(`SameSite=${sameSite}`);
+      }
       document.cookie = cookie.join("; ");
     },
     read(name) {
-      const match = document.cookie.match(new RegExp("(^|;\\s*)(" + name + ")=([^;]*)"));
-      return match ? decodeURIComponent(match[3]) : null;
+      if (typeof document === "undefined") return null;
+      const match = document.cookie.match(new RegExp("(?:^|; )" + name + "=([^;]*)"));
+      return match ? decodeURIComponent(match[1]) : null;
     },
     remove(name) {
-      this.write(name, "", Date.now() - 864e5);
+      this.write(name, "", Date.now() - 864e5, "/");
     }
   }
 ) : (
@@ -17490,7 +17735,7 @@ function mergeConfig(config1, config2) {
     validateStatus: mergeDirectKeys,
     headers: (a, b, prop) => mergeDeepProperties(headersToObject(a), headersToObject(b), prop, true)
   };
-  utils_default.forEach(Object.keys(Object.assign({}, config1, config2)), function computeConfigValue(prop) {
+  utils_default.forEach(Object.keys({ ...config1, ...config2 }), function computeConfigValue(prop) {
     const merge3 = mergeMap[prop] || mergeDeepProperties;
     const configValue = merge3(config1[prop], config2[prop], prop);
     utils_default.isUndefined(configValue) && merge3 !== mergeDirectKeys || (config[prop] = configValue);
@@ -17510,13 +17755,17 @@ var resolveConfig_default = (config) => {
       "Basic " + btoa((auth.username || "") + ":" + (auth.password ? unescape(encodeURIComponent(auth.password)) : ""))
     );
   }
-  let contentType;
   if (utils_default.isFormData(data)) {
     if (platform_default.hasStandardBrowserEnv || platform_default.hasStandardBrowserWebWorkerEnv) {
       headers.setContentType(void 0);
-    } else if ((contentType = headers.getContentType()) !== false) {
-      const [type2, ...tokens] = contentType ? contentType.split(";").map((token) => token.trim()).filter(Boolean) : [];
-      headers.setContentType([type2 || "multipart/form-data", ...tokens].join("; "));
+    } else if (utils_default.isFunction(data.getHeaders)) {
+      const formHeaders = data.getHeaders();
+      const allowedHeaders = ["content-type", "content-length"];
+      Object.entries(formHeaders).forEach(([key, val]) => {
+        if (allowedHeaders.includes(key.toLowerCase())) {
+          headers.set(key, val);
+        }
+      });
     }
   }
   if (platform_default.hasStandardBrowserEnv) {
@@ -17534,7 +17783,7 @@ var resolveConfig_default = (config) => {
 // node_modules/axios/lib/adapters/xhr.js
 var isXHRAdapterSupported = typeof XMLHttpRequest !== "undefined";
 var xhr_default = isXHRAdapterSupported && function(config) {
-  return new Promise(function dispatchXhrRequest(resolve5, reject) {
+  return new Promise(function dispatchXhrRequest(resolve6, reject) {
     const _config = resolveConfig_default(config);
     let requestData = _config.data;
     const requestHeaders = AxiosHeaders_default.from(_config.headers).normalize();
@@ -17568,7 +17817,7 @@ var xhr_default = isXHRAdapterSupported && function(config) {
         request
       };
       settle(function _resolve(value) {
-        resolve5(value);
+        resolve6(value);
         done();
       }, function _reject(err) {
         reject(err);
@@ -17596,8 +17845,11 @@ var xhr_default = isXHRAdapterSupported && function(config) {
       reject(new AxiosError_default("Request aborted", AxiosError_default.ECONNABORTED, config, request));
       request = null;
     };
-    request.onerror = function handleError() {
-      reject(new AxiosError_default("Network Error", AxiosError_default.ERR_NETWORK, config, request));
+    request.onerror = function handleError(event) {
+      const msg = event && event.message ? event.message : "Network Error";
+      const err = new AxiosError_default(msg, AxiosError_default.ERR_NETWORK, config, request);
+      err.event = event || null;
+      reject(err);
       request = null;
     };
     request.ontimeout = function handleTimeout() {
@@ -17772,9 +18024,16 @@ var trackStream = (stream4, chunkSize, onProgress, onFinish) => {
 };
 
 // node_modules/axios/lib/adapters/fetch.js
-var isFetchSupported = typeof fetch === "function" && typeof Request === "function" && typeof Response === "function";
-var isReadableStreamSupported = isFetchSupported && typeof ReadableStream === "function";
-var encodeText = isFetchSupported && (typeof TextEncoder === "function" ? /* @__PURE__ */ ((encoder) => (str2) => encoder.encode(str2))(new TextEncoder()) : async (str2) => new Uint8Array(await new Response(str2).arrayBuffer()));
+var DEFAULT_CHUNK_SIZE = 64 * 1024;
+var { isFunction: isFunction2 } = utils_default;
+var globalFetchAPI = (({ Request, Response }) => ({
+  Request,
+  Response
+}))(utils_default.global);
+var {
+  ReadableStream: ReadableStream2,
+  TextEncoder: TextEncoder2
+} = utils_default.global;
 var test = (fn, ...args) => {
   try {
     return !!fn(...args);
@@ -17782,164 +18041,204 @@ var test = (fn, ...args) => {
     return false;
   }
 };
-var supportsRequestStream = isReadableStreamSupported && test(() => {
-  let duplexAccessed = false;
-  const hasContentType = new Request(platform_default.origin, {
-    body: new ReadableStream(),
-    method: "POST",
-    get duplex() {
-      duplexAccessed = true;
-      return "half";
-    }
-  }).headers.has("Content-Type");
-  return duplexAccessed && !hasContentType;
-});
-var DEFAULT_CHUNK_SIZE = 64 * 1024;
-var supportsResponseStream = isReadableStreamSupported && test(() => utils_default.isReadableStream(new Response("").body));
-var resolvers = {
-  stream: supportsResponseStream && ((res) => res.body)
-};
-isFetchSupported && ((res) => {
-  ["text", "arrayBuffer", "blob", "formData", "stream"].forEach((type2) => {
-    !resolvers[type2] && (resolvers[type2] = utils_default.isFunction(res[type2]) ? (res2) => res2[type2]() : (_, config) => {
-      throw new AxiosError_default(`Response type '${type2}' is not supported`, AxiosError_default.ERR_NOT_SUPPORT, config);
-    });
-  });
-})(new Response());
-var getBodyLength = async (body) => {
-  if (body == null) {
-    return 0;
-  }
-  if (utils_default.isBlob(body)) {
-    return body.size;
