@shipdit/cli 0.3.2 → 0.4.1

package/dist/index.mjs

@@ -7,6 +7,8 @@ import { z } from "zod";
 import { createJiti } from "jiti";
 
 //#region src/lib/config.ts
+/** Hosted control plane. Used when no flag, env, project, global, or credential URL is set. */
+const DEFAULT_API_URL = "https://api.useshipd.com";
 function readJsonFile(filePath) {
 	if (!fs.existsSync(filePath)) return null;
 	return JSON.parse(fs.readFileSync(filePath, "utf8"));
@@ -60,7 +62,7 @@ function resolveRuntimeConfig(flags, options) {
 	const ci = flags.ci === true || flags.yes === true || process.env.CI === "1" || process.env.CI === "true" || process.env.SHIPD_CI === "1";
 	const defaultConfigFile = fs.existsSync(path.join(projectRoot, "shipd.config.ts")) ? path.join(projectRoot, "shipd.config.ts") : path.join(cwd, "shipd.config.ts");
 	return {
-		apiUrl: flags.apiUrl ?? process.env.SHIPD_API_URL ?? projectConfig.apiUrl ?? globalConfig.apiUrl ?? credentials.apiUrl ?? options?.defaultApiUrl ?? "http://localhost:8000",
+		apiUrl: flags.apiUrl ?? process.env.SHIPD_API_URL ?? projectConfig.apiUrl ?? globalConfig.apiUrl ?? credentials.apiUrl ?? options?.defaultApiUrl ?? "https://api.useshipd.com",
 		appUrl: process.env.SHIPD_APP_URL ?? projectConfig.appUrl ?? globalConfig.appUrl ?? "http://localhost:5173",
 		apiKey: process.env.SHIPD_API_KEY ?? credentials.apiKey,
 		org: flags.org ?? process.env.SHIPD_ORG ?? projectConfig.org ?? globalConfig.org,
@@ -77,64 +79,21 @@ function resolveRuntimeConfig(flags, options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/hono@4.13.5/node_modules/hono/dist/utils/cookie.js
-var validCookieNameRegEx = /^[\w!#$%&'*.^`|~+-]+$/;
-var _serialize = (name, value, opt = {}) => {
-	if (!validCookieNameRegEx.test(name)) throw new Error("Invalid cookie name");
-	let cookie = `${name}=${value}`;
-	if (name.startsWith("__Secure-") && !opt.secure) throw new Error("__Secure- Cookie must have Secure attributes");
-	if (name.startsWith("__Host-")) {
-		if (!opt.secure) throw new Error("__Host- Cookie must have Secure attributes");
-		if (opt.path !== "/") throw new Error("__Host- Cookie must have Path attributes with \"/\"");
-		if (opt.domain) throw new Error("__Host- Cookie must not have Domain attributes");
-	}
-	for (const key of [
-		"domain",
-		"path",
-		"sameSite",
-		"priority"
-	]) if (opt[key] && /[;\r\n]/.test(opt[key])) throw new Error(`${key} must not contain ";", "\\r", or "\\n"`);
-	if (opt && typeof opt.maxAge === "number" && opt.maxAge >= 0) {
-		if (opt.maxAge > 3456e4) throw new Error("Cookies Max-Age SHOULD NOT be greater than 400 days (34560000 seconds) in duration.");
-		cookie += `; Max-Age=${opt.maxAge | 0}`;
-	}
-	if (opt.domain && opt.prefix !== "host") cookie += `; Domain=${opt.domain}`;
-	if (opt.path) cookie += `; Path=${opt.path}`;
-	if (opt.expires) {
-		if (opt.expires.getTime() - Date.now() > 3456e7) throw new Error("Cookies Expires SHOULD NOT be greater than 400 days (34560000 seconds) in the future.");
-		cookie += `; Expires=${opt.expires.toUTCString()}`;
-	}
-	if (opt.httpOnly) cookie += "; HttpOnly";
-	if (opt.secure) cookie += "; Secure";
-	if (opt.sameSite) cookie += `; SameSite=${opt.sameSite.charAt(0).toUpperCase() + opt.sameSite.slice(1)}`;
-	if (opt.priority) cookie += `; Priority=${opt.priority.charAt(0).toUpperCase() + opt.priority.slice(1)}`;
-	if (opt.partitioned) {
-		if (!opt.secure) throw new Error("Partitioned Cookie must have Secure attributes");
-		cookie += "; Partitioned";
-	}
-	return cookie;
-};
-var serialize = (name, value, opt) => {
-	value = encodeURIComponent(value);
-	return _serialize(name, value, opt);
-};
-
-//#endregion
-//#region ../../node_modules/.pnpm/hono@4.13.5/node_modules/hono/dist/client/utils.js
-var mergePath = (base, path) => {
+//#region ../../node_modules/.pnpm/hono@4.13.13/node_modules/hono/dist/client/utils.js
+const mergePath = (base, path) => {
 	base = base.replace(/\/+$/, "");
 	base = base + "/";
 	path = path.replace(/^\/+/, "");
 	return base + path;
 };
-var replaceUrlParam = (urlString, params) => {
+const replaceUrlParam = (urlString, params) => {
 	for (const [k, v] of Object.entries(params)) {
 		const reg = new RegExp("/:" + k + "(?:{[^/]+})?\\??(?=/|$)");
 		urlString = urlString.replace(reg, () => v ? `/${v}` : "");
 	}
 	return urlString;
 };
-var buildSearchParams = (query) => {
+const buildSearchParams = (query) => {
 	const searchParams = new URLSearchParams();
 	for (const [k, v] of Object.entries(query)) {
 		if (v === void 0) continue;
@@ -146,13 +105,13 @@ var buildSearchParams = (query) => {
 	}
 	return searchParams;
 };
-var replaceUrlProtocol = (urlString, protocol) => {
+const replaceUrlProtocol = (urlString, protocol) => {
 	switch (protocol) {
 		case "ws": return urlString.replace(/^http/, "ws");
 		case "http": return urlString.replace(/^ws/, "http");
 	}
 };
-var removeIndexString = (urlString) => {
+const removeIndexString = (urlString) => {
 	if (/^https?:\/\/[^\/]+?\/index(?=\?|$)/.test(urlString)) return urlString.replace(/\/index(?=\?|$)/, "/");
 	return urlString.replace(/\/index(?=\?|$)/, "");
 };
@@ -171,8 +130,51 @@ function deepMerge(target, source) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/hono@4.13.5/node_modules/hono/dist/client/client.js
-var createProxy = (callback, path) => {
+//#region ../../node_modules/.pnpm/hono@4.13.13/node_modules/hono/dist/utils/cookie.js
+const validCookieNameRegEx = /^[\w!#$%&'*.^`|~+-]+$/;
+const _serialize = (name, value, opt = {}) => {
+	if (!validCookieNameRegEx.test(name)) throw new Error("Invalid cookie name");
+	let cookie = `${name}=${value}`;
+	if (name.startsWith("__Secure-") && !opt.secure) throw new Error("__Secure- Cookie must have Secure attributes");
+	if (name.startsWith("__Host-")) {
+		if (!opt.secure) throw new Error("__Host- Cookie must have Secure attributes");
+		if (opt.path !== "/") throw new Error("__Host- Cookie must have Path attributes with \"/\"");
+		if (opt.domain) throw new Error("__Host- Cookie must not have Domain attributes");
+	}
+	for (const key of [
+		"domain",
+		"path",
+		"sameSite",
+		"priority"
+	]) if (opt[key] && /[;\r\n]/.test(opt[key])) throw new Error(`${key} must not contain ";", "\\r", or "\\n"`);
+	if (opt && typeof opt.maxAge === "number" && opt.maxAge >= 0) {
+		if (opt.maxAge > 3456e4) throw new Error("Cookies Max-Age SHOULD NOT be greater than 400 days (34560000 seconds) in duration.");
+		cookie += `; Max-Age=${opt.maxAge | 0}`;
+	}
+	if (opt.domain && opt.prefix !== "host") cookie += `; Domain=${opt.domain}`;
+	if (opt.path) cookie += `; Path=${opt.path}`;
+	if (opt.expires) {
+		if (opt.expires.getTime() - Date.now() > 3456e7) throw new Error("Cookies Expires SHOULD NOT be greater than 400 days (34560000 seconds) in the future.");
+		cookie += `; Expires=${opt.expires.toUTCString()}`;
+	}
+	if (opt.httpOnly) cookie += "; HttpOnly";
+	if (opt.secure) cookie += "; Secure";
+	if (opt.sameSite) cookie += `; SameSite=${opt.sameSite.charAt(0).toUpperCase() + opt.sameSite.slice(1)}`;
+	if (opt.priority) cookie += `; Priority=${opt.priority.charAt(0).toUpperCase() + opt.priority.slice(1)}`;
+	if (opt.partitioned) {
+		if (!opt.secure) throw new Error("Partitioned Cookie must have Secure attributes");
+		cookie += "; Partitioned";
+	}
+	return cookie;
+};
+const serialize = (name, value, opt) => {
+	value = encodeURIComponent(value);
+	return _serialize(name, value, opt);
+};
+
+//#endregion
+//#region ../../node_modules/.pnpm/hono@4.13.13/node_modules/hono/dist/client/client.js
+const createProxy = (callback, path) => {
 	return new Proxy(() => {}, {
 		get(_obj, key) {
 			if (typeof key !== "string" || key === "then") return;
@@ -186,7 +188,7 @@ var createProxy = (callback, path) => {
 		}
 	});
 };
-var appendQueryParams = (url, searchParams) => {
+const appendQueryParams = (url, searchParams) => {
 	const queryString = searchParams.toString();
 	return queryString ? `${url}?${queryString}` : url;
 };
@@ -254,7 +256,7 @@ var ClientRequestImpl = class {
 		});
 	};
 };
-var hc = (baseUrl, options) => createProxy(function proxyCallback(opts) {
+const hc = (baseUrl, options) => createProxy(function proxyCallback(opts) {
 	const buildSearchParamsOption = options?.buildSearchParams ?? buildSearchParams;
 	const parts = [...opts.path];
 	const lastParts = parts.slice(-3).reverse();
@@ -274,17 +276,17 @@ var hc = (baseUrl, options) => createProxy(function proxyCallback(opts) {
 	const path = parts.join("/");
 	const url = mergePath(baseUrl, path);
 	if (method === "url" || method === "path") {
-		let result = url;
+		let result = removeIndexString(url);
 		if (opts.args[0]) {
-			if (opts.args[0].param) result = replaceUrlParam(url, opts.args[0].param);
+			if (opts.args[0].param) result = replaceUrlParam(result, opts.args[0].param);
 			if (opts.args[0].query) result = appendQueryParams(result, buildSearchParamsOption(opts.args[0].query));
 		}
-		result = removeIndexString(result);
 		if (method === "url") return new URL(result);
 		return result.slice(baseUrl.replace(/\/+$/, "").length).replace(/^\/?/, "/");
 	}
 	if (method === "ws") {
