vercel 56.4.1 → 56.5.0

package/dist/chunks/{chunk-GLAHGVBS.js → chunk-TMK6RSYW.js}

@@ -4,6 +4,11 @@ import { dirname as __dirname_ } from 'node:path';
 const require = __createRequire(import.meta.url);
 const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
+import {
+  TelemetryClient,
+  require_dist as require_dist2,
+  require_graceful_fs
+} from "./chunk-ECCWJHC6.js";
 import {
   AGENT_REASON,
   AGENT_STATUS,
@@ -15,11 +20,6 @@ import {
   outputAgentError,
   shouldEmitNonInteractiveCommandError
 } from "./chunk-UDWRZXIT.js";
-import {
-  TelemetryClient,
-  require_dist as require_dist2,
-  require_graceful_fs
-} from "./chunk-ECCWJHC6.js";
 import {
   parseArguments,
   printError,
@@ -6157,34 +6157,34 @@ var require_ajv = __commonJS({
     var rules = require_rules();
     var $dataMetaSchema = require_data();
     var util = require_util();
-    module.exports = Ajv2;
-    Ajv2.prototype.validate = validate;
-    Ajv2.prototype.compile = compile;
-    Ajv2.prototype.addSchema = addSchema;
-    Ajv2.prototype.addMetaSchema = addMetaSchema;
-    Ajv2.prototype.validateSchema = validateSchema;
-    Ajv2.prototype.getSchema = getSchema;
-    Ajv2.prototype.removeSchema = removeSchema;
-    Ajv2.prototype.addFormat = addFormat;
-    Ajv2.prototype.errorsText = errorsText;
-    Ajv2.prototype._addSchema = _addSchema;
-    Ajv2.prototype._compile = _compile;
-    Ajv2.prototype.compileAsync = require_async();
+    module.exports = Ajv;
+    Ajv.prototype.validate = validate;
+    Ajv.prototype.compile = compile;
+    Ajv.prototype.addSchema = addSchema;
+    Ajv.prototype.addMetaSchema = addMetaSchema;
+    Ajv.prototype.validateSchema = validateSchema;
+    Ajv.prototype.getSchema = getSchema;
+    Ajv.prototype.removeSchema = removeSchema;
+    Ajv.prototype.addFormat = addFormat;
+    Ajv.prototype.errorsText = errorsText;
+    Ajv.prototype._addSchema = _addSchema;
+    Ajv.prototype._compile = _compile;
+    Ajv.prototype.compileAsync = require_async();
     var customKeyword = require_keyword();
-    Ajv2.prototype.addKeyword = customKeyword.add;
-    Ajv2.prototype.getKeyword = customKeyword.get;
-    Ajv2.prototype.removeKeyword = customKeyword.remove;
-    Ajv2.prototype.validateKeyword = customKeyword.validate;
+    Ajv.prototype.addKeyword = customKeyword.add;
+    Ajv.prototype.getKeyword = customKeyword.get;
+    Ajv.prototype.removeKeyword = customKeyword.remove;
+    Ajv.prototype.validateKeyword = customKeyword.validate;
     var errorClasses = require_error_classes();
-    Ajv2.ValidationError = errorClasses.Validation;
-    Ajv2.MissingRefError = errorClasses.MissingRef;
-    Ajv2.$dataMetaSchema = $dataMetaSchema;
+    Ajv.ValidationError = errorClasses.Validation;
+    Ajv.MissingRefError = errorClasses.MissingRef;
+    Ajv.$dataMetaSchema = $dataMetaSchema;
     var META_SCHEMA_ID = "http://json-schema.org/draft-07/schema";
     var META_IGNORE_OPTIONS = ["removeAdditional", "useDefaults", "coerceTypes", "strictDefaults"];
     var META_SUPPORT_DATA = ["/properties"];
-    function Ajv2(opts) {
-      if (!(this instanceof Ajv2))
-        return new Ajv2(opts);
+    function Ajv(opts) {
+      if (!(this instanceof Ajv))
+        return new Ajv(opts);
       opts = this._opts = util.copy(opts) || {};
       setLogger(this);
       this._schemas = {};
@@ -34962,6 +34962,330 @@ var require_dist6 = __commonJS({
   }
 });
 
+// ../../node_modules/.pnpm/is-docker@2.2.1/node_modules/is-docker/index.js
+var require_is_docker = __commonJS({
+  "../../node_modules/.pnpm/is-docker@2.2.1/node_modules/is-docker/index.js"(exports, module) {
+    "use strict";
+    var fs5 = __require("fs");
+    var isDocker;
+    function hasDockerEnv() {
+      try {
+        fs5.statSync("/.dockerenv");
+        return true;
+      } catch (_) {
+        return false;
+      }
+    }
+    function hasDockerCGroup() {
+      try {
+        return fs5.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
+      } catch (_) {
+        return false;
+      }
+    }
+    module.exports = () => {
+      if (isDocker === void 0) {
+        isDocker = hasDockerEnv() || hasDockerCGroup();
+      }
+      return isDocker;
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/is-wsl@2.2.0/node_modules/is-wsl/index.js
+var require_is_wsl = __commonJS({
+  "../../node_modules/.pnpm/is-wsl@2.2.0/node_modules/is-wsl/index.js"(exports, module) {
+    "use strict";
+    var os3 = __require("os");
+    var fs5 = __require("fs");
+    var isDocker = require_is_docker();
+    var isWsl = () => {
+      if (process.platform !== "linux") {
+        return false;
+      }
+      if (os3.release().toLowerCase().includes("microsoft")) {
+        if (isDocker()) {
+          return false;
+        }
+        return true;
+      }
+      try {
+        return fs5.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isDocker() : false;
+      } catch (_) {
+        return false;
+      }
+    };
+    if (process.env.__IS_WSL_TEST__) {
+      module.exports = isWsl;
+    } else {
+      module.exports = isWsl();
+    }
+  }
+});
+
+// ../../node_modules/.pnpm/define-lazy-prop@2.0.0/node_modules/define-lazy-prop/index.js
+var require_define_lazy_prop = __commonJS({
+  "../../node_modules/.pnpm/define-lazy-prop@2.0.0/node_modules/define-lazy-prop/index.js"(exports, module) {
+    "use strict";
+    module.exports = (object, propertyName, fn) => {
+      const define2 = (value) => Object.defineProperty(object, propertyName, { value, enumerable: true, writable: true });
+      Object.defineProperty(object, propertyName, {
+        configurable: true,
+        enumerable: true,
+        get() {
+          const result = fn();
+          define2(result);
+          return result;
+        },
+        set(value) {
+          define2(value);
+        }
+      });
+      return object;
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/open@8.4.0/node_modules/open/index.js
+var require_open = __commonJS({
+  "../../node_modules/.pnpm/open@8.4.0/node_modules/open/index.js"(exports, module) {
+    var path = __require("path");
+    var childProcess = __require("child_process");
+    var { promises: fs5, constants: fsConstants } = __require("fs");
+    var isWsl = require_is_wsl();
+    var isDocker = require_is_docker();
+    var defineLazyProperty = require_define_lazy_prop();
+    var localXdgOpenPath = path.join(__dirname, "xdg-open");
+    var { platform, arch } = process;
+    var getWslDrivesMountPoint = (() => {
+      const defaultMountPoint = "/mnt/";
+      let mountPoint;
+      return async function() {
+        if (mountPoint) {
+          return mountPoint;
+        }
+        const configFilePath = "/etc/wsl.conf";
+        let isConfigFileExists = false;
+        try {
+          await fs5.access(configFilePath, fsConstants.F_OK);
+          isConfigFileExists = true;
+        } catch {
+        }
+        if (!isConfigFileExists) {
+          return defaultMountPoint;
+        }
+        const configContent = await fs5.readFile(configFilePath, { encoding: "utf8" });
+        const configMountPoint = /(?<!#.*)root\s*=\s*(?<mountPoint>.*)/g.exec(configContent);
+        if (!configMountPoint) {
+          return defaultMountPoint;
+        }
+        mountPoint = configMountPoint.groups.mountPoint.trim();
+        mountPoint = mountPoint.endsWith("/") ? mountPoint : `${mountPoint}/`;
+        return mountPoint;
+      };
+    })();
+    var pTryEach = async (array, mapper) => {
+      let latestError;
+      for (const item of array) {
+        try {
+          return await mapper(item);
+        } catch (error) {
+          latestError = error;
+        }
+      }
+      throw latestError;
+    };
+    var baseOpen = async (options) => {
+      options = {
+        wait: false,
+        background: false,
+        newInstance: false,
+        allowNonzeroExitCode: false,
+        ...options
+      };
+      if (Array.isArray(options.app)) {
+        return pTryEach(options.app, (singleApp) => baseOpen({
+          ...options,
+          app: singleApp
+        }));
+      }
+      let { name: app, arguments: appArguments = [] } = options.app || {};
