@shipdit/cli 0.6.0 → 0.7.0

package/dist/index.mjs

@@ -4,8 +4,10 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { z } from "zod";
+import { createHash } from "node:crypto";
 import { createJiti } from "jiti";
 import { spawn } from "node:child_process";
+import { isDeepStrictEqual } from "node:util";
 
 //#region src/lib/errors.ts
 var CliError = class extends Error {
@@ -438,10 +440,12 @@ const S$1 = (...t) => hc(...t);
 const C$1 = (...t) => hc(...t);
 const w$1 = (...t) => hc(...t);
 const T$1 = (...t) => hc(...t);
-function E$1(e) {
+const E$1 = (...t) => hc(...t);
+const D$1 = (...t) => hc(...t);
+function O$1(e) {
 	return `${e.replace(/\/+$/, ``)}/api/v1/rpc`;
 }
-function D$1(e) {
+function k$1(e) {
 	return {
 		...e.fetch ? { fetch: e.fetch } : {},
 		init: { credentials: e.client === `dashboard` ? `include` : `same-origin` },
@@ -451,191 +455,225 @@ function D$1(e) {
 		}
 	};
 }
-async function O$1(e, t) {
+async function A$1(e, t) {
 	return a$1(await e({ json: t }));
 }
-async function k$1(e, t) {
+async function j$1(e, t) {
 	let n = await e({ json: t });
 	return {
 		items: await a$1(n),
 		nextCursor: n.headers.get(`next-cursor`)
 	};
 }
-function A$1(e) {
-	let t = E$1(e.baseUrl), n = D$1(e), r = o$1(t, n), i = s$1(t, n), a = c$1(t, n), A = l$1(t, n), j = u$1(t, n), M = d$2(t, n), N = f$2(t, n), P = p$1(t, n), F = _$1(t, n), I = g$1(t, n), L = m$1(t, n), R = h$1(t, n), z = v$1(t, n), B = y$1(t, n), V = b$1(t, n), H = x$1(t, n), U = T$1(t, n), W = S$1(t, n), G = C$1(t, n), K = w$1(t, n);
+async function M$1(e, t, n) {
+	return a$1(await e({ json: t }, { headers: { "idempotency-key": n } }));
+}
+function N$1(e) {
+	let t = O$1(e.baseUrl), n = k$1(e), r = o$1(t, n), i = s$1(t, n), a = c$1(t, n), N = l$1(t, n), P = u$1(t, n), F = d$2(t, n), I = f$2(t, n), L = p$1(t, n), R = m$1(t, n), z = v$1(t, n), B = _$1(t, n), V = h$1(t, n), H = g$1(t, n), U = y$1(t, n), W = D$1(t, n), G = b$1(t, n), K = x$1(t, n), q = S$1(t, n), J = E$1(t, n), Y = C$1(t, n), X = w$1(t, n), Z = T$1(t, n);
 	return {
+		release: {
+			list: (e) => A$1(a.release.list.$post, e),
+			get: (e) => A$1(a.release.get.$post, e),
+			create: (e, t) => M$1(a.release.create.$post, e, t),
+			update: (e, t) => M$1(a.release.update.$post, e, t),
+			bindCommit: (e, t) => M$1(a.release.bindCommit.$post, e, t),
+			transition: (e, t) => M$1(a.release.transition.$post, e, t),
+			completeStage: (e, t) => M$1(a.release.completeStage.$post, e, t),
+			ingestEvidence: (e) => A$1(a.release.ingestEvidence.$post, e),
+			addEvidence: (e, t) => M$1(a.release.addEvidence.$post, e, t)
+		},
 		me: {
-			get: (e = {}) => O$1(r.me.$post, e),
-			feedback: (e) => O$1(r.me.feedback.$post, e)
+			get: (e = {}) => A$1(r.me.$post, e),
+			feedback: (e) => A$1(r.me.feedback.$post, e)
 		},
 		project: {
-			listTransfers: (e = {}) => O$1(i.project.listTransfers.$post, e),
-			requestTransfer: (e) => O$1(i.project.requestTransfer.$post, e),
-			decideTransfer: (e) => O$1(i.project.decideTransfer.$post, e),
-			list: (e = {}) => O$1(i.project.list.$post, e),
-			create: (e) => O$1(i.project.create.$post, e),
-			update: (e) => O$1(i.project.update.$post, e),
-			archive: (e) => O$1(i.project.archive.$post, e),
-			listArchived: (e = {}) => O$1(i.project.listArchived.$post, e),
-			restore: (e) => O$1(i.project.restore.$post, e),
-			listTeams: (e) => O$1(i.project.listTeams.$post, e),
-			setTeams: (e) => O$1(i.project.setTeams.$post, e)
+			listTransfers: (e = {}) => A$1(i.project.listTransfers.$post, e),
+			requestTransfer: (e) => A$1(i.project.requestTransfer.$post, e),
+			decideTransfer: (e) => A$1(i.project.decideTransfer.$post, e),
+			list: (e = {}) => A$1(i.project.list.$post, e),
+			create: (e) => A$1(i.project.create.$post, e),
+			update: (e) => A$1(i.project.update.$post, e),
+			archive: (e) => A$1(i.project.archive.$post, e),
+			listArchived: (e = {}) => A$1(i.project.listArchived.$post, e),
+			restore: (e) => A$1(i.project.restore.$post, e),
+			access: (e) => A$1(i.project.access.$post, e),
+			listMembers: (e) => A$1(i.project.listMembers.$post, e),
+			setMember: (e) => A$1(i.project.setMember.$post, e),
+			setTeamRole: (e) => A$1(i.project.setTeamRole.$post, e),
+			listTeams: (e) => A$1(i.project.listTeams.$post, e),
+			setTeams: (e) => A$1(i.project.setTeams.$post, e)
 		},
-		team: { listMembers: (e) => O$1(W.team.listMembers.$post, e) },
+		team: { listMembers: (e) => A$1(Y.team.listMembers.$post, e) },
 		environment: {
-			list: (e) => O$1(a.environment.list.$post, e),
-			create: (e) => O$1(a.environment.create.$post, e),
-			update: (e) => O$1(a.environment.update.$post, e),
-			archive: (e) => O$1(a.environment.archive.$post, e),
-			listArchived: (e) => O$1(a.environment.listArchived.$post, e),
-			restore: (e) => O$1(a.environment.restore.$post, e)
+			list: (e) => A$1(N.environment.list.$post, e),
+			create: (e) => A$1(N.environment.create.$post, e),
+			update: (e) => A$1(N.environment.update.$post, e),
+			archive: (e) => A$1(N.environment.archive.$post, e),
+			listArchived: (e) => A$1(N.environment.listArchived.$post, e),
+			restore: (e) => A$1(N.environment.restore.$post, e)
 		},
 		flag: {
-			list: (e) => O$1(A.flag.list.$post, e),
-			get: (e) => O$1(A.flag.get.$post, e),
-			create: (e) => O$1(A.flag.create.$post, e),
-			update: (e) => O$1(A.flag.update.$post, e),
-			archive: (e) => O$1(A.flag.archive.$post, e),
-			listArchived: (e) => O$1(A.flag.listArchived.$post, e),
-			restore: (e) => O$1(A.flag.restore.$post, e),
-			publishEnvironments: (e) => O$1(A.flag.publishEnvironments.$post, e),
-			updateEnvironment: (e) => O$1(A.flag.updateEnvironment.$post, e),
-			toggleEnvironment: (e) => O$1(A.flag.toggleEnvironment.$post, e),
-			listEnvironmentStates: (e) => O$1(A.flag.listEnvironmentStates.$post, e),
-			pull: (e) => O$1(A.flag.pull.$post, e),
-			diff: (e) => O$1(A.flag.diff.$post, e),
-			push: (e) => O$1(A.flag.push.$post, e)
+			list: (e) => A$1(P.flag.list.$post, e),
+			get: (e) => A$1(P.flag.get.$post, e),
+			create: (e) => A$1(P.flag.create.$post, e),
+			update: (e) => A$1(P.flag.update.$post, e),
+			archive: (e) => A$1(P.flag.archive.$post, e),
+			listArchived: (e) => A$1(P.flag.listArchived.$post, e),
+			restore: (e) => A$1(P.flag.restore.$post, e),
+			publishEnvironments: (e) => A$1(P.flag.publishEnvironments.$post, e),
+			updateEnvironment: (e) => A$1(P.flag.updateEnvironment.$post, e),
+			toggleEnvironment: (e) => A$1(P.flag.toggleEnvironment.$post, e),
+			listEnvironmentStates: (e) => A$1(P.flag.listEnvironmentStates.$post, e),
+			pull: (e) => A$1(P.flag.pull.$post, e),
+			diff: (e) => A$1(P.flag.diff.$post, e),
+			push: (e) => A$1(P.flag.push.$post, e)
 		},
 		apiKey: {
-			list: (e = {}) => O$1(j.apiKey.list.$post, e),
-			create: (e) => O$1(j.apiKey.create.$post, e),
-			revoke: (e) => O$1(j.apiKey.revoke.$post, e)
+			list: (e = {}) => A$1(F.apiKey.list.$post, e),
+			create: (e) => A$1(F.apiKey.create.$post, e),
+			revoke: (e) => A$1(F.apiKey.revoke.$post, e)
 		},
 		sdkKey: {
-			list: (e = {}) => O$1(P.sdkKey.list.$post, e),
-			create: (e) => O$1(P.sdkKey.create.$post, e),
-			revoke: (e) => O$1(P.sdkKey.revoke.$post, e)
+			list: (e = {}) => A$1(R.sdkKey.list.$post, e),
+			create: (e) => A$1(R.sdkKey.create.$post, e),
+			revoke: (e) => A$1(R.sdkKey.revoke.$post, e)
 		},
