mc8yp 2.7.3 → 2.8.0

package/dist/cli.mjs

@@ -7,7 +7,6 @@ import * as tty from "node:tty";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { lookup } from "node:dns";
-import { lookup as lookup$1 } from "node:dns/promises";
 import { createSandbox } from "@iso4/sandbox";
 import { Bash } from "just-bash";
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
@@ -1824,7 +1823,7 @@ const consola = createConsola();
 //#endregion
 //#region package.json
 var name = "mc8yp";
-var version = "2.7.3";
+var version = "2.8.0";
 var description$1 = "Cumulocity IoT MCP Server - Model Context Protocol integration for IoT device management";
 //#endregion
 //#region \0virtual:core-openapi
@@ -1870,7 +1869,7 @@ const specs = Object.freeze([
 				},
 				{
 					"name": "Bulk operations",
-					"description": "The bulk operations API allows to schedule an operation on a group of devices to be executed at a specified time.\nIt is required to specify the delay between the creation of subsequent operations.\nWhen the bulk operation is created, it has the status ACTIVE.\nWhen all operations are created, the bulk operation has the status COMPLETED.\nIt is also possible to cancel an already created bulk operation by deleting it.\n\nWhen you create a bulk operation, you can run it in two modes:\n\n* If `groupId` is passed, it works the standard way, that means, it takes devices from a group and schedules operations on them.\n* If `failedParentId` is passed, it takes the already processed bulk operation by that ID, and schedules operations on devices for which the previous operations failed.\n\nNote that passing both `groupId` and `failedParentId` will not work, and a bulk operation works with groups of type `static` and `dynamic`.\n\n> **ⓘ Info:** The bulk operations API requires different roles than the rest of the device control API: `BULK_OPERATION_READ` and `BULK_OPERATION_ADMIN`.\n>\n> The Accept header should be provided in all POST/PUT requests, otherwise an empty response body will be returned.\n"
+					"description": "The bulk operations API allows you to schedule an operation on a group of devices.\nIt is required to specify the delay between the creation of subsequent operations.\n\nBulk operations are an asynchronous, best-effort mechanism to distribute an operation to a group of devices. They are not a precision scheduling tool. The platform starts creating the individual operations at the configured start date, but the exact creation and delivery times of the individual operations can vary. If devices must execute an operation at a precise time, deliver the operation to the devices ahead of time and include the desired execution time in the operation payload. The devices then trigger the execution locally at the specified time.\nWhen the bulk operation is created, it has the status ACTIVE.\nWhen all operations are created, the bulk operation has the status COMPLETED.\nIt is also possible to cancel an already created bulk operation by deleting it.\n\nWhen you create a bulk operation, you can run it in two modes:\n\n* If `groupId` is passed, it works the standard way, that means, it takes devices from a group and schedules operations on them.\n* If `failedParentId` is passed, it takes the already processed bulk operation by that ID, and schedules operations on devices for which the previous operations failed.\n\nNote that passing both `groupId` and `failedParentId` will not work, and a bulk operation works with groups of type `static` and `dynamic`.\n\n> **ⓘ Info:** The bulk operations API requires different roles than the rest of the device control API: `BULK_OPERATION_READ` and `BULK_OPERATION_ADMIN`.\n>\n> The Accept header should be provided in all POST/PUT requests, otherwise an empty response body will be returned.\n"
 				},
 				{
 					"name": "Device credentials",
@@ -3132,7 +3131,7 @@ const specs = Object.freeze([
 					"operationId": "getCurrentApplicationResourceSettings",
 					"tags": ["Current application"],
 					"summary": "Retrieve the current application settings",
-					"description": "Retrieve the current application settings.\nThis only works inside an application, for example, a microservice.\n\n<section><h5>Required roles</h5>\nMicroservice bootstrap user <b>OR</b> microservice service user required.\n</section>\n",
+					"description": "Retrieve the current application settings.\nThis only works inside an application, for example, a microservice.\n\nThe application settings are the [tenant options](#tag/Options) stored under the application's own category.\nThe category is determined based on the first non-blank value from the following, in order of priority:\n  * the `settingsCategory` defined in the microservice manifest\n  * the microservice's context path\n  * the microservice name\n\nOptions whose key carries the `credentials.` prefix are returned with the prefix removed and the value decrypted, provided the application owns the option. See [Create an option](#operation/postOptionCollectionResource) for details on encrypted credentials.\n\n<section><h5>Required roles</h5>\nMicroservice bootstrap user <b>OR</b> microservice service user required.\n</section>\n",
 					"responses": { "200": {
 						"description": "The request has succeeded and the current application settings are sent in the response.",
 						"content": { "application/vnd.com.nsn.cumulocity.option+json": { "schema": { "$ref": "#/components/schemas/application_settings" } } }
@@ -4454,13 +4453,15 @@ const specs = Object.freeze([
 							{ "$ref": "#/components/parameters/queryParam_pageSize" },
 							{ "$ref": "#/components/parameters/queryParam_users_username" },
 							{ "$ref": "#/components/parameters/queryParam_users_usernameContains" },
+							{ "$ref": "#/components/parameters/queryParam_users_withApps" },
+							{ "$ref": "#/components/parameters/queryParam_users_withGroups" },
 							{ "$ref": "#/components/parameters/queryParam_users_withSubusersCount" },
 							{ "$ref": "#/components/parameters/queryParam_withTotalElements" },
 							{ "$ref": "#/components/parameters/queryParam_withTotalPages" }
 						],
 						"tags": ["Users"],
 						"summary": "Retrieve all users for a specific tenant",
-						"description": "Retrieve all users for a specific tenant (by a given tenant ID).\n\n<section><h5>Required roles</h5>\nROLE_USER_MANAGEMENT_READ <b>OR</b> ROLE_USER_MANAGEMENT_CREATE\n</section>\n",
+						"description": "Retrieve all users for a specific tenant (by a given tenant ID).\n\nOn tenants with complex user objects, this request can be slow. Set `withApps=false` and/or `withGroups=false`\nto reduce the response payload and improve response times.\n<section><h5>Required roles</h5>\nROLE_USER_MANAGEMENT_READ <b>OR</b> ROLE_USER_MANAGEMENT_CREATE\n</section>\n",
 						"responses": { "200": {
 							"description": "The request has succeeded and all users are sent in the response.",
 							"content": { "application/vnd.com.nsn.cumulocity.usercollection+json": { "schema": { "$ref": "#/components/schemas/UserCollection" } } }
@@ -4712,11 +4713,13 @@ const specs = Object.freeze([
 						"parameters": [
 							{ "$ref": "#/components/parameters/queryParam_currentPage" },
 							{ "$ref": "#/components/parameters/queryParam_pageSize" },
+							{ "$ref": "#/components/parameters/queryParam_users_withApps" },
+							{ "$ref": "#/components/parameters/queryParam_users_withGroups" },
 							{ "$ref": "#/components/parameters/queryParam_withTotalElements" }
 						],
 						"tags": ["Users"],
 						"summary": "Retrieve the users of a specific user group of a specific tenant",
-						"description": "Retrieve the users of a specific user group (by a given user group ID) of a specific tenant (by a given tenant ID).\n\n<section><h5>Required roles</h5>\nROLE_USER_MANAGEMENT_READ <b>OR</b> (ROLE_USER_MANAGEMENT_CREATE <b>AND</b> has access to the user group)\n</section>\n",
+						"description": "Retrieve the users of a specific user group (by a given user group ID) of a specific tenant (by a given tenant ID).\n\nOn tenants with complex user objects, this request can be slow. Set `withApps=false` and/or `withGroups=false`\nto reduce the response payload and improve response times.\n<section><h5>Required roles</h5>\nROLE_USER_MANAGEMENT_READ <b>OR</b> (ROLE_USER_MANAGEMENT_CREATE <b>AND</b> has access to the user group)\n</section>\n",
 						"responses": { "200": {
 							"description": "The request has succeeded and the users are sent in the response.",
 							"content": { "application/vnd.com.nsn.cumulocity.userreferencecollection+json": { "schema": { "$ref": "#/components/schemas/UserReferenceCollection" } } }
@@ -4915,7 +4918,7 @@ const specs = Object.freeze([
 						"parameters": [{ "$ref": "#/components/parameters/acceptHeader" }, { "$ref": "#/components/parameters/processingModeHeader" }],
 						"tags": ["Measurements"],
 						"summary": "Create a measurement",
-						"description": "A measurement must be associated with a source (managed object) identified by ID, and must specify the type of measurement and the time when it was measured by the device (for example, a thermometer).\n\nEach measurement fragment is an object (for example, `c8y_Steam`) containing the actual measurements as properties. The property name represents the name of the measurement (for example, `Temperature`) and it contains two properties:\n\n*   `value` - The value of the individual measurement. The maximum precision for floating point numbers is 64-bit IEEE 754. For integers it's a 64-bit two's complement integer. The `value` is mandatory for a fragment.\n*   `unit` - The unit of the measurements. This field is optional in the request body; however, if it is provided, it must be a non-empty string and must not be null.\n\nReview the [System of units](#section/System-of-units) section for details about the conversions of units. Also review [Getting started > Technical concepts > Cumulocity's domain model > Inventory > Fragments > Naming conventions of fragments](https://www.cumulocity.com/docs/concepts/domain-model/#naming-conventions-of-fragments) in the Cumulocity user documentation.\n\nThe example below uses `c8y_SteamFragment` in the request body to illustrate recording two measurements called `Temperature` and `Humidity`.\n\n  ```json\n  {\n    \"source\": { \"id\": \"681200\" },\n    \"time\": \"2020-03-19T12:03:27.845Z\",\n    \"type\": \"temperatureMeasurement\",\n    \"c8y_SteamFragment\": {\n        \"Temperature\": { \"value\": 42.7, \"unit\": \"C\" },\n        \"Humidity\": { \"value\": 13.37, \"unit\": \"%RH\" }\n      }\n    }\n  ```\n\n> **⚠️ Important:** Property names used for fragment and series must not contain whitespaces nor the special characters `. , * [ ] ( ) @ $`. This is required to ensure a correct processing and visualization of measurement series on UI graphs.\n\n**Legacy compatibility:**\n\nFor legacy compatibility reasons, a measurement can contain custom fragments. The platform's behavior will vary based on whether the series in the custom fragment are valid or not:\n\n1. ***Mixed Series Fragments:***\n\nWhen creating a measurement with a fragment containing both valid and invalid series:\n  - Valid series (those with numeric value fields) are processed and persisted.\n  - Invalid series (e.g., Booleans, Lists, Strings, Structs) are silently ignored and are not included in the resulting measurement.\n  - The measurement is created successfully (HTTP 201 Created), but the invalid series are removed.\n\n**Example:**\n  ```json\n  {\n    \"source\": { \"id\": \"681200\" },\n    \"time\": \"2020-03-19T12:03:27.845Z\",\n    \"type\": \"temperatureMeasurement\",\n    \"c8y_SteamFragment\": {\n        \"validSeries_DOUBLE\": { \"value\": 3.141592653589793, \"unit\": \"RAD\" },\n        \"validSeries_INTEGER\": { \"value\": 42, \"unit\": \"C\" },\n        \"ignoredField_BOOLEAN\": { \"value\": false, \"unit\": \"t/f\" },\n        \"ignoredField_LIST\": { \"value\": [42, 43, 44] },\n        \"ignoredField_STRUCT\": { \"value\": { \"a\": 1, \"b\": 2 }, \"unit\": \"C\" },\n        \"ignoredField0\": 42,\n        \"ignoredField1\": { \"value\": { \"a\": 1, \"b\": 2 }, \"unit\": \"C\" },\n        \"ignoredField2\": { \"unit\": \"C\" },\n        \"ignoredField3\": { \"val\": 42 },\n        \"ignoredField4\": { \"subseries\": { \"value\": 42 } }\n      }\n    }\n  ```\n\n  **Response:**\n  ```json\n  {\n    \"self\": \"https://example.cumulocity.com/measurement/measurements/124\",\n    \"id\": \"124\",\n    \"type\": \"temperatureMeasurement\",\n    \"source\": { \"id\": \"681200\" },\n    \"time\": \"2020-03-19T12:03:27.845Z\",\n    \"c8y_SteamFragment\": {\n        \"validSeries_DOUBLE\": { \"value\": 3.141592653589793, \"unit\": \"RAD\" },\n        \"validSeries_INTEGER\": { \"value\": 42, \"unit\": \"C\" }\n      }\n    }\n  ```\n\n2. ***Fragments with Only Invalid Series:***\n\nIf a measurement fragment contains only invalid series, the entire fragment is preserved as a plain object, and no fields are removed or validated further. This means that such fragments are treated as normal document properties rather than as series fragments. As a result:\n  - These objects are not included in series fragment aggregation.\n  - They are not treated as part of the measurement's series data but remain accessible as regular property within the measurement document.\n\n**Example:**\n  ```json\n  {\n    \"source\": { \"id\": \"681200\" },\n    \"time\": \"2020-03-19T12:03:27.845Z\",\n    \"type\": \"temperatureMeasurement\",\n    \"c8y_SteamFragment\": {\n        \"invalidSeries_BOOLEAN\": { \"value\": false, \"unit\": \"t/f\" },\n        \"invalidSeries_LIST\": { \"value\": [1, 2, 3], \"unit\": \"list\" }\n    }\n  }\n  ```\n\n  **Response:**\n  ```json\n  {\n    \"self\": \"https://example.cumulocity.com/measurement/measurements/125\",\n    \"id\": \"125\",\n    \"type\": \"temperatureMeasurement\",\n    \"source\": { \"id\": \"681200\" },\n    \"time\": \"2020-03-19T12:03:27.845Z\",\n    \"c8y_SteamFragment\": {\n        \"invalidSeries_BOOLEAN\": { \"value\": false, \"unit\": \"t/f\" },\n        \"invalidSeries_LIST\": { \"value\": [1, 2, 3], \"unit\": \"list\" }\n      }\n    }\n  ```\n\nTo ensure data integrity, custom fragments should be used only with valid series.\n\n**Create multiple measurements**\n\nUsing the same API request, it is also possible to create multiple measurements by sending a `measurements` array containing all the measurements to be created. The content type must be `application/vnd.com.nsn.cumulocity.measurementcollection+json`.\n\n> **&#9432; Info:** For more details about fragments with specific meanings, refer to [Device management & connectivity > Device integration > Fragment library](https://www.cumulocity.com/docs/device-integration/fragment-library/) in the Cumulocity user documentation.\n\n<section><h5>Required roles</h5>\nROLE_MEASUREMENT_ADMIN <b>OR</b> owner of the source <b>OR</b> MEASUREMENT_ADMIN permission on the source\n</section>\n",
+						"description": "A measurement must be associated with a source (managed object) identified by ID, and must specify the type of measurement and the time when it was measured by the device (for example, a thermometer).\n\nEach measurement fragment is an object (for example, `c8y_Steam`) containing the actual measurements as properties. The property name represents the name of the measurement (for example, `Temperature`) and it contains two properties:\n\n*   `value` - The value of the individual measurement. The maximum precision for floating point numbers is 64-bit IEEE 754. For integers it's a 64-bit two's complement integer. The `value` is mandatory for a fragment.\n*   `unit` - The unit of the measurements. This field is optional in the request body; however, if it is provided, it must be a non-empty string and must not be null.\n\nReview the [System of units](#section/System-of-units) section for details about the conversions of units. Also review [Getting started > Technical concepts > Cumulocity's domain model > Inventory > Fragments > Naming conventions of fragments](https://www.cumulocity.com/docs/concepts/domain-model/#naming-conventions-of-fragments) in the Cumulocity user documentation.\n\nThe example below uses `c8y_SteamFragment` in the request body to illustrate recording two measurements called `Temperature` and `Humidity`.\n\n  ```json\n  {\n    \"source\": { \"id\": \"681200\" },\n    \"time\": \"2020-03-19T12:03:27.845Z\",\n    \"type\": \"temperatureMeasurement\",\n    \"c8y_SteamFragment\": {\n        \"Temperature\": { \"value\": 42.7, \"unit\": \"C\" },\n        \"Humidity\": { \"value\": 13.37, \"unit\": \"%RH\" }\n      }\n    }\n  ```\n\n> **⚠️ Important:** Property names used for fragment and series must not contain whitespaces nor the special characters `. , * [ ] ( ) @ $`. This is required to ensure a correct processing.\n\n**Legacy compatibility:**\n\nFor legacy compatibility reasons, a measurement can contain custom fragments. The platform's behavior will vary based on whether the series in the custom fragment are valid or not:\n\n1. ***Mixed Series Fragments:***\n\nWhen creating a measurement with a fragment containing both valid and invalid series:\n  - Valid series (those with numeric value fields) are processed and persisted.\n  - Invalid series (e.g., Booleans, Lists, Strings, Structs) are silently ignored and are not included in the resulting measurement.\n  - The measurement is created successfully (HTTP 201 Created), but the invalid series are removed.\n\n**Example:**\n  ```json\n  {\n    \"source\": { \"id\": \"681200\" },\n    \"time\": \"2020-03-19T12:03:27.845Z\",\n    \"type\": \"temperatureMeasurement\",\n    \"c8y_SteamFragment\": {\n        \"validSeries_DOUBLE\": { \"value\": 3.141592653589793, \"unit\": \"RAD\" },\n        \"validSeries_INTEGER\": { \"value\": 42, \"unit\": \"C\" },\n        \"ignoredField_BOOLEAN\": { \"value\": false, \"unit\": \"t/f\" },\n        \"ignoredField_LIST\": { \"value\": [42, 43, 44] },\n        \"ignoredField_STRUCT\": { \"value\": { \"a\": 1, \"b\": 2 }, \"unit\": \"C\" },\n        \"ignoredField0\": 42,\n        \"ignoredField1\": { \"value\": { \"a\": 1, \"b\": 2 }, \"unit\": \"C\" },\n        \"ignoredField2\": { \"unit\": \"C\" },\n        \"ignoredField3\": { \"val\": 42 },\n        \"ignoredField4\": { \"subseries\": { \"value\": 42 } }\n      }\n    }\n  ```\n\n  **Response:**\n  ```json\n  {\n    \"self\": \"https://example.cumulocity.com/measurement/measurements/124\",\n    \"id\": \"124\",\n    \"type\": \"temperatureMeasurement\",\n    \"source\": { \"id\": \"681200\" },\n    \"time\": \"2020-03-19T12:03:27.845Z\",\n    \"c8y_SteamFragment\": {\n        \"validSeries_DOUBLE\": { \"value\": 3.141592653589793, \"unit\": \"RAD\" },\n        \"validSeries_INTEGER\": { \"value\": 42, \"unit\": \"C\" }\n      }\n    }\n  ```\n\n2. ***Fragments with Only Invalid Series:***\n\nIf a measurement fragment contains only invalid series, the entire fragment is preserved as a plain object, and no fields are removed or validated further. This means that such fragments are treated as normal document properties rather than as series fragments. As a result:\n  - These objects are not included in series fragment aggregation.\n  - They are not treated as part of the measurement's series data but remain accessible as regular property within the measurement document.\n\n**Example:**\n  ```json\n  {\n    \"source\": { \"id\": \"681200\" },\n    \"time\": \"2020-03-19T12:03:27.845Z\",\n    \"type\": \"temperatureMeasurement\",\n    \"c8y_SteamFragment\": {\n        \"invalidSeries_BOOLEAN\": { \"value\": false, \"unit\": \"t/f\" },\n        \"invalidSeries_LIST\": { \"value\": [1, 2, 3], \"unit\": \"list\" }\n    }\n  }\n  ```\n\n  **Response:**\n  ```json\n  {\n    \"self\": \"https://example.cumulocity.com/measurement/measurements/125\",\n    \"id\": \"125\",\n    \"type\": \"temperatureMeasurement\",\n    \"source\": { \"id\": \"681200\" },\n    \"time\": \"2020-03-19T12:03:27.845Z\",\n    \"c8y_SteamFragment\": {\n        \"invalidSeries_BOOLEAN\": { \"value\": false, \"unit\": \"t/f\" },\n        \"invalidSeries_LIST\": { \"value\": [1, 2, 3], \"unit\": \"list\" }\n      }\n    }\n  ```\n\nTo ensure data integrity, custom fragments should be used only with valid series.\n\n**Create multiple measurements**\n\nUsing the same API request, it is also possible to create multiple measurements by sending a `measurements` array containing all the measurements to be created. The content type must be `application/vnd.com.nsn.cumulocity.measurementcollection+json`.\n\n> **&#9432; Info:** For more details about fragments with specific meanings, refer to [Device management & connectivity > Device integration > Fragment library](https://www.cumulocity.com/docs/device-integration/fragment-library/) in the Cumulocity user documentation.\n\n<section><h5>Required roles</h5>\nROLE_MEASUREMENT_ADMIN <b>OR</b> owner of the source <b>OR</b> MEASUREMENT_ADMIN permission on the source\n</section>\n",
 						"requestBody": {
 							"required": true,
 							"content": {
@@ -6264,7 +6267,7 @@ const specs = Object.freeze([
 						"parameters": [{ "$ref": "#/components/parameters/acceptHeader" }],
 						"tags": ["Options"],
 						"summary": "Create an option",
