From b616a9c51c3eb2deeaa6f241f362ed8989a507b1 Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Mon, 19 Oct 2026 22:18:49 +0200
Subject: [PATCH 01/17] feat!: rewrite the server on the LeiCraftMC full-stack
 Nuxt template (v2 foundation)

NetIgnite v2, milestone 1: Nuxt 4 + Nuxt UI dashboard, Hono API at /api/v1 with OpenAPI docs,
Drizzle on bun:sqlite, opaque bearer sessions and API keys.

- Agent gateway at /ws/agent with protocol v2 (JSON frames, HELLO with capabilities,
  per-request answers, keep-alive). Agents enroll with a single-use token and generate their
  own secret; the server stores only its hash.
- Devices with Wake-on-LAN, status checks (MAC link-local, IPv4, IPv6, SSH port, host agent),
  shutdown/reboot through a host agent, favorites.
- Sharing devices with other users as viewer, operator or manager.
- Public sign-up as an admin setting; admin settings page.
- One-time import of NetIgnite v1 databases (scripts/import-v1.ts, bundled into the image).
- Port 18232 kept from v1; the database moves to data/netignite.sqlite.
- SQLite foreign keys enabled; transactions that need atomicity are synchronous.

BREAKING CHANGE: v1 agents can't connect to v2 and have to be set up again. The REST API is
replaced by /api/v1.
---
 .claude/settings.json                         |   50 +
 .gitattributes                                |    6 +
 .github/renovate.json                         |    3 +
 .github/workflows/ci.yml                      |   20 +
 .github/workflows/docker-publish.yml          |    4 +-
 .gitignore                                    |   39 +-
 .vscode/mcp.json                              |   12 +
 AGENTS.md                                     |   54 +
 CLAUDE.md                                     |   43 +
 LICENSE                                       |    2 +-
 README.md                                     |  294 +-
 app/api-client/client.gen.ts                  |   16 +
 app/api-client/client/client.gen.ts           |  220 ++
 app/api-client/client/index.ts                |   26 +
 app/api-client/client/types.gen.ts            |  191 ++
 app/api-client/client/utils.gen.ts            |  393 +++
 app/api-client/core/auth.gen.ts               |   48 +
 app/api-client/core/bodySerializer.gen.ts     |   82 +
 app/api-client/core/params.gen.ts             |  178 ++
 app/api-client/core/pathSerializer.gen.ts     |  171 ++
 app/api-client/core/queryKeySerializer.gen.ts |  117 +
 app/api-client/core/serverSentEvents.gen.ts   |  242 ++
 app/api-client/core/types.gen.ts              |  110 +
 app/api-client/core/utils.gen.ts              |  140 +
 app/api-client/index.ts                       |    4 +
 app/api-client/sdk.gen.ts                     |  606 ++++
 app/api-client/types.gen.ts                   | 2542 +++++++++++++++++
 app/api-client/zod.gen.ts                     | 1244 ++++++++
 app/app.config.ts                             |   13 +
 app.vue => app/app.vue                        |    8 +-
 app/assets/css/main.css                       |   55 +
 app/components/Gravatar.vue                   |   19 +
 .../dashboard/DashboardDeleteModal.vue        |   78 +
 app/components/dashboard/DashboardModal.vue   |   54 +
 .../dashboard/DashboardPageBody.vue           |    5 +
 .../dashboard/DashboardPageHeader.vue         |   50 +
 .../dashboard/DashboardSectionCard.vue        |   69 +
 .../dashboard/DashboardStatCard.vue           |   39 +
 app/components/dashboard/DataTable.vue        |  457 +++
 app/components/dashboard/UserMenu.vue         |  111 +
 app/components/devices/PowerButtons.vue       |   70 +
 app/components/devices/StatusBadge.vue        |   21 +
 app/components/form/DateRangePicker.vue       |   82 +
 app/components/img/AppIcon.vue                |    7 +
 app/components/img/AppLogo.vue                |   30 +
 app/components/layout/Footer.vue              |   86 +
 app/components/layout/Header.vue              |   58 +
 app/composables/stores/useOnboardingStore.ts  |   59 +
 app/composables/stores/useUserStore.ts        |   49 +
 app/composables/updateAPIClient.ts            |   22 +
 app/composables/useAPI.ts                     |  218 ++
 app/composables/useAppCookies.ts              |   44 +
 app/composables/useAwaitedComputed.ts         |   63 +
 app/composables/useDefaultOnFormError.ts      |   15 +
 app/composables/useDeviceActions.ts           |   82 +
 app/composables/useGravatarURL.ts             |   15 +
 app/composables/usePageSeo.ts                 |   57 +
 app/composables/useRuntimeAppConfigs.ts       |   14 +
 app/composables/useSubrouterInjectedData.ts   |   87 +
 app/composables/useSubrouterPathDynamics.ts   |  119 +
 app/error.vue                                 |   19 +
 app/layouts/auth.vue                          |   20 +
 app/layouts/dashboard.vue                     |  136 +
 app/layouts/default.vue                       |   11 +
 app/layouts/onboarding.vue                    |   18 +
 app/middleware/auth.global.ts                 |   71 +
 app/middleware/rewrites.global.ts             |   10 +
 app/pages/auth/forgot-password.vue            |   99 +
 app/pages/auth/login.vue                      |  132 +
 app/pages/auth/reset-password.vue             |  121 +
 app/pages/auth/signup.vue                     |  153 +
 app/pages/dashboard/admin/settings.vue        |   76 +
 app/pages/dashboard/admin/users.vue           |  318 +++
 app/pages/dashboard/agents/[agent_id].vue     |  101 +
 .../dashboard/agents/[agent_id]/index.vue     |  365 +++
 app/pages/dashboard/agents/index.vue          |  109 +
 app/pages/dashboard/apikeys/[api_key_id].vue  |  107 +
 .../dashboard/apikeys/[api_key_id]/index.vue  |  267 ++
 app/pages/dashboard/apikeys/index.vue         |  151 +
 app/pages/dashboard/devices/[device_id].vue   |  135 +
 .../dashboard/devices/[device_id]/index.vue   |  355 +++
 .../dashboard/devices/[device_id]/sharing.vue |  145 +
 app/pages/dashboard/devices/index.vue         |  128 +
 app/pages/dashboard/index.vue                 |  157 +
 app/pages/dashboard/settings.vue              |   47 +
 app/pages/dashboard/settings/index.vue        |  185 ++
 app/pages/dashboard/settings/security.vue     |  223 ++
 app/pages/welcome.vue                         |  122 +
 app/utils/abstractStore.ts                    |  107 +
 app/utils/format.ts                           |   33 +
 app/utils/netignite.ts                        |   88 +
 app/utils/roles.ts                            |   14 +
 app/utils/routeMatcher.ts                     |   69 +
 app/utils/types.ts                            |   26 +
 app/utils/url.ts                              |   12 +
 assets/css/forms.css                          |   33 -
 assets/css/global.css                         |   10 -
 biome.json                                    |   79 +
 bun.lock                                      | 2440 +++++++---------
 bunfig.toml                                   |    4 +
 components/DashboardPage.vue                  |   51 -
 components/Footer.vue                         |   47 -
 components/FormModal.vue                      |   75 -
 components/Sidebar.vue                        |  198 --
 components/SimpleTable.vue                    |   34 -
 components/forms/FormDescription.vue          |   16 -
 components/forms/FormGroup.vue                |    6 -
 components/forms/FormInput.vue                |   31 -
 components/forms/FormLabel.vue                |    8 -
 components/forms/FormPWInput.vue              |   56 -
 components/forms/FormSelect.vue               |   34 -
 components/forms/FormSubmitBtn.vue            |    8 -
 components/forms/FormTextarea.vue             |   35 -
 components/img/icon.vue                       |    5 -
 components/img/logo-dark.vue                  |   31 -
 components/img/logo-white.vue                 |   31 -
 components/test-websocket.vue                 |   81 -
 composables/useAPI.ts                         |  120 -
 composables/useDataFilter.ts                  |   46 -
 composables/useNotificationToast.ts           |   69 -
 config/config.sample.json                     |    1 -
 devutils/createAgent.ts                       |   17 -
 devutils/createTestUser.ts                    |   13 -
 docker/Dockerfile                             |   47 +-
 docker/docker-compose.yml                     |   23 +-
 docker/pterodactyl/Dockerfile                 |   13 -
 docker/pterodactyl/entrypoint.sh              |  127 -
 drizzle/configs/drizzle.config.ts             |   13 +
 drizzle/migrations/0000_purple_thanos.sql     |  150 +
 drizzle/migrations/meta/0000_snapshot.json    | 1065 +++++++
 drizzle/migrations/meta/_journal.json         |   13 +
 error.vue                                     |   60 -
 example.env                                   |   22 +
 layouts/auth.vue                              |   41 -
 layouts/dashboard.vue                         |   60 -
 layouts/default.vue                           |   40 -
 middleware/auth.ts                            |   28 -
 middleware/rewrites.global.ts                 |    9 -
 nuxt.config.ts                                |  115 +-
 openapi-ts.config.ts                          |    7 +
 package.json                                  |   80 +-
 pages/account/settings.vue                    |  101 -
 pages/agents/[id]/index.vue                   |  278 --
 pages/agents/index.vue                        |  214 --
 pages/auth/login.vue                          |  131 -
 pages/auth/reset-password.vue                 |   16 -
 pages/devices/[id]/index.vue                  |  230 --
 pages/devices/index.vue                       |  256 --
 pages/index.vue                               |  206 --
 plugins/suppress-router-warn.client.ts        |   14 -
 public/robots.txt                             |    4 +-
 public/static/logo/icon.png                   |  Bin 0 -> 10792 bytes
 public/static/logo/icon.svg                   |    3 +
 public/static/utils/sitemap.xml               |   62 +
 scripts/api-client-generate.ts                |   27 +
 scripts/compile/compileCMD.ts                 |  113 +
 scripts/compile/compiler.ts                   |   93 +
 scripts/compile/index.ts                      |   20 +
 scripts/db-utils.ts                           |    5 +
 scripts/entrypoint.ts                         |   10 +
 scripts/import-v1.ts                          |   75 +
 scripts/patch-api-client.ts                   |   19 +
 server/agent-control-service/agent.ts         |  137 -
 .../agent-control-service/commands/message.ts |  137 -
 .../commands/registry.ts                      |   71 -
 server/agent-control-service/index.ts         |   64 -
 server/agent-control-service/server.ts        |  124 -
 server/api/account/[id]/index.put.ts          |   73 -
 server/api/admin/users/index.post.ts          |   37 -
 server/api/agent-control-service.ts           |    5 -
 server/api/agents/[id]/index.delete.ts        |   35 -
 server/api/agents/[id]/index.get.ts           |   23 -
 server/api/agents/[id]/index.put.ts           |   40 -
 .../api/agents/[id]/regenerate-secret.post.ts |   41 -
 server/api/agents/index.get.ts                |   18 -
 server/api/agents/index.post.ts               |   36 -
 server/api/agents/status.get.ts               |   39 -
 server/api/auth/login.post.ts                 |   53 -
 server/api/auth/logout.post.ts                |   15 -
 server/api/auth/session.get.ts                |   19 -
 server/api/devices/[id]/index.delete.ts       |   30 -
 server/api/devices/[id]/index.get.ts          |   23 -
 server/api/devices/[id]/index.put.ts          |   42 -
 server/api/devices/[id]/wakeup.post.ts        |  113 -
 server/api/devices/index.get.ts               |   24 -
 server/api/devices/index.post.ts              |   31 -
 server/api/devices/status.get.ts              |   47 -
 server/db/index.ts                            |   98 -
 server/db/models-test.ts                      |  112 -
 server/db/models/agents.ts                    |  133 -
 server/db/models/base.ts                      |  142 -
 server/db/models/devices.ts                   |   80 -
 server/db/models/password_resets.ts           |   64 -
 server/db/models/sessions.ts                  |   45 -
 server/db/models/users.ts                     |  160 --
 server/lib/agents/auth.ts                     |  154 +
 server/lib/agents/connection.ts               |  180 ++
 server/lib/agents/gateway.ts                  |  218 ++
 server/lib/agents/protocol.ts                 |  117 +
 server/lib/agents/registry.ts                 |   79 +
 server/lib/api/index.ts                       |  139 +
 server/lib/api/utils/api-res.ts               |  174 ++
 server/lib/api/utils/apiVersionRouter.ts      |   55 +
 server/lib/api/utils/authHandler.ts           |  405 +++
 server/lib/api/utils/email.ts                 |  142 +
 server/lib/api/utils/metadata.ts              |   95 +
 server/lib/api/utils/preferences.ts           |  114 +
 .../api/utils/shared-models/accountData.ts    |   33 +
 .../utils/shared-models/api-helper-models.ts  |   17 +
 .../api/utils/shared-models/netigniteData.ts  |   54 +
 server/lib/api/utils/specHelpers.ts           |  206 ++
 server/lib/api/versions/v1/docs/index.ts      |   18 +
 server/lib/api/versions/v1/index.ts           |  156 +
 server/lib/api/versions/v1/middleware/auth.ts |   64 +
 .../api/versions/v1/middleware/requireUser.ts |   25 +
 .../v1/routes/account/apikeys/index.ts        |  224 ++
 .../v1/routes/account/apikeys/model.ts        |   50 +
 .../api/versions/v1/routes/account/index.ts   |  239 ++
 .../api/versions/v1/routes/account/model.ts   |   47 +
 .../v1/routes/account/preferences/index.ts    |   89 +
 .../v1/routes/account/preferences/model.ts    |   15 +
 .../lib/api/versions/v1/routes/admin/index.ts |   22 +
 .../v1/routes/admin/settings/index.ts         |   46 +
 .../versions/v1/routes/admin/users/index.ts   |  315 ++
 .../versions/v1/routes/admin/users/model.ts   |   78 +
 .../api/versions/v1/routes/agents/index.ts    |  297 ++
 .../api/versions/v1/routes/agents/model.ts    |   65 +
 .../lib/api/versions/v1/routes/auth/index.ts  |  325 +++
 .../lib/api/versions/v1/routes/auth/model.ts  |   48 +
 .../v1/routes/auth/reset-password/index.ts    |  235 ++
 .../v1/routes/auth/reset-password/model.ts    |   18 +
 .../api/versions/v1/routes/devices/index.ts   |  638 +++++
 .../api/versions/v1/routes/devices/model.ts   |  129 +
 server/lib/db/index.ts                        |  168 ++
 server/lib/db/schema.ts                       |  260 ++
 server/lib/db/utils.ts                        |   31 +
 server/lib/devices/actions.ts                 |   73 +
 server/lib/devices/permissions.ts             |   94 +
 server/lib/devices/status.ts                  |  181 ++
 server/lib/migration/v1Import.ts              |  297 ++
 server/lib/tasks/index.ts                     |  320 +++
 server/lib/tasks/sampleTask.ts                |    7 +
 server/lib/tasks/utils.ts                     |   28 +
 server/lib/utils/config.ts                    |  155 +
 server/lib/utils/constants.ts                 |   17 +
 server/lib/utils/cron.ts                      |   63 +
 server/lib/utils/crypto/cryptoKeys.ts         |   54 +
 server/lib/utils/crypto/lcrypt.ts             |   93 +
 server/lib/utils/crypto/objectCrypt.ts        |   48 +
 server/lib/utils/crypto/signature.ts          |   62 +
 server/lib/utils/index.ts                     |   81 +
 server/lib/utils/logger.ts                    |   63 +
 server/middleware/auth.ts                     |   14 -
 server/plugins/startup.ts                     |  165 +-
 server/routes/api/[...].ts                    |   44 +
 server/routes/ws/agent.ts                     |    5 +
 server/tsconfig.json                          |   19 -
 server/utils/auth/agentSecrets.ts             |   35 -
 server/utils/auth/handler.ts                  |   40 -
 server/utils/auth/sessions.ts                 |   96 -
 server/utils/config.ts                        |   51 -
 server/utils/index.ts                         |   21 -
 server/utils/logger.ts                        |   59 -
 server/utils/validation.ts                    |   59 -
 shared/encoding.ts                            |   19 -
 shared/utils.ts                               |   34 -
 tests/agents.test.ts                          |  120 -
 tests/api-routes-v1.test.ts                   |  968 +++++++
 tests/email.test.ts                           |  286 ++
 tests/encoding.test.ts                        |   45 -
 tests/helpers/api.ts                          |   87 +
 tests/helpers/fake-agent.ts                   |  112 +
 tests/helpers/memory-transport.ts             |   37 +
 tests/helpers/preload.ts                      |  112 +
 tests/helpers/seed.ts                         |   33 +
 tests/netignite.test.ts                       |  571 ++++
 tests/v1-import.test.ts                       |  247 ++
 tsconfig.json                                 |   36 +-
 tsconfig/tsconfig.typecheck.json              |   12 +
 utils/handlers/formModal.ts                   |   54 -
 utils/models/agent.ts                         |  152 -
 utils/models/device.ts                        |  220 --
 utils/models/utils.ts                         |   63 -
 utils/simpleForm.ts                           |   53 -
 utils/userStore.ts                            |   16 -
 285 files changed, 25963 insertions(+), 7965 deletions(-)
 create mode 100644 .claude/settings.json
 create mode 100644 .gitattributes
 create mode 100644 .github/renovate.json
 create mode 100644 .github/workflows/ci.yml
 create mode 100644 .vscode/mcp.json
 create mode 100644 AGENTS.md
 create mode 100644 CLAUDE.md
 create mode 100644 app/api-client/client.gen.ts
 create mode 100644 app/api-client/client/client.gen.ts
 create mode 100644 app/api-client/client/index.ts
 create mode 100644 app/api-client/client/types.gen.ts
 create mode 100644 app/api-client/client/utils.gen.ts
 create mode 100644 app/api-client/core/auth.gen.ts
 create mode 100644 app/api-client/core/bodySerializer.gen.ts
 create mode 100644 app/api-client/core/params.gen.ts
 create mode 100644 app/api-client/core/pathSerializer.gen.ts
 create mode 100644 app/api-client/core/queryKeySerializer.gen.ts
 create mode 100644 app/api-client/core/serverSentEvents.gen.ts
 create mode 100644 app/api-client/core/types.gen.ts
 create mode 100644 app/api-client/core/utils.gen.ts
 create mode 100644 app/api-client/index.ts
 create mode 100644 app/api-client/sdk.gen.ts
 create mode 100644 app/api-client/types.gen.ts
 create mode 100644 app/api-client/zod.gen.ts
 create mode 100644 app/app.config.ts
 rename app.vue => app/app.vue (56%)
 create mode 100644 app/assets/css/main.css
 create mode 100644 app/components/Gravatar.vue
 create mode 100644 app/components/dashboard/DashboardDeleteModal.vue
 create mode 100644 app/components/dashboard/DashboardModal.vue
 create mode 100644 app/components/dashboard/DashboardPageBody.vue
 create mode 100644 app/components/dashboard/DashboardPageHeader.vue
 create mode 100644 app/components/dashboard/DashboardSectionCard.vue
 create mode 100644 app/components/dashboard/DashboardStatCard.vue
 create mode 100644 app/components/dashboard/DataTable.vue
 create mode 100644 app/components/dashboard/UserMenu.vue
 create mode 100644 app/components/devices/PowerButtons.vue
 create mode 100644 app/components/devices/StatusBadge.vue
 create mode 100644 app/components/form/DateRangePicker.vue
 create mode 100644 app/components/img/AppIcon.vue
 create mode 100644 app/components/img/AppLogo.vue
 create mode 100644 app/components/layout/Footer.vue
 create mode 100644 app/components/layout/Header.vue
 create mode 100644 app/composables/stores/useOnboardingStore.ts
 create mode 100644 app/composables/stores/useUserStore.ts
 create mode 100644 app/composables/updateAPIClient.ts
 create mode 100644 app/composables/useAPI.ts
 create mode 100644 app/composables/useAppCookies.ts
 create mode 100644 app/composables/useAwaitedComputed.ts
 create mode 100644 app/composables/useDefaultOnFormError.ts
 create mode 100644 app/composables/useDeviceActions.ts
 create mode 100644 app/composables/useGravatarURL.ts
 create mode 100644 app/composables/usePageSeo.ts
 create mode 100644 app/composables/useRuntimeAppConfigs.ts
 create mode 100644 app/composables/useSubrouterInjectedData.ts
 create mode 100644 app/composables/useSubrouterPathDynamics.ts
 create mode 100644 app/error.vue
 create mode 100644 app/layouts/auth.vue
 create mode 100644 app/layouts/dashboard.vue
 create mode 100644 app/layouts/default.vue
 create mode 100644 app/layouts/onboarding.vue
 create mode 100644 app/middleware/auth.global.ts
 create mode 100644 app/middleware/rewrites.global.ts
 create mode 100644 app/pages/auth/forgot-password.vue
 create mode 100644 app/pages/auth/login.vue
 create mode 100644 app/pages/auth/reset-password.vue
 create mode 100644 app/pages/auth/signup.vue
 create mode 100644 app/pages/dashboard/admin/settings.vue
 create mode 100644 app/pages/dashboard/admin/users.vue
 create mode 100644 app/pages/dashboard/agents/[agent_id].vue
 create mode 100644 app/pages/dashboard/agents/[agent_id]/index.vue
 create mode 100644 app/pages/dashboard/agents/index.vue
 create mode 100644 app/pages/dashboard/apikeys/[api_key_id].vue
 create mode 100644 app/pages/dashboard/apikeys/[api_key_id]/index.vue
 create mode 100644 app/pages/dashboard/apikeys/index.vue
 create mode 100644 app/pages/dashboard/devices/[device_id].vue
 create mode 100644 app/pages/dashboard/devices/[device_id]/index.vue
 create mode 100644 app/pages/dashboard/devices/[device_id]/sharing.vue
 create mode 100644 app/pages/dashboard/devices/index.vue
 create mode 100644 app/pages/dashboard/index.vue
 create mode 100644 app/pages/dashboard/settings.vue
 create mode 100644 app/pages/dashboard/settings/index.vue
 create mode 100644 app/pages/dashboard/settings/security.vue
 create mode 100644 app/pages/welcome.vue
 create mode 100644 app/utils/abstractStore.ts
 create mode 100644 app/utils/format.ts
 create mode 100644 app/utils/netignite.ts
 create mode 100644 app/utils/roles.ts
 create mode 100644 app/utils/routeMatcher.ts
 create mode 100644 app/utils/types.ts
 create mode 100644 app/utils/url.ts
 delete mode 100644 assets/css/forms.css
 delete mode 100644 assets/css/global.css
 create mode 100644 biome.json
 create mode 100644 bunfig.toml
 delete mode 100644 components/DashboardPage.vue
 delete mode 100644 components/Footer.vue
 delete mode 100644 components/FormModal.vue
 delete mode 100644 components/Sidebar.vue
 delete mode 100644 components/SimpleTable.vue
 delete mode 100644 components/forms/FormDescription.vue
 delete mode 100644 components/forms/FormGroup.vue
 delete mode 100644 components/forms/FormInput.vue
 delete mode 100644 components/forms/FormLabel.vue
 delete mode 100644 components/forms/FormPWInput.vue
 delete mode 100644 components/forms/FormSelect.vue
 delete mode 100644 components/forms/FormSubmitBtn.vue
 delete mode 100644 components/forms/FormTextarea.vue
 delete mode 100644 components/img/icon.vue
 delete mode 100644 components/img/logo-dark.vue
 delete mode 100644 components/img/logo-white.vue
 delete mode 100644 components/test-websocket.vue
 delete mode 100644 composables/useAPI.ts
 delete mode 100644 composables/useDataFilter.ts
 delete mode 100644 composables/useNotificationToast.ts
 delete mode 100644 config/config.sample.json
 delete mode 100644 devutils/createAgent.ts
 delete mode 100644 devutils/createTestUser.ts
 delete mode 100644 docker/pterodactyl/Dockerfile
 delete mode 100644 docker/pterodactyl/entrypoint.sh
 create mode 100644 drizzle/configs/drizzle.config.ts
 create mode 100644 drizzle/migrations/0000_purple_thanos.sql
 create mode 100644 drizzle/migrations/meta/0000_snapshot.json
 create mode 100644 drizzle/migrations/meta/_journal.json
 delete mode 100644 error.vue
 create mode 100644 example.env
 delete mode 100644 layouts/auth.vue
 delete mode 100644 layouts/dashboard.vue
 delete mode 100644 layouts/default.vue
 delete mode 100644 middleware/auth.ts
 delete mode 100644 middleware/rewrites.global.ts
 create mode 100644 openapi-ts.config.ts
 delete mode 100644 pages/account/settings.vue
 delete mode 100644 pages/agents/[id]/index.vue
 delete mode 100644 pages/agents/index.vue
 delete mode 100644 pages/auth/login.vue
 delete mode 100644 pages/auth/reset-password.vue
 delete mode 100644 pages/devices/[id]/index.vue
 delete mode 100644 pages/devices/index.vue
 delete mode 100644 pages/index.vue
 delete mode 100644 plugins/suppress-router-warn.client.ts
 create mode 100644 public/static/logo/icon.png
 create mode 100644 public/static/logo/icon.svg
 create mode 100644 public/static/utils/sitemap.xml
 create mode 100644 scripts/api-client-generate.ts
 create mode 100644 scripts/compile/compileCMD.ts
 create mode 100644 scripts/compile/compiler.ts
 create mode 100644 scripts/compile/index.ts
 create mode 100644 scripts/db-utils.ts
 create mode 100644 scripts/entrypoint.ts
 create mode 100644 scripts/import-v1.ts
 create mode 100644 scripts/patch-api-client.ts
 delete mode 100644 server/agent-control-service/agent.ts
 delete mode 100644 server/agent-control-service/commands/message.ts
 delete mode 100644 server/agent-control-service/commands/registry.ts
 delete mode 100644 server/agent-control-service/index.ts
 delete mode 100644 server/agent-control-service/server.ts
 delete mode 100644 server/api/account/[id]/index.put.ts
 delete mode 100644 server/api/admin/users/index.post.ts
 delete mode 100644 server/api/agent-control-service.ts
 delete mode 100644 server/api/agents/[id]/index.delete.ts
 delete mode 100644 server/api/agents/[id]/index.get.ts
 delete mode 100644 server/api/agents/[id]/index.put.ts
 delete mode 100644 server/api/agents/[id]/regenerate-secret.post.ts
 delete mode 100644 server/api/agents/index.get.ts
 delete mode 100644 server/api/agents/index.post.ts
 delete mode 100644 server/api/agents/status.get.ts
 delete mode 100644 server/api/auth/login.post.ts
 delete mode 100644 server/api/auth/logout.post.ts
 delete mode 100644 server/api/auth/session.get.ts
 delete mode 100644 server/api/devices/[id]/index.delete.ts
 delete mode 100644 server/api/devices/[id]/index.get.ts
 delete mode 100644 server/api/devices/[id]/index.put.ts
 delete mode 100644 server/api/devices/[id]/wakeup.post.ts
 delete mode 100644 server/api/devices/index.get.ts
 delete mode 100644 server/api/devices/index.post.ts
 delete mode 100644 server/api/devices/status.get.ts
 delete mode 100644 server/db/index.ts
 delete mode 100644 server/db/models-test.ts
 delete mode 100644 server/db/models/agents.ts
 delete mode 100644 server/db/models/base.ts
 delete mode 100644 server/db/models/devices.ts
 delete mode 100644 server/db/models/password_resets.ts
 delete mode 100644 server/db/models/sessions.ts
 delete mode 100644 server/db/models/users.ts
 create mode 100644 server/lib/agents/auth.ts
 create mode 100644 server/lib/agents/connection.ts
 create mode 100644 server/lib/agents/gateway.ts
 create mode 100644 server/lib/agents/protocol.ts
 create mode 100644 server/lib/agents/registry.ts
 create mode 100644 server/lib/api/index.ts
 create mode 100644 server/lib/api/utils/api-res.ts
 create mode 100644 server/lib/api/utils/apiVersionRouter.ts
 create mode 100644 server/lib/api/utils/authHandler.ts
 create mode 100644 server/lib/api/utils/email.ts
 create mode 100644 server/lib/api/utils/metadata.ts
 create mode 100644 server/lib/api/utils/preferences.ts
 create mode 100644 server/lib/api/utils/shared-models/accountData.ts
 create mode 100644 server/lib/api/utils/shared-models/api-helper-models.ts
 create mode 100644 server/lib/api/utils/shared-models/netigniteData.ts
 create mode 100644 server/lib/api/utils/specHelpers.ts
 create mode 100644 server/lib/api/versions/v1/docs/index.ts
 create mode 100644 server/lib/api/versions/v1/index.ts
 create mode 100644 server/lib/api/versions/v1/middleware/auth.ts
 create mode 100644 server/lib/api/versions/v1/middleware/requireUser.ts
 create mode 100644 server/lib/api/versions/v1/routes/account/apikeys/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/account/apikeys/model.ts
 create mode 100644 server/lib/api/versions/v1/routes/account/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/account/model.ts
 create mode 100644 server/lib/api/versions/v1/routes/account/preferences/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/account/preferences/model.ts
 create mode 100644 server/lib/api/versions/v1/routes/admin/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/admin/settings/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/admin/users/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/admin/users/model.ts
 create mode 100644 server/lib/api/versions/v1/routes/agents/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/agents/model.ts
 create mode 100644 server/lib/api/versions/v1/routes/auth/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/auth/model.ts
 create mode 100644 server/lib/api/versions/v1/routes/auth/reset-password/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/auth/reset-password/model.ts
 create mode 100644 server/lib/api/versions/v1/routes/devices/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/devices/model.ts
 create mode 100644 server/lib/db/index.ts
 create mode 100644 server/lib/db/schema.ts
 create mode 100644 server/lib/db/utils.ts
 create mode 100644 server/lib/devices/actions.ts
 create mode 100644 server/lib/devices/permissions.ts
 create mode 100644 server/lib/devices/status.ts
 create mode 100644 server/lib/migration/v1Import.ts
 create mode 100644 server/lib/tasks/index.ts
 create mode 100644 server/lib/tasks/sampleTask.ts
 create mode 100644 server/lib/tasks/utils.ts
 create mode 100644 server/lib/utils/config.ts
 create mode 100644 server/lib/utils/constants.ts
 create mode 100644 server/lib/utils/cron.ts
 create mode 100644 server/lib/utils/crypto/cryptoKeys.ts
 create mode 100644 server/lib/utils/crypto/lcrypt.ts
 create mode 100644 server/lib/utils/crypto/objectCrypt.ts
 create mode 100644 server/lib/utils/crypto/signature.ts
 create mode 100644 server/lib/utils/index.ts
 create mode 100644 server/lib/utils/logger.ts
 delete mode 100644 server/middleware/auth.ts
 create mode 100644 server/routes/api/[...].ts
 create mode 100644 server/routes/ws/agent.ts
 delete mode 100644 server/tsconfig.json
 delete mode 100644 server/utils/auth/agentSecrets.ts
 delete mode 100644 server/utils/auth/handler.ts
 delete mode 100644 server/utils/auth/sessions.ts
 delete mode 100644 server/utils/config.ts
 delete mode 100644 server/utils/index.ts
 delete mode 100644 server/utils/logger.ts
 delete mode 100644 server/utils/validation.ts
 delete mode 100644 shared/encoding.ts
 delete mode 100644 shared/utils.ts
 delete mode 100644 tests/agents.test.ts
 create mode 100644 tests/api-routes-v1.test.ts
 create mode 100644 tests/email.test.ts
 delete mode 100644 tests/encoding.test.ts
 create mode 100644 tests/helpers/api.ts
 create mode 100644 tests/helpers/fake-agent.ts
 create mode 100644 tests/helpers/memory-transport.ts
 create mode 100644 tests/helpers/preload.ts
 create mode 100644 tests/helpers/seed.ts
 create mode 100644 tests/netignite.test.ts
 create mode 100644 tests/v1-import.test.ts
 create mode 100644 tsconfig/tsconfig.typecheck.json
 delete mode 100644 utils/handlers/formModal.ts
 delete mode 100644 utils/models/agent.ts
 delete mode 100644 utils/models/device.ts
 delete mode 100644 utils/models/utils.ts
 delete mode 100644 utils/simpleForm.ts
 delete mode 100644 utils/userStore.ts

diff --git a/.claude/settings.json b/.claude/settings.json
new file mode 100644
index 0000000..b94b192
--- /dev/null
+++ b/.claude/settings.json
@@ -0,0 +1,50 @@
+{
+	"mcpServers": {
+		"nuxt": {
+			"type": "url",
+			"url": "https://nuxt.com/mcp"
+		},
+		"nuxt-ui": {
+			"type": "url",
+			"url": "https://ui.nuxt.com/mcp"
+		}
+	},
+	"commands": {
+		"api-client": {
+			"description": "Regenerate the typed API client",
+			"prompt": "Regenerate and verify the generated API client for this full-stack Nuxt project.\n\n1. Run `bun run api-client:generate` (scripts/api-client-generate.ts boots the API in-process, reads its OpenAPI spec, and patches the generated files — no dev server needed).\n2. Do not hand-edit generated `*.gen.ts` files under `app/api-client/`.\n3. If generation fails, diagnose whether the Hono backend or the OpenAPI route is the issue.\n4. Summarize the outcome and any follow-up needed."
+		},
+		"db": {
+			"description": "Run Drizzle migrations",
+			"prompt": "Run the Drizzle migration flow for this project.\n\n1. Run `bun run db:generate` to generate migrations from `server/lib/db/schema.ts` into `drizzle/migrations/`.\n2. Run `bun run db:migrate` to apply them (the app also auto-migrates on startup when `NETIGNITE_DB_AUTO_MIGRATE` is true — the default).\n3. Summarize what was generated or applied."
+		},
+		"verify": {
+			"description": "Run the repo verification flow",
+			"prompt": "Run the standard verification flow for this Nuxt 4 + Bun project.\n\n1. Run `bun run typecheck` (runs `nuxt typecheck` then `tsc -p ./tsconfig/tsconfig.typecheck.json`).\n2. Run `bun test`.\n3. Summarize any failures or warnings.\n4. If this command was triggered after a code change, fix issues that are clearly caused by that change before summarizing."
+		},
+		"test": {
+			"description": "Run the test suite",
+			"prompt": "Run the test suite for this Nuxt 4 + Bun project.\n\n1. Run `bun test`.\n2. If tests fail, diagnose and fix the root cause.\n3. Summarize pass/fail status and any fixes applied."
+		},
+		"typecheck": {
+			"description": "Run the TypeScript type checker",
+			"prompt": "Run the full typecheck flow for this Nuxt 4 + Bun project.\n\n1. Run `bun run typecheck` which runs `nuxt typecheck` then `tsc -p ./tsconfig/tsconfig.typecheck.json`.\n2. If there are type errors, diagnose and fix them before summarizing.\n3. Report the pass/fail status and what was fixed, if anything."
+		},
+		"dev": {
+			"description": "Start or inspect the dev setup",
+			"prompt": "Work on the local development setup for this project.\n\n1. If needed, install dependencies with `bun install`.\n2. Use `bun run dev` for the dev server on port 18232.\n3. If there is a dev-server issue, inspect the Nuxt config, runtime env, and Bun-specific wiring before making changes.\n4. Summarize what you started, changed, or found."
+		}
+	},
+	"fileScan": {
+		"exclude": [
+			".git/**",
+			"node_modules/**",
+			".nuxt/**",
+			".output/**",
+			".nitro/**",
+			".data/**",
+			".cache/**",
+			"dist/**"
+		]
+	}
+}
diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..7df4379
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,6 @@
+# LF everywhere (Biome formats with LF; keeps Windows checkouts clean with core.autocrlf).
+* text=auto eol=lf
+
+*.png binary
+*.ico binary
+*.woff2 binary
diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 0000000..344c613
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,3 @@
+{
+	"$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..bcf774e
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,20 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - run: bun install --frozen-lockfile
+      - run: bun run check:ci
+      - run: bun run typecheck
+      - run: bun test
\ No newline at end of file
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 60d5706..078aa9b 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -50,8 +50,8 @@ jobs:
         shell: bash
         run: bun install
       
-      #- name: Build Nuxt application
-      #  run: bun run build
+      - name: Build Nuxt application
+        run: bun run build
       
       - name: Setup Docker
         id: docker-setup
diff --git a/.gitignore b/.gitignore
index 194dd79..7c359a8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,29 +1,52 @@
-# Nuxt dev/build outputs
+# Node
+node_modules
+
+# Dev / Build / compile output
 .output
 .data
 .nuxt
 .nitro
 .cache
-dist
+build/
+out/
+dist/
+*.tgz
 
-# Node dependencies
-node_modules
+# Drizzle artifacts
+.drizzle
+
+# TypeScript
+*.tsbuildinfo
+
+# Coverage and test reports
+coverage
+*.lcov
+junit.xml
 
 # Logs
 logs
 *.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
 
-# Misc
+# Editor / OS
 .DS_Store
 .fleet
 .idea
 
-# Local env files
+# Environment
 .env
 .env.*
 !.env.example
 
+#Tests
+tmp-data-*
+
+# Backend data & config (keep examples)
+data/
+!app/data/
 config/*
-!config/*sample*
+!config/*.example.json
 
-data/
\ No newline at end of file
+.claude/settings.local.json
\ No newline at end of file
diff --git a/.vscode/mcp.json b/.vscode/mcp.json
new file mode 100644
index 0000000..f36ea74
--- /dev/null
+++ b/.vscode/mcp.json
@@ -0,0 +1,12 @@
+{
+	"servers": {
+		"nuxt": {
+			"type": "http",
+			"url": "https://nuxt.com/mcp"
+		},
+		"nuxt-ui": {
+			"type": "http",
+			"url": "https://ui.nuxt.com/mcp"
+		}
+	}
+}
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 0000000..a8d29d5
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,54 @@
+# AGENTS.md — operating manual for AI coding agents
+
+You are working in the NetIgnite server: a LeiCraftMC full-stack Nuxt app (Nuxt frontend + Hono
+backend in `server/`) plus the WebSocket gateway that NetIgnite agents connect to.
+Follow the LeiCraftMC Style Guides: https://github.com/LeiCraftMC/Style-Guides.
+
+## Must read
+
+- [docs/00-overview.md](https://github.com/LeiCraftMC/Style-Guides/blob/main/docs/00-overview.md)
+- [docs/01-project-structure.md](https://github.com/LeiCraftMC/Style-Guides/blob/main/docs/01-project-structure.md) — the full-stack Nuxt shape
+- [docs/04-backend-hono.md](https://github.com/LeiCraftMC/Style-Guides/blob/main/docs/04-backend-hono.md) — Mounting Hono in Nitro
+- [docs/05-api-contract.md](https://github.com/LeiCraftMC/Style-Guides/blob/main/docs/05-api-contract.md)
+- [docs/06-frontend-nuxt.md](https://github.com/LeiCraftMC/Style-Guides/blob/main/docs/06-frontend-nuxt.md)
+- [docs/07-state-and-data.md](https://github.com/LeiCraftMC/Style-Guides/blob/main/docs/07-state-and-data.md)
+
+## Non-negotiable
+
+- Nuxt 4 `app/` srcDir; Tailwind v4 CSS-first; no `tailwind.config.js`. Dark-only (no toggle).
+- The Hono backend lives in `server/` and owns `/api` — no `Bun.serve`, no `Main.main()`; init in
+  `server/plugins/startup.ts`.
+- Every API response uses the `{ success, code, message, data }` envelope via `APIResponse.*`
+  (errors omit `data`).
+- Validate with `hono-openapi`'s validator (`import { validator as zValidator } from "hono-openapi"`); routes in `server/lib/api/versions/v<n>/routes/<resource>/{index.ts, model.ts}`.
+- Auth uses opaque bearer tokens (`<prefix>_<kind>_<id>:<base>`, `Bun.password`-hashed) — not JWT.
+  See docs/10-auth.md.
+- Frontend API access only through `useAPI`; global state via `AbstractStore` over `useState`;
+  component-local form/UI state with `reactive()`/`ref()` is fine.
+- Lucide icons only (`i-lucide-*`). Never hand-edit `*.gen.ts` under `app/api-client/` —
+  regenerate with `bun run api-client:generate`.
+- `nitro.rollupConfig.external: ["bun:sqlite"]` in `nuxt.config.ts`. WebSocket routes
+  (`server/routes/ws/`) require `nitro.experimental.websocket = true` (Bun preset).
+- Format with Biome before finishing. Conventional Commits.
+
+## NetIgnite specifics
+
+- **Port 18232** in dev and prod — a deliberate exception to the style guide's 12xxx rule, kept from
+  v1 so existing compose files, proxies and agents keep working.
+- **Agents** connect to `/ws/agent` (`server/routes/ws/agent.ts` → `server/lib/agents/`). The
+  protocol is documented in `server/lib/agents/protocol.ts`; commands are only sent if the agent's
+  HELLO listed the capability. Agent credentials are `netignite_agent_<token_id>:<secret>`; the
+  secret is generated by the agent at enrollment (`server/lib/agents/auth.ts`) and never shown.
+- **Devices** are owned by one user and shared per device with a role (viewer/operator/manager).
+  Check access only through `DevicePermissions` (`server/lib/devices/permissions.ts`). Agents are
+  never shared.
+- Device status is polled server-side (`DeviceStatusService`) and cached; routes read the cache.
+- **Transactions:** drizzle's bun-sqlite `transaction()` is synchronous and commits at the first
+  `await` inside its callback. Do async work (password hashing) first and keep transaction
+  callbacks synchronous (`.run()`, `.get()`, `.all()`) when atomicity matters.
+- SQLite foreign keys are enabled in `DB.init` (`PRAGMA foreign_keys = ON`); `onDelete` rules rely
+  on it.
+- `scripts/import-v1.ts` imports a NetIgnite v1 database (bundled into `.output/import-v1.mjs` by
+  `bun run build`).
+- Tests: `tests/netignite.test.ts` (API + gateway with `tests/helpers/fake-agent.ts`) and
+  `tests/v1-import.test.ts`.
diff --git a/CLAUDE.md b/CLAUDE.md
new file mode 100644
index 0000000..35e3425
--- /dev/null
+++ b/CLAUDE.md
@@ -0,0 +1,43 @@
+# CLAUDE.md — Claude Code specifics
+
+Read `AGENTS.md` first. This file adds Claude-Code-specific notes.
+
+## Slash commands
+
+Defined in `.claude/settings.json`:
+
+- `/api-client` — regenerate the typed API client (boots the API in-process; no dev server needed).
+- `/db` — run Drizzle migrations.
+- `/verify` — typecheck + tests.
+- `/typecheck` — `bun run typecheck` (`nuxt typecheck` + `tsc`, includes `server/`).
+- `/test` — `bun test`.
+- `/dev` — start/inspect the dev setup.
+
+## MCP servers
+
+`mcpServers` in `.claude/settings.json` and `.vscode/mcp.json` both register `nuxt` and `nuxt-ui`.
+
+## Backend in `server/`
+
+This is the full-stack shape: Hono lives in `server/lib/api`, mounted at `/api` by
+`server/routes/api/[...].ts`, and initialized by `server/plugins/startup.ts`. After changing a
+backend route, regenerate the client with `bun run api-client:generate`. Never hand-edit
+`app/api-client/*.gen.ts`.
+
+## Frontend conventions
+
+- Route map and access rules: see the header of `app/middleware/auth.global.ts` and the Frontend
+  section of `README.md`. The template is deliberately rich; delete unused parts instead of
+  working around them.
+- Reference components by their Nuxt auto-import names (`LayoutHeader`, `ImgAppLogo`,
+  `DashboardDataTable`, `FormDateRangePicker`, …). Don't add explicit imports that only the
+  `<template>` uses: Biome can't see template usage, reports them as unused, and an `--unsafe` fix
+  would delete them.
+- If a `<script>` binding is used as a type there and as a value in the `<template>` (e.g. a Zod
+  schema for `UForm :schema`), also reference it as a value in `<script>`
+  (`const createSchema = zPostAdminUsersBody`). Otherwise Biome's `useImportType` safe fix turns it
+  into `import type` and breaks the page at runtime.
+- In `.vue` files, Biome *warnings* about unused variables/imports are expected (template usage).
+  Biome *errors* are not.
+- Per-user stores live in `app/composables/stores/` (`useUserInfoStore`, `useOnboardingStore`).
+  Clear them on logout; the login page refreshes/clears them for the new session.
diff --git a/LICENSE b/LICENSE
index 0ad25db..38c0634 100644
--- a/LICENSE
+++ b/LICENSE
@@ -630,7 +630,7 @@ state the exclusion of warranty; and each file should have at least
 the "copyright" line and a pointer to where the full notice is found.
 
     <one line to give the program's name and a brief idea of what it does.>
-    Copyright (C) <year>  <name of author>
+    Copyright (C) 2026 LeiCraft_MC
 
     This program is free software: you can redistribute it and/or modify
     it under the terms of the GNU Affero General Public License as published
diff --git a/README.md b/README.md
index e3f6e2f..2133ad2 100644
--- a/README.md
+++ b/README.md
@@ -1,230 +1,96 @@
 # NetIgnite Server
 
-NetIgnite Server is the server-side core of the NetIgnite / Device Power Management platform. It provides:
-
-- HTTP/REST API for authentication and management of agents & devices
-- WebSocket "Agent Control Service" for bidirectional control of registered agents (servers / microcontrollers)
-- Persistence via embedded SQLite (libsql) database
-- Session-based authentication (HTTP cookies)
-- Automatic startup initialization (DB, default admin, session handler, agent loading)
-- Extensible command system for agents (heartbeat, future commands)
-- Docker-ready deployment with separate volumes for data, configuration & logs
-
----
-## Table of Contents
-1. Overview & Architecture
-2. Features
-3. Directory Structure (server portion)
-4. Prerequisites
-5. Installation & Development (Bun / Node)
-6. Docker Deployment
-7. Configuration (`config.json`, ENV variables)
-8. Database
-9. Authentication & Sessions
-10. API Endpoints (excerpt)
-11. Agent Control WebSocket
-12. Logging & Error Handling
-13. Security Notes
-14. Roadmap / Extensions
-15. License
-
----
-## 1. Overview & Architecture
-The server is built on Nuxt 3 (Nitro) with experimental WebSocket support enabled (`nitro.experimental.websocket = true`). At startup a bootstrap plugin (`server/plugins/startup.ts`) loads in sequence:
-1. Configuration (`ConfigHandler`)
-2. Database & tables (`DBStorage.init()`)
-3. Default admin (if no users exist) – credentials written to `./data/initial_admin_credentials`
-4. Session management (`SessionHandler.init()`)
-5. Agents from the database and initialization of the `AgentControlService`
-
-The REST API is exposed via Nitro routes under `server/api/**`. The WebSocket service manages connected agents, periodically sends heartbeats and accepts commands.
-
-## 2. Features
-- Agents (type `server` or `microcontroller`) with secret and owner assignment
-- Basic Auth for WebSocket agent connections (ID:Secret)
-- Session-based user login (cookie `session`)
-- CRUD for agents including online/offline status queries
-- Heartbeat every 60 seconds to connected agents
-- Dynamic log level control (`debug`, `info`, `warn`, `error`, `critical`)
-- Automatic generation of a secure admin password on first start
-
-## 3. Directory Structure (excerpt)
-```
-server/
-  api/
-    auth/ (login, logout, session)
-    agents/ (CRUD & status)
-    devices/, account/, admin/ (...additional routes)
-  agent-control-service/
-    agent.ts (agent model & command dispatch)
-    server.ts (WebSocket handler, heartbeat cron)
-    index.ts (initialization & access)
-  db/
-    index.ts (table setup & access)
-    models/ (*.ts per table)
-  plugins/startup.ts (bootstrap sequence)
-  utils/
-    auth/ (sessions.ts, handler.ts)
-    config.ts (configuration loading logic)
-    logger.ts (log level handling)
-```
+The NetIgnite server: the dashboard, the REST API and the WebSocket gateway that NetIgnite agents
+(ESP32 firmware, Linux agent) connect to. Power on devices from anywhere, check whether they're
+online, and share them with other users.
 
-## 4. Prerequisites
-- Node.js >= 18 or Bun >= 1
-- Git
-- (Optional) Docker
+Documentation: <https://netignite.dev/docs>
 
-## 5. Installation & Development
-### Option A: Bun (recommended per Dockerfile)
-```powershell
-bun install
-bun run dev  # runs via nuxt dev (port 3000 in development)
-```
-### Option B: Node/NPM
-If you do not use Bun:
-```powershell
-npm install
-npx nuxt dev --host 0.0.0.0 --port 3000
-```
-Production build (artifacts):
-```powershell
-bun run build        # or: npx nuxt build
-```
-Preview (test Nitro output):
-```powershell
-bun run preview      # or: npx nuxt preview
-```
+> **v2 (in development).** This branch is the rewrite on the LeiCraftMC full-stack Nuxt template.
+> v1 agents can't connect to v2; set them up again after upgrading.
 
-## 6. Docker Deployment
-The provided `Dockerfile` builds a production image:
-- Base: `oven/bun:1`
-- Build artifact: `.output/server/index.mjs`
-- Exposed port: `18232/tcp`
-- Volumes:
-  - `/opt/netignite/data` (SQLite DB, initial admin credentials)
-  - `/opt/netignite/config` (configuration file)
-  - `/opt/netignite/logs` (optional log output)
-
-Build & run example:
-```powershell
-docker build -t netignite:latest ./app
-
-docker run -d ^
-  -p 18232:18232 ^
-  -v netignite_data:/opt/netignite/data ^
-  -v netignite_config:/opt/netignite/config ^
-  -v netignite_logs:/opt/netignite/logs ^
-  --name netignite netignite:latest
-```
+## Stack
 
-## 7. Configuration
-Default file path: `./config/config.json` (override via ENV `CONFIG_FILE_PATH`). Minimal example:
-```json
-{}
-```
-Current possible fields (more planned):
-- `logLevel`: `"debug" | "info" | "warn" | "error" | "critical"`
-- (Agents are loaded from the DB, not the config file)
-
-### Important ENV Variables
-- `CONFIG_FILE_PATH` – custom path to configuration file
-- `NITRO_ENV` – production mode (Docker sets `production`)
-- `NITRO_HOST` – host bind (`0.0.0.0`)
-- `NITRO_PORT` – API / web app port (default in container: `18232`)
-- `NODE_ENV` – influences cookie `secure` flag for sessions
-
-## 8. Database
-- Driver: `@libsql/client` (local SQLite file) at `./data/db.sqlite`
-- Tables automatically created (Users, PasswordResets, Agents, Devices)
-- On first start: admin creation & credential output
-
-## 9. Authentication & Sessions
-- Login: `POST /api/auth/login` with `username`, `password`
-- Successful login sets `session` cookie
-- Session lifetime: 30 days (refreshed on use)
-- Logout: `POST /api/auth/logout` clears the session
-- Session status: `GET /api/auth/session`
-Success response shape:
-```json
-{ "status": "OK", "data": { "userID": 1, "username": "admin", "role": "admin", "favorites": [] } }
-```
+- Nuxt 4 (`app/` srcDir) + NuxtUI v4 + Tailwind v4 (CSS-first)
+- Hono + Zod + `hono-openapi` (Scalar) in `server/`, mounted at `/api` via a catch-all Nitro route
+- Agent gateway at `/ws/agent` (Nitro WebSocket, `server/lib/agents/`)
+- Drizzle ORM + `bun-sqlite`
+- Bun runtime (Nitro `bun` preset)
+- Biome formatter/linter
+- AGPL-3.0
 
-## 10. API Endpoints (Agents – excerpt)
-All agent routes require a valid session.
-
-| Method | Path | Description |
-|--------|------|-------------|
-| GET | `/api/agents` | List all own agents |
-| POST | `/api/agents` | Create agent (`name`, `description`, `type`, `secret`) |
-| GET | `/api/agents/status?ids=1,2` | Online status filtered or all own agents |
-| GET | `/api/agents/{id}` | Agent detail |
-| PUT | `/api/agents/{id}` | Update (changing secret disconnects existing connection) |
-| DELETE | `/api/agents/{id}` | Delete agent |
-
-Payload example (POST):
-```json
-{
-  "name": "Server A",
-  "description": "Main host",
-  "type": "server", // or "microcontroller"
-  "secret": "<RANDOM-STRING>"
-}
-```
-Generic success response:
-```json
-{ "status": "OK", "message": "...", "data": null }
-```
-Errors use standard HTTP status codes (`400`, `401`, `404`, `500`).
+## Run with Docker
 
-## 11. Agent Control WebSocket
-The WebSocket service manages online status & heartbeats. Agents connect using a Basic Auth header:
+```bash
+docker compose -f docker/docker-compose.yml up -d
 ```
-Authorization: Basic base64("<agentID>:<secret>")
+
+The server listens on port **18232**. On first start it creates the user `admin` and writes a
+password-reset link to `config/initial_admin_password_reset_token.txt` (also printed to the log).
+Set `NETIGNITE_APP_URL` to the server's public URL; production logins need HTTPS.
+
+### Upgrading from v1
+
+The v2 image uses the same `/opt/netignite/data` and `/opt/netignite/config` volumes as v1. Its
+database is `data/netignite.sqlite`, so the v1 `data/db.sqlite` stays untouched. Import it once:
+
+```bash
+docker exec netignite-server bun /opt/netignite/app/.output/import-v1.mjs --from /opt/netignite/data/db.sqlite --dry-run
+docker exec netignite-server bun /opt/netignite/app/.output/import-v1.mjs --from /opt/netignite/data/db.sqlite
 ```
-Flow:
-1. Server validates credentials & closes old connection on reconnect
-2. Stores socket + peer ID for the agent
-3. Cron (every minute) sends HEARTBEAT command
-
-The concrete WebSocket path depends on Nitro deployment / config (experimental feature). Check your reverse proxy and Nitro documentation; by default the server can accept upgrades on the main port.
-
-### Commands
-- HEARTBEAT (Server → Agent)
-- More via `AgentCMDRegistry` (extension potential)
-
-## 12. Logging & Error Handling
-Configurable log levels: `debug`, `info`, `warn`, `error`, `critical`. Startup failures (e.g. config or DB init) trigger process termination (`process.exit(1)`) to avoid inconsistent state.
-
-## 13. Security Notes
-- Change the admin password immediately after first start.
-- Use long cryptographically random secrets for agents.
-- Enable TLS (reverse proxy: Nginx / Caddy) before production use.
-- Set `NODE_ENV=production` so cookies use the `secure` flag (with HTTPS).
-- Restrict network access to the WebSocket port if only internal agents connect.
-
-## 14. Roadmap / Extensions (suggestions)
-- Expanded role / permission matrix (admin vs superadmin vs user granularity)
-- Device-specific Wake-on-LAN actions directly via API
-- Persistent agent command queue
-- Token-based API auth in addition to sessions
-- Encryption at rest (secret rotation)
-- Metrics / Prometheus export
-
-## 15. License
-See the project license file (`LICENSE`).
-
----
-## Quick Start (TL;DR)
-```powershell
-# Development
+
+- Users keep their passwords and are asked for an email address after logging in.
+- The v1 `admin` is merged into the new server's `admin`. Other users with a username that already
+  exists in v2 are only merged with `--merge-users`.
+- Agents are imported but must be set up again; devices keep MAC address, port and agent.
+- Re-running the import is safe; already imported records are skipped.
+
+## Development
+
+```bash
 bun install
+cp example.env .env
 bun run dev
+```
+
+The dev server runs on <http://localhost:18232> (port 18232 in dev and prod, an exception to the
+style guide's 12xxx ports kept for v1 compatibility). Endpoints: `/api/v1/**`, `/api/health`,
+`/api/docs/v1` (OpenAPI reference), `/ws/agent`.
 
-# First start: check file ./data/initial_admin_credentials
-# Login with admin + generated password
+After changing the API, regenerate the typed client (boots the API in-process, no server needed):
 