-		const webSocketUrl = replaceUrlProtocol(opts.args[0]?.param ? replaceUrlParam(url, opts.args[0].param) : url, "ws");
+		const normalizedUrl = removeIndexString(url);
+		const webSocketUrl = replaceUrlProtocol(opts.args[0]?.param ? replaceUrlParam(normalizedUrl, opts.args[0].param) : normalizedUrl, "ws");
 		const targetUrl = new URL(webSocketUrl);
 		const queryParams = opts.args[0]?.query;
 		if (queryParams) buildSearchParamsOption(queryParams).forEach((value, key) => {
@@ -442,6 +444,8 @@ function A$1(e) {
 			create: (e) => O$1(i.project.create.$post, e),
 			update: (e) => O$1(i.project.update.$post, e),
 			archive: (e) => O$1(i.project.archive.$post, e),
+			listArchived: (e = {}) => O$1(i.project.listArchived.$post, e),
+			restore: (e) => O$1(i.project.restore.$post, e),
 			listTeams: (e) => O$1(i.project.listTeams.$post, e),
 			setTeams: (e) => O$1(i.project.setTeams.$post, e)
 		},
@@ -450,7 +454,9 @@ function A$1(e) {
 			list: (e) => O$1(a.environment.list.$post, e),
 			create: (e) => O$1(a.environment.create.$post, e),
 			update: (e) => O$1(a.environment.update.$post, e),
-			archive: (e) => O$1(a.environment.archive.$post, e)
+			archive: (e) => O$1(a.environment.archive.$post, e),
+			listArchived: (e) => O$1(a.environment.listArchived.$post, e),
+			restore: (e) => O$1(a.environment.restore.$post, e)
 		},
 		flag: {
 			list: (e) => O$1(A.flag.list.$post, e),
@@ -458,6 +464,8 @@ function A$1(e) {
 			create: (e) => O$1(A.flag.create.$post, e),
 			update: (e) => O$1(A.flag.update.$post, e),
 			archive: (e) => O$1(A.flag.archive.$post, e),
+			listArchived: (e) => O$1(A.flag.listArchived.$post, e),
+			restore: (e) => O$1(A.flag.restore.$post, e),
 			updateEnvironment: (e) => O$1(A.flag.updateEnvironment.$post, e),
 			toggleEnvironment: (e) => O$1(A.flag.toggleEnvironment.$post, e),
 			listEnvironmentStates: (e) => O$1(A.flag.listEnvironmentStates.$post, e),
@@ -494,6 +502,8 @@ function A$1(e) {
 			create: (e) => O$1(I.segment.create.$post, e),
 			update: (e) => O$1(I.segment.update.$post, e),
 			archive: (e) => O$1(I.segment.archive.$post, e),
+			listArchived: (e) => O$1(I.segment.listArchived.$post, e),
+			restore: (e) => O$1(I.segment.restore.$post, e),
 			listEnvironmentStates: (e) => O$1(I.segment.listEnvironmentStates.$post, e),
 			updateEnvironment: (e) => O$1(I.segment.updateEnvironment.$post, e)
 		},
@@ -598,7 +608,7 @@ function A$1(e) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/utils/error-codes.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.2_@opentelemet_e02eb0bf6cc57b8ec4097db90c5ddf37/node_modules/@better-auth/core/dist/utils/error-codes.mjs
 function defineErrorCodes(codes) {
 	return Object.fromEntries(Object.entries(codes).map(([key, value]) => [key, {
 		code: key,
@@ -608,7 +618,7 @@ function defineErrorCodes(codes) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-call@1.4.0_zod@4.4.3/node_modules/better-call/dist/error.mjs
+//#region ../../node_modules/.pnpm/better-call@1.4.0_zod@4.6.5/node_modules/better-call/dist/error.mjs
 function isErrorStackTraceLimitWritable() {
 	const desc = Object.getOwnPropertyDescriptor(Error, "stackTraceLimit");
 	if (desc === void 0) return Object.isExtensible(Error);
@@ -725,7 +735,7 @@ var InternalAPIError = class extends Error {
 const APIError = makeErrorForHideStackFrame(InternalAPIError, Error);
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/error/index.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.2_@opentelemet_e02eb0bf6cc57b8ec4097db90c5ddf37/node_modules/@better-auth/core/dist/error/index.mjs
 var BetterAuthError = class extends Error {
 	constructor(message, options) {
 		super(message, options);
@@ -736,7 +746,7 @@ var BetterAuthError = class extends Error {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/access/access.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/access/access.mjs
 function unknownResourceResponse(requestedResource) {
 	return {
 		success: false,
@@ -813,12 +823,13 @@ function createAccessControl(s) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/two-factor/error-code.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/two-factor/error-code.mjs
 const TWO_FACTOR_ERROR_CODES = defineErrorCodes({
 	OTP_NOT_ENABLED: "OTP not enabled",
 	OTP_NOT_CONFIGURED: "OTP is not available",
 	OTP_HAS_EXPIRED: "OTP has expired",
 	TOTP_NOT_ENABLED: "TOTP not enabled",
+	TOTP_ALREADY_ENABLED: "TOTP is already enabled",
 	TOTP_NOT_CONFIGURED: "TOTP is not available",
 	TWO_FACTOR_NOT_ENABLED: "Two factor isn't enabled",
 	BACKUP_CODES_NOT_ENABLED: "Backup codes aren't enabled",
@@ -830,15 +841,15 @@ const TWO_FACTOR_ERROR_CODES = defineErrorCodes({
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/package.mjs
-var version = "1.7.1";
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/package.mjs
+var version = "1.7.7";
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/version.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/version.mjs
 const PACKAGE_VERSION$3 = version;
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/utils/url.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.2_@opentelemet_e02eb0bf6cc57b8ec4097db90c5ddf37/node_modules/@better-auth/core/dist/utils/url.mjs
 /**
 * Schemes that execute or embed code when navigated to or accepted as a
 * redirect target. These are never safe as an OAuth `redirect_uri` or as a
@@ -870,7 +881,7 @@ function isSafeUrlScheme(value) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/two-factor/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/two-factor/client.mjs
 const twoFactorClient = (options) => {
 	return {
 		id: "two-factor",
@@ -908,7 +919,7 @@ const twoFactorClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/admin/access/statement.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/admin/access/statement.mjs
 const defaultStatements$1 = {
 	user: [
 		"create",
@@ -959,7 +970,7 @@ const defaultRoles$1 = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/admin/error-codes.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/admin/error-codes.mjs
 const ADMIN_ERROR_CODES = defineErrorCodes({
 	FAILED_TO_CREATE_USER: "Failed to create user",
 	USER_ALREADY_EXISTS: "User already exists.",
@@ -987,7 +998,7 @@ const ADMIN_ERROR_CODES = defineErrorCodes({
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/env/env-impl.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.2_@opentelemet_e02eb0bf6cc57b8ec4097db90c5ddf37/node_modules/@better-auth/core/dist/env/env-impl.mjs
 const _envShim = Object.create(null);
 const _getEnv = (useShim) => globalThis.process?.env || globalThis.Deno?.env.toObject() || globalThis.__env__ || (useShim ? _envShim : globalThis);
 const env = new Proxy(_envShim, {
@@ -1051,7 +1062,7 @@ const ENV = Object.freeze({
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/utils/url.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/utils/url.mjs
 const SLASH_CHAR_CODE = "/".charCodeAt(0);
 function trimTrailingSlashes(value) {
 	let end = value.length;
@@ -1130,7 +1141,7 @@ function getOrigin(url) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/admin/has-permission.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/admin/has-permission.mjs
 const hasPermission = (input) => {
 	if (input.userId && input.options?.adminUserIds?.includes(input.userId)) return true;
 	if (!input.permissions) return false;
@@ -1182,27 +1193,7 @@ const defuArrayFn = createDefu((object, key, currentValue) => {
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-fetch+fetch@1.3.1/node_modules/@better-fetch/fetch/dist/index.js
-var __defProp = Object.defineProperty;
-var __defProps = Object.defineProperties;
-var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
-var __getOwnPropSymbols = Object.getOwnPropertySymbols;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __propIsEnum = Object.prototype.propertyIsEnumerable;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, {
-	enumerable: true,
-	configurable: true,
-	writable: true,
-	value
-}) : obj[key] = value;
-var __spreadValues = (a, b) => {
-	for (var prop in b || (b = {})) if (__hasOwnProp.call(b, prop)) __defNormalProp(a, prop, b[prop]);
-	if (__getOwnPropSymbols) {
-		for (var prop of __getOwnPropSymbols(b)) if (__propIsEnum.call(b, prop)) __defNormalProp(a, prop, b[prop]);
-	}
-	return a;
-};
-var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+//#region ../../node_modules/.pnpm/@better-fetch+fetch@1.3.2/node_modules/@better-fetch/fetch/dist/index.js
 var BetterFetchError = class extends Error {
 	constructor(status, statusText, error) {
 		super(statusText || status.toString(), { cause: error });
@@ -1212,32 +1203,33 @@ var BetterFetchError = class extends Error {
 		Error.captureStackTrace(this, this.constructor);
 	}
 };
-var initializePlugins = async (url, options) => {
-	var _a, _b, _c, _d, _e, _f;
+const initializePlugins = async (url, options) => {
 	let opts = options || {};
 	const hooks = {
-		onRequest: [options == null ? void 0 : options.onRequest],
-		onResponse: [options == null ? void 0 : options.onResponse],
