@rebasepro/server-core 0.7.0 → 0.9.0

package/dist/jwt-BwIn8xmk.js

@@ -0,0 +1,4200 @@
+import { createRequire as __createRequire } from "module";
+import process from "process";
+__createRequire(import.meta.url);
+import { a as __require, i as __exportAll, n as __commonJSMin, s as __toESM, t as require_ms } from "./ms-DnYXB-Wd.js";
+import { t as logger } from "./logger-BYU66ENZ.js";
+import { createHash, randomBytes } from "crypto";
+//#region ../../node_modules/.pnpm/safe-buffer@5.2.1/node_modules/safe-buffer/index.js
+var require_safe_buffer = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> */
+	var buffer = __require("buffer");
+	var Buffer = buffer.Buffer;
+	function copyProps(src, dst) {
+		for (var key in src) dst[key] = src[key];
+	}
+	if (Buffer.from && Buffer.alloc && Buffer.allocUnsafe && Buffer.allocUnsafeSlow) module.exports = buffer;
+	else {
+		copyProps(buffer, exports);
+		exports.Buffer = SafeBuffer;
+	}
+	function SafeBuffer(arg, encodingOrOffset, length) {
+		return Buffer(arg, encodingOrOffset, length);
+	}
+	SafeBuffer.prototype = Object.create(Buffer.prototype);
+	copyProps(Buffer, SafeBuffer);
+	SafeBuffer.from = function(arg, encodingOrOffset, length) {
+		if (typeof arg === "number") throw new TypeError("Argument must not be a number");
+		return Buffer(arg, encodingOrOffset, length);
+	};
+	SafeBuffer.alloc = function(size, fill, encoding) {
+		if (typeof size !== "number") throw new TypeError("Argument must be a number");
+		var buf = Buffer(size);
+		if (fill !== void 0) if (typeof encoding === "string") buf.fill(fill, encoding);
+		else buf.fill(fill);
+		else buf.fill(0);
+		return buf;
+	};
+	SafeBuffer.allocUnsafe = function(size) {
+		if (typeof size !== "number") throw new TypeError("Argument must be a number");
+		return Buffer(size);
+	};
+	SafeBuffer.allocUnsafeSlow = function(size) {
+		if (typeof size !== "number") throw new TypeError("Argument must be a number");
+		return buffer.SlowBuffer(size);
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jws@4.0.1/node_modules/jws/lib/data-stream.js
+var require_data_stream = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Buffer = require_safe_buffer().Buffer;
+	var Stream$2 = __require("stream");
+	var util$3 = __require("util");
+	function DataStream(data) {
+		this.buffer = null;
+		this.writable = true;
+		this.readable = true;
+		if (!data) {
+			this.buffer = Buffer.alloc(0);
+			return this;
+		}
+		if (typeof data.pipe === "function") {
+			this.buffer = Buffer.alloc(0);
+			data.pipe(this);
+			return this;
+		}
+		if (data.length || typeof data === "object") {
+			this.buffer = data;
+			this.writable = false;
+			process.nextTick(function() {
+				this.emit("end", data);
+				this.readable = false;
+				this.emit("close");
+			}.bind(this));
+			return this;
+		}
+		throw new TypeError("Unexpected data type (" + typeof data + ")");
+	}
+	util$3.inherits(DataStream, Stream$2);
+	DataStream.prototype.write = function write(data) {
+		this.buffer = Buffer.concat([this.buffer, Buffer.from(data)]);
+		this.emit("data", data);
+	};
+	DataStream.prototype.end = function end(data) {
+		if (data) this.write(data);
+		this.emit("end", data);
+		this.emit("close");
+		this.writable = false;
+		this.readable = false;
+	};
+	module.exports = DataStream;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/ecdsa-sig-formatter@1.0.11/node_modules/ecdsa-sig-formatter/src/param-bytes-for-alg.js
+var require_param_bytes_for_alg = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	function getParamSize(keySize) {
+		return (keySize / 8 | 0) + (keySize % 8 === 0 ? 0 : 1);
+	}
+	var paramBytesForAlg = {
+		ES256: getParamSize(256),
+		ES384: getParamSize(384),
+		ES512: getParamSize(521)
+	};
+	function getParamBytesForAlg(alg) {
+		var paramBytes = paramBytesForAlg[alg];
+		if (paramBytes) return paramBytes;
+		throw new Error("Unknown algorithm \"" + alg + "\"");
+	}
+	module.exports = getParamBytesForAlg;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/ecdsa-sig-formatter@1.0.11/node_modules/ecdsa-sig-formatter/src/ecdsa-sig-formatter.js
+var require_ecdsa_sig_formatter = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Buffer = require_safe_buffer().Buffer;
+	var getParamBytesForAlg = require_param_bytes_for_alg();
+	var MAX_OCTET = 128, CLASS_UNIVERSAL = 0, PRIMITIVE_BIT = 32, TAG_SEQ = 16, TAG_INT = 2, ENCODED_TAG_SEQ = TAG_SEQ | PRIMITIVE_BIT | CLASS_UNIVERSAL << 6, ENCODED_TAG_INT = TAG_INT | CLASS_UNIVERSAL << 6;
+	function base64Url(base64) {
+		return base64.replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+	}
+	function signatureAsBuffer(signature) {
+		if (Buffer.isBuffer(signature)) return signature;
+		else if ("string" === typeof signature) return Buffer.from(signature, "base64");
+		throw new TypeError("ECDSA signature must be a Base64 string or a Buffer");
+	}
+	function derToJose(signature, alg) {
+		signature = signatureAsBuffer(signature);
+		var paramBytes = getParamBytesForAlg(alg);
+		var maxEncodedParamLength = paramBytes + 1;
+		var inputLength = signature.length;
+		var offset = 0;
+		if (signature[offset++] !== ENCODED_TAG_SEQ) throw new Error("Could not find expected \"seq\"");
+		var seqLength = signature[offset++];
+		if (seqLength === (MAX_OCTET | 1)) seqLength = signature[offset++];
+		if (inputLength - offset < seqLength) throw new Error("\"seq\" specified length of \"" + seqLength + "\", only \"" + (inputLength - offset) + "\" remaining");
+		if (signature[offset++] !== ENCODED_TAG_INT) throw new Error("Could not find expected \"int\" for \"r\"");
+		var rLength = signature[offset++];
+		if (inputLength - offset - 2 < rLength) throw new Error("\"r\" specified length of \"" + rLength + "\", only \"" + (inputLength - offset - 2) + "\" available");
+		if (maxEncodedParamLength < rLength) throw new Error("\"r\" specified length of \"" + rLength + "\", max of \"" + maxEncodedParamLength + "\" is acceptable");
+		var rOffset = offset;
+		offset += rLength;
+		if (signature[offset++] !== ENCODED_TAG_INT) throw new Error("Could not find expected \"int\" for \"s\"");
+		var sLength = signature[offset++];
+		if (inputLength - offset !== sLength) throw new Error("\"s\" specified length of \"" + sLength + "\", expected \"" + (inputLength - offset) + "\"");
+		if (maxEncodedParamLength < sLength) throw new Error("\"s\" specified length of \"" + sLength + "\", max of \"" + maxEncodedParamLength + "\" is acceptable");
+		var sOffset = offset;
+		offset += sLength;
+		if (offset !== inputLength) throw new Error("Expected to consume entire buffer, but \"" + (inputLength - offset) + "\" bytes remain");
+		var rPadding = paramBytes - rLength, sPadding = paramBytes - sLength;
+		var dst = Buffer.allocUnsafe(rPadding + rLength + sPadding + sLength);
+		for (offset = 0; offset < rPadding; ++offset) dst[offset] = 0;
+		signature.copy(dst, offset, rOffset + Math.max(-rPadding, 0), rOffset + rLength);
+		offset = paramBytes;
+		for (var o = offset; offset < o + sPadding; ++offset) dst[offset] = 0;
+		signature.copy(dst, offset, sOffset + Math.max(-sPadding, 0), sOffset + sLength);
+		dst = dst.toString("base64");
+		dst = base64Url(dst);
+		return dst;
+	}
+	function countPadding(buf, start, stop) {
+		var padding = 0;
+		while (start + padding < stop && buf[start + padding] === 0) ++padding;
+		if (buf[start + padding] >= MAX_OCTET) --padding;
+		return padding;
+	}
+	function joseToDer(signature, alg) {
+		signature = signatureAsBuffer(signature);
+		var paramBytes = getParamBytesForAlg(alg);
+		var signatureBytes = signature.length;
+		if (signatureBytes !== paramBytes * 2) throw new TypeError("\"" + alg + "\" signatures must be \"" + paramBytes * 2 + "\" bytes, saw \"" + signatureBytes + "\"");
+		var rPadding = countPadding(signature, 0, paramBytes);
+		var sPadding = countPadding(signature, paramBytes, signature.length);
+		var rLength = paramBytes - rPadding;
+		var sLength = paramBytes - sPadding;
+		var rsBytes = 2 + rLength + 1 + 1 + sLength;
+		var shortLength = rsBytes < MAX_OCTET;
+		var dst = Buffer.allocUnsafe((shortLength ? 2 : 3) + rsBytes);
+		var offset = 0;
+		dst[offset++] = ENCODED_TAG_SEQ;
+		if (shortLength) dst[offset++] = rsBytes;
+		else {
+			dst[offset++] = MAX_OCTET | 1;
+			dst[offset++] = rsBytes & 255;
+		}
+		dst[offset++] = ENCODED_TAG_INT;
+		dst[offset++] = rLength;
+		if (rPadding < 0) {
+			dst[offset++] = 0;
+			offset += signature.copy(dst, offset, 0, paramBytes);
+		} else offset += signature.copy(dst, offset, rPadding, paramBytes);
+		dst[offset++] = ENCODED_TAG_INT;
+		dst[offset++] = sLength;
+		if (sPadding < 0) {
+			dst[offset++] = 0;
+			signature.copy(dst, offset, paramBytes);
+		} else signature.copy(dst, offset, paramBytes + sPadding);
+		return dst;
+	}
+	module.exports = {
+		derToJose,
+		joseToDer
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/buffer-equal-constant-time@1.0.1/node_modules/buffer-equal-constant-time/index.js
+var require_buffer_equal_constant_time = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Buffer$2 = __require("buffer").Buffer;
+	var SlowBuffer = __require("buffer").SlowBuffer;
+	module.exports = bufferEq;
+	function bufferEq(a, b) {
+		if (!Buffer$2.isBuffer(a) || !Buffer$2.isBuffer(b)) return false;
+		if (a.length !== b.length) return false;
+		var c = 0;
+		for (var i = 0; i < a.length; i++) c |= a[i] ^ b[i];
+		return c === 0;
+	}
+	bufferEq.install = function() {
+		Buffer$2.prototype.equal = SlowBuffer.prototype.equal = function equal(that) {
+			return bufferEq(this, that);
+		};
+	};
+	var origBufEqual = Buffer$2.prototype.equal;
+	var origSlowBufEqual = SlowBuffer.prototype.equal;
+	bufferEq.restore = function() {
+		Buffer$2.prototype.equal = origBufEqual;
+		SlowBuffer.prototype.equal = origSlowBufEqual;
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jwa@2.0.1/node_modules/jwa/index.js
+var require_jwa = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Buffer = require_safe_buffer().Buffer;
+	var crypto = __require("crypto");
+	var formatEcdsa = require_ecdsa_sig_formatter();
+	var util$2 = __require("util");
+	var MSG_INVALID_ALGORITHM = "\"%s\" is not a valid algorithm.\n  Supported algorithms are:\n  \"HS256\", \"HS384\", \"HS512\", \"RS256\", \"RS384\", \"RS512\", \"PS256\", \"PS384\", \"PS512\", \"ES256\", \"ES384\", \"ES512\" and \"none\".";
+	var MSG_INVALID_SECRET = "secret must be a string or buffer";
+	var MSG_INVALID_VERIFIER_KEY = "key must be a string or a buffer";
+	var MSG_INVALID_SIGNER_KEY = "key must be a string, a buffer or an object";
+	var supportsKeyObjects = typeof crypto.createPublicKey === "function";
+	if (supportsKeyObjects) {
+		MSG_INVALID_VERIFIER_KEY += " or a KeyObject";
+		MSG_INVALID_SECRET += "or a KeyObject";
+	}
+	function checkIsPublicKey(key) {
+		if (Buffer.isBuffer(key)) return;
+		if (typeof key === "string") return;
+		if (!supportsKeyObjects) throw typeError(MSG_INVALID_VERIFIER_KEY);
+		if (typeof key !== "object") throw typeError(MSG_INVALID_VERIFIER_KEY);
+		if (typeof key.type !== "string") throw typeError(MSG_INVALID_VERIFIER_KEY);
+		if (typeof key.asymmetricKeyType !== "string") throw typeError(MSG_INVALID_VERIFIER_KEY);
+		if (typeof key.export !== "function") throw typeError(MSG_INVALID_VERIFIER_KEY);
+	}
+	function checkIsPrivateKey(key) {
+		if (Buffer.isBuffer(key)) return;
+		if (typeof key === "string") return;
+		if (typeof key === "object") return;
+		throw typeError(MSG_INVALID_SIGNER_KEY);
+	}
+	function checkIsSecretKey(key) {
+		if (Buffer.isBuffer(key)) return;
+		if (typeof key === "string") return key;
+		if (!supportsKeyObjects) throw typeError(MSG_INVALID_SECRET);
+		if (typeof key !== "object") throw typeError(MSG_INVALID_SECRET);
+		if (key.type !== "secret") throw typeError(MSG_INVALID_SECRET);
+		if (typeof key.export !== "function") throw typeError(MSG_INVALID_SECRET);
+	}
+	function fromBase64(base64) {
+		return base64.replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+	}
+	function toBase64(base64url) {
+		base64url = base64url.toString();
+		var padding = 4 - base64url.length % 4;
+		if (padding !== 4) for (var i = 0; i < padding; ++i) base64url += "=";
+		return base64url.replace(/\-/g, "+").replace(/_/g, "/");
+	}
+	function typeError(template) {
+		var args = [].slice.call(arguments, 1);
+		var errMsg = util$2.format.bind(util$2, template).apply(null, args);
+		return new TypeError(errMsg);
+	}
+	function bufferOrString(obj) {
+		return Buffer.isBuffer(obj) || typeof obj === "string";
+	}
+	function normalizeInput(thing) {
+		if (!bufferOrString(thing)) thing = JSON.stringify(thing);
+		return thing;
+	}
+	function createHmacSigner(bits) {
+		return function sign(thing, secret) {
+			checkIsSecretKey(secret);
+			thing = normalizeInput(thing);
+			var hmac = crypto.createHmac("sha" + bits, secret);
+			return fromBase64((hmac.update(thing), hmac.digest("base64")));
+		};
+	}
+	var bufferEqual;
+	var timingSafeEqual = "timingSafeEqual" in crypto ? function timingSafeEqual(a, b) {
+		if (a.byteLength !== b.byteLength) return false;
+		return crypto.timingSafeEqual(a, b);
+	} : function timingSafeEqual(a, b) {
+		if (!bufferEqual) bufferEqual = require_buffer_equal_constant_time();
+		return bufferEqual(a, b);
+	};
+	function createHmacVerifier(bits) {
+		return function verify(thing, signature, secret) {
+			var computedSig = createHmacSigner(bits)(thing, secret);
+			return timingSafeEqual(Buffer.from(signature), Buffer.from(computedSig));
+		};
+	}
+	function createKeySigner(bits) {
+		return function sign(thing, privateKey) {
+			checkIsPrivateKey(privateKey);
+			thing = normalizeInput(thing);
+			var signer = crypto.createSign("RSA-SHA" + bits);
+			return fromBase64((signer.update(thing), signer.sign(privateKey, "base64")));
+		};
+	}
+	function createKeyVerifier(bits) {
+		return function verify(thing, signature, publicKey) {
+			checkIsPublicKey(publicKey);
+			thing = normalizeInput(thing);
+			signature = toBase64(signature);
+			var verifier = crypto.createVerify("RSA-SHA" + bits);
+			verifier.update(thing);
+			return verifier.verify(publicKey, signature, "base64");
+		};
+	}
+	function createPSSKeySigner(bits) {
+		return function sign(thing, privateKey) {
+			checkIsPrivateKey(privateKey);
+			thing = normalizeInput(thing);
+			var signer = crypto.createSign("RSA-SHA" + bits);
+			return fromBase64((signer.update(thing), signer.sign({
+				key: privateKey,
+				padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
+				saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST
+			}, "base64")));
+		};
+	}
+	function createPSSKeyVerifier(bits) {
+		return function verify(thing, signature, publicKey) {
+			checkIsPublicKey(publicKey);
+			thing = normalizeInput(thing);
+			signature = toBase64(signature);
+			var verifier = crypto.createVerify("RSA-SHA" + bits);
+			verifier.update(thing);
+			return verifier.verify({
+				key: publicKey,
+				padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
+				saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST
+			}, signature, "base64");
+		};
+	}
+	function createECDSASigner(bits) {
+		var inner = createKeySigner(bits);
+		return function sign() {
+			var signature = inner.apply(null, arguments);
+			signature = formatEcdsa.derToJose(signature, "ES" + bits);
+			return signature;
+		};
+	}
+	function createECDSAVerifer(bits) {
+		var inner = createKeyVerifier(bits);
+		return function verify(thing, signature, publicKey) {
+			signature = formatEcdsa.joseToDer(signature, "ES" + bits).toString("base64");
+			return inner(thing, signature, publicKey);
+		};
+	}
+	function createNoneSigner() {
+		return function sign() {
+			return "";
+		};
+	}
+	function createNoneVerifier() {
+		return function verify(thing, signature) {
+			return signature === "";
+		};
+	}
+	module.exports = function jwa(algorithm) {
+		var signerFactories = {
+			hs: createHmacSigner,
+			rs: createKeySigner,
+			ps: createPSSKeySigner,
+			es: createECDSASigner,
+			none: createNoneSigner
+		};
+		var verifierFactories = {
+			hs: createHmacVerifier,
+			rs: createKeyVerifier,
+			ps: createPSSKeyVerifier,
+			es: createECDSAVerifer,
+			none: createNoneVerifier
+		};
+		var match = algorithm.match(/^(RS|PS|ES|HS)(256|384|512)$|^(none)$/);
+		if (!match) throw typeError(MSG_INVALID_ALGORITHM, algorithm);
+		var algo = (match[1] || match[3]).toLowerCase();
+		var bits = match[2];
+		return {
+			sign: signerFactories[algo](bits),
+			verify: verifierFactories[algo](bits)
+		};
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jws@4.0.1/node_modules/jws/lib/tostring.js
+var require_tostring = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Buffer$1 = __require("buffer").Buffer;
+	module.exports = function toString(obj) {
+		if (typeof obj === "string") return obj;
+		if (typeof obj === "number" || Buffer$1.isBuffer(obj)) return obj.toString();
+		return JSON.stringify(obj);
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jws@4.0.1/node_modules/jws/lib/sign-stream.js
+var require_sign_stream = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Buffer = require_safe_buffer().Buffer;
+	var DataStream = require_data_stream();
+	var jwa = require_jwa();
+	var Stream$1 = __require("stream");
+	var toString = require_tostring();
+	var util$1 = __require("util");
+	function base64url(string, encoding) {
+		return Buffer.from(string, encoding).toString("base64").replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+	}
+	function jwsSecuredInput(header, payload, encoding) {
+		encoding = encoding || "utf8";
+		var encodedHeader = base64url(toString(header), "binary");
+		var encodedPayload = base64url(toString(payload), encoding);
+		return util$1.format("%s.%s", encodedHeader, encodedPayload);
+	}
+	function jwsSign(opts) {
+		var header = opts.header;
+		var payload = opts.payload;
+		var secretOrKey = opts.secret || opts.privateKey;
+		var encoding = opts.encoding;
+		var algo = jwa(header.alg);
+		var securedInput = jwsSecuredInput(header, payload, encoding);
+		var signature = algo.sign(securedInput, secretOrKey);
+		return util$1.format("%s.%s", securedInput, signature);
+	}
+	function SignStream(opts) {
+		var secret = opts.secret;
+		secret = secret == null ? opts.privateKey : secret;
+		secret = secret == null ? opts.key : secret;