-# Docker
-docker build -t netignite:latest ./app
-docker run -d -p 18232:18232 netignite:latest
+```bash
+bun run api-client:generate
 ```
 
+## Scripts
+
+- `bun run dev` — dev server on port 18232 (frontend + API + agent gateway)
+- `bun run build` — production build (`.output/`, Bun preset, plus `.output/import-v1.mjs`)
+- `bun run start` — run the built server
+- `bun run import-v1 -- --from <v1 db.sqlite> [--dry-run] [--merge-users]` — import a v1 database
+- `bun run api-client:generate` — regenerate the typed API client
+- `bun run db:generate` / `db:migrate` — Drizzle migrations
+- `bun run check` / `bun run format` — Biome check / format
+- `bun run typecheck` — `nuxt typecheck` + `tsc` (includes `server/`)
+- `bun test` — run tests
+
+## Structure
+
+| Path | What it is |
+| --- | --- |
+| `server/lib/agents/` | Agent protocol, credentials, gateway and live connection registry |
+| `server/lib/devices/` | Device permissions (sharing roles), status polling, power actions |
+| `server/lib/api/versions/v1/routes/` | REST routes (`agents`, `devices`, `auth`, `account`, `admin`) |
+| `server/lib/migration/v1Import.ts` | v1 database import |
+| `app/pages/dashboard/` | Dashboard: overview, devices, agents, settings, admin |
+
+See the LeiCraftMC style guide:
+
+- [docs/01-project-structure.md](https://github.com/LeiCraftMC/Style-Guides/blob/main/docs/01-project-structure.md) — the full-stack Nuxt shape
+- [docs/04-backend-hono.md](https://github.com/LeiCraftMC/Style-Guides/blob/main/docs/04-backend-hono.md) — Mounting Hono in Nitro
+- [docs/06-frontend-nuxt.md](https://github.com/LeiCraftMC/Style-Guides/blob/main/docs/06-frontend-nuxt.md)
+
+## License
+
+AGPL-3.0
diff --git a/app/api-client/client.gen.ts b/app/api-client/client.gen.ts
new file mode 100644
index 0000000..039ae1c
--- /dev/null
+++ b/app/api-client/client.gen.ts
@@ -0,0 +1,16 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+import { type Client, type ClientOptions, type Config, createClient, createConfig } from './client';
+import type { ClientOptions as ClientOptions2 } from './types.gen';
+
+/**
+ * The `createClientConfig()` function will be called on client initialization
+ * and the returned object will become the client's initial configuration.
+ *
+ * You may want to initialize your client this way instead of calling
+ * `setConfig()`. This is useful for example if you're using Next.js
+ * to ensure your client always has the correct values.
+ */
+export type CreateClientConfig<T extends ClientOptions = ClientOptions2> = (override?: Config<ClientOptions & T>) => Config<Required<ClientOptions> & T>;
+
+export const client: Client = createClient(createConfig<ClientOptions2>({ baseURL: 'http://localhost:18232/api/v1' }));
diff --git a/app/api-client/client/client.gen.ts b/app/api-client/client/client.gen.ts
new file mode 100644
index 0000000..7dee5b2
--- /dev/null
+++ b/app/api-client/client/client.gen.ts
@@ -0,0 +1,220 @@
+// @ts-nocheck — patched by scripts/patch-api-client.ts
+// This file is auto-generated by @hey-api/openapi-ts
+
+import { useAsyncData, useFetch, useLazyAsyncData, useLazyFetch } from 'nuxt/app';
+import { reactive, ref, toValue, watch } from 'vue';
+
+import { createSseClient } from '../core/serverSentEvents.gen';
+import type { HttpMethod } from '../core/types.gen';
+import { getValidRequestBody } from '../core/utils.gen';
+import type { Client, Config, RequestOptions } from './types.gen';
+import {
+  buildUrl,
+  createConfig,
+  executeFetchFn,
+  mergeConfigs,
+  mergeHeaders,
+  mergeInterceptors,
+  serializeBody,
+  setAuthParams,
+  unwrapRefs,
+} from './utils.gen';
+
+export const createClient = (config: Config = {}): Client => {
+  let _config = mergeConfigs(createConfig(), config);
+
+  const getConfig = (): Config => ({ ..._config });
+
+  const setConfig = (config: Config): Config => {
+    _config = mergeConfigs(_config, config);
+    return getConfig();
+  };
+
+  const beforeRequest = async (options: RequestOptions) => {
+    const opts = {
+      ..._config,
+      ...options,
+      $fetch: options.$fetch ?? _config.$fetch ?? $fetch,
+      headers: mergeHeaders(_config.headers, options.headers),
+      onRequest: mergeInterceptors(_config.onRequest, options.onRequest),
+      onResponse: mergeInterceptors(_config.onResponse, options.onResponse),
+    };
+
+    if (opts.security) {
+      await setAuthParams(opts);
+    }
+
+    if (opts.requestValidator) {
+      await opts.requestValidator(opts);
+    }
+
+    const url = buildUrl(opts);
+
+    return { opts, url };
+  };
+
+  const request: Client['request'] = ({ asyncDataOptions, composable = '$fetch', ...options }) => {
+    const key = options.key;
+    const opts = {
+      ..._config,
+      ...options,
+      $fetch: options.$fetch ?? _config.$fetch ?? $fetch,
+      headers: mergeHeaders(_config.headers, options.headers),
+      onRequest: mergeInterceptors(_config.onRequest, options.onRequest),
+      onResponse: mergeInterceptors(_config.onResponse, options.onResponse),
+    };
+
+    const { requestValidator, responseTransformer, responseValidator, security } = opts;
+    if (requestValidator || security) {
+      // auth must happen in interceptors otherwise we'd need to require
+      // asyncContext enabled
+      // https://nuxt.com/docs/guide/going-further/experimental-features#asynccontext
+      opts.onRequest = [
+        async ({ options }) => {
+          if (security) {
+            const authOpts: Parameters<typeof setAuthParams>[0] = {
+              auth: opts.auth,
+              headers: options.headers,
+              query: options.query,
+              security,
+            };
+            await setAuthParams(authOpts);
+            if (authOpts.query !== options.query) {
+              options.query = authOpts.query;
+            }
+          }
+
+          if (requestValidator) {
+            await requestValidator({
+              ...options,
+              // @ts-expect-error
+              body: options.rawBody,
+            });
+          }
+        },
+        ...opts.onRequest,
+      ];
+    }
+
+    if (responseTransformer || responseValidator) {
+      opts.onResponse = [
+        ...opts.onResponse,
+        async ({ options, response }) => {
+          if (options.responseType && options.responseType !== 'json') {
+            return;
+          }
+
+          if (!response.ok) {
+            return;
+          }
+
+          if (responseValidator) {
+            await responseValidator(response._data);
+          }
+
+          if (responseTransformer) {
+            response._data = await responseTransformer(response._data);
+          }
+        },
+      ];
+    }
+
+    // remove Content-Type header if body is empty to avoid sending invalid requests
+    if (opts.body === undefined || opts.body === '') {
+      opts.headers.delete('Content-Type');
+    }
+
+    const fetchFn = opts.$fetch;
+
+    if (composable === '$fetch') {
+      return executeFetchFn(
+        // @ts-expect-error
+        opts,
+        fetchFn,
+      );
+    }
+
+    if (composable === 'useFetch' || composable === 'useLazyFetch') {
+      opts.rawBody = opts.body;
+      const bodyParams = reactive({
+        body: opts.body,
+        bodySerializer: opts.bodySerializer,
+      });
+      const body = ref(serializeBody({ ...opts, body: toValue(opts.body) }));
+      opts.body = body;
+      watch(bodyParams, (changed) => {
+        body.value = serializeBody(changed);
+      });
+      return composable === 'useLazyFetch'
+        ? useLazyFetch(() => buildUrl(opts), { ...opts, ...asyncDataOptions })
+        : useFetch(() => buildUrl(opts), { ...opts, ...asyncDataOptions });
+    }
+
+    const handler: any = () =>
+      executeFetchFn(
+        // @ts-expect-error
+        opts,
+        fetchFn,
+      );
+
+    if (composable === 'useAsyncData') {
+      return key
+        ? useAsyncData(key, handler, asyncDataOptions)
+        : useAsyncData(handler, asyncDataOptions);
+    }
+
+    if (composable === 'useLazyAsyncData') {
+      return key
+        ? useLazyAsyncData(key, handler, asyncDataOptions)
+        : useLazyAsyncData(handler, asyncDataOptions);
+    }
+
+    return undefined as any;
+  };
+
+  const makeMethodFn = (method: Uppercase<HttpMethod>) => (options: RequestOptions) =>
+    request({ ...options, method });
+
+  const makeSseFn = (method: Uppercase<HttpMethod>) => async (options: RequestOptions) => {
+    const { opts, url } = await beforeRequest(options);
+    return createSseClient({
+      ...unwrapRefs(opts),
+      body: opts.body as BodyInit | null | undefined,
+      method,
+      onRequest: undefined,
+      serializedBody: getValidRequestBody(opts) as BodyInit | null | undefined,
+      signal: unwrapRefs(opts.signal) as AbortSignal,
+      url,
+    });
+  };
+
+  const _buildUrl: Client['buildUrl'] = (options) =>
+    buildUrl({ ..._config, ...options } as typeof options);
+
+  return {
+    buildUrl: _buildUrl,
+    connect: makeMethodFn('CONNECT'),
+    delete: makeMethodFn('DELETE'),
+    get: makeMethodFn('GET'),
+    getConfig,
+    head: makeMethodFn('HEAD'),
+    options: makeMethodFn('OPTIONS'),
+    patch: makeMethodFn('PATCH'),
+    post: makeMethodFn('POST'),
+    put: makeMethodFn('PUT'),
+    request,
+    setConfig,
+    sse: {
+      connect: makeSseFn('CONNECT'),
+      delete: makeSseFn('DELETE'),
+      get: makeSseFn('GET'),
+      head: makeSseFn('HEAD'),
+      options: makeSseFn('OPTIONS'),
+      patch: makeSseFn('PATCH'),
+      post: makeSseFn('POST'),
+      put: makeSseFn('PUT'),
+      trace: makeSseFn('TRACE'),
+    },
+    trace: makeMethodFn('TRACE'),
+  } as Client;
+};
diff --git a/app/api-client/client/index.ts b/app/api-client/client/index.ts
new file mode 100644
index 0000000..3f09e37
--- /dev/null
+++ b/app/api-client/client/index.ts
@@ -0,0 +1,26 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+export type { Auth } from '../core/auth.gen';
+export type { QuerySerializerOptions } from '../core/bodySerializer.gen';
+export {
+  formDataBodySerializer,
+  jsonBodySerializer,
+  urlSearchParamsBodySerializer,
+} from '../core/bodySerializer.gen';
+export { buildClientParams } from '../core/params.gen';
+export { serializeQueryKeyValue } from '../core/queryKeySerializer.gen';
+export type { ServerSentEventsResult } from '../core/serverSentEvents.gen';
+export type { ClientMeta } from '../core/types.gen';
+export { createClient } from './client.gen';
+export type {
+  Client,
+  ClientOptions,
+  Composable,
+  Config,
+  CreateClientConfig,
+  Options,
+  RequestOptions,
+  RequestResult,
+  TDataShape,
+} from './types.gen';
+export { createConfig } from './utils.gen';
diff --git a/app/api-client/client/types.gen.ts b/app/api-client/client/types.gen.ts
new file mode 100644
index 0000000..922c01d
--- /dev/null
+++ b/app/api-client/client/types.gen.ts
@@ -0,0 +1,191 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+import type {
+  AsyncDataOptions,
+  useAsyncData,
+  useFetch,
+  UseFetchOptions,
+  useLazyAsyncData,
+  useLazyFetch,
+} from 'nuxt/app';
+import type { Ref } from 'vue';
+
+import type { Auth } from '../core/auth.gen';
+import type { QuerySerializerOptions } from '../core/bodySerializer.gen';
+import type {
+  ServerSentEventsOptions,
+  ServerSentEventsResult,
+} from '../core/serverSentEvents.gen';
+import type { Client as CoreClient, Config as CoreConfig } from '../core/types.gen';
+
+export type ArraySeparatorStyle = ArrayStyle | MatrixStyle;
+type ArrayStyle = 'form' | 'spaceDelimited' | 'pipeDelimited';
+type MatrixStyle = 'label' | 'matrix' | 'simple';
+export type ObjectSeparatorStyle = ObjectStyle | MatrixStyle;
+type ObjectStyle = 'form' | 'deepObject';
+
+export type QuerySerializer = (query: Parameters<Client['buildUrl']>[0]['query']) => string;
+
+type WithRefs<TData> = {
+  [K in keyof TData]: NonNullable<TData[K]> extends object
+    ? WithRefs<NonNullable<TData[K]>> | Ref<NonNullable<TData[K]>> | Extract<TData[K], null>
+    : NonNullable<TData[K]> | Ref<NonNullable<TData[K]>> | Extract<TData[K], null>;
+};
+
+// copied from Nuxt
+export type KeysOf<T> = Array<T extends T ? (keyof T extends string ? keyof T : never) : never>;
+
+export interface Config<T extends ClientOptions = ClientOptions>
+  extends
+    Omit<FetchOptions<unknown>, 'baseURL' | 'body' | 'headers' | 'method' | 'query'>,
+    WithRefs<Pick<FetchOptions<unknown>, 'query'>>,
+    Omit<CoreConfig, 'querySerializer'> {
+  /**
+   * Base URL for all requests made by this client.
+   */
+  baseURL?: T['baseURL'];
+  /**
+   * A function for serializing request query parameters. By default, arrays
+   * will be exploded in form style, objects will be exploded in deepObject
+   * style, and reserved characters are percent-encoded.
+   *
+   * {@link https://swagger.io/docs/specification/serialization/#query View examples}
+   */
+  querySerializer?: QuerySerializer | QuerySerializerOptions;
+}
+
+export interface RequestOptions<
+  TComposable extends Composable = '$fetch',
+  ResT = unknown,
+  DefaultT = undefined,
+  Url extends string = string,
+>
+  extends
+    Config,
+    WithRefs<{
+      path?: FetchOptions<unknown>['query'];
+      query?: FetchOptions<unknown>['query'];
+    }>,
+    Pick<
+      ServerSentEventsOptions<ResT>,
+      | 'onSseError'
+      | 'onSseEvent'
+      | 'sseDefaultRetryDelay'
+      | 'sseMaxRetryAttempts'
+      | 'sseMaxRetryDelay'
+    > {
+  asyncDataOptions?: AsyncDataOptions<ResT, ResT, KeysOf<ResT>, DefaultT>;
+  /**
+   * Any body that you want to add to your request.
+   *
+   * {@link https://developer.mozilla.org/docs/Web/API/fetch#body}
+   */
+  body?: NonNullable<unknown> | Ref<NonNullable<unknown>> | null;
+  composable?: TComposable;
+  key?: string;
+  rawBody?: NonNullable<unknown> | Ref<NonNullable<unknown>> | null;
+  /**
+   * Security mechanism(s) to use for the request.
+   */
+  security?: ReadonlyArray<Auth>;
+  url: Url;
+}
+
+export type RequestResult<
+  TComposable extends Composable,
+  ResT,
+  TError,
+> = TComposable extends '$fetch'
+  ? ReturnType<typeof $fetch<ResT>>
+  : TComposable extends 'useAsyncData'
+    ? ReturnType<typeof useAsyncData<ResT | null, TError>>
+    : TComposable extends 'useFetch'
+      ? ReturnType<typeof useFetch<ResT | null, TError>>
+      : TComposable extends 'useLazyAsyncData'
+        ? ReturnType<typeof useLazyAsyncData<ResT | null, TError>>
+        : TComposable extends 'useLazyFetch'
+          ? ReturnType<typeof useLazyFetch<ResT | null, TError>>
+          : never;
+
+export interface ClientOptions {
+  baseURL?: string;
+}
+
+type MethodFn = <
+  TComposable extends Composable = '$fetch',
+  ResT = unknown,
+  TError = unknown,
+  DefaultT = undefined,
+>(
+  options: Omit<RequestOptions<TComposable, ResT, DefaultT>, 'method'>,
+) => RequestResult<TComposable, ResT, TError>;
+
+type SseFn = <
+  TComposable extends Composable = '$fetch',
+  ResT = unknown,
+  TError = unknown,
+  DefaultT = undefined,
+>(
+  options: Omit<RequestOptions<TComposable, ResT, DefaultT>, 'method'>,
+) => Promise<ServerSentEventsResult<RequestResult<TComposable, ResT, TError>>>;
+
+type RequestFn = <
+  TComposable extends Composable = '$fetch',
+  ResT = unknown,
+  TError = unknown,
+  DefaultT = undefined,
+>(
+  options: Omit<RequestOptions<TComposable, ResT, DefaultT>, 'method'> &
+    Pick<Required<RequestOptions<TComposable, ResT, DefaultT>>, 'method'>,
+) => RequestResult<TComposable, ResT, TError>;
+
+/**
+ * The `createClientConfig()` function will be called on client initialization
+ * and the returned object will become the client's initial configuration.
+ *
+ * You may want to initialize your client this way instead of calling
+ * `setConfig()`. This is useful for example if you're using Next.js
+ * to ensure your client always has the correct values.
+ */
+export type CreateClientConfig<T extends ClientOptions = ClientOptions> = (
+  override?: Config<ClientOptions & T>,
+) => Config<Required<ClientOptions> & T>;
+
+export interface TDataShape {
+  body?: unknown;
+  headers?: unknown;
+  path?: FetchOptions<unknown>['query'];
+  query?: FetchOptions<unknown>['query'];
+  url: string;
+}
+
+export type BuildUrlOptions<
+  TData extends Omit<TDataShape, 'headers'> = Omit<TDataShape, 'headers'>,
+> = Pick<WithRefs<TData>, 'path' | 'query'> &
+  Pick<TData, 'url'> &
+  Pick<Options<'$fetch', TData>, 'baseURL' | 'querySerializer'>;
+
+type BuildUrlFn = <TData extends Omit<TDataShape, 'headers'>>(
+  options: BuildUrlOptions<TData>,
+) => string;
+
+export type Client = CoreClient<RequestFn, Config, MethodFn, BuildUrlFn, SseFn>;
+
+type OmitKeys<T, K> = Pick<T, Exclude<keyof T, K>>;
+
+export type Options<
+  TComposable extends Composable = '$fetch',
+  TData extends TDataShape = TDataShape,
+  ResT = unknown,
+  DefaultT = undefined,
+> = OmitKeys<RequestOptions<TComposable, ResT, DefaultT>, 'body' | 'path' | 'query' | 'url'> &
+  ([TData] extends [never] ? unknown : WithRefs<Omit<TData, 'url'>>);
+
+type FetchOptions<TData> = Omit<UseFetchOptions<TData, TData>, keyof AsyncDataOptions<TData>>;
+
+export type Composable =
+  | '$fetch'
+  | 'useAsyncData'
+  | 'useFetch'
+  | 'useLazyAsyncData'
+  | 'useLazyFetch';
diff --git a/app/api-client/client/utils.gen.ts b/app/api-client/client/utils.gen.ts
new file mode 100644
index 0000000..7b00384
--- /dev/null
+++ b/app/api-client/client/utils.gen.ts
@@ -0,0 +1,393 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+import type { ComputedRef, Ref } from 'vue';
+import { isRef, toValue, unref } from 'vue';
+
+import { getAuthToken } from '../core/auth.gen';
+import type { QuerySerializerOptions } from '../core/bodySerializer.gen';
+import { jsonBodySerializer } from '../core/bodySerializer.gen';
+import {
+  serializeArrayParam,
+  serializeObjectParam,
+  serializePrimitiveParam,
+} from '../core/pathSerializer.gen';
+import type {
+  ArraySeparatorStyle,
+  BuildUrlOptions,
+  Client,
+  ClientOptions,
+  Config,
+  QuerySerializer,
+  RequestOptions,
+} from './types.gen';
+
+type PathSerializer = Pick<Required<BuildUrlOptions>, 'path' | 'url'>;
+
+const PATH_PARAM_RE = /\{[^{}]+\}/g;
+
+type MaybeArray<T> = T | T[];
+
+const defaultPathSerializer = ({ path, url: _url }: PathSerializer) => {
+  let url = _url;
+  const matches = _url.match(PATH_PARAM_RE);
+  if (matches) {
+    for (const match of matches) {
+      let explode = false;
+      let name = match.substring(1, match.length - 1);
+      let style: ArraySeparatorStyle = 'simple';
+
+      if (name.endsWith('*')) {
+        explode = true;
+        name = name.substring(0, name.length - 1);
+      }
+
+      if (name.startsWith('.')) {
+        name = name.substring(1);
+        style = 'label';
+      } else if (name.startsWith(';')) {
+        name = name.substring(1);
+        style = 'matrix';
+      }
+
+      const value = toValue((toValue(path) as Record<string, unknown> | undefined)?.[name]);
+
+      if (value === undefined || value === null) {
+        continue;
+      }
+
+      if (Array.isArray(value)) {
+        url = url.replace(match, serializeArrayParam({ explode, name, style, value }));
+        continue;
+      }
+
+      if (typeof value === 'object') {
+        url = url.replace(
+          match,
+          serializeObjectParam({
+            explode,
+            name,
+            style,
+            value: value as Record<string, unknown>,
+            valueOnly: true,
+          }),
+        );
+        continue;
+      }
+
+      if (style === 'matrix') {
+        url = url.replace(
+          match,
+          `;${serializePrimitiveParam({
+            name,
+            value: value as string,
+          })}`,
+        );
+        continue;
+      }
+
+      const replaceValue = encodeURIComponent(
+        style === 'label' ? `.${value as string}` : (value as string),
+      );
+      url = url.replace(match, replaceValue);
+    }
+  }
+  return url;
+};
+
+export const createQuerySerializer = <T = unknown>({
+  parameters = {},
+  ...args
+}: QuerySerializerOptions = {}): ((queryParams: T) => string) => {
+  const querySerializer = (queryParams: T): string => {
+    const search: string[] = [];
+    const qParams = toValue(queryParams);
+    if (qParams && typeof qParams === 'object') {
+      for (const name in qParams) {
+        const value = toValue(qParams[name]);
+
+        if (value === undefined || value === null) {
+          continue;
+        }
+
+        const options = parameters[name] || args;
+
+        if (Array.isArray(value)) {
+          const serializedArray = serializeArrayParam({
+            allowReserved: options.allowReserved,
+            explode: true,
+            name,
+            style: 'form',
+            value,
+            ...options.array,
+          });
+          if (serializedArray) search.push(serializedArray);
+        } else if (typeof value === 'object') {
+          const serializedObject = serializeObjectParam({
+            allowReserved: options.allowReserved,
+            explode: true,
+            name,
+            style: 'deepObject',
+            value: value as Record<string, unknown>,
+            ...options.object,
+          });
+          if (serializedObject) search.push(serializedObject);
+        } else {
+          const serializedPrimitive = serializePrimitiveParam({
+            allowReserved: options.allowReserved,
+            name,
+            value: value as string,
+          });
+          if (serializedPrimitive) search.push(serializedPrimitive);
+        }
+      }
+    }
+    return search.join('&');
+  };
+  return querySerializer;
+};
+
+const checkForExistence = (
+  options: Pick<RequestOptions, 'auth' | 'query'> & {
+    headers: Headers;
+  },
+  name?: string,
+): boolean => {
+  if (!name) {
+    return false;
+  }
+  if (
+    options.headers.has(name) ||
+    (toValue(options.query) as Record<string, unknown> | undefined)?.[name] ||
+    options.headers.get('Cookie')?.includes(`${name}=`)
+  ) {
+    return true;
+  }
+  return false;
+};
+
+export async function setAuthParams(
+  options: Pick<RequestOptions, 'auth' | 'query' | 'security'> & {
+    headers: Headers;
+  },
+): Promise<void> {
+  for (const auth of options.security ?? []) {
+    if (checkForExistence(options, auth.name)) {
+      continue;
+    }
+    const token = await getAuthToken(auth, options.auth);
+
+    if (!token) {
+      continue;
+    }
+
+    const name = auth.name ?? 'Authorization';
+
+    switch (auth.in) {
+      case 'query': {
+        if (!options.query) {
+          options.query = {};
+        }
+        const queryValue = toValue(options.query) as Record<string, unknown> | undefined;
+        if (queryValue) {
+          queryValue[name] = token;
+        }
+        break;
+      }
+      case 'cookie':
+        options.headers.append('Cookie', `${name}=${token}`);
+        break;
+      case 'header':
+      default:
+        options.headers.set(name, token);
+        break;
+    }
+  }
+}
+
+export const buildUrl: Client['buildUrl'] = (options) => {
+  const url = getUrl({
+    baseUrl: options.baseURL as string,
+    path: options.path,
+    query: options.query,
+    querySerializer:
+      typeof options.querySerializer === 'function'
+        ? options.querySerializer
+        : createQuerySerializer(options.querySerializer),
+    url: options.url,
+  });
+  return url;
+};
+
+export const getUrl = ({
+  baseUrl,
+  path,
+  query,
+  querySerializer,
+  url: _url,
+}: Pick<BuildUrlOptions, 'path' | 'query' | 'url'> & {
+  baseUrl?: string;
+  querySerializer: QuerySerializer;
+}): string => {
+  const pathUrl = _url.startsWith('/') ? _url : `/${_url}`;
+  let url = (baseUrl ?? '') + pathUrl;
+  if (path) {
+    url = defaultPathSerializer({ path, url });
+  }
+  let search = query ? querySerializer(query) : '';
+  if (search.startsWith('?')) {
+    search = search.substring(1);
+  }
+  if (search) {
+    url += `?${search}`;
+  }
+  return url;
+};
+
+export const mergeConfigs = (a: Config, b: Config): Config => {
+  const config = { ...a, ...b };
+  if (config.baseURL?.endsWith('/')) {
+    config.baseURL = config.baseURL.substring(0, config.baseURL.length - 1);
+  }
+  config.headers = mergeHeaders(a.headers, b.headers);
+  return config;
+};
+
+const headersEntries = (headers: Headers): Array<[string, string]> => {
+  const entries: Array<[string, string]> = [];
+  headers.forEach((value, key) => {
+    entries.push([key, value]);
+  });
+  return entries;
+};
+
+export const mergeHeaders = (
+  ...headers: Array<Required<Config>['headers'] | undefined>
+): Headers => {
+  const mergedHeaders = new Headers();
+  for (const header of headers) {
+    if (!header || typeof header !== 'object') {
+      continue;
+    }
+
+    let h: unknown = header;
+    if (isRef(h)) {
+      h = unref(h);
+    }
+
+    const iterator =
+      h instanceof Headers ? headersEntries(h) : Object.entries(h as Record<string, unknown>);
+
+    for (const [key, value] of iterator) {
+      if (value === null) {
+        mergedHeaders.delete(key);
+      } else if (Array.isArray(value)) {
+        for (const v of value) {
+          mergedHeaders.append(key, unwrapRefs(v) as string);
+        }
+      } else if (value !== undefined) {
+        const v = unwrapRefs(value);
+        // assume object headers are meant to be JSON stringified, i.e., their
+        // content value in OpenAPI specification is 'application/json'
+        mergedHeaders.set(key, typeof v === 'object' ? JSON.stringify(v) : (v as string));
+      }
+    }
+  }
+  return mergedHeaders;
+};
+
+export const mergeInterceptors = <T>(...args: Array<MaybeArray<T>>): Array<T> =>
+  args.reduce<Array<T>>((acc, item) => {
+    if (typeof item === 'function') {
+      acc.push(item);
+    } else if (Array.isArray(item)) {
+      return acc.concat(item);
+    }
+    return acc;
+  }, []);
+
+const defaultQuerySerializer = createQuerySerializer({
+  allowReserved: false,
+  array: {
+    explode: true,
+    style: 'form',
+  },
+  object: {
+    explode: true,
+    style: 'deepObject',
+  },
+});
+
+const defaultHeaders = {
+  'Content-Type': 'application/json',
+};
+
+export const createConfig = <T extends ClientOptions = ClientOptions>(
+  override: Config<Omit<ClientOptions, keyof T> & T> = {},
+): Config<Omit<ClientOptions, keyof T> & T> => ({
+  ...jsonBodySerializer,
+  headers: defaultHeaders,
+  querySerializer: defaultQuerySerializer,
+  ...override,
+});
+
+type UnwrapRefs<T> =
+  T extends Ref<infer V>
+    ? V
+    : T extends ComputedRef<infer V>
+      ? V
+      : T extends Record<string, unknown> // this doesn't handle functions well
+        ? { [K in keyof T]: UnwrapRefs<T[K]> }
+        : T;
+
+export const unwrapRefs = <T>(value: T): UnwrapRefs<T> => {
+  if (value === null || typeof value !== 'object' || value instanceof Headers) {
+    return (isRef(value) ? unref(value) : value) as UnwrapRefs<T>;
+  }
+
+  if (
+    value instanceof Blob ||
+    value instanceof FormData ||
+    value instanceof ReadableStream ||
+    value instanceof AbortSignal
+  ) {
+    return value as UnwrapRefs<T>;
+  }
+
+  if (Array.isArray(value)) {
+    return value.map((item) => unwrapRefs(item)) as UnwrapRefs<T>;
+  }
+
+  if (isRef(value)) {
+    return unwrapRefs(unref(value) as T);
+  }
+
+  // unwrap into new object to avoid modifying the source
+  const result: Record<string, unknown> = {};
+  for (const key in value) {
+    result[key] = unwrapRefs(value[key] as T);
+  }
+  return result as UnwrapRefs<T>;
+};
+
+export const serializeBody = (
+  opts: Pick<Parameters<Client['request']>[0], 'body' | 'bodySerializer'>,
+) => {
+  if (opts.body && opts.bodySerializer) {
+    return opts.bodySerializer(opts.body);
+  }
+  return opts.body;
+};
+
+export const executeFetchFn = (
+  opts: Omit<Parameters<Client['request']>[0], 'composable'>,
+  fetchFn: Required<Config>['$fetch'],
+) => {
+  const unwrappedOpts = unwrapRefs(opts);
+  unwrappedOpts.rawBody = unwrappedOpts.body;
+  unwrappedOpts.body = serializeBody(unwrappedOpts);
+  return fetchFn(
+    buildUrl(opts),
+    // @ts-expect-error
+    unwrappedOpts,
+  );
+};
diff --git a/app/api-client/core/auth.gen.ts b/app/api-client/core/auth.gen.ts
new file mode 100644
index 0000000..c663664
--- /dev/null
+++ b/app/api-client/core/auth.gen.ts
@@ -0,0 +1,48 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+export type AuthToken = string | undefined;
+
+export interface Auth {
+  /**
+   * Which part of the request do we use to send the auth?
+   *
+   * @default 'header'
+   */
+  in?: 'header' | 'query' | 'cookie';
+  /**
+   * A unique identifier for the security scheme.
+   *
+   * Defined only when there are multiple security schemes whose `Auth`
+   * shape would otherwise be identical.
+   */
+  key?: string;
+  /**
+   * Header or query parameter name.
+   *
+   * @default 'Authorization'
+   */
+  name?: string;
+  scheme?: 'basic' | 'bearer';
+  type: 'apiKey' | 'http';
+}
+
+export const getAuthToken = async (
+  auth: Auth,
+  callback: ((auth: Auth) => Promise<AuthToken> | AuthToken) | AuthToken,
+): Promise<string | undefined> => {
+  const token = typeof callback === 'function' ? await callback(auth) : callback;
+
+  if (!token) {
+    return;
+  }
+
+  if (auth.scheme === 'bearer') {
+    return `Bearer ${token}`;
+  }
+
+  if (auth.scheme === 'basic') {
+    return `Basic ${btoa(token)}`;
+  }
+
+  return token;
+};
diff --git a/app/api-client/core/bodySerializer.gen.ts b/app/api-client/core/bodySerializer.gen.ts
new file mode 100644
index 0000000..67daca6
--- /dev/null
+++ b/app/api-client/core/bodySerializer.gen.ts
@@ -0,0 +1,82 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+import type { ArrayStyle, ObjectStyle, SerializerOptions } from './pathSerializer.gen';
+
+export type QuerySerializer = (query: Record<string, unknown>) => string;
+
+export type BodySerializer = (body: unknown) => unknown;
+
+type QuerySerializerOptionsObject = {
+  allowReserved?: boolean;
+  array?: Partial<SerializerOptions<ArrayStyle>>;
+  object?: Partial<SerializerOptions<ObjectStyle>>;
+};
+
+export type QuerySerializerOptions = QuerySerializerOptionsObject & {
+  /**
+   * Per-parameter serialization overrides. When provided, these settings
+   * override the global array/object settings for specific parameter names.
+   */
+  parameters?: Record<string, QuerySerializerOptionsObject>;
+};
+
+const serializeFormDataPair = (data: FormData, key: string, value: unknown): void => {
+  if (typeof value === 'string' || value instanceof Blob) {
+    data.append(key, value);
+  } else if (value instanceof Date) {
+    data.append(key, value.toISOString());
+  } else {
+    data.append(key, JSON.stringify(value));
+  }
+};
+
+const serializeUrlSearchParamsPair = (data: URLSearchParams, key: string, value: unknown): void => {
+  if (typeof value === 'string') {
+    data.append(key, value);
+  } else {
+    data.append(key, JSON.stringify(value));
+  }
+};
+
+export const formDataBodySerializer = {
+  bodySerializer: (body: unknown): FormData => {
+    const data = new FormData();
+
+    Object.entries(body as Record<string, unknown>).forEach(([key, value]) => {
+      if (value === undefined || value === null) {
+        return;
+      }
+      if (Array.isArray(value)) {
+        value.forEach((v) => serializeFormDataPair(data, key, v));
+      } else {
+        serializeFormDataPair(data, key, value);
+      }
+    });
+
+    return data;
+  },
+};
+
+export const jsonBodySerializer = {
+  bodySerializer: (body: unknown): string =>
+    JSON.stringify(body, (_key, value) => (typeof value === 'bigint' ? value.toString() : value)),
+};
+
+export const urlSearchParamsBodySerializer = {
+  bodySerializer: (body: unknown): string => {
+    const data = new URLSearchParams();
+
+    Object.entries(body as Record<string, unknown>).forEach(([key, value]) => {
+      if (value === undefined || value === null) {
+        return;
+      }
+      if (Array.isArray(value)) {
+        value.forEach((v) => serializeUrlSearchParamsPair(data, key, v));
+      } else {
+        serializeUrlSearchParamsPair(data, key, value);
+      }
+    });
+
+    return data.toString();
+  },
+};
diff --git a/app/api-client/core/params.gen.ts b/app/api-client/core/params.gen.ts
new file mode 100644
index 0000000..5e8908f
--- /dev/null
+++ b/app/api-client/core/params.gen.ts
@@ -0,0 +1,178 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+type Slot = 'body' | 'headers' | 'path' | 'query';
+
+export type Field =
+  | {
+      in: Exclude<Slot, 'body'>;
+      /**
+       * Field name. This is the name we want the user to see and use.
+       */
+      key: string;
+      /**
+       * Field mapped name. This is the name we want to use in the request.
+       * If omitted, we use the same value as `key`.
+       */
+      map?: string;
+    }
+  | {
+      in: Extract<Slot, 'body'>;
+      /**
+       * Key isn't required for bodies.
+       */
+      key?: string;
+      map?: string;
+    }
+  | {
+      /**
+       * Field name. This is the name we want the user to see and use.
+       */
+      key: string;
+      /**
+       * Field mapped name. This is the name we want to use in the request.
+       * If `in` is omitted, `map` aliases `key` to the transport layer.
+       */
+      map: Slot;
+    };
+
+export interface Fields {
+  allowExtra?: Partial<Record<Slot, boolean>>;
+  args?: ReadonlyArray<Field>;
+}
+
+export type FieldsConfig = ReadonlyArray<Field | Fields>;
+
+const extraPrefixesMap: Record<string, Slot> = {
+  $body_: 'body',
+  $headers_: 'headers',
+  $path_: 'path',
+  $query_: 'query',
+};
+const extraPrefixes = Object.entries(extraPrefixesMap);
+
+type KeyMap = Map<
+  string,
+  | {
+      in: Slot;
+      map?: string;
+    }
+  | {
+      in?: never;
+      map: Slot;
+    }
+>;
+
+function buildKeyMap(fields: FieldsConfig, map?: KeyMap): KeyMap {
+  if (!map) {
+    map = new Map();
+  }
+
+  for (const config of fields) {
+    if ('in' in config) {
+      if (config.key) {
+        map.set(config.key, {
+          in: config.in,
+          map: config.map,
+        });
+      }
+    } else if ('key' in config) {
+      map.set(config.key, {
+        map: config.map,
+      });
+    } else if (config.args) {
+      buildKeyMap(config.args, map);
+    }
+  }
+
+  return map;
+}
+
+interface Params {
+  body?: unknown;
+  headers: Record<string, unknown>;
+  path: Record<string, unknown>;
+  query: Record<string, unknown>;
+}
+
+function stripEmptySlots(params: Params): void {
+  for (const [slot, value] of Object.entries(params)) {
+    if (slot === 'body') continue;
+    if (value && typeof value === 'object' && !Array.isArray(value) && !Object.keys(value).length) {
+      delete params[slot as Slot];
+    }
+  }
+}
+
+export function buildClientParams(args: ReadonlyArray<unknown>, fields: FieldsConfig): Params {
+  const params: Params = {
+    headers: Object.create(null),
+    path: Object.create(null),
+    query: Object.create(null),
+  };
+
+  const map = buildKeyMap(fields);
+
+  function writeSlot(slot: Slot, key: string, value: unknown): void {
+    let record = params[slot] as Record<string, unknown> | undefined;
+    if (record === undefined) {
+      record = Object.create(null) as Record<string, unknown>;
+      params[slot] = record;
+    }
+    record[key] = value;
+  }
+
+  let config: FieldsConfig[number] | undefined;
+
+  for (const [index, arg] of args.entries()) {
+    if (fields[index]) {
+      config = fields[index];
+    }
+
+    if (!config) {
+      continue;
+    }
+
+    if ('in' in config) {
+      if (config.key) {
+        const field = map.get(config.key)!;
+        const name = field.map || config.key;
+        if (field.in) {
+          writeSlot(field.in, name, arg);
+        }
+      } else {
+        params.body = arg;
+      }
+    } else {
+      for (const [key, value] of Object.entries(arg ?? {})) {
+        const field = map.get(key);
+
+        if (field) {
+          if (field.in) {
+            const name = field.map || key;
+            writeSlot(field.in, name, value);
+          } else {
+            params[field.map] = value;
+          }
+        } else {
+          const extra = extraPrefixes.find(([prefix]) => key.startsWith(prefix));
+
+          if (extra) {
+            const [prefix, slot] = extra;
+            writeSlot(slot, key.slice(prefix.length), value);
+          } else if ('allowExtra' in config && config.allowExtra) {
+            for (const [slot, allowed] of Object.entries(config.allowExtra)) {
+              if (allowed) {
+                writeSlot(slot as Slot, key, value);
+                break;
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+
+  stripEmptySlots(params);
+
+  return params;
+}
diff --git a/app/api-client/core/pathSerializer.gen.ts b/app/api-client/core/pathSerializer.gen.ts
new file mode 100644
index 0000000..fab1ed4
--- /dev/null
+++ b/app/api-client/core/pathSerializer.gen.ts
@@ -0,0 +1,171 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+interface SerializeOptions<T> extends SerializePrimitiveOptions, SerializerOptions<T> {}
+
+interface SerializePrimitiveOptions {
+  allowReserved?: boolean;
+  name: string;
+}
+
+export interface SerializerOptions<T> {
+  /**
+   * @default true
+   */
+  explode: boolean;
+  style: T;
+}
+
+export type ArrayStyle = 'form' | 'spaceDelimited' | 'pipeDelimited';
+export type ArraySeparatorStyle = ArrayStyle | MatrixStyle;
+type MatrixStyle = 'label' | 'matrix' | 'simple';
+export type ObjectStyle = 'form' | 'deepObject';
+type ObjectSeparatorStyle = ObjectStyle | MatrixStyle;
+
+interface SerializePrimitiveParam extends SerializePrimitiveOptions {
+  value: string;
+}
+
+export const separatorArrayExplode = (style: ArraySeparatorStyle): '.' | ';' | ',' | '&' => {
+  switch (style) {
+    case 'label':
+      return '.';
+    case 'matrix':
+      return ';';
+    case 'simple':
+      return ',';
+    default:
+      return '&';
+  }
+};
+
+export const separatorArrayNoExplode = (style: ArraySeparatorStyle): ',' | '|' | '%20' => {
+  switch (style) {
+    case 'form':
+      return ',';
+    case 'pipeDelimited':
+      return '|';
+    case 'spaceDelimited':
+      return '%20';
+    default:
+      return ',';
+  }
+};
+
+export const separatorObjectExplode = (style: ObjectSeparatorStyle): '.' | ';' | ',' | '&' => {
+  switch (style) {
+    case 'label':
+      return '.';
+    case 'matrix':
+      return ';';
+    case 'simple':
+      return ',';
+    default:
+      return '&';
+  }
+};
+
+export const serializeArrayParam = ({
+  allowReserved,
+  explode,
+  name,
+  style,
+  value,
+}: SerializeOptions<ArraySeparatorStyle> & {
+  value: unknown[];
+}): string => {
+  if (!explode) {
+    const joinedValues = (
+      allowReserved ? value : value.map((v) => encodeURIComponent(v as string))
+    ).join(separatorArrayNoExplode(style));
+    switch (style) {
+      case 'label':
+        return `.${joinedValues}`;
+      case 'matrix':
+        return `;${name}=${joinedValues}`;
+      case 'simple':
+        return joinedValues;
+      default:
+        return `${name}=${joinedValues}`;
+    }
+  }
+
+  const separator = separatorArrayExplode(style);
+  const joinedValues = value
+    .map((v) => {
+      if (style === 'label' || style === 'simple') {
+        return allowReserved ? v : encodeURIComponent(v as string);
+      }
+
+      return serializePrimitiveParam({
+        allowReserved,
+        name,
+        value: v as string,
+      });
+    })
+    .join(separator);
+  return style === 'label' || style === 'matrix' ? separator + joinedValues : joinedValues;
+};
+
+export const serializePrimitiveParam = ({
+  allowReserved,
+  name,
+  value,
+}: SerializePrimitiveParam): string => {
+  if (value === undefined || value === null) {
+    return '';
+  }
+
+  if (typeof value === 'object') {
+    throw new Error(
+      'Deeply-nested arrays/objects aren’t supported. Provide your own `querySerializer()` to handle these.',
+    );
+  }
+
+  return `${name}=${allowReserved ? value : encodeURIComponent(value)}`;
+};
+
+export const serializeObjectParam = ({
+  allowReserved,
+  explode,
+  name,
+  style,
+  value,
+  valueOnly,
+}: SerializeOptions<ObjectSeparatorStyle> & {
+  value: Record<string, unknown> | Date;
+  valueOnly?: boolean;
+}): string => {
+  if (value instanceof Date) {
+    return valueOnly ? value.toISOString() : `${name}=${value.toISOString()}`;
+  }
+
+  if (style !== 'deepObject' && !explode) {
+    let values: string[] = [];
+    Object.entries(value).forEach(([key, v]) => {
+      values = [...values, key, allowReserved ? (v as string) : encodeURIComponent(v as string)];
+    });
+    const joinedValues = values.join(',');
+    switch (style) {
+      case 'form':
+        return `${name}=${joinedValues}`;
+      case 'label':
+        return `.${joinedValues}`;
+      case 'matrix':
+        return `;${name}=${joinedValues}`;
+      default:
+        return joinedValues;
+    }
+  }
+
+  const separator = separatorObjectExplode(style);
+  const joinedValues = Object.entries(value)
+    .map(([key, v]) =>
+      serializePrimitiveParam({
+        allowReserved,
+        name: style === 'deepObject' ? `${name}[${key}]` : key,
+        value: v as string,
+      }),
+    )
+    .join(separator);
+  return style === 'label' || style === 'matrix' ? separator + joinedValues : joinedValues;
+};
diff --git a/app/api-client/core/queryKeySerializer.gen.ts b/app/api-client/core/queryKeySerializer.gen.ts
new file mode 100644
index 0000000..773b065
--- /dev/null
+++ b/app/api-client/core/queryKeySerializer.gen.ts
@@ -0,0 +1,117 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+/**
+ * JSON-friendly union that mirrors what Pinia Colada can hash.
+ */
+export type JsonValue =
+  | null
+  | string
+  | number
+  | boolean
+  | JsonValue[]
+  | { [key: string]: JsonValue };
+
+/**
+ * Replacer that converts non-JSON values (bigint, Date, etc.) to safe substitutes.
+ */
+export const queryKeyJsonReplacer = (_key: string, value: unknown): unknown | undefined => {
+  if (value === undefined || typeof value === 'function' || typeof value === 'symbol') {
+    return undefined;
+  }
+  if (typeof value === 'bigint') {
+    return value.toString();
+  }
+  if (value instanceof Date) {
+    return value.toISOString();
+  }
+  return value;
+};
+
+/**
+ * Safely stringifies a value and parses it back into a JsonValue.
+ */
+export const stringifyToJsonValue = (input: unknown): JsonValue | undefined => {
+  try {
+    const json = JSON.stringify(input, queryKeyJsonReplacer);
+    if (json === undefined) {
+      return undefined;
+    }
+    return JSON.parse(json) as JsonValue;
+  } catch {
+    return undefined;
+  }
+};
+
+/**
+ * Detects plain objects (including objects with a null prototype).
+ */
+const isPlainObject = (value: unknown): value is Record<string, unknown> => {
+  if (value === null || typeof value !== 'object') {
+    return false;
+  }
+  const prototype = Object.getPrototypeOf(value as object);
+  return prototype === Object.prototype || prototype === null;
+};
+
+/**
+ * Turns URLSearchParams into a sorted JSON object for deterministic keys.
+ */
+const serializeSearchParams = (params: URLSearchParams): JsonValue => {
+  const entries = Array.from(params.entries()).sort(([a], [b]) => a.localeCompare(b));
+  const result: Record<string, JsonValue> = {};
+
+  for (const [key, value] of entries) {
+    const existing = result[key];
+    if (existing === undefined) {
+      result[key] = value;
+      continue;
+    }
+
+    if (Array.isArray(existing)) {
+      (existing as string[]).push(value);
+    } else {
+      result[key] = [existing, value];
+    }
+  }
+
+  return result;
+};
+
+/**
+ * Normalizes any accepted value into a JSON-friendly shape for query keys.
+ */
+export const serializeQueryKeyValue = (value: unknown): JsonValue | undefined => {
+  if (value === null) {
+    return null;
+  }
+
+  if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {
+    return value;
+  }
+
+  if (value === undefined || typeof value === 'function' || typeof value === 'symbol') {
+    return undefined;
+  }
+
+  if (typeof value === 'bigint') {
+    return value.toString();
+  }
+
+  if (value instanceof Date) {
+    return value.toISOString();
+  }
+
+  if (Array.isArray(value)) {
+    return stringifyToJsonValue(value);
+  }
+
+  if (typeof URLSearchParams !== 'undefined' && value instanceof URLSearchParams) {
+    return serializeSearchParams(value);
+  }
+
+  if (isPlainObject(value)) {
+    return stringifyToJsonValue(value);
+  }
+
+  return undefined;
+};
diff --git a/app/api-client/core/serverSentEvents.gen.ts b/app/api-client/core/serverSentEvents.gen.ts
new file mode 100644
index 0000000..ddf3c4d
--- /dev/null
+++ b/app/api-client/core/serverSentEvents.gen.ts
@@ -0,0 +1,242 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+import type { Config } from './types.gen';
+
+export type ServerSentEventsOptions<TData = unknown> = Omit<RequestInit, 'method'> &
+  Pick<Config, 'method' | 'responseTransformer' | 'responseValidator'> & {
+    /**
+     * Fetch API implementation. You can use this option to provide a custom
+     * fetch instance.
+     *
+     * @default globalThis.fetch
+     */
+    fetch?: typeof fetch;
+    /**
+     * Implementing clients can call request interceptors inside this hook.
+     */
+    onRequest?: (url: string, init: RequestInit) => Promise<Request>;
+    /**
+     * Callback invoked when a network or parsing error occurs during streaming.
+     *
+     * This option applies only if the endpoint returns a stream of events.
+     *
+     * @param error The error that occurred.
+     */
+    onSseError?: (error: unknown) => void;
+    /**
+     * Callback invoked when an event is streamed from the server.
+     *
+     * This option applies only if the endpoint returns a stream of events.
+     *
+     * @param event Event streamed from the server.
+     * @returns Nothing (void).
+     */
+    onSseEvent?: (event: StreamEvent<TData>) => void;
+    serializedBody?: RequestInit['body'];
+    /**
+     * Default retry delay in milliseconds.
+     *
+     * This option applies only if the endpoint returns a stream of events.
+     *
+     * @default 3000
+     */
+    sseDefaultRetryDelay?: number;
+    /**
+     * Maximum number of retry attempts before giving up.
+     */
+    sseMaxRetryAttempts?: number;
+    /**
+     * Maximum retry delay in milliseconds.
+     *
+     * Applies only when exponential backoff is used.
+     *
+     * This option applies only if the endpoint returns a stream of events.
+     *
+     * @default 30000
+     */
+    sseMaxRetryDelay?: number;
+    /**
+     * Optional sleep function for retry backoff.
+     *
+     * Defaults to using `setTimeout`.
+     */
+    sseSleepFn?: (ms: number) => Promise<void>;
+    url: string;
+  };
+
+export interface StreamEvent<TData = unknown> {
+  data: TData;
+  event?: string;
+  id?: string;
+  retry?: number;
+}
+
+export type ServerSentEventsResult<TData = unknown, TReturn = void, TNext = unknown> = {
+  stream: AsyncGenerator<
+    TData extends Record<string, unknown> ? TData[keyof TData] : TData,
+    TReturn,
+    TNext
+  >;
+};
+
+export function createSseClient<TData = unknown>({
+  onRequest,
+  onSseError,
+  onSseEvent,
+  responseTransformer,
+  responseValidator,
+  sseDefaultRetryDelay,
+  sseMaxRetryAttempts,
+  sseMaxRetryDelay,
+  sseSleepFn,
+  url,
+  ...options
+}: ServerSentEventsOptions): ServerSentEventsResult<TData> {
+  let lastEventId: string | undefined;
+
+  const sleep = sseSleepFn ?? ((ms: number) => new Promise((resolve) => setTimeout(resolve, ms)));
+
+  const createStream = async function* () {
+    let retryDelay: number = sseDefaultRetryDelay ?? 3000;
+    let attempt = 0;
+    const signal = options.signal ?? new AbortController().signal;
+
+    while (true) {
+      if (signal.aborted) break;
+
+      attempt++;
+
+      const headers =
+        options.headers instanceof Headers
+          ? options.headers
+          : new Headers(options.headers as Record<string, string> | undefined);
+
+      if (lastEventId !== undefined) {
+        headers.set('Last-Event-ID', lastEventId);
+      }
+
+      try {
+        const requestInit: RequestInit = {
+          redirect: 'follow',
+          ...options,
+          body: options.serializedBody,
+          headers,
+          signal,
+        };
+        let request = new Request(url, requestInit);
+        if (onRequest) {
+          request = await onRequest(url, requestInit);
+        }
+        // fetch must be assigned here, otherwise it would throw the error:
+        // TypeError: Failed to execute 'fetch' on 'Window': Illegal invocation
+        const _fetch = options.fetch ?? globalThis.fetch;
+        const response = await _fetch(request);
+
+        if (!response.ok) throw new Error(`SSE failed: ${response.status} ${response.statusText}`);
+
+        if (!response.body) throw new Error('No body in SSE response');
+
+        const reader = response.body.pipeThrough(new TextDecoderStream()).getReader();
+
+        let buffer = '';
+
+        const abortHandler = () => {
+          try {
+            reader.cancel();
+          } catch {
+            // noop
+          }
+        };
+
+        signal.addEventListener('abort', abortHandler);
+
+        try {
+          while (true) {
+            const { done, value } = await reader.read();
+            if (done) break;
+            buffer += value;
+            buffer = buffer.replace(/\r\n?/g, '\n'); // normalize line endings
+
+            const chunks = buffer.split('\n\n');
+            buffer = chunks.pop() ?? '';
+
+            for (const chunk of chunks) {
+              const lines = chunk.split('\n');
+              const dataLines: Array<string> = [];
+              let eventName: string | undefined;
+
+              for (const line of lines) {
+                if (line.startsWith('data:')) {
+                  dataLines.push(line.replace(/^data:\s*/, ''));
+                } else if (line.startsWith('event:')) {
+                  eventName = line.replace(/^event:\s*/, '');
+                } else if (line.startsWith('id:')) {
+                  lastEventId = line.replace(/^id:\s*/, '');
+                } else if (line.startsWith('retry:')) {
+                  const parsed = Number.parseInt(line.replace(/^retry:\s*/, ''), 10);
+                  if (!Number.isNaN(parsed)) {
+                    retryDelay = parsed;
+                  }
+                }
+              }
+
+              let data: unknown;
+              let parsedJson = false;
+
+              if (dataLines.length) {
+                const rawData = dataLines.join('\n');
+                try {
+                  data = JSON.parse(rawData);
+                  parsedJson = true;
+                } catch {
+                  data = rawData;
+                }
+              }
+
+              if (parsedJson) {
+                if (responseValidator) {
+                  await responseValidator(data);
+                }
+
+                if (responseTransformer) {
+                  data = await responseTransformer(data);
+                }
+              }
+
+              onSseEvent?.({
+                data,
+                event: eventName,
+                id: lastEventId,
+                retry: retryDelay,
+              });
+
+              if (dataLines.length) {
+                yield data as any;
+              }
+            }
+          }
+        } finally {
+          signal.removeEventListener('abort', abortHandler);
+          reader.releaseLock();
+        }
+
+        break; // exit loop on normal completion
+      } catch (error) {
+        // connection failed or aborted; retry after delay
+        onSseError?.(error);
+
+        if (sseMaxRetryAttempts !== undefined && attempt >= sseMaxRetryAttempts) {
+          break; // stop after firing error
+        }
+
+        // exponential backoff: double retry each attempt, cap at 30s
+        const backoff = Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 30000);
+        await sleep(backoff);
+      }
+    }
+  };
+
+  const stream = createStream();
+
+  return { stream };
+}
diff --git a/app/api-client/core/types.gen.ts b/app/api-client/core/types.gen.ts
new file mode 100644
index 0000000..c657c85
--- /dev/null
+++ b/app/api-client/core/types.gen.ts
@@ -0,0 +1,110 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+import type { Auth, AuthToken } from './auth.gen';
+import type { BodySerializer, QuerySerializer, QuerySerializerOptions } from './bodySerializer.gen';
+
+export type HttpMethod =
+  | 'connect'
+  | 'delete'
+  | 'get'
+  | 'head'
+  | 'options'
+  | 'patch'
+  | 'post'
+  | 'put'
+  | 'trace';
+
+export type Client<
+  RequestFn = never,
+  Config = unknown,
+  MethodFn = never,
+  BuildUrlFn = never,
+  SseFn = never,
+> = {
+  /**
+   * Returns the final request URL.
+   */
+  buildUrl: BuildUrlFn;
+  getConfig: () => Config;
+  request: RequestFn;
+  setConfig: (config: Config) => Config;
+} & {
+  [K in HttpMethod]: MethodFn;
+} & ([SseFn] extends [never] ? { sse?: never } : { sse: { [K in HttpMethod]: SseFn } });
+
+export interface Config {
+  /**
+   * Auth token or a function returning auth token. The resolved value will be
+   * added to the request payload as defined by its `security` array.
+   */
+  auth?: ((auth: Auth) => Promise<AuthToken> | AuthToken) | AuthToken;
+  /**
+   * A function for serializing request body parameter. By default,
+   * {@link JSON.stringify()} will be used.
+   */
+  bodySerializer?: BodySerializer | null;
+  /**
+   * An object containing any HTTP headers that you want to pre-populate your
+   * `Headers` object with.
+   *
+   * {@link https://developer.mozilla.org/docs/Web/API/Headers/Headers#init See more}
+   */
+  headers?:
+    | RequestInit['headers']
+    | Record<
+        string,
+        string | number | boolean | (string | number | boolean)[] | null | undefined | unknown
+      >;
+  /**
+   * The request method.
+   *
+   * {@link https://developer.mozilla.org/docs/Web/API/fetch#method See more}
+   */
+  method?: Uppercase<HttpMethod>;
+  /**
+   * A function for serializing request query parameters. By default, arrays
+   * will be exploded in form style, objects will be exploded in deepObject
+   * style, and reserved characters are percent-encoded.
+   *
+   * This method will have no effect if the native `paramsSerializer()` Axios
+   * API function is used.
+   *
+   * {@link https://swagger.io/docs/specification/serialization/#query View examples}
+   */
+  querySerializer?: QuerySerializer | QuerySerializerOptions;
+  /**
+   * A function validating request data. This is useful if you want to ensure
+   * the request conforms to the desired shape, so it can be safely sent to
+   * the server.
+   */
+  requestValidator?: (data: unknown) => Promise<unknown>;
+  /**
+   * A function transforming response data before it's returned. This is useful
+   * for post-processing data, e.g., converting ISO strings into Date objects.
+   */
+  responseTransformer?: (data: unknown) => Promise<unknown>;
+  /**
+   * A function validating response data. This is useful if you want to ensure
+   * the response conforms to the desired shape, so it can be safely passed to
+   * the transformers and returned to the user.
+   */
+  responseValidator?: (data: unknown) => Promise<unknown>;
+}
+
+/**
+ * Arbitrary metadata passed through the `meta` request option.
+ */
+// eslint-disable-next-line @typescript-eslint/no-empty-object-type
+export interface ClientMeta {}
+
+type IsExactlyNeverOrNeverUndefined<T> = [T] extends [never]
+  ? true
+  : [T] extends [never | undefined]
+    ? [undefined] extends [T]
+      ? false
+      : true
+    : false;
+
+export type OmitNever<T extends Record<string, unknown>> = {
+  [K in keyof T as IsExactlyNeverOrNeverUndefined<T[K]> extends true ? never : K]: T[K];
+};
diff --git a/app/api-client/core/utils.gen.ts b/app/api-client/core/utils.gen.ts
new file mode 100644
index 0000000..af56e07
--- /dev/null
+++ b/app/api-client/core/utils.gen.ts
@@ -0,0 +1,140 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+import type { BodySerializer, QuerySerializer } from './bodySerializer.gen';
+import {
+  type ArraySeparatorStyle,
+  serializeArrayParam,
+  serializeObjectParam,
+  serializePrimitiveParam,
+} from './pathSerializer.gen';
+
+export interface PathSerializer {
+  path: Record<string, unknown>;
+  url: string;
+}
+
+export const PATH_PARAM_RE: RegExp = /\{[^{}]+\}/g;
+
+export const defaultPathSerializer = ({ path, url: _url }: PathSerializer): string => {
+  let url = _url;
+  const matches = _url.match(PATH_PARAM_RE);
+  if (matches) {
+    for (const match of matches) {
+      let explode = false;
+      let name = match.substring(1, match.length - 1);
+      let style: ArraySeparatorStyle = 'simple';
+
+      if (name.endsWith('*')) {
+        explode = true;
+        name = name.substring(0, name.length - 1);
+      }
+
+      if (name.startsWith('.')) {
+        name = name.substring(1);
+        style = 'label';
+      } else if (name.startsWith(';')) {
+        name = name.substring(1);
+        style = 'matrix';
+      }
+
+      const value = path[name];
+
+      if (value === undefined || value === null) {
+        continue;
+      }
+
+      if (Array.isArray(value)) {
+        url = url.replace(match, serializeArrayParam({ explode, name, style, value }));
+        continue;
+      }
+
+      if (typeof value === 'object') {
+        url = url.replace(
+          match,
+          serializeObjectParam({
+            explode,
+            name,
+            style,
+            value: value as Record<string, unknown>,
+            valueOnly: true,
+          }),
+        );
+        continue;
+      }
+
+      if (style === 'matrix') {
+        url = url.replace(
+          match,
+          `;${serializePrimitiveParam({
+            name,
+            value: value as string,
+          })}`,
+        );
+        continue;
+      }
+
+      const replaceValue = encodeURIComponent(
+        style === 'label' ? `.${value as string}` : (value as string),
+      );
+      url = url.replace(match, replaceValue);
+    }
+  }
+  return url;
+};
+
+export const getUrl = ({
+  baseUrl,
+  path,
+  query,
+  querySerializer,
+  url: _url,
+}: {
+  baseUrl?: string;
+  path?: Record<string, unknown>;
+  query?: Record<string, unknown>;
+  querySerializer: QuerySerializer;
+  url: string;
+}): string => {
+  const pathUrl = _url.startsWith('/') ? _url : `/${_url}`;
+  let url = (baseUrl ?? '') + pathUrl;
+  if (path) {
+    url = defaultPathSerializer({ path, url });
+  }
+  let search = query ? querySerializer(query) : '';
+  if (search.startsWith('?')) {
+    search = search.substring(1);
+  }
+  if (search) {
+    url += `?${search}`;
+  }
+  return url;
+};
+
+export function getValidRequestBody(options: {
+  body?: unknown;
+  bodySerializer?: BodySerializer | null;
+  serializedBody?: unknown;
+}): unknown {
+  const hasBody = options.body !== undefined;
+  const isSerializedBody = hasBody && options.bodySerializer;
+
+  if (isSerializedBody) {
+    if ('serializedBody' in options) {
+      const hasSerializedBody =
+        options.serializedBody !== undefined && options.serializedBody !== '';
+
+      return hasSerializedBody ? options.serializedBody : null;
+    }
+
+    // not all clients implement a serializedBody property (i.e., client-axios)
+    return options.body !== '' ? options.body : null;
+  }
+
+  // plain/text body
+  if (hasBody) {
+    return options.body;
+  }
+
+  // no body was provided
+  return undefined;
+}
diff --git a/app/api-client/index.ts b/app/api-client/index.ts
new file mode 100644
index 0000000..894822f
--- /dev/null
+++ b/app/api-client/index.ts
@@ -0,0 +1,4 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+export { deleteAccount, deleteAccountApikeysByApiKeyId, deleteAdminUsersByUserId, deleteAgentsByAgentId, deleteDevicesByDeviceId, deleteDevicesByDeviceIdFavorite, deleteDevicesByDeviceIdSharesByUserId, getAccount, getAccountApikeys, getAccountApikeysByApiKeyId, getAccountPreferences, getAccountPreferencesOnboarding, getAdminSettings, getAdminUsers, getAdminUsersByUserId, getAgents, getAgentsByAgentId, getAuthRegistration, getAuthSession, getDevices, getDevicesByDeviceId, getDevicesByDeviceIdShares, type Options, postAccountApikeys, postAdminUsers, postAgents, postAgentsByAgentIdEnrollments, postAgentsByAgentIdRevoke, postAgentsEnroll, postAuthLogin, postAuthLogout, postAuthResetPassword, postAuthResetPasswordRequest, postAuthSignup, postDevices, postDevicesByDeviceIdPowerOn, postDevicesByDeviceIdReboot, postDevicesByDeviceIdShares, postDevicesByDeviceIdShutdown, postDevicesByDeviceIdStatus, putAccount, putAccountPassword, putAccountPreferencesOnboarding, putAdminSettings, putAdminUsersByUserId, putAdminUsersByUserIdPassword, putAgentsByAgentId, putDevicesByDeviceId, putDevicesByDeviceIdFavorite, putDevicesByDeviceIdSharesByUserId } from './sdk.gen';
+export type { ClientOptions, DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdErrors, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountApikeysByApiKeyIdResponses, DeleteAccountData, DeleteAccountError, DeleteAccountErrors, DeleteAccountResponse, DeleteAccountResponses, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdErrors, DeleteAdminUsersByUserIdResponse, DeleteAdminUsersByUserIdResponses, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdErrors, DeleteAgentsByAgentIdResponse, DeleteAgentsByAgentIdResponses, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdErrors, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteErrors, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdFavoriteResponses, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdResponses, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdErrors, DeleteDevicesByDeviceIdSharesByUserIdResponse, DeleteDevicesByDeviceIdSharesByUserIdResponses, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdErrors, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysByApiKeyIdResponses, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountApikeysResponses, GetAccountData, GetAccountError, GetAccountErrors, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesOnboardingResponses, GetAccountPreferencesResponse, GetAccountPreferencesResponses, GetAccountResponse, GetAccountResponses, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminSettingsResponses, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdErrors, GetAdminUsersByUserIdResponse, GetAdminUsersByUserIdResponses, GetAdminUsersData, GetAdminUsersError, GetAdminUsersErrors, GetAdminUsersResponse, GetAdminUsersResponses, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdErrors, GetAgentsByAgentIdResponse, GetAgentsByAgentIdResponses, GetAgentsData, GetAgentsResponse, GetAgentsResponses, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthRegistrationResponses, GetAuthSessionData, GetAuthSessionError, GetAuthSessionErrors, GetAuthSessionResponse, GetAuthSessionResponses, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdErrors, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdResponses, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesErrors, GetDevicesByDeviceIdSharesResponse, GetDevicesByDeviceIdSharesResponses, GetDevicesData, GetDevicesResponse, GetDevicesResponses, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysErrors, PostAccountApikeysResponse, PostAccountApikeysResponses, PostAdminUsersData, PostAdminUsersError, PostAdminUsersErrors, PostAdminUsersResponse, PostAdminUsersResponses, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsErrors, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdEnrollmentsResponses, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeErrors, PostAgentsByAgentIdRevokeResponse, PostAgentsByAgentIdRevokeResponses, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollErrors, PostAgentsEnrollResponse, PostAgentsEnrollResponses, PostAgentsError, PostAgentsErrors, PostAgentsResponse, PostAgentsResponses, PostAuthLoginData, PostAuthLoginError, PostAuthLoginErrors, PostAuthLoginResponse, PostAuthLoginResponses, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutErrors, PostAuthLogoutResponse, PostAuthLogoutResponses, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordErrors, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestErrors, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordRequestResponses, PostAuthResetPasswordResponse, PostAuthResetPasswordResponses, PostAuthSignupData, PostAuthSignupError, PostAuthSignupErrors, PostAuthSignupResponse, PostAuthSignupResponses, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnErrors, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdPowerOnResponses, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootErrors, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdRebootResponses, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesErrors, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdSharesResponses, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownErrors, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdShutdownResponses, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusErrors, PostDevicesByDeviceIdStatusResponse, PostDevicesByDeviceIdStatusResponses, PostDevicesData, PostDevicesError, PostDevicesErrors, PostDevicesResponse, PostDevicesResponses, PutAccountData, PutAccountError, PutAccountErrors, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordErrors, PutAccountPasswordResponse, PutAccountPasswordResponses, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingErrors, PutAccountPreferencesOnboardingResponse, PutAccountPreferencesOnboardingResponses, PutAccountResponse, PutAccountResponses, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsErrors, PutAdminSettingsResponse, PutAdminSettingsResponses, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdErrors, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordErrors, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdPasswordResponses, PutAdminUsersByUserIdResponse, PutAdminUsersByUserIdResponses, PutAgentsByAgentIdData, PutAgentsByAgentIdError, PutAgentsByAgentIdErrors, PutAgentsByAgentIdResponse, PutAgentsByAgentIdResponses, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdErrors, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteErrors, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdFavoriteResponses, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdResponses, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdErrors, PutDevicesByDeviceIdSharesByUserIdResponse, PutDevicesByDeviceIdSharesByUserIdResponses } from './types.gen';
diff --git a/app/api-client/sdk.gen.ts b/app/api-client/sdk.gen.ts
new file mode 100644
index 0000000..7992f8d
--- /dev/null
+++ b/app/api-client/sdk.gen.ts
@@ -0,0 +1,606 @@
+// @ts-nocheck — patched by scripts/patch-api-client.ts
+// This file is auto-generated by @hey-api/openapi-ts
+
+import type { Client, ClientMeta, Composable, Options as Options2, RequestResult, TDataShape } from './client';
+import { client } from './client.gen';
+import type { DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountData, DeleteAccountError, DeleteAccountResponse, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdResponse, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdResponse, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdResponse, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountData, GetAccountError, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesResponse, GetAccountResponse, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdResponse, GetAdminUsersData, GetAdminUsersError, GetAdminUsersResponse, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdResponse, GetAgentsData, GetAgentsResponse, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthSessionData, GetAuthSessionError, GetAuthSessionResponse, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesResponse, GetDevicesData, GetDevicesResponse, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysResponse, PostAdminUsersData, PostAdminUsersError, PostAdminUsersResponse, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeResponse, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollResponse, PostAgentsError, PostAgentsResponse, PostAuthLoginData, PostAuthLoginError, PostAuthLoginResponse, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutResponse, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordResponse, PostAuthSignupData, PostAuthSignupError, PostAuthSignupResponse, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusResponse, PostDevicesData, PostDevicesError, PostDevicesResponse, PutAccountData, PutAccountError, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordResponse, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingResponse, PutAccountResponse, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsResponse, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdResponse, PutAgentsByAgentIdData, PutAgentsByAgentIdError, PutAgentsByAgentIdResponse, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdResponse } from './types.gen';
+
+export type Options<TComposable extends Composable = '$fetch', TData extends TDataShape = TDataShape, ResT = unknown, DefaultT = undefined> = Options2<TComposable, TData, ResT, DefaultT> & {
+    /**
+     * You can provide a client instance returned by `createClient()` instead of
+     * individual options. This might be also useful if you want to implement a
+     * custom client.
+     */
+    client?: Client;
+    /**
+     * You can pass arbitrary values through the `meta` object. This can be
+     * used to access values that aren't defined as part of the SDK function.
+     */
+    meta?: keyof ClientMeta extends never ? Record<string, unknown> : ClientMeta;
+};
+
+/**
+ * User Login
+ *
+ * Authenticate a user with their username and password
+ */
+export const postAuthLogin = <TComposable extends Composable = '$fetch', DefaultT extends PostAuthLoginResponse = PostAuthLoginResponse>(options: Options<TComposable, PostAuthLoginData, PostAuthLoginResponse, DefaultT>): RequestResult<TComposable, PostAuthLoginResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAuthLoginResponse | DefaultT, PostAuthLoginError, DefaultT>({
+    url: '/auth/login',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Get Current Session
+ *
+ * Retrieve the current user's session information
+ */
+export const getAuthSession = <TComposable extends Composable = '$fetch', DefaultT extends GetAuthSessionResponse = GetAuthSessionResponse>(options: Options<TComposable, GetAuthSessionData, GetAuthSessionResponse, DefaultT>): RequestResult<TComposable, GetAuthSessionResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAuthSessionResponse | DefaultT, GetAuthSessionError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/auth/session',
+    ...options
+});
+
+/**
+ * User Logout
+ *
+ * Invalidate the current user's session
+ */
+export const postAuthLogout = <TComposable extends Composable = '$fetch', DefaultT extends PostAuthLogoutResponse = PostAuthLogoutResponse>(options: Options<TComposable, PostAuthLogoutData, PostAuthLogoutResponse, DefaultT>): RequestResult<TComposable, PostAuthLogoutResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAuthLogoutResponse | DefaultT, PostAuthLogoutError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/auth/logout',
+    ...options
+});
+
+/**
+ * Registration status
+ *
+ * Whether public sign-up is enabled on this server.
+ */
+export const getAuthRegistration = <TComposable extends Composable = '$fetch', DefaultT extends GetAuthRegistrationResponse = GetAuthRegistrationResponse>(options: Options<TComposable, GetAuthRegistrationData, GetAuthRegistrationResponse, DefaultT>): RequestResult<TComposable, GetAuthRegistrationResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAuthRegistrationResponse | DefaultT, unknown, DefaultT>({ url: '/auth/registration', ...options });
+
+/**
+ * Sign up
+ *
+ * Creates a user account and logs it in. Only available while public registration is enabled.
+ */
+export const postAuthSignup = <TComposable extends Composable = '$fetch', DefaultT extends PostAuthSignupResponse = PostAuthSignupResponse>(options: Options<TComposable, PostAuthSignupData, PostAuthSignupResponse, DefaultT>): RequestResult<TComposable, PostAuthSignupResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAuthSignupResponse | DefaultT, PostAuthSignupError, DefaultT>({
+    url: '/auth/signup',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Reset your password using a reset token
+ *
+ * Reset your password using a valid reset token
+ */
+export const postAuthResetPassword = <TComposable extends Composable = '$fetch', DefaultT extends PostAuthResetPasswordResponse = PostAuthResetPasswordResponse>(options: Options<TComposable, PostAuthResetPasswordData, PostAuthResetPasswordResponse, DefaultT>): RequestResult<TComposable, PostAuthResetPasswordResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAuthResetPasswordResponse | DefaultT, PostAuthResetPasswordError, DefaultT>({
+    url: '/auth/reset-password',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Request Password Reset
+ *
+ * Request a password reset for a user using their username
+ */
+export const postAuthResetPasswordRequest = <TComposable extends Composable = '$fetch', DefaultT extends PostAuthResetPasswordRequestResponse = PostAuthResetPasswordRequestResponse>(options: Options<TComposable, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestResponse, DefaultT>): RequestResult<TComposable, PostAuthResetPasswordRequestResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAuthResetPasswordRequestResponse | DefaultT, PostAuthResetPasswordRequestError, DefaultT>({
+    url: '/auth/reset-password/request',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Delete account
+ *
+ * Permanently delete the authenticated user's account.
+ */
+export const deleteAccount = <TComposable extends Composable = '$fetch', DefaultT extends DeleteAccountResponse = DeleteAccountResponse>(options: Options<TComposable, DeleteAccountData, DeleteAccountResponse, DefaultT>): RequestResult<TComposable, DeleteAccountResponse | DefaultT, DefaultT> => (options.client ?? client).delete<TComposable, DeleteAccountResponse | DefaultT, DeleteAccountError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/account',
+    ...options
+});
+
+/**
+ * Get account information
+ *
+ * Retrieve information about the authenticated user's account.
+ */
+export const getAccount = <TComposable extends Composable = '$fetch', DefaultT extends GetAccountResponse = GetAccountResponse>(options: Options<TComposable, GetAccountData, GetAccountResponse, DefaultT>): RequestResult<TComposable, GetAccountResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAccountResponse | DefaultT, GetAccountError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/account',
+    ...options
+});
+
+/**
+ * Update account information
+ *
+ * Update information about the authenticated user's account.
+ */
+export const putAccount = <TComposable extends Composable = '$fetch', DefaultT extends PutAccountResponse = PutAccountResponse>(options: Options<TComposable, PutAccountData, PutAccountResponse, DefaultT>): RequestResult<TComposable, PutAccountResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutAccountResponse | DefaultT, PutAccountError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/account',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Change account password
+ *
+ * Change the password of the authenticated user's account.
+ */
+export const putAccountPassword = <TComposable extends Composable = '$fetch', DefaultT extends PutAccountPasswordResponse = PutAccountPasswordResponse>(options: Options<TComposable, PutAccountPasswordData, PutAccountPasswordResponse, DefaultT>): RequestResult<TComposable, PutAccountPasswordResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutAccountPasswordResponse | DefaultT, PutAccountPasswordError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/account/password',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Get all API keys
+ *
+ * Retrieve all API keys for the authenticated user's account.
+ */
+export const getAccountApikeys = <TComposable extends Composable = '$fetch', DefaultT extends GetAccountApikeysResponse = GetAccountApikeysResponse>(options: Options<TComposable, GetAccountApikeysData, GetAccountApikeysResponse, DefaultT>): RequestResult<TComposable, GetAccountApikeysResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAccountApikeysResponse | DefaultT, unknown, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/account/apikeys',
+    ...options
+});
+
+/**
+ * Create a new API key
+ *
+ * Create a new API key for the authenticated user's account.
+ */
+export const postAccountApikeys = <TComposable extends Composable = '$fetch', DefaultT extends PostAccountApikeysResponse = PostAccountApikeysResponse>(options: Options<TComposable, PostAccountApikeysData, PostAccountApikeysResponse, DefaultT>): RequestResult<TComposable, PostAccountApikeysResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAccountApikeysResponse | DefaultT, PostAccountApikeysError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/account/apikeys',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Delete an API key
+ *
+ * Delete an API key by its ID for the authenticated user's account.
+ */
+export const deleteAccountApikeysByApiKeyId = <TComposable extends Composable = '$fetch', DefaultT extends DeleteAccountApikeysByApiKeyIdResponse = DeleteAccountApikeysByApiKeyIdResponse>(options: Options<TComposable, DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdResponse, DefaultT>): RequestResult<TComposable, DeleteAccountApikeysByApiKeyIdResponse | DefaultT, DefaultT> => (options.client ?? client).delete<TComposable, DeleteAccountApikeysByApiKeyIdResponse | DefaultT, DeleteAccountApikeysByApiKeyIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/account/apikeys/{apiKeyID}',
+    ...options
+});
+
+/**
+ * Get API key details
+ *
+ * Retrieve details of a specific API key by its ID for the authenticated user's account.
+ */
+export const getAccountApikeysByApiKeyId = <TComposable extends Composable = '$fetch', DefaultT extends GetAccountApikeysByApiKeyIdResponse = GetAccountApikeysByApiKeyIdResponse>(options: Options<TComposable, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdResponse, DefaultT>): RequestResult<TComposable, GetAccountApikeysByApiKeyIdResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAccountApikeysByApiKeyIdResponse | DefaultT, GetAccountApikeysByApiKeyIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/account/apikeys/{apiKeyID}',
+    ...options
+});
+
+/**
+ * Get all preferences
+ *
+ * Retrieve all of the authenticated user's preferences in a single request, keyed by the same names as the per-preference routes. Preferences that were never set are returned with their defaults.
+ */
+export const getAccountPreferences = <TComposable extends Composable = '$fetch', DefaultT extends GetAccountPreferencesResponse = GetAccountPreferencesResponse>(options: Options<TComposable, GetAccountPreferencesData, GetAccountPreferencesResponse, DefaultT>): RequestResult<TComposable, GetAccountPreferencesResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAccountPreferencesResponse | DefaultT, unknown, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/account/preferences',
+    ...options
+});
+
+/**
+ * Get onboarding state
+ *
+ * Retrieve whether the authenticated user has completed the one-time, platform-wide welcome onboarding.
+ */
+export const getAccountPreferencesOnboarding = <TComposable extends Composable = '$fetch', DefaultT extends GetAccountPreferencesOnboardingResponse = GetAccountPreferencesOnboardingResponse>(options: Options<TComposable, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, DefaultT>): RequestResult<TComposable, GetAccountPreferencesOnboardingResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAccountPreferencesOnboardingResponse | DefaultT, unknown, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/account/preferences/onboarding',
+    ...options
+});
+
+/**
+ * Update onboarding state
+ *
+ * Set whether the authenticated user has completed the one-time, platform-wide welcome onboarding.
+ */
+export const putAccountPreferencesOnboarding = <TComposable extends Composable = '$fetch', DefaultT extends PutAccountPreferencesOnboardingResponse = PutAccountPreferencesOnboardingResponse>(options: Options<TComposable, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingResponse, DefaultT>): RequestResult<TComposable, PutAccountPreferencesOnboardingResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutAccountPreferencesOnboardingResponse | DefaultT, PutAccountPreferencesOnboardingError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/account/preferences/onboarding',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * List users
+ *
+ * Retrieve user accounts with optional role and search filters.
+ */
+export const getAdminUsers = <TComposable extends Composable = '$fetch', DefaultT extends GetAdminUsersResponse = GetAdminUsersResponse>(options: Options<TComposable, GetAdminUsersData, GetAdminUsersResponse, DefaultT>): RequestResult<TComposable, GetAdminUsersResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAdminUsersResponse | DefaultT, GetAdminUsersError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/admin/users',
+    ...options
+});
+
+/**
+ * Create user
+ *
+ * Provision a new user account with the desired role.
+ */
+export const postAdminUsers = <TComposable extends Composable = '$fetch', DefaultT extends PostAdminUsersResponse = PostAdminUsersResponse>(options: Options<TComposable, PostAdminUsersData, PostAdminUsersResponse, DefaultT>): RequestResult<TComposable, PostAdminUsersResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAdminUsersResponse | DefaultT, PostAdminUsersError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/admin/users',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Delete user
+ *
+ * Permanently remove a user account and all of its associated data.
+ */
+export const deleteAdminUsersByUserId = <TComposable extends Composable = '$fetch', DefaultT extends DeleteAdminUsersByUserIdResponse = DeleteAdminUsersByUserIdResponse>(options: Options<TComposable, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdResponse, DefaultT>): RequestResult<TComposable, DeleteAdminUsersByUserIdResponse | DefaultT, DefaultT> => (options.client ?? client).delete<TComposable, DeleteAdminUsersByUserIdResponse | DefaultT, DeleteAdminUsersByUserIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/admin/users/{userId}',
+    ...options
+});
+
+/**
+ * Get user
+ *
+ * Retrieve details for a specific user account.
+ */
+export const getAdminUsersByUserId = <TComposable extends Composable = '$fetch', DefaultT extends GetAdminUsersByUserIdResponse = GetAdminUsersByUserIdResponse>(options: Options<TComposable, GetAdminUsersByUserIdData, GetAdminUsersByUserIdResponse, DefaultT>): RequestResult<TComposable, GetAdminUsersByUserIdResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAdminUsersByUserIdResponse | DefaultT, GetAdminUsersByUserIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/admin/users/{userId}',
+    ...options
+});
+
+/**
+ * Update user
+ *
+ * Modify profile fields or role for a user account.
+ */
+export const putAdminUsersByUserId = <TComposable extends Composable = '$fetch', DefaultT extends PutAdminUsersByUserIdResponse = PutAdminUsersByUserIdResponse>(options: Options<TComposable, PutAdminUsersByUserIdData, PutAdminUsersByUserIdResponse, DefaultT>): RequestResult<TComposable, PutAdminUsersByUserIdResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutAdminUsersByUserIdResponse | DefaultT, PutAdminUsersByUserIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/admin/users/{userId}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Reset user password
+ *
+ * Set a new password for a user account and revoke active sessions.
+ */
+export const putAdminUsersByUserIdPassword = <TComposable extends Composable = '$fetch', DefaultT extends PutAdminUsersByUserIdPasswordResponse = PutAdminUsersByUserIdPasswordResponse>(options: Options<TComposable, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordResponse, DefaultT>): RequestResult<TComposable, PutAdminUsersByUserIdPasswordResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutAdminUsersByUserIdPasswordResponse | DefaultT, PutAdminUsersByUserIdPasswordError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/admin/users/{userId}/password',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Get server settings
+ */
+export const getAdminSettings = <TComposable extends Composable = '$fetch', DefaultT extends GetAdminSettingsResponse = GetAdminSettingsResponse>(options: Options<TComposable, GetAdminSettingsData, GetAdminSettingsResponse, DefaultT>): RequestResult<TComposable, GetAdminSettingsResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAdminSettingsResponse | DefaultT, unknown, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/admin/settings',
+    ...options
+});
+
+/**
+ * Update server settings
+ */
+export const putAdminSettings = <TComposable extends Composable = '$fetch', DefaultT extends PutAdminSettingsResponse = PutAdminSettingsResponse>(options: Options<TComposable, PutAdminSettingsData, PutAdminSettingsResponse, DefaultT>): RequestResult<TComposable, PutAdminSettingsResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutAdminSettingsResponse | DefaultT, PutAdminSettingsError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/admin/settings',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Enroll an agent
+ *
+ * Called by an agent with its single-use enrollment token and a secret it generated itself. Returns the token id the agent connects with: `Authorization: Bearer netignite_agent_<token_id>:<secret>`.
+ */
+export const postAgentsEnroll = <TComposable extends Composable = '$fetch', DefaultT extends PostAgentsEnrollResponse = PostAgentsEnrollResponse>(options: Options<TComposable, PostAgentsEnrollData, PostAgentsEnrollResponse, DefaultT>): RequestResult<TComposable, PostAgentsEnrollResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAgentsEnrollResponse | DefaultT, PostAgentsEnrollError, DefaultT>({
+    url: '/agents/enroll',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * List agents
+ *
+ * All agents of the authenticated user. Agents are never shared.
+ */
+export const getAgents = <TComposable extends Composable = '$fetch', DefaultT extends GetAgentsResponse = GetAgentsResponse>(options: Options<TComposable, GetAgentsData, GetAgentsResponse, DefaultT>): RequestResult<TComposable, GetAgentsResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAgentsResponse | DefaultT, unknown, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents',
+    ...options
+});
+
+/**
+ * Create an agent
+ *
+ * Creates an agent. It can connect once it has been enrolled.
+ */
+export const postAgents = <TComposable extends Composable = '$fetch', DefaultT extends PostAgentsResponse = PostAgentsResponse>(options: Options<TComposable, PostAgentsData, PostAgentsResponse, DefaultT>): RequestResult<TComposable, PostAgentsResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAgentsResponse | DefaultT, PostAgentsError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Delete an agent
+ *
+ * Disconnects and deletes the agent. Devices that used it keep their settings but have no agent.
+ */
+export const deleteAgentsByAgentId = <TComposable extends Composable = '$fetch', DefaultT extends DeleteAgentsByAgentIdResponse = DeleteAgentsByAgentIdResponse>(options: Options<TComposable, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdResponse, DefaultT>): RequestResult<TComposable, DeleteAgentsByAgentIdResponse | DefaultT, DefaultT> => (options.client ?? client).delete<TComposable, DeleteAgentsByAgentIdResponse | DefaultT, DeleteAgentsByAgentIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}',
+    ...options
+});
+
+/**
+ * Get an agent
+ */
+export const getAgentsByAgentId = <TComposable extends Composable = '$fetch', DefaultT extends GetAgentsByAgentIdResponse = GetAgentsByAgentIdResponse>(options: Options<TComposable, GetAgentsByAgentIdData, GetAgentsByAgentIdResponse, DefaultT>): RequestResult<TComposable, GetAgentsByAgentIdResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAgentsByAgentIdResponse | DefaultT, GetAgentsByAgentIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}',
+    ...options
+});
+
+/**
+ * Update an agent
+ */
+export const putAgentsByAgentId = <TComposable extends Composable = '$fetch', DefaultT extends PutAgentsByAgentIdResponse = PutAgentsByAgentIdResponse>(options: Options<TComposable, PutAgentsByAgentIdData, PutAgentsByAgentIdResponse, DefaultT>): RequestResult<TComposable, PutAgentsByAgentIdResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutAgentsByAgentIdResponse | DefaultT, PutAgentsByAgentIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Create an enrollment token
+ *
+ * Creates a single-use enrollment token (valid 15 minutes) for `netignite-agent pair`. Older unused tokens of the agent stop working. Enrolling replaces the agent's current credential.
+ */
+export const postAgentsByAgentIdEnrollments = <TComposable extends Composable = '$fetch', DefaultT extends PostAgentsByAgentIdEnrollmentsResponse = PostAgentsByAgentIdEnrollmentsResponse>(options: Options<TComposable, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsResponse, DefaultT>): RequestResult<TComposable, PostAgentsByAgentIdEnrollmentsResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAgentsByAgentIdEnrollmentsResponse | DefaultT, PostAgentsByAgentIdEnrollmentsError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}/enrollments',
+    ...options
+});
+
+/**
+ * Revoke an agent's credential
+ *
+ * Disconnects the agent. It can only connect again after a new enrollment.
+ */
+export const postAgentsByAgentIdRevoke = <TComposable extends Composable = '$fetch', DefaultT extends PostAgentsByAgentIdRevokeResponse = PostAgentsByAgentIdRevokeResponse>(options: Options<TComposable, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeResponse, DefaultT>): RequestResult<TComposable, PostAgentsByAgentIdRevokeResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAgentsByAgentIdRevokeResponse | DefaultT, PostAgentsByAgentIdRevokeError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}/revoke',
+    ...options
+});
+
+/**
+ * List devices
+ *
+ * Devices the user owns and devices shared with them, with the user's role on each.
+ */
+export const getDevices = <TComposable extends Composable = '$fetch', DefaultT extends GetDevicesResponse = GetDevicesResponse>(options: Options<TComposable, GetDevicesData, GetDevicesResponse, DefaultT>): RequestResult<TComposable, GetDevicesResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetDevicesResponse | DefaultT, unknown, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices',
+    ...options
+});
+
+/**
+ * Create a device
+ */
+export const postDevices = <TComposable extends Composable = '$fetch', DefaultT extends PostDevicesResponse = PostDevicesResponse>(options: Options<TComposable, PostDevicesData, PostDevicesResponse, DefaultT>): RequestResult<TComposable, PostDevicesResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostDevicesResponse | DefaultT, PostDevicesError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Delete a device
+ *
+ * Only the owner can delete a device. Its shares are removed as well.
+ */
+export const deleteDevicesByDeviceId = <TComposable extends Composable = '$fetch', DefaultT extends DeleteDevicesByDeviceIdResponse = DeleteDevicesByDeviceIdResponse>(options: Options<TComposable, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdResponse, DefaultT>): RequestResult<TComposable, DeleteDevicesByDeviceIdResponse | DefaultT, DefaultT> => (options.client ?? client).delete<TComposable, DeleteDevicesByDeviceIdResponse | DefaultT, DeleteDevicesByDeviceIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}',
+    ...options
+});
+
+/**
+ * Get a device
+ */
+export const getDevicesByDeviceId = <TComposable extends Composable = '$fetch', DefaultT extends GetDevicesByDeviceIdResponse = GetDevicesByDeviceIdResponse>(options: Options<TComposable, GetDevicesByDeviceIdData, GetDevicesByDeviceIdResponse, DefaultT>): RequestResult<TComposable, GetDevicesByDeviceIdResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetDevicesByDeviceIdResponse | DefaultT, GetDevicesByDeviceIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}',
+    ...options
+});
+
+/**
+ * Update a device
+ *
+ * Owners and managers can edit a device; only the owner can change its agents.
+ */
+export const putDevicesByDeviceId = <TComposable extends Composable = '$fetch', DefaultT extends PutDevicesByDeviceIdResponse = PutDevicesByDeviceIdResponse>(options: Options<TComposable, PutDevicesByDeviceIdData, PutDevicesByDeviceIdResponse, DefaultT>): RequestResult<TComposable, PutDevicesByDeviceIdResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutDevicesByDeviceIdResponse | DefaultT, PutDevicesByDeviceIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Power on a device
+ *
+ * Sends a Wake-on-LAN packet through the device's agent. Success means the packet was sent.
+ */
+export const postDevicesByDeviceIdPowerOn = <TComposable extends Composable = '$fetch', DefaultT extends PostDevicesByDeviceIdPowerOnResponse = PostDevicesByDeviceIdPowerOnResponse>(options: Options<TComposable, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnResponse, DefaultT>): RequestResult<TComposable, PostDevicesByDeviceIdPowerOnResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostDevicesByDeviceIdPowerOnResponse | DefaultT, PostDevicesByDeviceIdPowerOnError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/power-on',
+    ...options
+});
+
+/**
+ * Shut down a device
+ *
+ * Shuts the device down through the Linux agent running on it.
+ */
+export const postDevicesByDeviceIdShutdown = <TComposable extends Composable = '$fetch', DefaultT extends PostDevicesByDeviceIdShutdownResponse = PostDevicesByDeviceIdShutdownResponse>(options: Options<TComposable, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownResponse, DefaultT>): RequestResult<TComposable, PostDevicesByDeviceIdShutdownResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostDevicesByDeviceIdShutdownResponse | DefaultT, PostDevicesByDeviceIdShutdownError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/shutdown',
+    ...options
+});
+
+/**
+ * Reboot a device
+ *
+ * Reboots the device through the Linux agent running on it.
+ */
+export const postDevicesByDeviceIdReboot = <TComposable extends Composable = '$fetch', DefaultT extends PostDevicesByDeviceIdRebootResponse = PostDevicesByDeviceIdRebootResponse>(options: Options<TComposable, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootResponse, DefaultT>): RequestResult<TComposable, PostDevicesByDeviceIdRebootResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostDevicesByDeviceIdRebootResponse | DefaultT, PostDevicesByDeviceIdRebootError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/reboot',
+    ...options
+});
+
+/**
+ * Check a device's status now
+ *
+ * Runs the status check immediately (at most every 5 seconds per device) and returns the result.
+ */
+export const postDevicesByDeviceIdStatus = <TComposable extends Composable = '$fetch', DefaultT extends PostDevicesByDeviceIdStatusResponse = PostDevicesByDeviceIdStatusResponse>(options: Options<TComposable, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusResponse, DefaultT>): RequestResult<TComposable, PostDevicesByDeviceIdStatusResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostDevicesByDeviceIdStatusResponse | DefaultT, PostDevicesByDeviceIdStatusError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/status',
+    ...options
+});
+
+/**
+ * Remove a device from your favorites
+ */
+export const deleteDevicesByDeviceIdFavorite = <TComposable extends Composable = '$fetch', DefaultT extends DeleteDevicesByDeviceIdFavoriteResponse = DeleteDevicesByDeviceIdFavoriteResponse>(options: Options<TComposable, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteResponse, DefaultT>): RequestResult<TComposable, DeleteDevicesByDeviceIdFavoriteResponse | DefaultT, DefaultT> => (options.client ?? client).delete<TComposable, DeleteDevicesByDeviceIdFavoriteResponse | DefaultT, DeleteDevicesByDeviceIdFavoriteError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/favorite',
+    ...options
+});
+
+/**
+ * Add a device to your favorites
+ */
+export const putDevicesByDeviceIdFavorite = <TComposable extends Composable = '$fetch', DefaultT extends PutDevicesByDeviceIdFavoriteResponse = PutDevicesByDeviceIdFavoriteResponse>(options: Options<TComposable, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteResponse, DefaultT>): RequestResult<TComposable, PutDevicesByDeviceIdFavoriteResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutDevicesByDeviceIdFavoriteResponse | DefaultT, PutDevicesByDeviceIdFavoriteError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/favorite',
+    ...options
+});
+
+/**
+ * List a device's shares
+ */
+export const getDevicesByDeviceIdShares = <TComposable extends Composable = '$fetch', DefaultT extends GetDevicesByDeviceIdSharesResponse = GetDevicesByDeviceIdSharesResponse>(options: Options<TComposable, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesResponse, DefaultT>): RequestResult<TComposable, GetDevicesByDeviceIdSharesResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetDevicesByDeviceIdSharesResponse | DefaultT, GetDevicesByDeviceIdSharesError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/shares',
+    ...options
+});
+
+/**
+ * Share a device
+ *
+ * Shares the device with another user, found by username or email address.
+ */
+export const postDevicesByDeviceIdShares = <TComposable extends Composable = '$fetch', DefaultT extends PostDevicesByDeviceIdSharesResponse = PostDevicesByDeviceIdSharesResponse>(options: Options<TComposable, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesResponse, DefaultT>): RequestResult<TComposable, PostDevicesByDeviceIdSharesResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostDevicesByDeviceIdSharesResponse | DefaultT, PostDevicesByDeviceIdSharesError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/shares',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Remove a share
+ *
+ * The owner removes a share, or a user leaves a device shared with them (their own user id).
+ */
+export const deleteDevicesByDeviceIdSharesByUserId = <TComposable extends Composable = '$fetch', DefaultT extends DeleteDevicesByDeviceIdSharesByUserIdResponse = DeleteDevicesByDeviceIdSharesByUserIdResponse>(options: Options<TComposable, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdResponse, DefaultT>): RequestResult<TComposable, DeleteDevicesByDeviceIdSharesByUserIdResponse | DefaultT, DefaultT> => (options.client ?? client).delete<TComposable, DeleteDevicesByDeviceIdSharesByUserIdResponse | DefaultT, DeleteDevicesByDeviceIdSharesByUserIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/shares/{userID}',
+    ...options
+});
+
+/**
+ * Change a share's role
+ */
+export const putDevicesByDeviceIdSharesByUserId = <TComposable extends Composable = '$fetch', DefaultT extends PutDevicesByDeviceIdSharesByUserIdResponse = PutDevicesByDeviceIdSharesByUserIdResponse>(options: Options<TComposable, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdResponse, DefaultT>): RequestResult<TComposable, PutDevicesByDeviceIdSharesByUserIdResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutDevicesByDeviceIdSharesByUserIdResponse | DefaultT, PutDevicesByDeviceIdSharesByUserIdError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/shares/{userID}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
diff --git a/app/api-client/types.gen.ts b/app/api-client/types.gen.ts
new file mode 100644
index 0000000..edd662b
--- /dev/null
+++ b/app/api-client/types.gen.ts
@@ -0,0 +1,2542 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+export type ClientOptions = {
+    baseURL: 'http://localhost:18232/api/v1' | 'https://app.netignite.dev/api/v1' | (string & {});
+};
+
+export type PostAuthLoginData = {
+    body: {
+        username: string;
+        password: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/auth/login';
+};
+
+export type PostAuthLoginErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Unauthorized: Invalid username or password
+     */
+    401: {
+        success: false;
+        code: 401;
+        message: 'Unauthorized: Invalid username or password';
+    };
+    /**
+     * Too many login attempts. Try again later.
+     */
+    429: {
+        success: false;
+        code: 429;
+        message: 'Too many login attempts. Try again later.';
+    };
+};
+
+export type PostAuthLoginError = PostAuthLoginErrors[keyof PostAuthLoginErrors];
+
+export type PostAuthLoginResponses = {
+    /**
+     * Login successful
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Login successful';
+        data: {
+            user_id: number;
+            user_role: 'admin' | 'user';
+            created_at: number;
+            expires_at: number;
+            token: string;
+        };
+    };
+};
+
+export type PostAuthLoginResponse = PostAuthLoginResponses[keyof PostAuthLoginResponses];
+
+export type GetAuthSessionData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/auth/session';
+};
+
+export type GetAuthSessionErrors = {
+    /**
+     * Unauthorized: Invalid or missing session token / Your Auth Context is not a session
+     */
+    401: {
+        success: false;
+        code: 401;
+        message: 'Unauthorized: Invalid or missing session token / Your Auth Context is not a session';
+    };
+};
+
+export type GetAuthSessionError = GetAuthSessionErrors[keyof GetAuthSessionErrors];
+
+export type GetAuthSessionResponses = {
+    /**
+     * Session info retrieved successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Session info retrieved successfully';
+        data: {
+            user_id: number;
+            user_role: 'admin' | 'user';
+            created_at: number;
+            expires_at: number;
+        };
+    };
+};
+
+export type GetAuthSessionResponse = GetAuthSessionResponses[keyof GetAuthSessionResponses];
+
+export type PostAuthLogoutData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/auth/logout';
+};
+
+export type PostAuthLogoutErrors = {
+    /**
+     * Unauthorized: Invalid or missing session token / Your Auth Context is not a session
+     */
+    401: {
+        success: false;
+        code: 401;
+        message: 'Unauthorized: Invalid or missing session token / Your Auth Context is not a session';
+    };
+};
+
+export type PostAuthLogoutError = PostAuthLogoutErrors[keyof PostAuthLogoutErrors];
+
+export type PostAuthLogoutResponses = {
+    /**
+     * Logout successful
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Logout successful';
+        data: null;
+    };
+};
+
+export type PostAuthLogoutResponse = PostAuthLogoutResponses[keyof PostAuthLogoutResponses];
+
+export type GetAuthRegistrationData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/auth/registration';
+};
+
+export type GetAuthRegistrationResponses = {
+    /**
+     * Registration status
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Registration status';
+        data: {
+            enabled: boolean;
+        };
+    };
+};
+
+export type GetAuthRegistrationResponse = GetAuthRegistrationResponses[keyof GetAuthRegistrationResponses];
+
+export type PostAuthSignupData = {
+    body: {
+        username: string;
+        display_name?: string;
+        email: string;
+        password: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/auth/signup';
+};
+
+export type PostAuthSignupErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Public registration is disabled
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Public registration is disabled';
+    };
+    /**
+     * Username or email address already in use
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'Username or email address already in use';
+    };
+    /**
+     * Too many sign-ups from this client
+     */
+    429: {
+        success: false;
+        code: 429;
+        message: 'Too many sign-ups from this client';
+    };
+};
+
+export type PostAuthSignupError = PostAuthSignupErrors[keyof PostAuthSignupErrors];
+
+export type PostAuthSignupResponses = {
+    /**
+     * Account created
+     */
+    201: {
+        success: true;
+        code: 201;
+        message: 'Account created';
+        data: {
+            user_id: number;
+            user_role: 'admin' | 'user';
+            created_at: number;
+            expires_at: number;
+            token: string;
+        };
+    };
+};
+
+export type PostAuthSignupResponse = PostAuthSignupResponses[keyof PostAuthSignupResponses];
+
+export type PostAuthResetPasswordData = {
+    body: {
+        reset_token: string;
+        /**
+         * New password for the account
+         */
+        new_password: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/auth/reset-password';
+};
+
+export type PostAuthResetPasswordErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * You are already authenticated
+     */
+    401: {
+        success: false;
+        code: 401;
+        message: 'You are already authenticated';
+    };
+};
+
+export type PostAuthResetPasswordError = PostAuthResetPasswordErrors[keyof PostAuthResetPasswordErrors];
+
+export type PostAuthResetPasswordResponses = {
+    /**
+     * Password has been reset successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Password has been reset successfully';
+        data: null;
+    };
+};
+
+export type PostAuthResetPasswordResponse = PostAuthResetPasswordResponses[keyof PostAuthResetPasswordResponses];
+
+export type PostAuthResetPasswordRequestData = {
+    body: {
+        email: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/auth/reset-password/request';
+};
+
+export type PostAuthResetPasswordRequestErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+};
+
+export type PostAuthResetPasswordRequestError = PostAuthResetPasswordRequestErrors[keyof PostAuthResetPasswordRequestErrors];
+
+export type PostAuthResetPasswordRequestResponses = {
+    /**
+     * If the username exists, a password reset has been requested
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'If the username exists, a password reset has been requested';
+        data: null;
+    };
+};
+
+export type PostAuthResetPasswordRequestResponse = PostAuthResetPasswordRequestResponses[keyof PostAuthResetPasswordRequestResponses];
+
+export type DeleteAccountData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/account';
+};
+
+export type DeleteAccountErrors = {
+    /**
+     * Your Auth Context is not a session
+     */
+    401: {
+        success: false;
+        code: 401;
+        message: 'Your Auth Context is not a session';
+    };
+};
+
+export type DeleteAccountError = DeleteAccountErrors[keyof DeleteAccountErrors];
+
+export type DeleteAccountResponses = {
+    /**
+     * Account deleted successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Account deleted successfully';
+        data: null;
+    };
+};
+
+export type DeleteAccountResponse = DeleteAccountResponses[keyof DeleteAccountResponses];
+
+export type GetAccountData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/account';
+};
+
+export type GetAccountErrors = {
+    /**
+     * Your Auth Context is not a session
+     */
+    401: {
+        success: false;
+        code: 401;
+        message: 'Your Auth Context is not a session';
+    };
+};
+
+export type GetAccountError = GetAccountErrors[keyof GetAccountErrors];
+
+export type GetAccountResponses = {
+    /**
+     * Account information retrieved successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Account information retrieved successfully';
+        data: {
+            id: number;
+            username: string;
+            display_name: string;
+            email: string;
+            role: 'admin' | 'user';
+            created_at: number;
+        };
+    };
+};
+
+export type GetAccountResponse = GetAccountResponses[keyof GetAccountResponses];
+
+export type PutAccountData = {
+    body: {
+        username?: string;
+        display_name?: string;
+        email?: string;
+        /**
+         * Current password — required to confirm account changes
+         */
+        current_password: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/account';
+};
+
+export type PutAccountErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Your Auth Context is not a session
+     */
+    401: {
+        success: false;
+        code: 401;
+        message: 'Your Auth Context is not a session';
+    };
+    /**
+     * Username or email already in use
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'Username or email already in use';
+    };
+};
+
+export type PutAccountError = PutAccountErrors[keyof PutAccountErrors];
+
+export type PutAccountResponses = {
+    /**
+     * Account information updated successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Account information updated successfully';
+        data: null;
+    };
+};
+
+export type PutAccountResponse = PutAccountResponses[keyof PutAccountResponses];
+
+export type PutAccountPasswordData = {
+    body: {
+        /**
+         * Current password of the account
+         */
+        current_password: string;
+        /**
+         * New password for the account
+         */
+        new_password: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/account/password';
+};
+
+export type PutAccountPasswordErrors = {
+    /**
+     * Current password is incorrect / Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Current password is incorrect / Syntax or validation error in request';
+    };
+    /**
+     * Your Auth Context is not a session
+     */
+    401: {
+        success: false;
+        code: 401;
+        message: 'Your Auth Context is not a session';
+    };
+};
+
+export type PutAccountPasswordError = PutAccountPasswordErrors[keyof PutAccountPasswordErrors];
+
+export type PutAccountPasswordResponses = {
+    /**
+     * Password changed successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Password changed successfully';
+        data: null;
+    };
+};
+
+export type PutAccountPasswordResponse = PutAccountPasswordResponses[keyof PutAccountPasswordResponses];
+
+export type GetAccountApikeysData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/account/apikeys';
+};
+
+export type GetAccountApikeysResponses = {
+    /**
+     * API keys retrieved successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'API keys retrieved successfully';
+        data: Array<{
+            id: string;
+            description: string;
+            created_at: number;
+            expires_at: number | null;
+        }>;
+    };
+};
+
+export type GetAccountApikeysResponse = GetAccountApikeysResponses[keyof GetAccountApikeysResponses];
+
+export type PostAccountApikeysData = {
+    body: {
+        description: string;
+        expires_at: '7d' | '30d' | '90d' | '180d' | '365d' | null;
+    };
+    path?: never;
+    query?: never;
+    url: '/account/apikeys';
+};
+
+export type PostAccountApikeysErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+};
+
+export type PostAccountApikeysError = PostAccountApikeysErrors[keyof PostAccountApikeysErrors];
+
+export type PostAccountApikeysResponses = {
+    /**
+     * API key created successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'API key created successfully';
+        data: {
+            id: string;
+            token: string;
+        };
+    };
+};
+
+export type PostAccountApikeysResponse = PostAccountApikeysResponses[keyof PostAccountApikeysResponses];
+
+export type DeleteAccountApikeysByApiKeyIdData = {
+    body?: never;
+    path: {
+        apiKeyID: string;
+    };
+    query?: never;
+    url: '/account/apikeys/{apiKeyID}';
+};
+
+export type DeleteAccountApikeysByApiKeyIdErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * API key not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'API key not found';
+    };
+};
+
+export type DeleteAccountApikeysByApiKeyIdError = DeleteAccountApikeysByApiKeyIdErrors[keyof DeleteAccountApikeysByApiKeyIdErrors];
+
+export type DeleteAccountApikeysByApiKeyIdResponses = {
+    /**
+     * API key deleted successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'API key deleted successfully';
+        data: null;
+    };
+};
+
+export type DeleteAccountApikeysByApiKeyIdResponse = DeleteAccountApikeysByApiKeyIdResponses[keyof DeleteAccountApikeysByApiKeyIdResponses];
+
+export type GetAccountApikeysByApiKeyIdData = {
+    body?: never;
+    path: {
+        apiKeyID: string;
+    };
+    query?: never;
+    url: '/account/apikeys/{apiKeyID}';
+};
+
+export type GetAccountApikeysByApiKeyIdErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * API key not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'API key not found';
+    };
+};
+
+export type GetAccountApikeysByApiKeyIdError = GetAccountApikeysByApiKeyIdErrors[keyof GetAccountApikeysByApiKeyIdErrors];
+
+export type GetAccountApikeysByApiKeyIdResponses = {
+    /**
+     * API key retrieved successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'API key retrieved successfully';
+        data: {
+            id: string;
+            description: string;
+            created_at: number;
+            expires_at: number | null;
+        };
+    };
+};
+
+export type GetAccountApikeysByApiKeyIdResponse = GetAccountApikeysByApiKeyIdResponses[keyof GetAccountApikeysByApiKeyIdResponses];
+
+export type GetAccountPreferencesData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/account/preferences';
+};
+
+export type GetAccountPreferencesResponses = {
+    /**
+     * Preferences retrieved successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Preferences retrieved successfully';
+        data: {
+            onboarding: {
+                completed: boolean;
+            };
+        };
+    };
+};
+
+export type GetAccountPreferencesResponse = GetAccountPreferencesResponses[keyof GetAccountPreferencesResponses];
+
+export type GetAccountPreferencesOnboardingData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/account/preferences/onboarding';
+};
+
+export type GetAccountPreferencesOnboardingResponses = {
+    /**
+     * Onboarding state retrieved successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Onboarding state retrieved successfully';
+        data: {
+            completed: boolean;
+        };
+    };
+};
+
+export type GetAccountPreferencesOnboardingResponse = GetAccountPreferencesOnboardingResponses[keyof GetAccountPreferencesOnboardingResponses];
+
+export type PutAccountPreferencesOnboardingData = {
+    body?: {
+        completed?: boolean;
+    };
+    path?: never;
+    query?: never;
+    url: '/account/preferences/onboarding';
+};
+
+export type PutAccountPreferencesOnboardingErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+};
+
+export type PutAccountPreferencesOnboardingError = PutAccountPreferencesOnboardingErrors[keyof PutAccountPreferencesOnboardingErrors];
+
+export type PutAccountPreferencesOnboardingResponses = {
+    /**
+     * Onboarding state updated successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Onboarding state updated successfully';
+        data: null;
+    };
+};
+
+export type PutAccountPreferencesOnboardingResponse = PutAccountPreferencesOnboardingResponses[keyof PutAccountPreferencesOnboardingResponses];
+
+export type GetAdminUsersData = {
+    body?: never;
+    path?: never;
+    query?: {
+        role?: 'admin' | 'user';
+        search?: string;
+        limit?: number;
+        offset?: number;
+    };
+    url: '/admin/users';
+};
+
+export type GetAdminUsersErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+};
+
+export type GetAdminUsersError = GetAdminUsersErrors[keyof GetAdminUsersErrors];
+
+export type GetAdminUsersResponses = {
+    /**
+     * Users retrieved successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Users retrieved successfully';
+        data: Array<{
+            id: number;
+            username: string;
+            display_name: string;
+            email: string;
+            role: 'admin' | 'user';
+            created_at: number;
+        }>;
+    };
+};
+
+export type GetAdminUsersResponse = GetAdminUsersResponses[keyof GetAdminUsersResponses];
+
+export type PostAdminUsersData = {
+    body: {
+        username: string;
+        display_name: string;
+        email: string;
+        role?: 'admin' | 'user';
+        password: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/admin/users';
+};
+
+export type PostAdminUsersErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Conflict: Username or email already exists
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'Conflict: Username or email already exists';
+    };
+};
+
+export type PostAdminUsersError = PostAdminUsersErrors[keyof PostAdminUsersErrors];
+
+export type PostAdminUsersResponses = {
+    /**
+     * User created successfully
+     */
+    201: {
+        success: true;
+        code: 201;
+        message: 'User created successfully';
+        data: {
+            id: number;
+            username: string;
+            display_name: string;
+            email: string;
+            role: 'admin' | 'user';
+            created_at: number;
+        };
+    };
+};
+
+export type PostAdminUsersResponse = PostAdminUsersResponses[keyof PostAdminUsersResponses];
+
+export type DeleteAdminUsersByUserIdData = {
+    body?: never;
+    path: {
+        userId: number;
+    };
+    query?: never;
+    url: '/admin/users/{userId}';
+};
+
+export type DeleteAdminUsersByUserIdErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * User not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'User not found';
+    };
+};
+
+export type DeleteAdminUsersByUserIdError = DeleteAdminUsersByUserIdErrors[keyof DeleteAdminUsersByUserIdErrors];
+
+export type DeleteAdminUsersByUserIdResponses = {