-		onSuccess: [options == null ? void 0 : options.onSuccess],
-		onError: [options == null ? void 0 : options.onError],
-		onRetry: [options == null ? void 0 : options.onRetry]
+		onRequest: [options === null || options === void 0 ? void 0 : options.onRequest],
+		onResponse: [options === null || options === void 0 ? void 0 : options.onResponse],
+		onSuccess: [options === null || options === void 0 ? void 0 : options.onSuccess],
+		onError: [options === null || options === void 0 ? void 0 : options.onError],
+		onRetry: [options === null || options === void 0 ? void 0 : options.onRetry]
 	};
-	if (!options || !(options == null ? void 0 : options.plugins)) return {
+	if (!options || !(options === null || options === void 0 ? void 0 : options.plugins)) return {
 		url,
 		options: opts,
 		hooks
 	};
-	for (const plugin of (options == null ? void 0 : options.plugins) || []) {
+	for (const plugin of (options === null || options === void 0 ? void 0 : options.plugins) || []) {
+		var _plugin$hooks, _plugin$hooks2, _plugin$hooks3, _plugin$hooks4, _plugin$hooks5;
 		if (plugin.init) {
-			const pluginRes = await ((_a = plugin.init) == null ? void 0 : _a.call(plugin, url.toString(), options));
+			var _plugin$init;
+			const pluginRes = await ((_plugin$init = plugin.init) === null || _plugin$init === void 0 ? void 0 : _plugin$init.call(plugin, url.toString(), opts));
 			opts = pluginRes.options || opts;
 			url = pluginRes.url;
 		}
-		hooks.onRequest.push((_b = plugin.hooks) == null ? void 0 : _b.onRequest);
-		hooks.onResponse.push((_c = plugin.hooks) == null ? void 0 : _c.onResponse);
-		hooks.onSuccess.push((_d = plugin.hooks) == null ? void 0 : _d.onSuccess);
-		hooks.onError.push((_e = plugin.hooks) == null ? void 0 : _e.onError);
-		hooks.onRetry.push((_f = plugin.hooks) == null ? void 0 : _f.onRetry);
+		hooks.onRequest.push((_plugin$hooks = plugin.hooks) === null || _plugin$hooks === void 0 ? void 0 : _plugin$hooks.onRequest);
+		hooks.onResponse.push((_plugin$hooks2 = plugin.hooks) === null || _plugin$hooks2 === void 0 ? void 0 : _plugin$hooks2.onResponse);
+		hooks.onSuccess.push((_plugin$hooks3 = plugin.hooks) === null || _plugin$hooks3 === void 0 ? void 0 : _plugin$hooks3.onSuccess);
+		hooks.onError.push((_plugin$hooks4 = plugin.hooks) === null || _plugin$hooks4 === void 0 ? void 0 : _plugin$hooks4.onError);
+		hooks.onRetry.push((_plugin$hooks5 = plugin.hooks) === null || _plugin$hooks5 === void 0 ? void 0 : _plugin$hooks5.onRetry);
 	}
 	return {
 		url,
@@ -1281,10 +1273,81 @@ function createRetryStrategy(options) {
 		default: throw new Error("Invalid retry strategy");
 	}
 }
-var getAuthHeader = async (options) => {
+const methods = [
+	"get",
+	"post",
+	"put",
+	"patch",
+	"delete"
+];
+function parseMethodModifier(path) {
+	if (!path.startsWith("@")) return {
+		method: void 0,
+		path
+	};
+	const separator = path.indexOf("/");
+	const method = path.slice(1, separator === -1 ? void 0 : separator);
+	if (!methods.includes(method)) return {
+		method: void 0,
+		path
+	};
+	return {
+		method,
+		path: separator === -1 ? path : path.slice(separator + 1)
+	};
+}
+const isReservedPathSegment = (value) => value === "." || value === "..";
+const encodeLiteralPathSegment = (segment) => segment.split(":").map((part) => encodeURIComponent(part)).join(":");
+function resolvePathSegment(segment, pathParams) {
+	const pathParam = pathParams.get(segment);
+	if (pathParam === void 0) return encodeLiteralPathSegment(segment);
+	if (isReservedPathSegment(pathParam)) throw new TypeError("Path parameters cannot be reserved path segments");
+	return encodeURIComponent(pathParam);
+}
+/**
+* Normalize URL
+*/
+function getURL$1(url, option) {
+	const { baseURL, params, query } = option || {
+		query: {},
+		params: {},
+		baseURL: ""
+	};
+	let basePath = url.startsWith("http") ? url.split("/").slice(0, 3).join("/") : baseURL || "";
+	const { path: requestPath } = parseMethodModifier(url);
+	if (requestPath !== url) url = `/${requestPath}`;
+	if (!basePath.endsWith("/")) basePath += "/";
+	let [path, urlQuery] = url.replace(basePath, "").split("?");
+	const queryParams = new URLSearchParams(urlQuery);
+	for (const [key, value] of Object.entries(query || {})) {
+		if (value == null) continue;
+		let serializedValue;
+		if (typeof value === "string") serializedValue = value;
+		else if (Array.isArray(value)) {
+			for (const val of value) queryParams.append(key, val);
+			continue;
+		} else serializedValue = JSON.stringify(value);
+		queryParams.set(key, serializedValue);
+	}
+	const pathParams = /* @__PURE__ */ new Map();
+	if (params) if (Array.isArray(params)) {
+		const paramPaths = path.split("/").filter((p) => p.startsWith(":"));
+		for (const [index, key] of paramPaths.entries()) {
+			const value = params[index];
+			pathParams.set(key, String(value));
+		}
+	} else for (const [key, value] of Object.entries(params)) pathParams.set(`:${key}`, String(value));
+	path = path.split("/").map((segment) => resolvePathSegment(segment, pathParams)).join("/");
+	path = path.replace(/^\/+/, "");
+	let queryParamString = queryParams.toString();
+	queryParamString = queryParamString.length > 0 ? `?${queryParamString}`.replace(/\+/g, "%20") : "";
+	if (!basePath.startsWith("http")) return `${basePath}${path}${queryParamString}`;
+	return new URL(`${path}${queryParamString}`, basePath);
+}
+const getAuthHeader = async (options) => {
 	const headers = {};
 	const getValue = async (value) => typeof value === "function" ? await value() : value;
-	if (options == null ? void 0 : options.auth) {
+	if (options === null || options === void 0 ? void 0 : options.auth) {
 		if (options.auth.type === "Bearer") {
 			const token = await getValue(options.auth.token);
 			if (!token) return headers;
@@ -1296,12 +1359,12 @@ var getAuthHeader = async (options) => {
 		} else if (options.auth.type === "Custom") {
 			const [prefix, value] = await Promise.all([getValue(options.auth.prefix), getValue(options.auth.value)]);
 			if (!value) return headers;
-			headers["authorization"] = `${prefix != null ? prefix : ""} ${value}`;
+			headers["authorization"] = `${prefix !== null && prefix !== void 0 ? prefix : ""} ${value}`;
 		}
 	}
 	return headers;
 };
-var JSON_RE = /^application\/(?:[\w!#$%&*.^`~-]*\+)?json(;.+)?$/i;
+const JSON_RE = /^application\/(?:[\w!#$%&*.^`~-]*\+)?json(;.+)?$/i;
 function detectResponseType(request) {
 	const _contentType = request.headers.get("content-type");
 	const textTypes = /* @__PURE__ */ new Set([
@@ -1344,7 +1407,7 @@ function isFunction(value) {
 	return typeof value === "function";
 }
 function getFetch(options) {
-	if (options == null ? void 0 : options.customFetchImpl) return options.customFetchImpl;
+	if (options === null || options === void 0 ? void 0 : options.customFetchImpl) return options.customFetchImpl;
 	if (typeof globalThis !== "undefined" && isFunction(globalThis.fetch)) return globalThis.fetch;
 	if (typeof window !== "undefined" && isFunction(window.fetch)) return window.fetch;
 	throw new Error("No fetch implementation found");
@@ -1364,9 +1427,9 @@ function mergeHeaders(...sources) {
 	return merged;
 }
 async function getHeaders(opts) {
-	const headers = new Headers(mergeHeaders(opts == null ? void 0 : opts.headers, await getAuthHeader(opts)));
+	const headers = new Headers(mergeHeaders(opts === null || opts === void 0 ? void 0 : opts.headers, await getAuthHeader(opts)));
 	if (!headers.has("content-type")) {
-		const contentType = detectContentType(opts == null ? void 0 : opts.body);
+		const contentType = detectContentType(opts === null || opts === void 0 ? void 0 : opts.body);
 		if (contentType) headers.set("content-type", contentType);
 	}
 	return headers;
@@ -1388,18 +1451,14 @@ function getBody(options, headers) {
 	return JSON.stringify(body);
 }
 function getMethod$1(url, options) {
-	var _a;
-	if (options == null ? void 0 : options.method) return options.method.toUpperCase();
-	if (url.startsWith("@")) {
-		const pMethod = (_a = url.split("@")[1]) == null ? void 0 : _a.split("/")[0];
-		if (!methods.includes(pMethod)) return (options == null ? void 0 : options.body) ? "POST" : "GET";
-		return pMethod.toUpperCase();
-	}
-	return (options == null ? void 0 : options.body) ? "POST" : "GET";
+	if (options === null || options === void 0 ? void 0 : options.method) return options.method.toUpperCase();
+	const { method } = parseMethodModifier(url);
+	if (method) return method.toUpperCase();
+	return (options === null || options === void 0 ? void 0 : options.body) ? "POST" : "GET";
 }
 function getTimeout(options, controller) {
 	let abortTimeout;
-	if (!(options == null ? void 0 : options.signal) && (options == null ? void 0 : options.timeout)) abortTimeout = setTimeout(() => controller == null ? void 0 : controller.abort(), options == null ? void 0 : options.timeout);
+	if (!(options === null || options === void 0 ? void 0 : options.signal) && (options === null || options === void 0 ? void 0 : options.timeout)) abortTimeout = setTimeout(() => controller === null || controller === void 0 ? void 0 : controller.abort(), options === null || options === void 0 ? void 0 : options.timeout);