+var factory = (env2) => {
+  env2 = utils_default.merge.call({
+    skipUndefined: true
+  }, globalFetchAPI, env2);
+  const { fetch: envFetch, Request, Response } = env2;
+  const isFetchSupported = envFetch ? isFunction2(envFetch) : typeof fetch === "function";
+  const isRequestSupported = isFunction2(Request);
+  const isResponseSupported = isFunction2(Response);
+  if (!isFetchSupported) {
+    return false;
   }
-  if (utils_default.isSpecCompliantForm(body)) {
-    const _request = new Request(platform_default.origin, {
+  const isReadableStreamSupported = isFetchSupported && isFunction2(ReadableStream2);
+  const encodeText = isFetchSupported && (typeof TextEncoder2 === "function" ? /* @__PURE__ */ ((encoder) => (str2) => encoder.encode(str2))(new TextEncoder2()) : async (str2) => new Uint8Array(await new Request(str2).arrayBuffer()));
+  const supportsRequestStream = isRequestSupported && isReadableStreamSupported && test(() => {
+    let duplexAccessed = false;
+    const hasContentType = new Request(platform_default.origin, {
+      body: new ReadableStream2(),
       method: "POST",
-      body
-    });
-    return (await _request.arrayBuffer()).byteLength;
-  }
-  if (utils_default.isArrayBufferView(body) || utils_default.isArrayBuffer(body)) {
-    return body.byteLength;
-  }
-  if (utils_default.isURLSearchParams(body)) {
-    body = body + "";
-  }
-  if (utils_default.isString(body)) {
-    return (await encodeText(body)).byteLength;
-  }
-};
-var resolveBodyLength = async (headers, body) => {
-  const length = utils_default.toFiniteNumber(headers.getContentLength());
-  return length == null ? getBodyLength(body) : length;
-};
-var fetch_default = isFetchSupported && (async (config) => {
-  let {
-    url: url2,
-    method,
-    data,
-    signal,
-    cancelToken,
-    timeout,
-    onDownloadProgress,
-    onUploadProgress,
-    responseType,
-    headers,
-    withCredentials = "same-origin",
-    fetchOptions
-  } = resolveConfig_default(config);
-  responseType = responseType ? (responseType + "").toLowerCase() : "text";
-  let composedSignal = composeSignals_default([signal, cancelToken && cancelToken.toAbortSignal()], timeout);
-  let request;
-  const unsubscribe = composedSignal && composedSignal.unsubscribe && (() => {
-    composedSignal.unsubscribe();
+      get duplex() {
+        duplexAccessed = true;
+        return "half";
+      }
+    }).headers.has("Content-Type");
+    return duplexAccessed && !hasContentType;
   });
-  let requestContentLength;
-  try {
-    if (onUploadProgress && supportsRequestStream && method !== "get" && method !== "head" && (requestContentLength = await resolveBodyLength(headers, data)) !== 0) {
-      let _request = new Request(url2, {
-        method: "POST",
-        body: data,
-        duplex: "half"
+  const supportsResponseStream = isResponseSupported && isReadableStreamSupported && test(() => utils_default.isReadableStream(new Response("").body));
+  const resolvers = {
+    stream: supportsResponseStream && ((res) => res.body)
+  };
+  isFetchSupported && (() => {
+    ["text", "arrayBuffer", "blob", "formData", "stream"].forEach((type2) => {
+      !resolvers[type2] && (resolvers[type2] = (res, config) => {
+        let method = res && res[type2];
+        if (method) {
+          return method.call(res);
+        }
+        throw new AxiosError_default(`Response type '${type2}' is not supported`, AxiosError_default.ERR_NOT_SUPPORT, config);
       });
-      let contentTypeHeader;
-      if (utils_default.isFormData(data) && (contentTypeHeader = _request.headers.get("content-type"))) {
-        headers.setContentType(contentTypeHeader);
-      }
-      if (_request.body) {
-        const [onProgress, flush] = progressEventDecorator(
-          requestContentLength,
-          progressEventReducer(asyncDecorator(onUploadProgress))
-        );
-        data = trackStream(_request.body, DEFAULT_CHUNK_SIZE, onProgress, flush);
-      }
+    });
+  })();
+  const getBodyLength = async (body) => {
+    if (body == null) {
+      return 0;
     }
-    if (!utils_default.isString(withCredentials)) {
-      withCredentials = withCredentials ? "include" : "omit";
+    if (utils_default.isBlob(body)) {
+      return body.size;
     }
-    const isCredentialsSupported = "credentials" in Request.prototype;
-    request = new Request(url2, {
-      ...fetchOptions,
-      signal: composedSignal,
-      method: method.toUpperCase(),
-      headers: headers.normalize().toJSON(),
-      body: data,
-      duplex: "half",
-      credentials: isCredentialsSupported ? withCredentials : void 0
-    });
-    let response = await fetch(request, fetchOptions);
-    const isStreamResponse = supportsResponseStream && (responseType === "stream" || responseType === "response");
-    if (supportsResponseStream && (onDownloadProgress || isStreamResponse && unsubscribe)) {
-      const options = {};
-      ["status", "statusText", "headers"].forEach((prop) => {
-        options[prop] = response[prop];
+    if (utils_default.isSpecCompliantForm(body)) {
+      const _request = new Request(platform_default.origin, {
+        method: "POST",
+        body
       });
-      const responseContentLength = utils_default.toFiniteNumber(response.headers.get("content-length"));
-      const [onProgress, flush] = onDownloadProgress && progressEventDecorator(
-        responseContentLength,
-        progressEventReducer(asyncDecorator(onDownloadProgress), true)
-      ) || [];
-      response = new Response(
-        trackStream(response.body, DEFAULT_CHUNK_SIZE, onProgress, () => {
-          flush && flush();
-          unsubscribe && unsubscribe();
-        }),
-        options
-      );
+      return (await _request.arrayBuffer()).byteLength;
     }
-    responseType = responseType || "text";
-    let responseData = await resolvers[utils_default.findKey(resolvers, responseType) || "text"](response, config);
-    !isStreamResponse && unsubscribe && unsubscribe();
-    return await new Promise((resolve5, reject) => {
-      settle(resolve5, reject, {
-        data: responseData,
