npm - @shipdit/cli - Versions diffs - 0.7.2 → 0.8.0 - Mend

@shipdit/cli 0.7.2 → 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/index.mjs CHANGED Viewed

@@ -3,13 +3,13 @@ import { Command, CommanderError, Option } from "commander";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { z } from "zod";
+import { z as z$1 } from "zod";
 import { createHash } from "node:crypto";
 import { createJiti } from "jiti";
 import { spawn } from "node:child_process";
 import { isDeepStrictEqual } from "node:util";
-//#region src/lib/errors.ts
+// src/lib/errors.ts
 var CliError = class extends Error {
 	code;
 	exitCode;
@@ -27,8 +27,7 @@ function exitCodeForError(error) {
 	return 1;
 }
-//#endregion
-//#region src/lib/config.ts
+// src/lib/config.ts
 /** Hosted control plane. Used when no flag, env, project, global, or credential URL is set. */
 const DEFAULT_API_URL = "https://api.useshipd.com";
 function readJsonFile(filePath) {
@@ -109,8 +108,7 @@ function resolveRuntimeConfig(flags, options) {
 	};
 }
-//#endregion
-//#region ../../node_modules/.pnpm/hono@4.13.13/node_modules/hono/dist/client/utils.js
+// ../../node_modules/.pnpm/hono@4.13.18/node_modules/hono/dist/client/utils.js
 const mergePath = (base, path) => {
 	base = base.replace(/\/+$/, "");
 	base = base + "/";
@@ -160,14 +158,13 @@ function deepMerge(target, source) {
 	return merged;
 }
-//#endregion
-//#region ../../node_modules/.pnpm/hono@4.13.13/node_modules/hono/dist/utils/cookie.js
+// ../../node_modules/.pnpm/hono@4.13.18/node_modules/hono/dist/utils/cookie.js
 const validCookieNameRegEx = /^[\w!#$%&'*.^`|~+-]+$/;
 const _serialize = (name, value, opt = {}) => {
 	if (!validCookieNameRegEx.test(name)) throw new Error("Invalid cookie name");
 	let cookie = `${name}=${value}`;
-	if (name.startsWith("__Secure-") && !opt.secure) throw new Error("__Secure- Cookie must have Secure attributes");
-	if (name.startsWith("__Host-")) {
+	if (/^__secure-/i.test(name) && !opt.secure) throw new Error("__Secure- Cookie must have Secure attributes");
+	if (/^__host-/i.test(name)) {
 		if (!opt.secure) throw new Error("__Host- Cookie must have Secure attributes");
 		if (opt.path !== "/") throw new Error("__Host- Cookie must have Path attributes with \"/\"");
 		if (opt.domain) throw new Error("__Host- Cookie must not have Domain attributes");
@@ -203,8 +200,7 @@ const serialize = (name, value, opt) => {
 	return _serialize(name, value, opt);
 };
-//#endregion
-//#region ../../node_modules/.pnpm/hono@4.13.13/node_modules/hono/dist/client/client.js
+// ../../node_modules/.pnpm/hono@4.13.18/node_modules/hono/dist/client/client.js
 const createProxy = (callback, path) => {
 	return new Proxy(() => {}, {
 		get(_obj, key) {
@@ -345,8 +341,7 @@ const hc = (baseUrl, options) => createProxy(function proxyCallback(opts) {
 	return req;
 }, []);
-//#endregion
-//#region ../api-client/dist/index.mjs
+// ../api-client/dist/index.mjs
 const t$2 = [
 	`unauthenticated`,
 	`forbidden`,
@@ -483,6 +478,8 @@ function N$1(e) {
 			addEvidence: (e, t) => M$1(a.release.addEvidence.$post, e, t)
 		},
 		me: {
+			notifications: (e) => A$1(r.me.notifications.list.$post, e),
+			readNotifications: (e) => A$1(r.me.notifications.read.$post, e),
 			get: (e = {}) => A$1(r.me.$post, e),
 			feedback: (e) => A$1(r.me.feedback.$post, e)
 		},
@@ -490,6 +487,7 @@ function N$1(e) {
 			listTransfers: (e = {}) => A$1(i.project.listTransfers.$post, e),
 			requestTransfer: (e) => A$1(i.project.requestTransfer.$post, e),
 			decideTransfer: (e) => A$1(i.project.decideTransfer.$post, e),
+			summaries: (e = {}) => A$1(i.project.summaries.$post, e),
 			list: (e = {}) => A$1(i.project.list.$post, e),
 			create: (e) => A$1(i.project.create.$post, e),
 			update: (e) => A$1(i.project.update.$post, e),
@@ -523,6 +521,7 @@ function N$1(e) {
 			publishEnvironments: (e) => A$1(P.flag.publishEnvironments.$post, e),
 			updateEnvironment: (e) => A$1(P.flag.updateEnvironment.$post, e),
 			toggleEnvironment: (e) => A$1(P.flag.toggleEnvironment.$post, e),
+			listProjectEnvironmentStates: (e) => A$1(P.flag.listProjectEnvironmentStates.$post, e),
 			listEnvironmentStates: (e) => A$1(P.flag.listEnvironmentStates.$post, e),
 			pull: (e) => A$1(P.flag.pull.$post, e),
 			diff: (e) => A$1(P.flag.diff.$post, e),
@@ -559,6 +558,7 @@ function N$1(e) {
 			archive: (e) => A$1(B.segment.archive.$post, e),
 			listArchived: (e) => A$1(B.segment.listArchived.$post, e),
 			restore: (e) => A$1(B.segment.restore.$post, e),
+			listProjectEnvironmentStates: (e) => A$1(B.segment.listProjectEnvironmentStates.$post, e),
 			listEnvironmentStates: (e) => A$1(B.segment.listEnvironmentStates.$post, e),
 			updateEnvironment: (e) => A$1(B.segment.updateEnvironment.$post, e)
 		},
@@ -592,6 +592,7 @@ function N$1(e) {
 			update: (e) => A$1(W.eventWebhook.update.$post, e),
 			delete: (e) => A$1(W.eventWebhook.delete.$post, e),
 			test: (e, t) => M$1(W.eventWebhook.test.$post, e, t),
+			export: (e) => A$1(W.eventWebhook.export.$post, e),
 			deliveries: (e) => A$1(W.eventWebhook.deliveries.$post, e),
 			attempts: (e) => A$1(W.eventWebhook.attempts.$post, e),
 			redeliver: (e, t) => M$1(W.eventWebhook.redeliver.$post, e, t),
@@ -613,6 +614,9 @@ function N$1(e) {
 		},
 		usage: { get: (e = {}) => A$1(J.usage.get.$post, e) },
 		approval: {
+			listDeletions: () => A$1(I.approval.listDeletions.$post, {}),
+			getDeletion: (e) => A$1(I.approval.getDeletion.$post, e),
+			decideDeletion: (e) => A$1(I.approval.decideDeletion.$post, e),
 			listPolicies: (e = {}) => A$1(I.approval.listPolicies.$post, e),
 			createPolicy: (e) => A$1(I.approval.createPolicy.$post, e),
 			updatePolicy: (e) => A$1(I.approval.updatePolicy.$post, e),
@@ -645,6 +649,8 @@ function N$1(e) {
 			setRequireTwoFactor: (e) => A$1(X.sso.setRequireTwoFactor.$post, e)
 		},
 		scim: {
+			getGroupMappings: (e = {}) => A$1(Z.scim.getGroupMappings.$post, e),
+			setGroupTeams: (e) => A$1(Z.scim.setGroupTeams.$post, e),
 			getConnection: (e = {}) => A$1(Z.scim.getConnection.$post, e),
 			createConnection: (e = { creationRequestId: crypto.randomUUID() }) => A$1(Z.scim.createConnection.$post, e),
 			rotateCredential: (e) => A$1(Z.scim.rotateCredential.$post, e),
@@ -678,8 +684,7 @@ function N$1(e) {
 	};
 }
-//#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.2_@opentelemet_0d5083f53bdf976e0320d8b98ec7aa98/node_modules/@better-auth/core/dist/utils/error-codes.mjs
+// ../../node_modules/.pnpm/@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-fetch+fetch@1.3.3_@openteleme_210612f248ef93e041cc6a64ad006635/node_modules/@better-auth/core/dist/utils/error-codes.mjs
 function defineErrorCodes(codes) {
 	return Object.fromEntries(Object.entries(codes).map(([key, value]) => [key, {
 		code: key,
@@ -688,8 +693,7 @@ function defineErrorCodes(codes) {
 	}]));
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-call@1.4.0_zod@4.6.7/node_modules/better-call/dist/error.mjs
+// ../../node_modules/.pnpm/better-call@1.4.5_zod@4.6.7/node_modules/better-call/dist/error.mjs
 function isErrorStackTraceLimitWritable() {
 	const desc = Object.getOwnPropertyDescriptor(Error, "stackTraceLimit");
 	if (desc === void 0) return Object.isExtensible(Error);
@@ -791,7 +795,7 @@ var InternalAPIError = class extends Error {
 	headers;
 	statusCode;
 	constructor(status = "INTERNAL_SERVER_ERROR", body = void 0, headers = {}, statusCode = typeof status === "number" ? status : statusCodes[status]) {
-		super(body?.message, body?.cause ? { cause: body.cause } : void 0);
+		super(body?.message, body && "cause" in body ? { cause: body.cause } : void 0);
 		this.status = status;
 		this.body = body;
 		this.headers = headers;
@@ -800,13 +804,21 @@ var InternalAPIError = class extends Error {
 		this.status = status;
 		this.headers = headers;
 		this.statusCode = statusCode;
+		if (body && "cause" in body) {
+			const { cause, ...publicBody } = body;
+			this.body = Object.defineProperty(publicBody, "cause", {
+				value: cause,
+				writable: true,
+				configurable: true
+			});
+			return;
+		}
 		this.body = body;
 	}
 };
 const APIError = makeErrorForHideStackFrame(InternalAPIError, Error);
-//#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.2_@opentelemet_0d5083f53bdf976e0320d8b98ec7aa98/node_modules/@better-auth/core/dist/error/index.mjs
+// ../../node_modules/.pnpm/@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-fetch+fetch@1.3.3_@openteleme_210612f248ef93e041cc6a64ad006635/node_modules/@better-auth/core/dist/error/index.mjs
 var BetterAuthError = class extends Error {
 	constructor(message, options) {
 		super(message, options);
@@ -816,8 +828,7 @@ var BetterAuthError = class extends Error {
 	}
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/access/access.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/access/access.mjs
 function unknownResourceResponse(requestedResource) {
 	return {
 		success: false,
@@ -893,8 +904,24 @@ function createAccessControl(s) {
 	};
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/two-factor/error-code.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/organization/roles.mjs
+/**
+* Splits a role value into a list of trimmed, non-empty role names.
+*
+* Roles are stored as a comma separated string (`"admin,owner"`), and may be
+* submitted either as that string or as an array. Any whitespace around a
+* role name is removed so that `"admin, owner"`, `["admin", " owner"]` and
+* `"admin,owner"` all resolve to the same roles.
+*
+* Every role comparison and every write of a role column must go through this
+* helper (or `parseRoles`), so a padded role name can never be stored in a
+* form that one check matches and another does not.