+      appArguments = [...appArguments];
+      if (Array.isArray(app)) {
+        return pTryEach(app, (appName) => baseOpen({
+          ...options,
+          app: {
+            name: appName,
+            arguments: appArguments
+          }
+        }));
+      }
+      let command;
+      const cliArguments = [];
+      const childProcessOptions = {};
+      if (platform === "darwin") {
+        command = "open";
+        if (options.wait) {
+          cliArguments.push("--wait-apps");
+        }
+        if (options.background) {
+          cliArguments.push("--background");
+        }
+        if (options.newInstance) {
+          cliArguments.push("--new");
+        }
+        if (app) {
+          cliArguments.push("-a", app);
+        }
+      } else if (platform === "win32" || isWsl && !isDocker()) {
+        const mountPoint = await getWslDrivesMountPoint();
+        command = isWsl ? `${mountPoint}c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe` : `${process.env.SYSTEMROOT}\\System32\\WindowsPowerShell\\v1.0\\powershell`;
+        cliArguments.push(
+          "-NoProfile",
+          "-NonInteractive",
+          "\u2013ExecutionPolicy",
+          "Bypass",
+          "-EncodedCommand"
+        );
+        if (!isWsl) {
+          childProcessOptions.windowsVerbatimArguments = true;
+        }
+        const encodedArguments = ["Start"];
+        if (options.wait) {
+          encodedArguments.push("-Wait");
+        }
+        if (app) {
+          encodedArguments.push(`"\`"${app}\`""`, "-ArgumentList");
+          if (options.target) {
+            appArguments.unshift(options.target);
+          }
+        } else if (options.target) {
+          encodedArguments.push(`"${options.target}"`);
+        }
+        if (appArguments.length > 0) {
+          appArguments = appArguments.map((arg) => `"\`"${arg}\`""`);
+          encodedArguments.push(appArguments.join(","));
+        }
+        options.target = Buffer.from(encodedArguments.join(" "), "utf16le").toString("base64");
+      } else {
+        if (app) {
+          command = app;
+        } else {
+          const isBundled = !__dirname || __dirname === "/";
+          let exeLocalXdgOpen = false;
+          try {
+            await fs5.access(localXdgOpenPath, fsConstants.X_OK);
+            exeLocalXdgOpen = true;
+          } catch {
+          }
+          const useSystemXdgOpen = process.versions.electron || platform === "android" || isBundled || !exeLocalXdgOpen;
+          command = useSystemXdgOpen ? "xdg-open" : localXdgOpenPath;
+        }
+        if (appArguments.length > 0) {
+          cliArguments.push(...appArguments);
+        }
+        if (!options.wait) {
+          childProcessOptions.stdio = "ignore";
+          childProcessOptions.detached = true;
+        }
+      }
+      if (options.target) {
+        cliArguments.push(options.target);
+      }
+      if (platform === "darwin" && appArguments.length > 0) {
+        cliArguments.push("--args", ...appArguments);
+      }
+      const subprocess = childProcess.spawn(command, cliArguments, childProcessOptions);
+      if (options.wait) {
+        return new Promise((resolve4, reject) => {
+          subprocess.once("error", reject);
+          subprocess.once("close", (exitCode) => {
+            if (options.allowNonzeroExitCode && exitCode > 0) {
+              reject(new Error(`Exited with code ${exitCode}`));
+              return;
+            }
+            resolve4(subprocess);
+          });
+        });
+      }
+      subprocess.unref();
+      return subprocess;
+    };
+    var open2 = (target, options) => {
+      if (typeof target !== "string") {
+        throw new TypeError("Expected a `target`");
+      }
+      return baseOpen({
+        ...options,
+        target
+      });
+    };
+    var openApp = (name, options) => {
+      if (typeof name !== "string") {
+        throw new TypeError("Expected a `name`");
+      }
+      const { arguments: appArguments = [] } = options || {};
+      if (appArguments !== void 0 && appArguments !== null && !Array.isArray(appArguments)) {
+        throw new TypeError("Expected `appArguments` as Array type");
+      }
+      return baseOpen({
+        ...options,
+        app: {
+          name,
+          arguments: appArguments
+        }
+      });
+    };
+    function detectArchBinary(binary) {
+      if (typeof binary === "string" || Array.isArray(binary)) {
+        return binary;
+      }
+      const { [arch]: archBinary } = binary;
+      if (!archBinary) {
+        throw new Error(`${arch} is not supported`);
+      }
+      return archBinary;
+    }
+    function detectPlatformBinary({ [platform]: platformBinary }, { wsl }) {
+      if (wsl && isWsl) {
+        return detectArchBinary(wsl);
+      }
+      if (!platformBinary) {
+        throw new Error(`${platform} is not supported`);
+      }
+      return detectArchBinary(platformBinary);
+    }
+    var apps = {};
+    defineLazyProperty(apps, "chrome", () => detectPlatformBinary({
+      darwin: "google chrome",
+      win32: "chrome",
+      linux: ["google-chrome", "google-chrome-stable", "chromium"]
+    }, {
+      wsl: {
+        ia32: "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe",
+        x64: ["/mnt/c/Program Files/Google/Chrome/Application/chrome.exe", "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe"]
+      }
+    }));
+    defineLazyProperty(apps, "firefox", () => detectPlatformBinary({
+      darwin: "firefox",
+      win32: "C:\\Program Files\\Mozilla Firefox\\firefox.exe",
+      linux: "firefox"
+    }, {
+      wsl: "/mnt/c/Program Files/Mozilla Firefox/firefox.exe"
+    }));
+    defineLazyProperty(apps, "edge", () => detectPlatformBinary({
+      darwin: "microsoft edge",
+      win32: "msedge",
+      linux: ["microsoft-edge", "microsoft-edge-dev"]
+    }, {
+      wsl: "/mnt/c/Program Files (x86)/Microsoft/Edge/Application/msedge.exe"
+    }));
+    open2.apps = apps;
+    open2.openApp = openApp;
+    module.exports = open2;
+  }
+});
+
 // ../../node_modules/.pnpm/json-parse-better-errors@1.0.2/node_modules/json-parse-better-errors/index.js
 var require_json_parse_better_errors = __commonJS({
   "../../node_modules/.pnpm/json-parse-better-errors@1.0.2/node_modules/json-parse-better-errors/index.js"(exports, module) {
@@ -34992,330 +35316,6 @@ var require_json_parse_better_errors = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/is-docker@2.2.1/node_modules/is-docker/index.js
-var require_is_docker = __commonJS({
-  "../../node_modules/.pnpm/is-docker@2.2.1/node_modules/is-docker/index.js"(exports, module) {
-    "use strict";
-    var fs5 = __require("fs");
-    var isDocker;
-    function hasDockerEnv() {
-      try {
-        fs5.statSync("/.dockerenv");
-        return true;
-      } catch (_) {
-        return false;
-      }
-    }
-    function hasDockerCGroup() {
-      try {
-        return fs5.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
-      } catch (_) {
-        return false;
-      }
-    }
-    module.exports = () => {
-      if (isDocker === void 0) {
-        isDocker = hasDockerEnv() || hasDockerCGroup();
-      }
-      return isDocker;
-    };
-  }
-});
-
-// ../../node_modules/.pnpm/is-wsl@2.2.0/node_modules/is-wsl/index.js
-var require_is_wsl = __commonJS({
-  "../../node_modules/.pnpm/is-wsl@2.2.0/node_modules/is-wsl/index.js"(exports, module) {
-    "use strict";
-    var os3 = __require("os");
-    var fs5 = __require("fs");
-    var isDocker = require_is_docker();
-    var isWsl = () => {
-      if (process.platform !== "linux") {
-        return false;
-      }
-      if (os3.release().toLowerCase().includes("microsoft")) {
-        if (isDocker()) {
-          return false;
-        }
-        return true;
-      }
-      try {
-        return fs5.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isDocker() : false;
-      } catch (_) {
-        return false;
-      }
-    };
-    if (process.env.__IS_WSL_TEST__) {
-      module.exports = isWsl;
-    } else {
-      module.exports = isWsl();
-    }
-  }
-});
-
-// ../../node_modules/.pnpm/define-lazy-prop@2.0.0/node_modules/define-lazy-prop/index.js