-        headers: AxiosHeaders_default.from(response.headers),
-        status: response.status,
-        statusText: response.statusText,
-        config,
-        request
-      });
+    if (utils_default.isArrayBufferView(body) || utils_default.isArrayBuffer(body)) {
+      return body.byteLength;
+    }
+    if (utils_default.isURLSearchParams(body)) {
+      body = body + "";
+    }
+    if (utils_default.isString(body)) {
+      return (await encodeText(body)).byteLength;
+    }
+  };
+  const resolveBodyLength = async (headers, body) => {
+    const length = utils_default.toFiniteNumber(headers.getContentLength());
+    return length == null ? getBodyLength(body) : length;
+  };
+  return async (config) => {
+    let {
+      url: url2,
+      method,
+      data,
+      signal,
+      cancelToken,
+      timeout,
+      onDownloadProgress,
+      onUploadProgress,
+      responseType,
+      headers,
+      withCredentials = "same-origin",
+      fetchOptions
+    } = resolveConfig_default(config);
+    let _fetch = envFetch || fetch;
+    responseType = responseType ? (responseType + "").toLowerCase() : "text";
+    let composedSignal = composeSignals_default([signal, cancelToken && cancelToken.toAbortSignal()], timeout);
+    let request = null;
+    const unsubscribe = composedSignal && composedSignal.unsubscribe && (() => {
+      composedSignal.unsubscribe();
     });
-  } catch (err) {
-    unsubscribe && unsubscribe();
-    if (err && err.name === "TypeError" && /Load failed|fetch/i.test(err.message)) {
-      throw Object.assign(
-        new AxiosError_default("Network Error", AxiosError_default.ERR_NETWORK, config, request),
-        {
-          cause: err.cause || err
+    let requestContentLength;
+    try {
+      if (onUploadProgress && supportsRequestStream && method !== "get" && method !== "head" && (requestContentLength = await resolveBodyLength(headers, data)) !== 0) {
+        let _request = new Request(url2, {
+          method: "POST",
+          body: data,
+          duplex: "half"
+        });
+        let contentTypeHeader;
+        if (utils_default.isFormData(data) && (contentTypeHeader = _request.headers.get("content-type"))) {
+          headers.setContentType(contentTypeHeader);
         }
-      );
+        if (_request.body) {
+          const [onProgress, flush] = progressEventDecorator(
+            requestContentLength,
+            progressEventReducer(asyncDecorator(onUploadProgress))
+          );
+          data = trackStream(_request.body, DEFAULT_CHUNK_SIZE, onProgress, flush);
+        }
+      }
+      if (!utils_default.isString(withCredentials)) {
+        withCredentials = withCredentials ? "include" : "omit";
+      }
+      const isCredentialsSupported = isRequestSupported && "credentials" in Request.prototype;
+      const resolvedOptions = {
+        ...fetchOptions,
+        signal: composedSignal,
+        method: method.toUpperCase(),
+        headers: headers.normalize().toJSON(),
+        body: data,
+        duplex: "half",
+        credentials: isCredentialsSupported ? withCredentials : void 0
+      };
+      request = isRequestSupported && new Request(url2, resolvedOptions);
+      let response = await (isRequestSupported ? _fetch(request, fetchOptions) : _fetch(url2, resolvedOptions));
+      const isStreamResponse = supportsResponseStream && (responseType === "stream" || responseType === "response");
+      if (supportsResponseStream && (onDownloadProgress || isStreamResponse && unsubscribe)) {
+        const options = {};
+        ["status", "statusText", "headers"].forEach((prop) => {
+          options[prop] = response[prop];
+        });
+        const responseContentLength = utils_default.toFiniteNumber(response.headers.get("content-length"));
+        const [onProgress, flush] = onDownloadProgress && progressEventDecorator(
+          responseContentLength,
+          progressEventReducer(asyncDecorator(onDownloadProgress), true)
+        ) || [];
+        response = new Response(
+          trackStream(response.body, DEFAULT_CHUNK_SIZE, onProgress, () => {
+            flush && flush();
+            unsubscribe && unsubscribe();
+          }),
+          options
+        );
+      }
+      responseType = responseType || "text";
+      let responseData = await resolvers[utils_default.findKey(resolvers, responseType) || "text"](response, config);
+      !isStreamResponse && unsubscribe && unsubscribe();
+      return await new Promise((resolve6, reject) => {
+        settle(resolve6, reject, {
+          data: responseData,
+          headers: AxiosHeaders_default.from(response.headers),
+          status: response.status,
+          statusText: response.statusText,
+          config,
+          request
+        });
+      });
+    } catch (err) {
+      unsubscribe && unsubscribe();
+      if (err && err.name === "TypeError" && /Load failed|fetch/i.test(err.message)) {
+        throw Object.assign(
+          new AxiosError_default("Network Error", AxiosError_default.ERR_NETWORK, config, request),
+          {
+            cause: err.cause || err
+          }
+        );
+      }
+      throw AxiosError_default.from(err, err && err.code, config, request);
     }
-    throw AxiosError_default.from(err, err && err.code, config, request);
+  };
+};
+var seedCache = /* @__PURE__ */ new Map();
+var getFetch = (config) => {
+  let env2 = config && config.env || {};
+  const { fetch: fetch2, Request, Response } = env2;
+  const seeds = [
+    Request,
+    Response,
+    fetch2
+  ];
+  let len = seeds.length, i = len, seed, target, map2 = seedCache;
+  while (i--) {
+    seed = seeds[i];
+    target = map2.get(seed);
+    target === void 0 && map2.set(seed, target = i ? /* @__PURE__ */ new Map() : factory(env2));
+    map2 = target;
   }
-});
+  return target;
+};
+var adapter = getFetch();
 
 // node_modules/axios/lib/adapters/adapters.js
 var knownAdapters = {
   http: http_default,
   xhr: xhr_default,
-  fetch: fetch_default
+  fetch: {
+    get: getFetch
+  }
 };
 utils_default.forEach(knownAdapters, (fn, value) => {
   if (fn) {
@@ -17951,41 +18250,50 @@ utils_default.forEach(knownAdapters, (fn, value) => {