+    /**
+     * User deleted successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'User deleted successfully';
+        data: null;
+    };
+};
+
+export type DeleteAdminUsersByUserIdResponse = DeleteAdminUsersByUserIdResponses[keyof DeleteAdminUsersByUserIdResponses];
+
+export type GetAdminUsersByUserIdData = {
+    body?: never;
+    path: {
+        userId: number;
+    };
+    query?: never;
+    url: '/admin/users/{userId}';
+};
+
+export type GetAdminUsersByUserIdErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * User not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'User not found';
+    };
+};
+
+export type GetAdminUsersByUserIdError = GetAdminUsersByUserIdErrors[keyof GetAdminUsersByUserIdErrors];
+
+export type GetAdminUsersByUserIdResponses = {
+    /**
+     * User retrieved successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'User retrieved successfully';
+        data: {
+            id: number;
+            username: string;
+            display_name: string;
+            email: string;
+            role: 'admin' | 'user';
+            created_at: number;
+        };
+    };
+};
+
+export type GetAdminUsersByUserIdResponse = GetAdminUsersByUserIdResponses[keyof GetAdminUsersByUserIdResponses];
+
+export type PutAdminUsersByUserIdData = {
+    body?: {
+        username?: string;
+        display_name?: string;
+        email?: string;
+        role?: 'admin' | 'user';
+    };
+    path: {
+        userId: number;
+    };
+    query?: never;
+    url: '/admin/users/{userId}';
+};
+
+export type PutAdminUsersByUserIdErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * User not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'User not found';
+    };
+    /**
+     * Conflict: Username or email already exists
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'Conflict: Username or email already exists';
+    };
+};
+
+export type PutAdminUsersByUserIdError = PutAdminUsersByUserIdErrors[keyof PutAdminUsersByUserIdErrors];
+
+export type PutAdminUsersByUserIdResponses = {
+    /**
+     * User updated successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'User updated successfully';
+        data: {
+            id: number;
+            username: string;
+            display_name: string;
+            email: string;
+            role: 'admin' | 'user';
+            created_at: number;
+        };
+    };
+};
+
+export type PutAdminUsersByUserIdResponse = PutAdminUsersByUserIdResponses[keyof PutAdminUsersByUserIdResponses];
+
+export type PutAdminUsersByUserIdPasswordData = {
+    body: {
+        /**
+         * New password for the account
+         */
+        password: string;
+    };
+    path: {
+        userId: number;
+    };
+    query?: never;
+    url: '/admin/users/{userId}/password';
+};
+
+export type PutAdminUsersByUserIdPasswordErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * User not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'User not found';
+    };
+};
+
+export type PutAdminUsersByUserIdPasswordError = PutAdminUsersByUserIdPasswordErrors[keyof PutAdminUsersByUserIdPasswordErrors];
+
+export type PutAdminUsersByUserIdPasswordResponses = {
+    /**
+     * Password reset successfully
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Password reset successfully';
+        data: null;
+    };
+};
+
+export type PutAdminUsersByUserIdPasswordResponse = PutAdminUsersByUserIdPasswordResponses[keyof PutAdminUsersByUserIdPasswordResponses];
+
+export type GetAdminSettingsData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/admin/settings';
+};
+
+export type GetAdminSettingsResponses = {
+    /**
+     * Settings retrieved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Settings retrieved';
+        data: {
+            registration_enabled: boolean;
+        };
+    };
+};
+
+export type GetAdminSettingsResponse = GetAdminSettingsResponses[keyof GetAdminSettingsResponses];
+
+export type PutAdminSettingsData = {
+    body?: {
+        registration_enabled?: boolean;
+    };
+    path?: never;
+    query?: never;
+    url: '/admin/settings';
+};
+
+export type PutAdminSettingsErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+};
+
+export type PutAdminSettingsError = PutAdminSettingsErrors[keyof PutAdminSettingsErrors];
+
+export type PutAdminSettingsResponses = {
+    /**
+     * Settings updated
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Settings updated';
+        data: {
+            registration_enabled: boolean;
+        };
+    };
+};
+
+export type PutAdminSettingsResponse = PutAdminSettingsResponses[keyof PutAdminSettingsResponses];
+
+export type PostAgentsEnrollData = {
+    body: {
+        enrollment_token: string;
+        secret: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/agents/enroll';
+};
+
+export type PostAgentsEnrollErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Unauthorized: Unknown, used or expired enrollment token
+     */
+    401: {
+        success: false;
+        code: 401;
+        message: 'Unauthorized: Unknown, used or expired enrollment token';
+    };
+    /**
+     * Too many enrollment attempts
+     */
+    429: {
+        success: false;
+        code: 429;
+        message: 'Too many enrollment attempts';
+    };
+};
+
+export type PostAgentsEnrollError = PostAgentsEnrollErrors[keyof PostAgentsEnrollErrors];
+
+export type PostAgentsEnrollResponses = {
+    /**
+     * Agent enrolled
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Agent enrolled';
+        data: {
+            agent_id: number;
+            kind: 'esp32' | 'linux';
+            token_id: string;
+        };
+    };
+};
+
+export type PostAgentsEnrollResponse = PostAgentsEnrollResponses[keyof PostAgentsEnrollResponses];
+
+export type GetAgentsData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/agents';
+};
+
+export type GetAgentsResponses = {
+    /**
+     * Agents retrieved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Agents retrieved';
+        data: Array<{
+            id: number;
+            name: string;
+            description: string;
+            kind: 'esp32' | 'linux';
+            state: 'online' | 'offline' | 'unenrolled';
+            version: string | null;
+            capabilities: Array<string>;
+            info: {
+                [key: string]: unknown;
+            } | null;
+            last_seen_at: number | null;
+            enrolled_at: number | null;
+            created_at: number;
+        }>;
+    };
+};
+
+export type GetAgentsResponse = GetAgentsResponses[keyof GetAgentsResponses];
+
+export type PostAgentsData = {
+    body: {
+        name: string;
+        description?: string;
+        kind: 'esp32' | 'linux';
+    };
+    path?: never;
+    query?: never;
+    url: '/agents';
+};
+
+export type PostAgentsErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+};
+
+export type PostAgentsError = PostAgentsErrors[keyof PostAgentsErrors];
+
+export type PostAgentsResponses = {
+    /**
+     * Agent created
+     */
+    201: {
+        success: true;
+        code: 201;
+        message: 'Agent created';
+        data: {
+            id: number;
+            name: string;
+            description: string;
+            kind: 'esp32' | 'linux';
+            state: 'online' | 'offline' | 'unenrolled';
+            version: string | null;
+            capabilities: Array<string>;
+            info: {
+                [key: string]: unknown;
+            } | null;
+            last_seen_at: number | null;
+            enrolled_at: number | null;
+            created_at: number;
+        };
+    };
+};
+
+export type PostAgentsResponse = PostAgentsResponses[keyof PostAgentsResponses];
+
+export type DeleteAgentsByAgentIdData = {
+    body?: never;
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}';
+};
+
+export type DeleteAgentsByAgentIdErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Agent not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent not found';
+    };
+};
+
+export type DeleteAgentsByAgentIdError = DeleteAgentsByAgentIdErrors[keyof DeleteAgentsByAgentIdErrors];
+
+export type DeleteAgentsByAgentIdResponses = {
+    /**
+     * Agent deleted
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Agent deleted';
+        data: null;
+    };
+};
+
+export type DeleteAgentsByAgentIdResponse = DeleteAgentsByAgentIdResponses[keyof DeleteAgentsByAgentIdResponses];
+
+export type GetAgentsByAgentIdData = {
+    body?: never;
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}';
+};
+
+export type GetAgentsByAgentIdErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Agent not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent not found';
+    };
+};
+
+export type GetAgentsByAgentIdError = GetAgentsByAgentIdErrors[keyof GetAgentsByAgentIdErrors];
+
+export type GetAgentsByAgentIdResponses = {
+    /**
+     * Agent retrieved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Agent retrieved';
+        data: {
+            id: number;
+            name: string;
+            description: string;
+            kind: 'esp32' | 'linux';
+            state: 'online' | 'offline' | 'unenrolled';
+            version: string | null;
+            capabilities: Array<string>;
+            info: {
+                [key: string]: unknown;
+            } | null;
+            last_seen_at: number | null;
+            enrolled_at: number | null;
+            created_at: number;
+        };
+    };
+};
+
+export type GetAgentsByAgentIdResponse = GetAgentsByAgentIdResponses[keyof GetAgentsByAgentIdResponses];
+
+export type PutAgentsByAgentIdData = {
+    body?: {
+        name?: string;
+        description?: string;
+    };
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}';
+};
+
+export type PutAgentsByAgentIdErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Agent not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent not found';
+    };
+};
+
+export type PutAgentsByAgentIdError = PutAgentsByAgentIdErrors[keyof PutAgentsByAgentIdErrors];
+
+export type PutAgentsByAgentIdResponses = {
+    /**
+     * Agent updated
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Agent updated';
+        data: {
+            id: number;
+            name: string;
+            description: string;
+            kind: 'esp32' | 'linux';
+            state: 'online' | 'offline' | 'unenrolled';
+            version: string | null;
+            capabilities: Array<string>;
+            info: {
+                [key: string]: unknown;
+            } | null;
+            last_seen_at: number | null;
+            enrolled_at: number | null;
+            created_at: number;
+        };
+    };
+};
+
+export type PutAgentsByAgentIdResponse = PutAgentsByAgentIdResponses[keyof PutAgentsByAgentIdResponses];
+
+export type PostAgentsByAgentIdEnrollmentsData = {
+    body?: never;
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}/enrollments';
+};
+
+export type PostAgentsByAgentIdEnrollmentsErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Agent not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent not found';
+    };
+};
+
+export type PostAgentsByAgentIdEnrollmentsError = PostAgentsByAgentIdEnrollmentsErrors[keyof PostAgentsByAgentIdEnrollmentsErrors];
+
+export type PostAgentsByAgentIdEnrollmentsResponses = {
+    /**
+     * Enrollment token created
+     */
+    201: {
+        success: true;
+        code: 201;
+        message: 'Enrollment token created';
+        data: {
+            token: string;
+            expires_at: number;
+        };
+    };
+};
+
+export type PostAgentsByAgentIdEnrollmentsResponse = PostAgentsByAgentIdEnrollmentsResponses[keyof PostAgentsByAgentIdEnrollmentsResponses];
+
+export type PostAgentsByAgentIdRevokeData = {
+    body?: never;
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}/revoke';
+};
+
+export type PostAgentsByAgentIdRevokeErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Agent not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent not found';
+    };
+};
+
+export type PostAgentsByAgentIdRevokeError = PostAgentsByAgentIdRevokeErrors[keyof PostAgentsByAgentIdRevokeErrors];
+
+export type PostAgentsByAgentIdRevokeResponses = {
+    /**
+     * Credential revoked
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Credential revoked';
+        data: {
+            id: number;
+            name: string;
+            description: string;
+            kind: 'esp32' | 'linux';
+            state: 'online' | 'offline' | 'unenrolled';
+            version: string | null;
+            capabilities: Array<string>;
+            info: {
+                [key: string]: unknown;
+            } | null;
+            last_seen_at: number | null;
+            enrolled_at: number | null;
+            created_at: number;
+        };
+    };
+};
+
+export type PostAgentsByAgentIdRevokeResponse = PostAgentsByAgentIdRevokeResponses[keyof PostAgentsByAgentIdRevokeResponses];
+
+export type GetDevicesData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/devices';
+};
+
+export type GetDevicesResponses = {
+    /**
+     * Devices retrieved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Devices retrieved';
+        data: Array<{
+            id: number;
+            name: string;
+            type: 'server' | 'desktop' | 'laptop' | 'printer' | 'nas' | 'other';
+            description: string;
+            mac_address: string;
+            wol_port: number;
+            agent_id: number | null;
+            status_method: 'none' | 'link_local' | 'ipv4' | 'ipv6' | 'ssh' | 'host_agent';
+            status_address: string | null;
+            status_tcp_port: number | null;
+            host_agent_id: number | null;
+            created_at: number;
+            access_role: 'owner' | 'viewer' | 'operator' | 'manager';
+            owner: {
+                id: number;
+                username: string;
+                display_name: string;
+            };
+            agent: {
+                id: number;
+                name: string;
+                kind: 'esp32' | 'linux';
+                state: 'online' | 'offline' | 'unenrolled';
+            } | null;
+            host_agent: {
+                id: number;
+                name: string;
+                kind: 'esp32' | 'linux';
+                state: 'online' | 'offline' | 'unenrolled';
+            } | null;
+            favorite: boolean;
+            status: {
+                state: 'online' | 'offline' | 'unknown';
+                checked_at: number | null;
+                reason?: string;
+            };
+            actions: {
+                power_on: boolean;
+                shutdown: boolean;
+                reboot: boolean;
+            };
+        }>;
+    };
+};
+
+export type GetDevicesResponse = GetDevicesResponses[keyof GetDevicesResponses];
+
+export type PostDevicesData = {
+    body: {
+        name: string;
+        type: 'server' | 'desktop' | 'laptop' | 'printer' | 'nas' | 'other';
+        description?: string;
+        mac_address: string;
+        wol_port?: number;
+        agent_id?: number | null;
+        status_method?: 'none' | 'link_local' | 'ipv4' | 'ipv6' | 'ssh' | 'host_agent';
+        status_address?: string | null;
+        status_tcp_port?: number | null;
+        host_agent_id?: number | null;
+    };
+    path?: never;
+    query?: never;
+    url: '/devices';
+};
+
+export type PostDevicesErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+};
+
+export type PostDevicesError = PostDevicesErrors[keyof PostDevicesErrors];
+
+export type PostDevicesResponses = {
+    /**
+     * Device created
+     */
+    201: {
+        success: true;
+        code: 201;
+        message: 'Device created';
+        data: {
+            id: number;
+            name: string;
+            type: 'server' | 'desktop' | 'laptop' | 'printer' | 'nas' | 'other';
+            description: string;
+            mac_address: string;
+            wol_port: number;
+            agent_id: number | null;
+            status_method: 'none' | 'link_local' | 'ipv4' | 'ipv6' | 'ssh' | 'host_agent';
+            status_address: string | null;
+            status_tcp_port: number | null;
+            host_agent_id: number | null;
+            created_at: number;
+            access_role: 'owner' | 'viewer' | 'operator' | 'manager';
+            owner: {
+                id: number;
+                username: string;
+                display_name: string;
+            };
+            agent: {
+                id: number;
+                name: string;
+                kind: 'esp32' | 'linux';
+                state: 'online' | 'offline' | 'unenrolled';
+            } | null;
+            host_agent: {
+                id: number;
+                name: string;
+                kind: 'esp32' | 'linux';
+                state: 'online' | 'offline' | 'unenrolled';
+            } | null;
+            favorite: boolean;
+            status: {
+                state: 'online' | 'offline' | 'unknown';
+                checked_at: number | null;
+                reason?: string;
+            };
+            actions: {
+                power_on: boolean;
+                shutdown: boolean;
+                reboot: boolean;
+            };
+        };
+    };
+};
+
+export type PostDevicesResponse = PostDevicesResponses[keyof PostDevicesResponses];
+
+export type DeleteDevicesByDeviceIdData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}';
+};
+
+export type DeleteDevicesByDeviceIdErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Only the device's owner can do this
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Only the device\'s owner can do this';
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+};
+
+export type DeleteDevicesByDeviceIdError = DeleteDevicesByDeviceIdErrors[keyof DeleteDevicesByDeviceIdErrors];
+
+export type DeleteDevicesByDeviceIdResponses = {
+    /**
+     * Device deleted
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Device deleted';
+        data: null;
+    };
+};
+
+export type DeleteDevicesByDeviceIdResponse = DeleteDevicesByDeviceIdResponses[keyof DeleteDevicesByDeviceIdResponses];
+
+export type GetDevicesByDeviceIdData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}';
+};
+
+export type GetDevicesByDeviceIdErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+};
+
+export type GetDevicesByDeviceIdError = GetDevicesByDeviceIdErrors[keyof GetDevicesByDeviceIdErrors];
+
+export type GetDevicesByDeviceIdResponses = {
+    /**
+     * Device retrieved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Device retrieved';
+        data: {
+            id: number;
+            name: string;
+            type: 'server' | 'desktop' | 'laptop' | 'printer' | 'nas' | 'other';
+            description: string;
+            mac_address: string;
+            wol_port: number;
+            agent_id: number | null;
+            status_method: 'none' | 'link_local' | 'ipv4' | 'ipv6' | 'ssh' | 'host_agent';
+            status_address: string | null;
+            status_tcp_port: number | null;
+            host_agent_id: number | null;
+            created_at: number;
+            access_role: 'owner' | 'viewer' | 'operator' | 'manager';
+            owner: {
+                id: number;
+                username: string;
+                display_name: string;
+            };
+            agent: {
+                id: number;
+                name: string;
+                kind: 'esp32' | 'linux';
+                state: 'online' | 'offline' | 'unenrolled';
+            } | null;
+            host_agent: {
+                id: number;
+                name: string;
+                kind: 'esp32' | 'linux';
+                state: 'online' | 'offline' | 'unenrolled';
+            } | null;
+            favorite: boolean;
+            status: {
+                state: 'online' | 'offline' | 'unknown';
+                checked_at: number | null;
+                reason?: string;
+            };
+            actions: {
+                power_on: boolean;
+                shutdown: boolean;
+                reboot: boolean;
+            };
+        };
+    };
+};
+
+export type GetDevicesByDeviceIdResponse = GetDevicesByDeviceIdResponses[keyof GetDevicesByDeviceIdResponses];
+
+export type PutDevicesByDeviceIdData = {
+    body?: {
+        name?: string;
+        type?: 'server' | 'desktop' | 'laptop' | 'printer' | 'nas' | 'other';
+        description?: string;
+        mac_address?: string;
+        wol_port?: number;
+        agent_id?: number | null;
+        status_method?: 'none' | 'link_local' | 'ipv4' | 'ipv6' | 'ssh' | 'host_agent';
+        status_address?: string | null;
+        status_tcp_port?: number | null;
+        host_agent_id?: number | null;
+    };
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}';
+};
+
+export type PutDevicesByDeviceIdErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Your role doesn't allow this change
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Your role doesn\'t allow this change';
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+};
+
+export type PutDevicesByDeviceIdError = PutDevicesByDeviceIdErrors[keyof PutDevicesByDeviceIdErrors];
+
+export type PutDevicesByDeviceIdResponses = {
+    /**
+     * Device updated
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Device updated';
+        data: {
+            id: number;
+            name: string;
+            type: 'server' | 'desktop' | 'laptop' | 'printer' | 'nas' | 'other';
+            description: string;
+            mac_address: string;
+            wol_port: number;
+            agent_id: number | null;
+            status_method: 'none' | 'link_local' | 'ipv4' | 'ipv6' | 'ssh' | 'host_agent';
+            status_address: string | null;
+            status_tcp_port: number | null;
+            host_agent_id: number | null;
+            created_at: number;
+            access_role: 'owner' | 'viewer' | 'operator' | 'manager';
+            owner: {
+                id: number;
+                username: string;
+                display_name: string;
+            };
+            agent: {
+                id: number;
+                name: string;
+                kind: 'esp32' | 'linux';
+                state: 'online' | 'offline' | 'unenrolled';
+            } | null;
+            host_agent: {
+                id: number;
+                name: string;
+                kind: 'esp32' | 'linux';
+                state: 'online' | 'offline' | 'unenrolled';
+            } | null;
+            favorite: boolean;
+            status: {
+                state: 'online' | 'offline' | 'unknown';
+                checked_at: number | null;
+                reason?: string;
+            };
+            actions: {
+                power_on: boolean;
+                shutdown: boolean;
+                reboot: boolean;
+            };
+        };
+    };
+};
+
+export type PutDevicesByDeviceIdResponse = PutDevicesByDeviceIdResponses[keyof PutDevicesByDeviceIdResponses];
+
+export type PostDevicesByDeviceIdPowerOnData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/power-on';
+};
+
+export type PostDevicesByDeviceIdPowerOnErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Your role on this device doesn't allow power actions
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Your role on this device doesn\'t allow power actions';
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+    /**
+     * The device has no method for this action
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The device has no method for this action';
+    };
+    /**
+     * The agent reported an error
+     */
+    502: {
+        success: false;
+        code: 502;
+        message: 'The agent reported an error';
+    };
+    /**
+     * The agent is offline
+     */
+    503: {
+        success: false;
+        code: 503;
+        message: 'The agent is offline';
+    };
+    /**
+     * The agent didn't answer in time
+     */
+    504: {
+        success: false;
+        code: 504;
+        message: 'The agent didn\'t answer in time';
+    };
+};
+
+export type PostDevicesByDeviceIdPowerOnError = PostDevicesByDeviceIdPowerOnErrors[keyof PostDevicesByDeviceIdPowerOnErrors];
+
+export type PostDevicesByDeviceIdPowerOnResponses = {
+    /**
+     * Wake-on-LAN packet sent
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Wake-on-LAN packet sent';
+        data: null;
+    };
+};
+
+export type PostDevicesByDeviceIdPowerOnResponse = PostDevicesByDeviceIdPowerOnResponses[keyof PostDevicesByDeviceIdPowerOnResponses];
+
+export type PostDevicesByDeviceIdShutdownData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/shutdown';
+};
+
+export type PostDevicesByDeviceIdShutdownErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Your role on this device doesn't allow power actions
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Your role on this device doesn\'t allow power actions';
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+    /**
+     * The device has no method for this action
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The device has no method for this action';
+    };
+    /**
+     * The agent reported an error
+     */
+    502: {
+        success: false;
+        code: 502;
+        message: 'The agent reported an error';
+    };
+    /**
+     * The agent is offline
+     */
+    503: {
+        success: false;
+        code: 503;
+        message: 'The agent is offline';
+    };
+    /**
+     * The agent didn't answer in time
+     */
+    504: {
+        success: false;
+        code: 504;
+        message: 'The agent didn\'t answer in time';
+    };
+};
+
+export type PostDevicesByDeviceIdShutdownError = PostDevicesByDeviceIdShutdownErrors[keyof PostDevicesByDeviceIdShutdownErrors];
+
+export type PostDevicesByDeviceIdShutdownResponses = {
+    /**
+     * Shutdown requested
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Shutdown requested';
+        data: null;
+    };
+};
+
+export type PostDevicesByDeviceIdShutdownResponse = PostDevicesByDeviceIdShutdownResponses[keyof PostDevicesByDeviceIdShutdownResponses];
+
+export type PostDevicesByDeviceIdRebootData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/reboot';
+};
+
+export type PostDevicesByDeviceIdRebootErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Your role on this device doesn't allow power actions
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Your role on this device doesn\'t allow power actions';
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+    /**
+     * The device has no method for this action
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The device has no method for this action';
+    };
+    /**
+     * The agent reported an error
+     */
+    502: {
+        success: false;
+        code: 502;
+        message: 'The agent reported an error';
+    };
+    /**
+     * The agent is offline
+     */
+    503: {
+        success: false;
+        code: 503;
+        message: 'The agent is offline';
+    };
+    /**
+     * The agent didn't answer in time
+     */
+    504: {
+        success: false;
+        code: 504;
+        message: 'The agent didn\'t answer in time';
+    };
+};
+
+export type PostDevicesByDeviceIdRebootError = PostDevicesByDeviceIdRebootErrors[keyof PostDevicesByDeviceIdRebootErrors];
+
+export type PostDevicesByDeviceIdRebootResponses = {
+    /**
+     * Reboot requested
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Reboot requested';
+        data: null;
+    };
+};
+
+export type PostDevicesByDeviceIdRebootResponse = PostDevicesByDeviceIdRebootResponses[keyof PostDevicesByDeviceIdRebootResponses];
+
+export type PostDevicesByDeviceIdStatusData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/status';
+};
+
+export type PostDevicesByDeviceIdStatusErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+};
+
+export type PostDevicesByDeviceIdStatusError = PostDevicesByDeviceIdStatusErrors[keyof PostDevicesByDeviceIdStatusErrors];
+
+export type PostDevicesByDeviceIdStatusResponses = {
+    /**
+     * Status checked
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Status checked';
+        data: {
+            state: 'online' | 'offline' | 'unknown';
+            checked_at: number | null;
+            reason?: string;
+        };
+    };
+};
+
+export type PostDevicesByDeviceIdStatusResponse = PostDevicesByDeviceIdStatusResponses[keyof PostDevicesByDeviceIdStatusResponses];
+
+export type DeleteDevicesByDeviceIdFavoriteData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/favorite';
+};
+
+export type DeleteDevicesByDeviceIdFavoriteErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+};
+
+export type DeleteDevicesByDeviceIdFavoriteError = DeleteDevicesByDeviceIdFavoriteErrors[keyof DeleteDevicesByDeviceIdFavoriteErrors];
+
+export type DeleteDevicesByDeviceIdFavoriteResponses = {
+    /**
+     * Removed from favorites
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Removed from favorites';
+        data: null;
+    };
+};
+
+export type DeleteDevicesByDeviceIdFavoriteResponse = DeleteDevicesByDeviceIdFavoriteResponses[keyof DeleteDevicesByDeviceIdFavoriteResponses];
+
+export type PutDevicesByDeviceIdFavoriteData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/favorite';
+};
+
+export type PutDevicesByDeviceIdFavoriteErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+};
+
+export type PutDevicesByDeviceIdFavoriteError = PutDevicesByDeviceIdFavoriteErrors[keyof PutDevicesByDeviceIdFavoriteErrors];
+
+export type PutDevicesByDeviceIdFavoriteResponses = {
+    /**
+     * Added to favorites
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Added to favorites';
+        data: null;
+    };
+};
+
+export type PutDevicesByDeviceIdFavoriteResponse = PutDevicesByDeviceIdFavoriteResponses[keyof PutDevicesByDeviceIdFavoriteResponses];
+
+export type GetDevicesByDeviceIdSharesData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/shares';
+};
+
+export type GetDevicesByDeviceIdSharesErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Only the device's owner can do this
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Only the device\'s owner can do this';
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+};
+
+export type GetDevicesByDeviceIdSharesError = GetDevicesByDeviceIdSharesErrors[keyof GetDevicesByDeviceIdSharesErrors];
+
+export type GetDevicesByDeviceIdSharesResponses = {
+    /**
+     * Shares retrieved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Shares retrieved';
+        data: Array<{
+            user: {
+                id: number;
+                username: string;
+                display_name: string;
+            };
+            role: 'viewer' | 'operator' | 'manager';
+            created_at: number;
+        }>;
+    };
+};
+
+export type GetDevicesByDeviceIdSharesResponse = GetDevicesByDeviceIdSharesResponses[keyof GetDevicesByDeviceIdSharesResponses];
+
+export type PostDevicesByDeviceIdSharesData = {
+    body: {
+        user: string;
+        role: 'viewer' | 'operator' | 'manager';
+    };
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/shares';
+};
+
+export type PostDevicesByDeviceIdSharesErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Only the device's owner can do this
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Only the device\'s owner can do this';
+    };
+    /**
+     * Device or user not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device or user not found';
+    };
+    /**
+     * The device is already shared with this user
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The device is already shared with this user';
+    };
+};
+
+export type PostDevicesByDeviceIdSharesError = PostDevicesByDeviceIdSharesErrors[keyof PostDevicesByDeviceIdSharesErrors];
+
+export type PostDevicesByDeviceIdSharesResponses = {
+    /**
+     * Device shared
+     */
+    201: {
+        success: true;
+        code: 201;
+        message: 'Device shared';
+        data: {
+            user: {
+                id: number;
+                username: string;
+                display_name: string;
+            };
+            role: 'viewer' | 'operator' | 'manager';
+            created_at: number;
+        };
+    };
+};
+
+export type PostDevicesByDeviceIdSharesResponse = PostDevicesByDeviceIdSharesResponses[keyof PostDevicesByDeviceIdSharesResponses];
+
+export type DeleteDevicesByDeviceIdSharesByUserIdData = {
+    body?: never;
+    path: {
+        deviceID: number;
+        userID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/shares/{userID}';
+};
+
+export type DeleteDevicesByDeviceIdSharesByUserIdErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Only the device's owner can do this
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Only the device\'s owner can do this';
+    };
+    /**
+     * Device or share not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device or share not found';
+    };
+};
+
+export type DeleteDevicesByDeviceIdSharesByUserIdError = DeleteDevicesByDeviceIdSharesByUserIdErrors[keyof DeleteDevicesByDeviceIdSharesByUserIdErrors];
+
+export type DeleteDevicesByDeviceIdSharesByUserIdResponses = {
+    /**
+     * Share removed
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Share removed';
+        data: null;
+    };
+};
+
+export type DeleteDevicesByDeviceIdSharesByUserIdResponse = DeleteDevicesByDeviceIdSharesByUserIdResponses[keyof DeleteDevicesByDeviceIdSharesByUserIdResponses];
+
+export type PutDevicesByDeviceIdSharesByUserIdData = {
+    body: {
+        role: 'viewer' | 'operator' | 'manager';
+    };
+    path: {
+        deviceID: number;
+        userID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/shares/{userID}';
+};
+
+export type PutDevicesByDeviceIdSharesByUserIdErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Only the device's owner can do this
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Only the device\'s owner can do this';
+    };
+    /**
+     * Device or share not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device or share not found';
+    };
+};
+
+export type PutDevicesByDeviceIdSharesByUserIdError = PutDevicesByDeviceIdSharesByUserIdErrors[keyof PutDevicesByDeviceIdSharesByUserIdErrors];
+
+export type PutDevicesByDeviceIdSharesByUserIdResponses = {
+    /**
+     * Share updated
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Share updated';
+        data: null;
+    };
+};
+
+export type PutDevicesByDeviceIdSharesByUserIdResponse = PutDevicesByDeviceIdSharesByUserIdResponses[keyof PutDevicesByDeviceIdSharesByUserIdResponses];
diff --git a/app/api-client/zod.gen.ts b/app/api-client/zod.gen.ts
new file mode 100644
index 0000000..d980f28
--- /dev/null
+++ b/app/api-client/zod.gen.ts
@@ -0,0 +1,1244 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+import * as z from 'zod';
+
+export const zPostAuthLoginBody = z.object({
+    username: z.string(),
+    password: z.string()
+});
+
+/**
+ * Login successful
+ */
+export const zPostAuthLoginResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Login successful'),
+    data: z.object({
+        user_id: z.int().gte(-9007199254740991).lte(9007199254740991),
+        user_role: z.enum(['admin', 'user']),
+        created_at: z.int().gte(-9007199254740991).lte(9007199254740991),
+        expires_at: z.int().gte(-9007199254740991).lte(9007199254740991),
+        token: z.string()
+    })
+});
+
+/**
+ * Session info retrieved successfully
+ */
+export const zGetAuthSessionResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Session info retrieved successfully'),
+    data: z.object({
+        user_id: z.int().gte(-9007199254740991).lte(9007199254740991),
+        user_role: z.enum(['admin', 'user']),
+        created_at: z.int().gte(-9007199254740991).lte(9007199254740991),
+        expires_at: z.int().gte(-9007199254740991).lte(9007199254740991)
+    })
+});
+
+/**
+ * Logout successful
+ */
+export const zPostAuthLogoutResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Logout successful'),
+    data: z.null()
+});
+
+/**
+ * Registration status
+ */
+export const zGetAuthRegistrationResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Registration status'),
+    data: z.object({
+        enabled: z.boolean()
+    })
+});
+
+export const zPostAuthSignupBody = z.object({
+    username: z.string().min(5).max(40).regex(/^(?!.*[.-]{2})(?!.*--)(?!.*\.\.)[a-z0-9](?:[a-z0-9._-]{3,38}[a-z0-9_])?$/),
+    display_name: z.string().min(1).max(64).optional(),
+    email: z.email().regex(/^(?:[A-Za-z0-9_'+\-]+\.)*[A-Za-z0-9_'+\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$/),
+    password: z.string().min(8).max(128)
+});
+
+/**
+ * Account created
+ */
+export const zPostAuthSignupResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(201),
+    message: z.literal('Account created'),
+    data: z.object({
+        user_id: z.int().gte(-9007199254740991).lte(9007199254740991),
+        user_role: z.enum(['admin', 'user']),
+        created_at: z.int().gte(-9007199254740991).lte(9007199254740991),
+        expires_at: z.int().gte(-9007199254740991).lte(9007199254740991),
+        token: z.string()
+    })
+});
+
+export const zPostAuthResetPasswordBody = z.object({
+    reset_token: z.string().min(1),
+    new_password: z.string().min(8).max(50).regex(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[\W_]).+$/)
+});
+
+/**
+ * Password has been reset successfully
+ */
+export const zPostAuthResetPasswordResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Password has been reset successfully'),
+    data: z.null()
+});
+
+export const zPostAuthResetPasswordRequestBody = z.object({
+    email: z.email().regex(/^(?:[A-Za-z0-9_'+\-]+\.)*[A-Za-z0-9_'+\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$/)
+});
+
+/**
+ * If the username exists, a password reset has been requested
+ */
+export const zPostAuthResetPasswordRequestResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('If the username exists, a password reset has been requested'),
+    data: z.null()
+});
+
+/**
+ * Account deleted successfully
+ */
+export const zDeleteAccountResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Account deleted successfully'),
+    data: z.null()
+});
+
+/**
+ * Account information retrieved successfully
+ */
+export const zGetAccountResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Account information retrieved successfully'),
+    data: z.object({
+        id: z.int().gte(-9007199254740991).lte(9007199254740991),
+        username: z.string(),
+        display_name: z.string(),
+        email: z.string(),
+        role: z.enum(['admin', 'user']),
+        created_at: z.int().gte(-9007199254740991).lte(9007199254740991)
+    })
+});
+
+export const zPutAccountBody = z.object({
+    username: z.string().min(5).max(40).regex(/^(?!.*[.-]{2})(?!.*--)(?!.*\.\.)[a-z0-9](?:[a-z0-9._-]{3,38}[a-z0-9_])?$/).optional(),
+    display_name: z.string().optional(),
+    email: z.email().regex(/^(?:[A-Za-z0-9_'+\-]+\.)*[A-Za-z0-9_'+\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$/).optional(),
+    current_password: z.string().min(1)
+});
+
+/**
+ * Account information updated successfully
+ */
+export const zPutAccountResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Account information updated successfully'),
+    data: z.null()
+});
+
+export const zPutAccountPasswordBody = z.object({
+    current_password: z.string(),
+    new_password: z.string().min(8).max(50).regex(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[\W_]).+$/)
+});
+
+/**
+ * Password changed successfully
+ */
+export const zPutAccountPasswordResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Password changed successfully'),
+    data: z.null()
+});
+
+/**
+ * API keys retrieved successfully
+ */
+export const zGetAccountApikeysResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('API keys retrieved successfully'),
+    data: z.array(z.object({
+        id: z.string(),
+        description: z.string(),
+        created_at: z.int().gte(-9007199254740991).lte(9007199254740991),
+        expires_at: z.int().gte(-9007199254740991).lte(9007199254740991).nullable()
+    }))
+});
+
+export const zPostAccountApikeysBody = z.object({
+    description: z.string().min(1).max(255),
+    expires_at: z.union([
+        z.literal('7d'),
+        z.literal('30d'),
+        z.literal('90d'),
+        z.literal('180d'),
+        z.literal('365d')
+    ]).nullable()
+});
+
+/**
+ * API key created successfully
+ */
+export const zPostAccountApikeysResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('API key created successfully'),
+    data: z.object({
+        id: z.string(),
+        token: z.string()
+    })
+});
+
+export const zDeleteAccountApikeysByApiKeyIdPath = z.object({
+    apiKeyID: z.string().min(1).max(255)
+});
+
+/**
+ * API key deleted successfully
+ */
+export const zDeleteAccountApikeysByApiKeyIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('API key deleted successfully'),
+    data: z.null()
+});
+
+export const zGetAccountApikeysByApiKeyIdPath = z.object({
+    apiKeyID: z.string().min(1).max(255)
+});
+
+/**
+ * API key retrieved successfully
+ */
+export const zGetAccountApikeysByApiKeyIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('API key retrieved successfully'),
+    data: z.object({
+        id: z.string(),
+        description: z.string(),
+        created_at: z.int().gte(-9007199254740991).lte(9007199254740991),
+        expires_at: z.int().gte(-9007199254740991).lte(9007199254740991).nullable()
+    })
+});
+
+/**
+ * Preferences retrieved successfully
+ */
+export const zGetAccountPreferencesResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Preferences retrieved successfully'),
+    data: z.object({
+        onboarding: z.object({
+            completed: z.boolean().default(false)
+        })
+    })
+});
+
+/**
+ * Onboarding state retrieved successfully
+ */
+export const zGetAccountPreferencesOnboardingResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Onboarding state retrieved successfully'),
+    data: z.object({
+        completed: z.boolean().default(false)
+    })
+});
+
+export const zPutAccountPreferencesOnboardingBody = z.object({
+    completed: z.boolean().optional().default(false)
+});
+
+/**
+ * Onboarding state updated successfully
+ */
+export const zPutAccountPreferencesOnboardingResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Onboarding state updated successfully'),
+    data: z.null()
+});
+
+export const zGetAdminUsersQuery = z.object({
+    role: z.enum(['admin', 'user']).optional(),
+    search: z.string().min(1).max(64).optional(),
+    limit: z.int().gte(1).lte(100).optional(),
+    offset: z.int().gte(0).lte(9007199254740991).optional()
+});
+
+/**
+ * Users retrieved successfully
+ */
+export const zGetAdminUsersResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Users retrieved successfully'),
+    data: z.array(z.object({
+        id: z.int().gte(-9007199254740991).lte(9007199254740991),
+        username: z.string(),
+        display_name: z.string(),
+        email: z.string(),
+        role: z.enum(['admin', 'user']),
+        created_at: z.int().gte(-9007199254740991).lte(9007199254740991)
+    }))
+});
+
+export const zPostAdminUsersBody = z.object({
+    username: z.string().min(5).max(40).regex(/^(?!.*[.-]{2})(?!.*--)(?!.*\.\.)[a-z0-9](?:[a-z0-9._-]{3,38}[a-z0-9_])?$/),
+    display_name: z.string().min(1).max(64),
+    email: z.email().regex(/^(?:[A-Za-z0-9_'+\-]+\.)*[A-Za-z0-9_'+\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$/),
+    role: z.enum(['admin', 'user']).optional(),
+    password: z.string().min(8).max(128)
+});
+
+/**
+ * User created successfully
+ */
+export const zPostAdminUsersResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(201),
+    message: z.literal('User created successfully'),
+    data: z.object({
+        id: z.int().gte(-9007199254740991).lte(9007199254740991),
+        username: z.string(),
+        display_name: z.string(),
+        email: z.string(),
+        role: z.enum(['admin', 'user']),
+        created_at: z.int().gte(-9007199254740991).lte(9007199254740991)
+    })
+});
+
+export const zDeleteAdminUsersByUserIdPath = z.object({
+    userId: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * User deleted successfully
+ */
+export const zDeleteAdminUsersByUserIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('User deleted successfully'),
+    data: z.null()
+});
+
+export const zGetAdminUsersByUserIdPath = z.object({
+    userId: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * User retrieved successfully
+ */
+export const zGetAdminUsersByUserIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('User retrieved successfully'),
+    data: z.object({
+        id: z.int().gte(-9007199254740991).lte(9007199254740991),
+        username: z.string(),
+        display_name: z.string(),
+        email: z.string(),
+        role: z.enum(['admin', 'user']),
+        created_at: z.int().gte(-9007199254740991).lte(9007199254740991)
+    })
+});
+
+export const zPutAdminUsersByUserIdBody = z.object({
+    username: z.string().optional(),
+    display_name: z.string().optional(),
+    email: z.string().optional(),
+    role: z.enum(['admin', 'user']).optional()
+});
+
+export const zPutAdminUsersByUserIdPath = z.object({
+    userId: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * User updated successfully
+ */
+export const zPutAdminUsersByUserIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('User updated successfully'),
+    data: z.object({
+        id: z.int().gte(-9007199254740991).lte(9007199254740991),
+        username: z.string(),
+        display_name: z.string(),
+        email: z.string(),
+        role: z.enum(['admin', 'user']),
+        created_at: z.int().gte(-9007199254740991).lte(9007199254740991)
+    })
+});
+
+export const zPutAdminUsersByUserIdPasswordBody = z.object({
+    password: z.string().min(8).max(50).regex(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[\W_]).+$/)
+});
+
+export const zPutAdminUsersByUserIdPasswordPath = z.object({
+    userId: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Password reset successfully
+ */
+export const zPutAdminUsersByUserIdPasswordResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Password reset successfully'),
+    data: z.null()
+});
+
+/**
+ * Settings retrieved
+ */
+export const zGetAdminSettingsResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Settings retrieved'),
+    data: z.object({
+        registration_enabled: z.boolean()
+    })
+});
+
+export const zPutAdminSettingsBody = z.object({
+    registration_enabled: z.boolean().optional()
+});
+
+/**
+ * Settings updated
+ */
+export const zPutAdminSettingsResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Settings updated'),
+    data: z.object({
+        registration_enabled: z.boolean()
+    })
+});
+
+export const zPostAgentsEnrollBody = z.object({
+    enrollment_token: z.string().min(1).max(256),
+    secret: z.string().min(32).max(128)
+});
+
+/**
+ * Agent enrolled
+ */
+export const zPostAgentsEnrollResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Agent enrolled'),
+    data: z.object({
+        agent_id: z.number(),
+        kind: z.enum(['esp32', 'linux']),
+        token_id: z.string()
+    })
+});
+
+/**
+ * Agents retrieved
+ */
+export const zGetAgentsResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Agents retrieved'),
+    data: z.array(z.object({
+        id: z.number(),
+        name: z.string(),
+        description: z.string(),
+        kind: z.enum(['esp32', 'linux']),
+        state: z.enum([
+            'online',
+            'offline',
+            'unenrolled'
+        ]),
+        version: z.string().nullable(),
+        capabilities: z.array(z.string()),
+        info: z.record(z.string(), z.unknown()).nullable(),
+        last_seen_at: z.number().nullable(),
+        enrolled_at: z.number().nullable(),
+        created_at: z.number()
+    }))
+});
+
+export const zPostAgentsBody = z.object({
+    name: z.string().min(1).max(64),
+    description: z.string().max(500).optional().default(''),
+    kind: z.enum(['esp32', 'linux'])
+});
+
+/**
+ * Agent created
+ */
+export const zPostAgentsResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(201),
+    message: z.literal('Agent created'),
+    data: z.object({
+        id: z.number(),
+        name: z.string(),
+        description: z.string(),
+        kind: z.enum(['esp32', 'linux']),
+        state: z.enum([
+            'online',
+            'offline',
+            'unenrolled'
+        ]),
+        version: z.string().nullable(),
+        capabilities: z.array(z.string()),
+        info: z.record(z.string(), z.unknown()).nullable(),
+        last_seen_at: z.number().nullable(),
+        enrolled_at: z.number().nullable(),
+        created_at: z.number()
+    })
+});
+
+export const zDeleteAgentsByAgentIdPath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Agent deleted
+ */
+export const zDeleteAgentsByAgentIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Agent deleted'),
+    data: z.null()
+});
+
+export const zGetAgentsByAgentIdPath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Agent retrieved
+ */
+export const zGetAgentsByAgentIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Agent retrieved'),
+    data: z.object({
+        id: z.number(),
+        name: z.string(),
+        description: z.string(),
+        kind: z.enum(['esp32', 'linux']),
+        state: z.enum([
+            'online',
+            'offline',
+            'unenrolled'
+        ]),
+        version: z.string().nullable(),
+        capabilities: z.array(z.string()),
+        info: z.record(z.string(), z.unknown()).nullable(),
+        last_seen_at: z.number().nullable(),
+        enrolled_at: z.number().nullable(),
+        created_at: z.number()
+    })
+});
+
+export const zPutAgentsByAgentIdBody = z.object({
+    name: z.string().min(1).max(64).optional(),
+    description: z.string().max(500).optional()
+});
+
+export const zPutAgentsByAgentIdPath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Agent updated
+ */
+export const zPutAgentsByAgentIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Agent updated'),
+    data: z.object({
+        id: z.number(),
+        name: z.string(),
+        description: z.string(),
+        kind: z.enum(['esp32', 'linux']),
+        state: z.enum([
+            'online',
+            'offline',
+            'unenrolled'
+        ]),
+        version: z.string().nullable(),
+        capabilities: z.array(z.string()),
+        info: z.record(z.string(), z.unknown()).nullable(),
+        last_seen_at: z.number().nullable(),
+        enrolled_at: z.number().nullable(),
+        created_at: z.number()
+    })
+});
+
+export const zPostAgentsByAgentIdEnrollmentsPath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Enrollment token created
+ */
+export const zPostAgentsByAgentIdEnrollmentsResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(201),
+    message: z.literal('Enrollment token created'),
+    data: z.object({
+        token: z.string(),
+        expires_at: z.number()
+    })
+});
+
+export const zPostAgentsByAgentIdRevokePath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Credential revoked
+ */
+export const zPostAgentsByAgentIdRevokeResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Credential revoked'),
+    data: z.object({
+        id: z.number(),
+        name: z.string(),
+        description: z.string(),
+        kind: z.enum(['esp32', 'linux']),
+        state: z.enum([
+            'online',
+            'offline',
+            'unenrolled'
+        ]),
+        version: z.string().nullable(),
+        capabilities: z.array(z.string()),
+        info: z.record(z.string(), z.unknown()).nullable(),
+        last_seen_at: z.number().nullable(),
+        enrolled_at: z.number().nullable(),
+        created_at: z.number()
+    })
+});
+
+/**
+ * Devices retrieved
+ */
+export const zGetDevicesResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Devices retrieved'),
+    data: z.array(z.object({
+        id: z.number(),
+        name: z.string(),
+        type: z.enum([
+            'server',
+            'desktop',
+            'laptop',
+            'printer',
+            'nas',
+            'other'
+        ]),
+        description: z.string(),
+        mac_address: z.string(),
+        wol_port: z.number(),
+        agent_id: z.number().nullable(),
+        status_method: z.enum([
+            'none',
+            'link_local',
+            'ipv4',
+            'ipv6',
+            'ssh',
+            'host_agent'
+        ]),
+        status_address: z.string().nullable(),
+        status_tcp_port: z.number().nullable(),
+        host_agent_id: z.number().nullable(),
+        created_at: z.number(),
+        access_role: z.enum([
+            'owner',
+            'viewer',
+            'operator',
+            'manager'
+        ]),
+        owner: z.object({
+            id: z.number(),
+            username: z.string(),
+            display_name: z.string()
+        }),
+        agent: z.object({
+            id: z.number(),
+            name: z.string(),
+            kind: z.enum(['esp32', 'linux']),
+            state: z.enum([
+                'online',
+                'offline',
+                'unenrolled'
+            ])
+        }).nullable(),
+        host_agent: z.object({
+            id: z.number(),
+            name: z.string(),
+            kind: z.enum(['esp32', 'linux']),
+            state: z.enum([
+                'online',
+                'offline',
+                'unenrolled'
+            ])
+        }).nullable(),
+        favorite: z.boolean(),
+        status: z.object({
+            state: z.enum([
+                'online',
+                'offline',
+                'unknown'
+            ]),
+            checked_at: z.number().nullable(),
+            reason: z.string().optional()
+        }),
+        actions: z.object({
+            power_on: z.boolean(),
+            shutdown: z.boolean(),
+            reboot: z.boolean()
+        })
+    }))
+});
+
+export const zPostDevicesBody = z.object({
+    name: z.string().min(1).max(64),
+    type: z.enum([
+        'server',
+        'desktop',
+        'laptop',
+        'printer',
+        'nas',
+        'other'
+    ]),
+    description: z.string().max(500).optional().default(''),
+    mac_address: z.string().regex(/^[0-9A-Fa-f]{2}([:-])(?:[0-9A-Fa-f]{2}\1){4}[0-9A-Fa-f]{2}$/),
+    wol_port: z.int().gte(1).lte(65535).optional().default(9),
+    agent_id: z.int().gt(0).lte(9007199254740991).nullish().default(null),
+    status_method: z.enum([
+        'none',
+        'link_local',
+        'ipv4',
+        'ipv6',
+        'ssh',
+        'host_agent'
+    ]).optional().default('none'),
+    status_address: z.string().min(1).max(253).nullish().default(null),
+    status_tcp_port: z.int().gte(1).lte(65535).nullish().default(null),
+    host_agent_id: z.int().gt(0).lte(9007199254740991).nullish().default(null)
+});
+
+/**
+ * Device created
+ */
+export const zPostDevicesResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(201),
+    message: z.literal('Device created'),
+    data: z.object({
+        id: z.number(),
+        name: z.string(),
+        type: z.enum([
+            'server',
+            'desktop',
+            'laptop',
+            'printer',
+            'nas',
+            'other'
+        ]),
+        description: z.string(),
+        mac_address: z.string(),
+        wol_port: z.number(),
+        agent_id: z.number().nullable(),
+        status_method: z.enum([
+            'none',
+            'link_local',
+            'ipv4',
+            'ipv6',
+            'ssh',
+            'host_agent'
+        ]),
+        status_address: z.string().nullable(),
+        status_tcp_port: z.number().nullable(),
+        host_agent_id: z.number().nullable(),
+        created_at: z.number(),
+        access_role: z.enum([
+            'owner',
+            'viewer',
+            'operator',
+            'manager'
+        ]),
+        owner: z.object({
+            id: z.number(),
+            username: z.string(),
+            display_name: z.string()
+        }),
+        agent: z.object({
+            id: z.number(),
+            name: z.string(),
+            kind: z.enum(['esp32', 'linux']),
+            state: z.enum([
+                'online',
+                'offline',
+                'unenrolled'
+            ])
+        }).nullable(),
+        host_agent: z.object({
+            id: z.number(),
+            name: z.string(),
+            kind: z.enum(['esp32', 'linux']),
+            state: z.enum([
+                'online',
+                'offline',
+                'unenrolled'
+            ])
+        }).nullable(),
+        favorite: z.boolean(),
+        status: z.object({
+            state: z.enum([
+                'online',
+                'offline',
+                'unknown'
+            ]),
+            checked_at: z.number().nullable(),
+            reason: z.string().optional()
+        }),
+        actions: z.object({
+            power_on: z.boolean(),
+            shutdown: z.boolean(),
+            reboot: z.boolean()
+        })
+    })
+});
+
+export const zDeleteDevicesByDeviceIdPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Device deleted
+ */
+export const zDeleteDevicesByDeviceIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Device deleted'),
+    data: z.null()
+});
+
+export const zGetDevicesByDeviceIdPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Device retrieved
+ */
+export const zGetDevicesByDeviceIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Device retrieved'),
+    data: z.object({
+        id: z.number(),
+        name: z.string(),
+        type: z.enum([
+            'server',
+            'desktop',
+            'laptop',
+            'printer',
+            'nas',
+            'other'
+        ]),
+        description: z.string(),
+        mac_address: z.string(),
+        wol_port: z.number(),
+        agent_id: z.number().nullable(),
+        status_method: z.enum([
+            'none',
+            'link_local',
+            'ipv4',
+            'ipv6',
+            'ssh',
+            'host_agent'
+        ]),
+        status_address: z.string().nullable(),
+        status_tcp_port: z.number().nullable(),
+        host_agent_id: z.number().nullable(),
+        created_at: z.number(),
+        access_role: z.enum([
+            'owner',
+            'viewer',
+            'operator',
+            'manager'
+        ]),
+        owner: z.object({
+            id: z.number(),
+            username: z.string(),
+            display_name: z.string()
+        }),
+        agent: z.object({
+            id: z.number(),
+            name: z.string(),
+            kind: z.enum(['esp32', 'linux']),
+            state: z.enum([
+                'online',
+                'offline',
+                'unenrolled'
+            ])
+        }).nullable(),
+        host_agent: z.object({
+            id: z.number(),
+            name: z.string(),
+            kind: z.enum(['esp32', 'linux']),
+            state: z.enum([
+                'online',
+                'offline',
+                'unenrolled'
+            ])
+        }).nullable(),
+        favorite: z.boolean(),
+        status: z.object({
+            state: z.enum([
+                'online',
+                'offline',
+                'unknown'
+            ]),
+            checked_at: z.number().nullable(),
+            reason: z.string().optional()
+        }),
+        actions: z.object({
+            power_on: z.boolean(),
+            shutdown: z.boolean(),
+            reboot: z.boolean()
+        })
+    })
+});
+
+export const zPutDevicesByDeviceIdBody = z.object({
+    name: z.string().min(1).max(64).optional(),
+    type: z.enum([
+        'server',
+        'desktop',
+        'laptop',
+        'printer',
+        'nas',
+        'other'
+    ]).optional(),
+    description: z.string().max(500).optional(),
+    mac_address: z.string().regex(/^[0-9A-Fa-f]{2}([:-])(?:[0-9A-Fa-f]{2}\1){4}[0-9A-Fa-f]{2}$/).optional(),
+    wol_port: z.int().gte(1).lte(65535).optional(),
+    agent_id: z.int().gt(0).lte(9007199254740991).nullish(),
+    status_method: z.enum([
+        'none',
+        'link_local',
+        'ipv4',
+        'ipv6',
+        'ssh',
+        'host_agent'
+    ]).optional(),
+    status_address: z.string().min(1).max(253).nullish(),
+    status_tcp_port: z.int().gte(1).lte(65535).nullish(),
+    host_agent_id: z.int().gt(0).lte(9007199254740991).nullish()
+});
+
+export const zPutDevicesByDeviceIdPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Device updated
+ */
+export const zPutDevicesByDeviceIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Device updated'),
+    data: z.object({
+        id: z.number(),
+        name: z.string(),
+        type: z.enum([
+            'server',
+            'desktop',
+            'laptop',
+            'printer',
+            'nas',
+            'other'
+        ]),
+        description: z.string(),
+        mac_address: z.string(),
+        wol_port: z.number(),
+        agent_id: z.number().nullable(),
+        status_method: z.enum([
+            'none',
+            'link_local',
+            'ipv4',
+            'ipv6',
+            'ssh',
+            'host_agent'
+        ]),
+        status_address: z.string().nullable(),
+        status_tcp_port: z.number().nullable(),
+        host_agent_id: z.number().nullable(),
+        created_at: z.number(),
+        access_role: z.enum([
+            'owner',
+            'viewer',
+            'operator',
+            'manager'
+        ]),
+        owner: z.object({
+            id: z.number(),
+            username: z.string(),
+            display_name: z.string()
+        }),
+        agent: z.object({
+            id: z.number(),
+            name: z.string(),
+            kind: z.enum(['esp32', 'linux']),
+            state: z.enum([
+                'online',
+                'offline',
+                'unenrolled'
+            ])
+        }).nullable(),
+        host_agent: z.object({
+            id: z.number(),
+            name: z.string(),
+            kind: z.enum(['esp32', 'linux']),
+            state: z.enum([
+                'online',
+                'offline',
+                'unenrolled'
+            ])
+        }).nullable(),
+        favorite: z.boolean(),
+        status: z.object({
+            state: z.enum([
+                'online',
+                'offline',
+                'unknown'
+            ]),
+            checked_at: z.number().nullable(),
+            reason: z.string().optional()
+        }),
+        actions: z.object({
+            power_on: z.boolean(),
+            shutdown: z.boolean(),
+            reboot: z.boolean()
+        })
+    })
+});
+
+export const zPostDevicesByDeviceIdPowerOnPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Wake-on-LAN packet sent
+ */
+export const zPostDevicesByDeviceIdPowerOnResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Wake-on-LAN packet sent'),
+    data: z.null()
+});
+
+export const zPostDevicesByDeviceIdShutdownPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Shutdown requested
+ */
+export const zPostDevicesByDeviceIdShutdownResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Shutdown requested'),
+    data: z.null()
+});
+
+export const zPostDevicesByDeviceIdRebootPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Reboot requested
+ */
+export const zPostDevicesByDeviceIdRebootResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Reboot requested'),
+    data: z.null()
+});
+
+export const zPostDevicesByDeviceIdStatusPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Status checked
+ */
+export const zPostDevicesByDeviceIdStatusResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Status checked'),
+    data: z.object({
+        state: z.enum([
+            'online',
+            'offline',
+            'unknown'
+        ]),
+        checked_at: z.number().nullable(),
+        reason: z.string().optional()
+    })
+});
+
+export const zDeleteDevicesByDeviceIdFavoritePath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Removed from favorites
+ */
+export const zDeleteDevicesByDeviceIdFavoriteResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Removed from favorites'),
+    data: z.null()
+});
+
+export const zPutDevicesByDeviceIdFavoritePath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Added to favorites
+ */
+export const zPutDevicesByDeviceIdFavoriteResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Added to favorites'),
+    data: z.null()
+});
+
+export const zGetDevicesByDeviceIdSharesPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Shares retrieved
+ */
+export const zGetDevicesByDeviceIdSharesResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Shares retrieved'),
+    data: z.array(z.object({
+        user: z.object({
+            id: z.number(),
+            username: z.string(),
+            display_name: z.string()
+        }),
+        role: z.enum([
+            'viewer',
+            'operator',
+            'manager'
+        ]),
+        created_at: z.number()
+    }))
+});
+
+export const zPostDevicesByDeviceIdSharesBody = z.object({
+    user: z.string().min(1).max(255),
+    role: z.enum([
+        'viewer',
+        'operator',
+        'manager'
+    ])
+});
+
+export const zPostDevicesByDeviceIdSharesPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Device shared
+ */
+export const zPostDevicesByDeviceIdSharesResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(201),
+    message: z.literal('Device shared'),
+    data: z.object({
+        user: z.object({
+            id: z.number(),
+            username: z.string(),
+            display_name: z.string()
+        }),
+        role: z.enum([
+            'viewer',
+            'operator',
+            'manager'
+        ]),
+        created_at: z.number()
+    })
+});
+
+export const zDeleteDevicesByDeviceIdSharesByUserIdPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991),
+    userID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Share removed
+ */
+export const zDeleteDevicesByDeviceIdSharesByUserIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Share removed'),
+    data: z.null()
+});
+
+export const zPutDevicesByDeviceIdSharesByUserIdBody = z.object({
+    role: z.enum([
+        'viewer',
+        'operator',
+        'manager'
+    ])
+});
+
+export const zPutDevicesByDeviceIdSharesByUserIdPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991),
+    userID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Share updated
+ */
+export const zPutDevicesByDeviceIdSharesByUserIdResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Share updated'),
+    data: z.null()
+});
diff --git a/app/app.config.ts b/app/app.config.ts
new file mode 100644
index 0000000..9ed4e37
--- /dev/null
+++ b/app/app.config.ts
@@ -0,0 +1,13 @@
+export default defineAppConfig({
+	ui: {
+		colors: {
+			// NetIgnite blue (#0087ff), defined in main.css.
+			primary: "netignite",
+			neutral: "slate",
+		},
+	},
+	theme: {
+		radius: 0.5,
+		blackAsPrimary: false,
+	},
+});
diff --git a/app.vue b/app/app.vue
similarity index 56%
rename from app.vue
rename to app/app.vue
index b2dd3fb..e6f35f7 100644
--- a/app.vue
+++ b/app/app.vue
@@ -1,8 +1,8 @@
 <template>
-    <div>
-        <NuxtPwaManifest />
+    <NuxtRouteAnnouncer />
+    <UApp>
         <NuxtLayout>
             <NuxtPage />
         </NuxtLayout>
-    </div>
-</template>
+    </UApp>
+</template>
\ No newline at end of file
diff --git a/app/assets/css/main.css b/app/assets/css/main.css
new file mode 100644
index 0000000..6080ddc
--- /dev/null
+++ b/app/assets/css/main.css
@@ -0,0 +1,55 @@
+/*
+ * main.css — Tailwind v4 CSS-first entry (no tailwind.config.js). Dark-only.
+ * Colors match the NetIgnite website (netignite.dev): brand blue #0087ff on navy surfaces.
+ * See docs/06-frontend-nuxt.md and docs/15-design-system.md.
+ */
+@import "tailwindcss";
+@import "@nuxt/ui";
+
+@theme static {
+	--font-sans: "Rubik", sans-serif;
+
+	/* NetIgnite brand blue — 500 is the logo/brand color #0087ff. Used as `primary`. */
+	--color-netignite-50: #edf7ff;
+	--color-netignite-100: #d6ecff;
+	--color-netignite-200: #b5dfff;
+	--color-netignite-300: #83cbff;
+	--color-netignite-400: #48adff;
+	--color-netignite-500: #0087ff;
+	--color-netignite-600: #006be0;
+	--color-netignite-700: #0055b8;
+	--color-netignite-800: #064894;
+	--color-netignite-900: #0b3d79;
+	--color-netignite-950: #08264d;
+
+	/* NetIgnite surfaces: page background, raised sections/cards, and their hover state. */
+	--color-night: #0b0c1b;
+	--color-surface: #1a1b2e;
+	--color-surface-hover: #22233a;
+}
+
+/* ===========================
+   Base & Reset Styles
+   =========================== */
+
+:root {
+	color-scheme: dark;
+}
+
+/* Brand blue as the dark-mode primary (Nuxt UI defaults to the 400 shade) and the navy
+   surfaces as Nuxt UI's backgrounds, so slide-overs, menus and the TOC match the site. */
+.dark {
+	--ui-primary: var(--ui-color-primary-500);
+	--ui-bg: var(--color-night);
+	--ui-bg-muted: var(--color-surface);
+	--ui-bg-elevated: var(--color-surface);
+	--ui-bg-accented: var(--color-surface-hover);
+}
+
+html {
+	scroll-behavior: smooth;
+}
+
+.main-bg-color {
+	background-color: var(--color-night);
+}
diff --git a/app/components/Gravatar.vue b/app/components/Gravatar.vue
new file mode 100644
index 0000000..e540b1c
--- /dev/null
+++ b/app/components/Gravatar.vue
@@ -0,0 +1,19 @@
+<script setup lang="ts">
+import type { AvatarProps } from "@nuxt/ui";
+import { useGravatarURL } from "~/composables/useGravatarURL";
+
+const props = defineProps<Omit<AvatarProps, "src"> & { email?: string }>();
+
+const avatarSrc = ref<string | undefined>(undefined);
+
+// Resolve without blocking render; on failure the avatar falls back to its initials/icon.
+watchEffect(async () => {
+	avatarSrc.value = props.email ? await useGravatarURL(props.email) : undefined;
+});
+</script>
+
+<template>
+	<UAvatar :src="avatarSrc" v-bind="props">
+		<slot />
+	</UAvatar>
+</template>
diff --git a/app/components/dashboard/DashboardDeleteModal.vue b/app/components/dashboard/DashboardDeleteModal.vue
new file mode 100644
index 0000000..f42266e
--- /dev/null
+++ b/app/components/dashboard/DashboardDeleteModal.vue
@@ -0,0 +1,78 @@
+<script setup lang="ts">
+const props = withDefaults(
+	defineProps<{
+		title: string;
+		warningText: string;
+		preventAutoClose?: boolean;
+		onDelete: () => Promise<void> | void;
+	}>(),
+	{
+		preventAutoClose: false,
+	},
+);
+
+const open = defineModel<boolean>("open", { required: true });
+
+const confirmText = ref("");
+const loading = ref(false);
+
+// Reset the confirmation text whenever the modal closes.
+watch(open, (value) => {
+	if (!value) confirmText.value = "";
+});
+
+async function onDeleteWrapper() {
+	loading.value = true;
+	try {
+		await props.onDelete();
+		if (!props.preventAutoClose) {
+			open.value = false;
+		}
+	} catch (error) {
+		// The caller shows the error toast; just keep the modal open.
+		console.error("Delete operation failed:", error);
+	} finally {
+		loading.value = false;
+	}
+}
+</script>
+
+<template>
+	<DashboardModal
+		v-model:open="open"
+		:title="title"
+		description="This action is permanent"
+		icon="i-lucide-alert-triangle"
+		icon-color="error"
+	>
+		<div class="space-y-4">
+			<div class="rounded-lg border border-red-900/50 bg-red-950/50 p-4">
+				<p class="text-sm text-red-300">
+					<strong>Warning:</strong>
+					{{ warningText }}
+				</p>
+			</div>
+
+			<UFormField>
+				<template #label>
+					Type <span class="text-red-400">DELETE</span> to confirm
+				</template>
+				<UInput v-model="confirmText" placeholder="Type DELETE" class="w-full" autocomplete="off" />
+			</UFormField>
+		</div>
+
+		<template #footer>
+			<div class="flex justify-end gap-3">
+				<UButton label="Cancel" color="neutral" variant="ghost" @click="open = false" />
+				<UButton
+					:label="title"
+					color="error"
+					:loading="loading"
+					:disabled="confirmText !== 'DELETE'"
+					icon="i-lucide-trash-2"
+					@click="onDeleteWrapper"
+				/>
+			</div>
+		</template>
+	</DashboardModal>
+</template>
diff --git a/app/components/dashboard/DashboardModal.vue b/app/components/dashboard/DashboardModal.vue
new file mode 100644
index 0000000..0dfb180
--- /dev/null
+++ b/app/components/dashboard/DashboardModal.vue
@@ -0,0 +1,54 @@
+<script setup lang="ts">
+import type { ModalProps } from "@nuxt/ui";
+
+interface Props extends /* @vue-ignore */ ModalProps {
+	title: string;
+	description?: string;
+	icon?: string;
+	iconColor?: "primary" | "amber" | "emerald" | "error" | "neutral";
+	loading?: boolean;
+}
+
+defineProps<Props>();
+
+const open = defineModel<boolean>("open", { required: true });
+
+// Static class names so Tailwind picks them up (no `text-${color}-400` interpolation).
+const iconColorClasses: Record<NonNullable<Props["iconColor"]>, string> = {
+	primary: "text-primary-400",
+	amber: "text-amber-400",
+	emerald: "text-emerald-400",
+	error: "text-red-400",
+	neutral: "text-slate-400",
+};
+</script>
+
+<template>
+	<UModal
+		v-model:open="open"
+		:title="title"
+		:description="description"
+		:ui="{
+			content: 'sm:max-w-lg',
+			footer: 'justify-end',
+		}"
+	>
+		<template #title>
+			<div class="flex items-center gap-2">
+				<UIcon v-if="icon" :name="icon" :class="iconColorClasses[iconColor ?? 'primary']" />
+				<span>{{ title }}</span>
+			</div>
+		</template>
+
+		<template #body>
+			<div v-if="loading" class="flex items-center justify-center py-8">
+				<UIcon name="i-lucide-loader-2" class="animate-spin text-2xl text-slate-400" />
+			</div>
+			<slot v-else />
+		</template>
+
+		<template #footer>
+			<slot name="footer" />
+		</template>
+	</UModal>
+</template>
diff --git a/app/components/dashboard/DashboardPageBody.vue b/app/components/dashboard/DashboardPageBody.vue
new file mode 100644
index 0000000..497ce7b
--- /dev/null
+++ b/app/components/dashboard/DashboardPageBody.vue
@@ -0,0 +1,5 @@
+<template>
+	<div class="space-y-6">
+		<slot></slot>
+	</div>
+</template>
diff --git a/app/components/dashboard/DashboardPageHeader.vue b/app/components/dashboard/DashboardPageHeader.vue
new file mode 100644
index 0000000..44e4acb
--- /dev/null
+++ b/app/components/dashboard/DashboardPageHeader.vue
@@ -0,0 +1,50 @@
+<script setup lang="ts">
+import type { BreadcrumbItem } from "@nuxt/ui";
+
+const props = withDefaults(
+	defineProps<{
+		title?: string;
+		icon?: string;
+		description?: string;
+		breadcrumbItems?: BreadcrumbItem[];
+	}>(),
+	{
+		title: "",
+		icon: undefined,
+	},
+);
+</script>
+
+<template>
+	<UDashboardNavbar :title="props.title" :icon="props.icon">
+		<template #leading>
+			<slot name="leading"></slot>
+		</template>
+
+		<template v-if="breadcrumbItems?.length" #title>
+			<slot name="title">
+				<UBreadcrumb :items="breadcrumbItems" :ui="{ link: 'text-md' }" />
+			</slot>
+		</template>
+
+		<template v-if="description" #trailing>
+			<slot name="trailing">
+				<span class="hidden text-slate-400 sm:inline">
+					{{ description }}
+				</span>
+			</slot>
+		</template>
+
+		<template #left>
+			<slot name="left"></slot>
+		</template>
+
+		<template #default>
+			<slot></slot>
+		</template>
+
+		<template #right>
+			<slot name="right"></slot>
+		</template>
+	</UDashboardNavbar>
+</template>
diff --git a/app/components/dashboard/DashboardSectionCard.vue b/app/components/dashboard/DashboardSectionCard.vue
new file mode 100644
index 0000000..1fe62f7
--- /dev/null
+++ b/app/components/dashboard/DashboardSectionCard.vue
@@ -0,0 +1,69 @@
+<script setup lang="ts">
+interface Props {
+	title: string;
+	description?: string;
+	icon: string;
+	tone?: "default" | "danger";
+	flush?: boolean;
+}
+
+const props = withDefaults(defineProps<Props>(), {
+	description: undefined,
+	tone: "default",
+	flush: false,
+});
+
+const toneClasses: Record<
+	NonNullable<Props["tone"]>,
+	{ card: string; header: string; iconTile: string; icon: string; title: string }
+> = {
+	default: {
+		card: "border-slate-800 bg-slate-900/60",
+		header: "border-slate-800",
+		iconTile: "bg-primary/10",
+		icon: "text-primary-400",
+		title: "text-white",
+	},
+	danger: {
+		card: "border-red-900/50 bg-red-950/20",
+		header: "border-red-900/50",
+		iconTile: "bg-red-500/10",
+		icon: "text-red-400",
+		title: "text-red-400",
+	},
+};
+
+const classes = computed(() => toneClasses[props.tone]);
+</script>
+
+<template>
+	<div :class="['overflow-hidden rounded-xl border', classes.card, 'backdrop-blur-sm']">
+		<div
+			:class="[
+				'flex flex-wrap items-center justify-between gap-3 border-b',
+				classes.header,
+				'px-6 py-4',
+			]"
+		>
+			<div class="flex items-center gap-3">
+				<div
+					:class="['flex h-10 w-10 shrink-0 items-center justify-center rounded-lg', classes.iconTile]"
+				>
+					<UIcon :name="icon" :class="['h-5 w-5', classes.icon]" />
+				</div>
+				<div>
+					<h3 :class="['font-medium', classes.title]">{{ title }}</h3>
+					<p v-if="description" class="text-sm text-slate-400">{{ description }}</p>
+				</div>
+			</div>
+
+			<div v-if="$slots.actions" class="flex flex-wrap items-center gap-2">
+				<slot name="actions"></slot>
+			</div>
+		</div>
+
+		<div :class="{ 'p-6': !flush }">
+			<slot></slot>
+		</div>
+	</div>
+</template>
diff --git a/app/components/dashboard/DashboardStatCard.vue b/app/components/dashboard/DashboardStatCard.vue
new file mode 100644
index 0000000..71c9fc4
--- /dev/null
+++ b/app/components/dashboard/DashboardStatCard.vue
@@ -0,0 +1,39 @@
+<script setup lang="ts">
+interface Props {
+	label: string;
+	value: string | number;
+	icon: string;
+	iconColor?: "primary" | "amber" | "emerald" | "error" | "neutral";
+	hint?: string;
+	loading?: boolean;
+}
+
+withDefaults(defineProps<Props>(), {
+	iconColor: "primary",
+	hint: undefined,
+	loading: false,
+});
+
+const iconColorClasses: Record<NonNullable<Props["iconColor"]>, string> = {
+	primary: "text-primary-400",
+	amber: "text-amber-400",
+	emerald: "text-emerald-400",
+	error: "text-red-400",
+	neutral: "text-slate-400",
+};
+</script>
+
+<template>
+	<UCard class="border-slate-800 bg-slate-900/60">
+		<div class="flex items-center gap-4">
+			<div class="flex h-12 w-12 shrink-0 items-center justify-center rounded-lg bg-slate-800">
+				<UIcon :name="icon" :class="['text-xl', iconColorClasses[iconColor]]" />
+			</div>
+			<div class="min-w-0">
+				<p class="text-2xl font-bold">{{ loading ? "…" : value }}</p>
+				<p class="text-sm text-slate-400">{{ label }}</p>
+				<p v-if="hint" class="text-xs text-slate-500">{{ hint }}</p>
+			</div>
+		</div>
+	</UCard>
+</template>
diff --git a/app/components/dashboard/DataTable.vue b/app/components/dashboard/DataTable.vue
new file mode 100644
index 0000000..c3859f5
--- /dev/null
+++ b/app/components/dashboard/DataTable.vue
@@ -0,0 +1,457 @@
+<script setup lang="ts" generic="T extends Record<string, any>">
+import type { TableColumn } from "@nuxt/ui";
+import { getPaginationRowModel } from "@tanstack/table-core";
+import type {
+	CellContext,
+	ColumnFiltersState,
+	FilterFn,
+	HeaderContext,
+	Row,
+} from "@tanstack/vue-table";
+import { breakpointsTailwind, useBreakpoints } from "@vueuse/core";
+import { isRef } from "vue";
+
+// Cell slot props type (matches UTable's slot props)
+type CellSlotProps = {
+	row: Row<T>;
+};
+
+// Select option type for select filters
+interface SelectOption {
+	label: string;
+	value: string | number | boolean | null;
+	icon?: string;
+	color?: string;
+}
+
+// Filter types
+type FilterType = "text" | "number" | "date" | "select" | "multi-select" | "custom";
+
+// Filter configuration type
+interface FilterConfig {
+	/** Column key to filter */
+	column: keyof T;
+	/** Filter type */
+	type?: FilterType;
+	/** Input placeholder */
+	placeholder?: string;
+	/** Input icon */
+	icon?: string;
+	/** Custom CSS class for the input */
+	class?: string;
+	/** Options for select/multi-select filters */
+	options?: SelectOption[];
+	/** Custom filter function */
+	filterFn?: FilterFn<T>;
+	/** Label for the filter (shown in multi-select badge) */
+	label?: string;
+}
+
+// Props
+interface Props {
+	/** Table data */
+	data: T[] | Ref<T[]>;
+	/** Table columns configuration */
+	columns: TableColumn<T>[];
+	/** Loading state */
+	loading?: boolean | Ref<boolean>;
+	/** Filter configurations */
+	filters?: FilterConfig[];
+	/** Default page size */
+	defaultPageSize?: number;
+	/** Available page size options */
+	pageSizeOptions?: number[];
+	/** Show refresh button */
+	showRefresh?: boolean;
+	/** Show pagination */
+	showPagination?: boolean;
+	/** Show page size selector */
+	showPageSizeSelector?: boolean;
+	/** Empty state title */
+	emptyTitle?: string;
+	/** Empty state description */
+	emptyDescription?: string;
+	/** Empty state icon */
+	emptyIcon?: string;
+}
+
+const props = withDefaults(defineProps<Props>(), {
+	loading: false,
+	filters: () => [],
+	defaultPageSize: 10,
+	pageSizeOptions: () => [10, 25, 50, 100],
+	showRefresh: true,
+	showPagination: true,
+	showPageSizeSelector: true,
+	emptyTitle: "No data",
+	emptyDescription: "No items found.",
+	emptyIcon: "i-lucide-database",
+});
+
+// Emits
+const emit = defineEmits<{
+	/** Emitted when refresh button is clicked */
+	refresh: [];
+	/** Emitted when a row is selected/clicked */
+	"row-click": [row: T];
+}>();
+
+type DynamicHeaderSlots<T, K = keyof T> = Record<
+	string,
+	(props: HeaderContext<T, unknown>) => any
+> &
+	Record<`${K extends string ? K : never}-header`, (props: HeaderContext<T, unknown>) => any>;
+type DynamicFooterSlots<T, K = keyof T> = Record<
+	string,
+	(props: HeaderContext<T, unknown>) => any
+> &
+	Record<`${K extends string ? K : never}-footer`, (props: HeaderContext<T, unknown>) => any>;
+type DynamicCellSlots<T, K = keyof T> = Record<string, (props: CellContext<T, unknown>) => any> &
+	Record<`${K extends string ? K : never}-cell`, (props: CellContext<T, unknown>) => any>;
+
+type TableSlots = {
+	/** Header left side content (before search) */
+	"header-left"?: () => any;
+	/** Header right side content (after refresh button) */
+	"header-right"?: () => any;
+	/** Custom empty state */
+	empty?: () => any;
+	/** Actions in the empty state */
+	"empty-actions"?: () => any;
+	/** Footer left side content */
+	"footer-left"?: () => any;
+	/** Footer right side content (replaces pagination) */
+	"footer-right"?: () => any;
+} & DynamicHeaderSlots<T> &
+	DynamicFooterSlots<T> &
+	DynamicCellSlots<T>;
+
+// Slots with proper typing for type checking
+defineSlots<TableSlots>();
+
+// Use useSlots for dynamic slot access (avoids index signature issues)
+const slots = useSlots();
+
+// Table ref
+const table = useTemplateRef("table");
+
+// Filter configurations
+const allFilters = computed<FilterConfig[]>(() => props.filters ?? []);
+
+// Column filters state
+const columnFilters = ref<ColumnFiltersState>([]);
+
+// Drop filter state for columns that no longer have a filter. Unset filters stay out of the
+// state: TanStack applies every entry in it, even an empty one.
+watch(
+	() => allFilters.value.map((f) => f.column as string),
+	(filterColumns) => {
+		columnFilters.value = columnFilters.value.filter((f) => filterColumns.includes(f.id));
+	},
+);
+
+// Helper to get/set filter value for a specific column
+function getFilterValue(column: string): any {
+	const filter = allFilters.value.find((f) => f.column === column);
+	const value = table.value?.tableApi?.getColumn(column)?.getFilterValue();
+	// Return undefined for select types to show placeholder, empty string for text
+	if (filter?.type === "select" || filter?.type === "multi-select") {
+		return value ?? undefined;
+	}
+	return value ?? "";
+}
+
+function setFilterValue(column: string, value: any) {
+	const filter = allFilters.value.find((f) => f.column === column);
+	if (filter?.type === "multi-select") {
+		table.value?.tableApi?.getColumn(column)?.setFilterValue(value?.length ? value : undefined);
+	} else {
+		table.value?.tableApi?.getColumn(column)?.setFilterValue(value ?? undefined);
+	}
+}
+
+// Get select items for a filter
+function getSelectItems(filter: FilterConfig) {
+	if (!filter.options) return [];
+	return filter.options.map((opt) => ({
+		label: opt.label,
+		value: opt.value as string | number,
+	}));
+}
+
+// Get multi-select items for a filter
+function getMultiSelectItems(filter: FilterConfig) {
+	if (!filter.options) return [];
+	return filter.options.map((opt) => ({
+		label: opt.label,
+		value: opt.value,
+	}));
+}
+
+// Enhanced columns with custom filter functions
+const enhancedColumns = computed<TableColumn<T>[]>(() => {
+	return props.columns.map((col) => {
+		const accessorKey = (col as any).accessorKey || (col as any).id;
+		const filter = allFilters.value.find((f) => f.column === accessorKey);
+
+		if (!filter) return col;
+
+		// Explicit filter function per type; TanStack's "auto" picks one from the first row's value
+		let filterFn: FilterFn<T> | undefined;
+
+		if (filter.filterFn) {
+			filterFn = filter.filterFn;
+		} else if (!filter.type || filter.type === "text") {
+			filterFn = (row, columnId, filterValue) => {
+				if (filterValue == null || filterValue === "") return true;
+				const cellValue = String(row.getValue(columnId) ?? "").toLowerCase();
+				return cellValue.includes(String(filterValue).toLowerCase());
+			};
+		} else if (filter.type === "number") {
+			filterFn = (row, columnId, filterValue) => {
+				if (filterValue == null || filterValue === "") return true;
+				const cellValue = row.getValue(columnId);
+				return cellValue != null && Number(cellValue) === Number(filterValue);
+			};
+		} else if (filter.type === "select") {
+			filterFn = (row, columnId, filterValue) => {
+				if (filterValue == null || filterValue === "") return true;
+				return row.getValue(columnId) === filterValue;
+			};
+		} else if (filter.type === "multi-select") {
+			filterFn = (row, columnId, filterValue) => {
+				if (!filterValue || !Array.isArray(filterValue) || filterValue.length === 0) return true;
+				const cellValue = row.getValue(columnId);
+				return filterValue.includes(cellValue);
+			};
+		} else if (filter.type === "date") {
+			filterFn = (row, columnId, filterValue) => {
+				if (!filterValue || !filterValue.start || !filterValue.end) return true;
+				const cellValue = row.getValue(columnId) as string | number;
+				const cellDate = new Date(cellValue);
+				const startDate = new Date(filterValue.start);
+				const endDate = new Date(filterValue.end);
+				// Normalize time for comparison
+				cellDate.setHours(0, 0, 0, 0);
+				startDate.setHours(0, 0, 0, 0);
+				endDate.setHours(0, 0, 0, 0);
+				return cellDate >= startDate && cellDate <= endDate;
+			};
+		}
+
+		if (filterFn) {
+			return {
+				...col,
+				filterFn,
+			} as TableColumn<T>;
+		}
+
+		return col;
+	});
+});
+
+// Pagination state
+const pagination = ref({
+	pageIndex: 0,
+	pageSize: props.defaultPageSize,
+});
+
+// Page size select items
+const pageSizeItems = computed(() =>
+	props.pageSizeOptions.map((size) => ({
+		label: String(size),
+		value: size,
+	})),
+);
+
+const breakpoints = useBreakpoints(breakpointsTailwind);
+const isMobile = breakpoints.smaller("sm");
+
+// Handle page size change
+function handlePageSizeChange(value: number) {
+	table.value?.tableApi?.setPageSize(value);
+}
+
+// Handle refresh
+function handleRefresh() {
+	emit("refresh");
+}
+
+// Expose table ref and API for parent component access
+defineExpose({
+	table,
+	tableApi: computed(() => table.value?.tableApi),
+});
+</script>
+
+<template>
+	<UCard class="border-slate-800 bg-slate-900/60">
+		<template #header>
+			<div class="flex flex-col gap-3 sm:flex-row sm:flex-wrap sm:items-center sm:justify-between">
+				<!-- Filters Section -->
+				<div class="flex flex-col gap-2 w-full sm:w-auto sm:flex-row sm:flex-wrap sm:items-center sm:gap-3">
+					<slot name="header-left" />
+					
+					<!-- Render all filters based on type -->
+					<template v-for="filter in allFilters" :key="filter.column">
+						<!-- Text Input Filter (default) -->
+						<UInput
+							v-if="!filter.type || filter.type === 'text'"
+							:model-value="getFilterValue(filter.column as string) as string"
+							:class="filter.class || 'w-full sm:w-auto sm:max-w-sm sm:min-w-48'"
+							:icon="filter.icon || 'i-lucide-search'"
+							:placeholder="filter.placeholder || 'Search...'"
+							@update:model-value="(val: string) => setFilterValue(filter.column as string, val)"
+						/>
+
+						<!-- Number Input Filter -->
+						<UInput
+							v-else-if="filter.type === 'number'"
+							type="number"
+							:model-value="getFilterValue(filter.column as string) as string"
+							:class="filter.class || 'w-full sm:w-auto sm:max-w-32 sm:min-w-24'"
+							:icon="filter.icon || 'i-lucide-hash'"
+							:placeholder="filter.placeholder || 'Number...'"
+							@update:model-value="(val: string) => setFilterValue(filter.column as string, val)"
+						/>
+
+						<!-- Date Picker Filter -->
+						<FormDateRangePicker
+							v-else-if="filter.type === 'date'"
+							:model-value="getFilterValue(filter.column as string) as any"
+							:class="filter.class || 'w-full sm:w-auto sm:min-w-40'"
+							:icon="filter.icon || 'i-lucide-calendar'"
+							@update:model-value="(val: any) => setFilterValue(filter.column as string, val)"
+						/>
+
+						<!-- Select Filter -->
+						<USelectMenu
+							v-else-if="filter.type === 'select'"
+							:model-value="getFilterValue(filter.column as string)"
+							:items="getSelectItems(filter)"
+							value-key="value"
+							:class="filter.class || 'w-full sm:w-auto sm:min-w-40'"
+							:placeholder="filter.placeholder || 'All'"
+							@update:model-value="(val: any) => setFilterValue(filter.column as string, val)"
+						>
+							<template #leading>
+								<UIcon v-if="filter.icon" :name="filter.icon" class="size-4 text-muted" />
+							</template>
+						</USelectMenu>
+
+						<!-- Multi-Select Filter -->
+						<USelectMenu
+							v-else-if="filter.type === 'multi-select'"
+							:model-value="(getFilterValue(filter.column as string) as any[]) || []"
+							:items="getMultiSelectItems(filter)"
+							value-key="value"
+							multiple
+							:class="filter.class || 'w-full sm:w-auto sm:min-w-48'"
+							:placeholder="filter.placeholder || 'Select...'"
+							@update:model-value="(val: any) => setFilterValue(filter.column as string, val)"
+						>
+							<template #leading>
+								<UIcon v-if="filter.icon" :name="filter.icon" class="size-4 text-muted" />
+							</template>
+						</USelectMenu>
+					</template>
+				</div>
+				
+				<!-- Actions Section -->
+				<div class="flex items-center gap-2 sm:gap-3 justify-end">
+					<UButton
+						v-if="showRefresh"
+						icon="i-lucide-refresh-cw"
+						color="neutral"
+						variant="subtle"
+						class="sm:hidden"
+						@click="handleRefresh"
+					/>
+					<UButton
+						v-if="showRefresh"
+						label="Refresh"
+						icon="i-lucide-refresh-cw"
+						color="neutral"
+						variant="subtle"
+						class="hidden sm:inline-flex"
+						@click="handleRefresh"
+					/>
+
+					<slot name="header-right" />
+				</div>
+			</div>
+		</template>
+
+		<!-- Loading State -->
+		<div v-if="isRef(loading) ? loading.value : loading" class="flex items-center justify-center py-12">
+			<UIcon name="i-lucide-loader-2" class="animate-spin text-3xl text-slate-400" />
+		</div>
+
+		<!-- Table -->
+		<UTable
+			v-else-if="(isRef(data) ? data.value : data)?.length"
+			ref="table"
+			:data="isRef(data) ? data.value : data"
+			:columns="enhancedColumns"
+			v-model:column-filters="columnFilters"
+			v-model:pagination="pagination"
+			:pagination-options="{
+				getPaginationRowModel: getPaginationRowModel()
+			}"
+		>
+			<!-- Pass through all cell slots dynamically -->
+			<template v-for="(_, slotName) in slots" :key="slotName" #[slotName]="slotProps">
+				<slot :name="(slotName as keyof TableSlots)" v-bind="slotProps || {}" />
+			</template>
+		</UTable>
+
+		<!-- Empty State -->
+		<template v-else>
+			<slot name="empty">
+				<UEmpty
+					:icon="emptyIcon"
+					:title="emptyTitle"
+					:description="emptyDescription"
+					variant="naked"
+				>
+					<template v-if="slots['empty-actions']" #actions>
+						<slot name="empty-actions" />
+					</template>
+				</UEmpty>
+			</slot>
+		</template>
+
+		<template v-if="!(isRef(loading) ? loading.value : loading) && (isRef(data) ? data.value : data)?.length && (showPagination || showPageSizeSelector)" #footer>
+			<div class="flex items-center gap-3" :class="showPageSizeSelector && !isMobile ? 'justify-between' : 'justify-center'">
+				<div v-if="showPageSizeSelector && !isMobile" class="flex items-center gap-3 text-sm text-muted">
+					<slot name="footer-left">
+						<!-- Hide page size selector on mobile -->
+						<USelect
+							:items="pageSizeItems"
+							size="md"
+							class="min-w-18"
+							:default-value="defaultPageSize"
+							@update:model-value="handlePageSizeChange"
+						/>
+					</slot>
+				</div>
+
+				<div class="flex items-center">
+					<slot name="footer-right">
+						<!-- Mobile Pagination (fewer siblings, show edges) -->
+						<UPagination
+							v-if="showPagination"
+							:default-page="(table?.tableApi?.getState().pagination.pageIndex || 0) + 1"
+							:items-per-page="table?.tableApi?.getState().pagination.pageSize"
+							:total="table?.tableApi?.getFilteredRowModel().rows.length"
+							:sibling-count="isMobile ? 0 : 2"
+							:show-edges="true"
+							@update:page="(p: number) => table?.tableApi?.setPageIndex(p - 1)"
+						/>
+					</slot>
+				</div>
+			</div>
+		</template>
+	</UCard>
+</template>
+
diff --git a/app/components/dashboard/UserMenu.vue b/app/components/dashboard/UserMenu.vue
new file mode 100644
index 0000000..275a968
--- /dev/null
+++ b/app/components/dashboard/UserMenu.vue
@@ -0,0 +1,111 @@
+<script setup lang="ts">
+import type { DropdownMenuItem } from "@nuxt/ui";
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+
+defineProps<{
+	collapsed?: boolean;
+}>();
+
+const toast = useToast();
+
+const userInfoStore = useUserInfoStore();
+const userInfo = await userInfoStore.use();
+
+const isAdmin = computed(() => userInfo.value?.role === "admin");
+
+const user = computed(() => {
+	const name = userInfo.value?.display_name ?? "Unknown User";
+	return {
+		name,
+		avatar: {
+			alt: name,
+		},
+	};
+});
+
+async function logout() {
+	const result = await useAPI((api) => api.postAuthLogout({}), true);
+
+	// Clear local state regardless of the API result.
+	await userInfoStore.clear();
+	useAppCookies().sessionToken.set(null);
+
+	if (!result.success) {
+		toast.add({
+			title: "Logged out",
+			description: "Your local session was cleared, but the server logout failed.",
+			icon: "i-lucide-alert-circle",
+			color: "warning",
+		});
+	} else {
+		toast.add({
+			title: "Logged out",
+			description: "You have been successfully logged out.",
+			icon: "i-lucide-check",
+			color: "success",
+		});
+	}
+
+	await navigateTo("/auth/login");
+}
+
+const items = computed<DropdownMenuItem[][]>(() => [
+	[
+		{
+			type: "label",
+			label: user.value.name,
+			avatar: user.value.avatar,
+		},
+	],
+	[
+		{
+			label: "Settings",
+			icon: "i-lucide-settings",
+			to: "/dashboard/settings",
+		},
+		...(isAdmin.value
+			? [
+					{
+						label: "Manage Users",
+						icon: "i-lucide-users",
+						to: "/dashboard/admin/users",
+					},
+				]
+			: []),
+	],
+	[
+		{
+			label: "Log out",
+			icon: "i-lucide-log-out",
+			onSelect: logout,
+		},
+	],
+]);
+</script>
+
+<template>
+	<UDropdownMenu
+		:items="items"
+		:content="{ align: 'center', collisionPadding: 12 }"
+		:ui="{
+			viewport: 'main-bg-color',
+			content: collapsed ? 'w-48' : 'w-(--reka-dropdown-menu-trigger-width)',
+		}"
+	>
+		<UButton
+			v-bind="{
+				...user,
+				label: collapsed ? undefined : user.name,
+				trailingIcon: collapsed ? undefined : 'i-lucide-chevrons-up-down',
+			}"
+			color="neutral"
+			variant="ghost"
+			block
+			:square="collapsed"
+			class="data-[state=open]:bg-elevated/50 hover:bg-elevated/50"
+			:ui="{
+				trailingIcon: 'text-dimmed',
+			}"
+		/>
+	</UDropdownMenu>
+</template>
diff --git a/app/components/devices/PowerButtons.vue b/app/components/devices/PowerButtons.vue
new file mode 100644
index 0000000..902395c
--- /dev/null
+++ b/app/components/devices/PowerButtons.vue
@@ -0,0 +1,70 @@
+<script setup lang="ts">
+import type { Device } from "~/utils/types";
+
+const { device, size = "sm" } = defineProps<{ device: Device; size?: "sm" | "md" }>();
+const emit = defineEmits<{ changed: [] }>();
+
+const actions = useDeviceActions();
+
+const canPower = computed(() => device.access_role !== "viewer");
+
+async function powerOn() {
+	if (await actions.powerOn(device)) emit("changed");
+}
+
+const confirm = ref<"shutdown" | "reboot" | null>(null);
+
+async function onConfirm() {
+	const action = confirm.value;
+	confirm.value = null;
+	if (!action) return;
+	const ok = action === "shutdown" ? await actions.shutdown(device) : await actions.reboot(device);
+	if (ok) emit("changed");
+}
+</script>
+
+<template>
+	<div v-if="canPower" class="flex items-center gap-1">
+		<UTooltip :text="device.actions.power_on ? 'Power on (Wake-on-LAN)' : 'No online agent with Wake-on-LAN'">
+			<UButton
+				icon="i-lucide-power"
+				color="success"
+				variant="soft"
+				:size="size"
+				:disabled="!device.actions.power_on"
+				:loading="actions.isBusy(device)"
+				:label="size === 'md' ? 'Power on' : undefined"
+				aria-label="Power on"
+				@click="powerOn"
+			/>
+		</UTooltip>
+		<UDropdownMenu
+			v-if="device.actions.shutdown || device.actions.reboot"
+			:items="[
+				{ label: 'Shut down', icon: 'i-lucide-power-off', onSelect: () => (confirm = 'shutdown') },
+				{ label: 'Reboot', icon: 'i-lucide-rotate-ccw', onSelect: () => (confirm = 'reboot') },
+			]"
+			:ui="{ viewport: 'main-bg-color' }"
+		>
+			<UButton icon="i-lucide-chevron-down" color="neutral" variant="ghost" :size="size" aria-label="More power actions" />
+		</UDropdownMenu>
+	</div>
+
+	<DashboardModal
+		:open="confirm !== null"
+		:title="confirm === 'shutdown' ? `Shut down ${device.name}?` : `Reboot ${device.name}?`"
+		description="Unsaved work on the device may be lost."
+		icon="i-lucide-alert-triangle"
+		icon-color="amber"
+		@update:open="(open: boolean) => !open && (confirm = null)"
+	>
+		<template #footer>
+			<UButton label="Cancel" color="neutral" variant="ghost" @click="confirm = null" />
+			<UButton
+				:label="confirm === 'shutdown' ? 'Shut down' : 'Reboot'"
+				color="warning"
+				@click="onConfirm"
+			/>
+		</template>
+	</DashboardModal>
+</template>
diff --git a/app/components/devices/StatusBadge.vue b/app/components/devices/StatusBadge.vue
new file mode 100644
index 0000000..53b9831
--- /dev/null
+++ b/app/components/devices/StatusBadge.vue
@@ -0,0 +1,21 @@
+<script setup lang="ts">
+import type { Device } from "~/utils/types";
+
+const { status } = defineProps<{ status: Device["status"] }>();
+
+const display = computed(() => OnlineStates[status.state]);
+const tooltip = computed(() => {
+	const checked = status.checked_at
+		? `Checked ${formatRelative(status.checked_at)}`
+		: "Not checked yet";
+	return status.reason ? `${status.reason} · ${checked}` : checked;
+});
+</script>
+
+<template>
+	<UTooltip :text="tooltip">
+		<UBadge :color="display.color" variant="soft" :icon="display.icon">
+			{{ display.label }}
+		</UBadge>
+	</UTooltip>
+</template>
diff --git a/app/components/form/DateRangePicker.vue b/app/components/form/DateRangePicker.vue
new file mode 100644
index 0000000..b1dfe9d
--- /dev/null
+++ b/app/components/form/DateRangePicker.vue
@@ -0,0 +1,82 @@
+<script setup lang="ts">
+import { CalendarDate, DateFormatter, getLocalTimeZone } from "@internationalized/date";
+
+interface Range {
+	start: Date | null;
+	end: Date | null;
+}
+
+withDefaults(
+	defineProps<{
+		icon?: string;
+	}>(),
+	{
+		icon: "i-lucide-calendar",
+	},
+);
+
+const df = new DateFormatter("en-US", {
+	dateStyle: "medium",
+});
+
+const selected = defineModel<Range>({ required: true });
+
+function toCalendarDate(date: Date) {
+	return new CalendarDate(date.getFullYear(), date.getMonth() + 1, date.getDate());
+}
+
+const calendarRange = computed({
+	get: () => ({
+		start: selected.value.start ? toCalendarDate(selected.value.start) : undefined,
+		end: selected.value.end ? toCalendarDate(selected.value.end) : undefined,
+	}),
+	set: (newValue: { start: CalendarDate | null; end: CalendarDate | null }) => {
+		selected.value = {
+			start: newValue.start ? newValue.start.toDate(getLocalTimeZone()) : null,
+			end: newValue.end ? newValue.end.toDate(getLocalTimeZone()) : null,
+		};
+	},
+});
+
+const inputValue = computed(() => {
+	const { start, end } = selected.value;
+	if (!start) return "Pick a date";
+	if (!end) return df.format(start);
+	return `${df.format(start)} - ${df.format(end)}`;
+});
+
+function resetRange() {
+	selected.value = {
+		start: null,
+		end: null,
+	};
+}
+</script>
+
+<template>
+	<UPopover :content="{ align: 'start' }" :modal="true" :class="$attrs.class">
+		<UInput
+			color="neutral"
+			variant="outline"
+			:icon="$props.icon"
+			:model-value="inputValue"
+			class="group data-[state=open]:bg-elevated"
+		>
+			<template #trailing>
+				<UIcon
+					name="i-lucide-chevron-down"
+					class="size-5 shrink-0 text-dimmed transition-transform duration-200 group-data-[state=open]:rotate-180"
+				/>
+			</template>
+		</UInput>
+
+		<template #content>
+			<div class="flex flex-col gap-2">
+				<UCalendar v-model="calendarRange" class="p-2" :number-of-months="2" range />
+				<div class="px-2 pb-2">
+					<UButton variant="ghost" color="primary" block @click="resetRange">Reset</UButton>
+				</div>
+			</div>
+		</template>
+	</UPopover>
+</template>
diff --git a/app/components/img/AppIcon.vue b/app/components/img/AppIcon.vue
new file mode 100644
index 0000000..a145ffd
--- /dev/null
+++ b/app/components/img/AppIcon.vue
@@ -0,0 +1,7 @@
+<template>
+	<svg xmlns="http://www.w3.org/2000/svg" fill="#0087ff" viewBox="0 0 16 16" role="img" aria-label="NetIgnite">
+		<path
+			d="M11.251.068a.5.5 0 0 1 .227.58L9.677 6.5H13a.5.5 0 0 1 .364.843l-8 8.5a.5.5 0 0 1-.842-.49L6.323 9.5H3a.5.5 0 0 1-.364-.843l8-8.5a.5.5 0 0 1 .615-.09z"
+		/>
+	</svg>
+</template>
diff --git a/app/components/img/AppLogo.vue b/app/components/img/AppLogo.vue
new file mode 100644
index 0000000..2344d6d
--- /dev/null
+++ b/app/components/img/AppLogo.vue
@@ -0,0 +1,30 @@
+<template>
+	<!-- NetIgnite wordmark: the bolt mark, "Net" in white and "Ignite" in brand blue. -->
+	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 37.4605686651 8" role="img" aria-label="NetIgnite">
+		<svg xmlns="http://www.w3.org/2000/svg" width="8" height="8" fill="#0087ff" viewBox="0 0 16 16">
+			<path d="M11.251.068a.5.5 0 0 1 .227.58L9.677 6.5H13a.5.5 0 0 1 .364.843l-8 8.5a.5.5 0 0 1-.842-.49L6.323 9.5H3a.5.5 0 0 1-.364-.843l8-8.5a.5.5 0 0 1 .615-.09z" />
+		</svg>
+		<svg
+			xmlns="http://www.w3.org/2000/svg"
+			x="9"
+			y="1"
+			width="10.3974767001"
+			height="4.6750788431"
+			fill="#ffffff"
+			viewBox="0 10.199999809265137 82.4000015258789 37.04999923706055"
+		>
+			<path d="M1.25 46.75Q0.70 46.75 0.35 46.40Q0 46.05 0 45.50L0 13Q0 12.45 0.35 12.10Q0.70 11.75 1.25 11.75L5.80 11.75Q6.55 11.75 6.90 12.10Q7.25 12.45 7.35 12.65L20.70 33.50L20.70 13Q20.70 12.45 21.05 12.10Q21.40 11.75 21.90 11.75L27.00 11.75Q27.55 11.75 27.90 12.10Q28.25 12.45 28.25 13L28.25 45.50Q28.25 46 27.90 46.38Q27.55 46.75 27.00 46.75L22.40 46.75Q21.65 46.75 21.33 46.38Q21.00 46 20.85 45.85L7.55 25.65L7.55 45.50Q7.55 46.05 7.20 46.40Q6.85 46.75 6.30 46.75L1.25 46.75ZM46.70 47.25Q40.95 47.25 37.58 44.05Q34.20 40.85 34 34.75Q34 34.35 34 33.67Q34 33 34 32.60Q34.20 28.75 35.75 25.97Q37.30 23.20 40.10 21.72Q42.90 20.25 46.65 20.25Q50.85 20.25 53.67 21.97Q56.50 23.70 57.92 26.67Q59.35 29.65 59.35 33.50L59.35 34.65Q59.35 35.15 58.98 35.50Q58.60 35.85 58.10 35.85L41.75 35.85Q41.75 35.90 41.75 36.02Q41.75 36.15 41.75 36.25Q41.80 37.85 42.38 39.17Q42.95 40.50 44.02 41.30Q45.10 42.10 46.60 42.10Q47.85 42.10 48.65 41.75Q49.45 41.40 49.98 40.90Q50.50 40.40 50.75 40.05Q51.20 39.55 51.48 39.42Q51.75 39.30 52.35 39.30L57.55 39.30Q58.05 39.30 58.38 39.58Q58.70 39.85 58.65 40.35Q58.60 41.15 57.83 42.33Q57.05 43.50 55.55 44.63Q54.05 45.75 51.83 46.50Q49.60 47.25 46.70 47.25M41.75 31.30L51.55 31.30L51.55 31.20Q51.55 29.40 50.98 28.07Q50.40 26.75 49.30 26Q48.20 25.25 46.65 25.25Q45.10 25.25 44 26Q42.90 26.75 42.33 28.07Q41.75 29.40 41.75 31.20L41.75 31.30ZM76.85 46.75Q73.75 46.75 71.55 45.73Q69.35 44.70 68.23 42.55Q67.10 40.40 67.10 37.15L67.10 26.65L63.20 26.65Q62.65 26.65 62.30 26.30Q61.95 25.95 61.95 25.40L61.95 22Q61.95 21.45 62.30 21.10Q62.65 20.75 63.20 20.75L67.10 20.75L67.10 12.50Q67.10 11.95 67.48 11.60Q67.85 11.25 68.35 11.25L73.25 11.25Q73.80 11.25 74.15 11.60Q74.50 11.95 74.50 12.50L74.50 20.75L80.75 20.75Q81.25 20.75 81.60 21.10Q81.95 21.45 81.95 22L81.95 25.40Q81.95 25.95 81.60 26.30Q81.25 26.65 80.75 26.65L74.50 26.65L74.50 36.55Q74.50 38.45 75.18 39.52Q75.85 40.60 77.55 40.60L81.20 40.60Q81.70 40.60 82.05 40.95Q82.40 41.30 82.40 41.80L82.40 45.50Q82.40 46.05 82.05 46.40Q81.70 46.75 81.20 46.75L76.85 46.75Z" />
+		</svg>
+		<svg
+			xmlns="http://www.w3.org/2000/svg"
+			x="20.0157734325"
+			y="1"
+			width="17.4447952326"
+			height="6"
+			fill="#0087ff"
+			viewBox="0 10.199999809265137 138.25 47.54999923706055"
+		>
+			<path d="M1.25 46.75Q0.70 46.75 0.35 46.40Q0 46.05 0 45.50L0 13Q0 12.45 0.35 12.10Q0.70 11.75 1.25 11.75L6.90 11.75Q7.45 11.75 7.80 12.10Q8.15 12.45 8.15 13L8.15 45.50Q8.15 46.05 7.80 46.40Q7.45 46.75 6.90 46.75L1.25 46.75ZM27.20 57.75Q23.50 57.75 21.05 56.77Q18.60 55.80 17.18 54.42Q15.75 53.05 15.15 51.70Q14.55 50.35 14.50 49.60Q14.45 49.05 14.85 48.70Q15.25 48.35 15.75 48.35L21.10 48.35Q21.55 48.35 21.88 48.58Q22.20 48.80 22.40 49.35Q22.65 49.95 23.10 50.63Q23.55 51.30 24.48 51.75Q25.40 52.20 26.95 52.20Q28.70 52.20 29.85 51.70Q31.00 51.20 31.58 50Q32.15 48.80 32.15 46.75L32.15 43.40Q30.95 44.70 29.13 45.55Q27.30 46.40 24.65 46.40Q22.05 46.40 20.08 45.58Q18.10 44.75 16.80 43.23Q15.50 41.70 14.80 39.55Q14.10 37.40 14.00 34.70Q13.95 33.35 14.00 32.05Q14.10 29.45 14.80 27.30Q15.50 25.15 16.80 23.57Q18.10 22 20.08 21.13Q22.05 20.25 24.65 20.25Q27.40 20.25 29.35 21.30Q31.30 22.35 32.55 23.90L32.55 22Q32.55 21.50 32.90 21.13Q33.25 20.75 33.75 20.75L38.65 20.75Q39.15 20.75 39.53 21.13Q39.90 21.50 39.90 22L39.95 46.05Q39.95 49.80 38.50 52.40Q37.05 55 34.23 56.38Q31.40 57.75 27.20 57.75M26.95 40.55Q28.75 40.55 29.88 39.73Q31.00 38.90 31.55 37.63Q32.10 36.35 32.15 34.95Q32.20 34.40 32.20 33.38Q32.20 32.35 32.15 31.80Q32.10 30.40 31.55 29.13Q31.00 27.85 29.88 27.05Q28.75 26.25 26.95 26.25Q25.05 26.25 23.95 27.07Q22.85 27.90 22.35 29.25Q21.85 30.60 21.75 32.20Q21.70 33.40 21.75 34.55Q21.85 36.20 22.35 37.55Q22.85 38.90 23.95 39.73Q25.05 40.55 26.95 40.55ZM47.45 46.75Q46.95 46.75 46.60 46.40Q46.25 46.05 46.25 45.50L46.25 22Q46.25 21.45 46.60 21.10Q46.95 20.75 47.45 20.75L52.35 20.75Q52.90 20.75 53.25 21.10Q53.60 21.45 53.60 22L53.60 23.95Q54.90 22.35 56.95 21.30Q59 20.25 61.95 20.25Q64.90 20.25 67.13 21.57Q69.35 22.90 70.63 25.42Q71.90 27.95 71.90 31.55L71.90 45.50Q71.90 46.05 71.53 46.40Q71.15 46.75 70.65 46.75L65.35 46.75Q64.80 46.75 64.45 46.40Q64.10 46.05 64.10 45.50L64.10 31.85Q64.10 29.20 62.83 27.72Q61.55 26.25 59.10 26.25Q56.75 26.25 55.35 27.72Q53.95 29.20 53.95 31.85L53.95 45.50Q53.95 46.05 53.60 46.40Q53.25 46.75 52.75 46.75L47.45 46.75ZM79.10 46.75Q78.60 46.75 78.25 46.40Q77.90 46.05 77.90 45.50L77.90 22Q77.90 21.45 78.25 21.10Q78.60 20.75 79.10 20.75L84.10 20.75Q84.65 20.75 85 21.10Q85.35 21.45 85.35 22L85.35 45.50Q85.35 46.05 85 46.40Q84.65 46.75 84.10 46.75L79.10 46.75M78.95 16.75Q78.45 16.75 78.10 16.40Q77.75 16.05 77.75 15.50L77.75 11.50Q77.75 10.95 78.10 10.57Q78.45 10.20 78.95 10.20L84.20 10.20Q84.75 10.20 85.13 10.57Q85.50 10.95 85.50 11.50L85.50 15.50Q85.50 16.05 85.13 16.40Q84.75 16.75 84.20 16.75L78.95 16.75ZM104.10 46.75Q101 46.75 98.80 45.73Q96.60 44.70 95.48 42.55Q94.35 40.40 94.35 37.15L94.35 26.65L90.45 26.65Q89.90 26.65 89.55 26.30Q89.20 25.95 89.20 25.40L89.20 22Q89.20 21.45 89.55 21.10Q89.90 20.75 90.45 20.75L94.35 20.75L94.35 12.50Q94.35 11.95 94.73 11.60Q95.10 11.25 95.60 11.25L100.50 11.25Q101.05 11.25 101.40 11.60Q101.75 11.95 101.75 12.50L101.75 20.75L108 20.75Q108.50 20.75 108.85 21.10Q109.20 21.45 109.20 22L109.20 25.40Q109.20 25.95 108.85 26.30Q108.50 26.65 108 26.65L101.75 26.65L101.75 36.55Q101.75 38.45 102.43 39.52Q103.10 40.60 104.80 40.60L108.45 40.60Q108.95 40.60 109.30 40.95Q109.65 41.30 109.65 41.80L109.65 45.50Q109.65 46.05 109.30 46.40Q108.95 46.75 108.45 46.75L104.10 46.75ZM125.60 47.25Q119.85 47.25 116.48 44.05Q113.10 40.85 112.90 34.75Q112.90 34.35 112.90 33.67Q112.90 33 112.90 32.60Q113.10 28.75 114.65 25.97Q116.20 23.20 119.00 21.72Q121.80 20.25 125.55 20.25Q129.75 20.25 132.58 21.97Q135.40 23.70 136.83 26.67Q138.25 29.65 138.25 33.50L138.25 34.65Q138.25 35.15 137.88 35.50Q137.50 35.85 137 35.85L120.65 35.85Q120.65 35.90 120.65 36.02Q120.65 36.15 120.65 36.25Q120.70 37.85 121.28 39.17Q121.85 40.50 122.93 41.30Q124.00 42.10 125.50 42.10Q126.75 42.10 127.55 41.75Q128.35 41.40 128.88 40.90Q129.40 40.40 129.65 40.05Q130.10 39.55 130.38 39.42Q130.65 39.30 131.25 39.30L136.45 39.30Q136.95 39.30 137.28 39.58Q137.60 39.85 137.55 40.35Q137.50 41.15 136.73 42.33Q135.95 43.50 134.45 44.63Q132.95 45.75 130.73 46.50Q128.50 47.25 125.60 47.25M120.65 31.30L130.45 31.30L130.45 31.20Q130.45 29.40 129.88 28.07Q129.30 26.75 128.20 26Q127.10 25.25 125.55 25.25Q124.00 25.25 122.90 26Q121.80 26.75 121.23 28.07Q120.65 29.40 120.65 31.20L120.65 31.30Z" />
+		</svg>
+	</svg>
+</template>
diff --git a/app/components/layout/Footer.vue b/app/components/layout/Footer.vue
new file mode 100644
index 0000000..d0dafef
--- /dev/null
+++ b/app/components/layout/Footer.vue
@@ -0,0 +1,86 @@
+<script setup lang="ts">
+import type { FooterColumn } from "@nuxt/ui";
+
+const socialLinks = [
+	{ icon: "i-lucide-github", to: "https://github.com/NetIgnite-project", label: "GitHub" },
+	{ icon: "i-lucide-globe", to: "https://netignite.dev", label: "Website" },
+];
+
+const footerColumns: FooterColumn[] = [
+	{
+		label: "NetIgnite",
+		children: [
+			{ label: "Dashboard", to: "/dashboard" },
+			{ label: "Documentation", to: "https://netignite.dev/docs", target: "_blank" },
+			{ label: "API reference", to: "/api/docs/v1", target: "_blank" },
+		],
+	},
+	{
+		label: "Legal",
+		children: [
+			{ label: "Impressum", to: "https://legal.leicraftmc.de/impressum/", target: "_blank" },
+			{ label: "Datenschutz", to: "https://legal.leicraftmc.de/datenschutz/", target: "_blank" },
+		],
+	},
+];
+
+const currentYear = new Date().getFullYear();
+</script>
+
+<template>
+	<USeparator />
+	<UFooter
+		:ui="{
+			root: 'py-12',
+			container: 'py-0 lg:py-0 lg:gap-x-0 gap-x-0 lg:block',
+			bottom: 'p-0 lg:p-0 mt-8',
+		}"
+	>
+		<UFooterColumns
+			:columns="footerColumns"
+			:ui="{
+				root: 'grid gap-8 sm:grid-cols-2 xl:grid-cols-2 w-full',
+				center: 'xl:col-span-1 grid',
+				label: 'text-slate-100 font-semibold text-base',
+				link: 'text-slate-400 hover:text-primary text-sm sm:text-base inline-block py-1 transition-colors',
+				left: 'mb-0',
+			}"
+		>
+			<template #left>
+				<div class="space-y-4">
+					<ImgAppLogo class="h-8" />
+					<p class="text-base leading-relaxed text-slate-300/80 md:max-w-3xl">
+						Power on devices from anywhere.
+					</p>
+					<div class="flex gap-2 pt-2">
+						<UButton
+							v-for="social in socialLinks"
+							:key="social.label"
+							:to="social.to"
+							target="_blank"
+							:icon="social.icon"
+							color="neutral"
+							variant="ghost"
+							size="lg"
+							:aria-label="social.label"
+							class="transition-transform hover:scale-110 hover:text-primary"
+						/>
+					</div>
+				</div>
+			</template>
+		</UFooterColumns>
+
+		<template #bottom>
+			<UContainer>
+				<div
+					class="flex flex-col items-center border-t border-slate-800 pt-8 text-center md:flex-row md:justify-between md:text-left"
+				>
+					<p class="text-xs text-slate-500 sm:text-sm">
+						&copy; {{ currentYear }} LeiCraft_MC. All rights reserved.
+					</p>
+					<p class="text-xs text-slate-500 sm:text-sm">Built with ❤️ for the community</p>
+				</div>
+			</UContainer>
+		</template>
+	</UFooter>
+</template>
diff --git a/app/components/layout/Header.vue b/app/components/layout/Header.vue
new file mode 100644
index 0000000..47cad2b
--- /dev/null
+++ b/app/components/layout/Header.vue
@@ -0,0 +1,58 @@
+<script setup lang="ts">
+import type { NavigationMenuItem } from "@nuxt/ui";
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+
+const route = useRoute();
+const user = await useUserInfoStore().use();
+
+const links = computed<NavigationMenuItem[]>(() => [
+	{ label: "Dashboard", to: "/dashboard" },
+	{ label: "Docs", to: "https://netignite.dev/docs", target: "_blank" },
+]);
+
+const profileLabel = computed(() => user.value?.display_name || user.value?.username || "Profile");
+
+const loginRoute = computed(() =>
+	route.path.startsWith("/auth")
+		? "/auth/login"
+		: `/auth/login?url=${encodeURIComponent(route.fullPath)}`,
+);
+</script>
+
+<template>
+	<UHeader class="backdrop-blur-xl" title="NetIgnite" to="/dashboard">
+		<template #title>
+			<ImgAppLogo class="h-8" />
+		</template>
+
+		<UNavigationMenu :items="links" />
+
+		<template #body>
+			<UNavigationMenu :items="links" orientation="vertical" class="w-full" />
+		</template>
+
+		<template #right>
+			<div class="flex items-center gap-2">
+				<template v-if="user">
+					<div class="hidden items-center gap-1.5 text-white sm:flex">
+						<UIcon name="i-lucide-user" class="size-4" />
+						<span class="text-sm">{{ profileLabel }}</span>
+					</div>
+					<UButton
+						icon="i-lucide-layout-dashboard"
+						to="/dashboard"
+						color="primary"
+						variant="soft"
+						class="hidden sm:flex"
+					>
+						Dashboard
+					</UButton>
+				</template>
+
+				<UButton v-else icon="i-lucide-log-in" :to="loginRoute" color="primary" variant="solid">
+					Login
+				</UButton>
+			</div>
+		</template>
+	</UHeader>
+</template>
diff --git a/app/composables/stores/useOnboardingStore.ts b/app/composables/stores/useOnboardingStore.ts
new file mode 100644
index 0000000..6c573cc
--- /dev/null
+++ b/app/composables/stores/useOnboardingStore.ts
@@ -0,0 +1,59 @@
+/**
+ * useOnboardingStore — per-user, backend-persisted flag for the one-time `/welcome` onboarding
+ * (`/account/preferences/onboarding`). Drives the first-login redirect in `auth.global.ts`, so
+ * `completed` defaults to `false` until the user finishes (or skips) the welcome page.
+ */
+import { ModifiableAbstractStore } from "~/utils/abstractStore";
+
+export interface OnboardingData {
+	completed: boolean;
+}
+
+class OnboardingStore extends ModifiableAbstractStore<OnboardingData, Partial<OnboardingData>> {
+	private _completed?: ComputedRef<boolean>;
+
+	constructor() {
+		super("onboarding", {
+			enableAutoFetchIfEmpty: true,
+		});
+	}
+
+	protected override async fetchData() {
+		if (!useAppCookies().sessionToken.get().value) {
+			return null;
+		}
+
+		const response = await useAPI((api) => api.getAccountPreferencesOnboarding({}), true);
+		if (!response.success) {
+			return null;
+		}
+
+		return { completed: response.data.completed ?? false } satisfies OnboardingData;
+	}
+
+	/** Reactive, synchronously readable flag; `false` until the state has loaded. */
+	public get completed(): ComputedRef<boolean> {
+		this._completed ??= computed(() => this.useRaw().value?.completed ?? false);
+		return this._completed;
+	}
+
+	/** Updates the local state and persists it to the backend. */
+	override async update(updates: Partial<OnboardingData>) {
+		await this.refreshIfNeeded();
+		const current = this.useRaw();
+
+		const merged: OnboardingData = {
+			completed: updates.completed ?? current.value?.completed ?? false,
+		};
+		current.value = merged;
+
+		const response = await useAPI((api) => api.putAccountPreferencesOnboarding({ body: merged }));
+		if (!response.success) {
+			throw new Error(response.message || "Failed to save onboarding state.");
+		}
+	}
+}
+
+export function useOnboardingStore() {
+	return new OnboardingStore();
+}
diff --git a/app/composables/stores/useUserStore.ts b/app/composables/stores/useUserStore.ts
new file mode 100644
index 0000000..b47bacf
--- /dev/null
+++ b/app/composables/stores/useUserStore.ts
@@ -0,0 +1,49 @@
+/**
+ * useUserInfoStore — the signed-in user's account (`GET /account`), cached in `useState`.
+ *
+ * Auto-fetches on the first `use()` and resolves to `null` without a valid session. `useAPI` runs
+ * with the auth redirect disabled so `auth.global.ts` decides where to send the user. Call
+ * `clear()` on logout. See docs/07-state-and-data.md.
+ */
+import { ModifiableAbstractStore } from "~/utils/abstractStore";
+import type { UserInfo } from "~/utils/types";
+
+class UserInfoStore extends ModifiableAbstractStore<UserInfo, Partial<UserInfo>> {
+	constructor() {
+		super("userInfo", {
+			enableAutoFetchIfEmpty: true,
+		});
+	}
+
+	protected override async fetchData() {
+		if (!useAppCookies().sessionToken.get().value) {
+			return null;
+		}
+
+		const response = await useAPI((api) => api.getAccount({}), true);
+		if (!response.success) {
+			return null;
+		}
+
+		return response.data satisfies UserInfo;
+	}
+
+	override async update(updates: Partial<UserInfo>) {
+		await this.refreshIfNeeded();
+		const current = this.useRaw();
+
+		if (!current.value) {
+			console.error("Cannot update user info: no user is logged in.");
+			return;
+		}
+
+		current.value = {
+			...current.value,
+			...updates,
+		};
+	}
+}
+
+export function useUserInfoStore() {
+	return new UserInfoStore();
+}
diff --git a/app/composables/updateAPIClient.ts b/app/composables/updateAPIClient.ts
new file mode 100644
index 0000000..19f7a3e
--- /dev/null
+++ b/app/composables/updateAPIClient.ts
@@ -0,0 +1,22 @@
+/**
+ * updateAPIClient — point the generated SDK at the API and set (or clear) the bearer token.
+ *
+ * `ignoreResponseError: true` means the client never throws on non-2xx; the