+*/
+function parseRoleList(roles) {
+	return (Array.isArray(roles) ? roles : [roles]).flatMap((role) => role.split(",")).map((role) => role.trim()).filter(Boolean);
+}
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/two-factor/error-code.mjs
 const TWO_FACTOR_ERROR_CODES = defineErrorCodes({
 	OTP_NOT_ENABLED: "OTP not enabled",
 	OTP_NOT_CONFIGURED: "OTP is not available",
@@ -911,16 +938,13 @@ const TWO_FACTOR_ERROR_CODES = defineErrorCodes({
 	INVALID_TWO_FACTOR_COOKIE: "Invalid two factor cookie"
 });
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/package.mjs
-var version = "1.7.7";
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/package.mjs
+var version = "1.7.22";
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/version.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/version.mjs
 const PACKAGE_VERSION$3 = version;
-//#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.2_@opentelemet_0d5083f53bdf976e0320d8b98ec7aa98/node_modules/@better-auth/core/dist/utils/url.mjs
+// ../../node_modules/.pnpm/@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-fetch+fetch@1.3.3_@openteleme_210612f248ef93e041cc6a64ad006635/node_modules/@better-auth/core/dist/utils/url.mjs
 /**
 * Schemes that execute or embed code when navigated to or accepted as a
 * redirect target. These are never safe as an OAuth `redirect_uri` or as a
@@ -951,8 +975,7 @@ function isSafeUrlScheme(value) {
 	return !DANGEROUS_URL_SCHEMES.includes(parsed.protocol);
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/two-factor/client.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/two-factor/client.mjs
 const twoFactorClient = (options) => {
 	return {
 		id: "two-factor",
@@ -989,8 +1012,7 @@ const twoFactorClient = (options) => {
 	};
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/admin/access/statement.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/admin/access/statement.mjs
 const defaultStatements$1 = {
 	user: [
 		"create",
@@ -1002,6 +1024,7 @@ const defaultStatements$1 = {
 		"delete",
 		"set-password",
 		"set-email",
+		"set-phone",
 		"get",
 		"update"
 	],
@@ -1022,6 +1045,7 @@ const adminAc$1 = defaultAc$1.newRole({
 		"delete",
 		"set-password",
 		"set-email",
+		"set-phone",
 		"get",
 		"update"
 	],
@@ -1040,8 +1064,7 @@ const defaultRoles$1 = {
 	user: userAc
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/admin/error-codes.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/admin/error-codes.mjs
 const ADMIN_ERROR_CODES = defineErrorCodes({
 	FAILED_TO_CREATE_USER: "Failed to create user",
 	USER_ALREADY_EXISTS: "User already exists.",
@@ -1065,11 +1088,16 @@ const ADMIN_ERROR_CODES = defineErrorCodes({
 	YOU_CANNOT_IMPERSONATE_ADMINS: "You cannot impersonate admins",
 	INVALID_ROLE_TYPE: "Invalid role type",
 	YOU_ARE_NOT_ALLOWED_TO_SET_USERS_EMAIL: "You are not allowed to update users email",
-	PASSWORD_CANNOT_BE_UPDATED_VIA_UPDATE_USER: "Password cannot be updated through update-user. Use the set-user-password endpoint instead"
+	YOU_ARE_NOT_ALLOWED_TO_SET_USERS_PHONE_NUMBER: "You are not allowed to update users phone number",
+	PASSWORD_CANNOT_BE_UPDATED_VIA_UPDATE_USER: "Password cannot be updated through update-user. Use the set-user-password endpoint instead",
+	USER_ID_CANNOT_BE_UPDATED: "User id cannot be updated"
 });
-//#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.2_@opentelemet_0d5083f53bdf976e0320d8b98ec7aa98/node_modules/@better-auth/core/dist/env/env-impl.mjs
+// ../../node_modules/.pnpm/@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-fetch+fetch@1.3.3_@openteleme_210612f248ef93e041cc6a64ad006635/node_modules/@better-auth/core/dist/env/runtime.mjs
+const isDeno = () => "Deno" in globalThis;
+const isBun = () => "Bun" in globalThis;
+// ../../node_modules/.pnpm/@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-fetch+fetch@1.3.3_@openteleme_210612f248ef93e041cc6a64ad006635/node_modules/@better-auth/core/dist/env/env-impl.mjs
 const _envShim = Object.create(null);
 const _getEnv = (useShim) => globalThis.process?.env || globalThis.Deno?.env.toObject() || globalThis.__env__ || (useShim ? _envShim : globalThis);
 const env = new Proxy(_envShim, {
@@ -1101,8 +1129,8 @@ const nodeENV = env.NODE_ENV ?? "";
 */
 function getEnvVar(key, fallback) {
 	if (typeof process !== "undefined" && process.env) return process.env[key] ?? fallback;
-	if (typeof Deno !== "undefined") return Deno.env.get(key) ?? fallback;
-	if (typeof Bun !== "undefined") return Bun.env[key] ?? fallback;
+	if (isDeno()) return Deno.env.get(key) ?? fallback;
+	if (isBun()) return Bun.env[key] ?? fallback;
 	return fallback;
 }
 /**
@@ -1132,8 +1160,7 @@ const ENV = Object.freeze({
 	}
 });
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/utils/url.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/utils/url.mjs
 const SLASH_CHAR_CODE = "/".charCodeAt(0);
 function trimTrailingSlashes(value) {
 	let end = value.length;
@@ -1211,8 +1238,7 @@ function getOrigin(url) {
 	}
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/admin/has-permission.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/admin/has-permission.mjs
 const hasPermission = (input) => {
 	if (input.userId && input.options?.adminUserIds?.includes(input.userId)) return true;
 	if (!input.permissions) return false;
@@ -1222,8 +1248,7 @@ const hasPermission = (input) => {
 	return false;
 };
-//#endregion
-//#region ../../node_modules/.pnpm/defu@6.1.7/node_modules/defu/dist/defu.mjs
+// ../../node_modules/.pnpm/defu@6.1.7/node_modules/defu/dist/defu.mjs
 function isPlainObject$1(value) {
 	if (value === null || typeof value !== "object") return false;
 	const prototype = Object.getPrototypeOf(value);
@@ -1263,8 +1288,7 @@ const defuArrayFn = createDefu((object, key, currentValue) => {
 	}
 });
-//#endregion
-//#region ../../node_modules/.pnpm/@better-fetch+fetch@1.3.2/node_modules/@better-fetch/fetch/dist/index.js
+// ../../node_modules/.pnpm/@better-fetch+fetch@1.3.3/node_modules/@better-fetch/fetch/dist/index.js
 var BetterFetchError = class extends Error {
 	constructor(status, statusText, error) {
 		super(statusText || status.toString(), { cause: error });
@@ -1367,6 +1391,36 @@ function parseMethodModifier(path) {
 		path: separator === -1 ? path : path.slice(separator + 1)
 	};
 }
+/**
+* Matches the scheme, `//` and host at the start of a URL that names its own
+* host, such as `https://example.com` in `https://example.com/users`.
+*
+* @see https://www.rfc-editor.org/rfc/rfc3986#section-3
+*/
+const ORIGIN_RE = /^[a-z][a-z\d+.-]*:\/\/[^/?#]+/i;
+/**
+* Matches the slashes at the start of a path, such as `///` in `///users`.
+*/
+const LEADING_SLASHES_RE = /^\/+/;
+/**
+* Removes every slash at the end, so `"a//"` becomes `"a"`. A loop rather than
+* a regex, as a pattern anchored at the end backtracks over a long run of
+* slashes.
+*/
+function withoutTrailingSlashes(value) {
+	let end = value.length;
+	while (end > 0 && value[end - 1] === "/") end--;
+	return value.slice(0, end);
+}
+/**
+* Splits at the first occurrence of the separator, so a separator inside the
+* remainder is kept. `"a?b?c"` splits into `"a"` and `"b?c"`.
+*/
+function splitOnce(value, separator) {
+	const index = value.indexOf(separator);
+	if (index === -1) return [value, void 0];
+	return [value.slice(0, index), value.slice(index + 1)];
+}
 const isReservedPathSegment = (value) => value === "." || value === "..";
 const encodeLiteralPathSegment = (segment) => segment.split(":").map((part) => encodeURIComponent(part)).join(":");
 function resolvePathSegment(segment, pathParams) {
@@ -1375,20 +1429,25 @@ function resolvePathSegment(segment, pathParams) {
 	if (isReservedPathSegment(pathParam)) throw new TypeError("Path parameters cannot be reserved path segments");
 	return encodeURIComponent(pathParam);
 }
+function getPathParams(path, params) {
+	const pathParams = /* @__PURE__ */ new Map();
+	if (params) if (Array.isArray(params)) {
+		const paramPaths = path.split("/").filter((p) => p.startsWith(":"));
+		for (const [index, key] of paramPaths.entries()) {
+			const value = params[index];
+			pathParams.set(key, String(value));
+		}
+	} else for (const [key, value] of Object.entries(params)) pathParams.set(`:${key}`, String(value));
+	return pathParams;
+}
 /**
-* Normalize URL
+* Replaces `:name` segments with their encoded params.
 */
-function getURL$1(url, option) {
-	const { baseURL, params, query } = option || {
-		query: {},
-		params: {},
-		baseURL: ""
-	};
-	let basePath = url.startsWith("http") ? url.split("/").slice(0, 3).join("/") : baseURL || "";
-	const { path: requestPath } = parseMethodModifier(url);
-	if (requestPath !== url) url = `/${requestPath}`;
-	if (!basePath.endsWith("/")) basePath += "/";
-	let [path, urlQuery] = url.replace(basePath, "").split("?");
+function fillPath(path, params) {
+	const pathParams = getPathParams(path, params);
+	return path.split("/").map((segment) => resolvePathSegment(segment, pathParams)).join("/");
+}
+function serializeQuery(urlQuery, query) {
 	const queryParams = new URLSearchParams(urlQuery);
 	for (const [key, value] of Object.entries(query || {})) {
 		if (value == null) continue;
@@ -1400,20 +1459,43 @@ function getURL$1(url, option) {
 		} else serializedValue = JSON.stringify(value);
 		queryParams.set(key, serializedValue);
 	}
-	const pathParams = /* @__PURE__ */ new Map();
-	if (params) if (Array.isArray(params)) {
-		const paramPaths = path.split("/").filter((p) => p.startsWith(":"));
-		for (const [index, key] of paramPaths.entries()) {
-			const value = params[index];
-			pathParams.set(key, String(value));
-		}
-	} else for (const [key, value] of Object.entries(params)) pathParams.set(`:${key}`, String(value));
-	path = path.split("/").map((segment) => resolvePathSegment(segment, pathParams)).join("/");
-	path = path.replace(/^\/+/, "");
-	let queryParamString = queryParams.toString();
-	queryParamString = queryParamString.length > 0 ? `?${queryParamString}`.replace(/\+/g, "%20") : "";
-	if (!basePath.startsWith("http")) return `${basePath}${path}${queryParamString}`;
-	return new URL(`${path}${queryParamString}`, basePath);
+	const queryParamString = queryParams.toString();
+	return queryParamString.length > 0 ? `?${queryParamString}`.replace(/\+/g, "%20") : "";
+}
+function withoutBase(input, baseURL) {
+	if (!baseURL) return input;
+	const basePath = `${withoutTrailingSlashes(baseURL)}/`;
+	return input.startsWith(basePath) ? input.slice(basePath.length) : input;
+}
+/**
+* Appends a path and query to a base as strings, with exactly one slash at the
+* boundary. The path never decides the scheme or host. The base's own query
+* comes first, and its fragment is dropped as it belongs to the base document.