   }
 });
 var renderReason = (reason) => `- ${reason}`;
-var isResolvedHandle = (adapter) => utils_default.isFunction(adapter) || adapter === null || adapter === false;
-var adapters_default = {
-  getAdapter: (adapters) => {
-    adapters = utils_default.isArray(adapters) ? adapters : [adapters];
-    const { length } = adapters;
-    let nameOrAdapter;
-    let adapter;
-    const rejectedReasons = {};
-    for (let i = 0; i < length; i++) {
-      nameOrAdapter = adapters[i];
-      let id;
-      adapter = nameOrAdapter;
-      if (!isResolvedHandle(nameOrAdapter)) {
-        adapter = knownAdapters[(id = String(nameOrAdapter)).toLowerCase()];
-        if (adapter === void 0) {
-          throw new AxiosError_default(`Unknown adapter '${id}'`);
-        }
-      }
-      if (adapter) {
-        break;
-      }
-      rejectedReasons[id || "#" + i] = adapter;
-    }
-    if (!adapter) {
-      const reasons = Object.entries(rejectedReasons).map(
-        ([id, state]) => `adapter ${id} ` + (state === false ? "is not supported by the environment" : "is not available in the build")
-      );
-      let s = length ? reasons.length > 1 ? "since :\n" + reasons.map(renderReason).join("\n") : " " + renderReason(reasons[0]) : "as no adapter specified";
-      throw new AxiosError_default(
-        `There is no suitable adapter to dispatch the request ` + s,
-        "ERR_NOT_SUPPORT"
-      );
+var isResolvedHandle = (adapter2) => utils_default.isFunction(adapter2) || adapter2 === null || adapter2 === false;
+function getAdapter(adapters, config) {
+  adapters = utils_default.isArray(adapters) ? adapters : [adapters];
+  const { length } = adapters;
+  let nameOrAdapter;
+  let adapter2;
+  const rejectedReasons = {};
+  for (let i = 0; i < length; i++) {
+    nameOrAdapter = adapters[i];
+    let id;
+    adapter2 = nameOrAdapter;
+    if (!isResolvedHandle(nameOrAdapter)) {
+      adapter2 = knownAdapters[(id = String(nameOrAdapter)).toLowerCase()];
+      if (adapter2 === void 0) {
+        throw new AxiosError_default(`Unknown adapter '${id}'`);
+      }
+    }
+    if (adapter2 && (utils_default.isFunction(adapter2) || (adapter2 = adapter2.get(config)))) {
+      break;
     }
-    return adapter;
-  },
+    rejectedReasons[id || "#" + i] = adapter2;
+  }
+  if (!adapter2) {
+    const reasons = Object.entries(rejectedReasons).map(
+      ([id, state]) => `adapter ${id} ` + (state === false ? "is not supported by the environment" : "is not available in the build")
+    );
+    let s = length ? reasons.length > 1 ? "since :\n" + reasons.map(renderReason).join("\n") : " " + renderReason(reasons[0]) : "as no adapter specified";
+    throw new AxiosError_default(
+      `There is no suitable adapter to dispatch the request ` + s,
+      "ERR_NOT_SUPPORT"
+    );
+  }
+  return adapter2;
+}
+var adapters_default = {
+  /**
+   * Resolve an adapter from a list of adapter names or functions.
+   * @type {Function}
+   */
+  getAdapter,
+  /**
+   * Exposes all known adapters
+   * @type {Object<string, Function|Object>}
+   */
   adapters: knownAdapters
 };
 
@@ -18008,8 +18316,8 @@ function dispatchRequest(config) {
   if (["post", "put", "patch"].indexOf(config.method) !== -1) {
     config.headers.setContentType("application/x-www-form-urlencoded", false);
   }
-  const adapter = adapters_default.getAdapter(config.adapter || defaults_default.adapter);
-  return adapter(config).then(function onAdapterResolution(response) {
+  const adapter2 = adapters_default.getAdapter(config.adapter || defaults_default.adapter, config);
+  return adapter2(config).then(function onAdapterResolution(response) {
     throwIfCancellationRequested(config);
     response.data = transformData.call(
       config,
@@ -18204,8 +18512,8 @@ var Axios = class {
     let len;
     if (!synchronousRequestInterceptors) {
       const chain = [dispatchRequest.bind(this), void 0];
-      chain.unshift.apply(chain, requestInterceptorChain);
-      chain.push.apply(chain, responseInterceptorChain);
+      chain.unshift(...requestInterceptorChain);
+      chain.push(...responseInterceptorChain);
       len = chain.length;
       promise = Promise.resolve(config);
       while (i < len) {
@@ -18215,7 +18523,6 @@ var Axios = class {
     }
     len = requestInterceptorChain.length;
     let newConfig = config;
-    i = 0;
     while (i < len) {
       const onFulfilled = requestInterceptorChain[i++];
       const onRejected = requestInterceptorChain[i++];
@@ -18278,8 +18585,8 @@ var CancelToken = class _CancelToken {
       throw new TypeError("executor must be a function.");
     }
     let resolvePromise;
-    this.promise = new Promise(function promiseExecutor(resolve5) {
-      resolvePromise = resolve5;
+    this.promise = new Promise(function promiseExecutor(resolve6) {
+      resolvePromise = resolve6;
     });
     const token = this;
     this.promise.then((cancel) => {
@@ -18292,9 +18599,9 @@ var CancelToken = class _CancelToken {
     });
     this.promise.then = (onfulfilled) => {
       let _resolve;
-      const promise = new Promise((resolve5) => {
-        token.subscribe(resolve5);
-        _resolve = resolve5;
+      const promise = new Promise((resolve6) => {
+        token.subscribe(resolve6);
+        _resolve = resolve6;
       }).then(onfulfilled);
       promise.cancel = function reject() {
         token.unsubscribe(_resolve);
@@ -18445,7 +18752,13 @@ var HttpStatusCode = {
   InsufficientStorage: 507,
   LoopDetected: 508,
   NotExtended: 510,
-  NetworkAuthenticationRequired: 511
+  NetworkAuthenticationRequired: 511,
+  WebServerIsDown: 521,
+  ConnectionTimedOut: 522,
+  OriginIsUnreachable: 523,
+  TimeoutOccurred: 524,
+  SslHandshakeFailed: 525,
+  InvalidSslCertificate: 526
 };
 Object.entries(HttpStatusCode).forEach(([key, value]) => {
   HttpStatusCode[value] = key;
@@ -18501,7 +18814,7 @@ var {
   AxiosHeaders: AxiosHeaders2,
   HttpStatusCode: HttpStatusCode2,
   formToJSON,
-  getAdapter,
+  getAdapter: getAdapter2,
   mergeConfig: mergeConfig2
 } = axios_default;
 
@@ -18541,6 +18854,26 @@ function isGetLikeMethod(method) {