+ * `{ success, code, message, data }` envelope is always returned and callers branch on
+ * `result.success`. `baseURL` is `<appUrl>/api/v1` (or `/api` for unversioned APIs).
+ * See docs/05-api-contract.md and docs/07-state-and-data.md.
+ */
+import { client } from "@/api-client/client.gen";
+import { useRuntimeAppConfigs } from "./useRuntimeAppConfigs";
+
+export function updateAPIClient(token: string | null) {
+	const appUrl = useRuntimeAppConfigs().appUrl.replace(/\/$/, "");
+	const apiURL = `${appUrl}/api/v1`;
+
+	client.setConfig({
+		baseURL: apiURL,
+		// `null` deletes the header; omitting it would keep the previous token
+		headers: { Authorization: token ? `Bearer ${token}` : null },
+		ignoreResponseError: true,
+	});
+}
diff --git a/app/composables/useAPI.ts b/app/composables/useAPI.ts
new file mode 100644
index 0000000..a476d2b
--- /dev/null
+++ b/app/composables/useAPI.ts
@@ -0,0 +1,218 @@
+/**
+ * useAPI — the single gateway to the generated API SDK.
+ *
+ * On the server it applies the session cookie's token and calls the SDK; on the client it reads the session cookie,
+ * applies it to the generated client via `updateAPIClient`, redirects to `/auth/login` on a missing
+ * or 401 token, and always returns the backend's `{ success, code, message, data }` envelope
+ * (errors are normalized into the envelope, never thrown). Callers branch on `result.success`.
+ * See docs/07-state-and-data.md.
+ */
+import * as baseAPIClient from "@/api-client/sdk.gen";
+
+export namespace UseAPITypes {
+	export type APIClient = typeof baseAPIClient;
+
+	export type DefaultReturn<TReturn> = TReturn;
+
+	export type UseAPIReturnType<TReturn> = Promise<
+		| TReturn
+		| {
+				readonly success: false;
+				readonly code: 500;
+				readonly message: string;
+				readonly data: null;
+		  }
+	>;
+
+	export type AsyncDataReturn<TReturn> = {
+		data: Ref<DefaultReturn<TReturn>>;
+		loading: Ref<boolean>;
+		refresh: () => Promise<void>;
+	};
+
+	export type LazyAsyncDataReturn<TReturn> = {
+		data: Ref<DefaultReturn<TReturn>>;
+		loading: Ref<boolean>;
+		refresh: () => Promise<void>;
+	};
+
+	export type AsyncRequestTaskReturn<TReturn> = AsyncRequestTaskWrapper<TReturn>;
+
+	export type LazyAsyncDataRequestReturn<TReturn> = LazyAsyncDataRequestWrapper<TReturn>;
+}
+
+class AsyncRequestTaskWrapper<TReturn> {
+	readonly loading = ref(false);
+
+	constructor(protected readonly handler: () => Promise<TReturn>) {}
+
+	async execute(): Promise<TReturn> {
+		this.loading.value = true;
+		try {
+			return await this.handler();
+		} finally {
+			this.loading.value = false;
+		}
+	}
+}
+
+class LazyAsyncDataRequestWrapper<TReturn> {
+	// 1. The public read-only refs (computed)
+	readonly data: Ref<TReturn | null>;
+	readonly loading: Ref<boolean>;
+
+	// 2. Internal pointers (plain class properties, NOT refs themselves)
+	protected _activeDataRef: Ref<TReturn | null> | null = null;
+	protected _activeLoadingRef: Ref<boolean> | null = null;
+
+	// 3. The "signal" — determines which pointer we are looking at
+	protected _linkSignal = ref(0);
+
+	protected refreshFunction?: () => Promise<void>;
+	protected clearFunction?: () => void;
+
+	constructor(
+		protected readonly name: string,
+		protected readonly handler: () => Promise<TReturn>,
+		immediateFNInit: boolean,
+	) {
+		// Initialize the computed properties ONCE
+		this.data = computed({
+			get: () => {
+				this._linkSignal.value;
+				return this._activeDataRef?.value ?? null;
+			},
+			set: (newValue) => {
+				if (this._activeDataRef) {
+					this._activeDataRef.value = newValue;
+				}
+			},
+		});
+
+		this.loading = computed(() => {
+			this._linkSignal.value;
+			return this._activeLoadingRef?.value ?? false;
+		});
+
+		if (immediateFNInit) {
+			this.init();
+		}
+	}
+
+	public init() {
+		// Do not re-run init if already initialized to avoid replacing refs unnecessarily
+		if (this.refreshFunction) return;
+
+		const { data, refresh, clear, pending } = useLazyAsyncData<TReturn>(this.name, this.handler, {
+			immediate: false,
+		});
+
+		this._activeDataRef = data as Ref<TReturn | null>;
+		this._activeLoadingRef = pending;
+
+		this.refreshFunction = refresh;
+		this.clearFunction = clear;
+
+		// Trigger the signal so the computed properties re-evaluate and find the new refs.
+		this._linkSignal.value++;
+	}
+
+	async fetchData() {
+		if (!this.refreshFunction) {
+			this.init();
+		}
+		if (!this.refreshFunction) {
+			throw new Error("Failed to initialize refresh function.");
+		}
+
+		await this.refreshFunction();
+
+		return this.data;
+	}
+
+	async clearData() {
+		this.clearFunction?.();
+	}
+}
+
+export async function useAPI<TReturn>(
+	handler: (api: UseAPITypes.APIClient) => TReturn,
+	disableAuthRedirect = false,
+): UseAPITypes.UseAPIReturnType<TReturn> {
+	try {
+		if (import.meta.server) {
+			const sessionToken = useAppCookies().sessionToken.get().value;
+			updateAPIClient(sessionToken ?? null);
+			return await handler(baseAPIClient);
+		} else if (import.meta.client) {
+			const sessionToken = useAppCookies().sessionToken.get();
+
+			if (sessionToken.value) {
+				updateAPIClient(sessionToken.value);
+			} else {
+				updateAPIClient(null);
+				if (!disableAuthRedirect) {
+					await navigateTo(`/auth/login?url=${encodeURIComponent(useRoute().fullPath)}`);
+				}
+			}
+
+			const result = await handler(baseAPIClient);
+
+			if ((result as any)?.success === false && (result as any)?.code === 401) {
+				updateAPIClient(null);
+				sessionToken.value = null;
+				if (!disableAuthRedirect) {
+					await navigateTo(`/auth/login?url=${encodeURIComponent(useRoute().fullPath)}`);
+				}
+			}
+			return result;
+		} else {
+			throw new Error("Unknown environment");
+		}
+	} catch (error) {
+		return {
+			success: false,
+			code: 500,
+			message: (error as Error).message ?? "An unknown error occurred.",
+			data: null,
+		} as const;
+	}
+}
+
+export async function useAPIAsyncData<TReturn>(name: string, handler: () => Promise<TReturn>) {
+	const { data, pending: loading, refresh } = await useAsyncData<TReturn>(name, handler);
+
+	return {
+		data: data as Ref<TReturn>,
+		loading,
+		refresh,
+	} satisfies UseAPITypes.AsyncDataReturn<TReturn>;
+}
+
+export async function useAPILazyAsyncData<TReturn>(name: string, handler: () => Promise<TReturn>) {
+	const { data, pending: loading, refresh } = await useLazyAsyncData<TReturn>(name, handler);
+
+	return {
+		data: data as Ref<TReturn>,
+		loading,
+		refresh,
+	} satisfies UseAPITypes.LazyAsyncDataReturn<TReturn>;
+}
+
+export function useAPIAsyncRequestTask<TReturn>(handler: () => Promise<TReturn>) {
+	return new AsyncRequestTaskWrapper<TReturn>(
+		handler,
+	) satisfies UseAPITypes.AsyncRequestTaskReturn<TReturn>;
+}
+
+export function useAPILazyAsyncRequest<TReturn>(
+	name: string,
+	handler: () => Promise<TReturn>,
+	immediateFNInit = false,
+) {
+	return new LazyAsyncDataRequestWrapper<TReturn>(
+		name,
+		handler,
+		immediateFNInit,
+	) satisfies UseAPITypes.LazyAsyncDataRequestReturn<TReturn>;
+}
diff --git a/app/composables/useAppCookies.ts b/app/composables/useAppCookies.ts
new file mode 100644
index 0000000..148f624
--- /dev/null
+++ b/app/composables/useAppCookies.ts
@@ -0,0 +1,44 @@
+/**
+ * useAppCookies — typed session-cookie accessor.
+ *
+ * `AppCookie` wraps `useCookie` so callers do `useAppCookies().sessionToken.get().value` /
+ * `.set(value, options?)`. The cookie name uses the project's `<PREFIX>` (e.g.
+ * `dla_session_token`, `mindcode_session_token`) — keep it in sync with the backend's token
+ * prefix. The session cookie defaults to `secure; sameSite=lax; httpOnly=false` so the client
+ * can read it to feed `updateAPIClient` (see docs/10-auth.md#frontend-session-handling).
+ */
+import type { CookieOptions } from "#app";
+
+type CookieOptionsWithoutReadonly<T> = CookieOptions<T> & {
+	readonly?: false;
+};
+
+const SESSION_COOKIE_OPTIONS: CookieOptionsWithoutReadonly<string | null> = {
+	path: "/",
+	secure: true, // allowed on localhost; required in prod
+	sameSite: "lax",
+	httpOnly: false, // the client must read the token to attach it to the SDK
+};
+
+class AppCookie<T extends string | null | undefined> {
+	constructor(
+		protected readonly name: string,
+		protected readonly options?: CookieOptionsWithoutReadonly<T>,
+	) {}
+
+	get() {
+		return useCookie(this.name);
+	}
+
+	set(value: T, options?: CookieOptionsWithoutReadonly<T>) {
+		const merged = { ...this.options, ...options } as CookieOptionsWithoutReadonly<T> | undefined;
+		useCookie(this.name, merged).value = value;
+	}
+}
+
+export function useAppCookies() {
+	return {
+		// Replace <PREFIX> with your project's prefix (e.g. dla_, nowip_, mindcode_).
+		sessionToken: new AppCookie<string | null>("netignite_session_token", SESSION_COOKIE_OPTIONS),
+	} as const;
+}
diff --git a/app/composables/useAwaitedComputed.ts b/app/composables/useAwaitedComputed.ts
new file mode 100644
index 0000000..d800bdd
--- /dev/null
+++ b/app/composables/useAwaitedComputed.ts
@@ -0,0 +1,63 @@
+/**
+ * useAwaitedComputed — an async `computed()`.
+ *
+ * Pass a getter that returns a `Promise<T>`; it returns a `ComputedRef<T>` that resolves to the
+ * latest value and updates whenever its reactive dependencies change. Awaits the first run before
+ * returning so the initial value is populated. See docs/07-state-and-data.md.
+ */
+import type {
+	ComputedGetter,
+	ComputedRef,
+	DebuggerOptions,
+	WritableComputedOptions,
+	WritableComputedRef,
+} from "vue";
+
+export function useAwaitedComputed<T>(
+	getter: ComputedGetter<Promise<T>>,
+	debugOptions?: DebuggerOptions,
+): Promise<ComputedRef<T>>;
+
+export function useAwaitedComputed<T, S = T>(
+	options: WritableComputedOptions<Promise<T>, S>,
+	debugOptions?: DebuggerOptions,
+): Promise<WritableComputedRef<T, S>>;
+
+export async function useAwaitedComputed<T, S = T>(
+	source: ComputedGetter<Promise<T>> | WritableComputedOptions<Promise<T>, S>,
+	debugOptions?: DebuggerOptions,
+): Promise<ComputedRef<T> | WritableComputedRef<T, S>> {
+	const state = ref<T>() as { value: T };
+
+	let resolveFirst!: () => void;
+	const firstRun = new Promise<void>((r) => (resolveFirst = r));
+	let initialized = false;
+
+	const getter = typeof source === "function" ? source : source.get;
+
+	watchEffect(async (onCleanup) => {
+		let cancelled = false;
+		onCleanup(() => (cancelled = true));
+
+		const value = await getter();
+		if (cancelled) return;
+
+		state.value = value;
+
+		if (!initialized) {
+			initialized = true;
+			resolveFirst();
+		}
+	}, debugOptions);
+
+	await firstRun;
+
+	if (typeof source === "function") {
+		return computed(() => state.value);
+	}
+
+	return computed({
+		get: () => state.value,
+		set: source.set,
+	});
+}
diff --git a/app/composables/useDefaultOnFormError.ts b/app/composables/useDefaultOnFormError.ts
new file mode 100644
index 0000000..bf93b37
--- /dev/null
+++ b/app/composables/useDefaultOnFormError.ts
@@ -0,0 +1,15 @@
+/**
+ * useDefaultOnFormError — `@error` handler for `UForm` that focuses and scrolls to the first
+ * invalid field.
+ */
+import type { FormErrorEvent } from "@nuxt/ui";
+
+export async function useDefaultOnFormError() {
+	return async function onError(event: FormErrorEvent) {
+		if (event?.errors?.[0]?.id) {
+			const element = document.getElementById(event.errors[0].id);
+			element?.focus();
+			element?.scrollIntoView({ behavior: "smooth", block: "center" });
+		}
+	};
+}
diff --git a/app/composables/useDeviceActions.ts b/app/composables/useDeviceActions.ts
new file mode 100644
index 0000000..29acbbb
--- /dev/null
+++ b/app/composables/useDeviceActions.ts
@@ -0,0 +1,82 @@
+import type { Device } from "~/utils/types";
+
+type PowerAction = "power-on" | "shutdown" | "reboot";
+
+const ACTION_TEXTS: Record<PowerAction, { success: string; failure: string }> = {
+	"power-on": { success: "Wake-on-LAN packet sent", failure: "Couldn't power on" },
+	shutdown: { success: "Shutdown requested", failure: "Couldn't shut down" },
+	reboot: { success: "Reboot requested", failure: "Couldn't reboot" },
+};
+
+/** Power actions and status refresh for devices, with toasts and a per-device busy state. */
+export function useDeviceActions() {
+	const toast = useToast();
+	const busy = ref(new Set<number>());
+
+	async function run(device: Pick<Device, "id" | "name">, action: PowerAction) {
+		busy.value.add(device.id);
+		try {
+			const path = { deviceID: device.id };
+			const res = await useAPI((api) =>
+				action === "power-on"
+					? api.postDevicesByDeviceIdPowerOn({ path })
+					: action === "shutdown"
+						? api.postDevicesByDeviceIdShutdown({ path })
+						: api.postDevicesByDeviceIdReboot({ path }),
+			);
+
+			if (res.success) {
+				toast.add({
+					title: ACTION_TEXTS[action].success,
+					description: device.name,
+					color: "success",
+					icon: "i-lucide-check",
+				});
+			} else {
+				toast.add({
+					title: ACTION_TEXTS[action].failure,
+					description: res.message,
+					color: "error",
+					icon: "i-lucide-alert-circle",
+				});
+			}
+			return res.success;
+		} finally {
+			busy.value.delete(device.id);
+		}
+	}
+
+	async function refreshStatus(device: Pick<Device, "id">) {
+		busy.value.add(device.id);
+		try {
+			const res = await useAPI((api) =>
+				api.postDevicesByDeviceIdStatus({ path: { deviceID: device.id } }),
+			);
+			return res.success ? res.data : null;
+		} finally {
+			busy.value.delete(device.id);
+		}
+	}
+
+	async function setFavorite(device: Pick<Device, "id">, favorite: boolean) {
+		const path = { deviceID: device.id };
+		const res = await useAPI((api) =>
+			favorite
+				? api.putDevicesByDeviceIdFavorite({ path })
+				: api.deleteDevicesByDeviceIdFavorite({ path }),
+		);
+		if (!res.success) {
+			toast.add({ title: "Couldn't update favorites", description: res.message, color: "error" });
+		}
+		return res.success;
+	}
+
+	return {
+		isBusy: (device: Pick<Device, "id">) => busy.value.has(device.id),
+		powerOn: (device: Pick<Device, "id" | "name">) => run(device, "power-on"),
+		shutdown: (device: Pick<Device, "id" | "name">) => run(device, "shutdown"),
+		reboot: (device: Pick<Device, "id" | "name">) => run(device, "reboot"),
+		refreshStatus,
+		setFavorite,
+	};
+}
diff --git a/app/composables/useGravatarURL.ts b/app/composables/useGravatarURL.ts
new file mode 100644
index 0000000..75537ac
--- /dev/null
+++ b/app/composables/useGravatarURL.ts
@@ -0,0 +1,15 @@
+/**
+ * useGravatarURL — Gravatar image URL for an email address (SHA-256 of the trimmed,
+ * lower-cased address, as Gravatar requires).
+ */
+async function sha256(data: string): Promise<string> {
+	const hashBuffer = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(data));
+	return Array.from(new Uint8Array(hashBuffer))
+		.map((b) => b.toString(16).padStart(2, "0"))
+		.join("");
+}
+
+export async function useGravatarURL(email: string): Promise<string> {
+	const hash = await sha256(email.trim().toLowerCase());
+	return `https://0.gravatar.com/avatar/${hash}`;
+}
diff --git a/app/composables/usePageSeo.ts b/app/composables/usePageSeo.ts
new file mode 100644
index 0000000..e4dc3e1
--- /dev/null
+++ b/app/composables/usePageSeo.ts
@@ -0,0 +1,57 @@
+/**
+ * usePageSeo — one composable for per-page SEO.
+ *
+ * Static and marketing sites (Website, Legal-Website, Personal-Website) historically inlined
+ * `useSeoMeta` + `useHead` per page, which drifts. This wraps the common case: title/description,
+ * a canonical link, optional OpenGraph, and optional JSON-LD. Copy into `app/composables/`.
+ *
+ * See docs/06-frontend-nuxt.md#static-content-sites.
+ */
+type JsonLd = Record<string, unknown> & { "@type"?: string };
+
+interface PageSeoOptions {
+	title: string;
+	description?: string;
+	/**
+	 * Canonical URL path or absolute URL; defaults to the current route. Paths resolve against
+	 * `runtimeConfig.public.appUrl`.
+	 */
+	canonical?: string;
+	ogTitle?: string;
+	ogImage?: string;
+	noindex?: boolean;
+	/** A JSON-LD block (`Person`, `SoftwareApplication`, `BreadcrumbList`, …). */
+	jsonLd?: JsonLd | JsonLd[];
+}
+
+export function usePageSeo(options: PageSeoOptions) {
+	const route = useRoute();
+	const appUrl = useRuntimeConfig().public.appUrl as string | undefined;
+	// Canonical and og:url must be absolute; an absolute `options.canonical` passes through as is.
+	const path = options.canonical ?? route.path;
+	const canonical = appUrl ? new URL(path, appUrl).href : path;
+
+	useSeoMeta({
+		title: options.title,
+		description: options.description,
+		ogTitle: options.ogTitle ?? options.title,
+		ogDescription: options.description,
+		ogImage: options.ogImage,
+		ogUrl: canonical,
+		robots: options.noindex ? "noindex, nofollow" : "index, follow",
+	});
+
+	useHead({
+		link: [{ rel: "canonical", href: canonical }],
+	});
+
+	if (options.jsonLd) {
+		const blocks = Array.isArray(options.jsonLd) ? options.jsonLd : [options.jsonLd];
+		useHead({
+			script: blocks.map((block) => ({
+				type: "application/ld+json",
+				innerHTML: JSON.stringify(block),
+			})),
+		});
+	}
+}
diff --git a/app/composables/useRuntimeAppConfigs.ts b/app/composables/useRuntimeAppConfigs.ts
new file mode 100644
index 0000000..6b4d31a
--- /dev/null
+++ b/app/composables/useRuntimeAppConfigs.ts
@@ -0,0 +1,14 @@
+/**
+ * useRuntimeAppConfigs — typed access to publicRuntimeConfig.
+ *
+ * The template exposes `apiUrl` and `appUrl` from `nuxt.config.ts` under `publicRuntimeConfig`.
+ * This composable wraps them with safe fallbacks for SSR and client.
+ * See docs/05-api-contract.md and docs/07-state-and-data.md.
+ */
+export function useRuntimeAppConfigs() {
+	const config = useRuntimeConfig();
+	return {
+		apiUrl: (config.public.apiUrl as string | undefined) ?? "",
+		appUrl: (config.public.appUrl as string | undefined) ?? "",
+	} as const;
+}
diff --git a/app/composables/useSubrouterInjectedData.ts b/app/composables/useSubrouterInjectedData.ts
new file mode 100644
index 0000000..4c17aeb
--- /dev/null
+++ b/app/composables/useSubrouterInjectedData.ts
@@ -0,0 +1,87 @@
+import type { UtilityTypes } from "~/utils/types";
+import type { UseAPITypes } from "./useAPI";
+
+export namespace UseSubrouterInjectedDataTypes {
+	export type SubrouterInjectedData<T> = UseAPITypes.AsyncDataReturn<T>;
+
+	export interface SubrouterInjectedDataWithNew<T, NewT, IsNew extends boolean>
+		extends UseAPITypes.AsyncDataReturn<IsNew extends true ? NewT : T> {
+		isNew: IsNew;
+	}
+
+	export interface SubrouterInjectedDataWithNewProvideArgs<T, NewT, IsNew extends true>
+		extends UtilityTypes.SomePartial<
+			SubrouterInjectedDataWithNew<T, NewT, IsNew>,
+			"loading" | "refresh"
+		> {}
+
+	export type SubrouterInjectedDataUnion<
+		T,
+		NewT,
+		IncludeNew extends boolean,
+	> = IncludeNew extends true
+		? SubrouterInjectedDataWithNew<T, NewT, true> | SubrouterInjectedDataWithNew<T, NewT, false>
+		: SubrouterInjectedData<T>;
+
+	export type SubrouterInjectedDataProvideArgsUnion<
+		T,
+		NewT,
+		IncludeNew extends boolean,
+	> = IncludeNew extends true
+		?
+				| SubrouterInjectedDataWithNewProvideArgs<T, NewT, true>
+				| SubrouterInjectedDataWithNew<T, NewT, false>
+		: SubrouterInjectedData<T>;
+}
+
+class SubrouterInjectedDataHandler<T, NewT, IncludeNew extends boolean = false> {
+	constructor(
+		protected readonly key: string,
+		protected readonly includeNew: IncludeNew,
+	) {}
+
+	public inject() {
+		return inject(this.key) as UseSubrouterInjectedDataTypes.SubrouterInjectedDataUnion<
+			T,
+			NewT,
+			IncludeNew
+		>;
+	}
+
+	public provide<
+		DataT extends UseSubrouterInjectedDataTypes.SubrouterInjectedDataProvideArgsUnion<
+			T,
+			NewT,
+			IncludeNew
+		>,
+	>(data: DataT) {
+		const finalData = { ...data };
+
+		if ((data as any).isNew && this.includeNew) {
+			if (!finalData.loading) {
+				finalData.loading = ref(false);
+			}
+			if (!finalData.refresh) {
+				finalData.refresh = async () => void 0;
+			}
+		}
+
+		provide(this.key, finalData);
+	}
+}
+
+export function useSubrouterInjectedData<T, NewT extends never = never>(
+	key: string,
+	includeNew?: false,
+): SubrouterInjectedDataHandler<T, NewT, false>;
+export function useSubrouterInjectedData<T, NewT>(
+	key: string,
+	includeNew: true,
+): SubrouterInjectedDataHandler<T, NewT, true>;
+export function useSubrouterInjectedData<T, NewT>(
+	key: string,
+	includeNew: boolean,
+): SubrouterInjectedDataHandler<T, NewT, boolean>;
+export function useSubrouterInjectedData(key: string, includeNew = false) {
+	return new SubrouterInjectedDataHandler(key, includeNew);
+}
diff --git a/app/composables/useSubrouterPathDynamics.ts b/app/composables/useSubrouterPathDynamics.ts
new file mode 100644
index 0000000..8b23682
--- /dev/null
+++ b/app/composables/useSubrouterPathDynamics.ts
@@ -0,0 +1,119 @@
+import type { BreadcrumbItem, NavigationMenuItem } from "@nuxt/ui";
+import { SimpleRouteMatcher } from "~/utils/routeMatcher";
+
+type NavigationMenuItemWithoutTo = NavigationMenuItem & { to?: any };
+
+export namespace UseSubrouterPathDynamics {
+	export interface PathDynamicValues {
+		breadcrumbItems: BreadcrumbItem[];
+	}
+
+	export interface RichPathDynamicValues extends PathDynamicValues {
+		seoSettings: {
+			title?: string;
+			description: string;
+		} & Parameters<typeof useSeoMeta>[0];
+	}
+
+	export interface SubrouterPathDynamicsValue extends NavigationMenuItemWithoutTo {
+		isNavLink: boolean;
+		getDynamicValues: (
+			routeParams: Record<string, string>,
+		) => Promise<RichPathDynamicValues> | RichPathDynamicValues;
+	}
+
+	export interface RoutesConfig {
+		[path: string]: SubrouterPathDynamicsValue;
+	}
+
+	export interface SubrouterPathDynamicsSettings {
+		baseTitle: string;
+		basebreadcrumbItems?: BreadcrumbItem[];
+		/**
+		 * The path dynamics for each subrouter path.
+		 * Example:
+		 * {
+		 *   '/dashboard/packages/[package_name]': { ... },
+		 *   '/dashboard/packages/[package_name]/releases': { ... },
+		 */
+		routes: Ref<RoutesConfig> | RoutesConfig;
+	}
+
+	export type SubrouterPathDynamicsReturn = {
+		pathDynamicValues: Ref<PathDynamicValues>;
+		links: NavigationMenuItem[];
+	};
+}
+
+class SubrouterPathDynamics<
+	Settings extends UseSubrouterPathDynamics.SubrouterPathDynamicsSettings,
+> {
+	readonly links: Settings["routes"] extends Ref<any>
+		? Ref<NavigationMenuItem[][]>
+		: NavigationMenuItem[][];
+
+	constructor(private readonly options: Settings) {
+		if (isRef(this.options.routes)) {
+			//@ts-expect-error
+			this.links = computed(() => {
+				const links: NavigationMenuItem[] = [];
+				for (const [path, dynamics] of Object.entries(this.options.routes.value)) {
+					if (dynamics.isNavLink) {
+						links.push({
+							...dynamics,
+							to: path,
+						});
+					}
+				}
+				return [links];
+			});
+		} else {
+			const links: NavigationMenuItem[] = [];
+			for (const [path, dynamics] of Object.entries(options.routes)) {
+				if (dynamics.isNavLink) {
+					links.push({
+						...dynamics,
+						to: path,
+					});
+				}
+			}
+			//@ts-expect-error
+			this.links = [links];
+		}
+	}
+
+	async getPathDynamicValues(path: string): Promise<UseSubrouterPathDynamics.RichPathDynamicValues> {
+		const breadcrumbItems: BreadcrumbItem[] = [...(this.options.basebreadcrumbItems ?? [])];
+
+		const routeSettings = await SimpleRouteMatcher.match(
+			path,
+			Object.keys(isRef(this.options.routes) ? this.options.routes.value : this.options.routes),
+		);
+		const routeDynamics = routeSettings
+			? (isRef(this.options.routes) ? this.options.routes.value : this.options.routes)[
+					routeSettings.route
+				]
+			: undefined;
+		if (!routeSettings || !routeDynamics) {
+			return { breadcrumbItems, seoSettings: { title: this.options.baseTitle, description: "" } };
+		}
+
+		const dynamicValues = await routeDynamics.getDynamicValues(routeSettings.params);
+		breadcrumbItems.push(...dynamicValues.breadcrumbItems);
+
+		const seoSettings = {
+			...dynamicValues.seoSettings,
+			title: dynamicValues.seoSettings.title
+				? `${dynamicValues.seoSettings.title} | ${this.options.baseTitle}`
+				: this.options.baseTitle,
+		};
+
+		return { breadcrumbItems, seoSettings };
+	}
+}
+
+export function useSubrouterPathDynamics<
+	Settings extends UseSubrouterPathDynamics.SubrouterPathDynamicsSettings,
+>(options: Settings) {
+	return new SubrouterPathDynamics<Settings>(options);
+}
diff --git a/app/error.vue b/app/error.vue
new file mode 100644
index 0000000..b9771e2
--- /dev/null
+++ b/app/error.vue
@@ -0,0 +1,19 @@
+<script setup lang="ts">
+import type { NuxtError } from "#app";
+
+defineProps<{
+	error: NuxtError;
+}>();
+</script>
+
+<template>
+	<div class="main-bg-color flex min-h-screen flex-col text-slate-100">
+		<LayoutHeader />
+
+		<UMain class="flex-1">
+			<UError :error="error" />
+		</UMain>
+
+		<LayoutFooter />
+	</div>
+</template>
diff --git a/app/layouts/auth.vue b/app/layouts/auth.vue
new file mode 100644
index 0000000..9b8b4bc
--- /dev/null
+++ b/app/layouts/auth.vue
@@ -0,0 +1,20 @@
+<template>
+	<NuxtLoadingIndicator color="var(--ui-primary)" position="top" />
+
+	<div class="main-bg-color flex min-h-screen flex-col text-slate-100">
+		<LayoutHeader />
+
+		<UMain class="relative flex-1">
+			<div
+				class="pointer-events-none absolute inset-0 bg-linear-to-b from-transparent via-primary/5 to-transparent"
+			></div>
+			<div class="flex min-h-[calc(100vh-80px)] items-center justify-center p-4">
+				<UPageCard class="w-full max-w-md border-slate-800">
+					<slot />
+				</UPageCard>
+			</div>
+		</UMain>
+
+		<LayoutFooter />
+	</div>
+</template>
diff --git a/app/layouts/dashboard.vue b/app/layouts/dashboard.vue
new file mode 100644
index 0000000..e0d7acd
--- /dev/null
+++ b/app/layouts/dashboard.vue
@@ -0,0 +1,136 @@
+<script setup lang="ts">
+import type { NavigationMenuItem } from "@nuxt/ui";
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+
+const user = await useUserInfoStore().use();
+const isAdmin = computed(() => user.value?.role === "admin");
+
+const mainItems: NavigationMenuItem[] = [
+	{
+		label: "Overview",
+		icon: "i-lucide-layout-dashboard",
+		to: "/dashboard",
+		exact: true,
+	},
+	{
+		label: "Devices",
+		icon: "i-lucide-monitor",
+		to: "/dashboard/devices",
+	},
+	{
+		label: "Agents",
+		icon: "i-lucide-radio-tower",
+		to: "/dashboard/agents",
+	},
+];
+
+const settingsItems: NavigationMenuItem[] = [
+	{
+		label: "Settings",
+		icon: "i-lucide-settings",
+		type: "label",
+	},
+	{
+		label: "General",
+		icon: "i-lucide-user",
+		to: "/dashboard/settings",
+		exact: true,
+	},
+	{
+		label: "Security",
+		icon: "i-lucide-shield",
+		to: "/dashboard/settings/security",
+	},
+	{
+		label: "API Keys",
+		icon: "i-lucide-key",
+		to: "/dashboard/apikeys",
+	},
+];
+
+const adminItems: NavigationMenuItem[] = [
+	{
+		label: "Admin",
+		icon: "i-lucide-shield",
+		type: "label",
+	},
+	{
+		label: "Users",
+		icon: "i-lucide-users",
+		to: "/dashboard/admin/users",
+	},
+	{
+		label: "Server Settings",
+		icon: "i-lucide-sliders-horizontal",
+		to: "/dashboard/admin/settings",
+	},
+];
+
+const footerItems: NavigationMenuItem[] = [
+	{
+		label: "Documentation",
+		icon: "i-lucide-book-open",
+		to: "https://netignite.dev/docs",
+		target: "_blank",
+	},
+	{
+		label: "API Reference",
+		icon: "i-lucide-braces",
+		to: "/api/docs/v1",
+		target: "_blank",
+	},
+];
+</script>
+
+<template>
+	<NuxtLoadingIndicator color="var(--ui-primary)" position="top" />
+
+	<UDashboardGroup class="main-bg-color text-slate-100">
+		<UDashboardSidebar
+			collapsible
+			resizable
+			:ui="{
+				header: 'main-bg-color',
+				body: 'main-bg-color',
+				content: 'main-bg-color',
+				footer: 'border-t border-default main-bg-color',
+			}"
+			:min-size="18"
+			:default-size="20"
+			:max-size="30"
+		>
+			<template #header="{ collapsed }">
+				<NuxtLink to="/dashboard" :class="`${!collapsed ? 'ms-2.5' : ''} flex items-center gap-1.5`">
+					<ImgAppLogo v-if="!collapsed" class="h-7" />
+					<ImgAppIcon v-else class="h-8 w-8" />
+				</NuxtLink>
+			</template>
+
+			<template #default="{ collapsed }">
+				<UNavigationMenu :collapsed="collapsed" :items="mainItems" orientation="vertical" />
+
+				<UNavigationMenu :collapsed="collapsed" :items="settingsItems" orientation="vertical" />
+
+				<UNavigationMenu
+					v-if="isAdmin"
+					:collapsed="collapsed"
+					:items="adminItems"
+					orientation="vertical"
+				/>
+
+				<UNavigationMenu
+					:collapsed="collapsed"
+					:items="footerItems"
+					orientation="vertical"
+					class="mt-auto"
+				/>
+			</template>
+
+			<template #footer="{ collapsed }">
+				<DashboardUserMenu :collapsed="collapsed" />
+			</template>
+		</UDashboardSidebar>
+
+		<slot />
+	</UDashboardGroup>
+</template>
diff --git a/app/layouts/default.vue b/app/layouts/default.vue
new file mode 100644
index 0000000..61dc618
--- /dev/null
+++ b/app/layouts/default.vue
@@ -0,0 +1,11 @@
+<template>
+	<div class="main-bg-color flex min-h-screen flex-col text-slate-100">
+		<LayoutHeader />
+
+		<UMain class="flex-1">
+			<slot />
+		</UMain>
+
+		<LayoutFooter />
+	</div>
+</template>
diff --git a/app/layouts/onboarding.vue b/app/layouts/onboarding.vue
new file mode 100644
index 0000000..7360b4b
--- /dev/null
+++ b/app/layouts/onboarding.vue
@@ -0,0 +1,18 @@
+<template>
+	<div class="main-bg-color flex min-h-screen flex-col text-slate-100">
+		<UMain class="flex-1">
+			<div class="flex min-h-screen flex-col items-center justify-center px-4 py-10">
+				<ImgAppLogo class="mb-8 h-8" />
+				<div class="w-full max-w-2xl">
+					<slot />
+				</div>
+			</div>
+		</UMain>
+
+		<UFooter class="bg-neutral-900">
+			<div class="text-center text-sm text-slate-500">
+				&copy; {{ new Date().getFullYear() }} LeiCraft_MC. All rights reserved.
+			</div>
+		</UFooter>
+	</div>
+</template>
diff --git a/app/middleware/auth.global.ts b/app/middleware/auth.global.ts
new file mode 100644
index 0000000..ddbd0e8
--- /dev/null
+++ b/app/middleware/auth.global.ts
@@ -0,0 +1,71 @@
+/**
+ * auth.global.ts — session-aware route guard.
+ *
+ * Tune the constants below per project:
+ * - `/auth/*` is for signed-out users; a valid session is sent on to `HOME_ROUTE`.
+ * - `PROTECTED_PREFIXES` need a valid session, otherwise → `/auth/login?url=…`.
+ * - `ADMIN_PREFIXES` additionally need `role === "admin"`, otherwise → `HOME_ROUTE`.
+ * - `PUBLIC_ROUTES` are exceptions inside a protected prefix (`[param]` segments supported).
+ * - `ONBOARDING_ROUTE` needs a session; with `REQUIRE_ONBOARDING`, signed-in users who haven't
+ *   completed it are sent there before any other protected page.
+ * - Everything else (landing page, marketing pages) is public.
+ *
+ * Login-only app without a public landing page: `PROTECTED_PREFIXES = ["/"]`, `HOME_ROUTE = "/"`.
+ * See docs/10-auth.md.
+ */
+import { useOnboardingStore } from "~/composables/stores/useOnboardingStore";
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+
+const HOME_ROUTE = "/dashboard";
+const PROTECTED_PREFIXES = ["/dashboard"];
+const ADMIN_PREFIXES = ["/dashboard/admin"];
+const PUBLIC_ROUTES: string[] = [];
+const ONBOARDING_ROUTE = "/welcome";
+const REQUIRE_ONBOARDING = true;
+
+function hasPrefix(path: string, prefixes: string[]) {
+	return prefixes.some(
+		(prefix) => prefix === "/" || path === prefix || path.startsWith(`${prefix}/`),
+	);
+}
+
+export default defineNuxtRouteMiddleware(async (to) => {
+	const sessionToken = useAppCookies().sessionToken;
+	const token = sessionToken.get().value;
+	const store = useUserInfoStore();
+
+	if (hasPrefix(to.path, ["/auth"])) {
+		if (!token) return;
+		if (store.isValid(await store.use())) return navigateTo(HOME_ROUTE);
+
+		// Token exists but is invalid or expired: clear it and stay on the auth page.
+		sessionToken.set(null);
+		return;
+	}
+
+	if (!hasPrefix(to.path, [...PROTECTED_PREFIXES, ONBOARDING_ROUTE])) return;
+	if (SimpleRouteMatcher.match(to.path, PUBLIC_ROUTES)) return;
+
+	const loginRoute = `/auth/login?url=${encodeURIComponent(to.fullPath)}`;
+	if (!token) return navigateTo(loginRoute);
+
+	const user = await store.use();
+	if (!store.isValid(user)) {
+		sessionToken.set(null);
+		return navigateTo(loginRoute);
+	}
+
+	// First-login gate. `/welcome` itself is excluded so it never redirect-loops; the welcome
+	// page marks onboarding complete when the user finishes or skips it.
+	if (REQUIRE_ONBOARDING && to.path !== ONBOARDING_ROUTE) {
+		const onboardingStore = useOnboardingStore();
+		await onboardingStore.refreshIfNeeded();
+		if (!onboardingStore.completed.value) {
+			return navigateTo(ONBOARDING_ROUTE);
+		}
+	}
+
+	if (hasPrefix(to.path, ADMIN_PREFIXES) && user.value.role !== "admin") {
+		return navigateTo(HOME_ROUTE);
+	}
+});
diff --git a/app/middleware/rewrites.global.ts b/app/middleware/rewrites.global.ts
new file mode 100644
index 0000000..e51b726
--- /dev/null
+++ b/app/middleware/rewrites.global.ts
@@ -0,0 +1,10 @@
+/**
+ * rewrites.global.ts — strip trailing slashes (except on `/`).
+ *
+ * Drop into `app/middleware/rewrites.global.ts`. Nuxt route middleware runs on every navigation.
+ */
+export default defineNuxtRouteMiddleware((to) => {
+	if (to.path.endsWith("/") && to.path !== "/") {
+		return navigateTo(to.path.slice(0, -1), { replace: true });
+	}
+});
diff --git a/app/pages/auth/forgot-password.vue b/app/pages/auth/forgot-password.vue
new file mode 100644
index 0000000..817d535
--- /dev/null
+++ b/app/pages/auth/forgot-password.vue
@@ -0,0 +1,99 @@
+<script setup lang="ts">
+import type { AuthFormField, FormSubmitEvent } from "@nuxt/ui";
+import * as z from "zod";
+
+definePageMeta({
+	layout: "auth",
+});
+
+useSeoMeta({
+	title: "Forgot Password | NetIgnite",
+	description: "Reset your password",
+});
+
+const toast = useToast();
+
+const fields: AuthFormField[] = [
+	{
+		name: "email",
+		type: "email",
+		label: "Email Address",
+		placeholder: "Enter your email address",
+		required: true,
+	},
+];
+
+const schema = z.object({
+	email: z.email("Invalid email address").trim(),
+});
+
+type Schema = z.output<typeof schema>;
+
+const submitted = ref(false);
+const loading = ref(false);
+
+async function onSubmit(payload: FormSubmitEvent<Schema>) {
+	if (loading.value) return;
+	loading.value = true;
+
+	const result = await useAPI(
+		(api) => api.postAuthResetPasswordRequest({ body: payload.data }),
+		true,
+	);
+
+	loading.value = false;
+
+	if (result.success) {
+		submitted.value = true;
+	} else {
+		toast.add({
+			title: "Request Failed",
+			description: result.message || "An error occurred. Please try again later.",
+			icon: "i-lucide-alert-circle",
+			color: "error",
+		});
+	}
+}
+</script>
+
+<template>
+	<UAuthForm
+		v-if="!submitted"
+		:schema="schema"
+		title="Forgot Password"
+		description="Reset your password by entering your email address below."
+		icon="i-lucide-mail"
+		:fields="fields"
+		:submit="{ label: loading ? 'Sending...' : 'Send Reset Link', loading, disabled: loading }"
+		@submit="onSubmit"
+	>
+		<template #footer>
+			<div class="text-center text-sm">
+				Remembered your password?
+				<NuxtLink to="/auth/login" class="text-primary hover:underline">Login here</NuxtLink>
+			</div>
+		</template>
+	</UAuthForm>
+
+	<div v-else class="space-y-4 text-center">
+		<div class="flex justify-center">
+			<div class="rounded-full bg-primary/10 p-3">
+				<UIcon name="i-lucide-mail-check" class="size-8 text-primary" />
+			</div>
+		</div>
+		<h2 class="text-xl font-semibold">Check Your Email</h2>
+		<p class="mx-auto max-w-sm text-sm text-slate-400">
+			If an account with that email address exists, we've sent a password reset link. Please
+			check your inbox and follow the instructions.
+		</p>
+		<p class="text-xs text-slate-400">
+			Didn't receive an email?
+			<button type="button" class="text-primary hover:underline" @click="submitted = false">
+				Try again
+			</button>
+		</p>
+		<div class="pt-4">
+			<NuxtLink to="/auth/login" class="text-sm text-primary hover:underline">Back to login</NuxtLink>
+		</div>
+	</div>
+</template>
diff --git a/app/pages/auth/login.vue b/app/pages/auth/login.vue
new file mode 100644
index 0000000..430b065
--- /dev/null
+++ b/app/pages/auth/login.vue
@@ -0,0 +1,132 @@
+<script setup lang="ts">
+import type { AuthFormField, FormSubmitEvent } from "@nuxt/ui";
+import * as z from "zod";
+import { useOnboardingStore } from "~/composables/stores/useOnboardingStore";
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+
+definePageMeta({
+	layout: "auth",
+});
+
+useSeoMeta({
+	title: "Login | NetIgnite",
+	description: "Login to your account",
+});
+
+const route = useRoute();
+const toast = useToast();
+
+// Only follow internal redirects (`/…`, not `//evil.example`); default to the dashboard.
+const requestedUrl = route.query.url?.toString() ?? "";
+const redirectUrl =
+	requestedUrl.startsWith("/") && !requestedUrl.startsWith("//") ? requestedUrl : "/dashboard";
+
+const fields: AuthFormField[] = [
+	{
+		name: "username",
+		type: "text",
+		label: "Username",
+		placeholder: "Enter your username",
+		required: true,
+	},
+	{
+		name: "password",
+		label: "Password",
+		type: "password",
+		placeholder: "Enter your password",
+		required: true,
+	},
+	{
+		name: "remember",
+		label: "Remember me",
+		type: "checkbox",
+		description: "You will stay logged in for 30 days.",
+	},
+];
+
+const schema = z.object({
+	username: z.string("Username is required").trim().min(1, "Username is required"),
+	password: z.string("Password is required").min(1, "Password is required"),
+	remember: z.boolean().optional(),
+});
+
+type Schema = z.output<typeof schema>;
+
+const loading = ref(false);
+
+// The sign-up link is only shown while an admin has enabled public registration.
+const registration = await useAPILazyAsyncData("auth-registration", async () => {
+	const res = await useAPI((api) => api.getAuthRegistration({}), true);
+	return res.success ? res.data.enabled : false;
+});
+
+async function onSubmit(payload: FormSubmitEvent<Schema>) {
+	loading.value = true;
+
+	const result = await useAPI(
+		(api) =>
+			api.postAuthLogin({
+				body: { username: payload.data.username, password: payload.data.password },
+			}),
+		true,
+	);
+
+	loading.value = false;
+
+	if (!result.success) {
+		const invalidCredentials = (result.code as number) === 401;
+		toast.add({
+			title: invalidCredentials ? "Invalid Username or Password" : "Login Failed",
+			description: invalidCredentials
+				? "Please check your credentials and try again."
+				: result.message || "An error occurred during login. Please try again later.",
+			icon: "i-lucide-alert-circle",
+			color: "error",
+		});
+		return;
+	}
+
+	updateAPIClient(result.data.token);
+	useAppCookies().sessionToken.set(result.data.token, {
+		maxAge: payload.data.remember ? 60 * 60 * 24 * 30 : undefined, // 30 days only with "remember me"
+	});
+
+	// Fresh per-user state for the new session.
+	await useUserInfoStore().refresh();
+	await useOnboardingStore().clear();
+
+	toast.add({
+		title: "Login Successful",
+		description: "You have been logged in successfully.",
+		icon: "i-lucide-check",
+		color: "success",
+	});
+
+	await navigateTo(redirectUrl);
+}
+</script>
+
+<template>
+	<UAuthForm
+		:schema="schema"
+		title="Login"
+		description="Enter your credentials to access your account."
+		icon="i-lucide-user"
+		:fields="fields"
+		:submit="{ label: 'Login', loading }"
+		@submit="onSubmit"
+	>
+		<template #footer>
+			<div class="text-center text-sm">
+				Forgot your password?
+				<NuxtLink to="/auth/forgot-password" class="text-primary hover:underline">
+					Reset here
+				</NuxtLink>
+			</div>
+			<div v-if="registration.data.value" class="mt-2 text-center text-sm">
+				Don't have an account?
+				<NuxtLink to="/auth/signup" class="text-primary hover:underline">Sign up</NuxtLink>
+			</div>
+		</template>
+	</UAuthForm>
+</template>
diff --git a/app/pages/auth/reset-password.vue b/app/pages/auth/reset-password.vue
new file mode 100644
index 0000000..3467dac
--- /dev/null
+++ b/app/pages/auth/reset-password.vue
@@ -0,0 +1,121 @@
+<script setup lang="ts">
+import type { AuthFormField, FormError, FormSubmitEvent } from "@nuxt/ui";
+import * as z from "zod";
+
+definePageMeta({
+	layout: "auth",
+});
+
+useSeoMeta({
+	title: "Reset Password | NetIgnite",
+	description: "Reset your password",
+});
+
+const route = useRoute();
+const toast = useToast();
+
+// The emailed link is `{APP_URL}/auth/reset-password?token=…` (see docs/10-auth.md).
+const resetToken = route.query.token?.toString() ?? "";
+
+const fields: AuthFormField[] = [
+	{
+		name: "password",
+		label: "New Password",
+		type: "password",
+		placeholder: "Enter a new password",
+		required: true,
+	},
+	{
+		name: "confirm_password",
+		label: "Confirm New Password",
+		type: "password",
+		placeholder: "Re-enter your new password",
+		required: true,
+	},
+];
+
+const schema = z.object({
+	password: z
+		.string("Password is required")
+		.min(8, "Must be at least 8 characters")
+		.max(128, "Must be at most 128 characters"),
+	confirm_password: z.string("Confirm Password is required").min(1, "Confirm Password is required"),
+});
+
+type Schema = z.output<typeof schema>;
+
+function validate(state: Partial<Schema>): FormError[] {
+	const errors: FormError[] = [];
+	if (state.password && state.confirm_password && state.password !== state.confirm_password) {
+		errors.push({ name: "confirm_password", message: "Passwords do not match" });
+	}
+	return errors;
+}
+
+const loading = ref(false);
+
+async function onSubmit(payload: FormSubmitEvent<Schema>) {
+	loading.value = true;
+
+	const result = await useAPI(
+		(api) =>
+			api.postAuthResetPassword({
+				body: {
+					reset_token: resetToken,
+					new_password: payload.data.password,
+				},
+			}),
+		true,
+	);
+
+	loading.value = false;
+
+	if (result.success) {
+		toast.add({
+			title: "Password Reset Successful",
+			description: "Your password has been reset. You can now log in.",
+			icon: "i-lucide-check",
+			color: "success",
+		});
+		await navigateTo("/auth/login");
+	} else {
+		toast.add({
+			title: "Password Reset Failed",
+			description: result.message || "The reset link may be invalid or expired.",
+			icon: "i-lucide-alert-circle",
+			color: "error",
+		});
+	}
+}
+</script>
+
+<template>
+	<UAuthForm
+		v-if="resetToken"
+		:schema="schema"
+		:validate="validate"
+		title="Reset Password"
+		description="Enter your new password below to reset it."
+		icon="i-lucide-key-round"
+		:fields="fields"
+		:submit="{ label: 'Reset Password', loading }"
+		@submit="onSubmit"
+	>
+		<template #footer>
+			<div class="text-center text-sm">
+				Remembered your password?
+				<NuxtLink to="/auth/login" class="text-primary hover:underline">Login here</NuxtLink>
+			</div>
+		</template>
+	</UAuthForm>
+
+	<div v-else class="space-y-4 text-center">
+		<p>
+			Invalid or missing reset token. Please check your reset link or request a new password
+			reset.
+		</p>
+		<NuxtLink to="/auth/forgot-password" class="text-primary hover:underline">
+			Request a new password reset
+		</NuxtLink>
+	</div>
+</template>
diff --git a/app/pages/auth/signup.vue b/app/pages/auth/signup.vue
new file mode 100644
index 0000000..5b75e46
--- /dev/null
+++ b/app/pages/auth/signup.vue
@@ -0,0 +1,153 @@
+<script setup lang="ts">
+/**
+ * Sign-up. Only works while an admin has enabled public registration (Server Settings);
+ * otherwise the page explains that accounts are created by admins.
+ */
+
+import type { AuthFormField, FormError, FormSubmitEvent } from "@nuxt/ui";
+import * as z from "zod";
+import { useOnboardingStore } from "~/composables/stores/useOnboardingStore";
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+
+definePageMeta({
+	layout: "auth",
+});
+
+useSeoMeta({
+	title: "Sign Up | NetIgnite",
+	description: "Create a new account",
+});
+
+const toast = useToast();
+
+const fields: AuthFormField[] = [
+	{
+		name: "username",
+		type: "text",
+		label: "Username",
+		placeholder: "Enter your username",
+		required: true,
+	},
+	{
+		name: "email",
+		type: "email",
+		label: "Email Address",
+		placeholder: "Enter your email address",
+		required: true,
+	},
+	{
+		name: "password",
+		label: "Password",
+		type: "password",
+		placeholder: "Enter your password",
+		required: true,
+	},
+	{
+		name: "confirm_password",
+		label: "Confirm Password",
+		type: "password",
+		placeholder: "Re-enter your password",
+		required: true,
+	},
+];
+
+const schema = z.object({
+	username: z
+		.string("Username is required")
+		.trim()
+		.min(5, "Must be at least 5 characters")
+		.max(40, "Must be at most 40 characters")
+		.regex(/^[a-z0-9._-]+$/, "Only lowercase letters, numbers, dots, dashes and underscores"),
+	email: z.email("Invalid email address").trim(),
+	password: z
+		.string("Password is required")
+		.min(8, "Must be at least 8 characters")
+		.max(128, "Must be at most 128 characters"),
+	confirm_password: z.string("Confirm Password is required").min(1, "Confirm Password is required"),
+});
+
+type Schema = z.output<typeof schema>;
+
+function validate(state: Partial<Schema>): FormError[] {
+	const errors: FormError[] = [];
+	if (state.password && state.confirm_password && state.password !== state.confirm_password) {
+		errors.push({ name: "confirm_password", message: "Passwords do not match" });
+	}
+	return errors;
+}
+
+const registration = await useAPIAsyncData("auth-registration", async () => {
+	const res = await useAPI((api) => api.getAuthRegistration({}), true);
+	return res.success ? res.data.enabled : false;
+});
+
+const loading = ref(false);
+
+async function onSubmit(payload: FormSubmitEvent<Schema>) {
+	loading.value = true;
+	const result = await useAPI(
+		(api) =>
+			api.postAuthSignup({
+				body: {
+					username: payload.data.username,
+					email: payload.data.email,
+					password: payload.data.password,
+				},
+			}),
+		true,
+	);
+	loading.value = false;
+
+	if (!result.success) {
+		toast.add({
+			title: "Sign-up failed",
+			description: result.message || "Please try again later.",
+			icon: "i-lucide-alert-circle",
+			color: "error",
+		});
+		return;
+	}
+
+	updateAPIClient(result.data.token);
+	useAppCookies().sessionToken.set(result.data.token);
+	await useUserInfoStore().refresh();
+	await useOnboardingStore().clear();
+
+	toast.add({
+		title: "Welcome to NetIgnite",
+		description: "Your account was created.",
+		icon: "i-lucide-check",
+		color: "success",
+	});
+	await navigateTo("/welcome");
+}
+</script>
+
+<template>
+	<UAuthForm
+		:schema="schema"
+		:validate="validate"
+		title="Sign Up"
+		description="Create a new account by filling in the information below."
+		icon="i-lucide-user-plus"
+		:fields="fields"
+		:submit="{ label: 'Sign Up', loading, disabled: !registration.data.value }"
+		@submit="onSubmit"
+	>
+		<template #footer>
+			<div class="text-center text-sm">
+				Already have an account?
+				<NuxtLink to="/auth/login" class="text-primary hover:underline">Login here</NuxtLink>
+			</div>
+			<UAlert
+				v-if="registration.data.value === false"
+				color="warning"
+				variant="subtle"
+				title="Sign-up is disabled"
+				description="Accounts on this server are created by an administrator."
+				icon="i-lucide-lock"
+				class="mt-4"
+			/>
+		</template>
+	</UAuthForm>
+</template>
diff --git a/app/pages/dashboard/admin/settings.vue b/app/pages/dashboard/admin/settings.vue
new file mode 100644
index 0000000..df4c769
--- /dev/null
+++ b/app/pages/dashboard/admin/settings.vue
@@ -0,0 +1,76 @@
+<script setup lang="ts">
+definePageMeta({
+	layout: "dashboard",
+});
+
+useSeoMeta({
+	title: "Server Settings | NetIgnite",
+	description: "Server-wide settings",
+});
+
+const toast = useToast();
+
+const settings = await useAPIAsyncData("admin-settings", async () => {
+	const res = await useAPI((api) => api.getAdminSettings({}));
+	if (!res.success) {
+		toast.add({ title: "Failed to load settings", description: res.message, color: "error" });
+		return null;
+	}
+	return res.data;
+});
+
+const saving = ref(false);
+
+async function setRegistration(enabled: boolean) {
+	saving.value = true;
+	const res = await useAPI((api) =>
+		api.putAdminSettings({ body: { registration_enabled: enabled } }),
+	);
+	saving.value = false;
+
+	if (!res.success) {
+		toast.add({ title: "Couldn't save the setting", description: res.message, color: "error" });
+	} else {
+		toast.add({
+			title: enabled ? "Public sign-up enabled" : "Public sign-up disabled",
+			color: "success",
+			icon: "i-lucide-check",
+		});
+	}
+	await settings.refresh();
+}
+</script>
+
+<template>
+	<UDashboardPanel>
+		<template #header>
+			<DashboardPageHeader title="Server Settings" icon="i-lucide-sliders-horizontal" description="Settings for this NetIgnite server" />
+		</template>
+
+		<template #body>
+			<DashboardPageBody>
+				<div class="mx-auto w-full space-y-6 lg:w-3xl">
+					<DashboardSectionCard title="Registration" description="Who can create an account" icon="i-lucide-user-plus">
+						<div class="flex items-start justify-between gap-4">
+							<div>
+								<h4 class="font-medium text-white">Public sign-up</h4>
+								<p class="mt-1 text-sm text-slate-400">
+									Anyone who can open this server can create an account at
+									<code>/auth/signup</code>. Leave it off to create accounts yourself under
+									<NuxtLink to="/dashboard/admin/users" class="text-primary hover:underline">Users</NuxtLink>.
+								</p>
+							</div>
+							<USwitch
+								:model-value="settings.data.value?.registration_enabled ?? false"
+								:loading="saving || settings.loading.value"
+								:disabled="!settings.data.value"
+								aria-label="Public sign-up"
+								@update:model-value="setRegistration"
+							/>
+						</div>
+					</DashboardSectionCard>
+				</div>
+			</DashboardPageBody>
+		</template>
+	</UDashboardPanel>
+</template>
diff --git a/app/pages/dashboard/admin/users.vue b/app/pages/dashboard/admin/users.vue
new file mode 100644
index 0000000..4fe8507
--- /dev/null
+++ b/app/pages/dashboard/admin/users.vue
@@ -0,0 +1,318 @@
+<script setup lang="ts">
+import type { DropdownMenuItem, FormSubmitEvent, TableColumn } from "@nuxt/ui";
+import type { z } from "zod";
+import type { GetAdminUsersResponses } from "~/api-client";
+import { zPostAdminUsersBody } from "~/api-client/zod.gen";
+
+type AdminUser = GetAdminUsersResponses["200"]["data"][number];
+type UserRole = AdminUser["role"];
+
+// Admin-only: `auth.global.ts` redirects non-admins away from /dashboard/admin/*.
+definePageMeta({
+	layout: "dashboard",
+});
+
+useSeoMeta({
+	title: "Users | NetIgnite",
+	description: "Manage users",
+});
+
+const toast = useToast();
+
+const columns: TableColumn<AdminUser>[] = [
+	{ accessorKey: "id", header: "ID" },
+	{ accessorKey: "username", header: "Username" },
+	{ accessorKey: "display_name", header: "Display Name" },
+	{ accessorKey: "email", header: "Email" },
+	{ accessorKey: "role", header: "Role" },
+	{ id: "actions", header: "", enableSorting: false, enableHiding: false },
+];
+
+const roleOptions: { label: string; value: UserRole }[] = [
+	{ label: "Admin", value: "admin" },
+	{ label: "User", value: "user" },
+];
+
+const {
+	data: users,
+	loading,
+	refresh,
+} = await useAPILazyAsyncData<AdminUser[]>("admin-users-list", async () => {
+	const res = await useAPI((api) => api.getAdminUsers({}));
+	if (!res.success) {
+		toast.add({ title: "Failed to load users", description: res.message, color: "error" });
+		return [];
+	}
+	return res.data;
+});
+
+function getRowActions(user: AdminUser): DropdownMenuItem[][] {
+	return [
+		[
+			{ label: "Edit", icon: "i-lucide-pencil", onSelect: () => openEdit(user) },
+			{ label: "Reset Password", icon: "i-lucide-key", onSelect: () => openPassword(user) },
+		],
+		[
+			{
+				label: "Delete",
+				icon: "i-lucide-trash-2",
+				color: "error",
+				onSelect: () => openDelete(user),
+			},
+		],
+	];
+}
+
+// Create
+const showCreateModal = ref(false);
+// Referenced here (not only in the template) so Biome keeps it a value import.
+const createSchema = zPostAdminUsersBody;
+type CreateSchema = z.output<typeof createSchema>;
+
+function emptyCreateForm(): CreateSchema {
+	return { username: "", display_name: "", email: "", password: "", role: "user" };
+}
+const createForm = reactive<CreateSchema>(emptyCreateForm());
+
+async function handleCreate(event: FormSubmitEvent<CreateSchema>) {
+	const res = await useAPI((api) => api.postAdminUsers({ body: event.data }));
+	if (!res.success) {
+		toast.add({ title: "Create failed", description: res.message, color: "error" });
+		return;
+	}
+	showCreateModal.value = false;
+	Object.assign(createForm, emptyCreateForm());
+	toast.add({ title: "User created", color: "success" });
+	await refresh();
+}
+
+// Edit
+const showEditModal = ref(false);
+const selectedUser = ref<AdminUser | null>(null);
+const editForm = reactive({
+	display_name: "",
+	email: "",
+	role: "user" as UserRole,
+});
+
+function openEdit(user: AdminUser) {
+	selectedUser.value = user;
+	editForm.display_name = user.display_name;
+	editForm.email = user.email;
+	editForm.role = user.role;
+	showEditModal.value = true;
+}
+
+async function submitEdit() {
+	const target = selectedUser.value;
+	if (!target) return;
+
+	const res = await useAPI((api) =>
+		api.putAdminUsersByUserId({
+			path: { userId: target.id },
+			body: { display_name: editForm.display_name, email: editForm.email, role: editForm.role },
+		}),
+	);
+	if (!res.success) {
+		toast.add({ title: "Update failed", description: res.message, color: "error" });
+		return;
+	}
+	toast.add({ title: "User updated", color: "success" });
+	showEditModal.value = false;
+	await refresh();
+}
+
+// Reset password
+const showPasswordModal = ref(false);
+const passwordForm = reactive({ password: "" });
+
+function openPassword(user: AdminUser) {
+	selectedUser.value = user;
+	passwordForm.password = "";
+	showPasswordModal.value = true;
+}
+
+async function submitPassword() {
+	const target = selectedUser.value;
+	if (!target) return;
+
+	const res = await useAPI((api) =>
+		api.putAdminUsersByUserIdPassword({
+			path: { userId: target.id },
+			body: { password: passwordForm.password },
+		}),
+	);
+	if (!res.success) {
+		toast.add({ title: "Update failed", description: res.message, color: "error" });
+		return;
+	}
+	toast.add({ title: "Password updated", color: "success" });
+	showPasswordModal.value = false;
+}
+
+// Delete
+const deleteConfirmOpen = ref(false);
+const deleteTarget = ref<AdminUser | null>(null);
+
+function openDelete(user: AdminUser) {
+	deleteTarget.value = user;
+	deleteConfirmOpen.value = true;
+}
+
+async function onDeleteUser() {
+	const target = deleteTarget.value;
+	if (!target) return;
+
+	const res = await useAPI((api) => api.deleteAdminUsersByUserId({ path: { userId: target.id } }));
+	if (!res.success) {
+		toast.add({ title: "Delete failed", description: res.message, color: "error" });
+		throw new Error(res.message);
+	}
+	toast.add({ title: "User deleted", color: "success" });
+	deleteTarget.value = null;
+	await refresh();
+}
+</script>
+
+<template>
+	<UDashboardPanel>
+		<template #header>
+			<DashboardPageHeader title="Users" icon="i-lucide-users" description="Manage users" />
+		</template>
+
+		<template #body>
+			<DashboardPageBody>
+				<DashboardDataTable
+					:data="users ?? []"
+					:columns="columns"
+					:loading="loading"
+					:filters="[
+						{
+							column: 'username',
+							type: 'text',
+							placeholder: 'Search users...',
+							icon: 'i-lucide-search',
+						},
+						{
+							column: 'role',
+							type: 'select',
+							placeholder: 'All Roles',
+							icon: 'i-lucide-filter',
+							options: roleOptions,
+						},
+					]"
+					empty-title="No users"
+					empty-description="Create your first user to get started."
+					empty-icon="i-lucide-users"
+					@refresh="refresh"
+				>
+					<template #header-right>
+						<UButton label="New User" icon="i-lucide-user-plus" color="primary" @click="showCreateModal = true" />
+					</template>
+
+					<template #id-cell="{ row }">
+						<span class="font-mono text-sm">#{{ row.original.id }}</span>
+					</template>
+
+					<template #username-cell="{ row }">
+						<div class="flex items-center gap-2">
+							<Gravatar :email="row.original.email" :alt="row.original.display_name" size="sm" />
+							<span class="font-medium">{{ row.original.username }}</span>
+						</div>
+					</template>
+
+					<template #email-cell="{ row }">
+						<span class="text-slate-400">{{ row.original.email }}</span>
+					</template>
+
+					<template #role-cell="{ row }">
+						<UBadge :color="getRoleColor(row.original.role)" variant="soft">{{ row.original.role }}</UBadge>
+					</template>
+
+					<template #actions-cell="{ row }">
+						<UDropdownMenu :ui="{ viewport: 'main-bg-color' }" :items="getRowActions(row.original)">
+							<UButton icon="i-lucide-more-horizontal" variant="ghost" color="neutral" size="xs" aria-label="User actions" />
+						</UDropdownMenu>
+					</template>
+
+					<template #empty-actions>
+						<UButton label="Create User" color="primary" @click="showCreateModal = true" />
+					</template>
+				</DashboardDataTable>
+			</DashboardPageBody>
+		</template>
+	</UDashboardPanel>
+
+	<!-- Create user -->
+	<DashboardModal v-model:open="showCreateModal" title="Create User" icon="i-lucide-user-plus">
+		<UForm :schema="createSchema" :state="createForm" class="space-y-4" @submit="handleCreate">
+			<UFormField label="Username" name="username" required>
+				<UInput v-model="createForm.username" placeholder="johndoe" class="w-full" />
+			</UFormField>
+			<UFormField label="Display Name" name="display_name" required>
+				<UInput v-model="createForm.display_name" placeholder="John Doe" class="w-full" />
+			</UFormField>
+			<UFormField label="Email" name="email" required>
+				<UInput v-model="createForm.email" type="email" placeholder="john@example.com" class="w-full" />
+			</UFormField>
+			<UFormField label="Password" name="password" required>
+				<UInput v-model="createForm.password" type="password" placeholder="••••••••" class="w-full" />
+			</UFormField>
+			<UFormField label="Role" name="role" required>
+				<USelect v-model="createForm.role" :items="roleOptions" class="w-full" />
+			</UFormField>
+
+			<div class="flex justify-end gap-2 pt-4">
+				<UButton label="Cancel" color="neutral" variant="ghost" @click="showCreateModal = false" />
+				<UButton type="submit" label="Create" color="primary" />
+			</div>
+		</UForm>
+	</DashboardModal>
+
+	<!-- Edit user -->
+	<DashboardModal v-model:open="showEditModal" :title="`Edit User: ${selectedUser?.username}`" icon="i-lucide-pencil">
+		<div class="space-y-4">
+			<UFormField label="Display Name">
+				<UInput v-model="editForm.display_name" class="w-full" />
+			</UFormField>
+			<UFormField label="Email">
+				<UInput v-model="editForm.email" type="email" class="w-full" />
+			</UFormField>
+			<UFormField label="Role">
+				<USelect v-model="editForm.role" :items="roleOptions" class="w-full" />
+			</UFormField>
+
+			<div class="flex justify-end gap-2 pt-4">
+				<UButton label="Cancel" color="neutral" variant="ghost" @click="showEditModal = false" />
+				<UButton label="Save" color="primary" @click="submitEdit" />
+			</div>
+		</div>
+	</DashboardModal>
+
+	<!-- Reset password -->
+	<DashboardModal
+		v-model:open="showPasswordModal"
+		:title="`Reset Password: ${selectedUser?.username}`"
+		icon="i-lucide-key"
+		icon-color="amber"
+	>
+		<div class="space-y-4">
+			<UFormField label="New Password" description="At least 8 characters.">
+				<UInput v-model="passwordForm.password" type="password" placeholder="••••••••" class="w-full" />
+			</UFormField>
+
+			<div class="flex justify-end gap-2 pt-4">
+				<UButton label="Cancel" color="neutral" variant="ghost" @click="showPasswordModal = false" />
+				<UButton label="Update Password" color="primary" @click="submitPassword" />
+			</div>
+		</div>
+	</DashboardModal>
+
+	<!-- Delete user -->
+	<DashboardDeleteModal
+		v-model:open="deleteConfirmOpen"
+		title="Delete User"
+		:warning-text="`User &quot;${deleteTarget?.username ?? ''}&quot; and all their data will be permanently deleted.`"
+		:on-delete="onDeleteUser"
+	/>
+</template>
diff --git a/app/pages/dashboard/agents/[agent_id].vue b/app/pages/dashboard/agents/[agent_id].vue
new file mode 100644
index 0000000..0047bdf
--- /dev/null
+++ b/app/pages/dashboard/agents/[agent_id].vue
@@ -0,0 +1,101 @@
+<script setup lang="ts">
+/**
+ * Parent route for one agent (`/dashboard/agents/new` or `/dashboard/agents/<id>`).
+ */
+import type { NuxtError } from "#app";
+import type { UseSubrouterPathDynamics } from "~/composables/useSubrouterPathDynamics";
+import type { Agent, NewAgent } from "~/utils/types";
+
+definePageMeta({
+	layout: "dashboard",
+});
+
+const route = useRoute();
+const agentParam = safeDecodeURIComponent(route.params.agent_id as string);
+const isNew = agentParam === "new";
+
+let error: NuxtError | null = null;
+let agent: ComputedRef<Agent | null> | null = null;
+
+if (isNew) {
+	useSubrouterInjectedData<Agent, NewAgent>("agent", true).provide({
+		data: ref<NewAgent>({ name: "", description: "", kind: "esp32" }),
+		isNew: true,
+	});
+} else {
+	const agentID = Number(agentParam);
+	const {
+		data: result,
+		refresh,
+		loading,
+	} = await useAPIAsyncData(`agent-${agentID}`, async () =>
+		Number.isInteger(agentID) && agentID > 0
+			? await useAPI((api) => api.getAgentsByAgentId({ path: { agentID } }))
+			: ({ success: false, code: 404, message: "Agent not found" } as const),
+	);
+
+	if (!result.value?.success) {
+		error = createError({
+			statusCode: result.value?.code || 500,
+			statusMessage: result.value?.message || "Failed to load agent",
+		});
+	}
+
+	agent = computed(() => (result.value?.success ? result.value.data : null));
+
+	useSubrouterInjectedData<Agent, NewAgent>("agent", true).provide({
+		data: agent as ComputedRef<Agent>,
+		refresh,
+		loading,
+		isNew: false,
+	});
+}
+
+function getRoutesConfig(): UseSubrouterPathDynamics.RoutesConfig {
+	const name = agent?.value?.name ?? agentParam;
+	return {
+		[`/dashboard/agents/${agentParam}`]: {
+			isNavLink: true,
+			label: "General",
+			icon: "i-lucide-radio-tower",
+			exact: true,
+			getDynamicValues() {
+				return {
+					seoSettings: {
+						title: isNew ? "New Agent" : name,
+						description: isNew ? "Add an agent" : `Manage agent ${name}`,
+					},
+					breadcrumbItems: [{ label: isNew ? "New agent" : name }],
+				};
+			},
+		},
+	};
+}
+
+const subrouterPathDynamics = useSubrouterPathDynamics({
+	baseTitle: "Agents | NetIgnite",
+	basebreadcrumbItems: [{ label: "Agents", to: "/dashboard/agents" }],
+	routes: getRoutesConfig(),
+});
+
+const routePathDynamicValues = await useAwaitedComputed(async () => {
+	const values = await subrouterPathDynamics.getPathDynamicValues(route.path);
+	useSeoMeta(values.seoSettings);
+	return values;
+});
+</script>
+
+<template>
+	<UDashboardPanel>
+		<template #header>
+			<DashboardPageHeader icon="i-lucide-radio-tower" :breadcrumb-items="routePathDynamicValues.breadcrumbItems" />
+		</template>
+
+		<template #body>
+			<div class="flex w-full flex-col gap-4 sm:gap-6 lg:gap-12">
+				<UError v-if="error" :error="error" />
+				<NuxtPage v-else />
+			</div>
+		</template>
+	</UDashboardPanel>
+</template>
diff --git a/app/pages/dashboard/agents/[agent_id]/index.vue b/app/pages/dashboard/agents/[agent_id]/index.vue
new file mode 100644
index 0000000..d9b695d
--- /dev/null
+++ b/app/pages/dashboard/agents/[agent_id]/index.vue
@@ -0,0 +1,365 @@
+<script setup lang="ts">
+import { zPostAgentsBody } from "~/api-client/zod.gen";
+import type { Agent, Device, NewAgent } from "~/utils/types";
+
+const toast = useToast();
+const { appUrl } = useRuntimeAppConfigs();
+
+const agent = useSubrouterInjectedData<Agent, NewAgent>("agent", true).inject();
+
+const formState = ref<NewAgent>(
+	agent.isNew
+		? { ...agent.data.value }
+		: {
+				name: agent.data.value.name,
+				description: agent.data.value.description,
+				kind: agent.data.value.kind,
+			},
+);
+const formSchema = zPostAgentsBody;
+const saving = ref(false);
+
+const kindOptions = [
+	{
+		value: "esp32",
+		label: "ESP32",
+		description:
+			"A small board in your network, flashed from the browser. Wakes devices and checks their status.",
+	},
+	{
+		value: "linux",
+		label: "Linux agent",
+		description:
+			"A service for an always-on Linux machine (e.g. a Raspberry Pi or a server). Reports its own status, can shut it down, and can wake other devices.",
+	},
+];
+
+async function onSubmit() {
+	saving.value = true;
+	const res = agent.isNew
+		? await useAPI((api) => api.postAgents({ body: formState.value }))
+		: await useAPI((api) =>
+				api.putAgentsByAgentId({
+					path: { agentID: agent.data.value.id },
+					body: { name: formState.value.name, description: formState.value.description },
+				}),
+			);
+	saving.value = false;
+
+	if (!res.success) {
+		toast.add({
+			title: "Couldn't save the agent",
+			description: res.message,
+			color: "error",
+			icon: "i-lucide-alert-circle",
+		});
+		return;
+	}
+	toast.add({
+		title: agent.isNew ? "Agent created" : "Agent saved",
+		color: "success",
+		icon: "i-lucide-check",
+	});
+	if (agent.isNew) {
+		await navigateTo(`/dashboard/agents/${res.data.id}`);
+	} else {
+		await agent.refresh();
+	}
+}
+
+// --- Existing agents ---
+
+if (!agent.isNew) useInterval(() => agent.refresh(), 15_000);
+
+const devices = await useAPILazyAsyncData<Device[]>("agent-devices", async () => {
+	if (agent.isNew) return [];
+	const res = await useAPI((api) => api.getDevices({}));
+	const id = agent.data.value.id;
+	return res.success
+		? res.data.filter((device) => device.agent_id === id || device.host_agent_id === id)
+		: [];
+});
+
+const infoEntries = computed(() =>
+	agent.isNew || !agent.data.value.info
+		? []
+		: Object.entries(agent.data.value.info).map(([key, value]) => ({
+				key,
+				value: typeof value === "object" ? JSON.stringify(value) : String(value),
+			})),
+);
+
+const enrollment = ref<{ token: string; expires_at: number } | null>(null);
+const creatingEnrollment = ref(false);
+
+async function createEnrollment() {
+	if (agent.isNew) return;
+	creatingEnrollment.value = true;
+	const res = await useAPI((api) =>
+		api.postAgentsByAgentIdEnrollments({ path: { agentID: agent.data.value.id } }),
+	);
+	creatingEnrollment.value = false;
+	if (!res.success) {
+		toast.add({ title: "Couldn't create a pairing token", description: res.message, color: "error" });
+		return;
+	}
+	enrollment.value = res.data;
+}
+
+const pairCommand = computed(() =>
+	enrollment.value ? `sudo netignite-agent pair ${appUrl} ${enrollment.value.token}` : "",
+);
+
+async function copy(text: string) {
+	try {
+		await navigator.clipboard.writeText(text);
+		toast.add({ title: "Copied to clipboard", icon: "i-lucide-clipboard-check", color: "success" });
+	} catch {
+		toast.add({
+			title: "Copy failed",
+			description: "Select the text and copy it manually.",
+			color: "warning",
+		});
+	}
+}
+
+const revokeOpen = ref(false);
+const deleteOpen = ref(false);
+
+async function onRevoke() {
+	if (agent.isNew) return;
+	const res = await useAPI((api) =>
+		api.postAgentsByAgentIdRevoke({ path: { agentID: agent.data.value.id } }),
+	);
+	if (!res.success) {
+		toast.add({ title: "Couldn't revoke the credential", description: res.message, color: "error" });
+		throw new Error(res.message);
+	}
+	toast.add({
+		title: "Credential revoked",
+		description: "The agent was disconnected.",
+		color: "success",
+	});
+	await agent.refresh();
+}
+
+async function onDelete() {
+	if (agent.isNew) return;
+	const res = await useAPI((api) =>
+		api.deleteAgentsByAgentId({ path: { agentID: agent.data.value.id } }),
+	);
+	if (!res.success) {
+		toast.add({ title: "Couldn't delete the agent", description: res.message, color: "error" });
+		throw new Error(res.message);
+	}
+	toast.add({ title: "Agent deleted", color: "success" });
+	await navigateTo("/dashboard/agents");
+}
+</script>
+
+<template>
+	<div class="mx-auto w-full space-y-6 lg:w-3xl">
+		<!-- New agent -->
+		<template v-if="agent.isNew">
+			<div>
+				<h2 class="text-xl font-semibold text-white">Add an agent</h2>
+				<p class="mt-1 text-sm text-slate-400">
+					An agent sits in the same network as your devices and keeps a connection to NetIgnite.
+				</p>
+			</div>
+
+			<DashboardSectionCard title="Agent" icon="i-lucide-radio-tower">
+				<UForm :schema="formSchema" :state="formState" class="space-y-6" @submit="onSubmit">
+					<UFormField name="kind" label="Kind">
+						<URadioGroup v-model="formState.kind" :items="kindOptions" variant="card" class="w-full" />
+					</UFormField>
+					<UFormField name="name" label="Name" required>
+						<UInput v-model="formState.name" placeholder="Office ESP32" class="w-full" />
+					</UFormField>
+					<UFormField name="description" label="Description">
+						<UTextarea v-model="formState.description" :rows="2" autoresize placeholder="Optional" class="w-full" />
+					</UFormField>
+					<div class="flex justify-end">
+						<UButton type="submit" label="Create agent" icon="i-lucide-plus" :loading="saving" />
+					</div>
+				</UForm>
+			</DashboardSectionCard>
+		</template>
+
+		<!-- Existing agent -->
+		<template v-else>
+			<DashboardSectionCard title="Status" icon="i-lucide-activity">
+				<dl class="grid gap-4 sm:grid-cols-2">
+					<div>
+						<dt class="text-sm text-slate-400">Connection</dt>
+						<dd class="mt-1">
+							<UBadge :color="AgentStates[agent.data.value.state].color" variant="soft">
+								{{ AgentStates[agent.data.value.state].label }}
+							</UBadge>
+						</dd>
+					</div>
+					<div>
+						<dt class="text-sm text-slate-400">Kind</dt>
+						<dd class="mt-1 flex items-center gap-2 text-white">
+							<UIcon :name="AgentKinds[agent.data.value.kind].icon" class="size-4" />
+							{{ AgentKinds[agent.data.value.kind].label }}
+						</dd>
+					</div>
+					<div>
+						<dt class="text-sm text-slate-400">Version</dt>
+						<dd class="mt-1 font-mono text-white">{{ agent.data.value.version ?? "—" }}</dd>
+					</div>
+					<div>
+						<dt class="text-sm text-slate-400">Last seen</dt>
+						<dd class="mt-1 text-white">
+							{{ agent.data.value.state === "online" ? "Connected now" : formatRelative(agent.data.value.last_seen_at) }}
+						</dd>
+					</div>
+				</dl>
+
+				<div v-if="agent.data.value.capabilities.length > 0" class="mt-6">
+					<p class="text-sm text-slate-400">Capabilities</p>
+					<div class="mt-2 flex flex-wrap gap-2">
+						<UBadge v-for="capability in agent.data.value.capabilities" :key="capability" color="neutral" variant="subtle">
+							{{ capability }}
+						</UBadge>
+					</div>
+				</div>
+
+				<dl v-if="infoEntries.length > 0" class="mt-6 divide-y divide-slate-800 rounded-lg border border-slate-800">
+					<div v-for="entry in infoEntries" :key="entry.key" class="flex justify-between gap-4 px-4 py-2 text-sm">
+						<dt class="text-slate-400">{{ entry.key }}</dt>
+						<dd class="truncate font-mono text-slate-200">{{ entry.value }}</dd>
+					</div>
+				</dl>
+			</DashboardSectionCard>
+
+			<DashboardSectionCard
+				:title="agent.data.value.state === 'unenrolled' ? 'Set up' : 'Set up again'"
+				:description="agent.data.value.state === 'unenrolled' ? 'Connect this agent to NetIgnite' : 'Replaces the current credential'"
+				icon="i-lucide-plug"
+			>
+				<template v-if="agent.data.value.kind === 'esp32'">
+					<UAlert
+						color="info"
+						variant="soft"
+						icon="i-lucide-usb"
+						title="Install from your browser"
+						description="The browser installer for the ESP32 firmware comes with the v2 firmware. Until then, use a manual enrollment token below."
+					/>
+				</template>
+
+				<template v-else>
+					<p class="text-sm text-slate-300">
+						Install the NetIgnite Linux agent on the machine, then run the pairing command on it. The
+						command works once and expires after 15 minutes.
+					</p>
+				</template>
+
+				<div class="mt-4 space-y-3">
+					<UButton
+						:label="enrollment ? 'Create a new token' : agent.data.value.kind === 'linux' ? 'Create pairing command' : 'Create enrollment token'"
+						icon="i-lucide-key-round"
+						color="neutral"
+						variant="outline"
+						:loading="creatingEnrollment"
+						@click="createEnrollment"
+					/>
+
+					<template v-if="enrollment">
+						<div class="flex items-start gap-2 rounded-lg border border-slate-800 bg-slate-900/60 p-3">
+							<code class="flex-1 break-all font-mono text-sm text-slate-200">
+								{{ agent.data.value.kind === "linux" ? pairCommand : enrollment.token }}
+							</code>
+							<UButton
+								icon="i-lucide-copy"
+								color="neutral"
+								variant="ghost"
+								size="sm"
+								aria-label="Copy"
+								@click="copy(agent.data.value.kind === 'linux' ? pairCommand : enrollment.token)"
+							/>
+						</div>
+						<p class="text-xs text-slate-500">
+							Valid until {{ formatDate(enrollment.expires_at) }}. The agent generates its own secret when it
+							uses this token; NetIgnite never shows it.
+						</p>
+					</template>
+				</div>
+			</DashboardSectionCard>
+
+			<DashboardSectionCard title="Settings" icon="i-lucide-settings">
+				<UForm :schema="formSchema" :state="formState" class="divide-y divide-slate-800" @submit="onSubmit">
+					<UFormField name="name" label="Name" required class="flex items-start justify-between gap-4 py-4 first:pt-0 max-sm:flex-col" :ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }">
+						<UInput v-model="formState.name" class="w-full" />
+					</UFormField>
+					<UFormField name="description" label="Description" class="flex items-start justify-between gap-4 py-4 max-sm:flex-col" :ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }">
+						<UTextarea v-model="formState.description" :rows="2" autoresize class="w-full" />
+					</UFormField>
+					<div class="flex justify-end pt-4">
+						<UButton type="submit" label="Save" icon="i-lucide-save" :loading="saving" />
+					</div>
+				</UForm>
+			</DashboardSectionCard>
+
+			<DashboardSectionCard title="Devices" description="Devices this agent wakes or runs on" icon="i-lucide-monitor" flush>
+				<UEmpty
+					v-if="!devices.loading.value && (devices.data.value?.length ?? 0) === 0"
+					variant="naked"
+					icon="i-lucide-monitor"
+					title="No devices use this agent"
+					:actions="[{ label: 'Add device', icon: 'i-lucide-plus', to: '/dashboard/devices/new' }]"
+					class="py-8"
+				/>
+				<ul v-else class="divide-y divide-slate-800">
+					<li v-for="device in devices.data.value" :key="device.id" class="flex items-center gap-3 px-6 py-3">
+						<UIcon :name="DeviceTypes[device.type].icon" class="size-4 text-slate-400" />
+						<NuxtLink :to="`/dashboard/devices/${device.id}`" class="flex-1 text-white hover:underline">{{ device.name }}</NuxtLink>
+						<DevicesStatusBadge :status="device.status" />
+					</li>
+				</ul>
+			</DashboardSectionCard>
+
+			<DashboardSectionCard title="Danger Zone" description="Irreversible actions" icon="i-lucide-alert-triangle" tone="danger">
+				<div class="space-y-6">
+					<div class="flex flex-col gap-4 md:flex-row md:items-center">
+						<div class="flex-1">
+							<h4 class="font-medium text-white">Revoke credential</h4>
+							<p class="mt-1 text-sm text-slate-400">Disconnects the agent. It has to be set up again.</p>
+						</div>
+						<UButton
+							label="Revoke"
+							color="error"
+							variant="soft"
+							icon="i-lucide-shield-off"
+							:disabled="agent.data.value.state === 'unenrolled'"
+							@click="revokeOpen = true"
+						/>
+					</div>
+					<div class="flex flex-col gap-4 md:flex-row md:items-center">
+						<div class="flex-1">
+							<h4 class="font-medium text-white">Delete agent</h4>
+							<p class="mt-1 text-sm text-slate-400">Devices that use it keep their settings but can't be woken.</p>
+						</div>
+						<UButton label="Delete agent" color="error" variant="soft" icon="i-lucide-trash-2" @click="deleteOpen = true" />
+					</div>
+				</div>
+			</DashboardSectionCard>
+		</template>
+	</div>
+
+	<template v-if="!agent.isNew">
+		<DashboardDeleteModal
+			v-model:open="revokeOpen"
+			title="Revoke Credential"
+			warning-text="The agent is disconnected and can only reconnect after it is set up again."
+			:on-delete="onRevoke"
+		/>
+		<DashboardDeleteModal
+			v-model:open="deleteOpen"
+			title="Delete Agent"
+			warning-text="The agent is disconnected and deleted. This can't be undone."
+			:on-delete="onDelete"
+		/>
+	</template>
+</template>
diff --git a/app/pages/dashboard/agents/index.vue b/app/pages/dashboard/agents/index.vue
new file mode 100644
index 0000000..b0c4fda
--- /dev/null
+++ b/app/pages/dashboard/agents/index.vue
@@ -0,0 +1,109 @@
+<script setup lang="ts">
+import type { TableColumn } from "@nuxt/ui";
+import type { Agent } from "~/utils/types";
+
+definePageMeta({
+	layout: "dashboard",
+});
+
+useSeoMeta({
+	title: "Agents | NetIgnite",
+	description: "The agents that wake and check your devices",
+});
+
+const toast = useToast();
+
+const columns: TableColumn<Agent>[] = [
+	{ accessorKey: "name", header: "Name" },
+	{ accessorKey: "kind", header: "Kind" },
+	{ accessorKey: "state", header: "Status" },
+	{ accessorKey: "version", header: "Version" },
+	{ accessorKey: "last_seen_at", header: "Last seen" },
+];
+
+const agents = await useAPIAsyncData<Agent[]>("agents", async () => {
+	const res = await useAPI((api) => api.getAgents({}));
+	if (!res.success) {
+		toast.add({ title: "Failed to load agents", description: res.message, color: "error" });
+		return [];
+	}
+	return res.data;
+});
+
+useInterval(() => agents.refresh(), 20_000);
+
+const stateOptions = Object.entries(AgentStates).map(([value, state]) => ({
+	label: state.label,
+	value,
+}));
+</script>
+
+<template>
+	<UDashboardPanel>
+		<template #header>
+			<DashboardPageHeader
+				title="Agents"
+				icon="i-lucide-radio-tower"
+				description="Agents live in your networks and wake devices for you"
+			/>
+		</template>
+
+		<template #body>
+			<DashboardPageBody>
+				<DashboardDataTable
+					:data="agents.data"
+					:columns="columns"
+					:loading="agents.loading"
+					:filters="[
+						{ column: 'name', type: 'text', placeholder: 'Search agents...', icon: 'i-lucide-search' },
+						{ column: 'state', type: 'select', placeholder: 'All statuses', options: stateOptions },
+					]"
+					empty-title="No agents"
+					empty-description="Add an agent in each network that contains devices you want to wake."
+					empty-icon="i-lucide-radio-tower"
+					@refresh="agents.refresh()"
+				>
+					<template #header-right>
+						<UButton label="Add agent" icon="i-lucide-plus" to="/dashboard/agents/new" />
+					</template>
+
+					<template #name-cell="{ row }">
+						<NuxtLink :to="`/dashboard/agents/${row.original.id}`" class="font-medium text-primary hover:underline">
+							{{ row.original.name }}
+						</NuxtLink>
+						<p v-if="row.original.description" class="line-clamp-1 max-w-xs text-sm text-slate-400">
+							{{ row.original.description }}
+						</p>
+					</template>
+
+					<template #kind-cell="{ row }">
+						<span class="inline-flex items-center gap-2 text-sm">
+							<UIcon :name="AgentKinds[row.original.kind].icon" class="size-4 text-slate-400" />
+							{{ AgentKinds[row.original.kind].label }}
+						</span>
+					</template>
+
+					<template #state-cell="{ row }">
+						<UBadge :color="AgentStates[row.original.state].color" variant="soft">
+							{{ AgentStates[row.original.state].label }}
+						</UBadge>
+					</template>
+
+					<template #version-cell="{ row }">
+						<span class="font-mono text-sm text-slate-300">{{ row.original.version ?? "—" }}</span>
+					</template>
+
+					<template #last_seen_at-cell="{ row }">
+						<span class="text-sm text-slate-400">
+							{{ row.original.state === "online" ? "now" : formatRelative(row.original.last_seen_at) }}
+						</span>
+					</template>
+
+					<template #empty-actions>
+						<UButton label="Add agent" color="primary" to="/dashboard/agents/new" />
+					</template>
+				</DashboardDataTable>
+			</DashboardPageBody>
+		</template>
+	</UDashboardPanel>
+</template>
diff --git a/app/pages/dashboard/apikeys/[api_key_id].vue b/app/pages/dashboard/apikeys/[api_key_id].vue
new file mode 100644
index 0000000..d420b68
--- /dev/null
+++ b/app/pages/dashboard/apikeys/[api_key_id].vue
@@ -0,0 +1,107 @@
+<script setup lang="ts">
+/**
+ * Parent route for one API key (`/dashboard/apikeys/new` or `/dashboard/apikeys/<id>`).
+ * Loads the key once and hands it to the child pages via `useSubrouterInjectedData`; the
+ * toolbar/breadcrumbs come from `useSubrouterPathDynamics`. Add sub-pages (e.g. a usage log)
+ * as `[api_key_id]/<name>.vue` plus an entry in `getRoutesConfig()`.
+ */
+import type { NuxtError } from "#app";
+import type { UseSubrouterPathDynamics } from "~/composables/useSubrouterPathDynamics";
+import type { APIKey, NewAPIKey } from "~/utils/types";
+
+definePageMeta({
+	layout: "dashboard",
+});
+
+const route = useRoute();
+const apiKeyId = safeDecodeURIComponent(route.params.api_key_id as string);
+
+let error: NuxtError | null = null;
+
+if (apiKeyId === "new") {
+	useSubrouterInjectedData<APIKey, NewAPIKey>("api_key", true).provide({
+		data: ref<NewAPIKey>({
+			description: "",
+			expires_at: "30d",
+		}),
+		isNew: true,
+	});
+} else {
+	const {
+		data: result,
+		refresh,
+		loading,
+	} = await useAPIAsyncData(
+		`account-apikey-${apiKeyId}`,
+		async () =>
+			await useAPI((api) => api.getAccountApikeysByApiKeyId({ path: { apiKeyID: apiKeyId } })),
+	);
+
+	if (!result.value?.success) {
+		error = createError({
+			statusCode: result.value?.code || 500,
+			statusMessage: result.value?.message || "Failed to load API key",
+		});
+	}
+
+	useSubrouterInjectedData<APIKey, NewAPIKey>("api_key", true).provide({
+		data: computed(() => (result.value?.success ? result.value.data : null) as APIKey),
+		refresh,
+		loading,
+		isNew: false,
+	});
+}
+
+function getRoutesConfig(): UseSubrouterPathDynamics.RoutesConfig {
+	const isNew = apiKeyId === "new";
+	return {
+		[`/dashboard/apikeys/${isNew ? "new" : apiKeyId}`]: {
+			isNavLink: true,
+			label: "General",
+			icon: "i-lucide-info",
+			exact: true,
+			getDynamicValues() {
+				return {
+					seoSettings: {
+						title: isNew ? "New API Key" : `API Key ${apiKeyId}`,
+						description: isNew ? "Create a new API key" : `Manage API key ${apiKeyId}`,
+					},
+					breadcrumbItems: [{ label: isNew ? "New API Key" : apiKeyId }],
+				};
+			},
+		},
+	};
+}
+
+const subrouterPathDynamics = useSubrouterPathDynamics({
+	baseTitle: "API Keys | NetIgnite",
+	basebreadcrumbItems: [{ label: "API Keys", to: "/dashboard/apikeys" }],
+	routes: getRoutesConfig(),
+});
+
+const routePathDynamicValues = await useAwaitedComputed(async () => {
+	const values = await subrouterPathDynamics.getPathDynamicValues(route.path);
+	useSeoMeta(values.seoSettings);
+	return values;
+});
+</script>
+
+<template>
+	<UDashboardPanel>
+		<template #header>
+			<DashboardPageHeader icon="i-lucide-key" :breadcrumb-items="routePathDynamicValues.breadcrumbItems" />
+
+			<UDashboardToolbar>
+				<!-- `-mx-1` aligns the menu with the sidebar collapse button. -->
+				<UNavigationMenu :items="subrouterPathDynamics.links" highlight class="-mx-1 flex-1" />
+			</UDashboardToolbar>
+		</template>
+
+		<template #body>
+			<div class="flex w-full flex-col gap-4 sm:gap-6 lg:gap-12">
+				<UError v-if="error" :error="error" />
+				<NuxtPage v-else />
+			</div>
+		</template>
+	</UDashboardPanel>
+</template>
diff --git a/app/pages/dashboard/apikeys/[api_key_id]/index.vue b/app/pages/dashboard/apikeys/[api_key_id]/index.vue
new file mode 100644
index 0000000..88520b9
--- /dev/null
+++ b/app/pages/dashboard/apikeys/[api_key_id]/index.vue
@@ -0,0 +1,267 @@
+<script setup lang="ts">
+import type { PostAccountApikeysResponses } from "~/api-client";
+import { zPostAccountApikeysBody } from "~/api-client/zod.gen";
+import type { APIKey, NewAPIKey } from "~/utils/types";
+
+const toast = useToast();
+
+const apiKey = useSubrouterInjectedData<APIKey, NewAPIKey>("api_key", true).inject();
+
+const formState = ref<NewAPIKey>(
+	apiKey.isNew
+		? { ...apiKey.data.value }
+		: { description: apiKey.data.value.description, expires_at: null },
+);
+
+// Referenced here (not only in the template) so Biome keeps it a value import.
+const formSchema = apiKey.isNew ? zPostAccountApikeysBody : undefined;
+
+const expiryOptions = [
+	{ label: "7 Days", value: "7d" },
+	{ label: "30 Days", value: "30d" },
+	{ label: "90 Days", value: "90d" },
+	{ label: "180 Days", value: "180d" },
+	{ label: "365 Days", value: "365d" },
+	{ label: "No Expiration", value: null },
+];
+
+const creating = ref(false);
+const createdKey = ref<PostAccountApikeysResponses["200"]["data"] | null>(null);
+const revealToken = ref(false);
+
+async function onCreate() {
+	creating.value = true;
+
+	const result = await useAPI((api) =>
+		api.postAccountApikeys({
+			body: {
+				description: formState.value.description,
+				expires_at: formState.value.expires_at,
+			},
+		}),
+	);
+
+	creating.value = false;
+
+	if (result.success) {
+		toast.add({
+			title: "API key created",
+			description: "Copy the token now — it is only shown once.",
+			icon: "i-lucide-check",
+			color: "success",
+		});
+		createdKey.value = result.data;
+	} else {
+		toast.add({
+			title: "Error",
+			description: result.message || "Failed to create API key.",
+			icon: "i-lucide-alert-circle",
+			color: "error",
+		});
+	}
+}
+
+async function copyToken() {
+	if (!createdKey.value) return;
+	try {
+		await navigator.clipboard.writeText(createdKey.value.token);
+		toast.add({ title: "Copied to clipboard", icon: "i-lucide-clipboard-check", color: "success" });
+	} catch {
+		toast.add({
+			title: "Copy failed",
+			description: "Select the token and copy it manually.",
+			color: "warning",
+		});
+	}
+}
+
+/** Close the one-time token dialog and go to the new key's page. */
+async function onTokenDialogClose() {
+	if (!createdKey.value) return;
+	const id = createdKey.value.id;
+	createdKey.value = null;
+	await navigateTo(`/dashboard/apikeys/${id}`);
+}
+
+const deleteConfirmOpen = ref(false);
+
+async function onDeleteApiKey() {
+	if (apiKey.isNew) return;
+	const apiKeyID = apiKey.data.value.id;
+
+	const res = await useAPI((api) => api.deleteAccountApikeysByApiKeyId({ path: { apiKeyID } }));
+	if (!res.success) {
+		toast.add({
+			title: "Failed to delete API key",
+			description: res.message,
+			icon: "i-lucide-alert-circle",
+			color: "error",
+		});
+		throw new Error(res.message);
+	}
+
+	toast.add({ title: "API key deleted", color: "success" });
+	await navigateTo("/dashboard/apikeys");
+}
+
+const headerTexts = computed(() =>
+	apiKey.isNew
+		? { title: "Create New API Key", description: "Create a key for scripts and integrations." }
+		: { title: `API Key ${apiKey.data.value.id}`, description: "View and manage this API key." },
+);
+</script>
+
+<template>
+	<div class="mx-auto w-full space-y-6 lg:w-3xl">
+		<div>
+			<h2 class="text-xl font-semibold text-white">{{ headerTexts.title }}</h2>
+			<p class="mt-1 text-sm text-slate-400">{{ headerTexts.description }}</p>
+		</div>
+
+		<DashboardSectionCard
+			title="API Key Information"
+			description="API keys can't be edited — create a new one instead."
+			icon="i-lucide-info"
+		>
+			<UForm
+				class="divide-y divide-slate-800"
+				:schema="formSchema"
+				:state="formState"
+				:disabled="!apiKey.isNew"
+				@submit="onCreate"
+			>
+				<UFormField
+					name="description"
+					label="Description"
+					description="What this key is used for."
+					class="flex items-start justify-between gap-4 py-4 first:pt-0 last:pb-0"
+					:ui="{ container: 'w-full' }"
+				>
+					<UTextarea
+						v-model="formState.description"
+						placeholder="No description provided."
+						:rows="3"
+						autoresize
+						class="w-full"
+					/>
+				</UFormField>
+
+				<UFormField
+					name="expires_at"
+					label="Expiration"
+					description="When this key stops working."
+					class="flex items-start justify-between gap-4 py-4 first:pt-0 last:pb-0"
+					:ui="{ container: 'w-full sm:w-60' }"
+				>
+					<USelect
+						v-if="apiKey.isNew"
+						v-model="formState.expires_at"
+						:items="expiryOptions"
+						placeholder="Select expiration"
+						class="w-full"
+					/>
+					<UInput
+						v-else
+						:model-value="apiKey.data.value.expires_at ? formatDate(apiKey.data.value.expires_at) : 'Never'"
+						disabled
+						class="w-full"
+					/>
+				</UFormField>
+
+				<div v-if="apiKey.isNew" class="pt-4">
+					<UButton
+						label="Create API Key"
+						color="primary"
+						type="submit"
+						:loading="creating"
+						icon="i-lucide-plus-circle"
+					/>
+				</div>
+			</UForm>
+		</DashboardSectionCard>
+
+		<DashboardSectionCard
+			v-if="!apiKey.isNew"
+			title="Danger Zone"
+			description="Irreversible and destructive actions"
+			icon="i-lucide-alert-triangle"
+			tone="danger"
+		>
+			<div class="flex flex-col gap-4 md:flex-row md:items-center">
+				<div class="flex-1">
+					<h4 class="font-medium text-white">Delete API Key</h4>
+					<p class="mt-1 text-sm text-slate-400">Anything using this key stops working immediately.</p>
+				</div>
+				<UButton
+					label="Delete API Key"
+					color="error"
+					variant="soft"
+					icon="i-lucide-trash-2"
+					@click="deleteConfirmOpen = true"
+				/>
+			</div>
+		</DashboardSectionCard>
+
+		<DashboardDeleteModal
+			v-if="!apiKey.isNew"
+			v-model:open="deleteConfirmOpen"
+			title="Delete API Key"
+			warning-text="Anything using this API key will stop working. This action cannot be undone."
+			:on-delete="onDeleteApiKey"
+		/>
+
+		<!-- One-time token dialog -->
+		<DashboardModal
+			:open="!!createdKey"
+			title="API Key Created"
+			description="Copy your new API key now. You won't be able to see it again."
+			icon="i-lucide-check-circle"
+			icon-color="emerald"
+			:dismissible="false"
+			:close="false"
+		>
+			<div class="space-y-4">
+				<div class="rounded-lg border border-red-900/50 bg-red-950/50 p-4">
+					<p class="text-sm text-red-300">
+						<strong>Warning:</strong>
+						The API key is only shown once. Store it somewhere safe.
+					</p>
+				</div>
+
+				<UFormField label="API Key">
+					<UInput
+						:model-value="createdKey?.token"
+						readonly
+						:type="revealToken ? 'text' : 'password'"
+						class="w-full"
+						:ui="{ trailing: 'pe-1' }"
+					>
+						<template #trailing>
+							<UButton
+								color="neutral"
+								variant="link"
+								size="sm"
+								:icon="revealToken ? 'i-lucide-eye-off' : 'i-lucide-eye'"
+								:aria-label="revealToken ? 'Hide key' : 'Show key'"
+								:aria-pressed="revealToken"
+								@click="revealToken = !revealToken"
+							/>
+							<UButton
+								color="neutral"
+								variant="link"
+								size="sm"
+								icon="i-lucide-copy"
+								aria-label="Copy key"
+								@click="copyToken"
+							/>
+						</template>
+					</UInput>
+				</UFormField>
+			</div>
+
+			<template #footer>
+				<UButton label="Done" color="primary" @click="onTokenDialogClose" />
+			</template>
+		</DashboardModal>
+	</div>
+</template>
diff --git a/app/pages/dashboard/apikeys/index.vue b/app/pages/dashboard/apikeys/index.vue
new file mode 100644
index 0000000..97841a0
--- /dev/null
+++ b/app/pages/dashboard/apikeys/index.vue
@@ -0,0 +1,151 @@
+<script setup lang="ts">
+import type { TableColumn } from "@nuxt/ui";
+import type { APIKey } from "~/utils/types";
+
+definePageMeta({
+	layout: "dashboard",
+});
+
+useSeoMeta({
+	title: "API Keys | NetIgnite",
+	description: "Manage your API keys",
+});
+
+const toast = useToast();
+
+const columns: TableColumn<APIKey>[] = [
+	{ accessorKey: "id", header: "ID" },
+	{ accessorKey: "description", header: "Description" },
+	{ accessorKey: "created_at", header: "Created At" },
+	{ accessorKey: "expires_at", header: "Expires At" },
+	{ id: "status", header: "Status" },
+	{ id: "actions", header: "" },
+];
+
+const apiKeys = await useAPIAsyncData<APIKey[]>("account-apikeys", async () => {
+	const res = await useAPI((api) => api.getAccountApikeys({}));
+	if (!res.success) {
+		toast.add({ title: "Failed to load API keys", description: res.message, color: "error" });
+		return [];
+	}
+	return res.data;
+});
+
+function isExpired(key: APIKey) {
+	return key.expires_at !== null && key.expires_at < Date.now();
+}
+
+const deleteConfirmOpen = ref(false);
+const deleteTargetId = ref<string | null>(null);
+
+function openDelete(key: APIKey) {
+	deleteTargetId.value = key.id;
+	deleteConfirmOpen.value = true;
+}
+
+async function onDeleteApiKey() {
+	const apiKeyID = deleteTargetId.value;
+	if (!apiKeyID) return;
+
+	const res = await useAPI((api) => api.deleteAccountApikeysByApiKeyId({ path: { apiKeyID } }));
+	if (!res.success) {
+		toast.add({
+			title: "Failed to delete API key",
+			description: res.message,
+			icon: "i-lucide-alert-circle",
+			color: "error",
+		});
+		throw new Error(res.message);
+	}
+
+	toast.add({ title: "API key deleted", color: "success" });
+	await apiKeys.refresh();
+}
+</script>
+
+<template>
+	<UDashboardPanel>
+		<template #header>
+			<DashboardPageHeader title="API Keys" icon="i-lucide-key" description="Manage your API keys" />
+		</template>
+
+		<template #body>
+			<DashboardPageBody>
+				<DashboardDataTable
+					:data="apiKeys.data"
+					:columns="columns"
+					:loading="apiKeys.loading"
+					:filters="[
+						{
+							column: 'description',
+							type: 'text',
+							placeholder: 'Search description...',
+							icon: 'i-lucide-search',
+						},
+					]"
+					empty-title="No API keys"
+					empty-description="Create your first API key to get started."
+					empty-icon="i-lucide-key"
+					@refresh="apiKeys.refresh()"
+				>
+					<template #header-right>
+						<UButton label="New API Key" icon="i-lucide-plus" color="primary" to="/dashboard/apikeys/new" />
+					</template>
+
+					<template #id-cell="{ row }">
+						<NuxtLink
+							:to="`/dashboard/apikeys/${row.original.id}`"
+							class="font-medium text-primary hover:underline"
+						>
+							{{ row.original.id }}
+						</NuxtLink>
+					</template>
+
+					<template #description-cell="{ row }">
+						<span class="line-clamp-1 max-w-xs text-slate-400">
+							{{ row.original.description || "—" }}
+						</span>
+					</template>
+
+					<template #created_at-cell="{ row }">
+						<span class="text-sm">{{ formatDate(row.original.created_at) }}</span>
+					</template>
+
+					<template #expires_at-cell="{ row }">
+						<span v-if="row.original.expires_at" class="text-sm" :class="isExpired(row.original) ? 'text-red-500' : ''">
+							{{ formatDate(row.original.expires_at) }}
+						</span>
+						<span v-else class="text-sm text-slate-400">Never</span>
+					</template>
+
+					<template #status-cell="{ row }">
+						<UBadge v-if="isExpired(row.original)" color="error" variant="soft" size="sm">Expired</UBadge>
+						<UBadge v-else color="success" variant="soft" size="sm">Active</UBadge>
+					</template>
+
+					<template #actions-cell="{ row }">
+						<UButton
+							icon="i-lucide-trash"
+							color="error"
+							variant="ghost"
+							size="sm"
+							aria-label="Delete API key"
+							@click="openDelete(row.original)"
+						/>
+					</template>
+
+					<template #empty-actions>
+						<UButton label="Create API Key" color="primary" to="/dashboard/apikeys/new" />
+					</template>
+				</DashboardDataTable>
+			</DashboardPageBody>
+		</template>
+	</UDashboardPanel>
+
+	<DashboardDeleteModal
+		v-model:open="deleteConfirmOpen"
+		title="Delete API Key"
+		warning-text="Anything using this API key will stop working. This action cannot be undone."
+		:on-delete="onDeleteApiKey"
+	/>
+</template>
diff --git a/app/pages/dashboard/devices/[device_id].vue b/app/pages/dashboard/devices/[device_id].vue
new file mode 100644
index 0000000..02083ee
--- /dev/null
+++ b/app/pages/dashboard/devices/[device_id].vue
@@ -0,0 +1,135 @@
+<script setup lang="ts">
+/**
+ * Parent route for one device (`/dashboard/devices/new` or `/dashboard/devices/<id>`). Loads the
+ * device once and hands it to the child pages via `useSubrouterInjectedData`.
+ */
+import type { NuxtError } from "#app";
+import type { UseSubrouterPathDynamics } from "~/composables/useSubrouterPathDynamics";
+import type { Device, NewDevice } from "~/utils/types";
+
+definePageMeta({
+	layout: "dashboard",
+});
+
+const route = useRoute();
+const deviceParam = safeDecodeURIComponent(route.params.device_id as string);
+const isNew = deviceParam === "new";
+
+let error: NuxtError | null = null;
+let device: ComputedRef<Device | null> | null = null;
+
+if (isNew) {
+	useSubrouterInjectedData<Device, NewDevice>("device", true).provide({
+		data: ref<NewDevice>({
+			name: "",
+			type: "desktop",
+			description: "",
+			mac_address: "",
+			wol_port: 9,
+			agent_id: null,
+			status_method: "none",
+			status_address: null,
+			status_tcp_port: null,
+			host_agent_id: null,
+		}),
+		isNew: true,
+	});
+} else {
+	const deviceID = Number(deviceParam);
+	const {
+		data: result,
+		refresh,
+		loading,
+	} = await useAPIAsyncData(`device-${deviceID}`, async () =>
+		Number.isInteger(deviceID) && deviceID > 0
+			? await useAPI((api) => api.getDevicesByDeviceId({ path: { deviceID } }))
+			: ({ success: false, code: 404, message: "Device not found" } as const),
+	);
+
+	if (!result.value?.success) {
+		error = createError({
+			statusCode: result.value?.code || 500,
+			statusMessage: result.value?.message || "Failed to load device",
+		});
+	}
+
+	device = computed(() => (result.value?.success ? result.value.data : null));
+
+	useSubrouterInjectedData<Device, NewDevice>("device", true).provide({
+		data: device as ComputedRef<Device>,
+		refresh,
+		loading,
+		isNew: false,
+	});
+}
+
+function getRoutesConfig(): UseSubrouterPathDynamics.RoutesConfig {
+	const base = `/dashboard/devices/${deviceParam}`;
+	const name = device?.value?.name ?? deviceParam;
+
+	const routes: UseSubrouterPathDynamics.RoutesConfig = {
+		[base]: {
+			isNavLink: true,
+			label: "General",
+			icon: "i-lucide-monitor",
+			exact: true,
+			getDynamicValues() {
+				return {
+					seoSettings: {
+						title: isNew ? "New Device" : name,
+						description: isNew ? "Add a device" : `Manage ${name}`,
+					},
+					breadcrumbItems: [{ label: isNew ? "New device" : name }],
+				};
+			},
+		},
+	};
+
+	if (!isNew && device?.value?.access_role === "owner") {
+		routes[`${base}/sharing`] = {
+			isNavLink: true,
+			label: "Sharing",
+			icon: "i-lucide-users",
+			getDynamicValues() {
+				return {
+					seoSettings: { title: `Sharing · ${name}`, description: `Share ${name} with other users` },
+					breadcrumbItems: [{ label: name, to: base }, { label: "Sharing" }],
+				};
+			},
+		};
+	}
+
+	return routes;
+}
+
+const subrouterPathDynamics = useSubrouterPathDynamics({
+	baseTitle: "Devices | NetIgnite",
+	basebreadcrumbItems: [{ label: "Devices", to: "/dashboard/devices" }],
+	routes: getRoutesConfig(),
+});
+
+const routePathDynamicValues = await useAwaitedComputed(async () => {
+	const values = await subrouterPathDynamics.getPathDynamicValues(route.path);
+	useSeoMeta(values.seoSettings);
+	return values;
+});
+</script>
+
+<template>
+	<UDashboardPanel>
+		<template #header>
+			<DashboardPageHeader icon="i-lucide-monitor" :breadcrumb-items="routePathDynamicValues.breadcrumbItems" />
+
+			<UDashboardToolbar v-if="!isNew && !error">
+				<UNavigationMenu :items="subrouterPathDynamics.links" highlight class="-mx-1 flex-1" />
+			</UDashboardToolbar>
+		</template>
+
+		<template #body>
+			<div class="flex w-full flex-col gap-4 sm:gap-6 lg:gap-12">
+				<UError v-if="error" :error="error" />
+				<NuxtPage v-else />
+			</div>
+		</template>
+	</UDashboardPanel>
+</template>
diff --git a/app/pages/dashboard/devices/[device_id]/index.vue b/app/pages/dashboard/devices/[device_id]/index.vue
new file mode 100644
index 0000000..b1fdfda
--- /dev/null
+++ b/app/pages/dashboard/devices/[device_id]/index.vue
@@ -0,0 +1,355 @@
+<script setup lang="ts">
+import { zPostDevicesBody } from "~/api-client/zod.gen";
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+import type { Agent, Device, NewDevice } from "~/utils/types";
+
+const toast = useToast();
+const actions = useDeviceActions();
+
+const device = useSubrouterInjectedData<Device, NewDevice>("device", true).inject();
+
+const isOwner = device.isNew || device.data.value.access_role === "owner";
+const canEdit = device.isNew || ["owner", "manager"].includes(device.data.value.access_role);
+
+function toFormState(source: NewDevice | Device): NewDevice {
+	return {
+		name: source.name,
+		type: source.type,
+		description: source.description ?? "",
+		mac_address: source.mac_address,
+		wol_port: source.wol_port ?? 9,
+		agent_id: source.agent_id ?? null,
+		status_method: source.status_method ?? "none",
+		status_address: source.status_address ?? null,
+		status_tcp_port: source.status_tcp_port ?? null,
+		host_agent_id: source.host_agent_id ?? null,
+	};
+}
+
+const formState = ref<NewDevice>(toFormState(device.data.value));
+
+// Referenced here (not only in the template) so Biome keeps it a value import.
+const formSchema = zPostDevicesBody;
+
+// Agents are never shared, so only the owner can pick them.
+const agents = await useAPILazyAsyncData<Agent[]>("device-form-agents", async () => {
+	if (!isOwner) return [];
+	const res = await useAPI((api) => api.getAgents({}));
+	return res.success ? res.data : [];
+});
+
+const wolAgentOptions = computed(() => [
+	{ label: "No agent", value: null },
+	...(agents.data.value ?? []).map((agent) => ({
+		label: `${agent.name} (${AgentKinds[agent.kind].label})`,
+		value: agent.id,
+	})),
+]);
+const hostAgentOptions = computed(() => [
+	{ label: "None", value: null },
+	...(agents.data.value ?? [])
+		.filter((agent) => agent.kind === "linux")
+		.map((agent) => ({ label: agent.name, value: agent.id })),
+]);
+
+const typeOptions = Object.entries(DeviceTypes).map(([value, type]) => ({
+	label: type.label,
+	value,
+	icon: type.icon,
+}));
+const statusMethodOptions = Object.entries(StatusMethods).map(([value, method]) => ({
+	label: method.label,
+	value,
+}));
+
+const needsAddress = computed(() =>
+	["ipv4", "ipv6", "ssh"].includes(formState.value.status_method ?? "none"),
+);
+const addressPlaceholder = computed(() =>
+	formState.value.status_method === "ipv4"
+		? "192.168.1.20"
+		: formState.value.status_method === "ipv6"
+			? "fd00::20"
+			: "nas.local or 192.168.1.20",
+);
+
+const saving = ref(false);
+
+async function onSubmit() {
+	saving.value = true;
+	const body: NewDevice = {
+		...formState.value,
+		status_address: needsAddress.value ? formState.value.status_address || null : null,
+	};
+
+	const res = device.isNew
+		? await useAPI((api) => api.postDevices({ body }))
+		: await useAPI((api) =>
+				api.putDevicesByDeviceId({
+					path: { deviceID: device.data.value.id },
+					// Managers can't change the agents; don't send them.
+					body: isOwner ? body : { ...body, agent_id: undefined, host_agent_id: undefined },
+				}),
+			);
+	saving.value = false;
+
+	if (!res.success) {
+		toast.add({
+			title: "Couldn't save the device",
+			description: res.message,
+			color: "error",
+			icon: "i-lucide-alert-circle",
+		});
+		return;
+	}
+
+	toast.add({
+		title: device.isNew ? "Device added" : "Device saved",
+		color: "success",
+		icon: "i-lucide-check",
+	});
+	if (device.isNew) {
+		await navigateTo(`/dashboard/devices/${res.data.id}`);
+	} else {
+		await device.refresh();
+	}
+}
+
+const checking = ref(false);
+
+async function checkNow() {
+	if (device.isNew) return;
+	checking.value = true;
+	await actions.refreshStatus(device.data.value);
+	await device.refresh();
+	checking.value = false;
+}
+
+async function toggleFavorite() {
+	if (device.isNew) return;
+	if (await actions.setFavorite(device.data.value, !device.data.value.favorite))
+		await device.refresh();
+}
+
+const deleteOpen = ref(false);
+
+async function onDelete() {
+	if (device.isNew) return;
+	const res = await useAPI((api) =>
+		api.deleteDevicesByDeviceId({ path: { deviceID: device.data.value.id } }),
+	);
+	if (!res.success) {
+		toast.add({ title: "Couldn't delete the device", description: res.message, color: "error" });
+		throw new Error(res.message);
+	}
+	toast.add({ title: "Device deleted", color: "success" });
+	await navigateTo("/dashboard/devices");
+}
+
+async function leaveDevice() {
+	if (device.isNew) return;
+	const user = await useUserInfoStore().use();
+	const res = await useAPI((api) =>
+		api.deleteDevicesByDeviceIdSharesByUserId({
+			path: { deviceID: device.data.value.id, userID: user.value.id },
+		}),
+	);
+	if (!res.success) {
+		toast.add({ title: "Couldn't leave the device", description: res.message, color: "error" });
+		return;
+	}
+	toast.add({ title: "You no longer have access to this device", color: "success" });
+	await navigateTo("/dashboard/devices");
+}
+</script>
+
+<template>
+	<div class="mx-auto w-full space-y-6 lg:w-3xl">
+		<template v-if="!device.isNew">
+			<DashboardSectionCard title="Status" description="Power and online status" icon="i-lucide-activity">
+				<template #actions>
+					<UButton
+						:icon="device.data.value.favorite ? 'i-lucide-star' : 'i-lucide-star-off'"
+						:color="device.data.value.favorite ? 'warning' : 'neutral'"
+						variant="ghost"
+						:label="device.data.value.favorite ? 'Favorite' : 'Add to favorites'"
+						@click="toggleFavorite"
+					/>
+				</template>
+
+				<div class="flex flex-wrap items-center justify-between gap-4">
+					<div class="flex items-center gap-3">
+						<DevicesStatusBadge :status="device.data.value.status" />
+						<UButton
+							label="Check now"
+							icon="i-lucide-refresh-cw"
+							color="neutral"
+							variant="ghost"
+							size="sm"
+							:loading="checking"
+							:disabled="device.data.value.status_method === 'none'"
+							@click="checkNow"
+						/>
+					</div>
+					<DevicesPowerButtons :device="device.data.value" size="md" @changed="device.refresh()" />
+				</div>
+
+				<p v-if="device.data.value.access_role !== 'owner'" class="mt-4 text-sm text-slate-400">
+					Shared with you by {{ device.data.value.owner.display_name }} as
+					<strong>{{ AccessRoles[device.data.value.access_role].label }}</strong>:
+					{{ AccessRoles[device.data.value.access_role].description }}
+				</p>
+			</DashboardSectionCard>
+		</template>
+
+		<div v-else>
+			<h2 class="text-xl font-semibold text-white">Add a device</h2>
+			<p class="mt-1 text-sm text-slate-400">
+				Enter the device's MAC address and pick the agent in the same network that wakes it.
+			</p>
+		</div>
+
+		<DashboardSectionCard
+			title="Settings"
+			:description="canEdit ? 'Name, Wake-on-LAN and status check' : 'Only the owner and managers can change these'"
+			icon="i-lucide-settings"
+		>
+			<UForm
+				:schema="formSchema"
+				:state="formState"
+				:disabled="!canEdit"
+				class="divide-y divide-slate-800"
+				@submit="onSubmit"
+			>
+				<UFormField name="name" label="Name" required class="flex items-start justify-between gap-4 py-4 first:pt-0 max-sm:flex-col" :ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }">
+					<UInput v-model="formState.name" placeholder="Gaming PC" class="w-full" />
+				</UFormField>
+
+				<UFormField name="type" label="Type" class="flex items-start justify-between gap-4 py-4 max-sm:flex-col" :ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }">
+					<USelect v-model="formState.type" :items="typeOptions" class="w-full" />
+				</UFormField>
+
+				<UFormField name="description" label="Description" class="flex items-start justify-between gap-4 py-4 max-sm:flex-col" :ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }">
+					<UTextarea v-model="formState.description" :rows="2" autoresize placeholder="Optional" class="w-full" />
+				</UFormField>
+
+				<UFormField
+					name="mac_address"
+					label="MAC address"
+					description="Of the device's wired network card, e.g. AA:BB:CC:DD:EE:FF."
+					required
+					class="flex items-start justify-between gap-4 py-4 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }"
+				>
+					<UInput v-model="formState.mac_address" placeholder="AA:BB:CC:DD:EE:FF" class="w-full font-mono" />
+				</UFormField>
+
+				<UFormField
+					name="wol_port"
+					label="Wake-on-LAN port"
+					description="UDP port of the magic packet; 9 unless the device expects 7."
+					class="flex items-start justify-between gap-4 py-4 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }"
+				>
+					<UInputNumber v-model="formState.wol_port" :min="1" :max="65535" class="w-full" />
+				</UFormField>
+
+				<UFormField
+					name="agent_id"
+					label="Agent"
+					:description="isOwner ? 'The agent in the same network that sends the magic packet.' : 'Chosen by the owner.'"
+					class="flex items-start justify-between gap-4 py-4 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }"
+				>
+					<USelect v-if="isOwner" v-model="formState.agent_id" :items="wolAgentOptions" class="w-full" />
+					<UInput v-else :model-value="device.isNew ? '' : (device.data.value.agent?.name ?? 'None')" disabled class="w-full" />
+				</UFormField>
+
+				<UFormField
+					name="status_method"
+					label="Status check"
+					:description="StatusMethods[formState.status_method ?? 'none'].description"
+					class="flex items-start justify-between gap-4 py-4 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }"
+				>
+					<USelect v-model="formState.status_method" :items="statusMethodOptions" class="w-full" />
+				</UFormField>
+
+				<UFormField
+					v-if="needsAddress"
+					name="status_address"
+					label="Address"
+					description="Checked by the device's agent, so it must be reachable from the agent's network."
+					required
+					class="flex items-start justify-between gap-4 py-4 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }"
+				>
+					<UInput v-model="formState.status_address" :placeholder="addressPlaceholder" class="w-full font-mono" />
+				</UFormField>
+
+				<UFormField
+					v-if="['link_local', 'ipv4', 'ipv6', 'ssh'].includes(formState.status_method ?? 'none')"
+					name="status_tcp_port"
+					label="TCP port"
+					:description="formState.status_method === 'ssh' ? 'Defaults to 22.' : 'Optional: also counts the device as online when this port accepts connections (e.g. 445, 3389).'"
+					class="flex items-start justify-between gap-4 py-4 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }"
+				>
+					<UInputNumber v-model="formState.status_tcp_port" :min="1" :max="65535" placeholder="None" class="w-full" />
+				</UFormField>
+
+				<UFormField
+					name="host_agent_id"
+					label="Linux agent on the device"
+					description="Reports the device's status and enables shut down and reboot."
+					class="flex items-start justify-between gap-4 py-4 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-80' }"
+				>
+					<USelect v-if="isOwner" v-model="formState.host_agent_id" :items="hostAgentOptions" class="w-full" />
+					<UInput v-else :model-value="device.isNew ? '' : (device.data.value.host_agent?.name ?? 'None')" disabled class="w-full" />
+				</UFormField>
+
+				<div v-if="canEdit" class="flex justify-end pt-4">
+					<UButton type="submit" :label="device.isNew ? 'Add device' : 'Save'" icon="i-lucide-save" :loading="saving" />
+				</div>
+			</UForm>
+		</DashboardSectionCard>
+
+		<DashboardSectionCard
+			v-if="!device.isNew && isOwner"
+			title="Danger Zone"
+			description="Irreversible actions"
+			icon="i-lucide-alert-triangle"
+			tone="danger"
+		>
+			<div class="flex flex-col gap-4 md:flex-row md:items-center">
+				<div class="flex-1">
+					<h4 class="font-medium text-white">Delete device</h4>
+					<p class="mt-1 text-sm text-slate-400">Removes the device and all its shares.</p>
+				</div>
+				<UButton label="Delete device" color="error" variant="soft" icon="i-lucide-trash-2" @click="deleteOpen = true" />
+			</div>
+		</DashboardSectionCard>
+
+		<DashboardSectionCard
+			v-if="!device.isNew && !isOwner"
+			title="Leave device"
+			description="Remove this shared device from your account"
+			icon="i-lucide-log-out"
+			tone="danger"
+		>
+			<div class="flex flex-col gap-4 md:flex-row md:items-center">
+				<p class="flex-1 text-sm text-slate-400">You lose access until the owner shares it with you again.</p>
+				<UButton label="Leave" color="error" variant="soft" icon="i-lucide-log-out" @click="leaveDevice" />
+			</div>
+		</DashboardSectionCard>
+	</div>
+
+	<DashboardDeleteModal
+		v-if="!device.isNew"
+		v-model:open="deleteOpen"
+		title="Delete Device"
+		warning-text="The device and its shares are removed. This can't be undone."
+		:on-delete="onDelete"
+	/>
+</template>
diff --git a/app/pages/dashboard/devices/[device_id]/sharing.vue b/app/pages/dashboard/devices/[device_id]/sharing.vue
new file mode 100644
index 0000000..02c13ce
--- /dev/null
+++ b/app/pages/dashboard/devices/[device_id]/sharing.vue
@@ -0,0 +1,145 @@
+<script setup lang="ts">
+import { zPostDevicesByDeviceIdSharesBody } from "~/api-client/zod.gen";
+import type { Device, DeviceShare, NewDevice } from "~/utils/types";
+
+const toast = useToast();
+const device = useSubrouterInjectedData<Device, NewDevice>("device", true).inject();
+
+if (device.isNew || device.data.value.access_role !== "owner") {
+	throw createError({ statusCode: 403, statusMessage: "Only the device's owner can share it" });
+}
+const deviceID = device.data.value.id;
+
+const shares = await useAPIAsyncData<DeviceShare[]>(`device-${deviceID}-shares`, async () => {
+	const res = await useAPI((api) => api.getDevicesByDeviceIdShares({ path: { deviceID } }));
+	if (!res.success) {
+		toast.add({ title: "Failed to load shares", description: res.message, color: "error" });
+		return [];
+	}
+	return res.data;
+});
+
+const roleOptions = (["viewer", "operator", "manager"] as const).map((role) => ({
+	label: AccessRoles[role].label,
+	value: role,
+	description: AccessRoles[role].description,
+}));
+
+type ShareRole = DeviceShare["role"];
+
+const formSchema = zPostDevicesByDeviceIdSharesBody;
+const formState = ref<{ user: string; role: ShareRole }>({ user: "", role: "operator" });
+const sharing = ref(false);
+
+async function onShare() {
+	sharing.value = true;
+	const res = await useAPI((api) =>
+		api.postDevicesByDeviceIdShares({ path: { deviceID }, body: { ...formState.value } }),
+	);
+	sharing.value = false;
+
+	if (!res.success) {
+		toast.add({
+			title: "Couldn't share the device",
+			description: res.message,
+			color: "error",
+			icon: "i-lucide-alert-circle",
+		});
+		return;
+	}
+	toast.add({
+		title: `Shared with ${res.data.user.display_name}`,
+		color: "success",
+		icon: "i-lucide-check",
+	});
+	formState.value.user = "";
+	await shares.refresh();
+}
+
+async function changeRole(share: DeviceShare, role: ShareRole) {
+	const res = await useAPI((api) =>
+		api.putDevicesByDeviceIdSharesByUserId({
+			path: { deviceID, userID: share.user.id },
+			body: { role },
+		}),
+	);
+	if (!res.success) {
+		toast.add({ title: "Couldn't change the role", description: res.message, color: "error" });
+	}
+	await shares.refresh();
+}
+
+async function removeShare(share: DeviceShare) {
+	const res = await useAPI((api) =>
+		api.deleteDevicesByDeviceIdSharesByUserId({ path: { deviceID, userID: share.user.id } }),
+	);
+	if (!res.success) {
+		toast.add({ title: "Couldn't remove the share", description: res.message, color: "error" });
+		return;
+	}
+	toast.add({ title: `${share.user.display_name} no longer has access`, color: "success" });
+	await shares.refresh();
+}
+</script>
+
+<template>
+	<div class="mx-auto w-full space-y-6 lg:w-3xl">
+		<div>
+			<h2 class="text-xl font-semibold text-white">Sharing</h2>
+			<p class="mt-1 text-sm text-slate-400">
+				Let other users see or control this device. Commands still go through your agent; you stay the
+				owner.
+			</p>
+		</div>
+
+		<DashboardSectionCard title="Share with a user" icon="i-lucide-user-plus">
+			<UForm :schema="formSchema" :state="formState" class="flex flex-col gap-4 sm:flex-row sm:items-start" @submit="onShare">
+				<UFormField name="user" class="flex-1">
+					<UInput v-model="formState.user" placeholder="Username or email address" icon="i-lucide-at-sign" class="w-full" />
+				</UFormField>
+				<UFormField name="role">
+					<USelect v-model="formState.role" :items="roleOptions" class="w-full sm:w-40" />
+				</UFormField>
+				<UButton type="submit" label="Share" icon="i-lucide-share-2" :loading="sharing" />
+			</UForm>
+
+			<ul class="mt-4 space-y-1 text-sm text-slate-400">
+				<li v-for="role in roleOptions" :key="role.value">
+					<strong class="text-slate-200">{{ role.label }}</strong>: {{ role.description }}
+				</li>
+			</ul>
+		</DashboardSectionCard>
+
+		<DashboardSectionCard title="People with access" icon="i-lucide-users" flush>
+			<UEmpty
+				v-if="!shares.loading.value && (shares.data.value?.length ?? 0) === 0"
+				variant="naked"
+				icon="i-lucide-users"
+				title="Not shared yet"
+				description="Only you can see this device."
+				class="py-10"
+			/>
+			<ul v-else class="divide-y divide-slate-800">
+				<li v-for="share in shares.data.value" :key="share.user.id" class="flex flex-wrap items-center gap-4 px-6 py-4">
+					<div class="min-w-0 flex-1">
+						<p class="font-medium text-white">{{ share.user.display_name }}</p>
+						<p class="text-sm text-slate-400">@{{ share.user.username }} · shared {{ formatRelative(share.created_at) }}</p>
+					</div>
+					<USelect
+						:model-value="share.role"
+						:items="roleOptions"
+						class="w-36"
+						@update:model-value="(role) => changeRole(share, role as ShareRole)"
+					/>
+					<UButton
+						icon="i-lucide-x"
+						color="error"
+						variant="ghost"
+						:aria-label="`Remove ${share.user.display_name}`"
+						@click="removeShare(share)"
+					/>
+				</li>
+			</ul>
+		</DashboardSectionCard>
+	</div>
+</template>
diff --git a/app/pages/dashboard/devices/index.vue b/app/pages/dashboard/devices/index.vue
new file mode 100644
index 0000000..dca2c39
--- /dev/null