-						"description": "Create an option on your tenant.\n\nOptions are category-key-value tuples which store tenant configurations. Some categories of options allow the creation of new ones, while others are limited to predefined set of keys.\n\nAny option of any tenant can be defined as \"non-editable\" by the \"management\" tenant; once done, any PUT or DELETE requests made on that option by the tenant owner will result in a 403 error (Unauthorized).  \n\n> **⚠️ Important:** Category names must not contain whitespaces nor the special characters ``` $ & + , / : ; = ? @ \" < > # % { } | \\ ^ ~ [ ] ` ```. This is necessary to ensure the new tenant option is processed correctly and saved successfully.\n\n### Default option categories\n\n**access.control**\n\n| Key |	Default value |	Predefined | Description |\n|--|--|--|--|\n| allow.origin | * | Yes | Comma separated list of domains allowed for execution of CORS. Wildcards are allowed (for example, `*.cumulocity.com`) |\n\n**alarm.type.mapping**\n\n| Key  |	Predefined | Description |\n|--|--|--|\n| &lt;ALARM_TYPE> | No | Overrides the severity and alarm text for the alarm with type &lt;ALARM_TYPE>. The severity and text are specified as `<ALARM_SEVERITY>\\|<ALARM_TEXT>`. If either part is empty, the value will not be overridden. If the severity is NONE, the alarm will be suppressed. Example: `\"CRITICAL\\|temperature too high\"`|\n\n### Encrypted credentials\n\nAdding a `credentials.` prefix to the key causes the value of the option to be stored in an encrypted form. When the option is retrieved from a microservice, the `credentials.` prefix is removed, and the value is decrypted only if the microservice is the owner of the option. A microservice is considered the owner when the tenant option category matches its own category, which is determined based on the first non-blank value from the following, in order of priority:\n  * the `settingsCategory` defined in the microservice manifest\n  * the microservice’s context path\n  * the microservice name\n\nDecryption is performed only for system users (such as service users or the bootstrap user) who are the owners of the option. For example: \n```json\n{\n  \"category\": \"microservice1\",\n  \"key\": \"secret\",\n  \"value\": \"secret-content\"\n}\n```\n\nIf the tenant option category does not match any of these values, the encrypted value will not be decrypted, and static string will be returned. For example:\n\n```json\n{\n  \"category\": \"microservice2\",\n  \"key\": \"credentials.secret\",\n  \"value\": \"<<Encrypted>>\"\n}\n```\n<section><h5>Required roles</h5>\nROLE_OPTION_MANAGEMENT_ADMIN\n</section>\n",
+						"description": "Create an option on your tenant.\n\nOptions are category-key-value tuples which store tenant configurations. Some categories of options allow the creation of new ones, while others are limited to predefined set of keys.\n\nAny option of any tenant can be defined as \"non-editable\" by the \"management\" tenant; once done, any PUT or DELETE requests made on that option by the tenant owner will result in a 403 error (Unauthorized).  \n\n> **⚠️ Important:** Category names must not contain whitespaces nor the special characters ``` $ & + , / : ; = ? @ \" < > # % { } | \\ ^ ~ [ ] ` ```. This is necessary to ensure the new tenant option is processed correctly and saved successfully.\n\n### Default option categories\n\n**access.control**\n\n| Key |	Default value |	Predefined | Description |\n|--|--|--|--|\n| allow.origin | * | Yes | Comma separated list of domains allowed for execution of CORS. Wildcards are allowed (for example, `*.cumulocity.com`) |\n\n**alarm.type.mapping**\n\n| Key  |	Predefined | Description |\n|--|--|--|\n| &lt;ALARM_TYPE> | No | Overrides the severity and alarm text for the alarm with type &lt;ALARM_TYPE>. The severity and text are specified as `<ALARM_SEVERITY>\\|<ALARM_TEXT>`. If either part is empty, the value will not be overridden. If the severity is NONE, the alarm will be suppressed. Example: `\"CRITICAL\\|temperature too high\"`|\n\n### Encrypted credentials\n\nAdding a `credentials.` prefix to the key causes the value of the option to be stored in an encrypted form. When the option is retrieved from a microservice, the `credentials.` prefix is removed, and the value is decrypted only if the microservice is the owner of the option. A microservice is considered the owner when the tenant option category matches its own category, which is determined based on the first non-blank value from the following, in order of priority:\n  * the `settingsCategory` defined in the microservice manifest\n  * the microservice's context path\n  * the microservice name\n\nA microservice can retrieve all the options of its own category at once through [Retrieve the current application settings](#operation/getCurrentApplicationResourceSettings).\n\nDecryption is performed only for system users (such as service users or the bootstrap user) who are the owners of the option. For example: \n```json\n{\n  \"category\": \"microservice1\",\n  \"key\": \"secret\",\n  \"value\": \"secret-content\"\n}\n```\n\nIf the tenant option category does not match any of these values, the encrypted value will not be decrypted, and static string will be returned. For example:\n\n```json\n{\n  \"category\": \"microservice2\",\n  \"key\": \"credentials.secret\",\n  \"value\": \"<<Encrypted>>\"\n}\n```\n<section><h5>Required roles</h5>\nROLE_OPTION_MANAGEMENT_ADMIN\n</section>\n",
 						"requestBody": {
 							"required": true,
 							"content": { "application/vnd.com.nsn.cumulocity.option+json": {
@@ -6300,7 +6303,7 @@ const specs = Object.freeze([
 						"operationId": "getCategoryOptionResource",
 						"tags": ["Options"],
 						"summary": "Retrieve all options by category",
-						"description": "Retrieve all the options (by a specified category) on your tenant.\n> **⚠️ Important:** Note that Enterprise Tenants are also allowed to read inherited tenant options from the management tenant.\n\n<section><h5>Required roles</h5>\nROLE_OPTION_MANAGEMENT_READ\n</section>\n",
+						"description": "Retrieve all the options (by a specified category) on your tenant.\n> **⚠️ Important:** Note that Enterprise Tenants are also allowed to read inherited tenant options from the management tenant.\n\nA microservice can read the options of its own category through [Retrieve the current application settings](#operation/getCurrentApplicationResourceSettings).\n\n<section><h5>Required roles</h5>\nROLE_OPTION_MANAGEMENT_READ\n</section>\n",
 						"responses": { "200": { "$ref": "#/components/responses/categoryOptionsFound" } }
 					},
 					"put": {
@@ -8120,6 +8123,26 @@ const specs = Object.freeze([
 							"example": true
 						}
 					},
+					"queryParam_users_withApps": {
+						"name": "withApps",
+						"in": "query",
+						"description": "If set to `false`, the applications of each returned user are reduced to references containing only `id` and `self`,\ninstead of the full application objects. Use it to speed up the request when the application details are not needed.\n",
+						"schema": {
+							"type": "boolean",
+							"default": true,
+							"example": false
+						}
+					},
+					"queryParam_users_withGroups": {
+						"name": "withGroups",
+						"in": "query",
+						"description": "If set to `false`, the applications assigned to the user groups of each returned user are omitted.\nThe groups themselves and their roles are still returned. Use it to reduce the response payload.\n",
+						"schema": {
+							"type": "boolean",
+							"default": true,
+							"example": false
+						}
+					},
 					"queryParam_tenant_dateFrom": {
 						"name": "dateFrom",
 						"in": "query",
@@ -9985,7 +10008,7 @@ const specs = Object.freeze([
 						}
 					},
 					"application_settings": {
-						"description": "A map of settings for this microservice application.",
+						"description": "A map of settings for this microservice application.\nThe settings are stored as tenant options in the application's settings category.\n",
 						"type": "object",
 						"additionalProperties": { "type": "string" },
 						"example": {
@@ -10096,7 +10119,7 @@ const specs = Object.freeze([
 								"type": "string"
 							},
 							"startDate": {
-								"description": "Date and time when the operations of this bulk operation should be created.",
+								"description": "Date and time when the platform starts creating the operations of this bulk operation on a best-effort basis.\nThe exact creation and delivery times of the individual operations can vary.\n",
 								"type": "string",
 								"format": "date-time"
 							},
@@ -15722,7 +15745,7 @@ const specs = Object.freeze([
 					},
 					"SSO": {
 						"type": "oauth2",
-						"description": "The login with SSO requires a correct configuration on the [Cumulocity side](https://www.cumulocity.com/docs/authentication/sso/). With the configuration, an additional button is available on the Login page. After clicking the button, the user is redirected to authenticate with the configured authorization server. On successful login, the user is redirected to Cumulocity.\n\nAuthentication details are exchanged using cookies. There are two parts to it, the first is the authentication cookie that is handled automatically by the Cumulocity platform. The second is the XSRF-TOKEN cookie. When a client receives the cookie, it should take the value and put it in the X-XSRF-TOKEN request header in all subsequent requests.\n\nThe flow of authenticating with authentication code grant is as follows:\n\n![Authentication flow](images/oauth-simple-flow.png)\n\nThe first request executed by the browser is:\n\n```http\nPOST /tenant/loginOptions\nHost: https://<TENANT_DOMAIN>\nContent-Type: application/vnd.com.nsn.cumulocity.loginoptioncollection+json\nAccept: application/vnd.com.nsn.cumulocity.loginoptioncollection+json\n```\n\nResponse sample:\n\n```json\n{\n    \"loginOptions\": [\n        {\n            \"buttonName\": \"Login with oauth\",\n            \"grantType\": \"<AUTHORIZATION_CODE>\",\n            \"initRequest\": \"https://<TENANT_DOMAIN>/tenant/oauth?response_type=code&tenant_id=<TENANT_ID>\",\n            \"self\": \"https://<TENANT_DOMAIN>/tenant/loginOptions/oauth2\",\n            \"type\": \"oauth2\"\n        },\n        ...\n    ],\n    \"self\": \"http://<TENANT_DOMAIN>/tenant/loginOptions/\"\n}\n```\n\nThe browser must invoke the request provided in the initRequest parameter.\n\nThe initRequest initiates the redirect, in which the user is prompted for credentials. After successful login, the user is redirected back to the browser, where it must capture the code request parameter. Then the request to exchange the code for the token is as follows:\n\n```http\nPOST /tenant/oauth?grant_type=authorization_code&code=<CODE>\nHost: https://<TENANT_DOMAIN>\n```\n\nA successful response will have no body but the following response headers:\n\n```\nSet-Cookie: authorization=<TOKEN>;\nSet-Cookie: XSRF-TOKEN=<XSRF-TOKEN>;\n```\n\nThe authorization cookie is valid for two weeks.\n",
+						"description": "The login with SSO requires a correct configuration on the [Cumulocity side](https://www.cumulocity.com/docs/authentication/sso/). With the configuration, an additional button is available on the Login page. After clicking the button, the user is redirected to authenticate with the configured authorization server. On successful login, the user is redirected to Cumulocity.\n\nAuthentication details are exchanged using cookies. There are two parts to it, the first is the authentication cookie that is handled automatically by the Cumulocity platform. The second is the XSRF-TOKEN cookie. When a client receives the cookie, it should take the value and put it in the X-XSRF-TOKEN request header in all subsequent requests.\n\nThe flow of authenticating with authentication code grant is as follows:\n\n![Authentication flow](images/oauth-simple-flow.png)\n\nThe first request executed by the browser is:\n\n```http\nGET /tenant/loginOptions\nHost: https://<TENANT_DOMAIN>\nAccept: application/vnd.com.nsn.cumulocity.loginoptioncollection+json\n```\n\nResponse sample:\n\n```json\n{\n    \"loginOptions\": [\n        {\n            \"buttonName\": \"Login with oauth\",\n            \"grantType\": \"<AUTHORIZATION_CODE>\",\n            \"initRequest\": \"https://<TENANT_DOMAIN>/tenant/oauth?response_type=code&tenant_id=<TENANT_ID>\",\n            \"self\": \"https://<TENANT_DOMAIN>/tenant/loginOptions/oauth2\",\n            \"type\": \"oauth2\"\n        },\n        ...\n    ],\n    \"self\": \"http://<TENANT_DOMAIN>/tenant/loginOptions/\"\n}\n```\n\nThe browser must invoke the request provided in the initRequest parameter.\n\nThe initRequest initiates the redirect, in which the user is prompted for credentials. After successful login, the user is redirected back to the browser, where it must capture the code request parameter. Then the request to exchange the code for the token is as follows:\n\n```http\nPOST /tenant/oauth?grant_type=authorization_code&code=<CODE>\nHost: https://<TENANT_DOMAIN>\n```\n\nA successful response will have no body but the following response headers:\n\n```\nSet-Cookie: authorization=<TOKEN>;\nSet-Cookie: XSRF-TOKEN=<XSRF-TOKEN>;\n```\n\nThe authorization cookie is valid for two weeks.\n",
 						"flows": { "clientCredentials": {
 							"tokenUrl": "/tenant/oauth?grant_type=authorization_code&code=<CODE>",
 							"scopes": {}
@@ -54096,12 +54119,12 @@ var require_client$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 			},
 			trys: [],
 			ops: []
-		}, f, y, t, g;
-		return g = {
+		}, f, y, t, g = {
 			next: verb(0),
 			"throw": verb(1),
 			"return": verb(2)
-		}, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+		};
+		return typeof Symbol === "function" && (g[Symbol.iterator] = function() {
 			return this;
 		}), g;
 		function verb(n) {
@@ -54361,12 +54384,12 @@ var require_server = /* @__PURE__ */ __commonJSMin(((exports) => {
 			},
 			trys: [],
 			ops: []
-		}, f, y, t, g;
-		return g = {
+		}, f, y, t, g = {
 			next: verb(0),
 			"throw": verb(1),
 			"return": verb(2)
-		}, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+		};
+		return typeof Symbol === "function" && (g[Symbol.iterator] = function() {
 			return this;
 		}), g;
 		function verb(n) {
@@ -54645,12 +54668,12 @@ var require_server_and_client = /* @__PURE__ */ __commonJSMin(((exports) => {
 			},
 			trys: [],
 			ops: []
-		}, f, y, t, g;
-		return g = {
+		}, f, y, t, g = {
 			next: verb(0),
 			"throw": verb(1),
 			"return": verb(2)
-		}, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+		};
+		return typeof Symbol === "function" && (g[Symbol.iterator] = function() {
 			return this;
 		}), g;
 		function verb(n) {
@@ -55330,9 +55353,9 @@ var UriTemplateMatcher = class {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/valibot@1.4.1_typescript@6.0.3/node_modules/valibot/dist/index.mjs
+//#region node_modules/.pnpm/valibot@1.4.2_typescript@6.0.3/node_modules/valibot/dist/index.mjs
 var import_dist = require_dist();
-const DEFAULT_CONFIG$1 = {
+const DEFAULT_CONFIG = {
 	lang: void 0,
 	message: void 0,
 	abortEarly: void 0,
@@ -55346,8 +55369,8 @@ const DEFAULT_CONFIG$1 = {
 * @returns The configuration.
 */
 /* @__NO_SIDE_EFFECTS__ */
-function getGlobalConfig$1(config$1) {
-	if (!config$1 && true) return DEFAULT_CONFIG$1;
+function getGlobalConfig(config$1) {
+	if (!config$1 && true) return DEFAULT_CONFIG;
 	return {
 		lang: config$1?.lang ?? void 0,
 		message: config$1?.message,
@@ -55365,7 +55388,7 @@ function getGlobalConfig$1(config$1) {
 * @internal
 */
 /* @__NO_SIDE_EFFECTS__ */
-function _stringify$1(input) {
+function _stringify(input) {
 	const type = typeof input;
 	if (type === "string") return `"${input}"`;
 	if (type === "number" || type === "bigint" || type === "boolean") return `${input}`;
@@ -55383,10 +55406,10 @@ function _stringify$1(input) {
 *
 * @internal
 */
-function _addIssue$1(context, label, dataset, config$1, other) {
+function _addIssue(context, label, dataset, config$1, other) {
 	const input = other && "input" in other ? other.input : dataset.value;
 	const expected = other?.expected ?? context.expects ?? null;
-	const received = other?.received ?? /* @__PURE__ */ _stringify$1(input);
+	const received = other?.received ?? /* @__PURE__ */ _stringify(input);
 	const issue = {
 		kind: context.kind,
 		type: context.type,
@@ -55408,7 +55431,7 @@ function _addIssue$1(context, label, dataset, config$1, other) {
 	if (dataset.issues) dataset.issues.push(issue);
 	else dataset.issues = [issue];
 }
-const _standardCache$1 = /* @__PURE__ */ new WeakMap();
+const _standardCache = /* @__PURE__ */ new WeakMap();
 /**
 * Returns the Standard Schema properties.
 *
@@ -55417,17 +55440,17 @@ const _standardCache$1 = /* @__PURE__ */ new WeakMap();
 * @returns The Standard Schema properties.
 */
 /* @__NO_SIDE_EFFECTS__ */
-function _getStandardProps$1(context) {
-	let cached = _standardCache$1.get(context);
+function _getStandardProps(context) {
+	let cached = _standardCache.get(context);
 	if (!cached) {
 		cached = {
 			version: 1,
 			vendor: "valibot",
 			validate(value$1) {
-				return context["~run"]({ value: value$1 }, /* @__PURE__ */ getGlobalConfig$1());
+				return context["~run"]({ value: value$1 }, /* @__PURE__ */ getGlobalConfig());
 			}
 		};
-		_standardCache$1.set(context, cached);
+		_standardCache.set(context, cached);
 	}
 	return cached;
 }
@@ -55465,7 +55488,7 @@ function _joinExpects(values$1, separator) {
 /**
 * A Valibot error with useful information.
 */
-var ValiError$1 = class extends Error {
+var ValiError = class extends Error {
 	/**
 	* Creates a Valibot error with useful information.
 	*
@@ -55492,11 +55515,27 @@ function base64(message$1) {
 		requirement: BASE64_REGEX,
 		message: message$1,
 		"~run"(dataset, config$1) {
-			if (dataset.typed && !this.requirement.test(dataset.value)) _addIssue$1(this, "Base64", dataset, config$1);
+			if (dataset.typed && !this.requirement.test(dataset.value)) _addIssue(this, "Base64", dataset, config$1);
 			return dataset;
 		}
 	};
 }
+/**
+* Creates a description metadata action.
+*
+* @param description_ The description text.
+*
+* @returns A description action.
+*/
+/* @__NO_SIDE_EFFECTS__ */
+function description(description_) {
+	return {
+		kind: "metadata",
+		type: "description",
+		reference: description,
+		description: description_
+	};
+}
 /* @__NO_SIDE_EFFECTS__ */
 function integer(message$1) {
 	return {
@@ -55508,7 +55547,7 @@ function integer(message$1) {
 		requirement: Number.isInteger,
 		message: message$1,
 		"~run"(dataset, config$1) {
-			if (dataset.typed && !this.requirement(dataset.value)) _addIssue$1(this, "integer", dataset, config$1);
+			if (dataset.typed && !this.requirement(dataset.value)) _addIssue(this, "integer", dataset, config$1);
 			return dataset;
 		}
 	};
@@ -55524,7 +55563,7 @@ function maxLength(requirement, message$1) {
 		requirement,
 		message: message$1,
 		"~run"(dataset, config$1) {
-			if (dataset.typed && dataset.value.length > this.requirement) _addIssue$1(this, "length", dataset, config$1, { received: `${dataset.value.length}` });
+			if (dataset.typed && dataset.value.length > this.requirement) _addIssue(this, "length", dataset, config$1, { received: `${dataset.value.length}` });
 			return dataset;
 		}
 	};
@@ -55536,11 +55575,27 @@ function maxValue(requirement, message$1) {
 		type: "max_value",
 		reference: maxValue,
 		async: false,
-		expects: `<=${requirement instanceof Date ? requirement.toJSON() : /* @__PURE__ */ _stringify$1(requirement)}`,
+		expects: `<=${requirement instanceof Date ? requirement.toJSON() : /* @__PURE__ */ _stringify(requirement)}`,
+		requirement,
+		message: message$1,
+		"~run"(dataset, config$1) {
+			if (dataset.typed && !(dataset.value <= this.requirement)) _addIssue(this, "value", dataset, config$1, { received: dataset.value instanceof Date ? dataset.value.toJSON() : /* @__PURE__ */ _stringify(dataset.value) });
+			return dataset;
+		}
+	};
+}
+/* @__NO_SIDE_EFFECTS__ */
+function minLength(requirement, message$1) {
+	return {
+		kind: "validation",
+		type: "min_length",
+		reference: minLength,
+		async: false,
+		expects: `>=${requirement}`,
 		requirement,
 		message: message$1,
 		"~run"(dataset, config$1) {
-			if (dataset.typed && !(dataset.value <= this.requirement)) _addIssue$1(this, "value", dataset, config$1, { received: dataset.value instanceof Date ? dataset.value.toJSON() : /* @__PURE__ */ _stringify$1(dataset.value) });
+			if (dataset.typed && dataset.value.length < this.requirement) _addIssue(this, "length", dataset, config$1, { received: `${dataset.value.length}` });
 			return dataset;
 		}
 	};
@@ -55552,21 +55607,21 @@ function minValue(requirement, message$1) {
 		type: "min_value",
 		reference: minValue,
 		async: false,
-		expects: `>=${requirement instanceof Date ? requirement.toJSON() : /* @__PURE__ */ _stringify$1(requirement)}`,
+		expects: `>=${requirement instanceof Date ? requirement.toJSON() : /* @__PURE__ */ _stringify(requirement)}`,
 		requirement,
 		message: message$1,
 		"~run"(dataset, config$1) {
-			if (dataset.typed && !(dataset.value >= this.requirement)) _addIssue$1(this, "value", dataset, config$1, { received: dataset.value instanceof Date ? dataset.value.toJSON() : /* @__PURE__ */ _stringify$1(dataset.value) });
+			if (dataset.typed && !(dataset.value >= this.requirement)) _addIssue(this, "value", dataset, config$1, { received: dataset.value instanceof Date ? dataset.value.toJSON() : /* @__PURE__ */ _stringify(dataset.value) });
 			return dataset;
 		}
 	};
 }
 /* @__NO_SIDE_EFFECTS__ */
-function url$1(message$1) {
+function url(message$1) {
 	return {
 		kind: "validation",
 		type: "url",
-		reference: url$1,
+		reference: url,
 		async: false,
 		expects: null,
 		requirement(input) {
@@ -55579,7 +55634,7 @@ function url$1(message$1) {
 		},
 		message: message$1,
 		"~run"(dataset, config$1) {
-			if (dataset.typed && !this.requirement(dataset.value)) _addIssue$1(this, "URL", dataset, config$1);
+			if (dataset.typed && !this.requirement(dataset.value)) _addIssue(this, "URL", dataset, config$1);
 			return dataset;
 		}
 	};
@@ -55595,7 +55650,7 @@ const ABORT_EARLY_CONFIG = { abortEarly: true };
 * @returns The fallback value.
 */
 /* @__NO_SIDE_EFFECTS__ */
-function getFallback$1(schema, dataset, config$1) {
+function getFallback(schema, dataset, config$1) {
 	return typeof schema.fallback === "function" ? schema.fallback(dataset, config$1) : schema.fallback;
 }
 /**
@@ -55608,7 +55663,7 @@ function getFallback$1(schema, dataset, config$1) {
 * @returns The default value.