-var require_define_lazy_prop = __commonJS({
-  "../../node_modules/.pnpm/define-lazy-prop@2.0.0/node_modules/define-lazy-prop/index.js"(exports, module) {
-    "use strict";
-    module.exports = (object, propertyName, fn) => {
-      const define2 = (value) => Object.defineProperty(object, propertyName, { value, enumerable: true, writable: true });
-      Object.defineProperty(object, propertyName, {
-        configurable: true,
-        enumerable: true,
-        get() {
-          const result = fn();
-          define2(result);
-          return result;
-        },
-        set(value) {
-          define2(value);
-        }
-      });
-      return object;
-    };
-  }
-});
-
-// ../../node_modules/.pnpm/open@8.4.0/node_modules/open/index.js
-var require_open = __commonJS({
-  "../../node_modules/.pnpm/open@8.4.0/node_modules/open/index.js"(exports, module) {
-    var path = __require("path");
-    var childProcess = __require("child_process");
-    var { promises: fs5, constants: fsConstants } = __require("fs");
-    var isWsl = require_is_wsl();
-    var isDocker = require_is_docker();
-    var defineLazyProperty = require_define_lazy_prop();
-    var localXdgOpenPath = path.join(__dirname, "xdg-open");
-    var { platform, arch } = process;
-    var getWslDrivesMountPoint = (() => {
-      const defaultMountPoint = "/mnt/";
-      let mountPoint;
-      return async function() {
-        if (mountPoint) {
-          return mountPoint;
-        }
-        const configFilePath = "/etc/wsl.conf";
-        let isConfigFileExists = false;
-        try {
-          await fs5.access(configFilePath, fsConstants.F_OK);
-          isConfigFileExists = true;
-        } catch {
-        }
-        if (!isConfigFileExists) {
-          return defaultMountPoint;
-        }
-        const configContent = await fs5.readFile(configFilePath, { encoding: "utf8" });
-        const configMountPoint = /(?<!#.*)root\s*=\s*(?<mountPoint>.*)/g.exec(configContent);
-        if (!configMountPoint) {
-          return defaultMountPoint;
-        }
-        mountPoint = configMountPoint.groups.mountPoint.trim();
-        mountPoint = mountPoint.endsWith("/") ? mountPoint : `${mountPoint}/`;
-        return mountPoint;
-      };
-    })();
-    var pTryEach = async (array, mapper) => {
-      let latestError;
-      for (const item of array) {
-        try {
-          return await mapper(item);
-        } catch (error) {
-          latestError = error;
-        }
-      }
-      throw latestError;
-    };
-    var baseOpen = async (options) => {
-      options = {
-        wait: false,
-        background: false,
-        newInstance: false,
-        allowNonzeroExitCode: false,
-        ...options
-      };
-      if (Array.isArray(options.app)) {
-        return pTryEach(options.app, (singleApp) => baseOpen({
-          ...options,
-          app: singleApp
-        }));
-      }
-      let { name: app, arguments: appArguments = [] } = options.app || {};
-      appArguments = [...appArguments];
-      if (Array.isArray(app)) {
-        return pTryEach(app, (appName) => baseOpen({
-          ...options,
-          app: {
-            name: appName,
-            arguments: appArguments
-          }
-        }));
-      }
-      let command;
-      const cliArguments = [];
-      const childProcessOptions = {};
-      if (platform === "darwin") {
-        command = "open";
-        if (options.wait) {
-          cliArguments.push("--wait-apps");
-        }
-        if (options.background) {
-          cliArguments.push("--background");
-        }
-        if (options.newInstance) {
-          cliArguments.push("--new");
-        }
-        if (app) {
-          cliArguments.push("-a", app);
-        }
-      } else if (platform === "win32" || isWsl && !isDocker()) {
-        const mountPoint = await getWslDrivesMountPoint();
-        command = isWsl ? `${mountPoint}c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe` : `${process.env.SYSTEMROOT}\\System32\\WindowsPowerShell\\v1.0\\powershell`;
-        cliArguments.push(
-          "-NoProfile",
-          "-NonInteractive",
-          "\u2013ExecutionPolicy",
-          "Bypass",
-          "-EncodedCommand"
-        );
-        if (!isWsl) {
-          childProcessOptions.windowsVerbatimArguments = true;
-        }
-        const encodedArguments = ["Start"];
-        if (options.wait) {
-          encodedArguments.push("-Wait");
-        }
-        if (app) {
-          encodedArguments.push(`"\`"${app}\`""`, "-ArgumentList");
-          if (options.target) {
-            appArguments.unshift(options.target);
-          }
-        } else if (options.target) {
-          encodedArguments.push(`"${options.target}"`);
-        }
-        if (appArguments.length > 0) {
-          appArguments = appArguments.map((arg) => `"\`"${arg}\`""`);
-          encodedArguments.push(appArguments.join(","));
-        }
-        options.target = Buffer.from(encodedArguments.join(" "), "utf16le").toString("base64");
-      } else {
-        if (app) {
-          command = app;
-        } else {
-          const isBundled = !__dirname || __dirname === "/";
-          let exeLocalXdgOpen = false;
-          try {
-            await fs5.access(localXdgOpenPath, fsConstants.X_OK);
-            exeLocalXdgOpen = true;
-          } catch {
-          }
-          const useSystemXdgOpen = process.versions.electron || platform === "android" || isBundled || !exeLocalXdgOpen;
-          command = useSystemXdgOpen ? "xdg-open" : localXdgOpenPath;
-        }
-        if (appArguments.length > 0) {
-          cliArguments.push(...appArguments);
-        }
-        if (!options.wait) {
-          childProcessOptions.stdio = "ignore";
-          childProcessOptions.detached = true;
-        }
-      }
-      if (options.target) {
-        cliArguments.push(options.target);
-      }
-      if (platform === "darwin" && appArguments.length > 0) {
-        cliArguments.push("--args", ...appArguments);
-      }
-      const subprocess = childProcess.spawn(command, cliArguments, childProcessOptions);
-      if (options.wait) {
-        return new Promise((resolve4, reject) => {
-          subprocess.once("error", reject);
-          subprocess.once("close", (exitCode) => {
-            if (options.allowNonzeroExitCode && exitCode > 0) {
-              reject(new Error(`Exited with code ${exitCode}`));
-              return;
-            }
-            resolve4(subprocess);
-          });
-        });
-      }
-      subprocess.unref();
-      return subprocess;
-    };
-    var open2 = (target, options) => {
-      if (typeof target !== "string") {
-        throw new TypeError("Expected a `target`");
-      }
-      return baseOpen({
-        ...options,
-        target
-      });
-    };
-    var openApp = (name, options) => {
-      if (typeof name !== "string") {
-        throw new TypeError("Expected a `name`");
-      }
-      const { arguments: appArguments = [] } = options || {};
-      if (appArguments !== void 0 && appArguments !== null && !Array.isArray(appArguments)) {
-        throw new TypeError("Expected `appArguments` as Array type");
-      }
-      return baseOpen({
-        ...options,
-        app: {
-          name,
-          arguments: appArguments
-        }
-      });
-    };
-    function detectArchBinary(binary) {
-      if (typeof binary === "string" || Array.isArray(binary)) {
-        return binary;
-      }
-      const { [arch]: archBinary } = binary;
-      if (!archBinary) {
-        throw new Error(`${arch} is not supported`);
-      }
-      return archBinary;
-    }
-    function detectPlatformBinary({ [platform]: platformBinary }, { wsl }) {
-      if (wsl && isWsl) {
-        return detectArchBinary(wsl);
-      }
-      if (!platformBinary) {
-        throw new Error(`${platform} is not supported`);
-      }
-      return detectArchBinary(platformBinary);
-    }
-    var apps = {};
-    defineLazyProperty(apps, "chrome", () => detectPlatformBinary({
-      darwin: "google chrome",
-      win32: "chrome",
-      linux: ["google-chrome", "google-chrome-stable", "chromium"]
-    }, {
-      wsl: {
-        ia32: "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe",