+++ b/app/pages/dashboard/devices/index.vue
@@ -0,0 +1,128 @@
+<script setup lang="ts">
+import type { TableColumn } from "@nuxt/ui";
+import type { Device } from "~/utils/types";
+
+definePageMeta({
+	layout: "dashboard",
+});
+
+useSeoMeta({
+	title: "Devices | NetIgnite",
+	description: "Your devices and devices shared with you",
+});
+
+const toast = useToast();
+const actions = useDeviceActions();
+
+const columns: TableColumn<Device>[] = [
+	{ id: "favorite", header: "" },
+	{ accessorKey: "name", header: "Name" },
+	{ accessorKey: "type", header: "Type" },
+	{ id: "state", accessorFn: (device) => device.status.state, header: "Status" },
+	{ accessorKey: "access_role", header: "Access" },
+	{ id: "actions", header: "" },
+];
+
+const devices = await useAPIAsyncData<Device[]>("devices", async () => {
+	const res = await useAPI((api) => api.getDevices({}));
+	if (!res.success) {
+		toast.add({ title: "Failed to load devices", description: res.message, color: "error" });
+		return [];
+	}
+	return res.data;
+});
+
+useInterval(() => devices.refresh(), 20_000);
+
+const typeOptions = Object.entries(DeviceTypes).map(([value, type]) => ({
+	label: type.label,
+	value,
+}));
+const stateOptions = Object.entries(OnlineStates).map(([value, state]) => ({
+	label: state.label,
+	value,
+}));
+
+async function toggleFavorite(device: Device) {
+	if (await actions.setFavorite(device, !device.favorite)) await devices.refresh();
+}
+</script>
+
+<template>
+	<UDashboardPanel>
+		<template #header>
+			<DashboardPageHeader title="Devices" icon="i-lucide-monitor" description="Power on and check your devices" />
+		</template>
+
+		<template #body>
+			<DashboardPageBody>
+				<DashboardDataTable
+					:data="devices.data"
+					:columns="columns"
+					:loading="devices.loading"
+					:filters="[
+						{ column: 'name', type: 'text', placeholder: 'Search devices...', icon: 'i-lucide-search' },
+						{ column: 'state', type: 'select', placeholder: 'All statuses', options: stateOptions },
+						{ column: 'type', type: 'select', placeholder: 'All types', options: typeOptions },
+					]"
+					empty-title="No devices"
+					empty-description="Add a device to wake it from anywhere."
+					empty-icon="i-lucide-monitor"
+					@refresh="devices.refresh()"
+				>
+					<template #header-right>
+						<UButton label="Add device" icon="i-lucide-plus" to="/dashboard/devices/new" />
+					</template>
+
+					<template #favorite-cell="{ row }">
+						<UButton
+							:icon="row.original.favorite ? 'i-lucide-star' : 'i-lucide-star-off'"
+							:color="row.original.favorite ? 'warning' : 'neutral'"
+							variant="ghost"
+							size="sm"
+							:aria-label="row.original.favorite ? 'Remove from favorites' : 'Add to favorites'"
+							@click="toggleFavorite(row.original)"
+						/>
+					</template>
+
+					<template #name-cell="{ row }">
+						<NuxtLink :to="`/dashboard/devices/${row.original.id}`" class="font-medium text-primary hover:underline">
+							{{ row.original.name }}
+						</NuxtLink>
+						<p v-if="row.original.description" class="line-clamp-1 max-w-xs text-sm text-slate-400">
+							{{ row.original.description }}
+						</p>
+					</template>
+
+					<template #type-cell="{ row }">
+						<span class="inline-flex items-center gap-2 text-sm">
+							<UIcon :name="DeviceTypes[row.original.type].icon" class="size-4 text-slate-400" />
+							{{ DeviceTypes[row.original.type].label }}
+						</span>
+					</template>
+
+					<template #state-cell="{ row }">
+						<DevicesStatusBadge :status="row.original.status" />
+					</template>
+
+					<template #access_role-cell="{ row }">
+						<UBadge :color="AccessRoles[row.original.access_role].color" variant="subtle" size="sm">
+							{{ AccessRoles[row.original.access_role].label }}
+						</UBadge>
+						<p v-if="row.original.access_role !== 'owner'" class="text-xs text-slate-500">
+							by {{ row.original.owner.display_name }}
+						</p>
+					</template>
+
+					<template #actions-cell="{ row }">
+						<DevicesPowerButtons :device="row.original" @changed="devices.refresh()" />
+					</template>
+
+					<template #empty-actions>
+						<UButton label="Add device" color="primary" to="/dashboard/devices/new" />
+					</template>
+				</DashboardDataTable>
+			</DashboardPageBody>
+		</template>
+	</UDashboardPanel>
+</template>
diff --git a/app/pages/dashboard/index.vue b/app/pages/dashboard/index.vue
new file mode 100644
index 0000000..583cfc0
--- /dev/null
+++ b/app/pages/dashboard/index.vue
@@ -0,0 +1,157 @@
+<script setup lang="ts">
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+import type { Agent, Device } from "~/utils/types";
+
+definePageMeta({
+	layout: "dashboard",
+});
+
+useSeoMeta({
+	title: "Dashboard | NetIgnite",
+	description: "Your devices at a glance",
+});
+
+const userInfoStore = useUserInfoStore();
+const user = await userInfoStore.use();
+if (!userInfoStore.isValid(user)) {
+	throw createError({ statusCode: 401, statusMessage: "Not authenticated" });
+}
+
+const devices = await useAPILazyAsyncData<Device[]>("dashboard-devices", async () => {
+	const res = await useAPI((api) => api.getDevices({}));
+	return res.success ? res.data : [];
+});
+
+const agents = await useAPILazyAsyncData<Agent[]>("dashboard-agents", async () => {
+	const res = await useAPI((api) => api.getAgents({}));
+	return res.success ? res.data : [];
+});
+
+useInterval(() => {
+	devices.refresh();
+	agents.refresh();
+}, 20_000);
+
+function countState(state: Device["status"]["state"]) {
+	return devices.data.value?.filter((device) => device.status.state === state).length ?? 0;
+}
+
+const stats = computed(() => [
+	{
+		label: "Online",
+		value: countState("online"),
+		icon: "i-lucide-circle-check",
+		iconColor: "emerald" as const,
+	},
+	{
+		label: "Offline",
+		value: countState("offline"),
+		icon: "i-lucide-circle-x",
+		iconColor: "error" as const,
+	},
+	{
+		label: "Unknown",
+		value: countState("unknown"),
+		icon: "i-lucide-circle-help",
+		iconColor: "neutral" as const,
+	},
+	{
+		label: "Agents online",
+		value: `${agents.data.value?.filter((agent) => agent.state === "online").length ?? 0} / ${agents.data.value?.length ?? 0}`,
+		icon: "i-lucide-radio-tower",
+		iconColor: "primary" as const,
+	},
+]);
+
+const favorites = computed(() => devices.data.value?.filter((device) => device.favorite) ?? []);
+const shownDevices = computed(() =>
+	favorites.value.length > 0 ? favorites.value : (devices.data.value ?? []).slice(0, 8),
+);
+const hasNoAgentsOnline = computed(
+	() =>
+		(agents.data.value?.length ?? 0) > 0 &&
+		!agents.data.value?.some((agent) => agent.state === "online"),
+);
+</script>
+
+<template>
+	<UDashboardPanel>
+		<template #header>
+			<DashboardPageHeader
+				title="Overview"
+				icon="i-lucide-layout-dashboard"
+				:description="`Welcome back, ${user.display_name}`"
+			>
+				<template #right>
+					<UButton label="Add device" icon="i-lucide-plus" to="/dashboard/devices/new" />
+				</template>
+			</DashboardPageHeader>
+		</template>
+
+		<template #body>
+			<DashboardPageBody>
+				<div class="grid gap-4 sm:grid-cols-2 lg:grid-cols-4">
+					<DashboardStatCard
+						v-for="stat in stats"
+						:key="stat.label"
+						:label="stat.label"
+						:value="stat.value"
+						:loading="devices.loading.value && !devices.data.value"
+						:icon="stat.icon"
+						:icon-color="stat.iconColor"
+					/>
+				</div>
+
+				<UAlert
+					v-if="hasNoAgentsOnline"
+					color="warning"
+					variant="soft"
+					icon="i-lucide-wifi-off"
+					title="None of your agents is online"
+					description="Devices can't be woken or checked until an agent connects."
+					:actions="[{ label: 'View agents', to: '/dashboard/agents', color: 'warning', variant: 'outline' }]"
+				/>
+
+				<DashboardSectionCard
+					:title="favorites.length > 0 ? 'Favorites' : 'Devices'"
+					:description="favorites.length > 0 ? 'Your favorite devices' : 'Mark devices as favorites to pin them here'"
+					icon="i-lucide-star"
+					flush
+				>
+					<template #actions>
+						<UButton label="All devices" variant="ghost" color="neutral" trailing-icon="i-lucide-arrow-right" to="/dashboard/devices" />
+					</template>
+
+					<UEmpty
+						v-if="!devices.loading.value && shownDevices.length === 0"
+						variant="naked"
+						icon="i-lucide-monitor"
+						title="No devices yet"
+						description="Add a device and the agent that wakes it."
+						:actions="[{ label: 'Add device', icon: 'i-lucide-plus', to: '/dashboard/devices/new' }]"
+						class="py-10"
+					/>
+
+					<ul v-else class="divide-y divide-slate-800">
+						<li v-for="device in shownDevices" :key="device.id" class="flex items-center gap-4 px-6 py-4">
+							<div class="flex size-10 shrink-0 items-center justify-center rounded-lg bg-slate-800">
+								<UIcon :name="DeviceTypes[device.type].icon" class="size-5 text-primary" />
+							</div>
+							<div class="min-w-0 flex-1">
+								<NuxtLink :to="`/dashboard/devices/${device.id}`" class="font-medium text-white hover:underline">
+									{{ device.name }}
+								</NuxtLink>
+								<p class="truncate text-sm text-slate-400">
+									{{ DeviceTypes[device.type].label }}
+									<template v-if="device.access_role !== 'owner'"> · shared by {{ device.owner.display_name }}</template>
+								</p>
+							</div>
+							<DevicesStatusBadge :status="device.status" />
+							<DevicesPowerButtons :device="device" @changed="devices.refresh()" />
+						</li>
+					</ul>
+				</DashboardSectionCard>
+			</DashboardPageBody>
+		</template>
+	</UDashboardPanel>
+</template>
diff --git a/app/pages/dashboard/settings.vue b/app/pages/dashboard/settings.vue
new file mode 100644
index 0000000..acec947
--- /dev/null
+++ b/app/pages/dashboard/settings.vue
@@ -0,0 +1,47 @@
+<script setup lang="ts">
+import type { NavigationMenuItem } from "@nuxt/ui";
+
+definePageMeta({
+	layout: "dashboard",
+});
+
+useSeoMeta({
+	title: "Settings | NetIgnite",
+	description: "Manage your account settings",
+});
+
+const links = [
+	[
+		{
+			label: "General",
+			icon: "i-lucide-user",
+			to: "/dashboard/settings",
+			exact: true,
+		},
+		{
+			label: "Security",
+			icon: "i-lucide-shield",
+			to: "/dashboard/settings/security",
+		},
+	],
+] satisfies NavigationMenuItem[][];
+</script>
+
+<template>
+	<UDashboardPanel id="settings" :ui="{ body: 'lg:py-12' }">
+		<template #header>
+			<DashboardPageHeader title="Settings" icon="i-lucide-settings" />
+
+			<UDashboardToolbar>
+				<!-- `-mx-1` aligns the menu with the sidebar collapse button. -->
+				<UNavigationMenu :items="links" highlight class="-mx-1 flex-1" />
+			</UDashboardToolbar>
+		</template>
+
+		<template #body>
+			<div class="mx-auto flex w-full flex-col gap-4 sm:gap-6 lg:max-w-3xl lg:gap-12">
+				<NuxtPage />
+			</div>
+		</template>
+	</UDashboardPanel>
+</template>
diff --git a/app/pages/dashboard/settings/index.vue b/app/pages/dashboard/settings/index.vue
new file mode 100644
index 0000000..f62caa1
--- /dev/null
+++ b/app/pages/dashboard/settings/index.vue
@@ -0,0 +1,185 @@
+<script setup lang="ts">
+import type { FormSubmitEvent } from "@nuxt/ui";
+import * as z from "zod";
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+
+const toast = useToast();
+
+const userInfoStore = useUserInfoStore();
+const userInfo = await userInfoStore.use();
+if (!userInfoStore.isValid(userInfo)) {
+	throw createError({ statusCode: 401, statusMessage: "Not authenticated" });
+}
+
+const profileSchema = z.object({
+	username: z
+		.string()
+		.trim()
+		.min(5, "Must be at least 5 characters")
+		.max(40, "Must be at most 40 characters")
+		.regex(/^[a-z0-9._-]+$/, "Only lowercase letters, numbers, dots, dashes and underscores"),
+	display_name: z
+		.string()
+		.trim()
+		.min(1, "Display name is required")
+		.max(64, "Must be at most 64 characters"),
+	email: z.email("Invalid email").trim(),
+	current_password: z.string().min(1, "Current password is required to save changes"),
+});
+
+type ProfileSchema = z.output<typeof profileSchema>;
+
+const profile = reactive<Partial<ProfileSchema>>({
+	username: userInfo.value.username,
+	display_name: userInfo.value.display_name,
+	email: userInfo.value.email,
+	current_password: "",
+});
+
+const loading = ref(false);
+
+async function onSubmit(event: FormSubmitEvent<ProfileSchema>) {
+	loading.value = true;
+
+	const result = await useAPI((api) =>
+		api.putAccount({
+			body: {
+				username: event.data.username,
+				display_name: event.data.display_name,
+				email: event.data.email,
+				current_password: event.data.current_password,
+			},
+		}),
+	);
+
+	loading.value = false;
+
+	if (result.success) {
+		await userInfoStore.update({
+			username: event.data.username,
+			display_name: event.data.display_name,
+			email: event.data.email,
+		});
+		profile.current_password = "";
+
+		toast.add({
+			title: "Profile updated",
+			description: "Your profile has been successfully updated.",
+			icon: "i-lucide-check",
+			color: "success",
+		});
+	} else {
+		toast.add({
+			title: "Error",
+			description: result.message || "An error occurred while updating your profile.",
+			icon: "i-lucide-alert-circle",
+			color: "error",
+		});
+	}
+}
+</script>
+
+<template>
+	<div class="space-y-6">
+		<div>
+			<h2 class="text-xl font-semibold text-white">Profile Settings</h2>
+			<p class="mt-1 text-sm text-slate-400">Manage your public profile information</p>
+		</div>
+
+		<DashboardSectionCard
+			title="Profile Information"
+			description="Update your account profile details"
+			icon="i-lucide-user"
+		>
+			<UForm
+				id="settings"
+				:schema="profileSchema"
+				:state="profile"
+				class="divide-y divide-slate-800"
+				@submit="onSubmit"
+			>
+				<UFormField
+					name="username"
+					label="Username"
+					description="Your unique username for logging in."
+					required
+					class="flex items-start justify-between gap-4 py-4 first:pt-0 last:pb-0 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-auto' }"
+				>
+					<UInput v-model="profile.username" placeholder="Enter username" class="w-full sm:w-96" />
+				</UFormField>
+
+				<UFormField
+					name="display_name"
+					label="Display Name"
+					description="Shown to other users."
+					required
+					class="flex items-start justify-between gap-4 py-4 first:pt-0 last:pb-0 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-auto' }"
+				>
+					<UInput
+						v-model="profile.display_name"
+						placeholder="Enter display name"
+						class="w-full sm:w-96"
+					/>
+				</UFormField>
+
+				<UFormField
+					name="email"
+					label="Email"
+					description="Used for notifications and password resets."
+					required
+					class="flex items-start justify-between gap-4 py-4 first:pt-0 last:pb-0 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-auto' }"
+				>
+					<UInput
+						v-model="profile.email"
+						type="email"
+						placeholder="Enter email"
+						class="w-full sm:w-96"
+					/>
+				</UFormField>
+
+				<UFormField
+					name="current_password"
+					label="Current Password"
+					description="Enter your current password to confirm changes."
+					required
+					class="flex items-start justify-between gap-4 py-4 first:pt-0 last:pb-0 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-auto' }"
+				>
+					<UInput
+						v-model="profile.current_password"
+						type="password"
+						placeholder="Enter current password"
+						class="w-full sm:w-96"
+					/>
+				</UFormField>
+
+				<div class="pt-4">
+					<UButton
+						label="Save Changes"
+						color="primary"
+						type="submit"
+						:loading="loading"
+						icon="i-lucide-save"
+					/>
+				</div>
+			</UForm>
+		</DashboardSectionCard>
+
+		<!-- Account summary -->
+		<div class="rounded-xl border border-slate-800 bg-slate-900/60 p-6 backdrop-blur-sm">
+			<div class="flex items-center gap-4">
+				<Gravatar :email="userInfo.email" :alt="userInfo.display_name" size="xl" />
+				<div>
+					<p class="font-medium text-white">{{ userInfo.display_name || userInfo.username }}</p>
+					<p class="text-sm text-slate-400">@{{ userInfo.username }}</p>
+				</div>
+				<div class="ml-auto">
+					<UBadge :label="userInfo.role" :color="getRoleColor(userInfo.role)" variant="soft" />
+				</div>
+			</div>
+		</div>
+	</div>
+</template>
diff --git a/app/pages/dashboard/settings/security.vue b/app/pages/dashboard/settings/security.vue
new file mode 100644
index 0000000..fe44ffb
--- /dev/null
+++ b/app/pages/dashboard/settings/security.vue
@@ -0,0 +1,223 @@
+<script setup lang="ts">
+import type { FormError, FormSubmitEvent } from "@nuxt/ui";
+import * as z from "zod";
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+
+const toast = useToast();
+
+const passwordSchema = z.object({
+	current_password: z.string("Current Password is required").min(1, "Current Password is required"),
+	new_password: z
+		.string("Password is required")
+		.min(8, "Must be at least 8 characters")
+		.max(128, "Must be at most 128 characters"),
+	confirm_password: z.string("Confirm Password is required").min(1, "Confirm Password is required"),
+});
+
+type PasswordSchema = z.output<typeof passwordSchema>;
+
+const password = reactive<Partial<PasswordSchema>>({
+	current_password: undefined,
+	new_password: undefined,
+	confirm_password: undefined,
+});
+
+function validate(state: Partial<PasswordSchema>): FormError[] {
+	const errors: FormError[] = [];
+	if (
+		state.current_password &&
+		state.new_password &&
+		state.current_password === state.new_password
+	) {
+		errors.push({
+			name: "new_password",
+			message: "New password must be different from current password",
+		});
+	}
+	if (
+		state.new_password &&
+		state.confirm_password &&
+		state.new_password !== state.confirm_password
+	) {
+		errors.push({ name: "confirm_password", message: "Passwords do not match" });
+	}
+	return errors;
+}
+
+const passwordLoading = ref(false);
+
+/** Drop the local session after the server invalidated it. */
+async function endSession(redirectTo: string) {
+	await useUserInfoStore().clear();
+	useAppCookies().sessionToken.set(null);
+	await navigateTo(redirectTo);
+}
+
+async function onPasswordSubmit(event: FormSubmitEvent<PasswordSchema>) {
+	passwordLoading.value = true;
+
+	const result = await useAPI((api) =>
+		api.putAccountPassword({
+			body: {
+				current_password: event.data.current_password,
+				new_password: event.data.new_password,
+			},
+		}),
+	);
+
+	passwordLoading.value = false;
+
+	if (result.success) {
+		toast.add({
+			title: "Password updated",
+			description: "Your password has been successfully updated. Please log in again.",
+			icon: "i-lucide-check",
+			color: "success",
+		});
+		await endSession("/auth/login");
+	} else {
+		toast.add({
+			title: "Error",
+			description: result.message || "An error occurred while updating your password.",
+			icon: "i-lucide-alert-circle",
+			color: "error",
+		});
+	}
+}
+
+const deleteConfirmOpen = ref(false);
+
+async function onDeleteAccount() {
+	const result = await useAPI((api) => api.deleteAccount({}));
+
+	if (!result.success) {
+		toast.add({
+			title: "Error",
+			description: result.message || "An error occurred while deleting your account.",
+			icon: "i-lucide-alert-circle",
+			color: "error",
+		});
+		// Throwing keeps the delete modal open (see DashboardDeleteModal).
+		throw new Error(result.message);
+	}
+
+	toast.add({
+		title: "Account deleted",
+		description: "Your account has been permanently deleted.",
+		icon: "i-lucide-check",
+		color: "success",
+	});
+	await endSession("/");
+}
+</script>
+
+<template>
+	<div class="space-y-6">
+		<div>
+			<h2 class="text-xl font-semibold text-white">Security Settings</h2>
+			<p class="mt-1 text-sm text-slate-400">Manage your password and account security</p>
+		</div>
+
+		<DashboardSectionCard
+			title="Change Password"
+			description="Update your password to keep your account secure"
+			icon="i-lucide-key-round"
+		>
+			<UForm
+				:schema="passwordSchema"
+				:state="password"
+				:validate="validate"
+				class="divide-y divide-slate-800"
+				@submit="onPasswordSubmit"
+			>
+				<UFormField
+					name="current_password"
+					label="Current Password"
+					description="Enter your current password to verify."
+					required
+					class="flex items-start justify-between gap-4 py-4 first:pt-0 last:pb-0 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-auto' }"
+				>
+					<UInput
+						v-model="password.current_password"
+						type="password"
+						placeholder="Current password"
+						class="w-full sm:w-96"
+					/>
+				</UFormField>
+
+				<UFormField
+					name="new_password"
+					label="New Password"
+					description="At least 8 characters."
+					required
+					class="flex items-start justify-between gap-4 py-4 first:pt-0 last:pb-0 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-auto' }"
+				>
+					<UInput
+						v-model="password.new_password"
+						type="password"
+						placeholder="New password"
+						class="w-full sm:w-96"
+					/>
+				</UFormField>
+
+				<UFormField
+					name="confirm_password"
+					label="Confirm Password"
+					description="Re-enter your new password."
+					required
+					class="flex items-start justify-between gap-4 py-4 first:pt-0 last:pb-0 max-sm:flex-col"
+					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-auto' }"
+				>
+					<UInput
+						v-model="password.confirm_password"
+						type="password"
+						placeholder="Confirm password"
+						class="w-full sm:w-96"
+					/>
+				</UFormField>
+
+				<div class="pt-4">
+					<UButton
+						label="Update Password"
+						type="submit"
+						color="primary"
+						:loading="passwordLoading"
+						icon="i-lucide-lock"
+					/>
+				</div>
+			</UForm>
+		</DashboardSectionCard>
+
+		<DashboardSectionCard
+			title="Danger Zone"
+			description="Irreversible and destructive actions"
+			icon="i-lucide-alert-triangle"
+			tone="danger"
+		>
+			<div class="flex flex-col gap-4 md:flex-row md:items-center">
+				<div class="flex-1">
+					<h4 class="font-medium text-white">Delete Account</h4>
+					<p class="mt-1 text-sm text-slate-400">
+						Permanently delete your account and all associated data. This action cannot be undone.
+					</p>
+				</div>
+				<UButton
+					label="Delete Account"
+					color="error"
+					variant="soft"
+					icon="i-lucide-trash-2"
+					@click="deleteConfirmOpen = true"
+				/>
+			</div>
+		</DashboardSectionCard>
+
+		<DashboardDeleteModal
+			v-model:open="deleteConfirmOpen"
+			title="Delete Account"
+			warning-text="All your data and account information will be permanently deleted. This action cannot be reversed."
+			:on-delete="onDeleteAccount"
+		/>
+	</div>
+</template>
diff --git a/app/pages/welcome.vue b/app/pages/welcome.vue
new file mode 100644
index 0000000..7ac4696
--- /dev/null
+++ b/app/pages/welcome.vue
@@ -0,0 +1,122 @@
+<script setup lang="ts">
+/**
+ * One-time welcome/onboarding page (Delivr pattern). `auth.global.ts` sends signed-in users here
+ * until they finish or skip it (`REQUIRE_ONBOARDING`). Replace the steps with whatever your app
+ * needs on first login (preferences, a first project, …) and persist them before `complete()`.
+ */
+import { useOnboardingStore } from "~/composables/stores/useOnboardingStore";
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+
+definePageMeta({
+	layout: "onboarding",
+});
+
+useSeoMeta({
+	title: "Welcome | NetIgnite",
+	description: "Get started with NetIgnite.",
+});
+
+const toast = useToast();
+
+const onboardingStore = useOnboardingStore();
+const [user] = await Promise.all([useUserInfoStore().use(), onboardingStore.refreshIfNeeded()]);
+
+// Already onboarded (e.g. opened /welcome directly) → nothing to do here.
+if (onboardingStore.completed.value) {
+	await navigateTo("/dashboard");
+}
+
+const firstName = computed(() => user.value?.display_name?.trim().split(/\s+/)[0] || null);
+
+const steps = [
+	{
+		icon: "i-lucide-user",
+		title: "Complete your profile",
+		description: "Check your display name and email address.",
+		to: "/dashboard/settings",
+	},
+	{
+		icon: "i-lucide-radio-tower",
+		title: "Add an agent",
+		description: "An ESP32 or Linux agent in the network of your devices.",
+		to: "/dashboard/agents/new",
+	},
+	{
+		icon: "i-lucide-monitor",
+		title: "Add a device",
+		description: "Enter its MAC address and power it on from anywhere.",
+		to: "/dashboard/devices/new",
+	},
+];
+
+const finishing = ref(false);
+
+/** Mark onboarding done (so the first-login redirect stops firing), then continue. */
+async function complete(to = "/dashboard") {
+	finishing.value = true;
+	try {
+		await onboardingStore.update({ completed: true });
+		await navigateTo(to);
+	} catch (error) {
+		toast.add({
+			title: "Error",
+			description: (error as Error).message || "Could not save your onboarding state.",
+			icon: "i-lucide-x-circle",
+			color: "error",
+		});
+		finishing.value = false;
+	}
+}
+</script>
+
+<template>
+	<div class="space-y-6">
+		<div class="text-center">
+			<div class="mx-auto mb-4 flex size-14 items-center justify-center rounded-2xl bg-primary/15">
+				<UIcon name="i-lucide-party-popper" class="size-7 text-primary-400" />
+			</div>
+			<h1 class="text-2xl font-semibold text-white">
+				Welcome to NetIgnite<span v-if="firstName">, {{ firstName }}</span>
+			</h1>
+			<p class="mx-auto mt-2 max-w-md text-sm text-slate-400">
+				A few things you may want to do first. You can come back to all of them later in Settings.
+			</p>
+		</div>
+
+		<DashboardSectionCard
+			title="Getting started"
+			description="Pick any step — onboarding is marked complete either way"
+			icon="i-lucide-list-checks"
+			flush
+		>
+			<div class="divide-y divide-slate-800">
+				<button
+					v-for="step in steps"
+					:key="step.title"
+					type="button"
+					class="flex w-full items-center gap-4 px-6 py-4 text-left transition hover:bg-slate-800/40 disabled:opacity-50"
+					:disabled="finishing"
+					@click="complete(step.to)"
+				>
+					<UIcon :name="step.icon" class="size-5 shrink-0 text-primary-400" />
+					<div class="flex-1">
+						<p class="font-medium text-white">{{ step.title }}</p>
+						<p class="text-sm text-slate-400">{{ step.description }}</p>
+					</div>
+					<UIcon name="i-lucide-chevron-right" class="size-5 text-slate-500" />
+				</button>
+			</div>
+		</DashboardSectionCard>
+
+		<div class="flex items-center justify-between gap-3">
+			<UButton label="Skip for now" color="neutral" variant="ghost" :disabled="finishing" @click="complete()" />
+			<UButton
+				label="Go to dashboard"
+				color="primary"
+				trailing-icon="i-lucide-arrow-right"
+				:loading="finishing"
+				@click="complete()"
+			/>
+		</div>
+	</div>
+</template>
diff --git a/app/utils/abstractStore.ts b/app/utils/abstractStore.ts
new file mode 100644
index 0000000..2956f49
--- /dev/null
+++ b/app/utils/abstractStore.ts
@@ -0,0 +1,107 @@
+export abstract class BasicAbstractStore<T> {
+	protected readonly options: BasicAbstractStore.Options;
+
+	protected readonly state: Ref<T | null>;
+
+	protected constructor(
+		protected readonly storeKey: string,
+		options?: BasicAbstractStore.InitOptions,
+	) {
+		// default options
+		this.options = {
+			enableAutoFetchIfEmpty: false,
+			...options,
+		};
+
+		this.state = useState<T | null>(this.storeKey, () => null);
+	}
+
+	protected abstract fetchData(): Promise<T | null>;
+
+	protected useRaw(): Ref<T | null> {
+		return this.state;
+	}
+
+	async use(): Promise<Readonly<Ref<T | null>>> {
+		if (this.options.enableAutoFetchIfEmpty) {
+			await this.refreshIfNeeded();
+		}
+		return this.useRaw();
+	}
+
+	async refresh() {
+		const data = await this.fetchData();
+		this.useRaw().value = data;
+	}
+
+	async refreshIfNeeded() {
+		const data = this.useRaw();
+		if (!this.isValid(data)) {
+			await this.refresh();
+		}
+	}
+
+	async clear() {
+		this.useRaw().value = null;
+	}
+
+	public isValid(data: Readonly<Ref<T | null>>): data is Ref<T> {
+		return data.value !== null;
+	}
+}
+
+export abstract class BasicAbstractStoreWithMetadata<T, MetaT> extends BasicAbstractStore<T> {
+	declare protected readonly options: BasicAbstractStore.OptionsWithMetadata<MetaT>;
+
+	protected readonly metadataState: Ref<MetaT>;
+
+	protected constructor(
+		storeKey: string,
+		options: BasicAbstractStore.InitOptionsWithMetadata<MetaT>,
+	) {
+		super(storeKey, options);
+
+		this.metadataState = useState<MetaT>(`${this.storeKey}_metadata`, () => options.defaultMetadata);
+	}
+
+	protected useMetadataRaw(): Ref<MetaT> {
+		return this.metadataState;
+	}
+
+	async useMetadata(): Promise<Readonly<Ref<MetaT>>> {
+		return this.useMetadataRaw();
+	}
+
+	override async clear() {
+		await super.clear();
+		this.useMetadataRaw().value = this.options.defaultMetadata;
+	}
+}
+
+export abstract class ModifiableAbstractStore<T, UpdateT = T> extends BasicAbstractStore<T> {
+	abstract update(updates: UpdateT): Promise<void>;
+}
+
+export abstract class ModifiableAbstractStoreWithMetadata<
+	T,
+	MetaT,
+	UpdateT = T,
+> extends BasicAbstractStoreWithMetadata<T, MetaT> {
+	abstract update(updates: UpdateT): Promise<void>;
+
+	abstract updateMetadata(updates: Partial<MetaT>): Promise<void>;
+}
+
+export namespace BasicAbstractStore {
+	export interface Options {
+		enableAutoFetchIfEmpty: boolean;
+	}
+
+	export type InitOptions = Partial<Options>;
+
+	export interface OptionsWithMetadata<MetaT> extends Options {
+		defaultMetadata: MetaT;
+	}
+
+	export type InitOptionsWithMetadata<MetaT> = InitOptions & OptionsWithMetadata<MetaT>;
+}
diff --git a/app/utils/format.ts b/app/utils/format.ts
new file mode 100644
index 0000000..8500e21
--- /dev/null
+++ b/app/utils/format.ts
@@ -0,0 +1,33 @@
+/**
+ * Shared formatting helpers for timestamps and durations.
+ */
+
+export function formatDate(ts: number | null | undefined): string {
+	if (!ts) return "-";
+	return new Date(ts).toLocaleString("en-US", {
+		month: "short",
+		day: "numeric",
+		year: "numeric",
+		hour: "2-digit",
+		minute: "2-digit",
+	});
+}
+
+export function formatDateISO(ts: number | null | undefined): string {
+	if (!ts) return "";
+	const d = new Date(ts);
+	d.setMinutes(d.getMinutes() - d.getTimezoneOffset());
+	return d.toISOString().slice(0, 16);
+}
+
+export function parseDateISO(value: string): number {
+	if (!value) return 0;
+	return new Date(value).getTime();
+}
+
+export function formatDuration(seconds: number): string {
+	if (seconds < 60) return `${seconds}s`;
+	if (seconds < 3600) return `${Math.floor(seconds / 60)}m`;
+	if (seconds < 86400) return `${Math.floor(seconds / 3600)}h`;
+	return `${Math.floor(seconds / 86400)}d`;
+}
diff --git a/app/utils/netignite.ts b/app/utils/netignite.ts
new file mode 100644
index 0000000..1f84953
--- /dev/null
+++ b/app/utils/netignite.ts
@@ -0,0 +1,88 @@
+import type { Agent, Device } from "~/utils/types";
+
+type BadgeColor = "success" | "error" | "warning" | "neutral" | "primary" | "info";
+
+export const DeviceTypes: Record<Device["type"], { label: string; icon: string }> = {
+	server: { label: "Server", icon: "i-lucide-server" },
+	desktop: { label: "Desktop PC", icon: "i-lucide-monitor" },
+	laptop: { label: "Laptop", icon: "i-lucide-laptop" },
+	printer: { label: "Printer", icon: "i-lucide-printer" },
+	nas: { label: "NAS", icon: "i-lucide-hard-drive" },
+	other: { label: "Other", icon: "i-lucide-box" },
+};
+
+export const OnlineStates: Record<
+	Device["status"]["state"],
+	{ label: string; color: BadgeColor; icon: string }
+> = {
+	online: { label: "Online", color: "success", icon: "i-lucide-circle-check" },
+	offline: { label: "Offline", color: "error", icon: "i-lucide-circle-x" },
+	unknown: { label: "Unknown", color: "neutral", icon: "i-lucide-circle-help" },
+};
+
+export const StatusMethods: Record<
+	Device["status_method"],
+	{ label: string; description: string }
+> = {
+	none: { label: "Off", description: "Don't check whether the device is online." },
+	link_local: {
+		label: "MAC (IPv6 link-local)",
+		description:
+			"The agent pings the IPv6 address derived from the MAC address. Doesn't work with Windows and many Linux defaults.",
+	},
+	ipv4: { label: "IPv4 address", description: "The agent pings the device's IPv4 address." },
+	ipv6: { label: "IPv6 address", description: "The agent pings the device's IPv6 address." },
+	ssh: {
+		label: "SSH port",
+		description: "The agent checks whether the SSH port (22, or the port below) accepts connections.",
+	},
+	host_agent: {
+		label: "Linux agent on the device",
+		description: "The device is online while the NetIgnite Linux agent running on it is connected.",
+	},
+};
+
+export const AccessRoles: Record<
+	Device["access_role"],
+	{ label: string; color: BadgeColor; description: string }
+> = {
+	owner: { label: "Owner", color: "primary", description: "Full control, sharing and deletion." },
+	manager: { label: "Manager", color: "info", description: "Power actions and editing the device." },
+	operator: { label: "Operator", color: "warning", description: "Power on, shut down and reboot." },
+	viewer: { label: "Viewer", color: "neutral", description: "Sees the device and its status." },
+};
+
+export const AgentKinds: Record<Agent["kind"], { label: string; icon: string }> = {
+	esp32: { label: "ESP32", icon: "i-lucide-cpu" },
+	linux: { label: "Linux agent", icon: "i-lucide-terminal" },
+};
+
+export const AgentStates: Record<Agent["state"], { label: string; color: BadgeColor }> = {
+	online: { label: "Online", color: "success" },
+	offline: { label: "Offline", color: "error" },
+	unenrolled: { label: "Not set up", color: "warning" },
+};
+
+/** "2 minutes ago" style, or "never". */
+export function formatRelative(ts: number | null | undefined) {
+	if (!ts) return "never";
+	const seconds = Math.round((Date.now() - ts) / 1000);
+	if (seconds < 10) return "just now";
+	if (seconds < 60) return `${seconds} seconds ago`;
+	const minutes = Math.round(seconds / 60);
+	if (minutes < 60) return `${minutes} minute${minutes === 1 ? "" : "s"} ago`;
+	const hours = Math.round(minutes / 60);
+	if (hours < 24) return `${hours} hour${hours === 1 ? "" : "s"} ago`;
+	return formatDate(ts);
+}
+
+/** Runs `callback` every `ms` while the calling component is mounted. */
+export function useInterval(callback: () => void, ms: number) {
+	let timer: ReturnType<typeof setInterval> | null = null;
+	onMounted(() => {
+		timer = setInterval(callback, ms);
+	});
+	onBeforeUnmount(() => {
+		if (timer) clearInterval(timer);
+	});
+}
diff --git a/app/utils/roles.ts b/app/utils/roles.ts
new file mode 100644
index 0000000..c92adc7
--- /dev/null
+++ b/app/utils/roles.ts
@@ -0,0 +1,14 @@
+/**
+ * Single source of truth for the badge color used to represent a user role,
+ * so the admin user list and the settings page stay visually consistent.
+ */
+export function getRoleColor(role: string | null | undefined): "error" | "primary" | "neutral" {
+	switch (role) {
+		case "admin":
+			return "error";
+		case "user":
+			return "primary";
+		default:
+			return "neutral";
+	}
+}
diff --git a/app/utils/routeMatcher.ts b/app/utils/routeMatcher.ts
new file mode 100644
index 0000000..005ff3b
--- /dev/null
+++ b/app/utils/routeMatcher.ts
@@ -0,0 +1,69 @@
+type RouteMatch = {
+	route: string;
+	params: Record<string, string>;
+} | null;
+
+export class SimpleRouteMatcher {
+	constructor(protected readonly routes: string[]) {}
+
+	match(path: string): RouteMatch {
+		return SimpleRouteMatcher.match(path, this.routes);
+	}
+
+	addRoute(route: string): void {
+		this.routes.push(route);
+	}
+
+	removeRoute(route: string): void {
+		const index = this.routes.indexOf(route);
+		if (index !== -1) {
+			this.routes.splice(index, 1);
+		}
+	}
+
+	static match(path: string, routes: string[]): RouteMatch | null {
+		const normalizedPath = path.replace(/\/+$/, "") || "/";
+
+		const staticRoutes: string[] = [];
+		const dynamicRoutes: string[] = [];
+
+		for (const route of routes) {
+			if (route.includes("[")) {
+				dynamicRoutes.push(route);
+			} else {
+				staticRoutes.push(route);
+			}
+		}
+
+		// 1) Exact match for static routes
+		for (const route of staticRoutes) {
+			if (route === normalizedPath) {
+				return { route, params: {} };
+			}
+		}
+
+		// 2) Dynamic routes
+		for (const route of dynamicRoutes) {
+			const paramNames: string[] = [];
+
+			const regexStr = route.replace(/\//g, "\\/").replace(/\[([^\]]+)\]/g, (_, paramName) => {
+				paramNames.push(paramName);
+				return "([^\\/]+)";
+			});
+
+			const regex = new RegExp(`^${regexStr}$`);
+			const match = normalizedPath.match(regex);
+
+			if (match) {
+				const params: Record<string, string> = {};
+				paramNames.forEach((name, index) => {
+					(params[name] as any) = match[index + 1];
+				});
+
+				return { route, params };
+			}
+		}
+
+		return null;
+	}
+}
diff --git a/app/utils/types.ts b/app/utils/types.ts
new file mode 100644
index 0000000..121c831
--- /dev/null
+++ b/app/utils/types.ts
@@ -0,0 +1,26 @@
+import type {
+	GetAccountApikeysResponses,
+	GetAccountResponses,
+	GetAgentsResponses,
+	GetDevicesByDeviceIdSharesResponses,
+	GetDevicesResponses,
+	PostAccountApikeysData,
+	PostAgentsData,
+	PostDevicesData,
+} from "~/api-client";
+
+export namespace UtilityTypes {
+	export type SomePartial<T, K extends keyof T> = Partial<Pick<T, K>> & Omit<T, K>;
+}
+
+export type UserInfo = GetAccountResponses["200"]["data"];
+
+export type APIKey = GetAccountApikeysResponses["200"]["data"][number];
+export type NewAPIKey = NonNullable<PostAccountApikeysData["body"]>;
+
+export type Agent = GetAgentsResponses["200"]["data"][number];
+export type NewAgent = NonNullable<PostAgentsData["body"]>;
+
+export type Device = GetDevicesResponses["200"]["data"][number];
+export type NewDevice = NonNullable<PostDevicesData["body"]>;
+export type DeviceShare = GetDevicesByDeviceIdSharesResponses["200"]["data"][number];
diff --git a/app/utils/url.ts b/app/utils/url.ts
new file mode 100644
index 0000000..ca91c61
--- /dev/null
+++ b/app/utils/url.ts
@@ -0,0 +1,12 @@
+/**
+ * decodeURIComponent that never throws. A malformed escape (e.g. a literal "%")
+ * in a route param would otherwise raise a URIError during page setup and surface
+ * as an SSR 500 instead of a clean 404. Falls back to the raw value.
+ */
+export function safeDecodeURIComponent(value: string): string {
+	try {
+		return decodeURIComponent(value);
+	} catch {
+		return value;
+	}
+}
diff --git a/assets/css/forms.css b/assets/css/forms.css
deleted file mode 100644
index ed78b70..0000000
--- a/assets/css/forms.css
+++ /dev/null
@@ -1,33 +0,0 @@
-
-
-.form-input {
-    width: 100%;
-    background-color: #1a1b2e;
-    color: white;
-    border-radius: 10px;
-    border: 1px solid #0d6efd;
-}
-
-.form-input-small {
-    background-color: #1a1b2e;
-    color: white;
-    border-radius: 10px;
-    border: 1px solid #0d6efd;
-}
-
-.form-input-small:focus,
-.from-input:focus {
-    border-color: #007bff;
-}
-
-.form-input-small::placeholder,
-.form-input::placeholder {
-    color: #ffffff;
-    opacity: 0.7;
-}
-
-.form-input:disabled,
-.form-input-small:disabled {
-    border-color: #007bffa0;
-}
-
diff --git a/assets/css/global.css b/assets/css/global.css
deleted file mode 100644
index dd624ee..0000000
--- a/assets/css/global.css
+++ /dev/null
@@ -1,10 +0,0 @@
-
-@media only screen and (min-width: 1600px) {
-    .container {
-        min-width: 100%;
-        margin-left: auto;
-        margin-right: auto;
-        padding-left: 10%;
-        padding-right: 10%;
-    }
-}
diff --git a/biome.json b/biome.json
new file mode 100644
index 0000000..8ed6755
--- /dev/null
+++ b/biome.json
@@ -0,0 +1,79 @@
+{
+	"$schema": "https://biomejs.dev/schemas/2.5.15/schema.json",
+	"vcs": {
+		"enabled": true,
+		"clientKind": "git",
+		"useIgnoreFile": true
+	},
+	"files": {
+		"includes": [
+			"**/*.ts",
+			"**/*.tsx",
+			"**/*.js",
+			"**/*.jsx",
+			"**/*.json",
+			"**/*.jsonc",
+			"**/*.vue",
+			"**/*.css",
+			"!**/node_modules",
+			"!**/.bun",
+			"!**/.nuxt",
+			"!**/.output",
+			"!**/.nitro",
+			"!**/.cache",
+			"!**/dist",
+			"!**/build",
+			"!**/.git",
+			"!**/*.gen.ts",
+			"!**/api-client",
+			"!**/drizzle/migrations"
+		]
+	},
+	"formatter": {
+		"enabled": true,
+		"indentStyle": "tab",
+		"indentWidth": 1,
+		"lineWidth": 100
+	},
+	"linter": {
+		"enabled": true,
+		"rules": {
+			"preset": "recommended",
+			"complexity": {
+				"noStaticOnlyClass": "off",
+				"noBannedTypes": "off"
+			},
+			"correctness": {
+				"noUndeclaredVariables": "off"
+			},
+			"suspicious": {
+				"noExplicitAny": "off"
+			}
+		}
+	},
+	"javascript": {
+		"formatter": {
+			"quoteStyle": "double",
+			"semicolons": "always",
+			"trailingCommas": "all",
+			"jsxQuoteStyle": "double",
+			"bracketSpacing": true,
+			"expand": "auto"
+		}
+	},
+	"css": {
+		"parser": {
+			"tailwindDirectives": true
+		},
+		"formatter": {
+			"enabled": true,
+			"indentStyle": "tab"
+		}
+	},
+	"json": {
+		"formatter": {
+			"enabled": true,
+			"indentStyle": "tab"
+		}
+	}
+}
diff --git a/bun.lock b/bun.lock
index 41a9855..31b85db 100644
--- a/bun.lock
+++ b/bun.lock
@@ -1,663 +1,675 @@
 {
-  "lockfileVersion": 1,
-  "configVersion": 0,
+  "lockfileVersion": 2,
+  "configVersion": 1,
   "workspaces": {
     "": {
-      "name": "nuxt-app",
+      "name": "@netignite/server",
       "dependencies": {
-        "@libsql/client": "^0.15.15",
-        "@types/bcrypt": "^5.0.2",
-        "@vite-pwa/nuxt": "1.0.1",
-        "bcrypt": "^6.0.0",
-        "cron": "^4.3.4",
-        "nuxt": "^3.20.1",
-        "vue": "^3.5.24",
-        "vue-router": "^4.6.3",
-        "ws": "^8.18.3",
-        "zod": "^3.25.76",
+        "@cleverjs/utils": "^1.2.5",
+        "@hono/standard-validator": "^0.3.0",
+        "@nuxt/ui": "^4.9.0",
+        "@scalar/hono-api-reference": "^0.11.9",
+        "drizzle-orm": "^0.45.2",
+        "drizzle-zod": "^0.8.3",
+        "elliptic": "^6.6.1",
+        "hono": "^4.12.30",
+        "hono-openapi": "^1.3.1",
+        "nodemailer": "^9.0.0",
+        "nuxt": "^4.6.2",
+        "vue": "^3.5.39",
+        "vue-router": "^5.1.0",
+        "zod": "^4.4.3",
       },
       "devDependencies": {
-        "@types/bun": "latest",
-        "@types/ws": "^8.18.1",
+        "@biomejs/biome": "^2.5.0",
+        "@hey-api/nuxt": "^0.2.1",
+        "@hey-api/openapi-ts": "^0.99.0",
+        "@iconify-json/lucide": "^1.2.117",
+        "@libsql/client": "^0.17.4",
+        "@types/bun": "^1.4.3",
+        "@types/elliptic": "^6.4.18",
+        "@types/nodemailer": "^8.0.1",
+        "bun-types": "^1.4.2",
+        "drizzle-kit": "^0.31.10",
+        "typescript": "^6.0.3",
+        "vue-tsc": "^3.3.6",
       },
     },
   },
   "packages": {
-    "@ampproject/remapping": ["@ampproject/remapping@2.3.0", "", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw=="],
+    "@alloc/quick-lru": ["@alloc/quick-lru@5.3.0", "", {}, "sha512-U4+70Pc5ZS9osnCBCE5Jha/ciHM+Yp+CNMNC/7HvYbNRk1Ldd+f7qO65W5qfhu/TCv+/ozljlXXe9Nj8419DMA=="],
 
-    "@apideck/better-ajv-errors": ["@apideck/better-ajv-errors@0.3.6", "", { "dependencies": { "json-schema": "^0.4.0", "jsonpointer": "^5.0.0", "leven": "^3.1.0" }, "peerDependencies": { "ajv": ">=8" } }, "sha512-P+ZygBLZtkp0qqOAJJVX4oX/sFo5JR3eBWwwuqHHhK0GIgQOKWrAfiAaWX0aArHkRWHMuggFEgAZNxVPwPZYaA=="],
+    "@antfu/install-pkg": ["@antfu/install-pkg@2.1.0", "", { "dependencies": { "package-manager-detector": "^1.8.0", "tinyexec": "^1.3.1" } }, "sha512-sdg9NxU3zR4Mnawfbc/x6GB5Wf17WYud5qOuEuxXjaKpYpMkISSJEjItGebXJ2bQ4DIcly4NYH23mtkGJjvKUw=="],
 
-    "@babel/code-frame": ["@babel/code-frame@7.27.1", "", { "dependencies": { "@babel/helper-validator-identifier": "^7.27.1", "js-tokens": "^4.0.0", "picocolors": "^1.1.1" } }, "sha512-cjQ7ZlQ0Mv3b47hABuTevyTuYN4i+loJKGeV9flcCgIK37cCXRh+L1bd3iBHlynerhQ7BhCkn2BPbQUL+rGqFg=="],
+    "@babel/code-frame": ["@babel/code-frame@7.29.7", "", { "dependencies": { "@babel/helper-validator-identifier": "^7.29.7", "js-tokens": "^4.0.0", "picocolors": "^1.1.1" } }, "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw=="],
 
-    "@babel/compat-data": ["@babel/compat-data@7.27.2", "", {}, "sha512-TUtMJYRPyUb/9aU8f3K0mjmjf6M9N5Woshn2CS6nqJSeJtTtQcpLUXjGt9vbF8ZGff0El99sWkLgzwW3VXnxZQ=="],
+    "@babel/compat-data": ["@babel/compat-data@7.29.7", "", {}, "sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg=="],
 
-    "@babel/core": ["@babel/core@7.27.1", "", { "dependencies": { "@ampproject/remapping": "^2.2.0", "@babel/code-frame": "^7.27.1", "@babel/generator": "^7.27.1", "@babel/helper-compilation-targets": "^7.27.1", "@babel/helper-module-transforms": "^7.27.1", "@babel/helpers": "^7.27.1", "@babel/parser": "^7.27.1", "@babel/template": "^7.27.1", "@babel/traverse": "^7.27.1", "@babel/types": "^7.27.1", "convert-source-map": "^2.0.0", "debug": "^4.1.0", "gensync": "^1.0.0-beta.2", "json5": "^2.2.3", "semver": "^6.3.1" } }, "sha512-IaaGWsQqfsQWVLqMn9OB92MNN7zukfVA4s7KKAI0KfrrDsZ0yhi5uV4baBuLuN7n3vsZpwP8asPPcVwApxvjBQ=="],
+    "@babel/core": ["@babel/core@7.29.7", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/generator": "^7.29.7", "@babel/helper-compilation-targets": "^7.29.7", "@babel/helper-module-transforms": "^7.29.7", "@babel/helpers": "^7.29.7", "@babel/parser": "^7.29.7", "@babel/template": "^7.29.7", "@babel/traverse": "^7.29.7", "@babel/types": "^7.29.7", "@jridgewell/remapping": "^2.3.5", "convert-source-map": "^2.0.0", "debug": "^4.1.0", "gensync": "^1.0.0-beta.2", "json5": "^2.2.3", "semver": "^6.3.1" } }, "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA=="],
 
-    "@babel/generator": ["@babel/generator@7.28.5", "", { "dependencies": { "@babel/parser": "^7.28.5", "@babel/types": "^7.28.5", "@jridgewell/gen-mapping": "^0.3.12", "@jridgewell/trace-mapping": "^0.3.28", "jsesc": "^3.0.2" } }, "sha512-3EwLFhZ38J4VyIP6WNtt2kUdW9dokXA9Cr4IVIFHuCpZ3H8/YFOl5JjZHisrn1fATPBmKKqXzDFvh9fUwHz6CQ=="],
+    "@babel/generator": ["@babel/generator@7.29.8", "", { "dependencies": { "@babel/parser": "^7.29.8", "@babel/types": "^7.29.8", "@jridgewell/gen-mapping": "^0.3.12", "@jridgewell/trace-mapping": "^0.3.28", "jsesc": "^3.0.2" } }, "sha512-gZbepsdh3WDtgZKWL+vTPh71LSBrm/Y4/QDZBVCcYfmeTEEuoOYwlSy+G1StfJg+/Zy550u/3TATbm7qDbbMtg=="],
 
-    "@babel/helper-annotate-as-pure": ["@babel/helper-annotate-as-pure@7.27.3", "", { "dependencies": { "@babel/types": "^7.27.3" } }, "sha512-fXSwMQqitTGeHLBC08Eq5yXz2m37E4pJX1qAU1+2cNedz/ifv/bVXft90VeSav5nFO61EcNgwr0aJxbyPaWBPg=="],
+    "@babel/helper-annotate-as-pure": ["@babel/helper-annotate-as-pure@7.29.7", "", { "dependencies": { "@babel/types": "^7.29.7" } }, "sha512-OoK6239jHPuSQOoS0kfTVKn0b/rVTk0seKq4Gd2UMLtmOVLjDC0ki3e+c90Trqv2gMfvJFqkiljrr568+qddiw=="],
 
-    "@babel/helper-compilation-targets": ["@babel/helper-compilation-targets@7.27.2", "", { "dependencies": { "@babel/compat-data": "^7.27.2", "@babel/helper-validator-option": "^7.27.1", "browserslist": "^4.24.0", "lru-cache": "^5.1.1", "semver": "^6.3.1" } }, "sha512-2+1thGUUWWjLTYTHZWK1n8Yga0ijBz1XAhUXcKy81rd5g6yh7hGqMp45v7cadSbEHc9G3OTv45SyneRN3ps4DQ=="],
+    "@babel/helper-compilation-targets": ["@babel/helper-compilation-targets@7.29.7", "", { "dependencies": { "@babel/compat-data": "^7.29.7", "@babel/helper-validator-option": "^7.29.7", "browserslist": "^4.24.0", "lru-cache": "^5.1.1", "semver": "^6.3.1" } }, "sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g=="],
 
-    "@babel/helper-create-class-features-plugin": ["@babel/helper-create-class-features-plugin@7.28.5", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.27.3", "@babel/helper-member-expression-to-functions": "^7.28.5", "@babel/helper-optimise-call-expression": "^7.27.1", "@babel/helper-replace-supers": "^7.27.1", "@babel/helper-skip-transparent-expression-wrappers": "^7.27.1", "@babel/traverse": "^7.28.5", "semver": "^6.3.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-q3WC4JfdODypvxArsJQROfupPBq9+lMwjKq7C33GhbFYJsufD0yd/ziwD+hJucLeWsnFPWZjsU2DNFqBPE7jwQ=="],
+    "@babel/helper-create-class-features-plugin": ["@babel/helper-create-class-features-plugin@7.29.7", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.29.7", "@babel/helper-member-expression-to-functions": "^7.29.7", "@babel/helper-optimise-call-expression": "^7.29.7", "@babel/helper-replace-supers": "^7.29.7", "@babel/helper-skip-transparent-expression-wrappers": "^7.29.7", "@babel/traverse": "^7.29.7", "semver": "^6.3.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-IY3ZD9Tmooqr3TUhc3DUWxiuo8xx1DWLhd5M7hQ+ZWJamqM2BbalrBJb2MisSLoYorOj75U03qULCxQTY9r3hg=="],
 
-    "@babel/helper-create-regexp-features-plugin": ["@babel/helper-create-regexp-features-plugin@7.27.1", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.27.1", "regexpu-core": "^6.2.0", "semver": "^6.3.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-uVDC72XVf8UbrH5qQTc18Agb8emwjTiZrQE11Nv3CuBEZmVvTwwE9CBUEvHku06gQCAyYf8Nv6ja1IN+6LMbxQ=="],
+    "@babel/helper-globals": ["@babel/helper-globals@7.29.7", "", {}, "sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA=="],
 
-    "@babel/helper-define-polyfill-provider": ["@babel/helper-define-polyfill-provider@0.6.4", "", { "dependencies": { "@babel/helper-compilation-targets": "^7.22.6", "@babel/helper-plugin-utils": "^7.22.5", "debug": "^4.1.1", "lodash.debounce": "^4.0.8", "resolve": "^1.14.2" }, "peerDependencies": { "@babel/core": "^7.4.0 || ^8.0.0-0 <8.0.0" } }, "sha512-jljfR1rGnXXNWnmQg2K3+bvhkxB51Rl32QRaOTuwwjviGrHzIbSc8+x9CpraDtbT7mfyjXObULP4w/adunNwAw=="],
+    "@babel/helper-member-expression-to-functions": ["@babel/helper-member-expression-to-functions@7.29.7", "", { "dependencies": { "@babel/traverse": "^7.29.7", "@babel/types": "^7.29.7" } }, "sha512-j+7JYmk1JYDtACIGj0QJqqWZjoUpMoEikQGADMaHgCMCSDqd2+P32rfcibUNrGOMWrlzK1WJBdxrB3JJQZwWtg=="],
 
-    "@babel/helper-globals": ["@babel/helper-globals@7.28.0", "", {}, "sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw=="],
+    "@babel/helper-module-imports": ["@babel/helper-module-imports@7.29.7", "", { "dependencies": { "@babel/traverse": "^7.29.7", "@babel/types": "^7.29.7" } }, "sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g=="],
 
-    "@babel/helper-member-expression-to-functions": ["@babel/helper-member-expression-to-functions@7.28.5", "", { "dependencies": { "@babel/traverse": "^7.28.5", "@babel/types": "^7.28.5" } }, "sha512-cwM7SBRZcPCLgl8a7cY0soT1SptSzAlMH39vwiRpOQkJlh53r5hdHwLSCZpQdVLT39sZt+CRpNwYG4Y2v77atg=="],
+    "@babel/helper-module-transforms": ["@babel/helper-module-transforms@7.29.7", "", { "dependencies": { "@babel/helper-module-imports": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7", "@babel/traverse": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg=="],
 
-    "@babel/helper-module-imports": ["@babel/helper-module-imports@7.27.1", "", { "dependencies": { "@babel/traverse": "^7.27.1", "@babel/types": "^7.27.1" } }, "sha512-0gSFWUPNXNopqtIPQvlD5WgXYI5GY2kP2cCvoT8kczjbfcfuIljTbcWrulD1CIPIX2gt1wghbDy08yE1p+/r3w=="],
+    "@babel/helper-optimise-call-expression": ["@babel/helper-optimise-call-expression@7.29.7", "", { "dependencies": { "@babel/types": "^7.29.7" } }, "sha512-+kmGVjcT9RGYzoDwdwEqEvGgKe3BYq+O1iGzjFubaNgZHwYHP6lsF2Yghf4kEuv9BV7tYDZ913aBW9am6YKong=="],
 
-    "@babel/helper-module-transforms": ["@babel/helper-module-transforms@7.27.1", "", { "dependencies": { "@babel/helper-module-imports": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1", "@babel/traverse": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-9yHn519/8KvTU5BjTVEEeIM3w9/2yXNKoD82JifINImhpKkARMJKPP59kLo+BafpdN5zgNeIcS4jsGDmd3l58g=="],
+    "@babel/helper-plugin-utils": ["@babel/helper-plugin-utils@7.29.7", "", {}, "sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw=="],
 
-    "@babel/helper-optimise-call-expression": ["@babel/helper-optimise-call-expression@7.27.1", "", { "dependencies": { "@babel/types": "^7.27.1" } }, "sha512-URMGH08NzYFhubNSGJrpUEphGKQwMQYBySzat5cAByY1/YgIRkULnIy3tAMeszlL/so2HbeilYloUmSpd7GdVw=="],
+    "@babel/helper-replace-supers": ["@babel/helper-replace-supers@7.29.7", "", { "dependencies": { "@babel/helper-member-expression-to-functions": "^7.29.7", "@babel/helper-optimise-call-expression": "^7.29.7", "@babel/traverse": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-atfGXWSeCiF4DnKZIfmJfQRkSw9b9gNNXR1kqKjbhG4pGYCOnkp8OcTB8E3NXjBu8NpheSnOeNKz8KT7UNFTmQ=="],
 
-    "@babel/helper-plugin-utils": ["@babel/helper-plugin-utils@7.27.1", "", {}, "sha512-1gn1Up5YXka3YYAHGKpbideQ5Yjf1tDa9qYcgysz+cNCXukyLl6DjPXhD3VRwSb8c0J9tA4b2+rHEZtc6R0tlw=="],
+    "@babel/helper-skip-transparent-expression-wrappers": ["@babel/helper-skip-transparent-expression-wrappers@7.29.7", "", { "dependencies": { "@babel/traverse": "^7.29.7", "@babel/types": "^7.29.7" } }, "sha512-brcMGQaVzIeUb+6/bs1Av0f8YuNNjKY2JyvfRCsFuFsdKccEQ5Ges2y74D74NZ1Rz8lKJ9ksJkfqwQFJ/iNEyQ=="],
 
-    "@babel/helper-remap-async-to-generator": ["@babel/helper-remap-async-to-generator@7.27.1", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.27.1", "@babel/helper-wrap-function": "^7.27.1", "@babel/traverse": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-7fiA521aVw8lSPeI4ZOD3vRFkoqkJcS+z4hFo82bFSH/2tNd6eJ5qCVMS5OzDmZh/kaHQeBaeyxK6wljcPtveA=="],
+    "@babel/helper-string-parser": ["@babel/helper-string-parser@8.0.6", "", {}, "sha512-+6HYEBnsDRZHJtUTAEfMQd0zMDqdFHS7C+5vAsEZqBUr3vEMWOWlHJ0Jz1gS8jJIlCvLsuA6ivmeoqzH936YcA=="],
 
-    "@babel/helper-replace-supers": ["@babel/helper-replace-supers@7.27.1", "", { "dependencies": { "@babel/helper-member-expression-to-functions": "^7.27.1", "@babel/helper-optimise-call-expression": "^7.27.1", "@babel/traverse": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-7EHz6qDZc8RYS5ElPoShMheWvEgERonFCs7IAonWLLUTXW59DP14bCZt89/GKyreYn8g3S83m21FelHKbeDCKA=="],
+    "@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@8.0.6", "", {}, "sha512-HYx0YmuchRxRSpnjvcNffnPS8DCauKNmnumIuHG3jnQAVewRA7kfJGwF13ayEpSZs7s4R/oBH4eppuXcAQd5JQ=="],
 
-    "@babel/helper-skip-transparent-expression-wrappers": ["@babel/helper-skip-transparent-expression-wrappers@7.27.1", "", { "dependencies": { "@babel/traverse": "^7.27.1", "@babel/types": "^7.27.1" } }, "sha512-Tub4ZKEXqbPjXgWLl2+3JpQAYBJ8+ikpQ2Ocj/q/r0LwE3UhENh7EUabyHjz2kCEsrRY83ew2DQdHluuiDQFzg=="],
+    "@babel/helper-validator-option": ["@babel/helper-validator-option@7.29.7", "", {}, "sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw=="],
 
-    "@babel/helper-string-parser": ["@babel/helper-string-parser@7.27.1", "", {}, "sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA=="],
+    "@babel/helpers": ["@babel/helpers@7.29.10", "", { "dependencies": { "@babel/template": "^7.29.7", "@babel/types": "^7.29.8" } }, "sha512-EMCx3AGZ3WfAl6ht7AyQoPm2Lh+BGYEMdc4Q6Hf7uSCDOZFuLq44qNwL+iaim8VlyYhRAo4X43+weadK8ZB4Yg=="],
 
-    "@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.28.5", "", {}, "sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q=="],
+    "@babel/parser": ["@babel/parser@7.29.9", "", { "dependencies": { "@babel/types": "^7.29.8" }, "bin": "./bin/babel-parser.js" }, "sha512-CjXrNHTnvqBVqHgdBysY3vk2T8tpJHb5/RMeHJBTyVa9xgugCB0CJTx/3oO8RV2QRQP391RWpB7D6hLjm8V9uA=="],
 
-    "@babel/helper-validator-option": ["@babel/helper-validator-option@7.27.1", "", {}, "sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg=="],
+    "@babel/plugin-syntax-jsx": ["@babel/plugin-syntax-jsx@7.29.7", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-TSu8+mHCoEaaCDEZ0I3+6mvTBYR4PCxQwf2z9/r5Tbztv6NaLR3B9thGTTxX2WGuGHJqRiAbKPeGTJ5XWXVg6A=="],
 
-    "@babel/helper-wrap-function": ["@babel/helper-wrap-function@7.27.1", "", { "dependencies": { "@babel/template": "^7.27.1", "@babel/traverse": "^7.27.1", "@babel/types": "^7.27.1" } }, "sha512-NFJK2sHUvrjo8wAU/nQTWU890/zB2jj0qBcCbZbbf+005cAsv6tMjXz31fBign6M5ov1o0Bllu+9nbqkfsjjJQ=="],
+    "@babel/plugin-syntax-typescript": ["@babel/plugin-syntax-typescript@7.29.7", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-ngr+82Sh0xMz25TPCZi+nC2iTzjfCdWS2ONXTp/PtSCHCgaCNBpdMqgvJ2ccdLlClVZ7sisIgB914j/JFe+RZA=="],
 
-    "@babel/helpers": ["@babel/helpers@7.27.1", "", { "dependencies": { "@babel/template": "^7.27.1", "@babel/types": "^7.27.1" } }, "sha512-FCvFTm0sWV8Fxhpp2McP5/W53GPllQ9QeQ7SiqGWjMf/LVG07lFa5+pgK05IRhVwtvafT22KF+ZSnM9I545CvQ=="],
+    "@babel/plugin-transform-typescript": ["@babel/plugin-transform-typescript@7.29.9", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.29.7", "@babel/helper-create-class-features-plugin": "^7.29.7", "@babel/helper-plugin-utils": "^7.29.7", "@babel/helper-skip-transparent-expression-wrappers": "^7.29.7", "@babel/plugin-syntax-typescript": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-FFwIwzU+7SCOuxxV4YtJql6T9981ZVTm+FHO5GhVsRqCTdy0WwrEZh3l42ARpXruJUDGOptdduHW6Zr7pNPLNg=="],
 
-    "@babel/parser": ["@babel/parser@7.28.5", "", { "dependencies": { "@babel/types": "^7.28.5" }, "bin": "./bin/babel-parser.js" }, "sha512-KKBU1VGYR7ORr3At5HAtUQ+TV3SzRCXmA/8OdDZiLDBIZxVyzXuztPjfLd3BV1PRAQGCMWWSHYhL0F8d5uHBDQ=="],
+    "@babel/standalone": ["@babel/standalone@7.29.10", "", {}, "sha512-Hw4VoSA8lWuYPfYlzfKP3W44F166NEQJbgJRkzZSn1lAqNPq0nVlOEfBKTLckQDs6X3cUcAq2Nh6vopUMvkk3g=="],
 
-    "@babel/plugin-bugfix-firefox-class-in-computed-class-key": ["@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1", "@babel/traverse": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-QPG3C9cCVRQLxAVwmefEmwdTanECuUBMQZ/ym5kiw3XKCGA7qkuQLcjWWHcrD/GKbn/WmJwaezfuuAOcyKlRPA=="],
+    "@babel/template": ["@babel/template@7.29.7", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/parser": "^7.29.7", "@babel/types": "^7.29.7" } }, "sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg=="],
 
-    "@babel/plugin-bugfix-safari-class-field-initializer-scope": ["@babel/plugin-bugfix-safari-class-field-initializer-scope@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-qNeq3bCKnGgLkEXUuFry6dPlGfCdQNZbn7yUAPCInwAJHMU7THJfrBSozkcWq5sNM6RcF3S8XyQL2A52KNR9IA=="],
+    "@babel/traverse": ["@babel/traverse@7.29.10", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/generator": "^7.29.8", "@babel/helper-globals": "^7.29.7", "@babel/parser": "^7.29.9", "@babel/template": "^7.29.7", "@babel/types": "^7.29.8", "debug": "^4.3.1" } }, "sha512-B3lYAs2nkKskbgQ1nfy8Ma9ao9Q1rntTAQHrzzyDuj+TSO+X3le6PfWwqDvodsb+OumE10eMFfuMCTQSQ5iuIQ=="],
 
-    "@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression": ["@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-g4L7OYun04N1WyqMNjldFwlfPCLVkgB54A/YCXICZYBsvJJE3kByKv9c9+R/nAfmIfjl2rKYLNyMHboYbZaWaA=="],
+    "@babel/types": ["@babel/types@8.0.6", "", { "dependencies": { "@babel/helper-string-parser": "^8.0.6", "@babel/helper-validator-identifier": "^8.0.6" } }, "sha512-c+xgSWboV2pdwXP67BUWDVRHi2BO5Q3KwxyFVs7taVTY+fsK47/L51ZXQoV9rozHJDNHvJ4v4WEsI/IlxV2l2A=="],
 
-    "@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining": ["@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1", "@babel/helper-skip-transparent-expression-wrappers": "^7.27.1", "@babel/plugin-transform-optional-chaining": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.13.0" } }, "sha512-oO02gcONcD5O1iTLi/6frMJBIwWEHceWGSGqrpCmEL8nogiS6J9PBlE48CaK20/Jx1LuRml9aDftLgdjXT8+Cw=="],
+    "@biomejs/biome": ["@biomejs/biome@2.5.15", "", { "optionalDependencies": { "@biomejs/cli-darwin-arm64": "2.5.15", "@biomejs/cli-darwin-x64": "2.5.15", "@biomejs/cli-linux-arm64": "2.5.15", "@biomejs/cli-linux-arm64-musl": "2.5.15", "@biomejs/cli-linux-x64": "2.5.15", "@biomejs/cli-linux-x64-musl": "2.5.15", "@biomejs/cli-win32-arm64": "2.5.15", "@biomejs/cli-win32-x64": "2.5.15" }, "bin": { "biome": "bin/biome" } }, "sha512-WZTW4slm/pdkh92K6t/3aEN++44JD1PQ7squ7RCMLI1flHGl43DVOIGXvCjHiZgBMO1V4uYxoFNtqrIA4qGuIQ=="],
 
-    "@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly": ["@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1", "@babel/traverse": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-6BpaYGDavZqkI6yT+KSPdpZFfpnd68UKXbcjI9pJ13pvHhPrCKWOOLp+ysvMeA+DxnhuPpgIaRpxRxo5A9t5jw=="],
+    "@biomejs/cli-darwin-arm64": ["@biomejs/cli-darwin-arm64@2.5.15", "", { "os": "darwin", "cpu": "arm64" }, "sha512-BZVzFhJ/mUvTLMYbc9x6el0o2Uv5zP7bACYyhFb6fSc1giroXm7PL0a5KqMJ9F+/BnkYRjagD/ROSDVOZ6eapg=="],
 
-    "@babel/plugin-proposal-private-property-in-object": ["@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2", "", { "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-SOSkfJDddaM7mak6cPEpswyTRnuRltl429hMraQEglW+OkovnCzsiszTmsrlY//qLFjCpQDFRvjdm2wA5pPm9w=="],
+    "@biomejs/cli-darwin-x64": ["@biomejs/cli-darwin-x64@2.5.15", "", { "os": "darwin", "cpu": "x64" }, "sha512-V5Kw63V+fVGNFhFrizDxMbGXAzZCh8kYzJpy3GI6gTapWDg7bZK9oYC9CbVgQSEdTnupz0U5Efz8Ev+5vdBBXw=="],
 
-    "@babel/plugin-syntax-import-assertions": ["@babel/plugin-syntax-import-assertions@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-UT/Jrhw57xg4ILHLFnzFpPDlMbcdEicaAtjPQpbj9wa8T4r5KVWCimHcL/460g8Ht0DMxDyjsLgiWSkVjnwPFg=="],
+    "@biomejs/cli-linux-arm64": ["@biomejs/cli-linux-arm64@2.5.15", "", { "os": "linux", "cpu": "arm64" }, "sha512-XaG7P7eeSLYETD3K9grfB0mQmpLQZjygdbsxekWBJAg4am79fGAtRpfRyNnTvXB2fZFNnJZG3nXm7HBat0+VUw=="],
 
-    "@babel/plugin-syntax-import-attributes": ["@babel/plugin-syntax-import-attributes@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-oFT0FrKHgF53f4vOsZGi2Hh3I35PfSmVs4IBFLFj4dnafP+hIWDLg3VyKmUHfLoLHlyxY4C7DGtmHuJgn+IGww=="],
+    "@biomejs/cli-linux-arm64-musl": ["@biomejs/cli-linux-arm64-musl@2.5.15", "", { "os": "linux", "cpu": "arm64" }, "sha512-tGzZUTcJCV7tj5Adh/Gn6nR4MycqA3iohq2LEcrarAgRBkU0h0OKd2UzCRkOsOYOuUGaUJb4YmqRqyy2feGGSw=="],
 
-    "@babel/plugin-syntax-jsx": ["@babel/plugin-syntax-jsx@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-y8YTNIeKoyhGd9O0Jiyzyyqk8gdjnumGTQPsz0xOZOQ2RmkVJeZ1vmmfIvFEKqucBG6axJGBZDE/7iI5suUI/w=="],
+    "@biomejs/cli-linux-x64": ["@biomejs/cli-linux-x64@2.5.15", "", { "os": "linux", "cpu": "x64" }, "sha512-xE4iEW/3LqlYj9GFgGrFsFSH51dEEpUbYWBfeOv0q87WkUDxK2o/HhreSb7qMJqck70RVM6Lg96hgedcAYcOkA=="],
 
-    "@babel/plugin-syntax-typescript": ["@babel/plugin-syntax-typescript@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-xfYCBMxveHrRMnAWl1ZlPXOZjzkN82THFvLhQhFXFt81Z5HnN+EtUkZhv/zcKpmT3fzmWZB0ywiBrbC3vogbwQ=="],
+    "@biomejs/cli-linux-x64-musl": ["@biomejs/cli-linux-x64-musl@2.5.15", "", { "os": "linux", "cpu": "x64" }, "sha512-IlxUcyxilVGPsE008x13pWdkTbU3nQpP2i9b5UrbOYj6goBkKsRX1XB7yJLcV+O1H9LBchIIm4adOaVLZBX0ZQ=="],
 
-    "@babel/plugin-syntax-unicode-sets-regex": ["@babel/plugin-syntax-unicode-sets-regex@7.18.6", "", { "dependencies": { "@babel/helper-create-regexp-features-plugin": "^7.18.6", "@babel/helper-plugin-utils": "^7.18.6" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-727YkEAPwSIQTv5im8QHz3upqp92JTWhidIC81Tdx4VJYIte/VndKf1qKrfnnhPLiPghStWfvC/iFaMCQu7Nqg=="],
+    "@biomejs/cli-win32-arm64": ["@biomejs/cli-win32-arm64@2.5.15", "", { "os": "win32", "cpu": "arm64" }, "sha512-2kPKzhNlm8C+Ru3GcO0Me2ODkCBLrVOUNuyi84RJyWDVKAA4+Kjj3jMjL938lF6BRfvltC4vB2nPY9SvN51Ovg=="],
 
-    "@babel/plugin-transform-arrow-functions": ["@babel/plugin-transform-arrow-functions@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-8Z4TGic6xW70FKThA5HYEKKyBpOOsucTOD1DjU3fZxDg+K3zBJcXMFnt/4yQiZnf5+MiOMSXQ9PaEK/Ilh1DeA=="],
+    "@biomejs/cli-win32-x64": ["@biomejs/cli-win32-x64@2.5.15", "", { "os": "win32", "cpu": "x64" }, "sha512-yAzh4UqEImV6Hcy0zjUqNfJAsUhoD64FBQCdTG8Md/Z2wQeVP/ZmJ3XRYAs1g8J9fjTFyl2fCtc5FB5til47+g=="],
 
-    "@babel/plugin-transform-async-generator-functions": ["@babel/plugin-transform-async-generator-functions@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1", "@babel/helper-remap-async-to-generator": "^7.27.1", "@babel/traverse": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-eST9RrwlpaoJBDHShc+DS2SG4ATTi2MYNb4OxYkf3n+7eb49LWpnS+HSpVfW4x927qQwgk8A2hGNVaajAEw0EA=="],
+    "@capsizecss/unpack": ["@capsizecss/unpack@4.0.1", "", { "dependencies": { "fontkitten": "^1.0.3" } }, "sha512-CuNiSqg7+e1cO/GjffyMOm5Tt2jUF9CWHHnvQ/UkqvtkGfHdgwEC0wpmq7fkN3gxwpRnrAN0WzO3vREKmNolMQ=="],
 
-    "@babel/plugin-transform-async-to-generator": ["@babel/plugin-transform-async-to-generator@7.27.1", "", { "dependencies": { "@babel/helper-module-imports": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1", "@babel/helper-remap-async-to-generator": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-NREkZsZVJS4xmTr8qzE5y8AfIPqsdQfRuUiLRTEzb7Qii8iFWCyDKaUV2c0rCuh4ljDZ98ALHP/PetiBV2nddA=="],
+    "@clack/core": ["@clack/core@1.5.1", "", { "dependencies": { "fast-wrap-ansi": "^0.2.0", "sisteransi": "^1.0.5" } }, "sha512-iHTrHA8MtVuLl2TfZySmcKv1qO2PoyC9Z7pfSDozEuV5vtY3/wcOPKJXlqJ5Oq2Cx5DDGQGAMVx6HZfRRoVEbQ=="],
 
-    "@babel/plugin-transform-block-scoped-functions": ["@babel/plugin-transform-block-scoped-functions@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-cnqkuOtZLapWYZUYM5rVIdv1nXYuFVIltZ6ZJ7nIj585QsjKM5dhL2Fu/lICXZ1OyIAFc7Qy+bvDAtTXqGrlhg=="],
+    "@clack/prompts": ["@clack/prompts@1.8.1", "", { "dependencies": { "@clack/core": "1.5.1", "fast-string-width": "^3.0.2", "fast-wrap-ansi": "^0.2.0", "sisteransi": "^1.0.5" } }, "sha512-dlT1m5e/0yUL0kRNcQn7yGLVThkgbB0Ga/1AmfDDC/8ik6AIiSf2QLQO2zPYvefsHP0aFgxO93cVLCCfDp7kzQ=="],
 
-    "@babel/plugin-transform-block-scoping": ["@babel/plugin-transform-block-scoping@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-QEcFlMl9nGTgh1rn2nIeU5bkfb9BAjaQcWbiP4LvKxUot52ABcTkpcyJ7f2Q2U2RuQ84BNLgts3jRme2dTx6Fw=="],
+    "@cleverjs/utils": ["@cleverjs/utils@1.2.5", "", { "dependencies": { "low-level": "^1.2.5", "ptr.js": "^1.3.0" } }, "sha512-1/bMxQ4uf5EGaCW0WFyAfOTKSspcGAjBfegH+222Tebu+aVTK0zA3MXlkzLCPFkzn31BgQINYS+lSiHeCCt9fg=="],
 
-    "@babel/plugin-transform-class-properties": ["@babel/plugin-transform-class-properties@7.27.1", "", { "dependencies": { "@babel/helper-create-class-features-plugin": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-D0VcalChDMtuRvJIu3U/fwWjf8ZMykz5iZsg77Nuj821vCKI3zCyRLwRdWbsuJ/uRwZhZ002QtCqIkwC/ZkvbA=="],
+    "@cloudflare/kv-asset-handler": ["@cloudflare/kv-asset-handler@0.4.2", "", {}, "sha512-SIOD2DxrRRwQ+jgzlXCqoEFiKOFqaPjhnNTGKXSRLvp1HiOvapLaFG2kEr9dYQTYe8rKrd9uvDUzmAITeNyaHQ=="],
 
-    "@babel/plugin-transform-class-static-block": ["@babel/plugin-transform-class-static-block@7.27.1", "", { "dependencies": { "@babel/helper-create-class-features-plugin": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.12.0" } }, "sha512-s734HmYU78MVzZ++joYM+NkJusItbdRcbm+AGRgJCt3iA+yux0QpD9cBVdz3tKyrjVYWRl7j0mHSmv4lhV0aoA=="],
+    "@colordx/core": ["@colordx/core@7.3.0", "", {}, "sha512-LVzTTPhX7wpy7TkGjouA9zbbCBIw92RGm7ZQqSKFE0oYE3sMx2FGXz90eVpgw7k/+wrrY+qJ86nHXifZWMS5jA=="],
 
-    "@babel/plugin-transform-classes": ["@babel/plugin-transform-classes@7.27.1", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.27.1", "@babel/helper-compilation-targets": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1", "@babel/helper-replace-supers": "^7.27.1", "@babel/traverse": "^7.27.1", "globals": "^11.1.0" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-7iLhfFAubmpeJe/Wo2TVuDrykh/zlWXLzPNdL0Jqn/Xu8R3QQ8h9ff8FQoISZOsw74/HFqFI7NX63HN7QFIHKA=="],
+    "@csstools/css-tokenizer": ["@csstools/css-tokenizer@4.0.2", "", {}, "sha512-OoKoR0f76dCY666JlcbhmVTs2drYj1GUXZTYTcbUgJjh9Nv41aFfZ21bPQTERm5+L5cBDo466NltB2lplS5GBw=="],
 
-    "@babel/plugin-transform-computed-properties": ["@babel/plugin-transform-computed-properties@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1", "@babel/template": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-lj9PGWvMTVksbWiDT2tW68zGS/cyo4AkZ/QTp0sQT0mjPopCmrSkzxeXkznjqBxzDI6TclZhOJbBmbBLjuOZUw=="],
+    "@drizzle-team/brocli": ["@drizzle-team/brocli@0.10.2", "", {}, "sha512-z33Il7l5dKjUgGULTqBsQBQwckHh5AbIuxhdsIxDDiZAzBOrZO6q9ogcWC65kU382AfynTfgNumVcNIjuIua6w=="],
 
-    "@babel/plugin-transform-destructuring": ["@babel/plugin-transform-destructuring@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-ttDCqhfvpE9emVkXbPD8vyxxh4TWYACVybGkDj+oReOGwnp066ITEivDlLwe0b1R0+evJ13IXQuLNB5w1fhC5Q=="],
+    "@dxup/nuxt": ["@dxup/nuxt@0.5.10", "", { "dependencies": { "@dxup/unimport": "^0.1.2", "@nuxt/kit": "^4.5.2", "@vue/compiler-dom": "^3.5.41", "chokidar": "^5.0.0", "knitwork": "^1.3.0", "magic-string": "^1.2.2", "pathe": "^2.0.3", "tinyglobby": "^0.2.17", "unplugin": "^3.3.0" } }, "sha512-54Vehb7LmR7qYpC6KFwjDTSm6CB1CayBu+JXdHrPLrIjjr5xAgb43jvgOU+mnB+tsRh414fSsEy0QjBMKILQ8g=="],
 
-    "@babel/plugin-transform-dotall-regex": ["@babel/plugin-transform-dotall-regex@7.27.1", "", { "dependencies": { "@babel/helper-create-regexp-features-plugin": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-gEbkDVGRvjj7+T1ivxrfgygpT7GUd4vmODtYpbs0gZATdkX8/iSnOtZSxiZnsgm1YjTgjI6VKBGSJJevkrclzw=="],
+    "@dxup/unimport": ["@dxup/unimport@0.1.2", "", {}, "sha512-/B8YJGPzaYq1NbsQmwgP8EZqg40NpTw4ZB3suuI0TplbxKHeK94jeaawLmVhCv+YwUnOpiWEz9U6SeThku/8JQ=="],
 
-    "@babel/plugin-transform-duplicate-keys": ["@babel/plugin-transform-duplicate-keys@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-MTyJk98sHvSs+cvZ4nOauwTTG1JeonDjSGvGGUNHreGQns+Mpt6WX/dVzWBHgg+dYZhkC4X+zTDfkTU+Vy9y7Q=="],
+    "@esbuild-kit/core-utils": ["@esbuild-kit/core-utils@3.3.2", "", { "dependencies": { "esbuild": "~0.18.20", "source-map-support": "^0.5.21" } }, "sha512-sPRAnw9CdSsRmEtnsl2WXWdyquogVpB3yZ3dgwJfe8zrOzTsV7cJvmwrKVa+0ma5BoiGJ+BoqkMvawbayKUsqQ=="],
 
-    "@babel/plugin-transform-duplicate-named-capturing-groups-regex": ["@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.27.1", "", { "dependencies": { "@babel/helper-create-regexp-features-plugin": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-hkGcueTEzuhB30B3eJCbCYeCaaEQOmQR0AdvzpD4LoN0GXMWzzGSuRrxR2xTnCrvNbVwK9N6/jQ92GSLfiZWoQ=="],
+    "@esbuild-kit/esm-loader": ["@esbuild-kit/esm-loader@2.6.5", "", { "dependencies": { "@esbuild-kit/core-utils": "^3.3.2", "get-tsconfig": "^4.7.0" } }, "sha512-FxEMIkJKnodyA1OaCUoEvbYRkoZlLZ4d/eXFu9Fh8CbBBgP5EmZxrfTRyN0qpXZ4vOvqnE5YdRdcrmUUXuU+dA=="],
 
-    "@babel/plugin-transform-dynamic-import": ["@babel/plugin-transform-dynamic-import@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-MHzkWQcEmjzzVW9j2q8LGjwGWpG2mjwaaB0BNQwst3FIjqsg8Ct/mIZlvSPJvfi9y2AC8mi/ktxbFVL9pZ1I4A=="],
+    "@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.25.12", "", { "os": "aix", "cpu": "ppc64" }, "sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA=="],
 
-    "@babel/plugin-transform-exponentiation-operator": ["@babel/plugin-transform-exponentiation-operator@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-uspvXnhHvGKf2r4VVtBpeFnuDWsJLQ6MF6lGJLC89jBR1uoVeqM416AZtTuhTezOfgHicpJQmoD5YUakO/YmXQ=="],
+    "@esbuild/android-arm": ["@esbuild/android-arm@0.25.12", "", { "os": "android", "cpu": "arm" }, "sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg=="],
 
-    "@babel/plugin-transform-export-namespace-from": ["@babel/plugin-transform-export-namespace-from@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-tQvHWSZ3/jH2xuq/vZDy0jNn+ZdXJeM8gHvX4lnJmsc3+50yPlWdZXIc5ay+umX+2/tJIqHqiEqcJvxlmIvRvQ=="],
+    "@esbuild/android-arm64": ["@esbuild/android-arm64@0.25.12", "", { "os": "android", "cpu": "arm64" }, "sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg=="],
 
-    "@babel/plugin-transform-for-of": ["@babel/plugin-transform-for-of@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1", "@babel/helper-skip-transparent-expression-wrappers": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-BfbWFFEJFQzLCQ5N8VocnCtA8J1CLkNTe2Ms2wocj75dd6VpiqS5Z5quTYcUoo4Yq+DN0rtikODccuv7RU81sw=="],
+    "@esbuild/android-x64": ["@esbuild/android-x64@0.25.12", "", { "os": "android", "cpu": "x64" }, "sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg=="],
 
-    "@babel/plugin-transform-function-name": ["@babel/plugin-transform-function-name@7.27.1", "", { "dependencies": { "@babel/helper-compilation-targets": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1", "@babel/traverse": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-1bQeydJF9Nr1eBCMMbC+hdwmRlsv5XYOMu03YSWFwNs0HsAmtSxxF1fyuYPqemVldVyFmlCU7w8UE14LupUSZQ=="],
+    "@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.25.12", "", { "os": "darwin", "cpu": "arm64" }, "sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg=="],
 
-    "@babel/plugin-transform-json-strings": ["@babel/plugin-transform-json-strings@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-6WVLVJiTjqcQauBhn1LkICsR2H+zm62I3h9faTDKt1qP4jn2o72tSvqMwtGFKGTpojce0gJs+76eZ2uCHRZh0Q=="],
+    "@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.25.12", "", { "os": "darwin", "cpu": "x64" }, "sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA=="],
 
-    "@babel/plugin-transform-literals": ["@babel/plugin-transform-literals@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-0HCFSepIpLTkLcsi86GG3mTUzxV5jpmbv97hTETW3yzrAij8aqlD36toB1D0daVFJM8NK6GvKO0gslVQmm+zZA=="],
+    "@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.25.12", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg=="],
 
-    "@babel/plugin-transform-logical-assignment-operators": ["@babel/plugin-transform-logical-assignment-operators@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-SJvDs5dXxiae4FbSL1aBJlG4wvl594N6YEVVn9e3JGulwioy6z3oPjx/sQBO3Y4NwUu5HNix6KJ3wBZoewcdbw=="],
+    "@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.25.12", "", { "os": "freebsd", "cpu": "x64" }, "sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ=="],
 
-    "@babel/plugin-transform-member-expression-literals": ["@babel/plugin-transform-member-expression-literals@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-hqoBX4dcZ1I33jCSWcXrP+1Ku7kdqXf1oeah7ooKOIiAdKQ+uqftgCFNOSzA5AMS2XIHEYeGFg4cKRCdpxzVOQ=="],
+    "@esbuild/linux-arm": ["@esbuild/linux-arm@0.25.12", "", { "os": "linux", "cpu": "arm" }, "sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw=="],
 
-    "@babel/plugin-transform-modules-amd": ["@babel/plugin-transform-modules-amd@7.27.1", "", { "dependencies": { "@babel/helper-module-transforms": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-iCsytMg/N9/oFq6n+gFTvUYDZQOMK5kEdeYxmxt91fcJGycfxVP9CnrxoliM0oumFERba2i8ZtwRUCMhvP1LnA=="],
+    "@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.25.12", "", { "os": "linux", "cpu": "arm64" }, "sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ=="],
 
-    "@babel/plugin-transform-modules-commonjs": ["@babel/plugin-transform-modules-commonjs@7.27.1", "", { "dependencies": { "@babel/helper-module-transforms": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-OJguuwlTYlN0gBZFRPqwOGNWssZjfIUdS7HMYtN8c1KmwpwHFBwTeFZrg9XZa+DFTitWOW5iTAG7tyCUPsCCyw=="],
+    "@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.25.12", "", { "os": "linux", "cpu": "ia32" }, "sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA=="],
 
-    "@babel/plugin-transform-modules-systemjs": ["@babel/plugin-transform-modules-systemjs@7.27.1", "", { "dependencies": { "@babel/helper-module-transforms": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1", "@babel/traverse": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-w5N1XzsRbc0PQStASMksmUeqECuzKuTJer7kFagK8AXgpCMkeDMO5S+aaFb7A51ZYDF7XI34qsTX+fkHiIm5yA=="],
+    "@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng=="],
 
-    "@babel/plugin-transform-modules-umd": ["@babel/plugin-transform-modules-umd@7.27.1", "", { "dependencies": { "@babel/helper-module-transforms": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-iQBE/xC5BV1OxJbp6WG7jq9IWiD+xxlZhLrdwpPkTX3ydmXdvoCpyfJN7acaIBZaOqTfr76pgzqBJflNbeRK+w=="],
+    "@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw=="],
 
-    "@babel/plugin-transform-named-capturing-groups-regex": ["@babel/plugin-transform-named-capturing-groups-regex@7.27.1", "", { "dependencies": { "@babel/helper-create-regexp-features-plugin": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-SstR5JYy8ddZvD6MhV0tM/j16Qds4mIpJTOd1Yu9J9pJjH93bxHECF7pgtc28XvkzTD6Pxcm/0Z73Hvk7kb3Ng=="],
+    "@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.25.12", "", { "os": "linux", "cpu": "ppc64" }, "sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA=="],
 
-    "@babel/plugin-transform-new-target": ["@babel/plugin-transform-new-target@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-f6PiYeqXQ05lYq3TIfIDu/MtliKUbNwkGApPUvyo6+tc7uaR4cPjPe7DFPr15Uyycg2lZU6btZ575CuQoYh7MQ=="],
+    "@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w=="],
 
-    "@babel/plugin-transform-nullish-coalescing-operator": ["@babel/plugin-transform-nullish-coalescing-operator@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-aGZh6xMo6q9vq1JGcw58lZ1Z0+i0xB2x0XaauNIUXd6O1xXc3RwoWEBlsTQrY4KQ9Jf0s5rgD6SiNkaUdJegTA=="],
+    "@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.25.12", "", { "os": "linux", "cpu": "s390x" }, "sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg=="],
 
-    "@babel/plugin-transform-numeric-separator": ["@babel/plugin-transform-numeric-separator@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-fdPKAcujuvEChxDBJ5c+0BTaS6revLV7CJL08e4m3de8qJfNIuCc2nc7XJYOjBoTMJeqSmwXJ0ypE14RCjLwaw=="],
+    "@esbuild/linux-x64": ["@esbuild/linux-x64@0.25.12", "", { "os": "linux", "cpu": "x64" }, "sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw=="],
 
-    "@babel/plugin-transform-object-rest-spread": ["@babel/plugin-transform-object-rest-spread@7.27.2", "", { "dependencies": { "@babel/helper-compilation-targets": "^7.27.2", "@babel/helper-plugin-utils": "^7.27.1", "@babel/plugin-transform-destructuring": "^7.27.1", "@babel/plugin-transform-parameters": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-AIUHD7xJ1mCrj3uPozvtngY3s0xpv7Nu7DoUSnzNY6Xam1Cy4rUznR//pvMHOhQ4AvbCexhbqXCtpxGHOGOO6g=="],
+    "@esbuild/netbsd-arm64": ["@esbuild/netbsd-arm64@0.25.12", "", { "os": "none", "cpu": "arm64" }, "sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg=="],
 
-    "@babel/plugin-transform-object-super": ["@babel/plugin-transform-object-super@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1", "@babel/helper-replace-supers": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-SFy8S9plRPbIcxlJ8A6mT/CxFdJx/c04JEctz4jf8YZaVS2px34j7NXRrlGlHkN/M2gnpL37ZpGRGVFLd3l8Ng=="],
+    "@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.25.12", "", { "os": "none", "cpu": "x64" }, "sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ=="],
 
-    "@babel/plugin-transform-optional-catch-binding": ["@babel/plugin-transform-optional-catch-binding@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-txEAEKzYrHEX4xSZN4kJ+OfKXFVSWKB2ZxM9dpcE3wT7smwkNmXo5ORRlVzMVdJbD+Q8ILTgSD7959uj+3Dm3Q=="],
+    "@esbuild/openbsd-arm64": ["@esbuild/openbsd-arm64@0.25.12", "", { "os": "openbsd", "cpu": "arm64" }, "sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A=="],
 
-    "@babel/plugin-transform-optional-chaining": ["@babel/plugin-transform-optional-chaining@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1", "@babel/helper-skip-transparent-expression-wrappers": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-BQmKPPIuc8EkZgNKsv0X4bPmOoayeu4F1YCwx2/CfmDSXDbp7GnzlUH+/ul5VGfRg1AoFPsrIThlEBj2xb4CAg=="],
+    "@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.25.12", "", { "os": "openbsd", "cpu": "x64" }, "sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw=="],
 
-    "@babel/plugin-transform-parameters": ["@babel/plugin-transform-parameters@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-018KRk76HWKeZ5l4oTj2zPpSh+NbGdt0st5S6x0pga6HgrjBOJb24mMDHorFopOOd6YHkLgOZ+zaCjZGPO4aKg=="],
+    "@esbuild/openharmony-arm64": ["@esbuild/openharmony-arm64@0.25.12", "", { "os": "none", "cpu": "arm64" }, "sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg=="],
 
-    "@babel/plugin-transform-private-methods": ["@babel/plugin-transform-private-methods@7.27.1", "", { "dependencies": { "@babel/helper-create-class-features-plugin": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-10FVt+X55AjRAYI9BrdISN9/AQWHqldOeZDUoLyif1Kn05a56xVBXb8ZouL8pZ9jem8QpXaOt8TS7RHUIS+GPA=="],
+    "@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.25.12", "", { "os": "sunos", "cpu": "x64" }, "sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w=="],
 
-    "@babel/plugin-transform-private-property-in-object": ["@babel/plugin-transform-private-property-in-object@7.27.1", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.27.1", "@babel/helper-create-class-features-plugin": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-5J+IhqTi1XPa0DXF83jYOaARrX+41gOewWbkPyjMNRDqgOCqdffGh8L3f/Ek5utaEBZExjSAzcyjmV9SSAWObQ=="],
+    "@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.25.12", "", { "os": "win32", "cpu": "arm64" }, "sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg=="],
 
-    "@babel/plugin-transform-property-literals": ["@babel/plugin-transform-property-literals@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-oThy3BCuCha8kDZ8ZkgOg2exvPYUlprMukKQXI1r1pJ47NCvxfkEy8vK+r/hT9nF0Aa4H1WUPZZjHTFtAhGfmQ=="],
+    "@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.25.12", "", { "os": "win32", "cpu": "ia32" }, "sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ=="],
 
-    "@babel/plugin-transform-regenerator": ["@babel/plugin-transform-regenerator@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-B19lbbL7PMrKr52BNPjCqg1IyNUIjTcxKj8uX9zHO+PmWN93s19NDr/f69mIkEp2x9nmDJ08a7lgHaTTzvW7mw=="],
+    "@esbuild/win32-x64": ["@esbuild/win32-x64@0.25.12", "", { "os": "win32", "cpu": "x64" }, "sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA=="],
 
-    "@babel/plugin-transform-regexp-modifiers": ["@babel/plugin-transform-regexp-modifiers@7.27.1", "", { "dependencies": { "@babel/helper-create-regexp-features-plugin": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-TtEciroaiODtXvLZv4rmfMhkCv8jx3wgKpL68PuiPh2M4fvz5jhsA7697N1gMvkvr/JTF13DrFYyEbY9U7cVPA=="],
+    "@floating-ui/core": ["@floating-ui/core@1.8.0", "", { "dependencies": { "@floating-ui/utils": "^0.2.12" } }, "sha512-0CIZ5itps/8x7BG8dEIhs53BvCUH2PCoogtakwRTut+Arm58sJooJ0AuZhLw2HJYIR5cMLNPBSS728sPho2khQ=="],
 
-    "@babel/plugin-transform-reserved-words": ["@babel/plugin-transform-reserved-words@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-V2ABPHIJX4kC7HegLkYoDpfg9PVmuWy/i6vUM5eGK22bx4YVFD3M5F0QQnWQoDs6AGsUWTVOopBiMFQgHaSkVw=="],
+    "@floating-ui/dom": ["@floating-ui/dom@1.8.0", "", { "dependencies": { "@floating-ui/core": "^1.8.0", "@floating-ui/utils": "^0.2.12" } }, "sha512-yXSrzeHZBTZadLOlfyhCkJHNeLJnHRnRInwdZ40L7ZiaAtrBwoYlsDrX3v5zB1Utk7CLfzcOVnVVWoXEky7Ceg=="],
 
-    "@babel/plugin-transform-shorthand-properties": ["@babel/plugin-transform-shorthand-properties@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-N/wH1vcn4oYawbJ13Y/FxcQrWk63jhfNa7jef0ih7PHSIHX2LB7GWE1rkPrOnka9kwMxb6hMl19p7lidA+EHmQ=="],
+    "@floating-ui/utils": ["@floating-ui/utils@0.2.12", "", {}, "sha512-HpCo8tmWzLVad5s2d19EhAz5zqrrQ6s69qd6moPMQvkOuSwDT1YgRfWSVuc4ennqrgv3OHppiOGMQ7oC13yIww=="],
 
-    "@babel/plugin-transform-spread": ["@babel/plugin-transform-spread@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1", "@babel/helper-skip-transparent-expression-wrappers": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-kpb3HUqaILBJcRFVhFUs6Trdd4mkrzcGXss+6/mxUd273PfbWqSDHRzMT2234gIg2QYfAjvXLSquP1xECSg09Q=="],
+    "@floating-ui/vue": ["@floating-ui/vue@2.0.1", "", { "dependencies": { "@floating-ui/dom": "^1.8.0", "@floating-ui/utils": "^0.2.12" }, "peerDependencies": { "vue": ">=3.3.0" } }, "sha512-043dyEKD9TDSfz080YH2vobubgg+NIo/9Fw4RAl7sEMpD8Am1DNrrSTl/GpMBjyGHoD/FbJY2QLawY+HSQsEIA=="],
 
-    "@babel/plugin-transform-sticky-regex": ["@babel/plugin-transform-sticky-regex@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-lhInBO5bi/Kowe2/aLdBAawijx+q1pQzicSgnkB6dUPc1+RC8QmJHKf2OjvU+NZWitguJHEaEmbV6VWEouT58g=="],
+    "@hey-api/codegen-core": ["@hey-api/codegen-core@0.9.1", "", { "dependencies": { "@hey-api/types": "0.1.4", "ansi-colors": "4.1.3", "c12": "3.3.4", "color-support": "1.1.3" } }, "sha512-s97jL1dgTMuiMHv2BZ1X4Tgd99Mf9GOvGdNqNcGwIMmnR+PgYNoraj4Zvp134MKsNCap/m7k0r0vKKnl56pj4w=="],
 
-    "@babel/plugin-transform-template-literals": ["@babel/plugin-transform-template-literals@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-fBJKiV7F2DxZUkg5EtHKXQdbsbURW3DZKQUWphDum0uRP6eHGGa/He9mc0mypL680pb+e/lDIthRohlv8NCHkg=="],
+    "@hey-api/json-schema-ref-parser": ["@hey-api/json-schema-ref-parser@1.4.4", "", { "dependencies": { "@jsdevtools/ono": "7.1.3", "@types/json-schema": "7.0.15", "js-yaml": "4.2.0" } }, "sha512-otmd+zCxbYVBIp/mlMTnGkvlNYLkVKgs3VOIq0kSnenhB1+fRwLPQIeSwyWM6E51oXhUedkYjVsVpkVexeuJOA=="],
 
-    "@babel/plugin-transform-typeof-symbol": ["@babel/plugin-transform-typeof-symbol@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-RiSILC+nRJM7FY5srIyc4/fGIwUhyDuuBSdWn4y6yT6gm652DpCHZjIipgn6B7MQ1ITOUnAKWixEUjQRIBIcLw=="],
+    "@hey-api/nuxt": ["@hey-api/nuxt@0.2.1", "", { "dependencies": { "@nuxt/kit": "3.15.4", "defu": "6.1.4", "mlly": "1.7.4" }, "peerDependencies": { "@hey-api/openapi-ts": "<2", "nuxt": ">=3.0.0", "vue": ">=3.5.13" } }, "sha512-c0mqiEf6qgRZUnFKVeCn7y7L9DnIjvVhWfQ9NFt14Sc8tbS7NUSbu9QnmjLOqn45jnU0qw42w8dVgY89D03OSw=="],
 
-    "@babel/plugin-transform-typescript": ["@babel/plugin-transform-typescript@7.28.5", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.27.3", "@babel/helper-create-class-features-plugin": "^7.28.5", "@babel/helper-plugin-utils": "^7.27.1", "@babel/helper-skip-transparent-expression-wrappers": "^7.27.1", "@babel/plugin-syntax-typescript": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-x2Qa+v/CuEoX7Dr31iAfr0IhInrVOWZU/2vJMJ00FOR/2nM0BcBEclpaf9sWCDc+v5e9dMrhSH8/atq/kX7+bA=="],
+    "@hey-api/openapi-ts": ["@hey-api/openapi-ts@0.99.0", "", { "dependencies": { "@hey-api/codegen-core": "0.9.1", "@hey-api/json-schema-ref-parser": "1.4.4", "@hey-api/shared": "0.5.0", "@hey-api/spec-types": "0.2.0", "@hey-api/types": "0.1.4", "@lukeed/ms": "2.0.2", "ansi-colors": "4.1.3", "color-support": "1.1.3", "commander": "15.0.0", "get-tsconfig": "4.14.0" }, "peerDependencies": { "typescript": ">=5.5.3 || >=6.0.0 || 6.0.1-rc" }, "bin": { "openapi-ts": "./bin/run.js" } }, "sha512-SePU/5oEWWkvUBYmvzdYRctseoLuskyhs4ET0RvLIcmzc8yLQoA2R+KtBIQ8bPsoSUB0m4E5SmBnl6aGSA0szQ=="],
 
-    "@babel/plugin-transform-unicode-escapes": ["@babel/plugin-transform-unicode-escapes@7.27.1", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-Ysg4v6AmF26k9vpfFuTZg8HRfVWzsh1kVfowA23y9j/Gu6dOuahdUVhkLqpObp3JIv27MLSii6noRnuKN8H0Mg=="],
+    "@hey-api/shared": ["@hey-api/shared@0.5.0", "", { "dependencies": { "@hey-api/codegen-core": "0.9.1", "@hey-api/json-schema-ref-parser": "1.4.4", "@hey-api/spec-types": "0.2.0", "@hey-api/types": "0.1.4", "ansi-colors": "4.1.3", "cross-spawn": "7.0.6", "open": "11.0.0", "semver": "7.8.4" } }, "sha512-JN/j4Ebh4cJGYIQ5cwWuqe7GeSUyQoz7oC51WqyhKOcrejK6DKZMDkshc5d1eKTRuRL+rjozuRcoUaZZn2DGPw=="],
 
-    "@babel/plugin-transform-unicode-property-regex": ["@babel/plugin-transform-unicode-property-regex@7.27.1", "", { "dependencies": { "@babel/helper-create-regexp-features-plugin": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-uW20S39PnaTImxp39O5qFlHLS9LJEmANjMG7SxIhap8rCHqu0Ik+tLEPX5DKmHn6CsWQ7j3lix2tFOa5YtL12Q=="],
+    "@hey-api/spec-types": ["@hey-api/spec-types@0.2.0", "", { "dependencies": { "@hey-api/types": "0.1.4" } }, "sha512-ibQ8Is7evMavzr8GNyJCcTg975d8DpaMUyLmOrQ85UBdy1l6t1KuRAwgChAbesJsIlNV6gjmlXruWyegDX18Fg=="],
 
-    "@babel/plugin-transform-unicode-regex": ["@babel/plugin-transform-unicode-regex@7.27.1", "", { "dependencies": { "@babel/helper-create-regexp-features-plugin": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-xvINq24TRojDuyt6JGtHmkVkrfVV3FPT16uytxImLeBZqW3/H52yN+kM1MGuyPkIQxrzKwPHs5U/MP3qKyzkGw=="],
+    "@hey-api/types": ["@hey-api/types@0.1.4", "", {}, "sha512-thWfawrDIP7wSI9ioT13I5soaaqB5vAPIiZmgD8PbeEVKNrkonc0N/Sjj97ezl7oQgusZmaNphGdMKipPO6IBg=="],
 
-    "@babel/plugin-transform-unicode-sets-regex": ["@babel/plugin-transform-unicode-sets-regex@7.27.1", "", { "dependencies": { "@babel/helper-create-regexp-features-plugin": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-EtkOujbc4cgvb0mlpQefi4NTPBzhSIevblFevACNLUspmrALgmEBdL/XfnyyITfd8fKBZrZys92zOWcik7j9Tw=="],
+    "@hono/standard-validator": ["@hono/standard-validator@0.3.0", "", { "peerDependencies": { "@standard-schema/spec": "^1.0.0", "hono": ">=4.11.2" } }, "sha512-tHLKEjKXDcHImj0XTFWW4Hr0ev+1G5GxnBZrGdpg/7NLy9s9meFPTSCOkw++ZzZKom3FjrMw2e0nFQpPPvwUVQ=="],
 
-    "@babel/preset-env": ["@babel/preset-env@7.27.2", "", { "dependencies": { "@babel/compat-data": "^7.27.2", "@babel/helper-compilation-targets": "^7.27.2", "@babel/helper-plugin-utils": "^7.27.1", "@babel/helper-validator-option": "^7.27.1", "@babel/plugin-bugfix-firefox-class-in-computed-class-key": "^7.27.1", "@babel/plugin-bugfix-safari-class-field-initializer-scope": "^7.27.1", "@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression": "^7.27.1", "@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining": "^7.27.1", "@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly": "^7.27.1", "@babel/plugin-proposal-private-property-in-object": "7.21.0-placeholder-for-preset-env.2", "@babel/plugin-syntax-import-assertions": "^7.27.1", "@babel/plugin-syntax-import-attributes": "^7.27.1", "@babel/plugin-syntax-unicode-sets-regex": "^7.18.6", "@babel/plugin-transform-arrow-functions": "^7.27.1", "@babel/plugin-transform-async-generator-functions": "^7.27.1", "@babel/plugin-transform-async-to-generator": "^7.27.1", "@babel/plugin-transform-block-scoped-functions": "^7.27.1", "@babel/plugin-transform-block-scoping": "^7.27.1", "@babel/plugin-transform-class-properties": "^7.27.1", "@babel/plugin-transform-class-static-block": "^7.27.1", "@babel/plugin-transform-classes": "^7.27.1", "@babel/plugin-transform-computed-properties": "^7.27.1", "@babel/plugin-transform-destructuring": "^7.27.1", "@babel/plugin-transform-dotall-regex": "^7.27.1", "@babel/plugin-transform-duplicate-keys": "^7.27.1", "@babel/plugin-transform-duplicate-named-capturing-groups-regex": "^7.27.1", "@babel/plugin-transform-dynamic-import": "^7.27.1", "@babel/plugin-transform-exponentiation-operator": "^7.27.1", "@babel/plugin-transform-export-namespace-from": "^7.27.1", "@babel/plugin-transform-for-of": "^7.27.1", "@babel/plugin-transform-function-name": "^7.27.1", "@babel/plugin-transform-json-strings": "^7.27.1", "@babel/plugin-transform-literals": "^7.27.1", "@babel/plugin-transform-logical-assignment-operators": "^7.27.1", "@babel/plugin-transform-member-expression-literals": "^7.27.1", "@babel/plugin-transform-modules-amd": "^7.27.1", "@babel/plugin-transform-modules-commonjs": "^7.27.1", "@babel/plugin-transform-modules-systemjs": "^7.27.1", "@babel/plugin-transform-modules-umd": "^7.27.1", "@babel/plugin-transform-named-capturing-groups-regex": "^7.27.1", "@babel/plugin-transform-new-target": "^7.27.1", "@babel/plugin-transform-nullish-coalescing-operator": "^7.27.1", "@babel/plugin-transform-numeric-separator": "^7.27.1", "@babel/plugin-transform-object-rest-spread": "^7.27.2", "@babel/plugin-transform-object-super": "^7.27.1", "@babel/plugin-transform-optional-catch-binding": "^7.27.1", "@babel/plugin-transform-optional-chaining": "^7.27.1", "@babel/plugin-transform-parameters": "^7.27.1", "@babel/plugin-transform-private-methods": "^7.27.1", "@babel/plugin-transform-private-property-in-object": "^7.27.1", "@babel/plugin-transform-property-literals": "^7.27.1", "@babel/plugin-transform-regenerator": "^7.27.1", "@babel/plugin-transform-regexp-modifiers": "^7.27.1", "@babel/plugin-transform-reserved-words": "^7.27.1", "@babel/plugin-transform-shorthand-properties": "^7.27.1", "@babel/plugin-transform-spread": "^7.27.1", "@babel/plugin-transform-sticky-regex": "^7.27.1", "@babel/plugin-transform-template-literals": "^7.27.1", "@babel/plugin-transform-typeof-symbol": "^7.27.1", "@babel/plugin-transform-unicode-escapes": "^7.27.1", "@babel/plugin-transform-unicode-property-regex": "^7.27.1", "@babel/plugin-transform-unicode-regex": "^7.27.1", "@babel/plugin-transform-unicode-sets-regex": "^7.27.1", "@babel/preset-modules": "0.1.6-no-external-plugins", "babel-plugin-polyfill-corejs2": "^0.4.10", "babel-plugin-polyfill-corejs3": "^0.11.0", "babel-plugin-polyfill-regenerator": "^0.6.1", "core-js-compat": "^3.40.0", "semver": "^6.3.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-Ma4zSuYSlGNRlCLO+EAzLnCmJK2vdstgv+n7aUP+/IKZrOfWHOJVdSJtuub8RzHTj3ahD37k5OKJWvzf16TQyQ=="],
+    "@iconify-json/lucide": ["@iconify-json/lucide@1.2.146", "", { "dependencies": { "@iconify/types": "*" } }, "sha512-T7qetsZJ682CCVT2X8C5uYEF6G/mtSoPl8F87wvu1LbfeVt4RxdP03NtaAs4RrrAXbWHBLjKrb8cmMtDucoI5g=="],
 
-    "@babel/preset-modules": ["@babel/preset-modules@0.1.6-no-external-plugins", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.0.0", "@babel/types": "^7.4.4", "esutils": "^2.0.2" }, "peerDependencies": { "@babel/core": "^7.0.0-0 || ^8.0.0-0 <8.0.0" } }, "sha512-HrcgcIESLm9aIR842yhJ5RWan/gebQUJ6E/E5+rf0y9o6oj7w0Br+sWuL6kEQ/o/AdfvR1Je9jG18/gnpwjEyA=="],
+    "@iconify/collections": ["@iconify/collections@1.0.753", "", { "dependencies": { "@iconify/types": "*" } }, "sha512-T2HWDRascNuUhtYoRn5EoRDz9AMLpYECpA3ML3MXaqHVPsYLPuWuU1NDTDCFVb61PgXNqmUWGigKkBnpwbqi+w=="],
 
-    "@babel/runtime": ["@babel/runtime@7.27.1", "", {}, "sha512-1x3D2xEk2fRo3PAhwQwu5UubzgiVWSXTBfWpVd2Mx2AzRqJuDJCsgaDVZ7HB5iGzDW1Hl1sWN2mFyKjmR9uAog=="],
+    "@iconify/types": ["@iconify/types@2.0.0", "", {}, "sha512-+wluvCrRhXrhyOmRDJ3q8mux9JkKy5SJ/v8ol2tu4FVjyYvtEzkc/3pK15ET6RKg4b4w4BmTk1+gsCUhf21Ykg=="],
 
-    "@babel/template": ["@babel/template@7.27.2", "", { "dependencies": { "@babel/code-frame": "^7.27.1", "@babel/parser": "^7.27.2", "@babel/types": "^7.27.1" } }, "sha512-LPDZ85aEJyYSd18/DkjNh4/y1ntkE5KwUHWTiqgRxruuZL2F1yuHligVHLvcHY2vMHXttKFpJn6LwfI7cw7ODw=="],
+    "@iconify/utils": ["@iconify/utils@3.1.7", "", { "dependencies": { "@antfu/install-pkg": "^2.0.1", "@iconify/types": "^2.0.0", "import-meta-resolve": "^4.2.0" } }, "sha512-JZHlwdID+dy+lTgbYC8NEC4zeugqeYsc6jewvzb4c58kHauJn+X7rNwQjxz5p2qSjqaEeQoLkCIQ9v/H4PK0/w=="],
 
-    "@babel/traverse": ["@babel/traverse@7.27.1", "", { "dependencies": { "@babel/code-frame": "^7.27.1", "@babel/generator": "^7.27.1", "@babel/parser": "^7.27.1", "@babel/template": "^7.27.1", "@babel/types": "^7.27.1", "debug": "^4.3.1", "globals": "^11.1.0" } }, "sha512-ZCYtZciz1IWJB4U61UPu4KEaqyfj+r5T1Q5mqPo+IBpcG9kHv30Z0aD8LXPgC1trYa6rK0orRyAhqUgk4MjmEg=="],
+    "@iconify/vue": ["@iconify/vue@5.0.3", "", { "dependencies": { "@iconify/types": "^2.0.0" }, "peerDependencies": { "vue": ">=3.0.0" } }, "sha512-e9x6QZe2/HyeHUog0jzZJSZts7m/YntPYp/p4OqtZEXpHznxWnQpcX30YpuaUH43h69l3YeR1FCJ8V1t3qd7qA=="],
 
-    "@babel/types": ["@babel/types@7.28.5", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.28.5" } }, "sha512-qQ5m48eI/MFLQ5PxQj4PFaprjyCTLI37ElWMmNs0K8Lk3dVeOdNpB3ks8jc7yM5CDmVC73eMVk/trk3fgmrUpA=="],
+    "@internationalized/date": ["@internationalized/date@3.12.4", "", { "dependencies": { "@swc/helpers": "^0.5.0" } }, "sha512-M1dEn4c1U1HsSlaVR8upZtSqvXrTkHDfv18H01uCSJyjVLDxnBR38v/fMxecmlwXKR4i9HeZcmgQAPE6A+aGJQ=="],
 
-    "@cloudflare/kv-asset-handler": ["@cloudflare/kv-asset-handler@0.4.0", "", { "dependencies": { "mime": "^3.0.0" } }, "sha512-+tv3z+SPp+gqTIcImN9o0hqE9xyfQjI1XD9pL6NuKjua9B1y7mNYv0S9cP+QEbA4ppVgGZEmKOvHX5G5Ei1CVA=="],
+    "@internationalized/number": ["@internationalized/number@3.6.9", "", { "dependencies": { "@swc/helpers": "^0.5.0" } }, "sha512-GgWy2caO/+hV9sT/oCTWGHvbjmJMPT9kkXzoKRLnkEq7adghhR7UprhvY9sXrKfrp3NcDfhF6QQHXR1KfQbB8g=="],
 
-    "@dxup/nuxt": ["@dxup/nuxt@0.2.2", "", { "dependencies": { "@dxup/unimport": "^0.1.2", "@nuxt/kit": "^4.2.1", "chokidar": "^4.0.3", "pathe": "^2.0.3", "tinyglobby": "^0.2.15" } }, "sha512-RNpJjDZs9+JcT9N87AnOuHsNM75DEd58itADNd/s1LIF6BZbTLZV0xxilJZb55lntn4TYvscTaXLCBX2fq9CXg=="],
+    "@ioredis/commands": ["@ioredis/commands@1.10.0", "", {}, "sha512-UmeW7z4LfctwoQ5wkhVzgq8tXkreED2xZGpX+Bg+zA+WJFZCT6c062AfCK/Dfk81xZnnwdhJCUMkitihRaoC2Q=="],
 
-    "@dxup/unimport": ["@dxup/unimport@0.1.2", "", {}, "sha512-/B8YJGPzaYq1NbsQmwgP8EZqg40NpTw4ZB3suuI0TplbxKHeK94jeaawLmVhCv+YwUnOpiWEz9U6SeThku/8JQ=="],
+    "@isaacs/cliui": ["@isaacs/cliui@8.0.2", "", { "dependencies": { "string-width": "^5.1.2", "string-width-cjs": "npm:string-width@^4.2.0", "strip-ansi": "^7.0.1", "strip-ansi-cjs": "npm:strip-ansi@^6.0.1", "wrap-ansi": "^8.1.0", "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0" } }, "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA=="],
 
-    "@emnapi/core": ["@emnapi/core@1.7.1", "", { "dependencies": { "@emnapi/wasi-threads": "1.1.0", "tslib": "^2.4.0" } }, "sha512-o1uhUASyo921r2XtHYOHy7gdkGLge8ghBEQHMWmyJFoXlpU58kIrhhN3w26lpQb6dspetweapMn2CSNwQ8I4wg=="],
+    "@isaacs/fs-minipass": ["@isaacs/fs-minipass@4.0.1", "", { "dependencies": { "minipass": "^7.0.4" } }, "sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w=="],
 
-    "@emnapi/runtime": ["@emnapi/runtime@1.7.1", "", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-PVtJr5CmLwYAU9PZDMITZoR5iAOShYREoR45EyyLrbntV50mdePTgUn4AmOw90Ifcj+x2kRjdzr1HP3RrNiHGA=="],
+    "@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.3.13", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.0", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA=="],
 
-    "@emnapi/wasi-threads": ["@emnapi/wasi-threads@1.1.0", "", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-WI0DdZ8xFSbgMjR1sFsKABJ/C5OnRrjT06JXbZKexJGrDuPTzZdDYfFlsgcCXCyf+suG5QU2e/y1Wo2V/OapLQ=="],
+    "@jridgewell/remapping": ["@jridgewell/remapping@2.3.5", "", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ=="],
 
-    "@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.25.12", "", { "os": "aix", "cpu": "ppc64" }, "sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA=="],
+    "@jridgewell/resolve-uri": ["@jridgewell/resolve-uri@3.1.2", "", {}, "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw=="],
 
-    "@esbuild/android-arm": ["@esbuild/android-arm@0.25.12", "", { "os": "android", "cpu": "arm" }, "sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg=="],
+    "@jridgewell/source-map": ["@jridgewell/source-map@0.3.11", "", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.25" } }, "sha512-ZMp1V8ZFcPG5dIWnQLr3NSI1MiCU7UETdS/A0G8V/XWHvJv3ZsFqutJn1Y5RPmAPX6F3BiE397OqveU/9NCuIA=="],
 
-    "@esbuild/android-arm64": ["@esbuild/android-arm64@0.25.12", "", { "os": "android", "cpu": "arm64" }, "sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg=="],
+    "@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.6.0", "", {}, "sha512-T7jf+5zgsZHwNJ4lvQ7/aezbyk0nNX+zJVWpmHA7VYsEx7a7qr5Rg5IbtJFqkgze5Y2sruq1RUY8Q837Od7iFw=="],
 
-    "@esbuild/android-x64": ["@esbuild/android-x64@0.25.12", "", { "os": "android", "cpu": "x64" }, "sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg=="],
+    "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.31", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw=="],
 
-    "@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.25.12", "", { "os": "darwin", "cpu": "arm64" }, "sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg=="],
+    "@jsdevtools/ono": ["@jsdevtools/ono@7.1.3", "", {}, "sha512-4JQNk+3mVzK3xh2rqd6RB4J46qUR19azEHBneZyTZM+c456qOrbbM/5xcR8huNCCcbVt7+UmizG6GuUvPvKUYg=="],
 
-    "@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.25.12", "", { "os": "darwin", "cpu": "x64" }, "sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA=="],
+    "@libsql/client": ["@libsql/client@0.17.4", "", { "dependencies": { "@libsql/core": "^0.17.4", "@libsql/hrana-client": "^0.10.0", "js-base64": "^3.7.5", "libsql": "^0.5.28", "promise-limit": "^2.7.0" } }, "sha512-lYayFWasDV78A+TjlEhr6ubb3odBV6OHjb+wdp8VQcyWWAEIjuwbCHaraEUS4m4yWoo0BvZo96It4VdzZRmRWw=="],
 
-    "@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.25.12", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg=="],
+    "@libsql/core": ["@libsql/core@0.17.4", "", { "dependencies": { "js-base64": "^3.7.5" } }, "sha512-LqF9gIvnJ38nmAH1y/ChizHqDO/MO1wLgA96XrraulEEbqXxLjleSH92YWTolbuJKgPUmGu4aJk9W3UnAcxLOQ=="],
 
-    "@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.25.12", "", { "os": "freebsd", "cpu": "x64" }, "sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ=="],
+    "@libsql/darwin-arm64": ["@libsql/darwin-arm64@0.5.29", "", { "os": "darwin", "cpu": "arm64" }, "sha512-K+2RIB1OGFPYQbfay48GakLhqf3ArcbHqPFu7EZiaUcRgFcdw8RoltsMyvbj5ix2fY0HV3Q3Ioa/ByvQdaSM0A=="],
 
-    "@esbuild/linux-arm": ["@esbuild/linux-arm@0.25.12", "", { "os": "linux", "cpu": "arm" }, "sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw=="],
+    "@libsql/darwin-x64": ["@libsql/darwin-x64@0.5.29", "", { "os": "darwin", "cpu": "x64" }, "sha512-OtT+KFHsKFy1R5FVadr8FJ2Bb1mghtXTyJkxv0trocq7NuHntSki1eUbxpO5ezJesDvBlqFjnWaYYY516QNLhQ=="],
 
-    "@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.25.12", "", { "os": "linux", "cpu": "arm64" }, "sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ=="],
+    "@libsql/hrana-client": ["@libsql/hrana-client@0.10.0", "", { "dependencies": { "@libsql/isomorphic-ws": "^0.1.5", "js-base64": "^3.7.5" } }, "sha512-OoA4EMqRAC7kn7V2P6EQqRcpZf2W+AjsNIyCizBg339Tq/aMC7sRnzs3SklderhmQWAqEzvv8A2vhxVmWpkVvw=="],
 
-    "@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.25.12", "", { "os": "linux", "cpu": "ia32" }, "sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA=="],
+    "@libsql/isomorphic-ws": ["@libsql/isomorphic-ws@0.1.5", "", { "dependencies": { "@types/ws": "^8.5.4", "ws": "^8.13.0" } }, "sha512-DtLWIH29onUYR00i0GlQ3UdcTRC6EP4u9w/h9LxpUZJWRMARk6dQwZ6Jkd+QdwVpuAOrdxt18v0K2uIYR3fwFg=="],
 
-    "@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng=="],
+    "@libsql/linux-arm-gnueabihf": ["@libsql/linux-arm-gnueabihf@0.5.29", "", { "os": "linux", "cpu": "arm" }, "sha512-CD4n4zj7SJTHso4nf5cuMoWoMSS7asn5hHygsDuhRl8jjjCTT3yE+xdUvI4J7zsyb53VO5ISh4cwwOtf6k2UhQ=="],
 
-    "@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw=="],
+    "@libsql/linux-arm-musleabihf": ["@libsql/linux-arm-musleabihf@0.5.29", "", { "os": "linux", "cpu": "arm" }, "sha512-2Z9qBVpEJV7OeflzIR3+l5yAd4uTOLxklScYTwpZnkm2vDSGlC1PRlueLaufc4EFITkLKXK2MWBpexuNJfMVcg=="],
 
-    "@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.25.12", "", { "os": "linux", "cpu": "ppc64" }, "sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA=="],
+    "@libsql/linux-arm64-gnu": ["@libsql/linux-arm64-gnu@0.5.29", "", { "os": "linux", "cpu": "arm64" }, "sha512-gURBqaiXIGGwFNEaUj8Ldk7Hps4STtG+31aEidCk5evMMdtsdfL3HPCpvys+ZF/tkOs2MWlRWoSq7SOuCE9k3w=="],
 
-    "@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w=="],
+    "@libsql/linux-arm64-musl": ["@libsql/linux-arm64-musl@0.5.29", "", { "os": "linux", "cpu": "arm64" }, "sha512-fwgYZ0H8mUkyVqXZHF3mT/92iIh1N94Owi/f66cPVNsk9BdGKq5gVpoKO+7UxaNzuEH1roJp2QEwsCZMvBLpqg=="],
 
-    "@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.25.12", "", { "os": "linux", "cpu": "s390x" }, "sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg=="],
+    "@libsql/linux-x64-gnu": ["@libsql/linux-x64-gnu@0.5.29", "", { "os": "linux", "cpu": "x64" }, "sha512-y14V0vY0nmMC6G0pHeJcEarcnGU2H6cm21ZceRkacWHvQAEhAG0latQkCtoS2njFOXiYIg+JYPfAoWKbi82rkg=="],
 
-    "@esbuild/linux-x64": ["@esbuild/linux-x64@0.25.12", "", { "os": "linux", "cpu": "x64" }, "sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw=="],
+    "@libsql/linux-x64-musl": ["@libsql/linux-x64-musl@0.5.29", "", { "os": "linux", "cpu": "x64" }, "sha512-gquqwA/39tH4pFl+J9n3SOMSymjX+6kZ3kWgY3b94nXFTwac9bnFNMffIomgvlFaC4ArVqMnOZD3nuJ3H3VO1w=="],
 
-    "@esbuild/netbsd-arm64": ["@esbuild/netbsd-arm64@0.25.12", "", { "os": "none", "cpu": "arm64" }, "sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg=="],
+    "@libsql/win32-x64-msvc": ["@libsql/win32-x64-msvc@0.5.29", "", { "os": "win32", "cpu": "x64" }, "sha512-4/0CvEdhi6+KjMxMaVbFM2n2Z44escBRoEYpR+gZg64DdetzGnYm8mcNLcoySaDJZNaBd6wz5DNdgRmcI4hXcg=="],
 
-    "@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.25.12", "", { "os": "none", "cpu": "x64" }, "sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ=="],
+    "@lukeed/ms": ["@lukeed/ms@2.0.2", "", {}, "sha512-9I2Zn6+NJLfaGoz9jN3lpwDgAYvfGeNYdbAIjJOqzs4Tpc+VU3Jqq4IofSUBKajiDS8k9fZIg18/z13mpk1bsA=="],
 
-    "@esbuild/openbsd-arm64": ["@esbuild/openbsd-arm64@0.25.12", "", { "os": "openbsd", "cpu": "arm64" }, "sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A=="],
+    "@mapbox/node-pre-gyp": ["@mapbox/node-pre-gyp@2.0.3", "", { "dependencies": { "consola": "^3.2.3", "detect-libc": "^2.0.0", "https-proxy-agent": "^7.0.5", "node-fetch": "^2.6.7", "nopt": "^8.0.0", "semver": "^7.5.3", "tar": "^7.4.0" }, "bin": { "node-pre-gyp": "bin/node-pre-gyp" } }, "sha512-uwPAhccfFJlsfCxMYTwOdVfOz3xqyj8xYL3zJj8f0pb30tLohnnFPhLuqp4/qoEz8sNxe4SESZedcBojRefIzg=="],
 
-    "@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.25.12", "", { "os": "openbsd", "cpu": "x64" }, "sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw=="],
+    "@napi-rs/lzma-linux-x64-gnu": ["@napi-rs/lzma-linux-x64-gnu@1.5.1", "", { "os": "linux", "cpu": "x64" }, "sha512-oTXEIha4SsuXdTA4Iyskj0kpdx2yVXdhd75c2v3xGrHFfVMsbhTPZU/nMPL4sWKo4pBHm3aucLaqGlF696dTyQ=="],
 
-    "@esbuild/openharmony-arm64": ["@esbuild/openharmony-arm64@0.25.12", "", { "os": "none", "cpu": "arm64" }, "sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg=="],
+    "@neon-rs/load": ["@neon-rs/load@0.0.4", "", {}, "sha512-kTPhdZyTQxB+2wpiRcFWrDcejc4JI6tkPuS7UZCG4l6Zvc5kU/gGQ/ozvHTh1XR5tS+UlfAfGuPajjzQjCiHCw=="],
 
-    "@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.25.12", "", { "os": "sunos", "cpu": "x64" }, "sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w=="],
+    "@nodelib/fs.scandir": ["@nodelib/fs.scandir@2.1.5", "", { "dependencies": { "@nodelib/fs.stat": "2.0.5", "run-parallel": "^1.1.9" } }, "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g=="],
 
-    "@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.25.12", "", { "os": "win32", "cpu": "arm64" }, "sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg=="],
+    "@nodelib/fs.stat": ["@nodelib/fs.stat@2.0.5", "", {}, "sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A=="],
 
-    "@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.25.12", "", { "os": "win32", "cpu": "ia32" }, "sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ=="],
+    "@nodelib/fs.walk": ["@nodelib/fs.walk@1.2.8", "", { "dependencies": { "@nodelib/fs.scandir": "2.1.5", "fastq": "^1.6.0" } }, "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg=="],
 
-    "@esbuild/win32-x64": ["@esbuild/win32-x64@0.25.12", "", { "os": "win32", "cpu": "x64" }, "sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA=="],
+    "@nuxt/cli": ["@nuxt/cli@4.0.1", "", { "dependencies": { "@clack/prompts": "^1.8.1", "args-tokenizer": "^0.3.0", "clickable-path": "^0.1.1", "confbox": "^0.3.1", "consola": "^3.4.2", "defu": "^6.1.7", "exsolve": "^1.1.3", "fuzzysort": "^4.0.2", "get-port-please": "^3.2.0", "my-bad": "^0.2.9", "obug": "^3.0.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "perfect-debounce": "^2.1.0", "pkg-types": "^2.3.3", "rc9": "^3.1.0", "scule": "^1.3.0", "srvx": "^1.0.5", "std-env": "^4.3.0", "tinyclip": "^1.0.3", "tinyexec": "^1.3.1", "uqr": "^0.1.3", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/docs": "^4.0.0", "@nuxt/schema": "^3.0.0 || ^4.0.0", "jiti": "^2.3.0", "oxc-parser": ">=0.56.3", "rolldown": "^1.0.0-rc.16 || ^1.0.0", "serve": "^14.0.0" }, "optionalPeers": ["@nuxt/docs", "@nuxt/schema", "jiti", "oxc-parser", "rolldown", "serve"], "bin": { "nuxi": "bin/nuxi.mjs", "nuxt": "bin/nuxi.mjs", "nuxi-ng": "bin/nuxi.mjs", "nuxt-cli": "bin/nuxi.mjs" } }, "sha512-vtB77CmkrYUMoIKwk+HUdNQX1vuMPpnu7ExNYB91WuIxzzGrGQLSxGUpXa360xsyUkZ4h9s+qElAQQW9ZQP4WA=="],
 
-    "@ioredis/commands": ["@ioredis/commands@1.4.0", "", {}, "sha512-aFT2yemJJo+TZCmieA7qnYGQooOS7QfNmYrzGtsYd3g9j5iDP8AimYYAesf79ohjbLG12XxC4nG5DyEnC88AsQ=="],
+    "@nuxt/devalue": ["@nuxt/devalue@2.0.2", "", {}, "sha512-GBzP8zOc7CGWyFQS6dv1lQz8VVpz5C2yRszbXufwG/9zhStTIH50EtD87NmWbTMwXDvZLNg8GIpb1UFdH93JCA=="],
 
-    "@isaacs/cliui": ["@isaacs/cliui@8.0.2", "", { "dependencies": { "string-width": "^5.1.2", "string-width-cjs": "npm:string-width@^4.2.0", "strip-ansi": "^7.0.1", "strip-ansi-cjs": "npm:strip-ansi@^6.0.1", "wrap-ansi": "^8.1.0", "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0" } }, "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA=="],
+    "@nuxt/devtools": ["@nuxt/devtools@3.4.3", "", { "dependencies": { "@nuxt/devtools-kit": "3.4.3", "@nuxt/devtools-wizard": "3.4.3", "@nuxt/kit": "^4.5.1", "@vue/devtools-core": "^8.2.1", "@vue/devtools-kit": "^8.2.1", "birpc": "^4.0.0", "consola": "^3.4.2", "destr": "^2.0.5", "error-stack-parser-es": "^2.0.1", "execa": "^8.0.1", "fast-npm-meta": "^2.2.0", "get-port-please": "^3.2.0", "hookable": "^6.1.1", "image-meta": "^0.2.2", "is-installed-globally": "^1.0.0", "launch-editor": "^2.14.1", "local-pkg": "^1.2.1", "magicast": "^0.5.4", "ohash": "^2.0.11", "package-manager-detector": "^1.8.0", "pathe": "^2.0.3", "perfect-debounce": "^2.1.0", "pkg-types": "^2.3.1", "semver": "^7.8.5", "sirv": "^3.0.2", "structured-clone-es": "^2.0.1", "tinyexec": "^1.3.0", "tinyglobby": "^0.2.17", "unstorage": "^1.17.5", "vite-plugin-inspect": "^11.4.1", "vite-plugin-vue-tracer": "^1.4.0", "which": "^6.0.1", "ws": "^8.21.1" }, "peerDependencies": { "@vitejs/devtools": "*", "vite": ">=6.0" }, "optionalPeers": ["@vitejs/devtools"], "bin": { "devtools": "./cli.mjs" } }, "sha512-63qNER1zq1z+b+zUms2X9xKu8SV04FSab8C7yqzCy/8C/mPodNVJZsI6YsCXhz2BLAM1E9+3vIPzLT8BJjKKmA=="],
 
-    "@isaacs/fs-minipass": ["@isaacs/fs-minipass@4.0.1", "", { "dependencies": { "minipass": "^7.0.4" } }, "sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w=="],
+    "@nuxt/devtools-kit": ["@nuxt/devtools-kit@3.4.3", "", { "dependencies": { "@nuxt/kit": "^4.5.1", "execa": "^8.0.1" }, "peerDependencies": { "vite": ">=6.0" } }, "sha512-mG4OT+1v6JkaRj+L9bYI6TaWLqDwu4NE+//UL/annLsrGiAOXc9FlFAnIIuQojPZ+H1gJeuc1pc968z/jXwUlA=="],
 
-    "@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.3.13", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.0", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA=="],
+    "@nuxt/devtools-wizard": ["@nuxt/devtools-wizard@3.4.3", "", { "dependencies": { "@clack/prompts": "^1.7.0", "consola": "^3.4.2", "diff": "^8.0.4", "execa": "^8.0.1", "magicast": "^0.5.4", "pathe": "^2.0.3", "pkg-types": "^2.3.1", "semver": "^7.8.5" }, "bin": { "devtools-wizard": "./cli.mjs" } }, "sha512-0F5mQmaj3rEMT5gkQeDsXea7YyyvPwp4ktT3xduZgp1G0QiSzV7AQ64gXz2LPaIc4V8ib/k++8KjmHL+/DbH4Q=="],
 
-    "@jridgewell/remapping": ["@jridgewell/remapping@2.3.5", "", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ=="],
+    "@nuxt/fonts": ["@nuxt/fonts@0.14.0", "", { "dependencies": { "@nuxt/devtools-kit": "^3.2.1", "@nuxt/kit": "^4.2.2", "consola": "^3.4.2", "defu": "^6.1.4", "fontless": "^0.2.1", "h3": "^1.15.5", "magic-regexp": "^0.10.0", "ofetch": "^1.5.1", "pathe": "^2.0.3", "sirv": "^3.0.2", "tinyglobby": "^0.2.15", "ufo": "^1.6.3", "unifont": "^0.7.4", "unplugin": "^3.0.0", "unstorage": "^1.17.4" } }, "sha512-4uXQl9fa5F4ibdgU8zomoOcyMdnwgdem+Pi8JEqeDYI5yPR32Kam6HnuRr47dTb97CstaepAvXPWQUUHMtjsFQ=="],
 
-    "@jridgewell/resolve-uri": ["@jridgewell/resolve-uri@3.1.2", "", {}, "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw=="],
+    "@nuxt/icon": ["@nuxt/icon@2.5.1", "", { "dependencies": { "@iconify/collections": "^1.0.727", "@iconify/types": "^2.0.0", "@iconify/utils": "^3.1.4", "@iconify/vue": "^5.0.1", "@nuxt/devtools-kit": "^3.4.2", "@nuxt/kit": "^4.5.2", "consola": "^3.4.2", "local-pkg": "^1.2.1", "mlly": "^1.8.2", "ohash": "^2.0.12", "picomatch": "^4.0.5", "std-env": "^4.2.0", "tinyglobby": "^0.2.17", "ufo": "^1.6.4" } }, "sha512-zBP72Po7BS+tXzoeDRA/Y9TTY77OIcNCyzfgXsOmep7zZShTEoe4p1WZBXce/9oJDK3YXmbYC3ILQ7XvqM4/XA=="],
 
-    "@jridgewell/set-array": ["@jridgewell/set-array@1.2.1", "", {}, "sha512-R8gLRTZeyp03ymzP/6Lil/28tGeGEzhx1q2k703KGWRAI1VdvPIXdG70VJc2pAMw3NA6JKL5hhFu1sJX0Mnn/A=="],
+    "@nuxt/kit": ["@nuxt/kit@3.15.4", "", { "dependencies": { "c12": "^2.0.1", "consola": "^3.4.0", "defu": "^6.1.4", "destr": "^2.0.3", "globby": "^14.0.2", "ignore": "^7.0.3", "jiti": "^2.4.2", "klona": "^2.0.6", "knitwork": "^1.2.0", "mlly": "^1.7.4", "ohash": "^1.1.4", "pathe": "^2.0.2", "pkg-types": "^1.3.1", "scule": "^1.3.0", "semver": "^7.6.3", "std-env": "^3.8.0", "ufo": "^1.5.4", "unctx": "^2.4.1", "unimport": "^4.0.0", "untyped": "^1.5.2" } }, "sha512-dr7I7eZOoRLl4uxdxeL2dQsH0OrbEiVPIyBHnBpA4co24CBnoJoF+JINuP9l3PAM3IhUzc5JIVq3/YY3lEc3Hw=="],
 
-    "@jridgewell/source-map": ["@jridgewell/source-map@0.3.6", "", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.25" } }, "sha512-1ZJTZebgqllO79ue2bm3rIGud/bOe0pP5BjSRCRxxYkEZS8STV7zN84UBbiYu7jy+eCKSnVIUgoWWE/tt+shMQ=="],
+    "@nuxt/nitro-server": ["@nuxt/nitro-server@4.6.2", "", { "dependencies": { "@nuxt/kit": "4.6.2", "@unhead/vue": "^3.4.3", "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "devalue": "^6.0.3", "errx": "^0.2.2", "escape-string-regexp": "^5.0.0", "exsolve": "^1.1.3", "flru": "^1.0.2", "h3": "^1.15.11", "impound": "^1.2.0", "klona": "^2.0.6", "mocked-exports": "^0.1.1", "my-bad": "^0.2.11", "nitropack": "^2.13.4", "nostics": "^1.3.0", "ohash": "^2.0.12", "pathe": "^2.0.3", "radix3": "^1.1.2", "rou3": "^0.9.2", "std-env": "^4.3.0", "ufo": "^1.6.4", "unctx": "^3.0.1", "unrouting": "^0.2.3", "unstorage": "^1.17.5", "vue": "^3.5.44", "vue-bundle-renderer": "^2.4.0", "vue-devtools-stub": "^0.1.0" }, "peerDependencies": { "@babel/plugin-proposal-decorators": "^7.25.0 || ^8.0.0", "@babel/plugin-syntax-typescript": "^7.25.0 || ^8.0.0", "@rollup/plugin-babel": "^6.0.0 || ^7.0.0", "nuxt": "^4.6.2" }, "optionalPeers": ["@babel/plugin-proposal-decorators", "@babel/plugin-syntax-typescript", "@rollup/plugin-babel"] }, "sha512-mOiTpoiSG26/0UI4Nxfc4AK76UaCdpjObLPCF6NTDX9wL6Ed4/95AAVZKbEq7qxtNSla/8F+s8NSY6O1wpJ5bA=="],
 
-    "@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.5", "", {}, "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og=="],
+    "@nuxt/schema": ["@nuxt/schema@4.6.2", "", { "dependencies": { "@vue/shared": "^3.5.44", "defu": "^6.1.7", "nostics": "^1.3.0", "pathe": "^2.0.3", "pkg-types": "^2.3.3", "std-env": "^4.3.0" } }, "sha512-L+0YiNDh/5C079JiHweAbOJqWD/931N+aqwtRk/wrCpRmTmYgiyIelVbnOv0sevWvGcPouBJRgTC2fxlp3mxoQ=="],
 
-    "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.31", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw=="],
+    "@nuxt/telemetry": ["@nuxt/telemetry@2.9.1", "", { "dependencies": { "citty": "^0.2.2", "consola": "^3.4.2", "rc9": "^3.0.1", "std-env": "^4.2.0" }, "peerDependencies": { "@nuxt/kit": ">=3.0.0" }, "bin": { "nuxt-telemetry": "bin/nuxt-telemetry.mjs" } }, "sha512-WYQs6GvebU278YXhbGlLA8pUO3ox+juHAiKCB3SEH0lq2PDRwX465tHRtpVIqsHv+lGK/n99FC7qqyBt9+p3oQ=="],
 
-    "@kwsites/file-exists": ["@kwsites/file-exists@1.1.1", "", { "dependencies": { "debug": "^4.1.1" } }, "sha512-m9/5YGR18lIwxSFDwfE3oA7bWuq9kdau6ugN4H2rJeyhFQZcG9AgSHkQtSD15a8WvTgfz9aikZMrKPHvbpqFiw=="],
+    "@nuxt/ui": ["@nuxt/ui@4.12.0", "", { "dependencies": { "@floating-ui/dom": "^1.8.0", "@iconify/vue": "^5.0.3", "@internationalized/date": "^3.12.4", "@internationalized/number": "^3.6.9", "@nuxt/fonts": "^0.14.0", "@nuxt/icon": "^2.5.1", "@nuxt/kit": "^4.6.1", "@nuxt/schema": "^4.6.1", "@nuxtjs/color-mode": "^4.0.1", "@standard-schema/spec": "^1.1.0", "@tailwindcss/postcss": "^4.3.3", "@tailwindcss/vite": "^4.3.3", "@tanstack/vue-table": "^8.21.3", "@tanstack/vue-virtual": "^3.13.40", "@tiptap/core": "^3.31.4", "@tiptap/extension-bubble-menu": "^3.31.4", "@tiptap/extension-code": "^3.31.4", "@tiptap/extension-collaboration": "^3.31.4", "@tiptap/extension-drag-handle": "^3.31.4", "@tiptap/extension-drag-handle-vue-3": "^3.31.4", "@tiptap/extension-floating-menu": "^3.31.4", "@tiptap/extension-horizontal-rule": "^3.31.4", "@tiptap/extension-image": "^3.31.4", "@tiptap/extension-mention": "^3.31.4", "@tiptap/extension-node-range": "^3.31.4", "@tiptap/extension-placeholder": "^3.31.4", "@tiptap/markdown": "^3.31.4", "@tiptap/pm": "^3.31.4", "@tiptap/starter-kit": "^3.31.4", "@tiptap/suggestion": "^3.31.4", "@tiptap/vue-3": "^3.31.4", "@unhead/vue": "^3.4.2", "@vueuse/core": "^14.4.0", "@vueuse/integrations": "^14.4.0", "@vueuse/shared": "^14.4.0", "colortranslator": "^5.0.0", "consola": "^3.4.2", "defu": "^6.1.7", "embla-carousel-auto-height": "^8.6.0", "embla-carousel-auto-scroll": "^8.6.0", "embla-carousel-autoplay": "^8.6.0", "embla-carousel-class-names": "^8.6.0", "embla-carousel-fade": "^8.6.0", "embla-carousel-vue": "^8.6.0", "embla-carousel-wheel-gestures": "^8.1.0", "fuse.js": "^7.5.0", "hookable": "^6.1.2", "knitwork": "^1.3.0", "magic-string": "^1.4.3", "mlly": "^1.8.2", "motion-v": "^2.6.0", "ohash": "^2.0.12", "pathe": "^2.0.3", "reka-ui": "2.11.0", "scule": "^1.3.0", "tailwind-merge": "^3.7.0", "tailwind-variants": "^3.2.2", "tailwindcss": "^4.3.3", "tinyglobby": "^0.2.17", "ufo": "^1.6.4", "unplugin": "^3.4.0", "unplugin-auto-import": "^21.1.0", "unplugin-vue-components": "^32.1.0", "vaul-vue": "0.4.1", "vue-component-type-helpers": "^3.3.13" }, "peerDependencies": { "@inertiajs/vue3": "^2.0.7 || ^3", "@nuxt/content": "^3", "@tanstack/charts": "^1", "ai": "^6 || ^7", "joi": "^18", "superstruct": "^2", "typescript": "^5.6.3 || ^6 || ^7", "valibot": "^1", "vue-router": "^4.5.0 || ^5", "yup": "^1.7.0", "zod": "^3.24.0 || ^4" }, "optionalPeers": ["@inertiajs/vue3", "@nuxt/content", "@tanstack/charts", "ai", "joi", "superstruct", "valibot", "vue-router", "yup", "zod"] }, "sha512-e5g3RiFHTQc+PzBFZogpPLNetAMJDWq+5GPVUK88jIBgm/jnxYqMgbvyhfuLdL7spvyjA5ow5TtvIQVEAs3AMA=="],
 
-    "@kwsites/promise-deferred": ["@kwsites/promise-deferred@1.1.1", "", {}, "sha512-GaHYm+c0O9MjZRu0ongGBRbinu8gVAMd2UZjji6jVmqKtZluZnptXGWhz1E8j8D2HJ3f/yMxKAUC0b+57wncIw=="],
+    "@nuxt/vite-builder": ["@nuxt/vite-builder@4.6.2", "", { "dependencies": { "@nuxt/kit": "4.6.2", "@vitejs/plugin-vue": "^6.0.10", "@vitejs/plugin-vue-jsx": "^5.1.6", "autoprefixer": "^10.6.1", "clickable-path": "^0.1.1", "consola": "^3.4.2", "cssnano": "^9.8.0", "defu": "^6.1.7", "escape-string-regexp": "^5.0.0", "exsolve": "^1.1.3", "generic-names": "^4.0.0", "get-port-please": "^3.2.0", "js-tokens": "^10.0.0", "knitwork": "^1.3.0", "mocked-exports": "^0.1.1", "my-bad": "^0.2.11", "pathe": "^2.0.3", "pkg-types": "^2.3.3", "postcss": "^8.5.30", "rolldown-string": "^0.3.1", "seroval": "^1.6.9", "std-env": "^4.3.0", "ufo": "^1.6.4", "unenv": "^2.0.0-rc.24", "vite": "^8.3.4", "vite-node": "^6.0.0", "vite-plugin-checker": "^0.14.5", "vue-bundle-renderer": "^2.4.0" }, "peerDependencies": { "@babel/plugin-proposal-decorators": "^7.25.0 || ^8.0.0", "@babel/plugin-syntax-jsx": "^7.25.0 || ^8.0.0", "nuxt": "4.6.2", "rolldown": "^1.0.0", "rollup-plugin-visualizer": "^6.0.0 || ^7.0.1", "vue": "^3.3.4" }, "optionalPeers": ["@babel/plugin-proposal-decorators", "@babel/plugin-syntax-jsx", "rolldown", "rollup-plugin-visualizer"] }, "sha512-UCEoVjguX65x2mlZ0wuTth//idqugfKkxK9RwXHUqCkxonO4YgVh9akqUUlcjw/CSWWOZUbAOFnyS1yIXNGOZw=="],
 