+		if (/^hs/i.test(opts.header.alg) === true && secret == null) throw new TypeError("secret must be a string or buffer or a KeyObject");
+		var secretStream = new DataStream(secret);
+		this.readable = true;
+		this.header = opts.header;
+		this.encoding = opts.encoding;
+		this.secret = this.privateKey = this.key = secretStream;
+		this.payload = new DataStream(opts.payload);
+		this.secret.once("close", function() {
+			if (!this.payload.writable && this.readable) this.sign();
+		}.bind(this));
+		this.payload.once("close", function() {
+			if (!this.secret.writable && this.readable) this.sign();
+		}.bind(this));
+	}
+	util$1.inherits(SignStream, Stream$1);
+	SignStream.prototype.sign = function sign() {
+		try {
+			var signature = jwsSign({
+				header: this.header,
+				payload: this.payload.buffer,
+				secret: this.secret.buffer,
+				encoding: this.encoding
+			});
+			this.emit("done", signature);
+			this.emit("data", signature);
+			this.emit("end");
+			this.readable = false;
+			return signature;
+		} catch (e) {
+			this.readable = false;
+			this.emit("error", e);
+			this.emit("close");
+		}
+	};
+	SignStream.sign = jwsSign;
+	module.exports = SignStream;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jws@4.0.1/node_modules/jws/lib/verify-stream.js
+var require_verify_stream = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Buffer = require_safe_buffer().Buffer;
+	var DataStream = require_data_stream();
+	var jwa = require_jwa();
+	var Stream = __require("stream");
+	var toString = require_tostring();
+	var util = __require("util");
+	var JWS_REGEX = /^[a-zA-Z0-9\-_]+?\.[a-zA-Z0-9\-_]+?\.([a-zA-Z0-9\-_]+)?$/;
+	function isObject(thing) {
+		return Object.prototype.toString.call(thing) === "[object Object]";
+	}
+	function safeJsonParse(thing) {
+		if (isObject(thing)) return thing;
+		try {
+			return JSON.parse(thing);
+		} catch (e) {
+			return;
+		}
+	}
+	function headerFromJWS(jwsSig) {
+		var encodedHeader = jwsSig.split(".", 1)[0];
+		return safeJsonParse(Buffer.from(encodedHeader, "base64").toString("binary"));
+	}
+	function securedInputFromJWS(jwsSig) {
+		return jwsSig.split(".", 2).join(".");
+	}
+	function signatureFromJWS(jwsSig) {
+		return jwsSig.split(".")[2];
+	}
+	function payloadFromJWS(jwsSig, encoding) {
+		encoding = encoding || "utf8";
+		var payload = jwsSig.split(".")[1];
+		return Buffer.from(payload, "base64").toString(encoding);
+	}
+	function isValidJws(string) {
+		return JWS_REGEX.test(string) && !!headerFromJWS(string);
+	}
+	function jwsVerify(jwsSig, algorithm, secretOrKey) {
+		if (!algorithm) {
+			var err = /* @__PURE__ */ new Error("Missing algorithm parameter for jws.verify");
+			err.code = "MISSING_ALGORITHM";
+			throw err;
+		}
+		jwsSig = toString(jwsSig);
+		var signature = signatureFromJWS(jwsSig);
+		var securedInput = securedInputFromJWS(jwsSig);
+		return jwa(algorithm).verify(securedInput, signature, secretOrKey);
+	}
+	function jwsDecode(jwsSig, opts) {
+		opts = opts || {};
+		jwsSig = toString(jwsSig);
+		if (!isValidJws(jwsSig)) return null;
+		var header = headerFromJWS(jwsSig);
+		if (!header) return null;
+		var payload = payloadFromJWS(jwsSig);
+		if (header.typ === "JWT" || opts.json) payload = JSON.parse(payload, opts.encoding);
+		return {
+			header,
+			payload,
+			signature: signatureFromJWS(jwsSig)
+		};
+	}
+	function VerifyStream(opts) {
+		opts = opts || {};
+		var secretOrKey = opts.secret;
+		secretOrKey = secretOrKey == null ? opts.publicKey : secretOrKey;
+		secretOrKey = secretOrKey == null ? opts.key : secretOrKey;
+		if (/^hs/i.test(opts.algorithm) === true && secretOrKey == null) throw new TypeError("secret must be a string or buffer or a KeyObject");
+		var secretStream = new DataStream(secretOrKey);
+		this.readable = true;
+		this.algorithm = opts.algorithm;
+		this.encoding = opts.encoding;
+		this.secret = this.publicKey = this.key = secretStream;
+		this.signature = new DataStream(opts.signature);
+		this.secret.once("close", function() {
+			if (!this.signature.writable && this.readable) this.verify();
+		}.bind(this));
+		this.signature.once("close", function() {
+			if (!this.secret.writable && this.readable) this.verify();
+		}.bind(this));
+	}
+	util.inherits(VerifyStream, Stream);
+	VerifyStream.prototype.verify = function verify() {
+		try {
+			var valid = jwsVerify(this.signature.buffer, this.algorithm, this.key.buffer);
+			var obj = jwsDecode(this.signature.buffer, this.encoding);
+			this.emit("done", valid, obj);
+			this.emit("data", valid);
+			this.emit("end");
+			this.readable = false;
+			return valid;
+		} catch (e) {
+			this.readable = false;
+			this.emit("error", e);
+			this.emit("close");
+		}
+	};
+	VerifyStream.decode = jwsDecode;
+	VerifyStream.isValid = isValidJws;
+	VerifyStream.verify = jwsVerify;
+	module.exports = VerifyStream;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jws@4.0.1/node_modules/jws/index.js
+var require_jws = /* @__PURE__ */ __commonJSMin(((exports) => {
+	var SignStream = require_sign_stream();
+	var VerifyStream = require_verify_stream();
+	exports.ALGORITHMS = [
+		"HS256",
+		"HS384",
+		"HS512",
+		"RS256",
+		"RS384",
+		"RS512",
+		"PS256",
+		"PS384",
+		"PS512",
+		"ES256",
+		"ES384",
+		"ES512"
+	];
+	exports.sign = SignStream.sign;
+	exports.verify = VerifyStream.verify;
+	exports.decode = VerifyStream.decode;
+	exports.isValid = VerifyStream.isValid;
+	exports.createSign = function createSign(opts) {
+		return new SignStream(opts);
+	};
+	exports.createVerify = function createVerify(opts) {
+		return new VerifyStream(opts);
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/decode.js
+var require_decode = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var jws = require_jws();
+	module.exports = function(jwt, options) {
+		options = options || {};
+		var decoded = jws.decode(jwt, options);
+		if (!decoded) return null;
+		var payload = decoded.payload;
+		if (typeof payload === "string") try {
+			var obj = JSON.parse(payload);
+			if (obj !== null && typeof obj === "object") payload = obj;
+		} catch (e) {}
+		if (options.complete === true) return {
+			header: decoded.header,
+			payload,
+			signature: decoded.signature
+		};
+		return payload;
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/lib/JsonWebTokenError.js
+var require_JsonWebTokenError = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var JsonWebTokenError = function(message, error) {
+		Error.call(this, message);
+		if (Error.captureStackTrace) Error.captureStackTrace(this, this.constructor);
+		this.name = "JsonWebTokenError";
+		this.message = message;
+		if (error) this.inner = error;
+	};
+	JsonWebTokenError.prototype = Object.create(Error.prototype);
+	JsonWebTokenError.prototype.constructor = JsonWebTokenError;
+	module.exports = JsonWebTokenError;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/lib/NotBeforeError.js
+var require_NotBeforeError = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var JsonWebTokenError = require_JsonWebTokenError();
+	var NotBeforeError = function(message, date) {
+		JsonWebTokenError.call(this, message);
+		this.name = "NotBeforeError";
+		this.date = date;
+	};
+	NotBeforeError.prototype = Object.create(JsonWebTokenError.prototype);
+	NotBeforeError.prototype.constructor = NotBeforeError;
+	module.exports = NotBeforeError;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/lib/TokenExpiredError.js
+var require_TokenExpiredError = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var JsonWebTokenError = require_JsonWebTokenError();
+	var TokenExpiredError = function(message, expiredAt) {
+		JsonWebTokenError.call(this, message);
+		this.name = "TokenExpiredError";
+		this.expiredAt = expiredAt;
+	};
+	TokenExpiredError.prototype = Object.create(JsonWebTokenError.prototype);
+	TokenExpiredError.prototype.constructor = TokenExpiredError;
+	module.exports = TokenExpiredError;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/lib/timespan.js
+var require_timespan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var ms = require_ms();
+	module.exports = function(time, iat) {
+		var timestamp = iat || Math.floor(Date.now() / 1e3);
+		if (typeof time === "string") {
+			var milliseconds = ms(time);
+			if (typeof milliseconds === "undefined") return;
+			return Math.floor(timestamp + milliseconds / 1e3);
+		} else if (typeof time === "number") return timestamp + time;
+		else return;
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/internal/constants.js
+var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SEMVER_SPEC_VERSION = "2.0.0";
+	var MAX_LENGTH = 256;
+	var MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER || 9007199254740991;
+	module.exports = {
+		MAX_LENGTH,
+		MAX_SAFE_COMPONENT_LENGTH: 16,
+		MAX_SAFE_BUILD_LENGTH: MAX_LENGTH - 6,
+		MAX_SAFE_INTEGER,
+		RELEASE_TYPES: [
+			"major",
+			"premajor",
+			"minor",
+			"preminor",
+			"patch",
+			"prepatch",
+			"prerelease"
+		],
+		SEMVER_SPEC_VERSION,
+		FLAG_INCLUDE_PRERELEASE: 1,
+		FLAG_LOOSE: 2
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/internal/debug.js
+var require_debug = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	module.exports = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/internal/re.js
+var require_re = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var { MAX_SAFE_COMPONENT_LENGTH, MAX_SAFE_BUILD_LENGTH, MAX_LENGTH } = require_constants();
+	var debug = require_debug();
+	exports = module.exports = {};
+	var re = exports.re = [];
+	var safeRe = exports.safeRe = [];
+	var src = exports.src = [];
+	var safeSrc = exports.safeSrc = [];
+	var t = exports.t = {};
+	var R = 0;
+	var LETTERDASHNUMBER = "[a-zA-Z0-9-]";
+	var safeRegexReplacements = [
+		["\\s", 1],
+		["\\d", MAX_LENGTH],
+		[LETTERDASHNUMBER, MAX_SAFE_BUILD_LENGTH]
+	];
+	var makeSafeRegex = (value) => {
+		for (const [token, max] of safeRegexReplacements) value = value.split(`${token}*`).join(`${token}{0,${max}}`).split(`${token}+`).join(`${token}{1,${max}}`);
+		return value;
+	};
+	var createToken = (name, value, isGlobal) => {
+		const safe = makeSafeRegex(value);
+		const index = R++;
+		debug(name, index, value);
+		t[name] = index;
+		src[index] = value;
+		safeSrc[index] = safe;
+		re[index] = new RegExp(value, isGlobal ? "g" : void 0);
+		safeRe[index] = new RegExp(safe, isGlobal ? "g" : void 0);
+	};
+	createToken("NUMERICIDENTIFIER", "0|[1-9]\\d*");
+	createToken("NUMERICIDENTIFIERLOOSE", "\\d+");
+	createToken("NONNUMERICIDENTIFIER", `\\d*[a-zA-Z-]${LETTERDASHNUMBER}*`);
+	createToken("MAINVERSION", `(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})`);
+	createToken("MAINVERSIONLOOSE", `(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})`);
+	createToken("PRERELEASEIDENTIFIER", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIER]})`);
+	createToken("PRERELEASEIDENTIFIERLOOSE", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIERLOOSE]})`);
+	createToken("PRERELEASE", `(?:-(${src[t.PRERELEASEIDENTIFIER]}(?:\\.${src[t.PRERELEASEIDENTIFIER]})*))`);
+	createToken("PRERELEASELOOSE", `(?:-?(${src[t.PRERELEASEIDENTIFIERLOOSE]}(?:\\.${src[t.PRERELEASEIDENTIFIERLOOSE]})*))`);
+	createToken("BUILDIDENTIFIER", `${LETTERDASHNUMBER}+`);
+	createToken("BUILD", `(?:\\+(${src[t.BUILDIDENTIFIER]}(?:\\.${src[t.BUILDIDENTIFIER]})*))`);
+	createToken("FULLPLAIN", `v?${src[t.MAINVERSION]}${src[t.PRERELEASE]}?${src[t.BUILD]}?`);
+	createToken("FULL", `^${src[t.FULLPLAIN]}$`);
+	createToken("LOOSEPLAIN", `[v=\\s]*${src[t.MAINVERSIONLOOSE]}${src[t.PRERELEASELOOSE]}?${src[t.BUILD]}?`);
+	createToken("LOOSE", `^${src[t.LOOSEPLAIN]}$`);
+	createToken("GTLT", "((?:<|>)?=?)");
+	createToken("XRANGEIDENTIFIERLOOSE", `${src[t.NUMERICIDENTIFIERLOOSE]}|x|X|\\*`);
+	createToken("XRANGEIDENTIFIER", `${src[t.NUMERICIDENTIFIER]}|x|X|\\*`);
+	createToken("XRANGEPLAIN", `[v=\\s]*(${src[t.XRANGEIDENTIFIER]})(?:\\.(${src[t.XRANGEIDENTIFIER]})(?:\\.(${src[t.XRANGEIDENTIFIER]})(?:${src[t.PRERELEASE]})?${src[t.BUILD]}?)?)?`);
+	createToken("XRANGEPLAINLOOSE", `[v=\\s]*(${src[t.XRANGEIDENTIFIERLOOSE]})(?:\\.(${src[t.XRANGEIDENTIFIERLOOSE]})(?:\\.(${src[t.XRANGEIDENTIFIERLOOSE]})(?:${src[t.PRERELEASELOOSE]})?${src[t.BUILD]}?)?)?`);
+	createToken("XRANGE", `^${src[t.GTLT]}\\s*${src[t.XRANGEPLAIN]}$`);
+	createToken("XRANGELOOSE", `^${src[t.GTLT]}\\s*${src[t.XRANGEPLAINLOOSE]}$`);
+	createToken("COERCEPLAIN", `(^|[^\\d])(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}})(?:\\.(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}}))?(?:\\.(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}}))?`);
+	createToken("COERCE", `${src[t.COERCEPLAIN]}(?:$|[^\\d])`);
+	createToken("COERCEFULL", src[t.COERCEPLAIN] + `(?:${src[t.PRERELEASE]})?(?:${src[t.BUILD]})?(?:$|[^\\d])`);
+	createToken("COERCERTL", src[t.COERCE], true);
+	createToken("COERCERTLFULL", src[t.COERCEFULL], true);
+	createToken("LONETILDE", "(?:~>?)");
+	createToken("TILDETRIM", `(\\s*)${src[t.LONETILDE]}\\s+`, true);
+	exports.tildeTrimReplace = "$1~";
+	createToken("TILDE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAIN]}$`);
+	createToken("TILDELOOSE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAINLOOSE]}$`);
+	createToken("LONECARET", "(?:\\^)");
+	createToken("CARETTRIM", `(\\s*)${src[t.LONECARET]}\\s+`, true);
+	exports.caretTrimReplace = "$1^";
+	createToken("CARET", `^${src[t.LONECARET]}${src[t.XRANGEPLAIN]}$`);
+	createToken("CARETLOOSE", `^${src[t.LONECARET]}${src[t.XRANGEPLAINLOOSE]}$`);
+	createToken("COMPARATORLOOSE", `^${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]})$|^$`);
+	createToken("COMPARATOR", `^${src[t.GTLT]}\\s*(${src[t.FULLPLAIN]})$|^$`);
+	createToken("COMPARATORTRIM", `(\\s*)${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]}|${src[t.XRANGEPLAIN]})`, true);
+	exports.comparatorTrimReplace = "$1$2$3";
+	createToken("HYPHENRANGE", `^\\s*(${src[t.XRANGEPLAIN]})\\s+-\\s+(${src[t.XRANGEPLAIN]})\\s*$`);
+	createToken("HYPHENRANGELOOSE", `^\\s*(${src[t.XRANGEPLAINLOOSE]})\\s+-\\s+(${src[t.XRANGEPLAINLOOSE]})\\s*$`);
+	createToken("STAR", "(<|>)?=?\\s*\\*");
+	createToken("GTE0", "^\\s*>=\\s*0\\.0\\.0\\s*$");
+	createToken("GTE0PRE", "^\\s*>=\\s*0\\.0\\.0-0\\s*$");
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/internal/parse-options.js
+var require_parse_options = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var looseOption = Object.freeze({ loose: true });
+	var emptyOpts = Object.freeze({});
+	var parseOptions = (options) => {
+		if (!options) return emptyOpts;
+		if (typeof options !== "object") return looseOption;
+		return options;
+	};
+	module.exports = parseOptions;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/internal/identifiers.js
+var require_identifiers = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var numeric = /^[0-9]+$/;
+	var compareIdentifiers = (a, b) => {
+		if (typeof a === "number" && typeof b === "number") return a === b ? 0 : a < b ? -1 : 1;
+		const anum = numeric.test(a);
+		const bnum = numeric.test(b);
+		if (anum && bnum) {
+			a = +a;
+			b = +b;
+		}
+		return a === b ? 0 : anum && !bnum ? -1 : bnum && !anum ? 1 : a < b ? -1 : 1;
+	};
+	var rcompareIdentifiers = (a, b) => compareIdentifiers(b, a);
+	module.exports = {
+		compareIdentifiers,
+		rcompareIdentifiers
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/classes/semver.js
+var require_semver$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var debug = require_debug();
+	var { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants();
+	var { safeRe: re, t } = require_re();
+	var parseOptions = require_parse_options();
+	var { compareIdentifiers } = require_identifiers();
+	var isPrereleaseIdentifier = (prerelease, identifier) => {
+		const identifiers = identifier.split(".");
+		if (identifiers.length > prerelease.length) return false;
+		for (let i = 0; i < identifiers.length; i++) if (compareIdentifiers(prerelease[i], identifiers[i]) !== 0) return false;
+		return true;
+	};
+	module.exports = class SemVer {
+		constructor(version, options) {
+			options = parseOptions(options);
+			if (version instanceof SemVer) if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) return version;
+			else version = version.version;
+			else if (typeof version !== "string") throw new TypeError(`Invalid version. Must be a string. Got type "${typeof version}".`);
+			if (version.length > MAX_LENGTH) throw new TypeError(`version is longer than ${MAX_LENGTH} characters`);
+			debug("SemVer", version, options);
+			this.options = options;
+			this.loose = !!options.loose;
+			this.includePrerelease = !!options.includePrerelease;
+			const m = version.trim().match(options.loose ? re[t.LOOSE] : re[t.FULL]);
+			if (!m) throw new TypeError(`Invalid Version: ${version}`);
+			this.raw = version;
+			this.major = +m[1];
+			this.minor = +m[2];
+			this.patch = +m[3];
+			if (this.major > MAX_SAFE_INTEGER || this.major < 0) throw new TypeError("Invalid major version");
+			if (this.minor > MAX_SAFE_INTEGER || this.minor < 0) throw new TypeError("Invalid minor version");
+			if (this.patch > MAX_SAFE_INTEGER || this.patch < 0) throw new TypeError("Invalid patch version");
+			if (!m[4]) this.prerelease = [];
+			else this.prerelease = m[4].split(".").map((id) => {
+				if (/^[0-9]+$/.test(id)) {
+					const num = +id;
+					if (num >= 0 && num < MAX_SAFE_INTEGER) return num;
+				}
+				return id;
+			});
+			this.build = m[5] ? m[5].split(".") : [];
+			this.format();
+		}
+		format() {
+			this.version = `${this.major}.${this.minor}.${this.patch}`;
+			if (this.prerelease.length) this.version += `-${this.prerelease.join(".")}`;
+			return this.version;
+		}
+		toString() {
+			return this.version;
+		}
+		compare(other) {
+			debug("SemVer.compare", this.version, this.options, other);
+			if (!(other instanceof SemVer)) {
+				if (typeof other === "string" && other === this.version) return 0;
+				other = new SemVer(other, this.options);
+			}
+			if (other.version === this.version) return 0;
+			return this.compareMain(other) || this.comparePre(other);
+		}
+		compareMain(other) {
+			if (!(other instanceof SemVer)) other = new SemVer(other, this.options);
+			if (this.major < other.major) return -1;
+			if (this.major > other.major) return 1;
+			if (this.minor < other.minor) return -1;
+			if (this.minor > other.minor) return 1;
+			if (this.patch < other.patch) return -1;