 */
 /* @__NO_SIDE_EFFECTS__ */
-function getDefault$1(schema, dataset, config$1) {
+function getDefault(schema, dataset, config$1) {
 	return typeof schema.default === "function" ? schema.default(dataset, config$1) : schema.default;
 }
 /* @__NO_SIDE_EFFECTS__ */
@@ -55622,7 +55677,7 @@ function array(item, message$1) {
 		item,
 		message: message$1,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
 			const input = dataset.value;
@@ -55654,26 +55709,26 @@ function array(item, message$1) {
 					if (!itemDataset.typed) dataset.typed = false;
 					dataset.value.push(itemDataset.value);
 				}
-			} else _addIssue$1(this, "type", dataset, config$1);
+			} else _addIssue(this, "type", dataset, config$1);
 			return dataset;
 		}
 	};
 }
 /* @__NO_SIDE_EFFECTS__ */
-function boolean$1(message$1) {
+function boolean(message$1) {
 	return {
 		kind: "schema",
 		type: "boolean",
-		reference: boolean$1,
+		reference: boolean,
 		expects: "boolean",
 		async: false,
 		message: message$1,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
 			if (typeof dataset.value === "boolean") dataset.typed = true;
-			else _addIssue$1(this, "type", dataset, config$1);
+			else _addIssue(this, "type", dataset, config$1);
 			return dataset;
 		}
 	};
@@ -55689,11 +55744,11 @@ function custom(check$1, message$1) {
 		check: check$1,
 		message: message$1,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
 			if (this.check(dataset.value)) dataset.typed = true;
-			else _addIssue$1(this, "type", dataset, config$1);
+			else _addIssue(this, "type", dataset, config$1);
 			return dataset;
 		}
 	};
@@ -55704,16 +55759,16 @@ function literal(literal_, message$1) {
 		kind: "schema",
 		type: "literal",
 		reference: literal,
-		expects: /* @__PURE__ */ _stringify$1(literal_),
+		expects: /* @__PURE__ */ _stringify(literal_),
 		async: false,
 		literal: literal_,
 		message: message$1,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
 			if (dataset.value === this.literal) dataset.typed = true;
-			else _addIssue$1(this, "type", dataset, config$1);
+			else _addIssue(this, "type", dataset, config$1);
 			return dataset;
 		}
 	};
@@ -55729,7 +55784,7 @@ function looseObject(entries$1, message$1) {
 		entries: entries$1,
 		message: message$1,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
 			const input = dataset.value;
@@ -55739,7 +55794,7 @@ function looseObject(entries$1, message$1) {
 				for (const key in this.entries) {
 					const valueSchema = this.entries[key];
 					if (key in input || (valueSchema.type === "exact_optional" || valueSchema.type === "optional" || valueSchema.type === "nullish") && valueSchema.default !== void 0) {
-						const value$1 = key in input ? input[key] : /* @__PURE__ */ getDefault$1(valueSchema);
+						const value$1 = key in input ? input[key] : /* @__PURE__ */ getDefault(valueSchema);
 						const valueDataset = valueSchema["~run"]({ value: value$1 }, config$1);
 						if (valueDataset.issues) {
 							const pathItem = {
@@ -55762,9 +55817,9 @@ function looseObject(entries$1, message$1) {
 						}
 						if (!valueDataset.typed) dataset.typed = false;
 						dataset.value[key] = valueDataset.value;
-					} else if (valueSchema.fallback !== void 0) dataset.value[key] = /* @__PURE__ */ getFallback$1(valueSchema);
+					} else if (valueSchema.fallback !== void 0) dataset.value[key] = /* @__PURE__ */ getFallback(valueSchema);
 					else if (valueSchema.type !== "exact_optional" && valueSchema.type !== "optional" && valueSchema.type !== "nullish") {
-						_addIssue$1(this, "key", dataset, config$1, {
+						_addIssue(this, "key", dataset, config$1, {
 							input: void 0,
 							expected: `"${key}"`,
 							path: [{
@@ -55781,112 +55836,28 @@ function looseObject(entries$1, message$1) {
 				if (!dataset.issues || !config$1.abortEarly) {
 					for (const key in input) if (/* @__PURE__ */ _isValidObjectKey(input, key) && !(key in this.entries)) dataset.value[key] = input[key];
 				}
-			} else _addIssue$1(this, "type", dataset, config$1);
-			return dataset;
-		}
-	};
-}
-/* @__NO_SIDE_EFFECTS__ */
-function number(message$1) {
-	return {
-		kind: "schema",
-		type: "number",
-		reference: number,
-		expects: "number",
-		async: false,
-		message: message$1,
-		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
-		},
-		"~run"(dataset, config$1) {
-			if (typeof dataset.value === "number" && !isNaN(dataset.value)) dataset.typed = true;
-			else _addIssue$1(this, "type", dataset, config$1);
-			return dataset;
-		}
-	};
-}
-/* @__NO_SIDE_EFFECTS__ */
-function object$2(entries$1, message$1) {
-	return {
-		kind: "schema",
-		type: "object",
-		reference: object$2,
-		expects: "Object",
-		async: false,
-		entries: entries$1,
-		message: message$1,
-		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
-		},
-		"~run"(dataset, config$1) {
-			const input = dataset.value;
-			if (input && typeof input === "object") {
-				dataset.typed = true;
-				dataset.value = {};
-				for (const key in this.entries) {
-					const valueSchema = this.entries[key];
-					if (key in input || (valueSchema.type === "exact_optional" || valueSchema.type === "optional" || valueSchema.type === "nullish") && valueSchema.default !== void 0) {
-						const value$1 = key in input ? input[key] : /* @__PURE__ */ getDefault$1(valueSchema);
-						const valueDataset = valueSchema["~run"]({ value: value$1 }, config$1);
-						if (valueDataset.issues) {
-							const pathItem = {
-								type: "object",
-								origin: "value",
-								input,
-								key,
-								value: value$1
-							};
-							for (const issue of valueDataset.issues) {
-								if (issue.path) issue.path.unshift(pathItem);
-								else issue.path = [pathItem];
-								dataset.issues?.push(issue);
-							}
-							if (!dataset.issues) dataset.issues = valueDataset.issues;
-							if (config$1.abortEarly) {
-								dataset.typed = false;
-								break;
-							}
-						}
-						if (!valueDataset.typed) dataset.typed = false;
-						dataset.value[key] = valueDataset.value;
-					} else if (valueSchema.fallback !== void 0) dataset.value[key] = /* @__PURE__ */ getFallback$1(valueSchema);
-					else if (valueSchema.type !== "exact_optional" && valueSchema.type !== "optional" && valueSchema.type !== "nullish") {
-						_addIssue$1(this, "key", dataset, config$1, {
-							input: void 0,
-							expected: `"${key}"`,
-							path: [{
-								type: "object",
-								origin: "key",
-								input,
-								key,
-								value: input[key]
-							}]
-						});
-						if (config$1.abortEarly) break;
-					}
-				}
-			} else _addIssue$1(this, "type", dataset, config$1);
+			} else _addIssue(this, "type", dataset, config$1);
 			return dataset;
 		}
 	};
 }
 /* @__NO_SIDE_EFFECTS__ */
-function optional$1(wrapped, default_) {
+function nullable(wrapped, default_) {
 	return {
 		kind: "schema",
-		type: "optional",
-		reference: optional$1,
-		expects: `(${wrapped.expects} | undefined)`,
+		type: "nullable",
+		reference: nullable,
+		expects: `(${wrapped.expects} | null)`,
 		async: false,
 		wrapped,
 		default: default_,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
-			if (dataset.value === void 0) {
-				if (this.default !== void 0) dataset.value = /* @__PURE__ */ getDefault$1(this, dataset, config$1);
-				if (dataset.value === void 0) {
+			if (dataset.value === null) {
+				if (this.default !== void 0) dataset.value = /* @__PURE__ */ getDefault(this, dataset, config$1);
+				if (dataset.value === null) {
 					dataset.typed = true;
 					return dataset;
 				}
@@ -55896,105 +55867,36 @@ function optional$1(wrapped, default_) {
 	};
 }
 /* @__NO_SIDE_EFFECTS__ */
-function picklist(options, message$1) {
-	return {
-		kind: "schema",
-		type: "picklist",
-		reference: picklist,
-		expects: /* @__PURE__ */ _joinExpects(options.map(_stringify$1), "|"),
-		async: false,
-		options,
-		message: message$1,
-		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
-		},
-		"~run"(dataset, config$1) {
-			if (this.options.includes(dataset.value)) dataset.typed = true;
-			else _addIssue$1(this, "type", dataset, config$1);
-			return dataset;
-		}
-	};
-}
-/* @__NO_SIDE_EFFECTS__ */
-function record(key, value$1, message$1) {
+function number(message$1) {
 	return {
 		kind: "schema",
-		type: "record",
-		reference: record,
-		expects: "Object",
+		type: "number",
+		reference: number,
+		expects: "number",
 		async: false,
-		key,
-		value: value$1,
 		message: message$1,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
-			const input = dataset.value;
-			if (input && typeof input === "object") {
-				dataset.typed = true;
-				dataset.value = {};
-				for (const entryKey in input) if (/* @__PURE__ */ _isValidObjectKey(input, entryKey)) {
-					const entryValue = input[entryKey];
-					const keyDataset = this.key["~run"]({ value: entryKey }, config$1);
-					if (keyDataset.issues) {
-						const pathItem = {
-							type: "object",
-							origin: "key",
-							input,
-							key: entryKey,
-							value: entryValue
-						};
-						for (const issue of keyDataset.issues) {
-							issue.path = [pathItem];
-							dataset.issues?.push(issue);
-						}
-						if (!dataset.issues) dataset.issues = keyDataset.issues;
-						if (config$1.abortEarly) {
-							dataset.typed = false;
-							break;
-						}
-					}
-					const valueDataset = this.value["~run"]({ value: entryValue }, config$1);
-					if (valueDataset.issues) {
-						const pathItem = {
-							type: "object",
-							origin: "value",
-							input,
-							key: entryKey,
-							value: entryValue
-						};
-						for (const issue of valueDataset.issues) {
-							if (issue.path) issue.path.unshift(pathItem);
-							else issue.path = [pathItem];
-							dataset.issues?.push(issue);
-						}
-						if (!dataset.issues) dataset.issues = valueDataset.issues;
-						if (config$1.abortEarly) {
-							dataset.typed = false;
-							break;
-						}
-					}
-					if (!keyDataset.typed || !valueDataset.typed) dataset.typed = false;
-					if (keyDataset.typed) dataset.value[keyDataset.value] = valueDataset.value;
-				}
-			} else _addIssue$1(this, "type", dataset, config$1);
+			if (typeof dataset.value === "number" && !isNaN(dataset.value)) dataset.typed = true;
+			else _addIssue(this, "type", dataset, config$1);
 			return dataset;
 		}
 	};
 }
 /* @__NO_SIDE_EFFECTS__ */
-function strictObject(entries$1, message$1) {
+function object(entries$1, message$1) {
 	return {
 		kind: "schema",
-		type: "strict_object",
-		reference: strictObject,
+		type: "object",
+		reference: object,
 		expects: "Object",
 		async: false,
 		entries: entries$1,
 		message: message$1,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
 			const input = dataset.value;
@@ -56004,7 +55906,7 @@ function strictObject(entries$1, message$1) {
 				for (const key in this.entries) {
 					const valueSchema = this.entries[key];
 					if (key in input || (valueSchema.type === "exact_optional" || valueSchema.type === "optional" || valueSchema.type === "nullish") && valueSchema.default !== void 0) {
-						const value$1 = key in input ? input[key] : /* @__PURE__ */ getDefault$1(valueSchema);
+						const value$1 = key in input ? input[key] : /* @__PURE__ */ getDefault(valueSchema);
 						const valueDataset = valueSchema["~run"]({ value: value$1 }, config$1);
 						if (valueDataset.issues) {
 							const pathItem = {
@@ -56027,9 +55929,187 @@ function strictObject(entries$1, message$1) {
 						}
 						if (!valueDataset.typed) dataset.typed = false;
 						dataset.value[key] = valueDataset.value;
-					} else if (valueSchema.fallback !== void 0) dataset.value[key] = /* @__PURE__ */ getFallback$1(valueSchema);
+					} else if (valueSchema.fallback !== void 0) dataset.value[key] = /* @__PURE__ */ getFallback(valueSchema);
 					else if (valueSchema.type !== "exact_optional" && valueSchema.type !== "optional" && valueSchema.type !== "nullish") {
-						_addIssue$1(this, "key", dataset, config$1, {
+						_addIssue(this, "key", dataset, config$1, {
+							input: void 0,
+							expected: `"${key}"`,
+							path: [{
+								type: "object",
+								origin: "key",
+								input,
+								key,
+								value: input[key]
+							}]
+						});
+						if (config$1.abortEarly) break;
+					}
+				}
+			} else _addIssue(this, "type", dataset, config$1);
+			return dataset;
+		}
+	};
+}
+/* @__NO_SIDE_EFFECTS__ */
+function optional(wrapped, default_) {
+	return {
+		kind: "schema",
+		type: "optional",
+		reference: optional,
+		expects: `(${wrapped.expects} | undefined)`,
+		async: false,
+		wrapped,
+		default: default_,
+		get "~standard"() {
+			return /* @__PURE__ */ _getStandardProps(this);
+		},
+		"~run"(dataset, config$1) {
+			if (dataset.value === void 0) {
+				if (this.default !== void 0) dataset.value = /* @__PURE__ */ getDefault(this, dataset, config$1);
+				if (dataset.value === void 0) {
+					dataset.typed = true;
+					return dataset;
+				}
+			}
+			return this.wrapped["~run"](dataset, config$1);
+		}
+	};
+}
+/* @__NO_SIDE_EFFECTS__ */
+function picklist(options, message$1) {
+	return {
+		kind: "schema",
+		type: "picklist",
+		reference: picklist,
+		expects: /* @__PURE__ */ _joinExpects(options.map(_stringify), "|"),
+		async: false,
+		options,
+		message: message$1,
+		get "~standard"() {
+			return /* @__PURE__ */ _getStandardProps(this);
+		},
+		"~run"(dataset, config$1) {
+			if (this.options.includes(dataset.value)) dataset.typed = true;
+			else _addIssue(this, "type", dataset, config$1);
+			return dataset;
+		}
+	};
+}
+/* @__NO_SIDE_EFFECTS__ */
+function record(key, value$1, message$1) {
+	return {
+		kind: "schema",
+		type: "record",
+		reference: record,
+		expects: "Object",
+		async: false,
+		key,
+		value: value$1,
+		message: message$1,
+		get "~standard"() {
+			return /* @__PURE__ */ _getStandardProps(this);
+		},
+		"~run"(dataset, config$1) {
+			const input = dataset.value;
+			if (input && typeof input === "object") {
+				dataset.typed = true;
+				dataset.value = {};
+				for (const entryKey in input) if (/* @__PURE__ */ _isValidObjectKey(input, entryKey)) {
+					const entryValue = input[entryKey];
+					const keyDataset = this.key["~run"]({ value: entryKey }, config$1);
+					if (keyDataset.issues) {
+						const pathItem = {
+							type: "object",
+							origin: "key",
+							input,
+							key: entryKey,
+							value: entryValue
+						};
+						for (const issue of keyDataset.issues) {
+							issue.path = [pathItem];
+							dataset.issues?.push(issue);
+						}
+						if (!dataset.issues) dataset.issues = keyDataset.issues;
+						if (config$1.abortEarly) {
+							dataset.typed = false;
+							break;
+						}
+					}
+					const valueDataset = this.value["~run"]({ value: entryValue }, config$1);
+					if (valueDataset.issues) {
+						const pathItem = {
+							type: "object",
+							origin: "value",
+							input,
+							key: entryKey,
+							value: entryValue
+						};
+						for (const issue of valueDataset.issues) {
+							if (issue.path) issue.path.unshift(pathItem);
+							else issue.path = [pathItem];
+							dataset.issues?.push(issue);
+						}
+						if (!dataset.issues) dataset.issues = valueDataset.issues;
+						if (config$1.abortEarly) {
+							dataset.typed = false;
+							break;
+						}
+					}
+					if (!keyDataset.typed || !valueDataset.typed) dataset.typed = false;
+					if (keyDataset.typed) dataset.value[keyDataset.value] = valueDataset.value;
+				}
+			} else _addIssue(this, "type", dataset, config$1);
+			return dataset;
+		}
+	};
+}
+/* @__NO_SIDE_EFFECTS__ */
+function strictObject(entries$1, message$1) {
+	return {
+		kind: "schema",
+		type: "strict_object",
+		reference: strictObject,
+		expects: "Object",
+		async: false,
+		entries: entries$1,
+		message: message$1,
+		get "~standard"() {
+			return /* @__PURE__ */ _getStandardProps(this);
+		},
+		"~run"(dataset, config$1) {
+			const input = dataset.value;
+			if (input && typeof input === "object") {
+				dataset.typed = true;
+				dataset.value = {};
+				for (const key in this.entries) {
+					const valueSchema = this.entries[key];
+					if (key in input || (valueSchema.type === "exact_optional" || valueSchema.type === "optional" || valueSchema.type === "nullish") && valueSchema.default !== void 0) {
+						const value$1 = key in input ? input[key] : /* @__PURE__ */ getDefault(valueSchema);
+						const valueDataset = valueSchema["~run"]({ value: value$1 }, config$1);
+						if (valueDataset.issues) {
+							const pathItem = {
+								type: "object",
+								origin: "value",
+								input,
+								key,
+								value: value$1
+							};
+							for (const issue of valueDataset.issues) {
+								if (issue.path) issue.path.unshift(pathItem);
+								else issue.path = [pathItem];
+								dataset.issues?.push(issue);
+							}
+							if (!dataset.issues) dataset.issues = valueDataset.issues;
+							if (config$1.abortEarly) {
+								dataset.typed = false;
+								break;
+							}
+						}
+						if (!valueDataset.typed) dataset.typed = false;
+						dataset.value[key] = valueDataset.value;
+					} else if (valueSchema.fallback !== void 0) dataset.value[key] = /* @__PURE__ */ getFallback(valueSchema);
+					else if (valueSchema.type !== "exact_optional" && valueSchema.type !== "optional" && valueSchema.type !== "nullish") {
+						_addIssue(this, "key", dataset, config$1, {
 							input: void 0,
 							expected: `"${key}"`,
 							path: [{
@@ -56045,7 +56125,7 @@ function strictObject(entries$1, message$1) {
 				}
 				if (!dataset.issues || !config$1.abortEarly) {
 					for (const key in input) if (!(key in this.entries)) {
-						_addIssue$1(this, "key", dataset, config$1, {
+						_addIssue(this, "key", dataset, config$1, {
 							input: key,
 							expected: "never",
 							path: [{
@@ -56059,26 +56139,26 @@ function strictObject(entries$1, message$1) {
 						break;
 					}
 				}
-			} else _addIssue$1(this, "type", dataset, config$1);
+			} else _addIssue(this, "type", dataset, config$1);
 			return dataset;
 		}
 	};
 }
 /* @__NO_SIDE_EFFECTS__ */
-function string$1(message$1) {
+function string(message$1) {
 	return {
 		kind: "schema",
 		type: "string",
-		reference: string$1,
+		reference: string,
 		expects: "string",
 		async: false,
 		message: message$1,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
 			if (typeof dataset.value === "string") dataset.typed = true;
-			else _addIssue$1(this, "type", dataset, config$1);
+			else _addIssue(this, "type", dataset, config$1);
 			return dataset;
 		}
 	};
@@ -56110,7 +56190,7 @@ function union(options, message$1) {
 		options,
 		message: message$1,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
 			let validDataset;
@@ -56130,10 +56210,10 @@ function union(options, message$1) {
 			if (validDataset) return validDataset;
 			if (typedDatasets) {
 				if (typedDatasets.length === 1) return typedDatasets[0];
-				_addIssue$1(this, "type", dataset, config$1, { issues: /* @__PURE__ */ _subIssues(typedDatasets) });
+				_addIssue(this, "type", dataset, config$1, { issues: /* @__PURE__ */ _subIssues(typedDatasets) });
 				dataset.typed = true;
 			} else if (untypedDatasets?.length === 1) return untypedDatasets[0];
-			else _addIssue$1(this, "type", dataset, config$1, { issues: /* @__PURE__ */ _subIssues(untypedDatasets) });
+			else _addIssue(this, "type", dataset, config$1, { issues: /* @__PURE__ */ _subIssues(untypedDatasets) });
 			return dataset;
 		}
 	};
@@ -56152,7 +56232,7 @@ function unknown() {
 		expects: "unknown",
 		async: false,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset) {
 			dataset.typed = true;
@@ -56172,7 +56252,7 @@ function variant(key, options, message$1) {
 		options,
 		message: message$1,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
 			const input = dataset.value;
@@ -56214,7 +56294,7 @@ function variant(key, options, message$1) {
 				};
 				parseOptions(this, /* @__PURE__ */ new Set([this.key]));
 				if (outputDataset) return outputDataset;
-				_addIssue$1(this, "type", dataset, config$1, {
+				_addIssue(this, "type", dataset, config$1, {
 					input: input[invalidDiscriminatorKey],
 					expected: /* @__PURE__ */ _joinExpects(expectedDiscriminators, "|"),
 					path: [{
@@ -56225,7 +56305,7 @@ function variant(key, options, message$1) {
 						value: input[invalidDiscriminatorKey]
 					}]
 				});
-			} else _addIssue$1(this, "type", dataset, config$1);
+			} else _addIssue(this, "type", dataset, config$1);
 			return dataset;
 		}
 	};
@@ -56239,18 +56319,18 @@ function variant(key, options, message$1) {
 *
 * @returns The parsed input.
 */
-function parse$4(schema, input, config$1) {
-	const dataset = schema["~run"]({ value: input }, /* @__PURE__ */ getGlobalConfig$1(config$1));
-	if (dataset.issues) throw new ValiError$1(dataset.issues);
+function parse$3(schema, input, config$1) {
+	const dataset = schema["~run"]({ value: input }, /* @__PURE__ */ getGlobalConfig(config$1));
+	if (dataset.issues) throw new ValiError(dataset.issues);
 	return dataset.value;
 }
 /* @__NO_SIDE_EFFECTS__ */
-function pipe$2(...pipe$1) {
+function pipe(...pipe$1) {
 	return {
 		...pipe$1[0],
 		pipe: pipe$1,
 		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps$1(this);
+			return /* @__PURE__ */ _getStandardProps(this);
 		},
 		"~run"(dataset, config$1) {
 			for (const item of pipe$1) if (item.kind !== "metadata") {
@@ -56275,7 +56355,7 @@ function pipe$2(...pipe$1) {
 */
 /* @__NO_SIDE_EFFECTS__ */
 function safeParse(schema, input, config$1) {
-	const dataset = schema["~run"]({ value: input }, /* @__PURE__ */ getGlobalConfig$1(config$1));
+	const dataset = schema["~run"]({ value: input }, /* @__PURE__ */ getGlobalConfig(config$1));
 	return {
 		typed: dataset.typed,
 		success: !dataset.issues,
@@ -56398,7 +56478,7 @@ function unsupported_protocol_version_error(supported, requested) {
 /**
 * A uniquely identifying ID for a request in JSON-RPC.
