@reactionary/feeds 0.12.5 → 0.12.7

package/cli.cjs

@@ -1764,8 +1764,8 @@ var require_errors = __commonJS({
     };
     exports2.AbortError = AbortError;
     var WatchError = class extends Error {
-      constructor(message = "One (or more) of the watched keys has been changed") {
-        super(message);
+      constructor(message2 = "One (or more) of the watched keys has been changed") {
+        super(message2);
       }
     };
     exports2.WatchError = WatchError;
@@ -2962,11 +2962,11 @@ var require_generic_transformers = __commonJS({
       3: void 0
     };
     function transformTuplesToMap(reply, func) {
-      const message = /* @__PURE__ */ Object.create(null);
+      const message2 = /* @__PURE__ */ Object.create(null);
       for (let i3 = 0; i3 < reply.length; i3 += 2) {
-        message[reply[i3].toString()] = func(reply[i3 + 1]);
+        message2[reply[i3].toString()] = func(reply[i3 + 1]);
       }
-      return message;
+      return message2;
     }
     exports2.transformTuplesToMap = transformTuplesToMap;
     function createTransformTuplesReplyFunc(preserve, typeMapping) {
@@ -3218,10 +3218,10 @@ var require_generic_transformers = __commonJS({
     }
     exports2.parseArgs = parseArgs;
     function transformStreamMessageReply(typeMapping, reply) {
-      const [id, message, millisElapsedFromDelivery, deliveriesCounter] = reply;
+      const [id, message2, millisElapsedFromDelivery, deliveriesCounter] = reply;
       return {
         id,
-        message: transformTuplesReply(message, void 0, typeMapping),
+        message: transformTuplesReply(message2, void 0, typeMapping),
         ...millisElapsedFromDelivery !== void 0 ? { millisElapsedFromDelivery } : {},
         ...deliveriesCounter !== void 0 ? { deliveriesCounter } : {}
       };
@@ -5611,8 +5611,8 @@ var require_ECHO = __commonJS({
        * @param parser - The Redis command parser
        * @param message - Message to echo back
        */
-      parseCommand(parser, message) {
-        parser.push("ECHO", message);
+      parseCommand(parser, message2) {
+        parser.push("ECHO", message2);
       },
       transformReply: void 0
     };
@@ -10063,10 +10063,10 @@ var require_PING = __commonJS({
        * @param message - Optional message to be returned instead of PONG
        * @see https://redis.io/commands/ping/
        */
-      parseCommand(parser, message) {
+      parseCommand(parser, message2) {
         parser.push("PING");
-        if (message) {
-          parser.push(message);
+        if (message2) {
+          parser.push(message2);
         }
       },
       transformReply: void 0
@@ -10139,8 +10139,8 @@ var require_PUBLISH = __commonJS({
        * @param message - The message to publish
        * @see https://redis.io/commands/publish/
        */
-      parseCommand(parser, channel, message) {
-        parser.push("PUBLISH", channel, message);
+      parseCommand(parser, channel, message2) {
+        parser.push("PUBLISH", channel, message2);
       },
       transformReply: void 0
     };
@@ -11399,10 +11399,10 @@ var require_SPUBLISH = __commonJS({
        * @param message - The message to publish
        * @see https://redis.io/commands/spublish/
        */
-      parseCommand(parser, channel, message) {
+      parseCommand(parser, channel, message2) {
         parser.push("SPUBLISH");
         parser.pushKey(channel);
-        parser.push(message);
+        parser.push(message2);
       },
       transformReply: void 0
     };
@@ -11836,7 +11836,7 @@ var require_XADD = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.parseXAddArguments = void 0;
-    function parseXAddArguments(optional2, parser, key, id, message, options) {
+    function parseXAddArguments(optional2, parser, key, id, message2, options) {
       parser.push("XADD");
       parser.pushKey(key);
       if (optional2) {
@@ -11866,7 +11866,7 @@ var require_XADD = __commonJS({
         }
       }
       parser.push(id);
-      for (const [key2, value] of Object.entries(message)) {
+      for (const [key2, value] of Object.entries(message2)) {
         parser.push(key2, value);
       }
     }
@@ -12482,10 +12482,10 @@ var require_XINFO_STREAM = __commonJS({
     function transformEntry(entry) {
       if ((0, generic_transformers_1.isNullReply)(entry))
         return entry;
-      const [id, message] = entry;
+      const [id, message2] = entry;
       return {
         id,
-        message: (0, generic_transformers_1.transformTuplesReply)(message)
+        message: (0, generic_transformers_1.transformTuplesReply)(message2)
       };
     }
   }
@@ -16558,9 +16558,9 @@ var require_token_manager = __commonJS({
     var IDPError = class extends Error {
       message;
       isRetryable;
-      constructor(message, isRetryable2) {
-        super(message);
-        this.message = message;
+      constructor(message2, isRetryable2) {
+        super(message2);
+        this.message = message2;
         this.isRetryable = isRetryable2;
         this.name = "IDPError";
       }
@@ -16727,15 +16727,15 @@ var require_credentials_provider = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.UnableToObtainNewCredentialsError = exports2.CredentialsError = void 0;
     var CredentialsError = class extends Error {
-      constructor(message) {
-        super(`Re-authentication with latest credentials failed: ${message}`);
+      constructor(message2) {
+        super(`Re-authentication with latest credentials failed: ${message2}`);
         this.name = "CredentialsError";
       }
     };
     exports2.CredentialsError = CredentialsError;
     var UnableToObtainNewCredentialsError = class extends Error {
-      constructor(message) {
-        super(`Unable to obtain new credentials : ${message}`);
+      constructor(message2) {
+        super(`Unable to obtain new credentials : ${message2}`);
         this.name = "UnableToObtainNewCredentialsError";
       }
     };
@@ -17645,7 +17645,7 @@ var require_pub_sub = __commonJS({
           [exports2.PUBSUB_TYPE.SHARDED]: sharded
         };
       }
-      #emitPubSubMessage(type, message, channel, pattern) {
+      #emitPubSubMessage(type, message2, channel, pattern) {
         const keyString = (pattern ?? channel).toString(), listeners = this.listeners[type].get(keyString);
         if (!listeners)
           return;
@@ -17656,15 +17656,15 @@ var require_pub_sub = __commonJS({
           sharded: type === exports2.PUBSUB_TYPE.SHARDED
         }));
         for (const listener of listeners.buffers) {
-          listener(message, channel);
+          listener(message2, channel);
         }
         if (!listeners.strings.size)
           return;
         const channelString = pattern ? channel.toString() : keyString, messageString = channelString === "__redis__:invalidate" ? (
           // https://github.com/redis/redis/pull/7469
           // https://github.com/redis/redis/issues/7463
-          message === null ? null : message.map((x4) => x4.toString())
-        ) : message.toString();
+          message2 === null ? null : message2.map((x4) => x4.toString())
+        ) : message2.toString();
         for (const listener of listeners.strings) {
           listener(messageString, channelString);
         }
@@ -19894,8 +19894,8 @@ var require_error_util = __commonJS({
     function isNodeRedisNetworkError(error5) {
       return error5 instanceof errors_1.ConnectionTimeoutError || error5 instanceof errors_1.SocketTimeoutError || error5 instanceof errors_1.SocketClosedUnexpectedlyError || error5 instanceof errors_1.SocketTimeoutDuringMaintenanceError || error5 instanceof errors_1.CommandTimeoutDuringMaintenanceError;
     }
-    function isTlsErrorMessage(message) {
-      const lowerMessage = message.toLowerCase();
+    function isTlsErrorMessage(message2) {
+      const lowerMessage = message2.toLowerCase();
       return lowerMessage.includes("certificate") || lowerMessage.includes("handshake") || lowerMessage.includes("ssl") || lowerMessage.includes("tls");
     }
     function categorizeRedisError(error5) {
@@ -20337,10 +20337,10 @@ var require_metrics = __commonJS({
                 ...!this.#options.hideStreamNames ? { [types_1.OTEL_ATTRIBUTES.redisClientStreamName]: stream2 } : {},
                 ...consumerGroup !== void 0 ? { [types_1.OTEL_ATTRIBUTES.redisClientConsumerGroup]: consumerGroup } : {}
               };
-              for (const message of messages) {
-                if (!message?.id)
+              for (const message2 of messages) {
+                if (!message2?.id)
                   continue;
-                const [tsPart] = message.id.split("-");
+                const [tsPart] = message2.id.split("-");
                 const messageTimestamp = Number.parseInt(tsPart, 10);
                 if (!Number.isFinite(messageTimestamp))
                   continue;
@@ -24101,12 +24101,12 @@ var require_sentinel = __commonJS({
         }
       }
       async #createPubSub(client) {
-        await client.pSubscribe(["switch-master", "[-+]sdown", "+slave", "+sentinel", "[-+]odown", "+slave-reconf-done"], (message, channel) => {
-          this.#handlePubSubControlChannel(channel, message);
+        await client.pSubscribe(["switch-master", "[-+]sdown", "+slave", "+sentinel", "[-+]odown", "+slave-reconf-done"], (message2, channel) => {
+          this.#handlePubSubControlChannel(channel, message2);
         }, true);
         return client;
       }
-      async #handlePubSubControlChannel(channel, message) {
+      async #handlePubSubControlChannel(channel, message2) {
         this.#trace("pubsub control channel message on " + channel);
         this.#reset();
       }
@@ -27738,23 +27738,23 @@ var require_SEARCH = __commonJS({
       unstableResp3: true
     };
     function documentValue(tuples) {
-      const message = /* @__PURE__ */ Object.create(null);
+      const message2 = /* @__PURE__ */ Object.create(null);
       if (!tuples) {
-        return message;
+        return message2;
       }
       let i3 = 0;
       while (i3 < tuples.length) {
         const key = tuples[i3++], value = tuples[i3++];
         if (key === "$") {
           try {
-            Object.assign(message, JSON.parse(value));
+            Object.assign(message2, JSON.parse(value));
             continue;
           } catch {
           }
         }
-        message[key] = value;
+        message2[key] = value;
       }
-      return message;
+      return message2;
     }
   }
 });
@@ -31984,14 +31984,14 @@ function prefixIssues(path2, issues) {
     return iss;
   });
 }
-function unwrapMessage(message) {
-  return typeof message === "string" ? message : message?.message;
+function unwrapMessage(message2) {
+  return typeof message2 === "string" ? message2 : message2?.message;
 }
 function finalizeIssue(iss, ctx, config3) {
   const full = { ...iss, path: iss.path ?? [] };
   if (!iss.message) {
-    const message = unwrapMessage(iss.inst?._zod.def?.error?.(iss)) ?? unwrapMessage(ctx?.error?.(iss)) ?? unwrapMessage(config3.customError?.(iss)) ?? unwrapMessage(config3.localeError?.(iss)) ?? "Invalid input";
-    full.message = message;
+    const message2 = unwrapMessage(iss.inst?._zod.def?.error?.(iss)) ?? unwrapMessage(ctx?.error?.(iss)) ?? unwrapMessage(config3.customError?.(iss)) ?? unwrapMessage(config3.localeError?.(iss)) ?? "Invalid input";
+    full.message = message2;
   }
   delete full.inst;
   delete full.continue;
@@ -33620,13 +33620,13 @@ var init_schemas = __esm({
         }
         return propValues;
       });
-      const isObject2 = isObject;
+      const isObject3 = isObject;
       const catchall = def.catchall;
       let value;
       inst._zod.parse = (payload, ctx) => {
         value ?? (value = _normalized.value);
         const input = payload.value;
-        if (!isObject2(input)) {
+        if (!isObject3(input)) {
           payload.issues.push({
             expected: "object",
             code: "invalid_type",
@@ -33700,7 +33700,7 @@ var init_schemas = __esm({
         return (payload, ctx) => fn(shape, payload, ctx);
       };
       let fastpass;
-      const isObject2 = isObject;
+      const isObject3 = isObject;
       const jit = !globalConfig.jitless;
       const allowsEval2 = allowsEval;
       const fastEnabled = jit && allowsEval2.value;
@@ -33709,7 +33709,7 @@ var init_schemas = __esm({
       inst._zod.parse = (payload, ctx) => {
         value ?? (value = _normalized.value);
         const input = payload.value;
-        if (!isObject2(input)) {
+        if (!isObject3(input)) {
           payload.issues.push({
             expected: "object",
             code: "invalid_type",
@@ -39531,7 +39531,8 @@ var init_session_schema = __esm({
       pendingExternalLogin: looseObject({
         provider: string2(),
         state: string2(),
-        createdAt: coerce_exports.date()
+        createdAt: coerce_exports.date(),
+        data: record(string2(), string2()).optional().meta({ description: "Provider specific values that must survive the redirect, such as a PKCE code verifier and nonce." })
       }).optional().meta({ description: "An external login that has been started but not completed. Binds the callback to the browser that started it." })
     });
     SessionSchema = looseObject({
@@ -39986,8 +39987,8 @@ var init_base_capability = __esm({
     BaseCapability = class {
       cache;
       context;
-      constructor(cache, context2) {
-        this.cache = cache;
+      constructor(cache3, context2) {
+        this.cache = cache3;
         this.context = context2;
       }
       getReactionaryResourceName() {
@@ -40023,8 +40024,8 @@ var init_analytics_capability = __esm({
     init_base_capability();
     AnalyticsCapability = class extends BaseCapability {
       dispatcher;
-      constructor(cache, context2, dispatcher) {
-        super(cache, context2);
+      constructor(cache3, context2, dispatcher) {
+        super(cache3, context2);
         this.dispatcher = dispatcher;
       }
       getResourceName() {
@@ -40269,15 +40270,15 @@ function notFound(identifier) {
   return error({ type: "NotFound", identifier });
 }
 function memoize(fn, keyOf) {
-  const cache = /* @__PURE__ */ new Map();
+  const cache3 = /* @__PURE__ */ new Map();
   return (arg) => {
     const key = keyOf(arg);
-    const hit = cache.get(key);
+    const hit = cache3.get(key);
     if (hit) {
       return hit;
     }
     const pending = fn(arg);
-    cache.set(key, pending);
+    cache3.set(key, pending);
     return pending;
   };
 }
@@ -40524,9 +40525,9 @@ var init_dispatcher = __esm({
           const schema = AnalyticsEventMutationSchemas[type];
           const mutation = schema.safeParse(input);
           if (!mutation.success) {
-            const message = mutation.error.message;
-            console.warn(`Analytics event '${type}' had invalid input and has been dropped: ${message}`);
-            return error({ type: "InvalidInput", error: message });
+            const message2 = mutation.error.message;
+            console.warn(`Analytics event '${type}' had invalid input and has been dropped: ${message2}`);
+            return error({ type: "InvalidInput", error: message2 });
           }
           if (type === "consent-changed") {
             const change = AnalyticsMutationConsentChangedSchema.parse(input);
@@ -40713,8 +40714,8 @@ var init_product_recommendations_capability = __esm({
     };
     MulticastProductRecommendationsCapability = class extends ProductRecommendationsCapability {
       capabilities;
-      constructor(cache, requestContext, capabilities) {
-        super(cache, requestContext);
+      constructor(cache3, requestContext, capabilities) {
+        super(cache3, requestContext);
         this.capabilities = capabilities;
       }
       async getRecommendations(query) {
@@ -40788,9 +40789,9 @@ var init_client_builder = __esm({
         newBuilder.factories = [...this.factories, factory];
         return newBuilder;
       }
-      withCache(cache) {
+      withCache(cache3) {
         const newBuilder = this.clone();
-        newBuilder.cache = cache;
+        newBuilder.cache = cache3;
         return newBuilder;
       }
       withCollisionStrategy(strategy) {
@@ -40859,11 +40860,11 @@ var init_client_builder = __esm({
         newBuilder.analyticsSubscribers = [...this.analyticsSubscribers];
         return newBuilder;
       }
-      resolveFactory(factory, cache, context2) {
+      resolveFactory(factory, cache3, context2) {
         if (factory.length <= 1) {
-          return factory({ cache, context: context2 });
+          return factory({ cache: cache3, context: context2 });
         }
-        return factory(cache, context2);
+        return factory(cache3, context2);
       }
       mergeCapabilities(target, source) {
         const result = { ...target };
@@ -41304,18 +41305,33 @@ var init_identity_capability = __esm({
         this.context.session.identityContext.lastUpdated = /* @__PURE__ */ new Date();
         this.context.session.identityContext.identity = identity;
       }
-      setPendingExternalLogin(provider, state) {
-        this.context.session.identityContext.pendingExternalLogin = { provider, state, createdAt: /* @__PURE__ */ new Date() };
+      setPendingExternalLogin(provider, state, data) {
+        this.context.session.identityContext.pendingExternalLogin = {
+          provider,
+          state,
+          createdAt: /* @__PURE__ */ new Date(),
+          ...data ? { data } : {}
+        };
       }
-      /** Returns true, and clears the pending login, when provider and state match a login started in this session within the last 10 minutes. */
-      consumePendingExternalLogin(provider, state) {
+      /**
+       * Returns the pending login, and clears it, when provider and state match a login started in this session within
+       * the last 10 minutes. Returns undefined otherwise. A pending login can only be taken once.
+       */
+      takePendingExternalLogin(provider, state) {
         const pending = this.context.session.identityContext.pendingExternalLogin;
         delete this.context.session.identityContext.pendingExternalLogin;
         if (!pending || !state) {
-          return false;
+          return void 0;
         }
         const fresh = Date.now() - new Date(pending.createdAt).getTime() <= PENDING_EXTERNAL_LOGIN_TTL_MS;
-        return fresh && pending.provider === provider && pending.state === state;
+        if (!fresh || pending.provider !== provider || pending.state !== state) {
+          return void 0;
+        }
+        return { data: pending.data ?? {} };
+      }
+      /** Returns true, and clears the pending login, when provider and state match a login started in this session within the last 10 minutes. */
+      consumePendingExternalLogin(provider, state) {
+        return this.takePendingExternalLogin(provider, state) !== void 0;
       }
     };
   }
@@ -42245,7 +42261,7 @@ var require_lib6 = __commonJS({
     exports2.isNumber = isNumber;
     exports2.isString = isString;
     exports2.isFunction = isFunction;
-    exports2.isObject = isObject2;
+    exports2.isObject = isObject3;
     exports2.isArray = isArray;
     exports2.isSet = isSet;
     exports2.isMap = isMap;
@@ -42378,7 +42394,7 @@ var require_lib6 = __commonJS({
     function isFunction(x4) {
       return !!x4 && typeof x4 === "function";
     }
-    function isObject2(x4) {
+    function isObject3(x4) {
       const type = typeof x4;
       return !!x4 && (type === "function" || type === "object");
     }
@@ -42398,7 +42414,7 @@ var require_lib6 = __commonJS({
         return !x4.size;
       } else if (isMap(x4)) {
         return !x4.size;
-      } else if (isObject2(x4)) {
+      } else if (isObject3(x4)) {
         for (const key in x4) {
           if (x4.hasOwnProperty(key)) {
             return false;
@@ -42409,7 +42425,7 @@ var require_lib6 = __commonJS({
       return false;
     }
     function isPlainObject2(x4) {
-      if (isObject2(x4)) {
+      if (isObject3(x4)) {
         const proto = Object.getPrototypeOf(x4);
         const ctor = proto.constructor;
         return proto && ctor && typeof ctor === "function" && ctor instanceof ctor && Function.prototype.toString.call(ctor) === Function.prototype.toString.call(Object);
@@ -43698,8 +43714,8 @@ var require_DOMException = __commonJS({
        * @param name - message name
        * @param message - error message
        */
-      constructor(name, message = "") {
-        super(message);
+      constructor(name, message2 = "") {
+        super(message2);
         this.name = name;
       }
     };
@@ -43708,8 +43724,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("DOMStringSizeError", message);
+      constructor(message2 = "") {
+        super("DOMStringSizeError", message2);
       }
     };
     exports2.DOMStringSizeError = DOMStringSizeError;
@@ -43717,8 +43733,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("WrongDocumentError", "The object is in the wrong document. " + message);
+      constructor(message2 = "") {
+        super("WrongDocumentError", "The object is in the wrong document. " + message2);
       }
     };
     exports2.WrongDocumentError = WrongDocumentError;
@@ -43726,8 +43742,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("NoDataAllowedError", message);
+      constructor(message2 = "") {
+        super("NoDataAllowedError", message2);
       }
     };
     exports2.NoDataAllowedError = NoDataAllowedError;
@@ -43735,8 +43751,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("NoModificationAllowedError", "The object can not be modified. " + message);
+      constructor(message2 = "") {
+        super("NoModificationAllowedError", "The object can not be modified. " + message2);
       }
     };
     exports2.NoModificationAllowedError = NoModificationAllowedError;
@@ -43744,8 +43760,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("NotSupportedError", "The operation is not supported. " + message);
+      constructor(message2 = "") {
+        super("NotSupportedError", "The operation is not supported. " + message2);
       }
     };
     exports2.NotSupportedError = NotSupportedError;
@@ -43753,8 +43769,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("InUseAttributeError", message);
+      constructor(message2 = "") {
+        super("InUseAttributeError", message2);
       }
     };
     exports2.InUseAttributeError = InUseAttributeError;
@@ -43762,8 +43778,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("InvalidStateError", "The object is in an invalid state. " + message);
+      constructor(message2 = "") {
+        super("InvalidStateError", "The object is in an invalid state. " + message2);
       }
     };
     exports2.InvalidStateError = InvalidStateError;
@@ -43771,8 +43787,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("InvalidModificationError", "The object can not be modified in this way. " + message);
+      constructor(message2 = "") {
+        super("InvalidModificationError", "The object can not be modified in this way. " + message2);
       }
     };
     exports2.InvalidModificationError = InvalidModificationError;
@@ -43780,8 +43796,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("NamespaceError", "The operation is not allowed by Namespaces in XML. [XMLNS] " + message);
+      constructor(message2 = "") {
+        super("NamespaceError", "The operation is not allowed by Namespaces in XML. [XMLNS] " + message2);
       }
     };
     exports2.NamespaceError = NamespaceError;
@@ -43789,8 +43805,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("InvalidAccessError", "The object does not support the operation or argument. " + message);
+      constructor(message2 = "") {
+        super("InvalidAccessError", "The object does not support the operation or argument. " + message2);
       }
     };
     exports2.InvalidAccessError = InvalidAccessError;
@@ -43798,8 +43814,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("ValidationError", message);
+      constructor(message2 = "") {
+        super("ValidationError", message2);
       }
     };
     exports2.ValidationError = ValidationError;
@@ -43807,8 +43823,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("TypeMismatchError", message);
+      constructor(message2 = "") {
+        super("TypeMismatchError", message2);
       }
     };
     exports2.TypeMismatchError = TypeMismatchError;
@@ -43816,8 +43832,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("SecurityError", "The operation is insecure. " + message);
+      constructor(message2 = "") {
+        super("SecurityError", "The operation is insecure. " + message2);
       }
     };
     exports2.SecurityError = SecurityError;
@@ -43825,8 +43841,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("NetworkError", "A network error occurred. " + message);
+      constructor(message2 = "") {
+        super("NetworkError", "A network error occurred. " + message2);
       }
     };
     exports2.NetworkError = NetworkError;
@@ -43834,8 +43850,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("AbortError", "The operation was aborted. " + message);
+      constructor(message2 = "") {
+        super("AbortError", "The operation was aborted. " + message2);
       }
     };
     exports2.AbortError = AbortError;
@@ -43843,8 +43859,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("URLMismatchError", "The given URL does not match another URL. " + message);
+      constructor(message2 = "") {
+        super("URLMismatchError", "The given URL does not match another URL. " + message2);
       }
     };
     exports2.URLMismatchError = URLMismatchError;
@@ -43852,8 +43868,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("QuotaExceededError", "The quota has been exceeded. " + message);
+      constructor(message2 = "") {
+        super("QuotaExceededError", "The quota has been exceeded. " + message2);
       }
     };
     exports2.QuotaExceededError = QuotaExceededError;
@@ -43861,8 +43877,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("TimeoutError", "The operation timed out. " + message);
+      constructor(message2 = "") {
+        super("TimeoutError", "The operation timed out. " + message2);
       }
     };
     exports2.TimeoutError = TimeoutError;
@@ -43870,8 +43886,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("InvalidNodeTypeError", "The supplied node is incorrect or has an incorrect ancestor for this operation. " + message);
+      constructor(message2 = "") {
+        super("InvalidNodeTypeError", "The supplied node is incorrect or has an incorrect ancestor for this operation. " + message2);
       }
     };
     exports2.InvalidNodeTypeError = InvalidNodeTypeError;
@@ -43879,8 +43895,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("DataCloneError", "The object can not be cloned. " + message);
+      constructor(message2 = "") {
+        super("DataCloneError", "The object can not be cloned. " + message2);
       }
     };
     exports2.DataCloneError = DataCloneError;
@@ -43888,8 +43904,8 @@ var require_DOMException = __commonJS({
       /**
       * @param message - error message
       */
-      constructor(message = "") {
-        super("NotImplementedError", "The DOM method is not implemented by this module. " + message);
+      constructor(message2 = "") {
+        super("NotImplementedError", "The DOM method is not implemented by this module. " + message2);
       }
     };
     exports2.NotImplementedError = NotImplementedError;
@@ -43897,8 +43913,8 @@ var require_DOMException = __commonJS({
       /**
        * @param message - error message
        */
-      constructor(message = "") {
-        super("HierarchyRequestError", "The operation would yield an incorrect node tree. " + message);
+      constructor(message2 = "") {
+        super("HierarchyRequestError", "The operation would yield an incorrect node tree. " + message2);
       }
     };
     exports2.HierarchyRequestError = HierarchyRequestError;
@@ -43906,8 +43922,8 @@ var require_DOMException = __commonJS({
       /**
        * @param message - error message
        */
-      constructor(message = "") {
-        super("NotFoundError", "The object can not be found here. " + message);
+      constructor(message2 = "") {
+        super("NotFoundError", "The object can not be found here. " + message2);
       }
     };
     exports2.NotFoundError = NotFoundError;
@@ -43915,8 +43931,8 @@ var require_DOMException = __commonJS({
       /**
        * @param message - error message
        */
-      constructor(message = "") {
-        super("IndexSizeError", "The index is not in the allowed range. " + message);
+      constructor(message2 = "") {
+        super("IndexSizeError", "The index is not in the allowed range. " + message2);
       }
     };
     exports2.IndexSizeError = IndexSizeError;
@@ -43924,8 +43940,8 @@ var require_DOMException = __commonJS({
       /**
        * @param message - error message
        */
-      constructor(message = "") {
-        super("SyntaxError", "The string did not match the expected pattern. " + message);
+      constructor(message2 = "") {
+        super("SyntaxError", "The string did not match the expected pattern. " + message2);
       }
     };
     exports2.SyntaxError = SyntaxError2;
@@ -43933,8 +43949,8 @@ var require_DOMException = __commonJS({
       /**
        * @param message - error message
        */
-      constructor(message = "") {
-        super("InvalidCharacterError", "The string contains invalid characters. " + message);
+      constructor(message2 = "") {
+        super("InvalidCharacterError", "The string contains invalid characters. " + message2);
       }
     };
     exports2.InvalidCharacterError = InvalidCharacterError;
@@ -44447,9 +44463,9 @@ var require_URLAlgorithm = __commonJS({
     function setValidationErrorCallback(validationErrorCallback) {
       _validationErrorCallback = validationErrorCallback;
     }
-    function validationError(message) {
+    function validationError(message2) {
       if (_validationErrorCallback !== void 0) {
-        _validationErrorCallback.call(null, "Validation Error: " + message);
+        _validationErrorCallback.call(null, "Validation Error: " + message2);
       }
     }
     function newURL() {
@@ -56506,7 +56522,7 @@ var require_BaseReader = __commonJS({
       _decodeText(text2) {
         if (text2 == null)
           return text2;
-        return text2.replace(/&(quot|amp|apos|lt|gt);/g, (_match, tag) => _BaseReader._entityTable[tag]).replace(/&#(?:x([a-fA-F0-9]+)|([0-9]+));/g, (_match, hexStr, numStr) => String.fromCodePoint(parseInt(hexStr || numStr, hexStr ? 16 : 10)));
+        return text2.replace(/&(quot|amp|apos|lt|gt);/g, (_match, tag2) => _BaseReader._entityTable[tag2]).replace(/&#(?:x([a-fA-F0-9]+)|([0-9]+));/g, (_match, hexStr, numStr) => String.fromCodePoint(parseInt(hexStr || numStr, hexStr ? 16 : 10)));
       }
       /**
        * Decodes serialized attribute value.
@@ -56883,7 +56899,7 @@ var require_common = __commonJS({
     function isNothing(subject) {
       return typeof subject === "undefined" || subject === null;
     }
-    function isObject2(subject) {
+    function isObject3(subject) {
       return typeof subject === "object" && subject !== null;
     }
     function toArray(sequence) {
@@ -56912,7 +56928,7 @@ var require_common = __commonJS({
       return number4 === 0 && Number.NEGATIVE_INFINITY === 1 / number4;
     }
     module2.exports.isNothing = isNothing;
-    module2.exports.isObject = isObject2;
+    module2.exports.isObject = isObject3;
     module2.exports.toArray = toArray;
     module2.exports.repeat = repeat;
     module2.exports.isNegativeZero = isNegativeZero;
@@ -56926,8 +56942,8 @@ var require_exception = __commonJS({
     "use strict";
     function formatError2(exception, compact) {
       let where = "";
-      const message = exception.reason || "(unknown reason)";
-      if (!exception.mark) return message;
+      const message2 = exception.reason || "(unknown reason)";
+      if (!exception.mark) return message2;
       if (exception.mark.name) {
         where += 'in "' + exception.mark.name + '" ';
       }
@@ -56935,7 +56951,7 @@ var require_exception = __commonJS({
       if (!compact && exception.mark.snippet) {
         where += "\n\n" + exception.mark.snippet;
       }
-      return message + " " + where;
+      return message2 + " " + where;
     }
     function YAMLException(reason, mark) {
       Error.call(this);
@@ -57071,15 +57087,15 @@ var require_type = __commonJS({
       }
       return result;
     }
-    function Type(tag, options) {
+    function Type(tag2, options) {
       options = options || {};
       Object.keys(options).forEach(function(name) {
         if (TYPE_CONSTRUCTOR_OPTIONS.indexOf(name) === -1) {
-          throw new YAMLException('Unknown option "' + name + '" is met in definition of "' + tag + '" YAML type.');
+          throw new YAMLException('Unknown option "' + name + '" is met in definition of "' + tag2 + '" YAML type.');
         }
       });
       this.options = options;
-      this.tag = tag;
+      this.tag = tag2;
       this.kind = options["kind"] || null;
       this.resolve = options["resolve"] || function() {
         return true;
@@ -57095,7 +57111,7 @@ var require_type = __commonJS({
       this.multi = options["multi"] || false;
       this.styleAliases = compileStyleAliases(options["styleAliases"] || null);
       if (YAML_NODE_KINDS.indexOf(this.kind) === -1) {
-        throw new YAMLException('Unknown kind "' + this.kind + '" is specified for "' + tag + '" YAML type.');
+        throw new YAMLException('Unknown kind "' + this.kind + '" is specified for "' + tag2 + '" YAML type.');
       }
     }
     module2.exports = Type;
@@ -58000,7 +58016,7 @@ var require_loader = __commonJS({
       this.documents = [];
       this.anchorMapTransactions = [];
     }
-    function generateError(state, message) {
+    function generateError(state, message2) {
       const mark = {
         name: state.filename,
         buffer: state.input.slice(0, -1),
@@ -58010,14 +58026,14 @@ var require_loader = __commonJS({
         column: state.position - state.lineStart
       };
       mark.snippet = makeSnippet(mark);
-      return new YAMLException(message, mark);
+      return new YAMLException(message2, mark);
     }
-    function throwError(state, message) {
-      throw generateError(state, message);
+    function throwError(state, message2) {
+      throw generateError(state, message2);
     }
-    function throwWarning(state, message) {
+    function throwWarning(state, message2) {
       if (state.onWarning) {
-        state.onWarning.call(null, generateError(state, message));
+        state.onWarning.call(null, generateError(state, message2));
       }
     }
     function storeAnchor(state, name, value) {
@@ -59290,16 +59306,16 @@ var require_dumper = __commonJS({
       const result = {};
       const keys = Object.keys(map);
       for (let index = 0, length = keys.length; index < length; index += 1) {
-        let tag = keys[index];
-        let style = String(map[tag]);
-        if (tag.slice(0, 2) === "!!") {
-          tag = "tag:yaml.org,2002:" + tag.slice(2);
+        let tag2 = keys[index];
+        let style = String(map[tag2]);
+        if (tag2.slice(0, 2) === "!!") {
+          tag2 = "tag:yaml.org,2002:" + tag2.slice(2);
         }
-        const type = schema.compiledTypeMap["fallback"][tag];
+        const type = schema.compiledTypeMap["fallback"][tag2];
         if (type && _hasOwnProperty.call(type.styleAliases, style)) {
           style = type.styleAliases[style];
         }
-        result[tag] = style;
+        result[tag2] = style;
       }
       return result;
     }
@@ -62598,23 +62614,23 @@ var require_sax = __commonJS({
         SAXParser.call(parser, parser.strict, parser.opt);
         return parser;
       }
-      function strictFail(parser, message) {
+      function strictFail(parser, message2) {
         if (typeof parser !== "object" || !(parser instanceof SAXParser)) {
           throw new Error("bad call to strictFail");
         }
         if (parser.strict) {
-          error5(parser, message);
+          error5(parser, message2);
         }
       }
       function newTag(parser) {
         if (!parser.strict) parser.tagName = parser.tagName[parser.looseCase]();
         var parent = parser.tags[parser.tags.length - 1] || parser;
-        var tag = parser.tag = { name: parser.tagName, attributes: {} };
+        var tag2 = parser.tag = { name: parser.tagName, attributes: {} };
         if (parser.opt.xmlns) {
-          tag.ns = parent.ns;
+          tag2.ns = parent.ns;
         }
         parser.attribList.length = 0;
-        emitNode(parser, "onopentagstart", tag);
+        emitNode(parser, "onopentagstart", tag2);
       }
       function qname(name, attribute) {
         var i3 = name.indexOf(":");
@@ -62651,12 +62667,12 @@ var require_sax = __commonJS({
                 "xmlns: prefix must be bound to " + XMLNS_NAMESPACE + "\nActual: " + parser.attribValue
               );
             } else {
-              var tag = parser.tag;
+              var tag2 = parser.tag;
               var parent = parser.tags[parser.tags.length - 1] || parser;
-              if (tag.ns === parent.ns) {
-                tag.ns = Object.create(parent.ns);
+              if (tag2.ns === parent.ns) {
+                tag2.ns = Object.create(parent.ns);
               }
-              tag.ns[local] = parser.attribValue;
+              tag2.ns[local] = parser.attribValue;
             }
           }
           parser.attribList.push([parser.attribName, parser.attribValue]);
@@ -62671,24 +62687,24 @@ var require_sax = __commonJS({
       }
       function openTag(parser, selfClosing) {
         if (parser.opt.xmlns) {
-          var tag = parser.tag;
+          var tag2 = parser.tag;
           var qn = qname(parser.tagName);
-          tag.prefix = qn.prefix;
-          tag.local = qn.local;
-          tag.uri = tag.ns[qn.prefix] || "";
-          if (tag.prefix && !tag.uri) {
+          tag2.prefix = qn.prefix;
+          tag2.local = qn.local;
+          tag2.uri = tag2.ns[qn.prefix] || "";
+          if (tag2.prefix && !tag2.uri) {
             strictFail(
               parser,
               "Unbound namespace prefix: " + JSON.stringify(parser.tagName)
             );
-            tag.uri = qn.prefix;
+            tag2.uri = qn.prefix;
           }
           var parent = parser.tags[parser.tags.length - 1] || parser;
-          if (tag.ns && parent.ns !== tag.ns) {
-            Object.keys(tag.ns).forEach(function(p4) {
+          if (tag2.ns && parent.ns !== tag2.ns) {
+            Object.keys(tag2.ns).forEach(function(p4) {
               emitNode(parser, "onopennamespace", {
                 prefix: p4,
-                uri: tag.ns[p4]
+                uri: tag2.ns[p4]
               });
             });
           }
@@ -62699,7 +62715,7 @@ var require_sax = __commonJS({
             var qualName = qname(name, true);
             var prefix = qualName.prefix;
             var local = qualName.local;
-            var uri = prefix === "" ? "" : tag.ns[prefix] || "";
+            var uri = prefix === "" ? "" : tag2.ns[prefix] || "";
             var a3 = {
               name,
               value,
@@ -62775,17 +62791,17 @@ var require_sax = __commonJS({
         parser.tagName = tagName;
         var s4 = parser.tags.length;
         while (s4-- > t2) {
-          var tag = parser.tag = parser.tags.pop();
+          var tag2 = parser.tag = parser.tags.pop();
           parser.tagName = parser.tag.name;
           emitNode(parser, "onclosetag", parser.tagName);
           var x4 = {};
-          for (var i3 in tag.ns) {
-            x4[i3] = tag.ns[i3];
+          for (var i3 in tag2.ns) {
+            x4[i3] = tag2.ns[i3];
           }
           var parent = parser.tags[parser.tags.length - 1] || parser;
-          if (parser.opt.xmlns && tag.ns !== parent.ns) {
-            Object.keys(tag.ns).forEach(function(p4) {
-              var n3 = tag.ns[p4];
+          if (parser.opt.xmlns && tag2.ns !== parent.ns) {
+            Object.keys(tag2.ns).forEach(function(p4) {
+              var n3 = tag2.ns[p4];
               emitNode(parser, "onclosenamespace", { prefix: p4, uri: n3 });
             });
           }
@@ -63471,28 +63487,28 @@ function createNullCache() {
   };
 }
 function createMemoryCache(options = { serializable: true }) {
-  let cache = {};
+  let cache3 = {};
   return {
     get(key, defaultValue, events2 = {
       miss: () => Promise.resolve()
     }) {
       const keyAsString = JSON.stringify(key);
-      if (keyAsString in cache) {
-        return Promise.resolve(options.serializable ? JSON.parse(cache[keyAsString]) : cache[keyAsString]);
+      if (keyAsString in cache3) {
+        return Promise.resolve(options.serializable ? JSON.parse(cache3[keyAsString]) : cache3[keyAsString]);
       }
       const promise = defaultValue();
       return promise.then((value) => events2.miss(value)).then(() => promise);
     },
     set(key, value) {
-      cache[JSON.stringify(key)] = options.serializable ? JSON.stringify(value) : value;
+      cache3[JSON.stringify(key)] = options.serializable ? JSON.stringify(value) : value;
       return Promise.resolve(value);
     },
     delete(key) {
-      delete cache[JSON.stringify(key)];
+      delete cache3[JSON.stringify(key)];
       return Promise.resolve();
     },
     clear() {
-      cache = {};
+      cache3 = {};
       return Promise.resolve();
     }
   };
@@ -63596,13 +63612,13 @@ function toAsyncIterable(stream2) {
   return readableStreamToAsyncIterable(stream2);
 }
 async function* iterLines(stream2) {
-  const decoder = new TextDecoder("utf-8");
+  const decoder2 = new TextDecoder("utf-8");
   const buffer = [];
   let bufferSize = 0;
   let trailingCR = false;
   let isFirstLine = true;
   for await (const chunk of toAsyncIterable(stream2)) {
-    const text2 = decoder.decode(chunk, { stream: true });
+    const text2 = decoder2.decode(chunk, { stream: true });
     let offset = 0;
     if (trailingCR) {
       trailingCR = false;
@@ -63651,7 +63667,7 @@ async function* iterLines(stream2) {
       offset = endIdx + skipLen;
     }
   }
-  const remaining = decoder.decode();
+  const remaining = decoder2.decode();
   if (remaining) {
     buffer.push(remaining);
   }
@@ -63664,9 +63680,9 @@ async function* iterLines(stream2) {
   }
 }
 async function* iterSSEEvents(stream2) {
-  const decoder = new SSEDecoder();
+  const decoder2 = new SSEDecoder();
   for await (const line of iterLines(stream2)) {
-    const event = decoder.decode(line);
+    const event = decoder2.decode(line);
     if (event !== null) {
       yield event;
     }
@@ -64073,8 +64089,8 @@ var init_common = __esm({
     EXPIRATION_DELAY = 2 * 60 * 1e3;
     AlgoliaError = class extends Error {
       name = "AlgoliaError";
-      constructor(message, name) {
-        super(message);
+      constructor(message2, name) {
+        super(message2);
         if (name) {
           this.name = name;
         }
@@ -64097,8 +64113,8 @@ var init_common = __esm({
     };
     ErrorWithStackTrace = class extends AlgoliaError {
       stackTrace;
-      constructor(message, stackTrace, name) {
-        super(message, name);
+      constructor(message2, stackTrace, name) {
+        super(message2, name);
         this.stackTrace = stackTrace;
       }
     };
@@ -64113,22 +64129,22 @@ var init_common = __esm({
     };
     ApiError = class extends ErrorWithStackTrace {
       status;
-      constructor(message, status, stackTrace, name = "ApiError") {
-        super(message, stackTrace, name);
+      constructor(message2, status, stackTrace, name = "ApiError") {
+        super(message2, stackTrace, name);
         this.status = status;
       }
     };
     DeserializationError = class extends AlgoliaError {
       response;
-      constructor(message, response) {
-        super(message, "DeserializationError");
+      constructor(message2, response) {
+        super(message2, "DeserializationError");
         this.response = response;
       }
     };
     DetailedApiError = class extends ApiError {
       error;
-      constructor(message, status, error5, stackTrace) {
-        super(message, status, stackTrace, "DetailedApiError");
+      constructor(message2, status, error5, stackTrace) {
+        super(message2, status, stackTrace, "DetailedApiError");
         this.error = error5;
       }
     };
@@ -72462,8 +72478,8 @@ var init_product_search_capability2 = __esm({
     AlgoliaProductSearchCapability = class extends ProductSearchCapability {
       config;
       factory;
-      constructor(cache, context2, config3, factory) {
-        super(cache, context2);
+      constructor(cache3, context2, config3, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
       }
@@ -72576,8 +72592,8 @@ var init_analytics_capability2 = __esm({
       purpose = "analytics";
       client;
       config;
-      constructor(cache, requestContext, config3) {
-        super(cache, requestContext);
+      constructor(cache3, requestContext, config3) {
+        super(cache3, requestContext);
         this.config = config3;
         this.client = algoliasearch(this.config.appId, this.config.apiKey).initInsights({});
       }
@@ -72990,8 +73006,8 @@ var init_product_recommendations_capability2 = __esm({
     AlgoliaProductRecommendationsCapability = class extends ProductRecommendationsCapability {
       config;
       client;
-      constructor(config3, cache, context2) {
-        super(cache, context2);
+      constructor(config3, cache3, context2) {
+        super(cache3, context2);
         this.config = config3;
         this.client = liteClient(this.config.appId, this.config.apiKey);
       }
@@ -73353,7 +73369,7 @@ var init_initialize_types = __esm({
 