+			if (this.patch > other.patch) return 1;
+			return 0;
+		}
+		comparePre(other) {
+			if (!(other instanceof SemVer)) other = new SemVer(other, this.options);
+			if (this.prerelease.length && !other.prerelease.length) return -1;
+			else if (!this.prerelease.length && other.prerelease.length) return 1;
+			else if (!this.prerelease.length && !other.prerelease.length) return 0;
+			let i = 0;
+			do {
+				const a = this.prerelease[i];
+				const b = other.prerelease[i];
+				debug("prerelease compare", i, a, b);
+				if (a === void 0 && b === void 0) return 0;
+				else if (b === void 0) return 1;
+				else if (a === void 0) return -1;
+				else if (a === b) continue;
+				else return compareIdentifiers(a, b);
+			} while (++i);
+		}
+		compareBuild(other) {
+			if (!(other instanceof SemVer)) other = new SemVer(other, this.options);
+			let i = 0;
+			do {
+				const a = this.build[i];
+				const b = other.build[i];
+				debug("build compare", i, a, b);
+				if (a === void 0 && b === void 0) return 0;
+				else if (b === void 0) return 1;
+				else if (a === void 0) return -1;
+				else if (a === b) continue;
+				else return compareIdentifiers(a, b);
+			} while (++i);
+		}
+		inc(release, identifier, identifierBase) {
+			if (release.startsWith("pre")) {
+				if (!identifier && identifierBase === false) throw new Error("invalid increment argument: identifier is empty");
+				if (identifier) {
+					const match = `-${identifier}`.match(this.options.loose ? re[t.PRERELEASELOOSE] : re[t.PRERELEASE]);
+					if (!match || match[1] !== identifier) throw new Error(`invalid identifier: ${identifier}`);
+				}
+			}
+			switch (release) {
+				case "premajor":
+					this.prerelease.length = 0;
+					this.patch = 0;
+					this.minor = 0;
+					this.major++;
+					this.inc("pre", identifier, identifierBase);
+					break;
+				case "preminor":
+					this.prerelease.length = 0;
+					this.patch = 0;
+					this.minor++;
+					this.inc("pre", identifier, identifierBase);
+					break;
+				case "prepatch":
+					this.prerelease.length = 0;
+					this.inc("patch", identifier, identifierBase);
+					this.inc("pre", identifier, identifierBase);
+					break;
+				case "prerelease":
+					if (this.prerelease.length === 0) this.inc("patch", identifier, identifierBase);
+					this.inc("pre", identifier, identifierBase);
+					break;
+				case "release":
+					if (this.prerelease.length === 0) throw new Error(`version ${this.raw} is not a prerelease`);
+					this.prerelease.length = 0;
+					break;
+				case "major":
+					if (this.minor !== 0 || this.patch !== 0 || this.prerelease.length === 0) this.major++;
+					this.minor = 0;
+					this.patch = 0;
+					this.prerelease = [];
+					break;
+				case "minor":
+					if (this.patch !== 0 || this.prerelease.length === 0) this.minor++;
+					this.patch = 0;
+					this.prerelease = [];
+					break;
+				case "patch":
+					if (this.prerelease.length === 0) this.patch++;
+					this.prerelease = [];
+					break;
+				case "pre": {
+					const base = Number(identifierBase) ? 1 : 0;
+					if (this.prerelease.length === 0) this.prerelease = [base];
+					else {
+						let i = this.prerelease.length;
+						while (--i >= 0) if (typeof this.prerelease[i] === "number") {
+							this.prerelease[i]++;
+							i = -2;
+						}
+						if (i === -1) {
+							if (identifier === this.prerelease.join(".") && identifierBase === false) throw new Error("invalid increment argument: identifier already exists");
+							this.prerelease.push(base);
+						}
+					}
+					if (identifier) {
+						let prerelease = [identifier, base];
+						if (identifierBase === false) prerelease = [identifier];
+						if (isPrereleaseIdentifier(this.prerelease, identifier)) {
+							const prereleaseBase = this.prerelease[identifier.split(".").length];
+							if (isNaN(prereleaseBase)) this.prerelease = prerelease;
+						} else this.prerelease = prerelease;
+					}
+					break;
+				}
+				default: throw new Error(`invalid increment argument: ${release}`);
+			}
+			this.raw = this.format();
+			if (this.build.length) this.raw += `+${this.build.join(".")}`;
+			return this;
+		}
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/parse.js
+var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var parse = (version, options, throwErrors = false) => {
+		if (version instanceof SemVer) return version;
+		try {
+			return new SemVer(version, options);
+		} catch (er) {
+			if (!throwErrors) return null;
+			throw er;
+		}
+	};
+	module.exports = parse;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/valid.js
+var require_valid$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var parse = require_parse();
+	var valid = (version, options) => {
+		const v = parse(version, options);
+		return v ? v.version : null;
+	};
+	module.exports = valid;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/clean.js
+var require_clean = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var parse = require_parse();
+	var clean = (version, options) => {
+		const s = parse(version.trim().replace(/^[=v]+/, ""), options);
+		return s ? s.version : null;
+	};
+	module.exports = clean;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/inc.js
+var require_inc = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var inc = (version, release, options, identifier, identifierBase) => {
+		if (typeof options === "string") {
+			identifierBase = identifier;
+			identifier = options;
+			options = void 0;
+		}
+		try {
+			return new SemVer(version instanceof SemVer ? version.version : version, options).inc(release, identifier, identifierBase).version;
+		} catch (er) {
+			return null;
+		}
+	};
+	module.exports = inc;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/diff.js
+var require_diff = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var parse = require_parse();
+	var diff = (version1, version2) => {
+		const v1 = parse(version1, null, true);
+		const v2 = parse(version2, null, true);
+		const comparison = v1.compare(v2);
+		if (comparison === 0) return null;
+		const v1Higher = comparison > 0;
+		const highVersion = v1Higher ? v1 : v2;
+		const lowVersion = v1Higher ? v2 : v1;
+		const highHasPre = !!highVersion.prerelease.length;
+		if (!!lowVersion.prerelease.length && !highHasPre) {
+			if (!lowVersion.patch && !lowVersion.minor) return "major";
+			if (lowVersion.compareMain(highVersion) === 0) {
+				if (lowVersion.minor && !lowVersion.patch) return "minor";
+				return "patch";
+			}
+		}
+		const prefix = highHasPre ? "pre" : "";
+		if (v1.major !== v2.major) return prefix + "major";
+		if (v1.minor !== v2.minor) return prefix + "minor";
+		if (v1.patch !== v2.patch) return prefix + "patch";
+		return "prerelease";
+	};
+	module.exports = diff;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/major.js
+var require_major = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var major = (a, loose) => new SemVer(a, loose).major;
+	module.exports = major;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/minor.js
+var require_minor = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var minor = (a, loose) => new SemVer(a, loose).minor;
+	module.exports = minor;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/patch.js
+var require_patch = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var patch = (a, loose) => new SemVer(a, loose).patch;
+	module.exports = patch;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/prerelease.js
+var require_prerelease = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var parse = require_parse();
+	var prerelease = (version, options) => {
+		const parsed = parse(version, options);
+		return parsed && parsed.prerelease.length ? parsed.prerelease : null;
+	};
+	module.exports = prerelease;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/compare.js
+var require_compare = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var compare = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
+	module.exports = compare;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/rcompare.js
+var require_rcompare = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var compare = require_compare();
+	var rcompare = (a, b, loose) => compare(b, a, loose);
+	module.exports = rcompare;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/compare-loose.js
+var require_compare_loose = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var compare = require_compare();
+	var compareLoose = (a, b) => compare(a, b, true);
+	module.exports = compareLoose;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/compare-build.js
+var require_compare_build = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var compareBuild = (a, b, loose) => {
+		const versionA = new SemVer(a, loose);
+		const versionB = new SemVer(b, loose);
+		return versionA.compare(versionB) || versionA.compareBuild(versionB);
+	};
+	module.exports = compareBuild;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/sort.js
+var require_sort = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var compareBuild = require_compare_build();
+	var sort = (list, loose) => list.sort((a, b) => compareBuild(a, b, loose));
+	module.exports = sort;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/rsort.js
+var require_rsort = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var compareBuild = require_compare_build();
+	var rsort = (list, loose) => list.sort((a, b) => compareBuild(b, a, loose));
+	module.exports = rsort;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/gt.js
+var require_gt = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var compare = require_compare();
+	var gt = (a, b, loose) => compare(a, b, loose) > 0;
+	module.exports = gt;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/lt.js
+var require_lt = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var compare = require_compare();
+	var lt = (a, b, loose) => compare(a, b, loose) < 0;
+	module.exports = lt;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/eq.js
+var require_eq = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var compare = require_compare();
+	var eq = (a, b, loose) => compare(a, b, loose) === 0;
+	module.exports = eq;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/neq.js
+var require_neq = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var compare = require_compare();
+	var neq = (a, b, loose) => compare(a, b, loose) !== 0;
+	module.exports = neq;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/gte.js
+var require_gte = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var compare = require_compare();
+	var gte = (a, b, loose) => compare(a, b, loose) >= 0;
+	module.exports = gte;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/lte.js
+var require_lte = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var compare = require_compare();
+	var lte = (a, b, loose) => compare(a, b, loose) <= 0;
+	module.exports = lte;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/cmp.js
+var require_cmp = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var eq = require_eq();
+	var neq = require_neq();
+	var gt = require_gt();
+	var gte = require_gte();
+	var lt = require_lt();
+	var lte = require_lte();
+	var cmp = (a, op, b, loose) => {
+		switch (op) {
+			case "===":
+				if (typeof a === "object") a = a.version;
+				if (typeof b === "object") b = b.version;
+				return a === b;
+			case "!==":
+				if (typeof a === "object") a = a.version;
+				if (typeof b === "object") b = b.version;
+				return a !== b;
+			case "":
+			case "=":
+			case "==": return eq(a, b, loose);
+			case "!=": return neq(a, b, loose);
+			case ">": return gt(a, b, loose);
+			case ">=": return gte(a, b, loose);
+			case "<": return lt(a, b, loose);
+			case "<=": return lte(a, b, loose);
+			default: throw new TypeError(`Invalid operator: ${op}`);
+		}
+	};
+	module.exports = cmp;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/coerce.js
+var require_coerce = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var parse = require_parse();
+	var { safeRe: re, t } = require_re();
+	var coerce = (version, options) => {
+		if (version instanceof SemVer) return version;
+		if (typeof version === "number") version = String(version);
+		if (typeof version !== "string") return null;
+		options = options || {};
+		let match = null;
+		if (!options.rtl) match = version.match(options.includePrerelease ? re[t.COERCEFULL] : re[t.COERCE]);
+		else {
+			const coerceRtlRegex = options.includePrerelease ? re[t.COERCERTLFULL] : re[t.COERCERTL];
+			let next;
+			while ((next = coerceRtlRegex.exec(version)) && (!match || match.index + match[0].length !== version.length)) {
+				if (!match || next.index + next[0].length !== match.index + match[0].length) match = next;
+				coerceRtlRegex.lastIndex = next.index + next[1].length + next[2].length;
+			}
+			coerceRtlRegex.lastIndex = -1;
+		}
+		if (match === null) return null;
+		const major = match[2];
+		return parse(`${major}.${match[3] || "0"}.${match[4] || "0"}${options.includePrerelease && match[5] ? `-${match[5]}` : ""}${options.includePrerelease && match[6] ? `+${match[6]}` : ""}`, options);
+	};
+	module.exports = coerce;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/truncate.js
+var require_truncate = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var parse = require_parse();
+	var constants = require_constants();
+	var SemVer = require_semver$1();
+	var truncate = (version, truncation, options) => {
+		if (!constants.RELEASE_TYPES.includes(truncation)) return null;
+		const clonedVersion = cloneInputVersion(version, options);
+		return clonedVersion && doTruncation(clonedVersion, truncation);
+	};
+	var cloneInputVersion = (version, options) => {
+		return parse(version instanceof SemVer ? version.version : version, options);
+	};
+	var doTruncation = (version, truncation) => {
+		if (isPrerelease(truncation)) return version.version;
+		version.prerelease = [];
+		switch (truncation) {
+			case "major":
+				version.minor = 0;
+				version.patch = 0;
+				break;
+			case "minor":
+				version.patch = 0;
+				break;
+		}
+		return version.format();
+	};
+	var isPrerelease = (type) => {
+		return type.startsWith("pre");
+	};
+	module.exports = truncate;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/internal/lrucache.js
+var require_lrucache = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var LRUCache = class {
+		constructor() {
+			this.max = 1e3;
+			this.map = /* @__PURE__ */ new Map();
+		}
+		get(key) {
+			const value = this.map.get(key);
+			if (value === void 0) return;
+			else {
+				this.map.delete(key);
+				this.map.set(key, value);
+				return value;
+			}
+		}
+		delete(key) {
+			return this.map.delete(key);
+		}
+		set(key, value) {
+			if (!this.delete(key) && value !== void 0) {
+				if (this.map.size >= this.max) {
+					const firstKey = this.map.keys().next().value;
+					this.delete(firstKey);
+				}
+				this.map.set(key, value);
+			}
+			return this;
+		}
+	};
+	module.exports = LRUCache;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/classes/range.js
+var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SPACE_CHARACTERS = /\s+/g;
+	module.exports = class Range {
+		constructor(range, options) {
+			options = parseOptions(options);
+			if (range instanceof Range) if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) return range;
+			else return new Range(range.raw, options);
+			if (range instanceof Comparator) {
+				this.raw = range.value;
+				this.set = [[range]];
+				this.formatted = void 0;
+				return this;
+			}
+			this.options = options;
+			this.loose = !!options.loose;
+			this.includePrerelease = !!options.includePrerelease;
+			this.raw = range.trim().replace(SPACE_CHARACTERS, " ");
+			this.set = this.raw.split("||").map((r) => this.parseRange(r.trim())).filter((c) => c.length);
+			if (!this.set.length) throw new TypeError(`Invalid SemVer Range: ${this.raw}`);
+			if (this.set.length > 1) {
+				const first = this.set[0];
+				this.set = this.set.filter((c) => !isNullSet(c[0]));
+				if (this.set.length === 0) this.set = [first];
+				else if (this.set.length > 1) {
+					for (const c of this.set) if (c.length === 1 && isAny(c[0])) {
+						this.set = [c];
+						break;
+					}
+				}
+			}
+			this.formatted = void 0;
+		}
+		get range() {
+			if (this.formatted === void 0) {
+				this.formatted = "";
+				for (let i = 0; i < this.set.length; i++) {
+					if (i > 0) this.formatted += "||";
+					const comps = this.set[i];
+					for (let k = 0; k < comps.length; k++) {
+						if (k > 0) this.formatted += " ";
+						this.formatted += comps[k].toString().trim();
+					}
+				}
+			}
+			return this.formatted;
+		}
+		format() {
+			return this.range;
+		}
+		toString() {
+			return this.range;
+		}
+		parseRange(range) {
+			range = range.replace(BUILDSTRIPRE, "");
+			const memoKey = ((this.options.includePrerelease && FLAG_INCLUDE_PRERELEASE) | (this.options.loose && FLAG_LOOSE)) + ":" + range;
+			const cached = cache.get(memoKey);
+			if (cached) return cached;
+			const loose = this.options.loose;
+			const hr = loose ? re[t.HYPHENRANGELOOSE] : re[t.HYPHENRANGE];
+			range = range.replace(hr, hyphenReplace(this.options.includePrerelease));
+			debug("hyphen replace", range);
+			range = range.replace(re[t.COMPARATORTRIM], comparatorTrimReplace);
+			debug("comparator trim", range);
+			range = range.replace(re[t.TILDETRIM], tildeTrimReplace);
+			debug("tilde trim", range);
+			range = range.replace(re[t.CARETTRIM], caretTrimReplace);
+			debug("caret trim", range);
+			let rangeList = range.split(" ").map((comp) => parseComparator(comp, this.options)).join(" ").split(/\s+/).map((comp) => replaceGTE0(comp, this.options));
+			if (loose) rangeList = rangeList.filter((comp) => {
+				debug("loose invalid filter", comp, this.options);
+				return !!comp.match(re[t.COMPARATORLOOSE]);
+			});
+			debug("range list", rangeList);
+			const rangeMap = /* @__PURE__ */ new Map();
+			const comparators = rangeList.map((comp) => new Comparator(comp, this.options));
+			for (const comp of comparators) {
+				if (isNullSet(comp)) return [comp];
+				rangeMap.set(comp.value, comp);
+			}
+			if (rangeMap.size > 1 && rangeMap.has("")) rangeMap.delete("");
+			const result = [...rangeMap.values()];
+			cache.set(memoKey, result);
+			return result;
+		}