-    "@libsql/client": ["@libsql/client@0.15.15", "", { "dependencies": { "@libsql/core": "^0.15.14", "@libsql/hrana-client": "^0.7.0", "js-base64": "^3.7.5", "libsql": "^0.5.22", "promise-limit": "^2.7.0" } }, "sha512-twC0hQxPNHPKfeOv3sNT6u2pturQjLcI+CnpTM0SjRpocEGgfiZ7DWKXLNnsothjyJmDqEsBQJ5ztq9Wlu470w=="],
+    "@nuxt/vite-server": ["@nuxt/vite-server@4.6.2", "", { "dependencies": { "@nuxt/kit": "4.6.2", "clickable-path": "^0.1.1", "defu": "^6.1.7", "exsolve": "^1.1.3", "mocked-exports": "^0.1.1", "my-bad": "^0.2.11", "pathe": "^2.0.3", "rou3": "^0.9.2", "srvx": "1.0.5", "ufo": "^1.6.4", "ultrahtml": "^1.7.0" }, "peerDependencies": { "nuxt": "^4.6.2", "vite": "^8.3.4" } }, "sha512-tSlCRgrx8TFBhETV/6dFk1gKLmwj1GaIrItRJClqJesJvdGDAabA3av4Ph8wlFGD5vkxIvzAeksn8Uy1ja1DMQ=="],
 
-    "@libsql/core": ["@libsql/core@0.15.15", "", { "dependencies": { "js-base64": "^3.7.5" } }, "sha512-C88Z6UKl+OyuKKPwz224riz02ih/zHYI3Ho/LAcVOgjsunIRZoBw7fjRfaH9oPMmSNeQfhGklSG2il1URoOIsA=="],
+    "@nuxtjs/color-mode": ["@nuxtjs/color-mode@4.0.1", "", { "dependencies": { "@nuxt/kit": "^4.4.6", "exsolve": "^1.0.8", "pathe": "^2.0.3", "pkg-types": "^2.3.1", "semver": "^7.8.1" } }, "sha512-eiA7hWXi5zNHaYKyJFCGF6i0wFZtuvR7KDXZ6jiSvwxjCpRFwphrw0MOSmNfArTSSsT1wpW+/2H92cejeVfUlg=="],
 
-    "@libsql/darwin-arm64": ["@libsql/darwin-arm64@0.5.22", "", { "os": "darwin", "cpu": "arm64" }, "sha512-4B8ZlX3nIDPndfct7GNe0nI3Yw6ibocEicWdC4fvQbSs/jdq/RC2oCsoJxJ4NzXkvktX70C1J4FcmmoBy069UA=="],
+    "@oxc-project/types": ["@oxc-project/types@0.154.0", "", {}, "sha512-KYOUGQFlLWR+s4QMV2Q9ko38TZm7EdO87Qm7rvZLqk/webse/cDjtyxKhg/47l0byCbs/k46LT8qc4PKjAikzA=="],
 
-    "@libsql/darwin-x64": ["@libsql/darwin-x64@0.5.22", "", { "os": "darwin", "cpu": "x64" }, "sha512-ny2HYWt6lFSIdNFzUFIJ04uiW6finXfMNJ7wypkAD8Pqdm6nAByO+Fdqu8t7sD0sqJGeUCiOg480icjyQ2/8VA=="],
+    "@parcel/watcher-wasm": ["@parcel/watcher-wasm@2.6.0", "", { "dependencies": { "is-glob": "^4.0.3", "napi-wasm": "^1.1.0", "picomatch": "^4.0.4" } }, "sha512-dtjbDxKSDPQ8AmA+pS4OFaHE1FKrjtGpLGBxw85uKFkRorjNbvDM/aFPgqosu40wprbp1xw2ZSxIKqghCUHe2w=="],
 
-    "@libsql/hrana-client": ["@libsql/hrana-client@0.7.0", "", { "dependencies": { "@libsql/isomorphic-fetch": "^0.3.1", "@libsql/isomorphic-ws": "^0.1.5", "js-base64": "^3.7.5", "node-fetch": "^3.3.2" } }, "sha512-OF8fFQSkbL7vJY9rfuegK1R7sPgQ6kFMkDamiEccNUvieQ+3urzfDFI616oPl8V7T9zRmnTkSjMOImYCAVRVuw=="],
+    "@pkgjs/parseargs": ["@pkgjs/parseargs@0.11.0", "", {}, "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg=="],
 
-    "@libsql/isomorphic-fetch": ["@libsql/isomorphic-fetch@0.3.1", "", {}, "sha512-6kK3SUK5Uu56zPq/Las620n5aS9xJq+jMBcNSOmjhNf/MUvdyji4vrMTqD7ptY7/4/CAVEAYDeotUz60LNQHtw=="],
+    "@polka/url": ["@polka/url@1.0.0-next.29", "", {}, "sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww=="],
 
-    "@libsql/isomorphic-ws": ["@libsql/isomorphic-ws@0.1.5", "", { "dependencies": { "@types/ws": "^8.5.4", "ws": "^8.13.0" } }, "sha512-DtLWIH29onUYR00i0GlQ3UdcTRC6EP4u9w/h9LxpUZJWRMARk6dQwZ6Jkd+QdwVpuAOrdxt18v0K2uIYR3fwFg=="],
+    "@poppinss/colors": ["@poppinss/colors@4.1.6", "", { "dependencies": { "kleur": "^4.1.5" } }, "sha512-H9xkIdFswbS8n1d6vmRd8+c10t2Qe+rZITbbDHHkQixH5+2x1FDGmi/0K+WgWiqQFKPSlIYB7jlH6Kpfn6Fleg=="],
 
-    "@libsql/linux-arm-gnueabihf": ["@libsql/linux-arm-gnueabihf@0.5.22", "", { "os": "linux", "cpu": "arm" }, "sha512-3Uo3SoDPJe/zBnyZKosziRGtszXaEtv57raWrZIahtQDsjxBVjuzYQinCm9LRCJCUT5t2r5Z5nLDPJi2CwZVoA=="],
+    "@poppinss/dumper": ["@poppinss/dumper@0.7.0", "", { "dependencies": { "@poppinss/colors": "^4.1.5", "@sindresorhus/is": "^7.0.2", "supports-color": "^10.0.0" } }, "sha512-0UTYalzk2t6S4rA2uHOz5bSSW2CHdv4vggJI6Alg90yvl0UgXs6XSXpH96OH+bRkX4J/06djv29pqXJ0lq5Kag=="],
 
-    "@libsql/linux-arm-musleabihf": ["@libsql/linux-arm-musleabihf@0.5.22", "", { "os": "linux", "cpu": "arm" }, "sha512-LCsXh07jvSojTNJptT9CowOzwITznD+YFGGW+1XxUr7fS+7/ydUrpDfsMX7UqTqjm7xG17eq86VkWJgHJfvpNg=="],
+    "@poppinss/exception": ["@poppinss/exception@1.2.3", "", {}, "sha512-dCED+QRChTVatE9ibtoaxc+WkdzOSjYTKi/+uacHWIsfodVfpsueo3+DKpgU5Px8qXjgmXkSvhXvSCz3fnP9lw=="],
 
-    "@libsql/linux-arm64-gnu": ["@libsql/linux-arm64-gnu@0.5.22", "", { "os": "linux", "cpu": "arm64" }, "sha512-KSdnOMy88c9mpOFKUEzPskSaF3VLflfSUCBwas/pn1/sV3pEhtMF6H8VUCd2rsedwoukeeCSEONqX7LLnQwRMA=="],
+    "@rolldown/binding-android-arm-eabi": ["@rolldown/binding-android-arm-eabi@1.2.14", "", { "os": "android", "cpu": "arm" }, "sha512-aWR+XKH9+rW7m5fWq/5360J3mHycrx/o6xZM2DQFdJnTMdyP7/WzxPjhtLbVWdKo2y612/4U1bWqb3HQhiF7vg=="],
 
-    "@libsql/linux-arm64-musl": ["@libsql/linux-arm64-musl@0.5.22", "", { "os": "linux", "cpu": "arm64" }, "sha512-mCHSMAsDTLK5YH//lcV3eFEgiR23Ym0U9oEvgZA0667gqRZg/2px+7LshDvErEKv2XZ8ixzw3p1IrBzLQHGSsw=="],
+    "@rolldown/binding-android-arm64": ["@rolldown/binding-android-arm64@1.2.14", "", { "os": "android", "cpu": "arm64" }, "sha512-QiVxHofl6A8lQU7WAtOUY4QMVZXohxwz7WJJoeh8NBEUyKfIkMRKhYyq8az/1RypNiIXzNTtiS6KwHz0erxYRQ=="],
 
-    "@libsql/linux-x64-gnu": ["@libsql/linux-x64-gnu@0.5.22", "", { "os": "linux", "cpu": "x64" }, "sha512-kNBHaIkSg78Y4BqAdgjcR2mBilZXs4HYkAmi58J+4GRwDQZh5fIUWbnQvB9f95DkWUIGVeenqLRFY2pcTmlsew=="],
+    "@rolldown/binding-darwin-arm64": ["@rolldown/binding-darwin-arm64@1.2.14", "", { "os": "darwin", "cpu": "arm64" }, "sha512-lTQOzHuBIooh3jIr5XINQkjPGEuGy+Dsy0meXDr6Sjty0b99kYgGh4uBC/8mJX1T0kC8d6S0aPP1Y+bHkh6aBw=="],
 
-    "@libsql/linux-x64-musl": ["@libsql/linux-x64-musl@0.5.22", "", { "os": "linux", "cpu": "x64" }, "sha512-UZ4Xdxm4pu3pQXjvfJiyCzZop/9j/eA2JjmhMaAhe3EVLH2g11Fy4fwyUp9sT1QJYR1kpc2JLuybPM0kuXv/Tg=="],
+    "@rolldown/binding-darwin-x64": ["@rolldown/binding-darwin-x64@1.2.14", "", { "os": "darwin", "cpu": "x64" }, "sha512-hyMKEGatjmBYCs/Q4sbIcL/GqpFEqsX3wc+HYVQ/85A4rxc1o7rPm4DUI4GV4k/h0ITddwFSGpqQunI14GXjTA=="],
 
-    "@libsql/win32-x64-msvc": ["@libsql/win32-x64-msvc@0.5.22", "", { "os": "win32", "cpu": "x64" }, "sha512-Fj0j8RnBpo43tVZUVoNK6BV/9AtDUM5S7DF3LB4qTYg1LMSZqi3yeCneUTLJD6XomQJlZzbI4mst89yspVSAnA=="],
+    "@rolldown/binding-freebsd-x64": ["@rolldown/binding-freebsd-x64@1.2.14", "", { "os": "freebsd", "cpu": "x64" }, "sha512-u371GbXoVXrEgP20PwzoGNOdAOqAMhzo19JzzY+V4YmmnC+DTOoqdbMu+O+54emM59Mik/UdrtWgcuEDKWRPKA=="],
 
-    "@mapbox/node-pre-gyp": ["@mapbox/node-pre-gyp@2.0.0", "", { "dependencies": { "consola": "^3.2.3", "detect-libc": "^2.0.0", "https-proxy-agent": "^7.0.5", "node-fetch": "^2.6.7", "nopt": "^8.0.0", "semver": "^7.5.3", "tar": "^7.4.0" }, "bin": { "node-pre-gyp": "bin/node-pre-gyp" } }, "sha512-llMXd39jtP0HpQLVI37Bf1m2ADlEb35GYSh1SDSLsBhR+5iCxiNGlT31yqbNtVHygHAtMy6dWFERpU2JgufhPg=="],
+    "@rolldown/binding-linux-arm-gnueabihf": ["@rolldown/binding-linux-arm-gnueabihf@1.2.14", "", { "os": "linux", "cpu": "arm" }, "sha512-BqwKsdZQf6EqVWr8fv2MrDYzAvOZ7+NYFSJESRGs87fkseEhs0TU9TXgRJTkZoRRkxTizyEg1LKUXfU3/78uqg=="],
 
-    "@napi-rs/wasm-runtime": ["@napi-rs/wasm-runtime@1.0.7", "", { "dependencies": { "@emnapi/core": "^1.5.0", "@emnapi/runtime": "^1.5.0", "@tybys/wasm-util": "^0.10.1" } }, "sha512-SeDnOO0Tk7Okiq6DbXmmBODgOAb9dp9gjlphokTUxmt8U3liIP1ZsozBahH69j/RJv+Rfs6IwUKHTgQYJ/HBAw=="],
+    "@rolldown/binding-linux-arm64-gnu": ["@rolldown/binding-linux-arm64-gnu@1.2.14", "", { "os": "linux", "cpu": "arm64" }, "sha512-SD9kY8M009x/7s57Z1dgUVlP5+uYBgKQK0Tkr1WIWngrtUJmRCW1RJFMY7QDla2khXhmg2i5Io7MUjcmZNZ/KQ=="],
 
-    "@neon-rs/load": ["@neon-rs/load@0.0.4", "", {}, "sha512-kTPhdZyTQxB+2wpiRcFWrDcejc4JI6tkPuS7UZCG4l6Zvc5kU/gGQ/ozvHTh1XR5tS+UlfAfGuPajjzQjCiHCw=="],
+    "@rolldown/binding-linux-arm64-musl": ["@rolldown/binding-linux-arm64-musl@1.2.14", "", { "os": "linux", "cpu": "arm64" }, "sha512-BJ2CL19M6uuWesMgnqJzgxoI+N+eV7b0A9O9vLV42y+gitC41fNa8KElau1tHVzuLWX5GzEuxMPhAO0tQXQMkg=="],
 
-    "@nodelib/fs.scandir": ["@nodelib/fs.scandir@2.1.5", "", { "dependencies": { "@nodelib/fs.stat": "2.0.5", "run-parallel": "^1.1.9" } }, "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g=="],
+    "@rolldown/binding-linux-ppc64-gnu": ["@rolldown/binding-linux-ppc64-gnu@1.2.14", "", { "os": "linux", "cpu": "ppc64" }, "sha512-4+Kl8daPV8NDHaD7mfCcc1pRM+Qg7ab8DyMm5FG5WoZgv4h2i3KFN1CybYBNbQqmuYm7ftJLvmMI1eHYJ22S/Q=="],
 
-    "@nodelib/fs.stat": ["@nodelib/fs.stat@2.0.5", "", {}, "sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A=="],
+    "@rolldown/binding-linux-s390x-gnu": ["@rolldown/binding-linux-s390x-gnu@1.2.14", "", { "os": "linux", "cpu": "s390x" }, "sha512-V/h8ePq1fKDrmtFMz6xcCN3DKvuvMRrwwD1q0PkBeeo4DpK64biaKvqWGVxqCeYKqeRk7gE7/iKPxLCn08O97A=="],
 
-    "@nodelib/fs.walk": ["@nodelib/fs.walk@1.2.8", "", { "dependencies": { "@nodelib/fs.scandir": "2.1.5", "fastq": "^1.6.0" } }, "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg=="],
+    "@rolldown/binding-linux-x64-gnu": ["@rolldown/binding-linux-x64-gnu@1.2.14", "", { "os": "linux", "cpu": "x64" }, "sha512-WxalXzgrLVpKC93xfpaJ3gCXUWzeCr+FRCbDVD2mUAy4L6Vo3lNVz0epUEUpxPWJkLNYUwM4OSIikv36OJ9mLg=="],
 
-    "@nuxt/cli": ["@nuxt/cli@3.30.0", "", { "dependencies": { "c12": "^3.3.1", "citty": "^0.1.6", "confbox": "^0.2.2", "consola": "^3.4.2", "copy-paste": "^2.2.0", "defu": "^6.1.4", "exsolve": "^1.0.7", "fuse.js": "^7.1.0", "giget": "^2.0.0", "jiti": "^2.6.1", "listhen": "^1.9.0", "nypm": "^0.6.2", "ofetch": "^1.5.1", "ohash": "^2.0.11", "pathe": "^2.0.3", "perfect-debounce": "^2.0.0", "pkg-types": "^2.3.0", "scule": "^1.3.0", "semver": "^7.7.3", "srvx": "^0.9.4", "std-env": "^3.10.0", "tinyexec": "^1.0.1", "ufo": "^1.6.1", "youch": "^4.1.0-beta.12" }, "bin": { "nuxi": "bin/nuxi.mjs", "nuxi-ng": "bin/nuxi.mjs", "nuxt": "bin/nuxi.mjs", "nuxt-cli": "bin/nuxi.mjs" } }, "sha512-nBNEkvOwqzxgvfTBUKPX0zN4h85dWjjkW+kP4OFnVaN3C3kdsbScNtYPIZyp0+ArabL5t4RT93Gyx0IZMRNzAQ=="],
+    "@rolldown/binding-linux-x64-musl": ["@rolldown/binding-linux-x64-musl@1.2.14", "", { "os": "linux", "cpu": "x64" }, "sha512-3G3tnAmTpdk9jO3GQtyHXqeFD2SlecfTws/Y3M2mmj9nMBwwuLT4kur8sZKeu7ENUHSpVO3cIsm5A52LEWWwlg=="],
 
-    "@nuxt/devalue": ["@nuxt/devalue@2.0.2", "", {}, "sha512-GBzP8zOc7CGWyFQS6dv1lQz8VVpz5C2yRszbXufwG/9zhStTIH50EtD87NmWbTMwXDvZLNg8GIpb1UFdH93JCA=="],
+    "@rolldown/binding-openharmony-arm64": ["@rolldown/binding-openharmony-arm64@1.2.14", "", { "os": "none", "cpu": "arm64" }, "sha512-qyr5XiNGxm2ytx17vvtcJ9nXn6v1gENETi503bJx3OGwZ1tSonj7BosxbMa/xeAfSl5iS9X6KjEWYXLu6v1L7Q=="],
 
-    "@nuxt/devtools": ["@nuxt/devtools@3.1.0", "", { "dependencies": { "@nuxt/devtools-kit": "3.1.0", "@nuxt/devtools-wizard": "3.1.0", "@nuxt/kit": "^4.2.1", "@vue/devtools-core": "^8.0.3", "@vue/devtools-kit": "^8.0.3", "birpc": "^2.7.0", "consola": "^3.4.2", "destr": "^2.0.5", "error-stack-parser-es": "^1.0.5", "execa": "^8.0.1", "fast-npm-meta": "^0.4.7", "get-port-please": "^3.2.0", "hookable": "^5.5.3", "image-meta": "^0.2.2", "is-installed-globally": "^1.0.0", "launch-editor": "^2.12.0", "local-pkg": "^1.1.2", "magicast": "^0.5.1", "nypm": "^0.6.2", "ohash": "^2.0.11", "pathe": "^2.0.3", "perfect-debounce": "^2.0.0", "pkg-types": "^2.3.0", "semver": "^7.7.3", "simple-git": "^3.30.0", "sirv": "^3.0.2", "structured-clone-es": "^1.0.0", "tinyglobby": "^0.2.15", "vite-plugin-inspect": "^11.3.3", "vite-plugin-vue-tracer": "^1.1.1", "which": "^5.0.0", "ws": "^8.18.3" }, "peerDependencies": { "@vitejs/devtools": "*", "vite": ">=6.0" }, "optionalPeers": ["@vitejs/devtools"], "bin": { "devtools": "cli.mjs" } }, "sha512-aPH5V3j6h8bprMTR7oDqJ1AfHl0FL2JHcGlbrCA5DXLLhLL+D4L8pLgiJLEvYMo3Onk56TT7aXgPX54g/eDetg=="],
+    "@rolldown/binding-win32-arm64-msvc": ["@rolldown/binding-win32-arm64-msvc@1.2.14", "", { "os": "win32", "cpu": "arm64" }, "sha512-oA4o5o0S2yB199YyYXDzKUv1Z56Rc+mgOjwm7Z/vJ9Z8igiDPYvoOuDyo6g7AK/ZaF09nPhDKVnGBcYHO11GXA=="],
 
-    "@nuxt/devtools-kit": ["@nuxt/devtools-kit@3.1.0", "", { "dependencies": { "@nuxt/kit": "^4.2.1", "execa": "^8.0.1" }, "peerDependencies": { "vite": ">=6.0" } }, "sha512-1AEZS6ge8G9X3sJauw6hTWqTpUIVqs5Uq9d7Z9cjUAinXjE+pGliVQ+i8xWCNnGLaZCCSqX/I/M/EByD3v2JIA=="],
+    "@rolldown/binding-win32-x64-msvc": ["@rolldown/binding-win32-x64-msvc@1.2.14", "", { "os": "win32", "cpu": "x64" }, "sha512-9mE94bf2GZUaR/fUSXCMpBoWkctu421Mi0ORpm4zqfbkjKep7RxzPFa5etcGs5h+2KApoWBOA/hAJa/7saGgEQ=="],
 
-    "@nuxt/devtools-wizard": ["@nuxt/devtools-wizard@3.1.0", "", { "dependencies": { "consola": "^3.4.2", "diff": "^8.0.2", "execa": "^8.0.1", "magicast": "^0.5.1", "pathe": "^2.0.3", "pkg-types": "^2.3.0", "prompts": "^2.4.2", "semver": "^7.7.3" }, "bin": { "devtools-wizard": "cli.mjs" } }, "sha512-XYYWnG6SAvALCdXbM+xklqv7sEiVZbKgGparv8jFE5Tt6l8sg80Eb+vM40+Xpdu2KE3VlFKj4F4oFwDXMvAkgA=="],
+    "@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.1", "", {}, "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw=="],
 
-    "@nuxt/kit": ["@nuxt/kit@3.17.3", "", { "dependencies": { "c12": "^3.0.3", "consola": "^3.4.2", "defu": "^6.1.4", "destr": "^2.0.5", "errx": "^0.1.0", "exsolve": "^1.0.5", "ignore": "^7.0.4", "jiti": "^2.4.2", "klona": "^2.0.6", "knitwork": "^1.2.0", "mlly": "^1.7.4", "ohash": "^2.0.11", "pathe": "^2.0.3", "pkg-types": "^2.1.0", "scule": "^1.3.0", "semver": "^7.7.1", "std-env": "^3.9.0", "tinyglobby": "^0.2.13", "ufo": "^1.6.1", "unctx": "^2.4.1", "unimport": "^5.0.1", "untyped": "^2.0.0" } }, "sha512-aw6u6mT3TnM/MmcCRDMv3i9Sbm5/ZMSJgDl+N+WsrWNDIQ2sWmsqdDkjb/HyXF20SNwc2891hRBkaQr3hG2mhA=="],
+    "@rollup/plugin-alias": ["@rollup/plugin-alias@6.0.0", "", { "peerDependencies": { "rollup": ">=4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-tPCzJOtS7uuVZd+xPhoy5W4vThe6KWXNmsFCNktaAh5RTqcLiSfT4huPQIXkgJ6YCOjJHvecOAzQxLFhPxKr+g=="],
 
-    "@nuxt/nitro-server": ["@nuxt/nitro-server@3.20.1", "", { "dependencies": { "@nuxt/devalue": "^2.0.2", "@nuxt/kit": "3.20.1", "@unhead/vue": "^2.0.19", "@vue/shared": "^3.5.23", "consola": "^3.4.2", "defu": "^6.1.4", "destr": "^2.0.5", "devalue": "^5.4.2", "errx": "^0.1.0", "escape-string-regexp": "^5.0.0", "exsolve": "^1.0.7", "h3": "^1.15.4", "impound": "^1.0.0", "klona": "^2.0.6", "mocked-exports": "^0.1.1", "nitropack": "^2.12.9", "pathe": "^2.0.3", "pkg-types": "^2.3.0", "radix3": "^1.1.2", "std-env": "^3.10.0", "ufo": "^1.6.1", "unctx": "^2.4.1", "unstorage": "^1.17.2", "vue": "^3.5.23", "vue-bundle-renderer": "^2.2.0", "vue-devtools-stub": "^0.1.0" }, "peerDependencies": { "nuxt": "^3.20.1" } }, "sha512-8fNLbfDCVdNaa6wjnmXt9OD/5iyxjGOzU/zLIBW0O+4OCY8H9LQEPFh2gdEAmaze4dfzde/0v87cAcGeDwfomQ=="],
+    "@rollup/plugin-commonjs": ["@rollup/plugin-commonjs@29.0.3", "", { "dependencies": { "@rollup/pluginutils": "^5.0.1", "commondir": "^1.0.1", "estree-walker": "^2.0.2", "fdir": "^6.2.0", "is-reference": "1.2.1", "magic-string": "^0.30.3", "picomatch": "^4.0.2" }, "peerDependencies": { "rollup": "^2.68.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-ZaOxZceP7SOUW7Lqw5IRVweSQYWaeIPnXIGLiB690EBA3FGJTO40EEr2L5yZplJWsgTCogILRSpcAe7+U0Otdg=="],
 
-    "@nuxt/schema": ["@nuxt/schema@3.20.1", "", { "dependencies": { "@vue/shared": "^3.5.23", "defu": "^6.1.4", "pathe": "^2.0.3", "pkg-types": "^2.3.0", "std-env": "^3.10.0" } }, "sha512-ll3C+NsHR6fjBV9AvEZwmypokj0ULp5jb+yqbyl9kuUb6gGUYel5DBx1pZwdI2Oa1wpiMycwtYd/rAxhrZ3w4Q=="],
+    "@rollup/plugin-inject": ["@rollup/plugin-inject@5.0.5", "", { "dependencies": { "@rollup/pluginutils": "^5.0.1", "estree-walker": "^2.0.2", "magic-string": "^0.30.3" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-2+DEJbNBoPROPkgTDNe8/1YXWcqxbN5DTjASVIOx8HS+pITXushyNiBV56RB08zuptzz8gT3YfkqriTBVycepg=="],
 
-    "@nuxt/telemetry": ["@nuxt/telemetry@2.6.6", "", { "dependencies": { "@nuxt/kit": "^3.15.4", "citty": "^0.1.6", "consola": "^3.4.2", "destr": "^2.0.3", "dotenv": "^16.4.7", "git-url-parse": "^16.0.1", "is-docker": "^3.0.0", "ofetch": "^1.4.1", "package-manager-detector": "^1.1.0", "pathe": "^2.0.3", "rc9": "^2.1.2", "std-env": "^3.8.1" }, "bin": { "nuxt-telemetry": "bin/nuxt-telemetry.mjs" } }, "sha512-Zh4HJLjzvm3Cq9w6sfzIFyH9ozK5ePYVfCUzzUQNiZojFsI2k1QkSBrVI9BGc6ArKXj/O6rkI6w7qQ+ouL8Cag=="],
+    "@rollup/plugin-json": ["@rollup/plugin-json@6.1.0", "", { "dependencies": { "@rollup/pluginutils": "^5.1.0" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-EGI2te5ENk1coGeADSIwZ7G2Q8CJS2sF120T7jLw4xFw9n7wIOXHo+kIYRAoVpJAN+kmqZSoO3Fp4JtoNF4ReA=="],
 
-    "@nuxt/vite-builder": ["@nuxt/vite-builder@3.20.1", "", { "dependencies": { "@nuxt/kit": "3.20.1", "@rollup/plugin-replace": "^6.0.3", "@vitejs/plugin-vue": "^6.0.1", "@vitejs/plugin-vue-jsx": "^5.1.1", "autoprefixer": "^10.4.21", "consola": "^3.4.2", "cssnano": "^7.1.2", "defu": "^6.1.4", "esbuild": "^0.25.12", "escape-string-regexp": "^5.0.0", "exsolve": "^1.0.7", "externality": "^1.0.2", "get-port-please": "^3.2.0", "h3": "^1.15.4", "jiti": "^2.6.1", "knitwork": "^1.2.0", "magic-string": "^0.30.21", "mlly": "^1.8.0", "mocked-exports": "^0.1.1", "ohash": "^2.0.11", "pathe": "^2.0.3", "perfect-debounce": "^2.0.0", "pkg-types": "^2.3.0", "postcss": "^8.5.6", "rollup-plugin-visualizer": "^6.0.5", "seroval": "^1.3.2", "std-env": "^3.10.0", "ufo": "^1.6.1", "unenv": "^2.0.0-rc.24", "vite": "^7.2.1", "vite-node": "^5.0.0", "vite-plugin-checker": "^0.11.0", "vue-bundle-renderer": "^2.2.0" }, "peerDependencies": { "nuxt": "3.20.1", "rolldown": "^1.0.0-beta.38", "vue": "^3.3.4" }, "optionalPeers": ["rolldown"] }, "sha512-S/l/Njgp55vhytN+fCdapOKjka+mwz56HlQ7/z9fX/nJVrw5HfTFpl6WNb0RdqmFBUILbGilWRyIQzzIhKpbHg=="],
+    "@rollup/plugin-node-resolve": ["@rollup/plugin-node-resolve@16.0.3", "", { "dependencies": { "@rollup/pluginutils": "^5.0.1", "@types/resolve": "1.20.2", "deepmerge": "^4.2.2", "is-module": "^1.0.0", "resolve": "^1.22.1" }, "peerDependencies": { "rollup": "^2.78.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-lUYM3UBGuM93CnMPG1YocWu7X802BrNF3jW2zny5gQyLQgRFJhV1Sq0Zi74+dh/6NBx1DxFC4b4GXg9wUCG5Qg=="],
 
-    "@oxc-minify/binding-android-arm64": ["@oxc-minify/binding-android-arm64@0.96.0", "", { "os": "android", "cpu": "arm64" }, "sha512-lzeIEMu/v6Y+La5JSesq4hvyKtKBq84cgQpKYTYM/yGuNk2tfd5Ha31hnC+mTh48lp/5vZH+WBfjVUjjINCfug=="],
+    "@rollup/plugin-replace": ["@rollup/plugin-replace@6.0.3", "", { "dependencies": { "@rollup/pluginutils": "^5.0.1", "magic-string": "^0.30.3" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-J4RZarRvQAm5IF0/LwUUg+obsm+xZhYnbMXmXROyoSE1ATJe3oXSb9L5MMppdxP2ylNSjv6zFBwKYjcKMucVfA=="],
 
-    "@oxc-minify/binding-darwin-arm64": ["@oxc-minify/binding-darwin-arm64@0.96.0", "", { "os": "darwin", "cpu": "arm64" }, "sha512-i0LkJAUXb4BeBFrJQbMKQPoxf8+cFEffDyLSb7NEzzKuPcH8qrVsnEItoOzeAdYam8Sr6qCHVwmBNEQzl7PWpw=="],
+    "@rollup/plugin-terser": ["@rollup/plugin-terser@1.0.0", "", { "dependencies": { "serialize-javascript": "^7.0.3", "smob": "^1.0.0", "terser": "^5.17.4" }, "peerDependencies": { "rollup": "^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-FnCxhTBx6bMOYQrar6C8h3scPt8/JwIzw3+AJ2K++6guogH5fYaIFia+zZuhqv0eo1RN7W1Pz630SyvLbDjhtQ=="],
 
-    "@oxc-minify/binding-darwin-x64": ["@oxc-minify/binding-darwin-x64@0.96.0", "", { "os": "darwin", "cpu": "x64" }, "sha512-C5vI0WPR+KPIFAD5LMOJk2J8iiT+Nv65vDXmemzXEXouzfEOLYNqnW+u6NSsccpuZHHWAiLyPFkYvKFduveAUQ=="],
+    "@rollup/pluginutils": ["@rollup/pluginutils@5.4.0", "", { "dependencies": { "@types/estree": "^1.0.0", "estree-walker": "^2.0.2", "picomatch": "^4.0.2" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-MfPp06CjRLfXQ3wY0R8vJDYBy/MvVcc9OulEfR0B8Iv9ko+GCNaRZ+EpJYFl27LhKsZK0o420sYCRHCjfCgeUg=="],
 
-    "@oxc-minify/binding-freebsd-x64": ["@oxc-minify/binding-freebsd-x64@0.96.0", "", { "os": "freebsd", "cpu": "x64" }, "sha512-3//5DNx+xUjVBMLLk2sl6hfe4fwfENJtjVQUBXjxzwPuv8xgZUqASG4cRG3WqG5Qe8dV6SbCI4EgKQFjO4KCZA=="],
+    "@rollup/rollup-android-arm-eabi": ["@rollup/rollup-android-arm-eabi@4.64.10", "", { "os": "android", "cpu": "arm" }, "sha512-oJ9ZfVIZjSjts0ZIYA48+5T0vurE5fQfX/Liad2U52Y6EN99x/OCdjGGuKMDP6jSk2i2lY6jwwA3X0drEc4PBg=="],
 
-    "@oxc-minify/binding-linux-arm-gnueabihf": ["@oxc-minify/binding-linux-arm-gnueabihf@0.96.0", "", { "os": "linux", "cpu": "arm" }, "sha512-WXChFKV7VdDk1NePDK1J31cpSvxACAVztJ7f7lJVYBTkH+iz5D0lCqPcE7a9eb7nC3xvz4yk7DM6dA9wlUQkQg=="],
+    "@rollup/rollup-android-arm64": ["@rollup/rollup-android-arm64@4.64.10", "", { "os": "android", "cpu": "arm64" }, "sha512-LylBINgYYwgHNz8OMCy5+Y0w/LEgRYE0PcAIZfEuTuLNMf0S40GSLX6SFwqZsBLplS7RIHHy4zOAbl8Y5cQEvg=="],
 
-    "@oxc-minify/binding-linux-arm-musleabihf": ["@oxc-minify/binding-linux-arm-musleabihf@0.96.0", "", { "os": "linux", "cpu": "arm" }, "sha512-7B18glYMX4Z/YoqgE3VRLs/2YhVLxlxNKSgrtsRpuR8xv58xca+hEhiFwZN1Rn+NSMZ29Z33LWD7iYWnqYFvRA=="],
+    "@rollup/rollup-darwin-arm64": ["@rollup/rollup-darwin-arm64@4.64.10", "", { "os": "darwin", "cpu": "arm64" }, "sha512-vbuT3VT1GBI2fAOoUJUrsHVoOg9nbrFXTM7e3DSnb9PYf4n6jZCN8v4Vo8O6x4u5B67+/c803b8BtCZe2nIeqA=="],
 
-    "@oxc-minify/binding-linux-arm64-gnu": ["@oxc-minify/binding-linux-arm64-gnu@0.96.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-Yl+KcTldsEJNcaYxxonwAXZ2q3gxIzn3kXYQWgKWdaGIpNhOCWqF+KE5WLsldoh5Ro5SHtomvb8GM6cXrIBMog=="],
+    "@rollup/rollup-darwin-x64": ["@rollup/rollup-darwin-x64@4.64.10", "", { "os": "darwin", "cpu": "x64" }, "sha512-qYUp/qYvM3T4cF+VWalPl+przBUESILxi+qZ1m1MVRHpg06vS+jHaxXubjCaRpXjLJPDFdXzOZ0FABDghHOhNQ=="],
 
-    "@oxc-minify/binding-linux-arm64-musl": ["@oxc-minify/binding-linux-arm64-musl@0.96.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-rNqoFWOWaxwMmUY5fspd/h5HfvgUlA3sv9CUdA2MpnHFiyoJNovR7WU8tGh+Yn0qOAs0SNH0a05gIthHig14IA=="],
+    "@rollup/rollup-freebsd-arm64": ["@rollup/rollup-freebsd-arm64@4.64.10", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-v9NRQG+JztbP4DP/0yuhSyDcEJk047lYbqeNnqIgbXITcVDjGDS7OpkW5nadSY3tJ7MY8W1qIMMqP4Q3Q8BDjQ=="],
 
-    "@oxc-minify/binding-linux-riscv64-gnu": ["@oxc-minify/binding-linux-riscv64-gnu@0.96.0", "", { "os": "linux", "cpu": "none" }, "sha512-3paajIuzGnukHwSI3YBjYVqbd72pZd8NJxaayaNFR0AByIm8rmIT5RqFXbq8j2uhtpmNdZRXiu0em1zOmIScWA=="],
+    "@rollup/rollup-freebsd-x64": ["@rollup/rollup-freebsd-x64@4.64.10", "", { "os": "freebsd", "cpu": "x64" }, "sha512-CHc9LBHdxhn6/NXfb9IegXCWoz5VlvcDOx9QrzZ9q+XYhFlfzwymSWJjOlZcEMMtC1zgMV7qxDe6U18AI1SG0A=="],
 
-    "@oxc-minify/binding-linux-s390x-gnu": ["@oxc-minify/binding-linux-s390x-gnu@0.96.0", "", { "os": "linux", "cpu": "s390x" }, "sha512-9ESrpkB2XG0lQ89JlsxlZa86iQCOs+jkDZLl6O+u5wb7ynUy21bpJJ1joauCOSYIOUlSy3+LbtJLiqi7oSQt5Q=="],
+    "@rollup/rollup-linux-arm-gnueabihf": ["@rollup/rollup-linux-arm-gnueabihf@4.64.10", "", { "os": "linux", "cpu": "arm" }, "sha512-ble2WR7kWfzZFJUd3ODMGCJn1XDszptfRC0QvWc0h9/EA6MxnrQ1mvbjPZifEdgHyfHhDrwWeKeJONDITcrHSg=="],
 
-    "@oxc-minify/binding-linux-x64-gnu": ["@oxc-minify/binding-linux-x64-gnu@0.96.0", "", { "os": "linux", "cpu": "x64" }, "sha512-UMM1jkns+p+WwwmdjC5giI3SfR2BCTga18x3C0cAu6vDVf4W37uTZeTtSIGmwatTBbgiq++Te24/DE0oCdm1iQ=="],
+    "@rollup/rollup-linux-arm-musleabihf": ["@rollup/rollup-linux-arm-musleabihf@4.64.10", "", { "os": "linux", "cpu": "arm" }, "sha512-DMCYegihxBMKvLpODdk4OsvIgxtHTi+Oddf1Pm3d6wMVNjcBiG2pqyXjMPy55HgG1gCdEFr9VfhB1CmvuKn1lw=="],
 
-    "@oxc-minify/binding-linux-x64-musl": ["@oxc-minify/binding-linux-x64-musl@0.96.0", "", { "os": "linux", "cpu": "x64" }, "sha512-8b1naiC7MdP7xeMi7cQ5tb9W1rZAP9Qz/jBRqp1Y5EOZ1yhSGnf1QWuZ/0pCc+XiB9vEHXEY3Aki/H+86m2eOg=="],
+    "@rollup/rollup-linux-arm64-gnu": ["@rollup/rollup-linux-arm64-gnu@4.64.10", "", { "os": "linux", "cpu": "arm64" }, "sha512-HQ6HuVH9TmhvPWIas7MA/KeAROgdwqH3REpUU6hZq47NW7m1b1QCrHgM+M3+N/B8DfMt88x1/z79ppRc9RflCQ=="],
 
-    "@oxc-minify/binding-wasm32-wasi": ["@oxc-minify/binding-wasm32-wasi@0.96.0", "", { "dependencies": { "@napi-rs/wasm-runtime": "^1.0.7" }, "cpu": "none" }, "sha512-bjGDjkGzo3GWU9Vg2qiFUrfoo5QxojPNV/2RHTlbIB5FWkkV4ExVjsfyqihFiAuj0NXIZqd2SAiEq9htVd3RFw=="],
+    "@rollup/rollup-linux-arm64-musl": ["@rollup/rollup-linux-arm64-musl@4.64.10", "", { "os": "linux", "cpu": "arm64" }, "sha512-avBhxba1DdctX0kxKkN3JWdTSg72QsxSn6FdfhZ9MkL3TTYDOXqxY1GqbC7VNttlgviK7tCe2No5btfRkFgeIg=="],
 
-    "@oxc-minify/binding-win32-arm64-msvc": ["@oxc-minify/binding-win32-arm64-msvc@0.96.0", "", { "os": "win32", "cpu": "arm64" }, "sha512-4L4DlHUT47qMWQuTyUghpncR3NZHWtxvd0G1KgSjVgXf+cXzFdWQCWZZtCU0yrmOoVCNUf4S04IFCJyAe+Ie7A=="],
+    "@rollup/rollup-linux-loong64-gnu": ["@rollup/rollup-linux-loong64-gnu@4.64.10", "", { "os": "linux", "cpu": "none" }, "sha512-UtQMex7fiXq0W/GqcWRpy6XKqUbXgQeGKB+Bd5rJngmHzpI+3kjwpWFLAhKg02onFsIMSh+Zx0zp9JIMQ7/05A=="],
 
-    "@oxc-minify/binding-win32-x64-msvc": ["@oxc-minify/binding-win32-x64-msvc@0.96.0", "", { "os": "win32", "cpu": "x64" }, "sha512-T2ijfqZLpV2bgGGocXV4SXTuMoouqN0asYTIm+7jVOLvT5XgDogf3ZvCmiEnSWmxl21+r5wHcs8voU2iUROXAg=="],
+    "@rollup/rollup-linux-loong64-musl": ["@rollup/rollup-linux-loong64-musl@4.64.10", "", { "os": "linux", "cpu": "none" }, "sha512-0Aum2pUsCSuOopi6oka+nR1DTj/nfvc1xjL979lvh6kXUjNa30TCX7sKFjyMsrX7bK3bNVs0FsJwQcE2HCWX1Q=="],
 
-    "@oxc-parser/binding-android-arm64": ["@oxc-parser/binding-android-arm64@0.96.0", "", { "os": "android", "cpu": "arm64" }, "sha512-CofbPOiW1PG+hi8bgElJPK0ioHfw8nt4Vw9d+Q9JuMhygS6LbQyu1W6tIFZ1OPFofeFRdWus3vD29FBx+tvFOA=="],
+    "@rollup/rollup-linux-ppc64-gnu": ["@rollup/rollup-linux-ppc64-gnu@4.64.10", "", { "os": "linux", "cpu": "ppc64" }, "sha512-4dgsouKal3qfMFORgtNigLPt7K3HXiO6jTr7+nFJv1GWu1OkZx0kvQIXbK4sjrIGnaLBk0s80eQCQ9hPIelLrw=="],
 
-    "@oxc-parser/binding-darwin-arm64": ["@oxc-parser/binding-darwin-arm64@0.96.0", "", { "os": "darwin", "cpu": "arm64" }, "sha512-+HZ2L1a/1BsUXYik8XqQwT2Tl5Z3jRQ/RRQiPV9UsB2skKyd91NLDlQlMpdhjLGs9Qe7Y42unFjRg2iHjIiwnw=="],
+    "@rollup/rollup-linux-ppc64-musl": ["@rollup/rollup-linux-ppc64-musl@4.64.10", "", { "os": "linux", "cpu": "ppc64" }, "sha512-d7NE89try3jisYzBD7J9M5iwfgcrXYC4dwHEjQ3HIWBftvwch1U/cy3iZ26SthtUOyClKiu7iqYiFjQEwiOlqQ=="],
 
-    "@oxc-parser/binding-darwin-x64": ["@oxc-parser/binding-darwin-x64@0.96.0", "", { "os": "darwin", "cpu": "x64" }, "sha512-GC8wH1W0XaCLyTeGsmyaMdnItiYQkqfTcn9Ygc55AWI+m11lCjQeoKDIsDCm/QwrKLCN07u3WWWsuPs5ubfXpA=="],
+    "@rollup/rollup-linux-riscv64-gnu": ["@rollup/rollup-linux-riscv64-gnu@4.64.10", "", { "os": "linux", "cpu": "none" }, "sha512-dqB5ChSBp91JWXxpCKAS5ZVAE38esKQvdfyqANm0lF5JPiQrXnYwgG3oVBQmuNRcQ1WHkA3j5qYLsrl2CtfhCA=="],
 
-    "@oxc-parser/binding-freebsd-x64": ["@oxc-parser/binding-freebsd-x64@0.96.0", "", { "os": "freebsd", "cpu": "x64" }, "sha512-8SeXi2FmlN15uPY5oM03cua5RXBDYmY34Uewongv6RUiAaU/kWxLvzuijpyNC+yQ1r4fC2LbWJhAsKpX5qkA6g=="],
+    "@rollup/rollup-linux-riscv64-musl": ["@rollup/rollup-linux-riscv64-musl@4.64.10", "", { "os": "linux", "cpu": "none" }, "sha512-7GMf3vbQQslorWLmfsbi5fdt9RVnglk205XpOMFvW6UY5jE5oJc6JLieQJPHtsYlZ2EO0PtC06nY9Hz/IG8guw=="],
 
-    "@oxc-parser/binding-linux-arm-gnueabihf": ["@oxc-parser/binding-linux-arm-gnueabihf@0.96.0", "", { "os": "linux", "cpu": "arm" }, "sha512-UEs+Zf6T2/FwQlLgv7gfZsKmY19sl3hK57r2BQVc2eCmCmF/deeqDcWyFjzkNLgdDDucY60PoNhNGClDm605uQ=="],
+    "@rollup/rollup-linux-s390x-gnu": ["@rollup/rollup-linux-s390x-gnu@4.64.10", "", { "os": "linux", "cpu": "s390x" }, "sha512-tuKbkB23DKc5LG+irPSUnZZztRHqC3CNmyxeWloueBteHB+i+1HkRCMzAE41lseLDlarybeLhqfibFitKOxKMg=="],
 
-    "@oxc-parser/binding-linux-arm-musleabihf": ["@oxc-parser/binding-linux-arm-musleabihf@0.96.0", "", { "os": "linux", "cpu": "arm" }, "sha512-1kuWvjR2+ORJMoyxt9LSbLcDhXZnL25XOuv9VmH6NmSPvLgewzuubSlm++W03x+U7SzWFilBsdwIHtD/0mjERw=="],
+    "@rollup/rollup-linux-x64-gnu": ["@rollup/rollup-linux-x64-gnu@4.64.10", "", { "os": "linux", "cpu": "x64" }, "sha512-ntHtQOMw7oIshHRF1swV3vyBw+beQt9PeZ04O3D32EeDZUMoHMJuZKp4/fDllH/+xogeK0GUCONVfjjKusqKLg=="],
 
-    "@oxc-parser/binding-linux-arm64-gnu": ["@oxc-parser/binding-linux-arm64-gnu@0.96.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-PHH4ETR1t0fymxuhpQNj3Z9t/78/zZa2Lj3Z3I0ZOd+/Ex+gtdhGoB5xYyy7lcYGAPMfZ+Gmr+dTCr1GYNZ3BA=="],
+    "@rollup/rollup-linux-x64-musl": ["@rollup/rollup-linux-x64-musl@4.64.10", "", { "os": "linux", "cpu": "x64" }, "sha512-Dlh8q8r145aYgh+N3gNIG1dz35Fz/FCxe5hs/43orDsffjP8S1P4Xz5I4FpSJsDS4LpQw1QmswZkQlUbkCldjQ=="],
 
-    "@oxc-parser/binding-linux-arm64-musl": ["@oxc-parser/binding-linux-arm64-musl@0.96.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-fjDPbZjkqaDSTBe0FM8nZ9zBw4B/NF/I0gH7CfvNDwIj9smISaNFypYeomkvubORpnbX9ORhvhYwg3TxQ60OGA=="],
+    "@rollup/rollup-openbsd-x64": ["@rollup/rollup-openbsd-x64@4.64.10", "", { "os": "openbsd", "cpu": "x64" }, "sha512-VBJhHWz/55u45CWFv9OmfSRDgJDVENESgFxSAn13gIKJpTuFJbP4/7ymMZhDfeKFx1zGn1XBsLnNB7Ryy71qww=="],
 
-    "@oxc-parser/binding-linux-riscv64-gnu": ["@oxc-parser/binding-linux-riscv64-gnu@0.96.0", "", { "os": "linux", "cpu": "none" }, "sha512-59KAHd/6/LmjkdSAuJn0piKmwSavMasWNUKuYLX/UnqI5KkGIp14+LBwwaBG6KzOtIq1NrRCnmlL4XSEaNkzTg=="],
+    "@rollup/rollup-openharmony-arm64": ["@rollup/rollup-openharmony-arm64@4.64.10", "", { "os": "none", "cpu": "arm64" }, "sha512-Vjcazg+EEzUfIz+LcaxS6YtbQHo+sv0sCD+5VbwhY504bCKNW4OOreVgKq61pHT2esRQ/+AXYVPStDwxSvAOdw=="],
 
-    "@oxc-parser/binding-linux-s390x-gnu": ["@oxc-parser/binding-linux-s390x-gnu@0.96.0", "", { "os": "linux", "cpu": "s390x" }, "sha512-VtupojtgahY8XmLwpVpM3C1WQEgMD1JxpB8lzUtdSLwosWaaz1EAl+VXWNuxTTZusNuLBtmR+F0qql22ISi/9g=="],
+    "@rollup/rollup-win32-arm64-msvc": ["@rollup/rollup-win32-arm64-msvc@4.64.10", "", { "os": "win32", "cpu": "arm64" }, "sha512-jJAaP4El+HWxYkM0jeJghASaFgfnluY0FRHhyHXxU6STs/nBhKMIxIMDrJEFg2ftKz6orX9WAo4diVan5NugNA=="],
 
-    "@oxc-parser/binding-linux-x64-gnu": ["@oxc-parser/binding-linux-x64-gnu@0.96.0", "", { "os": "linux", "cpu": "x64" }, "sha512-8XSY9aUYY+5I4I1mhSEWmYqdUrJi3J5cCAInvEVHyTnDAPkhb+tnLGVZD696TpW+lFOLrTFF2V5GMWJVafqIUA=="],
+    "@rollup/rollup-win32-ia32-msvc": ["@rollup/rollup-win32-ia32-msvc@4.64.10", "", { "os": "win32", "cpu": "ia32" }, "sha512-bXXdRUfRx9PaHCToKt8R/7wjDV6Tbk/hmSHK0uQBKmD3rj4jkuYndct8uGX77ZuZsePrVkQbWUgPR2jJhCTMpQ=="],
 
-    "@oxc-parser/binding-linux-x64-musl": ["@oxc-parser/binding-linux-x64-musl@0.96.0", "", { "os": "linux", "cpu": "x64" }, "sha512-IIVNtqhA0uxKkD8Y6aZinKO/sOD5O62VlduE54FnUU2rzZEszrZQLL8nMGVZhTdPaKW5M1aeLmjcdnOs6er1Jg=="],
+    "@rollup/rollup-win32-x64-gnu": ["@rollup/rollup-win32-x64-gnu@4.64.10", "", { "os": "win32", "cpu": "x64" }, "sha512-57Idx+VkEOQeG6Ys6sZOBFT7FfbeyxGv9A3k1m+Lf/z2SwqT40rNWbAINzjPHSMoCCBvY7Fnb9RGZWQin/HHAw=="],
 
-    "@oxc-parser/binding-wasm32-wasi": ["@oxc-parser/binding-wasm32-wasi@0.96.0", "", { "dependencies": { "@napi-rs/wasm-runtime": "^1.0.7" }, "cpu": "none" }, "sha512-TJ/sNPbVD4u6kUwm7sDKa5iRDEB8vd7ZIMjYqFrrAo9US1RGYOSvt6Ie9sDRekUL9fZhNsykvSrpmIj6dg/C2w=="],
+    "@rollup/rollup-win32-x64-msvc": ["@rollup/rollup-win32-x64-msvc@4.64.10", "", { "os": "win32", "cpu": "x64" }, "sha512-vrvuasIpm/xf+BpZbzgirku0WnrQZMAc+H2Ai26jzqBxYEmQQE4DdJb7h8erkJMfRRipx0ma2Cty8jJwUm9ocQ=="],
 
-    "@oxc-parser/binding-win32-arm64-msvc": ["@oxc-parser/binding-win32-arm64-msvc@0.96.0", "", { "os": "win32", "cpu": "arm64" }, "sha512-zCOhRB7MYVIHLj+2QYoTuLyaipiD8JG/ggUjfsMUaupRPpvwQNhsxINLIcTcb0AS+OsT7/OREhydjO74STqQzQ=="],
+    "@scalar/client-side-rendering": ["@scalar/client-side-rendering@0.3.9", "", { "dependencies": { "@scalar/schemas": "0.8.3", "@scalar/types": "0.18.2", "@scalar/validation": "0.6.3" } }, "sha512-Gg+VLhreiWHmHN0i9uatEoIxzsr0FaJoq0x+PkypmFgZFniD477DVCAnmWqx+KXlpFg0VtDanDHARIJXZ1fIeQ=="],
 
-    "@oxc-parser/binding-win32-x64-msvc": ["@oxc-parser/binding-win32-x64-msvc@0.96.0", "", { "os": "win32", "cpu": "x64" }, "sha512-J6zfx9TE0oS+TrqBUjMVMOi/d/j3HMj69Pip263pETOEPm788N0HXKPsc2X2jUfSTHzD9vmdjq0QFymbf2LhWg=="],
+    "@scalar/helpers": ["@scalar/helpers@0.11.1", "", {}, "sha512-Knwbe0IYqFk0PPDoOKLasqglBHfyf9/zwWWqFsSNi/AtdjM29wSZXN6p8DFid6iB5B9epYH9YiSgJ6tpD00TEw=="],
 
-    "@oxc-project/types": ["@oxc-project/types@0.96.0", "", {}, "sha512-r/xkmoXA0xEpU6UGtn18CNVjXH6erU3KCpCDbpLmbVxBFor1U9MqN5Z2uMmCHJuXjJzlnDR+hWY+yPoLo8oHDw=="],
+    "@scalar/hono-api-reference": ["@scalar/hono-api-reference@0.11.16", "", { "dependencies": { "@scalar/client-side-rendering": "0.3.9" }, "peerDependencies": { "hono": "^4.12.5" } }, "sha512-y0duqBJF2yQhkkk7xMFyWSx06+Y0ImOLtVKDH3d+jgTaVGbAtyxwkuKmj+Dd7eq3t9P7XnZx4YgBJ0S9WzsIQQ=="],
 
-    "@oxc-transform/binding-android-arm64": ["@oxc-transform/binding-android-arm64@0.96.0", "", { "os": "android", "cpu": "arm64" }, "sha512-wOm+ZsqFvyZ7B9RefUMsj0zcXw77Z2pXA51nbSQyPXqr+g0/pDGxriZWP8Sdpz/e4AEaKPA9DvrwyOZxu7GRDQ=="],
+    "@scalar/schemas": ["@scalar/schemas@0.8.3", "", { "dependencies": { "@scalar/helpers": "0.11.1", "@scalar/validation": "0.6.3" } }, "sha512-cTjgiJxXFXMqXlFZafXOyTOKm1lUfbDTbe9La+dPcQPe6q0zXAiVtys0IKILQWNrjXPidY0eaB9Va/rd16bfxw=="],
 
-    "@oxc-transform/binding-darwin-arm64": ["@oxc-transform/binding-darwin-arm64@0.96.0", "", { "os": "darwin", "cpu": "arm64" }, "sha512-td1sbcvzsyuoNRiNdIRodPXRtFFwxzPpC/6/yIUtRRhKn30XQcizxupIvQQVpJWWchxkphbBDh6UN+u+2CJ8Zw=="],
+    "@scalar/types": ["@scalar/types@0.18.2", "", { "dependencies": { "@scalar/helpers": "0.11.1", "nanoid": "^5.1.6", "type-fest": "^5.8.0", "zod": "^4.3.5" } }, "sha512-q7fGMn0IygdLbYk9W4quM0w1caHDfL9FIxsYXNsgIep6uuO0T/t4BOStyf0qyzQ3pjt0B7rWFxO//EM9I7F/Tw=="],
 
-    "@oxc-transform/binding-darwin-x64": ["@oxc-transform/binding-darwin-x64@0.96.0", "", { "os": "darwin", "cpu": "x64" }, "sha512-xgqxnqhPYH2NYkgbqtnCJfhbXvxIf/pnhF/ig5UBK8PYpCEWIP/cfLpQRQ9DcQnRfuxi7RMIF6LdmB1AiS6Fkg=="],
+    "@scalar/validation": ["@scalar/validation@0.6.3", "", {}, "sha512-j3s9XPv8Wo1EG5/naBi4XGF0uXYQ2A3QZNI0NKWgCMxRHVrDJGlZEYymcHDHY7fquRm73P8U3c8xqJqB5yad6w=="],
 
-    "@oxc-transform/binding-freebsd-x64": ["@oxc-transform/binding-freebsd-x64@0.96.0", "", { "os": "freebsd", "cpu": "x64" }, "sha512-1i67OXdl/rvSkcTXqDlh6qGRXYseEmf0rl/R+/i88scZ/o3A+FzlX56sThuaPzSSv9eVgesnoYUjIBJELFc1oA=="],
+    "@sindresorhus/is": ["@sindresorhus/is@7.2.0", "", {}, "sha512-P1Cz1dWaFfR4IR+U13mqqiGsLFf1KbayybWwdd2vfctdV6hDpUkgCY0nKOLLTMSoRd/jJNjtbqzf13K8DCCXQw=="],
 
-    "@oxc-transform/binding-linux-arm-gnueabihf": ["@oxc-transform/binding-linux-arm-gnueabihf@0.96.0", "", { "os": "linux", "cpu": "arm" }, "sha512-9MJBs0SWODsqyzO3eAnacXgJ/sZu1xqinjEwBzkcZ3tQI8nKhMADOzu2NzbVWDWujeoC8DESXaO08tujvUru+Q=="],
+    "@sindresorhus/merge-streams": ["@sindresorhus/merge-streams@2.3.0", "", {}, "sha512-LtoMMhxAlorcGhmFYI+LhPgbPZCkgP6ra1YL604EeF6U98pLlQ3iWIGMdWSC+vWmPBWBNgmDBAhnAobLROJmwg=="],
 
-    "@oxc-transform/binding-linux-arm-musleabihf": ["@oxc-transform/binding-linux-arm-musleabihf@0.96.0", "", { "os": "linux", "cpu": "arm" }, "sha512-BQom57I2ScccixljNYh2Wy+5oVZtF1LXiiUPxSLtDHbsanpEvV/+kzCagQpTjk1BVzSQzOxfEUWjvL7mY53pRQ=="],
+    "@speed-highlight/core": ["@speed-highlight/core@1.2.24", "", {}, "sha512-qeW2e1l78afw8VhRPfPQ1Gjj+KU5XFQ/OFV5ti6eTa9bruO7mJyZtA4vw0ofqmA3tKCkROE9xLk3VZoeRc98nw=="],
 
-    "@oxc-transform/binding-linux-arm64-gnu": ["@oxc-transform/binding-linux-arm64-gnu@0.96.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-kaqvUzNu8LL4aBSXqcqGVLFG13GmJEplRI2+yqzkgAItxoP/LfFMdEIErlTWLGyBwd0OLiNMHrOvkcCQRWadVg=="],
+    "@standard-community/standard-json": ["@standard-community/standard-json@0.3.7", "", { "dependencies": { "quansync": "^0.2.11" }, "peerDependencies": { "@standard-schema/spec": "^1.0.0", "@types/json-schema": "^7.0.15", "@valibot/to-json-schema": "^1.3.0", "arktype": "^2.1.20", "effect": "^3.20.0", "sury": "^10.0.0", "typebox": "^1.0.17", "valibot": "^1.4.2", "zod": "^3.25.0 || ^4.0.0", "zod-to-json-schema": "^3.24.5" }, "optionalPeers": ["@valibot/to-json-schema", "arktype", "effect", "sury", "typebox", "valibot", "zod", "zod-to-json-schema"] }, "sha512-9reHaeW6k99yMHCgqMnLZgrKGT/fxfwYCdzd8nM4gHL4ez8MO0AlC9seGXoJNVEaO5LiE7DVCKl46wNE4wVFRA=="],
 
-    "@oxc-transform/binding-linux-arm64-musl": ["@oxc-transform/binding-linux-arm64-musl@0.96.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-EiG/L3wEkPgTm4p906ufptyblBgtiQWTubGg/JEw82f8uLRroayr5zhbUqx40EgH037a3SfJthIyLZi7XPRFJw=="],
+    "@standard-community/standard-openapi": ["@standard-community/standard-openapi@0.2.11", "", { "peerDependencies": { "@standard-community/standard-json": "^0.3.5", "@standard-schema/spec": "^1.0.0", "arktype": "^2.1.20", "effect": "^3.20.0", "openapi-types": "^12.1.3", "sury": "^10.0.0", "typebox": "^1.0.0", "valibot": "^1.4.2", "zod": "^3.25.0 || ^4.0.0", "zod-openapi": "^4" }, "optionalPeers": ["arktype", "effect", "sury", "typebox", "valibot", "zod", "zod-openapi"] }, "sha512-Fz+2K6JMJZwf4QoyZrq1smK+YeEwDGXqz2j8Y77rOHgmrk9StcEyTKkMf3n/4xOmEup5WZ2eOp0xiC7Slxx9gg=="],
 
-    "@oxc-transform/binding-linux-riscv64-gnu": ["@oxc-transform/binding-linux-riscv64-gnu@0.96.0", "", { "os": "linux", "cpu": "none" }, "sha512-r01CY6OxKGtVeYnvH4mGmtkQMlLkXdPWWNXwo5o7fE2s/fgZPMpqh8bAuXEhuMXipZRJrjxTk1+ZQ4KCHpMn3Q=="],
+    "@standard-schema/spec": ["@standard-schema/spec@1.1.0", "", {}, "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w=="],
 
-    "@oxc-transform/binding-linux-s390x-gnu": ["@oxc-transform/binding-linux-s390x-gnu@0.96.0", "", { "os": "linux", "cpu": "s390x" }, "sha512-4djg2vYLGbVeS8YiA2K4RPPpZE4fxTGCX5g/bOMbCYyirDbmBAIop4eOAj8vOA9i1CcWbDtmp+PVJ1dSw7f3IQ=="],
+    "@swc/helpers": ["@swc/helpers@0.5.23", "", { "dependencies": { "tslib": "^2.8.0" } }, "sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw=="],
 
-    "@oxc-transform/binding-linux-x64-gnu": ["@oxc-transform/binding-linux-x64-gnu@0.96.0", "", { "os": "linux", "cpu": "x64" }, "sha512-f6pcWVz57Y8jXa2OS7cz3aRNuks34Q3j61+3nQ4xTE8H1KbalcEvHNmM92OEddaJ8QLs9YcE0kUC6eDTbY34+A=="],
+    "@tailwindcss/node": ["@tailwindcss/node@4.3.3", "", { "dependencies": { "@jridgewell/remapping": "^2.3.5", "enhanced-resolve": "^5.24.1", "jiti": "^2.7.0", "lightningcss": "1.32.0", "magic-string": "^0.30.21", "source-map-js": "^1.2.1", "tailwindcss": "4.3.3" } }, "sha512-/T8IKEsf9VTU6tLjgC7+sv2mOPtQxzE2jMw7u4Tt40Tx+QSZxpzh95/H6cMKoja9XuW7iMdLJYBB0o9G1CaAgg=="],
 
-    "@oxc-transform/binding-linux-x64-musl": ["@oxc-transform/binding-linux-x64-musl@0.96.0", "", { "os": "linux", "cpu": "x64" }, "sha512-NSiRtFvR7Pbhv3mWyPMkTK38czIjcnK0+K5STo3CuzZRVbX1TM17zGdHzKBUHZu7v6IQ6/XsQ3ELa1BlEHPGWQ=="],
+    "@tailwindcss/oxide": ["@tailwindcss/oxide@4.3.3", "", { "optionalDependencies": { "@tailwindcss/oxide-android-arm64": "4.3.3", "@tailwindcss/oxide-darwin-arm64": "4.3.3", "@tailwindcss/oxide-darwin-x64": "4.3.3", "@tailwindcss/oxide-freebsd-x64": "4.3.3", "@tailwindcss/oxide-linux-arm-gnueabihf": "4.3.3", "@tailwindcss/oxide-linux-arm64-gnu": "4.3.3", "@tailwindcss/oxide-linux-arm64-musl": "4.3.3", "@tailwindcss/oxide-linux-x64-gnu": "4.3.3", "@tailwindcss/oxide-linux-x64-musl": "4.3.3", "@tailwindcss/oxide-wasm32-wasi": "4.3.3", "@tailwindcss/oxide-win32-arm64-msvc": "4.3.3", "@tailwindcss/oxide-win32-x64-msvc": "4.3.3" } }, "sha512-krXjAikiaFSPaK/FkAQT5UTx3VormQaiZ5hBFlJZ9UFQGB/rwg1MZIhHAG9smMQRTdyJxP6Qt5MwMtdyU5FWrA=="],
 
-    "@oxc-transform/binding-wasm32-wasi": ["@oxc-transform/binding-wasm32-wasi@0.96.0", "", { "dependencies": { "@napi-rs/wasm-runtime": "^1.0.7" }, "cpu": "none" }, "sha512-A91ARLiuZHGN4hBds9s7bW3czUuLuHLsV+cz44iF9j8e1zX9m2hNGXf/acQRbg/zcFUXmjz5nmk8EkZyob876w=="],
+    "@tailwindcss/oxide-android-arm64": ["@tailwindcss/oxide-android-arm64@4.3.3", "", { "os": "android", "cpu": "arm64" }, "sha512-Y85A2gmPSkl5Ve5qR86GL4HT509cFqQh1aes9p3sSkyTPwt0Pppf3GkwGe4JPACcRYjgJIEhQgM6dBClnr0NYw=="],
 
-    "@oxc-transform/binding-win32-arm64-msvc": ["@oxc-transform/binding-win32-arm64-msvc@0.96.0", "", { "os": "win32", "cpu": "arm64" }, "sha512-IedJf40djKgDObomhYjdRAlmSYUEdfqX3A3M9KfUltl9AghTBBLkTzUMA7O09oo71vYf5TEhbFM7+Vn5vqw7AQ=="],
+    "@tailwindcss/oxide-darwin-arm64": ["@tailwindcss/oxide-darwin-arm64@4.3.3", "", { "os": "darwin", "cpu": "arm64" }, "sha512-BiaWatpBcERQFDlOjRDpIVXuFK5PJez5SA4JMg6VYZdBYU+qKfV/vqjcIs+IYmtitf1xYQZTwXvU/8y4lfZUGw=="],
 
-    "@oxc-transform/binding-win32-x64-msvc": ["@oxc-transform/binding-win32-x64-msvc@0.96.0", "", { "os": "win32", "cpu": "x64" }, "sha512-0fI0P0W7bSO/GCP/N5dkmtB9vBqCA4ggo1WmXTnxNJVmFFOtcA1vYm1I9jl8fxo+sucW2WnlpnI4fjKdo3JKxA=="],
+    "@tailwindcss/oxide-darwin-x64": ["@tailwindcss/oxide-darwin-x64@4.3.3", "", { "os": "darwin", "cpu": "x64" }, "sha512-fAeUqfV5ndhxRwai8cXGzdLvul9utWOmeTkv69unv4ZXixjn61Z+p9lCWdwOwA3TYboG3BwdVuN/RDjhBRl0mw=="],
 
-    "@parcel/watcher": ["@parcel/watcher@2.5.1", "", { "dependencies": { "detect-libc": "^1.0.3", "is-glob": "^4.0.3", "micromatch": "^4.0.5", "node-addon-api": "^7.0.0" }, "optionalDependencies": { "@parcel/watcher-android-arm64": "2.5.1", "@parcel/watcher-darwin-arm64": "2.5.1", "@parcel/watcher-darwin-x64": "2.5.1", "@parcel/watcher-freebsd-x64": "2.5.1", "@parcel/watcher-linux-arm-glibc": "2.5.1", "@parcel/watcher-linux-arm-musl": "2.5.1", "@parcel/watcher-linux-arm64-glibc": "2.5.1", "@parcel/watcher-linux-arm64-musl": "2.5.1", "@parcel/watcher-linux-x64-glibc": "2.5.1", "@parcel/watcher-linux-x64-musl": "2.5.1", "@parcel/watcher-win32-arm64": "2.5.1", "@parcel/watcher-win32-ia32": "2.5.1", "@parcel/watcher-win32-x64": "2.5.1" } }, "sha512-dfUnCxiN9H4ap84DvD2ubjw+3vUNpstxa0TneY/Paat8a3R4uQZDLSvWjmznAY/DoahqTHl9V46HF/Zs3F29pg=="],
+    "@tailwindcss/oxide-freebsd-x64": ["@tailwindcss/oxide-freebsd-x64@4.3.3", "", { "os": "freebsd", "cpu": "x64" }, "sha512-iyf5bV6+wnAlflVeEy7R25dupxTNECZN5QMI0qNT6eT+EgaGdZcKhGkr5SdoaWiLJ3spLqIY9VCeSGrwmtg4kw=="],
 
-    "@parcel/watcher-android-arm64": ["@parcel/watcher-android-arm64@2.5.1", "", { "os": "android", "cpu": "arm64" }, "sha512-KF8+j9nNbUN8vzOFDpRMsaKBHZ/mcjEjMToVMJOhTozkDonQFFrRcfdLWn6yWKCmJKmdVxSgHiYvTCef4/qcBA=="],
+    "@tailwindcss/oxide-linux-arm-gnueabihf": ["@tailwindcss/oxide-linux-arm-gnueabihf@4.3.3", "", { "os": "linux", "cpu": "arm" }, "sha512-aAYUprJAJQWWbRrPvtjdroZ56Md+JM8pMiopS6xGEwDfLhqj+2ver2p4nU4Mb3CRqcMmNBjo8KkUgcxhkzVQGQ=="],
 
-    "@parcel/watcher-darwin-arm64": ["@parcel/watcher-darwin-arm64@2.5.1", "", { "os": "darwin", "cpu": "arm64" }, "sha512-eAzPv5osDmZyBhou8PoF4i6RQXAfeKL9tjb3QzYuccXFMQU0ruIc/POh30ePnaOyD1UXdlKguHBmsTs53tVoPw=="],
+    "@tailwindcss/oxide-linux-arm64-gnu": ["@tailwindcss/oxide-linux-arm64-gnu@4.3.3", "", { "os": "linux", "cpu": "arm64" }, "sha512-nDxldcEENOxZRzC2uu9jrutZdAAQtb+8WWDCSnWL1zvBk1+FN+x6MtDViPB5AJMfttVCUhehGWus3XBPgatM/w=="],
 
-    "@parcel/watcher-darwin-x64": ["@parcel/watcher-darwin-x64@2.5.1", "", { "os": "darwin", "cpu": "x64" }, "sha512-1ZXDthrnNmwv10A0/3AJNZ9JGlzrF82i3gNQcWOzd7nJ8aj+ILyW1MTxVk35Db0u91oD5Nlk9MBiujMlwmeXZg=="],
+    "@tailwindcss/oxide-linux-arm64-musl": ["@tailwindcss/oxide-linux-arm64-musl@4.3.3", "", { "os": "linux", "cpu": "arm64" }, "sha512-Md44bD6veX/PC5iyF8cDVnw4HBIANZepRZZ7a8DQOvkfo5WUBwcp6iAuCUz23u+4SUkhJlD3eL7hNdW8ezd/kA=="],
 
-    "@parcel/watcher-freebsd-x64": ["@parcel/watcher-freebsd-x64@2.5.1", "", { "os": "freebsd", "cpu": "x64" }, "sha512-SI4eljM7Flp9yPuKi8W0ird8TI/JK6CSxju3NojVI6BjHsTyK7zxA9urjVjEKJ5MBYC+bLmMcbAWlZ+rFkLpJQ=="],
+    "@tailwindcss/oxide-linux-x64-gnu": ["@tailwindcss/oxide-linux-x64-gnu@4.3.3", "", { "os": "linux", "cpu": "x64" }, "sha512-tx7us1muwOKAKWao2v/GaafFeQboE6aj88vC6ziN2NCGcRm8gWUhwjzg+YdVB1e4boAtdtma4L43onunI6NS4w=="],
 
-    "@parcel/watcher-linux-arm-glibc": ["@parcel/watcher-linux-arm-glibc@2.5.1", "", { "os": "linux", "cpu": "arm" }, "sha512-RCdZlEyTs8geyBkkcnPWvtXLY44BCeZKmGYRtSgtwwnHR4dxfHRG3gR99XdMEdQ7KeiDdasJwwvNSF5jKtDwdA=="],
+    "@tailwindcss/oxide-linux-x64-musl": ["@tailwindcss/oxide-linux-x64-musl@4.3.3", "", { "os": "linux", "cpu": "x64" }, "sha512-SJxX60smvHgasZoBy11dX6YRjXJFovwWBoedhbQPOBzgFWBHGB+TVPWB9BxzR7TTxU8FQZAI2AyiNCMzFm8Img=="],
 
-    "@parcel/watcher-linux-arm-musl": ["@parcel/watcher-linux-arm-musl@2.5.1", "", { "os": "linux", "cpu": "arm" }, "sha512-6E+m/Mm1t1yhB8X412stiKFG3XykmgdIOqhjWj+VL8oHkKABfu/gjFj8DvLrYVHSBNC+/u5PeNrujiSQ1zwd1Q=="],
+    "@tailwindcss/oxide-wasm32-wasi": ["@tailwindcss/oxide-wasm32-wasi@4.3.3", "", { "dependencies": { "@emnapi/core": "^1.11.1", "@emnapi/runtime": "^1.11.1", "@emnapi/wasi-threads": "^1.2.2", "@napi-rs/wasm-runtime": "^1.1.4", "@tybys/wasm-util": "^0.10.2", "tslib": "^2.8.1" }, "cpu": "none" }, "sha512-jx1+rPhY/5Ympkktd656HBWEBLxP7dH06losBLjjf5vgCODXvi9KhtftWcMIwTFIDqBr7cRnQkdLnAG+IOlGvQ=="],
 
-    "@parcel/watcher-linux-arm64-glibc": ["@parcel/watcher-linux-arm64-glibc@2.5.1", "", { "os": "linux", "cpu": "arm64" }, "sha512-LrGp+f02yU3BN9A+DGuY3v3bmnFUggAITBGriZHUREfNEzZh/GO06FF5u2kx8x+GBEUYfyTGamol4j3m9ANe8w=="],
+    "@tailwindcss/oxide-win32-arm64-msvc": ["@tailwindcss/oxide-win32-arm64-msvc@4.3.3", "", { "os": "win32", "cpu": "arm64" }, "sha512-3rc292Ca2ceK6Ulcc/bAVnTs/3nDtoPhyEKlgPv+yQJQi/JS/AMJlqzxvlDacL1nekbrcf6bTqp/jV4qgnPxNQ=="],
 
-    "@parcel/watcher-linux-arm64-musl": ["@parcel/watcher-linux-arm64-musl@2.5.1", "", { "os": "linux", "cpu": "arm64" }, "sha512-cFOjABi92pMYRXS7AcQv9/M1YuKRw8SZniCDw0ssQb/noPkRzA+HBDkwmyOJYp5wXcsTrhxO0zq1U11cK9jsFg=="],
+    "@tailwindcss/oxide-win32-x64-msvc": ["@tailwindcss/oxide-win32-x64-msvc@4.3.3", "", { "os": "win32", "cpu": "x64" }, "sha512-yJ0pwIVc/nYeGoV02WtsN8KYyLQv7kyI2wDnkezyJlGGjkd4QLwDGAwl47YpPJeuI0M0ObaXGSPjvWDPeTPggw=="],
 
-    "@parcel/watcher-linux-x64-glibc": ["@parcel/watcher-linux-x64-glibc@2.5.1", "", { "os": "linux", "cpu": "x64" }, "sha512-GcESn8NZySmfwlTsIur+49yDqSny2IhPeZfXunQi48DMugKeZ7uy1FX83pO0X22sHntJ4Ub+9k34XQCX+oHt2A=="],
+    "@tailwindcss/postcss": ["@tailwindcss/postcss@4.3.3", "", { "dependencies": { "@alloc/quick-lru": "^5.2.0", "@tailwindcss/node": "4.3.3", "@tailwindcss/oxide": "4.3.3", "postcss": "^8.5.16", "tailwindcss": "4.3.3" } }, "sha512-JTSZZGQi1AyKirbLN3azmjVzef92tcX7h+iSqPdaeStyFpGpDlKvvpxeOE8njhbUanbRwr3z8DyzhICWnMtQeg=="],
 
-    "@parcel/watcher-linux-x64-musl": ["@parcel/watcher-linux-x64-musl@2.5.1", "", { "os": "linux", "cpu": "x64" }, "sha512-n0E2EQbatQ3bXhcH2D1XIAANAcTZkQICBPVaxMeaCVBtOpBZpWJuf7LwyWPSBDITb7In8mqQgJ7gH8CILCURXg=="],
+    "@tailwindcss/vite": ["@tailwindcss/vite@4.3.3", "", { "dependencies": { "@tailwindcss/node": "4.3.3", "@tailwindcss/oxide": "4.3.3", "tailwindcss": "4.3.3" }, "peerDependencies": { "vite": "^5.2.0 || ^6 || ^7 || ^8" } }, "sha512-yYU8cogLeSh/ms2jh8Fj7jaba/EWa7Ja6GoUqYZaraEuCI5YS6ms6ObZgjjedm+jm6XZjdNRWBpPP6Z86oOxcw=="],
 
-    "@parcel/watcher-wasm": ["@parcel/watcher-wasm@2.5.1", "", { "dependencies": { "is-glob": "^4.0.3", "micromatch": "^4.0.5", "napi-wasm": "^1.1.0" } }, "sha512-RJxlQQLkaMMIuWRozy+z2vEqbaQlCuaCgVZIUCzQLYggY22LZbP5Y1+ia+FD724Ids9e+XIyOLXLrLgQSHIthw=="],
+    "@tanstack/table-core": ["@tanstack/table-core@8.21.3", "", {}, "sha512-ldZXEhOBb8Is7xLs01fR3YEc3DERiz5silj8tnGkFZytt1abEvl/GhUmCE0PMLaMPTa3Jk4HbKmRlHmu+gCftg=="],
 
-    "@parcel/watcher-win32-arm64": ["@parcel/watcher-win32-arm64@2.5.1", "", { "os": "win32", "cpu": "arm64" }, "sha512-RFzklRvmc3PkjKjry3hLF9wD7ppR4AKcWNzH7kXR7GUe0Igb3Nz8fyPwtZCSquGrhU5HhUNDr/mKBqj7tqA2Vw=="],
+    "@tanstack/virtual-core": ["@tanstack/virtual-core@3.19.6", "", {}, "sha512-CsTW892z23gy7IyxYTTorVu1uZWB+0N349rSMgKz4rFLPpLza7F7TpcCKeI5iUAwYQCt8QUlOU67J+KXCxtpGw=="],
 
-    "@parcel/watcher-win32-ia32": ["@parcel/watcher-win32-ia32@2.5.1", "", { "os": "win32", "cpu": "ia32" }, "sha512-c2KkcVN+NJmuA7CGlaGD1qJh1cLfDnQsHjE89E60vUEMlqduHGCdCLJCID5geFVM0dOtA3ZiIO8BoEQmzQVfpQ=="],
+    "@tanstack/vue-table": ["@tanstack/vue-table@8.21.3", "", { "dependencies": { "@tanstack/table-core": "8.21.3" }, "peerDependencies": { "vue": ">=3.2" } }, "sha512-rusRyd77c5tDPloPskctMyPLFEQUeBzxdQ+2Eow4F7gDPlPOB1UnnhzfpdvqZ8ZyX2rRNGmqNnQWm87OI2OQPw=="],
 
-    "@parcel/watcher-win32-x64": ["@parcel/watcher-win32-x64@2.5.1", "", { "os": "win32", "cpu": "x64" }, "sha512-9lHBdJITeNR++EvSQVUcaZoWupyHfXe1jZvGZ06O/5MflPcuPLtEphScIBL+AiCWBO46tDSHzWyD0uDmmZqsgA=="],
+    "@tanstack/vue-virtual": ["@tanstack/vue-virtual@3.13.47", "", { "dependencies": { "@tanstack/virtual-core": "3.19.6" }, "peerDependencies": { "vue": "^2.7.0 || ^3.0.0" } }, "sha512-6HzdYK9bDyDoD9Q/NjepnC4wGDaZ7mFl5zz8tbn3Fmy7FDicI98ZJ+R37ztFssnoTMoCQhY3GfUhlz+pW/vOTg=="],
 
-    "@pkgjs/parseargs": ["@pkgjs/parseargs@0.11.0", "", {}, "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg=="],
+    "@tiptap/core": ["@tiptap/core@3.32.0", "", { "peerDependencies": { "@tiptap/pm": "3.32.0" } }, "sha512-Ghh2h02GKSqzytQGcLV4espYOG4EHxjj0MsrUB2Vnr47xmlZYRf6r7k2J09H+JpBdaGrWwrTkyBEi5i3c3yy2Q=="],
 
-    "@polka/url": ["@polka/url@1.0.0-next.29", "", {}, "sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww=="],
+    "@tiptap/extension-blockquote": ["@tiptap/extension-blockquote@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-wmuthEdlYVArNoUbqFPH35giutBABFu7fqEB0lTD1k0UXJUs4dFvcbRyGWWgnHFZgP3TT4u8e+xiayYw0eQ0NQ=="],
 
-    "@poppinss/colors": ["@poppinss/colors@4.1.5", "", { "dependencies": { "kleur": "^4.1.5" } }, "sha512-FvdDqtcRCtz6hThExcFOgW0cWX+xwSMWcRuQe5ZEb2m7cVQOAVZOIMt+/v9RxGiD9/OY16qJBXK4CVKWAPalBw=="],
+    "@tiptap/extension-bold": ["@tiptap/extension-bold@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0" } }, "sha512-SQYewnYDoIBN+8oH53IDcD8p+Pz+Jnyq3hrxjy/FAo5ctc+96d3ZLdqc9gzLVSqFFo/SUINv2FVGoq9PvU7yqw=="],
 
-    "@poppinss/dumper": ["@poppinss/dumper@0.6.5", "", { "dependencies": { "@poppinss/colors": "^4.1.5", "@sindresorhus/is": "^7.0.2", "supports-color": "^10.0.0" } }, "sha512-NBdYIb90J7LfOI32dOewKI1r7wnkiH6m920puQ3qHUeZkxNkQiFnXVWoE6YtFSv6QOiPPf7ys6i+HWWecDz7sw=="],
+    "@tiptap/extension-bubble-menu": ["@tiptap/extension-bubble-menu@3.32.0", "", { "dependencies": { "@floating-ui/dom": "^1.0.0" }, "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-X3ll8i9Z8QNvt7+tcqlwopJG+68ugO13Av0Ox4Ico+jXcTnFdDuKQJBSI9sLuMR5vTQOeTHhKYXhjF88aahMSA=="],
 
-    "@poppinss/exception": ["@poppinss/exception@1.2.2", "", {}, "sha512-m7bpKCD4QMlFCjA/nKTs23fuvoVFoA83brRKmObCUNmi/9tVu8Ve3w4YQAnJu4q3Tjf5fr685HYIC/IA2zHRSg=="],
+    "@tiptap/extension-bullet-list": ["@tiptap/extension-bullet-list@3.32.0", "", { "peerDependencies": { "@tiptap/extension-list": "3.32.0" } }, "sha512-Y5P/l06pVCUG46vXpBl3z0fW2b6JpSMX4Cvr+5sfQh8zB3TxwSiLQaaPwI3R5MFD1KfRk3AjiPRieEyXdWcNHw=="],
 
-    "@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.0-beta.29", "", {}, "sha512-NIJgOsMjbxAXvoGq/X0gD7VPMQ8j9g0BiDaNjVNVjvl+iKXxL3Jre0v31RmBYeLEmkbj2s02v8vFTbUXi5XS2Q=="],
+    "@tiptap/extension-code": ["@tiptap/extension-code@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0" } }, "sha512-I+aEVl0dTmkfnU6HzBGEefb9U7ja2MkucwBBwrmoMwU+uIKpC4xw8NcHC9X6sjAcom3Pxs2HX+8WEo4Vp13R/Q=="],
 
-    "@rollup/plugin-alias": ["@rollup/plugin-alias@5.1.1", "", { "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-PR9zDb+rOzkRb2VD+EuKB7UC41vU5DIwZ5qqCpk0KJudcWAyi8rvYOhS7+L5aZCspw1stTViLgN5v6FF1p5cgQ=="],
+    "@tiptap/extension-code-block": ["@tiptap/extension-code-block@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-9NZW/yXP9j9XKr+hRS5m58xiyZI+tQo1PJ7eLHXjGNFWaF601NG/h6741mbKh5uCY51XsbyqG+7que+RavngPA=="],
 
-    "@rollup/plugin-babel": ["@rollup/plugin-babel@5.3.1", "", { "dependencies": { "@babel/helper-module-imports": "^7.10.4", "@rollup/pluginutils": "^3.1.0" }, "peerDependencies": { "@babel/core": "^7.0.0", "@types/babel__core": "^7.1.9", "rollup": "^1.20.0||^2.0.0" }, "optionalPeers": ["@types/babel__core"] }, "sha512-WFfdLWU/xVWKeRQnKmIAQULUI7Il0gZnBIH/ZFO069wYIfPu+8zrfp/KMW0atmELoRDq8FbiP3VCss9MhCut7Q=="],
+    "@tiptap/extension-collaboration": ["@tiptap/extension-collaboration@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0", "@tiptap/y-tiptap": "^3.0.7", "yjs": "^13" } }, "sha512-db7VPDksD13zsYVi/Hao2Je5ZMwGRuXxVBDFv182Kr06aixxAWjBJ5JvYf6AgcrDKFx/dPPpDjctKQjJPtw6VA=="],
 
-    "@rollup/plugin-commonjs": ["@rollup/plugin-commonjs@28.0.9", "", { "dependencies": { "@rollup/pluginutils": "^5.0.1", "commondir": "^1.0.1", "estree-walker": "^2.0.2", "fdir": "^6.2.0", "is-reference": "1.2.1", "magic-string": "^0.30.3", "picomatch": "^4.0.2" }, "peerDependencies": { "rollup": "^2.68.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-PIR4/OHZ79romx0BVVll/PkwWpJ7e5lsqFa3gFfcrFPWwLXLV39JVUzQV9RKjWerE7B845Hqjj9VYlQeieZ2dA=="],
+    "@tiptap/extension-document": ["@tiptap/extension-document@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0" } }, "sha512-GugeKE6AnZDluRXJUNBuX43TPcaJxy5wck6vT2J4a0/EnKStJ43suSZZf1IPfb1ij9EL9bYvAwg9DOcrvdEzTQ=="],
 
-    "@rollup/plugin-inject": ["@rollup/plugin-inject@5.0.5", "", { "dependencies": { "@rollup/pluginutils": "^5.0.1", "estree-walker": "^2.0.2", "magic-string": "^0.30.3" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-2+DEJbNBoPROPkgTDNe8/1YXWcqxbN5DTjASVIOx8HS+pITXushyNiBV56RB08zuptzz8gT3YfkqriTBVycepg=="],
+    "@tiptap/extension-drag-handle": ["@tiptap/extension-drag-handle@3.32.0", "", { "dependencies": { "@floating-ui/dom": "^1.6.13" }, "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/extension-collaboration": "3.32.0", "@tiptap/extension-node-range": "3.32.0", "@tiptap/pm": "3.32.0", "@tiptap/y-tiptap": "^3.0.7" } }, "sha512-yV6rTZlkS6Fjd6gXzd3zXxMvq82Nu7+DqdmyRtuaSKiRepvJPZvLijfS5ZgN6cjj75mrWCM+cgRODYVCDh11mA=="],
 
-    "@rollup/plugin-json": ["@rollup/plugin-json@6.1.0", "", { "dependencies": { "@rollup/pluginutils": "^5.1.0" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-EGI2te5ENk1coGeADSIwZ7G2Q8CJS2sF120T7jLw4xFw9n7wIOXHo+kIYRAoVpJAN+kmqZSoO3Fp4JtoNF4ReA=="],
+    "@tiptap/extension-drag-handle-vue-3": ["@tiptap/extension-drag-handle-vue-3@3.32.0", "", { "peerDependencies": { "@tiptap/extension-drag-handle": "3.32.0", "@tiptap/pm": "3.32.0", "@tiptap/vue-3": "3.32.0", "vue": "^3.0.0" } }, "sha512-UP4DMZIU/lc6DINmUbd77s5oiC4Z2NrldTdHgAjGVV3NuIAUMfRhZnjr+AK1sEsYDKiYZL/VP2jKIoD2x3Cxiw=="],
 
-    "@rollup/plugin-node-resolve": ["@rollup/plugin-node-resolve@15.3.1", "", { "dependencies": { "@rollup/pluginutils": "^5.0.1", "@types/resolve": "1.20.2", "deepmerge": "^4.2.2", "is-module": "^1.0.0", "resolve": "^1.22.1" }, "peerDependencies": { "rollup": "^2.78.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-tgg6b91pAybXHJQMAAwW9VuWBO6Thi+q7BCNARLwSqlmsHz0XYURtGvh/AuwSADXSI4h/2uHbs7s4FzlZDGSGA=="],
+    "@tiptap/extension-dropcursor": ["@tiptap/extension-dropcursor@3.32.0", "", { "peerDependencies": { "@tiptap/extensions": "3.32.0" } }, "sha512-t4Ug8hFLt30dwwYvrh63BVUt6N1Yg5PVI3tMllhCmN3Q68oD47v4MB/i5nGfzIsQqMyXUOetwHJWcZ4MoLTx4Q=="],
 
-    "@rollup/plugin-replace": ["@rollup/plugin-replace@6.0.3", "", { "dependencies": { "@rollup/pluginutils": "^5.0.1", "magic-string": "^0.30.3" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-J4RZarRvQAm5IF0/LwUUg+obsm+xZhYnbMXmXROyoSE1ATJe3oXSb9L5MMppdxP2ylNSjv6zFBwKYjcKMucVfA=="],
+    "@tiptap/extension-floating-menu": ["@tiptap/extension-floating-menu@3.32.0", "", { "peerDependencies": { "@floating-ui/dom": "^1.0.0", "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-AzKCWceL+4Q1pTc8Whw1kPqN/aYGPQ70/jXPsblWl501t/pXi6Kz0Pi/NggKkuu73VGjykh68YYf/dcOJ/mPZQ=="],
 
-    "@rollup/plugin-terser": ["@rollup/plugin-terser@0.4.4", "", { "dependencies": { "serialize-javascript": "^6.0.1", "smob": "^1.0.0", "terser": "^5.17.4" }, "peerDependencies": { "rollup": "^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-XHeJC5Bgvs8LfukDwWZp7yeqin6ns8RTl2B9avbejt6tZqsqvVoWI7ZTQrcNsfKEDWBTnTxM8nMDkO2IFFbd0A=="],
+    "@tiptap/extension-gapcursor": ["@tiptap/extension-gapcursor@3.32.0", "", { "peerDependencies": { "@tiptap/extensions": "3.32.0" } }, "sha512-HUpKKWJLtthnpQY5LIjHlJJOmh562RusmOMIe/4iP/H7y+WUR9ZFiZjEs1NBkRjig9fwj8F3BfsrVPYBnM4nLA=="],
 
-    "@rollup/pluginutils": ["@rollup/pluginutils@5.1.4", "", { "dependencies": { "@types/estree": "^1.0.0", "estree-walker": "^2.0.2", "picomatch": "^4.0.2" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-USm05zrsFxYLPdWWq+K3STlWiT/3ELn3RcV5hJMghpeAIhxfsUIg6mt12CBJBInWMV4VneoV7SfGv8xIwo2qNQ=="],
+    "@tiptap/extension-hard-break": ["@tiptap/extension-hard-break@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0" } }, "sha512-IKUYvK+bO2hGrDWhhTVg0CSh9C2belWg9GyLzvpyd3SZyQ9EgdccLfoytNjOBKbAE/TQ4Oo3kSP+XF6RsUIKPA=="],
 
-    "@rollup/rollup-android-arm-eabi": ["@rollup/rollup-android-arm-eabi@4.40.2", "", { "os": "android", "cpu": "arm" }, "sha512-JkdNEq+DFxZfUwxvB58tHMHBHVgX23ew41g1OQinthJ+ryhdRk67O31S7sYw8u2lTjHUPFxwar07BBt1KHp/hg=="],
+    "@tiptap/extension-heading": ["@tiptap/extension-heading@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0" } }, "sha512-XRiZxZuhfjvbgwCvoBHj04gOsPANEXxxRwrFCQVuFi5yeTHYIzMEioc81j6iAH9pV7aQeJCwLxuh6VHNz3dXEQ=="],
 
-    "@rollup/rollup-android-arm64": ["@rollup/rollup-android-arm64@4.40.2", "", { "os": "android", "cpu": "arm64" }, "sha512-13unNoZ8NzUmnndhPTkWPWbX3vtHodYmy+I9kuLxN+F+l+x3LdVF7UCu8TWVMt1POHLh6oDHhnOA04n8oJZhBw=="],
+    "@tiptap/extension-horizontal-rule": ["@tiptap/extension-horizontal-rule@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-Iry7ynsG4xgcxnH1cm+uXJnEtUzoop4sGA10NUN9I+08TOjhj/GrDiRKMQHKAiVI/R7t2MVav1MJlxFf2FdzGw=="],
 
-    "@rollup/rollup-darwin-arm64": ["@rollup/rollup-darwin-arm64@4.40.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-Gzf1Hn2Aoe8VZzevHostPX23U7N5+4D36WJNHK88NZHCJr7aVMG4fadqkIf72eqVPGjGc0HJHNuUaUcxiR+N/w=="],
+    "@tiptap/extension-image": ["@tiptap/extension-image@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0" } }, "sha512-nv/YlOMwFUp2ItffQbHb14yAJjrn9sdxKl0WK5rH8PPiNoXVkvasieoBLNTHan9gjhrSp7LjVG2ZsMoSe/I7gg=="],
 
-    "@rollup/rollup-darwin-x64": ["@rollup/rollup-darwin-x64@4.40.2", "", { "os": "darwin", "cpu": "x64" }, "sha512-47N4hxa01a4x6XnJoskMKTS8XZ0CZMd8YTbINbi+w03A2w4j1RTlnGHOz/P0+Bg1LaVL6ufZyNprSg+fW5nYQQ=="],
+    "@tiptap/extension-italic": ["@tiptap/extension-italic@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0" } }, "sha512-KB/i1xoHilbBGcQ+UotDWhi60KpdCde3RzRIpl2na0Yol4z4Fe2IRWg8ljIrlsssDRwel/fsHJbG7a13EP8oKA=="],
 
-    "@rollup/rollup-freebsd-arm64": ["@rollup/rollup-freebsd-arm64@4.40.2", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-8t6aL4MD+rXSHHZUR1z19+9OFJ2rl1wGKvckN47XFRVO+QL/dUSpKA2SLRo4vMg7ELA8pzGpC+W9OEd1Z/ZqoQ=="],
+    "@tiptap/extension-link": ["@tiptap/extension-link@3.32.0", "", { "dependencies": { "linkifyjs": "^4.3.3" }, "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-DRdQSgWPSEjrDg5EDBB5yxRygHtUVLhceVGzAsTz8RziiFyvcwAvzBHCO9hd9jutjCXQ2DLIuZB8P+aHhFWnpg=="],
 
-    "@rollup/rollup-freebsd-x64": ["@rollup/rollup-freebsd-x64@4.40.2", "", { "os": "freebsd", "cpu": "x64" }, "sha512-C+AyHBzfpsOEYRFjztcYUFsH4S7UsE9cDtHCtma5BK8+ydOZYgMmWg1d/4KBytQspJCld8ZIujFMAdKG1xyr4Q=="],
+    "@tiptap/extension-list": ["@tiptap/extension-list@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-QdzS5nFz9agAQhBgIuQluobWib39W2cMKx1XB6tYSue7bHMJdgPFP0EnGfFajaeVX42CG6RXtQWrNfyQGKhBvg=="],
 
-    "@rollup/rollup-linux-arm-gnueabihf": ["@rollup/rollup-linux-arm-gnueabihf@4.40.2", "", { "os": "linux", "cpu": "arm" }, "sha512-de6TFZYIvJwRNjmW3+gaXiZ2DaWL5D5yGmSYzkdzjBDS3W+B9JQ48oZEsmMvemqjtAFzE16DIBLqd6IQQRuG9Q=="],
+    "@tiptap/extension-list-item": ["@tiptap/extension-list-item@3.32.0", "", { "peerDependencies": { "@tiptap/extension-list": "3.32.0" } }, "sha512-FdJTCAeALixzyyGSSEmroXmkIEclbo/4t2Pl03aRERqpPOSPJcC3evDtIhLazTuP6v+FjCmJ+pXNql6ov7qitA=="],
 
-    "@rollup/rollup-linux-arm-musleabihf": ["@rollup/rollup-linux-arm-musleabihf@4.40.2", "", { "os": "linux", "cpu": "arm" }, "sha512-urjaEZubdIkacKc930hUDOfQPysezKla/O9qV+O89enqsqUmQm8Xj8O/vh0gHg4LYfv7Y7UsE3QjzLQzDYN1qg=="],
+    "@tiptap/extension-list-keymap": ["@tiptap/extension-list-keymap@3.32.0", "", { "peerDependencies": { "@tiptap/extension-list": "3.32.0" } }, "sha512-vXFre18Dk2m5N/gjo408C02GSrolZ8ZIf0wz6/U8lNC4FcYOISgZFj3BND6uabVntGh2GCSPrVFuNpVPhFnn/A=="],
 
-    "@rollup/rollup-linux-arm64-gnu": ["@rollup/rollup-linux-arm64-gnu@4.40.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-KlE8IC0HFOC33taNt1zR8qNlBYHj31qGT1UqWqtvR/+NuCVhfufAq9fxO8BMFC22Wu0rxOwGVWxtCMvZVLmhQg=="],
+    "@tiptap/extension-mention": ["@tiptap/extension-mention@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0", "@tiptap/suggestion": "3.32.0" } }, "sha512-TMT4exls1VH0QXsLd676s5oGn9Zlc6QHgS/jKRTe+XJcbRTUzc9n70n9uUG2wDwEHGB0128Ojy6663gc05e1Bw=="],
 
-    "@rollup/rollup-linux-arm64-musl": ["@rollup/rollup-linux-arm64-musl@4.40.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-j8CgxvfM0kbnhu4XgjnCWJQyyBOeBI1Zq91Z850aUddUmPeQvuAy6OiMdPS46gNFgy8gN1xkYyLgwLYZG3rBOg=="],
+    "@tiptap/extension-node-range": ["@tiptap/extension-node-range@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-Btwa7aciucAJkOoX8Fig3g6p7zdbg6PPtplRW/idVcWdYqKgEQgTyMV1M91GN6yksxt6bU2YBmC4FgEqTMyGuw=="],
 
-    "@rollup/rollup-linux-loong64-gnu": ["@rollup/rollup-linux-loong64-gnu@4.53.2", "", { "os": "linux", "cpu": "none" }, "sha512-8ms8sjmyc1jWJS6WdNSA23rEfdjWB30LH8Wqj0Cqvv7qSHnvw6kgMMXRdop6hkmGPlyYBdRPkjJnj3KCUHV/uQ=="],
+    "@tiptap/extension-ordered-list": ["@tiptap/extension-ordered-list@3.32.0", "", { "peerDependencies": { "@tiptap/extension-list": "3.32.0" } }, "sha512-htZ5hoMLBkGiDP6M5mGemjOoaBmkrj911wiGoTmMMKzO7qJq9QxUBkLY7ILPaKlUWL8U3ccLdDV2TB/nysp4Jg=="],
 
-    "@rollup/rollup-linux-loongarch64-gnu": ["@rollup/rollup-linux-loongarch64-gnu@4.40.2", "", { "os": "linux", "cpu": "none" }, "sha512-Ybc/1qUampKuRF4tQXc7G7QY9YRyeVSykfK36Y5Qc5dmrIxwFhrOzqaVTNoZygqZ1ZieSWTibfFhQ5qK8jpWxw=="],
+    "@tiptap/extension-paragraph": ["@tiptap/extension-paragraph@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0" } }, "sha512-afKLMc7fWMkkar9H5FilizStSbhFzUoCzdwwdZf6DDsn3LUt8tJlFHACK78cAyx/TzMJBo0N8/8T1u9bL+N67Q=="],
 
-    "@rollup/rollup-linux-powerpc64le-gnu": ["@rollup/rollup-linux-powerpc64le-gnu@4.40.2", "", { "os": "linux", "cpu": "ppc64" }, "sha512-3FCIrnrt03CCsZqSYAOW/k9n625pjpuMzVfeI+ZBUSDT3MVIFDSPfSUgIl9FqUftxcUXInvFah79hE1c9abD+Q=="],
+    "@tiptap/extension-placeholder": ["@tiptap/extension-placeholder@3.32.0", "", { "peerDependencies": { "@tiptap/extensions": "3.32.0" } }, "sha512-TSjyQmVFq56gfURPotxbMsXU3seNTy9VzMACdb6b0bQ66yGWBcjBfWmhpiSRVLdBjQrRvl1+jQbWx0YPSCSpsw=="],
 
-    "@rollup/rollup-linux-ppc64-gnu": ["@rollup/rollup-linux-ppc64-gnu@4.53.2", "", { "os": "linux", "cpu": "ppc64" }, "sha512-3HRQLUQbpBDMmzoxPJYd3W6vrVHOo2cVW8RUo87Xz0JPJcBLBr5kZ1pGcQAhdZgX9VV7NbGNipah1omKKe23/g=="],
+    "@tiptap/extension-strike": ["@tiptap/extension-strike@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0" } }, "sha512-J9Vw6wmh/wV6SxSsN9RhurvAGcXSY5J3p4EQrROD5PARBl0VOnDFi7/UVoz1RkSdqOKPgAiqDZpaLRgtdBO9Rg=="],
 
-    "@rollup/rollup-linux-riscv64-gnu": ["@rollup/rollup-linux-riscv64-gnu@4.40.2", "", { "os": "linux", "cpu": "none" }, "sha512-QNU7BFHEvHMp2ESSY3SozIkBPaPBDTsfVNGx3Xhv+TdvWXFGOSH2NJvhD1zKAT6AyuuErJgbdvaJhYVhVqrWTg=="],
+    "@tiptap/extension-text": ["@tiptap/extension-text@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0" } }, "sha512-sF0jIK67IHdZMnzv2mz5vPTyK7R0ui6/YZgFg+/bLnFCNmweVAoYcHZLlC7ISRnwu0mqJr+epNtzJepY1ZDCjg=="],
 
-    "@rollup/rollup-linux-riscv64-musl": ["@rollup/rollup-linux-riscv64-musl@4.40.2", "", { "os": "linux", "cpu": "none" }, "sha512-5W6vNYkhgfh7URiXTO1E9a0cy4fSgfE4+Hl5agb/U1sa0kjOLMLC1wObxwKxecE17j0URxuTrYZZME4/VH57Hg=="],
+    "@tiptap/extension-underline": ["@tiptap/extension-underline@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0" } }, "sha512-rMLdd4vg6sed/JnaXnaupLbCtYiWikTnQ8qir9ItKOXwf1Ui9P1Y4G0bYU4+gcnMsFzaSGtrOhMqG4/c66AogQ=="],
 
-    "@rollup/rollup-linux-s390x-gnu": ["@rollup/rollup-linux-s390x-gnu@4.40.2", "", { "os": "linux", "cpu": "s390x" }, "sha512-B7LKIz+0+p348JoAL4X/YxGx9zOx3sR+o6Hj15Y3aaApNfAshK8+mWZEf759DXfRLeL2vg5LYJBB7DdcleYCoQ=="],
+    "@tiptap/extensions": ["@tiptap/extensions@3.32.0", "", { "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-qO+ndNvlOjzU2MWCtQHoRg1tIortCXLvqPjDx58F1pUYFNCOVZegXi+jqLGDODUA31er+TVz66umzRbbN1bO1Q=="],
 
-    "@rollup/rollup-linux-x64-gnu": ["@rollup/rollup-linux-x64-gnu@4.40.2", "", { "os": "linux", "cpu": "x64" }, "sha512-lG7Xa+BmBNwpjmVUbmyKxdQJ3Q6whHjMjzQplOs5Z+Gj7mxPtWakGHqzMqNER68G67kmCX9qX57aRsW5V0VOng=="],
+    "@tiptap/markdown": ["@tiptap/markdown@3.32.0", "", { "dependencies": { "marked": "^17.0.1" }, "peerDependencies": { "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-y+pGAu4QMkXBMxhBoLvc6FWucQ1EWIoPi+Ajf4rAh5OlZtSV3CjBwyK6/xTwO7mvQxtoUf7DD23CzSaj5nCTBA=="],
 
-    "@rollup/rollup-linux-x64-musl": ["@rollup/rollup-linux-x64-musl@4.40.2", "", { "os": "linux", "cpu": "x64" }, "sha512-tD46wKHd+KJvsmije4bUskNuvWKFcTOIM9tZ/RrmIvcXnbi0YK/cKS9FzFtAm7Oxi2EhV5N2OpfFB348vSQRXA=="],
+    "@tiptap/pm": ["@tiptap/pm@3.32.0", "", { "dependencies": { "prosemirror-changeset": "^2.4.4", "prosemirror-commands": "^1.7.2", "prosemirror-dropcursor": "^1.8.4", "prosemirror-gapcursor": "^1.4.1", "prosemirror-history": "^1.5.1", "prosemirror-inputrules": "^1.5.1", "prosemirror-keymap": "^1.2.3", "prosemirror-model": "^1.25.12", "prosemirror-schema-list": "^1.5.1", "prosemirror-state": "^1.4.4", "prosemirror-tables": "^1.8.5", "prosemirror-transform": "^1.12.2", "prosemirror-view": "^1.42.6" } }, "sha512-H9eN+xHFboJybE7KPGVsu24S8aBlCIgYz38vCHRSnNv17nwmqm06owq/IQ5scza0n3Y7IfUfpgPOtm9SgeHmNQ=="],
 
-    "@rollup/rollup-openharmony-arm64": ["@rollup/rollup-openharmony-arm64@4.53.2", "", { "os": "none", "cpu": "arm64" }, "sha512-4VEd19Wmhr+Zy7hbUsFZ6YXEiP48hE//KPLCSVNY5RMGX2/7HZ+QkN55a3atM1C/BZCGIgqN+xrVgtdak2S9+A=="],
+    "@tiptap/starter-kit": ["@tiptap/starter-kit@3.32.0", "", { "dependencies": { "@tiptap/core": "3.32.0", "@tiptap/extension-blockquote": "3.32.0", "@tiptap/extension-bold": "3.32.0", "@tiptap/extension-bullet-list": "3.32.0", "@tiptap/extension-code": "3.32.0", "@tiptap/extension-code-block": "3.32.0", "@tiptap/extension-document": "3.32.0", "@tiptap/extension-dropcursor": "3.32.0", "@tiptap/extension-gapcursor": "3.32.0", "@tiptap/extension-hard-break": "3.32.0", "@tiptap/extension-heading": "3.32.0", "@tiptap/extension-horizontal-rule": "3.32.0", "@tiptap/extension-italic": "3.32.0", "@tiptap/extension-link": "3.32.0", "@tiptap/extension-list": "3.32.0", "@tiptap/extension-list-item": "3.32.0", "@tiptap/extension-list-keymap": "3.32.0", "@tiptap/extension-ordered-list": "3.32.0", "@tiptap/extension-paragraph": "3.32.0", "@tiptap/extension-strike": "3.32.0", "@tiptap/extension-text": "3.32.0", "@tiptap/extension-underline": "3.32.0", "@tiptap/extensions": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-aPYxaevci4PgMrTLsg+baiqI7M1ICd4V9H+zTTdrqs8OUZIbAvj/pNDuHU8uWZyKMu3Dh72t2D6ZdqRu/6aSWw=="],
 
-    "@rollup/rollup-win32-arm64-msvc": ["@rollup/rollup-win32-arm64-msvc@4.40.2", "", { "os": "win32", "cpu": "arm64" }, "sha512-Bjv/HG8RRWLNkXwQQemdsWw4Mg+IJ29LK+bJPW2SCzPKOUaMmPEppQlu/Fqk1d7+DX3V7JbFdbkh/NMmurT6Pg=="],
+    "@tiptap/suggestion": ["@tiptap/suggestion@3.32.0", "", { "peerDependencies": { "@floating-ui/dom": "^1.0.0", "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0" } }, "sha512-5PbouU06zaZ7n4uyYzeNN/jBFVmGsHZ6c56MvN7M33echERAhu1L1X71Up0U6GK/pJfyugX7WbluBehJDPQeSQ=="],
 
-    "@rollup/rollup-win32-ia32-msvc": ["@rollup/rollup-win32-ia32-msvc@4.40.2", "", { "os": "win32", "cpu": "ia32" }, "sha512-dt1llVSGEsGKvzeIO76HToiYPNPYPkmjhMHhP00T9S4rDern8P2ZWvWAQUEJ+R1UdMWJ/42i/QqJ2WV765GZcA=="],
+    "@tiptap/vue-3": ["@tiptap/vue-3@3.32.0", "", { "optionalDependencies": { "@tiptap/extension-bubble-menu": "3.32.0", "@tiptap/extension-floating-menu": "3.32.0" }, "peerDependencies": { "@floating-ui/dom": "^1.0.0", "@tiptap/core": "3.32.0", "@tiptap/pm": "3.32.0", "vue": "^3.0.0" } }, "sha512-FpYquLlZpfFzgWcQuOrXuUXDNn8YYomD3dLx92b61XxVMlwKkOH3p1XS/wlNNRBLaA7oSB5VRzy5E7EXtfgqpg=="],
 
-    "@rollup/rollup-win32-x64-gnu": ["@rollup/rollup-win32-x64-gnu@4.53.2", "", { "os": "win32", "cpu": "x64" }, "sha512-S6YojNVrHybQis2lYov1sd+uj7K0Q05NxHcGktuMMdIQ2VixGwAfbJ23NnlvvVV1bdpR2m5MsNBViHJKcA4ADw=="],
+    "@tiptap/y-tiptap": ["@tiptap/y-tiptap@3.0.10", "", { "dependencies": { "lib0": "^0.2.100", "prosemirror-transform": "^1.6.0" }, "peerDependencies": { "prosemirror-model": "^1.7.1", "prosemirror-state": "^1.2.3", "prosemirror-view": "^1.9.10", "y-protocols": "^1.0.1", "yjs": "^13.5.38" } }, "sha512-vJtwYVoBBk+e8KyUVoH9WSsfUfKTXf1Uh+tk2UNTlD8wim9j7XVTuc7sakWUYuznB7DkXThT9w5uQTGH2SN0Kg=="],
 
-    "@rollup/rollup-win32-x64-msvc": ["@rollup/rollup-win32-x64-msvc@4.40.2", "", { "os": "win32", "cpu": "x64" }, "sha512-bwspbWB04XJpeElvsp+DCylKfF4trJDa2Y9Go8O6A7YLX2LIKGcNK/CYImJN6ZP4DcuOHB4Utl3iCbnR62DudA=="],
+    "@types/bn.js": ["@types/bn.js@5.2.0", "", { "dependencies": { "@types/node": "*" } }, "sha512-DLbJ1BPqxvQhIGbeu8VbUC1DiAiahHtAYvA0ZEAa4P31F7IaArc8z3C3BRQdWX4mtLQuABG4yzp76ZrS02Ui1Q=="],
 
-    "@sindresorhus/is": ["@sindresorhus/is@7.1.1", "", {}, "sha512-rO92VvpgMc3kfiTjGT52LEtJ8Yc5kCWhZjLQ3LwlA4pSgPpQO7bVpYXParOD8Jwf+cVQECJo3yP/4I8aZtUQTQ=="],
+    "@types/bun": ["@types/bun@1.4.3", "", { "dependencies": { "bun-types": "1.4.3" } }, "sha512-N67Pqy8JXbAY/j0tNraS3V5mubGvc6rrrNDmDCtZLlFzccbUJPDb0tvgUBC5q4m8ybkP93Jcn1QB+RYQ6PvBhw=="],
 
-    "@sindresorhus/merge-streams": ["@sindresorhus/merge-streams@4.0.0", "", {}, "sha512-tlqY9xq5ukxTUZBmoOp+m61cqwQD5pHJtFY3Mn8CA8ps6yghLH/Hw8UPdqg4OLmFW3IFlcXnQNmo/dh8HzXYIQ=="],
+    "@types/elliptic": ["@types/elliptic@6.4.18", "", { "dependencies": { "@types/bn.js": "*" } }, "sha512-UseG6H5vjRiNpQvrhy4VF/JXdA3V/Fp5amvveaL+fs28BZ6xIKJBPnUPRlEaZpysD9MbpfaLi8lbl7PGUAkpWw=="],
 
-    "@speed-highlight/core": ["@speed-highlight/core@1.2.12", "", {}, "sha512-uilwrK0Ygyri5dToHYdZSjcvpS2ZwX0w5aSt3GCEN9hrjxWCoeV4Z2DTXuxjwbntaLQIEEAlCeNQss5SoHvAEA=="],
+    "@types/estree": ["@types/estree@1.0.9", "", {}, "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg=="],
 
-    "@surma/rollup-plugin-off-main-thread": ["@surma/rollup-plugin-off-main-thread@2.2.3", "", { "dependencies": { "ejs": "^3.1.6", "json5": "^2.2.0", "magic-string": "^0.25.0", "string.prototype.matchall": "^4.0.6" } }, "sha512-lR8q/9W7hZpMWweNiAKU7NQerBnzQQLvi8qnTDU/fxItPhtZVMbPV3lbCwjhIlNBe9Bbr5V+KHshvWmVSG9cxQ=="],
+    "@types/json-schema": ["@types/json-schema@7.0.15", "", {}, "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA=="],
 
-    "@tybys/wasm-util": ["@tybys/wasm-util@0.10.1", "", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg=="],
+    "@types/node": ["@types/node@26.6.5", "", { "dependencies": { "undici-types": "~8.9.0" } }, "sha512-uMzsv9stDdofIZBx4UGh4Z9ZgXnGC9seRDscilBcTHAeOFk67MZg/k9bWVfO+bk4qZmG+l52hRnLwUiH2LnJTg=="],
 
-    "@types/bcrypt": ["@types/bcrypt@5.0.2", "", { "dependencies": { "@types/node": "*" } }, "sha512-6atioO8Y75fNcbmj0G7UjI9lXN2pQ/IGJ2FWT4a/btd0Lk9lQalHLKhkgKVZ3r+spnmWUKfbMi1GEe9wyHQfNQ=="],
+    "@types/nodemailer": ["@types/nodemailer@8.0.2", "", { "dependencies": { "@types/node": "*" } }, "sha512-c7M5ox8p0nEOfbJ2E9Qcmt8/QCu/VzsiAhzBiZbvky2PhKZDHpKB3sQHBM5MEZNkCfBOaS6S9//AGPRTNB7IaA=="],
 
-    "@types/bun": ["@types/bun@1.3.2", "", { "dependencies": { "bun-types": "1.3.2" } }, "sha512-t15P7k5UIgHKkxwnMNkJbWlh/617rkDGEdSsDbu+qNHTaz9SKf7aC8fiIlUdD5RPpH6GEkP0cK7WlvmrEBRtWg=="],
+    "@types/resolve": ["@types/resolve@1.20.2", "", {}, "sha512-60BCwRFOZCQhDncwQdxxeOEEkbc5dIMccYLwbxsS4TUNeVECQ/pBJ0j09mrHOl/JJvpRPGwO9SvE4nR2Nb/a4Q=="],
 
-    "@types/estree": ["@types/estree@1.0.7", "", {}, "sha512-w28IoSUCJpidD/TGviZwwMJckNESJZXFu7NBZ5YJ4mEUnNraUn9Pm8HSZm/jDF1pDWYKspWE7oVphigUPRakIQ=="],
+    "@types/web-bluetooth": ["@types/web-bluetooth@0.0.21", "", {}, "sha512-oIQLCGWtcFZy2JW77j9k8nHzAOpqMHLQejDA48XXMWH6tjCQHz5RCFz1bzsmROyL6PUm+LLnUiI4BCn221inxA=="],
 
-    "@types/luxon": ["@types/luxon@3.7.1", "", {}, "sha512-H3iskjFIAn5SlJU7OuxUmTEpebK6TKB8rxZShDslBMZJ5u9S//KM1sbdAisiSrqwLQncVjnpi2OK2J51h+4lsg=="],
+    "@types/ws": ["@types/ws@8.18.2", "", { "dependencies": { "@types/node": "*" } }, "sha512-67MQl+fpWKVTT1NYdnmo3U4sc/xPo/zQBncVnI74qmQa0z/b+1g6iYqNmGCPbxO+zz2aklb08a0oHfegiVd0/w=="],
 
-    "@types/node": ["@types/node@22.15.17", "", { "dependencies": { "undici-types": "~6.21.0" } }, "sha512-wIX2aSZL5FE+MR0JlvF87BNVrtFWf6AE6rxSE9X7OwnVvoyCQjpzSRJ+M87se/4QCkCiebQAqrJ0y6fwIyi7nw=="],
+    "@unhead/bundler": ["@unhead/bundler@3.4.3", "", { "dependencies": { "magic-string": "^1.3.1", "oxc-walker": "^1.1.1", "unplugin": "^3.3.0" }, "peerDependencies": { "@unhead/cli": "^3.4.3", "@vitejs/devtools-kit": "^0.7.6", "esbuild": ">=0.17.0", "lightningcss": ">=1.20.0", "oxc-parser": ">=0.98.0", "rolldown": ">=1.0.0", "unhead": "^3.4.3", "vite": ">=6.4.2", "webpack": ">=5.0.0" }, "optionalPeers": ["@unhead/cli", "@vitejs/devtools-kit", "esbuild", "lightningcss", "oxc-parser", "rolldown", "vite", "webpack"] }, "sha512-noUTzazRB4fMgO/nluoirrZJXngNbNb3sQzIslA805tKkwakRv2fib4Xe4EdiTuNB7V5XmpUFvfQkKRdBQ9qAA=="],
 
-    "@types/parse-path": ["@types/parse-path@7.1.0", "", { "dependencies": { "parse-path": "*" } }, "sha512-EULJ8LApcVEPbrfND0cRQqutIOdiIgJ1Mgrhpy755r14xMohPTEpkV/k28SJvuOs9bHRFW8x+KeDAEPiGQPB9Q=="],
+    "@unhead/vue": ["@unhead/vue@3.4.3", "", { "dependencies": { "@unhead/bundler": "3.4.3", "hookable": "^6.1.1", "unhead": "3.4.3", "unplugin": "^3.3.0" }, "peerDependencies": { "vite": ">=6.4.2", "vue": ">=3.5.18", "webpack": ">=5.0.0" }, "optionalPeers": ["vite", "webpack"] }, "sha512-Wrmk62oC/V1EcBSKRDuy77kVaBtBXXsj6b+vEEWvmfo9AQfpLlc2b6vvvSj9WnXr8VY1ksKHj49Ejo8J/wLSOA=="],
 
-    "@types/react": ["@types/react@19.2.5", "", { "dependencies": { "csstype": "^3.0.2" } }, "sha512-keKxkZMqnDicuvFoJbzrhbtdLSPhj/rZThDlKWCDbgXmUg0rEUFtRssDXKYmtXluZlIqiC5VqkCgRwzuyLHKHw=="],
+    "@vercel/nft": ["@vercel/nft@1.11.0", "", { "dependencies": { "@mapbox/node-pre-gyp": "^2.0.0", "@rollup/pluginutils": "^5.1.3", "acorn": "^8.6.0", "acorn-import-attributes": "^1.9.5", "async-sema": "^3.1.1", "bindings": "^1.4.0", "estree-walker": "2.0.2", "glob": "^13.0.0", "graceful-fs": "^4.2.9", "node-gyp-build": "^4.2.2", "picomatch": "^4.0.4", "resolve-from": "^5.0.0" }, "bin": { "nft": "out/cli.js" } }, "sha512-m1QFg+U+3yPOnP1xSYJ73UIRxLOXdts1JOhiOiyPYqEsALgrXFFINvgUaD6R6iNvaBFAjHllBCbkfx4FuOdpaA=="],
 
-    "@types/resolve": ["@types/resolve@1.20.2", "", {}, "sha512-60BCwRFOZCQhDncwQdxxeOEEkbc5dIMccYLwbxsS4TUNeVECQ/pBJ0j09mrHOl/JJvpRPGwO9SvE4nR2Nb/a4Q=="],
+    "@vitejs/plugin-vue": ["@vitejs/plugin-vue@6.0.10", "", { "dependencies": { "@rolldown/pluginutils": "^1.0.1" }, "peerDependencies": { "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0", "vue": "^3.2.25 || ^3.6.0-rc.10" } }, "sha512-b80aUQh3n+qEzzZm5oQp3rT2QImeCx58K6eFl/RkJ3d65KW0kTuv5lNsLRVAjbW9YRUpo/wzmvzMgV34bTAItA=="],
 
-    "@types/trusted-types": ["@types/trusted-types@2.0.7", "", {}, "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw=="],
+    "@vitejs/plugin-vue-jsx": ["@vitejs/plugin-vue-jsx@5.1.6", "", { "dependencies": { "@babel/core": "^7.29.0", "@babel/plugin-syntax-typescript": "^7.29.7", "@babel/plugin-transform-typescript": "^7.29.7", "@rolldown/pluginutils": "^1.0.1", "@vue/babel-plugin-jsx": "^2.0.1" }, "peerDependencies": { "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0", "vue": "^3.0.0" } }, "sha512-YXvi4as2clxt6DFw5+a0tTA97ntiQXm/raR8ofNj3aNwwdlVGTiG2gp7EvfZW17P50acL/9bP0ccF4XnqNmlgA=="],
 
-    "@types/ws": ["@types/ws@8.18.1", "", { "dependencies": { "@types/node": "*" } }, "sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg=="],
+    "@volar/language-core": ["@volar/language-core@2.4.28", "", { "dependencies": { "@volar/source-map": "2.4.28" } }, "sha512-w4qhIJ8ZSitgLAkVay6AbcnC7gP3glYM3fYwKV3srj8m494E3xtrCv6E+bWviiK/8hs6e6t1ij1s2Endql7vzQ=="],
 
-    "@unhead/vue": ["@unhead/vue@2.0.19", "", { "dependencies": { "hookable": "^5.5.3", "unhead": "2.0.19" }, "peerDependencies": { "vue": ">=3.5.18" } }, "sha512-7BYjHfOaoZ9+ARJkT10Q2TjnTUqDXmMpfakIAsD/hXiuff1oqWg1xeXT5+MomhNcC15HbiABpbbBmITLSHxdKg=="],
+    "@volar/source-map": ["@volar/source-map@2.4.28", "", {}, "sha512-yX2BDBqJkRXfKw8my8VarTyjv48QwxdJtvRgUpNE5erCsgEUdI2DsLbpa+rOQVAJYshY99szEcRDmyHbF10ggQ=="],
 
-    "@vercel/nft": ["@vercel/nft@0.30.3", "", { "dependencies": { "@mapbox/node-pre-gyp": "^2.0.0", "@rollup/pluginutils": "^5.1.3", "acorn": "^8.6.0", "acorn-import-attributes": "^1.9.5", "async-sema": "^3.1.1", "bindings": "^1.4.0", "estree-walker": "2.0.2", "glob": "^10.4.5", "graceful-fs": "^4.2.9", "node-gyp-build": "^4.2.2", "picomatch": "^4.0.2", "resolve-from": "^5.0.0" }, "bin": { "nft": "out/cli.js" } }, "sha512-UEq+eF0ocEf9WQCV1gktxKhha36KDs7jln5qii6UpPf5clMqDc0p3E7d9l2Smx0i9Pm1qpq4S4lLfNl97bbv6w=="],
+    "@volar/typescript": ["@volar/typescript@2.4.28", "", { "dependencies": { "@volar/language-core": "2.4.28", "path-browserify": "^1.0.1", "vscode-uri": "^3.0.8" } }, "sha512-Ja6yvWrbis2QtN4ClAKreeUZPVYMARDYZl9LMEv1iQ1QdepB6wn0jTRxA9MftYmYa4DQ4k/DaSZpFPUfxl8giw=="],
 
-    "@vite-pwa/nuxt": ["@vite-pwa/nuxt@1.0.1", "", { "dependencies": { "@nuxt/kit": "^3.9.0", "pathe": "^1.1.1", "ufo": "^1.3.2", "vite-plugin-pwa": "^1.0.0" }, "peerDependencies": { "@vite-pwa/assets-generator": "^1.0.0" }, "optionalPeers": ["@vite-pwa/assets-generator"] }, "sha512-JeefyNPv95eyPzZLcltWtG1hKEL9wKymcVO4MhWlLw4KBQRJB8ZXS51rAshXmeTWWB2prlRW3dY2NGk58MEpqQ=="],
+    "@vue-macros/common": ["@vue-macros/common@3.1.4", "", { "dependencies": { "@vue/compiler-sfc": "^3.5.22", "ast-kit": "^2.1.2", "local-pkg": "^1.1.2", "magic-string-ast": "^1.0.2", "unplugin-utils": "^0.3.0" }, "peerDependencies": { "vue": "^2.7.0 || ^3.2.25" }, "optionalPeers": ["vue"] }, "sha512-/5Fv+6DgIcM9ajY05ZmKBv+LMX1M9A0X+IUwDRVdt67ciw8OV9bvG2r34p3RiEadlsQybjhKPRKNXDC8Bp23cw=="],
 
-    "@vitejs/plugin-vue": ["@vitejs/plugin-vue@6.0.1", "", { "dependencies": { "@rolldown/pluginutils": "1.0.0-beta.29" }, "peerDependencies": { "vite": "^5.0.0 || ^6.0.0 || ^7.0.0", "vue": "^3.2.25" } }, "sha512-+MaE752hU0wfPFJEUAIxqw18+20euHHdxVtMvbFcOEpjEyfqXH/5DCoTHiVJ0J29EhTJdoTkjEv5YBKU9dnoTw=="],
+    "@vue/babel-helper-vue-transform-on": ["@vue/babel-helper-vue-transform-on@2.0.1", "", {}, "sha512-uZ66EaFbnnZSYqYEyplWvn46GhZ1KuYSThdT68p+am7MgBNbQ3hphTL9L+xSIsWkdktwhPYLwPgVWqo96jDdRA=="],
 
-    "@vitejs/plugin-vue-jsx": ["@vitejs/plugin-vue-jsx@5.1.1", "", { "dependencies": { "@babel/core": "^7.28.3", "@babel/plugin-syntax-typescript": "^7.27.1", "@babel/plugin-transform-typescript": "^7.28.0", "@rolldown/pluginutils": "^1.0.0-beta.34", "@vue/babel-plugin-jsx": "^1.5.0" }, "peerDependencies": { "vite": "^5.0.0 || ^6.0.0 || ^7.0.0", "vue": "^3.0.0" } }, "sha512-uQkfxzlF8SGHJJVH966lFTdjM/lGcwJGzwAHpVqAPDD/QcsqoUGa+q31ox1BrUfi+FLP2ChVp7uLXE3DkHyDdQ=="],
+    "@vue/babel-plugin-jsx": ["@vue/babel-plugin-jsx@2.0.1", "", { "dependencies": { "@babel/helper-module-imports": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1", "@babel/plugin-syntax-jsx": "^7.27.1", "@babel/template": "^7.27.2", "@babel/traverse": "^7.28.4", "@babel/types": "^7.28.4", "@vue/babel-helper-vue-transform-on": "2.0.1", "@vue/babel-plugin-resolve-type": "2.0.1", "@vue/shared": "^3.5.22" }, "peerDependencies": { "@babel/core": "^7.0.0-0" }, "optionalPeers": ["@babel/core"] }, "sha512-a8CaLQjD/s4PVdhrLD/zT574ZNPnZBOY+IhdtKWRB4HRZ0I2tXBi5ne7d9eCfaYwp5gU5+4KIyFTV1W1YL9xZA=="],
 
-    "@volar/language-core": ["@volar/language-core@2.4.23", "", { "dependencies": { "@volar/source-map": "2.4.23" } }, "sha512-hEEd5ET/oSmBC6pi1j6NaNYRWoAiDhINbT8rmwtINugR39loROSlufGdYMF9TaKGfz+ViGs1Idi3mAhnuPcoGQ=="],
+    "@vue/babel-plugin-resolve-type": ["@vue/babel-plugin-resolve-type@2.0.1", "", { "dependencies": { "@babel/code-frame": "^7.27.1", "@babel/helper-module-imports": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1", "@babel/parser": "^7.28.4", "@vue/compiler-sfc": "^3.5.22" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-ybwgIuRGRRBhOU37GImDoWQoz+TlSqap65qVI6iwg/J7FfLTLmMf97TS7xQH9I7Qtr/gp161kYVdhr1ZMraSYQ=="],
 
-    "@volar/source-map": ["@volar/source-map@2.4.23", "", {}, "sha512-Z1Uc8IB57Lm6k7q6KIDu/p+JWtf3xsXJqAX/5r18hYOTpJyBn0KXUR8oTJ4WFYOcDzWC9n3IflGgHowx6U6z9Q=="],
+    "@vue/compiler-core": ["@vue/compiler-core@3.5.44", "", { "dependencies": { "@babel/parser": "^7.29.9", "@vue/shared": "3.5.44", "entities": "^7.0.1", "estree-walker": "^2.0.2", "source-map-js": "^1.2.2" } }, "sha512-k34nCytbK8PQ1gR2mGROYOw6Pnv/mumqIdrZ3x2tbyXZDWm7ViKGLTfdB+DRrWqEQsLgGJvn0WN9jBif5zCTLQ=="],
 
-    "@vue-macros/common": ["@vue-macros/common@3.1.1", "", { "dependencies": { "@vue/compiler-sfc": "^3.5.22", "ast-kit": "^2.1.2", "local-pkg": "^1.1.2", "magic-string-ast": "^1.0.2", "unplugin-utils": "^0.3.0" }, "peerDependencies": { "vue": "^2.7.0 || ^3.2.25" }, "optionalPeers": ["vue"] }, "sha512-afW2DMjgCBVs33mWRlz7YsGHzoEEupnl0DK5ZTKsgziAlLh5syc5m+GM7eqeYrgiQpwMaVxa1fk73caCvPxyAw=="],
+    "@vue/compiler-dom": ["@vue/compiler-dom@3.5.44", "", { "dependencies": { "@vue/compiler-core": "3.5.44", "@vue/shared": "3.5.44" } }, "sha512-W5AoBFWdw1lQAKiHowkfgFKFab82oSRT6sGsPfw/q1GRjsy/ZJFLHGhJyBRIFN9APLTUduDH9U2JAiPOIyKuYg=="],
 
-    "@vue/babel-helper-vue-transform-on": ["@vue/babel-helper-vue-transform-on@1.5.0", "", {}, "sha512-0dAYkerNhhHutHZ34JtTl2czVQHUNWv6xEbkdF5W+Yrv5pCWsqjeORdOgbtW2I9gWlt+wBmVn+ttqN9ZxR5tzA=="],
+    "@vue/compiler-sfc": ["@vue/compiler-sfc@3.5.44", "", { "dependencies": { "@babel/parser": "^7.29.9", "@vue/compiler-core": "3.5.44", "@vue/compiler-dom": "3.5.44", "@vue/compiler-ssr": "3.5.44", "@vue/shared": "3.5.44", "estree-walker": "^2.0.2", "magic-string": "^0.30.21", "postcss": "^8.5.29", "source-map-js": "^1.2.2" } }, "sha512-dzHmQ4jXTpdr5FjIQUeykVakN/uzqFbUo9/C5ikBFg3a3PeM6uRxeczx1ZbXBML0/zJstEh3ygYipzR5Z7b2Pw=="],
 
-    "@vue/babel-plugin-jsx": ["@vue/babel-plugin-jsx@1.5.0", "", { "dependencies": { "@babel/helper-module-imports": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1", "@babel/plugin-syntax-jsx": "^7.27.1", "@babel/template": "^7.27.2", "@babel/traverse": "^7.28.0", "@babel/types": "^7.28.2", "@vue/babel-helper-vue-transform-on": "1.5.0", "@vue/babel-plugin-resolve-type": "1.5.0", "@vue/shared": "^3.5.18" }, "peerDependencies": { "@babel/core": "^7.0.0-0" }, "optionalPeers": ["@babel/core"] }, "sha512-mneBhw1oOqCd2247O0Yw/mRwC9jIGACAJUlawkmMBiNmL4dGA2eMzuNZVNqOUfYTa6vqmND4CtOPzmEEEqLKFw=="],
+    "@vue/compiler-ssr": ["@vue/compiler-ssr@3.5.44", "", { "dependencies": { "@vue/compiler-dom": "3.5.44", "@vue/shared": "3.5.44" } }, "sha512-xr5gb1JVHlfXJwSlRz1FeP6uxoazdzHuMTVLE7up+4Vrqxk219CvxLPxD9NXBt47yvZW7+p4DXfyp4O1fkByIA=="],
 
-    "@vue/babel-plugin-resolve-type": ["@vue/babel-plugin-resolve-type@1.5.0", "", { "dependencies": { "@babel/code-frame": "^7.27.1", "@babel/helper-module-imports": "^7.27.1", "@babel/helper-plugin-utils": "^7.27.1", "@babel/parser": "^7.28.0", "@vue/compiler-sfc": "^3.5.18" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-Wm/60o+53JwJODm4Knz47dxJnLDJ9FnKnGZJbUUf8nQRAtt6P+undLUAVU3Ha33LxOJe6IPoifRQ6F/0RrU31w=="],
+    "@vue/devtools-api": ["@vue/devtools-api@8.2.1", "", { "dependencies": { "@vue/devtools-kit": "^8.2.1" } }, "sha512-6u4vXBlIBAC1wMplIZgpyPn7uh/s4Bf6F5bMzvLv+EdJ0aHs/+4B7Ygv864EStQSjRbsRzTko/kUG1A1IejQ3A=="],
 
-    "@vue/compiler-core": ["@vue/compiler-core@3.5.24", "", { "dependencies": { "@babel/parser": "^7.28.5", "@vue/shared": "3.5.24", "entities": "^4.5.0", "estree-walker": "^2.0.2", "source-map-js": "^1.2.1" } }, "sha512-eDl5H57AOpNakGNAkFDH+y7kTqrQpJkZFXhWZQGyx/5Wh7B1uQYvcWkvZi11BDhscPgj8N7XV3oRwiPnx1Vrig=="],
+    "@vue/devtools-core": ["@vue/devtools-core@8.2.1", "", { "dependencies": { "@vue/devtools-kit": "^8.2.1", "@vue/devtools-shared": "^8.2.1" }, "peerDependencies": { "vue": "^3.0.0" } }, "sha512-s/VfAY9oDTb/kFEWmy461jaFde2MIV1RO/gi1vwM+PAZBZ/Pc2Ndu3BNBdZUze8QDUuyYvElbEEGA83syjJfzA=="],
 
-    "@vue/compiler-dom": ["@vue/compiler-dom@3.5.24", "", { "dependencies": { "@vue/compiler-core": "3.5.24", "@vue/shared": "3.5.24" } }, "sha512-1QHGAvs53gXkWdd3ZMGYuvQFXHW4ksKWPG8HP8/2BscrbZ0brw183q2oNWjMrSWImYLHxHrx1ItBQr50I/q2zw=="],
+    "@vue/devtools-kit": ["@vue/devtools-kit@8.2.1", "", { "dependencies": { "@vue/devtools-shared": "^8.2.1", "birpc": "^2.6.1", "hookable": "^5.5.3", "perfect-debounce": "^2.0.0" } }, "sha512-FIGIuq3AWReEpbAHY/cRGeHDfI0qOb8OCQ3YjbEAX04uaxIDbGc9rhkbVcG7rnfHPXE3RsU5KrWOu9V/okd8AQ=="],
 
-    "@vue/compiler-sfc": ["@vue/compiler-sfc@3.5.24", "", { "dependencies": { "@babel/parser": "^7.28.5", "@vue/compiler-core": "3.5.24", "@vue/compiler-dom": "3.5.24", "@vue/compiler-ssr": "3.5.24", "@vue/shared": "3.5.24", "estree-walker": "^2.0.2", "magic-string": "^0.30.21", "postcss": "^8.5.6", "source-map-js": "^1.2.1" } }, "sha512-8EG5YPRgmTB+YxYBM3VXy8zHD9SWHUJLIGPhDovo3Z8VOgvP+O7UP5vl0J4BBPWYD9vxtBabzW1EuEZ+Cqs14g=="],
+    "@vue/devtools-shared": ["@vue/devtools-shared@8.2.1", "", {}, "sha512-Fkac7lUdGReh6pVOi3AYPRGe82LQqRmAfThW7RRligOAP0ZA/Z1z9XLHDM9dv34pV2HRc79DK8uKPeG2fLnA/g=="],
 
-    "@vue/compiler-ssr": ["@vue/compiler-ssr@3.5.24", "", { "dependencies": { "@vue/compiler-dom": "3.5.24", "@vue/shared": "3.5.24" } }, "sha512-trOvMWNBMQ/odMRHW7Ae1CdfYx+7MuiQu62Jtu36gMLXcaoqKvAyh+P73sYG9ll+6jLB6QPovqoKGGZROzkFFg=="],
+    "@vue/language-core": ["@vue/language-core@3.3.13", "", { "dependencies": { "@volar/language-core": "2.4.28", "@vue/compiler-dom": "^3.5.0", "@vue/shared": "^3.5.0", "alien-signals": "^3.2.1", "muggle-string": "^0.4.1", "path-browserify": "^1.0.1", "picomatch": "^4.0.4" } }, "sha512-axA0Xemn5LuUKuKWob0/kVq7xQ2mJJM6VqA9Exvt35nM9yRC31goWVve/G/Zb2ZCLsXC8FHYjjfXlnshknSCew=="],
 
-    "@vue/devtools-api": ["@vue/devtools-api@6.6.4", "", {}, "sha512-sGhTPMuXqZ1rVOk32RylztWkfXTRhuS7vgAKv0zjqk8gbsHkJ7xfFf+jbySxt7tWObEJwyKaHMikV/WGDiQm8g=="],
+    "@vue/reactivity": ["@vue/reactivity@3.5.44", "", { "dependencies": { "@vue/shared": "3.5.44" } }, "sha512-u+QJdKeBBEADkPdevsL+6E12QlYVfBD8Zcw5qjDQKtamI6l14KyqazJMobhCKelhWN5zpyKUiEDoTyHE93cqWw=="],
 
-    "@vue/devtools-core": ["@vue/devtools-core@8.0.5", "", { "dependencies": { "@vue/devtools-kit": "^8.0.5", "@vue/devtools-shared": "^8.0.5", "mitt": "^3.0.1", "nanoid": "^5.1.5", "pathe": "^2.0.3", "vite-hot-client": "^2.1.0" }, "peerDependencies": { "vue": "^3.0.0" } }, "sha512-dpCw8nl0GDBuiL9SaY0mtDxoGIEmU38w+TQiYEPOLhW03VDC0lfNMYXS/qhl4I0YlysGp04NLY4UNn6xgD0VIQ=="],
+    "@vue/runtime-core": ["@vue/runtime-core@3.5.44", "", { "dependencies": { "@vue/reactivity": "3.5.44", "@vue/shared": "3.5.44" } }, "sha512-uEa/ndwjhrrhnOfb2p+sZy6zeoamJOISqaLSJGk/8R6nABT1ZldpzcJoPzKj+zHVomVBPcmQYyC2r4LtvDV6CQ=="],
 
-    "@vue/devtools-kit": ["@vue/devtools-kit@8.0.5", "", { "dependencies": { "@vue/devtools-shared": "^8.0.5", "birpc": "^2.6.1", "hookable": "^5.5.3", "mitt": "^3.0.1", "perfect-debounce": "^2.0.0", "speakingurl": "^14.0.1", "superjson": "^2.2.2" } }, "sha512-q2VV6x1U3KJMTQPUlRMyWEKVbcHuxhqJdSr6Jtjz5uAThAIrfJ6WVZdGZm5cuO63ZnSUz0RCsVwiUUb0mDV0Yg=="],
+    "@vue/runtime-dom": ["@vue/runtime-dom@3.5.44", "", { "dependencies": { "@vue/reactivity": "3.5.44", "@vue/runtime-core": "3.5.44", "@vue/shared": "3.5.44", "csstype": "^3.2.3" } }, "sha512-3fc4ARcXVhVBaJ3ujWiNZJARD6pkyRcwG+ZYhMzjKtKUp7MAY0HLwr7r3Smep3Li6ZaWT6ewdmx8XqdaD5oNZg=="],
 
-    "@vue/devtools-shared": ["@vue/devtools-shared@8.0.5", "", { "dependencies": { "rfdc": "^1.4.1" } }, "sha512-bRLn6/spxpmgLk+iwOrR29KrYnJjG9DGpHGkDFG82UM21ZpJ39ztUT9OXX3g+usW7/b2z+h46I9ZiYyB07XMXg=="],
+    "@vue/server-renderer": ["@vue/server-renderer@3.5.44", "", { "dependencies": { "@vue/compiler-ssr": "3.5.44", "@vue/runtime-dom": "3.5.44", "@vue/shared": "3.5.44" } }, "sha512-R4S1UoH4h5Frrauv8Z5XE5TxV9oBiUSgWIC4TyVK1FK+RocRnOLwFA5Xcmo2011RlgJp+AbZCnw6afrhlgRuUQ=="],
 
-    "@vue/language-core": ["@vue/language-core@3.1.4", "", { "dependencies": { "@volar/language-core": "2.4.23", "@vue/compiler-dom": "^3.5.0", "@vue/shared": "^3.5.0", "alien-signals": "^3.0.0", "muggle-string": "^0.4.1", "path-browserify": "^1.0.1", "picomatch": "^4.0.2" }, "peerDependencies": { "typescript": "*" }, "optionalPeers": ["typescript"] }, "sha512-n/58wm8SkmoxMWkUNUH/PwoovWe4hmdyPJU2ouldr3EPi1MLoS7iDN46je8CsP95SnVBs2axInzRglPNKvqMcg=="],
+    "@vue/shared": ["@vue/shared@3.5.44", "", {}, "sha512-H82XLH0DjmSOdbEwO15x3QTo1f5PWEtv237eLpYKc0mqLu+B8hnq16lFWmuBmNurkeiG3wr+oM1FhOll/YVFRg=="],
 
-    "@vue/reactivity": ["@vue/reactivity@3.5.24", "", { "dependencies": { "@vue/shared": "3.5.24" } }, "sha512-BM8kBhtlkkbnyl4q+HiF5R5BL0ycDPfihowulm02q3WYp2vxgPcJuZO866qa/0u3idbMntKEtVNuAUp5bw4teg=="],
+    "@vueuse/core": ["@vueuse/core@14.4.0", "", { "dependencies": { "@types/web-bluetooth": "^0.0.21", "@vueuse/metadata": "14.4.0", "@vueuse/shared": "14.4.0" }, "peerDependencies": { "vue": "^3.5.0" } }, "sha512-X4WHz1HlCzCBoYXesUkifzzWBAcZgXG8Fi5iNPQg/epdzOB3gu8Fawj3hvuwYR1nGcXGnvxwYYcUC/71++svtQ=="],
 
-    "@vue/runtime-core": ["@vue/runtime-core@3.5.24", "", { "dependencies": { "@vue/reactivity": "3.5.24", "@vue/shared": "3.5.24" } }, "sha512-RYP/byyKDgNIqfX/gNb2PB55dJmM97jc9wyF3jK7QUInYKypK2exmZMNwnjueWwGceEkP6NChd3D2ZVEp9undQ=="],
+    "@vueuse/integrations": ["@vueuse/integrations@14.4.0", "", { "dependencies": { "@vueuse/core": "14.4.0", "@vueuse/shared": "14.4.0" }, "peerDependencies": { "async-validator": "^4", "axios": "^1", "change-case": "^5", "drauu": "^0.4", "focus-trap": "^7 || ^8", "fuse.js": "^7", "idb-keyval": "^6", "jwt-decode": "^4", "nprogress": "^0.2", "qrcode": "^1.5", "sortablejs": "^1", "universal-cookie": "^7 || ^8", "vue": "^3.5.0" }, "optionalPeers": ["async-validator", "axios", "change-case", "drauu", "focus-trap", "fuse.js", "idb-keyval", "jwt-decode", "nprogress", "qrcode", "sortablejs", "universal-cookie"] }, "sha512-oJz9qTgczvA7L1nXQFRU7h8tQbOCoiceqvMMhT9XYMyOGTqLJ2rEa09PON+nD2t48sZUfeOmg4eaWJXV4sZb/w=="],
 
-    "@vue/runtime-dom": ["@vue/runtime-dom@3.5.24", "", { "dependencies": { "@vue/reactivity": "3.5.24", "@vue/runtime-core": "3.5.24", "@vue/shared": "3.5.24", "csstype": "^3.1.3" } }, "sha512-Z8ANhr/i0XIluonHVjbUkjvn+CyrxbXRIxR7wn7+X7xlcb7dJsfITZbkVOeJZdP8VZwfrWRsWdShH6pngMxRjw=="],
+    "@vueuse/metadata": ["@vueuse/metadata@14.4.0", "", {}, "sha512-swx/255R6JyHZFJhx845iz5CRWDZdCfvkZOpACWc5+c5WHcG24mv8gUT1WIdFQaHt6dq79rvILd9QnCWiyVm9g=="],
 
-    "@vue/server-renderer": ["@vue/server-renderer@3.5.24", "", { "dependencies": { "@vue/compiler-ssr": "3.5.24", "@vue/shared": "3.5.24" }, "peerDependencies": { "vue": "3.5.24" } }, "sha512-Yh2j2Y4G/0/4z/xJ1Bad4mxaAk++C2v4kaa8oSYTMJBJ00/ndPuxCnWeot0/7/qafQFLh5pr6xeV6SdMcE/G1w=="],
-
-    "@vue/shared": ["@vue/shared@3.5.24", "", {}, "sha512-9cwHL2EsJBdi8NY22pngYYWzkTDhld6fAD6jlaeloNGciNSJL6bLpbxVgXl96X00Jtc6YWQv96YA/0sxex/k1A=="],
+    "@vueuse/shared": ["@vueuse/shared@14.4.0", "", { "peerDependencies": { "vue": "^3.5.0" } }, "sha512-JRgY90Sz8DDtPMsaDflvPMp9xYk69JZAmbuDvAquUVXKr2gEjqtzGNTTthLfckH0BzBqvnu31gb4a8TGLRe79g=="],
 
     "abbrev": ["abbrev@3.0.1", "", {}, "sha512-AO2ac6pjRB3SJmGJo+v5/aK6Omggp6fsLrs6wN9bd35ulu4cCwaAU9+7ZhXjeqHVkaHThLuzH0nZr0YpCDhygg=="],
 
     "abort-controller": ["abort-controller@3.0.0", "", { "dependencies": { "event-target-shim": "^5.0.0" } }, "sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg=="],
 
-    "acorn": ["acorn@8.15.0", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg=="],
+    "acorn": ["acorn@8.19.0", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-oJlA3XiRm7Cyk6qFD2Jn8ak9B7jSy0qy00ADO3+8dpT0LSjFihQYv4C02LFCSYJV3Q37xYwwRy5m+IpIiUzqWw=="],
 
     "acorn-import-attributes": ["acorn-import-attributes@1.9.5", "", { "peerDependencies": { "acorn": "^8" } }, "sha512-n02Vykv5uA3eHGM/Z2dQrcD56kL8TyDb2p1+0P83PClMnC/nc+anbQRhIOWnSq4Ke/KvDPrY3C9hDtC/A3eHnQ=="],
 
-    "agent-base": ["agent-base@7.1.3", "", {}, "sha512-jRR5wdylq8CkOe6hei19GGZnxM6rBGwFl3Bg0YItGDimvjGtAvdZk4Pu6Cl4u4Igsws4a1fd1Vq3ezrhn4KmFw=="],
+    "agent-base": ["agent-base@7.1.4", "", {}, "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ=="],
 
-    "ajv": ["ajv@8.17.1", "", { "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", "json-schema-traverse": "^1.0.0", "require-from-string": "^2.0.2" } }, "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g=="],
+    "alien-signals": ["alien-signals@3.2.1", "", {}, "sha512-I8FjmltrfnDFoZedi5CG8DghVYNhzb/Ijluz7tCSJH0xpd0484Kowhbb1XDYOxfJpU1p5wnM2X54dA+IfGyD1g=="],
 
-    "alien-signals": ["alien-signals@3.1.0", "", {}, "sha512-yufC6VpSy8tK3I0lO67pjumo5JvDQVQyr38+3OHqe6CHl1t2VZekKZ7EKKZSqk0cRmE7U7tfZbpXiKNzuc+ckg=="],
+    "ansi-colors": ["ansi-colors@4.1.3", "", {}, "sha512-/6w/C21Pm1A7aZitlI5Ni/2J6FFQN8i1Cvz3kHABAAbw93v/NlvKdVOqz7CCWz/3iv/JplRSEEZ83XION15ovw=="],
 
-    "ansi-regex": ["ansi-regex@5.0.1", "", {}, "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ=="],
+    "ansi-regex": ["ansi-regex@6.4.0", "", {}, "sha512-KzTVk2tCWAHtYrvvvaP8bJKJq2pVinhLcGEQdtLIYPbmNGNyYe8QwNaTUYQp2J7/vIsUKt5QCqAfUkYyG9DkOw=="],
 
-    "ansi-styles": ["ansi-styles@4.3.0", "", { "dependencies": { "color-convert": "^2.0.1" } }, "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg=="],
+    "ansi-styles": ["ansi-styles@6.2.3", "", {}, "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg=="],
 
-    "ansis": ["ansis@4.2.0", "", {}, "sha512-HqZ5rWlFjGiV0tDm3UxxgNRqsOTniqoKZu0pIAfh7TZQMGuZK+hH0drySty0si0QXj1ieop4+SkSfPZBPPkHig=="],
+    "ansis": ["ansis@4.4.0", "", {}, "sha512-9k3v7xcHwgdO/DruxGIg4HtjvlAZlcnsX/mzqUb1t3NkYnl9kK2UJ+Gq0io+vQf7iT//BD/HB/NBkUR1LWxoeA=="],
 
     "anymatch": ["anymatch@3.1.3", "", { "dependencies": { "normalize-path": "^3.0.0", "picomatch": "^2.0.4" } }, "sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw=="],
 
@@ -665,55 +677,53 @@
 
     "archiver-utils": ["archiver-utils@5.0.2", "", { "dependencies": { "glob": "^10.0.0", "graceful-fs": "^4.2.0", "is-stream": "^2.0.1", "lazystream": "^1.0.0", "lodash": "^4.17.15", "normalize-path": "^3.0.0", "readable-stream": "^4.0.0" } }, "sha512-wuLJMmIBQYCsGZgYLTy5FIB2pF6Lfb6cXMSF8Qywwk3t20zWnAi7zLcQFdKQmIB8wyZpY5ER38x08GbwtR2cLA=="],
 
-    "array-buffer-byte-length": ["array-buffer-byte-length@1.0.2", "", { "dependencies": { "call-bound": "^1.0.3", "is-array-buffer": "^3.0.5" } }, "sha512-LHE+8BuR7RYGDKvnrmcuSq3tDcKv9OFEXQt/HpbZhY7V6h0zlUXutnAD82GiFx9rdieCMjkvtcsPqBwgUl1Iiw=="],
+    "argparse": ["argparse@2.0.1", "", {}, "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q=="],
+
+    "args-tokenizer": ["args-tokenizer@0.3.0", "", {}, "sha512-xXAd7G2Mll5W8uo37GETpQ2VrE84M181Z7ugHFGQnJZ50M2mbOv0osSZ9VsSgPfJQ+LVG0prSi0th+ELMsno7Q=="],
 
-    "arraybuffer.prototype.slice": ["arraybuffer.prototype.slice@1.0.4", "", { "dependencies": { "array-buffer-byte-length": "^1.0.1", "call-bind": "^1.0.8", "define-properties": "^1.2.1", "es-abstract": "^1.23.5", "es-errors": "^1.3.0", "get-intrinsic": "^1.2.6", "is-array-buffer": "^3.0.4" } }, "sha512-BNoCY6SXXPQ7gF2opIP4GBE+Xw7U+pHMYKuzjgCN3GwiaIR09UUeKfheyIry77QtrCBlC0KK0q5/TER/tYh3PQ=="],
+    "aria-hidden": ["aria-hidden@1.2.6", "", { "dependencies": { "tslib": "^2.0.0" } }, "sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA=="],
 
     "ast-kit": ["ast-kit@2.2.0", "", { "dependencies": { "@babel/parser": "^7.28.5", "pathe": "^2.0.3" } }, "sha512-m1Q/RaVOnTp9JxPX+F+Zn7IcLYMzM8kZofDImfsKZd8MbR+ikdOzTeztStWqfrqIxZnYWryyI9ePm3NGjnZgGw=="],
 
-    "ast-walker-scope": ["ast-walker-scope@0.8.3", "", { "dependencies": { "@babel/parser": "^7.28.4", "ast-kit": "^2.1.3" } }, "sha512-cbdCP0PGOBq0ASG+sjnKIoYkWMKhhz+F/h9pRexUdX2Hd38+WOlBkRKlqkGOSm0YQpcFMQBJeK4WspUAkwsEdg=="],
+    "ast-walker-scope": ["ast-walker-scope@0.10.0", "", { "dependencies": { "@babel/parser": "^8.0.0", "@babel/types": "^8.0.0", "ast-kit": "^3.0.0" } }, "sha512-KzvoxDfXNz2Gm8KYLh47K3qcY3Zza3WKOuh2xoqa7LBu6MDKWAZLovJtU9DuAd/Er+rhQHCRn619lHS5U+qmhw=="],
 
     "async": ["async@3.2.6", "", {}, "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA=="],
 
-    "async-function": ["async-function@1.0.0", "", {}, "sha512-hsU18Ae8CDTR6Kgu9DYf0EbCr/a5iGL0rytQDobUcdpYOKokk8LEjVphnXkDkgpi0wYVsqrXuP0bZxJaTqdgoA=="],
-
     "async-sema": ["async-sema@3.1.1", "", {}, "sha512-tLRNUXati5MFePdAk8dw7Qt7DpxPB60ofAgn8WRhW6a2rcimZnYBP9oxHiv0OHy+Wz7kPMG+t4LGdt31+4EmGg=="],
 
-    "at-least-node": ["at-least-node@1.0.0", "", {}, "sha512-+q/t7Ekv1EDY2l6Gda6LLiX14rU9TV20Wa3ofeQmwPFZbOMo9DXrLbOjFaaclkXKWidIaopwAObQDqwWtGUjqg=="],
+    "autoprefixer": ["autoprefixer@10.6.1", "", { "dependencies": { "browserslist": "^4.28.9", "caniuse-lite": "^1.0.30001810", "fraction.js": "^5.3.4", "picocolors": "^1.1.1", "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.1.0" }, "bin": { "autoprefixer": "bin/autoprefixer" } }, "sha512-cL1Qz6ADZhcEbny/8HPfe99J6HhNoYtpX2LFLIbhgGE7Q1hlQVkYFdetDN7Id3KiQxhDrHwzlHr/YQCnZ8+xSA=="],
 
-    "autoprefixer": ["autoprefixer@10.4.21", "", { "dependencies": { "browserslist": "^4.24.4", "caniuse-lite": "^1.0.30001702", "fraction.js": "^4.3.7", "normalize-range": "^0.1.2", "picocolors": "^1.1.1", "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.1.0" }, "bin": { "autoprefixer": "bin/autoprefixer" } }, "sha512-O+A6LWV5LDHSJD3LjHYoNi4VLsj/Whi7k6zG12xTYaU4cQ8oxQGckXNX8cRHK5yOZ/ppVHe0ZBXGzSV9jXdVbQ=="],
+    "b4a": ["b4a@1.9.0", "", { "peerDependencies": { "react-native-b4a": "*" }, "optionalPeers": ["react-native-b4a"] }, "sha512-dpfcF9fDNR6++cthXR67iyhgqWy9CBouAvIWhIntzBG6cvK/cnIPiZQjBwi/ZqjjBEDGfoNDtmB0kTjroOJ3pQ=="],
 
-    "available-typed-arrays": ["available-typed-arrays@1.0.7", "", { "dependencies": { "possible-typed-array-names": "^1.0.0" } }, "sha512-wvUjBtSGN7+7SjNpq/9M2Tg350UZD3q62IFZLbRAR1bSMlCo1ZaeW+BJ+D090e4hIIZLBcTDWe4Mh4jvUDajzQ=="],
+    "balanced-match": ["balanced-match@4.0.4", "", {}, "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA=="],
 
-    "b4a": ["b4a@1.6.7", "", {}, "sha512-OnAYlL5b7LEkALw87fUVafQw5rVR9RjwGd4KUwNQ6DrrNmaVaUCgLipfVlzrPQ4tWOR9P0IXGNOx50jYCCdSJg=="],
+    "bare-events": ["bare-events@2.9.2", "", { "peerDependencies": { "bare-abort-controller": "*" }, "optionalPeers": ["bare-abort-controller"] }, "sha512-AIPKioV7/Y/8KfZ3AAhjPJxLLbY49S64Ym5DakZlUg75qQiTgUq9hEJoEwa4eUezPUlXRy/i5NpsKvo9jgKmoA=="],
 
-    "babel-plugin-polyfill-corejs2": ["babel-plugin-polyfill-corejs2@0.4.13", "", { "dependencies": { "@babel/compat-data": "^7.22.6", "@babel/helper-define-polyfill-provider": "^0.6.4", "semver": "^6.3.1" }, "peerDependencies": { "@babel/core": "^7.4.0 || ^8.0.0-0 <8.0.0" } }, "sha512-3sX/eOms8kd3q2KZ6DAhKPc0dgm525Gqq5NtWKZ7QYYZEv57OQ54KtblzJzH1lQF/eQxO8KjWGIK9IPUJNus5g=="],
+    "bare-fs": ["bare-fs@4.8.4", "", { "dependencies": { "bare-events": "^2.5.4", "bare-path": "^3.0.0", "bare-stream": "^2.6.4", "bare-url": "^2.2.2", "fast-fifo": "^1.3.2" }, "peerDependencies": { "bare-buffer": "*" }, "optionalPeers": ["bare-buffer"] }, "sha512-MPC2eyrpbk3A873sK4y6rk+Iv4o2enxTjHZ8zH3HO0mjrpm5XjnguY2XmfidIsDV6vnjpbMBKUAJpV0ISD2SsQ=="],
 
-    "babel-plugin-polyfill-corejs3": ["babel-plugin-polyfill-corejs3@0.11.1", "", { "dependencies": { "@babel/helper-define-polyfill-provider": "^0.6.3", "core-js-compat": "^3.40.0" }, "peerDependencies": { "@babel/core": "^7.4.0 || ^8.0.0-0 <8.0.0" } }, "sha512-yGCqvBT4rwMczo28xkH/noxJ6MZ4nJfkVYdoDaC/utLtWrXxv27HVrzAeSbqR8SxDsp46n0YF47EbHoixy6rXQ=="],
+    "bare-path": ["bare-path@3.1.2", "", {}, "sha512-ZyKbsuuqK6Ag0K8pX6V5Txq6XeJRvY+wXucnFGRjiyVYP9YWDpIQugk/b+enRYrEYBJaqLzghRQpXPMR7341Nw=="],
 
-    "babel-plugin-polyfill-regenerator": ["babel-plugin-polyfill-regenerator@0.6.4", "", { "dependencies": { "@babel/helper-define-polyfill-provider": "^0.6.4" }, "peerDependencies": { "@babel/core": "^7.4.0 || ^8.0.0-0 <8.0.0" } }, "sha512-7gD3pRadPrbjhjLyxebmx/WrFYcuSjZ0XbdUujQMZ/fcE9oeewk2U/7PCvez84UeuK3oSjmPZ0Ch0dlupQvGzw=="],
+    "bare-stream": ["bare-stream@2.13.4", "", { "dependencies": { "b4a": "^1.8.1", "streamx": "^2.25.0", "teex": "^1.0.1" }, "peerDependencies": { "bare-abort-controller": "*", "bare-buffer": "*", "bare-events": "*" }, "optionalPeers": ["bare-abort-controller", "bare-buffer", "bare-events"] }, "sha512-PcrQ8lVLbiJscNm1Kez+Yp4Gy4AHGcN1lzwjvf5NybWen7VvEgUfyfnXYJ2zNqWnzOfCb1Abq6lH8ti0syQszA=="],
 
-    "balanced-match": ["balanced-match@1.0.2", "", {}, "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw=="],
-
-    "bare-events": ["bare-events@2.5.4", "", {}, "sha512-+gFfDkR8pj4/TrWCGUGWmJIkBwuxPS5F+a5yWjOHQt2hHvNZd5YLzadjmDUtFmMM4y429bnKLa8bYBMHcYdnQA=="],
+    "bare-url": ["bare-url@2.5.5", "", { "dependencies": { "bare-path": "^3.0.0" } }, "sha512-iM9qJCruvpt2rPaLsrumVDru9pogI7PHziHIa9kTNRFt8C8HuSa+kI9kFezK+NvHEFnnz71rKGZ1EAilq/3V/Q=="],
 
     "base64-js": ["base64-js@1.5.1", "", {}, "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA=="],
 
-    "baseline-browser-mapping": ["baseline-browser-mapping@2.8.29", "", { "bin": { "baseline-browser-mapping": "dist/cli.js" } }, "sha512-sXdt2elaVnhpDNRDz+1BDx1JQoJRuNk7oVlAlbGiFkLikHCAQiccexF/9e91zVi6RCgqspl04aP+6Cnl9zRLrA=="],
-
-    "bcrypt": ["bcrypt@6.0.0", "", { "dependencies": { "node-addon-api": "^8.3.0", "node-gyp-build": "^4.8.4" } }, "sha512-cU8v/EGSrnH+HnxV2z0J7/blxH8gq7Xh2JFT6Aroax7UohdmiJJlxApMxtKfuI7z68NvvVcmR78k2LbT6efhRg=="],
+    "baseline-browser-mapping": ["baseline-browser-mapping@2.11.29", "", { "bin": { "baseline-browser-mapping": "dist/cli.cjs" } }, "sha512-YeesxhUmR4h5y5V8KF8iBCqJb8YFrBJ++XBTeGcWIaQOYXGN19JM0FoiOjAhwuDoln8owMgXcWBmgHtYSkky2w=="],
 
     "bindings": ["bindings@1.5.0", "", { "dependencies": { "file-uri-to-path": "1.0.0" } }, "sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ=="],
 
-    "birpc": ["birpc@2.8.0", "", {}, "sha512-Bz2a4qD/5GRhiHSwj30c/8kC8QGj12nNDwz3D4ErQ4Xhy35dsSDvF+RA/tWpjyU0pdGtSDiEk6B5fBGE1qNVhw=="],
+    "birpc": ["birpc@4.2.0", "", {}, "sha512-KxgKcZPfrtzJDDALHPguGpGJUrzdgpymyiQQgzFjWreHMOpWrnFNVREr5J48x2DBh8ZVioscrV1SBkDipGiX+Q=="],
 
-    "boolbase": ["boolbase@1.0.0", "", {}, "sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww=="],
+    "bn.js": ["bn.js@4.12.5", "", {}, "sha512-3aRg6/JxfffFD+OlOjOFR3Vo79l39ooBTFucxx+MT3dhCtzn3EmiUPQo+6/OZuI2jbXi3YKgmiTFBgChQMwIRQ=="],
 
-    "brace-expansion": ["brace-expansion@1.1.11", "", { "dependencies": { "balanced-match": "^1.0.0", "concat-map": "0.0.1" } }, "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA=="],
+    "brace-expansion": ["brace-expansion@5.0.12", "", { "dependencies": { "balanced-match": "^4.0.2" } }, "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ=="],
 
     "braces": ["braces@3.0.3", "", { "dependencies": { "fill-range": "^7.1.1" } }, "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA=="],
 
-    "browserslist": ["browserslist@4.24.5", "", { "dependencies": { "caniuse-lite": "^1.0.30001716", "electron-to-chromium": "^1.5.149", "node-releases": "^2.0.19", "update-browserslist-db": "^1.1.3" }, "bin": { "browserslist": "cli.js" } }, "sha512-FDToo4Wo82hIdgc1CQ+NQD0hEhmpPjrZ3hiUgwgOG6IuTdlpr8jdjyG24P6cNP1yJpTLzS5OcGgSw0xmDU1/Tw=="],
+    "brorand": ["brorand@1.1.0", "", {}, "sha512-cKV8tMCEpQs4hK/ik71d6LrPOnpkpGBR0wzxqr68g2m/LB2GxVYQroAjMJZRVM1Y4BCjCKc3vAamxSzOY2RP+w=="],
+
+    "browserslist": ["browserslist@4.29.3", "", { "dependencies": { "baseline-browser-mapping": "^2.11.26", "caniuse-lite": "^1.0.30001813", "electron-to-chromium": "^1.5.439", "node-releases": "^2.0.57", "update-browserslist-db": "^1.3.3" }, "bin": { "browserslist": "cli.js" } }, "sha512-1R4kiYKXGViqEN0CnoDrXc1StD9niAwu+j2dukWzrD4bJgsD4lDmEp0CRbc6E/vYJIfTHwPmwyaKtVSudICdPA=="],
 
     "buffer": ["buffer@6.0.3", "", { "dependencies": { "base64-js": "^1.3.1", "ieee754": "^1.2.1" } }, "sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA=="],
 
@@ -721,47 +731,39 @@
 
     "buffer-from": ["buffer-from@1.1.2", "", {}, "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ=="],
 
-    "bun-types": ["bun-types@1.3.2", "", { "dependencies": { "@types/node": "*" }, "peerDependencies": { "@types/react": "^19" } }, "sha512-i/Gln4tbzKNuxP70OWhJRZz1MRfvqExowP7U6JKoI8cntFrtxg7RJK3jvz7wQW54UuvNC8tbKHHri5fy74FVqg=="],
-
-    "bundle-name": ["bundle-name@4.1.0", "", { "dependencies": { "run-applescript": "^7.0.0" } }, "sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q=="],
-
-    "c12": ["c12@3.3.2", "", { "dependencies": { "chokidar": "^4.0.3", "confbox": "^0.2.2", "defu": "^6.1.4", "dotenv": "^17.2.3", "exsolve": "^1.0.8", "giget": "^2.0.0", "jiti": "^2.6.1", "ohash": "^2.0.11", "pathe": "^2.0.3", "perfect-debounce": "^2.0.0", "pkg-types": "^2.3.0", "rc9": "^2.1.2" }, "peerDependencies": { "magicast": "*" }, "optionalPeers": ["magicast"] }, "sha512-QkikB2X5voO1okL3QsES0N690Sn/K9WokXqUsDQsWy5SnYb+psYQFGA10iy1bZHj3fjISKsI67Q90gruvWWM3A=="],
+    "bun-types": ["bun-types@1.4.3", "", { "dependencies": { "@types/node": "*", "undici-types": "*" } }, "sha512-tinRJNGOmUN+tEAsn2y2e942n9JHRHR42iUYzDH75NmhJqVBokGSQkkfSFdNWwsANIdrK6ACH9t01M452YyTwg=="],
 
-    "cac": ["cac@6.7.14", "", {}, "sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ=="],
+    "bundle-name": ["bundle-name@4.1.1", "", { "dependencies": { "run-applescript": "^7.0.0" } }, "sha512-DdH81/zPLVS11EUgWq3tEu/xn+EzljlMYooDNdzWEnFha3R3NBMpMV1UqYIpjYHV/SgpFKMIX1Oh7o06SjM/oA=="],
 
-    "call-bind": ["call-bind@1.0.8", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.0", "es-define-property": "^1.0.0", "get-intrinsic": "^1.2.4", "set-function-length": "^1.2.2" } }, "sha512-oKlSFMcMwpUg2ednkhQ454wfWiU/ul3CkJe/PEHcTKuiX6RpbehUiFMXu13HalGZxfUwCQzZG747YXBn1im9ww=="],
+    "c12": ["c12@2.0.4", "", { "dependencies": { "chokidar": "^4.0.3", "confbox": "^0.1.8", "defu": "^6.1.4", "dotenv": "^16.4.7", "giget": "^1.2.4", "jiti": "^2.4.2", "mlly": "^1.7.4", "ohash": "^2.0.4", "pathe": "^2.0.3", "perfect-debounce": "^1.0.0", "pkg-types": "^1.3.1", "rc9": "^2.1.2" }, "peerDependencies": { "magicast": "^0.3.5" }, "optionalPeers": ["magicast"] }, "sha512-3DbbhnFt0fKJHxU4tEUPmD1ahWE4PWPMomqfYsTJdrhpmEnRKJi3qSC4rO5U6E6zN1+pjBY7+z8fUmNRMaVKLw=="],
 
-    "call-bind-apply-helpers": ["call-bind-apply-helpers@1.0.2", "", { "dependencies": { "es-errors": "^1.3.0", "function-bind": "^1.1.2" } }, "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ=="],
+    "cac": ["cac@7.1.0", "", {}, "sha512-LMDU/U2yA4IPIY8KT0NsNPWEYZvAMkbgyspxJ6btJaYV+WMDOHAZCmB0lsTObiHaRS1V/ztKAl7+TSkTqXyeoA=="],
 
-    "call-bound": ["call-bound@1.0.4", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "get-intrinsic": "^1.3.0" } }, "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg=="],
+    "caniuse-api": ["caniuse-api@4.0.0", "", { "dependencies": { "browserslist": "^4.0.0", "caniuse-lite": "^1.0.0" } }, "sha512-B0hQ1OLyJuHTQSOWXvwibWqM6DCoqJdvBA6X1S/53bd4XU7LJ1yurIPlrsouol3mw1jh9pGI4ivubSpmJeIqCA=="],
 
-    "caniuse-api": ["caniuse-api@3.0.0", "", { "dependencies": { "browserslist": "^4.0.0", "caniuse-lite": "^1.0.0", "lodash.memoize": "^4.1.2", "lodash.uniq": "^4.5.0" } }, "sha512-bsTwuIg/BZZK/vreVTYYbSWoe2F+71P7K5QGEX+pT250DZbfU1MQ5prOKpPR+LL6uWKK3KMwMCAS74QB3Um1uw=="],
+    "caniuse-lite": ["caniuse-lite@1.0.30001816", "", {}, "sha512-+8Yx7BXCoqk6IF8yTicjfUR6D/ldJzdlsodlEOiOSPmhK844WIgk67/zIQaGAOxNkZyyvBlrRFnLvqKIoqbAFw=="],
 
-    "caniuse-lite": ["caniuse-lite@1.0.30001718", "", {}, "sha512-AflseV1ahcSunK53NfEs9gFWgOEmzr0f+kaMFA4xiLZlr9Hzt7HxcSpIFcnNCUkz6R6dWKa54rUz3HUmI3nVcw=="],
+    "chokidar": ["chokidar@5.0.0", "", { "dependencies": { "readdirp": "^5.0.0" } }, "sha512-TQMmc3w+5AxjpL8iIiwebF73dRDF4fBIieAqGn9RGCWaEVwQ6Fb2cGe31Yns0RRIzii5goJ1Y7xbMwo1TxMplw=="],
 
-    "chalk": ["chalk@4.1.2", "", { "dependencies": { "ansi-styles": "^4.1.0", "supports-color": "^7.1.0" } }, "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA=="],
+    "chownr": ["chownr@2.0.0", "", {}, "sha512-bIomtDF5KGpdogkLd9VspvFzk9KfpyyGlS8YFVZl7TGPBHL5snIOnxeshwVgPteQ9b4Eydl+pVbIyE1DcvCWgQ=="],
 
-    "chokidar": ["chokidar@4.0.3", "", { "dependencies": { "readdirp": "^4.0.1" } }, "sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA=="],
+    "citty": ["citty@0.2.2", "", {}, "sha512-+6vJA3L98yv+IdfKGZHBNiGW5KHn22e/JwID0Strsz8h4S/csAu/OuICwxrg44k5MRiZHWIo8XXuJgQTriRP4w=="],
 
-    "chownr": ["chownr@3.0.0", "", {}, "sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g=="],
+    "clickable-path": ["clickable-path@0.1.1", "", {}, "sha512-ROn/mdV2pR8WFdpJjFDCSouLRg9myf95xacO1iy8G/AVO/x5y124pjF3EaoWrTBRWC3vh0DPqa/MhKyx3mMeKg=="],
 
-    "citty": ["citty@0.1.6", "", { "dependencies": { "consola": "^3.2.3" } }, "sha512-tskPPKEs8D2KPafUypv2gxwJP8h/OaJmC82QQGGDQcHvXX43xF2VDACcJVmZ0EuSxkpO9Kc4MlrA3q0+FG58AQ=="],
+    "cliui": ["cliui@9.0.1", "", { "dependencies": { "string-width": "^7.2.0", "strip-ansi": "^7.1.0", "wrap-ansi": "^9.0.0" } }, "sha512-k7ndgKhwoQveBL+/1tqGJYNz097I7WOvwbmmU2AR5+magtbjPWQTS1C5vzGkBC8Ym8UWRzfKUzUUqFLypY4Q+w=="],
 
-    "clipboardy": ["clipboardy@4.0.0", "", { "dependencies": { "execa": "^8.0.1", "is-wsl": "^3.1.0", "is64bit": "^2.0.0" } }, "sha512-5mOlNS0mhX0707P2I0aZ2V/cmHUEO/fL7VFLqszkhUsxt7RwnmrInf/eEQKlf5GzvYeHIjT+Ov1HRfNmymlG0w=="],
-
-    "cliui": ["cliui@8.0.1", "", { "dependencies": { "string-width": "^4.2.0", "strip-ansi": "^6.0.1", "wrap-ansi": "^7.0.0" } }, "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ=="],
-
-    "cluster-key-slot": ["cluster-key-slot@1.1.2", "", {}, "sha512-RMr0FhtfXemyinomL4hrWcYJxmX6deFdCxpJzhDttxgO1+bcCnkk+9drydLVDmAMG7NE6aN/fl4F7ucU/90gAA=="],
+    "cluster-key-slot": ["cluster-key-slot@1.1.1", "", {}, "sha512-rwHwUfXL40Chm1r08yrhU3qpUvdVlgkKNeyeGPOxnW8/SyVDvgRaed/Uz54AqWNaTCAThlj6QAs3TZcKI0xDEw=="],
 
     "color-convert": ["color-convert@2.0.1", "", { "dependencies": { "color-name": "~1.1.4" } }, "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ=="],
 
     "color-name": ["color-name@1.1.4", "", {}, "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA=="],
 
-    "colord": ["colord@2.9.3", "", {}, "sha512-jeC1axXpnb0/2nn/Y1LPuLdgXBLH7aDcHu4KEKfqw3CUhX7ZpfBSlPKyqXE6btIgEzfWtrX3/tyBCaCvXvMkOw=="],
+    "color-support": ["color-support@1.1.3", "", { "bin": { "color-support": "bin.js" } }, "sha512-qiBjkpbMLO/HL68y+lh4q0/O1MZFj2RX6X/KmMa3+gJD3z+WwI1ZzDHysvqHGS3mP6mznPckpXmw1nI9cJjyRg=="],
 
-    "commander": ["commander@2.20.3", "", {}, "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ=="],
+    "colortranslator": ["colortranslator@5.0.0", "", {}, "sha512-Z3UPUKasUVDFCDYAjP2fmlVRf1jFHJv1izAmPjiOa0OCIw1W7iC8PZ2GsoDa8uZv+mKyWopxxStT9q05+27h7w=="],
 
-    "common-tags": ["common-tags@1.8.2", "", {}, "sha512-gk/Z852D2Wtb//0I+kRFNKKE9dIIVirjoqPoA1wJU+XePVXZfGeBpk45+A1rKO4Q43prqWBNY/MiIeRLbPWUaA=="],
+    "commander": ["commander@15.0.0", "", {}, "sha512-z67u4ZhzCL/Tydu1lJARtEZYWbWaN7oYLHbsuzocr6y4N6WZAagG3RQ4FW61V1/0+jImpj293XfrcYnd1qxtPg=="],
 
     "commondir": ["commondir@1.0.1", "", {}, "sha512-W9pAhw0ja1Edb5GVdIF1mjZw/ASI0AlShXM83UUGe2DVr5TdAPEA1OA8m/g8zWp9x6On7gqufY+FatDbC3MDQg=="],
 
@@ -769,21 +771,13 @@
 
     "compress-commons": ["compress-commons@6.0.2", "", { "dependencies": { "crc-32": "^1.2.0", "crc32-stream": "^6.0.0", "is-stream": "^2.0.1", "normalize-path": "^3.0.0", "readable-stream": "^4.0.0" } }, "sha512-6FqVXeETqWPoGcfzrXb37E50NP0LXT8kAMu5ooZayhWWdgEY4lBEEcbQNXtkuKQsGduxiIcI4gOTsxTmuq/bSg=="],
 
-    "concat-map": ["concat-map@0.0.1", "", {}, "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg=="],
-
-    "confbox": ["confbox@0.2.2", "", {}, "sha512-1NB+BKqhtNipMsov4xI/NnhCKp9XG9NamYp5PVm9klAT0fsrNPjaFICsCFhNhwZJKNh7zB/3q8qXz0E9oaMNtQ=="],
+    "confbox": ["confbox@0.3.1", "", {}, "sha512-cKUSoKa8YxFZZSmraVi7onONx3amu77ngK3kGpsYHDH7drPwCRkQE1RYMPlLRrMtnciRj274XNRxcHxnKmDSnA=="],
 
     "consola": ["consola@3.4.2", "", {}, "sha512-5IKcdX0nnYavi6G7TtOhwkYzyjfJlatbjMjuLSfE2kYT5pMDOilZ4OvMhi637CcDICTmz3wARPoyhqyX1Y+XvA=="],
 
     "convert-source-map": ["convert-source-map@2.0.0", "", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="],
 
-    "cookie-es": ["cookie-es@2.0.0", "", {}, "sha512-RAj4E421UYRgqokKUmotqAwuplYw15qtdXfY+hGzgCJ/MBjCVZcSoHK/kH9kocfjRjcDME7IiDWR/1WX1TM2Pg=="],
-
-    "copy-anything": ["copy-anything@3.0.5", "", { "dependencies": { "is-what": "^4.1.8" } }, "sha512-yCEafptTtb4bk7GLEQoM8KVJpxAfdBJYaXyzQEgQQQgYrZiDp8SJmGKlYza6CYjEDNstAdNdKA3UuoULlEbS6w=="],
-
-    "copy-paste": ["copy-paste@2.2.0", "", { "dependencies": { "iconv-lite": "^0.4.8" } }, "sha512-jqSL4r9DSeiIvJZStLzY/sMLt9ToTM7RsK237lYOTG+KcbQJHGala3R1TUpa8h1p9adswVgIdV4qGbseVhL4lg=="],
-
-    "core-js-compat": ["core-js-compat@3.42.0", "", { "dependencies": { "browserslist": "^4.24.4" } }, "sha512-bQasjMfyDGyaeWKBIu33lHh9qlSR0MFE/Nmc6nMjf/iU9b3rSMdAYz1Baxrv4lPdGUsTqZudHA4jIGSJy0SWZQ=="],
+    "cookie-es": ["cookie-es@3.1.1", "", {}, "sha512-UaXxwISYJPTr9hwQxMFYZ7kNhSXboMXP+Z3TRX6f1/NyaGPfuNUZOWP1pUEb75B2HjfklIYLVRfWiFZJyC6Npg=="],
 
     "core-util-is": ["core-util-is@1.0.3", "", {}, "sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ=="],
 
@@ -791,60 +785,30 @@
 
     "crc32-stream": ["crc32-stream@6.0.0", "", { "dependencies": { "crc-32": "^1.2.0", "readable-stream": "^4.0.0" } }, "sha512-piICUB6ei4IlTv1+653yq5+KoqfBYmj9bw6LqXoOneTMDXk5nM1qt12mFW1caG3LlJXEKW1Bp0WggEmIfQB34g=="],
 
-    "cron": ["cron@4.3.4", "", { "dependencies": { "@types/luxon": "~3.7.0", "luxon": "~3.7.0" } }, "sha512-OiO0l73MGhQOZQCjYZ0v7r8yFWpBOWteemwR1RIxiHtfVsIOwiTJZDvg7GmKzggkwC0RO8tI3P1QYBUCIZNYRQ=="],
-
-    "croner": ["croner@9.1.0", "", {}, "sha512-p9nwwR4qyT5W996vBZhdvBCnMhicY5ytZkR4D1Xj0wuTDEiMnjwR57Q3RXYY/s0EpX6Ay3vgIcfaR+ewGHsi+g=="],
+    "croner": ["croner@10.0.1", "", {}, "sha512-ixNtAJndqh173VQ4KodSdJEI6nuioBWI0V1ITNKhZZsO0pEMoDxz539T4FTTbSZ/xIOSuDnzxLVRqBVSvPNE2g=="],
 
     "cross-spawn": ["cross-spawn@7.0.6", "", { "dependencies": { "path-key": "^3.1.0", "shebang-command": "^2.0.0", "which": "^2.0.1" } }, "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA=="],
 
     "crossws": ["crossws@0.3.5", "", { "dependencies": { "uncrypto": "^0.1.3" } }, "sha512-ojKiDvcmByhwa8YYqbQI/hg7MEU0NC03+pSdEq4ZUnZR9xXpwk7E43SMNGkn+JxJGPFtNvQ48+vV2p+P1ml5PA=="],
 
-    "crypto-random-string": ["crypto-random-string@2.0.0", "", {}, "sha512-v1plID3y9r/lPhviJ1wrXpLeyUIGAZ2SHNYTEapm7/8A9nLPoyvVp3RK/EPFqn5kEznyWgYZNsRtYYIWbuG8KA=="],
-
-    "css-declaration-sorter": ["css-declaration-sorter@7.2.0", "", { "peerDependencies": { "postcss": "^8.0.9" } }, "sha512-h70rUM+3PNFuaBDTLe8wF/cdWu+dOZmb7pJt8Z2sedYbAcQVQV/tEchueg3GWxwqS0cxtbxmaHEdkNACqcvsow=="],
-
-    "css-select": ["css-select@5.1.0", "", { "dependencies": { "boolbase": "^1.0.0", "css-what": "^6.1.0", "domhandler": "^5.0.2", "domutils": "^3.0.1", "nth-check": "^2.0.1" } }, "sha512-nwoRF1rvRRnnCqqY7updORDsuqKzqYJ28+oSMaJMMgOauh3fvwHqMS7EZpIPqK8GL+g9mKxF1vP/ZjSeNjEVHg=="],
+    "css-tree": ["css-tree@3.2.1", "", { "dependencies": { "mdn-data": "2.27.1", "source-map-js": "^1.2.1" } }, "sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA=="],
 
-    "css-tree": ["css-tree@3.1.0", "", { "dependencies": { "mdn-data": "2.12.2", "source-map-js": "^1.0.1" } }, "sha512-0eW44TGN5SQXU1mWSkKwFstI/22X2bG1nYzZTYMAWjylYURhse752YgbE4Cx46AC+bAvI+/dYTPRk1LqSUnu6w=="],
+    "cssnano": ["cssnano@9.9.0", "", { "dependencies": { "@colordx/core": "^7.3.0", "@csstools/css-tokenizer": "^4.0.2", "browserslist": "^4.29.3", "caniuse-api": "^4.0.0", "postcss-calc": "^11.2.2" }, "peerDependencies": { "postcss": "^8.5.29" } }, "sha512-JS914Th2NRk2979JHJvbE3UjPtLmyXtPnr23NNul9BOQwEt9r/A2aM1STrKtKHAPc3XRaUDwMoqkXnjEpgHkAw=="],
 
-    "css-what": ["css-what@6.1.0", "", {}, "sha512-HTUrgRJ7r4dsZKU6GjmpfRK1O76h97Z8MfS1G0FozR+oF2kG6Vfe8JE6zwrkbxigziPHinCJ+gCPjA9EaBDtRw=="],
-
-    "cssesc": ["cssesc@3.0.0", "", { "bin": { "cssesc": "bin/cssesc" } }, "sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg=="],
-
-    "cssnano": ["cssnano@7.1.2", "", { "dependencies": { "cssnano-preset-default": "^7.0.10", "lilconfig": "^3.1.3" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-HYOPBsNvoiFeR1eghKD5C3ASm64v9YVyJB4Ivnl2gqKoQYvjjN/G0rztvKQq8OxocUtC6sjqY8jwYngIB4AByA=="],
-
-    "cssnano-preset-default": ["cssnano-preset-default@7.0.10", "", { "dependencies": { "browserslist": "^4.27.0", "css-declaration-sorter": "^7.2.0", "cssnano-utils": "^5.0.1", "postcss-calc": "^10.1.1", "postcss-colormin": "^7.0.5", "postcss-convert-values": "^7.0.8", "postcss-discard-comments": "^7.0.5", "postcss-discard-duplicates": "^7.0.2", "postcss-discard-empty": "^7.0.1", "postcss-discard-overridden": "^7.0.1", "postcss-merge-longhand": "^7.0.5", "postcss-merge-rules": "^7.0.7", "postcss-minify-font-values": "^7.0.1", "postcss-minify-gradients": "^7.0.1", "postcss-minify-params": "^7.0.5", "postcss-minify-selectors": "^7.0.5", "postcss-normalize-charset": "^7.0.1", "postcss-normalize-display-values": "^7.0.1", "postcss-normalize-positions": "^7.0.1", "postcss-normalize-repeat-style": "^7.0.1", "postcss-normalize-string": "^7.0.1", "postcss-normalize-timing-functions": "^7.0.1", "postcss-normalize-unicode": "^7.0.5", "postcss-normalize-url": "^7.0.1", "postcss-normalize-whitespace": "^7.0.1", "postcss-ordered-values": "^7.0.2", "postcss-reduce-initial": "^7.0.5", "postcss-reduce-transforms": "^7.0.1", "postcss-svgo": "^7.1.0", "postcss-unique-selectors": "^7.0.4" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-6ZBjW0Lf1K1Z+0OKUAUpEN62tSXmYChXWi2NAA0afxEVsj9a+MbcB1l5qel6BHJHmULai2fCGRthCeKSFbScpA=="],
-
-    "cssnano-utils": ["cssnano-utils@5.0.1", "", { "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-ZIP71eQgG9JwjVZsTPSqhc6GHgEr53uJ7tK5///VfyWj6Xp2DBmixWHqJgPno+PqATzn48pL42ww9x5SSGmhZg=="],
-
-    "csso": ["csso@5.0.5", "", { "dependencies": { "css-tree": "~2.2.0" } }, "sha512-0LrrStPOdJj+SPCCrGhzryycLjwcgUSHBtxNA8aIDxf0GLsRh1cKYhB00Gd1lDOS4yGH69+SNn13+TWbVHETFQ=="],
-
-    "csstype": ["csstype@3.1.3", "", {}, "sha512-M1uQkMl8rQK/szD0LNhtqxIPLpimGm8sOBwU7lLnCpSbTyY3yeU1Vc7l4KT5zT4s/yOxHH5O7tIuuLOCnLADRw=="],
-
-    "data-uri-to-buffer": ["data-uri-to-buffer@4.0.1", "", {}, "sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A=="],
-
-    "data-view-buffer": ["data-view-buffer@1.0.2", "", { "dependencies": { "call-bound": "^1.0.3", "es-errors": "^1.3.0", "is-data-view": "^1.0.2" } }, "sha512-EmKO5V3OLXh1rtK2wgXRansaK1/mtVdTUEiEI0W8RkvgT05kfxaH29PliLnpLP73yYO6142Q72QNa8Wx/A5CqQ=="],
-
-    "data-view-byte-length": ["data-view-byte-length@1.0.2", "", { "dependencies": { "call-bound": "^1.0.3", "es-errors": "^1.3.0", "is-data-view": "^1.0.2" } }, "sha512-tuhGbE6CfTM9+5ANGf+oQb72Ky/0+s3xKUpHvShfiz2RxMFgFPjsXuRLBVMtvMs15awe45SRb83D6wH4ew6wlQ=="],
-
-    "data-view-byte-offset": ["data-view-byte-offset@1.0.1", "", { "dependencies": { "call-bound": "^1.0.2", "es-errors": "^1.3.0", "is-data-view": "^1.0.1" } }, "sha512-BS8PfmtDGnrgYdOonGZQdLZslWIeCGFP9tpan0hi1Co2Zr2NKADsvGYA8XxuG/4UWgJ6Cjtv+YJnB6MM69QGlQ=="],
+    "csstype": ["csstype@3.2.3", "", {}, "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ=="],
 
     "db0": ["db0@0.3.4", "", { "peerDependencies": { "@electric-sql/pglite": "*", "@libsql/client": "*", "better-sqlite3": "*", "drizzle-orm": "*", "mysql2": "*", "sqlite3": "*" }, "optionalPeers": ["@electric-sql/pglite", "@libsql/client", "better-sqlite3", "drizzle-orm", "mysql2", "sqlite3"] }, "sha512-RiXXi4WaNzPTHEOu8UPQKMooIbqOEyqA1t7Z6MsdxSCeb8iUC9ko3LcmsLmeUt2SM5bctfArZKkRQggKZz7JNw=="],
 
-    "debug": ["debug@4.4.0", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA=="],
+    "debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
 
     "deepmerge": ["deepmerge@4.3.1", "", {}, "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A=="],
 