 // packages/algolia/src/core/initialize.ts
 function withAlgoliaCapabilities(configuration, capabilities) {
-  return (cache, context2) => {
+  return (cache3, context2) => {
     const client = {};
     if (capabilities.productSearch?.enabled) {
       const defaultFactory = new AlgoliaProductSearchFactory(
@@ -73371,7 +73387,7 @@ function withAlgoliaCapabilities(configuration, capabilities) {
           )
         },
         (factory) => ({
-          cache,
+          cache: cache3,
           context: context2,
           config: configuration,
           factory
@@ -73383,7 +73399,7 @@ function withAlgoliaCapabilities(configuration, capabilities) {
         capabilities.analytics,
         (args) => new AlgoliaAnalyticsCapability(args.cache, args.context, args.config),
         {
-          cache,
+          cache: cache3,
           context: context2,
           config: configuration
         }
@@ -73398,7 +73414,7 @@ function withAlgoliaCapabilities(configuration, capabilities) {
           args.context
         ),
         {
-          cache,
+          cache: cache3,
           context: context2,
           config: configuration
         }
@@ -73525,11 +73541,11 @@ var require_commercetools_ts_client_cjs_prod = __commonJS({
     var CTP_API_URL = "https://api.europe-west1.gcp.commercetools.com";
     var CTP_AUTH_URL = "https://auth.europe-west1.gcp.commercetools.com";
     var DEFAULT_HEADERS = ["content-type", "access-control-allow-origin", "access-control-allow-headers", "access-control-allow-methods", "access-control-expose-headers", "access-control-max-ag", "x-correlation-id", "server-timing", "date", "server", "transfer-encoding", "access-control-max-age", "content-encoding", "x-envoy-upstream-service-time", "via", "alt-svc", "connection"];
-    function DefineError(statusCode, message, meta = {}) {
+    function DefineError(statusCode, message2, meta = {}) {
       this.code = meta["code"] ??= this.constructor.name;
       this.statusCode = statusCode;
       this.status = statusCode;
-      this.message = message;
+      this.message = message2;
       Object.assign(this, meta);
       this.name = this.constructor.name;
       this.constructor.prototype.__proto__ = Error.prototype;
@@ -73586,10 +73602,10 @@ var require_commercetools_ts_client_cjs_prod = __commonJS({
     }
     function createError({
       statusCode,
-      message,
+      message: message2,
       ...rest
     }) {
-      let errorMessage = message || "Unexpected non-JSON error response";
+      let errorMessage = message2 || "Unexpected non-JSON error response";
       if (statusCode === 404) errorMessage = `URI not found: ${rest.originalRequest?.uri || rest.uri}`;
       const ResponseError = getErrorByCode(statusCode);
       if (ResponseError) return new ResponseError(errorMessage, rest);
@@ -74063,12 +74079,12 @@ var require_commercetools_ts_client_cjs_prod = __commonJS({
             refresh_token: refreshToken
           } = response?.data;
           const expirationTime = calculateExpirationTime(expiresIn);
-          const cache = {
+          const cache3 = {
             token,
             expirationTime,
             refreshToken
           };
-          await tokenCache.set(cache, tokenCacheKey);
+          await tokenCache.set(cache3, tokenCacheKey);
           return Promise.resolve(true);
         }
         throw createError({
@@ -74323,12 +74339,12 @@ var require_commercetools_ts_client_cjs_prod = __commonJS({
       } catch (e2) {
         const headers = includeResponseHeaders ? getHeaders(e2.response?.headers) : null;
         const statusCode = e2.response?.status || e2.response?.statusCode || e2.response?.data.statusCode || 0;
-        const message = e2.response?.data?.message;
+        const message2 = e2.response?.data?.message;
         const error5 = createError({
           statusCode,
           code: "NetworkError",
           status: statusCode,
-          message: message || e2.message,
+          message: message2 || e2.message,
           headers,
           /**
            * @deprecated use `error` instead
@@ -74958,11 +74974,11 @@ var require_commercetools_ts_client_cjs_dev = __commonJS({
     var CTP_API_URL = "https://api.europe-west1.gcp.commercetools.com";
     var CTP_AUTH_URL = "https://auth.europe-west1.gcp.commercetools.com";
     var DEFAULT_HEADERS = ["content-type", "access-control-allow-origin", "access-control-allow-headers", "access-control-allow-methods", "access-control-expose-headers", "access-control-max-ag", "x-correlation-id", "server-timing", "date", "server", "transfer-encoding", "access-control-max-age", "content-encoding", "x-envoy-upstream-service-time", "via", "alt-svc", "connection"];
-    function DefineError(statusCode, message, meta = {}) {
+    function DefineError(statusCode, message2, meta = {}) {
       this.code = meta["code"] ??= this.constructor.name;
       this.statusCode = statusCode;
       this.status = statusCode;
-      this.message = message;
+      this.message = message2;
       Object.assign(this, meta);
       this.name = this.constructor.name;
       this.constructor.prototype.__proto__ = Error.prototype;
@@ -75019,10 +75035,10 @@ var require_commercetools_ts_client_cjs_dev = __commonJS({
     }
     function createError({
       statusCode,
-      message,
+      message: message2,
       ...rest
     }) {
-      let errorMessage = message || "Unexpected non-JSON error response";
+      let errorMessage = message2 || "Unexpected non-JSON error response";
       if (statusCode === 404) errorMessage = `URI not found: ${rest.originalRequest?.uri || rest.uri}`;
       const ResponseError = getErrorByCode(statusCode);
       if (ResponseError) return new ResponseError(errorMessage, rest);
@@ -75496,12 +75512,12 @@ var require_commercetools_ts_client_cjs_dev = __commonJS({
             refresh_token: refreshToken
           } = response?.data;
           const expirationTime = calculateExpirationTime(expiresIn);
-          const cache = {
+          const cache3 = {
             token,
             expirationTime,
             refreshToken
           };
-          await tokenCache.set(cache, tokenCacheKey);
+          await tokenCache.set(cache3, tokenCacheKey);
           return Promise.resolve(true);
         }
         throw createError({
@@ -75756,12 +75772,12 @@ var require_commercetools_ts_client_cjs_dev = __commonJS({
       } catch (e2) {
         const headers = includeResponseHeaders ? getHeaders(e2.response?.headers) : null;
         const statusCode = e2.response?.status || e2.response?.statusCode || e2.response?.data.statusCode || 0;
-        const message = e2.response?.data?.message;
+        const message2 = e2.response?.data?.message;
         const error5 = createError({
           statusCode,
           code: "NetworkError",
           status: statusCode,
-          message: message || e2.message,
+          message: message2 || e2.message,
           headers,
           /**
            * @deprecated use `error` instead
@@ -113850,6 +113866,1158 @@ var require_src = __commonJS({
   }
 });
 