+*/
+function joinURL(base, path, urlQuery, query) {
+	const [baseWithoutHash] = splitOnce(base, "#");
+	const [basePath, baseQuery = ""] = splitOnce(baseWithoutHash, "?");
+	const relativePath = path.replace(LEADING_SLASHES_RE, "");
+	const search = serializeQuery(`${baseQuery}&${urlQuery !== null && urlQuery !== void 0 ? urlQuery : ""}`, query);
+	const href = `${withoutTrailingSlashes(basePath)}/${relativePath}${search}`;
+	return ORIGIN_RE.test(href) ? new URL(href) : href;
+}
+/**
+* Normalize URL
+*/
+function getURL$1(url, option) {
+	var _input$match, _ref;
+	const { baseURL, params, query } = option || {
+		query: {},
+		params: {},
+		baseURL: ""
+	};
+	const { path: requestPath } = parseMethodModifier(url);
+	const input = requestPath === url ? url : `/${requestPath}`;
+	const origin = (_input$match = input.match(ORIGIN_RE)) === null || _input$match === void 0 ? void 0 : _input$match[0];
+	const [path, urlQuery] = splitOnce(origin ? input.slice(origin.length) : withoutBase(input, baseURL), "?");
+	const filledPath = fillPath(path, params);
+	return joinURL((_ref = origin !== null && origin !== void 0 ? origin : baseURL) !== null && _ref !== void 0 ? _ref : "", filledPath, urlQuery, query);
 }
 const getAuthHeader = async (options) => {
 	const headers = {};
@@ -1483,6 +1565,15 @@ function getFetch(options) {
 	if (typeof window !== "undefined" && isFunction(window.fetch)) return window.fetch;
 	throw new Error("No fetch implementation found");
 }
+function isPayloadMethod(method) {
+	if (!method) return false;
+	return [
+		"POST",
+		"PUT",
+		"PATCH",
+		"DELETE"
+	].includes(method.toUpperCase());
+}
 function mergeHeaders(...sources) {
 	const merged = {};
 	for (const source of sources) {
@@ -1521,7 +1612,7 @@ function getBody(options, headers) {
 	if (getMediaType(headers) === "application/x-www-form-urlencoded") return new URLSearchParams(body).toString();
 	return JSON.stringify(body);
 }
-function getMethod$1(url, options) {
+function getMethod(url, options) {
 	if (options === null || options === void 0 ? void 0 : options.method) return options.method.toUpperCase();
 	const { method } = parseMethodModifier(url);
 	if (method) return method.toUpperCase();
@@ -1609,7 +1700,7 @@ const betterFetch = async (url, options) => {
 	const _url = getURL$1(__url, opts);
 	const headers = await getHeaders(opts);
 	const body = getBody(opts, headers);
-	const method = getMethod$1(__url, opts);
+	const method = getMethod(__url, opts);
 	const context = _objectSpread2(_objectSpread2({}, opts), {}, {
 		url: _url,
 		headers,
@@ -1813,14 +1904,7 @@ const createFetch = (config) => {
 	return $fetch;
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/parser.mjs
-const PROTO_POLLUTION_PATTERNS = {
-	proto: /"(?:_|\\u0{2}5[Ff]){2}(?:p|\\u0{2}70)(?:r|\\u0{2}72)(?:o|\\u0{2}6[Ff])(?:t|\\u0{2}74)(?:o|\\u0{2}6[Ff])(?:_|\\u0{2}5[Ff]){2}"\s*:/,
-	constructor: /"(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)"\s*:/,
-	protoShort: /"__proto__"\s*:/,
-	constructorShort: /"constructor"\s*:/
-};
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/parser.mjs
 const JSON_SIGNATURE = /^\s*["[{]|^\s*-?\d{1,16}(\.\d{1,17})?([Ee][+-]?\d+)?\s*$/;
 const SPECIAL_VALUES = {
 	true: true,
@@ -1856,14 +1940,10 @@ function betterJSONParse(value, options = {}) {
 		if (strict) throw new SyntaxError("[better-json] Invalid JSON");
 		return value;
 	}
-	if (Object.entries(PROTO_POLLUTION_PATTERNS).some(([key, pattern]) => {
-		const matches = pattern.test(trimmed);
-		if (matches && warnings) console.warn(`[better-json] Detected potential prototype pollution attempt using ${key} pattern`);
-		return matches;
-	}) && strict) throw new Error("[better-json] Potential prototype pollution attempt detected");
 	try {
 		const secureReviver = (key, value) => {
 			if (key === "__proto__" || key === "constructor" && value && typeof value === "object" && "prototype" in value) {
+				if (strict) throw new Error("[better-json] Potential prototype pollution attempt detected");
 				if (warnings) console.warn(`[better-json] Dropping "${key}" key to prevent prototype pollution`);
 				return;
 			}
@@ -1883,8 +1963,7 @@ function parseJSON(value, options = { strict: true }) {
 	return betterJSONParse(value, options);
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
 const defaultStatements = {
 	organization: ["update", "delete"],
 	member: [
@@ -1959,11 +2038,10 @@ const defaultRoles = {
 	member: memberAc
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/organization/permission.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/organization/permission.mjs
 const hasPermissionFn = (input, acRoles) => {
 	if (!input.permissions) return false;
-	const roles = input.role.split(",");
+	const roles = parseRoleList(input.role);
 	const creatorRole = input.options.creatorRole || "owner";
 	const isCreator = roles.includes(creatorRole);
 	const allowCreatorsAllPermissions = input.allowCreatorAllPermissions || false;
@@ -1972,8 +2050,7 @@ const hasPermissionFn = (input, acRoles) => {
 	return false;
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
 const ORGANIZATION_ERROR_CODES = defineErrorCodes({
 	YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_ORGANIZATION: "You are not allowed to create a new organization",
 	YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_ORGANIZATIONS: "You have reached the maximum number of organizations",
@@ -2000,6 +2077,7 @@ const ORGANIZATION_ERROR_CODES = defineErrorCodes({
 	EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION: "Email verification required before accepting or rejecting invitation",
 	EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION: "Email verification required to view or list invitations for the session email",
 	YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION: "You are not allowed to cancel this invitation",
+	YOU_ARE_NOT_ALLOWED_TO_LIST_INVITATIONS: "You are not allowed to list invitations for this organization",
 	INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION: "Inviter is no longer a member of the organization",
 	YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE: "You are not allowed to invite a user with this role",
 	FAILED_TO_RETRIEVE_INVITATION: "Failed to retrieve invitation",
@@ -2036,8 +2114,7 @@ const ORGANIZATION_ERROR_CODES = defineErrorCodes({
 	INVALID_TEAM_ID: "Team id contains a reserved character"
 });
-//#endregion
-//#region ../auth/dist/rbac.mjs
+// ../auth/dist/rbac.mjs
 const t$1 = createAccessControl({
 	organization: [`update`, `delete`],
 	member: [
@@ -2318,8 +2395,7 @@ const n$1 = {
 	})
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/broadcast-channel.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/broadcast-channel.mjs
 const kBroadcastChannel = Symbol.for("better-auth:broadcast-channel");
 const now$1 = () => Math.floor(Date.now() / 1e3);
 var WindowBroadcastChannel = class {
@@ -2345,15 +2421,16 @@ var WindowBroadcastChannel = class {
 	}
 	setup() {
 		if (typeof window === "undefined" || typeof window.addEventListener === "undefined") return () => {};
+		const target = window;
 		const handler = (event) => {
 			if (event.key !== this.name) return;
 			const message = JSON.parse(event.newValue ?? "{}");
 			if (message?.event !== "session" || !message?.data) return;
 			this.listeners.forEach((listener) => listener(message));
 		};
-		window.addEventListener("storage", handler);
+		target.addEventListener("storage", handler);
 		return () => {
-			window.removeEventListener("storage", handler);
+			target.removeEventListener("storage", handler);
 		};
 	}
 };
@@ -2362,12 +2439,10 @@ function getGlobalBroadcastChannel(name = "better-auth.message") {
 	return globalThis[kBroadcastChannel];
 }
-//#endregion
-//#region ../../node_modules/.pnpm/nanostores@1.5.2/node_modules/nanostores/clean-stores/index.js
+// ../../node_modules/.pnpm/nanostores@1.5.5/node_modules/nanostores/clean-stores/index.js
 const clean = Symbol("clean");
-//#endregion
-//#region ../../node_modules/.pnpm/nanostores@1.5.2/node_modules/nanostores/atom/index.js
+// ../../node_modules/.pnpm/nanostores@1.5.5/node_modules/nanostores/atom/index.js
 let listenerQueue = [];
 let lqIndex = 0;
 let batchSeen = null;
@@ -2375,12 +2450,22 @@ const QUEUE_ITEMS_PER_LISTENER = 4;
 const nanostoresGlobal = globalThis.nanostoresGlobal ||= { epoch: 0 };
 let drainQueue = () => {
 	let thrown;
-	for (lqIndex = 0; lqIndex < listenerQueue.length; lqIndex += QUEUE_ITEMS_PER_LISTENER) try {
-		listenerQueue[lqIndex](listenerQueue[lqIndex + 1].value, listenerQueue[lqIndex + 2], listenerQueue[lqIndex + 3]);
-	} catch (e) {
-		thrown = e;
+	let i;
+	while (lqIndex < listenerQueue.length) {
+		i = lqIndex;
+		lqIndex += QUEUE_ITEMS_PER_LISTENER;
+		let pendingStores = batchSeen?.get(listenerQueue[i]);
+		if (pendingStores) {
+			if (!pendingStores.has(listenerQueue[i + 1])) continue;
+			pendingStores.clear();
+		}
+		try {
+			listenerQueue[i](listenerQueue[i + 1].value, listenerQueue[i + 2], listenerQueue[i + 3]);
+		} catch (e) {
+			thrown = e;
+		}
 	}
-	listenerQueue.length = 0;
+	listenerQueue.length = lqIndex = 0;
 	if (thrown) throw thrown;
 };
 const atom = /* @__NO_SIDE_EFFECTS__ */ (initialValue) => {
@@ -2396,7 +2481,8 @@ const atom = /* @__NO_SIDE_EFFECTS__ */ (initialValue) => {
 		listen(listener) {
 			$atom.lc = listeners.push(listener);
 			return () => {
-				for (let i = lqIndex + QUEUE_ITEMS_PER_LISTENER; i < listenerQueue.length;) if (listenerQueue[i] === listener) listenerQueue.splice(i, QUEUE_ITEMS_PER_LISTENER);
+				batchSeen?.get(listener)?.delete($atom);
+				for (let i = lqIndex; i < listenerQueue.length;) if (listenerQueue[i] === listener && listenerQueue[i + 1] === $atom) listenerQueue.splice(i, QUEUE_ITEMS_PER_LISTENER);
 				else i += QUEUE_ITEMS_PER_LISTENER;
 				let index = listeners.indexOf(listener);
 				if (~index) {
@@ -2409,8 +2495,12 @@ const atom = /* @__NO_SIDE_EFFECTS__ */ (initialValue) => {
 			nanostoresGlobal.epoch++;
 			let runListenerQueue = !listenerQueue.length && !batchSeen;
 			for (let listener of listeners) {
-				if (batchSeen?.has(listener)) continue;
-				batchSeen?.add(listener);
+				if (batchSeen) {
+					let pendingStores = batchSeen.get(listener);
+					if (!pendingStores) batchSeen.set(listener, pendingStores = /* @__PURE__ */ new Set());
+					if (pendingStores.has($atom)) continue;
+					pendingStores.add($atom);
+				}
 				listenerQueue.push(listener, $atom, oldValue, batchSeen ? void 0 : changedKey);
 			}
 			if (runListenerQueue) drainQueue();
@@ -2438,8 +2528,7 @@ const atom = /* @__NO_SIDE_EFFECTS__ */ (initialValue) => {
 	return $atom;
 };
-//#endregion
-//#region ../../node_modules/.pnpm/nanostores@1.5.2/node_modules/nanostores/lifecycle/index.js
+// ../../node_modules/.pnpm/nanostores@1.5.5/node_modules/nanostores/lifecycle/index.js
 const SET = 2;
 const MOUNT = 5;
 const UNMOUNT = 6;
@@ -2457,11 +2546,12 @@ let on = (object, listener, eventKey, mutateStore) => {
 	return () => {
 		let currentListeners = object.events[eventKey];
 		let index = currentListeners.indexOf(listener);
-		currentListeners.splice(index, 1);
-		if (!currentListeners.length) {
-			delete object.events[eventKey];
-			object.events[eventKey + REVERT_MUTATION]();
-			delete object.events[eventKey + REVERT_MUTATION];
+		if (~index) {
+			currentListeners.splice(index, 1);
+			if (!currentListeners.length) {
+				object.events[eventKey + REVERT_MUTATION]();
+				delete object.events[eventKey + REVERT_MUTATION];
+			}
 		}
 	};
 };
@@ -2542,8 +2632,7 @@ let onMount = ($store, initialize) => {
 	});
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/equality.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/equality.mjs
 function isPlainObject(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const prototype = Object.getPrototypeOf(value);
@@ -2583,8 +2672,7 @@ function withEquality(store, isEqual) {
 	});
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/focus-manager.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/focus-manager.mjs
 const kFocusManager = Symbol.for("better-auth:focus-manager");
 var WindowFocusManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -2599,12 +2687,13 @@ var WindowFocusManager = class {
 	}
 	setup() {
 		if (typeof window === "undefined" || typeof document === "undefined" || typeof window.addEventListener === "undefined") return () => {};
+		const target = document;
 		const visibilityHandler = () => {
 			if (document.visibilityState === "visible") this.setFocused(true);
 		};
-		document.addEventListener("visibilitychange", visibilityHandler, false);
+		target.addEventListener("visibilitychange", visibilityHandler, false);
 		return () => {
-			document.removeEventListener("visibilitychange", visibilityHandler, false);
+			target.removeEventListener("visibilitychange", visibilityHandler, false);
 		};
 	}
 };
@@ -2613,12 +2702,11 @@ function getGlobalFocusManager() {
 	return globalThis[kFocusManager];
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/online-manager.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/online-manager.mjs
 const kOnlineManager = Symbol.for("better-auth:online-manager");
 var WindowOnlineManager = class {
 	listeners = /* @__PURE__ */ new Set();
-	isOnline = typeof navigator !== "undefined" ? navigator.onLine : true;
+	isOnline = globalThis.navigator?.onLine ?? true;
 	subscribe(listener) {
 		this.listeners.add(listener);
 		return () => {
@@ -2631,13 +2719,14 @@ var WindowOnlineManager = class {
 	}
 	setup() {
 		if (typeof window === "undefined" || typeof window.addEventListener === "undefined") return () => {};
+		const target = window;
 		const onOnline = () => this.setOnline(true);
 		const onOffline = () => this.setOnline(false);
-		window.addEventListener("online", onOnline, false);
-		window.addEventListener("offline", onOffline, false);
+		target.addEventListener("online", onOnline, false);
+		target.addEventListener("offline", onOffline, false);
 		return () => {
-			window.removeEventListener("online", onOnline, false);
-			window.removeEventListener("offline", onOffline, false);
+			target.removeEventListener("online", onOnline, false);
+			target.removeEventListener("offline", onOffline, false);
 		};
 	}
 };
@@ -2646,8 +2735,7 @@ function getGlobalOnlineManager() {
 	return globalThis[kOnlineManager];
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/query-atom.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/query-atom.mjs
 const kAuthQuery = Symbol.for("better-auth:auth-query");
 function createAuthQueryAtom(initialValue) {
 	const queryAtom = /* @__PURE__ */ atom(initialValue);
@@ -2655,8 +2743,7 @@ function createAuthQueryAtom(initialValue) {
 	return queryAtom;
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/query.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/query.mjs
 const isServer$1 = () => typeof window === "undefined";
 function isAuthQueryStateEqual(a, b) {
 	return isJsonEqual(a.data, b.data) && a.error === b.error && a.isPending === b.isPending && a.isRefetching === b.isRefetching && a.refetch === b.refetch;
@@ -2786,8 +2873,7 @@ const useAuthQuery = (initializedAtom, path, $fetch, options) => {
 	return value;
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/session-refresh.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/session-refresh.mjs
 const now = () => Math.floor(Date.now() / 1e3);
 /**
 * Rate limit: don't refetch on focus if a session request was made within this many seconds
@@ -2860,11 +2946,12 @@ function createSessionRefreshManager(opts) {
 	const init = () => {
 		if (state.isInitialized) return;
 		state.isInitialized = true;
+		setupSignalSubscription();
+		if (typeof window === "undefined") return;
 		setupPolling();
 		setupBroadcast();
 		setupFocusRefetch();
 		setupOnlineRefetch();
-		setupSignalSubscription();
 		state.cleanupBroadcastSetup = getGlobalBroadcastChannel().setup();
 		state.cleanupFocusSetup = getGlobalFocusManager().setup();
 		state.cleanupOnlineSetup = getGlobalOnlineManager().setup();
@@ -2914,8 +3001,7 @@ function createSessionRefreshManager(opts) {
 	};
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/fetch-plugins.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/fetch-plugins.mjs
 const redirectPlugin = {
 	id: "redirect",
 	name: "Redirect",
@@ -2930,8 +3016,7 @@ const redirectPlugin = {
 	} }
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/session-atom.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/session-atom.mjs
 const isServer = () => typeof window === "undefined";
 const SESSION_MOUNT_DEDUPE_INTERVAL = STORE_UNMOUNT_DELAY;
 function hydrateSessionAtom(sessionAtom, session) {
@@ -3004,6 +3089,7 @@ function getSessionAtom($fetch, options) {
 			if (data?.needsRefresh) try {
 				const refreshRes = await $fetch("/get-session", {
 					method: "POST",
+					body: {},
 					signal
 				});
 				if (signal.aborted) return "aborted";
@@ -3105,8 +3191,7 @@ function getSessionAtom($fetch, options) {
 	};
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/config.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/config.mjs
 const resolvePublicAuthUrl = (basePath) => {
 	if (typeof process === "undefined") return void 0;
 	const path = basePath ?? "/api/auth";
@@ -3211,14 +3296,12 @@ const getClientConfig = (options, loadEnv) => {
 	};
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/utils/is-atom.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/utils/is-atom.mjs
 function isAtom(value) {
 	return typeof value === "object" && value !== null && "get" in value && typeof value.get === "function" && "lc" in value && typeof value.lc === "number";
 }
-//#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.2_@opentelemet_0d5083f53bdf976e0320d8b98ec7aa98/node_modules/@better-auth/core/dist/utils/string.mjs
+// ../../node_modules/.pnpm/@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-fetch+fetch@1.3.3_@openteleme_210612f248ef93e041cc6a64ad006635/node_modules/@better-auth/core/dist/utils/string.mjs
 function capitalizeFirstLetter(str) {
 	return str.charAt(0).toUpperCase() + str.slice(1);
 }
@@ -3231,16 +3314,7 @@ function toKebabCase(input) {
 	return splitWords(input).map((word) => word.toLowerCase()).join("-");
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/proxy.mjs
-function getMethod(path, knownPathMethods, args) {
-	const method = knownPathMethods[path];
-	const { fetchOptions, query: _query, ...body } = args || {};
-	if (method) return method;
-	if (fetchOptions?.method) return fetchOptions.method;
-	if (body && Object.keys(body).length > 0) return "POST";
-	return "GET";
-}
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/proxy.mjs
 function createDynamicPathProxy(routes, client, knownPathMethods, atoms, atomListeners) {
 	function createProxy(path = []) {
 		return new Proxy(function() {}, {
@@ -3267,13 +3341,13 @@ function createDynamicPathProxy(routes, client, knownPathMethods, atoms, atomLis
 					...fetchOptions,
 					...argFetchOptions
 				};
-				const method = getMethod(routePath, knownPathMethods, arg);
+				const method = knownPathMethods[routePath] || options.method || (Object.keys(body).length > 0 ? "POST" : "GET");
 				return await client(routePath, {
 					...options,
-					body: method === "GET" ? void 0 : {
+					body: isPayloadMethod(method) ? {
 						...body,
 						...options?.body || {}
-					},
+					} : void 0,
 					query: query || options?.query,
 					method,
 					async onSuccess(context) {
@@ -3307,23 +3381,22 @@ function createDynamicPathProxy(routes, client, knownPathMethods, atoms, atomLis
 	return createProxy();
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/client/vanilla.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/client/vanilla.mjs
 function createAuthClient(options) {
 	const { pluginPathMethods, pluginsActions, pluginsAtoms, hydrateSession, $fetch, atomListeners, $store } = getClientConfig(options);
 	const resolvedHooks = {};
 	for (const [key, value] of Object.entries(pluginsAtoms)) resolvedHooks[`use${capitalizeFirstLetter(key)}`] = value;
-	return createDynamicPathProxy({
+	const routes = {
 		...pluginsActions,
 		...resolvedHooks,
 		hydrateSession,
 		$fetch,
 		$store
-	}, $fetch, pluginPathMethods, pluginsAtoms, atomListeners);
+	};
+	return createDynamicPathProxy(routes, $fetch, pluginPathMethods, pluginsAtoms, atomListeners);
 }
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/additional-fields/client.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/additional-fields/client.mjs
 const inferAdditionalFields = (schema) => {
 	return {
 		id: "additional-fields-client",
@@ -3332,8 +3405,7 @@ const inferAdditionalFields = (schema) => {
 	};
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/admin/client.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/admin/client.mjs
 const adminClient = (options) => {
 	const roles = {
 		admin: adminAc$1,
@@ -3367,8 +3439,7 @@ const adminClient = (options) => {
 	};
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
 const deviceAuthorizationClient = () => {
 	return {
 		id: "device-authorization",
@@ -3384,13 +3455,13 @@ const deviceAuthorizationClient = () => {
 	};
 };
-//#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.7_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-rc._8ef4619ff178d531df1451d091680cc1/node_modules/better-auth/dist/plugins/organization/client.mjs
+// ../../node_modules/.pnpm/better-auth@1.7.22_@opentelemetry+api@1.10.0_drizzle-kit@1.0.0-rc.5_drizzle-orm@1.0.0-r_6aa5cbf5748c3ca553369194e8fda253/node_modules/better-auth/dist/plugins/organization/client.mjs
 /**
 * Using the same `hasPermissionFn` function, but without the need for a `ctx` parameter or the `organizationId` parameter.
 */
 const clientSideHasPermission = (input) => {
-	return hasPermissionFn(input, input.options.roles || defaultRoles);
+	const acRoles = input.options.roles || defaultRoles;
+	return hasPermissionFn(input, acRoles);
 };
 const organizationClient = (options) => {
 	const $listOrg = /* @__PURE__ */ atom(false);
@@ -3428,15 +3499,18 @@ const organizationClient = (options) => {
 		}),
 		getAtoms: ($fetch) => {
 			const listOrganizations = useAuthQuery($listOrg, "/organization/list", $fetch, { method: "GET" });
+			const activeOrganization = useAuthQuery([$activeOrgSignal], "/organization/get-full-organization", $fetch, () => ({ method: "GET" }));
+			const activeMember = useAuthQuery([$activeOrgSignal, $activeMemberSignal], "/organization/get-active-member", $fetch, { method: "GET" });
+			const activeMemberRole = useAuthQuery([$activeOrgSignal, $activeMemberRoleSignal], "/organization/get-active-member-role", $fetch, { method: "GET" });
 			return {
 				$listOrg,
 				$activeOrgSignal,
 				$activeMemberSignal,
 				$activeMemberRoleSignal,
-				activeOrganization: useAuthQuery([$activeOrgSignal], "/organization/get-full-organization", $fetch, () => ({ method: "GET" })),
+				activeOrganization,
 				listOrganizations,
-				activeMember: useAuthQuery([$activeOrgSignal, $activeMemberSignal], "/organization/get-active-member", $fetch, { method: "GET" }),
-				activeMemberRole: useAuthQuery([$activeOrgSignal, $activeMemberRoleSignal], "/organization/get-active-member-role", $fetch, { method: "GET" })
+				activeMember,
+				activeMemberRole
 			};
 		},
 		pathMethods: {
@@ -3479,8 +3553,7 @@ const organizationClient = (options) => {
 	};
 };
-//#endregion
-//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.7_@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fet_72057e843799b0c86a3fe30aeb49ac2b/node_modules/@better-auth/api-key/dist/version-CUtTQbZf.mjs
+// ../../node_modules/.pnpm/@better-auth+api-key@1.7.22_@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-f_cd35a2f07f9492af3cf3307c4cca88cf/node_modules/@better-auth/api-key/dist/version-Cn4VDZGN.mjs
 const API_KEY_ERROR_CODES = defineErrorCodes({
 	INVALID_METADATA_TYPE: "metadata must be an object or undefined",
 	REFILL_AMOUNT_AND_INTERVAL_REQUIRED: "refillAmount is required when refillInterval is provided",
@@ -3514,10 +3587,9 @@ const API_KEY_ERROR_CODES = defineErrorCodes({
 	NO_DEFAULT_API_KEY_CONFIGURATION_FOUND: "No default api-key configuration found.",
 	ORGANIZATION_PLUGIN_REQUIRED: "Organization plugin is required for organization-owned API keys. Please install and configure the organization plugin."
 });
-const PACKAGE_VERSION$2 = "1.7.7";
+const PACKAGE_VERSION$2 = "1.7.22";
-//#endregion
-//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.7_@better-auth+core@1.7.7_@better-auth+utils@0.4.2_@better-fet_72057e843799b0c86a3fe30aeb49ac2b/node_modules/@better-auth/api-key/dist/client.mjs
+// ../../node_modules/.pnpm/@better-auth+api-key@1.7.22_@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-f_cd35a2f07f9492af3cf3307c4cca88cf/node_modules/@better-auth/api-key/dist/client.mjs
 const apiKeyClient = () => {
 	return {
 		id: "api-key",
@@ -3532,9 +3604,9 @@ const apiKeyClient = () => {
 	};
 };
-//#endregion
-//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.7_bb9d362000213fa473d66cafce218d0a/node_modules/@better-auth/passkey/dist/version-Bx477_EO.mjs
+// ../../node_modules/.pnpm/@better-auth+passkey@1.7.22_@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-f_8192076548ca2ef2cc8acd41d1178770/node_modules/@better-auth/passkey/dist/version-DAqaPVlZ.mjs
 const PASSKEY_ERROR_CODES = defineErrorCodes({
+	ORIGIN_NOT_CONFIGURED: "Passkey origin is not configured. Set the `origin` option of the passkey plugin or configure `baseURL`.",
 	CHALLENGE_NOT_FOUND: "Challenge not found",
 	YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY: "You are not allowed to register this passkey",
 	FAILED_TO_VERIFY_REGISTRATION: "Failed to verify registration",
@@ -3551,10 +3623,9 @@ const PASSKEY_ERROR_CODES = defineErrorCodes({
 	RESOLVE_USER_REQUIRED: "Passkey registration requires either an authenticated session or a resolveUser callback when requireSession is false",
 	RESOLVED_USER_INVALID: "Resolved user is invalid"
 });
-const PACKAGE_VERSION$1 = "1.7.7";
+const PACKAGE_VERSION$1 = "1.7.22";
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/bufferToBase64URLString.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/bufferToBase64URLString.js
 /**
 * Convert the given array buffer into a Base64URL-encoded string. Ideal for converting various
 * credential response ArrayBuffers to string for sending back to the server as JSON.
@@ -3568,8 +3639,7 @@ function bufferToBase64URLString(buffer) {
 	return btoa(str).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/base64URLStringToBuffer.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/base64URLStringToBuffer.js
 /**
 * Convert from a Base64URL-encoded string to an Array Buffer. Best used when converting a
 * credential ID from a JSON string to an ArrayBuffer, like in allowCredentials or
@@ -3595,8 +3665,7 @@ function base64URLStringToBuffer(base64URLString) {
 	return buffer;
 }
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/browserSupportsWebAuthn.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/browserSupportsWebAuthn.js
 /**
 * Determine if the browser is capable of Webauthn
 */
@@ -3609,8 +3678,7 @@ function browserSupportsWebAuthn() {
 */
 const _browserSupportsWebAuthnInternals = { stubThis: (value) => value };
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/toPublicKeyCredentialDescriptor.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/toPublicKeyCredentialDescriptor.js
 function toPublicKeyCredentialDescriptor(descriptor) {
 	const { id } = descriptor;
 	return {
@@ -3625,8 +3693,7 @@ function toPublicKeyCredentialDescriptor(descriptor) {
 	};
 }
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/isValidDomain.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/isValidDomain.js
 /**
 * A simple test to determine if a hostname is a properly-formatted domain name
 *
@@ -3639,8 +3706,7 @@ function isValidDomain(hostname) {
 	return hostname === "localhost" || /^((xn--[a-z0-9-]+|[a-z0-9]+(-[a-z0-9]+)*)\.)+([a-z]{2,}|xn--[a-z0-9-]+)$/i.test(hostname);
 }
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/webAuthnError.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/webAuthnError.js
 /**
 * A custom Error used to return a more nuanced error detailing _why_ one of the eight documented
 * errors in the spec was raised after calling `navigator.credentials.create()` or
@@ -3672,8 +3738,7 @@ var WebAuthnError = class extends Error {
 	}
 };
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/identifyRegistrationError.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/identifyRegistrationError.js
 /**
 * Attempt to intuit _why_ an error was raised after calling `navigator.credentials.create()`
 */
@@ -3754,8 +3819,7 @@ function identifyRegistrationError({ error, options }) {
 	return error;
 }
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/webAuthnAbortService.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/webAuthnAbortService.js
 var BaseWebAuthnAbortService = class {
 	constructor() {
 		Object.defineProperty(this, "controller", {
@@ -3793,8 +3857,7 @@ var BaseWebAuthnAbortService = class {
 */
 const WebAuthnAbortService = new BaseWebAuthnAbortService();
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/toAuthenticatorAttachment.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/toAuthenticatorAttachment.js
 const attachments = ["cross-platform", "platform"];
 /**
 * If possible coerce a `string` value into a known `AuthenticatorAttachment`
@@ -3805,8 +3868,7 @@ function toAuthenticatorAttachment(attachment) {
 	return attachment;
 }
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/methods/startRegistration.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/methods/startRegistration.js
 /**
 * Begin authenticator "registration" via WebAuthn attestation
 *
@@ -3894,8 +3956,7 @@ function warnOnBrokenImplementation(methodName, cause) {
 	console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${methodName}. You should report this error to them.\n`, cause);
 }
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/browserSupportsWebAuthnAutofill.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/browserSupportsWebAuthnAutofill.js
 /**
 * Determine if the browser supports conditional UI, so that WebAuthn credentials can
 * be shown to the user in the browser's typical password autofill popup.
@@ -3914,8 +3975,7 @@ function browserSupportsWebAuthnAutofill() {
 }
 const _browserSupportsWebAuthnAutofillInternals = { stubThis: (value) => value };
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/identifyAuthenticationError.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/identifyAuthenticationError.js
 /**
 * Attempt to intuit _why_ an error was raised after calling `navigator.credentials.get()`
 */
@@ -3958,8 +4018,7 @@ function identifyAuthenticationError({ error, options }) {
 	return error;
 }
-//#endregion
-//#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/methods/startAuthentication.js
+// ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/methods/startAuthentication.js
 /**
 * Begin authenticator "login" via WebAuthn assertion
 *
@@ -4022,8 +4081,7 @@ async function startAuthentication(options) {
 	};
 }
-//#endregion
-//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.7_bb9d362000213fa473d66cafce218d0a/node_modules/@better-auth/passkey/dist/client.mjs
+// ../../node_modules/.pnpm/@better-auth+passkey@1.7.22_@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-f_8192076548ca2ef2cc8acd41d1178770/node_modules/@better-auth/passkey/dist/client.mjs
 const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 	const signInPasskey = async (opts, options) => {
 		const response = await $fetch("/passkey/generate-authenticate-options", {
@@ -4224,12 +4282,10 @@ const passkeyClient = () => {
 	};
 };
-//#endregion
-//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.7_b7f969b8f4178e26300409b5e56227c3/node_modules/@better-auth/sso/dist/version-DFla2W8i.mjs
-const PACKAGE_VERSION = "1.7.7";
+// ../../node_modules/.pnpm/@better-auth+sso@1.7.22_@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-fetch_d9644db8b9b72e6b09ca797e76a3c6f5/node_modules/@better-auth/sso/dist/version-DnGxDgB4.mjs
+const PACKAGE_VERSION = "1.7.22";
-//#endregion
-//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.7_b7f969b8f4178e26300409b5e56227c3/node_modules/@better-auth/sso/dist/client.mjs
+// ../../node_modules/.pnpm/@better-auth+sso@1.7.22_@better-auth+core@1.7.22_@better-auth+utils@0.5.1_@better-fetch_d9644db8b9b72e6b09ca797e76a3c6f5/node_modules/@better-auth/sso/dist/client.mjs
 const ssoClient = (options) => {
 	return {
 		id: "sso-client",
@@ -4242,8 +4298,7 @@ const ssoClient = (options) => {
 	};
 };
-//#endregion
-//#region ../auth/dist/client.mjs
+// ../auth/dist/client.mjs
 function d$1(n) {
 	return [
 		apiKeyClient(),
@@ -4279,8 +4334,7 @@ const f$1 = (e) => createAuthClient({
 	plugins: d$1(e)
 });
-//#endregion
-//#region src/lib/client.ts
+// src/lib/client.ts
 const AUTH_BASE_PATH = "/api/v1/auth";
 function createCliAuthClient(apiUrl) {
 	return f$1({
@@ -4406,8 +4460,7 @@ async function resolveIds(client, runtime) {
 	};
 }
-//#endregion
-//#region src/lib/output.ts
+// src/lib/output.ts
 function getRuntime(command, options) {
 	const opts = command.optsWithGlobals();
 	return resolveRuntimeConfig(opts, options);
@@ -4436,14 +4489,12 @@ async function confirm(runtime, message) {
 	return /^y(es)?$/i.test(answer);
 }
-//#endregion
-//#region ../auth/dist/device.mjs
+// ../auth/dist/device.mjs
 function e(e) {
 	return e;
 }
-//#endregion
-//#region src/commands/auth.ts
+// src/commands/auth.ts
 const CLIENT_ID = "shipd-cli";
 const MANAGEMENT_KEY_PREFIX = "shipd_mgmt_";
 function registerAuthCommands(program) {
@@ -4531,20 +4582,19 @@ function registerAuthCommands(program) {
 	});
 }
-//#endregion
-//#region ../contracts/dist/flag.mjs
-const t = z.enum([
+// ../contracts/dist/flag.mjs
+const t = z$1.enum([
 	`boolean`,
 	`variant`,
 	`number`,
 	`json`
 ]);
-const n = z.enum([
+const n = z$1.enum([
 	`any`,
 	`code`,
 	`dashboard`
 ]);
-const r = z.enum([
+const r = z$1.enum([
 	`active`,
 	`deprecated`,
 	`archived`,
@@ -4554,50 +4604,50 @@ const i = /* @__PURE__ */ new Set([`__proto__`]);
 function a(e) {
 	return i.has(e);
 }
-const o = z.string().min(1).refine((e) => e.trim().length > 0, { message: `flag key must not be empty or whitespace-only` }).refine((e) => !a(e), { message: `flag key "__proto__" is reserved` });
-const s = z.union([
-	z.string(),
-	z.number(),
-	z.boolean()
+const o = z$1.string().min(1).refine((e) => e.trim().length > 0, { message: `flag key must not be empty or whitespace-only` }).refine((e) => !a(e), { message: `flag key "__proto__" is reserved` });
+const s = z$1.union([
+	z$1.string(),
+	z$1.number(),
+	z$1.boolean()
 ]);
-const c = z.discriminatedUnion(`kind`, [
-	z.object({
-		kind: z.literal(`boolean`),
-		value: z.boolean()
+const c = z$1.discriminatedUnion(`kind`, [
+	z$1.object({
+		kind: z$1.literal(`boolean`),
+		value: z$1.boolean()
 	}),
-	z.object({
-		kind: z.literal(`variant`),
-		value: z.string()
+	z$1.object({
+		kind: z$1.literal(`variant`),
+		value: z$1.string()
 	}),
-	z.object({
-		kind: z.literal(`number`),
-		value: z.number()
+	z$1.object({
+		kind: z$1.literal(`number`),
+		value: z$1.number()
 	}),
-	z.object({
-		kind: z.literal(`json`),
-		value: z.unknown()
+	z$1.object({
+		kind: z$1.literal(`json`),
+		value: z$1.unknown()
 	}),
-	z.object({ kind: z.literal(`disabled`) })
+	z$1.object({ kind: z$1.literal(`disabled`) })
 ]);
-const l = z.object({
-	kind: z.literal(`weighted`),
-	variations: z.array(z.object({
-		weight: z.number().positive(),
+const l = z$1.object({
+	kind: z$1.literal(`weighted`),
+	variations: z$1.array(z$1.object({
+		weight: z$1.number().positive(),
 		serve: c
 	})).min(1),
-	seed: z.string().min(1).optional(),
-	attribute: z.string().min(1).optional()
+	seed: z$1.string().min(1).optional(),
+	attribute: z$1.string().min(1).optional()
 });
-const u = z.union([c, l]);
-const d = z.object({
-	kind: z.literal(`attribute`),
-	attribute: z.string().min(1),
-	operator: z.enum([`exists`, `not_exists`])
+const u = z$1.union([c, l]);
+const d = z$1.object({
+	kind: z$1.literal(`attribute`),
+	attribute: z$1.string().min(1),
+	operator: z$1.enum([`exists`, `not_exists`])
 });
-const f = z.object({
-	kind: z.literal(`attribute`),
-	attribute: z.string().min(1),
-	operator: z.enum([
+const f = z$1.object({
+	kind: z$1.literal(`attribute`),
+	attribute: z$1.string().min(1),
+	operator: z$1.enum([
 		`eq`,
 		`neq`,
 		`contains`,
@@ -4610,63 +4660,64 @@ const f = z.object({
 	]),
 	value: s
 });
-const p = z.object({
-	kind: z.literal(`attribute`),
-	attribute: z.string().min(1),
-	operator: z.enum([`in`, `not_in`]),
-	value: z.array(s).min(1)
+const p = z$1.object({
+	kind: z$1.literal(`attribute`),
+	attribute: z$1.string().min(1),
+	operator: z$1.enum([`in`, `not_in`]),
+	value: z$1.array(s).min(1)
 });
-const m = z.object({
-	kind: z.literal(`percentage`),
-	rollout: z.number().min(0).max(100),
-	seed: z.string().min(1).optional(),
-	attribute: z.string().min(1).optional()
+const m = z$1.object({
+	kind: z$1.literal(`percentage`),
+	rollout: z$1.number().min(0).max(100),
+	seed: z$1.string().min(1).optional(),
+	attribute: z$1.string().min(1).optional()
 });
-const h = z.object({ kind: z.literal(`always`) });
-const g = z.object({
-	kind: z.literal(`segment`),
-	segmentId: z.string().min(1),
-	operator: z.enum([`in`, `not_in`]).optional()
+const h = z$1.object({ kind: z$1.literal(`always`) });
+const g = z$1.object({
+	kind: z$1.literal(`segment`),
+	segmentId: z$1.string().min(1),
+	operator: z$1.enum([`in`, `not_in`]).optional()
 });
 function _(t) {
-	return z.lazy(() => z.union([
+	return z$1.lazy(() => z$1.union([
 		h,
 		m,
 		g,
 		d,
 		f,
 		p,
-		...t < 8 ? [z.object({
-			kind: z.literal(`group`),
-			op: z.enum([`and`, `or`]),
-			conditions: z.array(_(t + 1)).min(1)
+		...t < 8 ? [z$1.object({
+			kind: z$1.literal(`group`),
+			op: z$1.enum([`and`, `or`]),
+			conditions: z$1.array(_(t + 1)).min(1)
 		})] : []
 	]));
 }
 const v = _(0);
-const y = z.object({
-	id: z.string().min(1),
-	description: z.string().optional(),
-	conditions: z.array(v),
+const y = z$1.object({
+	id: z$1.string().min(1),
+	description: z$1.string().optional(),
+	conditions: z$1.array(v),
 	serve: u
 });
-const b = z.object({
-	id: z.string().min(1),
-	conditions: z.array(v).min(1)
+const b = z$1.object({
+	id: z$1.string().min(1),
+	conditions: z$1.array(v).min(1)
 });
-const x = z.object({ projectId: z.string().min(1) });
-const S = z.object({
-	projectId: z.string().min(1),
-	key: z.string().min(1)
+const x = z$1.object({ projectId: z$1.string().min(1) });
+const S = z$1.object({
+	projectId: z$1.string().min(1),
+	key: z$1.string().min(1)
 });
-const C = z.object({
-	projectId: z.string().min(1),
+const C = z$1.object({
+	projectId: z$1.string().min(1),
 	key: o,
-	name: z.string().min(1),
-	description: z.string().optional(),
+	name: z$1.string().min(1),
+	description: z$1.string().optional(),
 	type: t,
-	variants: z.array(z.string()).optional(),
-	tags: z.array(z.string()).optional()
+	variants: z$1.array(z$1.string()).optional(),
+	tags: z$1.array(z$1.string()).optional(),
+	clientAvailable: z$1.boolean().optional()
 }).superRefine((e, t) => {
 	e.type === `variant` && (e.variants?.length ?? 0) === 0 && t.addIssue({
 		code: `custom`,
@@ -4674,47 +4725,52 @@ const C = z.object({
 		message: `variant flag requires a non-empty variants array`
 	});
 });
-const w = z.object({
-	expectedVersion: z.number().int().positive().optional(),
-	flagId: z.string().min(1),
+const w = z$1.object({
+	expectedVersion: z$1.number().int().positive().optional(),
+	flagId: z$1.string().min(1),
 	key: o.optional(),
-	name: z.string().min(1).optional(),
-	description: z.string().nullable().optional(),
+	name: z$1.string().min(1).optional(),
+	description: z$1.string().nullable().optional(),
 	type: t.optional(),
-	variants: z.array(z.string()).nullable().optional(),
-	tags: z.array(z.string()).optional()
+	variants: z$1.array(z$1.string()).nullable().optional(),
+	tags: z$1.array(z$1.string()).optional(),
+	clientAvailable: z$1.boolean().optional()
 });
-const T = z.object({ flagId: z.string().min(1) });
-const E = z.object({ projectId: z.string().min(1) });
-const D = z.object({ flagId: z.string().min(1) });
-const O = z.object({
-	expectedVersion: z.number().int().positive().optional(),
-	flagId: z.string().min(1),
-	environmentId: z.string().min(1),
-	enabled: z.boolean().optional(),
-	rules: z.array(y).optional(),
+const T = z$1.object({ flagId: z$1.string().min(1) });
+const E = z$1.object({ projectId: z$1.string().min(1) });
+const D = z$1.object({ flagId: z$1.string().min(1) });
+const O = z$1.object({
+	expectedVersion: z$1.number().int().positive().optional(),
+	flagId: z$1.string().min(1),
+	environmentId: z$1.string().min(1),
+	enabled: z$1.boolean().optional(),
+	rules: z$1.array(y).optional(),
 	fallthrough: u.optional()
 });
-const k = z.object({
-	flagId: z.string().min(1),
-	environments: z.array(z.object({
-		environmentId: z.string().min(1),
-		expectedVersion: z.number().int().positive()
+const k = z$1.object({
+	flagId: z$1.string().min(1),
+	environments: z$1.array(z$1.object({
+		environmentId: z$1.string().min(1),
+		expectedVersion: z$1.number().int().positive()
 	})).min(1).refine((e) => new Set(e.map((e) => e.environmentId)).size === e.length, `Duplicate environments`)
 });
-const A = z.object({
-	expectedVersion: z.number().int().positive().optional(),
-	flagId: z.string().min(1),
-	environmentId: z.string().min(1),
-	enabled: z.boolean()
+const A = z$1.object({
+	expectedVersion: z$1.number().int().positive().optional(),
+	flagId: z$1.string().min(1),
+	environmentId: z$1.string().min(1),
+	enabled: z$1.boolean()
+});
+const j = z$1.object({
+	projectId: z$1.string().min(1),
+	environmentId: z$1.string().min(1)
 });
-const j = z.object({ flagId: z.string().min(1) });
-const M = z.enum([`active`, `deprecated`]);
-function N(e) {
+const M = z$1.object({ flagId: z$1.string().min(1) });
+const N = z$1.enum([`active`, `deprecated`]);
+function P(e) {
 	let t = Object.getPrototypeOf(e);
 	return t === Object.prototype || t === null;
 }
-function P(e, t) {
+function F(e, t) {
 	if (e === null) return !0;
 	switch (typeof e) {
 		case `boolean`:
@@ -4725,7 +4781,7 @@ function P(e, t) {
 			if (n.has(e)) return !1;
 			n.add(e);
 			try {
-				return Array.isArray(e) ? e.every((e) => P(e, n)) : !N(e) || Object.getOwnPropertySymbols(e).length > 0 ? !1 : Object.keys(e).every((t) => P(e[t], n));
+				return Array.isArray(e) ? e.every((e) => F(e, n)) : !P(e) || Object.getOwnPropertySymbols(e).length > 0 ? !1 : Object.keys(e).every((t) => F(e[t], n));
 			} finally {
 				n.delete(e);
 			}
@@ -4733,8 +4789,8 @@ function P(e, t) {
 		default: return !1;
 	}
 }
-const F = z.custom(P, { message: `default must be JSON-serializable` });
-function I(e, t) {
+const I = z$1.custom(F, { message: `default must be JSON-serializable` });
+function L(e, t) {
 	switch (e.type) {
 		case `boolean`:
 			typeof e.default != `boolean` && t.addIssue({
@@ -4744,7 +4800,7 @@ function I(e, t) {
 			});
 			break;
 		case `number`:
-			(typeof e.default != `number` || !Number.isFinite(e.default)) && t.addIssue({
+			typeof e.default == `number` && Number.isFinite(e.default) || t.addIssue({
 				code: `custom`,
 				path: [`default`],
 				message: `number flag default must be a finite number`
@@ -4756,33 +4812,33 @@ function I(e, t) {
 				code: `custom`,
 				path: [`variants`],
 				message: `variant flag requires a non-empty variants array`
-			}), (typeof e.default != `string` || !n.includes(e.default)) && t.addIssue({
+			}), typeof e.default == `string` && n.includes(e.default) || t.addIssue({
 				code: `custom`,
 				path: [`default`],
 				message: `variant default must be one of: ${n.join(`, `) || `(none)`}`
 			});
 			break;
 		}
-		case `json`: F.safeParse(e.default).success || t.addIssue({
+		case `json`: I.safeParse(e.default).success || t.addIssue({
 			code: `custom`,
 			path: [`default`],
 			message: `json flag default must be JSON-serializable`
 		});
 	}
 }
-const L = z.record(o, z.discriminatedUnion(`type`, [
-	z.object({
-		type: z.literal(`string`),
-		values: z.tuple([z.string()], z.string()).optional(),
-		required: z.boolean().optional()
+const R = z$1.record(o, z$1.discriminatedUnion(`type`, [
+	z$1.object({
+		type: z$1.literal(`string`),
+		values: z$1.tuple([z$1.string()], z$1.string()).optional(),
+		required: z$1.boolean().optional()
 	}),
-	z.object({
-		type: z.literal(`number`),
-		required: z.boolean().optional()
+	z$1.object({
+		type: z$1.literal(`number`),
+		required: z$1.boolean().optional()
 	}),
-	z.object({
-		type: z.literal(`boolean`),
-		required: z.boolean().optional()
+	z$1.object({
+		type: z$1.literal(`boolean`),
+		required: z$1.boolean().optional()
 	})
 ])).superRefine((e, t) => {
 	for (let n of [
@@ -4797,14 +4853,14 @@ const L = z.record(o, z.discriminatedUnion(`type`, [
 		message: `built-in trait "${n}" must be a string`
 	});
 });
-const R = z.custom((e) => typeof e == `object` && !!e && !Array.isArray(e), { message: `trait definitions must be an object` }).superRefine((e, t) => {
+const z = z$1.custom((e) => typeof e == `object` && !!e && !Array.isArray(e), { message: `trait definitions must be an object` }).superRefine((e, t) => {
 	Object.hasOwn(e, `__proto__`) && t.addIssue({
 		code: `custom`,
 		path: [`__proto__`],
 		message: `trait key "__proto__" is reserved`
 	});
-}).pipe(L);
-function z$1(e, t) {
+}).pipe(R);
+function B(e, t) {
 	if (!e.traits || !e.targeting) return;
 	let n = {
 		userId: { type: `string` },
@@ -4856,9 +4912,9 @@ function z$1(e, t) {
 		e.conditions.forEach(a), o(e.serve);
 	});
 }
-const B = z.object({
-	enabled: z.boolean(),
-	rules: z.array(y).max(500),
+const V = z$1.object({
+	enabled: z$1.boolean(),
+	rules: z$1.array(y).max(500),
 	fallthrough: u
 }).strict().superRefine((e, t) => {
 	let n = /* @__PURE__ */ new Set();
@@ -4874,7 +4930,7 @@ const B = z.object({
 		}), n.add(e.id);
 	});
 });
-function V(e, t) {
+function H(e, t) {
 	if (!e.targeting) return;
 	let n = (n, r) => {
 		n.kind === `weighted` && !Number.isFinite(n.variations.reduce((e, t) => e + t.weight, 0)) && t.addIssue({
@@ -4883,7 +4939,7 @@ function V(e, t) {
 			message: `total weight must be finite`
 		});
 		let i = n.kind === `weighted` ? n.variations.map((e) => e.serve) : [n];
-		for (let n of i) n.kind !== `disabled` && (n.kind !== e.type || n.kind === `variant` && !e.variants?.includes(n.value) || n.kind === `json` && !P(n.value)) && t.addIssue({
+		for (let n of i) n.kind !== `disabled` && (n.kind !== e.type || n.kind === `variant` && !e.variants?.includes(n.value) || n.kind === `json` && !F(n.value)) && t.addIssue({
 			code: `custom`,
 			path: r,
 			message: `serve must match the flag type and declared variants and contain JSON values`
@@ -4896,44 +4952,45 @@ function V(e, t) {
 		`serve`
 	]));
 }
-const H = z.object({
+const U = z$1.object({
 	type: t,
-	variants: z.array(z.string()).optional(),
-	traits: R.optional(),
-	targeting: B.optional()
-}).superRefine(V).superRefine(z$1);
-const U = z.object({
+	variants: z$1.array(z$1.string()).optional(),
+	traits: z.optional(),
+	targeting: V.optional()
+}).superRefine(H).superRefine(B);
+const W = z$1.object({
+	clientAvailable: z$1.boolean().optional(),
 	key: o,
 	type: t,
-	default: z.unknown(),
-	description: z.string().optional(),
-	tags: z.array(z.string()).default([]),
-	lifecycle: M.default(`active`),
-	variants: z.array(z.string()).optional(),
-	disabled: z.boolean().optional(),
-	targeting: B.optional(),
-	traits: R.optional()
+	default: z$1.unknown(),
+	description: z$1.string().optional(),
+	tags: z$1.array(z$1.string()).default([]),
+	lifecycle: N.default(`active`),
+	variants: z$1.array(z$1.string()).optional(),
+	disabled: z$1.boolean().optional(),
+	targeting: V.optional(),
+	traits: z.optional()
 });
-const W = U.superRefine(I).superRefine(V).superRefine(z$1);
-const G = U.extend({
-	version: z.number().int().positive(),
-	environmentVersion: z.number().int().positive().optional(),
+const G = W.superRefine(L).superRefine(H).superRefine(B);
+const K = W.extend({
+	version: z$1.number().int().positive(),
+	environmentVersion: z$1.number().int().positive().optional(),
 	managedBy: n
-}).superRefine(I).superRefine(V).superRefine(z$1);
-const K = z.object({
-	version: z.number().int().positive(),
-	environmentVersion: z.number().int().positive().optional()
+}).superRefine(L).superRefine(H).superRefine(B);
+const q = z$1.object({
+	version: z$1.number().int().positive(),
+	environmentVersion: z$1.number().int().positive().optional()
 });
-const q = z.object({
-	projectId: z.string().min(1),
-	environmentId: z.string().min(1)
+const J = z$1.object({
+	projectId: z$1.string().min(1),
+	environmentId: z$1.string().min(1)
 });
-const J = z.object({
-	projectId: z.string(),
-	environmentId: z.string(),
-	flags: z.array(G)
+const Y = z$1.object({
+	projectId: z$1.string(),
+	environmentId: z$1.string(),
+	flags: z$1.array(K)
 });
-function Y(e, t) {
+function X(e, t) {
 	let n = /* @__PURE__ */ new Set();
 	for (let [r, i] of e.entries()) n.has(i.key) && t.addIssue({
 		code: `custom`,
@@ -4945,53 +5002,52 @@ function Y(e, t) {
 		message: `duplicate flag key "${i.key}"`
 	}), n.add(i.key);
 }
-const X = z.object({
-	projectId: z.string().min(1),
-	environmentId: z.string().min(1),
-	flags: z.array(W).max(500)
-}).superRefine((e, t) => Y(e.flags, t));
-const Z = z.object({
-	key: z.string(),
-	op: z.enum([
+const Z = z$1.object({
+	projectId: z$1.string().min(1),
+	environmentId: z$1.string().min(1),
+	flags: z$1.array(G).max(500)
+}).superRefine((e, t) => X(e.flags, t));
+const Q = z$1.object({
+	key: z$1.string(),
+	op: z$1.enum([
 		`add`,
 		`update`,
 		`remove`,
 		`unlinked`
 	]),
-	before: G.optional(),
-	after: W.optional(),
-	message: z.string().optional()
+	before: K.optional(),
+	after: G.optional(),
+	message: z$1.string().optional()
 });
-const Q = z.object({
-	projectId: z.string(),
-	environmentId: z.string(),
-	changes: z.array(Z),
-	remoteOnly: z.array(G).default([])
+const $ = z$1.object({
+	projectId: z$1.string(),
+	environmentId: z$1.string(),
+	changes: z$1.array(Q),
+	remoteOnly: z$1.array(K).default([])
 });
-const $ = z.object({
-	projectId: z.string().min(1),
-	environmentId: z.string().min(1),
-	flags: z.array(W).max(500),
-	apply: z.boolean().default(!1),
-	prune: z.boolean().default(!1),
-	force: z.boolean().default(!1),
-	adopt: z.boolean().default(!1),
-	expectedVersions: z.record(z.string(), K).optional()
-}).superRefine((e, t) => Y(e.flags, t));
-const ee = z.object({
-	projectId: z.string(),
-	environmentId: z.string(),
-	applied: z.boolean(),
-	changes: z.array(Z),
-	remoteOnly: z.array(G).default([]),
-	forced: z.boolean().default(!1),
-	adopted: z.boolean().default(!1),
-	approvalRequests: z.array(z.string()).default([]),
-	drafts: z.array(z.string()).default([])
+const ee = z$1.object({
+	projectId: z$1.string().min(1),
+	environmentId: z$1.string().min(1),
+	flags: z$1.array(G).max(500),
+	apply: z$1.boolean().default(!1),
+	prune: z$1.boolean().default(!1),
+	force: z$1.boolean().default(!1),
+	adopt: z$1.boolean().default(!1),
+	expectedVersions: z$1.record(z$1.string(), q).optional()
+}).superRefine((e, t) => X(e.flags, t));
+const te = z$1.object({
+	projectId: z$1.string(),
+	environmentId: z$1.string(),
+	applied: z$1.boolean(),
+	changes: z$1.array(Q),
+	remoteOnly: z$1.array(K).default([]),
+	forced: z$1.boolean().default(!1),
+	adopted: z$1.boolean().default(!1),
+	approvalRequests: z$1.array(z$1.string()).default([]),
+	drafts: z$1.array(z$1.string()).default([])
 });
-//#endregion
-//#region src/lib/go-string.ts
+// src/lib/go-string.ts
 /** Go strings cannot represent JavaScript's unpaired UTF-16 surrogates. */
 function goString(value) {
 	for (const character of value) {
@@ -5001,8 +5057,7 @@ function goString(value) {
 	return JSON.stringify(value);
 }
-//#endregion
-//#region src/lib/go-config.ts
+// src/lib/go-config.ts
 /** Read the package clause after leading whitespace and comments, not comment text. */
 function goPackageClause(source) {
 	let offset = 0;
@@ -5194,9 +5249,8 @@ var Config = config.ShipdConfig${entries.length ? `{\n${entries.join("\n")}\n}`
 `;
 }
-//#endregion
-//#region src/lib/local-config.ts
-const localFlagsArraySchema = z.array(W).superRefine((flags, ctx) => {
+// src/lib/local-config.ts
+const localFlagsArraySchema = z$1.array(G).superRefine((flags, ctx) => {
 	const seen = /* @__PURE__ */ new Set();
 	for (const [index, flag] of flags.entries()) {
 		if (seen.has(flag.key)) ctx.addIssue({
@@ -5233,6 +5287,7 @@ async function loadLocalFlags(configFile) {
 		key,
 		type: flag.type,
 		default: flag.default,
+		clientAvailable: flag.clientAvailable,
 		description: flag.description,
 		tags: flag.tags ?? [],
 		lifecycle: flag.lifecycle ?? (flag.deprecated === true ? "deprecated" : "active"),
@@ -5250,6 +5305,7 @@ async function loadLocalFlags(configFile) {
 		key: flag.key,
 		type: flag.type,
 		default: flag.default,
+		clientAvailable: flag.clientAvailable,
 		description: flag.description,
 		tags: flag.tags,
 		lifecycle: flag.lifecycle,
@@ -5275,6 +5331,7 @@ ${flags.map((flag) => {
 		if (flag.type === "variant" && flag.variants) lines.push(`    variants: ${JSON.stringify(flag.variants)} as const,`, `    default: ${JSON.stringify(flag.default)},`);
 		else if (flag.type === "json") lines.push(`    default: ${serializeValue(flag.default)},`);
 		else lines.push(`    default: ${JSON.stringify(flag.default)},`);
+		if (flag.clientAvailable !== void 0) lines.push(`    clientAvailable: ${flag.clientAvailable},`);
 		if (flag.traits !== void 0) lines.push(`    traits: ${serializeValue(flag.traits)},`);
 		if (flag.targeting !== void 0) lines.push(`    targeting: ${serializeValue(flag.targeting)},`);
 		if (flag.description !== void 0) lines.push(`    description: ${JSON.stringify(flag.description)},`);
@@ -5340,8 +5397,7 @@ function generateJSONConfigSource(flags) {
 	}, null, 2)}\n`;
 }
-//#endregion
-//#region src/lib/plan.ts
+// src/lib/plan.ts
 const DEFINITION_FIELDS = [
 	"type",
 	"default",
@@ -5351,7 +5407,8 @@ const DEFINITION_FIELDS = [
 	"tags",
 	"lifecycle",
 	"variants",
-	"traits"
+	"traits",
+	"clientAvailable"
 ];
 function formatValue(value) {
 	if (value === void 0) return "undefined";
@@ -5360,6 +5417,7 @@ function formatValue(value) {
 function fieldChanges(before, after) {
 	const fields = {};
 	for (const field of DEFINITION_FIELDS) {
+		if (field === "clientAvailable" && after.clientAvailable === void 0) continue;
 		if (field === "traits" && after.traits === void 0) continue;
 		if (field === "targeting" && after.targeting === void 0) continue;
 		const from = before[field];
@@ -5377,7 +5435,8 @@ const DEFINITION_ONLY_FIELDS = [
 	"tags",
 	"lifecycle",
 	"variants",
-	"traits"
+	"traits",
+	"clientAvailable"
 ];
 function planHasDefinitionChanges(plan) {
 	if (plan.creates.length > 0 || plan.archives.length > 0) return true;
@@ -5464,13 +5523,12 @@ function formatSyncPlan(plan) {
 	}
 	if (planHasDefinitionChanges(plan)) {
 		lines.push("");
-		lines.push("Note: definition changes (type, variants, tags, lifecycle, description) apply to all environments.");
+		lines.push("Note: definition changes (type, variants, tags, lifecycle, description, clientAvailable) apply to all environments.");
 	}
 	return lines.join("\n").trimEnd();
 }
-//#endregion
-//#region src/commands/diff.ts
+// src/commands/diff.ts
 function registerDiffCommand(program) {
 	program.command("diff").description("Show drift between local definitions and the server").option("--exit-code", "Exit 2 on drift, 4 on unlinked (0 when clean)", false).action(async (opts, command) => {
 		const runtime = getRuntime(command);
@@ -5499,8 +5557,7 @@ function registerDiffCommand(program) {
 	});
 }
-//#endregion
-//#region src/commands/environments.ts
+// src/commands/environments.ts
 function registerEnvironmentsCommands(program) {
 	program.command("environments").description("Environment operations").command("list").description("List environments for the current project").action(async (_opts, command) => {
 		const runtime = getRuntime(command);
@@ -5522,16 +5579,14 @@ function registerEnvironmentsCommands(program) {
 	});
 }
-//#endregion
-//#region src/lib/flag-options.ts
+// src/lib/flag-options.ts
 /** Parse `--variants a,b` / `--variants a --variants b` into a deduped list. */
 function parseVariantsOption(raw) {
 	const parts = (Array.isArray(raw) ? raw : raw !== void 0 ? [raw] : []).flatMap((value) => value.split(",")).map((value) => value.trim()).filter((value) => value.length > 0);
 	return [...new Set(parts)];
 }
-//#endregion
-//#region src/commands/flags.ts
+// src/commands/flags.ts
 const FLAG_TYPES = [
 	"boolean",
 	"variant",
@@ -5588,8 +5643,7 @@ function registerFlagsCommands(program) {
 	});
 }
-//#endregion
-//#region src/commands/projects.ts
+// src/commands/projects.ts
 function registerProjectsCommands(program) {
 	program.command("projects").description("Project operations").command("list").description("List projects in the active organization").action(async (_opts, command) => {
 		const runtime = getRuntime(command);
@@ -5606,11 +5660,10 @@ function registerProjectsCommands(program) {
 	});
 }
-//#endregion
-//#region src/lib/sync-state.ts
-const stateSchema = z.object({
-	version: z.literal(1),
-	flags: z.record(o, B)
+// src/lib/sync-state.ts
+const stateSchema = z$1.object({
+	version: z$1.literal(1),
+	flags: z$1.record(o, V)
 }).strict();
 function stateFile(runtime, projectId, environmentId) {
 	const identity = JSON.stringify([
@@ -5670,8 +5723,7 @@ function assertPullPreservesLocalTargeting(state, local, remote) {
 	}
 }
-//#endregion
-//#region src/lib/go-typegen.ts
+// src/lib/go-typegen.ts
 const GO_KEYWORDS = new Set("break default func interface select case defer go map struct chan else goto package switch const fallthrough if range type continue for import return var".split(" "));
 function goName(value) {
 	let name = (value.normalize("NFC").match(/[\p{L}\p{Nd}]+/gu) ?? []).map((word) => word[0].toUpperCase() + word.slice(1)).join("");
@@ -5759,8 +5811,7 @@ ${declarations}
 `.trimEnd() + "\n";
 }
-//#endregion
-//#region src/lib/typegen.ts
+// src/lib/typegen.ts
 async function runTypegen(runtime, outPath = runtime.typesOut, options = {}) {
 	return writeTypegen(prepareTypegen(runtime, await loadLocalFlags(runtime.configFile), outPath, options));
 }
@@ -5783,8 +5834,7 @@ function writeTypegen(prepared) {
 	};
 }
-//#endregion
-//#region src/commands/pull.ts
+// src/commands/pull.ts
 function registerPullCommand(program) {
 	program.command("pull").description("Regenerate the flag config from the server and run typegen").option("--force", "Overwrite unsynced local targeting", false).action(async (opts, command) => {
 		const runtime = getRuntime(command);
@@ -5797,6 +5847,7 @@ function registerPullCommand(program) {
 			key: flag.key,
 			type: flag.type,
 			default: flag.default,
+			clientAvailable: flag.clientAvailable,
 			description: flag.description,
 			tags: flag.tags,
 			lifecycle: flag.lifecycle,
@@ -5823,8 +5874,7 @@ function registerPullCommand(program) {
 	});
 }
-//#endregion
-//#region src/commands/push.ts
+// src/commands/push.ts
 function expectedVersionsFromChanges(changes) {
 	const expected = {};
 	for (const change of changes) if (change.before?.version !== void 0) expected[change.key] = {
@@ -5907,8 +5957,7 @@ function registerPushCommand(program) {
 	});
 }
-//#endregion
-//#region src/commands/snapshots.ts
+// src/commands/snapshots.ts
 function registerSnapshotsCommands(program) {
 	const snapshots = program.command("snapshots").description("Data-plane snapshot operations");
 	snapshots.command("publish").description("Materialize the environment snapshot from Postgres and publish to the data plane").action(async (_opts, command) => {
@@ -5980,8 +6029,7 @@ function registerSnapshotsCommands(program) {
 	});
 }
-//#endregion
-//#region src/commands/types.ts
+// src/commands/types.ts
 function registerTypesCommands(program) {
 	program.command("types").description("Type generation helpers").command("gen").description("Generate TypeScript types or Go accessors from the local flag config").addOption(new Option("--language <language>", "Output language").choices(["typescript", "go"])).option("--package <name>", "Go package name (default: flags)").option("-o, --out <path>", "Output file path").action(async (opts, command) => {
 		const runtime = getRuntime(command);
@@ -5995,8 +6043,7 @@ function registerTypesCommands(program) {
 	});
 }
-//#endregion
-//#region src/index.ts
+// src/index.ts
 /** Detected before parse so usage errors can suppress Commander text under `--json`. */
 const jsonRequested = process.argv.includes("--json");
 const program = new Command().name("shipd").description("shipd CLI — flags as code").option("--json", "Machine-readable JSON output", false).option("--yes", "Skip confirmation prompts", false).option("--ci", "Non-interactive mode (same as --yes / CI=1)", false).option("--api-url <url>", `API origin (default: ${DEFAULT_API_URL})`).option("--org <slug>", "Organization slug (session: select; API key: must match)").option("--project <slug>", "Project slug").option("--env <slug>", "Environment slug").option("--config <path>", "Project settings JSON (.shipd/config.json shape)").option("--flags-config <path>", "Path to shipd.config.ts, shipd.config.go, or shipd.config.json").exitOverride().showHelpAfterError(!jsonRequested);
@@ -6051,5 +6098,4 @@ async function main() {
 }
 main();
-//#endregion
 export {  };