 	return {
 		abortTimeout,
 		clearTimeout: () => {
@@ -1407,11 +1466,11 @@ function getTimeout(options, controller) {
 		}
 	};
 }
-var ValidationError = class _ValidationError extends Error {
+var ValidationError = class ValidationError extends Error {
 	constructor(issues, message) {
 		super(message || JSON.stringify(issues, null, 2));
 		this.issues = issues;
-		Object.setPrototypeOf(this, _ValidationError.prototype);
+		Object.setPrototypeOf(this, ValidationError.prototype);
 	}
 };
 async function parseStandardSchema(schema, input) {
@@ -1419,186 +1478,100 @@ async function parseStandardSchema(schema, input) {
 	if (result.issues) throw new ValidationError(result.issues);
 	return result.value;
 }
-var methods = [
-	"get",
-	"post",
-	"put",
-	"patch",
-	"delete"
-];
-var applySchemaPlugin = (config) => ({
-	id: "apply-schema",
-	name: "Apply Schema",
-	version: "1.0.0",
-	async init(url, options) {
-		var _a, _b, _c, _d;
-		const schema = ((_b = (_a = config.plugins) == null ? void 0 : _a.find((plugin) => {
-			var _a2;
-			return ((_a2 = plugin.schema) == null ? void 0 : _a2.config) ? url.startsWith(plugin.schema.config.baseURL || "") || url.startsWith(plugin.schema.config.prefix || "") : false;
-		})) == null ? void 0 : _b.schema) || config.schema;
-		if (schema) {
-			let urlKey = url;
-			if ((_c = schema.config) == null ? void 0 : _c.prefix) {
-				if (urlKey.startsWith(schema.config.prefix)) {
-					urlKey = urlKey.replace(schema.config.prefix, "");
-					if (schema.config.baseURL) url = url.replace(schema.config.prefix, schema.config.baseURL);
-				}
-			}
-			if ((_d = schema.config) == null ? void 0 : _d.baseURL) {
-				if (urlKey.startsWith(schema.config.baseURL)) urlKey = urlKey.replace(schema.config.baseURL, "");
-			}
-			if (urlKey.startsWith("/") && urlKey.charAt(1) === "@") urlKey = urlKey.substring(1);
-			const keySchema = schema.schema[urlKey];
-			if (keySchema) {
-				let validatedHeaders = options == null ? void 0 : options.headers;
-				if (keySchema.headers && !(options == null ? void 0 : options.disableValidation)) {
-					const normalizedHeaders = {};
-					if (options == null ? void 0 : options.headers) {
-						if (options.headers instanceof Headers) options.headers.forEach((value, key) => {
-							normalizedHeaders[key.toLowerCase()] = value;
-						});
-						else if (typeof options.headers === "object") {
-							for (const [key, value] of Object.entries(options.headers)) if (value !== null && value !== void 0) normalizedHeaders[key.toLowerCase()] = value;
-						}
-					}
-					const validated = await parseStandardSchema(keySchema.headers, normalizedHeaders);
-					const finalHeaders = {};
-					for (const [key, value] of Object.entries(validated)) finalHeaders[key.toLowerCase()] = value;
-					validatedHeaders = finalHeaders;
-				}
-				let opts = __spreadProps(__spreadValues({}, options), {
-					method: keySchema.method,
-					output: keySchema.output,
-					headers: validatedHeaders
-				});
-				if (!(options == null ? void 0 : options.disableValidation)) opts = __spreadProps(__spreadValues({}, opts), {
-					body: keySchema.input ? await parseStandardSchema(keySchema.input, options == null ? void 0 : options.body) : options == null ? void 0 : options.body,
-					params: keySchema.params ? await parseStandardSchema(keySchema.params, options == null ? void 0 : options.params) : options == null ? void 0 : options.params,
-					query: keySchema.query ? await parseStandardSchema(keySchema.query, options == null ? void 0 : options.query) : options == null ? void 0 : options.query
-				});
-				return {
-					url,
-					options: opts
-				};
-			}
-		}
-		return {
-			url,
-			options
-		};
+function _typeof(o) {
+	"@babel/helpers - typeof";
+	return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(o) {
+		return typeof o;
+	} : function(o) {
+		return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o;
+	}, _typeof(o);
+}
+function toPrimitive(t, r) {
+	if ("object" != _typeof(t) || !t) return t;
+	var e = t[Symbol.toPrimitive];
+	if (void 0 !== e) {
+		var i = e.call(t, r || "default");
+		if ("object" != _typeof(i)) return i;
+		throw new TypeError("@@toPrimitive must return a primitive value.");
 	}
-});
-var createFetch = (config) => {
-	async function $fetch(url, options) {
-		const opts = __spreadProps(__spreadValues(__spreadValues({}, config), options), {
-			headers: mergeHeaders(config == null ? void 0 : config.headers, options == null ? void 0 : options.headers),
-			plugins: [
-				...(config == null ? void 0 : config.plugins) || [],
-				applySchemaPlugin(config || {}),
-				...(options == null ? void 0 : options.plugins) || []
-			]
-		});
-		if (config == null ? void 0 : config.catchAllError) try {
-			return await betterFetch(url, opts);
-		} catch (error) {
-			return {
-				data: null,
-				error: {
-					status: 500,
-					statusText: "Fetch Error",
-					message: "Fetch related error. Captured by catchAllError option. See error property for more details.",
-					error
-				}
-			};
-		}
-		return await betterFetch(url, opts);
-	}
-	return $fetch;
-};
-var isReservedPathSegment = (value) => value === "." || value === "..";
-function encodePathSegment(segment, pathParams) {
-	let pathSegment = segment;
-	for (const [key, value] of pathParams) pathSegment = pathSegment.replace(key, value);
-	if (isReservedPathSegment(pathSegment)) throw new TypeError("Path parameters cannot be reserved path segments");
-	return encodeURIComponent(pathSegment);
-}
-function getURL2(url, option) {
-	const { baseURL, params, query } = option || {
-		query: {},
-		params: {},
-		baseURL: ""
-	};
-	let basePath = url.startsWith("http") ? url.split("/").slice(0, 3).join("/") : baseURL || "";
-	if (url.startsWith("@")) {
-		const m = url.toString().split("@")[1].split("/")[0];
-		if (methods.includes(m)) url = url.replace(`@${m}/`, "/");
+	return ("string" === r ? String : Number)(t);
+}
+function toPropertyKey(t) {
+	var i = toPrimitive(t, "string");
+	return "symbol" == _typeof(i) ? i : i + "";
+}
+function _defineProperty(e, r, t) {
+	return (r = toPropertyKey(r)) in e ? Object.defineProperty(e, r, {
+		value: t,
+		enumerable: !0,
+		configurable: !0,
+		writable: !0
+	}) : e[r] = t, e;
+}
+function ownKeys(e, r) {
+	var t = Object.keys(e);
+	if (Object.getOwnPropertySymbols) {
+		var o = Object.getOwnPropertySymbols(e);
+		r && (o = o.filter(function(r) {
+			return Object.getOwnPropertyDescriptor(e, r).enumerable;
+		})), t.push.apply(t, o);
 	}
-	if (!basePath.endsWith("/")) basePath += "/";
-	let [path, urlQuery] = url.replace(basePath, "").split("?");
-	const queryParams = new URLSearchParams(urlQuery);
-	for (const [key, value] of Object.entries(query || {})) {
-		if (value == null) continue;
-		let serializedValue;
-		if (typeof value === "string") serializedValue = value;
-		else if (Array.isArray(value)) {
-			for (const val of value) queryParams.append(key, val);
-			continue;
-		} else serializedValue = JSON.stringify(value);
-		queryParams.set(key, serializedValue);
-	}
-	const pathParams = /* @__PURE__ */ new Map();
-	if (params) {
-		if (Array.isArray(params)) {
-			const paramPaths = path.split("/").filter((p) => p.startsWith(":"));
-			for (const [index, key] of paramPaths.entries()) {
-				const value = params[index];
-				pathParams.set(key, String(value));
-			}
-		} else for (const [key, value] of Object.entries(params)) pathParams.set(`:${key}`, String(value));
+	return t;
+}
+function _objectSpread2(e) {
+	for (var r = 1; r < arguments.length; r++) {
+		var t = null != arguments[r] ? arguments[r] : {};
+		r % 2 ? ownKeys(Object(t), !0).forEach(function(r) {
+			_defineProperty(e, r, t[r]);
+		}) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function(r) {
+			Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r));
+		});
 	}
-	path = path.split("/").map((segment) => encodePathSegment(segment, pathParams)).join("/");
-	path = path.replace(/^\/+/, "");
-	let queryParamString = queryParams.toString();
-	queryParamString = queryParamString.length > 0 ? `?${queryParamString}`.replace(/\+/g, "%20") : "";
-	if (!basePath.startsWith("http")) return `${basePath}${path}${queryParamString}`;
-	return new URL(`${path}${queryParamString}`, basePath);
+	return e;
 }
-var betterFetch = async (url, options) => {
-	var _a, _b, _c, _d, _e, _f, _g, _h;
+const betterFetch = async (url, options) => {
+	var _opts$signal, _options$body, _options$jsonParser;
 	const { hooks, url: __url, options: opts } = await initializePlugins(url, options);
 	const fetch = getFetch(opts);
 	const controller = new AbortController();
-	const signal = (_a = opts.signal) != null ? _a : controller.signal;
-	const _url = getURL2(__url, opts);
+	const signal = (_opts$signal = opts.signal) !== null && _opts$signal !== void 0 ? _opts$signal : controller.signal;
+	const _url = getURL$1(__url, opts);
 	const headers = await getHeaders(opts);
 	const body = getBody(opts, headers);
 	const method = getMethod$1(__url, opts);