+// packages/oidc/src/client/pkce.ts
+function base64Url(bytes) {
+  let binary = "";
+  bytes.forEach((byte) => {
+    binary += String.fromCharCode(byte);
+  });
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function randomToken(byteLength = 32) {
+  const bytes = new Uint8Array(byteLength);
+  crypto.getRandomValues(bytes);
+  return base64Url(bytes);
+}
+async function codeChallenge(verifier) {
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(verifier));
+  return base64Url(new Uint8Array(digest));
+}
+var init_pkce = __esm({
+  "packages/oidc/src/client/pkce.ts"() {
+    "use strict";
+  }
+});
+
+// packages/oidc/src/client/discovery.ts
+async function resolveMetadata(provider) {
+  if (provider.authorizationEndpoint && provider.tokenEndpoint && provider.jwksUri) {
+    return {
+      issuer: provider.issuer,
+      authorizationEndpoint: provider.authorizationEndpoint,
+      tokenEndpoint: provider.tokenEndpoint,
+      jwksUri: provider.jwksUri
+    };
+  }
+  let discovered = cache.get(provider.issuer);
+  if (!discovered || discovered.expires < Date.now()) {
+    const url2 = `${provider.issuer.replace(/\/$/, "")}/.well-known/openid-configuration`;
+    const response = await fetch(url2, { headers: { accept: "application/json" } });
+    if (!response.ok) {
+      throw new Error(`Discovery failed for ${provider.key}: HTTP ${response.status}`);
+    }
+    const document2 = DiscoveryDocumentSchema.parse(await response.json());
+    if (document2.issuer !== provider.issuer) {
+      throw new Error(`Discovery document of ${provider.key} names a different issuer than configured`);
+    }
+    discovered = {
+      expires: Date.now() + DISCOVERY_TTL_MS,
+      metadata: {
+        issuer: document2.issuer,
+        authorizationEndpoint: document2.authorization_endpoint,
+        tokenEndpoint: document2.token_endpoint,
+        jwksUri: document2.jwks_uri,
+        ...document2.end_session_endpoint ? { endSessionEndpoint: document2.end_session_endpoint } : {}
+      }
+    };
+    cache.set(provider.issuer, discovered);
+  }
+  return {
+    ...discovered.metadata,
+    authorizationEndpoint: provider.authorizationEndpoint ?? discovered.metadata.authorizationEndpoint,
+    tokenEndpoint: provider.tokenEndpoint ?? discovered.metadata.tokenEndpoint,
+    jwksUri: provider.jwksUri ?? discovered.metadata.jwksUri
+  };
+}
+var DISCOVERY_TTL_MS, DiscoveryDocumentSchema, cache;
+var init_discovery = __esm({
+  "packages/oidc/src/client/discovery.ts"() {
+    "use strict";
+    init_zod();
+    DISCOVERY_TTL_MS = 60 * 60 * 1e3;
+    DiscoveryDocumentSchema = looseObject({
+      issuer: string2(),
+      authorization_endpoint: string2(),
+      token_endpoint: string2(),
+      jwks_uri: string2(),
+      end_session_endpoint: string2().optional()
+    });
+    cache = /* @__PURE__ */ new Map();
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/buffer_utils.js
+function concat(...buffers) {
+  const size = buffers.reduce((acc, { length }) => acc + length, 0), buf = new Uint8Array(size);
+  let i3 = 0;
+  for (const buffer of buffers)
+    buf.set(buffer, i3), i3 += buffer.length;
+  return buf;
+}
+function encode2(string4) {
+  if (typeof string4 == "string" && string4.length >= 128) {
+    if (NON_ASCII.test(string4))
+      throw new TypeError("non-ASCII string encountered in encode()");
+    return encoder.encode(string4);
+  }
+  const bytes = new Uint8Array(string4.length);
+  for (let i3 = 0; i3 < string4.length; i3++) {
+    const code = string4.charCodeAt(i3);
+    if (code > 127)
+      throw new TypeError("non-ASCII string encountered in encode()");
+    bytes[i3] = code;
+  }
+  return bytes;
+}
+function decodeBase64(encoded, url2 = false) {
+  if (Uint8Array.fromBase64)
+    return Uint8Array.fromBase64(encoded, { alphabet: url2 ? "base64url" : "base64" });
+  if (url2) {
+    if (encoded.includes("+") || encoded.includes("/"))
+      throw new TypeError("Invalid base64url");
+    encoded = encoded.replace(/-/g, "+").replace(/_/g, "/");
+  }
+  const binary = atob(encoded), bytes = new Uint8Array(binary.length);
+  for (let i3 = 0; i3 < binary.length; i3++)
+    bytes[i3] = binary.charCodeAt(i3);
+  return bytes;
+}
+var encoder, decoder, strictDecoder, UINT32_RANGE, NON_ASCII;
+var init_buffer_utils = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/buffer_utils.js"() {
+    encoder = new TextEncoder();
+    decoder = new TextDecoder();
+    strictDecoder = new TextDecoder("utf-8", { fatal: true });
+    UINT32_RANGE = 2 ** 32;
+    NON_ASCII = /[^\x00-\x7f]/;
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/util/errors.js
+var JOSEError, JWTClaimValidationFailed, JWTExpired, JOSEAlgNotAllowed, JOSENotSupported, JWSInvalid, JWTInvalid, JWKSInvalid, JWKSNoMatchingKey, JWKSMultipleMatchingKeys, JWKSTimeout, JWSSignatureVerificationFailed;
+var init_errors4 = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/util/errors.js"() {
+    JOSEError = class extends Error {
+      static code = "ERR_JOSE_GENERIC";
+      code = "ERR_JOSE_GENERIC";
+      constructor(message2, options) {
+        super(message2, options), this.name = this.constructor.name, Error.captureStackTrace?.(this, this.constructor);
+      }
+    };
+    JWTClaimValidationFailed = class extends JOSEError {
+      static code = "ERR_JWT_CLAIM_VALIDATION_FAILED";
+      code = "ERR_JWT_CLAIM_VALIDATION_FAILED";
+      claim;
+      reason;
+      payload;
+      constructor(message2, payload, claim = "unspecified", reason = "unspecified") {
+        super(message2, { cause: { claim, reason, payload } }), this.claim = claim, this.reason = reason, this.payload = payload;
+      }
+    };
+    JWTExpired = class extends JOSEError {
+      static code = "ERR_JWT_EXPIRED";
+      code = "ERR_JWT_EXPIRED";
+      claim;
+      reason;
+      payload;
+      constructor(message2, payload, claim = "unspecified", reason = "unspecified") {
+        super(message2, { cause: { claim, reason, payload } }), this.claim = claim, this.reason = reason, this.payload = payload;
+      }
+    };
+    JOSEAlgNotAllowed = class extends JOSEError {
+      static code = "ERR_JOSE_ALG_NOT_ALLOWED";
+      code = "ERR_JOSE_ALG_NOT_ALLOWED";
+    };
+    JOSENotSupported = class extends JOSEError {
+      static code = "ERR_JOSE_NOT_SUPPORTED";
+      code = "ERR_JOSE_NOT_SUPPORTED";
+    };
+    JWSInvalid = class extends JOSEError {
+      static code = "ERR_JWS_INVALID";
+      code = "ERR_JWS_INVALID";
+    };
+    JWTInvalid = class extends JOSEError {
+      static code = "ERR_JWT_INVALID";
+      code = "ERR_JWT_INVALID";
+    };
+    JWKSInvalid = class extends JOSEError {
+      static code = "ERR_JWKS_INVALID";
+      code = "ERR_JWKS_INVALID";
+    };
+    JWKSNoMatchingKey = class extends JOSEError {
+      static code = "ERR_JWKS_NO_MATCHING_KEY";
+      code = "ERR_JWKS_NO_MATCHING_KEY";
+      constructor(message2 = "no applicable key found in the JSON Web Key Set", options) {
+        super(message2, options);
+      }
+    };
+    JWKSMultipleMatchingKeys = class extends JOSEError {
+      [Symbol.asyncIterator] = async function* () {
+      };
+      static code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
+      code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
+      constructor(message2 = "multiple matching keys found in the JSON Web Key Set", options) {
+        super(message2, options);
+      }
+    };
+    JWKSTimeout = class extends JOSEError {
+      static code = "ERR_JWKS_TIMEOUT";
+      code = "ERR_JWKS_TIMEOUT";
+      constructor(message2 = "request timed out", options) {
+        super(message2, options);
+      }
+    };
+    JWSSignatureVerificationFailed = class extends JOSEError {
+      static code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
+      code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
+      constructor(message2 = "signature verification failed", options) {
+        super(message2, options);
+      }
+    };
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/util/base64url.js
+function decode2(input) {
+  try {
+    return decodeBase64(typeof input == "string" ? input : decoder.decode(input), true);
+  } catch (cause) {
+    throw new TypeError(invalid, { cause });
+  }
+}
+var invalid;
+var init_base64url = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/util/base64url.js"() {
+    init_buffer_utils();
+    invalid = "The input to be decoded is not correctly encoded.";
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/validate.js
+function isObject2(input) {
+  if (typeof input != "object" || input === null || Object.prototype.toString.call(input) !== "[object Object]")
+    return false;
+  const prototype = Object.getPrototypeOf(input);
+  return prototype === null || Object.getPrototypeOf(prototype) === null;
+}
+function isJwkSet(input) {
+  return isObject2(input) && Array.isArray(input.keys) && Array.from(input.keys).every(isObject2);
+}
+function isDisjoint(...headers) {
+  const parameters = /* @__PURE__ */ new Set();
+  for (const header of headers)
+    if (header)
+      for (const parameter of Object.keys(header)) {
+        if (parameters.has(parameter))
+          return false;
+        parameters.add(parameter);
+      }
+  return true;
+}
+function decodeBase64url(value, label, ErrorClass) {
+  try {
+    return decode2(value);
+  } catch (cause) {
+    throw new ErrorClass(`Failed to base64url decode the ${label}`, { cause });
+  }
+}
+function encodeAsciiMember(value, label, ErrorClass) {
+  try {
+    return encode2(value);
+  } catch (cause) {
+    throw new ErrorClass(`The ${label} is not a valid base64url string`, { cause });
+  }
+}
+function parseJoseHeader(encodedProtectedHeader, ErrorClass, message2) {
+  let parsed;
+  try {
+    parsed = JSON.parse(strictDecoder.decode(decode2(encodedProtectedHeader)));
+  } catch (cause) {
+    throw new ErrorClass(message2, { cause });
+  }
+  if (!isObject2(parsed))
+    throw new ErrorClass(message2);
+  return parsed;
+}
+function validateAlgorithms(option, algorithms) {
+  if (algorithms !== void 0 && (!Array.isArray(algorithms) || algorithms.some((s3) => typeof s3 != "string")))
+    throw new TypeError(`"${option}" option must be an array of strings`);
+  return algorithms === void 0 ? void 0 : new Set(algorithms);
+}
+function validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {
+  if (joseHeader.crit !== void 0 && protectedHeader?.crit === void 0)
+    throw new Err('"crit" (Critical) Header Parameter MUST be integrity protected');
+  if (!protectedHeader || protectedHeader.crit === void 0)
+    return [];
+  if (!Array.isArray(protectedHeader.crit) || protectedHeader.crit.length === 0 || protectedHeader.crit.some((input) => typeof input != "string" || input.length === 0))
+    throw new Err('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');
+  const recognized = recognizedOption === void 0 ? recognizedDefault : { __proto__: null, ...recognizedOption, ...recognizedDefault };
+  for (const parameter of protectedHeader.crit) {
+    if (!(parameter in recognized))
+      throw new JOSENotSupported(`Extension Header Parameter "${parameter}" is not recognized`);
+    if (!Object.hasOwn(joseHeader, parameter) || joseHeader[parameter] === void 0)
+      throw new Err(`Extension Header Parameter "${parameter}" is missing`);
+    if (recognized[parameter] && (!Object.hasOwn(protectedHeader, parameter) || protectedHeader[parameter] === void 0))
+      throw new Err(`Extension Header Parameter "${parameter}" MUST be integrity protected`);
+  }
+  return protectedHeader.crit;
+}
+function validateB64(protectedHeader, extensions) {
+  if (extensions.includes("b64")) {
+    const b64 = protectedHeader.b64;
+    if (typeof b64 != "boolean")
+      throw new JWSInvalid('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
+    return b64;
+  }
+  return true;
+}
+var JWS_RECOGNIZED;
+var init_validate = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/validate.js"() {
+    init_errors4();
+    init_base64url();
+    init_buffer_utils();
+    JWS_RECOGNIZED = { __proto__: null, b64: true };
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/key.js
+async function prepareKey(entry, key, usage) {
+  const { alg, secret } = entry, requiresPrivateKey = usage === "decrypt" || usage === "sign";
+  if (secret && key instanceof Uint8Array)
+    return key;
+  let normalized, keyObject;
+  if (isObject2(key)) {
+    if (normalized = normalizeJwk(key), typeof normalized.kty != "string")
+      throw invalidKeyType(alg, key, secret);
+    if (!(secret ? normalized.kty === "oct" && typeof normalized.k == "string" : normalized.kty !== "oct" && (requiresPrivateKey ? normalized.kty === "AKP" && typeof normalized.priv == "string" || typeof normalized.d == "string" : normalized.d === void 0 && normalized.priv === void 0)))
+      throw new TypeError(secret ? 'JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present' : `JSON Web Key for this operation must be a ${requiresPrivateKey ? "private" : "public"} JWK`);
+    if (jwkMatchesOp(entry, normalized, usage), normalized.kty === "oct")
+      return decode2(normalized.k);
+    if (!Object.isFrozen(key)) {
+      const { key_ops } = key;
+      Array.isArray(key_ops) && Object.freeze(key_ops), Object.freeze(key);
+    }
+  } else {
+    if (!isKeyLike(key))
+      throw invalidKeyType(alg, key, secret);
+    const expectedType = secret ? "secret" : requiresPrivateKey ? "private" : "public";
+    if (key.type !== expectedType && (secret || ["secret", "public", "private"].includes(key.type)))
+      throw new TypeError(`${tag(key)} instances must be of type "${expectedType}" for the ${alg} algorithm`);
+    if (isCryptoKey(key))
+      return key;
+    if (keyObject = key, keyObject.type === "secret")
+      return keyObject.export();
+  }
+  cache2 ||= /* @__PURE__ */ new WeakMap();
+  const cacheKey = key;
+  let cached2 = cache2.get(cacheKey);
+  if (cached2?.[alg])
+    return cached2[alg];
+  if (cached2 || cache2.set(cacheKey, cached2 = {}), keyObject && typeof keyObject.toCryptoKey == "function") {
+    const isPublic = keyObject.type === "public", crv = nist[keyObject.asymmetricKeyDetails?.namedCurve], params = entry.resolve?.({ crv, asymmetricKeyType: keyObject.asymmetricKeyType }) ?? entry.subtle;
+    return cached2[alg] = keyObject.toCryptoKey(params, isPublic, entry.usages[isPublic ? 0 : 1]);
+  }
+  return normalized ??= keyObject.export({ format: "jwk" }), normalized.alg = alg, cached2[alg] = await jwkToKey(entry, normalized);
+}
+function message(msg, actual, ...types) {
+  if (types.length > 2) {
+    const last = types.pop();
+    msg += `one of type ${types.join(", ")}, or ${last}.`;
+  } else types.length === 2 ? msg += `one of type ${types[0]} or ${types[1]}.` : msg += `of type ${types[0]}.`;
+  return actual == null ? msg += ` Received ${actual}` : typeof actual == "function" && actual.name ? msg += ` Received function ${actual.name}` : typeof actual == "object" && actual != null && actual.constructor?.name && (msg += ` Received an instance of ${actual.constructor.name}`), msg;
+}
+function invalidKeyType(alg, actual, secret) {
+  const types = ["CryptoKey", "KeyObject", "JSON Web Key"];
+  return secret && types.push("Uint8Array"), new TypeError(message(`Key for the ${alg} algorithm must be `, actual, ...types));
+}
+function checkUsage(key, usage) {
+  if (usage && !key.usages.includes(usage))
+    throw new TypeError(`CryptoKey does not support this operation, its usages must include ${usage}.`);
+}
+function checkModulusLength(alg, key) {
+  const { modulusLength } = key.algorithm;
+  if (typeof modulusLength != "number" || modulusLength < 2048)
+    throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);
+}
+function checkCryptoKey(key, expected, usage) {
+  const algorithm = key.algorithm;
+  if (algorithm.name !== expected.name)
+    throw unusable(expected.name);
+  if (expected.hash && algorithm.hash?.name !== expected.hash)
+    throw unusable(expected.hash, "algorithm.hash");
+  if (expected.namedCurve && algorithm.namedCurve !== expected.namedCurve)
+    throw unusable(expected.namedCurve, "algorithm.namedCurve");
+  if (expected.length !== void 0 && algorithm.length !== expected.length)
+    throw unusable(expected.length, "algorithm.length");
+  checkUsage(key, usage);
+}
+function snapshotJwk(jwk) {
+  return { __proto__: null, ...jwk };
+}
+function normalizeJwk(jwk) {
+  const normalized = snapshotJwk(jwk);
+  if (normalized.ext !== void 0 && typeof normalized.ext != "boolean")
+    throw new TypeError('"ext" (Extractable) Parameter must be a boolean');
+  if (normalized.key_ops !== void 0) {
+    const value = normalized.key_ops, keyOps = Array.isArray(value) ? [...value] : void 0;
+    if (!keyOps || keyOps.some((operation) => typeof operation != "string") || new Set(keyOps).size !== keyOps.length)
+      throw new TypeError('"key_ops" (Key Operations) Parameter must be an array of unique strings');
+    normalized.key_ops = keyOps;
+  }
+  return normalized;
+}
+async function jwkToKey(entry, jwk, extractable) {
+  if (!entry.kty.includes(jwk.kty))
+    throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+  const algorithm = entry.resolve?.({ kty: jwk.kty, crv: jwk.crv }) ?? entry.subtle, isPrivate = !!(jwk.d || jwk.priv), keyData = { ...jwk, ext: extractable ?? jwk.ext };
+  return keyData.kty !== "AKP" && delete keyData.alg, delete keyData.use, crypto.subtle.importKey("jwk", keyData, algorithm, keyData.ext ?? !isPrivate, jwk.key_ops ?? entry.usages[isPrivate ? 1 : 0]);
+}
+async function rawKey(key, expected, usage, extractable = false) {
+  return key instanceof Uint8Array && (key = await crypto.subtle.importKey("raw", key, expected, extractable, [usage])), checkCryptoKey(key, expected, usage), key;
+}
+var tag, jwkMatchesOp, cache2, nist, isCryptoKey, isKeyObject, isKeyLike, unusable;
+var init_key = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/key.js"() {
+    init_validate();
+    init_base64url();
+    init_errors4();
+    tag = (key) => key[Symbol.toStringTag];
+    jwkMatchesOp = (entry, key, usage) => {
+      const { alg } = entry;
+      if (key.use !== void 0) {
+        const expected = usage === "sign" || usage === "verify" ? "sig" : "enc";
+        if (key.use !== expected)
+          throw new TypeError(`Invalid key for this operation, its "use" must be "${expected}" when present`);
+      }
+      if (key.alg !== void 0 && key.alg !== alg)
+        throw new TypeError(`Invalid key for this operation, its "alg" must be "${alg}" when present`);
+      if (Array.isArray(key.key_ops)) {
+        const expectedKeyOp = usage === "encrypt" || usage === "decrypt" ? entry.ops?.[usage === "encrypt" ? 0 : 1] : usage;
+        if (expectedKeyOp && !key.key_ops.includes(expectedKeyOp))
+          throw new TypeError(`Invalid key for this operation, its "key_ops" must include "${expectedKeyOp}" when present`);
+      }
+    };
+    nist = {
+      __proto__: null,
+      prime256v1: "P-256",
+      secp384r1: "P-384",
+      secp521r1: "P-521"
+    };
+    isCryptoKey = (key) => {
+      if (key?.[Symbol.toStringTag] === "CryptoKey")
+        return true;
+      try {
+        return key instanceof CryptoKey;
+      } catch {
+        return false;
+      }
+    };
+    isKeyObject = (key) => key?.[Symbol.toStringTag] === "KeyObject";
+    isKeyLike = (key) => isCryptoKey(key) || isKeyObject(key);
+    unusable = (name, prop = "algorithm.name") => new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/key_descriptor.js
+function table(entries) {
+  const out = { __proto__: null };
+  for (const alg in entries)
+    out[alg] = { ...entries[alg], alg };
+  return out;
+}
+var init_key_descriptor = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/key_descriptor.js"() {
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jws_algorithms.js
+function hmac(bits) {
+  const subtle2 = { name: "HMAC", hash: `SHA-${bits}` };
+  return { kty: ["oct"], secret: true, subtle: subtle2, signing: subtle2, usages: sig };
+}
+function rsa(bits, saltLength) {
+  const subtle2 = { name: saltLength ? "RSA-PSS" : "RSASSA-PKCS1-v1_5", hash: `SHA-${bits}` };
+  return {
+    kty: ["RSA"],
+    subtle: subtle2,
+    signing: saltLength ? { ...subtle2, saltLength } : subtle2,
+    usages: sig,
+    minRsaBits: 2048
+  };
+}
+function ecdsa(crv, bits) {
+  return {
+    kty: ["EC"],
+    crv,
+    subtle: { name: "ECDSA", namedCurve: crv },
+    signing: { name: "ECDSA", hash: `SHA-${bits}` },
+    usages: sig
+  };
+}
+function eddsa() {
+  const subtle2 = { name: "Ed25519" };
+  return {
+    kty: ["OKP"],
+    crv: "Ed25519",
+    subtle: subtle2,
+    signing: subtle2,
+    usages: sig
+  };
+}
+function mldsa(parameterSet) {
+  const subtle2 = { name: `ML-DSA-${parameterSet}` };
+  return {
+    kty: ["AKP"],
+    subtle: subtle2,
+    signing: subtle2,
+    usages: sig
+  };
+}
+function jwsAlgorithm(alg) {
+  const entry = typeof alg == "string" ? JWS[alg] : void 0;
+  if (!entry)
+    throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);
+  return entry;
+}
+var sig, JWS;
+var init_jws_algorithms = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jws_algorithms.js"() {
+    init_errors4();
+    init_key_descriptor();
+    sig = [["verify"], ["sign"]];
+    JWS = table({
+      HS256: hmac(256),
+      HS384: hmac(384),
+      HS512: hmac(512),
+      RS256: rsa(256),
+      RS384: rsa(384),
+      RS512: rsa(512),
+      PS256: rsa(256, 32),
+      PS384: rsa(384, 48),
+      PS512: rsa(512, 64),
+      ES256: ecdsa("P-256", 256),
+      ES384: ecdsa("P-384", 384),
+      ES512: ecdsa("P-521", 512),
+      EdDSA: eddsa(),
+      Ed25519: eddsa(),
+      "ML-DSA-44": mldsa(44),
+      "ML-DSA-65": mldsa(65),
+      "ML-DSA-87": mldsa(87)
+    });
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jws_verify.js
+function prepareVerify(options) {
+  return [options && validateAlgorithms("algorithms", options.algorithms), options?.crit];
+}
+function parseProtectedHeader(encodedProtectedHeader) {
+  return encodedProtectedHeader === void 0 ? {} : parseJoseHeader(encodedProtectedHeader, JWSInvalid, "JWS Protected Header is invalid");
+}
+function encodeCompactUnencodedPayload(payload) {
+  try {
+    return encode2(payload);
+  } catch (cause) {
+    throw new JWSInvalid("JWS Compact Serialization payload must use only ASCII characters", {
+      cause
+    });
+  }
+}
+async function verifySignature(jws, shared, key, encodeUnencodedPayload, parsedProtected) {
+  const { protected: encodedProtectedHeader, header, payload: inputPayload } = jws, protectedHeader = parsedProtected ?? parseProtectedHeader(encodedProtectedHeader);
+  if (!isDisjoint(protectedHeader, header))
+    throw new JWSInvalid("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
+  const joseHeader = { ...protectedHeader, ...header }, b64 = validateB64(protectedHeader, validateCrit(JWSInvalid, JWS_RECOGNIZED, shared[1], protectedHeader, joseHeader)), { alg } = joseHeader;
+  if (typeof alg != "string" || !alg)
+    throw new JWSInvalid('JWS "alg" (Algorithm) Header Parameter missing or invalid');
+  if (shared[0] && !shared[0].has(alg))
+    throw new JOSEAlgNotAllowed('"alg" (Algorithm) Header Parameter value not allowed');
+  if (b64) {
+    if (typeof inputPayload != "string")
+      throw new JWSInvalid("JWS Payload must be a string");
+  } else if (typeof inputPayload != "string" && !(inputPayload instanceof Uint8Array))
+    throw new JWSInvalid("JWS Payload must be a string or an Uint8Array instance");
+  const signingPayload = b64 || typeof inputPayload != "string" ? inputPayload : encodeUnencodedPayload(inputPayload);
+  let resolvedKey = false;
+  typeof key == "function" && (key = await key(protectedHeader, jws), resolvedKey = true);
+  const entry = jwsAlgorithm(alg), signingInput = concat(encodedProtectedHeader !== void 0 ? encode2(encodedProtectedHeader) : new Uint8Array(), encode2("."), typeof signingPayload == "string" ? shared[2] ??= encodeAsciiMember(signingPayload, "payload", JWSInvalid) : signingPayload), signature = decodeBase64url(jws.signature, "signature", JWSInvalid), verificationKey = await prepareKey(entry, key, "verify"), cryptoKey = await rawKey(verificationKey, entry.subtle, "verify");
+  entry.minRsaBits && checkModulusLength(entry.alg, cryptoKey);
+  let verified = false;
+  try {
+    verified = await crypto.subtle.verify(entry.signing, cryptoKey, signature, signingInput);
+  } catch (cause) {
+    throw new JWSSignatureVerificationFailed(void 0, { cause });
+  }
+  if (!verified)
+    throw new JWSSignatureVerificationFailed();
+  const result = { payload: typeof signingPayload == "string" ? decodeBase64url(signingPayload, "payload", JWSInvalid) : signingPayload };
+  return encodedProtectedHeader !== void 0 && (result.protectedHeader = protectedHeader), header !== void 0 && (result.unprotectedHeader = header), resolvedKey ? [{ ...result, key: verificationKey }, b64] : [result, b64];
+}
+async function verifyCompact(jws, shared, key) {
+  if (jws instanceof Uint8Array && (jws = decoder.decode(jws)), typeof jws != "string")
+    throw new JWSInvalid("Compact JWS must be a string or Uint8Array");
+  const { 0: protectedHeader, 1: payload, 2: signature, length } = jws.split(".");
+  if (length !== 3)
+    throw new JWSInvalid("Invalid Compact JWS");
+  return verifySignature({ payload, protected: protectedHeader, signature }, shared, key, encodeCompactUnencodedPayload);
+}
+var init_jws_verify = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jws_verify.js"() {
+    init_jws_algorithms();
+    init_errors4();
+    init_buffer_utils();
+    init_validate();
+    init_key();
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jwt_claims_set.js
+function invalidDuration() {
+  throw new TypeError("Invalid time period format");
+}