-        x64: ["/mnt/c/Program Files/Google/Chrome/Application/chrome.exe", "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe"]
-      }
-    }));
-    defineLazyProperty(apps, "firefox", () => detectPlatformBinary({
-      darwin: "firefox",
-      win32: "C:\\Program Files\\Mozilla Firefox\\firefox.exe",
-      linux: "firefox"
-    }, {
-      wsl: "/mnt/c/Program Files/Mozilla Firefox/firefox.exe"
-    }));
-    defineLazyProperty(apps, "edge", () => detectPlatformBinary({
-      darwin: "microsoft edge",
-      win32: "msedge",
-      linux: ["microsoft-edge", "microsoft-edge-dev"]
-    }, {
-      wsl: "/mnt/c/Program Files (x86)/Microsoft/Edge/Application/msedge.exe"
-    }));
-    open2.apps = apps;
-    open2.openApp = openApp;
-    module.exports = open2;
-  }
-});
-
 // ../../node_modules/.pnpm/universalify@0.1.2/node_modules/universalify/index.js
 var require_universalify2 = __commonJS({
   "../../node_modules/.pnpm/universalify@0.1.2/node_modules/universalify/index.js"(exports) {
@@ -53327,7 +53327,7 @@ import { fork } from "child_process";
 import { parse as tomlParse2 } from "smol-toml";
 
 // src/util/projects/link.ts
-var import_ajv2 = __toESM(require_ajv(), 1);
+var import_ajv = __toESM(require_ajv(), 1);
 var import_fs_extra8 = __toESM(require_lib2(), 1);
 import fs4 from "fs";
 import { join as join9, relative as relative2 } from "path";
@@ -56048,6 +56048,474 @@ import { resolve as resolve3 } from "path";
 
 // src/util/env/get-env-records.ts
 import { URLSearchParams as URLSearchParams3 } from "url";
+
+// src/commands/login/future.ts
+var import_chalk10 = __toESM(require_source(), 1);
+var open = __toESM(require_open(), 1);
+var import_ansi_escapes4 = __toESM(require_ansi_escapes(), 1);
+import readline3 from "readline";
+import { KNOWN_AGENTS } from "@vercel/detect-agent";
+
+// src/util/login/update-current-team-after-login.ts
+async function updateCurrentTeamAfterLogin(client, ssoTeamId) {
+  if (ssoTeamId) {
+    client.config.currentTeam = ssoTeamId;
+  } else {
+    let user = null;
+    try {
+      user = await getUser(client);
+    } catch (_err) {
+      output_manager_default.error("Failed to fetch the logged in user. Please try again.");
+      return 1;
+    }
+    if (user.version === "northstar" && user.defaultTeamId) {
+      client.config.currentTeam = user.defaultTeamId;
+    } else {
+      delete client.config.currentTeam;
+    }
+  }
+}
+
+// src/util/ua.ts
+import os2 from "os";
+var ua_default = `${pkg_default.name} ${pkg_default.version} node-${process.version} ${os2.platform()} (${os2.arch()})`;
+
+// src/util/oauth.ts
+import { hostname } from "os";
+var VERCEL_ISSUER = new URL("https://vercel.com");
+var VERCEL_CLI_CLIENT_ID = "cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp";
+var userAgent = `${hostname()} @ ${ua_default}`;
+var _as;
+async function as() {
+  if (!_as) {
+    const discoveryResponse = await discoveryEndpointRequest(VERCEL_ISSUER);
+    const [discoveryResponseError, as2] = await processDiscoveryEndpointResponse(discoveryResponse);
+    if (discoveryResponseError) {
+      throw discoveryResponseError;
+    }
+    _as = as2;
+  }
+  return _as;
+}
+async function discoveryEndpointRequest(issuer) {
+  return await fetch2(new URL(".well-known/openid-configuration", issuer), {
+    headers: { "Content-Type": "application/json", "user-agent": userAgent }
+  });
+}
+async function processDiscoveryEndpointResponse(response) {
+  const json = await response.json();
+  if (!response.ok) {
+    return [new Error("Discovery endpoint request failed")];
+  }
+  if (typeof json !== "object" || json === null || !canParseURL(json.issuer) || !canParseURL(json.device_authorization_endpoint) || !canParseURL(json.token_endpoint) || !canParseURL(json.revocation_endpoint) || !canParseURL(json.jwks_uri) || !canParseURL(json.introspection_endpoint)) {
+    return [new TypeError("Invalid discovery response")];
+  }
+  const issuer = new URL(json.issuer);
+  if (issuer.href !== VERCEL_ISSUER.href) {
+    return [new Error("Issuer mismatch")];
+  }
+  return [
+    null,
+    {
+      issuer,
+      device_authorization_endpoint: new URL(
+        json.device_authorization_endpoint
+      ),
+      token_endpoint: new URL(json.token_endpoint),
+      revocation_endpoint: new URL(json.revocation_endpoint),
+      jwks_uri: new URL(json.jwks_uri),
+      introspection_endpoint: new URL(json.introspection_endpoint)
+    }
+  ];
+}
+async function deviceAuthorizationRequest(options) {
+  const body = new URLSearchParams({
+    client_id: VERCEL_CLI_CLIENT_ID
+  });
+  if (options?.refresh_token) {
+    body.set("refresh_token", options.refresh_token);
+    if (options.acr_values) {
+      body.set("acr_values", options.acr_values);
+    }
+  } else {
+    body.set("scope", "openid offline_access");
+  }
+  return await fetch2((await as()).device_authorization_endpoint, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+      "user-agent": userAgent
+    },
+    body
+  });
+}
+async function processDeviceAuthorizationResponse(response) {
+  const json = await response.json();
+  if (!response.ok) {
+    return [new OAuthError("Device authorization request failed", json)];
+  }
+  if (typeof json !== "object" || json === null)
+    return [new TypeError("Expected response to be an object")];
+  if (!("device_code" in json) || typeof json.device_code !== "string")
+    return [new TypeError("Expected `device_code` to be a string")];
+  if (!("user_code" in json) || typeof json.user_code !== "string")
+    return [new TypeError("Expected `user_code` to be a string")];
+  if (!("verification_uri" in json) || typeof json.verification_uri !== "string" || !canParseURL(json.verification_uri)) {
+    return [new TypeError("Expected `verification_uri` to be a string")];
+  }
+  if (!("verification_uri_complete" in json) || typeof json.verification_uri_complete !== "string" || !canParseURL(json.verification_uri_complete)) {
+    return [
+      new TypeError("Expected `verification_uri_complete` to be a string")
+    ];
+  }
+  if (!("expires_in" in json) || typeof json.expires_in !== "number")
+    return [new TypeError("Expected `expires_in` to be a number")];
+  if (!("interval" in json) || typeof json.interval !== "number")
+    return [new TypeError("Expected `interval` to be a number")];
+  return [
+    null,
+    {
+      device_code: json.device_code,
+      user_code: json.user_code,
+      verification_uri: json.verification_uri,
+      verification_uri_complete: json.verification_uri_complete,
+      expiresAt: Date.now() + json.expires_in * 1e3,
+      interval: json.interval
+    }
+  ];
+}
+async function deviceAccessTokenRequest(options) {
+  try {
+    return [
+      null,
+      await fetch2((await as()).token_endpoint, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/x-www-form-urlencoded",
+          "user-agent": userAgent
+        },
+        body: new URLSearchParams({
+          client_id: VERCEL_CLI_CLIENT_ID,
+          grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+          ...options
+        }),
+        signal: AbortSignal.timeout(10 * 1e3)
+      })
+    ];
+  } catch (error) {
+    if (error instanceof Error)
+      return [error];
+    return [
+      new Error("An unknown error occurred. See the logs for details.", {
+        cause: error
+      })
+    ];
+  }
+}
+async function processTokenResponse(response) {
+  const json = await response.json();
+  if (!response.ok) {
+    return [new OAuthError("Device access token request failed", json)];
+  }
+  if (typeof json !== "object" || json === null)
+    return [new TypeError("Expected response to be an object")];
+  if (!("access_token" in json) || typeof json.access_token !== "string")
+    return [new TypeError("Expected `access_token` to be a string")];
+  if (!("token_type" in json) || json.token_type !== "Bearer")
+    return [new TypeError('Expected `token_type` to be "Bearer"')];
+  if (!("expires_in" in json) || typeof json.expires_in !== "number")
+    return [new TypeError("Expected `expires_in` to be a number")];
+  if ("refresh_token" in json && (typeof json.refresh_token !== "string" || !json.refresh_token))