-	const context = __spreadProps(__spreadValues({}, opts), {
+	const context = _objectSpread2(_objectSpread2({}, opts), {}, {
 		url: _url,
 		headers,
 		body,
 		method,
 		signal
 	});
+	/**
+	* Run all on request hooks
+	*/
 	for (const onRequest of hooks.onRequest) if (onRequest) {
 		const res = await onRequest(context);
 		if (typeof res === "object" && res !== null) Object.assign(context, res);
 	}
-	if ("pipeTo" in context && typeof context.pipeTo === "function" || typeof ((_b = options == null ? void 0 : options.body) == null ? void 0 : _b.pipe) === "function") {
+	if ("pipeTo" in context && typeof context.pipeTo === "function" || typeof (options === null || options === void 0 || (_options$body = options.body) === null || _options$body === void 0 ? void 0 : _options$body.pipe) === "function") {
 		if (!("duplex" in context)) context.duplex = "half";
 	}
-	const { clearTimeout: clearTimeout2 } = getTimeout(opts, controller);
+	const { clearTimeout } = getTimeout(opts, controller);
 	let response = await fetch(context.url, context);
-	clearTimeout2();
+	clearTimeout();
 	const responseContext = {
 		response,
 		request: context
 	};
 	for (const onResponse of hooks.onResponse) if (onResponse) {
-		const r = await onResponse(__spreadProps(__spreadValues({}, responseContext), { response: ((_c = options == null ? void 0 : options.hookOptions) == null ? void 0 : _c.cloneResponse) ? response.clone() : response }));
+		var _options$hookOptions;
+		const r = await onResponse(_objectSpread2(_objectSpread2({}, responseContext), {}, { response: (options === null || options === void 0 || (_options$hookOptions = options.hookOptions) === null || _options$hookOptions === void 0 ? void 0 : _options$hookOptions.cloneResponse) ? response.clone() : response }));
 		if (r instanceof Response) response = r;
 		else if (typeof r === "object" && r !== null) response = r.response;
 	}
+	/**
+	* OK Branch
+	*/
 	if (response.ok) {
 		if (!(context.method !== "HEAD")) return {
 			data: "",
@@ -1611,55 +1584,166 @@ var betterFetch = async (url, options) => {
 			request: context
 		};
 		if (responseType === "json" || responseType === "text") {
+			var _context$jsonParser;
 			const text = await response.text();
-			successContext.data = await ((_d = context.jsonParser) != null ? _d : jsonParse)(text);
+			successContext.data = await ((_context$jsonParser = context.jsonParser) !== null && _context$jsonParser !== void 0 ? _context$jsonParser : jsonParse)(text);
 		} else successContext.data = await response[responseType]();
-		if (context == null ? void 0 : context.output) {
+		/**
+		* Parse the data if the output schema is defined
+		*/
+		if (context === null || context === void 0 ? void 0 : context.output) {
 			if (context.output && !context.disableValidation) successContext.data = await parseStandardSchema(context.output, successContext.data);
 		}
-		for (const onSuccess of hooks.onSuccess) if (onSuccess) await onSuccess(__spreadProps(__spreadValues({}, successContext), { response: ((_e = options == null ? void 0 : options.hookOptions) == null ? void 0 : _e.cloneResponse) ? response.clone() : response }));
-		if (options == null ? void 0 : options.throw) return successContext.data;
+		for (const onSuccess of hooks.onSuccess) if (onSuccess) {
+			var _options$hookOptions2;
+			await onSuccess(_objectSpread2(_objectSpread2({}, successContext), {}, { response: (options === null || options === void 0 || (_options$hookOptions2 = options.hookOptions) === null || _options$hookOptions2 === void 0 ? void 0 : _options$hookOptions2.cloneResponse) ? response.clone() : response }));
+		}
+		if (options === null || options === void 0 ? void 0 : options.throw) return successContext.data;
 		return {
 			data: successContext.data,
 			error: null
 		};
 	}
-	const parser = (_f = options == null ? void 0 : options.jsonParser) != null ? _f : jsonParse;
+	const parser = (_options$jsonParser = options === null || options === void 0 ? void 0 : options.jsonParser) !== null && _options$jsonParser !== void 0 ? _options$jsonParser : jsonParse;
 	const responseText = await response.text();
 	const isJSONResponse = isJSONParsable(responseText);
 	const errorObject = isJSONResponse ? await parser(responseText) : null;
+	/**
+	* Error Branch
+	*/
 	const errorContext = {
 		response,
 		responseText,
 		request: context,
-		error: __spreadProps(__spreadValues({}, errorObject), {
+		error: _objectSpread2(_objectSpread2({}, errorObject), {}, {
 			status: response.status,
 			statusText: response.statusText
 		})
 	};
-	for (const onError of hooks.onError) if (onError) await onError(__spreadProps(__spreadValues({}, errorContext), { response: ((_g = options == null ? void 0 : options.hookOptions) == null ? void 0 : _g.cloneResponse) ? response.clone() : response }));
-	if (options == null ? void 0 : options.retry) {
+	for (const onError of hooks.onError) if (onError) {
+		var _options$hookOptions3;
+		await onError(_objectSpread2(_objectSpread2({}, errorContext), {}, { response: (options === null || options === void 0 || (_options$hookOptions3 = options.hookOptions) === null || _options$hookOptions3 === void 0 ? void 0 : _options$hookOptions3.cloneResponse) ? response.clone() : response }));
+	}
+	if (options === null || options === void 0 ? void 0 : options.retry) {
+		var _options$retryAttempt;
 		const retryStrategy = createRetryStrategy(options.retry);
-		const _retryAttempt = (_h = options.retryAttempt) != null ? _h : 0;
+		const _retryAttempt = (_options$retryAttempt = options.retryAttempt) !== null && _options$retryAttempt !== void 0 ? _options$retryAttempt : 0;
 		if (await retryStrategy.shouldAttemptRetry(_retryAttempt, response)) {
 			for (const onRetry of hooks.onRetry) if (onRetry) await onRetry(responseContext);
 			const delay = retryStrategy.getDelay(_retryAttempt);
 			await new Promise((resolve) => setTimeout(resolve, delay));
-			return await betterFetch(url, __spreadProps(__spreadValues({}, options), { retryAttempt: _retryAttempt + 1 }));
+			return await betterFetch(url, _objectSpread2(_objectSpread2({}, options), {}, { retryAttempt: _retryAttempt + 1 }));
 		}
 	}
-	if (options == null ? void 0 : options.throw) throw new BetterFetchError(response.status, response.statusText, isJSONResponse ? errorObject : responseText);
+	if (options === null || options === void 0 ? void 0 : options.throw) throw new BetterFetchError(response.status, response.statusText, isJSONResponse ? errorObject : responseText);
 	return {
 		data: null,
-		error: __spreadProps(__spreadValues({}, errorObject), {
+		error: _objectSpread2(_objectSpread2({}, errorObject), {}, {
 			status: response.status,
 			statusText: response.statusText
 		})
 	};
 };
+const applySchemaPlugin = (config) => ({
+	id: "apply-schema",
+	name: "Apply Schema",
+	version: "1.0.0",
+	async init(url, options) {
+		var _config$plugins;
+		let opts = _objectSpread2(_objectSpread2({}, options), config.query !== void 0 && { query: _objectSpread2(_objectSpread2({}, config.query), options === null || options === void 0 ? void 0 : options.query) });
+		const schema = ((_config$plugins = config.plugins) === null || _config$plugins === void 0 || (_config$plugins = _config$plugins.find((plugin) => {
+			var _plugin$schema;
+			return ((_plugin$schema = plugin.schema) === null || _plugin$schema === void 0 ? void 0 : _plugin$schema.config) ? url.startsWith(plugin.schema.config.baseURL || "") || url.startsWith(plugin.schema.config.prefix || "") : false;
+		})) === null || _config$plugins === void 0 ? void 0 : _config$plugins.schema) || config.schema;
+		if (schema) {
+			var _schema$config, _schema$config2;
+			let urlKey = url;
+			if ((_schema$config = schema.config) === null || _schema$config === void 0 ? void 0 : _schema$config.prefix) {
+				if (urlKey.startsWith(schema.config.prefix)) {
+					urlKey = urlKey.replace(schema.config.prefix, "");
+					if (schema.config.baseURL) url = url.replace(schema.config.prefix, schema.config.baseURL);
+				}
+			}
+			if ((_schema$config2 = schema.config) === null || _schema$config2 === void 0 ? void 0 : _schema$config2.baseURL) {
+				if (urlKey.startsWith(schema.config.baseURL)) urlKey = urlKey.replace(schema.config.baseURL, "");
+			}
+			if (urlKey.startsWith("/") && urlKey.charAt(1) === "@") urlKey = urlKey.substring(1);
+			const keySchema = schema.schema[urlKey];
+			if (keySchema) {
+				var _keySchema$method;
+				const { method: schemaMethod, path } = parseMethodModifier(urlKey);
+				if (schemaMethod) url = url.slice(0, url.length - urlKey.length) + path;
+				let validatedHeaders = options === null || options === void 0 ? void 0 : options.headers;
+				if (keySchema.headers && !(options === null || options === void 0 ? void 0 : options.disableValidation)) {
+					const normalizedHeaders = {};
+					if (options === null || options === void 0 ? void 0 : options.headers) {
+						if (options.headers instanceof Headers) options.headers.forEach((value, key) => {
+							normalizedHeaders[key.toLowerCase()] = value;
+						});
+						else if (typeof options.headers === "object") {