 		serviceAccount: {
-			list: (e = {}) => O$1(F.serviceAccount.list.$post, e),
-			get: (e) => O$1(F.serviceAccount.get.$post, e),
-			create: (e) => O$1(F.serviceAccount.create.$post, e),
-			update: (e) => O$1(F.serviceAccount.update.$post, e),
-			disable: (e) => O$1(F.serviceAccount.disable.$post, e),
-			enable: (e) => O$1(F.serviceAccount.enable.$post, e),
-			delete: (e) => O$1(F.serviceAccount.delete.$post, e),
-			createToken: (e) => O$1(F.serviceAccount.createToken.$post, e),
-			listTokens: (e) => O$1(F.serviceAccount.listTokens.$post, e),
-			revokeToken: (e) => O$1(F.serviceAccount.revokeToken.$post, e),
-			rotateToken: (e) => O$1(F.serviceAccount.rotateToken.$post, e)
+			list: (e = {}) => A$1(z.serviceAccount.list.$post, e),
+			get: (e) => A$1(z.serviceAccount.get.$post, e),
+			create: (e) => A$1(z.serviceAccount.create.$post, e),
+			update: (e) => A$1(z.serviceAccount.update.$post, e),
+			disable: (e) => A$1(z.serviceAccount.disable.$post, e),
+			enable: (e) => A$1(z.serviceAccount.enable.$post, e),
+			delete: (e) => A$1(z.serviceAccount.delete.$post, e),
+			createToken: (e) => A$1(z.serviceAccount.createToken.$post, e),
+			listTokens: (e) => A$1(z.serviceAccount.listTokens.$post, e),
+			revokeToken: (e) => A$1(z.serviceAccount.revokeToken.$post, e),
+			rotateToken: (e) => A$1(z.serviceAccount.rotateToken.$post, e)
 		},
 		segment: {
-			list: (e) => O$1(I.segment.list.$post, e),
-			get: (e) => O$1(I.segment.get.$post, e),
-			create: (e) => O$1(I.segment.create.$post, e),
-			update: (e) => O$1(I.segment.update.$post, e),
-			archive: (e) => O$1(I.segment.archive.$post, e),
-			listArchived: (e) => O$1(I.segment.listArchived.$post, e),
-			restore: (e) => O$1(I.segment.restore.$post, e),
-			listEnvironmentStates: (e) => O$1(I.segment.listEnvironmentStates.$post, e),
-			updateEnvironment: (e) => O$1(I.segment.updateEnvironment.$post, e)
+			list: (e) => A$1(B.segment.list.$post, e),
+			get: (e) => A$1(B.segment.get.$post, e),
+			create: (e) => A$1(B.segment.create.$post, e),
+			update: (e) => A$1(B.segment.update.$post, e),
+			archive: (e) => A$1(B.segment.archive.$post, e),
+			listArchived: (e) => A$1(B.segment.listArchived.$post, e),
+			restore: (e) => A$1(B.segment.restore.$post, e),
+			listEnvironmentStates: (e) => A$1(B.segment.listEnvironmentStates.$post, e),
+			updateEnvironment: (e) => A$1(B.segment.updateEnvironment.$post, e)
 		},
 		evaluatedEntity: {
-			list: (e) => O$1(L.evaluatedEntity.list.$post, e),
-			listPage: (e) => k$1(L.evaluatedEntity.list.$post, e),
-			get: (e) => O$1(L.evaluatedEntity.get.$post, e),
-			delete: (e) => O$1(L.evaluatedEntity.delete.$post, e)
+			list: (e) => A$1(V.evaluatedEntity.list.$post, e),
+			listPage: (e) => j$1(V.evaluatedEntity.list.$post, e),
+			get: (e) => A$1(V.evaluatedEntity.get.$post, e),
+			delete: (e) => A$1(V.evaluatedEntity.delete.$post, e)
 		},
 		evaluationFact: {
-			list: (e) => O$1(R.evaluationFact.list.$post, e),
-			byRule: (e) => O$1(R.evaluationFact.byRule.$post, e),
-			orgSummary: (e = {}) => O$1(R.evaluationFact.orgSummary.$post, e),
-			projectSummary: (e) => O$1(R.evaluationFact.projectSummary.$post, e),
-			simulate: (e) => O$1(R.evaluationFact.simulate.$post, e)
+			list: (e) => A$1(H.evaluationFact.list.$post, e),
+			byRule: (e) => A$1(H.evaluationFact.byRule.$post, e),
+			orgSummary: (e = {}) => A$1(H.evaluationFact.orgSummary.$post, e),
+			projectSummary: (e) => A$1(H.evaluationFact.projectSummary.$post, e),
+			simulate: (e) => A$1(H.evaluationFact.simulate.$post, e)
 		},
 		snapshot: {
-			publish: (e) => O$1(z.snapshot.publish.$post, e),
-			listOutbox: (e = {}) => O$1(z.snapshot.outbox.list.$post, e),
-			listOutboxPage: (e = {}) => k$1(z.snapshot.outbox.list.$post, e),
-			requeue: (e) => O$1(z.snapshot.outbox.requeue.$post, e),
-			rebuild: (e) => O$1(z.snapshot.rebuild.$post, e),
-			listPublications: (e) => O$1(z.snapshot.publications.list.$post, e),
-			listPublicationsPage: (e) => k$1(z.snapshot.publications.list.$post, e)
+			publish: (e) => A$1(U.snapshot.publish.$post, e),
+			listOutbox: (e = {}) => A$1(U.snapshot.outbox.list.$post, e),
+			listOutboxPage: (e = {}) => j$1(U.snapshot.outbox.list.$post, e),
+			requeue: (e) => A$1(U.snapshot.outbox.requeue.$post, e),
+			rebuild: (e) => A$1(U.snapshot.rebuild.$post, e),
+			listPublications: (e) => A$1(U.snapshot.publications.list.$post, e),
+			listPublicationsPage: (e) => j$1(U.snapshot.publications.list.$post, e)
+		},
+		event: { publish: (e, t) => M$1(W.event.publish.$post, e, t) },
+		eventWebhook: {
+			eventTypes: (e) => A$1(W.eventWebhook.eventTypes.$post, e),
+			list: (e) => A$1(W.eventWebhook.list.$post, e),
+			create: (e) => A$1(W.eventWebhook.create.$post, e),
+			update: (e) => A$1(W.eventWebhook.update.$post, e),
+			delete: (e) => A$1(W.eventWebhook.delete.$post, e),
+			test: (e, t) => M$1(W.eventWebhook.test.$post, e, t),
+			deliveries: (e) => A$1(W.eventWebhook.deliveries.$post, e),
+			attempts: (e) => A$1(W.eventWebhook.attempts.$post, e),
+			redeliver: (e, t) => M$1(W.eventWebhook.redeliver.$post, e, t),
+			usage: (e) => A$1(W.eventWebhook.usage.$post, e)
 		},
 		snapshotWebhook: {
-			list: (e) => O$1(B.snapshotWebhook.list.$post, e),
-			create: (e) => O$1(B.snapshotWebhook.create.$post, e),
-			update: (e) => O$1(B.snapshotWebhook.update.$post, e),
-			delete: (e) => O$1(B.snapshotWebhook.delete.$post, e),
-			test: (e) => O$1(B.snapshotWebhook.test.$post, e)
+			list: (e) => A$1(G.snapshotWebhook.list.$post, e),
+			create: (e) => A$1(G.snapshotWebhook.create.$post, e),
+			update: (e) => A$1(G.snapshotWebhook.update.$post, e),
+			delete: (e) => A$1(G.snapshotWebhook.delete.$post, e),
+			test: (e) => A$1(G.snapshotWebhook.test.$post, e)
 		},
-		device: { authorize: (e) => O$1(V.device.authorize.$post, e) },
+		device: { authorize: (e) => A$1(K.device.authorize.$post, e) },
 		billing: {
-			get: (e = {}) => O$1(H.billing.get.$post, e),
-			attach: (e) => O$1(H.billing.attach.$post, e),
-			openPortal: (e) => O$1(H.billing.openPortal.$post, e)
+			get: (e = {}) => A$1(q.billing.get.$post, e),
+			updateUsage: (e) => A$1(q.billing.updateUsage.$post, e),
+			attach: (e) => A$1(q.billing.attach.$post, e),
+			openPortal: (e) => A$1(q.billing.openPortal.$post, e)
 		},
-		usage: { get: (e = {}) => O$1(U.usage.get.$post, e) },
+		usage: { get: (e = {}) => A$1(J.usage.get.$post, e) },
 		approval: {
-			listPolicies: (e = {}) => O$1(M.approval.listPolicies.$post, e),
-			createPolicy: (e) => O$1(M.approval.createPolicy.$post, e),
-			updatePolicy: (e) => O$1(M.approval.updatePolicy.$post, e),
-			deletePolicy: (e) => O$1(M.approval.deletePolicy.$post, e),
-			listRequests: (e = {}) => O$1(M.approval.listRequests.$post, e),
-			listRequestsPage: (e = {}) => k$1(M.approval.listRequests.$post, e),
-			get: (e) => O$1(M.approval.get.$post, e),
-			approve: (e) => O$1(M.approval.approve.$post, e),
-			reject: (e) => O$1(M.approval.reject.$post, e),
-			cancel: (e) => O$1(M.approval.cancel.$post, e)
+			listPolicies: (e = {}) => A$1(I.approval.listPolicies.$post, e),
+			createPolicy: (e) => A$1(I.approval.createPolicy.$post, e),
+			updatePolicy: (e) => A$1(I.approval.updatePolicy.$post, e),
+			deletePolicy: (e) => A$1(I.approval.deletePolicy.$post, e),
+			listRequests: (e = {}) => A$1(I.approval.listRequests.$post, e),