+    return [new TypeError("Expected `refresh_token` to be a string")];
+  if ("scope" in json && typeof json.scope !== "string")
+    return [new TypeError("Expected `scope` to be a string")];
+  return [null, json];
+}
+async function revocationRequest(options) {
+  return await fetch2((await as()).revocation_endpoint, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+      "user-agent": userAgent
+    },
+    body: new URLSearchParams({ ...options, client_id: VERCEL_CLI_CLIENT_ID })
+  });
+}
+async function processRevocationResponse(response) {
+  if (response.ok)
+    return [null, null];
+  const json = await response.json();
+  return [new OAuthError("Revocation request failed", json)];
+}
+async function refreshTokenRequest(options) {
+  return await fetch2((await as()).token_endpoint, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+      "user-agent": userAgent
+    },
+    body: new URLSearchParams({
+      client_id: VERCEL_CLI_CLIENT_ID,
+      grant_type: "refresh_token",
+      ...options
+    })
+  });
+}
+function processOAuthErrorResponse(json) {
+  if (typeof json !== "object" || json === null)
+    return new TypeError("Expected response to be an object");
+  if (!("error" in json) || typeof json.error !== "string")
+    return new TypeError("Expected `error` to be a string");
+  if ("error_description" in json && typeof json.error_description !== "string")
+    return new TypeError("Expected `error_description` to be a string");
+  if ("error_uri" in json && typeof json.error_uri !== "string")
+    return new TypeError("Expected `error_uri` to be a string");
+  return json;
+}
+var OAuthError = class extends Error {
+  constructor(message, response) {
+    var __super = (...args) => {
+      super(...args);
+    };
+    const error = processOAuthErrorResponse(response);
+    if (error instanceof TypeError) {
+      const message2 = `Unexpected server response: ${JSON.stringify(response)}`;
+      __super(message2);
+      this.cause = new Error(message2, { cause: error });
+      this.code = "server_error";
+      return;
+    }
+    let cause = error.error;
+    if (error.error_description)
+      cause += `: ${error.error_description}`;
+    if (error.error_uri)
+      cause += ` (${error.error_uri})`;
+    __super(message, { cause });
+    this.cause = new Error(cause);
+    this.code = error.error;
+  }
+};
+function isOAuthError(error) {
+  return error instanceof OAuthError;
+}
+function canParseURL(url) {
+  try {
+    return !!new URL(url);
+  } catch {
+    return false;
+  }
+}
+
+// src/commands/login/future.ts
+async function performDeviceCodeFlow(client, options) {
+  const deviceAuthorizationResponse = await deviceAuthorizationRequest({
+    refresh_token: options?.refreshToken,
+    acr_values: options?.acrValues
+  });
+  output_manager_default.debug(
+    `'Device Authorization response:', ${await deviceAuthorizationResponse.clone().text()}`
+  );
+  const [deviceAuthorizationError, deviceAuthorization] = await processDeviceAuthorizationResponse(deviceAuthorizationResponse);
+  if (deviceAuthorizationError) {
+    printError(deviceAuthorizationError);
+    return null;
+  }
+  const { device_code, user_code, verification_uri, expiresAt, interval } = deviceAuthorization;
+  let { verification_uri_complete } = deviceAuthorization;
+  if (options?.teamId) {
+    const url = new URL(verification_uri_complete);
+    url.searchParams.set("team_id", options.teamId);
+    verification_uri_complete = url.toString();
+  }
+  const isCursorAgent = client.agentName === KNOWN_AGENTS.CURSOR || client.agentName === KNOWN_AGENTS.CURSOR_CLI;
+  const shouldSkipBrowser = process.env.CI && !isCursorAgent;
+  output_manager_default.log(
+    `
+  Visit ${import_chalk10.default.bold(
+      output_manager_default.link(
+        verification_uri.replace("https://", ""),
+        verification_uri_complete,
+        { color: false, fallback: () => verification_uri_complete }
+      )
+    )}${output_manager_default.supportsHyperlink ? ` and enter ${import_chalk10.default.bold(user_code)}` : ""}
+`
+  );
+  if (!shouldSkipBrowser) {
+    try {
+      const browserProcess = await open.default(verification_uri_complete);
+      browserProcess.on("error", (error) => {
+        output_manager_default.debug(`Failed to open browser: ${error}`);
+      });
+    } catch (error) {
+      output_manager_default.debug(`Failed to open browser: ${error}`);
+      if (client.isAgent && client.nonInteractive) {
+        output_manager_default.log(
+          `
+${import_chalk10.default.yellow("\u26A0")} ${import_chalk10.default.bold("Browser could not be opened automatically.")}
+`
+        );
+        output_manager_default.log(
+          `Please ask the user to manually visit the URL above and complete the authentication process.
+`
+        );
+      }
+    }
+  }
+  const rl = readline3.createInterface({
+    input: process.stdin,
+    output: process.stdout
+  }).on("SIGINT", () => {
+    process.exit(0);
+  });
+  output_manager_default.spinner("Waiting for authentication...");
+  let intervalMs = interval * 1e3;
+  let result = null;
+  let flowError = new Error(
+    "Timed out waiting for authentication. Please try again."
+  );
+  async function pollForToken() {
+    while (Date.now() < expiresAt) {
+      const [tokenResponseError, tokenResponse] = await deviceAccessTokenRequest({ device_code });
+      if (tokenResponseError) {
+        if (tokenResponseError.message.includes("timeout")) {
+          intervalMs *= 2;
+          output_manager_default.debug(
+            `Connection timeout. Slowing down, polling every ${intervalMs / 1e3}s...`
+          );
+          await wait(intervalMs);
+          continue;
+        }
+        return tokenResponseError;
+      }
+      output_manager_default.debug(
+        `'Device Access Token response:', ${await tokenResponse.clone().text()}`
+      );
+      const [tokensError, tokens] = await processTokenResponse(tokenResponse);
+      if (isOAuthError(tokensError)) {
+        const { code: code2 } = tokensError;
+        switch (code2) {
+          case "authorization_pending":
+            await wait(intervalMs);
+            continue;
+          case "slow_down":
+            intervalMs += 5 * 1e3;
+            output_manager_default.debug(
+              `Authorization server requests to slow down. Polling every ${intervalMs / 1e3}s...`
+            );
+            await wait(intervalMs);
+            continue;
+          default:
+            return tokensError.cause;
+        }
+      }
+      if (tokensError)
+        return tokensError;
+      output_manager_default.print((0, import_ansi_escapes4.eraseLines)(2));
+      result = {
+        access_token: tokens.access_token,
+        expires_in: tokens.expires_in,
+        refresh_token: tokens.refresh_token
+      };
+      return;
+    }
+  }
+  flowError = await pollForToken();
+  output_manager_default.stopSpinner();
+  rl.close();
+  if (flowError) {
+    printError(flowError);
+    return null;
+  }
+  return result;
+}
+async function login(client, telemetry) {
+  const tokens = await performDeviceCodeFlow(client);
+  if (!tokens) {
+    telemetry.trackState("error");
+    return 1;
+  }
+  const isInitialLogin = !client.authConfig.token;
+  client.updateAuthConfig({
+    token: tokens.access_token,
+    userId: void 0,
+    expiresAt: Math.floor(Date.now() / 1e3) + tokens.expires_in,
+    refreshToken: tokens.refresh_token
+  });
+  client.updateConfig({ currentTeam: void 0 });
+  if (isInitialLogin) {
+    await updateCurrentTeamAfterLogin(client);
+  }
+  client.persistAuthConfig();
+  client.writeToConfigFile();
+  output_manager_default.debug(`Saved credentials in "${humanizePath(client.getGlobalPathConfig())}"`);
+  output_manager_default.print(`
+  ${import_chalk10.default.cyan("Congratulations!")} You are now signed in.
+
+  To deploy something, run ${getCommandName()}.
+
+  ${emoji("tip")} To deploy every commit automatically,
+  connect a Git Repository (${import_chalk10.default.bold(output_manager_default.link("vercel.link/git", "https://vercel.link/git", { color: false }))}).