 }
 
 // src/api-client.ts
+var SYSTEM_CONTROLLED_HEADERS = /* @__PURE__ */ new Set([
+  "host",
+  // Controlled by HTTP client based on URL
+  "content-length",
+  // Calculated by HTTP client from body
+  "transfer-encoding",
+  // Managed by HTTP client for chunked encoding
+  "connection",
+  // HTTP connection management
+  "upgrade",
+  // Protocol upgrade (WebSocket, HTTP/2)
+  "te",
+  // Transfer encoding preferences
+  "trailer",
+  // Trailer fields in chunked transfer
+  "proxy-connection",
+  // Proxy connection management
+  "keep-alive"
+  // Connection keep-alive settings
+]);
 var ApiClient = class {
   axiosInstance;
   toolsMap = /* @__PURE__ */ new Map();
@@ -18556,7 +18889,15 @@ var ApiClient = class {
    */
   constructor(baseUrl, authProviderOrHeaders, specLoader) {
     this.axiosInstance = axios_default.create({
-      baseURL: baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`
+      baseURL: baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`,
+      timeout: 3e4,
+      // 30 second timeout to prevent indefinite hangs
+      maxContentLength: 50 * 1024 * 1024,
+      // 50MB response body limit
+      maxBodyLength: 50 * 1024 * 1024,
+      // 50MB request body limit
+      maxRedirects: 5
+      // Limit redirect chains to prevent abuse
     });
     if (!authProviderOrHeaders) {
       this.authProvider = new StaticAuthProvider();
@@ -18621,10 +18962,10 @@ var ApiClient = class {
       if (toolId === "INVOKE-API-ENDPOINT") {
         return this.handleInvokeApiEndpoint(toolId, params);
       }
-      const { method, path } = this.parseToolId(toolId);
+      const { method, path: path2 } = this.parseToolId(toolId);
       const toolDef = this.getToolDefinition(toolId);
       const paramsCopy = { ...params };
-      let resolvedPath = path;
+      let resolvedPath = path2;
       const escapeRegExp = (str2) => {
         return str2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
       };
@@ -18654,7 +18995,17 @@ var ApiClient = class {
             queryParams[key] = value;
             delete paramsCopy[key];
           } else if (paramLocation === "header") {
-            headerParams[key] = String(value);
+            const headerName = key.toLowerCase();
+            if (SYSTEM_CONTROLLED_HEADERS.has(headerName)) {
+              throw new Error(
+                `Cannot set system-controlled header "${key}". This header is managed by the HTTP client and cannot be overridden.`
+              );
+            }
+            const headerValue = String(value);
+            if (headerValue.includes("\r") || headerValue.includes("\n")) {
+              throw new Error(`Header value for "${key}" contains invalid characters (CR/LF)`);
+            }
+            headerParams[key] = headerValue;
             delete paramsCopy[key];
           }
         }
@@ -18679,6 +19030,16 @@ var ApiClient = class {
         }
       }
       const authHeaders = await this.authProvider.getAuthHeaders();
+      if (authHeaders && Object.keys(authHeaders).length > 0) {
+        const authHeadersLower = Object.keys(authHeaders).map((k) => k.toLowerCase());
+        for (const headerKey of Object.keys(headerParams)) {
+          if (authHeadersLower.includes(headerKey.toLowerCase())) {
+            throw new Error(
+              `Cannot override authentication header "${headerKey}". This header is set by the authentication provider.`
+            );
+          }
+        }
+      }
       const config = {
         method: method.toLowerCase(),
         url: resolvedPath,
@@ -18709,7 +19070,10 @@ var ApiClient = class {
           }
         }
         throw new Error(
-          `API request failed: ${axiosError.message}${axiosError.response ? ` (${axiosError.response.status}: ${typeof axiosError.response.data === "object" ? JSON.stringify(axiosError.response.data) : axiosError.response.data})` : ""}`
+          `API request failed: ${axiosError.message}${axiosError.response ? ` (${axiosError.response.status}: ${this.sanitizeErrorData(
+            axiosError.response.data,
+            axiosError.response.status
+          )})` : ""}`
         );
       }
       throw error;
@@ -18742,6 +19106,25 @@ var ApiClient = class {
     }
     return result;
   }
+  /**
+   * Sanitize error data to prevent information disclosure
+   * Redacts sensitive data from authentication errors and truncates large responses
+   *
+   * @param data - The error response data
+   * @param statusCode - The HTTP status code
+   * @returns Sanitized error data string
+   */
+  sanitizeErrorData(data, statusCode) {
+    if (statusCode === 401 || statusCode === 403) {
+      return "[Authentication/Authorization error - details redacted for security]";
+    }
+    const dataStr = typeof data === "object" ? JSON.stringify(data) : String(data);
+    const MAX_ERROR_LENGTH = 1e3;
+    if (dataStr.length > MAX_ERROR_LENGTH) {
+      return dataStr.substring(0, MAX_ERROR_LENGTH) + "... [truncated]";
+    }
+    return dataStr;
+  }
   /**
    * Handle the LIST-API-ENDPOINTS meta-tool
    * Returns a list of all available API endpoints from the loaded tools
@@ -18749,7 +19132,7 @@ var ApiClient = class {
   async handleListApiEndpoints() {
     const endpoints = [];
     if (this.openApiSpec) {
-      for (const [path, pathItem] of Object.entries(this.openApiSpec.paths)) {
+      for (const [path2, pathItem] of Object.entries(this.openApiSpec.paths)) {
         if (!pathItem) continue;
         for (const [method, operation] of Object.entries(pathItem)) {
           if (method === "parameters" || !operation) continue;
@@ -18759,7 +19142,7 @@ var ApiClient = class {
           const op = operation;
           endpoints.push({
             method: method.toUpperCase(),
-            path,
+            path: path2,
             summary: op.summary || "",
             description: op.description || "",
             operationId: op.operationId || "",
@@ -18773,13 +19156,13 @@ var ApiClient = class {
           continue;
         }
         try {
-          const { method, path } = this.parseToolId(toolId);