+		intersects(range, options) {
+			if (!(range instanceof Range)) throw new TypeError("a Range is required");
+			return this.set.some((thisComparators) => {
+				return isSatisfiable(thisComparators, options) && range.set.some((rangeComparators) => {
+					return isSatisfiable(rangeComparators, options) && thisComparators.every((thisComparator) => {
+						return rangeComparators.every((rangeComparator) => {
+							return thisComparator.intersects(rangeComparator, options);
+						});
+					});
+				});
+			});
+		}
+		test(version) {
+			if (!version) return false;
+			if (typeof version === "string") try {
+				version = new SemVer(version, this.options);
+			} catch (er) {
+				return false;
+			}
+			for (let i = 0; i < this.set.length; i++) if (testSet(this.set[i], version, this.options)) return true;
+			return false;
+		}
+	};
+	var cache = new (require_lrucache())();
+	var parseOptions = require_parse_options();
+	var Comparator = require_comparator();
+	var debug = require_debug();
+	var SemVer = require_semver$1();
+	var { safeRe: re, src, t, comparatorTrimReplace, tildeTrimReplace, caretTrimReplace } = require_re();
+	var { FLAG_INCLUDE_PRERELEASE, FLAG_LOOSE } = require_constants();
+	var BUILDSTRIPRE = new RegExp(src[t.BUILD], "g");
+	var isNullSet = (c) => c.value === "<0.0.0-0";
+	var isAny = (c) => c.value === "";
+	var isSatisfiable = (comparators, options) => {
+		let result = true;
+		const remainingComparators = comparators.slice();
+		let testComparator = remainingComparators.pop();
+		while (result && remainingComparators.length) {
+			result = remainingComparators.every((otherComparator) => {
+				return testComparator.intersects(otherComparator, options);
+			});
+			testComparator = remainingComparators.pop();
+		}
+		return result;
+	};
+	var parseComparator = (comp, options) => {
+		comp = comp.replace(re[t.BUILD], "");
+		debug("comp", comp, options);
+		comp = replaceCarets(comp, options);
+		debug("caret", comp);
+		comp = replaceTildes(comp, options);
+		debug("tildes", comp);
+		comp = replaceXRanges(comp, options);
+		debug("xrange", comp);
+		comp = replaceStars(comp, options);
+		debug("stars", comp);
+		return comp;
+	};
+	var isX = (id) => !id || id.toLowerCase() === "x" || id === "*";
+	var invalidXRangeOrder = (M, m, p) => isX(M) && !isX(m) || isX(m) && p && !isX(p);
+	var replaceTildes = (comp, options) => {
+		return comp.trim().split(/\s+/).map((c) => replaceTilde(c, options)).join(" ");
+	};
+	var replaceTilde = (comp, options) => {
+		const r = options.loose ? re[t.TILDELOOSE] : re[t.TILDE];
+		return comp.replace(r, (_, M, m, p, pr) => {
+			debug("tilde", comp, _, M, m, p, pr);
+			let ret;
+			if (isX(M)) ret = "";
+			else if (isX(m)) ret = `>=${M}.0.0 <${+M + 1}.0.0-0`;
+			else if (isX(p)) ret = `>=${M}.${m}.0 <${M}.${+m + 1}.0-0`;
+			else if (pr) {
+				debug("replaceTilde pr", pr);
+				ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+			} else ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
+			debug("tilde return", ret);
+			return ret;
+		});
+	};
+	var replaceCarets = (comp, options) => {
+		return comp.trim().split(/\s+/).map((c) => replaceCaret(c, options)).join(" ");
+	};
+	var replaceCaret = (comp, options) => {
+		debug("caret", comp, options);
+		const r = options.loose ? re[t.CARETLOOSE] : re[t.CARET];
+		const z = options.includePrerelease ? "-0" : "";
+		return comp.replace(r, (_, M, m, p, pr) => {
+			debug("caret", comp, _, M, m, p, pr);
+			let ret;
+			if (isX(M)) ret = "";
+			else if (isX(m)) ret = `>=${M}.0.0${z} <${+M + 1}.0.0-0`;
+			else if (isX(p)) if (M === "0") ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
+			else ret = `>=${M}.${m}.0${z} <${+M + 1}.0.0-0`;
+			else if (pr) {
+				debug("replaceCaret pr", pr);
+				if (M === "0") if (m === "0") ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
+				else ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+				else ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
+			} else {
+				debug("no pr");
+				if (M === "0") if (m === "0") ret = `>=${M}.${m}.${p} <${M}.${m}.${+p + 1}-0`;
+				else ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
+				else ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
+			}
+			debug("caret return", ret);
+			return ret;
+		});
+	};
+	var replaceXRanges = (comp, options) => {
+		debug("replaceXRanges", comp, options);
+		return comp.split(/\s+/).map((c) => replaceXRange(c, options)).join(" ");
+	};
+	var replaceXRange = (comp, options) => {
+		comp = comp.trim();
+		const r = options.loose ? re[t.XRANGELOOSE] : re[t.XRANGE];
+		return comp.replace(r, (ret, gtlt, M, m, p, pr) => {
+			debug("xRange", comp, ret, gtlt, M, m, p, pr);
+			if (invalidXRangeOrder(M, m, p)) return comp;
+			const xM = isX(M);
+			const xm = xM || isX(m);
+			const xp = xm || isX(p);
+			const anyX = xp;
+			if (gtlt === "=" && anyX) gtlt = "";
+			pr = options.includePrerelease ? "-0" : "";
+			if (xM) if (gtlt === ">" || gtlt === "<") ret = "<0.0.0-0";
+			else ret = "*";
+			else if (gtlt && anyX) {
+				if (xm) m = 0;
+				p = 0;
+				if (gtlt === ">") {
+					gtlt = ">=";
+					if (xm) {
+						M = +M + 1;
+						m = 0;
+						p = 0;
+					} else {
+						m = +m + 1;
+						p = 0;
+					}
+				} else if (gtlt === "<=") {
+					gtlt = "<";
+					if (xm) M = +M + 1;
+					else m = +m + 1;
+				}
+				if (gtlt === "<") pr = "-0";
+				ret = `${gtlt + M}.${m}.${p}${pr}`;
+			} else if (xm) ret = `>=${M}.0.0${pr} <${+M + 1}.0.0-0`;
+			else if (xp) ret = `>=${M}.${m}.0${pr} <${M}.${+m + 1}.0-0`;
+			debug("xRange return", ret);
+			return ret;
+		});
+	};
+	var replaceStars = (comp, options) => {
+		debug("replaceStars", comp, options);
+		return comp.trim().replace(re[t.STAR], "");
+	};
+	var replaceGTE0 = (comp, options) => {
+		debug("replaceGTE0", comp, options);
+		return comp.trim().replace(re[options.includePrerelease ? t.GTE0PRE : t.GTE0], "");
+	};
+	var hyphenReplace = (incPr) => ($0, from, fM, fm, fp, fpr, fb, to, tM, tm, tp, tpr) => {
+		if (isX(fM)) from = "";
+		else if (isX(fm)) from = `>=${fM}.0.0${incPr ? "-0" : ""}`;
+		else if (isX(fp)) from = `>=${fM}.${fm}.0${incPr ? "-0" : ""}`;
+		else if (fpr) from = `>=${from}`;
+		else from = `>=${from}${incPr ? "-0" : ""}`;
+		if (isX(tM)) to = "";
+		else if (isX(tm)) to = `<${+tM + 1}.0.0-0`;
+		else if (isX(tp)) to = `<${tM}.${+tm + 1}.0-0`;
+		else if (tpr) to = `<=${tM}.${tm}.${tp}-${tpr}`;
+		else if (incPr) to = `<${tM}.${tm}.${+tp + 1}-0`;
+		else to = `<=${to}`;
+		return `${from} ${to}`.trim();
+	};
+	var testSet = (set, version, options) => {
+		for (let i = 0; i < set.length; i++) if (!set[i].test(version)) return false;
+		if (version.prerelease.length && !options.includePrerelease) {
+			for (let i = 0; i < set.length; i++) {
+				debug(set[i].semver);
+				if (set[i].semver === Comparator.ANY) continue;
+				if (set[i].semver.prerelease.length > 0) {
+					const allowed = set[i].semver;
+					if (allowed.major === version.major && allowed.minor === version.minor && allowed.patch === version.patch) return true;
+				}
+			}
+			return false;
+		}
+		return true;
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/classes/comparator.js
+var require_comparator = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var ANY = Symbol("SemVer ANY");
+	module.exports = class Comparator {
+		static get ANY() {
+			return ANY;
+		}
+		constructor(comp, options) {
+			options = parseOptions(options);
+			if (comp instanceof Comparator) if (comp.loose === !!options.loose) return comp;
+			else comp = comp.value;
+			comp = comp.trim().split(/\s+/).join(" ");
+			debug("comparator", comp, options);
+			this.options = options;
+			this.loose = !!options.loose;
+			this.parse(comp);
+			if (this.semver === ANY) this.value = "";
+			else this.value = this.operator + this.semver.version;
+			debug("comp", this);
+		}
+		parse(comp) {
+			const r = this.options.loose ? re[t.COMPARATORLOOSE] : re[t.COMPARATOR];
+			const m = comp.match(r);
+			if (!m) throw new TypeError(`Invalid comparator: ${comp}`);
+			this.operator = m[1] !== void 0 ? m[1] : "";
+			if (this.operator === "=") this.operator = "";
+			if (!m[2]) this.semver = ANY;
+			else this.semver = new SemVer(m[2], this.options.loose);
+		}
+		toString() {
+			return this.value;
+		}
+		test(version) {
+			debug("Comparator.test", version, this.options.loose);
+			if (this.semver === ANY || version === ANY) return true;
+			if (typeof version === "string") try {
+				version = new SemVer(version, this.options);
+			} catch (er) {
+				return false;
+			}
+			return cmp(version, this.operator, this.semver, this.options);
+		}
+		intersects(comp, options) {
+			if (!(comp instanceof Comparator)) throw new TypeError("a Comparator is required");
+			if (this.operator === "") {
+				if (this.value === "") return true;
+				return new Range(comp.value, options).test(this.value);
+			} else if (comp.operator === "") {
+				if (comp.value === "") return true;
+				return new Range(this.value, options).test(comp.semver);
+			}
+			options = parseOptions(options);
+			if (options.includePrerelease && (this.value === "<0.0.0-0" || comp.value === "<0.0.0-0")) return false;
+			if (!options.includePrerelease && (this.value.startsWith("<0.0.0") || comp.value.startsWith("<0.0.0"))) return false;
+			if (this.operator.startsWith(">") && comp.operator.startsWith(">")) return true;
+			if (this.operator.startsWith("<") && comp.operator.startsWith("<")) return true;
+			if (this.semver.version === comp.semver.version && this.operator.includes("=") && comp.operator.includes("=")) return true;
+			if (cmp(this.semver, "<", comp.semver, options) && this.operator.startsWith(">") && comp.operator.startsWith("<")) return true;
+			if (cmp(this.semver, ">", comp.semver, options) && this.operator.startsWith("<") && comp.operator.startsWith(">")) return true;
+			return false;
+		}
+	};
+	var parseOptions = require_parse_options();
+	var { safeRe: re, t } = require_re();
+	var cmp = require_cmp();
+	var debug = require_debug();
+	var SemVer = require_semver$1();
+	var Range = require_range();
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/functions/satisfies.js
+var require_satisfies = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Range = require_range();
+	var satisfies = (version, range, options) => {
+		try {
+			range = new Range(range, options);
+		} catch (er) {
+			return false;
+		}
+		return range.test(version);
+	};
+	module.exports = satisfies;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/ranges/to-comparators.js
+var require_to_comparators = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Range = require_range();
+	var toComparators = (range, options) => new Range(range, options).set.map((comp) => comp.map((c) => c.value).join(" ").trim().split(" "));
+	module.exports = toComparators;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/ranges/max-satisfying.js
+var require_max_satisfying = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var Range = require_range();
+	var maxSatisfying = (versions, range, options) => {
+		let max = null;
+		let maxSV = null;
+		let rangeObj = null;
+		try {
+			rangeObj = new Range(range, options);
+		} catch (er) {
+			return null;
+		}
+		versions.forEach((v) => {
+			if (rangeObj.test(v)) {
+				if (!max || maxSV.compare(v) === -1) {
+					max = v;
+					maxSV = new SemVer(max, options);
+				}
+			}
+		});
+		return max;
+	};
+	module.exports = maxSatisfying;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/ranges/min-satisfying.js
+var require_min_satisfying = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var Range = require_range();
+	var minSatisfying = (versions, range, options) => {
+		let min = null;
+		let minSV = null;
+		let rangeObj = null;
+		try {
+			rangeObj = new Range(range, options);
+		} catch (er) {
+			return null;
+		}
+		versions.forEach((v) => {
+			if (rangeObj.test(v)) {
+				if (!min || minSV.compare(v) === 1) {
+					min = v;
+					minSV = new SemVer(min, options);
+				}
+			}
+		});
+		return min;
+	};
+	module.exports = minSatisfying;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/ranges/min-version.js
+var require_min_version = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var Range = require_range();
+	var gt = require_gt();
+	var minVersion = (range, loose) => {
+		range = new Range(range, loose);
+		let minver = new SemVer("0.0.0");
+		if (range.test(minver)) return minver;
+		minver = new SemVer("0.0.0-0");
+		if (range.test(minver)) return minver;
+		minver = null;
+		for (let i = 0; i < range.set.length; ++i) {
+			const comparators = range.set[i];
+			let setMin = null;
+			comparators.forEach((comparator) => {
+				const compver = new SemVer(comparator.semver.version);
+				switch (comparator.operator) {
+					case ">":
+						if (compver.prerelease.length === 0) compver.patch++;
+						else compver.prerelease.push(0);
+						compver.raw = compver.format();
+					case "":
+					case ">=":
+						if (!setMin || gt(compver, setMin)) setMin = compver;
+						break;
+					case "<":
+					case "<=": break;
+					/* istanbul ignore next */
+					default: throw new Error(`Unexpected operation: ${comparator.operator}`);
+				}
+			});
+			if (setMin && (!minver || gt(minver, setMin))) minver = setMin;
+		}
+		if (minver && range.test(minver)) return minver;
+		return null;
+	};
+	module.exports = minVersion;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/ranges/valid.js
+var require_valid = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Range = require_range();
+	var validRange = (range, options) => {
+		try {
+			return new Range(range, options).range || "*";
+		} catch (er) {
+			return null;
+		}
+	};
+	module.exports = validRange;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/ranges/outside.js
+var require_outside = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var SemVer = require_semver$1();
+	var Comparator = require_comparator();
+	var { ANY } = Comparator;
+	var Range = require_range();
+	var satisfies = require_satisfies();
+	var gt = require_gt();
+	var lt = require_lt();
+	var lte = require_lte();
+	var gte = require_gte();
+	var outside = (version, range, hilo, options) => {
+		version = new SemVer(version, options);
+		range = new Range(range, options);
+		let gtfn, ltefn, ltfn, comp, ecomp;
+		switch (hilo) {
+			case ">":
+				gtfn = gt;
+				ltefn = lte;
+				ltfn = lt;
+				comp = ">";
+				ecomp = ">=";
+				break;
+			case "<":
+				gtfn = lt;
+				ltefn = gte;
+				ltfn = gt;
+				comp = "<";
+				ecomp = "<=";
+				break;
+			default: throw new TypeError("Must provide a hilo val of \"<\" or \">\"");
+		}
+		if (satisfies(version, range, options)) return false;
+		for (let i = 0; i < range.set.length; ++i) {
+			const comparators = range.set[i];
+			let high = null;
+			let low = null;
+			comparators.forEach((comparator) => {
+				if (comparator.semver === ANY) comparator = new Comparator(">=0.0.0");
+				high = high || comparator;
+				low = low || comparator;
+				if (gtfn(comparator.semver, high.semver, options)) high = comparator;
+				else if (ltfn(comparator.semver, low.semver, options)) low = comparator;
+			});
+			if (high.operator === comp || high.operator === ecomp) return false;
+			if ((!low.operator || low.operator === comp) && ltefn(version, low.semver)) return false;
+			else if (low.operator === ecomp && ltfn(version, low.semver)) return false;
+		}
+		return true;
+	};
+	module.exports = outside;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/ranges/gtr.js
+var require_gtr = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var outside = require_outside();
+	var gtr = (version, range, options) => outside(version, range, ">", options);
+	module.exports = gtr;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/ranges/ltr.js
+var require_ltr = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var outside = require_outside();
+	var ltr = (version, range, options) => outside(version, range, "<", options);
+	module.exports = ltr;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/ranges/intersects.js
+var require_intersects = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Range = require_range();
+	var intersects = (r1, r2, options) => {
+		r1 = new Range(r1, options);
+		r2 = new Range(r2, options);
+		return r1.intersects(r2, options);
+	};
+	module.exports = intersects;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/ranges/simplify.js
+var require_simplify = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var satisfies = require_satisfies();
+	var compare = require_compare();
+	module.exports = (versions, range, options) => {
+		const set = [];
+		let first = null;
+		let prev = null;
+		const v = versions.sort((a, b) => compare(a, b, options));
+		for (const version of v) if (satisfies(version, range, options)) {
+			prev = version;
+			if (!first) first = version;
+		} else {
+			if (prev) set.push([first, prev]);
+			prev = null;
+			first = null;
+		}
+		if (first) set.push([first, null]);
+		const ranges = [];
+		for (const [min, max] of set) if (min === max) ranges.push(min);
+		else if (!max && min === v[0]) ranges.push("*");
+		else if (!max) ranges.push(`>=${min}`);
+		else if (min === v[0]) ranges.push(`<=${max}`);
+		else ranges.push(`${min} - ${max}`);
+		const simplified = ranges.join(" || ");
+		const original = typeof range.raw === "string" ? range.raw : String(range);
+		return simplified.length < original.length ? simplified : range;
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/ranges/subset.js
+var require_subset = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var Range = require_range();
+	var Comparator = require_comparator();
+	var { ANY } = Comparator;
+	var satisfies = require_satisfies();
+	var compare = require_compare();
+	var subset = (sub, dom, options = {}) => {
+		if (sub === dom) return true;
+		sub = new Range(sub, options);
+		dom = new Range(dom, options);
+		let sawNonNull = false;
+		OUTER: for (const simpleSub of sub.set) {
+			for (const simpleDom of dom.set) {
+				const isSub = simpleSubset(simpleSub, simpleDom, options);
+				sawNonNull = sawNonNull || isSub !== null;
+				if (isSub) continue OUTER;
+			}
+			if (sawNonNull) return false;
+		}
+		return true;
+	};
+	var minimumVersionWithPreRelease = [new Comparator(">=0.0.0-0")];
+	var minimumVersion = [new Comparator(">=0.0.0")];
+	var simpleSubset = (sub, dom, options) => {
+		if (sub === dom) return true;
+		if (sub.length === 1 && sub[0].semver === ANY) if (dom.length === 1 && dom[0].semver === ANY) return true;
+		else if (options.includePrerelease) sub = minimumVersionWithPreRelease;
+		else sub = minimumVersion;
+		if (dom.length === 1 && dom[0].semver === ANY) if (options.includePrerelease) return true;
+		else dom = minimumVersion;
+		const eqSet = /* @__PURE__ */ new Set();
+		let gt, lt;
+		for (const c of sub) if (c.operator === ">" || c.operator === ">=") gt = higherGT(gt, c, options);
+		else if (c.operator === "<" || c.operator === "<=") lt = lowerLT(lt, c, options);
+		else eqSet.add(c.semver);
+		if (eqSet.size > 1) return null;
+		let gtltComp;
+		if (gt && lt) {
+			gtltComp = compare(gt.semver, lt.semver, options);
+			if (gtltComp > 0) return null;
+			else if (gtltComp === 0 && (gt.operator !== ">=" || lt.operator !== "<=")) return null;
+		}
+		for (const eq of eqSet) {
+			if (gt && !satisfies(eq, String(gt), options)) return null;
+			if (lt && !satisfies(eq, String(lt), options)) return null;
+			for (const c of dom) if (!satisfies(eq, String(c), options)) return false;
+			return true;
+		}
+		let higher, lower;
+		let hasDomLT, hasDomGT;
+		let needDomLTPre = lt && !options.includePrerelease && lt.semver.prerelease.length ? lt.semver : false;
+		let needDomGTPre = gt && !options.includePrerelease && gt.semver.prerelease.length ? gt.semver : false;
+		if (needDomLTPre && needDomLTPre.prerelease.length === 1 && lt.operator === "<" && needDomLTPre.prerelease[0] === 0) needDomLTPre = false;
+		for (const c of dom) {
+			hasDomGT = hasDomGT || c.operator === ">" || c.operator === ">=";
+			hasDomLT = hasDomLT || c.operator === "<" || c.operator === "<=";
+			if (gt) {
+				if (needDomGTPre) {
+					if (c.semver.prerelease && c.semver.prerelease.length && c.semver.major === needDomGTPre.major && c.semver.minor === needDomGTPre.minor && c.semver.patch === needDomGTPre.patch) needDomGTPre = false;
+				}
+				if (c.operator === ">" || c.operator === ">=") {
+					higher = higherGT(gt, c, options);
+					if (higher === c && higher !== gt) return false;
+				} else if (gt.operator === ">=" && !c.test(gt.semver)) return false;
+			}
+			if (lt) {
+				if (needDomLTPre) {
+					if (c.semver.prerelease && c.semver.prerelease.length && c.semver.major === needDomLTPre.major && c.semver.minor === needDomLTPre.minor && c.semver.patch === needDomLTPre.patch) needDomLTPre = false;
+				}
+				if (c.operator === "<" || c.operator === "<=") {
+					lower = lowerLT(lt, c, options);
+					if (lower === c && lower !== lt) return false;
+				} else if (lt.operator === "<=" && !c.test(lt.semver)) return false;
+			}
+			if (!c.operator && (lt || gt) && gtltComp !== 0) return false;
+		}
+		if (gt && hasDomLT && !lt && gtltComp !== 0) return false;
+		if (lt && hasDomGT && !gt && gtltComp !== 0) return false;
+		if (needDomGTPre || needDomLTPre) return false;
+		return true;
+	};
+	var higherGT = (a, b, options) => {
+		if (!a) return b;
+		const comp = compare(a.semver, b.semver, options);
+		return comp > 0 ? a : comp < 0 ? b : b.operator === ">" && a.operator === ">=" ? b : a;
+	};
+	var lowerLT = (a, b, options) => {
+		if (!a) return b;
+		const comp = compare(a.semver, b.semver, options);
+		return comp < 0 ? a : comp > 0 ? b : b.operator === "<" && a.operator === "<=" ? b : a;
+	};
+	module.exports = subset;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/semver@7.8.4/node_modules/semver/index.js
+var require_semver = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var internalRe = require_re();
+	var constants = require_constants();
+	var SemVer = require_semver$1();
+	var identifiers = require_identifiers();
+	module.exports = {
+		parse: require_parse(),
+		valid: require_valid$1(),
+		clean: require_clean(),
+		inc: require_inc(),
+		diff: require_diff(),
+		major: require_major(),
+		minor: require_minor(),
+		patch: require_patch(),
+		prerelease: require_prerelease(),
+		compare: require_compare(),
+		rcompare: require_rcompare(),
+		compareLoose: require_compare_loose(),
+		compareBuild: require_compare_build(),
+		sort: require_sort(),
+		rsort: require_rsort(),
+		gt: require_gt(),
+		lt: require_lt(),
+		eq: require_eq(),
+		neq: require_neq(),
+		gte: require_gte(),
+		lte: require_lte(),
+		cmp: require_cmp(),
+		coerce: require_coerce(),
+		truncate: require_truncate(),
+		Comparator: require_comparator(),
+		Range: require_range(),
+		satisfies: require_satisfies(),
+		toComparators: require_to_comparators(),
+		maxSatisfying: require_max_satisfying(),
+		minSatisfying: require_min_satisfying(),
+		minVersion: require_min_version(),
+		validRange: require_valid(),
+		outside: require_outside(),
+		gtr: require_gtr(),
+		ltr: require_ltr(),
+		intersects: require_intersects(),
+		simplifyRange: require_simplify(),
+		subset: require_subset(),
+		SemVer,
+		re: internalRe.re,
+		src: internalRe.src,
+		tokens: internalRe.t,
+		SEMVER_SPEC_VERSION: constants.SEMVER_SPEC_VERSION,
+		RELEASE_TYPES: constants.RELEASE_TYPES,
+		compareIdentifiers: identifiers.compareIdentifiers,
+		rcompareIdentifiers: identifiers.rcompareIdentifiers
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/lib/asymmetricKeyDetailsSupported.js
+var require_asymmetricKeyDetailsSupported = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	module.exports = require_semver().satisfies(process.version, ">=15.7.0");
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/lib/rsaPssKeyDetailsSupported.js
+var require_rsaPssKeyDetailsSupported = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	module.exports = require_semver().satisfies(process.version, ">=16.9.0");
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/lib/validateAsymmetricKey.js
+var require_validateAsymmetricKey = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var ASYMMETRIC_KEY_DETAILS_SUPPORTED = require_asymmetricKeyDetailsSupported();
+	var RSA_PSS_KEY_DETAILS_SUPPORTED = require_rsaPssKeyDetailsSupported();
+	var allowedAlgorithmsForKeys = {
+		"ec": [
+			"ES256",
+			"ES384",
+			"ES512"
+		],
+		"rsa": [
+			"RS256",
+			"PS256",
+			"RS384",
+			"PS384",
+			"RS512",
+			"PS512"
+		],
+		"rsa-pss": [
+			"PS256",
+			"PS384",
+			"PS512"
+		]
+	};
+	var allowedCurves = {
+		ES256: "prime256v1",
+		ES384: "secp384r1",
+		ES512: "secp521r1"
+	};
+	module.exports = function(algorithm, key) {
+		if (!algorithm || !key) return;
+		const keyType = key.asymmetricKeyType;
+		if (!keyType) return;
+		const allowedAlgorithms = allowedAlgorithmsForKeys[keyType];
+		if (!allowedAlgorithms) throw new Error(`Unknown key type "${keyType}".`);
+		if (!allowedAlgorithms.includes(algorithm)) throw new Error(`"alg" parameter for "${keyType}" key type must be one of: ${allowedAlgorithms.join(", ")}.`);
+		/* istanbul ignore next */
+		if (ASYMMETRIC_KEY_DETAILS_SUPPORTED) switch (keyType) {
+			case "ec":
+				const keyCurve = key.asymmetricKeyDetails.namedCurve;
+				const allowedCurve = allowedCurves[algorithm];
+				if (keyCurve !== allowedCurve) throw new Error(`"alg" parameter "${algorithm}" requires curve "${allowedCurve}".`);
+				break;
+			case "rsa-pss":
+				if (RSA_PSS_KEY_DETAILS_SUPPORTED) {
+					const length = parseInt(algorithm.slice(-3), 10);
+					const { hashAlgorithm, mgf1HashAlgorithm, saltLength } = key.asymmetricKeyDetails;
+					if (hashAlgorithm !== `sha${length}` || mgf1HashAlgorithm !== hashAlgorithm) throw new Error(`Invalid key for this operation, its RSA-PSS parameters do not meet the requirements of "alg" ${algorithm}.`);
+					if (saltLength !== void 0 && saltLength > length >> 3) throw new Error(`Invalid key for this operation, its RSA-PSS parameter saltLength does not meet the requirements of "alg" ${algorithm}.`);
+				}
+				break;
+		}
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/lib/psSupported.js
+var require_psSupported = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	module.exports = require_semver().satisfies(process.version, "^6.12.0 || >=8.0.0");
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/verify.js
+var require_verify = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var JsonWebTokenError = require_JsonWebTokenError();
+	var NotBeforeError = require_NotBeforeError();
+	var TokenExpiredError = require_TokenExpiredError();
+	var decode = require_decode();
+	var timespan = require_timespan();
+	var validateAsymmetricKey = require_validateAsymmetricKey();
+	var PS_SUPPORTED = require_psSupported();
+	var jws = require_jws();
+	var { KeyObject: KeyObject$1, createSecretKey: createSecretKey$1, createPublicKey } = __require("crypto");
+	var PUB_KEY_ALGS = [
+		"RS256",
+		"RS384",
+		"RS512"
+	];
+	var EC_KEY_ALGS = [
+		"ES256",
+		"ES384",
+		"ES512"
+	];
+	var RSA_KEY_ALGS = [
+		"RS256",
+		"RS384",
+		"RS512"
+	];
+	var HS_ALGS = [
+		"HS256",
+		"HS384",
+		"HS512"
+	];
+	if (PS_SUPPORTED) {
+		PUB_KEY_ALGS.splice(PUB_KEY_ALGS.length, 0, "PS256", "PS384", "PS512");
+		RSA_KEY_ALGS.splice(RSA_KEY_ALGS.length, 0, "PS256", "PS384", "PS512");
+	}
+	module.exports = function(jwtString, secretOrPublicKey, options, callback) {
+		if (typeof options === "function" && !callback) {
+			callback = options;
+			options = {};
+		}
+		if (!options) options = {};
+		options = Object.assign({}, options);
+		let done;
+		if (callback) done = callback;
+		else done = function(err, data) {
+			if (err) throw err;
+			return data;
+		};
+		if (options.clockTimestamp && typeof options.clockTimestamp !== "number") return done(new JsonWebTokenError("clockTimestamp must be a number"));
+		if (options.nonce !== void 0 && (typeof options.nonce !== "string" || options.nonce.trim() === "")) return done(new JsonWebTokenError("nonce must be a non-empty string"));
+		if (options.allowInvalidAsymmetricKeyTypes !== void 0 && typeof options.allowInvalidAsymmetricKeyTypes !== "boolean") return done(new JsonWebTokenError("allowInvalidAsymmetricKeyTypes must be a boolean"));
+		const clockTimestamp = options.clockTimestamp || Math.floor(Date.now() / 1e3);
+		if (!jwtString) return done(new JsonWebTokenError("jwt must be provided"));
+		if (typeof jwtString !== "string") return done(new JsonWebTokenError("jwt must be a string"));
+		const parts = jwtString.split(".");
+		if (parts.length !== 3) return done(new JsonWebTokenError("jwt malformed"));
+		let decodedToken;
+		try {
+			decodedToken = decode(jwtString, { complete: true });
+		} catch (err) {
+			return done(err);
+		}
+		if (!decodedToken) return done(new JsonWebTokenError("invalid token"));
+		const header = decodedToken.header;
+		let getSecret;
+		if (typeof secretOrPublicKey === "function") {
+			if (!callback) return done(new JsonWebTokenError("verify must be called asynchronous if secret or public key is provided as a callback"));
+			getSecret = secretOrPublicKey;
+		} else getSecret = function(header, secretCallback) {
+			return secretCallback(null, secretOrPublicKey);
+		};
+		return getSecret(header, function(err, secretOrPublicKey) {
+			if (err) return done(new JsonWebTokenError("error in secret or public key callback: " + err.message));
+			const hasSignature = parts[2].trim() !== "";
+			if (!hasSignature && secretOrPublicKey) return done(new JsonWebTokenError("jwt signature is required"));
+			if (hasSignature && !secretOrPublicKey) return done(new JsonWebTokenError("secret or public key must be provided"));
+			if (!hasSignature && !options.algorithms) return done(new JsonWebTokenError("please specify \"none\" in \"algorithms\" to verify unsigned tokens"));
+			if (secretOrPublicKey != null && !(secretOrPublicKey instanceof KeyObject$1)) try {
+				secretOrPublicKey = createPublicKey(secretOrPublicKey);
+			} catch (_) {
+				try {
+					secretOrPublicKey = createSecretKey$1(typeof secretOrPublicKey === "string" ? Buffer.from(secretOrPublicKey) : secretOrPublicKey);
+				} catch (_) {
+					return done(new JsonWebTokenError("secretOrPublicKey is not valid key material"));
+				}
+			}
+			if (!options.algorithms) if (secretOrPublicKey.type === "secret") options.algorithms = HS_ALGS;
+			else if (["rsa", "rsa-pss"].includes(secretOrPublicKey.asymmetricKeyType)) options.algorithms = RSA_KEY_ALGS;
+			else if (secretOrPublicKey.asymmetricKeyType === "ec") options.algorithms = EC_KEY_ALGS;
+			else options.algorithms = PUB_KEY_ALGS;
+			if (options.algorithms.indexOf(decodedToken.header.alg) === -1) return done(new JsonWebTokenError("invalid algorithm"));
+			if (header.alg.startsWith("HS") && secretOrPublicKey.type !== "secret") return done(new JsonWebTokenError(`secretOrPublicKey must be a symmetric key when using ${header.alg}`));
+			else if (/^(?:RS|PS|ES)/.test(header.alg) && secretOrPublicKey.type !== "public") return done(new JsonWebTokenError(`secretOrPublicKey must be an asymmetric key when using ${header.alg}`));
+			if (!options.allowInvalidAsymmetricKeyTypes) try {
+				validateAsymmetricKey(header.alg, secretOrPublicKey);
+			} catch (e) {
+				return done(e);
+			}
+			let valid;
+			try {
+				valid = jws.verify(jwtString, decodedToken.header.alg, secretOrPublicKey);
+			} catch (e) {
+				return done(e);
+			}
+			if (!valid) return done(new JsonWebTokenError("invalid signature"));
+			const payload = decodedToken.payload;
+			if (typeof payload.nbf !== "undefined" && !options.ignoreNotBefore) {
+				if (typeof payload.nbf !== "number") return done(new JsonWebTokenError("invalid nbf value"));
+				if (payload.nbf > clockTimestamp + (options.clockTolerance || 0)) return done(new NotBeforeError("jwt not active", /* @__PURE__ */ new Date(payload.nbf * 1e3)));
+			}
+			if (typeof payload.exp !== "undefined" && !options.ignoreExpiration) {
+				if (typeof payload.exp !== "number") return done(new JsonWebTokenError("invalid exp value"));
+				if (clockTimestamp >= payload.exp + (options.clockTolerance || 0)) return done(new TokenExpiredError("jwt expired", /* @__PURE__ */ new Date(payload.exp * 1e3)));
+			}
+			if (options.audience) {
+				const audiences = Array.isArray(options.audience) ? options.audience : [options.audience];
+				if (!(Array.isArray(payload.aud) ? payload.aud : [payload.aud]).some(function(targetAudience) {
+					return audiences.some(function(audience) {
+						return audience instanceof RegExp ? audience.test(targetAudience) : audience === targetAudience;
+					});
+				})) return done(new JsonWebTokenError("jwt audience invalid. expected: " + audiences.join(" or ")));
+			}
+			if (options.issuer) {
+				if (typeof options.issuer === "string" && payload.iss !== options.issuer || Array.isArray(options.issuer) && options.issuer.indexOf(payload.iss) === -1) return done(new JsonWebTokenError("jwt issuer invalid. expected: " + options.issuer));
+			}
+			if (options.subject) {
+				if (payload.sub !== options.subject) return done(new JsonWebTokenError("jwt subject invalid. expected: " + options.subject));
+			}
+			if (options.jwtid) {
+				if (payload.jti !== options.jwtid) return done(new JsonWebTokenError("jwt jwtid invalid. expected: " + options.jwtid));
+			}
+			if (options.nonce) {
+				if (payload.nonce !== options.nonce) return done(new JsonWebTokenError("jwt nonce invalid. expected: " + options.nonce));
+			}
+			if (options.maxAge) {
+				if (typeof payload.iat !== "number") return done(new JsonWebTokenError("iat required when maxAge is specified"));
+				const maxAgeTimestamp = timespan(options.maxAge, payload.iat);
+				if (typeof maxAgeTimestamp === "undefined") return done(new JsonWebTokenError("\"maxAge\" should be a number of seconds or string representing a timespan eg: \"1d\", \"20h\", 60"));
+				if (clockTimestamp >= maxAgeTimestamp + (options.clockTolerance || 0)) return done(new TokenExpiredError("maxAge exceeded", /* @__PURE__ */ new Date(maxAgeTimestamp * 1e3)));
+			}
+			if (options.complete === true) {
+				const signature = decodedToken.signature;
+				return done(null, {
+					header,
+					payload,
+					signature
+				});
+			}
+			return done(null, payload);
+		});
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/lodash.includes@4.3.0/node_modules/lodash.includes/index.js
+var require_lodash_includes = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/**
+	* lodash (Custom Build) <https://lodash.com/>
+	* Build: `lodash modularize exports="npm" -o ./`
+	* Copyright jQuery Foundation and other contributors <https://jquery.org/>
+	* Released under MIT license <https://lodash.com/license>
+	* Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
+	* Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
+	*/
+	/** Used as references for various `Number` constants. */
+	var INFINITY = Infinity, MAX_SAFE_INTEGER = 9007199254740991, MAX_INTEGER = 17976931348623157e292, NAN = NaN;
+	/** `Object#toString` result references. */
+	var argsTag = "[object Arguments]", funcTag = "[object Function]", genTag = "[object GeneratorFunction]", stringTag = "[object String]", symbolTag = "[object Symbol]";
+	/** Used to match leading and trailing whitespace. */
+	var reTrim = /^\s+|\s+$/g;
+	/** Used to detect bad signed hexadecimal string values. */
+	var reIsBadHex = /^[-+]0x[0-9a-f]+$/i;
+	/** Used to detect binary string values. */
+	var reIsBinary = /^0b[01]+$/i;
+	/** Used to detect octal string values. */
+	var reIsOctal = /^0o[0-7]+$/i;
+	/** Used to detect unsigned integer values. */
+	var reIsUint = /^(?:0|[1-9]\d*)$/;
+	/** Built-in method references without a dependency on `root`. */
+	var freeParseInt = parseInt;
+	/**
+	* A specialized version of `_.map` for arrays without support for iteratee
+	* shorthands.
+	*
+	* @private
+	* @param {Array} [array] The array to iterate over.
+	* @param {Function} iteratee The function invoked per iteration.
+	* @returns {Array} Returns the new mapped array.
+	*/
+	function arrayMap(array, iteratee) {
+		var index = -1, length = array ? array.length : 0, result = Array(length);
+		while (++index < length) result[index] = iteratee(array[index], index, array);
+		return result;
+	}
+	/**
+	* The base implementation of `_.findIndex` and `_.findLastIndex` without
+	* support for iteratee shorthands.
+	*
+	* @private
+	* @param {Array} array The array to inspect.
+	* @param {Function} predicate The function invoked per iteration.
+	* @param {number} fromIndex The index to search from.
+	* @param {boolean} [fromRight] Specify iterating from right to left.
+	* @returns {number} Returns the index of the matched value, else `-1`.
+	*/
+	function baseFindIndex(array, predicate, fromIndex, fromRight) {
+		var length = array.length, index = fromIndex + (fromRight ? 1 : -1);
+		while (fromRight ? index-- : ++index < length) if (predicate(array[index], index, array)) return index;
+		return -1;
+	}
+	/**
+	* The base implementation of `_.indexOf` without `fromIndex` bounds checks.
+	*
+	* @private
+	* @param {Array} array The array to inspect.
+	* @param {*} value The value to search for.
+	* @param {number} fromIndex The index to search from.
+	* @returns {number} Returns the index of the matched value, else `-1`.
+	*/
+	function baseIndexOf(array, value, fromIndex) {
+		if (value !== value) return baseFindIndex(array, baseIsNaN, fromIndex);
+		var index = fromIndex - 1, length = array.length;
+		while (++index < length) if (array[index] === value) return index;
+		return -1;
+	}
+	/**
+	* The base implementation of `_.isNaN` without support for number objects.
+	*
+	* @private
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is `NaN`, else `false`.
+	*/
+	function baseIsNaN(value) {
+		return value !== value;
+	}
+	/**
+	* The base implementation of `_.times` without support for iteratee shorthands
+	* or max array length checks.
+	*
+	* @private
+	* @param {number} n The number of times to invoke `iteratee`.
+	* @param {Function} iteratee The function invoked per iteration.
+	* @returns {Array} Returns the array of results.
+	*/
+	function baseTimes(n, iteratee) {
+		var index = -1, result = Array(n);
+		while (++index < n) result[index] = iteratee(index);
+		return result;
+	}
+	/**
+	* The base implementation of `_.values` and `_.valuesIn` which creates an
+	* array of `object` property values corresponding to the property names
+	* of `props`.
+	*
+	* @private
+	* @param {Object} object The object to query.
+	* @param {Array} props The property names to get values for.
+	* @returns {Object} Returns the array of property values.
+	*/
+	function baseValues(object, props) {
+		return arrayMap(props, function(key) {
+			return object[key];
+		});
+	}
+	/**
+	* Creates a unary function that invokes `func` with its argument transformed.
+	*
+	* @private
+	* @param {Function} func The function to wrap.
+	* @param {Function} transform The argument transform.
+	* @returns {Function} Returns the new function.
+	*/
+	function overArg(func, transform) {
+		return function(arg) {
+			return func(transform(arg));
+		};
+	}
+	/** Used for built-in method references. */
+	var objectProto = Object.prototype;
+	/** Used to check objects for own properties. */
+	var hasOwnProperty = objectProto.hasOwnProperty;
+	/**
+	* Used to resolve the
+	* [`toStringTag`](http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
+	* of values.
+	*/
+	var objectToString = objectProto.toString;
+	/** Built-in value references. */
+	var propertyIsEnumerable = objectProto.propertyIsEnumerable;
+	var nativeKeys = overArg(Object.keys, Object), nativeMax = Math.max;
+	/**
+	* Creates an array of the enumerable property names of the array-like `value`.
+	*
+	* @private
+	* @param {*} value The value to query.
+	* @param {boolean} inherited Specify returning inherited property names.
+	* @returns {Array} Returns the array of property names.
+	*/
+	function arrayLikeKeys(value, inherited) {
+		var result = isArray(value) || isArguments(value) ? baseTimes(value.length, String) : [];
+		var length = result.length, skipIndexes = !!length;
+		for (var key in value) if ((inherited || hasOwnProperty.call(value, key)) && !(skipIndexes && (key == "length" || isIndex(key, length)))) result.push(key);
+		return result;
+	}
+	/**
+	* The base implementation of `_.keys` which doesn't treat sparse arrays as dense.
+	*
+	* @private
+	* @param {Object} object The object to query.
+	* @returns {Array} Returns the array of property names.
+	*/
+	function baseKeys(object) {
+		if (!isPrototype(object)) return nativeKeys(object);
+		var result = [];
+		for (var key in Object(object)) if (hasOwnProperty.call(object, key) && key != "constructor") result.push(key);
+		return result;
+	}
+	/**
+	* Checks if `value` is a valid array-like index.
+	*
+	* @private
+	* @param {*} value The value to check.
+	* @param {number} [length=MAX_SAFE_INTEGER] The upper bounds of a valid index.
+	* @returns {boolean} Returns `true` if `value` is a valid index, else `false`.
+	*/
+	function isIndex(value, length) {
+		length = length == null ? MAX_SAFE_INTEGER : length;
+		return !!length && (typeof value == "number" || reIsUint.test(value)) && value > -1 && value % 1 == 0 && value < length;
+	}
+	/**
+	* Checks if `value` is likely a prototype object.
+	*
+	* @private
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is a prototype, else `false`.
+	*/
+	function isPrototype(value) {
+		var Ctor = value && value.constructor;
+		return value === (typeof Ctor == "function" && Ctor.prototype || objectProto);
+	}
+	/**
+	* Checks if `value` is in `collection`. If `collection` is a string, it's
+	* checked for a substring of `value`, otherwise
+	* [`SameValueZero`](http://ecma-international.org/ecma-262/7.0/#sec-samevaluezero)
+	* is used for equality comparisons. If `fromIndex` is negative, it's used as
+	* the offset from the end of `collection`.
+	*
+	* @static
+	* @memberOf _
+	* @since 0.1.0
+	* @category Collection
+	* @param {Array|Object|string} collection The collection to inspect.
+	* @param {*} value The value to search for.
+	* @param {number} [fromIndex=0] The index to search from.
+	* @param- {Object} [guard] Enables use as an iteratee for methods like `_.reduce`.
+	* @returns {boolean} Returns `true` if `value` is found, else `false`.
+	* @example
+	*
+	* _.includes([1, 2, 3], 1);
+	* // => true
+	*
+	* _.includes([1, 2, 3], 1, 2);
+	* // => false
+	*
+	* _.includes({ 'a': 1, 'b': 2 }, 1);
+	* // => true
+	*
+	* _.includes('abcd', 'bc');
+	* // => true
+	*/
+	function includes(collection, value, fromIndex, guard) {
+		collection = isArrayLike(collection) ? collection : values(collection);
+		fromIndex = fromIndex && !guard ? toInteger(fromIndex) : 0;
+		var length = collection.length;
+		if (fromIndex < 0) fromIndex = nativeMax(length + fromIndex, 0);
+		return isString(collection) ? fromIndex <= length && collection.indexOf(value, fromIndex) > -1 : !!length && baseIndexOf(collection, value, fromIndex) > -1;
+	}
+	/**
+	* Checks if `value` is likely an `arguments` object.
+	*
+	* @static
+	* @memberOf _
+	* @since 0.1.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is an `arguments` object,
+	*  else `false`.
+	* @example
+	*
+	* _.isArguments(function() { return arguments; }());
+	* // => true
+	*
+	* _.isArguments([1, 2, 3]);
+	* // => false
+	*/
+	function isArguments(value) {
+		return isArrayLikeObject(value) && hasOwnProperty.call(value, "callee") && (!propertyIsEnumerable.call(value, "callee") || objectToString.call(value) == argsTag);
+	}
+	/**
+	* Checks if `value` is classified as an `Array` object.
+	*
+	* @static
+	* @memberOf _
+	* @since 0.1.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is an array, else `false`.
+	* @example
+	*
+	* _.isArray([1, 2, 3]);
+	* // => true
+	*
+	* _.isArray(document.body.children);
+	* // => false
+	*
+	* _.isArray('abc');
+	* // => false
+	*
+	* _.isArray(_.noop);
+	* // => false
+	*/
+	var isArray = Array.isArray;
+	/**
+	* Checks if `value` is array-like. A value is considered array-like if it's
+	* not a function and has a `value.length` that's an integer greater than or
+	* equal to `0` and less than or equal to `Number.MAX_SAFE_INTEGER`.
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is array-like, else `false`.
+	* @example
+	*
+	* _.isArrayLike([1, 2, 3]);
+	* // => true
+	*
+	* _.isArrayLike(document.body.children);
+	* // => true
+	*
+	* _.isArrayLike('abc');
+	* // => true
+	*
+	* _.isArrayLike(_.noop);
+	* // => false
+	*/
+	function isArrayLike(value) {
+		return value != null && isLength(value.length) && !isFunction(value);
+	}
+	/**
+	* This method is like `_.isArrayLike` except that it also checks if `value`
+	* is an object.
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is an array-like object,
+	*  else `false`.
+	* @example
+	*
+	* _.isArrayLikeObject([1, 2, 3]);
+	* // => true
+	*
+	* _.isArrayLikeObject(document.body.children);
+	* // => true
+	*
+	* _.isArrayLikeObject('abc');
+	* // => false
+	*
+	* _.isArrayLikeObject(_.noop);
+	* // => false
+	*/
+	function isArrayLikeObject(value) {
+		return isObjectLike(value) && isArrayLike(value);
+	}
+	/**
+	* Checks if `value` is classified as a `Function` object.
+	*
+	* @static
+	* @memberOf _
+	* @since 0.1.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is a function, else `false`.
+	* @example
+	*
+	* _.isFunction(_);
+	* // => true
+	*
+	* _.isFunction(/abc/);
+	* // => false
+	*/
+	function isFunction(value) {
+		var tag = isObject(value) ? objectToString.call(value) : "";
+		return tag == funcTag || tag == genTag;
+	}
+	/**
+	* Checks if `value` is a valid array-like length.
+	*
+	* **Note:** This method is loosely based on
+	* [`ToLength`](http://ecma-international.org/ecma-262/7.0/#sec-tolength).
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is a valid length, else `false`.
+	* @example
+	*
+	* _.isLength(3);
+	* // => true
+	*
+	* _.isLength(Number.MIN_VALUE);
+	* // => false
+	*
+	* _.isLength(Infinity);
+	* // => false
+	*
+	* _.isLength('3');
+	* // => false
+	*/
+	function isLength(value) {
+		return typeof value == "number" && value > -1 && value % 1 == 0 && value <= MAX_SAFE_INTEGER;
+	}
+	/**
+	* Checks if `value` is the
+	* [language type](http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
+	* of `Object`. (e.g. arrays, functions, objects, regexes, `new Number(0)`, and `new String('')`)
+	*
+	* @static
+	* @memberOf _
+	* @since 0.1.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is an object, else `false`.
+	* @example
+	*
+	* _.isObject({});
+	* // => true
+	*
+	* _.isObject([1, 2, 3]);
+	* // => true
+	*
+	* _.isObject(_.noop);
+	* // => true
+	*
+	* _.isObject(null);
+	* // => false
+	*/
+	function isObject(value) {
+		var type = typeof value;
+		return !!value && (type == "object" || type == "function");
+	}
+	/**
+	* Checks if `value` is object-like. A value is object-like if it's not `null`
+	* and has a `typeof` result of "object".
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is object-like, else `false`.
+	* @example
+	*
+	* _.isObjectLike({});
+	* // => true
+	*
+	* _.isObjectLike([1, 2, 3]);
+	* // => true
+	*
+	* _.isObjectLike(_.noop);
+	* // => false
+	*
+	* _.isObjectLike(null);
+	* // => false
+	*/
+	function isObjectLike(value) {
+		return !!value && typeof value == "object";
+	}
+	/**
+	* Checks if `value` is classified as a `String` primitive or object.
+	*
+	* @static
+	* @since 0.1.0
+	* @memberOf _
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is a string, else `false`.
+	* @example
+	*
+	* _.isString('abc');
+	* // => true
+	*
+	* _.isString(1);
+	* // => false
+	*/
+	function isString(value) {
+		return typeof value == "string" || !isArray(value) && isObjectLike(value) && objectToString.call(value) == stringTag;
+	}
+	/**
+	* Checks if `value` is classified as a `Symbol` primitive or object.
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is a symbol, else `false`.
+	* @example
+	*
+	* _.isSymbol(Symbol.iterator);
+	* // => true
+	*
+	* _.isSymbol('abc');
+	* // => false
+	*/
+	function isSymbol(value) {
+		return typeof value == "symbol" || isObjectLike(value) && objectToString.call(value) == symbolTag;
+	}
+	/**
+	* Converts `value` to a finite number.
+	*
+	* @static
+	* @memberOf _
+	* @since 4.12.0
+	* @category Lang
+	* @param {*} value The value to convert.
+	* @returns {number} Returns the converted number.
+	* @example
+	*
+	* _.toFinite(3.2);
+	* // => 3.2
+	*
+	* _.toFinite(Number.MIN_VALUE);
+	* // => 5e-324
+	*
+	* _.toFinite(Infinity);
+	* // => 1.7976931348623157e+308
+	*
+	* _.toFinite('3.2');
+	* // => 3.2
+	*/
+	function toFinite(value) {
+		if (!value) return value === 0 ? value : 0;
+		value = toNumber(value);
+		if (value === INFINITY || value === -INFINITY) return (value < 0 ? -1 : 1) * MAX_INTEGER;
+		return value === value ? value : 0;
+	}
+	/**
+	* Converts `value` to an integer.
+	*
+	* **Note:** This method is loosely based on
+	* [`ToInteger`](http://www.ecma-international.org/ecma-262/7.0/#sec-tointeger).
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to convert.
+	* @returns {number} Returns the converted integer.
+	* @example
+	*
+	* _.toInteger(3.2);
+	* // => 3
+	*
+	* _.toInteger(Number.MIN_VALUE);
+	* // => 0
+	*
+	* _.toInteger(Infinity);
+	* // => 1.7976931348623157e+308
+	*
+	* _.toInteger('3.2');
+	* // => 3
+	*/
+	function toInteger(value) {
+		var result = toFinite(value), remainder = result % 1;
+		return result === result ? remainder ? result - remainder : result : 0;
+	}
+	/**
+	* Converts `value` to a number.
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to process.
+	* @returns {number} Returns the number.
+	* @example
+	*
+	* _.toNumber(3.2);
+	* // => 3.2
+	*
+	* _.toNumber(Number.MIN_VALUE);
+	* // => 5e-324
+	*
+	* _.toNumber(Infinity);
+	* // => Infinity
+	*
+	* _.toNumber('3.2');
+	* // => 3.2
+	*/
+	function toNumber(value) {
+		if (typeof value == "number") return value;
+		if (isSymbol(value)) return NAN;
+		if (isObject(value)) {
+			var other = typeof value.valueOf == "function" ? value.valueOf() : value;
+			value = isObject(other) ? other + "" : other;
+		}
+		if (typeof value != "string") return value === 0 ? value : +value;
+		value = value.replace(reTrim, "");
+		var isBinary = reIsBinary.test(value);
+		return isBinary || reIsOctal.test(value) ? freeParseInt(value.slice(2), isBinary ? 2 : 8) : reIsBadHex.test(value) ? NAN : +value;
+	}
+	/**
+	* Creates an array of the own enumerable property names of `object`.
+	*
+	* **Note:** Non-object values are coerced to objects. See the
+	* [ES spec](http://ecma-international.org/ecma-262/7.0/#sec-object.keys)
+	* for more details.
+	*
+	* @static
+	* @since 0.1.0
+	* @memberOf _
+	* @category Object
+	* @param {Object} object The object to query.
+	* @returns {Array} Returns the array of property names.
+	* @example
+	*
+	* function Foo() {
+	*   this.a = 1;
+	*   this.b = 2;
+	* }
+	*
+	* Foo.prototype.c = 3;
+	*
+	* _.keys(new Foo);
+	* // => ['a', 'b'] (iteration order is not guaranteed)
+	*
+	* _.keys('hi');
+	* // => ['0', '1']
+	*/
+	function keys(object) {
+		return isArrayLike(object) ? arrayLikeKeys(object) : baseKeys(object);
+	}
+	/**
+	* Creates an array of the own enumerable string keyed property values of `object`.
+	*
+	* **Note:** Non-object values are coerced to objects.
+	*
+	* @static
+	* @since 0.1.0
+	* @memberOf _
+	* @category Object
+	* @param {Object} object The object to query.
+	* @returns {Array} Returns the array of property values.
+	* @example
+	*
+	* function Foo() {
+	*   this.a = 1;
+	*   this.b = 2;
+	* }
+	*
+	* Foo.prototype.c = 3;
+	*
+	* _.values(new Foo);
+	* // => [1, 2] (iteration order is not guaranteed)
+	*
+	* _.values('hi');
+	* // => ['h', 'i']
+	*/
+	function values(object) {
+		return object ? baseValues(object, keys(object)) : [];
+	}
+	module.exports = includes;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/lodash.isboolean@3.0.3/node_modules/lodash.isboolean/index.js
+var require_lodash_isboolean = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/**
+	* lodash 3.0.3 (Custom Build) <https://lodash.com/>
+	* Build: `lodash modularize exports="npm" -o ./`
+	* Copyright 2012-2016 The Dojo Foundation <http://dojofoundation.org/>
+	* Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
+	* Copyright 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
+	* Available under MIT license <https://lodash.com/license>
+	*/
+	/** `Object#toString` result references. */
+	var boolTag = "[object Boolean]";
+	/**
+	* Used to resolve the [`toStringTag`](http://ecma-international.org/ecma-262/6.0/#sec-object.prototype.tostring)
+	* of values.
+	*/
+	var objectToString = Object.prototype.toString;
+	/**
+	* Checks if `value` is classified as a boolean primitive or object.
+	*
+	* @static
+	* @memberOf _
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is correctly classified, else `false`.
+	* @example
+	*
+	* _.isBoolean(false);
+	* // => true
+	*
+	* _.isBoolean(null);
+	* // => false
+	*/
+	function isBoolean(value) {
+		return value === true || value === false || isObjectLike(value) && objectToString.call(value) == boolTag;
+	}
+	/**
+	* Checks if `value` is object-like. A value is object-like if it's not `null`
+	* and has a `typeof` result of "object".
+	*
+	* @static
+	* @memberOf _
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is object-like, else `false`.
+	* @example
+	*
+	* _.isObjectLike({});
+	* // => true
+	*
+	* _.isObjectLike([1, 2, 3]);
+	* // => true
+	*
+	* _.isObjectLike(_.noop);
+	* // => false
+	*
+	* _.isObjectLike(null);
+	* // => false
+	*/
+	function isObjectLike(value) {
+		return !!value && typeof value == "object";
+	}
+	module.exports = isBoolean;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/lodash.isinteger@4.0.4/node_modules/lodash.isinteger/index.js
+var require_lodash_isinteger = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/**
+	* lodash (Custom Build) <https://lodash.com/>
+	* Build: `lodash modularize exports="npm" -o ./`
+	* Copyright jQuery Foundation and other contributors <https://jquery.org/>
+	* Released under MIT license <https://lodash.com/license>
+	* Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
+	* Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
+	*/
+	/** Used as references for various `Number` constants. */
+	var INFINITY = Infinity, MAX_INTEGER = 17976931348623157e292, NAN = NaN;
+	/** `Object#toString` result references. */
+	var symbolTag = "[object Symbol]";
+	/** Used to match leading and trailing whitespace. */
+	var reTrim = /^\s+|\s+$/g;
+	/** Used to detect bad signed hexadecimal string values. */
+	var reIsBadHex = /^[-+]0x[0-9a-f]+$/i;
+	/** Used to detect binary string values. */
+	var reIsBinary = /^0b[01]+$/i;
+	/** Used to detect octal string values. */
+	var reIsOctal = /^0o[0-7]+$/i;
+	/** Built-in method references without a dependency on `root`. */
+	var freeParseInt = parseInt;
+	/**
+	* Used to resolve the
+	* [`toStringTag`](http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
+	* of values.