 */
-const RequestIdSchema = /* @__PURE__ */ union([/* @__PURE__ */ string$1(), /* @__PURE__ */ pipe$2(/* @__PURE__ */ number(), /* @__PURE__ */ integer())]);
+const RequestIdSchema = /* @__PURE__ */ union([/* @__PURE__ */ string(), /* @__PURE__ */ pipe(/* @__PURE__ */ number(), /* @__PURE__ */ integer())]);
 /**
 * The severity of a log message.
 */
@@ -56415,44 +56495,44 @@ const LoggingLevelSchema = /* @__PURE__ */ picklist([
 /**
 * A progress token, used to associate progress notifications with the original request.
 */
-const ProgressTokenSchema = /* @__PURE__ */ union([/* @__PURE__ */ string$1(), /* @__PURE__ */ pipe$2(/* @__PURE__ */ number(), /* @__PURE__ */ integer())]);
+const ProgressTokenSchema = /* @__PURE__ */ union([/* @__PURE__ */ string(), /* @__PURE__ */ pipe(/* @__PURE__ */ number(), /* @__PURE__ */ integer())]);
 /**
 * An opaque token used to represent a cursor for pagination.
 */
-const CursorSchema = /* @__PURE__ */ string$1();
+const CursorSchema = /* @__PURE__ */ string();
 const RequestMetaSchema = /* @__PURE__ */ looseObject({ 
 /**
 * If specified, the caller is requesting out-of-band progress notifications for this request (as represented by notifications/progress). The value of this parameter is an opaque token that will be attached to any subsequent notifications. The receiver is not obligated to provide these notifications.
 */
-progressToken: /* @__PURE__ */ optional$1(ProgressTokenSchema) });
-const BaseRequestParamsSchema = /* @__PURE__ */ looseObject({ _meta: /* @__PURE__ */ optional$1(RequestMetaSchema) });
-const RequestSchema = /* @__PURE__ */ object$2({
-	method: /* @__PURE__ */ string$1(),
-	params: /* @__PURE__ */ optional$1(BaseRequestParamsSchema)
+progressToken: /* @__PURE__ */ optional(ProgressTokenSchema) });
+const BaseRequestParamsSchema = /* @__PURE__ */ looseObject({ _meta: /* @__PURE__ */ optional(RequestMetaSchema) });
+const RequestSchema = /* @__PURE__ */ object({
+	method: /* @__PURE__ */ string(),
+	params: /* @__PURE__ */ optional(BaseRequestParamsSchema)
 });
 const NotificationMetaSchema = /* @__PURE__ */ looseObject({});
-const SubscriptionNotificationMetaSchema = /* @__PURE__ */ looseObject({ [SUBSCRIPTION_ID_META_KEY]: /* @__PURE__ */ optional$1(RequestIdSchema) });
+const SubscriptionNotificationMetaSchema = /* @__PURE__ */ looseObject({ [SUBSCRIPTION_ID_META_KEY]: /* @__PURE__ */ optional(RequestIdSchema) });
 const BaseNotificationParamsSchema = /* @__PURE__ */ looseObject({ 
 /**
 * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
 * for notes on _meta usage.
 */
-_meta: /* @__PURE__ */ optional$1(NotificationMetaSchema) });
-const SubscriptionNotificationParamsSchema = /* @__PURE__ */ looseObject({ _meta: /* @__PURE__ */ optional$1(SubscriptionNotificationMetaSchema) });
-const NotificationSchema = /* @__PURE__ */ object$2({
-	method: /* @__PURE__ */ string$1(),
-	params: /* @__PURE__ */ optional$1(BaseNotificationParamsSchema)
+_meta: /* @__PURE__ */ optional(NotificationMetaSchema) });
+const SubscriptionNotificationParamsSchema = /* @__PURE__ */ looseObject({ _meta: /* @__PURE__ */ optional(SubscriptionNotificationMetaSchema) });
+const NotificationSchema = /* @__PURE__ */ object({
+	method: /* @__PURE__ */ string(),
+	params: /* @__PURE__ */ optional(BaseNotificationParamsSchema)
 });
 const ResultSchema = /* @__PURE__ */ looseObject({ 
 /**
 * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
 * for notes on _meta usage.
 */
-_meta: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({})) });
+_meta: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({})) });
 /**
 * A request that expects a response.
 */
-const JSONRPCRequestSchema = /* @__PURE__ */ object$2({
+const JSONRPCRequestSchema = /* @__PURE__ */ object({
 	jsonrpc: /* @__PURE__ */ literal("2.0"),
 	id: RequestIdSchema,
 	...RequestSchema.entries
@@ -56460,7 +56540,7 @@ const JSONRPCRequestSchema = /* @__PURE__ */ object$2({
 /**
 * A notification which does not expect a response.
 */
-const JSONRPCNotificationSchema = /* @__PURE__ */ object$2({
+const JSONRPCNotificationSchema = /* @__PURE__ */ object({
 	jsonrpc: /* @__PURE__ */ literal("2.0"),
 	...NotificationSchema.entries
 });
@@ -56478,19 +56558,19 @@ const JSONRPCResponseSchema = /* @__PURE__ */ strictObject({
 const JSONRPCErrorSchema = /* @__PURE__ */ strictObject({
 	jsonrpc: /* @__PURE__ */ literal("2.0"),
 	id: RequestIdSchema,
-	error: /* @__PURE__ */ object$2({
+	error: /* @__PURE__ */ object({
 		/**
 		* The error type that occurred.
 		*/
-		code: /* @__PURE__ */ pipe$2(/* @__PURE__ */ number(), /* @__PURE__ */ integer()),
+		code: /* @__PURE__ */ pipe(/* @__PURE__ */ number(), /* @__PURE__ */ integer()),
 		/**
 		* A short description of the error. The message SHOULD be limited to a concise single sentence.
 		*/
-		message: /* @__PURE__ */ string$1(),
+		message: /* @__PURE__ */ string(),
 		/**
 		* Additional information about the error. The value of this member is defined by the sender (e.g. detailed error information, nested errors etc.).
 		*/
-		data: /* @__PURE__ */ optional$1(/* @__PURE__ */ unknown())
+		data: /* @__PURE__ */ optional(/* @__PURE__ */ unknown())
 	})
 });
 ({ ...ResultSchema.entries });
@@ -56503,10 +56583,10 @@ const JSONRPCErrorSchema = /* @__PURE__ */ strictObject({
 *
 * A client MUST NOT attempt to cancel its `initialize` request.
 */
-const CancelledNotificationSchema = /* @__PURE__ */ object$2({
+const CancelledNotificationSchema = /* @__PURE__ */ object({
 	...NotificationSchema.entries,
 	method: /* @__PURE__ */ literal("notifications/cancelled"),
-	params: /* @__PURE__ */ object$2({
+	params: /* @__PURE__ */ object({
 		...BaseNotificationParamsSchema.entries,
 		/**
 		* The ID of the request to cancel.
@@ -56517,15 +56597,15 @@ const CancelledNotificationSchema = /* @__PURE__ */ object$2({
 		/**
 		* An optional string describing the reason for the cancellation. This MAY be logged or presented to the user.
 		*/
-		reason: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1())
+		reason: /* @__PURE__ */ optional(/* @__PURE__ */ string())
 	})
 });
 /**
 * Base metadata interface for common properties across resources, tools, prompts, and implementations.
 */
-const BaseMetadataSchema = /* @__PURE__ */ object$2({
+const BaseMetadataSchema = /* @__PURE__ */ object({
 	/** Intended for programmatic or logical use, but used as a display name in past specs or fallback */
-	name: /* @__PURE__ */ string$1(),
+	name: /* @__PURE__ */ string(),
 	/**
 	* Intended for UI and end-user contexts — optimized to be human-readable and easily understood,
 	* even by those unfamiliar with domain-specific terminology.
@@ -56534,9 +56614,9 @@ const BaseMetadataSchema = /* @__PURE__ */ object$2({
 	* where `annotations.title` should be given precedence over using `name`,
 	* if present).
 	*/
-	title: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1())
+	title: /* @__PURE__ */ optional(/* @__PURE__ */ string())
 });
-const IconsSchema = /* @__PURE__ */ object$2({ 
+const IconsSchema = /* @__PURE__ */ object({ 
 /**
 * Optional set of sized icons that the client can display in a user interface.
 *
@@ -56548,30 +56628,30 @@ const IconsSchema = /* @__PURE__ */ object$2({
 * - `image/svg+xml` - SVG images (scalable but requires security precautions)
 * - `image/webp` - WebP images (modern, efficient format)
 */
-icons: /* @__PURE__ */ optional$1(/* @__PURE__ */ array(/* @__PURE__ */ object$2({
+icons: /* @__PURE__ */ optional(/* @__PURE__ */ array(/* @__PURE__ */ object({
 	/**
 	* URL or data URI for the icon.
 	*/
-	src: /* @__PURE__ */ string$1(),
+	src: /* @__PURE__ */ string(),
 	/**
 	* Optional MIME type for the icon.
 	*/
-	mimeType: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
+	mimeType: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
 	/**
 	* Optional array of strings that specify sizes at which the icon can be used.
 	* Each string should be in WxH format (e.g., `"48x48"`, `"96x96"`) or `"any"` for scalable formats like SVG.
 	*
 	* If not provided, the client should assume that the icon can be used at any size.
 	*/
-	sizes: /* @__PURE__ */ optional$1(/* @__PURE__ */ array(/* @__PURE__ */ string$1()))
+	sizes: /* @__PURE__ */ optional(/* @__PURE__ */ array(/* @__PURE__ */ string()))
 }))) });
 /**
 * Describes the name and version of an MCP implementation.
 */
-const ImplementationSchema = /* @__PURE__ */ object$2({
+const ImplementationSchema = /* @__PURE__ */ object({
 	...BaseMetadataSchema.entries,
-	version: /* @__PURE__ */ string$1(),
-	websiteUrl: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
+	version: /* @__PURE__ */ string(),
+	websiteUrl: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
 	...IconsSchema.entries
 });
 /**
@@ -56581,40 +56661,40 @@ const ClientCapabilitiesSchema = /* @__PURE__ */ looseObject({
 	/**
 	* Experimental, non-standard capabilities that the client supports.
 	*/
-	experimental: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({})),
+	experimental: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({})),
 	/**
 	* Present if the client supports sampling from an LLM.
 	* @deprecated in the per-request (2026-07-28) protocol; still fully supported for session-negotiated clients.
 	*/
-	sampling: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({})),
+	sampling: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({})),
 	/**
 	* Present if the client supports eliciting user input.
 	* Accepts both the legacy bare `{}` shape and the modern `{ form?, url? }` sub-shapes.
 	*/
-	elicitation: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({
-		form: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({})),
-		url: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({}))
+	elicitation: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({
+		form: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({})),
+		url: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({}))
 	})),
 	/**
 	* Extensions supported by the client, keyed by prefixed extension identifier.
 	*/
-	extensions: /* @__PURE__ */ optional$1(/* @__PURE__ */ record(/* @__PURE__ */ string$1(), /* @__PURE__ */ looseObject({}))),
+	extensions: /* @__PURE__ */ optional(/* @__PURE__ */ record(/* @__PURE__ */ string(), /* @__PURE__ */ looseObject({}))),
 	/**
 	* Present if the client supports listing roots.
 	* @deprecated in the per-request (2026-07-28) protocol; still fully supported for session-negotiated clients.
 	*/
-	roots: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({ 
+	roots: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({ 
 	/**
 	* Whether the client supports issuing notifications for changes to the roots list.
 	*/
-listChanged: /* @__PURE__ */ optional$1(/* @__PURE__ */ boolean$1()) }))
+listChanged: /* @__PURE__ */ optional(/* @__PURE__ */ boolean()) }))
 });
-const InitializeRequestParamsSchema = /* @__PURE__ */ object$2({
+const InitializeRequestParamsSchema = /* @__PURE__ */ object({
 	...BaseRequestParamsSchema.entries,
 	/**
 	* The latest version of the Model Context Protocol that the client supports. The client MAY decide to support older versions as well.
 	*/
-	protocolVersion: /* @__PURE__ */ string$1(),
+	protocolVersion: /* @__PURE__ */ string(),
 	capabilities: ClientCapabilitiesSchema,
 	clientInfo: ImplementationSchema
 });
@@ -56625,7 +56705,7 @@ const InitializeRequestParamsSchema = /* @__PURE__ */ object$2({
 ({ ...ResultSchema.entries });
 ({ ...NotificationSchema.entries });
 ({ ...RequestSchema.entries });
-const ProgressSchema = /* @__PURE__ */ object$2({
+const ProgressSchema = /* @__PURE__ */ object({
 	/**
 	* The progress thus far. This should increase every time progress is made, even if the total is unknown.
 	*/
@@ -56633,11 +56713,11 @@ const ProgressSchema = /* @__PURE__ */ object$2({
 	/**
 	* Total number of items to process (or total progress required), if known.
 	*/
-	total: /* @__PURE__ */ optional$1(/* @__PURE__ */ number()),
+	total: /* @__PURE__ */ optional(/* @__PURE__ */ number()),
 	/**
 	* An optional message describing the current progress.
 	*/
-	message: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1())
+	message: /* @__PURE__ */ optional(/* @__PURE__ */ string())
 });
 ({ ...NotificationSchema.entries }), (
 /**
@@ -56647,81 +56727,81 @@ const ProgressSchema = /* @__PURE__ */ object$2({
 	...BaseNotificationParamsSchema.entries,
 	...ProgressSchema.entries
 });
-const PaginatedRequestSchema = /* @__PURE__ */ object$2({
+const PaginatedRequestSchema = /* @__PURE__ */ object({
 	...RequestSchema.entries,
-	params: /* @__PURE__ */ optional$1(/* @__PURE__ */ object$2({
+	params: /* @__PURE__ */ optional(/* @__PURE__ */ object({
 		...BaseRequestParamsSchema.entries,
 		/**
 		* An opaque token representing the current pagination position.
 		* If provided, the server should return results starting after this cursor.
 		*/
-		cursor: /* @__PURE__ */ optional$1(CursorSchema)
+		cursor: /* @__PURE__ */ optional(CursorSchema)
 	}))
 });
-const PaginatedResultSchema = /* @__PURE__ */ object$2({
+const PaginatedResultSchema = /* @__PURE__ */ object({
 	...ResultSchema.entries,
 	/**
 	* An opaque token representing the pagination position after the last returned result.
 	* If present, there may be more results available.
 	*/
-	nextCursor: /* @__PURE__ */ optional$1(CursorSchema)
+	nextCursor: /* @__PURE__ */ optional(CursorSchema)
 });
 /**
 * The contents of a specific resource or sub-resource.
 */
-const ResourceContentsSchema = /* @__PURE__ */ object$2({
+const ResourceContentsSchema = /* @__PURE__ */ object({
 	/**
 	* The URI of this resource.
 	*/
-	uri: /* @__PURE__ */ string$1(),
+	uri: /* @__PURE__ */ string(),
 	/**
 	* The MIME type of this resource, if known.
 	*/
-	mimeType: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
+	mimeType: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
 	/**
 	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
 	* for notes on _meta usage.
 	*/
-	_meta: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({}))
+	_meta: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({}))
 });
-const TextResourceContentsSchema = /* @__PURE__ */ object$2({
+const TextResourceContentsSchema = /* @__PURE__ */ object({
 	...ResourceContentsSchema.entries,
 	/**
 	* The text of the item. This must only be set if the item can actually be represented as text (not binary data).
 	*/
-	text: /* @__PURE__ */ string$1()
+	text: /* @__PURE__ */ string()
 });
-const BlobResourceContentsSchema = /* @__PURE__ */ object$2({
+const BlobResourceContentsSchema = /* @__PURE__ */ object({
 	...ResourceContentsSchema.entries,
 	/**
 	* A base64-encoded string representing the binary data of the item.
 	*/
-	blob: /* @__PURE__ */ pipe$2(/* @__PURE__ */ string$1(), /* @__PURE__ */ base64())
+	blob: /* @__PURE__ */ pipe(/* @__PURE__ */ string(), /* @__PURE__ */ base64())
 });
 /**
 * A known resource that the server is capable of reading.
 */
-const ResourceSchema = /* @__PURE__ */ object$2({
+const ResourceSchema = /* @__PURE__ */ object({
 	...BaseMetadataSchema.entries,
 	/**
 	* The URI of this resource.
 	*/
-	uri: /* @__PURE__ */ string$1(),
+	uri: /* @__PURE__ */ string(),
 	/**
 	* A description of what this resource represents.
 	*
 	* This can be used by clients to improve the LLM's understanding of available resources. It can be thought of like a "hint" to the model.
 	*/
-	description: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
+	description: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
 	/**
 	* The MIME type of this resource, if known.
 	*/
-	mimeType: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
+	mimeType: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
 	/**
 	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
 	* for notes on _meta usage.
 	*/
-	_meta: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({})),
+	_meta: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({})),
 	...IconsSchema.entries
 });
 (
@@ -56750,23 +56830,23 @@ const ReadResourceResultSchema = /* @__PURE__ */ looseObject({
 * Notification types requested on a per-request subscription stream. Every field
 * is opt-in.
 */
-const SubscriptionFilterSchema = /* @__PURE__ */ object$2({
-	toolsListChanged: /* @__PURE__ */ optional$1(/* @__PURE__ */ boolean$1()),
-	promptsListChanged: /* @__PURE__ */ optional$1(/* @__PURE__ */ boolean$1()),
-	resourcesListChanged: /* @__PURE__ */ optional$1(/* @__PURE__ */ boolean$1()),
-	resourceSubscriptions: /* @__PURE__ */ optional$1(/* @__PURE__ */ array(/* @__PURE__ */ string$1()))
+const SubscriptionFilterSchema = /* @__PURE__ */ object({
+	toolsListChanged: /* @__PURE__ */ optional(/* @__PURE__ */ boolean()),
+	promptsListChanged: /* @__PURE__ */ optional(/* @__PURE__ */ boolean()),
+	resourcesListChanged: /* @__PURE__ */ optional(/* @__PURE__ */ boolean()),
+	resourceSubscriptions: /* @__PURE__ */ optional(/* @__PURE__ */ array(/* @__PURE__ */ string()))
 });
 const PerRequestMetaSchema = /* @__PURE__ */ looseObject({
 	...RequestMetaSchema.entries,
-	"io.modelcontextprotocol/protocolVersion": /* @__PURE__ */ string$1(),
+	"io.modelcontextprotocol/protocolVersion": /* @__PURE__ */ string(),
 	"io.modelcontextprotocol/clientCapabilities": ClientCapabilitiesSchema,
-	"io.modelcontextprotocol/clientInfo": /* @__PURE__ */ optional$1(ImplementationSchema),
-	"io.modelcontextprotocol/logLevel": /* @__PURE__ */ optional$1(LoggingLevelSchema)
+	"io.modelcontextprotocol/clientInfo": /* @__PURE__ */ optional(ImplementationSchema),
+	"io.modelcontextprotocol/logLevel": /* @__PURE__ */ optional(LoggingLevelSchema)
 });
 /**
 * Open a long-lived stream for server notifications.
 */
-const SubscriptionsListenRequestParamsSchema = /* @__PURE__ */ object$2({
+const SubscriptionsListenRequestParamsSchema = /* @__PURE__ */ object({
 	...BaseRequestParamsSchema.entries,
 	_meta: PerRequestMetaSchema,
 	notifications: SubscriptionFilterSchema
@@ -56804,67 +56884,67 @@ const SubscriptionsListenRequestParamsSchema = /* @__PURE__ */ object$2({
 /**
 * Text provided to or from an LLM.
 */
-const TextContentSchema = /* @__PURE__ */ object$2({
+const TextContentSchema = /* @__PURE__ */ object({
 	type: /* @__PURE__ */ literal("text"),
 	/**
 	* The text content of the message.
 	*/
-	text: /* @__PURE__ */ string$1(),
+	text: /* @__PURE__ */ string(),
 	/**
 	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
 	* for notes on _meta usage.
 	*/
-	_meta: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({}))
+	_meta: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({}))
 });
 /**
 * An image provided to or from an LLM.
 */
-const ImageContentSchema = /* @__PURE__ */ object$2({
+const ImageContentSchema = /* @__PURE__ */ object({
 	type: /* @__PURE__ */ literal("image"),
 	/**
 	* The base64-encoded image data.
 	*/
-	data: /* @__PURE__ */ pipe$2(/* @__PURE__ */ string$1(), /* @__PURE__ */ base64()),
+	data: /* @__PURE__ */ pipe(/* @__PURE__ */ string(), /* @__PURE__ */ base64()),
 	/**
 	* The MIME type of the image. Different providers may support different image types.
 	*/
-	mimeType: /* @__PURE__ */ string$1(),
+	mimeType: /* @__PURE__ */ string(),
 	/**
 	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
 	* for notes on _meta usage.
 	*/
-	_meta: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({}))
+	_meta: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({}))
 });
 /**
 * An Audio provided to or from an LLM.
 */
-const AudioContentSchema = /* @__PURE__ */ object$2({
+const AudioContentSchema = /* @__PURE__ */ object({
 	type: /* @__PURE__ */ literal("audio"),
 	/**
 	* The base64-encoded audio data.
 	*/
-	data: /* @__PURE__ */ pipe$2(/* @__PURE__ */ string$1(), /* @__PURE__ */ base64()),
+	data: /* @__PURE__ */ pipe(/* @__PURE__ */ string(), /* @__PURE__ */ base64()),
 	/**
 	* The MIME type of the audio. Different providers may support different audio types.
 	*/
-	mimeType: /* @__PURE__ */ string$1(),
+	mimeType: /* @__PURE__ */ string(),
 	/**
 	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
 	* for notes on _meta usage.
 	*/
-	_meta: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({}))
+	_meta: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({}))
 });
 /**
 * The contents of a resource, embedded into a prompt or tool call result.
 */
-const EmbeddedResourceSchema = /* @__PURE__ */ object$2({
+const EmbeddedResourceSchema = /* @__PURE__ */ object({
 	type: /* @__PURE__ */ literal("resource"),
 	resource: /* @__PURE__ */ union([TextResourceContentsSchema, BlobResourceContentsSchema]),
 	/**
 	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
 	* for notes on _meta usage.
 	*/
-	_meta: /* @__PURE__ */ optional$1(/* @__PURE__ */ looseObject({}))
+	_meta: /* @__PURE__ */ optional(/* @__PURE__ */ looseObject({}))
 });
 /**
 * A content block that can be used in prompts and tool results.