+          const { method, path: path2 } = this.parseToolId(toolId);
           endpoints.push({
             toolId,
             name: tool.name,
             description: tool.description,
             method: method.toUpperCase(),
-            path
+            path: path2
           });
         } catch (error) {
           continue;
@@ -18837,8 +19220,8 @@ var ApiClient = class {
       let matchingToolId;
       for (const [toolId2, tool] of this.toolsMap.entries()) {
         try {
-          const { path } = this.parseToolId(toolId2);
-          if (path === endpoint) {
+          const { path: path2 } = this.parseToolId(toolId2);
+          if (path2 === endpoint) {
             matchingTool = tool;
             matchingToolId = toolId2;
             break;
@@ -18875,8 +19258,8 @@ var ApiClient = class {
       } else if (this.openApiSpec) {
         const pathItem = this.openApiSpec.paths[endpoint];
         if (pathItem && pathItem[method.toLowerCase()]) {
-          const { method: httpMethod, path } = { method: method.toUpperCase(), path: endpoint };
-          return this.makeDirectHttpRequest(httpMethod, path, endpointParams);
+          const { method: httpMethod, path: path2 } = { method: method.toUpperCase(), path: endpoint };
+          return this.makeDirectHttpRequest(httpMethod, path2, endpointParams);
         } else {
           throw new Error(
             `No endpoint found for path '${endpoint}' with method '${method}' in tool '${toolId2}'`
@@ -18905,11 +19288,11 @@ var ApiClient = class {
    * Make a direct HTTP request without going through the tool system
    * Used by dynamic meta-tools when we have OpenAPI spec but no corresponding tool
    */
-  async makeDirectHttpRequest(method, path, params) {
+  async makeDirectHttpRequest(method, path2, params) {
     const authHeaders = await this.authProvider.getAuthHeaders();
     const config = {
       method: method.toLowerCase(),
-      url: path,
+      url: path2,
       headers: authHeaders
     };
     if (isGetLikeMethod(method)) {
@@ -18924,7 +19307,10 @@ var ApiClient = class {
       if (axios_default.isAxiosError(error)) {
         const axiosError = error;
         throw new Error(
-          `API request failed: ${axiosError.message}${axiosError.response ? ` (${axiosError.response.status}: ${typeof axiosError.response.data === "object" ? JSON.stringify(axiosError.response.data) : axiosError.response.data})` : ""}`
+          `API request failed: ${axiosError.message}${axiosError.response ? ` (${axiosError.response.status}: ${this.sanitizeErrorData(
+            axiosError.response.data,
+            axiosError.response.status
+          )})` : ""}`
         );
       }
       throw error;
@@ -18932,22 +19318,265 @@ var ApiClient = class {
   }
 };
 
+// src/prompts-manager.ts
+var PromptsManager = class {
+  prompts = /* @__PURE__ */ new Map();
+  constructor(config) {
+    if (config.prompts) {
+      for (const prompt of config.prompts) {
+        this.addPrompt(prompt);
+      }
+    }
+  }
+  /**
+   * Add a prompt definition
+   */
+  addPrompt(prompt) {
+    if (!prompt.name) {
+      throw new Error("Prompt name is required");
+    }
+    if (!prompt.template) {
+      throw new Error(`Prompt "${prompt.name}" requires a template`);
+    }
+    this.prompts.set(prompt.name, prompt);
+  }
+  /**
+   * Remove a prompt by name
+   */
+  removePrompt(name) {
+    return this.prompts.delete(name);
+  }
+  /**
+   * Get all prompts in MCP format for listing
+   */
+  getAllPrompts() {
+    return Array.from(this.prompts.values()).map((def) => this.toMCPPrompt(def));
+  }
+  /**
+   * Get a specific prompt with arguments applied
+   */
+  getPrompt(name, args) {
+    const def = this.prompts.get(name);
+    if (!def) {
+      throw new Error(`Prompt not found: ${name}`);
+    }
+    if (def.arguments) {
+      for (const arg of def.arguments) {
+        if (arg.required && (!args || args[arg.name] === void 0)) {
+          throw new Error(`Missing required argument: ${arg.name}`);
+        }
+      }
+    }
+    const renderedText = this.renderTemplate(def.template, args || {});
+    const messages = [
+      {
+        role: "user",
+        content: {
+          type: "text",
+          text: renderedText
+        }
+      }
+    ];
+    return {
+      description: def.description,
+      messages
+    };
+  }
+  /**
+   * Check if a prompt exists
+   */
+  hasPrompt(name) {
+    return this.prompts.has(name);
+  }
+  /**
+   * Get the count of prompts
+   */
+  get count() {
+    return this.prompts.size;
+  }
+  /**
+   * Convert internal prompt definition to MCP Prompt format
+   */
+  toMCPPrompt(def) {
+    const prompt = {
+      name: def.name,
+      description: def.description
+    };
+    if (def.arguments && def.arguments.length > 0) {
+      prompt.arguments = def.arguments.map(
+        (arg) => ({
+          name: arg.name,
+          description: arg.description,
+          required: arg.required
+        })
+      );
+    }
+    return prompt;
+  }
+  /**
+   * Render a template string by replacing {{argName}} placeholders
+   */
+  renderTemplate(template, args) {
+    return template.replace(/\{\{(\w+)\}\}/g, (match, argName) => {
+      if (args[argName] !== void 0) {
+        return args[argName];
+      }
+      return "";
+    });
+  }
+};
+
+// src/resources-manager.ts
+var ResourcesManager = class {
+  resources = /* @__PURE__ */ new Map();
+  constructor(config) {
+    if (config.resources) {
+      for (const resource of config.resources) {
+        this.addResource(resource);
+      }
+    }
+  }
+  /**
+   * Add a resource definition
+   */
+  addResource(resource) {
+    if (!resource.uri) {
+      throw new Error("Resource URI is required");
+    }
+    if (!resource.name) {
+      throw new Error(`Resource "${resource.uri}" requires a name`);
+    }
+    if (!resource.text && !resource.blob && !resource.contentProvider) {
+      throw new Error(
+        `Resource "${resource.uri}" requires content (text, blob, or contentProvider)`
+      );
+    }
+    this.resources.set(resource.uri, resource);
+  }
+  /**