+	*/
+	var objectToString = Object.prototype.toString;
+	/**
+	* Checks if `value` is an integer.
+	*
+	* **Note:** This method is based on
+	* [`Number.isInteger`](https://mdn.io/Number/isInteger).
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is an integer, else `false`.
+	* @example
+	*
+	* _.isInteger(3);
+	* // => true
+	*
+	* _.isInteger(Number.MIN_VALUE);
+	* // => false
+	*
+	* _.isInteger(Infinity);
+	* // => false
+	*
+	* _.isInteger('3');
+	* // => false
+	*/
+	function isInteger(value) {
+		return typeof value == "number" && value == toInteger(value);
+	}
+	/**
+	* Checks if `value` is the
+	* [language type](http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
+	* of `Object`. (e.g. arrays, functions, objects, regexes, `new Number(0)`, and `new String('')`)
+	*
+	* @static
+	* @memberOf _
+	* @since 0.1.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is an object, else `false`.
+	* @example
+	*
+	* _.isObject({});
+	* // => true
+	*
+	* _.isObject([1, 2, 3]);
+	* // => true
+	*
+	* _.isObject(_.noop);
+	* // => true
+	*
+	* _.isObject(null);
+	* // => false
+	*/
+	function isObject(value) {
+		var type = typeof value;
+		return !!value && (type == "object" || type == "function");
+	}
+	/**
+	* Checks if `value` is object-like. A value is object-like if it's not `null`
+	* and has a `typeof` result of "object".
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is object-like, else `false`.
+	* @example
+	*
+	* _.isObjectLike({});
+	* // => true
+	*
+	* _.isObjectLike([1, 2, 3]);
+	* // => true
+	*
+	* _.isObjectLike(_.noop);
+	* // => false
+	*
+	* _.isObjectLike(null);
+	* // => false
+	*/
+	function isObjectLike(value) {
+		return !!value && typeof value == "object";
+	}
+	/**
+	* Checks if `value` is classified as a `Symbol` primitive or object.
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is a symbol, else `false`.
+	* @example
+	*
+	* _.isSymbol(Symbol.iterator);
+	* // => true
+	*
+	* _.isSymbol('abc');
+	* // => false
+	*/
+	function isSymbol(value) {
+		return typeof value == "symbol" || isObjectLike(value) && objectToString.call(value) == symbolTag;
+	}
+	/**
+	* Converts `value` to a finite number.
+	*
+	* @static
+	* @memberOf _
+	* @since 4.12.0
+	* @category Lang
+	* @param {*} value The value to convert.
+	* @returns {number} Returns the converted number.
+	* @example
+	*
+	* _.toFinite(3.2);
+	* // => 3.2
+	*
+	* _.toFinite(Number.MIN_VALUE);
+	* // => 5e-324
+	*
+	* _.toFinite(Infinity);
+	* // => 1.7976931348623157e+308
+	*
+	* _.toFinite('3.2');
+	* // => 3.2
+	*/
+	function toFinite(value) {
+		if (!value) return value === 0 ? value : 0;
+		value = toNumber(value);
+		if (value === INFINITY || value === -INFINITY) return (value < 0 ? -1 : 1) * MAX_INTEGER;
+		return value === value ? value : 0;
+	}
+	/**
+	* Converts `value` to an integer.
+	*
+	* **Note:** This method is loosely based on
+	* [`ToInteger`](http://www.ecma-international.org/ecma-262/7.0/#sec-tointeger).
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to convert.
+	* @returns {number} Returns the converted integer.
+	* @example
+	*
+	* _.toInteger(3.2);
+	* // => 3
+	*
+	* _.toInteger(Number.MIN_VALUE);
+	* // => 0
+	*
+	* _.toInteger(Infinity);
+	* // => 1.7976931348623157e+308
+	*
+	* _.toInteger('3.2');
+	* // => 3
+	*/
+	function toInteger(value) {
+		var result = toFinite(value), remainder = result % 1;
+		return result === result ? remainder ? result - remainder : result : 0;
+	}
+	/**
+	* Converts `value` to a number.
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to process.
+	* @returns {number} Returns the number.
+	* @example
+	*
+	* _.toNumber(3.2);
+	* // => 3.2
+	*
+	* _.toNumber(Number.MIN_VALUE);
+	* // => 5e-324
+	*
+	* _.toNumber(Infinity);
+	* // => Infinity
+	*
+	* _.toNumber('3.2');
+	* // => 3.2
+	*/
+	function toNumber(value) {
+		if (typeof value == "number") return value;
+		if (isSymbol(value)) return NAN;
+		if (isObject(value)) {
+			var other = typeof value.valueOf == "function" ? value.valueOf() : value;
+			value = isObject(other) ? other + "" : other;
+		}
+		if (typeof value != "string") return value === 0 ? value : +value;
+		value = value.replace(reTrim, "");
+		var isBinary = reIsBinary.test(value);
+		return isBinary || reIsOctal.test(value) ? freeParseInt(value.slice(2), isBinary ? 2 : 8) : reIsBadHex.test(value) ? NAN : +value;
+	}
+	module.exports = isInteger;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/lodash.isnumber@3.0.3/node_modules/lodash.isnumber/index.js
+var require_lodash_isnumber = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/**
+	* lodash 3.0.3 (Custom Build) <https://lodash.com/>
+	* Build: `lodash modularize exports="npm" -o ./`
+	* Copyright 2012-2016 The Dojo Foundation <http://dojofoundation.org/>
+	* Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
+	* Copyright 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
+	* Available under MIT license <https://lodash.com/license>
+	*/
+	/** `Object#toString` result references. */
+	var numberTag = "[object Number]";
+	/**
+	* Used to resolve the [`toStringTag`](http://ecma-international.org/ecma-262/6.0/#sec-object.prototype.tostring)
+	* of values.
+	*/
+	var objectToString = Object.prototype.toString;
+	/**
+	* Checks if `value` is object-like. A value is object-like if it's not `null`
+	* and has a `typeof` result of "object".
+	*
+	* @static
+	* @memberOf _
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is object-like, else `false`.
+	* @example
+	*
+	* _.isObjectLike({});
+	* // => true
+	*
+	* _.isObjectLike([1, 2, 3]);
+	* // => true
+	*
+	* _.isObjectLike(_.noop);
+	* // => false
+	*
+	* _.isObjectLike(null);
+	* // => false
+	*/
+	function isObjectLike(value) {
+		return !!value && typeof value == "object";
+	}
+	/**
+	* Checks if `value` is classified as a `Number` primitive or object.
+	*
+	* **Note:** To exclude `Infinity`, `-Infinity`, and `NaN`, which are classified
+	* as numbers, use the `_.isFinite` method.
+	*
+	* @static
+	* @memberOf _
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is correctly classified, else `false`.
+	* @example
+	*
+	* _.isNumber(3);
+	* // => true
+	*
+	* _.isNumber(Number.MIN_VALUE);
+	* // => true
+	*
+	* _.isNumber(Infinity);
+	* // => true
+	*
+	* _.isNumber('3');
+	* // => false
+	*/
+	function isNumber(value) {
+		return typeof value == "number" || isObjectLike(value) && objectToString.call(value) == numberTag;
+	}
+	module.exports = isNumber;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/lodash.isplainobject@4.0.6/node_modules/lodash.isplainobject/index.js
+var require_lodash_isplainobject = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/**
+	* lodash (Custom Build) <https://lodash.com/>
+	* Build: `lodash modularize exports="npm" -o ./`
+	* Copyright jQuery Foundation and other contributors <https://jquery.org/>
+	* Released under MIT license <https://lodash.com/license>
+	* Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
+	* Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
+	*/
+	/** `Object#toString` result references. */
+	var objectTag = "[object Object]";
+	/**
+	* Checks if `value` is a host object in IE < 9.
+	*
+	* @private
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is a host object, else `false`.
+	*/
+	function isHostObject(value) {
+		var result = false;
+		if (value != null && typeof value.toString != "function") try {
+			result = !!(value + "");
+		} catch (e) {}
+		return result;
+	}
+	/**
+	* Creates a unary function that invokes `func` with its argument transformed.
+	*
+	* @private
+	* @param {Function} func The function to wrap.
+	* @param {Function} transform The argument transform.
+	* @returns {Function} Returns the new function.
+	*/
+	function overArg(func, transform) {
+		return function(arg) {
+			return func(transform(arg));
+		};
+	}
+	/** Used for built-in method references. */
+	var funcProto = Function.prototype, objectProto = Object.prototype;
+	/** Used to resolve the decompiled source of functions. */
+	var funcToString = funcProto.toString;
+	/** Used to check objects for own properties. */
+	var hasOwnProperty = objectProto.hasOwnProperty;
+	/** Used to infer the `Object` constructor. */
+	var objectCtorString = funcToString.call(Object);
+	/**
+	* Used to resolve the
+	* [`toStringTag`](http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
+	* of values.
+	*/
+	var objectToString = objectProto.toString;
+	/** Built-in value references. */
+	var getPrototype = overArg(Object.getPrototypeOf, Object);
+	/**
+	* Checks if `value` is object-like. A value is object-like if it's not `null`
+	* and has a `typeof` result of "object".
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is object-like, else `false`.
+	* @example
+	*
+	* _.isObjectLike({});
+	* // => true
+	*
+	* _.isObjectLike([1, 2, 3]);
+	* // => true
+	*
+	* _.isObjectLike(_.noop);
+	* // => false
+	*
+	* _.isObjectLike(null);
+	* // => false
+	*/
+	function isObjectLike(value) {
+		return !!value && typeof value == "object";
+	}
+	/**
+	* Checks if `value` is a plain object, that is, an object created by the
+	* `Object` constructor or one with a `[[Prototype]]` of `null`.
+	*
+	* @static
+	* @memberOf _
+	* @since 0.8.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is a plain object, else `false`.
+	* @example
+	*
+	* function Foo() {
+	*   this.a = 1;
+	* }
+	*
+	* _.isPlainObject(new Foo);
+	* // => false
+	*
+	* _.isPlainObject([1, 2, 3]);
+	* // => false
+	*
+	* _.isPlainObject({ 'x': 0, 'y': 0 });
+	* // => true
+	*
+	* _.isPlainObject(Object.create(null));
+	* // => true
+	*/
+	function isPlainObject(value) {
+		if (!isObjectLike(value) || objectToString.call(value) != objectTag || isHostObject(value)) return false;
+		var proto = getPrototype(value);
+		if (proto === null) return true;
+		var Ctor = hasOwnProperty.call(proto, "constructor") && proto.constructor;
+		return typeof Ctor == "function" && Ctor instanceof Ctor && funcToString.call(Ctor) == objectCtorString;
+	}
+	module.exports = isPlainObject;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/lodash.isstring@4.0.1/node_modules/lodash.isstring/index.js
+var require_lodash_isstring = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/**
+	* lodash 4.0.1 (Custom Build) <https://lodash.com/>
+	* Build: `lodash modularize exports="npm" -o ./`
+	* Copyright 2012-2016 The Dojo Foundation <http://dojofoundation.org/>
+	* Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
+	* Copyright 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
+	* Available under MIT license <https://lodash.com/license>
+	*/
+	/** `Object#toString` result references. */
+	var stringTag = "[object String]";
+	/**
+	* Used to resolve the [`toStringTag`](http://ecma-international.org/ecma-262/6.0/#sec-object.prototype.tostring)
+	* of values.
+	*/
+	var objectToString = Object.prototype.toString;
+	/**
+	* Checks if `value` is classified as an `Array` object.
+	*
+	* @static
+	* @memberOf _
+	* @type Function
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is correctly classified, else `false`.
+	* @example
+	*
+	* _.isArray([1, 2, 3]);
+	* // => true
+	*
+	* _.isArray(document.body.children);
+	* // => false
+	*
+	* _.isArray('abc');
+	* // => false
+	*
+	* _.isArray(_.noop);
+	* // => false
+	*/
+	var isArray = Array.isArray;
+	/**
+	* Checks if `value` is object-like. A value is object-like if it's not `null`
+	* and has a `typeof` result of "object".
+	*
+	* @static
+	* @memberOf _
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is object-like, else `false`.
+	* @example
+	*
+	* _.isObjectLike({});
+	* // => true
+	*
+	* _.isObjectLike([1, 2, 3]);
+	* // => true
+	*
+	* _.isObjectLike(_.noop);
+	* // => false
+	*
+	* _.isObjectLike(null);
+	* // => false
+	*/
+	function isObjectLike(value) {
+		return !!value && typeof value == "object";
+	}
+	/**
+	* Checks if `value` is classified as a `String` primitive or object.
+	*
+	* @static
+	* @memberOf _
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is correctly classified, else `false`.
+	* @example
+	*
+	* _.isString('abc');
+	* // => true
+	*
+	* _.isString(1);
+	* // => false
+	*/
+	function isString(value) {
+		return typeof value == "string" || !isArray(value) && isObjectLike(value) && objectToString.call(value) == stringTag;
+	}
+	module.exports = isString;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/lodash.once@4.1.1/node_modules/lodash.once/index.js
+var require_lodash_once = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/**
+	* lodash (Custom Build) <https://lodash.com/>
+	* Build: `lodash modularize exports="npm" -o ./`
+	* Copyright jQuery Foundation and other contributors <https://jquery.org/>
+	* Released under MIT license <https://lodash.com/license>
+	* Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
+	* Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
+	*/
+	/** Used as the `TypeError` message for "Functions" methods. */
+	var FUNC_ERROR_TEXT = "Expected a function";
+	/** Used as references for various `Number` constants. */
+	var INFINITY = Infinity, MAX_INTEGER = 17976931348623157e292, NAN = NaN;
+	/** `Object#toString` result references. */
+	var symbolTag = "[object Symbol]";
+	/** Used to match leading and trailing whitespace. */
+	var reTrim = /^\s+|\s+$/g;
+	/** Used to detect bad signed hexadecimal string values. */
+	var reIsBadHex = /^[-+]0x[0-9a-f]+$/i;
+	/** Used to detect binary string values. */
+	var reIsBinary = /^0b[01]+$/i;
+	/** Used to detect octal string values. */
+	var reIsOctal = /^0o[0-7]+$/i;
+	/** Built-in method references without a dependency on `root`. */
+	var freeParseInt = parseInt;
+	/**
+	* Used to resolve the
+	* [`toStringTag`](http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
+	* of values.
+	*/
+	var objectToString = Object.prototype.toString;
+	/**
+	* Creates a function that invokes `func`, with the `this` binding and arguments
+	* of the created function, while it's called less than `n` times. Subsequent
+	* calls to the created function return the result of the last `func` invocation.
+	*
+	* @static
+	* @memberOf _
+	* @since 3.0.0
+	* @category Function
+	* @param {number} n The number of calls at which `func` is no longer invoked.
+	* @param {Function} func The function to restrict.
+	* @returns {Function} Returns the new restricted function.
+	* @example
+	*
+	* jQuery(element).on('click', _.before(5, addContactToList));
+	* // => Allows adding up to 4 contacts to the list.
+	*/
+	function before(n, func) {
+		var result;
+		if (typeof func != "function") throw new TypeError(FUNC_ERROR_TEXT);
+		n = toInteger(n);
+		return function() {
+			if (--n > 0) result = func.apply(this, arguments);
+			if (n <= 1) func = void 0;
+			return result;
+		};
+	}
+	/**
+	* Creates a function that is restricted to invoking `func` once. Repeat calls
+	* to the function return the value of the first invocation. The `func` is
+	* invoked with the `this` binding and arguments of the created function.
+	*
+	* @static
+	* @memberOf _
+	* @since 0.1.0
+	* @category Function
+	* @param {Function} func The function to restrict.
+	* @returns {Function} Returns the new restricted function.
+	* @example
+	*
+	* var initialize = _.once(createApplication);
+	* initialize();
+	* initialize();
+	* // => `createApplication` is invoked once
+	*/
+	function once(func) {
+		return before(2, func);
+	}
+	/**
+	* Checks if `value` is the
+	* [language type](http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
+	* of `Object`. (e.g. arrays, functions, objects, regexes, `new Number(0)`, and `new String('')`)
+	*
+	* @static
+	* @memberOf _
+	* @since 0.1.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is an object, else `false`.
+	* @example
+	*
+	* _.isObject({});
+	* // => true
+	*
+	* _.isObject([1, 2, 3]);
+	* // => true
+	*
+	* _.isObject(_.noop);
+	* // => true
+	*
+	* _.isObject(null);
+	* // => false
+	*/
+	function isObject(value) {
+		var type = typeof value;
+		return !!value && (type == "object" || type == "function");
+	}
+	/**
+	* Checks if `value` is object-like. A value is object-like if it's not `null`
+	* and has a `typeof` result of "object".
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is object-like, else `false`.
+	* @example
+	*
+	* _.isObjectLike({});
+	* // => true
+	*
+	* _.isObjectLike([1, 2, 3]);
+	* // => true
+	*
+	* _.isObjectLike(_.noop);
+	* // => false
+	*
+	* _.isObjectLike(null);
+	* // => false
+	*/
+	function isObjectLike(value) {
+		return !!value && typeof value == "object";
+	}
+	/**
+	* Checks if `value` is classified as a `Symbol` primitive or object.
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to check.
+	* @returns {boolean} Returns `true` if `value` is a symbol, else `false`.
+	* @example
+	*
+	* _.isSymbol(Symbol.iterator);
+	* // => true
+	*
+	* _.isSymbol('abc');
+	* // => false
+	*/
+	function isSymbol(value) {
+		return typeof value == "symbol" || isObjectLike(value) && objectToString.call(value) == symbolTag;
+	}
+	/**
+	* Converts `value` to a finite number.
+	*
+	* @static
+	* @memberOf _
+	* @since 4.12.0
+	* @category Lang
+	* @param {*} value The value to convert.
+	* @returns {number} Returns the converted number.
+	* @example
+	*
+	* _.toFinite(3.2);
+	* // => 3.2
+	*
+	* _.toFinite(Number.MIN_VALUE);
+	* // => 5e-324
+	*
+	* _.toFinite(Infinity);
+	* // => 1.7976931348623157e+308
+	*
+	* _.toFinite('3.2');
+	* // => 3.2
+	*/
+	function toFinite(value) {
+		if (!value) return value === 0 ? value : 0;
+		value = toNumber(value);
+		if (value === INFINITY || value === -INFINITY) return (value < 0 ? -1 : 1) * MAX_INTEGER;
+		return value === value ? value : 0;
+	}
+	/**
+	* Converts `value` to an integer.
+	*
+	* **Note:** This method is loosely based on
+	* [`ToInteger`](http://www.ecma-international.org/ecma-262/7.0/#sec-tointeger).
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to convert.
+	* @returns {number} Returns the converted integer.
+	* @example
+	*
+	* _.toInteger(3.2);
+	* // => 3
+	*
+	* _.toInteger(Number.MIN_VALUE);
+	* // => 0
+	*
+	* _.toInteger(Infinity);
+	* // => 1.7976931348623157e+308
+	*
+	* _.toInteger('3.2');
+	* // => 3
+	*/
+	function toInteger(value) {
+		var result = toFinite(value), remainder = result % 1;
+		return result === result ? remainder ? result - remainder : result : 0;
+	}
+	/**
+	* Converts `value` to a number.
+	*
+	* @static
+	* @memberOf _
+	* @since 4.0.0
+	* @category Lang
+	* @param {*} value The value to process.
+	* @returns {number} Returns the number.
+	* @example
+	*
+	* _.toNumber(3.2);
+	* // => 3.2
+	*
+	* _.toNumber(Number.MIN_VALUE);
+	* // => 5e-324
+	*
+	* _.toNumber(Infinity);
+	* // => Infinity
+	*
+	* _.toNumber('3.2');
+	* // => 3.2
+	*/
+	function toNumber(value) {
+		if (typeof value == "number") return value;
+		if (isSymbol(value)) return NAN;
+		if (isObject(value)) {
+			var other = typeof value.valueOf == "function" ? value.valueOf() : value;
+			value = isObject(other) ? other + "" : other;
+		}
+		if (typeof value != "string") return value === 0 ? value : +value;
+		value = value.replace(reTrim, "");
+		var isBinary = reIsBinary.test(value);
+		return isBinary || reIsOctal.test(value) ? freeParseInt(value.slice(2), isBinary ? 2 : 8) : reIsBadHex.test(value) ? NAN : +value;
+	}
+	module.exports = once;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/sign.js
+var require_sign = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var timespan = require_timespan();
+	var PS_SUPPORTED = require_psSupported();
+	var validateAsymmetricKey = require_validateAsymmetricKey();
+	var jws = require_jws();
+	var includes = require_lodash_includes();
+	var isBoolean = require_lodash_isboolean();
+	var isInteger = require_lodash_isinteger();
+	var isNumber = require_lodash_isnumber();
+	var isPlainObject = require_lodash_isplainobject();
+	var isString = require_lodash_isstring();
+	var once = require_lodash_once();
+	var { KeyObject, createSecretKey, createPrivateKey } = __require("crypto");
+	var SUPPORTED_ALGS = [
+		"RS256",
+		"RS384",
+		"RS512",
+		"ES256",
+		"ES384",
+		"ES512",
+		"HS256",
+		"HS384",
+		"HS512",
+		"none"
+	];
+	if (PS_SUPPORTED) SUPPORTED_ALGS.splice(3, 0, "PS256", "PS384", "PS512");
+	var sign_options_schema = {
+		expiresIn: {
+			isValid: function(value) {
+				return isInteger(value) || isString(value) && value;
+			},
+			message: "\"expiresIn\" should be a number of seconds or string representing a timespan"
+		},
+		notBefore: {
+			isValid: function(value) {
+				return isInteger(value) || isString(value) && value;
+			},
+			message: "\"notBefore\" should be a number of seconds or string representing a timespan"
+		},
+		audience: {
+			isValid: function(value) {
+				return isString(value) || Array.isArray(value);
+			},
+			message: "\"audience\" must be a string or array"
+		},
+		algorithm: {
+			isValid: includes.bind(null, SUPPORTED_ALGS),
+			message: "\"algorithm\" must be a valid string enum value"
+		},
+		header: {
+			isValid: isPlainObject,
+			message: "\"header\" must be an object"
+		},
+		encoding: {
+			isValid: isString,
+			message: "\"encoding\" must be a string"
+		},
+		issuer: {
+			isValid: isString,
+			message: "\"issuer\" must be a string"
+		},
+		subject: {
+			isValid: isString,
+			message: "\"subject\" must be a string"
+		},
+		jwtid: {
+			isValid: isString,
+			message: "\"jwtid\" must be a string"
+		},
+		noTimestamp: {
+			isValid: isBoolean,
+			message: "\"noTimestamp\" must be a boolean"
+		},
+		keyid: {
+			isValid: isString,
+			message: "\"keyid\" must be a string"
+		},
+		mutatePayload: {
+			isValid: isBoolean,
+			message: "\"mutatePayload\" must be a boolean"
+		},
+		allowInsecureKeySizes: {
+			isValid: isBoolean,
+			message: "\"allowInsecureKeySizes\" must be a boolean"
+		},
+		allowInvalidAsymmetricKeyTypes: {
+			isValid: isBoolean,
+			message: "\"allowInvalidAsymmetricKeyTypes\" must be a boolean"
+		}
+	};
+	var registered_claims_schema = {
+		iat: {
+			isValid: isNumber,
+			message: "\"iat\" should be a number of seconds"
+		},
+		exp: {
+			isValid: isNumber,
+			message: "\"exp\" should be a number of seconds"
+		},
+		nbf: {
+			isValid: isNumber,
+			message: "\"nbf\" should be a number of seconds"
+		}
+	};
+	function validate(schema, allowUnknown, object, parameterName) {
+		if (!isPlainObject(object)) throw new Error("Expected \"" + parameterName + "\" to be a plain object.");
+		Object.keys(object).forEach(function(key) {
+			const validator = schema[key];
+			if (!validator) {
+				if (!allowUnknown) throw new Error("\"" + key + "\" is not allowed in \"" + parameterName + "\"");
+				return;
+			}
+			if (!validator.isValid(object[key])) throw new Error(validator.message);
+		});
+	}
+	function validateOptions(options) {
+		return validate(sign_options_schema, false, options, "options");
+	}
+	function validatePayload(payload) {
+		return validate(registered_claims_schema, true, payload, "payload");
+	}
+	var options_to_payload = {
+		"audience": "aud",
+		"issuer": "iss",
+		"subject": "sub",
+		"jwtid": "jti"
+	};
+	var options_for_objects = [
+		"expiresIn",
+		"notBefore",
+		"noTimestamp",
+		"audience",
+		"issuer",
+		"subject",
+		"jwtid"
+	];
+	module.exports = function(payload, secretOrPrivateKey, options, callback) {
+		if (typeof options === "function") {
+			callback = options;
+			options = {};
+		} else options = options || {};
+		const isObjectPayload = typeof payload === "object" && !Buffer.isBuffer(payload);
+		const header = Object.assign({
+			alg: options.algorithm || "HS256",
+			typ: isObjectPayload ? "JWT" : void 0,
+			kid: options.keyid
+		}, options.header);
+		function failure(err) {
+			if (callback) return callback(err);
+			throw err;
+		}
+		if (!secretOrPrivateKey && options.algorithm !== "none") return failure(/* @__PURE__ */ new Error("secretOrPrivateKey must have a value"));
+		if (secretOrPrivateKey != null && !(secretOrPrivateKey instanceof KeyObject)) try {
+			secretOrPrivateKey = createPrivateKey(secretOrPrivateKey);
+		} catch (_) {
+			try {
+				secretOrPrivateKey = createSecretKey(typeof secretOrPrivateKey === "string" ? Buffer.from(secretOrPrivateKey) : secretOrPrivateKey);
+			} catch (_) {
+				return failure(/* @__PURE__ */ new Error("secretOrPrivateKey is not valid key material"));
+			}
+		}
+		if (header.alg.startsWith("HS") && secretOrPrivateKey.type !== "secret") return failure(/* @__PURE__ */ new Error(`secretOrPrivateKey must be a symmetric key when using ${header.alg}`));
+		else if (/^(?:RS|PS|ES)/.test(header.alg)) {
+			if (secretOrPrivateKey.type !== "private") return failure(/* @__PURE__ */ new Error(`secretOrPrivateKey must be an asymmetric key when using ${header.alg}`));
+			if (!options.allowInsecureKeySizes && !header.alg.startsWith("ES") && secretOrPrivateKey.asymmetricKeyDetails !== void 0 && secretOrPrivateKey.asymmetricKeyDetails.modulusLength < 2048) return failure(/* @__PURE__ */ new Error(`secretOrPrivateKey has a minimum key size of 2048 bits for ${header.alg}`));
+		}
+		if (typeof payload === "undefined") return failure(/* @__PURE__ */ new Error("payload is required"));
+		else if (isObjectPayload) {
+			try {
+				validatePayload(payload);
+			} catch (error) {
+				return failure(error);
+			}
+			if (!options.mutatePayload) payload = Object.assign({}, payload);
+		} else {
+			const invalid_options = options_for_objects.filter(function(opt) {
+				return typeof options[opt] !== "undefined";
+			});
+			if (invalid_options.length > 0) return failure(/* @__PURE__ */ new Error("invalid " + invalid_options.join(",") + " option for " + typeof payload + " payload"));
+		}
+		if (typeof payload.exp !== "undefined" && typeof options.expiresIn !== "undefined") return failure(/* @__PURE__ */ new Error("Bad \"options.expiresIn\" option the payload already has an \"exp\" property."));
+		if (typeof payload.nbf !== "undefined" && typeof options.notBefore !== "undefined") return failure(/* @__PURE__ */ new Error("Bad \"options.notBefore\" option the payload already has an \"nbf\" property."));
+		try {
+			validateOptions(options);
+		} catch (error) {
+			return failure(error);
+		}
+		if (!options.allowInvalidAsymmetricKeyTypes) try {
+			validateAsymmetricKey(header.alg, secretOrPrivateKey);
+		} catch (error) {
+			return failure(error);
+		}
+		const timestamp = payload.iat || Math.floor(Date.now() / 1e3);
+		if (options.noTimestamp) delete payload.iat;
+		else if (isObjectPayload) payload.iat = timestamp;
+		if (typeof options.notBefore !== "undefined") {
+			try {
+				payload.nbf = timespan(options.notBefore, timestamp);
+			} catch (err) {
+				return failure(err);
+			}
+			if (typeof payload.nbf === "undefined") return failure(/* @__PURE__ */ new Error("\"notBefore\" should be a number of seconds or string representing a timespan eg: \"1d\", \"20h\", 60"));
+		}
+		if (typeof options.expiresIn !== "undefined" && typeof payload === "object") {
+			try {
+				payload.exp = timespan(options.expiresIn, timestamp);
+			} catch (err) {
+				return failure(err);
+			}
+			if (typeof payload.exp === "undefined") return failure(/* @__PURE__ */ new Error("\"expiresIn\" should be a number of seconds or string representing a timespan eg: \"1d\", \"20h\", 60"));
+		}
+		Object.keys(options_to_payload).forEach(function(key) {
+			const claim = options_to_payload[key];
+			if (typeof options[key] !== "undefined") {
+				if (typeof payload[claim] !== "undefined") return failure(/* @__PURE__ */ new Error("Bad \"options." + key + "\" option. The payload already has an \"" + claim + "\" property."));
+				payload[claim] = options[key];
+			}
+		});
+		const encoding = options.encoding || "utf8";
+		if (typeof callback === "function") {
+			callback = callback && once(callback);
+			jws.createSign({
+				header,
+				privateKey: secretOrPrivateKey,
+				payload,
+				encoding
+			}).once("error", callback).once("done", function(signature) {
+				if (!options.allowInsecureKeySizes && /^(?:RS|PS)/.test(header.alg) && signature.length < 256) return callback(/* @__PURE__ */ new Error(`secretOrPrivateKey has a minimum key size of 2048 bits for ${header.alg}`));
+				callback(null, signature);
+			});
+		} else {
+			let signature = jws.sign({
+				header,
+				payload,
+				secret: secretOrPrivateKey,
+				encoding
+			});
+			if (!options.allowInsecureKeySizes && /^(?:RS|PS)/.test(header.alg) && signature.length < 256) throw new Error(`secretOrPrivateKey has a minimum key size of 2048 bits for ${header.alg}`);
+			return signature;
+		}
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/jsonwebtoken@9.0.3/node_modules/jsonwebtoken/index.js
+var require_jsonwebtoken = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	module.exports = {
+		decode: require_decode(),
+		verify: require_verify(),
+		sign: require_sign(),
+		JsonWebTokenError: require_JsonWebTokenError(),
+		NotBeforeError: require_NotBeforeError(),
+		TokenExpiredError: require_TokenExpiredError()
+	};
+}));
+//#endregion
+//#region src/auth/jwt.ts
+var jwt_exports = /* @__PURE__ */ __exportAll({
+	configureJwt: () => configureJwt,
+	generateAccessToken: () => generateAccessToken,
+	generateDownloadToken: () => generateDownloadToken,
+	generateRefreshToken: () => generateRefreshToken,
+	getAccessTokenExpiry: () => getAccessTokenExpiry,
+	getAccessTokenExpiryMs: () => getAccessTokenExpiryMs,
+	getRefreshTokenExpiry: () => getRefreshTokenExpiry,
+	hashRefreshToken: () => hashRefreshToken,
+	verifyAccessToken: () => verifyAccessToken,
+	verifyDownloadToken: () => verifyDownloadToken
+});
+var import_jsonwebtoken = /* @__PURE__ */ __toESM(require_jsonwebtoken(), 1);
+var jwtConfig = {
+	secret: "",
+	accessExpiresIn: "1h",
+	refreshExpiresIn: "30d"
+};
+/**
+* Configure JWT settings - call this during initialization.
+* Validates the secret strength to prevent deployment with default/weak secrets.
+*/
+function configureJwt(config) {
+	const weakSecrets = new Set([
+		"secret",
+		"jwt-secret",
+		"jwt_secret",
+		"your-secret",
+		"your-super-secret-jwt-key-change-in-production",
+		"super-secret-jwt-key-change-in-production",
+		"change-me",
+		"changeme",
+		"password",
+		"test",
+		"mysecret",
+		"my-secret",
+		"my_secret",
+		"example-secret",
+		"please-change-me",
+		"replace-this-with-a-real-secret",
+		"default-secret",
+		"rebase_saas_jwt_secret_must_be_long_long_long_long",
+		"rebase_saas_service_key_must_be_long_long_long_long"
+	]);
+	if (!config.secret || config.secret.length < 32) throw new Error("JWT secret is too short. Must be at least 32 characters. Generate one with: node -e \"logger.info(require('crypto').randomBytes(48).toString('base64'))\"");
+	if (weakSecrets.has(config.secret.toLowerCase())) throw new Error("JWT secret is a known default/weak value. Please use a strong, randomly generated secret. Generate one with: node -e \"logger.info(require('crypto').randomBytes(48).toString('base64'))\"");
+	jwtConfig = {
+		...jwtConfig,
+		...config
+	};
+}
+/**
+* Generate an access token (short-lived, 1 hour by default)
+*/
+function generateAccessToken(userId, roles, aal = "aal1", customClaims) {
+	if (!jwtConfig.secret) throw new Error("JWT secret not configured. Call configureJwt() first.");
+	const payload = {
+		userId,
+		roles,
+		aal,
+		...customClaims
+	};
+	return import_jsonwebtoken.default.sign(payload, jwtConfig.secret, {
+		expiresIn: jwtConfig.accessExpiresIn,
+		algorithm: "HS256"
+	});
+}
+/**
+* Get the expiration time of an access token in milliseconds from now
+*/
+function getAccessTokenExpiryMs() {
+	const match = (jwtConfig.accessExpiresIn || "1h").match(/^(\d+)([dhms])$/);
+	if (!match) return 3600 * 1e3;
+	const value = parseInt(match[1], 10);
+	switch (match[2]) {
+		case "d": return value * 24 * 60 * 60 * 1e3;
+		case "h": return value * 60 * 60 * 1e3;
+		case "m": return value * 60 * 1e3;
+		case "s": return value * 1e3;
+		default: return 3600 * 1e3;
+	}
+}
+/**
+* Get the expiration timestamp for an access token
+*/
+function getAccessTokenExpiry() {
+	return Date.now() + getAccessTokenExpiryMs();
+}
+/**
+* Verify and decode an access token
+*/
+function verifyAccessToken(token) {
+	if (!jwtConfig.secret) throw new Error("JWT secret not configured. Call configureJwt() first.");
+	try {
+		const decoded = import_jsonwebtoken.default.verify(token, jwtConfig.secret, { algorithms: ["HS256"] });
+		const id = decoded.userId || decoded.uid || decoded.sub;
+		if (!id) {
+			logger.error("[JWT] Verification failed: missing id in payload", { detail: decoded });
+			return null;
+		}
+		const aal = decoded.aal === "aal1" || decoded.aal === "aal2" ? decoded.aal : "aal1";
+		return {
+			userId: id,
+			roles: decoded.roles || [],
+			aal
+		};
+	} catch (error) {
+		logger.error("[JWT] Verification failed", {
+			error,
+			detail: token.substring(0, 15)
+		});
+		return null;
+	}
+}
+/**
+* Generate a random refresh token (long-lived, 30 days by default)
+*/
+function generateRefreshToken() {
+	return randomBytes(40).toString("hex");
+}
+/**
+* Hash a refresh token for database storage (don't store raw tokens)
+*/
+function hashRefreshToken(token) {
+	return createHash("sha256").update(token).digest("hex");
+}
+/**
+* Calculate refresh token expiration date
+*/
+function getRefreshTokenExpiry() {
+	const match = (jwtConfig.refreshExpiresIn || "30d").match(/^(\d+)([dhms])$/);
+	if (!match) return new Date(Date.now() + 720 * 60 * 60 * 1e3);
+	const value = parseInt(match[1], 10);
+	const unit = match[2];
+	let ms;
+	switch (unit) {
+		case "d":
+			ms = value * 24 * 60 * 60 * 1e3;
+			break;
+		case "h":
+			ms = value * 60 * 60 * 1e3;
+			break;
+		case "m":
+			ms = value * 60 * 1e3;
+			break;
+		case "s":
+			ms = value * 1e3;
+			break;
+		default: ms = 720 * 60 * 60 * 1e3;
+	}
+	return new Date(Date.now() + ms);
+}
+/**
+* Generate a short-lived download token scoped to a specific file path or prefix
+*/
+function generateDownloadToken(path, expiresInSeconds = 300) {
+	if (!jwtConfig.secret) throw new Error("JWT secret not configured. Call configureJwt() first.");
+	const payload = {
+		purpose: "file-read",
+		path
+	};
+	return import_jsonwebtoken.default.sign(payload, jwtConfig.secret, {
+		expiresIn: expiresInSeconds,
+		algorithm: "HS256"
+	});
+}
+/**
+* Verify and decode a download token
+*/
+function verifyDownloadToken(token) {
+	if (!jwtConfig.secret) throw new Error("JWT secret not configured. Call configureJwt() first.");
+	try {
+		const decoded = import_jsonwebtoken.default.verify(token, jwtConfig.secret, { algorithms: ["HS256"] });
+		if (decoded && decoded.purpose === "file-read" && typeof decoded.path === "string") return {
+			purpose: "file-read",
+			path: decoded.path
+		};
+		return null;
+	} catch (error) {
+		logger.error("[JWT] Download token verification failed", { error });
+		return null;
+	}
+}
+//#endregion
+export { getAccessTokenExpiry as a, jwt_exports as c, require_jsonwebtoken as d, generateRefreshToken as i, verifyAccessToken as l, generateAccessToken as n, getRefreshTokenExpiry as o, generateDownloadToken as r, hashRefreshToken as s, configureJwt as t, verifyDownloadToken as u };
+
+//# sourceMappingURL=jwt-BwIn8xmk.js.map