-    "default-browser": ["default-browser@5.2.1", "", { "dependencies": { "bundle-name": "^4.1.0", "default-browser-id": "^5.0.0" } }, "sha512-WY/3TUME0x3KPYdRRxEJJvXRHV4PyPoUsxtZa78lwItwRQRHhd2U9xOscaT/YTf8uCXIAjeJOFBVEh/7FtD8Xg=="],
-
-    "default-browser-id": ["default-browser-id@5.0.0", "", {}, "sha512-A6p/pu/6fyBcA1TRz/GqWYPViplrftcW2gZC9q79ngNCKAeR/X3gcEdXQHl4KNXV+3wgIJ1CPkJQ3IHM6lcsyA=="],
+    "default-browser": ["default-browser@5.5.1", "", { "dependencies": { "bundle-name": "^4.1.0", "default-browser-id": "^5.0.0" } }, "sha512-m1pAzaJgZ/gssEqlOhJkPJp8Xly7QyW6xcrkUa2KKcDeDSEMP7X8xipU3snUcfisTQx0w1AGae+9UtJSfVnXGw=="],
 
-    "define-data-property": ["define-data-property@1.1.4", "", { "dependencies": { "es-define-property": "^1.0.0", "es-errors": "^1.3.0", "gopd": "^1.0.1" } }, "sha512-rBMvIzlpA8v6E+SJZoo++HAYqsLrkg7MSfIinMPFhmkorw7X+dOXVJQs+QT69zGkzMyfDnIMN2Wid1+NbL3T+A=="],
+    "default-browser-id": ["default-browser-id@5.0.1", "", {}, "sha512-x1VCxdX4t+8wVfd1so/9w+vQ4vx7lKd2Qp5tDRutErwmR85OgmfX7RlLRMWafRMY7hbEiXIbudNrjOAPa/hL8Q=="],
 
     "define-lazy-prop": ["define-lazy-prop@3.0.0", "", {}, "sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg=="],
 
-    "define-properties": ["define-properties@1.2.1", "", { "dependencies": { "define-data-property": "^1.0.1", "has-property-descriptors": "^1.0.0", "object-keys": "^1.1.1" } }, "sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg=="],
-
     "defu": ["defu@6.1.4", "", {}, "sha512-mEQCMmwJu317oSz8CwdIOdwf3xMif1ttiM8LTufzc3g6kR+9Pe236twL8j3IYT1F7GfRgGcW6MWxzZjLIkuHIg=="],
 
     "denque": ["denque@2.1.0", "", {}, "sha512-HVQE3AAb/pxF8fQAoiqpvg9i3evqug3hoiwakOyZAwJm+6vZehbkYXZ0l4JxS+I3QxM97v5aaRNhj8v5oBhekw=="],
@@ -855,23 +819,19 @@
 
     "detect-libc": ["detect-libc@2.0.2", "", {}, "sha512-UX6sGumvvqSaXgdKGUsgZWqcUyIXZ/vZTrlRT/iobiKhGL0zL4d3osHj3uqllWJK+i+sixDS/3COVEOFbupFyw=="],
 
-    "devalue": ["devalue@5.5.0", "", {}, "sha512-69sM5yrHfFLJt0AZ9QqZXGCPfJ7fQjvpln3Rq5+PS03LD32Ost1Q9N+eEnaQwGRIriKkMImXD56ocjQmfjbV3w=="],
+    "devalue": ["devalue@6.0.3", "", {}, "sha512-3woMEITftG1wKeO/4d/QXH1DVKctTSZg3jNGPpjp9hNr5Hos8MCFF5McTML5ZtgKDObm2R591B0spRp2IVernA=="],
 
-    "diff": ["diff@8.0.2", "", {}, "sha512-sSuxWU5j5SR9QQji/o2qMvqRNYRDOcBTgsJ/DeCf4iSN4gW+gNMXM7wFIP+fdXZxoNiAnHUTGjCr+TSWXdRDKg=="],
+    "diff": ["diff@8.0.4", "", {}, "sha512-DPi0FmjiSU5EvQV0++GFDOJ9ASQUVFh5kD+OzOnYdi7n3Wpm9hWWGfB/O2blfHcMVTL5WkQXSnRiK9makhrcnw=="],
 
-    "dom-serializer": ["dom-serializer@2.0.0", "", { "dependencies": { "domelementtype": "^2.3.0", "domhandler": "^5.0.2", "entities": "^4.2.0" } }, "sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg=="],
+    "dot-prop": ["dot-prop@10.2.0", "", { "dependencies": { "type-fest": "^5.0.0" } }, "sha512-BTJ9aZYL3vCfZlZOBLy9v8TUqWGQ0pzFnygKwFZt5udj6viBoFIBviKPUoZLDCPn1FoXffv6McQFDenrm5Krfw=="],
 
-    "domelementtype": ["domelementtype@2.3.0", "", {}, "sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw=="],
+    "dotenv": ["dotenv@16.6.1", "", {}, "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow=="],
 
-    "domhandler": ["domhandler@5.0.3", "", { "dependencies": { "domelementtype": "^2.3.0" } }, "sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w=="],
+    "drizzle-kit": ["drizzle-kit@0.31.11", "", { "dependencies": { "@drizzle-team/brocli": "^0.10.2", "@esbuild-kit/esm-loader": "^2.5.5", "esbuild": "^0.25.4", "tsx": "^4.21.0" }, "bin": { "drizzle-kit": "bin.cjs" } }, "sha512-YCYqxTLIB2OCqf6w9/Vef13baBVbwQIPcbT4Y56AfO6B9ajZhDhD8Jkveg/hJvT/iuMloKD/IYYkyMMNhr7Kqg=="],
 
-    "domutils": ["domutils@3.2.2", "", { "dependencies": { "dom-serializer": "^2.0.0", "domelementtype": "^2.3.0", "domhandler": "^5.0.3" } }, "sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw=="],
+    "drizzle-orm": ["drizzle-orm@0.45.4", "", { "peerDependencies": { "@aws-sdk/client-rds-data": ">=3", "@cloudflare/workers-types": ">=4", "@electric-sql/pglite": ">=0.2.0", "@libsql/client": ">=0.10.0", "@libsql/client-wasm": ">=0.10.0", "@neondatabase/serverless": ">=0.10.0", "@netlify/db": ">=0.4.0", "@op-engineering/op-sqlite": ">=2", "@opentelemetry/api": "^1.4.1", "@planetscale/database": ">=1.13", "@prisma/client": "*", "@tidbcloud/serverless": "*", "@types/better-sqlite3": "*", "@types/pg": "*", "@types/sql.js": "*", "@upstash/redis": ">=1.34.7", "@vercel/postgres": ">=0.8.0", "@xata.io/client": "*", "better-sqlite3": ">=7", "bun-types": "*", "expo-sqlite": ">=14.0.0", "gel": ">=2", "knex": "*", "kysely": "*", "mysql2": ">=2", "pg": ">=8", "postgres": ">=3", "prisma": "*", "sql.js": ">=1", "sqlite3": ">=5" }, "optionalPeers": ["@aws-sdk/client-rds-data", "@cloudflare/workers-types", "@electric-sql/pglite", "@libsql/client", "@libsql/client-wasm", "@neondatabase/serverless", "@netlify/db", "@op-engineering/op-sqlite", "@opentelemetry/api", "@planetscale/database", "@prisma/client", "@tidbcloud/serverless", "@types/better-sqlite3", "@types/pg", "@types/sql.js", "@upstash/redis", "@vercel/postgres", "@xata.io/client", "better-sqlite3", "bun-types", "expo-sqlite", "gel", "knex", "kysely", "mysql2", "pg", "postgres", "prisma", "sql.js", "sqlite3"] }, "sha512-NiM1YZpJ2UxyeE67DpDDZ+Tsw4YLX3trSlkNT7Tm9eKoUNb1LvaAaQzXgYQsWs+AQ9TUmmwMmBOCXuqqxUWKKQ=="],
 
-    "dot-prop": ["dot-prop@10.1.0", "", { "dependencies": { "type-fest": "^5.0.0" } }, "sha512-MVUtAugQMOff5RnBy2d9N31iG0lNwg1qAoAOn7pOK5wf94WIaE3My2p3uwTQuvS2AcqchkcR3bHByjaM0mmi7Q=="],
-
-    "dotenv": ["dotenv@16.5.0", "", {}, "sha512-m/C+AwOAr9/W1UOIZUo232ejMNnJAJtYQjUbHoNTBNTJSvqzzDh7vnrei3o3r3m9blf6ZoDkvcw0VmozNRFJxg=="],
-
-    "dunder-proto": ["dunder-proto@1.0.1", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.1", "es-errors": "^1.3.0", "gopd": "^1.2.0" } }, "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A=="],
+    "drizzle-zod": ["drizzle-zod@0.8.3", "", { "peerDependencies": { "drizzle-orm": ">=0.36.0", "zod": "^3.25.0 || ^4.0.0" } }, "sha512-66yVOuvGhKJnTdiqj1/Xaaz9/qzOdRJADpDa68enqS6g3t0kpNkwNYjUuaeXgZfO/UWuIM9HIhSlJ6C5ZraMww=="],
 
     "duplexer": ["duplexer@0.1.2", "", {}, "sha512-jtD6YG370ZCIi/9GTaJKQxWTZD045+4R4hTk/x1UyoqadyJ9x9CgSi1RlVDQF8U2sxLLSnFkCaMihqljHIWgMg=="],
 
@@ -879,35 +839,43 @@
 
     "ee-first": ["ee-first@1.1.1", "", {}, "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow=="],
 
-    "ejs": ["ejs@3.1.10", "", { "dependencies": { "jake": "^10.8.5" }, "bin": { "ejs": "bin/cli.js" } }, "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA=="],
+    "electron-to-chromium": ["electron-to-chromium@1.5.459", "", {}, "sha512-4SC9HHSFjO/liAhifpdOL5hG9b4BP7/5G3y3UPZVO8trlAXr1CaUEEJL0gWK3kOcYcZrOA5rkwG45Gra/lTIgg=="],
 
-    "electron-to-chromium": ["electron-to-chromium@1.5.152", "", {}, "sha512-xBOfg/EBaIlVsHipHl2VdTPJRSvErNUaqW8ejTq5OlOlIYx1wOllCHsAvAIrr55jD1IYEfdR86miUEt8H5IeJg=="],
+    "elliptic": ["elliptic@6.6.1", "", { "dependencies": { "bn.js": "^4.11.9", "brorand": "^1.1.0", "hash.js": "^1.0.0", "hmac-drbg": "^1.0.1", "inherits": "^2.0.4", "minimalistic-assert": "^1.0.1", "minimalistic-crypto-utils": "^1.0.1" } }, "sha512-RaddvvMatK2LJHqFJ+YA4WysVN5Ita9E35botqIYspQ4TkRAlCicdzKOjlyv/1Za5RyTNn7di//eEV0uTAfe3g=="],
 
-    "emoji-regex": ["emoji-regex@8.0.0", "", {}, "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A=="],
+    "embla-carousel": ["embla-carousel@8.6.0", "", {}, "sha512-SjWyZBHJPbqxHOzckOfo8lHisEaJWmwd23XppYFYVh10bU66/Pn5tkVkbkCMZVdbUE5eTCI2nD8OyIP4Z+uwkA=="],
 
-    "encodeurl": ["encodeurl@2.0.0", "", {}, "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg=="],
+    "embla-carousel-auto-height": ["embla-carousel-auto-height@8.6.0", "", { "peerDependencies": { "embla-carousel": "8.6.0" } }, "sha512-/HrJQOEM6aol/oF33gd2QlINcXy3e19fJWvHDuHWp2bpyTa+2dm9tVVJak30m2Qy6QyQ6Fc8DkImtv7pxWOJUQ=="],
 
-    "enhanced-resolve": ["enhanced-resolve@5.18.1", "", { "dependencies": { "graceful-fs": "^4.2.4", "tapable": "^2.2.0" } }, "sha512-ZSW3ma5GkcQBIpwZTSRAI8N71Uuwgs93IezB7mf7R60tC8ZbJideoDNKjHn2O9KIlx6rkGTTEk1xUCK2E1Y2Yg=="],
+    "embla-carousel-auto-scroll": ["embla-carousel-auto-scroll@8.6.0", "", { "peerDependencies": { "embla-carousel": "8.6.0" } }, "sha512-WT9fWhNXFpbQ6kP+aS07oF5IHYLZ1Dx4DkwgCY8Hv2ZyYd2KMCPfMV1q/cA3wFGuLO7GMgKiySLX90/pQkcOdQ=="],
 
-    "entities": ["entities@4.5.0", "", {}, "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw=="],
+    "embla-carousel-autoplay": ["embla-carousel-autoplay@8.6.0", "", { "peerDependencies": { "embla-carousel": "8.6.0" } }, "sha512-OBu5G3nwaSXkZCo1A6LTaFMZ8EpkYbwIaH+bPqdBnDGQ2fh4+NbzjXjs2SktoPNKCtflfVMc75njaDHOYXcrsA=="],
 
-    "error-stack-parser-es": ["error-stack-parser-es@1.0.5", "", {}, "sha512-5qucVt2XcuGMcEGgWI7i+yZpmpByQ8J1lHhcL7PwqCwu9FPP3VUXzT4ltHe5i2z9dePwEHcDVOAfSnHsOlCXRA=="],
+    "embla-carousel-class-names": ["embla-carousel-class-names@8.6.0", "", { "peerDependencies": { "embla-carousel": "8.6.0" } }, "sha512-l1hm1+7GxQ+zwdU2sea/LhD946on7XO2qk3Xq2XWSwBaWfdgchXdK567yzLtYSHn4sWYdiX+x4nnaj+saKnJkw=="],
 
-    "errx": ["errx@0.1.0", "", {}, "sha512-fZmsRiDNv07K6s2KkKFTiD2aIvECa7++PKyD5NC32tpRw46qZA3sOz+aM+/V9V0GDHxVTKLziveV4JhzBHDp9Q=="],
+    "embla-carousel-fade": ["embla-carousel-fade@8.6.0", "", { "peerDependencies": { "embla-carousel": "8.6.0" } }, "sha512-qaYsx5mwCz72ZrjlsXgs1nKejSrW+UhkbOMwLgfRT7w2LtdEB03nPRI06GHuHv5ac2USvbEiX2/nAHctcDwvpg=="],
 
-    "es-abstract": ["es-abstract@1.23.10", "", { "dependencies": { "array-buffer-byte-length": "^1.0.2", "arraybuffer.prototype.slice": "^1.0.4", "available-typed-arrays": "^1.0.7", "call-bind": "^1.0.8", "call-bound": "^1.0.4", "data-view-buffer": "^1.0.2", "data-view-byte-length": "^1.0.2", "data-view-byte-offset": "^1.0.1", "es-define-property": "^1.0.1", "es-errors": "^1.3.0", "es-object-atoms": "^1.1.1", "es-set-tostringtag": "^2.1.0", "es-to-primitive": "^1.3.0", "function.prototype.name": "^1.1.8", "get-intrinsic": "^1.3.0", "get-proto": "^1.0.1", "get-symbol-description": "^1.1.0", "globalthis": "^1.0.4", "gopd": "^1.2.0", "has-property-descriptors": "^1.0.2", "has-proto": "^1.2.0", "has-symbols": "^1.1.0", "hasown": "^2.0.2", "internal-slot": "^1.1.0", "is-array-buffer": "^3.0.5", "is-callable": "^1.2.7", "is-data-view": "^1.0.2", "is-regex": "^1.2.1", "is-shared-array-buffer": "^1.0.4", "is-string": "^1.1.1", "is-typed-array": "^1.1.15", "is-weakref": "^1.1.1", "math-intrinsics": "^1.1.0", "object-inspect": "^1.13.4", "object-keys": "^1.1.1", "object.assign": "^4.1.7", "own-keys": "^1.0.1", "regexp.prototype.flags": "^1.5.4", "safe-array-concat": "^1.1.3", "safe-push-apply": "^1.0.0", "safe-regex-test": "^1.1.0", "set-proto": "^1.0.0", "string.prototype.trim": "^1.2.10", "string.prototype.trimend": "^1.0.9", "string.prototype.trimstart": "^1.0.8", "typed-array-buffer": "^1.0.3", "typed-array-byte-length": "^1.0.3", "typed-array-byte-offset": "^1.0.4", "typed-array-length": "^1.0.7", "unbox-primitive": "^1.1.0", "which-typed-array": "^1.1.19" } }, "sha512-MtUbM072wlJNyeYAe0mhzrD+M6DIJa96CZAOBBrhDbgKnB4MApIKefcyAB1eOdYn8cUNZgvwBvEzdoAYsxgEIw=="],
+    "embla-carousel-reactive-utils": ["embla-carousel-reactive-utils@8.6.0", "", { "peerDependencies": { "embla-carousel": "8.6.0" } }, "sha512-fMVUDUEx0/uIEDM0Mz3dHznDhfX+znCCDCeIophYb1QGVM7YThSWX+wz11zlYwWFOr74b4QLGg0hrGPJeG2s4A=="],
 
-    "es-define-property": ["es-define-property@1.0.1", "", {}, "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g=="],
+    "embla-carousel-vue": ["embla-carousel-vue@8.6.0", "", { "dependencies": { "embla-carousel": "8.6.0", "embla-carousel-reactive-utils": "8.6.0" }, "peerDependencies": { "vue": "^3.2.37" } }, "sha512-v8UO5UsyLocZnu/LbfQA7Dn2QHuZKurJY93VUmZYP//QRWoCWOsionmvLLAlibkET3pGPs7++03VhJKbWD7vhQ=="],
 
-    "es-errors": ["es-errors@1.3.0", "", {}, "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw=="],
+    "embla-carousel-wheel-gestures": ["embla-carousel-wheel-gestures@8.1.0", "", { "dependencies": { "wheel-gestures": "^2.2.5" }, "peerDependencies": { "embla-carousel": "^8.0.0 || ~8.0.0-rc03" } }, "sha512-J68jkYrxbWDmXOm2n2YHl+uMEXzkGSKjWmjaEgL9xVvPb3HqVmg6rJSKfI3sqIDVvm7mkeTy87wtG/5263XqHQ=="],
+
+    "emoji-regex": ["emoji-regex@10.6.0", "", {}, "sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A=="],
+
+    "encodeurl": ["encodeurl@2.0.0", "", {}, "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg=="],
+
+    "enhanced-resolve": ["enhanced-resolve@5.26.0", "", { "dependencies": { "graceful-fs": "^4.2.4", "tapable": "^2.3.3" } }, "sha512-9vhedylFonb2YGogzUKX6+Ja72gOJbN1QHAqdrvqLwhdl/QWbKopzoUC9EbQNVsAns/bx/4uyqalrQAoy1IByw=="],
+
+    "entities": ["entities@7.0.1", "", {}, "sha512-TWrgLOFUQTH994YUyl1yT4uyavY5nNB5muff+RtWaqNVCAK408b5ZnnbNAUEWLTCpum9w6arT70i1XdQ4UeOPA=="],
 
-    "es-module-lexer": ["es-module-lexer@1.7.0", "", {}, "sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA=="],
+    "error-stack-parser-es": ["error-stack-parser-es@2.0.1", "", {}, "sha512-J36ntO+rMQVRuR/umlmxmfLi4TpWwtmTnHoJoXTiC2xDNazs0VDPKcX6pbhZMDd2HFtH9isMBJXMdbki+A++Pg=="],
 
-    "es-object-atoms": ["es-object-atoms@1.1.1", "", { "dependencies": { "es-errors": "^1.3.0" } }, "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA=="],
+    "errx": ["errx@0.2.2", "", {}, "sha512-HaPN6cxm6iZ9bIbQQ5orChcw7SY5smUzM08ZMc6OtV4UQhrrc3Ms1G8Ww2n/9lXkWqiioNTssF8bCvchrSbFEQ=="],
 
-    "es-set-tostringtag": ["es-set-tostringtag@2.1.0", "", { "dependencies": { "es-errors": "^1.3.0", "get-intrinsic": "^1.2.6", "has-tostringtag": "^1.0.2", "hasown": "^2.0.2" } }, "sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA=="],
+    "es-errors": ["es-errors@1.3.0", "", {}, "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw=="],
 
-    "es-to-primitive": ["es-to-primitive@1.3.0", "", { "dependencies": { "is-callable": "^1.2.7", "is-date-object": "^1.0.5", "is-symbol": "^1.0.4" } }, "sha512-w+5mJ3GuFL+NjVtJlvydShqE1eN3h3PbI7/5LAsYJP/2qtuMXjfL2LpHSRqo4b4eSF5K/DH1JXKUAHSB2UW50g=="],
+    "es-module-lexer": ["es-module-lexer@2.3.2", "", {}, "sha512-poHGpORABojJJucnV9KbOavETW8lBVnphkW77ER5/BQ5Fz7oXSoCNek7IH3vR5nRjdsEz926ibFYX8KtLQmdyw=="],
 
     "esbuild": ["esbuild@0.25.12", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.25.12", "@esbuild/android-arm": "0.25.12", "@esbuild/android-arm64": "0.25.12", "@esbuild/android-x64": "0.25.12", "@esbuild/darwin-arm64": "0.25.12", "@esbuild/darwin-x64": "0.25.12", "@esbuild/freebsd-arm64": "0.25.12", "@esbuild/freebsd-x64": "0.25.12", "@esbuild/linux-arm": "0.25.12", "@esbuild/linux-arm64": "0.25.12", "@esbuild/linux-ia32": "0.25.12", "@esbuild/linux-loong64": "0.25.12", "@esbuild/linux-mips64el": "0.25.12", "@esbuild/linux-ppc64": "0.25.12", "@esbuild/linux-riscv64": "0.25.12", "@esbuild/linux-s390x": "0.25.12", "@esbuild/linux-x64": "0.25.12", "@esbuild/netbsd-arm64": "0.25.12", "@esbuild/netbsd-x64": "0.25.12", "@esbuild/openbsd-arm64": "0.25.12", "@esbuild/openbsd-x64": "0.25.12", "@esbuild/openharmony-arm64": "0.25.12", "@esbuild/sunos-x64": "0.25.12", "@esbuild/win32-arm64": "0.25.12", "@esbuild/win32-ia32": "0.25.12", "@esbuild/win32-x64": "0.25.12" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg=="],
 
@@ -919,519 +887,423 @@
 
     "estree-walker": ["estree-walker@3.0.3", "", { "dependencies": { "@types/estree": "^1.0.0" } }, "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g=="],
 
-    "esutils": ["esutils@2.0.3", "", {}, "sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g=="],
-
     "etag": ["etag@1.8.1", "", {}, "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg=="],
 
     "event-target-shim": ["event-target-shim@5.0.1", "", {}, "sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ=="],
 
     "events": ["events@3.3.0", "", {}, "sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q=="],
 
-    "execa": ["execa@8.0.1", "", { "dependencies": { "cross-spawn": "^7.0.3", "get-stream": "^8.0.1", "human-signals": "^5.0.0", "is-stream": "^3.0.0", "merge-stream": "^2.0.0", "npm-run-path": "^5.1.0", "onetime": "^6.0.0", "signal-exit": "^4.1.0", "strip-final-newline": "^3.0.0" } }, "sha512-VyhnebXciFV2DESc+p6B+y0LjSm0krU4OgJN44qFAhBY0TJ+1V61tYD2+wHusZ6F9n5K+vl8k0sTy7PEfV4qpg=="],
+    "events-universal": ["events-universal@1.0.1", "", { "dependencies": { "bare-events": "^2.7.0" } }, "sha512-LUd5euvbMLpwOF8m6ivPCbhQeSiYVNb8Vs0fQ8QjXo0JTkEHpz8pxdQf0gStltaPpw0Cca8b39KxvK9cfKRiAw=="],
 
-    "exsolve": ["exsolve@1.0.8", "", {}, "sha512-LmDxfWXwcTArk8fUEnOfSZpHOJ6zOMUJKOtFLFqJLoKJetuQG874Uc7/Kki7zFLzYybmZhp1M7+98pfMqeX8yA=="],
-
-    "externality": ["externality@1.0.2", "", { "dependencies": { "enhanced-resolve": "^5.14.1", "mlly": "^1.3.0", "pathe": "^1.1.1", "ufo": "^1.1.2" } }, "sha512-LyExtJWKxtgVzmgtEHyQtLFpw1KFhQphF9nTG8TpAIVkiI/xQ3FJh75tRFLYl4hkn7BNIIdLJInuDAavX35pMw=="],
+    "execa": ["execa@8.0.1", "", { "dependencies": { "cross-spawn": "^7.0.3", "get-stream": "^8.0.1", "human-signals": "^5.0.0", "is-stream": "^3.0.0", "merge-stream": "^2.0.0", "npm-run-path": "^5.1.0", "onetime": "^6.0.0", "signal-exit": "^4.1.0", "strip-final-newline": "^3.0.0" } }, "sha512-VyhnebXciFV2DESc+p6B+y0LjSm0krU4OgJN44qFAhBY0TJ+1V61tYD2+wHusZ6F9n5K+vl8k0sTy7PEfV4qpg=="],
 
-    "fast-deep-equal": ["fast-deep-equal@3.1.3", "", {}, "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q=="],
+    "exsolve": ["exsolve@1.1.3", "", {}, "sha512-kuzL9zherLQoqDeQaS55AiiIg1kb4KYXaSusTtgZTPlvKP2gGCI82LNmBNh5RjDVUXIcmgx+/Mx7vPwRzBbhJA=="],
 
     "fast-fifo": ["fast-fifo@1.3.2", "", {}, "sha512-/d9sfos4yxzpwkDkuN7k2SqFKtYNmCTzgfEpz82x34IM9/zc8KGxQoXg1liNC/izpRM/MBdt44Nmx41ZWqk+FQ=="],
 
     "fast-glob": ["fast-glob@3.3.3", "", { "dependencies": { "@nodelib/fs.stat": "^2.0.2", "@nodelib/fs.walk": "^1.2.3", "glob-parent": "^5.1.2", "merge2": "^1.3.0", "micromatch": "^4.0.8" } }, "sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg=="],
 
-    "fast-json-stable-stringify": ["fast-json-stable-stringify@2.1.0", "", {}, "sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw=="],
+    "fast-npm-meta": ["fast-npm-meta@2.2.0", "", { "dependencies": { "cac": "^7.0.0" }, "bin": { "fast-npm-meta": "./dist/cli.mjs" } }, "sha512-99jPl8JkCSCa4VlboNU1XuL98ijm74Pm9CGo6H4BoMVoVh1uhguQcvwLgXDT8Vkl2qj/UEQ0J9gD8beHjTFk1w=="],
+
+    "fast-string-truncated-width": ["fast-string-truncated-width@3.0.3", "", {}, "sha512-0jjjIEL6+0jag3l2XWWizO64/aZVtpiGE3t0Zgqxv0DPuxiMjvB3M24fCyhZUO4KomJQPj3LTSUnDP3GpdwC0g=="],
 
-    "fast-npm-meta": ["fast-npm-meta@0.4.7", "", {}, "sha512-aZU3i3eRcSb2NCq8i6N6IlyiTyF6vqAqzBGl2NBF6ngNx/GIqfYbkLDIKZ4z4P0o/RmtsFnVqHwdrSm13o4tnQ=="],
+    "fast-string-width": ["fast-string-width@3.0.2", "", { "dependencies": { "fast-string-truncated-width": "^3.0.2" } }, "sha512-gX8LrtNEI5hq8DVUfRQMbr5lpaS4nMIWV+7XEbXk2b8kiQIizgnlr12B4dA3ZEx3308ze0O4Q1R+cHts8kyUJg=="],
 
-    "fast-uri": ["fast-uri@3.0.6", "", {}, "sha512-Atfo14OibSv5wAp4VWNsFYE1AchQRTv9cBGWET4pZWHzYshFSS9NQI6I57rdKn9croWVMbYFbLhJ+yJvmZIIHw=="],
+    "fast-wrap-ansi": ["fast-wrap-ansi@0.2.2", "", { "dependencies": { "fast-string-width": "^3.0.2" } }, "sha512-7F2Fl+TjRSenLqlU3UjSH0iyqopqoZIu7eZVpEirP2g1GtWa2G/ecEmBdgz31+Mxr+ELclgg6sokpSFIQiZ02Q=="],
 
-    "fastq": ["fastq@1.19.1", "", { "dependencies": { "reusify": "^1.0.4" } }, "sha512-GwLTyxkCXjXbxqIhTsMI2Nui8huMPtnxg7krajPJAjnEG/iiOS7i+zCtWGZR9G0NBKbXKh6X9m9UIsYX/N6vvQ=="],
+    "fastq": ["fastq@1.20.3", "", { "dependencies": { "reusify": "^1.0.4" } }, "sha512-XKv5nnLs6nLF71NgiKJLIZFLkPyIEuOselLG7ujZnGrRfQK8HpvY+WqKhAJUAdLomwVHErVS4LfxFlPq0/FTAw=="],
 
     "fdir": ["fdir@6.5.0", "", { "peerDependencies": { "picomatch": "^3 || ^4" }, "optionalPeers": ["picomatch"] }, "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg=="],
 
-    "fetch-blob": ["fetch-blob@3.2.0", "", { "dependencies": { "node-domexception": "^1.0.0", "web-streams-polyfill": "^3.0.3" } }, "sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ=="],
+    "fetchdts": ["fetchdts@0.2.0", "", {}, "sha512-PJb4ZTGT2/wK78RmVrxZITStWabhZlKBsL52VOgq+c7clEkdHdEB+0rtzrXCbZJqeYJj+IwNWYqB5/G6vouA6A=="],
 
     "file-uri-to-path": ["file-uri-to-path@1.0.0", "", {}, "sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw=="],
 
-    "filelist": ["filelist@1.0.4", "", { "dependencies": { "minimatch": "^5.0.1" } }, "sha512-w1cEuf3S+DrLCQL7ET6kz+gmlJdbq9J7yXCSjK/OZCPA+qEN1WyF4ZAf0YYJa4/shHJra2t/d/r8SV4Ji+x+8Q=="],
-
     "fill-range": ["fill-range@7.1.1", "", { "dependencies": { "to-regex-range": "^5.0.1" } }, "sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg=="],
 
-    "for-each": ["for-each@0.3.5", "", { "dependencies": { "is-callable": "^1.2.7" } }, "sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg=="],
+    "flru": ["flru@1.0.2", "", {}, "sha512-kWyh8ADvHBFz6ua5xYOPnUroZTT/bwWfrCeL0Wj1dzG4/YOmOcfJ99W8dOVyyynJN35rZ9aCOtHChqQovV7yog=="],
+
+    "fnv1a-64": ["fnv1a-64@0.1.2", "", {}, "sha512-mJbcILTPybAR1jdOwt/lVv8N2cffeJFFP+gVbSAwLEx1ujXH27RpPd8Rokec/KX9c76UYIB6Co+H4lQzxPnJfA=="],
+
+    "fontaine": ["fontaine@0.8.0", "", { "dependencies": { "@capsizecss/unpack": "^4.0.0", "css-tree": "^3.1.0", "magic-regexp": "^0.10.0", "magic-string": "^0.30.21", "pathe": "^2.0.3", "ufo": "^1.6.1", "unplugin": "^2.3.10" } }, "sha512-eek1GbzOdWIj9FyQH/emqW1aEdfC3lYRCHepzwlFCm5T77fBSRSyNRKE6/antF1/B1M+SfJXVRQTY9GAr7lnDg=="],
+
+    "fontkitten": ["fontkitten@1.0.3", "", { "dependencies": { "tiny-inflate": "^1.0.3" } }, "sha512-Wp1zXWPVUPBmfoa3Cqc9ctaKuzKAV6uLstRqlR56kSjplf5uAce+qeyYym7F+PHbGTk+tCEdkCW6RD7DX/gBZw=="],
+
+    "fontless": ["fontless@0.2.1", "", { "dependencies": { "consola": "^3.4.2", "css-tree": "^3.1.0", "defu": "^6.1.4", "esbuild": "^0.27.0", "fontaine": "0.8.0", "jiti": "^2.6.1", "lightningcss": "^1.30.2", "magic-string": "^0.30.21", "ohash": "^2.0.11", "pathe": "^2.0.3", "ufo": "^1.6.1", "unifont": "^0.7.4", "unstorage": "^1.17.1" }, "peerDependencies": { "vite": "*" }, "optionalPeers": ["vite"] }, "sha512-mUWZ8w91/mw2KEcZ6gHNoNNmsAq9Wiw2IypIux5lM03nhXm+WSloXGUNuRETNTLqZexMgpt7Aj/v63qqrsWraQ=="],
 
     "foreground-child": ["foreground-child@3.3.1", "", { "dependencies": { "cross-spawn": "^7.0.6", "signal-exit": "^4.0.1" } }, "sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw=="],
 
-    "formdata-polyfill": ["formdata-polyfill@4.0.10", "", { "dependencies": { "fetch-blob": "^3.1.2" } }, "sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g=="],
+    "fraction.js": ["fraction.js@5.3.4", "", {}, "sha512-1X1NTtiJphryn/uLQz3whtY6jK3fTqoE3ohKs0tT+Ujr1W59oopxmoEh7Lu5p6vBaPbgoM0bzveAW4Qi5RyWDQ=="],
 
-    "fraction.js": ["fraction.js@4.3.7", "", {}, "sha512-ZsDfxO51wGAXREY55a7la9LScWpwv9RxIrYABrlvOFBlH/ShPnrtsXeuUIfXKKOVicNxQ+o8JTbJvjS4M89yew=="],
+    "framer-motion": ["framer-motion@14.3.0", "", { "dependencies": { "motion-dom": "14.3.0", "motion-utils": "14.1.1", "tslib": "^2.4.0" }, "peerDependencies": { "react": "^18.0.0 || ^19.0.0", "react-dom": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["react", "react-dom"] }, "sha512-d8WCrU0ZQn7ukKMykCsDyIOwb/taZeDqqrDBK0du5GO0AO/ynz8fdR/LIIz9Pyy3n3tGwrneR+n0egyrrLa3fw=="],
 
     "fresh": ["fresh@2.0.0", "", {}, "sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A=="],
 
-    "fs-extra": ["fs-extra@9.1.0", "", { "dependencies": { "at-least-node": "^1.0.0", "graceful-fs": "^4.2.0", "jsonfile": "^6.0.1", "universalify": "^2.0.0" } }, "sha512-hcg3ZmepS30/7BSFqRvoo3DOMQu7IjqxO5nCDt+zM9XWjb33Wg7ziNT+Qvqbuc3+gWpzO02JubVyk2G4Zvo1OQ=="],
-
-    "fs.realpath": ["fs.realpath@1.0.0", "", {}, "sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw=="],
+    "fs-minipass": ["fs-minipass@2.1.0", "", { "dependencies": { "minipass": "^3.0.0" } }, "sha512-V/JgOLFCS+R6Vcq0slCuaeWEdNC3ouDlJMNIsacH2VtALiu9mV4LPrHc5cDl8k5aw6J8jwgWWpiTo5RYhmIzvg=="],
 
     "fsevents": ["fsevents@2.3.3", "", { "os": "darwin" }, "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
 
     "function-bind": ["function-bind@1.1.2", "", {}, "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA=="],
 
-    "function.prototype.name": ["function.prototype.name@1.1.8", "", { "dependencies": { "call-bind": "^1.0.8", "call-bound": "^1.0.3", "define-properties": "^1.2.1", "functions-have-names": "^1.2.3", "hasown": "^2.0.2", "is-callable": "^1.2.7" } }, "sha512-e5iwyodOHhbMr/yNrc7fDYG4qlbIvI5gajyzPnb5TCwyhjApznQh1BMFou9b30SevY43gCJKXycoCBjMbsuW0Q=="],
+    "fuse.js": ["fuse.js@7.5.0", "", {}, "sha512-sQtrEfA+ez/3G0cCZecF70oqpCRttCexYUG4mUrtWL49ULUzUyxokt5kyqwtKzj1270RaKih+hcP3qLcumccow=="],
 
-    "functions-have-names": ["functions-have-names@1.2.3", "", {}, "sha512-xckBUXyTIqT97tq2x2AMb+g163b5JFysYk0x4qxNFwbfQkmNZoiRHb6sPzI9/QV33WeuvVYBUIiD4NzNIyqaRQ=="],
+    "fuzzysort": ["fuzzysort@4.0.2", "", {}, "sha512-3c7yD6rK1EXIsqpcu1ZVzXJugODWNMzvUij6yTiziaAHrpNS8kzFOI9mJLE8pmG4K9JOaVgzQRgklfOEk8f4Tg=="],
 
-    "fuse.js": ["fuse.js@7.1.0", "", {}, "sha512-trLf4SzuuUxfusZADLINj+dE8clK1frKdmqiJNb1Es75fmI5oY6X2mxLVUciLLjxqw/xr72Dhy+lER6dGd02FQ=="],
+    "generic-names": ["generic-names@4.0.0", "", { "dependencies": { "loader-utils": "^3.2.0" } }, "sha512-ySFolZQfw9FoDb3ed9d80Cm9f0+r7qj+HJkWjeD9RBfpxEVTlVhol+gvaQB/78WbwYfbnNh8nWHHBSlg072y6A=="],
 
     "gensync": ["gensync@1.0.0-beta.2", "", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="],
 
     "get-caller-file": ["get-caller-file@2.0.5", "", {}, "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg=="],
 
-    "get-intrinsic": ["get-intrinsic@1.3.0", "", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "es-define-property": "^1.0.1", "es-errors": "^1.3.0", "es-object-atoms": "^1.1.1", "function-bind": "^1.1.2", "get-proto": "^1.0.1", "gopd": "^1.2.0", "has-symbols": "^1.1.0", "hasown": "^2.0.2", "math-intrinsics": "^1.1.0" } }, "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ=="],
-
-    "get-own-enumerable-property-symbols": ["get-own-enumerable-property-symbols@3.0.2", "", {}, "sha512-I0UBV/XOz1XkIJHEUDMZAbzCThU/H8DxmSfmdGcKPnVhu2VfFqr34jr9777IyaTYvxjedWhqVIilEDsCdP5G6g=="],
+    "get-east-asian-width": ["get-east-asian-width@1.7.0", "", {}, "sha512-XjH1AECxf0giL2V1aU8vKyRR2ppRUb5c0EvT7zuJTokQ74bNo52zOtghqdWIqrhUD79fo3x0WfKZdOqxF6LG1Q=="],
 
     "get-port-please": ["get-port-please@3.2.0", "", {}, "sha512-I9QVvBw5U/hw3RmWpYKRumUeaDgxTPd401x364rLmWBJcOQ753eov1eTgzDqRG9bqFIfDc7gfzcQEWrUri3o1A=="],
 
-    "get-proto": ["get-proto@1.0.1", "", { "dependencies": { "dunder-proto": "^1.0.1", "es-object-atoms": "^1.0.0" } }, "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g=="],
-
     "get-stream": ["get-stream@8.0.1", "", {}, "sha512-VaUJspBffn/LMCJVoMvSAdmscJyS1auj5Zulnn5UoYcY531UWmdwhRWkcGKnGU93m5HSXP9LP2usOryrBtQowA=="],
 
-    "get-symbol-description": ["get-symbol-description@1.1.0", "", { "dependencies": { "call-bound": "^1.0.3", "es-errors": "^1.3.0", "get-intrinsic": "^1.2.6" } }, "sha512-w9UMqWwJxHNOvoNzSJ2oPF5wvYcvP7jUvYzhp67yEhTi17ZDBBC1z9pTdGuzjD+EFIqLSYRweZjqfiPzQ06Ebg=="],
+    "get-tsconfig": ["get-tsconfig@4.14.0", "", { "dependencies": { "resolve-pkg-maps": "^1.0.0" } }, "sha512-yTb+8DXzDREzgvYmh6s9vHsSVCHeC0G3PI5bEXNBHtmshPnO+S5O7qgLEOn0I5QvMy6kpZN8K1NKGyilLb93wA=="],
 
-    "giget": ["giget@2.0.0", "", { "dependencies": { "citty": "^0.1.6", "consola": "^3.4.0", "defu": "^6.1.4", "node-fetch-native": "^1.6.6", "nypm": "^0.6.0", "pathe": "^2.0.3" }, "bin": { "giget": "dist/cli.mjs" } }, "sha512-L5bGsVkxJbJgdnwyuheIunkGatUF/zssUoxxjACCseZYAVbaqdh9Tsmmlkl8vYan09H7sbvKt4pS8GqKLBrEzA=="],
+    "giget": ["giget@1.2.5", "", { "dependencies": { "citty": "^0.1.6", "consola": "^3.4.0", "defu": "^6.1.4", "node-fetch-native": "^1.6.6", "nypm": "^0.5.4", "pathe": "^2.0.3", "tar": "^6.2.1" }, "bin": { "giget": "dist/cli.mjs" } }, "sha512-r1ekGw/Bgpi3HLV3h1MRBIlSAdHoIMklpaQ3OQLFcRw9PwAj2rqigvIbg+dBUI51OxVI2jsEtDywDBjSiuf7Ug=="],
 
-    "git-up": ["git-up@8.1.1", "", { "dependencies": { "is-ssh": "^1.4.0", "parse-url": "^9.2.0" } }, "sha512-FDenSF3fVqBYSaJoYy1KSc2wosx0gCvKP+c+PRBht7cAaiCeQlBtfBDX9vgnNOHmdePlSFITVcn4pFfcgNvx3g=="],
-
-    "git-url-parse": ["git-url-parse@16.1.0", "", { "dependencies": { "git-up": "^8.1.0" } }, "sha512-cPLz4HuK86wClEW7iDdeAKcCVlWXmrLpb2L+G9goW0Z1dtpNS6BXXSOckUTlJT/LDQViE1QZKstNORzHsLnobw=="],
-
-    "glob": ["glob@7.2.3", "", { "dependencies": { "fs.realpath": "^1.0.0", "inflight": "^1.0.4", "inherits": "2", "minimatch": "^3.1.1", "once": "^1.3.0", "path-is-absolute": "^1.0.0" } }, "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q=="],
+    "glob": ["glob@13.0.6", "", { "dependencies": { "minimatch": "^10.2.2", "minipass": "^7.1.3", "path-scurry": "^2.0.2" } }, "sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw=="],
 
     "glob-parent": ["glob-parent@5.1.2", "", { "dependencies": { "is-glob": "^4.0.1" } }, "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow=="],
 
     "global-directory": ["global-directory@4.0.1", "", { "dependencies": { "ini": "4.1.1" } }, "sha512-wHTUcDUoZ1H5/0iVqEudYW4/kAlN5cZ3j/bXn0Dpbizl9iaUVeWSHqiOjsgk6OW2bkLclbBjzewBz6weQ1zA2Q=="],
 
-    "globals": ["globals@11.12.0", "", {}, "sha512-WOBp/EEGUiIsJSp7wcv/y6MO+lV9UoncWqxuFfm8eBwzWNgyfBd6Gz+IeKQ9jCmyhoH99g15M3T+QaVHFjizVA=="],
-
-    "globalthis": ["globalthis@1.0.4", "", { "dependencies": { "define-properties": "^1.2.1", "gopd": "^1.0.1" } }, "sha512-DpLKbNU4WylpxJykQujfCcwYWiV/Jhm50Goo0wrVILAv5jOr9d+H+UR3PhSCD2rCCEIg0uc+G+muBTwD54JhDQ=="],
-
-    "globby": ["globby@15.0.0", "", { "dependencies": { "@sindresorhus/merge-streams": "^4.0.0", "fast-glob": "^3.3.3", "ignore": "^7.0.5", "path-type": "^6.0.0", "slash": "^5.1.0", "unicorn-magic": "^0.3.0" } }, "sha512-oB4vkQGqlMl682wL1IlWd02tXCbquGWM4voPEI85QmNKCaw8zGTm1f1rubFgkg3Eli2PtKlFgrnmUqasbQWlkw=="],
-
-    "gopd": ["gopd@1.2.0", "", {}, "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg=="],
+    "globby": ["globby@14.1.0", "", { "dependencies": { "@sindresorhus/merge-streams": "^2.1.0", "fast-glob": "^3.3.3", "ignore": "^7.0.3", "path-type": "^6.0.0", "slash": "^5.1.0", "unicorn-magic": "^0.3.0" } }, "sha512-0Ia46fDOaT7k4og1PDW4YbodWWr3scS2vAr2lTbsplOt2WkKp0vQbkI9wKis/T5LV/dqPjO3bpS/z6GTJB82LA=="],
 
     "graceful-fs": ["graceful-fs@4.2.11", "", {}, "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ=="],
 
     "gzip-size": ["gzip-size@7.0.0", "", { "dependencies": { "duplexer": "^0.1.2" } }, "sha512-O1Ld7Dr+nqPnmGpdhzLmMTQ4vAsD+rHwMm1NLUmoUFFymBOMKxCCrtDxqdBRYXdeEPEi3SyoR4TizJLQrnKBNA=="],
 
-    "h3": ["h3@1.15.4", "", { "dependencies": { "cookie-es": "^1.2.2", "crossws": "^0.3.5", "defu": "^6.1.4", "destr": "^2.0.5", "iron-webcrypto": "^1.2.1", "node-mock-http": "^1.0.2", "radix3": "^1.1.2", "ufo": "^1.6.1", "uncrypto": "^0.1.3" } }, "sha512-z5cFQWDffyOe4vQ9xIqNfCZdV4p//vy6fBnr8Q1AWnVZ0teurKMG66rLj++TKwKPUP3u7iMUvrvKaEUiQw2QWQ=="],
-
-    "has-bigints": ["has-bigints@1.1.0", "", {}, "sha512-R3pbpkcIqv2Pm3dUwgjclDRVmWpTJW2DcMzcIhEXEx1oh/CEMObMm3KLmRJOdvhM7o4uQBnwr8pzRK2sJWIqfg=="],
+    "h3": ["h3@1.15.11", "", { "dependencies": { "cookie-es": "^1.2.3", "crossws": "^0.3.5", "defu": "^6.1.6", "destr": "^2.0.5", "iron-webcrypto": "^1.2.1", "node-mock-http": "^1.0.4", "radix3": "^1.1.2", "ufo": "^1.6.3", "uncrypto": "^0.1.3" } }, "sha512-L3THSe2MPeBwgIZVSH5zLdBBU90TOxarvhK9d04IDY2AmVS8j2Jz2LIWtwsGOU3lu2I5jCN7FNvVfY2+XyF+mg=="],
 
-    "has-flag": ["has-flag@4.0.0", "", {}, "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "hash.js": ["hash.js@1.1.7", "", { "dependencies": { "inherits": "^2.0.3", "minimalistic-assert": "^1.0.1" } }, "sha512-taOaskGt4z4SOANNseOviYDvjEJinIkRgmp7LbKP2YTTmVxWBl87s/uzK9r+44BclBSp2X7K1hqeNfz9JbBeXA=="],
 
-    "has-property-descriptors": ["has-property-descriptors@1.0.2", "", { "dependencies": { "es-define-property": "^1.0.0" } }, "sha512-55JNKuIW+vq4Ke1BjOTjM2YctQIvCT7GFzHwmfZPGo5wnrgkid0YQtnAleFSqumZm4az3n2BS+erby5ipJdgrg=="],
+    "hasown": ["hasown@2.0.4", "", { "dependencies": { "function-bind": "^1.1.2" } }, "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A=="],
 
-    "has-proto": ["has-proto@1.2.0", "", { "dependencies": { "dunder-proto": "^1.0.0" } }, "sha512-KIL7eQPfHQRC8+XluaIw7BHUwwqL19bQn4hzNgdr+1wXoU0KKj6rufu47lhY7KbJR2C6T6+PfyN0Ea7wkSS+qQ=="],
+    "hey-listen": ["hey-listen@1.0.8", "", {}, "sha512-COpmrF2NOg4TBWUJ5UVyaCU2A88wEMkUPK4hNqyCkqHbxT92BbvfjoSozkAIIm6XhicGlJHhFdullInrdhwU8Q=="],
 
-    "has-symbols": ["has-symbols@1.1.0", "", {}, "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ=="],
+    "hmac-drbg": ["hmac-drbg@1.0.1", "", { "dependencies": { "hash.js": "^1.0.3", "minimalistic-assert": "^1.0.0", "minimalistic-crypto-utils": "^1.0.1" } }, "sha512-Tti3gMqLdZfhOQY1Mzf/AanLiqh1WTiJgEj26ZuYQ9fbkLomzGchCws4FyrSd4VkpBfiNhaE1On+lOz894jvXg=="],
 
-    "has-tostringtag": ["has-tostringtag@1.0.2", "", { "dependencies": { "has-symbols": "^1.0.3" } }, "sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw=="],
+    "hono": ["hono@4.13.13", "", {}, "sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA=="],
 
-    "hasown": ["hasown@2.0.2", "", { "dependencies": { "function-bind": "^1.1.2" } }, "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ=="],
+    "hono-openapi": ["hono-openapi@1.5.0", "", { "dependencies": { "@hono/standard-validator": "^0.4.0", "@standard-community/standard-json": "^0.3.7", "@standard-community/standard-openapi": "^0.2.11", "@standard-schema/spec": "^1.0.0", "@types/json-schema": "^7.0.15", "openapi-types": "^12.1.3" }, "peerDependencies": { "hono": "^4.11.2" } }, "sha512-7pRGQbFLBSy+SmCKHIZB3a8pzalnsYflvGRXyS1P7vucEGlkL23QitQ++wNCuMT25Q3TbGH2JUuTdYnWMY/GIw=="],
 
-    "hookable": ["hookable@5.5.3", "", {}, "sha512-Yc+BQe8SvoXH1643Qez1zqLRmbA5rCL+sSmk6TVos0LWVfNIB7PGncdlId77WzLGSIB5KaWgTaNTs2lNVEI6VQ=="],
+    "hookable": ["hookable@6.1.2", "", {}, "sha512-+abwxtiEA52GCVIsQqut3S/uKTbUwYIp4Pe/vv+6py5XiXBCqMZHg6pA6Y5qhgLSEys0/cYuPbO0z1QFj5ZCmg=="],
 
-    "http-errors": ["http-errors@2.0.0", "", { "dependencies": { "depd": "2.0.0", "inherits": "2.0.4", "setprototypeof": "1.2.0", "statuses": "2.0.1", "toidentifier": "1.0.1" } }, "sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ=="],
+    "http-errors": ["http-errors@2.0.1", "", { "dependencies": { "depd": "~2.0.0", "inherits": "~2.0.4", "setprototypeof": "~1.2.0", "statuses": "~2.0.2", "toidentifier": "~1.0.1" } }, "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ=="],
 
     "http-shutdown": ["http-shutdown@1.2.2", "", {}, "sha512-S9wWkJ/VSY9/k4qcjG318bqJNruzE4HySUhFYknwmu6LBP97KLLfwNf+n4V1BHurvFNkSKLFnK/RsuUnRTf9Vw=="],
 
     "https-proxy-agent": ["https-proxy-agent@7.0.6", "", { "dependencies": { "agent-base": "^7.1.2", "debug": "4" } }, "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw=="],
 
-    "httpxy": ["httpxy@0.1.7", "", {}, "sha512-pXNx8gnANKAndgga5ahefxc++tJvNL87CXoRwxn1cJE2ZkWEojF3tNfQIEhZX/vfpt+wzeAzpUI4qkediX1MLQ=="],
+    "httpxy": ["httpxy@0.5.5", "", {}, "sha512-uDjmnPyp1q4Sgzf3w+J/Fc6UqcCEj0x4Wjp7OqK5dGhNeDgpyrAmnS6ey8QWrX3SWDon2DMKf9sBa5X9+CVyMA=="],
 
     "human-signals": ["human-signals@5.0.0", "", {}, "sha512-AXcZb6vzzrFAUE61HnN4mpLqd/cSIwNQjtNWR0euPm6y0iqx3G4gOXaIDdtdDwZmhwe82LA6+zinmW4UBWVePQ=="],
 
-    "iconv-lite": ["iconv-lite@0.4.24", "", { "dependencies": { "safer-buffer": ">= 2.1.2 < 3" } }, "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA=="],
-
-    "idb": ["idb@7.1.1", "", {}, "sha512-gchesWBzyvGHRO9W8tzUWFDycow5gwjvFKfyV9FF32Y7F50yZMp7mP+T2mJIWFx49zicqyC4uefHM17o6xKIVQ=="],
-
     "ieee754": ["ieee754@1.2.1", "", {}, "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA=="],
 
-    "ignore": ["ignore@7.0.5", "", {}, "sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg=="],
+    "ignore": ["ignore@7.0.12", "", {}, "sha512-/8UvqAPU9DGTI9k4mxtf49U37Isfwr8Uts96+SBHIkFxPJnHS0Ew4f00sM4Scd8V8EjM0jUNtVDdv1kPdt35lg=="],
 
     "image-meta": ["image-meta@0.2.2", "", {}, "sha512-3MOLanc3sb3LNGWQl1RlQlNWURE5g32aUphrDyFeCsxBTk08iE3VNe4CwsUZ0Qs1X+EfX0+r29Sxdpza4B+yRA=="],
 
-    "impound": ["impound@1.0.0", "", { "dependencies": { "exsolve": "^1.0.5", "mocked-exports": "^0.1.1", "pathe": "^2.0.3", "unplugin": "^2.3.2", "unplugin-utils": "^0.2.4" } }, "sha512-8lAJ+1Arw2sMaZ9HE2ZmL5zOcMnt18s6+7Xqgq2aUVy4P1nlzAyPtzCDxsk51KVFwHEEdc6OWvUyqwHwhRYaug=="],
+    "import-meta-resolve": ["import-meta-resolve@4.2.0", "", {}, "sha512-Iqv2fzaTQN28s/FwZAoFq0ZSs/7hMAHJVX+w8PZl3cY19Pxk6jFFalxQoIfW2826i/fDLXv8IiEZRIT0lDuWcg=="],
 
-    "inflight": ["inflight@1.0.6", "", { "dependencies": { "once": "^1.3.0", "wrappy": "1" } }, "sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA=="],
+    "impound": ["impound@1.2.0", "", { "dependencies": { "@jridgewell/trace-mapping": "^0.3.31", "es-module-lexer": "^2.0.0", "pathe": "^2.0.3", "unplugin": "^3.0.0", "unplugin-utils": "^0.3.1" } }, "sha512-hbFh2WURN+XQ364SbblzubhEEj/B3qZCe80l/EHXPWM6/kZP2mvOllxwRBBWNxe4gLbqXZL0fxOZwoDCSlJZQw=="],
 
     "inherits": ["inherits@2.0.4", "", {}, "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="],
 
     "ini": ["ini@4.1.1", "", {}, "sha512-QQnnxNyfvmHFIsj7gkPcYymR8Jdw/o7mp5ZFihxn6h8Ci6fh3Dx4E1gPjpQEpIuPo9XVNY/ZUwh4BPMjGyL01g=="],
 
-    "internal-slot": ["internal-slot@1.1.0", "", { "dependencies": { "es-errors": "^1.3.0", "hasown": "^2.0.2", "side-channel": "^1.1.0" } }, "sha512-4gd7VpWNQNB4UKKCFFVcp1AVv+FMOgs9NKzjHKusc8jTMhd5eL1NqQqOpE0KzMds804/yHlglp3uxgluOqAPLw=="],
-
-    "ioredis": ["ioredis@5.8.2", "", { "dependencies": { "@ioredis/commands": "1.4.0", "cluster-key-slot": "^1.1.0", "debug": "^4.3.4", "denque": "^2.1.0", "lodash.defaults": "^4.2.0", "lodash.isarguments": "^3.1.0", "redis-errors": "^1.2.0", "redis-parser": "^3.0.0", "standard-as-callback": "^2.1.0" } }, "sha512-C6uC+kleiIMmjViJINWk80sOQw5lEzse1ZmvD+S/s8p8CWapftSaC+kocGTx6xrbrJ4WmYQGC08ffHLr6ToR6Q=="],
-
-    "iron-webcrypto": ["iron-webcrypto@1.2.1", "", {}, "sha512-feOM6FaSr6rEABp/eDfVseKyTMDt+KGpeB35SkVn9Tyn0CqvVsY3EwI0v5i8nMHyJnzCIQf7nsy3p41TPkJZhg=="],
-
-    "is-array-buffer": ["is-array-buffer@3.0.5", "", { "dependencies": { "call-bind": "^1.0.8", "call-bound": "^1.0.3", "get-intrinsic": "^1.2.6" } }, "sha512-DDfANUiiG2wC1qawP66qlTugJeL5HyzMpfr8lLK+jMQirGzNod0B12cFB/9q838Ru27sBwfw78/rdoU7RERz6A=="],
-
-    "is-async-function": ["is-async-function@2.1.1", "", { "dependencies": { "async-function": "^1.0.0", "call-bound": "^1.0.3", "get-proto": "^1.0.1", "has-tostringtag": "^1.0.2", "safe-regex-test": "^1.1.0" } }, "sha512-9dgM/cZBnNvjzaMYHVoxxfPj2QXt22Ev7SuuPrs+xav0ukGB0S6d4ydZdEiM48kLx5kDV+QBPrpVnFyefL8kkQ=="],
+    "ioredis": ["ioredis@5.11.1", "", { "dependencies": { "@ioredis/commands": "1.10.0", "cluster-key-slot": "1.1.1", "debug": "4.4.3", "denque": "2.1.0", "redis-errors": "1.2.0", "redis-parser": "3.0.0", "standard-as-callback": "2.1.0" } }, "sha512-ehuGcf94bQXhfagULNXrJdfnWO38v070jxSx/qE87Kjzmu2fU7ro5EFAb+OPituLqgfyuQaym5DlrNydW2sJ9A=="],
 
-    "is-bigint": ["is-bigint@1.1.0", "", { "dependencies": { "has-bigints": "^1.0.2" } }, "sha512-n4ZT37wG78iz03xPRKJrHTdZbe3IicyucEtdRsV5yglwc3GyUfbAfpSeD0FJ41NbUNSt5wbhqfp1fS+BgnvDFQ=="],
+    "iron-webcrypto": ["iron-webcrypto@2.0.0", "", { "dependencies": { "uint8array-extras": "^1.5.0" } }, "sha512-rtffZKDUHciZElM8mjFCufBC7nVhCxHYyWHESqs89OioEDz4parOofd8/uhrejh/INhQFfYQfByS22LlezR9sQ=="],
 
-    "is-boolean-object": ["is-boolean-object@1.2.2", "", { "dependencies": { "call-bound": "^1.0.3", "has-tostringtag": "^1.0.2" } }, "sha512-wa56o2/ElJMYqjCjGkXri7it5FbebW5usLw/nPmCMs5DeZ7eziSYZhSmPRn0txqeW4LnAmQQU7FgqLpsEFKM4A=="],
-
-    "is-callable": ["is-callable@1.2.7", "", {}, "sha512-1BC0BVFhS/p0qtw6enp8e+8OD0UrK0oFLztSjNzhcKA3WDuJxxAPXzPuPtKkjEY9UUoEWlX/8fgKeu2S8i9JTA=="],
-
-    "is-core-module": ["is-core-module@2.16.1", "", { "dependencies": { "hasown": "^2.0.2" } }, "sha512-UfoeMA6fIJ8wTYFEUjelnaGI67v6+N7qXJEvQuIGa99l4xsCruSYOVSQ0uPANn4dAzm8lkYPaKLrrijLq7x23w=="],
-
-    "is-data-view": ["is-data-view@1.0.2", "", { "dependencies": { "call-bound": "^1.0.2", "get-intrinsic": "^1.2.6", "is-typed-array": "^1.1.13" } }, "sha512-RKtWF8pGmS87i2D6gqQu/l7EYRlVdfzemCJN/P3UOs//x1QE7mfhvzHIApBTRf7axvT6DMGwSwBXYCT0nfB9xw=="],
-
-    "is-date-object": ["is-date-object@1.1.0", "", { "dependencies": { "call-bound": "^1.0.2", "has-tostringtag": "^1.0.2" } }, "sha512-PwwhEakHVKTdRNVOw+/Gyh0+MzlCl4R6qKvkhuvLtPMggI1WAHt9sOwZxQLSGpUaDnrdyDsomoRgNnCfKNSXXg=="],
+    "is-core-module": ["is-core-module@2.17.0", "", { "dependencies": { "hasown": "^2.0.4" } }, "sha512-J/vG0zBCbIKOQFfufSwyXdMrsohyJIUNkrnmo6WZGzoM7tr/lsbfW5b2BvisL6zsyMzK9UxV9L6c7AoFbyXHOA=="],
 
     "is-docker": ["is-docker@3.0.0", "", { "bin": { "is-docker": "cli.js" } }, "sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ=="],
 
     "is-extglob": ["is-extglob@2.1.1", "", {}, "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ=="],
 
-    "is-finalizationregistry": ["is-finalizationregistry@1.1.1", "", { "dependencies": { "call-bound": "^1.0.3" } }, "sha512-1pC6N8qWJbWoPtEjgcL2xyhQOP491EQjeUo3qTKcmV8YSDDJrOepfG8pcC7h/QgnQHYSv0mJ3Z/ZWxmatVrysg=="],
-
     "is-fullwidth-code-point": ["is-fullwidth-code-point@3.0.0", "", {}, "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg=="],
 
-    "is-generator-function": ["is-generator-function@1.1.0", "", { "dependencies": { "call-bound": "^1.0.3", "get-proto": "^1.0.0", "has-tostringtag": "^1.0.2", "safe-regex-test": "^1.1.0" } }, "sha512-nPUB5km40q9e8UfN/Zc24eLlzdSf9OfKByBw9CIdw4H1giPMeA0OIJvbchsCu4npfI2QcMVBsGEBHKZ7wLTWmQ=="],
-
     "is-glob": ["is-glob@4.0.3", "", { "dependencies": { "is-extglob": "^2.1.1" } }, "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg=="],
 
-    "is-inside-container": ["is-inside-container@1.0.0", "", { "dependencies": { "is-docker": "^3.0.0" }, "bin": { "is-inside-container": "cli.js" } }, "sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA=="],
+    "is-in-ssh": ["is-in-ssh@1.0.0", "", {}, "sha512-jYa6Q9rH90kR1vKB6NM7qqd1mge3Fx4Dhw5TVlK1MUBqhEOuCagrEHMevNuCcbECmXZ0ThXkRm+Ymr51HwEPAw=="],
 
-    "is-installed-globally": ["is-installed-globally@1.0.0", "", { "dependencies": { "global-directory": "^4.0.1", "is-path-inside": "^4.0.0" } }, "sha512-K55T22lfpQ63N4KEN57jZUAaAYqYHEe8veb/TycJRk9DdSCLLcovXz/mL6mOnhQaZsQGwPhuFopdQIlqGSEjiQ=="],
+    "is-inside-container": ["is-inside-container@1.0.0", "", { "dependencies": { "is-docker": "^3.0.0" }, "bin": { "is-inside-container": "cli.js" } }, "sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA=="],
 
-    "is-map": ["is-map@2.0.3", "", {}, "sha512-1Qed0/Hr2m+YqxnM09CjA2d/i6YZNfF6R2oRAOj36eUdS6qIV/huPJNSEpKbupewFs+ZsJlxsjjPbc0/afW6Lw=="],
+    "is-installed-globally": ["is-installed-globally@1.0.1", "", { "dependencies": { "global-directory": "^4.0.1", "is-path-inside": "^4.0.0" } }, "sha512-li88H4QGRoNMX27jEmY8nR515oJVspAgC/WFMlhHfFV8RJ4QyGpHhXnwAe9gH5RIgKmdYRUmrOhQobcgEjIdSw=="],
 
     "is-module": ["is-module@1.0.0", "", {}, "sha512-51ypPSPCoTEIN9dy5Oy+h4pShgJmPCygKfyRCISBI+JoWT/2oJvK8QPxmwv7b/p239jXrm9M1mlQbyKJ5A152g=="],
 
     "is-number": ["is-number@7.0.0", "", {}, "sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
 
-    "is-number-object": ["is-number-object@1.1.1", "", { "dependencies": { "call-bound": "^1.0.3", "has-tostringtag": "^1.0.2" } }, "sha512-lZhclumE1G6VYD8VHe35wFaIif+CTy5SJIi5+3y4psDgWu4wPDoBhF8NxUOinEc7pHgiTsT6MaBb92rKhhD+Xw=="],
-
-    "is-obj": ["is-obj@1.0.1", "", {}, "sha512-l4RyHgRqGN4Y3+9JHVrNqO+tN0rV5My76uW5/nuO4K1b6vw5G8d/cmFjP9tRfEsdhZNt0IFdZuK/c2Vr4Nb+Qg=="],
-
     "is-path-inside": ["is-path-inside@4.0.0", "", {}, "sha512-lJJV/5dYS+RcL8uQdBDW9c9uWFLLBNRyFhnAKXw5tVqLlKZ4RMGZKv+YQ/IA3OhD+RpbJa1LLFM1FQPGyIXvOA=="],
 
     "is-reference": ["is-reference@1.2.1", "", { "dependencies": { "@types/estree": "*" } }, "sha512-U82MsXXiFIrjCK4otLT+o2NA2Cd2g5MLoOVXUZjIOhLurrRxpEXzI8O0KZHr3IjLvlAH1kTPYSuqer5T9ZVBKQ=="],
 
-    "is-regex": ["is-regex@1.2.1", "", { "dependencies": { "call-bound": "^1.0.2", "gopd": "^1.2.0", "has-tostringtag": "^1.0.2", "hasown": "^2.0.2" } }, "sha512-MjYsKHO5O7mCsmRGxWcLWheFqN9DJ/2TmngvjKXihe6efViPqc274+Fx/4fYj/r03+ESvBdTXK0V6tA3rgez1g=="],
-
-    "is-regexp": ["is-regexp@1.0.0", "", {}, "sha512-7zjFAPO4/gwyQAAgRRmqeEeyIICSdmCqa3tsVHMdBzaXXRiqopZL4Cyghg/XulGWrtABTpbnYYzzIRffLkP4oA=="],
-
-    "is-set": ["is-set@2.0.3", "", {}, "sha512-iPAjerrse27/ygGLxw+EBR9agv9Y6uLeYVJMu+QNCoouJ1/1ri0mGrcWpfCqFZuzzx3WjtwxG098X+n4OuRkPg=="],
-
-    "is-shared-array-buffer": ["is-shared-array-buffer@1.0.4", "", { "dependencies": { "call-bound": "^1.0.3" } }, "sha512-ISWac8drv4ZGfwKl5slpHG9OwPNty4jOWPRIhBpxOoD+hqITiwuipOQ2bNthAzwA3B4fIjO4Nln74N0S9byq8A=="],
-
-    "is-ssh": ["is-ssh@1.4.1", "", { "dependencies": { "protocols": "^2.0.1" } }, "sha512-JNeu1wQsHjyHgn9NcWTaXq6zWSR6hqE0++zhfZlkFBbScNkyvxCdeV8sRkSBaeLKxmbpR21brail63ACNxJ0Tg=="],
-
     "is-stream": ["is-stream@3.0.0", "", {}, "sha512-LnQR4bZ9IADDRSkvpqMGvt/tEJWclzklNgSw48V5EAaAeDd6qGvN8ei6k5p0tvxSR171VmGyHuTiAOfxAbr8kA=="],
 
-    "is-string": ["is-string@1.1.1", "", { "dependencies": { "call-bound": "^1.0.3", "has-tostringtag": "^1.0.2" } }, "sha512-BtEeSsoaQjlSPBemMQIrY1MY0uM6vnS1g5fmufYOtnxLGUZM2178PKbhsk7Ffv58IX+ZtcvoGwccYsh0PglkAA=="],
-
-    "is-symbol": ["is-symbol@1.1.1", "", { "dependencies": { "call-bound": "^1.0.2", "has-symbols": "^1.1.0", "safe-regex-test": "^1.1.0" } }, "sha512-9gGx6GTtCQM73BgmHQXfDmLtfjjTUDSyoxTCbp5WtoixAhfgsDirWIcVQ/IHpvI5Vgd5i/J5F7B9cN/WlVbC/w=="],
-
-    "is-typed-array": ["is-typed-array@1.1.15", "", { "dependencies": { "which-typed-array": "^1.1.16" } }, "sha512-p3EcsicXjit7SaskXHs1hA91QxgTw46Fv6EFKKGS5DRFLD8yKnohjF3hxoju94b/OcMZoQukzpPpBE9uLVKzgQ=="],
-
-    "is-weakmap": ["is-weakmap@2.0.2", "", {}, "sha512-K5pXYOm9wqY1RgjpL3YTkF39tni1XajUIkawTLUo9EZEVUFga5gSQJF8nNS7ZwJQ02y+1YCNYcMh+HIf1ZqE+w=="],
+    "is-wsl": ["is-wsl@3.1.1", "", { "dependencies": { "is-inside-container": "^1.0.0" } }, "sha512-e6rvdUCiQCAuumZslxRJWR/Doq4VpPR82kqclvcS0efgt430SlGIk05vdCN58+VrzgtIcfNODjozVielycD4Sw=="],
 
-    "is-weakref": ["is-weakref@1.1.1", "", { "dependencies": { "call-bound": "^1.0.3" } }, "sha512-6i9mGWSlqzNMEqpCp93KwRS1uUOodk2OJ6b+sq7ZPDSy2WuI5NFIxp/254TytR8ftefexkWn5xNiHUNpPOfSew=="],
+    "isarray": ["isarray@1.0.0", "", {}, "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ=="],
 
-    "is-weakset": ["is-weakset@2.0.4", "", { "dependencies": { "call-bound": "^1.0.3", "get-intrinsic": "^1.2.6" } }, "sha512-mfcwb6IzQyOKTs84CQMrOwW4gQcaTOAWJ0zzJCl2WSPDrWk/OzDaImWFH3djXhb24g4eudZfLRozAvPGw4d9hQ=="],
+    "isexe": ["isexe@4.0.0", "", {}, "sha512-FFUtZMpoZ8RqHS3XeXEmHWLA4thH+ZxCv2lOiPIn1Xc7CxrqhWzNSDzD+/chS/zbYezmiwWLdQC09JdQKmthOw=="],
 
-    "is-what": ["is-what@4.1.16", "", {}, "sha512-ZhMwEosbFJkA0YhFnNDgTM4ZxDRsS6HqTo7qsZM08fehyRYIYa0yHu5R6mgo1n/8MgaPBXiPimPD77baVFYg+A=="],
+    "isomorphic.js": ["isomorphic.js@0.2.5", "", {}, "sha512-PIeMbHqMt4DnUP3MA/Flc0HElYjMXArsw1qwJZcm9sqR8mq3l8NYizFMty0pWwE/tzIGH3EKK5+jes5mAr85yw=="],
 
-    "is-wsl": ["is-wsl@3.1.0", "", { "dependencies": { "is-inside-container": "^1.0.0" } }, "sha512-UcVfVfaK4Sc4m7X3dUSoHoozQGBEFeDC+zVo06t98xe8CzHSZZBekNXH+tu0NalHolcJ/QAGqS46Hef7QXBIMw=="],
-
-    "is64bit": ["is64bit@2.0.0", "", { "dependencies": { "system-architecture": "^0.1.0" } }, "sha512-jv+8jaWCl0g2lSBkNSVXdzfBA0npK1HGC2KtWM9FumFRoGS94g3NbCCLVnCYHLjp4GrW2KZeeSTMo5ddtznmGw=="],
+    "jackspeak": ["jackspeak@3.4.3", "", { "dependencies": { "@isaacs/cliui": "^8.0.2" }, "optionalDependencies": { "@pkgjs/parseargs": "^0.11.0" } }, "sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw=="],
 
-    "isarray": ["isarray@2.0.5", "", {}, "sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw=="],
+    "jiti": ["jiti@2.7.0", "", { "bin": { "jiti": "lib/jiti-cli.mjs" } }, "sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ=="],
 
-    "isexe": ["isexe@3.1.1", "", {}, "sha512-LpB/54B+/2J5hqQ7imZHfdU31OlgQqx7ZicVlkm9kzg9/w8GKLEcFfJl/t7DCEDueOyBAD6zCCwTO6Fzs0NoEQ=="],
+    "js-base64": ["js-base64@3.9.4", "", {}, "sha512-PtOMXpEGuP0RRiRXsjzHzl44dMHxSu2CPvAhinupR1tBa88me+1DPqsobl7eupn5UukjLkln1ZnAOAOXOrYG0Q=="],
 
-    "jackspeak": ["jackspeak@3.4.3", "", { "dependencies": { "@isaacs/cliui": "^8.0.2" }, "optionalDependencies": { "@pkgjs/parseargs": "^0.11.0" } }, "sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw=="],
+    "js-tokens": ["js-tokens@10.0.0", "", {}, "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q=="],
 
-    "jake": ["jake@10.9.2", "", { "dependencies": { "async": "^3.2.3", "chalk": "^4.0.2", "filelist": "^1.0.4", "minimatch": "^3.1.2" }, "bin": { "jake": "bin/cli.js" } }, "sha512-2P4SQ0HrLQ+fw6llpLnOaGAvN2Zu6778SJMrCUwns4fOoG9ayrTiZk3VV8sCPkVZF8ab0zksVpS8FDY5pRCNBA=="],
+    "js-yaml": ["js-yaml@4.2.0", "", { "dependencies": { "argparse": "^2.0.1" }, "bin": { "js-yaml": "bin/js-yaml.js" } }, "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw=="],
 
-    "jiti": ["jiti@2.6.1", "", { "bin": { "jiti": "lib/jiti-cli.mjs" } }, "sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ=="],
+    "jsesc": ["jsesc@3.1.0", "", { "bin": { "jsesc": "bin/jsesc" } }, "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA=="],
 
-    "js-base64": ["js-base64@3.7.7", "", {}, "sha512-7rCnleh0z2CkXhH67J8K1Ytz0b2Y+yxTPL+/KOJoa20hfnVQ/3/T6W/KflYI4bRHRagNeXeU2bkNGI3v1oS/lw=="],
+    "json5": ["json5@2.2.3", "", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="],
 
-    "js-tokens": ["js-tokens@9.0.1", "", {}, "sha512-mxa9E9ITFOt0ban3j6L5MpjwegGz6lBQmM1IJkWeBZGcMxto50+eWdjC/52xDbS2vy0k7vIMK0Fe2wfL9OQSpQ=="],
+    "kleur": ["kleur@4.1.5", "", {}, "sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ=="],
 
-    "jsesc": ["jsesc@3.1.0", "", { "bin": { "jsesc": "bin/jsesc" } }, "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA=="],
+    "klona": ["klona@2.0.6", "", {}, "sha512-dhG34DXATL5hSxJbIexCft8FChFXtmskoZYnoPWjXQuebWYCNkVeV3KkGegCK9CP1oswI/vQibS2GY7Em/sJJA=="],
 
-    "json-schema": ["json-schema@0.4.0", "", {}, "sha512-es94M3nTIfsEPisRafak+HDLfHXnKBhV3vU5eqPcS3flIWqcxJWgXHXiey3YrpaNsanY5ei1VoYEbOzijuq9BA=="],
+    "knitwork": ["knitwork@1.3.0", "", {}, "sha512-4LqMNoONzR43B1W0ek0fhXMsDNW/zxa1NdFAVMY+k28pgZLovR4G3PB5MrpTxCy1QaZCqNoiaKPr5w5qZHfSNw=="],
 
-    "json-schema-traverse": ["json-schema-traverse@1.0.0", "", {}, "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug=="],
+    "launch-editor": ["launch-editor@2.14.2", "", { "dependencies": { "picocolors": "^1.1.1", "shell-quote": "^1.10.0" } }, "sha512-NHJEb30MGBCkmZXLZwz25t37QR4aY03ZzPYUJXOJaOa92uWwExI9SBQUuIznBYc1xkD7cJNGX7oc3Nl3sq2kQQ=="],
 
-    "json5": ["json5@2.2.3", "", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="],
+    "lazystream": ["lazystream@1.0.1", "", { "dependencies": { "readable-stream": "^2.0.5" } }, "sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw=="],
 
-    "jsonfile": ["jsonfile@6.1.0", "", { "dependencies": { "universalify": "^2.0.0" }, "optionalDependencies": { "graceful-fs": "^4.1.6" } }, "sha512-5dgndWOriYSm5cnYaJNhalLNDKOqFwyDB/rr1E9ZsGciGvKPs8R2xYGCacuf3z6K1YKDz182fd+fY3cn3pMqXQ=="],
+    "lib0": ["lib0@0.2.119", "", { "dependencies": { "isomorphic.js": "^0.2.4" }, "bin": { "0serve": "bin/0serve.js", "0gentesthtml": "bin/gentesthtml.js", "0ecdsa-generate-keypair": "bin/0ecdsa-generate-keypair.js" } }, "sha512-vh+TiejVy8Xm+hCdnRfn9BthGNvNUZdEXltNjVZL3TzRIKP3s1lnQh8pWd/Q0wCgY0FPAGVVjFF4ZiHUV3LFgA=="],
 
-    "jsonpointer": ["jsonpointer@5.0.1", "", {}, "sha512-p/nXbhSEcu3pZRdkW1OfJhpsVtW1gd4Wa1fnQc9YLiTfAjn0312eMKimbdIQzuZl9aa9xUGaRlP9T/CJE/ditQ=="],
+    "libsql": ["libsql@0.5.29", "", { "dependencies": { "@neon-rs/load": "^0.0.4", "detect-libc": "2.0.2" }, "optionalDependencies": { "@libsql/darwin-arm64": "0.5.29", "@libsql/darwin-x64": "0.5.29", "@libsql/linux-arm-gnueabihf": "0.5.29", "@libsql/linux-arm-musleabihf": "0.5.29", "@libsql/linux-arm64-gnu": "0.5.29", "@libsql/linux-arm64-musl": "0.5.29", "@libsql/linux-x64-gnu": "0.5.29", "@libsql/linux-x64-musl": "0.5.29", "@libsql/win32-x64-msvc": "0.5.29" }, "os": [ "linux", "win32", "darwin", ], "cpu": [ "arm", "x64", "arm64", ] }, "sha512-8lMP8iMgiBzzoNbAPQ59qdVcj6UaE/Vnm+fiwX4doX4Narook0a4GPKWBEv+CR8a1OwbfkgL18uBfBjWdF0Fzg=="],
 
-    "kleur": ["kleur@4.1.5", "", {}, "sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ=="],
+    "lightningcss": ["lightningcss@1.33.0", "", { "dependencies": { "detect-libc": "^2.0.3" }, "optionalDependencies": { "lightningcss-android-arm64": "1.33.0", "lightningcss-darwin-arm64": "1.33.0", "lightningcss-darwin-x64": "1.33.0", "lightningcss-freebsd-x64": "1.33.0", "lightningcss-linux-arm-gnueabihf": "1.33.0", "lightningcss-linux-arm64-gnu": "1.33.0", "lightningcss-linux-arm64-musl": "1.33.0", "lightningcss-linux-x64-gnu": "1.33.0", "lightningcss-linux-x64-musl": "1.33.0", "lightningcss-win32-arm64-msvc": "1.33.0", "lightningcss-win32-x64-msvc": "1.33.0" } }, "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA=="],
 
-    "klona": ["klona@2.0.6", "", {}, "sha512-dhG34DXATL5hSxJbIexCft8FChFXtmskoZYnoPWjXQuebWYCNkVeV3KkGegCK9CP1oswI/vQibS2GY7Em/sJJA=="],
+    "lightningcss-android-arm64": ["lightningcss-android-arm64@1.33.0", "", { "os": "android", "cpu": "arm64" }, "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg=="],
 
-    "knitwork": ["knitwork@1.2.0", "", {}, "sha512-xYSH7AvuQ6nXkq42x0v5S8/Iry+cfulBz/DJQzhIyESdLD7425jXsPy4vn5cCXU+HhRN2kVw51Vd1K6/By4BQg=="],
+    "lightningcss-darwin-arm64": ["lightningcss-darwin-arm64@1.33.0", "", { "os": "darwin", "cpu": "arm64" }, "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg=="],
 
-    "launch-editor": ["launch-editor@2.12.0", "", { "dependencies": { "picocolors": "^1.1.1", "shell-quote": "^1.8.3" } }, "sha512-giOHXoOtifjdHqUamwKq6c49GzBdLjvxrd2D+Q4V6uOHopJv7p9VJxikDsQ/CBXZbEITgUqSVHXLTG3VhPP1Dg=="],
+    "lightningcss-darwin-x64": ["lightningcss-darwin-x64@1.33.0", "", { "os": "darwin", "cpu": "x64" }, "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ=="],
 
-    "lazystream": ["lazystream@1.0.1", "", { "dependencies": { "readable-stream": "^2.0.5" } }, "sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw=="],
+    "lightningcss-freebsd-x64": ["lightningcss-freebsd-x64@1.33.0", "", { "os": "freebsd", "cpu": "x64" }, "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg=="],
 
-    "leven": ["leven@3.1.0", "", {}, "sha512-qsda+H8jTaUaN/x5vzW2rzc+8Rw4TAQ/4KjB46IwK5VH+IlVeeeje/EoZRpiXvIqjFgK84QffqPztGI3VBLG1A=="],
+    "lightningcss-linux-arm-gnueabihf": ["lightningcss-linux-arm-gnueabihf@1.33.0", "", { "os": "linux", "cpu": "arm" }, "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ=="],
 
-    "libsql": ["libsql@0.5.22", "", { "dependencies": { "@neon-rs/load": "^0.0.4", "detect-libc": "2.0.2" }, "optionalDependencies": { "@libsql/darwin-arm64": "0.5.22", "@libsql/darwin-x64": "0.5.22", "@libsql/linux-arm-gnueabihf": "0.5.22", "@libsql/linux-arm-musleabihf": "0.5.22", "@libsql/linux-arm64-gnu": "0.5.22", "@libsql/linux-arm64-musl": "0.5.22", "@libsql/linux-x64-gnu": "0.5.22", "@libsql/linux-x64-musl": "0.5.22", "@libsql/win32-x64-msvc": "0.5.22" }, "os": [ "linux", "win32", "darwin", ], "cpu": [ "arm", "x64", "arm64", ] }, "sha512-NscWthMQt7fpU8lqd7LXMvT9pi+KhhmTHAJWUB/Lj6MWa0MKFv0F2V4C6WKKpjCVZl0VwcDz4nOI3CyaT1DDiA=="],
+    "lightningcss-linux-arm64-gnu": ["lightningcss-linux-arm64-gnu@1.33.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg=="],
 
-    "lilconfig": ["lilconfig@3.1.3", "", {}, "sha512-/vlFKAoH5Cgt3Ie+JLhRbwOsCQePABiU3tJ1egGvyQ+33R/vcwM2Zl2QR/LzjsBeItPt3oSVXapn+m4nQDvpzw=="],
+    "lightningcss-linux-arm64-musl": ["lightningcss-linux-arm64-musl@1.33.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ=="],
 
-    "listhen": ["listhen@1.9.0", "", { "dependencies": { "@parcel/watcher": "^2.4.1", "@parcel/watcher-wasm": "^2.4.1", "citty": "^0.1.6", "clipboardy": "^4.0.0", "consola": "^3.2.3", "crossws": ">=0.2.0 <0.4.0", "defu": "^6.1.4", "get-port-please": "^3.1.2", "h3": "^1.12.0", "http-shutdown": "^1.2.2", "jiti": "^2.1.2", "mlly": "^1.7.1", "node-forge": "^1.3.1", "pathe": "^1.1.2", "std-env": "^3.7.0", "ufo": "^1.5.4", "untun": "^0.1.3", "uqr": "^0.1.2" }, "bin": { "listen": "bin/listhen.mjs", "listhen": "bin/listhen.mjs" } }, "sha512-I8oW2+QL5KJo8zXNWX046M134WchxsXC7SawLPvRQpogCbkyQIaFxPE89A2HiwR7vAK2Dm2ERBAmyjTYGYEpBg=="],
+    "lightningcss-linux-x64-gnu": ["lightningcss-linux-x64-gnu@1.33.0", "", { "os": "linux", "cpu": "x64" }, "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg=="],
 
-    "local-pkg": ["local-pkg@1.1.2", "", { "dependencies": { "mlly": "^1.7.4", "pkg-types": "^2.3.0", "quansync": "^0.2.11" } }, "sha512-arhlxbFRmoQHl33a0Zkle/YWlmNwoyt6QNZEIJcqNbdrsix5Lvc4HyyI3EnwxTYlZYc32EbYrQ8SzEZ7dqgg9A=="],
+    "lightningcss-linux-x64-musl": ["lightningcss-linux-x64-musl@1.33.0", "", { "os": "linux", "cpu": "x64" }, "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw=="],
 
-    "lodash": ["lodash@4.17.21", "", {}, "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="],
+    "lightningcss-win32-arm64-msvc": ["lightningcss-win32-arm64-msvc@1.33.0", "", { "os": "win32", "cpu": "arm64" }, "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA=="],
 
-    "lodash.debounce": ["lodash.debounce@4.0.8", "", {}, "sha512-FT1yDzDYEoYWhnSGnpE/4Kj1fLZkDFyqRb7fNt6FdYOSxlUWAtp42Eh6Wb0rGIv/m9Bgo7x4GhQbm5Ys4SG5ow=="],
+    "lightningcss-win32-x64-msvc": ["lightningcss-win32-x64-msvc@1.33.0", "", { "os": "win32", "cpu": "x64" }, "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA=="],
 
-    "lodash.defaults": ["lodash.defaults@4.2.0", "", {}, "sha512-qjxPLHd3r5DnsdGacqOMU6pb/avJzdh9tFX2ymgoZE27BmjXrNy/y4LoaiTeAb+O3gL8AfpJGtqfX/ae2leYYQ=="],
+    "linkifyjs": ["linkifyjs@4.3.3", "", {}, "sha512-P8aEP5U/D1/IlTY2OeYsErdwh9bGuLE30NcXtKEjgdHcahveQoQwM2yZNsioQHsWFz0P7KKudisbrzCgR0sDHg=="],
 
-    "lodash.isarguments": ["lodash.isarguments@3.1.0", "", {}, "sha512-chi4NHZlZqZD18a0imDHnZPrDeBbTtVN7GXMwuGdRH9qotxAjYs3aVLKc7zNOG9eddR5Ksd8rvFEBc9SsggPpg=="],
+    "listhen": ["listhen@1.10.1", "", { "dependencies": { "@parcel/watcher-wasm": "^2.5.6", "citty": "^0.2.2", "consola": "^3.4.2", "crossws": "^0.4.10", "defu": "^6.1.7", "get-port-please": "^3.2.0", "h3": "^1.15.11", "http-shutdown": "^1.2.2", "jiti": "^2.7.0", "node-forge": "^1.4.0", "pathe": "^2.0.3", "std-env": "^4.2.0", "tinyclip": "^0.1.15", "ufo": "^1.6.4", "untun": "^0.2.2", "uqr": "^0.1.3" }, "peerDependencies": { "@parcel/watcher": "^2.5.6" }, "optionalPeers": ["@parcel/watcher"], "bin": { "listen": "./bin/listhen.mjs", "listhen": "./bin/listhen.mjs" } }, "sha512-6nt/86SkqUQSLW1ofz8MxC6RhRMqOl3ONISe6qqvJ3xj09aJWQx6DhgSZpugs3PX4PXdOas/WD6A9jx6J2N19A=="],
 
-    "lodash.memoize": ["lodash.memoize@4.1.2", "", {}, "sha512-t7j+NzmgnQzTAYXcsHYLgimltOV1MXHtlOWf6GjL9Kj8GK5FInw5JotxvbOs+IvV1/Dzo04/fCGfLVs7aXb4Ag=="],
+    "loader-utils": ["loader-utils@3.3.1", "", {}, "sha512-FMJTLMXfCLMLfJxcX9PFqX5qD88Z5MRGaZCVzfuqeZSPsyiBzs+pahDQjbIWz2QIzPZz0NX9Zy4FX3lmK6YHIg=="],
 
-    "lodash.sortby": ["lodash.sortby@4.7.0", "", {}, "sha512-HDWXG8isMntAyRF5vZ7xKuEvOhT4AhlRt/3czTSjvGUxjYCBVRQY48ViDHyfYz9VIoBkW4TMGQNapx+l3RUwdA=="],
+    "local-pkg": ["local-pkg@1.2.1", "", { "dependencies": { "mlly": "^1.7.4", "pkg-types": "^2.3.0", "quansync": "^0.2.11" } }, "sha512-++gUqRDEvcnN6Zhqrr+y/CkVEHhlrR96vZn3nZZPYzMcBUyBtTKzB9NadClFIsIVSsu+3i9tfk/erqy9kAmt7Q=="],
 
-    "lodash.uniq": ["lodash.uniq@4.5.0", "", {}, "sha512-xfBaXQd9ryd9dlSDvnvI0lvxfLJlYAZzXomUYzLKtUeOQvOP5piqAWuGtrhWeqaXK9hhoM/iyJc5AV+XfsX3HQ=="],
+    "lodash": ["lodash@4.18.1", "", {}, "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q=="],
 
-    "lru-cache": ["lru-cache@10.4.3", "", {}, "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ=="],
+    "low-level": ["low-level@1.2.5", "", {}, "sha512-1Lmiu2Wt+XHF7iCl1SmORXqxd3IO2Zx+EUpdgHZNw3Cct7u0IScdGfsYJvRk6QfE54jyZg9X/4YrZ0RxDjSCfg=="],
 
-    "luxon": ["luxon@3.7.2", "", {}, "sha512-vtEhXh/gNjI9Yg1u4jX/0YVPMvxzHuGgCm6tC5kZyb08yjGWGnqAjGJvcXbqQR2P3MyMEFnRbpcdFS6PBcLqew=="],
+    "lru-cache": ["lru-cache@11.5.3", "", {}, "sha512-U4N8FgzmWxc8k1VH8Kr6lQg18U7Fjvby6wXHVRX/ZZ7IwWbRMgrRbP0Wrb5q5NVinryp4SQampHKdvtecItxUg=="],
 
     "magic-regexp": ["magic-regexp@0.10.0", "", { "dependencies": { "estree-walker": "^3.0.3", "magic-string": "^0.30.12", "mlly": "^1.7.2", "regexp-tree": "^0.1.27", "type-level-regexp": "~0.1.17", "ufo": "^1.5.4", "unplugin": "^2.0.0" } }, "sha512-Uly1Bu4lO1hwHUW0CQeSWuRtzCMNO00CmXtS8N6fyvB3B979GOEEeAkiTUDsmbYLAbvpUS/Kt5c4ibosAzVyVg=="],
 
-    "magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
+    "magic-string": ["magic-string@1.4.3", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.6.0" } }, "sha512-z12OxmaPGE0F4xlpGdjuAUckipLpQlTAuAmyGhNoD7ODpYUzvDfvtxUbjM/jwznyP178oju/KDdyi220wNJ0RQ=="],
 
     "magic-string-ast": ["magic-string-ast@1.0.3", "", { "dependencies": { "magic-string": "^0.30.19" } }, "sha512-CvkkH1i81zl7mmb94DsRiFeG9V2fR2JeuK8yDgS8oiZSFa++wWLEgZ5ufEOyLHbvSbD1gTRKv9NdX69Rnvr9JA=="],
 
-    "magicast": ["magicast@0.5.1", "", { "dependencies": { "@babel/parser": "^7.28.5", "@babel/types": "^7.28.5", "source-map-js": "^1.2.1" } }, "sha512-xrHS24IxaLrvuo613F719wvOIv9xPHFWQHuvGUBmPnCA/3MQxKI3b+r7n1jAoDHmsbC5bRhTZYR77invLAxVnw=="],
+    "magicast": ["magicast@0.5.5", "", { "dependencies": { "@babel/parser": "^7.29.7", "@babel/types": "^7.29.7", "source-map-js": "^1.2.1" } }, "sha512-UicdXN8zQ3JHlxVq+28afMXPr1z7WNY6+7EJnzTdQWkTAlMLF5fNCCKxJHBQwGaNGR11581EiQmQzx73+MvszA=="],
 
-    "math-intrinsics": ["math-intrinsics@1.1.0", "", {}, "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g=="],
+    "marked": ["marked@17.0.6", "", { "bin": { "marked": "bin/marked.js" } }, "sha512-gB0gkNafnonOw0obSTEGZTT86IuhILt2Wfx0mWH/1Au83kybTayroZ/V6nS25mN7u8ASy+5fMhgB3XPNrOZdmA=="],
 
-    "mdn-data": ["mdn-data@2.12.2", "", {}, "sha512-IEn+pegP1aManZuckezWCO+XZQDplx1366JoVhTpMpBB1sPey/SbveZQUosKiKiGYjg1wH4pMlNgXbCiYgihQA=="],
+    "mdn-data": ["mdn-data@2.27.1", "", {}, "sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ=="],
 
     "merge-stream": ["merge-stream@2.0.0", "", {}, "sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w=="],
 
     "merge2": ["merge2@1.4.1", "", {}, "sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg=="],
 
+    "microdiff": ["microdiff@1.6.0", "", {}, "sha512-w7JWt8Bno6I8h0rEqlxr4lNG4UbT1FVtWo42wWosIiaJ+rP3pXh7shCYDnyqBrYx36LJ1CZ64p8A62aVp0sJpQ=="],
+
     "micromatch": ["micromatch@4.0.8", "", { "dependencies": { "braces": "^3.0.3", "picomatch": "^2.3.1" } }, "sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA=="],
 
-    "mime": ["mime@4.1.0", "", { "bin": { "mime": "bin/cli.js" } }, "sha512-X5ju04+cAzsojXKes0B/S4tcYtFAJ6tTMuSPBEn9CPGlrWr8Fiw7qYeLT0XyH80HSoAoqWCaz+MWKh22P7G1cw=="],
+    "mime": ["mime@4.1.1", "", { "bin": { "mime": "bin/cli.js" } }, "sha512-YAApRsTpM2+gnUFHhRNGfkX8NK0V5xj1nyQLufGlwEI+eX4xRsTcel2IXDuMEGSGjBvzykNW4VuoEACgwYe7BQ=="],
 
     "mime-db": ["mime-db@1.54.0", "", {}, "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ=="],
 
-    "mime-types": ["mime-types@3.0.1", "", { "dependencies": { "mime-db": "^1.54.0" } }, "sha512-xRc4oEhT6eaBpU1XF7AjpOFD+xQmXNB5OVKwp4tqCuBpHLS/ZbBDrc07mYTDqVMg6PfxUjjNp85O6Cd2Z/5HWA=="],
+    "mime-types": ["mime-types@3.0.2", "", { "dependencies": { "mime-db": "^1.54.0" } }, "sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A=="],
 
     "mimic-fn": ["mimic-fn@4.0.0", "", {}, "sha512-vqiC06CuhBTUdZH+RYl8sFrL096vA45Ok5ISO6sE/Mr1jRbGH4Csnhi8f3wKVl7x8mO4Au7Ir9D3Oyv1VYMFJw=="],
 
-    "minimatch": ["minimatch@3.1.2", "", { "dependencies": { "brace-expansion": "^1.1.7" } }, "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw=="],
+    "minimalistic-assert": ["minimalistic-assert@1.0.1", "", {}, "sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A=="],
+
+    "minimalistic-crypto-utils": ["minimalistic-crypto-utils@1.0.1", "", {}, "sha512-JIYlbt6g8i5jKfJ3xz7rF0LXmv2TkDxBLUkiBeZ7bAx4GnnNMr8xFpGnOxn6GhTEHx3SjRrZEoU+j04prX1ktg=="],
 
-    "minipass": ["minipass@7.1.2", "", {}, "sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw=="],
+    "minimatch": ["minimatch@10.2.6", "", { "dependencies": { "brace-expansion": "^5.0.8" } }, "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A=="],
 
-    "minizlib": ["minizlib@3.0.2", "", { "dependencies": { "minipass": "^7.1.2" } }, "sha512-oG62iEk+CYt5Xj2YqI5Xi9xWUeZhDI8jjQmC5oThVH5JGCTgIjr7ciJDzC7MBzYd//WvR1OTmP5Q38Q8ShQtVA=="],
+    "minipass": ["minipass@5.0.0", "", {}, "sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ=="],
 
-    "mitt": ["mitt@3.0.1", "", {}, "sha512-vKivATfr97l2/QBCYAkXYDbrIWPM2IIKEl7YPhjCvKlG3kE2gm+uBo6nEXK3M5/Ffh/FLpKExzOQ3JJoJGFKBw=="],
+    "minizlib": ["minizlib@2.1.2", "", { "dependencies": { "minipass": "^3.0.0", "yallist": "^4.0.0" } }, "sha512-bAxsR8BVfj60DWXHE3u30oHzfl4G7khkSuPW+qvpd7jFRHm7dLxOjUk1EHACJ/hxLY8phGJ0YhYHZo7jil7Qdg=="],
 
-    "mkdirp": ["mkdirp@3.0.1", "", { "bin": { "mkdirp": "dist/cjs/src/bin.js" } }, "sha512-+NsyUUAZDmo6YVHzL/stxSu3t9YS1iljliy3BSDrXJ/dkn1KYdmtZODGGjLcc9XLgVVpH4KshHB8XmZgMhaBXg=="],
+    "mkdirp": ["mkdirp@1.0.4", "", { "bin": { "mkdirp": "bin/cmd.js" } }, "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw=="],
 
-    "mlly": ["mlly@1.8.0", "", { "dependencies": { "acorn": "^8.15.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.1" } }, "sha512-l8D9ODSRWLe2KHJSifWGwBqpTZXIXTeo8mlKjY+E2HAakaTeNpqAyBZ8GSqLzHgw4XmHmC8whvpjJNMbFZN7/g=="],
+    "mlly": ["mlly@1.7.4", "", { "dependencies": { "acorn": "^8.14.0", "pathe": "^2.0.1", "pkg-types": "^1.3.0", "ufo": "^1.5.4" } }, "sha512-qmdSIPC4bDJXgZTCR7XosJiNKySV7O215tsPtDN9iEO/7q/76b/ijtgRu/+epFXSJhijtTCCGp3DWS549P3xKw=="],
 
     "mocked-exports": ["mocked-exports@0.1.1", "", {}, "sha512-aF7yRQr/Q0O2/4pIXm6PZ5G+jAd7QS4Yu8m+WEeEHGnbo+7mE36CbLSDQiXYV8bVL3NfmdeqPJct0tUlnjVSnA=="],
 
+    "motion-dom": ["motion-dom@14.3.0", "", { "dependencies": { "motion-utils": "14.1.1" } }, "sha512-rcKO4aEJzAqDEsrH6qFzhLZxs7bNqZpiUEuEATz9LaRwt6dG7hZEbcFUSHNR8NECaKYM0Iuw6Iv6NpWEGXDI+w=="],
+
+    "motion-utils": ["motion-utils@14.1.1", "", {}, "sha512-3VvN5Uvf8B6qG+OfOui6Nht5EWp+vLuU3IqcAj7ItZGKqtmTjCebl5sGZF7/08gEHRnEl1AP/fIwbcEyVrcQGQ=="],
+
+    "motion-v": ["motion-v@2.8.0", "", { "dependencies": { "framer-motion": "~14.3.0", "hey-listen": "^1.0.8", "motion-dom": "~14.3.0", "motion-utils": "~14.1.1" }, "peerDependencies": { "@vueuse/core": ">=10.0.0", "vue": ">=3.0.0" } }, "sha512-kCwxm+EUbXW/lUdhTyozTKCX2WmQ5aDrjrPtFnUKByw99cz6mQAJyqtIubGdecnDM4VvNz8JOhWy2upp3m5b3w=="],
+
     "mrmime": ["mrmime@2.0.1", "", {}, "sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ=="],
 
     "ms": ["ms@2.1.3", "", {}, "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
 
     "muggle-string": ["muggle-string@0.4.1", "", {}, "sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ=="],
 
-    "nanoid": ["nanoid@5.1.5", "", { "bin": { "nanoid": "bin/nanoid.js" } }, "sha512-Ir/+ZpE9fDsNH0hQ3C68uyThDXzYcim2EqcZ8zn8Chtt1iylPT9xXJB0kPCnqzgcEGikO9RxSrh63MsmVCU7Fw=="],
-
-    "nanotar": ["nanotar@0.2.0", "", {}, "sha512-9ca1h0Xjvo9bEkE4UOxgAzLV0jHKe6LMaxo37ND2DAhhAtd0j8pR1Wxz+/goMrZO8AEZTWCmyaOsFI/W5AdpCQ=="],
+    "my-bad": ["my-bad@0.2.11", "", { "dependencies": { "clickable-path": "^0.1.1", "errx": "^0.2.2", "fnv1a-64": "^0.1.2" }, "peerDependencies": { "vite": ">=6" }, "optionalPeers": ["vite"] }, "sha512-K1R6DRz31BR7YYaDDLRr97XWKWku3SQhHKpDgz7i/VS3O3pvphIzbJIrrEXupSEmPtZElY9UzCrDc0nWvG4HyA=="],
 
-    "nitropack": ["nitropack@2.12.9", "", { "dependencies": { "@cloudflare/kv-asset-handler": "^0.4.0", "@rollup/plugin-alias": "^5.1.1", "@rollup/plugin-commonjs": "^28.0.9", "@rollup/plugin-inject": "^5.0.5", "@rollup/plugin-json": "^6.1.0", "@rollup/plugin-node-resolve": "^16.0.3", "@rollup/plugin-replace": "^6.0.2", "@rollup/plugin-terser": "^0.4.4", "@vercel/nft": "^0.30.3", "archiver": "^7.0.1", "c12": "^3.3.1", "chokidar": "^4.0.3", "citty": "^0.1.6", "compatx": "^0.2.0", "confbox": "^0.2.2", "consola": "^3.4.2", "cookie-es": "^2.0.0", "croner": "^9.1.0", "crossws": "^0.3.5", "db0": "^0.3.4", "defu": "^6.1.4", "destr": "^2.0.5", "dot-prop": "^10.1.0", "esbuild": "^0.25.11", "escape-string-regexp": "^5.0.0", "etag": "^1.8.1", "exsolve": "^1.0.7", "globby": "^15.0.0", "gzip-size": "^7.0.0", "h3": "^1.15.4", "hookable": "^5.5.3", "httpxy": "^0.1.7", "ioredis": "^5.8.2", "jiti": "^2.6.1", "klona": "^2.0.6", "knitwork": "^1.2.0", "listhen": "^1.9.0", "magic-string": "^0.30.21", "magicast": "^0.5.0", "mime": "^4.1.0", "mlly": "^1.8.0", "node-fetch-native": "^1.6.7", "node-mock-http": "^1.0.3", "ofetch": "^1.5.0", "ohash": "^2.0.11", "pathe": "^2.0.3", "perfect-debounce": "^2.0.0", "pkg-types": "^2.3.0", "pretty-bytes": "^7.1.0", "radix3": "^1.1.2", "rollup": "^4.52.5", "rollup-plugin-visualizer": "^6.0.5", "scule": "^1.3.0", "semver": "^7.7.3", "serve-placeholder": "^2.0.2", "serve-static": "^2.2.0", "source-map": "^0.7.6", "std-env": "^3.10.0", "ufo": "^1.6.1", "ultrahtml": "^1.6.0", "uncrypto": "^0.1.3", "unctx": "^2.4.1", "unenv": "^2.0.0-rc.23", "unimport": "^5.5.0", "unplugin-utils": "^0.3.1", "unstorage": "^1.17.1", "untyped": "^2.0.0", "unwasm": "^0.3.11", "youch": "^4.1.0-beta.11", "youch-core": "^0.3.3" }, "peerDependencies": { "xml2js": "^0.6.2" }, "optionalPeers": ["xml2js"], "bin": { "nitro": "dist/cli/index.mjs", "nitropack": "dist/cli/index.mjs" } }, "sha512-t6qqNBn2UDGMWogQuORjbL2UPevB8PvIPsPHmqvWpeGOlPr4P8Oc5oA8t3wFwGmaolM2M/s2SwT23nx9yARmOg=="],
+    "nanoid": ["nanoid@3.3.20", "", { "bin": { "nanoid": "bin/nanoid.cjs" } }, "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ=="],
 
-    "node-addon-api": ["node-addon-api@8.3.1", "", {}, "sha512-lytcDEdxKjGJPTLEfW4mYMigRezMlyJY8W4wxJK8zE533Jlb8L8dRuObJFWg2P+AuOIxoCgKF+2Oq4d4Zd0OUA=="],
+    "nanotar": ["nanotar@0.3.0", "", {}, "sha512-Kv2JYYiCzt16Kt5QwAc9BFG89xfPNBx+oQL4GQXD9nLqPkZBiNaqaCWtwnbk/q7UVsTYevvM1b0UF8zmEI4pCg=="],
 
-    "node-domexception": ["node-domexception@1.0.0", "", {}, "sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ=="],
+    "nitropack": ["nitropack@2.13.4", "", { "dependencies": { "@cloudflare/kv-asset-handler": "^0.4.2", "@rollup/plugin-alias": "^6.0.0", "@rollup/plugin-commonjs": "^29.0.2", "@rollup/plugin-inject": "^5.0.5", "@rollup/plugin-json": "^6.1.0", "@rollup/plugin-node-resolve": "^16.0.3", "@rollup/plugin-replace": "^6.0.3", "@rollup/plugin-terser": "^1.0.0", "@vercel/nft": "^1.5.0", "archiver": "^7.0.1", "c12": "^3.3.4", "chokidar": "^5.0.0", "citty": "^0.2.2", "compatx": "^0.2.0", "confbox": "^0.2.4", "consola": "^3.4.2", "cookie-es": "^2.0.1", "croner": "^10.0.1", "crossws": "^0.3.5", "db0": "^0.3.4", "defu": "^6.1.7", "destr": "^2.0.5", "dot-prop": "^10.1.0", "esbuild": "^0.28.0", "escape-string-regexp": "^5.0.0", "etag": "^1.8.1", "exsolve": "^1.0.8", "globby": "^16.2.0", "gzip-size": "^7.0.0", "h3": "^1.15.11", "hookable": "^5.5.3", "httpxy": "^0.5.1", "ioredis": "^5.10.1", "jiti": "^2.6.1", "klona": "^2.0.6", "knitwork": "^1.3.0", "listhen": "^1.9.1", "magic-string": "^0.30.21", "magicast": "^0.5.2", "mime": "^4.1.0", "mlly": "^1.8.2", "node-fetch-native": "^1.6.7", "node-mock-http": "^1.0.4", "ofetch": "^1.5.1", "ohash": "^2.0.11", "pathe": "^2.0.3", "perfect-debounce": "^2.1.0", "pkg-types": "^2.3.1", "pretty-bytes": "^7.1.0", "radix3": "^1.1.2", "rollup": "^4.60.2", "rollup-plugin-visualizer": "^7.0.1", "scule": "^1.3.0", "semver": "^7.7.4", "serve-placeholder": "^2.0.2", "serve-static": "^2.2.1", "source-map": "^0.7.6", "std-env": "^4.1.0", "ufo": "^1.6.4", "ultrahtml": "^1.6.0", "uncrypto": "^0.1.3", "unctx": "^2.5.0", "unenv": "2.0.0-rc.24", "unimport": "^6.2.0", "unplugin-utils": "^0.3.1", "unstorage": "^1.17.5", "untyped": "^2.0.0", "unwasm": "^0.5.3", "youch": "^4.1.1", "youch-core": "^0.3.3" }, "peerDependencies": { "xml2js": "^0.6.2" }, "optionalPeers": ["xml2js"], "bin": { "nitro": "dist/cli/index.mjs", "nitropack": "dist/cli/index.mjs" } }, "sha512-tX7bT6zxNeMwkc6hxHiZeUoTOjVrcjoh1Z3cmxOlodIqjl4HISgqfGOmkWSayky3Nv9Z5+KQH52F8nmXJY5AAA=="],
 
-    "node-fetch": ["node-fetch@3.3.2", "", { "dependencies": { "data-uri-to-buffer": "^4.0.0", "fetch-blob": "^3.1.4", "formdata-polyfill": "^4.0.10" } }, "sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA=="],
+    "node-fetch": ["node-fetch@2.7.0", "", { "dependencies": { "whatwg-url": "^5.0.0" }, "peerDependencies": { "encoding": "^0.1.0" }, "optionalPeers": ["encoding"] }, "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A=="],
 
     "node-fetch-native": ["node-fetch-native@1.6.7", "", {}, "sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q=="],
 
-    "node-forge": ["node-forge@1.3.1", "", {}, "sha512-dPEtOeMvF9VMcYV/1Wb8CPoVAXtp6MKMlcbAt4ddqmGqUJ6fQZFXkNZNkNlfevtNkGtaSoXf/vNNNSvgrdXwtA=="],
+    "node-forge": ["node-forge@1.4.0", "", {}, "sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ=="],
 
     "node-gyp-build": ["node-gyp-build@4.8.4", "", { "bin": { "node-gyp-build": "bin.js", "node-gyp-build-optional": "optional.js", "node-gyp-build-test": "build-test.js" } }, "sha512-LA4ZjwlnUblHVgq0oBF3Jl/6h/Nvs5fzBLwdEF4nuxnFdsfajde4WfxtJr3CaiH+F6ewcIB/q4jQ4UzPyid+CQ=="],
 
-    "node-mock-http": ["node-mock-http@1.0.3", "", {}, "sha512-jN8dK25fsfnMrVsEhluUTPkBFY+6ybu7jSB1n+ri/vOGjJxU8J9CZhpSGkHXSkFjtUhbmoncG/YG9ta5Ludqog=="],
+    "node-mock-http": ["node-mock-http@1.0.5", "", {}, "sha512-KQyt/wLjG3TAc7DOUhpqWzgd4ERxR80JOlTK5VE5R1S12IaPVN5qkj4klBce9HPG1Njuup4Sb5bljaT34lIyjw=="],
+
+    "node-releases": ["node-releases@2.0.59", "", {}, "sha512-5qr2okC4ItAI0hG5SaV0HoYMpnM/Y6+Oqr7AmPYy/2uEoGvS+GbSKLeRxSS1uAdu59yz0ouzcuXievSgg///WA=="],
 
-    "node-releases": ["node-releases@2.0.19", "", {}, "sha512-xxOWJsBKtzAq7DY0J+DTzuz58K8e7sJbdgwkbMWQe8UYB6ekmsQ45q0M/tJDsGaZmbC+l7n57UV8Hl5tHxO9uw=="],
+    "nodemailer": ["nodemailer@9.1.1", "", {}, "sha512-izw9mVKFix6YSnC9eLgV6g1opl9DUlRio9ZNcq+Wu9Ujn2UwF+8Nl0B8nz22kEC+CTZCvinkxwJ0DeFbb6NwcQ=="],
 
     "nopt": ["nopt@8.1.0", "", { "dependencies": { "abbrev": "^3.0.0" }, "bin": { "nopt": "bin/nopt.js" } }, "sha512-ieGu42u/Qsa4TFktmaKEwM6MQH0pOWnaB3htzh0JRtx84+Mebc0cbZYN5bC+6WTZ4+77xrL9Pn5m7CV6VIkV7A=="],
 
     "normalize-path": ["normalize-path@3.0.0", "", {}, "sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA=="],
 
-    "normalize-range": ["normalize-range@0.1.2", "", {}, "sha512-bdok/XvKII3nUpklnV6P2hxtMNrCboOjAcyBuQnWEhO665FwrSNRxU+AqpsyvO6LgGYPspN+lu5CLtw4jPRKNA=="],
+    "nostics": ["nostics@1.3.0", "", {}, "sha512-wzRsrJwNlFbqIRQt8aCeL2WE8USip/uuvGSOZV1D02CxX8ABTMbw8IywKjH7yWHETMXbWJI4OBpihg9rmz2Vyg=="],
 
     "npm-run-path": ["npm-run-path@5.3.0", "", { "dependencies": { "path-key": "^4.0.0" } }, "sha512-ppwTtiJZq0O/ai0z7yfudtBpWIoxM8yE6nHi1X47eFR2EWORqfbu6CnPlNsjeN683eT0qG6H/Pyf9fCcvjnnnQ=="],
 
-    "nth-check": ["nth-check@2.1.1", "", { "dependencies": { "boolbase": "^1.0.0" } }, "sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w=="],
+    "nuxt": ["nuxt@4.6.2", "", { "dependencies": { "@dxup/nuxt": "^0.5.10", "@jridgewell/trace-mapping": "^0.3.31", "@nuxt/cli": "^4.0.1", "@nuxt/devalue": "^2.0.2", "@nuxt/devtools": "^3.4.3", "@nuxt/kit": "4.6.2", "@nuxt/nitro-server": "4.6.2", "@nuxt/schema": "4.6.2", "@nuxt/telemetry": "^2.9.1", "@nuxt/vite-builder": "4.6.2", "@nuxt/vite-server": "4.6.2", "@unhead/vue": "^3.4.3", "@vue/shared": "^3.5.44", "chokidar": "^5.0.0", "clickable-path": "^0.1.1", "compatx": "^0.2.0", "consola": "^3.4.2", "cookie-es": "^3.1.1", "defu": "^6.1.7", "destr": "^2.0.5", "devalue": "^6.0.3", "errx": "^0.2.2", "escape-string-regexp": "^5.0.0", "exsolve": "^1.1.3", "fetchdts": "^0.2.0", "fnv1a-64": "^0.1.2", "hookable": "^6.1.2", "ignore": "^7.0.12", "impound": "^1.2.0", "iron-webcrypto": "^2.0.0", "jiti": "^2.7.0", "klona": "^2.0.6", "knitwork": "^1.3.0", "magic-string": "^1.4.3", "my-bad": "^0.2.11", "nanotar": "^0.3.0", "nostics": "^1.3.0", "object-identity": "^0.2.3", "ofetch": "^1.5.1", "ohash": "^2.0.12", "on-change": "^6.0.2", "oxc-walker": "^1.1.1", "pathe": "^2.0.3", "perfect-debounce": "^2.1.0", "picomatch": "^4.0.7", "pkg-types": "^2.3.3", "rolldown-string": "^0.3.1", "rou3": "^0.9.2", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyglobby": "^0.2.17", "ufo": "^1.6.4", "ultrahtml": "^1.7.0", "uncrypto": "^0.1.3", "unctx": "^3.0.1", "undici": "^8.12.1", "unhead": "^3.4.3", "unimport": "^7.0.2", "unplugin": "^3.4.0", "unrouting": "^0.2.3", "untyped": "^2.0.0", "verkit": "^0.5.0", "vue": "^3.5.44", "vue-bundle-renderer": "^2.4.0", "vue-component-type-helpers": "^3.3.13", "vue-router": "^5.4.0" }, "peerDependencies": { "@parcel/watcher": "^2.1.0", "@types/node": ">=18.12.0", "rolldown": "~1.2.1" }, "optionalPeers": ["@parcel/watcher", "@types/node"], "bin": { "nuxi": "bin/nuxt.mjs", "nuxt": "bin/nuxt.mjs" } }, "sha512-KfhAIuHQpxKbTN0ItGpkK0jgzjcOCSOf6FZB3wHk/aZ1OiAMsDvbqua1OGfxuEk3bSlK3X49WyFEL5TwEKm36w=="],
 
-    "nuxt": ["nuxt@3.20.1", "", { "dependencies": { "@dxup/nuxt": "^0.2.1", "@nuxt/cli": "^3.30.0", "@nuxt/devtools": "^3.0.1", "@nuxt/kit": "3.20.1", "@nuxt/nitro-server": "3.20.1", "@nuxt/schema": "3.20.1", "@nuxt/telemetry": "^2.6.6", "@nuxt/vite-builder": "3.20.1", "@unhead/vue": "^2.0.19", "@vue/shared": "^3.5.23", "c12": "^3.3.1", "chokidar": "^4.0.3", "compatx": "^0.2.0", "consola": "^3.4.2", "cookie-es": "^2.0.0", "defu": "^6.1.4", "destr": "^2.0.5", "devalue": "^5.4.2", "errx": "^0.1.0", "escape-string-regexp": "^5.0.0", "exsolve": "^1.0.7", "h3": "^1.15.4", "hookable": "^5.5.3", "ignore": "^7.0.5", "impound": "^1.0.0", "jiti": "^2.6.1", "klona": "^2.0.6", "knitwork": "^1.2.0", "magic-string": "^0.30.21", "mlly": "^1.8.0", "nanotar": "^0.2.0", "nypm": "^0.6.2", "ofetch": "^1.5.1", "ohash": "^2.0.11", "on-change": "^6.0.1", "oxc-minify": "^0.96.0", "oxc-parser": "^0.96.0", "oxc-transform": "^0.96.0", "oxc-walker": "^0.5.2", "pathe": "^2.0.3", "perfect-debounce": "^2.0.0", "pkg-types": "^2.3.0", "radix3": "^1.1.2", "scule": "^1.3.0", "semver": "^7.7.3", "std-env": "^3.10.0", "tinyglobby": "^0.2.15", "ufo": "^1.6.1", "ultrahtml": "^1.6.0", "uncrypto": "^0.1.3", "unctx": "^2.4.1", "unimport": "^5.5.0", "unplugin": "^2.3.10", "unplugin-vue-router": "^0.16.1", "untyped": "^2.0.0", "vue": "^3.5.23", "vue-router": "^4.6.3" }, "peerDependencies": { "@parcel/watcher": "^2.1.0", "@types/node": "^18.0.0 || ^20.0.0 || >=22.0.0" }, "optionalPeers": ["@parcel/watcher", "@types/node"], "bin": { "nuxi": "bin/nuxt.mjs", "nuxt": "bin/nuxt.mjs" } }, "sha512-1d0tBndWdC3DQ/8s6cZqD6jc7DmFG4hIswjK2sYfYNsPzVe3WiM+svuXd9ixUGe6E13StaepJLDubz2GLyU+XQ=="],
+    "nypm": ["nypm@0.5.4", "", { "dependencies": { "citty": "^0.1.6", "consola": "^3.4.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "tinyexec": "^0.3.2", "ufo": "^1.5.4" }, "bin": { "nypm": "dist/cli.mjs" } }, "sha512-X0SNNrZiGU8/e/zAB7sCTtdxWTMSIO73q+xuKgglm2Yvzwlo8UoC5FNySQFCvl84uPaeADkqHUZUkWy4aH4xOA=="],
 
-    "nypm": ["nypm@0.6.2", "", { "dependencies": { "citty": "^0.1.6", "consola": "^3.4.2", "pathe": "^2.0.3", "pkg-types": "^2.3.0", "tinyexec": "^1.0.1" }, "bin": { "nypm": "dist/cli.mjs" } }, "sha512-7eM+hpOtrKrBDCh7Ypu2lJ9Z7PNZBdi/8AT3AX8xoCj43BBVHD0hPSTEvMtkMpfs8FCqBGhxB+uToIQimA111g=="],
+    "object-identity": ["object-identity@0.2.3", "", {}, "sha512-2J8Joz2Tf7aaylhqFvIUJHNgpuGR38Hh75Voq9GzTbStBxJUaOtN0K1aOd3cV5qp+ij1pMqRbPrGCGMOyX303w=="],
 
-    "object-inspect": ["object-inspect@1.13.4", "", {}, "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew=="],
-
-    "object-keys": ["object-keys@1.1.1", "", {}, "sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA=="],
-
-    "object.assign": ["object.assign@4.1.7", "", { "dependencies": { "call-bind": "^1.0.8", "call-bound": "^1.0.3", "define-properties": "^1.2.1", "es-object-atoms": "^1.0.0", "has-symbols": "^1.1.0", "object-keys": "^1.1.1" } }, "sha512-nK28WOo+QIjBkDduTINE4JkF/UJJKyf2EJxvJKfblDpyg0Q+pkOHNTL0Qwy6NP6FhE/EnzV73BxxqcJaXY9anw=="],
+    "obug": ["obug@2.2.1", "", {}, "sha512-XrsrhT5sybtKI6wakr2SPOlGZWWYbUXZ7a0jT8/QOeAPau+1X/bSegNe5YR75oJmEZQbKningirmGOEJCIk61Q=="],
 
     "ofetch": ["ofetch@1.5.1", "", { "dependencies": { "destr": "^2.0.5", "node-fetch-native": "^1.6.7", "ufo": "^1.6.1" } }, "sha512-2W4oUZlVaqAPAil6FUg/difl6YhqhUR7x2eZY4bQCko22UXg3hptq9KLQdqFClV+Wu85UX7hNtdGTngi/1BxcA=="],
 
-    "ohash": ["ohash@2.0.11", "", {}, "sha512-RdR9FQrFwNBNXAr4GixM8YaRZRJ5PUWbKYbE5eOsrwAjJW0q2REGcf79oYPsLyskQCZG1PLN+S/K1V00joZAoQ=="],
+    "ohash": ["ohash@2.0.12", "", {}, "sha512-65S/5gk9YSsaRjcyf7Nfa6h/d3E8/1gslpXfI4W7Dxn/oap8IKRuNT5VXkLQ1YFKIEg4apRY4Pj6aiwFzrDdmw=="],
 
-    "on-change": ["on-change@6.0.1", "", {}, "sha512-P7o0hkMahOhjb1niG28vLNAXsJrRcfpJvYWcTmPt/Tf4xedcF2PA1E9++N1tufY8/vIsaiJgHhjQp53hJCe+zw=="],
+    "on-change": ["on-change@6.0.2", "", {}, "sha512-08+12qcOVEA0fS9g/VxKS27HaT94nRutUT77J2dr8zv/unzXopvhBuF8tNLWsoLQ5IgrQ6eptGeGqUYat82U1w=="],
 
     "on-finished": ["on-finished@2.4.1", "", { "dependencies": { "ee-first": "1.1.1" } }, "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg=="],
 
-    "once": ["once@1.4.0", "", { "dependencies": { "wrappy": "1" } }, "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w=="],
-
     "onetime": ["onetime@6.0.0", "", { "dependencies": { "mimic-fn": "^4.0.0" } }, "sha512-1FlR+gjXK7X+AsAHso35MnyN5KqGwJRi/31ft6x0M194ht7S+rWAvd7PHss9xSKMzE0asv1pyIHaJYq+BbacAQ=="],
 
-    "open": ["open@10.2.0", "", { "dependencies": { "default-browser": "^5.2.1", "define-lazy-prop": "^3.0.0", "is-inside-container": "^1.0.0", "wsl-utils": "^0.1.0" } }, "sha512-YgBpdJHPyQ2UE5x+hlSXcnejzAvD0b22U2OuAP+8OnlJT+PjWPxtgmGqKKc+RgTM63U9gN0YzrYc71R2WT/hTA=="],
+    "open": ["open@11.0.0", "", { "dependencies": { "default-browser": "^5.4.0", "define-lazy-prop": "^3.0.0", "is-in-ssh": "^1.0.0", "is-inside-container": "^1.0.0", "powershell-utils": "^0.1.0", "wsl-utils": "^0.3.0" } }, "sha512-smsWv2LzFjP03xmvFoJ331ss6h+jixfA4UUV/Bsiyuu4YJPfN+FIQGOIiv4w9/+MoHkfkJ22UIaQWRVFRfH6Vw=="],
 
-    "own-keys": ["own-keys@1.0.1", "", { "dependencies": { "get-intrinsic": "^1.2.6", "object-keys": "^1.1.1", "safe-push-apply": "^1.0.0" } }, "sha512-qFOyK5PjiWZd+QQIh+1jhdb9LpxTF0qs7Pm8o5QHYZ0M3vKqSqzsZaEB6oWlxZ+q2sJBMI/Ktgd2N5ZwQoRHfg=="],
+    "openapi-types": ["openapi-types@12.1.3", "", {}, "sha512-N4YtSYJqghVu4iek2ZUvcN/0aqH1kRDuNqzcycDxhOUpg7GdvLa2F3DgS6yBNhInhv2r/6I0Flkn7CqL8+nIcw=="],
 
-    "oxc-minify": ["oxc-minify@0.96.0", "", { "optionalDependencies": { "@oxc-minify/binding-android-arm64": "0.96.0", "@oxc-minify/binding-darwin-arm64": "0.96.0", "@oxc-minify/binding-darwin-x64": "0.96.0", "@oxc-minify/binding-freebsd-x64": "0.96.0", "@oxc-minify/binding-linux-arm-gnueabihf": "0.96.0", "@oxc-minify/binding-linux-arm-musleabihf": "0.96.0", "@oxc-minify/binding-linux-arm64-gnu": "0.96.0", "@oxc-minify/binding-linux-arm64-musl": "0.96.0", "@oxc-minify/binding-linux-riscv64-gnu": "0.96.0", "@oxc-minify/binding-linux-s390x-gnu": "0.96.0", "@oxc-minify/binding-linux-x64-gnu": "0.96.0", "@oxc-minify/binding-linux-x64-musl": "0.96.0", "@oxc-minify/binding-wasm32-wasi": "0.96.0", "@oxc-minify/binding-win32-arm64-msvc": "0.96.0", "@oxc-minify/binding-win32-x64-msvc": "0.96.0" } }, "sha512-dXeeGrfPJJ4rMdw+NrqiCRtbzVX2ogq//R0Xns08zql2HjV3Zi2SBJ65saqfDaJzd2bcHqvGWH+M44EQCHPAcA=="],
+    "orderedmap": ["orderedmap@2.1.1", "", {}, "sha512-TvAWxi0nDe1j/rtMcWcIj94+Ffe6n7zhow33h40SKxmsmozs6dz/e+EajymfoFcHd7sxNn8yHM8839uixMOV6g=="],
 
-    "oxc-parser": ["oxc-parser@0.96.0", "", { "dependencies": { "@oxc-project/types": "^0.96.0" }, "optionalDependencies": { "@oxc-parser/binding-android-arm64": "0.96.0", "@oxc-parser/binding-darwin-arm64": "0.96.0", "@oxc-parser/binding-darwin-x64": "0.96.0", "@oxc-parser/binding-freebsd-x64": "0.96.0", "@oxc-parser/binding-linux-arm-gnueabihf": "0.96.0", "@oxc-parser/binding-linux-arm-musleabihf": "0.96.0", "@oxc-parser/binding-linux-arm64-gnu": "0.96.0", "@oxc-parser/binding-linux-arm64-musl": "0.96.0", "@oxc-parser/binding-linux-riscv64-gnu": "0.96.0", "@oxc-parser/binding-linux-s390x-gnu": "0.96.0", "@oxc-parser/binding-linux-x64-gnu": "0.96.0", "@oxc-parser/binding-linux-x64-musl": "0.96.0", "@oxc-parser/binding-wasm32-wasi": "0.96.0", "@oxc-parser/binding-win32-arm64-msvc": "0.96.0", "@oxc-parser/binding-win32-x64-msvc": "0.96.0" } }, "sha512-ucs6niJ5mZlYP3oTl4AK2eD2m7WLoSaljswnSFVYWrXzme5PtM97S7Ve1Tjx+/TKjanmEZuSt1f1qYi6SZvntw=="],
-
-    "oxc-transform": ["oxc-transform@0.96.0", "", { "optionalDependencies": { "@oxc-transform/binding-android-arm64": "0.96.0", "@oxc-transform/binding-darwin-arm64": "0.96.0", "@oxc-transform/binding-darwin-x64": "0.96.0", "@oxc-transform/binding-freebsd-x64": "0.96.0", "@oxc-transform/binding-linux-arm-gnueabihf": "0.96.0", "@oxc-transform/binding-linux-arm-musleabihf": "0.96.0", "@oxc-transform/binding-linux-arm64-gnu": "0.96.0", "@oxc-transform/binding-linux-arm64-musl": "0.96.0", "@oxc-transform/binding-linux-riscv64-gnu": "0.96.0", "@oxc-transform/binding-linux-s390x-gnu": "0.96.0", "@oxc-transform/binding-linux-x64-gnu": "0.96.0", "@oxc-transform/binding-linux-x64-musl": "0.96.0", "@oxc-transform/binding-wasm32-wasi": "0.96.0", "@oxc-transform/binding-win32-arm64-msvc": "0.96.0", "@oxc-transform/binding-win32-x64-msvc": "0.96.0" } }, "sha512-dQPNIF+gHpSkmC0+Vg9IktNyhcn28Y8R3eTLyzn52UNymkasLicl3sFAtz7oEVuFmCpgGjaUTKkwk+jW2cHpDQ=="],
-
-    "oxc-walker": ["oxc-walker@0.5.2", "", { "dependencies": { "magic-regexp": "^0.10.0" }, "peerDependencies": { "oxc-parser": ">=0.72.0" } }, "sha512-XYoZqWwApSKUmSDEFeOKdy3Cdh95cOcSU8f7yskFWE4Rl3cfL5uwyY+EV7Brk9mdNLy+t5SseJajd6g7KncvlA=="],
+    "oxc-walker": ["oxc-walker@1.1.1", "", { "peerDependencies": { "@oxc-project/types": ">=0.98.0", "oxc-parser": ">=0.98.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@oxc-project/types", "oxc-parser", "rolldown"] }, "sha512-Hwd7dq28zu/Er99+bpWp16CGwFrhyalJh0W3JOB7XpPvgWo3MqMi2ksWGKuzzA9zt50mJ2pIUwR5lpAdZ9ACNQ=="],
 
     "package-json-from-dist": ["package-json-from-dist@1.0.1", "", {}, "sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw=="],
 
-    "package-manager-detector": ["package-manager-detector@1.3.0", "", {}, "sha512-ZsEbbZORsyHuO00lY1kV3/t72yp6Ysay6Pd17ZAlNGuGwmWDLCJxFpRs0IzfXfj1o4icJOkUEioexFHzyPurSQ=="],
-
-    "parse-path": ["parse-path@7.1.0", "", { "dependencies": { "protocols": "^2.0.0" } }, "sha512-EuCycjZtfPcjWk7KTksnJ5xPMvWGA/6i4zrLYhRG0hGvC3GPU/jGUj3Cy+ZR0v30duV3e23R95T1lE2+lsndSw=="],
-
-    "parse-url": ["parse-url@9.2.0", "", { "dependencies": { "@types/parse-path": "^7.0.0", "parse-path": "^7.0.0" } }, "sha512-bCgsFI+GeGWPAvAiUv63ZorMeif3/U0zaXABGJbOWt5OH2KCaPHF6S+0ok4aqM9RuIPGyZdx9tR9l13PsW4AYQ=="],
+    "package-manager-detector": ["package-manager-detector@1.9.0", "", {}, "sha512-zAMfbta9nPA8AKkA4WdmNAT8R8s6Dk0/xwPsqNnRidMFcLo1YkLuPDTgs2f64XdzS8vbLNnoJ+uUIkgbz7oRHA=="],
 
     "parseurl": ["parseurl@1.3.3", "", {}, "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ=="],
 
     "path-browserify": ["path-browserify@1.0.1", "", {}, "sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g=="],
 
-    "path-is-absolute": ["path-is-absolute@1.0.1", "", {}, "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg=="],
-
     "path-key": ["path-key@3.1.1", "", {}, "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q=="],
 
     "path-parse": ["path-parse@1.0.7", "", {}, "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw=="],
 
-    "path-scurry": ["path-scurry@1.11.1", "", { "dependencies": { "lru-cache": "^10.2.0", "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0" } }, "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA=="],
+    "path-scurry": ["path-scurry@2.0.2", "", { "dependencies": { "lru-cache": "^11.0.0", "minipass": "^7.1.2" } }, "sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg=="],
 
     "path-type": ["path-type@6.0.0", "", {}, "sha512-Vj7sf++t5pBD637NSfkxpHSMfWaeig5+DKWLhcqIYx6mWQz5hdJTGDVMQiJcw1ZYkhs7AazKDGpRVji1LJCZUQ=="],
 
-    "pathe": ["pathe@1.1.2", "", {}, "sha512-whLdWMYL2TwI08hn8/ZqAbrVemu0LNaNNJZX73O6qaIdCTfXutsLhMkjdENX0qhsQ9uIimo4/aQOmXkoon2nDQ=="],
+    "pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
 
-    "perfect-debounce": ["perfect-debounce@2.0.0", "", {}, "sha512-fkEH/OBiKrqqI/yIgjR92lMfs2K8105zt/VT6+7eTjNwisrsh47CeIED9z58zI7DfKdH3uHAn25ziRZn3kgAow=="],
+    "perfect-debounce": ["perfect-debounce@2.1.0", "", {}, "sha512-LjgdTytVFXeUgtHZr9WYViYSM/g8MkcTPYDlPa3cDqMirHjKiSZPYd6DoL7pK8AJQr+uWkQvCjHNdiMqsrJs+g=="],
 
     "picocolors": ["picocolors@1.1.1", "", {}, "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA=="],
 
-    "picomatch": ["picomatch@4.0.3", "", {}, "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q=="],
-
-    "pkg-types": ["pkg-types@2.3.0", "", { "dependencies": { "confbox": "^0.2.2", "exsolve": "^1.0.7", "pathe": "^2.0.3" } }, "sha512-SIqCzDRg0s9npO5XQ3tNZioRY1uK06lA41ynBC1YmFTmnY6FjUjVt6s4LoADmwoig1qqD0oK8h1p/8mlMx8Oig=="],
-
-    "possible-typed-array-names": ["possible-typed-array-names@1.1.0", "", {}, "sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg=="],
-
-    "postcss": ["postcss@8.5.6", "", { "dependencies": { "nanoid": "^3.3.11", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" } }, "sha512-3Ybi1tAuwAP9s0r1UQ2J4n5Y0G05bJkpUIO0/bI9MhwmD70S5aTWbXGBwxHrelT+XM1k6dM0pk+SwNkpTRN7Pg=="],
-
-    "postcss-calc": ["postcss-calc@10.1.1", "", { "dependencies": { "postcss-selector-parser": "^7.0.0", "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.38" } }, "sha512-NYEsLHh8DgG/PRH2+G9BTuUdtf9ViS+vdoQ0YA5OQdGsfN4ztiwtDWNtBl9EKeqNMFnIu8IKZ0cLxEQ5r5KVMw=="],
-
-    "postcss-colormin": ["postcss-colormin@7.0.5", "", { "dependencies": { "browserslist": "^4.27.0", "caniuse-api": "^3.0.0", "colord": "^2.9.3", "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-ekIBP/nwzRWhEMmIxHHbXHcMdzd1HIUzBECaj5KEdLz9DVP2HzT065sEhvOx1dkLjYW7jyD0CngThx6bpFi2fA=="],
-
-    "postcss-convert-values": ["postcss-convert-values@7.0.8", "", { "dependencies": { "browserslist": "^4.27.0", "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-+XNKuPfkHTCEo499VzLMYn94TiL3r9YqRE3Ty+jP7UX4qjewUONey1t7CG21lrlTLN07GtGM8MqFVp86D4uKJg=="],
-
-    "postcss-discard-comments": ["postcss-discard-comments@7.0.5", "", { "dependencies": { "postcss-selector-parser": "^7.1.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-IR2Eja8WfYgN5n32vEGSctVQ1+JARfu4UH8M7bgGh1bC+xI/obsPJXaBpQF7MAByvgwZinhpHpdrmXtvVVlKcQ=="],
-
-    "postcss-discard-duplicates": ["postcss-discard-duplicates@7.0.2", "", { "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-eTonaQvPZ/3i1ASDHOKkYwAybiM45zFIc7KXils4mQmHLqIswXD9XNOKEVxtTFnsmwYzF66u4LMgSr0abDlh5w=="],
-
-    "postcss-discard-empty": ["postcss-discard-empty@7.0.1", "", { "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-cFrJKZvcg/uxB6Ijr4l6qmn3pXQBna9zyrPC+sK0zjbkDUZew+6xDltSF7OeB7rAtzaaMVYSdbod+sZOCWnMOg=="],
-
-    "postcss-discard-overridden": ["postcss-discard-overridden@7.0.1", "", { "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-7c3MMjjSZ/qYrx3uc1940GSOzN1Iqjtlqe8uoSg+qdVPYyRb0TILSqqmtlSFuE4mTDECwsm397Ya7iXGzfF7lg=="],
-
-    "postcss-merge-longhand": ["postcss-merge-longhand@7.0.5", "", { "dependencies": { "postcss-value-parser": "^4.2.0", "stylehacks": "^7.0.5" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-Kpu5v4Ys6QI59FxmxtNB/iHUVDn9Y9sYw66D6+SZoIk4QTz1prC4aYkhIESu+ieG1iylod1f8MILMs1Em3mmIw=="],
-
-    "postcss-merge-rules": ["postcss-merge-rules@7.0.7", "", { "dependencies": { "browserslist": "^4.27.0", "caniuse-api": "^3.0.0", "cssnano-utils": "^5.0.1", "postcss-selector-parser": "^7.1.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-njWJrd/Ms6XViwowaaCc+/vqhPG3SmXn725AGrnl+BgTuRPEacjiLEaGq16J6XirMJbtKkTwnt67SS+e2WGoew=="],
-
-    "postcss-minify-font-values": ["postcss-minify-font-values@7.0.1", "", { "dependencies": { "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-2m1uiuJeTplll+tq4ENOQSzB8LRnSUChBv7oSyFLsJRtUgAAJGP6LLz0/8lkinTgxrmJSPOEhgY1bMXOQ4ZXhQ=="],
+    "picomatch": ["picomatch@4.0.7", "", {}, "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA=="],
 
-    "postcss-minify-gradients": ["postcss-minify-gradients@7.0.1", "", { "dependencies": { "colord": "^2.9.3", "cssnano-utils": "^5.0.1", "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-X9JjaysZJwlqNkJbUDgOclyG3jZEpAMOfof6PUZjPnPrePnPG62pS17CjdM32uT1Uq1jFvNSff9l7kNbmMSL2A=="],
+    "pkg-types": ["pkg-types@2.3.3", "", { "dependencies": { "confbox": "^0.3.1", "exsolve": "^1.1.1", "pathe": "^2.0.3" } }, "sha512-j/lCFdcppV0JxWpCEITdbDltBxPP6cHT+yNJ6Go2OgoSA9518X847X9z0p6LtA4Nc16+eQzCZjRrWanTGvHJ5w=="],
 
-    "postcss-minify-params": ["postcss-minify-params@7.0.5", "", { "dependencies": { "browserslist": "^4.27.0", "cssnano-utils": "^5.0.1", "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-FGK9ky02h6Ighn3UihsyeAH5XmLEE2MSGH5Tc4tXMFtEDx7B+zTG6hD/+/cT+fbF7PbYojsmmWjyTwFwW1JKQQ=="],
+    "postcss": ["postcss@8.5.31", "", { "dependencies": { "nanoid": "^3.3.20", "picocolors": "^1.1.1", "source-map-js": "^1.2.2" } }, "sha512-YUbWYCgErwnMAVkjUnYa+KlMBzGpHwiIt/DE7f0G33AuX2LH9UcTk6KgWxd3zRU+pN3u/C+Xl3EnMLM4Hea7Sg=="],
 
-    "postcss-minify-selectors": ["postcss-minify-selectors@7.0.5", "", { "dependencies": { "cssesc": "^3.0.0", "postcss-selector-parser": "^7.1.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-x2/IvofHcdIrAm9Q+p06ZD1h6FPcQ32WtCRVodJLDR+WMn8EVHI1kvLxZuGKz/9EY5nAmI6lIQIrpo4tBy5+ug=="],
+    "postcss-calc": ["postcss-calc@11.2.3", "", { "dependencies": { "@csstools/css-tokenizer": "^4.0.2" }, "peerDependencies": { "postcss": "^8.5.29" } }, "sha512-pFW3MR2a4W7uHcSGUiyQGGXZWHon83ljbNwnUJ1mRKublWQbv+3o9NiqhlV4TJfNby+U+zLY2OgiywzhA5eFqw=="],
 
-    "postcss-normalize-charset": ["postcss-normalize-charset@7.0.1", "", { "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-sn413ofhSQHlZFae//m9FTOfkmiZ+YQXsbosqOWRiVQncU2BA3daX3n0VF3cG6rGLSFVc5Di/yns0dFfh8NFgQ=="],
-
-    "postcss-normalize-display-values": ["postcss-normalize-display-values@7.0.1", "", { "dependencies": { "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-E5nnB26XjSYz/mGITm6JgiDpAbVuAkzXwLzRZtts19jHDUBFxZ0BkXAehy0uimrOjYJbocby4FVswA/5noOxrQ=="],
-
-    "postcss-normalize-positions": ["postcss-normalize-positions@7.0.1", "", { "dependencies": { "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-pB/SzrIP2l50ZIYu+yQZyMNmnAcwyYb9R1fVWPRxm4zcUFCY2ign7rcntGFuMXDdd9L2pPNUgoODDk91PzRZuQ=="],
+    "postcss-value-parser": ["postcss-value-parser@4.2.0", "", {}, "sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ=="],
 
-    "postcss-normalize-repeat-style": ["postcss-normalize-repeat-style@7.0.1", "", { "dependencies": { "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-NsSQJ8zj8TIDiF0ig44Byo3Jk9e4gNt9x2VIlJudnQQ5DhWAHJPF4Tr1ITwyHio2BUi/I6Iv0HRO7beHYOloYQ=="],
+    "powershell-utils": ["powershell-utils@0.1.0", "", {}, "sha512-dM0jVuXJPsDN6DvRpea484tCUaMiXWjuCn++HGTqUWzGDjv5tZkEZldAJ/UMlqRYGFrD/etByo4/xOuC/snX2A=="],
 
-    "postcss-normalize-string": ["postcss-normalize-string@7.0.1", "", { "dependencies": { "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-QByrI7hAhsoze992kpbMlJSbZ8FuCEc1OT9EFbZ6HldXNpsdpZr+YXC5di3UEv0+jeZlHbZcoCADgb7a+lPmmQ=="],
+    "pretty-bytes": ["pretty-bytes@7.2.0", "", {}, "sha512-T2kroepGB5DRVbkN/nOpW03+VRWqdtJhZNuCW3wYk3chdPjgi4GcTBOaxWfHq1MIM0ypidxsSWbQaAiRpxnXmg=="],
 
-    "postcss-normalize-timing-functions": ["postcss-normalize-timing-functions@7.0.1", "", { "dependencies": { "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-bHifyuuSNdKKsnNJ0s8fmfLMlvsQwYVxIoUBnowIVl2ZAdrkYQNGVB4RxjfpvkMjipqvbz0u7feBZybkl/6NJg=="],
+    "process": ["process@0.11.10", "", {}, "sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A=="],
 
-    "postcss-normalize-unicode": ["postcss-normalize-unicode@7.0.5", "", { "dependencies": { "browserslist": "^4.27.0", "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-X6BBwiRxVaFHrb2WyBMddIeB5HBjJcAaUHyhLrM2FsxSq5TFqcHSsK7Zu1otag+o0ZphQGJewGH1tAyrD0zX1Q=="],
+    "process-nextick-args": ["process-nextick-args@2.0.1", "", {}, "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag=="],
 
-    "postcss-normalize-url": ["postcss-normalize-url@7.0.1", "", { "dependencies": { "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-sUcD2cWtyK1AOL/82Fwy1aIVm/wwj5SdZkgZ3QiUzSzQQofrbq15jWJ3BA7Z+yVRwamCjJgZJN0I9IS7c6tgeQ=="],
+    "promise-limit": ["promise-limit@2.7.0", "", {}, "sha512-7nJ6v5lnJsXwGprnGXga4wx6d1POjvi5Qmf1ivTRxTjH4Z/9Czja/UCMLVmB9N93GeWOU93XaFaEt6jbuoagNw=="],
 
-    "postcss-normalize-whitespace": ["postcss-normalize-whitespace@7.0.1", "", { "dependencies": { "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-vsbgFHMFQrJBJKrUFJNZ2pgBeBkC2IvvoHjz1to0/0Xk7sII24T0qFOiJzG6Fu3zJoq/0yI4rKWi7WhApW+EFA=="],
+    "proper-lockfile": ["proper-lockfile@4.1.2", "", { "dependencies": { "graceful-fs": "^4.2.4", "retry": "^0.12.0", "signal-exit": "^3.0.2" } }, "sha512-TjNPblN4BwAWMXU8s9AEz4JmQxnD1NNL7bNOY/AKUzyamc379FWASUhc/K1pL2noVb+XmZKLL68cjzLsiOAMaA=="],
 
-    "postcss-ordered-values": ["postcss-ordered-values@7.0.2", "", { "dependencies": { "cssnano-utils": "^5.0.1", "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-AMJjt1ECBffF7CEON/Y0rekRLS6KsePU6PRP08UqYW4UGFRnTXNrByUzYK1h8AC7UWTZdQ9O3Oq9kFIhm0SFEw=="],
+    "prosemirror-changeset": ["prosemirror-changeset@2.4.4", "", { "dependencies": { "prosemirror-transform": "^1.0.0" } }, "sha512-Gyuz9jYdrAeA9I7AholyOes9KUmv/lEwsC5O9s5xF5VB3EgTPsXMGUxz4+H1B+wKVPdZbvRcg1Cp3x8qX+8ofA=="],
 
-    "postcss-reduce-initial": ["postcss-reduce-initial@7.0.5", "", { "dependencies": { "browserslist": "^4.27.0", "caniuse-api": "^3.0.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-RHagHLidG8hTZcnr4FpyMB2jtgd/OcyAazjMhoy5qmWJOx1uxKh4ntk0Pb46ajKM0rkf32lRH4C8c9qQiPR6IA=="],
+    "prosemirror-commands": ["prosemirror-commands@1.7.2", "", { "dependencies": { "prosemirror-model": "^1.0.0", "prosemirror-state": "^1.0.0", "prosemirror-transform": "^1.10.2" } }, "sha512-q6Q6szxqdu9Xd6EcdKsqXghu5nQdZTpB4Q9yd04WRc7/jt763e/rT60Owh0L1GYY+T46o5rD+9lEN36dZS43tw=="],
 
-    "postcss-reduce-transforms": ["postcss-reduce-transforms@7.0.1", "", { "dependencies": { "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-MhyEbfrm+Mlp/36hvZ9mT9DaO7dbncU0CvWI8V93LRkY6IYlu38OPg3FObnuKTUxJ4qA8HpurdQOo5CyqqO76g=="],
+    "prosemirror-dropcursor": ["prosemirror-dropcursor@1.8.4", "", { "dependencies": { "prosemirror-state": "^1.0.0", "prosemirror-transform": "^1.1.0", "prosemirror-view": "^1.1.0" } }, "sha512-VmKxhcA6a+h5oPSYmfF1ZNeQqPbyYaIxqZsKqeYCyTlPtrjUgNaHL3P8vVaO19oqAV0zuaM/axkowZHrB1P3Tg=="],
 
-    "postcss-selector-parser": ["postcss-selector-parser@7.1.0", "", { "dependencies": { "cssesc": "^3.0.0", "util-deprecate": "^1.0.2" } }, "sha512-8sLjZwK0R+JlxlYcTuVnyT2v+htpdrjDOKuMcOVdYjt52Lh8hWRYpxBPoKx/Zg+bcjc3wx6fmQevMmUztS/ccA=="],
+    "prosemirror-gapcursor": ["prosemirror-gapcursor@1.4.1", "", { "dependencies": { "prosemirror-keymap": "^1.0.0", "prosemirror-model": "^1.0.0", "prosemirror-state": "^1.0.0", "prosemirror-view": "^1.0.0" } }, "sha512-pMdYaEnjNMSwl11yjEGtgTmLkR08m/Vl+Jj443167p9eB3HVQKhYCc4gmHVDsLPODfZfjr/MmirsdyZziXbQKw=="],
 
-    "postcss-svgo": ["postcss-svgo@7.1.0", "", { "dependencies": { "postcss-value-parser": "^4.2.0", "svgo": "^4.0.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-KnAlfmhtoLz6IuU3Sij2ycusNs4jPW+QoFE5kuuUOK8awR6tMxZQrs5Ey3BUz7nFCzT3eqyFgqkyrHiaU2xx3w=="],
+    "prosemirror-history": ["prosemirror-history@1.5.1", "", { "dependencies": { "prosemirror-state": "^1.2.2", "prosemirror-transform": "^1.0.0", "prosemirror-view": "^1.31.0", "rope-sequence": "^1.3.0" } }, "sha512-onlwnqKvgtFg6srZOmDOAhlAy1FIHQpOExORybX0S+DvJepE5tPALrB9iGet/2sqqqrelSnB10OoiOJqAvu2DA=="],
 
-    "postcss-unique-selectors": ["postcss-unique-selectors@7.0.4", "", { "dependencies": { "postcss-selector-parser": "^7.1.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-pmlZjsmEAG7cHd7uK3ZiNSW6otSZ13RHuZ/4cDN/bVglS5EpF2r2oxY99SuOHa8m7AWoBCelTS3JPpzsIs8skQ=="],
+    "prosemirror-inputrules": ["prosemirror-inputrules@1.5.1", "", { "dependencies": { "prosemirror-state": "^1.0.0", "prosemirror-transform": "^1.0.0" } }, "sha512-7wj4uMjKaXWAQ1CDgxNzNtR9AlsuwzHfdFH1ygEHA2KHF2DOEaXl1CJfNPAKCg9qNEh4rum975QLaCiQPyY6Fw=="],
 
-    "postcss-value-parser": ["postcss-value-parser@4.2.0", "", {}, "sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ=="],
+    "prosemirror-keymap": ["prosemirror-keymap@1.2.3", "", { "dependencies": { "prosemirror-state": "^1.0.0", "w3c-keyname": "^2.2.0" } }, "sha512-4HucRlpiLd1IPQQXNqeo81BGtkY8Ai5smHhKW9jjPKRc2wQIxksg7Hl1tTI2IfT2B/LgX6bfYvXxEpJl7aKYKw=="],
 
-    "pretty-bytes": ["pretty-bytes@6.1.1", "", {}, "sha512-mQUvGU6aUFQ+rNvTIAcZuWGRT9a6f6Yrg9bHs4ImKF+HZCEK+plBvnAZYSIQztknZF2qnzNtr6F8s0+IuptdlQ=="],
+    "prosemirror-model": ["prosemirror-model@1.25.12", "", { "dependencies": { "orderedmap": "^2.0.0" } }, "sha512-Ue2gTmXMa7EhpLNhC7J+h4+ykD8ha12K6rrZFFKKJHBForfIStw5gJ6Zrf1mqqAa9NmpmEB4wp9bKmA4eUVjWg=="],
 
-    "process": ["process@0.11.10", "", {}, "sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A=="],
+    "prosemirror-schema-list": ["prosemirror-schema-list@1.5.1", "", { "dependencies": { "prosemirror-model": "^1.0.0", "prosemirror-state": "^1.0.0", "prosemirror-transform": "^1.7.3" } }, "sha512-927lFx/uwyQaGwJxLWCZRkjXG0p48KpMj6ueoYiu4JX05GGuGcgzAy62dfiV8eFZftgyBUvLx76RsMe20fJl+Q=="],
 
-    "process-nextick-args": ["process-nextick-args@2.0.1", "", {}, "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag=="],
+    "prosemirror-state": ["prosemirror-state@1.4.4", "", { "dependencies": { "prosemirror-model": "^1.0.0", "prosemirror-transform": "^1.0.0", "prosemirror-view": "^1.27.0" } }, "sha512-6jiYHH2CIGbCfnxdHbXZ12gySFY/fz/ulZE333G6bPqIZ4F+TXo9ifiR86nAHpWnfoNjOb3o5ESi7J8Uz1jXHw=="],
 
-    "promise-limit": ["promise-limit@2.7.0", "", {}, "sha512-7nJ6v5lnJsXwGprnGXga4wx6d1POjvi5Qmf1ivTRxTjH4Z/9Czja/UCMLVmB9N93GeWOU93XaFaEt6jbuoagNw=="],
+    "prosemirror-tables": ["prosemirror-tables@1.8.5", "", { "dependencies": { "prosemirror-keymap": "^1.2.3", "prosemirror-model": "^1.25.4", "prosemirror-state": "^1.4.4", "prosemirror-transform": "^1.10.5", "prosemirror-view": "^1.41.4" } }, "sha512-V/0cDCsHKHe/tfWkeCmthNUcEp1IVO3p6vwN8XtwE9PZQLAZJigbw3QoraAdfJPir4NKJtNvOB8oYGKRl+t0Dw=="],
 
-    "prompts": ["prompts@2.4.2", "", { "dependencies": { "kleur": "^3.0.3", "sisteransi": "^1.0.5" } }, "sha512-NxNv/kLguCA7p3jE8oL2aEBsrJWgAakBpgmgK6lpPWV+WuOmY6r2/zbAVnP+T8bQlA0nzHXSJSJW0Hq7ylaD2Q=="],
+    "prosemirror-transform": ["prosemirror-transform@1.12.2", "", { "dependencies": { "prosemirror-model": "^1.21.0" } }, "sha512-PE/aY0HEY4zczvmqrilgkUK/WautF0chvMqkmM/iN5/aPHvwrCWaQZjS6CIZp+K84YrvPFqrL+YArrfJX8xX7g=="],
 
-    "protocols": ["protocols@2.0.2", "", {}, "sha512-hHVTzba3wboROl0/aWRRG9dMytgH6ow//STBZh43l/wQgmMhYhOFi0EHWAPtoCz9IAUymsyP0TSBHkhgMEGNnQ=="],
+    "prosemirror-view": ["prosemirror-view@1.42.6", "", { "dependencies": { "prosemirror-model": "^1.25.12", "prosemirror-state": "^1.0.0", "prosemirror-transform": "^1.1.0" } }, "sha512-3g25f6hKV2bBxo3puH3EcYWmmVNSH0iWmNsMVT7sugDSpA025jgpOLarcDWr39SdzPjYMaiYtRdNtXialPSjEQ=="],
 
-    "punycode": ["punycode@2.3.1", "", {}, "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg=="],
+    "ptr.js": ["ptr.js@1.3.0", "", {}, "sha512-zDgHHxE8NZKHsU2SUcYjMhMHI5C03mElQqDQC6OAkZ0M+VlVoi1hStRjUVWdthYcvC1ZCPGbgxQoBf6Pmz9ykw=="],
 
     "quansync": ["quansync@0.2.11", "", {}, "sha512-AifT7QEbW9Nri4tAwR5M/uzpBuqfZf+zwaEM/QkzEjj7NBuFD2rBuy0K3dE+8wltbezDV7JMA0WfnCPYRSYbXA=="],
 
@@ -1439,89 +1311,65 @@
 
     "radix3": ["radix3@1.1.2", "", {}, "sha512-b484I/7b8rDEdSDKckSSBA8knMpcdsXudlE/LNL639wFoHKwLbEkQFZHWEYwDC0wa0FKUcCY+GAF73Z7wxNVFA=="],
 
-    "randombytes": ["randombytes@2.1.0", "", { "dependencies": { "safe-buffer": "^5.1.0" } }, "sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ=="],
-
-    "range-parser": ["range-parser@1.2.1", "", {}, "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg=="],
+    "range-parser": ["range-parser@1.3.0", "", {}, "sha512-hek2mFQpPuI4E1BBKrSto+BU3e3x4xuarsbiwr3+lf7p44juvFMV0XFWQAP3xUyqXA4RrXLIoaSUGbSt056ZMw=="],
 
-    "rc9": ["rc9@2.1.2", "", { "dependencies": { "defu": "^6.1.4", "destr": "^2.0.3" } }, "sha512-btXCnMmRIBINM2LDZoEmOogIZU7Qe7zn4BpomSKZ/ykbLObuBdvG+mFq11DL6fjH1DRwHhrlgtYWG96bJiC7Cg=="],
+    "rc9": ["rc9@3.1.0", "", { "dependencies": { "defu": "^6.1.7", "destr": "^2.0.5" } }, "sha512-ufjkNVzbRHKcCOmTahZkmVsyc3W+MSk3jY03m+a7tGHkIsdVMG9l10/3HvFbWkkKzY5VFp3pkRsIo/UYgmFL7Q=="],
 
-    "readable-stream": ["readable-stream@4.7.0", "", { "dependencies": { "abort-controller": "^3.0.0", "buffer": "^6.0.3", "events": "^3.3.0", "process": "^0.11.10", "string_decoder": "^1.3.0" } }, "sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg=="],
+    "readable-stream": ["readable-stream@4.8.0", "", { "dependencies": { "abort-controller": "^3.0.0", "buffer": "^6.0.3", "events": "^3.3.0", "process": "^0.11.10", "string_decoder": "^1.3.0" } }, "sha512-2jhTTU3Eilp/2DMT71gbcoqC35eQHasMJH0RHkYxwlxIv3+FR6Y5xAFZIwEGLxKkjZYEFlsiMNIdwUqjK2lLHQ=="],
 
     "readdir-glob": ["readdir-glob@1.1.3", "", { "dependencies": { "minimatch": "^5.1.0" } }, "sha512-v05I2k7xN8zXvPD9N+z/uhXPaj0sUFCe2rcWZIpBsqxfP7xXFQ0tipAd/wjj1YxWyWtUS5IDJpOG82JKt2EAVA=="],
 
-    "readdirp": ["readdirp@4.1.2", "", {}, "sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg=="],
+    "readdirp": ["readdirp@5.1.1", "", {}, "sha512-Kko+Y5XQ6fM+Ce3dq3m9YGxnacYZYl9cA1wZjaF3Vbry2L3i1qVg8+CAgNPsXRArPMUMCaOR7oa9Nqntc43JKA=="],
 
     "redis-errors": ["redis-errors@1.2.0", "", {}, "sha512-1qny3OExCf0UvUV/5wpYKf2YwPcOqXzkwKKSmKHiE6ZMQs5heeE/c8eXK+PNllPvmjgAbfnsbpkGZWy8cBpn9w=="],
 
     "redis-parser": ["redis-parser@3.0.0", "", { "dependencies": { "redis-errors": "^1.0.0" } }, "sha512-DJnGAeenTdpMEH6uAJRK/uiyEIH9WVsUmoLwzudwGJUwZPp80PDBWPHXSAGNPwNvIXAbe7MSUB1zQFugFml66A=="],
 
-    "reflect.getprototypeof": ["reflect.getprototypeof@1.0.10", "", { "dependencies": { "call-bind": "^1.0.8", "define-properties": "^1.2.1", "es-abstract": "^1.23.9", "es-errors": "^1.3.0", "es-object-atoms": "^1.0.0", "get-intrinsic": "^1.2.7", "get-proto": "^1.0.1", "which-builtin-type": "^1.2.1" } }, "sha512-00o4I+DVrefhv+nX0ulyi3biSHCPDe+yLv5o/p6d/UVlirijB8E16FtfwSAi4g3tcqrQ4lRAqQSoFEZJehYEcw=="],
-
-    "regenerate": ["regenerate@1.4.2", "", {}, "sha512-zrceR/XhGYU/d/opr2EKO7aRHUeiBI8qjtfHqADTwZd6Szfy16la6kqD0MIUs5z5hx6AaKa+PixpPrR289+I0A=="],
-
-    "regenerate-unicode-properties": ["regenerate-unicode-properties@10.2.0", "", { "dependencies": { "regenerate": "^1.4.2" } }, "sha512-DqHn3DwbmmPVzeKj9woBadqmXxLvQoQIwu7nopMc72ztvxVmVk2SBhSnx67zuye5TP+lJsb/TBQsjLKhnDf3MA=="],
-
     "regexp-tree": ["regexp-tree@0.1.27", "", { "bin": { "regexp-tree": "bin/regexp-tree" } }, "sha512-iETxpjK6YoRWJG5o6hXLwvjYAoW+FEZn9os0PD/b6AP6xQwsa/Y7lCVgIixBbUPMfhu+i2LtdeAqVTgGlQarfA=="],
 
-    "regexp.prototype.flags": ["regexp.prototype.flags@1.5.4", "", { "dependencies": { "call-bind": "^1.0.8", "define-properties": "^1.2.1", "es-errors": "^1.3.0", "get-proto": "^1.0.1", "gopd": "^1.2.0", "set-function-name": "^2.0.2" } }, "sha512-dYqgNSZbDwkaJ2ceRd9ojCGjBq+mOm9LmtXnAnEGyHhN/5R7iDW2TRw3h+o/jCFxus3P2LfWIIiwowAjANm7IA=="],
+    "reka-ui": ["reka-ui@2.11.0", "", { "dependencies": { "@floating-ui/vue": "^2.0.1", "@internationalized/date": "^3.5.0", "@internationalized/number": "^3.5.0", "@tanstack/vue-virtual": "^3.12.0", "@vueuse/core": "^14.1.0", "@vueuse/shared": "^14.1.0", "aria-hidden": "^1.2.4", "defu": "^6.1.5", "ohash": "^2.0.11" }, "peerDependencies": { "vue": ">= 3.4.0" } }, "sha512-ilkpm4bIAol4jwzm4tpm3WVcffyGOpqksNZL1k1qO9QmIwAA+q8jroxjkUGLEn/GddfdExFfvofWfQiKZszUeQ=="],
 
-    "regexpu-core": ["regexpu-core@6.2.0", "", { "dependencies": { "regenerate": "^1.4.2", "regenerate-unicode-properties": "^10.2.0", "regjsgen": "^0.8.0", "regjsparser": "^0.12.0", "unicode-match-property-ecmascript": "^2.0.0", "unicode-match-property-value-ecmascript": "^2.1.0" } }, "sha512-H66BPQMrv+V16t8xtmq+UC0CBpiTBA60V8ibS1QVReIp8T1z8hwFxqcGzm9K6lgsN7sB5edVH8a+ze6Fqm4weA=="],
+    "resolve": ["resolve@1.22.13", "", { "dependencies": { "es-errors": "^1.3.0", "is-core-module": "^2.17.0", "path-parse": "^1.0.7", "supports-preserve-symlinks-flag": "^1.0.0" }, "bin": { "resolve": "bin/resolve" } }, "sha512-Dj/cW9zBV2aRj6XzCxuGIs3ESZKv02jixne3q6jFZYZ3/Tg09gHHviSMDL4kObh9pqSahdRHEnDoaP2gn8YLhA=="],
 
-    "regjsgen": ["regjsgen@0.8.0", "", {}, "sha512-RvwtGe3d7LvWiDQXeQw8p5asZUmfU1G/l6WbUXeHta7Y2PEIvBTwH6E2EfmYUK8pxcxEdEmaomqyp0vZZ7C+3Q=="],
+    "resolve-from": ["resolve-from@5.0.0", "", {}, "sha512-qYg9KP24dD5qka9J47d0aVky0N+b4fTU89LN9iDnjB5waksiC49rvMB0PrUJQGoTmH50XPiqOvAjDfaijGxYZw=="],
 
-    "regjsparser": ["regjsparser@0.12.0", "", { "dependencies": { "jsesc": "~3.0.2" }, "bin": { "regjsparser": "bin/parser" } }, "sha512-cnE+y8bz4NhMjISKbgeVJtqNbtf5QpjZP+Bslo+UqkIt9QPnX9q095eiRRASJG1/tz6dlNr6Z5NsBiWYokp6EQ=="],
+    "resolve-pkg-maps": ["resolve-pkg-maps@1.0.0", "", {}, "sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw=="],
 
-    "require-directory": ["require-directory@2.1.1", "", {}, "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q=="],
+    "retry": ["retry@0.12.0", "", {}, "sha512-9LkiTwjUh6rT555DtE9rTX+BKByPfrMzEAtnlEtdEwr3Nkffwiihqe2bWADg+OQRjt9gl6ICdmB/ZFDCGAtSow=="],
 
-    "require-from-string": ["require-from-string@2.0.2", "", {}, "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw=="],
+    "reusify": ["reusify@1.1.0", "", {}, "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw=="],
 
-    "resolve": ["resolve@1.22.10", "", { "dependencies": { "is-core-module": "^2.16.0", "path-parse": "^1.0.7", "supports-preserve-symlinks-flag": "^1.0.0" }, "bin": { "resolve": "bin/resolve" } }, "sha512-NPRy+/ncIMeDlTAsuqwKIiferiawhefFJtkNSW0qZJEqMEb+qBt/77B/jGeeek+F0uOeN05CDa6HXbbIgtVX4w=="],
+    "rolldown": ["rolldown@1.2.14", "", { "dependencies": { "@oxc-project/types": "=0.154.0", "@rolldown/pluginutils": "^1.0.0" }, "optionalDependencies": { "@rolldown/binding-android-arm-eabi": "1.2.14", "@rolldown/binding-android-arm64": "1.2.14", "@rolldown/binding-darwin-arm64": "1.2.14", "@rolldown/binding-darwin-x64": "1.2.14", "@rolldown/binding-freebsd-x64": "1.2.14", "@rolldown/binding-linux-arm-gnueabihf": "1.2.14", "@rolldown/binding-linux-arm64-gnu": "1.2.14", "@rolldown/binding-linux-arm64-musl": "1.2.14", "@rolldown/binding-linux-ppc64-gnu": "1.2.14", "@rolldown/binding-linux-s390x-gnu": "1.2.14", "@rolldown/binding-linux-x64-gnu": "1.2.14", "@rolldown/binding-linux-x64-musl": "1.2.14", "@rolldown/binding-openharmony-arm64": "1.2.14", "@rolldown/binding-win32-arm64-msvc": "1.2.14", "@rolldown/binding-win32-x64-msvc": "1.2.14" }, "bin": { "rolldown": "./bin/cli.mjs" } }, "sha512-eTBTTqMR6uHKLgcUqpJP8ntzDI6V4LYA8negAMBEI7gkgVvOdrx6VsvS2Ym+83KhOPdLCHWJu0w7UQFJZhHKNw=="],
 
-    "resolve-from": ["resolve-from@5.0.0", "", {}, "sha512-qYg9KP24dD5qka9J47d0aVky0N+b4fTU89LN9iDnjB5waksiC49rvMB0PrUJQGoTmH50XPiqOvAjDfaijGxYZw=="],
+    "rolldown-string": ["rolldown-string@0.3.1", "", { "dependencies": { "magic-string": "^1.0.0" }, "peerDependencies": { "rolldown": "*" }, "optionalPeers": ["rolldown"] }, "sha512-dv8GOXkYqUQdI0rsXB8hmzO95pKWSuX2eg5/JSJa9czfEVIFuKNR7ZJDfat8LlmD35RAhWY+evS7/wXXqFDfSg=="],
 
-    "reusify": ["reusify@1.1.0", "", {}, "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw=="],
+    "rollup": ["rollup@4.64.10", "", { "dependencies": { "@types/estree": "1.0.9" }, "optionalDependencies": { "@napi-rs/lzma-linux-x64-gnu": "1.5.1", "@rollup/rollup-android-arm-eabi": "4.64.10", "@rollup/rollup-android-arm64": "4.64.10", "@rollup/rollup-darwin-arm64": "4.64.10", "@rollup/rollup-darwin-x64": "4.64.10", "@rollup/rollup-freebsd-arm64": "4.64.10", "@rollup/rollup-freebsd-x64": "4.64.10", "@rollup/rollup-linux-arm-gnueabihf": "4.64.10", "@rollup/rollup-linux-arm-musleabihf": "4.64.10", "@rollup/rollup-linux-arm64-gnu": "4.64.10", "@rollup/rollup-linux-arm64-musl": "4.64.10", "@rollup/rollup-linux-loong64-gnu": "4.64.10", "@rollup/rollup-linux-loong64-musl": "4.64.10", "@rollup/rollup-linux-ppc64-gnu": "4.64.10", "@rollup/rollup-linux-ppc64-musl": "4.64.10", "@rollup/rollup-linux-riscv64-gnu": "4.64.10", "@rollup/rollup-linux-riscv64-musl": "4.64.10", "@rollup/rollup-linux-s390x-gnu": "4.64.10", "@rollup/rollup-linux-x64-gnu": "4.64.10", "@rollup/rollup-linux-x64-musl": "4.64.10", "@rollup/rollup-openbsd-x64": "4.64.10", "@rollup/rollup-openharmony-arm64": "4.64.10", "@rollup/rollup-win32-arm64-msvc": "4.64.10", "@rollup/rollup-win32-ia32-msvc": "4.64.10", "@rollup/rollup-win32-x64-gnu": "4.64.10", "@rollup/rollup-win32-x64-msvc": "4.64.10", "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-8N52YH1B5JzBP+B1rkcBERG7rfRTGAM0RmUpyd76yyRfTljuG452GCNbVm6MPzs1+gXBha6Rw5/oHRFohOpfDg=="],
 
-    "rfdc": ["rfdc@1.4.1", "", {}, "sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA=="],
+    "rollup-plugin-visualizer": ["rollup-plugin-visualizer@7.1.1", "", { "dependencies": { "open": "^11.0.0", "picomatch": "^4.0.5", "source-map": "^0.8.0", "yargs": "^18.1.0" }, "peerDependencies": { "rolldown": "1.x || ^1.0.0-beta || ^1.0.0-rc", "rollup": "2.x || 3.x || 4.x" }, "optionalPeers": ["rolldown", "rollup"], "bin": { "rollup-plugin-visualizer": "dist/bin/cli.js" } }, "sha512-ThaGiHTU8XW02OkK80TrTHATraJmM9OAduU4otal+7gyXLpYEtmGBLfx5kW+EHvvLwn03YGW2NnwKUIqsYlJAA=="],
 
-    "rollup": ["rollup@2.79.2", "", { "optionalDependencies": { "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-fS6iqSPZDs3dr/y7Od6y5nha8dW1YnbgtsyotCVvoFGKbERG++CVRFv1meyGDE1SNItQA8BrnCw7ScdAhRJ3XQ=="],
+    "rope-sequence": ["rope-sequence@1.3.4", "", {}, "sha512-UT5EDe2cu2E/6O4igUr5PSFs23nvvukicWHx6GnOPlHAiiYbzNuCRQCuiUdHJQcqKalLKlrYJnjY0ySGsXNQXQ=="],
 
-    "rollup-plugin-visualizer": ["rollup-plugin-visualizer@6.0.5", "", { "dependencies": { "open": "^8.0.0", "picomatch": "^4.0.2", "source-map": "^0.7.4", "yargs": "^17.5.1" }, "peerDependencies": { "rolldown": "1.x || ^1.0.0-beta", "rollup": "2.x || 3.x || 4.x" }, "optionalPeers": ["rolldown", "rollup"], "bin": { "rollup-plugin-visualizer": "dist/bin/cli.js" } }, "sha512-9+HlNgKCVbJDs8tVtjQ43US12eqaiHyyiLMdBwQ7vSZPiHMysGNo2E88TAp1si5wx8NAoYriI2A5kuKfIakmJg=="],
+    "rou3": ["rou3@0.9.2", "", {}, "sha512-3SOzvaAg8rkHrXtRjpCvCvbyO5to9oOO27Z/XqHEYXfMRVSw/qMIVdmaOk9W2lcRLtR6dlqTjo9hDeJk70QBYQ=="],
 
-    "run-applescript": ["run-applescript@7.0.0", "", {}, "sha512-9by4Ij99JUr/MCFBUkDKLWK3G9HVXmabKz9U5MlIAIuvuzkiOicRYs8XJLxX+xahD+mLiiCYDqF9dKAgtzKP1A=="],
+    "run-applescript": ["run-applescript@7.1.0", "", {}, "sha512-DPe5pVFaAsinSaV6QjQ6gdiedWDcRCbUuiQfQa2wmWV7+xC9bGulGI8+TdRmoFkAPaBXk8CrAbnlY2ISniJ47Q=="],
 
     "run-parallel": ["run-parallel@1.2.0", "", { "dependencies": { "queue-microtask": "^1.2.2" } }, "sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA=="],
 
-    "safe-array-concat": ["safe-array-concat@1.1.3", "", { "dependencies": { "call-bind": "^1.0.8", "call-bound": "^1.0.2", "get-intrinsic": "^1.2.6", "has-symbols": "^1.1.0", "isarray": "^2.0.5" } }, "sha512-AURm5f0jYEOydBj7VQlVvDrjeFgthDdEF5H1dP+6mNpoXOMo1quQqJ4wvJDyRZ9+pO3kGWoOdmV08cSv2aJV6Q=="],
-
     "safe-buffer": ["safe-buffer@5.2.1", "", {}, "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ=="],
 
-    "safe-push-apply": ["safe-push-apply@1.0.0", "", { "dependencies": { "es-errors": "^1.3.0", "isarray": "^2.0.5" } }, "sha512-iKE9w/Z7xCzUMIZqdBsp6pEQvwuEebH4vdpjcDWnyzaI6yl6O9FHvVpmGelvEHNsoY6wGblkxR6Zty/h00WiSA=="],
-
-    "safe-regex-test": ["safe-regex-test@1.1.0", "", { "dependencies": { "call-bound": "^1.0.2", "es-errors": "^1.3.0", "is-regex": "^1.2.1" } }, "sha512-x/+Cz4YrimQxQccJf5mKEbIa1NzeCRNI5Ecl/ekmlYaampdNLPalVyIcCZNNH3MvmqBugV5TMYZXv0ljslUlaw=="],
-
-    "safer-buffer": ["safer-buffer@2.1.2", "", {}, "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="],
-
-    "sax": ["sax@1.4.3", "", {}, "sha512-yqYn1JhPczigF94DMS+shiDMjDowYO6y9+wB/4WgO0Y19jWYk0lQ4tuG5KI7kj4FTp1wxPj5IFfcrz/s1c3jjQ=="],
-
     "scule": ["scule@1.3.0", "", {}, "sha512-6FtHJEvt+pVMIB9IBY+IcCJ6Z5f1iQnytgyfKMhDKgmzYG+TeH/wx1y3l27rshSbLiSanrR9ffZDrEsmjlQF2g=="],
 
-    "semver": ["semver@7.7.3", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q=="],
+    "semver": ["semver@7.8.5", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA=="],
 
-    "send": ["send@1.2.0", "", { "dependencies": { "debug": "^4.3.5", "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "etag": "^1.8.1", "fresh": "^2.0.0", "http-errors": "^2.0.0", "mime-types": "^3.0.1", "ms": "^2.1.3", "on-finished": "^2.4.1", "range-parser": "^1.2.1", "statuses": "^2.0.1" } }, "sha512-uaW0WwXKpL9blXE2o0bRhoL2EGXIrZxQ2ZQ4mgcfoBxdFmQold+qWsD2jLrfZ0trjKL6vOw0j//eAwcALFjKSw=="],
+    "send": ["send@1.2.1", "", { "dependencies": { "debug": "^4.4.3", "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "etag": "^1.8.1", "fresh": "^2.0.0", "http-errors": "^2.0.1", "mime-types": "^3.0.2", "ms": "^2.1.3", "on-finished": "^2.4.1", "range-parser": "^1.2.1", "statuses": "^2.0.2" } }, "sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ=="],
 
-    "serialize-javascript": ["serialize-javascript@6.0.2", "", { "dependencies": { "randombytes": "^2.1.0" } }, "sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g=="],
+    "serialize-javascript": ["serialize-javascript@7.1.2", "", {}, "sha512-GL2BWwVa6JydKO6l/ljVgjAZF4QJ3S7dWDWi53s5GZT8PJzD2fNxi67HANQGKAqPrwEpL5ba7gUBGi0Ls/sEoQ=="],
 
-    "seroval": ["seroval@1.4.0", "", {}, "sha512-BdrNXdzlofomLTiRnwJTSEAaGKyHHZkbMXIywOh7zlzp4uZnXErEwl9XZ+N1hJSNpeTtNxWvVwN0wUzAIQ4Hpg=="],
+    "seroval": ["seroval@1.6.11", "", {}, "sha512-hpb6XnMCGN/A+79Uf8V7/iTGkyyyazNn5X0CoCAp7Uy9vT3RT8jZ9GLcnxGoVjg3P8AArbe4ZVHq6C8oT2a0kA=="],
 
     "serve-placeholder": ["serve-placeholder@2.0.2", "", { "dependencies": { "defu": "^6.1.4" } }, "sha512-/TMG8SboeiQbZJWRlfTCqMs2DD3SZgWp0kDQePz9yUuCnDfDh/92gf7/PxGhzXTKBIPASIHxFcZndoNbp6QOLQ=="],
 
-    "serve-static": ["serve-static@2.2.0", "", { "dependencies": { "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "parseurl": "^1.3.3", "send": "^1.2.0" } }, "sha512-61g9pCh0Vnh7IutZjtLGGpTA355+OPn2TyDv/6ivP2h/AdAVX9azsoxmg2/M6nZeQZNYBEwIcsne1mJd9oQItQ=="],
-
-    "set-function-length": ["set-function-length@1.2.2", "", { "dependencies": { "define-data-property": "^1.1.4", "es-errors": "^1.3.0", "function-bind": "^1.1.2", "get-intrinsic": "^1.2.4", "gopd": "^1.0.1", "has-property-descriptors": "^1.0.2" } }, "sha512-pgRc4hJ4/sNjWCSS9AmnS40x3bNMDTknHgL5UaMBTMyJnU90EgWh1Rz+MC9eFu4BuN/UwZjKQuY/1v3rM7HMfg=="],
-
-    "set-function-name": ["set-function-name@2.0.2", "", { "dependencies": { "define-data-property": "^1.1.4", "es-errors": "^1.3.0", "functions-have-names": "^1.2.3", "has-property-descriptors": "^1.0.2" } }, "sha512-7PGFlmtwsEADb0WYyvCMa1t+yke6daIG4Wirafur5kcf+MhUnPms1UeR0CKQdTZD81yESwMHbtn+TR+dMviakQ=="],
-
-    "set-proto": ["set-proto@1.0.0", "", { "dependencies": { "dunder-proto": "^1.0.1", "es-errors": "^1.3.0", "es-object-atoms": "^1.0.0" } }, "sha512-RJRdvCo6IAnPdsvP/7m6bsQqNnn1FCBX5ZNtFL98MmFF/4xAIJTIg1YbHW5DC2W5SKZanrC6i4HsJqlajw/dZw=="],
+    "serve-static": ["serve-static@2.2.1", "", { "dependencies": { "encodeurl": "^2.0.0", "escape-html": "^1.0.3", "parseurl": "^1.3.3", "send": "^1.2.0" } }, "sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw=="],
 
     "setprototypeof": ["setprototypeof@1.2.0", "", {}, "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw=="],
 
@@ -1529,109 +1377,83 @@
 
     "shebang-regex": ["shebang-regex@3.0.0", "", {}, "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A=="],
 
-    "shell-quote": ["shell-quote@1.8.3", "", {}, "sha512-ObmnIF4hXNg1BqhnHmgbDETF8dLPCggZWBjkQfhZpbszZnYur5DUljTcCHii5LC3J5E0yeO/1LIMyH+UvHQgyw=="],
-