+function secs(str) {
+  typeof str != "string" && invalidDuration();
+  const matched = REGEX.exec(str);
+  (!matched || matched[4] && matched[1]) && invalidDuration();
+  const value = parseFloat(matched[2]), durationSeconds = Math.round(value * multipliers[matched[3][0].toLowerCase()]);
+  return Number.isFinite(durationSeconds) || invalidDuration(), matched[1] === "-" || matched[4] === "ago" ? -durationSeconds : durationSeconds;
+}
+function validateInput2(label, input) {
+  if (!Number.isFinite(input))
+    throw new TypeError(`Invalid ${label} input`);
+  return input;
+}
+function validateNumericDate(claimsSet, claim, required2 = false) {
+  const value = claimsSet[claim];
+  if (!(value === void 0 && !required2)) {
+    if (typeof value != "number")
+      throw new JWTClaimValidationFailed(`"${claim}" claim must be a number`, claimsSet, claim, "invalid");
+    return value;
+  }
+}
+function unexpectedClaim(claimsSet, claim) {
+  throw new JWTClaimValidationFailed(`unexpected "${claim}" claim value`, claimsSet, claim, checkFailed);
+}
+function validateClaimsSet(protectedHeader, claimsSetBytes, options = {}) {
+  let claimsSet;
+  try {
+    claimsSet = JSON.parse(strictDecoder.decode(claimsSetBytes));
+  } catch (cause) {
+    throw new JWTInvalid("JWT Claims Set must be a top-level JSON object", { cause });
+  }
+  if (!isObject2(claimsSet))
+    throw new JWTInvalid("JWT Claims Set must be a top-level JSON object");
+  const { typ } = options;
+  if (typ !== void 0 && (typeof protectedHeader.typ != "string" || normalizeTyp(protectedHeader.typ) !== normalizeTyp(typ)))
+    throw new JWTClaimValidationFailed('unexpected "typ" JWT header value', claimsSet, "typ", checkFailed);
+  const { requiredClaims = [], issuer, subject, audience, maxTokenAge } = options, presenceCheck = [...requiredClaims];
+  maxTokenAge !== void 0 && presenceCheck.push("iat"), audience !== void 0 && presenceCheck.push("aud"), subject !== void 0 && presenceCheck.push("sub"), issuer !== void 0 && presenceCheck.push("iss");
+  for (const claim of new Set(presenceCheck.reverse()))
+    if (!Object.hasOwn(claimsSet, claim))
+      throw new JWTClaimValidationFailed(`missing required "${claim}" claim`, claimsSet, claim, "missing");
+  issuer !== void 0 && !(Array.isArray(issuer) ? issuer : [issuer]).includes(claimsSet.iss) && unexpectedClaim(claimsSet, "iss"), subject !== void 0 && claimsSet.sub !== subject && unexpectedClaim(claimsSet, "sub"), audience !== void 0 && !checkAudiencePresence(claimsSet.aud, typeof audience == "string" ? [audience] : audience) && unexpectedClaim(claimsSet, "aud");
+  const { clockTolerance } = options;
+  let tolerance = 0;
+  if (typeof clockTolerance == "string")
+    tolerance = secs(clockTolerance);
+  else if (clockTolerance !== void 0) {
+    if (typeof clockTolerance != "number")
+      throw new TypeError("Invalid clockTolerance option type");
+    tolerance = clockTolerance;
+  }
+  validateInput2("clockTolerance option", tolerance);
+  const { currentDate } = options, now = validateInput2("currentDate option", epoch(currentDate === void 0 ? /* @__PURE__ */ new Date() : currentDate)), iat = validateNumericDate(claimsSet, "iat", maxTokenAge !== void 0), nbf = validateNumericDate(claimsSet, "nbf");
+  if (nbf !== void 0 && nbf > now + tolerance)
+    throw new JWTClaimValidationFailed('"nbf" claim timestamp check failed', claimsSet, "nbf", checkFailed);
+  const exp = validateNumericDate(claimsSet, "exp");
+  if (exp !== void 0 && exp <= now - tolerance)
+    throw new JWTExpired('"exp" claim timestamp check failed', claimsSet, "exp", checkFailed);
+  if (maxTokenAge !== void 0) {
+    const age = now - iat, max = validateInput2("maxTokenAge option", typeof maxTokenAge == "number" ? maxTokenAge : secs(maxTokenAge));
+    if (age - tolerance > max)
+      throw new JWTExpired('"iat" claim timestamp check failed (too far in the past)', claimsSet, "iat", checkFailed);
+    if (age < -tolerance)
+      throw new JWTClaimValidationFailed('"iat" claim timestamp check failed (it should be in the past)', claimsSet, "iat", checkFailed);
+  }
+  return claimsSet;
+}
+var epoch, multipliers, REGEX, checkFailed, normalizeTyp, checkAudiencePresence;
+var init_jwt_claims_set = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/lib/jwt_claims_set.js"() {
+    init_errors4();
+    init_buffer_utils();
+    init_validate();
+    epoch = (date4) => Math.floor(date4.getTime() / 1e3);
+    multipliers = {
+      s: 1,
+      m: 60,
+      h: 3600,
+      d: 86400,
+      w: 604800,
+      y: 31557600
+    };
+    REGEX = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;
+    checkFailed = "check_failed";
+    normalizeTyp = (value) => {
+      const normalized = value.toLowerCase();
+      return value.includes("/") ? normalized : `application/${normalized}`;
+    };
+    checkAudiencePresence = (audPayload, audOption) => typeof audPayload == "string" ? audOption.includes(audPayload) : Array.isArray(audPayload) ? audOption.some((aud) => audPayload.includes(aud)) : false;
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwt/verify.js
+async function jwtVerify(jwt, key, options) {
+  const [verified, b64] = await verifyCompact(jwt, prepareVerify(options), key);
+  if (!b64)
+    throw new JWTInvalid("JWTs MUST NOT use unencoded payload");
+  const payload = validateClaimsSet(verified.protectedHeader, verified.payload, options);
+  return { ...verified, payload };
+}
+var init_verify = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwt/verify.js"() {
+    init_jws_verify();
+    init_jwt_claims_set();
+    init_errors4();
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwks/local.js
+function isUsableJWK(jwk, entry, alg, kid) {
+  const { kty, key_ops: keyOps, ext, kid: jwkKid, alg: jwkAlg, use, crv } = jwk;
+  return (ext === void 0 || typeof ext == "boolean") && (keyOps === void 0 || Array.isArray(keyOps) && keyOps.every((operation, index) => typeof operation == "string" && keyOps.indexOf(operation) === index) && keyOps.includes("verify")) && entry.kty.includes(kty) && (kid === void 0 || typeof kid == "string" && kid === jwkKid) && (jwkAlg === void 0 ? kty !== "AKP" : alg === jwkAlg) && (use === void 0 || use === "sig") && (!entry.crv || crv === entry.crv);
+}
+async function importWithAlgCache(cache3, jwk, entry) {
+  const cached2 = cache3.get(jwk) || cache3.set(jwk, {}).get(jwk), { alg } = entry;
+  if (cached2[alg] === void 0) {
+    const pending = jwkToKey(entry, jwk, true).then((key) => {
+      if (key.type !== "public")
+        throw new JWKSInvalid("JSON Web Key Set members must be public keys");
+      return cached2[alg] = key, key;
+    }).catch((error5) => {
+      throw cached2[alg] === pending && delete cached2[alg], error5;
+    });
+    cached2[alg] = pending;
+  }
+  return cached2[alg];
+}
+function createLocalJWKSet(jwks) {
+  let snapshot;
+  try {
+    snapshot = structuredClone(jwks);
+  } catch (cause) {
+    throw new JWKSInvalid("JSON Web Key Set malformed", { cause });
+  }
+  if (!isJwkSet(snapshot))
+    throw new JWKSInvalid("JSON Web Key Set malformed");
+  const metadata = snapshot.keys.map((jwk) => {
+    const normalized = snapshotJwk(jwk);
+    return Array.isArray(normalized.key_ops) && (normalized.key_ops = [...normalized.key_ops]), normalized;
+  }), cached2 = /* @__PURE__ */ new WeakMap();
+  return Object.defineProperty(async (protectedHeader, token) => {
+    const { alg, kid } = { ...protectedHeader, ...token?.header }, entry = typeof alg == "string" ? JWS[alg] : void 0;
+    if (!entry || entry.secret)
+      throw new JOSENotSupported('Unsupported "alg" value for a JSON Web Key Set');
+    const candidates = snapshot.keys.filter((_4, index) => isUsableJWK(metadata[index], entry, alg, kid)), { 0: jwk, length } = candidates;
+    if (!length)
+      throw new JWKSNoMatchingKey();
+    if (length !== 1) {
+      const error5 = new JWKSMultipleMatchingKeys();
+      throw error5[Symbol.asyncIterator] = async function* () {
+        for (const jwk2 of candidates)
+          try {
+            yield await importWithAlgCache(cached2, jwk2, entry);
+          } catch {
+          }
+      }, error5;
+    }
+    return importWithAlgCache(cached2, jwk, entry);
+  }, "jwks", {
+    value: () => structuredClone(snapshot)
+  });
+}
+var init_local = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwks/local.js"() {
+    init_key();
+    init_jws_algorithms();
+    init_errors4();
+    init_validate();
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwks/remote.js
+function isCloudflareWorkers() {
+  return typeof WebSocketPair < "u" || typeof navigator < "u" && navigator.userAgent === "Cloudflare-Workers" || typeof EdgeRuntime < "u" && EdgeRuntime === "vercel";
+}
+async function fetchJwks(url2, headers, signal, fetchImpl = fetch) {
+  const response = await fetchImpl(url2, {
+    method: "GET",
+    signal,
+    redirect: "manual",
+    headers
+  }).catch((err) => {
+    throw err.name === "TimeoutError" ? new JWKSTimeout(void 0, { cause: err }) : err;
+  });
+  if (response.status !== 200)
+    throw new JOSEError("Expected 200 OK from the JSON Web Key Set HTTP response");
+  try {
+    return await response.json();
+  } catch (cause) {
+    throw new JOSEError("Failed to parse the JSON Web Key Set HTTP response as JSON", { cause });
+  }
+}
+function isFreshFor(timestamp, duration3) {
+  return Number.isFinite(timestamp) && Date.now() < timestamp + duration3;
+}
+function validateDuration(value, fallback2, option) {
+  if (Number.isNaN(value))
+    throw new TypeError(`"${option}" option must not be NaN`);
+  return typeof value == "number" ? value : fallback2;
+}
+function createRemoteJWKSet(url2, options) {
+  if (!(url2 instanceof URL))
+    throw new TypeError("url must be an instance of URL");
+  const href = new URL(url2.href).href, opts = options ?? {}, timeoutOption = opts.timeoutDuration;
+  if (typeof timeoutOption == "number" && (!Number.isInteger(timeoutOption) || timeoutOption < 0))
+    throw new TypeError('"timeoutDuration" option must be a non-negative integer');
+  const timeoutDuration = typeof timeoutOption == "number" ? timeoutOption : 5e3, cooldownDuration = validateDuration(opts.cooldownDuration, 3e4, "cooldownDuration"), cacheMaxAge = validateDuration(opts.cacheMaxAge, 6e5, "cacheMaxAge"), headers = new Headers(opts.headers);
+  USER_AGENT && !headers.has("User-Agent") && headers.set("User-Agent", USER_AGENT), headers.has("accept") || headers.set("accept", "application/json, application/jwk-set+json");
+  const fetchImpl = opts[customFetch], cache3 = opts[jwksCache];
+  let jwksTimestamp, pendingFetch, reloadSequence = 0, appliedSequence = 0, local;
+  if (cache3 && typeof cache3 == "object") {
+    const { uat, jwks } = cache3;
+    isFreshFor(uat, cacheMaxAge) && isJwkSet(jwks) && (jwksTimestamp = uat, local = createLocalJWKSet(jwks));
+  }
+  const reload = async () => {
+    if (pendingFetch && isCloudflareWorkers() && (pendingFetch = void 0), !pendingFetch) {
+      const sequence = ++reloadSequence, current = pendingFetch = fetchJwks(href, headers, AbortSignal.timeout(timeoutDuration), fetchImpl).then((json2) => {
+        const next = createLocalJWKSet(json2);
+        if (sequence <= appliedSequence)
+          return;
+        local = next;
+        const updatedAt = Date.now();
+        cache3 && (cache3.uat = updatedAt, cache3.jwks = json2), jwksTimestamp = updatedAt, appliedSequence = sequence;
+      }).finally(() => {
+        pendingFetch === current && (pendingFetch = void 0);
+      });
+    }
+    await pendingFetch;
+  };
+  return Object.defineProperties(async (protectedHeader, token) => {
+    (!local || !isFreshFor(jwksTimestamp, cacheMaxAge)) && await reload();
+    try {
+      return await local(protectedHeader, token);
+    } catch (err) {
+      if (err instanceof JWKSNoMatchingKey && !isFreshFor(jwksTimestamp, cooldownDuration))
+        return await reload(), local(protectedHeader, token);
+      throw err;
+    }
+  }, {
+    coolingDown: {
+      get: () => isFreshFor(jwksTimestamp, cooldownDuration),
+      enumerable: true
+    },
+    fresh: {
+      get: () => isFreshFor(jwksTimestamp, cacheMaxAge),
+      enumerable: true
+    },
+    reload: {
+      value: reload,
+      enumerable: true
+    },
+    reloading: {
+      get: () => !!pendingFetch,
+      enumerable: true
+    },
+    jwks: {
+      value: () => local?.jwks(),
+      enumerable: true
+    }
+  });
+}
+var USER_AGENT, customFetch, jwksCache;
+var init_remote = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/jwks/remote.js"() {
+    init_errors4();
+    init_local();
+    init_validate();
+    (typeof navigator > "u" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 ")) && (USER_AGENT = "jose/v6.2.13");
+    customFetch = /* @__PURE__ */ Symbol();
+    jwksCache = /* @__PURE__ */ Symbol();
+  }
+});
+
+// node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/index.js
+var init_webapi = __esm({
+  "node_modules/.pnpm/jose@6.2.13/node_modules/jose/dist/webapi/index.js"() {
+    init_verify();
+    init_remote();
+  }
+});
+
+// packages/oidc/src/schema/external-identity-provider.schema.ts
+function isSecureUrl(value) {
+  const url2 = new URL(value);
+  return url2.protocol === "https:" || ["localhost", "127.0.0.1", "[::1]"].includes(url2.hostname);
+}
+var RESERVED_AUTHORIZATION_PARAMS, DEFAULT_SCOPES, secureUrlSchema, ExternalIdentityProviderSchema;
+var init_external_identity_provider_schema = __esm({
+  "packages/oidc/src/schema/external-identity-provider.schema.ts"() {
+    "use strict";
+    init_zod();
+    RESERVED_AUTHORIZATION_PARAMS = [
+      "client_id",
+      "response_type",
+      "redirect_uri",
+      "scope",
+      "state",
+      "nonce",
+      "code_challenge",
+      "code_challenge_method"
+    ];
+    DEFAULT_SCOPES = ["openid", "email", "profile"];
+    secureUrlSchema = url().refine(isSecureUrl, { error: "Must be an https URL (http is only allowed for localhost)" });
+    ExternalIdentityProviderSchema = looseObject({
+      key: string2().min(1).meta({ description: "Stable identifier the storefront passes back to startExternalLogin." }),
+      displayName: string2().min(1),
+      brand: string2().optional().meta({ description: "Neutral brand slug (google, apple, ...) so a storefront can choose its own icon." }),
+      issuer: secureUrlSchema.meta({ description: "The issuer URL. Used for discovery and as the expected iss claim." }),
+      clientId: string2().min(1),
+      clientSecret: string2().optional().meta({ description: "Without a secret the client is public and relies on PKCE alone." }),
+      scopes: array(string2()).optional().meta({ description: `Defaults to ${DEFAULT_SCOPES.join(" ")}.` }),
+      authorizationParams: record(string2(), string2()).refine((params) => Object.keys(params).every((key) => !RESERVED_AUTHORIZATION_PARAMS.includes(key)), {
+        error: `authorizationParams cannot set ${RESERVED_AUTHORIZATION_PARAMS.join(", ")}`
+      }).optional().meta({ description: 'Fixed extra authorize parameters, e.g. { prompt: "login" } or { connection: "apple" } for Auth0.' }),
+      requireVerifiedEmail: boolean2().optional().meta({ description: "Require email_verified to be true. Defaults to true; some providers (Azure B2C) never send the claim." }),
+      authorizationEndpoint: secureUrlSchema.optional(),
+      tokenEndpoint: secureUrlSchema.optional(),
+      jwksUri: secureUrlSchema.optional()
+    });
+  }
+});
+
+// packages/oidc/src/client/relying-party.ts
+function buildAuthorizationUrl(provider, metadata, request) {
+  const url2 = new URL(metadata.authorizationEndpoint);
+  url2.searchParams.set("response_type", "code");
+  url2.searchParams.set("client_id", provider.clientId);
+  url2.searchParams.set("redirect_uri", request.callbackUrl);
+  url2.searchParams.set("scope", (provider.scopes ?? DEFAULT_SCOPES).join(" "));
+  url2.searchParams.set("state", request.state);
+  url2.searchParams.set("nonce", request.nonce);
+  url2.searchParams.set("code_challenge", request.codeChallenge);
+  url2.searchParams.set("code_challenge_method", "S256");
+  for (const [key, value] of Object.entries(provider.authorizationParams ?? {})) {
+    url2.searchParams.set(key, value);
+  }
+  return url2.toString();
+}
+async function exchangeCode(provider, metadata, request) {
+  const body = new URLSearchParams({
+    grant_type: "authorization_code",
+    code: request.code,
+    redirect_uri: request.callbackUrl,
+    client_id: provider.clientId,
+    code_verifier: request.codeVerifier
+  });
+  if (provider.clientSecret) {
+    body.set("client_secret", provider.clientSecret);
+  }
+  const response = await fetch(metadata.tokenEndpoint, {
+    method: "POST",
+    headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json" },
+    body
+  });
+  if (!response.ok) {
+    throw new Error(`The identity provider refused the authorization code: HTTP ${response.status}`);
+  }
+  const tokens = TokenResponseSchema.parse(await response.json());
+  return {
+    idToken: tokens.id_token,
+    ...tokens.access_token ? { accessToken: tokens.access_token } : {},
+    ...tokens.refresh_token ? { refreshToken: tokens.refresh_token } : {},
+    ...tokens.expires_in !== void 0 ? { expiresIn: tokens.expires_in } : {}
+  };
+}
+async function refreshTokens(provider, metadata, refreshToken) {
+  const body = new URLSearchParams({
+    grant_type: "refresh_token",
+    refresh_token: refreshToken,
+    client_id: provider.clientId
+  });
+  if (provider.clientSecret) {
+    body.set("client_secret", provider.clientSecret);
+  }
+  const response = await fetch(metadata.tokenEndpoint, {
+    method: "POST",
+    headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json" },
+    body
+  });
+  if (!response.ok) {
+    throw new Error(`The identity provider refused the refresh token: HTTP ${response.status}`);
+  }
+  const tokens = RefreshResponseSchema.parse(await response.json());
+  return {
+    accessToken: tokens.access_token,
+    ...tokens.refresh_token ? { refreshToken: tokens.refresh_token } : {},
+    ...tokens.id_token ? { idToken: tokens.id_token } : {},
+    ...tokens.expires_in !== void 0 ? { expiresIn: tokens.expires_in } : {}
+  };
+}
+function keysFor(jwksUri) {
+  let keys = jwksByUri.get(jwksUri);
+  if (!keys) {
+    keys = createRemoteJWKSet(new URL(jwksUri));
+    jwksByUri.set(jwksUri, keys);
+  }
+  return keys;
+}
+async function verifyIdToken(provider, metadata, idToken, expectedNonce) {
+  const { payload } = await jwtVerify(idToken, keysFor(metadata.jwksUri), {
+    issuer: metadata.issuer,
+    audience: provider.clientId,
+    algorithms: ALLOWED_ALGORITHMS,
+    clockTolerance: CLOCK_TOLERANCE_SECONDS
+  });
+  if (payload["nonce"] !== expectedNonce) {
+    throw new Error("The ID token nonce does not match this login");
+  }
+  return payload;
+}
+var ALLOWED_ALGORITHMS, CLOCK_TOLERANCE_SECONDS, RefreshResponseSchema, TokenResponseSchema, jwksByUri;
+var init_relying_party = __esm({
+  "packages/oidc/src/client/relying-party.ts"() {
+    "use strict";
+    init_zod();
+    init_webapi();
+    init_external_identity_provider_schema();
+    ALLOWED_ALGORITHMS = ["RS256", "RS384", "RS512", "PS256", "ES256", "ES384"];
+    CLOCK_TOLERANCE_SECONDS = 30;
+    RefreshResponseSchema = looseObject({
+      access_token: string2(),
+      refresh_token: string2().optional(),
+      id_token: string2().optional(),
+      expires_in: number2().optional()
+    });
+    TokenResponseSchema = looseObject({
+      id_token: string2(),
+      access_token: string2().optional(),
+      refresh_token: string2().optional(),
+      expires_in: number2().optional()
+    });
+    jwksByUri = /* @__PURE__ */ new Map();
+  }
+});
+
+// packages/oidc/src/capabilities/oidc-identity.capability.ts
+var OidcIdentityCapability;
+var init_oidc_identity_capability = __esm({
+  "packages/oidc/src/capabilities/oidc-identity.capability.ts"() {
+    "use strict";
+    init_src();
+    init_pkce();
+    init_discovery();
+    init_relying_party();
+    OidcIdentityCapability = class extends IdentityCapability {
+      externalProviders;
+      constructor(cache3, context2, externalProviders) {
+        super(cache3, context2);
+        this.externalProviders = externalProviders ?? [];
+      }
+      async listProviders() {
+        return success([
+          PASSWORD_IDENTITY_PROVIDER,
+          ...this.externalProviders.map((provider) => ({
+            identifier: { key: provider.key },
+            displayName: provider.displayName,
+            flow: "redirect",
+            ...provider.brand ? { brand: provider.brand } : {}
+          }))
+        ]);
+      }
+      async startExternalLogin(payload) {
+        const provider = this.externalProviders.find((candidate) => candidate.key === payload.provider.key);
+        if (!provider) {
+          return error({ type: "InvalidInput", error: `Unknown identity provider ${payload.provider.key}` });
+        }
+        const metadata = await resolveMetadata(provider);
+        const state = randomToken();
+        const nonce = randomToken();
+        const codeVerifier = randomToken(48);
+        const location = buildAuthorizationUrl(provider, metadata, {
+          callbackUrl: payload.callbackUrl,
+          state,
+          nonce,
+          codeChallenge: await codeChallenge(codeVerifier)
+        });
+        this.setPendingExternalLogin(provider.key, state, { nonce, codeVerifier });
+        return success({ location });
+      }
+      async completeExternalLogin(payload) {
+        const provider = this.externalProviders.find((candidate) => candidate.key === payload.provider.key);
+        if (!provider) {
+          return error({ type: "InvalidInput", error: `Unknown identity provider ${payload.provider.key}` });
+        }
+        const params = payload.callbackParameters;
+        const pending = this.takePendingExternalLogin(provider.key, params["state"]);
+        if (!pending) {
+          return error({ type: "InvalidInput", error: "The login was not started in this session, or has expired" });
+        }
+        if (params["error"]) {
+          return error({ type: "InvalidInput", error: `The identity provider refused the login: ${params["error"]}` });
+        }
+        const code = params["code"];
+        const { nonce, codeVerifier } = pending.data;
+        if (!code || !nonce || !codeVerifier) {
+          return error({ type: "InvalidInput", error: "The login response has no authorization code" });
+        }
+        const metadata = await resolveMetadata(provider);
+        const tokens = await exchangeCode(provider, metadata, { code, callbackUrl: payload.callbackUrl, codeVerifier });
+        const claims = await verifyIdToken(provider, metadata, tokens.idToken, nonce);
+        if (provider.requireVerifiedEmail !== false && claims["email_verified"] !== true) {
+          return error({ type: "InvalidInput", error: "The identity provider did not confirm a verified email address" });
+        }
+        const result = await this.exchangeExternalIdentity({ provider, claims, tokens });
+        if (result.success) {
+          this.updateIdentityContext(result.value);
+        }
+        return result;
+      }
+    };
+    __decorateClass([
+      Reactionary({
+        inputSchema: IdentityQueryProvidersSchema,
+        outputSchema: IdentityProviderSchema.array()
+      })
+    ], OidcIdentityCapability.prototype, "listProviders", 1);
+    __decorateClass([
+      Reactionary({
+        inputSchema: IdentityMutationStartExternalLoginSchema,
+        outputSchema: ExternalLoginRedirectSchema
+      })
+    ], OidcIdentityCapability.prototype, "startExternalLogin", 1);
+    __decorateClass([
+      Reactionary({
+        inputSchema: IdentityMutationCompleteExternalLoginSchema,
+        outputSchema: IdentitySchema
+      })
+    ], OidcIdentityCapability.prototype, "completeExternalLogin", 1);
+  }
+});
+
+// packages/oidc/src/index.ts
+var init_src3 = __esm({
+  "packages/oidc/src/index.ts"() {
+    "use strict";
+    init_oidc_identity_capability();
+    init_discovery();
+    init_pkce();
+    init_relying_party();
+    init_external_identity_provider_schema();
+  }
+});
+
 // packages/commercetools/src/schema/session.schema.ts
 var CommercetoolsSessionSchema;
 var init_session_schema2 = __esm({
@@ -113859,7 +115027,10 @@ var init_session_schema2 = __esm({
     CommercetoolsSessionSchema = looseObject({
       token: string2().default(""),
       refreshToken: string2().optional(),
-      expirationTime: number2().default(0)
+      expirationTime: number2().default(0),
+      tokenSource: _enum(["commercetools", "external"]).optional().meta({ description: "external when token is an identity provider access token from an external login." }),
+      externalProvider: string2().optional().meta({ description: "Key of the external identity provider that issued token." }),
+      customerId: string2().optional().meta({ description: "The commercetools customer of an external login." })
     });
   }
 });
@@ -113894,14 +115065,14 @@ var init_token_cache = __esm({
           expirationTime: session.expirationTime
         };
       }
-      async set(cache, tokenCacheOptions) {
+      async set(cache3, tokenCacheOptions) {
         const session = CommercetoolsSessionSchema.parse(
           this.context.session[this.sessionProviderKey] || {}
         );
         this.context.session[this.sessionProviderKey] = session;
-        session.refreshToken = cache.refreshToken;
-        session.token = cache.token;
-        session.expirationTime = cache.expirationTime;
+        session.refreshToken = cache3.refreshToken;
+        session.token = cache3.token;
+        session.expirationTime = cache3.expirationTime;
       }
     };
   }
@@ -113925,6 +115096,13 @@ var init_oauth_schema = __esm({
 });
 