+							for (const [key, value] of Object.entries(options.headers)) if (value !== null && value !== void 0) normalizedHeaders[key.toLowerCase()] = value;
+						}
+					}
+					const validated = await parseStandardSchema(keySchema.headers, normalizedHeaders);
+					const finalHeaders = {};
+					for (const [key, value] of Object.entries(validated)) finalHeaders[key.toLowerCase()] = value;
+					validatedHeaders = finalHeaders;
+				}
+				const method = (_keySchema$method = keySchema.method) !== null && _keySchema$method !== void 0 ? _keySchema$method : schemaMethod;
+				opts = _objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2({}, opts), method !== void 0 && { method }), keySchema.output !== void 0 && { output: keySchema.output }), validatedHeaders !== void 0 && { headers: validatedHeaders });
+				if (!(options === null || options === void 0 ? void 0 : options.disableValidation)) {
+					if (keySchema.query) {
+						opts.query = await parseStandardSchema(keySchema.query, options === null || options === void 0 ? void 0 : options.query);
+						if (opts.query !== null && typeof opts.query === "object") {
+							const defaults = _objectSpread2({}, config.query);
+							for (const key of Object.keys(defaults)) if ((options === null || options === void 0 ? void 0 : options.query) && Object.prototype.hasOwnProperty.call(options.query, key)) defaults[key] = options.query[key];
+							opts.query = _objectSpread2(_objectSpread2({}, defaults), opts.query);
+						}
+					}
+					opts = _objectSpread2(_objectSpread2({}, opts), {}, {
+						body: keySchema.input ? await parseStandardSchema(keySchema.input, options === null || options === void 0 ? void 0 : options.body) : options === null || options === void 0 ? void 0 : options.body,
+						params: keySchema.params ? await parseStandardSchema(keySchema.params, options === null || options === void 0 ? void 0 : options.params) : options === null || options === void 0 ? void 0 : options.params
+					});
+				}
+				return {
+					url,
+					options: opts
+				};
+			}
+		}
+		return _objectSpread2({ url }, (options !== void 0 || config.query !== void 0) && { options: opts });
+	}
+});
+const createFetch = (config) => {
+	async function $fetch(url, options) {
+		const opts = _objectSpread2(_objectSpread2(_objectSpread2({}, config), options), {}, {
+			headers: mergeHeaders(config === null || config === void 0 ? void 0 : config.headers, options === null || options === void 0 ? void 0 : options.headers),
+			plugins: [
+				...(config === null || config === void 0 ? void 0 : config.plugins) || [],
+				applySchemaPlugin(config || {}),
+				...(options === null || options === void 0 ? void 0 : options.plugins) || []
+			]
+		});
+		if (config === null || config === void 0 ? void 0 : config.catchAllError) try {
+			return await betterFetch(url, opts);
+		} catch (error) {
+			return {
+				data: null,
+				error: {
+					status: 500,
+					statusText: "Fetch Error",
+					message: "Fetch related error. Captured by catchAllError option. See error property for more details.",
+					error
+				}
+			};
+		}
+		return await betterFetch(url, opts);
+	}
+	return $fetch;
+};
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/parser.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/parser.mjs
 const PROTO_POLLUTION_PATTERNS = {
 	proto: /"(?:_|\\u0{2}5[Ff]){2}(?:p|\\u0{2}70)(?:r|\\u0{2}72)(?:o|\\u0{2}6[Ff])(?:t|\\u0{2}74)(?:o|\\u0{2}6[Ff])(?:_|\\u0{2}5[Ff]){2}"\s*:/,
 	constructor: /"(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)"\s*:/,
@@ -1729,7 +1813,7 @@ function parseJSON(value, options = { strict: true }) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
 const defaultStatements = {
 	organization: ["update", "delete"],
 	member: [
@@ -1805,7 +1889,7 @@ const defaultRoles = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/organization/permission.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/organization/permission.mjs
 const hasPermissionFn = (input, acRoles) => {
 	if (!input.permissions) return false;
 	const roles = input.role.split(",");
@@ -1818,7 +1902,7 @@ const hasPermissionFn = (input, acRoles) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
 const ORGANIZATION_ERROR_CODES = defineErrorCodes({
 	YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_ORGANIZATION: "You are not allowed to create a new organization",
 	YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_ORGANIZATIONS: "You have reached the maximum number of organizations",
@@ -1910,6 +1994,7 @@ const t$1 = createAccessControl({
 		`read`,
 		`update`,
 		`archive`,
+		`restore`,
 		`assign_teams`
 	],
 	environment: [
@@ -1917,13 +2002,15 @@ const t$1 = createAccessControl({
 		`read`,
 		`update`,
 		`archive`,
+		`restore`,
 		`set_production`
 	],
 	flag: [
 		`read`,
 		`create`,
 		`update`,
-		`archive`
+		`archive`,
+		`restore`
 	],
 	flag_state: [`update`],
 	flag_production: [`toggle`],
@@ -2023,6 +2110,7 @@ const n$1 = {
 			`read`,
 			`update`,
 			`archive`,
+			`restore`,
 			`assign_teams`
 		],
 		environment: [
@@ -2030,13 +2118,15 @@ const n$1 = {
 			`read`,
 			`update`,
 			`archive`,
+			`restore`,
 			`set_production`
 		],
 		flag: [
 			`read`,
 			`create`,
 			`update`,
-			`archive`
+			`archive`,
+			`restore`
 		],
 		flag_state: [`update`],
 		flag_production: [`toggle`],
@@ -2095,6 +2185,7 @@ const n$1 = {
 			`read`,
 			`update`,
 			`archive`,
+			`restore`,
 			`assign_teams`
 		],
 		environment: [
@@ -2102,13 +2193,15 @@ const n$1 = {
 			`read`,
 			`update`,
 			`archive`,
+			`restore`,
 			`set_production`
 		],
 		flag: [
 			`read`,
 			`create`,
 			`update`,
-			`archive`
+			`archive`,
+			`restore`
 		],
 		flag_state: [`update`],
 		flag_production: [`toggle`],
@@ -2147,7 +2240,7 @@ const n$1 = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/broadcast-channel.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/broadcast-channel.mjs
 const kBroadcastChannel = Symbol.for("better-auth:broadcast-channel");
 const now$1 = () => Math.floor(Date.now() / 1e3);
 var WindowBroadcastChannel = class {
@@ -2371,7 +2464,7 @@ let onMount = ($store, initialize) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/equality.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/equality.mjs
 function isPlainObject(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const prototype = Object.getPrototypeOf(value);
@@ -2412,7 +2505,7 @@ function withEquality(store, isEqual) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/focus-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/focus-manager.mjs
 const kFocusManager = Symbol.for("better-auth:focus-manager");
 var WindowFocusManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -2442,7 +2535,7 @@ function getGlobalFocusManager() {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/online-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/online-manager.mjs
 const kOnlineManager = Symbol.for("better-auth:online-manager");
 var WindowOnlineManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -2475,13 +2568,22 @@ function getGlobalOnlineManager() {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/query.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/query-atom.mjs
+const kAuthQuery = Symbol.for("better-auth:auth-query");
+function createAuthQueryAtom(initialValue) {
+	const queryAtom = /* @__PURE__ */ atom(initialValue);
+	Object.defineProperty(queryAtom, kAuthQuery, { value: true });
+	return queryAtom;
+}
+
+//#endregion
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/query.mjs
 const isServer$1 = () => typeof window === "undefined";
 function isAuthQueryStateEqual(a, b) {
 	return isJsonEqual(a.data, b.data) && a.error === b.error && a.isPending === b.isPending && a.isRefetching === b.isRefetching && a.refetch === b.refetch;
 }
 const useAuthQuery = (initializedAtom, path, $fetch, options) => {
-	const value = /* @__PURE__ */ atom({
+	const value = createAuthQueryAtom({
 		data: null,
 		error: null,
 		isPending: true,
@@ -2489,7 +2591,9 @@ const useAuthQuery = (initializedAtom, path, $fetch, options) => {
 		refetch: (queryParams) => fn(queryParams)
 	});
 	onMount(value, () => withEquality(value, isAuthQueryStateEqual));
+	let latestRequestId = 0;
 	const fn = async (queryParams) => {
+		const requestId = ++latestRequestId;
 		return new Promise((resolve) => {
 			const opts = typeof options === "function" ? options({
 				data: value.get().data,
@@ -2503,15 +2607,17 @@ const useAuthQuery = (initializedAtom, path, $fetch, options) => {
 					...queryParams?.query
 				},
 				async onSuccess(context) {
-					const current = value.get();
-					const stableData = current.data != null && context.data != null && isJsonEqual(current.data, context.data) ? current.data : context.data;
-					value.set({
-						data: stableData,
-						error: null,
-						isPending: false,
-						isRefetching: false,
-						refetch: value.value.refetch
-					});
+					if (requestId === latestRequestId) {
+						const current = value.get();