+`);
+  telemetry.trackState("success");
+  return 0;
+}
+async function wait(intervalMs) {
+  await new Promise((resolve4) => setTimeout(resolve4, intervalMs));
+}
+
+// src/util/env/challenge-recovery.ts
+async function withEnvChallengeRecovery(client, fn) {
+  try {
+    return await fn();
+  } catch (error) {
+    if (!isAPIError(error) || error.code !== "challenge_required") {
+      throw error;
+    }
+    const refreshToken = client.authConfig.refreshToken;
+    if (!refreshToken || client.authConfig.tokenSource || !client.stdin.isTTY) {
+      throw error;
+    }
+    output_manager_default.stopSpinner();
+    output_manager_default.log("Sensitive Environment Variables require fresh authentication.");
+    const acrValues = getAcrValuesFromWWWAuthenticate(error.wwwAuthenticate);
+    if (!acrValues) {
+      throw error;
+    }
+    const tokens = await performDeviceCodeFlow(client, {
+      refreshToken,
+      acrValues
+    });
+    if (!tokens) {
+      throw error;
+    }
+    client.updateAuthConfig({
+      token: tokens.access_token,
+      userId: void 0,
+      expiresAt: Math.floor(Date.now() / 1e3) + tokens.expires_in
+    });
+    if (tokens.refresh_token) {
+      client.updateAuthConfig({ refreshToken: tokens.refresh_token });
+    }
+    client.persistAuthConfig();
+    return await fn();
+  }
+}
+function getAcrValuesFromWWWAuthenticate(header) {
+  if (!header) {
+    return;
+  }
+  const bearerIndex = header.toLowerCase().indexOf("bearer");
+  if (bearerIndex === -1) {
+    return;
+  }
+  const bearerChallenge = header.slice(bearerIndex + "bearer".length);
+  const match = bearerChallenge.match(
+    /(?:^|[,\s])acr_values=(?:"((?:\\.|[^"\\])*)"|([^,\s]+))/i
+  );
+  return match?.[1]?.replace(/\\(.)/g, "$1") ?? match?.[2];
+}
+
+// src/util/env/get-env-records.ts
 async function getEnvRecords(client, projectId, source, {
   target,
   gitBranch,
@@ -56074,7 +56542,10 @@ async function getEnvRecords(client, projectId, source, {
     query.set("source", source);
   }
   const url = `/v10/projects/${projectId}/env?${query}`;
-  return client.fetch(url);
+  return withEnvChallengeRecovery(
+    client,
+    () => client.fetch(url)
+  );
 }
 async function pullEnvRecords(client, projectIdOrDeploymentId, source, { target, gitBranch } = {}) {
   output_manager_default.debug(
@@ -56096,7 +56567,10 @@ async function pullEnvRecords(client, projectIdOrDeploymentId, source, { target,
   if (Array.from(query).length > 0) {
     url += `?${query}`;
   }
-  return client.fetch(url);
+  return withEnvChallengeRecovery(
+    client,
+    () => client.fetch(url)
+  );
 }
 
 // src/util/env/diff-env-files.ts
@@ -56130,7 +56604,7 @@ var parseEnv = (env) => {
 };
 
 // src/util/env/diff-env-files.ts
-var import_chalk10 = __toESM(require_source(), 1);
+var import_chalk11 = __toESM(require_source(), 1);
 async function createEnvObject(envPath) {
   const envArr = (await (0, import_fs_extra4.readFile)(envPath, "utf-8")).replace(/"/g, "").split(/\r?\n|\r/).filter((line) => /^[^#]/.test(line)).filter((line) => /=/i.test(line));
   const parsedEnv = parseEnv(envArr);
@@ -56161,10 +56635,10 @@ function findChanges(oldEnv, newEnv) {
 function buildDeltaString(oldEnv, newEnv) {
   const { added, changed, removed } = findChanges(oldEnv, newEnv);
   let deltaString = "";
-  deltaString += import_chalk10.default.green(addDeltaSection("+", changed, true));
-  deltaString += import_chalk10.default.green(addDeltaSection("+", added));
-  deltaString += import_chalk10.default.red(addDeltaSection("-", removed));
-  return deltaString ? import_chalk10.default.gray("  Changes:\n") + deltaString + "\n" : deltaString;
+  deltaString += import_chalk11.default.green(addDeltaSection("+", changed, true));
+  deltaString += import_chalk11.default.green(addDeltaSection("+", added));
+  deltaString += import_chalk11.default.red(addDeltaSection("-", removed));
+  return deltaString ? import_chalk11.default.gray("  Changes:\n") + deltaString + "\n" : deltaString;
 }
 function addDeltaSection(prefix, arr, changed = false) {
   if (arr.length === 0)
@@ -56212,12 +56686,12 @@ var import_error_utils2 = __toESM(require_dist(), 1);
 var import_json_parse_better_errors = __toESM(require_json_parse_better_errors(), 1);
 
 // src/util/projects/format-project.ts
-var import_chalk11 = __toESM(require_source(), 1);
+var import_chalk12 = __toESM(require_source(), 1);
 function formatProject(orgSlug, projectSlug, options) {
   const orgProjectSlug = `${orgSlug}/${projectSlug}`;
   const projectUrl = `https://vercel.com/${orgProjectSlug}`;
-  const projectSlugLink = output_manager_default.link(import_chalk11.default.bold(orgProjectSlug), projectUrl, {
-    fallback: () => import_chalk11.default.bold(orgProjectSlug),
+  const projectSlugLink = output_manager_default.link(import_chalk12.default.bold(orgProjectSlug), projectUrl, {
+    fallback: () => import_chalk12.default.bold(orgProjectSlug),
     color: false,
     ...options
   });
@@ -56983,420 +57457,6 @@ async function getDeployment(client, contextName, hostOrId) {
   }
 }
 
-// src/commands/login/future.ts
-var import_chalk12 = __toESM(require_source(), 1);
-var open = __toESM(require_open(), 1);
-var import_ansi_escapes4 = __toESM(require_ansi_escapes(), 1);
-import readline3 from "readline";
-import { KNOWN_AGENTS } from "@vercel/detect-agent";
-
-// src/util/login/update-current-team-after-login.ts
-async function updateCurrentTeamAfterLogin(client, ssoTeamId) {
-  if (ssoTeamId) {
-    client.config.currentTeam = ssoTeamId;
-  } else {
-    let user = null;
-    try {
-      user = await getUser(client);
-    } catch (_err) {
-      output_manager_default.error("Failed to fetch the logged in user. Please try again.");
-      return 1;
-    }
-    if (user.version === "northstar" && user.defaultTeamId) {
-      client.config.currentTeam = user.defaultTeamId;
-    } else {
-      delete client.config.currentTeam;
-    }
-  }
-}
-
-// src/util/ua.ts
-import os2 from "os";
-var ua_default = `${pkg_default.name} ${pkg_default.version} node-${process.version} ${os2.platform()} (${os2.arch()})`;
-
-// src/util/oauth.ts
-import { hostname } from "os";
-var VERCEL_ISSUER = new URL("https://vercel.com");
-var VERCEL_CLI_CLIENT_ID = "cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp";
-var userAgent = `${hostname()} @ ${ua_default}`;
-var _as;
-async function as() {
-  if (!_as) {
-    const discoveryResponse = await discoveryEndpointRequest(VERCEL_ISSUER);
-    const [discoveryResponseError, as2] = await processDiscoveryEndpointResponse(discoveryResponse);
-    if (discoveryResponseError) {
-      throw discoveryResponseError;
-    }
-    _as = as2;
-  }
-  return _as;
-}
-async function discoveryEndpointRequest(issuer) {
-  return await fetch2(new URL(".well-known/openid-configuration", issuer), {
-    headers: { "Content-Type": "application/json", "user-agent": userAgent }
-  });
-}
-async function processDiscoveryEndpointResponse(response) {
-  const json = await response.json();
-  if (!response.ok) {
-    return [new Error("Discovery endpoint request failed")];
-  }
-  if (typeof json !== "object" || json === null || !canParseURL(json.issuer) || !canParseURL(json.device_authorization_endpoint) || !canParseURL(json.token_endpoint) || !canParseURL(json.revocation_endpoint) || !canParseURL(json.jwks_uri) || !canParseURL(json.introspection_endpoint)) {
-    return [new TypeError("Invalid discovery response")];
-  }
-  const issuer = new URL(json.issuer);
-  if (issuer.href !== VERCEL_ISSUER.href) {
-    return [new Error("Issuer mismatch")];
-  }
-  return [
-    null,
-    {
-      issuer,
-      device_authorization_endpoint: new URL(
-        json.device_authorization_endpoint
-      ),
-      token_endpoint: new URL(json.token_endpoint),
-      revocation_endpoint: new URL(json.revocation_endpoint),
-      jwks_uri: new URL(json.jwks_uri),
-      introspection_endpoint: new URL(json.introspection_endpoint)
-    }
-  ];
-}
-async function deviceAuthorizationRequest(options) {
-  const body = new URLSearchParams({
-    client_id: VERCEL_CLI_CLIENT_ID
-  });
-  if (options?.refresh_token) {
-    body.set("refresh_token", options.refresh_token);
-    if (options.acr_values) {
-      body.set("acr_values", options.acr_values);
-    }
-  } else {
-    body.set("scope", "openid offline_access");
-  }
-  return await fetch2((await as()).device_authorization_endpoint, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded",
-      "user-agent": userAgent
-    },
-    body
-  });
-}
-async function processDeviceAuthorizationResponse(response) {
-  const json = await response.json();
-  if (!response.ok) {
-    return [new OAuthError("Device authorization request failed", json)];
-  }
-  if (typeof json !== "object" || json === null)
-    return [new TypeError("Expected response to be an object")];
-  if (!("device_code" in json) || typeof json.device_code !== "string")
-    return [new TypeError("Expected `device_code` to be a string")];
-  if (!("user_code" in json) || typeof json.user_code !== "string")
-    return [new TypeError("Expected `user_code` to be a string")];
-  if (!("verification_uri" in json) || typeof json.verification_uri !== "string" || !canParseURL(json.verification_uri)) {
-    return [new TypeError("Expected `verification_uri` to be a string")];
-  }
-  if (!("verification_uri_complete" in json) || typeof json.verification_uri_complete !== "string" || !canParseURL(json.verification_uri_complete)) {
-    return [
-      new TypeError("Expected `verification_uri_complete` to be a string")
-    ];
-  }
-  if (!("expires_in" in json) || typeof json.expires_in !== "number")
-    return [new TypeError("Expected `expires_in` to be a number")];
-  if (!("interval" in json) || typeof json.interval !== "number")
-    return [new TypeError("Expected `interval` to be a number")];
-  return [
-    null,
-    {
-      device_code: json.device_code,
-      user_code: json.user_code,
-      verification_uri: json.verification_uri,
-      verification_uri_complete: json.verification_uri_complete,
-      expiresAt: Date.now() + json.expires_in * 1e3,
-      interval: json.interval
-    }
-  ];
-}
-async function deviceAccessTokenRequest(options) {
-  try {
-    return [
-      null,
-      await fetch2((await as()).token_endpoint, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/x-www-form-urlencoded",
-          "user-agent": userAgent
-        },
-        body: new URLSearchParams({
-          client_id: VERCEL_CLI_CLIENT_ID,
-          grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-          ...options
-        }),
-        signal: AbortSignal.timeout(10 * 1e3)
-      })
-    ];
-  } catch (error) {
-    if (error instanceof Error)
-      return [error];
-    return [
-      new Error("An unknown error occurred. See the logs for details.", {
-        cause: error
-      })
-    ];
-  }
-}
-async function processTokenResponse(response) {
-  const json = await response.json();
-  if (!response.ok) {
-    return [new OAuthError("Device access token request failed", json)];
-  }
-  if (typeof json !== "object" || json === null)
-    return [new TypeError("Expected response to be an object")];
-  if (!("access_token" in json) || typeof json.access_token !== "string")
-    return [new TypeError("Expected `access_token` to be a string")];
-  if (!("token_type" in json) || json.token_type !== "Bearer")
-    return [new TypeError('Expected `token_type` to be "Bearer"')];
-  if (!("expires_in" in json) || typeof json.expires_in !== "number")
-    return [new TypeError("Expected `expires_in` to be a number")];
-  if ("refresh_token" in json && (typeof json.refresh_token !== "string" || !json.refresh_token))
-    return [new TypeError("Expected `refresh_token` to be a string")];
-  if ("scope" in json && typeof json.scope !== "string")
-    return [new TypeError("Expected `scope` to be a string")];
-  return [null, json];
-}
-async function revocationRequest(options) {
-  return await fetch2((await as()).revocation_endpoint, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded",
-      "user-agent": userAgent
-    },
-    body: new URLSearchParams({ ...options, client_id: VERCEL_CLI_CLIENT_ID })
-  });
-}
-async function processRevocationResponse(response) {
-  if (response.ok)
-    return [null, null];
-  const json = await response.json();
-  return [new OAuthError("Revocation request failed", json)];
-}
-async function refreshTokenRequest(options) {
-  return await fetch2((await as()).token_endpoint, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded",
-      "user-agent": userAgent
-    },
-    body: new URLSearchParams({
-      client_id: VERCEL_CLI_CLIENT_ID,
-      grant_type: "refresh_token",
-      ...options
-    })
-  });
-}
-function processOAuthErrorResponse(json) {
-  if (typeof json !== "object" || json === null)
-    return new TypeError("Expected response to be an object");
-  if (!("error" in json) || typeof json.error !== "string")
-    return new TypeError("Expected `error` to be a string");
-  if ("error_description" in json && typeof json.error_description !== "string")
-    return new TypeError("Expected `error_description` to be a string");
-  if ("error_uri" in json && typeof json.error_uri !== "string")
-    return new TypeError("Expected `error_uri` to be a string");
-  return json;
-}
-var OAuthError = class extends Error {
-  constructor(message, response) {
-    var __super = (...args) => {
-      super(...args);
-    };
-    const error = processOAuthErrorResponse(response);
-    if (error instanceof TypeError) {
-      const message2 = `Unexpected server response: ${JSON.stringify(response)}`;
-      __super(message2);
-      this.cause = new Error(message2, { cause: error });
-      this.code = "server_error";
-      return;
-    }
-    let cause = error.error;
-    if (error.error_description)
-      cause += `: ${error.error_description}`;
-    if (error.error_uri)
-      cause += ` (${error.error_uri})`;
-    __super(message, { cause });
-    this.cause = new Error(cause);
-    this.code = error.error;
-  }
-};
-function isOAuthError(error) {
-  return error instanceof OAuthError;
-}
-function canParseURL(url) {
-  try {
-    return !!new URL(url);
-  } catch {
-    return false;
-  }
-}
-
-// src/commands/login/future.ts
-async function performDeviceCodeFlow(client, options) {
-  const deviceAuthorizationResponse = await deviceAuthorizationRequest({
-    refresh_token: options?.refreshToken,
-    acr_values: options?.acrValues
-  });
-  output_manager_default.debug(
-    `'Device Authorization response:', ${await deviceAuthorizationResponse.clone().text()}`
-  );
-  const [deviceAuthorizationError, deviceAuthorization] = await processDeviceAuthorizationResponse(deviceAuthorizationResponse);
-  if (deviceAuthorizationError) {
-    printError(deviceAuthorizationError);
-    return null;
-  }
-  const { device_code, user_code, verification_uri, expiresAt, interval } = deviceAuthorization;
-  let { verification_uri_complete } = deviceAuthorization;
-  if (options?.teamId) {
-    const url = new URL(verification_uri_complete);
-    url.searchParams.set("team_id", options.teamId);
-    verification_uri_complete = url.toString();
-  }
-  const isCursorAgent = client.agentName === KNOWN_AGENTS.CURSOR || client.agentName === KNOWN_AGENTS.CURSOR_CLI;
-  const shouldSkipBrowser = process.env.CI && !isCursorAgent;
-  output_manager_default.log(
-    `
-  Visit ${import_chalk12.default.bold(
-      output_manager_default.link(
-        verification_uri.replace("https://", ""),
-        verification_uri_complete,
-        { color: false, fallback: () => verification_uri_complete }
-      )
-    )}${output_manager_default.supportsHyperlink ? ` and enter ${import_chalk12.default.bold(user_code)}` : ""}
-`
-  );
-  if (!shouldSkipBrowser) {
-    try {
-      const browserProcess = await open.default(verification_uri_complete);
-      browserProcess.on("error", (error) => {
-        output_manager_default.debug(`Failed to open browser: ${error}`);
-      });
-    } catch (error) {
-      output_manager_default.debug(`Failed to open browser: ${error}`);
-      if (client.isAgent && client.nonInteractive) {
-        output_manager_default.log(
-          `
-${import_chalk12.default.yellow("\u26A0")} ${import_chalk12.default.bold("Browser could not be opened automatically.")}
-`
-        );
-        output_manager_default.log(
-          `Please ask the user to manually visit the URL above and complete the authentication process.
-`
-        );
-      }
-    }
-  }
-  const rl = readline3.createInterface({
-    input: process.stdin,
-    output: process.stdout
-  }).on("SIGINT", () => {
-    process.exit(0);
-  });
-  output_manager_default.spinner("Waiting for authentication...");
-  let intervalMs = interval * 1e3;
-  let result = null;
-  let flowError = new Error(
-    "Timed out waiting for authentication. Please try again."
-  );
-  async function pollForToken() {
-    while (Date.now() < expiresAt) {
-      const [tokenResponseError, tokenResponse] = await deviceAccessTokenRequest({ device_code });
-      if (tokenResponseError) {
-        if (tokenResponseError.message.includes("timeout")) {
-          intervalMs *= 2;
-          output_manager_default.debug(
-            `Connection timeout. Slowing down, polling every ${intervalMs / 1e3}s...`
-          );
-          await wait(intervalMs);
-          continue;
-        }
-        return tokenResponseError;
-      }
-      output_manager_default.debug(
-        `'Device Access Token response:', ${await tokenResponse.clone().text()}`
-      );
-      const [tokensError, tokens] = await processTokenResponse(tokenResponse);
-      if (isOAuthError(tokensError)) {
-        const { code: code2 } = tokensError;
-        switch (code2) {
-          case "authorization_pending":
-            await wait(intervalMs);
-            continue;
-          case "slow_down":
-            intervalMs += 5 * 1e3;
-            output_manager_default.debug(
-              `Authorization server requests to slow down. Polling every ${intervalMs / 1e3}s...`
-            );
-            await wait(intervalMs);
-            continue;
-          default:
-            return tokensError.cause;
-        }
-      }
-      if (tokensError)
-        return tokensError;
-      output_manager_default.print((0, import_ansi_escapes4.eraseLines)(2));
-      result = {
-        access_token: tokens.access_token,
-        expires_in: tokens.expires_in,
-        refresh_token: tokens.refresh_token
-      };
-      return;
-    }
-  }
-  flowError = await pollForToken();
-  output_manager_default.stopSpinner();
-  rl.close();
-  if (flowError) {
-    printError(flowError);
-    return null;
-  }
-  return result;
-}
-async function login(client, telemetry) {
-  const tokens = await performDeviceCodeFlow(client);
-  if (!tokens) {
-    telemetry.trackState("error");
-    return 1;
-  }
-  const isInitialLogin = !client.authConfig.token;
-  client.updateAuthConfig({
-    token: tokens.access_token,
-    userId: void 0,
-    expiresAt: Math.floor(Date.now() / 1e3) + tokens.expires_in,
-    refreshToken: tokens.refresh_token
-  });
-  client.updateConfig({ currentTeam: void 0 });
-  if (isInitialLogin) {
-    await updateCurrentTeamAfterLogin(client);
-  }
-  client.persistAuthConfig();
-  client.writeToConfigFile();
-  output_manager_default.debug(`Saved credentials in "${humanizePath(client.getGlobalPathConfig())}"`);
-  output_manager_default.print(`
-  ${import_chalk12.default.cyan("Congratulations!")} You are now signed in.
-
-  To deploy something, run ${getCommandName()}.
-
-  ${emoji("tip")} To deploy every commit automatically,
-  connect a Git Repository (${import_chalk12.default.bold(output_manager_default.link("vercel.link/git", "https://vercel.link/git", { color: false }))}).
-`);
-  telemetry.trackState("success");
-  return 0;
-}
-async function wait(intervalMs) {
-  await new Promise((resolve4) => setTimeout(resolve4, intervalMs));
-}
-
 // src/commands/env/pull.ts
 var CONTENTS_PREFIX = "# Created by Vercel CLI\n";
 function readHeadSync(path, length) {
@@ -57596,7 +57656,7 @@ async function envPullCommandLogic(client, filename, skipConfirmation, environme
   output_manager_default.log(downloadMessage);
   output_manager_default.spinner("Downloading");
   const pullId = deploymentId || link.project.id;
-  const pullResult = await pullEnvRecordsForEnvPull(client, pullId, source, {
+  const pullResult = await pullEnvRecords(client, pullId, source, {
     target: environment || "development",
     gitBranch
   });
@@ -57681,57 +57741,6 @@ async function envPullCommandLogic(client, filename, skipConfirmation, environme
     { gutter: "\u2713" }
   );
 }
-async function pullEnvRecordsForEnvPull(client, pullId, source, options) {
-  try {
-    return await pullEnvRecords(client, pullId, source, options);
-  } catch (error) {
-    if (!isAPIError(error) || error.code !== "challenge_required") {
-      throw error;
-    }
-    const refreshToken = client.authConfig.refreshToken;
-    if (!refreshToken || client.authConfig.tokenSource || !client.stdin.isTTY) {
-      throw error;
-    }
-    output_manager_default.stopSpinner();
-    output_manager_default.log("Sensitive Environment Variables require fresh authentication.");
-    const acrValues = getAcrValuesFromWWWAuthenticate(error.wwwAuthenticate);
-    if (!acrValues) {
-      throw error;
-    }
-    const tokens = await performDeviceCodeFlow(client, {
-      refreshToken,
-      acrValues
-    });
-    if (!tokens) {
-      throw error;
-    }
-    client.updateAuthConfig({
-      token: tokens.access_token,
-      userId: void 0,
-      expiresAt: Math.floor(Date.now() / 1e3) + tokens.expires_in
-    });
-    if (tokens.refresh_token) {
-      client.updateAuthConfig({ refreshToken: tokens.refresh_token });
-    }
-    client.persistAuthConfig();
-    output_manager_default.spinner("Downloading");
-    return await pullEnvRecords(client, pullId, source, options);
-  }
-}
-function getAcrValuesFromWWWAuthenticate(header) {
-  if (!header) {
-    return;
-  }
-  const bearerIndex = header.toLowerCase().indexOf("bearer");
-  if (bearerIndex === -1) {
-    return;
-  }
-  const bearerChallenge = header.slice(bearerIndex + "bearer".length);
-  const match = bearerChallenge.match(
-    /(?:^|[,\s])acr_values=(?:"((?:\\.|[^"\\])*)"|([^,\s]+))/i
-  );
-  return match?.[1]?.replace(/\\(.)/g, "$1") ?? match?.[2];
-}
 function escapeValue2(value) {
   return value ? value.replace(new RegExp("\n", "g"), "\\n").replace(new RegExp("\r", "g"), "\\r") : "";
 }
@@ -57778,17 +57787,16 @@ async function readFileSafe(file) {
 }
 
 // src/util/validate-config.ts
-var import_ajv = __toESM(require_ajv(), 1);
 var import_routing_utils = __toESM(require_dist5(), 1);
 var import_client = __toESM(require_dist7(), 1);
 import {
   getFunctionsSchema,
   buildsSchema,
-  getMaxDurationLimit,
   getMaxDurationSchema,
   NowBuildError,
   getPrettyError
 } from "@vercel/build-utils";
+import { getConfigValidator } from "./config-validator.mjs";
 var imagesSchema = {
   type: "object",
   additionalProperties: false,
@@ -58337,19 +58345,8 @@ function buildVercelConfigSchema() {
     }
   };
 }
-var ajv = new import_ajv.default();
-var validatorCacheByLimit = /* @__PURE__ */ new Map();
-function getConfigValidator() {
-  const cacheKey = getMaxDurationLimit() ?? "skipped";
-  let validate = validatorCacheByLimit.get(cacheKey);
-  if (!validate) {
-    validate = ajv.compile(buildVercelConfigSchema());
-    validatorCacheByLimit.set(cacheKey, validate);
-  }
-  return validate;
-}
 function validateConfig(config) {
-  const validate = getConfigValidator();
+  const validate = getConfigValidator(buildVercelConfigSchema);
   if (!validate(config)) {
     if (validate.errors && validate.errors[0]) {
       const error = validate.errors[0];
@@ -58818,9 +58815,9 @@ async function getProjectLinkFromRepoLink(client, path, projectName, projectName
 async function getLinkFromDir(dir) {
   try {
     const json = await readFile5(join9(dir, VERCEL_DIR_PROJECT), "utf8");
-    const ajv2 = new import_ajv2.default();
+    const ajv = new import_ajv.default();
     const link = JSON.parse(json);
-    if (!ajv2.validate(linkSchema, link)) {
+    if (!ajv.validate(linkSchema, link)) {
       const raw = link;
       const projectId = raw.projectId;
       const orgId = raw.orgId;