+   * Remove a resource by URI
+   */
+  removeResource(uri) {
+    return this.resources.delete(uri);
+  }
+  /**
+   * Get all resources in MCP format for listing
+   */
+  getAllResources() {
+    return Array.from(this.resources.values()).map((def) => this.toMCPResource(def));
+  }
+  /**
+   * Read a specific resource by URI
+   */
+  async readResource(uri) {
+    const def = this.resources.get(uri);
+    if (!def) {
+      throw new Error(`Resource not found: ${uri}`);
+    }
+    let contents;
+    if (def.contentProvider) {
+      let content;
+      try {
+        content = await def.contentProvider();
+      } catch (error) {
+        throw new Error(
+          `Failed to load content for resource "${uri}": ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+      if (typeof content === "string") {
+        contents = [
+          {
+            uri: def.uri,
+            mimeType: def.mimeType,
+            text: content
+          }
+        ];
+      } else {
+        contents = [
+          {
+            uri: def.uri,
+            mimeType: def.mimeType,
+            blob: content.blob
+          }
+        ];
+      }
+    } else if (def.text !== void 0) {
+      contents = [
+        {
+          uri: def.uri,
+          mimeType: def.mimeType,
+          text: def.text
+        }
+      ];
+    } else if (def.blob !== void 0) {
+      contents = [
+        {
+          uri: def.uri,
+          mimeType: def.mimeType,
+          blob: def.blob
+        }
+      ];
+    } else {
+      throw new Error(`Resource "${uri}" has no content`);
+    }
+    return { contents };
+  }
+  /**
+   * Check if a resource exists
+   */
+  hasResource(uri) {
+    return this.resources.has(uri);
+  }
+  /**
+   * Get the count of resources
+   */
+  get count() {
+    return this.resources.size;
+  }
+  /**
+   * Convert internal resource definition to MCP Resource format
+   */
+  toMCPResource(def) {
+    return {
+      uri: def.uri,
+      name: def.name,
+      description: def.description,
+      mimeType: def.mimeType
+    };
+  }
+};
+
 // src/server.ts
 var OpenAPIServer = class {
   server;
   toolsManager;
   apiClient;
+  promptsManager;
+  resourcesManager;
+  config;
   constructor(config) {
+    this.config = config;
+    if (config.prompts?.length) {
+      this.promptsManager = new PromptsManager({ prompts: config.prompts });
+    }
+    if (config.resources?.length) {
+      this.resourcesManager = new ResourcesManager({ resources: config.resources });
+    }
+    const capabilities = {
+      tools: {
+        list: true,
+        execute: true
+      }
+    };
+    if (this.promptsManager) {
+      capabilities.prompts = {};
+    }
+    if (this.resourcesManager) {
+      capabilities.resources = {};
+    }
     this.server = new Server(
       { name: config.name, version: config.version },
-      {
-        capabilities: {
-          tools: {
-            list: true,
-            execute: true
-          }
-        }
-      }
+      { capabilities }
     );
     this.toolsManager = new ToolsManager(config);
     const authProviderOrHeaders = config.authProvider || new StaticAuthProvider(config.headers);
@@ -19009,6 +19638,25 @@ var OpenAPIServer = class {
         throw error;
       }
     });
+    if (this.promptsManager) {
+      this.server.setRequestHandler(ListPromptsRequestSchema, async () => ({
+        prompts: this.promptsManager.getAllPrompts()
+      }));
+      this.server.setRequestHandler(GetPromptRequestSchema, async (request) => {
+        return this.promptsManager.getPrompt(
+          request.params.name,
+          request.params.arguments
+        );
+      });
+    }
+    if (this.resourcesManager) {
+      this.server.setRequestHandler(ListResourcesRequestSchema, async () => ({
+        resources: this.resourcesManager.getAllResources()
+      }));
+      this.server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
+        return this.resourcesManager.readResource(request.params.uri);
+      });
+    }
   }
   /**
    * Start the server with the given transport
@@ -19026,6 +19674,18 @@ var OpenAPIServer = class {
     }
     await this.server.connect(transport);
   }
+  /**
+   * Get the prompts manager (for library users to add prompts dynamically)
+   */
+  getPromptsManager() {
+    return this.promptsManager;
+  }
+  /**
+   * Get the resources manager (for library users to add resources dynamically)
+   */
+  getResourcesManager() {
+    return this.resourcesManager;
+  }
 };
 
 // node_modules/yargs/lib/platform-shims/esm.mjs
@@ -20304,11 +20964,11 @@ var parser = new YargsParser({
   resolve: resolve2,
   // TODO: figure  out a  way to combine ESM and CJS coverage, such  that
   // we can exercise all the lines below:
-  require: (path) => {
+  require: (path2) => {
     if (typeof __require !== "undefined") {
-      return __require(path);
-    } else if (path.match(/\.json$/)) {
-      return JSON.parse(readFileSync(path, "utf8"));
+      return __require(path2);
+    } else if (path2.match(/\.json$/)) {
+      return JSON.parse(readFileSync(path2, "utf8"));
     } else {
       throw Error("only .json config files are supported in ESM");
     }
@@ -20799,13 +21459,13 @@ function maybeAsyncResult(getResult, resultHandler, errorHandler = (err) => {
   throw err;
 }) {
   try {
-    const result = isFunction2(getResult) ? getResult() : getResult;
+    const result = isFunction3(getResult) ? getResult() : getResult;
     return isPromise(result) ? result.then((result2) => resultHandler(result2)) : resultHandler(result);
   } catch (err) {
     return errorHandler(err);
   }
 }
-function isFunction2(arg) {
+function isFunction3(arg) {
   return typeof arg === "function";
 }
 
@@ -22833,12 +23493,12 @@ var YargsInstance = class {
   async getCompletion(args, done) {
     argsert("<array> [function]", [args, done], arguments.length);
     if (!done) {
-      return new Promise((resolve5, reject) => {
+      return new Promise((resolve6, reject) => {
         __classPrivateFieldGet(this, _YargsInstance_completion, "f").getCompletion(args, (err, completions) => {