+			listRequestsPage: (e = {}) => j$1(I.approval.listRequests.$post, e),
+			get: (e) => A$1(I.approval.get.$post, e),
+			approve: (e) => A$1(I.approval.approve.$post, e),
+			reject: (e) => A$1(I.approval.reject.$post, e),
+			cancel: (e) => A$1(I.approval.cancel.$post, e)
 		},
 		audit: {
-			list: (e = {}) => O$1(N.audit.list.$post, e),
-			get: (e) => O$1(N.audit.get.$post, e),
-			actions: (e = {}) => O$1(N.audit.actions.$post, e),
-			export: (e) => O$1(N.audit.export.$post, e),
-			getSettings: (e = {}) => O$1(N.audit.getSettings.$post, e),
-			updateSettings: (e) => O$1(N.audit.updateSettings.$post, e),
-			listDestinations: (e = {}) => O$1(N.audit.listDestinations.$post, e),
-			createDestination: (e) => O$1(N.audit.createDestination.$post, e),
-			updateDestination: (e) => O$1(N.audit.updateDestination.$post, e),
-			deleteDestination: (e) => O$1(N.audit.deleteDestination.$post, e),
-			testDestination: (e) => O$1(N.audit.testDestination.$post, e)
+			list: (e = {}) => A$1(L.audit.list.$post, e),
+			get: (e) => A$1(L.audit.get.$post, e),
+			actions: (e = {}) => A$1(L.audit.actions.$post, e),
+			export: (e) => A$1(L.audit.export.$post, e),
+			getSettings: (e = {}) => A$1(L.audit.getSettings.$post, e),
+			updateSettings: (e) => A$1(L.audit.updateSettings.$post, e),
+			listDestinations: (e = {}) => A$1(L.audit.listDestinations.$post, e),
+			createDestination: (e) => A$1(L.audit.createDestination.$post, e),
+			updateDestination: (e) => A$1(L.audit.updateDestination.$post, e),
+			deleteDestination: (e) => A$1(L.audit.deleteDestination.$post, e),
+			testDestination: (e) => A$1(L.audit.testDestination.$post, e)
 		},
 		sso: {
-			getSettings: (e = {}) => O$1(G.sso.getSettings.$post, e),
-			listProviders: (e = {}) => O$1(G.sso.listProviders.$post, e),
-			updateAllowedDomains: (e) => O$1(G.sso.updateAllowedDomains.$post, e),
-			setEnforcement: (e) => O$1(G.sso.setEnforcement.$post, e),
-			setRequireTwoFactor: (e) => O$1(G.sso.setRequireTwoFactor.$post, e)
+			getSettings: (e = {}) => A$1(X.sso.getSettings.$post, e),
+			listProviders: (e = {}) => A$1(X.sso.listProviders.$post, e),
+			updateAllowedDomains: (e) => A$1(X.sso.updateAllowedDomains.$post, e),
+			setEnforcement: (e) => A$1(X.sso.setEnforcement.$post, e),
+			setRequireTwoFactor: (e) => A$1(X.sso.setRequireTwoFactor.$post, e)
 		},
 		scim: {
-			getConnection: (e = {}) => O$1(K.scim.getConnection.$post, e),
-			createConnection: (e = { creationRequestId: crypto.randomUUID() }) => O$1(K.scim.createConnection.$post, e),
-			rotateCredential: (e) => O$1(K.scim.rotateCredential.$post, e),
-			revokeCredential: (e) => O$1(K.scim.revokeCredential.$post, e),
-			decommissionConnection: (e) => O$1(K.scim.decommissionConnection.$post, e)
+			getConnection: (e = {}) => A$1(Z.scim.getConnection.$post, e),
+			createConnection: (e = { creationRequestId: crypto.randomUUID() }) => A$1(Z.scim.createConnection.$post, e),
+			rotateCredential: (e) => A$1(Z.scim.rotateCredential.$post, e),
+			revokeCredential: (e) => A$1(Z.scim.revokeCredential.$post, e),
+			decommissionConnection: (e) => A$1(Z.scim.decommissionConnection.$post, e)
 		},
 		raw: {
 			me: r,
 			project: i,
-			environment: a,
-			flag: A,
-			apiKey: j,
-			approval: M,
-			audit: N,
-			sdkKey: P,
-			serviceAccount: F,
-			segment: I,
-			evaluatedEntity: L,
-			evaluationFact: R,
-			snapshot: z,
-			snapshotWebhook: B,
-			device: V,
-			billing: H,
-			usage: U,
-			team: W,
-			sso: G,
-			scim: K
+			release: a,
+			environment: N,
+			flag: P,
+			apiKey: F,
+			approval: I,
+			audit: L,
+			sdkKey: R,
+			serviceAccount: z,
+			segment: B,
+			evaluatedEntity: V,
+			evaluationFact: H,
+			snapshot: U,
+			snapshotWebhook: G,
+			eventWebhook: W,
+			device: K,
+			billing: q,
+			usage: J,
+			team: Y,
+			sso: X,
+			scim: Z
 		}
 	};
 }
@@ -779,7 +817,7 @@ var BetterAuthError = class extends Error {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/access/access.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/access/access.mjs
 function unknownResourceResponse(requestedResource) {
 	return {
 		success: false,
@@ -856,7 +894,7 @@ function createAccessControl(s) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/two-factor/error-code.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/two-factor/error-code.mjs
 const TWO_FACTOR_ERROR_CODES = defineErrorCodes({
 	OTP_NOT_ENABLED: "OTP not enabled",
 	OTP_NOT_CONFIGURED: "OTP is not available",
@@ -874,11 +912,11 @@ const TWO_FACTOR_ERROR_CODES = defineErrorCodes({
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/package.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/package.mjs
 var version = "1.7.7";
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/version.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/version.mjs
 const PACKAGE_VERSION$3 = version;
 
 //#endregion
@@ -914,7 +952,7 @@ function isSafeUrlScheme(value) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/two-factor/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/two-factor/client.mjs
 const twoFactorClient = (options) => {
 	return {
 		id: "two-factor",
@@ -952,7 +990,7 @@ const twoFactorClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/admin/access/statement.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/admin/access/statement.mjs
 const defaultStatements$1 = {
 	user: [
 		"create",
@@ -1003,7 +1041,7 @@ const defaultRoles$1 = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/admin/error-codes.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/admin/error-codes.mjs
 const ADMIN_ERROR_CODES = defineErrorCodes({
 	FAILED_TO_CREATE_USER: "Failed to create user",
 	USER_ALREADY_EXISTS: "User already exists.",
@@ -1095,7 +1133,7 @@ const ENV = Object.freeze({
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/utils/url.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/utils/url.mjs
 const SLASH_CHAR_CODE = "/".charCodeAt(0);
 function trimTrailingSlashes(value) {
 	let end = value.length;
@@ -1174,7 +1212,7 @@ function getOrigin(url) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/admin/has-permission.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/admin/has-permission.mjs
 const hasPermission = (input) => {
 	if (input.userId && input.options?.adminUserIds?.includes(input.userId)) return true;
 	if (!input.permissions) return false;
@@ -1776,7 +1814,7 @@ const createFetch = (config) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/parser.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/parser.mjs
 const PROTO_POLLUTION_PATTERNS = {
 	proto: /"(?:_|\\u0{2}5[Ff]){2}(?:p|\\u0{2}70)(?:r|\\u0{2}72)(?:o|\\u0{2}6[Ff])(?:t|\\u0{2}74)(?:o|\\u0{2}6[Ff])(?:_|\\u0{2}5[Ff]){2}"\s*:/,
 	constructor: /"(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)"\s*:/,
@@ -1846,7 +1884,7 @@ function parseJSON(value, options = { strict: true }) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
 const defaultStatements = {
 	organization: ["update", "delete"],
 	member: [
@@ -1922,7 +1960,7 @@ const defaultRoles = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/organization/permission.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/organization/permission.mjs
 const hasPermissionFn = (input, acRoles) => {
 	if (!input.permissions) return false;
 	const roles = input.role.split(",");
@@ -1935,7 +1973,7 @@ const hasPermissionFn = (input, acRoles) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
 const ORGANIZATION_ERROR_CODES = defineErrorCodes({
 	YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_ORGANIZATION: "You are not allowed to create a new organization",
 	YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_ORGANIZATIONS: "You have reached the maximum number of organizations",
@@ -2060,6 +2098,8 @@ const t$1 = createAccessControl({
 	evaluated_entity: [`read`, `delete`],
 	snapshot: [`read`],
 	snapshot_webhook: [`read`, `manage`],
+	event_webhook: [`read`, `manage`],
+	customer_event: [`publish`],
 	billing: [`read`, `manage`],
 	sso: [
 		`read`,
@@ -2088,6 +2128,7 @@ const n$1 = {
 		flag: [`read`],
 		evaluated_entity: [`read`],
 		snapshot_webhook: [`read`],
+		event_webhook: [`read`],
 		billing: [`read`],
 		approval_policy: [`read`],
 		approval_request: [`read`]
@@ -2112,6 +2153,7 @@ const n$1 = {
 		],
 		evaluated_entity: [`read`],
 		snapshot_webhook: [`read`],
+		event_webhook: [`read`],
 		billing: [`read`],
 		approval_policy: [`read`],
 		approval_request: [`read`]
@@ -2176,6 +2218,8 @@ const n$1 = {
 		evaluated_entity: [`read`, `delete`],
 		snapshot: [`read`],
 		snapshot_webhook: [`read`, `manage`],
+		event_webhook: [`read`, `manage`],
+		customer_event: [`publish`],
 		billing: [`read`, `manage`],
 		sso: [`read`, `manage`],
 		service_account: [
@@ -2251,6 +2295,8 @@ const n$1 = {
 		evaluated_entity: [`read`, `delete`],
 		snapshot: [`read`],
 		snapshot_webhook: [`read`, `manage`],
+		event_webhook: [`read`, `manage`],
+		customer_event: [`publish`],
 		billing: [`read`, `manage`],
 		sso: [
 			`read`,
@@ -2273,7 +2319,7 @@ const n$1 = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/broadcast-channel.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/broadcast-channel.mjs
 const kBroadcastChannel = Symbol.for("better-auth:broadcast-channel");
 const now$1 = () => Math.floor(Date.now() / 1e3);
 var WindowBroadcastChannel = class {
@@ -2497,7 +2543,7 @@ let onMount = ($store, initialize) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/equality.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/equality.mjs
 function isPlainObject(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const prototype = Object.getPrototypeOf(value);
@@ -2538,7 +2584,7 @@ function withEquality(store, isEqual) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/focus-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/focus-manager.mjs
 const kFocusManager = Symbol.for("better-auth:focus-manager");
 var WindowFocusManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -2568,7 +2614,7 @@ function getGlobalFocusManager() {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/online-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/online-manager.mjs
 const kOnlineManager = Symbol.for("better-auth:online-manager");
 var WindowOnlineManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -2601,7 +2647,7 @@ function getGlobalOnlineManager() {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/query-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/query-atom.mjs
 const kAuthQuery = Symbol.for("better-auth:auth-query");
 function createAuthQueryAtom(initialValue) {
 	const queryAtom = /* @__PURE__ */ atom(initialValue);
@@ -2610,7 +2656,7 @@ function createAuthQueryAtom(initialValue) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/query.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/query.mjs
 const isServer$1 = () => typeof window === "undefined";
 function isAuthQueryStateEqual(a, b) {
 	return isJsonEqual(a.data, b.data) && a.error === b.error && a.isPending === b.isPending && a.isRefetching === b.isRefetching && a.refetch === b.refetch;
@@ -2741,7 +2787,7 @@ const useAuthQuery = (initializedAtom, path, $fetch, options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/session-refresh.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/session-refresh.mjs
 const now = () => Math.floor(Date.now() / 1e3);
 /**
 * Rate limit: don't refetch on focus if a session request was made within this many seconds
@@ -2869,7 +2915,7 @@ function createSessionRefreshManager(opts) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/fetch-plugins.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/fetch-plugins.mjs
 const redirectPlugin = {
 	id: "redirect",
 	name: "Redirect",
@@ -2885,7 +2931,7 @@ const redirectPlugin = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/session-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/session-atom.mjs
 const isServer = () => typeof window === "undefined";
 const SESSION_MOUNT_DEDUPE_INTERVAL = STORE_UNMOUNT_DELAY;
 function hydrateSessionAtom(sessionAtom, session) {
@@ -3060,7 +3106,7 @@ function getSessionAtom($fetch, options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/config.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/config.mjs
 const resolvePublicAuthUrl = (basePath) => {
 	if (typeof process === "undefined") return void 0;
 	const path = basePath ?? "/api/auth";
@@ -3166,7 +3212,7 @@ const getClientConfig = (options, loadEnv) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/utils/is-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/utils/is-atom.mjs
 function isAtom(value) {
 	return typeof value === "object" && value !== null && "get" in value && typeof value.get === "function" && "lc" in value && typeof value.lc === "number";
 }
@@ -3186,7 +3232,7 @@ function toKebabCase(input) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/proxy.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/proxy.mjs
 function getMethod(path, knownPathMethods, args) {
 	const method = knownPathMethods[path];
 	const { fetchOptions, query: _query, ...body } = args || {};
@@ -3262,7 +3308,7 @@ function createDynamicPathProxy(routes, client, knownPathMethods, atoms, atomLis
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/client/vanilla.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/vanilla.mjs
 function createAuthClient(options) {
 	const { pluginPathMethods, pluginsActions, pluginsAtoms, hydrateSession, $fetch, atomListeners, $store } = getClientConfig(options);
 	const resolvedHooks = {};
@@ -3277,7 +3323,7 @@ function createAuthClient(options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/additional-fields/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/additional-fields/client.mjs
 const inferAdditionalFields = (schema) => {
 	return {
 		id: "additional-fields-client",
@@ -3287,7 +3333,7 @@ const inferAdditionalFields = (schema) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/admin/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/admin/client.mjs
 const adminClient = (options) => {
 	const roles = {
 		admin: adminAc$1,
@@ -3322,7 +3368,7 @@ const adminClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
 const deviceAuthorizationClient = () => {
 	return {
 		id: "device-authorization",
@@ -3339,7 +3385,7 @@ const deviceAuthorizationClient = () => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._7c90dee8a2acd893f91862de908c6808/node_modules/better-auth/dist/plugins/organization/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/organization/client.mjs
 /**
 * Using the same `hasPermissionFn` function, but without the need for a `ctx` parameter or the `organizationId` parameter.
 */
@@ -3434,7 +3480,7 @@ const organizationClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.7_@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fet_3f872e6aea52bc61f9c5dfb40b2109fb/node_modules/@better-auth/api-key/dist/version-CUtTQbZf.mjs
+//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.7_@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fet_72057e843799b0c86a3fe30aeb49ac2b/node_modules/@better-auth/api-key/dist/version-CUtTQbZf.mjs
 const API_KEY_ERROR_CODES = defineErrorCodes({
 	INVALID_METADATA_TYPE: "metadata must be an object or undefined",
 	REFILL_AMOUNT_AND_INTERVAL_REQUIRED: "refillAmount is required when refillInterval is provided",
@@ -3471,7 +3517,7 @@ const API_KEY_ERROR_CODES = defineErrorCodes({
 const PACKAGE_VERSION$2 = "1.7.7";
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.7_@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fet_3f872e6aea52bc61f9c5dfb40b2109fb/node_modules/@better-auth/api-key/dist/client.mjs
+//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.7_@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fet_72057e843799b0c86a3fe30aeb49ac2b/node_modules/@better-auth/api-key/dist/client.mjs
 const apiKeyClient = () => {
 	return {
 		id: "api-key",
@@ -3487,7 +3533,7 @@ const apiKeyClient = () => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.7_59c4b159f325028b6aeb6ca5fe859369/node_modules/@better-auth/passkey/dist/version-Bx477_EO.mjs
+//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.7_bb9d362000213fa473d66cafce218d0a/node_modules/@better-auth/passkey/dist/version-Bx477_EO.mjs
 const PASSKEY_ERROR_CODES = defineErrorCodes({
 	CHALLENGE_NOT_FOUND: "Challenge not found",
 	YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY: "You are not allowed to register this passkey",
@@ -3977,7 +4023,7 @@ async function startAuthentication(options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.7_59c4b159f325028b6aeb6ca5fe859369/node_modules/@better-auth/passkey/dist/client.mjs
+//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.7_bb9d362000213fa473d66cafce218d0a/node_modules/@better-auth/passkey/dist/client.mjs
 const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 	const signInPasskey = async (opts, options) => {
 		const response = await $fetch("/passkey/generate-authenticate-options", {
@@ -4179,11 +4225,11 @@ const passkeyClient = () => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.7_f840261b078ff9b2a25d6de6ccbfccc0/node_modules/@better-auth/sso/dist/version-DFla2W8i.mjs
+//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.7_b7f969b8f4178e26300409b5e56227c3/node_modules/@better-auth/sso/dist/version-DFla2W8i.mjs
 const PACKAGE_VERSION = "1.7.7";
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.7_f840261b078ff9b2a25d6de6ccbfccc0/node_modules/@better-auth/sso/dist/client.mjs
+//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.7_b7f969b8f4178e26300409b5e56227c3/node_modules/@better-auth/sso/dist/client.mjs
 const ssoClient = (options) => {
 	return {
 		id: "sso-client",
@@ -4301,7 +4347,7 @@ async function createCliApiClient(runtime) {
 		sessionToken,
 		orgSlug: runtime.org
 	});
-	const client = A$1({
+	const client = N$1({
 		baseUrl: runtime.apiUrl,
 		client: "cli",
 		getHeaders: () => {
@@ -4582,44 +4628,38 @@ const g = z.object({
 	segmentId: z.string().min(1),
 	operator: z.enum([`in`, `not_in`]).optional()
 });
-const _ = z.lazy(() => z.union([
-	h,
-	m,
-	g,
-	d,
-	f,
-	p,
-	z.object({
-		kind: z.literal(`group`),
-		op: z.enum([`and`, `or`]),
-		conditions: z.array(_).min(1)
-	})
-]));
-function v(e, t = 0) {
-	return e.kind !== `group` || !Array.isArray(e.conditions) ? t : Math.max(t + 1, ...e.conditions.map((e) => v(e, t + 1)));
-}
-function y(e, t) {
-	for (let n of e) v(n) > 8 && t.addIssue({
-		code: `custom`,
-		message: `condition groups cannot nest more than 8 levels`
-	});
-}
-const b = z.object({
+function _(t) {
+	return z.lazy(() => z.union([
+		h,
+		m,
+		g,
+		d,
+		f,
+		p,
+		...t < 8 ? [z.object({
+			kind: z.literal(`group`),
+			op: z.enum([`and`, `or`]),
+			conditions: z.array(_(t + 1)).min(1)
+		})] : []
+	]));
+}
+const v = _(0);
+const y = z.object({
 	id: z.string().min(1),
 	description: z.string().optional(),
-	conditions: z.array(_),
+	conditions: z.array(v),
 	serve: u
-}).superRefine((e, t) => y(e.conditions, t));
-const x = z.object({
+});
+const b = z.object({
 	id: z.string().min(1),
-	conditions: z.array(_).min(1)
-}).superRefine((e, t) => y(e.conditions, t));
-const S = z.object({ projectId: z.string().min(1) });
-const C = z.object({
+	conditions: z.array(v).min(1)
+});
+const x = z.object({ projectId: z.string().min(1) });
+const S = z.object({
 	projectId: z.string().min(1),
 	key: z.string().min(1)
 });
-const w = z.object({
+const C = z.object({
 	projectId: z.string().min(1),
 	key: o,
 	name: z.string().min(1),
@@ -4634,7 +4674,7 @@ const w = z.object({
 		message: `variant flag requires a non-empty variants array`
 	});
 });
-const T = z.object({
+const w = z.object({
 	expectedVersion: z.number().int().positive().optional(),
 	flagId: z.string().min(1),
 	key: o.optional(),
@@ -4644,37 +4684,37 @@ const T = z.object({
 	variants: z.array(z.string()).nullable().optional(),
 	tags: z.array(z.string()).optional()
 });
-const E = z.object({ flagId: z.string().min(1) });
-const D = z.object({ projectId: z.string().min(1) });
-const O = z.object({ flagId: z.string().min(1) });
-const k = z.object({
+const T = z.object({ flagId: z.string().min(1) });
+const E = z.object({ projectId: z.string().min(1) });
+const D = z.object({ flagId: z.string().min(1) });
+const O = z.object({
 	expectedVersion: z.number().int().positive().optional(),
 	flagId: z.string().min(1),
 	environmentId: z.string().min(1),
 	enabled: z.boolean().optional(),
-	rules: z.array(b).optional(),
+	rules: z.array(y).optional(),
 	fallthrough: u.optional()
 });
-const A = z.object({
+const k = z.object({
 	flagId: z.string().min(1),
 	environments: z.array(z.object({
 		environmentId: z.string().min(1),
 		expectedVersion: z.number().int().positive()
 	})).min(1).refine((e) => new Set(e.map((e) => e.environmentId)).size === e.length, `Duplicate environments`)
 });
-const j = z.object({
+const A = z.object({
 	expectedVersion: z.number().int().positive().optional(),
 	flagId: z.string().min(1),
 	environmentId: z.string().min(1),
 	enabled: z.boolean()
 });
-const M = z.object({ flagId: z.string().min(1) });
-const N = z.enum([`active`, `deprecated`]);
-function P(e) {
+const j = z.object({ flagId: z.string().min(1) });
+const M = z.enum([`active`, `deprecated`]);
+function N(e) {
 	let t = Object.getPrototypeOf(e);
 	return t === Object.prototype || t === null;
 }
-function F(e, t) {
+function P(e, t) {
 	if (e === null) return !0;
 	switch (typeof e) {
 		case `boolean`:
@@ -4682,13 +4722,19 @@ function F(e, t) {
 		case `number`: return Number.isFinite(e);
 		case `object`: {
 			let n = t ?? /* @__PURE__ */ new WeakSet();
-			return !n.has(e) && (n.add(e), Array.isArray(e) ? e.every((e) => F(e, n)) : !P(e) || Object.getOwnPropertySymbols(e).length > 0 ? !1 : Object.keys(e).every((t) => F(e[t], n)));
+			if (n.has(e)) return !1;
+			n.add(e);
+			try {
+				return Array.isArray(e) ? e.every((e) => P(e, n)) : !N(e) || Object.getOwnPropertySymbols(e).length > 0 ? !1 : Object.keys(e).every((t) => P(e[t], n));
+			} finally {
+				n.delete(e);
+			}
 		}
 		default: return !1;
 	}
 }
-const I = z.custom(F, { message: `default must be JSON-serializable` });
-function L(e, t) {
+const F = z.custom(P, { message: `default must be JSON-serializable` });
+function I(e, t) {
 	switch (e.type) {
 		case `boolean`:
 			typeof e.default != `boolean` && t.addIssue({
@@ -4717,43 +4763,177 @@ function L(e, t) {
 			});
 			break;
 		}
-		case `json`: I.safeParse(e.default).success || t.addIssue({
+		case `json`: F.safeParse(e.default).success || t.addIssue({
 			code: `custom`,
 			path: [`default`],
 			message: `json flag default must be JSON-serializable`
 		});
 	}
 }
-const R = z.object({
+const L = z.record(o, z.discriminatedUnion(`type`, [
+	z.object({
+		type: z.literal(`string`),
+		values: z.tuple([z.string()], z.string()).optional(),
+		required: z.boolean().optional()
+	}),
+	z.object({
+		type: z.literal(`number`),
+		required: z.boolean().optional()
+	}),
+	z.object({
+		type: z.literal(`boolean`),
+		required: z.boolean().optional()
+	})
+])).superRefine((e, t) => {
+	for (let n of [
+		`userId`,
+		`country`,
+		`region`,
+		`city`,
+		`timezone`
+	]) Object.hasOwn(e, n) && e[n]?.type !== `string` && t.addIssue({
+		code: `custom`,
+		path: [n, `type`],
+		message: `built-in trait "${n}" must be a string`
+	});
+});
+const R = z.custom((e) => typeof e == `object` && !!e && !Array.isArray(e), { message: `trait definitions must be an object` }).superRefine((e, t) => {
+	Object.hasOwn(e, `__proto__`) && t.addIssue({
+		code: `custom`,
+		path: [`__proto__`],
+		message: `trait key "__proto__" is reserved`
+	});
+}).pipe(L);
+function z$1(e, t) {
+	if (!e.traits || !e.targeting) return;
+	let n = {
+		userId: { type: `string` },
+		country: { type: `string` },
+		region: { type: `string` },
+		city: { type: `string` },
+		timezone: { type: `string` },
+		...e.traits
+	}, r = (e) => t.addIssue({
+		code: `custom`,
+		path: [`targeting`],
+		message: e
+	}), i = (e) => {
+		e && !Object.hasOwn(n, e) && r(`undeclared bucketing trait "${e}"`);
+	}, a = (e) => {
+		if (e.kind === `group`) {
+			e.conditions.forEach(a);
+			return;
+		}
+		if (e.kind === `percentage`) {
+			i(e.attribute);
+			return;
+		}
+		if (e.kind !== `attribute`) return;
+		if (!Object.hasOwn(n, e.attribute)) {
+			r(`undeclared trait "${e.attribute}"`);
+			return;
+		}
+		let t = n[e.attribute];
+		if (e.operator !== `exists` && e.operator !== `not_exists` && ([
+			`contains`,
+			`startsWith`,
+			`endsWith`
+		].includes(e.operator) && t.type !== `string` && r(`operator ${e.operator} requires a string trait`), [
+			`gt`,
+			`gte`,
+			`lt`,
+			`lte`
+		].includes(e.operator) && t.type !== `number` && t.type !== `string` && r(`operator ${e.operator} requires a number or string trait`), `value` in e)) for (let n of Array.isArray(e.value) ? e.value : [e.value]) (typeof n !== t.type || t.type === `string` && [
+			`eq`,
+			`neq`,
+			`in`,
+			`not_in`
+		].includes(e.operator) && t.values && !t.values.includes(String(n))) && r(`invalid value for trait "${e.attribute}"`);
+	}, o = (e) => {
+		e.kind === `weighted` && i(e.attribute);
+	};
+	o(e.targeting.fallthrough), e.targeting.rules.forEach((e) => {
+		e.conditions.forEach(a), o(e.serve);
+	});
+}
+const B = z.object({
+	enabled: z.boolean(),
+	rules: z.array(y).max(500),
+	fallthrough: u
+}).strict().superRefine((e, t) => {
+	let n = /* @__PURE__ */ new Set();
+	e.rules.forEach((e, r) => {
+		n.has(e.id) && t.addIssue({
+			code: `custom`,
+			path: [
+				`rules`,
+				r,
+				`id`
+			],
+			message: `duplicate rule id`
+		}), n.add(e.id);
+	});
+});
+function V(e, t) {
+	if (!e.targeting) return;
+	let n = (n, r) => {
+		n.kind === `weighted` && !Number.isFinite(n.variations.reduce((e, t) => e + t.weight, 0)) && t.addIssue({
+			code: `custom`,
+			path: r,
+			message: `total weight must be finite`
+		});
+		let i = n.kind === `weighted` ? n.variations.map((e) => e.serve) : [n];
+		for (let n of i) n.kind !== `disabled` && (n.kind !== e.type || n.kind === `variant` && !e.variants?.includes(n.value) || n.kind === `json` && !P(n.value)) && t.addIssue({
+			code: `custom`,
+			path: r,
+			message: `serve must match the flag type and declared variants and contain JSON values`
+		});
+	};
+	n(e.targeting.fallthrough, [`targeting`, `fallthrough`]), e.targeting.rules.forEach((e, t) => n(e.serve, [
+		`targeting`,
+		`rules`,
+		t,
+		`serve`
+	]));
+}
+const H = z.object({
+	type: t,
+	variants: z.array(z.string()).optional(),
+	traits: R.optional(),
+	targeting: B.optional()
+}).superRefine(V).superRefine(z$1);
+const U = z.object({
 	key: o,
 	type: t,
 	default: z.unknown(),
 	description: z.string().optional(),
 	tags: z.array(z.string()).default([]),
-	lifecycle: N.default(`active`),
+	lifecycle: M.default(`active`),
 	variants: z.array(z.string()).optional(),
-	disabled: z.boolean().optional()
+	disabled: z.boolean().optional(),
+	targeting: B.optional(),
+	traits: R.optional()
 });
-const z$1 = R.superRefine(L);
-const B = R.extend({
+const W = U.superRefine(I).superRefine(V).superRefine(z$1);
+const G = U.extend({
 	version: z.number().int().positive(),
 	environmentVersion: z.number().int().positive().optional(),
 	managedBy: n
-}).superRefine(L);
-const V = z.object({
+}).superRefine(I).superRefine(V).superRefine(z$1);
+const K = z.object({
 	version: z.number().int().positive(),
 	environmentVersion: z.number().int().positive().optional()
 });
-const H = z.object({
+const q = z.object({
 	projectId: z.string().min(1),
 	environmentId: z.string().min(1)
 });
-const U = z.object({
+const J = z.object({
 	projectId: z.string(),
 	environmentId: z.string(),
-	flags: z.array(B)
+	flags: z.array(G)
 });
-function W(e, t) {
+function Y(e, t) {
 	let n = /* @__PURE__ */ new Set();
 	for (let [r, i] of e.entries()) n.has(i.key) && t.addIssue({
 		code: `custom`,
@@ -4765,12 +4945,12 @@ function W(e, t) {
 		message: `duplicate flag key "${i.key}"`
 	}), n.add(i.key);
 }
-const G = z.object({
+const X = z.object({
 	projectId: z.string().min(1),
 	environmentId: z.string().min(1),
-	flags: z.array(z$1).max(500)
-}).superRefine((e, t) => W(e.flags, t));
-const K = z.object({
+	flags: z.array(W).max(500)
+}).superRefine((e, t) => Y(e.flags, t));
+const Z = z.object({
 	key: z.string(),
 	op: z.enum([
 		`add`,
@@ -4778,32 +4958,32 @@ const K = z.object({
 		`remove`,
 		`unlinked`
 	]),
-	before: B.optional(),
-	after: z$1.optional(),
+	before: G.optional(),
+	after: W.optional(),
 	message: z.string().optional()
 });
-const q = z.object({
+const Q = z.object({
 	projectId: z.string(),
 	environmentId: z.string(),
-	changes: z.array(K),
-	remoteOnly: z.array(B).default([])
+	changes: z.array(Z),
+	remoteOnly: z.array(G).default([])
 });
-const J = z.object({
+const $ = z.object({
 	projectId: z.string().min(1),
 	environmentId: z.string().min(1),
-	flags: z.array(z$1).max(500),
+	flags: z.array(W).max(500),
 	apply: z.boolean().default(!1),
 	prune: z.boolean().default(!1),
 	force: z.boolean().default(!1),
 	adopt: z.boolean().default(!1),
-	expectedVersions: z.record(z.string(), V).optional()
-}).superRefine((e, t) => W(e.flags, t));
-const Y = z.object({
+	expectedVersions: z.record(z.string(), K).optional()
+}).superRefine((e, t) => Y(e.flags, t));
+const ee = z.object({
 	projectId: z.string(),
 	environmentId: z.string(),
 	applied: z.boolean(),
-	changes: z.array(K),
-	remoteOnly: z.array(B).default([]),
+	changes: z.array(Z),
+	remoteOnly: z.array(G).default([]),
 	forced: z.boolean().default(!1),
 	adopted: z.boolean().default(!1),
 	approvalRequests: z.array(z.string()).default([]),
@@ -4970,10 +5150,32 @@ function goValue(value) {
 	if (typeof value === "object") return `map[string]any{${Object.entries(value).map(([key, entry]) => `${goString(key)}: ${goValue(entry)}`).join(", ")}}`;
 	return JSON.stringify(value);
 }
+function goCondition(c) {
+	const fields = [`Kind: ${goString(c.kind)}`];
+	for (const [key, value] of Object.entries(c)) {
+		if (key === "kind") continue;
+		const name = key === "segmentId" ? "SegmentID" : key[0].toUpperCase() + key.slice(1);
+		fields.push(`${name}: ${key === "conditions" ? `[]config.Condition{${value.map(goCondition).join(", ")}}` : goValue(value)}`);
+	}
+	return `{${fields.join(", ")}}`;
+}
+function goServe(s) {
+	const fields = [`Kind: ${goString(s.kind)}`];
+	for (const [key, value] of Object.entries(s)) {
+		if (key === "kind") continue;
+		fields.push(`${key[0].toUpperCase() + key.slice(1)}: ${key === "variations" ? `[]config.WeightedVariation{${value.map((v) => `{Weight: ${goNumber(v.weight)}, Serve: config.Serve${goServe(v.serve)}}`).join(", ")}}` : goValue(value)}`);
+	}
+	return `{${fields.join(", ")}}`;
+}
+function goTargeting(t) {
+	return `&config.Targeting{Enabled: ${t.enabled}, Rules: []config.Rule{${t.rules.map((r) => `{ID: ${goString(r.id)}, ${r.description !== void 0 ? `Description: ${goString(r.description)}, ` : ""}Conditions: []config.Condition{${r.conditions.map(goCondition).join(", ")}}, Serve: config.Serve${goServe(r.serve)}}`).join(", ")}}, Fallthrough: config.Serve${goServe(t.fallthrough)}}`;
+}
 /** Emits gofmt-clean Go: one block per flag, field values aligned as gofmt does. */
 function generateGoConfigSource(flags, packageName = "main") {
 	const entries = flags.map((flag) => {
 		const fields = [["Type", goString(flag.type)], ["Default", goValue(flag.default)]];
+		if (flag.traits !== void 0) fields.push(["Traits", `map[string]config.TraitDefinition{${Object.entries(flag.traits).map(([key, t]) => `${goString(key)}: {Type: ${goString(t.type)}${"values" in t && t.values ? `, Values: []string{${t.values.map(goString).join(", ")}}` : ""}${t.required ? ", Required: true" : ""}}`).join(", ")}}`]);
+		if (flag.targeting) fields.push(["Targeting", goTargeting(flag.targeting)]);
 		if (flag.variants) fields.push(["Variants", `[]string{${flag.variants.map((v) => goString(v)).join(", ")}}`]);
 		if (flag.description !== void 0) fields.push(["Description", goString(flag.description)]);
 		if (flag.tags.length) fields.push(["Tags", `[]string{${flag.tags.map((v) => goString(v)).join(", ")}}`]);
@@ -4994,7 +5196,7 @@ var Config = config.ShipdConfig${entries.length ? `{\n${entries.join("\n")}\n}`
 
 //#endregion
 //#region src/lib/local-config.ts
-const localFlagsArraySchema = z.array(z$1).superRefine((flags, ctx) => {
+const localFlagsArraySchema = z.array(W).superRefine((flags, ctx) => {
 	const seen = /* @__PURE__ */ new Set();
 	for (const [index, flag] of flags.entries()) {
 		if (seen.has(flag.key)) ctx.addIssue({
@@ -5035,7 +5237,9 @@ async function loadLocalFlags(configFile) {
 		tags: flag.tags ?? [],
 		lifecycle: flag.lifecycle ?? (flag.deprecated === true ? "deprecated" : "active"),
 		variants: flag.variants,
-		disabled: flag.disabled
+		disabled: flag.disabled,
+		targeting: flag.targeting,
+		traits: flag.traits
 	}));
 	const parsed = localFlagsArraySchema.safeParse(candidates);
 	if (!parsed.success) {
@@ -5050,7 +5254,9 @@ async function loadLocalFlags(configFile) {
 		tags: flag.tags,
 		lifecycle: flag.lifecycle,
 		variants: flag.variants,
-		disabled: flag.disabled
+		disabled: flag.disabled,
+		targeting: flag.targeting,
+		traits: flag.traits
 	}));
 }
 function serializeValue(value) {
@@ -5069,6 +5275,8 @@ ${flags.map((flag) => {
 		if (flag.type === "variant" && flag.variants) lines.push(`    variants: ${JSON.stringify(flag.variants)} as const,`, `    default: ${JSON.stringify(flag.default)},`);
 		else if (flag.type === "json") lines.push(`    default: ${serializeValue(flag.default)},`);
 		else lines.push(`    default: ${JSON.stringify(flag.default)},`);
+		if (flag.traits !== void 0) lines.push(`    traits: ${serializeValue(flag.traits)},`);
+		if (flag.targeting !== void 0) lines.push(`    targeting: ${serializeValue(flag.targeting)},`);
 		if (flag.description !== void 0) lines.push(`    description: ${JSON.stringify(flag.description)},`);
 		if (flag.tags.length > 0) lines.push(`    tags: ${JSON.stringify(flag.tags)},`);
 		if (flag.lifecycle === "deprecated") lines.push(`    deprecated: true,`);
@@ -5085,6 +5293,7 @@ function generateTypesSource(flags) {
 			const variants = flag.variants && flag.variants.length > 0 ? flag.variants.map((v) => JSON.stringify(v)).join(" | ") : "string";
 			lines.push(`    variants: ${variants};`);
 		}
+		if (flag.traits !== void 0) lines.push(`    traits: ${serializeTypeLiteral(flag.traits)};`);
 		lines.push(`    default: ${serializeTypeLiteral(flag.default)};`);
 		lines.push(`  };`);
 		return lines.join("\n");
@@ -5097,6 +5306,8 @@ ${flags.length === 0 ? "  // No flags defined in shipd.config.ts\n" : `${entries
 
 export type FlagKey = keyof FlagDefinitions;
 
+export type FlagTraits<K extends FlagKey> = import("shipdit/config").TraitsFor<FlagDefinitions[K]>;
+
 export type BooleanFlagKey = {
   [K in FlagKey]: FlagDefinitions[K]["type"] extends "boolean" ? K : never;
 }[FlagKey];
@@ -5135,10 +5346,12 @@ const DEFINITION_FIELDS = [
 	"type",
 	"default",
 	"disabled",
+	"targeting",
 	"description",
 	"tags",
 	"lifecycle",
-	"variants"
+	"variants",
+	"traits"
 ];
 function formatValue(value) {
 	if (value === void 0) return "undefined";
@@ -5147,9 +5360,11 @@ function formatValue(value) {
 function fieldChanges(before, after) {
 	const fields = {};
 	for (const field of DEFINITION_FIELDS) {
+		if (field === "traits" && after.traits === void 0) continue;
+		if (field === "targeting" && after.targeting === void 0) continue;
 		const from = before[field];
 		const to = after[field];
-		if (JSON.stringify(from ?? null) !== JSON.stringify(to ?? null)) fields[field] = {
+		if (!isDeepStrictEqual(from ?? null, to ?? null)) fields[field] = {
 			from,
 			to
 		};
@@ -5161,7 +5376,8 @@ const DEFINITION_ONLY_FIELDS = [
 	"description",
 	"tags",
 	"lifecycle",
-	"variants"
+	"variants",
+	"traits"
 ];
 function planHasDefinitionChanges(plan) {
 	if (plan.creates.length > 0 || plan.archives.length > 0) return true;
@@ -5390,6 +5606,70 @@ function registerProjectsCommands(program) {
 	});
 }
 
+//#endregion
+//#region src/lib/sync-state.ts
+const stateSchema = z.object({
+	version: z.literal(1),
+	flags: z.record(o, B)
+}).strict();
+function stateFile(runtime, projectId, environmentId) {
+	const identity = JSON.stringify([
+		runtime.apiUrl,
+		projectId,
+		environmentId,
+		path.resolve(runtime.configFile)
+	]);
+	const key = createHash("sha256").update(identity).digest("hex");
+	return path.join(runtime.projectDir ?? path.dirname(runtime.configFile), ".shipd", "sync", `${key}.json`);
+}
+function canonical(value) {
+	if (Array.isArray(value)) return `[${value.map(canonical).join(",")}]`;
+	if (value !== null && typeof value === "object") return `{${Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a.localeCompare(b)).map(([k, v]) => `${JSON.stringify(k)}:${canonical(v)}`).join(",")}}`;
+	return JSON.stringify(value) ?? "null";
+}
+function readSyncState(runtime, projectId, environmentId) {
+	const file = stateFile(runtime, projectId, environmentId);
+	if (!fs.existsSync(file)) return;
+	try {
+		const raw = JSON.parse(fs.readFileSync(file, "utf8"));
+		if (raw?.flags && Object.hasOwn(raw.flags, "__proto__")) throw new Error("reserved flag key");
+		return stateSchema.parse(raw);
+	} catch {
+		throw new CliError("validation_error", `Invalid sync baseline: ${file}`);
+	}
+}
+function writeSyncState(runtime, projectId, environmentId, flags) {
+	const file = stateFile(runtime, projectId, environmentId);
+	fs.mkdirSync(path.dirname(file), { recursive: true });
+	const state = {
+		version: 1,
+		flags: Object.fromEntries(flags.filter((f) => f.targeting !== void 0).map((f) => [f.key, f.targeting]))
+	};
+	const temp = `${file}.${process.pid}.tmp`;
+	try {
+		fs.writeFileSync(temp, JSON.stringify(state, null, 2) + "\n", { mode: 384 });
+		fs.renameSync(temp, file);
+	} finally {
+		fs.rmSync(temp, { force: true });
+	}
+}
+function assertNoRemoteTargetingChanges(state, changes) {
+	if (!state) return;
+	for (const change of changes) {
+		if (change.after?.targeting === void 0) continue;
+		const base = Object.hasOwn(state.flags, change.key) ? state.flags[change.key] : void 0;
+		if (base && canonical(base) !== canonical(change.before?.targeting) && canonical(change.after.targeting) !== canonical(change.before?.targeting)) throw new CliError("conflict", `Flag "${change.key}" targeting changed in the dashboard since the last sync. Pull and reconcile, or push --force to overwrite.`, { exitCode: 3 });
+	}
+}
+function assertPullPreservesLocalTargeting(state, local, remote) {
+	if (!state) return;
+	const byKey = new Map(remote.map((f) => [f.key, f]));
+	for (const flag of local) {
+		const base = Object.hasOwn(state.flags, flag.key) ? state.flags[flag.key] : void 0;
+		if (flag.targeting !== void 0 && canonical(flag.targeting) !== canonical(base) && canonical(flag.targeting) !== canonical(byKey.get(flag.key)?.targeting)) throw new CliError("conflict", `Pull would overwrite local targeting changes for "${flag.key}". Save your edits separately and reconcile them, or pull --force.`, { exitCode: 3 });
+	}
+}
+
 //#endregion
 //#region src/lib/go-typegen.ts
 const GO_KEYWORDS = new Set("break default func interface select case defer go map struct chan else goto package switch const fallthrough if range type continue for import return var".split(" "));
@@ -5410,6 +5690,29 @@ function generateGoTypesSource(flags, packageName = "flags") {
 		const name = claim(goName(flag.key), flag.key);
 		const keyName = claim(`${name}Key`, flag.key);
 		const lines = [`const ${keyName} = ${goString(flag.key)}`];
+		if (flag.traits !== void 0) {
+			const traitsName = claim(`${name}Traits`, flag.key);
+			const seen = /* @__PURE__ */ new Set();
+			const fields = [];
+			const assignments = [];
+			for (const [key, trait] of Object.entries(flag.traits)) {
+				const field = goName(key);
+				if (field === "Context" || seen.has(field)) throw new CliError("validation_error", `Go trait identifier ${field} collides for flag ${flag.key}`);
+				seen.add(field);
+				let type = trait.type === "string" ? "string" : trait.type === "number" ? "float64" : "bool";
+				if (trait.type === "string" && trait.values) {
+					type = claim(`${name}${field}Trait`, flag.key);
+					lines.push(`type ${type} string`);
+					for (const value of trait.values) lines.push(`const ${claim(`${type}${goName(value)}`, flag.key)} ${type} = ${goString(value)}`);
+				}
+				fields.push(`\t${field} *${type}`);
+				const scalar = trait.type === "string" && trait.values ? `string(*t.${field})` : `*t.${field}`;
+				if (trait.required) assignments.push(`\tif t.${field} == nil { return shipd.EvaluationContext{}, errors.New(${goString(`missing required trait ${key} for flag ${flag.key}`)}) }`);
+				assignments.push(`\tif t.${field} != nil { attributes[${goString(key)}] = ${scalar} }`);
+			}
+			lines.push(`// ${traitsName} uses pointers to distinguish missing inputs from explicit zero values.\ntype ${traitsName} struct {\n${fields.join("\n")}\n}`);
+			lines.push(`func (t ${traitsName}) Context(userID string) (shipd.EvaluationContext, error) {\n\tattributes := map[string]any{}\n${assignments.join("\n")}\n\treturn shipd.EvaluationContext{UserID: userID, Attributes: attributes}, nil\n}`);
+		}
 		let returnType;
 		let expression;
 		switch (flag.type) {
@@ -5443,7 +5746,7 @@ package ${packageName}
 
 import (
 \t"encoding/json"
-${flags.length ? "	shipd \"github.com/alasti-company/useshipd.com/sdks/go\"\n" : ""})
+${flags.some((f) => Object.values(f.traits ?? {}).some((t) => t.required)) ? "	\"errors\"\n" : ""}${flags.length ? "	shipd \"github.com/alasti-company/useshipd.com/sdks/go\"\n" : ""})
 
 // Defaults returns a fresh map of the config's defaults for shipd.Options.
 func Defaults() map[string]any {
@@ -5483,7 +5786,7 @@ function writeTypegen(prepared) {
 //#endregion
 //#region src/commands/pull.ts
 function registerPullCommand(program) {
-	program.command("pull").description("Regenerate the flag config from the server and run typegen").action(async (_opts, command) => {
+	program.command("pull").description("Regenerate the flag config from the server and run typegen").option("--force", "Overwrite unsynced local targeting", false).action(async (opts, command) => {
 		const runtime = getRuntime(command);
 		const client = await createCliApiClient(runtime);
 		const { projectId, environmentId } = await resolveIds(client, runtime);
@@ -5498,8 +5801,12 @@ function registerPullCommand(program) {
 			tags: flag.tags,
 			lifecycle: flag.lifecycle,
 			variants: flag.variants,
-			disabled: flag.disabled
+			disabled: flag.disabled,
+			targeting: flag.targeting,
+			traits: flag.traits
 		}));
+		const baseline = !opts.force ? readSyncState(runtime, projectId, environmentId) : void 0;
+		if (baseline && fs.existsSync(runtime.configFile)) assertPullPreservesLocalTargeting(baseline, await loadLocalFlags(runtime.configFile), localFlags);
 		const packageName = path.extname(runtime.configFile) === ".go" && fs.existsSync(runtime.configFile) ? goPackageClause(fs.readFileSync(runtime.configFile, "utf8")).name : "main";
 		const source = path.extname(runtime.configFile) === ".json" ? generateJSONConfigSource(localFlags) : path.extname(runtime.configFile) === ".go" ? generateGoConfigSource(localFlags, packageName) : generateShipdConfigSource(localFlags);
 		const preparedTypes = prepareTypegen(runtime, localFlags);
@@ -5507,6 +5814,7 @@ function registerPullCommand(program) {
 		fs.mkdirSync(path.dirname(outPath), { recursive: true });
 		fs.writeFileSync(outPath, source);
 		const types = writeTypegen(preparedTypes);
+		writeSyncState(runtime, projectId, environmentId, localFlags);
 		printResult(runtime, {
 			written: outPath,
 			flagCount: localFlags.length,
@@ -5548,11 +5856,13 @@ function registerPushCommand(program) {
 			force,
 			adopt
 		}).catch(mapApiError);
+		if (!force && localFlags.some((f) => f.targeting !== void 0)) assertNoRemoteTargetingChanges(readSyncState(runtime, projectId, environmentId), planned.changes);
 		const plan = buildSyncPlan(planned.changes);
 		const remoteOnly = planned.remoteOnly ?? [];
 		warnRemoteOnly(remoteOnly.map((flag) => flag.key), runtime.json);
 		if (!runtime.json) console.log(planIsEmpty(plan) ? "Nothing to push." : formatSyncPlan(plan));
 		if (!planHasDrift(plan)) {
+			if (localFlags.some((f) => f.targeting !== void 0)) writeSyncState(runtime, projectId, environmentId, localFlags);
 			if (runtime.json) console.log(JSON.stringify({
 				plan,
 				remoteOnly
@@ -5577,6 +5887,7 @@ function registerPushCommand(program) {
 		const types = writeTypegen(preparedTypes);
 		const approvalRequests = applied.approvalRequests ?? [];
 		const drafts = applied.drafts ?? [];
+		if (approvalRequests.length === 0 && drafts.length === 0 && localFlags.some((f) => f.targeting !== void 0)) writeSyncState(runtime, projectId, environmentId, localFlags);
 		printResult(runtime, {
 			plan: appliedPlan,
 			remoteOnly,