@@ -56873,7 +56953,7 @@ const ContentBlockSchema = /* @__PURE__ */ union([
 	TextContentSchema,
 	ImageContentSchema,
 	AudioContentSchema,
-	/* @__PURE__ */ object$2({
+	/* @__PURE__ */ object({
 		...ResourceSchema.entries,
 		type: /* @__PURE__ */ literal("resource_link")
 	}),
@@ -56882,7 +56962,7 @@ const ContentBlockSchema = /* @__PURE__ */ union([
 /**
 * Describes a message returned as part of a prompt.
 */
-const PromptMessageSchema = /* @__PURE__ */ object$2({
+const PromptMessageSchema = /* @__PURE__ */ object({
 	role: /* @__PURE__ */ picklist(["user", "assistant"]),
 	content: ContentBlockSchema
 });
@@ -56894,7 +56974,7 @@ const GetPromptResultSchema = /* @__PURE__ */ looseObject({
 	/**
 	* An optional description for the prompt.
 	*/
-	description: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
+	description: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
 	messages: /* @__PURE__ */ array(PromptMessageSchema)
 });
 ({ ...NotificationSchema.entries });
@@ -56916,13 +56996,13 @@ const CallToolResultSchema = /* @__PURE__ */ looseObject({
 	* If the Tool does not define an outputSchema, this field MUST be present in the result.
 	* For backwards compatibility, this field is always present, but it may be empty.
 	*/
-	content: /* @__PURE__ */ optional$1(/* @__PURE__ */ array(ContentBlockSchema), []),
+	content: /* @__PURE__ */ optional(/* @__PURE__ */ array(ContentBlockSchema), []),
 	/**
 	* Structured tool output. May be ANY JSON value, not only objects.
 	*
 	* If the Tool defines an outputSchema, this field MUST be present in the result and match the schema.
 	*/
-	structuredContent: /* @__PURE__ */ optional$1(/* @__PURE__ */ unknown()),
+	structuredContent: /* @__PURE__ */ optional(/* @__PURE__ */ unknown()),
 	/**
 	* Whether the tool call ended in an error.
 	*
@@ -56937,7 +57017,7 @@ const CallToolResultSchema = /* @__PURE__ */ looseObject({
 	* server does not support tool calls, or any other exceptional conditions,
 	* should be reported as an MCP error response.
 	*/
-	isError: /* @__PURE__ */ optional$1(/* @__PURE__ */ boolean$1())
+	isError: /* @__PURE__ */ optional(/* @__PURE__ */ boolean())
 });
 ({ ...ResultSchema.entries });
 ({ ...RequestSchema.entries }), { ...BaseRequestParamsSchema.entries };
@@ -56955,32 +57035,32 @@ const CallToolResultSchema = /* @__PURE__ */ looseObject({
 /**
 * The server's preferences for model selection, requested of the client during sampling.
 */
-const ModelPreferencesSchema = /* @__PURE__ */ object$2({
+const ModelPreferencesSchema = /* @__PURE__ */ object({
 	/**
 	* Optional hints to use for model selection.
 	*/
-	hints: /* @__PURE__ */ optional$1(/* @__PURE__ */ array(/* @__PURE__ */ object$2({ 
+	hints: /* @__PURE__ */ optional(/* @__PURE__ */ array(/* @__PURE__ */ object({ 
 	/**
 	* A hint for a model name.
 	*/
-name: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()) }))),
+name: /* @__PURE__ */ optional(/* @__PURE__ */ string()) }))),
 	/**
 	* How much to prioritize cost when selecting a model.
 	*/
-	costPriority: /* @__PURE__ */ optional$1(/* @__PURE__ */ pipe$2(/* @__PURE__ */ number(), /* @__PURE__ */ minValue(0), /* @__PURE__ */ maxValue(1))),
+	costPriority: /* @__PURE__ */ optional(/* @__PURE__ */ pipe(/* @__PURE__ */ number(), /* @__PURE__ */ minValue(0), /* @__PURE__ */ maxValue(1))),
 	/**
 	* How much to prioritize sampling speed (latency) when selecting a model.
 	*/
-	speedPriority: /* @__PURE__ */ optional$1(/* @__PURE__ */ pipe$2(/* @__PURE__ */ number(), /* @__PURE__ */ minValue(0), /* @__PURE__ */ maxValue(1))),
+	speedPriority: /* @__PURE__ */ optional(/* @__PURE__ */ pipe(/* @__PURE__ */ number(), /* @__PURE__ */ minValue(0), /* @__PURE__ */ maxValue(1))),
 	/**
 	* How much to prioritize intelligence and capabilities when selecting a model.
 	*/
-	intelligencePriority: /* @__PURE__ */ optional$1(/* @__PURE__ */ pipe$2(/* @__PURE__ */ number(), /* @__PURE__ */ minValue(0), /* @__PURE__ */ maxValue(1)))
+	intelligencePriority: /* @__PURE__ */ optional(/* @__PURE__ */ pipe(/* @__PURE__ */ number(), /* @__PURE__ */ minValue(0), /* @__PURE__ */ maxValue(1)))
 });
 /**
 * Describes a message issued to or received from an LLM API.
 */
-const SamplingMessageSchema = /* @__PURE__ */ object$2({
+const SamplingMessageSchema = /* @__PURE__ */ object({
 	role: /* @__PURE__ */ picklist(["user", "assistant"]),
 	content: /* @__PURE__ */ union([
 		TextContentSchema,
@@ -56988,54 +57068,54 @@ const SamplingMessageSchema = /* @__PURE__ */ object$2({
 		AudioContentSchema
 	])
 });
-const CreateMessageRequestParamsSchema = /* @__PURE__ */ object$2({
+const CreateMessageRequestParamsSchema = /* @__PURE__ */ object({
 	...BaseRequestParamsSchema.entries,
 	messages: /* @__PURE__ */ array(SamplingMessageSchema),
 	/**
 	* An optional system prompt the server wants to use for sampling. The client MAY modify or omit this prompt.
 	*/
-	systemPrompt: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
+	systemPrompt: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
 	/**
 	* A request to include context from one or more MCP servers (including the caller), to be attached to the prompt. The client MAY ignore this request.
 	*/
-	includeContext: /* @__PURE__ */ optional$1(/* @__PURE__ */ picklist([
+	includeContext: /* @__PURE__ */ optional(/* @__PURE__ */ picklist([
 		"none",
 		"thisServer",
 		"allServers"
 	])),
-	temperature: /* @__PURE__ */ optional$1(/* @__PURE__ */ number()),
+	temperature: /* @__PURE__ */ optional(/* @__PURE__ */ number()),
 	/**
 	* The maximum number of tokens to sample, as requested by the server. The client MAY choose to sample fewer tokens than requested.
 	*/
-	maxTokens: /* @__PURE__ */ pipe$2(/* @__PURE__ */ number(), /* @__PURE__ */ integer()),
-	stopSequences: /* @__PURE__ */ optional$1(/* @__PURE__ */ array(/* @__PURE__ */ string$1())),
+	maxTokens: /* @__PURE__ */ pipe(/* @__PURE__ */ number(), /* @__PURE__ */ integer()),
+	stopSequences: /* @__PURE__ */ optional(/* @__PURE__ */ array(/* @__PURE__ */ string())),
 	/**
 	* Optional metadata to pass through to the LLM provider. The format of this metadata is provider-specific.
 	*/
-	metadata: /* @__PURE__ */ optional$1(/* @__PURE__ */ object$2({})),
+	metadata: /* @__PURE__ */ optional(/* @__PURE__ */ object({})),
 	/**
 	* The server's preferences for which model to select.
 	*/
-	modelPreferences: /* @__PURE__ */ optional$1(ModelPreferencesSchema)
+	modelPreferences: /* @__PURE__ */ optional(ModelPreferencesSchema)
 });
 ({ ...RequestSchema.entries });
 /**
 * The client's response to a sampling/create_message request from the server. The client should inform the user before returning the sampled message, to allow them to inspect the response (human in the loop) and decide whether to allow the server to see it.
 */
-const CreateMessageResultSchema = /* @__PURE__ */ object$2({
+const CreateMessageResultSchema = /* @__PURE__ */ object({
 	...ResultSchema.entries,
 	/**
 	* The name of the model that generated the message.
 	*/
-	model: /* @__PURE__ */ string$1(),
+	model: /* @__PURE__ */ string(),
 	/**
 	* The reason why sampling stopped.
 	*/
-	stopReason: /* @__PURE__ */ optional$1(/* @__PURE__ */ union([/* @__PURE__ */ picklist([
+	stopReason: /* @__PURE__ */ optional(/* @__PURE__ */ union([/* @__PURE__ */ picklist([
 		"endTurn",
 		"stopSequence",
 		"maxTokens"
-	]), /* @__PURE__ */ string$1()])),
+	]), /* @__PURE__ */ string()])),
 	role: /* @__PURE__ */ picklist(["user", "assistant"]),
 	content: /* @__PURE__ */ variant("type", [
 		TextContentSchema,
@@ -57046,46 +57126,46 @@ const CreateMessageResultSchema = /* @__PURE__ */ object$2({
 /**
 * Primitive schema definition for boolean fields.
 */
-const BooleanSchemaSchema = /* @__PURE__ */ object$2({
+const BooleanSchemaSchema = /* @__PURE__ */ object({
 	type: /* @__PURE__ */ literal("boolean"),
-	title: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-	description: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-	default: /* @__PURE__ */ optional$1(/* @__PURE__ */ boolean$1())
+	title: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+	description: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+	default: /* @__PURE__ */ optional(/* @__PURE__ */ boolean())
 });
 /**
 * Primitive schema definition for string fields.
 */
-const StringSchemaSchema = /* @__PURE__ */ object$2({
+const StringSchemaSchema = /* @__PURE__ */ object({
 	type: /* @__PURE__ */ literal("string"),
-	title: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-	description: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-	minLength: /* @__PURE__ */ optional$1(/* @__PURE__ */ number()),
-	maxLength: /* @__PURE__ */ optional$1(/* @__PURE__ */ number()),
-	format: /* @__PURE__ */ optional$1(/* @__PURE__ */ picklist([
+	title: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+	description: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+	minLength: /* @__PURE__ */ optional(/* @__PURE__ */ number()),
+	maxLength: /* @__PURE__ */ optional(/* @__PURE__ */ number()),
+	format: /* @__PURE__ */ optional(/* @__PURE__ */ picklist([
 		"email",
 		"uri",
 		"date",
 		"date-time"
 	])),
-	default: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1())
+	default: /* @__PURE__ */ optional(/* @__PURE__ */ string())
 });
 /**
 * Primitive schema definition for number fields.
 */
-const NumberSchemaSchema = /* @__PURE__ */ object$2({
+const NumberSchemaSchema = /* @__PURE__ */ object({
 	type: /* @__PURE__ */ picklist(["number", "integer"]),
-	title: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-	description: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-	minimum: /* @__PURE__ */ optional$1(/* @__PURE__ */ number()),
-	maximum: /* @__PURE__ */ optional$1(/* @__PURE__ */ number()),
-	default: /* @__PURE__ */ optional$1(/* @__PURE__ */ number())
+	title: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+	description: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+	minimum: /* @__PURE__ */ optional(/* @__PURE__ */ number()),
+	maximum: /* @__PURE__ */ optional(/* @__PURE__ */ number()),
+	default: /* @__PURE__ */ optional(/* @__PURE__ */ number())
 });
 /**
 * An enum option with a wire value and a display title.
 */
-const TitledEnumOptionSchema = /* @__PURE__ */ object$2({
-	const: /* @__PURE__ */ string$1(),
-	title: /* @__PURE__ */ string$1()
+const TitledEnumOptionSchema = /* @__PURE__ */ object({
+	const: /* @__PURE__ */ string(),
+	title: /* @__PURE__ */ string()
 });
 /**
 * Union of all primitive schema definitions.
@@ -57094,48 +57174,48 @@ const PrimitiveSchemaDefinitionSchema = /* @__PURE__ */ union([
 	BooleanSchemaSchema,
 	NumberSchemaSchema,
 	/* @__PURE__ */ union([
-		/* @__PURE__ */ object$2({
+		/* @__PURE__ */ object({
 			type: /* @__PURE__ */ literal("string"),
-			title: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-			description: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-			enum: /* @__PURE__ */ array(/* @__PURE__ */ string$1()),
-			enumNames: /* @__PURE__ */ optional$1(/* @__PURE__ */ array(/* @__PURE__ */ string$1())),
-			default: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1())
+			title: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+			description: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+			enum: /* @__PURE__ */ array(/* @__PURE__ */ string()),
+			enumNames: /* @__PURE__ */ optional(/* @__PURE__ */ array(/* @__PURE__ */ string())),
+			default: /* @__PURE__ */ optional(/* @__PURE__ */ string())
 		}),
-		/* @__PURE__ */ object$2({
+		/* @__PURE__ */ object({
 			type: /* @__PURE__ */ literal("string"),
-			title: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-			description: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-			enum: /* @__PURE__ */ array(/* @__PURE__ */ string$1()),
-			default: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1())
+			title: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+			description: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+			enum: /* @__PURE__ */ array(/* @__PURE__ */ string()),
+			default: /* @__PURE__ */ optional(/* @__PURE__ */ string())
 		}),
-		/* @__PURE__ */ object$2({
+		/* @__PURE__ */ object({
 			type: /* @__PURE__ */ literal("string"),
-			title: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-			description: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
+			title: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+			description: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
 			oneOf: /* @__PURE__ */ array(TitledEnumOptionSchema),
-			default: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1())
+			default: /* @__PURE__ */ optional(/* @__PURE__ */ string())
 		}),
-		/* @__PURE__ */ object$2({
+		/* @__PURE__ */ object({
 			type: /* @__PURE__ */ literal("array"),
-			title: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-			description: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-			minItems: /* @__PURE__ */ optional$1(/* @__PURE__ */ number()),
-			maxItems: /* @__PURE__ */ optional$1(/* @__PURE__ */ number()),
-			items: /* @__PURE__ */ object$2({
+			title: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+			description: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+			minItems: /* @__PURE__ */ optional(/* @__PURE__ */ number()),
+			maxItems: /* @__PURE__ */ optional(/* @__PURE__ */ number()),
+			items: /* @__PURE__ */ object({
 				type: /* @__PURE__ */ literal("string"),
-				enum: /* @__PURE__ */ array(/* @__PURE__ */ string$1())
+				enum: /* @__PURE__ */ array(/* @__PURE__ */ string())
 			}),
-			default: /* @__PURE__ */ optional$1(/* @__PURE__ */ array(/* @__PURE__ */ string$1()))
+			default: /* @__PURE__ */ optional(/* @__PURE__ */ array(/* @__PURE__ */ string()))
 		}),
-		/* @__PURE__ */ object$2({
+		/* @__PURE__ */ object({
 			type: /* @__PURE__ */ literal("array"),
-			title: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-			description: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
-			minItems: /* @__PURE__ */ optional$1(/* @__PURE__ */ number()),
-			maxItems: /* @__PURE__ */ optional$1(/* @__PURE__ */ number()),
-			items: /* @__PURE__ */ object$2({ anyOf: /* @__PURE__ */ array(TitledEnumOptionSchema) }),
-			default: /* @__PURE__ */ optional$1(/* @__PURE__ */ array(/* @__PURE__ */ string$1()))
+			title: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+			description: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
+			minItems: /* @__PURE__ */ optional(/* @__PURE__ */ number()),
+			maxItems: /* @__PURE__ */ optional(/* @__PURE__ */ number()),
+			items: /* @__PURE__ */ object({ anyOf: /* @__PURE__ */ array(TitledEnumOptionSchema) }),
+			default: /* @__PURE__ */ optional(/* @__PURE__ */ array(/* @__PURE__ */ string()))
 		})
 	]),
 	StringSchemaSchema
@@ -57144,30 +57224,30 @@ const PrimitiveSchemaDefinitionSchema = /* @__PURE__ */ union([
 * A request from the server to elicit user input via the client.
 * The client should present the message and form fields to the user.
 */
-const ElicitRequestFormParamsSchema = /* @__PURE__ */ object$2({
+const ElicitRequestFormParamsSchema = /* @__PURE__ */ object({
 	...BaseRequestParamsSchema.entries,
-	mode: /* @__PURE__ */ optional$1(/* @__PURE__ */ literal("form")),
+	mode: /* @__PURE__ */ optional(/* @__PURE__ */ literal("form")),
 	/**
 	* The message to present to the user.
 	*/
-	message: /* @__PURE__ */ string$1(),
+	message: /* @__PURE__ */ string(),
 	/**
 	* The schema for the requested user input.
 	*/
-	requestedSchema: /* @__PURE__ */ object$2({
-		$schema: /* @__PURE__ */ optional$1(/* @__PURE__ */ string$1()),
+	requestedSchema: /* @__PURE__ */ object({
+		$schema: /* @__PURE__ */ optional(/* @__PURE__ */ string()),
 		type: /* @__PURE__ */ literal("object"),
-		properties: /* @__PURE__ */ record(/* @__PURE__ */ string$1(), PrimitiveSchemaDefinitionSchema),
-		required: /* @__PURE__ */ optional$1(/* @__PURE__ */ array(/* @__PURE__ */ string$1()))
+		properties: /* @__PURE__ */ record(/* @__PURE__ */ string(), PrimitiveSchemaDefinitionSchema),
+		required: /* @__PURE__ */ optional(/* @__PURE__ */ array(/* @__PURE__ */ string()))
 	})
 });
-const ElicitRequestURLParamsSchema = /* @__PURE__ */ object$2({
+const ElicitRequestURLParamsSchema = /* @__PURE__ */ object({
 	...BaseRequestParamsSchema.entries,
 	mode: /* @__PURE__ */ literal("url"),
-	message: /* @__PURE__ */ string$1(),
-	url: /* @__PURE__ */ pipe$2(/* @__PURE__ */ string$1(), /* @__PURE__ */ url$1())
+	message: /* @__PURE__ */ string(),
+	url: /* @__PURE__ */ pipe(/* @__PURE__ */ string(), /* @__PURE__ */ url())
 });
-const ElicitRequestSchema = /* @__PURE__ */ object$2({
+const ElicitRequestSchema = /* @__PURE__ */ object({
 	...RequestSchema.entries,
 	method: /* @__PURE__ */ literal("elicitation/create"),
 	params: /* @__PURE__ */ union([ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema])
@@ -57175,7 +57255,7 @@ const ElicitRequestSchema = /* @__PURE__ */ object$2({
 /**
 * The client's response to an elicitation/create request from the server.
 */
-const ElicitResultSchema = /* @__PURE__ */ object$2({
+const ElicitResultSchema = /* @__PURE__ */ object({
 	...ResultSchema.entries,
 	/**
 	* The user's response action.
@@ -57188,7 +57268,7 @@ const ElicitResultSchema = /* @__PURE__ */ object$2({
 	/**
 	* The collected user input content (only present if action is "accept").
 	*/
-	content: /* @__PURE__ */ optional$1(/* @__PURE__ */ record(/* @__PURE__ */ string$1(), /* @__PURE__ */ unknown()))
+	content: /* @__PURE__ */ optional(/* @__PURE__ */ record(/* @__PURE__ */ string(), /* @__PURE__ */ unknown()))
 });
 ({ ...RequestSchema.entries }), { ...BaseRequestParamsSchema.entries };
 /**
@@ -57196,19 +57276,19 @@ const ElicitResultSchema = /* @__PURE__ */ object$2({
 */
 const CompleteResultSchema = /* @__PURE__ */ looseObject({
 	...ResultSchema.entries,
-	completion: /* @__PURE__ */ object$2({
+	completion: /* @__PURE__ */ object({
 		/**
 		* An array of completion values. Must not exceed 100 items.
 		*/
-		values: /* @__PURE__ */ pipe$2(/* @__PURE__ */ array(/* @__PURE__ */ string$1()), /* @__PURE__ */ maxLength(100)),
+		values: /* @__PURE__ */ pipe(/* @__PURE__ */ array(/* @__PURE__ */ string()), /* @__PURE__ */ maxLength(100)),
 		/**
 		* The total number of completion options available. This can exceed the number of values actually sent in the response.
 		*/
-		total: /* @__PURE__ */ optional$1(/* @__PURE__ */ pipe$2(/* @__PURE__ */ number(), /* @__PURE__ */ integer())),
+		total: /* @__PURE__ */ optional(/* @__PURE__ */ pipe(/* @__PURE__ */ number(), /* @__PURE__ */ integer())),
 		/**
 		* Indicates whether there are additional completion options beyond those provided in the current response, even if the exact total is unknown.
 		*/
-		hasMore: /* @__PURE__ */ optional$1(/* @__PURE__ */ boolean$1())
+		hasMore: /* @__PURE__ */ optional(/* @__PURE__ */ boolean())
 	})
 });
 ({ ...RequestSchema.entries });
@@ -57461,10 +57541,10 @@ function event(type, detail) {
 * excessively large value.
 */
 const MAX_ENCODED_REQUEST_STATE_LENGTH = 262144;
-const RequestStateEnvelopeSchema = /* @__PURE__ */ object$2({
+const RequestStateEnvelopeSchema = /* @__PURE__ */ object({
 	version: /* @__PURE__ */ literal(1),
 	inputResponses: InputResponsesSchema,
-	state: /* @__PURE__ */ optional$1(/* @__PURE__ */ unknown())
+	state: /* @__PURE__ */ optional(/* @__PURE__ */ unknown())
 });
 /**
 * Private error used to stop a handler when it needs input from the client.
@@ -57681,7 +57761,7 @@ var McpServer = class {
 		};
 		this.#server.addMethod("initialize", (initialize_request) => {
 			try {
-				const validated_initialize = parse$4(InitializeRequestParamsSchema, initialize_request);
+				const validated_initialize = parse$3(InitializeRequestParamsSchema, initialize_request);
 				if (should_version_negotiation_fail(validated_initialize.protocolVersion)) throw new McpError(-32602, "Invalid protocol version format");
 				const negotiated_version = negotiate_protocol_version(validated_initialize.protocolVersion);
 				this.#event_target.dispatchEvent(event("initialize", validated_initialize));
@@ -57855,7 +57935,7 @@ var McpServer = class {
 				validated_args = validation_result.value;
 			}
 			const tool_result = tool.schema ? await tool.execute(validated_args) : await tool.execute();
-			const parsed_result = parse$4(CallToolResultSchema, tool_result);
+			const parsed_result = parse$3(CallToolResultSchema, tool_result);
 			if (tool.outputSchema && parsed_result.structuredContent !== void 0) {
 				let output_validation = tool.outputSchema["~standard"].validate(parsed_result.structuredContent);
 				if (output_validation instanceof Promise) output_validation = await output_validation;
@@ -57918,11 +57998,11 @@ var McpServer = class {
 			const prompt = this.#prompts.get(name);
 			if (!prompt) throw new McpError(-32602, `Prompt ${name} not found`);
 			this.#mark_mrtr_registration("prompt", name, prompt.replayable);
-			if (!prompt.schema) return parse$4(GetPromptResultSchema, await prompt.execute());
+			if (!prompt.schema) return parse$3(GetPromptResultSchema, await prompt.execute());
 			let validated_args = prompt.schema["~standard"].validate(args);
 			if (validated_args instanceof Promise) validated_args = await validated_args;
 			if (validated_args.issues) throw new McpError(-32602, `Invalid arguments for prompt ${name}: ${JSON.stringify(validated_args.issues)}`);
-			return parse$4(GetPromptResultSchema, await prompt.execute(validated_args.value));
+			return parse$3(GetPromptResultSchema, await prompt.execute(validated_args.value));
 		});
 	}
 	/**
@@ -58003,9 +58083,9 @@ var McpServer = class {
 			this.#mark_mrtr_registration(resource.template ? "template" : "resource", resource.name, resource.replayable);
 			if (resource.template) {
 				if (!params) throw new McpError(-32602, "Missing parameters for template resource");
-				return parse$4(ReadResourceResultSchema, await resource.execute(uri, params));
+				return parse$3(ReadResourceResultSchema, await resource.execute(uri, params));
 			}
-			return parse$4(ReadResourceResultSchema, await resource.execute(uri));
+			return parse$3(ReadResourceResultSchema, await resource.execute(uri));
 		});
 	}
 	/**
@@ -58039,7 +58119,7 @@ var McpServer = class {
 			if (!complete) return null;
 			const actual_complete = complete[argument.name];
 			if (!actual_complete) return null;
-			return parse$4(CompleteResultSchema, await actual_complete(argument.value, context));
+			return parse$3(CompleteResultSchema, await actual_complete(argument.value, context));
 		});
 	}
 	#init_logging() {
@@ -58646,7 +58726,7 @@ var McpServer = class {
 				return response;
 			});
 		}
-		const validated_response = parse$4(/* @__PURE__ */ union([JSONRPCResponseSchema, JSONRPCErrorSchema]), message);
+		const validated_response = parse$3(/* @__PURE__ */ union([JSONRPCResponseSchema, JSONRPCErrorSchema]), message);
 		this.#lazyily_create_client();
 		return this.#ctx_storage.run(ctx ?? {}, async () => this.#client?.receive(validated_response));
 	}
@@ -58909,7 +58989,7 @@ var McpServer = class {
 		this.#lazyily_create_client();
 		const request = await this.#create_elicitation_request(message, schema_or_url);
 		const result = await this.#client?.request(request.method, request.params, "standalone");
-		const elicit_result = parse$4(ElicitResultSchema, result);
+		const elicit_result = parse$3(ElicitResultSchema, result);
 		return typeof schema_or_url !== "string" ? this.#validate_elicit_result(elicit_result, schema_or_url) : this.#without_elicit_content(elicit_result);
 	}
 	/**
@@ -58956,7 +59036,7 @@ var McpServer = class {
 	*/
 	async message(request, options = {}) {
 		this.#assert_client_request_allowed("sampling", "sampling");
-		const validated_request = parse$4(CreateMessageRequestParamsSchema, request);
+		const validated_request = parse$3(CreateMessageRequestParamsSchema, request);
 		const mrtr = this.#mrtr;
 		if (mrtr !== void 0) {
 			this.#assert_replayable(mrtr, "sampling");
@@ -58979,7 +59059,7 @@ var McpServer = class {
 		}
 		this.#lazyily_create_client();
 		const response = await this.#client?.request("sampling/createMessage", validated_request, "standalone");
-		return parse$4(CreateMessageResultSchema, response);
+		return parse$3(CreateMessageResultSchema, response);
 	}
 	/**
 	* Send a progress notification to the client. This is useful for long-running operations where you want to inform the user about the progress.
@@ -60197,388 +60277,6 @@ function defineTool(options, execute) {
 		execute
 	};
 }
-const DEFAULT_CONFIG = {
-	lang: void 0,
-	message: void 0,
-	abortEarly: void 0,
-	abortPipeEarly: void 0
-};
-/**
-* Returns the global configuration.
-*
-* @param config The config to merge.
-*
-* @returns The configuration.
-*/
-/* @__NO_SIDE_EFFECTS__ */
-function getGlobalConfig(config$1) {
-	if (!config$1 && true) return DEFAULT_CONFIG;
-	return {
-		lang: config$1?.lang ?? void 0,
-		message: config$1?.message,
-		abortEarly: config$1?.abortEarly ?? void 0,
-		abortPipeEarly: config$1?.abortPipeEarly ?? void 0
-	};
-}
-/**
-* Stringifies an unknown input to a literal or type string.
-*
-* @param input The unknown input.
-*
-* @returns A literal or type string.
-*
-* @internal
-*/
-/* @__NO_SIDE_EFFECTS__ */
-function _stringify(input) {
-	const type = typeof input;
-	if (type === "string") return `"${input}"`;
-	if (type === "number" || type === "bigint" || type === "boolean") return `${input}`;
-	if (type === "object" || type === "function") return (input && Object.getPrototypeOf(input)?.constructor?.name) ?? "null";
-	return type;
-}
-/**
-* Adds an issue to the dataset.
-*
-* @param context The issue context.
-* @param label The issue label.
-* @param dataset The input dataset.
-* @param config The configuration.
-* @param other The optional props.
-*
-* @internal
-*/
-function _addIssue(context, label, dataset, config$1, other) {
-	const input = other && "input" in other ? other.input : dataset.value;
-	const expected = other?.expected ?? context.expects ?? null;
-	const received = other?.received ?? /* @__PURE__ */ _stringify(input);
-	const issue = {
-		kind: context.kind,
-		type: context.type,
-		input,
-		expected,
-		received,
-		message: `Invalid ${label}: ${expected ? `Expected ${expected} but r` : "R"}eceived ${received}`,
-		requirement: context.requirement,
-		path: other?.path,
-		issues: other?.issues,
-		lang: config$1.lang,
-		abortEarly: config$1.abortEarly,
-		abortPipeEarly: config$1.abortPipeEarly
-	};
-	const isSchema = context.kind === "schema";
-	const message$1 = other?.message ?? context.message ?? (context.reference, issue.lang, void 0) ?? (isSchema ? (issue.lang, void 0) : null) ?? config$1.message ?? (issue.lang, void 0);
-	if (message$1 !== void 0) issue.message = typeof message$1 === "function" ? message$1(issue) : message$1;
-	if (isSchema) dataset.typed = false;
-	if (dataset.issues) dataset.issues.push(issue);
-	else dataset.issues = [issue];
-}
-const _standardCache = /* @__PURE__ */ new WeakMap();
-/**
-* Returns the Standard Schema properties.
-*
-* @param context The schema context.
-*
-* @returns The Standard Schema properties.
-*/
-/* @__NO_SIDE_EFFECTS__ */
-function _getStandardProps(context) {
-	let cached = _standardCache.get(context);
-	if (!cached) {
-		cached = {
-			version: 1,
-			vendor: "valibot",
-			validate(value$1) {
-				return context["~run"]({ value: value$1 }, /* @__PURE__ */ getGlobalConfig());
-			}
-		};
-		_standardCache.set(context, cached);
-	}
-	return cached;
-}
-/**
-* A Valibot error with useful information.
-*/
-var ValiError = class extends Error {
-	/**
-	* Creates a Valibot error with useful information.
-	*
-	* @param issues The error issues.
-	*/
-	constructor(issues) {
-		super(issues[0].message);
-		this.name = "ValiError";
-		this.issues = issues;
-	}
-};
-/**
-* Creates a description metadata action.
-*
-* @param description_ The description text.
-*
-* @returns A description action.
-*/
-/* @__NO_SIDE_EFFECTS__ */
-function description(description_) {
-	return {
-		kind: "metadata",
-		type: "description",
-		reference: description,
-		description: description_
-	};
-}
-/* @__NO_SIDE_EFFECTS__ */
-function minLength(requirement, message$1) {
-	return {
-		kind: "validation",
-		type: "min_length",
-		reference: minLength,
-		async: false,
-		expects: `>=${requirement}`,
-		requirement,
-		message: message$1,
-		"~run"(dataset, config$1) {
-			if (dataset.typed && dataset.value.length < this.requirement) _addIssue(this, "length", dataset, config$1, { received: `${dataset.value.length}` });
-			return dataset;
-		}
-	};
-}
-/* @__NO_SIDE_EFFECTS__ */
-function url(message$1) {
-	return {
-		kind: "validation",
-		type: "url",
-		reference: url,
-		async: false,
-		expects: null,
-		requirement(input) {
-			try {
-				new URL(input);
-				return true;
-			} catch {
-				return false;
-			}
-		},
-		message: message$1,
-		"~run"(dataset, config$1) {
-			if (dataset.typed && !this.requirement(dataset.value)) _addIssue(this, "URL", dataset, config$1);
-			return dataset;
-		}
-	};
-}
-/**
-* Returns the fallback value of the schema.
-*
-* @param schema The schema to get it from.
-* @param dataset The output dataset if available.
-* @param config The config if available.
-*
-* @returns The fallback value.
-*/
-/* @__NO_SIDE_EFFECTS__ */
-function getFallback(schema, dataset, config$1) {
-	return typeof schema.fallback === "function" ? schema.fallback(dataset, config$1) : schema.fallback;
-}
-/**
-* Returns the default value of the schema.
-*
-* @param schema The schema to get it from.
-* @param dataset The input dataset if available.
-* @param config The config if available.
-*
-* @returns The default value.
-*/
-/* @__NO_SIDE_EFFECTS__ */
-function getDefault(schema, dataset, config$1) {
-	return typeof schema.default === "function" ? schema.default(dataset, config$1) : schema.default;
-}
-/* @__NO_SIDE_EFFECTS__ */
-function boolean(message$1) {
-	return {
-		kind: "schema",
-		type: "boolean",
-		reference: boolean,
-		expects: "boolean",
-		async: false,
-		message: message$1,
-		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps(this);
-		},
-		"~run"(dataset, config$1) {
-			if (typeof dataset.value === "boolean") dataset.typed = true;
-			else _addIssue(this, "type", dataset, config$1);
-			return dataset;
-		}
-	};
-}
-/* @__NO_SIDE_EFFECTS__ */
-function nullable(wrapped, default_) {
-	return {
-		kind: "schema",
-		type: "nullable",
-		reference: nullable,
-		expects: `(${wrapped.expects} | null)`,
-		async: false,
-		wrapped,
-		default: default_,
-		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps(this);
-		},
-		"~run"(dataset, config$1) {
-			if (dataset.value === null) {
-				if (this.default !== void 0) dataset.value = /* @__PURE__ */ getDefault(this, dataset, config$1);
-				if (dataset.value === null) {
-					dataset.typed = true;
-					return dataset;
-				}
-			}
-			return this.wrapped["~run"](dataset, config$1);
-		}
-	};
-}
-/* @__NO_SIDE_EFFECTS__ */
-function object(entries$1, message$1) {
-	return {
-		kind: "schema",
-		type: "object",
-		reference: object,
-		expects: "Object",
-		async: false,
-		entries: entries$1,
-		message: message$1,
-		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps(this);
-		},
-		"~run"(dataset, config$1) {
-			const input = dataset.value;
-			if (input && typeof input === "object") {
-				dataset.typed = true;
-				dataset.value = {};
-				for (const key in this.entries) {
-					const valueSchema = this.entries[key];
-					if (key in input || (valueSchema.type === "exact_optional" || valueSchema.type === "optional" || valueSchema.type === "nullish") && valueSchema.default !== void 0) {
-						const value$1 = key in input ? input[key] : /* @__PURE__ */ getDefault(valueSchema);
-						const valueDataset = valueSchema["~run"]({ value: value$1 }, config$1);
-						if (valueDataset.issues) {
-							const pathItem = {
-								type: "object",
-								origin: "value",
-								input,
-								key,
-								value: value$1
-							};
-							for (const issue of valueDataset.issues) {
-								if (issue.path) issue.path.unshift(pathItem);
-								else issue.path = [pathItem];
-								dataset.issues?.push(issue);
-							}
-							if (!dataset.issues) dataset.issues = valueDataset.issues;
-							if (config$1.abortEarly) {
-								dataset.typed = false;
-								break;
-							}
-						}
-						if (!valueDataset.typed) dataset.typed = false;
-						dataset.value[key] = valueDataset.value;
-					} else if (valueSchema.fallback !== void 0) dataset.value[key] = /* @__PURE__ */ getFallback(valueSchema);
-					else if (valueSchema.type !== "exact_optional" && valueSchema.type !== "optional" && valueSchema.type !== "nullish") {
-						_addIssue(this, "key", dataset, config$1, {
-							input: void 0,
-							expected: `"${key}"`,
-							path: [{
-								type: "object",
-								origin: "key",
-								input,
-								key,
-								value: input[key]
-							}]
-						});
-						if (config$1.abortEarly) break;
-					}
-				}
-			} else _addIssue(this, "type", dataset, config$1);
-			return dataset;
-		}
-	};
-}
-/* @__NO_SIDE_EFFECTS__ */
-function optional(wrapped, default_) {
-	return {
-		kind: "schema",
-		type: "optional",
-		reference: optional,
-		expects: `(${wrapped.expects} | undefined)`,
-		async: false,
-		wrapped,
-		default: default_,
-		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps(this);
-		},
-		"~run"(dataset, config$1) {
-			if (dataset.value === void 0) {
-				if (this.default !== void 0) dataset.value = /* @__PURE__ */ getDefault(this, dataset, config$1);
-				if (dataset.value === void 0) {
-					dataset.typed = true;
-					return dataset;
-				}
-			}
-			return this.wrapped["~run"](dataset, config$1);
-		}
-	};
-}
-/* @__NO_SIDE_EFFECTS__ */
-function string(message$1) {
-	return {
-		kind: "schema",
-		type: "string",
-		reference: string,
-		expects: "string",
-		async: false,
-		message: message$1,
-		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps(this);
-		},
-		"~run"(dataset, config$1) {
-			if (typeof dataset.value === "string") dataset.typed = true;
-			else _addIssue(this, "type", dataset, config$1);
-			return dataset;
-		}
-	};
-}
-/**
-* Parses an unknown input based on a schema.
-*
-* @param schema The schema to be used.
-* @param input The input to be parsed.
-* @param config The parse configuration.
-*
-* @returns The parsed input.
-*/
-function parse$3(schema, input, config$1) {
-	const dataset = schema["~run"]({ value: input }, /* @__PURE__ */ getGlobalConfig(config$1));
-	if (dataset.issues) throw new ValiError(dataset.issues);
-	return dataset.value;
-}
-/* @__NO_SIDE_EFFECTS__ */
-function pipe(...pipe$1) {
-	return {
-		...pipe$1[0],
-		pipe: pipe$1,
-		get "~standard"() {
-			return /* @__PURE__ */ _getStandardProps(this);
-		},
-		"~run"(dataset, config$1) {
-			for (const item of pipe$1) if (item.kind !== "metadata") {
-				if (dataset.issues && (item.kind === "schema" || item.kind === "transformation")) {
-					dataset.typed = false;
-					break;
-				}
-				if (!dataset.issues || !config$1.abortEarly && !config$1.abortPipeEarly) dataset = item["~run"](dataset, config$1);
-			}
-			return dataset;
-		}
-	};
-}
 //#endregion
 //#region node_modules/.pnpm/@toon-format+toon@4.1.1/node_modules/@toon-format/toon/dist/index.mjs
 const NULL_LITERAL = "null";
@@ -70799,7 +70497,7 @@ var require_dump = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region node_modules/.pnpm/undici@6.26.0/node_modules/undici/lib/interceptor/dns.js
 var require_dns = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const { isIP } = __require("node:net");
-	const { lookup: lookup$3 } = __require("node:dns");
+	const { lookup: lookup$2 } = __require("node:dns");
 	const DecoratorHandler = require_decorator_handler();
 	const { InvalidArgumentError, InformationalError } = require_errors();
 	const maxInt = Math.pow(2, 31) - 1;
@@ -70866,7 +70564,7 @@ var require_dns = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			}
 		}
 		#defaultLookup(origin, opts, cb) {
-			lookup$3(origin.hostname, {
+			lookup$2(origin.hostname, {
 				all: true,
 				family: this.dualStack === false ? this.affinity : 0,
 				order: "ipv4first"
@@ -76759,7 +76457,7 @@ var require_eventsource = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 }));
 //#endregion
-//#region node_modules/.pnpm/@iso4+fetch@0.0.1/node_modules/@iso4/fetch/dist/index.mjs
+//#region node_modules/.pnpm/@iso4+fetch@0.0.2/node_modules/@iso4/fetch/dist/index.mjs
 var import_undici = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const Client = require_client();
 	const Dispatcher = require_dispatcher();
@@ -76884,13 +76582,28 @@ var import_undici = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports.EventSource = EventSource;
 })))();
 /**
-* \@iso4/fetch — public entry point.
-* See `./types.ts` for the full option surface.
+* DNS for the connection-time pinning interceptor, plus the private/reserved-IP
+* block that runs before undici connects.
+*
+* This is the ONLY place a hostname is resolved. Resolution happens inside the
+* undici DNS interceptor, which runs only when a request actually connects —
+* i.e. after it has passed the allow/deny check. A denied host is therefore
+* never handed to a resolver, so the allow-list also gates DNS, not just the
+* HTTP request.
+*
+* Not re-exported from `index.ts`, so none of this is public API.
+*/
+/**
+* True for addresses that must never be connected to from guest-driven fetch:
+* loopback, link-local, RFC1918 / ULA, IMDS, and other reserved ranges. A
+* malformed address is treated as reserved (fail closed).
+* @param ip dotted-quad or IPv6 literal, brackets tolerated
 */
 function isReservedIp(ip) {
 	if (ip.includes(":")) {
 		const addr = ip.toLowerCase().replace(/^\[|\]$/g, "");
 		if (addr === "::1") return true;
+		if (addr === "::") return true;
 		const firstWord = parseInt(addr.split(":")[0] ?? "0", 16);
 		if ((firstWord & 65472) === 65152) return true;
 		if ((firstWord & 65024) === 64512) return true;
@@ -76904,20 +76617,51 @@ function isReservedIp(ip) {
 	const c = parts[2] ?? 0;
 	return a === 0 || a === 10 || a === 127 || a === 100 && (b & 192) === 64 || a === 169 && b === 254 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 0 && (c === 0 || c === 2) || a === 192 && b === 168 || a === 198 && (b === 18 || b === 19) || a === 198 && b === 51 && c === 100 || a === 203 && b === 0 && c === 113 || a >= 224;
 }
-async function resolveAndCheckIp(hostname) {
-	let addrs;
-	try {
-		addrs = await lookup$1(hostname, {
+/**
+* Throw if a hostname resolved to no usable public address. Exported for tests:
+* the undici interceptor is bypassed when `fetch` is mocked, so this is where
+* the SSRF block is exercised directly.
+* @param hostname the hostname that was resolved (for the error message)
+* @param addresses the resolved addresses
+*/
+function assertPublicAddresses(hostname, addresses) {
+	if (addresses.length === 0) throw new Error(`fetch: no DNS addresses for "${hostname}"`);
+	for (const { address } of addresses) if (isReservedIp(address)) throw new Error(`fetch: request blocked — "${hostname}" resolves to private/reserved IP ${address}`);
+}
+/**
+* The lookup function for undici's DNS interceptor: resolve the hostname and
+* refuse any private/reserved address before a connection is made.
+*/
+function makeDnsLookupFn() {
+	return (hostnameOrUrl, _opts, callback) => {
+		const rawHostname = typeof hostnameOrUrl === "object" && hostnameOrUrl !== null ? hostnameOrUrl.hostname : hostnameOrUrl;
+		const hostname = rawHostname.startsWith("[") && rawHostname.endsWith("]") ? rawHostname.slice(1, -1) : rawHostname;
+		lookup(hostname, {
 			all: true,
 			family: 0
+		}, (err, addresses) => {
+			if (err) {
+				callback(err, []);
+				return;
+			}
+			try {
+				assertPublicAddresses(hostname, addresses);
+			} catch (blockErr) {
+				callback(blockErr, []);
+				return;
+			}
+			callback(null, addresses.map((addr) => ({
+				address: addr.address,
+				family: addr.family,
+				ttl: 1e4
+			})));
 		});
-	} catch (err) {
-		throw new Error(`fetch: DNS resolution failed for "${hostname}": ${err.message}`);
-	}
-	if (addrs.length === 0) throw new Error(`fetch: DNS resolution returned no addresses for "${hostname}"`);
-	for (const { address } of addrs) if (isReservedIp(address)) throw new Error(`fetch: request blocked — "${hostname}" resolves to private/reserved IP ${address}`);
-	return addrs[0].address;
+	};
 }
+/**
+* \@iso4/fetch — public entry point.
+* See `./types.ts` for the full option surface.