+						const stableData = current.data != null && context.data != null && isJsonEqual(current.data, context.data) ? current.data : context.data;
+						value.set({
+							data: stableData,
+							error: null,
+							isPending: false,
+							isRefetching: false,
+							refetch: value.value.refetch
+						});
+					}
 					await opts?.onSuccess?.(context);
 				},
 				async onError(context) {
@@ -2519,28 +2625,33 @@ const useAuthQuery = (initializedAtom, path, $fetch, options) => {
 					const retryAttempts = typeof request.retry === "number" ? request.retry : request.retry?.attempts;
 					const retryAttempt = request.retryAttempt || 0;
 					if (retryAttempts && retryAttempt < retryAttempts) return;
-					const isUnauthorized = context.error.status === 401;
-					value.set({
-						error: context.error,
-						data: isUnauthorized ? null : value.get().data,
-						isPending: false,
-						isRefetching: false,
-						refetch: value.value.refetch
-					});
+					if (requestId === latestRequestId) {
+						const isUnauthorized = context.error.status === 401;
+						value.set({
+							error: context.error,
+							data: isUnauthorized ? null : value.get().data,
+							isPending: false,
+							isRefetching: false,
+							refetch: value.value.refetch
+						});
+					}
 					await opts?.onError?.(context);
 				},
 				async onRequest(context) {
-					const currentValue = value.get();
-					value.set({
-						isPending: currentValue.data === null,
-						data: currentValue.data,
-						error: null,
-						isRefetching: true,
-						refetch: value.value.refetch
-					});
+					if (requestId === latestRequestId) {
+						const currentValue = value.get();
+						value.set({
+							isPending: currentValue.data === null,
+							data: currentValue.data,
+							error: null,
+							isRefetching: true,
+							refetch: value.value.refetch
+						});
+					}
 					await opts?.onRequest?.(context);
 				}
 			}).catch((error) => {
+				if (requestId !== latestRequestId) return;
 				value.set({
 					error,
 					data: value.get().data,
@@ -2597,7 +2708,7 @@ const useAuthQuery = (initializedAtom, path, $fetch, options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/session-refresh.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/session-refresh.mjs
 const now = () => Math.floor(Date.now() / 1e3);
 /**
 * Rate limit: don't refetch on focus if a session request was made within this many seconds
@@ -2725,7 +2836,7 @@ function createSessionRefreshManager(opts) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/fetch-plugins.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/fetch-plugins.mjs
 const redirectPlugin = {
 	id: "redirect",
 	name: "Redirect",
@@ -2741,7 +2852,7 @@ const redirectPlugin = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/session-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/session-atom.mjs
 const isServer = () => typeof window === "undefined";
 const SESSION_MOUNT_DEDUPE_INTERVAL = STORE_UNMOUNT_DELAY;
 function hydrateSessionAtom(sessionAtom, session) {
@@ -2784,7 +2895,7 @@ function getSessionAtom($fetch, options) {
 		freshUntil = 0;
 	});
 	const refetch = (queryParams) => fetchSession(queryParams);
-	const session = /* @__PURE__ */ atom({
+	const session = createAuthQueryAtom({
 		data: null,
 		error: null,
 		isPending: true,
@@ -2916,7 +3027,7 @@ function getSessionAtom($fetch, options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/config.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/config.mjs
 const resolvePublicAuthUrl = (basePath) => {
 	if (typeof process === "undefined") return void 0;
 	const path = basePath ?? "/api/auth";
@@ -2931,6 +3042,7 @@ const resolvePublicAuthUrl = (basePath) => {
 		} catch {}
 	}
 };
+const matchesSessionSignal = (path) => path === "/sign-out" || path === "/update-user" || path === "/update-session" || path === "/sign-up/email" || path === "/sign-in/email" || path === "/delete-user" || path === "/verify-email" || path === "/revoke-sessions" || path === "/revoke-session" || path === "/revoke-other-sessions" || path === "/change-email" || path === "/change-password";
 const getClientConfig = (options, loadEnv) => {
 	const isCredentialsSupported = "credentials" in Request.prototype;
 	const baseURL = getBaseURL(options?.baseURL, options?.basePath, void 0, loadEnv) ?? resolvePublicAuthUrl(options?.basePath) ?? "/api/auth";
@@ -2984,9 +3096,7 @@ const getClientConfig = (options, loadEnv) => {
 	};
 	const atomListeners = [{
 		signal: "$sessionSignal",
-		matcher(path) {
-			return path === "/sign-out" || path === "/update-user" || path === "/update-session" || path === "/sign-up/email" || path === "/sign-in/email" || path === "/delete-user" || path === "/verify-email" || path === "/revoke-sessions" || path === "/revoke-session" || path === "/revoke-other-sessions" || path === "/change-email" || path === "/change-password";
-		},
+		matcher: matchesSessionSignal,
 		callback(path) {
 			if (path === "/sign-out") broadcastSessionUpdate("signout");
 			else if (path === "/update-user" || path === "/update-session") broadcastSessionUpdate("updateUser");
@@ -3016,19 +3126,20 @@ const getClientConfig = (options, loadEnv) => {
 		pluginPathMethods,
 		atomListeners,
 		hydrateSession,
+		$sessionSignal,
 		$fetch,
 		$store
 	};
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/utils/is-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/utils/is-atom.mjs
 function isAtom(value) {
 	return typeof value === "object" && value !== null && "get" in value && typeof value.get === "function" && "lc" in value && typeof value.lc === "number";
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/utils/string.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.2_@opentelemet_e02eb0bf6cc57b8ec4097db90c5ddf37/node_modules/@better-auth/core/dist/utils/string.mjs
 function capitalizeFirstLetter(str) {
 	return str.charAt(0).toUpperCase() + str.slice(1);
 }
@@ -3042,7 +3153,7 @@ function toKebabCase(input) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/proxy.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/proxy.mjs
 function getMethod(path, knownPathMethods, args) {
 	const method = knownPathMethods[path];
 	const { fetchOptions, query: _query, ...body } = args || {};
@@ -3118,7 +3229,7 @@ function createDynamicPathProxy(routes, client, knownPathMethods, atoms, atomLis
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/client/vanilla.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/client/vanilla.mjs
 function createAuthClient(options) {
 	const { pluginPathMethods, pluginsActions, pluginsAtoms, hydrateSession, $fetch, atomListeners, $store } = getClientConfig(options);
 	const resolvedHooks = {};
@@ -3133,7 +3244,7 @@ function createAuthClient(options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/additional-fields/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/additional-fields/client.mjs
 const inferAdditionalFields = (schema) => {
 	return {
 		id: "additional-fields-client",
@@ -3143,7 +3254,7 @@ const inferAdditionalFields = (schema) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/admin/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/admin/client.mjs
 const adminClient = (options) => {
 	const roles = {
 		admin: adminAc$1,
@@ -3178,7 +3289,7 @@ const adminClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
 const deviceAuthorizationClient = () => {
 	return {
 		id: "device-authorization",
@@ -3195,7 +3306,7 @@ const deviceAuthorizationClient = () => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._29983ac85a08632d26ca60fb0be17581/node_modules/better-auth/dist/plugins/organization/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._025f420fe344f13948728b361b367060/node_modules/better-auth/dist/plugins/organization/client.mjs
 /**
 * Using the same `hasPermissionFn` function, but without the need for a `ctx` parameter or the `organizationId` parameter.
 */
@@ -3262,7 +3373,7 @@ const organizationClient = (options) => {
 			},
 			{
 				matcher(path) {
-					return path === "/sign-out" || path.startsWith("/organization");
+					return matchesSessionSignal(path) || path.startsWith("/organization");
 				},
 				signal: "$activeOrgSignal"
 			},
@@ -3290,7 +3401,7 @@ const organizationClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_a4fe5759ddb57f435137bfe015134721/node_modules/@better-auth/api-key/dist/version-D365O1mH.mjs
+//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.7_@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fet_1231755eab9fee363c80bc8eefaed94a/node_modules/@better-auth/api-key/dist/version-CUtTQbZf.mjs
 const API_KEY_ERROR_CODES = defineErrorCodes({
 	INVALID_METADATA_TYPE: "metadata must be an object or undefined",
 	REFILL_AMOUNT_AND_INTERVAL_REQUIRED: "refillAmount is required when refillInterval is provided",
@@ -3324,10 +3435,10 @@ const API_KEY_ERROR_CODES = defineErrorCodes({
 	NO_DEFAULT_API_KEY_CONFIGURATION_FOUND: "No default api-key configuration found.",
 	ORGANIZATION_PLUGIN_REQUIRED: "Organization plugin is required for organization-owned API keys. Please install and configure the organization plugin."
