@rebasepro/server-core 0.0.1-canary.c53f5db → 0.0.1-canary.cbdd980

package/dist/index.es.js

@@ -7,7 +7,7 @@ import { Hono } from "hono";
 import require$$0$2 from "buffer";
 import require$$0$3 from "stream";
 import require$$5, { promisify } from "util";
-import require$$0$4, { randomBytes, createHash, timingSafeEqual as timingSafeEqual$1, scrypt, createPrivateKey as createPrivateKey$1 } from "crypto";
+import require$$0$4, { randomBytes, createHash, timingSafeEqual as timingSafeEqual$1, scrypt } from "crypto";
 import { bodyLimit } from "hono/body-limit";
 import { csrf } from "hono/csrf";
 import require$$0$a from "child_process";
@@ -1020,13 +1020,30 @@ var object_hash = { exports: {} };
     }, { buffer: 3, lYpoI2: 11 }] }, {}, [1])(1);
   });
 })(object_hash);
-const snakeCaseRegex = /[A-Z]{2,}(?=[A-Z][a-z]+[0-9]*|\b)|[A-Z]?[a-z]+[0-9]*|[A-Z]|[0-9]+/g;
+const tokenizeRegex = /[A-Z]{2,}(?=[A-Z][a-z]|\b)|[A-Z]?[a-z]+|[0-9]+(?:[a-z](?![a-z]))?|[A-Z]/g;
+const snakeCaseRegex = tokenizeRegex;
 const toSnakeCase = (str) => {
   const regExpMatchArray = str.match(snakeCaseRegex);
   if (!regExpMatchArray) return "";
   return regExpMatchArray.map((x) => x.toLowerCase()).join("_");
 };
-function isObject$b(item) {
+function deepClone(value) {
+  if (value === null || value === void 0) return value;
+  if (typeof value === "function") return value;
+  if (typeof value !== "object") return value;
+  if (Array.isArray(value)) {
+    return value.map((item) => deepClone(item));
+  }
+  if (Object.getPrototypeOf(value) !== Object.prototype) {
+    return value;
+  }
+  const result = {};
+  for (const key of Object.keys(value)) {
+    result[key] = deepClone(value[key]);
+  }
+  return result;
+}
+function isObject$4(item) {
   return !!item && typeof item === "object" && !Array.isArray(item);
 }
 function isPlainObject$3(obj) {
@@ -1037,13 +1054,13 @@ function isPlainObject$3(obj) {
   return proto === Object.prototype;
 }
 function mergeDeep(target, source, ignoreUndefined = false) {
-  if (!isObject$b(target)) {
+  if (!isObject$4(target)) {
     return target;
   }
   const output = {
     ...target
   };
-  if (!isObject$b(source)) {
+  if (!isObject$4(source)) {
     return output;
   }
   for (const key in source) {
@@ -1084,7 +1101,7 @@ function mergeDeep(target, source, ignoreUndefined = false) {
         } else {
           output[key] = sourceValue;
         }
-      } else if (isObject$b(sourceValue)) {
+      } else if (isObject$4(sourceValue)) {
         output[key] = sourceValue;
       } else {
         output[key] = sourceValue;
@@ -1354,7 +1371,7 @@ function findRelation(resolvedRelations, key) {
 }
 var logic = { exports: {} };
 (function(module, exports$1) {
-  (function(root2, factory) {
+  (function(root, factory) {
     {
       module.exports = factory();
     }
@@ -1722,7 +1739,7 @@ var logic = { exports: {} };
   });
 })(logic);
 const { getOwnPropertyNames, getOwnPropertySymbols } = Object;
-const { hasOwnProperty: hasOwnProperty$d } = Object.prototype;
+const { hasOwnProperty: hasOwnProperty$3 } = Object.prototype;
 function combineComparators(comparatorA, comparatorB) {
   return function isEqual(a2, b, state) {
     return comparatorA(a2, b, state) && comparatorB(a2, b, state);
@@ -1733,17 +1750,17 @@ function createIsCircular(areItemsEqual) {
     if (!a2 || !b || typeof a2 !== "object" || typeof b !== "object") {
       return areItemsEqual(a2, b, state);
     }
-    const { cache: cache2 } = state;
-    const cachedA = cache2.get(a2);
-    const cachedB = cache2.get(b);
+    const { cache } = state;
+    const cachedA = cache.get(a2);
+    const cachedB = cache.get(b);
     if (cachedA && cachedB) {
       return cachedA === b && cachedB === a2;
     }
-    cache2.set(a2, b);
-    cache2.set(b, a2);
+    cache.set(a2, b);
+    cache.set(b, a2);
     const result = areItemsEqual(a2, b, state);
-    cache2.delete(a2);
-    cache2.delete(b);
+    cache.delete(a2);
+    cache.delete(b);
     return result;
   };
 }
@@ -1752,12 +1769,12 @@ function getStrictProperties(object) {
 }
 const hasOwn$1 = (
   // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
-  Object.hasOwn || ((object, property) => hasOwnProperty$d.call(object, property))
+  Object.hasOwn || ((object, property) => hasOwnProperty$3.call(object, property))
 );
 const PREACT_VNODE = "__v";
 const PREACT_OWNER = "__o";
 const REACT_OWNER = "_owner";
-const { getOwnPropertyDescriptor, keys: keys$5 } = Object;
+const { getOwnPropertyDescriptor, keys: keys$1 } = Object;
 const sameValueEqual = (
   // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
   Object.is || function sameValueEqual2(a2, b) {
@@ -1835,9 +1852,9 @@ function areMapsEqual(a2, b, state) {
   return true;
 }
 function areObjectsEqual(a2, b, state) {
-  const properties = keys$5(a2);
+  const properties = keys$1(a2);
   let index = properties.length;
-  if (keys$5(b).length !== index) {
+  if (keys$1(b).length !== index) {
     return false;
   }
   while (index-- > 0) {
@@ -1983,12 +2000,12 @@ function createEqualityComparator(config) {
     if (Array.isArray(a2)) {
       return areArraysEqual2(a2, b, state);
     }
-    const tag2 = toString$2.call(a2);
-    const supportedComparator = supportedComparatorMap[tag2];
+    const tag = toString$2.call(a2);
+    const supportedComparator = supportedComparatorMap[tag];
     if (supportedComparator) {
       return supportedComparator(a2, b, state);
     }
-    const unsupportedCustomComparator = getUnsupportedCustomComparator && getUnsupportedCustomComparator(a2, b, state, tag2);
+    const unsupportedCustomComparator = getUnsupportedCustomComparator && getUnsupportedCustomComparator(a2, b, state, tag);
     if (unsupportedCustomComparator) {
       return unsupportedCustomComparator(a2, b, state);
     }
@@ -2038,9 +2055,9 @@ function createInternalEqualityComparator(compare2) {
 function createIsEqual({ circular, comparator: comparator2, createState, equals, strict }) {
   if (createState) {
     return function isEqual(a2, b) {
-      const { cache: cache2 = circular ? /* @__PURE__ */ new WeakMap() : void 0, meta } = createState();
+      const { cache = circular ? /* @__PURE__ */ new WeakMap() : void 0, meta } = createState();
       return comparator2(a2, b, {
-        cache: cache2,
+        cache,
         equals,
         meta,
         strict
@@ -2140,982 +2157,6 @@ function createCustomEqual(options2 = {}) {
   const equals = createCustomInternalComparator ? createCustomInternalComparator(comparator2) : createInternalEqualityComparator(comparator2);
   return createIsEqual({ circular, comparator: comparator2, createState, equals, strict });
 }
-function listCacheClear$1() {
-  this.__data__ = [];
-  this.size = 0;
-}
-var _listCacheClear = listCacheClear$1;
-function eq$5(value, other) {
-  return value === other || value !== value && other !== other;
-}
-var eq_1$1 = eq$5;
-var eq$4 = eq_1$1;
-function assocIndexOf$4(array, key) {
-  var length = array.length;
-  while (length--) {
-    if (eq$4(array[length][0], key)) {
-      return length;
-    }
-  }
-  return -1;
-}
-var _assocIndexOf = assocIndexOf$4;
-var assocIndexOf$3 = _assocIndexOf;
-var arrayProto = Array.prototype;
-var splice = arrayProto.splice;
-function listCacheDelete$1(key) {
-  var data = this.__data__, index = assocIndexOf$3(data, key);
-  if (index < 0) {
-    return false;
-  }
-  var lastIndex = data.length - 1;
-  if (index == lastIndex) {
-    data.pop();
-  } else {
-    splice.call(data, index, 1);
-  }
-  --this.size;
-  return true;
-}
-var _listCacheDelete = listCacheDelete$1;
-var assocIndexOf$2 = _assocIndexOf;
-function listCacheGet$1(key) {
-  var data = this.__data__, index = assocIndexOf$2(data, key);
-  return index < 0 ? void 0 : data[index][1];
-}
-var _listCacheGet = listCacheGet$1;
-var assocIndexOf$1 = _assocIndexOf;
-function listCacheHas$1(key) {
-  return assocIndexOf$1(this.__data__, key) > -1;
-}
-var _listCacheHas = listCacheHas$1;
-var assocIndexOf = _assocIndexOf;
-function listCacheSet$1(key, value) {
-  var data = this.__data__, index = assocIndexOf(data, key);
-  if (index < 0) {
-    ++this.size;
-    data.push([key, value]);
-  } else {
-    data[index][1] = value;
-  }
-  return this;
-}
-var _listCacheSet = listCacheSet$1;
-var listCacheClear = _listCacheClear, listCacheDelete = _listCacheDelete, listCacheGet = _listCacheGet, listCacheHas = _listCacheHas, listCacheSet = _listCacheSet;
-function ListCache$4(entries) {
-  var index = -1, length = entries == null ? 0 : entries.length;
-  this.clear();
-  while (++index < length) {
-    var entry = entries[index];
-    this.set(entry[0], entry[1]);
-  }
-}
-ListCache$4.prototype.clear = listCacheClear;
-ListCache$4.prototype["delete"] = listCacheDelete;
-ListCache$4.prototype.get = listCacheGet;
-ListCache$4.prototype.has = listCacheHas;
-ListCache$4.prototype.set = listCacheSet;
-var _ListCache = ListCache$4;
-var ListCache$3 = _ListCache;
-function stackClear$1() {
-  this.__data__ = new ListCache$3();
-  this.size = 0;
-}
-var _stackClear = stackClear$1;
-function stackDelete$1(key) {
-  var data = this.__data__, result = data["delete"](key);
-  this.size = data.size;
-  return result;
-}
-var _stackDelete = stackDelete$1;
-function stackGet$1(key) {
-  return this.__data__.get(key);
-}
-var _stackGet = stackGet$1;
-function stackHas$1(key) {
-  return this.__data__.has(key);
-}
-var _stackHas = stackHas$1;
-var freeGlobal$1 = typeof commonjsGlobal == "object" && commonjsGlobal && commonjsGlobal.Object === Object && commonjsGlobal;
-var _freeGlobal = freeGlobal$1;
-var freeGlobal = _freeGlobal;
-var freeSelf = typeof self == "object" && self && self.Object === Object && self;
-var root$8 = freeGlobal || freeSelf || Function("return this")();
-var _root = root$8;
-var root$7 = _root;
-var Symbol$4 = root$7.Symbol;
-var _Symbol = Symbol$4;
-var Symbol$3 = _Symbol;
-var objectProto$j = Object.prototype;
-var hasOwnProperty$c = objectProto$j.hasOwnProperty;
-var nativeObjectToString$1 = objectProto$j.toString;
-var symToStringTag$1 = Symbol$3 ? Symbol$3.toStringTag : void 0;
-function getRawTag$1(value) {
-  var isOwn = hasOwnProperty$c.call(value, symToStringTag$1), tag2 = value[symToStringTag$1];
-  try {
-    value[symToStringTag$1] = void 0;
-    var unmasked = true;
-  } catch (e) {
-  }
-  var result = nativeObjectToString$1.call(value);
-  if (unmasked) {
-    if (isOwn) {
-      value[symToStringTag$1] = tag2;
-    } else {
-      delete value[symToStringTag$1];
-    }
-  }
-  return result;
-}
-var _getRawTag = getRawTag$1;
-var objectProto$i = Object.prototype;
-var nativeObjectToString = objectProto$i.toString;
-function objectToString$8(value) {
-  return nativeObjectToString.call(value);
-}
-var _objectToString = objectToString$8;
-var Symbol$2 = _Symbol, getRawTag = _getRawTag, objectToString$7 = _objectToString;
-var nullTag = "[object Null]", undefinedTag = "[object Undefined]";
-var symToStringTag = Symbol$2 ? Symbol$2.toStringTag : void 0;
-function baseGetTag$4(value) {
-  if (value == null) {
-    return value === void 0 ? undefinedTag : nullTag;
-  }
-  return symToStringTag && symToStringTag in Object(value) ? getRawTag(value) : objectToString$7(value);
-}
-var _baseGetTag = baseGetTag$4;
-function isObject$a(value) {
-  var type = typeof value;
-  return value != null && (type == "object" || type == "function");
-}
-var isObject_1 = isObject$a;
-var baseGetTag$3 = _baseGetTag, isObject$9 = isObject_1;
-var asyncTag = "[object AsyncFunction]", funcTag$3 = "[object Function]", genTag$2 = "[object GeneratorFunction]", proxyTag = "[object Proxy]";
-function isFunction$3(value) {
-  if (!isObject$9(value)) {
-    return false;
-  }
-  var tag2 = baseGetTag$3(value);
-  return tag2 == funcTag$3 || tag2 == genTag$2 || tag2 == asyncTag || tag2 == proxyTag;
-}
-var isFunction_1 = isFunction$3;
-var root$6 = _root;
-var coreJsData$1 = root$6["__core-js_shared__"];
-var _coreJsData = coreJsData$1;
-var coreJsData = _coreJsData;
-var maskSrcKey = function() {
-  var uid = /[^.]+$/.exec(coreJsData && coreJsData.keys && coreJsData.keys.IE_PROTO || "");
-  return uid ? "Symbol(src)_1." + uid : "";
-}();
-function isMasked$1(func) {
-  return !!maskSrcKey && maskSrcKey in func;
-}
-var _isMasked = isMasked$1;
-var funcProto$2 = Function.prototype;
-var funcToString$2 = funcProto$2.toString;
-function toSource$2(func) {
-  if (func != null) {
-    try {
-      return funcToString$2.call(func);
-    } catch (e) {
-    }
-    try {
-      return func + "";
-    } catch (e) {
-    }
-  }
-  return "";
-}
-var _toSource = toSource$2;
-var isFunction$2 = isFunction_1, isMasked = _isMasked, isObject$8 = isObject_1, toSource$1 = _toSource;
-var reRegExpChar = /[\\^$.*+?()[\]{}|]/g;
-var reIsHostCtor = /^\[object .+?Constructor\]$/;
-var funcProto$1 = Function.prototype, objectProto$h = Object.prototype;
-var funcToString$1 = funcProto$1.toString;
-var hasOwnProperty$b = objectProto$h.hasOwnProperty;
-var reIsNative = RegExp(
-  "^" + funcToString$1.call(hasOwnProperty$b).replace(reRegExpChar, "\\$&").replace(/hasOwnProperty|(function).*?(?=\\\()| for .+?(?=\\\])/g, "$1.*?") + "$"
-);
-function baseIsNative$1(value) {
-  if (!isObject$8(value) || isMasked(value)) {
-    return false;
-  }
-  var pattern = isFunction$2(value) ? reIsNative : reIsHostCtor;
-  return pattern.test(toSource$1(value));
-}
-var _baseIsNative = baseIsNative$1;
-function getValue$1(object, key) {
-  return object == null ? void 0 : object[key];
-}
-var _getValue = getValue$1;
-var baseIsNative = _baseIsNative, getValue = _getValue;
-function getNative$7(object, key) {
-  var value = getValue(object, key);
-  return baseIsNative(value) ? value : void 0;
-}
-var _getNative = getNative$7;
-var getNative$6 = _getNative, root$5 = _root;
-var Map$4 = getNative$6(root$5, "Map");
-var _Map = Map$4;
-var getNative$5 = _getNative;
-var nativeCreate$4 = getNative$5(Object, "create");
-var _nativeCreate = nativeCreate$4;
-var nativeCreate$3 = _nativeCreate;
-function hashClear$1() {
-  this.__data__ = nativeCreate$3 ? nativeCreate$3(null) : {};
-  this.size = 0;
-}
-var _hashClear = hashClear$1;
-function hashDelete$1(key) {
-  var result = this.has(key) && delete this.__data__[key];
-  this.size -= result ? 1 : 0;
-  return result;
-}
-var _hashDelete = hashDelete$1;
-var nativeCreate$2 = _nativeCreate;
-var HASH_UNDEFINED$1 = "__lodash_hash_undefined__";
-var objectProto$g = Object.prototype;
-var hasOwnProperty$a = objectProto$g.hasOwnProperty;
-function hashGet$1(key) {
-  var data = this.__data__;
-  if (nativeCreate$2) {
-    var result = data[key];
-    return result === HASH_UNDEFINED$1 ? void 0 : result;
-  }
-  return hasOwnProperty$a.call(data, key) ? data[key] : void 0;
-}
-var _hashGet = hashGet$1;
-var nativeCreate$1 = _nativeCreate;
-var objectProto$f = Object.prototype;
-var hasOwnProperty$9 = objectProto$f.hasOwnProperty;
-function hashHas$1(key) {
-  var data = this.__data__;
-  return nativeCreate$1 ? data[key] !== void 0 : hasOwnProperty$9.call(data, key);
-}
-var _hashHas = hashHas$1;
-var nativeCreate = _nativeCreate;
-var HASH_UNDEFINED = "__lodash_hash_undefined__";
-function hashSet$1(key, value) {
-  var data = this.__data__;
-  this.size += this.has(key) ? 0 : 1;
-  data[key] = nativeCreate && value === void 0 ? HASH_UNDEFINED : value;
-  return this;
-}
-var _hashSet = hashSet$1;
-var hashClear = _hashClear, hashDelete = _hashDelete, hashGet = _hashGet, hashHas = _hashHas, hashSet = _hashSet;
-function Hash$1(entries) {
-  var index = -1, length = entries == null ? 0 : entries.length;
-  this.clear();
-  while (++index < length) {
-    var entry = entries[index];
-    this.set(entry[0], entry[1]);
-  }
-}
-Hash$1.prototype.clear = hashClear;
-Hash$1.prototype["delete"] = hashDelete;
-Hash$1.prototype.get = hashGet;
-Hash$1.prototype.has = hashHas;
-Hash$1.prototype.set = hashSet;
-var _Hash = Hash$1;
-var Hash = _Hash, ListCache$2 = _ListCache, Map$3 = _Map;
-function mapCacheClear$1() {
-  this.size = 0;
-  this.__data__ = {
-    "hash": new Hash(),
-    "map": new (Map$3 || ListCache$2)(),
-    "string": new Hash()
-  };
-}
-var _mapCacheClear = mapCacheClear$1;
-function isKeyable$1(value) {
-  var type = typeof value;
-  return type == "string" || type == "number" || type == "symbol" || type == "boolean" ? value !== "__proto__" : value === null;
-}
-var _isKeyable = isKeyable$1;
-var isKeyable = _isKeyable;
-function getMapData$4(map2, key) {
-  var data = map2.__data__;
-  return isKeyable(key) ? data[typeof key == "string" ? "string" : "hash"] : data.map;
-}
-var _getMapData = getMapData$4;
-var getMapData$3 = _getMapData;
-function mapCacheDelete$1(key) {
-  var result = getMapData$3(this, key)["delete"](key);
-  this.size -= result ? 1 : 0;
-  return result;
-}
-var _mapCacheDelete = mapCacheDelete$1;
-var getMapData$2 = _getMapData;
-function mapCacheGet$1(key) {
-  return getMapData$2(this, key).get(key);
-}
-var _mapCacheGet = mapCacheGet$1;
-var getMapData$1 = _getMapData;
-function mapCacheHas$1(key) {
-  return getMapData$1(this, key).has(key);
-}
-var _mapCacheHas = mapCacheHas$1;
-var getMapData = _getMapData;
-function mapCacheSet$1(key, value) {
-  var data = getMapData(this, key), size = data.size;
-  data.set(key, value);
-  this.size += data.size == size ? 0 : 1;
-  return this;
-}
-var _mapCacheSet = mapCacheSet$1;
-var mapCacheClear = _mapCacheClear, mapCacheDelete = _mapCacheDelete, mapCacheGet = _mapCacheGet, mapCacheHas = _mapCacheHas, mapCacheSet = _mapCacheSet;
-function MapCache$1(entries) {
-  var index = -1, length = entries == null ? 0 : entries.length;
-  this.clear();
-  while (++index < length) {
-    var entry = entries[index];
-    this.set(entry[0], entry[1]);
-  }
-}
-MapCache$1.prototype.clear = mapCacheClear;
-MapCache$1.prototype["delete"] = mapCacheDelete;
-MapCache$1.prototype.get = mapCacheGet;
-MapCache$1.prototype.has = mapCacheHas;
-MapCache$1.prototype.set = mapCacheSet;
-var _MapCache = MapCache$1;
-var ListCache$1 = _ListCache, Map$2 = _Map, MapCache = _MapCache;
-var LARGE_ARRAY_SIZE = 200;
-function stackSet$1(key, value) {
-  var data = this.__data__;
-  if (data instanceof ListCache$1) {
-    var pairs = data.__data__;
-    if (!Map$2 || pairs.length < LARGE_ARRAY_SIZE - 1) {
-      pairs.push([key, value]);
-      this.size = ++data.size;
-      return this;
-    }
-    data = this.__data__ = new MapCache(pairs);
-  }
-  data.set(key, value);
-  this.size = data.size;
-  return this;
-}
-var _stackSet = stackSet$1;
-var ListCache = _ListCache, stackClear = _stackClear, stackDelete = _stackDelete, stackGet = _stackGet, stackHas = _stackHas, stackSet = _stackSet;
-function Stack$1(entries) {
-  var data = this.__data__ = new ListCache(entries);
-  this.size = data.size;
-}
-Stack$1.prototype.clear = stackClear;
-Stack$1.prototype["delete"] = stackDelete;
-Stack$1.prototype.get = stackGet;
-Stack$1.prototype.has = stackHas;
-Stack$1.prototype.set = stackSet;
-var _Stack = Stack$1;
-function arrayEach$1(array, iteratee) {
-  var index = -1, length = array == null ? 0 : array.length;
-  while (++index < length) {
-    if (iteratee(array[index], index, array) === false) {
-      break;
-    }
-  }
-  return array;
-}
-var _arrayEach = arrayEach$1;
-var getNative$4 = _getNative;
-var defineProperty$2 = function() {
-  try {
-    var func = getNative$4(Object, "defineProperty");
-    func({}, "", {});
-    return func;
-  } catch (e) {
-  }
-}();
-var _defineProperty = defineProperty$2;
-var defineProperty$1 = _defineProperty;
-function baseAssignValue$2(object, key, value) {
-  if (key == "__proto__" && defineProperty$1) {
-    defineProperty$1(object, key, {
-      "configurable": true,
-      "enumerable": true,
-      "value": value,
-      "writable": true
-    });
-  } else {
-    object[key] = value;
-  }
-}
-var _baseAssignValue = baseAssignValue$2;
-var baseAssignValue$1 = _baseAssignValue, eq$3 = eq_1$1;
-var objectProto$e = Object.prototype;
-var hasOwnProperty$8 = objectProto$e.hasOwnProperty;
-function assignValue$2(object, key, value) {
-  var objValue = object[key];
-  if (!(hasOwnProperty$8.call(object, key) && eq$3(objValue, value)) || value === void 0 && !(key in object)) {
-    baseAssignValue$1(object, key, value);
-  }
-}
-var _assignValue = assignValue$2;
-var assignValue$1 = _assignValue, baseAssignValue = _baseAssignValue;
-function copyObject$4(source, props, object, customizer) {
-  var isNew = !object;
-  object || (object = {});
-  var index = -1, length = props.length;
-  while (++index < length) {
-    var key = props[index];
-    var newValue = customizer ? customizer(object[key], source[key], key, object, source) : void 0;
-    if (newValue === void 0) {
-      newValue = source[key];
-    }
-    if (isNew) {
-      baseAssignValue(object, key, newValue);
-    } else {
-      assignValue$1(object, key, newValue);
-    }
-  }
-  return object;
-}
-var _copyObject = copyObject$4;
-function baseTimes$2(n, iteratee) {
-  var index = -1, result = Array(n);
-  while (++index < n) {
-    result[index] = iteratee(index);
-  }
-  return result;
-}
-var _baseTimes = baseTimes$2;
-function isObjectLike$e(value) {
-  return value != null && typeof value == "object";
-}
-var isObjectLike_1 = isObjectLike$e;
-var baseGetTag$2 = _baseGetTag, isObjectLike$d = isObjectLike_1;
-var argsTag$3 = "[object Arguments]";
-function baseIsArguments$1(value) {
-  return isObjectLike$d(value) && baseGetTag$2(value) == argsTag$3;
-}
-var _baseIsArguments = baseIsArguments$1;
-var baseIsArguments = _baseIsArguments, isObjectLike$c = isObjectLike_1;
-var objectProto$d = Object.prototype;
-var hasOwnProperty$7 = objectProto$d.hasOwnProperty;
-var propertyIsEnumerable$2 = objectProto$d.propertyIsEnumerable;
-var isArguments$2 = baseIsArguments(/* @__PURE__ */ function() {
-  return arguments;
-}()) ? baseIsArguments : function(value) {
-  return isObjectLike$c(value) && hasOwnProperty$7.call(value, "callee") && !propertyIsEnumerable$2.call(value, "callee");
-};
-var isArguments_1 = isArguments$2;
-var isArray$6 = Array.isArray;
-var isArray_1 = isArray$6;
-var isBuffer$2 = { exports: {} };
-function stubFalse() {
-  return false;
-}
-var stubFalse_1 = stubFalse;
-isBuffer$2.exports;
-(function(module, exports$1) {
-  var root2 = _root, stubFalse2 = stubFalse_1;
-  var freeExports = exports$1 && !exports$1.nodeType && exports$1;
-  var freeModule = freeExports && true && module && !module.nodeType && module;
-  var moduleExports = freeModule && freeModule.exports === freeExports;
-  var Buffer2 = moduleExports ? root2.Buffer : void 0;
-  var nativeIsBuffer = Buffer2 ? Buffer2.isBuffer : void 0;
-  var isBuffer2 = nativeIsBuffer || stubFalse2;
-  module.exports = isBuffer2;
-})(isBuffer$2, isBuffer$2.exports);
-var isBufferExports = isBuffer$2.exports;
-var MAX_SAFE_INTEGER$4 = 9007199254740991;
-var reIsUint$1 = /^(?:0|[1-9]\d*)$/;
-function isIndex$2(value, length) {
-  var type = typeof value;
-  length = length == null ? MAX_SAFE_INTEGER$4 : length;
-  return !!length && (type == "number" || type != "symbol" && reIsUint$1.test(value)) && (value > -1 && value % 1 == 0 && value < length);
-}
-var _isIndex = isIndex$2;
-var MAX_SAFE_INTEGER$3 = 9007199254740991;
-function isLength$3(value) {
-  return typeof value == "number" && value > -1 && value % 1 == 0 && value <= MAX_SAFE_INTEGER$3;
-}
-var isLength_1 = isLength$3;
-var baseGetTag$1 = _baseGetTag, isLength$2 = isLength_1, isObjectLike$b = isObjectLike_1;
-var argsTag$2 = "[object Arguments]", arrayTag$1 = "[object Array]", boolTag$3 = "[object Boolean]", dateTag$2 = "[object Date]", errorTag$1 = "[object Error]", funcTag$2 = "[object Function]", mapTag$4 = "[object Map]", numberTag$3 = "[object Number]", objectTag$3 = "[object Object]", regexpTag$2 = "[object RegExp]", setTag$4 = "[object Set]", stringTag$4 = "[object String]", weakMapTag$2 = "[object WeakMap]";
-var arrayBufferTag$2 = "[object ArrayBuffer]", dataViewTag$3 = "[object DataView]", float32Tag$2 = "[object Float32Array]", float64Tag$2 = "[object Float64Array]", int8Tag$2 = "[object Int8Array]", int16Tag$2 = "[object Int16Array]", int32Tag$2 = "[object Int32Array]", uint8Tag$2 = "[object Uint8Array]", uint8ClampedTag$2 = "[object Uint8ClampedArray]", uint16Tag$2 = "[object Uint16Array]", uint32Tag$2 = "[object Uint32Array]";
-var typedArrayTags = {};
-typedArrayTags[float32Tag$2] = typedArrayTags[float64Tag$2] = typedArrayTags[int8Tag$2] = typedArrayTags[int16Tag$2] = typedArrayTags[int32Tag$2] = typedArrayTags[uint8Tag$2] = typedArrayTags[uint8ClampedTag$2] = typedArrayTags[uint16Tag$2] = typedArrayTags[uint32Tag$2] = true;
-typedArrayTags[argsTag$2] = typedArrayTags[arrayTag$1] = typedArrayTags[arrayBufferTag$2] = typedArrayTags[boolTag$3] = typedArrayTags[dataViewTag$3] = typedArrayTags[dateTag$2] = typedArrayTags[errorTag$1] = typedArrayTags[funcTag$2] = typedArrayTags[mapTag$4] = typedArrayTags[numberTag$3] = typedArrayTags[objectTag$3] = typedArrayTags[regexpTag$2] = typedArrayTags[setTag$4] = typedArrayTags[stringTag$4] = typedArrayTags[weakMapTag$2] = false;
-function baseIsTypedArray$1(value) {
-  return isObjectLike$b(value) && isLength$2(value.length) && !!typedArrayTags[baseGetTag$1(value)];
-}
-var _baseIsTypedArray = baseIsTypedArray$1;
-function baseUnary$3(func) {
-  return function(value) {
-    return func(value);
-  };
-}
-var _baseUnary = baseUnary$3;
-var _nodeUtil = { exports: {} };
-_nodeUtil.exports;
-(function(module, exports$1) {
-  var freeGlobal2 = _freeGlobal;
-  var freeExports = exports$1 && !exports$1.nodeType && exports$1;
-  var freeModule = freeExports && true && module && !module.nodeType && module;
-  var moduleExports = freeModule && freeModule.exports === freeExports;
-  var freeProcess = moduleExports && freeGlobal2.process;
-  var nodeUtil2 = function() {
-    try {
-      var types2 = freeModule && freeModule.require && freeModule.require("util").types;
-      if (types2) {
-        return types2;
-      }
-      return freeProcess && freeProcess.binding && freeProcess.binding("util");
-    } catch (e) {
-    }
-  }();
-  module.exports = nodeUtil2;
-})(_nodeUtil, _nodeUtil.exports);
-var _nodeUtilExports = _nodeUtil.exports;
-var baseIsTypedArray = _baseIsTypedArray, baseUnary$2 = _baseUnary, nodeUtil$2 = _nodeUtilExports;
-var nodeIsTypedArray = nodeUtil$2 && nodeUtil$2.isTypedArray;
-var isTypedArray$1 = nodeIsTypedArray ? baseUnary$2(nodeIsTypedArray) : baseIsTypedArray;
-var isTypedArray_1 = isTypedArray$1;
-var baseTimes$1 = _baseTimes, isArguments$1 = isArguments_1, isArray$5 = isArray_1, isBuffer$1 = isBufferExports, isIndex$1 = _isIndex, isTypedArray = isTypedArray_1;
-var objectProto$c = Object.prototype;
-var hasOwnProperty$6 = objectProto$c.hasOwnProperty;
-function arrayLikeKeys$3(value, inherited) {
-  var isArr = isArray$5(value), isArg = !isArr && isArguments$1(value), isBuff = !isArr && !isArg && isBuffer$1(value), isType2 = !isArr && !isArg && !isBuff && isTypedArray(value), skipIndexes = isArr || isArg || isBuff || isType2, result = skipIndexes ? baseTimes$1(value.length, String) : [], length = result.length;
-  for (var key in value) {
-    if ((inherited || hasOwnProperty$6.call(value, key)) && !(skipIndexes && // Safari 9 has enumerable `arguments.length` in strict mode.
-    (key == "length" || // Node.js 0.10 has enumerable non-index properties on buffers.
-    isBuff && (key == "offset" || key == "parent") || // PhantomJS 2 has enumerable non-index properties on typed arrays.
-    isType2 && (key == "buffer" || key == "byteLength" || key == "byteOffset") || // Skip index properties.
-    isIndex$1(key, length)))) {
-      result.push(key);
-    }
-  }
-  return result;
-}
-var _arrayLikeKeys = arrayLikeKeys$3;
-var objectProto$b = Object.prototype;
-function isPrototype$4(value) {
-  var Ctor = value && value.constructor, proto = typeof Ctor == "function" && Ctor.prototype || objectProto$b;
-  return value === proto;
-}
-var _isPrototype = isPrototype$4;
-function overArg$4(func, transform) {
-  return function(arg) {
-    return func(transform(arg));
-  };
-}
-var _overArg = overArg$4;
-var overArg$3 = _overArg;
-var nativeKeys$2 = overArg$3(Object.keys, Object);
-var _nativeKeys = nativeKeys$2;
-var isPrototype$3 = _isPrototype, nativeKeys$1 = _nativeKeys;
-var objectProto$a = Object.prototype;
-var hasOwnProperty$5 = objectProto$a.hasOwnProperty;
-function baseKeys$2(object) {
-  if (!isPrototype$3(object)) {
-    return nativeKeys$1(object);
-  }
-  var result = [];
-  for (var key in Object(object)) {
-    if (hasOwnProperty$5.call(object, key) && key != "constructor") {
-      result.push(key);
-    }
-  }
-  return result;
-}
-var _baseKeys = baseKeys$2;
-var isFunction$1 = isFunction_1, isLength$1 = isLength_1;
-function isArrayLike$3(value) {
-  return value != null && isLength$1(value.length) && !isFunction$1(value);
-}
-var isArrayLike_1 = isArrayLike$3;
-var arrayLikeKeys$2 = _arrayLikeKeys, baseKeys$1 = _baseKeys, isArrayLike$2 = isArrayLike_1;
-function keys$4(object) {
-  return isArrayLike$2(object) ? arrayLikeKeys$2(object) : baseKeys$1(object);
-}
-var keys_1 = keys$4;
-var copyObject$3 = _copyObject, keys$3 = keys_1;
-function baseAssign$1(object, source) {
-  return object && copyObject$3(source, keys$3(source), object);
-}
-var _baseAssign = baseAssign$1;
-function nativeKeysIn$1(object) {
-  var result = [];
-  if (object != null) {
-    for (var key in Object(object)) {
-      result.push(key);
-    }
-  }
-  return result;
-}
-var _nativeKeysIn = nativeKeysIn$1;
-var isObject$7 = isObject_1, isPrototype$2 = _isPrototype, nativeKeysIn = _nativeKeysIn;
-var objectProto$9 = Object.prototype;
-var hasOwnProperty$4 = objectProto$9.hasOwnProperty;
-function baseKeysIn$1(object) {
-  if (!isObject$7(object)) {
-    return nativeKeysIn(object);
-  }
-  var isProto = isPrototype$2(object), result = [];
-  for (var key in object) {
-    if (!(key == "constructor" && (isProto || !hasOwnProperty$4.call(object, key)))) {
-      result.push(key);
-    }
-  }
-  return result;
-}
-var _baseKeysIn = baseKeysIn$1;
-var arrayLikeKeys$1 = _arrayLikeKeys, baseKeysIn = _baseKeysIn, isArrayLike$1 = isArrayLike_1;
-function keysIn$3(object) {
-  return isArrayLike$1(object) ? arrayLikeKeys$1(object, true) : baseKeysIn(object);
-}
-var keysIn_1 = keysIn$3;
-var copyObject$2 = _copyObject, keysIn$2 = keysIn_1;
-function baseAssignIn$1(object, source) {
-  return object && copyObject$2(source, keysIn$2(source), object);
-}
-var _baseAssignIn = baseAssignIn$1;
-var _cloneBuffer = { exports: {} };
-_cloneBuffer.exports;
-(function(module, exports$1) {
-  var root2 = _root;
-  var freeExports = exports$1 && !exports$1.nodeType && exports$1;
-  var freeModule = freeExports && true && module && !module.nodeType && module;
-  var moduleExports = freeModule && freeModule.exports === freeExports;
-  var Buffer2 = moduleExports ? root2.Buffer : void 0, allocUnsafe = Buffer2 ? Buffer2.allocUnsafe : void 0;
-  function cloneBuffer2(buffer, isDeep) {
-    if (isDeep) {
-      return buffer.slice();
-    }
-    var length = buffer.length, result = allocUnsafe ? allocUnsafe(length) : new buffer.constructor(length);
-    buffer.copy(result);
-    return result;
-  }
-  module.exports = cloneBuffer2;
-})(_cloneBuffer, _cloneBuffer.exports);
-var _cloneBufferExports = _cloneBuffer.exports;
-function copyArray$1(source, array) {
-  var index = -1, length = source.length;
-  array || (array = Array(length));
-  while (++index < length) {
-    array[index] = source[index];
-  }
-  return array;
-}
-var _copyArray = copyArray$1;
-function arrayFilter$1(array, predicate) {
-  var index = -1, length = array == null ? 0 : array.length, resIndex = 0, result = [];
-  while (++index < length) {
-    var value = array[index];
-    if (predicate(value, index, array)) {
-      result[resIndex++] = value;
-    }
-  }
-  return result;
-}
-var _arrayFilter = arrayFilter$1;
-function stubArray$2() {
-  return [];
-}
-var stubArray_1 = stubArray$2;
-var arrayFilter = _arrayFilter, stubArray$1 = stubArray_1;
-var objectProto$8 = Object.prototype;
-var propertyIsEnumerable$1 = objectProto$8.propertyIsEnumerable;
-var nativeGetSymbols$1 = Object.getOwnPropertySymbols;
-var getSymbols$3 = !nativeGetSymbols$1 ? stubArray$1 : function(object) {
-  if (object == null) {
-    return [];
-  }
-  object = Object(object);
-  return arrayFilter(nativeGetSymbols$1(object), function(symbol) {
-    return propertyIsEnumerable$1.call(object, symbol);
-  });
-};
-var _getSymbols = getSymbols$3;
-var copyObject$1 = _copyObject, getSymbols$2 = _getSymbols;
-function copySymbols$1(source, object) {
-  return copyObject$1(source, getSymbols$2(source), object);
-}
-var _copySymbols = copySymbols$1;
-function arrayPush$2(array, values2) {
-  var index = -1, length = values2.length, offset = array.length;
-  while (++index < length) {
-    array[offset + index] = values2[index];
-  }
-  return array;
-}
-var _arrayPush = arrayPush$2;
-var overArg$2 = _overArg;
-var getPrototype$3 = overArg$2(Object.getPrototypeOf, Object);
-var _getPrototype = getPrototype$3;
-var arrayPush$1 = _arrayPush, getPrototype$2 = _getPrototype, getSymbols$1 = _getSymbols, stubArray = stubArray_1;
-var nativeGetSymbols = Object.getOwnPropertySymbols;
-var getSymbolsIn$2 = !nativeGetSymbols ? stubArray : function(object) {
-  var result = [];
-  while (object) {
-    arrayPush$1(result, getSymbols$1(object));
-    object = getPrototype$2(object);
-  }
-  return result;
-};
-var _getSymbolsIn = getSymbolsIn$2;
-var copyObject = _copyObject, getSymbolsIn$1 = _getSymbolsIn;
-function copySymbolsIn$1(source, object) {
-  return copyObject(source, getSymbolsIn$1(source), object);
-}
-var _copySymbolsIn = copySymbolsIn$1;
-var arrayPush = _arrayPush, isArray$4 = isArray_1;
-function baseGetAllKeys$2(object, keysFunc, symbolsFunc) {
-  var result = keysFunc(object);
-  return isArray$4(object) ? result : arrayPush(result, symbolsFunc(object));
-}
-var _baseGetAllKeys = baseGetAllKeys$2;
-var baseGetAllKeys$1 = _baseGetAllKeys, getSymbols = _getSymbols, keys$2 = keys_1;
-function getAllKeys$1(object) {
-  return baseGetAllKeys$1(object, keys$2, getSymbols);
-}
-var _getAllKeys = getAllKeys$1;
-var baseGetAllKeys = _baseGetAllKeys, getSymbolsIn = _getSymbolsIn, keysIn$1 = keysIn_1;
-function getAllKeysIn$1(object) {
-  return baseGetAllKeys(object, keysIn$1, getSymbolsIn);
-}
-var _getAllKeysIn = getAllKeysIn$1;
-var getNative$3 = _getNative, root$4 = _root;
-var DataView$1 = getNative$3(root$4, "DataView");
-var _DataView = DataView$1;
-var getNative$2 = _getNative, root$3 = _root;
-var Promise$2 = getNative$2(root$3, "Promise");
-var _Promise = Promise$2;
-var getNative$1 = _getNative, root$2 = _root;
-var Set$2 = getNative$1(root$2, "Set");
-var _Set = Set$2;
-var getNative = _getNative, root$1 = _root;
-var WeakMap$2 = getNative(root$1, "WeakMap");
-var _WeakMap = WeakMap$2;
-var DataView = _DataView, Map$1 = _Map, Promise$1 = _Promise, Set$1 = _Set, WeakMap$1 = _WeakMap, baseGetTag = _baseGetTag, toSource = _toSource;
-var mapTag$3 = "[object Map]", objectTag$2 = "[object Object]", promiseTag = "[object Promise]", setTag$3 = "[object Set]", weakMapTag$1 = "[object WeakMap]";
-var dataViewTag$2 = "[object DataView]";
-var dataViewCtorString = toSource(DataView), mapCtorString = toSource(Map$1), promiseCtorString = toSource(Promise$1), setCtorString = toSource(Set$1), weakMapCtorString = toSource(WeakMap$1);
-var getTag$3 = baseGetTag;
-if (DataView && getTag$3(new DataView(new ArrayBuffer(1))) != dataViewTag$2 || Map$1 && getTag$3(new Map$1()) != mapTag$3 || Promise$1 && getTag$3(Promise$1.resolve()) != promiseTag || Set$1 && getTag$3(new Set$1()) != setTag$3 || WeakMap$1 && getTag$3(new WeakMap$1()) != weakMapTag$1) {
-  getTag$3 = function(value) {
-    var result = baseGetTag(value), Ctor = result == objectTag$2 ? value.constructor : void 0, ctorString = Ctor ? toSource(Ctor) : "";
-    if (ctorString) {
-      switch (ctorString) {
-        case dataViewCtorString:
-          return dataViewTag$2;
-        case mapCtorString:
-          return mapTag$3;
-        case promiseCtorString:
-          return promiseTag;
-        case setCtorString:
-          return setTag$3;
-        case weakMapCtorString:
-          return weakMapTag$1;
-      }
-    }
-    return result;
-  };
-}
-var _getTag = getTag$3;
-var objectProto$7 = Object.prototype;
-var hasOwnProperty$3 = objectProto$7.hasOwnProperty;
-function initCloneArray$1(array) {
-  var length = array.length, result = new array.constructor(length);
-  if (length && typeof array[0] == "string" && hasOwnProperty$3.call(array, "index")) {
-    result.index = array.index;
-    result.input = array.input;
-  }
-  return result;
-}
-var _initCloneArray = initCloneArray$1;
-var root = _root;
-var Uint8Array$2 = root.Uint8Array;
-var _Uint8Array = Uint8Array$2;
-var Uint8Array$1 = _Uint8Array;
-function cloneArrayBuffer$3(arrayBuffer) {
-  var result = new arrayBuffer.constructor(arrayBuffer.byteLength);
-  new Uint8Array$1(result).set(new Uint8Array$1(arrayBuffer));
-  return result;
-}
-var _cloneArrayBuffer = cloneArrayBuffer$3;
-var cloneArrayBuffer$2 = _cloneArrayBuffer;
-function cloneDataView$1(dataView, isDeep) {
-  var buffer = isDeep ? cloneArrayBuffer$2(dataView.buffer) : dataView.buffer;
-  return new dataView.constructor(buffer, dataView.byteOffset, dataView.byteLength);
-}
-var _cloneDataView = cloneDataView$1;
-var reFlags = /\w*$/;
-function cloneRegExp$1(regexp) {
-  var result = new regexp.constructor(regexp.source, reFlags.exec(regexp));
-  result.lastIndex = regexp.lastIndex;
-  return result;
-}
-var _cloneRegExp = cloneRegExp$1;
-var Symbol$1 = _Symbol;
-var symbolProto = Symbol$1 ? Symbol$1.prototype : void 0, symbolValueOf = symbolProto ? symbolProto.valueOf : void 0;
-function cloneSymbol$1(symbol) {
-  return symbolValueOf ? Object(symbolValueOf.call(symbol)) : {};
-}
-var _cloneSymbol = cloneSymbol$1;
-var cloneArrayBuffer$1 = _cloneArrayBuffer;
-function cloneTypedArray$1(typedArray, isDeep) {
-  var buffer = isDeep ? cloneArrayBuffer$1(typedArray.buffer) : typedArray.buffer;
-  return new typedArray.constructor(buffer, typedArray.byteOffset, typedArray.length);
-}
-var _cloneTypedArray = cloneTypedArray$1;
-var cloneArrayBuffer = _cloneArrayBuffer, cloneDataView = _cloneDataView, cloneRegExp = _cloneRegExp, cloneSymbol = _cloneSymbol, cloneTypedArray = _cloneTypedArray;
-var boolTag$2 = "[object Boolean]", dateTag$1 = "[object Date]", mapTag$2 = "[object Map]", numberTag$2 = "[object Number]", regexpTag$1 = "[object RegExp]", setTag$2 = "[object Set]", stringTag$3 = "[object String]", symbolTag$4 = "[object Symbol]";
-var arrayBufferTag$1 = "[object ArrayBuffer]", dataViewTag$1 = "[object DataView]", float32Tag$1 = "[object Float32Array]", float64Tag$1 = "[object Float64Array]", int8Tag$1 = "[object Int8Array]", int16Tag$1 = "[object Int16Array]", int32Tag$1 = "[object Int32Array]", uint8Tag$1 = "[object Uint8Array]", uint8ClampedTag$1 = "[object Uint8ClampedArray]", uint16Tag$1 = "[object Uint16Array]", uint32Tag$1 = "[object Uint32Array]";
-function initCloneByTag$1(object, tag2, isDeep) {
-  var Ctor = object.constructor;
-  switch (tag2) {
-    case arrayBufferTag$1:
-      return cloneArrayBuffer(object);
-    case boolTag$2:
-    case dateTag$1:
-      return new Ctor(+object);
-    case dataViewTag$1:
-      return cloneDataView(object, isDeep);
-    case float32Tag$1:
-    case float64Tag$1:
-    case int8Tag$1:
-    case int16Tag$1:
-    case int32Tag$1:
-    case uint8Tag$1:
-    case uint8ClampedTag$1:
-    case uint16Tag$1:
-    case uint32Tag$1:
-      return cloneTypedArray(object, isDeep);
-    case mapTag$2:
-      return new Ctor();
-    case numberTag$2:
-    case stringTag$3:
-      return new Ctor(object);
-    case regexpTag$1:
-      return cloneRegExp(object);
-    case setTag$2:
-      return new Ctor();
-    case symbolTag$4:
-      return cloneSymbol(object);
-  }
-}
-var _initCloneByTag = initCloneByTag$1;
-var isObject$6 = isObject_1;
-var objectCreate = Object.create;
-var baseCreate$1 = /* @__PURE__ */ function() {
-  function object() {
-  }
-  return function(proto) {
-    if (!isObject$6(proto)) {
-      return {};
-    }
-    if (objectCreate) {
-      return objectCreate(proto);
-    }
-    object.prototype = proto;
-    var result = new object();
-    object.prototype = void 0;
-    return result;
-  };
-}();
-var _baseCreate = baseCreate$1;
-var baseCreate = _baseCreate, getPrototype$1 = _getPrototype, isPrototype$1 = _isPrototype;
-function initCloneObject$1(object) {
-  return typeof object.constructor == "function" && !isPrototype$1(object) ? baseCreate(getPrototype$1(object)) : {};
-}
-var _initCloneObject = initCloneObject$1;
-var getTag$2 = _getTag, isObjectLike$a = isObjectLike_1;
-var mapTag$1 = "[object Map]";
-function baseIsMap$1(value) {
-  return isObjectLike$a(value) && getTag$2(value) == mapTag$1;
-}
-var _baseIsMap = baseIsMap$1;
-var baseIsMap = _baseIsMap, baseUnary$1 = _baseUnary, nodeUtil$1 = _nodeUtilExports;
-var nodeIsMap = nodeUtil$1 && nodeUtil$1.isMap;
-var isMap$1 = nodeIsMap ? baseUnary$1(nodeIsMap) : baseIsMap;
-var isMap_1 = isMap$1;
-var getTag$1 = _getTag, isObjectLike$9 = isObjectLike_1;
-var setTag$1 = "[object Set]";
-function baseIsSet$1(value) {
-  return isObjectLike$9(value) && getTag$1(value) == setTag$1;
-}
-var _baseIsSet = baseIsSet$1;
-var baseIsSet = _baseIsSet, baseUnary = _baseUnary, nodeUtil = _nodeUtilExports;
-var nodeIsSet = nodeUtil && nodeUtil.isSet;
-var isSet$1 = nodeIsSet ? baseUnary(nodeIsSet) : baseIsSet;
-var isSet_1 = isSet$1;
-var Stack = _Stack, arrayEach = _arrayEach, assignValue = _assignValue, baseAssign = _baseAssign, baseAssignIn = _baseAssignIn, cloneBuffer = _cloneBufferExports, copyArray = _copyArray, copySymbols = _copySymbols, copySymbolsIn = _copySymbolsIn, getAllKeys = _getAllKeys, getAllKeysIn = _getAllKeysIn, getTag = _getTag, initCloneArray = _initCloneArray, initCloneByTag = _initCloneByTag, initCloneObject = _initCloneObject, isArray$3 = isArray_1, isBuffer = isBufferExports, isMap = isMap_1, isObject$5 = isObject_1, isSet = isSet_1, keys$1 = keys_1, keysIn = keysIn_1;
-var CLONE_DEEP_FLAG$1 = 1, CLONE_FLAT_FLAG = 2, CLONE_SYMBOLS_FLAG$1 = 4;
-var argsTag$1 = "[object Arguments]", arrayTag = "[object Array]", boolTag$1 = "[object Boolean]", dateTag = "[object Date]", errorTag = "[object Error]", funcTag$1 = "[object Function]", genTag$1 = "[object GeneratorFunction]", mapTag = "[object Map]", numberTag$1 = "[object Number]", objectTag$1 = "[object Object]", regexpTag = "[object RegExp]", setTag = "[object Set]", stringTag$2 = "[object String]", symbolTag$3 = "[object Symbol]", weakMapTag = "[object WeakMap]";
-var arrayBufferTag = "[object ArrayBuffer]", dataViewTag = "[object DataView]", float32Tag = "[object Float32Array]", float64Tag = "[object Float64Array]", int8Tag = "[object Int8Array]", int16Tag = "[object Int16Array]", int32Tag = "[object Int32Array]", uint8Tag = "[object Uint8Array]", uint8ClampedTag = "[object Uint8ClampedArray]", uint16Tag = "[object Uint16Array]", uint32Tag = "[object Uint32Array]";
-var cloneableTags = {};
-cloneableTags[argsTag$1] = cloneableTags[arrayTag] = cloneableTags[arrayBufferTag] = cloneableTags[dataViewTag] = cloneableTags[boolTag$1] = cloneableTags[dateTag] = cloneableTags[float32Tag] = cloneableTags[float64Tag] = cloneableTags[int8Tag] = cloneableTags[int16Tag] = cloneableTags[int32Tag] = cloneableTags[mapTag] = cloneableTags[numberTag$1] = cloneableTags[objectTag$1] = cloneableTags[regexpTag] = cloneableTags[setTag] = cloneableTags[stringTag$2] = cloneableTags[symbolTag$3] = cloneableTags[uint8Tag] = cloneableTags[uint8ClampedTag] = cloneableTags[uint16Tag] = cloneableTags[uint32Tag] = true;
-cloneableTags[errorTag] = cloneableTags[funcTag$1] = cloneableTags[weakMapTag] = false;
-function baseClone$1(value, bitmask, customizer, key, object, stack) {
-  var result, isDeep = bitmask & CLONE_DEEP_FLAG$1, isFlat = bitmask & CLONE_FLAT_FLAG, isFull = bitmask & CLONE_SYMBOLS_FLAG$1;
-  if (customizer) {
-    result = object ? customizer(value, key, object, stack) : customizer(value);
-  }
-  if (result !== void 0) {
-    return result;
-  }
-  if (!isObject$5(value)) {
-    return value;
-  }
-  var isArr = isArray$3(value);
-  if (isArr) {
-    result = initCloneArray(value);
-    if (!isDeep) {
-      return copyArray(value, result);
-    }
-  } else {
-    var tag2 = getTag(value), isFunc = tag2 == funcTag$1 || tag2 == genTag$1;
-    if (isBuffer(value)) {
-      return cloneBuffer(value, isDeep);
-    }
-    if (tag2 == objectTag$1 || tag2 == argsTag$1 || isFunc && !object) {
-      result = isFlat || isFunc ? {} : initCloneObject(value);
-      if (!isDeep) {
-        return isFlat ? copySymbolsIn(value, baseAssignIn(result, value)) : copySymbols(value, baseAssign(result, value));
-      }
-    } else {
-      if (!cloneableTags[tag2]) {
-        return object ? value : {};
-      }
-      result = initCloneByTag(value, tag2, isDeep);
-    }
-  }
-  stack || (stack = new Stack());
-  var stacked = stack.get(value);
-  if (stacked) {
-    return stacked;
-  }
-  stack.set(value, result);
-  if (isSet(value)) {
-    value.forEach(function(subValue) {
-      result.add(baseClone$1(subValue, bitmask, customizer, subValue, value, stack));
-    });
-  } else if (isMap(value)) {
-    value.forEach(function(subValue, key2) {
-      result.set(key2, baseClone$1(subValue, bitmask, customizer, key2, value, stack));
-    });
-  }
-  var keysFunc = isFull ? isFlat ? getAllKeysIn : getAllKeys : isFlat ? keysIn : keys$1;
-  var props = isArr ? void 0 : keysFunc(value);
-  arrayEach(props || value, function(subValue, key2) {
-    if (props) {
-      key2 = subValue;
-      subValue = value[key2];
-    }
-    assignValue(result, key2, baseClone$1(subValue, bitmask, customizer, key2, value, stack));
-  });
-  return result;
-}
-var _baseClone = baseClone$1;
-var baseClone = _baseClone;
-var CLONE_DEEP_FLAG = 1, CLONE_SYMBOLS_FLAG = 4;
-function cloneDeep(value) {
-  return baseClone(value, CLONE_DEEP_FLAG | CLONE_SYMBOLS_FLAG);
-}
-var cloneDeep_1 = cloneDeep;
-const cloneDeep$1 = /* @__PURE__ */ getDefaultExportFromCjs(cloneDeep_1);
 class CollectionRegistry {
   // Normalized runtime layer (used by Data Grid / UI)
   collectionsByTableName = /* @__PURE__ */ new Map();
@@ -3163,7 +2204,7 @@ class CollectionRegistry {
       ...c
     }));
     normalizedCollections.forEach((c, index) => {
-      const raw = cloneDeep$1(collections[index]);
+      const raw = deepClone(collections[index]);
       this.rootCollections.push(c);
       this.rawRootCollections.push(raw);
       const normalized2 = this.normalizeCollection(c);
@@ -3183,7 +2224,7 @@ class CollectionRegistry {
           if (!subCollection) return;
           this._registerRecursively(this.normalizeCollection({
             ...subCollection
-          }), cloneDeep$1(subCollection));
+          }), deepClone(subCollection));
         });
       }
     });
@@ -3191,7 +2232,7 @@ class CollectionRegistry {
     return true;
   }
   register(collection, rawCollection) {
-    const raw = rawCollection ? cloneDeep$1(rawCollection) : cloneDeep$1(collection);
+    const raw = rawCollection ? deepClone(rawCollection) : deepClone(collection);
     this.rootCollections.push(collection);
     this.rawRootCollections.push(raw);
     this._registerRecursively(collection, raw);
@@ -3215,7 +2256,7 @@ class CollectionRegistry {
         if (!subCollection) return;
         this._registerRecursively(this.normalizeCollection({
           ...subCollection
-        }), cloneDeep$1(subCollection));
+        }), deepClone(subCollection));
       });
     }
   }
@@ -3474,16 +2515,15 @@ async function loadCollectionsFromDirectory(directory) {
         const filePath = path$3.join(directory, file);
         try {
           const fileUrl = pathToFileURL(filePath).href;
-          const dynamicImport = new Function("url", "return import(url)");
-          const module = await dynamicImport(fileUrl);
+          const module = await import(fileUrl);
           if (module && module.default) {
             collections.push(module.default);
           } else {
             console.warn(`[loadCollectionsFromDirectory] File ${file} does not have a default export. Skipping.`);
           }
         } catch (err) {
-          const message2 = err instanceof Error ? err.message : String(err);
-          console.error(`[loadCollectionsFromDirectory] Failed to load collection from ${file}: ${message2}`);
+          const message = err instanceof Error ? err.message : String(err);
+          console.error(`[loadCollectionsFromDirectory] Failed to load collection from ${file}: ${message}`);
         }
       }
     }
@@ -3566,34 +2606,34 @@ class ApiError extends Error {
   statusCode;
   code;
   details;
-  constructor(statusCode, code2, message2, details) {
-    super(message2);
+  constructor(statusCode, code2, message, details) {
+    super(message);
     this.name = "ApiError";
     this.statusCode = statusCode;
     this.code = code2;
     this.details = details;
   }
   // ── Factory methods ──────────────────────────────────────────────
-  static badRequest(message2, code2 = "BAD_REQUEST", details) {
-    return new ApiError(400, code2, message2, details);
+  static badRequest(message, code2 = "BAD_REQUEST", details) {
+    return new ApiError(400, code2, message, details);
   }
-  static unauthorized(message2, code2 = "UNAUTHORIZED") {
-    return new ApiError(401, code2, message2);
+  static unauthorized(message, code2 = "UNAUTHORIZED") {
+    return new ApiError(401, code2, message);
   }
-  static forbidden(message2, code2 = "FORBIDDEN") {
-    return new ApiError(403, code2, message2);
+  static forbidden(message, code2 = "FORBIDDEN") {
+    return new ApiError(403, code2, message);
   }
-  static notFound(message2, code2 = "NOT_FOUND") {
-    return new ApiError(404, code2, message2);
+  static notFound(message, code2 = "NOT_FOUND") {
+    return new ApiError(404, code2, message);
   }
-  static conflict(message2, code2 = "CONFLICT") {
-    return new ApiError(409, code2, message2);
+  static conflict(message, code2 = "CONFLICT") {
+    return new ApiError(409, code2, message);
   }
-  static internal(message2, code2 = "INTERNAL_ERROR") {
-    return new ApiError(500, code2, message2);
+  static internal(message, code2 = "INTERNAL_ERROR") {
+    return new ApiError(500, code2, message);
   }
-  static serviceUnavailable(message2, code2 = "SERVICE_UNAVAILABLE") {
-    return new ApiError(503, code2, message2);
+  static serviceUnavailable(message, code2 = "SERVICE_UNAVAILABLE") {
+    return new ApiError(503, code2, message);
   }
 }
 const errorHandler = (err, c) => {
@@ -3633,7 +2673,8 @@ const errorHandler = (err, c) => {
   console.error(`❌ [API] ${c.req.method} ${c.req.path} → ${statusCode} ${code2}: ${logMessage}`);
   const causePg = error2.cause && typeof error2.cause === "object" ? error2.cause : void 0;
   const pgErrorCode = causePg?.code || error2.code;
-  if (pgErrorCode !== "42703" && pgErrorCode !== "42P01") {
+  const suppressStack = pgErrorCode === "42703" || pgErrorCode === "42P01" || statusCode < 500 && code2 === "BAD_REQUEST";
+  if (!suppressStack) {
     console.error(error2.stack || error2);
   }
   let clientMessage = "An unexpected error occurred";
@@ -3721,8 +2762,8 @@ function parseQueryOptions(query) {
       }
       Object.assign(options2.where, parsedWhere);
     } catch (e) {
-      const message2 = e instanceof Error ? e.message : "malformed JSON";
-      const err = new Error(`Invalid 'where' filter: ${message2}`);
+      const message = e instanceof Error ? e.message : "malformed JSON";
+      const err = new Error(`Invalid 'where' filter: ${message}`);
       err.code = "BAD_REQUEST";
       err.statusCode = 400;
       throw err;
@@ -4830,11 +3871,11 @@ var Stream$1 = require$$0$3;
 var toString2 = tostring;
 var util$4 = require$$5;
 var JWS_REGEX = /^[a-zA-Z0-9\-_]+?\.[a-zA-Z0-9\-_]+?\.([a-zA-Z0-9\-_]+)?$/;
-function isObject$4(thing) {
+function isObject$3(thing) {
   return Object.prototype.toString.call(thing) === "[object Object]";
 }
 function safeJsonParse(thing) {
-  if (isObject$4(thing))
+  if (isObject$3(thing))
     return thing;
   try {
     return JSON.parse(thing);
@@ -4960,7 +4001,7 @@ jws$5.createVerify = function createVerify(opts) {
   return new VerifyStream(opts);
 };
 var jws$4 = jws$5;
-var decode$3 = function(jwt2, options2) {
+var decode$2 = function(jwt2, options2) {
   options2 = options2 || {};
   var decoded = jws$4.decode(jwt2, options2);
   if (!decoded) {
@@ -4985,21 +4026,21 @@ var decode$3 = function(jwt2, options2) {
   }
   return payload;
 };
-var JsonWebTokenError$3 = function(message2, error2) {
-  Error.call(this, message2);
+var JsonWebTokenError$3 = function(message, error2) {
+  Error.call(this, message);
   if (Error.captureStackTrace) {
     Error.captureStackTrace(this, this.constructor);
   }
   this.name = "JsonWebTokenError";
-  this.message = message2;
+  this.message = message;
   if (error2) this.inner = error2;
 };
 JsonWebTokenError$3.prototype = Object.create(Error.prototype);
 JsonWebTokenError$3.prototype.constructor = JsonWebTokenError$3;
 var JsonWebTokenError_1 = JsonWebTokenError$3;
 var JsonWebTokenError$2 = JsonWebTokenError_1;
-var NotBeforeError$1 = function(message2, date) {
-  JsonWebTokenError$2.call(this, message2);
+var NotBeforeError$1 = function(message, date) {
+  JsonWebTokenError$2.call(this, message);
   this.name = "NotBeforeError";
   this.date = date;
 };
@@ -5007,8 +4048,8 @@ NotBeforeError$1.prototype = Object.create(JsonWebTokenError$2.prototype);
 NotBeforeError$1.prototype.constructor = NotBeforeError$1;
 var NotBeforeError_1 = NotBeforeError$1;
 var JsonWebTokenError$1 = JsonWebTokenError_1;
-var TokenExpiredError$1 = function(message2, expiredAt) {
-  JsonWebTokenError$1.call(this, message2);
+var TokenExpiredError$1 = function(message, expiredAt) {
+  JsonWebTokenError$1.call(this, message);
   this.name = "TokenExpiredError";
   this.expiredAt = expiredAt;
 };
@@ -5873,7 +4914,7 @@ function requireRange() {
     parseRange(range2) {
       const memoOpts = (this.options.includePrerelease && FLAG_INCLUDE_PRERELEASE) | (this.options.loose && FLAG_LOOSE);
       const memoKey = memoOpts + ":" + range2;
-      const cached = cache2.get(memoKey);
+      const cached = cache.get(memoKey);
       if (cached) {
         return cached;
       }
@@ -5907,7 +4948,7 @@ function requireRange() {
         rangeMap.delete("");
       }
       const result = [...rangeMap.values()];
-      cache2.set(memoKey, result);
+      cache.set(memoKey, result);
       return result;
     }
     intersects(range2, options2) {
@@ -5946,7 +4987,7 @@ function requireRange() {
   }
   range = Range2;
   const LRU = lrucache;
-  const cache2 = new LRU();
+  const cache = new LRU();
   const parseOptions2 = parseOptions_1;
   const Comparator2 = requireComparator();
   const debug2 = debug_1;
@@ -6823,7 +5864,7 @@ var psSupported = semver.satisfies(process.version, "^6.12.0 || >=8.0.0");
 const JsonWebTokenError = JsonWebTokenError_1;
 const NotBeforeError = NotBeforeError_1;
 const TokenExpiredError = TokenExpiredError_1;
-const decode$2 = decode$3;
+const decode$1 = decode$2;
 const timespan$1 = timespan$2;
 const validateAsymmetricKey$1 = validateAsymmetricKey$2;
 const PS_SUPPORTED$1 = psSupported;
@@ -6877,7 +5918,7 @@ var verify2 = function(jwtString, secretOrPublicKey, options2, callback) {
   }
   let decodedToken;
   try {
-    decodedToken = decode$2(jwtString, { complete: true });
+    decodedToken = decode$1(jwtString, { complete: true });
   } catch (err) {
     return done(err);
   }
@@ -7137,27 +6178,27 @@ function isArrayLike(value) {
   return value != null && isLength(value.length) && !isFunction(value);
 }
 function isArrayLikeObject(value) {
-  return isObjectLike$8(value) && isArrayLike(value);
+  return isObjectLike$7(value) && isArrayLike(value);
 }
 function isFunction(value) {
-  var tag2 = isObject$3(value) ? objectToString$6.call(value) : "";
-  return tag2 == funcTag || tag2 == genTag;
+  var tag = isObject$2(value) ? objectToString$6.call(value) : "";
+  return tag == funcTag || tag == genTag;
 }
 function isLength(value) {
   return typeof value == "number" && value > -1 && value % 1 == 0 && value <= MAX_SAFE_INTEGER;
 }
-function isObject$3(value) {
+function isObject$2(value) {
   var type = typeof value;
   return !!value && (type == "object" || type == "function");
 }
-function isObjectLike$8(value) {
+function isObjectLike$7(value) {
   return !!value && typeof value == "object";
 }
 function isString$2(value) {
-  return typeof value == "string" || !isArray$2(value) && isObjectLike$8(value) && objectToString$6.call(value) == stringTag$1;
+  return typeof value == "string" || !isArray$2(value) && isObjectLike$7(value) && objectToString$6.call(value) == stringTag$1;
 }
 function isSymbol$2(value) {
-  return typeof value == "symbol" || isObjectLike$8(value) && objectToString$6.call(value) == symbolTag$2;
+  return typeof value == "symbol" || isObjectLike$7(value) && objectToString$6.call(value) == symbolTag$2;
 }
 function toFinite$2(value) {
   if (!value) {
@@ -7181,9 +6222,9 @@ function toNumber$2(value) {
   if (isSymbol$2(value)) {
     return NAN$2;
   }
-  if (isObject$3(value)) {
+  if (isObject$2(value)) {
     var other = typeof value.valueOf == "function" ? value.valueOf() : value;
-    value = isObject$3(other) ? other + "" : other;
+    value = isObject$2(other) ? other + "" : other;
   }
   if (typeof value != "string") {
     return value === 0 ? value : +value;
@@ -7203,9 +6244,9 @@ var boolTag = "[object Boolean]";
 var objectProto$5 = Object.prototype;
 var objectToString$5 = objectProto$5.toString;
 function isBoolean$1(value) {
-  return value === true || value === false || isObjectLike$7(value) && objectToString$5.call(value) == boolTag;
+  return value === true || value === false || isObjectLike$6(value) && objectToString$5.call(value) == boolTag;
 }
-function isObjectLike$7(value) {
+function isObjectLike$6(value) {
   return !!value && typeof value == "object";
 }
 var lodash_isboolean = isBoolean$1;
@@ -7221,15 +6262,15 @@ var objectToString$4 = objectProto$4.toString;
 function isInteger$1(value) {
   return typeof value == "number" && value == toInteger$1(value);
 }
-function isObject$2(value) {
+function isObject$1(value) {
   var type = typeof value;
   return !!value && (type == "object" || type == "function");
 }
-function isObjectLike$6(value) {
+function isObjectLike$5(value) {
   return !!value && typeof value == "object";
 }
 function isSymbol$1(value) {
-  return typeof value == "symbol" || isObjectLike$6(value) && objectToString$4.call(value) == symbolTag$1;
+  return typeof value == "symbol" || isObjectLike$5(value) && objectToString$4.call(value) == symbolTag$1;
 }
 function toFinite$1(value) {
   if (!value) {
@@ -7253,9 +6294,9 @@ function toNumber$1(value) {
   if (isSymbol$1(value)) {
     return NAN$1;
   }
-  if (isObject$2(value)) {
+  if (isObject$1(value)) {
     var other = typeof value.valueOf == "function" ? value.valueOf() : value;
-    value = isObject$2(other) ? other + "" : other;
+    value = isObject$1(other) ? other + "" : other;
   }
   if (typeof value != "string") {
     return value === 0 ? value : +value;
@@ -7268,11 +6309,11 @@ var lodash_isinteger = isInteger$1;
 var numberTag = "[object Number]";
 var objectProto$3 = Object.prototype;
 var objectToString$3 = objectProto$3.toString;
-function isObjectLike$5(value) {
+function isObjectLike$4(value) {
   return !!value && typeof value == "object";
 }
 function isNumber$1(value) {
-  return typeof value == "number" || isObjectLike$5(value) && objectToString$3.call(value) == numberTag;
+  return typeof value == "number" || isObjectLike$4(value) && objectToString$3.call(value) == numberTag;
 }
 var lodash_isnumber = isNumber$1;
 var objectTag = "[object Object]";
@@ -7297,11 +6338,11 @@ var hasOwnProperty$1 = objectProto$2.hasOwnProperty;
 var objectCtorString = funcToString.call(Object);
 var objectToString$2 = objectProto$2.toString;
 var getPrototype = overArg(Object.getPrototypeOf, Object);
-function isObjectLike$4(value) {
+function isObjectLike$3(value) {
   return !!value && typeof value == "object";
 }
 function isPlainObject$2(value) {
-  if (!isObjectLike$4(value) || objectToString$2.call(value) != objectTag || isHostObject(value)) {
+  if (!isObjectLike$3(value) || objectToString$2.call(value) != objectTag || isHostObject(value)) {
     return false;
   }
   var proto = getPrototype(value);
@@ -7316,11 +6357,11 @@ var stringTag = "[object String]";
 var objectProto$1 = Object.prototype;
 var objectToString$1 = objectProto$1.toString;
 var isArray$1 = Array.isArray;
-function isObjectLike$3(value) {
+function isObjectLike$2(value) {
   return !!value && typeof value == "object";
 }
 function isString$1(value) {
-  return typeof value == "string" || !isArray$1(value) && isObjectLike$3(value) && objectToString$1.call(value) == stringTag;
+  return typeof value == "string" || !isArray$1(value) && isObjectLike$2(value) && objectToString$1.call(value) == stringTag;
 }
 var lodash_isstring = isString$1;
 var FUNC_ERROR_TEXT = "Expected a function";
@@ -7352,15 +6393,15 @@ function before(n, func) {
 function once$1(func) {
   return before(2, func);
 }
-function isObject$1(value) {
+function isObject(value) {
   var type = typeof value;
   return !!value && (type == "object" || type == "function");
 }
-function isObjectLike$2(value) {
+function isObjectLike$1(value) {
   return !!value && typeof value == "object";
 }
 function isSymbol(value) {
-  return typeof value == "symbol" || isObjectLike$2(value) && objectToString.call(value) == symbolTag;
+  return typeof value == "symbol" || isObjectLike$1(value) && objectToString.call(value) == symbolTag;
 }
 function toFinite(value) {
   if (!value) {
@@ -7384,9 +6425,9 @@ function toNumber(value) {
   if (isSymbol(value)) {
     return NAN;
   }
-  if (isObject$1(value)) {
+  if (isObject(value)) {
     var other = typeof value.valueOf == "function" ? value.valueOf() : value;
-    value = isObject$1(other) ? other + "" : other;
+    value = isObject(other) ? other + "" : other;
   }
   if (typeof value != "string") {
     return value === 0 ? value : +value;
@@ -7477,7 +6518,7 @@ const options_for_objects = [
   "subject",
   "jwtid"
 ];
-var sign$4 = function(payload, secretOrPrivateKey, options2, callback) {
+var sign$3 = function(payload, secretOrPrivateKey, options2, callback) {
   if (typeof options2 === "function") {
     callback = options2;
     options2 = {};
@@ -7616,9 +6657,9 @@ var sign$4 = function(payload, secretOrPrivateKey, options2, callback) {
   }
 };
 var jsonwebtoken = {
-  decode: decode$3,
+  decode: decode$2,
   verify: verify2,
-  sign: sign$4,
+  sign: sign$3,
   JsonWebTokenError: JsonWebTokenError_1,
   NotBeforeError: NotBeforeError_1,
   TokenExpiredError: TokenExpiredError_1
@@ -8069,7 +7110,7 @@ function formatData(data) {
 }
 function createLogger(defaultFields = {}) {
   const minLevel = getMinLevel();
-  function emit(level, message2, data) {
+  function emit(level, message, data) {
     if (LOG_PRIORITY[level] < LOG_PRIORITY[minLevel]) return;
     const merged = {
       ...defaultFields,
@@ -8078,7 +7119,7 @@ function createLogger(defaultFields = {}) {
     if (isProduction$1()) {
       const entry = {
         severity: GCP_SEVERITY[level],
-        message: message2,
+        message,
         timestamp: (/* @__PURE__ */ new Date()).toISOString(),
         ...merged
       };
@@ -8091,7 +7132,7 @@ function createLogger(defaultFields = {}) {
     } else {
       const prefix = level === "error" ? "❌" : level === "warn" ? "⚠️" : level === "info" ? "ℹ️" : "🐛";
       const extra = Object.keys(merged).length > 0 ? ` ${JSON.stringify(merged)}` : "";
-      const out = `${prefix} [${level.toUpperCase()}] ${message2}${extra}`;
+      const out = `${prefix} [${level.toUpperCase()}] ${message}${extra}`;
       if (level === "error") {
         console.error(out);
       } else if (level === "warn") {
@@ -8452,9 +7493,9 @@ util$3.pkg = require$$0$1;
       }
       return Function.prototype[Symbol.hasInstance].call(GaxiosError, instance);
     }
-    constructor(message2, config, response, error2) {
+    constructor(message, config, response, error2) {
       var _b2;
-      super(message2);
+      super(message);
       this.config = config;
       this.response = response;
       this.error = error2;
@@ -14350,8 +13391,8 @@ const readFile$2 = fs$3.readFile ? (0, util_1$5.promisify)(fs$3.readFile) : asyn
 const GOOGLE_TOKEN_URL = "https://www.googleapis.com/oauth2/v4/token";
 const GOOGLE_REVOKE_TOKEN_URL = "https://accounts.google.com/o/oauth2/revoke?token=";
 class ErrorWithCode extends Error {
-  constructor(message2, code2) {
-    super(message2);
+  constructor(message, code2) {
+    super(message);
     this.code = code2;
   }
 }
@@ -15207,13 +14248,13 @@ class Impersonated extends oauth2client_1.OAuth2Client {
       if (!(error2 instanceof Error))
         throw error2;
       let status = 0;
-      let message2 = "";
+      let message = "";
       if (error2 instanceof gaxios_1$2.GaxiosError) {
         status = (_c2 = (_b2 = (_a2 = error2 === null || error2 === void 0 ? void 0 : error2.response) === null || _a2 === void 0 ? void 0 : _a2.data) === null || _b2 === void 0 ? void 0 : _b2.error) === null || _c2 === void 0 ? void 0 : _c2.status;
-        message2 = (_f = (_e = (_d = error2 === null || error2 === void 0 ? void 0 : error2.response) === null || _d === void 0 ? void 0 : _d.data) === null || _e === void 0 ? void 0 : _e.error) === null || _f === void 0 ? void 0 : _f.message;
+        message = (_f = (_e = (_d = error2 === null || error2 === void 0 ? void 0 : error2.response) === null || _d === void 0 ? void 0 : _d.data) === null || _e === void 0 ? void 0 : _e.error) === null || _f === void 0 ? void 0 : _f.message;
       }
-      if (status && message2) {
-        error2.message = `${status}: unable to impersonate: ${message2}`;
+      if (status && message) {
+        error2.message = `${status}: unable to impersonate: ${message}`;
         throw error2;
       } else {
         error2.message = `unable to impersonate: ${error2}`;
@@ -15375,14 +14416,14 @@ function getErrorFromOAuthErrorResponse(resp, err) {
   const errorCode = resp.error;
   const errorDescription = resp.error_description;
   const errorUri = resp.error_uri;
-  let message2 = `Error code ${errorCode}`;
+  let message = `Error code ${errorCode}`;
   if (typeof errorDescription !== "undefined") {
-    message2 += `: ${errorDescription}`;
+    message += `: ${errorDescription}`;
   }
   if (typeof errorUri !== "undefined") {
-    message2 += ` - ${errorUri}`;
+    message += ` - ${errorUri}`;
   }
-  const newError = new Error(message2);
+  const newError = new Error(message);
   if (err) {
     const keys2 = Object.keys(err);
     if (err.stack) {
@@ -16110,14 +15151,14 @@ class AwsRequestSigner {
   }
 }
 awsrequestsigner.AwsRequestSigner = AwsRequestSigner;
-async function sign$3(crypto2, key, msg) {
+async function sign$2(crypto2, key, msg) {
   return await crypto2.signWithHmacSha256(key, msg);
 }
 async function getSigningKey(crypto2, key, dateStamp, region, serviceName) {
-  const kDate = await sign$3(crypto2, `AWS4${key}`, dateStamp);
-  const kRegion = await sign$3(crypto2, kDate, region);
-  const kService = await sign$3(crypto2, kRegion, serviceName);
-  const kSigning = await sign$3(crypto2, kService, "aws4_request");
+  const kDate = await sign$2(crypto2, `AWS4${key}`, dateStamp);
+  const kRegion = await sign$2(crypto2, kDate, region);
+  const kService = await sign$2(crypto2, kRegion, serviceName);
+  const kSigning = await sign$2(crypto2, kService, "aws4_request");
   return kSigning;
 }
 async function generateAuthenticationHeaderMap(options2) {
@@ -16163,7 +15204,7 @@ ${amzDate}
 ${credentialScope}
 ` + await options2.crypto.sha256DigestHex(canonicalRequest);
   const signingKey = await getSigningKey(options2.crypto, options2.securityCredentials.secretAccessKey, dateStamp, options2.region, serviceName);
-  const signature = await sign$3(options2.crypto, signingKey, stringToSign);
+  const signature = await sign$2(options2.crypto, signingKey, stringToSign);
   const authorizationHeader = `${AWS_ALGORITHM} Credential=${options2.securityCredentials.accessKeyId}/${credentialScope}, SignedHeaders=${signedHeaders}, Signature=${(0, crypto_1.fromArrayBufferToHex)(signature)}`;
   return {
     // Do not return x-amz-date if date is available.
@@ -16494,8 +15535,8 @@ class ExecutableResponse {
 }
 executableResponse.ExecutableResponse = ExecutableResponse;
 class ExecutableResponseError extends Error {
-  constructor(message2) {
-    super(message2);
+  constructor(message) {
+    super(message);
     Object.setPrototypeOf(this, new.target.prototype);
   }
 }
@@ -16658,8 +15699,8 @@ function requirePluggableAuthClient() {
   const executable_response_1 = executableResponse;
   const pluggable_auth_handler_1 = requirePluggableAuthHandler();
   class ExecutableError extends Error {
-    constructor(message2, code2) {
-      super(`The executable failed with exit code: ${code2} and error message: ${message2}.`);
+    constructor(message, code2) {
+      super(`The executable failed with exit code: ${code2} and error message: ${message}.`);
       this.code = code2;
       Object.setPrototypeOf(this, new.target.prototype);
     }
@@ -18307,104 +17348,104 @@ ZodError.create = (issues) => {
   return error2;
 };
 const errorMap = (issue, _ctx) => {
-  let message2;
+  let message;
   switch (issue.code) {
     case ZodIssueCode.invalid_type:
       if (issue.received === ZodParsedType.undefined) {
-        message2 = "Required";
+        message = "Required";
       } else {
-        message2 = `Expected ${issue.expected}, received ${issue.received}`;
+        message = `Expected ${issue.expected}, received ${issue.received}`;
       }
       break;
     case ZodIssueCode.invalid_literal:
-      message2 = `Invalid literal value, expected ${JSON.stringify(issue.expected, util$1.jsonStringifyReplacer)}`;
+      message = `Invalid literal value, expected ${JSON.stringify(issue.expected, util$1.jsonStringifyReplacer)}`;
       break;
     case ZodIssueCode.unrecognized_keys:
-      message2 = `Unrecognized key(s) in object: ${util$1.joinValues(issue.keys, ", ")}`;
+      message = `Unrecognized key(s) in object: ${util$1.joinValues(issue.keys, ", ")}`;
       break;
     case ZodIssueCode.invalid_union:
-      message2 = `Invalid input`;
+      message = `Invalid input`;
       break;
     case ZodIssueCode.invalid_union_discriminator:
-      message2 = `Invalid discriminator value. Expected ${util$1.joinValues(issue.options)}`;
+      message = `Invalid discriminator value. Expected ${util$1.joinValues(issue.options)}`;
       break;
     case ZodIssueCode.invalid_enum_value:
-      message2 = `Invalid enum value. Expected ${util$1.joinValues(issue.options)}, received '${issue.received}'`;
+      message = `Invalid enum value. Expected ${util$1.joinValues(issue.options)}, received '${issue.received}'`;
       break;
     case ZodIssueCode.invalid_arguments:
-      message2 = `Invalid function arguments`;
+      message = `Invalid function arguments`;
       break;
     case ZodIssueCode.invalid_return_type:
-      message2 = `Invalid function return type`;
+      message = `Invalid function return type`;
       break;
     case ZodIssueCode.invalid_date:
-      message2 = `Invalid date`;
+      message = `Invalid date`;
       break;
     case ZodIssueCode.invalid_string:
       if (typeof issue.validation === "object") {
         if ("includes" in issue.validation) {
-          message2 = `Invalid input: must include "${issue.validation.includes}"`;
+          message = `Invalid input: must include "${issue.validation.includes}"`;
           if (typeof issue.validation.position === "number") {
-            message2 = `${message2} at one or more positions greater than or equal to ${issue.validation.position}`;
+            message = `${message} at one or more positions greater than or equal to ${issue.validation.position}`;
           }
         } else if ("startsWith" in issue.validation) {
-          message2 = `Invalid input: must start with "${issue.validation.startsWith}"`;
+          message = `Invalid input: must start with "${issue.validation.startsWith}"`;
         } else if ("endsWith" in issue.validation) {
-          message2 = `Invalid input: must end with "${issue.validation.endsWith}"`;
+          message = `Invalid input: must end with "${issue.validation.endsWith}"`;
         } else {
           util$1.assertNever(issue.validation);
         }
       } else if (issue.validation !== "regex") {
-        message2 = `Invalid ${issue.validation}`;
+        message = `Invalid ${issue.validation}`;
       } else {
-        message2 = "Invalid";
+        message = "Invalid";
       }
       break;
     case ZodIssueCode.too_small:
       if (issue.type === "array")
-        message2 = `Array must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `more than`} ${issue.minimum} element(s)`;
+        message = `Array must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `more than`} ${issue.minimum} element(s)`;
       else if (issue.type === "string")
-        message2 = `String must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `over`} ${issue.minimum} character(s)`;
+        message = `String must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `over`} ${issue.minimum} character(s)`;
       else if (issue.type === "number")
-        message2 = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
+        message = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
       else if (issue.type === "bigint")
-        message2 = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
+        message = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
       else if (issue.type === "date")
-        message2 = `Date must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${new Date(Number(issue.minimum))}`;
+        message = `Date must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${new Date(Number(issue.minimum))}`;
       else
-        message2 = "Invalid input";
+        message = "Invalid input";
       break;
     case ZodIssueCode.too_big:
       if (issue.type === "array")
-        message2 = `Array must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `less than`} ${issue.maximum} element(s)`;
+        message = `Array must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `less than`} ${issue.maximum} element(s)`;
       else if (issue.type === "string")
-        message2 = `String must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `under`} ${issue.maximum} character(s)`;
+        message = `String must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `under`} ${issue.maximum} character(s)`;
       else if (issue.type === "number")
-        message2 = `Number must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
+        message = `Number must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
       else if (issue.type === "bigint")
-        message2 = `BigInt must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
+        message = `BigInt must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
       else if (issue.type === "date")
-        message2 = `Date must be ${issue.exact ? `exactly` : issue.inclusive ? `smaller than or equal to` : `smaller than`} ${new Date(Number(issue.maximum))}`;
+        message = `Date must be ${issue.exact ? `exactly` : issue.inclusive ? `smaller than or equal to` : `smaller than`} ${new Date(Number(issue.maximum))}`;
       else
-        message2 = "Invalid input";
+        message = "Invalid input";
       break;
     case ZodIssueCode.custom:
-      message2 = `Invalid input`;
+      message = `Invalid input`;
       break;
     case ZodIssueCode.invalid_intersection_types:
-      message2 = `Intersection results could not be merged`;
+      message = `Intersection results could not be merged`;
       break;
     case ZodIssueCode.not_multiple_of:
-      message2 = `Number must be a multiple of ${issue.multipleOf}`;
+      message = `Number must be a multiple of ${issue.multipleOf}`;
       break;
     case ZodIssueCode.not_finite:
-      message2 = "Number must be finite";
+      message = "Number must be finite";
       break;
     default:
-      message2 = _ctx.defaultError;
+      message = _ctx.defaultError;
       util$1.assertNever(issue);
   }
-  return { message: message2 };
+  return { message };
 };
 let overrideErrorMap = errorMap;
 function getErrorMap() {
@@ -18519,8 +17560,8 @@ const isValid = (x) => x.status === "valid";
 const isAsync = (x) => typeof Promise !== "undefined" && x instanceof Promise;
 var errorUtil;
 (function(errorUtil2) {
-  errorUtil2.errToObj = (message2) => typeof message2 === "string" ? { message: message2 } : message2 || {};
-  errorUtil2.toString = (message2) => typeof message2 === "string" ? message2 : message2?.message;
+  errorUtil2.errToObj = (message) => typeof message === "string" ? { message } : message || {};
+  errorUtil2.toString = (message) => typeof message === "string" ? message : message?.message;
 })(errorUtil || (errorUtil = {}));
 class ParseInputLazyPath {
   constructor(parent, value, path2, key) {
@@ -18570,16 +17611,16 @@ function processCreateParams(params) {
   if (errorMap2)
     return { errorMap: errorMap2, description: description2 };
   const customMap = (iss, ctx) => {
-    const { message: message2 } = params;
+    const { message } = params;
     if (iss.code === "invalid_enum_value") {
-      return { message: message2 ?? ctx.defaultError };
+      return { message: message ?? ctx.defaultError };
     }
     if (typeof ctx.data === "undefined") {
-      return { message: message2 ?? required_error ?? ctx.defaultError };
+      return { message: message ?? required_error ?? ctx.defaultError };
     }
     if (iss.code !== "invalid_type")
       return { message: ctx.defaultError };
-    return { message: message2 ?? invalid_type_error ?? ctx.defaultError };
+    return { message: message ?? invalid_type_error ?? ctx.defaultError };
   };
   return { errorMap: customMap, description: description2 };
 }
@@ -18705,14 +17746,14 @@ class ZodType {
     const result = await (isAsync(maybeAsyncResult) ? maybeAsyncResult : Promise.resolve(maybeAsyncResult));
     return handleResult(ctx, result);
   }
-  refine(check, message2) {
+  refine(check, message) {
     const getIssueProperties = (val) => {
-      if (typeof message2 === "string" || typeof message2 === "undefined") {
-        return { message: message2 };
-      } else if (typeof message2 === "function") {
-        return message2(val);
+      if (typeof message === "string" || typeof message === "undefined") {
+        return { message };
+      } else if (typeof message === "function") {
+        return message(val);
       } else {
-        return message2;
+        return message;
       }
     };
     return this._refinement((val, ctx) => {
@@ -19248,11 +18289,11 @@ class ZodString extends ZodType {
     }
     return { status: status.value, value: input.data };
   }
-  _regex(regex2, validation, message2) {
+  _regex(regex2, validation, message) {
     return this.refinement((data) => regex2.test(data), {
       validation,
       code: ZodIssueCode.invalid_string,
-      ...errorUtil.errToObj(message2)
+      ...errorUtil.errToObj(message)
     });
   }
   _addCheck(check) {
@@ -19261,37 +18302,37 @@ class ZodString extends ZodType {
       checks: [...this._def.checks, check]
     });
   }
-  email(message2) {
-    return this._addCheck({ kind: "email", ...errorUtil.errToObj(message2) });
+  email(message) {
+    return this._addCheck({ kind: "email", ...errorUtil.errToObj(message) });
   }
-  url(message2) {
-    return this._addCheck({ kind: "url", ...errorUtil.errToObj(message2) });
+  url(message) {
+    return this._addCheck({ kind: "url", ...errorUtil.errToObj(message) });
   }
-  emoji(message2) {
-    return this._addCheck({ kind: "emoji", ...errorUtil.errToObj(message2) });
+  emoji(message) {
+    return this._addCheck({ kind: "emoji", ...errorUtil.errToObj(message) });
   }
-  uuid(message2) {
-    return this._addCheck({ kind: "uuid", ...errorUtil.errToObj(message2) });
+  uuid(message) {
+    return this._addCheck({ kind: "uuid", ...errorUtil.errToObj(message) });
   }
-  nanoid(message2) {
-    return this._addCheck({ kind: "nanoid", ...errorUtil.errToObj(message2) });
+  nanoid(message) {
+    return this._addCheck({ kind: "nanoid", ...errorUtil.errToObj(message) });
   }
-  cuid(message2) {
-    return this._addCheck({ kind: "cuid", ...errorUtil.errToObj(message2) });
+  cuid(message) {
+    return this._addCheck({ kind: "cuid", ...errorUtil.errToObj(message) });
   }
-  cuid2(message2) {
-    return this._addCheck({ kind: "cuid2", ...errorUtil.errToObj(message2) });
+  cuid2(message) {
+    return this._addCheck({ kind: "cuid2", ...errorUtil.errToObj(message) });
   }
-  ulid(message2) {
-    return this._addCheck({ kind: "ulid", ...errorUtil.errToObj(message2) });
+  ulid(message) {
+    return this._addCheck({ kind: "ulid", ...errorUtil.errToObj(message) });
   }
-  base64(message2) {
-    return this._addCheck({ kind: "base64", ...errorUtil.errToObj(message2) });
+  base64(message) {
+    return this._addCheck({ kind: "base64", ...errorUtil.errToObj(message) });
   }
-  base64url(message2) {
+  base64url(message) {
     return this._addCheck({
       kind: "base64url",
-      ...errorUtil.errToObj(message2)
+      ...errorUtil.errToObj(message)
     });
   }
   jwt(options2) {
@@ -19321,8 +18362,8 @@ class ZodString extends ZodType {
       ...errorUtil.errToObj(options2?.message)
     });
   }
-  date(message2) {
-    return this._addCheck({ kind: "date", message: message2 });
+  date(message) {
+    return this._addCheck({ kind: "date", message });
   }
   time(options2) {
     if (typeof options2 === "string") {
@@ -19338,14 +18379,14 @@ class ZodString extends ZodType {
       ...errorUtil.errToObj(options2?.message)
     });
   }
-  duration(message2) {
-    return this._addCheck({ kind: "duration", ...errorUtil.errToObj(message2) });
+  duration(message) {
+    return this._addCheck({ kind: "duration", ...errorUtil.errToObj(message) });
   }
-  regex(regex2, message2) {
+  regex(regex2, message) {
     return this._addCheck({
       kind: "regex",
       regex: regex2,
-      ...errorUtil.errToObj(message2)
+      ...errorUtil.errToObj(message)
     });
   }
   includes(value, options2) {
@@ -19356,46 +18397,46 @@ class ZodString extends ZodType {
       ...errorUtil.errToObj(options2?.message)
     });
   }
-  startsWith(value, message2) {
+  startsWith(value, message) {
     return this._addCheck({
       kind: "startsWith",
       value,
-      ...errorUtil.errToObj(message2)
+      ...errorUtil.errToObj(message)
     });
   }
-  endsWith(value, message2) {
+  endsWith(value, message) {
     return this._addCheck({
       kind: "endsWith",
       value,
-      ...errorUtil.errToObj(message2)
+      ...errorUtil.errToObj(message)
     });
   }
-  min(minLength, message2) {
+  min(minLength, message) {
     return this._addCheck({
       kind: "min",
       value: minLength,
-      ...errorUtil.errToObj(message2)
+      ...errorUtil.errToObj(message)
     });
   }
-  max(maxLength, message2) {
+  max(maxLength, message) {
     return this._addCheck({
       kind: "max",
       value: maxLength,
-      ...errorUtil.errToObj(message2)
+      ...errorUtil.errToObj(message)
     });
   }
-  length(len, message2) {
+  length(len, message) {
     return this._addCheck({
       kind: "length",
       value: len,
-      ...errorUtil.errToObj(message2)
+      ...errorUtil.errToObj(message)
     });
   }
   /**
    * Equivalent to `.min(1)`
    */
-  nonempty(message2) {
-    return this.min(1, errorUtil.errToObj(message2));
+  nonempty(message) {
+    return this.min(1, errorUtil.errToObj(message));
   }
   trim() {
     return new ZodString({
@@ -19588,19 +18629,19 @@ class ZodNumber extends ZodType {
     }
     return { status: status.value, value: input.data };
   }
-  gte(value, message2) {
-    return this.setLimit("min", value, true, errorUtil.toString(message2));
+  gte(value, message) {
+    return this.setLimit("min", value, true, errorUtil.toString(message));
   }
-  gt(value, message2) {
-    return this.setLimit("min", value, false, errorUtil.toString(message2));
+  gt(value, message) {
+    return this.setLimit("min", value, false, errorUtil.toString(message));
   }
-  lte(value, message2) {
-    return this.setLimit("max", value, true, errorUtil.toString(message2));
+  lte(value, message) {
+    return this.setLimit("max", value, true, errorUtil.toString(message));
   }
-  lt(value, message2) {
-    return this.setLimit("max", value, false, errorUtil.toString(message2));
+  lt(value, message) {
+    return this.setLimit("max", value, false, errorUtil.toString(message));
   }
-  setLimit(kind, value, inclusive, message2) {
+  setLimit(kind, value, inclusive, message) {
     return new ZodNumber({
       ...this._def,
       checks: [
@@ -19609,7 +18650,7 @@ class ZodNumber extends ZodType {
           kind,
           value,
           inclusive,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message)
         }
       ]
     });
@@ -19620,68 +18661,68 @@ class ZodNumber extends ZodType {
       checks: [...this._def.checks, check]
     });
   }
-  int(message2) {
+  int(message) {
     return this._addCheck({
       kind: "int",
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  positive(message2) {
+  positive(message) {
     return this._addCheck({
       kind: "min",
       value: 0,
       inclusive: false,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  negative(message2) {
+  negative(message) {
     return this._addCheck({
       kind: "max",
       value: 0,
       inclusive: false,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  nonpositive(message2) {
+  nonpositive(message) {
     return this._addCheck({
       kind: "max",
       value: 0,
       inclusive: true,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  nonnegative(message2) {
+  nonnegative(message) {
     return this._addCheck({
       kind: "min",
       value: 0,
       inclusive: true,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  multipleOf(value, message2) {
+  multipleOf(value, message) {
     return this._addCheck({
       kind: "multipleOf",
       value,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  finite(message2) {
+  finite(message) {
     return this._addCheck({
       kind: "finite",
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  safe(message2) {
+  safe(message) {
     return this._addCheck({
       kind: "min",
       inclusive: true,
       value: Number.MIN_SAFE_INTEGER,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     })._addCheck({
       kind: "max",
       inclusive: true,
       value: Number.MAX_SAFE_INTEGER,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
   get minValue() {
@@ -19804,19 +18845,19 @@ class ZodBigInt extends ZodType {
     });
     return INVALID;
   }
-  gte(value, message2) {
-    return this.setLimit("min", value, true, errorUtil.toString(message2));
+  gte(value, message) {
+    return this.setLimit("min", value, true, errorUtil.toString(message));
   }
-  gt(value, message2) {
-    return this.setLimit("min", value, false, errorUtil.toString(message2));
+  gt(value, message) {
+    return this.setLimit("min", value, false, errorUtil.toString(message));
   }
-  lte(value, message2) {
-    return this.setLimit("max", value, true, errorUtil.toString(message2));
+  lte(value, message) {
+    return this.setLimit("max", value, true, errorUtil.toString(message));
   }
-  lt(value, message2) {
-    return this.setLimit("max", value, false, errorUtil.toString(message2));
+  lt(value, message) {
+    return this.setLimit("max", value, false, errorUtil.toString(message));
   }
-  setLimit(kind, value, inclusive, message2) {
+  setLimit(kind, value, inclusive, message) {
     return new ZodBigInt({
       ...this._def,
       checks: [
@@ -19825,7 +18866,7 @@ class ZodBigInt extends ZodType {
           kind,
           value,
           inclusive,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message)
         }
       ]
     });
@@ -19836,43 +18877,43 @@ class ZodBigInt extends ZodType {
       checks: [...this._def.checks, check]
     });
   }
-  positive(message2) {
+  positive(message) {
     return this._addCheck({
       kind: "min",
       value: BigInt(0),
       inclusive: false,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  negative(message2) {
+  negative(message) {
     return this._addCheck({
       kind: "max",
       value: BigInt(0),
       inclusive: false,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  nonpositive(message2) {
+  nonpositive(message) {
     return this._addCheck({
       kind: "max",
       value: BigInt(0),
       inclusive: true,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  nonnegative(message2) {
+  nonnegative(message) {
     return this._addCheck({
       kind: "min",
       value: BigInt(0),
       inclusive: true,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  multipleOf(value, message2) {
+  multipleOf(value, message) {
     return this._addCheck({
       kind: "multipleOf",
       value,
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
   get minValue() {
@@ -19995,18 +19036,18 @@ class ZodDate extends ZodType {
       checks: [...this._def.checks, check]
     });
   }
-  min(minDate, message2) {
+  min(minDate, message) {
     return this._addCheck({
       kind: "min",
       value: minDate.getTime(),
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
-  max(maxDate, message2) {
+  max(maxDate, message) {
     return this._addCheck({
       kind: "max",
       value: maxDate.getTime(),
-      message: errorUtil.toString(message2)
+      message: errorUtil.toString(message)
     });
   }
   get minDate() {
@@ -20238,26 +19279,26 @@ class ZodArray extends ZodType {
   get element() {
     return this._def.type;
   }
-  min(minLength, message2) {
+  min(minLength, message) {
     return new ZodArray({
       ...this._def,
-      minLength: { value: minLength, message: errorUtil.toString(message2) }
+      minLength: { value: minLength, message: errorUtil.toString(message) }
     });
   }
-  max(maxLength, message2) {
+  max(maxLength, message) {
     return new ZodArray({
       ...this._def,
-      maxLength: { value: maxLength, message: errorUtil.toString(message2) }
+      maxLength: { value: maxLength, message: errorUtil.toString(message) }
     });
   }
-  length(len, message2) {
+  length(len, message) {
     return new ZodArray({
       ...this._def,
-      exactLength: { value: len, message: errorUtil.toString(message2) }
+      exactLength: { value: len, message: errorUtil.toString(message) }
     });
   }
-  nonempty(message2) {
-    return this.min(1, message2);
+  nonempty(message) {
+    return this.min(1, message);
   }
 }
 ZodArray.create = (schema, params) => {
@@ -20400,17 +19441,17 @@ class ZodObject extends ZodType {
   get shape() {
     return this._def.shape();
   }
-  strict(message2) {
+  strict(message) {
     errorUtil.errToObj;
     return new ZodObject({
       ...this._def,
       unknownKeys: "strict",
-      ...message2 !== void 0 ? {
+      ...message !== void 0 ? {
         errorMap: (issue, ctx) => {
           const defaultError = this._def.errorMap?.(issue, ctx).message ?? ctx.defaultError;
           if (issue.code === "unrecognized_keys")
             return {
-              message: errorUtil.errToObj(message2).message ?? defaultError
+              message: errorUtil.errToObj(message).message ?? defaultError
             };
           return {
             message: defaultError
@@ -21006,23 +20047,23 @@ class ZodSet extends ZodType {
       return finalizeSet(elements);
     }
   }
-  min(minSize, message2) {
+  min(minSize, message) {
     return new ZodSet({
       ...this._def,
-      minSize: { value: minSize, message: errorUtil.toString(message2) }
+      minSize: { value: minSize, message: errorUtil.toString(message) }
     });
   }
-  max(maxSize, message2) {
+  max(maxSize, message) {
     return new ZodSet({
       ...this._def,
-      maxSize: { value: maxSize, message: errorUtil.toString(message2) }
+      maxSize: { value: maxSize, message: errorUtil.toString(message) }
     });
   }
-  size(size, message2) {
-    return this.min(size, message2).max(size, message2);
+  size(size, message) {
+    return this.min(size, message).max(size, message);
   }
-  nonempty(message2) {
-    return this.min(1, message2);
+  nonempty(message) {
+    return this.min(1, message);
   }
 }
 ZodSet.create = (valueType, params) => {
@@ -21632,32 +20673,125 @@ ZodEnum.create;
 ZodPromise.create;
 ZodOptional.create;
 ZodNullable.create;
-function createGoogleProvider(clientId) {
-  const googleClient = new src$4.OAuth2Client(clientId);
+function createGoogleProvider(config) {
+  const clientId = typeof config === "string" ? config : config.clientId;
+  const clientSecret = typeof config === "string" ? void 0 : config.clientSecret;
+  const googleClient = new src$4.OAuth2Client(clientId, clientSecret);
   return {
     id: "google",
     schema: objectType({
-      idToken: stringType().min(1, "ID token is required")
+      idToken: stringType().min(1).optional(),
+      accessToken: stringType().min(1).optional(),
+      code: stringType().min(1).optional(),
+      redirectUri: stringType().min(1).optional()
+    }).refine((data) => data.idToken || data.accessToken || data.code && data.redirectUri, {
+      message: "One of idToken, accessToken, or code+redirectUri is required"
     }),
     verify: async (payload) => {
       try {
-        const ticket = await googleClient.verifyIdToken({
-          idToken: payload.idToken,
-          audience: clientId
-        });
-        const content = ticket.getPayload();
-        if (!content) {
-          return null;
+        if (payload.idToken) {
+          const ticket = await googleClient.verifyIdToken({
+            idToken: payload.idToken,
+            audience: clientId
+          });
+          const content = ticket.getPayload();
+          if (!content) {
+            throw new Error("Google ID token payload was empty");
+          }
+          return {
+            providerId: content.sub,
+            email: content.email || "",
+            displayName: content.name || null,
+            photoUrl: content.picture || null
+          };
         }
-        return {
-          providerId: content.sub,
-          email: content.email || "",
-          displayName: content.name || null,
-          photoUrl: content.picture || null
-        };
+        if (payload.accessToken) {
+          const res = await fetch("https://www.googleapis.com/oauth2/v3/userinfo", {
+            headers: {
+              Authorization: `Bearer ${payload.accessToken}`
+            }
+          });
+          if (!res.ok) {
+            throw new Error(`Google userinfo request failed with status ${res.status}`);
+          }
+          const info = await res.json();
+          if (!info.sub || !info.email) {
+            throw new Error("Google userinfo response missing sub or email");
+          }
+          return {
+            providerId: info.sub,
+            email: info.email,
+            displayName: info.name || null,
+            photoUrl: info.picture || null
+          };
+        }
+        if (payload.code && payload.redirectUri) {
+          if (!clientSecret) {
+            throw new Error("Google authorization code flow requires clientSecret. Configure GOOGLE_CLIENT_SECRET in your environment.");
+          }
+          const tokenResponse = await fetch("https://oauth2.googleapis.com/token", {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/x-www-form-urlencoded"
+            },
+            body: new URLSearchParams({
+              code: payload.code,
+              client_id: clientId,
+              client_secret: clientSecret,
+              redirect_uri: payload.redirectUri,
+              grant_type: "authorization_code"
+            })
+          });
+          if (!tokenResponse.ok) {
+            const errorBody = await tokenResponse.text();
+            throw new Error(`Google token exchange failed (${tokenResponse.status}): ${errorBody}`);
+          }
+          const tokenData = await tokenResponse.json();
+          if (tokenData.error) {
+            throw new Error(`Google token exchange error: ${tokenData.error} – ${tokenData.error_description || "no details"}`);
+          }
+          if (tokenData.id_token) {
+            const ticket = await googleClient.verifyIdToken({
+              idToken: tokenData.id_token,
+              audience: clientId
+            });
+            const content = ticket.getPayload();
+            if (!content) {
+              throw new Error("Google ID token payload was empty after code exchange");
+            }
+            return {
+              providerId: content.sub,
+              email: content.email || "",
+              displayName: content.name || null,
+              photoUrl: content.picture || null
+            };
+          }
+          if (tokenData.access_token) {
+            const userInfoRes = await fetch("https://www.googleapis.com/oauth2/v3/userinfo", {
+              headers: {
+                Authorization: `Bearer ${tokenData.access_token}`
+              }
+            });
+            if (!userInfoRes.ok) {
+              throw new Error(`Google userinfo request failed after code exchange (${userInfoRes.status})`);
+            }
+            const info = await userInfoRes.json();
+            if (!info.sub || !info.email) {
+              return null;
+            }
+            return {
+              providerId: info.sub,
+              email: info.email,
+              displayName: info.name || null,
+              photoUrl: info.picture || null
+            };
+          }
+          throw new Error("Google token exchange returned neither id_token nor access_token");
+        }
+        throw new Error("No valid Google credential provided (expected idToken, accessToken, or code+redirectUri)");
       } catch (error2) {
-        console.error("Failed to verify Google ID token:", error2);
-        return null;
+        console.error("Google OAuth verification failed:", error2);
+        throw error2;
       }
     }
   };
@@ -21849,1002 +20983,16 @@ function createMicrosoftProvider(config) {
     }
   };
 }
-const encoder = new TextEncoder();
-const decoder = new TextDecoder();
-function concat(...buffers) {
-  const size = buffers.reduce((acc, { length }) => acc + length, 0);
-  const buf = new Uint8Array(size);
-  let i = 0;
-  for (const buffer of buffers) {
-    buf.set(buffer, i);
-    i += buffer.length;
-  }
-  return buf;
-}
-function encode$4(string) {
-  const bytes = new Uint8Array(string.length);
-  for (let i = 0; i < string.length; i++) {
-    const code2 = string.charCodeAt(i);
-    if (code2 > 127) {
-      throw new TypeError("non-ASCII string encountered in encode()");
-    }
-    bytes[i] = code2;
-  }
-  return bytes;
-}
-function encodeBase64(input) {
-  if (Uint8Array.prototype.toBase64) {
-    return input.toBase64();
-  }
-  const CHUNK_SIZE = 32768;
-  const arr = [];
-  for (let i = 0; i < input.length; i += CHUNK_SIZE) {
-    arr.push(String.fromCharCode.apply(null, input.subarray(i, i + CHUNK_SIZE)));
-  }
-  return btoa(arr.join(""));
-}
-function decodeBase64(encoded) {
-  if (Uint8Array.fromBase64) {
-    return Uint8Array.fromBase64(encoded);
-  }
-  const binary = atob(encoded);
-  const bytes = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i++) {
-    bytes[i] = binary.charCodeAt(i);
-  }
-  return bytes;
-}
-function decode$1(input) {
-  if (Uint8Array.fromBase64) {
-    return Uint8Array.fromBase64(typeof input === "string" ? input : decoder.decode(input), {
-      alphabet: "base64url"
-    });
-  }
-  let encoded = input;
-  if (encoded instanceof Uint8Array) {
-    encoded = decoder.decode(encoded);
-  }
-  encoded = encoded.replace(/-/g, "+").replace(/_/g, "/");
-  try {
-    return decodeBase64(encoded);
-  } catch {
-    throw new TypeError("The input to be decoded is not correctly encoded.");
-  }
-}
-function encode$3(input) {
-  let unencoded = input;
-  if (typeof unencoded === "string") {
-    unencoded = encoder.encode(unencoded);
-  }
-  if (Uint8Array.prototype.toBase64) {
-    return unencoded.toBase64({ alphabet: "base64url", omitPadding: true });
-  }
-  return encodeBase64(unencoded).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
-}
-const unusable = (name2, prop = "algorithm.name") => new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name2}`);
-const isAlgorithm = (algorithm, name2) => algorithm.name === name2;
-function getHashLength(hash) {
-  return parseInt(hash.name.slice(4), 10);
-}
-function checkHashLength(algorithm, expected) {
-  const actual = getHashLength(algorithm.hash);
-  if (actual !== expected)
-    throw unusable(`SHA-${expected}`, "algorithm.hash");
-}
-function getNamedCurve(alg) {
-  switch (alg) {
-    case "ES256":
-      return "P-256";
-    case "ES384":
-      return "P-384";
-    case "ES512":
-      return "P-521";
-    default:
-      throw new Error("unreachable");
-  }
-}
-function checkUsage(key, usage) {
-  if (!key.usages.includes(usage)) {
-    throw new TypeError(`CryptoKey does not support this operation, its usages must include ${usage}.`);
-  }
-}
-function checkSigCryptoKey(key, alg, usage) {
-  switch (alg) {
-    case "HS256":
-    case "HS384":
-    case "HS512": {
-      if (!isAlgorithm(key.algorithm, "HMAC"))
-        throw unusable("HMAC");
-      checkHashLength(key.algorithm, parseInt(alg.slice(2), 10));
-      break;
-    }
-    case "RS256":
-    case "RS384":
-    case "RS512": {
-      if (!isAlgorithm(key.algorithm, "RSASSA-PKCS1-v1_5"))
-        throw unusable("RSASSA-PKCS1-v1_5");
-      checkHashLength(key.algorithm, parseInt(alg.slice(2), 10));
-      break;
-    }
-    case "PS256":
-    case "PS384":
-    case "PS512": {
-      if (!isAlgorithm(key.algorithm, "RSA-PSS"))
-        throw unusable("RSA-PSS");
-      checkHashLength(key.algorithm, parseInt(alg.slice(2), 10));
-      break;
-    }
-    case "Ed25519":
-    case "EdDSA": {
-      if (!isAlgorithm(key.algorithm, "Ed25519"))
-        throw unusable("Ed25519");
-      break;
-    }
-    case "ML-DSA-44":
-    case "ML-DSA-65":
-    case "ML-DSA-87": {
-      if (!isAlgorithm(key.algorithm, alg))
-        throw unusable(alg);
-      break;
-    }
-    case "ES256":
-    case "ES384":
-    case "ES512": {
-      if (!isAlgorithm(key.algorithm, "ECDSA"))
-        throw unusable("ECDSA");
-      const expected = getNamedCurve(alg);
-      const actual = key.algorithm.namedCurve;
-      if (actual !== expected)
-        throw unusable(expected, "algorithm.namedCurve");
-      break;
-    }
-    default:
-      throw new TypeError("CryptoKey does not support this operation");
-  }
-  checkUsage(key, usage);
-}
-function message(msg, actual, ...types2) {
-  types2 = types2.filter(Boolean);
-  if (types2.length > 2) {
-    const last = types2.pop();
-    msg += `one of type ${types2.join(", ")}, or ${last}.`;
-  } else if (types2.length === 2) {
-    msg += `one of type ${types2[0]} or ${types2[1]}.`;
-  } else {
-    msg += `of type ${types2[0]}.`;
-  }
-  if (actual == null) {
-    msg += ` Received ${actual}`;
-  } else if (typeof actual === "function" && actual.name) {
-    msg += ` Received function ${actual.name}`;
-  } else if (typeof actual === "object" && actual != null) {
-    if (actual.constructor?.name) {
-      msg += ` Received an instance of ${actual.constructor.name}`;
-    }
-  }
-  return msg;
-}
-const invalidKeyInput = (actual, ...types2) => message("Key must be ", actual, ...types2);
-const withAlg = (alg, actual, ...types2) => message(`Key for the ${alg} algorithm must be `, actual, ...types2);
-class JOSEError extends Error {
-  static code = "ERR_JOSE_GENERIC";
-  code = "ERR_JOSE_GENERIC";
-  constructor(message2, options2) {
-    super(message2, options2);
-    this.name = this.constructor.name;
-    Error.captureStackTrace?.(this, this.constructor);
-  }
-}
-class JOSENotSupported extends JOSEError {
-  static code = "ERR_JOSE_NOT_SUPPORTED";
-  code = "ERR_JOSE_NOT_SUPPORTED";
-}
-class JWSInvalid extends JOSEError {
-  static code = "ERR_JWS_INVALID";
-  code = "ERR_JWS_INVALID";
-}
-class JWTInvalid extends JOSEError {
-  static code = "ERR_JWT_INVALID";
-  code = "ERR_JWT_INVALID";
-}
-const isCryptoKey = (key) => {
-  if (key?.[Symbol.toStringTag] === "CryptoKey")
-    return true;
-  try {
-    return key instanceof CryptoKey;
-  } catch {
-    return false;
-  }
-};
-const isKeyObject = (key) => key?.[Symbol.toStringTag] === "KeyObject";
-const isKeyLike = (key) => isCryptoKey(key) || isKeyObject(key);
-function assertNotSet(value, name2) {
-  if (value) {
-    throw new TypeError(`${name2} can only be called once`);
-  }
-}
-const isObjectLike$1 = (value) => typeof value === "object" && value !== null;
-function isObject(input) {
-  if (!isObjectLike$1(input) || Object.prototype.toString.call(input) !== "[object Object]") {
-    return false;
-  }
-  if (Object.getPrototypeOf(input) === null) {
-    return true;
-  }
-  let proto = input;
-  while (Object.getPrototypeOf(proto) !== null) {
-    proto = Object.getPrototypeOf(proto);
-  }
-  return Object.getPrototypeOf(input) === proto;
-}
-function isDisjoint(...headers) {
-  const sources = headers.filter(Boolean);
-  if (sources.length === 0 || sources.length === 1) {
-    return true;
-  }
-  let acc;
-  for (const header of sources) {
-    const parameters = Object.keys(header);
-    if (!acc || acc.size === 0) {
-      acc = new Set(parameters);
-      continue;
-    }
-    for (const parameter of parameters) {
-      if (acc.has(parameter)) {
-        return false;
-      }
-      acc.add(parameter);
-    }
-  }
-  return true;
-}
-const isJWK = (key) => isObject(key) && typeof key.kty === "string";
-const isPrivateJWK = (key) => key.kty !== "oct" && (key.kty === "AKP" && typeof key.priv === "string" || typeof key.d === "string");
-const isPublicJWK = (key) => key.kty !== "oct" && key.d === void 0 && key.priv === void 0;
-const isSecretJWK = (key) => key.kty === "oct" && typeof key.k === "string";
-function checkKeyLength(alg, key) {
-  if (alg.startsWith("RS") || alg.startsWith("PS")) {
-    const { modulusLength } = key.algorithm;
-    if (typeof modulusLength !== "number" || modulusLength < 2048) {
-      throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);
-    }
-  }
-}
-function subtleAlgorithm(alg, algorithm) {
-  const hash = `SHA-${alg.slice(-3)}`;
-  switch (alg) {
-    case "HS256":
-    case "HS384":
-    case "HS512":
-      return { hash, name: "HMAC" };
-    case "PS256":
-    case "PS384":
-    case "PS512":
-      return { hash, name: "RSA-PSS", saltLength: parseInt(alg.slice(-3), 10) >> 3 };
-    case "RS256":
-    case "RS384":
-    case "RS512":
-      return { hash, name: "RSASSA-PKCS1-v1_5" };
-    case "ES256":
-    case "ES384":
-    case "ES512":
-      return { hash, name: "ECDSA", namedCurve: algorithm.namedCurve };
-    case "Ed25519":
-    case "EdDSA":
-      return { name: "Ed25519" };
-    case "ML-DSA-44":
-    case "ML-DSA-65":
-    case "ML-DSA-87":
-      return { name: alg };
-    default:
-      throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);
-  }
-}
-async function getSigKey(alg, key, usage) {
-  if (key instanceof Uint8Array) {
-    if (!alg.startsWith("HS")) {
-      throw new TypeError(invalidKeyInput(key, "CryptoKey", "KeyObject", "JSON Web Key"));
-    }
-    return crypto.subtle.importKey("raw", key, { hash: `SHA-${alg.slice(-3)}`, name: "HMAC" }, false, [usage]);
-  }
-  checkSigCryptoKey(key, alg, usage);
-  return key;
-}
-async function sign$2(alg, key, data) {
-  const cryptoKey = await getSigKey(alg, key, "sign");
-  checkKeyLength(alg, cryptoKey);
-  const signature = await crypto.subtle.sign(subtleAlgorithm(alg, cryptoKey.algorithm), cryptoKey, data);
-  return new Uint8Array(signature);
-}
-const unsupportedAlg = 'Invalid or unsupported JWK "alg" (Algorithm) Parameter value';
-function subtleMapping(jwk) {
-  let algorithm;
-  let keyUsages;
-  switch (jwk.kty) {
-    case "AKP": {
-      switch (jwk.alg) {
-        case "ML-DSA-44":
-        case "ML-DSA-65":
-        case "ML-DSA-87":
-          algorithm = { name: jwk.alg };
-          keyUsages = jwk.priv ? ["sign"] : ["verify"];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    case "RSA": {
-      switch (jwk.alg) {
-        case "PS256":
-        case "PS384":
-        case "PS512":
-          algorithm = { name: "RSA-PSS", hash: `SHA-${jwk.alg.slice(-3)}` };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "RS256":
-        case "RS384":
-        case "RS512":
-          algorithm = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${jwk.alg.slice(-3)}` };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "RSA-OAEP":
-        case "RSA-OAEP-256":
-        case "RSA-OAEP-384":
-        case "RSA-OAEP-512":
-          algorithm = {
-            name: "RSA-OAEP",
-            hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`
-          };
-          keyUsages = jwk.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    case "EC": {
-      switch (jwk.alg) {
-        case "ES256":
-        case "ES384":
-        case "ES512":
-          algorithm = {
-            name: "ECDSA",
-            namedCurve: { ES256: "P-256", ES384: "P-384", ES512: "P-521" }[jwk.alg]
-          };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "ECDH-ES":
-        case "ECDH-ES+A128KW":
-        case "ECDH-ES+A192KW":
-        case "ECDH-ES+A256KW":
-          algorithm = { name: "ECDH", namedCurve: jwk.crv };
-          keyUsages = jwk.d ? ["deriveBits"] : [];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    case "OKP": {
-      switch (jwk.alg) {
-        case "Ed25519":
-        case "EdDSA":
-          algorithm = { name: "Ed25519" };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "ECDH-ES":
-        case "ECDH-ES+A128KW":
-        case "ECDH-ES+A192KW":
-        case "ECDH-ES+A256KW":
-          algorithm = { name: jwk.crv };
-          keyUsages = jwk.d ? ["deriveBits"] : [];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    default:
-      throw new JOSENotSupported('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
-  }
-  return { algorithm, keyUsages };
-}
-async function jwkToKey(jwk) {
-  if (!jwk.alg) {
-    throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
-  }
-  const { algorithm, keyUsages } = subtleMapping(jwk);
-  const keyData = { ...jwk };
-  if (keyData.kty !== "AKP") {
-    delete keyData.alg;
-  }
-  delete keyData.use;
-  return crypto.subtle.importKey("jwk", keyData, algorithm, jwk.ext ?? (jwk.d || jwk.priv ? false : true), jwk.key_ops ?? keyUsages);
-}
-const unusableForAlg = "given KeyObject instance cannot be used for this algorithm";
-let cache;
-const handleJWK = async (key, jwk, alg, freeze = false) => {
-  cache ||= /* @__PURE__ */ new WeakMap();
-  let cached = cache.get(key);
-  if (cached?.[alg]) {
-    return cached[alg];
-  }
-  const cryptoKey = await jwkToKey({ ...jwk, alg });
-  if (freeze)
-    Object.freeze(key);
-  if (!cached) {
-    cache.set(key, { [alg]: cryptoKey });
-  } else {
-    cached[alg] = cryptoKey;
-  }
-  return cryptoKey;
-};
-const handleKeyObject = (keyObject, alg) => {
-  cache ||= /* @__PURE__ */ new WeakMap();
-  let cached = cache.get(keyObject);
-  if (cached?.[alg]) {
-    return cached[alg];
-  }
-  const isPublic = keyObject.type === "public";
-  const extractable = isPublic ? true : false;
-  let cryptoKey;
-  if (keyObject.asymmetricKeyType === "x25519") {
-    switch (alg) {
-      case "ECDH-ES":
-      case "ECDH-ES+A128KW":
-      case "ECDH-ES+A192KW":
-      case "ECDH-ES+A256KW":
-        break;
-      default:
-        throw new TypeError(unusableForAlg);
-    }
-    cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, isPublic ? [] : ["deriveBits"]);
-  }
-  if (keyObject.asymmetricKeyType === "ed25519") {
-    if (alg !== "EdDSA" && alg !== "Ed25519") {
-      throw new TypeError(unusableForAlg);
-    }
-    cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, [
-      isPublic ? "verify" : "sign"
-    ]);
-  }
-  switch (keyObject.asymmetricKeyType) {
-    case "ml-dsa-44":
-    case "ml-dsa-65":
-    case "ml-dsa-87": {
-      if (alg !== keyObject.asymmetricKeyType.toUpperCase()) {
-        throw new TypeError(unusableForAlg);
-      }
-      cryptoKey = keyObject.toCryptoKey(keyObject.asymmetricKeyType, extractable, [
-        isPublic ? "verify" : "sign"
-      ]);
-    }
-  }
-  if (keyObject.asymmetricKeyType === "rsa") {
-    let hash;
-    switch (alg) {
-      case "RSA-OAEP":
-        hash = "SHA-1";
-        break;
-      case "RS256":
-      case "PS256":
-      case "RSA-OAEP-256":
-        hash = "SHA-256";
-        break;
-      case "RS384":
-      case "PS384":
-      case "RSA-OAEP-384":
-        hash = "SHA-384";
-        break;
-      case "RS512":
-      case "PS512":
-      case "RSA-OAEP-512":
-        hash = "SHA-512";
-        break;
-      default:
-        throw new TypeError(unusableForAlg);
-    }
-    if (alg.startsWith("RSA-OAEP")) {
-      return keyObject.toCryptoKey({
-        name: "RSA-OAEP",
-        hash
-      }, extractable, isPublic ? ["encrypt"] : ["decrypt"]);
-    }
-    cryptoKey = keyObject.toCryptoKey({
-      name: alg.startsWith("PS") ? "RSA-PSS" : "RSASSA-PKCS1-v1_5",
-      hash
-    }, extractable, [isPublic ? "verify" : "sign"]);
-  }
-  if (keyObject.asymmetricKeyType === "ec") {
-    const nist = /* @__PURE__ */ new Map([
-      ["prime256v1", "P-256"],
-      ["secp384r1", "P-384"],
-      ["secp521r1", "P-521"]
-    ]);
-    const namedCurve = nist.get(keyObject.asymmetricKeyDetails?.namedCurve);
-    if (!namedCurve) {
-      throw new TypeError(unusableForAlg);
-    }
-    const expectedCurve = { ES256: "P-256", ES384: "P-384", ES512: "P-521" };
-    if (expectedCurve[alg] && namedCurve === expectedCurve[alg]) {
-      cryptoKey = keyObject.toCryptoKey({
-        name: "ECDSA",
-        namedCurve
-      }, extractable, [isPublic ? "verify" : "sign"]);
-    }
-    if (alg.startsWith("ECDH-ES")) {
-      cryptoKey = keyObject.toCryptoKey({
-        name: "ECDH",
-        namedCurve
-      }, extractable, isPublic ? [] : ["deriveBits"]);
-    }
-  }
-  if (!cryptoKey) {
-    throw new TypeError(unusableForAlg);
-  }
-  if (!cached) {
-    cache.set(keyObject, { [alg]: cryptoKey });
-  } else {
-    cached[alg] = cryptoKey;
-  }
-  return cryptoKey;
-};
-async function normalizeKey$1(key, alg) {
-  if (key instanceof Uint8Array) {
-    return key;
-  }
-  if (isCryptoKey(key)) {
-    return key;
-  }
-  if (isKeyObject(key)) {
-    if (key.type === "secret") {
-      return key.export();
-    }
-    if ("toCryptoKey" in key && typeof key.toCryptoKey === "function") {
-      try {
-        return handleKeyObject(key, alg);
-      } catch (err) {
-        if (err instanceof TypeError) {
-          throw err;
-        }
-      }
-    }
-    let jwk = key.export({ format: "jwk" });
-    return handleJWK(key, jwk, alg);
-  }
-  if (isJWK(key)) {
-    if (key.k) {
-      return decode$1(key.k);
-    }
-    return handleJWK(key, key, alg, true);
-  }
-  throw new Error("unreachable");
-}
-function validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {
-  if (joseHeader.crit !== void 0 && protectedHeader?.crit === void 0) {
-    throw new Err('"crit" (Critical) Header Parameter MUST be integrity protected');
-  }
-  if (!protectedHeader || protectedHeader.crit === void 0) {
-    return /* @__PURE__ */ new Set();
-  }
-  if (!Array.isArray(protectedHeader.crit) || protectedHeader.crit.length === 0 || protectedHeader.crit.some((input) => typeof input !== "string" || input.length === 0)) {
-    throw new Err('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');
-  }
-  let recognized;
-  if (recognizedOption !== void 0) {
-    recognized = new Map([...Object.entries(recognizedOption), ...recognizedDefault.entries()]);
-  } else {
-    recognized = recognizedDefault;
-  }
-  for (const parameter of protectedHeader.crit) {
-    if (!recognized.has(parameter)) {
-      throw new JOSENotSupported(`Extension Header Parameter "${parameter}" is not recognized`);
-    }
-    if (joseHeader[parameter] === void 0) {
-      throw new Err(`Extension Header Parameter "${parameter}" is missing`);
-    }
-    if (recognized.get(parameter) && protectedHeader[parameter] === void 0) {
-      throw new Err(`Extension Header Parameter "${parameter}" MUST be integrity protected`);
-    }
-  }
-  return new Set(protectedHeader.crit);
-}
-const tag = (key) => key?.[Symbol.toStringTag];
-const jwkMatchesOp = (alg, key, usage) => {
-  if (key.use !== void 0) {
-    let expected;
-    switch (usage) {
-      case "sign":
-      case "verify":
-        expected = "sig";
-        break;
-      case "encrypt":
-      case "decrypt":
-        expected = "enc";
-        break;
-    }
-    if (key.use !== expected) {
-      throw new TypeError(`Invalid key for this operation, its "use" must be "${expected}" when present`);
-    }
-  }
-  if (key.alg !== void 0 && key.alg !== alg) {
-    throw new TypeError(`Invalid key for this operation, its "alg" must be "${alg}" when present`);
-  }
-  if (Array.isArray(key.key_ops)) {
-    let expectedKeyOp;
-    switch (true) {
-      case usage === "sign":
-      case alg === "dir":
-      case alg.includes("CBC-HS"):
-        expectedKeyOp = usage;
-        break;
-      case alg.startsWith("PBES2"):
-        expectedKeyOp = "deriveBits";
-        break;
-      case /^A\d{3}(?:GCM)?(?:KW)?$/.test(alg):
-        if (!alg.includes("GCM") && alg.endsWith("KW")) {
-          expectedKeyOp = "unwrapKey";
-        } else {
-          expectedKeyOp = usage;
-        }
-        break;
-      case usage === "encrypt":
-        expectedKeyOp = "wrapKey";
-        break;
-      case usage === "decrypt":
-        expectedKeyOp = alg.startsWith("RSA") ? "unwrapKey" : "deriveBits";
-        break;
-    }
-    if (expectedKeyOp && key.key_ops?.includes?.(expectedKeyOp) === false) {
-      throw new TypeError(`Invalid key for this operation, its "key_ops" must include "${expectedKeyOp}" when present`);
-    }
-  }
-  return true;
-};
-const symmetricTypeCheck = (alg, key, usage) => {
-  if (key instanceof Uint8Array)
-    return;
-  if (isJWK(key)) {
-    if (isSecretJWK(key) && jwkMatchesOp(alg, key, usage))
-      return;
-    throw new TypeError(`JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present`);
-  }
-  if (!isKeyLike(key)) {
-    throw new TypeError(withAlg(alg, key, "CryptoKey", "KeyObject", "JSON Web Key", "Uint8Array"));
-  }
-  if (key.type !== "secret") {
-    throw new TypeError(`${tag(key)} instances for symmetric algorithms must be of type "secret"`);
-  }
-};
-const asymmetricTypeCheck = (alg, key, usage) => {
-  if (isJWK(key)) {
-    switch (usage) {
-      case "decrypt":
-      case "sign":
-        if (isPrivateJWK(key) && jwkMatchesOp(alg, key, usage))
-          return;
-        throw new TypeError(`JSON Web Key for this operation must be a private JWK`);
-      case "encrypt":
-      case "verify":
-        if (isPublicJWK(key) && jwkMatchesOp(alg, key, usage))
-          return;
-        throw new TypeError(`JSON Web Key for this operation must be a public JWK`);
-    }
-  }
-  if (!isKeyLike(key)) {
-    throw new TypeError(withAlg(alg, key, "CryptoKey", "KeyObject", "JSON Web Key"));
-  }
-  if (key.type === "secret") {
-    throw new TypeError(`${tag(key)} instances for asymmetric algorithms must not be of type "secret"`);
-  }
-  if (key.type === "public") {
-    switch (usage) {
-      case "sign":
-        throw new TypeError(`${tag(key)} instances for asymmetric algorithm signing must be of type "private"`);
-      case "decrypt":
-        throw new TypeError(`${tag(key)} instances for asymmetric algorithm decryption must be of type "private"`);
-    }
-  }
-  if (key.type === "private") {
-    switch (usage) {
-      case "verify":
-        throw new TypeError(`${tag(key)} instances for asymmetric algorithm verifying must be of type "public"`);
-      case "encrypt":
-        throw new TypeError(`${tag(key)} instances for asymmetric algorithm encryption must be of type "public"`);
-    }
-  }
-};
-function checkKeyType(alg, key, usage) {
-  switch (alg.substring(0, 2)) {
-    case "A1":
-    case "A2":
-    case "di":
-    case "HS":
-    case "PB":
-      symmetricTypeCheck(alg, key, usage);
-      break;
-    default:
-      asymmetricTypeCheck(alg, key, usage);
-  }
-}
-const epoch = (date) => Math.floor(date.getTime() / 1e3);
-const minute = 60;
-const hour = minute * 60;
-const day = hour * 24;
-const week = day * 7;
-const year = day * 365.25;
-const REGEX = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;
-function secs(str) {
-  const matched = REGEX.exec(str);
-  if (!matched || matched[4] && matched[1]) {
-    throw new TypeError("Invalid time period format");
-  }
-  const value = parseFloat(matched[2]);
-  const unit = matched[3].toLowerCase();
-  let numericDate;
-  switch (unit) {
-    case "sec":
-    case "secs":
-    case "second":
-    case "seconds":
-    case "s":
-      numericDate = Math.round(value);
-      break;
-    case "minute":
-    case "minutes":
-    case "min":
-    case "mins":
-    case "m":
-      numericDate = Math.round(value * minute);
-      break;
-    case "hour":
-    case "hours":
-    case "hr":
-    case "hrs":
-    case "h":
-      numericDate = Math.round(value * hour);
-      break;
-    case "day":
-    case "days":
-    case "d":
-      numericDate = Math.round(value * day);
-      break;
-    case "week":
-    case "weeks":
-    case "w":
-      numericDate = Math.round(value * week);
-      break;
-    default:
-      numericDate = Math.round(value * year);
-      break;
-  }
-  if (matched[1] === "-" || matched[4] === "ago") {
-    return -numericDate;
-  }
-  return numericDate;
-}
-function validateInput(label, input) {
-  if (!Number.isFinite(input)) {
-    throw new TypeError(`Invalid ${label} input`);
-  }
-  return input;
-}
-class JWTClaimsBuilder {
-  #payload;
-  constructor(payload) {
-    if (!isObject(payload)) {
-      throw new TypeError("JWT Claims Set MUST be an object");
-    }
-    this.#payload = structuredClone(payload);
-  }
-  data() {
-    return encoder.encode(JSON.stringify(this.#payload));
-  }
-  get iss() {
-    return this.#payload.iss;
-  }
-  set iss(value) {
-    this.#payload.iss = value;
-  }
-  get sub() {
-    return this.#payload.sub;
-  }
-  set sub(value) {
-    this.#payload.sub = value;
-  }
-  get aud() {
-    return this.#payload.aud;
-  }
-  set aud(value) {
-    this.#payload.aud = value;
-  }
-  set jti(value) {
-    this.#payload.jti = value;
-  }
-  set nbf(value) {
-    if (typeof value === "number") {
-      this.#payload.nbf = validateInput("setNotBefore", value);
-    } else if (value instanceof Date) {
-      this.#payload.nbf = validateInput("setNotBefore", epoch(value));
-    } else {
-      this.#payload.nbf = epoch(/* @__PURE__ */ new Date()) + secs(value);
-    }
-  }
-  set exp(value) {
-    if (typeof value === "number") {
-      this.#payload.exp = validateInput("setExpirationTime", value);
-    } else if (value instanceof Date) {
-      this.#payload.exp = validateInput("setExpirationTime", epoch(value));
-    } else {
-      this.#payload.exp = epoch(/* @__PURE__ */ new Date()) + secs(value);
-    }
-  }
-  set iat(value) {
-    if (value === void 0) {
-      this.#payload.iat = epoch(/* @__PURE__ */ new Date());
-    } else if (value instanceof Date) {
-      this.#payload.iat = validateInput("setIssuedAt", epoch(value));
-    } else if (typeof value === "string") {
-      this.#payload.iat = validateInput("setIssuedAt", epoch(/* @__PURE__ */ new Date()) + secs(value));
-    } else {
-      this.#payload.iat = validateInput("setIssuedAt", value);
-    }
-  }
-}
-class FlattenedSign {
-  #payload;
-  #protectedHeader;
-  #unprotectedHeader;
-  constructor(payload) {
-    if (!(payload instanceof Uint8Array)) {
-      throw new TypeError("payload must be an instance of Uint8Array");
-    }
-    this.#payload = payload;
-  }
-  setProtectedHeader(protectedHeader) {
-    assertNotSet(this.#protectedHeader, "setProtectedHeader");
-    this.#protectedHeader = protectedHeader;
-    return this;
-  }
-  setUnprotectedHeader(unprotectedHeader) {
-    assertNotSet(this.#unprotectedHeader, "setUnprotectedHeader");
-    this.#unprotectedHeader = unprotectedHeader;
-    return this;
-  }
-  async sign(key, options2) {
-    if (!this.#protectedHeader && !this.#unprotectedHeader) {
-      throw new JWSInvalid("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");
-    }
-    if (!isDisjoint(this.#protectedHeader, this.#unprotectedHeader)) {
-      throw new JWSInvalid("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
-    }
-    const joseHeader = {
-      ...this.#protectedHeader,
-      ...this.#unprotectedHeader
-    };
-    const extensions2 = validateCrit(JWSInvalid, /* @__PURE__ */ new Map([["b64", true]]), options2?.crit, this.#protectedHeader, joseHeader);
-    let b64 = true;
-    if (extensions2.has("b64")) {
-      b64 = this.#protectedHeader.b64;
-      if (typeof b64 !== "boolean") {
-        throw new JWSInvalid('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
-      }
-    }
-    const { alg } = joseHeader;
-    if (typeof alg !== "string" || !alg) {
-      throw new JWSInvalid('JWS "alg" (Algorithm) Header Parameter missing or invalid');
-    }
-    checkKeyType(alg, key, "sign");
-    let payloadS;
-    let payloadB;
-    if (b64) {
-      payloadS = encode$3(this.#payload);
-      payloadB = encode$4(payloadS);
-    } else {
-      payloadB = this.#payload;
-      payloadS = "";
-    }
-    let protectedHeaderString;
-    let protectedHeaderBytes;
-    if (this.#protectedHeader) {
-      protectedHeaderString = encode$3(JSON.stringify(this.#protectedHeader));
-      protectedHeaderBytes = encode$4(protectedHeaderString);
-    } else {
-      protectedHeaderString = "";
-      protectedHeaderBytes = new Uint8Array();
-    }
-    const data = concat(protectedHeaderBytes, encode$4("."), payloadB);
-    const k = await normalizeKey$1(key, alg);
-    const signature = await sign$2(alg, k, data);
-    const jws2 = {
-      signature: encode$3(signature),
-      payload: payloadS
-    };
-    if (this.#unprotectedHeader) {
-      jws2.header = this.#unprotectedHeader;
-    }
-    if (this.#protectedHeader) {
-      jws2.protected = protectedHeaderString;
-    }
-    return jws2;
-  }
-}
-class CompactSign {
-  #flattened;
-  constructor(payload) {
-    this.#flattened = new FlattenedSign(payload);
-  }
-  setProtectedHeader(protectedHeader) {
-    this.#flattened.setProtectedHeader(protectedHeader);
-    return this;
-  }
-  async sign(key, options2) {
-    const jws2 = await this.#flattened.sign(key, options2);
-    if (jws2.payload === void 0) {
-      throw new TypeError("use the flattened module for creating JWS with b64: false");
-    }
-    return `${jws2.protected}.${jws2.payload}.${jws2.signature}`;
-  }
-}
-class SignJWT {
-  #protectedHeader;
-  #jwt;
-  constructor(payload = {}) {
-    this.#jwt = new JWTClaimsBuilder(payload);
-  }
-  setIssuer(issuer) {
-    this.#jwt.iss = issuer;
-    return this;
-  }
-  setSubject(subject) {
-    this.#jwt.sub = subject;
-    return this;
-  }
-  setAudience(audience) {
-    this.#jwt.aud = audience;
-    return this;
-  }
-  setJti(jwtId) {
-    this.#jwt.jti = jwtId;
-    return this;
-  }
-  setNotBefore(input) {
-    this.#jwt.nbf = input;
-    return this;
-  }
-  setExpirationTime(input) {
-    this.#jwt.exp = input;
-    return this;
-  }
-  setIssuedAt(input) {
-    this.#jwt.iat = input;
-    return this;
-  }
-  setProtectedHeader(protectedHeader) {
-    this.#protectedHeader = protectedHeader;
-    return this;
-  }
-  async sign(key, options2) {
-    const sig = new CompactSign(this.#jwt.data());
-    sig.setProtectedHeader(this.#protectedHeader);
-    if (Array.isArray(this.#protectedHeader?.crit) && this.#protectedHeader.crit.includes("b64") && this.#protectedHeader.b64 === false) {
-      throw new JWTInvalid("JWTs MUST NOT use unencoded payload");
-    }
-    return sig.sign(key, options2);
-  }
-}
 function createAppleProvider(config) {
   async function generateClientSecret() {
-    const key = createPrivateKey$1({
-      key: config.privateKey,
-      format: "pem"
+    return jwt.sign({}, config.privateKey, {
+      algorithm: "ES256",
+      keyid: config.keyId,
+      issuer: config.teamId,
+      expiresIn: "180d",
+      audience: "https://appleid.apple.com",
+      subject: config.clientId
     });
-    const now = Math.floor(Date.now() / 1e3);
-    return new SignJWT({}).setProtectedHeader({
-      alg: "ES256",
-      kid: config.keyId
-    }).setIssuer(config.teamId).setIssuedAt(now).setExpirationTime(now + 86400 * 180).setAudience("https://appleid.apple.com").setSubject(config.clientId).sign(key);
   }
   return {
     id: "apple",
@@ -23652,7 +21800,7 @@ function createRateLimiter(options2 = {}) {
     windowMs = 15 * 60 * 1e3,
     limit = 100,
     keyGenerator = defaultKeyGenerator,
-    message: message2 = "Too many requests, please try again later."
+    message = "Too many requests, please try again later."
   } = options2;
   const store = /* @__PURE__ */ new Map();
   const cleanupInterval = setInterval(() => {
@@ -23687,7 +21835,7 @@ function createRateLimiter(options2 = {}) {
       c.header("X-RateLimit-Reset", String(Math.ceil((now + retryAfterMs) / 1e3)));
       return c.json({
         error: {
-          message: message2,
+          message,
           code: "RATE_LIMITED"
         }
       }, 429);
@@ -23851,7 +21999,11 @@ function createAuthRoutes(config) {
       passwordHash,
       displayName: displayName || void 0
     });
-    if (config.defaultRole) {
+    const existingUsers = await authRepo.listUsers();
+    const isFirstUser = existingUsers.length === 1 && existingUsers[0].id === user.id;
+    if (isFirstUser) {
+      await authRepo.setUserRoles(user.id, ["admin"]);
+    } else if (config.defaultRole) {
       await authRepo.assignDefaultRole(user.id, config.defaultRole);
     }
     const {
@@ -23892,7 +22044,13 @@ function createAuthRoutes(config) {
     for (const provider of config.oauthProviders) {
       router.post(`/${provider.id}`, defaultAuthLimiter, async (c) => {
         const payload = parseBody2(provider.schema, await c.req.json());
-        const externalUser = await provider.verify(payload);
+        let externalUser;
+        try {
+          externalUser = await provider.verify(payload);
+        } catch (err) {
+          const msg = err instanceof Error ? err.message : String(err);
+          throw ApiError.unauthorized(`${provider.id} login failed: ${msg}`, "OAUTH_ERROR");
+        }
         if (!externalUser) {
           throw ApiError.unauthorized(`Invalid ${provider.id} credentials`, "INVALID_TOKEN");
         }
@@ -23916,7 +22074,11 @@ function createAuthRoutes(config) {
             await authRepo.linkUserIdentity(user.id, provider.id, externalUser.providerId, {
               email: externalUser.email
             });
-            if (config.defaultRole) {
+            const allUsers = await authRepo.listUsers();
+            const isFirstUser = allUsers.length === 1 && allUsers[0].id === user.id;
+            if (isFirstUser) {
+              await authRepo.setUserRoles(user.id, ["admin"]);
+            } else if (config.defaultRole) {
               await authRepo.assignDefaultRole(user.id, config.defaultRole);
             }
             sendWelcomeEmail({
@@ -24928,17 +23090,34 @@ class LocalStorageController {
       }
     }
     resolvedPath = normalizeStoragePath(resolvedPath);
+    if (!resolvedPath) {
+      return;
+    }
     const fullPath = this.getFullPath(resolvedPath, resolvedBucket);
     try {
-      await unlink(fullPath);
-      try {
-        await unlink(`${fullPath}.metadata.json`);
-      } catch {
+      await access(fullPath, fs$4.constants.F_OK);
+    } catch {
+      return;
+    }
+    try {
+      const stats = await stat(fullPath);
+      if (stats.isDirectory()) {
+        await fs$4.promises.rmdir(fullPath);
+      } else {
+        await unlink(fullPath);
+        try {
+          await unlink(`${fullPath}.metadata.json`);
+        } catch {
+        }
       }
     } catch (error2) {
-      if (error2 instanceof Error && error2.code !== "ENOENT") {
-        throw error2;
+      if (error2 instanceof Error) {
+        const code2 = error2.code;
+        if (code2 === "ENOENT" || code2 === "ENOTEMPTY") {
+          return;
+        }
       }
+      throw error2;
     }
   }
   async listObjects(prefix, options2) {
@@ -25045,7 +23224,8 @@ class S3StorageController {
    * Get the bucket name - either from parameter or config
    */
   getBucket(bucket) {
-    return bucket ?? this.config.bucket;
+    if (!bucket || bucket === "default") return this.config.bucket;
+    return bucket;
   }
   async putObject({
     file,
@@ -25333,11 +23513,18 @@ function createStorageRoutes(config) {
       const fileContent = fs$4.readFileSync(absolutePath);
       return c.body(new Uint8Array(fileContent));
     }
-    const downloadConfig = await controller.getSignedUrl(filePath);
-    if (downloadConfig.fileNotFound || !downloadConfig.url) {
+    const {
+      bucket: parsedBucket,
+      resolvedPath: parsedPath
+    } = parseBucketAndPath(filePath);
+    const fileObject = await controller.getObject(parsedPath, parsedBucket);
+    if (!fileObject) {
       throw ApiError.notFound("File not found");
     }
-    return c.redirect(downloadConfig.url);
+    c.header("Content-Type", fileObject.type || "application/octet-stream");
+    c.header("Cache-Control", "public, max-age=3600, immutable");
+    const buf = await fileObject.arrayBuffer();
+    return c.body(new Uint8Array(buf));
   });
   router.get("/metadata/*", readAuthMiddleware, async (c) => {
     const rawPath = extractWildcardPath(c);
@@ -25387,7 +23574,7 @@ function createStorageRoutes(config) {
     const maxResults = c.req.query("maxResults");
     const pageToken = c.req.query("pageToken");
     const result = await controller.listObjects(storagePrefix, {
-      bucket,
+      bucket: bucket ?? (controller.getType() === "local" ? "default" : void 0),
       maxResults: maxResults ? parseInt(maxResults, 10) : void 0,
       pageToken
     });
@@ -25396,6 +23583,40 @@ function createStorageRoutes(config) {
       data: result
     });
   });
+  router.post("/folder", writeAuthMiddleware, async (c) => {
+    const body = await c.req.json();
+    const folderPath = body.path;
+    if (!folderPath || typeof folderPath !== "string") {
+      throw ApiError.badRequest("Folder path is required");
+    }
+    const {
+      bucket,
+      resolvedPath
+    } = parseBucketAndPath(folderPath);
+    if (!resolvedPath || resolvedPath.trim() === "") {
+      throw ApiError.badRequest("Invalid folder path");
+    }
+    if (controller.getType() === "local") {
+      const localController = controller;
+      const absolutePath = localController.getAbsolutePath(resolvedPath, bucket);
+      fs$4.mkdirSync(absolutePath, {
+        recursive: true
+      });
+    } else {
+      const key = resolvedPath.endsWith("/") ? resolvedPath : resolvedPath + "/";
+      const emptyFile = new File([], key, {
+        type: "application/x-directory"
+      });
+      await controller.putObject({
+        file: emptyFile,
+        key
+      });
+    }
+    return c.json({
+      success: true,
+      message: "Folder created"
+    }, 201);
+  });
   return router;
 }
 const DEFAULT_STORAGE_ID = "(default)";
@@ -25519,8 +23740,8 @@ class RebaseApiError extends Error {
   status;
   code;
   details;
-  constructor(status, message2, code2, details) {
-    super(message2);
+  constructor(status, message, code2, details) {
+    super(message);
     this.name = "RebaseApiError";
     this.status = status;
     this.code = code2;
@@ -25850,20 +24071,21 @@ function createAuth(transport, options2) {
       refreshToken: session.refreshToken
     };
   }
-  async function signInWithGoogle(idToken) {
+  async function signInWithGoogle(tokenOrPayload) {
     const fetchFn = getFetch();
+    const body = typeof tokenOrPayload === "string" ? {
+      idToken: tokenOrPayload
+    } : tokenOrPayload;
     const res = await fetchFn(authUrl("/google"), {
       method: "POST",
       headers: {
         "Content-Type": "application/json"
       },
-      body: JSON.stringify({
-        idToken
-      })
+      body: JSON.stringify(body)
     });
-    const body = await res.json().catch(() => ({}));
-    if (!res.ok) throwApiError(res.status, body, res.statusText);
-    const session = handleAuthResponse(body, "SIGNED_IN");
+    const responseBody = await res.json().catch(() => ({}));
+    if (!res.ok) throwApiError(res.status, responseBody, res.statusText);
+    const session = handleAuthResponse(responseBody, "SIGNED_IN");
     return {
       user: session.user,
       accessToken: session.accessToken,
@@ -26525,6 +24747,25 @@ function createCollectionClient(transport, slug, ws) {
   };
   return client;
 }
+function createFunctionsClient(transport) {
+  return {
+    async invoke(name2, payload, options2) {
+      const method = options2?.method ?? "POST";
+      const subPath = options2?.path ? `/${options2.path.replace(/^\//, "")}` : "";
+      const routePath = `/functions/${encodeURIComponent(name2)}${subPath}`;
+      const init = {
+        method
+      };
+      if (payload !== void 0 && method !== "GET") {
+        init.body = JSON.stringify(payload);
+      }
+      if (options2?.headers) {
+        init.headers = options2.headers;
+      }
+      return transport.request(routePath, init);
+    }
+  };
+}
 function createStorage(transport) {
   const urlsCache = /* @__PURE__ */ new Map();
   async function putObject({
@@ -26658,6 +24899,7 @@ function createRebaseClient(options2) {
   const admin = createAdmin(transport, options2.admin);
   const cron = createCron(transport, options2.cron);
   const storage = createStorage(transport);
+  const functions = createFunctionsClient(transport);
   let ws;
   if (!options2.onUnauthorized) {
     transport.setOnUnauthorized(async () => {
@@ -26696,6 +24938,7 @@ function createRebaseClient(options2) {
     auth,
     admin,
     cron,
+    functions,
     storage,
     ws,
     setToken: transport.setToken,
@@ -27509,7 +25752,7 @@ var fetchExports = fetch$1.exports;
     });
     return options2;
   };
-  module.exports._logFunc = (logger2, level, defaults, data, message2, ...args) => {
+  module.exports._logFunc = (logger2, level, defaults, data, message, ...args) => {
     let entry = {};
     Object.keys(defaults || {}).forEach((key) => {
       if (key !== "level") {
@@ -27521,7 +25764,7 @@ var fetchExports = fetch$1.exports;
         entry[key] = data[key];
       }
     });
-    logger2[level](entry, message2, ...args);
+    logger2[level](entry, message, ...args);
   };
   module.exports.getLogger = (options2, defaults) => {
     options2 = options2 || {};
@@ -27538,8 +25781,8 @@ var fetchExports = fetch$1.exports;
       logger2 = createDefaultLogger(levels);
     }
     levels.forEach((level) => {
-      response[level] = (data, message2, ...args) => {
-        module.exports._logFunc(logger2, level, defaults, data, message2, ...args);
+      response[level] = (data, message, ...args) => {
+        module.exports._logFunc(logger2, level, defaults, data, message, ...args);
       };
     });
     return response;
@@ -27722,7 +25965,7 @@ var fetchExports = fetch$1.exports;
       }
       levelNames.set(level, levelName);
     });
-    let print2 = (level, entry, message2, ...args) => {
+    let print2 = (level, entry, message, ...args) => {
       let prefix = "";
       if (entry) {
         if (entry.tnx === "server") {
@@ -27737,8 +25980,8 @@ var fetchExports = fetch$1.exports;
           prefix = "[#" + entry.cid + "] " + prefix;
         }
       }
-      message2 = util2.format(message2, ...args);
-      message2.split(/\r?\n/).forEach((line) => {
+      message = util2.format(message, ...args);
+      message.split(/\r?\n/).forEach((line) => {
         console.log("[%s] %s %s", (/* @__PURE__ */ new Date()).toISOString().substr(0, 19).replace(/T/, " "), levelNames.get(level), prefix + line);
       });
     };
@@ -34234,8 +32477,8 @@ let SMTPConnection$3 = class SMTPConnection extends EventEmitter$4 {
    * @param {Object} message String, Buffer or a Stream
    * @param {Function} callback Callback to return once sending is completed
    */
-  send(envelope, message2, done) {
-    if (!message2) {
+  send(envelope, message, done) {
+    if (!message) {
       return done(this._formatError("Empty message", "EMESSAGE", false, "API"));
     }
     const isDestroyedMessage = this._isDestroyedMessage("send message");
@@ -34255,17 +32498,17 @@ let SMTPConnection$3 = class SMTPConnection extends EventEmitter$4 {
       returned = true;
       done(...arguments);
     };
-    if (typeof message2.on === "function") {
-      message2.on("error", (err) => callback(this._formatError(err, "ESTREAM", false, "API")));
+    if (typeof message.on === "function") {
+      message.on("error", (err) => callback(this._formatError(err, "ESTREAM", false, "API")));
     }
     let startTime = Date.now();
     this._setEnvelope(envelope, (err, info) => {
       if (err) {
         let stream3 = new PassThrough();
-        if (typeof message2.pipe === "function") {
-          message2.pipe(stream3);
+        if (typeof message.pipe === "function") {
+          message.pipe(stream3);
         } else {
-          stream3.write(message2);
+          stream3.write(message);
           stream3.end();
         }
         return callback(err);
@@ -34281,10 +32524,10 @@ let SMTPConnection$3 = class SMTPConnection extends EventEmitter$4 {
         info.response = str;
         return callback(null, info);
       });
-      if (typeof message2.pipe === "function") {
-        message2.pipe(stream2);
+      if (typeof message.pipe === "function") {
+        message.pipe(stream2);
       } else {
-        stream2.write(message2);
+        stream2.write(message);
         stream2.end();
       }
     });
@@ -34397,12 +32640,12 @@ let SMTPConnection$3 = class SMTPConnection extends EventEmitter$4 {
     this.emit("error", err);
     this.close();
   }
-  _formatError(message2, type, response, command) {
+  _formatError(message, type, response, command) {
     let err;
-    if (/Error\]$/i.test(Object.prototype.toString.call(message2))) {
-      err = message2;
+    if (/Error\]$/i.test(Object.prototype.toString.call(message))) {
+      err = message;
     } else {
-      err = new Error(message2);
+      err = new Error(message);
     }
     if (type && type !== "Error") {
       err.code = type;
@@ -35045,14 +33288,14 @@ let SMTPConnection$3 = class SMTPConnection extends EventEmitter$4 {
    * @param {String} str Message from the server
    */
   _actionMAIL(str, callback) {
-    let message2, curRecipient;
+    let message, curRecipient;
     if (Number(str.charAt(0)) !== 2) {
       if (this._usingSmtpUtf8 && /^550 /.test(str) && /[\x80-\uFFFF]/.test(this._envelope.from)) {
-        message2 = "Internationalized mailbox name not allowed";
+        message = "Internationalized mailbox name not allowed";
       } else {
-        message2 = "Mail command failed";
+        message = "Mail command failed";
       }
-      return callback(this._formatError(message2, "EENVELOPE", str, "MAIL FROM"));
+      return callback(this._formatError(message, "EENVELOPE", str, "MAIL FROM"));
     }
     if (!this._envelope.rcptQueue.length) {
       return callback(this._formatError("Can't send mail - no recipients defined", "EENVELOPE", false, "API"));
@@ -35083,15 +33326,15 @@ let SMTPConnection$3 = class SMTPConnection extends EventEmitter$4 {
    * @param {String} str Message from the server
    */
   _actionRCPT(str, callback) {
-    let message2, err, curRecipient = this._recipientQueue.shift();
+    let message, err, curRecipient = this._recipientQueue.shift();
     if (Number(str.charAt(0)) !== 2) {
       if (this._usingSmtpUtf8 && /^553 /.test(str) && /[\x80-\uFFFF]/.test(curRecipient)) {
-        message2 = "Internationalized mailbox name not allowed";
+        message = "Internationalized mailbox name not allowed";
       } else {
-        message2 = "Recipient command failed";
+        message = "Recipient command failed";
       }
       this._envelope.rejected.push(curRecipient);
-      err = this._formatError(message2, "EENVELOPE", str, "RCPT TO");
+      err = this._formatError(message, "EENVELOPE", str, "RCPT TO");
       err.recipient = curRecipient;
       this._envelope.rejectedErrors.push(err);
     } else {
@@ -37807,9 +36050,9 @@ class SMTPEmailService {
         replyTo: options2.replyTo
       });
     } catch (error2) {
-      const message2 = error2 instanceof Error ? error2.message : String(error2);
-      console.error("Failed to send email:", message2);
-      throw new Error(`Failed to send email: ${message2}`);
+      const message = error2 instanceof Error ? error2.message : String(error2);
+      console.error("Failed to send email:", message);
+      throw new Error(`Failed to send email: ${message}`);
     }
   }
   /**
@@ -37823,8 +36066,8 @@ class SMTPEmailService {
       await this.transporter.verify();
       return true;
     } catch (error2) {
-      const message2 = error2 instanceof Error ? error2.message : String(error2);
-      console.error("SMTP connection verification failed:", message2);
+      const message = error2 instanceof Error ? error2.message : String(error2);
+      console.error("SMTP connection verification failed:", message);
       return false;
     }
   }
@@ -38023,7 +36266,7 @@ async function _initializeRebaseBackend(config) {
       const {
         createGoogleProvider: createGoogleProvider2
       } = await import("./index-DXVBFp5V.js");
-      oauthProviders.push(createGoogleProvider2(config.auth.google.clientId));
+      oauthProviders.push(createGoogleProvider2(config.auth.google));
     }
     if (config.auth.linkedin?.clientId && config.auth.linkedin?.clientSecret) {
       const {
@@ -38224,6 +36467,13 @@ async function _initializeRebaseBackend(config) {
   }
   _initRebase(serverClient);
   logger.info("Rebase singleton initialized");
+  if (defaultDriverResult.internals) {
+    const internals = defaultDriverResult.internals;
+    const driver = internals.driver;
+    if (driver && "client" in driver) {
+      driver.client = serverClient;
+    }
+  }
   if (config.functionsDir) {
     const {
       loadFunctionsFromDirectory: loadFunctionsFromDirectory2
@@ -38357,10 +36607,10 @@ async function _initializeRebaseBackend(config) {
     shutdown
   };
 }
-function devAssert(condition, message2) {
+function devAssert(condition, message) {
   const booleanCondition = Boolean(condition);
   if (!booleanCondition) {
-    throw new Error(message2);
+    throw new Error(message);
   }
 }
 function isPromise(value) {
@@ -38369,11 +36619,11 @@ function isPromise(value) {
 function isObjectLike(value) {
   return typeof value == "object" && value !== null;
 }
-function invariant(condition, message2) {
+function invariant(condition, message) {
   const booleanCondition = Boolean(condition);
   if (!booleanCondition) {
     throw new Error(
-      message2 != null ? message2 : "Unexpected invariant triggered."
+      message != null ? message : "Unexpected invariant triggered."
     );
   }
 }
@@ -38492,10 +36742,10 @@ class GraphQLError extends Error {
   /**
    * @deprecated Please use the `GraphQLErrorOptions` constructor overload instead.
    */
-  constructor(message2, ...rawArgs) {
+  constructor(message, ...rawArgs) {
     var _this$nodes, _nodeLocations$, _ref;
     const { nodes, source, positions, path: path2, originalError, extensions: extensions2 } = toNormalizedOptions(rawArgs);
-    super(message2);
+    super(message);
     this.name = "GraphQLError";
     this.path = path2 !== null && path2 !== void 0 ? path2 : void 0;
     this.originalError = originalError !== null && originalError !== void 0 ? originalError : void 0;
@@ -39513,14 +37763,14 @@ function formatArray(array, seenValues) {
   return "[" + items.join(", ") + "]";
 }
 function getObjectTag(object) {
-  const tag2 = Object.prototype.toString.call(object).replace(/^\[object /, "").replace(/]$/, "");
-  if (tag2 === "Object" && typeof object.constructor === "function") {
+  const tag = Object.prototype.toString.call(object).replace(/^\[object /, "").replace(/]$/, "");
+  if (tag === "Object" && typeof object.constructor === "function") {
     const name2 = object.constructor.name;
     if (typeof name2 === "string" && name2 !== "") {
       return name2;
     }
   }
-  return tag2;
+  return tag;
 }
 const isProduction = globalThis.process && // eslint-disable-next-line no-undef
 process.env.NODE_ENV === "production";
@@ -40918,22 +39168,22 @@ function getTokenKindDesc(kind) {
 const MAX_SUGGESTIONS = 5;
 function didYouMean(firstArg, secondArg) {
   const [subMessage, suggestionsArg] = secondArg ? [firstArg, secondArg] : [void 0, firstArg];
-  let message2 = " Did you mean ";
+  let message = " Did you mean ";
   if (subMessage) {
-    message2 += subMessage + " ";
+    message += subMessage + " ";
   }
   const suggestions = suggestionsArg.map((x) => `"${x}"`);
   switch (suggestions.length) {
     case 0:
       return "";
     case 1:
-      return message2 + suggestions[0] + "?";
+      return message + suggestions[0] + "?";
     case 2:
-      return message2 + suggestions[0] + " or " + suggestions[1] + "?";
+      return message + suggestions[0] + " or " + suggestions[1] + "?";
   }
   const selected = suggestions.slice(0, MAX_SUGGESTIONS);
   const lastItem = selected.pop();
-  return message2 + selected.join(", ") + ", or " + lastItem + "?";
+  return message + selected.join(", ") + ", or " + lastItem + "?";
 }
 function identityFunc(x) {
   return x;
@@ -41279,17 +39529,17 @@ const escapeSequences = [
   "\\u009F"
 ];
 const BREAK = Object.freeze({});
-function visit(root2, visitor, visitorKeys = QueryDocumentKeys) {
+function visit(root, visitor, visitorKeys = QueryDocumentKeys) {
   const enterLeaveMap = /* @__PURE__ */ new Map();
   for (const kind of Object.values(Kind)) {
     enterLeaveMap.set(kind, getEnterLeaveForKind(visitor, kind));
   }
   let stack = void 0;
-  let inArray = Array.isArray(root2);
-  let keys2 = [root2];
+  let inArray = Array.isArray(root);
+  let keys2 = [root];
   let index = -1;
   let edits = [];
-  let node = root2;
+  let node = root;
   let key = void 0;
   let parent = void 0;
   const path2 = [];
@@ -41388,7 +39638,7 @@ function visit(root2, visitor, visitorKeys = QueryDocumentKeys) {
   if (edits.length !== 0) {
     return edits[edits.length - 1][1];
   }
-  return root2;
+  return root;
 }
 function visitInParallel(visitors) {
   const skipping = new Array(visitors.length).fill(null);
@@ -43577,10 +41827,10 @@ class SchemaValidationContext {
     this._errors = [];
     this.schema = schema;
   }
-  reportError(message2, nodes) {
+  reportError(message, nodes) {
     const _nodes = Array.isArray(nodes) ? nodes.filter(Boolean) : nodes;
     this._errors.push(
-      new GraphQLError(message2, {
+      new GraphQLError(message, {
         nodes: _nodes
       })
     );
@@ -47955,9 +46205,9 @@ var errorMessages = (messages, graphqlErrors) => {
     };
   }
   return {
-    errors: messages.map((message2) => {
+    errors: messages.map((message) => {
       return {
-        message: message2
+        message
       };
     })
   };
@@ -49094,7 +47344,9 @@ class RebaseApiServer {
    * Setup Hono middleware
    */
   setupMiddleware() {
-    this.router.use("/*", secureHeaders());
+    this.router.use("/*", secureHeaders({
+      crossOriginOpenerPolicy: "same-origin-allow-popups"
+    }));
     if (this.config.cors) {
       const origin = this.config.cors.origin;
       this.router.use("/*", cors({
@@ -49297,8 +47549,8 @@ async function loadFunctionsFromDirectory(directory) {
   Hint: ensure the function exports a Hono app created with the same hono version as the server.
   The loader checks for .fetch() and .routes — any Hono-compatible app will work.`);
       } catch (err) {
-        const message2 = err instanceof Error ? err.message : String(err);
-        console.error(`[functions] Failed to load ${file}: ${message2}`);
+        const message = err instanceof Error ? err.message : String(err);
+        console.error(`[functions] Failed to load ${file}: ${message}`);
       }
     }
   }
@@ -49370,8 +47622,8 @@ async function loadCronJobsFromDirectory(directory) {
         });
         console.log(`⏰ Loaded cron job: ${id} (${definition.schedule})`);
       } catch (err) {
-        const message2 = err instanceof Error ? err.message : String(err);
-        console.error(`[cron] Failed to load ${file}: ${message2}`);
+        const message = err instanceof Error ? err.message : String(err);
+        console.error(`[cron] Failed to load ${file}: ${message}`);
       }
     }
   }
@@ -49481,9 +47733,9 @@ function parseCronExpression(expression, after) {
     const month = candidate.getMonth() + 1;
     const dom = candidate.getDate();
     const dow = candidate.getDay();
-    const hour2 = candidate.getHours();
-    const minute2 = candidate.getMinutes();
-    if (months.includes(month) && doms.includes(dom) && dows.includes(dow) && hours.includes(hour2) && minutes.includes(minute2)) {
+    const hour = candidate.getHours();
+    const minute = candidate.getMinutes();
+    if (months.includes(month) && doms.includes(dom) && dows.includes(dow) && hours.includes(hour) && minutes.includes(minute)) {
       return candidate;
     }
     candidate.setMinutes(candidate.getMinutes() + 1);