+*/
 function hostExact(requestHost, ruleHost) {
 	return !ruleHost.startsWith("*.") && requestHost === ruleHost;
 }
@@ -76944,11 +76688,6 @@ function compileRules(rawRules) {
 		router: buildRouter(rule.routes)
 	}));
 }
-function decodePath(rawPath) {
-	const once = decodeURIComponent(rawPath);
-	if (once !== decodeURIComponent(once)) throw new Error("fetch: request denied — double-encoded path detected");
-	return once;
-}
 /**
 * Two-pass origin matching: exact hostname rules are checked before wildcard
 * rules, regardless of array order. Within the same priority level the first
@@ -76958,21 +76697,17 @@ function decodePath(rawPath) {
 * @param compiled
 */
 function matchRules(req, compiled) {
+	let hostMatched = false;
 	for (const pass of ["exact", "wildcard"]) for (const { rule, hosts, router } of compiled) {
 		if (!(pass === "exact" ? hosts.some((rh) => hostExact(req.host, rh)) : hosts.some((rh) => hostWildcard(req.host, rh)))) continue;
+		hostMatched = true;
 		if (rule.httpsOnly !== false && req.protocol !== "https") continue;
 		const standardPort = req.protocol === "https" ? 443 : 80;
 		if (rule.port !== void 0) {
 			if (!(Array.isArray(rule.port) ? rule.port : [rule.port]).includes(req.port)) continue;
 		} else if (req.port !== standardPort) continue;
 		if (rule.routes.length === 0) return { kind: "deny-route" };
-		let decodedPathname;
-		try {
-			decodedPathname = decodePath(new URL(req.url).pathname);
-		} catch {
-			return { kind: "deny-route" };
-		}
-		const matched = findRoute(router, req.method, decodedPathname, { normalize: true });
+		const matched = findRoute(router, req.method, new URL(req.url).pathname, { normalize: true });
 		if (matched === void 0) return { kind: "deny-route" };
 		return {
 			kind: "allow",
@@ -76981,10 +76716,11 @@ function matchRules(req, compiled) {
 			params: matched.params ?? {}
 		};
 	}
-	return { kind: "no-origin" };
+	return hostMatched ? { kind: "deny-route" } : { kind: "no-origin" };
 }
 function makeFetchContext(initialUrl, method, initialHeaders, initialBody, params, hop, raw) {
 	let _url = initialUrl;
+	let _body = initialBody;
 	const _headers = { ...initialHeaders };
 	return {
 		req: {
@@ -76992,10 +76728,15 @@ function makeFetchContext(initialUrl, method, initialHeaders, initialBody, param
 			params,
 			hop,
 			raw,
-			body: initialBody,
 			get url() {
 				return _url;
 			},
+			get body() {
+				return _body;
+			},
+			set body(b) {
+				_body = b;
+			},
 			get headers() {
 				return _headers;
 			},
@@ -77006,39 +76747,12 @@ function makeFetchContext(initialUrl, method, initialHeaders, initialBody, param
 				_url = url;
 			},
 			setBody(b) {
-				this.body = b;
+				_body = b;
 			}
 		},
 		res: null
 	};
 }
-function makeDnsLookupFn() {
-	return (hostnameOrUrl, _opts, callback) => {
-		const hostname = typeof hostnameOrUrl === "object" && hostnameOrUrl !== null ? hostnameOrUrl.hostname : hostnameOrUrl;
-		lookup(hostname, {
-			all: true,
-			family: 0
-		}, (err, addresses) => {
-			if (err) {
-				callback(err, []);
-				return;
-			}
-			if (addresses.length === 0) {
-				callback(/* @__PURE__ */ new Error(`fetch: no DNS addresses for "${hostname}"`), []);
-				return;
-			}
-			for (const { address } of addresses) if (isReservedIp(address)) {
-				callback(/* @__PURE__ */ new Error(`fetch: request blocked — "${hostname}" resolves to private/reserved IP ${address}`), []);
-				return;
-			}
-			callback(null, addresses.map((addr) => ({
-				address: addr.address,
-				family: addr.family,
-				ttl: 1e4
-			})));
-		});
-	};
-}
 async function readBody(body, maxBytes) {
 	if (body === null) return null;
 	const reader = body.getReader();
@@ -77073,10 +76787,7 @@ const REDIRECT_STATUSES = /* @__PURE__ */ new Set([
 	307,
 	308
 ]);
-async function httpRequest(url, method, headers, body, agent, timeoutMs, maxBodyBytes, incomingSignal) {
-	const signals = [AbortSignal.timeout(timeoutMs)];
-	if (incomingSignal !== void 0) signals.push(incomingSignal);
-	const signal = signals.length === 1 ? signals[0] : AbortSignal.any(signals);
+async function httpRequest(url, method, headers, body, agent, maxBodyBytes, signal) {
 	const response = await (0, import_undici.fetch)(url, {
 		method,
 		headers,
@@ -77190,19 +76901,15 @@ function buildSafeFetchHandler(options) {
 	const allowCompressed = options.allowCompressedResponses ?? false;
 	const agent = doPinDns ? new import_undici.Agent().compose(import_undici.interceptors.dns({
 		lookup: makeDnsLookupFn(),
-		maxTTL: 1e4,
-		dualStack: false,
-		affinity: 4
+		maxTTL: 1e4
 	})) : new import_undici.Agent();
-	async function buildSafeFetchRequest(parsedUrl, method, headers, hop) {
+	function buildSafeFetchRequest(parsedUrl, method, headers, hop) {
 		const protocol = parsedUrl.protocol.slice(0, -1);
 		if (protocol !== "http" && protocol !== "https") throw new Error(`fetch: unsupported protocol "${parsedUrl.protocol}"`);
 		const host = parsedUrl.hostname.toLowerCase();
 		const port = parsedUrl.port !== "" ? parseInt(parsedUrl.port, 10) : protocol === "https" ? 443 : 80;
-		let resolvedIp = null;
 		if (doPinDns) {
-			if (!(/^\d{1,3}(?:\.\d{1,3}){3}$/.test(host) || host.startsWith("["))) resolvedIp = await resolveAndCheckIp(host);
-			else if (isReservedIp(host.replace(/^\[|\]$/g, ""))) throw new Error(`fetch: request blocked — IP literal ${host} is private/reserved`);
+			if ((/^\d{1,3}(?:\.\d{1,3}){3}$/.test(host) || host.startsWith("[")) && isReservedIp(host.replace(/^\[|\]$/g, ""))) throw new Error(`fetch: request blocked — IP literal ${host} is private/reserved`);
 		}
 		return {
 			url: parsedUrl.toString(),
@@ -77212,7 +76919,7 @@ function buildSafeFetchHandler(options) {
 			path: parsedUrl.pathname + parsedUrl.search,
 			method,
 			headers,
-			resolvedIp,
+			resolvedIp: null,
 			hop
 		};
 	}
@@ -77293,7 +77000,7 @@ function buildSafeFetchHandler(options) {
 		if (!allowCompressed) baseHeaders["accept-encoding"] = "identity";
 		delete baseHeaders["host"];
 		const method = hostRequest.method.toUpperCase();
-		const match = await checkRequest(await buildSafeFetchRequest(parsedUrl, method, baseHeaders, 0));
+		const match = await checkRequest(buildSafeFetchRequest(parsedUrl, method, baseHeaders, 0));
 		const ctx = makeFetchContext(parsedUrl.toString(), method, baseHeaders, hostRequest.body, match?.params ?? {}, 0, hostRequest);
 		const middlewares = [
 			options.middleware,
@@ -77304,9 +77011,12 @@ function buildSafeFetchHandler(options) {
 			let currentUrl = ctx.req.url;
 			let currentMethod = method;
 			let currentBody = ctx.req.body;
+			let currentHeaders = ctx.req.headers;
 			let hop = 0;
+			const deadline = AbortSignal.timeout(timeoutMs);
+			const signal = hostRequest.signal !== void 0 ? AbortSignal.any([deadline, hostRequest.signal]) : deadline;
 			for (;;) {
-				const { response, bodyBytes } = await httpRequest(currentUrl, currentMethod, ctx.req.headers, currentBody, agent, timeoutMs, maxBodyBytes, hostRequest.signal);
+				const { response, bodyBytes } = await httpRequest(currentUrl, currentMethod, currentHeaders, currentBody, agent, maxBodyBytes, signal);
 				if (!REDIRECT_STATUSES.has(response.status) || hop >= maxRedirects) {
 					ctx.res = toHostFetchResponse(response, bodyBytes);
 					return;
@@ -77323,9 +77033,22 @@ function buildSafeFetchHandler(options) {
 					ctx.res = toHostFetchResponse(response, bodyBytes);
 					return;
 				}
+				const crossOrigin = nextUrl.origin !== new URL(currentUrl).origin;
+				const methodChanges = response.status === 303 || (response.status === 301 || response.status === 302) && currentMethod === "POST";
+				if (crossOrigin || methodChanges) {
+					currentHeaders = { ...currentHeaders };
+					if (crossOrigin) {
+						delete currentHeaders["authorization"];
+						delete currentHeaders["cookie"];
+						delete currentHeaders["proxy-authorization"];
+					}
+					if (methodChanges) {
+						for (const name of Object.keys(currentHeaders)) if (name.startsWith("content-")) delete currentHeaders[name];
+					}
+				}
 				hop++;
-				await checkRequest(await buildSafeFetchRequest(nextUrl, currentMethod, ctx.req.headers, hop));
-				if (response.status === 303 || (response.status === 301 || response.status === 302) && currentMethod === "POST") {
+				await checkRequest(buildSafeFetchRequest(nextUrl, currentMethod, currentHeaders, hop));
+				if (methodChanges) {
 					currentMethod = "GET";
 					currentBody = null;
 				}
@@ -77588,7 +77311,7 @@ var SearchableMap = class SearchableMap {
 	* found.
 	*/
 	get(key) {
-		const node = lookup$2(this._tree, key);
+		const node = lookup$1(this._tree, key);
 		return node !== void 0 ? node.get(LEAF) : void 0;
 	}
 	/**
@@ -77597,7 +77320,7 @@ var SearchableMap = class SearchableMap {
 	* @return True if the key is in the map, false otherwise
 	*/
 	has(key) {
-		const node = lookup$2(this._tree, key);
+		const node = lookup$1(this._tree, key);
 		return node !== void 0 && node.has(LEAF);
 	}
 	/**
@@ -77724,9 +77447,9 @@ const trackDown = (tree, key, path = []) => {
 	path.push([tree, key]);
 	return trackDown(void 0, "", path);
 };
-const lookup$2 = (tree, key) => {
+const lookup$1 = (tree, key) => {
 	if (key.length === 0 || tree == null) return tree;
-	for (const k of tree.keys()) if (k !== LEAF && key.startsWith(k)) return lookup$2(tree.get(k), key.slice(k.length));
+	for (const k of tree.keys()) if (k !== LEAF && key.startsWith(k)) return lookup$1(tree.get(k), key.slice(k.length));
 };
 const createPath = (node, key) => {
 	const keyLength = key.length;
@@ -137050,14 +136773,14 @@ function createC8yAuthHeaders(auth) {
 const EXECUTE_ENTRY_PATH = "/codemode-execute.mjs";
 const BLOCKED_REQUEST_PREFIX = "Request blocked by MCP connection policy.";
 const SANDBOX_LIMITS = {
-	memoryMb: 128,
+	memoryMb: 24,
 	cpuTimeMs: 5e4,
 	wallTimeMs: 12e4,
 	maxBridgeCalls: 200
 };
 let sandboxPromise = null;
 async function getSandbox() {
-	sandboxPromise ??= createSandbox({ maxIsolates: 10 });
+	sandboxPromise ??= createSandbox();
 	return sandboxPromise;
 }
 process$1.once("exit", () => {
@@ -137534,18 +137257,18 @@ function clearActiveTenant() {
 	writeFileSync(CONFIG_FILE, JSON.stringify({ tenantUrl: null }), "utf8");
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/convert-path-to-posix.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/convert-path-to-posix.js
 const win32Sep = "\\";
 function convertPathToPosix(filePath) {
 	if (filePath.startsWith("\\\\?\\")) return filePath;
 	return filePath.split(win32Sep).join("/");
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/is-windows.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/is-windows.js
 const isWindowsConst = /^win/.test(globalThis.process ? globalThis.process.platform : "");
 const isWindows = () => isWindowsConst;
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/url.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/url.js
 const forwardSlashPattern = /\//g;
 const protocolPattern = /^(\w{2,}):\/\//i;
 const jsonPointerSlash = /~1/g;
@@ -137949,7 +137672,7 @@ function safePointerToPath(pointer) {
 	});
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/errors.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/errors.js
 const nonJsonTypes = [
 	"function",
 	"symbol",
@@ -137995,8 +137718,8 @@ var JSONParserError = class extends Error {
 	source;
 	path;
 	code;
-	constructor(message, source) {
-		super();
+	constructor(message, source, options) {
+		super(void 0, options);
 		this.code = "EUNKNOWN";
 		this.name = "JSONParserError";
 		this.message = message;
@@ -138036,8 +137759,8 @@ var JSONParserErrorGroup = class JSONParserErrorGroup extends Error {
 var ParserError = class extends JSONParserError {
 	code = "EPARSER";
 	name = "ParserError";
-	constructor(message, source) {
-		super(`Error parsing ${source}: ${message}`, source);
+	constructor(message, source, options) {
+		super(`Error parsing ${source}: ${message}`, source, options);
 	}
 };
 var UnmatchedParserError = class extends JSONParserError {
@@ -138051,8 +137774,8 @@ var ResolverError = class extends JSONParserError {
 	code = "ERESOLVER";
 	name = "ResolverError";
 	ioErrorCode;
-	constructor(ex, source) {
-		super(ex.message || `Error reading file "${source}"`, source);
+	constructor(ex, source, options) {
+		super(ex.message || `Error reading file "${source}"`, source, options);
 		if ("code" in ex) this.ioErrorCode = String(ex.code);
 	}
 };
@@ -138100,7 +137823,7 @@ function normalizeError(err) {
 	return err;
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/schema-resources.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/schema-resources.js
 function getSchemaBasePath(basePath, value, legacyId = false) {
 	const schemaId = getSchemaId(value, legacyId);
 	return schemaId ? resolve$1(basePath, schemaId) : basePath;
@@ -138146,7 +137869,7 @@ function getSchemaIdMode(value, inheritedLegacyId = false) {
 	return inheritedLegacyId;
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/pointer.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/pointer.js
 const nullSymbol = Symbol("null");
 const slashes = /\//g;
 const tildes = /~/g;
@@ -138253,11 +137976,11 @@ var Pointer = class Pointer {
 				const parentPath = pathFromRoot?.replace(path, "");
 				throw new MissingPointerError(token, safelyDecodeURI$1(this.originalPath), targetRef, targetFound, parentPath);
 			}
-			if (this.value[token] === void 0 || this.value[token] === null && i === tokens.length - 1) {
+			if (!Object.hasOwn(this.value, token) || this.value[token] === void 0 || this.value[token] === null && i === tokens.length - 1) {
 				let didFindSubstringSlashMatch = false;
 				for (let j = tokens.length - 1; j > i; j--) {
 					const joinedToken = tokens.slice(i, j + 1).join("/");
-					if (this.value[joinedToken] !== void 0) {
+					if (Object.hasOwn(this.value, joinedToken) && this.value[joinedToken] !== void 0) {
 						this.value = this.value[joinedToken];
 						i = j;
 						didFindSubstringSlashMatch = true;
@@ -138268,7 +137991,7 @@ var Pointer = class Pointer {
 					this.chainCircular = wasChainCircular;
 					continue;
 				}
-				if (token in this.value && this.value[token] === null) {
+				if (Object.hasOwn(this.value, token) && this.value[token] === null) {
 					this.value = nullSymbol;
 					this.chainCircular = wasChainCircular;
 					continue;
@@ -138322,7 +138045,7 @@ var Pointer = class Pointer {
 		for (let i = 0; i < tokens.length - 1; i++) {
 			resolveIf$Ref(this, options);
 			token = tokens[i];
-			if (this.value && this.value[token] !== void 0) this.value = this.value[token];
+			if (this.value && Object.hasOwn(this.value, token) && this.value[token] !== void 0) this.value = this.value[token];
 			else this.value = setValue(this, token, {});
 			if (this.$ref.dynamicIdScope) {
 				this.legacyIdScope = getSchemaIdMode(this.value, this.legacyIdScope);
@@ -138471,7 +138194,7 @@ function isAliasedResource($ref) {
 	return Boolean($ref.path && $ref.path in $ref.$refs._aliases);
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/ref.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/ref.js
 /**
 * This class represents a single JSON reference and its resolved value.
 *
@@ -138752,7 +138475,7 @@ function defineDataProperty$1(target, key, value) {
 	});
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/refs.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/refs.js
 /**
 * When you call the resolve method, the value that gets passed to the callback function (or Promise) is a $Refs object. This same object is accessible via the parser.$refs property of $RefParser objects.
 *
@@ -138961,7 +138684,7 @@ function getPaths($refs, types) {
 	});
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/plugins.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/plugins.js
 /**
 * Returns the given plugins as an array, rather than an object map.
 * All other methods in this module expect an array of plugins rather than an object map.
@@ -139070,7 +138793,7 @@ function getResult(obj, prop, file, callback, $refs) {
 	return value;
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/parse.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/parse.js
 /**
 * Reads and parses the specified file path or URL.
 */
@@ -139132,7 +138855,7 @@ async function readFile(file, options, $refs) {
 		if (!err && options.continueOnError) throw new UnmatchedResolverError(file.url);
 		else if (!err || !("error" in err)) throw new SyntaxError(`Unable to resolve $ref pointer "${file.url}"`, { cause: err });
 		else if (err.error instanceof ResolverError) throw err.error;
-		else throw new ResolverError(err, file.url);
+		else throw new ResolverError(err.error instanceof Error ? err.error : new Error(String(err.error)), file.url, { cause: err.error });
 	}
 }
 /**
@@ -139162,7 +138885,7 @@ async function parseFile(file, options, $refs) {
 		else if (err && err.message && err.message.startsWith("Error parsing")) throw err;
 		else if (!err || !("error" in err)) throw new SyntaxError(`Unable to parse ${file.url}`, { cause: err });
 		else if (err.error instanceof ParserError) throw err.error;
-		else throw new ParserError(err.error.message, file.url);
+		else throw new ParserError(err.error?.message ?? String(err.error), file.url, { cause: err.error });
 	}
 }
 /**
@@ -139172,10 +138895,10 @@ async function parseFile(file, options, $refs) {
 * @returns
 */
 function isEmpty(value) {
-	return value === void 0 || typeof value === "object" && Object.keys(value).length === 0 || typeof value === "string" && value.trim().length === 0 || Buffer.isBuffer(value) && value.length === 0;
+	return value === void 0 || value === null || typeof value === "object" && Object.keys(value).length === 0 || typeof value === "string" && value.trim().length === 0 || Buffer.isBuffer(value) && value.length === 0;
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/parsers/json.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/parsers/json.js
 var json_default = {
 	/**
 	* The order that this parser will run, in relation to other parsers.
@@ -139214,8 +138937,8 @@ var json_default = {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/js-yaml@5.3.0/node_modules/js-yaml/dist/js-yaml.mjs
-/*! js-yaml 5.3.0 https://github.com/nodeca/js-yaml @license MIT */
+//#region node_modules/.pnpm/js-yaml@5.4.1/node_modules/js-yaml/dist/js-yaml.mjs
+/*! js-yaml 5.4.1 https://github.com/nodeca/js-yaml @license MIT */
 /**
 * Returned by a scalar resolver when the source does not match its tag.
 *
@@ -140631,24 +140354,32 @@ function collectionTagName(state, event, defaultTagName) {
 function isMappingTag(tag) {
 	return tag.nodeKind === "mapping";
 }
+function chargeMergeWork(state) {
+	state.totalMergeKeys++;
+	if (state.maxTotalMergeKeys !== -1 && state.totalMergeKeys > state.maxTotalMergeKeys) throwError$1(state, `merge keys exceeded maxTotalMergeKeys (${state.maxTotalMergeKeys})`);
+}
 function mergeKeys(state, frame, source, sourceTag) {
+	chargeMergeWork(state);
 	for (const sourceKey of sourceTag.keys(source)) {
-		if (state.maxTotalMergeKeys !== -1 && ++state.totalMergeKeys > state.maxTotalMergeKeys) throwError$1(state, `merge keys exceeded maxTotalMergeKeys (${state.maxTotalMergeKeys})`);
+		chargeMergeWork(state);
 		if (frame.tag.has(frame.value, sourceKey)) continue;
 		const err = frame.tag.addPair(frame.value, sourceKey, sourceTag.get(source, sourceKey));
 		if (err) throwError$1(state, err);
-		(frame.overridable ??= /* @__PURE__ */ new Set()).add(sourceKey);
+		frame.overridable ??= /* @__PURE__ */ new Set();
+		frame.overridable.add(sourceKey);
 	}
 }
 function mergeSource(state, frame, source, sourceTag) {
 	state.position = frame.keyPosition;
 	if (isMappingTag(sourceTag)) mergeKeys(state, frame, source, sourceTag);
-	else if (sourceTag.nodeKind === "sequence" && Array.isArray(source)) for (const element of source) {
-		const elementTag = state.nodeTags.get(element);
-		if (!elementTag) throwError$1(state, "cannot merge mappings; the provided source object is unacceptable");
-		mergeKeys(state, frame, element, elementTag);
-	}
-	else throwError$1(state, "cannot merge mappings; the provided source object is unacceptable");
+	else if (sourceTag.nodeKind === "sequence" && Array.isArray(source)) {
+		if (source.length > 100) throwError$1(state, "abnormal merge sequence size");
+		for (const element of source) {
+			const elementTag = state.nodeTags.get(element);
+			if (!elementTag) throwError$1(state, "cannot merge mappings; the provided source object is unacceptable");
+			mergeKeys(state, frame, element, elementTag);
+		}
+	} else throwError$1(state, "cannot merge mappings; the provided source object is unacceptable");
 }
 function addMappingValue(state, frame, key, value, tag) {
 	state.position = frame.keyPosition;
@@ -140997,6 +140728,24 @@ function testDocumentSeparator(state, position = state.position) {
 	}
 	return false;
 }
+function skipByteOrderMark(state) {
+	if (state.position === state.lineStart && state.input.charCodeAt(state.position) === 65279) {
+		state.position++;
+		state.lineStart = state.position;
+	}
+}
+function testDocumentBoundary(state) {
+	if (state.position !== state.lineStart) return false;
+	if (testDocumentSeparator(state)) return true;
+	if (state.input.charCodeAt(state.position) !== 65279) return false;
+	const snapshot = snapshotState(state);
+	skipByteOrderMark(state);
+	skipSeparationSpace(state, true);
+	const ch = state.input.charCodeAt(state.position);
+	const result = state.position === state.lineStart && (ch === 37 || ch === 45 && testDocumentSeparator(state));
+	restoreState(state, snapshot);
+	return result;
+}
 function skipUntilLineEnd(state) {
 	let ch = state.input.charCodeAt(state.position);
 	while (ch !== 0 && !isEol(ch)) ch = state.input.charCodeAt(++state.position);
@@ -141180,7 +140929,7 @@ function readBlockScalar(state, parentIndent, props) {
 			} else if (column > 0) valueEnd = linePosition + column;
 			break;
 		}
-		if (linePosition === state.lineStart && testDocumentSeparator(state, linePosition)) break;
+		if (testDocumentBoundary(state)) break;
 		if (!detectedIndent && contentIndent === -1 && isEol(first)) maxLeadingIndent = Math.max(maxLeadingIndent, column);
 		if (!detectedIndent && contentIndent === -1 && !isEol(first)) {
 			if (first === 9 && column < parentIndent) {
@@ -141233,7 +140982,7 @@ function readPlainScalar(state, nodeIndent, nodeContext, props) {
 	const inFlow = nodeContext === CONTEXT_FLOW_IN;
 	let multiline = false;
 	while (ch !== 0) {
-		if (state.position === state.lineStart && testDocumentSeparator(state)) break;
+		if (testDocumentBoundary(state)) break;
 		if (ch === 58) {
 			const following = state.input.charCodeAt(state.position + 1);
 			if (isWsOrEolOrEnd(following) || inFlow && isFlowIndicator(following)) break;
@@ -141590,7 +141339,7 @@ function readDocument(state) {
 	const documentEvent = state.events[documentEventIndex];
 	if (documentEvent?.type === EVENT_ID.DOCUMENT) documentEvent.explicitEnd = explicitEnd;
 	addPopEvent(state);
-	if (!explicitEnd && state.position < state.length && !(state.position === state.lineStart && testDocumentSeparator(state))) throwError(state, "end of the stream or a document separator is expected");
+	if (!explicitEnd && state.position < state.length && !testDocumentBoundary(state)) throwError(state, "end of the stream or a document separator is expected");
 }
 /**
 * Parses YAML into a flat event stream referencing source text by offsets.
@@ -141616,8 +141365,8 @@ function parseEvents(input, options) {
 	};
 	const nullpos = input.indexOf("\0");
 	if (nullpos !== -1) YAMLException.throwAt(input, nullpos, "null byte is not allowed in input", state.filename);
-	if (state.input.charCodeAt(state.position) === 65279) state.position++;
 	while (state.position < state.length) {
+		skipByteOrderMark(state);
 		skipSeparationSpace(state, true);
 		if (state.position >= state.length) break;
 		const documentStart = state.position;
@@ -141689,22 +141438,111 @@ function load(input, options) {
 	if (documents.length === 1) return documents[0];
 	throw new YAMLException("expected a single document in the stream, but found more");
 }
-var ESCAPE_SEQUENCES = {};
-ESCAPE_SEQUENCES[0] = "\\0";
-ESCAPE_SEQUENCES[7] = "\\a";
-ESCAPE_SEQUENCES[8] = "\\b";
-ESCAPE_SEQUENCES[9] = "\\t";
-ESCAPE_SEQUENCES[10] = "\\n";
-ESCAPE_SEQUENCES[11] = "\\v";
-ESCAPE_SEQUENCES[12] = "\\f";
-ESCAPE_SEQUENCES[13] = "\\r";
-ESCAPE_SEQUENCES[27] = "\\e";
-ESCAPE_SEQUENCES[34] = "\\\"";
-ESCAPE_SEQUENCES[92] = "\\\\";
-ESCAPE_SEQUENCES[133] = "\\N";
-ESCAPE_SEQUENCES[160] = "\\_";
-ESCAPE_SEQUENCES[8232] = "\\L";
-ESCAPE_SEQUENCES[8233] = "\\P";
+function hasBit(mask, bit) {
+	return (mask & 1 << bit) !== 0;
+}
+/**
+* Default scalar styling rules in application order.
+* See [Scalar styling](../../docs/scalar_styling.md) for usage details.
+*
+* @category AST
+*/
+var DEFAULT_SCALAR_STYLE_RULES = {
+	applyQuoteFlowKeysOption,
+	doubleQuoteForInvisibles,
+	doubleQuoteWhitespaceOnly,
+	applyForceQuotesOption,
+	tryLongOrMultilineAsBlock,
+	quoteInvalidPlain,
+	fallbackToDoubleQuoted
+};
+function _preferredQuotedStyle(layout) {
+	if (layout.presenterOptions.quoteStyle === "single" && hasBit(layout.allowedStylesMask, SCALAR_STYLE.SINGLE_QUOTED)) return SCALAR_STYLE.SINGLE_QUOTED;
+	return SCALAR_STYLE.DOUBLE_QUOTED;
+}
+function applyQuoteFlowKeysOption(layout) {
+	if (!layout.presenterOptions.quoteFlowKeys) return;
+	if (!layout.isKey || !layout.flowOnly || layout.style !== SCALAR_STYLE.PLAIN) return;
+	layout.style = SCALAR_STYLE.DOUBLE_QUOTED;
+}
+function doubleQuoteForInvisibles(layout) {
+	if (layout.style === SCALAR_STYLE.PLAIN && /[\t\x7F-\xA0\u2028\u2029\uFEFF\uFFFE\uFFFF]/.test(layout.node.value)) layout.style = SCALAR_STYLE.DOUBLE_QUOTED;
+}
+function doubleQuoteWhitespaceOnly(layout) {
+	if (layout.style === SCALAR_STYLE.PLAIN && /^\s+$/.test(layout.node.value)) layout.style = SCALAR_STYLE.DOUBLE_QUOTED;
+}
+function applyForceQuotesOption(layout) {
+	if (!layout.presenterOptions.forceQuotes) return;
+	if (layout.isKey || layout.style !== SCALAR_STYLE.PLAIN) return;
+	layout.style = layout.node.value.includes("\n") ? SCALAR_STYLE.DOUBLE_QUOTED : _preferredQuotedStyle(layout);
+}
+function tryLongOrMultilineAsBlock(layout) {
+	if (layout.style !== SCALAR_STYLE.PLAIN || layout.isKey) return;
+	const value = layout.node.value;
+	const multiline = value.indexOf("\n") !== -1;
+	if (!hasBit(layout.allowedStylesMask, SCALAR_STYLE.LITERAL_BLOCK)) {
+		if (multiline) layout.style = SCALAR_STYLE.DOUBLE_QUOTED;
+		return;
+	}
+	const w = layout.presenterOptions.lineWidth;
+	if (w === -1) {
+		if (multiline) layout.style = SCALAR_STYLE.LITERAL_BLOCK;
+		return;
+	}
+	const availableWidth = Math.max(Math.min(w, 40), w - layout.shiftOfContent);
+	let position = 0;
+	let shouldFold = false;
+	while (position <= value.length) {
+		let lineEnd = value.length;
+		const nextLineBreak = value.indexOf("\n", position);
+		if (nextLineBreak !== -1) lineEnd = nextLineBreak;
+		const line = value.slice(position, lineEnd);
+		if (line.length > availableWidth && line[0] !== " " && / [^ \t]/.test(line)) shouldFold = true;
+		if (nextLineBreak === -1) break;
+		position = nextLineBreak + 1;
+	}
+	if (shouldFold) layout.style = SCALAR_STYLE.FOLDED_BLOCK;
+	else if (multiline) layout.style = SCALAR_STYLE.LITERAL_BLOCK;
+}
+function quoteInvalidPlain(layout) {
+	if (layout.style === SCALAR_STYLE.PLAIN && !hasBit(layout.allowedStylesMask, SCALAR_STYLE.PLAIN)) layout.style = _preferredQuotedStyle(layout);
+}
+function fallbackToDoubleQuoted(layout) {
+	if (!hasBit(layout.allowedStylesMask, layout.style)) layout.style = SCALAR_STYLE.DOUBLE_QUOTED;
+}
+var SRC_C_PRINTABLE = "[\\x09\\x0A\\x0D\\x20-\\x7E\\x85\\xA0-\\uD7FF\\uE000-\\uFFFD\\u{10000}-\\u{10FFFF}]";
+var SRC_B_CHAR = "[\\n\\r]";
+var SRC_C_BYTE_ORDER_MARK = "\\uFEFF";
+var SRC_S_WHITE = "[ \\t]";
+var SRC_NB_CHAR = `(?:(?!(?:${SRC_B_CHAR}|${SRC_C_BYTE_ORDER_MARK}))${SRC_C_PRINTABLE})`;
+var SRC_NS_CHAR = `(?:(?!${SRC_S_WHITE})${SRC_NB_CHAR})`;
+var SRC_NB_JSON = "[\\x09\\x20-\\uD7FF\\uE000-\\uFFFF\\u{10000}-\\u{10FFFF}]";
+var SRC_C_INDICATOR = "[-?:,\\[\\]{}#&*!|>'\"%@`]";
+var SRC_C_FLOW_INDICATOR = "[,\\[\\]{}]";
+var SRC_NS_PLAIN_SAFE_FLOW_OUT = SRC_NS_CHAR;
+var SRC_NS_PLAIN_SAFE_FLOW_IN = `(?:(?!${SRC_C_FLOW_INDICATOR})${SRC_NS_CHAR})`;
+var SRC_NS_PLAIN_FIRST_FLOW_OUT = `(?:(?:(?!${SRC_C_INDICATOR})${SRC_NS_CHAR})|[?:-](?=${SRC_NS_PLAIN_SAFE_FLOW_OUT}))`;
+var SRC_NS_PLAIN_FIRST_FLOW_IN = `(?:(?:(?!${SRC_C_INDICATOR})${SRC_NS_CHAR})|[?:-](?=${SRC_NS_PLAIN_SAFE_FLOW_IN}))`;
+var SRC_NS_PLAIN_CHAR_FLOW_OUT = `(?:(?:(?![:#])${SRC_NS_PLAIN_SAFE_FLOW_OUT})|:(?=${SRC_NS_PLAIN_SAFE_FLOW_OUT}))#*`;
+var SRC_NS_PLAIN_CHAR_FLOW_IN = `(?:(?:(?![:#])${SRC_NS_PLAIN_SAFE_FLOW_IN})|:(?=${SRC_NS_PLAIN_SAFE_FLOW_IN}))#*`;
+var SRC_NB_NS_PLAIN_IN_LINE_FLOW_OUT = `(?:${SRC_S_WHITE}*${SRC_NS_PLAIN_CHAR_FLOW_OUT})*`;
+var SRC_NB_NS_PLAIN_IN_LINE_FLOW_IN = `(?:${SRC_S_WHITE}*${SRC_NS_PLAIN_CHAR_FLOW_IN})*`;
+var SRC_NS_PLAIN_ONE_LINE_FLOW_OUT = `${SRC_NS_PLAIN_FIRST_FLOW_OUT}#*${SRC_NB_NS_PLAIN_IN_LINE_FLOW_OUT}`;
+var SRC_NS_PLAIN_ONE_LINE_FLOW_IN = `${SRC_NS_PLAIN_FIRST_FLOW_IN}#*${SRC_NB_NS_PLAIN_IN_LINE_FLOW_IN}`;
+var SRC_NS_PLAIN_ONE_LINE_BLOCK_KEY = SRC_NS_PLAIN_ONE_LINE_FLOW_OUT;
+var SRC_NS_PLAIN_ONE_LINE_FLOW_KEY = SRC_NS_PLAIN_ONE_LINE_FLOW_IN;
+var SRC_S_NS_PLAIN_NEXT_LINE_FLOW_OUT = `\\n+${SRC_NS_PLAIN_CHAR_FLOW_OUT}${SRC_NB_NS_PLAIN_IN_LINE_FLOW_OUT}`;
+var SRC_S_NS_PLAIN_NEXT_LINE_FLOW_IN = `\\n+${SRC_NS_PLAIN_CHAR_FLOW_IN}${SRC_NB_NS_PLAIN_IN_LINE_FLOW_IN}`;
+var SRC_NS_PLAIN_MULTI_LINE_FLOW_OUT = `${SRC_NS_PLAIN_ONE_LINE_FLOW_OUT}(?:${SRC_S_NS_PLAIN_NEXT_LINE_FLOW_OUT})*`;
+var SRC_NS_PLAIN_MULTI_LINE_FLOW_IN = `${SRC_NS_PLAIN_ONE_LINE_FLOW_IN}(?:${SRC_S_NS_PLAIN_NEXT_LINE_FLOW_IN})*`;
+new RegExp(`^(?:${SRC_NS_PLAIN_MULTI_LINE_FLOW_OUT})$`, "u");
+new RegExp(`^(?:${SRC_NS_PLAIN_MULTI_LINE_FLOW_IN})$`, "u");
+new RegExp(`^(?:${SRC_NS_PLAIN_ONE_LINE_BLOCK_KEY})$`, "u");
+new RegExp(`^(?:${SRC_NS_PLAIN_ONE_LINE_FLOW_KEY})$`, "u");
+new RegExp(`^(?:${SRC_NB_JSON})*$`, "u");
+new RegExp(`^(?:${SRC_NB_JSON}|\\n)*$`, "u");
+new RegExp(`^(?:${SRC_NB_CHAR}|\\n)*$`, "u");
+Object.keys(DEFAULT_SCALAR_STYLE_RULES).map((name) => Reflect.get(DEFAULT_SCALAR_STYLE_RULES, name));
 EVENT_ID.DOCUMENT;
 EVENT_ID.SEQUENCE;
 EVENT_ID.MAPPING;
@@ -141722,7 +141560,7 @@ CHOMPING_MODE.CLIP;
 CHOMPING_MODE.STRIP;
 CHOMPING_MODE.KEEP;
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/parsers/yaml.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/parsers/yaml.js
 const legacyDefaultSchema = CORE_SCHEMA.withTags(timestampTag, mergeTag, binaryTag, omapTag, pairsTag, setTag);
 var yaml_default = {
 	/**
@@ -141772,7 +141610,7 @@ var yaml_default = {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/parsers/text.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/parsers/text.js
 const TEXT_REGEXP = /\.(txt|htm|html|md|xml|js|min|map|css|scss|less|svg)(?:[?#].*)?$/i;
 var text_default = {
 	/**
@@ -141806,7 +141644,7 @@ var text_default = {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/parsers/binary.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/parsers/binary.js
 const BINARY_REGEXP = /\.(jpeg|jpg|gif|png|bmp|ico)(?:[?#].*)?$/i;
 var binary_default = {
 	/**
@@ -141835,7 +141673,7 @@ var binary_default = {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/resolvers/file.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/resolvers/file.js
 var file_default = {
 	/**
 	* The order that this resolver will run, in relation to other resolvers.
@@ -141873,7 +141711,7 @@ var file_default = {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/resolvers/http.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/resolvers/http.js
 var http_default = {
 	/**
 	* The order that this resolver will run, in relation to other resolvers.
@@ -141976,6 +141814,8 @@ async function download(u, httpOptions, _redirects) {
 		throw new ResolverError(wrappedError, u.href);
 	} finally {
 		pendingResponse?.cancelTimeout();
+		const response = pendingResponse?.response;
+		if (response?.body && !response.bodyUsed) await response.body.cancel().catch(() => void 0);
 	}
 }
 /**
@@ -142025,7 +141865,7 @@ async function get(u, httpOptions, resolvedAddresses) {
 * header and TLS SNI/certificate verification.
 */
 async function createPinnedTransport(requestUrl, resolvedAddresses) {
-	const undici = await import("./undici-BakULwMS.mjs").then((m) => /* @__PURE__ */ __toESM(m.default, 1));
+	const undici = await import("./undici-C4eXkUym.mjs").then((m) => /* @__PURE__ */ __toESM(m.default, 1));
 	const expectedHostname = normalizeLookupHostname(requestUrl.hostname);
 	const pinnedAddresses = resolvedAddresses.map(({ address, family }) => ({
 		address,
@@ -142071,7 +141911,7 @@ function withoutSensitiveHeaders(httpOptions) {
 	};
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/options.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/options.js
 const getJsonSchemaRefParserDefaultOptions = () => {
 	return {
 		/**
@@ -142188,11 +142028,12 @@ function isMergeable(val) {
 	return val && typeof val === "object" && !Array.isArray(val) && !(val instanceof RegExp) && !(val instanceof Date) && !(typeof Headers !== "undefined" && val instanceof Headers);
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/normalize-args.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/normalize-args.js
 /**
 * Normalizes the given arguments, accounting for optional args.
+* Operations that delegate to parse can defer cloning until that call.
 */
-function normalizeArgs(_args) {
+function normalizeArgs(_args, cloneSchema = true) {
 	let path;
 	let schema;
 	let options;
@@ -142213,12 +142054,8 @@ function normalizeArgs(_args) {
 		schema = args[0];
 		options = args[1];
 	}
-	try {
-		options = getNewOptions(options);
-	} catch (e) {
-		console.error(`JSON Schema Ref Parser: Error normalizing options: ${e}`);
-	}
-	if (!options.mutateInputSchema && typeof schema === "object") schema = JSON.parse(JSON.stringify(schema));
+	options = getNewOptions(options);
+	if (cloneSchema && !options.mutateInputSchema && typeof schema === "object") schema = structuredClone(schema);
 	return {
 		path,
 		schema,
@@ -142227,7 +142064,7 @@ function normalizeArgs(_args) {
 	};
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/resolve-external/with-matcher.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/resolve-external/with-matcher.js
 async function resolveExternalWithMatcher(parser, options, excludedPathMatcher) {
 	const rootPath = parser.$refs._root$Ref.path;
 	const rootScopeBase = parser.$refs._root$Ref.dynamicIdScope ? getSchemaBasePath(rootPath, parser.schema, parser.$refs._root$Ref.legacyIdScope) : rootPath;
@@ -142637,7 +142474,7 @@ function defineLazyProperty(object, key, get) {
 	});
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/resolve-external.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/resolve-external.js
 /**
 * Crawls the JSON schema, finds all external JSON references, and resolves their values.
 * This method does not mutate the JSON schema. The resolved values are added to {@link $RefParser#$refs}.
@@ -142736,7 +142573,7 @@ async function resolve$Ref($ref, path, scopeBase, dynamicIdScope, $refs, options
 	}
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/bundle.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/bundle.js
 /**
 * Bundles all external JSON references into the main JSON schema, thus resulting in a schema that
 * only has *internal* references, not any *external* references.
@@ -143022,7 +142859,7 @@ function containsObject(root, target) {
 	return visit(root);
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/dereference.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/dereference.js
 var dereference_default = dereference$1;
 /**
 * Crawls the JSON schema, finds all JSON references, and dereferences them.
@@ -143097,7 +142934,7 @@ function crawl(obj, path, scopeBase, dynamicIdScope, legacyIdScope, pathFromRoot
 						if (derefOptions?.cloneReferences && !circular && assignedValue && typeof assignedValue === "object") assignedValue = structuredClone(assignedValue);
 						obj[key] = assignedValue;
 						if (derefOptions?.preservedProperties) {
-							if (preserved.size && typeof obj[key] === "object" && !Array.isArray(obj[key])) preserved.forEach((value, prop) => {
+							if (preserved.size && obj[key] !== null && typeof obj[key] === "object" && !Array.isArray(obj[key])) preserved.forEach((value, prop) => {
 								obj[key][prop] = value;
 							});
 						}
@@ -143196,7 +143033,7 @@ function foundCircularReference(keyPath, $refs, options) {
 	return true;
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/next.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/next.js
 function makeNext() {
 	if (typeof process === "object" && typeof process.nextTick === "function") return process.nextTick;
 	else if (typeof setImmediate === "function") return setImmediate;
@@ -143206,7 +143043,7 @@ function makeNext() {
 }
 var next_default = makeNext();
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/maybe.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/maybe.js
 function maybe(cb, promise) {
 	if (cb) {
 		promise.then(function(result) {
@@ -143222,7 +143059,7 @@ function maybe(cb, promise) {
 	} else return promise;
 }
 //#endregion
-//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.1_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/index.js
+//#region node_modules/.pnpm/@apidevtools+json-schema-ref-parser@16.0.2_@types+json-schema@7.0.15/node_modules/@apidevtools/json-schema-ref-parser/dist/lib/index.js
 /**
 * This class parses a JSON schema, builds a map of its JSON references and their resolved values,
 * and provides methods for traversing, manipulating, and dereferencing those references.
@@ -143245,7 +143082,12 @@ var $RefParser = class $RefParser {
 	*/
 	$refs = new $Refs();
 	async parse() {
-		const args = normalizeArgs(arguments);
+		let args;
+		try {
+			args = normalizeArgs(arguments);
+		} catch (err) {
+			return rejectNormalizationError(arguments, err);
+		}
 		let promise;
 		const hasSchema = args.schema !== void 0 && args.schema !== null;
 		if (!args.path && !hasSchema) {
@@ -143289,7 +143131,12 @@ var $RefParser = class $RefParser {
 		return parser.parse.apply(parser, arguments);
 	}
 	async resolve() {
-		const args = normalizeArgs(arguments);
+		let args;
+		try {
+			args = normalizeArgs(arguments, false);
+		} catch (err) {
+			return rejectNormalizationError(arguments, err);
+		}
 		try {
 			await this.parse(args.path, args.schema, args.options);
 			await resolveExternal(this, args.options);
@@ -143308,7 +143155,12 @@ var $RefParser = class $RefParser {
 		return instance.bundle.apply(instance, arguments);
 	}
 	async bundle() {
-		const args = normalizeArgs(arguments);
+		let args;
+		try {
+			args = normalizeArgs(arguments, false);
+		} catch (err) {
+			return rejectNormalizationError(arguments, err);
+		}
 		try {
 			await this.resolve(args.path, args.schema, args.options);
 			bundle$1(this, args.options);
@@ -143323,7 +143175,12 @@ var $RefParser = class $RefParser {
 		return instance.dereference.apply(instance, arguments);
 	}
 	async dereference() {
-		const args = normalizeArgs(arguments);
+		let args;
+		try {
+			args = normalizeArgs(arguments, false);
+		} catch (err) {
+			return rejectNormalizationError(arguments, err);
+		}
 		try {
 			await this.resolve(args.path, args.schema, args.options);
 			dereference_default(this, args.options);
@@ -143334,6 +143191,10 @@ var $RefParser = class $RefParser {
 		}
 	}
 };
+function rejectNormalizationError(args, err) {
+	const callback = args[args.length - 1];
+	return maybe(typeof callback === "function" ? callback : void 0, Promise.reject(err));
+}
 function finalize(parser) {
 	if (JSONParserErrorGroup.getParserErrors(parser).length > 0) throw new JSONParserErrorGroup(parser);
 }
@@ -147588,7 +147449,7 @@ runMain(defineCommand({
 		globalThis._getCredentialsByTenantUrl = getCredentialsByTenantUrl;
 		globalThis._getStoredC8yAuth = getStoredC8yAuth;
 	},
-	subCommands: { creds: () => import("./creds-CXEuUMWZ.mjs").then((m) => m.default) },
+	subCommands: { creds: () => import("./creds-CgE3Umno.mjs").then((m) => m.default) },
 	run: async ({ args }) => {
 		const requested = (Array.isArray(args.spec) ? args.spec.at(-1) : args.spec) ?? getCoreOpenApiVersion();
 		const selected = specs.find((e) => e.version === requested);