 });
-const PACKAGE_VERSION$2 = "1.7.1";
+const PACKAGE_VERSION$2 = "1.7.7";
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_a4fe5759ddb57f435137bfe015134721/node_modules/@better-auth/api-key/dist/client.mjs
+//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.7_@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fet_1231755eab9fee363c80bc8eefaed94a/node_modules/@better-auth/api-key/dist/client.mjs
 const apiKeyClient = () => {
 	return {
 		id: "api-key",
@@ -3343,7 +3454,7 @@ const apiKeyClient = () => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_670374e089e097efe27e0c3a48cf5b4e/node_modules/@better-auth/passkey/dist/version-CNE1I0BY.mjs
+//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.7_8a2847836f4e26061e61f8849e215b9d/node_modules/@better-auth/passkey/dist/version-Bx477_EO.mjs
 const PASSKEY_ERROR_CODES = defineErrorCodes({
 	CHALLENGE_NOT_FOUND: "Challenge not found",
 	YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY: "You are not allowed to register this passkey",
@@ -3361,7 +3472,7 @@ const PASSKEY_ERROR_CODES = defineErrorCodes({
 	RESOLVE_USER_REQUIRED: "Passkey registration requires either an authenticated session or a resolveUser callback when requireSession is false",
 	RESOLVED_USER_INVALID: "Resolved user is invalid"
 });
-const PACKAGE_VERSION$1 = "1.7.1";
+const PACKAGE_VERSION$1 = "1.7.7";
 
 //#endregion
 //#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/bufferToBase64URLString.js
@@ -3833,7 +3944,7 @@ async function startAuthentication(options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_670374e089e097efe27e0c3a48cf5b4e/node_modules/@better-auth/passkey/dist/client.mjs
+//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.7_8a2847836f4e26061e61f8849e215b9d/node_modules/@better-auth/passkey/dist/client.mjs
 const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 	const signInPasskey = async (opts, options) => {
 		const response = await $fetch("/passkey/generate-authenticate-options", {
@@ -4035,11 +4146,11 @@ const passkeyClient = () => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+f_f113731728b549e501373576d6a425b0/node_modules/@better-auth/sso/dist/version-BbG1DbY-.mjs
-const PACKAGE_VERSION = "1.7.1";
+//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.7_9007e608a51715e1e8e182bfada736ab/node_modules/@better-auth/sso/dist/version-DFla2W8i.mjs
+const PACKAGE_VERSION = "1.7.7";
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+f_f113731728b549e501373576d6a425b0/node_modules/@better-auth/sso/dist/client.mjs
+//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.7_9007e608a51715e1e8e182bfada736ab/node_modules/@better-auth/sso/dist/client.mjs
 const ssoClient = (options) => {
 	return {
 		id: "sso-client",
@@ -4275,7 +4386,6 @@ function e(e) {
 //#region src/commands/auth.ts
 const CLIENT_ID = "shipd-cli";
 const MANAGEMENT_KEY_PREFIX = "shipd_mgmt_";
-const DEFAULT_API_URL = "https://api.useshipd.com";
 function registerAuthCommands(program) {
 	program.command("login").description("Authenticate via browser device authorization").addOption(new Option("--api-url <url>", `API origin (default: ${DEFAULT_API_URL})`).env("SHIPD_API_URL")).action(async (_opts, command) => {
 		const runtime = getRuntime(command, { defaultApiUrl: DEFAULT_API_URL });
@@ -4520,25 +4630,27 @@ const T = z.object({
 	tags: z.array(z.string()).optional()
 });
 const E = z.object({ flagId: z.string().min(1) });
-const D = z.object({
+const D = z.object({ projectId: z.string().min(1) });
+const O = z.object({ flagId: z.string().min(1) });
+const k = z.object({
 	flagId: z.string().min(1),
 	environmentId: z.string().min(1),
 	enabled: z.boolean().optional(),
 	rules: z.array(b).optional(),
 	fallthrough: u.optional()
 });
-const O = z.object({
+const A = z.object({
 	flagId: z.string().min(1),
 	environmentId: z.string().min(1),
 	enabled: z.boolean()
 });
-const k = z.object({ flagId: z.string().min(1) });
-const A = z.enum([`active`, `deprecated`]);
-function j(e) {
+const j = z.object({ flagId: z.string().min(1) });
+const M = z.enum([`active`, `deprecated`]);
+function N(e) {
 	let t = Object.getPrototypeOf(e);
 	return t === Object.prototype || t === null;
 }
-function M(e, t) {
+function P(e, t) {
 	if (e === null) return !0;
 	switch (typeof e) {
 		case `boolean`:
@@ -4546,13 +4658,13 @@ function M(e, t) {
 		case `number`: return Number.isFinite(e);
 		case `object`: {
 			let n = t ?? /* @__PURE__ */ new WeakSet();
-			return !n.has(e) && (n.add(e), Array.isArray(e) ? e.every((e) => M(e, n)) : !j(e) || Object.getOwnPropertySymbols(e).length > 0 ? !1 : Object.keys(e).every((t) => M(e[t], n)));
+			return !n.has(e) && (n.add(e), Array.isArray(e) ? e.every((e) => P(e, n)) : !N(e) || Object.getOwnPropertySymbols(e).length > 0 ? !1 : Object.keys(e).every((t) => P(e[t], n)));
 		}
 		default: return !1;
 	}
 }
-const N = z.custom(M, { message: `default must be JSON-serializable` });
-function P(e, t) {
+const F = z.custom(P, { message: `default must be JSON-serializable` });
+function I(e, t) {
 	switch (e.type) {
 		case `boolean`:
 			typeof e.default != `boolean` && t.addIssue({
@@ -4581,43 +4693,43 @@ function P(e, t) {
 			});
 			break;
 		}
-		case `json`: N.safeParse(e.default).success || t.addIssue({
+		case `json`: F.safeParse(e.default).success || t.addIssue({
 			code: `custom`,
 			path: [`default`],
 			message: `json flag default must be JSON-serializable`
 		});
 	}
 }
-const F = z.object({
+const L = z.object({
 	key: o,
 	type: t,
 	default: z.unknown(),
 	description: z.string().optional(),
 	tags: z.array(z.string()).default([]),
-	lifecycle: A.default(`active`),
+	lifecycle: M.default(`active`),
 	variants: z.array(z.string()).optional(),
 	disabled: z.boolean().optional()
 });
-const I = F.superRefine(P);
-const L = F.extend({
+const R = L.superRefine(I);
+const z$1 = L.extend({
 	version: z.number().int().positive(),
 	environmentVersion: z.number().int().positive().optional(),
 	managedBy: n
-}).superRefine(P);
-const R = z.object({
+}).superRefine(I);
+const B = z.object({
 	version: z.number().int().positive(),
 	environmentVersion: z.number().int().positive().optional()
 });
-const z$1 = z.object({
+const V = z.object({
 	projectId: z.string().min(1),
 	environmentId: z.string().min(1)
 });
-const B = z.object({
+const H = z.object({
 	projectId: z.string(),
 	environmentId: z.string(),
-	flags: z.array(L)
+	flags: z.array(z$1)
 });
-function V(e, t) {
+function U(e, t) {
 	let n = /* @__PURE__ */ new Set();
 	for (let [r, i] of e.entries()) n.has(i.key) && t.addIssue({
 		code: `custom`,
@@ -4629,12 +4741,12 @@ function V(e, t) {
 		message: `duplicate flag key "${i.key}"`
 	}), n.add(i.key);
 }
-const H = z.object({
+const W = z.object({
 	projectId: z.string().min(1),
 	environmentId: z.string().min(1),
-	flags: z.array(I).max(500)
-}).superRefine((e, t) => V(e.flags, t));
-const U = z.object({
+	flags: z.array(R).max(500)
+}).superRefine((e, t) => U(e.flags, t));
+const G = z.object({
 	key: z.string(),
 	op: z.enum([
 		`add`,
@@ -4642,32 +4754,32 @@ const U = z.object({
 		`remove`,
 		`unlinked`
 	]),
-	before: L.optional(),
-	after: I.optional(),
+	before: z$1.optional(),
+	after: R.optional(),
 	message: z.string().optional()
 });
-const W = z.object({
+const K = z.object({
 	projectId: z.string(),
 	environmentId: z.string(),
-	changes: z.array(U),
-	remoteOnly: z.array(L).default([])
+	changes: z.array(G),
+	remoteOnly: z.array(z$1).default([])
 });
-const G = z.object({
+const q = z.object({
 	projectId: z.string().min(1),
 	environmentId: z.string().min(1),
-	flags: z.array(I).max(500),
+	flags: z.array(R).max(500),
 	apply: z.boolean().default(!1),
 	prune: z.boolean().default(!1),
 	force: z.boolean().default(!1),
 	adopt: z.boolean().default(!1),
-	expectedVersions: z.record(z.string(), R).optional()
-}).superRefine((e, t) => V(e.flags, t));
-const K = z.object({
+	expectedVersions: z.record(z.string(), B).optional()
+}).superRefine((e, t) => U(e.flags, t));
+const J = z.object({
 	projectId: z.string(),
 	environmentId: z.string(),
 	applied: z.boolean(),
-	changes: z.array(U),
-	remoteOnly: z.array(L).default([]),
+	changes: z.array(G),
+	remoteOnly: z.array(z$1).default([]),
 	forced: z.boolean().default(!1),
 	adopted: z.boolean().default(!1),
 	approvalRequests: z.array(z.string()).default([])
@@ -4675,7 +4787,7 @@ const K = z.object({
 
 //#endregion
 //#region src/lib/local-config.ts
-const localFlagsArraySchema = z.array(I).superRefine((flags, ctx) => {
+const localFlagsArraySchema = z.array(R).superRefine((flags, ctx) => {
 	const seen = /* @__PURE__ */ new Set();
 	for (const [index, flag] of flags.entries()) {
 		if (seen.has(flag.key)) ctx.addIssue({
@@ -5265,7 +5377,7 @@ function registerTypesCommands(program) {
 //#region src/index.ts
 /** Detected before parse so usage errors can suppress Commander text under `--json`. */
 const jsonRequested = process.argv.includes("--json");
-const program = new Command().name("shipd").description("shipd CLI — flags as code").option("--json", "Machine-readable JSON output", false).option("--yes", "Skip confirmation prompts", false).option("--ci", "Non-interactive mode (same as --yes / CI=1)", false).option("--api-url <url>", "API origin").option("--org <slug>", "Organization slug (session: select; API key: must match)").option("--project <slug>", "Project slug").option("--env <slug>", "Environment slug").option("--config <path>", "Project settings JSON (.shipd/config.json shape)").option("--flags-config <path>", "Path to shipd.config.ts").exitOverride().showHelpAfterError(!jsonRequested);
+const program = new Command().name("shipd").description("shipd CLI — flags as code").option("--json", "Machine-readable JSON output", false).option("--yes", "Skip confirmation prompts", false).option("--ci", "Non-interactive mode (same as --yes / CI=1)", false).option("--api-url <url>", `API origin (default: ${DEFAULT_API_URL})`).option("--org <slug>", "Organization slug (session: select; API key: must match)").option("--project <slug>", "Project slug").option("--env <slug>", "Environment slug").option("--config <path>", "Project settings JSON (.shipd/config.json shape)").option("--flags-config <path>", "Path to shipd.config.ts").exitOverride().showHelpAfterError(!jsonRequested);
 if (jsonRequested) program.configureOutput({
 	writeErr: () => {},
 	writeOut: () => {}