 // packages/commercetools/src/core/client.ts
+function externalExpiration(expiresIn) {
+  return Date.now() + (expiresIn ?? 300) * 1e3 - 60 * 1e3;
+}
+function isDuplicateEmail(err) {
+  const errors = err?.body?.errors;
+  return Boolean(errors?.some((e2) => e2.code === "DuplicateField" && e2.field === "email"));
+}
 var import_ts_client, import_platform_sdk, import_crypto2, crypto2, import_debug, debug, PROVIDER_SESSION_KEY, CommercetoolsAPI;
 var init_client3 = __esm({
   "packages/commercetools/src/core/client.ts"() {
@@ -113935,6 +115113,7 @@ var init_client3 = __esm({
     init_src();
     crypto2 = __toESM(require("crypto"), 1);
     import_debug = __toESM(require_src(), 1);
+    init_src3();
     init_token_cache();
     init_session_schema2();
     init_oauth_schema();
@@ -114061,6 +115240,12 @@ var init_client3 = __esm({
         return (0, import_platform_sdk.createApiBuilderFromCtpClient)(builder.build());
       }
       async createClient() {
+        const external = this.getSessionData();
+        if (external.tokenSource === "external" && external.externalProvider) {
+          return (0, import_platform_sdk.createApiBuilderFromCtpClient)(
+            this.createBaseClientBuilder().withMiddleware(this.externalAuthMiddleware(external.externalProvider)).build()
+          );
+        }
         let session = await this.tokenCache.get();
         const isNewSession = !session || !session.refreshToken;
         if (isNewSession) {
@@ -114103,6 +115288,9 @@ var init_client3 = __esm({
         return login;
       }
       async login(username, password) {
+        if (this.getSessionData().tokenSource === "external") {
+          this.clearExternalSession();
+        }
         const loginBuilder = this.createBaseClientBuilder().withPasswordFlow({
           host: this.config.authUrl,
           projectKey: this.config.projectKey,
@@ -114135,6 +115323,7 @@ var init_client3 = __esm({
           refreshToken: "",
           expirationTime: 0
         });
+        this.clearExternalSession();
         const identity = {
           type: "Anonymous"
         };
@@ -114148,6 +115337,10 @@ var init_client3 = __esm({
           };
           return identity;
         }
+        const sessionData = this.getSessionData();
+        if (sessionData.tokenSource === "external") {
+          return this.introspectExternalSession(sessionData);
+        }
         let body = await this.introspectToken(session.token);
         if (body && !body.active && session.refreshToken) {
           const refreshedToken = await this.refreshAccessToken(session.refreshToken);
@@ -114237,6 +115430,151 @@ var init_client3 = __esm({
         });
         return result.access_token;
       }
+      /**
+       * Signs in a verified external identity. The customer is found by externalId (<iss>|<sub>); a customer with the
+       * same email but another externalId is reported as a conflict rather than linked. The shopper's guest cart goes
+       * with them. The identity provider's access token becomes the session token, which commercetools accepts
+       * through the project's externalOAuth introspection endpoint.
+       */
+      async loginWithExternalIdentity(input) {
+        const admin = (await this.getAdminClient()).withProjectKey({
+          projectKey: this.config.projectKey
+        });
+        const guestId = await this.currentGuestId();
+        const existing = (await admin.customers().get({ queryArgs: { where: "externalId = :e", "var.e": input.externalId, limit: 1 } }).execute()).body.results[0];
+        let customerId = existing?.id;
+        if (customerId) {
+          if (guestId) {
+            await this.assignGuestCarts(guestId, customerId);
+          }
+        } else {
+          const sameEmail = (await admin.customers().get({
+            queryArgs: {
+              where: "email in (:a, :b)",
+              "var.a": input.email,
+              "var.b": input.email.toLowerCase(),
+              limit: 1
+            }
+          }).execute()).body.results[0];
+          if (sameEmail) {
+            return { type: "Conflict", message: "A customer with this email address already exists" };
+          }
+          try {
+            const created = await admin.customers().post({
+              body: {
+                email: input.email,
+                externalId: input.externalId,
+                authenticationMode: "ExternalAuth",
+                isEmailVerified: true,
+                ...input.firstName ? { firstName: input.firstName } : {},
+                ...input.lastName ? { lastName: input.lastName } : {},
+                // Assigns the guest's carts to the new customer
+                ...guestId ? { anonymousId: guestId } : {}
+              }
+            }).execute();
+            customerId = created.body.customer.id;
+          } catch (err) {
+            if (isDuplicateEmail(err)) {
+              return { type: "Conflict", message: "A customer with this email address already exists" };
+            }
+            throw err;
+          }
+        }
+        await this.tokenCache.set({
+          token: input.tokens.accessToken,
+          refreshToken: input.tokens.refreshToken,
+          expirationTime: externalExpiration(input.tokens.expiresIn)
+        });
+        this.setSessionData({
+          tokenSource: "external",
+          externalProvider: input.provider.key,
+          customerId
+        });
+        this.client = void 0;
+        return { type: "Registered", customerId };
+      }
+      /** The anonymous id of the current guest session, if there is one. */
+      async currentGuestId() {
+        try {
+          const identity = await this.introspect();
+          return identity.type === "Guest" ? identity.id.userId : void 0;
+        } catch (err) {
+          debug("Could not read the guest session before external login: %o", err);
+          return void 0;
+        }
+      }
+      /** Hands a guest's active carts to a customer that already existed. */
+      async assignGuestCarts(anonymousId, customerId) {
+        const admin = (await this.getAdminClient()).withProjectKey({
+          projectKey: this.config.projectKey
+        });
+        const carts = await admin.carts().get({
+          queryArgs: {
+            where: 'anonymousId = :a and cartState = "Active"',
+            "var.a": anonymousId
+          }
+        }).execute();
+        for (const cart of carts.body.results) {
+          await admin.carts().withId({ ID: cart.id }).post({
+            body: { version: cart.version, actions: [{ action: "setCustomerId", customerId }] }
+          }).execute();
+        }
+      }
+      /** Adds the external session's access token to every request, refreshing it through the identity provider first when it has expired. */
+      externalAuthMiddleware(providerKey) {
+        return (next) => async (request) => {
+          const token = await this.currentExternalAccessToken(providerKey);
+          return next({
+            ...request,
+            headers: { ...request.headers, Authorization: `Bearer ${token}` }
+          });
+        };
+      }
+      async currentExternalAccessToken(providerKey) {
+        const session = await this.tokenCache.get();
+        if (session?.token && session.expirationTime > Date.now()) {
+          return session.token;
+        }
+        const provider = this.config.externalIdentityProviders?.find((candidate) => candidate.key === providerKey);
+        if (!provider || !session?.refreshToken) {
+          this.clearExternalSession();
+          throw new Error("The external login has expired, sign in again");
+        }
+        try {
+          const refreshed = await refreshTokens(provider, await resolveMetadata(provider), session.refreshToken);
+          await this.tokenCache.set({
+            token: refreshed.accessToken,
+            refreshToken: refreshed.refreshToken ?? session.refreshToken,
+            expirationTime: externalExpiration(refreshed.expiresIn)
+          });
+          return refreshed.accessToken;
+        } catch (err) {
+          debug("Refreshing the external login failed: %o", err);
+          this.clearExternalSession();
+          throw new Error("The external login has expired, sign in again");
+        }
+      }
+      async introspectExternalSession(session) {
+        if (!session.customerId || !session.externalProvider) {
+          return { type: "Anonymous" };
+        }
+        try {
+          await this.currentExternalAccessToken(session.externalProvider);
+        } catch {
+          return { type: "Anonymous" };
+        }
+        return { type: "Registered", id: { userId: session.customerId } };
+      }
+      /** Forgets that the session belongs to an external login, and the client built for it. */
+      clearExternalSession() {
+        const data = this.context.session[PROVIDER_SESSION_KEY];
+        if (data) {
+          delete data.tokenSource;
+          delete data.externalProvider;
+          delete data.customerId;
+        }
+        this.client = void 0;
+      }
       async becomeGuest() {
         const credentials = Buffer.from(
           `${this.config.clientId}:${this.config.clientSecret}`
@@ -114364,6 +115702,7 @@ var init_configuration_schema2 = __esm({
   "packages/commercetools/src/schema/configuration.schema.ts"() {
     "use strict";
     init_zod();
+    init_src3();
     init_src();
     CommercetoolsConfigurationSchema = looseObject({
       projectKey: string2(),
@@ -114378,6 +115717,7 @@ var init_configuration_schema2 = __esm({
       facetFieldsForSearch: array(string2()).default(() => []),
       listPriceChannelKey: string2().optional(),
       customerPriceChannelKey: string2().optional(),
+      externalIdentityProviders: array(ExternalIdentityProviderSchema).optional().meta({ description: "OpenID Connect identity providers shoppers can sign in with. commercetools has no social login of its own: reactionary runs the OpenID Connect flow, then creates or finds the customer (externalId = <iss>|<sub>) with the admin client, and commercetools accepts the identity provider's access token on the /me endpoints through the project's externalOAuth introspection endpoint. The access token must be one that endpoint can verify (a JWT; for Auth0 set authorizationParams.audience). The admin API client needs manage_customers and manage_orders." }),
       bopis: looseObject({
         shippingMethodKeys: array(string2()).default(() => []).meta({ description: 'The keys of the commercetools shipping methods that represent in-store pickup (BOPIS). Shipping methods with these keys are tagged with fulfillmentType "pickup"; all others are tagged "delivery".' })
       }).optional().meta({ description: "Optional buy-online-pickup-in-store (BOPIS) configuration." })
@@ -115977,8 +117317,8 @@ var init_cart_capability2 = __esm({
         "discountOnTotalPrice.includedDiscounts[*].discount"
       ];
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -116393,8 +117733,8 @@ var init_category_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -116657,8 +117997,8 @@ var init_checkout_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -117064,12 +118404,13 @@ var init_identity_capability2 = __esm({
   "packages/commercetools/src/capabilities/identity.capability.ts"() {
     "use strict";
     init_src();
-    CommercetoolsIdentityCapability = class extends IdentityCapability {
+    init_src3();
+    CommercetoolsIdentityCapability = class extends OidcIdentityCapability {
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2, config3.externalIdentityProviders);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -117112,14 +118453,45 @@ var init_identity_capability2 = __esm({
         this.updateIdentityContext(identity);
         return success(identity);
       }
-      async listProviders(_payload) {
-        return success([PASSWORD_IDENTITY_PROVIDER]);
-      }
-      async startExternalLogin(_payload) {
-        return error({ type: "InvalidInput", error: "External login is not supported by commercetools" });
-      }
-      async completeExternalLogin(_payload) {
-        return error({ type: "InvalidInput", error: "External login is not supported by commercetools" });
+      /**
+       * The shared OpenID Connect client has verified the identity. commercetools gets the identity provider's access
+       * token as the session token, so that is what must be present; the customer is found or created by externalId.
+       */
+      async exchangeExternalIdentity(input) {
+        const { claims, tokens, provider } = input;
+        if (!tokens.accessToken) {
+          return error({
+            type: "InvalidInput",
+            error: "The identity provider returned no access token, which commercetools needs"
+          });
+        }
+        const text2 = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
+        const email3 = text2(claims["email"]);
+        const issuer = text2(claims.iss);
+        const subject = text2(claims.sub);
+        if (!email3 || !issuer || !subject) {
+          return error({
+            type: "InvalidInput",
+            error: "The identity provider did not return an email address, issuer and subject"
+          });
+        }
+        const outcome = await this.commercetools.loginWithExternalIdentity({
+          provider,
+          externalId: `${issuer}|${subject}`,
+          email: email3,
+          ...text2(claims["given_name"]) ? { firstName: text2(claims["given_name"]) } : {},
+          ...text2(claims["family_name"]) ? { lastName: text2(claims["family_name"]) } : {},
+          tokens: { ...tokens, accessToken: tokens.accessToken }
+        });
+        if (outcome.type === "Conflict") {
+          return error({ type: "IdentityConflict", message: outcome.message });
+        }
+        return success(
+          this.factory.parseIdentity(this.context, {
+            type: "Registered",
+            id: { userId: outcome.customerId }
+          })
+        );
       }
     };
     __decorateClass([
@@ -117145,24 +118517,6 @@ var init_identity_capability2 = __esm({
         outputSchema: IdentitySchema
       })
     ], CommercetoolsIdentityCapability.prototype, "register", 1);
-    __decorateClass([
-      Reactionary({
-        inputSchema: IdentityQueryProvidersSchema,
-        outputSchema: IdentityProviderSchema.array()
-      })
-    ], CommercetoolsIdentityCapability.prototype, "listProviders", 1);
-    __decorateClass([
-      Reactionary({
-        inputSchema: IdentityMutationStartExternalLoginSchema,
-        outputSchema: ExternalLoginRedirectSchema
-      })
-    ], CommercetoolsIdentityCapability.prototype, "startExternalLogin", 1);
-    __decorateClass([
-      Reactionary({
-        inputSchema: IdentityMutationCompleteExternalLoginSchema,
-        outputSchema: IdentitySchema
-      })
-    ], CommercetoolsIdentityCapability.prototype, "completeExternalLogin", 1);
   }
 });
 