           if (err)
             reject(err);
           else
-            resolve5(completions);
+            resolve6(completions);
         });
       });
     } else {
@@ -23957,6 +24617,18 @@ function loadConfig() {
   }).option("disable-abbreviation", {
     type: "boolean",
     description: "Disable name optimization"
+  }).option("prompts", {
+    type: "string",
+    description: "Path or URL to prompts JSON/YAML file"
+  }).option("prompts-inline", {
+    type: "string",
+    description: "Provide prompts directly as JSON string"
+  }).option("resources", {
+    type: "string",
+    description: "Path or URL to resources JSON/YAML file"
+  }).option("resources-inline", {
+    type: "string",
+    description: "Provide resources directly as JSON string"
   }).help().parseSync();
   let transportType;
   if (argv.transport === "http" || process.env.TRANSPORT_TYPE === "http") {
@@ -24034,7 +24706,11 @@ function loadConfig() {
     includeResources: argv.resource,
     includeOperations: argv.operation,
     toolsMode,
-    disableAbbreviation: disableAbbreviation ? true : void 0
+    disableAbbreviation: disableAbbreviation ? true : void 0,
+    promptsPath: argv.prompts || process.env.PROMPTS_PATH,
+    promptsInline: argv["prompts-inline"] || process.env.PROMPTS_INLINE,
+    resourcesPath: argv.resources || process.env.RESOURCES_PATH,
+    resourcesInline: argv["resources-inline"] || process.env.RESOURCES_INLINE
   };
 }
 
@@ -24044,7 +24720,7 @@ import {
   isJSONRPCRequest,
   isJSONRPCResponse
 } from "@modelcontextprotocol/sdk/types.js";
-import * as http2 from "http";
+import * as http3 from "http";
 import { randomUUID } from "crypto";
 var StreamableHttpServerTransport = class {
   // Track if using an external server
@@ -24071,7 +24747,7 @@ var StreamableHttpServerTransport = class {
       this.server = server;
       this.server.on("request", this.handleRequest.bind(this));
     } else {
-      this.server = http2.createServer(this.handleRequest.bind(this));
+      this.server = http3.createServer(this.handleRequest.bind(this));
     }
   }
   server;
@@ -24103,13 +24779,13 @@ var StreamableHttpServerTransport = class {
     if (this.started) {
       throw new Error("Transport already started");
     }
-    return new Promise((resolve5, reject) => {
+    return new Promise((resolve6, reject) => {
       this.server.listen(this.port, this.host, () => {
         this.started = true;
         console.error(
           `Streamable HTTP transport listening on http://${this.host}:${this.port}${this.endpointPath}`
         );
-        resolve5();
+        resolve6();
       });
       this.server.on("error", (err) => {
         reject(err);
@@ -24139,7 +24815,7 @@ var StreamableHttpServerTransport = class {
       }
       return;
     }
-    return new Promise((resolve5, reject) => {
+    return new Promise((resolve6, reject) => {
       this.server.close((err) => {
         if (err) {
           reject(err instanceof Error ? err : new Error(String(err)));
@@ -24148,7 +24824,7 @@ var StreamableHttpServerTransport = class {
           if (this.onclose) {
             this.onclose();
           }
-          resolve5();
+          resolve6();
         }
       });
     });
@@ -24630,10 +25306,82 @@ var StreamableHttpServerTransport = class {
   }
 };
 
+// src/content-loader.ts
+import * as fs from "fs";
+import * as path from "path";
+async function loadContent(pathOrUrl, inline) {
+  if (inline) {
+    return inline;
+  }
+  if (!pathOrUrl) {
+    return void 0;
+  }
+  if (pathOrUrl.startsWith("http://") || pathOrUrl.startsWith("https://")) {
+    const response = await axios_default.get(pathOrUrl, {
+      responseType: "text",
+      headers: { Accept: "application/json, application/yaml, text/yaml" }
+    });
+    return response.data;
+  }
+  const absolutePath = path.isAbsolute(pathOrUrl) ? pathOrUrl : path.resolve(process.cwd(), pathOrUrl);
+  return fs.readFileSync(absolutePath, "utf-8");
+}
+function parseContent(content, source) {
+  try {
+    return JSON.parse(content);
+  } catch {
+    try {
+      return jsYaml.load(content);
+    } catch (yamlError) {
+      throw new Error(
+        `Failed to parse ${source} as JSON or YAML: ${yamlError}`
+      );
+    }
+  }
+}
+async function loadPrompts(pathOrUrl, inline) {
+  const content = await loadContent(pathOrUrl, inline);
+  if (!content) {
+    return void 0;
+  }
+  const source = inline ? "inline prompts" : pathOrUrl;
+  const prompts = parseContent(content, source);
+  if (!Array.isArray(prompts)) {
+    throw new Error(`Prompts must be an array, got: ${typeof prompts}`);
+  }
+  return prompts;
+}
+async function loadResources(pathOrUrl, inline) {
+  const content = await loadContent(pathOrUrl, inline);
+  if (!content) {
+    return void 0;
+  }
+  const source = inline ? "inline resources" : pathOrUrl;
+  const resources = parseContent(content, source);
+  if (!Array.isArray(resources)) {
+    throw new Error(`Resources must be an array, got: ${typeof resources}`);
+  }
+  return resources;
+}
+
 // src/index.ts
 async function main() {
   try {
     const config = loadConfig();
+    if (config.promptsPath || config.promptsInline) {
+      const prompts = await loadPrompts(config.promptsPath, config.promptsInline);
+      if (prompts) {
+        config.prompts = prompts;
+        console.error(`Loaded ${prompts.length} prompt(s)`);
+      }
+    }
+    if (config.resourcesPath || config.resourcesInline) {
+      const resources = await loadResources(config.resourcesPath, config.resourcesInline);
+      if (resources) {
+        config.resources = resources;
+        console.error(`Loaded ${resources.length} resource(s)`);
+      }
+    }
     const server = new OpenAPIServer(config);
     let transport;
     if (config.transportType === "http") {
@@ -24678,7 +25426,7 @@ mime-types/index.js:
    *)
 
 js-yaml/dist/js-yaml.mjs:
-  (*! js-yaml 4.1.0 https://github.com/nodeca/js-yaml @license MIT *)
+  (*! js-yaml 4.1.1 https://github.com/nodeca/js-yaml @license MIT *)
 
 yargs-parser/build/lib/string-utils.js:
 yargs-parser/build/lib/tokenize-arg-string.js: