diff --git a/.env.local.example b/.env.local.example
index 3e7f2a2..68fb8fe 100644
--- a/.env.local.example
+++ b/.env.local.example
@@ -1,3 +1,12 @@
-# create local copy of this file and rename to .env.local
-# make sure to add .env.local to .gitignore!!
-MONGO_URI={mongo-uri-here}
\ No newline at end of file
+# Copy to .env.local and replace the entire placeholder privately.
+# Use the Atlas-generated URI with your explicitly assigned developer database.
+# Dashboard login and database credentials are separate. Never commit credentials.
+MONGO_URI={mongo-uri-with-explicit-developer-database-here}
+
+# Private team management access. Use a unique password of at least 16 characters.
+# These variables are server-only. Never use a NEXT_PUBLIC_ prefix.
+MANAGEMENT_USERNAME=team
+MANAGEMENT_PASSWORD={replace-with-a-long-random-password}
+
+# Optional deliberate live smoke test. Use HTTPS remotely, loopback HTTP locally.
+# LIVE_BASE_URL=https://your-verified-deployment.vercel.app
diff --git a/.eslintrc.json b/.eslintrc.json
deleted file mode 100644
index 3d44940..0000000
--- a/.eslintrc.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "parser": "@typescript-eslint/parser",
-  "extends": ["next/core-web-vitals", "prettier"],
-  "plugins": ["prettier"],
-  "rules": {
-    "prettier/prettier": "error"
-  }
-}
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
index 2e189ef..04f21e6 100644
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -2,27 +2,37 @@
 
 Closes #{ISSUE NUMBER HERE}
 
+<!-- `Closes #n` links and auto-closes the issue only when this pull request targets `main`. One issue per pull request. -->
+
 ### Pull Request Summary
 
-{Describe the purpose of your pull request}
+{What this change does, in a sentence a classmate can review}
 
 ### Modifications
 
-{list out the files created/modified and a brief description of what was changed}
+For each file, name the file, the URL it serves (if any), and the mechanism: page, layout, component, CSS Module, or `connectDB`.
+
+- `{path}` — `{URL or none}` — `{mechanism}`: {what changed}
 
 ### Testing Considerations
 
-{list out what you have tested and what the reviewer should verify}
+{What you tried in the browser or with a command, and what the reviewer should verify}
+
+If the `test` script in `package.json` is still a placeholder, say that here. Add a test runner when the issue asks for tests.
+
+### Briefly State What You Learned
+
+{What programming languages, interpersonal skills, or something else you learned or improved from this pull request}
 
 ### Pull Request Checklist
 
 - [ ] Code is neat, readable, and works
 - [ ] Comments are appropriate
-- [ ] The commit messages follows our [guidelines](https://h4i.notion.site/Conventional-Commits-593452ad1179489399ad3bd696ef772a)
+- [ ] Commit messages follow [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) (`type(scope): description`). Course notes: [Hack4Impact guide](https://h4i.notion.site/Conventional-Commits-593452ad1179489399ad3bd696ef772a). That spec shapes commit messages, not this pull request body.
 - [ ] The developer name is specified
 - [ ] The summary is completed
-- [ ] Assign reviewers
+- [ ] Reviewers are @mentioned
 
 ### Screenshots/Screencast
 
-{put screenshots of your change, or even better a screencast displaying the functionality}
+{Screenshot or short recording when the change is visible in the browser}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c932ac1..b0abbec 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
     # Use matrix strategy to test multiple Node.js versions
     strategy:
       matrix:
-        node-version: [18.x, 20.x, 22.x]
+        node-version: [24.x]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     # Steps represent a sequence of tasks that will be executed as part of the job
@@ -34,15 +34,20 @@ jobs:
           node-version: ${{ matrix.node-version }}
 
       - name: Install dependencies
-        run: npm install
+        run: npm ci
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Check types
+        run: npm run typecheck
 
-      - name: Dry-run build
-        run: npm run build
-        env:
-          # These env variables must be set in the repository's secrets
-          # - Settings -> Secrets and variables -> New repository secret
-          MONGO_URI: ${{ secrets.MONGO_URI }}
-          # Add additional environment variables here
-      
       - name: Run tests
         run: npm test
+
+      - name: Build without Atlas credentials
+        run: npm run build
+        env:
+          MONGO_URI: ""
+          MANAGEMENT_USERNAME: ""
+          MANAGEMENT_PASSWORD: ""
diff --git a/.gitignore b/.gitignore
index 8f322f0..1e8fa72 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,9 +7,11 @@
 
 # testing
 /coverage
+/.vitest/
 
 # next.js
 /.next/
+/.next-http-test/
 /out/
 
 # production
@@ -25,7 +27,9 @@ yarn-debug.log*
 yarn-error.log*
 
 # local env files
-.env*.local
+.env
+.env.*
+!.env.local.example
 
 # vercel
 .vercel
diff --git a/.nvmrc b/.nvmrc
new file mode 100644
index 0000000..a45fd52
--- /dev/null
+++ b/.nvmrc
@@ -0,0 +1 @@
+24
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 0000000..bb82d59
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,42 @@
+# Coffee Shop agents
+
+Contract for coding agents in this repository. Learning developers can read it to see how an agent is supposed to work here.
+
+Product scope lives in `README.md`. Setup, the folder map, and pull-request steps live in `docs/`.
+
+## Change the app
+
+Reviewers are learning TypeScript, React, Next.js, and Git. Several are coming from Java, Python, or HTML and CSS.
+
+1. Fetch the assigned GitHub issue and restate its acceptance criteria. Done when you can point at the slice you will build.
+2. Implement that slice. The planned features in `README.md` are the product boundary. Done when the diff satisfies the issue and adds nothing the issue left out.
+3. Explain the change for a classmate. Done when the pull request names each file, the URL it serves, and the mechanism: page, layout, component, CSS Module, or `connectDB`.
+
+## Repo rules
+
+- Add a shop page as `src/app/<segment>/page.tsx`. `src/app/layout.tsx` already renders the navbar on every page.
+- The navbar already links to `/`, `/about`, `/menu`, `/specials`, and `/contact`. Add the matching `page.tsx` when that route's issue is the one in progress.
+- Keep `src/app/example`, `src/app/api/example`, and `src/database/userSchema.ts` as starter references until an issue replaces them. `userSchema.ts` is an example user model, separate from menu data.
+- Call `connectDB` in `src/database/db.ts` only from code that reads or writes MongoDB. It reads `MONGO_URI`. The home page stays runnable without that variable.
+- Style with `src/app/globals.css` or a CSS Module in `src/styles/`. Import application code with the `@/` alias, which points at `src/`.
+- Check the `test` script in `package.json` before claiming tests ran. Add a test runner when the issue asks for tests.
+
+## Reach these docs
+
+- **Setup, languages, and wiring** — `docs/getting-started.md` when you explain the tree, a language, or how a `page.tsx` becomes a URL, or when a teammate is installing the app.
+- **Branches and pull requests** — `docs/contributing.md` when you branch, commit, or open a pull request. One issue, one branch, into `main`.
+- **Tools already here** — `docs/project-setup.md` when asked what is already configured.
+- **Workflow skills** — the matching file under `skills/` when the task is grilling, a spec, tickets, test-first implementation, or triage.
+- **Issue tracker** — `docs/agents/issue-tracker.md` when you publish a spec, fetch a ticket, or edit an issue. The tracker is GitHub Issues for `BrianLiDesign/coffee-shop`.
+- **Triage labels** — `docs/agents/triage-labels.md` when a skill names a triage role. Apply this repo's label for that role.
+- **Domain language** — `docs/agents/domain.md` when you name a shop concept in an issue, test, or refactor, or when a change would contradict a recorded decision. Glossary: root `CONTEXT.md`. Decisions: `docs/adr/`.
+
+<!-- BEGIN:nextjs-agent-rules -->
+
+## This is NOT the Next.js you know
+
+This version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` (resolved from this file's directory; in monorepos the `next` package may not be visible from the repo root) before writing any code. Heed deprecation notices.
+
+This block is written and re-added by `next dev` — verify at `node_modules/next/dist/server/lib/generate-agent-files.js`. Removing it from a diff only re-creates the uncommitted change; committing it with your work keeps the tree clean.
+
+<!-- END:nextjs-agent-rules -->
diff --git a/CONTEXT.md b/CONTEXT.md
new file mode 100644
index 0000000..d8b33b1
--- /dev/null
+++ b/CONTEXT.md
@@ -0,0 +1,20 @@
+# Coffee Shop
+
+The shop presents its offerings to customers and lets the team maintain the menu.
+
+## Language
+
+**Offering**:
+A drink or food item available from the shop, with a name, description, price, and category.
+_Avoid_: Product, menu record
+
+**Special offering**:
+An offering the shop currently features on its Specials page. Being featured does not necessarily imply a reduced price.
+_Avoid_: Discount, sale item
+
+**Menu**:
+The collection of offerings customers can browse.
+
+**Offering management**:
+The team's activity of maintaining offerings shown to customers.
+_Avoid_: Customer ordering
diff --git a/README.md b/README.md
index 130bf99..542fb70 100644
--- a/README.md
+++ b/README.md
@@ -1,32 +1,74 @@
-# name of non-profit
+# Coffee Shop
 
-{One sentence description of the project}
+A student-built coffee shop site. Customers browse stored offerings and specials, read the shop story, and find contact information. Authorized team members can create, edit, and delete offerings through the management page.
 
-## Table of Contents
+**Existing public site:** [Coffee Shop on Vercel](https://coffee-shop-sigma-rouge.vercel.app/). The Milestone 3 foundation is integrated through PR #31; production deployment, database configuration, and live operation verification must be verified separately. The [Milestone 3 preview](https://coffee-shop-git-feat-milestone-3-release-brianlidesign.vercel.app/) has Vercel sign-in protection. See the [deployment guide](docs/milestone-3-deployment.md) and [release evidence](docs/milestone-3-evidence.md). A successful local build is not live deployment evidence.
 
-- [Overview](#overview)
-  - [Purpose](#purpose)
-  - [Team](#team)
-- [Getting Started And Contributing](#getting-started-and-contributing)
+## Features
 
-## Overview
+- Public pages: Home (`/`), About (`/about`), Menu (`/menu`), Specials (`/specials`), and Contact (`/contact`).
+- Menu and Specials read MongoDB through `/api/offerings`; Specials uses the saved boolean flag.
+- Protected management at `/manage-offerings`: creation, editing, delete confirmation, validation, and pending/success/error feedback.
+- Loading, empty, error, and retry states, with responsive layouts.
+- Repeatable insert-only seeding of the 16 starting offerings, including three specials.
+- Vitest unit/component tests plus real HTTP and disposable database regression tests.
 
-### Purpose
+Create/read are the required Milestone 3 operations. Update/delete are Brian's additional assignment. Customer orders, payments, drink customization, and delivery integrations remain future work. Starter examples at `/example` and `/api/example` are learning references.
 
-{Short paragraph description of the non-profit mission and the purpose of this project. Who will this project help, why is it necessary. Impact of the project.}
+## Tech stack
 
-### Team
+Next.js 16 App Router, React 19, TypeScript, CSS Modules, MongoDB Atlas, Mongoose 8, Vitest 5, React Testing Library, ESLint, Prettier, and Vercel. Use **Node.js 24.x** and npm, matching CI and the deployment runtime.
 
-The {non-profit name} team consists of {#} Cal Poly students. Over the course of about 9 months, we worked as a team to deploy this web application. The team members are listed below:
+## Local setup
 
-- [First Last](https://www.linkedin.com/) - Project Manager
-- [First Last](https://www.linkedin.com/) - Designer
-- [First Last](https://www.linkedin.com/) - Tech Lead
-- [First Last](https://www.linkedin.com/) - Tech Lead
-- [First Last](https://www.linkedin.com/) - Software Developer
+1. Clone the repository and open its root directory.
+2. Install Node.js 24.x, then run `npm ci`.
+3. Copy `.env.local.example` to the ignored `.env.local`.
+4. Privately replace the MongoDB placeholder with a URI containing your assigned database name. Set your management username and a unique password of at least 16 characters.
+5. Run `npm run db:check` to verify real read access.
+6. To deliberately seed this database, run `npm run db:seed -- --apply`. Reruns insert missing seed records and preserve existing records and edits.
+7. Run `npm run dev` and open [localhost:3000](http://localhost:3000).
+8. Open [management](http://localhost:3000/manage-offerings) and sign in through the browser's credential prompt.
 
-## Getting Started And Contributing
+The home page runs without MongoDB. Database pages show a readable error when configuration or connectivity is unavailable; there is no sample-data fallback. Do not share populated environment files or screenshots of credentials.
 
-Visit [getting-started.md](docs/getting-started.md) on info for how to set up this repo.
+## Environment variables
 
-Visit [contributing.md](docs/contributing.md) on info for how to contribute to this repo.
+| Variable              | Purpose                                                                                       |
+| --------------------- | --------------------------------------------------------------------------------------------- |
+| `MONGO_URI`           | Server-side MongoDB connection string with an explicit shop database                          |
+| `MANAGEMENT_USERNAME` | Private team management username; must not contain a colon                                    |
+| `MANAGEMENT_PASSWORD` | Private management password, at least 16 characters; placeholder values are rejected          |
+| `LIVE_BASE_URL`       | Optional HTTPS origin for deliberate live acceptance checks; loopback HTTP is allowed locally |
+
+Configure these privately in Vercel for the relevant environment. Never hardcode credentials or use a `NEXT_PUBLIC_` prefix for them. Keep preview and production database targets separate.
+
+## Tests and quality checks
+
+- `npm run test:unit` runs Vitest once; `npm run test:watch` runs it interactively.
+- `npm run test:regression` checks real HTTP persistence, seeding, database access tooling, and existing frontend behavior.
+- `npm test` runs both suites.
+- `npm run preflight` runs lint, typecheck, all tests, and a production build.
+- `npm run db:check:write` deliberately verifies write/read/cleanup using its own disposable marker.
+- `npm run test:live` reads the explicitly configured live target without writing.
+- `npm run test:live -- --confirm-writes` verifies live create/read and cleans up only its disposable offering.
+- `npm run test:live -- --confirm-writes --all` also verifies updates. Cleanup verifies deletion.
+
+Automated persistence checks start disposable loopback MongoDB instances and require no Atlas credentials. The first run may download MongoDB 7.0.24. Each developer must personally contribute and explain at least three relevant Vitest cases; the shared suite does not establish individual completion.
+
+## Deployment
+
+Follow the [Vercel release guide](docs/milestone-3-deployment.md). Keep customer pages public and management protected. Verify live persistence, responsive behavior, and failure states before replacing the pending live URL above.
+
+## Team and workflow
+
+After PR #31 merges, developers can start from updated `main`, including Sofie's
+acceptance safeguards in issue #36. Vedika's customer-page test foundation was
+already available before that merge. The [test handoff](tests/unit/README.md)
+identifies her starter file and three assigned Vitest cases. Preserve submitted
+contributions and record personal evidence in
+[`docs/milestone-3-evidence.md`](docs/milestone-3-evidence.md).
+
+Brian: tech lead, integration, access control, deployment, documentation, update/delete. Jean: backend handlers. Naomi: database and seeding. Vedika: customer frontend. Aditi: management frontend. Sofie: acceptance tooling and release evidence.
+
+See the [Milestone 3 plan](docs/milestone-3-plan.md) for assignments, acceptance criteria, and the release checklist. Follow [Contributing](docs/contributing.md): one issue, one branch, one reviewed PR into main. Learning developers can start with [Getting started](docs/getting-started.md); agents follow [AGENTS.md](AGENTS.md).
diff --git a/docs/adr/003-public-offering-management.md b/docs/adr/003-public-offering-management.md
new file mode 100644
index 0000000..03082d2
--- /dev/null
+++ b/docs/adr/003-public-offering-management.md
@@ -0,0 +1,11 @@
+# Public offering management for Milestone 3
+
+Status: accepted for the implementation branch on October 7, 2026.
+
+Brian approved implementing the Milestone 3 plan, including controlled management access and additional update/delete operations. This supersedes Milestone 2's local-only write restriction for this release.
+
+Customer pages and GET offerings are public. Management uses private HTTP Basic team credentials over HTTPS in deployment. Proxy provides the browser challenge, while the server page and each write handler independently enforce access. Missing or placeholder configuration denies access. Browser writes from another origin are rejected. Secrets are read only on the server.
+
+This student release intentionally has no individual accounts, roles, session database, or password recovery. Browsers cache Basic credentials; ending the browsing session is the practical sign-out mechanism. Individual staff access is a separate future design.
+
+Brian also approved a supported framework upgrade after the production dependency audit found critical vulnerabilities in Next.js 14. The release uses Next.js 16, React 19, Node.js 24, ESLint flat configuration, asynchronous request APIs, and `proxy.ts`. The plan and deployment guide record verification and release boundaries.
diff --git a/docs/agents/domain.md b/docs/agents/domain.md
new file mode 100644
index 0000000..4ce3107
--- /dev/null
+++ b/docs/agents/domain.md
@@ -0,0 +1,12 @@
+# Domain Docs
+
+This is a single-context repository. Engineering skills should consult the following files when they exist:
+
+- `CONTEXT.md` at the repository root.
+- Relevant decisions in `docs/adr/`.
+
+If these files do not exist, proceed without flagging their absence. The domain-modeling flow creates them lazily when terms or decisions need to be recorded.
+
+Use the glossary vocabulary from `CONTEXT.md` when naming domain concepts in issues, proposals, refactors, and tests. If a needed concept is not defined, note the gap rather than silently introducing competing terminology.
+
+If an implementation or proposal contradicts an existing ADR, surface the conflict explicitly rather than silently overriding it.
diff --git a/docs/agents/issue-tracker.md b/docs/agents/issue-tracker.md
new file mode 100644
index 0000000..8db2269
--- /dev/null
+++ b/docs/agents/issue-tracker.md
@@ -0,0 +1,26 @@
+# Issue tracker: GitHub
+
+Issues and specs for this repo live as GitHub issues in `BrianLiDesign/coffee-shop`. Use the `gh` CLI for issue operations.
+
+## Conventions
+
+- Create an issue with `gh issue create --title "..." --body "..."`.
+- Read an issue with `gh issue view <number> --comments`.
+- List issues with `gh issue list --state open` and add label or JSON filters as needed.
+- Comment on an issue with `gh issue comment <number> --body "..."`.
+- Apply or remove labels with `gh issue edit <number> --add-label "..."` or `--remove-label "..."`.
+- Close an issue with `gh issue close <number> --comment "..."`.
+
+Infer the repository from the GitHub remote; `gh` does this automatically from the repository checkout.
+
+## Pull requests as a triage surface
+
+**PRs as a request surface: no.** External pull requests are not included in the triage queue by default.
+
+## When a skill says "publish to the issue tracker"
+
+Create a GitHub issue.
+
+## When a skill says "fetch the relevant ticket"
+
+Run `gh issue view <number> --comments`.
diff --git a/docs/agents/triage-labels.md b/docs/agents/triage-labels.md
new file mode 100644
index 0000000..0806b2f
--- /dev/null
+++ b/docs/agents/triage-labels.md
@@ -0,0 +1,13 @@
+# Triage Labels
+
+The skills speak in terms of five canonical triage roles. This file maps those roles to the actual label strings used in this repo's issue tracker.
+
+| Label in mattpocock/skills | Label in our tracker | Meaning                                  |
+| -------------------------- | -------------------- | ---------------------------------------- |
+| `needs-triage`             | `needs-triage`       | Maintainer needs to evaluate this issue  |
+| `needs-info`               | `needs-info`         | Waiting on reporter for more information |
+| `ready-for-agent`          | `ready-for-agent`    | Fully specified, ready for an AFK agent  |
+| `ready-for-human`          | `ready-for-human`    | Requires human implementation            |
+| `wontfix`                  | `wontfix`            | Will not be actioned                     |
+
+When a skill mentions a role, use the corresponding label string from this table.
diff --git a/docs/contributing.md b/docs/contributing.md
index 18df7a1..d0eb8d5 100644
--- a/docs/contributing.md
+++ b/docs/contributing.md
@@ -1,30 +1,59 @@
 # Contributing
 
-Here are all of the steps you should follow whenever contributing to this repo!
+Every change lands on its own branch and pull request. Do not commit directly to `main`.
 
-## Making Changes
+## Making changes
 
-1. Before you start making changes, always make sure you're on the main branch, then `git pull` and `npm i` to make sure your code is up to date
-2. Create a branch `git checkout -b <name-of-branch>`
-3. Make changes to the code
-4. `npm run lint` to ensure code standards. (running `npm run lint:fix` will fix most of the styling errors)
+1. Start from an up-to-date `main` branch:
 
-## Commiting Changes
+   ```bash
+   git checkout main
+   git pull origin main
+   npm ci
+   ```
 
-When interacting with Git/GitHub, feel free to use the command line, VSCode extension, or Github desktop. These steps assume you have already made a branch using `git checkout -b <branch-name>` and you have made all neccessary code changes for the provided task.
+2. Open the GitHub issue assigned to you. Use **Create a branch for this issue** when GitHub offers it. Otherwise create the branch locally:
 
-1. View diffs of each file you changed using the VSCode Github extension (3rd icon on far left bar of VSCode) or GitHub Desktop
-2. `git add .` (to stage all files) or `git add <file-name>` (to stage specific file)
-3. `git commit -m "<type>[optional scope]: <description>"` or
-   `git commit -m "<type>[optional scope]: <description>" -m "[optional body]"` or
-   `git commit` to get a message prompt
-4. `git push -u origin <name-of-branch>`
+   ```bash
+   git checkout -b <short-issue-name>
+   ```
 
-## Making Pull Requests
+3. Change only what that issue asks for.
+4. Run `npm run lint`. Use `npm run lint:fix` when you want the tools to apply safe fixes. Some ESLint findings still need a manual edit.
 
-1. Go to the Pull Requests tab on [github.com](https://github.com/)
-2. Find your PR, fill out the PR template
-3. (If applicable, provide a screenshot of your work in the comment area)
-4. Link your PR to the corresponding **Issue**
-5. Request a reviewer to check your code
-6. Once approved, your code is ready to be merged in 🎉
+## Committing
+
+Use the command line, the VS Code or Cursor source control view, or GitHub Desktop. These steps assume you are already on your issue branch and the code change is done.
+
+1. Review the diff of each file you changed.
+2. Stage files with `git add <file>` or `git add .` for everything in this change.
+3. Commit with a [Conventional Commit](https://h4i.notion.site/Conventional-Commits-593452ad1179489399ad3bd696ef772a) message:
+
+   ```bash
+   git commit -m "<type>[optional scope]: <description>"
+   ```
+
+   Add a body when the reason is not obvious from the subject:
+
+   ```bash
+   git commit -m "<type>[optional scope]: <description>" -m "<why this change>"
+   ```
+
+4. Push the branch:
+
+   ```bash
+   git push -u origin <short-issue-name>
+   ```
+
+A pre-commit hook runs lint-staged. It formats staged files and runs ESLint on JavaScript and TypeScript. If the hook fails, fix the reported files and commit again.
+
+## Pull requests
+
+1. Open a pull request from your issue branch into `main`.
+2. Fill out the pull request template: your name, a summary, the files you changed, and what you tested.
+3. Link the issue in the description, for example `Closes #123`.
+4. Add a screenshot or short recording when the change is visible in the browser.
+5. Request a reviewer.
+6. Merge after the review is approved.
+
+If you get stuck, push the branch as it is and ask for help on the issue or pull request.
diff --git a/docs/evidence/issue-16/README.md b/docs/evidence/issue-16/README.md
new file mode 100644
index 0000000..b2fd1ad
--- /dev/null
+++ b/docs/evidence/issue-16/README.md
@@ -0,0 +1,27 @@
+# Independent offering-handler HTTP checks
+
+Issue [#16](https://github.com/BrianLiDesign/coffee-shop/issues/16) accepts a supplied
+`list(): Promise<Offering[]>` / `create(input): Promise<Offering>` storage boundary.
+`createOfferingCollectionHandlers` in `src/server/offering-handlers.ts` exposes
+GET/POST for that boundary. The existing production factory composes the same
+handlers with PUT/DELETE; the public route and its access controls are preserved.
+
+Run `npm run test:unit -- tests/unit/offerings-handlers-http.test.ts` after `npm ci`.
+The suite hosts the real handlers at `/api/offerings` on an ephemeral loopback port
+and observes responses through HTTP. Its helper and store double live only under
+`tests/unit/helpers/handler-http.ts`. Every test gets fresh records; the double
+sorts by name then string ID, generates IDs, and supplies no production fixtures.
+Management credentials are test-only environment stubs, restored after each test.
+
+The 54 tests cover empty/sorted GET, ordinary/special/default creation and same-ID
+read-back, trimming and maximum string lengths, raw JSON types and shape, numeric
+price boundaries, exact categories, boolean flags, identity/unknown fields,
+content types, malformed JSON, sanitized failures, and pending creation. They
+also retain POST authorization and cross-origin protection. `npm test` includes
+this suite through the existing Vitest file discovery.
+
+These are agent-written remediation checks. They do not establish Jean's personal
+test contribution or any other developer's assigned contribution. In-memory
+read-back proves handler behavior, not MongoDB persistence or live Atlas/Vercel
+acceptance. The existing database/application regression suites and the milestone
+release-evidence requirements remain separate.
diff --git a/docs/evidence/issue-17/README.md b/docs/evidence/issue-17/README.md
new file mode 100644
index 0000000..6ff87e0
--- /dev/null
+++ b/docs/evidence/issue-17/README.md
@@ -0,0 +1,29 @@
+# Issue 17: controlled-response verification
+
+Verified October 7, 2026. This evidence uses an explicitly selected local preview, not Atlas or real application persistence. Final composition and refresh/restart persistence remain Brian's work under issue #12.
+
+## Reproduce
+
+Run `npm install`, then `npm run preview:special-offerings`. Open `http://127.0.0.1:3002`. No Next.js server or database is required. Stop the preview with Ctrl+C.
+
+`scripts/special-offerings-preview.mjs` bundles the real `SpecialOfferingControl` and `OfferingsPage` components using the test-only entry in `tests/previews/special-offerings.tsx`. Its loopback server supplies controlled responses at `/api/offerings`. It does not change the application's route, customer navigation, management form, or fixture data.
+
+The checkbox accepts `checked: boolean` and `onChange(next: boolean)`. Its parent owns the boolean. It is ready for Brian to compose with the management form later; the preview checkbox deliberately does not change the supplied offering responses.
+
+## Browser results
+
+Codex's Chromium in-app browser was set to a 375 by 812 viewport. The rendered document measured 360 CSS pixels wide after the scrollbar, with scroll width also 360: no horizontal overflow. The full-page screenshots below all include the controlled-response label.
+
+| Scenario    | Observed behavior                                                                                                                                     | Screenshot                                        |
+| ----------- | ----------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------- |
+| starting    | Menu has four supplied items; Specials has exactly Pumpkin Spice Latte, Golden Hour Cold Brew, and Hojicha Latte; Cappuccino is absent from Specials. | [Starting menu and specials](starting-mobile.jpg) |
+| new-special | Cardamom Latte appears in both lists; Menu has five items and Specials has four.                                                                      | [New special](new-special-mobile.jpg)             |
+| empty       | Both lists show their own empty message and no cards.                                                                                                 | [Empty lists](empty-mobile.jpg)                   |
+| failure     | Both lists announce the readable 503 message and show no cards or empty message.                                                                      | [Failure](failure-mobile.jpg)                     |
+| loading     | Both lists show loading feedback during the five-second controlled response delay.                                                                    | [Loading](loading-mobile.jpg)                     |
+
+Keyboard verification: Tab from the final scenario link reaches the labeled native checkbox. Space changes its checked state and displayed boolean from false to true and back to false. A visible focus outline surrounds the focused checkbox in the starting screenshot.
+
+## Automated validation
+
+`npm test` passes 34 tests, including existing HTTP/database/form regressions, the controlled customer-display suite, and the standalone checkbox interaction test. Database checks use a disposable local instance, never shared Atlas. `npm run lint`, `npm run typecheck`, and `npm run build` also pass on local Node 24. The GitHub Node 18/20/22 matrix supplies supported-version verification before merge.
diff --git a/docs/evidence/issue-17/empty-mobile.jpg b/docs/evidence/issue-17/empty-mobile.jpg
new file mode 100644
index 0000000..82dc628
Binary files /dev/null and b/docs/evidence/issue-17/empty-mobile.jpg differ
diff --git a/docs/evidence/issue-17/failure-mobile.jpg b/docs/evidence/issue-17/failure-mobile.jpg
new file mode 100644
index 0000000..957a77f
Binary files /dev/null and b/docs/evidence/issue-17/failure-mobile.jpg differ
diff --git a/docs/evidence/issue-17/loading-mobile.jpg b/docs/evidence/issue-17/loading-mobile.jpg
new file mode 100644
index 0000000..2a0a240
Binary files /dev/null and b/docs/evidence/issue-17/loading-mobile.jpg differ
diff --git a/docs/evidence/issue-17/new-special-mobile.jpg b/docs/evidence/issue-17/new-special-mobile.jpg
new file mode 100644
index 0000000..c928cf6
Binary files /dev/null and b/docs/evidence/issue-17/new-special-mobile.jpg differ
diff --git a/docs/evidence/issue-17/starting-mobile.jpg b/docs/evidence/issue-17/starting-mobile.jpg
new file mode 100644
index 0000000..bc05143
Binary files /dev/null and b/docs/evidence/issue-17/starting-mobile.jpg differ
diff --git a/docs/evidence/issue-20-controlled-api-field-error.png b/docs/evidence/issue-20-controlled-api-field-error.png
new file mode 100644
index 0000000..0017bca
Binary files /dev/null and b/docs/evidence/issue-20-controlled-api-field-error.png differ
diff --git a/docs/evidence/issue-20-controlled-empty-list.png b/docs/evidence/issue-20-controlled-empty-list.png
new file mode 100644
index 0000000..3663221
Binary files /dev/null and b/docs/evidence/issue-20-controlled-empty-list.png differ
diff --git a/docs/evidence/issue-20-controlled-field-errors.png b/docs/evidence/issue-20-controlled-field-errors.png
new file mode 100644
index 0000000..3576c43
Binary files /dev/null and b/docs/evidence/issue-20-controlled-field-errors.png differ
diff --git a/docs/evidence/issue-20-controlled-list-error.png b/docs/evidence/issue-20-controlled-list-error.png
new file mode 100644
index 0000000..980f7d4
Binary files /dev/null and b/docs/evidence/issue-20-controlled-list-error.png differ
diff --git a/docs/evidence/issue-20-controlled-narrow-screen.png b/docs/evidence/issue-20-controlled-narrow-screen.png
new file mode 100644
index 0000000..8309066
Binary files /dev/null and b/docs/evidence/issue-20-controlled-narrow-screen.png differ
diff --git a/docs/evidence/issue-20-controlled-pending-save.png b/docs/evidence/issue-20-controlled-pending-save.png
new file mode 100644
index 0000000..4f2f51a
Binary files /dev/null and b/docs/evidence/issue-20-controlled-pending-save.png differ
diff --git a/docs/evidence/issue-20-controlled-reload-failure.png b/docs/evidence/issue-20-controlled-reload-failure.png
new file mode 100644
index 0000000..35d4e7a
Binary files /dev/null and b/docs/evidence/issue-20-controlled-reload-failure.png differ
diff --git a/docs/evidence/issue-20-controlled-save-failure.png b/docs/evidence/issue-20-controlled-save-failure.png
new file mode 100644
index 0000000..a0f820e
Binary files /dev/null and b/docs/evidence/issue-20-controlled-save-failure.png differ
diff --git a/docs/evidence/issue-20-controlled-successful-save.png b/docs/evidence/issue-20-controlled-successful-save.png
new file mode 100644
index 0000000..0aace16
Binary files /dev/null and b/docs/evidence/issue-20-controlled-successful-save.png differ
diff --git a/docs/evidence/milestone-3-menu-desktop.jpg b/docs/evidence/milestone-3-menu-desktop.jpg
new file mode 100644
index 0000000..83cc5e2
Binary files /dev/null and b/docs/evidence/milestone-3-menu-desktop.jpg differ
diff --git a/docs/evidence/milestone-3-menu-mobile.jpg b/docs/evidence/milestone-3-menu-mobile.jpg
new file mode 100644
index 0000000..3f930c2
Binary files /dev/null and b/docs/evidence/milestone-3-menu-mobile.jpg differ
diff --git a/docs/evidence/milestone-3-preview-error.jpg b/docs/evidence/milestone-3-preview-error.jpg
new file mode 100644
index 0000000..ead5bde
Binary files /dev/null and b/docs/evidence/milestone-3-preview-error.jpg differ
diff --git a/docs/evidence/milestone-3-specials-mobile.jpg b/docs/evidence/milestone-3-specials-mobile.jpg
new file mode 100644
index 0000000..e50b79b
Binary files /dev/null and b/docs/evidence/milestone-3-specials-mobile.jpg differ
diff --git a/docs/getting-started.md b/docs/getting-started.md
index 1ae4b17..d79b321 100644
--- a/docs/getting-started.md
+++ b/docs/getting-started.md
@@ -1,73 +1,116 @@
 # Getting Started
 
-Welcome to the getting started page! Here is all you need to know to get this repo up and running on your local machine, as well as good collaborative coding practices
+Install the app, learn the languages and folders, and run it on your machine.
 
 ## Contents
 
-- [Setup for All Developers](#setup-for-all-developers)
-- [Setup for Tech Leads](#setup-for-tech-leads)
+- [Setup for all developers](#setup-for-all-developers)
+- [Languages](#languages)
+- [Project structure](#project-structure)
+- [How a page is wired](#how-a-page-is-wired)
 - [Helpful commands](#helpful-commands)
-- [Project Structure](#project-structure)
-
-## Setup for all Developers
-
-1. Clone this repository `git clone <repo-url>`
-2. Run `npm i` at the root of the repository
-3. Create a .env file and retrieve secrets from your tech lead
-4. Install IDE Extensions
-   - [Prettier](https://marketplace.visualstudio.com/items?itemName=esbenp.prettier-vscode)
-   - [ESLint](https://marketplace.visualstudio.com/items?itemName=dbaeumer.vscode-eslint)
-5. Enable format on save in your IDE
-   1. Click the settings button in the bottom left  
-      <img src="./images/vs-code-settings.png" alt="VSCode Settings 1" width="500"/>
-   2. Search "formatter" and set your default formatter to Prettier
-   3. Search "format on save" and click the checkbox
-6. Familiarize yourself with [Helpful Commands](#helpful-commands), the [Project Structure](#project-structure), and the [steps for contributing](./contributing.md).
-
-## Setup for Tech Leads
-
-1. Set up a MongoDB cluster and create a .env with the URI
-2. Edit the "One time setup" section above as needed, then execute those steps
-3. Turn on branch protections for main and develop branches
-   1. Visit your repo on [github.com](https://github.com)
-   2. Click the Settings button on the top bar
-   3. Click the branches tab on the left sidebar
-   4. Click add rule
-   5. Click "Require a pull request before merging"
-   6. Create  
-      <img src="./images/require-code-review.png" alt="Require Code Review" width="500"/>
-4. See [template-features.md](./template-features.md) for features included in this template repository.
+- [Setup for tech leads](#setup-for-tech-leads)
+
+## Setup for all developers
+
+1. Install [Node.js](https://nodejs.org/) 24.x, matching continuous integration and Vercel.
+2. Clone this repository: `git clone <repo-url>`
+3. From the repository root, run `npm ci`.
+4. Copy `.env.local.example` to `.env.local`. Configure your private `MONGO_URI` and management credentials following README. Next.js reads `.env.local` automatically, and git ignores it.
+5. Open the folder in VS Code or Cursor and install the recommended extensions when prompted: ESLint and Prettier. `.vscode/settings.json` already turns on format on save. ESLint runs Prettier, so leave the default formatter as the workspace setting.
+6. Read [Languages](#languages), [Project structure](#project-structure), and [Contributing](./contributing.md) before you change code.
+
+The home page at `/` loads without MongoDB. `GET /api/example` calls the database connection and needs `MONGO_URI`.
+
+## Languages
+
+| Language or tool           | Where it shows up                                   | What you use it for                                                                        |
+| -------------------------- | --------------------------------------------------- | ------------------------------------------------------------------------------------------ |
+| TypeScript (`.ts`, `.tsx`) | `src/`                                              | Pages, components, API routes, and database code. `tsconfig.json` enables strict checking. |
+| React 19                   | `src/app` and `src/components`                      | The user interface. Components are functions that return JSX.                              |
+| CSS                        | `src/app/globals.css` and `src/styles/*.module.css` | Global rules, plus CSS Modules for a single component.                                     |
+| Next.js 16                 | `src/app`                                           | App Router pages and API route handlers.                                                   |
+| JavaScript                 | `next.config.js`, `prettier.config.js`              | Tool configuration. Application features go in TypeScript under `src/`.                    |
+| Mongoose                   | `src/database`                                      | Talks to MongoDB.                                                                          |
+
+Import application files with the `@/` alias. It points at `src/`, as set in `tsconfig.json`. Example: `import Navbar from "@/components/Navbar"`.
+
+## Project structure
+
+```text
+coffee-shop/
+├── src/                         Application code
+│   ├── app/                     Next.js App Router
+│   │   ├── layout.tsx           Shared shell. Renders Navbar on every page.
+│   │   ├── page.tsx             Home page, route /
+│   │   ├── globals.css          Global CSS
+│   │   ├── icon.svg             Coffee shop icon
+│   │   ├── example/page.tsx     Example page, route /example
+│   │   └── api/example/route.ts Example API, GET /api/example
+│   ├── components/              Shared React components (Navbar.tsx)
+│   ├── styles/                  CSS Modules (navbar.module.css, example.module.css)
+│   └── database/                Mongoose connection (db.ts) and an example User schema
+├── docs/                        Guides for people working in this repo
+├── .github/                     CI workflow, issue template, pull request template
+├── .vscode/                     Recommended extensions and editor settings
+└── skills/                      Workflow notes for coding agents
+```
+
+`src/database/userSchema.ts` is an example schema from the starter. It is separate from menu data.
+
+`skills/` and `docs/agents/` are instructions for coding agents. Feature work belongs in `src/`.
+
+There is no `public/` folder. The icon lives at `src/app/icon.svg`, which is an App Router metadata location.
+
+## How a page is wired
+
+A `page.tsx` file becomes a URL. `src/app/page.tsx` is `/`. A folder under `src/app` adds a segment, so `src/app/example/page.tsx` is `/example`.
+
+`src/app/layout.tsx` wraps every page and renders `Navbar` once. Leave the navbar import out of individual pages.
+
+The navbar links to the implemented customer pages `/`, `/about`, `/menu`, `/specials`, and `/contact`. Authorized team members use `/manage-offerings`.
+
+An API route is a `route.ts` file under `src/app/api`. `src/app/api/example/route.ts` handles `GET /api/example` and calls `connectDB()` from `src/database/db.ts`.
 
 ## Helpful commands
 
-- `npm run dev`: Start your local development environment at [http://localhost:3000](http://localhost:3000)
-- `npm run lint`: make sure Prettier and ESLint pass
-- `npm run lint:fix`: make sure Prettier and ESLint pass and try to automatically fix all issues (some ESLint issues must be resolved manually)
-- `git stash`: Temporarily remove all local changes to a branch and save them. Good when you need to hop to another branch without committing your current code.
-- `git stash apply`: Reapply most recent git stash.
-- `git merge orgin/master`: Pull all changes from the main branch to yours, good for resolving merge conflicts.
+- `npm run dev` — local app at [http://localhost:3000](http://localhost:3000)
+- `npm run lint` — ESLint and Prettier
+- `npm run lint:fix` — same checks, with automatic fixes where the tools can apply them
+- `npm run build` — production build
+- `npm test` — runs the offerings HTTP checks using an automatically started local server; no database credentials needed.
+- `npm run typecheck` — checks TypeScript without emitting files.
+- `git stash` — set aside uncommitted work so you can switch branches
+- `git stash apply` — restore the most recent stash
+
+To update a feature branch with the latest `main`:
+
+```bash
+git checkout main
+git pull origin main
+git checkout <your-branch>
+git merge main
+```
 
-## Project Structure
+## Setup for tech leads
 
-- [**.github**](/.github) Github Actions CI/CD and Issue/PR templates
-- [**docs**](/docs) Documentation - Documentation that came with the template repository
-- [**public**](/public) Assets for frontend [Read More](https://nextjs.org/docs/pages/building-your-application/optimizing/static-assets)
-- [**src**](/src) All application code
-  - [**app**](/src/app/) Frontend and API code
-    - [**api**](/src/app/api) All API routes
-    - [**components**](/src/app/components) All React components
-    - [**/\***](/src/app/) App router routes for pages
-    - [**styles**](/src/app/styles) All CSS files
-  - [**database**](/src/database) MongoDB schemas and related files
+1. Create a MongoDB cluster and put its connection string in `.env.local` as `MONGO_URI`.
+2. Add the same value as a repository secret named `MONGO_URI` so GitHub Actions can build. In the repo on GitHub: Settings → Secrets and variables → Actions → New repository secret.
+3. Complete [Setup for all developers](#setup-for-all-developers) on your own machine.
+4. Turn on branch protection for `main`:
 
-This is a [Next.js](https://nextjs.org/) project bootstrapped with [`create-next-app`](https://github.com/vercel/next.js/tree/canary/packages/create-next-app).
+   1. Open the repository on GitHub.
+   2. Settings → Branches → Add rule.
+   3. Enable "Require a pull request before merging".
+   4. Save the rule.
 
-## Learn More about Next.js
+   <img src="./images/require-code-review.png" alt="Require a pull request before merging" width="500"/>
 
-To learn more about Next.js, take a look at the following resources:
+5. Read [project setup](./project-setup.md) for the tools this repository already includes.
 
-- [Next.js Documentation](https://nextjs.org/docs) - learn about Next.js features and API.
-- [Learn Next.js](https://nextjs.org/learn) - an interactive Next.js tutorial.
-- [NextAuth Documentation](https://next-auth.js.org/) - learn about authentication and authorization with NextAuth
+To learn the framework:
 
-You can check out [the Next.js GitHub repository](https://github.com/vercel/next.js/) - your feedback and contributions are welcome!
+- [Next.js documentation](https://nextjs.org/docs)
+- [Learn Next.js](https://nextjs.org/learn)
+- [TypeScript handbook](https://www.typescriptlang.org/docs/handbook/intro.html)
+- [React documentation](https://react.dev/learn)
diff --git a/docs/issue-18-acceptance.md b/docs/issue-18-acceptance.md
new file mode 100644
index 0000000..4fd6672
--- /dev/null
+++ b/docs/issue-18-acceptance.md
@@ -0,0 +1,98 @@
+# Issue 18: acceptance runner and demonstration checklist
+
+Owner: Sofie. Assignment: [#18](https://github.com/BrianLiDesign/coffee-shop/issues/18). Brian owns actual integrated, Atlas, deployment, board, and meeting evidence under [#12](https://github.com/BrianLiDesign/coffee-shop/issues/12).
+
+This tooling verifies the public Offering HTTP contract independently. Controlled-server passes prove the runner; they do not prove application persistence. The separate application check uses real HTTP and an owned local database. Neither establishes shared Atlas or deployment readiness.
+
+## Commands and prerequisites
+
+Use the repository's Node 24 runtime and `npm ci`.
+
+| Command                                             | Evidence supplied                                                                                                                                     |
+| --------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `npm run test:acceptance`                           | Runner self-tests over controlled HTTP, CLI success/failure exits, and independent disposable database lifecycle                                      |
+| `npm run acceptance:db`                             | Creates its own MongoDB, writes/reads, removes its own marker, preserves another record, closes/stops and removes its temporary database              |
+| `npm run test:acceptance:app`                       | Runs real application HTTP against an owned empty local database; verifies POST/read-back/cleanup and deliberately stops that database for 503 checks |
+| `npm run acceptance -- --scenario empty`            | Targets an explicitly configured isolated server whose collection must initially be empty                                                             |
+| `npm run acceptance -- --scenario seeded`           | Targets an explicitly configured isolated server and checks independently prepared seed expectations                                                  |
+| `npm run acceptance -- --scenario database-failure` | Checks deliberately unavailable database GET and authorized POST, requiring sanitized 503 envelopes                                                   |
+| `npm test`                                          | Keeps current unit/regression checks and adds CLI, lifecycle, and real application acceptance checks                                                  |
+| `npm run preflight`                                 | Lint, typecheck, full tests, and production build                                                                                                     |
+
+MongoDB 7.0.24 may download on first use. A download/start failure is a failed check, not a skip. The standalone lifecycle refuses any `MONGO_URI` or command-line arguments; it cannot drop a developer or integration database. It does not load `.env.local`. Clear inherited `MONGO_URI` in a dedicated terminal before using `acceptance:db`, or use `test:acceptance:db`, which owns its database regardless of inherited configuration.
+
+The lifecycle limits startup to 60 seconds (MongoDB launch itself to 20 seconds), individual operations and teardown to 15 seconds, and its CLI to 90 seconds overall. The HTTP CLI has 15-second requests and a 120-second overall deadline. A failed or timed-out cleanup is a failed run; inspect the disposable target before reusing it. Binary download interruption or an operating-system failure may leave local temporary files; never respond by deleting shared data.
+
+## Configured HTTP runner
+
+Only literal loopback origins such as `http://127.0.0.1:<port>` or `http://[::1]:<port>` are accepted. No remote hosts, `localhost` aliases, embedded credentials, paths, query strings, fragments, or redirects. The target must be dedicated disposable acceptance data, separate from developer/shared integration data. Loopback alone does not establish database isolation: verify the server's private database configuration first.
+
+In a dedicated PowerShell terminal, supply these environment values:
+
+```powershell
+$env:ACCEPTANCE_BASE_URL = 'http://127.0.0.1:<actual-port>'
+$env:ACCEPTANCE_CONFIRM_WRITES = 'disposable'
+# Set MANAGEMENT_USERNAME and MANAGEMENT_PASSWORD privately to match this test server.
+npm run acceptance -- --scenario empty
+```
+
+`ACCEPTANCE_CONFIRM_WRITES=disposable` acknowledges writes only to that isolated target. No default server is selected. The runner retains the current management authentication; every POST/DELETE carries those private credentials, while GET must work without authentication. It emits safe scenario/deadline information and named PASS/FAIL results, without printing URLs, paths, credentials, authorization, or raw server exceptions. Exit 0 means every selected scenario and cleanup passed; exit 1 means failure.
+
+For seeded mode, set `ACCEPTANCE_SEED_FILE` to a JSON array of complete expected public Offerings, in name-then-ID order. Prepare values and IDs from the independent seed setup record, not by copying the GET response being tested. A fixture example appears in `tests/fixtures/acceptance-seed.json`; its `seed-id` is only for controlled-server self-tests and is not a MongoDB identity. Missing expectations, changed details, extra records, wrong ordering, empty IDs, and duplicate IDs fail.
+
+Empty/seeded mode checks ordinary, special, and omitted-default creation; trimming, zero price, maximum text lengths, floating-point cents, categories, and persisted read-back. It rejects invalid shapes, field types, missing values, overlong text, negative/fractional-cent prices, nonfinite JSON numbers, categories, flags, unknown/public/internal identity fields, invalid content type, and malformed JSON. Error envelopes and field messages must follow the shared contract. Afterward it deletes only non-baseline records matching attempted create details, then verifies the original records remain unchanged. Use an exclusively owned target: concurrent changes intentionally fail baseline preservation checks.
+
+## Deliberate database failure setup
+
+Never select failure mode merely because a normal run failed. A 401, listener failure, timeout, or malformed response is not a sanitized database 503.
+
+Reproducible local setup: `npm run test:acceptance:app` first starts the real server with an owned disposable database and validates normal behavior. It then explicitly stops that database while keeping the HTTP server alive, runs the database-failure scenario, and tears down the app. Both GET and authenticated valid POST must return `503` with `DATABASE_UNAVAILABLE`, a readable message, and no connection strings, stack traces, raw database errors, or internal fields.
+
+For a separately configured local server, deliberately stop its owned disposable database while retaining valid application management credentials and its configured URI. Record that action, server commit, time, and isolated database alias, then run `--scenario database-failure`. Restore/recreate the disposable setup afterward and verify normal mode again. Never interrupt shared Atlas or another person's server for this check.
+
+Controlled `database-failure` responses in self-tests are labeled runner evidence only. The correct failure response passes only the explicitly selected failure scenario; it fails ordinary empty/seeded mode. Deliberately leaked database responses fail the failure scenario.
+
+## Manual browser demonstration checklist
+
+Record the commit, server/database alias, date, tester, outcome, and artifact for every checked item. Keep failures and pending evidence visible.
+
+- [ ] At desktop width and approximately 390px width, Menu, Specials, and management have readable content with no horizontal overflow.
+- [ ] Use only keyboard navigation to reach fields, category selection, special checkbox, submit, and retry controls. Check visible focus, labels, and announced feedback.
+- [ ] Starting Menu contains all independently seeded offerings; Specials contains only featured offerings. Confirm empty states in a separate empty setup.
+- [ ] Create an ordinary offering, a special offering, and one with the default flag. Confirm the returned IDs and Menu/Specials filtering.
+- [ ] Submit invalid/blank/overlong input and an invalid price. Confirm useful feedback, retained values, and no saved record.
+- [ ] Save successfully, then deliberately fail the subsequent list reload in the controlled management preview. Confirm the save is acknowledged, the reload error is clear, and retry does not create a duplicate. Record this as controlled UI evidence, not Atlas persistence.
+- [ ] Refresh the browser and restart the real local app using the same isolated database. Confirm the same IDs and details remain.
+- [ ] For authorized live evidence, inspect those exact IDs in Atlas and compare details/flags. Record each developer's own read/write/cleanup results using the existing onboarding guide.
+- [ ] Exercise a deliberately unavailable database and confirm readable failure/retry feedback without stale fixture fallback.
+- [ ] Remove only demonstration records owned by the tester and verify cleanup. Any failed cleanup remains an open failure.
+
+Existing [management preview](./offering-preview.md) and [special-offerings evidence](./evidence/issue-17/README.md) provide controlled UI scenarios. Review their instructions and label their evidence accordingly.
+
+## Six-person evidence matrix
+
+This is an unpopulated demonstration record. Each person supplies their own evidence; agent-written runner tests do not count as their personal tests. The existing [Atlas onboarding matrix](./milestone-2-developer-guide.md#team-evidence-matrix) remains the source for individual Atlas inspection/read/write/cleanup outcomes.
+
+| Developer | Keyboard/narrow screen | Normal/special/invalid/save-reload | Refresh/restart | Atlas inspection/read/write/cleanup | Commit/date/artifact | Blocker      |
+| --------- | ---------------------- | ---------------------------------- | --------------- | ----------------------------------- | -------------------- | ------------ |
+| Brian     | Pending                | Pending                            | Pending         | Pending                             | Not recorded         | Not assessed |
+| Naomi     | Pending                | Pending                            | Pending         | Pending                             | Not recorded         | Not assessed |
+| Jean      | Pending                | Pending                            | Pending         | Pending                             | Not recorded         | Not assessed |
+| Sofie     | Pending                | Pending                            | Pending         | Pending                             | Not recorded         | Not assessed |
+| Vedika    | Pending                | Pending                            | Pending         | Pending                             | Not recorded         | Not assessed |
+| Aditi     | Pending                | Pending                            | Pending         | Pending                             | Not recorded         | Not assessed |
+
+## Acceptance criteria and handoff
+
+| Issue #18 criterion                                              | Implementation/evidence                                                         |
+| ---------------------------------------------------------------- | ------------------------------------------------------------------------------- |
+| Retained regressions, separately named explicit loopback tooling | Existing `test:regression`; `acceptance`; safe CLI configuration/exit tests     |
+| Empty/seeded GET, POST/read-back, validation, IDs, errors        | `scripts/acceptance.ts`; controlled HTTP positive/negative cases                |
+| Explicit failure setup                                           | Deliberate database failure section and `test:acceptance:app`                   |
+| Owned database lifecycle and cleanup refusal                     | `disposable-database.ts`; lifecycle, refusal, and finite teardown tests         |
+| Self-tests fail incorrect status/shape/read-back/teardown        | Unit HTTP self-tests and separate subprocess CLI checks                         |
+| Browser checklist                                                | Checklist above; outcomes remain pending until demonstrated                     |
+| Six-person matrix, commands, handoff                             | Matrix and commands above; Brian records integrated/live evidence under #12     |
+| No persistence claims from stubs                                 | Separate labels and commands for controlled HTTP, real local DB, and live Atlas |
+
+Brian can reproduce the standalone checks with `npm run test:acceptance`, the local application check with `npm run test:acceptance:app`, and full validation with `npm run preflight`. Record actual command output and commit in the PR. Independently reviewing the complete checklist and matrix satisfies the documentation deliverable; populated team rows and meeting results remain #12 work. Issue #18 may close once its independently tested tooling and complete checklist are reviewed and merged. Do not mark #12 or any pending team row complete from those results.
diff --git a/docs/milestone-2-developer-guide.md b/docs/milestone-2-developer-guide.md
new file mode 100644
index 0000000..fdb4ded
--- /dev/null
+++ b/docs/milestone-2-developer-guide.md
@@ -0,0 +1,132 @@
+# Milestone 2 developer setup and verification
+
+> Coordination update: [independent assignments](./milestone-2-parallel-work.md) define personal completion. #13 now supplies the database checker below. Full-team Atlas access and integrated persistence evidence still gate parent #12. Seed tooling remains separate work in #15.
+
+The database checker is implemented and tested against an isolated local MongoDB server. Atlas provisioning, each developer's access, and real application persistence are not established by those tests. Do not assume access is working until your own verification passes.
+
+You can complete your independent assignment using its specified local database or controlled-response tests before Atlas access is available. The procedure below supplies live evidence for final milestone acceptance; it is not a prerequisite on another developer's assignment.
+
+## What you need
+
+- Your own Atlas dashboard account and accepted project invitation.
+- A database user with the permissions Brian assigns for your named developer database. Dashboard access and database credentials are different.
+- Your network's public IP permitted by the Atlas project's Network Access settings.
+- The repository installed locally and a private `.env.local` containing `MONGO_URI`.
+
+[Atlas's connection guide](https://www.mongodb.com/docs/atlas/connect-to-database-deployment/) describes these connection prerequisites. [Database users](https://www.mongodb.com/docs/atlas/security-add-mongodb-users/) are separate from Atlas application users.
+
+## Brian and Naomi: provision access
+
+1. Identify the Atlas project and cluster; record their non-secret names in the integration evidence under [parent #12](https://github.com/BrianLiDesign/coffee-shop/issues/12).
+2. Invite each teammate individually. Choose the least-privileged Atlas role that allows the intended data inspection. Verify that each person can inspect their collection, rather than assuming an invitation grants it.
+3. Create a named database for each developer and one integration database. Proposed names are `coffee_shop_<developer>` and `coffee_shop_integration`; confirm the exact names in the issue.
+4. Create individual database users scoped to the appropriate databases. Grant read/write access where development requires it. Limit integration writes to the contributors performing integration.
+5. Add required developer network addresses to the project IP access list. Recheck when a teammate changes network or VPN. Avoid broad public access as the default. See [Atlas network access](https://www.mongodb.com/docs/atlas/security/ip-access-list/).
+6. Deliver each teammate's credentials through the team's private credential channel, not GitHub comments, commits, screenshots, or the project board.
+7. Confirm the URI explicitly selects the intended database. Do not use an accidental default database.
+8. Confirm all six people can see the intended project and collection in Atlas. Record blockers separately from application connection results.
+
+## Each developer: configure locally
+
+1. Follow the repository's installation instructions and update your working branch from the agreed baseline.
+2. Copy `.env.local.example` to `.env.local` at the repository root.
+3. Replace the placeholder with your assigned `MONGO_URI`. It must include your developer database name. Do not use the integration URI for routine experiments.
+4. Use the Atlas-generated connection template and correctly encoded credentials. Do not post the URI if setup fails.
+5. Verify that Git ignores your file using `git check-ignore .env.local`. Never add a populated env file to a commit.
+6. Restart the local app after changing environment configuration.
+7. Open the assigned Atlas project and verify you can inspect your data.
+
+Git ignores `.env` and `.env.*`, including backups and nested environment files, while retaining `.env.local.example`. This does not untrack any previously committed secret. Standardize on `.env.local`; never force-add populated configuration.
+
+## Run your database verification
+
+Run from the repository root after `npm install`:
+
+```bash
+npm run db:check
+npm run db:check:write
+```
+
+`db:check` is read-only. It performs a real `findOne` on `_coffee_shop_verification`; an empty result is a successful read. `db:check:write` explicitly inserts one UUID marker in that collection, reads it back, and deletes only that marker. It never writes offerings, clears collections, or drops databases. The empty verification collection may remain after cleanup.
+
+The script uses Next's environment loader with development precedence, matching `npm run dev`: an existing process variable wins, then `.env.development.local`, `.env.local`, `.env.development`, and `.env`. Prefer private `.env.local` and remove stale overrides. Do not run the development checker with `NODE_ENV=test` or `production`. The URI must explicitly name a database using letters, digits, underscores, or hyphens; `admin`, `local`, and `config` are refused. No URI, credentials, document contents, or raw database exceptions are printed.
+
+Expect `PASS configuration`, `connect`, `read`, and `close`. Write mode also requires `PASS write`, `read-back`, and `cleanup`. Any `FAIL` or nonzero exit means verification failed. Connection/socket/queue limits are five seconds; the whole command has a 30-second deadline. On cleanup failure or interruption, retain the printed marker and collection name and ask Brian to inspect and remove only that marker. Do not rerun repeatedly without resolving leftover verification records.
+
+Example sanitized write-check evidence:
+
+```text
+PASS configuration: database=coffee_shop_brian; mode=write
+PASS connect: Connected.
+PASS read: Read _coffee_shop_verification; no document contents printed.
+INFO disposable marker=<this-run-uuid>; collection=_coffee_shop_verification
+PASS write: Disposable write acknowledged.
+PASS read-back: Disposable marker read back.
+PASS cleanup: Only this run's marker removed (or absent after a failed write).
+PASS close: Connection closed.
+```
+
+The checker uses an independent short-lived MongoDB connection from Mongoose's bundled driver; it does not change the app's `connectDB` cache or serve a URL. See [Next's environment loader](https://nextjs.org/docs/app/guides/environment-variables#loading-environment-variables-with-nextenv) and [MongoDB connection timeouts](https://www.mongodb.com/docs/drivers/node/current/connect/connection-options/).
+
+Successful checker output proves local database access; it does not replace testing the offerings API and browser flow after those are implemented.
+
+## Verify the checker itself
+
+```bash
+npm run test:db
+npm test
+npm run lint
+npm run typecheck
+npm run build
+```
+
+`test:db` downloads MongoDB 7.0.24 on its first run and starts an authenticated, disposable loopback server in a temporary directory. It uses generated test configuration rather than your repository environment or Atlas. Tests cover missing/placeholder configuration, environment precedence, unavailable connection, denied reads/writes, write/read-back/cleanup, cleanup failure, and unrelated-record preservation. The server is stopped and its temporary data removed afterward. A binary download failure is a test failure, not a skipped verification; allow the first download to finish and rerun after fixing network/certificate issues. `npm test` also retains the existing public fixture GET regression checks.
+
+These local tests do not produce any person's live Atlas result. Record those separately below. Seed commands will be supplied by #15; they are not part of this checker.
+
+## Seed and application verification
+
+1. After storage, handlers, and management UI are composed into the real app, run the documented seed command against your developer database. Seeding alone does not make the current fixture-backed API read your database.
+2. Confirm 16 seeded offerings and three special offerings. Run the seed again: seeded count and identities must stay unchanged.
+3. Confirm unrelated records remain. The seed must not clear the collection or overwrite edited records on rerun.
+4. Start the app. Inspect GET `/api/offerings` and verify its data matches your database.
+5. Open `/manage-offerings`, create a distinctly named offering, and record its returned string ID.
+6. Refresh, then restart the app, and confirm the same record is still available. Inspect it in Atlas.
+7. Check that a special offering appears on both Menu and Specials, while an ordinary offering appears only on Menu.
+8. Submit invalid input and confirm useful feedback and no saved record.
+
+## Team evidence matrix
+
+Record dates and outcomes in the integration evidence under [parent #12](https://github.com/BrianLiDesign/coffee-shop/issues/12). Issue #13 ships checker/onboarding tooling and does not wait for these rows to pass. Do not attach populated environment files. These rows are pending, not verified.
+
+| Developer | Atlas inspection | Read check | Write/read/cleanup | App persistence | Checked at  | Blocker      |
+| --------- | ---------------- | ---------- | ------------------ | --------------- | ----------- | ------------ |
+| Brian     | Pending          | Pending    | Pending            | Pending         | Not checked | Not assessed |
+| Naomi     | Pending          | Pending    | Pending            | Pending         | Not checked | Not assessed |
+| Jean      | Pending          | Pending    | Pending            | Pending         | Not checked | Not assessed |
+| Sofie     | Pending          | Pending    | Pending            | Pending         | Not checked | Not assessed |
+| Vedika    | Pending          | Pending    | Pending            | Pending         | Not checked | Not assessed |
+| Aditi     | Pending          | Pending    | Pending            | Pending         | Not checked | Not assessed |
+
+Brian collects sanitized evidence from each person. A result on Brian's machine does not establish that everyone else's configuration works.
+
+## Troubleshooting
+
+| Symptom                             | What to check                                                                             |
+| ----------------------------------- | ----------------------------------------------------------------------------------------- |
+| Missing configuration               | File location, variable name, placeholder replacement, app restart                        |
+| Authentication failure              | Database username/password rather than dashboard login; credential encoding               |
+| Connection timeout                  | Public IP allowlist, VPN/network change, cluster availability, local network restrictions |
+| Read succeeds but write fails       | Database user's write permission on the exact target database                             |
+| Empty menu after successful seed    | Seed and app selected the same database and collection                                    |
+| Atlas UI works but app fails        | Dashboard access is separate from database credentials and network access                 |
+| New offering vanishes after refresh | POST truly persists; GET reads that database; no frontend fixture fallback                |
+| Verification cleanup fails          | Mark verification failed; report safe marker/collection to Brian for targeted cleanup     |
+
+Report the failed stage, safe database alias, time, and sanitized error. Never paste credentials to debug a failure.
+
+## Shared integration database
+
+Use it only for coordinated integration and the meeting demonstration. Do not run destructive resets or routine tests there. Brian records the integration seed result and the complete browser persistence demo independently of each developer's onboarding result.
+
+CI build success is not proof that the configured database can read or write. Routine automated checks should use isolated test data; deliberate Atlas checks use a designated database and report their result separately.
diff --git a/docs/milestone-2-handoff.md b/docs/milestone-2-handoff.md
new file mode 100644
index 0000000..a209ee8
--- /dev/null
+++ b/docs/milestone-2-handoff.md
@@ -0,0 +1,13 @@
+# Milestone 2 handoff
+
+The current assignment plan is [independent developer work](./milestone-2-parallel-work.md). It supersedes the original sequential issue chain and delivery gates. Read the live issue bodies for independently completable acceptance criteria; none requires another open issue to finish.
+
+Product scope remains [parent #12](https://github.com/BrianLiDesign/coffee-shop/issues/12). The committed [API contract](./offering-api-contract.md) uses string IDs and real HTTP GET regression checks. #14 is closed; GET still serves the 16 fixtures, including three specials. Database-backed GET/POST, management, checker, and seed commands are future work.
+
+Brian coordinates final composition, scoped Atlas provisioning, each person's own live evidence, real persistence acceptance, and the meeting demonstration. Personal assignment completion does not prove integrated milestone acceptance. See the parallel-work plan's complete checklist.
+
+The [developer guide](./milestone-2-developer-guide.md) describes planned onboarding; use exact checker/seed commands only after their implementation. Do not claim Atlas access or completed evidence from a guide.
+
+This handoff, the planning guides, and the glossary are included in the documentation change for #21. After that PR merges, update from main to receive them in a fresh clone. GitHub issue bodies also contain the common agreements. Preserve private environment files and keep feature commits scoped to their assigned issue.
+
+Board membership/status changes remain unverified; no board changes were performed by this update. Use developer-facing labels rather than ready-for-agent.
diff --git a/docs/milestone-2-parallel-work.md b/docs/milestone-2-parallel-work.md
new file mode 100644
index 0000000..4251045
--- /dev/null
+++ b/docs/milestone-2-parallel-work.md
@@ -0,0 +1,75 @@
+# Milestone 2: independent developer assignments
+
+Coordination updated October 2, 2026 at Brian's request. This replaces the sequential assignment plan. Product requirements in [parent #12](https://github.com/BrianLiDesign/coffee-shop/issues/12) remain mandatory. The shared string-identity contract and HTTP foundation in #14 are complete.
+
+Everyone builds from current main. Each assigned deliverable is independently testable and can be reviewed, merged, and closed without another open issue completing. No assigned issue has a native blocked-by relationship. This changes completion boundaries; it does not merely hide dependencies on unfinished implementation.
+
+## Start here
+
+1. Find your issue in the table below and read its live acceptance criteria. Those criteria define your assignment's completion.
+2. Read the [API contract](./offering-api-contract.md) and the internal agreements below. Use the existing shared types rather than redefining them.
+3. Follow [Contributing](./contributing.md) to create one issue branch. Build and demonstrate your deliverable with its own isolated tests or controlled responses.
+4. Open a PR explaining the changed files, served URLs, mechanisms, and verification. State whether evidence uses a real database or simulated responses. Personal completion requires the reviewed PR to merge; final milestone evidence is recorded separately.
+
+Use the [glossary](../CONTEXT.md) for shop terminology and the [developer guide](./milestone-2-developer-guide.md) when configuring live Atlas access. Atlas is not a prerequisite for independent assignment completion.
+
+| Developer | Issue                                                         | Deliverable                                                        | Other issue required for personal completion |
+| --------- | ------------------------------------------------------------- | ------------------------------------------------------------------ | -------------------------------------------- |
+| Brian     | [#13](https://github.com/BrianLiDesign/coffee-shop/issues/13) | Build developer database verification and onboarding tooling       | None                                         |
+| Naomi     | [#15](https://github.com/BrianLiDesign/coffee-shop/issues/15) | Build independently tested offering storage and repeatable seeding | None                                         |
+| Jean      | [#16](https://github.com/BrianLiDesign/coffee-shop/issues/16) | Build independently tested GET and POST offering handlers          | None                                         |
+| Vedika    | [#17](https://github.com/BrianLiDesign/coffee-shop/issues/17) | Build the special-offering control and customer display checks     | None                                         |
+| Sofie     | [#18](https://github.com/BrianLiDesign/coffee-shop/issues/18) | Build a standalone acceptance runner and demonstration checklist   | None                                         |
+| Aditi     | [#20](https://github.com/BrianLiDesign/coffee-shop/issues/20) | Build the independently demonstrated offering-management form      | None                                         |
+
+## How independent work fits together
+
+Naomi supplies real storage and seeding, verified with an isolated local database. Jean supplies request handlers using his own storage double. Aditi supplies the management page/form using controlled HTTP responses. Vedika supplies the standalone special checkbox and customer display behavior using controlled responses. Sofie supplies independently self-tested acceptance tooling and a disposable database lifecycle check. Brian supplies database checker/onboarding tooling and coordinates access and final integration.
+
+Each developer owns their deliverable's tests and setup. Nobody waits for Sofie's runner to test their module, Brian's checker to use a local database, or another developer's component to demonstrate their own. Installation/network/account failures can still happen; report them accurately. No planning change can promise that obstacles will never occur.
+
+## Frozen internal agreements
+
+These are implementation agreements, not claims that the modules already exist.
+
+- Storage: list(): Promise<Offering[]>; create(input: CreateOfferingInput): Promise<Offering>. Reuse the browser-safe types in src/types/offering.ts. List sorts by name then ID and create resolves only after acknowledged persistence. Storage failure rejects; handlers convert it to the agreed sanitized 503.
+- API: Jean's handler construction takes the storage boundary explicitly. His HTTP tests host those handlers with his own store double. Brian later composes the real route with Naomi's storage.
+- Form: Aditi's reusable form accepts optional specialOffer: boolean, default false. It submits that value and handles GET/POST feedback through the published HTTP contract.
+- Special control: Vedika's component accepts checked: boolean and onChange(next: boolean). Brian composes the control and form with shared boolean state. Neither contributor imports the other's unmerged module.
+- Verification: Sofie's acceptance runner targets an explicit loopback server. Its own stub-server self-tests establish runner correctness, not real app persistence. Her disposable database lifecycle checks are independent of Naomi's model. Commands, deliberate failure setup, and the meeting checklist are in the [issue #18 acceptance guide](./issue-18-acceptance.md).
+
+The public API agreement remains [offering-api-contract.md](./offering-api-contract.md): no new HTTP operations, fields, identity conventions, or product scope.
+
+## File ownership and merge discipline
+
+- Brian: connection checker, environment protection, onboarding, and eventual composition edits.
+- Naomi: new storage/model and seed modules and their isolated tests; leave the live route unchanged.
+- Jean: new request-handler/validation modules and independent HTTP tests; leave the live route unchanged.
+- Aditi: new management page/form and its CSS/tests; leave the customer navbar unchanged.
+- Vedika: new special control, customer OfferingsPage behavior, and its tests; leave the management form unchanged.
+- Sofie: acceptance runner, disposable database lifecycle tools, and demonstration checklist; preserve the currently working fixture GET regression command.
+
+New commands can require coordinated edits to package.json, lockfiles, or CI. List these edits in each PR, keep them additive, and rebase/reconcile on merge; this is shared-file coordination, not a prerequisite on another feature. Keep existing checks green. Do not stage unrelated planning files into feature commits.
+
+Test doubles are explicitly selected for tests/previews only. Keep the current public fixture GET route operational until the real composition is ready. No production fixture fallback or mock mode may remain in the integrated app.
+
+## Milestone integration and evidence: Brian coordinates
+
+Independent deliverables do not make the full milestone complete. Start preparing this record now; final results require the actual combined app. These are milestone acceptance gates, not blockers on developers completing the assignments above.
+
+- [ ] Compose the real storage with GET/POST handlers at /api/offerings.
+- [ ] Compose the special control with the form on /manage-offerings and confirm management stays out of customer navigation.
+- [ ] Run real HTTP regressions with an isolated disposable database. Stub-server passes are not persistence evidence.
+- [ ] Verify the non-destructive 16-item seed and rerun preservation of IDs, edits, and unrelated records.
+- [ ] Create ordinary and special offerings; read them back with identical IDs; refresh and restart; inspect them in Atlas and confirm Menu/Specials filtering.
+- [ ] Verify invalid input, unavailable database, and successful save followed by failed reload without disrupting integration data.
+- [ ] Provision scoped individual access and record each of Brian, Naomi, Jean, Sofie, Vedika, and Aditi's own Atlas inspection and read/write/cleanup evidence. External access problems remain visible here.
+- [ ] Run lint, typecheck, build, and real automated regressions; record Atlas evidence separately.
+- [ ] Remove test/preview stubs from integrated runtime and publish exact setup/checker/seed/test commands.
+- [ ] Verify actual board membership/status/access and requirement-by-requirement meeting evidence.
+
+Only close parent #12 and complete Milestone 2 after these gates pass. Public deployment of management/write routes remains outside scope.
+
+## Current capabilities
+
+The existing API still serves fixtures. String IDs and the HTTP GET regression tests shipped in #14. #13 supplies the database checker and onboarding commands, verified against disposable local MongoDB. Storage, POST, management, seed, and acceptance tooling remain separate assignments. Individual Atlas access has not been established by the checker tests. The older handoff is a historical snapshot and must not be used as current readiness evidence.
diff --git a/docs/milestone-2-spec.md b/docs/milestone-2-spec.md
new file mode 100644
index 0000000..b821089
--- /dev/null
+++ b/docs/milestone-2-spec.md
@@ -0,0 +1,99 @@
+# Milestone 2: persistent offerings
+
+> Coordination update, October 2, 2026: [independent assignments](./milestone-2-parallel-work.md) supersede earlier owner/dependency and completion sequencing. Each assignment can finish independently; full-team Atlas and integrated persistence evidence still gate parent #12. #14 shipped string IDs and real HTTP GET tests. Checker/seed commands remain planned until implemented.
+
+Status: product scope is published in [parent #12](https://github.com/BrianLiDesign/coffee-shop/issues/12). The [independent assignments](./milestone-2-parallel-work.md) define the revised delivery plan; live issues define personal acceptance criteria. The requirements below describe the finished milestone, not currently implemented capabilities.
+
+## Problem Statement
+
+Customers can browse offerings, but those offerings come from a fixed mock list. The team cannot create offerings through the app or demonstrate that changes survive a page refresh. Developers also lack a verified, repeatable Atlas onboarding process.
+
+Milestone 2 must connect the core Offering data to MongoDB Atlas, implement at least two CRUD operations, use database-backed API data in React, provide meaningful interaction and feedback, and validate input before persistence. Every developer must be able to connect from their own machine and inspect data in Atlas.
+
+## Solution
+
+Deliver a locally demonstrated offering-management flow alongside the existing customer pages. Menu and Specials read persisted offerings. A team member creates an offering through a form, receives feedback, and sees that offering after refresh. Use GET and POST as the milestone's two operations.
+
+Give each developer an individual Atlas login and scoped database credentials. Use separate developer databases with a shared integration database. Supply an onboarding guide and executable verification tooling during implementation, and migrate all 16 existing mock offerings through a repeatable seed process.
+
+## User Stories
+
+1. As a customer, I want Menu to load stored offerings so that I see the team's current data.
+2. As a customer, I want Specials to show only featured offerings so that I can find current specials.
+3. As a customer, I want names, descriptions, and prices displayed so that I can compare offerings.
+4. As a customer, I want an empty-state message so that I understand when no offerings exist.
+5. As a customer, I want a loading state so that I know data is being retrieved.
+6. As a customer, I want an error message when loading fails so that failure is not mistaken for an empty menu.
+7. As a team member, I want to create an offering through a form so that I can add menu data without editing source code.
+8. As a team member, I want a category selector so that I use a supported category.
+9. As a team member, I want to mark an offering as special so that it appears on Specials.
+10. As a team member, I want field-level validation before submission so that I can correct mistakes.
+11. As a team member, I want server validation so that bypassing browser checks cannot persist invalid data.
+12. As a team member, I want pending feedback and a disabled submit button so that I do not accidentally submit twice while a request is pending.
+13. As a team member, I want success feedback only after the database acknowledges creation so that I can trust the result.
+14. As a team member, I want form values preserved on failure so that I can correct or retry without retyping.
+15. As a team member, I want saved offerings to survive refresh and an app restart so that persistence is demonstrable.
+16. As a developer, I want individual Atlas access so that I can inspect data and debug without sharing a dashboard account.
+17. As a developer, I want scoped credentials and a named development database so that my experiments do not disrupt teammates.
+18. As a developer, I want a documented connection check so that I know my local environment actually works.
+19. As a developer, I want a documented write-permission check so that a successful connection is not mistaken for working POST access.
+20. As a developer, I want stable API examples so that I can build frontend and backend work concurrently.
+21. As a developer, I want a repeatable seed so that I can load the starting menu without duplicates or data loss.
+22. As a tech lead, I want an onboarding status record for every team member so that foundational blockers are visible.
+23. As a tech lead, I want board items and explicit dependencies so that work can continue across milestone boundaries.
+24. As a reviewer, I want reproducible behavior checks and a meeting demo so that completion has observable evidence.
+
+## Implementation Decisions
+
+- Core scope is Offering persistence and creation. No customer ordering or full administration system is included.
+- Reuse the existing server-side connection helper and the shared offerings API endpoint. Retain starter examples as references.
+- Create a separate Offering Mongoose model rather than repurposing the starter User model. Keep server-only model code separate from browser-safe contracts and fixtures.
+- Database identity is MongoDB-generated. Public responses preserve the existing field name `ID`, but its value becomes the string serialization of the document identifier. No client-supplied ID or numeric counter is accepted.
+- Public Offering fields are `ID`, `name`, `description`, `price`, `category`, and `specialOffer`. Internal database metadata is not exposed.
+- Creation input contains only `name`, `description`, `price`, `category`, and optional `specialOffer`. Reject unknown fields, including identity fields. Names need not be unique.
+- Names are trimmed, required, and limited to 100 characters; descriptions are trimmed, required, and limited to 500 characters. Whitespace-only values are invalid. Limits apply after trimming.
+- Price is a JSON number, finite and nonnegative, with at most two decimal places. Browser text is explicitly parsed; the API rejects strings and does not rely on Mongoose coercion. Decimal validation must tolerate floating-point representation without accepting meaningful fractional cents.
+- Category is exactly Coffee, Tea, or Smoothie. `specialOffer` is a boolean when supplied and defaults to false when omitted; strings such as `"false"` are invalid.
+- GET `/api/offerings` returns status 200 with an array of public Offerings, including an empty array when the collection has no data. Use a deterministic name-then-ID order. Read MongoDB at request time; do not silently fall back to fixtures.
+- POST `/api/offerings` accepts a JSON object and returns status 201 with the saved public Offering. Return 415 for unsupported content type and 400 for malformed JSON or invalid input.
+- Errors share the shape `{ error: { code, message, fields? } }`. Field errors map field names to readable messages. Database unavailability returns 503 with a generic message and no credentials or raw database details.
+- Client validation improves feedback; API validation is authoritative; model validation provides an additional persistence boundary. Apply the same agreed rules at each relevant boundary.
+- Add a client form on `/manage-offerings`, showing current offerings through GET and creating through POST. It uses the shared layout. Keep it out of the customer navbar for this local milestone.
+- Submit once per pending request. Announce success and errors accessibly, keep entered values on failure, and clear the form after confirmed success. Refresh the management list after creation; if that refresh fails, report that saving succeeded but reloading failed.
+- Menu and Specials continue to fetch the existing endpoint. Update their identity contract and fixtures together to string IDs. Specials uses the persisted boolean flag, not a name or category heuristic.
+- Temporary frontend fixtures may simulate the agreed response during parallel development. They must not be a runtime fallback in the integrated demonstration.
+- Use individual Atlas project invites, scoped database users, separate developer databases, and a shared integration database. Assign integration writes only to team members who need them.
+- Standardize local configuration on `.env.local` with `MONGO_URI` and an explicit database name in the URI. Keep credentials server-side and out of version control, issue bodies, screenshots, and browser bundles.
+- Expand environment-file ignore coverage while retaining the tracked example. Never distribute populated environment files in the repository.
+- Provide a read-only database checker by default and an explicit write-check mode using an isolated verification collection and a uniquely marked disposable document. It must report sanitized results, clean up only its own document, and fail if cleanup fails.
+- Seed all 16 fixture offerings, including the three specials. Use stable seed identity separate from public document identity, enforce its uniqueness for seeded records, and use insert-only behavior on rerun. Preserve existing and team-created data; do not clear the collection or overwrite edits.
+- Ordinary build and automated regression jobs must not require shared Atlas access. Run deliberate Atlas smoke checks separately against a designated database. A successful build alone is not database-access evidence.
+- Issue owners are recorded in the independent assignment plan and live GitHub issues. Assignment does not establish that a contributor has started or accepted the work. No calendar deadline was supplied; independent deliverables can finish in any order, with final integration evidence required separately.
+
+## Testing Decisions
+
+- Prefer the existing HTTP API boundary as the main automated regression seam. Test public requests and responses rather than Mongoose calls or React implementation details.
+- Cover empty and seeded GET results; valid POST and read-back; malformed JSON; wrong content type; each validation boundary; forbidden identity/unknown fields; boolean defaults; and database-failure responses.
+- A rejected POST must leave persisted data unchanged. A successful POST must be returned by a subsequent GET. Public results must have string IDs and exclude internal metadata.
+- Use an isolated disposable database for persistence tests. Never mutate the shared integration database as part of routine CI. Select a small real test runner and a reproducible disposable database harness during implementation.
+- Exercise the rendered management flow in a browser: create a normal offering and a special, refresh, inspect Menu and Specials, and check loading, empty, error, and accessible feedback behavior. Check narrow-screen use and keyboard submission.
+- Verify persistence after stopping and restarting the local app. Re-read the same record and confirm it in Atlas.
+- Verify seed reruns preserve count, seeded identities, and unrelated records.
+- Verify every developer independently with connection and disposable write/read/cleanup evidence. One person's working environment is insufficient.
+- Prior art is the existing API-consuming client and connection helper. #14 now provides real HTTP GET regression coverage; later implementation must add isolated persistence and POST coverage.
+- The HTTP regression boundary plus browser persistence demonstration were confirmed in the required to-spec seam check.
+
+## Out of Scope
+
+- PATCH, DELETE, editing controls, customer orders, cart, payments, delivery integration, authentication, and public deployment of the management/write interface.
+- Production database migration, a framework upgrade, pricing arithmetic, and a full visual redesign.
+- Removing starter reference routes or introducing silent database-to-mock fallback.
+- Creating populated secret files, validating other developers' machines from the tech lead's machine, or asserting Atlas access without individual evidence.
+
+## Further Notes
+
+- The local-demo decision is an access boundary: the write API and management page must not be publicly deployed by this milestone. Public deployment requires a separate access-control decision and task.
+- GitHub board discovery is currently limited by missing `read:project` scope. Reuse the existing board after inspecting its actual fields and statuses; do not claim board changes have occurred.
+- The spec is published as #12. Use the current independent assignments and developer-facing labels; do not restore ready-for-agent or the superseded sequential blockers.
+- The companion handoff points to current assignments, onboarding steps, and final acceptance evidence. These are coordination aids rather than additional feature scope.
+- Official references: [Atlas connections](https://www.mongodb.com/docs/atlas/connect-to-database-deployment/), [database users](https://www.mongodb.com/docs/atlas/security-add-mongodb-users/), [network access](https://www.mongodb.com/docs/atlas/security/ip-access-list/), and [Mongoose 8 validation](https://mongoosejs.com/docs/8.x/docs/validation.html).
diff --git a/docs/milestone-2-ticket-drafts.md b/docs/milestone-2-ticket-drafts.md
new file mode 100644
index 0000000..c9ae65c
--- /dev/null
+++ b/docs/milestone-2-ticket-drafts.md
@@ -0,0 +1,18 @@
+# Milestone 2 published ticket index
+
+The filename predates publication. The table below indexes the current independent assignments; the linked GitHub issues are the source of truth for acceptance criteria and current status. This replaces the original sequential ticket drafts. #14 is complete and is not an open assignment.
+
+| Developer | Issue                                                         | Deliverable                                   | Other open issue needed for completion |
+| --------- | ------------------------------------------------------------- | --------------------------------------------- | -------------------------------------- |
+| Brian     | [#13](https://github.com/BrianLiDesign/coffee-shop/issues/13) | Database verification and onboarding tools    | None                                   |
+| Naomi     | [#15](https://github.com/BrianLiDesign/coffee-shop/issues/15) | Offering storage and repeatable seeding       | None                                   |
+| Jean      | [#16](https://github.com/BrianLiDesign/coffee-shop/issues/16) | Independently tested GET/POST handlers        | None                                   |
+| Vedika    | [#17](https://github.com/BrianLiDesign/coffee-shop/issues/17) | Special control and customer display checks   | None                                   |
+| Sofie     | [#18](https://github.com/BrianLiDesign/coffee-shop/issues/18) | Acceptance runner and demonstration checklist | None                                   |
+| Aditi     | [#20](https://github.com/BrianLiDesign/coffee-shop/issues/20) | Independently demonstrated management form    | None                                   |
+
+Read the [independent developer plan](./milestone-2-parallel-work.md) for common interfaces, file ownership, personal completion, and Brian's final integration checklist. Read the [API contract](./offering-api-contract.md) for HTTP examples and the [developer guide](./milestone-2-developer-guide.md) for planned Atlas setup.
+
+Each deliverable has its own local database or controlled-response verification. Test evidence must identify which was used. All developers can finish their assignments independently; full-team Atlas evidence and real integrated persistence still gate [parent #12](https://github.com/BrianLiDesign/coffee-shop/issues/12).
+
+The documentation publication task is [#21](https://github.com/BrianLiDesign/coffee-shop/issues/21). It publishes these guides without implementing or closing the six development assignments. Labels describe developer work areas rather than agent readiness.
diff --git a/docs/milestone-3-deployment.md b/docs/milestone-3-deployment.md
new file mode 100644
index 0000000..876e7fd
--- /dev/null
+++ b/docs/milestone-3-deployment.md
@@ -0,0 +1,44 @@
+# Milestone 3: Vercel deployment
+
+This release uses Next.js 16, React 19, and Node.js 24.x. It implements real offering persistence and protected team management. The [plan](milestone-3-plan.md) is tracked under [#30](https://github.com/BrianLiDesign/coffee-shop/issues/30).
+
+## Prepare the release
+
+1. Run `npm ci` and `npm run preflight`. Resolve failures before deploying.
+2. Review the branch and select the exact commit to deploy. Main is the eventual production branch; a feature-branch deployment is preview evidence until production is separately verified.
+3. Prepare a named Atlas deployment database and a database user with scoped read/write access. Confirm the network access policy supports the deployment's egress. Do not copy a developer's unrestricted credential into Vercel.
+4. Prepare a different database and credentials for Preview. Ordinary pull request checks must never write into production data.
+
+## Configure Vercel
+
+1. Sign in to the intended Vercel account/team and import `BrianLiDesign/coffee-shop`, or select its existing project.
+2. Use the repository root, Next.js framework preset, Node.js 24.x, `npm ci`, and `npm run build`. `vercel.json` and `package.json` record the build/runtime agreement.
+3. In project environment settings, privately configure `MONGO_URI`, `MANAGEMENT_USERNAME`, and `MANAGEMENT_PASSWORD` for Production and separately for Preview. Choose a unique management password of at least 16 characters; placeholder values are denied.
+4. Keep secret names server-only. Never add a `NEXT_PUBLIC_` prefix or commit populated environment files. Save credentials privately, not in issues, PRs, logs, or screenshots.
+5. Deploy a new build after changing environment variables. Existing deployments do not acquire changed values automatically.
+6. If the preview has Vercel deployment protection, use its authorized browser access to inspect it. Do not disable protection merely to make an acceptance script pass.
+
+Vercel references: [environment variables](https://vercel.com/docs/environment-variables), [deployment environments](https://vercel.com/docs/deployments/environments).
+
+## Seed deliberately
+
+Seeding never happens automatically during builds or requests. In a private local shell configured with the intended deployment database URI, run `npm run db:seed -- --apply`. Confirm the target privately before running it. Seed reruns use stable internal keys and insert-only behavior, so they preserve existing edits and unrelated records. Removing a seeded offering and deliberately rerunning the seed recreates that missing seed record.
+
+## Verify the live application
+
+1. Open the public root, About, Contact, Menu, and Specials URLs without team credentials. Confirm database-backed offerings load and the pages work on desktop and narrow mobile screens.
+2. Open `/manage-offerings`. The browser requests team credentials. All writes are separately checked inside the route handlers; the server-rendered management page also checks access independently of proxy.
+3. Configure `LIVE_BASE_URL` privately with the exact HTTPS origin. Run `npm run test:live` for a read-only check.
+4. For deliberate live create/read evidence, configure the matching management credentials and run `npm run test:live -- --confirm-writes`. The runner creates a uniquely marked offering, verifies HTTP read-back, deletes only its own marked record, and confirms cleanup.
+5. Run `npm run test:live -- --confirm-writes --all` to verify Brian's additional editing behavior too. Never treat a local disposable-database result as live evidence.
+6. In the browser, create a normal offering and a special, refresh, and confirm Menu/Specials behavior. Record the evidence without credentials. Use clearly disposable records and remove only those records after the demonstration.
+7. Demonstrate loading, empty, failed fetch/save, and save-success/reload-failure states in controlled local previews or an isolated preview database. Avoid deliberately breaking the production database for screenshots.
+8. Record the production URL, deployed commit, checks, screenshots, and per-developer contributions in [release evidence](milestone-3-evidence.md). Update README's pending URL only after it is verified.
+
+The smoke runner refuses remote plain HTTP, redirects, credential-bearing URLs, and unknown arguments. Failures print sanitized diagnostics. If cleanup cannot be verified, inspect the uniquely marked Verification offering before retrying; never clear the collection.
+
+## Team access limitations
+
+HTTP Basic over HTTPS is a small team-access mechanism for this student release, not an individual account or audit system. Use private credentials and rotate them when team access changes. Browsers may cache credentials until the browsing session closes. No password is stored in frontend state, source, or local storage. Cross-origin browser writes are denied. Production with individual staff accounts would need a separate authentication design.
+
+If deployment fails, check Vercel's build/runtime diagnostics privately, the selected environment, Atlas permissions/network access, and the explicit database name. Do not paste connection strings or raw database errors into a PR.
diff --git a/docs/milestone-3-evidence.md b/docs/milestone-3-evidence.md
new file mode 100644
index 0000000..a96e0ee
--- /dev/null
+++ b/docs/milestone-3-evidence.md
@@ -0,0 +1,57 @@
+# Milestone 3 release evidence
+
+## Verification boundary
+
+PR #31 integrates the release foundation so developers can extend it from `main`. Its merge does not complete the public production release, live database proof, or each developer's own contributions; those remain pending until recorded below. Issue #30 stays open to track the remaining release requirements. Agent-written reference tests do not count as evidence that another developer completed their assignment.
+
+| Requirement                       | Evidence to record                                                                   | Status                                                        |
+| --------------------------------- | ------------------------------------------------------------------------------------ | ------------------------------------------------------------- |
+| Public Vercel release             | Verified production URL and deployed Git commit                                      | Existing project confirmed; this branch pending deployment    |
+| Live create/read persistence      | Live acceptance output; browser refresh and Atlas inspection of the same offering ID | Pending deployment                                            |
+| Additional update/delete          | Live all-operations acceptance and targeted cleanup                                  | Pending deployment                                            |
+| README                            | Description, setup, tech stack, tests, accurate verified live link                   | Implemented; existing live link recorded                      |
+| Loading, empty, responsive states | Controlled state checks and desktop/mobile screenshots                               | Automated coverage and local desktop/mobile evidence recorded |
+| Frontend API errors               | Failed fetch/save and successful save with failed reload                             | Automated coverage implemented                                |
+| Vitest contribution per developer | At least three personally authored cases and reviewed PR per person                  | Pending individual submissions                                |
+
+## Developer evidence
+
+The foundation on `main` includes one agent-written loading example and controlled
+test helpers. Vedika's three assigned Vitest cases remain for her to write; she
+does not need to wait for PR #31. See the [test handoff](../tests/unit/README.md).
+Preserve this contribution record and submitted cases during release integration.
+For each contributed test, explain what it protects. Record browser evidence with
+route, viewport, commit, result, and screenshot link.
+
+| Developer | PR      | Three test case names | Explained and reviewed |
+| --------- | ------- | --------------------- | ---------------------- |
+| Brian     | Pending | Pending               | Pending                |
+| Jean      | Pending | Pending               | Pending                |
+| Naomi     | Pending | Pending               | Pending                |
+| Vedika    | Pending | Pending               | Pending                |
+| Aditi     | Pending | Pending               | Pending                |
+| Sofie     | Pending | Pending               | Pending                |
+
+## Local release checks
+
+Record the command, result, and commit after the final branch checks. Local disposable MongoDB and controlled HTTP responses verify application behavior; they do not establish the deployment database's connectivity.
+
+- Lint: passed.
+- Typecheck: passed.
+- Vitest: 31 passed, including same-origin and malformed error-envelope regressions.
+- HTTP/database/UI regression suite: 51 passed after reconciling main; includes retained storage/seed checks, restart persistence, and live-runner cleanup.
+- Production build: passed; routes do not query Atlas during build.
+- Production dependency audit: zero findings after the approved Next.js/React upgrade and Mongoose patch update; rerun before deployment.
+- Standards/spec review: no blocking defects; documented follow-ups resolved. See [review report](./milestone-3-review.md).
+
+Foundation merge check on October 12, 2026: `npm ci` and `npm run preflight`
+passed on Node 24.19.0 against implementation `3d90071` with the handoff/documentation
+corrections in this PR. All 31 Vitest and 51 Node regression cases passed, followed
+by the production build. `npm audit --omit=dev` reported zero vulnerabilities.
+These checks used disposable databases and do not establish live Atlas evidence.
+
+Local browser evidence: seeded Menu at desktop and 390px mobile widths, no horizontal overflow; created a special through management, edited it, and verified it on Specials after navigation. These checks used disposable local MongoDB. Browser evidence is in `docs/evidence/milestone-3-*.jpg`.
+
+At the original preview inspection, the Vercel project environment panel showed no project variables. Preview deployed commit `693cc0c` successfully at https://coffee-shop-git-feat-milestone-3-release-brianlidesign.vercel.app/. Vercel Authentication protected it from anonymous requests (302). The authenticated browser showed a clear API-unavailable alert and retry button (`docs/evidence/milestone-3-preview-error.jpg`). These observations are historical. Merging PR #31 can trigger a production deployment; a passing deployment check does not verify private environment configuration or live create/read persistence. Record fresh production acceptance separately.
+
+Do not record credentials, populated environment files, or raw database exceptions in evidence.
diff --git a/docs/milestone-3-plan.md b/docs/milestone-3-plan.md
new file mode 100644
index 0000000..22eaae2
--- /dev/null
+++ b/docs/milestone-3-plan.md
@@ -0,0 +1,70 @@
+# Milestone 3: live offerings and release quality
+
+## Approved scope
+
+Brian requested a new branch implementing the release features and this plan. Create/read are the required Milestone 2 operations. Update/delete are Brian's additional assignment. Brian subsequently approved a supported Next.js upgrade after the deployment audit found critical vulnerabilities in the old runtime. Customer ordering, payments, and a redesign remain outside this release.
+
+The implementation branch is `feat/milestone-3-release`, based on main at `4db8d6f`. It integrates the outstanding persistence work without merging or closing other developers' existing assignments. This release supersedes Milestone 2's restriction against public deployment of the management interface: customer routes stay public, but management and all writes require server-enforced team credentials.
+
+## Acceptance criteria
+
+- GET `/api/offerings` reads MongoDB at request time, returns only public offering fields with string IDs, sorts by name then ID, and never falls back to sample data.
+- Authorized POST creates a validated offering. Refresh reads the same persisted ID. Special offerings appear on Specials.
+- Brian's additional PUT `/api/offerings/[id]` replaces offering details and DELETE removes the selected offering. Missing records return 404. Invalid IDs/input return 400.
+- `/manage-offerings` requires HTTP Basic team credentials over HTTPS in deployment. Every write handler independently checks credentials and rejects cross-origin browser writes. Missing access configuration denies access. Secrets are server-only environment variables; there is no client-side credential storage.
+- Management supports create, edit, cancel, explicit delete confirmation, pending locks, retained input on failure, and accurate save-success/reload-failure feedback.
+- Menu, Specials, and management show loading, empty, readable error, and retry states and work on narrow screens and with a keyboard.
+- Vitest unit/component checks run alongside existing regression checks in CI. Ordinary checks use disposable local MongoDB, never shared Atlas credentials.
+- Repeatable insert-only seeding adds the 16 starting offerings and preserves edits and unrelated records on rerun.
+- A live acceptance command checks authorized create/read (and optionally update/delete) against an explicit target using uniquely marked test records and cleans up only records it created.
+- README explains the actual app, tech stack, local setup, environment variables, tests, deployment, and the verified public URL. Until deployed, the live link is explicitly pending.
+- Release evidence records the deployment URL and commit, live persistence, desktop/mobile screenshots, failure/empty/loading checks, and each developer's own three Vitest contributions. Agent-written tests do not establish personal developer completion.
+
+## Brian's work order
+
+1. Establish Vitest, a supported Node runtime, and CI quality gates.
+2. Implement and connect validated database-backed handlers and insert-only seeding.
+3. Protect management and all writes, then complete create/edit/delete UI composition.
+4. Verify real HTTP persistence against disposable MongoDB and controlled frontend states.
+5. Configure Vercel Production and Preview with separate database targets, deploy, and run live acceptance.
+6. Finalize README and collect submission evidence. Review and commit the branch; merge requires separate authorization.
+
+## Developer ownership and personal evidence
+
+These are follow-up contribution assignments, not claims that a developer authored this branch's tests. Each developer owns at least three relevant Vitest cases, explains what failure they prevent, and supplies a reviewed PR. Existing Milestone 2 issues remain independently owned.
+
+| Developer | Area                                                          | Minimum personal Vitest behaviors                                                                                                                  |
+| --------- | ------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Naomi     | Storage and seeding                                           | Public serialization excludes metadata; omitted special flag defaults false; seed rerun preserves edits and unrelated records                      |
+| Jean      | API validation and errors                                     | Valid creation returns 201; invalid input leaves data unchanged; database failure returns sanitized 503                                            |
+| Aditi     | Management form                                               | Pending submission prevents duplicates; failed save preserves fields; confirmed save followed by failed reload reports both outcomes               |
+| Vedika    | Customer pages and responsive checks                          | No-special-offerings feedback; rejected network request shows an error without empty feedback; unreadable API errors show useful fallback feedback |
+| Sofie     | Acceptance tooling and evidence                               | Wrong response status fails acceptance; malformed offering fails; missing read-back fails; maintain browser/live checklist                         |
+| Brian     | Integration, access, deployment, documentation, update/delete | Unauthenticated write denied; authorized write works; missing configuration fails closed; add update/delete regressions                            |
+
+## Test boundaries
+
+Use the agreed HTTP request/response boundary and rendered UI interactions. Unit tests may supply controlled external storage/HTTP responses; integration tests exercise real routes backed by a disposable database. Passing controlled tests is not Atlas or live Vercel evidence. Do not count snapshots, constants, or assertions against private implementation as useful integrity cases.
+
+## Release checklist
+
+- [ ] Choose submission date and integration checkpoint with the team.
+- [ ] Confirm all automated quality gates and code review pass.
+- [ ] Configure private `MONGO_URI`, `MANAGEMENT_USERNAME`, and `MANAGEMENT_PASSWORD` in each Vercel environment; use different preview data and credentials.
+- [ ] Confirm Atlas network access and scoped read/write permissions for the deployment database.
+- [ ] Deliberately seed the selected deployment database, preserving existing records.
+- [ ] Public customer pages open without login; unauthorized management/writes are denied.
+- [ ] Live create/read and optional update/delete acceptance pass; disposable records are cleaned up.
+- [ ] Capture desktop and narrow mobile views, keyboard use, empty/loading/error states, and persistence after refresh.
+- [ ] Record verified live URL and deployed commit in README and release evidence.
+- [ ] Record three personally contributed Vitest cases and merged PR per developer.
+
+The existing Vercel project is `brianlidesign/coffee-shop`, with public URL https://coffee-shop-sigma-rouge.vercel.app/. No deadline has been supplied. Deployment, team contributions, and live evidence must remain pending until verified.
+
+## Foundation integration
+
+Brian authorized pushing and merging PR #31 into `main` on October 12, 2026 to
+unblock follow-up contributions, including Sofie's issue #36. This integrates the
+implementation after automated checks and review. It does not complete the
+release checklist. Keep parent issue #30 and individual assignments open until
+their remaining acceptance criteria have verified evidence.
diff --git a/docs/milestone-3-review.md b/docs/milestone-3-review.md
new file mode 100644
index 0000000..244cc7a
--- /dev/null
+++ b/docs/milestone-3-review.md
@@ -0,0 +1,33 @@
+# Milestone 3 review
+
+Reviewed base `4db8d6f` through implementation commit `693cc0c` using parallel Standards and Spec reviewers. Reviewers inspected code and evidence; the primary agent ran checks.
+
+## Standards
+
+No blocking documented-standard violations. Routes, aliases, database boundaries, retained starter references, and domain language follow the repository contract.
+
+One nonblocking heuristic: duplicated error-envelope parsing. Resolved by sharing a parser that accepts only nonempty string messages and known string field errors. Added a rendered management regression proving malformed API fields do not break the form.
+
+Setup documentation had stale route, test, and GitHub-secret instructions. Corrected the routes and test description and directed deployment secrets to Vercel.
+
+## Spec
+
+No blocking code findings or scope creep. Persistent handlers, access, validation, loading/empty/error/retry states, pending locks, confirmation, and save/reload outcomes implement the plan. Update/delete and framework upgrade were explicitly approved.
+
+External requirements remain partial: public production release, live persistence, and each developer's three personal Vitest contributions. Evidence records these as pending.
+
+Standards: one nonblocking heuristic plus stale documentation, all resolved. Spec: zero code findings; three external evidence categories remain incomplete.
+
+## Foundation merge review: October 12, 2026
+
+Parallel Standards and Spec reviewers checked `origin/main` at `9054f88` against
+PR #31 at `3d90071`, including the retained storage, seed, and test foundation.
+
+- Standards: zero blocking violations; one nonblocking duplication heuristic for
+  the accepted offering field names. Existing behavior is covered by tests.
+- Spec: zero blocking implementation defects; the test handoff's description of
+  reference cases and release-only modules was stale. Updated the handoff and
+  release documentation to reflect foundation integration and Sofie's next step.
+
+Brian authorized the foundation merge separately from release completion. Keep
+issue #30 open for deployment, live persistence, and personal test contributions.
diff --git a/docs/offering-api-contract.md b/docs/offering-api-contract.md
new file mode 100644
index 0000000..7cd9342
--- /dev/null
+++ b/docs/offering-api-contract.md
@@ -0,0 +1,124 @@
+# Offering API contract
+
+## Milestone 3 implementation
+
+The historical Milestone 2 planning text below describes the original assignment boundaries. The Milestone 3 branch now reads MongoDB through GET and accepts authorized POST creation. IDs are MongoDB-generated strings; seed data is inserted deliberately rather than served as a fallback. GET returns sorted public data, `[]` when empty, and a sanitized 503 on database failure.
+
+Brian's additional PUT `/api/offerings/[id]` replaces all offering details using the same input rules; omitted special flag defaults false. DELETE removes that offering and returns 204. Invalid identities return 400, missing records 404, missing/invalid management access 401, and cross-origin browser writes 403. PUT/DELETE and POST enforce access independently inside each handler. The [Milestone 3 plan](milestone-3-plan.md) and [deployment guide](milestone-3-deployment.md) supersede the old local-only restriction.
+
+Use Node 24. `npm test` now runs Vitest and the retained Node regression suite. The HTTP harness starts real Next.js routes against a disposable MongoDB database, seeds the starting menu, verifies persisted writes, and checks database failure without a fixture fallback. Ordinary checks never use shared Atlas credentials.
+
+## Historical Milestone 2 contract and assignment notes
+
+Issue [#14](https://github.com/BrianLiDesign/coffee-shop/issues/14) establishes this contract for [Milestone 2](https://github.com/BrianLiDesign/coffee-shop/issues/12). GET is implemented using fixtures today. In the [independent assignment plan](./milestone-2-parallel-work.md), #15 supplies storage and seeding, #16 supplies independently tested GET/POST handlers and runtime validation, #17 supplies the special control/customer display checks, #20 supplies the management form, and #18 supplies acceptance tooling. Brian composes the real routes and UI during final milestone integration. This guide defines later integrated behavior without claiming it is already implemented.
+
+## Shared types
+
+Import browser-safe types and constants from `@/types/offering`. The fixture module uses the same Offering type. Client code must not import a Mongoose model or the fixture array.
+
+- `Offering`: public response with string `ID`, name, description, numeric price, category, and boolean `specialOffer`.
+- `CreateOfferingInput`: the same details without identity; `specialOffer` is optional.
+- `OfferingCategory` and `OFFERING_CATEGORIES`: Coffee, Tea, or Smoothie.
+- `OFFERING_INPUT_LIMITS`: name 100 characters, description 500 characters, price two decimal places.
+- `DEFAULT_SPECIAL_OFFER`: false.
+- `OfferingErrorResponse`: the shared error envelope with a code, readable message, and optional field messages.
+
+TypeScript checks application code; it cannot validate incoming JSON. #16 must validate raw values before Mongoose can coerce them and apply the same rules in the form and model.
+
+## Identity
+
+GET remains a JSON array. `ID` is always a nonempty string, and React keys use it directly. Current fixture IDs are strings such as `"1"`; they are temporary identities, not MongoDB document IDs. The database slice will return the string serialization of MongoDB-generated identity through the same `ID` field.
+
+Do not send `ID`, `_id`, or internal metadata when creating an offering. No numeric-ID counter is planned. Names need not be unique.
+
+## GET /api/offerings
+
+Current response: 200 with all 16 fixtures, including three specials. A shortened example:
+
+```json
+[
+  {
+    "ID": "1",
+    "name": "Cappuccino",
+    "description": "A delicious cappuccino with steamed milk and foam",
+    "price": 5.9,
+    "category": "Coffee",
+    "specialOffer": false
+  }
+]
+```
+
+Menu displays every item. Specials displays only items with `specialOffer: true`: Pumpkin Spice Latte, Golden Hour Cold Brew, and Hojicha Latte in the starting fixtures.
+
+After Brian composes #15's storage and #16's handlers, GET will read the selected database at request time, return `[]` for an empty collection, order by name then ID, and return a sanitized 503 on database failure. It will never silently fall back to fixtures. The existing fixture route stays functional while those modules are developed independently.
+
+## POST /api/offerings (planned in #16)
+
+Send `Content-Type: application/json` and a JSON object:
+
+```json
+{
+  "name": "Vanilla Latte",
+  "description": "Espresso with steamed milk and vanilla",
+  "price": 5.75,
+  "category": "Coffee",
+  "specialOffer": false
+}
+```
+
+The successful response is 201 with the saved Offering, including a server-generated string `ID`. A subsequent GET must return the same record. Omit `specialOffer` to use false; true marks it as a special. The standalone checkbox is supplied in #17 and composed with #20's form during final integration.
+
+| Field        | Authoritative validation required in #16                                             |
+| ------------ | ------------------------------------------------------------------------------------ |
+| name         | String; trim; required and nonempty after trimming; at most 100 characters           |
+| description  | String; trim; required and nonempty after trimming; at most 500 characters           |
+| price        | JSON number; finite; nonnegative; at most two decimal places; reject numeric strings |
+| category     | Exactly Coffee, Tea, or Smoothie                                                     |
+| specialOffer | Boolean when supplied; omission defaults to false; reject null and strings           |
+| Other fields | Reject, including ID and \_id                                                        |
+
+Decimal validation must tolerate ordinary floating-point representation without accepting meaningful fractional cents. The form parses its price text explicitly before submission. Mongoose validation is an additional guard, not a replacement for checking raw request input.
+
+## Planned error responses
+
+| Status | Code                 | Trigger                                    |
+| ------ | -------------------- | ------------------------------------------ |
+| 415    | INVALID_CONTENT_TYPE | POST body is not sent as JSON              |
+| 400    | INVALID_JSON         | Body cannot be parsed as JSON              |
+| 400    | INVALID_INPUT        | Wrong shape, type, fields, or field values |
+| 503    | DATABASE_UNAVAILABLE | Database cannot complete the request       |
+
+Example validation response:
+
+```json
+{
+  "error": {
+    "code": "INVALID_INPUT",
+    "message": "Please correct the offering details.",
+    "fields": {
+      "name": "Enter a name.",
+      "price": "Enter a nonnegative price with at most two decimal places."
+    }
+  }
+}
+```
+
+Clients use the readable message and field messages, retain input on failure, and announce feedback accessibly. Errors must not include credentials, connection strings, raw database exceptions, or internal document fields.
+
+## Running the HTTP regression checks
+
+After installing dependencies, run `npm test`. Node's built-in test runner starts a real Next.js development server on an available loopback port and exercises GET over HTTP. It requires no separately running app and no database credentials. Output goes into ignored `.next-http-test`, leaving the normal `.next` build alone. The harness clears `MONGO_URI` for its child process and stops its process tree at teardown.
+
+These checks cover string identity, the 16-item starting menu and public fields, and the three specials flags. They do not claim database persistence or POST coverage. Check types with `npm run typecheck`; run lint and build separately.
+
+Use Node 18 or newer, matching the current CI matrix. The harness uses Node's [test runner](https://nodejs.org/api/test.html) and Next.js's [custom output directory](https://nextjs.org/docs/14/app/api-reference/next-config-js/distDir).
+
+## Independent checks and integrated persistence checks
+
+#15 proves its storage and seed behavior against a self-contained disposable local database. #16 proves HTTP handler behavior using its own explicitly test-only store. #18 independently proves its acceptance runner and disposable database lifecycle tooling. These assignments do not wait for each other; a store double or runner self-test is not evidence of real application persistence.
+
+Keep HTTP requests and responses as the regression surface. Replace fixture-specific expectations with independently defined seed expectations when GET becomes database-backed. Extend the harness to start a disposable local MongoDB instance or use an explicitly designated isolated test database, setting the child app's test URI to that database.
+
+Setup and cleanup may manage isolated data, but assertions observe persistence through POST followed by GET. Do not assert private model calls. Refuse developer/integration database targets for automated destructive cleanup. Ordinary CI must not use shared Atlas credentials; a separate deliberate Atlas smoke check supplies live-access evidence.
+
+No disposable database launcher is added in #14 because the current route does not use MongoDB. Each assignment supplies the setup needed for its own tests. During final integration, Brian connects the real route and isolated database to the acceptance runner and records actual POST/GET persistence results under #12. Routine checks continue to exclude shared Atlas credentials.
diff --git a/docs/offering-preview.md b/docs/offering-preview.md
new file mode 100644
index 0000000..8f1fc08
--- /dev/null
+++ b/docs/offering-preview.md
@@ -0,0 +1,62 @@
+# Offering management preview
+
+The controlled-response preview lets you demonstrate `/manage-offerings` before
+the real `GET` and `POST /api/offerings` handlers are available. It runs in a
+separate local Node process; it does not add mock data or a preview switch to
+the production app.
+
+1. In one terminal, run `npm run dev`.
+2. In another terminal, run `npm run preview:offerings`.
+3. Open `http://localhost:3001/manage-offerings?scenario=normal`.
+
+The preview server proxies the page and static assets to Next.js on port 3000.
+It handles only `/api/offerings` itself and marks those responses with
+`X-Offering-Preview: controlled-response`. To reset a scenario, open its URL
+again; each URL creates a fresh preview session.
+
+Available controlled-response scenarios:
+
+| URL suffix                 | Expected behavior                                                |
+| -------------------------- | ---------------------------------------------------------------- |
+| `?scenario=normal`         | Initial list, delayed successful save, then refreshed list       |
+| `?scenario=empty`          | Empty-list state                                                 |
+| `?scenario=list-error`     | Initial list-loading error                                       |
+| `?scenario=field-errors`   | Controlled POST returns an API field error                       |
+| `?scenario=save-failure`   | Failed save; form values remain available                        |
+| `?scenario=reload-failure` | Save succeeds, then refresh fails with distinct success feedback |
+
+Field validation is client-side: submit the empty form in any scenario to see
+required-field errors. During `normal` saving, all form controls and the special
+checkbox remain disabled while
+the preview server delays its successful response. The preview-only
+`/__preview/status` endpoint reports scenario request counts and the last
+submitted `specialOffer` value.
+
+## Controlled-response evidence
+
+The screenshots below were captured from the explicitly test-only preview
+server, not from the production runtime:
+
+| Evidence                                     | Screenshot                                                                                    |
+| -------------------------------------------- | --------------------------------------------------------------------------------------------- |
+| Save pending and duplicate-submit prevention | [issue-20-controlled-pending-save.png](./evidence/issue-20-controlled-pending-save.png)       |
+| Successful save and refreshed list           | [issue-20-controlled-successful-save.png](./evidence/issue-20-controlled-successful-save.png) |
+| Client-side field errors                     | [issue-20-controlled-field-errors.png](./evidence/issue-20-controlled-field-errors.png)       |
+| Controlled API field error                   | [issue-20-controlled-api-field-error.png](./evidence/issue-20-controlled-api-field-error.png) |
+| Failed save with form values retained        | [issue-20-controlled-save-failure.png](./evidence/issue-20-controlled-save-failure.png)       |
+| Successful save followed by reload failure   | [issue-20-controlled-reload-failure.png](./evidence/issue-20-controlled-reload-failure.png)   |
+| Empty list                                   | [issue-20-controlled-empty-list.png](./evidence/issue-20-controlled-empty-list.png)           |
+| List loading error                           | [issue-20-controlled-list-error.png](./evidence/issue-20-controlled-list-error.png)           |
+| Narrow-screen layout                         | [issue-20-controlled-narrow-screen.png](./evidence/issue-20-controlled-narrow-screen.png)     |
+
+Keyboard verification confirmed Tab moves from the name field to description,
+and Space toggles the special-offer checkbox. The mobile check used a 375 px
+viewport: the form stacked into one column and the document had no horizontal
+overflow. Controlled submissions verified both `specialOffer: false` and
+`specialOffer: true`.
+
+`npm test` also runs DOM interaction regressions in `tests/offering-form.test.mjs`.
+They verify the reusable form's optional boolean prop (including its false
+default), pending control locking and duplicate prevention, failed-save value
+retention, and successful-save clearing with reload-failure feedback. These use
+controlled HTTP responses in jsdom and do not establish real persistence.
diff --git a/docs/offering-storage.md b/docs/offering-storage.md
new file mode 100644
index 0000000..0f27963
--- /dev/null
+++ b/docs/offering-storage.md
@@ -0,0 +1,74 @@
+# Offering storage and repeatable seeding
+
+[Issue #15](https://github.com/BrianLiDesign/coffee-shop/issues/15) supplied real MongoDB storage independently of the live API and customer pages. Its original deliverable left the fixture-backed route unchanged. The Milestone 3 release now composes that storage with the handlers and adds update/remove operations. The independent storage and seed regressions remain enabled.
+
+## Storage boundary
+
+Import `offeringStore` from `@/database/offeringStore`:
+
+- `list(): Promise<Offering[]>` returns only the six public fields, sorted by name then string ID using the shared sort rule. An empty collection returns `[]`.
+- `create(input: CreateOfferingInput): Promise<Offering>` resolves after MongoDB acknowledges persistence. MongoDB generates identity, serialized through public `ID`. Internal `_id`, `__v`, and `seedKey` never appear in public results.
+- Both operations use the existing `connectDB` helper. Connection selection is bounded to five seconds. Failures reject; handlers own the sanitized 503 error envelope. There is no fixture fallback or automatic seeding.
+
+`src/database/offeringModel.ts` is separate from the starter User model. It enforces trimmed required name/description, their 100/500-character limits, Coffee/Tea/Smoothie categories, finite nonnegative price with at most two decimal places, and required boolean `specialOffer` defaulting to false. Mongoose's casting is not raw JSON validation; #16 must reject invalid raw request types before calling storage.
+
+An illustrative public result (MongoDB-generated IDs vary):
+
+```json
+{
+  "ID": "507f1f77bcf86cd799439011",
+  "name": "Vanilla Latte",
+  "description": "Espresso with vanilla and milk",
+  "price": 5.75,
+  "category": "Coffee",
+  "specialOffer": false
+}
+```
+
+## Independent verification
+
+```bash
+npm ci
+npm run test:storage
+npm test
+npm run typecheck
+npm run lint
+npm run build
+```
+
+The tests launch and stop their own disposable local MongoDB 7.0.24 instances using the already installed `mongodb-memory-server-core`. They override inherited `MONGO_URI` with their own isolated target and do not use Atlas. The first run may download a platform-specific MongoDB binary; a blocked download or unsupported operating system is a setup failure, not a passing persistence check.
+
+Evidence covers real creation/read-back, public serialization, empty reads, duplicate-name ordering, model constraints/defaults, all 16 starting names and three specials, rerun preservation of IDs/count/edits/unrelated records, and command reruns across separate processes. Raw collection writes are used only to arrange duplicate-ID ordering and operator edits; assertions read the public storage boundary.
+
+Connection evidence deliberately targets an unavailable loopback port with test-only credentials. List/create/seed reject, the test caller emits the shared safe envelope, and a retry against disposable MongoDB succeeds. Expected safe output includes:
+
+```text
+{"error":{"code":"DATABASE_UNAVAILABLE","message":"Database is unavailable."}}
+PASS recovery: failed connections do not poison subsequent persistence.
+FAIL seed: database operation failed; check configuration, permissions, and connectivity. Reruns preserve existing records.
+```
+
+No connection string, password, or raw database exception is printed by the command.
+
+## Deliberate seed command
+
+Set `MONGO_URI` in private `.env.local` or the environment with an explicit non-system database name. Environment configuration takes precedence. Use an isolated local development database for practice. Then deliberately apply the starting dataset:
+
+```bash
+npm run db:seed -- --apply
+```
+
+The command inserts the 16 starting offerings from the existing menu dataset, including Pumpkin Spice Latte, Golden Hour Cold Brew, and Hojicha Latte as specials. The fixture IDs supply stable internal seed keys (`coffee-shop-v1-1` through `coffee-shop-v1-16`); they never become database/public IDs. A unique partial index permits multiple unrelated offerings without seed keys. Insert-only upserts preserve existing seeded records even after they are renamed or edited. No collection clearing, deletion, or update of existing menu details occurs. A failed partial run can be rerun safely.
+
+```text
+PASS seed: inserted=16; existing offerings preserved.
+PASS seed: inserted=0; existing offerings preserved.
+```
+
+Missing `--apply`, placeholders, missing/implicit database names, or system databases fail configuration with exit code 1. Connection/write failures produce a sanitized message and exit code 1. The command has a 20-second overall deadline and closes its connection on ordinary completion/failure.
+
+## Remaining parent evidence
+
+Live Atlas verification is **pending under #12**. This independently verified storage deliverable does not prove integrated GET/POST, browser refresh/restart persistence, developer Atlas permissions, or completion of Milestone 2. Those checks remain mandatory in the parent integration assignment.
+
+Implementation references: [Mongoose 8 validation](https://mongoosejs.com/docs/8.x/docs/validation.html) and [bulk writes](<https://mongoosejs.com/docs/8.x/docs/api/model.html#Model.bulkWrite()>). Context7 lookup failed with `fetch failed`; the official version-matched documentation was checked directly.
diff --git a/docs/project-setup.md b/docs/project-setup.md
new file mode 100644
index 0000000..d22c461
--- /dev/null
+++ b/docs/project-setup.md
@@ -0,0 +1,21 @@
+# Project setup
+
+These tools are already configured. You do not need to add them before writing a feature.
+
+1. **Next.js 16 App Router and React 19.** Pages and route handlers live under `src/app`. See [Getting started](./getting-started.md) for the folder map. Server request APIs and route parameters are asynchronous.
+2. **TypeScript in strict mode**, with the `@/*` import alias pointed at `src/`.
+3. **React 19** for interface components.
+4. **Mongoose** connection helper in `src/database/db.ts`. It reads `MONGO_URI` and reuses one connection across requests. `src/database/userSchema.ts` is an example schema.
+5. **Example routes.** `src/app/example/page.tsx` and `src/app/api/example/route.ts` show a page and an API route. The API route connects to MongoDB. New shop pages should follow the issue you were assigned.
+6. **ESLint and Prettier.** `eslint.config.mjs` imports Next's Core Web Vitals flat configuration and reports Prettier issues as errors. Prettier uses a print width of 120. `npm run lint` runs ESLint directly.
+7. **Pre-commit hook.** Husky runs lint-staged, which formats staged files and runs ESLint on JavaScript and TypeScript.
+8. **Issue and pull request templates** in `.github`.
+9. **Continuous integration.** `.github/workflows/ci.yml` runs on pushes and pull requests to `main` and `develop`. Node 24 runs `npm ci`, lint, typecheck, Vitest and regression tests, and a production build. Builds use no Atlas credentials; database regression checks use disposable loopback MongoDB.
+
+10. **Milestone 3 release.** The [plan](milestone-3-plan.md), [deployment guide](milestone-3-deployment.md), and [evidence record](milestone-3-evidence.md) describe protected management, live verification, and developer contributions. HTTP Basic access is enforced in `src/proxy.ts`, the server management page, and every write handler.
+11. **Tests.** `npm test` runs Vitest unit/component checks and the retained Node regression suite. The HTTP harness starts its own Next.js server with separate output and a seeded disposable MongoDB database. `npm run typecheck` checks TypeScript. See [the Offering contract](./offering-api-contract.md) for current and historical coverage boundaries.
+
+The [test handoff](../tests/unit/README.md) gives Vedika a starting point on `main`.
+Reference tests on this release branch do not count as her personal contributions.
+The retained `npm run test:storage` command covers storage and deliberate seed
+execution from Naomi's merged work; use `npm run db:seed -- --apply` to seed.
diff --git a/docs/template-features.md b/docs/template-features.md
deleted file mode 100644
index 7b206eb..0000000
--- a/docs/template-features.md
+++ /dev/null
@@ -1,18 +0,0 @@
-# Template Features
-
-This template uses Next.js version 14.0.0. The following lists what is configured and included:
-
-1.  App router with `src/app` folder
-2.  Basic project file structure (see Project Structure in [getting-started.md](./getting-started.md))
-3.  Some database setup with a database connection function in `src\database\db.ts` and example User schema
-4.  Example frontend route and example api route
-5.  Built-in Next.js eslint
-6.  Import aliasing. See paths in `tsconfig.json` for predefined aliases
-7.  Template documentation to fill in
-8.  Two branches called `develop` and `main` (if you selected copy branches when creating from template)
-9.  Issue and Pull Request templates. Modify them in the `.github` folder
-10. Some common GitHub tags
-11. Pre-commit linting hook with Husky and lint-staged
-12. Continuous integration with GitHub Actions
-
-Last updated 10/17/2024
diff --git a/eslint.config.mjs b/eslint.config.mjs
new file mode 100644
index 0000000..75ec4ac
--- /dev/null
+++ b/eslint.config.mjs
@@ -0,0 +1,13 @@
+import { defineConfig, globalIgnores } from "eslint/config";
+import nextVitals from "eslint-config-next/core-web-vitals";
+import prettier from "eslint-config-prettier";
+import prettierPlugin from "eslint-plugin-prettier";
+
+export default defineConfig([
+  ...nextVitals,
+  prettier,
+  { plugins: { prettier: prettierPlugin }, rules: { "prettier/prettier": ["error", { endOfLine: "auto" }] } },
+  // These pages deliberately fetch external API data in an effect.
+  { rules: { "react-hooks/set-state-in-effect": "off" } },
+  globalIgnores([".next/**", ".next-http-test/**", "coverage/**", "node_modules/**", "next-env.d.ts"]),
+]);
diff --git a/next.config.js b/next.config.js
index 767719f..bee4e41 100644
--- a/next.config.js
+++ b/next.config.js
@@ -1,4 +1,7 @@
 /** @type {import('next').NextConfig} */
-const nextConfig = {}
+const nextConfig = {
+  // HTTP tests must not overwrite the developer's normal build output.
+  distDir: process.env.COFFEE_SHOP_HTTP_TEST === "1" ? ".next-http-test" : ".next",
+};
 
-module.exports = nextConfig
+module.exports = nextConfig;
diff --git a/package-lock.json b/package-lock.json
index 7d47725..06fe2ac 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8,409 +8,2479 @@
       "name": "nextjs-app-template",
       "version": "0.1.0",
       "dependencies": {
-        "mongoose": "^8",
-        "next": "^14",
-        "react": "^18",
-        "react-dom": "^18"
+        "mongoose": "^8.24.5",
+        "next": "^16.4.0",
+        "react": "^19.3.0",
+        "react-dom": "^19.3.0"
       },
       "devDependencies": {
-        "@types/node": "^20",
-        "@types/react": "^18",
-        "@types/react-dom": "^18",
-        "eslint": "^8",
-        "eslint-config-next": "^14",
+        "@testing-library/dom": "^10.4.2",
+        "@testing-library/jest-dom": "^7.0.1",
+        "@testing-library/react": "^16.3.3",
+        "@testing-library/user-event": "^14.6.7",
+        "@types/node": "^24",
+        "@types/react": "^19.3.0",
+        "@types/react-dom": "^19.3.0",
+        "esbuild": "^0.28.2",
+        "eslint": "^9.39.5",
+        "eslint-config-next": "^16.4.0",
         "eslint-config-prettier": "^9",
         "eslint-plugin-prettier": "^5",
         "husky": "^9",
+        "jsdom": "^26.1.0",
         "lint-staged": "^15",
+        "mongodb-memory-server-core": "^10.4.3",
         "prettier": "^3",
-        "typescript": "^5"
+        "tsx": "^4.23.15",
+        "typescript": "^5",
+        "vitest": "^5.0.3"
+      },
+      "engines": {
+        "node": "24.x"
       }
     },
-    "node_modules/@eslint-community/eslint-utils": {
-      "version": "4.4.0",
-      "resolved": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.4.0.tgz",
-      "integrity": "sha512-1/sA4dwrzBAyeUoQ6oxahHKmrZvsnLCg4RfxW3ZFGGmQkSNQPFNLV9CUEFQP1x9EYXHTo5p6xdhZM1Ne9p/AfA==",
+    "node_modules/@adobe/css-tools": {
+      "version": "4.5.0",
+      "resolved": "https://registry.npmjs.org/@adobe/css-tools/-/css-tools-4.5.0.tgz",
+      "integrity": "sha512-6OzddxPio9UiWTCemp4N8cYLV2ZN1ncRnV1cVGtve7dhPOtRkleRyx32GQCYSwDYgaHU3USMm84tNsvKzRCa1Q==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@asamuzakjp/css-color": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-3.2.0.tgz",
+      "integrity": "sha512-K1A6z8tS3XsmCMM86xoWdn7Fkdn9m6RSVtocUrJYIwZnFVkng/PvkEoWtOWmP+Scc6saYWHWZYbndEEXxl24jw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@csstools/css-calc": "^2.1.3",
+        "@csstools/css-color-parser": "^3.0.9",
+        "@csstools/css-parser-algorithms": "^3.0.4",
+        "@csstools/css-tokenizer": "^3.0.3",
+        "lru-cache": "^10.4.3"
+      }
+    },
+    "node_modules/@babel/code-frame": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.7.tgz",
+      "integrity": "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "eslint-visitor-keys": "^3.3.0"
+        "@babel/helper-validator-identifier": "^7.29.7",
+        "js-tokens": "^4.0.0",
+        "picocolors": "^1.1.1"
       },
       "engines": {
-        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
-      },
-      "peerDependencies": {
-        "eslint": "^6.0.0 || ^7.0.0 || >=8.0.0"
+        "node": ">=6.9.0"
       }
     },
-    "node_modules/@eslint-community/regexpp": {
-      "version": "4.11.1",
-      "resolved": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.11.1.tgz",
-      "integrity": "sha512-m4DVN9ZqskZoLU5GlWZadwDnYo3vAEydiUayB9widCl9ffWx2IvPnp6n3on5rJmziJSw9Bv+Z3ChDVdMwXCY8Q==",
+    "node_modules/@babel/compat-data": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.29.7.tgz",
+      "integrity": "sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==",
       "dev": true,
+      "license": "MIT",
       "engines": {
-        "node": "^12.0.0 || ^14.0.0 || >=16.0.0"
+        "node": ">=6.9.0"
       }
     },
-    "node_modules/@eslint/eslintrc": {
-      "version": "2.1.4",
-      "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-2.1.4.tgz",
-      "integrity": "sha512-269Z39MS6wVJtsoUl10L60WdkhJVdPG24Q4eZTH3nnF6lpvSShEK3wQjDX9JRWAUPvPh7COouPpU9IrqaZFvtQ==",
+    "node_modules/@babel/core": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.29.7.tgz",
+      "integrity": "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "ajv": "^6.12.4",
-        "debug": "^4.3.2",
-        "espree": "^9.6.0",
-        "globals": "^13.19.0",
-        "ignore": "^5.2.0",
-        "import-fresh": "^3.2.1",
-        "js-yaml": "^4.1.0",
-        "minimatch": "^3.1.2",
-        "strip-json-comments": "^3.1.1"
+        "@babel/code-frame": "^7.29.7",
+        "@babel/generator": "^7.29.7",
+        "@babel/helper-compilation-targets": "^7.29.7",
+        "@babel/helper-module-transforms": "^7.29.7",
+        "@babel/helpers": "^7.29.7",
+        "@babel/parser": "^7.29.7",
+        "@babel/template": "^7.29.7",
+        "@babel/traverse": "^7.29.7",
+        "@babel/types": "^7.29.7",
+        "@jridgewell/remapping": "^2.3.5",
+        "convert-source-map": "^2.0.0",
+        "debug": "^4.1.0",
+        "gensync": "^1.0.0-beta.2",
+        "json5": "^2.2.3",
+        "semver": "^6.3.1"
       },
       "engines": {
-        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+        "node": ">=6.9.0"
       },
       "funding": {
-        "url": "https://opencollective.com/eslint"
+        "type": "opencollective",
+        "url": "https://opencollective.com/babel"
       }
     },
-    "node_modules/@eslint/js": {
-      "version": "8.57.1",
-      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-8.57.1.tgz",
-      "integrity": "sha512-d9zaMRSTIKDLhctzH12MtXvJKSSUhaHcjV+2Z+GK+EEY7XKpP5yR4x+N3TAcHTcu963nIr+TMcCb4DBCYX1z6Q==",
+    "node_modules/@babel/core/node_modules/json5": {
+      "version": "2.2.3",
+      "resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
+      "integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==",
       "dev": true,
+      "license": "MIT",
+      "bin": {
+        "json5": "lib/cli.js"
+      },
       "engines": {
-        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+        "node": ">=6"
+      }
+    },
+    "node_modules/@babel/core/node_modules/semver": {
+      "version": "6.3.1",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
+      "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
       }
     },
-    "node_modules/@humanwhocodes/config-array": {
-      "version": "0.13.0",
-      "resolved": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.13.0.tgz",
-      "integrity": "sha512-DZLEEqFWQFiyK6h5YIeynKx7JlvCYWL0cImfSRXZ9l4Sg2efkFGTuFf6vzXjK1cq6IYkU+Eg/JizXw+TD2vRNw==",
-      "deprecated": "Use @eslint/config-array instead",
+    "node_modules/@babel/generator": {
+      "version": "7.29.8",
+      "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.29.8.tgz",
+      "integrity": "sha512-gZbepsdh3WDtgZKWL+vTPh71LSBrm/Y4/QDZBVCcYfmeTEEuoOYwlSy+G1StfJg+/Zy550u/3TATbm7qDbbMtg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@humanwhocodes/object-schema": "^2.0.3",
-        "debug": "^4.3.1",
-        "minimatch": "^3.0.5"
+        "@babel/parser": "^7.29.8",
+        "@babel/types": "^7.29.8",
+        "@jridgewell/gen-mapping": "^0.3.12",
+        "@jridgewell/trace-mapping": "^0.3.28",
+        "jsesc": "^3.0.2"
       },
       "engines": {
-        "node": ">=10.10.0"
+        "node": ">=6.9.0"
       }
     },
-    "node_modules/@humanwhocodes/module-importer": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz",
-      "integrity": "sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==",
+    "node_modules/@babel/helper-compilation-targets": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.29.7.tgz",
+      "integrity": "sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==",
       "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/compat-data": "^7.29.7",
+        "@babel/helper-validator-option": "^7.29.7",
+        "browserslist": "^4.24.0",
+        "lru-cache": "^5.1.1",
+        "semver": "^6.3.1"
+      },
       "engines": {
-        "node": ">=12.22"
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-compilation-targets/node_modules/lru-cache": {
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz",
+      "integrity": "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "yallist": "^3.0.2"
+      }
+    },
+    "node_modules/@babel/helper-compilation-targets/node_modules/semver": {
+      "version": "6.3.1",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
+      "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      }
+    },
+    "node_modules/@babel/helper-globals": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-globals/-/helper-globals-7.29.7.tgz",
+      "integrity": "sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-module-imports": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.29.7.tgz",
+      "integrity": "sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/traverse": "^7.29.7",
+        "@babel/types": "^7.29.7"
       },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/nzakas"
+      "engines": {
+        "node": ">=6.9.0"
       }
     },
-    "node_modules/@humanwhocodes/object-schema": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/@humanwhocodes/object-schema/-/object-schema-2.0.3.tgz",
-      "integrity": "sha512-93zYdMES/c1D69yZiKDBj0V24vqNzB/koF26KPaagAfd3P/4gUlh3Dys5ogAK+Exi9QyzlD8x/08Zt7wIKcDcA==",
-      "deprecated": "Use @eslint/object-schema instead",
-      "dev": true
+    "node_modules/@babel/helper-module-transforms": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.29.7.tgz",
+      "integrity": "sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-module-imports": "^7.29.7",
+        "@babel/helper-validator-identifier": "^7.29.7",
+        "@babel/traverse": "^7.29.7"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      },
+      "peerDependencies": {
+        "@babel/core": "^7.0.0"
+      }
+    },
+    "node_modules/@babel/helper-string-parser": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz",
+      "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-validator-identifier": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz",
+      "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-validator-option": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.29.7.tgz",
+      "integrity": "sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
     },
-    "node_modules/@isaacs/cliui": {
-      "version": "8.0.2",
-      "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
-      "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==",
+    "node_modules/@babel/helpers": {
+      "version": "7.29.10",
+      "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.29.10.tgz",
+      "integrity": "sha512-EMCx3AGZ3WfAl6ht7AyQoPm2Lh+BGYEMdc4Q6Hf7uSCDOZFuLq44qNwL+iaim8VlyYhRAo4X43+weadK8ZB4Yg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "string-width": "^5.1.2",
-        "string-width-cjs": "npm:string-width@^4.2.0",
-        "strip-ansi": "^7.0.1",
-        "strip-ansi-cjs": "npm:strip-ansi@^6.0.1",
-        "wrap-ansi": "^8.1.0",
-        "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0"
+        "@babel/template": "^7.29.7",
+        "@babel/types": "^7.29.8"
       },
       "engines": {
-        "node": ">=12"
+        "node": ">=6.9.0"
       }
     },
-    "node_modules/@isaacs/cliui/node_modules/ansi-regex": {
-      "version": "6.1.0",
-      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.1.0.tgz",
-      "integrity": "sha512-7HSX4QQb4CspciLpVFwyRe79O3xsIZDDLER21kERQ71oaPodF8jL725AgJMFAYbooIqolJoRLuM81SpeUkpkvA==",
+    "node_modules/@babel/parser": {
+      "version": "7.29.9",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.9.tgz",
+      "integrity": "sha512-CjXrNHTnvqBVqHgdBysY3vk2T8tpJHb5/RMeHJBTyVa9xgugCB0CJTx/3oO8RV2QRQP391RWpB7D6hLjm8V9uA==",
       "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.29.8"
+      },
+      "bin": {
+        "parser": "bin/babel-parser.js"
+      },
       "engines": {
-        "node": ">=12"
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@babel/runtime": {
+      "version": "7.29.10",
+      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.10.tgz",
+      "integrity": "sha512-NpugTzbKgGrNe45Ui32cN8vCFFMxVtP/9rtfwv0nP5FRDAjvYBxJcLVpYA9mr1jxP6cnIT7x9LUzuDTbWYYNRA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/template": {
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.29.7.tgz",
+      "integrity": "sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/code-frame": "^7.29.7",
+        "@babel/parser": "^7.29.7",
+        "@babel/types": "^7.29.7"
       },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-regex?sponsor=1"
+      "engines": {
+        "node": ">=6.9.0"
       }
     },
-    "node_modules/@isaacs/cliui/node_modules/strip-ansi": {
-      "version": "7.1.0",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.0.tgz",
-      "integrity": "sha512-iq6eVVI64nQQTRYq2KtEg2d2uU7LElhTJwsH4YzIHZshxlgZms/wIc4VoDQTlG/IvVIrBKG06CrZnp0qv7hkcQ==",
+    "node_modules/@babel/traverse": {
+      "version": "7.29.10",
+      "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.29.10.tgz",
+      "integrity": "sha512-B3lYAs2nkKskbgQ1nfy8Ma9ao9Q1rntTAQHrzzyDuj+TSO+X3le6PfWwqDvodsb+OumE10eMFfuMCTQSQ5iuIQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "ansi-regex": "^6.0.1"
+        "@babel/code-frame": "^7.29.7",
+        "@babel/generator": "^7.29.8",
+        "@babel/helper-globals": "^7.29.7",
+        "@babel/parser": "^7.29.9",
+        "@babel/template": "^7.29.7",
+        "@babel/types": "^7.29.8",
+        "debug": "^4.3.1"
       },
       "engines": {
-        "node": ">=12"
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/types": {
+      "version": "7.29.8",
+      "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz",
+      "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-string-parser": "^7.29.7",
+        "@babel/helper-validator-identifier": "^7.29.7"
       },
-      "funding": {
-        "url": "https://github.com/chalk/strip-ansi?sponsor=1"
+      "engines": {
+        "node": ">=6.9.0"
       }
     },
-    "node_modules/@mongodb-js/saslprep": {
-      "version": "1.1.9",
-      "resolved": "https://registry.npmjs.org/@mongodb-js/saslprep/-/saslprep-1.1.9.tgz",
-      "integrity": "sha512-tVkljjeEaAhCqTzajSdgbQ6gE6f3oneVwa3iXR6csiEwXXOFsiC6Uh9iAjAhXPtqa/XMDHWjjeNH/77m/Yq2dw==",
+    "node_modules/@csstools/color-helpers": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/@csstools/color-helpers/-/color-helpers-5.1.0.tgz",
+      "integrity": "sha512-S11EXWJyy0Mz5SYvRmY8nJYTFFd1LCNV+7cXyAgQtOOuzb4EsgfqDufL+9esx72/eLhsRdGZwaldu/h+E4t4BA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT-0",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@csstools/css-calc": {
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/@csstools/css-calc/-/css-calc-2.1.4.tgz",
+      "integrity": "sha512-3N8oaj+0juUw/1H3YwmDDJXCgTB1gKU6Hc/bB502u9zR0q2vd786XJH9QfrKIEgFlZmhZiq6epXl4rHqhzsIgQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@csstools/css-parser-algorithms": "^3.0.5",
+        "@csstools/css-tokenizer": "^3.0.4"
+      }
+    },
+    "node_modules/@csstools/css-color-parser": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/@csstools/css-color-parser/-/css-color-parser-3.1.0.tgz",
+      "integrity": "sha512-nbtKwh3a6xNVIp/VRuXV64yTKnb1IjTAEEh3irzS+HkKjAOYLTGNb9pmVNntZ8iVBHcWDA2Dof0QtPgFI1BaTA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
       "dependencies": {
-        "sparse-bitfield": "^3.0.3"
+        "@csstools/color-helpers": "^5.1.0",
+        "@csstools/css-calc": "^2.1.4"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@csstools/css-parser-algorithms": "^3.0.5",
+        "@csstools/css-tokenizer": "^3.0.4"
       }
     },
-    "node_modules/@next/env": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/@next/env/-/env-14.2.15.tgz",
-      "integrity": "sha512-S1qaj25Wru2dUpcIZMjxeMVSwkt8BK4dmWHHiBuRstcIyOsMapqT4A4jSB6onvqeygkSSmOkyny9VVx8JIGamQ=="
+    "node_modules/@csstools/css-parser-algorithms": {
+      "version": "3.0.5",
+      "resolved": "https://registry.npmjs.org/@csstools/css-parser-algorithms/-/css-parser-algorithms-3.0.5.tgz",
+      "integrity": "sha512-DaDeUkXZKjdGhgYaHNJTV9pV7Y9B3b644jCLs9Upc3VeNGg6LWARAT6O+Q+/COo+2gg/bM5rhpMAtf70WqfBdQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@csstools/css-tokenizer": "^3.0.4"
+      }
     },
-    "node_modules/@next/eslint-plugin-next": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/@next/eslint-plugin-next/-/eslint-plugin-next-14.2.15.tgz",
-      "integrity": "sha512-pKU0iqKRBlFB/ocOI1Ip2CkKePZpYpnw5bEItEkuZ/Nr9FQP1+p7VDWr4VfOdff4i9bFmrOaeaU1bFEyAcxiMQ==",
+    "node_modules/@csstools/css-tokenizer": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@csstools/css-tokenizer/-/css-tokenizer-3.0.4.tgz",
+      "integrity": "sha512-Vd/9EVDiu6PPJt9yAh6roZP6El1xHrdvIVGjyBsHR0RYwNHgL7FJPyIIW4fANJNG6FtyZfvlRPpFI4ZM/lubvw==",
       "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@emnapi/runtime": {
+      "version": "1.11.3",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.3.tgz",
+      "integrity": "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA==",
+      "license": "MIT",
+      "optional": true,
       "dependencies": {
-        "glob": "10.3.10"
+        "tslib": "^2.4.0"
       }
     },
-    "node_modules/@next/swc-darwin-arm64": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-14.2.15.tgz",
-      "integrity": "sha512-Rvh7KU9hOUBnZ9TJ28n2Oa7dD9cvDBKua9IKx7cfQQ0GoYUwg9ig31O2oMwH3wm+pE3IkAQ67ZobPfEgurPZIA==",
+    "node_modules/@esbuild/aix-ppc64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.2.tgz",
+      "integrity": "sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==",
       "cpu": [
-        "arm64"
+        "ppc64"
       ],
+      "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
-        "darwin"
+        "aix"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">=18"
       }
     },
-    "node_modules/@next/swc-darwin-x64": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-14.2.15.tgz",
-      "integrity": "sha512-5TGyjFcf8ampZP3e+FyCax5zFVHi+Oe7sZyaKOngsqyaNEpOgkKB3sqmymkZfowy3ufGA/tUgDPPxpQx931lHg==",
+    "node_modules/@esbuild/android-arm": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.2.tgz",
+      "integrity": "sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==",
       "cpu": [
-        "x64"
+        "arm"
       ],
+      "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
-        "darwin"
+        "android"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">=18"
       }
     },
-    "node_modules/@next/swc-linux-arm64-gnu": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-14.2.15.tgz",
-      "integrity": "sha512-3Bwv4oc08ONiQ3FiOLKT72Q+ndEMyLNsc/D3qnLMbtUYTQAmkx9E/JRu0DBpHxNddBmNT5hxz1mYBphJ3mfrrw==",
+    "node_modules/@esbuild/android-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.2.tgz",
+      "integrity": "sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==",
       "cpu": [
         "arm64"
       ],
+      "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
-        "linux"
+        "android"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">=18"
       }
     },
-    "node_modules/@next/swc-linux-arm64-musl": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-14.2.15.tgz",
-      "integrity": "sha512-k5xf/tg1FBv/M4CMd8S+JL3uV9BnnRmoe7F+GWC3DxkTCD9aewFRH1s5rJ1zkzDa+Do4zyN8qD0N8c84Hu96FQ==",
+    "node_modules/@esbuild/android-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.2.tgz",
+      "integrity": "sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==",
       "cpu": [
-        "arm64"
+        "x64"
       ],
+      "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
-        "linux"
+        "android"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">=18"
       }
     },
-    "node_modules/@next/swc-linux-x64-gnu": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-14.2.15.tgz",
-      "integrity": "sha512-kE6q38hbrRbKEkkVn62reLXhThLRh6/TvgSP56GkFNhU22TbIrQDEMrO7j0IcQHcew2wfykq8lZyHFabz0oBrA==",
+    "node_modules/@esbuild/darwin-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.2.tgz",
+      "integrity": "sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==",
       "cpu": [
-        "x64"
+        "arm64"
       ],
+      "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
-        "linux"
+        "darwin"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">=18"
       }
     },
-    "node_modules/@next/swc-linux-x64-musl": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-14.2.15.tgz",
-      "integrity": "sha512-PZ5YE9ouy/IdO7QVJeIcyLn/Rc4ml9M2G4y3kCM9MNf1YKvFY4heg3pVa/jQbMro+tP6yc4G2o9LjAz1zxD7tQ==",
+    "node_modules/@esbuild/darwin-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.2.tgz",
+      "integrity": "sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==",
       "cpu": [
         "x64"
       ],
+      "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
-        "linux"
+        "darwin"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">=18"
       }
     },
-    "node_modules/@next/swc-win32-arm64-msvc": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-14.2.15.tgz",
-      "integrity": "sha512-2raR16703kBvYEQD9HNLyb0/394yfqzmIeyp2nDzcPV4yPjqNUG3ohX6jX00WryXz6s1FXpVhsCo3i+g4RUX+g==",
+    "node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.2.tgz",
+      "integrity": "sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==",
       "cpu": [
         "arm64"
       ],
+      "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
-        "win32"
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.2.tgz",
+      "integrity": "sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.2.tgz",
+      "integrity": "sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.2.tgz",
+      "integrity": "sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ia32": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.2.tgz",
+      "integrity": "sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-loong64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.2.tgz",
+      "integrity": "sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-mips64el": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.2.tgz",
+      "integrity": "sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ppc64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.2.tgz",
+      "integrity": "sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-riscv64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.2.tgz",
+      "integrity": "sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-s390x": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.2.tgz",
+      "integrity": "sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.2.tgz",
+      "integrity": "sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.2.tgz",
+      "integrity": "sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.2.tgz",
+      "integrity": "sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.2.tgz",
+      "integrity": "sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.2.tgz",
+      "integrity": "sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openharmony-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.2.tgz",
+      "integrity": "sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/sunos-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.2.tgz",
+      "integrity": "sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.2.tgz",
+      "integrity": "sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-ia32": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.2.tgz",
+      "integrity": "sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.2.tgz",
+      "integrity": "sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@eslint-community/eslint-utils": {
+      "version": "4.10.1",
+      "resolved": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.10.1.tgz",
+      "integrity": "sha512-cuadcxVFE8sDK6iWJbs8Sn0av2Nrh2QSGQhVlBW9AaAHqHwjWsZHT8LJ4hFGPh7ASBV2deFdM7H/DPjulmh8rg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "eslint-visitor-keys": "^3.4.3"
+      },
+      "engines": {
+        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^6.0.0 || ^7.0.0 || >=8.0.0"
+      }
+    },
+    "node_modules/@eslint-community/eslint-utils/node_modules/eslint-visitor-keys": {
+      "version": "3.4.3",
+      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz",
+      "integrity": "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/@eslint-community/regexpp": {
+      "version": "4.12.2",
+      "resolved": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.12.2.tgz",
+      "integrity": "sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^12.0.0 || ^14.0.0 || >=16.0.0"
+      }
+    },
+    "node_modules/@eslint/config-array": {
+      "version": "0.21.2",
+      "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.21.2.tgz",
+      "integrity": "sha512-nJl2KGTlrf9GjLimgIru+V/mzgSK0ABCDQRvxw5BjURL7WfH5uoWmizbH7QB6MmnMBd8cIC9uceWnezL1VZWWw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@eslint/object-schema": "^2.1.7",
+        "debug": "^4.3.1",
+        "minimatch": "^3.1.5"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
+    "node_modules/@eslint/config-helpers": {
+      "version": "0.4.2",
+      "resolved": "https://registry.npmjs.org/@eslint/config-helpers/-/config-helpers-0.4.2.tgz",
+      "integrity": "sha512-gBrxN88gOIf3R7ja5K9slwNayVcZgK6SOUORm2uBzTeIEfeVaIhOpCtTox3P6R7o2jLFwLFTLnC7kU/RGcYEgw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@eslint/core": "^0.17.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
+    "node_modules/@eslint/core": {
+      "version": "0.17.0",
+      "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.17.0.tgz",
+      "integrity": "sha512-yL/sLrpmtDaFEiUj1osRP4TI2MDz1AddJL+jZ7KSqvBuliN4xqYY54IfdN8qD8Toa6g1iloph1fxQNkjOxrrpQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@types/json-schema": "^7.0.15"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
+    "node_modules/@eslint/eslintrc": {
+      "version": "3.3.7",
+      "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.3.7.tgz",
+      "integrity": "sha512-F42g89Qd5oAWtp0k0nnSrjziAKza7w8SVT4mStc18LZMaRb4J1HQAHLCalEtDCxrTuksx7NU9qsmeLwpOfPqWw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ajv": "^6.14.0",
+        "debug": "^4.3.2",
+        "espree": "^10.0.1",
+        "globals": "^14.0.0",
+        "ignore": "^5.2.0",
+        "import-fresh": "^3.2.1",
+        "js-yaml": "^4.3.2",
+        "minimatch": "^3.1.5",
+        "strip-json-comments": "^3.1.1"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/@eslint/js": {
+      "version": "9.39.5",
+      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.39.5.tgz",
+      "integrity": "sha512-QywQuszQh77pIXCsq998c8hbhSTI/azTty1Z6N53dmAudKHhy573j3yvRLsX2BSp8YpLtoCEG8E9DJe+8zUh4A==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "url": "https://eslint.org/donate"
+      }
+    },
+    "node_modules/@eslint/object-schema": {
+      "version": "2.1.7",
+      "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.7.tgz",
+      "integrity": "sha512-VtAOaymWVfZcmZbp6E2mympDIHvyjXs/12LqWYjVw6qjrfF+VK+fyG33kChz3nnK+SU5/NeHOqrTEHS8sXO3OA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
+    "node_modules/@eslint/plugin-kit": {
+      "version": "0.4.1",
+      "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.4.1.tgz",
+      "integrity": "sha512-43/qtrDUokr7LJqoF2c3+RInu/t4zfrpYdoSDfYyhg52rwLV6TnOvdG4fXm7IkSB3wErkcmJS9iEhjVtOSEjjA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@eslint/core": "^0.17.0",
+        "levn": "^0.4.1"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
+    "node_modules/@humanfs/core": {
+      "version": "0.19.2",
+      "resolved": "https://registry.npmjs.org/@humanfs/core/-/core-0.19.2.tgz",
+      "integrity": "sha512-UhXNm+CFMWcbChXywFwkmhqjs3PRCmcSa/hfBgLIb7oQ5HNb1wS0icWsGtSAUNgefHeI+eBrA8I1fxmbHsGdvA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@humanfs/types": "^0.15.0"
+      },
+      "engines": {
+        "node": ">=18.18.0"
+      }
+    },
+    "node_modules/@humanfs/node": {
+      "version": "0.16.8",
+      "resolved": "https://registry.npmjs.org/@humanfs/node/-/node-0.16.8.tgz",
+      "integrity": "sha512-gE1eQNZ3R++kTzFUpdGlpmy8kDZD/MLyHqDwqjkVQI0JMdI1D51sy1H958PNXYkM2rAac7e5/CnIKZrHtPh3BQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@humanfs/core": "^0.19.2",
+        "@humanfs/types": "^0.15.0",
+        "@humanwhocodes/retry": "^0.4.0"
+      },
+      "engines": {
+        "node": ">=18.18.0"
+      }
+    },
+    "node_modules/@humanfs/types": {
+      "version": "0.15.0",
+      "resolved": "https://registry.npmjs.org/@humanfs/types/-/types-0.15.0.tgz",
+      "integrity": "sha512-ZZ1w0aoQkwuUuC7Yf+7sdeaNfqQiiLcSRbfI08oAxqLtpXQr9AIVX7Ay7HLDuiLYAaFPu8oBYNq/QIi9URHJ3Q==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=18.18.0"
+      }
+    },
+    "node_modules/@humanwhocodes/module-importer": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz",
+      "integrity": "sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==",
+      "dev": true,
+      "engines": {
+        "node": ">=12.22"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/nzakas"
+      }
+    },
+    "node_modules/@humanwhocodes/retry": {
+      "version": "0.4.3",
+      "resolved": "https://registry.npmjs.org/@humanwhocodes/retry/-/retry-0.4.3.tgz",
+      "integrity": "sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=18.18"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/nzakas"
+      }
+    },
+    "node_modules/@img/colour": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@img/colour/-/colour-1.1.0.tgz",
+      "integrity": "sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==",
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@img/sharp-darwin-arm64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.5.tgz",
+      "integrity": "sha512-QRUlFQ0WxvdWyqqG/WtI3iupfD5rBzmCHXSdPsY91sAtVtTo7Q4cb6zOccZ3gqEqkr0f1As1ehLqmEpDsRf+lg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-arm64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-darwin-x64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.5.tgz",
+      "integrity": "sha512-+BR255RhDlpygUpOc/Jdt1nT6DQ3XG/ERo5wbcdOf5Q320dKtPCKPLR1LJs9VGXRaMa8l1uUa0tkCNOXiAxZUw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-x64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-freebsd-wasm32": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.5.tgz",
+      "integrity": "sha512-Y/z91nEZ4uIBX5X3nfTovjU9lHNKFYbL2lpHCLVNmXQK03VIZvXBBt0KxbPGp2SdGSF+2mQU4e+hQaWOt86iAw==",
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "dependencies": {
+        "@img/sharp-wasm32": "0.35.5"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-darwin-arm64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.4.tgz",
+      "integrity": "sha512-5R89nBYiRdUlSWJxPhO+GVtaXzXSxKnRu/xqMn3KTA3L9EB9Oy/P+Nn2f2vlhPuUdy/Zusb2DarbyTpGCfEDuw==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-darwin-x64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.4.tgz",
+      "integrity": "sha512-iR2OKH80yi0U+dUplyh3/xdpFvps6YkCwsXenIJxqxR1v9o+xtKTGbS9H7cps+2Vxjc8B1j96p75NmTGjIhtpQ==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-arm": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.4.tgz",
+      "integrity": "sha512-LmRtTsOHuvM2+wlO2Db37dx5MiZhB0FvSunciw48YjdOkZz9KAiRbm8ujeMOA1INqmei5NapFxYEK1D1ZSidmw==",
+      "cpu": [
+        "arm"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-arm64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.4.tgz",
+      "integrity": "sha512-Y3dgX/6lE2QhQb+Gxy0WZxfg9MEm/JBjamZpS2IklP7xIQoKN4hzAm7KcMVGtaVDt3neE9OKBC7vAfonA/Lr1A==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-ppc64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.4.tgz",
+      "integrity": "sha512-Le6boB8Tai0Nis+gIxIpKx68UDVVIqdR8Tin5Yf1z2LJJQLDJvCDRqRu+jC2qCoD+eIomonmOwB4smBRxfVpYQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-riscv64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.4.tgz",
+      "integrity": "sha512-aHkkIEHPRdQEegJN20MLmGtxYD9R2wQr3Cwpddnu5+YKMt6Uzax7S9h5gpZTo8wyrGuZSlfQ63OevL5mTyOC7Q==",
+      "cpu": [
+        "riscv64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-s390x": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.4.tgz",
+      "integrity": "sha512-ra/mB6MikESDUO7Yg+Mi95bFBb9GsObURuhnOv3OqknjGe9sZrG8tCe9q0xSIGrtLgvgw0gKnFWcK4blSgQOuQ==",
+      "cpu": [
+        "s390x"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-x64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.4.tgz",
+      "integrity": "sha512-GJ//SSXbnwSDes02umB3nDJLFcQzw8a18V8fyhqr6tV515tOEMdImjjxj1AoafMRz56F3PHgftnj1QEKSU1zkw==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linuxmusl-arm64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.4.tgz",
+      "integrity": "sha512-hvulFwtjUcagsis6BBxHwGFwWoNZjgYmULGVrZcyfNbjA8hKILbRxGg15/7w5HDyXHXUos/j6baAWqnCyQ2DWA==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linuxmusl-x64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.4.tgz",
+      "integrity": "sha512-6zXKeE/p39I1AmA3cJG35eyBGNqNddLnUXjhwBnsGjFPWqf5VKkDBEqaEkPDoTEtkxwi2vv8Tcr2mDyP4So7Fg==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-linux-arm": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.5.tgz",
+      "integrity": "sha512-LEaXK2WdXVK5ykcw0buWyPMsmLLL2vpHLD6yrNSW+JGEL3BZPA4tpKN6iaMc4AxTTAoaX/sU1rOL51lcIz48ZQ==",
+      "cpu": [
+        "arm"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-arm64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.5.tgz",
+      "integrity": "sha512-LYVx5JTsOM2CBzmxreh+nl64/3H6Xb09iSLknqH47z2T2DFFxDeFLP5y4dJwe6H7uGQlHPyEEtIqyo3DYsRwdQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-ppc64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.5.tgz",
+      "integrity": "sha512-QVxAAq8evVRI9ia2vqgwrmWucn5Dfv+JdWzj75pD8omHLPSP7f8p20O8jxzjCcuCEQEOtYOZUmX1hkiZ0kdevA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-ppc64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-riscv64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.5.tgz",
+      "integrity": "sha512-LtdreXguaavKODPIfzJ4kffx7UNt1omwtK0rch4EBbbSTXPnxWmYSayXdLJw0fJzQ97kHt1gL/yh4tvU+nCyRQ==",
+      "cpu": [
+        "riscv64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-riscv64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-s390x": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.5.tgz",
+      "integrity": "sha512-UZasTOFiYzotTsGOCu42BfUzP6Tu6Do/947iRm1RsLKvlllxwGcn4RN27LibGWceix4Y+Pmw3jsnTcCQIgWjqA==",
+      "cpu": [
+        "s390x"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-s390x": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-x64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.5.tgz",
+      "integrity": "sha512-SxFtLTeJInhAA9Q836kux2vZNeOBQEx658qvbboZScr0wIARym3IcGmW7KpVD5sbVg0Ojy+udFQdayYIZyoNog==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-x64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linuxmusl-arm64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.5.tgz",
+      "integrity": "sha512-9HbMclmI1zlNkFRs3z9/eBtDjfD0sGlrX1z6b1qwmiFY5ElDLh4BC0LPBdVp7z1DXFiKlIcznf+ZlsuZzLxQqg==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linuxmusl-x64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.5.tgz",
+      "integrity": "sha512-4KOphqB035HrVdqLZfCgMzzERrQkkzOwRhl4OAkRO1YCldbaFjySXMaK534Mo0V+LndnlJk+sbUyLeU0ULyD1A==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-wasm32": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.5.tgz",
+      "integrity": "sha512-Ptsga1su4tQx+LLF1ECS9U6nz5kmrXKo6XVbtR48Ke3ZRxxgaWBu7IDtEe1quo8hiupwm6WFqxVlXaSf7IINGQ==",
+      "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/runtime": "^1.11.3"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-webcontainers-wasm32": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.5.tgz",
+      "integrity": "sha512-hfhF/FmoQyTUkA0bIKFOtw536BQSeBMe6BF6QyWlrPxT754+TFLaZ7sKKTfvvM0yJgKgaYTwnFCIZ/GuDw5SUA==",
+      "cpu": [
+        "wasm32"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "dependencies": {
+        "@img/sharp-wasm32": "0.35.5"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-arm64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.5.tgz",
+      "integrity": "sha512-X4t7g+7ZA5DKblCBEXGjUqqemj4vczING/5viFwAL8h4N3qYeyjwdCvRLHi4EdOUI+2Z7UFlp1VM+p/AuEtm6Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-ia32": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.5.tgz",
+      "integrity": "sha512-5Zm82LoBc43nhwNybZlG7Y1KO//Zhsn306fQl29ZOuStHLGTo3BWL83q3cznX0poxSAMuYL1On/BHBxkBeKr6A==",
+      "cpu": [
+        "ia32"
+      ],
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-x64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.5.tgz",
+      "integrity": "sha512-x76eH0vEiHlcMQu8Y8IenntaACtddpT6W0wmXtWrnKcnKI7ME5DdgqhAD6SEWOEl1v2zDvkZDhFA9KnURwpfqg==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@jridgewell/gen-mapping": {
+      "version": "0.3.13",
+      "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
+      "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.0",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
+    "node_modules/@jridgewell/remapping": {
+      "version": "2.3.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz",
+      "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.5",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
+    "node_modules/@jridgewell/resolve-uri": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
+      "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.6.0.tgz",
+      "integrity": "sha512-T7jf+5zgsZHwNJ4lvQ7/aezbyk0nNX+zJVWpmHA7VYsEx7a7qr5Rg5IbtJFqkgze5Y2sruq1RUY8Q837Od7iFw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@jridgewell/trace-mapping": {
+      "version": "0.3.31",
+      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
+      "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/resolve-uri": "^3.1.0",
+        "@jridgewell/sourcemap-codec": "^1.4.14"
+      }
+    },
+    "node_modules/@mongodb-js/saslprep": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/@mongodb-js/saslprep/-/saslprep-1.6.0.tgz",
+      "integrity": "sha512-19jGXfpctLDJUELLUZGJ5BllcLT7rHdF+gTTaN2jzqu0bGkUhpdcYtgK2Vux+g3zuBAa0TM/W666QMIjYhYujw==",
+      "license": "MIT",
+      "dependencies": {
+        "sparse-bitfield": "^3.0.3"
+      }
+    },
+    "node_modules/@next/env": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/@next/env/-/env-16.4.0.tgz",
+      "integrity": "sha512-pyLlT5oafGlX8X7xjgGNXz5dNIDSxREm+qD6i9VLSZiZFopA/XWl8NM/KPmLx/8EG/++c49iid3gNWSQW1+2dQ==",
+      "license": "MIT"
+    },
+    "node_modules/@next/eslint-plugin-next": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/@next/eslint-plugin-next/-/eslint-plugin-next-16.4.0.tgz",
+      "integrity": "sha512-ffeflB/dL8RrvWejQximw01pOpKHN692Y3FjDB82DCd0YVvXvBD6vY7mcZp27yvSVFVM6wA73xVodEKF4spizA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@eslint-community/eslint-utils": "4.9.1",
+        "fast-glob": "3.3.1"
+      }
+    },
+    "node_modules/@next/eslint-plugin-next/node_modules/@eslint-community/eslint-utils": {
+      "version": "4.9.1",
+      "resolved": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.9.1.tgz",
+      "integrity": "sha512-phrYmNiYppR7znFEdqgfWHXR6NCkZEK7hwWDHZUjit/2/U0r6XvkDl0SYnoM51Hq7FhCGdLDT6zxCCOY1hexsQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "eslint-visitor-keys": "^3.4.3"
+      },
+      "engines": {
+        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^6.0.0 || ^7.0.0 || >=8.0.0"
+      }
+    },
+    "node_modules/@next/eslint-plugin-next/node_modules/eslint-visitor-keys": {
+      "version": "3.4.3",
+      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz",
+      "integrity": "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/@next/eslint-plugin-next/node_modules/fast-glob": {
+      "version": "3.3.1",
+      "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.1.tgz",
+      "integrity": "sha512-kNFPyjhh5cKjrUltxs+wFx+ZkbRaxxmZ+X0ZU31SOsxCEtP9VPgtq2teZw1DebupL5GmDaNQ6yKMMVcM41iqDg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@nodelib/fs.stat": "^2.0.2",
+        "@nodelib/fs.walk": "^1.2.3",
+        "glob-parent": "^5.1.2",
+        "merge2": "^1.3.0",
+        "micromatch": "^4.0.4"
+      },
+      "engines": {
+        "node": ">=8.6.0"
+      }
+    },
+    "node_modules/@next/eslint-plugin-next/node_modules/glob-parent": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz",
+      "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "is-glob": "^4.0.1"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/@next/swc-darwin-arm64": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.4.0.tgz",
+      "integrity": "sha512-yyZ+9MgViAKLLb5l1gPBGjRwnq3teNLb5Zx6JEw8LzNSTjlsnp+baUHFxTgl7PpjCmKf48VQfyipG1eBflb48Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 10"
+      }
+    },
+    "node_modules/@next/swc-darwin-x64": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.4.0.tgz",
+      "integrity": "sha512-RePEEejEj1Auf5s9qEcG0JbcDP3ceNUS/ofNX8AhxzgIjTVlZIHMatlp16YplcSMpsVo/ZMQHJTjbMYJznjGUg==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 10"
+      }
+    },
+    "node_modules/@next/swc-linux-arm64-gnu": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.4.0.tgz",
+      "integrity": "sha512-HhsyCqd+NpmvDDVY/LqkAN24f+QVvXh3ie+PfcwKinWL2Mu826JymQxJXGjAIfmJ4VlHjp4Pe/nZtXtUoEMAqw==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 10"
+      }
+    },
+    "node_modules/@next/swc-linux-arm64-musl": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.4.0.tgz",
+      "integrity": "sha512-sN9Pf+Zh+RpZAOmbR7d8KAA8T61CVhawtbEJ2Bk6QrRzx6Z/6haaF4UiwBzytM96GRRRWZh9/WALIEO3npMamA==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 10"
+      }
+    },
+    "node_modules/@next/swc-linux-x64-gnu": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.4.0.tgz",
+      "integrity": "sha512-D5M5xLWQVd1CvR+L7BickM1weRfmM41x3L1NWcnKY/oyJJqr1qwaCgmu3dMAhLBOMdZwSuDCRV6DJRRpiUkbDQ==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 10"
+      }
+    },
+    "node_modules/@next/swc-linux-x64-musl": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.4.0.tgz",
+      "integrity": "sha512-8d5WLS6a9YalqpOgXdlbvonFu+sIgjA+CO6tGzetrpPVcUL56foa7B7664h41rAlbLi5fJwK4vWji3zf4QDy+w==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 10"
+      }
+    },
+    "node_modules/@next/swc-win32-arm64-msvc": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.4.0.tgz",
+      "integrity": "sha512-sQuOIiW3snb48UwrBcDMvFA/u03qtw2LeuSIxFIQ9AJuW9UG/4Ddsfo+eV73PnZwBhyncMtsKVh7PrzMol2/fA==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 10"
+      }
+    },
+    "node_modules/@next/swc-win32-x64-msvc": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.4.0.tgz",
+      "integrity": "sha512-6/33lCuxpdHUy27RegyGM/5uTpF7YZd3UR4D0gpkOA/tWY5YR7msbQjqPgCZmSmxrrTLGCXYA4A8vT2H5DPGTQ==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 10"
+      }
+    },
+    "node_modules/@nodelib/fs.scandir": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz",
+      "integrity": "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==",
+      "dev": true,
+      "dependencies": {
+        "@nodelib/fs.stat": "2.0.5",
+        "run-parallel": "^1.1.9"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/@nodelib/fs.stat": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz",
+      "integrity": "sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==",
+      "dev": true,
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/@nodelib/fs.walk": {
+      "version": "1.2.8",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz",
+      "integrity": "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==",
+      "dev": true,
+      "dependencies": {
+        "@nodelib/fs.scandir": "2.1.5",
+        "fastq": "^1.6.0"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/@nolyfill/is-core-module": {
+      "version": "1.0.39",
+      "resolved": "https://registry.npmjs.org/@nolyfill/is-core-module/-/is-core-module-1.0.39.tgz",
+      "integrity": "sha512-nn5ozdjYQpUCZlWGuxcJY/KpxkWQs4DcbMCmKojjyrYDEAGy4Ce19NN4v5MduafTwJlbKc99UA8YhSVqq9yPZA==",
+      "dev": true,
+      "engines": {
+        "node": ">=12.4.0"
+      }
+    },
+    "node_modules/@oxc-project/types": {
+      "version": "0.153.0",
+      "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.153.0.tgz",
+      "integrity": "sha512-jSNrRIyvPVLL5E1z/tS5zLAprosGz/FuI1PWwEOz59j3E4TTTzSpqKb/RDGqJhhW0QHYISGXxq582wGx6T11Tw==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "funding": {
+        "url": "https://github.com/sponsors/oxc-project"
+      }
+    },
+    "node_modules/@pkgr/core": {
+      "version": "0.1.1",
+      "resolved": "https://registry.npmjs.org/@pkgr/core/-/core-0.1.1.tgz",
+      "integrity": "sha512-cq8o4cWH0ibXh9VGi5P20Tu9XF/0fFXl9EUinr9QfTM7a7p0oTA4iJRCQWppXR1Pg8dSM0UCItCkPwsk9qWWYA==",
+      "dev": true,
+      "engines": {
+        "node": "^12.20.0 || ^14.18.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/unts"
+      }
+    },
+    "node_modules/@rolldown/binding-android-arm-eabi": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.13.tgz",
+      "integrity": "sha512-Vu/NICrgdRvUOeaJZIyB2FP63s6fO/4ud5l8dXmxDx9yDyn+mN0y+gsvsVviSli+T361Aqo0h46EuMoobrwawA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-android-arm64": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.13.tgz",
+      "integrity": "sha512-6LEoIrGy5vvCd2boNnv2soPSUZj/PRvhp8R/t9KlX+mIZxThIE/ZqxrGXxmuNX0FuvQFvLdZr7S4HrYpYBVhEQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-darwin-arm64": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.13.tgz",
+      "integrity": "sha512-CaJSRzlQ6Q+zkDMVA9OkVxBjVoPRCDEE3v0FSJ9kIQBgRjFApA3Si4ijhbNVUji7ZJt+PfO0e46qy4nPInHUPA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-darwin-x64": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.13.tgz",
+      "integrity": "sha512-e4r340I5hxSzJkD3YJBxgzq/rJ3wwxwdLLb2FPt1Zpyem20nrQPT11DDEEkazwxaHumH8wpglsp/Ozgj/wT6mw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-freebsd-x64": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.13.tgz",
+      "integrity": "sha512-hoBWDZ4/K/mJKVMbsgUd1jfpA2DiOrJ54mpegObU9TBHBBrtX4FLIXJJQRDPZ/2Dn91GvPob+Z2hwKJzf4E5SQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm-gnueabihf": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.13.tgz",
+      "integrity": "sha512-oF9fZu3vTWnTiVAkDFxU9PJLt1nh20K9RRpuHsR7ZnE2L7XookBbDBVLojCVSLGbvtSlxeUNnjAj6DbNsKyzbg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm64-gnu": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.13.tgz",
+      "integrity": "sha512-DTpb/+jMiqWMPgphn4ksW1zW+XLJ6dJJ9FMvnIk9I291LhCctMPhMYJrP5t9p6C9qa3KXadDdUEZHBaPh3kNxQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm64-musl": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.13.tgz",
+      "integrity": "sha512-xU+Kvv9N2A3SY35zFh1FWWNjxbadE/BKeqnkXe7vScU4GZsw757BlVmDLITZEq8DPpk6m7uoDYkK7P+x/uU5Ow==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-ppc64-gnu": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.13.tgz",
+      "integrity": "sha512-XMk/hnhh25oQ756Lclb1Q11h4ll0xC0Esa5w4Vzp+mAE2S3AGJgeM0SonrIgY8fHhjarb6hcoTuwoFG0VVP2ig==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-s390x-gnu": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.13.tgz",
+      "integrity": "sha512-U1BoTHYmlywE2n3HUWjzZ+8EQsKr+OwpxYuDWaubx42tUL8QSL7nOqRz/NVHanibbFP3M1Rxuprz/wNcbMKjqw==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-x64-gnu": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.13.tgz",
+      "integrity": "sha512-J4cm80Pc6wEwV5AZ42o62sIQgDk+Y7R2s646jIwuvO+4V46QB58N4vVuMPWCBaNgursXLpmUWJV//WQAkPvHBQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-x64-musl": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.13.tgz",
+      "integrity": "sha512-W0euZS40U4V6JkmEnVCIX9mcsL6cbXQ4X8c2w+MMOIjFg68TXUW+u3RT+2e1t1pv9mg/EP3pDtK3POXdQ7Rxyw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-openharmony-arm64": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.13.tgz",
+      "integrity": "sha512-do/AF/4n9MRshia3a5aXoy8xM2c6mgfT6D7H/dY6my5z+hfCIR4ab7mk4IRj++nsEQpKy39kd0DQnDq+r692tw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
       ],
+      "peer": true,
       "engines": {
-        "node": ">= 10"
+        "node": "^20.19.0 || >=22.12.0"
       }
     },
-    "node_modules/@next/swc-win32-ia32-msvc": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-ia32-msvc/-/swc-win32-ia32-msvc-14.2.15.tgz",
-      "integrity": "sha512-fyTE8cklgkyR1p03kJa5zXEaZ9El+kDNM5A+66+8evQS5e/6v0Gk28LqA0Jet8gKSOyP+OTm/tJHzMlGdQerdQ==",
+    "node_modules/@rolldown/binding-win32-arm64-msvc": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.13.tgz",
+      "integrity": "sha512-6FtUf2cJZobutJdxnGYX8z0vtbgqU0b2v8vfBhkXb9wp2MppMFtkunE+IaOntyi01rkIQoPW2GHABtfzsC0BRQ==",
       "cpu": [
-        "ia32"
+        "arm64"
       ],
+      "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "win32"
       ],
+      "peer": true,
       "engines": {
-        "node": ">= 10"
+        "node": "^20.19.0 || >=22.12.0"
       }
     },
-    "node_modules/@next/swc-win32-x64-msvc": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-14.2.15.tgz",
-      "integrity": "sha512-SzqGbsLsP9OwKNUG9nekShTwhj6JSB9ZLMWQ8g1gG6hdE5gQLncbnbymrwy2yVmH9nikSLYRYxYMFu78Ggp7/g==",
+    "node_modules/@rolldown/binding-win32-x64-msvc": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.13.tgz",
+      "integrity": "sha512-UKhFaZTeTcbKrb3iU82m17jVcPEAoqDkCN5MBqgPyZSwp/cQmib21crTS0DdH7T1B7wZRWEI89YQAOJMet5yhg==",
       "cpu": [
         "x64"
       ],
+      "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "win32"
       ],
+      "peer": true,
       "engines": {
-        "node": ">= 10"
+        "node": "^20.19.0 || >=22.12.0"
       }
     },
-    "node_modules/@nodelib/fs.scandir": {
-      "version": "2.1.5",
-      "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz",
-      "integrity": "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==",
+    "node_modules/@rolldown/pluginutils": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz",
+      "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true
+    },
+    "node_modules/@rtsao/scc": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@rtsao/scc/-/scc-1.1.0.tgz",
+      "integrity": "sha512-zt6OdqaDoOnJ1ZYsCYGt9YmWzDXl4vQdKTyJev62gFhRGKdx7mcT54V9KIjg+d2wi9EXsPvAPKe7i7WjfVWB8g==",
+      "dev": true
+    },
+    "node_modules/@swc/helpers": {
+      "version": "0.5.23",
+      "resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.23.tgz",
+      "integrity": "sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "tslib": "^2.8.0"
+      }
+    },
+    "node_modules/@testing-library/dom": {
+      "version": "10.4.2",
+      "resolved": "https://registry.npmjs.org/@testing-library/dom/-/dom-10.4.2.tgz",
+      "integrity": "sha512-yzr2S9HyAIdhz2/6qHgbs665Q7PKVcDF05vsOlHPxG1mo36gKVesdYVeDLnXgfjJ03CrKRk08knc6+E/9m8v2Q==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@nodelib/fs.stat": "2.0.5",
-        "run-parallel": "^1.1.9"
+        "@babel/code-frame": "^7.10.4",
+        "@babel/runtime": "^7.12.5",
+        "@types/aria-query": "^5.0.1",
+        "aria-query": "5.3.0",
+        "dom-accessibility-api": "^0.5.9",
+        "lz-string": "^1.5.0",
+        "picocolors": "1.1.1",
+        "pretty-format": "^27.0.2"
       },
       "engines": {
-        "node": ">= 8"
+        "node": ">=18"
       }
     },
-    "node_modules/@nodelib/fs.stat": {
-      "version": "2.0.5",
-      "resolved": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz",
-      "integrity": "sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==",
+    "node_modules/@testing-library/dom/node_modules/aria-query": {
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.0.tgz",
+      "integrity": "sha512-b0P0sZPKtyu8HkeRAfCq0IfURZK+SuwMjY1UXGBU27wpAiTwQAIlq56IbIO+ytk/JjS1fMR14ee5WBBfKi5J6A==",
       "dev": true,
-      "engines": {
-        "node": ">= 8"
+      "license": "Apache-2.0",
+      "dependencies": {
+        "dequal": "^2.0.3"
       }
     },
-    "node_modules/@nodelib/fs.walk": {
-      "version": "1.2.8",
-      "resolved": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz",
-      "integrity": "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==",
+    "node_modules/@testing-library/jest-dom": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/@testing-library/jest-dom/-/jest-dom-7.0.1.tgz",
+      "integrity": "sha512-oMDTC3oA+6CXSO2JZnvOI7CA6oVub6kij5ggk9ohwye5slmkwxYDXcPOVxgMw/RQlticjtO0C1RZkR97HgrWMw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@nodelib/fs.scandir": "2.1.5",
-        "fastq": "^1.6.0"
+        "@adobe/css-tools": "^4.4.0",
+        "aria-query": "^5.0.0",
+        "css.escape": "^1.5.1",
+        "dom-accessibility-api": "^0.6.3",
+        "picocolors": "^1.1.1",
+        "redent": "^3.0.0"
       },
       "engines": {
-        "node": ">= 8"
+        "node": ">=22",
+        "npm": ">=6",
+        "yarn": ">=1"
+      },
+      "peerDependencies": {
+        "@testing-library/dom": ">=10 <11",
+        "vitest": ">= 0.32"
+      },
+      "peerDependenciesMeta": {
+        "vitest": {
+          "optional": true
+        }
       }
     },
-    "node_modules/@nolyfill/is-core-module": {
-      "version": "1.0.39",
-      "resolved": "https://registry.npmjs.org/@nolyfill/is-core-module/-/is-core-module-1.0.39.tgz",
-      "integrity": "sha512-nn5ozdjYQpUCZlWGuxcJY/KpxkWQs4DcbMCmKojjyrYDEAGy4Ce19NN4v5MduafTwJlbKc99UA8YhSVqq9yPZA==",
+    "node_modules/@testing-library/jest-dom/node_modules/dom-accessibility-api": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.6.3.tgz",
+      "integrity": "sha512-7ZgogeTnjuHbo+ct10G9Ffp0mif17idi0IyWNVA/wcwcm7NPOD/WEHVP3n7n3MhXqxoIYm8d6MuZohYWIZ4T3w==",
       "dev": true,
-      "engines": {
-        "node": ">=12.4.0"
-      }
+      "license": "MIT"
     },
-    "node_modules/@pkgjs/parseargs": {
-      "version": "0.11.0",
-      "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
-      "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
+    "node_modules/@testing-library/react": {
+      "version": "16.3.3",
+      "resolved": "https://registry.npmjs.org/@testing-library/react/-/react-16.3.3.tgz",
+      "integrity": "sha512-Uo193NgQbPMz6lrrhtRQQFcMC6Re/ELLFbbuVL30WDlZxlpZf9/lMHTAVxPRLw1q1iu9OJmR1c2BLiENRstdBg==",
       "dev": true,
-      "optional": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/runtime": "^7.12.5"
+      },
       "engines": {
-        "node": ">=14"
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@testing-library/dom": "^10.0.0",
+        "@types/react": "^18.0.0 || ^19.0.0",
+        "@types/react-dom": "^18.0.0 || ^19.0.0",
+        "react": "^18.0.0 || ^19.0.0",
+        "react-dom": "^18.0.0 || ^19.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@types/react": {
+          "optional": true
+        },
+        "@types/react-dom": {
+          "optional": true
+        }
       }
     },
-    "node_modules/@pkgr/core": {
-      "version": "0.1.1",
-      "resolved": "https://registry.npmjs.org/@pkgr/core/-/core-0.1.1.tgz",
-      "integrity": "sha512-cq8o4cWH0ibXh9VGi5P20Tu9XF/0fFXl9EUinr9QfTM7a7p0oTA4iJRCQWppXR1Pg8dSM0UCItCkPwsk9qWWYA==",
+    "node_modules/@testing-library/user-event": {
+      "version": "14.6.7",
+      "resolved": "https://registry.npmjs.org/@testing-library/user-event/-/user-event-14.6.7.tgz",
+      "integrity": "sha512-MPCpX8bxe8zS+JmmTwLp8jd0dy1rAm60Te/SL8JrQM3qvQJcBOs1d7IefJMyZzqM3EWBrDn/LWDt1BCGu4ASfg==",
       "dev": true,
+      "license": "MIT",
       "engines": {
-        "node": "^12.20.0 || ^14.18.0 || >=16.0.0"
+        "node": ">=12",
+        "npm": ">=6"
       },
-      "funding": {
-        "url": "https://opencollective.com/unts"
+      "peerDependencies": {
+        "@testing-library/dom": ">=7.21.4"
       }
     },
-    "node_modules/@rtsao/scc": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/@rtsao/scc/-/scc-1.1.0.tgz",
-      "integrity": "sha512-zt6OdqaDoOnJ1ZYsCYGt9YmWzDXl4vQdKTyJev62gFhRGKdx7mcT54V9KIjg+d2wi9EXsPvAPKe7i7WjfVWB8g==",
-      "dev": true
-    },
-    "node_modules/@rushstack/eslint-patch": {
-      "version": "1.10.4",
-      "resolved": "https://registry.npmjs.org/@rushstack/eslint-patch/-/eslint-patch-1.10.4.tgz",
-      "integrity": "sha512-WJgX9nzTqknM393q1QJDJmoW28kUfEnybeTfVNcNAPnIx210RXm2DiXiHzfNPJNIUUb1tJnz/l4QGtJ30PgWmA==",
-      "dev": true
-    },
-    "node_modules/@swc/counter": {
-      "version": "0.1.3",
-      "resolved": "https://registry.npmjs.org/@swc/counter/-/counter-0.1.3.tgz",
-      "integrity": "sha512-e2BR4lsJkkRlKZ/qCHPw9ZaSxc0MVUd7gtbtaB7aMvHeJVYe8sOB8DBZkP2DtISHGSku9sCK6T6cnY0CtXrOCQ=="
+    "node_modules/@types/aria-query": {
+      "version": "5.0.4",
+      "resolved": "https://registry.npmjs.org/@types/aria-query/-/aria-query-5.0.4.tgz",
+      "integrity": "sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==",
+      "dev": true,
+      "license": "MIT"
     },
-    "node_modules/@swc/helpers": {
-      "version": "0.5.5",
-      "resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.5.tgz",
-      "integrity": "sha512-KGYxvIOXcceOAbEk4bi/dVLEK9z8sZ0uBB3Il5b1rhfClSpcX0yfRO0KmTkqR2cnQDymwLB+25ZyMzICg/cm/A==",
+    "node_modules/@types/chai": {
+      "version": "5.2.3",
+      "resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz",
+      "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==",
+      "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@swc/counter": "^0.1.3",
-        "tslib": "^2.4.0"
+        "@types/deep-eql": "*",
+        "assertion-error": "^2.0.1"
       }
     },
+    "node_modules/@types/deep-eql": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/@types/deep-eql/-/deep-eql-4.0.2.tgz",
+      "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/estree": {
+      "version": "1.0.9",
+      "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.9.tgz",
+      "integrity": "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/json-schema": {
+      "version": "7.0.15",
+      "resolved": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz",
+      "integrity": "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@types/json5": {
       "version": "0.0.29",
       "resolved": "https://registry.npmjs.org/@types/json5/-/json5-0.0.29.tgz",
@@ -418,67 +2488,101 @@
       "dev": true
     },
     "node_modules/@types/node": {
-      "version": "20.16.12",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.16.12.tgz",
-      "integrity": "sha512-LfPFB0zOeCeCNQV3i+67rcoVvoN5n0NVuR2vLG0O5ySQMgchuZlC4lgz546ZOJyDtj5KIgOxy+lacOimfqZAIA==",
+      "version": "24.19.1",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.19.1.tgz",
+      "integrity": "sha512-aS3/DG0oM05K0RIXXP+hKjinGG5IgSSVGzswZxW3O0sS3pH4/fycXundUC9XsszgKCk4gHXylTEK6hyFxVxnoQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "undici-types": "~6.19.2"
+        "undici-types": ">=7.24.0 <7.24.7"
       }
     },
-    "node_modules/@types/prop-types": {
-      "version": "15.7.13",
-      "resolved": "https://registry.npmjs.org/@types/prop-types/-/prop-types-15.7.13.tgz",
-      "integrity": "sha512-hCZTSvwbzWGvhqxp/RqVqwU999pBf2vp7hzIjiYOsl8wqOmUxkQ6ddw1cV3l8811+kdUFus/q4d1Y3E3SyEifA==",
-      "dev": true
-    },
     "node_modules/@types/react": {
-      "version": "18.3.11",
-      "resolved": "https://registry.npmjs.org/@types/react/-/react-18.3.11.tgz",
-      "integrity": "sha512-r6QZ069rFTjrEYgFdOck1gK7FLVsgJE7tTz0pQBczlBNUhBNk0MQH4UbnFSwjpQLMkLzgqvBBa+qGpLje16eTQ==",
+      "version": "19.3.0",
+      "resolved": "https://registry.npmjs.org/@types/react/-/react-19.3.0.tgz",
+      "integrity": "sha512-N0rFCuH9YoxG9/m61l9MfpJKfmLOVU0em7ipIz6TRgSSkvReLB9vL85GB+yr8Bs5leqpvg96JSwF4ZS1s4viQg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@types/prop-types": "*",
-        "csstype": "^3.0.2"
+        "csstype": "^3.2.2"
       }
     },
     "node_modules/@types/react-dom": {
-      "version": "18.3.1",
-      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-18.3.1.tgz",
-      "integrity": "sha512-qW1Mfv8taImTthu4KoXgDfLuk4bydU6Q/TkADnDWWHwi4NX4BR+LWfTp2sVmTqRrsHvyDDTelgelxJ+SsejKKQ==",
+      "version": "19.3.0",
+      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.3.0.tgz",
+      "integrity": "sha512-ZI7bU42mZXXKHn/qNLEw2IrbiINU7X5+vfgdixBHkCNpYWXjKgfQ/P+uyGb5CjOLB9UcnTeg3rylQtV2hym44Q==",
       "dev": true,
-      "dependencies": {
-        "@types/react": "*"
+      "license": "MIT",
+      "peerDependencies": {
+        "@types/react": "^19.3.0"
       }
     },
     "node_modules/@types/webidl-conversions": {
       "version": "7.0.3",
       "resolved": "https://registry.npmjs.org/@types/webidl-conversions/-/webidl-conversions-7.0.3.tgz",
-      "integrity": "sha512-CiJJvcRtIgzadHCYXw7dqEnMNRjhGZlYK05Mj9OyktqV8uVT8fD2BFOB7S1uwBE3Kj2Z+4UyPmFw/Ixgw/LAlA=="
+      "integrity": "sha512-CiJJvcRtIgzadHCYXw7dqEnMNRjhGZlYK05Mj9OyktqV8uVT8fD2BFOB7S1uwBE3Kj2Z+4UyPmFw/Ixgw/LAlA==",
+      "license": "MIT"
     },
     "node_modules/@types/whatwg-url": {
       "version": "11.0.5",
       "resolved": "https://registry.npmjs.org/@types/whatwg-url/-/whatwg-url-11.0.5.tgz",
       "integrity": "sha512-coYR071JRaHa+xoEvvYqvnIHaVqaYrLPbsufM9BF63HkwI5Lgmy2QR8Q5K/lYDYo5AK82wOvSOS0UsLTpTG7uQ==",
+      "license": "MIT",
       "dependencies": {
         "@types/webidl-conversions": "*"
       }
     },
     "node_modules/@typescript-eslint/eslint-plugin": {
-      "version": "8.10.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.10.0.tgz",
-      "integrity": "sha512-phuB3hoP7FFKbRXxjl+DRlQDuJqhpOnm5MmtROXyWi3uS/Xg2ZXqiQfcG2BJHiN4QKyzdOJi3NEn/qTnjUlkmQ==",
-      "dev": true,
-      "dependencies": {
-        "@eslint-community/regexpp": "^4.10.0",
-        "@typescript-eslint/scope-manager": "8.10.0",
-        "@typescript-eslint/type-utils": "8.10.0",
-        "@typescript-eslint/utils": "8.10.0",
-        "@typescript-eslint/visitor-keys": "8.10.0",
-        "graphemer": "^1.4.0",
-        "ignore": "^5.3.1",
+      "version": "8.71.1",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.71.1.tgz",
+      "integrity": "sha512-nNlBf6HuotqMgZvSkWD5hNdemiBIxQ2NmrlgfcUIeZRs+BbakjscCQRq/Hb74EFVnFiSWWdL12JruqwBy3ERDw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@eslint-community/regexpp": "^4.12.2",
+        "@typescript-eslint/scope-manager": "8.71.1",
+        "@typescript-eslint/type-utils": "8.71.1",
+        "@typescript-eslint/utils": "8.71.1",
+        "@typescript-eslint/visitor-keys": "8.71.1",
+        "ignore": "^7.0.5",
         "natural-compare": "^1.4.0",
-        "ts-api-utils": "^1.3.0"
+        "ts-api-utils": "^2.5.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "@typescript-eslint/parser": "^8.71.1",
+        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
+        "typescript": ">=4.8.4 <6.1.0"
+      }
+    },
+    "node_modules/@typescript-eslint/eslint-plugin/node_modules/ignore": {
+      "version": "7.0.12",
+      "resolved": "https://registry.npmjs.org/ignore/-/ignore-7.0.12.tgz",
+      "integrity": "sha512-/8UvqAPU9DGTI9k4mxtf49U37Isfwr8Uts96+SBHIkFxPJnHS0Ew4f00sM4Scd8V8EjM0jUNtVDdv1kPdt35lg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 4"
+      }
+    },
+    "node_modules/@typescript-eslint/parser": {
+      "version": "8.71.1",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.71.1.tgz",
+      "integrity": "sha512-oM/5sAqz/l1v/zYK1qTOPrn2+JIrBGC1V6uNYucRO5gh6eT9vWJ/RhPbGE59byvZEUQ4VP6XkLBaS5Jti5jpvw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@typescript-eslint/scope-manager": "8.71.1",
+        "@typescript-eslint/types": "8.71.1",
+        "@typescript-eslint/typescript-estree": "8.71.1",
+        "@typescript-eslint/visitor-keys": "8.71.1",
+        "debug": "^4.4.3"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -488,26 +2592,38 @@
         "url": "https://opencollective.com/typescript-eslint"
       },
       "peerDependencies": {
-        "@typescript-eslint/parser": "^8.0.0 || ^8.0.0-alpha.0",
-        "eslint": "^8.57.0 || ^9.0.0"
+        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
+        "typescript": ">=4.8.4 <6.1.0"
+      }
+    },
+    "node_modules/@typescript-eslint/parser/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
       },
       "peerDependenciesMeta": {
-        "typescript": {
+        "supports-color": {
           "optional": true
         }
       }
     },
-    "node_modules/@typescript-eslint/parser": {
-      "version": "8.10.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.10.0.tgz",
-      "integrity": "sha512-E24l90SxuJhytWJ0pTQydFT46Nk0Z+bsLKo/L8rtQSL93rQ6byd1V/QbDpHUTdLPOMsBCcYXZweADNCfOCmOAg==",
+    "node_modules/@typescript-eslint/project-service": {
+      "version": "8.71.1",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.71.1.tgz",
+      "integrity": "sha512-Oijc9RUsohHjncg6iGi7gCtjnEjYt9FWv9u6ygK8uKcHK5eLjLAkqERQ9BaytbpceOFdk6kifPCS/zAZE+A99g==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/scope-manager": "8.10.0",
-        "@typescript-eslint/types": "8.10.0",
-        "@typescript-eslint/typescript-estree": "8.10.0",
-        "@typescript-eslint/visitor-keys": "8.10.0",
-        "debug": "^4.3.4"
+        "@typescript-eslint/tsconfig-utils": "^8.71.1",
+        "@typescript-eslint/types": "^8.71.1",
+        "debug": "^4.4.3"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -517,41 +2633,74 @@
         "url": "https://opencollective.com/typescript-eslint"
       },
       "peerDependencies": {
-        "eslint": "^8.57.0 || ^9.0.0"
+        "typescript": ">=4.8.4 <6.1.0"
+      }
+    },
+    "node_modules/@typescript-eslint/project-service/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
       },
       "peerDependenciesMeta": {
-        "typescript": {
+        "supports-color": {
           "optional": true
         }
       }
     },
     "node_modules/@typescript-eslint/scope-manager": {
-      "version": "8.10.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.10.0.tgz",
-      "integrity": "sha512-AgCaEjhfql9MDKjMUxWvH7HjLeBqMCBfIaBbzzIcBbQPZE7CPh1m6FF+L75NUMJFMLYhCywJXIDEMa3//1A0dw==",
+      "version": "8.71.1",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.71.1.tgz",
+      "integrity": "sha512-1YUDZXdTnXLlob03SFHBipdyMBsDVm7zoSz0ytTJ39dk5J1TgsTK03VlR/dLXG/RLLUrPcYbD4rp23BmHxHP0w==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/types": "8.10.0",
-        "@typescript-eslint/visitor-keys": "8.10.0"
+        "@typescript-eslint/types": "8.71.1",
+        "@typescript-eslint/visitor-keys": "8.71.1"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
       },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      }
+    },
+    "node_modules/@typescript-eslint/tsconfig-utils": {
+      "version": "8.71.1",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.71.1.tgz",
+      "integrity": "sha512-oTvkml5SxXhgg+WWKhod5qWQICDXtOB+/Hi9VdPKFAANJ2b7YOgMffgvzXuqog7R6A/JtrzRf128dsxummyWhg==",
+      "dev": true,
+      "license": "MIT",
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
       },
       "funding": {
         "type": "opencollective",
         "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "typescript": ">=4.8.4 <6.1.0"
       }
     },
     "node_modules/@typescript-eslint/type-utils": {
-      "version": "8.10.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.10.0.tgz",
-      "integrity": "sha512-PCpUOpyQSpxBn230yIcK+LeCQaXuxrgCm2Zk1S+PTIRJsEfU6nJ0TtwyH8pIwPK/vJoA+7TZtzyAJSGBz+s/dg==",
+      "version": "8.71.1",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.71.1.tgz",
+      "integrity": "sha512-kH3t3jZCYv2PZSBEWPKTariLrCaoF1CLoPitYFBJOhAGEwWnSRAtGEifrfrpBa4K9JlwWNZotgA5w3/wLSk/FQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/typescript-estree": "8.10.0",
-        "@typescript-eslint/utils": "8.10.0",
-        "debug": "^4.3.4",
-        "ts-api-utils": "^1.3.0"
+        "@typescript-eslint/types": "8.71.1",
+        "@typescript-eslint/typescript-estree": "8.71.1",
+        "@typescript-eslint/utils": "8.71.1",
+        "debug": "^4.4.3",
+        "ts-api-utils": "^2.5.0"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -560,17 +2709,35 @@
         "type": "opencollective",
         "url": "https://opencollective.com/typescript-eslint"
       },
+      "peerDependencies": {
+        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
+        "typescript": ">=4.8.4 <6.1.0"
+      }
+    },
+    "node_modules/@typescript-eslint/type-utils/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
       "peerDependenciesMeta": {
-        "typescript": {
+        "supports-color": {
           "optional": true
         }
       }
     },
     "node_modules/@typescript-eslint/types": {
-      "version": "8.10.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.10.0.tgz",
-      "integrity": "sha512-k/E48uzsfJCRRbGLapdZgrX52csmWJ2rcowwPvOZ8lwPUv3xW6CcFeJAXgx4uJm+Ge4+a4tFOkdYvSpxhRhg1w==",
+      "version": "8.71.1",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.71.1.tgz",
+      "integrity": "sha512-ybYnPTUwg3VQQOFEiBPLs8Jxl1ry2vXdn1kVKguomBbvxpetdu3MKTNDqFNUrlG8ylP9MpZosmXMFYlGQHk1oQ==",
       "dev": true,
+      "license": "MIT",
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
       },
@@ -580,19 +2747,21 @@
       }
     },
     "node_modules/@typescript-eslint/typescript-estree": {
-      "version": "8.10.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.10.0.tgz",
-      "integrity": "sha512-3OE0nlcOHaMvQ8Xu5gAfME3/tWVDpb/HxtpUZ1WeOAksZ/h/gwrBzCklaGzwZT97/lBbbxJ16dMA98JMEngW4w==",
+      "version": "8.71.1",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.71.1.tgz",
+      "integrity": "sha512-pSKSEK1JJpHs6KiKVtABCE4iJK5d7FLFzDXQNBQ2oRY7LEd3UwOt3TZemTgu9syTIf56dJWlTn/pdmrO9oKUXQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/types": "8.10.0",
-        "@typescript-eslint/visitor-keys": "8.10.0",
-        "debug": "^4.3.4",
-        "fast-glob": "^3.3.2",
-        "is-glob": "^4.0.3",
-        "minimatch": "^9.0.4",
-        "semver": "^7.6.0",
-        "ts-api-utils": "^1.3.0"
+        "@typescript-eslint/project-service": "8.71.1",
+        "@typescript-eslint/tsconfig-utils": "8.71.1",
+        "@typescript-eslint/types": "8.71.1",
+        "@typescript-eslint/visitor-keys": "8.71.1",
+        "debug": "^4.4.3",
+        "minimatch": "^10.2.2",
+        "semver": "^7.7.3",
+        "tinyglobby": "^0.2.15",
+        "ts-api-utils": "^2.5.0"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -601,46 +2770,78 @@
         "type": "opencollective",
         "url": "https://opencollective.com/typescript-eslint"
       },
-      "peerDependenciesMeta": {
-        "typescript": {
-          "optional": true
-        }
+      "peerDependencies": {
+        "typescript": ">=4.8.4 <6.1.0"
+      }
+    },
+    "node_modules/@typescript-eslint/typescript-estree/node_modules/balanced-match": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz",
+      "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "18 || 20 || >=22"
       }
     },
     "node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-      "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^4.0.2"
+      },
+      "engines": {
+        "node": "20 || >=22"
+      }
+    },
+    "node_modules/@typescript-eslint/typescript-estree/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "balanced-match": "^1.0.0"
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
       }
     },
     "node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch": {
-      "version": "9.0.5",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
-      "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
+      "version": "10.2.6",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
+      "integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==",
       "dev": true,
+      "license": "BlueOak-1.0.0",
       "dependencies": {
-        "brace-expansion": "^2.0.1"
+        "brace-expansion": "^5.0.8"
       },
       "engines": {
-        "node": ">=16 || 14 >=14.17"
+        "node": "18 || 20 || >=22"
       },
       "funding": {
         "url": "https://github.com/sponsors/isaacs"
       }
     },
     "node_modules/@typescript-eslint/utils": {
-      "version": "8.10.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.10.0.tgz",
-      "integrity": "sha512-Oq4uZ7JFr9d1ZunE/QKy5egcDRXT/FrS2z/nlxzPua2VHFtmMvFNDvpq1m/hq0ra+T52aUezfcjGRIB7vNJF9w==",
+      "version": "8.71.1",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.71.1.tgz",
+      "integrity": "sha512-CBjT6gfAz3DW2j9Q4moFnqt208Aq+506sVGXfpRcyAeqn0EpayL0mjdWoCO2t3RC7GewNrFxdeehuEaPg6DMzQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@eslint-community/eslint-utils": "^4.4.0",
-        "@typescript-eslint/scope-manager": "8.10.0",
-        "@typescript-eslint/types": "8.10.0",
-        "@typescript-eslint/typescript-estree": "8.10.0"
+        "@eslint-community/eslint-utils": "^4.9.1",
+        "@typescript-eslint/scope-manager": "8.71.1",
+        "@typescript-eslint/types": "8.71.1",
+        "@typescript-eslint/typescript-estree": "8.71.1"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -650,17 +2851,19 @@
         "url": "https://opencollective.com/typescript-eslint"
       },
       "peerDependencies": {
-        "eslint": "^8.57.0 || ^9.0.0"
+        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
+        "typescript": ">=4.8.4 <6.1.0"
       }
     },
     "node_modules/@typescript-eslint/visitor-keys": {
-      "version": "8.10.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.10.0.tgz",
-      "integrity": "sha512-k8nekgqwr7FadWk548Lfph6V3r9OVqjzAIVskE7orMZR23cGJjAOVazsZSJW+ElyjfTM4wx/1g88Mi70DDtG9A==",
+      "version": "8.71.1",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.71.1.tgz",
+      "integrity": "sha512-0GxiUGqMU0qXJt58cBsiG3DP8lUmBaFo2vChtUX+CT7PnR3v/VGLLrzVP4K9r1lNiZXjHYefMBbPunplr09v6w==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/types": "8.10.0",
-        "eslint-visitor-keys": "^3.4.3"
+        "@typescript-eslint/types": "8.71.1",
+        "eslint-visitor-keys": "^5.0.0"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -670,17 +2873,63 @@
         "url": "https://opencollective.com/typescript-eslint"
       }
     },
-    "node_modules/@ungap/structured-clone": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.2.0.tgz",
-      "integrity": "sha512-zuVdFrMJiuCDQUMCzQaD6KL28MjnqqN8XnAqiEq9PNm/hCPTSGfrXCOfwj1ow4LFb/tNymJPwsNbVePc1xFqrQ==",
-      "dev": true
+    "node_modules/@typescript-eslint/visitor-keys/node_modules/eslint-visitor-keys": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-5.0.1.tgz",
+      "integrity": "sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^20.19.0 || ^22.13.0 || >=24"
+      },
+      "funding": {
+        "url": "https://opencollective.com/eslint"
+      }
+    },
+    "node_modules/@vitest/mocker": {
+      "version": "5.0.3",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-5.0.3.tgz",
+      "integrity": "sha512-T8sWAIbkSyAjkwTcaEc3Iu0o9A27X1/kdXrizhZkGuSKScRQtRzclfAMpOTcGdXCsqxeWlpGy3XjqaW8CpLORg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/trace-mapping": "0.3.31",
+        "@vitest/spy": "5.0.3",
+        "estree-walker": "^3.0.3",
+        "magic-string": "^1.2.3"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "msw": "^2.4.9",
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "msw": {
+          "optional": true
+        },
+        "vite": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@vitest/spy": {
+      "version": "5.0.3",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-5.0.3.tgz",
+      "integrity": "sha512-XhFysQTB8AZ+P4gMi+Lpo99vg2AZi0qKpaB9yXQl37+CaMEAPO3iH/wGVnSyL5MPERiLezpqTVtrR6UZH5GCXg==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
     },
     "node_modules/acorn": {
-      "version": "8.13.0",
-      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.13.0.tgz",
-      "integrity": "sha512-8zSiw54Oxrdym50NlZ9sUusyO1Z1ZchgRLWRaK6c86XJFClyCgFKetdowBg5bKxyp/u+CDBJG4Mpp0m3HLZl9w==",
+      "version": "8.19.0",
+      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.19.0.tgz",
+      "integrity": "sha512-oJlA3XiRm7Cyk6qFD2Jn8ak9B7jSy0qy00ADO3+8dpT0LSjFihQYv4C02LFCSYJV3Q37xYwwRy5m+IpIiUzqWw==",
       "dev": true,
+      "license": "MIT",
       "bin": {
         "acorn": "bin/acorn"
       },
@@ -693,15 +2942,27 @@
       "resolved": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz",
       "integrity": "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==",
       "dev": true,
+      "license": "MIT",
       "peerDependencies": {
         "acorn": "^6.0.0 || ^7.0.0 || ^8.0.0"
       }
     },
+    "node_modules/agent-base": {
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
+      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 14"
+      }
+    },
     "node_modules/ajv": {
-      "version": "6.12.6",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
-      "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
+      "version": "6.15.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.15.0.tgz",
+      "integrity": "sha512-fgFx7Hfoq60ytK2c7DhnF8jIvzYgOMxfugjLOSMHjLIPgenqa7S7oaagATUq99mV6IYvN2tRmC0wnTYX6iPbMw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "fast-deep-equal": "^3.1.1",
         "fast-json-stable-stringify": "^2.0.0",
@@ -756,7 +3017,8 @@
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
       "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
-      "dev": true
+      "dev": true,
+      "license": "Python-2.0"
     },
     "node_modules/aria-query": {
       "version": "5.1.3",
@@ -768,13 +3030,14 @@
       }
     },
     "node_modules/array-buffer-byte-length": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/array-buffer-byte-length/-/array-buffer-byte-length-1.0.1.tgz",
-      "integrity": "sha512-ahC5W1xgou+KTXix4sAO8Ki12Q+jf4i0+tmk3sC+zgcynshkHxzpXdImBehiUYKKKDwvfFiJl1tZt6ewscS1Mg==",
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/array-buffer-byte-length/-/array-buffer-byte-length-1.0.2.tgz",
+      "integrity": "sha512-LHE+8BuR7RYGDKvnrmcuSq3tDcKv9OFEXQt/HpbZhY7V6h0zlUXutnAD82GiFx9rdieCMjkvtcsPqBwgUl1Iiw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.5",
-        "is-array-buffer": "^3.0.4"
+        "call-bound": "^1.0.3",
+        "is-array-buffer": "^3.0.5"
       },
       "engines": {
         "node": ">= 0.4"
@@ -784,17 +3047,20 @@
       }
     },
     "node_modules/array-includes": {
-      "version": "3.1.8",
-      "resolved": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.8.tgz",
-      "integrity": "sha512-itaWrbYbqpGXkGhZPGUulwnhVf5Hpy1xiCFsGqyIGglbBxmG5vSjxQen3/WGOjPpNEv1RtBLKxbmVXm8HpJStQ==",
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/array-includes/-/array-includes-3.2.0.tgz",
+      "integrity": "sha512-VXY5eFRarnXcYxwBjJzPmEhH55+rmP79/+ueDhi0F+TuqfHCItagIHqxeUZrmgrOPa31QTh9H85DjX3FfJ0FTg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
+        "call-bind": "^1.0.9",
+        "call-bound": "^1.0.4",
         "define-properties": "^1.2.1",
-        "es-abstract": "^1.23.2",
-        "es-object-atoms": "^1.0.0",
-        "get-intrinsic": "^1.2.4",
-        "is-string": "^1.0.7"
+        "es-abstract": "^1.24.2",
+        "es-object-atoms": "^1.1.2",
+        "es-shim-unscopables": "^1.1.0",
+        "is-string": "^1.1.1",
+        "math-intrinsics": "^1.1.0"
       },
       "engines": {
         "node": ">= 0.4"
@@ -824,17 +3090,19 @@
       }
     },
     "node_modules/array.prototype.findlastindex": {
-      "version": "1.2.5",
-      "resolved": "https://registry.npmjs.org/array.prototype.findlastindex/-/array.prototype.findlastindex-1.2.5.tgz",
-      "integrity": "sha512-zfETvRFA8o7EiNn++N5f/kaCw221hrpGsDmcpndVupkPzEc1Wuf3VgC0qby1BbHs7f5DVYjgtEU2LLh5bqeGfQ==",
+      "version": "1.2.6",
+      "resolved": "https://registry.npmjs.org/array.prototype.findlastindex/-/array.prototype.findlastindex-1.2.6.tgz",
+      "integrity": "sha512-F/TKATkzseUExPlfvmwQKGITM3DGTK+vkAsCZoDc5daVygbJBnjEUCbgkAvVFsgfXfX4YIqZ/27G3k3tdXrTxQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
+        "call-bind": "^1.0.8",
+        "call-bound": "^1.0.4",
         "define-properties": "^1.2.1",
-        "es-abstract": "^1.23.2",
+        "es-abstract": "^1.23.9",
         "es-errors": "^1.3.0",
-        "es-object-atoms": "^1.0.0",
-        "es-shim-unscopables": "^1.0.2"
+        "es-object-atoms": "^1.1.1",
+        "es-shim-unscopables": "^1.1.0"
       },
       "engines": {
         "node": ">= 0.4"
@@ -844,15 +3112,16 @@
       }
     },
     "node_modules/array.prototype.flat": {
-      "version": "1.3.2",
-      "resolved": "https://registry.npmjs.org/array.prototype.flat/-/array.prototype.flat-1.3.2.tgz",
-      "integrity": "sha512-djYB+Zx2vLewY8RWlNCUdHjDXs2XOgm602S9E7P/UpHgfeHL00cRiIF+IN/G/aUJ7kGPb6yO/ErDI5V2s8iycA==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/array.prototype.flat/-/array.prototype.flat-1.3.3.tgz",
+      "integrity": "sha512-rwG/ja1neyLqCuGZ5YYrznA62D4mZXg0i1cIskIUKSiqF3Cje9/wXAls9B9s1Wa2fomMsIv8czB8jZcPmxCXFg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.2",
-        "define-properties": "^1.2.0",
-        "es-abstract": "^1.22.1",
-        "es-shim-unscopables": "^1.0.0"
+        "call-bind": "^1.0.8",
+        "define-properties": "^1.2.1",
+        "es-abstract": "^1.23.5",
+        "es-shim-unscopables": "^1.0.2"
       },
       "engines": {
         "node": ">= 0.4"
@@ -862,15 +3131,16 @@
       }
     },
     "node_modules/array.prototype.flatmap": {
-      "version": "1.3.2",
-      "resolved": "https://registry.npmjs.org/array.prototype.flatmap/-/array.prototype.flatmap-1.3.2.tgz",
-      "integrity": "sha512-Ewyx0c9PmpcsByhSW4r+9zDU7sGjFc86qf/kKtuSCRdhfbk0SNLLkaT5qvcHnRGgc5NP/ly/y+qkXkqONX54CQ==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/array.prototype.flatmap/-/array.prototype.flatmap-1.3.3.tgz",
+      "integrity": "sha512-Y7Wt51eKJSyi80hFrJCePGGNo5ktJCslFuboqJsbf57CCPcm5zztluPlc4/aD8sWsKvlwatezpV4U1efk8kpjg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.2",
-        "define-properties": "^1.2.0",
-        "es-abstract": "^1.22.1",
-        "es-shim-unscopables": "^1.0.0"
+        "call-bind": "^1.0.8",
+        "define-properties": "^1.2.1",
+        "es-abstract": "^1.23.5",
+        "es-shim-unscopables": "^1.0.2"
       },
       "engines": {
         "node": ">= 0.4"
@@ -896,19 +3166,19 @@
       }
     },
     "node_modules/arraybuffer.prototype.slice": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/arraybuffer.prototype.slice/-/arraybuffer.prototype.slice-1.0.3.tgz",
-      "integrity": "sha512-bMxMKAjg13EBSVscxTaYA4mRc5t1UAXa2kXiGTNfZ079HIWXEkKmkgFrh/nJqamaLSrXO5H4WFFkPEaLJWbs3A==",
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/arraybuffer.prototype.slice/-/arraybuffer.prototype.slice-1.0.4.tgz",
+      "integrity": "sha512-BNoCY6SXXPQ7gF2opIP4GBE+Xw7U+pHMYKuzjgCN3GwiaIR09UUeKfheyIry77QtrCBlC0KK0q5/TER/tYh3PQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "array-buffer-byte-length": "^1.0.1",
-        "call-bind": "^1.0.5",
+        "call-bind": "^1.0.8",
         "define-properties": "^1.2.1",
-        "es-abstract": "^1.22.3",
-        "es-errors": "^1.2.1",
-        "get-intrinsic": "^1.2.3",
-        "is-array-buffer": "^3.0.4",
-        "is-shared-array-buffer": "^1.0.2"
+        "es-abstract": "^1.23.5",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.6",
+        "is-array-buffer": "^3.0.4"
       },
       "engines": {
         "node": ">= 0.4"
@@ -917,12 +3187,42 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/assertion-error": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz",
+      "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      }
+    },
     "node_modules/ast-types-flow": {
       "version": "0.0.8",
       "resolved": "https://registry.npmjs.org/ast-types-flow/-/ast-types-flow-0.0.8.tgz",
       "integrity": "sha512-OH/2E5Fg20h2aPrbe+QL8JZQFko0YZaF+j4mnQ7BGhfavO7OpSLa8a0y9sBwomHdSbkhTS8TQNayBfnW5DwbvQ==",
       "dev": true
     },
+    "node_modules/async-function": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/async-function/-/async-function-1.0.0.tgz",
+      "integrity": "sha512-hsU18Ae8CDTR6Kgu9DYf0EbCr/a5iGL0rytQDobUcdpYOKokk8LEjVphnXkDkgpi0wYVsqrXuP0bZxJaTqdgoA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/async-mutex": {
+      "version": "0.5.0",
+      "resolved": "https://registry.npmjs.org/async-mutex/-/async-mutex-0.5.0.tgz",
+      "integrity": "sha512-1A94B18jkJ3DYq284ohPxoXbfTA5HsQ7/Mf4DEhcyLx3Bz27Rh59iScbB6EPiP+B+joue6YCxcMXSbFC1tZKwA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
     "node_modules/available-typed-arrays": {
       "version": "1.0.7",
       "resolved": "https://registry.npmjs.org/available-typed-arrays/-/available-typed-arrays-1.0.7.tgz",
@@ -962,6 +3262,118 @@
       "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
       "dev": true
     },
+    "node_modules/bare-events": {
+      "version": "2.9.2",
+      "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.9.2.tgz",
+      "integrity": "sha512-AIPKioV7/Y/8KfZ3AAhjPJxLLbY49S64Ym5DakZlUg75qQiTgUq9hEJoEwa4eUezPUlXRy/i5NpsKvo9jgKmoA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "peerDependencies": {
+        "bare-abort-controller": "*"
+      },
+      "peerDependenciesMeta": {
+        "bare-abort-controller": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/bare-fs": {
+      "version": "4.8.2",
+      "resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.8.2.tgz",
+      "integrity": "sha512-+ZI68KHMUvosXfKbg/UOHK0tbCdRnegbvPEdEcZ3Nd6TetieQsJPRXBRXPdLyy8+3VSEbPXtsumTpEtt78xv9w==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "bare-events": "^2.5.4",
+        "bare-path": "^3.0.0",
+        "bare-stream": "^2.6.4",
+        "bare-url": "^2.2.2",
+        "fast-fifo": "^1.3.2"
+      },
+      "engines": {
+        "bare": ">=1.28.0"
+      },
+      "peerDependencies": {
+        "bare-buffer": "*"
+      },
+      "peerDependenciesMeta": {
+        "bare-buffer": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/bare-path": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/bare-path/-/bare-path-3.1.2.tgz",
+      "integrity": "sha512-ZyKbsuuqK6Ag0K8pX6V5Txq6XeJRvY+wXucnFGRjiyVYP9YWDpIQugk/b+enRYrEYBJaqLzghRQpXPMR7341Nw==",
+      "dev": true,
+      "license": "Apache-2.0"
+    },
+    "node_modules/bare-stream": {
+      "version": "2.13.4",
+      "resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.13.4.tgz",
+      "integrity": "sha512-PcrQ8lVLbiJscNm1Kez+Yp4Gy4AHGcN1lzwjvf5NybWen7VvEgUfyfnXYJ2zNqWnzOfCb1Abq6lH8ti0syQszA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "b4a": "^1.8.1",
+        "streamx": "^2.25.0",
+        "teex": "^1.0.1"
+      },
+      "peerDependencies": {
+        "bare-abort-controller": "*",
+        "bare-buffer": "*",
+        "bare-events": "*"
+      },
+      "peerDependenciesMeta": {
+        "bare-abort-controller": {
+          "optional": true
+        },
+        "bare-buffer": {
+          "optional": true
+        },
+        "bare-events": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/bare-stream/node_modules/b4a": {
+      "version": "1.9.0",
+      "resolved": "https://registry.npmjs.org/b4a/-/b4a-1.9.0.tgz",
+      "integrity": "sha512-dpfcF9fDNR6++cthXR67iyhgqWy9CBouAvIWhIntzBG6cvK/cnIPiZQjBwi/ZqjjBEDGfoNDtmB0kTjroOJ3pQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "peerDependencies": {
+        "react-native-b4a": "*"
+      },
+      "peerDependenciesMeta": {
+        "react-native-b4a": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/bare-url": {
+      "version": "2.5.4",
+      "resolved": "https://registry.npmjs.org/bare-url/-/bare-url-2.5.4.tgz",
+      "integrity": "sha512-Gxa7UVWBr0/edU1b+TJhn/AZvMQUj9OGspvYsaTYQrAbZA4BOTZGL3LiZxvD+CeMlDH4juwD84+eTAp/bLYW5g==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "bare-path": "^3.0.0"
+      }
+    },
+    "node_modules/baseline-browser-mapping": {
+      "version": "2.11.27",
+      "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.11.27.tgz",
+      "integrity": "sha512-ElY12DaROGuan+lMmZ8Cvo/ZUbXPe7Enc/9VU/b1T3Kp4dwytRcNdR8DoSJN5SNJT/CuvcCA0DHDVmMOCePdRQ==",
+      "license": "Apache-2.0",
+      "bin": {
+        "baseline-browser-mapping": "dist/cli.cjs"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
     "node_modules/brace-expansion": {
       "version": "1.1.11",
       "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
@@ -984,36 +3396,91 @@
         "node": ">=8"
       }
     },
+    "node_modules/browserslist": {
+      "version": "4.29.3",
+      "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.29.3.tgz",
+      "integrity": "sha512-1R4kiYKXGViqEN0CnoDrXc1StD9niAwu+j2dukWzrD4bJgsD4lDmEp0CRbc6E/vYJIfTHwPmwyaKtVSudICdPA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/browserslist"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/browserslist"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "baseline-browser-mapping": "^2.11.26",
+        "caniuse-lite": "^1.0.30001813",
+        "electron-to-chromium": "^1.5.439",
+        "node-releases": "^2.0.57",
+        "update-browserslist-db": "^1.3.3"
+      },
+      "bin": {
+        "browserslist": "cli.js"
+      },
+      "engines": {
+        "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"
+      }
+    },
     "node_modules/bson": {
-      "version": "6.8.0",
-      "resolved": "https://registry.npmjs.org/bson/-/bson-6.8.0.tgz",
-      "integrity": "sha512-iOJg8pr7wq2tg/zSlCCHMi3hMm5JTOxLTagf3zxhcenHsFp+c6uOs6K7W5UE7A4QIJGtqh/ZovFNMP4mOPJynQ==",
+      "version": "6.10.4",
+      "resolved": "https://registry.npmjs.org/bson/-/bson-6.10.4.tgz",
+      "integrity": "sha512-WIsKqkSC0ABoBJuT1LEX+2HEvNmNKKgnTAyd0fL8qzK4SH2i9NXg+t08YtdZp/V9IZ33cxe3iV4yM0qg8lMQng==",
+      "license": "Apache-2.0",
       "engines": {
         "node": ">=16.20.1"
       }
     },
-    "node_modules/busboy": {
-      "version": "1.6.0",
-      "resolved": "https://registry.npmjs.org/busboy/-/busboy-1.6.0.tgz",
-      "integrity": "sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==",
+    "node_modules/call-bind": {
+      "version": "1.0.9",
+      "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.9.tgz",
+      "integrity": "sha512-a/hy+pNsFUTR+Iz8TCJvXudKVLAnz/DyeSUo10I5yvFDQJBFU2s9uqQpoSrJlroHUKoKqzg+epxyP9lqFdzfBQ==",
+      "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "streamsearch": "^1.1.0"
+        "call-bind-apply-helpers": "^1.0.2",
+        "es-define-property": "^1.0.1",
+        "get-intrinsic": "^1.3.0",
+        "set-function-length": "^1.2.2"
       },
       "engines": {
-        "node": ">=10.16.0"
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/call-bind": {
-      "version": "1.0.7",
-      "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.7.tgz",
-      "integrity": "sha512-GHTSNSYICQ7scH7sZ+M2rFopRoLh8t2bLSW6BbgrtLsahOIB5iyAVJf9GjWK3cYTDaMj4XdBpM1cA6pIS0Kv2w==",
+    "node_modules/call-bind-apply-helpers": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "es-define-property": "^1.0.0",
         "es-errors": "^1.3.0",
-        "function-bind": "^1.1.2",
-        "get-intrinsic": "^1.2.4",
-        "set-function-length": "^1.2.1"
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/call-bound": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "get-intrinsic": "^1.3.0"
       },
       "engines": {
         "node": ">= 0.4"
@@ -1027,14 +3494,28 @@
       "resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz",
       "integrity": "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==",
       "dev": true,
+      "license": "MIT",
       "engines": {
         "node": ">=6"
       }
     },
+    "node_modules/camelcase": {
+      "version": "6.3.0",
+      "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-6.3.0.tgz",
+      "integrity": "sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/caniuse-lite": {
-      "version": "1.0.30001669",
-      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001669.tgz",
-      "integrity": "sha512-DlWzFDJqstqtIVx1zeSpIMLjunf5SmwOw0N2Ck/QSQdS8PLS4+9HrLaYei4w8BIAL7IB/UEDu889d8vhCTPA0w==",
+      "version": "1.0.30001815",
+      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001815.tgz",
+      "integrity": "sha512-uDybUEyfgbyJJ93J1vikTylBX31AkdVYeVPeffMQpf8XN7hSfr0oZOn4VFOIMNvtU5+rHvC5Udg2TgtJKHm23Q==",
       "funding": [
         {
           "type": "opencollective",
@@ -1048,7 +3529,18 @@
           "type": "github",
           "url": "https://github.com/sponsors/ai"
         }
-      ]
+      ],
+      "license": "CC-BY-4.0"
+    },
+    "node_modules/chai": {
+      "version": "6.3.0",
+      "resolved": "https://registry.npmjs.org/chai/-/chai-6.3.0.tgz",
+      "integrity": "sha512-XWAtwJ6OHO+tj0EKCs0Y2UamnyOxseZWltU4x2U2wh8g4AigdjwvtUjvLP2tqkA/avxHEtzxNaqGq/YGNwckKg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
     },
     "node_modules/chalk": {
       "version": "4.1.2",
@@ -1150,7 +3642,8 @@
     "node_modules/client-only": {
       "version": "0.0.1",
       "resolved": "https://registry.npmjs.org/client-only/-/client-only-0.0.1.tgz",
-      "integrity": "sha512-IV3Ou0jSMzZrd3pZ48nLkT9DA7Ag1pnPzaiQhpW7c3RbcqqzvzzVu+L8gfqMp/8IM2MQtSiqaCxrrcfu8I8rMA=="
+      "integrity": "sha512-IV3Ou0jSMzZrd3pZ48nLkT9DA7Ag1pnPzaiQhpW7c3RbcqqzvzzVu+L8gfqMp/8IM2MQtSiqaCxrrcfu8I8rMA==",
+      "license": "MIT"
     },
     "node_modules/color-convert": {
       "version": "2.0.1",
@@ -1185,17 +3678,32 @@
         "node": ">=18"
       }
     },
+    "node_modules/commondir": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz",
+      "integrity": "sha512-W9pAhw0ja1Edb5GVdIF1mjZw/ASI0AlShXM83UUGe2DVr5TdAPEA1OA8m/g8zWp9x6On7gqufY+FatDbC3MDQg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/concat-map": {
       "version": "0.0.1",
       "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
       "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
       "dev": true
     },
+    "node_modules/convert-source-map": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz",
+      "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/cross-spawn": {
-      "version": "7.0.3",
-      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
-      "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+      "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "path-key": "^3.1.0",
         "shebang-command": "^2.0.0",
@@ -1205,11 +3713,33 @@
         "node": ">= 8"
       }
     },
+    "node_modules/css.escape": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/css.escape/-/css.escape-1.5.1.tgz",
+      "integrity": "sha512-YUifsXXuknHlUsmlgyY0PKzgPOr7/FjCePfHNt0jxm83wHZi44VDMQ7/fGNkjY3/jV1MC+1CmZbaHzugyeRtpg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/cssstyle": {
+      "version": "4.6.0",
+      "resolved": "https://registry.npmjs.org/cssstyle/-/cssstyle-4.6.0.tgz",
+      "integrity": "sha512-2z+rWdzbbSZv6/rhtvzvqeZQHrBaqgogqt85sqFNbabZOuFbCVFb8kPeEtZjiKkbrm395irpNKiYeFeLiQnFPg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@asamuzakjp/css-color": "^3.2.0",
+        "rrweb-cssom": "^0.8.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/csstype": {
-      "version": "3.1.3",
-      "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.1.3.tgz",
-      "integrity": "sha512-M1uQkMl8rQK/szD0LNhtqxIPLpimGm8sOBwU7lLnCpSbTyY3yeU1Vc7l4KT5zT4s/yOxHH5O7tIuuLOCnLADRw==",
-      "dev": true
+      "version": "3.2.3",
+      "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
+      "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
+      "dev": true,
+      "license": "MIT"
     },
     "node_modules/damerau-levenshtein": {
       "version": "1.0.8",
@@ -1217,15 +3747,30 @@
       "integrity": "sha512-sdQSFB7+llfUcQHUQO3+B8ERRj0Oa4w9POWMI/puGtuf7gFywGmkaLCElnudfTiKZV+NvHqL0ifzdrI8Ro7ESA==",
       "dev": true
     },
+    "node_modules/data-urls": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/data-urls/-/data-urls-5.0.0.tgz",
+      "integrity": "sha512-ZYP5VBHshaDAiVZxjbRVcFJpc+4xGgT0bK3vzy1HLN8jTO975HEbuYzZJcHoQEY5K1a0z8YayJkyVETa08eNTg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "whatwg-mimetype": "^4.0.0",
+        "whatwg-url": "^14.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/data-view-buffer": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/data-view-buffer/-/data-view-buffer-1.0.1.tgz",
-      "integrity": "sha512-0lht7OugA5x3iJLOWFhWK/5ehONdprk0ISXqVFn/NFrDu+cuc8iADFrGQz5BnRK7LLU3JmkbXSxaqX+/mXYtUA==",
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/data-view-buffer/-/data-view-buffer-1.0.2.tgz",
+      "integrity": "sha512-EmKO5V3OLXh1rtK2wgXRansaK1/mtVdTUEiEI0W8RkvgT05kfxaH29PliLnpLP73yYO6142Q72QNa8Wx/A5CqQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.6",
+        "call-bound": "^1.0.3",
         "es-errors": "^1.3.0",
-        "is-data-view": "^1.0.1"
+        "is-data-view": "^1.0.2"
       },
       "engines": {
         "node": ">= 0.4"
@@ -1235,29 +3780,31 @@
       }
     },
     "node_modules/data-view-byte-length": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/data-view-byte-length/-/data-view-byte-length-1.0.1.tgz",
-      "integrity": "sha512-4J7wRJD3ABAzr8wP+OcIcqq2dlUKp4DVflx++hs5h5ZKydWMI6/D/fAot+yh6g2tHh8fLFTvNOaVN357NvSrOQ==",
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/data-view-byte-length/-/data-view-byte-length-1.0.2.tgz",
+      "integrity": "sha512-tuhGbE6CfTM9+5ANGf+oQb72Ky/0+s3xKUpHvShfiz2RxMFgFPjsXuRLBVMtvMs15awe45SRb83D6wH4ew6wlQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
+        "call-bound": "^1.0.3",
         "es-errors": "^1.3.0",
-        "is-data-view": "^1.0.1"
+        "is-data-view": "^1.0.2"
       },
       "engines": {
         "node": ">= 0.4"
       },
       "funding": {
-        "url": "https://github.com/sponsors/ljharb"
+        "url": "https://github.com/sponsors/inspect-js"
       }
     },
     "node_modules/data-view-byte-offset": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/data-view-byte-offset/-/data-view-byte-offset-1.0.0.tgz",
-      "integrity": "sha512-t/Ygsytq+R995EJ5PZlD4Cu56sWa8InXySaViRzw9apusqsOO2bQP+SbYzAhR0pFKoB+43lYy8rWban9JSuXnA==",
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/data-view-byte-offset/-/data-view-byte-offset-1.0.1.tgz",
+      "integrity": "sha512-BS8PfmtDGnrgYdOonGZQdLZslWIeCGFP9tpan0hi1Co2Zr2NKADsvGYA8XxuG/4UWgJ6Cjtv+YJnB6MM69QGlQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.6",
+        "call-bound": "^1.0.2",
         "es-errors": "^1.3.0",
         "is-data-view": "^1.0.1"
       },
@@ -1284,6 +3831,13 @@
         }
       }
     },
+    "node_modules/decimal.js": {
+      "version": "10.6.0",
+      "resolved": "https://registry.npmjs.org/decimal.js/-/decimal.js-10.6.0.tgz",
+      "integrity": "sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/deep-equal": {
       "version": "2.2.3",
       "resolved": "https://registry.npmjs.org/deep-equal/-/deep-equal-2.2.3.tgz",
@@ -1356,23 +3910,54 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/doctrine": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/doctrine/-/doctrine-3.0.0.tgz",
-      "integrity": "sha512-yS+Q5i3hBf7GBkd4KG8a7eBNNWNGLTaEwwYWUijIYM7zrlYDM0BFXHjjPWlWZ1Rg7UaddZeIDmi9jF3HmqiQ2w==",
+    "node_modules/dequal": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz",
+      "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/detect-libc": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
+      "devOptional": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/dom-accessibility-api": {
+      "version": "0.5.16",
+      "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.5.16.tgz",
+      "integrity": "sha512-X7BJ2yElsnOJ30pZF4uIIDfBEVgF4XEBxL9Bxhy6dnrm5hkzqmsWHGTiHqRiITNhMyFLyAiWndIJP7Z1NTteDg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/dunder-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "esutils": "^2.0.2"
+        "call-bind-apply-helpers": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "gopd": "^1.2.0"
       },
       "engines": {
-        "node": ">=6.0.0"
+        "node": ">= 0.4"
       }
     },
-    "node_modules/eastasianwidth": {
-      "version": "0.2.0",
-      "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
-      "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==",
-      "dev": true
+    "node_modules/electron-to-chromium": {
+      "version": "1.5.451",
+      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.451.tgz",
+      "integrity": "sha512-vUNKPrUzw8ByEMOxloq0a71iD/mPuPxVkbDm3G5YhnxTzOw/I6qAg2MUS0cYj/c267lWmw26yW4Vv7foxTxPLg==",
+      "dev": true,
+      "license": "ISC"
     },
     "node_modules/emoji-regex": {
       "version": "9.2.2",
@@ -1393,6 +3978,19 @@
         "node": ">=10.13.0"
       }
     },
+    "node_modules/entities": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-6.0.1.tgz",
+      "integrity": "sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
     "node_modules/environment": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/environment/-/environment-1.1.0.tgz",
@@ -1406,57 +4004,66 @@
       }
     },
     "node_modules/es-abstract": {
-      "version": "1.23.3",
-      "resolved": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.23.3.tgz",
-      "integrity": "sha512-e+HfNH61Bj1X9/jLc5v1owaLYuHdeHHSQlkhCBiTK8rBvKaULl/beGMxwrMXjpYrv4pz22BlY570vVePA2ho4A==",
+      "version": "1.24.2",
+      "resolved": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.24.2.tgz",
+      "integrity": "sha512-2FpH9Q5i2RRwyEP1AylXe6nYLR5OhaJTZwmlcP0dL/+JCbgg7yyEo/sEK6HeGZRf3dFpWwThaRHVApXSkW3xeg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "array-buffer-byte-length": "^1.0.1",
-        "arraybuffer.prototype.slice": "^1.0.3",
+        "array-buffer-byte-length": "^1.0.2",
+        "arraybuffer.prototype.slice": "^1.0.4",
         "available-typed-arrays": "^1.0.7",
-        "call-bind": "^1.0.7",
-        "data-view-buffer": "^1.0.1",
-        "data-view-byte-length": "^1.0.1",
-        "data-view-byte-offset": "^1.0.0",
-        "es-define-property": "^1.0.0",
+        "call-bind": "^1.0.8",
+        "call-bound": "^1.0.4",
+        "data-view-buffer": "^1.0.2",
+        "data-view-byte-length": "^1.0.2",
+        "data-view-byte-offset": "^1.0.1",
+        "es-define-property": "^1.0.1",
         "es-errors": "^1.3.0",
-        "es-object-atoms": "^1.0.0",
-        "es-set-tostringtag": "^2.0.3",
-        "es-to-primitive": "^1.2.1",
-        "function.prototype.name": "^1.1.6",
-        "get-intrinsic": "^1.2.4",
-        "get-symbol-description": "^1.0.2",
-        "globalthis": "^1.0.3",
-        "gopd": "^1.0.1",
+        "es-object-atoms": "^1.1.1",
+        "es-set-tostringtag": "^2.1.0",
+        "es-to-primitive": "^1.3.0",
+        "function.prototype.name": "^1.1.8",
+        "get-intrinsic": "^1.3.0",
+        "get-proto": "^1.0.1",
+        "get-symbol-description": "^1.1.0",
+        "globalthis": "^1.0.4",
+        "gopd": "^1.2.0",
         "has-property-descriptors": "^1.0.2",
-        "has-proto": "^1.0.3",
-        "has-symbols": "^1.0.3",
+        "has-proto": "^1.2.0",
+        "has-symbols": "^1.1.0",
         "hasown": "^2.0.2",
-        "internal-slot": "^1.0.7",
-        "is-array-buffer": "^3.0.4",
+        "internal-slot": "^1.1.0",
+        "is-array-buffer": "^3.0.5",
         "is-callable": "^1.2.7",
-        "is-data-view": "^1.0.1",
+        "is-data-view": "^1.0.2",
         "is-negative-zero": "^2.0.3",
-        "is-regex": "^1.1.4",
-        "is-shared-array-buffer": "^1.0.3",
-        "is-string": "^1.0.7",
-        "is-typed-array": "^1.1.13",
-        "is-weakref": "^1.0.2",
-        "object-inspect": "^1.13.1",
+        "is-regex": "^1.2.1",
+        "is-set": "^2.0.3",
+        "is-shared-array-buffer": "^1.0.4",
+        "is-string": "^1.1.1",
+        "is-typed-array": "^1.1.15",
+        "is-weakref": "^1.1.1",
+        "math-intrinsics": "^1.1.0",
+        "object-inspect": "^1.13.4",
         "object-keys": "^1.1.1",
-        "object.assign": "^4.1.5",
-        "regexp.prototype.flags": "^1.5.2",
-        "safe-array-concat": "^1.1.2",
-        "safe-regex-test": "^1.0.3",
-        "string.prototype.trim": "^1.2.9",
-        "string.prototype.trimend": "^1.0.8",
+        "object.assign": "^4.1.7",
+        "own-keys": "^1.0.1",
+        "regexp.prototype.flags": "^1.5.4",
+        "safe-array-concat": "^1.1.3",
+        "safe-push-apply": "^1.0.0",
+        "safe-regex-test": "^1.1.0",
+        "set-proto": "^1.0.0",
+        "stop-iteration-iterator": "^1.1.0",
+        "string.prototype.trim": "^1.2.10",
+        "string.prototype.trimend": "^1.0.9",
         "string.prototype.trimstart": "^1.0.8",
-        "typed-array-buffer": "^1.0.2",
-        "typed-array-byte-length": "^1.0.1",
-        "typed-array-byte-offset": "^1.0.2",
-        "typed-array-length": "^1.0.6",
-        "unbox-primitive": "^1.0.2",
-        "which-typed-array": "^1.1.15"
+        "typed-array-buffer": "^1.0.3",
+        "typed-array-byte-length": "^1.0.3",
+        "typed-array-byte-offset": "^1.0.4",
+        "typed-array-length": "^1.0.7",
+        "unbox-primitive": "^1.1.0",
+        "which-typed-array": "^1.1.19"
       },
       "engines": {
         "node": ">= 0.4"
@@ -1465,14 +4072,31 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/es-define-property": {
+    "node_modules/es-abstract-get": {
       "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.0.tgz",
-      "integrity": "sha512-jxayLKShrEqqzJ0eumQbVhTYQM27CfT1T35+gCgDFoL82JLsXqTJ76zv6A0YLOgEnLUMvLzsDsGIrl8NFpT2gQ==",
+      "resolved": "https://registry.npmjs.org/es-abstract-get/-/es-abstract-get-1.0.0.tgz",
+      "integrity": "sha512-6PMWXpdhshVvFp+FoWYs1EvG1Nj0tvk0dZM+XcK0xMEM1czRVcP6ohqPWHy6qPagSpC8j4+p89WXlT+xXJs/fg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "get-intrinsic": "^1.2.4"
+        "es-errors": "^1.3.0",
+        "es-object-atoms": "^1.1.2",
+        "is-callable": "^1.2.7",
+        "object-inspect": "^1.13.4"
+      },
+      "engines": {
+        "node": ">= 0.4"
       },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/es-define-property": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+      "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+      "dev": true,
+      "license": "MIT",
       "engines": {
         "node": ">= 0.4"
       }
@@ -1531,11 +4155,19 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/es-module-lexer": {
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.2.tgz",
+      "integrity": "sha512-poHGpORABojJJucnV9KbOavETW8lBVnphkW77ER5/BQ5Fz7oXSoCNek7IH3vR5nRjdsEz926ibFYX8KtLQmdyw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/es-object-atoms": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.0.0.tgz",
-      "integrity": "sha512-MZ4iQ6JwHOBQjahnjwaC1ZtIBH+2ohjamzAO3oaHcXYup7qxjF2fixyH+Q71voWHeOkI2q/TnJao/KfXYIZWbw==",
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
+      "integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "es-errors": "^1.3.0"
       },
@@ -1544,37 +4176,47 @@
       }
     },
     "node_modules/es-set-tostringtag": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.0.3.tgz",
-      "integrity": "sha512-3T8uNMC3OQTHkFUsFq8r/BwAXLHvU/9O9mE0fBc/MY5iq/8H7ncvO947LmYA6ldWw9Uh8Yhf25zu6n7nML5QWQ==",
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz",
+      "integrity": "sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "get-intrinsic": "^1.2.4",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.6",
         "has-tostringtag": "^1.0.2",
-        "hasown": "^2.0.1"
+        "hasown": "^2.0.2"
       },
       "engines": {
         "node": ">= 0.4"
       }
     },
     "node_modules/es-shim-unscopables": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/es-shim-unscopables/-/es-shim-unscopables-1.0.2.tgz",
-      "integrity": "sha512-J3yBRXCzDu4ULnQwxyToo/OjdMx6akgVC7K6few0a7F/0wLtmKKN7I73AH5T2836UuXRqN7Qg+IIUw/+YJksRw==",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/es-shim-unscopables/-/es-shim-unscopables-1.1.0.tgz",
+      "integrity": "sha512-d9T8ucsEhh8Bi1woXCf+TIKDIROLG5WCkxg8geBCbvk22kzwC5G2OnXVMO6FUsvQlgUUXQ2itephWDLqDzbeCw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "hasown": "^2.0.0"
+        "hasown": "^2.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
       }
     },
     "node_modules/es-to-primitive": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.1.tgz",
-      "integrity": "sha512-QCOllgZJtaUo9miYBcLChTUaHNjJF3PYs1VidD7AwiEj1kYxKeQTctLAezAOH5ZKRH0g2IgPn6KwB4IT8iRpvA==",
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.3.4.tgz",
+      "integrity": "sha512-yPDz7wqpg1/mmHLmS3tcfTfbw5f1eryXvyghYBffGdERwe+mV7ZcWzTR8LR17Kvqt3qfPurjlonmnq3MKXIOXw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "is-callable": "^1.1.4",
-        "is-date-object": "^1.0.1",
-        "is-symbol": "^1.0.2"
+        "es-abstract-get": "^1.0.0",
+        "es-define-property": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "is-callable": "^1.2.7",
+        "is-date-object": "^1.1.0",
+        "is-symbol": "^1.1.1"
       },
       "engines": {
         "node": ">= 0.4"
@@ -1583,6 +4225,58 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/esbuild": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.2.tgz",
+      "integrity": "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "@esbuild/aix-ppc64": "0.28.2",
+        "@esbuild/android-arm": "0.28.2",
+        "@esbuild/android-arm64": "0.28.2",
+        "@esbuild/android-x64": "0.28.2",
+        "@esbuild/darwin-arm64": "0.28.2",
+        "@esbuild/darwin-x64": "0.28.2",
+        "@esbuild/freebsd-arm64": "0.28.2",
+        "@esbuild/freebsd-x64": "0.28.2",
+        "@esbuild/linux-arm": "0.28.2",
+        "@esbuild/linux-arm64": "0.28.2",
+        "@esbuild/linux-ia32": "0.28.2",
+        "@esbuild/linux-loong64": "0.28.2",
+        "@esbuild/linux-mips64el": "0.28.2",
+        "@esbuild/linux-ppc64": "0.28.2",
+        "@esbuild/linux-riscv64": "0.28.2",
+        "@esbuild/linux-s390x": "0.28.2",
+        "@esbuild/linux-x64": "0.28.2",
+        "@esbuild/netbsd-arm64": "0.28.2",
+        "@esbuild/netbsd-x64": "0.28.2",
+        "@esbuild/openbsd-arm64": "0.28.2",
+        "@esbuild/openbsd-x64": "0.28.2",
+        "@esbuild/openharmony-arm64": "0.28.2",
+        "@esbuild/sunos-x64": "0.28.2",
+        "@esbuild/win32-arm64": "0.28.2",
+        "@esbuild/win32-ia32": "0.28.2",
+        "@esbuild/win32-x64": "0.28.2"
+      }
+    },
+    "node_modules/escalade": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
+      "integrity": "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/escape-string-regexp": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",
@@ -1596,80 +4290,85 @@
       }
     },
     "node_modules/eslint": {
-      "version": "8.57.1",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.57.1.tgz",
-      "integrity": "sha512-ypowyDxpVSYpkXr9WPv2PAZCtNip1Mv5KTW0SCurXv/9iOpcrH9PaqUElksqEB6pChqHGDRCFTyrZlGhnLNGiA==",
+      "version": "9.39.5",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.39.5.tgz",
+      "integrity": "sha512-DgZS62aPLXKlnxILS/AYCoRvHaZeXceIzlXPkkGGzJWSow1aEk0lbTlxUSlyjC8jcaKxAdOnTDz+o1JFSBsyjw==",
       "deprecated": "This version is no longer supported. Please see https://eslint.org/version-support for other options.",
       "dev": true,
-      "dependencies": {
-        "@eslint-community/eslint-utils": "^4.2.0",
-        "@eslint-community/regexpp": "^4.6.1",
-        "@eslint/eslintrc": "^2.1.4",
-        "@eslint/js": "8.57.1",
-        "@humanwhocodes/config-array": "^0.13.0",
+      "license": "MIT",
+      "dependencies": {
+        "@eslint-community/eslint-utils": "^4.8.0",
+        "@eslint-community/regexpp": "^4.12.1",
+        "@eslint/config-array": "^0.21.2",
+        "@eslint/config-helpers": "^0.4.2",
+        "@eslint/core": "^0.17.0",
+        "@eslint/eslintrc": "^3.3.6",
+        "@eslint/js": "9.39.5",
+        "@eslint/plugin-kit": "^0.4.1",
+        "@humanfs/node": "^0.16.6",
         "@humanwhocodes/module-importer": "^1.0.1",
-        "@nodelib/fs.walk": "^1.2.8",
-        "@ungap/structured-clone": "^1.2.0",
-        "ajv": "^6.12.4",
+        "@humanwhocodes/retry": "^0.4.2",
+        "@types/estree": "^1.0.6",
+        "ajv": "^6.14.0",
         "chalk": "^4.0.0",
-        "cross-spawn": "^7.0.2",
+        "cross-spawn": "^7.0.6",
         "debug": "^4.3.2",
-        "doctrine": "^3.0.0",
         "escape-string-regexp": "^4.0.0",
-        "eslint-scope": "^7.2.2",
-        "eslint-visitor-keys": "^3.4.3",
-        "espree": "^9.6.1",
-        "esquery": "^1.4.2",
+        "eslint-scope": "^8.4.0",
+        "eslint-visitor-keys": "^4.2.1",
+        "espree": "^10.4.0",
+        "esquery": "^1.5.0",
         "esutils": "^2.0.2",
         "fast-deep-equal": "^3.1.3",
-        "file-entry-cache": "^6.0.1",
+        "file-entry-cache": "^8.0.0",
         "find-up": "^5.0.0",
         "glob-parent": "^6.0.2",
-        "globals": "^13.19.0",
-        "graphemer": "^1.4.0",
         "ignore": "^5.2.0",
         "imurmurhash": "^0.1.4",
         "is-glob": "^4.0.0",
-        "is-path-inside": "^3.0.3",
-        "js-yaml": "^4.1.0",
         "json-stable-stringify-without-jsonify": "^1.0.1",
-        "levn": "^0.4.1",
         "lodash.merge": "^4.6.2",
-        "minimatch": "^3.1.2",
+        "minimatch": "^3.1.5",
         "natural-compare": "^1.4.0",
-        "optionator": "^0.9.3",
-        "strip-ansi": "^6.0.1",
-        "text-table": "^0.2.0"
+        "optionator": "^0.9.3"
       },
       "bin": {
         "eslint": "bin/eslint.js"
       },
       "engines": {
-        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
       },
       "funding": {
-        "url": "https://opencollective.com/eslint"
+        "url": "https://eslint.org/donate"
+      },
+      "peerDependencies": {
+        "jiti": "*"
+      },
+      "peerDependenciesMeta": {
+        "jiti": {
+          "optional": true
+        }
       }
     },
     "node_modules/eslint-config-next": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/eslint-config-next/-/eslint-config-next-14.2.15.tgz",
-      "integrity": "sha512-mKg+NC/8a4JKLZRIOBplxXNdStgxy7lzWuedUaCc8tev+Al9mwDUTujQH6W6qXDH9kycWiVo28tADWGvpBsZcQ==",
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/eslint-config-next/-/eslint-config-next-16.4.0.tgz",
+      "integrity": "sha512-2RHLYswzc+hNRktWAjIL6XAvwb1cKcjLawJ5KWywAxn/JivNHtG42ZigL1yobVXDqsimuuL2F9jcEcnHFzbppQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@next/eslint-plugin-next": "14.2.15",
-        "@rushstack/eslint-patch": "^1.3.3",
-        "@typescript-eslint/eslint-plugin": "^5.4.2 || ^6.0.0 || ^7.0.0 || ^8.0.0",
-        "@typescript-eslint/parser": "^5.4.2 || ^6.0.0 || ^7.0.0 || ^8.0.0",
+        "@next/eslint-plugin-next": "16.4.0",
         "eslint-import-resolver-node": "^0.3.6",
         "eslint-import-resolver-typescript": "^3.5.2",
-        "eslint-plugin-import": "^2.28.1",
-        "eslint-plugin-jsx-a11y": "^6.7.1",
-        "eslint-plugin-react": "^7.33.2",
-        "eslint-plugin-react-hooks": "^4.5.0 || 5.0.0-canary-7118f5dd7-20230705"
+        "eslint-plugin-import": "^2.32.0",
+        "eslint-plugin-jsx-a11y": "^6.10.0",
+        "eslint-plugin-react": "^7.37.0",
+        "eslint-plugin-react-hooks": "^7.1.0",
+        "globals": "16.4.0",
+        "typescript-eslint": "^8.56.0"
       },
       "peerDependencies": {
-        "eslint": "^7.23.0 || ^8.0.0",
+        "eslint": ">=9.0.0",
         "typescript": ">=3.3.1"
       },
       "peerDependenciesMeta": {
@@ -1678,6 +4377,19 @@
         }
       }
     },
+    "node_modules/eslint-config-next/node_modules/globals": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/globals/-/globals-16.4.0.tgz",
+      "integrity": "sha512-ob/2LcVVaVGCYN+r14cnwnoDPUufjiYgSqRhiFD0Q1iI4Odora5RE8Iv1D24hAz5oMophRGkGz+yuvQmmUMnMw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/eslint-config-prettier": {
       "version": "9.1.0",
       "resolved": "https://registry.npmjs.org/eslint-config-prettier/-/eslint-config-prettier-9.1.0.tgz",
@@ -1746,10 +4458,11 @@
       }
     },
     "node_modules/eslint-module-utils": {
-      "version": "2.12.0",
-      "resolved": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.12.0.tgz",
-      "integrity": "sha512-wALZ0HFoytlyh/1+4wuZ9FJCD/leWHQzzrxJ8+rebyReSLk7LApMyd3WJaLVoN+D5+WIdJyDK1c6JnE65V4Zyg==",
+      "version": "2.14.0",
+      "resolved": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.14.0.tgz",
+      "integrity": "sha512-W2WCRZ9Dqntd+2u8jJcVMV2PKulc6RdLgUUoh/yQr3uB6lo/ZOeGx11sv60/8S4QFFKNslAlWhr9u0Ef7ZW6Ig==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "debug": "^3.2.7"
       },
@@ -1772,29 +4485,30 @@
       }
     },
     "node_modules/eslint-plugin-import": {
-      "version": "2.31.0",
-      "resolved": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.31.0.tgz",
-      "integrity": "sha512-ixmkI62Rbc2/w8Vfxyh1jQRTdRTF52VxwRVHl/ykPAmqG+Nb7/kNn+byLP0LxPgI7zWA16Jt82SybJInmMia3A==",
+      "version": "2.32.0",
+      "resolved": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.32.0.tgz",
+      "integrity": "sha512-whOE1HFo/qJDyX4SnXzP4N6zOWn79WhnCUY/iDR0mPfQZO8wcYE4JClzI2oZrhBnnMUCBCHZhO6VQyoBU95mZA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@rtsao/scc": "^1.1.0",
-        "array-includes": "^3.1.8",
-        "array.prototype.findlastindex": "^1.2.5",
-        "array.prototype.flat": "^1.3.2",
-        "array.prototype.flatmap": "^1.3.2",
+        "array-includes": "^3.1.9",
+        "array.prototype.findlastindex": "^1.2.6",
+        "array.prototype.flat": "^1.3.3",
+        "array.prototype.flatmap": "^1.3.3",
         "debug": "^3.2.7",
         "doctrine": "^2.1.0",
         "eslint-import-resolver-node": "^0.3.9",
-        "eslint-module-utils": "^2.12.0",
+        "eslint-module-utils": "^2.12.1",
         "hasown": "^2.0.2",
-        "is-core-module": "^2.15.1",
+        "is-core-module": "^2.16.1",
         "is-glob": "^4.0.3",
         "minimatch": "^3.1.2",
         "object.fromentries": "^2.0.8",
         "object.groupby": "^1.0.3",
-        "object.values": "^1.2.0",
+        "object.values": "^1.2.1",
         "semver": "^6.3.1",
-        "string.prototype.trimend": "^1.0.8",
+        "string.prototype.trimend": "^1.0.9",
         "tsconfig-paths": "^3.15.0"
       },
       "engines": {
@@ -1927,15 +4641,23 @@
       }
     },
     "node_modules/eslint-plugin-react-hooks": {
-      "version": "5.0.0-canary-7118f5dd7-20230705",
-      "resolved": "https://registry.npmjs.org/eslint-plugin-react-hooks/-/eslint-plugin-react-hooks-5.0.0-canary-7118f5dd7-20230705.tgz",
-      "integrity": "sha512-AZYbMo/NW9chdL7vk6HQzQhT+PvTAEVqWk9ziruUoW2kAOcN5qNyelv70e0F1VNQAbvutOC9oc+xfWycI9FxDw==",
+      "version": "7.1.1",
+      "resolved": "https://registry.npmjs.org/eslint-plugin-react-hooks/-/eslint-plugin-react-hooks-7.1.1.tgz",
+      "integrity": "sha512-f2I7Gw6JbvCexzIInuSbZpfdQ44D7iqdWX01FKLvrPgqxoE7oMj8clOfto8U6vYiz4yd5oKu39rRSVOe1zRu0g==",
       "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/core": "^7.24.4",
+        "@babel/parser": "^7.24.4",
+        "hermes-parser": "^0.25.1",
+        "zod": "^3.25.0 || ^4.0.0",
+        "zod-validation-error": "^3.5.0 || ^4.0.0"
+      },
       "engines": {
-        "node": ">=10"
+        "node": ">=18"
       },
       "peerDependencies": {
-        "eslint": "^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0"
+        "eslint": "^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0 || ^9.0.0 || ^10.0.0"
       }
     },
     "node_modules/eslint-plugin-react/node_modules/doctrine": {
@@ -1977,45 +4699,48 @@
       }
     },
     "node_modules/eslint-scope": {
-      "version": "7.2.2",
-      "resolved": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-7.2.2.tgz",
-      "integrity": "sha512-dOt21O7lTMhDM+X9mB4GX+DZrZtCUJPL/wlcTqxyrx5IvO0IYtILdtrQGQp+8n5S0gwSVmOf9NQrjMOgfQZlIg==",
+      "version": "8.4.0",
+      "resolved": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-8.4.0.tgz",
+      "integrity": "sha512-sNXOfKCn74rt8RICKMvJS7XKV/Xk9kA7DyJr8mJik3S7Cwgy3qlkkmyS2uQB3jiJg6VNdZd/pDBJu0nvG2NlTg==",
       "dev": true,
+      "license": "BSD-2-Clause",
       "dependencies": {
         "esrecurse": "^4.3.0",
         "estraverse": "^5.2.0"
       },
       "engines": {
-        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/eslint"
       }
     },
     "node_modules/eslint-visitor-keys": {
-      "version": "3.4.3",
-      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz",
-      "integrity": "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==",
+      "version": "4.2.1",
+      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-4.2.1.tgz",
+      "integrity": "sha512-Uhdk5sfqcee/9H/rCOJikYz67o0a2Tw2hGRPOG2Y1R2dg7brRe1uG0yaNQDHu+TO/uQPF/5eCapvYSmHUjt7JQ==",
       "dev": true,
+      "license": "Apache-2.0",
       "engines": {
-        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/eslint"
       }
     },
     "node_modules/espree": {
-      "version": "9.6.1",
-      "resolved": "https://registry.npmjs.org/espree/-/espree-9.6.1.tgz",
-      "integrity": "sha512-oruZaFkjorTpF32kDSI5/75ViwGeZginGGy2NoOSg3Q9bnwlnmDm4HLnkl0RE3n+njDXR037aY1+x58Z/zFdwQ==",
+      "version": "10.4.0",
+      "resolved": "https://registry.npmjs.org/espree/-/espree-10.4.0.tgz",
+      "integrity": "sha512-j6PAQ2uUr79PZhBjP5C5fhl8e39FmRnOjsD5lGnWrFU8i2G776tBK7+nP8KuQUTTyAZUwfQqXAgrVH5MbH9CYQ==",
       "dev": true,
+      "license": "BSD-2-Clause",
       "dependencies": {
-        "acorn": "^8.9.0",
+        "acorn": "^8.15.0",
         "acorn-jsx": "^5.3.2",
-        "eslint-visitor-keys": "^3.4.1"
+        "eslint-visitor-keys": "^4.2.1"
       },
       "engines": {
-        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/eslint"
@@ -2038,6 +4763,7 @@
       "resolved": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz",
       "integrity": "sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag==",
       "dev": true,
+      "license": "BSD-2-Clause",
       "dependencies": {
         "estraverse": "^5.2.0"
       },
@@ -2054,6 +4780,16 @@
         "node": ">=4.0"
       }
     },
+    "node_modules/estree-walker": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz",
+      "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/estree": "^1.0.0"
+      }
+    },
     "node_modules/esutils": {
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz",
@@ -2069,6 +4805,16 @@
       "integrity": "sha512-GWkBvjiSZK87ELrYOSESUYeVIc9mvLLf/nXalMOS5dYrgZq9o5OVkbZAVM06CVxYsCwH9BDZFPlQTlPA1j4ahA==",
       "dev": true
     },
+    "node_modules/events-universal": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/events-universal/-/events-universal-1.0.1.tgz",
+      "integrity": "sha512-LUd5euvbMLpwOF8m6ivPCbhQeSiYVNb8Vs0fQ8QjXo0JTkEHpz8pxdQf0gStltaPpw0Cca8b39KxvK9cfKRiAw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "bare-events": "^2.7.0"
+      }
+    },
     "node_modules/execa": {
       "version": "8.0.1",
       "resolved": "https://registry.npmjs.org/execa/-/execa-8.0.1.tgz",
@@ -2092,11 +4838,22 @@
         "url": "https://github.com/sindresorhus/execa?sponsor=1"
       }
     },
+    "node_modules/expect-type": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.4.0.tgz",
+      "integrity": "sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
     "node_modules/fast-deep-equal": {
       "version": "3.1.3",
       "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
       "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
-      "dev": true
+      "dev": true,
+      "license": "MIT"
     },
     "node_modules/fast-diff": {
       "version": "1.3.0",
@@ -2104,6 +4861,13 @@
       "integrity": "sha512-VxPP4NqbUjj6MaAOafWeUn2cXWLcCtljklUtZf0Ind4XQ+QPtmA0b18zZy0jIQx+ExRVCR/ZQpBmik5lXshNsw==",
       "dev": true
     },
+    "node_modules/fast-fifo": {
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/fast-fifo/-/fast-fifo-1.3.2.tgz",
+      "integrity": "sha512-/d9sfos4yxzpwkDkuN7k2SqFKtYNmCTzgfEpz82x34IM9/zc8KGxQoXg1liNC/izpRM/MBdt44Nmx41ZWqk+FQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/fast-glob": {
       "version": "3.3.2",
       "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.2.tgz",
@@ -2136,7 +4900,8 @@
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz",
       "integrity": "sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==",
-      "dev": true
+      "dev": true,
+      "license": "MIT"
     },
     "node_modules/fast-levenshtein": {
       "version": "2.0.6",
@@ -2154,15 +4919,16 @@
       }
     },
     "node_modules/file-entry-cache": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-6.0.1.tgz",
-      "integrity": "sha512-7Gps/XWymbLk2QLYK4NzpMOrYjMhdIxXuIvy2QBsLE6ljuodKvdkWs/cpyJJ3CVIVpH0Oi1Hvg1ovbMzLdFBBg==",
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-8.0.0.tgz",
+      "integrity": "sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "flat-cache": "^3.0.4"
+        "flat-cache": "^4.0.0"
       },
       "engines": {
-        "node": "^10.12.0 || >=12.0.0"
+        "node": ">=16.0.0"
       }
     },
     "node_modules/fill-range": {
@@ -2177,6 +4943,24 @@
         "node": ">=8"
       }
     },
+    "node_modules/find-cache-dir": {
+      "version": "3.3.2",
+      "resolved": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-3.3.2.tgz",
+      "integrity": "sha512-wXZV5emFEjrridIgED11OoUKLxiYjAcqot/NJdAkOhlJ+vGzwhOAfcG5OX1jP+S0PcjEn8bdMJv+g2jwQ3Onig==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "commondir": "^1.0.1",
+        "make-dir": "^3.0.2",
+        "pkg-dir": "^4.1.0"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/avajs/find-cache-dir?sponsor=1"
+      }
+    },
     "node_modules/find-up": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz",
@@ -2194,55 +4978,77 @@
       }
     },
     "node_modules/flat-cache": {
-      "version": "3.2.0",
-      "resolved": "https://registry.npmjs.org/flat-cache/-/flat-cache-3.2.0.tgz",
-      "integrity": "sha512-CYcENa+FtcUKLmhhqyctpclsq7QF38pKjZHsGNiSQF5r4FtoKDWabFDl3hzaEQMvT1LHEysw5twgLvpYYb4vbw==",
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/flat-cache/-/flat-cache-4.0.1.tgz",
+      "integrity": "sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "flatted": "^3.2.9",
-        "keyv": "^4.5.3",
-        "rimraf": "^3.0.2"
+        "keyv": "^4.5.4"
       },
       "engines": {
-        "node": "^10.12.0 || >=12.0.0"
+        "node": ">=16"
       }
     },
     "node_modules/flatted": {
-      "version": "3.3.1",
-      "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.1.tgz",
-      "integrity": "sha512-X8cqMLLie7KsNUDSdzeN8FYK9rEt4Dt67OsG/DNGnYTSDBG4uFAJFBnUeiV+zCVAvwFy56IjM9sH51jVaEhNxw==",
-      "dev": true
+      "version": "3.4.4",
+      "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.4.tgz",
+      "integrity": "sha512-5+ybhBZANEJxaH3X5evAFatUxLfEHSr7n6kYJ+1Qd0mUqr4eu9gIf6GDbWHf8RJijHrjjO8G+la14SlL2SeS1Q==",
+      "dev": true,
+      "license": "ISC"
     },
-    "node_modules/for-each": {
-      "version": "0.3.3",
-      "resolved": "https://registry.npmjs.org/for-each/-/for-each-0.3.3.tgz",
-      "integrity": "sha512-jqYfLp7mo9vIyQf8ykW2v7A+2N4QjeCeI5+Dz9XraiO1ign81wjiH7Fb9vSOWvQfNtmSa4H2RoQTrrXivdUZmw==",
+    "node_modules/follow-redirects": {
+      "version": "1.16.1",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.1.tgz",
+      "integrity": "sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==",
       "dev": true,
-      "dependencies": {
-        "is-callable": "^1.1.3"
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/RubenVerborgh"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=4.0"
+      },
+      "peerDependenciesMeta": {
+        "debug": {
+          "optional": true
+        }
       }
     },
-    "node_modules/foreground-child": {
-      "version": "3.3.0",
-      "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.0.tgz",
-      "integrity": "sha512-Ld2g8rrAyMYFXBhEqMz8ZAHBi4J4uS1i/CxGMDnjyFWddMXLVcDp051DZfu+t7+ab7Wv6SMqpWmyFIj5UbfFvg==",
+    "node_modules/for-each": {
+      "version": "0.3.5",
+      "resolved": "https://registry.npmjs.org/for-each/-/for-each-0.3.5.tgz",
+      "integrity": "sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "cross-spawn": "^7.0.0",
-        "signal-exit": "^4.0.1"
+        "is-callable": "^1.2.7"
       },
       "engines": {
-        "node": ">=14"
+        "node": ">= 0.4"
       },
       "funding": {
-        "url": "https://github.com/sponsors/isaacs"
+        "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/fs.realpath": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz",
-      "integrity": "sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==",
-      "dev": true
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
     },
     "node_modules/function-bind": {
       "version": "1.1.2",
@@ -2254,15 +5060,21 @@
       }
     },
     "node_modules/function.prototype.name": {
-      "version": "1.1.6",
-      "resolved": "https://registry.npmjs.org/function.prototype.name/-/function.prototype.name-1.1.6.tgz",
-      "integrity": "sha512-Z5kx79swU5P27WEayXM1tBi5Ze/lbIyiNgU3qyXUOf9b2rgXYyF9Dy9Cx+IQv/Lc8WCG6L82zwUPpSS9hGehIg==",
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/function.prototype.name/-/function.prototype.name-1.2.0.tgz",
+      "integrity": "sha512-jObKIik1P2QjPHP5nz5BaOtUlfgS0fWo8IUByNXkM+o+02sJOi94em77GwJKQSJ3gfPHdgzLNrHc1uokV4P/ew==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.2",
-        "define-properties": "^1.2.0",
-        "es-abstract": "^1.22.1",
-        "functions-have-names": "^1.2.3"
+        "call-bind": "^1.0.9",
+        "call-bound": "^1.0.4",
+        "es-define-property": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "functions-have-names": "^1.2.3",
+        "has-property-descriptors": "^1.0.2",
+        "hasown": "^2.0.4",
+        "is-callable": "^1.2.7",
+        "is-document.all": "^1.0.0"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2280,6 +5092,26 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/generator-function": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/generator-function/-/generator-function-2.0.1.tgz",
+      "integrity": "sha512-SFdFmIJi+ybC0vjlHN0ZGVGHc3lgE0DxPAT0djjVg+kjOnSqclqmj0KQ7ykTOLP6YxoqOvuAODGdcHJn+43q3g==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/gensync": {
+      "version": "1.0.0-beta.2",
+      "resolved": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz",
+      "integrity": "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
     "node_modules/get-east-asian-width": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/get-east-asian-width/-/get-east-asian-width-1.3.0.tgz",
@@ -2293,16 +5125,22 @@
       }
     },
     "node_modules/get-intrinsic": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.2.4.tgz",
-      "integrity": "sha512-5uYhsJH8VJBTv7oslg4BznJYhDoRI6waYCxMmCdnTrcCrHA/fCFKoTFz2JKKE0HdDFUF7/oQuhzumXJK7paBRQ==",
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+      "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "es-define-property": "^1.0.1",
         "es-errors": "^1.3.0",
+        "es-object-atoms": "^1.1.1",
         "function-bind": "^1.1.2",
-        "has-proto": "^1.0.1",
-        "has-symbols": "^1.0.3",
-        "hasown": "^2.0.0"
+        "get-proto": "^1.0.1",
+        "gopd": "^1.2.0",
+        "has-symbols": "^1.1.0",
+        "hasown": "^2.0.2",
+        "math-intrinsics": "^1.1.0"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2311,6 +5149,20 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/get-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+      "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "dunder-proto": "^1.0.1",
+        "es-object-atoms": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/get-stream": {
       "version": "8.0.1",
       "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-8.0.1.tgz",
@@ -2324,14 +5176,15 @@
       }
     },
     "node_modules/get-symbol-description": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/get-symbol-description/-/get-symbol-description-1.0.2.tgz",
-      "integrity": "sha512-g0QYk1dZBxGwk+Ngc+ltRH2IBp2f7zBkBMBJZCDerh6EhlhSR6+9irMCuT/09zD6qkarHUSn529sK/yL4S27mg==",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/get-symbol-description/-/get-symbol-description-1.1.0.tgz",
+      "integrity": "sha512-w9UMqWwJxHNOvoNzSJ2oPF5wvYcvP7jUvYzhp67yEhTi17ZDBBC1z9pTdGuzjD+EFIqLSYRweZjqfiPzQ06Ebg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.5",
+        "call-bound": "^1.0.3",
         "es-errors": "^1.3.0",
-        "get-intrinsic": "^1.2.4"
+        "get-intrinsic": "^1.2.6"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2352,28 +5205,6 @@
         "url": "https://github.com/privatenumber/get-tsconfig?sponsor=1"
       }
     },
-    "node_modules/glob": {
-      "version": "10.3.10",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-10.3.10.tgz",
-      "integrity": "sha512-fa46+tv1Ak0UPK1TOy/pZrIybNNt4HCv7SDzwyfiOZkvZLEbjsZkJBPtDHVshZjbecAoAGSC20MjLDG/qr679g==",
-      "dev": true,
-      "dependencies": {
-        "foreground-child": "^3.1.0",
-        "jackspeak": "^2.3.5",
-        "minimatch": "^9.0.1",
-        "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0",
-        "path-scurry": "^1.10.1"
-      },
-      "bin": {
-        "glob": "dist/esm/bin.mjs"
-      },
-      "engines": {
-        "node": ">=16 || 14 >=14.17"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/glob-parent": {
       "version": "6.0.2",
       "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz",
@@ -2386,40 +5217,14 @@
         "node": ">=10.13.0"
       }
     },
-    "node_modules/glob/node_modules/brace-expansion": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-      "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
-      "dev": true,
-      "dependencies": {
-        "balanced-match": "^1.0.0"
-      }
-    },
-    "node_modules/glob/node_modules/minimatch": {
-      "version": "9.0.5",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
-      "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
-      "dev": true,
-      "dependencies": {
-        "brace-expansion": "^2.0.1"
-      },
-      "engines": {
-        "node": ">=16 || 14 >=14.17"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/globals": {
-      "version": "13.24.0",
-      "resolved": "https://registry.npmjs.org/globals/-/globals-13.24.0.tgz",
-      "integrity": "sha512-AhO5QUcj8llrbG09iWhPU2B204J1xnPeL8kQmVorSsy+Sjj1sk8gIyh6cUocGmH4L0UuhAJy+hJMRA4mgA4mFQ==",
+      "version": "14.0.0",
+      "resolved": "https://registry.npmjs.org/globals/-/globals-14.0.0.tgz",
+      "integrity": "sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==",
       "dev": true,
-      "dependencies": {
-        "type-fest": "^0.20.2"
-      },
+      "license": "MIT",
       "engines": {
-        "node": ">=8"
+        "node": ">=18"
       },
       "funding": {
         "url": "https://github.com/sponsors/sindresorhus"
@@ -2442,12 +5247,13 @@
       }
     },
     "node_modules/gopd": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.0.1.tgz",
-      "integrity": "sha512-d65bNlIadxvpb/A2abVdlqKqV563juRnZ1Wtk6s1sIR8uNsXR70xqIzVqxVf1eTqDunwT2MkczEeaezCKTZhwA==",
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+      "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
       "dev": true,
-      "dependencies": {
-        "get-intrinsic": "^1.1.3"
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
       },
       "funding": {
         "url": "https://github.com/sponsors/ljharb"
@@ -2456,12 +5262,7 @@
     "node_modules/graceful-fs": {
       "version": "4.2.11",
       "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
-      "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ=="
-    },
-    "node_modules/graphemer": {
-      "version": "1.4.0",
-      "resolved": "https://registry.npmjs.org/graphemer/-/graphemer-1.4.0.tgz",
-      "integrity": "sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag==",
+      "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
       "dev": true
     },
     "node_modules/has-bigints": {
@@ -2495,10 +5296,14 @@
       }
     },
     "node_modules/has-proto": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/has-proto/-/has-proto-1.0.3.tgz",
-      "integrity": "sha512-SJ1amZAJUiZS+PhsVLf5tGydlaVB8EdFpaSO4gmiUKUOxk8qzn5AIy4ZeJUmh22znIdk/uMAUT2pl3FxzVUH+Q==",
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/has-proto/-/has-proto-1.2.0.tgz",
+      "integrity": "sha512-KIL7eQPfHQRC8+XluaIw7BHUwwqL19bQn4hzNgdr+1wXoU0KKj6rufu47lhY7KbJR2C6T6+PfyN0Ea7wkSS+qQ==",
       "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "dunder-proto": "^1.0.0"
+      },
       "engines": {
         "node": ">= 0.4"
       },
@@ -2507,10 +5312,11 @@
       }
     },
     "node_modules/has-symbols": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz",
-      "integrity": "sha512-l3LCuF6MgDNwTDKkdYGEihYjt5pRPbEg46rtlmnSPlUbgmB8LOIrKJbYYFBSbnPaJexMKtiPO8hmeRjRz2Td+A==",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+      "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
       "dev": true,
+      "license": "MIT",
       "engines": {
         "node": ">= 0.4"
       },
@@ -2534,10 +5340,11 @@
       }
     },
     "node_modules/hasown": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
-      "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
+      "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "function-bind": "^1.1.2"
       },
@@ -2545,6 +5352,64 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/hermes-estree": {
+      "version": "0.25.1",
+      "resolved": "https://registry.npmjs.org/hermes-estree/-/hermes-estree-0.25.1.tgz",
+      "integrity": "sha512-0wUoCcLp+5Ev5pDW2OriHC2MJCbwLwuRx+gAqMTOkGKJJiBCLjtrvy4PWUGn6MIVefecRpzoOZ/UV6iGdOr+Cw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/hermes-parser": {
+      "version": "0.25.1",
+      "resolved": "https://registry.npmjs.org/hermes-parser/-/hermes-parser-0.25.1.tgz",
+      "integrity": "sha512-6pEjquH3rqaI6cYAXYPcz9MS4rY6R4ngRgrgfDshRptUZIc3lw0MCIJIGDj9++mfySOuPTHB4nrSW99BCvOPIA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "hermes-estree": "0.25.1"
+      }
+    },
+    "node_modules/html-encoding-sniffer": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-4.0.0.tgz",
+      "integrity": "sha512-Y22oTqIU4uuPgEemfz7NDJz6OeKf12Lsu+QC+s3BVpda64lTiMYCyGwg5ki4vFxkMwQdeZDl2adZoqUgdFuTgQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "whatwg-encoding": "^3.1.1"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/http-proxy-agent": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz",
+      "integrity": "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.0",
+        "debug": "^4.3.4"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/https-proxy-agent": {
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz",
+      "integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.2",
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
     "node_modules/human-signals": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/human-signals/-/human-signals-5.0.0.tgz",
@@ -2569,6 +5434,19 @@
         "url": "https://github.com/sponsors/typicode"
       }
     },
+    "node_modules/iconv-lite": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz",
+      "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3.0.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/ignore": {
       "version": "5.3.2",
       "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.2.tgz",
@@ -2579,10 +5457,11 @@
       }
     },
     "node_modules/import-fresh": {
-      "version": "3.3.0",
-      "resolved": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.0.tgz",
-      "integrity": "sha512-veYYhQa+D1QBKznvhUHxb8faxlrwUnxseDAbAp457E0wLNio2bOSKnjYDhMj+YiAq61xrMGhQk9iXVk5FzgQMw==",
+      "version": "3.3.1",
+      "resolved": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.1.tgz",
+      "integrity": "sha512-TR3KfrTZTYLPB6jUjfx6MF9WcWrHL9su5TObK4ZkYgBdWKPOFoSoQIdEuTuR82pmtxH2spWG9h6etwfr1pLBqQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "parent-module": "^1.0.0",
         "resolve-from": "^4.0.0"
@@ -2603,32 +5482,26 @@
         "node": ">=0.8.19"
       }
     },
-    "node_modules/inflight": {
-      "version": "1.0.6",
-      "resolved": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz",
-      "integrity": "sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==",
-      "deprecated": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.",
+    "node_modules/indent-string": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz",
+      "integrity": "sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==",
       "dev": true,
-      "dependencies": {
-        "once": "^1.3.0",
-        "wrappy": "1"
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
       }
     },
-    "node_modules/inherits": {
-      "version": "2.0.4",
-      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
-      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
-      "dev": true
-    },
     "node_modules/internal-slot": {
-      "version": "1.0.7",
-      "resolved": "https://registry.npmjs.org/internal-slot/-/internal-slot-1.0.7.tgz",
-      "integrity": "sha512-NGnrKwXzSms2qUUih/ILZ5JBqNTSa1+ZmP6flaIp6KmSElgE9qdndzS3cqjrDovwFdmwsGsLdeFgB6suw+1e9g==",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/internal-slot/-/internal-slot-1.1.0.tgz",
+      "integrity": "sha512-4gd7VpWNQNB4UKKCFFVcp1AVv+FMOgs9NKzjHKusc8jTMhd5eL1NqQqOpE0KzMds804/yHlglp3uxgluOqAPLw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "es-errors": "^1.3.0",
-        "hasown": "^2.0.0",
-        "side-channel": "^1.0.4"
+        "hasown": "^2.0.2",
+        "side-channel": "^1.1.0"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2651,13 +5524,15 @@
       }
     },
     "node_modules/is-array-buffer": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/is-array-buffer/-/is-array-buffer-3.0.4.tgz",
-      "integrity": "sha512-wcjaerHw0ydZwfhiKbXJWLDY8A7yV7KhjQOpb83hGgGfId/aQa4TOvwyzn2PuswW2gPCYEL/nEAiSVpdOj1lXw==",
+      "version": "3.0.5",
+      "resolved": "https://registry.npmjs.org/is-array-buffer/-/is-array-buffer-3.0.5.tgz",
+      "integrity": "sha512-DDfANUiiG2wC1qawP66qlTugJeL5HyzMpfr8lLK+jMQirGzNod0B12cFB/9q838Ru27sBwfw78/rdoU7RERz6A==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.2",
-        "get-intrinsic": "^1.2.1"
+        "call-bind": "^1.0.8",
+        "call-bound": "^1.0.3",
+        "get-intrinsic": "^1.2.6"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2667,12 +5542,17 @@
       }
     },
     "node_modules/is-async-function": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/is-async-function/-/is-async-function-2.0.0.tgz",
-      "integrity": "sha512-Y1JXKrfykRJGdlDwdKlLpLyMIiWqWvuSd17TvZk68PLAOGOoF4Xyav1z0Xhoi+gCYjZVeC5SI+hYFOfvXmGRCA==",
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/is-async-function/-/is-async-function-2.1.1.tgz",
+      "integrity": "sha512-9dgM/cZBnNvjzaMYHVoxxfPj2QXt22Ev7SuuPrs+xav0ukGB0S6d4ydZdEiM48kLx5kDV+QBPrpVnFyefL8kkQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "has-tostringtag": "^1.0.0"
+        "async-function": "^1.0.0",
+        "call-bound": "^1.0.3",
+        "get-proto": "^1.0.1",
+        "has-tostringtag": "^1.0.2",
+        "safe-regex-test": "^1.1.0"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2682,25 +5562,30 @@
       }
     },
     "node_modules/is-bigint": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/is-bigint/-/is-bigint-1.0.4.tgz",
-      "integrity": "sha512-zB9CruMamjym81i2JZ3UMn54PKGsQzsJeo6xvN3HJJ4CAsQNB6iRutp2To77OfCNuoxspsIhzaPoO1zyCEhFOg==",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/is-bigint/-/is-bigint-1.1.0.tgz",
+      "integrity": "sha512-n4ZT37wG78iz03xPRKJrHTdZbe3IicyucEtdRsV5yglwc3GyUfbAfpSeD0FJ41NbUNSt5wbhqfp1fS+BgnvDFQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "has-bigints": "^1.0.1"
+        "has-bigints": "^1.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
       },
       "funding": {
         "url": "https://github.com/sponsors/ljharb"
       }
     },
     "node_modules/is-boolean-object": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.1.2.tgz",
-      "integrity": "sha512-gDYaKHJmnj4aWxyj6YHyXVpdQawtVLHU5cb+eztPGczf6cjuTdwve5ZIEfgXqH4e57An1D1AKf8CZ3kYrQRqYA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.2.2.tgz",
+      "integrity": "sha512-wa56o2/ElJMYqjCjGkXri7it5FbebW5usLw/nPmCMs5DeZ7eziSYZhSmPRn0txqeW4LnAmQQU7FgqLpsEFKM4A==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.2",
-        "has-tostringtag": "^1.0.0"
+        "call-bound": "^1.0.3",
+        "has-tostringtag": "^1.0.2"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2731,12 +5616,31 @@
       }
     },
     "node_modules/is-core-module": {
-      "version": "2.15.1",
-      "resolved": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.15.1.tgz",
-      "integrity": "sha512-z0vtXSwucUJtANQWldhbtbt7BnL0vxiFjIdDLAatwhDYty2bad6s+rijD6Ri4YuYJubLzIJLUidCh09e1djEVQ==",
+      "version": "2.17.0",
+      "resolved": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.17.0.tgz",
+      "integrity": "sha512-J/vG0zBCbIKOQFfufSwyXdMrsohyJIUNkrnmo6WZGzoM7tr/lsbfW5b2BvisL6zsyMzK9UxV9L6c7AoFbyXHOA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "hasown": "^2.0.4"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/is-data-view": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/is-data-view/-/is-data-view-1.0.2.tgz",
+      "integrity": "sha512-RKtWF8pGmS87i2D6gqQu/l7EYRlVdfzemCJN/P3UOs//x1QE7mfhvzHIApBTRf7axvT6DMGwSwBXYCT0nfB9xw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "hasown": "^2.0.2"
+        "call-bound": "^1.0.2",
+        "get-intrinsic": "^1.2.6",
+        "is-typed-array": "^1.1.13"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2745,13 +5649,15 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/is-data-view": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/is-data-view/-/is-data-view-1.0.1.tgz",
-      "integrity": "sha512-AHkaJrsUVW6wq6JS8y3JnM/GJF/9cf+k20+iDzlSaJrinEo5+7vRiteOSwBhHRiAyQATN1AmY4hwzxJKPmYf+w==",
+    "node_modules/is-date-object": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.1.0.tgz",
+      "integrity": "sha512-PwwhEakHVKTdRNVOw+/Gyh0+MzlCl4R6qKvkhuvLtPMggI1WAHt9sOwZxQLSGpUaDnrdyDsomoRgNnCfKNSXXg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "is-typed-array": "^1.1.13"
+        "call-bound": "^1.0.2",
+        "has-tostringtag": "^1.0.2"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2760,13 +5666,14 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/is-date-object": {
-      "version": "1.0.5",
-      "resolved": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.5.tgz",
-      "integrity": "sha512-9YQaSxsAiSwcvS33MBk3wTCVnWK+HhF8VZR2jRxehM16QcVOdHqPn4VPHmRK4lSr38n9JriurInLcP90xsYNfQ==",
+    "node_modules/is-document.all": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/is-document.all/-/is-document.all-1.0.0.tgz",
+      "integrity": "sha512-+XSoyS05OdBbhFuELhgTCpFNHkpBOJqtsZfUFFpe5QTw+9Sjbh8zitxhQkYAo6wV7e1Vb8cAPvpCk9jGam/82g==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "has-tostringtag": "^1.0.0"
+        "call-bound": "^1.0.4"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2785,12 +5692,16 @@
       }
     },
     "node_modules/is-finalizationregistry": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/is-finalizationregistry/-/is-finalizationregistry-1.0.2.tgz",
-      "integrity": "sha512-0by5vtUJs8iFQb5TYUHHPudOR+qXYIMKtiUzvLIZITZUjknFmziyBJuLhVRc+Ds0dREFlskDNJKYIdIzu/9pfw==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/is-finalizationregistry/-/is-finalizationregistry-1.1.1.tgz",
+      "integrity": "sha512-1pC6N8qWJbWoPtEjgcL2xyhQOP491EQjeUo3qTKcmV8YSDDJrOepfG8pcC7h/QgnQHYSv0mJ3Z/ZWxmatVrysg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.2"
+        "call-bound": "^1.0.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
       },
       "funding": {
         "url": "https://github.com/sponsors/ljharb"
@@ -2809,12 +5720,17 @@
       }
     },
     "node_modules/is-generator-function": {
-      "version": "1.0.10",
-      "resolved": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.0.10.tgz",
-      "integrity": "sha512-jsEjy9l3yiXEQ+PsXdmBwEPcOxaXWLspKdplFUVI9vq1iZgIekeC0L167qeu86czQaxed3q/Uzuw0swL0irL8A==",
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.1.2.tgz",
+      "integrity": "sha512-upqt1SkGkODW9tsGNG5mtXTXtECizwtS2kA161M+gJPc1xdb/Ax629af6YrTwcOeQHbewrPNlE5Dx7kzvXTizA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "has-tostringtag": "^1.0.0"
+        "call-bound": "^1.0.4",
+        "generator-function": "^2.0.0",
+        "get-proto": "^1.0.1",
+        "has-tostringtag": "^1.0.2",
+        "safe-regex-test": "^1.1.0"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2869,12 +5785,14 @@
       }
     },
     "node_modules/is-number-object": {
-      "version": "1.0.7",
-      "resolved": "https://registry.npmjs.org/is-number-object/-/is-number-object-1.0.7.tgz",
-      "integrity": "sha512-k1U0IRzLMo7ZlYIfzRu23Oh6MiIFasgpb9X76eqfFZAqwH44UI4KTBvBYIZ1dSL9ZzChTB9ShHfLkR4pdW5krQ==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/is-number-object/-/is-number-object-1.1.1.tgz",
+      "integrity": "sha512-lZhclumE1G6VYD8VHe35wFaIif+CTy5SJIi5+3y4psDgWu4wPDoBhF8NxUOinEc7pHgiTsT6MaBb92rKhhD+Xw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "has-tostringtag": "^1.0.0"
+        "call-bound": "^1.0.3",
+        "has-tostringtag": "^1.0.2"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2883,23 +5801,24 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/is-path-inside": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-3.0.3.tgz",
-      "integrity": "sha512-Fd4gABb+ycGAmKou8eMftCupSir5lRxqf4aD/vd0cD2qc4HL07OjCeuHMr8Ro4CoMaeCKDB0/ECBOVWjTwUvPQ==",
+    "node_modules/is-potential-custom-element-name": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/is-potential-custom-element-name/-/is-potential-custom-element-name-1.0.1.tgz",
+      "integrity": "sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ==",
       "dev": true,
-      "engines": {
-        "node": ">=8"
-      }
+      "license": "MIT"
     },
     "node_modules/is-regex": {
-      "version": "1.1.4",
-      "resolved": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.4.tgz",
-      "integrity": "sha512-kvRdxDsxZjhzUX07ZnLydzS1TU/TJlTUHHY4YLL87e37oUA49DfkLqgy+VjFocowy29cKvcSiu+kIv728jTTVg==",
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/is-regex/-/is-regex-1.2.1.tgz",
+      "integrity": "sha512-MjYsKHO5O7mCsmRGxWcLWheFqN9DJ/2TmngvjKXihe6efViPqc274+Fx/4fYj/r03+ESvBdTXK0V6tA3rgez1g==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.2",
-        "has-tostringtag": "^1.0.0"
+        "call-bound": "^1.0.2",
+        "gopd": "^1.2.0",
+        "has-tostringtag": "^1.0.2",
+        "hasown": "^2.0.2"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2921,12 +5840,13 @@
       }
     },
     "node_modules/is-shared-array-buffer": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/is-shared-array-buffer/-/is-shared-array-buffer-1.0.3.tgz",
-      "integrity": "sha512-nA2hv5XIhLR3uVzDDfCIknerhx8XUKnstuOERPNNIinXG7v9u+ohXF67vxm4TPTEPU6lm61ZkwP3c9PCB97rhg==",
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/is-shared-array-buffer/-/is-shared-array-buffer-1.0.4.tgz",
+      "integrity": "sha512-ISWac8drv4ZGfwKl5slpHG9OwPNty4jOWPRIhBpxOoD+hqITiwuipOQ2bNthAzwA3B4fIjO4Nln74N0S9byq8A==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7"
+        "call-bound": "^1.0.3"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2948,12 +5868,14 @@
       }
     },
     "node_modules/is-string": {
-      "version": "1.0.7",
-      "resolved": "https://registry.npmjs.org/is-string/-/is-string-1.0.7.tgz",
-      "integrity": "sha512-tE2UXzivje6ofPW7l23cjDOMa09gb7xlAqG6jG5ej6uPV32TlWP3NKPigtaGeHNu9fohccRYvIiZMfOOnOYUtg==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/is-string/-/is-string-1.1.1.tgz",
+      "integrity": "sha512-BtEeSsoaQjlSPBemMQIrY1MY0uM6vnS1g5fmufYOtnxLGUZM2178PKbhsk7Ffv58IX+ZtcvoGwccYsh0PglkAA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "has-tostringtag": "^1.0.0"
+        "call-bound": "^1.0.3",
+        "has-tostringtag": "^1.0.2"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2963,12 +5885,15 @@
       }
     },
     "node_modules/is-symbol": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.4.tgz",
-      "integrity": "sha512-C/CPBqKWnvdcxqIARxyOh4v1UUEOCHpgDa0WYgpKDFMszcrPcffg5uhwSgPCLD2WWxmq6isisz87tzT01tuGhg==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.1.1.tgz",
+      "integrity": "sha512-9gGx6GTtCQM73BgmHQXfDmLtfjjTUDSyoxTCbp5WtoixAhfgsDirWIcVQ/IHpvI5Vgd5i/J5F7B9cN/WlVbC/w==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "has-symbols": "^1.0.2"
+        "call-bound": "^1.0.2",
+        "has-symbols": "^1.1.0",
+        "safe-regex-test": "^1.1.0"
       },
       "engines": {
         "node": ">= 0.4"
@@ -2978,12 +5903,13 @@
       }
     },
     "node_modules/is-typed-array": {
-      "version": "1.1.13",
-      "resolved": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.13.tgz",
-      "integrity": "sha512-uZ25/bUAlUY5fR4OKT4rZQEBrzQWYV9ZJYGGsUmEJ6thodVJ1HX64ePQ6Z0qPWP+m+Uq6e9UugrE38jeYsDSMw==",
+      "version": "1.1.15",
+      "resolved": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.15.tgz",
+      "integrity": "sha512-p3EcsicXjit7SaskXHs1hA91QxgTw46Fv6EFKKGS5DRFLD8yKnohjF3hxoju94b/OcMZoQukzpPpBE9uLVKzgQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "which-typed-array": "^1.1.14"
+        "which-typed-array": "^1.1.16"
       },
       "engines": {
         "node": ">= 0.4"
@@ -3005,12 +5931,16 @@
       }
     },
     "node_modules/is-weakref": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/is-weakref/-/is-weakref-1.0.2.tgz",
-      "integrity": "sha512-qctsuLZmIQ0+vSSMfoVvyFe2+GSEvnmZ2ezTup1SBse9+twCCeial6EEi3Nc2KFcf6+qz2FBPnjXsk8xhKSaPQ==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/is-weakref/-/is-weakref-1.1.1.tgz",
+      "integrity": "sha512-6i9mGWSlqzNMEqpCp93KwRS1uUOodk2OJ6b+sq7ZPDSy2WuI5NFIxp/254TytR8ftefexkWn5xNiHUNpPOfSew==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.2"
+        "call-bound": "^1.0.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
       },
       "funding": {
         "url": "https://github.com/sponsors/ljharb"
@@ -3060,34 +5990,28 @@
         "node": ">= 0.4"
       }
     },
-    "node_modules/jackspeak": {
-      "version": "2.3.6",
-      "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-2.3.6.tgz",
-      "integrity": "sha512-N3yCS/NegsOBokc8GAdM8UcmfsKiSS8cipheD/nivzr700H+nsMOxJjQnvwOcRYVuFkdH0wGUvW2WbXGmrZGbQ==",
-      "dev": true,
-      "dependencies": {
-        "@isaacs/cliui": "^8.0.2"
-      },
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      },
-      "optionalDependencies": {
-        "@pkgjs/parseargs": "^0.11.0"
-      }
-    },
     "node_modules/js-tokens": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
-      "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="
+      "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==",
+      "dev": true
     },
     "node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz",
+      "integrity": "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==",
       "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
+      "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
       },
@@ -3095,17 +6019,72 @@
         "js-yaml": "bin/js-yaml.js"
       }
     },
+    "node_modules/jsdom": {
+      "version": "26.1.0",
+      "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-26.1.0.tgz",
+      "integrity": "sha512-Cvc9WUhxSMEo4McES3P7oK3QaXldCfNWp7pl2NNeiIFlCoLr3kfq9kb1fxftiwk1FLV7CvpvDfonxtzUDeSOPg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "cssstyle": "^4.2.1",
+        "data-urls": "^5.0.0",
+        "decimal.js": "^10.5.0",
+        "html-encoding-sniffer": "^4.0.0",
+        "http-proxy-agent": "^7.0.2",
+        "https-proxy-agent": "^7.0.6",
+        "is-potential-custom-element-name": "^1.0.1",
+        "nwsapi": "^2.2.16",
+        "parse5": "^7.2.1",
+        "rrweb-cssom": "^0.8.0",
+        "saxes": "^6.0.0",
+        "symbol-tree": "^3.2.4",
+        "tough-cookie": "^5.1.1",
+        "w3c-xmlserializer": "^5.0.0",
+        "webidl-conversions": "^7.0.0",
+        "whatwg-encoding": "^3.1.1",
+        "whatwg-mimetype": "^4.0.0",
+        "whatwg-url": "^14.1.1",
+        "ws": "^8.18.0",
+        "xml-name-validator": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "canvas": "^3.0.0"
+      },
+      "peerDependenciesMeta": {
+        "canvas": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/jsesc": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/jsesc/-/jsesc-3.1.0.tgz",
+      "integrity": "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "jsesc": "bin/jsesc"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/json-buffer": {
       "version": "3.0.1",
       "resolved": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz",
       "integrity": "sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==",
-      "dev": true
+      "dev": true,
+      "license": "MIT"
     },
     "node_modules/json-schema-traverse": {
       "version": "0.4.1",
       "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz",
       "integrity": "sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==",
-      "dev": true
+      "dev": true,
+      "license": "MIT"
     },
     "node_modules/json-stable-stringify-without-jsonify": {
       "version": "1.0.1",
@@ -3145,47 +6124,333 @@
       "resolved": "https://registry.npmjs.org/kareem/-/kareem-2.6.3.tgz",
       "integrity": "sha512-C3iHfuGUXK2u8/ipq9LfjFfXFxAZMQJJq7vLS45r3D9Y2xQ/m4S8zaR4zMLFWh9AsNPXmcFfUDhTEO8UIC/V6Q==",
       "engines": {
-        "node": ">=12.0.0"
+        "node": ">=12.0.0"
+      }
+    },
+    "node_modules/keyv": {
+      "version": "4.5.4",
+      "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
+      "integrity": "sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "json-buffer": "3.0.1"
+      }
+    },
+    "node_modules/language-subtag-registry": {
+      "version": "0.3.23",
+      "resolved": "https://registry.npmjs.org/language-subtag-registry/-/language-subtag-registry-0.3.23.tgz",
+      "integrity": "sha512-0K65Lea881pHotoGEa5gDlMxt3pctLi2RplBb7Ezh4rRdLEOtgi7n4EwK9lamnUCkKBqaeKRVebTq6BAxSkpXQ==",
+      "dev": true
+    },
+    "node_modules/language-tags": {
+      "version": "1.0.9",
+      "resolved": "https://registry.npmjs.org/language-tags/-/language-tags-1.0.9.tgz",
+      "integrity": "sha512-MbjN408fEndfiQXbFQ1vnd+1NoLDsnQW41410oQBXiyXDMYH5z505juWa4KUE1LqxRC7DgOgZDbKLxHIwm27hA==",
+      "dev": true,
+      "dependencies": {
+        "language-subtag-registry": "^0.3.20"
+      },
+      "engines": {
+        "node": ">=0.10"
+      }
+    },
+    "node_modules/levn": {
+      "version": "0.4.1",
+      "resolved": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz",
+      "integrity": "sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==",
+      "dev": true,
+      "dependencies": {
+        "prelude-ls": "^1.2.1",
+        "type-check": "~0.4.0"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/lightningcss": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz",
+      "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==",
+      "dev": true,
+      "license": "MPL-2.0",
+      "peer": true,
+      "dependencies": {
+        "detect-libc": "^2.0.3"
+      },
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      },
+      "optionalDependencies": {
+        "lightningcss-android-arm64": "1.33.0",
+        "lightningcss-darwin-arm64": "1.33.0",
+        "lightningcss-darwin-x64": "1.33.0",
+        "lightningcss-freebsd-x64": "1.33.0",
+        "lightningcss-linux-arm-gnueabihf": "1.33.0",
+        "lightningcss-linux-arm64-gnu": "1.33.0",
+        "lightningcss-linux-arm64-musl": "1.33.0",
+        "lightningcss-linux-x64-gnu": "1.33.0",
+        "lightningcss-linux-x64-musl": "1.33.0",
+        "lightningcss-win32-arm64-msvc": "1.33.0",
+        "lightningcss-win32-x64-msvc": "1.33.0"
+      }
+    },
+    "node_modules/lightningcss-android-arm64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz",
+      "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "peer": true,
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-arm64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz",
+      "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "peer": true,
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-x64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz",
+      "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "peer": true,
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-freebsd-x64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz",
+      "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "peer": true,
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm-gnueabihf": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz",
+      "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-gnu": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz",
+      "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-musl": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz",
+      "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-gnu": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz",
+      "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
       }
     },
-    "node_modules/keyv": {
-      "version": "4.5.4",
-      "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
-      "integrity": "sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==",
+    "node_modules/lightningcss-linux-x64-musl": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz",
+      "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==",
+      "cpu": [
+        "x64"
+      ],
       "dev": true,
-      "dependencies": {
-        "json-buffer": "3.0.1"
+      "libc": [
+        "musl"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "peer": true,
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
       }
     },
-    "node_modules/language-subtag-registry": {
-      "version": "0.3.23",
-      "resolved": "https://registry.npmjs.org/language-subtag-registry/-/language-subtag-registry-0.3.23.tgz",
-      "integrity": "sha512-0K65Lea881pHotoGEa5gDlMxt3pctLi2RplBb7Ezh4rRdLEOtgi7n4EwK9lamnUCkKBqaeKRVebTq6BAxSkpXQ==",
-      "dev": true
-    },
-    "node_modules/language-tags": {
-      "version": "1.0.9",
-      "resolved": "https://registry.npmjs.org/language-tags/-/language-tags-1.0.9.tgz",
-      "integrity": "sha512-MbjN408fEndfiQXbFQ1vnd+1NoLDsnQW41410oQBXiyXDMYH5z505juWa4KUE1LqxRC7DgOgZDbKLxHIwm27hA==",
+    "node_modules/lightningcss-win32-arm64-msvc": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz",
+      "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==",
+      "cpu": [
+        "arm64"
+      ],
       "dev": true,
-      "dependencies": {
-        "language-subtag-registry": "^0.3.20"
-      },
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "peer": true,
       "engines": {
-        "node": ">=0.10"
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
       }
     },
-    "node_modules/levn": {
-      "version": "0.4.1",
-      "resolved": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz",
-      "integrity": "sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==",
+    "node_modules/lightningcss-win32-x64-msvc": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz",
+      "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==",
+      "cpu": [
+        "x64"
+      ],
       "dev": true,
-      "dependencies": {
-        "prelude-ls": "^1.2.1",
-        "type-check": "~0.4.0"
-      },
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "peer": true,
       "engines": {
-        "node": ">= 0.8.0"
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
       }
     },
     "node_modules/lilconfig": {
@@ -3489,6 +6754,7 @@
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
       "integrity": "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",
+      "dev": true,
       "dependencies": {
         "js-tokens": "^3.0.0 || ^4.0.0"
       },
@@ -3502,10 +6768,67 @@
       "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==",
       "dev": true
     },
+    "node_modules/lz-string": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/lz-string/-/lz-string-1.5.0.tgz",
+      "integrity": "sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "lz-string": "bin/bin.js"
+      }
+    },
+    "node_modules/magic-string": {
+      "version": "1.4.3",
+      "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.4.3.tgz",
+      "integrity": "sha512-z12OxmaPGE0F4xlpGdjuAUckipLpQlTAuAmyGhNoD7ODpYUzvDfvtxUbjM/jwznyP178oju/KDdyi220wNJ0RQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.6.0"
+      }
+    },
+    "node_modules/make-dir": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz",
+      "integrity": "sha512-g3FeP20LNwhALb/6Cz6Dd4F2ngze0jz7tbzrD2wAV+o9FeNHe4rL+yK2md0J/fiSf1sa1ADhXqi5+oVwOM/eGw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "semver": "^6.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/make-dir/node_modules/semver": {
+      "version": "6.3.1",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
+      "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      }
+    },
+    "node_modules/math-intrinsics": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+      "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/memory-pager": {
       "version": "1.5.0",
       "resolved": "https://registry.npmjs.org/memory-pager/-/memory-pager-1.5.0.tgz",
-      "integrity": "sha512-ZS4Bp4r/Zoeq6+NLJpP+0Zzm0pR8whtGPf1XExKLJBAczGMnSi3It14OiNCStjQjM6NU1okjQGSxgEZN8eBYKg=="
+      "integrity": "sha512-ZS4Bp4r/Zoeq6+NLJpP+0Zzm0pR8whtGPf1XExKLJBAczGMnSi3It14OiNCStjQjM6NU1okjQGSxgEZN8eBYKg==",
+      "license": "MIT"
     },
     "node_modules/merge-stream": {
       "version": "2.0.0",
@@ -3559,11 +6882,22 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/min-indent": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz",
+      "integrity": "sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/minimatch": {
-      "version": "3.1.2",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
-      "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
+      "version": "3.1.5",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
+      "integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
       "dev": true,
+      "license": "ISC",
       "dependencies": {
         "brace-expansion": "^1.1.7"
       },
@@ -3580,34 +6914,26 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/minipass": {
-      "version": "7.1.2",
-      "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz",
-      "integrity": "sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==",
-      "dev": true,
-      "engines": {
-        "node": ">=16 || 14 >=14.17"
-      }
-    },
     "node_modules/mongodb": {
-      "version": "6.9.0",
-      "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-6.9.0.tgz",
-      "integrity": "sha512-UMopBVx1LmEUbW/QE0Hw18u583PEDVQmUmVzzBRH0o/xtE9DBRA5ZYLOjpLIa03i8FXjzvQECJcqoMvCXftTUA==",
+      "version": "6.20.0",
+      "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-6.20.0.tgz",
+      "integrity": "sha512-Tl6MEIU3K4Rq3TSHd+sZQqRBoGlFsOgNrH5ltAcFBV62Re3Fd+FcaVf8uSEQFOJ51SDowDVttBTONMfoYWrWlQ==",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@mongodb-js/saslprep": "^1.1.5",
-        "bson": "^6.7.0",
-        "mongodb-connection-string-url": "^3.0.0"
+        "@mongodb-js/saslprep": "^1.3.0",
+        "bson": "^6.10.4",
+        "mongodb-connection-string-url": "^3.0.2"
       },
       "engines": {
         "node": ">=16.20.1"
       },
       "peerDependencies": {
         "@aws-sdk/credential-providers": "^3.188.0",
-        "@mongodb-js/zstd": "^1.1.0",
+        "@mongodb-js/zstd": "^1.1.0 || ^2.0.0",
         "gcp-metadata": "^5.2.0",
         "kerberos": "^2.0.1",
         "mongodb-client-encryption": ">=6.0.0 <7",
-        "snappy": "^7.2.2",
+        "snappy": "^7.3.2",
         "socks": "^2.7.1"
       },
       "peerDependenciesMeta": {
@@ -3635,22 +6961,66 @@
       }
     },
     "node_modules/mongodb-connection-string-url": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/mongodb-connection-string-url/-/mongodb-connection-string-url-3.0.1.tgz",
-      "integrity": "sha512-XqMGwRX0Lgn05TDB4PyG2h2kKO/FfWJyCzYQbIhXUxz7ETt0I/FqHjUeqj37irJ+Dl1ZtU82uYyj14u2XsZKfg==",
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/mongodb-connection-string-url/-/mongodb-connection-string-url-3.0.2.tgz",
+      "integrity": "sha512-rMO7CGo/9BFwyZABcKAWL8UJwH/Kc2x0g72uhDWzG48URRax5TCIcJ7Rc3RZqffZzO/Gwff/jyKwCU9TN8gehA==",
+      "license": "Apache-2.0",
       "dependencies": {
         "@types/whatwg-url": "^11.0.2",
-        "whatwg-url": "^13.0.0"
+        "whatwg-url": "^14.1.0 || ^13.0.0"
+      }
+    },
+    "node_modules/mongodb-memory-server-core": {
+      "version": "10.4.3",
+      "resolved": "https://registry.npmjs.org/mongodb-memory-server-core/-/mongodb-memory-server-core-10.4.3.tgz",
+      "integrity": "sha512-IPjlw73IoSYopnqBibQKxmAXMbOEPf5uGAOsBcaUiNH/TOI7V19WO+K7n5KYtnQ9FqzLGLpvwCGuPOTBSg4s5Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "async-mutex": "^0.5.0",
+        "camelcase": "^6.3.0",
+        "debug": "^4.4.3",
+        "find-cache-dir": "^3.3.2",
+        "follow-redirects": "^1.15.11",
+        "https-proxy-agent": "^7.0.6",
+        "mongodb": "^6.9.0",
+        "new-find-package-json": "^2.0.0",
+        "semver": "^7.7.3",
+        "tar-stream": "^3.1.7",
+        "tslib": "^2.8.1",
+        "yauzl": "^3.2.0"
+      },
+      "engines": {
+        "node": ">=16.20.1"
+      }
+    },
+    "node_modules/mongodb-memory-server-core/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
       }
     },
     "node_modules/mongoose": {
-      "version": "8.7.2",
-      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-8.7.2.tgz",
-      "integrity": "sha512-Ok4VzMds9p5G3ZSUhmvBm1GdxanbzhS29jpSn02SPj+IXEVFnIdfwAlHHXWkyNscZKlcn8GuMi68FH++jo0flg==",
+      "version": "8.24.5",
+      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-8.24.5.tgz",
+      "integrity": "sha512-S1cvmzLhw5Xthv450UjInCBq2JreRvvyfGSA3FmDw8yThPxUbPAyJqtXMz0dNm8BBFm2ctRBOBKJxDPqM2sG0w==",
+      "license": "MIT",
       "dependencies": {
-        "bson": "^6.7.0",
+        "bson": "^6.10.4",
         "kareem": "2.6.3",
-        "mongodb": "6.9.0",
+        "mongodb": "~6.20.0",
         "mpath": "0.9.0",
         "mquery": "5.0.0",
         "ms": "2.1.3",
@@ -3689,15 +7059,16 @@
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
     },
     "node_modules/nanoid": {
-      "version": "3.3.7",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.7.tgz",
-      "integrity": "sha512-eSRppjcPIatRIMC1U6UngP8XFcz8MQWGQdt1MTBQ7NaAmvXDfvNxbvWV3x2y6CdEUciCSsDHDQZbhYaB8QEo2g==",
+      "version": "3.3.20",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz",
+      "integrity": "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ==",
       "funding": [
         {
           "type": "github",
           "url": "https://github.com/sponsors/ai"
         }
       ],
+      "license": "MIT",
       "bin": {
         "nanoid": "bin/nanoid.cjs"
       },
@@ -3711,41 +7082,55 @@
       "integrity": "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==",
       "dev": true
     },
-    "node_modules/next": {
-      "version": "14.2.15",
-      "resolved": "https://registry.npmjs.org/next/-/next-14.2.15.tgz",
-      "integrity": "sha512-h9ctmOokpoDphRvMGnwOJAedT6zKhwqyZML9mDtspgf4Rh3Pn7UTYKqePNoDvhsWBAO5GoPNYshnAUGIazVGmw==",
+    "node_modules/new-find-package-json": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/new-find-package-json/-/new-find-package-json-2.0.0.tgz",
+      "integrity": "sha512-lDcBsjBSMlj3LXH2v/FW3txlh2pYTjmbOXPYJD93HI5EwuLzI11tdHSIpUMmfq/IOsldj4Ps8M8flhm+pCK4Ew==",
+      "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@next/env": "14.2.15",
-        "@swc/helpers": "0.5.5",
-        "busboy": "1.6.0",
+        "debug": "^4.3.4"
+      },
+      "engines": {
+        "node": ">=12.22.0"
+      }
+    },
+    "node_modules/next": {
+      "version": "16.4.0",
+      "resolved": "https://registry.npmjs.org/next/-/next-16.4.0.tgz",
+      "integrity": "sha512-N2C+9q89Z/oLrsepSRS4jRMtwmUZAoZuAHU0e9T6+sAB5DdhADmrnOW+zjYijlrYFmVfmQhGVGy9eMFoB7UgKg==",
+      "license": "MIT",
+      "dependencies": {
+        "@next/env": "16.4.0",
+        "@swc/helpers": "0.5.23",
+        "baseline-browser-mapping": "^2.9.19",
         "caniuse-lite": "^1.0.30001579",
-        "graceful-fs": "^4.2.11",
-        "postcss": "8.4.31",
-        "styled-jsx": "5.1.1"
+        "postcss": "8.5.23",
+        "styled-jsx": "5.1.6"
       },
       "bin": {
         "next": "dist/bin/next"
       },
       "engines": {
-        "node": ">=18.17.0"
+        "node": ">=20.9.0"
       },
       "optionalDependencies": {
-        "@next/swc-darwin-arm64": "14.2.15",
-        "@next/swc-darwin-x64": "14.2.15",
-        "@next/swc-linux-arm64-gnu": "14.2.15",
-        "@next/swc-linux-arm64-musl": "14.2.15",
-        "@next/swc-linux-x64-gnu": "14.2.15",
-        "@next/swc-linux-x64-musl": "14.2.15",
-        "@next/swc-win32-arm64-msvc": "14.2.15",
-        "@next/swc-win32-ia32-msvc": "14.2.15",
-        "@next/swc-win32-x64-msvc": "14.2.15"
+        "@next/swc-darwin-arm64": "16.4.0",
+        "@next/swc-darwin-x64": "16.4.0",
+        "@next/swc-linux-arm64-gnu": "16.4.0",
+        "@next/swc-linux-arm64-musl": "16.4.0",
+        "@next/swc-linux-x64-gnu": "16.4.0",
+        "@next/swc-linux-x64-musl": "16.4.0",
+        "@next/swc-win32-arm64-msvc": "16.4.0",
+        "@next/swc-win32-x64-msvc": "16.4.0",
+        "sharp": "^0.35.4"
       },
       "peerDependencies": {
         "@opentelemetry/api": "^1.1.0",
-        "@playwright/test": "^1.41.2",
-        "react": "^18.2.0",
-        "react-dom": "^18.2.0",
+        "@playwright/test": "^1.51.1",
+        "babel-plugin-react-compiler": "*",
+        "react": "^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0",
+        "react-dom": "^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0",
         "sass": "^1.3.0"
       },
       "peerDependenciesMeta": {
@@ -3755,11 +7140,24 @@
         "@playwright/test": {
           "optional": true
         },
+        "babel-plugin-react-compiler": {
+          "optional": true
+        },
         "sass": {
           "optional": true
         }
       }
     },
+    "node_modules/node-releases": {
+      "version": "2.0.57",
+      "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.57.tgz",
+      "integrity": "sha512-kQK9LGGFiHtrWiNhZtA7Qbw17AQz+dmsEKODRIVTXA9+e5MS/2gZEBhYJt13GrAz5/IOZKddH/0Z3TP/Zgo+yw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/npm-run-path": {
       "version": "5.3.0",
       "resolved": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-5.3.0.tgz",
@@ -3787,6 +7185,13 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/nwsapi": {
+      "version": "2.2.28",
+      "resolved": "https://registry.npmjs.org/nwsapi/-/nwsapi-2.2.28.tgz",
+      "integrity": "sha512-IlVB7OS7qrOsVYlpnFIkETjMwT9jwvmocJmmM+GZU/PAB3uGi9Ezd7vcWhWBUnSc0ya4ppmQITOyP1ez9gg8cg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/object-assign": {
       "version": "4.1.1",
       "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
@@ -3797,10 +7202,11 @@
       }
     },
     "node_modules/object-inspect": {
-      "version": "1.13.2",
-      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.2.tgz",
-      "integrity": "sha512-IRZSRuzJiynemAXPYtPe5BoI/RESNYR7TYm50MC5Mqbd3Jmw5y790sErYw3V6SryFJD64b74qQQs9wn5Bg/k3g==",
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
       "dev": true,
+      "license": "MIT",
       "engines": {
         "node": ">= 0.4"
       },
@@ -3834,14 +7240,17 @@
       }
     },
     "node_modules/object.assign": {
-      "version": "4.1.5",
-      "resolved": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.5.tgz",
-      "integrity": "sha512-byy+U7gp+FVwmyzKPYhW2h5l3crpmGsxl7X2s8y43IgxvG4g3QZ6CffDtsNQy1WsmZpQbO+ybo0AlW7TY6DcBQ==",
+      "version": "4.1.7",
+      "resolved": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.7.tgz",
+      "integrity": "sha512-nK28WOo+QIjBkDduTINE4JkF/UJJKyf2EJxvJKfblDpyg0Q+pkOHNTL0Qwy6NP6FhE/EnzV73BxxqcJaXY9anw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.5",
+        "call-bind": "^1.0.8",
+        "call-bound": "^1.0.3",
         "define-properties": "^1.2.1",
-        "has-symbols": "^1.0.3",
+        "es-object-atoms": "^1.0.0",
+        "has-symbols": "^1.1.0",
         "object-keys": "^1.1.1"
       },
       "engines": {
@@ -3898,12 +7307,14 @@
       }
     },
     "node_modules/object.values": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/object.values/-/object.values-1.2.0.tgz",
-      "integrity": "sha512-yBYjY9QX2hnRmZHAjG/f13MzmBzxzYgQhFrke06TTyKY5zSTEqkOeukBzIdVA3j3ulu8Qa3MbVFShV7T2RmGtQ==",
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/object.values/-/object.values-1.2.1.tgz",
+      "integrity": "sha512-gXah6aZrcUxjWg2zR2MwouP2eHlCBzdV4pygudehaKXSGW4v2AsRQUK+lwwXhii6KFZcunEnmSUoYp5CXibxtA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
+        "call-bind": "^1.0.8",
+        "call-bound": "^1.0.3",
         "define-properties": "^1.2.1",
         "es-object-atoms": "^1.0.0"
       },
@@ -3914,13 +7325,18 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/once": {
-      "version": "1.4.0",
-      "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
-      "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
+    "node_modules/obug": {
+      "version": "2.2.1",
+      "resolved": "https://registry.npmjs.org/obug/-/obug-2.2.1.tgz",
+      "integrity": "sha512-XrsrhT5sybtKI6wakr2SPOlGZWWYbUXZ7a0jT8/QOeAPau+1X/bSegNe5YR75oJmEZQbKningirmGOEJCIk61Q==",
       "dev": true,
-      "dependencies": {
-        "wrappy": "1"
+      "funding": [
+        "https://github.com/sponsors/sxzz",
+        "https://opencollective.com/debug"
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.20.0"
       }
     },
     "node_modules/onetime": {
@@ -3955,6 +7371,25 @@
         "node": ">= 0.8.0"
       }
     },
+    "node_modules/own-keys": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/own-keys/-/own-keys-1.0.2.tgz",
+      "integrity": "sha512-19YVAg7T+WTrxggPukVq7DjTv6+PJ867TmhCvBsYwmbFCsZd344rq2Ld1p0wo8f8Qrrhgp82c6FJRqdXWtSEhg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.4",
+        "get-intrinsic": "^1.3.0",
+        "object-keys": "^1.1.1",
+        "safe-push-apply": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/p-limit": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz",
@@ -3985,11 +7420,22 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/p-try": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz",
+      "integrity": "sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/parent-module": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz",
       "integrity": "sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "callsites": "^3.0.0"
       },
@@ -3997,6 +7443,19 @@
         "node": ">=6"
       }
     },
+    "node_modules/parse5": {
+      "version": "7.3.0",
+      "resolved": "https://registry.npmjs.org/parse5/-/parse5-7.3.0.tgz",
+      "integrity": "sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "entities": "^6.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/inikulin/parse5?sponsor=1"
+      }
+    },
     "node_modules/path-exists": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
@@ -4006,15 +7465,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/path-is-absolute": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
-      "integrity": "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==",
-      "dev": true,
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/path-key": {
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
@@ -4030,21 +7480,12 @@
       "integrity": "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==",
       "dev": true
     },
-    "node_modules/path-scurry": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz",
-      "integrity": "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==",
+    "node_modules/pend": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz",
+      "integrity": "sha512-F3asv42UuXchdzt+xXqfW1OGlVBe+mxa2mqI0pg5yAHZPvFmY3Y6drSf/GQ1A86WgWEN9Kzh/WrgKa6iGcHXLg==",
       "dev": true,
-      "dependencies": {
-        "lru-cache": "^10.2.0",
-        "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0"
-      },
-      "engines": {
-        "node": ">=16 || 14 >=14.18"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
+      "license": "MIT"
     },
     "node_modules/picocolors": {
       "version": "1.1.1",
@@ -4057,37 +7498,107 @@
       "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
       "dev": true,
       "engines": {
-        "node": ">=8.6"
+        "node": ">=8.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/pidtree": {
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/pidtree/-/pidtree-0.6.0.tgz",
+      "integrity": "sha512-eG2dWTVw5bzqGRztnHExczNxt5VGsE6OwTeCG3fdUf9KBsZzO3R5OIIIzWR+iZA0NtZ+RDVdaoE2dK1cn6jH4g==",
+      "dev": true,
+      "bin": {
+        "pidtree": "bin/pidtree.js"
+      },
+      "engines": {
+        "node": ">=0.10"
+      }
+    },
+    "node_modules/pkg-dir": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz",
+      "integrity": "sha512-HRDzbaKjC+AOWVXxAU/x54COGeIv9eb+6CkDSQoNTt4XyWoIJvuPsXizxu/Fr23EiekbtZwmh1IcIG/l/a10GQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "find-up": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/pkg-dir/node_modules/find-up": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
+      "integrity": "sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "locate-path": "^5.0.0",
+        "path-exists": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/pkg-dir/node_modules/locate-path": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
+      "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "p-locate": "^4.1.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/pkg-dir/node_modules/p-limit": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
+      "integrity": "sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "p-try": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=6"
       },
       "funding": {
-        "url": "https://github.com/sponsors/jonschlinkert"
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/pidtree": {
-      "version": "0.6.0",
-      "resolved": "https://registry.npmjs.org/pidtree/-/pidtree-0.6.0.tgz",
-      "integrity": "sha512-eG2dWTVw5bzqGRztnHExczNxt5VGsE6OwTeCG3fdUf9KBsZzO3R5OIIIzWR+iZA0NtZ+RDVdaoE2dK1cn6jH4g==",
+    "node_modules/pkg-dir/node_modules/p-locate": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
+      "integrity": "sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==",
       "dev": true,
-      "bin": {
-        "pidtree": "bin/pidtree.js"
+      "license": "MIT",
+      "dependencies": {
+        "p-limit": "^2.2.0"
       },
       "engines": {
-        "node": ">=0.10"
+        "node": ">=8"
       }
     },
     "node_modules/possible-typed-array-names": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.0.0.tgz",
-      "integrity": "sha512-d7Uw+eZoloe0EHDIYoe+bQ5WXnGMOpmiZFTuMWCwpjzzkL2nTjcKiAk4hh8TjnGye2TwWOk3UXucZ+3rbmBa8Q==",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.1.0.tgz",
+      "integrity": "sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg==",
       "dev": true,
+      "license": "MIT",
       "engines": {
         "node": ">= 0.4"
       }
     },
     "node_modules/postcss": {
-      "version": "8.4.31",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.31.tgz",
-      "integrity": "sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==",
+      "version": "8.5.23",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.23.tgz",
+      "integrity": "sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==",
       "funding": [
         {
           "type": "opencollective",
@@ -4102,10 +7613,11 @@
           "url": "https://github.com/sponsors/ai"
         }
       ],
+      "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.6",
-        "picocolors": "^1.0.0",
-        "source-map-js": "^1.0.2"
+        "nanoid": "^3.3.16",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
       },
       "engines": {
         "node": "^10 || ^12 || >=14"
@@ -4147,6 +7659,41 @@
         "node": ">=6.0.0"
       }
     },
+    "node_modules/pretty-format": {
+      "version": "27.5.1",
+      "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-27.5.1.tgz",
+      "integrity": "sha512-Qb1gy5OrP5+zDf2Bvnzdl3jsTf1qXVMazbvCoKhtKqVs4/YK4ozX4gKQJJVyNe+cajNPn0KoC0MC3FUmaHWEmQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-regex": "^5.0.1",
+        "ansi-styles": "^5.0.0",
+        "react-is": "^17.0.1"
+      },
+      "engines": {
+        "node": "^10.13.0 || ^12.13.0 || ^14.15.0 || >=15.0.0"
+      }
+    },
+    "node_modules/pretty-format/node_modules/ansi-styles": {
+      "version": "5.2.0",
+      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz",
+      "integrity": "sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
+      }
+    },
+    "node_modules/pretty-format/node_modules/react-is": {
+      "version": "17.0.2",
+      "resolved": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz",
+      "integrity": "sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/prop-types": {
       "version": "15.8.1",
       "resolved": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz",
@@ -4187,26 +7734,24 @@
       ]
     },
     "node_modules/react": {
-      "version": "18.3.1",
-      "resolved": "https://registry.npmjs.org/react/-/react-18.3.1.tgz",
-      "integrity": "sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ==",
-      "dependencies": {
-        "loose-envify": "^1.1.0"
-      },
+      "version": "19.3.0",
+      "resolved": "https://registry.npmjs.org/react/-/react-19.3.0.tgz",
+      "integrity": "sha512-E8LUcbtBWt20bbl2YoHfx4ZDBdxVTfOKtCZn9cDSJ4l6/nuoApcpIBcj47t2wZoVX8g2ZHuMHbiShgCR1T5Sog==",
+      "license": "MIT",
       "engines": {
         "node": ">=0.10.0"
       }
     },
     "node_modules/react-dom": {
-      "version": "18.3.1",
-      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-18.3.1.tgz",
-      "integrity": "sha512-5m4nQKp+rZRb09LNH59GM4BxTh9251/ylbKIbpe7TpGxfJ+9kv6BLkLBXIjjspbgbnIBNqlI23tRnTWT0snUIw==",
+      "version": "19.3.0",
+      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.3.0.tgz",
+      "integrity": "sha512-JDk8dgif51OjFoDE70+OT9ICyYr+69HlmihNwp1+Nsfbna3t5sIiCa9ZJktDmQ4/1b/rn26hIAR2uYXDMr5r0Q==",
+      "license": "MIT",
       "dependencies": {
-        "loose-envify": "^1.1.0",
-        "scheduler": "^0.23.2"
+        "scheduler": "^0.28.0"
       },
       "peerDependencies": {
-        "react": "^18.3.1"
+        "react": "^19.3.0"
       }
     },
     "node_modules/react-is": {
@@ -4215,19 +7760,35 @@
       "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==",
       "dev": true
     },
+    "node_modules/redent": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/redent/-/redent-3.0.0.tgz",
+      "integrity": "sha512-6tDA8g98We0zd0GvVeMT9arEOnTw9qM03L9cJXaCjrip1OO764RDBLBfrB4cwzNGDj5OA5ioymC9GkizgWJDUg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "indent-string": "^4.0.0",
+        "strip-indent": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/reflect.getprototypeof": {
-      "version": "1.0.6",
-      "resolved": "https://registry.npmjs.org/reflect.getprototypeof/-/reflect.getprototypeof-1.0.6.tgz",
-      "integrity": "sha512-fmfw4XgoDke3kdI6h4xcUz1dG8uaiv5q9gcEwLS4Pnth2kxT+GZ7YehS1JTMGBQmtV7Y4GFGbs2re2NqhdozUg==",
+      "version": "1.0.10",
+      "resolved": "https://registry.npmjs.org/reflect.getprototypeof/-/reflect.getprototypeof-1.0.10.tgz",
+      "integrity": "sha512-00o4I+DVrefhv+nX0ulyi3biSHCPDe+yLv5o/p6d/UVlirijB8E16FtfwSAi4g3tcqrQ4lRAqQSoFEZJehYEcw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
+        "call-bind": "^1.0.8",
         "define-properties": "^1.2.1",
-        "es-abstract": "^1.23.1",
+        "es-abstract": "^1.23.9",
         "es-errors": "^1.3.0",
-        "get-intrinsic": "^1.2.4",
-        "globalthis": "^1.0.3",
-        "which-builtin-type": "^1.1.3"
+        "es-object-atoms": "^1.0.0",
+        "get-intrinsic": "^1.2.7",
+        "get-proto": "^1.0.1",
+        "which-builtin-type": "^1.2.1"
       },
       "engines": {
         "node": ">= 0.4"
@@ -4237,14 +7798,17 @@
       }
     },
     "node_modules/regexp.prototype.flags": {
-      "version": "1.5.3",
-      "resolved": "https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.5.3.tgz",
-      "integrity": "sha512-vqlC04+RQoFalODCbCumG2xIOvapzVMHwsyIGM/SIE8fRhFFsXeH8/QQ+s0T0kDAhKc4k30s73/0ydkHQz6HlQ==",
+      "version": "1.5.4",
+      "resolved": "https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.5.4.tgz",
+      "integrity": "sha512-dYqgNSZbDwkaJ2ceRd9ojCGjBq+mOm9LmtXnAnEGyHhN/5R7iDW2TRw3h+o/jCFxus3P2LfWIIiwowAjANm7IA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
+        "call-bind": "^1.0.8",
         "define-properties": "^1.2.1",
         "es-errors": "^1.3.0",
+        "get-proto": "^1.0.1",
+        "gopd": "^1.2.0",
         "set-function-name": "^2.0.2"
       },
       "engines": {
@@ -4276,6 +7840,7 @@
       "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz",
       "integrity": "sha512-pb/MYmXstAkysRFx8piNI1tGFNQIFA3vkE3Gq4EuA1dF6gHp/+vgZqsCGJapvy8N3Q+4o7FwvquPJcnZ7RYy4g==",
       "dev": true,
+      "license": "MIT",
       "engines": {
         "node": ">=4"
       }
@@ -4336,42 +7901,47 @@
       "integrity": "sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA==",
       "dev": true
     },
-    "node_modules/rimraf": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz",
-      "integrity": "sha512-JZkJMZkAGFFPP2YqXZXPbMlMBgsxzE8ILs4lMIX/2o0L9UBw9O/Y3o6wFw/i9YLapcUJWwqbi3kdxIPdC62TIA==",
-      "deprecated": "Rimraf versions prior to v4 are no longer supported",
+    "node_modules/rolldown": {
+      "version": "1.2.13",
+      "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.13.tgz",
+      "integrity": "sha512-/5apOkwWxtACcQtZ5WlrAsKS4JwXVThQPJZ3RqIruRY9UG9M8e0VlXN068xum/JRKA4aIUoJ13ghe/kGCvidiQ==",
       "dev": true,
+      "license": "MIT",
+      "peer": true,
       "dependencies": {
-        "glob": "^7.1.3"
+        "@oxc-project/types": "=0.153.0",
+        "@rolldown/pluginutils": "^1.0.0"
       },
       "bin": {
-        "rimraf": "bin.js"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
-    "node_modules/rimraf/node_modules/glob": {
-      "version": "7.2.3",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz",
-      "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==",
-      "deprecated": "Glob versions prior to v9 are no longer supported",
-      "dev": true,
-      "dependencies": {
-        "fs.realpath": "^1.0.0",
-        "inflight": "^1.0.4",
-        "inherits": "2",
-        "minimatch": "^3.1.1",
-        "once": "^1.3.0",
-        "path-is-absolute": "^1.0.0"
+        "rolldown": "bin/cli.mjs"
       },
       "engines": {
-        "node": "*"
+        "node": "^20.19.0 || >=22.12.0"
       },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
+      "optionalDependencies": {
+        "@rolldown/binding-android-arm-eabi": "1.2.13",
+        "@rolldown/binding-android-arm64": "1.2.13",
+        "@rolldown/binding-darwin-arm64": "1.2.13",
+        "@rolldown/binding-darwin-x64": "1.2.13",
+        "@rolldown/binding-freebsd-x64": "1.2.13",
+        "@rolldown/binding-linux-arm-gnueabihf": "1.2.13",
+        "@rolldown/binding-linux-arm64-gnu": "1.2.13",
+        "@rolldown/binding-linux-arm64-musl": "1.2.13",
+        "@rolldown/binding-linux-ppc64-gnu": "1.2.13",
+        "@rolldown/binding-linux-s390x-gnu": "1.2.13",
+        "@rolldown/binding-linux-x64-gnu": "1.2.13",
+        "@rolldown/binding-linux-x64-musl": "1.2.13",
+        "@rolldown/binding-openharmony-arm64": "1.2.13",
+        "@rolldown/binding-win32-arm64-msvc": "1.2.13",
+        "@rolldown/binding-win32-x64-msvc": "1.2.13"
+      }
+    },
+    "node_modules/rrweb-cssom": {
+      "version": "0.8.0",
+      "resolved": "https://registry.npmjs.org/rrweb-cssom/-/rrweb-cssom-0.8.0.tgz",
+      "integrity": "sha512-guoltQEx+9aMf2gDZ0s62EcV8lsXR+0w8915TC3ITdn2YueuNjdAYh/levpU9nFaoChh9RUS5ZdQMrKfVEN9tw==",
+      "dev": true,
+      "license": "MIT"
     },
     "node_modules/run-parallel": {
       "version": "1.2.0",
@@ -4397,14 +7967,16 @@
       }
     },
     "node_modules/safe-array-concat": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/safe-array-concat/-/safe-array-concat-1.1.2.tgz",
-      "integrity": "sha512-vj6RsCsWBCf19jIeHEfkRMw8DPiBb+DMXklQ/1SGDHOMlHdPUkZXFQ2YdplS23zESTijAcurb1aSgJA3AgMu1Q==",
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/safe-array-concat/-/safe-array-concat-1.1.4.tgz",
+      "integrity": "sha512-wtZlHyOje6OZTGqAoaDKxFkgRtkF9CnHAVnCHKfuj200wAgL+bSJhdsCD2l0Qx/2ekEXjPWcyKkfGb5CPboslg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
-        "get-intrinsic": "^1.2.4",
-        "has-symbols": "^1.0.3",
+        "call-bind": "^1.0.9",
+        "call-bound": "^1.0.4",
+        "get-intrinsic": "^1.3.0",
+        "has-symbols": "^1.1.0",
         "isarray": "^2.0.5"
       },
       "engines": {
@@ -4414,15 +7986,33 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/safe-push-apply": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/safe-push-apply/-/safe-push-apply-1.0.0.tgz",
+      "integrity": "sha512-iKE9w/Z7xCzUMIZqdBsp6pEQvwuEebH4vdpjcDWnyzaI6yl6O9FHvVpmGelvEHNsoY6wGblkxR6Zty/h00WiSA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "isarray": "^2.0.5"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/safe-regex-test": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/safe-regex-test/-/safe-regex-test-1.0.3.tgz",
-      "integrity": "sha512-CdASjNJPvRa7roO6Ra/gLYBTzYzzPyyBXxIMdGW3USQLyjWEls2RgW5UBTXaQVp+OrpeCK3bLem8smtmheoRuw==",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/safe-regex-test/-/safe-regex-test-1.1.0.tgz",
+      "integrity": "sha512-x/+Cz4YrimQxQccJf5mKEbIa1NzeCRNI5Ecl/ekmlYaampdNLPalVyIcCZNNH3MvmqBugV5TMYZXv0ljslUlaw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.6",
+        "call-bound": "^1.0.2",
         "es-errors": "^1.3.0",
-        "is-regex": "^1.1.4"
+        "is-regex": "^1.2.1"
       },
       "engines": {
         "node": ">= 0.4"
@@ -4431,19 +8021,38 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/scheduler": {
-      "version": "0.23.2",
-      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.2.tgz",
-      "integrity": "sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ==",
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/saxes": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/saxes/-/saxes-6.0.0.tgz",
+      "integrity": "sha512-xAg7SOnEhrm5zI3puOOKyy1OMcMlIJZYNJY7xLBwSze0UjhPLnWfj2GF2EpT0jmzaJKIWKHLsaSSajf35bcYnA==",
+      "dev": true,
+      "license": "ISC",
       "dependencies": {
-        "loose-envify": "^1.1.0"
+        "xmlchars": "^2.2.0"
+      },
+      "engines": {
+        "node": ">=v12.22.7"
       }
     },
+    "node_modules/scheduler": {
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.28.0.tgz",
+      "integrity": "sha512-juorfCmIkIw8tT+p5BXSm6PJjQF/ycEYmKyzURCIt/RaZIhL+PulbQ9Yu2z1HdOJDdqDTlxA1+xKBmHXJsczAw==",
+      "license": "MIT"
+    },
     "node_modules/semver": {
-      "version": "7.6.3",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.3.tgz",
-      "integrity": "sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A==",
-      "dev": true,
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "devOptional": true,
+      "license": "ISC",
       "bin": {
         "semver": "bin/semver.js"
       },
@@ -4483,6 +8092,71 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/set-proto": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/set-proto/-/set-proto-1.0.0.tgz",
+      "integrity": "sha512-RJRdvCo6IAnPdsvP/7m6bsQqNnn1FCBX5ZNtFL98MmFF/4xAIJTIg1YbHW5DC2W5SKZanrC6i4HsJqlajw/dZw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "dunder-proto": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "es-object-atoms": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/sharp": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.35.5.tgz",
+      "integrity": "sha512-Ywn4OnzGukp7CDMrp08RQ50YKmuwG47brZgIVPTvBaaAfQlRlygrRqSrxdCiL9M+LlzLBiJ68IR1QqvzHyjC7g==",
+      "license": "Apache-2.0",
+      "optional": true,
+      "dependencies": {
+        "@img/colour": "^1.1.0",
+        "detect-libc": "^2.1.2",
+        "semver": "^7.8.5"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-darwin-arm64": "0.35.5",
+        "@img/sharp-darwin-x64": "0.35.5",
+        "@img/sharp-freebsd-wasm32": "0.35.5",
+        "@img/sharp-libvips-darwin-arm64": "1.3.4",
+        "@img/sharp-libvips-darwin-x64": "1.3.4",
+        "@img/sharp-libvips-linux-arm": "1.3.4",
+        "@img/sharp-libvips-linux-arm64": "1.3.4",
+        "@img/sharp-libvips-linux-ppc64": "1.3.4",
+        "@img/sharp-libvips-linux-riscv64": "1.3.4",
+        "@img/sharp-libvips-linux-s390x": "1.3.4",
+        "@img/sharp-libvips-linux-x64": "1.3.4",
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.4",
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.4",
+        "@img/sharp-linux-arm": "0.35.5",
+        "@img/sharp-linux-arm64": "0.35.5",
+        "@img/sharp-linux-ppc64": "0.35.5",
+        "@img/sharp-linux-riscv64": "0.35.5",
+        "@img/sharp-linux-s390x": "0.35.5",
+        "@img/sharp-linux-x64": "0.35.5",
+        "@img/sharp-linuxmusl-arm64": "0.35.5",
+        "@img/sharp-linuxmusl-x64": "0.35.5",
+        "@img/sharp-webcontainers-wasm32": "0.35.5",
+        "@img/sharp-win32-arm64": "0.35.5",
+        "@img/sharp-win32-ia32": "0.35.5",
+        "@img/sharp-win32-x64": "0.35.5"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/shebang-command": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
@@ -4505,15 +8179,73 @@
       }
     },
     "node_modules/side-channel": {
-      "version": "1.0.6",
-      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.6.tgz",
-      "integrity": "sha512-fDW/EZ6Q9RiO8eFG8Hj+7u/oW+XrPTIChwCOM2+th2A6OblDtYYIpve9m+KvI9Z4C9qSEXlaGR6bTEYHReuglA==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
+      "integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
         "es-errors": "^1.3.0",
-        "get-intrinsic": "^1.2.4",
-        "object-inspect": "^1.13.1"
+        "object-inspect": "^1.13.4",
+        "side-channel-list": "^1.0.1",
+        "side-channel-map": "^1.0.1",
+        "side-channel-weakmap": "^1.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-list": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+      "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-map": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+      "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-weakmap": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+      "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3",
+        "side-channel-map": "^1.0.1"
       },
       "engines": {
         "node": ">= 0.4"
@@ -4568,9 +8300,10 @@
       }
     },
     "node_modules/source-map-js": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
-      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
+      "license": "BSD-3-Clause",
       "engines": {
         "node": ">=0.10.0"
       }
@@ -4579,28 +8312,42 @@
       "version": "3.0.3",
       "resolved": "https://registry.npmjs.org/sparse-bitfield/-/sparse-bitfield-3.0.3.tgz",
       "integrity": "sha512-kvzhi7vqKTfkh0PZU+2D2PIllw2ymqJKujUcyPMd9Y75Nv4nPbGJZXNhxsgdQab2BmlDct1YnfQCguEvHr7VsQ==",
+      "license": "MIT",
       "dependencies": {
         "memory-pager": "^1.0.2"
       }
     },
+    "node_modules/std-env": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/std-env/-/std-env-4.3.0.tgz",
+      "integrity": "sha512-OtU/EgQ1kIm5KwqQpBC6ZEMXrZRui11w8zgfTWp8cdO9B8OaPsbA8bTHO2P+HNo1VlUTGMVBwPhydu6poeXiag==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/stop-iteration-iterator": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/stop-iteration-iterator/-/stop-iteration-iterator-1.0.0.tgz",
-      "integrity": "sha512-iCGQj+0l0HOdZ2AEeBADlsRC+vsnDsZsbdSiH1yNSjcfKM7fdpCMfqAL/dwF5BLiw/XhRft/Wax6zQbhq2BcjQ==",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/stop-iteration-iterator/-/stop-iteration-iterator-1.1.0.tgz",
+      "integrity": "sha512-eLoXW/DHyl62zxY4SCaIgnRhuMr6ri4juEYARS8E6sCEqzKpOiE521Ucofdx+KnDZl5xmvGYaaKCk5FEOxJCoQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "internal-slot": "^1.0.4"
+        "es-errors": "^1.3.0",
+        "internal-slot": "^1.1.0"
       },
       "engines": {
         "node": ">= 0.4"
       }
     },
-    "node_modules/streamsearch": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/streamsearch/-/streamsearch-1.1.0.tgz",
-      "integrity": "sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==",
-      "engines": {
-        "node": ">=10.0.0"
+    "node_modules/streamx": {
+      "version": "2.28.1",
+      "resolved": "https://registry.npmjs.org/streamx/-/streamx-2.28.1.tgz",
+      "integrity": "sha512-zEzXb0s5Cds7tqMH6rhZ05lcJydCWiQPEwiNngVqzsxCc962vLY4Uw+mW7od8kDH258k2Uz/JrOkdIAAhSh9VA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "events-universal": "^1.0.0",
+        "fast-fifo": "^1.3.2",
+        "text-decoder": "^1.1.0"
       }
     },
     "node_modules/string-argv": {
@@ -4612,80 +8359,6 @@
         "node": ">=0.6.19"
       }
     },
-    "node_modules/string-width": {
-      "version": "5.1.2",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz",
-      "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==",
-      "dev": true,
-      "dependencies": {
-        "eastasianwidth": "^0.2.0",
-        "emoji-regex": "^9.2.2",
-        "strip-ansi": "^7.0.1"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/string-width-cjs": {
-      "name": "string-width",
-      "version": "4.2.3",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
-      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
-      "dev": true,
-      "dependencies": {
-        "emoji-regex": "^8.0.0",
-        "is-fullwidth-code-point": "^3.0.0",
-        "strip-ansi": "^6.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/string-width-cjs/node_modules/emoji-regex": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
-      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
-      "dev": true
-    },
-    "node_modules/string-width-cjs/node_modules/is-fullwidth-code-point": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
-      "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
-      "dev": true,
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/string-width/node_modules/ansi-regex": {
-      "version": "6.1.0",
-      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.1.0.tgz",
-      "integrity": "sha512-7HSX4QQb4CspciLpVFwyRe79O3xsIZDDLER21kERQ71oaPodF8jL725AgJMFAYbooIqolJoRLuM81SpeUkpkvA==",
-      "dev": true,
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-regex?sponsor=1"
-      }
-    },
-    "node_modules/string-width/node_modules/strip-ansi": {
-      "version": "7.1.0",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.0.tgz",
-      "integrity": "sha512-iq6eVVI64nQQTRYq2KtEg2d2uU7LElhTJwsH4YzIHZshxlgZms/wIc4VoDQTlG/IvVIrBKG06CrZnp0qv7hkcQ==",
-      "dev": true,
-      "dependencies": {
-        "ansi-regex": "^6.0.1"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/strip-ansi?sponsor=1"
-      }
-    },
     "node_modules/string.prototype.includes": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/string.prototype.includes/-/string.prototype.includes-2.0.1.tgz",
@@ -4737,15 +8410,20 @@
       }
     },
     "node_modules/string.prototype.trim": {
-      "version": "1.2.9",
-      "resolved": "https://registry.npmjs.org/string.prototype.trim/-/string.prototype.trim-1.2.9.tgz",
-      "integrity": "sha512-klHuCNxiMZ8MlsOihJhJEBJAiMVqU3Z2nEXWfWnIqjN0gEFS9J9+IxKozWWtQGcgoa1WUZzLjKPTr4ZHNFTFxw==",
+      "version": "1.2.11",
+      "resolved": "https://registry.npmjs.org/string.prototype.trim/-/string.prototype.trim-1.2.11.tgz",
+      "integrity": "sha512-PwvK7BU+CMTJGYQCTZb5RWXIML92lftJLhQz1tBzgKiqGxJaMlBAa48POXaNAC2s4y8jr3EFqrkF9+44neS46w==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
+        "call-bind": "^1.0.9",
+        "call-bound": "^1.0.4",
+        "define-data-property": "^1.1.4",
         "define-properties": "^1.2.1",
-        "es-abstract": "^1.23.0",
-        "es-object-atoms": "^1.0.0"
+        "es-abstract": "^1.24.2",
+        "es-object-atoms": "^1.1.2",
+        "has-property-descriptors": "^1.0.2",
+        "safe-regex-test": "^1.1.0"
       },
       "engines": {
         "node": ">= 0.4"
@@ -4755,14 +8433,19 @@
       }
     },
     "node_modules/string.prototype.trimend": {
-      "version": "1.0.8",
-      "resolved": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.8.tgz",
-      "integrity": "sha512-p73uL5VCHCO2BZZ6krwwQE3kCzM7NKmis8S//xEC6fQonchbum4eP6kR4DLEjQFO3Wnj3Fuo8NM0kOSjVdHjZQ==",
+      "version": "1.0.10",
+      "resolved": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.10.tgz",
+      "integrity": "sha512-2+3aDAOmPTmuFwjDnmJG2ctEkQKVki7vOSqaxkv42Mowj1V6PnvuwFCRrR5lChUux1TBskPjfkeTOhqczDMxTw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
+        "call-bind": "^1.0.9",
+        "call-bound": "^1.0.4",
         "define-properties": "^1.2.1",
-        "es-object-atoms": "^1.0.0"
+        "es-object-atoms": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
       },
       "funding": {
         "url": "https://github.com/sponsors/ljharb"
@@ -4785,31 +8468,6 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/strip-ansi": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
-      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "dev": true,
-      "dependencies": {
-        "ansi-regex": "^5.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/strip-ansi-cjs": {
-      "name": "strip-ansi",
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
-      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "dev": true,
-      "dependencies": {
-        "ansi-regex": "^5.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/strip-bom": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz",
@@ -4831,11 +8489,25 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/strip-indent": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/strip-indent/-/strip-indent-3.0.0.tgz",
+      "integrity": "sha512-laJTa3Jb+VQpaC6DseHhF7dXVqHTfJPCRDaEbid/drOhgitgYku/letMUqOXFoWV0zIIUbjpdH2t+tYj4bQMRQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "min-indent": "^1.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/strip-json-comments": {
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz",
       "integrity": "sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig==",
       "dev": true,
+      "license": "MIT",
       "engines": {
         "node": ">=8"
       },
@@ -4844,9 +8516,10 @@
       }
     },
     "node_modules/styled-jsx": {
-      "version": "5.1.1",
-      "resolved": "https://registry.npmjs.org/styled-jsx/-/styled-jsx-5.1.1.tgz",
-      "integrity": "sha512-pW7uC1l4mBZ8ugbiZrcIsiIvVx1UmTfw7UkC3Um2tmfUq9Bhk8IiyEIPl6F8agHgjzku6j0xQEZbfA5uSgSaCw==",
+      "version": "5.1.6",
+      "resolved": "https://registry.npmjs.org/styled-jsx/-/styled-jsx-5.1.6.tgz",
+      "integrity": "sha512-qSVyDTeMotdvQYoHWLNGwRFJHC+i+ZvdBRYosOFgC+Wg1vx4frN2/RG/NA7SYqqvKNLf39P2LSRA2pu6n0XYZA==",
+      "license": "MIT",
       "dependencies": {
         "client-only": "0.0.1"
       },
@@ -4854,7 +8527,7 @@
         "node": ">= 12.0.0"
       },
       "peerDependencies": {
-        "react": ">= 16.8.0 || 17.x.x || ^18.0.0-0"
+        "react": ">= 16.8.0 || 17.x.x || ^18.0.0-0 || ^19.0.0-0"
       },
       "peerDependenciesMeta": {
         "@babel/core": {
@@ -4889,6 +8562,13 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/symbol-tree": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
+      "integrity": "sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/synckit": {
       "version": "0.9.2",
       "resolved": "https://registry.npmjs.org/synckit/-/synckit-0.9.2.tgz",
@@ -4914,11 +8594,156 @@
         "node": ">=6"
       }
     },
-    "node_modules/text-table": {
-      "version": "0.2.0",
-      "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
-      "integrity": "sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw==",
-      "dev": true
+    "node_modules/tar-stream": {
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-3.2.2.tgz",
+      "integrity": "sha512-+8NeqHRjQWH9nYlwo2gamAMImZCVzI4UoEgDpWorBt9OEfppiZn+uSkskzQKPWIZyji/C8fpWO7u69G0DX0tbg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "b4a": "^1.9.0",
+        "bare-fs": "^4.8.2",
+        "fast-fifo": "^1.3.2",
+        "streamx": "^2.28.1"
+      }
+    },
+    "node_modules/tar-stream/node_modules/b4a": {
+      "version": "1.9.0",
+      "resolved": "https://registry.npmjs.org/b4a/-/b4a-1.9.0.tgz",
+      "integrity": "sha512-dpfcF9fDNR6++cthXR67iyhgqWy9CBouAvIWhIntzBG6cvK/cnIPiZQjBwi/ZqjjBEDGfoNDtmB0kTjroOJ3pQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "peerDependencies": {
+        "react-native-b4a": "*"
+      },
+      "peerDependenciesMeta": {
+        "react-native-b4a": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/teex": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/teex/-/teex-1.0.1.tgz",
+      "integrity": "sha512-eYE6iEI62Ni1H8oIa7KlDU6uQBtqr4Eajni3wX7rpfXD8ysFx8z0+dri+KWEPWpBsxXfxu58x/0jvTVT1ekOSg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "streamx": "^2.12.5"
+      }
+    },
+    "node_modules/text-decoder": {
+      "version": "1.2.7",
+      "resolved": "https://registry.npmjs.org/text-decoder/-/text-decoder-1.2.7.tgz",
+      "integrity": "sha512-vlLytXkeP4xvEq2otHeJfSQIRyWxo/oZGEbXrtEEF9Hnmrdly59sUbzZ/QgyWuLYHctCHxFF4tRQZNQ9k60ExQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "b4a": "^1.6.4"
+      }
+    },
+    "node_modules/text-decoder/node_modules/b4a": {
+      "version": "1.9.0",
+      "resolved": "https://registry.npmjs.org/b4a/-/b4a-1.9.0.tgz",
+      "integrity": "sha512-dpfcF9fDNR6++cthXR67iyhgqWy9CBouAvIWhIntzBG6cvK/cnIPiZQjBwi/ZqjjBEDGfoNDtmB0kTjroOJ3pQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "peerDependencies": {
+        "react-native-b4a": "*"
+      },
+      "peerDependenciesMeta": {
+        "react-native-b4a": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/tinybench": {
+      "version": "6.2.1",
+      "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-6.2.1.tgz",
+      "integrity": "sha512-IAbQaPJIIdhVxi0mqy9lez1wEwje0UQf9F1vwtbelEG5Nbgn0nPOxCvU+mNeNS9gyJTAhrHp74CbUaSynQpZcQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.0.0"
+      }
+    },
+    "node_modules/tinyexec": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.3.1.tgz",
+      "integrity": "sha512-GCvB3aoys96IuDFBMcTB46JOR6mdMtAToqwiW8JlWhsoh1mhHi/xn9ss/Dg7N555GiJyEt2qzoG/NHCwM6h1EA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.4"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/tinyglobby/node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/tinyglobby/node_modules/picomatch": {
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz",
+      "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/tldts": {
+      "version": "6.1.86",
+      "resolved": "https://registry.npmjs.org/tldts/-/tldts-6.1.86.tgz",
+      "integrity": "sha512-WMi/OQ2axVTf/ykqCQgXiIct+mSQDFdH2fkwhPwgEwvJ1kSzZRiinb0zF2Xb8u4+OqPChmyI6MEu4EezNJz+FQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tldts-core": "^6.1.86"
+      },
+      "bin": {
+        "tldts": "bin/cli.js"
+      }
+    },
+    "node_modules/tldts-core": {
+      "version": "6.1.86",
+      "resolved": "https://registry.npmjs.org/tldts-core/-/tldts-core-6.1.86.tgz",
+      "integrity": "sha512-Je6p7pkk+KMzMv2XXKmAE3McmolOQFdxkKw0R8EYNr7sELW46JqnNeTX8ybPiQgvg1ymCoF8LXs5fzFaZvJPTA==",
+      "dev": true,
+      "license": "MIT"
     },
     "node_modules/to-regex-range": {
       "version": "5.0.1",
@@ -4932,27 +8757,42 @@
         "node": ">=8.0"
       }
     },
+    "node_modules/tough-cookie": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-5.1.2.tgz",
+      "integrity": "sha512-FVDYdxtnj0G6Qm/DhNPSb8Ju59ULcup3tuJxkFb5K8Bv2pUXILbf0xZWU8PX8Ov19OXljbUyveOFwRMwkXzO+A==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "tldts": "^6.1.32"
+      },
+      "engines": {
+        "node": ">=16"
+      }
+    },
     "node_modules/tr46": {
-      "version": "4.1.1",
-      "resolved": "https://registry.npmjs.org/tr46/-/tr46-4.1.1.tgz",
-      "integrity": "sha512-2lv/66T7e5yNyhAAC4NaKe5nVavzuGJQVVtRYLyQ2OI8tsJ61PMLlelehb0wi2Hx6+hT/OJUWZcw8MjlSRnxvw==",
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/tr46/-/tr46-5.1.1.tgz",
+      "integrity": "sha512-hdF5ZgjTqgAntKkklYw0R03MG2x/bSzTtkxmIRw/sTNV8YXsCJ1tfLAX23lhxhHJlEf3CRCOCGGWw3vI3GaSPw==",
+      "license": "MIT",
       "dependencies": {
-        "punycode": "^2.3.0"
+        "punycode": "^2.3.1"
       },
       "engines": {
-        "node": ">=14"
+        "node": ">=18"
       }
     },
     "node_modules/ts-api-utils": {
-      "version": "1.3.0",
-      "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-1.3.0.tgz",
-      "integrity": "sha512-UQMIo7pb8WRomKR1/+MFVLTroIvDVtMX3K6OUir8ynLyzB8Jeriont2bTAtmNPa1ekAgN7YPDyf6V+ygrdU+eQ==",
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.5.0.tgz",
+      "integrity": "sha512-OJ/ibxhPlqrMM0UiNHJ/0CKQkoKF243/AEmplt3qpRgkW8VG7IfOS41h7V8TjITqdByHzrjcS/2si+y4lIh8NA==",
       "dev": true,
+      "license": "MIT",
       "engines": {
-        "node": ">=16"
+        "node": ">=18.12"
       },
       "peerDependencies": {
-        "typescript": ">=4.2.0"
+        "typescript": ">=4.8.4"
       }
     },
     "node_modules/tsconfig-paths": {
@@ -4968,9 +8808,29 @@
       }
     },
     "node_modules/tslib": {
-      "version": "2.8.0",
-      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.0.tgz",
-      "integrity": "sha512-jWVzBLplnCmoaTr13V9dYbiQ99wvZRd0vNWaDRg+aVYRcjDF3nDksxFDE/+fkXnKhpnUUkmx5pK/v8mCtLVqZA=="
+      "version": "2.8.1",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
+      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
+      "license": "0BSD"
+    },
+    "node_modules/tsx": {
+      "version": "4.23.15",
+      "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.23.15.tgz",
+      "integrity": "sha512-Yiex1Ovn8z2xPpOWckIiysV1SSyRMY9BkLF++q0yKiDxCqRhosKfMg3janKkiLBwZ5c/YryloKwGZcrEmtwxKw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "esbuild": "~0.28.0"
+      },
+      "bin": {
+        "tsx": "dist/cli.mjs"
+      },
+      "engines": {
+        "node": ">=18.0.0"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      }
     },
     "node_modules/type-check": {
       "version": "0.4.0",
@@ -4984,152 +8844,462 @@
         "node": ">= 0.8.0"
       }
     },
-    "node_modules/type-fest": {
-      "version": "0.20.2",
-      "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz",
-      "integrity": "sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==",
+    "node_modules/typed-array-buffer": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/typed-array-buffer/-/typed-array-buffer-1.0.3.tgz",
+      "integrity": "sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.3",
+        "es-errors": "^1.3.0",
+        "is-typed-array": "^1.1.14"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/typed-array-byte-length": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/typed-array-byte-length/-/typed-array-byte-length-1.0.3.tgz",
+      "integrity": "sha512-BaXgOuIxz8n8pIq3e7Atg/7s+DpiYrxn4vdot3w9KbnBhcRQq6o3xemQdIfynqSeXeDrF32x+WvfzmOjPiY9lg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bind": "^1.0.8",
+        "for-each": "^0.3.3",
+        "gopd": "^1.2.0",
+        "has-proto": "^1.2.0",
+        "is-typed-array": "^1.1.14"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/typed-array-byte-offset": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/typed-array-byte-offset/-/typed-array-byte-offset-1.0.5.tgz",
+      "integrity": "sha512-0FHJvLPqZ7KJzp17O13jfsAjsqazgrxBu2zEK95PmUz8lv2+GjRuxUInCr2Rk9Dms3ihN21zJ929ZO43yJ95QQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "available-typed-arrays": "^1.0.7",
+        "call-bind": "^1.0.9",
+        "for-each": "^0.3.5",
+        "gopd": "^1.2.0",
+        "is-typed-array": "^1.1.15",
+        "reflect.getprototypeof": "^1.0.10"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/typed-array-length": {
+      "version": "1.0.8",
+      "resolved": "https://registry.npmjs.org/typed-array-length/-/typed-array-length-1.0.8.tgz",
+      "integrity": "sha512-phPGCwqr2+Qo0fwniCE8e4pKnGu/yFb5nD5Y8bf0EEeiI5GklnACYA9GFy/DrAeRrKHXvHn+1SUsOWgJp6RO+g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bind": "^1.0.9",
+        "for-each": "^0.3.5",
+        "gopd": "^1.2.0",
+        "is-typed-array": "^1.1.15",
+        "possible-typed-array-names": "^1.1.0",
+        "reflect.getprototypeof": "^1.0.10"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.6.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.6.3.tgz",
+      "integrity": "sha512-hjcS1mhfuyi4WW8IWtjP7brDrG2cuDZukyrYrSauoXGNgx0S7zceP07adYkJycEr56BOUTNPzbInooiN3fn1qw==",
+      "dev": true,
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/typescript-eslint": {
+      "version": "8.71.1",
+      "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.71.1.tgz",
+      "integrity": "sha512-oiNVPC3/NbV1FpaHU07l8O6ynqG9v4PAiW2WvTrAmZdR0f2HI/gE668ElMLCK7Xbsu5k2fK5C4fXNiq05j7/nQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@typescript-eslint/eslint-plugin": "8.71.1",
+        "@typescript-eslint/parser": "8.71.1",
+        "@typescript-eslint/typescript-estree": "8.71.1",
+        "@typescript-eslint/utils": "8.71.1"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
+        "typescript": ">=4.8.4 <6.1.0"
+      }
+    },
+    "node_modules/unbox-primitive": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.1.0.tgz",
+      "integrity": "sha512-nWJ91DjeOkej/TA8pXQ3myruKpKEYgqvpw9lz4OPHj/NWFNluYrjbz9j01CJ8yKQd2g4jFoOkINCTW2I5LEEyw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.3",
+        "has-bigints": "^1.0.2",
+        "has-symbols": "^1.1.0",
+        "which-boxed-primitive": "^1.1.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/undici-types": {
+      "version": "7.24.6",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.24.6.tgz",
+      "integrity": "sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/update-browserslist-db": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.3.4.tgz",
+      "integrity": "sha512-t8wonIOdQyOjtPd2VktlBu6QjTVTks6v8bSi7kd0r2Vll8TK1JYDZtRRdbmCHOAMphkZgrzK+L+vXK4pyZ8t4A==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/browserslist"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/browserslist"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "escalade": "^3.2.0",
+        "picocolors": "^1.1.1"
+      },
+      "bin": {
+        "update-browserslist-db": "cli.js"
+      },
+      "peerDependencies": {
+        "browserslist": ">= 4.21.0"
+      }
+    },
+    "node_modules/uri-js": {
+      "version": "4.4.1",
+      "resolved": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz",
+      "integrity": "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "punycode": "^2.1.0"
+      }
+    },
+    "node_modules/vite": {
+      "version": "8.3.3",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-8.3.3.tgz",
+      "integrity": "sha512-cTAldKPImjg6c+gk48U19POPn3GCBzZwpdsN8ZMEEcbpes+6/wvfqUd0C2y3qYY4wsj8PwgFwrZ/1jBPVttMSg==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "lightningcss": "^1.33.0",
+        "picomatch": "^4.0.7",
+        "postcss": "^8.5.28",
+        "rolldown": "~1.2.11",
+        "tinyglobby": "^0.2.17"
+      },
+      "bin": {
+        "vite": "bin/vite.js"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "funding": {
+        "url": "https://github.com/vitejs/vite?sponsor=1"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      },
+      "peerDependencies": {
+        "@types/node": "^20.19.0 || >=22.12.0",
+        "@vitejs/devtools": "^0.7.1",
+        "esbuild": "^0.27.0 || ^0.28.0",
+        "jiti": ">=1.21.0",
+        "less": "^4.0.0",
+        "sass": "^1.70.0",
+        "sass-embedded": "^1.70.0",
+        "stylus": ">=0.54.8",
+        "sugarss": "^5.0.0",
+        "terser": "^5.16.0",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        },
+        "@vitejs/devtools": {
+          "optional": true
+        },
+        "esbuild": {
+          "optional": true
+        },
+        "jiti": {
+          "optional": true
+        },
+        "less": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "sass-embedded": {
+          "optional": true
+        },
+        "stylus": {
+          "optional": true
+        },
+        "sugarss": {
+          "optional": true
+        },
+        "terser": {
+          "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/vite/node_modules/picomatch": {
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz",
+      "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==",
       "dev": true,
+      "license": "MIT",
+      "peer": true,
       "engines": {
-        "node": ">=10"
+        "node": ">=12"
       },
       "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
+        "url": "https://github.com/sponsors/jonschlinkert"
       }
     },
-    "node_modules/typed-array-buffer": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/typed-array-buffer/-/typed-array-buffer-1.0.2.tgz",
-      "integrity": "sha512-gEymJYKZtKXzzBzM4jqa9w6Q1Jjm7x2d+sh19AdsD4wqnMPDYyvwpsIc2Q/835kHuo3BEQ7CjelGhfTsoBb2MQ==",
+    "node_modules/vite/node_modules/postcss": {
+      "version": "8.5.29",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.29.tgz",
+      "integrity": "sha512-49cGhUbXj8Qenv0iTMxA1cFBzxXoctpC9Ujd77t1WcbJIr6nF/eI7g/8MgxrYldFRuAXvja7xQRwavoW7kgrxQ==",
       "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "peer": true,
       "dependencies": {
-        "call-bind": "^1.0.7",
-        "es-errors": "^1.3.0",
-        "is-typed-array": "^1.1.13"
+        "nanoid": "^3.3.19",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.2"
       },
       "engines": {
-        "node": ">= 0.4"
+        "node": "^10 || ^12 || >=14"
       }
     },
-    "node_modules/typed-array-byte-length": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/typed-array-byte-length/-/typed-array-byte-length-1.0.1.tgz",
-      "integrity": "sha512-3iMJ9q0ao7WE9tWcaYKIptkNBuOIcZCCT0d4MRvuuH88fEoEH62IuQe0OtraD3ebQEoTRk8XCBoknUNc1Y67pw==",
+    "node_modules/vitest": {
+      "version": "5.0.3",
+      "resolved": "https://registry.npmjs.org/vitest/-/vitest-5.0.3.tgz",
+      "integrity": "sha512-xMw97S3rjdtj5dkVat7jCsqWBpvchs3RlpQctUqwJD0KkERk40vz2fJ77lDwW/Vzh/pk18eItYAzkodhSes3jQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
-        "for-each": "^0.3.3",
-        "gopd": "^1.0.1",
-        "has-proto": "^1.0.3",
-        "is-typed-array": "^1.1.13"
+        "@types/chai": "^5.2.2",
+        "@vitest/mocker": "5.0.3",
+        "chai": "^6.2.2",
+        "es-module-lexer": "^2.3.2",
+        "expect-type": "^1.4.0",
+        "magic-string": "^1.2.3",
+        "obug": "^2.1.4",
+        "picomatch": "^4.0.7",
+        "std-env": "^4.2.0",
+        "tinybench": "^6.1.4",
+        "tinyexec": "^1.3.0",
+        "tinyglobby": "^0.2.17",
+        "why-is-node-running": "3.2.1"
+      },
+      "bin": {
+        "vitest": "vitest.mjs"
       },
       "engines": {
-        "node": ">= 0.4"
+        "node": "^22.12.0 || ^24.0.0 || >=26.0.0"
       },
       "funding": {
-        "url": "https://github.com/sponsors/ljharb"
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "@edge-runtime/vm": "*",
+        "@opentelemetry/api": "^1.9.0",
+        "@types/node": "^22.0.0 || >=24.0.0",
+        "@vitest/browser-playwright": "5.0.3",
+        "@vitest/browser-preview": "5.0.3",
+        "@vitest/browser-webdriverio": "^5.0.0-beta.5 || >=5.0.0",
+        "@vitest/coverage-istanbul": "5.0.3",
+        "@vitest/coverage-v8": "5.0.3",
+        "@vitest/ui": "5.0.3",
+        "happy-dom": "*",
+        "jsdom": "*",
+        "vite": "^6.4.0 || ^7.0.0 || ^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@edge-runtime/vm": {
+          "optional": true
+        },
+        "@opentelemetry/api": {
+          "optional": true
+        },
+        "@types/node": {
+          "optional": true
+        },
+        "@vitest/browser-playwright": {
+          "optional": true
+        },
+        "@vitest/browser-preview": {
+          "optional": true
+        },
+        "@vitest/browser-webdriverio": {
+          "optional": true
+        },
+        "@vitest/coverage-istanbul": {
+          "optional": true
+        },
+        "@vitest/coverage-v8": {
+          "optional": true
+        },
+        "@vitest/ui": {
+          "optional": true
+        },
+        "happy-dom": {
+          "optional": true
+        },
+        "jsdom": {
+          "optional": true
+        },
+        "vite": {
+          "optional": false
+        }
       }
     },
-    "node_modules/typed-array-byte-offset": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/typed-array-byte-offset/-/typed-array-byte-offset-1.0.2.tgz",
-      "integrity": "sha512-Ous0vodHa56FviZucS2E63zkgtgrACj7omjwd/8lTEMEPFFyjfixMZ1ZXenpgCFBBt4EC1J2XsyVS2gkG0eTFA==",
+    "node_modules/vitest/node_modules/picomatch": {
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz",
+      "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==",
       "dev": true,
-      "dependencies": {
-        "available-typed-arrays": "^1.0.7",
-        "call-bind": "^1.0.7",
-        "for-each": "^0.3.3",
-        "gopd": "^1.0.1",
-        "has-proto": "^1.0.3",
-        "is-typed-array": "^1.1.13"
-      },
+      "license": "MIT",
       "engines": {
-        "node": ">= 0.4"
+        "node": ">=12"
       },
       "funding": {
-        "url": "https://github.com/sponsors/ljharb"
+        "url": "https://github.com/sponsors/jonschlinkert"
       }
     },
-    "node_modules/typed-array-length": {
-      "version": "1.0.6",
-      "resolved": "https://registry.npmjs.org/typed-array-length/-/typed-array-length-1.0.6.tgz",
-      "integrity": "sha512-/OxDN6OtAk5KBpGb28T+HZc2M+ADtvRxXrKKbUwtsLgdoxgX13hyy7ek6bFRl5+aBs2yZzB0c4CnQfAtVypW/g==",
+    "node_modules/w3c-xmlserializer": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/w3c-xmlserializer/-/w3c-xmlserializer-5.0.0.tgz",
+      "integrity": "sha512-o8qghlI8NZHU1lLPrpi2+Uq7abh4GGPpYANlalzWxyWteJOCsr/P+oPBA49TOLu5FTZO4d3F9MnWJfiMo4BkmA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.7",
-        "for-each": "^0.3.3",
-        "gopd": "^1.0.1",
-        "has-proto": "^1.0.3",
-        "is-typed-array": "^1.1.13",
-        "possible-typed-array-names": "^1.0.0"
+        "xml-name-validator": "^5.0.0"
       },
       "engines": {
-        "node": ">= 0.4"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/ljharb"
+        "node": ">=18"
       }
     },
-    "node_modules/typescript": {
-      "version": "5.6.3",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.6.3.tgz",
-      "integrity": "sha512-hjcS1mhfuyi4WW8IWtjP7brDrG2cuDZukyrYrSauoXGNgx0S7zceP07adYkJycEr56BOUTNPzbInooiN3fn1qw==",
-      "dev": true,
-      "bin": {
-        "tsc": "bin/tsc",
-        "tsserver": "bin/tsserver"
-      },
+    "node_modules/webidl-conversions": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-7.0.0.tgz",
+      "integrity": "sha512-VwddBukDzu71offAQR975unBIGqfKZpM+8ZX6ySk8nYhVoo5CYaZyzt3YBvYtRtO+aoGlqxPg/B87NGVZ/fu6g==",
       "engines": {
-        "node": ">=14.17"
+        "node": ">=12"
       }
     },
-    "node_modules/unbox-primitive": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.0.2.tgz",
-      "integrity": "sha512-61pPlCD9h51VoreyJ0BReideM3MDKMKnh6+V9L08331ipq6Q8OFXZYiqP6n/tbHx4s5I9uRhcye6BrbkizkBDw==",
+    "node_modules/whatwg-encoding": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/whatwg-encoding/-/whatwg-encoding-3.1.1.tgz",
+      "integrity": "sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==",
+      "deprecated": "Use @exodus/bytes instead for a more spec-conformant and faster implementation",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "call-bind": "^1.0.2",
-        "has-bigints": "^1.0.2",
-        "has-symbols": "^1.0.3",
-        "which-boxed-primitive": "^1.0.2"
+        "iconv-lite": "0.6.3"
       },
-      "funding": {
-        "url": "https://github.com/sponsors/ljharb"
+      "engines": {
+        "node": ">=18"
       }
     },
-    "node_modules/undici-types": {
-      "version": "6.19.8",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.19.8.tgz",
-      "integrity": "sha512-ve2KP6f/JnbPBFyobGHuerC9g1FYGn/F8n1LWTwNxCEzd6IfqTwUQcNXgEtmmQ6DlRrC1hrSrBnCZPokRrDHjw==",
-      "dev": true
-    },
-    "node_modules/uri-js": {
-      "version": "4.4.1",
-      "resolved": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz",
-      "integrity": "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==",
+    "node_modules/whatwg-mimetype": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-4.0.0.tgz",
+      "integrity": "sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==",
       "dev": true,
-      "dependencies": {
-        "punycode": "^2.1.0"
-      }
-    },
-    "node_modules/webidl-conversions": {
-      "version": "7.0.0",
-      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-7.0.0.tgz",
-      "integrity": "sha512-VwddBukDzu71offAQR975unBIGqfKZpM+8ZX6ySk8nYhVoo5CYaZyzt3YBvYtRtO+aoGlqxPg/B87NGVZ/fu6g==",
+      "license": "MIT",
       "engines": {
-        "node": ">=12"
+        "node": ">=18"
       }
     },
     "node_modules/whatwg-url": {
-      "version": "13.0.0",
-      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-13.0.0.tgz",
-      "integrity": "sha512-9WWbymnqj57+XEuqADHrCJ2eSXzn8WXIW/YSGaZtb2WKAInQ6CHfaUUcTyyver0p8BDg5StLQq8h1vtZuwmOig==",
+      "version": "14.2.0",
+      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-14.2.0.tgz",
+      "integrity": "sha512-De72GdQZzNTUBBChsXueQUnPKDkg/5A5zp7pFDuQAj5UFoENpiACU0wlCvzpAGnTkj++ihpKwKyYewn/XNUbKw==",
+      "license": "MIT",
       "dependencies": {
-        "tr46": "^4.1.1",
+        "tr46": "^5.1.0",
         "webidl-conversions": "^7.0.0"
       },
       "engines": {
-        "node": ">=16"
+        "node": ">=18"
       }
     },
     "node_modules/which": {
@@ -5148,39 +9318,45 @@
       }
     },
     "node_modules/which-boxed-primitive": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/which-boxed-primitive/-/which-boxed-primitive-1.0.2.tgz",
-      "integrity": "sha512-bwZdv0AKLpplFY2KZRX6TvyuN7ojjr7lwkg6ml0roIy9YeuSr7JS372qlNW18UQYzgYK9ziGcerWqZOmEn9VNg==",
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/which-boxed-primitive/-/which-boxed-primitive-1.1.1.tgz",
+      "integrity": "sha512-TbX3mj8n0odCBFVlY8AxkqcHASw3L60jIuF8jFP78az3C2YhmGvqbHBpAjTRH2/xqYunrJ9g1jSyjCjpoWzIAA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "is-bigint": "^1.0.1",
-        "is-boolean-object": "^1.1.0",
-        "is-number-object": "^1.0.4",
-        "is-string": "^1.0.5",
-        "is-symbol": "^1.0.3"
+        "is-bigint": "^1.1.0",
+        "is-boolean-object": "^1.2.1",
+        "is-number-object": "^1.1.1",
+        "is-string": "^1.1.1",
+        "is-symbol": "^1.1.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
       },
       "funding": {
         "url": "https://github.com/sponsors/ljharb"
       }
     },
     "node_modules/which-builtin-type": {
-      "version": "1.1.4",
-      "resolved": "https://registry.npmjs.org/which-builtin-type/-/which-builtin-type-1.1.4.tgz",
-      "integrity": "sha512-bppkmBSsHFmIMSl8BO9TbsyzsvGjVoppt8xUiGzwiu/bhDCGxnpOKCxgqj6GuyHE0mINMDecBFPlOm2hzY084w==",
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/which-builtin-type/-/which-builtin-type-1.2.1.tgz",
+      "integrity": "sha512-6iBczoX+kDQ7a3+YJBnh3T+KZRxM/iYNPXicqk66/Qfm1b93iu+yOImkg0zHbj5LNOcNv1TEADiZ0xa34B4q6Q==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
+        "call-bound": "^1.0.2",
         "function.prototype.name": "^1.1.6",
         "has-tostringtag": "^1.0.2",
         "is-async-function": "^2.0.0",
-        "is-date-object": "^1.0.5",
-        "is-finalizationregistry": "^1.0.2",
+        "is-date-object": "^1.1.0",
+        "is-finalizationregistry": "^1.1.0",
         "is-generator-function": "^1.0.10",
-        "is-regex": "^1.1.4",
+        "is-regex": "^1.2.1",
         "is-weakref": "^1.0.2",
         "isarray": "^2.0.5",
-        "which-boxed-primitive": "^1.0.2",
+        "which-boxed-primitive": "^1.1.0",
         "which-collection": "^1.0.2",
-        "which-typed-array": "^1.1.15"
+        "which-typed-array": "^1.1.16"
       },
       "engines": {
         "node": ">= 0.4"
@@ -5208,15 +9384,18 @@
       }
     },
     "node_modules/which-typed-array": {
-      "version": "1.1.15",
-      "resolved": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.15.tgz",
-      "integrity": "sha512-oV0jmFtUky6CXfkqehVvBP/LSWJ2sy4vWMioiENyJLePrBO/yKyV9OyJySfAKosh+RYkIl5zJCNZ8/4JncrpdA==",
+      "version": "1.1.24",
+      "resolved": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.24.tgz",
+      "integrity": "sha512-wk4Mf4pR5mRP7eYuuTBCIQ9d0ud2Fv2jRLQpfgnRjbOxAFHmjKFValgTpitVKzJJS8ajnYQV2Du1SZ8j6b/EUQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "available-typed-arrays": "^1.0.7",
-        "call-bind": "^1.0.7",
-        "for-each": "^0.3.3",
-        "gopd": "^1.0.1",
+        "call-bind": "^1.0.9",
+        "call-bound": "^1.0.4",
+        "for-each": "^0.3.5",
+        "get-proto": "^1.0.1",
+        "gopd": "^1.2.0",
         "has-tostringtag": "^1.0.2"
       },
       "engines": {
@@ -5226,6 +9405,19 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/why-is-node-running": {
+      "version": "3.2.1",
+      "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-3.2.1.tgz",
+      "integrity": "sha512-Tb2FUhB4vUsGQlfSquQLYkApkuPAFQXGFzxWKHHumVz2dK+X1RUm/HnID4+TfIGYJ1kTcwOaCk/buYCEJr6YjQ==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "why-is-node-running": "cli.js"
+      },
+      "engines": {
+        "node": ">=20.11"
+      }
+    },
     "node_modules/word-wrap": {
       "version": "1.2.5",
       "resolved": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz",
@@ -5235,114 +9427,51 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/wrap-ansi": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz",
-      "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==",
-      "dev": true,
-      "dependencies": {
-        "ansi-styles": "^6.1.0",
-        "string-width": "^5.0.1",
-        "strip-ansi": "^7.0.1"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
-      }
-    },
-    "node_modules/wrap-ansi-cjs": {
-      "name": "wrap-ansi",
-      "version": "7.0.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
-      "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
+    "node_modules/ws": {
+      "version": "8.22.0",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.22.0.tgz",
+      "integrity": "sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg==",
       "dev": true,
-      "dependencies": {
-        "ansi-styles": "^4.0.0",
-        "string-width": "^4.1.0",
-        "strip-ansi": "^6.0.0"
-      },
+      "license": "MIT",
       "engines": {
-        "node": ">=10"
+        "node": ">=10.0.0"
       },
-      "funding": {
-        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
-      }
-    },
-    "node_modules/wrap-ansi-cjs/node_modules/emoji-regex": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
-      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
-      "dev": true
-    },
-    "node_modules/wrap-ansi-cjs/node_modules/is-fullwidth-code-point": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
-      "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
-      "dev": true,
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/wrap-ansi-cjs/node_modules/string-width": {
-      "version": "4.2.3",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
-      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
-      "dev": true,
-      "dependencies": {
-        "emoji-regex": "^8.0.0",
-        "is-fullwidth-code-point": "^3.0.0",
-        "strip-ansi": "^6.0.1"
+      "peerDependencies": {
+        "bufferutil": "^4.0.1",
+        "utf-8-validate": ">=5.0.2"
       },
-      "engines": {
-        "node": ">=8"
+      "peerDependenciesMeta": {
+        "bufferutil": {
+          "optional": true
+        },
+        "utf-8-validate": {
+          "optional": true
+        }
       }
     },
-    "node_modules/wrap-ansi/node_modules/ansi-regex": {
-      "version": "6.1.0",
-      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.1.0.tgz",
-      "integrity": "sha512-7HSX4QQb4CspciLpVFwyRe79O3xsIZDDLER21kERQ71oaPodF8jL725AgJMFAYbooIqolJoRLuM81SpeUkpkvA==",
+    "node_modules/xml-name-validator": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-5.0.0.tgz",
+      "integrity": "sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg==",
       "dev": true,
+      "license": "Apache-2.0",
       "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-regex?sponsor=1"
+        "node": ">=18"
       }
     },
-    "node_modules/wrap-ansi/node_modules/ansi-styles": {
-      "version": "6.2.1",
-      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz",
-      "integrity": "sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug==",
+    "node_modules/xmlchars": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/xmlchars/-/xmlchars-2.2.0.tgz",
+      "integrity": "sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==",
       "dev": true,
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
-      }
+      "license": "MIT"
     },
-    "node_modules/wrap-ansi/node_modules/strip-ansi": {
-      "version": "7.1.0",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.0.tgz",
-      "integrity": "sha512-iq6eVVI64nQQTRYq2KtEg2d2uU7LElhTJwsH4YzIHZshxlgZms/wIc4VoDQTlG/IvVIrBKG06CrZnp0qv7hkcQ==",
+    "node_modules/yallist": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz",
+      "integrity": "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==",
       "dev": true,
-      "dependencies": {
-        "ansi-regex": "^6.0.1"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/strip-ansi?sponsor=1"
-      }
-    },
-    "node_modules/wrappy": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
-      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
-      "dev": true
+      "license": "ISC"
     },
     "node_modules/yaml": {
       "version": "2.5.1",
@@ -5356,6 +9485,19 @@
         "node": ">= 14"
       }
     },
+    "node_modules/yauzl": {
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/yauzl/-/yauzl-3.4.0.tgz",
+      "integrity": "sha512-jIH9yLR9wqr0wOS0TpBvo/g/2UgZH5qePVbjgRliiF0BYvOZyaBknKsF+x9Iht0O6sqgnB93rCICdOZFecJuDw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "pend": "~1.2.0"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
     "node_modules/yocto-queue": {
       "version": "0.1.0",
       "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz",
@@ -5367,6 +9509,29 @@
       "funding": {
         "url": "https://github.com/sponsors/sindresorhus"
       }
+    },
+    "node_modules/zod": {
+      "version": "4.6.5",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.5.tgz",
+      "integrity": "sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/colinhacks"
+      }
+    },
+    "node_modules/zod-validation-error": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/zod-validation-error/-/zod-validation-error-4.0.2.tgz",
+      "integrity": "sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.0.0"
+      },
+      "peerDependencies": {
+        "zod": "^3.25.0 || ^4.0.0"
+      }
     }
   }
 }
diff --git a/package.json b/package.json
index 765419b..219a457 100644
--- a/package.json
+++ b/package.json
@@ -6,29 +6,60 @@
     "dev": "next dev",
     "build": "next build",
     "start": "next start",
-    "lint": "next lint",
-    "lint:fix": "next lint --fix",
+    "lint": "eslint src tests/unit tests/acceptance-*.ts tests/controlled-server.ts scripts/*.ts vitest.config.mts",
+    "lint:fix": "npm run lint -- --fix",
     "format": "prettier --write .",
-    "test": "echo 'Install jest (or another unit test suite) to use this command.'",
-    "prepare": "husky"
+    "preview:offerings": "node scripts/offering-preview-server.mjs",
+    "test": "npm run test:unit && npm run test:regression && npm run test:acceptance:cli && npm run test:acceptance:db && npm run test:acceptance:app",
+    "test:db": "node --test tests/database-checker.test.mjs",
+    "db:check": "node scripts/check-database.mjs",
+    "db:check:write": "node scripts/check-database.mjs --write",
+    "typecheck": "tsc --noEmit",
+    "prepare": "husky",
+    "preview:special-offerings": "node scripts/special-offerings-preview.mjs",
+    "test:unit": "vitest run",
+    "test:watch": "vitest",
+    "test:regression": "node --test --import tsx tests/offerings-http.test.mjs tests/database-checker.test.mjs tests/offering-form.test.mjs src/lib/offerings.test.ts tests/special-offering-control.test.mjs tests/seed-offerings.test.mjs tests/offering-storage.test.ts tests/offering-seed-command.test.mjs",
+    "test:storage": "node --test --import tsx tests/offering-storage.test.ts tests/offering-seed-command.test.mjs",
+    "db:seed": "node --import tsx scripts/seed-offerings.ts",
+    "test:live": "node --import tsx scripts/verify-live.ts",
+    "acceptance": "node --import tsx scripts/acceptance-runner.ts",
+    "acceptance:db": "node --import tsx scripts/database-smoke.ts",
+    "test:acceptance": "vitest run tests/unit/acceptance-runner.test.ts && npm run test:acceptance:cli && npm run test:acceptance:db",
+    "test:acceptance:cli": "node --test --import tsx tests/acceptance-cli.test.ts",
+    "test:acceptance:db": "node --test --import tsx tests/acceptance-lifecycle.test.ts",
+    "test:acceptance:app": "node --test --import tsx tests/acceptance-application.test.ts",
+    "preflight": "npm run lint && npm run typecheck && npm test && npm run build"
   },
   "dependencies": {
-    "mongoose": "^8",
-    "next": "^14",
-    "react": "^18",
-    "react-dom": "^18"
+    "mongoose": "^8.24.5",
+    "next": "^16.4.0",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0"
   },
   "devDependencies": {
-    "@types/node": "^20",
-    "@types/react": "^18",
-    "@types/react-dom": "^18",
-    "eslint": "^8",
-    "eslint-config-next": "^14",
+    "@testing-library/dom": "^10.4.2",
+    "@testing-library/jest-dom": "^7.0.1",
+    "@testing-library/react": "^16.3.3",
+    "@testing-library/user-event": "^14.6.7",
+    "@types/node": "^24",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "esbuild": "^0.28.2",
+    "eslint": "^9.39.5",
+    "eslint-config-next": "^16.4.0",
     "eslint-config-prettier": "^9",
     "eslint-plugin-prettier": "^5",
     "husky": "^9",
+    "jsdom": "^26.1.0",
     "lint-staged": "^15",
+    "mongodb-memory-server-core": "^10.4.3",
     "prettier": "^3",
-    "typescript": "^5"
+    "tsx": "^4.23.15",
+    "typescript": "^5",
+    "vitest": "^5.0.3"
+  },
+  "engines": {
+    "node": "24.x"
   }
 }
diff --git a/prettier.config.js b/prettier.config.js
index 1c498fe..6011e75 100644
--- a/prettier.config.js
+++ b/prettier.config.js
@@ -1,4 +1,5 @@
 module.exports = {
+  endOfLine: "auto",
   // wider line length for better TSX readability
   printWidth: 120,
 };
diff --git a/scripts/acceptance-runner.ts b/scripts/acceptance-runner.ts
new file mode 100644
index 0000000..bee41fb
--- /dev/null
+++ b/scripts/acceptance-runner.ts
@@ -0,0 +1,50 @@
+import { readFile } from "node:fs/promises";
+import { runAcceptance, type AcceptanceOptions } from "./acceptance";
+import type { Offering } from "@/types/offering";
+
+async function main() {
+  // This deadline also bounds a broken response stream or uncertain teardown.
+  const deadline = setTimeout(() => {
+    console.error(
+      "FAIL acceptance: overall deadline exceeded; inspect the disposable target for this run's Verification records.",
+    );
+    process.exit(1);
+  }, 120000);
+  try {
+    const args = process.argv.slice(2);
+    if (args.length !== 2 || args[0] !== "--scenario" || !["empty", "seeded", "database-failure"].includes(args[1]))
+      throw new Error("Use --scenario empty|seeded|database-failure.");
+    if (process.env.ACCEPTANCE_CONFIRM_WRITES !== "disposable")
+      throw new Error("Set ACCEPTANCE_CONFIRM_WRITES=disposable only for an isolated acceptance target.");
+    const scenario = args[1] as AcceptanceOptions["scenario"];
+    let expectedSeed: Offering[] | undefined;
+    if (scenario === "seeded") {
+      if (!process.env.ACCEPTANCE_SEED_FILE)
+        throw new Error("Set ACCEPTANCE_SEED_FILE to independently prepared expected seed JSON.");
+      try {
+        expectedSeed = JSON.parse(await readFile(process.env.ACCEPTANCE_SEED_FILE, "utf8"));
+      } catch {
+        throw new Error("Cannot read expected seed JSON.");
+      }
+      if (!Array.isArray(expectedSeed)) throw new Error("Expected seed JSON must be an array.");
+    }
+    const stages = await runAcceptance({
+      baseUrl: process.env.ACCEPTANCE_BASE_URL ?? "",
+      scenario,
+      username: process.env.MANAGEMENT_USERNAME ?? "",
+      password: process.env.MANAGEMENT_PASSWORD ?? "",
+      expectedSeed,
+    });
+    // Never print URLs, paths, authorization, environment values, or raw exceptions.
+    console.log(
+      `INFO acceptance: explicit literal loopback target; scenario=${scenario}; request deadline=15s; overall deadline=120s; disposable writes acknowledged.`,
+    );
+    stages.forEach((stage) => console.log(`PASS acceptance: ${stage}`));
+  } catch (error) {
+    console.error(`FAIL acceptance: ${error instanceof Error ? error.message : "Verification failed."}`);
+    process.exitCode = 1;
+  } finally {
+    clearTimeout(deadline);
+  }
+}
+void main();
diff --git a/scripts/acceptance.ts b/scripts/acceptance.ts
new file mode 100644
index 0000000..9b6a6d4
--- /dev/null
+++ b/scripts/acceptance.ts
@@ -0,0 +1,271 @@
+import { randomUUID } from "node:crypto";
+import type { CreateOfferingInput, Offering } from "@/types/offering";
+
+export type AcceptanceOptions = {
+  baseUrl: string;
+  scenario: "empty" | "seeded" | "database-failure";
+  username: string;
+  password: string;
+  expectedSeed?: Offering[];
+  timeoutMs?: number;
+};
+
+function check(condition: unknown, message: string): asserts condition {
+  if (!condition) throw new Error(message);
+}
+
+/** Validate independently of application response guards and input normalization. */
+function publicOffering(value: unknown): asserts value is Offering {
+  check(value && typeof value === "object" && !Array.isArray(value), "Invalid public Offering.");
+  const item = value as Record<string, unknown>;
+  check(
+    Object.keys(item).sort().join(",") === "ID,category,description,name,price,specialOffer",
+    "Invalid public fields.",
+  );
+  check(typeof item.ID === "string" && item.ID.trim().length > 0, "Invalid public ID.");
+  for (const [field, limit] of [
+    ["name", 100],
+    ["description", 500],
+  ] as const) {
+    const text = item[field];
+    check(
+      typeof text === "string" && text === text.trim() && text.length > 0 && text.length <= limit,
+      "Invalid public text.",
+    );
+  }
+  check(
+    typeof item.price === "number" &&
+      Number.isFinite(item.price) &&
+      item.price >= 0 &&
+      Math.abs(item.price * 100 - Math.round(item.price * 100)) < 0.000001,
+    "Invalid public price.",
+  );
+  check(
+    typeof item.category === "string" &&
+      ["Coffee", "Tea", "Smoothie"].includes(item.category) &&
+      typeof item.specialOffer === "boolean",
+    "Invalid category or special flag.",
+  );
+}
+
+function sameOffering(actual: Offering, expected: Offering) {
+  check(
+    Object.entries(expected).every(([key, value]) => actual[key as keyof Offering] === value),
+    "Offering details changed on read-back.",
+  );
+}
+
+export async function runAcceptance(options: AcceptanceOptions) {
+  let target: URL;
+  try {
+    target = new URL(options.baseUrl);
+  } catch {
+    throw new Error("Configure an explicit loopback origin.");
+  }
+  check(
+    ["127.0.0.1", "[::1]"].includes(target.hostname) &&
+      ["http:", "https:"].includes(target.protocol) &&
+      target.pathname === "/" &&
+      !target.username &&
+      !target.password &&
+      !target.search &&
+      !target.hash,
+    "Configure a literal loopback origin without credentials, paths, or query parameters.",
+  );
+  check(["empty", "seeded", "database-failure"].includes(options.scenario), "Select an explicit scenario.");
+  check(options.username && options.password, "Configure private management credentials.");
+  const timeout = options.timeoutMs ?? 15000;
+  check(Number.isFinite(timeout) && timeout > 0 && timeout <= 15000, "Invalid request deadline.");
+  const headers = {
+    "Content-Type": "application/json",
+    Authorization: `Basic ${Buffer.from(`${options.username}:${options.password}`).toString("base64")}`,
+  };
+  const stages: string[] = [];
+  async function request(method = "GET", body?: string, contentType = "application/json", path = "/api/offerings") {
+    try {
+      const response = await fetch(new URL(path, target), {
+        method,
+        headers: method === "GET" ? {} : { ...headers, "Content-Type": contentType },
+        body,
+        redirect: "error",
+        signal: AbortSignal.timeout(timeout),
+      });
+      if (response.status === 204) return { status: response.status, body: undefined };
+      check(response.headers.get("content-type")?.split(";")[0].trim() === "application/json", "Response is not JSON.");
+      const value: unknown = await response.json();
+      return { status: response.status, body: value };
+    } catch {
+      throw new Error("HTTP request, deadline, or JSON response failed.");
+    }
+  }
+  async function read() {
+    const result = await request();
+    check(result.status === 200 && Array.isArray(result.body), "GET must return 200 and an array.");
+    result.body.forEach(publicOffering);
+    const records = result.body as Offering[];
+    check(new Set(records.map((item) => item.ID)).size === records.length, "Duplicate public IDs.");
+    for (let index = 1; index < records.length; index++) {
+      const previous = records[index - 1],
+        current = records[index];
+      check(
+        previous.name.localeCompare(current.name) < 0 ||
+          (previous.name.localeCompare(current.name) === 0 && previous.ID.localeCompare(current.ID) <= 0),
+        "GET must sort by name then ID.",
+      );
+    }
+    return records;
+  }
+  async function expectError(
+    method: string,
+    body: string | undefined,
+    status: number,
+    code: string,
+    contentType = "application/json",
+  ) {
+    const result = await request(method, body, contentType);
+    check(result.status === status, `Expected ${status} for ${code}.`);
+    check(result.body && typeof result.body === "object" && !Array.isArray(result.body), "Invalid error envelope.");
+    const envelope = result.body as { error?: Record<string, unknown> };
+    check(
+      Object.keys(envelope).join() === "error" &&
+        envelope.error &&
+        typeof envelope.error === "object" &&
+        !Array.isArray(envelope.error),
+      "Invalid error envelope.",
+    );
+    check(
+      envelope.error.code === code && typeof envelope.error.message === "string" && envelope.error.message.trim(),
+      "Invalid error code or message.",
+    );
+    check(
+      Object.keys(envelope.error).every((key) => ["code", "message", "fields"].includes(key)),
+      "Internal error fields leaked.",
+    );
+    if (envelope.error.fields !== undefined) {
+      const fields = envelope.error.fields;
+      check(fields && typeof fields === "object" && !Array.isArray(fields), "Invalid field messages.");
+      check(
+        Object.entries(fields).every(
+          ([key, value]) =>
+            ["name", "description", "price", "category", "specialOffer"].includes(key) &&
+            typeof value === "string" &&
+            value.trim(),
+        ),
+        "Invalid field messages.",
+      );
+    }
+    check(
+      !/mongodb(?:\+srv)?:\/\/|password|credential|ECONNREFUSED|MongoServer|\bat .+\(.+:\d+/i.test(
+        JSON.stringify(envelope),
+      ),
+      "Database details leaked.",
+    );
+  }
+  const input: CreateOfferingInput = {
+    name: `Verification ${randomUUID()}`,
+    description: `Runner ${randomUUID()}`,
+    price: 5.75,
+    category: "Coffee",
+  };
+  if (options.scenario === "database-failure") {
+    await expectError("GET", undefined, 503, "DATABASE_UNAVAILABLE");
+    await expectError("POST", JSON.stringify(input), 503, "DATABASE_UNAVAILABLE");
+    return ["deliberate database failure: GET/POST sanitized 503"];
+  }
+  const baseline = await read();
+  if (options.scenario === "empty") check(baseline.length === 0, "Empty scenario requires an empty database.");
+  else {
+    check(
+      options.expectedSeed && options.expectedSeed.length > 0,
+      "Seeded scenario requires independent expected seed JSON.",
+    );
+    check(baseline.length === options.expectedSeed.length, "Seed count differs.");
+    options.expectedSeed.forEach((item, index) => {
+      publicOffering(item);
+      sameOffering(baseline[index], item);
+    });
+  }
+  stages.push(`${options.scenario} GET and public contract`);
+  const baselineIds = new Set(baseline.map((item) => item.ID));
+  const createdIds = new Set<string>();
+  const attempted: CreateOfferingInput[] = [];
+  try {
+    const variants: CreateOfferingInput[] = [
+      { ...input, specialOffer: false },
+      { ...input, name: `${input.name} special`, specialOffer: true },
+      { ...input, name: `${input.name} default` },
+      { ...input, name: " n ", description: " d ", price: 0, category: "Tea" },
+      { ...input, name: "n".repeat(100), description: "d".repeat(500), price: 0.29, category: "Smoothie" },
+    ];
+    for (const value of variants) {
+      attempted.push(value);
+      const result = await request("POST", JSON.stringify(value));
+      check(result.status === 201, "POST must return 201.");
+      publicOffering(result.body);
+      const saved = result.body;
+      check(!baselineIds.has(saved.ID) && !createdIds.has(saved.ID), "POST reused an ID.");
+      createdIds.add(saved.ID);
+      sameOffering(saved, {
+        ...value,
+        name: value.name.trim(),
+        description: value.description.trim(),
+        specialOffer: value.specialOffer ?? false,
+        ID: saved.ID,
+      });
+      const persisted = (await read()).find((item) => item.ID === saved.ID);
+      check(persisted, "Created Offering is missing on read-back.");
+      sameOffering(persisted, saved);
+    }
+    stages.push("ordinary/special/default POST, trimming, boundaries and read-back");
+    const invalid: unknown[] = [
+      null,
+      [],
+      "text",
+      {},
+      ...["", " ", "n".repeat(101), 3, null].map((name) => ({ ...input, name })),
+      ...["", " ", "d".repeat(501), 3, null].map((description) => ({ ...input, description })),
+      ...[-1, 1.001, "5.75", null, true].map((price) => ({ ...input, price })),
+      ...["coffee", "Other", null, 1, ["Coffee"]].map((category) => ({ ...input, category })),
+      ...["true", null, 1].map((specialOffer) => ({ ...input, specialOffer })),
+      ...["ID", "_id", "unknown"].map((field) => ({ ...input, [field]: "forbidden" })),
+    ];
+    for (const value of invalid) await expectError("POST", JSON.stringify(value), 400, "INVALID_INPUT");
+    await expectError(
+      "POST",
+      JSON.stringify({ ...input, price: 1 }).replace('"price":1', '"price":1e999'),
+      400,
+      "INVALID_INPUT",
+    );
+    await expectError("POST", "{broken", 400, "INVALID_JSON");
+    await expectError("POST", JSON.stringify(input), 415, "INVALID_CONTENT_TYPE", "text/plain");
+    const finalRecords = await read();
+    check(finalRecords.length === baseline.length + createdIds.size, "Invalid input changed the collection.");
+    stages.push("validation boundaries, content type and JSON errors");
+  } finally {
+    // Recover uncertain POST outcomes only by this run's details and non-baseline identity.
+    const records = await read();
+    const own = records.filter(
+      (item) =>
+        !baselineIds.has(item.ID) &&
+        attempted.some((value) => item.name === value.name.trim() && item.description === value.description.trim()),
+    );
+    for (const item of own) {
+      const result = await request(
+        "DELETE",
+        undefined,
+        "application/json",
+        `/api/offerings/${encodeURIComponent(item.ID)}`,
+      );
+      check(result.status === 204, "Targeted cleanup failed.");
+    }
+    const remaining = await read();
+    check(!remaining.some((item) => own.some((removed) => removed.ID === item.ID)), "Cleanup did not persist.");
+    check(remaining.length === baseline.length, "Cleanup changed the baseline.");
+    baseline.forEach((item) => {
+      const preserved = remaining.find((record) => record.ID === item.ID);
+      check(preserved, "Cleanup removed baseline data.");
+      sameOffering(preserved, item);
+    });
+  }
+  return [...stages, "targeted cleanup and baseline preservation"];
+}
diff --git a/scripts/check-database.mjs b/scripts/check-database.mjs
new file mode 100644
index 0000000..7b02f2a
--- /dev/null
+++ b/scripts/check-database.mjs
@@ -0,0 +1,111 @@
+import nextEnv from "@next/env";
+import mongoose from "mongoose";
+import { randomUUID } from "node:crypto";
+
+const collectionName = "_coffee_shop_verification";
+const timeoutMS = 5000;
+let stage = "configuration";
+let client;
+let collection;
+let marker;
+let attemptedWrite = false;
+let acknowledgedWrite = false;
+
+function pass(message) {
+  console.log(`PASS ${stage}: ${message}`);
+}
+
+function fail(message) {
+  console.error(`FAIL ${stage}: ${message}`);
+  process.exitCode = 1;
+}
+
+// Last-resort deadline also covers DNS resolution and connection teardown.
+const deadline = setTimeout(() => {
+  fail("30-second deadline exceeded; verification incomplete.");
+  process.exit(1);
+}, 30000);
+
+try {
+  const args = process.argv.slice(2);
+  if (args.length > 1 || (args.length === 1 && args[0] !== "--write")) {
+    throw new Error("configuration");
+  }
+  // Match `next dev` precedence. Suppress raw env-loader diagnostics.
+  nextEnv.loadEnvConfig(process.cwd(), true, { info() {}, error() {} });
+  const uri = process.env.MONGO_URI;
+  if (!uri || /[{}<>]|placeholder|mongo-uri-here|YOUR_|CHANGE_ME/i.test(uri)) {
+    throw new Error("configuration");
+  }
+  const match = /^mongodb(?:\+srv)?:\/\/[^/]+\/([A-Za-z0-9_-]+)(?:\?.*)?$/.exec(uri);
+  if (!match || ["admin", "local", "config"].includes(match[1])) {
+    throw new Error("configuration");
+  }
+  const databaseName = match[1];
+  client = new mongoose.mongo.MongoClient(uri, {
+    serverSelectionTimeoutMS: timeoutMS,
+    connectTimeoutMS: timeoutMS,
+    socketTimeoutMS: timeoutMS,
+    waitQueueTimeoutMS: timeoutMS,
+    retryReads: false,
+    retryWrites: false,
+    readPreference: "primary",
+    writeConcern: { w: 1, wtimeoutMS: timeoutMS },
+  });
+  pass(`database=${databaseName}; mode=${args.length ? "write" : "read-only"}`);
+  stage = "connect";
+  await client.connect();
+  pass("Connected.");
+  collection = client.db(databaseName).collection(collectionName);
+  stage = "read";
+  // A real find checks read permission even when the collection is empty.
+  await collection.findOne({}, { maxTimeMS: timeoutMS, projection: { _id: 1 } });
+  pass(`Read ${collectionName}; no document contents printed.`);
+  if (args.length) {
+    marker = randomUUID();
+    stage = "write";
+    console.log(`INFO disposable marker=${marker}; collection=${collectionName}`);
+    attemptedWrite = true;
+    const result = await collection.insertOne({
+      _id: marker,
+      purpose: "coffee-shop-access-check",
+    });
+    if (!result.acknowledged) throw new Error("write");
+    acknowledgedWrite = true;
+    pass("Disposable write acknowledged.");
+    stage = "read-back";
+    const record = await collection.findOne({ _id: marker }, { maxTimeMS: timeoutMS });
+    if (record?.purpose !== "coffee-shop-access-check") throw new Error("read-back");
+    pass("Disposable marker read back.");
+  }
+} catch {
+  fail(
+    stage === "configuration"
+      ? "Use no arguments or --write. Set a non-placeholder MONGO_URI in private .env.local with an explicit database name (letters, digits, underscores, hyphens; excluding admin/local/config)."
+      : "Database operation failed; check permissions, credentials, network access, and cluster availability.",
+  );
+} finally {
+  if (attemptedWrite) {
+    stage = "cleanup";
+    try {
+      // Attempt cleanup even if insert acknowledgement was lost. Never clear data.
+      const result = await collection.deleteOne({ _id: marker });
+      if (!result.acknowledged || (acknowledgedWrite && result.deletedCount !== 1)) {
+        throw new Error("cleanup");
+      }
+      pass("Only this run's marker removed (or absent after a failed write).");
+    } catch {
+      fail(`Cleanup unverified. Ask Brian to inspect marker=${marker} in ${collectionName}.`);
+    }
+  }
+  if (client) {
+    stage = "close";
+    try {
+      await client.close();
+      pass("Connection closed.");
+    } catch {
+      fail("Connection teardown failed.");
+    }
+  }
+  clearTimeout(deadline);
+}
diff --git a/scripts/database-smoke.ts b/scripts/database-smoke.ts
new file mode 100644
index 0000000..990d584
--- /dev/null
+++ b/scripts/database-smoke.ts
@@ -0,0 +1,20 @@
+import { verifyDisposableDatabase } from "./disposable-database";
+
+async function main() {
+  const deadline = setTimeout(() => {
+    console.error("FAIL disposable lifecycle: overall deadline exceeded.");
+    process.exit(1);
+  }, 90000);
+  try {
+    if (process.argv.length !== 2 || process.env.MONGO_URI) throw new Error("external target");
+    (await verifyDisposableDatabase()).forEach((stage) => console.log(`PASS disposable lifecycle: ${stage}`));
+  } catch {
+    console.error(
+      "FAIL disposable lifecycle: no external MONGO_URI or arguments are allowed; startup, read/write, cleanup and teardown must all succeed. No connection details printed.",
+    );
+    process.exitCode = 1;
+  } finally {
+    clearTimeout(deadline);
+  }
+}
+void main();
diff --git a/scripts/disposable-database.ts b/scripts/disposable-database.ts
new file mode 100644
index 0000000..9612df9
--- /dev/null
+++ b/scripts/disposable-database.ts
@@ -0,0 +1,72 @@
+import { randomUUID } from "node:crypto";
+import { MongoMemoryServer } from "mongodb-memory-server-core";
+import mongoose from "mongoose";
+
+/** Enforce deadlines on lifecycle operations, including cleanup. */
+export async function bounded<T>(operation: Promise<T>, stage: string, timeoutMs = 15000): Promise<T> {
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  try {
+    return await Promise.race([
+      operation,
+      new Promise<never>((_, reject) => {
+        timer = setTimeout(() => reject(new Error(`${stage} deadline exceeded.`)), timeoutMs);
+      }),
+    ]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+/** No URI argument exists: every destructive operation targets a process owned here. */
+export async function verifyDisposableDatabase() {
+  const name = `coffee_acceptance_${randomUUID().replaceAll("-", "")}`;
+  const server = new MongoMemoryServer({
+    binary: { version: "7.0.24" },
+    instance: { dbName: name, ip: "127.0.0.1", launchTimeout: 20000 },
+  });
+  const connection = mongoose.createConnection();
+  const stages: string[] = [];
+  try {
+    await bounded(server.start(), "database start", 60000);
+    await bounded(
+      connection.openUri(server.getUri(name), {
+        serverSelectionTimeoutMS: 5000,
+        connectTimeoutMS: 5000,
+        socketTimeoutMS: 5000,
+      }),
+      "database connect",
+    );
+    stages.push("owned disposable database started");
+    const collection = connection.collection("lifecycle");
+    const marker = randomUUID();
+    const unrelated = randomUUID();
+    await bounded(
+      collection.insertMany([
+        { marker, value: "acceptance lifecycle" },
+        { marker: unrelated, value: "preserve" },
+      ]),
+      "write",
+    );
+    const saved = await bounded(collection.findOne({ marker }), "read");
+    if (saved?.value !== "acceptance lifecycle") throw new Error("Read-back differs.");
+    stages.push("write and read-back");
+    const deleted = await bounded(collection.deleteOne({ marker }), "cleanup");
+    if (deleted.deletedCount !== 1 || (await bounded(collection.countDocuments({ marker }), "cleanup read")) !== 0)
+      throw new Error("Cleanup did not persist.");
+    if ((await bounded(collection.countDocuments({ marker: unrelated }), "preservation read")) !== 1)
+      throw new Error("Cleanup removed unrelated data.");
+    stages.push("targeted cleanup and unrelated-record preservation");
+  } finally {
+    // Always attempt both resources even if one teardown fails.
+    const outcomes = await Promise.allSettled([
+      bounded(connection.close(), "connection teardown"),
+      bounded(server.stop({ doCleanup: true, force: true }), "server teardown"),
+    ]);
+    if (
+      outcomes.some((outcome) => outcome.status === "rejected") ||
+      (outcomes[1].status === "fulfilled" && outcomes[1].value !== true)
+    )
+      throw new Error("Disposable database teardown failed.");
+  }
+  return [...stages, "connection closed and owned server stopped"];
+}
diff --git a/scripts/live-acceptance.ts b/scripts/live-acceptance.ts
new file mode 100644
index 0000000..0d92bd6
--- /dev/null
+++ b/scripts/live-acceptance.ts
@@ -0,0 +1,133 @@
+import { randomUUID } from "node:crypto";
+import { isOffering } from "@/lib/offering-response";
+import type { Offering } from "@/types/offering";
+
+type Options = {
+  baseUrl: string;
+  username?: string;
+  password?: string;
+  allowWrites?: boolean;
+  allOperations?: boolean;
+  fetcher?: typeof fetch;
+};
+
+function assertPublicOffering(value: unknown): asserts value is Offering {
+  if (!isOffering(value) || Object.keys(value).sort().join(",") !== "ID,category,description,name,price,specialOffer") {
+    throw new Error("The server returned an invalid public offering.");
+  }
+}
+
+export async function verifyLive({
+  baseUrl,
+  username,
+  password,
+  allowWrites = false,
+  allOperations = false,
+  fetcher = fetch,
+}: Options) {
+  const target = new URL(baseUrl);
+  const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(target.hostname);
+  if (
+    (target.protocol !== "https:" && !(loopback && target.protocol === "http:")) ||
+    target.username ||
+    target.password ||
+    target.search ||
+    target.hash ||
+    target.pathname !== "/"
+  ) {
+    throw new Error("Use an HTTPS origin, or a loopback HTTP origin, without paths or credentials.");
+  }
+  const request = (path: string, init: RequestInit = {}) =>
+    fetcher(new URL(path, target), {
+      ...init,
+      redirect: "error",
+      signal: AbortSignal.timeout(15000),
+    });
+  async function read(): Promise<Offering[]> {
+    const response = await request("/api/offerings");
+    if (response.status !== 200) throw new Error("GET offerings did not return 200.");
+    const records: unknown = await response.json();
+    if (!Array.isArray(records)) throw new Error("GET offerings did not return an array.");
+    records.forEach(assertPublicOffering);
+    if (new Set(records.map((item) => item.ID)).size !== records.length)
+      throw new Error("GET returned duplicate identities.");
+    return records;
+  }
+  const baseline = await read();
+  if (!allowWrites) return { readCount: baseline.length, writes: false };
+  if (!username || !password || password.length < 16)
+    throw new Error("Configure private management credentials before write verification.");
+  const authorization = `Basic ${Buffer.from(`${username}:${password}`, "utf8").toString("base64")}`;
+  const headers = { Authorization: authorization, "Content-Type": "application/json" };
+  const marker = randomUUID();
+  const input = {
+    name: `Verification ${marker}`,
+    description: `Disposable milestone verification ${marker}`,
+    price: 3.75,
+    category: "Coffee",
+    specialOffer: true,
+  };
+  const updatedInput = { ...input, name: `${input.name} edited`, specialOffer: false };
+  const baselineIds = new Set(baseline.map((item) => item.ID));
+  let creationAttempted = false;
+  let createdId: string | undefined;
+  try {
+    creationAttempted = true;
+    const denied = await request("/api/offerings", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(input),
+    });
+    if (denied.status !== 401) throw new Error("Unauthenticated writes were not rejected with 401.");
+    const created = await request("/api/offerings", { method: "POST", headers, body: JSON.stringify(input) });
+    if (created.status !== 201) throw new Error("Authorized creation did not return 201.");
+    const body: unknown = await created.json();
+    assertPublicOffering(body);
+    if (
+      baselineIds.has(body.ID) ||
+      Object.entries(input).some(([key, value]) => body[key as keyof Offering] !== value)
+    ) {
+      throw new Error("Creation did not return the new offering details.");
+    }
+    createdId = body.ID;
+    const reread = (await read()).find((item) => item.ID === createdId);
+    if (!reread || Object.entries(body).some(([key, value]) => reread[key as keyof Offering] !== value)) {
+      throw new Error("Created offering was missing or changed on read-back.");
+    }
+    if (allOperations) {
+      const updated = await request(`/api/offerings/${encodeURIComponent(createdId)}`, {
+        method: "PUT",
+        headers,
+        body: JSON.stringify(updatedInput),
+      });
+      if (updated.status !== 200) throw new Error("Updating the disposable offering did not return 200.");
+      const updatedBody: unknown = await updated.json();
+      assertPublicOffering(updatedBody);
+      if (
+        updatedBody.ID !== createdId ||
+        Object.entries(updatedInput).some(([key, value]) => updatedBody[key as keyof Offering] !== value)
+      )
+        throw new Error("Update returned incorrect offering details.");
+      const edited = (await read()).find((item) => item.ID === createdId);
+      if (!edited || Object.entries(updatedInput).some(([key, value]) => edited[key as keyof Offering] !== value))
+        throw new Error("Updated offering did not persist on read-back.");
+    }
+  } finally {
+    if (creationAttempted) {
+      // Recover uncertain POST outcomes by marker; never delete pre-existing IDs.
+      const ownRecords = (await read()).filter(
+        (item) =>
+          !baselineIds.has(item.ID) &&
+          item.description === input.description &&
+          [input.name, updatedInput.name].includes(item.name),
+      );
+      for (const item of ownRecords) {
+        const removed = await request(`/api/offerings/${encodeURIComponent(item.ID)}`, { method: "DELETE", headers });
+        if (removed.status !== 204) throw new Error(`Disposable cleanup failed. Check verification marker ${marker}.`);
+      }
+      if ((await read()).some((item) => ownRecords.some((own) => own.ID === item.ID)))
+        throw new Error(`Disposable cleanup did not persist. Check verification marker ${marker}.`);
+    }
+  }
+  return { readCount: baseline.length, writes: true, updated: allOperations };
+}
diff --git a/scripts/offering-preview-server.mjs b/scripts/offering-preview-server.mjs
new file mode 100644
index 0000000..983da65
--- /dev/null
+++ b/scripts/offering-preview-server.mjs
@@ -0,0 +1,261 @@
+import { randomUUID } from "node:crypto";
+import http from "node:http";
+
+const port = Number(process.env.OFFERING_PREVIEW_PORT ?? 3001);
+const upstream = new URL(process.env.OFFERING_PREVIEW_UPSTREAM ?? "http://127.0.0.1:3000");
+const validScenarios = new Set(["normal", "empty", "list-error", "field-errors", "save-failure", "reload-failure"]);
+const sessions = new Map();
+
+const initialOfferings = [
+  {
+    ID: "preview-1",
+    name: "Apple Tea",
+    description: "A bright and refreshing tea blend.",
+    price: 4.5,
+    category: "Tea",
+    specialOffer: true,
+  },
+  {
+    ID: "preview-2",
+    name: "Cinnamon Latte",
+    description: "Warm coffee with cinnamon sweetness.",
+    price: 5.5,
+    category: "Coffee",
+    specialOffer: false,
+  },
+];
+
+function sendJson(response, status, body) {
+  response.writeHead(status, {
+    "Cache-Control": "no-store",
+    "Content-Type": "application/json; charset=utf-8",
+    "X-Offering-Preview": "controlled-response",
+  });
+  response.end(JSON.stringify(body));
+}
+
+function cookieValue(request, name) {
+  const cookies = request.headers.cookie?.split(";") ?? [];
+  const entry = cookies.find((cookie) => cookie.trim().startsWith(`${name}=`));
+  return entry?.trim().slice(name.length + 1);
+}
+
+function readJson(request) {
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+    request.on("data", (chunk) => chunks.push(chunk));
+    request.on("end", () => {
+      try {
+        resolve(JSON.parse(Buffer.concat(chunks).toString("utf8")));
+      } catch (error) {
+        reject(error);
+      }
+    });
+    request.on("error", reject);
+  });
+}
+
+async function handleOfferingsApi(request, response, session) {
+  if (request.method === "GET") {
+    session.getCount += 1;
+
+    if (session.scenario === "list-error") {
+      sendJson(response, 503, {
+        error: {
+          code: "PREVIEW_UNAVAILABLE",
+          message: "The preview list is unavailable.",
+        },
+      });
+      return;
+    }
+
+    if (session.scenario === "reload-failure" && session.getCount > 1) {
+      sendJson(response, 503, {
+        error: {
+          code: "PREVIEW_UNAVAILABLE",
+          message: "The preview list could not refresh.",
+        },
+      });
+      return;
+    }
+
+    const offerings = session.scenario === "empty" ? [] : [...initialOfferings, ...session.createdOfferings];
+    sendJson(response, 200, offerings);
+    return;
+  }
+
+  if (request.method !== "POST") {
+    sendJson(response, 405, {
+      error: { code: "METHOD_NOT_ALLOWED", message: "Method not allowed." },
+    });
+    return;
+  }
+
+  let input;
+  try {
+    input = await readJson(request);
+  } catch {
+    sendJson(response, 400, {
+      error: { code: "INVALID_JSON", message: "Request body must be valid JSON." },
+    });
+    return;
+  }
+
+  if (session.scenario === "save-failure") {
+    sendJson(response, 503, {
+      error: {
+        code: "PREVIEW_SAVE_REJECTED",
+        message: "The preview save was rejected.",
+      },
+    });
+    return;
+  }
+
+  if (session.scenario === "field-errors") {
+    sendJson(response, 400, {
+      error: {
+        code: "INVALID_INPUT",
+        message: "The preview rejected this offering.",
+        fields: {
+          name: "The preview server rejected this name.",
+        },
+      },
+    });
+    return;
+  }
+
+  if (session.scenario === "normal") {
+    await new Promise((resolve) => setTimeout(resolve, 1400));
+  }
+
+  const offering = {
+    ID: `preview-${randomUUID()}`,
+    name: input.name,
+    description: input.description,
+    price: Number(input.price),
+    category: input.category,
+    specialOffer: input.specialOffer === true,
+  };
+  session.createdOfferings.push(offering);
+  sendJson(response, 201, offering);
+}
+
+function proxyToNext(request, response, cookieHeader) {
+  const proxyRequest = http.request(
+    {
+      hostname: upstream.hostname,
+      port: upstream.port,
+      method: request.method,
+      path: request.url,
+      headers: {
+        ...request.headers,
+        host: upstream.host,
+      },
+    },
+    (proxyResponse) => {
+      const headers = { ...proxyResponse.headers };
+      if (cookieHeader) {
+        const existing = headers["set-cookie"];
+        headers["set-cookie"] = [...(Array.isArray(existing) ? existing : existing ? [existing] : []), cookieHeader];
+      }
+      response.writeHead(proxyResponse.statusCode ?? 502, headers);
+      proxyResponse.pipe(response);
+    },
+  );
+
+  proxyRequest.on("error", (error) => {
+    console.error(`Could not reach Next.js at ${upstream.origin}: ${error.message}`);
+    sendJson(response, 502, {
+      error: {
+        code: "PREVIEW_UPSTREAM_UNAVAILABLE",
+        message: "Start the Next.js development server on port 3000 first.",
+      },
+    });
+  });
+  request.pipe(proxyRequest);
+}
+
+const server = http.createServer(async (request, response) => {
+  const url = new URL(request.url ?? "/", `http://${request.headers.host}`);
+
+  if (url.pathname === "/__preview/status") {
+    sendJson(response, 200, {
+      mode: "test-only controlled HTTP responses",
+      sessions: [...sessions.values()].map((session) => ({
+        scenario: session.scenario,
+        getCount: session.getCount,
+        createdCount: session.createdOfferings.length,
+        lastSpecialOffer: session.createdOfferings.at(-1)?.specialOffer ?? null,
+      })),
+    });
+    return;
+  }
+
+  let sessionId = cookieValue(request, "offering_preview_session");
+  let session = sessions.get(sessionId);
+  let cookieHeader;
+
+  if (url.searchParams.has("scenario")) {
+    const scenario = url.searchParams.get("scenario");
+    if (!validScenarios.has(scenario)) {
+      sendJson(response, 400, {
+        error: {
+          code: "UNKNOWN_PREVIEW_SCENARIO",
+          message: `Choose one of: ${[...validScenarios].join(", ")}.`,
+        },
+      });
+      return;
+    }
+
+    sessionId = randomUUID();
+    session = {
+      scenario,
+      getCount: 0,
+      createdOfferings: [],
+    };
+    sessions.set(sessionId, session);
+    cookieHeader = `offering_preview_session=${sessionId}; Path=/; HttpOnly; SameSite=Lax`;
+  }
+
+  if (url.pathname === "/api/offerings") {
+    if (!session) {
+      sendJson(response, 400, {
+        error: {
+          code: "PREVIEW_SESSION_REQUIRED",
+          message: "Open this page with ?scenario=normal to start a preview session.",
+        },
+      });
+      return;
+    }
+
+    try {
+      await handleOfferingsApi(request, response, session);
+      console.log(`Preview ${request.method} ${url.pathname} scenario=${session.scenario}`);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "Unexpected preview server error.";
+      console.error(message);
+      if (!response.headersSent) {
+        sendJson(response, 500, {
+          error: {
+            code: "PREVIEW_RESPONSE_FAILED",
+            message: "The preview response failed.",
+          },
+        });
+      }
+    }
+    return;
+  }
+
+  proxyToNext(request, response, cookieHeader);
+});
+
+server.listen(port, "127.0.0.1", () => {
+  console.log(`Test-only offering preview: http://localhost:${port}/manage-offerings?scenario=normal`);
+  console.log(`Proxying page and assets from Next.js at ${upstream.origin}`);
+  console.log("Scenarios: normal, empty, list-error, field-errors, save-failure, reload-failure");
+});
+
+server.on("error", (error) => {
+  console.error(`Offering preview server failed: ${error.message}`);
+  process.exitCode = 1;
+});
diff --git a/scripts/seed-offerings.ts b/scripts/seed-offerings.ts
new file mode 100644
index 0000000..05168de
--- /dev/null
+++ b/scripts/seed-offerings.ts
@@ -0,0 +1,45 @@
+import { loadEnvConfig } from "@next/env";
+import mongoose from "mongoose";
+import { seedOfferings } from "@/database/seedOffering";
+
+async function main(): Promise<void> {
+  let stage = "configuration";
+  const deadline = setTimeout(() => {
+    console.error("FAIL seed: 20-second deadline exceeded; rerun safely after checking connectivity.");
+    process.exit(1);
+  }, 20_000);
+  try {
+    const args = process.argv.slice(2);
+    if (args.length !== 1 || args[0] !== "--apply") throw new Error("configuration");
+    loadEnvConfig(process.cwd(), true, { info() {}, error() {} });
+    const uri = process.env.MONGO_URI;
+    const match = /^mongodb(?:\+srv)?:\/\/[^/]+\/([A-Za-z0-9_-]+)(?:\?.*)?$/.exec(uri ?? "");
+    if (
+      !match ||
+      /[{}<>]|placeholder|YOUR_|CHANGE_ME/i.test(uri ?? "") ||
+      ["admin", "local", "config"].includes(match[1])
+    ) {
+      throw new Error("configuration");
+    }
+    stage = "seed";
+    const inserted = await seedOfferings();
+    console.log(`PASS seed: inserted=${inserted}; existing offerings preserved.`);
+  } catch {
+    process.exitCode = 1;
+    console.error(
+      stage === "configuration"
+        ? "FAIL configuration: run npm run db:seed -- --apply with MONGO_URI naming an explicit non-system database."
+        : "FAIL seed: database operation failed; check configuration, permissions, and connectivity. Reruns preserve existing records.",
+    );
+  } finally {
+    try {
+      await mongoose.disconnect();
+    } catch {
+      process.exitCode = 1;
+      console.error("FAIL close: database connection could not be closed.");
+    }
+    clearTimeout(deadline);
+  }
+}
+
+void main();
diff --git a/scripts/special-offerings-preview.mjs b/scripts/special-offerings-preview.mjs
new file mode 100644
index 0000000..0184a96
--- /dev/null
+++ b/scripts/special-offerings-preview.mjs
@@ -0,0 +1,79 @@
+import http from "node:http";
+import { fileURLToPath } from "node:url";
+import { build } from "esbuild";
+
+const root = fileURLToPath(new URL("../", import.meta.url));
+const result = await build({
+  absWorkingDir: root,
+  entryPoints: ["tests/previews/special-offerings.tsx"],
+  bundle: true,
+  write: false,
+  outfile: "preview.js",
+  jsx: "automatic",
+  define: { "process.env.NODE_ENV": '"development"' },
+});
+const assets = new Map(
+  result.outputFiles.map((file) => [file.path.endsWith(".css") ? "/preview.css" : "/preview.js", file.contents]),
+);
+const item = (ID, name, specialOffer) => ({
+  ID,
+  name,
+  description: `${name} description`,
+  price: 4.5,
+  category: "Coffee",
+  specialOffer,
+});
+const starting = [
+  item("preview-ordinary", "Cappuccino", false),
+  item("preview-pumpkin", "Pumpkin Spice Latte", true),
+  item("preview-cold", "Golden Hour Cold Brew", true),
+  { ...item("preview-hojicha", "Hojicha Latte", true), category: "Tea" },
+];
+const scenarios = new Set(["starting", "new-special", "empty", "failure", "loading"]);
+const server = http.createServer(async (request, response) => {
+  const url = new URL(request.url, "http://localhost");
+  response.setHeader("Cache-Control", "no-store");
+  response.setHeader("X-Offering-Preview", "controlled-response");
+  if (assets.has(url.pathname)) {
+    response.setHeader("Content-Type", url.pathname.endsWith(".css") ? "text/css" : "text/javascript");
+    response.end(assets.get(url.pathname));
+    return;
+  }
+  const scenario = url.searchParams.get("scenario") ?? "starting";
+  if (!scenarios.has(scenario)) {
+    response.writeHead(400);
+    response.end("Unknown preview scenario");
+    return;
+  }
+  if (url.pathname === "/api/offerings") {
+    response.setHeader("Content-Type", "application/json");
+    if (scenario === "loading") await new Promise((resolve) => setTimeout(resolve, 5000));
+    if (scenario === "failure") {
+      response.writeHead(503);
+      response.end(
+        JSON.stringify({ error: { code: "DATABASE_UNAVAILABLE", message: "Controlled preview unavailable." } }),
+      );
+    } else {
+      const items =
+        scenario === "empty"
+          ? []
+          : scenario === "new-special"
+            ? [...starting, item("preview-new", "Cardamom Latte", true)]
+            : starting;
+      response.end(JSON.stringify(items));
+    }
+    return;
+  }
+  if (url.pathname !== "/") {
+    response.writeHead(404);
+    response.end();
+    return;
+  }
+  response.setHeader("Content-Type", "text/html; charset=utf-8");
+  response.end(
+    '<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Controlled-response special offering preview</title><link rel="stylesheet" href="/preview.css"><style>body{margin:0;background:#faf7f2;color:#302a25;font-family:Arial,sans-serif}a{color:#8a4b2a}*{box-sizing:border-box}</style></head><body><div id="root"></div><script src="/preview.js"></script></body></html>',
+  );
+});
+server.listen(Number(process.env.SPECIAL_OFFERING_PREVIEW_PORT ?? 3002), "127.0.0.1", () => {
+  console.log(`Test-only controlled-response preview: http://127.0.0.1:${server.address().port}`);
+});
diff --git a/scripts/verify-live.ts b/scripts/verify-live.ts
new file mode 100644
index 0000000..4c99567
--- /dev/null
+++ b/scripts/verify-live.ts
@@ -0,0 +1,30 @@
+import { loadEnvConfig } from "@next/env";
+import { verifyLive } from "./live-acceptance";
+
+async function main() {
+  try {
+    loadEnvConfig(process.cwd(), true, { info() {}, error() {} });
+    const args = process.argv.slice(2);
+    if (
+      args.some((arg) => !["--confirm-writes", "--all"].includes(arg)) ||
+      (args.includes("--all") && !args.includes("--confirm-writes"))
+    )
+      throw new Error("arguments");
+    const result = await verifyLive({
+      baseUrl: process.env.LIVE_BASE_URL ?? "",
+      username: process.env.MANAGEMENT_USERNAME,
+      password: process.env.MANAGEMENT_PASSWORD,
+      allowWrites: args.includes("--confirm-writes"),
+      allOperations: args.includes("--all"),
+    });
+    console.log(
+      `PASS live: ${result.readCount} public offerings; ${result.writes ? "authorized persistence and targeted cleanup verified" : "read-only check"}${result.updated ? "; update verified" : ""}.`,
+    );
+  } catch {
+    console.error(
+      "FAIL live: check LIVE_BASE_URL, private management credentials, and deployed behavior. Writes require --confirm-writes; --all also verifies updates. Check the deployment for disposable Verification records if a request or cleanup failed. No credentials printed.",
+    );
+    process.exitCode = 1;
+  }
+}
+void main();
diff --git a/skills/ask-matt/PHASE-BOUNDARIES.md b/skills/ask-matt/PHASE-BOUNDARIES.md
new file mode 100644
index 0000000..fb58ef9
--- /dev/null
+++ b/skills/ask-matt/PHASE-BOUNDARIES.md
@@ -0,0 +1,55 @@
+# Phase boundaries
+
+A **phase** is a chunk of work inside a session: the grilling, the implementation, the QA. The definition is fuzzy on purpose: a phase ends when you think *"ok, we're done with that"*.
+
+The **phase boundary** is the gap between two phases, and it is the only place this decision belongs. Mid-phase there is no decision to make: continue, or split the work that's left into subagents. Compacting mid-phase makes the agent lose the thread.
+
+## The five options
+
+| Option       | What it does                                                    |
+| ------------ | --------------------------------------------------------------- |
+| **Continue** | Stay in the session. No context switch at all.                    |
+| **`/clear`** | Empty the context window and start from nothing.                  |
+| **`/handoff`** | Write a portable markdown file and seed a session anywhere with it. |
+| **Subagent** | Send the task to its own context window and get a report back.     |
+| **`/compact`** | Compress this context and seed a fresh session with the summary.  |
+
+## The tree
+
+Work top to bottom at the boundary. The first **yes** wins.
+
+**1. Can you continue in this session?** Two things make the answer yes: the next phase needs this phase as a **primary source**, or you have enough [smart zone](https://www.aihero.dev/ai-coding-dictionary/smart-zone) left (~150k tokens) for the next phase to fit. Grilling → implementation is the standard yes: the implementation wants the reasoning verbatim, not a summary of it. Continue costs nothing and loses nothing, so rule it out before anything else.
+
+**2. Is the context irrelevant to what comes next?** Is everything in this session (the exploration, the decisions, the dead ends) disposable? If so, **`/clear`**. It is the cheapest move on the board: it takes no time and hands back the whole window. `/clear` also isn't terminal: the old session stays resumable.
+
+The cost of getting this wrong is one-way. Clear a *relevant* context and you lose the **why** behind what you built, and no amount of reading the diff back gets it returned.
+
+**3. Do you need to hand off?** `/handoff` is narrow. You need it only when you are:
+
+- swapping to a **new harness** (Claude → Codex),
+- moving to a **new directory** or repo,
+- sending the work to a **colleague**,
+- or forking a side task you found **mid-phase** without derailing what you're doing.
+
+That list is the whole clause. What `/handoff` buys is **portability**: a file that travels. If nothing is travelling, you don't need it.
+
+**4. Can the task be done AFK?** Is it scoped tightly enough to run with you away from the keyboard, no steering? Then send it to a **subagent** and leave this session untouched. Automated review is the standard case: the agent reads the diff and reports, and you aren't needed while it does.
+
+**5. Otherwise, `/compact`.** Relevant context, same harness, same directory, and you need to stay in the loop: this is where the tree lands, and it lands here often. Pass it an instruction (`/compact we're going to QA this area`) so the summary keeps what the next phase needs.
+
+`/compact` is the **default, not the first reach**. It sits at the bottom because the four questions above it are all cheaper or more precise. The failure mode when people start here is a fresh session that is confidently wrong about a decision the summary flattened.
+
+## Primary and secondary sources
+
+Every move except **Continue** turns a **primary source** into a **secondary source**: the session as it happened, replaced by a summary of it. The trade is always the same shape:
+
+| Source                            | Information | Noise | Room to move |
+| --------------------------------- | ----------- | ----- | ------------ |
+| Primary (Continue)                | Full        | Lots  | Little       |
+| Secondary (`/compact`, `/handoff`) | Lossy       | Less  | Lots         |
+
+This is why question 1 comes first. You only pay the lossiness when staying costs more than it saves.
+
+## These are judgement calls
+
+The questions are not objective: each has taste in it, and the same boundary can go two ways on two days. The value is in asking them **in order**, at the boundary rather than in the middle of the work.
diff --git a/skills/ask-matt/SKILL.md b/skills/ask-matt/SKILL.md
new file mode 100644
index 0000000..d2f8fc0
--- /dev/null
+++ b/skills/ask-matt/SKILL.md
@@ -0,0 +1,90 @@
+---
+name: ask-matt
+description: Ask which skill or flow fits your situation. A router over the skills in this repo.
+disable-model-invocation: false
+---
+
+# Ask Matt
+
+You don't remember every skill, so ask.
+
+A **flow** is a path through the skills. Most paths run along one **main flow**, and two **on-ramps** merge onto it. Everything else is standalone, or a vocabulary layer that runs underneath.
+
+## The main flow: idea → ship
+
+The route most work travels. You have an idea and want it built.
+
+1. **`/grill-with-docs`** sharpens the idea by interview. Start here whenever you are **working in a working directory**: it's stateful, retaining what it learns in `CONTEXT.md` and ADRs. (No working directory? Use `/grill-me` instead, covered under Standalone. Both run the same `/grilling` primitive; `grill-with-docs` is the one that leaves a paper trail, which makes it the better of the two whenever a repo is there to leave it in.)
+2. **Branch: can you settle every question in conversation?** If a question needs a runnable answer (state, business logic, a UI you have to see), detour through a prototype, bridged by **`/handoff`** in both directions (a prototype lives in its own directory, which is exactly what `/handoff` is for; see Phase boundaries):
+   - **`/handoff`** out, then open a fresh session against that file,
+   - **`/prototype`** to answer the question with throwaway code,
+   - **`/handoff`** back what you learned, and reference it from the original idea thread.
+3. **Branch: is this a multi-session build?**
+   - **Yes** → **`/to-spec`** (turn the thread into a spec), then **`/to-tickets`** to split it into tracer-bullet tickets, each declaring its **blocking edges**. On a local tracker that's one file per ticket under `.scratch/<feature>/issues/`, worked blockers-first by hand; on a real tracker the edges become native blocking links, so any ticket whose blockers are done can be grabbed: kick off **`/implement`** per ticket, **`/clear`ing context between each one**. Each ticket is self-contained, so the last one's context is disposable.
+   - **No** → **`/implement`** right here, in the same context window.
+
+   Either way, **`/implement`** builds each issue by driving **`/tdd`** internally (one red-green slice at a time), then closes out by running **`/code-review`**, a two-axis review (Standards + Spec) of the diff, before committing. Reach for **`/tdd`** on its own when you just want to build a concrete behaviour test-first without a full spec, and **`/code-review`** on its own whenever you want to review a branch or PR against a fixed point.
+
+### Context hygiene
+
+Keep steps 1–3 in **one unbroken context window** (don't compact or clear until after `/to-tickets`) so the grilling, spec, and tickets all build on the same thinking. Each `/implement` then starts fresh, working from the ticket.
+
+The limit on this is the **[smart zone](https://www.aihero.dev/ai-coding-dictionary/smart-zone)**: the window (~150k tokens on state-of-the-art models) within which the model still reasons sharply. If a session approaches it before `/to-tickets`, don't push on degraded; `/compact` at the nearest phase boundary and carry on (see Phase boundaries).
+
+## On-ramps
+
+A starting situation that generates work, then merges onto the main flow.
+
+- **Bugs and requests piling up** → **`/triage`**. It moves issues through triage roles and produces agent-ready issues, which **`/implement`** later picks up.
+
+  Triage is only for issues **you didn't create**: bug reports, incoming feature requests, anything that arrives raw. Tickets that `/to-tickets` produced are already agent-ready, so **don't triage them**.
+
+- **Something's broken** → **`/diagnosing-bugs`**. For the hard ones: the bug that resists a first glance, the intermittent flake, the regression that crept in between two known-good states. It refuses to theorise until it has a **tight feedback loop** (one command that already goes red on *this* bug), then fixes with a regression test. Its post-mortem hands off to **`/improve-codebase-architecture`** when the real finding is that there's no good seam to lock the bug down.
+
+- **A huge, foggy effort: a greenfield project or a huge feature build, too big for one session** → **`/wayfinder`**, the most cognitively demanding flow here. When the way from here to the destination isn't visible yet, it charts a **shared map** of **decision tickets** on the issue tracker and resolves them one at a time, producing **decisions, not deliverables**, until the fog is pushed back and the way is clear. Where **`/grill-with-docs`** sharpens an idea you can hold in one session, wayfinder is for the idea you can't, and it's slower and denser, so save it for exactly that, never a well-scoped feature.
+
+  When the map clears, **it hands off, it doesn't build**: merge onto the main flow at **`/to-spec`**, which collapses the map's linked decisions into a buildable plan, then `/to-tickets` and `/implement` as usual. Looping the map straight into `/implement` skips that collapse and throws the linked detail away, so go straight to `/implement` only when the effort turned out genuinely small.
+
+## Codebase health
+
+Not feature work, just upkeep.
+
+- **`/improve-codebase-architecture`** runs whenever you have a spare moment to keep the codebase good for agents to operate in. It surfaces **deepening opportunities**; picking one _generates an idea_ you can take into the main flow at `/grill-with-docs`. It's the survey that finds the candidates; **`/codebase-design`** (below) is the bench you design the chosen one on.
+
+## Vocabulary underneath
+
+Two model-invoked references that run *beneath* the other skills, each the single source of truth for its vocabulary. Reach for them directly when the **words**, not the process, are the problem; or let the skills above pull them in.
+
+- **`/domain-modeling`**: sharpen the project's *domain* language: challenge a fuzzy term, resolve an overloaded word ("account" doing three jobs), record a hard-to-reverse decision as an ADR. It's the active discipline `/grill-with-docs` drives to keep `CONTEXT.md` a clean glossary.
+- **`/codebase-design`** is the deep-module vocabulary (module, interface, depth, seam, adapter, leverage, locality) for designing a module's *shape*: a lot of behaviour behind a small interface at a clean seam. `/tdd` and `/improve-codebase-architecture` both speak it.
+
+## Phase boundaries
+
+A **phase** is a chunk of work inside a session: the grilling, the implementation, the QA. At the **boundary** between two of them you have five options, and picking between them is the fuzziest decision in this whole map:
+
+- **Continue**: stay put. Costs nothing, loses nothing.
+- **`/clear`**: empty the window, when nothing here matters to what's next.
+- **`/handoff`** writes a portable markdown file. Narrow: only for a **new harness**, a **new directory**, a **colleague**, or forking a side task **mid-phase**. What it buys is portability.
+- **Subagent**: send a tightly-scoped task to its own window and get a report back.
+- **`/compact`** compresses this context and seeds a fresh session with it. The **default**, at the bottom of the tree rather than the first reach.
+
+Read [PHASE-BOUNDARIES.md](PHASE-BOUNDARIES.md) for the ordered tree: the five questions, the reasoning behind each branch, and why the primary-source cost makes **Continue** the one to rule out first. Make the decision **at** a boundary; mid-phase, continue or split the rest into subagents.
+
+## Standalone
+
+Off the main flow entirely.
+
+- **`/grill-me`**: the same relentless interview as `/grill-with-docs`, but **stateless**: it saves nothing locally and builds no `CONTEXT.md`. Reach for it when you are **not working in a working directory** (sharpening a plan, a design, a piece of writing, anything with no repo under it). If you are in a working directory, use `/grill-with-docs` instead: it runs the same interview and leaves a paper trail, so it is strictly the better one.
+- **`/grilling`** is the interview primitive itself: rounds, the frontier, facts are the agent's job and decisions are yours. `/grill-me` and `/grill-with-docs` are the two named ways in, and `/triage`, `/wayfinder` and `/improve-codebase-architecture` all run it internally. Reach for it directly only when you want the interview with no wrapper around it.
+- **`/resolving-merge-conflicts`** works an in-progress merge or rebase conflict hunk by hunk, resolving by **intent** traced to each side's primary source rather than by picking lines, then finishes the operation. It never runs `--abort`. Standalone and off every flow: reach for it when you are already mid-conflict.
+- **`/prototype`** is a small, throwaway program that answers one design question: does this state model feel right, or what should this UI look like. Throwaway is a constraint on how the code is written, not a promise to destroy it: the answer folds into the real code, and the prototype itself is kept as a **primary source** on a `prototype/<name>` branch out of main, pointed at from the implementation issue. It's the detour in step 2 of the main flow, but reach for it any time a design question is hard to settle on paper.
+- **`/research`**: delegate reading legwork to a **background agent**: it investigates a question against **primary sources**, then leaves a cited Markdown file in the repo. Keep working while it reads. The file it produces is something to take *into* the main flow at `/grill-with-docs`, since research feeds the thinking rather than replacing it.
+- **`/to-questionnaire`** comes in when the thing blocking you isn't in your head or the codebase but in **someone else's**, and it writes them a questionnaire to fill in. It's the inverse of `/grill-me`: instead of interviewing you about the subject, it interviews you about the **send** (who it's going to, what you need back) and aims the questions at the gap. What comes back is material for `/grill-with-docs` or `/to-spec`.
+- **`/wizard`** is for the steps only a **human** can take: provisioning infrastructure, setting up credentials or CI secrets, clicking through an unfamiliar third-party dashboard, running a one-off migration or cutover. It generates an interactive bash script that opens each URL, captures each value, and writes it into `.env` and GitHub secrets, so the procedure stops being something you re-explain to an agent every time. Model-invoked, so the agent reaches for it the moment it hits a wall only you can pass. If the agent could just do it itself, it should; this is for where a human is genuinely in the loop.
+- **`/wait-what`** is the corrective for a message that didn't land. Use it mid-conversation, inside any other skill, and the agent re-pitches what it just said with the context you were missing, in plain English, using the `CONTEXT.md` vocabulary. It works after the fact; `/grill-with-docs` is the upfront cure, because a shared language agreed early is what stops the jargon arriving at all.
+- **`/teach`**: learn a concept over multiple sessions, using the current directory as a stateful workspace.
+- **`/writing-for-agents`** is the reference for writing documents agents consume: skills, AGENTS.md, pointed-at docs.
+
+## Precondition
+
+**`/setup-matt-pocock-skills`**: run before your first engineering flow to configure the issue tracker, triage labels, and doc layout the other skills assume. Custom issue trackers also work.
diff --git a/skills/ask-matt/agents/openai.yaml b/skills/ask-matt/agents/openai.yaml
new file mode 100644
index 0000000..07d9218
--- /dev/null
+++ b/skills/ask-matt/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Ask Matt"
+  short_description: "Explicitly invoke the Ask Matt workflow"
+  default_prompt: "Use $ask-matt to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/claude-handoff/SKILL.md b/skills/claude-handoff/SKILL.md
new file mode 100644
index 0000000..da428ce
--- /dev/null
+++ b/skills/claude-handoff/SKILL.md
@@ -0,0 +1,18 @@
+---
+name: claude-handoff
+description: Hand the current conversation off to a fresh background agent that picks up the work immediately.
+argument-hint: "What will the next session be used for?"
+disable-model-invocation: false
+---
+
+Write a handoff summary of the current conversation so a fresh agent can continue the work. Instead of saving it, launch a background agent seeded with the summary as its prompt: `claude --bg --name "<descriptive name>" "<handoff summary>"`. It starts in the current working directory and returns immediately; the user manages it with `claude agents`.
+
+Always pass `-n`/`--name` with a descriptive name (e.g. `--name "Fix login bug"`); it sets the display name shown in the job list, session picker, and terminal title.
+
+Include a "suggested skills" section in the summary, naming which skills the next agent should call the Skill tool for.
+
+Do not duplicate content already captured in other artifacts (specs, plans, ADRs, issues, commits, diffs). Reference them by path or URL instead.
+
+Redact any sensitive information, such as API keys, passwords, or personally identifiable information, since the summary becomes the agent's prompt.
+
+If the user passed arguments, treat them as a description of what the next session will focus on and tailor the summary accordingly.
diff --git a/skills/claude-handoff/agents/openai.yaml b/skills/claude-handoff/agents/openai.yaml
new file mode 100644
index 0000000..433bbaf
--- /dev/null
+++ b/skills/claude-handoff/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Claude Handoff"
+  short_description: "Explicitly invoke the Claude Handoff workflow"
+  default_prompt: "Use $claude-handoff to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/code-review/SKILL.md b/skills/code-review/SKILL.md
new file mode 100644
index 0000000..e28d7ac
--- /dev/null
+++ b/skills/code-review/SKILL.md
@@ -0,0 +1,87 @@
+---
+name: code-review
+description: "Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes: Standards (does the code follow this repo's documented coding standards?) and Spec (does the code match what the originating issue/spec asked for?). Runs both reviews in parallel sub-agents and reports them side by side. Use when the user wants to review a branch, a PR, work-in-progress changes, or asks to \"review since X\"."
+---
+
+Two-axis review of the diff between `HEAD` and a fixed point the user supplies:
+
+- **Standards**: does the code conform to this repo's documented coding standards?
+- **Spec**: does the code faithfully implement the originating issue / spec?
+
+Both axes run as **parallel sub-agents** so they don't pollute each other's context, then this skill aggregates their findings.
+
+The issue tracker should have been provided to you. If `docs/agents/issue-tracker.md` is missing, tell the user to run `/setup-matt-pocock-skills`.
+
+## Process
+
+### 1. Pin the fixed point
+
+Whatever the user said is the fixed point (a commit SHA, branch name, tag, `main`, `HEAD~5`, etc.). If they didn't specify one, ask for it.
+
+Capture the diff command once: `git diff <fixed-point>...HEAD` (three-dot, so the comparison is against the merge-base). Also note the list of commits via `git log <fixed-point>..HEAD --oneline`.
+
+Before going further, confirm the fixed point resolves (`git rev-parse <fixed-point>`) and the diff is non-empty. A bad ref or empty diff should fail here, not inside two parallel sub-agents.
+
+### 2. Identify the spec source
+
+Look for the originating spec, in this order:
+
+1. Issue references in the commit messages (`#123`, `Closes #45`, GitLab `!67`, etc.), fetched via the workflow in `docs/agents/issue-tracker.md`.
+2. A path the user passed as an argument.
+3. A spec file under `docs/`, `specs/`, or `.scratch/` matching the branch name or feature.
+4. If nothing is found, ask the user where the spec is. If they say there isn't one, the **Spec** sub-agent will skip and report "no spec available".
+
+### 3. Identify the standards sources
+
+Anything in the repo that documents how code should be written, such as `CODING_STANDARDS.md` or `CONTRIBUTING.md`.
+
+On top of whatever the repo documents, the Standards axis always carries the **smell baseline** below: a fixed set of Fowler code smells (_Refactoring_, ch.3) that applies even when a repo documents nothing. Two rules bind it:
+
+- **The repo overrides.** A documented repo standard always wins; where it endorses something the baseline would flag, suppress the smell.
+- **Always a judgement call.** Each smell is a labelled heuristic ("possible Feature Envy"), never a hard violation. Like any standard here, skip anything tooling already enforces.
+
+Each smell reads *what it is* → *how to fix*; match it against the diff:
+
+- **Mysterious Name**: a function, variable, or type whose name doesn't reveal what it does or holds. → rename it; if no honest name comes, the design's murky.
+- **Duplicated Code**: the same logic shape appears in more than one hunk or file in the change. → extract the shared shape, call it from both.
+- **Feature Envy**: a method that reaches into another object's data more than its own. → move the method onto the data it envies.
+- **Data Clumps**: the same few fields or params keep travelling together (a type wanting to be born). → bundle them into one type, pass that.
+- **Primitive Obsession**: a primitive or string standing in for a domain concept that deserves its own type. → give the concept its own small type.
+- **Repeated Switches**: the same `switch`/`if`-cascade on the same type recurs across the change. → replace with polymorphism, or one map both sites share.
+- **Shotgun Surgery**: one logical change forces scattered edits across many files in the diff. → gather what changes together into one module.
+- **Divergent Change**: one file or module is edited for several unrelated reasons. → split so each module changes for one reason.
+- **Speculative Generality**: abstraction, parameters, or hooks added for needs the spec doesn't have. → delete it; inline back until a real need shows.
+- **Message Chains**: long `a.b().c().d()` navigation the caller shouldn't depend on. → hide the walk behind one method on the first object.
+- **Middle Man**: a class or function that mostly just delegates onward. → cut it, call the real target direct.
+- **Refused Bequest**: a subclass or implementer that ignores or overrides most of what it inherits. → drop the inheritance, use composition.
+
+### 4. Spawn both sub-agents in parallel
+
+**Standards sub-agent prompt** should include:
+
+- The full diff command and commit list.
+- The list of standards-source files you found in step 3, **plus the smell baseline from step 3** pasted in full (the sub-agent has no other access to it).
+- The brief: "Report, per file/hunk where relevant, (a) every place the diff violates a documented standard: cite the standard (file + the rule); and (b) any baseline smell you spot: name it and quote the hunk. Distinguish hard violations from judgement calls: documented-standard breaches can be hard, but baseline smells are always judgement calls, and a documented repo standard overrides the baseline. Skip anything tooling enforces. Under 400 words."
+
+**Spec sub-agent prompt** should include:
+
+- The diff command and commit list.
+- The path or fetched contents of the spec.
+- The brief: "Report: (a) requirements the spec asked for that are missing or partial; (b) behaviour in the diff that wasn't asked for (scope creep); (c) requirements that look implemented but where the implementation looks wrong. Quote the spec line for each finding. Under 400 words."
+
+If the spec is missing, skip the Spec sub-agent and note this in the final report.
+
+### 5. Aggregate
+
+Present the two reports under `## Standards` and `## Spec` headings, verbatim or lightly cleaned. Do **not** merge or rerank findings, because the two axes are deliberately separate (see _Why two axes_).
+
+End with a one-line summary: total findings per axis, and the worst issue _within each axis_ (if any). Don't pick a single winner across axes: that's the reranking the separation exists to prevent.
+
+## Why two axes
+
+A change can pass one axis and fail the other:
+
+- Code that follows every standard but implements the wrong thing → **Standards pass, Spec fail.**
+- Code that does exactly what the issue asked but breaks the project's conventions → **Spec pass, Standards fail.**
+
+Reporting them separately stops one axis from masking the other.
diff --git a/skills/code-review/agents/openai.yaml b/skills/code-review/agents/openai.yaml
new file mode 100644
index 0000000..9076774
--- /dev/null
+++ b/skills/code-review/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Code Review"
+  short_description: "Review a diff on standards and spec"
diff --git a/skills/codebase-design/DEEPENING.md b/skills/codebase-design/DEEPENING.md
new file mode 100644
index 0000000..cd94075
--- /dev/null
+++ b/skills/codebase-design/DEEPENING.md
@@ -0,0 +1,37 @@
+# Deepening
+
+How to deepen a cluster of shallow modules safely, given its dependencies. Assumes the vocabulary in [SKILL.md](SKILL.md): **module**, **interface**, **seam**, **adapter**.
+
+## Dependency categories
+
+When assessing a candidate for deepening, classify its dependencies. The category determines how the deepened module is tested across its seam.
+
+### 1. In-process
+
+Pure computation, in-memory state, no I/O. Always deepenable: merge the modules and test through the new interface directly. No adapter needed.
+
+### 2. Local-substitutable
+
+Dependencies that have local test stand-ins (PGLite for Postgres, in-memory filesystem). Deepenable if the stand-in exists. The deepened module is tested with the stand-in running in the test suite. The seam is internal; no port at the module's external interface.
+
+### 3. Remote but owned (Ports & Adapters)
+
+Your own services across a network boundary (microservices, internal APIs). Define a **port** (interface) at the seam. The deep module owns the logic; the transport is injected as an **adapter**. Tests use an in-memory adapter. Production uses an HTTP/gRPC/queue adapter.
+
+Recommendation shape: *"Define a port at the seam, implement an HTTP adapter for production and an in-memory adapter for testing, so the logic sits in one deep module even though it's deployed across a network."*
+
+### 4. True external (Mock)
+
+Third-party services (Stripe, Twilio, etc.) you don't control. The deepened module takes the external dependency as an injected port; tests provide a mock adapter.
+
+## Seam discipline
+
+- **One adapter means a hypothetical seam. Two adapters means a real one.** Don't introduce a port unless at least two adapters are justified (typically production + test). A single-adapter seam is just indirection.
+- **Internal seams vs external seams.** A deep module can have internal seams (private to its implementation, used by its own tests) as well as the external seam at its interface. Don't expose internal seams through the interface just because tests use them.
+
+## Testing strategy: replace, don't layer
+
+- Old unit tests on shallow modules become waste once tests at the deepened module's interface exist; delete them.
+- Write new tests at the deepened module's interface. The **interface is the test surface**.
+- Tests assert on observable outcomes through the interface, not internal state.
+- Tests should survive internal refactors, since they describe behaviour, not implementation. If a test has to change when the implementation changes, it's testing past the interface.
diff --git a/skills/codebase-design/DESIGN-IT-TWICE.md b/skills/codebase-design/DESIGN-IT-TWICE.md
new file mode 100644
index 0000000..7edc861
--- /dev/null
+++ b/skills/codebase-design/DESIGN-IT-TWICE.md
@@ -0,0 +1,44 @@
+# Design It Twice
+
+When the user wants to explore alternative interfaces for a chosen deepening candidate, use this parallel sub-agent pattern. Based on "Design It Twice" (Ousterhout): your first idea is unlikely to be the best.
+
+Uses the vocabulary in [SKILL.md](SKILL.md): **module**, **interface**, **seam**, **adapter**, **leverage**.
+
+## Process
+
+### 1. Frame the problem space
+
+Before spawning sub-agents, write a user-facing explanation of the problem space for the chosen candidate:
+
+- The constraints any new interface would need to satisfy
+- The dependencies it would rely on, and which category they fall into (see [DEEPENING.md](DEEPENING.md))
+- A rough illustrative code sketch to ground the constraints, not a proposal, just a way to make the constraints concrete
+
+Show this to the user, then immediately proceed to Step 2. The user reads and thinks while the sub-agents work in parallel.
+
+### 2. Spawn sub-agents
+
+Spawn 3+ sub-agents in parallel. Each must produce a **radically different** interface for the deepened module.
+
+Prompt each sub-agent with a separate technical brief (file paths, coupling details, dependency category from [DEEPENING.md](DEEPENING.md), what sits behind the seam). The brief is independent of the user-facing problem-space explanation in Step 1. Give each agent a different design constraint:
+
+- Agent 1: "Minimize the interface: aim for 1–3 entry points max. Maximise leverage per entry point."
+- Agent 2: "Maximise flexibility: support many use cases and extension."
+- Agent 3: "Optimise for the most common caller: make the default case trivial."
+- Agent 4 (if applicable): "Design around ports & adapters for cross-seam dependencies."
+
+Include both [SKILL.md](SKILL.md) vocabulary and CONTEXT.md vocabulary in the brief so each sub-agent names things consistently with the architecture language and the project's domain language.
+
+Each sub-agent outputs:
+
+1. Interface (types, methods, params, plus invariants, ordering, error modes)
+2. Usage example showing how callers use it
+3. What the implementation hides behind the seam
+4. Dependency strategy and adapters (see [DEEPENING.md](DEEPENING.md))
+5. Trade-offs: where leverage is high, where it's thin
+
+### 3. Present and compare
+
+Present designs sequentially so the user can absorb each one, then compare them in prose. Contrast by **depth** (leverage at the interface), **locality** (where change concentrates), and **seam placement**.
+
+After comparing, give your own recommendation: which design you think is strongest and why. If elements from different designs would combine well, propose a hybrid. Be opinionated: the user wants a strong read, not a menu.
diff --git a/skills/codebase-design/SKILL.md b/skills/codebase-design/SKILL.md
new file mode 100644
index 0000000..3f63c81
--- /dev/null
+++ b/skills/codebase-design/SKILL.md
@@ -0,0 +1,114 @@
+---
+name: codebase-design
+description: Shared vocabulary for designing deep modules. Use when the user wants to design or improve a module's interface, find deepening opportunities, decide where a seam goes, make code more testable or AI-navigable, or when another skill needs the deep-module vocabulary.
+---
+
+# Codebase Design
+
+Design **deep modules**: a lot of behaviour behind a small interface, placed at a clean seam, testable through that interface. Use this language and these principles wherever code is being designed or restructured. The aim is leverage for callers, locality for maintainers, and testability for everyone.
+
+## Glossary
+
+Use these terms exactly: don't substitute "component," "service," "API," or "boundary." Consistent language is the whole point.
+
+**Module**: anything with an interface and an implementation. Deliberately scale-agnostic: a function, class, package, or tier-spanning slice. _Avoid_: unit, component, service.
+
+**Interface**: everything a caller must know to use the module correctly: the type signature, but also invariants, ordering constraints, error modes, required configuration, and performance characteristics. _Avoid_: API, signature (too narrow, they refer only to the type-level surface).
+
+**Implementation**: what's inside a module, its body of code. Distinct from **Adapter**: a thing can be a small adapter with a large implementation (a Postgres repo) or a large adapter with a small implementation (an in-memory fake). Reach for "adapter" when the seam is the topic; "implementation" otherwise.
+
+**Depth**: leverage at the interface. The amount of behaviour a caller (or test) can exercise per unit of interface they have to learn. A module is **deep** when a large amount of behaviour sits behind a small interface, **shallow** when the interface is nearly as complex as the implementation.
+
+**Seam** _(Michael Feathers)_: a place where you can alter behaviour without editing in that place; the *location* at which a module's interface lives. Where to put the seam is its own design decision, distinct from what goes behind it. _Avoid_: boundary (overloaded with DDD's bounded context).
+
+**Adapter**: a concrete thing that satisfies an interface at a seam. Describes *role* (what slot it fills), not substance (what's inside).
+
+**Leverage**: what callers get from depth. More capability per unit of interface they learn. One implementation pays back across N call sites and M tests.
+
+**Locality**: what maintainers get from depth. Change, bugs, knowledge, and verification concentrate in one place rather than spreading across callers. Fix once, fixed everywhere.
+
+## Deep vs shallow
+
+**Deep module** = small interface + lots of implementation:
+
+```
+┌─────────────────────┐
+│   Small Interface   │  ← Few methods, simple params
+├─────────────────────┤
+│                     │
+│  Deep Implementation│  ← Complex logic hidden
+│                     │
+└─────────────────────┘
+```
+
+**Shallow module** = large interface + little implementation (avoid):
+
+```
+┌─────────────────────────────────┐
+│       Large Interface           │  ← Many methods, complex params
+├─────────────────────────────────┤
+│  Thin Implementation            │  ← Just passes through
+└─────────────────────────────────┘
+```
+
+When designing an interface, ask:
+
+- Can I reduce the number of methods?
+- Can I simplify the parameters?
+- Can I hide more complexity inside?
+
+## Principles
+
+- **Depth is a property of the interface, not the implementation.** A deep module can be internally composed of small, mockable, swappable parts; they just aren't part of the interface. A module can have **internal seams** (private to its implementation, used by its own tests) as well as the **external seam** at its interface.
+- **The deletion test.** Imagine deleting the module. If complexity vanishes, it was a pass-through. If complexity reappears across N callers, it was earning its keep.
+- **The interface is the test surface.** Callers and tests cross the same seam. If you want to test *past* the interface, the module is probably the wrong shape.
+- **One adapter means a hypothetical seam. Two adapters means a real one.** Don't introduce a seam unless something actually varies across it.
+
+## Designing for testability
+
+Good interfaces make testing natural:
+
+1. **Accept dependencies, don't create them.**
+
+   ```typescript
+   // Testable
+   function processOrder(order, paymentGateway) {}
+
+   // Hard to test
+   function processOrder(order) {
+     const gateway = new StripeGateway();
+   }
+   ```
+
+2. **Return results, don't produce side effects.**
+
+   ```typescript
+   // Testable
+   function calculateDiscount(cart): Discount {}
+
+   // Hard to test
+   function applyDiscount(cart): void {
+     cart.total -= discount;
+   }
+   ```
+
+3. **Small surface area.** Fewer methods = fewer tests needed. Fewer params = simpler test setup.
+
+## Relationships
+
+- A **Module** has exactly one **Interface** (the surface it presents to callers and tests).
+- **Depth** is a property of a **Module**, measured against its **Interface**.
+- A **Seam** is where a **Module**'s **Interface** lives.
+- An **Adapter** sits at a **Seam** and satisfies the **Interface**.
+- **Depth** produces **Leverage** for callers and **Locality** for maintainers.
+
+## Rejected framings
+
+- **Depth as ratio of implementation-lines to interface-lines** (Ousterhout): rewards padding the implementation. We use depth-as-leverage instead.
+- **"Interface" as the TypeScript `interface` keyword or a class's public methods**: too narrow: interface here includes every fact a caller must know.
+- **"Boundary"**: overloaded with DDD's bounded context. Say **seam** or **interface**.
+
+## Going deeper
+
+- **Deepening a cluster given its dependencies**, see [DEEPENING.md](DEEPENING.md): dependency categories, seam discipline, and replace-don't-layer testing.
+- **Exploring alternative interfaces**, see [DESIGN-IT-TWICE.md](DESIGN-IT-TWICE.md): spin up parallel sub-agents to design the interface several radically different ways, then compare on depth, locality, and seam placement.
diff --git a/skills/codebase-design/agents/openai.yaml b/skills/codebase-design/agents/openai.yaml
new file mode 100644
index 0000000..3180715
--- /dev/null
+++ b/skills/codebase-design/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Codebase Design"
+  short_description: "Vocabulary for deep-module design"
diff --git a/skills/diagnosing-bugs/SKILL.md b/skills/diagnosing-bugs/SKILL.md
new file mode 100644
index 0000000..061c25a
--- /dev/null
+++ b/skills/diagnosing-bugs/SKILL.md
@@ -0,0 +1,138 @@
+---
+name: diagnosing-bugs
+description: Diagnosis loop for hard bugs and performance regressions. Use when the user says "diagnose"/"debug this", or reports something broken/throwing/failing/slow.
+---
+
+# Diagnosing Bugs
+
+A discipline for hard bugs. Skip phases only when explicitly justified.
+
+When exploring the codebase, read `CONTEXT.md` (if it exists) to get a clear mental model of the relevant modules, and check ADRs in the area you're touching.
+
+## Redact
+
+This skill has you show commands, outputs and captured artifacts. **Redact every secret first**: write `<REDACTED>` in its place. Build loops against env vars, so the credential stays in the environment rather than in what you show. Captured artifacts carry auth headers: quote only the lines that carry the signal.
+
+If the redacted output is not enough to diagnose the bug, say so and ask the user.
+
+## Phase 1: Build a feedback loop
+
+**This is the skill.** Everything else is mechanical. If you have a **tight** pass/fail signal for the bug (one that goes red on _this_ bug), you will find the cause; bisection, hypothesis-testing, and instrumentation all just consume it. If you don't have one, no amount of staring at code will save you.
+
+Spend disproportionate effort here. **Be aggressive. Be creative. Refuse to give up.**
+
+### Ways to construct one, in roughly this order
+
+1. **Failing test** at whatever seam reaches the bug: unit, integration, e2e.
+2. **Curl / HTTP script** against a running dev server.
+3. **CLI invocation** with a fixture input, diffing stdout against a known-good snapshot.
+4. **Headless browser script** (Playwright / Puppeteer) that drives the UI and asserts on DOM/console/network.
+5. **Replay a captured trace.** Save a real network request / payload / event log to disk; replay it through the code path in isolation.
+6. **Throwaway harness.** Spin up a minimal subset of the system (one service, mocked deps) that exercises the bug code path with a single function call.
+7. **Property / fuzz loop.** If the bug is "sometimes wrong output", run 1000 random inputs and look for the failure mode.
+8. **Bisection harness.** If the bug appeared between two known states (commit, dataset, version), automate "boot at state X, check, repeat" so you can `git bisect run` it.
+9. **Differential loop.** Run the same input through old-version vs new-version (or two configs) and diff outputs.
+10. **HITL bash script.** Last resort. If a human must click, drive _them_ with `scripts/hitl-loop.template.sh` so the loop is still structured. Captured output feeds back to you.
+
+Build the right feedback loop, and the bug is 90% fixed.
+
+### Tighten the loop
+
+Treat the loop as a product. Once you have _a_ loop, **tighten** it:
+
+- Can I make it faster? (Cache setup, skip unrelated init, narrow the test scope.)
+- Can I make the signal sharper? (Assert on the specific symptom, not "didn't crash".)
+- Can I make it more deterministic? (Pin time, seed RNG, isolate filesystem, freeze network.)
+
+A 30-second flaky loop is barely better than no loop; a 2-second deterministic one is tight, a debugging superpower.
+
+### Non-deterministic bugs
+
+The goal is not a clean repro but a **higher reproduction rate**. Loop the trigger 100×, parallelise, add stress, narrow timing windows, inject sleeps. A 50%-flake bug is debuggable; 1% is not, so keep raising the rate until it's debuggable.
+
+### When you genuinely cannot build a loop
+
+Stop and say so explicitly. List what you tried. Ask the user for: (a) access to whatever environment reproduces it, (b) a redacted captured artifact (HAR file, log dump, core dump, screen recording with timestamps), or (c) permission to add temporary production instrumentation. Do **not** proceed to hypothesise without a loop.
+
+### Completion criterion: a tight loop that goes red
+
+Phase 1 is done when the loop is **tight** and **red-capable**: you can name **one command** (a script path, a test invocation, a curl) that you have **already run at least once** (show the invocation and its output, redacted), and that is:
+
+- [ ] **Red-capable**: it drives the actual bug code path and asserts the **user's exact symptom**, so it can go red on this bug and green once fixed. Not "runs without erroring"; it must be able to _catch this specific bug_.
+- [ ] **Deterministic**: same verdict every run (flaky bugs: a pinned, high reproduction rate, per above).
+- [ ] **Fast**: seconds, not minutes.
+- [ ] **Agent-runnable**: you can run it unattended; a human in the loop only via `scripts/hitl-loop.template.sh`.
+
+If you catch yourself reading code to build a theory before this command exists, **stop: jumping straight to a hypothesis is the exact failure this skill prevents.** No red-capable command, no Phase 2.
+
+## Phase 2: Reproduce + minimise
+
+Run the loop. Watch it go red as the bug appears.
+
+Confirm:
+
+- [ ] The loop produces the failure mode the **user** described, not a different failure that happens to be nearby. Wrong bug = wrong fix.
+- [ ] The failure is reproducible across multiple runs (or, for non-deterministic bugs, reproducible at a high enough rate to debug against).
+- [ ] You have captured the exact symptom (error message, wrong output, slow timing) so later phases can verify the fix actually addresses it.
+
+### Minimise
+
+Once it's red, shrink the repro to the **smallest scenario that still goes red**. Cut inputs, callers, config, data, and steps **one at a time**, re-running the loop after each cut, and keep only what's load-bearing for the failure.
+
+Why bother: a minimal repro shrinks the hypothesis space in Phase 3 (fewer moving parts left to suspect) and becomes the clean regression test in Phase 5.
+
+Done when **every remaining element is load-bearing**: removing any one of them makes the loop go green.
+
+Do not proceed until you have reproduced **and** minimised.
+
+## Phase 3: Hypothesise
+
+Generate **3–5 ranked hypotheses** before testing any of them. Single-hypothesis generation anchors on the first plausible idea.
+
+Each hypothesis must be **falsifiable**: state the prediction it makes.
+
+> Format: "If <X> is the cause, then <changing Y> will make the bug disappear / <changing Z> will make it worse."
+
+If you cannot state the prediction, the hypothesis is a vibe: discard or sharpen it.
+
+**Show the ranked list to the user before testing.** They often have domain knowledge that re-ranks instantly ("we just deployed a change to #3"), or know hypotheses they've already ruled out. Cheap checkpoint, big time saver. Don't block on it; proceed with your ranking if the user is AFK.
+
+## Phase 4: Instrument
+
+Each probe must map to a specific prediction from Phase 3. **Change one variable at a time.**
+
+Tool preference:
+
+1. **Debugger / REPL inspection** if the env supports it. One breakpoint beats ten logs.
+2. **Targeted logs** at the boundaries that distinguish hypotheses.
+3. Never "log everything and grep".
+
+**Tag every debug log** with a unique prefix, e.g. `[DEBUG-a4f2]`. Cleanup at the end becomes a single grep. Untagged logs survive; tagged logs die.
+
+**Perf branch.** For performance regressions, logs are usually wrong. Instead: establish a baseline measurement (timing harness, `performance.now()`, profiler, query plan), then bisect. Measure first, fix second.
+
+## Phase 5: Fix + regression test
+
+Write the regression test **before the fix**, but only if there is a **correct seam** for it.
+
+A correct seam is one where the test exercises the **real bug pattern** as it occurs at the call site. If the only available seam is too shallow (single-caller test when the bug needs multiple callers, unit test that can't replicate the chain that triggered the bug), a regression test there gives false confidence.
+
+**If no correct seam exists, that itself is the finding.** Note it. The codebase architecture is preventing the bug from being locked down. Flag this for the next phase.
+
+If a correct seam exists:
+
+1. Turn the minimised repro into a failing test at that seam.
+2. Watch it fail.
+3. Apply the fix.
+4. Watch it pass.
+5. Re-run the Phase 1 feedback loop against the original (un-minimised) scenario.
+
+## Phase 6: Cleanup
+
+Required before declaring done:
+
+- [ ] Original repro no longer reproduces (re-run the Phase 1 loop)
+- [ ] Regression test passes (or absence of seam is documented)
+- [ ] All `[DEBUG-...]` instrumentation removed (`grep` the prefix)
+- [ ] Throwaway prototypes deleted (or moved to a clearly-marked debug location)
+- [ ] The hypothesis that turned out correct is stated in the commit / PR message, so the next debugger learns
diff --git a/skills/diagnosing-bugs/agents/openai.yaml b/skills/diagnosing-bugs/agents/openai.yaml
new file mode 100644
index 0000000..a13a755
--- /dev/null
+++ b/skills/diagnosing-bugs/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Diagnosing Bugs"
+  short_description: "Diagnose hard bugs and regressions"
diff --git a/skills/diagnosing-bugs/scripts/hitl-loop.template.sh b/skills/diagnosing-bugs/scripts/hitl-loop.template.sh
new file mode 100644
index 0000000..2431984
--- /dev/null
+++ b/skills/diagnosing-bugs/scripts/hitl-loop.template.sh
@@ -0,0 +1,44 @@
+#!/usr/bin/env bash
+# Human-in-the-loop reproduction loop.
+# Copy this file, edit the steps below, and run it.
+# The agent runs the script; the user follows prompts in their terminal.
+#
+# Usage:
+#   bash hitl-loop.template.sh
+#
+# Two helpers:
+#   step "<instruction>"          → show instruction, wait for Enter
+#   capture VAR "<question>"      → show question, read response into VAR
+#
+# At the end, captured values are printed as KEY=VALUE for the agent to parse.
+#
+# `capture` prints its value back to the terminal, where the agent reads it,
+# so capture observations, and leave signing in to the user as a `step`.
+
+set -euo pipefail
+
+step() {
+  printf '\n>>> %s\n' "$1"
+  read -r -p "    [Enter when done] " _
+}
+
+capture() {
+  local var="$1" question="$2" answer
+  printf '\n>>> %s\n' "$question"
+  read -r -p "    > " answer
+  printf -v "$var" '%s' "$answer"
+}
+
+# --- edit below ---------------------------------------------------------
+
+step "Open the app at http://localhost:3000 and sign in."
+
+capture ERRORED "Click the 'Export' button. Did it throw an error? (y/n)"
+
+capture ERROR_MSG "Paste the error message (or 'none'):"
+
+# --- edit above ---------------------------------------------------------
+
+printf '\n--- Captured ---\n'
+printf 'ERRORED=%s\n' "$ERRORED"
+printf 'ERROR_MSG=%s\n' "$ERROR_MSG"
diff --git a/skills/domain-modeling/ADR-FORMAT.md b/skills/domain-modeling/ADR-FORMAT.md
new file mode 100644
index 0000000..d7e61f3
--- /dev/null
+++ b/skills/domain-modeling/ADR-FORMAT.md
@@ -0,0 +1,47 @@
+# ADR Format
+
+ADRs live in `docs/adr/` and use sequential numbering: `0001-slug.md`, `0002-slug.md`, etc.
+
+Create the `docs/adr/` directory lazily: only when the first ADR is needed.
+
+## Template
+
+```md
+# {Short title of the decision}
+
+{1-3 sentences: what's the context, what did we decide, and why.}
+```
+
+That's it. An ADR can be a single paragraph. The value is in recording *that* a decision was made and *why*, not in filling out sections.
+
+## Optional sections
+
+Only include these when they add genuine value. Most ADRs won't need them.
+
+- **Status** frontmatter (`proposed | accepted | deprecated | superseded by ADR-NNNN`): useful when decisions are revisited
+- **Considered Options**: only when the rejected alternatives are worth remembering
+- **Consequences**: only when non-obvious downstream effects need to be called out
+
+## Numbering
+
+Scan `docs/adr/` for the highest existing number and increment by one.
+
+## When to offer an ADR
+
+All three of these must be true:
+
+1. **Hard to reverse**: the cost of changing your mind later is meaningful
+2. **Surprising without context**: a future reader will look at the code and wonder "why on earth did they do it this way?"
+3. **The result of a real trade-off**: there were genuine alternatives and you picked one for specific reasons
+
+If a decision is easy to reverse, skip it: you'll just reverse it. If it's not surprising, nobody will wonder why. If there was no real alternative, there's nothing to record beyond "we did the obvious thing."
+
+### What qualifies
+
+- **Architectural shape.** "We're using a monorepo." "The write model is event-sourced, the read model is projected into Postgres."
+- **Integration patterns between contexts.** "Ordering and Billing communicate via domain events, not synchronous HTTP."
+- **Technology choices that carry lock-in.** Database, message bus, auth provider, deployment target. Not every library: just the ones that would take a quarter to swap out.
+- **Boundary and scope decisions.** "Customer data is owned by the Customer context; other contexts reference it by ID only." The explicit no-s are as valuable as the yes-s.
+- **Deliberate deviations from the obvious path.** "We're using manual SQL instead of an ORM because X." Anything where a reasonable reader would assume the opposite. These stop the next engineer from "fixing" something that was deliberate.
+- **Constraints not visible in the code.** "We can't use AWS because of compliance requirements." "Response times must be under 200ms because of the partner API contract."
+- **Rejected alternatives when the rejection is non-obvious.** If you considered GraphQL and picked REST for subtle reasons, record it; otherwise someone will suggest GraphQL again in six months.
diff --git a/skills/domain-modeling/CONTEXT-FORMAT.md b/skills/domain-modeling/CONTEXT-FORMAT.md
new file mode 100644
index 0000000..79bbb32
--- /dev/null
+++ b/skills/domain-modeling/CONTEXT-FORMAT.md
@@ -0,0 +1,60 @@
+# CONTEXT.md Format
+
+## Structure
+
+```md
+# {Context Name}
+
+{One or two sentence description of what this context is and why it exists.}
+
+## Language
+
+**Order**:
+{A one or two sentence description of the term}
+_Avoid_: Purchase, transaction
+
+**Invoice**:
+A request for payment sent to a customer after delivery.
+_Avoid_: Bill, payment request
+
+**Customer**:
+A person or organization that places orders.
+_Avoid_: Client, buyer, account
+```
+
+## Rules
+
+- **Be opinionated.** When multiple words exist for the same concept, pick the best one and list the others under `_Avoid_`.
+- **Keep definitions tight.** One or two sentences max. Define what it IS, not what it does.
+- **Only include terms specific to this project's context.** General programming concepts (timeouts, error types, utility patterns) don't belong even if the project uses them extensively. Before adding a term, ask: is this a concept unique to this context, or a general programming concept? Only the former belongs.
+- **Group terms under subheadings** when natural clusters emerge. If all terms belong to a single cohesive area, a flat list is fine.
+
+## Single vs multi-context repos
+
+**Single context (most repos):** One `CONTEXT.md` at the repo root.
+
+**Multiple contexts:** A `CONTEXT-MAP.md` at the repo root lists the contexts, where they live, and how they relate to each other:
+
+```md
+# Context Map
+
+## Contexts
+
+- [Ordering](./src/ordering/CONTEXT.md): receives and tracks customer orders
+- [Billing](./src/billing/CONTEXT.md): generates invoices and processes payments
+- [Fulfillment](./src/fulfillment/CONTEXT.md): manages warehouse picking and shipping
+
+## Relationships
+
+- **Ordering → Fulfillment**: Ordering emits `OrderPlaced` events; Fulfillment consumes them to start picking
+- **Fulfillment → Billing**: Fulfillment emits `ShipmentDispatched` events; Billing consumes them to generate invoices
+- **Ordering ↔ Billing**: Shared types for `CustomerId` and `Money`
+```
+
+The skill infers which structure applies:
+
+- If `CONTEXT-MAP.md` exists, read it to find contexts
+- If only a root `CONTEXT.md` exists, single context
+- If neither exists, create a root `CONTEXT.md` lazily when the first term is resolved
+
+When multiple contexts exist, infer which one the current topic relates to. If unclear, ask.
diff --git a/skills/domain-modeling/SKILL.md b/skills/domain-modeling/SKILL.md
new file mode 100644
index 0000000..9b97707
--- /dev/null
+++ b/skills/domain-modeling/SKILL.md
@@ -0,0 +1,74 @@
+---
+name: domain-modeling
+description: Build and sharpen a project's domain model. Use when discussing codebase terminology, writing or editing a CONTEXT.md, or recording or editing an ADR.
+---
+
+# Domain Modeling
+
+Actively build and sharpen the project's domain model as you design. This is the *active* discipline: challenging terms, inventing edge-case scenarios, and writing the glossary and decisions down the moment they crystallise. (Merely *reading* `CONTEXT.md` for vocabulary is not this skill: that's a one-line habit any skill can do. This skill is for when you're changing the model, not just consuming it.)
+
+## File structure
+
+Most repos have a single context:
+
+```
+/
+├── CONTEXT.md
+├── docs/
+│   └── adr/
+│       ├── 0001-event-sourced-orders.md
+│       └── 0002-postgres-for-write-model.md
+└── src/
+```
+
+If a `CONTEXT-MAP.md` exists at the root, the repo has multiple contexts. The map points to where each one lives:
+
+```
+/
+├── CONTEXT-MAP.md
+├── docs/
+│   └── adr/                          ← system-wide decisions
+├── src/
+│   ├── ordering/
+│   │   ├── CONTEXT.md
+│   │   └── docs/adr/                 ← context-specific decisions
+│   └── billing/
+│       ├── CONTEXT.md
+│       └── docs/adr/
+```
+
+Create files lazily: only when you have something to write. If no `CONTEXT.md` exists, create one when the first term is resolved. If no `docs/adr/` exists, create it when the first ADR is needed.
+
+## During the session
+
+### Challenge against the glossary
+
+When the user uses a term that conflicts with the existing language in `CONTEXT.md`, call it out immediately. "Your glossary defines 'cancellation' as X, but you seem to mean Y. Which is it?"
+
+### Sharpen fuzzy language
+
+When the user uses vague or overloaded terms, propose a precise canonical term. "You're saying 'account': do you mean the Customer or the User? Those are different things."
+
+### Discuss concrete scenarios
+
+When domain relationships are being discussed, stress-test them with specific scenarios. Invent scenarios that probe edge cases and force the user to be precise about the boundaries between concepts.
+
+### Cross-reference with code
+
+When the user states how something works, check whether the code agrees. If you find a contradiction, surface it: "Your code cancels entire Orders, but you just said partial cancellation is possible. Which is right?"
+
+### Update CONTEXT.md inline
+
+When a term is resolved, update `CONTEXT.md` right there. Don't batch these up: capture them as they happen. Use the format in [CONTEXT-FORMAT.md](./CONTEXT-FORMAT.md).
+
+`CONTEXT.md` should be totally devoid of implementation details. Do not treat `CONTEXT.md` as a spec, a scratch pad, or a repository for implementation decisions. It is a glossary and nothing else.
+
+### Offer ADRs sparingly
+
+Only offer to create an ADR when all three are true:
+
+1. **Hard to reverse**: the cost of changing your mind later is meaningful
+2. **Surprising without context**: a future reader will wonder "why did they do it this way?"
+3. **The result of a real trade-off**: there were genuine alternatives and you picked one for specific reasons
+
+If any of the three is missing, skip the ADR. Use the format in [ADR-FORMAT.md](./ADR-FORMAT.md).
diff --git a/skills/domain-modeling/agents/openai.yaml b/skills/domain-modeling/agents/openai.yaml
new file mode 100644
index 0000000..7f1522d
--- /dev/null
+++ b/skills/domain-modeling/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Domain Modeling"
+  short_description: "Build and sharpen a domain model"
diff --git a/skills/git-guardrails-claude-code/SKILL.md b/skills/git-guardrails-claude-code/SKILL.md
new file mode 100644
index 0000000..58bcdd8
--- /dev/null
+++ b/skills/git-guardrails-claude-code/SKILL.md
@@ -0,0 +1,95 @@
+---
+name: git-guardrails-claude-code
+description: Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wants to prevent destructive git operations, add git safety hooks, or block git push/reset in Claude Code.
+---
+
+# Setup Git Guardrails
+
+Sets up a PreToolUse hook that intercepts and blocks dangerous git commands before Claude executes them.
+
+## What Gets Blocked
+
+- `git push` (all variants including `--force`)
+- `git reset --hard`
+- `git clean -f` / `git clean -fd`
+- `git branch -D`
+- `git checkout .` / `git restore .`
+
+When blocked, Claude sees a message telling it that it does not have authority to access these commands.
+
+## Steps
+
+### 1. Ask scope
+
+Ask the user: install for **this project only** (`.claude/settings.json`) or **all projects** (`~/.claude/settings.json`)?
+
+### 2. Copy the hook script
+
+The bundled script is at: [scripts/block-dangerous-git.sh](scripts/block-dangerous-git.sh)
+
+Copy it to the target location based on scope:
+
+- **Project**: `.claude/hooks/block-dangerous-git.sh`
+- **Global**: `~/.claude/hooks/block-dangerous-git.sh`
+
+Make it executable with `chmod +x`.
+
+### 3. Add hook to settings
+
+Add to the appropriate settings file:
+
+**Project** (`.claude/settings.json`):
+
+```json
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/block-dangerous-git.sh"
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+**Global** (`~/.claude/settings.json`):
+
+```json
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "~/.claude/hooks/block-dangerous-git.sh"
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+If the settings file already exists, merge the hook into the existing `hooks.PreToolUse` array. Don't overwrite other settings.
+
+### 4. Ask about customization
+
+Ask if user wants to add or remove any patterns from the blocked list. Edit the copied script accordingly.
+
+### 5. Verify
+
+Run a quick test:
+
+```bash
+echo '{"tool_input":{"command":"git push origin main"}}' | <path-to-script>
+```
+
+Should exit with code 2 and print a BLOCKED message to stderr.
diff --git a/skills/git-guardrails-claude-code/agents/openai.yaml b/skills/git-guardrails-claude-code/agents/openai.yaml
new file mode 100644
index 0000000..3f5d756
--- /dev/null
+++ b/skills/git-guardrails-claude-code/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Git Guardrails for Claude Code"
+  short_description: "Block dangerous git commands"
diff --git a/skills/git-guardrails-claude-code/scripts/block-dangerous-git.sh b/skills/git-guardrails-claude-code/scripts/block-dangerous-git.sh
new file mode 100644
index 0000000..c40b59c
--- /dev/null
+++ b/skills/git-guardrails-claude-code/scripts/block-dangerous-git.sh
@@ -0,0 +1,25 @@
+#!/bin/bash
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command')
+
+DANGEROUS_PATTERNS=(
+  "git push"
+  "git reset --hard"
+  "git clean -fd"
+  "git clean -f"
+  "git branch -D"
+  "git checkout \."
+  "git restore \."
+  "push --force"
+  "reset --hard"
+)
+
+for pattern in "${DANGEROUS_PATTERNS[@]}"; do
+  if echo "$COMMAND" | grep -qE "$pattern"; then
+    echo "BLOCKED: '$COMMAND' matches dangerous pattern '$pattern'. The user has prevented you from doing this." >&2
+    exit 2
+  fi
+done
+
+exit 0
diff --git a/skills/grill-me/SKILL.md b/skills/grill-me/SKILL.md
new file mode 100644
index 0000000..3c450aa
--- /dev/null
+++ b/skills/grill-me/SKILL.md
@@ -0,0 +1,7 @@
+---
+name: grill-me
+description: A relentless interview to sharpen a plan or design.
+disable-model-invocation: false
+---
+
+Call the Skill tool with "grilling".
diff --git a/skills/grill-me/agents/openai.yaml b/skills/grill-me/agents/openai.yaml
new file mode 100644
index 0000000..85c90e1
--- /dev/null
+++ b/skills/grill-me/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Grill Me"
+  short_description: "Explicitly invoke the Grill Me workflow"
+  default_prompt: "Use $grill-me to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/grill-with-docs/SKILL.md b/skills/grill-with-docs/SKILL.md
new file mode 100644
index 0000000..bab702b
--- /dev/null
+++ b/skills/grill-with-docs/SKILL.md
@@ -0,0 +1,7 @@
+---
+name: grill-with-docs
+description: A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
+disable-model-invocation: false
+---
+
+Call the Skill tool twice, for "grilling" and "domain-modeling".
diff --git a/skills/grill-with-docs/agents/openai.yaml b/skills/grill-with-docs/agents/openai.yaml
new file mode 100644
index 0000000..85d0049
--- /dev/null
+++ b/skills/grill-with-docs/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Grill With Docs"
+  short_description: "Explicitly invoke the Grill With Docs workflow"
+  default_prompt: "Use $grill-with-docs to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/grilling/SKILL.md b/skills/grilling/SKILL.md
new file mode 100644
index 0000000..8ca78c6
--- /dev/null
+++ b/skills/grilling/SKILL.md
@@ -0,0 +1,28 @@
+---
+name: grilling
+description: Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
+---
+
+Interview the user relentlessly until you reach a shared understanding. Map this as a **design tree**: every decision branches into the decisions that hang off it.
+
+Work the tree in **rounds**. The **frontier** is every decision whose prerequisites are already settled: the questions you can ask _now_ without guessing at answers you haven't heard yet. Ask the whole frontier in one round: number each question and give your recommended answer. Then wait for the user's answers before the next round.
+
+Format a round like so:
+
+```
+❓ **Q1** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+
+---
+
+❓ **Q2** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+```
+
+Each round the user answers reshapes the tree: settled decisions push the frontier outward and unblock questions that depended on them. Recompute the frontier and ask the next round. A question whose answer depends on another question still open in this round belongs to a _later_ round, not this one.
+
+Finding _facts_ is your job, never the user's. When a frontier question needs a fact from the environment (filesystem, tools, etc.), dispatch a sub-agent to find it; don't ask the user for anything you could look up yourself. Don't block on it: a running exploration is an unsettled prerequisite, so only the questions downstream of it wait for the sub-agent to report; ask the rest of the frontier now. The _decisions_ are the user's: put each to them and wait.
+
+The session is done when the frontier is empty: every branch of the design tree visited, nothing left silently assumed. Do not act on it until the user confirms you have reached a shared understanding.
diff --git a/skills/grilling/agents/openai.yaml b/skills/grilling/agents/openai.yaml
new file mode 100644
index 0000000..ddbdb96
--- /dev/null
+++ b/skills/grilling/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Grilling"
+  short_description: "Stress-test thinking a round of questions at a time"
diff --git a/skills/handoff/SKILL.md b/skills/handoff/SKILL.md
new file mode 100644
index 0000000..71e9bf9
--- /dev/null
+++ b/skills/handoff/SKILL.md
@@ -0,0 +1,16 @@
+---
+name: handoff
+description: Compact the current conversation into a handoff document for another agent to pick up.
+argument-hint: "What will the next session be used for?"
+disable-model-invocation: false
+---
+
+Write a handoff document summarising the current conversation so a fresh agent can continue the work. Save to the temporary directory of the user's OS - not the current workspace.
+
+Include a "suggested skills" section in the document, naming which skills the next agent should call the Skill tool for.
+
+Do not duplicate content already captured in other artifacts (specs, plans, ADRs, issues, commits, diffs). Reference them by path or URL instead.
+
+Redact any sensitive information, such as API keys, passwords, or personally identifiable information.
+
+If the user passed arguments, treat them as a description of what the next session will focus on and tailor the doc accordingly.
diff --git a/skills/handoff/agents/openai.yaml b/skills/handoff/agents/openai.yaml
new file mode 100644
index 0000000..c93d8f4
--- /dev/null
+++ b/skills/handoff/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Handoff"
+  short_description: "Explicitly invoke the Handoff workflow"
+  default_prompt: "Use $handoff to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/implement-spec/SKILL.md b/skills/implement-spec/SKILL.md
new file mode 100644
index 0000000..a24c336
--- /dev/null
+++ b/skills/implement-spec/SKILL.md
@@ -0,0 +1,35 @@
+---
+name: implement-spec
+description: "Implement a specification in code."
+disable-model-invocation: false
+---
+
+You have been provided a spec. This spec should have tickets associated with it, describing how to implement the spec.
+
+The goal is a PR which implements the entire spec on a single branch.
+
+The tickets are not a list of steps. They are a **task graph** with blocking relationships between them. This means there is always a **frontier** of tickets which are ready to be grabbed.
+
+Communication to and from subagents should be sparse. Communicate primarily through **context pointers**: to the spec, tickets, research notes, and previous commits. Don't duplicate information already available via pointers.
+
+**Implementer subagents** should be run in the background where possible for **maximum concurrency**.
+
+## Steps
+
+1. Read the spec and tickets. Read enough to understand the task graph.
+
+2. (optional) Use an **exploration subagent** to conduct any exploration required by the tickets - relevant codebase files or external documentation. Ensure the exploration subagent can save files - it should save its markdown notes in a directory outside the repo, accessible by all future subagents. This lets **implementer subagents** focus on implementation rather than exploration.
+
+3. Create a branch, and a draft PR. The PR should be marked as 'closing' the spec issue and tickets.
+
+4. Use **implementer subagents** to implement each ticket. Each implementer subagent should work in its own worktree, on its own branch.
+
+5. Once an **implementer subagent** completes, merge its work to the PR branch with a **merger subagent**.
+
+6. If this changes the **frontier** of available tickets, kick off more **implementer subagents** to work on the new tickets. This allows for maximum concurrency.
+
+7. Once all tickets are complete, run /code-review on the PR branch. Fix all issues raised by the code review in a single **implementer subagent**.
+
+8. Mark the PR as ready for review.
+
+9. Clean up all **implementer subagent** worktrees.
diff --git a/skills/implement-spec/agents/openai.yaml b/skills/implement-spec/agents/openai.yaml
new file mode 100644
index 0000000..297be45
--- /dev/null
+++ b/skills/implement-spec/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Implement Spec"
+  short_description: "Explicitly invoke the Implement Spec workflow"
+  default_prompt: "Use $implement-spec to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/implement/SKILL.md b/skills/implement/SKILL.md
new file mode 100644
index 0000000..b17c701
--- /dev/null
+++ b/skills/implement/SKILL.md
@@ -0,0 +1,15 @@
+---
+name: implement
+description: "Implement a piece of work based on a spec or set of tickets."
+disable-model-invocation: false
+---
+
+Implement the work described by the user in the spec or tickets.
+
+Use /tdd where possible, at pre-agreed seams.
+
+Run typechecking regularly, single test files regularly, and the full test suite once at the end.
+
+Once done, use /code-review to review the work.
+
+Commit your work to the current branch.
diff --git a/skills/implement/agents/openai.yaml b/skills/implement/agents/openai.yaml
new file mode 100644
index 0000000..f7a4ae3
--- /dev/null
+++ b/skills/implement/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Implement"
+  short_description: "Explicitly invoke the Implement workflow"
+  default_prompt: "Use $implement to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/improve-codebase-architecture/HTML-REPORT.md b/skills/improve-codebase-architecture/HTML-REPORT.md
new file mode 100644
index 0000000..e39e825
--- /dev/null
+++ b/skills/improve-codebase-architecture/HTML-REPORT.md
@@ -0,0 +1,123 @@
+# HTML Report Format
+
+The architectural review is rendered as a single self-contained HTML file in the OS temp directory. Tailwind and Mermaid both come from CDNs. Mermaid handles graph-shaped diagrams reliably; hand-built divs and inline SVG handle the more editorial visuals (mass diagrams, cross-sections). Mix the two: don't lean on Mermaid for everything, it'll start to look generic.
+
+## Scaffold
+
+```html
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <title>Architecture review for {{repo name}}</title>
+    <script src="https://cdn.tailwindcss.com"></script>
+    <script type="module">
+      import mermaid from "https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs";
+      mermaid.initialize({ startOnLoad: true, theme: "neutral", securityLevel: "loose" });
+    </script>
+    <style>
+      /* small custom layer for things Tailwind doesn't cover cleanly:
+         dashed seam lines, hand-drawn-feeling arrow heads, etc. */
+      .seam { stroke-dasharray: 4 4; }
+      .leak { stroke: #dc2626; }
+      .deep { background: linear-gradient(135deg, #0f172a, #1e293b); }
+    </style>
+  </head>
+  <body class="bg-stone-50 text-slate-900 font-sans">
+    <main class="max-w-5xl mx-auto px-6 py-12 space-y-12">
+      <header>...</header>
+      <section id="candidates" class="space-y-10">...</section>
+      <section id="top-recommendation">...</section>
+    </main>
+  </body>
+</html>
+```
+
+## Header
+
+Repo name, date, and a compact legend: solid box = module, dashed line = seam, red arrow = leakage, thick dark box = deep module. No introduction paragraph. Straight into the candidates.
+
+## Candidate card
+
+The diagrams carry the weight. Prose is sparse, plain, and uses the glossary terms (from the `/codebase-design` skill) without ceremony.
+
+Each candidate is one `<article>`:
+
+- **Title**: short, names the deepening (e.g. "Collapse the Order intake pipeline").
+- **Badge row**: recommendation strength (`Strong` = emerald, `Worth exploring` = amber, `Speculative` = slate), plus a tag for the dependency category (`in-process`, `local-substitutable`, `ports & adapters`, `mock`).
+- **Files**: monospaced list, `font-mono text-sm`.
+- **Before / After diagram**: the centrepiece. Two columns, side by side. See patterns below.
+- **Problem**: one sentence. What hurts.
+- **Solution**: one sentence. What changes.
+- **Wins**: bullets, ≤6 words each. e.g. "Tests hit one interface", "Pricing logic stops leaking", "Delete 4 shallow wrappers".
+- **ADR callout** (if applicable): one line in an amber-tinted box.
+
+No paragraphs of explanation. If the diagram needs a paragraph to be understood, redraw the diagram.
+
+## Diagram patterns
+
+Pick the pattern that fits the candidate. Mix them. Don't make every diagram look the same. Variety is part of the point.
+
+### Mermaid graph (the workhorse for dependencies / call flow)
+
+Use a Mermaid `flowchart` or `graph` when the point is "X calls Y calls Z, and look at the mess." Wrap it in a Tailwind-styled card so it doesn't feel parachuted in. Style with classDef to colour leakage edges red and the deep module dark. Sequence diagrams work well for "before: 6 round-trips; after: 1."
+
+```html
+<div class="rounded-lg border border-slate-200 bg-white p-4">
+  <pre class="mermaid">
+    flowchart LR
+      A[OrderHandler] --> B[OrderValidator]
+      B --> C[OrderRepo]
+      C -.leak.-> D[PricingClient]
+      classDef leak stroke:#dc2626,stroke-width:2px;
+      class C,D leak
+  </pre>
+</div>
+```
+
+### Hand-built boxes-and-arrows (when Mermaid's layout fights you)
+
+Modules as `<div>`s with borders and labels. Arrows as inline SVG `<line>` or `<path>` elements positioned absolutely over a relative container. Reach for this when you want the "after" diagram to feel like one thick-bordered deep module with greyed-out internals, since Mermaid won't render that with the right weight.
+
+### Cross-section (good for layered shallowness)
+
+Stack horizontal bands (`h-12 border-l-4`) to show layers a call passes through. Before: 6 thin layers each doing nothing. After: 1 thick band labelled with the consolidated responsibility.
+
+### Mass diagram (good for "interface as wide as implementation")
+
+Two rectangles per module: one for interface surface area, one for implementation. Before: interface rectangle is nearly as tall as the implementation rectangle (shallow). After: interface rectangle is short, implementation rectangle is tall (deep).
+
+### Call-graph collapse
+
+Before: a tree of function calls rendered as nested boxes. After: the same tree collapsed into one box, with the now-internal calls shown faded inside it.
+
+## Style guidance
+
+- Lean editorial, not corporate-dashboard. Generous whitespace. Serif optional for headings (`font-serif` works well with stone/slate).
+- Colour sparingly: one accent (emerald or indigo) plus red for leakage and amber for warnings.
+- Keep diagrams ~320px tall so before/after sits comfortably side by side without scrolling.
+- Use `text-xs uppercase tracking-wider` for module labels inside diagrams, so they read as schematic, not as UI.
+- The only scripts are the Tailwind CDN and the Mermaid ESM import. The report is otherwise static: no app code, no interactivity beyond Mermaid's own rendering.
+
+## Top recommendation section
+
+One larger card. Candidate name, one sentence on why, anchor link to its card. That's it.
+
+## Tone
+
+Plain English, concise, but the architectural nouns and verbs come straight from the `/codebase-design` skill. Concision is not an excuse to drift.
+
+**Use exactly:** module, interface, implementation, depth, deep, shallow, seam, adapter, leverage, locality.
+
+**Never substitute:** component, service, unit (for module) · API, signature (for interface) · boundary (for seam) · layer, wrapper (for module, when you mean module).
+
+**Phrasings that fit the style:**
+
+- "Order intake module is shallow: interface nearly matches the implementation."
+- "Pricing leaks across the seam."
+- "Deepen: one interface, one place to test."
+- "Two adapters justify the seam: HTTP in prod, in-memory in tests."
+
+**Wins bullets** name the gain in glossary terms: *"locality: bugs concentrate in one module"*, *"leverage: one interface, N call sites"*, *"interface shrinks; implementation absorbs the wrappers"*. Don't write *"easier to maintain"* or *"cleaner code"*, because those terms aren't in the glossary and don't earn their place.
+
+No hedging, no throat-clearing, no "it's worth noting that…". If a sentence could be a bullet, make it a bullet. If a bullet could be cut, cut it. If a term isn't in the `/codebase-design` glossary, reach for one that is before inventing a new one.
diff --git a/skills/improve-codebase-architecture/SKILL.md b/skills/improve-codebase-architecture/SKILL.md
new file mode 100644
index 0000000..a590073
--- /dev/null
+++ b/skills/improve-codebase-architecture/SKILL.md
@@ -0,0 +1,71 @@
+---
+name: improve-codebase-architecture
+description: Scan a codebase for deepening opportunities, present them as a visual HTML report, then grill through whichever one you pick.
+disable-model-invocation: false
+---
+
+# Improve Codebase Architecture
+
+Surface architectural friction and propose **deepening opportunities**: refactors that turn shallow modules into deep ones. The aim is testability and AI-navigability.
+
+This command is _informed_ by the project's domain model and built on a shared design vocabulary:
+
+- Call the Skill tool with "codebase-design" for the architecture vocabulary (**module**, **interface**, **depth**, **seam**, **adapter**, **leverage**, **locality**) and its principles (the deletion test, "the interface is the test surface", "one adapter = hypothetical seam, two = real"). Use these terms exactly in every suggestion, and don't drift into "component," "service," "API," or "boundary."
+- The domain language in `CONTEXT.md` gives names to good seams; ADRs in `docs/adr/` record decisions this command should not re-litigate.
+
+## Process
+
+### 1. Explore
+
+**Scope before you scan: YAGNI.** Deepening a module pays off by making future changes to it easier, so put extra weight on the parts of the codebase that have recently changed. Decide *where* to look before you look:
+
+- If the user named a direction (a module, a subsystem, a pain point), take it, and skip the inference below.
+- Otherwise, walk back a good stretch of the commit history (`git log --oneline`) to find the codebase's hot spots, the files and areas that keep coming up, and let those paths pull your attention first. If the changes are scattered with no clear hot spot, widen the net.
+
+Read the project's domain glossary (`CONTEXT.md`) and any ADRs in the area you're touching first.
+
+Then spawn a sub-agent to walk the codebase. Don't follow rigid heuristics; explore organically and note where you experience friction:
+
+- Where does understanding one concept require bouncing between many small modules?
+- Where are modules **shallow**, with an interface nearly as complex as the implementation?
+- Where have pure functions been extracted just for testability, but the real bugs hide in how they're called (no **locality**)?
+- Where do tightly-coupled modules leak across their seams?
+- Which parts of the codebase are untested, or hard to test through their current interface?
+
+Apply the **deletion test** to anything you suspect is shallow: would deleting it concentrate complexity, or just move it? A "yes, concentrates" is the signal you want.
+
+### 2. Present candidates as an HTML report
+
+Write a self-contained HTML file to the OS temp directory so nothing lands in the repo. Resolve the temp dir from `$TMPDIR`, falling back to `/tmp` (or `%TEMP%` on Windows), and write to `<tmpdir>/architecture-review-<timestamp>.html` so each run gets a fresh file. Open it for the user (`xdg-open <path>` on Linux, `open <path>` on macOS, `start <path>` on Windows) and tell them the absolute path.
+
+The report uses **Tailwind via CDN** for layout and styling, and **Mermaid via CDN** for diagrams where a graph/flow/sequence reliably communicates the structure. Mix Mermaid with hand-crafted CSS/SVG visuals: use Mermaid when relationships are graph-shaped (call graphs, dependencies, sequences), and hand-built divs/SVG when you want something more editorial (mass diagrams, cross-sections, collapse animations). Each candidate gets a **before/after visualisation**. Be visual.
+
+For each candidate, render a card with:
+
+- **Files**: which files/modules are involved
+- **Problem**: why the current architecture is causing friction
+- **Solution**: plain English description of what would change
+- **Benefits**: explained in terms of locality and leverage, and how tests would improve
+- **Before / After diagram**: side-by-side, custom-drawn, illustrating the shallowness and the deepening
+- **Recommendation strength**: one of `Strong`, `Worth exploring`, `Speculative`, rendered as a badge
+
+End the report with a **Top recommendation** section: which candidate you'd tackle first and why.
+
+**Use CONTEXT.md vocabulary for the domain, and the `/codebase-design` vocabulary for the architecture.** If `CONTEXT.md` defines "Order," talk about "the Order intake module," not "the FooBarHandler," and not "the Order service."
+
+**ADR conflicts**: if a candidate contradicts an existing ADR, only surface it when the friction is real enough to warrant revisiting the ADR. Mark it clearly in the card (e.g. a warning callout: _"contradicts ADR-0007, but worth reopening because…"_). Don't list every theoretical refactor an ADR forbids.
+
+See [HTML-REPORT.md](HTML-REPORT.md) for the full HTML scaffold, diagram patterns, and styling guidance.
+
+Do NOT propose interfaces yet. After the file is written, ask the user: "Which of these would you like to explore?"
+
+### 3. Grilling loop
+
+Once the user picks a candidate, call the Skill tool with "grilling" to walk the decision tree with them: constraints, dependencies, the shape of the deepened module, what sits behind the seam, what tests survive.
+
+Side effects happen inline as decisions crystallize; call the Skill tool with "domain-modeling" to keep the domain model current as you go:
+
+- **Naming a deepened module after a concept not in `CONTEXT.md`?** Add the term to `CONTEXT.md`. Create the file lazily if it doesn't exist.
+- **Sharpening a fuzzy term during the conversation?** Update `CONTEXT.md` right there.
+- **User rejects the candidate with a load-bearing reason?** Offer an ADR, framed as: _"Want me to record this as an ADR so future architecture reviews don't re-suggest it?"_ Only offer when the reason would actually be needed by a future explorer to avoid re-suggesting the same thing; skip ephemeral reasons ("not worth it right now") and self-evident ones.
+- **Want to explore alternative interfaces for the deepened module?** Call the Skill tool with "codebase-design" and use its design-it-twice parallel sub-agent pattern.
diff --git a/skills/improve-codebase-architecture/agents/openai.yaml b/skills/improve-codebase-architecture/agents/openai.yaml
new file mode 100644
index 0000000..5ff703c
--- /dev/null
+++ b/skills/improve-codebase-architecture/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Improve Codebase Architecture"
+  short_description: "Explicitly invoke the Improve Codebase Architecture workflow"
+  default_prompt: "Use $improve-codebase-architecture to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/loop-me/SKILL.md b/skills/loop-me/SKILL.md
new file mode 100644
index 0000000..4766828
--- /dev/null
+++ b/skills/loop-me/SKILL.md
@@ -0,0 +1,32 @@
+---
+name: loop-me
+description: Grill me about specs for the workflows I want to build, within this workspace.
+disable-model-invocation: false
+argument-hint: "A workflow to design, or nothing to go find one"
+---
+
+Run a stateful `/grilling` session whose only output is **workflow** specs. Use the grilling discipline (relentless, a round of questions at a time, a recommended answer attached to each) aimed at the vocabulary and goal below. Create, edit, and delete specs as the grilling resolves things.
+
+## The loop lens
+
+A **loop** is a recurring pattern in the user's life: their career, their week, their morning, a single repeated activity. Picturing a life as loops within loops reveals how predictable its activities really are, which is what makes them worth **delegating**. Use the lens to find loops worth specifying, and propose ones the user hasn't noticed.
+
+A **workflow** is the spec of one loop, made real. You run a workflow on a loop: the loop is its running instantiation. Workflows live in `workflows/*.md` and are the source of truth.
+
+## Vocabulary
+
+A shared language, reached for only when a workflow calls for it: never a checklist. **Mandate nothing structural**: a workflow needs no AI, no checkpoint, and no schedule unless the grilling shows it does.
+
+- **Trigger**: what fires each run, an **event** (a new email, a new issue) or a **schedule** (every morning). Event-triggering is usually the more efficient.
+- **Checkpoint**: a human-in-the-loop point where the user is asked to verify or decide. Some workflows have none and run autonomously; some use no AI at all.
+- **Push right**: defer the checkpoint as far as it will go. Do maximal work before involving the human, so they are asked once, late, with everything prepared.
+- **Brief**: what a checkpoint presents, a tight, decision-ready summary (what was produced, why, and a link down to the asset itself), never the raw output. The user reads a brief, not a draft. Speed of review is imperative.
+
+## Definition of done
+
+A workflow spec is done when an implementer agent could build it without asking a single question. Grill until then; nothing is done while a question remains.
+
+## The workspace
+
+- `workflows/*.md`: one spec per workflow.
+- `NOTES.md`: raw notes on the user's world, the tools they use, the channels they process, and their own terminology for both. When it is empty or thin, interview them about their world before specifying anything. Sharpen fuzzy terms into canonical ones as they surface, and record them here.
diff --git a/skills/loop-me/agents/openai.yaml b/skills/loop-me/agents/openai.yaml
new file mode 100644
index 0000000..5a99454
--- /dev/null
+++ b/skills/loop-me/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Loop Me"
+  short_description: "Explicitly invoke the Loop Me workflow"
+  default_prompt: "Use $loop-me to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/migrate-to-shoehorn/SKILL.md b/skills/migrate-to-shoehorn/SKILL.md
new file mode 100644
index 0000000..ae4f965
--- /dev/null
+++ b/skills/migrate-to-shoehorn/SKILL.md
@@ -0,0 +1,118 @@
+---
+name: migrate-to-shoehorn
+description: Migrate test files from `as` type assertions to @total-typescript/shoehorn. Use when user mentions shoehorn, wants to replace `as` in tests, or needs partial test data.
+---
+
+# Migrate to Shoehorn
+
+## Why shoehorn?
+
+`shoehorn` lets you pass partial data in tests while keeping TypeScript happy. It replaces `as` assertions with type-safe alternatives.
+
+**Test code only.** Never use shoehorn in production code.
+
+Problems with `as` in tests:
+
+- Trained not to use it
+- Must manually specify target type
+- Double-as (`as unknown as Type`) for intentionally wrong data
+
+## Install
+
+```bash
+npm i @total-typescript/shoehorn
+```
+
+## Migration patterns
+
+### Large objects with few needed properties
+
+Before:
+
+```ts
+type Request = {
+  body: { id: string };
+  headers: Record<string, string>;
+  cookies: Record<string, string>;
+  // ...20 more properties
+};
+
+it("gets user by id", () => {
+  // Only care about body.id but must fake entire Request
+  getUser({
+    body: { id: "123" },
+    headers: {},
+    cookies: {},
+    // ...fake all 20 properties
+  });
+});
+```
+
+After:
+
+```ts
+import { fromPartial } from "@total-typescript/shoehorn";
+
+it("gets user by id", () => {
+  getUser(
+    fromPartial({
+      body: { id: "123" },
+    }),
+  );
+});
+```
+
+### `as Type` → `fromPartial()`
+
+Before:
+
+```ts
+getUser({ body: { id: "123" } } as Request);
+```
+
+After:
+
+```ts
+import { fromPartial } from "@total-typescript/shoehorn";
+
+getUser(fromPartial({ body: { id: "123" } }));
+```
+
+### `as unknown as Type` → `fromAny()`
+
+Before:
+
+```ts
+getUser({ body: { id: 123 } } as unknown as Request); // wrong type on purpose
+```
+
+After:
+
+```ts
+import { fromAny } from "@total-typescript/shoehorn";
+
+getUser(fromAny({ body: { id: 123 } }));
+```
+
+## When to use each
+
+| Function        | Use case                                           |
+| --------------- | -------------------------------------------------- |
+| `fromPartial()` | Pass partial data that still type-checks           |
+| `fromAny()`     | Pass intentionally wrong data (keeps autocomplete) |
+| `fromExact()`   | Force full object (swap with fromPartial later)    |
+
+## Workflow
+
+1. **Gather requirements** - ask user:
+   - What test files have `as` assertions causing problems?
+   - Are they dealing with large objects where only some properties matter?
+   - Do they need to pass intentionally wrong data for error testing?
+
+2. **Install and migrate**:
+   - [ ] Install: `npm i @total-typescript/shoehorn`
+   - [ ] Find test files with `as` assertions: `grep -r " as [A-Z]" --include="*.test.ts" --include="*.spec.ts"`
+   - [ ] Replace `as Type` with `fromPartial()`
+   - [ ] Replace `as unknown as Type` with `fromAny()`
+   - [ ] Add imports from `@total-typescript/shoehorn`
+   - [ ] Run type check to verify
diff --git a/skills/migrate-to-shoehorn/agents/openai.yaml b/skills/migrate-to-shoehorn/agents/openai.yaml
new file mode 100644
index 0000000..3bd79ee
--- /dev/null
+++ b/skills/migrate-to-shoehorn/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Migrate to Shoehorn"
+  short_description: "Replace test assertions with shoehorn"
diff --git a/skills/prototype/LOGIC.md b/skills/prototype/LOGIC.md
new file mode 100644
index 0000000..32be86a
--- /dev/null
+++ b/skills/prototype/LOGIC.md
@@ -0,0 +1,67 @@
+# Logic Prototype
+
+A single, self-contained HTML file (a **shareable demo**) that lets anyone drive a state model by clicking buttons. Use this when the question is about **business logic, state transitions, or data shape**: the kind of thing that looks reasonable on paper but only feels wrong once you push it through real cases.
+
+Because it's one file with nothing to install, you can hand it to a non-developer (a designer, a PM, a domain expert) and let them feel the model for themselves. So it speaks their language, not the code's.
+
+## When this is the right shape
+
+- "I'm not sure if this state machine handles the edge case where X then Y."
+- "Does this data model actually let me represent the case where..."
+- "I want to feel out what the API should look like before writing it."
+- Anything where someone wants to **press buttons and watch state change**.
+
+If the question is "what should this look like," this is the wrong branch. Use [UI.md](UI.md).
+
+## Process
+
+### 1. State the question
+
+Before writing code, write down what state model and what question you're prototyping. One paragraph, at the top of the demo (in a visible intro, not just a comment). A logic prototype that answers the wrong question is pure waste, so make the question explicit so it can be checked later, whether the user is watching now or returning to it AFK.
+
+### 2. Isolate the logic in a portable module
+
+Put the actual logic (the bit that's answering the question) in a single `<script>` block written as a small, pure module that could be lifted out and dropped into the real codebase later. The page around it is throwaway; this module isn't.
+
+The right shape depends on the question:
+
+- **A pure reducer**: `(state, action) => state`. Good when actions are discrete events and state is a single value.
+- **A state machine**: explicit states and transitions. Good when "which actions are even legal right now" is part of the question.
+- **A small set of pure functions** over a plain data type. Good when there's no implicit current state, just transformations.
+- **A class or module with a clear method surface** when the logic genuinely owns ongoing internal state.
+
+Pick whichever shape best fits the question being asked, *not* whichever is easiest to wire to a page. Keep it pure: no DOM, no `document`, no button handlers reaching inside it. The page calls into it; nothing flows the other direction. This is what makes the prototype useful past its own lifetime: once the question's answered, the validated reducer / machine / function set lifts into the real module on its own.
+
+### 3. Build the shareable HTML file
+
+One file, plain HTML/CSS/JS: no framework, no bundler, no server, everything inline so it opens by double-click and survives being emailed around. Anyone should be able to run it by opening it.
+
+Write it for a non-developer. Every label is in **domain language**, not code: buttons and state read like the business, not the reducer. Explain in plain words what's happening.
+
+Lay it out with a clean hierarchy, top to bottom:
+
+1. **Title and one-line explanation** of what this demo lets you explore (the question from step 1).
+2. **Current state**: the full relevant state, rendered as a readable panel (labelled fields, not a raw JSON dump), re-rendered after every click so the change is visible. Where it helps a non-developer follow, call out what just changed.
+3. **Free-play buttons**: one button per action, always available, so anyone can poke at the model in any order. Each click dispatches its action and re-renders the state.
+4. **Guided walkthroughs**: a set of **scenarios**, one per tab. Each tab holds a short plain-language description of the scenario (the situation it sets up and what to watch for) and underneath it, the ordered **buttons to press** for that scenario. Each step is a real button: clicking it performs that action and moves to the next step. Starting a walkthrough resets to a known initial state so the scenario runs the same way every time.
+
+Choose scenarios that demonstrate the awkward cases, the ones hard to reason about on paper: the happy path, a tricky edge case, an attempt at something that should be illegal.
+
+Keep it beautiful but restrained: clean typography, generous spacing, one accent colour. No animations, no gimmicks: nothing that competes with the state and the buttons.
+
+### 4. Hand it over
+
+Send them the file, or open it for them. They'll click through the walkthroughs and free-play whenever they get to it; the interesting moments are when they say "wait, that shouldn't be possible" or "huh, I assumed X would be different"; those are the bugs in the _idea_, which is the whole point. If they want new actions or a new scenario, add them. Prototypes evolve.
+
+### 5. Capture the answer and the prototype
+
+Once the prototype has answered its question, capture the answer, then capture the prototype the way the [SKILL](SKILL.md) describes. The logic-specific mapping: the validated reducer / machine / function set lifts into the real module (the decision, absorbed); the HTML shell rides along to the throwaway branch that keeps the prototype as a primary source, and being one self-contained file, it stays trivially re-runnable there.
+
+## Anti-patterns
+
+- **Don't add tests.** A prototype that needs tests is no longer a prototype.
+- **Don't wire it to the real database.** Use in-memory state unless the question is specifically about persistence.
+- **Don't generalise.** No "what if we wanted to support X later." The prototype answers one question.
+- **Don't blur the logic and the page together.** If the pure module references the DOM, `document`, or button handlers, it's no longer liftable. Keep the page as a thin shell over a pure module.
+- **Don't reach for a framework, bundler, or server.** One file the recipient double-clicks; a React app or a dev server defeats "shareable".
+- **Don't ship the HTML shell into production.** The page is optimised for being clicked through by hand. The logic module behind it is the bit worth keeping.
diff --git a/skills/prototype/SKILL.md b/skills/prototype/SKILL.md
new file mode 100644
index 0000000..a004450
--- /dev/null
+++ b/skills/prototype/SKILL.md
@@ -0,0 +1,26 @@
+---
+name: prototype
+description: Build a throwaway prototype to answer a design question. Use when the user wants to sanity-check whether a state model or logic feels right, or explore what a UI should look like.
+---
+
+# Prototype
+
+A prototype is **throwaway code that answers a question**. The question decides the shape.
+
+## Pick a branch
+
+Identify which question is being answered, using the user's prompt, the surrounding code, or by asking if the user is around:
+
+- **"Does this logic / state model feel right?"** → [LOGIC.md](LOGIC.md). Build a single shareable HTML file (free-play buttons plus tabbed guided walkthroughs) that pushes the state machine through cases that are hard to reason about on paper, and that a non-developer can drive.
+- **"What should this look like?"** → [UI.md](UI.md). Generate several radically different UI variations on a single route, switchable via a URL search param and a floating bottom bar.
+
+The two branches produce very different artifacts, so getting this wrong wastes the whole prototype. If the question is genuinely ambiguous and the user isn't reachable, default to whichever branch better matches the surrounding code (a backend module → logic; a page or component → UI) and state the assumption at the top of the prototype.
+
+## Rules that apply to both
+
+1. **Throwaway from day one, and clearly marked as such.** Locate the prototype code close to where it will actually be used (next to the module or page it's prototyping for) so context is obvious, but name it so a casual reader can see it's a prototype, not production. For throwaway UI routes, obey whatever routing convention the project already uses; don't invent a new top-level structure.
+2. **Trivial to run.** A UI prototype starts from one command in the project's task runner: `pnpm <name>`, `python <path>`, `bun <path>`, etc. A logic demo is a single HTML file the user double-clicks. Either way, no thinking required to start it.
+3. **No persistence by default.** State lives in memory. Persistence is the thing the prototype is _checking_, not something it should depend on. If the question explicitly involves a database, hit a scratch DB or a local file with a clear "PROTOTYPE, wipe me" name.
+4. **Skip the polish.** No tests, no error handling beyond what makes the prototype _runnable_, no abstractions. The point is to learn something fast.
+5. **Surface the state.** After every action (logic) or on every variant switch (UI), print or render the full relevant state so the user can see what changed.
+6. **Capture it when done.** Fold any validated decision into the real code, then capture the prototype itself as a **primary source**: commit it to a throwaway branch, out of main, and leave a context pointer to that branch on the implementation issue. Capture the answer too (the verdict and the question it settled) in the issue or a commit. The main branch keeps only the validated decision.
diff --git a/skills/prototype/UI.md b/skills/prototype/UI.md
new file mode 100644
index 0000000..3977951
--- /dev/null
+++ b/skills/prototype/UI.md
@@ -0,0 +1,112 @@
+# UI Prototype
+
+Generate **several radically different UI variations** on a single route, switchable from a floating bottom bar. The user flips between variants in the browser, picks one (or steals bits from each), then throws the rest away.
+
+If the question is about logic/state rather than what something looks like, this is the wrong branch. Use [LOGIC.md](LOGIC.md).
+
+## When this is the right shape
+
+- "What should this page look like?"
+- "I want to see a few options for this dashboard before committing."
+- "Try a different layout for the settings screen."
+- Any time the user would otherwise spend a day picking between three vague mockups in their head.
+
+## Two sub-shapes: strongly prefer sub-shape A
+
+A UI prototype is much easier to judge when it's **butting up against the rest of the app**: real header, real sidebar, real data, real density. A throwaway route on its own is a vacuum: every variant looks fine in isolation. Default to sub-shape A whenever there's a plausible existing page to host the variants. Only reach for sub-shape B if the prototype genuinely has no nearby home.
+
+### Sub-shape A: adjustment to an existing page (preferred)
+
+The route already exists. Variants are rendered **on the same route**, gated by a `?variant=` URL search param. The existing data fetching, params, and auth all stay. Only the rendering swaps. This is the default; pick it unless there's a specific reason not to.
+
+If the prototype is for something that doesn't yet have a page but *would naturally live inside one* (a new section of the dashboard, a new card on the settings screen, a new step in an existing flow), it's still sub-shape A. Mount the variants inside the host page.
+
+### Sub-shape B: a new page (last resort)
+
+Only use this when the thing being prototyped genuinely has no existing page to live inside (e.g. an entirely new top-level surface, or a flow that can't be embedded anywhere sensible).
+
+Create a **throwaway route** following whatever routing convention the project already uses. Don't invent a new top-level structure. Name it so it's obviously a prototype (e.g. include the word `prototype` in the path or filename). Same `?variant=` pattern.
+
+Before committing to sub-shape B, sanity-check: is there really no existing page this could be embedded in? An empty route hides design problems that a populated one would expose.
+
+In both sub-shapes the floating bottom bar is identical.
+
+## Process
+
+### 1. State the question and pick N
+
+Default to **3 variants**. More than 5 stops being radically different and starts being noise, so cap there.
+
+Write down the plan in one line, in the prototype's location or a top-of-file comment:
+
+> "Three variants of the settings page, switchable via `?variant=`, on the existing `/settings` route."
+
+This works whether the user is here to push back or not.
+
+### 2. Generate radically different variants
+
+Draft each variant. Hold each one to:
+
+- The page's purpose and the data it has access to.
+- The project's component library / styling system (TailwindCSS, shadcn, MUI, plain CSS, whatever).
+- A clear exported component name, e.g. `VariantA`, `VariantB`, `VariantC`.
+
+Variants must be **structurally different**: different layout, different information hierarchy, different primary affordance, not just different colours. Three slightly-tweaked card grids isn't a UI prototype, it's wallpaper. If two drafts come out too similar, redo one with explicit "do not use a card grid" guidance.
+
+### 3. Wire them together
+
+Create a single switcher component on the route:
+
+```tsx
+// pseudo-code, adapt to the project's framework
+const variant = searchParams.get('variant') ?? 'A';
+return (
+  <>
+    {variant === 'A' && <VariantA {...data} />}
+    {variant === 'B' && <VariantB {...data} />}
+    {variant === 'C' && <VariantC {...data} />}
+    <PrototypeSwitcher variants={['A','B','C']} current={variant} />
+  </>
+);
+```
+
+For sub-shape A (existing page): keep all the existing data fetching above the switcher; only the rendered subtree changes per variant.
+
+For sub-shape B (new page): the throwaway route under `/prototype/<name>` mounts the same switcher.
+
+### 4. Build the floating switcher
+
+A small fixed-position bar at the bottom-centre of the screen with three pieces:
+
+- **Left arrow**: cycles to the previous variant (wraps around).
+- **Variant label**: shows the current variant key and, if the variant exports a name, that name too. e.g. `B (Sidebar layout)`.
+- **Right arrow**: cycles forward (wraps around).
+
+Behaviour:
+
+- Clicking an arrow updates the URL search param (use the framework's router, e.g. `router.replace` on Next, `navigate` on React Router, etc) so the variant is shareable and reload-stable.
+- Keyboard: `←` and `→` arrow keys also cycle. Don't intercept arrow keys when an `<input>`, `<textarea>`, or `[contenteditable]` is focused.
+- Visually distinct from the page (e.g. high-contrast pill, subtle shadow) so it's obviously not part of the design being evaluated.
+- Hidden in production builds: gate on `process.env.NODE_ENV !== 'production'` or an equivalent check, so a stray prototype merge can't ship the bar to users.
+
+Put the switcher in a single shared component so both sub-shapes can reuse it. Locate it wherever shared UI lives in the project.
+
+### 5. Hand it over
+
+Surface the URL (and the `?variant=` keys). The user will flip through whenever they get to it. The interesting feedback is usually **"I want the header from B with the sidebar from C"**, which is the actual design they want.
+
+### 6. Capture the answer and clean up
+
+Once a variant has won, capture the answer (which variant and why), then capture the prototype the way the [SKILL](SKILL.md) describes. Fold the winner into the real code and move the rest onto the throwaway branch, not into main:
+
+- **Sub-shape A**: fold the winner into the existing page; drop the losing variants and the switcher from main.
+- **Sub-shape B**: promote the winning variant to a real route; drop the throwaway route and the switcher from main.
+
+The full set of variants is the primary source, so it lands on the throwaway branch, not the bin, since variant components and the switcher left in the main branch rot fast and confuse the next reader.
+
+## Anti-patterns
+
+- **Variants that differ only in colour or copy.** That's a tweak, not a prototype. Real variants disagree about structure.
+- **Sharing too much code between variants.** A shared `<Header>` is fine; a shared `<Layout>` defeats the point. Each variant should be free to throw out the layout.
+- **Wiring variants to real mutations.** Read-only prototypes are fine. If a variant needs to mutate, point it at a stub: the question is "what should this look like", not "does the backend work".
+- **Promoting the prototype directly to production.** The variant code was written under prototype constraints (no tests, minimal error handling). Rewrite it properly when you fold it in.
diff --git a/skills/prototype/agents/openai.yaml b/skills/prototype/agents/openai.yaml
new file mode 100644
index 0000000..1618b14
--- /dev/null
+++ b/skills/prototype/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Prototype"
+  short_description: "Prototype to answer a design question"
diff --git a/skills/research/SKILL.md b/skills/research/SKILL.md
new file mode 100644
index 0000000..fecee97
--- /dev/null
+++ b/skills/research/SKILL.md
@@ -0,0 +1,12 @@
+---
+name: research
+description: Investigate a question against high-trust primary sources and capture the findings as a Markdown file in the repo. Use when the user wants a topic researched, docs or API facts gathered, or reading legwork delegated to a background agent.
+---
+
+Spin up a **background agent** to do the research, so you keep working while it reads.
+
+Its job:
+
+1. Investigate the question against **primary sources** (official docs, source code, specs, first-party APIs), not a secondary write-up of them. Follow every claim back to the source that owns it.
+2. Write the findings to a single Markdown file, citing each claim's source.
+3. Save it where the repo already keeps such notes; match the existing convention, and if there is none, put it somewhere sensible and say where.
diff --git a/skills/research/agents/openai.yaml b/skills/research/agents/openai.yaml
new file mode 100644
index 0000000..e18b96c
--- /dev/null
+++ b/skills/research/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Research"
+  short_description: "Research from high-trust sources"
diff --git a/skills/resolving-merge-conflicts/SKILL.md b/skills/resolving-merge-conflicts/SKILL.md
new file mode 100644
index 0000000..bfb7e56
--- /dev/null
+++ b/skills/resolving-merge-conflicts/SKILL.md
@@ -0,0 +1,14 @@
+---
+name: resolving-merge-conflicts
+description: "Use when you need to resolve an in-progress git merge/rebase conflict."
+---
+
+1. **See the current state** of the merge/rebase. Check git history, and the conflicting files.
+
+2. **Find the primary sources** for each conflict. Understand deeply why each change was made, and what the original intent was. Read the commit messages, check the PRs, check original issues/tickets.
+
+3. **Resolve each hunk.** Preserve both intents where possible. Where incompatible, pick the one matching the merge's stated goal and note the trade-off. Do **not** invent new behaviour. Always resolve; never `--abort`.
+
+4. Discover the project's **automated checks** and run them, typically typecheck, then tests, then format. Fix anything the merge broke.
+
+5. **Finish the merge/rebase.** Stage everything and commit. If rebasing, continue the rebase process until all commits are rebased.
diff --git a/skills/resolving-merge-conflicts/agents/openai.yaml b/skills/resolving-merge-conflicts/agents/openai.yaml
new file mode 100644
index 0000000..331ffb9
--- /dev/null
+++ b/skills/resolving-merge-conflicts/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Resolving Merge Conflicts"
+  short_description: "Resolve merge and rebase conflicts"
diff --git a/skills/retro/SKILL.md b/skills/retro/SKILL.md
new file mode 100644
index 0000000..41b7d82
--- /dev/null
+++ b/skills/retro/SKILL.md
@@ -0,0 +1,44 @@
+---
+name: retro
+description: "Conduct a retrospective on a coding session."
+disable-model-invocation: false
+---
+
+The user has asked for a **retrospective**. You are suggesting improvements to the coding agent's **environment** to improve future runs.
+
+## Steps
+
+1. Call the Skill tool with `writing-for-agents` for the writing style guide.
+
+2. Read the primary sources for the session the user specifies. This may mean searching through session logs on this machine. If the user doesn't specify a session, default to the current one.
+
+3. Look for candidates for improvement in these categories.
+
+- **Navigation**: how easy was it for the agent to find the right files? Are there hidden dependencies between files? Would a **navigation pointer** make it easier? _Use when_ the session took a long time to find a piece of information.
+- **Automated checks**: are there automated checks that could catch errors the agent made? Linting, typing, tests, filesystem linters? _Use when_ the agent made a mistake that could have been caught by an automated check.
+- **Coding standards**: should the **reviewer agent** be given a new rule to enforce? Should an existing rule be removed or clarified? _Use when_ the reviewer agent failed to catch a mistake.
+- **Global AGENTS.md**: are there any steering instructions that should be moved to coding standards (or automated checks) instead? _Use when_ the AGENTS.md file is particularly large - in the repo OR the user's global scope.
+- **Tool economy**: did the agent make expensive tool calls that could be streamlined? Is there any custom tooling (CLI's, MCP's) that is particularly token-inefficient? _Use when_ the agent made an expensive tool call.
+- **No-ops**: look for instructions in steering files that don't modify the agent's behavior. _Use when_ the steering files are large and unwieldy.
+- **Information access**: look for opportunities to increase the agent's access to information. Teeing dev server logs, readonly access to third-party services. _Use when_ a crucial piece of information was not available to the agent.
+
+4. Present these candidates to the user, in order of severity.
+
+## Reference
+
+### Implementation vs Review
+
+Remember that all work goes through two stages: implementation and review. The implementation agent has the most **context pressure**. They are responsible for exploration, writing code, and debugging failures.
+
+The review agent has the least context pressure - it receives a diff, so no exploration needed. It often does not need to write code or debug.
+
+This means that the review agent should be responsible for imposing coding standards, not the implementation agent.
+
+### Files
+
+You have access to several files in the repo:
+
+- `CLAUDE.md`/`AGENTS.md`: these files are pushed to the context window of any agent working in this repo. They should be used incredibly sparingly, usually only for **navigation pointers** to other files.
+- `CODING_STANDARDS.md`: this file is read during review, not implementation. Add **navigation pointers** to docs folders if the standards file gets more than 1,000 lines long.
+- Docs: use docs as references files, pointed to by other files. Look for existing docs before writing new ones.
+- Skills: use skills for docs (since their description goes into the agent's context window), or for user-invoked commands. Follow the advice in the `writing-for-agents` skill.
diff --git a/skills/retro/agents/openai.yaml b/skills/retro/agents/openai.yaml
new file mode 100644
index 0000000..0ced201
--- /dev/null
+++ b/skills/retro/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Retro"
+  short_description: "Explicitly invoke the Retro workflow"
+  default_prompt: "Use $retro to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/scaffold-exercises/SKILL.md b/skills/scaffold-exercises/SKILL.md
new file mode 100644
index 0000000..d87df28
--- /dev/null
+++ b/skills/scaffold-exercises/SKILL.md
@@ -0,0 +1,106 @@
+---
+name: scaffold-exercises
+description: Create exercise directory structures with sections, problems, solutions, and explainers that pass linting. Use when user wants to scaffold exercises, create exercise stubs, or set up a new course section.
+---
+
+# Scaffold Exercises
+
+Create exercise directory structures that pass `pnpm ai-hero-cli internal lint`, then commit with `git commit`.
+
+## Directory naming
+
+- **Sections**: `XX-section-name/` inside `exercises/` (e.g., `01-retrieval-skill-building`)
+- **Exercises**: `XX.YY-exercise-name/` inside a section (e.g., `01.03-retrieval-with-bm25`)
+- Section number = `XX`, exercise number = `XX.YY`
+- Names are dash-case (lowercase, hyphens)
+
+## Exercise variants
+
+Each exercise needs at least one of these subfolders:
+
+- `problem/` - student workspace with TODOs
+- `solution/` - reference implementation
+- `explainer/` - conceptual material, no TODOs
+
+When stubbing, default to `explainer/` unless the plan specifies otherwise.
+
+## Required files
+
+Each subfolder (`problem/`, `solution/`, `explainer/`) needs a `readme.md` that:
+
+- Is **not empty** (must have real content, even a single title line works)
+- Has no broken links
+
+When stubbing, create a minimal readme with a title and a description:
+
+```md
+# Exercise Title
+
+Description here
+```
+
+If the subfolder has code, it also needs a `main.ts` (>1 line). But for stubs, a readme-only exercise is fine.
+
+## Workflow
+
+1. **Parse the plan** - extract section names, exercise names, and variant types
+2. **Create directories** - `mkdir -p` for each path
+3. **Create stub readmes** - one `readme.md` per variant folder with a title
+4. **Run lint** - `pnpm ai-hero-cli internal lint` to validate
+5. **Fix any errors** - iterate until lint passes
+
+## Lint rules summary
+
+The linter (`pnpm ai-hero-cli internal lint`) checks:
+
+- Each exercise has subfolders (`problem/`, `solution/`, `explainer/`)
+- At least one of `problem/`, `explainer/`, or `explainer.1/` exists
+- `readme.md` exists and is non-empty in the primary subfolder
+- No `.gitkeep` files
+- No `speaker-notes.md` files
+- No broken links in readmes
+- No `pnpm run exercise` commands in readmes
+- `main.ts` required per subfolder unless it's readme-only
+
+## Moving/renaming exercises
+
+When renumbering or moving exercises:
+
+1. Use `git mv` (not `mv`) to rename directories - preserves git history
+2. Update the numeric prefix to maintain order
+3. Re-run lint after moves
+
+Example:
+
+```bash
+git mv exercises/01-retrieval/01.03-embeddings exercises/01-retrieval/01.04-embeddings
+```
+
+## Example: stubbing from a plan
+
+Given a plan like:
+
+```
+Section 05: Memory Skill Building
+- 05.01 Introduction to Memory
+- 05.02 Short-term Memory (explainer + problem + solution)
+- 05.03 Long-term Memory
+```
+
+Create:
+
+```bash
+mkdir -p exercises/05-memory-skill-building/05.01-introduction-to-memory/explainer
+mkdir -p exercises/05-memory-skill-building/05.02-short-term-memory/{explainer,problem,solution}
+mkdir -p exercises/05-memory-skill-building/05.03-long-term-memory/explainer
+```
+
+Then create readme stubs:
+
+```
+exercises/05-memory-skill-building/05.01-introduction-to-memory/explainer/readme.md -> "# Introduction to Memory"
+exercises/05-memory-skill-building/05.02-short-term-memory/explainer/readme.md -> "# Short-term Memory"
+exercises/05-memory-skill-building/05.02-short-term-memory/problem/readme.md -> "# Short-term Memory"
+exercises/05-memory-skill-building/05.02-short-term-memory/solution/readme.md -> "# Short-term Memory"
+exercises/05-memory-skill-building/05.03-long-term-memory/explainer/readme.md -> "# Long-term Memory"
+```
diff --git a/skills/scaffold-exercises/agents/openai.yaml b/skills/scaffold-exercises/agents/openai.yaml
new file mode 100644
index 0000000..963723a
--- /dev/null
+++ b/skills/scaffold-exercises/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Scaffold Exercises"
+  short_description: "Scaffold lint-ready course exercises"
diff --git a/skills/setup-matt-pocock-skills/SKILL.md b/skills/setup-matt-pocock-skills/SKILL.md
new file mode 100644
index 0000000..49416bf
--- /dev/null
+++ b/skills/setup-matt-pocock-skills/SKILL.md
@@ -0,0 +1,116 @@
+---
+name: setup-matt-pocock-skills
+description: "Configure this repo for the engineering skills: set up its issue tracker, triage label vocabulary, and domain doc layout. Run once before first use of the other engineering skills."
+disable-model-invocation: false
+---
+
+# Setup Matt Pocock's Skills
+
+Scaffold the per-repo configuration that the engineering skills assume:
+
+- **Issue tracker**: where issues live (GitHub by default; local markdown is also supported out of the box)
+- **Triage labels**: the strings used for the five canonical triage roles
+- **Domain docs**: where `CONTEXT.md` and ADRs live, and the consumer rules for reading them
+
+This is a prompt-driven skill, not a deterministic script. Explore, present what you found, confirm with the user, then write.
+
+## Process
+
+### 1. Explore
+
+Look at the current repo to understand its starting state. Read whatever exists; don't assume:
+
+- `git remote -v` and `.git/config`: is this a GitHub repo? Which one?
+- `AGENTS.md` and `CLAUDE.md` at the repo root: does either exist? Is there already an `## Agent skills` section in either?
+- `CONTEXT.md` and `CONTEXT-MAP.md` at the repo root
+- `docs/adr/` and any `src/*/docs/adr/` directories
+- `docs/agents/`: does this skill's prior output already exist?
+- `.scratch/`: a sign that a local-markdown issue tracker convention is already in use
+- Is the `triage` skill installed? (a `triage` skill folder alongside this one, or `triage` in your available skills.) This decides whether Section B runs at all.
+- Monorepo signals: a `pnpm-workspace.yaml`, a `workspaces` field in `package.json`, or a populated `packages/*` with its own `src/`. These are present only in a genuinely large multi-package repo; their absence means single-context, which is almost every repo.
+
+### 2. Present findings and ask
+
+Summarise what's present and what's missing. Then take the sections in order. One section, one answer, then the next.
+
+Lead each section with the recommended answer so the user can accept it in a word. Give a one-line explainer only when the choice genuinely branches; skip the section entirely when exploration already settled it (Section B when `triage` isn't installed, Section C when there's no monorepo).
+
+**Section A: Issue tracker.**
+
+> Explainer: The "issue tracker" is where issues live for this repo. Skills like `to-tickets`, `triage`, and `to-spec` read from and write to it. They need to know whether to call `gh issue create`, write a markdown file under `.scratch/`, or follow some other workflow you describe. Pick the place you actually track work for this repo.
+
+Default posture: these skills were designed for GitHub. If a `git remote` points at GitHub, propose that. If a `git remote` points at GitLab (`gitlab.com` or a self-hosted host), propose GitLab. Otherwise (or if the user prefers), offer:
+
+- **GitHub**: issues live in the repo's GitHub Issues (uses the `gh` CLI)
+- **GitLab**: issues live in the repo's GitLab Issues (uses the [`glab`](https://gitlab.com/gitlab-org/cli) CLI)
+- **Local markdown**: issues live as files under `.scratch/<feature>/` in this repo (good for solo projects or repos without a remote)
+- **Other** (Jira, Linear, etc.): ask the user to describe the workflow in one paragraph; the skill will record it as freeform prose
+
+Record the choice in `docs/agents/issue-tracker.md`. The GitHub and GitLab templates carry a "PRs as a request surface" flag, defaulted **off**. Leave it off and don't raise it: a user who wants external PRs in the triage queue can flip the flag in the file later.
+
+**Section B: Triage label vocabulary.** Skip this section entirely if the `triage` skill isn't installed (exploration told you), since an uninstalled skill needs no labels.
+
+If it is installed, ask exactly one question:
+
+> Do you want to keep the default triage labels? (recommended: **yes**)
+
+The defaults are the five canonical roles, each label string equal to its name: `needs-triage`, `needs-info`, `ready-for-agent`, `ready-for-human`, `wontfix`. On **yes**, write them as-is. Only if the user says no, usually because their tracker already uses other names (e.g. `bug:triage` for `needs-triage`), collect the overrides so `triage` applies existing labels instead of creating duplicates.
+
+**Section C: Domain docs.** Default to **single-context** (one `CONTEXT.md` + `docs/adr/` at the repo root). This fits almost every repo; write it without asking.
+
+Offer **multi-context** (a root `CONTEXT-MAP.md` pointing to per-context `CONTEXT.md` files) only when exploration found monorepo signals. Then confirm which layout they want.
+
+### 3. Confirm and edit
+
+Show the user a draft of:
+
+- The `## Agent skills` block to add to whichever of `CLAUDE.md` / `AGENTS.md` is being edited (see step 4 for selection rules)
+- The contents of `docs/agents/issue-tracker.md`, `docs/agents/domain.md`, and `docs/agents/triage-labels.md` (the last only when `triage` is installed)
+
+Let them edit before writing.
+
+### 4. Write
+
+**Pick the file to edit:**
+
+- If `CLAUDE.md` exists, edit it.
+- Else if `AGENTS.md` exists, edit it.
+- If neither exists, ask the user which one to create; don't pick for them.
+
+Never create `AGENTS.md` when `CLAUDE.md` already exists (or vice versa); always edit the one that's already there.
+
+If an `## Agent skills` block already exists in the chosen file, update its contents in-place rather than appending a duplicate. Don't overwrite user edits to the surrounding sections.
+
+The block:
+
+```markdown
+## Agent skills
+
+### Issue tracker
+
+[one-line summary of where issues are tracked]. See `docs/agents/issue-tracker.md`.
+
+### Triage labels
+
+[one-line summary of the label vocabulary]. See `docs/agents/triage-labels.md`.
+
+### Domain docs
+
+[one-line summary of layout: "single-context" or "multi-context"]. See `docs/agents/domain.md`.
+```
+
+Include the `### Triage labels` sub-block, and write `docs/agents/triage-labels.md`, only when `triage` is installed and Section B ran. When it isn't, both are omitted.
+
+Then write the docs files using the seed templates in this skill folder as a starting point:
+
+- [issue-tracker-github.md](./issue-tracker-github.md): GitHub issue tracker
+- [issue-tracker-gitlab.md](./issue-tracker-gitlab.md): GitLab issue tracker
+- [issue-tracker-local.md](./issue-tracker-local.md): local-markdown issue tracker
+- [triage-labels.md](./triage-labels.md): label mapping (only if `triage` is installed)
+- [domain.md](./domain.md): domain doc consumer rules + layout
+
+For "other" issue trackers, write `docs/agents/issue-tracker.md` from scratch using the user's description.
+
+### 5. Done
+
+Tell the user the setup is complete and which engineering skills will now read from these files. Mention they can edit `docs/agents/*.md` directly later; re-running this skill is only necessary if they want to switch issue trackers or restart from scratch.
diff --git a/skills/setup-matt-pocock-skills/agents/openai.yaml b/skills/setup-matt-pocock-skills/agents/openai.yaml
new file mode 100644
index 0000000..e5da2ab
--- /dev/null
+++ b/skills/setup-matt-pocock-skills/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Setup Matt Pocock Skills"
+  short_description: "Explicitly invoke the Setup Matt Pocock Skills workflow"
+  default_prompt: "Use $setup-matt-pocock-skills to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/setup-matt-pocock-skills/domain.md b/skills/setup-matt-pocock-skills/domain.md
new file mode 100644
index 0000000..3524904
--- /dev/null
+++ b/skills/setup-matt-pocock-skills/domain.md
@@ -0,0 +1,51 @@
+# Domain Docs
+
+How the engineering skills should consume this repo's domain documentation when exploring the codebase.
+
+## Before exploring, read these
+
+- **`CONTEXT.md`** at the repo root, or
+- **`CONTEXT-MAP.md`** at the repo root if it exists: it points at one `CONTEXT.md` per context. Read each one relevant to the topic.
+- **`docs/adr/`**: read ADRs that touch the area you're about to work in. In multi-context repos, also check `src/<context>/docs/adr/` for context-scoped decisions.
+
+If any of these files don't exist, **proceed silently**. Don't flag their absence; don't suggest creating them upfront. The `/domain-modeling` skill (reached via `/grill-with-docs` and `/improve-codebase-architecture`) creates them lazily when terms or decisions actually get resolved.
+
+## File structure
+
+Single-context repo (most repos):
+
+```
+/
+├── CONTEXT.md
+├── docs/adr/
+│   ├── 0001-event-sourced-orders.md
+│   └── 0002-postgres-for-write-model.md
+└── src/
+```
+
+Multi-context repo (presence of `CONTEXT-MAP.md` at the root):
+
+```
+/
+├── CONTEXT-MAP.md
+├── docs/adr/                          ← system-wide decisions
+└── src/
+    ├── ordering/
+    │   ├── CONTEXT.md
+    │   └── docs/adr/                  ← context-specific decisions
+    └── billing/
+        ├── CONTEXT.md
+        └── docs/adr/
+```
+
+## Use the glossary's vocabulary
+
+When your output names a domain concept (in an issue title, a refactor proposal, a hypothesis, a test name), use the term as defined in `CONTEXT.md`. Don't drift to synonyms the glossary explicitly avoids.
+
+If the concept you need isn't in the glossary yet, that's a signal: either you're inventing language the project doesn't use (reconsider) or there's a real gap (note it for `/domain-modeling`).
+
+## Flag ADR conflicts
+
+If your output contradicts an existing ADR, surface it explicitly rather than silently overriding:
+
+> _Contradicts ADR-0007 (event-sourced orders), but worth reopening because…_
diff --git a/skills/setup-matt-pocock-skills/issue-tracker-github.md b/skills/setup-matt-pocock-skills/issue-tracker-github.md
new file mode 100644
index 0000000..b258aeb
--- /dev/null
+++ b/skills/setup-matt-pocock-skills/issue-tracker-github.md
@@ -0,0 +1,45 @@
+# Issue tracker: GitHub
+
+Issues and specs for this repo live as GitHub issues. Use the `gh` CLI for all operations.
+
+## Conventions
+
+- **Create an issue**: `gh issue create --title "..." --body "..."`. Use a heredoc for multi-line bodies.
+- **Read an issue**: `gh issue view <number> --comments`, filtering comments by `jq` and also fetching labels.
+- **List issues**: `gh issue list --state open --json number,title,body,labels,comments --jq '[.[] | {number, title, body, labels: [.labels[].name], comments: [.comments[].body]}]'` with appropriate `--label` and `--state` filters.
+- **Comment on an issue**: `gh issue comment <number> --body "..."`
+- **Apply / remove labels**: `gh issue edit <number> --add-label "..."` / `--remove-label "..."`
+- **Close**: `gh issue close <number> --comment "..."`
+
+Infer the repo from `git remote -v`; `gh` does this automatically when run inside a clone.
+
+## Pull requests as a triage surface
+
+**PRs as a request surface: no.** _(Set to `yes` if this repo treats external PRs as feature requests; `/triage` reads this flag.)_
+
+When set to `yes`, PRs run through the same labels and states as issues, using the `gh pr` equivalents:
+
+- **Read a PR**: `gh pr view <number> --comments` and `gh pr diff <number>` for the diff.
+- **List external PRs for triage**: `gh pr list --state open --json number,title,body,labels,author,authorAssociation,comments` then keep only `authorAssociation` of `CONTRIBUTOR`, `FIRST_TIME_CONTRIBUTOR`, or `NONE` (drop `OWNER`/`MEMBER`/`COLLABORATOR`).
+- **Comment / label / close**: `gh pr comment`, `gh pr edit --add-label`/`--remove-label`, `gh pr close`.
+
+GitHub shares one number space across issues and PRs, so a bare `#42` may be either: resolve with `gh pr view 42` and fall back to `gh issue view 42`.
+
+## When a skill says "publish to the issue tracker"
+
+Create a GitHub issue.
+
+## When a skill says "fetch the relevant ticket"
+
+Run `gh issue view <number> --comments`.
+
+## Wayfinding operations
+
+Used by `/wayfinder`. The **map** is a single issue with **child** issues as tickets.
+
+- **Map**: a single issue labelled `wayfinder:map`, holding the Notes / Decisions-so-far / Fog body. `gh issue create --label wayfinder:map`.
+- **Child ticket**: an issue linked to the map as a GitHub sub-issue (`gh api` on the sub-issues endpoint). Where sub-issues aren't enabled, add the child to a task list in the map body and put `Part of #<map>` at the top of the child body. Labels: `wayfinder:<type>` (`research`/`prototype`/`grilling`/`task`). Once claimed, the ticket is assigned to the driving dev.
+- **Blocking**: GitHub's **native issue dependencies**, the canonical, UI-visible representation. Add an edge with `gh api --method POST repos/<owner>/<repo>/issues/<child>/dependencies/blocked_by -F issue_id=<blocker-db-id>`, where `<blocker-db-id>` is the blocker's numeric **database id** (`gh api repos/<owner>/<repo>/issues/<n> --jq .id`, _not_ the `#number` or `node_id`). GitHub reports `issue_dependencies_summary.blocked_by` (open blockers only, the live gate). Where dependencies aren't available, fall back to a `Blocked by: #<n>, #<n>` line at the top of the child body. A ticket is unblocked when every blocker is closed.
+- **Frontier query**: list the map's open children (`gh issue list --state open`, scoped to the map's sub-issues / task list), drop any with an open blocker (`issue_dependencies_summary.blocked_by > 0`, or an open issue in the `Blocked by` line) or an assignee; first in map order wins.
+- **Claim**: `gh issue edit <n> --add-assignee @me`, the session's first write.
+- **Resolve**: `gh issue comment <n> --body "<answer>"`, then `gh issue close <n>`, then append a context pointer (gist + link) to the map's Decisions-so-far.
diff --git a/skills/setup-matt-pocock-skills/issue-tracker-gitlab.md b/skills/setup-matt-pocock-skills/issue-tracker-gitlab.md
new file mode 100644
index 0000000..251035a
--- /dev/null
+++ b/skills/setup-matt-pocock-skills/issue-tracker-gitlab.md
@@ -0,0 +1,46 @@
+# Issue tracker: GitLab
+
+Issues and specs for this repo live as GitLab issues. Use the [`glab`](https://gitlab.com/gitlab-org/cli) CLI for all operations.
+
+## Conventions
+
+- **Create an issue**: `glab issue create --title "..." --description "..."`. Use a heredoc for multi-line descriptions. Pass `--description -` to open an editor.
+- **Read an issue**: `glab issue view <number> --comments`. Use `-F json` for machine-readable output.
+- **List issues**: `glab issue list -F json` with appropriate `--label` filters.
+- **Comment on an issue**: `glab issue note <number> --message "..."`. GitLab calls comments "notes".
+- **Apply / remove labels**: `glab issue update <number> --label "..."` / `--unlabel "..."`. Multiple labels can be comma-separated or by repeating the flag.
+- **Close**: `glab issue close <number>`. `glab issue close` does not accept a closing comment, so post the explanation first with `glab issue note <number> --message "..."`, then close.
+- **Merge requests**: GitLab calls PRs "merge requests". Use `glab mr create`, `glab mr view`, `glab mr note`, etc., the same shape as `gh pr ...` with `mr` in place of `pr` and `note`/`--message` in place of `comment`/`--body`.
+
+Infer the repo from `git remote -v`; `glab` does this automatically when run inside a clone.
+
+## Merge requests as a triage surface
+
+**MRs as a request surface: no.** _(Set to `yes` if this repo treats external merge requests as feature requests; `/triage` reads this flag.)_
+
+When set to `yes`, MRs run through the same labels and states as issues, using the `glab mr` equivalents:
+
+- **Read an MR**: `glab mr view <number> --comments` and `glab mr diff <number>` for the diff.
+- **List external MRs for triage**: `glab mr list -F json`, then keep only MRs whose author is not a project member/owner (a contributor's MR, not a maintainer's in-flight work).
+- **Comment / label / close**: `glab mr note`, `glab mr update --label`/`--unlabel`, `glab mr close`.
+
+Unlike GitHub, GitLab numbers issues and MRs separately, so `#42` is unambiguous once you know which surface the maintainer means.
+
+## When a skill says "publish to the issue tracker"
+
+Create a GitLab issue.
+
+## When a skill says "fetch the relevant ticket"
+
+Run `glab issue view <number> --comments`.
+
+## Wayfinding operations
+
+Used by `/wayfinder`. The **map** is a single issue with **child** issues as tickets.
+
+- **Map**: a single issue labelled `wayfinder:map`, holding the Notes / Decisions-so-far / Fog body. `glab issue create --label wayfinder:map`. (On GitLab tiers with native epics, an epic may hold the map instead; a labelled issue works everywhere.)
+- **Child ticket**: an issue carrying `Part of #<map>` at the top of its description and labels `wayfinder:<type>` (`research`/`prototype`/`grilling`/`task`). Once claimed, the ticket is assigned to the driving dev.
+- **Blocking**: GitLab's **native blocking link**, the canonical, UI-visible representation. Add it with the `/blocked_by #<n>` quick action, posted as a note (`glab issue note <child> --message "/blocked_by #<blocker>"`). Native blocking links are a Premium/Ultimate feature; on the free tier (or where unavailable) fall back to a `Blocked by: #<n>, #<n>` line at the top of the description. A ticket is unblocked when every blocker is closed.
+- **Frontier query**: `glab issue list -F json` scoped to the map's children, drop any with an open blocker: a native `blocked_by` link to an open issue (`glab api projects/:id/issues/:iid/links`), or an open issue in the `Blocked by` line, or an assignee; first in map order wins.
+- **Claim**: `glab issue update <n> --assignee @me`, the session's first write.
+- **Resolve**: `glab issue note <n> --message "<answer>"`, then `glab issue close <n>`, then append a context pointer (gist + link) to the map's Decisions-so-far.
diff --git a/skills/setup-matt-pocock-skills/issue-tracker-local.md b/skills/setup-matt-pocock-skills/issue-tracker-local.md
new file mode 100644
index 0000000..0209a19
--- /dev/null
+++ b/skills/setup-matt-pocock-skills/issue-tracker-local.md
@@ -0,0 +1,30 @@
+# Issue tracker: Local Markdown
+
+Issues and specs for this repo live as markdown files in `.scratch/`.
+
+## Conventions
+
+- One feature per directory: `.scratch/<feature-slug>/`
+- The spec is `.scratch/<feature-slug>/spec.md`
+- Implementation issues are one file per ticket at `.scratch/<feature-slug>/issues/<NN>-<slug>.md`, numbered from `01`, never a single combined tickets file
+- Triage state is recorded as a `Status:` line near the top of each issue file (see `triage-labels.md` for the role strings)
+- Comments and conversation history append to the bottom of the file under a `## Comments` heading
+
+## When a skill says "publish to the issue tracker"
+
+Create a new file under `.scratch/<feature-slug>/` (creating the directory if needed).
+
+## When a skill says "fetch the relevant ticket"
+
+Read the file at the referenced path. The user will normally pass the path or the issue number directly.
+
+## Wayfinding operations
+
+Used by `/wayfinder`. The **map** is a file with one **child** file per ticket.
+
+- **Map**: `.scratch/<effort>/map.md` (the Notes / Decisions-so-far / Fog body).
+- **Child ticket**: `.scratch/<effort>/issues/NN-<slug>.md`, numbered from `01`, with the question in the body. A `Type:` line records the ticket type (`research`/`prototype`/`grilling`/`task`); a `Status:` line records `claimed`/`resolved`.
+- **Blocking**: a `Blocked by: NN, NN` line near the top. A ticket is unblocked when every file it lists is `resolved`.
+- **Frontier**: scan `.scratch/<effort>/issues/` for files that are open, unblocked, and unclaimed; first by number wins.
+- **Claim**: set `Status: claimed` and save before any work.
+- **Resolve**: append the answer under an `## Answer` heading, set `Status: resolved`, then append a context pointer (gist + link) to the map's Decisions-so-far in `map.md`.
diff --git a/skills/setup-matt-pocock-skills/triage-labels.md b/skills/setup-matt-pocock-skills/triage-labels.md
new file mode 100644
index 0000000..b716855
--- /dev/null
+++ b/skills/setup-matt-pocock-skills/triage-labels.md
@@ -0,0 +1,15 @@
+# Triage Labels
+
+The skills speak in terms of five canonical triage roles. This file maps those roles to the actual label strings used in this repo's issue tracker.
+
+| Label in mattpocock/skills | Label in our tracker | Meaning                                  |
+| -------------------------- | -------------------- | ---------------------------------------- |
+| `needs-triage`             | `needs-triage`       | Maintainer needs to evaluate this issue  |
+| `needs-info`               | `needs-info`         | Waiting on reporter for more information |
+| `ready-for-agent`          | `ready-for-agent`    | Fully specified, ready for an AFK agent  |
+| `ready-for-human`          | `ready-for-human`    | Requires human implementation            |
+| `wontfix`                  | `wontfix`            | Will not be actioned                     |
+
+When a skill mentions a role (e.g. "apply the AFK-ready triage label"), use the corresponding label string from this table.
+
+Edit the right-hand column to match whatever vocabulary you actually use.
diff --git a/skills/setup-pre-commit/SKILL.md b/skills/setup-pre-commit/SKILL.md
new file mode 100644
index 0000000..1b97081
--- /dev/null
+++ b/skills/setup-pre-commit/SKILL.md
@@ -0,0 +1,91 @@
+---
+name: setup-pre-commit
+description: Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-commit hooks, set up Husky, configure lint-staged, or add commit-time formatting/typechecking/testing.
+---
+
+# Setup Pre-Commit Hooks
+
+## What This Sets Up
+
+- **Husky** pre-commit hook
+- **lint-staged** running Prettier on all staged files
+- **Prettier** config (if missing)
+- **typecheck** and **test** scripts in the pre-commit hook
+
+## Steps
+
+### 1. Detect package manager
+
+Check for `package-lock.json` (npm), `pnpm-lock.yaml` (pnpm), `yarn.lock` (yarn), `bun.lockb` (bun). Use whichever is present. Default to npm if unclear.
+
+### 2. Install dependencies
+
+Install as devDependencies:
+
+```
+husky lint-staged prettier
+```
+
+### 3. Initialize Husky
+
+```bash
+npx husky init
+```
+
+This creates `.husky/` dir and adds `prepare: "husky"` to package.json.
+
+### 4. Create `.husky/pre-commit`
+
+Write this file (no shebang needed for Husky v9+):
+
+```
+npx lint-staged
+npm run typecheck
+npm run test
+```
+
+**Adapt**: Replace `npm` with detected package manager. If repo has no `typecheck` or `test` script in package.json, omit those lines and tell the user.
+
+### 5. Create `.lintstagedrc`
+
+```json
+{
+  "*": "prettier --ignore-unknown --write"
+}
+```
+
+### 6. Create `.prettierrc` (if missing)
+
+Only create if no Prettier config exists. Use these defaults:
+
+```json
+{
+  "useTabs": false,
+  "tabWidth": 2,
+  "printWidth": 80,
+  "singleQuote": false,
+  "trailingComma": "es5",
+  "semi": true,
+  "arrowParens": "always"
+}
+```
+
+### 7. Verify
+
+- [ ] `.husky/pre-commit` exists and is executable
+- [ ] `.lintstagedrc` exists
+- [ ] `prepare` script in package.json is `"husky"`
+- [ ] `prettier` config exists
+- [ ] Run `npx lint-staged` to verify it works
+
+### 8. Commit
+
+Stage all changed/created files and commit with message: `Add pre-commit hooks (husky + lint-staged + prettier)`
+
+This will run through the new pre-commit hooks: a good smoke test that everything works.
+
+## Notes
+
+- Husky v9+ doesn't need shebangs in hook files
+- `prettier --ignore-unknown` skips files Prettier can't parse (images, etc.)
+- The pre-commit runs lint-staged first (fast, staged-only), then full typecheck and tests
diff --git a/skills/setup-pre-commit/agents/openai.yaml b/skills/setup-pre-commit/agents/openai.yaml
new file mode 100644
index 0000000..e5a1c63
--- /dev/null
+++ b/skills/setup-pre-commit/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Setup Pre-Commit"
+  short_description: "Add pre-commit quality checks"
diff --git a/skills/setup-ts-deep-modules/SKILL.md b/skills/setup-ts-deep-modules/SKILL.md
new file mode 100644
index 0000000..03f699d
--- /dev/null
+++ b/skills/setup-ts-deep-modules/SKILL.md
@@ -0,0 +1,102 @@
+---
+name: setup-ts-deep-modules
+description: Wire dependency-cruiser into a TypeScript repo so each package is a deep module, with implementation hidden in subfolders and reachable only through its entry-point files. User-invoked.
+disable-model-invocation: false
+---
+
+# Setup TS Deep Modules
+
+Make every package in this repo a **deep module**: a lot of behaviour behind a small interface. A package's public surface is its **entry points** (the files at the package root), and everything in its subfolders is hidden. This skill installs [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) and the rules that make the entry points the only way in, then proves the rules bite.
+
+For the vocabulary (deep module, interface, seam, depth), call the Skill tool with "codebase-design" and use its language throughout.
+
+## The shape this enforces
+
+```
+src/packages/
+  <name>/
+    index.ts        ← an entry point (public). Import this from outside.
+    client.ts       ← another entry point. Packages may expose SEVERAL.
+    lib/            ← implementation: hidden from outside, free to import each other.
+    tests/          ← co-located tests + fixtures (a subfolder, so private).
+```
+
+The public surface is the package's **root files**, not one designated `index.ts`. By convention implementation lives in `lib/` and tests in `tests/`, giving every package the same two-folder shape. The rule itself is general, though: *anything* in *any* subfolder is private, so you never extend the config to add a folder.
+
+Four rules, all `error`:
+
+1. **Entry-point boundary**: code outside a package (app code or another package) may import only that package's entry points (its root files), never anything in its subfolders.
+2. **Intra-package freedom**: a package's own files import each other freely.
+3. **Tests through the entry points**: files under `<pkg>/tests/` may import any package's entry points and their own `tests/` fixtures, but never any package's subfolder internals (not even their own). Integration tests across packages are fine; deep imports are not.
+4. **No cycles**: no dependency cycles.
+
+**Entry points, not a barrel.** Because the public surface is *every* root file, a package can expose several small entry points (`index.ts`, `client.ts`, `server.ts`) instead of funnelling everything through one giant `index.ts`. Barrel files that re-export a whole subtree are discouraged; keep entry points small and hide implementation in subfolders.
+
+Layering (which packages may depend on which) is a *different* concern and is left as a commented stub in the config for this repo to fill in.
+
+## Steps
+
+### 1. Detect the environment
+
+- **Package manager**: `pnpm-lock.yaml` → pnpm, `yarn.lock` → yarn, `bun.lockb` → bun, else npm. Use it for every command below (`pnpm`/`yarn`/`npm run`/`bunx`).
+- **Packages root**: if `src/` exists use `src/packages`, else `packages`. Confirm the choice with the user if the repo already has a different obvious convention.
+- **Existing config**: check for a `.dependency-cruiser.*` file. If one exists, do **not** overwrite it: merge the four rules and the options in, and tell the user what you added.
+
+**Done when:** package manager, packages root, and existing-config status are all known.
+
+### 2. Install dependency-cruiser
+
+Install `dependency-cruiser` as a devDependency with the detected package manager.
+
+**Done when:** `dependency-cruiser` is in `devDependencies`.
+
+### 3. Write the config
+
+Copy [`dependency-cruiser.config.cjs`](./dependency-cruiser.config.cjs) to the repo root as `.dependency-cruiser.cjs`. Set `PACKAGES_ROOT` to the root detected in step 1. The rules are path-depth based and extension-agnostic, so nothing else needs adapting.
+
+**Done when:** `.dependency-cruiser.cjs` exists with the correct `PACKAGES_ROOT`, and the four forbidden rules are present.
+
+### 4. Wire it into the checks
+
+- Add a `lint:boundaries` script: `depcruise <packages-root>` (or `depcruise src`).
+- Fold it into the repo's umbrella check command, the one that already runs typecheck (e.g. a `check` / `ci` / `validate` script). Do **not** touch `tsconfig` or add path aliases.
+- If there is no umbrella script, add `lint:boundaries` and tell the user to include it in CI.
+
+**Done when:** `lint:boundaries` exists and runs as part of the same command as typecheck.
+
+### 5. Scaffold the example package
+
+Create a committed `<packages-root>/example/` as a copy-me template:
+
+- `index.ts` is an entry point. Export one function that delegates to an internal file (so the package is visibly *deep*, not a pass-through).
+- `lib/impl.ts`: an internal file in a **subfolder**, imported by `index.ts`, not reachable from outside.
+- `tests/example.test.ts` imports **only** `../index` (an entry point) and asserts against the public function.
+
+Tell the user this is a starter template to copy or delete.
+
+**Done when:** the example package exists, exposes its behaviour through a root entry point, and hides `impl` in a subfolder.
+
+### 6. Prove the rules bite
+
+This is the completion criterion for the whole skill: a config that doesn't fail on a violation is worthless.
+
+1. Run `lint:boundaries`. It must **pass** on the clean example.
+2. Temporarily add a deep import to `tests/example.test.ts` (e.g. `import { thing } from "../lib/impl"`). Run `lint:boundaries` again; it must **fail** with `tests-through-entrypoints`.
+3. Revert the deep import. Run once more, and it must **pass**.
+
+**Done when:** you have observed a pass, then a fail on the deep import, then a pass again. If step 2 does not fail, the rules are not wired correctly, so fix before finishing.
+
+### 7. Document the convention
+
+Write a `README.md` **in the packages folder** (`<packages-root>/README.md`, next to the packages it governs) covering: the `src/packages/<name>/` layout (entry points at the root, `lib/` for implementation, `tests/` for tests), "import only through a package's entry points (its root files)", and how to run `lint:boundaries`. **Discourage barrel files** explicitly: expose several small entry points instead of re-exporting a whole subtree through one index. Keep it to the copy-me snippet plus the four rules in one paragraph each.
+
+Then add a **context pointer** to it from the repo's agent-instructions file (`CLAUDE.md` if present, else `AGENTS.md`, creating `AGENTS.md` if neither exists). One line is enough, e.g. `Packages are deep modules: see [src/packages/README.md](./src/packages/README.md) before adding or importing one.` This is what makes an agent discover the boundary rule instead of tripping over it.
+
+**Done when:** `<packages-root>/README.md` exists and discourages barrels, and the repo's `CLAUDE.md`/`AGENTS.md` links to it.
+
+## Notes
+
+- The config's `$1` back-references (dependency-cruiser's group matching) are what let a package reach its own internals while outsiders can't. Don't flatten them into separate per-package rules.
+- Public vs private is decided by **depth**: a package's root files are entry points; anything in a subfolder is private. The conventional subfolders are `lib/` (implementation) and `tests/`, but the rule doesn't hardcode them: any subfolder is private, so a new folder never needs a config change. Adding an entry point is just adding a root file (no barrel).
+- Packages are **flat**: one tier of immediate children under the root. A package's internals may nest as deep as you like; a package may not contain another package.
+- Use `.cjs` (not `.js`) so the config's `module.exports` works even in `"type": "module"` repos.
diff --git a/skills/setup-ts-deep-modules/agents/openai.yaml b/skills/setup-ts-deep-modules/agents/openai.yaml
new file mode 100644
index 0000000..02a50b1
--- /dev/null
+++ b/skills/setup-ts-deep-modules/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Setup Ts Deep Modules"
+  short_description: "Explicitly invoke the Setup Ts Deep Modules workflow"
+  default_prompt: "Use $setup-ts-deep-modules to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/setup-ts-deep-modules/dependency-cruiser.config.cjs b/skills/setup-ts-deep-modules/dependency-cruiser.config.cjs
new file mode 100644
index 0000000..54030ed
--- /dev/null
+++ b/skills/setup-ts-deep-modules/dependency-cruiser.config.cjs
@@ -0,0 +1,95 @@
+// @ts-check
+// Deep-module enforcement for dependency-cruiser.
+//
+// Each package under the packages root is a DEEP MODULE: a lot of behaviour
+// behind a small interface. A package's PUBLIC SURFACE is its ENTRY POINTS:
+// the files at the package root. Implementation lives in SUBFOLDERS and is
+// private (by convention `lib/` for implementation and `tests/` for tests,
+// though any subfolder is private). A package may expose several small entry
+// points (index.ts, client.ts, server.ts, …); prefer that over one giant
+// barrel index.
+//
+// The only thing you should ever need to edit here is PACKAGES_ROOT.
+
+/** Where packages live. One immediate child dir per package (flat, no nesting). */
+const PACKAGES_ROOT = "src/packages";
+
+// --- derived patterns (no need to edit) -------------------------------------
+const R = PACKAGES_ROOT;
+/**
+ * A package's private internals: anything nested inside a package subfolder.
+ * The package's root files are its entry points and are NOT matched here:
+ * they stay importable from outside.
+ */
+const PACKAGE_INTERNALS = `^${R}/[^/]+/[^/]+/`;
+
+/** @type {import('dependency-cruiser').IConfiguration} */
+module.exports = {
+  forbidden: [
+    {
+      name: "entrypoint-boundary-from-app",
+      comment:
+        "App/root code may import a package's entry points (its root files), but nothing inside its subfolders.",
+      severity: "error",
+      from: { pathNot: `^${R}/` }, // importer is NOT inside any package
+      to: { path: PACKAGE_INTERNALS },
+    },
+    {
+      name: "entrypoint-boundary-across-packages",
+      comment:
+        "A package's own files import each other freely, but may reach OTHER packages only through their entry points, never their internals.",
+      severity: "error",
+      // importer is inside a package ($1), but is not a test file
+      from: { path: `^${R}/([^/]+)/`, pathNot: `^${R}/[^/]+/tests/` },
+      to: {
+        path: PACKAGE_INTERNALS,
+        pathNot: `^${R}/$1/`, // same package → intra-package freedom
+      },
+    },
+    {
+      name: "tests-through-entrypoints",
+      comment:
+        "A package's tests exercise it through its entry points like everyone else: they may import any package's entry points and their own tests/ fixtures, but never any package's internals, not even their own.",
+      severity: "error",
+      from: { path: `^${R}/([^/]+)/tests/` }, // a test file, in package $1
+      to: {
+        path: PACKAGE_INTERNALS,
+        pathNot: `^${R}/$1/tests/`, // own tests/ fixtures → allowed
+      },
+    },
+    {
+      name: "tests-folder-is-private",
+      comment:
+        "A package's tests/ folder is reachable only from tests: nothing else may import fixtures.",
+      severity: "error",
+      from: { pathNot: `^${R}/[^/]+/tests/` }, // importer is not itself a test
+      to: { path: `^${R}/[^/]+/tests/` },
+    },
+    {
+      name: "no-circular",
+      comment: "No dependency cycles. Scope to `^${R}/` if you want to allow cycles outside packages.",
+      severity: "error",
+      from: {},
+      to: { circular: true },
+    },
+
+    // --- Layering (optional, off by default) ----------------------------------
+    // Interface-hiding controls HOW you import (through the entry points).
+    // Layering controls WHICH packages may depend on which. Add your own rules
+    // here, e.g.:
+    //
+    // {
+    //   name: "ui-may-not-depend-on-billing",
+    //   severity: "error",
+    //   from: { path: `^${R}/ui/` },
+    //   to:   { path: `^${R}/billing/` },
+    // },
+  ],
+  options: {
+    doNotFollow: { path: "node_modules" },
+    tsConfig: { fileName: "tsconfig.json" },
+    enhancedResolveOptions: {
+      extensions: [".ts", ".tsx", ".js", ".jsx", ".json"],
+    },
+  },
+};
diff --git a/skills/tdd/SKILL.md b/skills/tdd/SKILL.md
new file mode 100644
index 0000000..8fc0867
--- /dev/null
+++ b/skills/tdd/SKILL.md
@@ -0,0 +1,38 @@
+---
+name: tdd
+description: Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants integration tests.
+---
+
+# Test-Driven Development
+
+TDD is the red → green loop. This skill is the reference that makes that loop produce tests worth keeping: what a good test is, where tests go, the anti-patterns, and the rules of the loop. Every section applies on every cycle: consult them before and during the loop, not after.
+
+When exploring the codebase, read `CONTEXT.md` (if it exists) so test names and interface vocabulary match the project's domain language, and respect ADRs in the area you're touching.
+
+## What a good test is
+
+Tests verify behavior through public interfaces, not implementation details. Code can change entirely; tests shouldn't. A good test reads like a specification: "user can checkout with valid cart" tells you exactly what capability exists, and it survives refactors because it doesn't care about internal structure.
+
+See [tests.md](tests.md) for examples and [mocking.md](mocking.md) for mocking guidelines.
+
+## Seams: where tests go
+
+A **seam** is the public boundary you test at: the interface where you observe behavior without reaching inside. Tests live at seams, never against internals.
+
+**Test only at pre-agreed seams.** Before writing any test, write down the seams under test and confirm them with the user. No test is written at an unconfirmed seam. You can't test everything, so agreeing the seams up front is how testing effort lands on the critical paths and complex logic instead of every edge case.
+
+Ask: "What's the public interface, and which seams should we test?"
+
+When the shape of that interface is itself in question (how deep the module is, where the seam belongs, what the interface should expose), call the Skill tool with "codebase-design" for the vocabulary. It is the shared source of the module, interface, depth, seam, adapter, leverage and locality terms, and it is a reference to consult, not a session to run.
+
+## Anti-patterns
+
+- **Implementation-coupled**: mocks internal collaborators, tests private methods, or verifies through a side channel (querying the database instead of using the interface). The tell: the test breaks when you refactor but behavior hasn't changed.
+- **Tautological**: the assertion recomputes the expected value the way the code does (`expect(add(a, b)).toBe(a + b)`, a snapshot derived by hand the same way, a constant asserted equal to itself), so it passes by construction and can never disagree with the code. Expected values must come from an independent source of truth: a known-good literal, a worked example, the spec.
+- **Horizontal slicing**: writing all tests first, then all implementation. Bulk tests verify _imagined_ behavior: you test the _shape_ of things rather than user-facing behavior, the tests go insensitive to real changes, and you commit to test structure before understanding the implementation. Work in **vertical slices** instead: one test → one implementation → repeat, each test a **tracer bullet** that responds to what the last cycle taught you.
+
+## Rules of the loop
+
+- **Red before green.** Write the failing test first, then only enough code to pass it. Don't anticipate future tests or add speculative features.
+- **One slice at a time.** One seam, one test, one minimal implementation per cycle.
+- **Refactoring is not part of the loop.** It belongs to the review stage (see the `code-review` skill), not the red → green implementation cycle.
diff --git a/skills/tdd/agents/openai.yaml b/skills/tdd/agents/openai.yaml
new file mode 100644
index 0000000..651b838
--- /dev/null
+++ b/skills/tdd/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "TDD"
+  short_description: "Test-driven red-green-refactor"
diff --git a/skills/tdd/mocking.md b/skills/tdd/mocking.md
new file mode 100644
index 0000000..71cbfee
--- /dev/null
+++ b/skills/tdd/mocking.md
@@ -0,0 +1,59 @@
+# When to Mock
+
+Mock at **system boundaries** only:
+
+- External APIs (payment, email, etc.)
+- Databases (sometimes - prefer test DB)
+- Time/randomness
+- File system (sometimes)
+
+Don't mock:
+
+- Your own classes/modules
+- Internal collaborators
+- Anything you control
+
+## Designing for Mockability
+
+At system boundaries, design interfaces that are easy to mock:
+
+**1. Use dependency injection**
+
+Pass external dependencies in rather than creating them internally:
+
+```typescript
+// Easy to mock
+function processPayment(order, paymentClient) {
+  return paymentClient.charge(order.total);
+}
+
+// Hard to mock
+function processPayment(order) {
+  const client = new StripeClient(process.env.STRIPE_KEY);
+  return client.charge(order.total);
+}
+```
+
+**2. Prefer SDK-style interfaces over generic fetchers**
+
+Create specific functions for each external operation instead of one generic function with conditional logic:
+
+```typescript
+// GOOD: Each function is independently mockable
+const api = {
+  getUser: (id) => fetch(`/users/${id}`),
+  getOrders: (userId) => fetch(`/users/${userId}/orders`),
+  createOrder: (data) => fetch('/orders', { method: 'POST', body: data }),
+};
+
+// BAD: Mocking requires conditional logic inside the mock
+const api = {
+  fetch: (endpoint, options) => fetch(endpoint, options),
+};
+```
+
+The SDK approach means:
+- Each mock returns one specific shape
+- No conditional logic in test setup
+- Easier to see which endpoints a test exercises
+- Type safety per endpoint
diff --git a/skills/tdd/tests.md b/skills/tdd/tests.md
new file mode 100644
index 0000000..7ab8647
--- /dev/null
+++ b/skills/tdd/tests.md
@@ -0,0 +1,77 @@
+# Good and Bad Tests
+
+## Good Tests
+
+**Integration-style**: Test through real interfaces, not mocks of internal parts.
+
+```typescript
+// GOOD: Tests observable behavior
+test("user can checkout with valid cart", async () => {
+  const cart = createCart();
+  cart.add(product);
+  const result = await checkout(cart, paymentMethod);
+  expect(result.status).toBe("confirmed");
+});
+```
+
+Characteristics:
+
+- Tests behavior users/callers care about
+- Uses public API only
+- Survives internal refactors
+- Describes WHAT, not HOW
+- One logical assertion per test
+
+## Bad Tests
+
+**Implementation-detail tests**: Coupled to internal structure.
+
+```typescript
+// BAD: Tests implementation details
+test("checkout calls paymentService.process", async () => {
+  const mockPayment = jest.mock(paymentService);
+  await checkout(cart, payment);
+  expect(mockPayment.process).toHaveBeenCalledWith(cart.total);
+});
+```
+
+Red flags:
+
+- Mocking internal collaborators
+- Testing private methods
+- Asserting on call counts/order
+- Test breaks when refactoring without behavior change
+- Test name describes HOW not WHAT
+- Verifying through external means instead of interface
+
+```typescript
+// BAD: Bypasses interface to verify
+test("createUser saves to database", async () => {
+  await createUser({ name: "Alice" });
+  const row = await db.query("SELECT * FROM users WHERE name = ?", ["Alice"]);
+  expect(row).toBeDefined();
+});
+
+// GOOD: Verifies through interface
+test("createUser makes user retrievable", async () => {
+  const user = await createUser({ name: "Alice" });
+  const retrieved = await getUser(user.id);
+  expect(retrieved.name).toBe("Alice");
+});
+```
+
+**Tautological tests**: Expected value restates the implementation, so the test passes by construction.
+
+```typescript
+// BAD: Expected value is recomputed the way the code computes it
+test("calculateTotal sums line items", () => {
+  const items = [{ price: 10 }, { price: 5 }];
+  const expected = items.reduce((sum, i) => sum + i.price, 0);
+  expect(calculateTotal(items)).toBe(expected);
+});
+
+// GOOD: Expected value is an independent, known literal
+test("calculateTotal sums line items", () => {
+  expect(calculateTotal([{ price: 10 }, { price: 5 }])).toBe(15);
+});
+```
diff --git a/skills/teach/GLOSSARY-FORMAT.md b/skills/teach/GLOSSARY-FORMAT.md
new file mode 100644
index 0000000..fdd7e36
--- /dev/null
+++ b/skills/teach/GLOSSARY-FORMAT.md
@@ -0,0 +1,35 @@
+# GLOSSARY.md Format
+
+`GLOSSARY.md` is the canonical language for this teaching workspace. All explainers, exercises, and learning records should adhere to its terminology. Building it is itself part of learning: compressing a concept into a tight definition is evidence the user understands it.
+
+## Structure
+
+```md
+# {Topic} Glossary
+
+{One or two sentence description of the topic this glossary covers.}
+
+## Terms
+
+**Hypertrophy**:
+Muscle growth driven by mechanical tension and metabolic stress over repeated training sessions.
+_Avoid_: Bulking, getting big
+
+**Progressive overload**:
+Systematically increasing the demand on a muscle over time, via load, volume, or intensity.
+_Avoid_: Pushing harder, levelling up
+
+**RPE (Rate of Perceived Exertion)**:
+A 1–10 self-rating of how hard a set felt, where 10 is failure and 8 means two reps left in the tank.
+_Avoid_: Effort score, intensity rating
+```
+
+## Rules
+
+- **Add a term only when the user understands it.** The glossary is a record of compressed knowledge, not a dictionary the user reads to learn. If the user has just been introduced to a concept, wait until they can use it correctly before promoting it here.
+- **Be opinionated.** When several words exist for the same concept, pick the best one and list the rest as aliases to avoid. This is how language compresses.
+- **Keep definitions tight.** One or two sentences. Define what the term IS, not what it does or how to do it.
+- **Use the glossary's own terms inside definitions.** Once a term is in the glossary, prefer it everywhere, including inside other definitions. This is what makes complex terms easier to grasp later.
+- **Group under subheadings** when natural clusters emerge (e.g. `## Anatomy`, `## Programming`). A flat list is fine when terms cohere.
+- **Flag ambiguities explicitly.** If a term is used loosely in the wider field, note the resolution: "In this workspace, 'set' always means a working set; warm-ups are tracked separately."
+- **Revise as understanding deepens.** A definition the user wrote in week one may be wrong by week six. Update in place; do not leave stale entries.
diff --git a/skills/teach/LEARNING-RECORD-FORMAT.md b/skills/teach/LEARNING-RECORD-FORMAT.md
new file mode 100644
index 0000000..953c614
--- /dev/null
+++ b/skills/teach/LEARNING-RECORD-FORMAT.md
@@ -0,0 +1,46 @@
+# Learning Record Format
+
+Learning records live in `./learning-records/` and use sequential numbering: `0001-slug.md`, `0002-slug.md`, etc. Create the directory lazily: only when the first record is written.
+
+They are the teaching equivalent of ADRs: they capture non-obvious lessons, key insights, and stated prior knowledge that will steer future sessions. They are used to calculate the zone of proximal development.
+
+## Template
+
+```md
+# {Short title of what was learned or established}
+
+{1-3 sentences: what was learned (or what prior knowledge was established), and why it matters for future sessions.}
+```
+
+That is the whole format. A learning record can be a single paragraph. The value is recording _that_ this is now known and _why_ it changes what to teach next, not in filling out sections.
+
+## Optional sections
+
+Only include these when they add genuine value. Most records won't need them.
+
+- **Status** frontmatter (`active | superseded by LR-NNNN`): useful when an earlier understanding turns out to be wrong and is replaced.
+- **Evidence**: how the user demonstrated the understanding (a question answered, an exercise completed, prior experience cited). Useful when the claim might be revisited.
+- **Implications**: what this unlocks or rules out for future sessions. Worth recording when non-obvious.
+
+## Numbering
+
+Scan `./learning-records/` for the highest existing number and increment by one.
+
+## When to write a learning record
+
+Write one when any of these is true:
+
+1. **The user demonstrated genuine understanding of something non-trivial**: not just exposure, but evidence they can use the concept correctly. This sets a new floor for what to teach next.
+2. **The user disclosed prior knowledge**: "I already know X." Record it so future sessions don't re-teach it. Also record the _depth_ claimed.
+3. **A misconception was corrected**: the user previously believed something wrong and now sees why. These are high-value: they predict future stumbling blocks for related topics.
+4. **The mission shifted in response to learning**: the user discovered they cared about something different than they thought. Cross-link to [[MISSION.md]] and update it.
+
+### What does _not_ qualify
+
+- Material that was merely covered. Coverage is not learning. Wait for evidence.
+- Anything already captured tersely in [[GLOSSARY.md]] as a term definition. Don't duplicate.
+- Session-by-session activity logs. Learning records are not a journal: they are decision-grade insights.
+
+## Supersession
+
+When a later record contradicts an earlier one (the user's understanding deepened or corrected), mark the old record `Status: superseded by LR-NNNN` rather than deleting it. The history of how understanding evolved is itself useful signal.
diff --git a/skills/teach/MISSION-FORMAT.md b/skills/teach/MISSION-FORMAT.md
new file mode 100644
index 0000000..45250bb
--- /dev/null
+++ b/skills/teach/MISSION-FORMAT.md
@@ -0,0 +1,31 @@
+# MISSION.md Format
+
+`MISSION.md` lives at the workspace root. It captures the _reason_ the user is learning this topic. Every teaching decision (what to teach next, which resources to surface, which exercises to design) should trace back to this document.
+
+## Template
+
+```md
+# Mission: {Topic}
+
+## Why
+{1-3 sentences. The concrete real-world goal the user is chasing. What changes in their life or work when they have this skill? Avoid abstract framings like "to understand X"; push for the underlying outcome.}
+
+## Success looks like
+- {A specific, observable thing the user will be able to do}
+- {Another specific thing}
+- {…}
+
+## Constraints
+- {Time, budget, prior commitments, learning preferences, anything that bounds the approach}
+
+## Out of scope
+- {Adjacent topics the user explicitly does not want to chase right now, protecting the zone of proximal development}
+```
+
+## Rules
+
+- **One mission per workspace.** If the user wants to learn two unrelated things, that is two workspaces.
+- **Concrete over abstract.** "Run a half marathon by October" beats "get fitter." "Ship a Rust CLI to my team" beats "learn Rust."
+- **Push back on vagueness.** If the user cannot articulate why, interview them before writing anything. A bad mission is worse than no mission.
+- **Revise when reality shifts.** Missions change. When the user's goal moves, update this file: don't leave a stale mission steering future sessions.
+- **Keep it short.** If `MISSION.md` runs past a screen, it has stopped being a compass and started being a plan.
diff --git a/skills/teach/RESOURCES-FORMAT.md b/skills/teach/RESOURCES-FORMAT.md
new file mode 100644
index 0000000..18b588c
--- /dev/null
+++ b/skills/teach/RESOURCES-FORMAT.md
@@ -0,0 +1,32 @@
+# RESOURCES.md Format
+
+`RESOURCES.md` is the curated set of trusted sources for this topic. Knowledge for explainers should be drawn from here, not from parametric guesses. Wisdom comes from the communities listed here.
+
+## Structure
+
+```md
+# {Topic} Resources
+
+## Knowledge
+
+- [Book: _The Science and Practice of Strength Training_ by Zatsiorsky & Kraemer](https://example.com)
+  Foundational text on programming and adaptation. Use for: anything to do with periodisation, recovery, intensity zones.
+- [Article: "How Much Should I Train?" by Greg Nuckols (Stronger By Science)](https://example.com)
+  Evidence-based review of volume landmarks. Use for: weekly set targets per muscle group.
+
+## Wisdom (Communities)
+
+- [r/weightroom](https://reddit.com/r/weightroom)
+  High-signal subreddit, moderated against bro-science. Use for: programme critique, plateau troubleshooting.
+- Local: Tuesday strength class at {gym name}
+  Use for: real-time coaching feedback on lifts.
+```
+
+## Rules
+
+- **High-trust only.** Prefer primary sources, recognised experts, peer-reviewed work, and communities with strong moderation. If a resource is marketing dressed as education, leave it out.
+- **Annotate every entry.** A bare link is useless in three months. Add one line: what it covers and when to reach for it.
+- **Group by Knowledge / Wisdom.** Mirrors the philosophy in [SKILL.md](./SKILL.md). It is fine for a resource to appear in only one group.
+- **Surface gaps explicitly.** If no good resource exists for an area the mission needs, write a `## Gaps` section listing what is missing. This drives future search.
+- **Prune ruthlessly.** A resource that turned out to be wrong, shallow, or off-mission should be removed, not buried. Better five sharp sources than thirty mediocre ones.
+- **Record community preferences.** If the user has opted out of joining communities, note it here so future sessions don't keep proposing them.
diff --git a/skills/teach/SKILL.md b/skills/teach/SKILL.md
new file mode 100644
index 0000000..db2db5b
--- /dev/null
+++ b/skills/teach/SKILL.md
@@ -0,0 +1,140 @@
+---
+name: teach
+description: Teach the user a new skill or concept, within this workspace.
+disable-model-invocation: false
+argument-hint: "What would you like to learn about?"
+---
+
+The user has asked you to teach them something. This is a stateful request - they intend to learn the topic over multiple sessions.
+
+## Teaching Workspace
+
+Treat the current directory as a teaching workspace. The state of their learning is captured in this directory in several files:
+
+- `MISSION.md`: A document capturing the _reason_ the user is interested in the topic. This should be used to ground all teaching. Use the format in [MISSION-FORMAT.md](./MISSION-FORMAT.md).
+- `./reference/*.html`: A directory of reference materials. These are the compressed learnings from the lessons - cheat sheets, reference algorithms, syntax, yoga poses, glossaries. They are the raw units of learning. They should be beautiful documents which print out well, and are designed for quick reference.
+- `RESOURCES.md`: A list of resources which can be explored to ground your teaching in contextual knowledge, or to acquire knowledge and wisdom. Use the format in [RESOURCES-FORMAT.md](./RESOURCES-FORMAT.md).
+- `./learning-records/*.md`: A directory of learning records, which capture what the user has learned. These are loosely equivalent to architectural decision records in software development - they capture non-obvious lessons and key insights that may need to be revised later, or drive future sessions. These should be used to calculate the zone of proximal development. They are titled `0001-<dash-case-name>.md`, where the number increments each time. Use the format in [LEARNING-RECORD-FORMAT.md](./LEARNING-RECORD-FORMAT.md).
+- `./lessons/*.html`: A directory of lessons. A **lesson** is a single, self-contained HTML output that teaches one tightly-scoped thing tied to the mission. This is the primary unit of teaching in this workspace.
+- `./assets/*`: Reusable **components** shared across lessons. See [Assets](#assets).
+- `NOTES.md`: A scratchpad for you to jot down user preferences, or working notes.
+
+## Philosophy
+
+To learn at a deep level, the user needs three things:
+
+- **Knowledge**, captured from high-quality, high-trust resources
+- **Skills**, acquired through highly-relevant interactive lessons devised by you, based on the knowledge
+- **Wisdom**, which comes from interacting with other learners and practitioners
+
+Before the `RESOURCES.md` is well-populated, your focus should be to find high-quality resources which will help the user acquire knowledge. Never trust your parametric knowledge.
+
+Some topics may require more skills than knowledge. Learning more about theoretical physics might be more knowledge-based. For yoga, more skills-based.
+
+### Fluency vs Storage Strength
+
+You should be careful to split between two types of learning:
+
+- **Fluency strength**: in-the-moment retrieval of knowledge
+- **Storage strength**: long-term retention of knowledge
+
+Fluency can give the user an illusory sense of mastery, but storage strength is the real goal. Try to design lessons which build long-term retention by desirable difficulty:
+
+- Using retrieval practice (recall from memory)
+- Spacing (distributing practice over time)
+- Interleaving (mixing up different but related topics in practice - for skills practice only)
+
+## Lessons
+
+A lesson is the main thing you produce: the unit in which knowledge and skills reach the user. Each lesson is one self-contained HTML file, saved to `./lessons/` and titled `0001-<dash-case-name>.html` where the number increments each time.
+
+A lesson should be **beautiful**, with clean, readable typography and layout, since the user will return to these later to review. Think Tufte.
+
+The lesson should be short, and completable very quickly. Learners' working memory is very small, and we need to stay within it. But each lesson should give the user a single tangible win that they can build on. It should be directly tied to the mission, and should be in the user's zone of proximal development.
+
+If possible, open the lesson file for the user by running a CLI command.
+
+Each lesson should link via HTML anchors to other lessons and reference documents.
+
+Each lesson should recommend a primary source for the user to read or watch. This should be the most high-quality, high-trust resource you found on the topic.
+
+Each lesson should contain a reminder to ask followup questions to the agent. The agent is their teacher, and can assist with anything that's unclear.
+
+## Assets
+
+Lessons are built from reusable **components**, stored in `./assets/`: stylesheets, quiz widgets, simulators, diagram helpers, and anything else a second lesson could reuse.
+
+Reuse is the default, not the exception. Before authoring a lesson, read `./assets/` and build from the components already there. When a lesson needs something new and reusable, write it as a component in `./assets/` and link to it; never inline code a future lesson would duplicate.
+
+A shared stylesheet is the first component every workspace earns: every lesson links it, so the lessons look like one consistent course rather than a pile of one-offs. As the workspace grows, so should the component library.
+
+## The Mission
+
+Every lesson should be tied into the mission - the reason that the user is interested in learning about the topic.
+
+If the user is unclear about the mission, or the `MISSION.md` is not populated, your first job should be to question the user on why they want to learn this.
+
+Failing to understand the mission will mean knowledge acquisition is not grounded in real-world goals. Lessons will feel too abstract. You will have no way of judging what the user should do next.
+
+Missions may change as the user develops more skills and knowledge. This is normal - make sure to update the `MISSION.md` and add a learning record to capture the change. Confirm with the user before changing the mission.
+
+## Zone Of Proximal Development
+
+Each lesson, the user should always feel as if they are being challenged 'just enough'.
+
+The user may specify an exact thing they want to learn. If they don't, figure out their zone of proximal development by:
+
+- Reading their `learning-records`
+- Figuring out the right thing to teach them based on their mission
+- Teach the most relevant thing that fits in their zone of proximal development
+
+## Knowledge
+
+Lessons should be designed around a skill the user is going to learn. The knowledge in the lesson should be only what's required to acquire that skill. You teach the knowledge first, then get the user to practice the skills via an interactive feedback loop.
+
+Knowledge should first be gathered from trusted resources. Use `RESOURCES.md` to keep track of them. Lessons should be littered with citations - links to external resources to back up any claim made. This increases the trustworthiness of the lesson.
+
+For acquiring knowledge, difficulty is the enemy. It eats working memory you need for understanding.
+
+## Skills
+
+If knowledge is all about acquisition, skills are about durability and flexibility. Make the knowledge stick.
+
+For skill acquisition, difficulty is the tool. Effortful retrieval is what builds storage strength. Skills should be taught through interactive lessons. There are several tools at your disposal:
+
+- Interactive lessons, using quizzes and light in-browser tasks
+- Lessons which guide the user through a list of real-world steps to take (for instance, yoga poses)
+
+Each of these should be based on a **feedback loop**, where the user receives feedback on their performance. This feedback loop should be as tight as possible, giving feedback immediately - and ideally automatically.
+
+For quizzes, each answer should be exactly the same number of words (and characters, if possible). Don't give the user any clues about the answer through formatting.
+
+## Acquiring Wisdom
+
+Wisdom comes from true real-world interaction - testing your skills outside the learning environment.
+
+When the user asks a question that appears to require wisdom, your default posture should be to attempt to answer - but to ultimately delegate to a **community**.
+
+A community is a place (online or offline) where the user can test their skills in the real world. This might be a forum, a subreddit, a real-world class (budget permitting) or a local interest group.
+
+You should attempt to find high-reputation communities the user can join. If the user expresses a preference that they don't want to join a community, respect it.
+
+## Reference Documents
+
+While creating lessons, you should also create reference documents. Lessons can reference these documents - they are useful for tracking raw units of knowledge useful across lessons.
+
+Lessons will rarely be revisited later - reference documents will be. They should be the compressed essence of the lesson, in a format designed for quick reference.
+
+Some learning topics lend themselves to reference:
+
+- Syntax and code snippets for programming
+- Algorithms and flowcharts for processes
+- Yoga poses and sequences for yoga
+- Exercises and routines for fitness
+- Glossaries for any topic with its own nomenclature
+
+Glossaries, in particular, are an essential reference. Once one is created, it should be adhered to in every lesson.
+
+## `NOTES.md`
+
+The user will sometimes express preferences of how they want to be taught, or things you should keep in mind. This is the place to record those preferences, so you can refer back to them when designing lessons or working with the user.
diff --git a/skills/teach/agents/openai.yaml b/skills/teach/agents/openai.yaml
new file mode 100644
index 0000000..7ca2578
--- /dev/null
+++ b/skills/teach/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Teach"
+  short_description: "Explicitly invoke the Teach workflow"
+  default_prompt: "Use $teach to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/to-questionnaire/SKILL.md b/skills/to-questionnaire/SKILL.md
new file mode 100644
index 0000000..77a285c
--- /dev/null
+++ b/skills/to-questionnaire/SKILL.md
@@ -0,0 +1,54 @@
+---
+name: to-questionnaire
+description: Turn a decision you can't fully answer into a questionnaire for someone else to fill in.
+disable-model-invocation: false
+---
+
+Turn something the user can't answer alone into a **questionnaire**: a Markdown document they hand to one person to fill in async, or fill out together over a meeting. The recipient holds knowledge the user lacks; the questionnaire pulls it out of them.
+
+**Grill the send, not the subject.** Interview the user only about the _send_, which they can always answer: who it goes to, and what they need back. The questions in the document then target the **gap** between what the recipient knows and what the user needs.
+
+
+1. **Who is it going to?** Ask, in one exchange, the recipient's role, expertise, and relationship to the user. This fixes the questionnaire's tone and how much context it must carry. Done when you know who the recipient is and what they know that the user doesn't.
+
+2. **What do you need back?** Ask, in one exchange, the specific decisions or facts the user can't resolve alone and needs from this person. Done when you have a concrete list of what the user must walk away able to do or decide.
+
+3. **Write the questionnaire.** Draft questions aimed at the gap from steps 1–2, following the Document structure below. Write it to `to-questionnaire-<slug>.md` in the current directory (slug from the topic) and report the path. Done when the file exists and every item the user named in step 2 is covered by a question.
+
+## Document structure
+
+Frame the document as a **discovery questionnaire**: the user lacks context, the recipient holds it. Order questions most-important-first, since async means you may only get one pass, and group them under `##` headings by theme once there are more than a handful. Write it using the template below.
+
+<questionnaire-template>
+
+# <Questionnaire title>
+
+**Purpose:** why this questionnaire exists and the decision riding on it.
+
+**From:** <the user>, **To:** <the recipient>, **How your answers will be used:** <where they go>
+
+## Context
+
+One paragraph orienting a recipient who wasn't in the user's head. Enough to answer well, not a page.
+
+## How to answer
+
+Deadline and rough effort. Partial answers and "I don't know" are useful: flag anything you're unsure of rather than skipping it.
+
+## <Theme heading>
+
+One `##` section per theme. Under each, its questions, most-important-first. Every question is one idea, never compound, with an answer stub directly beneath, and a one-line _why this matters_ only where the question could be misread or invite a throwaway answer.
+
+<question-example>
+### What load is the system expected to handle at launch?
+
+_Why this matters: it decides whether we provision for burst traffic now or defer it._
+
+>
+</question-example>
+
+## Anything else?
+
+A closing catch-all: anything we didn't ask that we should know?
+
+</questionnaire-template>
diff --git a/skills/to-questionnaire/agents/openai.yaml b/skills/to-questionnaire/agents/openai.yaml
new file mode 100644
index 0000000..c90c1d2
--- /dev/null
+++ b/skills/to-questionnaire/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "To Questionnaire"
+  short_description: "Explicitly invoke the To Questionnaire workflow"
+  default_prompt: "Use $to-questionnaire to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/to-spec/SKILL.md b/skills/to-spec/SKILL.md
new file mode 100644
index 0000000..de76181
--- /dev/null
+++ b/skills/to-spec/SKILL.md
@@ -0,0 +1,75 @@
+---
+name: to-spec
+description: "Turn the current conversation into a spec and publish it to the project issue tracker: no interview, just synthesis of what you've already discussed."
+disable-model-invocation: false
+---
+
+This skill takes the current conversation context and codebase understanding and produces a spec. Do NOT interview the user; just synthesize what you already know.
+
+The issue tracker and triage label vocabulary should have been provided to you. If not, tell the user to run `/setup-matt-pocock-skills`.
+
+## Process
+
+1. Explore the repo to understand the current state of the codebase, if you haven't already. Use the project's domain glossary vocabulary throughout the spec, and respect any ADRs in the area you're touching.
+
+2. Sketch out the seams at which you're going to test the feature. Existing seams should be preferred to new ones. Use the highest seam possible. If new seams are needed, propose them at the highest point you can. The fewer seams across the codebase, the better - the ideal number is one.
+
+Check with the user that these seams match their expectations.
+
+3. Write the spec using the template below, then publish it to the project issue tracker. Apply the `ready-for-agent` triage label - no need for additional triage.
+
+<spec-template>
+
+## Problem Statement
+
+The problem that the user is facing, from the user's perspective.
+
+## Solution
+
+The solution to the problem, from the user's perspective.
+
+## User Stories
+
+A LONG, numbered list of user stories. Each user story should be in the format of:
+
+1. As an <actor>, I want a <feature>, so that <benefit>
+
+<user-story-example>
+1. As a mobile bank customer, I want to see balance on my accounts, so that I can make better informed decisions about my spending
+</user-story-example>
+
+This list of user stories should be extremely extensive and cover all aspects of the feature.
+
+## Implementation Decisions
+
+A list of implementation decisions that were made. This can include:
+
+- The modules that will be built/modified
+- The interfaces of those modules that will be modified
+- Technical clarifications from the developer
+- Architectural decisions
+- Schema changes
+- API contracts
+- Specific interactions
+
+Do NOT include specific file paths or code snippets. They may end up being outdated very quickly.
+
+Exception: if a prototype produced a snippet that encodes a decision more precisely than prose can (state machine, reducer, schema, type shape), inline it within the relevant decision and note briefly that it came from a prototype. Trim to the decision-rich parts, not a working demo, just the important bits.
+
+## Testing Decisions
+
+A list of testing decisions that were made. Include:
+
+- A description of what makes a good test (only test external behavior, not implementation details)
+- Which modules will be tested
+- Prior art for the tests (i.e. similar types of tests in the codebase)
+
+## Out of Scope
+
+A description of the things that are out of scope for this spec.
+
+## Further Notes
+
+Any further notes about the feature.
+
+</spec-template>
diff --git a/skills/to-spec/agents/openai.yaml b/skills/to-spec/agents/openai.yaml
new file mode 100644
index 0000000..537ad3b
--- /dev/null
+++ b/skills/to-spec/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "To Spec"
+  short_description: "Explicitly invoke the To Spec workflow"
+  default_prompt: "Use $to-spec to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/to-tickets/SKILL.md b/skills/to-tickets/SKILL.md
new file mode 100644
index 0000000..738217d
--- /dev/null
+++ b/skills/to-tickets/SKILL.md
@@ -0,0 +1,105 @@
+---
+name: to-tickets
+description: Break a plan, spec, or the current conversation into a set of tracer-bullet tickets, each declaring its blocking edges, published to the configured tracker (edges as text in one file per ticket locally, or native blocking links on a real tracker).
+disable-model-invocation: false
+---
+
+# To Tickets
+
+Break a plan, spec, or conversation into a set of **tickets**: tracer-bullet vertical slices, each declaring the tickets that **block** it.
+
+The issue tracker and triage label vocabulary should have been provided to you. If not, tell the user to run `/setup-matt-pocock-skills`.
+
+## Process
+
+### 1. Gather context
+
+Work from whatever is already in the conversation context. If the user passes a reference (a spec path, an issue number or URL) as an argument, fetch it and read its full body and comments.
+
+### 2. Explore the codebase (optional)
+
+If you have not already explored the codebase, do so to understand the current state of the code. Ticket titles and descriptions should use the project's domain glossary vocabulary, and respect ADRs in the area you're touching.
+
+Look for opportunities to prefactor the code to make the implementation easier. "Make the change easy, then make the easy change."
+
+### 3. Draft vertical slices
+
+Break the work into **tracer bullet** tickets.
+
+<vertical-slice-rules>
+
+- Each slice cuts a narrow but COMPLETE path through every layer (schema, API, UI, tests): vertical, NOT a horizontal slice of one layer
+- A completed slice is demoable or verifiable on its own
+- Each slice is sized to fit in a single fresh context window
+- Any prefactoring should be done first
+
+</vertical-slice-rules>
+
+Give each ticket its **blocking edges**: the other tickets that must complete before it can start. A ticket with no blockers can start immediately.
+
+**Wide refactors are the exception to vertical slicing.** A **wide refactor** is one mechanical change (rename a column, retype a shared symbol) whose **blast radius** fans across the whole codebase, so a single edit breaks thousands of call sites at once and no vertical slice can land green. Don't force it into a tracer bullet; sequence it as **expand–contract**. First expand: add the new form beside the old so nothing breaks. Then migrate the call sites over in batches sized by blast radius (per package, per directory), each batch its own ticket blocked by the expand, keeping CI green batch to batch because the old form still exists. Finally contract: delete the old form once no caller remains, in a ticket blocked by every migrate batch. When even the batches can't stay green alone, keep the sequence but let them share an integration branch that all block a final integrate-and-verify ticket; green is promised only there.
+
+### 4. Quiz the user
+
+Present the proposed breakdown as a numbered list. For each ticket, show:
+
+- **Title**: short descriptive name
+- **Blocked by**: which other tickets (if any) must complete first
+- **What it delivers**: the end-to-end behaviour this ticket makes work
+
+Ask the user:
+
+- Does the granularity feel right? (too coarse / too fine)
+- Are the blocking edges correct: does each ticket only depend on tickets that genuinely gate it?
+- Should any tickets be merged or split further?
+
+Iterate until the user approves the breakdown.
+
+### 5. Publish the tickets to the configured tracker
+
+Publish the approved tickets. **How** depends on the tracker `/setup-matt-pocock-skills` configured; the tickets are the same either way, only the shape of the blocking edges changes:
+
+- **Local files** → write one file per ticket under `.scratch/<feature-slug>/issues/<NN>-<slug>.md`, numbered from `01` in dependency order (blockers first). Each file's "Blocked by" lists the numbers/titles it depends on. Use the per-ticket file template below: one ticket per file, never a single combined file.
+- **A real issue tracker (GitHub, Linear, …)** → publish one issue per ticket in dependency order (blockers first) so each ticket's blocking edges can reference real identifiers. Use the platform's native blocking / sub-issue relationship where it has one; otherwise set each ticket's "Blocked by" to the blocking issues. Apply the `ready-for-agent` triage label unless instructed otherwise; the tickets are agent-grabbable by construction.
+
+Work the **frontier**: any ticket whose blockers are all done. For a purely linear chain that means top to bottom.
+
+Do NOT close or modify any parent issue.
+
+<local-ticket-template>
+
+# <NN>: <Ticket title>
+
+**What to build:** the end-to-end behaviour this ticket makes work, from the user's perspective, not a layer-by-layer implementation list.
+
+**Blocked by:** the numbers/titles of the tickets that gate this one, or "None (can start immediately)".
+
+**Status:** ready-for-agent
+
+- [ ] Acceptance criterion 1
+- [ ] Acceptance criterion 2
+
+</local-ticket-template>
+
+<issue-template>
+
+## Parent
+
+A reference to the parent issue on the tracker (if the source was an existing issue, otherwise omit this section).
+
+## What to build
+
+The end-to-end behaviour this ticket makes work, from the user's perspective, not layer-by-layer implementation.
+
+## Acceptance criteria
+
+- [ ] Criterion 1
+- [ ] Criterion 2
+
+## Blocked by
+
+- A reference to each blocking ticket, or "None (can start immediately)".
+
+</issue-template>
+
+In either form, avoid specific file paths or code snippets: they go stale fast. Exception: if a prototype produced a snippet that encodes a decision more precisely than prose can (state machine, reducer, schema, type shape), inline it and note briefly that it came from a prototype. Trim to the decision-rich parts, not a working demo, just the important bits.
diff --git a/skills/to-tickets/agents/openai.yaml b/skills/to-tickets/agents/openai.yaml
new file mode 100644
index 0000000..f95b9a5
--- /dev/null
+++ b/skills/to-tickets/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "To Tickets"
+  short_description: "Explicitly invoke the To Tickets workflow"
+  default_prompt: "Use $to-tickets to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/triage/AGENT-BRIEF.md b/skills/triage/AGENT-BRIEF.md
new file mode 100644
index 0000000..1462fcd
--- /dev/null
+++ b/skills/triage/AGENT-BRIEF.md
@@ -0,0 +1,207 @@
+# Writing Agent Briefs
+
+An agent brief is a structured comment posted on a GitHub issue or PR when it moves to `ready-for-agent`. It is the authoritative specification that an AFK agent will work from. The original body and discussion are context: the agent brief is the contract.
+
+The brief states **what the agent should do**, which stretches to both surfaces: for an issue, that's building the change from nothing; for a PR, it's what's left to do *to the existing diff*: finish it, close gaps, address review points. Same principles either way; the PR example below shows the difference.
+
+## Principles
+
+### Durability over precision
+
+The issue may sit in `ready-for-agent` for days or weeks. The codebase will change in the meantime. Write the brief so it stays useful even as files are renamed, moved, or refactored.
+
+- **Do** describe interfaces, types, and behavioral contracts
+- **Do** name specific types, function signatures, or config shapes that the agent should look for or modify
+- **Don't** reference file paths: they go stale
+- **Don't** reference line numbers
+- **Don't** assume the current implementation structure will remain the same
+
+### Behavioral, not procedural
+
+Describe **what** the system should do, not **how** to implement it. The agent will explore the codebase fresh and make its own implementation decisions.
+
+- **Good:** "The `SkillConfig` type should accept an optional `schedule` field of type `CronExpression`"
+- **Bad:** "Open src/types/skill.ts and add a schedule field on line 42"
+- **Good:** "When a user runs `/triage` with no arguments, they should see a summary of issues needing attention"
+- **Bad:** "Add a switch statement in the main handler function"
+
+### Complete acceptance criteria
+
+The agent needs to know when it's done. Every agent brief must have concrete, testable acceptance criteria. Each criterion should be independently verifiable.
+
+- **Good:** "Running `gh issue list --label needs-triage` returns issues that have been through initial classification"
+- **Bad:** "Triage should work correctly"
+
+### Explicit scope boundaries
+
+State what is out of scope. This prevents the agent from gold-plating or making assumptions about adjacent features.
+
+## Template
+
+```markdown
+## Agent Brief
+
+**Category:** bug / enhancement
+**Summary:** one-line description of what needs to happen
+
+**Current behavior:**
+Describe what happens now. For bugs, this is the broken behavior.
+For enhancements, this is the status quo the feature builds on.
+
+**Desired behavior:**
+Describe what should happen after the agent's work is complete.
+Be specific about edge cases and error conditions.
+
+**Key interfaces:**
+- `TypeName`: what needs to change and why
+- `functionName()` return type: what it currently returns vs what it should return
+- Config shape: any new configuration options needed
+
+**Acceptance criteria:**
+- [ ] Specific, testable criterion 1
+- [ ] Specific, testable criterion 2
+- [ ] Specific, testable criterion 3
+
+**Out of scope:**
+- Thing that should NOT be changed or addressed in this issue
+- Adjacent feature that might seem related but is separate
+```
+
+## Examples
+
+### Good agent brief (bug)
+
+```markdown
+## Agent Brief
+
+**Category:** bug
+**Summary:** Skill description truncation drops mid-word, producing broken output
+
+**Current behavior:**
+When a skill description exceeds 1024 characters, it is truncated at exactly
+1024 characters regardless of word boundaries. This produces descriptions
+that end mid-word (e.g. "Use when the user wants to confi").
+
+**Desired behavior:**
+Truncation should break at the last word boundary before 1024 characters
+and append "..." to indicate truncation.
+
+**Key interfaces:**
+- The `SkillMetadata` type's `description` field: no type change needed,
+  but the validation/processing logic that populates it needs to respect
+  word boundaries
+- Any function that reads SKILL.md frontmatter and extracts the description
+
+**Acceptance criteria:**
+- [ ] Descriptions under 1024 chars are unchanged
+- [ ] Descriptions over 1024 chars are truncated at the last word boundary
+      before 1024 chars
+- [ ] Truncated descriptions end with "..."
+- [ ] The total length including "..." does not exceed 1024 chars
+
+**Out of scope:**
+- Changing the 1024 char limit itself
+- Multi-line description support
+```
+
+### Good agent brief (enhancement)
+
+```markdown
+## Agent Brief
+
+**Category:** enhancement
+**Summary:** Add `.out-of-scope/` directory support for tracking rejected feature requests
+
+**Current behavior:**
+When a feature request is rejected, the issue is closed with a `wontfix` label
+and a comment. There is no persistent record of the decision or reasoning.
+Future similar requests require the maintainer to recall or search for the
+prior discussion.
+
+**Desired behavior:**
+Rejected feature requests should be documented in `.out-of-scope/<concept>.md`
+files that capture the decision, reasoning, and links to all issues that
+requested the feature. When triaging new issues, these files should be
+checked for matches.
+
+**Key interfaces:**
+- Markdown file format in `.out-of-scope/`: each file should have a
+  `# Concept Name` heading, a `**Decision:**` line, a `**Reason:**` line,
+  and a `**Prior requests:**` list with issue links
+- The triage workflow should read all `.out-of-scope/*.md` files early
+  and match incoming issues against them by concept similarity
+
+**Acceptance criteria:**
+- [ ] Closing a feature as wontfix creates/updates a file in `.out-of-scope/`
+- [ ] The file includes the decision, reasoning, and link to the closed issue
+- [ ] If a matching `.out-of-scope/` file already exists, the new issue is
+      appended to its "Prior requests" list rather than creating a duplicate
+- [ ] During triage, existing `.out-of-scope/` files are checked and surfaced
+      when a new issue matches a prior rejection
+
+**Out of scope:**
+- Automated matching (human confirms the match)
+- Reopening previously rejected features
+- Bug reports (only enhancement rejections go to `.out-of-scope/`)
+```
+
+### Good agent brief (PR)
+
+For a PR, "Current behavior" describes the state of the diff, and the brief asks the agent to finish or fix it rather than build from scratch.
+
+```markdown
+## Agent Brief
+
+**Category:** enhancement
+**Summary:** Finish the contributor's `--json` output flag for `triage list`
+
+**Current behavior:**
+The PR adds a `--json` flag that serializes the issue list to JSON. The happy
+path works and the diff matches the project's command structure. Two gaps
+remain: errors are still printed as human text (not JSON), and the new flag has
+no test coverage.
+
+**Desired behavior:**
+With `--json`, all output (including errors) is well-formed JSON on stdout,
+and the command's exit codes are unchanged. The existing human-readable output
+is untouched when the flag is absent.
+
+**Key interfaces:**
+- The command's error path should emit `{ "error": string }` under `--json`
+  instead of the plain-text error
+- Reuse the existing serializer the PR already added; don't introduce a second
+
+**Acceptance criteria:**
+- [ ] `triage list --json` emits valid JSON for both success and error cases
+- [ ] Exit codes match the non-JSON command
+- [ ] A test covers the `--json` success output and one error case
+- [ ] Default (non-JSON) output is byte-for-byte unchanged
+
+**Out of scope:**
+- Adding `--json` to any other command
+- Changing the JSON shape of the success payload the PR already defined
+```
+
+### Bad agent brief
+
+```markdown
+## Agent Brief
+
+**Summary:** Fix the triage bug
+
+**What to do:**
+The triage thing is broken. Look at the main file and fix it.
+The function around line 150 has the issue.
+
+**Files to change:**
+- src/triage/handler.ts (line 150)
+- src/types.ts (line 42)
+```
+
+This is bad because:
+- No category
+- Vague description ("the triage thing is broken")
+- References file paths and line numbers that will go stale
+- No acceptance criteria
+- No scope boundaries
+- No description of current vs desired behavior
diff --git a/skills/triage/OUT-OF-SCOPE.md b/skills/triage/OUT-OF-SCOPE.md
new file mode 100644
index 0000000..c9fba2f
--- /dev/null
+++ b/skills/triage/OUT-OF-SCOPE.md
@@ -0,0 +1,105 @@
+# Out-of-Scope Knowledge Base
+
+The `.out-of-scope/` directory in a repo stores persistent records of rejected feature requests. It serves two purposes:
+
+1. **Institutional memory**: why a feature was rejected, so the reasoning isn't lost when the issue is closed
+2. **Deduplication**: when a new issue comes in that matches a prior rejection, the skill can surface the previous decision instead of re-litigating it
+
+## Directory structure
+
+```
+.out-of-scope/
+├── dark-mode.md
+├── plugin-system.md
+└── graphql-api.md
+```
+
+One file per **concept**, not per issue. Multiple issues requesting the same thing are grouped under one file.
+
+## File format
+
+The file should be written in a relaxed, readable style, more like a short design document than a database entry. Use paragraphs, code samples, and examples to make the reasoning clear and useful to someone encountering it for the first time.
+
+```markdown
+# Dark Mode
+
+This project does not support dark mode or user-facing theming.
+
+## Why this is out of scope
+
+The rendering pipeline assumes a single color palette defined in
+`ThemeConfig`. Supporting multiple themes would require:
+
+- A theme context provider wrapping the entire component tree
+- Per-component theme-aware style resolution
+- A persistence layer for user theme preferences
+
+This is a significant architectural change that doesn't align with the
+project's focus on content authoring. Theming is a concern for downstream
+consumers who embed or redistribute the output.
+
+```ts
+// The current ThemeConfig interface is not designed for runtime switching:
+interface ThemeConfig {
+  colors: ColorPalette; // single palette, resolved at build time
+  fonts: FontStack;
+}
+```
+
+## Prior requests
+
+- #42: "Add dark mode support"
+- #87: "Night theme for accessibility"
+- #134: "Dark theme option"
+```
+
+### Naming the file
+
+Use a short, descriptive kebab-case name for the concept: `dark-mode.md`, `plugin-system.md`, `graphql-api.md`. The name should be recognizable enough that someone browsing the directory understands what was rejected without opening the file.
+
+### Writing the reason
+
+The reason should be substantive: not "we don't want this" but why. Good reasons reference:
+
+- Project scope or philosophy ("This project focuses on X; theming is a downstream concern")
+- Technical constraints ("Supporting this would require Y, which conflicts with our Z architecture")
+- Strategic decisions ("We chose to use A instead of B because...")
+
+The reason should be durable. Avoid referencing temporary circumstances ("we're too busy right now"); those aren't real rejections, they're deferrals.
+
+## When to check `.out-of-scope/`
+
+During triage (Step 1: Gather context), read all files in `.out-of-scope/`. When evaluating a new issue:
+
+- Check if the request matches an existing out-of-scope concept
+- Matching is by concept similarity, not keyword: "night theme" matches `dark-mode.md`
+- If there's a match, surface it to the maintainer: "This is similar to `.out-of-scope/dark-mode.md`. We rejected this before because [reason]. Do you still feel the same way?"
+
+The maintainer may:
+
+- **Confirm**: the new issue gets added to the existing file's "Prior requests" list, then closed
+- **Reconsider**: the out-of-scope file gets deleted or updated, and the issue proceeds through normal triage
+- **Disagree**: the issues are related but distinct, proceed with normal triage
+
+## When to write to `.out-of-scope/`
+
+Only when an **enhancement** (not a bug) is *rejected* as `wontfix`. This applies to enhancement PRs exactly as it does to issues: a rejected PR is recorded here so the same request doesn't return as fresh code.
+
+Do **not** write here when something is closed as `wontfix` because it's **already implemented**. That's a built feature, not a rejected one; recording it would poison the dedup checks with false rejections. Instead, the closing comment points to where the feature already lives.
+
+The flow:
+
+1. Maintainer decides a feature request is out of scope
+2. Check if a matching `.out-of-scope/` file already exists
+3. If yes: append the new issue to the "Prior requests" list
+4. If no: create a new file with the concept name, decision, reason, and first prior request
+5. Post a comment on the issue explaining the decision and mentioning the `.out-of-scope/` file
+6. Close the issue with the `wontfix` label
+
+## Updating or removing out-of-scope files
+
+If the maintainer changes their mind about a previously rejected concept:
+
+- Delete the `.out-of-scope/` file
+- The skill does not need to reopen old issues; they're historical records
+- The new issue that triggered the reconsideration proceeds through normal triage
diff --git a/skills/triage/SKILL.md b/skills/triage/SKILL.md
new file mode 100644
index 0000000..543f5a4
--- /dev/null
+++ b/skills/triage/SKILL.md
@@ -0,0 +1,112 @@
+---
+name: triage
+description: Move issues and external PRs through a state machine of triage roles, categorise, verify, grill if needed, and write agent-ready briefs.
+disable-model-invocation: false
+---
+
+# Triage
+
+Move issues on the project issue tracker through a small state machine of triage roles.
+
+If this repo treats external pull requests as a request surface (see the issue-tracker config), triage covers them too: **a PR is an issue with attached code**, using the same roles, same states, and same machine, with a few deltas marked "for a PR" below. Resolve a bare `#42` to an issue or PR per the tracker config.
+
+Every comment or issue posted to the issue tracker during triage **must** start with this disclaimer:
+
+```
+> *This was generated by AI during triage.*
+```
+
+## Reference docs
+
+- [AGENT-BRIEF.md](AGENT-BRIEF.md): how to write durable agent briefs
+- [OUT-OF-SCOPE.md](OUT-OF-SCOPE.md): how the `.out-of-scope/` knowledge base works
+
+## Roles
+
+Two **category** roles:
+
+- `bug`: something is broken
+- `enhancement`: new feature or improvement
+
+Five **state** roles:
+
+- `needs-triage`: maintainer needs to evaluate
+- `needs-info`: waiting on reporter for more information
+- `ready-for-agent`: fully specified, ready for an AFK agent
+- `ready-for-human`: needs human implementation
+- `wontfix`: will not be actioned
+
+For a PR, the same states read against the attached code: `ready-for-agent` means a brief is attached and an agent should take the next step on the diff; `ready-for-human` means it's ready for a human to merge.
+
+Every triaged issue should carry exactly one category role and one state role. If state roles conflict, flag it and ask the maintainer before doing anything else.
+
+These are canonical role names. The actual label strings used in the issue tracker may differ. The mapping should have been provided to you. If not, tell the user to run `/setup-matt-pocock-skills`.
+
+State transitions: an unlabeled issue normally goes to `needs-triage` first; from there it moves to `needs-info`, `ready-for-agent`, `ready-for-human`, or `wontfix`. `needs-info` returns to `needs-triage` once the reporter replies. The maintainer can override at any time; flag transitions that look unusual and ask before proceeding.
+
+## Invocation
+
+The maintainer invokes `/triage` and describes what they want in natural language. Interpret the request and act. Examples:
+
+- "Show me anything that needs my attention"
+- "Let's look at #42" (issue or PR)
+- "Move #42 to ready-for-agent"
+- "What's ready for agents to pick up?"
+
+## Show what needs attention
+
+Query the issue tracker and present three buckets, oldest first:
+
+1. **Unlabeled**: never triaged.
+2. **`needs-triage`**: evaluation in progress.
+3. **`needs-info` with reporter activity since the last triage notes**: needs re-evaluation.
+
+When PRs are in scope, include external PRs in these buckets and tag each line `[PR]` or `[issue]`. Discovery surfaces only *external* PRs (the tracker config defines who counts as external), so a collaborator's in-flight PR is not triage work. This filter is discovery-only; an explicitly named PR is always triaged regardless of author.
+
+Show counts and a one-line summary per item. Let the maintainer pick.
+
+## Triage a specific issue or PR
+
+1. **Gather context.** Read the full issue or PR (body, comments, labels, author, dates; for a PR, the diff too). Parse any prior triage notes so you don't re-ask resolved questions. Explore the codebase using the project's domain glossary, respecting ADRs in the area. Run two checks against the codebase: (a) **redundancy**: search for an existing implementation of the requested behavior by domain concept (not just the request's wording), and report where you looked. If found, it's an already-implemented `wontfix` (step 5). (b) **prior rejection**: read `.out-of-scope/*.md` and surface any that resembles this request.
+
+2. **Recommend.** Tell the maintainer your category and state recommendation with reasoning, plus a brief codebase summary relevant to the request (including whether it's already implemented). Wait for direction.
+
+3. **Verify the claim.** Before any grilling, check that the claim holds up. For a bug, reproduce it from the reporter's steps. For a PR, confirm the diff does what it claims: check it out, run the relevant tests or commands. Report what happened: confirmed (with code path), failed, or insufficient detail (a strong `needs-info` signal). A confirmed verification makes a much stronger agent brief.
+
+4. **Grill (if needed).** If the request needs fleshing out, call the Skill tool twice, for "grilling" and "domain-modeling", and grill it into shape a round of questions at a time, sharpening domain terms and updating `CONTEXT.md`/ADRs inline as decisions land.
+
+5. **Apply the outcome:**
+   - `ready-for-agent`: post an agent brief comment ([AGENT-BRIEF.md](AGENT-BRIEF.md)).
+   - `ready-for-human`: same structure as an agent brief, but note why it can't be delegated (judgment calls, external access, design decisions, manual testing).
+   - `needs-info`: post triage notes (template below).
+   - For `wontfix`, close the issue, with the comment depending on *why*:
+     - **Already implemented**: the change already exists in the codebase. Point to where it lives; do **not** write to `.out-of-scope/` (that KB is for *rejected* requests, not built ones).
+     - **Rejected (bug)**: give a polite explanation, then close.
+     - **Rejected (enhancement)**: write to `.out-of-scope/`, link to it from a comment, then close ([OUT-OF-SCOPE.md](OUT-OF-SCOPE.md)).
+   - `needs-triage`: apply the role. Optional comment if there's partial progress.
+
+## Quick state override
+
+If the maintainer says "move #42 to ready-for-agent", trust them and apply the role directly. Confirm what you're about to do (role changes, comment, close), then act. Skip grilling. If moving to `ready-for-agent` without a grilling session, ask whether they want to write an agent brief.
+
+## Needs-info template
+
+```markdown
+## Triage Notes
+
+**What we've established so far:**
+
+- point 1
+- point 2
+
+**What we still need from you (@reporter):**
+
+- question 1
+- question 2
+```
+
+Capture everything resolved during grilling under "established so far" so the work isn't lost. Questions must be specific and actionable, not "please provide more info".
+
+## Resuming a previous session
+
+If prior triage notes exist on the issue or PR, read them, check whether the reporter has answered any outstanding questions, and present an updated picture before continuing. Don't re-ask resolved questions.
diff --git a/skills/triage/agents/openai.yaml b/skills/triage/agents/openai.yaml
new file mode 100644
index 0000000..d192bda
--- /dev/null
+++ b/skills/triage/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Triage"
+  short_description: "Explicitly invoke the Triage workflow"
+  default_prompt: "Use $triage to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/wait-what/SKILL.md b/skills/wait-what/SKILL.md
new file mode 100644
index 0000000..3bc757b
--- /dev/null
+++ b/skills/wait-what/SKILL.md
@@ -0,0 +1,7 @@
+---
+name: wait-what
+description: "Stop. That last message did not land: re-pitch it."
+disable-model-invocation: false
+---
+
+Wait, I don't understand where you've got to here. Re-pitch that: give me a little bit of context, talk in ASD-STE100 Simplified Technical English, and use the ubiquitous language from `CONTEXT.md` (follow `CONTEXT-MAP.md` to the right one if the repo has more than one).
diff --git a/skills/wait-what/agents/openai.yaml b/skills/wait-what/agents/openai.yaml
new file mode 100644
index 0000000..5587a9a
--- /dev/null
+++ b/skills/wait-what/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Wait What"
+  short_description: "Explicitly invoke the Wait What workflow"
+  default_prompt: "Use $wait-what to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/wayfinder/SKILL.md b/skills/wayfinder/SKILL.md
new file mode 100644
index 0000000..2626f08
--- /dev/null
+++ b/skills/wayfinder/SKILL.md
@@ -0,0 +1,128 @@
+---
+name: wayfinder
+description: Plan a huge chunk of work (more than one agent session can hold) as a shared map of decision tickets on your issue tracker, and resolve them one at a time until the way to the destination is clear.
+disable-model-invocation: false
+---
+
+A loose idea has arrived, too big for one agent session, and wrapped in fog: the way from here to the **destination** isn't visible yet. Wayfinding is about finding that way, not charging at the destination. This skill charts the way as a **shared map** on the repo's issue tracker, then works its **decision tickets** (questions whose resolution is a decision, not slices of a build to execute) one at a time until the route is clear.
+
+The destination varies per effort, and naming it is the first act of charting: it shapes every ticket. It might be a spec to hand off and iterate on, a decision to lock before planning starts, or a change made in place like a data-structure migration. The map is domain-agnostic: engineering work, course content, whatever fits the shape.
+
+## Plan, don't do
+
+Wayfinder is **planning** by default: each ticket resolves a decision, and the map is done when the way is clear, with nothing left to decide before someone goes and does the thing. The pull to just do the work is usually the signal you've reached the edge of the map and it's time to hand off. An effort can override this in its **Notes**, carrying execution into the map itself, but absent that, produce decisions, not deliverables.
+
+## Refer by name
+
+Every map and ticket is an issue, so it has a **name**: its title. In everything the human reads (narration, the map's Decisions-so-far), refer to it by that name, never by a bare id, number, or slug. A wall of `#42, #43, #44` is illegible; names read at a glance. The id and URL don't vanish; a name wraps its link, but they ride _inside_ the name, never stand in for it.
+
+## The Map
+
+The map is a single issue on this repo's issue tracker, labelled `wayfinder:map`, the canonical artifact. Its tickets are child issues of the map.
+
+The map is an **index**, not a store. It lists the decisions made and points at the tickets that hold their detail; a decision lives in exactly one place, its ticket, so the map never restates it, only gists it and links.
+
+**Where the map, its child tickets, blocking, and frontier queries physically live is tracker-specific.** The issue tracker should have been provided to you. If not, tell the user to run `/setup-matt-pocock-skills`. Consult the tracker doc's "Wayfinding operations" section for how _this_ repo expresses them. If no tracker has been provided, default to the local-markdown tracker.
+
+### The map body
+
+The whole map at low resolution, loaded once per session. Open tickets are **not** listed: they are open child issues, found by query.
+
+```markdown
+## Destination
+
+<what reaching the end of this map looks like: the spec, decision, or change this effort is finding its way to. One or two lines; every session orients to it before choosing a ticket.>
+
+## Notes
+
+<domain; skills every session should consult; standing preferences for this effort>
+
+## Decisions so far
+
+<!-- the index: one line per closed ticket, enough to judge relevance, then zoom the link for the detail the ticket holds -->
+
+- [<closed ticket title>](link): <one-line gist of the answer>
+
+## Not yet specified
+
+<!-- see "Fog of war": in-scope fog you can't ticket yet; graduates as the frontier advances -->
+
+## Out of scope
+
+<!-- see "Out of scope": work ruled beyond the destination; closed, never graduates -->
+```
+
+### Tickets
+
+Each ticket is a **child issue** of the map; the tracker's issue id is its identity. Its body is the question, sized to one 100K token agent session:
+
+```markdown
+## Question
+
+<the decision or investigation this ticket resolves>
+```
+
+Each ticket carries a `wayfinder:<type>` label, one of `research`, `prototype`, `grilling`, `task` (see [Ticket Types](#ticket-types)).
+
+A session **claims** a ticket by assigning it to the dev driving the map, **first**, before any work, so concurrent sessions skip it. That assignee _is_ the claim: an open, unassigned ticket is unclaimed.
+
+Blocking uses the tracker's **native** dependency relationship: essential because it renders the frontier _visually_ in the tracker's own UI, so the human sees what's takeable without opening the map. Only a tracker that lacks native blocking falls back to a body convention. A ticket is **unblocked** when every ticket blocking it is closed; the **frontier** is the open, unblocked, unclaimed children, the edge of the known.
+
+The answer isn't part of the body; it's recorded on resolution (see [Work through the map](#work-through-the-map)). Assets created while resolving a ticket are linked from the issue, not pasted in.
+
+## Ticket Types
+
+Every ticket is either **HITL** (human in the loop, worked _with_ a human who speaks for themselves) or **AFK**, driven by the agent alone. A HITL ticket only resolves through that live exchange; the agent never stands in for the human's side of it (a grilling agent that answers its own questions has broken this).
+
+- **Research** (AFK): Reading documentation, third-party APIs, or local resources like knowledge bases to surface a fact a decision waits on. Resolved by a subagent that calls the Skill tool with "research". Use when knowledge outside the current working directory is required.
+- **Prototype** (HITL): Raise the fidelity of the discussion by making a cheap, rough, concrete artifact to react to (an outline, a rough take, a stub, or UI/logic code) by calling the Skill tool with "prototype". Links the prototype as an asset. Use when "how should it look" or "how should it behave" is the key question.
+- **Grilling** (HITL): Conversation. The default case. Always call the Skill tool twice, for "grilling" and "domain-modeling".
+- **Task** (HITL or AFK): Manual work that must happen before a _decision_ can be made: nothing to decide, prototype, or research, but the discussion is blocked until it's done. Signing up for a service so its API can be judged, provisioning access, moving data so its shape can be seen. This is the one type that _does_ rather than decides, and it earns its place by unblocking a decision, not by delivering the destination. The agent drives it alone where it can (AFK); otherwise it hands the human a precise checklist (HITL). Resolved when the work is done; the answer records what was done and any resulting facts (credentials location, new URLs, row counts) later tickets depend on.
+
+## Fog of war
+
+The map is _deliberately_ incomplete: don't chart what you can't yet see. Beyond the live tickets lies the **fog of war**: the dim view of decisions and investigations you can tell are coming but can't yet pin down, because they hang on questions still open. Resolving a ticket clears the fog ahead of it, graduating whatever's now specifiable into fresh tickets, one at a time, until the way to the destination is clear and no tickets remain.
+
+The map's **Not yet specified** section is where that dim view is written down: the suspected question, the area to revisit later. It's the undiscovered frontier _toward_ the destination: everything here is in scope, just not sharp enough to ticket. Write as loosely or as fully as the view allows; it doubles as a signpost for collaborators reading where the effort is headed.
+
+**Fog or ticket?** The test is whether you can state the question precisely now, _not_ whether you can answer it now.
+
+- **Ticket when** the question is already sharp, even if it's blocked and you can't act on it yet.
+- **Not yet specified when** you can't yet phrase it that sharply. Don't pre-slice the fog into ticket-sized pieces: it's coarser than a ticket, and one patch may graduate into several tickets, or none, once the frontier reaches it.
+
+**Not yet specified** excludes what's already decided (Decisions so far), what's already a live ticket, and what's out of scope (the next section).
+
+## Out of scope
+
+Fog only ever gathers _toward_ the destination. The destination fixes the scope, so work beyond it is **out of scope**: it isn't fog, and it doesn't belong in **Not yet specified**. It gets its own **Out of scope** section on the map: work you've consciously ruled out of _this_ effort. Scope, not sharpness, lands it here.
+
+Out-of-scope work never graduates (the frontier stops at the destination), so it returns only if the destination is redrawn, and then as a fresh effort, not a resumption.
+
+Ruling something out of scope is a scoping act, not a step on the route. When a ticket that already exists turns out to sit past the destination (mis-scoped in while charting, or exposed by a resolution), **close it** (a closed ticket is unambiguously off the frontier) and leave one line in the **Out of scope** section: the gist plus why it's out of scope, linking the closed ticket. It stays out of **Decisions so far**, which records the route actually walked; a scope boundary isn't a step on it.
+
+## Invocation
+
+Two modes. Either way, **never resolve more than one ticket per session**, with the exception of research tickets.
+
+### Chart the map
+
+User invokes with a loose idea.
+
+1. **Name the destination.** Call the Skill tool twice, for "grilling" and "domain-modeling", to pin down what this map is finding its way to: the spec, decision, or change. The destination fixes the scope, so it's settled first.
+2. **Map the frontier.** Grill again, **breadth-first** this time: fan out across the whole space rather than deep on any one thread, surfacing the open decisions and the first steps takeable now. **If this surfaces no fog** (the way to the destination is already clear, the whole journey small enough for one session), you don't need a map. Stop and ask the user how they'd like to proceed.
+3. **Create the map** (label `wayfinder:map`): Destination and Notes filled in, Decisions-so-far empty, the fog sketched into **Not yet specified**.
+4. **Create the tickets you can specify now** as child issues of the map, then wire blocking edges in a **second pass** (issues need ids before they can reference each other). Wiring sorts them into the frontier and the blocked; everything you can't yet specify stays in the fog: the **Not yet specified** section.
+5. **Fire the research subagents.** For each `research` ticket you just created, spin up a subagent that calls the Skill tool with "research" to resolve it in parallel, capturing its findings on a throwaway `research/<name>` branch with a context pointer from the ticket.
+6. Stop: charting is one session's work; it hand-resolves nothing.
+
+### Work through the map
+
+User invokes with a map (URL or number). A ticket is **optional**: without one, you pick the next decision, not the user.
+
+1. Load the **map**: the low-res view, not every ticket body.
+2. Choose the ticket. If the user named one, use it. Otherwise take the first frontier ticket in order. **Claim it**: assign it to yourself before any work.
+3. Resolve it. **Zoom as needed**: fetch the full body of any related or closed ticket on demand; call the Skill tool for whichever skills the `## Notes` block names. If in doubt, call the Skill tool twice, for "grilling" and "domain-modeling".
+4. Record the resolution: post the answer as a **resolution comment**, **close** the issue, and **append a context pointer** to the map's Decisions-so-far.
+5. Add newly-surfaced tickets (create-then-wire); graduate any fog the answer has made specifiable, clearing each graduated patch from **Not yet specified** so it lives only as its new ticket. If the answer reveals that a ticket (this one or another) sits beyond the destination, **rule it out of scope** rather than resolving it on the route. If the decision invalidates other parts of the map, update or delete those tickets.
+
+The user may run unblocked tickets in parallel, so expect other sessions to be editing the tracker concurrently.
diff --git a/skills/wayfinder/agents/openai.yaml b/skills/wayfinder/agents/openai.yaml
new file mode 100644
index 0000000..88eb953
--- /dev/null
+++ b/skills/wayfinder/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Wayfinder"
+  short_description: "Explicitly invoke the Wayfinder workflow"
+  default_prompt: "Use $wayfinder to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/wizard/SKILL.md b/skills/wizard/SKILL.md
new file mode 100644
index 0000000..c4294ad
--- /dev/null
+++ b/skills/wizard/SKILL.md
@@ -0,0 +1,44 @@
+---
+name: wizard
+description: Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.
+---
+
+# Wizard
+
+A **wizard** is a bash script that walks a human, step by step, through a manual procedure that's tedious to do by hand and tedious to re-explain to an AI every time. It opens each URL, says exactly what to click and copy, captures the values, writes them where they belong (`.env`, GitHub secrets), confirms at every stage, and shows how many stages are left. It might configure third-party services, run a one-off migration, or move the project from one state to another.
+
+The delightful UX is already solved by [template.sh](template.sh): stage-by-stage progress, confirmation gates, cross-platform URL opening (including WSL), hidden secret entry, idempotent `.env` upserts, `gh secret`/`gh variable` writes, and a closing summary. **Your job is only to scope the procedure and author its stages.** The library above the `STAGES` marker is identical in every wizard; that consistency is the point: never hand-edit it.
+
+A wizard is ephemeral by default: built for one run, saved to a scratch or `scripts/` path, deleted when the job's done. Commit it only when the user wants a repeatable setup path that should live in the repo.
+
+## Process
+
+### 1. Scope the procedure
+
+Work out every manual step the human must take and every value that gets captured along the way. Read the repo first, don't ask cold:
+
+- For setup: `.env`, `.env.example`, `.env.*`, `README`, `docker-compose*`, framework config, and `.github/workflows/*` (every `secrets.*` / `vars.*` reference is a value the wizard must produce).
+- For a migration or transition: the current state, the target state, and the irreversible actions between them.
+
+Then show the user the ordered list of stages and the values each produces, and confirm: they may add, drop, or reorder.
+
+**Done when:** every stage is named in order, and for each captured value you know (a) where the human gets it, (b) where it's written (`.env`, a GitHub secret, both, or nowhere; some stages are pure actions), and (c) whether it's secret (hidden entry) or public.
+
+### 2. Map each stage's journey
+
+For each stage, write the precise path a human follows: which URL to open, what to do there, where a value is shown, which variable it fills: e.g. "Dashboard → Developers → API keys → Reveal test key → copy". Where you don't actually know the current UI or the exact command, say so and ask the user or check the docs: never invent steps that may not exist.
+
+**Done when:** every stage traces to concrete instructions a stranger could follow.
+
+### 3. Author the wizard
+
+Copy `template.sh` to the target path. Replace the example stage with one `stage` per step, in dependency order. Use the library helpers: `stage`, `say`/`step`, `open_url`, `ask`/`ask_secret`, `write_env`, `set_secret`/`set_var`, `pause`/`confirm`. Set `TOTAL_STAGES` to the number of stages you wrote.
+
+Hold the bar the template sets: open the URL before asking for its value, use `ask_secret` for anything secret, `write_env` every persisted value, `set_secret` only the values CI actually needs, and `confirm` before any irreversible action. Each `stage` clears the screen so only the current step is visible: keep a stage to one focused task so nothing the human needs scrolls away. Don't touch the library above the marker.
+
+### 4. Verify and hand off
+
+- `bash -n <script>`; run `shellcheck` if available.
+- `chmod +x <script>`.
+- Don't run it end-to-end yourself: it opens browsers and blocks on human input. Trace it statically instead: every value from step 1 is captured and lands where step 1 said, and every `set_secret` name exactly matches a `secrets.*` reference in CI.
+- Tell the user how to run it. If it's a repeatable setup path, commit it and link it from the README so the next person runs the script instead of asking an AI.
diff --git a/skills/wizard/agents/openai.yaml b/skills/wizard/agents/openai.yaml
new file mode 100644
index 0000000..b601bdf
--- /dev/null
+++ b/skills/wizard/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Wizard"
+  short_description: "Generate an interactive setup wizard"
diff --git a/skills/wizard/template.sh b/skills/wizard/template.sh
new file mode 100644
index 0000000..1b3cdf4
--- /dev/null
+++ b/skills/wizard/template.sh
@@ -0,0 +1,204 @@
+#!/usr/bin/env bash
+#
+# A wizard walks a human through a manual procedure, step by step.
+# Generated by the /wizard skill.
+#
+# Everything above the "STAGES" marker is the wizard library: do not hand-edit
+# it. Author the per-step stages below the marker.
+
+set -euo pipefail
+
+# ──────────────────────────────────────────────────────────────────────────
+# Wizard library: delightful, consistent UX, identical across every wizard.
+# ──────────────────────────────────────────────────────────────────────────
+
+if [[ -t 1 ]] && command -v tput >/dev/null 2>&1 && [[ "$(tput colors 2>/dev/null || echo 0)" -ge 8 ]]; then
+  BOLD=$(tput bold); DIM=$(tput dim); RESET=$(tput sgr0)
+  BLUE=$(tput setaf 4); GREEN=$(tput setaf 2); YELLOW=$(tput setaf 3); RED=$(tput setaf 1)
+else
+  BOLD=""; DIM=""; RESET=""; BLUE=""; GREEN=""; YELLOW=""; RED=""
+fi
+
+# Author sets this at the top of the stages section.
+TOTAL_STAGES=0
+
+_STAGE_INDEX=0
+ENV_FILE="${ENV_FILE:-.env}"
+WRITTEN_ENV=()    # KEYs written to ENV_FILE this run
+WRITTEN_SECRET=() # secret NAMEs set this run
+SKIPPED=()        # things we couldn't do (e.g. gh missing)
+
+# _clear wipes the terminal so only the current step is on screen. No-op when
+# output isn't a terminal, so piped logs stay readable.
+_clear() {
+  [[ -t 1 ]] || return 0
+  if command -v tput >/dev/null 2>&1; then tput clear; else printf '\033[2J\033[3J\033[H'; fi
+}
+
+# banner "Title" shows the opening frame: what this wizard does.
+banner() {
+  _clear
+  printf '\n%s%s  %s%s\n' "$BOLD" "$BLUE" "$1" "$RESET"
+  printf '%s  %s stages%s\n\n' "$DIM" "$TOTAL_STAGES" "$RESET"
+  printf '%s  You drive the browser; this wizard tells you exactly what to do and\n' "$DIM"
+  printf '  captures the values you copy back. Stop any time with Ctrl-C and re-run\n'
+  printf '  later, since it remembers values already saved.%s\n' "$RESET"
+  pause "Ready to start?"
+}
+
+# stage "Name" clears the screen, then announces a stage and shows progress.
+# Clearing keeps only the current step on screen.
+stage() {
+  _clear
+  _STAGE_INDEX=$((_STAGE_INDEX + 1))
+  printf '\n%s%s▸ Stage %s/%s · %s%s\n' \
+    "$BOLD" "$BLUE" "$_STAGE_INDEX" "$TOTAL_STAGES" "$1" "$RESET"
+}
+
+# say "..." prints a plain instruction line.
+say()  { printf '  %s\n' "$1"; }
+# step "..." is a numbered-feeling action the human takes in the browser.
+step() { printf '  %s•%s %s\n' "$BLUE" "$RESET" "$1"; }
+note() { printf '  %s%s%s\n' "$DIM" "$1" "$RESET"; }
+warn() { printf '  %s⚠ %s%s\n' "$YELLOW" "$1" "$RESET"; }
+
+# open_url URL opens it in the human's browser, cross-platform incl. WSL.
+open_url() {
+  local url="$1"
+  printf '  %s↗ opening%s %s\n' "$GREEN" "$RESET" "$url"
+  { if   command -v wslview     >/dev/null 2>&1; then wslview "$url"
+    elif command -v explorer.exe >/dev/null 2>&1; then explorer.exe "$url"
+    elif command -v xdg-open    >/dev/null 2>&1; then xdg-open "$url"
+    elif command -v open        >/dev/null 2>&1; then open "$url"
+    else warn "couldn't open a browser; visit it manually: $url"; fi
+  } >/dev/null 2>&1 || warn "couldn't open a browser, so visit it manually: $url"
+}
+
+# pause "msg" waits for the human to confirm they've done the manual part.
+pause() {
+  printf '  %s%s%s ' "$DIM" "${1:-Press Enter to continue}" "$RESET"
+  read -r _ || true
+}
+
+# confirm "question" is a y/N gate; returns success on yes.
+confirm() {
+  local reply=""
+  printf '  %s? %s [y/N] ' "$YELLOW" "$1"
+  read -r reply || true
+  [[ "$reply" =~ ^[Yy] ]]
+}
+
+# _existing KEY: current value of KEY in ENV_FILE, if any.
+_existing() {
+  [[ -f "$ENV_FILE" ]] || return 1
+  local line; line=$(grep -E "^${1}=" "$ENV_FILE" | tail -n1) || return 1
+  printf '%s' "${line#*=}"
+}
+
+# ask KEY "Prompt" reads a value into $KEY. Offers the existing .env value as
+# a default on re-runs (Enter keeps it). Visible input (non-secret).
+ask() {
+  local key="$1" prompt="$2" current input
+  current=$(_existing "$key" || true)
+  if [[ -n "$current" ]]; then
+    printf '  %s%s%s %s[Enter keeps current]%s ' "$BOLD" "$prompt" "$RESET" "$DIM" "$RESET"
+  else
+    printf '  %s%s%s ' "$BOLD" "$prompt" "$RESET"
+  fi
+  read -r input || true
+  [[ -z "$input" && -n "$current" ]] && input="$current"
+  printf -v "$key" '%s' "$input"
+}
+
+# ask_secret KEY "Prompt" is like ask, but input is hidden.
+ask_secret() {
+  local key="$1" prompt="$2" current input
+  current=$(_existing "$key" || true)
+  if [[ -n "$current" ]]; then
+    printf '  %s%s%s %s[Enter keeps current]%s ' "$BOLD" "$prompt" "$RESET" "$DIM" "$RESET"
+  else
+    printf '  %s%s%s ' "$BOLD" "$prompt" "$RESET"
+  fi
+  read -rs input || true
+  printf '\n'
+  [[ -z "$input" && -n "$current" ]] && input="$current"
+  printf -v "$key" '%s' "$input"
+}
+
+# write_env KEY VALUE upserts KEY=VALUE into ENV_FILE (creates it; replaces
+# any existing line). Idempotent.
+write_env() {
+  local key="$1" value="$2" tmp
+  touch "$ENV_FILE"
+  tmp=$(mktemp)
+  grep -vE "^${key}=" "$ENV_FILE" > "$tmp" || true
+  printf '%s=%s\n' "$key" "$value" >> "$tmp"
+  mv "$tmp" "$ENV_FILE"
+  WRITTEN_ENV+=("$key")
+  printf '  %s✓ wrote%s %s → %s\n' "$GREEN" "$RESET" "$key" "$ENV_FILE"
+}
+
+# set_secret NAME VALUE sets a GitHub Actions repo secret via gh. Falls back
+# to a warning (and records it) if gh is unavailable or unauthenticated.
+set_secret() {
+  local name="$1" value="$2"
+  if command -v gh >/dev/null 2>&1 && gh auth status >/dev/null 2>&1; then
+    if printf '%s' "$value" | gh secret set "$name" >/dev/null 2>&1; then
+      WRITTEN_SECRET+=("$name")
+      printf '  %s✓ set%s GitHub secret %s\n' "$GREEN" "$RESET" "$name"
+      return
+    fi
+  fi
+  SKIPPED+=("GitHub secret $name (set it manually: gh secret set $name)")
+  warn "skipped GitHub secret $name: gh not ready; set it later"
+}
+
+# set_var NAME VALUE sets a GitHub Actions repo variable (non-secret).
+set_var() {
+  local name="$1" value="$2"
+  if command -v gh >/dev/null 2>&1 && gh auth status >/dev/null 2>&1; then
+    if gh variable set "$name" --body "$value" >/dev/null 2>&1; then
+      printf '  %s✓ set%s GitHub variable %s\n' "$GREEN" "$RESET" "$name"
+      return
+    fi
+  fi
+  SKIPPED+=("GitHub variable $name")
+  warn "skipped GitHub variable $name, gh not ready; set it later"
+}
+
+# finish clears, then shows a closing summary of everything configured.
+finish() {
+  _clear
+  printf '\n%s%s  ✓ Setup complete%s\n' "$BOLD" "$GREEN" "$RESET"
+  (( ${#WRITTEN_ENV[@]} ))    && note "wrote ${#WRITTEN_ENV[@]} value(s) to $ENV_FILE: ${WRITTEN_ENV[*]}"
+  (( ${#WRITTEN_SECRET[@]} )) && note "set ${#WRITTEN_SECRET[@]} GitHub secret(s): ${WRITTEN_SECRET[*]}"
+  if (( ${#SKIPPED[@]} )); then
+    printf '\n'; warn "still to do by hand:"
+    for s in "${SKIPPED[@]}"; do note "  - $s"; done
+  fi
+  printf '\n'
+}
+
+# ──────────────────────────────────────────────────────────────────────────
+# STAGES: author this section. One stage() per step the human takes.
+# Replace the example below. Set TOTAL_STAGES to match the stages you write.
+# ──────────────────────────────────────────────────────────────────────────
+
+TOTAL_STAGES=1
+
+banner "Stripe setup"
+
+# ── Example stage: replace with your real steps ───────────────────────────
+stage "Stripe: API keys"
+say "We'll grab your Stripe test keys and store them for local dev + CI."
+open_url "https://dashboard.stripe.com/test/apikeys"
+step "On the API keys page, copy the Publishable key (starts pk_test_)."
+ask STRIPE_PUBLISHABLE_KEY "Paste the publishable key:"
+step "Click 'Reveal test key' on the Secret key row, then copy it."
+ask_secret STRIPE_SECRET_KEY "Paste the secret key:"
+write_env STRIPE_PUBLISHABLE_KEY "$STRIPE_PUBLISHABLE_KEY"
+write_env STRIPE_SECRET_KEY "$STRIPE_SECRET_KEY"
+set_secret STRIPE_SECRET_KEY "$STRIPE_SECRET_KEY"   # CI needs this one
+# ──────────────────────────────────────────────────────────────────────────
+
+finish
diff --git a/skills/writing-beats/SKILL.md b/skills/writing-beats/SKILL.md
new file mode 100644
index 0000000..5c0aeb9
--- /dev/null
+++ b/skills/writing-beats/SKILL.md
@@ -0,0 +1,67 @@
+---
+name: writing-beats
+description: Writing, exploit; assemble raw material into a journey of beats, grounding each term before a beat leans on it.
+disable-model-invocation: false
+---
+
+<what-to-do>
+
+The user has passed (or will pass) a markdown file of raw material. This is **exploit**: the exploring is done, the pile is fixed. Commit to a path through it and mine the pile to fill each beat.
+
+If the user did not say where to save the article, ask once and remember the path.
+
+Then run a beat-by-beat journey, choose-your-own-adventure style:
+
+1. **Establish the prerequisites.** Before any beats, settle with the user what the audience already knows walking in: the concepts that are **grounded** from the start. Everything else must be grounded by a beat before a later beat can use it. See [Grounding](#grounding).
+2. Write 2–3 candidate **starting beats**, drawn from the raw material. Each is a different entry point into the article. Each may only lean on grounded concepts; note what new concepts each one grounds. Show the user the beats before writing to the article file. The user picks one. Preview what beats that pick unlocks, as if the user is seeing a little way down the path.
+3. Once the user picks a starting beat, write **only that beat** to the article file. A beat may be one sentence or several paragraphs, whatever that beat naturally is. Stop there.
+4. Re-read the article file from disk. Then offer 2–3 candidate **next beats**: different directions the journey could pivot to from where the article now stands. Each must be reachable from the current grounded set; note what each one grounds.
+5. Loop steps 3–5 until the article reaches a natural end.
+
+</what-to-do>
+
+<supporting-info>
+
+## Grounding
+
+Every **concept** has to be **grounded** before a beat can lean on it: the audience either walked in knowing it or met it in an earlier beat. A beat that reaches for an ungrounded concept loses the reader; that is the one move the journey can't make. The unit is the concept, not the word for it: a beat can lean on an idea the reader lacks even with no jargon in sight. Where a concept has a name (a **term**), grounding it means landing the idea and the term together.
+
+A concept gets grounded one of two ways:
+
+- **Prerequisite**: grounded before the first beat. The audience brings it. Fixed at the start.
+- **Introduced**: a beat establishes it, and from then on it's grounded for every later beat.
+
+So each beat does two jobs: it **requires** concepts that are already grounded, and it **grounds** new ones. Keep a running list of what's grounded so far, and update it each time a beat lands.
+
+This is what shapes the choose-your-own-adventure. A candidate beat is only reachable if everything it requires is already grounded; picking a beat that grounds concept X unlocks every beat that was waiting on X. When you offer next beats, they must all be reachable from the current grounded set, and say what each one grounds, so the user can see which paths it opens.
+
+The big lever is what you make a prerequisite versus what you ground inside the piece. Demand too much up front and you shut out readers who don't have it; ground too much inside and the early beats drown in definitions. Settle this with the user when you establish prerequisites, and revisit it whenever a tempting beat turns out to require a concept nothing has grounded yet: the fix is either a grounding beat before it, or promoting the concept to a prerequisite.
+
+## What is a beat
+
+A beat is one move in the journey. It does one thing: sets a scene, lands a point, asks a question, drops an aside, twists the angle. Then it stops, leaving the reader at a place where the next beat can pivot.
+
+A beat is sized by what it needs:
+
+- A single sentence if that's all the move is ("And then nothing happened for three weeks.").
+- A short paragraph if the move needs setup.
+- Multiple paragraphs if the beat is a self-contained vignette, argument, or example.
+
+If a "beat" needs five paragraphs and three subheadings, it's not a beat; it's two beats glued together. Split it.
+
+## Pulling from the pile
+
+Pull material from the raw pile to populate each beat. You can paraphrase, split, recombine, or quote. The pile is a quarry.
+
+## Ending the journey
+
+The article ends when the journey is complete, not when the pile is empty. Most piles will have leftover fragments that don't make it in. That is fine; that is the point of having more raw material than you need.
+
+## Writing rhythm
+
+- Append one beat at a time. Never write ahead.
+- Re-read the article file from disk before every write. Preserve user edits absolutely.
+- If the user edits a previous beat substantially, let it change what comes next.
+- If the user says "rewrite that beat" or "go back and try a different beat 3", do it: edit in place, leave the rest alone.
+
+</supporting-info>
diff --git a/skills/writing-beats/agents/openai.yaml b/skills/writing-beats/agents/openai.yaml
new file mode 100644
index 0000000..7289aed
--- /dev/null
+++ b/skills/writing-beats/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Writing Beats"
+  short_description: "Explicitly invoke the Writing Beats workflow"
+  default_prompt: "Use $writing-beats to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/writing-for-agents/SKILL-MECHANICS.md b/skills/writing-for-agents/SKILL-MECHANICS.md
new file mode 100644
index 0000000..9cdbdb2
--- /dev/null
+++ b/skills/writing-for-agents/SKILL-MECHANICS.md
@@ -0,0 +1,22 @@
+# Skill mechanics
+
+The skill-specific branch of [`writing-for-agents`](SKILL.md): what changes when the document is a skill (frontmatter, the invocation choice, and router skills). Everything else about writing it is the universal reference in `SKILL.md`.
+
+## Invocation
+
+Two choices, trading the two loads:
+
+- A **model-invoked** skill keeps a `description`, so the agent can fire it autonomously, and other skills can reach it. You can still type its name: model-invocation always _includes_ user reach; a description only ever adds agent discovery, never removes the human's. The description is the skill's top-level context pointer, forced to stay loaded at all times: permanent context load in exchange for discoverability. A model-invoked skill whose content is all reference is also one home for shared reference: another skill can invoke it, so reference needed by several skills lives in one place. Mechanics: omit `disable-model-invocation`, and write a model-facing description carrying the trigger branches (the pointer-writing rules in `SKILL.md` apply in full).
+- A **user-invoked** skill strips the description from the agent's reach: only the human typing its name can invoke it, and no other skill can. Zero context load, but it spends cognitive load: you are the index that must remember it exists. Mechanics: set `disable-model-invocation: true`; the `description` becomes human-facing: a one-line summary, trigger lists stripped.
+
+Pick model-invocation only when the agent must reach the skill on its own, or another skill must. If it only ever fires by hand, make it user-invoked and pay no context load.
+
+Shared reference that two user-invoked skills both need can live in neither: with no descriptions, neither can fire the other. Push it to a plain file outside the skill system: external reference any skill can point at.
+
+## Splitting by invocation
+
+The invocation cut of splitting (the sequence cut lives in `SKILL.md`): split off a model-invoked skill when you have a distinct leading word that should trigger it on its own (a trigger word you actually use in your prompts), or another skill must reach it. You pay context load for the new always-loaded description, so that independent reach has to be worth it.
+
+## Router skills
+
+When user-invoked skills multiply past what you can remember, that piled-up cognitive load is cured by a **router skill**: one user-invoked skill that names the others and when to reach for each, so the human has one skill to remember instead of many. It can only hint, never fire them: user-invoked skills have no description, so nothing but the human can reach them.
diff --git a/skills/writing-for-agents/SKILL.md b/skills/writing-for-agents/SKILL.md
new file mode 100644
index 0000000..a37608d
--- /dev/null
+++ b/skills/writing-for-agents/SKILL.md
@@ -0,0 +1,81 @@
+---
+name: writing-for-agents
+description: Writing documents for agents. Use when creating or editing skills, or modifying AGENTS.md or CLAUDE.md.
+---
+
+Reference for writing any document an agent consumes: a skill, an `AGENTS.md` / `CLAUDE.md`, a doc reached by a pointer. The packaging differs; the writing does not: the same levers make each one predictable, since the agent takes the same _process_ every run rather than producing the same output.
+
+When the document you're writing is a skill, read [`SKILL-MECHANICS.md`](SKILL-MECHANICS.md) for frontmatter, invocation choice, and router skills.
+
+## Context pointers
+
+A **context pointer** is a reference held in the agent's context that names some out-of-context material and encodes the condition for reaching it. A skill's description is one; a line in `AGENTS.md` naming a doc is the same object. The pointer's _wording_, not its target, decides when the agent reaches the material, and how reliably. A must-have target behind a weakly worded pointer is a variance bug: sharpen the wording first, and inline the material only if sharpening fails.
+
+A pointer does two jobs: state what the material is, and list the **branches** that should trigger reaching it (a branch is a distinct case the document handles, so different runs take different paths through it). Every word of an always-loaded pointer costs on every turn, so it earns even harder pruning than the body:
+
+- **Front-load the leading word**: the pointer is where it does its triggering work.
+- **One trigger per branch.** Synonyms that rename a single branch are one branch written twice; collapse them and keep only genuinely distinct branches.
+- **Cut identity the body already carries.**
+
+## The two loads
+
+Every document and pointer you add spends one of two budgets:
+
+- **Context load** is the cost of always-loaded material on the agent's window: an `AGENTS.md` line, a skill description, anything sitting in context every turn, spending tokens and attention whether or not it fires.
+- **Cognitive load** is the cost on the human: which documents exist and when to reach for each. The human is the index. Not a cost to minimise: it is the price of human agency; spend it where human judgement matters, remove it where it does not.
+
+Material reached only through a pointer escapes context load at the price of the pointer's own line; material with no pointer at all rides entirely on cognitive load.
+
+## Information hierarchy
+
+A document is built from two content types: **steps** (the ordered actions the agent performs) and **reference** (definitions, rules, facts consulted on demand). The two mix freely: all steps (a recipe), all reference (a review's rules, this skill), or both. The core decision is where each piece sits on the **information hierarchy**, a ladder ranked by how immediately the agent needs the material:
+
+1. **In-file step** is the primary tier: what the agent does, in order.
+2. **In-file reference** is consulted on demand. Often a legitimately flat peer-set (every rule of a review on one rung), which is a fine arrangement, not a smell.
+3. **Disclosed reference** is pushed out into a separate file, reached by a context pointer, loaded only when the pointer fires. Spans a sibling file in the same folder through fully external reference that lives anywhere and any document can point at.
+
+Push too little down and the top bloats; push too much and you hide material the agent actually needs. That tension is the whole decision.
+
+**Progressive disclosure** is the move down the ladder (out of the main file and behind a pointer) so the top stays legible. Not primarily a token optimisation: it is how the hierarchy is protected. Branching is the cleanest disclosure test: inline what every branch needs, and push behind a pointer what only some branches reach. When a document has steps, in-file reference that should be disclosed buries them and turns attending to them into a coin-flip: a variance lever, not just a legibility one.
+
+**Co-location** is the within-file companion: where the ladder decides _how far down_ a piece sits, co-location decides _what sits beside it_ once there. Keep a concept's definition, rules, and caveats under one heading rather than scattered, so reading one part brings its neighbours with it. The test: the document should read like documentation written for the agent. Grouped material reads that way; scattered material does not. (Distinct from duplication: that repeats one meaning in two places; scattering fragments one meaning across many.)
+
+**Sprawl** is the failure mode here: a document simply too long, even when every line is live and unique. Attention thins across the excess, and every extra line is one more to keep relevant. The cure is the ladder: disclose reference behind pointers, and split by branch or sequence so each path carries only what it needs.
+
+## Steps and completion criteria
+
+Every step ends on a **completion criterion**, the condition that tells the agent the work is done. Two properties make it a lever:
+
+- **Clarity**: can the agent tell done from not-done? A vague bound ("understanding reached") invites **premature completion**: ending the step before it is genuinely done, attention slipping to _being done_. The visible steps still ahead (the **post-completion steps**) supply the pull; the criterion's clarity is the resistance. Defend in order: **sharpen the bound first** (local and cheap); only if it is irreducibly fuzzy _and_ you observe the rush, hide the later steps by splitting the sequence. Hiding only works across a real context boundary (a hand-off or a subagent dispatch; an inline call leaves the later steps in context and clears nothing).
+- **Demand**: how much it requires. "Every modified model accounted for" forces thorough work where "produce a change list" does not. Demand drives **legwork** (the digging the agent does within the work, latent in the wording rather than written as its own step), and it is not step-bound: "every rule applied" binds a body of flat reference just as "every step done" binds a sequence, which is how an all-reference document still carries an exhaustiveness bar.
+
+The strongest criteria are both checkable and exhaustive.
+
+## When to split
+
+Splitting one document into two spends one of the two loads, so split only when the cut earns it:
+
+- **By sequence**: split a run of steps where the post-completion steps tempt the agent to rush the one in front of it. Keeping them out of view drives more legwork on the current task. Beware the reverse: merging sequences exposes each step's later steps to what follows, inviting premature completion.
+- **By invocation**, skill-specific: see [`SKILL-MECHANICS.md`](SKILL-MECHANICS.md).
+
+## Leading words
+
+A **leading word** is a compact concept already living in the model's pretraining that the agent thinks with while running the document (_lesson_, _fog of war_, _tracer bullets_). Repeated as a token, never as a sentence, it accumulates a distributed definition and anchors a whole region of behaviour in the fewest tokens, by recruiting priors the model already holds. Coining your own works if you define it clearly, but a made-up word recruits no priors: you pay in definition tokens what a pretrained word gives free; reach for an existing word first.
+
+It anchors twice. In the body, _execution_: the agent reaches for the same behaviour every time the word appears, and inside flat reference it focuses attention on a class of thing to look for. In a pointer, _invocation_: when the same word lives in your prompts, your docs, and your codebase, the agent links that shared language to the material and reaches it more reliably.
+
+Hunt for opportunities to refactor with leading words. A triad spelled out at three sites, a pointer spending a sentence to gesture at one idea. Each is a passage begging to collapse into a single token:
+
+- "fast, deterministic, low-overhead" → _tight_ (a _tight_ loop).
+- "a loop you believe in" → _red_, turning a fuzzy gate into a binary observable state (the loop goes _red_ on the bug, or it doesn't).
+
+You win twice: fewer tokens, and a sharper hook for the agent to hang its thinking on. Assume every document is carrying restatements that leading words retire. Go find them.
+
+**Negation** is the failure mode beside this lever: steering by prohibition drags the forbidden behaviour into context and makes it _more_ available, not less. _Don't think of an elephant_, and the elephant is all there is; the negation is a weak modifier the strongly-activated concept overruns, so the ban half-reads as an instruction to do the thing. Prompt the **positive**: state the target behaviour ("write one-line comments") so the banned one is never spoken. A prohibition earns its place only as a hard guardrail you cannot phrase positively; even then, pair it with the positive target so attention lands on what to do.
+
+## Pruning
+
+- Keep each meaning in a **single source of truth**: one authoritative place, so changing the behaviour is a one-place edit. **Duplication** (the same meaning in more than one place) costs maintenance and tokens, and inflates a meaning's prominence on the ladder past its real rank. (The accidental inverse of a leading word, which repeats a token on purpose, never the meaning.)
+- The **environment** is a source of truth too (`package.json` scripts, config files, the directory layout, `--help` output), and a document that restates it is a **cache**: a copy of a lookup, earning its load only when the lookup is expensive. Cache what the agent cannot find by looking: the unwritten convention, the reason behind a choice, the gotcha no config confesses. Leave the one-file, one-command lookups to the environment, where they cannot go stale.
+- Check every line for **relevance**: does it still bear on what the document does? A line loses relevance by never bearing on the task (mere exposition, or a branch that should be disclosed) or by going stale as the behaviour or world it describes changes. Shorter documents are easier to keep relevant. Without a pruning discipline the default fate is **sediment**: stale layers that settle because adding feels safe and removing feels risky, until you must core down through them to find what is still live.
+- Hunt **no-ops** sentence by sentence: an instruction the model already obeys by default pays load to say nothing. The test (does it change behaviour versus the default?) is model-relative, not reader-relative: two people disagreeing about a no-op disagree about the default, and settle it by running the document, not by debate. When a sentence fails, delete the whole sentence rather than trim words from it. The test also grades leading words: a word too weak to beat the default (_be thorough_ when the agent is already thorough-ish) is a no-op, and the fix is a stronger word (_relentless_), not a different technique.
diff --git a/skills/writing-for-agents/agents/openai.yaml b/skills/writing-for-agents/agents/openai.yaml
new file mode 100644
index 0000000..079c933
--- /dev/null
+++ b/skills/writing-for-agents/agents/openai.yaml
@@ -0,0 +1,3 @@
+interface:
+  display_name: "Writing for Agents"
+  short_description: "Write documents agents consume"
diff --git a/skills/writing-fragments/SKILL.md b/skills/writing-fragments/SKILL.md
new file mode 100644
index 0000000..ba607ae
--- /dev/null
+++ b/skills/writing-fragments/SKILL.md
@@ -0,0 +1,79 @@
+---
+name: writing-fragments
+description: "Writing, explore: mine raw fragments, no structure yet."
+disable-model-invocation: false
+---
+
+<what-to-do>
+
+This is pure **explore**: widen the space of what could be written without committing to structure. Committing is _exploit_, a separate skill's job. Run a grilling session that produces fragments, interviewing the user relentlessly about whatever they want to write about. Imposing phases, outlines, or article structure is out of scope here.
+
+As fragments emerge from either side of the conversation, append them to a single markdown file.
+
+If the user did not pass a path, ask once where to save the document, then remember it for the rest of the session.
+
+Capture fragments from the very first thing the user says, including the initial prompt.
+
+On first write, put a single H1 at the top with a working title (it can change later) and nothing else: no metadata, no TOC, no date.
+
+</what-to-do>
+
+<supporting-info>
+
+## What is a fragment
+
+A fragment is any piece of text that might survive into the final article. It must be _readable by the author_ (the author can tell what it means), but it does not need to define its terms or be comprehensible to a cold reader. The bar is "is this a piece of good writing?", not "is this a self-contained argument?"
+
+Fragments are deliberately heterogeneous. Examples of what could be a fragment:
+
+- A sharp sentence you'd want to deploy somewhere but don't yet know where.
+- A claim with a one-line justification.
+- A vignette: a thing that happened, a code snippet, a scenario, an analogy.
+- A half-thought: "something about how X feels like Y, work this out later."
+- A quote, a piece of dialogue, an overheard line.
+- A list of related observations that hang together by feel.
+- A complaint, a confession, a punchline.
+- A **leading word**: a compact metaphor or coinage the whole piece can hang on (one term that names the idea, the way _tracer bullets_ or _fog of war_ names a whole pattern).
+
+Of these, the leading word is the most valuable fragment to land. It is load-bearing: name the right one in explore and it shapes the structure, the transitions, and the title later, paying dividends through the entire exploit phase. When the conversation circles a recurring idea, push to coin a word for it.
+
+The novelist's diary is the model: years of unstructured noticings that later get mined for raw material. Fragments are noticings.
+
+## File format
+
+```markdown
+# Working title
+
+A first fragment lives here.
+
+It can be multiple paragraphs. It can include lists, code, quotes: whatever
+shape the fragment naturally takes.
+
+---
+
+A second fragment.
+
+---
+
+> A quoted line that the user wants to keep around.
+
+A reaction to it.
+
+---
+
+- A cluster of related observations
+- That hang together by feel
+- And want to be near each other
+```
+
+Fragments are separated by a horizontal rule (`\n---\n`). No headings inside the body. No tags. No order beyond the order they were added.
+
+## Writing rhythm
+
+Append silently. Don't ask permission for each fragment. Mention what you added in passing ("adding that"), but don't interrupt the conversation with save dialogs.
+
+Before every write: re-read the file from disk. The user may have edited, reordered, or deleted fragments between turns, so preserve their changes. Never overwrite the file; only append (or, if the user asks, edit a specific fragment in place).
+
+The user can say "cut the last one", "rewrite that one sharper", "merge those two" at any time. Treat those as first-class instructions.
+
+</supporting-info>
diff --git a/skills/writing-fragments/agents/openai.yaml b/skills/writing-fragments/agents/openai.yaml
new file mode 100644
index 0000000..3e4c880
--- /dev/null
+++ b/skills/writing-fragments/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Writing Fragments"
+  short_description: "Explicitly invoke the Writing Fragments workflow"
+  default_prompt: "Use $writing-fragments to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/skills/writing-shape/SKILL.md b/skills/writing-shape/SKILL.md
new file mode 100644
index 0000000..2018e91
--- /dev/null
+++ b/skills/writing-shape/SKILL.md
@@ -0,0 +1,79 @@
+---
+name: writing-shape
+description: "Writing, exploit: shape raw material into an article, paragraph by paragraph."
+disable-model-invocation: false
+---
+
+<what-to-do>
+
+The user has passed (or will pass) a markdown file of raw material. Treat it as the input pile: anything from a tidy list of fragments to a wall of unstructured prose to a transcript. The format does not matter. Read it end-to-end before doing anything else.
+
+Then run a shaping session that produces a separate article document. This is **exploit**: the exploring is done, the pile is fixed: commit to a structure and mine the pile to fill it. Do not edit the raw material file: it is read-only to this skill.
+
+If the user did not say where to save the article, ask once and remember the path.
+
+</what-to-do>
+
+<supporting-info>
+
+## The loop
+
+1. **Read the pile.** Read the input file in full. Form a sense of what's in it.
+2. **Establish the prerequisites.** Settle with the user what the reader knows walking in: the concepts that are **grounded** from the start. Everything else must be grounded by a block before a later block can lean on it. See [Grounding](#grounding).
+3. **Draft 2–3 candidate openings.** Each opening should imply a different thesis or angle for the article. Show all of them. Force the user to pick or compose a hybrid. The chosen opening defines what the rest of the article must do.
+4. **Grow paragraph by paragraph.** After the opening lands, ask "given this opening, what does the reader need to hear next?" Pull material from the pile to answer. The next block may only lean on grounded concepts, and grounds new ones as it lands. Argue about the form the next block takes: a paragraph, a list, a table, a callout, a quote, a code block. Each format choice should be deliberate and defensible.
+5. **Append to the article file as you go.** Don't batch. Write each agreed paragraph or block immediately so the user can see the article taking shape.
+6. **Loop step 4 until the article is done.** The user decides when it's done.
+
+## Grounding
+
+Every **concept** has to be **grounded** before a block can lean on it: the reader either walked in knowing it or met it in an earlier block. A block that reaches for an ungrounded concept loses the reader. The unit is the concept, not the word for it: a block can lean on an idea the reader lacks even with no jargon in sight. Where a concept has a name (a **term**), grounding it means landing the idea and the term together.
+
+A concept gets grounded one of two ways:
+
+- **Prerequisite**: grounded before the opening. The reader brings it. Fixed at the start.
+- **Introduced**: a block establishes it, and from then on it's grounded for the rest of the article.
+
+Keep a running list of what's grounded. When you ask "what does the reader need to hear next?", an ungrounded concept the next move needs is itself the answer: ground it first (here or in an earlier block) or you can't make the move. This is the gap-naming of [Pulling from the pile](#pulling-from-the-pile) one level up: there the pile is missing material; here the article is missing a foundation.
+
+The lever is what you make a prerequisite versus what you ground inside the article. Demand too much up front and you shut readers out; ground too much inside and the opening drowns in definitions. Settle it with the user when you establish prerequisites.
+
+## Conversational feel
+
+This is a grilling session inverted. In ideation, the question was "what are you actually noticing?" Here it's "what is this article actually arguing, and in what order does the reader need to hear it?" Push back. Refuse to let weak transitions slide. If a paragraph doesn't earn its place, cut it.
+
+Specific moves to keep using:
+
+- "What does this paragraph do for the reader that the previous one didn't?"
+- "If I cut this, what breaks?"
+- "Is this prose, or should it be a list? Why prose?"
+- "This sentence is doing two jobs: split it or pick one."
+- "The opening promised X. We've drifted to Y. Either re-thread it or change the opening."
+
+## Pulling from the pile
+
+Treat the raw material as a quarry, not a script. Pull a fragment, rework it to fit the surrounding paragraph, and place it. A fragment may be split across multiple paragraphs, merged with another, or paraphrased. The pile's job is to be mined; the article's job is to read as one voice.
+
+If the pile lacks something the article needs, name the gap explicitly: "We need an example here and the pile doesn't have one. Give me one now or we cut this section."
+
+## Format arguments to actually have
+
+When choosing how to render a block, weigh these tradeoffs out loud with the user, not silently:
+
+- **Prose vs. list.** Prose carries argument; lists carry parallel items. If items aren't truly parallel, prose is better. If they are, a list is faster to scan.
+- **Inline vs. callout.** Tips, warnings, and asides go in callouts (`> [!TIP]`, `> [!NOTE]`), but only if they'd genuinely derail the main argument inline. Otherwise leave them inline.
+- **Table vs. repeated structure.** If the same shape repeats 3+ times with the same fields, a table. Otherwise prose with bold leads.
+- **Quote vs. paraphrase.** Quote when the original wording is the point. Paraphrase when only the idea matters.
+- **Code block vs. inline code.** Multi-line, runnable, or illustrative → block. Single token or identifier → inline.
+
+## Writing rhythm
+
+Append to the article file as each block is agreed. Re-read the file from disk before every write: the user may have edited between turns. Never overwrite blindly. If the user wants a paragraph rewritten, edit that specific paragraph in place; leave the rest alone.
+
+## Out of scope
+
+- Mining for new fragments that aren't in the pile (handle gaps as in "Pulling from the pile").
+- Editing the raw material file.
+- Publishing, formatting for a specific platform, or adding frontmatter the user didn't ask for.
+
+</supporting-info>
diff --git a/skills/writing-shape/agents/openai.yaml b/skills/writing-shape/agents/openai.yaml
new file mode 100644
index 0000000..24b2594
--- /dev/null
+++ b/skills/writing-shape/agents/openai.yaml
@@ -0,0 +1,6 @@
+interface:
+  display_name: "Writing Shape"
+  short_description: "Explicitly invoke the Writing Shape workflow"
+  default_prompt: "Use $writing-shape to guide this task."
+policy:
+  allow_implicit_invocation: false
diff --git a/src/app/about/page.tsx b/src/app/about/page.tsx
new file mode 100644
index 0000000..a1c2f7f
--- /dev/null
+++ b/src/app/about/page.tsx
@@ -0,0 +1,12 @@
+export default function AboutPage() {
+  return (
+    <main>
+      <h1>About Our Coffee Shop</h1>
+      <h2>Our Story</h2>
+      <p>
+        We serve freshly brewed coffee and a welcoming place to pause, meet, or get a little work done. Our menu brings
+        together familiar favorites and seasonal selections made with care.
+      </p>
+    </main>
+  );
+}
diff --git a/src/app/api/example/route.ts b/src/app/api/example/route.ts
index 52fd379..1eed28a 100644
--- a/src/app/api/example/route.ts
+++ b/src/app/api/example/route.ts
@@ -1,6 +1,8 @@
 import connectDB from "@/database/db";
 import { NextResponse } from "next/server";
 
+export const dynamic = "force-dynamic";
+
 /**
  * Example GET API route
  * @returns {message: string}
diff --git a/src/app/api/offerings/[id]/route.ts b/src/app/api/offerings/[id]/route.ts
new file mode 100644
index 0000000..597cf2a
--- /dev/null
+++ b/src/app/api/offerings/[id]/route.ts
@@ -0,0 +1,14 @@
+import { offeringStore } from "@/database/offeringStore";
+import { createOfferingHandlers } from "@/server/offering-handlers";
+
+export const dynamic = "force-dynamic";
+export const runtime = "nodejs";
+const handlers = createOfferingHandlers(offeringStore);
+
+export async function PUT(request: Request, { params }: { params: Promise<{ id: string }> }) {
+  return handlers.PUT(request, (await params).id);
+}
+
+export async function DELETE(request: Request, { params }: { params: Promise<{ id: string }> }) {
+  return handlers.DELETE(request, (await params).id);
+}
diff --git a/src/app/api/offerings/route.ts b/src/app/api/offerings/route.ts
new file mode 100644
index 0000000..143e0df
--- /dev/null
+++ b/src/app/api/offerings/route.ts
@@ -0,0 +1,9 @@
+import { offeringStore } from "@/database/offeringStore";
+import { createOfferingHandlers } from "@/server/offering-handlers";
+
+export const dynamic = "force-dynamic";
+
+export const runtime = "nodejs";
+const handlers = createOfferingHandlers(offeringStore);
+export const GET = handlers.GET;
+export const POST = handlers.POST;
diff --git a/src/app/contact/page.tsx b/src/app/contact/page.tsx
new file mode 100644
index 0000000..7cefbf7
--- /dev/null
+++ b/src/app/contact/page.tsx
@@ -0,0 +1,11 @@
+export default function ContactPage() {
+  return (
+    <main>
+      <h1>Contact Us</h1>
+      <p>
+        Have a question about our menu, shop, or current offerings? Get in touch with our team, and we will be glad to
+        help you plan your visit.
+      </p>
+    </main>
+  );
+}
diff --git a/src/app/favicon.ico b/src/app/favicon.ico
deleted file mode 100644
index 4570eb8..0000000
Binary files a/src/app/favicon.ico and /dev/null differ
diff --git a/src/app/globals.css b/src/app/globals.css
index e69de29..4d70eea 100644
--- a/src/app/globals.css
+++ b/src/app/globals.css
@@ -0,0 +1,24 @@
+* {
+  box-sizing: border-box;
+}
+
+body {
+  margin: 0;
+  background: #fffdfb;
+  color: #2f241f;
+  font-family: Arial, Helvetica, sans-serif;
+  line-height: 1.5;
+}
+
+main:not([class]) {
+  max-width: 56rem;
+  margin: 0 auto;
+  padding: 2rem 1rem;
+}
+
+button,
+input,
+select,
+textarea {
+  font: inherit;
+}
diff --git a/src/app/icon.svg b/src/app/icon.svg
new file mode 100644
index 0000000..d2d1c65
--- /dev/null
+++ b/src/app/icon.svg
@@ -0,0 +1,11 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64">
+  <rect width="64" height="64" rx="14" fill="#f6f1eb" />
+  <path d="M17 28h28v12a14 14 0 0 1-28 0V28Z" fill="#7d4d3e" />
+  <path
+    d="M45 30h3a7 7 0 0 1 0 14h-5M14 53h36M25 11c-6 5 6 7 0 12M36 11c-6 5 6 7 0 12"
+    fill="none"
+    stroke="#7d4d3e"
+    stroke-width="4"
+    stroke-linecap="round"
+  />
+</svg>
diff --git a/src/app/layout.tsx b/src/app/layout.tsx
index 5f544c3..18b60e1 100644
--- a/src/app/layout.tsx
+++ b/src/app/layout.tsx
@@ -1,16 +1,19 @@
 import type { Metadata } from "next";
+import Navbar from "@/components/Navbar";
 import "./globals.css";
 
-//! Update metadata to match your project
 export const metadata: Metadata = {
-  title: "Create Next App",
-  description: "Generated by create next app",
+  title: "Coffee Shop",
+  description: "Learn about the shop, explore the menu, and find current specials.",
 };
 
 export default function RootLayout({ children }: { children: React.ReactNode }) {
   return (
     <html lang="en">
-      <body>{children}</body>
+      <body>
+        <Navbar />
+        {children}
+      </body>
     </html>
   );
 }
diff --git a/src/app/manage-offerings/page.tsx b/src/app/manage-offerings/page.tsx
new file mode 100644
index 0000000..27a3006
--- /dev/null
+++ b/src/app/manage-offerings/page.tsx
@@ -0,0 +1,12 @@
+import { headers } from "next/headers";
+import { notFound } from "next/navigation";
+import ManageOfferings from "@/components/ManageOfferings";
+import { hasManagementAccess } from "@/server/management-access";
+
+export const dynamic = "force-dynamic";
+
+export default async function ManageOfferingsPage() {
+  // Independently enforce access here as well as in middleware.
+  if (!(await hasManagementAccess((await headers()).get("authorization")))) notFound();
+  return <ManageOfferings />;
+}
diff --git a/src/app/menu/page.tsx b/src/app/menu/page.tsx
new file mode 100644
index 0000000..482ffd0
--- /dev/null
+++ b/src/app/menu/page.tsx
@@ -0,0 +1,11 @@
+import OfferingsPage from "@/components/OfferingsPage";
+
+export default function MenuPage() {
+  return (
+    <OfferingsPage
+      title="Menu"
+      intro="Find your next favorite cup, made fresh for you."
+      emptyMessage="No menu items are available right now."
+    />
+  );
+}
diff --git a/src/app/page.tsx b/src/app/page.tsx
index ba5e808..01bd7eb 100644
--- a/src/app/page.tsx
+++ b/src/app/page.tsx
@@ -1,9 +1,6 @@
-import Navbar from "@/components/Navbar";
-
 export default function Home() {
   return (
     <main>
-      <Navbar />
       <h1>Home</h1>
     </main>
   );
diff --git a/src/app/specials/page.tsx b/src/app/specials/page.tsx
new file mode 100644
index 0000000..1b74c28
--- /dev/null
+++ b/src/app/specials/page.tsx
@@ -0,0 +1,12 @@
+import OfferingsPage from "@/components/OfferingsPage";
+
+export default function SpecialsPage() {
+  return (
+    <OfferingsPage
+      title="Specials"
+      intro="Discover the drinks we are featuring right now."
+      emptyMessage="No specials are available right now."
+      specialsOnly
+    />
+  );
+}
diff --git a/src/components/ManageOfferings.tsx b/src/components/ManageOfferings.tsx
new file mode 100644
index 0000000..971b028
--- /dev/null
+++ b/src/components/ManageOfferings.tsx
@@ -0,0 +1,311 @@
+"use client";
+
+import { useCallback, useEffect, useRef, useState } from "react";
+import OfferingForm, { type OfferingFormValues } from "@/components/OfferingForm";
+import SpecialOfferingControl from "@/components/SpecialOfferingControl";
+import {
+  fetchOfferings,
+  OfferingApiError,
+  parseOfferingPrice,
+  sortOfferings,
+  submitOffering,
+  validateOfferingInput,
+  updateOffering,
+  deleteOffering,
+} from "@/lib/offerings";
+import { DEFAULT_SPECIAL_OFFER, type CreateOfferingInput, type Offering } from "@/types/offering";
+import styles from "@/styles/manage-offerings.module.css";
+
+const initialFormState: OfferingFormValues = {
+  name: "",
+  description: "",
+  price: "",
+  category: "Coffee",
+};
+
+export default function ManageOfferings() {
+  const [offerings, setOfferings] = useState<Offering[]>([]);
+  const [isLoading, setIsLoading] = useState(true);
+  const [loadError, setLoadError] = useState("");
+  const [formValues, setFormValues] = useState<OfferingFormValues>(initialFormState);
+  const [specialOffer, setSpecialOffer] = useState(DEFAULT_SPECIAL_OFFER);
+  const [errors, setErrors] = useState<Record<string, string>>({});
+  const [isSubmitting, setIsSubmitting] = useState(false);
+  const pending = useRef(false);
+  const [editingId, setEditingId] = useState<string | null>(null);
+  const [deletingId, setDeletingId] = useState<string | null>(null);
+  const [feedback, setFeedback] = useState<{
+    tone: "info" | "success" | "error";
+    text: string;
+  } | null>(null);
+
+  const loadOfferings = useCallback(async () => {
+    setIsLoading(true);
+    try {
+      const nextOfferings = await fetchOfferings();
+      setOfferings(sortOfferings(nextOfferings));
+      setLoadError("");
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "The offering list could not be loaded.";
+      setLoadError(message);
+      throw error;
+    } finally {
+      setIsLoading(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    void loadOfferings().catch(() => undefined);
+  }, [loadOfferings]);
+
+  const updateField = <K extends keyof OfferingFormValues>(field: K, value: OfferingFormValues[K]) => {
+    setFormValues((current) => ({ ...current, [field]: value }));
+    setErrors((current) => ({ ...current, [field]: "" }));
+  };
+
+  const handleSubmit = async (event: React.FormEvent<HTMLFormElement>, submittedSpecialOffer: boolean) => {
+    event.preventDefault();
+    if (pending.current) {
+      return;
+    }
+
+    const submission: Partial<CreateOfferingInput> = {
+      name: formValues.name,
+      description: formValues.description,
+      category: formValues.category,
+      price: parseOfferingPrice(formValues.price),
+      specialOffer: submittedSpecialOffer,
+    };
+
+    const nextErrors = validateOfferingInput(submission);
+    if (Object.keys(nextErrors).length > 0) {
+      setErrors(nextErrors);
+      setFeedback({
+        tone: "error",
+        text: "Please fix the highlighted fields before saving.",
+      });
+      return;
+    }
+
+    const savedAttempt = { ...formValues };
+    pending.current = true;
+    setIsSubmitting(true);
+    setFeedback({ tone: "info", text: "Saving offering..." });
+    setErrors({});
+
+    try {
+      const createdOffering = editingId
+        ? await updateOffering(editingId, submission)
+        : await submitOffering(submission);
+      setOfferings((current) =>
+        sortOfferings([...current.filter((offering) => offering.ID !== createdOffering.ID), createdOffering]),
+      );
+      setFormValues(initialFormState);
+      setSpecialOffer(DEFAULT_SPECIAL_OFFER);
+      setEditingId(null);
+      setFeedback({
+        tone: "success",
+        text: editingId ? "Offering updated successfully." : "Offering saved successfully.",
+      });
+
+      try {
+        await loadOfferings();
+      } catch {
+        setFeedback({
+          tone: "success",
+          text: "Offering saved, but the list could not refresh. Please reload the page to confirm the update.",
+        });
+      }
+    } catch (error) {
+      setFormValues(savedAttempt);
+      if (error instanceof OfferingApiError) {
+        setErrors(error.fields);
+      }
+      setFeedback({
+        tone: "error",
+        text: error instanceof Error ? error.message : "The offering could not be saved.",
+      });
+    } finally {
+      pending.current = false;
+      setIsSubmitting(false);
+    }
+  };
+
+  const cancelEdit = () => {
+    setEditingId(null);
+    setFormValues(initialFormState);
+    setSpecialOffer(DEFAULT_SPECIAL_OFFER);
+    setErrors({});
+  };
+
+  const beginEdit = (offering: Offering) => {
+    setEditingId(offering.ID);
+    setFormValues({
+      name: offering.name,
+      description: offering.description,
+      price: String(offering.price),
+      category: offering.category,
+    });
+    setSpecialOffer(offering.specialOffer);
+    setErrors({});
+    setFeedback(null);
+    setDeletingId(null);
+    document.getElementById("offering-name")?.focus();
+  };
+
+  const confirmDelete = async (offering: Offering) => {
+    if (pending.current) return;
+    pending.current = true;
+    setIsSubmitting(true);
+    setFeedback({ tone: "info", text: "Deleting offering..." });
+    try {
+      await deleteOffering(offering.ID);
+      setOfferings((current) => current.filter((item) => item.ID !== offering.ID));
+      if (editingId === offering.ID) cancelEdit();
+      setDeletingId(null);
+      setFeedback({ tone: "success", text: "Offering deleted successfully." });
+      try {
+        await loadOfferings();
+      } catch {
+        setFeedback({
+          tone: "success",
+          text: "Offering deleted, but the list could not refresh. Please retry loading the list.",
+        });
+      }
+    } catch (error) {
+      setFeedback({
+        tone: "error",
+        text: error instanceof Error ? error.message : "The offering could not be deleted.",
+      });
+    } finally {
+      pending.current = false;
+      setIsSubmitting(false);
+    }
+  };
+
+  return (
+    <main className={styles.page}>
+      <header className={styles.header}>
+        <h1>Manage offerings</h1>
+        <p>Add, edit, and remove offerings shown on the Menu and Specials pages.</p>
+      </header>
+
+      {feedback ? (
+        <div
+          role={feedback.tone === "error" ? "alert" : "status"}
+          aria-live="polite"
+          className={`${styles.feedback} ${
+            feedback.tone === "success"
+              ? styles.feedbackSuccess
+              : feedback.tone === "error"
+                ? styles.feedbackError
+                : styles.feedbackInfo
+          }`}
+        >
+          {feedback.text}
+        </div>
+      ) : null}
+
+      <div className={styles.layout}>
+        <section className={styles.panel} aria-label="Offerings list">
+          <h2>Current offerings</h2>
+
+          {isLoading ? (
+            <p role="status" className={styles.helperText}>
+              Loading current offerings…
+            </p>
+          ) : loadError ? (
+            <div>
+              <p role="alert" className={styles.inlineError}>
+                {loadError}
+              </p>
+              <button
+                className={styles.button}
+                disabled={isSubmitting}
+                onClick={() => void loadOfferings().catch(() => undefined)}
+              >
+                Retry loading offerings
+              </button>
+            </div>
+          ) : offerings.length === 0 ? (
+            <div className={styles.empty}>No offerings are available right now.</div>
+          ) : (
+            <div className={styles.list}>
+              {offerings.map((offering) => (
+                <article key={offering.ID} className={styles.offerItem}>
+                  <h3>{offering.name}</h3>
+                  <div className={styles.offerMeta}>
+                    <span>{offering.category}</span>
+                    <span>{`$${offering.price.toFixed(2)}`}</span>
+                    {offering.specialOffer ? <span className={styles.badge}>Special offer</span> : null}
+                  </div>
+                  <p>{offering.description}</p>
+                  <div className={styles.actions}>
+                    <button
+                      className={styles.button}
+                      disabled={isSubmitting}
+                      aria-label={`Edit ${offering.name}`}
+                      onClick={() => beginEdit(offering)}
+                    >
+                      Edit
+                    </button>
+                    <button
+                      className={styles.button}
+                      disabled={isSubmitting}
+                      aria-label={`Delete ${offering.name}`}
+                      onClick={() => setDeletingId(offering.ID)}
+                    >
+                      Delete
+                    </button>
+                  </div>
+                  {deletingId === offering.ID && (
+                    <div
+                      className={styles.confirmation}
+                      role="group"
+                      aria-label={`Confirm deletion of ${offering.name}`}
+                    >
+                      <p>Delete {offering.name}? This removes it from the customer pages.</p>
+                      <div className={styles.actions}>
+                        <button
+                          className={styles.button}
+                          disabled={isSubmitting}
+                          onClick={() => void confirmDelete(offering)}
+                        >
+                          Confirm delete
+                        </button>
+                        <button className={styles.button} disabled={isSubmitting} onClick={() => setDeletingId(null)}>
+                          Cancel deletion
+                        </button>
+                      </div>
+                    </div>
+                  )}
+                </article>
+              ))}
+            </div>
+          )}
+        </section>
+
+        <section className={styles.panel} aria-label={editingId ? "Edit offering form" : "Create offering form"}>
+          <h2>{editingId ? "Edit offering" : "Add offering"}</h2>
+
+          <SpecialOfferingControl checked={specialOffer} onChange={setSpecialOffer} disabled={isSubmitting} />
+
+          <OfferingForm
+            formValues={formValues}
+            errors={errors}
+            isSubmitting={isSubmitting}
+            onFieldChange={updateField}
+            onSubmit={handleSubmit}
+            specialOffer={specialOffer}
+            submitLabel={editingId ? "Save changes" : "Save offering"}
+          />
+          {editingId && (
+            <button className={styles.button} disabled={isSubmitting} onClick={cancelEdit}>
+              Cancel editing
+            </button>
+          )}
+        </section>
+      </div>
+    </main>
+  );
+}
diff --git a/src/components/Navbar.tsx b/src/components/Navbar.tsx
index 17e7836..7afcdb1 100644
--- a/src/components/Navbar.tsx
+++ b/src/components/Navbar.tsx
@@ -1,3 +1,38 @@
+"use client";
+
+import Link from "next/link";
+import { usePathname } from "next/navigation";
+
+import styles from "@/styles/navbar.module.css";
+
+const links = [
+  { href: "/", label: "Home" },
+  { href: "/about", label: "About" },
+  { href: "/menu", label: "Menu" },
+  { href: "/specials", label: "Specials" },
+  { href: "/contact", label: "Contact" },
+];
+
 export default function Navbar() {
-  return <div>Navbar</div>;
+  const pathname = usePathname();
+  return (
+    <nav className={styles.nav} aria-label="Main">
+      <ul className={styles.list}>
+        {links.map((link) => {
+          const isActive = link.href === pathname;
+          return (
+            <li key={link.href}>
+              <Link
+                aria-current={isActive ? "page" : undefined}
+                className={isActive ? `${styles.link} ${styles.active}` : styles.link}
+                href={link.href}
+              >
+                {link.label}
+              </Link>
+            </li>
+          );
+        })}
+      </ul>
+    </nav>
+  );
 }
diff --git a/src/components/OfferingForm.tsx b/src/components/OfferingForm.tsx
new file mode 100644
index 0000000..19d6966
--- /dev/null
+++ b/src/components/OfferingForm.tsx
@@ -0,0 +1,125 @@
+import { isOfferingCategory } from "@/lib/offerings";
+import styles from "@/styles/manage-offerings.module.css";
+import { DEFAULT_SPECIAL_OFFER, OFFERING_INPUT_LIMITS, type OfferingCategory } from "@/types/offering";
+
+export type OfferingFormValues = {
+  name: string;
+  description: string;
+  price: string;
+  category: OfferingCategory;
+};
+
+type OfferingFormProps = {
+  formValues: OfferingFormValues;
+  errors: Record<string, string>;
+  isSubmitting: boolean;
+  onFieldChange: <K extends keyof OfferingFormValues>(field: K, value: OfferingFormValues[K]) => void;
+  onSubmit: (event: React.FormEvent<HTMLFormElement>, specialOffer: boolean) => Promise<void>;
+  specialOffer?: boolean;
+  submitLabel?: string;
+};
+
+export default function OfferingForm({
+  formValues,
+  errors,
+  isSubmitting,
+  onFieldChange,
+  onSubmit,
+  specialOffer = DEFAULT_SPECIAL_OFFER,
+  submitLabel = "Save offering",
+}: OfferingFormProps) {
+  return (
+    <form className={styles.form} onSubmit={(event) => onSubmit(event, specialOffer)} noValidate>
+      <div className={styles.field}>
+        <label htmlFor="offering-name">Name</label>
+        <input
+          id="offering-name"
+          disabled={isSubmitting}
+          className={styles.input}
+          type="text"
+          value={formValues.name}
+          maxLength={OFFERING_INPUT_LIMITS.name}
+          aria-describedby={errors.name ? "offering-name-error" : undefined}
+          onChange={(event) => onFieldChange("name", event.target.value)}
+          aria-invalid={Boolean(errors.name)}
+        />
+        {errors.name ? (
+          <p id="offering-name-error" className={styles.inlineError}>
+            {errors.name}
+          </p>
+        ) : null}
+      </div>
+
+      <div className={styles.field}>
+        <label htmlFor="offering-description">Description</label>
+        <textarea
+          id="offering-description"
+          disabled={isSubmitting}
+          className={styles.textarea}
+          value={formValues.description}
+          maxLength={OFFERING_INPUT_LIMITS.description}
+          aria-describedby={errors.description ? "offering-description-error" : undefined}
+          onChange={(event) => onFieldChange("description", event.target.value)}
+          aria-invalid={Boolean(errors.description)}
+        />
+        {errors.description ? (
+          <p id="offering-description-error" className={styles.inlineError}>
+            {errors.description}
+          </p>
+        ) : null}
+      </div>
+
+      <div className={styles.field}>
+        <label htmlFor="offering-price">Price</label>
+        <input
+          id="offering-price"
+          disabled={isSubmitting}
+          className={styles.input}
+          type="number"
+          min="0"
+          step="0.01"
+          value={formValues.price}
+          aria-describedby={errors.price ? "offering-price-error" : undefined}
+          onChange={(event) => onFieldChange("price", event.target.value)}
+          aria-invalid={Boolean(errors.price)}
+        />
+        {errors.price ? (
+          <p id="offering-price-error" className={styles.inlineError}>
+            {errors.price}
+          </p>
+        ) : null}
+      </div>
+
+      <div className={styles.field}>
+        <label htmlFor="offering-category">Category</label>
+        <select
+          id="offering-category"
+          disabled={isSubmitting}
+          className={styles.select}
+          value={formValues.category}
+          aria-describedby={errors.category ? "offering-category-error" : undefined}
+          onChange={(event) => {
+            const category = event.target.value;
+            if (isOfferingCategory(category)) {
+              onFieldChange("category", category);
+            }
+          }}
+          aria-invalid={Boolean(errors.category)}
+        >
+          <option value="Coffee">Coffee</option>
+          <option value="Tea">Tea</option>
+          <option value="Smoothie">Smoothie</option>
+        </select>
+        {errors.category ? (
+          <p id="offering-category-error" className={styles.inlineError}>
+            {errors.category}
+          </p>
+        ) : null}
+      </div>
+
+      <button type="submit" className={styles.button} disabled={isSubmitting}>
+        {isSubmitting ? "Saving…" : submitLabel}
+      </button>
+    </form>
+  );
+}
diff --git a/src/components/OfferingsPage.tsx b/src/components/OfferingsPage.tsx
new file mode 100644
index 0000000..8f69f10
--- /dev/null
+++ b/src/components/OfferingsPage.tsx
@@ -0,0 +1,97 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import type { Offering } from "@/types/offering";
+import styles from "@/styles/offerings.module.css";
+import { isOffering, readOfferingError } from "@/lib/offering-response";
+
+interface OfferingsPageProps {
+  title: string;
+  intro: string;
+  emptyMessage: string;
+  specialsOnly?: boolean;
+}
+
+export default function OfferingsPage({ title, intro, emptyMessage, specialsOnly = false }: OfferingsPageProps) {
+  const [offerings, setOfferings] = useState<Offering[]>([]);
+  const [isLoading, setIsLoading] = useState<boolean>(true);
+  const [error, setError] = useState<string | null>(null);
+  const [attempt, setAttempt] = useState(0);
+
+  useEffect(() => {
+    let isCurrent = true;
+    const fallbackMessage = `Unable to load ${title.toLowerCase()}.`;
+
+    async function loadOfferings() {
+      setIsLoading(true);
+      setError(null);
+
+      try {
+        const response = await fetch("/api/offerings");
+
+        if (!response.ok) {
+          throw new Error((await readOfferingError(response, fallbackMessage)).message);
+        }
+
+        const data: unknown = await response.json();
+
+        if (!Array.isArray(data) || !data.every(isOffering)) {
+          throw new Error(fallbackMessage);
+        }
+
+        if (isCurrent) {
+          setOfferings(data as Offering[]);
+        }
+      } catch (requestError) {
+        if (isCurrent) {
+          setOfferings([]);
+          setError(requestError instanceof Error ? requestError.message : fallbackMessage);
+        }
+      } finally {
+        if (isCurrent) {
+          setIsLoading(false);
+        }
+      }
+    }
+
+    loadOfferings();
+
+    return () => {
+      isCurrent = false;
+    };
+  }, [title, attempt]);
+
+  const visibleOfferings = specialsOnly ? offerings.filter((offering) => offering.specialOffer === true) : offerings;
+
+  return (
+    <main className={styles.page}>
+      <header className={styles.header}>
+        <p className={styles.eyebrow}>Our offerings</p>
+        <h1>{title}</h1>
+        <p>{intro}</p>
+      </header>
+
+      {isLoading && <p role="status">Loading {title.toLowerCase()}...</p>}
+      {error && <p role="alert">{error}</p>}
+      {error && (
+        <button className={styles.retry} onClick={() => setAttempt((current) => current + 1)}>
+          Try again
+        </button>
+      )}
+      {!isLoading && !error && visibleOfferings.length === 0 && <p>{emptyMessage}</p>}
+      {!isLoading && !error && visibleOfferings.length > 0 && (
+        <ul className={styles.list}>
+          {visibleOfferings.map((offering) => (
+            <li className={styles.item} key={offering.ID}>
+              <div>
+                <h2>{offering.name}</h2>
+                <p>{offering.description}</p>
+              </div>
+              <span className={styles.price}>${offering.price.toFixed(2)}</span>
+            </li>
+          ))}
+        </ul>
+      )}
+    </main>
+  );
+}
diff --git a/src/components/SpecialOfferingControl.tsx b/src/components/SpecialOfferingControl.tsx
new file mode 100644
index 0000000..276a03d
--- /dev/null
+++ b/src/components/SpecialOfferingControl.tsx
@@ -0,0 +1,26 @@
+"use client";
+
+import { useId } from "react";
+import styles from "@/styles/special-offering-control.module.css";
+
+type SpecialOfferingControlProps = {
+  checked: boolean;
+  onChange: (next: boolean) => void;
+  disabled?: boolean;
+};
+
+export default function SpecialOfferingControl({ checked, onChange, disabled = false }: SpecialOfferingControlProps) {
+  const id = useId();
+  return (
+    <label className={styles.control} htmlFor={id}>
+      <input
+        id={id}
+        type="checkbox"
+        checked={checked}
+        disabled={disabled}
+        onChange={(event) => onChange(event.currentTarget.checked)}
+      />
+      <span>Special offering</span>
+    </label>
+  );
+}
diff --git a/src/database/db.ts b/src/database/db.ts
index c54cfb5..3e7f3ea 100644
--- a/src/database/db.ts
+++ b/src/database/db.ts
@@ -1,20 +1,55 @@
 import mongoose from "mongoose";
 
-const url: string = process.env.MONGO_URI as string;
-let connection: typeof mongoose;
+interface MongooseCache {
+  conn: typeof mongoose | null;
+  promise: Promise<typeof mongoose> | null;
+}
+
+declare global {
+  var mongooseCache: MongooseCache | undefined;
+}
+
+const cached: MongooseCache = globalThis.mongooseCache ?? {
+  conn: null,
+  promise: null,
+};
+
+globalThis.mongooseCache = cached;
 
 /**
- * Makes a connection to a MongoDB database. If a connection already exists, does nothing
- * Call this function before all api routes
- * @returns {Promise<typeof mongoose>}
+ * Makes a connection to MongoDB and reuses it across API requests and hot reloads.
  */
-const connectDB = async () => {
-  if (!connection) {
-    // uncomment this line once you have the MONGO_URI set up
-    // connection = await mongoose.connect(url);
-    connection = "remove me" as any; // remove me
-    return connection;
+const connectDB = async (): Promise<typeof mongoose> => {
+  const url = process.env.MONGO_URI;
+
+  if (!url) {
+    throw new Error("MONGO_URI is not defined");
+  }
+
+  if (cached.conn) {
+    return cached.conn;
+  }
+
+  if (!cached.promise) {
+    cached.promise = mongoose
+      .connect(url, {
+        serverSelectionTimeoutMS: 5000,
+        connectTimeoutMS: 5000,
+        socketTimeoutMS: 10000,
+        maxPoolSize: 5,
+        bufferCommands: false,
+      })
+      .then(() => mongoose);
   }
+
+  try {
+    cached.conn = await cached.promise;
+  } catch (error) {
+    cached.promise = null;
+    throw error;
+  }
+
+  return cached.conn;
 };
 
 export default connectDB;
diff --git a/src/database/offering.ts b/src/database/offering.ts
new file mode 100644
index 0000000..065e5ad
--- /dev/null
+++ b/src/database/offering.ts
@@ -0,0 +1,148 @@
+import type { Offering } from "@/types/offering";
+
+/** Mock offerings shared by the API and menu pages. */
+export const OfferingList: Offering[] = [
+  {
+    ID: "1",
+    name: "Cappuccino",
+    description: "A delicious cappuccino with steamed milk and foam",
+    price: 5.9,
+    category: "Coffee",
+    specialOffer: false,
+  },
+
+  {
+    ID: "2",
+    name: "Pumpkin Spice Latte",
+    description: "A delicious pumpkin spice latte with steamed milk and foam",
+    price: 6.2,
+    category: "Coffee",
+    specialOffer: true,
+  },
+
+  {
+    ID: "3",
+    name: "Golden Hour Cold Brew",
+    description: "A delicious cold brew with a golden hour twist",
+    price: 6.5,
+    category: "Coffee",
+    specialOffer: true,
+  },
+
+  {
+    ID: "4",
+    name: "Mocha",
+    description: "A delicious mocha with steamed milk and chocolate",
+    price: 5.99,
+    category: "Coffee",
+    specialOffer: false,
+  },
+
+  {
+    ID: "5",
+    name: "Espresso",
+    description: "A delicious espresso with rich and bold flavors",
+    price: 5.0,
+    category: "Coffee",
+    specialOffer: false,
+  },
+
+  {
+    ID: "6",
+    name: "Latte",
+    description: "Espresso with steamed milk topped with a light layer of foam",
+    price: 5.5,
+    category: "Coffee",
+    specialOffer: false,
+  },
+
+  {
+    ID: "7",
+    name: "Cortado",
+    description: "Equal parts espresso and warm steamed milk",
+    price: 6.2,
+    category: "Coffee",
+    specialOffer: false,
+  },
+
+  {
+    ID: "8",
+    name: "English Breakfast Tea",
+    description: "A brewed black tea with a dash of milk",
+    price: 4.5,
+    category: "Tea",
+    specialOffer: false,
+  },
+
+  {
+    ID: "9",
+    name: "Matcha",
+    description: "Green tea with milk",
+    price: 6.2,
+    category: "Tea",
+    specialOffer: false,
+  },
+
+  {
+    ID: "10",
+    name: "Chai Latte",
+    description: "Black tea combined with herbs, spices, and steamed milk",
+    price: 6.2,
+    category: "Tea",
+    specialOffer: false,
+  },
+
+  {
+    ID: "11",
+    name: "Chamomile Tea",
+    description: "An herbal tea made from chamomile flowers",
+    price: 4.5,
+    category: "Tea",
+    specialOffer: false,
+  },
+
+  {
+    ID: "12",
+    name: "Cafe au Lait",
+    description: "French press coffee with steamed milk",
+    price: 6.2,
+    category: "Coffee",
+    specialOffer: false,
+  },
+
+  {
+    ID: "13",
+    name: "London Fog",
+    description: "Earl Grey tea with vanilla syrup with steamed milk",
+    price: 5.0,
+    category: "Tea",
+    specialOffer: false,
+  },
+
+  {
+    ID: "14",
+    name: "Iced Hibiscus Berry",
+    description: "A caffeine-free herbal tea naturally sweetened and served over ice",
+    price: 5.99,
+    category: "Tea",
+    specialOffer: false,
+  },
+
+  {
+    ID: "15",
+    name: "Fruit Smoothie",
+    description: "Real fruit puree blended with ice and yogurt",
+    price: 5.99,
+    category: "Smoothie",
+    specialOffer: false,
+  },
+
+  {
+    ID: "16",
+    name: "Hojicha Latte",
+    description: "Roasted green tea powder mixed with steamed milk",
+    price: 6.6,
+    category: "Tea",
+    specialOffer: true,
+  },
+];
diff --git a/src/database/offeringModel.ts b/src/database/offeringModel.ts
new file mode 100644
index 0000000..859dc7d
--- /dev/null
+++ b/src/database/offeringModel.ts
@@ -0,0 +1,33 @@
+import mongoose, { Schema, type Model, type Types } from "mongoose";
+import { DEFAULT_SPECIAL_OFFER, OFFERING_CATEGORIES, OFFERING_INPUT_LIMITS, type Offering } from "@/types/offering";
+
+export type OfferingRecord = Omit<Offering, "ID"> & { _id: Types.ObjectId; seedKey?: string };
+
+const offeringSchema = new Schema<OfferingRecord>({
+  name: { type: String, required: true, trim: true, maxlength: OFFERING_INPUT_LIMITS.name },
+  description: { type: String, required: true, trim: true, maxlength: OFFERING_INPUT_LIMITS.description },
+  price: {
+    type: Number,
+    required: true,
+    min: 0,
+    validate: {
+      validator: (value: number) => {
+        const cents = value * 10 ** OFFERING_INPUT_LIMITS.priceDecimalPlaces;
+        return Number.isFinite(value) && Math.abs(cents - Math.round(cents)) <= 1e-8;
+      },
+      message: "Price must be finite and have at most two decimal places.",
+    },
+  },
+  category: { type: String, required: true, enum: OFFERING_CATEGORIES },
+  specialOffer: { type: Boolean, required: true, default: DEFAULT_SPECIAL_OFFER },
+  seedKey: { type: String, immutable: true },
+});
+
+// Unseeded offerings may share names and have no seedKey. Only seed identities are unique.
+offeringSchema.index({ seedKey: 1 }, { unique: true, partialFilterExpression: { seedKey: { $type: "string" } } });
+
+const OfferingModel =
+  (mongoose.models.Offering as Model<OfferingRecord> | undefined) ??
+  mongoose.model<OfferingRecord>("Offering", offeringSchema);
+
+export default OfferingModel;
diff --git a/src/database/offeringStore.ts b/src/database/offeringStore.ts
new file mode 100644
index 0000000..d5635d6
--- /dev/null
+++ b/src/database/offeringStore.ts
@@ -0,0 +1,42 @@
+import connectDB from "@/database/db";
+import OfferingModel, { type OfferingRecord } from "@/database/offeringModel";
+import { sortOfferings } from "@/lib/offerings";
+import type { CreateOfferingInput, Offering } from "@/types/offering";
+import type { OfferingStore } from "@/server/offering-handlers";
+
+function publicOffering(record: OfferingRecord): Offering {
+  return {
+    ID: record._id.toString(),
+    name: record.name,
+    description: record.description,
+    price: record.price,
+    category: record.category,
+    specialOffer: record.specialOffer,
+  };
+}
+
+/** Real storage boundary supplied to the separately developed request handlers. */
+export const offeringStore: OfferingStore = {
+  async list(): Promise<Offering[]> {
+    await connectDB();
+    return sortOfferings((await OfferingModel.find().lean()).map(publicOffering));
+  },
+  async create(input: CreateOfferingInput): Promise<Offering> {
+    await connectDB();
+    const { name, description, price, category, specialOffer } = input;
+    return publicOffering(await OfferingModel.create({ name, description, price, category, specialOffer }));
+  },
+  async update(id, input) {
+    await connectDB();
+    const record = await OfferingModel.findByIdAndUpdate(
+      id,
+      { $set: { ...input, specialOffer: input.specialOffer ?? false } },
+      { new: true, runValidators: true },
+    );
+    return record ? publicOffering(record) : null;
+  },
+  async remove(id) {
+    await connectDB();
+    return (await OfferingModel.deleteOne({ _id: id })).deletedCount === 1;
+  },
+};
diff --git a/src/database/seedOffering.ts b/src/database/seedOffering.ts
new file mode 100644
index 0000000..c77369f
--- /dev/null
+++ b/src/database/seedOffering.ts
@@ -0,0 +1,21 @@
+import connectDB from "@/database/db";
+import OfferingModel from "@/database/offeringModel";
+import { OfferingList } from "@/database/offering";
+
+/** Deliberate starting-data import, never a runtime fallback or automatic startup action. */
+export async function seedOfferings(): Promise<number> {
+  await connectDB();
+  await OfferingModel.init();
+  const operations = OfferingList.map(({ ID, ...details }) => {
+    const seedKey = `coffee-shop-v1-${ID}`;
+    return {
+      updateOne: {
+        filter: { seedKey },
+        update: { $setOnInsert: { ...details, seedKey } },
+        upsert: true,
+      },
+    };
+  });
+  const result = await OfferingModel.bulkWrite(operations);
+  return result.upsertedCount;
+}
diff --git a/src/lib/offering-response.ts b/src/lib/offering-response.ts
new file mode 100644
index 0000000..d752812
--- /dev/null
+++ b/src/lib/offering-response.ts
@@ -0,0 +1,38 @@
+import { OFFERING_CATEGORIES, type Offering } from "@/types/offering";
+
+/** Validate external responses before sorting or rendering them. */
+export function isOffering(value: unknown): value is Offering {
+  if (!value || typeof value !== "object") return false;
+  const item = value as Partial<Offering>;
+  return (
+    typeof item.ID === "string" &&
+    item.ID.length > 0 &&
+    typeof item.name === "string" &&
+    item.name.trim().length > 0 &&
+    typeof item.description === "string" &&
+    typeof item.price === "number" &&
+    Number.isFinite(item.price) &&
+    item.price >= 0 &&
+    OFFERING_CATEGORIES.some((category) => category === item.category) &&
+    typeof item.specialOffer === "boolean"
+  );
+}
+/** Parse only displayable fields from an untrusted API error response. */
+export async function readOfferingError(response: Response, fallback: string) {
+  const body: unknown = await response.json().catch(() => null);
+  const error = body && typeof body === "object" && "error" in body ? body.error : null;
+  if (!error || typeof error !== "object") return { message: fallback, fields: {} };
+  const message =
+    "message" in error && typeof error.message === "string" && error.message.trim() ? error.message : fallback;
+  const rawFields = "fields" in error ? error.fields : null;
+  const fields: Record<string, string> = {};
+  if (rawFields && typeof rawFields === "object" && !Array.isArray(rawFields))
+    for (const [key, value] of Object.entries(rawFields))
+      if (
+        ["name", "description", "price", "category", "specialOffer"].includes(key) &&
+        typeof value === "string" &&
+        value.trim()
+      )
+        fields[key] = value;
+  return { message, fields };
+}
diff --git a/src/lib/offerings.test.ts b/src/lib/offerings.test.ts
new file mode 100644
index 0000000..5399f70
--- /dev/null
+++ b/src/lib/offerings.test.ts
@@ -0,0 +1,189 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import {
+  fetchOfferings,
+  OfferingApiError,
+  sortOfferings,
+  submitOffering,
+  validateOfferingInput,
+} from "@/lib/offerings";
+import { OFFERING_INPUT_LIMITS, type Offering } from "@/types/offering";
+
+const sampleOfferings: Offering[] = [
+  {
+    ID: "offer-2",
+    name: "Cinnamon Latte",
+    description: "Warm coffee with cinnamon sweetness.",
+    price: 5.5,
+    category: "Coffee",
+    specialOffer: false,
+  },
+  {
+    ID: "offer-1",
+    name: "Apple Tea",
+    description: "A bright and refreshing tea blend.",
+    price: 4.5,
+    category: "Tea",
+    specialOffer: true,
+  },
+];
+
+test("fetchOfferings uses the server message and safely falls back for non-JSON failures", async () => {
+  const originalFetch = globalThis.fetch;
+  try {
+    globalThis.fetch = async () =>
+      new Response(JSON.stringify({ error: { code: "DATABASE_UNAVAILABLE", message: "Please try again later." } }), {
+        status: 503,
+      });
+    await assert.rejects(fetchOfferings(), { message: "Please try again later." });
+    globalThis.fetch = async () => new Response("Service unavailable", { status: 503 });
+    await assert.rejects(fetchOfferings(), { message: "We could not load the current offerings." });
+  } finally {
+    globalThis.fetch = originalFetch;
+  }
+});
+
+test("sortOfferings orders by name and then id", () => {
+  assert.deepStrictEqual(sortOfferings(sampleOfferings), [sampleOfferings[1], sampleOfferings[0]]);
+});
+
+test("validateOfferingInput catches malformed data", () => {
+  const errors = validateOfferingInput({
+    name: "",
+    description: "   ",
+    price: "not-a-number",
+    category: "Bakery",
+    specialOffer: "false",
+  });
+
+  assert.equal(errors.name, "Name is required.");
+  assert.equal(errors.description, "Description is required.");
+  assert.equal(errors.price, "Price must be a valid number.");
+  assert.equal(errors.category, "Choose a valid category.");
+  assert.equal(errors.specialOffer, "Special offer must be a boolean.");
+});
+
+test("validateOfferingInput accepts at most two decimal places and trims text", () => {
+  assert.deepStrictEqual(
+    validateOfferingInput({
+      name: "  Latte  ",
+      description: "  Espresso with steamed milk.  ",
+      price: 4.25,
+      category: "Coffee",
+    }),
+    {},
+  );
+  assert.equal(
+    validateOfferingInput({
+      name: "Latte",
+      description: "Espresso with steamed milk.",
+      price: 4.251,
+      category: "Coffee",
+    }).price,
+    "Price can have at most two decimal places.",
+  );
+});
+
+test("validateOfferingInput enforces shared text limits and accepts zero price", () => {
+  assert.deepStrictEqual(
+    validateOfferingInput({
+      name: "x".repeat(OFFERING_INPUT_LIMITS.name + 1),
+      description: "x".repeat(OFFERING_INPUT_LIMITS.description + 1),
+      price: 0,
+      category: "Smoothie",
+    }),
+    {
+      name: `Name must be ${OFFERING_INPUT_LIMITS.name} characters or fewer.`,
+      description: `Description must be ${OFFERING_INPUT_LIMITS.description} characters or fewer.`,
+    },
+  );
+});
+
+test("submitOffering trims text and always sends the special-offer boolean", async () => {
+  const originalFetch = globalThis.fetch;
+  const requestBodies: unknown[] = [];
+  let createdId = 0;
+  globalThis.fetch = async (_input, init) => {
+    requestBodies.push(JSON.parse(String(init?.body)));
+    createdId += 1;
+    return new Response(
+      JSON.stringify({
+        ID: `created-${createdId}`,
+        name: "Coffee",
+        description: "A fresh cup.",
+        price: 2.5,
+        category: "Coffee",
+        specialOffer: false,
+      }),
+      { status: 201 },
+    );
+  };
+
+  try {
+    await submitOffering({
+      name: " Coffee ",
+      description: " A fresh cup. ",
+      price: 2.5,
+      category: "Coffee",
+      specialOffer: true,
+    });
+    await submitOffering({
+      name: "Tea",
+      description: "A fresh tea.",
+      price: 2,
+      category: "Tea",
+    });
+  } finally {
+    globalThis.fetch = originalFetch;
+  }
+
+  assert.deepStrictEqual(requestBodies, [
+    {
+      name: "Coffee",
+      description: "A fresh cup.",
+      price: 2.5,
+      category: "Coffee",
+      specialOffer: true,
+    },
+    {
+      name: "Tea",
+      description: "A fresh tea.",
+      price: 2,
+      category: "Tea",
+      specialOffer: false,
+    },
+  ]);
+});
+
+test("submitOffering exposes server field errors from the shared error envelope", async () => {
+  const originalFetch = globalThis.fetch;
+  globalThis.fetch = async () =>
+    new Response(
+      JSON.stringify({
+        error: {
+          code: "INVALID_INPUT",
+          message: "Fix the highlighted fields.",
+          fields: { name: "Name is already invalid." },
+        },
+      }),
+      { status: 400 },
+    );
+
+  try {
+    await assert.rejects(
+      submitOffering({
+        name: "Coffee",
+        description: "A fresh cup.",
+        price: 2.5,
+        category: "Coffee",
+      }),
+      (error: unknown) =>
+        error instanceof OfferingApiError &&
+        error.message === "Fix the highlighted fields." &&
+        error.fields.name === "Name is already invalid.",
+    );
+  } finally {
+    globalThis.fetch = originalFetch;
+  }
+});
diff --git a/src/lib/offerings.ts b/src/lib/offerings.ts
new file mode 100644
index 0000000..1a331bd
--- /dev/null
+++ b/src/lib/offerings.ts
@@ -0,0 +1,181 @@
+import {
+  DEFAULT_SPECIAL_OFFER,
+  OFFERING_CATEGORIES,
+  OFFERING_INPUT_LIMITS,
+  type CreateOfferingInput,
+  type OfferingErrorCode,
+  type Offering,
+  type OfferingCategory,
+  type OfferingErrorResponse,
+} from "@/types/offering";
+import { isOffering, readOfferingError } from "@/lib/offering-response";
+
+export function isOfferingCategory(value: string): value is OfferingCategory {
+  return OFFERING_CATEGORIES.some((category) => category === value);
+}
+
+type OfferingInputValues = Omit<
+  Partial<CreateOfferingInput>,
+  "name" | "description" | "category" | "price" | "specialOffer"
+> & {
+  name?: unknown;
+  description?: unknown;
+  category?: unknown;
+  price?: unknown;
+  specialOffer?: unknown;
+};
+
+export function cleanText(value: unknown): string {
+  return typeof value === "string" ? value.trim() : "";
+}
+
+export function parseOfferingPrice(value: unknown): number {
+  if (typeof value === "string" && value.trim() === "") {
+    return Number.NaN;
+  }
+  const parsed = Number(value);
+  return Number.isFinite(parsed) ? parsed : Number.NaN;
+}
+
+export function normalizeOfferingInput(input: OfferingInputValues): CreateOfferingInput {
+  const price = parseOfferingPrice(input.price);
+  const category = cleanText(input.category);
+
+  if (!isOfferingCategory(category)) {
+    throw new Error("Choose a valid category.");
+  }
+  if (input.specialOffer !== undefined && typeof input.specialOffer !== "boolean") {
+    throw new Error("Special offer must be a boolean.");
+  }
+
+  return {
+    name: cleanText(input.name),
+    description: cleanText(input.description),
+    category,
+    price: Number.isFinite(price) ? price : Number.NaN,
+    specialOffer: input.specialOffer ?? DEFAULT_SPECIAL_OFFER,
+  };
+}
+
+export function validateOfferingInput(input: OfferingInputValues): Record<string, string> {
+  const errors: Record<string, string> = {};
+  const name = cleanText(input.name);
+  if (!name) {
+    errors.name = "Name is required.";
+  } else if (name.length > OFFERING_INPUT_LIMITS.name) {
+    errors.name = `Name must be ${OFFERING_INPUT_LIMITS.name} characters or fewer.`;
+  }
+
+  const description = cleanText(input.description);
+  if (!description) {
+    errors.description = "Description is required.";
+  } else if (description.length > OFFERING_INPUT_LIMITS.description) {
+    errors.description = `Description must be ${OFFERING_INPUT_LIMITS.description} characters or fewer.`;
+  }
+
+  const category = cleanText(input.category);
+  if (!category) {
+    errors.category = "Category is required.";
+  } else if (!isOfferingCategory(category)) {
+    errors.category = "Choose a valid category.";
+  }
+
+  if (input.specialOffer !== undefined && typeof input.specialOffer !== "boolean") {
+    errors.specialOffer = "Special offer must be a boolean.";
+  }
+
+  const price = parseOfferingPrice(input.price);
+  if (!Number.isFinite(price)) {
+    errors.price = "Price must be a valid number.";
+  } else if (price < 0) {
+    errors.price = "Price must be zero or greater.";
+  } else if (
+    Math.abs(
+      price * 10 ** OFFERING_INPUT_LIMITS.priceDecimalPlaces -
+        Math.round(price * 10 ** OFFERING_INPUT_LIMITS.priceDecimalPlaces),
+    ) > 1e-8
+  ) {
+    errors.price = "Price can have at most two decimal places.";
+  }
+
+  return errors;
+}
+
+export function toErrorEnvelope(
+  code: OfferingErrorCode,
+  message: string,
+  fields?: Record<string, string>,
+): OfferingErrorResponse {
+  return {
+    error: {
+      code,
+      message,
+      ...(fields && Object.keys(fields).length > 0 ? { fields } : {}),
+    },
+  };
+}
+
+export function sortOfferings(offerings: Offering[]): Offering[] {
+  return [...offerings].sort((left, right) => left.name.localeCompare(right.name) || left.ID.localeCompare(right.ID));
+}
+
+export async function fetchOfferings(signal?: AbortSignal): Promise<Offering[]> {
+  const response = await fetch("/api/offerings", { method: "GET", signal });
+  if (!response.ok) {
+    throw new Error((await readOfferingError(response, "We could not load the current offerings.")).message);
+  }
+
+  const payload: unknown = await response.json();
+  if (!Array.isArray(payload) || !payload.every(isOffering))
+    throw new Error("The offering list could not be read. Please try again.");
+  return sortOfferings(payload);
+}
+
+export class OfferingApiError extends Error {
+  constructor(
+    message: string,
+    readonly fields: Record<string, string> = {},
+  ) {
+    super(message);
+    this.name = "OfferingApiError";
+  }
+}
+
+export async function submitOffering(input: Partial<CreateOfferingInput>): Promise<Offering> {
+  return saveOffering("/api/offerings", "POST", input);
+}
+
+export async function updateOffering(id: string, input: Partial<CreateOfferingInput>): Promise<Offering> {
+  return saveOffering(`/api/offerings/${encodeURIComponent(id)}`, "PUT", input);
+}
+
+async function saveOffering(
+  url: string,
+  method: "POST" | "PUT",
+  input: Partial<CreateOfferingInput>,
+): Promise<Offering> {
+  const normalized = normalizeOfferingInput(input);
+
+  const response = await fetch(url, {
+    method,
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(normalized),
+  });
+
+  if (!response.ok) {
+    const { message, fields } = await readOfferingError(response, "The offering could not be saved.");
+    throw new OfferingApiError(message, fields);
+  }
+
+  const offering: unknown = await response.json();
+  if (!isOffering(offering))
+    throw new OfferingApiError("The server returned an unreadable save result. Reload the list before trying again.");
+  return offering;
+}
+
+export async function deleteOffering(id: string): Promise<void> {
+  const response = await fetch(`/api/offerings/${encodeURIComponent(id)}`, { method: "DELETE" });
+  if (!response.ok) {
+    throw new OfferingApiError((await readOfferingError(response, "The offering could not be deleted.")).message);
+  }
+}
diff --git a/src/proxy.ts b/src/proxy.ts
new file mode 100644
index 0000000..8f16fb6
--- /dev/null
+++ b/src/proxy.ts
@@ -0,0 +1,8 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { requireManagementAccess } from "@/server/management-access";
+
+export async function proxy(request: NextRequest) {
+  return (await requireManagementAccess(request, false)) ?? NextResponse.next();
+}
+
+export const config = { matcher: ["/manage-offerings/:path*"] };
diff --git a/src/server/management-access.ts b/src/server/management-access.ts
new file mode 100644
index 0000000..4e6987f
--- /dev/null
+++ b/src/server/management-access.ts
@@ -0,0 +1,50 @@
+import { toErrorEnvelope } from "@/lib/offerings";
+
+/** Shared by Node route handlers, the server page, and proxy. Credentials never enter client code. */
+export async function hasManagementAccess(authorization: string | null): Promise<boolean> {
+  const username = process.env.MANAGEMENT_USERNAME;
+  const password = process.env.MANAGEMENT_PASSWORD;
+  if (
+    !username ||
+    username.includes(":") ||
+    !password ||
+    password.length < 16 ||
+    /[{}<>]|CHANGE_ME|replace-with/i.test(password) ||
+    !authorization
+  )
+    return false;
+  const encode = new TextEncoder();
+  const expected = `Basic ${btoa(String.fromCharCode(...encode.encode(`${username}:${password}`)))}`;
+  const [actualHash, expectedHash] = await Promise.all([
+    crypto.subtle.digest("SHA-256", encode.encode(authorization)),
+    crypto.subtle.digest("SHA-256", encode.encode(expected)),
+  ]);
+  const actual = new Uint8Array(actualHash);
+  const expectedBytes = new Uint8Array(expectedHash);
+  let difference = 0;
+  for (let index = 0; index < actual.length; index++) difference |= actual[index] ^ expectedBytes[index];
+  return difference === 0;
+}
+
+export async function requireManagementAccess(request: Request, checkOrigin = true): Promise<Response | null> {
+  if (!(await hasManagementAccess(request.headers.get("authorization")))) {
+    return Response.json(toErrorEnvelope("UNAUTHORIZED", "Team sign-in is required to manage offerings."), {
+      status: 401,
+      headers: {
+        "WWW-Authenticate": 'Basic realm="Coffee Shop management", charset="UTF-8"',
+        "Cache-Control": "no-store",
+      },
+    });
+  }
+  const origin = request.headers.get("origin");
+  const requestUrl = new URL(request.url);
+  // Next.js can normalize the internal URL hostname. Host retains the browser's target.
+  const expectedOrigin = `${requestUrl.protocol}//${request.headers.get("host") ?? requestUrl.host}`;
+  if (checkOrigin && origin && origin !== expectedOrigin) {
+    return Response.json(toErrorEnvelope("FORBIDDEN", "Use the shop's management page to make changes."), {
+      status: 403,
+      headers: { "Cache-Control": "no-store" },
+    });
+  }
+  return null;
+}
diff --git a/src/server/offering-handlers.ts b/src/server/offering-handlers.ts
new file mode 100644
index 0000000..13df412
--- /dev/null
+++ b/src/server/offering-handlers.ts
@@ -0,0 +1,100 @@
+import type { CreateOfferingInput, Offering } from "@/types/offering";
+import { requireManagementAccess } from "@/server/management-access";
+import { normalizeOfferingInput, toErrorEnvelope, validateOfferingInput } from "@/lib/offerings";
+import { OFFERING_CATEGORIES, type OfferingErrorCode } from "@/types/offering";
+
+export interface OfferingCollectionStore {
+  list(): Promise<Offering[]>;
+  create(input: CreateOfferingInput): Promise<Offering>;
+}
+
+export interface OfferingStore extends OfferingCollectionStore {
+  update(id: string, input: CreateOfferingInput): Promise<Offering | null>;
+  remove(id: string): Promise<boolean>;
+}
+
+const reply = (body: unknown, status = 200) =>
+  Response.json(body, { status, headers: { "Cache-Control": "no-store" } });
+const failure = (code: OfferingErrorCode, message: string, status: number, fields?: Record<string, string>) =>
+  reply(toErrorEnvelope(code, message, fields), status);
+
+async function readInput(request: Request): Promise<CreateOfferingInput | Response> {
+  if (request.headers.get("content-type")?.split(";")[0].trim().toLowerCase() !== "application/json") {
+    return failure("INVALID_CONTENT_TYPE", "Send offering details as JSON.", 415);
+  }
+  let body: unknown;
+  try {
+    body = await request.json();
+  } catch {
+    return failure("INVALID_JSON", "The request contains invalid JSON.", 400);
+  }
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    return failure("INVALID_INPUT", "Send one offering object.", 400);
+  }
+  const values = body as Record<string, unknown>;
+  const fields: Record<string, string> = {};
+  if (Object.keys(values).some((key) => !["name", "description", "price", "category", "specialOffer"].includes(key))) {
+    return failure("INVALID_INPUT", "Only offering detail fields are accepted.", 400);
+  }
+  if (typeof values.price !== "number") fields.price = "Price must be a JSON number.";
+  if (!OFFERING_CATEGORIES.some((category) => category === values.category))
+    fields.category = "Choose a valid category.";
+  Object.assign(fields, validateOfferingInput(values));
+  if (Object.keys(fields).length) return failure("INVALID_INPUT", "Please correct the offering details.", 400, fields);
+  return normalizeOfferingInput(values);
+}
+
+/** GET/POST need only the independently supplied list/create storage boundary. */
+export function createOfferingCollectionHandlers(store: OfferingCollectionStore) {
+  return {
+    async GET() {
+      try {
+        return reply(await store.list());
+      } catch {
+        return failure("DATABASE_UNAVAILABLE", "Offerings are temporarily unavailable. Please try again.", 503);
+      }
+    },
+    async POST(request: Request) {
+      const denied = await requireManagementAccess(request);
+      if (denied) return denied;
+      const input = await readInput(request);
+      if (input instanceof Response) return input;
+      try {
+        return reply(await store.create(input), 201);
+      } catch {
+        return failure("DATABASE_UNAVAILABLE", "The offering could not be saved. Please try again.", 503);
+      }
+    },
+  };
+}
+
+export function createOfferingHandlers(store: OfferingStore) {
+  return {
+    ...createOfferingCollectionHandlers(store),
+    async PUT(request: Request, id: string) {
+      const denied = await requireManagementAccess(request);
+      if (denied) return denied;
+      if (!/^[a-f\d]{24}$/i.test(id)) return failure("INVALID_INPUT", "Choose a valid offering.", 400);
+      const input = await readInput(request);
+      if (input instanceof Response) return input;
+      try {
+        const updated = await store.update(id, input);
+        return updated ? reply(updated) : failure("NOT_FOUND", "That offering no longer exists. Reload the list.", 404);
+      } catch {
+        return failure("DATABASE_UNAVAILABLE", "The offering could not be updated. Please try again.", 503);
+      }
+    },
+    async DELETE(request: Request, id: string) {
+      const denied = await requireManagementAccess(request);
+      if (denied) return denied;
+      if (!/^[a-f\d]{24}$/i.test(id)) return failure("INVALID_INPUT", "Choose a valid offering.", 400);
+      try {
+        return (await store.remove(id))
+          ? new Response(null, { status: 204, headers: { "Cache-Control": "no-store" } })
+          : failure("NOT_FOUND", "That offering no longer exists. Reload the list.", 404);
+      } catch {
+        return failure("DATABASE_UNAVAILABLE", "The offering could not be deleted. Please try again.", 503);
+      }
+    },
+  };
+}
diff --git a/src/styles/manage-offerings.module.css b/src/styles/manage-offerings.module.css
new file mode 100644
index 0000000..9ce15f0
--- /dev/null
+++ b/src/styles/manage-offerings.module.css
@@ -0,0 +1,217 @@
+.page {
+  max-width: 1080px;
+  margin: 0 auto;
+  padding: 2rem 1rem 4rem;
+  display: grid;
+  gap: 1.5rem;
+}
+
+.header {
+  display: grid;
+  gap: 0.5rem;
+}
+
+.header h1 {
+  margin: 0;
+  font-size: clamp(2rem, 3vw, 3rem);
+  color: #2f241f;
+}
+
+.header p {
+  margin: 0;
+  color: #5d473d;
+}
+
+.layout {
+  display: grid;
+  grid-template-columns: 1.2fr 0.8fr;
+  gap: 1.5rem;
+}
+
+.panel {
+  min-width: 0;
+  background: #fffaf7;
+  border: 1px solid #e9d9d0;
+  border-radius: 18px;
+  padding: 1.25rem;
+  box-shadow: 0 16px 35px rgba(66, 36, 26, 0.05);
+}
+
+.panel h2 {
+  margin-top: 0;
+  margin-bottom: 1rem;
+}
+
+.form {
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.field {
+  display: grid;
+  gap: 0.35rem;
+}
+
+.field label {
+  font-weight: 600;
+  color: #2f241f;
+}
+
+.input,
+.select,
+.textarea {
+  width: 100%;
+  box-sizing: border-box;
+  border: 1px solid #caaea5;
+  border-radius: 10px;
+  padding: 0.75rem 0.8rem;
+  font: inherit;
+  background: #fff;
+  color: #221915;
+}
+
+.input:focus,
+.select:focus,
+.textarea:focus,
+.button:focus {
+  outline: 3px solid rgba(139, 93, 69, 0.2);
+  outline-offset: 2px;
+}
+
+.textarea {
+  min-height: 120px;
+  resize: vertical;
+}
+
+.booleanRow {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+  color: #2f241f;
+  font-weight: 600;
+}
+
+.booleanRow input {
+  width: 1.1rem;
+  height: 1.1rem;
+}
+
+.list {
+  display: grid;
+  gap: 0.75rem;
+}
+
+.offerItem {
+  overflow-wrap: anywhere;
+  border: 1px solid #ecd8d0;
+  border-radius: 12px;
+  padding: 0.85rem 0.9rem;
+  background: #fff;
+}
+
+.actions {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 0.5rem;
+  margin-top: 0.75rem;
+}
+
+.confirmation {
+  border: 1px solid #a3332d;
+  border-radius: 10px;
+  padding: 0.75rem;
+  margin-top: 0.75rem;
+}
+
+.offerItem h3 {
+  margin: 0 0 0.2rem;
+  font-size: 1.1rem;
+}
+
+.offerMeta {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 0.5rem;
+  margin: 0.35rem 0 0.45rem;
+  color: #604a42;
+  font-size: 0.95rem;
+}
+
+.offerItem p {
+  margin: 0;
+  color: #4f3b35;
+}
+
+.badge {
+  display: inline-flex;
+  align-items: center;
+  border-radius: 999px;
+  padding: 0.2rem 0.55rem;
+  background: #f7e9df;
+  color: #6a453d;
+  font-size: 0.8rem;
+  font-weight: 700;
+}
+
+.feedback {
+  border-radius: 12px;
+  padding: 0.8rem 0.9rem;
+  font-weight: 600;
+}
+
+.feedbackInfo {
+  background: #eef4ff;
+  color: #1d4a7d;
+}
+
+.feedbackSuccess {
+  background: #eaf7ed;
+  color: #1b5d36;
+}
+
+.feedbackError {
+  background: #fdeceb;
+  color: #a3332d;
+}
+
+.inlineError {
+  margin: 0;
+  color: #a3332d;
+  font-size: 0.88rem;
+}
+
+.button {
+  border: none;
+  border-radius: 10px;
+  background: #7d4d3e;
+  color: white;
+  padding: 0.8rem 1rem;
+  font: inherit;
+  font-weight: 700;
+  cursor: pointer;
+}
+
+.button:disabled {
+  opacity: 0.7;
+  cursor: wait;
+}
+
+.helperText {
+  margin: 0;
+  color: #69554c;
+}
+
+.empty {
+  border: 1px dashed #d4b5a8;
+  border-radius: 12px;
+  padding: 1rem;
+  background: rgba(255, 255, 255, 0.65);
+  color: #5d473d;
+}
+
+@media (max-width: 760px) {
+  .layout {
+    grid-template-columns: 1fr;
+  }
+}
diff --git a/src/styles/navbar.module.css b/src/styles/navbar.module.css
new file mode 100644
index 0000000..325dfae
--- /dev/null
+++ b/src/styles/navbar.module.css
@@ -0,0 +1,28 @@
+.nav {
+  background: #f6f1eb;
+  border-bottom: 1px solid #d9cfc3;
+}
+
+.list {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 0.5rem 1.25rem;
+  list-style: none;
+  margin: 0;
+  padding: 0.75rem 1.25rem;
+}
+
+.link {
+  color: #2c2118;
+  font-weight: 600;
+  text-decoration: none;
+}
+
+.link:hover,
+.link:focus-visible {
+  text-decoration: underline;
+}
+
+.active {
+  color: #bf218f;
+}
diff --git a/src/styles/offerings.module.css b/src/styles/offerings.module.css
new file mode 100644
index 0000000..b665c7a
--- /dev/null
+++ b/src/styles/offerings.module.css
@@ -0,0 +1,89 @@
+.page {
+  max-width: 56rem;
+  margin: 0 auto;
+  padding: 4rem 1.5rem;
+}
+
+.header {
+  margin-bottom: 2rem;
+}
+
+.header h1 {
+  margin: 0.25rem 0 0.75rem;
+  font-size: 2.5rem;
+}
+
+.header p,
+.item p {
+  color: #5f5a55;
+}
+
+.eyebrow {
+  margin: 0;
+  color: #8a4b2a;
+  font-size: 0.8rem;
+  font-weight: 700;
+  letter-spacing: 0.08em;
+  text-transform: uppercase;
+}
+
+.list {
+  display: grid;
+  gap: 1rem;
+  margin: 0;
+  padding: 0;
+  list-style: none;
+}
+
+.item {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 1.5rem;
+  padding: 1.25rem 0;
+  border-top: 1px solid #ded8d0;
+}
+
+.item > div {
+  min-width: 0;
+  overflow-wrap: anywhere;
+}
+
+.retry {
+  padding: 0.75rem 1rem;
+  border: 1px solid #7d4d3e;
+  border-radius: 8px;
+  background: #fffaf7;
+  color: #2f241f;
+  font: inherit;
+  cursor: pointer;
+}
+
+.retry:focus-visible {
+  outline: 3px solid #7d4d3e;
+  outline-offset: 3px;
+}
+
+@media (max-width: 420px) {
+  .page {
+    padding: 2rem 1rem;
+  }
+  .item {
+    gap: 0.75rem;
+  }
+}
+
+.item h2 {
+  margin: 0 0 0.4rem;
+  font-size: 1.25rem;
+}
+
+.item p {
+  margin: 0;
+}
+
+.price {
+  flex: 0 0 auto;
+  color: #8a4b2a;
+  font-weight: 700;
+}
diff --git a/src/styles/special-offering-control.module.css b/src/styles/special-offering-control.module.css
new file mode 100644
index 0000000..b6f967f
--- /dev/null
+++ b/src/styles/special-offering-control.module.css
@@ -0,0 +1,20 @@
+.control {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.75rem;
+  min-height: 44px;
+  padding: 0.25rem;
+  cursor: pointer;
+}
+
+.control input {
+  width: 1.25rem;
+  height: 1.25rem;
+  margin: 0;
+  accent-color: #8a4b2a;
+}
+
+.control input:focus-visible {
+  outline: 3px solid #8a4b2a;
+  outline-offset: 4px;
+}
diff --git a/src/types/offering.ts b/src/types/offering.ts
new file mode 100644
index 0000000..27e5adf
--- /dev/null
+++ b/src/types/offering.ts
@@ -0,0 +1,44 @@
+/** Browser-safe contracts shared by offering pages and API routes. */
+export const OFFERING_CATEGORIES = ["Coffee", "Tea", "Smoothie"] as const;
+
+export type OfferingCategory = (typeof OFFERING_CATEGORIES)[number];
+
+export const OFFERING_INPUT_LIMITS = {
+  name: 100,
+  description: 500,
+  priceDecimalPlaces: 2,
+} as const;
+
+export const DEFAULT_SPECIAL_OFFER = false;
+
+/** An offering returned by GET or a successful POST. */
+export interface Offering {
+  ID: string;
+  name: string;
+  description: string;
+  price: number;
+  category: OfferingCategory;
+  specialOffer: boolean;
+}
+
+/** POST callers supply offering details; the database supplies identity. */
+export type CreateOfferingInput = Omit<Offering, "ID" | "specialOffer"> & {
+  specialOffer?: boolean;
+};
+
+export type OfferingErrorCode =
+  | "INVALID_CONTENT_TYPE"
+  | "INVALID_JSON"
+  | "INVALID_INPUT"
+  | "DATABASE_UNAVAILABLE"
+  | "UNAUTHORIZED"
+  | "FORBIDDEN"
+  | "NOT_FOUND";
+
+export interface OfferingErrorResponse {
+  error: {
+    code: OfferingErrorCode;
+    message: string;
+    fields?: Partial<Record<keyof CreateOfferingInput, string>>;
+  };
+}
diff --git a/tests/acceptance-application.test.ts b/tests/acceptance-application.test.ts
new file mode 100644
index 0000000..8df7af2
--- /dev/null
+++ b/tests/acceptance-application.test.ts
@@ -0,0 +1,20 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { startHttpServer } from "./helpers/http-server.mjs";
+import { runAcceptance } from "../scripts/acceptance";
+
+test(
+  "acceptance observes real HTTP POST/read-back in an owned empty local database and deliberate failure",
+  { timeout: 180000 },
+  async () => {
+    const server = await startHttpServer({ seed: false });
+    const options = { baseUrl: server.baseUrl, username: "team", password: "test-only-password" };
+    try {
+      assert.equal((await runAcceptance({ ...options, scenario: "empty" })).length, 4);
+      await server.stopDatabase();
+      assert.equal((await runAcceptance({ ...options, scenario: "database-failure" })).length, 1);
+    } finally {
+      await server.stop();
+    }
+  },
+);
diff --git a/tests/acceptance-cli.test.ts b/tests/acceptance-cli.test.ts
new file mode 100644
index 0000000..4d63341
--- /dev/null
+++ b/tests/acceptance-cli.test.ts
@@ -0,0 +1,115 @@
+import assert from "node:assert/strict";
+import { spawn } from "node:child_process";
+import { test } from "node:test";
+import { startControlledServer } from "./controlled-server";
+
+async function cli(script: string, args: string[], variables: Record<string, string> = {}) {
+  return new Promise<{ code: number | null; output: string }>((resolve, reject) => {
+    const child = spawn(process.execPath, ["--import", "tsx", script, ...args], {
+      env: {
+        ...process.env,
+        MONGO_URI: "",
+        ACCEPTANCE_BASE_URL: "",
+        ACCEPTANCE_SEED_FILE: "",
+        ACCEPTANCE_CONFIRM_WRITES: "disposable",
+        MANAGEMENT_USERNAME: "team",
+        MANAGEMENT_PASSWORD: "test-only-password",
+        ...variables,
+      },
+      windowsHide: true,
+    });
+    let output = "";
+    const timer = setTimeout(() => {
+      child.kill();
+      reject(new Error("CLI did not terminate."));
+    }, 20000);
+    child.stdout.on("data", (data) => {
+      output = (output + data).slice(-8000);
+    });
+    child.stderr.on("data", (data) => {
+      output = (output + data).slice(-8000);
+    });
+    child.on("error", (error) => {
+      clearTimeout(timer);
+      reject(error);
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      resolve({ code, output });
+    });
+  });
+}
+
+test("acceptance CLI reports success for independently controlled expected HTTP responses", async () => {
+  const server = await startControlledServer();
+  try {
+    const result = await cli("scripts/acceptance-runner.ts", ["--scenario", "empty"], {
+      ACCEPTANCE_BASE_URL: server.baseUrl,
+    });
+    assert.equal(result.code, 0, result.output);
+    assert.match(result.output, /PASS acceptance: targeted cleanup/);
+    assert.doesNotMatch(result.output, /test-only-password|dGVhbTp|127\.0\.0\.1/);
+  } finally {
+    await server.stop();
+  }
+});
+
+test("acceptance CLI exits nonzero for wrong status, shape, missing read-back and failed teardown", async () => {
+  for (const mode of ["wrong-status", "bad-post-body", "missing-read-back", "cleanup-failure"]) {
+    const server = await startControlledServer(mode);
+    try {
+      const result = await cli("scripts/acceptance-runner.ts", ["--scenario", "empty"], {
+        ACCEPTANCE_BASE_URL: server.baseUrl,
+      });
+      assert.equal(result.code, 1, `${mode}: ${result.output}`);
+      assert.match(result.output, /FAIL acceptance/);
+      assert.doesNotMatch(result.output, /test-only-password|dGVhbTp/);
+    } finally {
+      await server.stop();
+    }
+  }
+});
+
+test("seeded CLI uses independent expectations and failure CLI requires deliberate unavailable responses", async () => {
+  for (const scenario of ["seeded", "database-failure"]) {
+    const server = await startControlledServer(
+      scenario === "seeded" ? "correct" : "database-failure",
+      scenario === "seeded",
+    );
+    try {
+      const result = await cli("scripts/acceptance-runner.ts", ["--scenario", scenario], {
+        ACCEPTANCE_BASE_URL: server.baseUrl,
+        ACCEPTANCE_SEED_FILE: "tests/fixtures/acceptance-seed.json",
+      });
+      assert.equal(result.code, 0, result.output);
+      assert.match(result.output, /PASS acceptance/);
+    } finally {
+      await server.stop();
+    }
+  }
+});
+
+test("acceptance CLI rejects ambiguous scenario, missing acknowledgement and unsafe configuration safely", async () => {
+  for (const [args, variables] of [
+    [[], {}],
+    [["--scenario", "empty"], { ACCEPTANCE_BASE_URL: "http://user:private-secret@127.0.0.1:3000" }],
+    [["--scenario", "empty"], { ACCEPTANCE_CONFIRM_WRITES: "" }],
+    [["--scenario", "seeded"], { ACCEPTANCE_SEED_FILE: "missing-private-file" }],
+  ] as [string[], Record<string, string>][]) {
+    const result = await cli("scripts/acceptance-runner.ts", args, variables);
+    assert.equal(result.code, 1);
+    assert.doesNotMatch(result.output, /private-secret|missing-private-file|test-only-password/);
+  }
+});
+
+test("disposable lifecycle CLI refuses developer/integration URI and external cleanup arguments", async () => {
+  for (const [args, variables] of [
+    [[], { MONGO_URI: "mongodb://user:private-secret@127.0.0.1/coffee_shop" }],
+    [["--uri", "mongodb://user:private-secret@127.0.0.1/coffee_integration"], {}],
+  ] as [string[], Record<string, string>][]) {
+    const result = await cli("scripts/database-smoke.ts", args, variables);
+    assert.equal(result.code, 1);
+    assert.match(result.output, /No connection details printed/);
+    assert.doesNotMatch(result.output, /private-secret|coffee_shop|coffee_integration/);
+  }
+});
diff --git a/tests/acceptance-lifecycle.test.ts b/tests/acceptance-lifecycle.test.ts
new file mode 100644
index 0000000..79dcfd3
--- /dev/null
+++ b/tests/acceptance-lifecycle.test.ts
@@ -0,0 +1,33 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { MongoMemoryServer } from "mongodb-memory-server-core";
+import { bounded, verifyDisposableDatabase } from "../scripts/disposable-database";
+
+test(
+  "owned disposable lifecycle starts, writes, reads, cleans and stops without Atlas",
+  { timeout: 90000 },
+  async () => {
+    const stages = await verifyDisposableDatabase();
+    assert.equal(stages.length, 4);
+    assert.match(stages[1], /write and read-back/);
+    assert.match(stages[2], /cleanup and unrelated-record preservation/);
+    assert.match(stages[3], /stopped/);
+  },
+);
+
+test("lifecycle fails when owned server refuses teardown", { timeout: 90000 }, async (context) => {
+  const stop = MongoMemoryServer.prototype.stop;
+  context.mock.method(
+    MongoMemoryServer.prototype,
+    "stop",
+    async function (this: MongoMemoryServer, ...args: Parameters<typeof stop>) {
+      await stop.apply(this, args);
+      return false;
+    },
+  );
+  await assert.rejects(verifyDisposableDatabase(), /teardown failed/);
+});
+
+test("teardown deadlines fail instead of hanging", async () => {
+  await assert.rejects(bounded(new Promise(() => {}), "teardown", 20), /teardown deadline/);
+});
diff --git a/tests/controlled-server.ts b/tests/controlled-server.ts
new file mode 100644
index 0000000..2ed4919
--- /dev/null
+++ b/tests/controlled-server.ts
@@ -0,0 +1,112 @@
+import { createServer } from "node:http";
+import type { Offering } from "@/types/offering";
+
+export const seedOffering: Offering = {
+  ID: "seed-id",
+  name: "Seed Tea",
+  description: "Independent seed",
+  price: 2.5,
+  category: "Tea",
+  specialOffer: true,
+};
+
+/** Runner self-test only: not the application or persistence evidence. */
+export async function startControlledServer(mode = "correct", seeded = false) {
+  const records: Offering[] = seeded ? [{ ...seedOffering }] : [];
+  let nextId = 0;
+  const server = createServer(async (request, response) => {
+    const send = (status: number, body?: unknown) => {
+      response.writeHead(status, { "Content-Type": "application/json" });
+      response.end(body === undefined ? undefined : JSON.stringify(body));
+    };
+    const error = (status: number, code: string) =>
+      send(status, { error: { code, message: "Request failed safely." } });
+    if (mode === "timeout") return;
+    if (mode === "database-failure" || mode === "leaked-failure") {
+      send(503, {
+        error: {
+          code: "DATABASE_UNAVAILABLE",
+          message: mode === "leaked-failure" ? "mongodb://user:secret@host/db" : "Please retry later.",
+        },
+      });
+      return;
+    }
+    if (request.method === "GET") {
+      if (mode === "private-get" && !request.headers.authorization) return error(401, "UNAUTHORIZED");
+      const ordered = [...records].sort((a, b) => a.name.localeCompare(b.name) || a.ID.localeCompare(b.ID));
+      send(
+        mode === "wrong-status" ? 500 : 200,
+        mode === "wrong-shape" ? {} : mode === "wrong-order" ? ordered.reverse() : ordered,
+      );
+      return;
+    }
+    if (request.headers.authorization !== "Basic dGVhbTp0ZXN0LW9ubHktcGFzc3dvcmQ=") return error(401, "UNAUTHORIZED");
+    if (request.method === "DELETE") {
+      if (mode === "cleanup-failure") return error(503, "DATABASE_UNAVAILABLE");
+      const id = decodeURIComponent(request.url!.split("/").at(-1)!);
+      const index = records.findIndex((record) => record.ID === id);
+      if (index >= 0 && mode !== "cleanup-not-persisted") records.splice(index, 1);
+      send(204);
+      return;
+    }
+    if (request.headers["content-type"] !== "application/json") return error(415, "INVALID_CONTENT_TYPE");
+    let body: Record<string, unknown>;
+    try {
+      let text = "";
+      for await (const chunk of request) text += chunk;
+      body = JSON.parse(text);
+    } catch {
+      return error(400, "INVALID_JSON");
+    }
+    const valid =
+      body &&
+      typeof body === "object" &&
+      !Array.isArray(body) &&
+      typeof body.name === "string" &&
+      body.name.trim().length > 0 &&
+      body.name.trim().length <= 100 &&
+      typeof body.description === "string" &&
+      body.description.trim().length > 0 &&
+      body.description.trim().length <= 500 &&
+      typeof body.price === "number" &&
+      Number.isFinite(body.price) &&
+      body.price >= 0 &&
+      Math.abs(body.price * 100 - Math.round(body.price * 100)) < 0.000001 &&
+      typeof body.category === "string" &&
+      ["Coffee", "Tea", "Smoothie"].includes(body.category) &&
+      (body.specialOffer === undefined || typeof body.specialOffer === "boolean") &&
+      Object.keys(body).every((key) => ["name", "description", "price", "category", "specialOffer"].includes(key));
+    if (!valid) return mode === "accept-invalid" ? send(201, {}) : error(400, "INVALID_INPUT");
+    const offering = {
+      ...body,
+      name: (body.name as string).trim(),
+      description: (body.description as string).trim(),
+      specialOffer: body.specialOffer ?? false,
+      ID: `created-${++nextId}`,
+    } as Offering;
+    if (mode === "wrong-default" && body.specialOffer === undefined) offering.specialOffer = true;
+    if (mode === "wrong-special" && body.specialOffer === true) offering.specialOffer = false;
+    if (mode === "invalid-id") offering.ID = "";
+    if (mode === "duplicate-id") offering.ID = "reused-id";
+    if (mode !== "missing-read-back") records.push(offering);
+    if (mode === "bad-post-body") return send(201, {});
+    if (mode === "internal-fields") return send(201, { ...offering, _id: "internal-id" });
+    if (mode === "malformed-json") {
+      response.writeHead(201, { "Content-Type": "application/json" });
+      response.end("broken");
+      return;
+    }
+    send(201, offering);
+  });
+  await new Promise<void>((resolve) => server.listen(0, "127.0.0.1", resolve));
+  const address = server.address();
+  if (!address || typeof address === "string") throw new Error("Test listener unavailable");
+  return {
+    baseUrl: `http://127.0.0.1:${address.port}`,
+    records,
+    async stop() {
+      server.closeAllConnections();
+      await new Promise<void>((resolve, reject) => server.close((error) => (error ? reject(error) : resolve())));
+    },
+  };
+}
diff --git a/tests/database-checker.test.mjs b/tests/database-checker.test.mjs
new file mode 100644
index 0000000..6eafff0
--- /dev/null
+++ b/tests/database-checker.test.mjs
@@ -0,0 +1,166 @@
+import assert from "node:assert/strict";
+import { spawn } from "node:child_process";
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import test from "node:test";
+import net from "node:net";
+
+const script = fileURLToPath(new URL("../scripts/check-database.mjs", import.meta.url));
+
+async function check({ uri, args = [], file } = {}) {
+  const cwd = await mkdtemp(path.join(tmpdir(), "coffee-checker-"));
+  try {
+    if (file) await writeFile(path.join(cwd, ".env.local"), file);
+    const env = { ...process.env, NODE_ENV: "development" };
+    delete env.MONGO_URI;
+    delete env.__NEXT_PROCESSED_ENV;
+    if (uri !== undefined) env.MONGO_URI = uri;
+    return await new Promise((resolve, reject) => {
+      const child = spawn(process.execPath, [script, ...args], { cwd, env });
+      let output = "";
+      child.stdout.on("data", (data) => (output += data));
+      child.stderr.on("data", (data) => (output += data));
+      const timeout = setTimeout(() => {
+        child.kill();
+        reject(new Error("Checker did not terminate within 35 seconds"));
+      }, 35000);
+      child.on("error", reject);
+      child.on("close", (code) => {
+        clearTimeout(timeout);
+        resolve({ code, output });
+      });
+    });
+  } finally {
+    await rm(cwd, { recursive: true, force: true });
+  }
+}
+
+test("missing configuration fails with a safe configuration stage", async () => {
+  const result = await check();
+  assert.equal(result.code, 1);
+  assert.match(result.output, /FAIL configuration/);
+  assert.match(result.output, /MONGO_URI/);
+});
+
+test("rejects placeholders, implicit/system databases, and unsupported arguments without leaking secrets", async () => {
+  for (const uri of [
+    "{mongo-uri-here}",
+    "mongodb://user:private-password@127.0.0.1/",
+    "mongodb://user:private-password@127.0.0.1/admin",
+    "mongodb://user:private-password@127.0.0.1/coffee_shop_YOUR_NAME",
+    "mongodb://user:private-password@127.0.0.1/unsafe%0Aname",
+  ]) {
+    const result = await check({ uri });
+    assert.equal(result.code, 1);
+    assert.match(result.output, /FAIL configuration/);
+    assert.doesNotMatch(result.output, /private-password|mongodb:\/\//);
+  }
+  assert.equal((await check({ args: ["--typo"] })).code, 1);
+});
+
+test("unreachable server terminates with sanitized connection failure", async () => {
+  const listener = net.createServer();
+  await new Promise((resolve) => listener.listen(0, "127.0.0.1", resolve));
+  const port = listener.address().port;
+  await new Promise((resolve) => listener.close(resolve));
+  const result = await check({ uri: `mongodb://user:private-password@127.0.0.1:${port}/coffee_checker_test` });
+  assert.equal(result.code, 1);
+  assert.match(result.output, /FAIL connect/);
+  assert.match(result.output, /PASS close/);
+  assert.doesNotMatch(result.output, /private-password|mongodb:\/\//);
+});
+
+test("real database permissions, write/read-back, and targeted cleanup", async (t) => {
+  const { MongoMemoryServer } = await import("mongodb-memory-server-core");
+  const mongoose = (await import("mongoose")).default;
+  const server = await MongoMemoryServer.create({
+    binary: { version: "7.0.24" },
+    auth: { enable: true, customRootName: "checker-root", customRootPwd: "test-only-password" },
+  });
+  const address = server.getUri("coffee_checker_test");
+  const userUri = (user) =>
+    address.replace("mongodb://", `mongodb://${user}:test-only-password@`) + "?authSource=admin";
+  const uri = userUri("checker-root");
+  const client = new mongoose.mongo.MongoClient(uri);
+  try {
+    await client.connect();
+    const collection = client.db().collection("_coffee_shop_verification");
+    await collection.insertOne({ _id: "unrelated", value: "preserve me" });
+    const admin = client.db("admin");
+    await admin.command({
+      createUser: "checker-reader",
+      pwd: "test-only-password",
+      roles: [{ role: "read", db: "coffee_checker_test" }],
+    });
+    await admin.command({ createUser: "checker-no-read", pwd: "test-only-password", roles: [] });
+    await admin.command({
+      createRole: "checker-no-cleanup",
+      privileges: [
+        {
+          resource: { db: "coffee_checker_test", collection: "_coffee_shop_verification" },
+          actions: ["find", "insert"],
+        },
+      ],
+      roles: [],
+    });
+    await admin.command({
+      createUser: "checker-writer-no-cleanup",
+      pwd: "test-only-password",
+      roles: ["checker-no-cleanup"],
+    });
+
+    await t.test("default mode reads .env.local without changing records", async () => {
+      const result = await check({ file: `MONGO_URI=${uri}\n` });
+      assert.equal(result.code, 0, result.output);
+      assert.match(result.output, /PASS read/);
+      assert.match(result.output, /coffee_checker_test/);
+      assert.doesNotMatch(result.output, /PASS write/);
+      assert.equal(await collection.countDocuments(), 1);
+    });
+    await t.test("environment URI takes precedence over .env.local", async () => {
+      const result = await check({ uri, file: "MONGO_URI={mongo-uri-here}\n" });
+      assert.equal(result.code, 0, result.output);
+    });
+    await t.test("explicit write acknowledges, reads back, and removes only its marker", async () => {
+      const result = await check({ uri, args: ["--write"] });
+      assert.equal(result.code, 0, result.output);
+      assert.match(result.output, /PASS write/);
+      assert.match(result.output, /PASS read-back/);
+      assert.match(result.output, /PASS cleanup/);
+      assert.equal(await collection.countDocuments(), 1);
+      assert.equal((await collection.findOne({ _id: "unrelated" })).value, "preserve me");
+    });
+    await t.test("connected user without read permission fails at actual read", async () => {
+      const result = await check({ uri: userUri("checker-no-read") });
+      assert.equal(result.code, 1);
+      assert.match(result.output, /PASS connect/);
+      assert.match(result.output, /FAIL read/);
+      assert.doesNotMatch(result.output, /test-only-password|MongoServerError/);
+    });
+    await t.test("read-only user passes default mode but fails explicit write", async () => {
+      const read = await check({ uri: userUri("checker-reader") });
+      assert.equal(read.code, 0, read.output);
+      const write = await check({ uri: userUri("checker-reader"), args: ["--write"] });
+      assert.equal(write.code, 1);
+      assert.match(write.output, /PASS read/);
+      assert.match(write.output, /FAIL write/);
+      assert.equal(await collection.countDocuments(), 1);
+    });
+    await t.test("cleanup failure exits nonzero and reports exact disposable marker", async () => {
+      const result = await check({ uri: userUri("checker-writer-no-cleanup"), args: ["--write"] });
+      assert.equal(result.code, 1);
+      assert.match(result.output, /PASS read-back/);
+      assert.match(result.output, /FAIL cleanup/);
+      const marker = /INFO disposable marker=([a-f0-9-]+)/.exec(result.output)[1];
+      assert.equal((await collection.findOne({ _id: marker })).purpose, "coffee-shop-access-check");
+      assert.equal((await collection.findOne({ _id: "unrelated" })).value, "preserve me");
+      await collection.deleteOne({ _id: marker });
+      assert.equal(await collection.countDocuments(), 1);
+    });
+  } finally {
+    await client.close();
+    await server.stop();
+  }
+});
diff --git a/tests/fixtures/acceptance-seed.json b/tests/fixtures/acceptance-seed.json
new file mode 100644
index 0000000..4cdc9d9
--- /dev/null
+++ b/tests/fixtures/acceptance-seed.json
@@ -0,0 +1,10 @@
+[
+  {
+    "ID": "seed-id",
+    "name": "Seed Tea",
+    "description": "Independent seed",
+    "price": 2.5,
+    "category": "Tea",
+    "specialOffer": true
+  }
+]
diff --git a/tests/helpers/http-server.mjs b/tests/helpers/http-server.mjs
new file mode 100644
index 0000000..fdc516b
--- /dev/null
+++ b/tests/helpers/http-server.mjs
@@ -0,0 +1,146 @@
+import { spawn } from "node:child_process";
+import { once } from "node:events";
+import { createServer } from "node:net";
+import { createRequire } from "node:module";
+import { fileURLToPath } from "node:url";
+import { setTimeout as delay } from "node:timers/promises";
+import { MongoMemoryServer } from "mongodb-memory-server-core";
+
+const require = createRequire(import.meta.url);
+const projectRoot = fileURLToPath(new URL("../../", import.meta.url));
+
+/** Start the real HTTP interface with separate output and no Atlas credentials. */
+export async function startHttpServer({ seed = true } = {}) {
+  const database = await MongoMemoryServer.create({
+    binary: { version: "7.0.24" },
+    instance: { dbName: "coffee_http_test" },
+  });
+  const databaseUri = database.getUri("coffee_http_test");
+  const environment = {
+    ...process.env,
+    MONGO_URI: databaseUri,
+    MANAGEMENT_USERNAME: "team",
+    MANAGEMENT_PASSWORD: "test-only-password",
+    __NEXT_PROCESSED_ENV: "",
+  };
+  try {
+    if (seed) {
+      const seeder = spawn(process.execPath, ["--import", "tsx", "scripts/seed-offerings.ts", "--apply"], {
+        cwd: projectRoot,
+        env: environment,
+        windowsHide: true,
+        timeout: 30000,
+        stdio: ["ignore", "pipe", "pipe"],
+      });
+      let diagnostics = "";
+      for (const stream of [seeder.stdout, seeder.stderr])
+        stream.on("data", (data) => {
+          diagnostics += data.toString();
+        });
+      const [exitCode] = await once(seeder, "close");
+      if (exitCode !== 0) throw new Error(`Disposable seed failed. ${diagnostics}`);
+    }
+  } catch (error) {
+    await database.stop();
+    throw error;
+  }
+  const portReservation = createServer();
+  portReservation.listen(0, "127.0.0.1");
+  await once(portReservation, "listening");
+  const { port } = portReservation.address();
+  await new Promise((resolve, reject) => portReservation.close((error) => (error ? reject(error) : resolve())));
+
+  let server;
+  let output = "";
+  let startupError;
+  function launch() {
+    startupError = undefined;
+    server = spawn(
+      process.execPath,
+      [require.resolve("next/dist/bin/next"), "dev", "--hostname", "127.0.0.1", "--port", String(port)],
+      {
+        cwd: projectRoot,
+        env: {
+          ...environment,
+          NODE_ENV: "development",
+          COFFEE_SHOP_HTTP_TEST: "1",
+          NEXT_TELEMETRY_DISABLED: "1",
+        },
+        windowsHide: true,
+        detached: process.platform !== "win32",
+        stdio: ["ignore", "pipe", "pipe"],
+      },
+    );
+    server.on("error", (error) => {
+      startupError = error;
+    });
+    for (const stream of [server.stdout, server.stderr]) {
+      stream.on("data", (chunk) => {
+        output = (output + chunk.toString()).slice(-4000);
+      });
+    }
+  }
+
+  async function stop() {
+    try {
+      await stopApp();
+    } finally {
+      await database.stop();
+    }
+  }
+
+  async function stopApp() {
+    if (server.exitCode !== null || server.signalCode !== null || !server.pid) return;
+    const exited = once(server, "exit");
+    if (process.platform === "win32") {
+      // Next dev has a worker process; stop only this harness's process tree.
+      const killer = spawn("taskkill", ["/pid", String(server.pid), "/T", "/F"], {
+        windowsHide: true,
+        stdio: "ignore",
+      });
+      await once(killer, "close");
+    } else {
+      process.kill(-server.pid, "SIGTERM");
+    }
+    await exited;
+  }
+
+  const baseUrl = `http://127.0.0.1:${port}`;
+  async function ready() {
+    const deadline = Date.now() + 90_000;
+    while (Date.now() < deadline) {
+      if (startupError) throw startupError;
+      if (server.exitCode !== null || server.signalCode !== null) {
+        throw new Error(`HTTP test server exited before becoming ready.\n${output}`);
+      }
+      try {
+        const response = await fetch(`${baseUrl}/api/offerings`, { signal: AbortSignal.timeout(3000) });
+        await response.arrayBuffer();
+        if (response.ok) return;
+      } catch {
+        // The listener and first route compilation may still be starting.
+      }
+      await delay(250);
+    }
+    throw new Error(`HTTP test server did not become ready within 90 seconds.\n${output}`);
+  }
+  try {
+    launch();
+    await ready();
+    return {
+      baseUrl,
+      stop,
+      stopDatabase: () => database.stop(),
+      diagnostics: () => output,
+      authorization: `Basic ${Buffer.from("team:test-only-password").toString("base64")}`,
+      async restart() {
+        await stopApp();
+        launch();
+        await ready();
+      },
+    };
+  } catch (error) {
+    await stop();
+    throw error;
+  }
+}
diff --git a/tests/helpers/offering-storage-connection.ts b/tests/helpers/offering-storage-connection.ts
new file mode 100644
index 0000000..154b685
--- /dev/null
+++ b/tests/helpers/offering-storage-connection.ts
@@ -0,0 +1,27 @@
+import assert from "node:assert/strict";
+import mongoose from "mongoose";
+import { offeringStore } from "@/database/offeringStore";
+import { seedOfferings } from "@/database/seedOffering";
+import { toErrorEnvelope } from "@/lib/offerings";
+
+async function main(): Promise<void> {
+  try {
+    const input = { name: "Recovery", description: "Persisted after retry", price: 1, category: "Tea" as const };
+    for (const operation of [() => offeringStore.list(), () => offeringStore.create(input), () => seedOfferings()]) {
+      await assert.rejects(operation());
+    }
+    // The handler owns sanitization. This test caller proves rejected storage errors can be handled safely.
+    console.log(JSON.stringify(toErrorEnvelope("DATABASE_UNAVAILABLE", "Database is unavailable.")));
+    process.env.MONGO_URI = process.env.COFFEE_STORAGE_RECOVERY_URI;
+    const saved = await offeringStore.create(input);
+    assert.deepEqual(await offeringStore.list(), [saved]);
+    console.log("PASS recovery: failed connections do not poison subsequent persistence.");
+  } finally {
+    await mongoose.disconnect();
+  }
+}
+
+void main().catch(() => {
+  process.exitCode = 1;
+  console.error("FAIL storage connection evidence.");
+});
diff --git a/tests/offering-form.test.mjs b/tests/offering-form.test.mjs
new file mode 100644
index 0000000..3e4f8c1
--- /dev/null
+++ b/tests/offering-form.test.mjs
@@ -0,0 +1,156 @@
+import assert from "node:assert/strict";
+import { createRequire } from "node:module";
+import test from "node:test";
+import React, { act } from "react";
+import { JSDOM } from "jsdom";
+
+const dom = new JSDOM("<!doctype html><html><body></body></html>", { url: "http://localhost" });
+globalThis.window = dom.window;
+globalThis.document = dom.window.document;
+Object.defineProperty(globalThis, "navigator", { value: dom.window.navigator, configurable: true });
+globalThis.IS_REACT_ACT_ENVIRONMENT = true;
+// Node does not load CSS Modules; styles are irrelevant to these interaction checks.
+const require = createRequire(import.meta.url);
+require.extensions[".css"] = (module) => {
+  module.exports = {};
+};
+// tsx uses classic JSX for this Next.js project's preserve setting.
+globalThis.React = React;
+const { createRoot } = await import("react-dom/client");
+const OfferingForm = require("../src/components/OfferingForm.tsx").default;
+const ManageOfferingsPage = require("../src/components/ManageOfferings.tsx").default;
+const { submitOffering } = require("../src/lib/offerings.ts");
+const values = { name: "Latte", description: "Espresso and milk", price: "4.25", category: "Coffee" };
+
+async function mount(component) {
+  const container = document.createElement("div");
+  document.body.append(container);
+  const root = createRoot(container);
+  await act(async () => root.render(component));
+  return {
+    container,
+    async cleanup() {
+      await act(async () => root.unmount());
+      container.remove();
+    },
+  };
+}
+
+test("the reusable form sends its supplied special flag and defaults omission to false", async () => {
+  const originalFetch = globalThis.fetch;
+  const sent = [];
+  globalThis.fetch = async (_url, init) => {
+    const input = JSON.parse(init.body);
+    sent.push(input);
+    return new Response(JSON.stringify({ ID: "saved", ...input }), { status: 201 });
+  };
+  try {
+    for (const props of [{ specialOffer: true }, { specialOffer: false }, {}]) {
+      const mounted = await mount(
+        React.createElement(OfferingForm, {
+          formValues: values,
+          errors: {},
+          isSubmitting: false,
+          onFieldChange() {},
+          async onSubmit(event, specialOffer) {
+            event.preventDefault();
+            await submitOffering({ ...values, price: 4.25, specialOffer });
+          },
+          ...props,
+        }),
+      );
+      try {
+        await act(async () => {
+          mounted.container
+            .querySelector("form")
+            .dispatchEvent(new window.Event("submit", { bubbles: true, cancelable: true }));
+        });
+      } finally {
+        await mounted.cleanup();
+      }
+    }
+    assert.deepEqual(
+      sent.map((input) => input.specialOffer),
+      [true, false, false],
+    );
+  } finally {
+    globalThis.fetch = originalFetch;
+  }
+});
+
+test("pending saves lock every control, prevent duplicates, retain failures, and clear confirmed saves", async () => {
+  const originalFetch = globalThis.fetch;
+  try {
+    for (const succeeds of [false, true]) {
+      let resolveSave;
+      let postCount = 0;
+      let getCount = 0;
+      let submitted;
+      globalThis.fetch = async (_url, init) => {
+        if (init.method === "POST") {
+          postCount++;
+          submitted = JSON.parse(init.body);
+          return new Promise((resolve) => {
+            resolveSave = resolve;
+          });
+        }
+        getCount++;
+        return getCount === 1
+          ? new Response("[]", { status: 200 })
+          : new Response(JSON.stringify({ error: { message: "Refresh unavailable." } }), { status: 503 });
+      };
+      const mounted = await mount(React.createElement(ManageOfferingsPage));
+      const field = (id) => mounted.container.querySelector(`#${id}`);
+      try {
+        await act(async () => {
+          for (const [id, value] of [
+            ["offering-name", "Latte"],
+            ["offering-description", "Espresso and milk"],
+            ["offering-price", "4.25"],
+          ]) {
+            const element = field(id);
+            const prototype =
+              element.tagName === "TEXTAREA" ? window.HTMLTextAreaElement.prototype : window.HTMLInputElement.prototype;
+            Object.getOwnPropertyDescriptor(prototype, "value").set.call(element, value);
+            element.dispatchEvent(new window.Event("input", { bubbles: true }));
+          }
+          mounted.container.querySelector('input[type="checkbox"]').click();
+        });
+        const form = mounted.container.querySelector("form");
+        await act(async () => form.dispatchEvent(new window.Event("submit", { bubbles: true, cancelable: true })));
+        assert.equal(postCount, 1);
+        assert.equal(submitted.specialOffer, true);
+        for (const control of mounted.container.querySelectorAll("input, textarea, select, button")) {
+          assert.equal(
+            control.matches(":disabled"),
+            true,
+            `${control.id || control.tagName} must be disabled while saving`,
+          );
+        }
+        await act(async () => form.dispatchEvent(new window.Event("submit", { bubbles: true, cancelable: true })));
+        assert.equal(postCount, 1);
+        await act(async () =>
+          resolveSave(
+            succeeds
+              ? new Response(JSON.stringify({ ID: "saved", ...submitted }), { status: 201 })
+              : new Response(JSON.stringify({ error: { message: "Save unavailable." } }), { status: 503 }),
+          ),
+        );
+        assert.equal(field("offering-name").value, succeeds ? "" : "Latte");
+        assert.equal(field("offering-description").value, succeeds ? "" : "Espresso and milk");
+        assert.equal(field("offering-price").value, succeeds ? "" : "4.25");
+        assert.equal(mounted.container.querySelector('input[type="checkbox"]').checked, !succeeds);
+        assert.equal(field("offering-name").matches(":disabled"), false);
+        assert.match(
+          mounted.container.textContent,
+          succeeds ? /Offering saved, but the list could not refresh/ : /Save unavailable/,
+        );
+        assert.equal(getCount, succeeds ? 2 : 1);
+      } finally {
+        await mounted.cleanup();
+      }
+    }
+  } finally {
+    globalThis.fetch = originalFetch;
+  }
+});
diff --git a/tests/offering-seed-command.test.mjs b/tests/offering-seed-command.test.mjs
new file mode 100644
index 0000000..23cafe9
--- /dev/null
+++ b/tests/offering-seed-command.test.mjs
@@ -0,0 +1,107 @@
+import assert from "node:assert/strict";
+import { spawn } from "node:child_process";
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { createRequire } from "node:module";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import test from "node:test";
+import net from "node:net";
+import { MongoMemoryServer } from "mongodb-memory-server-core";
+
+const require = createRequire(import.meta.url);
+const projectRoot = fileURLToPath(new URL("../", import.meta.url));
+const loader = pathToFileURL(require.resolve("tsx")).href;
+const seedScript = path.join(projectRoot, "scripts/seed-offerings.ts");
+
+async function seed({ uri = "", args = ["--apply"], envFile, script = seedScript, recoveryUri } = {}) {
+  const cwd = await mkdtemp(path.join(tmpdir(), "coffee-seed-command-"));
+  try {
+    if (envFile) await writeFile(path.join(cwd, ".env.local"), envFile);
+    const env = { ...process.env, NODE_ENV: "development", TSX_TSCONFIG_PATH: path.join(projectRoot, "tsconfig.json") };
+    delete env.__NEXT_PROCESSED_ENV;
+    if (recoveryUri) env.COFFEE_STORAGE_RECOVERY_URI = recoveryUri;
+    if (uri === undefined) delete env.MONGO_URI;
+    else env.MONGO_URI = uri;
+    return await new Promise((resolve, reject) => {
+      const child = spawn(process.execPath, ["--import", loader, script, ...args], { cwd, env, windowsHide: true });
+      let output = "";
+      for (const stream of [child.stdout, child.stderr]) stream.on("data", (chunk) => (output += chunk));
+      let timedOut = false;
+      const deadline = setTimeout(() => {
+        timedOut = true;
+        child.kill();
+      }, 40_000);
+      child.on("error", (error) => {
+        clearTimeout(deadline);
+        reject(error);
+      });
+      child.on("close", (code) => {
+        clearTimeout(deadline);
+        if (timedOut) reject(new Error("Database command exceeded 40 seconds"));
+        else resolve({ code, output });
+      });
+    });
+  } finally {
+    assert.equal(path.dirname(cwd), tmpdir());
+    assert.ok(path.basename(cwd).startsWith("coffee-seed-command-"));
+    await rm(cwd, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
+  }
+}
+
+test("seed command requires deliberate application and valid configuration without leaking credentials", async () => {
+  for (const options of [
+    { args: [] },
+    { args: ["--typo"] },
+    {},
+    { uri: "mongodb://user:private-password@127.0.0.1/admin" },
+    { uri: "mongodb://user:private-password@127.0.0.1/" },
+    { uri: "{mongo-uri-here}" },
+  ]) {
+    const result = await seed(options);
+    assert.equal(result.code, 1, result.output);
+    assert.match(result.output, /FAIL configuration/);
+    assert.doesNotMatch(result.output, /private-password|mongodb:\/\//);
+  }
+});
+
+test("seed command creates 16 items then reports zero inserts on a separate-process rerun", async () => {
+  const server = await MongoMemoryServer.create({ binary: { version: "7.0.24" } });
+  try {
+    const uri = server.getUri("coffee_seed_command_test");
+    const first = await seed({ uri, envFile: "MONGO_URI={mongo-uri-here}\n" });
+    assert.equal(first.code, 0, first.output);
+    assert.match(first.output, /PASS seed: inserted=16/);
+    const second = await seed({ uri });
+    assert.equal(second.code, 0, second.output);
+    assert.match(second.output, /PASS seed: inserted=0/);
+  } finally {
+    await server.stop();
+  }
+});
+
+test("unreachable storage rejects list/create/seed, reports safe failure, and recovers on retry", async () => {
+  const listener = net.createServer();
+  await new Promise((resolve) => listener.listen(0, "127.0.0.1", resolve));
+  const port = listener.address().port;
+  await new Promise((resolve) => listener.close(resolve));
+  const server = await MongoMemoryServer.create({ binary: { version: "7.0.24" } });
+  try {
+    const result = await seed({
+      uri: `mongodb://user:private-password@127.0.0.1:${port}/coffee_unreachable_test`,
+      recoveryUri: server.getUri("coffee_recovery_test"),
+      script: path.join(projectRoot, "tests/helpers/offering-storage-connection.ts"),
+      args: [],
+    });
+    assert.equal(result.code, 0, result.output);
+    assert.match(result.output, /DATABASE_UNAVAILABLE/);
+    assert.match(result.output, /PASS recovery/);
+    assert.doesNotMatch(result.output, /private-password|mongodb:\/\/|MongoServer/);
+    const command = await seed({ uri: `mongodb://user:private-password@127.0.0.1:${port}/coffee_unreachable_test` });
+    assert.equal(command.code, 1, command.output);
+    assert.match(command.output, /FAIL seed: database operation failed/);
+    assert.doesNotMatch(command.output, /private-password|mongodb:\/\/|MongoServer/);
+  } finally {
+    await server.stop();
+  }
+});
diff --git a/tests/offering-storage.test.ts b/tests/offering-storage.test.ts
new file mode 100644
index 0000000..bccdaea
--- /dev/null
+++ b/tests/offering-storage.test.ts
@@ -0,0 +1,177 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import mongoose from "mongoose";
+import { MongoMemoryServer } from "mongodb-memory-server-core";
+import { offeringStore } from "@/database/offeringStore";
+import type { CreateOfferingInput } from "@/types/offering";
+
+test("offering storage persists public offerings in disposable local MongoDB", async (t) => {
+  const server = await MongoMemoryServer.create({ binary: { version: "7.0.24" } });
+  process.env.MONGO_URI = server.getUri("coffee_storage_test");
+  try {
+    await t.test("empty collection returns an empty list", async () => {
+      assert.deepEqual(await offeringStore.list(), []);
+    });
+
+    await t.test(
+      "create persists trimmed details and returns only public fields with generated string identity",
+      async () => {
+        const saved = await offeringStore.create({
+          name: "  Vanilla Latte  ",
+          description: "  Espresso with vanilla and milk  ",
+          price: 5.75,
+          category: "Coffee",
+        });
+        assert.match(saved.ID, /^[a-f0-9]{24}$/);
+        assert.deepEqual(saved, {
+          ID: saved.ID,
+          name: "Vanilla Latte",
+          description: "Espresso with vanilla and milk",
+          price: 5.75,
+          category: "Coffee",
+          specialOffer: false,
+        });
+        assert.deepEqual(await offeringStore.list(), [saved]);
+      },
+    );
+
+    await t.test("list sorts by name then generated string ID, including duplicate names", async () => {
+      const zulu = await offeringStore.create({ name: "Zulu", description: "Last", price: 0, category: "Tea" });
+      const alpha = await offeringStore.create({ name: "Alpha", description: "First", price: 1, category: "Tea" });
+      // Arrange equal-name documents in reverse ID order to exercise the tie-breaker.
+      await mongoose.connection.collection("offerings").insertMany([
+        { ...alpha, ID: undefined, _id: new mongoose.Types.ObjectId("000000000000000000000002"), name: "Aardvark" },
+        { ...alpha, ID: undefined, _id: new mongoose.Types.ObjectId("000000000000000000000001"), name: "Aardvark" },
+      ]);
+      const list = await offeringStore.list();
+      assert.deepEqual(
+        list.map((offering) => offering.name),
+        ["Aardvark", "Aardvark", "Alpha", "Vanilla Latte", "Zulu"],
+      );
+      assert.deepEqual(
+        list.slice(0, 2).map((offering) => offering.ID),
+        ["000000000000000000000001", "000000000000000000000002"],
+      );
+      assert.equal(list.at(-1)?.ID, zulu.ID);
+    });
+
+    await t.test("model guards reject invalid details without persisting them", async () => {
+      const valid: CreateOfferingInput = { name: "Guard", description: "Valid", price: 1, category: "Tea" };
+      const before = await offeringStore.list();
+      for (const changes of [
+        { name: "   " },
+        { name: "n".repeat(101) },
+        { description: "   " },
+        { description: "d".repeat(501) },
+        { category: "Other" },
+        { price: -1 },
+        { price: Number.NaN },
+        { price: Number.POSITIVE_INFINITY },
+        { price: 1.001 },
+        { specialOffer: null },
+        { specialOffer: "maybe" },
+      ]) {
+        await assert.rejects(offeringStore.create({ ...valid, ...changes } as CreateOfferingInput));
+      }
+      assert.deepEqual(await offeringStore.list(), before);
+    });
+
+    await t.test(
+      "zero price, boundary text lengths, floating-point cents, and explicit special flags are supported",
+      async () => {
+        const zero = await offeringStore.create({
+          name: "n".repeat(100),
+          description: "d".repeat(500),
+          price: 0,
+          category: "Smoothie",
+          specialOffer: true,
+        });
+        const decimal = await offeringStore.create({
+          name: "Decimal",
+          description: "Floating-point cents",
+          price: 0.1 + 0.2,
+          category: "Tea",
+          specialOffer: false,
+        });
+        assert.equal(zero.price, 0);
+        assert.equal(zero.specialOffer, true);
+        assert.equal(decimal.specialOffer, false);
+        assert.equal(decimal.price, 0.1 + 0.2);
+        assert.ok((await offeringStore.list()).some((offering) => offering.ID === zero.ID));
+      },
+    );
+
+    await t.test(
+      "seed inserts 16 starting offerings and reruns preserve IDs, edits, and unrelated records",
+      async () => {
+        const { seedOfferings } = await import("@/database/seedOffering");
+        const unrelated = await offeringStore.list();
+        assert.equal(await seedOfferings(), 16);
+        const seeded = (await offeringStore.list()).filter(
+          (offering) => !unrelated.some((item) => item.ID === offering.ID),
+        );
+        assert.equal(seeded.length, 16);
+        assert.deepEqual(
+          seeded.filter((offering) => offering.specialOffer).map((offering) => offering.name),
+          ["Golden Hour Cold Brew", "Hojicha Latte", "Pumpkin Spice Latte"],
+        );
+        assert.deepEqual(
+          seeded.map((offering) => offering.name),
+          [
+            "Cafe au Lait",
+            "Cappuccino",
+            "Chai Latte",
+            "Chamomile Tea",
+            "Cortado",
+            "English Breakfast Tea",
+            "Espresso",
+            "Fruit Smoothie",
+            "Golden Hour Cold Brew",
+            "Hojicha Latte",
+            "Iced Hibiscus Berry",
+            "Latte",
+            "London Fog",
+            "Matcha",
+            "Mocha",
+            "Pumpkin Spice Latte",
+          ],
+        );
+        for (const offering of seeded) {
+          assert.match(offering.ID, /^[a-f0-9]{24}$/);
+          assert.deepEqual(Object.keys(offering).sort(), [
+            "ID",
+            "category",
+            "description",
+            "name",
+            "price",
+            "specialOffer",
+          ]);
+        }
+
+        const cappuccino = seeded.find((offering) => offering.name === "Cappuccino")!;
+        // Simulate an operator edit, including rename. Identity must not depend on the name.
+        await mongoose.connection
+          .collection("offerings")
+          .updateOne(
+            { _id: new mongoose.Types.ObjectId(cappuccino.ID) },
+            { $set: { name: "Operator's Cappuccino", description: "Keep my edit", price: 7.25, specialOffer: true } },
+          );
+        const beforeRerun = await offeringStore.list();
+        assert.equal(await seedOfferings(), 0);
+        assert.deepEqual(await offeringStore.list(), beforeRerun);
+        assert.equal(await seedOfferings(), 0);
+        assert.deepEqual(await offeringStore.list(), beforeRerun);
+        for (const offering of unrelated) {
+          assert.deepEqual(
+            (await offeringStore.list()).find((item) => item.ID === offering.ID),
+            offering,
+          );
+        }
+      },
+    );
+  } finally {
+    await mongoose.disconnect();
+    await server.stop();
+    delete process.env.MONGO_URI;
+  }
+});
diff --git a/tests/offerings-http.test.mjs b/tests/offerings-http.test.mjs
new file mode 100644
index 0000000..272ed01
--- /dev/null
+++ b/tests/offerings-http.test.mjs
@@ -0,0 +1,355 @@
+import assert from "node:assert/strict";
+import { createRequire } from "node:module";
+import { after, afterEach, before, describe, it, mock, test } from "node:test";
+import { JSDOM } from "jsdom";
+import { startHttpServer } from "./helpers/http-server.mjs";
+import { verifyLive } from "../scripts/live-acceptance.ts";
+
+let server;
+before(
+  async () => {
+    server = await startHttpServer();
+  },
+  { timeout: 120_000 },
+);
+after(
+  async () => {
+    await server?.stop();
+  },
+  { timeout: 15_000 },
+);
+
+test("GET exposes string identities for all offerings", async () => {
+  const response = await fetch(`${server.baseUrl}/api/offerings`);
+  assert.equal(response.status, 200);
+  const offerings = await response.json();
+  assert.equal(offerings.length, 16);
+  for (const offering of offerings) {
+    assert.equal(typeof offering.ID, "string", `${offering.name} must have a string ID`);
+    assert.notEqual(offering.ID, "");
+  }
+  assert.equal(new Set(offerings.map((offering) => offering.ID)).size, 16);
+});
+
+test("GET preserves the starting menu and public offering fields", async () => {
+  const response = await fetch(`${server.baseUrl}/api/offerings`);
+  assert.match(response.headers.get("content-type"), /application\/json/);
+  const offerings = await response.json();
+  assert.deepEqual(
+    offerings.map((offering) => offering.name),
+    [
+      "Cafe au Lait",
+      "Cappuccino",
+      "Chai Latte",
+      "Chamomile Tea",
+      "Cortado",
+      "English Breakfast Tea",
+      "Espresso",
+      "Fruit Smoothie",
+      "Golden Hour Cold Brew",
+      "Hojicha Latte",
+      "Iced Hibiscus Berry",
+      "Latte",
+      "London Fog",
+      "Matcha",
+      "Mocha",
+      "Pumpkin Spice Latte",
+    ],
+  );
+  for (const offering of offerings) {
+    assert.deepEqual(Object.keys(offering).sort(), ["ID", "category", "description", "name", "price", "specialOffer"]);
+    assert.ok(["Coffee", "Tea", "Smoothie"].includes(offering.category));
+    assert.equal(typeof offering.price, "number");
+    assert.equal(typeof offering.specialOffer, "boolean");
+  }
+  const { ID, ...cappuccino } = offerings.find((offering) => offering.name === "Cappuccino");
+  assert.deepEqual(cappuccino, {
+    name: "Cappuccino",
+    description: "A delicious cappuccino with steamed milk and foam",
+    price: 5.9,
+    category: "Coffee",
+    specialOffer: false,
+  });
+});
+
+test("GET flags exactly the three starting special offerings", async () => {
+  const response = await fetch(`${server.baseUrl}/api/offerings`);
+  const offerings = await response.json();
+  assert.deepEqual(
+    offerings.filter((offering) => offering.specialOffer).map((offering) => offering.name),
+    ["Golden Hour Cold Brew", "Hojicha Latte", "Pumpkin Spice Latte"],
+  );
+});
+
+test("real HTTP writes require sign-in and persist create, edit, and delete", async () => {
+  const url = `${server.baseUrl}/api/offerings`;
+  const input = {
+    name: "HTTP test latte",
+    description: "Disposable test offering",
+    price: 4.25,
+    category: "Coffee",
+    specialOffer: true,
+  };
+  const headers = { Authorization: server.authorization, "Content-Type": "application/json", Origin: server.baseUrl };
+  assert.equal(
+    (await fetch(url, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(input) }))
+      .status,
+    401,
+  );
+  assert.equal((await fetch(`${server.baseUrl}/manage-offerings`)).status, 401);
+  assert.equal((await fetch(`${server.baseUrl}/manage-offerings`, { headers })).status, 200);
+  assert.equal(
+    (
+      await fetch(url, {
+        method: "POST",
+        headers: { ...headers, Origin: "https://attacker.example" },
+        body: JSON.stringify(input),
+      })
+    ).status,
+    403,
+  );
+  assert.equal(
+    (await fetch(url, { method: "POST", headers, body: JSON.stringify({ ...input, price: "4.25" }) })).status,
+    400,
+  );
+  const created = await fetch(url, { method: "POST", headers, body: JSON.stringify(input) });
+  assert.equal(created.status, 201);
+  const offering = await created.json();
+  assert.match(offering.ID, /^[a-f\d]{24}$/);
+  await server.restart();
+  assert.deepEqual(
+    (await (await fetch(url)).json()).find((item) => item.ID === offering.ID),
+    offering,
+  );
+  assert.equal(
+    (
+      await fetch(`${url}/${offering.ID}`, {
+        method: "PUT",
+        headers,
+        body: JSON.stringify({ ...input, name: "Edited latte", specialOffer: false }),
+      })
+    ).status,
+    200,
+  );
+  assert.equal((await (await fetch(url)).json()).find((item) => item.ID === offering.ID).name, "Edited latte");
+  assert.equal((await fetch(`${url}/${offering.ID}`, { method: "DELETE", headers })).status, 204);
+  assert.equal(
+    (await (await fetch(url)).json()).some((item) => item.ID === offering.ID),
+    false,
+  );
+  assert.equal((await fetch(`${url}/${offering.ID}`, { method: "DELETE", headers })).status, 404);
+});
+
+test("live acceptance tooling verifies all operations and removes only its own marker", async () => {
+  const before = await (await fetch(`${server.baseUrl}/api/offerings`)).json();
+  const result = await verifyLive({
+    baseUrl: server.baseUrl,
+    username: "team",
+    password: "test-only-password",
+    allowWrites: true,
+    allOperations: true,
+  });
+  assert.equal(result.writes, true);
+  assert.equal(result.updated, true);
+  assert.deepEqual(await (await fetch(`${server.baseUrl}/api/offerings`)).json(), before);
+});
+
+test("an unavailable database returns sanitized 503 without a fixture fallback", async () => {
+  await server.stopDatabase();
+  const response = await fetch(`${server.baseUrl}/api/offerings`);
+  assert.equal(response.status, 503);
+  assert.match((await response.json()).error.message, /temporarily unavailable/);
+});
+
+// Test-only fixtures. Names, categories, and flags mirror the starting menu.
+const offeringFixture = (ID, name, category, specialOffer, price = 4.5) => ({
+  ID,
+  name,
+  description: `${name} description`,
+  price,
+  category,
+  specialOffer,
+});
+const ordinaryItems = [
+  offeringFixture("test-cappuccino", "Cappuccino", "Coffee", false, 5.9),
+  offeringFixture("test-mocha", "Mocha", "Coffee", false),
+  offeringFixture("test-matcha", "Matcha", "Tea", false),
+  offeringFixture("test-smoothie", "Fruit Smoothie", "Smoothie", false),
+];
+const startingSpecials = [
+  offeringFixture("test-psl", "Pumpkin Spice Latte", "Coffee", true),
+  offeringFixture("test-golden-hour", "Golden Hour Cold Brew", "Coffee", true),
+  offeringFixture("test-hojicha", "Hojicha Latte", "Tea", true),
+];
+const newSpecial = offeringFixture("test-cardamom", "Cardamom Latte", "Coffee", true);
+
+const menuProps = { title: "Menu", intro: "intro", emptyMessage: "Nothing here yet." };
+const specialsProps = { title: "Specials", intro: "intro", emptyMessage: "No specials right now.", specialsOnly: true };
+
+const jsonResponse = (body, status = 200) =>
+  new Response(JSON.stringify(body), { status, headers: { "Content-Type": "application/json" } });
+
+describe("OfferingsPage with controlled responses", () => {
+  const realFetch = globalThis.fetch;
+  const mounted = [];
+  let React;
+  let createRoot;
+  let act;
+  let fetchCalls = [];
+  let OfferingsPage;
+
+  before(async () => {
+    const require = createRequire(import.meta.url);
+    require.extensions[".css"] = (module) => {
+      module.exports = {};
+    };
+
+    const dom = new JSDOM("<!doctype html><html><body></body></html>", { url: "http://localhost/" });
+    const define = (key, value) =>
+      Object.defineProperty(globalThis, key, { value, configurable: true, writable: true });
+    define("window", dom.window);
+    define("document", dom.window.document);
+    define("navigator", dom.window.navigator);
+    define("IS_REACT_ACT_ENVIRONMENT", true);
+
+    React = ((m) => m.default ?? m)(await import("react"));
+    createRoot = ((m) => m.default ?? m)(await import("react-dom/client")).createRoot;
+    act = React.act ?? React.unstable_act;
+    globalThis.React = React;
+    OfferingsPage = require("../src/components/OfferingsPage.tsx").default;
+  });
+
+  afterEach(async () => {
+    while (mounted.length) {
+      const { root, container } = mounted.pop();
+      try {
+        await act(async () => root.unmount());
+      } catch {
+        // already unmounted
+      }
+      container.remove();
+    }
+    globalThis.fetch = realFetch;
+    mock.restoreAll();
+  });
+
+  function stubFetch(handler) {
+    fetchCalls = [];
+    globalThis.fetch = async (url) => {
+      fetchCalls.push(String(url));
+      return handler();
+    };
+  }
+
+  async function renderPage(props) {
+    const container = document.createElement("div");
+    document.body.appendChild(container);
+    const root = createRoot(container);
+    mounted.push({ root, container });
+    await act(async () => root.render(React.createElement(OfferingsPage, props)));
+    return container;
+  }
+
+  async function waitFor(check, tries = 50) {
+    for (let i = 0; i < tries; i += 1) {
+      await act(async () => {
+        await new Promise((resolve) => setTimeout(resolve, 0));
+      });
+      try {
+        return check();
+      } catch {
+        // keep waiting
+      }
+    }
+    return check();
+  }
+
+  const itemNames = (container) => [...container.querySelectorAll("li h2")].map((node) => node.textContent).sort();
+  const namesOf = (list) => list.map((offering) => offering.name).sort();
+  const alertText = (container) => container.querySelector('[role="alert"]')?.textContent;
+
+  it("shows loading while the request is pending", async () => {
+    stubFetch(() => new Promise(() => {}));
+    const container = await renderPage(menuProps);
+    assert.match(container.textContent, /Loading menu\.\.\./);
+  });
+
+  for (const [label, props] of [
+    ["Menu", menuProps],
+    ["Specials", specialsProps],
+  ]) {
+    it(`shows the empty message for ${label} on []`, async () => {
+      stubFetch(() => jsonResponse([]));
+      const container = await renderPage(props);
+      await waitFor(() => assert.match(container.textContent, new RegExp(props.emptyMessage)));
+      assert.equal(container.querySelectorAll("li").length, 0);
+    });
+  }
+
+  it("shows the envelope message and no items or empty message on a 503", async () => {
+    stubFetch(() => jsonResponse({ error: { code: "DATABASE_UNAVAILABLE", message: "Please try again." } }, 503));
+    const container = await renderPage(menuProps);
+    await waitFor(() => assert.equal(alertText(container), "Please try again."));
+    assert.equal(container.querySelectorAll("li").length, 0);
+    assert.doesNotMatch(container.textContent, new RegExp(menuProps.emptyMessage));
+  });
+
+  it("falls back to the generic message when a failure body is not the envelope", async () => {
+    stubFetch(() => new Response("<html>bad gateway</html>", { status: 502 }));
+    const container = await renderPage(menuProps);
+    await waitFor(() => assert.equal(alertText(container), "Unable to load menu."));
+  });
+
+  it("shows an alert when the request rejects", async () => {
+    stubFetch(() => Promise.reject(new Error("offline")));
+    const container = await renderPage(menuProps);
+    await waitFor(() => assert.equal(alertText(container), "offline"));
+  });
+
+  it("treats a non-array 200 body as a failure", async () => {
+    stubFetch(() => jsonResponse({ not: "an array" }));
+    const container = await renderPage(menuProps);
+    await waitFor(() => assert.equal(alertText(container), "Unable to load menu."));
+    assert.equal(container.querySelectorAll("li").length, 0);
+  });
+
+  it("Menu includes every response item from /api/offerings", async () => {
+    const all = [...ordinaryItems, ...startingSpecials];
+    stubFetch(() => jsonResponse(all));
+    const container = await renderPage(menuProps);
+    await waitFor(() => assert.equal(container.querySelectorAll("li").length, all.length));
+    assert.deepEqual(itemNames(container), namesOf(all));
+    assert.deepEqual(fetchCalls, ["/api/offerings"]);
+    assert.match(container.textContent, /\$5\.90/);
+  });
+
+  it("Specials shows exactly the three starting specials and no ordinary items", async () => {
+    stubFetch(() => jsonResponse([...ordinaryItems, ...startingSpecials]));
+    const container = await renderPage(specialsProps);
+    await waitFor(() => assert.equal(container.querySelectorAll("li").length, 3));
+    assert.deepEqual(itemNames(container), namesOf(startingSpecials));
+    for (const item of ordinaryItems) assert.doesNotMatch(container.textContent, new RegExp(item.name));
+  });
+
+  it("shows a newly supplied special in Specials and Menu (fresh mount, not live update)", async () => {
+    const withNew = [...ordinaryItems, ...startingSpecials, newSpecial];
+    stubFetch(() => jsonResponse(withNew));
+    const specials = await renderPage(specialsProps);
+    await waitFor(() => assert.equal(specials.querySelectorAll("li").length, 4));
+    assert.ok(itemNames(specials).includes("Cardamom Latte"));
+    const menu = await renderPage(menuProps);
+    await waitFor(() => assert.equal(menu.querySelectorAll("li").length, withNew.length));
+    assert.ok(itemNames(menu).includes("Cardamom Latte"));
+  });
+
+  it("uses string IDs as keys without React key warnings", async () => {
+    const all = [...ordinaryItems, ...startingSpecials, newSpecial];
+    assert.ok(all.every((offering) => typeof offering.ID === "string" && offering.ID !== ""));
+    assert.equal(new Set(all.map((offering) => offering.ID)).size, all.length);
+    const errors = mock.method(console, "error", () => {});
+    stubFetch(() => jsonResponse(all));
+    const container = await renderPage(menuProps);
+    await waitFor(() => assert.equal(container.querySelectorAll("li").length, all.length));
+    assert.equal(errors.mock.calls.filter((call) => /key/i.test(String(call.arguments[0]))).length, 0);
+  });
+});
diff --git a/tests/previews/special-offerings.tsx b/tests/previews/special-offerings.tsx
new file mode 100644
index 0000000..ee158ca
--- /dev/null
+++ b/tests/previews/special-offerings.tsx
@@ -0,0 +1,39 @@
+import React, { useState } from "react";
+import { createRoot } from "react-dom/client";
+import OfferingsPage from "@/components/OfferingsPage";
+import SpecialOfferingControl from "@/components/SpecialOfferingControl";
+
+const scenario = new URLSearchParams(window.location.search).get("scenario") ?? "starting";
+const originalFetch = window.fetch.bind(window);
+window.fetch = (input, init) =>
+  originalFetch(input === "/api/offerings" ? `/api/offerings?scenario=${scenario}` : input, init);
+
+function Preview() {
+  const [checked, setChecked] = useState(false);
+  return (
+    <>
+      <section style={{ maxWidth: "56rem", margin: "auto", padding: "1.5rem" }}>
+        <h1>Controlled-response verification</h1>
+        <p>Test-only preview. No database or persistence. Scenario: {scenario}.</p>
+        <nav aria-label="Preview scenarios">
+          {["starting", "new-special", "empty", "failure", "loading"].map((name) => (
+            <a key={name} href={`?scenario=${name}`} style={{ display: "inline-block", padding: "0.75rem" }}>
+              {name}
+            </a>
+          ))}
+        </nav>
+        <SpecialOfferingControl checked={checked} onChange={setChecked} />
+        <p role="status">specialOffer: {String(checked)}</p>
+      </section>
+      <OfferingsPage title="Menu" intro="All controlled response items" emptyMessage="No offerings available." />
+      <OfferingsPage
+        title="Specials"
+        intro="Only special offerings"
+        emptyMessage="No special offerings available."
+        specialsOnly
+      />
+    </>
+  );
+}
+
+createRoot(document.getElementById("root")!).render(<Preview />);
diff --git a/tests/seed-offerings.test.mjs b/tests/seed-offerings.test.mjs
new file mode 100644
index 0000000..6261ca8
--- /dev/null
+++ b/tests/seed-offerings.test.mjs
@@ -0,0 +1,75 @@
+import assert from "node:assert/strict";
+import { spawn } from "node:child_process";
+import { once } from "node:events";
+import test from "node:test";
+import { MongoMemoryServer } from "mongodb-memory-server-core";
+import mongoose from "mongoose";
+
+test("insert-only seeding preserves offering edits, IDs, and unrelated records", { timeout: 60000 }, async (t) => {
+  const database = await MongoMemoryServer.create({ binary: { version: "7.0.24" } });
+  const uri = database.getUri("coffee_seed_test");
+  process.env.MONGO_URI = uri;
+  const { offeringStore } = await import("../src/database/offeringStore.ts");
+  async function seed(args = ["--apply"]) {
+    const child = spawn(process.execPath, ["--import", "tsx", "scripts/seed-offerings.ts", ...args], {
+      env: { ...process.env, MONGO_URI: uri },
+      windowsHide: true,
+      stdio: ["ignore", "pipe", "pipe"],
+    });
+    let output = "";
+    for (const stream of [child.stdout, child.stderr])
+      stream.on("data", (data) => {
+        output += data.toString();
+      });
+    const [code] = await once(child, "close");
+    return { code, output };
+  }
+  try {
+    await t.test("first seed inserts 16 public offerings with exactly three specials", async () => {
+      assert.equal((await seed()).code, 0);
+      const offerings = await offeringStore.list();
+      assert.equal(offerings.length, 16);
+      assert.equal(offerings.filter((offering) => offering.specialOffer).length, 3);
+      for (const offering of offerings) {
+        assert.match(offering.ID, /^[a-f\d]{24}$/);
+        assert.deepEqual(Object.keys(offering).sort(), [
+          "ID",
+          "category",
+          "description",
+          "name",
+          "price",
+          "specialOffer",
+        ]);
+      }
+    });
+    await t.test("rerun preserves edited seeded records and unrelated creations", async () => {
+      const cappuccino = (await offeringStore.list()).find((offering) => offering.name === "Cappuccino");
+      const { ID, ...details } = cappuccino;
+      await offeringStore.update(ID, { ...details, price: 8.25 });
+      const unrelated = await offeringStore.create({
+        name: "Team creation",
+        description: "Keep this offering",
+        price: 3,
+        category: "Tea",
+      });
+      assert.equal((await seed()).code, 0);
+      const offerings = await offeringStore.list();
+      assert.equal(offerings.length, 17);
+      assert.equal(offerings.find((offering) => offering.ID === ID).price, 8.25);
+      assert.deepEqual(
+        offerings.find((offering) => offering.ID === unrelated.ID),
+        { ...unrelated, specialOffer: false },
+      );
+    });
+    await t.test("seed refuses execution without explicit confirmation", async () => {
+      const before = await offeringStore.list();
+      const result = await seed([]);
+      assert.equal(result.code, 1);
+      assert.doesNotMatch(result.output, /mongodb:\/\//);
+      assert.deepEqual(await offeringStore.list(), before);
+    });
+  } finally {
+    await mongoose.disconnect();
+    await database.stop();
+  }
+});
diff --git a/tests/special-offering-control.test.mjs b/tests/special-offering-control.test.mjs
new file mode 100644
index 0000000..ac23053
--- /dev/null
+++ b/tests/special-offering-control.test.mjs
@@ -0,0 +1,52 @@
+import assert from "node:assert/strict";
+import { createRequire } from "node:module";
+import test from "node:test";
+import React, { act } from "react";
+import { JSDOM } from "jsdom";
+
+const dom = new JSDOM("<!doctype html><html><body></body></html>");
+globalThis.window = dom.window;
+globalThis.document = dom.window.document;
+Object.defineProperty(globalThis, "navigator", { value: dom.window.navigator, configurable: true });
+globalThis.IS_REACT_ACT_ENVIRONMENT = true;
+globalThis.React = React;
+const require = createRequire(import.meta.url);
+require.extensions[".css"] = (module) => {
+  module.exports = {};
+};
+const { createRoot } = await import("react-dom/client");
+
+test("the labeled special control follows its parent and emits true and false", async () => {
+  const SpecialOfferingControl = require("../src/components/SpecialOfferingControl.tsx").default;
+  const changes = [];
+  function Parent() {
+    const [checked, setChecked] = React.useState(false);
+    return React.createElement(SpecialOfferingControl, {
+      checked,
+      onChange(next) {
+        changes.push(next);
+        setChecked(next);
+      },
+    });
+  }
+  const container = document.createElement("div");
+  document.body.append(container);
+  const root = createRoot(container);
+  try {
+    await act(async () => root.render(React.createElement(Parent)));
+    const checkbox = container.querySelector('input[type="checkbox"]');
+    assert.ok(checkbox.labels[0].textContent.includes("Special offering"));
+    assert.equal(checkbox.checked, false);
+    await act(async () => checkbox.click());
+    assert.equal(checkbox.checked, true);
+    await act(async () => checkbox.click());
+    assert.equal(checkbox.checked, false);
+    assert.deepEqual(changes, [true, false]);
+    await act(async () => root.render(React.createElement(SpecialOfferingControl, { checked: true, onChange() {} })));
+    assert.equal(container.querySelector("input").checked, true);
+  } finally {
+    await act(async () => root.unmount());
+    container.remove();
+    dom.window.close();
+  }
+});
diff --git a/tests/unit/README.md b/tests/unit/README.md
new file mode 100644
index 0000000..0884a9c
--- /dev/null
+++ b/tests/unit/README.md
@@ -0,0 +1,57 @@
+# Unit and component test handoff
+
+Vitest runs `tests/unit/**/*.test.ts` and `tests/unit/**/*.test.tsx`. The existing
+`.mjs` regression files still use Node's test runner; keep their imports and
+coverage intact.
+
+## Vedika: issue #35
+
+Start from updated `main`. You can complete this customer-page assignment without
+waiting for PR #31. Extend `customer-pages.test.tsx`, which renders the shared
+`OfferingsPage` component used by `/menu` and `/specials`.
+
+The file contains five reference tests, browser setup, and cleanup. Vitest
+restores stubbed globals after each test. Optional sample data and a JSON response
+helper are in `helpers/offerings.ts`. None of your assigned Vitest cases has been
+implemented for you. Existing Node regressions cover related UI states; keep them
+and add your own rendered assertions in the Vitest file.
+
+Personally write three new tests:
+
+1. Specials shows its empty feedback when the response contains offerings but none
+   have `specialOffer: true`.
+2. A rejected network request shows an error and does not show the empty-menu feedback.
+3. An unsuccessful API response with an unreadable error body shows useful fallback feedback.
+
+Use controlled fetch responses. Render the component with the appropriate props
+and inspect visible feedback. Async requests require waiting for the resulting UI.
+Fix any related defects your tests expose. Do not copy the loading example and
+claim it as a contribution, or replace the assigned cases with skipped tests.
+
+Also check Home, About, Contact, Menu, Specials, and navigation at desktop/mobile
+widths and with a keyboard. Capture focus, long-text, and overflow evidence as
+required by [issue #35](https://github.com/BrianLiDesign/coffee-shop/issues/35).
+
+## Commands
+
+- Install the locked dependencies: `npm ci`.
+- Run only customer-page tests: `npm run test:unit -- tests/unit/customer-pages.test.tsx`.
+- Watch unit/component tests: `npm run test:watch`.
+- Run all checks before submitting: `npm run preflight`.
+
+Open your own reviewed PR into `main`. Record its link, your three test names,
+what each protects, and browser evidence in
+[`docs/milestone-3-evidence.md`](../../docs/milestone-3-evidence.md).
+Controlled responses verify UI behavior; they do not prove live database persistence.
+
+## Other developer assignments and release integration
+
+PR #31 integrates the handlers, replacement management component, live acceptance
+runner, and their reference tests into `main`. After it merges, developers can
+start from updated `main` and follow their assigned issues. Sofie's issue #36
+extends `scripts/live-acceptance.ts` through controlled fetch responses. Deployment
+and live verification remain separate work, tracked in issue #30.
+
+Preserve this handoff and each developer's contributed cases. Keep agent-written
+reference tests distinct from personal contributions. Retain
+both unit and regression commands, including storage and seed coverage from `main`.
diff --git a/tests/unit/acceptance-runner.test.ts b/tests/unit/acceptance-runner.test.ts
new file mode 100644
index 0000000..da5fbe2
--- /dev/null
+++ b/tests/unit/acceptance-runner.test.ts
@@ -0,0 +1,114 @@
+import { expect, it } from "vitest";
+import { seedOffering, startControlledServer } from "../controlled-server";
+import { runAcceptance } from "../../scripts/acceptance";
+
+it("runner rejects 201 with an invalid Offering even when GET succeeds", async () => {
+  const server = await startControlledServer("bad-post-body");
+  try {
+    await expect(
+      runAcceptance({ baseUrl: server.baseUrl, scenario: "empty", username: "team", password: "test-only-password" }),
+    ).rejects.toThrow(/Invalid public fields/);
+  } finally {
+    await server.stop();
+  }
+});
+
+const credentials = { username: "team", password: "test-only-password" };
+it.each(["empty", "seeded"] as const)("runner verifies the %s scenario and cleans up its records", async (scenario) => {
+  const server = await startControlledServer("correct", scenario === "seeded");
+  try {
+    const stages = await runAcceptance({
+      baseUrl: server.baseUrl,
+      scenario,
+      ...credentials,
+      expectedSeed: [seedOffering],
+    });
+    expect(stages).toHaveLength(4);
+    expect(server.records).toEqual(scenario === "seeded" ? [seedOffering] : []);
+  } finally {
+    await server.stop();
+  }
+});
+
+it.each([
+  "wrong-status",
+  "private-get",
+  "wrong-shape",
+  "missing-read-back",
+  "wrong-default",
+  "wrong-special",
+  "invalid-id",
+  "duplicate-id",
+  "internal-fields",
+  "wrong-order",
+  "malformed-json",
+  "accept-invalid",
+  "cleanup-failure",
+  "cleanup-not-persisted",
+  "timeout",
+])("runner fails for controlled %s behavior", async (mode) => {
+  const server = await startControlledServer(mode);
+  try {
+    await expect(
+      runAcceptance({ baseUrl: server.baseUrl, scenario: "empty", ...credentials, timeoutMs: 300 }),
+    ).rejects.toThrow();
+  } finally {
+    await server.stop();
+  }
+});
+
+it("requires an explicit seeded expectation and actual empty state", async () => {
+  const server = await startControlledServer("correct", true);
+  try {
+    await expect(runAcceptance({ baseUrl: server.baseUrl, scenario: "empty", ...credentials })).rejects.toThrow(
+      /empty database/,
+    );
+    await expect(runAcceptance({ baseUrl: server.baseUrl, scenario: "seeded", ...credentials })).rejects.toThrow(
+      /expected seed/,
+    );
+    await expect(
+      runAcceptance({
+        baseUrl: server.baseUrl,
+        scenario: "seeded",
+        ...credentials,
+        expectedSeed: [{ ...seedOffering, price: 9 }],
+      }),
+    ).rejects.toThrow(/details changed/);
+  } finally {
+    await server.stop();
+  }
+});
+
+it("checks deliberate GET and POST database failure without inferring it from ordinary mode", async () => {
+  const server = await startControlledServer("database-failure");
+  try {
+    expect(await runAcceptance({ baseUrl: server.baseUrl, scenario: "database-failure", ...credentials })).toHaveLength(
+      1,
+    );
+    await expect(runAcceptance({ baseUrl: server.baseUrl, scenario: "empty", ...credentials })).rejects.toThrow(/GET/);
+  } finally {
+    await server.stop();
+  }
+});
+
+it("rejects raw connection details in deliberately failed database responses", async () => {
+  const server = await startControlledServer("leaked-failure");
+  try {
+    await expect(
+      runAcceptance({ baseUrl: server.baseUrl, scenario: "database-failure", ...credentials }),
+    ).rejects.toThrow(/leaked/);
+  } finally {
+    await server.stop();
+  }
+});
+
+it.each([
+  "https://shop.example",
+  "http://localhost:3000",
+  "http://team:secret@127.0.0.1:3000",
+  "http://127.0.0.1:3000/path",
+  "http://127.0.0.1:3000?secret=x",
+  "invalid",
+])("refuses unsafe or ambiguous target %s before requests", async (baseUrl) => {
+  await expect(runAcceptance({ baseUrl, scenario: "empty", ...credentials })).rejects.toThrow(/loopback/);
+});
diff --git a/tests/unit/customer-pages.test.tsx b/tests/unit/customer-pages.test.tsx
new file mode 100644
index 0000000..2bd5090
--- /dev/null
+++ b/tests/unit/customer-pages.test.tsx
@@ -0,0 +1,69 @@
+// @vitest-environment jsdom
+import React from "react";
+import { afterEach, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+import OfferingsPage from "@/components/OfferingsPage";
+
+afterEach(cleanup);
+const props = { title: "Menu", intro: "Our drinks", emptyMessage: "No offerings yet." };
+const item = {
+  ID: "saved",
+  name: "Latte",
+  description: "Espresso and milk",
+  price: 4.25,
+  category: "Coffee",
+  specialOffer: false,
+};
+const response = (body: unknown, status = 200) => new Response(JSON.stringify(body), { status });
+
+// Agent-written foundation/reference coverage, not a personal contribution.
+it("announces loading while a request is pending", () => {
+  vi.stubGlobal(
+    "fetch",
+    vi.fn(() => new Promise(() => {})),
+  );
+  render(<OfferingsPage {...props} />);
+  expect(screen.getByRole("status").textContent).toBe("Loading menu...");
+});
+
+it("filters Specials by the saved boolean flag", async () => {
+  vi.stubGlobal(
+    "fetch",
+    vi.fn().mockResolvedValue(response([item, { ...item, ID: "special", name: "Seasonal latte", specialOffer: true }])),
+  );
+  render(<OfferingsPage {...props} title="Specials" specialsOnly />);
+  await screen.findByRole("heading", { name: "Seasonal latte" });
+  expect(screen.queryByRole("heading", { name: "Latte" })).toBeNull();
+});
+
+it("treats malformed success data as an error rather than crashing the page", async () => {
+  vi.stubGlobal("fetch", vi.fn().mockResolvedValue(response([{ ...item, price: "4.25" }])));
+  render(<OfferingsPage {...props} />);
+  expect((await screen.findByRole("alert")).textContent).toBe("Unable to load menu.");
+});
+
+it("shows an empty state for an empty successful response", async () => {
+  vi.stubGlobal("fetch", vi.fn().mockResolvedValue(response([])));
+  render(<OfferingsPage {...props} />);
+  await screen.findByText("No offerings yet.");
+  expect(screen.queryByRole("alert")).toBeNull();
+});
+
+it("shows a readable failure and can retry successfully", async () => {
+  vi.stubGlobal(
+    "fetch",
+    vi
+      .fn()
+      .mockResolvedValueOnce(response({ error: { message: "Please try again." } }, 503))
+      .mockResolvedValueOnce(response([item])),
+  );
+  render(<OfferingsPage {...props} />);
+  expect((await screen.findByRole("alert")).textContent).toBe("Please try again.");
+  expect(screen.queryByText("No offerings yet.")).toBeNull();
+  fireEvent.click(screen.getByRole("button", { name: "Try again" }));
+  await screen.findByRole("heading", { name: "Latte" });
+  expect(screen.queryByRole("alert")).toBeNull();
+});
+
+// Issue #35: write three NEW cases. See ./README.md for the assigned scenarios.
+// Keep the reference tests above; do not count them as personal contributions.
diff --git a/tests/unit/helpers/handler-http.ts b/tests/unit/helpers/handler-http.ts
new file mode 100644
index 0000000..767f170
--- /dev/null
+++ b/tests/unit/helpers/handler-http.ts
@@ -0,0 +1,71 @@
+import { createServer } from "node:http";
+import { randomUUID } from "node:crypto";
+import type { CreateOfferingInput, Offering } from "@/types/offering";
+
+/** Independent handler test double. Never selected by the application. */
+export class TestOfferingStore {
+  private records: Offering[];
+
+  constructor(records: Offering[] = []) {
+    this.records = records.map((record) => ({ ...record }));
+  }
+
+  async list(): Promise<Offering[]> {
+    return this.records
+      .map((record) => ({ ...record }))
+      .sort((left, right) => left.name.localeCompare(right.name) || left.ID.localeCompare(right.ID));
+  }
+
+  async create(input: CreateOfferingInput): Promise<Offering> {
+    const record = { ...input, ID: randomUUID(), specialOffer: input.specialOffer ?? false };
+    this.records.push(record);
+    return { ...record };
+  }
+}
+
+/** Hosts real request handlers without Next.js, MongoDB, or production fixtures. */
+export async function startHandlerHttpServer(handlers: {
+  GET(): Promise<Response>;
+  POST(request: Request): Promise<Response>;
+}) {
+  const server = createServer(async (incoming, outgoing) => {
+    try {
+      if (incoming.url !== "/api/offerings" || !["GET", "POST"].includes(incoming.method ?? "")) {
+        outgoing.writeHead(404).end();
+        return;
+      }
+      const chunks: Buffer[] = [];
+      for await (const chunk of incoming) chunks.push(Buffer.from(chunk));
+      const request = new Request(`http://${incoming.headers.host}${incoming.url}`, {
+        method: incoming.method,
+        headers: new Headers(
+          Object.entries(incoming.headers).flatMap(([key, value]) =>
+            value === undefined ? [] : [[key, Array.isArray(value) ? value.join(", ") : value]],
+          ),
+        ),
+        ...(incoming.method === "POST" ? { body: Buffer.concat(chunks).toString("utf8") } : {}),
+      });
+      const response = incoming.method === "POST" ? await handlers.POST(request) : await handlers.GET();
+      outgoing.writeHead(response.status, Object.fromEntries(response.headers));
+      outgoing.end(Buffer.from(await response.arrayBuffer()));
+    } catch {
+      outgoing.writeHead(500).end();
+    }
+  });
+  await new Promise<void>((resolve, reject) => {
+    server.once("error", reject);
+    server.listen(0, "127.0.0.1", () => {
+      server.off("error", reject);
+      resolve();
+    });
+  });
+  const address = server.address();
+  if (!address || typeof address === "string") throw new Error("Expected a loopback port.");
+  return {
+    url: `http://127.0.0.1:${address.port}/api/offerings`,
+    async stop() {
+      server.closeIdleConnections();
+      await new Promise<void>((resolve, reject) => server.close((error) => (error ? reject(error) : resolve())));
+    },
+  };
+}
diff --git a/tests/unit/helpers/offerings.ts b/tests/unit/helpers/offerings.ts
new file mode 100644
index 0000000..220bf5a
--- /dev/null
+++ b/tests/unit/helpers/offerings.ts
@@ -0,0 +1,18 @@
+import type { Offering } from "@/types/offering";
+
+/** Sample data for controlled component tests, never a runtime fallback. */
+export const sampleOffering: Offering = {
+  ID: "sample-latte",
+  name: "Latte",
+  description: "Espresso and milk",
+  price: 4.25,
+  category: "Coffee",
+  specialOffer: false,
+};
+
+export function jsonResponse(body: unknown, status = 200): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "Content-Type": "application/json" },
+  });
+}
diff --git a/tests/unit/live-acceptance.test.ts b/tests/unit/live-acceptance.test.ts
new file mode 100644
index 0000000..d6f3fc3
--- /dev/null
+++ b/tests/unit/live-acceptance.test.ts
@@ -0,0 +1,43 @@
+import { expect, it, vi } from "vitest";
+import { verifyLive } from "../../scripts/live-acceptance";
+
+it("fails acceptance for an incorrect GET status", async () => {
+  const fetcher = vi.fn().mockResolvedValue(new Response("unavailable", { status: 503 }));
+  await expect(verifyLive({ baseUrl: "https://shop.example", fetcher })).rejects.toThrow(/GET/);
+});
+
+it("fails acceptance for a malformed public offering", async () => {
+  const fetcher = vi.fn().mockResolvedValue(new Response(JSON.stringify([{ ID: "broken", price: "4.25" }])));
+  await expect(verifyLive({ baseUrl: "https://shop.example", fetcher })).rejects.toThrow(/invalid public offering/);
+});
+
+it("fails when an acknowledged creation is missing from subsequent GET", async () => {
+  const fetcher = vi.fn(async (_url: unknown, init?: RequestInit) => {
+    if (init?.method === "POST" && !(init.headers as Record<string, string>)?.Authorization)
+      return new Response(null, { status: 401 });
+    if (init?.method === "POST")
+      return new Response(JSON.stringify({ ID: "new-id", ...JSON.parse(String(init.body)) }), { status: 201 });
+    return new Response("[]");
+  });
+  await expect(
+    verifyLive({
+      baseUrl: "https://shop.example",
+      fetcher,
+      allowWrites: true,
+      username: "team",
+      password: "test-only-password",
+    }),
+  ).rejects.toThrow(/missing or changed/);
+});
+
+it("refuses credential-bearing URLs and remote plain HTTP before making requests", async () => {
+  const fetcher = vi.fn();
+  for (const baseUrl of [
+    "http://shop.example",
+    "https://team:password@shop.example",
+    "https://shop.example/?token=secret",
+  ]) {
+    await expect(verifyLive({ baseUrl, fetcher })).rejects.toThrow(/HTTPS origin/);
+  }
+  expect(fetcher).not.toHaveBeenCalled();
+});
diff --git a/tests/unit/management.test.tsx b/tests/unit/management.test.tsx
new file mode 100644
index 0000000..abed81f
--- /dev/null
+++ b/tests/unit/management.test.tsx
@@ -0,0 +1,128 @@
+// @vitest-environment jsdom
+import React from "react";
+import { afterEach, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen, waitFor } from "@testing-library/react";
+import ManageOfferings from "@/components/ManageOfferings";
+
+const offering = {
+  ID: "0123456789abcdef01234567",
+  name: "Latte",
+  description: "Espresso and milk",
+  price: 4.25,
+  category: "Coffee",
+  specialOffer: false,
+};
+const response = (body: unknown, status = 200) => new Response(JSON.stringify(body), { status });
+afterEach(cleanup);
+
+it("keeps the form usable when a failed API returns malformed display fields", async () => {
+  const fetcher = vi
+    .fn()
+    .mockResolvedValueOnce(response([]))
+    .mockResolvedValueOnce(
+      response(
+        { error: { message: {}, fields: { name: { invalid: true }, description: "Try a shorter description." } } },
+        503,
+      ),
+    );
+  vi.stubGlobal("fetch", fetcher);
+  render(<ManageOfferings />);
+  await screen.findByText("No offerings are available right now.");
+  fireEvent.change(screen.getByLabelText("Name"), { target: { value: "New latte" } });
+  fireEvent.change(screen.getByLabelText("Description"), { target: { value: "Oat milk" } });
+  fireEvent.change(screen.getByLabelText("Price"), { target: { value: "4.25" } });
+  fireEvent.click(screen.getByRole("button", { name: "Save offering" }));
+  await screen.findByText("The offering could not be saved.");
+  expect(screen.getByText("Try a shorter description.")).toBeTruthy();
+  expect((screen.getByLabelText("Name") as HTMLInputElement).value).toBe("New latte");
+});
+
+it("edits the selected offering and sends its persisted identity", async () => {
+  const fetcher = vi
+    .fn()
+    .mockResolvedValueOnce(response([offering]))
+    .mockResolvedValueOnce(response({ ...offering, name: "Oat latte" }))
+    .mockResolvedValueOnce(response([{ ...offering, name: "Oat latte" }]));
+  vi.stubGlobal("fetch", fetcher);
+  render(<ManageOfferings />);
+  fireEvent.click(await screen.findByRole("button", { name: "Edit Latte" }));
+  const name = screen.getByLabelText("Name");
+  expect((name as HTMLInputElement).value).toBe("Latte");
+  fireEvent.change(name, { target: { value: "Oat latte" } });
+  fireEvent.click(screen.getByRole("button", { name: "Save changes" }));
+  await screen.findByText("Offering updated successfully.");
+  expect(fetcher.mock.calls[1][0]).toBe(`/api/offerings/${offering.ID}`);
+  expect(fetcher.mock.calls[1][1].method).toBe("PUT");
+  await waitFor(() => expect(screen.queryByRole("button", { name: "Edit Latte" })).toBeNull());
+});
+
+it("requires confirmation before deleting an offering", async () => {
+  const fetcher = vi
+    .fn()
+    .mockResolvedValueOnce(response([offering]))
+    .mockResolvedValueOnce(new Response(null, { status: 204 }))
+    .mockResolvedValueOnce(response([]));
+  vi.stubGlobal("fetch", fetcher);
+  render(<ManageOfferings />);
+  fireEvent.click(await screen.findByRole("button", { name: "Delete Latte" }));
+  expect(fetcher).toHaveBeenCalledTimes(1);
+  expect(screen.getByRole("group", { name: "Confirm deletion of Latte" })).toBeTruthy();
+  fireEvent.click(screen.getByRole("button", { name: "Confirm delete" }));
+  await screen.findByText("Offering deleted successfully.");
+  await screen.findByText("No offerings are available right now.");
+  expect(fetcher.mock.calls[1][1].method).toBe("DELETE");
+});
+
+it("locks all inputs during saving and retains values after failure", async () => {
+  let finishSave!: (value: Response) => void;
+  const fetcher = vi
+    .fn()
+    .mockResolvedValueOnce(response([]))
+    .mockImplementationOnce(
+      () =>
+        new Promise<Response>((resolve) => {
+          finishSave = resolve;
+        }),
+    );
+  vi.stubGlobal("fetch", fetcher);
+  render(<ManageOfferings />);
+  await screen.findByText("No offerings are available right now.");
+  fireEvent.change(screen.getByLabelText("Name"), { target: { value: "New latte" } });
+  fireEvent.change(screen.getByLabelText("Description"), { target: { value: "Oat milk" } });
+  fireEvent.change(screen.getByLabelText("Price"), { target: { value: "4.25" } });
+  fireEvent.click(screen.getByRole("checkbox", { name: "Special offering" }));
+  fireEvent.click(screen.getByRole("button", { name: "Save offering" }));
+  expect((screen.getByLabelText("Name") as HTMLInputElement).disabled).toBe(true);
+  expect((screen.getByRole("checkbox") as HTMLInputElement).disabled).toBe(true);
+  finishSave(response({ error: { message: "Saving is unavailable." } }, 503));
+  await screen.findByText("Saving is unavailable.");
+  expect((screen.getByLabelText("Name") as HTMLInputElement).value).toBe("New latte");
+  expect((screen.getByRole("checkbox") as HTMLInputElement).checked).toBe(true);
+  expect(screen.getByRole("button", { name: "Save offering" }).hasAttribute("disabled")).toBe(false);
+});
+
+it("reports successful saving separately from a failed list reload", async () => {
+  vi.stubGlobal(
+    "fetch",
+    vi
+      .fn()
+      .mockResolvedValueOnce(response([offering]))
+      .mockResolvedValueOnce(response(offering, 201))
+      .mockResolvedValueOnce(response({ error: { message: "Reload failed." } }, 503)),
+  );
+  render(<ManageOfferings />);
+  await screen.findByRole("button", { name: "Edit Latte" });
+  for (const [label, value] of [
+    ["Name", "Latte"],
+    ["Description", "Espresso and milk"],
+    ["Price", "4.25"],
+  ]) {
+    fireEvent.change(screen.getByLabelText(label), { target: { value } });
+  }
+  fireEvent.click(screen.getByRole("button", { name: "Save offering" }));
+  await screen.findByText(
+    "Offering saved, but the list could not refresh. Please reload the page to confirm the update.",
+  );
+  expect((screen.getByLabelText("Name") as HTMLInputElement).value).toBe("");
+  expect(screen.getByRole("button", { name: "Retry loading offerings" })).toBeTruthy();
+});
diff --git a/tests/unit/offering-handlers.test.ts b/tests/unit/offering-handlers.test.ts
new file mode 100644
index 0000000..ac18a0d
--- /dev/null
+++ b/tests/unit/offering-handlers.test.ts
@@ -0,0 +1,128 @@
+import { describe, expect, it, vi } from "vitest";
+import { createOfferingHandlers } from "@/server/offering-handlers";
+import type { Offering } from "@/types/offering";
+
+const input = { name: "Latte", description: "Espresso and milk", price: 4.25, category: "Coffee" };
+const saved: Offering = { ...input, category: "Coffee", ID: "0123456789abcdef01234567", specialOffer: false };
+const authorization = `Basic ${Buffer.from("team:test-only-password").toString("base64")}`;
+
+function setup() {
+  vi.stubEnv("MANAGEMENT_USERNAME", "team");
+  vi.stubEnv("MANAGEMENT_PASSWORD", "test-only-password");
+  const records: Offering[] = [];
+  const store = {
+    async list() {
+      return [...records];
+    },
+    async create() {
+      records.push(saved);
+      return saved;
+    },
+    async update() {
+      return null;
+    },
+    async remove() {
+      return false;
+    },
+  };
+  return { handlers: createOfferingHandlers(store), store };
+}
+
+function request(body: unknown = input, headers: Record<string, string> = {}) {
+  return new Request("https://shop.example/api/offerings", {
+    method: "POST",
+    headers: { "Content-Type": "application/json", Authorization: authorization, ...headers },
+    body: JSON.stringify(body),
+  });
+}
+
+describe("offering HTTP handlers", () => {
+  it("accepts the browser Host when Next.js normalizes the internal hostname", async () => {
+    const { handlers } = setup();
+    const response = await handlers.POST(request(input, { Host: "127.0.0.1:3000", Origin: "https://127.0.0.1:3000" }));
+    expect(response.status).toBe(201);
+    expect(
+      (await handlers.POST(request(input, { Host: "127.0.0.1:3000", Origin: "https://attacker.example" }))).status,
+    ).toBe(403);
+  });
+  it("creates an offering and exposes the same public ID through GET", async () => {
+    const { handlers } = setup();
+    const response = await handlers.POST(request());
+    expect(response.status).toBe(201);
+    expect(await response.json()).toEqual(saved);
+    expect(await (await handlers.GET()).json()).toEqual([saved]);
+  });
+  it.each(
+    [
+      { ...input, price: "4.25" },
+      { ...input, price: null },
+      { ...input, name: " " },
+      { ...input, price: -1 },
+      { ...input, price: 4.251 },
+      { ...input, category: " coffee " },
+      { ...input, ID: "client-id" },
+      { ...input, specialOffer: "false" },
+      [],
+      null,
+    ].map((body) => ({ body })),
+  )("rejects invalid raw input without changing the list: %j", async ({ body }) => {
+    const { handlers } = setup();
+    expect((await handlers.POST(request(body))).status).toBe(400);
+    expect(await (await handlers.GET()).json()).toEqual([]);
+  });
+  it("sanitizes database failures on both reads and writes", async () => {
+    const { store } = setup();
+    store.list = async () => {
+      throw new Error("mongodb://private-password@host");
+    };
+    store.create = async () => {
+      throw new Error("secret credentials");
+    };
+    const handlers = createOfferingHandlers(store);
+    for (const response of [await handlers.GET(), await handlers.POST(request())]) {
+      expect(response.status).toBe(503);
+      expect(await response.text()).not.toMatch(/private-password|secret credentials|mongodb/);
+    }
+  });
+  it("denies missing credentials, missing configuration, and cross-origin writes", async () => {
+    const { handlers } = setup();
+    expect((await handlers.POST(request(input, { Authorization: "" }))).status).toBe(401);
+    expect((await handlers.POST(request(input, { Origin: "https://attacker.example" }))).status).toBe(403);
+    vi.stubEnv("MANAGEMENT_PASSWORD", "");
+    expect((await handlers.POST(request())).status).toBe(401);
+    expect(await (await handlers.GET()).json()).toEqual([]);
+  });
+  it("reports invalid content type and malformed JSON", async () => {
+    const { handlers } = setup();
+    expect((await handlers.POST(request(input, { "Content-Type": "text/plain" }))).status).toBe(415);
+    const malformed = new Request("https://shop.example/api/offerings", {
+      method: "POST",
+      headers: { Authorization: authorization, "Content-Type": "application/json" },
+      body: "{",
+    });
+    expect((await handlers.POST(malformed)).status).toBe(400);
+  });
+  it("returns 404 for missing records and 400 for invalid identities", async () => {
+    const { handlers } = setup();
+    expect((await handlers.PUT(request(), saved.ID)).status).toBe(404);
+    expect((await handlers.DELETE(request(), "bad-id")).status).toBe(400);
+    expect((await handlers.DELETE(request(), saved.ID)).status).toBe(404);
+  });
+  it("enforces access and sanitizes database failures on update and delete", async () => {
+    const { store } = setup();
+    store.update = async () => {
+      throw new Error("private database details");
+    };
+    store.remove = async () => {
+      throw new Error("private database details");
+    };
+    const handlers = createOfferingHandlers(store);
+    for (const operation of [handlers.PUT, handlers.DELETE]) {
+      expect((await operation(request(input, { Authorization: "" }), saved.ID)).status).toBe(401);
+      expect((await operation(request(input, { Origin: "https://attacker.example" }), saved.ID)).status).toBe(403);
+      const unavailable = await operation(request(), saved.ID);
+      expect(unavailable.status).toBe(503);
+      expect(await unavailable.text()).not.toContain("private database details");
+    }
+  });
+});
diff --git a/tests/unit/offerings-handlers-http.test.ts b/tests/unit/offerings-handlers-http.test.ts
new file mode 100644
index 0000000..e73bfb5
--- /dev/null
+++ b/tests/unit/offerings-handlers-http.test.ts
@@ -0,0 +1,268 @@
+import { afterEach, beforeEach, expect, test, vi } from "vitest";
+import { createOfferingCollectionHandlers } from "@/server/offering-handlers";
+import { startHandlerHttpServer, TestOfferingStore } from "./helpers/handler-http";
+import type { CreateOfferingInput, Offering } from "@/types/offering";
+
+const input = { name: "  Independent Tea  ", description: "  Brewed for testing  ", price: 2.5, category: "Tea" };
+const authorization = `Basic ${Buffer.from("handler-team:independent-test-password").toString("base64")}`;
+let host: Awaited<ReturnType<typeof startHandlerHttpServer>> | undefined;
+
+beforeEach(() => {
+  vi.stubEnv("MANAGEMENT_USERNAME", "handler-team");
+  vi.stubEnv("MANAGEMENT_PASSWORD", "independent-test-password");
+});
+afterEach(async () => {
+  await host?.stop();
+  host = undefined;
+  vi.unstubAllEnvs();
+});
+
+async function start(store = new TestOfferingStore()) {
+  host = await startHandlerHttpServer(createOfferingCollectionHandlers(store));
+  return host.url;
+}
+
+function post(url: string, body: unknown = input, headers: Record<string, string> = {}) {
+  return fetch(url, {
+    method: "POST",
+    headers: { authorization, "Content-Type": "application/json", ...headers },
+    body: JSON.stringify(body),
+  });
+}
+
+async function expectError(response: Response, status: number, code: string) {
+  expect(response.status).toBe(status);
+  expect(response.headers.get("content-type")).toContain("application/json");
+  expect(response.headers.get("cache-control")).toBe("no-store");
+  const body = await response.json();
+  expect(body).toEqual({
+    error: { code, message: expect.any(String), ...(body.error.fields ? { fields: body.error.fields } : {}) },
+  });
+  expect(body.error.message.length).toBeGreaterThan(0);
+  return body;
+}
+
+test("supplied list/create storage accepts a normalized offering and GET returns the same ID", async () => {
+  host = await startHandlerHttpServer(createOfferingCollectionHandlers(new TestOfferingStore()));
+  const response = await fetch(host.url, {
+    method: "POST",
+    headers: { authorization, "Content-Type": "application/json" },
+    body: JSON.stringify(input),
+  });
+  expect(response.status).toBe(201);
+  const created = await response.json();
+  expect(created).toEqual({
+    ID: expect.any(String),
+    name: "Independent Tea",
+    description: "Brewed for testing",
+    price: 2.5,
+    category: "Tea",
+    specialOffer: false,
+  });
+  expect(created.ID).not.toBe("");
+  expect(await (await fetch(host.url)).json()).toEqual([created]);
+});
+
+test("GET returns an empty public array", async () => {
+  const response = await fetch(await start());
+  expect(response.status).toBe(200);
+  expect(response.headers.get("cache-control")).toBe("no-store");
+  expect(await response.json()).toEqual([]);
+});
+
+test("GET preserves the supplied name-then-ID ordering and public records", async () => {
+  const seed: Offering[] = [
+    { ID: "tea-b", name: "Tea", description: "Second tea", price: 3, category: "Tea", specialOffer: true },
+    { ID: "coffee-a", name: "Coffee", description: "First coffee", price: 2, category: "Coffee", specialOffer: false },
+    { ID: "tea-a", name: "Tea", description: "First tea", price: 2, category: "Tea", specialOffer: false },
+  ];
+  const response = await fetch(await start(new TestOfferingStore(seed)));
+  expect(response.status).toBe(200);
+  expect(await response.json()).toEqual([seed[1], seed[2], seed[0]]);
+});
+
+test.each([
+  { label: "ordinary", details: { ...input, specialOffer: false }, special: false },
+  { label: "special", details: { ...input, specialOffer: true }, special: true },
+  { label: "default", details: input, special: false },
+])("POST creates a $label offering visible through GET", async ({ details, special }) => {
+  const url = await start();
+  const response = await post(url, details);
+  expect(response.status).toBe(201);
+  const created = await response.json();
+  expect(created.specialOffer).toBe(special);
+  expect(typeof created.ID).toBe("string");
+  expect(created.ID).not.toBe("");
+  expect(await (await fetch(url)).json()).toEqual([created]);
+});
+
+test.each([
+  {
+    label: "trimmed maximum lengths",
+    details: { ...input, name: ` ${"n".repeat(100)} `, description: ` ${"d".repeat(500)} ` },
+  },
+  { label: "zero price", details: { ...input, price: 0 } },
+  { label: "floating-point cents", details: { ...input, price: 0.1 + 0.2 } },
+  { label: "Coffee category", details: { ...input, category: "Coffee" } },
+  { label: "Smoothie category", details: { ...input, category: "Smoothie" } },
+])("POST accepts $label", async ({ details }) => {
+  const url = await start();
+  const response = await post(url, details);
+  expect(response.status).toBe(201);
+  const created = await response.json();
+  expect(created.name).toBe(details.name.trim());
+  expect(created.description).toBe(details.description.trim());
+  expect(created.price).toBe(details.price);
+  expect(await (await fetch(url)).json()).toEqual([created]);
+});
+
+const invalidInputs = [
+  { label: "missing name", body: { ...input, name: undefined } },
+  { label: "blank name", body: { ...input, name: " \t " } },
+  { label: "numeric name", body: { ...input, name: 42 } },
+  { label: "overlong name", body: { ...input, name: "n".repeat(101) } },
+  { label: "missing description", body: { ...input, description: undefined } },
+  { label: "empty description", body: { ...input, description: "" } },
+  { label: "blank description", body: { ...input, description: " \t " } },
+  { label: "null description", body: { ...input, description: null } },
+  { label: "numeric description", body: { ...input, description: 42 } },
+  { label: "overlong description", body: { ...input, description: "d".repeat(501) } },
+  { label: "missing price", body: { ...input, price: undefined } },
+  { label: "numeric-string price", body: { ...input, price: "2.5" } },
+  { label: "null price", body: { ...input, price: null } },
+  { label: "boolean price", body: { ...input, price: true } },
+  { label: "negative price", body: { ...input, price: -0.01 } },
+  { label: "fractional cents", body: { ...input, price: 2.501 } },
+  { label: "wrong-case category", body: { ...input, category: "tea" } },
+  { label: "padded category", body: { ...input, category: " Tea " } },
+  { label: "unknown category", body: { ...input, category: "Food" } },
+  { label: "missing category", body: { ...input, category: undefined } },
+  { label: "numeric category", body: { ...input, category: 1 } },
+  { label: "null special flag", body: { ...input, specialOffer: null } },
+  { label: "string special flag", body: { ...input, specialOffer: "false" } },
+  { label: "numeric special flag", body: { ...input, specialOffer: 0 } },
+  { label: "client ID", body: { ...input, ID: "client-id" } },
+  { label: "database identity", body: { ...input, _id: "client-id" } },
+  { label: "unknown field", body: { ...input, extra: true } },
+  { label: "null body", body: null },
+  { label: "array body", body: [] },
+  { label: "string body", body: "offering" },
+  { label: "numeric body", body: 1 },
+];
+
+test.each(invalidInputs)("POST rejects $label and leaves stored offerings unchanged", async ({ body }) => {
+  const url = await start();
+  const saved = await (await post(url)).json();
+  await expectError(await post(url, body), 400, "INVALID_INPUT");
+  expect(await (await fetch(url)).json()).toEqual([saved]);
+});
+
+test.each(["1e400", "-1e400"])("POST rejects nonfinite JSON price %s", async (price) => {
+  const url = await start();
+  const response = await fetch(url, {
+    method: "POST",
+    headers: { authorization, "Content-Type": "application/json" },
+    body: `{"name":"Tea","description":"Brewed tea","price":${price},"category":"Tea"}`,
+  });
+  await expectError(response, 400, "INVALID_INPUT");
+  expect(await (await fetch(url)).json()).toEqual([]);
+});
+
+test.each(["text/plain", "application/jsonp", "text/application/json"])(
+  "POST rejects content type %s",
+  async (contentType) => {
+    const url = await start();
+    await expectError(await post(url, input, { "Content-Type": contentType }), 415, "INVALID_CONTENT_TYPE");
+    expect(await (await fetch(url)).json()).toEqual([]);
+  },
+);
+
+test("POST accepts a JSON media type with parameters and ignores case", async () => {
+  const response = await post(await start(), input, { "Content-Type": "Application/JSON; charset=utf-8" });
+  expect(response.status).toBe(201);
+});
+
+test("POST rejects a missing content type", async () => {
+  const url = await start();
+  const response = await fetch(url, {
+    method: "POST",
+    headers: { authorization },
+    body: new TextEncoder().encode(JSON.stringify(input)),
+  });
+  await expectError(response, 415, "INVALID_CONTENT_TYPE");
+  expect(await (await fetch(url)).json()).toEqual([]);
+});
+
+test.each(["{ bad json }", ""])("POST rejects malformed or empty JSON %j", async (body) => {
+  const url = await start();
+  const response = await fetch(url, {
+    method: "POST",
+    headers: { authorization, "Content-Type": "application/json" },
+    body,
+  });
+  await expectError(response, 400, "INVALID_JSON");
+  expect(await (await fetch(url)).json()).toEqual([]);
+});
+
+test("collection POST retains management authorization and origin checks", async () => {
+  const url = await start();
+  await expectError(await post(url, input, { authorization: "" }), 401, "UNAUTHORIZED");
+  await expectError(await post(url, input, { Origin: "https://other.example" }), 403, "FORBIDDEN");
+  expect(await (await fetch(url)).json()).toEqual([]);
+});
+
+test("storage failures are sanitized and failed creation leaves the list unchanged", async () => {
+  const store = new TestOfferingStore();
+  let failList = true;
+  host = await startHandlerHttpServer(
+    createOfferingCollectionHandlers({
+      list: () => (failList ? Promise.reject(new Error("private-storage-failure")) : store.list()),
+      create: async () => {
+        throw new Error("private-storage-failure");
+      },
+    }),
+  );
+  const getError = await expectError(await fetch(host.url), 503, "DATABASE_UNAVAILABLE");
+  expect(JSON.stringify(getError)).not.toContain("private-storage-failure");
+  failList = false;
+  const postError = await expectError(await post(host.url), 503, "DATABASE_UNAVAILABLE");
+  expect(JSON.stringify(postError)).not.toContain("private-storage-failure");
+  expect(await (await fetch(host.url)).json()).toEqual([]);
+});
+
+test("POST responds only after creation resolves and GET cannot see a pending offering", async () => {
+  const store = new TestOfferingStore();
+  let release!: () => void;
+  let entered!: () => void;
+  const gate = new Promise<void>((resolve) => {
+    release = resolve;
+  });
+  const started = new Promise<void>((resolve) => {
+    entered = resolve;
+  });
+  host = await startHandlerHttpServer(
+    createOfferingCollectionHandlers({
+      list: () => store.list(),
+      create: async (details: CreateOfferingInput) => {
+        entered();
+        await gate;
+        return store.create(details);
+      },
+    }),
+  );
+  let responded = false;
+  const pending = post(host.url).then((response) => {
+    responded = true;
+    return response;
+  });
+  try {
+    await started;
+    expect(await (await fetch(host.url)).json()).toEqual([]);
+    expect(responded).toBe(false);
+  } finally {
+    release();
+  }
+  const response = await pending;
+  expect(response.status).toBe(201);
+  expect(await (await fetch(host.url)).json()).toEqual([await response.json()]);
+});
diff --git a/tsconfig.json b/tsconfig.json
index 6ab2d08..dfa2400 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -1,6 +1,6 @@
 {
   "compilerOptions": {
-    "target": "es5",
+    "target": "es2017",
     "lib": ["dom", "dom.iterable", "esnext"],
     "allowJs": true,
     "skipLibCheck": true,
@@ -11,7 +11,7 @@
     "moduleResolution": "bundler",
     "resolveJsonModule": true,
     "isolatedModules": true,
-    "jsx": "preserve",
+    "jsx": "react-jsx",
     "incremental": true,
     "plugins": [
       {
@@ -23,6 +23,14 @@
       "@/*": ["*"]
     }
   },
-  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts"],
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx",
+    ".next/types/**/*.ts",
+    ".next-http-test/types/**/*.ts",
+    ".next-http-test/dev/types/**/*.ts",
+    ".next/dev/types/**/*.ts"
+  ],
   "exclude": ["node_modules"]
 }
diff --git a/vercel.json b/vercel.json
new file mode 100644
index 0000000..3294089
--- /dev/null
+++ b/vercel.json
@@ -0,0 +1,6 @@
+{
+  "$schema": "https://openapi.vercel.sh/vercel.json",
+  "framework": "nextjs",
+  "buildCommand": "npm run build",
+  "installCommand": "npm ci"
+}
diff --git a/vitest.config.mts b/vitest.config.mts
new file mode 100644
index 0000000..07ee8ad
--- /dev/null
+++ b/vitest.config.mts
@@ -0,0 +1,16 @@
+import { fileURLToPath } from "node:url";
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  resolve: { alias: { "@": fileURLToPath(new URL("./src", import.meta.url)) } },
+  // Next preserves JSX for its compiler; component tests need automatic JSX.
+  oxc: { jsx: { runtime: "automatic" } },
+  test: {
+    include: ["tests/unit/**/*.test.{ts,tsx}"],
+    environment: "node",
+    restoreMocks: true,
+    unstubEnvs: true,
+    unstubGlobals: true,
+    testTimeout: 15000,
+  },
+});