@@ -117176,8 +118530,8 @@ var init_inventory_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -117233,8 +118587,8 @@ var init_order_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -117277,8 +118631,8 @@ var init_order_search_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -117369,8 +118723,8 @@ var init_price_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -117470,8 +118824,8 @@ var init_product_associations_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -117579,8 +118933,8 @@ var init_product_list_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -118022,8 +119376,8 @@ var init_product_capability2 = __esm({
     init_src();
     init_locale_utils();
     CommercetoolsProductCapability = class extends ProductCapability {
-      constructor(cache, context2, config3, commercetools, factory) {
-        super(cache, context2);
+      constructor(cache3, context2, config3, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -118117,8 +119471,8 @@ var init_product_reviews_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -118304,8 +119658,8 @@ var init_product_search_capability3 = __esm({
        * We assume all commercetools data is indexed on the language level, not the country subdivision
        */
       languageCode = getLanguageCodeFromLocale(this.context.languageContext.locale);
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -118586,8 +119940,8 @@ var init_profile_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -118918,8 +120272,8 @@ var init_store_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -119016,8 +120370,8 @@ var init_company_registration_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -119139,8 +120493,8 @@ var init_company_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -119573,8 +120927,8 @@ var init_employee_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -119965,8 +121319,8 @@ var init_employee_invitation_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -120342,8 +121696,8 @@ var init_personalization_profile_capability2 = __esm({
       config;
       commercetools;
       factory;
-      constructor(config3, cache, context2, commercetools, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, commercetools, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.commercetools = commercetools;
         this.factory = factory;
@@ -120767,13 +122121,13 @@ var init_initialize_types2 = __esm({
 
 // packages/commercetools/src/core/initialize.ts
 function withCommercetoolsCapabilities(configuration, capabilities) {
-  return (cache, context2) => {
+  return (cache3, context2) => {
     const client = {};
     const config3 = CommercetoolsConfigurationSchema.parse(configuration);
     const caps = CommercetoolsCapabilitiesSchema.parse(capabilities);
     const commercetoolsApi = new CommercetoolsAPI(config3, context2);
     const buildCapabilityArgs = (factory) => ({
-      cache,
+      cache: cache3,
       context: context2,
       config: config3,
       commercetoolsApi,
@@ -120808,7 +122162,7 @@ var init_initialize2 = __esm({
 });
 
 // packages/commercetools/src/index.ts
-var init_src3 = __esm({
+var init_src4 = __esm({
   "packages/commercetools/src/index.ts"() {
     "use strict";
     init_client3();
@@ -122921,8 +124275,8 @@ var init_product_capability3 = __esm({
     FakeProductCapability = class extends ProductCapability {
       config;
       factory;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
       }
@@ -123053,8 +124407,8 @@ var init_product_search_capability4 = __esm({
     FakeProductSearchCapability = class extends ProductSearchCapability {
       config;
       factory;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
       }
@@ -123253,8 +124607,8 @@ var init_category_capability3 = __esm({
         this.allCategories.set(identifier.key, category);
         return category;
       }
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
         this.categoryGenerator = new Qe2({
@@ -123388,8 +124742,8 @@ var init_cart_capability3 = __esm({
       factory;
       carts = /* @__PURE__ */ new Map();
       generator;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.generator = new Qe2({
           locale: [ys, Oi],
           seed: config3.seeds.product
@@ -123741,8 +125095,8 @@ var init_checkout_capability3 = __esm({
       config;
       generator;
       factory;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.generator = new Qe2({
           locale: [ys, Oi],
@@ -123952,8 +125306,8 @@ var init_feature_flag_capability2 = __esm({
       config;
       factory;
       flagDefinitions;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
         this.flagDefinitions = new Map(config3.featureFlags?.flags.map((f3) => [f3.key, f3]) ?? []);
@@ -124005,8 +125359,8 @@ var init_identity_capability3 = __esm({
       config;
       factory;
       currentIdentity = null;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
       }
@@ -124145,8 +125499,8 @@ var init_inventory_capability3 = __esm({
     FakeInventoryCapability = class extends InventoryCapability {
       config;
       factory;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
       }
@@ -124217,8 +125571,8 @@ var init_personalization_profile_capability3 = __esm({
     FakePersonalizationProfileCapability = class extends PersonalizationProfileCapability {
       config;
       factory;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
       }
@@ -124267,8 +125621,8 @@ var init_order_search_capability3 = __esm({
       config;
       generator;
       factory;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.generator = new Qe2({
           locale: [ys, Oi],
@@ -124329,8 +125683,8 @@ var init_order_capability3 = __esm({
       config;
       generator;
       factory;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.generator = new Qe2({
           locale: [ys, Oi],
@@ -124440,8 +125794,8 @@ var init_price_capability3 = __esm({
         NOK: [0, 90],
         SEK: [0, 90]
       };
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.faker = new Qe2({
           locale: [ys, Oi]
@@ -124543,8 +125897,8 @@ var init_product_associations_capability3 = __esm({
       config;
       factory;
       faker;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
         this.faker = new Qe2({ locale: [ys] });
@@ -124655,8 +126009,8 @@ var init_product_reviews_capability3 = __esm({
       config;
       factory;
       faker;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
         this.faker = new Qe2({ locale: [ys, Oi] });
@@ -124794,8 +126148,8 @@ var init_profile_capability3 = __esm({
       config;
       factory;
       generator;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.generator = new Qe2({
           locale: [ys, Oi],
           seed: config3.seeds.product
@@ -124906,8 +126260,8 @@ var init_store_capability3 = __esm({
     FakeStoreCapability = class extends StoreCapability {
       config;
       factory;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
       }
@@ -125378,11 +126732,11 @@ var init_initialize_types3 = __esm({
 
 // packages/fake/src/core/initialize.ts
 function withFakeCapabilities(configuration, capabilities) {
-  return (cache, context2) => {
+  return (cache3, context2) => {
     const client = {};
     const caps = FakeCapabilitiesSchema.parse(capabilities);
     const buildCapabilityArgs = (factory) => ({
-      cache,
+      cache: cache3,
       context: context2,
       config: configuration,
       factory
@@ -125640,7 +126994,7 @@ var init_configuration_schema3 = __esm({
 });
 
 // packages/fake/src/index.ts
-var init_src4 = __esm({
+var init_src5 = __esm({
   "packages/fake/src/index.ts"() {
     "use strict";
     init_initialize3();
@@ -125658,6 +127012,7 @@ var init_configuration_schema4 = __esm({
   "packages/magento/src/schema/configuration.schema.ts"() {
     "use strict";
     init_zod();
+    init_src3();
     MagentoConfigurationSchema = looseObject({
       adminApiKey: string2().meta({ description: "The API key for Magento admin operations. Needed for the few tasks that require admin access." }),
       baseUrl: string2().meta({ description: "The base URL for the Magento installation." }),
@@ -125670,6 +127025,7 @@ var init_configuration_schema4 = __esm({
       reviewRatingCode: string2().optional().meta({ description: 'The name of the Magento review rating (as listed by `productReviewRatingsMetadata`) that carries the overall star rating. Defaults to "Rating"; the first available rating is used as a fallback.' }),
       storeCode: string2().default(""),
       checkoutAgreementIds: array(string2()).optional().meta({ description: "Ids of the Magento terms and conditions (Magento_CheckoutAgreements) the shopper accepts when placing an order. Required by stores with \"Enable Terms and Conditions\" on, which otherwise reject order placement. Sent as the payment method's `extension_attributes.agreement_ids`. The storefront must collect the shopper's consent before finalizing checkout." }),
+      externalIdentityProviders: array(ExternalIdentityProviderSchema).optional().meta({ description: "OpenID Connect identity providers shoppers can sign in with. Stock Magento has no social login, so reactionary runs the OpenID Connect flow and then creates or finds the customer by verified email and issues a customer token (Adobe's documented pattern). The admin API key needs the Magento_Customer::retrieve_tokens permission and the Storefront Compatibility Package (4.7.6 or newer) must be installed." }),
       authStoreCode: string2().default("default").meta({ description: "The store/website scope used for customer authentication and account operations (token, customers/me). Customers typically live on the default website, which may differ from the catalog storeCode." })
     });
   }
@@ -125745,8 +127101,8 @@ var init_cart_capability4 = __esm({
     init_magento_schema();
     debug5 = (0, import_debug5.default)("reactionary:magento:cart");
     MagentoCartCapability = class extends CartCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -126014,8 +127370,8 @@ var init_category_capability4 = __esm({
     import_debug6 = __toESM(require_src(), 1);
     debug6 = (0, import_debug6.default)("reactionary:magento:category");
     MagentoCategoryCapability = class extends CategoryCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -126243,16 +127599,27 @@ var init_category_capability4 = __esm({
 });
 
 // packages/magento/src/capabilities/identity.capability.ts
+function namesFromClaims(claims) {
+  const text2 = (value) => typeof value === "string" && value.trim() ? value.trim() : void 0;
+  const given = text2(claims["given_name"]);
+  const family = text2(claims["family_name"]);
+  if (given || family) {
+    return { firstName: given ?? "User", lastName: family ?? "Account" };
+  }
+  const [first, ...rest] = (text2(claims["name"]) ?? "").split(" ").filter(Boolean);
+  return { firstName: first ?? "User", lastName: rest.join(" ") || "Account" };
+}
 var import_debug7, debug7, MagentoIdentityCapability;
 var init_identity_capability4 = __esm({
   "packages/magento/src/capabilities/identity.capability.ts"() {
     "use strict";
     init_src();
+    init_src3();
     import_debug7 = __toESM(require_src(), 1);
     debug7 = (0, import_debug7.default)("reactionary:magento:identity");
-    MagentoIdentityCapability = class extends IdentityCapability {
-      constructor(config3, cache, context2, magentoApi) {
-        super(cache, context2);
+    MagentoIdentityCapability = class extends OidcIdentityCapability {
+      constructor(config3, cache3, context2, magentoApi) {
+        super(cache3, context2, config3.externalIdentityProviders);
         this.magentoApi = magentoApi;
         this.config = config3;
       }
@@ -126322,14 +127689,20 @@ var init_identity_capability4 = __esm({
           password: payload.password
         });
       }
-      async listProviders(_payload) {
-        return success([PASSWORD_IDENTITY_PROVIDER]);
-      }
-      async startExternalLogin(_payload) {
-        return error({ type: "InvalidInput", error: "External login is not supported by Magento" });
-      }
-      async completeExternalLogin(_payload) {
-        return error({ type: "InvalidInput", error: "External login is not supported by Magento" });
+      /**
+       * Stock Magento has no external login. Once the shared OpenID Connect client has verified the identity, this
+       * finds or creates the customer by verified email (the pattern in Adobe's social login guide) and issues a
+       * customer token. An existing account with the same email is signed in, which is only appropriate for identity
+       * providers the shop owner trusts: that is what the configured provider list is.
+       */
+      async exchangeExternalIdentity(input) {
+        const email3 = input.claims["email"];
+        if (typeof email3 !== "string" || email3.length === 0) {
+          return error({ type: "InvalidInput", error: "The identity provider did not return an email address" });
+        }
+        await this.magentoApi.loginWithExternalIdentity({ email: email3, ...namesFromClaims(input.claims) });
+        const me3 = await this.magentoApi.getMe();
+        return success({ type: "Registered", id: { userId: String(me3.id) } });
       }
     };
     __decorateClass([
@@ -126356,24 +127729,6 @@ var init_identity_capability4 = __esm({
         outputSchema: IdentitySchema
       })
     ], MagentoIdentityCapability.prototype, "register", 1);
-    __decorateClass([
-      Reactionary({
-        inputSchema: IdentityQueryProvidersSchema,
-        outputSchema: IdentityProviderSchema.array()
-      })
-    ], MagentoIdentityCapability.prototype, "listProviders", 1);
-    __decorateClass([
-      Reactionary({
-        inputSchema: IdentityMutationStartExternalLoginSchema,
-        outputSchema: ExternalLoginRedirectSchema
-      })
-    ], MagentoIdentityCapability.prototype, "startExternalLogin", 1);
-    __decorateClass([
-      Reactionary({
-        inputSchema: IdentityMutationCompleteExternalLoginSchema,
-        outputSchema: IdentitySchema
-      })
-    ], MagentoIdentityCapability.prototype, "completeExternalLogin", 1);
   }
 });
 
@@ -126386,8 +127741,8 @@ var init_inventory_capability4 = __esm({
     import_debug8 = __toESM(require_src(), 1);
     debug8 = (0, import_debug8.default)("reactionary:magento:inventory");
     MagentoInventoryCapability = class extends InventoryCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -126459,8 +127814,8 @@ var init_price_capability4 = __esm({
     import_debug9 = __toESM(require_src(), 1);
     debug9 = (0, import_debug9.default)("reactionary:magento:price");
     MagentoPriceCapability = class extends PriceCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -126521,8 +127876,8 @@ var init_product_search_capability5 = __esm({
     CATEGORY_FACET_KEY = "categories";
     CATEGORY_FIELD = "category_id";
     MagentoProductSearchCapability = class extends ProductSearchCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -126688,8 +128043,8 @@ var init_product_capability4 = __esm({
     import_debug11 = __toESM(require_src(), 1);
     debug11 = (0, import_debug11.default)("reactionary:magento:product");
     MagentoProductCapability = class extends ProductCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -126783,8 +128138,8 @@ var init_profile_capability4 = __esm({
     import_debug12 = __toESM(require_src(), 1);
     debug12 = (0, import_debug12.default)("reactionary:magento:profile");
     MagentoProfileCapability = class extends ProfileCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -127050,8 +128405,8 @@ var init_order_search_capability4 = __esm({
     import_debug13 = __toESM(require_src(), 1);
     debug13 = (0, import_debug13.default)("reactionary:magento:order-search");
     MagentoOrderSearchCapability = class extends OrderSearchCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -127189,8 +128544,8 @@ var init_order_capability4 = __esm({
     import_debug14 = __toESM(require_src(), 1);
     debug14 = (0, import_debug14.default)("reactionary:magento:order");
     MagentoOrderCapability = class extends OrderCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -127473,8 +128828,8 @@ var init_checkout_capability4 = __esm({
       checkoutIdentifier;
     };
     MagentoCheckoutCapability = class extends CheckoutCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -127904,8 +129259,8 @@ var init_product_associations_capability4 = __esm({
     init_magento_product_lookup();
     debug16 = (0, import_debug16.default)("reactionary:magento:product-associations");
     MagentoProductAssociationsCapability = class extends ProductAssociationsCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -128121,8 +129476,8 @@ var init_product_recommendations_capability3 = __esm({
     init_magento_product();
     debug18 = (0, import_debug18.default)("reactionary:magento:product-recommendations");
     MagentoProductRecommendationsCapability = class extends ProductRecommendationsCapability {
-      constructor(config3, cache, context2, magentoApi) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
       }
@@ -128256,8 +129611,8 @@ var init_product_reviews_capability4 = __esm({
     DEFAULT_PAGE_SIZE = 20;
     DEFAULT_REVIEW_RATING_CODE = "Rating";
     MagentoProductReviewsCapability = class extends ProductReviewsCapability {
-      constructor(config3, cache, context2, magentoApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, magentoApi, factory) {
+        super(cache3, context2);
         this.magentoApi = magentoApi;
         this.config = config3;
         this.factory = factory;
@@ -128493,6 +129848,11 @@ function ensureMagentoPasswordPolicy(password) {
   if (!/[^A-Za-z0-9]/.test(password)) suffix += "!";
   return `${password}${suffix}`;
 }
+function randomMagentoPassword() {
+  const bytes = new Uint8Array(24);
+  crypto.getRandomValues(bytes);
+  return ensureMagentoPasswordPolicy(btoa(String.fromCharCode(...bytes)));
+}
 function resolveGraphQLEndpoint(config3) {
   if (config3.graphqlUrl) {
     return config3.graphqlUrl;
@@ -128652,6 +130012,34 @@ ${text2}`
           await this.tokenStore.setItem("customerToken", normalized);
           return normalized;
         },
+        /**
+         * Establishes a customer session for a verified external identity, the way Adobe's social login guide does:
+         * find the customer by email, create it if there is none, then issue a customer token with the admin key.
+         * Needs the Storefront Compatibility Package (4.7.6+) for POST /V1/customers/{id}/token.
+         */
+        loginWithExternalIdentity: async (identity) => {
+          const params = new URLSearchParams();
+          params.set("searchCriteria[filterGroups][0][filters][0][field]", "email");
+          params.set("searchCriteria[filterGroups][0][filters][0][value]", identity.email);
+          params.set("searchCriteria[filterGroups][0][filters][0][condition_type]", "eq");
+          params.set("searchCriteria[pageSize]", "1");
+          const found = await this.adminRest.request(
+            "GET",
+            `/V1/customers/search?${params.toString()}`
+          );
+          let customerId = found.items?.[0]?.id;
+          if (customerId === void 0) {
+            const created = await this.adminRest.request("POST", "/V1/customers", {
+              customer: { email: identity.email, firstname: identity.firstName, lastname: identity.lastName },
+              password: randomMagentoPassword()
+            });
+            customerId = created.id;
+          }
+          const token = await this.adminRest.request("POST", `/V1/customers/${customerId}/token`);
+          const normalized = typeof token === "string" ? token.replace(/^"|"$/g, "") : String(token);
+          await this.tokenStore.setItem("customerToken", normalized);
+          return normalized;
+        },
         logout: async () => {
           await this.tokenStore.removeItem("customerToken");
         }
@@ -128789,6 +130177,16 @@ ${text2}`
           }
         },
         cart: {
+          /**
+           * Moves a guest cart's items into the signed-in customer's cart (Adobe's recommended step after login).
+           * Must run with the customer token already stored.
+           */
+          mergeGuestCart: async (guestCartId) => {
+            await this.gql.request(
+              "mutation MergeGuestCart($source: String!) { mergeCarts(source_cart_id: $source) { id } }",
+              { source: guestCartId }
+            );
+          },
           create: async (customerToken) => {
             if (customerToken) {
               const res2 = await this.rest.request("POST", "/V1/carts/mine");
@@ -128911,6 +130309,25 @@ ${text2}`
         const client = await this.getClient();
         return client.auth.login(email3, password);
       }
+      /**
+       * Signs in a verified external identity (see Magento.auth.loginWithExternalIdentity) and carries a guest cart over.
+       * The guest cart id is cleared either way: after login the cart endpoints use /carts/mine, and a stale id would
+       * make getSelf report a guest after the next logout.
+       */
+      async loginWithExternalIdentity(identity) {
+        const client = await this.getClient();
+        const guestCartId = await this.getActiveCartId();
+        const token = await client.auth.loginWithExternalIdentity(identity);
+        if (guestCartId) {
+          try {
+            await client.store.cart.mergeGuestCart(guestCartId);
+          } catch (err) {
+            debug20("Could not merge the guest cart after external login:", err);
+          }
+          await this.clearActiveCartId();
+        }
+        return token;
+      }
       async logout() {
         const client = await this.getClient();
         return client.auth.logout();
@@ -129995,13 +131412,13 @@ var init_initialize_types4 = __esm({
 
 // packages/magento/src/core/initialize.ts
 function withMagentoCapabilities(configuration, capabilities) {
-  return (cache, context2) => {
+  return (cache3, context2) => {
     const client = {};
     const config3 = MagentoConfigurationSchema.parse(configuration);
     const caps = MagentoCapabilitiesSchema.parse(capabilities);
     const magentoApi = new MagentoClient(config3, context2);
     const buildCapabilityArgs = (factory) => ({
-      cache,
+      cache: cache3,
       context: context2,
       config: config3,
       magentoApi,
@@ -130120,7 +131537,7 @@ function withMagentoCapabilities(configuration, capabilities) {
           args.magentoApi
         ),
         {
-          cache,
+          cache: cache3,
           context: context2,
           config: config3,
           magentoApi
@@ -130225,7 +131642,7 @@ function withMagentoCapabilities(configuration, capabilities) {
           args.magentoApi
         ),
         {
-          cache,
+          cache: cache3,
           context: context2,
           config: config3,
           magentoApi
@@ -130282,7 +131699,7 @@ var init_initialize4 = __esm({
 });
 
 // packages/magento/src/index.ts
-var init_src5 = __esm({
+var init_src6 = __esm({
   "packages/magento/src/index.ts"() {
     "use strict";
     init_configuration_schema4();
@@ -137130,9 +138547,9 @@ var init_text_line_stream = __esm({
 
 // node_modules/.pnpm/fetch-event-stream@0.1.6/node_modules/fetch-event-stream/esm/utils.js
 function stream(input) {
-  let decoder = new TextDecoderStream();
+  let decoder2 = new TextDecoderStream();
   let split2 = new TextLineStream({ allowCR: true });
-  return input.pipeThrough(decoder).pipeThrough(split2);
+  return input.pipeThrough(decoder2).pipeThrough(split2);
 }
 function split(input) {
   let rgx = /[:]\s*/;
@@ -137446,14 +138863,14 @@ var require_object_inspect = __commonJS({
         var protoTag = obj instanceof Object ? "" : "null prototype";
         var stringTag = !isPlainObject2 && toStringTag && Object(obj) === obj && toStringTag in obj ? $slice.call(toStr(obj), 8, -1) : protoTag ? "Object" : "";
         var constructorTag = isPlainObject2 || typeof obj.constructor !== "function" ? "" : obj.constructor.name ? obj.constructor.name + " " : "";
-        var tag = constructorTag + (stringTag || protoTag ? "[" + $join.call($concat.call([], stringTag || [], protoTag || []), ": ") + "] " : "");
+        var tag2 = constructorTag + (stringTag || protoTag ? "[" + $join.call($concat.call([], stringTag || [], protoTag || []), ": ") + "] " : "");
         if (ys2.length === 0) {
-          return tag + "{}";
+          return tag2 + "{}";
         }
         if (indent) {
-          return tag + "{" + indentedJoin(ys2, indent) + "}";
+          return tag2 + "{" + indentedJoin(ys2, indent) + "}";
         }
-        return tag + "{ " + $join.call(ys2, ", ") + " }";
+        return tag2 + "{ " + $join.call(ys2, ", ") + " }";
       }
       return String(obj);
     };
@@ -139009,7 +140426,7 @@ var require_utils3 = __commonJS({
         return acc;
       }, target);
     };
-    var decode2 = function(str, defaultDecoder, charset) {
+    var decode3 = function(str, defaultDecoder, charset) {
       var strWithoutPlus = str.replace(/\+/g, " ");
       if (charset === "iso-8859-1") {
         return strWithoutPlus.replace(/%[0-9a-f]{2}/gi, unescape);
@@ -139021,7 +140438,7 @@ var require_utils3 = __commonJS({
       }
     };
     var limit = 1024;
-    var encode2 = function encode3(str, defaultEncoder, charset, kind, format) {
+    var encode3 = function encode4(str, defaultEncoder, charset, kind, format) {
       if (str.length === 0) {
         return str;
       }
@@ -139135,8 +140552,8 @@ var require_utils3 = __commonJS({
       assign,
       combine,
       compact,
-      decode: decode2,
-      encode: encode2,
+      decode: decode3,
+      encode: encode3,
       isBuffer,
       isOverflow,
       isRegExp,
@@ -139202,7 +140619,7 @@ var require_stringify = __commonJS({
       return typeof v4 === "string" || typeof v4 === "number" || typeof v4 === "boolean" || typeof v4 === "symbol" || typeof v4 === "bigint";
     };
     var sentinel = {};
-    var stringify2 = function stringify3(object2, prefix, generateArrayPrefix, commaRoundTrip, allowEmptyArrays, strictNullHandling, skipNulls, encodeDotInKeys, encoder, filter, sort, allowDots, serializeDate, format, formatter, encodeValuesOnly, charset, sideChannel) {
+    var stringify2 = function stringify3(object2, prefix, generateArrayPrefix, commaRoundTrip, allowEmptyArrays, strictNullHandling, skipNulls, encodeDotInKeys, encoder2, filter, sort, allowDots, serializeDate, format, formatter, encodeValuesOnly, charset, sideChannel) {
       var obj = object2;
       var tmpSc = sideChannel;
       var step = 0;
@@ -139235,14 +140652,14 @@ var require_stringify = __commonJS({
       }
       if (obj === null) {
         if (strictNullHandling) {
-          return formatter(encoder && !encodeValuesOnly ? encoder(prefix, defaults.encoder, charset, "key", format) : prefix);
+          return formatter(encoder2 && !encodeValuesOnly ? encoder2(prefix, defaults.encoder, charset, "key", format) : prefix);
         }
         obj = "";
       }
       if (isNonNullishPrimitive(obj) || utils.isBuffer(obj)) {
-        if (encoder) {
-          var keyValue = encodeValuesOnly ? prefix : encoder(prefix, defaults.encoder, charset, "key", format);
-          return [formatter(keyValue) + "=" + formatter(encoder(obj, defaults.encoder, charset, "value", format))];
+        if (encoder2) {
+          var keyValue = encodeValuesOnly ? prefix : encoder2(prefix, defaults.encoder, charset, "key", format);
+          return [formatter(keyValue) + "=" + formatter(encoder2(obj, defaults.encoder, charset, "value", format))];
         }
         return [formatter(prefix) + "=" + formatter(String(obj))];
       }
@@ -139252,9 +140669,9 @@ var require_stringify = __commonJS({
       }
       var objKeys;
       if (generateArrayPrefix === "comma" && isArray(obj)) {
-        if (encodeValuesOnly && encoder) {
+        if (encodeValuesOnly && encoder2) {
           obj = utils.maybeMap(obj, function(v4) {
-            return v4 == null ? v4 : encoder(v4);
+            return v4 == null ? v4 : encoder2(v4);
           });
         }
         objKeys = [{ value: obj.length > 0 ? obj.join(",") || null : void 0 }];
@@ -139289,7 +140706,7 @@ var require_stringify = __commonJS({
           strictNullHandling,
           skipNulls,
           encodeDotInKeys,
-          generateArrayPrefix === "comma" && encodeValuesOnly && isArray(obj) ? null : encoder,
+          generateArrayPrefix === "comma" && encodeValuesOnly && isArray(obj) ? null : encoder2,
           filter,
           sort,
           allowDots,
@@ -139939,8 +141356,8 @@ var init_client5 = __esm({
       return isJsonRequest ? yield resp.json() : resp;
     });
     FetchError = class extends Error {
-      constructor(message, statusText, status) {
-        super(message);
+      constructor(message2, statusText, status) {
+        super(message2);
         this.statusText = statusText;
         this.status = status;
       }
@@ -140188,9 +141605,9 @@ var init_client5 = __esm({
           return null;
         });
       }
-      throwError_(message) {
-        this.logger.error(message);
-        throw new Error(message);
+      throwError_(message2) {
+        this.logger.error(message2);
+        throw new Error(message2);
       }
     };
   }
@@ -160554,7 +161971,7 @@ var init_client6 = __esm({
     "use strict";
     init_esm2();
     import_debug21 = __toESM(require_src(), 1);
-    init_src6();
+    init_src7();
     debug21 = (0, import_debug21.default)("reactionary:medusa:client");
     SESSION_KEY2 = "MEDUSA_PROVIDER";
     RequestContextTokenStore2 = class {
@@ -160799,10 +162216,10 @@ var init_client6 = __esm({
               last_name: String(metadata["family_name"] ?? fallbackRest.join(" "))
             });
           } catch (error5) {
-            const message = error5 instanceof Error ? error5.message : String(error5);
-            if (/already has an account/i.test(message)) {
+            const message2 = error5 instanceof Error ? error5.message : String(error5);
+            if (/already has an account/i.test(message2)) {
               await client.client.clearToken();
-              return { type: "Conflict", message };
+              return { type: "Conflict", message: message2 };
             }
             throw error5;
           }
@@ -160962,8 +162379,8 @@ var init_cart_capability5 = __esm({
     init_medusa_helpers();
     debug23 = (0, import_debug23.default)("reactionary:medusa:cart");
     MedusaCartCapability = class extends CartCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -161652,8 +163069,8 @@ var init_category_capability5 = __esm({
     init_src();
     init_zod();
     MedusaCategoryCapability = class extends CategoryCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -161836,8 +163253,8 @@ var init_checkout_capability5 = __esm({
       checkoutIdentifier;
     };
     MedusaCheckoutCapability = class extends CheckoutCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -162340,8 +163757,8 @@ var init_company_capability3 = __esm({
     init_medusa_helpers();
     debug25 = (0, import_debug25.default)("reactionary:medusa:company");
     MedusaCompanyCapability = class extends CompanyCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -162579,8 +163996,8 @@ var init_company_registration_capability3 = __esm({
     init_medusa_helpers();
     debug26 = (0, import_debug26.default)("reactionary:medusa:company-registration");
     MedusaCompanyRegistrationCapability = class extends CompanyRegistrationCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -162683,8 +164100,8 @@ var init_employee_capability3 = __esm({
     debug27 = (0, import_debug27.default)("reactionary:medusa:employee");
     EMPLOYEE_FIELDS = ["*", "customer.*"].join(",");
     MedusaEmployeeCapability = class extends EmployeeCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -163021,8 +164438,8 @@ var init_employee_invitation_capability3 = __esm({
       "validUntil"
     ].join(",");
     MedusaEmployeeInvitationCapability = class extends EmployeeInvitationCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -163250,8 +164667,8 @@ var init_identity_capability5 = __esm({
     MedusaIdentityCapability = class extends IdentityCapability {
       config;
       medusaApi;
-      constructor(config3, cache, context2, medusaApi) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi) {
+        super(cache3, context2);
         this.config = config3;
         this.medusaApi = medusaApi;
       }
@@ -163435,8 +164852,8 @@ var init_inventory_capability5 = __esm({
     init_client6();
     debug30 = (0, import_debug30.default)("reactionary:medusa:inventory");
     MedusaInventoryCapability = class extends InventoryCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -163520,8 +164937,8 @@ var init_order_search_capability5 = __esm({
     import_debug31 = __toESM(require_src(), 1);
     debug31 = (0, import_debug31.default)("reactionary:medusa:order-search");
     MedusaOrderSearchCapability = class extends OrderSearchCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -163605,8 +165022,8 @@ var init_order_capability5 = __esm({
     init_medusa_helpers();
     debug32 = (0, import_debug32.default)("reactionary:medusa:order");
     MedusaOrderCapability = class extends OrderCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -163650,8 +165067,8 @@ var init_price_capability5 = __esm({
     import_debug33 = __toESM(require_src(), 1);
     debug33 = (0, import_debug33.default)("reactionary:medusa:price");
     MedusaPriceCapability = class extends PriceCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -163730,8 +165147,8 @@ var init_product_search_capability6 = __esm({
     import_debug34 = __toESM(require_src(), 1);
     debug34 = (0, import_debug34.default)("reactionary:medusa:search");
     MedusaProductSearchCapability = class extends ProductSearchCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -163900,8 +165317,8 @@ var init_product_recommendations_capability4 = __esm({
     MedusaProductRecommendationsCapability = class extends ProductRecommendationsCapability {
       config;
       medusaApi;
-      constructor(config3, cache, context2, medusaApi) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi) {
+        super(cache3, context2);
         this.config = config3;
         this.medusaApi = medusaApi;
       }
@@ -164017,8 +165434,8 @@ var init_product_capability5 = __esm({
     import_debug36 = __toESM(require_src(), 1);
     debug36 = (0, import_debug36.default)("reactionary:medusa:product");
     MedusaProductCapability = class extends ProductCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -164161,8 +165578,8 @@ var init_product_associations_capability5 = __esm({
         "+metadata",
         "+external_id"
       ];
-      constructor(config3, cache, context2, medusa, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusa, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.medusa = medusa;
         this.factory = factory;
@@ -164264,8 +165681,8 @@ var init_profile_capability5 = __esm({
     import_debug37 = __toESM(require_src(), 1);
     debug37 = (0, import_debug37.default)("reactionary:medusa:profile");
     MedusaProfileCapability = class extends ProfileCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -164531,8 +165948,8 @@ var init_personalization_profile_capability4 = __esm({
     init_client6();
     debug38 = (0, import_debug38.default)("reactionary:medusa:personalization-profile");
     MedusaPersonalizationProfileCapability = class extends PersonalizationProfileCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -164609,8 +166026,8 @@ var init_store_capability4 = __esm({
     init_geo();
     debug39 = (0, import_debug39.default)("reactionary:medusa:store");
     MedusaStoreCapability = class extends StoreCapability {
-      constructor(config3, cache, context2, medusaApi, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, medusaApi, factory) {
+        super(cache3, context2);
         this.medusaApi = medusaApi;
         this.config = config3;
         this.factory = factory;
@@ -166446,13 +167863,13 @@ var init_initialize_types5 = __esm({
 
 // packages/medusa/src/core/initialize.ts
 function withMedusaCapabilities(configuration, capabilities) {
-  return (cache, context2) => {
+  return (cache3, context2) => {
     const client = {};
     const config3 = MedusaConfigurationSchema.parse(configuration);
     const caps = MedusaCapabilitiesSchema.parse(capabilities);
     const medusaApi = new MedusaAPI(config3, context2);
     const buildCapabilityArgs = (factory) => ({
-      cache,
+      cache: cache3,
       context: context2,
       config: config3,
       medusaApi,
@@ -166607,7 +168024,7 @@ function withMedusaCapabilities(configuration, capabilities) {
           args.medusaApi
         ),
         {
-          cache,
+          cache: cache3,
           context: context2,
           config: config3,
           medusaApi
@@ -166676,7 +168093,7 @@ function withMedusaCapabilities(configuration, capabilities) {
           args.medusaApi
         ),
         {
-          cache,
+          cache: cache3,
           context: context2,
           config: config3,
           medusaApi
@@ -166814,7 +168231,7 @@ var init_initialize5 = __esm({
 });
 
 // packages/medusa/src/index.ts
-var init_src6 = __esm({
+var init_src7 = __esm({
   "packages/medusa/src/index.ts"() {
     "use strict";
     init_configuration_schema5();
@@ -168022,8 +169439,8 @@ var init_product_search_capability7 = __esm({
     MeilisearchProductSearchCapability = class extends ProductSearchCapability {
       config;
       factory;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
       }
@@ -168233,8 +169650,8 @@ var init_product_recommendations_capability5 = __esm({
     init_index_utils2();
     MeilisearchProductRecommendationsCapability = class extends ProductRecommendationsCapability {
       config;
-      constructor(config3, cache, context2) {
-        super(cache, context2);
+      constructor(config3, cache3, context2) {
+        super(cache3, context2);
         this.config = config3;
       }
       getSimilarProductsRecommendationsPayload(query) {
@@ -168324,8 +169741,8 @@ var init_order_search_capability6 = __esm({
     MeilisearchOrderSearchCapability = class extends OrderSearchCapability {
       config;
       factory;
-      constructor(config3, cache, context2, factory) {
-        super(cache, context2);
+      constructor(config3, cache3, context2, factory) {
+        super(cache3, context2);
         this.config = config3;
         this.factory = factory;
       }
@@ -168546,7 +169963,7 @@ var init_initialize_types6 = __esm({
 
 // packages/meilisearch/src/core/initialize.ts
 function withMeilisearchCapabilities(configuration, capabilities) {
-  return (cache, context2) => {
+  return (cache3, context2) => {
     const client = {};
     const caps = MeilisearchCapabilitiesSchema.parse(capabilities);
     if (caps.productSearch?.enabled) {
@@ -168562,7 +169979,7 @@ function withMeilisearchCapabilities(configuration, capabilities) {
           )
         },
         (factory) => ({
-          cache,
+          cache: cache3,
           context: context2,
           config: configuration,
           factory
@@ -168582,7 +169999,7 @@ function withMeilisearchCapabilities(configuration, capabilities) {
           )
         },
         (factory) => ({
-          cache,
+          cache: cache3,
           context: context2,
           config: configuration,
           factory
@@ -168598,7 +170015,7 @@ function withMeilisearchCapabilities(configuration, capabilities) {
           args.context
         ),
         {
-          cache,
+          cache: cache3,
           context: context2,
           config: configuration
         }
@@ -168649,7 +170066,7 @@ var init_configuration_schema6 = __esm({
 });
 
 // packages/meilisearch/src/index.ts
-var init_src7 = __esm({
+var init_src8 = __esm({
   "packages/meilisearch/src/index.ts"() {
     "use strict";
     init_initialize6();
@@ -168742,14 +170159,14 @@ var require_main = __commonJS({
       }
       return DotenvModule.parse(decrypted);
     }
-    function _warn(message) {
-      console.error(`\u26A0 ${message}`);
+    function _warn(message2) {
+      console.error(`\u26A0 ${message2}`);
     }
-    function _debug(message) {
-      console.log(`\u2506 ${message}`);
+    function _debug(message2) {
+      console.log(`\u2506 ${message2}`);
     }
-    function _log(message) {
-      console.log(`\u25C7 ${message}`);
+    function _log(message2) {
+      console.log(`\u25C7 ${message2}`);
     }
     function _dotenvKey(options) {
       if (options && options.DOTENV_KEY && options.DOTENV_KEY.length > 0) {
@@ -169229,12 +170646,12 @@ var init_env_client_builder = __esm({
   "packages/feeds/src/lib/env-client-builder.ts"() {
     "use strict";
     init_src2();
-    init_src3();
-    init_src();
     init_src4();
+    init_src();
     init_src5();
     init_src6();
     init_src7();
+    init_src8();
     init_load_cwd_env();
     providerSystems = [
       "FAKE",
@@ -169256,8 +170673,8 @@ var CommanderError = class extends Error {
    * @param {string} code an id string representing the error
    * @param {string} message human-readable description of the error
    */
-  constructor(exitCode, code, message) {
-    super(message);
+  constructor(exitCode, code, message2) {
+    super(message2);
     Error.captureStackTrace(this, this.constructor);
     this.name = this.constructor.name;
     this.code = code;
@@ -169270,8 +170687,8 @@ var InvalidArgumentError = class extends CommanderError {
    * Constructs the InvalidArgumentError class
    * @param {string} [message] explanation of why argument is invalid
    */
-  constructor(message) {
-    super(1, "commander.invalidArgument", message);
+  constructor(message2) {
+    super(1, "commander.invalidArgument", message2);
     Error.captureStackTrace(this, this.constructor);
     this.name = this.constructor.name;
   }
@@ -170817,9 +172234,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @return never
    * @private
    */
-  _exit(exitCode, code, message) {
+  _exit(exitCode, code, message2) {
     if (this._exitCallback) {
-      this._exitCallback(new CommanderError(exitCode, code, message));
+      this._exitCallback(new CommanderError(exitCode, code, message2));
     }
     import_node_process.default.exit(exitCode);
   }
@@ -170879,8 +172296,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
       return target.parseArg(value, previous);
     } catch (err) {
       if (err.code === "commander.invalidArgument") {
-        const message = `${invalidArgumentMessage} ${err.message}`;
-        this.error(message, { exitCode: err.exitCode, code: err.code });
+        const message2 = `${invalidArgumentMessage} ${err.message}`;
+        this.error(message2, { exitCode: err.exitCode, code: err.code });
       }
       throw err;
     }
@@ -171958,9 +173375,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} [errorOptions.code] - an id string representing the error
    * @param {number} [errorOptions.exitCode] - used with process.exit
    */
-  error(message, errorOptions) {
+  error(message2, errorOptions) {
     this._outputConfiguration.outputError(
-      `${message}
+      `${message2}
 `,
       this._outputConfiguration.writeErr
     );
@@ -171974,7 +173391,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
     const config3 = errorOptions || {};
     const exitCode = config3.exitCode || 1;
     const code = config3.code || "commander.error";
-    this._exit(exitCode, code, message);
+    this._exit(exitCode, code, message2);
   }
   /**
    * Apply any option related environment variables, if option does
@@ -172030,8 +173447,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @private
    */
   missingArgument(name) {
-    const message = `error: missing required argument '${name}'`;
-    this.error(message, { code: "commander.missingArgument" });
+    const message2 = `error: missing required argument '${name}'`;
+    this.error(message2, { code: "commander.missingArgument" });
   }
   /**
    * `Option` is missing an argument.
@@ -172040,8 +173457,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @private
    */
   optionMissingArgument(option) {
-    const message = `error: option '${option.flags}' argument missing`;
-    this.error(message, { code: "commander.optionMissingArgument" });
+    const message2 = `error: option '${option.flags}' argument missing`;
+    this.error(message2, { code: "commander.optionMissingArgument" });
   }
   /**
    * `Option` does not have a value, and is a mandatory option.
@@ -172050,8 +173467,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @private
    */
   missingMandatoryOptionValue(option) {
-    const message = `error: required option '${option.flags}' not specified`;
-    this.error(message, { code: "commander.missingMandatoryOptionValue" });
+    const message2 = `error: required option '${option.flags}' not specified`;
+    this.error(message2, { code: "commander.missingMandatoryOptionValue" });
   }
   /**
    * `Option` conflicts with another option.
@@ -172084,8 +173501,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
       }
       return `option '${bestOption.flags}'`;
     };
-    const message = `error: ${getErrorMessage(option)} cannot be used with ${getErrorMessage(conflictingOption)}`;
-    this.error(message, { code: "commander.conflictingOption" });
+    const message2 = `error: ${getErrorMessage(option)} cannot be used with ${getErrorMessage(conflictingOption)}`;
+    this.error(message2, { code: "commander.conflictingOption" });
   }
   /**
    * Unknown option `flag`.
@@ -172106,8 +173523,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
       } while (command && !command._enablePositionalOptions);
       suggestion = suggestSimilar(flag, candidateFlags);
     }
-    const message = `error: unknown option '${flag}'${suggestion}`;
-    this.error(message, { code: "commander.unknownOption" });
+    const message2 = `error: unknown option '${flag}'${suggestion}`;
+    this.error(message2, { code: "commander.unknownOption" });
   }
   /**
    * Excess arguments, more than expected.
@@ -172122,8 +173539,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
     const received = receivedArgs.length;
     const forSubcommand = this.parent ? ` for '${this.name()}'` : "";
     const details = receivedArgs.join(", ");
-    const message = `error: too many arguments${forSubcommand}. Expected ${expected} argument${s3} but got ${received}: ${details}.`;
-    this.error(message, { code: "commander.excessArguments" });
+    const message2 = `error: too many arguments${forSubcommand}. Expected ${expected} argument${s3} but got ${received}: ${details}.`;
+    this.error(message2, { code: "commander.excessArguments" });
   }
   /**
    * Unknown command.
@@ -172141,8 +173558,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
       });
       suggestion = suggestSimilar(unknownName, candidateNames);
     }
-    const message = `error: unknown command '${unknownName}'${suggestion}`;
-    this.error(message, { code: "commander.unknownCommand" });
+    const message2 = `error: unknown command '${unknownName}'${suggestion}`;
+    this.error(message2, { code: "commander.unknownCommand" });
   }
   /**
    * Get or set the program version.
@@ -173451,15 +174868,15 @@ var import_node_stream = require("node:stream");
 
 // node_modules/.pnpm/sitemap@9.0.1/node_modules/sitemap/dist/esm/lib/errors.js
 var NoURLError = class _NoURLError extends Error {
-  constructor(message) {
-    super(message || "URL is required");
+  constructor(message2) {
+    super(message2 || "URL is required");
     this.name = "NoURLError";
     Error.captureStackTrace(this, _NoURLError);
   }
 };
 var NoConfigError = class _NoConfigError extends Error {
-  constructor(message) {
-    super(message || "SitemapItem requires a configuration");
+  constructor(message2) {
+    super(message2 || "SitemapItem requires a configuration");
     this.name = "NoConfigError";
     Error.captureStackTrace(this, _NoConfigError);
   }
@@ -173494,8 +174911,8 @@ var InvalidVideoDuration = class _InvalidVideoDuration extends Error {
 };
 var InvalidVideoDescription = class _InvalidVideoDescription extends Error {
   constructor(url2, length) {
-    const message = `${url2}: video description is too long ${length} vs limit of 2048 characters.`;
-    super(message);
+    const message2 = `${url2}: video description is too long ${length} vs limit of 2048 characters.`;
+    super(message2);
     this.name = "InvalidVideoDescription";
     Error.captureStackTrace(this, _InvalidVideoDescription);
   }
@@ -173854,8 +175271,8 @@ var SitemapItemStream = class extends import_node_stream.Transform {
         this.push(element(TagNames["video:publication_date"], video.publication_date));
       }
       if (video.tag && video.tag.length > 0) {
-        for (const tag of video.tag) {
-          this.push(element(TagNames["video:tag"], tag));
+        for (const tag2 of video.tag) {
+          this.push(element(TagNames["video:tag"], tag2));
         }
       }
       if (video.category) {