-    "side-channel": ["side-channel@1.1.0", "", { "dependencies": { "es-errors": "^1.3.0", "object-inspect": "^1.13.3", "side-channel-list": "^1.0.0", "side-channel-map": "^1.0.1", "side-channel-weakmap": "^1.0.2" } }, "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw=="],
-
-    "side-channel-list": ["side-channel-list@1.0.0", "", { "dependencies": { "es-errors": "^1.3.0", "object-inspect": "^1.13.3" } }, "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA=="],
-
-    "side-channel-map": ["side-channel-map@1.0.1", "", { "dependencies": { "call-bound": "^1.0.2", "es-errors": "^1.3.0", "get-intrinsic": "^1.2.5", "object-inspect": "^1.13.3" } }, "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA=="],
-
-    "side-channel-weakmap": ["side-channel-weakmap@1.0.2", "", { "dependencies": { "call-bound": "^1.0.2", "es-errors": "^1.3.0", "get-intrinsic": "^1.2.5", "object-inspect": "^1.13.3", "side-channel-map": "^1.0.1" } }, "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A=="],
+    "shell-quote": ["shell-quote@1.12.0", "", {}, "sha512-PcByqNyT/38F2kDNi006HAMRJaULuBzq/FOsw3qdZvX/GA9W/jamDaRskgHjubHiftXK5sIFxLNkvrXUwcof6Q=="],
 
     "signal-exit": ["signal-exit@4.1.0", "", {}, "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw=="],
 
-    "simple-git": ["simple-git@3.30.0", "", { "dependencies": { "@kwsites/file-exists": "^1.1.1", "@kwsites/promise-deferred": "^1.1.1", "debug": "^4.4.0" } }, "sha512-q6lxyDsCmEal/MEGhP1aVyQ3oxnagGlBDOVSIB4XUVLl1iZh0Pah6ebC9V4xBap/RfgP2WlI8EKs0WS0rMEJHg=="],
-
     "sirv": ["sirv@3.0.2", "", { "dependencies": { "@polka/url": "^1.0.0-next.24", "mrmime": "^2.0.0", "totalist": "^3.0.0" } }, "sha512-2wcC/oGxHis/BoHkkPwldgiPSYcpZK3JU28WoMVv55yHJgcZ8rlXvuG9iZggz+sU1d4bRgIGASwyWqjxu3FM0g=="],
 
     "sisteransi": ["sisteransi@1.0.5", "", {}, "sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg=="],
 
     "slash": ["slash@5.1.0", "", {}, "sha512-ZA6oR3T/pEyuqwMgAKT0/hAv8oAXckzbkmR0UkUosQ+Mc4RxGoJkRmwHgHufaenlyAgE1Mxgpdcrf75y6XcnDg=="],
 
-    "smob": ["smob@1.5.0", "", {}, "sha512-g6T+p7QO8npa+/hNx9ohv1E5pVCmWrVCUzUXJyLdMmftX6ER0oiWY/w9knEonLpnOp6b6FenKnMfR8gqwWdwig=="],
+    "smob": ["smob@1.6.2", "", {}, "sha512-RQsvleCbF8cVHEv+xuDGaA4pOizFqJ0GgjtMSRo6oP8pnN7WsigHgVGey6aILRBKv4W2YOMHLqbKdnB6hpB9fw=="],
 
-    "source-map": ["source-map@0.8.0-beta.0", "", { "dependencies": { "whatwg-url": "^7.0.0" } }, "sha512-2ymg6oRBpebeZi9UUNsgQ89bhx01TcTkmNTGnNO88imTmbSgy4nfujrgVEFKWpMTEGA11EDkTt7mqObTPdigIA=="],
+    "source-map": ["source-map@0.7.6", "", {}, "sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ=="],
 
-    "source-map-js": ["source-map-js@1.2.1", "", {}, "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA=="],
+    "source-map-js": ["source-map-js@1.2.2", "", {}, "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw=="],
 
     "source-map-support": ["source-map-support@0.5.21", "", { "dependencies": { "buffer-from": "^1.0.0", "source-map": "^0.6.0" } }, "sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w=="],
 
-    "sourcemap-codec": ["sourcemap-codec@1.4.8", "", {}, "sha512-9NykojV5Uih4lgo5So5dtw+f0JgJX30KCNI8gwhz2J9A15wD0Ml6tjHKwf6fTSa6fAdVBdZeNOs9eJ71qCk8vA=="],
-
-    "speakingurl": ["speakingurl@14.0.1", "", {}, "sha512-1POYv7uv2gXoyGFpBCmpDVSNV74IfsWlDW216UPjbWufNf+bSU6GdbDsxdcxtfwb4xlI3yxzOTKClUosxARYrQ=="],
-
-    "srvx": ["srvx@0.9.6", "", { "bin": { "srvx": "bin/srvx.mjs" } }, "sha512-5L4rT6qQqqb+xcoDoklUgCNdmzqJ6vbcDRwPVGRXewF55IJH0pqh0lQlrJ266ZWTKJ4mfeioqHQJeAYesS+RrQ=="],
+    "srvx": ["srvx@1.0.5", "", { "bin": { "srvx": "./bin/srvx.mjs" } }, "sha512-KvSKRpgPG/oaq3cyT614OQ2bAa7DynuGamivCZeoZzIUULOdbQz6wUtnnVuC4+DCx2Zglzo8v5gBYmWIWYhDxA=="],
 
     "standard-as-callback": ["standard-as-callback@2.1.0", "", {}, "sha512-qoRRSyROncaz1z0mvYqIE4lCd9p2R90i6GxW3uZv5ucSu8tU7B5HXUP1gG8pVZsYNVaXjk8ClXHPttLyxAL48A=="],
 
-    "statuses": ["statuses@2.0.1", "", {}, "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ=="],
+    "statuses": ["statuses@2.0.2", "", {}, "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw=="],
 
-    "std-env": ["std-env@3.10.0", "", {}, "sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg=="],
+    "std-env": ["std-env@4.3.0", "", {}, "sha512-OtU/EgQ1kIm5KwqQpBC6ZEMXrZRui11w8zgfTWp8cdO9B8OaPsbA8bTHO2P+HNo1VlUTGMVBwPhydu6poeXiag=="],
 
-    "streamx": ["streamx@2.22.0", "", { "dependencies": { "fast-fifo": "^1.3.2", "text-decoder": "^1.1.0" }, "optionalDependencies": { "bare-events": "^2.2.0" } }, "sha512-sLh1evHOzBy/iWRiR6d1zRcLao4gGZr3C1kzNz4fopCOKJb6xD9ub8Mpi9Mr1R6id5o43S+d93fI48UC5uM9aw=="],
+    "streamx": ["streamx@2.28.1", "", { "dependencies": { "events-universal": "^1.0.0", "fast-fifo": "^1.3.2", "text-decoder": "^1.1.0" } }, "sha512-zEzXb0s5Cds7tqMH6rhZ05lcJydCWiQPEwiNngVqzsxCc962vLY4Uw+mW7od8kDH258k2Uz/JrOkdIAAhSh9VA=="],
 
-    "string-width": ["string-width@4.2.3", "", { "dependencies": { "emoji-regex": "^8.0.0", "is-fullwidth-code-point": "^3.0.0", "strip-ansi": "^6.0.1" } }, "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g=="],
+    "string-width": ["string-width@8.3.0", "", { "dependencies": { "get-east-asian-width": "^1.5.0", "strip-ansi": "^7.1.2" } }, "sha512-ZbmZM0JCihQN91dWnxoipT2KOEyHqEyfRXUyjuRhW8b/xnqPDoq4gWEVApTVa9db2wN8mmoikgFBbjh71+cGeQ=="],
 
     "string-width-cjs": ["string-width@4.2.3", "", { "dependencies": { "emoji-regex": "^8.0.0", "is-fullwidth-code-point": "^3.0.0", "strip-ansi": "^6.0.1" } }, "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g=="],
 
-    "string.prototype.matchall": ["string.prototype.matchall@4.0.12", "", { "dependencies": { "call-bind": "^1.0.8", "call-bound": "^1.0.3", "define-properties": "^1.2.1", "es-abstract": "^1.23.6", "es-errors": "^1.3.0", "es-object-atoms": "^1.0.0", "get-intrinsic": "^1.2.6", "gopd": "^1.2.0", "has-symbols": "^1.1.0", "internal-slot": "^1.1.0", "regexp.prototype.flags": "^1.5.3", "set-function-name": "^2.0.2", "side-channel": "^1.1.0" } }, "sha512-6CC9uyBL+/48dYizRf7H7VAYCMCNTBeM78x/VTUe9bFEaxBepPJDa1Ow99LqI/1yF7kuy7Q3cQsYMrcjGUcskA=="],
-
-    "string.prototype.trim": ["string.prototype.trim@1.2.10", "", { "dependencies": { "call-bind": "^1.0.8", "call-bound": "^1.0.2", "define-data-property": "^1.1.4", "define-properties": "^1.2.1", "es-abstract": "^1.23.5", "es-object-atoms": "^1.0.0", "has-property-descriptors": "^1.0.2" } }, "sha512-Rs66F0P/1kedk5lyYyH9uBzuiI/kNRmwJAR9quK6VOtIpZ2G+hMZd+HQbbv25MgCA6gEffoMZYxlTod4WcdrKA=="],
-
-    "string.prototype.trimend": ["string.prototype.trimend@1.0.9", "", { "dependencies": { "call-bind": "^1.0.8", "call-bound": "^1.0.2", "define-properties": "^1.2.1", "es-object-atoms": "^1.0.0" } }, "sha512-G7Ok5C6E/j4SGfyLCloXTrngQIQU3PWtXGst3yM7Bea9FRURf1S42ZHlZZtsNque2FN2PoUhfZXYLNWwEr4dLQ=="],
-
-    "string.prototype.trimstart": ["string.prototype.trimstart@1.0.8", "", { "dependencies": { "call-bind": "^1.0.7", "define-properties": "^1.2.1", "es-object-atoms": "^1.0.0" } }, "sha512-UXSH262CSZY1tfu3G3Secr6uGLCFVPMhIqHjlgCUtCCcgihYc/xKs9djMTMUOb2j1mVSeU8EU6NWc/iQKU6Gfg=="],
-
     "string_decoder": ["string_decoder@1.3.0", "", { "dependencies": { "safe-buffer": "~5.2.0" } }, "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA=="],
 
-    "stringify-object": ["stringify-object@3.3.0", "", { "dependencies": { "get-own-enumerable-property-symbols": "^3.0.0", "is-obj": "^1.0.1", "is-regexp": "^1.0.0" } }, "sha512-rHqiFh1elqCQ9WPLIC8I0Q/g/wj5J1eMkyoiD6eoQApWHP0FtlK7rqnhmabL5VUY9JQCcqwwvlOaSuutekgyrw=="],
-
-    "strip-ansi": ["strip-ansi@6.0.1", "", { "dependencies": { "ansi-regex": "^5.0.1" } }, "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A=="],
+    "strip-ansi": ["strip-ansi@7.2.0", "", { "dependencies": { "ansi-regex": "^6.2.2" } }, "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w=="],
 
     "strip-ansi-cjs": ["strip-ansi@6.0.1", "", { "dependencies": { "ansi-regex": "^5.0.1" } }, "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A=="],
 
-    "strip-comments": ["strip-comments@2.0.1", "", {}, "sha512-ZprKx+bBLXv067WTCALv8SSz5l2+XhpYCsVtSqlMnkAXMWDq+/ekVbl1ghqP9rUHTzv6sm/DwCOiYutU/yp1fw=="],
-
     "strip-final-newline": ["strip-final-newline@3.0.0", "", {}, "sha512-dOESqjYr96iWYylGObzd39EuNTa5VJxyvVAEm5Jnh7KGo75V43Hk1odPQkNDyXNmUR6k+gEiDVXnjB8HJ3crXw=="],
 
-    "strip-literal": ["strip-literal@3.1.0", "", { "dependencies": { "js-tokens": "^9.0.1" } }, "sha512-8r3mkIM/2+PpjHoOtiAW8Rg3jJLHaV7xPwG+YRGrv6FP0wwk/toTpATxWYOW0BKdWwl82VT2tFYi5DlROa0Mxg=="],
+    "strip-literal": ["strip-literal@4.0.0", "", { "dependencies": { "js-tokens": "^10.0.0" } }, "sha512-PaqAvfUZKBwc/SLmNZtHmzK+v19Z4O4eS3cKPeGvbIv/U3pnyEq4Tuw3/4v/FwfM8VQaEawsyCcOQ0P+kpwWWw=="],
 
-    "structured-clone-es": ["structured-clone-es@1.0.0", "", {}, "sha512-FL8EeKFFyNQv5cMnXI31CIMCsFarSVI2bF0U0ImeNE3g/F1IvJQyqzOXxPBRXiwQfyBTlbNe88jh1jFW0O/jiQ=="],
+    "structured-clone-es": ["structured-clone-es@2.0.1", "", {}, "sha512-10ZL5r77LhknxlP1FBiCW+VdnuWOEFLdSS2SKtjyEV+L4qP1hUEIMIZW94LC3jKxRmT/Dj7KkD1mqh/IY6lhKQ=="],
 
-    "stylehacks": ["stylehacks@7.0.5", "", { "dependencies": { "browserslist": "^4.24.5", "postcss-selector-parser": "^7.1.0" }, "peerDependencies": { "postcss": "^8.4.32" } }, "sha512-5kNb7V37BNf0Q3w+1pxfa+oiNPS++/b4Jil9e/kPDgrk1zjEd6uR7SZeJiYaLYH6RRSC1XX2/37OTeU/4FvuIA=="],
-
-    "superjson": ["superjson@2.2.2", "", { "dependencies": { "copy-anything": "^3.0.2" } }, "sha512-5JRxVqC8I8NuOUjzBbvVJAKNM8qoVuH0O77h4WInc/qC2q5IreqKxYwgkga3PfA22OayK2ikceb/B26dztPl+Q=="],
-
-    "supports-color": ["supports-color@10.0.0", "", {}, "sha512-HRVVSbCCMbj7/kdWF9Q+bbckjBHLtHMEoJWlkmYzzdwhYMkjkOwubLM6t7NbWKjgKamGDrWL1++KrjUO1t9oAQ=="],
+    "supports-color": ["supports-color@10.2.2", "", {}, "sha512-SS+jx45GF1QjgEXQx4NJZV9ImqmO2NPz5FNsIHrsDjh2YsHnawpan7SNQ1o8NuhrbHZy9AZhIoCUiCeaW/C80g=="],
 
     "supports-preserve-symlinks-flag": ["supports-preserve-symlinks-flag@1.0.0", "", {}, "sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w=="],
 
-    "svgo": ["svgo@4.0.0", "", { "dependencies": { "commander": "^11.1.0", "css-select": "^5.1.0", "css-tree": "^3.0.1", "css-what": "^6.1.0", "csso": "^5.0.5", "picocolors": "^1.1.1", "sax": "^1.4.1" }, "bin": "./bin/svgo.js" }, "sha512-VvrHQ+9uniE+Mvx3+C9IEe/lWasXCU0nXMY2kZeLrHNICuRiC8uMPyM14UEaMOFA5mhyQqEkB02VoQ16n3DLaw=="],
+    "tagged-tag": ["tagged-tag@1.0.0", "", {}, "sha512-yEFYrVhod+hdNyx7g5Bnkkb0G6si8HJurOoOEgC8B/O0uXLHlaey/65KRv6cuWBNhBgHKAROVpc7QyYqE5gFng=="],
+
+    "tailwind-merge": ["tailwind-merge@3.7.0", "", {}, "sha512-XPPUyAc+cvspz3lHTcR/QgPfW2A0lv/xQNIjX3HGhLR+Nq2lHaLq5MtTesHn8GUr3W3DguT2KT5x3NVgRtYwmA=="],
 
-    "system-architecture": ["system-architecture@0.1.0", "", {}, "sha512-ulAk51I9UVUyJgxlv9M6lFot2WP3e7t8Kz9+IS6D4rVba1tR9kON+Ey69f+1R4Q8cd45Lod6a4IcJIxnzGc/zA=="],
+    "tailwind-variants": ["tailwind-variants@3.3.1", "", { "peerDependencies": { "tailwind-merge": ">=3.0.0", "tailwindcss": "*" }, "optionalPeers": ["tailwind-merge", "tailwindcss"] }, "sha512-4pAvwUtM4HKBiRZftncAbpn6V9Hhwoa5Fl7O2u5zbp7Z5Cvu+/o/6+176WY3WCEES209543quG8zFIcXCsc5Jw=="],
 
-    "tagged-tag": ["tagged-tag@1.0.0", "", {}, "sha512-yEFYrVhod+hdNyx7g5Bnkkb0G6si8HJurOoOEgC8B/O0uXLHlaey/65KRv6cuWBNhBgHKAROVpc7QyYqE5gFng=="],
+    "tailwindcss": ["tailwindcss@4.3.3", "", {}, "sha512-gOhV3P7ufE62QDGg1zVaTgCR+EtPv92k2nIhVcVKcLmxT1sUBsQGhnZj175j+MqRt4zLF7ic+sCYjfhxMxj7YQ=="],
 
-    "tapable": ["tapable@2.2.1", "", {}, "sha512-GNzQvQTOIP6RyTfE2Qxb8ZVlNmw0n88vp1szwWRimP02mnTsx3Wtn5qRdqY9w2XduFNUgvOwhNnQsjwCp+kqaQ=="],
+    "tapable": ["tapable@2.3.3", "", {}, "sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A=="],
 
-    "tar": ["tar@7.4.3", "", { "dependencies": { "@isaacs/fs-minipass": "^4.0.0", "chownr": "^3.0.0", "minipass": "^7.1.2", "minizlib": "^3.0.1", "mkdirp": "^3.0.1", "yallist": "^5.0.0" } }, "sha512-5S7Va8hKfV7W5U6g3aYxXmlPoZVAwUMy9AOKyF2fVuZa2UD3qZjg578OrLRt8PcNN1PleVaL/5/yYATNL0ICUw=="],
+    "tar": ["tar@6.2.1", "", { "dependencies": { "chownr": "^2.0.0", "fs-minipass": "^2.0.0", "minipass": "^5.0.0", "minizlib": "^2.1.1", "mkdirp": "^1.0.3", "yallist": "^4.0.0" } }, "sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A=="],
 
-    "tar-stream": ["tar-stream@3.1.7", "", { "dependencies": { "b4a": "^1.6.4", "fast-fifo": "^1.2.0", "streamx": "^2.15.0" } }, "sha512-qJj60CXt7IU1Ffyc3NJMjh6EkuCFej46zUqJ4J7pqYlThyd9bO0XBTmcOIhSzZJVWfsLks0+nle/j538YAW9RQ=="],
+    "tar-stream": ["tar-stream@3.2.2", "", { "dependencies": { "b4a": "^1.9.0", "bare-fs": "^4.8.2", "fast-fifo": "^1.3.2", "streamx": "^2.28.1" } }, "sha512-+8NeqHRjQWH9nYlwo2gamAMImZCVzI4UoEgDpWorBt9OEfppiZn+uSkskzQKPWIZyji/C8fpWO7u69G0DX0tbg=="],
 
-    "temp-dir": ["temp-dir@2.0.0", "", {}, "sha512-aoBAniQmmwtcKp/7BzsH8Cxzv8OL736p7v1ihGb5e9DJ9kTwGWHrQrVB5+lfVDzfGrdRzXch+ig7LHaY1JTOrg=="],
+    "teex": ["teex@1.0.1", "", { "dependencies": { "streamx": "^2.12.5" } }, "sha512-eYE6iEI62Ni1H8oIa7KlDU6uQBtqr4Eajni3wX7rpfXD8ysFx8z0+dri+KWEPWpBsxXfxu58x/0jvTVT1ekOSg=="],
 
-    "tempy": ["tempy@0.6.0", "", { "dependencies": { "is-stream": "^2.0.0", "temp-dir": "^2.0.0", "type-fest": "^0.16.0", "unique-string": "^2.0.0" } }, "sha512-G13vtMYPT/J8A4X2SjdtBTphZlrp1gKv6hZiOjw14RCWg6GbHuQBGtjlx75xLbYV/wEc0D7G5K4rxKP/cXk8Bw=="],
+    "terser": ["terser@5.51.2", "", { "dependencies": { "@jridgewell/source-map": "^0.3.3", "acorn": "^8.15.0", "commander": "^2.20.0", "source-map-support": "~0.5.20" }, "bin": { "terser": "bin/terser" } }, "sha512-bWnjSNscmuI+GJze6ZupnHP8G/cTcsJF+bXCeQknk2SHQsgbNJnLrqiH9jZ2W4STPVXH2mDKKRX3iwPhc9Cn/Q=="],
 
-    "terser": ["terser@5.39.1", "", { "dependencies": { "@jridgewell/source-map": "^0.3.3", "acorn": "^8.8.2", "commander": "^2.20.0", "source-map-support": "~0.5.20" }, "bin": { "terser": "bin/terser" } }, "sha512-Mm6+uad0ZuDtcV8/4uOZQDQ8RuiC5Pu+iZRedJtF7yA/27sPL7d++In/AJKpWZlU3SYMPPkVfwetn6sgZ66pUA=="],
+    "text-decoder": ["text-decoder@1.2.7", "", { "dependencies": { "b4a": "^1.6.4" } }, "sha512-vlLytXkeP4xvEq2otHeJfSQIRyWxo/oZGEbXrtEEF9Hnmrdly59sUbzZ/QgyWuLYHctCHxFF4tRQZNQ9k60ExQ=="],
 
-    "text-decoder": ["text-decoder@1.2.3", "", { "dependencies": { "b4a": "^1.6.4" } }, "sha512-3/o9z3X0X0fTupwsYvR03pJ/DjWuqqrfwBgTQzdWDiQSm9KitAyz/9WqsT2JQW7KV2m+bC2ol/zqpW37NHxLaA=="],
+    "tiny-inflate": ["tiny-inflate@1.0.3", "", {}, "sha512-pkY1fj1cKHb2seWDy0B16HeWyczlJA9/WW3u3c4z/NiWDsO3DOU5D7nhTLE9CF0yXv/QZFY7sEJmj24dK+Rrqw=="],
 
     "tiny-invariant": ["tiny-invariant@1.3.3", "", {}, "sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg=="],
 
-    "tinyexec": ["tinyexec@1.0.1", "", {}, "sha512-5uC6DDlmeqiOwCPmK9jMSdOuZTh8bU39Ys6yidB+UTt5hfZUPGAypSgFRiEp+jbi9qH40BLDvy85jIU88wKSqw=="],
+    "tinyclip": ["tinyclip@1.0.3", "", {}, "sha512-nTv2raKFMzGG6JJp0lpNDsRPdfFE6UHlu2rVEjXo8vkx1ZS3LW2CVXqIaLu8xZlu+6tbFs9V58Qc/Jmk/Ii7wA=="],
+
+    "tinyexec": ["tinyexec@1.3.1", "", {}, "sha512-GCvB3aoys96IuDFBMcTB46JOR6mdMtAToqwiW8JlWhsoh1mhHi/xn9ss/Dg7N555GiJyEt2qzoG/NHCwM6h1EA=="],
 
-    "tinyglobby": ["tinyglobby@0.2.15", "", { "dependencies": { "fdir": "^6.5.0", "picomatch": "^4.0.3" } }, "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ=="],
+    "tinyglobby": ["tinyglobby@0.2.17", "", { "dependencies": { "fdir": "^6.5.0", "picomatch": "^4.0.4" } }, "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g=="],
 
     "to-regex-range": ["to-regex-range@5.0.1", "", { "dependencies": { "is-number": "^7.0.0" } }, "sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ=="],
 
@@ -1639,1046 +1461,906 @@
 
     "totalist": ["totalist@3.0.1", "", {}, "sha512-sf4i37nQ2LBx4m3wB74y+ubopq6W/dIzXg0FDGjsYnZHVa1Da8FH853wlL2gtUhg+xJXjfk3kUZS3BRoQeoQBQ=="],
 
-    "tr46": ["tr46@1.0.1", "", { "dependencies": { "punycode": "^2.1.0" } }, "sha512-dTpowEjclQ7Kgx5SdBkqRzVhERQXov8/l9Ft9dVM9fmg0W0KQSVaXX9T4i6twCPNtYiZM53lpSSUAwJbFPOHxA=="],
+    "tr46": ["tr46@0.0.3", "", {}, "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw=="],
 
     "tslib": ["tslib@2.8.1", "", {}, "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w=="],
 
-    "type-fest": ["type-fest@0.16.0", "", {}, "sha512-eaBzG6MxNzEn9kiwvtre90cXaNLkmadMWa1zQMs3XORCXNbsH/OewwbxC5ia9dCxIxnTAsSxXJaa/p5y8DlvJg=="],
-
-    "type-level-regexp": ["type-level-regexp@0.1.17", "", {}, "sha512-wTk4DH3cxwk196uGLK/E9pE45aLfeKJacKmcEgEOA/q5dnPGNxXt0cfYdFxb57L+sEpf1oJH4Dnx/pnRcku9jg=="],
-
-    "typed-array-buffer": ["typed-array-buffer@1.0.3", "", { "dependencies": { "call-bound": "^1.0.3", "es-errors": "^1.3.0", "is-typed-array": "^1.1.14" } }, "sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw=="],
+    "tsx": ["tsx@4.23.15", "", { "dependencies": { "esbuild": "~0.28.0" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "bin": { "tsx": "dist/cli.mjs" } }, "sha512-Yiex1Ovn8z2xPpOWckIiysV1SSyRMY9BkLF++q0yKiDxCqRhosKfMg3janKkiLBwZ5c/YryloKwGZcrEmtwxKw=="],
 
-    "typed-array-byte-length": ["typed-array-byte-length@1.0.3", "", { "dependencies": { "call-bind": "^1.0.8", "for-each": "^0.3.3", "gopd": "^1.2.0", "has-proto": "^1.2.0", "is-typed-array": "^1.1.14" } }, "sha512-BaXgOuIxz8n8pIq3e7Atg/7s+DpiYrxn4vdot3w9KbnBhcRQq6o3xemQdIfynqSeXeDrF32x+WvfzmOjPiY9lg=="],
+    "type-fest": ["type-fest@5.10.0", "", { "dependencies": { "tagged-tag": "^1.0.0" } }, "sha512-NoSdpq/WEiAg5sjmBkmV/hfxv6HJH4NqPNrqjtSO5CwRmpsDfaf4begxW34KdJykH/l1yHtwBWQkCRdoXO8mPA=="],
 
-    "typed-array-byte-offset": ["typed-array-byte-offset@1.0.4", "", { "dependencies": { "available-typed-arrays": "^1.0.7", "call-bind": "^1.0.8", "for-each": "^0.3.3", "gopd": "^1.2.0", "has-proto": "^1.2.0", "is-typed-array": "^1.1.15", "reflect.getprototypeof": "^1.0.9" } }, "sha512-bTlAFB/FBYMcuX81gbL4OcpH5PmlFHqlCCpAl8AlEzMz5k53oNDvN8p1PNOWLEmI2x4orp3raOFB51tv9X+MFQ=="],
+    "type-level-regexp": ["type-level-regexp@0.1.17", "", {}, "sha512-wTk4DH3cxwk196uGLK/E9pE45aLfeKJacKmcEgEOA/q5dnPGNxXt0cfYdFxb57L+sEpf1oJH4Dnx/pnRcku9jg=="],
 
-    "typed-array-length": ["typed-array-length@1.0.7", "", { "dependencies": { "call-bind": "^1.0.7", "for-each": "^0.3.3", "gopd": "^1.0.1", "is-typed-array": "^1.1.13", "possible-typed-array-names": "^1.0.0", "reflect.getprototypeof": "^1.0.6" } }, "sha512-3KS2b+kL7fsuk/eJZ7EQdnEmQoaho/r6KUef7hxvltNA5DR8NAUM+8wJMbJyZ4G9/7i3v5zPBIMN5aybAh2/Jg=="],
+    "typescript": ["typescript@6.0.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw=="],
 
-    "ufo": ["ufo@1.6.1", "", {}, "sha512-9a4/uxlTWJ4+a5i0ooc1rU7C7YOw3wT+UGqdeNNHWnOF9qcMBgLRS+4IYUqbczewFx4mLEig6gawh7X6mFlEkA=="],
+    "ufo": ["ufo@1.6.4", "", {}, "sha512-JFNbkD1Svwe0KvGi8GOeLcP4kAWQ609twvCdcHxq1oSL8svv39ZuSvajcD8B+5D0eL4+s1Is2D/O6KN3qcTeRA=="],
 
-    "ultrahtml": ["ultrahtml@1.6.0", "", {}, "sha512-R9fBn90VTJrqqLDwyMph+HGne8eqY1iPfYhPzZrvKpIfwkWZbcYlfpsb8B9dTvBfpy1/hqAD7Wi8EKfP9e8zdw=="],
+    "uint8array-extras": ["uint8array-extras@1.6.0", "", {}, "sha512-8iAasVS4wUx0gPLjH8Xtz2PeDzTSiy8QiLGu2DT3X5GU+egFEQhpnbtkehbAwjvDcxIERmCYcysiODFmE3Ud0Q=="],
 
-    "unbox-primitive": ["unbox-primitive@1.1.0", "", { "dependencies": { "call-bound": "^1.0.3", "has-bigints": "^1.0.2", "has-symbols": "^1.1.0", "which-boxed-primitive": "^1.1.1" } }, "sha512-nWJ91DjeOkej/TA8pXQ3myruKpKEYgqvpw9lz4OPHj/NWFNluYrjbz9j01CJ8yKQd2g4jFoOkINCTW2I5LEEyw=="],
+    "ultrahtml": ["ultrahtml@1.7.0", "", {}, "sha512-2xRd0VHoAQE4M+vF/DvFFB7pUV0ZxTW1TLi7lHQWnF/Sb5TPeEUV/l+hxcNnGO00ZXGnR0voCMmYRKQf+rvJ2g=="],
 
     "uncrypto": ["uncrypto@0.1.3", "", {}, "sha512-Ql87qFHB3s/De2ClA9e0gsnS6zXG27SkTiSJwjCc9MebbfapQfuPzumMIUMi38ezPZVNFcHI9sUIepeQfw8J8Q=="],
 
-    "unctx": ["unctx@2.4.1", "", { "dependencies": { "acorn": "^8.14.0", "estree-walker": "^3.0.3", "magic-string": "^0.30.17", "unplugin": "^2.1.0" } }, "sha512-AbaYw0Nm4mK4qjhns67C+kgxR2YWiwlDBPzxrN8h8C6VtAdCgditAY5Dezu3IJy4XVqAnbrXt9oQJvsn3fyozg=="],
-
-    "undici-types": ["undici-types@6.21.0", "", {}, "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ=="],
-
-    "unenv": ["unenv@2.0.0-rc.24", "", { "dependencies": { "pathe": "^2.0.3" } }, "sha512-i7qRCmY42zmCwnYlh9H2SvLEypEFGye5iRmEMKjcGi7zk9UquigRjFtTLz0TYqr0ZGLZhaMHl/foy1bZR+Cwlw=="],
-
-    "unhead": ["unhead@2.0.19", "", { "dependencies": { "hookable": "^5.5.3" } }, "sha512-gEEjkV11Aj+rBnY6wnRfsFtF2RxKOLaPN4i+Gx3UhBxnszvV6ApSNZbGk7WKyy/lErQ6ekPN63qdFL7sa1leow=="],
+    "unctx": ["unctx@3.0.1", "", { "peerDependencies": { "magic-string": ">=0.30.21", "oxc-parser": ">=0.140.0", "rolldown": "^1.1.5", "unplugin": "^3.3.0" }, "optionalPeers": ["magic-string", "oxc-parser", "rolldown", "unplugin"] }, "sha512-5RAt2etv7g362RXyd33R82gm9u/kbtQlpoaOs9Bgm4E32GRMJ0xjbZyvdxUTmiuHk3V1IQb1aUNrp5IWY+JaWw=="],
 
-    "unicode-canonical-property-names-ecmascript": ["unicode-canonical-property-names-ecmascript@2.0.1", "", {}, "sha512-dA8WbNeb2a6oQzAQ55YlT5vQAWGV9WXOsi3SskE3bcCdM0P4SDd+24zS/OCacdRq5BkdsRj9q3Pg6YyQoxIGqg=="],
+    "undici": ["undici@8.12.2", "", {}, "sha512-XtuDWVdqTLr3NAxm2ly9/hU6kUsJOgGh1RASzMBbsw6aWCOaQzHdW+QQDfdERjfJ2V5vL5pRPa4RetO9UfivDg=="],
 
-    "unicode-match-property-ecmascript": ["unicode-match-property-ecmascript@2.0.0", "", { "dependencies": { "unicode-canonical-property-names-ecmascript": "^2.0.0", "unicode-property-aliases-ecmascript": "^2.0.0" } }, "sha512-5kaZCrbp5mmbz5ulBkDkbY0SsPOjKqVS35VpL9ulMPfSl0J0Xsm+9Evphv9CoIZFwre7aJoa94AY6seMKGVN5Q=="],
+    "undici-types": ["undici-types@8.12.2", "", {}, "sha512-VoMeD2O0KdHhcn+oPqOrpivN+7aDOklVSwOLD7JNjbzV1CboAFek9IFOXnreoufTUtAsCsOK0iETiERPNR/fDA=="],
 
-    "unicode-match-property-value-ecmascript": ["unicode-match-property-value-ecmascript@2.2.0", "", {}, "sha512-4IehN3V/+kkr5YeSSDDQG8QLqO26XpL2XP3GQtqwlT/QYSECAwFztxVHjlbh0+gjJ3XmNLS0zDsbgs9jWKExLg=="],
+    "unenv": ["unenv@2.0.0-rc.24", "", { "dependencies": { "pathe": "^2.0.3" } }, "sha512-i7qRCmY42zmCwnYlh9H2SvLEypEFGye5iRmEMKjcGi7zk9UquigRjFtTLz0TYqr0ZGLZhaMHl/foy1bZR+Cwlw=="],
 
-    "unicode-property-aliases-ecmascript": ["unicode-property-aliases-ecmascript@2.1.0", "", {}, "sha512-6t3foTQI9qne+OZoVQB/8x8rk2k1eVy1gRXhV3oFQ5T6R1dqQ1xtin3XqSlx3+ATBkliTaR/hHyJBm+LVPNM8w=="],
+    "unhead": ["unhead@3.4.3", "", { "dependencies": { "hookable": "^6.1.1", "unplugin": "^3.3.0" }, "peerDependencies": { "vite": ">=6.4.2" }, "optionalPeers": ["vite"] }, "sha512-0FZI/qCCyIey14CKlGMFpiQumWSatlthJy7Xvro7H3nmi/V2owkcCXG03k0GXDc2/TV1K6bvrbAwhzTRe5Nhdw=="],
 
     "unicorn-magic": ["unicorn-magic@0.3.0", "", {}, "sha512-+QBBXBCvifc56fsbuxZQ6Sic3wqqc3WWaqxs58gvJrcOuN83HGTCwz3oS5phzU9LthRNE9VrJCFCLUgHeeFnfA=="],
 
-    "unimport": ["unimport@5.5.0", "", { "dependencies": { "acorn": "^8.15.0", "escape-string-regexp": "^5.0.0", "estree-walker": "^3.0.3", "local-pkg": "^1.1.2", "magic-string": "^0.30.19", "mlly": "^1.8.0", "pathe": "^2.0.3", "picomatch": "^4.0.3", "pkg-types": "^2.3.0", "scule": "^1.3.0", "strip-literal": "^3.1.0", "tinyglobby": "^0.2.15", "unplugin": "^2.3.10", "unplugin-utils": "^0.3.0" } }, "sha512-/JpWMG9s1nBSlXJAQ8EREFTFy3oy6USFd8T6AoBaw1q2GGcF4R9yp3ofg32UODZlYEO5VD0EWE1RpI9XDWyPYg=="],
+    "unifont": ["unifont@0.7.5", "", { "dependencies": { "css-tree": "^3.1.0", "ohash": "^2.0.11", "undici": "^8.0.0" } }, "sha512-ULe/Cs+ZIsq+dcFofNkhqielCrUJnb5mr+Yc4EBM2VlL+6OZR6+cjtI2mT1bJvRBrVncqHAbLURxmPLcCXzWMg=="],
 
-    "unique-string": ["unique-string@2.0.0", "", { "dependencies": { "crypto-random-string": "^2.0.0" } }, "sha512-uNaeirEPvpZWSgzwsPGtU2zVSTrn/8L5q/IexZmH0eH6SA73CmAA5U4GwORTxQAZs95TAXLNqeLoPPNO5gZfWg=="],
+    "unimport": ["unimport@7.0.2", "", { "dependencies": { "escape-string-regexp": "^5.0.0", "estree-walker": "^3.0.3", "local-pkg": "^1.2.1", "magic-string": "^1.2.3", "mlly": "^1.8.2", "pathe": "^2.0.3", "picomatch": "^4.0.7", "pkg-types": "^2.3.3", "scule": "^1.3.0", "strip-literal": "^4.0.0", "tinyglobby": "^0.2.17", "unplugin": "^3.3.0", "unplugin-utils": "^0.3.2" }, "peerDependencies": { "acorn": "^8.0.0", "oxc-parser": "*", "rolldown": "^1.0.0" }, "optionalPeers": ["acorn", "oxc-parser", "rolldown"] }, "sha512-5yrZs6kHyx5h1ZgeLxK0EgS/JL7Uhwv9HgzQImW8JccGmbYWyXx7Jc4YhU5+sd1Yk31PlfLQhfbZ1oigXipo3A=="],
 
-    "universalify": ["universalify@2.0.1", "", {}, "sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw=="],
+    "unplugin": ["unplugin@3.4.0", "", { "dependencies": { "@jridgewell/remapping": "^2.3.5", "picomatch": "^4.0.7", "webpack-virtual-modules": "^0.6.2" }, "peerDependencies": { "@farmfe/core": "*", "@rsbuild/core": "*", "@rspack/core": "*", "bun-types-no-globals": "*", "esbuild": "*", "rolldown": "*", "rollup": "*", "unloader": "*", "vite": "*", "webpack": "*" }, "optionalPeers": ["@farmfe/core", "@rsbuild/core", "@rspack/core", "bun-types-no-globals", "esbuild", "rolldown", "rollup", "unloader", "vite", "webpack"] }, "sha512-9skdIFlCsPdFV7wUfZxNsFInlW+7nJmGu2gkTu0OUhF56aXGsHab9x52/QhdJ4lC7ZDPWTxbiC4ANqVlsuaW3w=="],
 
-    "unplugin": ["unplugin@2.3.10", "", { "dependencies": { "@jridgewell/remapping": "^2.3.5", "acorn": "^8.15.0", "picomatch": "^4.0.3", "webpack-virtual-modules": "^0.6.2" } }, "sha512-6NCPkv1ClwH+/BGE9QeoTIl09nuiAt0gS28nn1PvYXsGKRwM2TCbFA2QiilmehPDTXIe684k4rZI1yl3A1PCUw=="],
+    "unplugin-auto-import": ["unplugin-auto-import@21.1.0", "", { "dependencies": { "local-pkg": "^1.2.1", "magic-string": "^1.1.0", "picomatch": "^4.0.5", "unimport": "^6.4.0", "unplugin": "^3.3.0", "unplugin-utils": "^0.3.2" }, "peerDependencies": { "@nuxt/kit": "^4.0.0", "@vueuse/core": "*" }, "optionalPeers": ["@nuxt/kit", "@vueuse/core"] }, "sha512-EzrSqWIBulEqCuP7idADXH+tVKYrbwKlR5+r/lOWik0o+Ksny1kitmtryHGNSv7puzzORlcIwT/x2JStiszlHA=="],
 
-    "unplugin-utils": ["unplugin-utils@0.2.4", "", { "dependencies": { "pathe": "^2.0.2", "picomatch": "^4.0.2" } }, "sha512-8U/MtpkPkkk3Atewj1+RcKIjb5WBimZ/WSLhhR3w6SsIj8XJuKTacSP8g+2JhfSGw0Cb125Y+2zA/IzJZDVbhA=="],
+    "unplugin-utils": ["unplugin-utils@0.3.2", "", { "dependencies": { "pathe": "^2.0.3", "picomatch": "^4.0.4" } }, "sha512-xVToRh2CTmLk2HnEG7ac4rl1MJTT3RFkpS8B++/SnB0kXvuaavD+n3m/vrzyWQOdJNSZQACnbz01pnppbwV5BA=="],
 
-    "unplugin-vue-router": ["unplugin-vue-router@0.16.2", "", { "dependencies": { "@babel/generator": "^7.28.5", "@vue-macros/common": "^3.1.1", "@vue/language-core": "^3.1.3", "ast-walker-scope": "^0.8.3", "chokidar": "^4.0.3", "json5": "^2.2.3", "local-pkg": "^1.1.2", "magic-string": "^0.30.21", "mlly": "^1.8.0", "muggle-string": "^0.4.1", "pathe": "^2.0.3", "picomatch": "^4.0.3", "scule": "^1.3.0", "tinyglobby": "^0.2.15", "unplugin": "^2.3.10", "unplugin-utils": "^0.3.1", "yaml": "^2.8.1" }, "peerDependencies": { "@vue/compiler-sfc": "^3.5.17", "vue-router": "^4.6.0" }, "optionalPeers": ["vue-router"] }, "sha512-lE6ZjnHaXfS2vFI/PSEwdKcdOo5RwAbCKUnPBIN9YwLgSWas3x+qivzQvJa/uxhKzJldE6WK43aDKjGj9Rij9w=="],
+    "unplugin-vue-components": ["unplugin-vue-components@32.1.0", "", { "dependencies": { "chokidar": "^5.0.0", "local-pkg": "^1.2.0", "magic-string": "^0.30.21", "mlly": "^1.8.2", "obug": "^2.1.1", "picomatch": "^4.0.4", "tinyglobby": "^0.2.16", "unplugin": "^3.0.0", "unplugin-utils": "^0.3.1" }, "peerDependencies": { "@nuxt/kit": "^3.2.2 || ^4.0.0", "vue": "^3.0.0" }, "optionalPeers": ["@nuxt/kit"] }, "sha512-YiUkSxuRjab18XFOrX5VsIxXzccrfmHVGsGeJgSgklb829DQmCy9E4vvDUE4tuvZZdxyFJZX0Oc4TPnnxiiMyg=="],
 
-    "unstorage": ["unstorage@1.17.2", "", { "dependencies": { "anymatch": "^3.1.3", "chokidar": "^4.0.3", "destr": "^2.0.5", "h3": "^1.15.4", "lru-cache": "^10.4.3", "node-fetch-native": "^1.6.7", "ofetch": "^1.5.0", "ufo": "^1.6.1" }, "peerDependencies": { "@azure/app-configuration": "^1.8.0", "@azure/cosmos": "^4.2.0", "@azure/data-tables": "^13.3.0", "@azure/identity": "^4.6.0", "@azure/keyvault-secrets": "^4.9.0", "@azure/storage-blob": "^12.26.0", "@capacitor/preferences": "^6.0.3 || ^7.0.0", "@deno/kv": ">=0.9.0", "@netlify/blobs": "^6.5.0 || ^7.0.0 || ^8.1.0 || ^9.0.0 || ^10.0.0", "@planetscale/database": "^1.19.0", "@upstash/redis": "^1.34.3", "@vercel/blob": ">=0.27.1", "@vercel/functions": "^2.2.12 || ^3.0.0", "@vercel/kv": "^1.0.1", "aws4fetch": "^1.0.20", "db0": ">=0.2.1", "idb-keyval": "^6.2.1", "ioredis": "^5.4.2", "uploadthing": "^7.4.4" }, "optionalPeers": ["@azure/app-configuration", "@azure/cosmos", "@azure/data-tables", "@azure/identity", "@azure/keyvault-secrets", "@azure/storage-blob", "@capacitor/preferences", "@deno/kv", "@netlify/blobs", "@planetscale/database", "@upstash/redis", "@vercel/blob", "@vercel/functions", "@vercel/kv", "aws4fetch", "db0", "idb-keyval", "ioredis", "uploadthing"] }, "sha512-cKEsD6iBWJgOMJ6vW1ID/SYuqNf8oN4yqRk8OYqaVQ3nnkJXOT1PSpaMh2QfzLs78UN5kSNRD2c/mgjT8tX7+w=="],
+    "unrouting": ["unrouting@0.2.3", "", { "dependencies": { "escape-string-regexp": "^5.0.0", "ufo": "^1.6.3" } }, "sha512-8wOFT/fBh8YeeDr1aVmkXCqYVTMbQ6vzfNzwzybKmSfXdRhGCq1Y2B1e9YeB0JEf85gbvSwJHAMu3D2IEcLGKA=="],
 
-    "untun": ["untun@0.1.3", "", { "dependencies": { "citty": "^0.1.5", "consola": "^3.2.3", "pathe": "^1.1.1" }, "bin": { "untun": "bin/untun.mjs" } }, "sha512-4luGP9LMYszMRZwsvyUd9MrxgEGZdZuZgpVQHEEX0lCYFESasVRvZd0EYpCkOIbJKHMuv0LskpXc/8Un+MJzEQ=="],
+    "unstorage": ["unstorage@1.17.6", "", { "dependencies": { "anymatch": "^3.1.3", "chokidar": "^5.0.0", "destr": "^2.0.5", "h3": "^1.15.11", "lru-cache": "^11.5.3", "node-fetch-native": "^1.6.7", "ofetch": "^1.5.1", "ufo": "^1.6.4" }, "peerDependencies": { "@azure/app-configuration": "^1.8.0", "@azure/cosmos": "^4.2.0", "@azure/data-tables": "^13.3.0", "@azure/identity": "^4.6.0", "@azure/keyvault-secrets": "^4.9.0", "@azure/storage-blob": "^12.26.0", "@capacitor/preferences": "^6 || ^7 || ^8", "@deno/kv": ">=0.9.0", "@netlify/blobs": "^6.5.0 || ^7.0.0 || ^8.1.0 || ^9.0.0 || ^10.0.0 || ^11.0.0", "@planetscale/database": "^1.19.0", "@upstash/redis": "^1.34.3", "@vercel/blob": ">=0.27.1", "@vercel/functions": "^2.2.12 || ^3.0.0", "@vercel/kv": "^1 || ^2 || ^3", "aws4fetch": "^1.0.20", "db0": ">=0.2.1", "idb-keyval": "^6.2.1", "ioredis": "^5.4.2", "uploadthing": "^7.4.4" }, "optionalPeers": ["@azure/app-configuration", "@azure/cosmos", "@azure/data-tables", "@azure/identity", "@azure/keyvault-secrets", "@azure/storage-blob", "@capacitor/preferences", "@deno/kv", "@netlify/blobs", "@planetscale/database", "@upstash/redis", "@vercel/blob", "@vercel/functions", "@vercel/kv", "aws4fetch", "db0", "idb-keyval", "ioredis", "uploadthing"] }, "sha512-gjKtcmn/KwZuJZO9o2sc0esAQnhmTw0LviDHwevTXbJMYs0dRTp8ZEEWXHU0vTpzbN3cA0yxlTeyXssMp3zDqw=="],
 
-    "untyped": ["untyped@2.0.0", "", { "dependencies": { "citty": "^0.1.6", "defu": "^6.1.4", "jiti": "^2.4.2", "knitwork": "^1.2.0", "scule": "^1.3.0" }, "bin": { "untyped": "dist/cli.mjs" } }, "sha512-nwNCjxJTjNuLCgFr42fEak5OcLuB3ecca+9ksPFNvtfYSLpjf+iJqSIaSnIile6ZPbKYxI5k2AfXqeopGudK/g=="],
+    "untun": ["untun@0.2.2", "", { "bin": { "untun": "dist/cli.mjs" } }, "sha512-+NnOJcSiEtYsVgJmXUzQbJeRAFXJC4yPJYuh6kF9B0Rm6zunXcs/3GZOTllyocSbUDIxD6Bj7e/4ATw7sph1Sw=="],
 
-    "unwasm": ["unwasm@0.3.11", "", { "dependencies": { "knitwork": "^1.2.0", "magic-string": "^0.30.17", "mlly": "^1.7.4", "pathe": "^2.0.3", "pkg-types": "^2.2.0", "unplugin": "^2.3.6" } }, "sha512-Vhp5gb1tusSQw5of/g3Q697srYgMXvwMgXMjcG4ZNga02fDX9coxJ9fAb0Ci38hM2Hv/U1FXRPGgjP2BYqhNoQ=="],
+    "untyped": ["untyped@2.0.0", "", { "dependencies": { "citty": "^0.1.6", "defu": "^6.1.4", "jiti": "^2.4.2", "knitwork": "^1.2.0", "scule": "^1.3.0" }, "bin": { "untyped": "dist/cli.mjs" } }, "sha512-nwNCjxJTjNuLCgFr42fEak5OcLuB3ecca+9ksPFNvtfYSLpjf+iJqSIaSnIile6ZPbKYxI5k2AfXqeopGudK/g=="],
 
-    "upath": ["upath@1.2.0", "", {}, "sha512-aZwGpamFO61g3OlfT7OQCHqhGnW43ieH9WZeP7QxN/G/jS4jfqUkZxoryvJgVPEcrl5NL/ggHsSmLMHuH64Lhg=="],
+    "unwasm": ["unwasm@0.5.3", "", { "dependencies": { "exsolve": "^1.0.8", "knitwork": "^1.3.0", "magic-string": "^0.30.21", "mlly": "^1.8.0", "pathe": "^2.0.3", "pkg-types": "^2.3.0" } }, "sha512-keBgTSfp3r6+s9ZcSma+0chwxQdmLbB5+dAD9vjtB21UTMYuKAxHXCU1K2CbCtnP09EaWeRvACnXk0EJtUx+hw=="],
 
-    "update-browserslist-db": ["update-browserslist-db@1.1.3", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-UxhIZQ+QInVdunkDAaiazvvT/+fXL5Osr0JZlJulepYu6Jd7qJtDZjlur0emRlT71EN3ScPoE7gvsuIKKNavKw=="],
+    "update-browserslist-db": ["update-browserslist-db@1.3.4", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-t8wonIOdQyOjtPd2VktlBu6QjTVTks6v8bSi7kd0r2Vll8TK1JYDZtRRdbmCHOAMphkZgrzK+L+vXK4pyZ8t4A=="],
 
-    "uqr": ["uqr@0.1.2", "", {}, "sha512-MJu7ypHq6QasgF5YRTjqscSzQp/W11zoUk6kvmlH+fmWEs63Y0Eib13hYFwAzagRJcVY8WVnlV+eBDUGMJ5IbA=="],
+    "uqr": ["uqr@0.1.3", "", {}, "sha512-0rjE8iEJe4YmT9TOhwsZtqCMRLc5DXZUI2UEYUUg63ikBkqqE5EYWaI0etFe/5KUcmcYwLih2RND1kq+hrUJXA=="],
 
     "util-deprecate": ["util-deprecate@1.0.2", "", {}, "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw=="],
 
-    "vite": ["vite@6.3.5", "", { "dependencies": { "esbuild": "^0.25.0", "fdir": "^6.4.4", "picomatch": "^4.0.2", "postcss": "^8.5.3", "rollup": "^4.34.9", "tinyglobby": "^0.2.13" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^18.0.0 || ^20.0.0 || >=22.0.0", "jiti": ">=1.21.0", "less": "*", "lightningcss": "^1.21.0", "sass": "*", "sass-embedded": "*", "stylus": "*", "sugarss": "*", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "jiti", "less", "lightningcss", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-cZn6NDFE7wdTpINgs++ZJ4N49W2vRp8LCKrn3Ob1kYNtOo21vfDoaV5GzBfLU4MovSAB8uNRm4jgzVQZ+mBzPQ=="],
-
-    "vite-dev-rpc": ["vite-dev-rpc@1.1.0", "", { "dependencies": { "birpc": "^2.4.0", "vite-hot-client": "^2.1.0" }, "peerDependencies": { "vite": "^2.9.0 || ^3.0.0-0 || ^4.0.0-0 || ^5.0.0-0 || ^6.0.1 || ^7.0.0-0" } }, "sha512-pKXZlgoXGoE8sEKiKJSng4hI1sQ4wi5YT24FCrwrLt6opmkjlqPPVmiPWWJn8M8byMxRGzp1CrFuqQs4M/Z39A=="],
-
-    "vite-hot-client": ["vite-hot-client@2.1.0", "", { "peerDependencies": { "vite": "^2.6.0 || ^3.0.0 || ^4.0.0 || ^5.0.0-0 || ^6.0.0-0 || ^7.0.0-0" } }, "sha512-7SpgZmU7R+dDnSmvXE1mfDtnHLHQSisdySVR7lO8ceAXvM0otZeuQQ6C8LrS5d/aYyP/QZ0hI0L+dIPrm4YlFQ=="],
-
-    "vite-node": ["vite-node@5.1.0", "", { "dependencies": { "cac": "^6.7.14", "debug": "^4.4.3", "es-module-lexer": "^1.7.0", "pathe": "^2.0.3", "vite": "^7.2.0" }, "bin": { "vite-node": "vite-node.js" } }, "sha512-ci+CXFFrQfRgdO0WDSKNQ28OOglURJUw2hVlfir4IA+Q2nHKmU/qIbmiYO7oB8CZvvSoyCmHycXz5MiX03BrsQ=="],
-
-    "vite-plugin-checker": ["vite-plugin-checker@0.11.0", "", { "dependencies": { "@babel/code-frame": "^7.27.1", "chokidar": "^4.0.3", "npm-run-path": "^6.0.0", "picocolors": "^1.1.1", "picomatch": "^4.0.3", "tiny-invariant": "^1.3.3", "tinyglobby": "^0.2.14", "vscode-uri": "^3.1.0" }, "peerDependencies": { "@biomejs/biome": ">=1.7", "eslint": ">=7", "meow": "^13.2.0", "optionator": "^0.9.4", "oxlint": ">=1", "stylelint": ">=16", "typescript": "*", "vite": ">=5.4.20", "vls": "*", "vti": "*", "vue-tsc": "~2.2.10 || ^3.0.0" }, "optionalPeers": ["@biomejs/biome", "eslint", "meow", "optionator", "oxlint", "stylelint", "typescript", "vls", "vti", "vue-tsc"] }, "sha512-iUdO9Pl9UIBRPAragwi3as/BXXTtRu4G12L3CMrjx+WVTd9g/MsqNakreib9M/2YRVkhZYiTEwdH2j4Dm0w7lw=="],
+    "vaul-vue": ["vaul-vue@0.4.1", "", { "dependencies": { "@vueuse/core": "^10.8.0", "reka-ui": "^2.0.0", "vue": "^3.4.5" } }, "sha512-A6jOWOZX5yvyo1qMn7IveoWN91mJI5L3BUKsIwkg6qrTGgHs1Sb1JF/vyLJgnbN1rH4OOOxFbtqL9A46bOyGUQ=="],
 
-    "vite-plugin-inspect": ["vite-plugin-inspect@11.3.3", "", { "dependencies": { "ansis": "^4.1.0", "debug": "^4.4.1", "error-stack-parser-es": "^1.0.5", "ohash": "^2.0.11", "open": "^10.2.0", "perfect-debounce": "^2.0.0", "sirv": "^3.0.1", "unplugin-utils": "^0.3.0", "vite-dev-rpc": "^1.1.0" }, "peerDependencies": { "vite": "^6.0.0 || ^7.0.0-0" } }, "sha512-u2eV5La99oHoYPHE6UvbwgEqKKOQGz86wMg40CCosP6q8BkB6e5xPneZfYagK4ojPJSj5anHCrnvC20DpwVdRA=="],
+    "verkit": ["verkit@0.5.0", "", {}, "sha512-u4J1hr6Y+C/hit34GwL3eIcUf3wngT8TlYUjK7tk0jxydKLAq3sYvifjdTDA6U3KCKRcQCQDGf/srjxfZF3l7g=="],
 
-    "vite-plugin-pwa": ["vite-plugin-pwa@1.0.0", "", { "dependencies": { "debug": "^4.3.6", "pretty-bytes": "^6.1.1", "tinyglobby": "^0.2.10", "workbox-build": "^7.3.0", "workbox-window": "^7.3.0" }, "peerDependencies": { "@vite-pwa/assets-generator": "^1.0.0", "vite": "^3.1.0 || ^4.0.0 || ^5.0.0 || ^6.0.0" }, "optionalPeers": ["@vite-pwa/assets-generator"] }, "sha512-X77jo0AOd5OcxmWj3WnVti8n7Kw2tBgV1c8MCXFclrSlDV23ePzv2eTDIALXI2Qo6nJ5pZJeZAuX0AawvRfoeA=="],
-
-    "vite-plugin-vue-tracer": ["vite-plugin-vue-tracer@1.1.3", "", { "dependencies": { "estree-walker": "^3.0.3", "exsolve": "^1.0.7", "magic-string": "^0.30.21", "pathe": "^2.0.3", "source-map-js": "^1.2.1" }, "peerDependencies": { "vite": "^6.0.0 || ^7.0.0", "vue": "^3.5.0" } }, "sha512-fM7hfHELZvbPnSn8EKZwHfzxm5EfYFQIclz8rwcNXfodNbRkwNvh0AGMtaBfMxQ9HC5KVa3KitwHnmE4ezDemw=="],
-
-    "vscode-uri": ["vscode-uri@3.1.0", "", {}, "sha512-/BpdSx+yCQGnCvecbyXdxHDkuk55/G3xwnC0GqY4gmQ3j+A+g8kzzgB4Nk/SINjqn6+waqw3EgbVF2QKExkRxQ=="],
-
-    "vue": ["vue@3.5.24", "", { "dependencies": { "@vue/compiler-dom": "3.5.24", "@vue/compiler-sfc": "3.5.24", "@vue/runtime-dom": "3.5.24", "@vue/server-renderer": "3.5.24", "@vue/shared": "3.5.24" }, "peerDependencies": { "typescript": "*" }, "optionalPeers": ["typescript"] }, "sha512-uTHDOpVQTMjcGgrqFPSb8iO2m1DUvo+WbGqoXQz8Y1CeBYQ0FXf2z1gLRaBtHjlRz7zZUBHxjVB5VTLzYkvftg=="],
-
-    "vue-bundle-renderer": ["vue-bundle-renderer@2.2.0", "", { "dependencies": { "ufo": "^1.6.1" } }, "sha512-sz/0WEdYH1KfaOm0XaBmRZOWgYTEvUDt6yPYaUzl4E52qzgWLlknaPPTTZmp6benaPTlQAI/hN1x3tAzZygycg=="],
-
-    "vue-devtools-stub": ["vue-devtools-stub@0.1.0", "", {}, "sha512-RutnB7X8c5hjq39NceArgXg28WZtZpGc3+J16ljMiYnFhKvd8hITxSWQSQ5bvldxMDU6gG5mkxl1MTQLXckVSQ=="],
-
-    "vue-router": ["vue-router@4.6.3", "", { "dependencies": { "@vue/devtools-api": "^6.6.4" }, "peerDependencies": { "vue": "^3.5.0" } }, "sha512-ARBedLm9YlbvQomnmq91Os7ck6efydTSpRP3nuOKCvgJOHNrhRoJDSKtee8kcL1Vf7nz6U+PMBL+hTvR3bTVQg=="],
-
-    "web-streams-polyfill": ["web-streams-polyfill@3.3.3", "", {}, "sha512-d2JWLCivmZYTSIoge9MsgFCZrt571BikcWGYkjC1khllbTeDlGqZ2D8vD8E/lJa8WGWbb7Plm8/XJYV7IJHZZw=="],
-
-    "webidl-conversions": ["webidl-conversions@4.0.2", "", {}, "sha512-YQ+BmxuTgd6UXZW3+ICGfyqRyHXVlD5GtQr5+qjiNW7bF0cqrzX500HVXPBOvgXb5YnzDd+h0zqyv61KUD7+Sg=="],
-
-    "webpack-virtual-modules": ["webpack-virtual-modules@0.6.2", "", {}, "sha512-66/V2i5hQanC51vBQKPH4aI8NMAcBW59FVBs+rC7eGHupMyfn34q7rZIE+ETlJ+XTevqfUhVVBgSUNSW2flEUQ=="],
+    "vite": ["vite@8.3.4", "", { "dependencies": { "lightningcss": "^1.33.0", "picomatch": "^4.0.7", "postcss": "^8.5.29", "rolldown": "~1.2.12", "tinyglobby": "^0.2.17" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", "@vitejs/devtools": "^0.7.1", "esbuild": "^0.27.0 || ^0.28.0", "jiti": ">=1.21.0", "less": "^4.0.0", "sass": "^1.70.0", "sass-embedded": "^1.70.0", "stylus": ">=0.54.8", "sugarss": "^5.0.0", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "@vitejs/devtools", "esbuild", "jiti", "less", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-IftLE8phJhdNRIGNEV4JCCvfNScoZQVfcXaN8TQropWGJtOHcu+iAB9pHcuGvmEb/kddw0LBe/jS8ztdC6xdiQ=="],
 
-    "whatwg-url": ["whatwg-url@7.1.0", "", { "dependencies": { "lodash.sortby": "^4.7.0", "tr46": "^1.0.1", "webidl-conversions": "^4.0.2" } }, "sha512-WUu7Rg1DroM7oQvGWfOiAK21n74Gg+T4elXEQYkOhtyLeWiJFoOGLXPKI/9gzIie9CtwVLm8wtw6YJdKyxSjeg=="],
+    "vite-dev-rpc": ["vite-dev-rpc@2.0.0", "", { "dependencies": { "birpc": "^4.0.0", "vite-hot-client": "^2.2.0" }, "peerDependencies": { "vite": "^2.9.0 || ^3.0.0-0 || ^4.0.0-0 || ^5.0.0-0 || ^6.0.1 || ^7.0.0-0 || ^8.0.0" } }, "sha512-yKwbTwdHKSD2k/aGqyWpPHepo45OQc8lH3/6IfT4ZqeKE26ooKvi4WIEKzqWav8v+9Is8u1k8q54hvOmqASazA=="],
 
-    "which": ["which@5.0.0", "", { "dependencies": { "isexe": "^3.1.1" }, "bin": { "node-which": "bin/which.js" } }, "sha512-JEdGzHwwkrbWoGOlIHqQ5gtprKGOenpDHpxE9zVR1bWbOtYRyPPHMe9FaP6x61CmNaTThSkb0DAJte5jD+DmzQ=="],
+    "vite-hot-client": ["vite-hot-client@2.2.0", "", { "peerDependencies": { "vite": "^2.6.0 || ^3.0.0 || ^4.0.0 || ^5.0.0-0 || ^6.0.0-0 || ^7.0.0-0 || ^8.0.0" } }, "sha512-76Zs9zrHbH7M7wqeyooGQKdX+yg0pQ0xuQ1PbFp4z5a0Lzn2e5IPFoCswnmqZ4GiwqB4Jo3WcDAMO9jARTJl8w=="],
 
-    "which-boxed-primitive": ["which-boxed-primitive@1.1.1", "", { "dependencies": { "is-bigint": "^1.1.0", "is-boolean-object": "^1.2.1", "is-number-object": "^1.1.1", "is-string": "^1.1.1", "is-symbol": "^1.1.1" } }, "sha512-TbX3mj8n0odCBFVlY8AxkqcHASw3L60jIuF8jFP78az3C2YhmGvqbHBpAjTRH2/xqYunrJ9g1jSyjCjpoWzIAA=="],
+    "vite-node": ["vite-node@6.0.0", "", { "dependencies": { "cac": "^7.0.0", "es-module-lexer": "^2.0.0", "obug": "^2.1.1", "pathe": "^2.0.3", "vite": "^8.0.0" }, "bin": { "vite-node": "dist/cli.mjs" } }, "sha512-oj4PVrT+pDh6GYf5wfUXkcZyekYS8kKPfLPXVl8qe324Ec6l4K2DUKNadRbZ3LQl0qGcDz+PyOo7ZAh00Y+JjQ=="],
 
-    "which-builtin-type": ["which-builtin-type@1.2.1", "", { "dependencies": { "call-bound": "^1.0.2", "function.prototype.name": "^1.1.6", "has-tostringtag": "^1.0.2", "is-async-function": "^2.0.0", "is-date-object": "^1.1.0", "is-finalizationregistry": "^1.1.0", "is-generator-function": "^1.0.10", "is-regex": "^1.2.1", "is-weakref": "^1.0.2", "isarray": "^2.0.5", "which-boxed-primitive": "^1.1.0", "which-collection": "^1.0.2", "which-typed-array": "^1.1.16" } }, "sha512-6iBczoX+kDQ7a3+YJBnh3T+KZRxM/iYNPXicqk66/Qfm1b93iu+yOImkg0zHbj5LNOcNv1TEADiZ0xa34B4q6Q=="],
+    "vite-plugin-checker": ["vite-plugin-checker@0.14.5", "", { "dependencies": { "@babel/code-frame": "^7.29.0", "chokidar": "^5.0.0", "npm-run-path": "^6.0.0", "picocolors": "^1.1.1", "picomatch": "^4.0.4", "proper-lockfile": "^4.1.2", "tiny-invariant": "^1.3.3" }, "peerDependencies": { "@biomejs/biome": ">=2.4.12", "eslint": ">=9.39.4", "meow": "^13.2.0 || ^14.0.0", "optionator": "^0.9.4", "oxlint": ">=1", "stylelint": ">=16.26.1", "typescript": "*", "vite": ">=5.4.21", "vue-tsc": "~2.2.10 || ^3.0.0" }, "optionalPeers": ["@biomejs/biome", "eslint", "meow", "optionator", "oxlint", "stylelint", "typescript", "vue-tsc"] }, "sha512-c9lQ92eisUO+F7Fd93aelojmiOS+NQpPgQ1XR2LTQHox1/laZf4yAoQj+L3RA9Vgh10e2nFd9b8r2LLyYZsbpA=="],
 
-    "which-collection": ["which-collection@1.0.2", "", { "dependencies": { "is-map": "^2.0.3", "is-set": "^2.0.3", "is-weakmap": "^2.0.2", "is-weakset": "^2.0.3" } }, "sha512-K4jVyjnBdgvc86Y6BkaLZEN933SwYOuBFkdmBu9ZfkcAbdVbpITnDmjvZ/aQjRXQrv5EPkTnD1s39GiiqbngCw=="],
+    "vite-plugin-inspect": ["vite-plugin-inspect@11.4.1", "", { "dependencies": { "ansis": "^4.3.0", "error-stack-parser-es": "^1.0.5", "obug": "^2.1.1", "ohash": "^2.0.11", "open": "^11.0.0", "perfect-debounce": "^2.1.0", "sirv": "^3.0.2", "unplugin-utils": "^0.3.1", "vite-dev-rpc": "^2.0.0" }, "peerDependencies": { "@nuxt/kit": "*", "vite": "^6.0.0 || ^7.0.0-0 || ^8.0.0-0" }, "optionalPeers": ["@nuxt/kit"] }, "sha512-ShOFe2PURXGvRS5OrgmOLZOCwDTD7dEBVt0tMpFPKb9AsvqXKCRGM8QgKrUbRbJYFXScHvDPpGRd28rYidC0tA=="],
 
-    "which-typed-array": ["which-typed-array@1.1.19", "", { "dependencies": { "available-typed-arrays": "^1.0.7", "call-bind": "^1.0.8", "call-bound": "^1.0.4", "for-each": "^0.3.5", "get-proto": "^1.0.1", "gopd": "^1.2.0", "has-tostringtag": "^1.0.2" } }, "sha512-rEvr90Bck4WZt9HHFC4DJMsjvu7x+r6bImz0/BrbWb7A2djJ8hnZMrWnHo9F8ssv0OMErasDhftrfROTyqSDrw=="],
+    "vite-plugin-vue-tracer": ["vite-plugin-vue-tracer@1.6.0", "", { "dependencies": { "estree-walker": "^3.0.3", "exsolve": "^1.1.1", "magic-string": "^1.2.0", "pathe": "^2.0.3", "source-map-js": "^1.2.1" }, "peerDependencies": { "vite": "^6.0.0 || ^7.0.0 || ^8.0.0-0", "vue": "^3.5.0" } }, "sha512-G07az+X68rtz9ngfBxZH8vVhZ7DOnZvJABnT9nFp/TBV+qfKtGqA00djblqvvbf3VYfwLmJtoqZhFDAx8mLpNw=="],
 
-    "workbox-background-sync": ["workbox-background-sync@7.3.0", "", { "dependencies": { "idb": "^7.0.1", "workbox-core": "7.3.0" } }, "sha512-PCSk3eK7Mxeuyatb22pcSx9dlgWNv3+M8PqPaYDokks8Y5/FX4soaOqj3yhAZr5k6Q5JWTOMYgaJBpbw11G9Eg=="],
+    "vscode-uri": ["vscode-uri@3.2.0", "", {}, "sha512-m2gXo3bn0G1kT9InzMf07fTbqMbGtyckj3bH5ktLO+1Ssv+yiATZ4dhwaQv9UZWxJh6E9IFGnQyjgWVDWVBDrg=="],
 
-    "workbox-broadcast-update": ["workbox-broadcast-update@7.3.0", "", { "dependencies": { "workbox-core": "7.3.0" } }, "sha512-T9/F5VEdJVhwmrIAE+E/kq5at2OY6+OXXgOWQevnubal6sO92Gjo24v6dCVwQiclAF5NS3hlmsifRrpQzZCdUA=="],
+    "vue": ["vue@3.5.44", "", { "dependencies": { "@vue/compiler-dom": "3.5.44", "@vue/compiler-sfc": "3.5.44", "@vue/runtime-dom": "3.5.44", "@vue/server-renderer": "3.5.44", "@vue/shared": "3.5.44" }, "peerDependencies": { "typescript": "*" }, "optionalPeers": ["typescript"] }, "sha512-dvvmaOCG7lAMkJTPqPwWeGMsPS6DIsFsfZDUgBp9V6mHf9b3+/wyVwYR4Es+WV6uJC0FKRxp81Obcq0ZwUcGFQ=="],
 
-    "workbox-build": ["workbox-build@7.3.0", "", { "dependencies": { "@apideck/better-ajv-errors": "^0.3.1", "@babel/core": "^7.24.4", "@babel/preset-env": "^7.11.0", "@babel/runtime": "^7.11.2", "@rollup/plugin-babel": "^5.2.0", "@rollup/plugin-node-resolve": "^15.2.3", "@rollup/plugin-replace": "^2.4.1", "@rollup/plugin-terser": "^0.4.3", "@surma/rollup-plugin-off-main-thread": "^2.2.3", "ajv": "^8.6.0", "common-tags": "^1.8.0", "fast-json-stable-stringify": "^2.1.0", "fs-extra": "^9.0.1", "glob": "^7.1.6", "lodash": "^4.17.20", "pretty-bytes": "^5.3.0", "rollup": "^2.43.1", "source-map": "^0.8.0-beta.0", "stringify-object": "^3.3.0", "strip-comments": "^2.0.1", "tempy": "^0.6.0", "upath": "^1.2.0", "workbox-background-sync": "7.3.0", "workbox-broadcast-update": "7.3.0", "workbox-cacheable-response": "7.3.0", "workbox-core": "7.3.0", "workbox-expiration": "7.3.0", "workbox-google-analytics": "7.3.0", "workbox-navigation-preload": "7.3.0", "workbox-precaching": "7.3.0", "workbox-range-requests": "7.3.0", "workbox-recipes": "7.3.0", "workbox-routing": "7.3.0", "workbox-strategies": "7.3.0", "workbox-streams": "7.3.0", "workbox-sw": "7.3.0", "workbox-window": "7.3.0" } }, "sha512-JGL6vZTPlxnlqZRhR/K/msqg3wKP+m0wfEUVosK7gsYzSgeIxvZLi1ViJJzVL7CEeI8r7rGFV973RiEqkP3lWQ=="],
+    "vue-bundle-renderer": ["vue-bundle-renderer@2.4.0", "", { "dependencies": { "ufo": "^1.6.4" } }, "sha512-IxHopQZgzTGBiuGERrQrAS7Lr3dCv+qxvgirEgCUFGAD4gYNfiaGYzC1DDojeZmJAmehp9gG8+17PGuVP6Ab2Q=="],
 
-    "workbox-cacheable-response": ["workbox-cacheable-response@7.3.0", "", { "dependencies": { "workbox-core": "7.3.0" } }, "sha512-eAFERIg6J2LuyELhLlmeRcJFa5e16Mj8kL2yCDbhWE+HUun9skRQrGIFVUagqWj4DMaaPSMWfAolM7XZZxNmxA=="],
+    "vue-component-type-helpers": ["vue-component-type-helpers@3.3.13", "", {}, "sha512-02KCxSmKDhIITjKyJ4QT5csP6L0WoRborLqY/34a40+S9uvMvdNgMV0yVjO3p2Gkz3ZoPmFz/0JsGHacwJYTxw=="],
 
-    "workbox-core": ["workbox-core@7.3.0", "", {}, "sha512-Z+mYrErfh4t3zi7NVTvOuACB0A/jA3bgxUN3PwtAVHvfEsZxV9Iju580VEETug3zYJRc0Dmii/aixI/Uxj8fmw=="],
+    "vue-demi": ["vue-demi@0.14.10", "", { "peerDependencies": { "@vue/composition-api": "^1.0.0-rc.1", "vue": "^3.0.0-0 || ^2.6.0" }, "optionalPeers": ["@vue/composition-api"], "bin": { "vue-demi-fix": "bin/vue-demi-fix.js", "vue-demi-switch": "bin/vue-demi-switch.js" } }, "sha512-nMZBOwuzabUO0nLgIcc6rycZEebF6eeUfaiQx9+WSk8e29IbLvPU9feI6tqW4kTo3hvoYAJkMh8n8D0fuISphg=="],
 
-    "workbox-expiration": ["workbox-expiration@7.3.0", "", { "dependencies": { "idb": "^7.0.1", "workbox-core": "7.3.0" } }, "sha512-lpnSSLp2BM+K6bgFCWc5bS1LR5pAwDWbcKt1iL87/eTSJRdLdAwGQznZE+1czLgn/X05YChsrEegTNxjM067vQ=="],
-
-    "workbox-google-analytics": ["workbox-google-analytics@7.3.0", "", { "dependencies": { "workbox-background-sync": "7.3.0", "workbox-core": "7.3.0", "workbox-routing": "7.3.0", "workbox-strategies": "7.3.0" } }, "sha512-ii/tSfFdhjLHZ2BrYgFNTrb/yk04pw2hasgbM70jpZfLk0vdJAXgaiMAWsoE+wfJDNWoZmBYY0hMVI0v5wWDbg=="],
-
-    "workbox-navigation-preload": ["workbox-navigation-preload@7.3.0", "", { "dependencies": { "workbox-core": "7.3.0" } }, "sha512-fTJzogmFaTv4bShZ6aA7Bfj4Cewaq5rp30qcxl2iYM45YD79rKIhvzNHiFj1P+u5ZZldroqhASXwwoyusnr2cg=="],
+    "vue-devtools-stub": ["vue-devtools-stub@0.1.0", "", {}, "sha512-RutnB7X8c5hjq39NceArgXg28WZtZpGc3+J16ljMiYnFhKvd8hITxSWQSQ5bvldxMDU6gG5mkxl1MTQLXckVSQ=="],
 
-    "workbox-precaching": ["workbox-precaching@7.3.0", "", { "dependencies": { "workbox-core": "7.3.0", "workbox-routing": "7.3.0", "workbox-strategies": "7.3.0" } }, "sha512-ckp/3t0msgXclVAYaNndAGeAoWQUv7Rwc4fdhWL69CCAb2UHo3Cef0KIUctqfQj1p8h6aGyz3w8Cy3Ihq9OmIw=="],
+    "vue-router": ["vue-router@5.4.0", "", { "dependencies": { "@vue-macros/common": "^3.1.3", "@vue/devtools-api": "^8.1.5", "ast-walker-scope": "^0.10.0", "chokidar": "^5.0.0", "confbox": "^0.3.1", "local-pkg": "^1.2.1", "magic-string": "^1.4.3", "mlly": "^1.8.2", "muggle-string": "^0.4.1", "nostics": "^1.3.0", "pathe": "^2.0.3", "picomatch": "^4.0.7", "scule": "^1.3.0", "tinyglobby": "^0.2.17", "unplugin": "^3.4.0", "unplugin-utils": "^0.3.2" }, "peerDependencies": { "@pinia/colada": ">=0.21.2", "@vue/compiler-sfc": "^3.5.34 || ^4.0.0", "pinia": "^3.0.4 || ^4.0.2", "vite": "^7.3.0 || ^8.0.0", "vue": "^3.5.34 || ^4.0.0" }, "optionalPeers": ["@pinia/colada", "@vue/compiler-sfc", "pinia", "vite"] }, "sha512-pFvcYcxinDHjZUlf7AzFBrT8r8Xqvv4uMHoJnjc+EqPawXQvHTkF8S4tfSmQLpriVHUGfkaKlI7Et0KRjTMTdw=="],
 
-    "workbox-range-requests": ["workbox-range-requests@7.3.0", "", { "dependencies": { "workbox-core": "7.3.0" } }, "sha512-EyFmM1KpDzzAouNF3+EWa15yDEenwxoeXu9bgxOEYnFfCxns7eAxA9WSSaVd8kujFFt3eIbShNqa4hLQNFvmVQ=="],
+    "vue-tsc": ["vue-tsc@3.3.13", "", { "dependencies": { "@volar/typescript": "2.4.28", "@vue/language-core": "3.3.13" }, "peerDependencies": { "typescript": ">=5.0.0" }, "bin": { "vue-tsc": "bin/vue-tsc.js" } }, "sha512-jE4/bXdOMSHVxEGgQCqNllJy+9N3Gx6tfSAsg0yhFK/MAN6eXqISihupnDEKSCt12VVnjN2gI3AqLYcqoh5x/A=="],
 
-    "workbox-recipes": ["workbox-recipes@7.3.0", "", { "dependencies": { "workbox-cacheable-response": "7.3.0", "workbox-core": "7.3.0", "workbox-expiration": "7.3.0", "workbox-precaching": "7.3.0", "workbox-routing": "7.3.0", "workbox-strategies": "7.3.0" } }, "sha512-BJro/MpuW35I/zjZQBcoxsctgeB+kyb2JAP5EB3EYzePg8wDGoQuUdyYQS+CheTb+GhqJeWmVs3QxLI8EBP1sg=="],
+    "w3c-keyname": ["w3c-keyname@2.2.8", "", {}, "sha512-dpojBhNsCNN7T82Tm7k26A6G9ML3NkhDsnw9n/eoxSRlVBB4CEtIQ/KTCLI2Fwf3ataSXRhYFkQi3SlnFwPvPQ=="],
 
-    "workbox-routing": ["workbox-routing@7.3.0", "", { "dependencies": { "workbox-core": "7.3.0" } }, "sha512-ZUlysUVn5ZUzMOmQN3bqu+gK98vNfgX/gSTZ127izJg/pMMy4LryAthnYtjuqcjkN4HEAx1mdgxNiKJMZQM76A=="],
+    "webidl-conversions": ["webidl-conversions@3.0.1", "", {}, "sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ=="],
 
-    "workbox-strategies": ["workbox-strategies@7.3.0", "", { "dependencies": { "workbox-core": "7.3.0" } }, "sha512-tmZydug+qzDFATwX7QiEL5Hdf7FrkhjaF9db1CbB39sDmEZJg3l9ayDvPxy8Y18C3Y66Nrr9kkN1f/RlkDgllg=="],
+    "webpack-virtual-modules": ["webpack-virtual-modules@0.6.2", "", {}, "sha512-66/V2i5hQanC51vBQKPH4aI8NMAcBW59FVBs+rC7eGHupMyfn34q7rZIE+ETlJ+XTevqfUhVVBgSUNSW2flEUQ=="],
 
-    "workbox-streams": ["workbox-streams@7.3.0", "", { "dependencies": { "workbox-core": "7.3.0", "workbox-routing": "7.3.0" } }, "sha512-SZnXucyg8x2Y61VGtDjKPO5EgPUG5NDn/v86WYHX+9ZqvAsGOytP0Jxp1bl663YUuMoXSAtsGLL+byHzEuMRpw=="],
+    "whatwg-url": ["whatwg-url@5.0.0", "", { "dependencies": { "tr46": "~0.0.3", "webidl-conversions": "^3.0.0" } }, "sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw=="],
 
-    "workbox-sw": ["workbox-sw@7.3.0", "", {}, "sha512-aCUyoAZU9IZtH05mn0ACUpyHzPs0lMeJimAYkQkBsOWiqaJLgusfDCR+yllkPkFRxWpZKF8vSvgHYeG7LwhlmA=="],
+    "wheel-gestures": ["wheel-gestures@2.3.0", "", {}, "sha512-6b+PIXuKIy0ibVnF04GoijGKGIDwjlYSK7bCgicuQwPLivfjoLeCCK0bwbjyOdrStDTNPlyGFixIj0d0kZzwiQ=="],
 
-    "workbox-window": ["workbox-window@7.3.0", "", { "dependencies": { "@types/trusted-types": "^2.0.2", "workbox-core": "7.3.0" } }, "sha512-qW8PDy16OV1UBaUNGlTVcepzrlzyzNW/ZJvFQQs2j2TzGsg6IKjcpZC1RSquqQnTOafl5pCj5bGfAHlCjOOjdA=="],
+    "which": ["which@6.0.1", "", { "dependencies": { "isexe": "^4.0.0" }, "bin": { "node-which": "bin/which.js" } }, "sha512-oGLe46MIrCRqX7ytPUf66EAYvdeMIZYn3WaocqqKZAxrBpkqHfL/qvTyJ/bTk5+AqHCjXmrv3CEWgy368zhRUg=="],
 
-    "wrap-ansi": ["wrap-ansi@7.0.0", "", { "dependencies": { "ansi-styles": "^4.0.0", "string-width": "^4.1.0", "strip-ansi": "^6.0.0" } }, "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q=="],
+    "wrap-ansi": ["wrap-ansi@9.0.2", "", { "dependencies": { "ansi-styles": "^6.2.1", "string-width": "^7.0.0", "strip-ansi": "^7.1.0" } }, "sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww=="],
 
     "wrap-ansi-cjs": ["wrap-ansi@7.0.0", "", { "dependencies": { "ansi-styles": "^4.0.0", "string-width": "^4.1.0", "strip-ansi": "^6.0.0" } }, "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q=="],
 
-    "wrappy": ["wrappy@1.0.2", "", {}, "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="],
+    "ws": ["ws@8.22.0", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": ">=5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg=="],
 
-    "ws": ["ws@8.18.3", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": ">=5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-PEIGCY5tSlUt50cqyMXfCzX+oOPqN0vuGqWzbcJ2xvnkzkq46oOpz7dQaTDBdfICb4N14+GARUDw2XV2N4tvzg=="],
+    "wsl-utils": ["wsl-utils@0.3.1", "", { "dependencies": { "is-wsl": "^3.1.0", "powershell-utils": "^0.1.0" } }, "sha512-g/eziiSUNBSsdDJtCLB8bdYEUMj4jR7AGeUo96p/3dTafgjHhpF4RiCFPiRILwjQoDXx5MqkBr4fwWtR3Ky4Wg=="],
 
-    "wsl-utils": ["wsl-utils@0.1.0", "", { "dependencies": { "is-wsl": "^3.1.0" } }, "sha512-h3Fbisa2nKGPxCpm89Hk33lBLsnaGBvctQopaBSOW/uIs6FTe1ATyAnKFJrzVs9vpGdsTe73WF3V4lIsk4Gacw=="],
+    "y-protocols": ["y-protocols@1.0.7", "", { "dependencies": { "lib0": "^0.2.85" }, "peerDependencies": { "yjs": "^13.0.0" } }, "sha512-YSVsLoXxO67J6eE/nV4AtFtT3QEotZf5sK5BHxFBXso7VDUT3Tx07IfA6hsu5Q5OmBdMkQVmFZ9QOA7fikWvnw=="],
 
     "y18n": ["y18n@5.0.8", "", {}, "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA=="],
 
-    "yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
+    "yallist": ["yallist@4.0.0", "", {}, "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
 
-    "yaml": ["yaml@2.8.1", "", { "bin": { "yaml": "bin.mjs" } }, "sha512-lcYcMxX2PO9XMGvAJkJ3OsNMw+/7FKes7/hgerGUYWIoWu5j/+YQqcZr5JnPZWzOsEBgMbSbiSTn/dv/69Mkpw=="],
+    "yargs": ["yargs@18.2.0", "", { "dependencies": { "cliui": "^9.0.1", "escalade": "^3.1.1", "get-caller-file": "^2.0.5", "string-width": "^8.2.1", "y18n": "^5.0.5", "yargs-parser": "^22.0.0" } }, "sha512-9OpKOLeaoNFecEp7P6iYbzze/5CqWoH7N3SMs/6y1XF4nMvFMspEGZzJ6uFi9MmQwXhyzqYoSEKO3tvA3Z/o2w=="],
 
-    "yargs": ["yargs@17.7.2", "", { "dependencies": { "cliui": "^8.0.1", "escalade": "^3.1.1", "get-caller-file": "^2.0.5", "require-directory": "^2.1.1", "string-width": "^4.2.3", "y18n": "^5.0.5", "yargs-parser": "^21.1.1" } }, "sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w=="],
+    "yargs-parser": ["yargs-parser@22.0.0", "", {}, "sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw=="],
 
-    "yargs-parser": ["yargs-parser@21.1.1", "", {}, "sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw=="],
+    "yjs": ["yjs@13.6.33", "", { "dependencies": { "lib0": "^0.2.99" } }, "sha512-q/UYvr1gOk4XII+Cu1CW2dINjYqJJFifTzogEaIARznrvX7uOlHsdTEXcnOBMuIsrCGEEKdNxi74kyMLZlKVfw=="],
 
-    "youch": ["youch@4.1.0-beta.12", "", { "dependencies": { "@poppinss/colors": "^4.1.5", "@poppinss/dumper": "^0.6.5", "@speed-highlight/core": "^1.2.9", "cookie-es": "^2.0.0", "youch-core": "^0.3.3" } }, "sha512-X+AQ2EdigcZb2h1XQmBMm19TrrfKXxEXWpnf8ThbARwiiSf/pA7MvRTCj5VHCI9z3vjJBsDeqWWyvaI9Bfp9Pg=="],
+    "youch": ["youch@4.1.1", "", { "dependencies": { "@poppinss/colors": "^4.1.6", "@poppinss/dumper": "^0.7.0", "@speed-highlight/core": "^1.2.14", "cookie-es": "^3.0.1", "youch-core": "^0.3.3" } }, "sha512-mxW3qiSnl+GRxXsaUMzv2Mbada1Y8CDltET9UxejDQe6DBYlSekghl5U5K0ReAikcHDi0G1vKZEmmo/NWAGKLA=="],
 
     "youch-core": ["youch-core@0.3.3", "", { "dependencies": { "@poppinss/exception": "^1.2.2", "error-stack-parser-es": "^1.0.5" } }, "sha512-ho7XuGjLaJ2hWHoK8yFnsUGy2Y5uDpqSTq1FkHLK4/oqKtyUU1AFbOOxY4IpC9f0fTLjwYbslUz0Po5BpD1wrA=="],
 
     "zip-stream": ["zip-stream@6.0.1", "", { "dependencies": { "archiver-utils": "^5.0.0", "compress-commons": "^6.0.2", "readable-stream": "^4.0.0" } }, "sha512-zK7YHHz4ZXpW89AHXUPbQVGKI7uvkd3hzusTdotCg1UxyaVtg0zFJSTfW/Dq5f7OBBVnq6cZIaC8Ti4hb6dtCA=="],
 
-    "zod": ["zod@3.25.76", "", {}, "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ=="],
-
-    "@ampproject/remapping/@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.3.8", "", { "dependencies": { "@jridgewell/set-array": "^1.2.1", "@jridgewell/sourcemap-codec": "^1.4.10", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-imAbBGkb+ebQyxKgzv5Hu2nmROxoDOXHh80evxdoXNOrvAnVx7zimzc1Oo5h9RlfV4vPXaE2iM5pOFbvOCClWA=="],
-
-    "@ampproject/remapping/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
+    "zod": ["zod@4.6.7", "", {}, "sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg=="],
 
-    "@babel/code-frame/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "@babel/code-frame/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
     "@babel/code-frame/js-tokens": ["js-tokens@4.0.0", "", {}, "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
 
-    "@babel/core/@babel/generator": ["@babel/generator@7.27.1", "", { "dependencies": { "@babel/parser": "^7.27.1", "@babel/types": "^7.27.1", "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.25", "jsesc": "^3.0.2" } }, "sha512-UnJfnIpc/+JO0/+KRVQNGU+y5taA5vCbwN8+azkX6beii/ZF+enZJSOKo11ZSzGJjlNfJHfQtmQT8H+9TXPG2w=="],
+    "@babel/core/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "@babel/core/@babel/parser": ["@babel/parser@7.27.2", "", { "dependencies": { "@babel/types": "^7.27.1" }, "bin": "./bin/babel-parser.js" }, "sha512-QYLs8299NA7WM/bZAdp+CviYYkVoYXlDW2rzliy3chxd1PQjej7JORuMJDJXJUb9g0TT+B99EwaVLKmX+sPXWw=="],
+    "@babel/core/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
 
-    "@babel/core/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "@babel/generator/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "@babel/core/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
+    "@babel/helper-annotate-as-pure/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
     "@babel/helper-compilation-targets/lru-cache": ["lru-cache@5.1.1", "", { "dependencies": { "yallist": "^3.0.2" } }, "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w=="],
 
     "@babel/helper-compilation-targets/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
 
-    "@babel/helper-create-class-features-plugin/@babel/traverse": ["@babel/traverse@7.28.5", "", { "dependencies": { "@babel/code-frame": "^7.27.1", "@babel/generator": "^7.28.5", "@babel/helper-globals": "^7.28.0", "@babel/parser": "^7.28.5", "@babel/template": "^7.27.2", "@babel/types": "^7.28.5", "debug": "^4.3.1" } }, "sha512-TCCj4t55U90khlYkVV/0TfkJkAkUg3jZFA3Neb7unZT8CPok7iiRfaX0F+WnqWqt7OxhOn0uBKXCw4lbL8W0aQ=="],
-
     "@babel/helper-create-class-features-plugin/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
 
-    "@babel/helper-create-regexp-features-plugin/@babel/helper-annotate-as-pure": ["@babel/helper-annotate-as-pure@7.27.1", "", { "dependencies": { "@babel/types": "^7.27.1" } }, "sha512-WnuuDILl9oOBbKnb4L+DyODx7iC47XfzmNCpTttFsSp6hTG7XZxu60+4IO+2/hPfcGOoKbFiwoI/+zwARbNQow=="],
-
-    "@babel/helper-create-regexp-features-plugin/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
-
-    "@babel/helper-member-expression-to-functions/@babel/traverse": ["@babel/traverse@7.28.5", "", { "dependencies": { "@babel/code-frame": "^7.27.1", "@babel/generator": "^7.28.5", "@babel/helper-globals": "^7.28.0", "@babel/parser": "^7.28.5", "@babel/template": "^7.27.2", "@babel/types": "^7.28.5", "debug": "^4.3.1" } }, "sha512-TCCj4t55U90khlYkVV/0TfkJkAkUg3jZFA3Neb7unZT8CPok7iiRfaX0F+WnqWqt7OxhOn0uBKXCw4lbL8W0aQ=="],
-
-    "@babel/helper-module-imports/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
-
-    "@babel/helper-module-transforms/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
-
-    "@babel/helper-optimise-call-expression/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
-
-    "@babel/helper-remap-async-to-generator/@babel/helper-annotate-as-pure": ["@babel/helper-annotate-as-pure@7.27.1", "", { "dependencies": { "@babel/types": "^7.27.1" } }, "sha512-WnuuDILl9oOBbKnb4L+DyODx7iC47XfzmNCpTttFsSp6hTG7XZxu60+4IO+2/hPfcGOoKbFiwoI/+zwARbNQow=="],
-
-    "@babel/helper-replace-supers/@babel/helper-member-expression-to-functions": ["@babel/helper-member-expression-to-functions@7.27.1", "", { "dependencies": { "@babel/traverse": "^7.27.1", "@babel/types": "^7.27.1" } }, "sha512-E5chM8eWjTp/aNoVpcbfM7mLxu9XGLWYise2eBKGQomAk/Mb4XoxyqXTZbuTohbsl8EKqdlMhnDI2CCLfcs9wA=="],
-
-    "@babel/helper-skip-transparent-expression-wrappers/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
-
-    "@babel/helper-wrap-function/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
-
-    "@babel/helpers/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
-
-    "@babel/plugin-transform-class-properties/@babel/helper-create-class-features-plugin": ["@babel/helper-create-class-features-plugin@7.27.1", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.27.1", "@babel/helper-member-expression-to-functions": "^7.27.1", "@babel/helper-optimise-call-expression": "^7.27.1", "@babel/helper-replace-supers": "^7.27.1", "@babel/helper-skip-transparent-expression-wrappers": "^7.27.1", "@babel/traverse": "^7.27.1", "semver": "^6.3.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-QwGAmuvM17btKU5VqXfb+Giw4JcN0hjuufz3DYnpeVDvZLAObloM77bhMXiqry3Iio+Ai4phVRDwl6WU10+r5A=="],
-
-    "@babel/plugin-transform-class-static-block/@babel/helper-create-class-features-plugin": ["@babel/helper-create-class-features-plugin@7.27.1", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.27.1", "@babel/helper-member-expression-to-functions": "^7.27.1", "@babel/helper-optimise-call-expression": "^7.27.1", "@babel/helper-replace-supers": "^7.27.1", "@babel/helper-skip-transparent-expression-wrappers": "^7.27.1", "@babel/traverse": "^7.27.1", "semver": "^6.3.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-QwGAmuvM17btKU5VqXfb+Giw4JcN0hjuufz3DYnpeVDvZLAObloM77bhMXiqry3Iio+Ai4phVRDwl6WU10+r5A=="],
-
-    "@babel/plugin-transform-classes/@babel/helper-annotate-as-pure": ["@babel/helper-annotate-as-pure@7.27.1", "", { "dependencies": { "@babel/types": "^7.27.1" } }, "sha512-WnuuDILl9oOBbKnb4L+DyODx7iC47XfzmNCpTttFsSp6hTG7XZxu60+4IO+2/hPfcGOoKbFiwoI/+zwARbNQow=="],
-
-    "@babel/plugin-transform-modules-systemjs/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
-
-    "@babel/plugin-transform-private-methods/@babel/helper-create-class-features-plugin": ["@babel/helper-create-class-features-plugin@7.27.1", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.27.1", "@babel/helper-member-expression-to-functions": "^7.27.1", "@babel/helper-optimise-call-expression": "^7.27.1", "@babel/helper-replace-supers": "^7.27.1", "@babel/helper-skip-transparent-expression-wrappers": "^7.27.1", "@babel/traverse": "^7.27.1", "semver": "^6.3.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-QwGAmuvM17btKU5VqXfb+Giw4JcN0hjuufz3DYnpeVDvZLAObloM77bhMXiqry3Iio+Ai4phVRDwl6WU10+r5A=="],
+    "@babel/helper-member-expression-to-functions/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "@babel/plugin-transform-private-property-in-object/@babel/helper-annotate-as-pure": ["@babel/helper-annotate-as-pure@7.27.1", "", { "dependencies": { "@babel/types": "^7.27.1" } }, "sha512-WnuuDILl9oOBbKnb4L+DyODx7iC47XfzmNCpTttFsSp6hTG7XZxu60+4IO+2/hPfcGOoKbFiwoI/+zwARbNQow=="],
+    "@babel/helper-module-imports/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "@babel/plugin-transform-private-property-in-object/@babel/helper-create-class-features-plugin": ["@babel/helper-create-class-features-plugin@7.27.1", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^7.27.1", "@babel/helper-member-expression-to-functions": "^7.27.1", "@babel/helper-optimise-call-expression": "^7.27.1", "@babel/helper-replace-supers": "^7.27.1", "@babel/helper-skip-transparent-expression-wrappers": "^7.27.1", "@babel/traverse": "^7.27.1", "semver": "^6.3.1" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-QwGAmuvM17btKU5VqXfb+Giw4JcN0hjuufz3DYnpeVDvZLAObloM77bhMXiqry3Iio+Ai4phVRDwl6WU10+r5A=="],
+    "@babel/helper-module-transforms/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@babel/preset-env/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
+    "@babel/helper-optimise-call-expression/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "@babel/preset-modules/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "@babel/helper-skip-transparent-expression-wrappers/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "@babel/template/@babel/parser": ["@babel/parser@7.27.2", "", { "dependencies": { "@babel/types": "^7.27.1" }, "bin": "./bin/babel-parser.js" }, "sha512-QYLs8299NA7WM/bZAdp+CviYYkVoYXlDW2rzliy3chxd1PQjej7JORuMJDJXJUb9g0TT+B99EwaVLKmX+sPXWw=="],
+    "@babel/helpers/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "@babel/template/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "@babel/parser/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "@babel/traverse/@babel/generator": ["@babel/generator@7.27.1", "", { "dependencies": { "@babel/parser": "^7.27.1", "@babel/types": "^7.27.1", "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.25", "jsesc": "^3.0.2" } }, "sha512-UnJfnIpc/+JO0/+KRVQNGU+y5taA5vCbwN8+azkX6beii/ZF+enZJSOKo11ZSzGJjlNfJHfQtmQT8H+9TXPG2w=="],
+    "@babel/template/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "@babel/traverse/@babel/parser": ["@babel/parser@7.27.2", "", { "dependencies": { "@babel/types": "^7.27.1" }, "bin": "./bin/babel-parser.js" }, "sha512-QYLs8299NA7WM/bZAdp+CviYYkVoYXlDW2rzliy3chxd1PQjej7JORuMJDJXJUb9g0TT+B99EwaVLKmX+sPXWw=="],
+    "@babel/traverse/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "@babel/traverse/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "@dxup/nuxt/@nuxt/kit": ["@nuxt/kit@4.6.2", "", { "dependencies": { "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "errx": "^0.2.2", "exsolve": "^1.1.3", "ignore": "^7.0.12", "klona": "^2.0.6", "microdiff": "^1.6.0", "nostics": "^1.3.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "rc9": "^3.1.0", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyexec": "^1.3.1", "tinyglobby": "^0.2.17", "unctx": "^3.0.1", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/schema": "^3.0.0 || ^4.0.0 || ^5.0.0-0", "confbox": ">=0.1.0", "dotenv": "*", "giget": ">=3.1.0", "jiti": "^2.0.0", "mlly": "^1.2.0", "oxc-parser": ">=0.56.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@nuxt/schema", "confbox", "dotenv", "giget", "jiti", "mlly", "oxc-parser", "rolldown"] }, "sha512-Vn9DJobc30WdR1vrlRcEAFSFy7NV5CWq3o6gxsfrdGb2FmCh0fuDyvbZC30rm2enyiPaOUPafKctFE/ToBjybw=="],
 
-    "@cloudflare/kv-asset-handler/mime": ["mime@3.0.0", "", { "bin": { "mime": "cli.js" } }, "sha512-jSCU7/VB1loIWBZe14aEYHU/+1UMEHoaO7qxCOVJOw9GgH72VAWppxNcjU+x9a2k3GSIBXNKxXQFqRvvZ7vr3A=="],
+    "@esbuild-kit/core-utils/esbuild": ["esbuild@0.18.20", "", { "optionalDependencies": { "@esbuild/android-arm": "0.18.20", "@esbuild/android-arm64": "0.18.20", "@esbuild/android-x64": "0.18.20", "@esbuild/darwin-arm64": "0.18.20", "@esbuild/darwin-x64": "0.18.20", "@esbuild/freebsd-arm64": "0.18.20", "@esbuild/freebsd-x64": "0.18.20", "@esbuild/linux-arm": "0.18.20", "@esbuild/linux-arm64": "0.18.20", "@esbuild/linux-ia32": "0.18.20", "@esbuild/linux-loong64": "0.18.20", "@esbuild/linux-mips64el": "0.18.20", "@esbuild/linux-ppc64": "0.18.20", "@esbuild/linux-riscv64": "0.18.20", "@esbuild/linux-s390x": "0.18.20", "@esbuild/linux-x64": "0.18.20", "@esbuild/netbsd-x64": "0.18.20", "@esbuild/openbsd-x64": "0.18.20", "@esbuild/sunos-x64": "0.18.20", "@esbuild/win32-arm64": "0.18.20", "@esbuild/win32-ia32": "0.18.20", "@esbuild/win32-x64": "0.18.20" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-ceqxoedUrcayh7Y7ZX6NdbbDzGROiyVBgC4PriJThBKSVPWnnFHZAkfI1lJT8QFkOwH4qOS2SJkS4wvpGl8BpA=="],
 
-    "@dxup/nuxt/@nuxt/kit": ["@nuxt/kit@4.2.1", "", { "dependencies": { "c12": "^3.3.1", "consola": "^3.4.2", "defu": "^6.1.4", "destr": "^2.0.5", "errx": "^0.1.0", "exsolve": "^1.0.7", "ignore": "^7.0.5", "jiti": "^2.6.1", "klona": "^2.0.6", "mlly": "^1.8.0", "ohash": "^2.0.11", "pathe": "^2.0.3", "pkg-types": "^2.3.0", "rc9": "^2.1.2", "scule": "^1.3.0", "semver": "^7.7.3", "tinyglobby": "^0.2.15", "ufo": "^1.6.1", "unctx": "^2.4.1", "untyped": "^2.0.0" } }, "sha512-lLt8KLHyl7IClc3RqRpRikz15eCfTRlAWL9leVzPyg5N87FfKE/7EWgWvpiL/z4Tf3dQCIqQb88TmHE0JTIDvA=="],
+    "@hey-api/codegen-core/c12": ["c12@3.3.4", "", { "dependencies": { "chokidar": "^5.0.0", "confbox": "^0.2.4", "defu": "^6.1.6", "dotenv": "^17.3.1", "exsolve": "^1.0.8", "giget": "^3.2.0", "jiti": "^2.6.1", "ohash": "^2.0.11", "pathe": "^2.0.3", "perfect-debounce": "^2.1.0", "pkg-types": "^2.3.0", "rc9": "^3.0.1" }, "peerDependencies": { "magicast": "*" }, "optionalPeers": ["magicast"] }, "sha512-cM0ApFQSBXuourJejzwv/AuPRvAxordTyParRVcHjjtXirtkzM0uK2L9TTn9s0cXZbG7E55jCivRQzoxYmRAlA=="],
 
-    "@dxup/nuxt/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@hey-api/shared/semver": ["semver@7.8.4", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-rUCObTnP32Q08R2uuIrt7r9PlEonuTmtuXYcW6s5kjdlj3xbnwe+21yXptAUYcMAABLkYYTtnmzb3w3EDZfueA=="],
 
     "@isaacs/cliui/string-width": ["string-width@5.1.2", "", { "dependencies": { "eastasianwidth": "^0.2.0", "emoji-regex": "^9.2.2", "strip-ansi": "^7.0.1" } }, "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA=="],
 
-    "@isaacs/cliui/strip-ansi": ["strip-ansi@7.1.0", "", { "dependencies": { "ansi-regex": "^6.0.1" } }, "sha512-iq6eVVI64nQQTRYq2KtEg2d2uU7LElhTJwsH4YzIHZshxlgZms/wIc4VoDQTlG/IvVIrBKG06CrZnp0qv7hkcQ=="],
-
     "@isaacs/cliui/wrap-ansi": ["wrap-ansi@8.1.0", "", { "dependencies": { "ansi-styles": "^6.1.0", "string-width": "^5.0.1", "strip-ansi": "^7.0.1" } }, "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ=="],
 
-    "@jridgewell/source-map/@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.3.8", "", { "dependencies": { "@jridgewell/set-array": "^1.2.1", "@jridgewell/sourcemap-codec": "^1.4.10", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-imAbBGkb+ebQyxKgzv5Hu2nmROxoDOXHh80evxdoXNOrvAnVx7zimzc1Oo5h9RlfV4vPXaE2iM5pOFbvOCClWA=="],
-
-    "@jridgewell/source-map/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
-
-    "@libsql/isomorphic-ws/ws": ["ws@8.18.2", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": ">=5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-DMricUmwGZUVr++AEAe2uiVM7UoO9MAVZMDu05UQOaUII0lp+zOzLLU4Xqh/JvTqklB1T4uELaaPBKyjE1r4fQ=="],
+    "@isaacs/fs-minipass/minipass": ["minipass@7.1.3", "", {}, "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A=="],
 
-    "@mapbox/node-pre-gyp/detect-libc": ["detect-libc@2.0.4", "", {}, "sha512-3UDv+G9CsCKO1WKMGw9fwq/SWJYbI0c5Y7LU1AXYoDdbhE2AHQ6N6Nb34sG8Fj7T5APy8qXDCKuuIHd1BR0tVA=="],
+    "@mapbox/node-pre-gyp/detect-libc": ["detect-libc@2.1.2", "", {}, "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ=="],
 
-    "@mapbox/node-pre-gyp/node-fetch": ["node-fetch@2.7.0", "", { "dependencies": { "whatwg-url": "^5.0.0" }, "peerDependencies": { "encoding": "^0.1.0" }, "optionalPeers": ["encoding"] }, "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A=="],
+    "@mapbox/node-pre-gyp/tar": ["tar@7.5.22", "", { "dependencies": { "@isaacs/fs-minipass": "^4.0.0", "chownr": "^3.0.0", "minipass": "^7.1.2", "minizlib": "^3.1.0", "yallist": "^5.0.0" } }, "sha512-MFO/QzvtAOmJbkhOaCTvbGcFN9L9b+JunIsDwaKljSOdcLMea3NJ1k9Usz/rjdfSXTq4dfzfeS7W4p4YOAAHeA=="],
 
-    "@mapbox/node-pre-gyp/semver": ["semver@7.7.2", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA=="],
+    "@nuxt/cli/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@nuxt/cli/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@nuxt/cli/obug": ["obug@3.0.0", "", {}, "sha512-5vvB5+W7ePv+p3uqxi+RcW1XAzLW0/hxt3/4X4Lc4qHudzOhmBiBwOY6DRob4WnanAEGvNcLjF+KNOufrUoEQw=="],
 
-    "@nuxt/devtools/@nuxt/kit": ["@nuxt/kit@4.2.1", "", { "dependencies": { "c12": "^3.3.1", "consola": "^3.4.2", "defu": "^6.1.4", "destr": "^2.0.5", "errx": "^0.1.0", "exsolve": "^1.0.7", "ignore": "^7.0.5", "jiti": "^2.6.1", "klona": "^2.0.6", "mlly": "^1.8.0", "ohash": "^2.0.11", "pathe": "^2.0.3", "pkg-types": "^2.3.0", "rc9": "^2.1.2", "scule": "^1.3.0", "semver": "^7.7.3", "tinyglobby": "^0.2.15", "ufo": "^1.6.1", "unctx": "^2.4.1", "untyped": "^2.0.0" } }, "sha512-lLt8KLHyl7IClc3RqRpRikz15eCfTRlAWL9leVzPyg5N87FfKE/7EWgWvpiL/z4Tf3dQCIqQb88TmHE0JTIDvA=="],
+    "@nuxt/devtools/@nuxt/kit": ["@nuxt/kit@4.6.2", "", { "dependencies": { "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "errx": "^0.2.2", "exsolve": "^1.1.3", "ignore": "^7.0.12", "klona": "^2.0.6", "microdiff": "^1.6.0", "nostics": "^1.3.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "rc9": "^3.1.0", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyexec": "^1.3.1", "tinyglobby": "^0.2.17", "unctx": "^3.0.1", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/schema": "^3.0.0 || ^4.0.0 || ^5.0.0-0", "confbox": ">=0.1.0", "dotenv": "*", "giget": ">=3.1.0", "jiti": "^2.0.0", "mlly": "^1.2.0", "oxc-parser": ">=0.56.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@nuxt/schema", "confbox", "dotenv", "giget", "jiti", "mlly", "oxc-parser", "rolldown"] }, "sha512-Vn9DJobc30WdR1vrlRcEAFSFy7NV5CWq3o6gxsfrdGb2FmCh0fuDyvbZC30rm2enyiPaOUPafKctFE/ToBjybw=="],
 
-    "@nuxt/devtools/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@nuxt/devtools-kit/@nuxt/kit": ["@nuxt/kit@4.6.2", "", { "dependencies": { "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "errx": "^0.2.2", "exsolve": "^1.1.3", "ignore": "^7.0.12", "klona": "^2.0.6", "microdiff": "^1.6.0", "nostics": "^1.3.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "rc9": "^3.1.0", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyexec": "^1.3.1", "tinyglobby": "^0.2.17", "unctx": "^3.0.1", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/schema": "^3.0.0 || ^4.0.0 || ^5.0.0-0", "confbox": ">=0.1.0", "dotenv": "*", "giget": ">=3.1.0", "jiti": "^2.0.0", "mlly": "^1.2.0", "oxc-parser": ">=0.56.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@nuxt/schema", "confbox", "dotenv", "giget", "jiti", "mlly", "oxc-parser", "rolldown"] }, "sha512-Vn9DJobc30WdR1vrlRcEAFSFy7NV5CWq3o6gxsfrdGb2FmCh0fuDyvbZC30rm2enyiPaOUPafKctFE/ToBjybw=="],
 
-    "@nuxt/devtools-kit/@nuxt/kit": ["@nuxt/kit@4.2.1", "", { "dependencies": { "c12": "^3.3.1", "consola": "^3.4.2", "defu": "^6.1.4", "destr": "^2.0.5", "errx": "^0.1.0", "exsolve": "^1.0.7", "ignore": "^7.0.5", "jiti": "^2.6.1", "klona": "^2.0.6", "mlly": "^1.8.0", "ohash": "^2.0.11", "pathe": "^2.0.3", "pkg-types": "^2.3.0", "rc9": "^2.1.2", "scule": "^1.3.0", "semver": "^7.7.3", "tinyglobby": "^0.2.15", "ufo": "^1.6.1", "unctx": "^2.4.1", "untyped": "^2.0.0" } }, "sha512-lLt8KLHyl7IClc3RqRpRikz15eCfTRlAWL9leVzPyg5N87FfKE/7EWgWvpiL/z4Tf3dQCIqQb88TmHE0JTIDvA=="],
+    "@nuxt/fonts/@nuxt/kit": ["@nuxt/kit@4.6.2", "", { "dependencies": { "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "errx": "^0.2.2", "exsolve": "^1.1.3", "ignore": "^7.0.12", "klona": "^2.0.6", "microdiff": "^1.6.0", "nostics": "^1.3.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "rc9": "^3.1.0", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyexec": "^1.3.1", "tinyglobby": "^0.2.17", "unctx": "^3.0.1", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/schema": "^3.0.0 || ^4.0.0 || ^5.0.0-0", "confbox": ">=0.1.0", "dotenv": "*", "giget": ">=3.1.0", "jiti": "^2.0.0", "mlly": "^1.2.0", "oxc-parser": ">=0.56.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@nuxt/schema", "confbox", "dotenv", "giget", "jiti", "mlly", "oxc-parser", "rolldown"] }, "sha512-Vn9DJobc30WdR1vrlRcEAFSFy7NV5CWq3o6gxsfrdGb2FmCh0fuDyvbZC30rm2enyiPaOUPafKctFE/ToBjybw=="],
 
-    "@nuxt/devtools-wizard/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@nuxt/fonts/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@nuxt/kit/c12": ["c12@3.0.3", "", { "dependencies": { "chokidar": "^4.0.3", "confbox": "^0.2.2", "defu": "^6.1.4", "dotenv": "^16.4.7", "exsolve": "^1.0.4", "giget": "^2.0.0", "jiti": "^2.4.2", "ohash": "^2.0.11", "pathe": "^2.0.3", "perfect-debounce": "^1.0.0", "pkg-types": "^2.1.0", "rc9": "^2.1.2" }, "peerDependencies": { "magicast": "^0.3.5" }, "optionalPeers": ["magicast"] }, "sha512-uC3MacKBb0Z15o5QWCHvHWj5Zv34pGQj9P+iXKSpTuSGFS0KKhUWf4t9AJ+gWjYOdmWCPEGpEzm8sS0iqbpo1w=="],
+    "@nuxt/icon/@nuxt/kit": ["@nuxt/kit@4.6.2", "", { "dependencies": { "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "errx": "^0.2.2", "exsolve": "^1.1.3", "ignore": "^7.0.12", "klona": "^2.0.6", "microdiff": "^1.6.0", "nostics": "^1.3.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "rc9": "^3.1.0", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyexec": "^1.3.1", "tinyglobby": "^0.2.17", "unctx": "^3.0.1", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/schema": "^3.0.0 || ^4.0.0 || ^5.0.0-0", "confbox": ">=0.1.0", "dotenv": "*", "giget": ">=3.1.0", "jiti": "^2.0.0", "mlly": "^1.2.0", "oxc-parser": ">=0.56.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@nuxt/schema", "confbox", "dotenv", "giget", "jiti", "mlly", "oxc-parser", "rolldown"] }, "sha512-Vn9DJobc30WdR1vrlRcEAFSFy7NV5CWq3o6gxsfrdGb2FmCh0fuDyvbZC30rm2enyiPaOUPafKctFE/ToBjybw=="],
 
-    "@nuxt/kit/exsolve": ["exsolve@1.0.5", "", {}, "sha512-pz5dvkYYKQ1AHVrgOzBKWeP4u4FRb3a6DNK2ucr0OoNwYIU4QWsJ+NM36LLzORT+z845MzKHHhpXiUF5nvQoJg=="],
+    "@nuxt/icon/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "@nuxt/kit/ignore": ["ignore@7.0.4", "", {}, "sha512-gJzzk+PQNznz8ysRrC0aOkBNVRBDtE1n53IqyqEf3PXrYwomFs5q4pGMizBMJF+ykh03insJ27hB8gSrD2Hn8A=="],
+    "@nuxt/kit/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@nuxt/kit/jiti": ["jiti@2.4.2", "", { "bin": { "jiti": "lib/jiti-cli.mjs" } }, "sha512-rg9zJN+G4n2nfJl5MW3BMygZX56zKPNVEYYqq7adpmMh4Jn2QNEwhvQlFy6jPVdcod7txZtKHWnyZiA3a0zP7A=="],
+    "@nuxt/kit/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "@nuxt/kit/mlly": ["mlly@1.7.4", "", { "dependencies": { "acorn": "^8.14.0", "pathe": "^2.0.1", "pkg-types": "^1.3.0", "ufo": "^1.5.4" } }, "sha512-qmdSIPC4bDJXgZTCR7XosJiNKySV7O215tsPtDN9iEO/7q/76b/ijtgRu/+epFXSJhijtTCCGp3DWS549P3xKw=="],
+    "@nuxt/kit/ohash": ["ohash@1.1.6", "", {}, "sha512-TBu7PtV8YkAZn0tSxobKY2n2aAQva936lhRrj6957aDaCf9IEtqsKbgMzXE/F/sjqYOwmrukeORHNLe5glk7Cg=="],
 
-    "@nuxt/kit/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@nuxt/kit/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "@nuxt/kit/pkg-types": ["pkg-types@2.1.0", "", { "dependencies": { "confbox": "^0.2.1", "exsolve": "^1.0.1", "pathe": "^2.0.3" } }, "sha512-wmJwA+8ihJixSoHKxZJRBQG1oY8Yr9pGLzRmSsNms0iNWyHHAlZCa7mmKiFR10YPZuz/2k169JiS/inOjBCZ2A=="],
+    "@nuxt/kit/std-env": ["std-env@3.10.0", "", {}, "sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg=="],
 
-    "@nuxt/kit/semver": ["semver@7.7.2", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA=="],
+    "@nuxt/kit/unctx": ["unctx@2.5.0", "", { "dependencies": { "acorn": "^8.15.0", "estree-walker": "^3.0.3", "magic-string": "^0.30.21", "unplugin": "^2.3.11" } }, "sha512-p+Rz9x0R7X+CYDkT+Xg8/GhpcShTlU8n+cf9OtOEf7zEQsNcCZO1dPKNRDqvUTaq+P32PMMkxWHwfrxkqfqAYg=="],
 
-    "@nuxt/kit/std-env": ["std-env@3.9.0", "", {}, "sha512-UGvjygr6F6tpH7o2qyqR6QYpwraIjKSdtzyBdyytFOHmPZY917kwdwLG0RbOjWOnKmnm3PeHjaoLLMie7kPLQw=="],
+    "@nuxt/kit/unimport": ["unimport@4.2.0", "", { "dependencies": { "acorn": "^8.14.1", "escape-string-regexp": "^5.0.0", "estree-walker": "^3.0.3", "local-pkg": "^1.1.1", "magic-string": "^0.30.17", "mlly": "^1.7.4", "pathe": "^2.0.3", "picomatch": "^4.0.2", "pkg-types": "^2.1.0", "scule": "^1.3.0", "strip-literal": "^3.0.0", "tinyglobby": "^0.2.12", "unplugin": "^2.2.2", "unplugin-utils": "^0.2.4" } }, "sha512-mYVtA0nmzrysnYnyb3ALMbByJ+Maosee2+WyE0puXl+Xm2bUwPorPaaeZt0ETfuroPOtG8jj1g/qeFZ6buFnag=="],
 
-    "@nuxt/kit/tinyglobby": ["tinyglobby@0.2.13", "", { "dependencies": { "fdir": "^6.4.4", "picomatch": "^4.0.2" } }, "sha512-mEwzpUgrLySlveBwEVDMKk5B57bhLPYovRfPAXD5gA/98Opn0rCDj3GtLwFvCvH5RK9uPCExUROW5NjDwvqkxw=="],
+    "@nuxt/kit/untyped": ["untyped@1.5.2", "", { "dependencies": { "@babel/core": "^7.26.0", "@babel/standalone": "^7.26.4", "@babel/types": "^7.26.3", "citty": "^0.1.6", "defu": "^6.1.4", "jiti": "^2.4.1", "knitwork": "^1.2.0", "scule": "^1.3.0" }, "bin": { "untyped": "dist/cli.mjs" } }, "sha512-eL/8PlhLcMmlMDtNPKhyyz9kEBDS3Uk4yMu/ewlkT2WFbtzScjHWPJLdQLmaGPUKjXzwe9MumOtOgc4Fro96Kg=="],
 
-    "@nuxt/kit/unimport": ["unimport@5.0.1", "", { "dependencies": { "acorn": "^8.14.1", "escape-string-regexp": "^5.0.0", "estree-walker": "^3.0.3", "local-pkg": "^1.1.1", "magic-string": "^0.30.17", "mlly": "^1.7.4", "pathe": "^2.0.3", "picomatch": "^4.0.2", "pkg-types": "^2.1.0", "scule": "^1.3.0", "strip-literal": "^3.0.0", "tinyglobby": "^0.2.13", "unplugin": "^2.3.2", "unplugin-utils": "^0.2.4" } }, "sha512-1YWzPj6wYhtwHE+9LxRlyqP4DiRrhGfJxdtH475im8ktyZXO3jHj/3PZ97zDdvkYoovFdi0K4SKl3a7l92v3sQ=="],
+    "@nuxt/nitro-server/@nuxt/kit": ["@nuxt/kit@4.6.2", "", { "dependencies": { "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "errx": "^0.2.2", "exsolve": "^1.1.3", "ignore": "^7.0.12", "klona": "^2.0.6", "microdiff": "^1.6.0", "nostics": "^1.3.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "rc9": "^3.1.0", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyexec": "^1.3.1", "tinyglobby": "^0.2.17", "unctx": "^3.0.1", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/schema": "^3.0.0 || ^4.0.0 || ^5.0.0-0", "confbox": ">=0.1.0", "dotenv": "*", "giget": ">=3.1.0", "jiti": "^2.0.0", "mlly": "^1.2.0", "oxc-parser": ">=0.56.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@nuxt/schema", "confbox", "dotenv", "giget", "jiti", "mlly", "oxc-parser", "rolldown"] }, "sha512-Vn9DJobc30WdR1vrlRcEAFSFy7NV5CWq3o6gxsfrdGb2FmCh0fuDyvbZC30rm2enyiPaOUPafKctFE/ToBjybw=="],
 
-    "@nuxt/nitro-server/@nuxt/kit": ["@nuxt/kit@3.20.1", "", { "dependencies": { "c12": "^3.3.1", "consola": "^3.4.2", "defu": "^6.1.4", "destr": "^2.0.5", "errx": "^0.1.0", "exsolve": "^1.0.7", "ignore": "^7.0.5", "jiti": "^2.6.1", "klona": "^2.0.6", "knitwork": "^1.2.0", "mlly": "^1.8.0", "ohash": "^2.0.11", "pathe": "^2.0.3", "pkg-types": "^2.3.0", "rc9": "^2.1.2", "scule": "^1.3.0", "semver": "^7.7.3", "tinyglobby": "^0.2.15", "ufo": "^1.6.1", "unctx": "^2.4.1", "untyped": "^2.0.0" } }, "sha512-TIslaylfI5kd3AxX5qts0qyrIQ9Uq3HAA1bgIIJ+c+zpDfK338YS+YrCWxBBzDMECRCbAS58mqAd2MtJfG1ENA=="],
+    "@nuxt/nitro-server/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@nuxt/nitro-server/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@nuxt/schema/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@nuxt/schema/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@nuxt/ui/@nuxt/kit": ["@nuxt/kit@4.6.2", "", { "dependencies": { "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "errx": "^0.2.2", "exsolve": "^1.1.3", "ignore": "^7.0.12", "klona": "^2.0.6", "microdiff": "^1.6.0", "nostics": "^1.3.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "rc9": "^3.1.0", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyexec": "^1.3.1", "tinyglobby": "^0.2.17", "unctx": "^3.0.1", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/schema": "^3.0.0 || ^4.0.0 || ^5.0.0-0", "confbox": ">=0.1.0", "dotenv": "*", "giget": ">=3.1.0", "jiti": "^2.0.0", "mlly": "^1.2.0", "oxc-parser": ">=0.56.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@nuxt/schema", "confbox", "dotenv", "giget", "jiti", "mlly", "oxc-parser", "rolldown"] }, "sha512-Vn9DJobc30WdR1vrlRcEAFSFy7NV5CWq3o6gxsfrdGb2FmCh0fuDyvbZC30rm2enyiPaOUPafKctFE/ToBjybw=="],
 
-    "@nuxt/telemetry/ofetch": ["ofetch@1.4.1", "", { "dependencies": { "destr": "^2.0.3", "node-fetch-native": "^1.6.4", "ufo": "^1.5.4" } }, "sha512-QZj2DfGplQAr2oj9KzceK9Hwz6Whxazmn85yYeVuS3u9XTMOGMRx0kO95MQ+vLsj/S/NwBDMMLU5hpxvI6Tklw=="],
+    "@nuxt/ui/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@nuxt/telemetry/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@nuxt/ui/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "@nuxt/telemetry/std-env": ["std-env@3.9.0", "", {}, "sha512-UGvjygr6F6tpH7o2qyqR6QYpwraIjKSdtzyBdyytFOHmPZY917kwdwLG0RbOjWOnKmnm3PeHjaoLLMie7kPLQw=="],
+    "@nuxt/vite-builder/@nuxt/kit": ["@nuxt/kit@4.6.2", "", { "dependencies": { "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "errx": "^0.2.2", "exsolve": "^1.1.3", "ignore": "^7.0.12", "klona": "^2.0.6", "microdiff": "^1.6.0", "nostics": "^1.3.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "rc9": "^3.1.0", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyexec": "^1.3.1", "tinyglobby": "^0.2.17", "unctx": "^3.0.1", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/schema": "^3.0.0 || ^4.0.0 || ^5.0.0-0", "confbox": ">=0.1.0", "dotenv": "*", "giget": ">=3.1.0", "jiti": "^2.0.0", "mlly": "^1.2.0", "oxc-parser": ">=0.56.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@nuxt/schema", "confbox", "dotenv", "giget", "jiti", "mlly", "oxc-parser", "rolldown"] }, "sha512-Vn9DJobc30WdR1vrlRcEAFSFy7NV5CWq3o6gxsfrdGb2FmCh0fuDyvbZC30rm2enyiPaOUPafKctFE/ToBjybw=="],
 
-    "@nuxt/vite-builder/@nuxt/kit": ["@nuxt/kit@3.20.1", "", { "dependencies": { "c12": "^3.3.1", "consola": "^3.4.2", "defu": "^6.1.4", "destr": "^2.0.5", "errx": "^0.1.0", "exsolve": "^1.0.7", "ignore": "^7.0.5", "jiti": "^2.6.1", "klona": "^2.0.6", "knitwork": "^1.2.0", "mlly": "^1.8.0", "ohash": "^2.0.11", "pathe": "^2.0.3", "pkg-types": "^2.3.0", "rc9": "^2.1.2", "scule": "^1.3.0", "semver": "^7.7.3", "tinyglobby": "^0.2.15", "ufo": "^1.6.1", "unctx": "^2.4.1", "untyped": "^2.0.0" } }, "sha512-TIslaylfI5kd3AxX5qts0qyrIQ9Uq3HAA1bgIIJ+c+zpDfK338YS+YrCWxBBzDMECRCbAS58mqAd2MtJfG1ENA=="],
+    "@nuxt/vite-builder/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@nuxt/vite-builder/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@nuxt/vite-server/@nuxt/kit": ["@nuxt/kit@4.6.2", "", { "dependencies": { "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "errx": "^0.2.2", "exsolve": "^1.1.3", "ignore": "^7.0.12", "klona": "^2.0.6", "microdiff": "^1.6.0", "nostics": "^1.3.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "rc9": "^3.1.0", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyexec": "^1.3.1", "tinyglobby": "^0.2.17", "unctx": "^3.0.1", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/schema": "^3.0.0 || ^4.0.0 || ^5.0.0-0", "confbox": ">=0.1.0", "dotenv": "*", "giget": ">=3.1.0", "jiti": "^2.0.0", "mlly": "^1.2.0", "oxc-parser": ">=0.56.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@nuxt/schema", "confbox", "dotenv", "giget", "jiti", "mlly", "oxc-parser", "rolldown"] }, "sha512-Vn9DJobc30WdR1vrlRcEAFSFy7NV5CWq3o6gxsfrdGb2FmCh0fuDyvbZC30rm2enyiPaOUPafKctFE/ToBjybw=="],
 
-    "@nuxt/vite-builder/vite": ["vite@7.2.2", "", { "dependencies": { "esbuild": "^0.25.0", "fdir": "^6.5.0", "picomatch": "^4.0.3", "postcss": "^8.5.6", "rollup": "^4.43.0", "tinyglobby": "^0.2.15" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", "jiti": ">=1.21.0", "less": "^4.0.0", "lightningcss": "^1.21.0", "sass": "^1.70.0", "sass-embedded": "^1.70.0", "stylus": ">=0.54.8", "sugarss": "^5.0.0", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "jiti", "less", "lightningcss", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-BxAKBWmIbrDgrokdGZH1IgkIk/5mMHDreLDmCJ0qpyJaAteP8NvMhkwr/ZCQNqNH97bw/dANTE9PDzqwJghfMQ=="],
+    "@nuxt/vite-server/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@parcel/watcher/detect-libc": ["detect-libc@1.0.3", "", { "bin": { "detect-libc": "./bin/detect-libc.js" } }, "sha512-pGjwhsmsp4kL2RTz08wcOlGN83otlqHeD/Z5T8GXZB+/YcpQ/dgo+lbU8ZsGxV0HIvqqxo9l7mqYwyYMD9bKDg=="],
-
-    "@parcel/watcher/node-addon-api": ["node-addon-api@7.1.1", "", {}, "sha512-5m3bsyrjFWE1xf7nz7YXdN4udnVtXK6/Yfgn5qnahL6bCkf2yKt4k3nuTKAtT4r3IG8JNR2ncsIMdZuAzJjHQQ=="],
+    "@nuxtjs/color-mode/@nuxt/kit": ["@nuxt/kit@4.6.2", "", { "dependencies": { "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "errx": "^0.2.2", "exsolve": "^1.1.3", "ignore": "^7.0.12", "klona": "^2.0.6", "microdiff": "^1.6.0", "nostics": "^1.3.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "rc9": "^3.1.0", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyexec": "^1.3.1", "tinyglobby": "^0.2.17", "unctx": "^3.0.1", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/schema": "^3.0.0 || ^4.0.0 || ^5.0.0-0", "confbox": ">=0.1.0", "dotenv": "*", "giget": ">=3.1.0", "jiti": "^2.0.0", "mlly": "^1.2.0", "oxc-parser": ">=0.56.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@nuxt/schema", "confbox", "dotenv", "giget", "jiti", "mlly", "oxc-parser", "rolldown"] }, "sha512-Vn9DJobc30WdR1vrlRcEAFSFy7NV5CWq3o6gxsfrdGb2FmCh0fuDyvbZC30rm2enyiPaOUPafKctFE/ToBjybw=="],
 
     "@parcel/watcher-wasm/napi-wasm": ["napi-wasm@1.1.3", "", { "bundled": true }, "sha512-h/4nMGsHjZDCYmQVNODIrYACVJ+I9KItbG+0si6W/jSjdA9JbWDoU4LLeMXVcEQGHjttI2tuXqDrbGF7qkUHHg=="],
 
-    "@rollup/plugin-babel/@rollup/pluginutils": ["@rollup/pluginutils@3.1.0", "", { "dependencies": { "@types/estree": "0.0.39", "estree-walker": "^1.0.1", "picomatch": "^2.2.2" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0" } }, "sha512-GksZ6pr6TpIjHm8h9lSQ8pi8BE9VeubNT0OMJ3B5uZJ8pz73NPiqOtCog/x2/QzM1ENChPKxMDhiQuRHsqc+lg=="],
-
     "@rollup/plugin-commonjs/estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="],
 
-    "@rollup/plugin-inject/estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="],
-
-    "@rollup/plugin-inject/magic-string": ["magic-string@0.30.17", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.0" } }, "sha512-sNPKHvyjVf7gyjwS4xGTaW/mCnF8wnjtifKBEhxfZ7E/S8tQ0rssrwGNn6q8JH/ohItJfSQp9mBtQYuTlH5QnA=="],
-
-    "@rollup/pluginutils/estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="],
-
-    "@rollup/pluginutils/picomatch": ["picomatch@4.0.2", "", {}, "sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg=="],
-
-    "@surma/rollup-plugin-off-main-thread/magic-string": ["magic-string@0.25.9", "", { "dependencies": { "sourcemap-codec": "^1.4.8" } }, "sha512-RmF0AsMzgt25qzqqLc1+MbHmhdx0ojF2Fvs4XnOqz2ZOBXzzkEwc/dJQZCYHAn7v1jbVOjAZfK8msRn4BxO4VQ=="],
-
-    "@vercel/nft/acorn": ["acorn@8.14.1", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-OvQ/2pUDKmgfCg++xsTX1wGxfTaszcHVcTctW4UJB4hibJx2HXxxO5UmVgyjMa+ZDsiaf5wWLXYpRWMmBI0QHg=="],
-
-    "@vercel/nft/estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="],
-
-    "@vercel/nft/glob": ["glob@10.4.5", "", { "dependencies": { "foreground-child": "^3.1.0", "jackspeak": "^3.1.2", "minimatch": "^9.0.4", "minipass": "^7.1.2", "package-json-from-dist": "^1.0.0", "path-scurry": "^1.11.1" }, "bin": { "glob": "dist/esm/bin.mjs" } }, "sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg=="],
-
-    "@vitejs/plugin-vue-jsx/@babel/core": ["@babel/core@7.28.5", "", { "dependencies": { "@babel/code-frame": "^7.27.1", "@babel/generator": "^7.28.5", "@babel/helper-compilation-targets": "^7.27.2", "@babel/helper-module-transforms": "^7.28.3", "@babel/helpers": "^7.28.4", "@babel/parser": "^7.28.5", "@babel/template": "^7.27.2", "@babel/traverse": "^7.28.5", "@babel/types": "^7.28.5", "@jridgewell/remapping": "^2.3.5", "convert-source-map": "^2.0.0", "debug": "^4.1.0", "gensync": "^1.0.0-beta.2", "json5": "^2.2.3", "semver": "^6.3.1" } }, "sha512-e7jT4DxYvIDLk1ZHmU/m/mB19rex9sv0c2ftBtjSBv+kVM/902eh0fINUzD7UwLLNR+jU585GxUJ8/EBfAM5fw=="],
-
-    "@vitejs/plugin-vue-jsx/@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.0-beta.9-commit.d91dfb5", "", {}, "sha512-8sExkWRK+zVybw3+2/kBkYBFeLnEUWz1fT7BLHplpzmtqkOfTbAQ9gkt4pzwGIIZmg4Qn5US5ACjUBenrhezwQ=="],
-
-    "@vue-macros/common/unplugin-utils": ["unplugin-utils@0.3.1", "", { "dependencies": { "pathe": "^2.0.3", "picomatch": "^4.0.3" } }, "sha512-5lWVjgi6vuHhJ526bI4nlCOmkCIF3nnfXkCMDeMJrtdvxTs6ZFCM8oNufGTsDbKv/tJ/xj8RpvXjRuPBZJuJog=="],
-
-    "@vue/babel-plugin-jsx/@babel/traverse": ["@babel/traverse@7.28.5", "", { "dependencies": { "@babel/code-frame": "^7.27.1", "@babel/generator": "^7.28.5", "@babel/helper-globals": "^7.28.0", "@babel/parser": "^7.28.5", "@babel/template": "^7.27.2", "@babel/types": "^7.28.5", "debug": "^4.3.1" } }, "sha512-TCCj4t55U90khlYkVV/0TfkJkAkUg3jZFA3Neb7unZT8CPok7iiRfaX0F+WnqWqt7OxhOn0uBKXCw4lbL8W0aQ=="],
-
-    "@vue/compiler-core/estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="],
-
-    "@vue/compiler-sfc/estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="],
-
-    "@vue/devtools-core/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
-
-    "anymatch/picomatch": ["picomatch@2.3.1", "", {}, "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA=="],
-
-    "archiver-utils/glob": ["glob@10.4.5", "", { "dependencies": { "foreground-child": "^3.1.0", "jackspeak": "^3.1.2", "minimatch": "^9.0.4", "minipass": "^7.1.2", "package-json-from-dist": "^1.0.0", "path-scurry": "^1.11.1" }, "bin": { "glob": "dist/esm/bin.mjs" } }, "sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg=="],
-
-    "archiver-utils/is-stream": ["is-stream@2.0.1", "", {}, "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg=="],
-
-    "ast-kit/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
-
-    "babel-plugin-polyfill-corejs2/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
-
-    "c12/dotenv": ["dotenv@17.2.3", "", {}, "sha512-JVUnt+DUIzu87TABbhPmNfVdBDt18BLOWjMUFJMSi/Qqg7NTYtabbvSNJGOJ7afbRuv9D/lngizHtP7QyLQ+9w=="],
-
-    "c12/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
-
-    "chalk/supports-color": ["supports-color@7.2.0", "", { "dependencies": { "has-flag": "^4.0.0" } }, "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
-
-    "compress-commons/is-stream": ["is-stream@2.0.1", "", {}, "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg=="],
-
-    "cross-spawn/which": ["which@2.0.2", "", { "dependencies": { "isexe": "^2.0.0" }, "bin": { "node-which": "./bin/node-which" } }, "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA=="],
-
-    "cssnano-preset-default/browserslist": ["browserslist@4.28.0", "", { "dependencies": { "baseline-browser-mapping": "^2.8.25", "caniuse-lite": "^1.0.30001754", "electron-to-chromium": "^1.5.249", "node-releases": "^2.0.27", "update-browserslist-db": "^1.1.4" }, "bin": { "browserslist": "cli.js" } }, "sha512-tbydkR/CxfMwelN0vwdP/pLkDwyAASZ+VfWm4EOwlB6SWhx1sYnWLqo8N5j0rAzPfzfRaxt0mM/4wPU/Su84RQ=="],
+    "@rollup/plugin-commonjs/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "csso/css-tree": ["css-tree@2.2.1", "", { "dependencies": { "mdn-data": "2.0.28", "source-map-js": "^1.0.1" } }, "sha512-OA0mILzGc1kCOCSJerOeqDxDQ4HOh+G8NbOJFOTgOCzpw7fCBubk0fEyxp8AgOL/jvLgYA/uV0cMbe43ElF1JA=="],
-
-    "dot-prop/type-fest": ["type-fest@5.2.0", "", { "dependencies": { "tagged-tag": "^1.0.0" } }, "sha512-xxCJm+Bckc6kQBknN7i9fnP/xobQRsRQxR01CztFkp/h++yfVxUUcmMgfR2HttJx/dpWjS9ubVuyspJv24Q9DA=="],
-
-    "externality/mlly": ["mlly@1.7.4", "", { "dependencies": { "acorn": "^8.14.0", "pathe": "^2.0.1", "pkg-types": "^1.3.0", "ufo": "^1.5.4" } }, "sha512-qmdSIPC4bDJXgZTCR7XosJiNKySV7O215tsPtDN9iEO/7q/76b/ijtgRu/+epFXSJhijtTCCGp3DWS549P3xKw=="],
+    "@rollup/plugin-inject/estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="],
 
-    "filelist/minimatch": ["minimatch@5.1.6", "", { "dependencies": { "brace-expansion": "^2.0.1" } }, "sha512-lKwV/1brpG6mBUFHtb7NUmtABCb2WZZmm2wNiOA5hAb8VdCS4B3dtMWyvcoViccwAW/COERjXLt0zP1zXUN26g=="],
+    "@rollup/plugin-inject/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "giget/node-fetch-native": ["node-fetch-native@1.6.6", "", {}, "sha512-8Mc2HhqPdlIfedsuZoc3yioPuzp6b+L5jRCRY1QzuWZh2EGJVQrGppC6V6cF0bLdbW0+O2YpqCA25aF/1lvipQ=="],
+    "@rollup/plugin-replace/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "giget/nypm": ["nypm@0.6.0", "", { "dependencies": { "citty": "^0.1.6", "consola": "^3.4.0", "pathe": "^2.0.3", "pkg-types": "^2.0.0", "tinyexec": "^0.3.2" }, "bin": { "nypm": "dist/cli.mjs" } }, "sha512-mn8wBFV9G9+UFHIrq+pZ2r2zL4aPau/by3kJb3cM7+5tQHMt6HGQB8FDIeKFYp8o0D2pnH6nVsO88N4AmUxIWg=="],
+    "@rollup/pluginutils/estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="],
 
-    "giget/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@scalar/types/nanoid": ["nanoid@5.1.16", "", { "bin": { "nanoid": "bin/nanoid.js" } }, "sha512-kVrnsrJqMR8+oLJnGEmSWw9BivK5mt7H3FZatVRjrc5wGqFYuBxX1yG7+A7Gi5AefkX6t/oCkizcQgpu0cY1dQ=="],
 
-    "h3/cookie-es": ["cookie-es@1.2.2", "", {}, "sha512-+W7VmiVINB+ywl1HGXJXmrqkOhpKrIiVZV6tQuV54ZyQC7MMuBt81Vc336GMLoHBq5hV/F9eXgt5Mnx0Rha5Fg=="],
+    "@tailwindcss/node/lightningcss": ["lightningcss@1.32.0", "", { "dependencies": { "detect-libc": "^2.0.3" }, "optionalDependencies": { "lightningcss-android-arm64": "1.32.0", "lightningcss-darwin-arm64": "1.32.0", "lightningcss-darwin-x64": "1.32.0", "lightningcss-freebsd-x64": "1.32.0", "lightningcss-linux-arm-gnueabihf": "1.32.0", "lightningcss-linux-arm64-gnu": "1.32.0", "lightningcss-linux-arm64-musl": "1.32.0", "lightningcss-linux-x64-gnu": "1.32.0", "lightningcss-linux-x64-musl": "1.32.0", "lightningcss-win32-arm64-msvc": "1.32.0", "lightningcss-win32-x64-msvc": "1.32.0" } }, "sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ=="],
 
-    "impound/exsolve": ["exsolve@1.0.5", "", {}, "sha512-pz5dvkYYKQ1AHVrgOzBKWeP4u4FRb3a6DNK2ucr0OoNwYIU4QWsJ+NM36LLzORT+z845MzKHHhpXiUF5nvQoJg=="],
+    "@tailwindcss/node/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "impound/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@tailwindcss/oxide-wasm32-wasi/@emnapi/core": ["@emnapi/core@1.11.3", "", { "dependencies": { "@emnapi/wasi-threads": "1.2.3", "tslib": "^2.4.0" }, "bundled": true }, "sha512-zLpS5asjEb7lq8jYLq37N6XKaE41DIexlY1rF/z4/tIl3wo13Sqm28fRyfIsKZD+NZ8mM5RoKkpW/rBcuoSZSg=="],
 
-    "impound/unplugin": ["unplugin@2.3.3", "", { "dependencies": { "acorn": "^8.14.1", "picomatch": "^4.0.2", "webpack-virtual-modules": "^0.6.2" } }, "sha512-DN4DgiS13HFrAapoRmmoa9B35QzmQVRH2k58HelO28htXVNEEFZ8CGlZL0aRHXOXtz9McwY6lqaZjcc15uWMow=="],
+    "@tailwindcss/oxide-wasm32-wasi/@emnapi/runtime": ["@emnapi/runtime@1.11.3", "", { "dependencies": { "tslib": "^2.4.0" }, "bundled": true }, "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA=="],
 
-    "ioredis/debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+    "@tailwindcss/oxide-wasm32-wasi/@emnapi/wasi-threads": ["@emnapi/wasi-threads@1.2.3", "", { "dependencies": { "tslib": "^2.4.0" }, "bundled": true }, "sha512-ELEBe8PsLvvJ6QMr0zLt8ffvOHW/dc1m3CEzNMg7aJUv3bMaoDtw2TXyDAwkYBuroxxuHEwhRTLJSe5sya547g=="],
 
-    "lazystream/readable-stream": ["readable-stream@2.3.8", "", { "dependencies": { "core-util-is": "~1.0.0", "inherits": "~2.0.3", "isarray": "~1.0.0", "process-nextick-args": "~2.0.0", "safe-buffer": "~5.1.1", "string_decoder": "~1.1.1", "util-deprecate": "~1.0.1" } }, "sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA=="],
+    "@tailwindcss/oxide-wasm32-wasi/@napi-rs/wasm-runtime": ["@napi-rs/wasm-runtime@1.2.5", "", { "dependencies": { "@tybys/wasm-util": "^0.10.3" }, "peerDependencies": { "@emnapi/core": "^1.7.1 || ^2.0.0-alpha.4", "@emnapi/runtime": "^1.7.1 || ^2.0.0-alpha.4" }, "bundled": true }, "sha512-HshSvXzmBxNzqejd3k/KemgQ3hdREUYFRRrgxOZ+gPljDIsO2SDZrVZMd4Z/HsxudQbE62OVyVFE8z9BCurfjA=="],
 
-    "listhen/get-port-please": ["get-port-please@3.1.2", "", {}, "sha512-Gxc29eLs1fbn6LQ4jSU4vXjlwyZhF5HsGuMAa7gqBP4Rw4yxxltyDUuF5MBclFzDTXO+ACchGQoeela4DSfzdQ=="],
+    "@tailwindcss/oxide-wasm32-wasi/@tybys/wasm-util": ["@tybys/wasm-util@0.10.4", "", { "dependencies": { "tslib": "^2.4.0" }, "bundled": true }, "sha512-W3c4gRigFS0T/Ma4qIYF3GDAc5AQdHb1yL5znJT1Zv1YaD9Kitx656wBjvr19qbiosmZT8lWDM5BEMynUqX65A=="],
 
-    "listhen/h3": ["h3@1.15.3", "", { "dependencies": { "cookie-es": "^1.2.2", "crossws": "^0.3.4", "defu": "^6.1.4", "destr": "^2.0.5", "iron-webcrypto": "^1.2.1", "node-mock-http": "^1.0.0", "radix3": "^1.1.2", "ufo": "^1.6.1", "uncrypto": "^0.1.3" } }, "sha512-z6GknHqyX0h9aQaTx22VZDf6QyZn+0Nh+Ym8O/u0SGSkyF5cuTJYKlc8MkzW3Nzf9LE1ivcpmYC3FUGpywhuUQ=="],
+    "@tailwindcss/oxide-wasm32-wasi/tslib": ["tslib@2.8.1", "", { "bundled": true }, "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w=="],
 
-    "listhen/jiti": ["jiti@2.4.2", "", { "bin": { "jiti": "lib/jiti-cli.mjs" } }, "sha512-rg9zJN+G4n2nfJl5MW3BMygZX56zKPNVEYYqq7adpmMh4Jn2QNEwhvQlFy6jPVdcod7txZtKHWnyZiA3a0zP7A=="],
+    "@types/node/undici-types": ["undici-types@8.9.0", "", {}, "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg=="],
 
-    "listhen/mlly": ["mlly@1.7.4", "", { "dependencies": { "acorn": "^8.14.0", "pathe": "^2.0.1", "pkg-types": "^1.3.0", "ufo": "^1.5.4" } }, "sha512-qmdSIPC4bDJXgZTCR7XosJiNKySV7O215tsPtDN9iEO/7q/76b/ijtgRu/+epFXSJhijtTCCGp3DWS549P3xKw=="],
+    "@vercel/nft/estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="],
 
-    "listhen/std-env": ["std-env@3.9.0", "", {}, "sha512-UGvjygr6F6tpH7o2qyqR6QYpwraIjKSdtzyBdyytFOHmPZY917kwdwLG0RbOjWOnKmnm3PeHjaoLLMie7kPLQw=="],
+    "@vue/babel-plugin-jsx/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "micromatch/picomatch": ["picomatch@2.3.1", "", {}, "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA=="],
+    "@vue/compiler-core/estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="],
 
-    "mlly/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@vue/compiler-sfc/estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="],
 
-    "mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
+    "@vue/compiler-sfc/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "nitropack/@rollup/plugin-node-resolve": ["@rollup/plugin-node-resolve@16.0.3", "", { "dependencies": { "@rollup/pluginutils": "^5.0.1", "@types/resolve": "1.20.2", "deepmerge": "^4.2.2", "is-module": "^1.0.0", "resolve": "^1.22.1" }, "peerDependencies": { "rollup": "^2.78.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-lUYM3UBGuM93CnMPG1YocWu7X802BrNF3jW2zny5gQyLQgRFJhV1Sq0Zi74+dh/6NBx1DxFC4b4GXg9wUCG5Qg=="],
+    "@vue/devtools-kit/birpc": ["birpc@2.9.0", "", {}, "sha512-KrayHS5pBi69Xi9JmvoqrIgYGDkD6mcSe/i6YKi3w5kekCLzrX4+nawcXqrj2tIp50Kw/mT/s3p+GVK0A0sKxw=="],
 
-    "nitropack/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@vue/devtools-kit/hookable": ["hookable@5.5.3", "", {}, "sha512-Yc+BQe8SvoXH1643Qez1zqLRmbA5rCL+sSmk6TVos0LWVfNIB7PGncdlId77WzLGSIB5KaWgTaNTs2lNVEI6VQ=="],
 
-    "nitropack/pretty-bytes": ["pretty-bytes@7.1.0", "", {}, "sha512-nODzvTiYVRGRqAOvE84Vk5JDPyyxsVk0/fbA/bq7RqlnhksGpset09XTxbpvLTIjoaF7K8Z8DG8yHtKGTPSYRw=="],
+    "anymatch/picomatch": ["picomatch@2.3.2", "", {}, "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA=="],
 
-    "nitropack/rollup": ["rollup@4.53.2", "", { "dependencies": { "@types/estree": "1.0.8" }, "optionalDependencies": { "@rollup/rollup-android-arm-eabi": "4.53.2", "@rollup/rollup-android-arm64": "4.53.2", "@rollup/rollup-darwin-arm64": "4.53.2", "@rollup/rollup-darwin-x64": "4.53.2", "@rollup/rollup-freebsd-arm64": "4.53.2", "@rollup/rollup-freebsd-x64": "4.53.2", "@rollup/rollup-linux-arm-gnueabihf": "4.53.2", "@rollup/rollup-linux-arm-musleabihf": "4.53.2", "@rollup/rollup-linux-arm64-gnu": "4.53.2", "@rollup/rollup-linux-arm64-musl": "4.53.2", "@rollup/rollup-linux-loong64-gnu": "4.53.2", "@rollup/rollup-linux-ppc64-gnu": "4.53.2", "@rollup/rollup-linux-riscv64-gnu": "4.53.2", "@rollup/rollup-linux-riscv64-musl": "4.53.2", "@rollup/rollup-linux-s390x-gnu": "4.53.2", "@rollup/rollup-linux-x64-gnu": "4.53.2", "@rollup/rollup-linux-x64-musl": "4.53.2", "@rollup/rollup-openharmony-arm64": "4.53.2", "@rollup/rollup-win32-arm64-msvc": "4.53.2", "@rollup/rollup-win32-ia32-msvc": "4.53.2", "@rollup/rollup-win32-x64-gnu": "4.53.2", "@rollup/rollup-win32-x64-msvc": "4.53.2", "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-MHngMYwGJVi6Fmnk6ISmnk7JAHRNF0UkuucA0CUW3N3a4KnONPEZz+vUanQP/ZC/iY1Qkf3bwPWzyY84wEks1g=="],
+    "archiver-utils/glob": ["glob@10.5.0", "", { "dependencies": { "foreground-child": "^3.1.0", "jackspeak": "^3.1.2", "minimatch": "^9.0.4", "minipass": "^7.1.2", "package-json-from-dist": "^1.0.0", "path-scurry": "^1.11.1" }, "bin": { "glob": "dist/esm/bin.mjs" } }, "sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg=="],
 
-    "nitropack/source-map": ["source-map@0.7.6", "", {}, "sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ=="],
+    "archiver-utils/is-stream": ["is-stream@2.0.1", "", {}, "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg=="],
 
-    "nitropack/unplugin-utils": ["unplugin-utils@0.3.1", "", { "dependencies": { "pathe": "^2.0.3", "picomatch": "^4.0.3" } }, "sha512-5lWVjgi6vuHhJ526bI4nlCOmkCIF3nnfXkCMDeMJrtdvxTs6ZFCM8oNufGTsDbKv/tJ/xj8RpvXjRuPBZJuJog=="],
+    "ast-walker-scope/@babel/parser": ["@babel/parser@8.0.7", "", { "dependencies": { "@babel/types": "^8.0.6" }, "bin": "./bin/babel-parser.js" }, "sha512-UkDwEbPO1px2JQSrdh4qIgaH1JgG7GO/pFeJkpxhDxIETkT/QvGpnigXIw75ViHYPtIgKITmVUJqLjiO+JuWjA=="],
 
-    "npm-run-path/path-key": ["path-key@4.0.0", "", {}, "sha512-haREypq7xkM7ErfgIyA0z+Bj4AGKlMSdlQE2jvJo6huWD1EdkKYV+G/T4nq0YEF2vgTT8kqMFKo1uHn950r4SQ=="],
+    "ast-walker-scope/ast-kit": ["ast-kit@3.0.0", "", { "dependencies": { "@babel/parser": "^8.0.0", "estree-walker": "^3.0.3", "pathe": "^2.0.3" } }, "sha512-8OG92q3R35qjC/4i6BLBMg8IB+fClWu/1PEwg2Z9Rn+BuNaiEgJzpzn+pxWOdHJWDCAwu2JP0wCDTozAM4QirQ=="],
 
-    "nuxt/@nuxt/kit": ["@nuxt/kit@3.20.1", "", { "dependencies": { "c12": "^3.3.1", "consola": "^3.4.2", "defu": "^6.1.4", "destr": "^2.0.5", "errx": "^0.1.0", "exsolve": "^1.0.7", "ignore": "^7.0.5", "jiti": "^2.6.1", "klona": "^2.0.6", "knitwork": "^1.2.0", "mlly": "^1.8.0", "ohash": "^2.0.11", "pathe": "^2.0.3", "pkg-types": "^2.3.0", "rc9": "^2.1.2", "scule": "^1.3.0", "semver": "^7.7.3", "tinyglobby": "^0.2.15", "ufo": "^1.6.1", "unctx": "^2.4.1", "untyped": "^2.0.0" } }, "sha512-TIslaylfI5kd3AxX5qts0qyrIQ9Uq3HAA1bgIIJ+c+zpDfK338YS+YrCWxBBzDMECRCbAS58mqAd2MtJfG1ENA=="],
+    "c12/chokidar": ["chokidar@4.0.3", "", { "dependencies": { "readdirp": "^4.0.1" } }, "sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA=="],
 
-    "nuxt/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "c12/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "nypm/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "c12/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "pkg-types/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "c12/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "postcss/nanoid": ["nanoid@3.3.11", "", { "bin": { "nanoid": "bin/nanoid.cjs" } }, "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w=="],
+    "c12/perfect-debounce": ["perfect-debounce@1.0.0", "", {}, "sha512-xCy9V055GLEqoFaHoC1SoLIaLmWctgCUaBaWxDZ7/Zx4CTyX7cJQLJOok/orfjZAh9kEYpjJa4d0KcJmCbctZA=="],
 
-    "postcss-colormin/browserslist": ["browserslist@4.28.0", "", { "dependencies": { "baseline-browser-mapping": "^2.8.25", "caniuse-lite": "^1.0.30001754", "electron-to-chromium": "^1.5.249", "node-releases": "^2.0.27", "update-browserslist-db": "^1.1.4" }, "bin": { "browserslist": "cli.js" } }, "sha512-tbydkR/CxfMwelN0vwdP/pLkDwyAASZ+VfWm4EOwlB6SWhx1sYnWLqo8N5j0rAzPfzfRaxt0mM/4wPU/Su84RQ=="],
+    "c12/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "postcss-convert-values/browserslist": ["browserslist@4.28.0", "", { "dependencies": { "baseline-browser-mapping": "^2.8.25", "caniuse-lite": "^1.0.30001754", "electron-to-chromium": "^1.5.249", "node-releases": "^2.0.27", "update-browserslist-db": "^1.1.4" }, "bin": { "browserslist": "cli.js" } }, "sha512-tbydkR/CxfMwelN0vwdP/pLkDwyAASZ+VfWm4EOwlB6SWhx1sYnWLqo8N5j0rAzPfzfRaxt0mM/4wPU/Su84RQ=="],
+    "c12/rc9": ["rc9@2.1.2", "", { "dependencies": { "defu": "^6.1.4", "destr": "^2.0.3" } }, "sha512-btXCnMmRIBINM2LDZoEmOogIZU7Qe7zn4BpomSKZ/ykbLObuBdvG+mFq11DL6fjH1DRwHhrlgtYWG96bJiC7Cg=="],
 
-    "postcss-merge-rules/browserslist": ["browserslist@4.28.0", "", { "dependencies": { "baseline-browser-mapping": "^2.8.25", "caniuse-lite": "^1.0.30001754", "electron-to-chromium": "^1.5.249", "node-releases": "^2.0.27", "update-browserslist-db": "^1.1.4" }, "bin": { "browserslist": "cli.js" } }, "sha512-tbydkR/CxfMwelN0vwdP/pLkDwyAASZ+VfWm4EOwlB6SWhx1sYnWLqo8N5j0rAzPfzfRaxt0mM/4wPU/Su84RQ=="],
+    "cliui/string-width": ["string-width@7.2.0", "", { "dependencies": { "emoji-regex": "^10.3.0", "get-east-asian-width": "^1.0.0", "strip-ansi": "^7.1.0" } }, "sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ=="],
 
-    "postcss-minify-params/browserslist": ["browserslist@4.28.0", "", { "dependencies": { "baseline-browser-mapping": "^2.8.25", "caniuse-lite": "^1.0.30001754", "electron-to-chromium": "^1.5.249", "node-releases": "^2.0.27", "update-browserslist-db": "^1.1.4" }, "bin": { "browserslist": "cli.js" } }, "sha512-tbydkR/CxfMwelN0vwdP/pLkDwyAASZ+VfWm4EOwlB6SWhx1sYnWLqo8N5j0rAzPfzfRaxt0mM/4wPU/Su84RQ=="],
+    "compress-commons/is-stream": ["is-stream@2.0.1", "", {}, "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg=="],
 
-    "postcss-normalize-unicode/browserslist": ["browserslist@4.28.0", "", { "dependencies": { "baseline-browser-mapping": "^2.8.25", "caniuse-lite": "^1.0.30001754", "electron-to-chromium": "^1.5.249", "node-releases": "^2.0.27", "update-browserslist-db": "^1.1.4" }, "bin": { "browserslist": "cli.js" } }, "sha512-tbydkR/CxfMwelN0vwdP/pLkDwyAASZ+VfWm4EOwlB6SWhx1sYnWLqo8N5j0rAzPfzfRaxt0mM/4wPU/Su84RQ=="],
+    "cross-spawn/which": ["which@2.0.2", "", { "dependencies": { "isexe": "^2.0.0" }, "bin": { "node-which": "./bin/node-which" } }, "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA=="],
 
-    "postcss-reduce-initial/browserslist": ["browserslist@4.28.0", "", { "dependencies": { "baseline-browser-mapping": "^2.8.25", "caniuse-lite": "^1.0.30001754", "electron-to-chromium": "^1.5.249", "node-releases": "^2.0.27", "update-browserslist-db": "^1.1.4" }, "bin": { "browserslist": "cli.js" } }, "sha512-tbydkR/CxfMwelN0vwdP/pLkDwyAASZ+VfWm4EOwlB6SWhx1sYnWLqo8N5j0rAzPfzfRaxt0mM/4wPU/Su84RQ=="],
+    "fontaine/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "prompts/kleur": ["kleur@3.0.3", "", {}, "sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w=="],
+    "fontaine/unplugin": ["unplugin@2.3.11", "", { "dependencies": { "@jridgewell/remapping": "^2.3.5", "acorn": "^8.15.0", "picomatch": "^4.0.3", "webpack-virtual-modules": "^0.6.2" } }, "sha512-5uKD0nqiYVzlmCRs01Fhs2BdkEgBS3SAVP6ndrBsuK42iC2+JHyxM05Rm9G8+5mkmRtzMZGY8Ct5+mliZxU/Ww=="],
 
-    "readdir-glob/minimatch": ["minimatch@5.1.6", "", { "dependencies": { "brace-expansion": "^2.0.1" } }, "sha512-lKwV/1brpG6mBUFHtb7NUmtABCb2WZZmm2wNiOA5hAb8VdCS4B3dtMWyvcoViccwAW/COERjXLt0zP1zXUN26g=="],
+    "fontless/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "regjsparser/jsesc": ["jsesc@3.0.2", "", { "bin": { "jsesc": "bin/jsesc" } }, "sha512-xKqzzWXDttJuOcawBt4KnKHHIf5oQ/Cxax+0PWFG+DFDgHNAdi+TXECADI+RYiFUMmx8792xsMbbgXj4CwnP4g=="],
+    "fontless/esbuild": ["esbuild@0.27.7", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.27.7", "@esbuild/android-arm": "0.27.7", "@esbuild/android-arm64": "0.27.7", "@esbuild/android-x64": "0.27.7", "@esbuild/darwin-arm64": "0.27.7", "@esbuild/darwin-x64": "0.27.7", "@esbuild/freebsd-arm64": "0.27.7", "@esbuild/freebsd-x64": "0.27.7", "@esbuild/linux-arm": "0.27.7", "@esbuild/linux-arm64": "0.27.7", "@esbuild/linux-ia32": "0.27.7", "@esbuild/linux-loong64": "0.27.7", "@esbuild/linux-mips64el": "0.27.7", "@esbuild/linux-ppc64": "0.27.7", "@esbuild/linux-riscv64": "0.27.7", "@esbuild/linux-s390x": "0.27.7", "@esbuild/linux-x64": "0.27.7", "@esbuild/netbsd-arm64": "0.27.7", "@esbuild/netbsd-x64": "0.27.7", "@esbuild/openbsd-arm64": "0.27.7", "@esbuild/openbsd-x64": "0.27.7", "@esbuild/openharmony-arm64": "0.27.7", "@esbuild/sunos-x64": "0.27.7", "@esbuild/win32-arm64": "0.27.7", "@esbuild/win32-ia32": "0.27.7", "@esbuild/win32-x64": "0.27.7" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-IxpibTjyVnmrIQo5aqNpCgoACA/dTKLTlhMHihVHhdkxKyPO1uBBthumT0rdHmcsk9uMonIWS0m4FljWzILh3w=="],
 
-    "rollup-plugin-visualizer/open": ["open@8.4.2", "", { "dependencies": { "define-lazy-prop": "^2.0.0", "is-docker": "^2.1.1", "is-wsl": "^2.2.0" } }, "sha512-7x81NCL719oNbsq/3mh+hVrAWmFuEYUqrq/Iw3kUzH8ReypT9QQ0BLoJS7/G9k6N81XjW4qHWtjWwe/9eLy1EQ=="],
+    "fontless/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "rollup-plugin-visualizer/source-map": ["source-map@0.7.6", "", {}, "sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ=="],
+    "fs-minipass/minipass": ["minipass@3.3.6", "", { "dependencies": { "yallist": "^4.0.0" } }, "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw=="],
 
-    "simple-git/debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+    "giget/citty": ["citty@0.1.6", "", { "dependencies": { "consola": "^3.2.3" } }, "sha512-tskPPKEs8D2KPafUypv2gxwJP8h/OaJmC82QQGGDQcHvXX43xF2VDACcJVmZ0EuSxkpO9Kc4MlrA3q0+FG58AQ=="],
 
-    "source-map-support/source-map": ["source-map@0.6.1", "", {}, "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g=="],
+    "giget/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "svgo/commander": ["commander@11.1.0", "", {}, "sha512-yPVavfyCcRhmorC7rWlkHn15b4wDVgVmBA7kV4QVBsF7kv/9TKJAbAXVTxvTnwP8HHKjRCJDClKbciiYS7p0DQ=="],
+    "glob/minipass": ["minipass@7.1.3", "", {}, "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A=="],
 
-    "tar/yallist": ["yallist@5.0.0", "", {}, "sha512-YgvUTfwqyc7UXVMrB+SImsVYSmTS8X/tSrtdNZMImM+n7+QTriRXyXim0mBrTXNeqzVF0KWGgHPeiyViFFrNDw=="],
+    "h3/cookie-es": ["cookie-es@1.2.3", "", {}, "sha512-lXVyvUvrNXblMqzIRrxHb57UUVmqsSWlxqt3XIjCkUP0wDAf6uicO6KMbEgYrMNtEvWgWHwe42CKxPu9MYAnWw=="],
 
-    "tempy/is-stream": ["is-stream@2.0.1", "", {}, "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg=="],
+    "h3/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "terser/acorn": ["acorn@8.14.1", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-OvQ/2pUDKmgfCg++xsTX1wGxfTaszcHVcTctW4UJB4hibJx2HXxxO5UmVgyjMa+ZDsiaf5wWLXYpRWMmBI0QHg=="],
+    "h3/iron-webcrypto": ["iron-webcrypto@1.2.1", "", {}, "sha512-feOM6FaSr6rEABp/eDfVseKyTMDt+KGpeB35SkVn9Tyn0CqvVsY3EwI0v5i8nMHyJnzCIQf7nsy3p41TPkJZhg=="],
 
-    "unctx/acorn": ["acorn@8.14.1", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-OvQ/2pUDKmgfCg++xsTX1wGxfTaszcHVcTctW4UJB4hibJx2HXxxO5UmVgyjMa+ZDsiaf5wWLXYpRWMmBI0QHg=="],
+    "hono-openapi/@hono/standard-validator": ["@hono/standard-validator@0.4.0", "", { "peerDependencies": { "@standard-schema/spec": "^1.0.0", "hono": ">=4.11.2" } }, "sha512-MxOm1asDh9j7c1D0KiWwppSbFgAQxTRO4YEhjMrJn3lF1BIcXenPdgjSGKDRfQmZdaTaMA8slQLETgVOKyJxFw=="],
 
-    "unctx/magic-string": ["magic-string@0.30.17", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.0" } }, "sha512-sNPKHvyjVf7gyjwS4xGTaW/mCnF8wnjtifKBEhxfZ7E/S8tQ0rssrwGNn6q8JH/ohItJfSQp9mBtQYuTlH5QnA=="],
+    "lazystream/readable-stream": ["readable-stream@2.3.8", "", { "dependencies": { "core-util-is": "~1.0.0", "inherits": "~2.0.3", "isarray": "~1.0.0", "process-nextick-args": "~2.0.0", "safe-buffer": "~5.1.1", "string_decoder": "~1.1.1", "util-deprecate": "~1.0.1" } }, "sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA=="],
 
-    "unctx/unplugin": ["unplugin@2.3.3", "", { "dependencies": { "acorn": "^8.14.1", "picomatch": "^4.0.2", "webpack-virtual-modules": "^0.6.2" } }, "sha512-DN4DgiS13HFrAapoRmmoa9B35QzmQVRH2k58HelO28htXVNEEFZ8CGlZL0aRHXOXtz9McwY6lqaZjcc15uWMow=="],
+    "lightningcss/detect-libc": ["detect-libc@2.1.2", "", {}, "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ=="],
 
-    "unenv/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "listhen/crossws": ["crossws@0.4.15", "", { "peerDependencies": { "srvx": ">=0.11.5" }, "optionalPeers": ["srvx"] }, "sha512-NsUOpDZosz7nyI+qEIl05yaiXOWaXH2oTeM+XBWtiSWZtb5rzcIsl1AST/HzM2jzUn76eFuyrkn83E6iSBRUvw=="],
 
-    "unimport/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "listhen/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "unimport/unplugin-utils": ["unplugin-utils@0.3.1", "", { "dependencies": { "pathe": "^2.0.3", "picomatch": "^4.0.3" } }, "sha512-5lWVjgi6vuHhJ526bI4nlCOmkCIF3nnfXkCMDeMJrtdvxTs6ZFCM8oNufGTsDbKv/tJ/xj8RpvXjRuPBZJuJog=="],
+    "listhen/tinyclip": ["tinyclip@0.1.15", "", {}, "sha512-uo33abH+Ays0xYaDysoBt494Hb3hsEczMpcC0MwFl773pazORx4fmvKhclhR1wonUbB6vvpRsvVMwnhfqeMc+A=="],
 
-    "unplugin-utils/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "local-pkg/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "unplugin-utils/picomatch": ["picomatch@4.0.2", "", {}, "sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg=="],
+    "magic-regexp/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "unplugin-vue-router/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "magic-regexp/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "unplugin-vue-router/unplugin-utils": ["unplugin-utils@0.3.1", "", { "dependencies": { "pathe": "^2.0.3", "picomatch": "^4.0.3" } }, "sha512-5lWVjgi6vuHhJ526bI4nlCOmkCIF3nnfXkCMDeMJrtdvxTs6ZFCM8oNufGTsDbKv/tJ/xj8RpvXjRuPBZJuJog=="],
+    "magic-regexp/unplugin": ["unplugin@2.3.11", "", { "dependencies": { "@jridgewell/remapping": "^2.3.5", "acorn": "^8.15.0", "picomatch": "^4.0.3", "webpack-virtual-modules": "^0.6.2" } }, "sha512-5uKD0nqiYVzlmCRs01Fhs2BdkEgBS3SAVP6ndrBsuK42iC2+JHyxM05Rm9G8+5mkmRtzMZGY8Ct5+mliZxU/Ww=="],
 
-    "untyped/jiti": ["jiti@2.4.2", "", { "bin": { "jiti": "lib/jiti-cli.mjs" } }, "sha512-rg9zJN+G4n2nfJl5MW3BMygZX56zKPNVEYYqq7adpmMh4Jn2QNEwhvQlFy6jPVdcod7txZtKHWnyZiA3a0zP7A=="],
+    "magic-string-ast/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "unwasm/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "magicast/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "vite/esbuild": ["esbuild@0.25.4", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.25.4", "@esbuild/android-arm": "0.25.4", "@esbuild/android-arm64": "0.25.4", "@esbuild/android-x64": "0.25.4", "@esbuild/darwin-arm64": "0.25.4", "@esbuild/darwin-x64": "0.25.4", "@esbuild/freebsd-arm64": "0.25.4", "@esbuild/freebsd-x64": "0.25.4", "@esbuild/linux-arm": "0.25.4", "@esbuild/linux-arm64": "0.25.4", "@esbuild/linux-ia32": "0.25.4", "@esbuild/linux-loong64": "0.25.4", "@esbuild/linux-mips64el": "0.25.4", "@esbuild/linux-ppc64": "0.25.4", "@esbuild/linux-riscv64": "0.25.4", "@esbuild/linux-s390x": "0.25.4", "@esbuild/linux-x64": "0.25.4", "@esbuild/netbsd-arm64": "0.25.4", "@esbuild/netbsd-x64": "0.25.4", "@esbuild/openbsd-arm64": "0.25.4", "@esbuild/openbsd-x64": "0.25.4", "@esbuild/sunos-x64": "0.25.4", "@esbuild/win32-arm64": "0.25.4", "@esbuild/win32-ia32": "0.25.4", "@esbuild/win32-x64": "0.25.4" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-8pgjLUcUjcgDg+2Q4NYXnPbo/vncAY4UmyaCm0jZevERqCHZIaWwdJHkf8XQtu4AxSKCdvrUbT0XUr1IdZzI8Q=="],
+    "micromatch/picomatch": ["picomatch@2.3.2", "", {}, "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA=="],
 
-    "vite/fdir": ["fdir@6.4.4", "", { "peerDependencies": { "picomatch": "^3 || ^4" }, "optionalPeers": ["picomatch"] }, "sha512-1NZP+GK4GfuAv3PqKvxQRDMjdSRZjnkq7KfhlNrCNNlZ0ygQFpebfrnfnq/W7fpUnAv9aGWmY1zKx7FYL3gwhg=="],
+    "minizlib/minipass": ["minipass@3.3.6", "", { "dependencies": { "yallist": "^4.0.0" } }, "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw=="],
 
-    "vite/picomatch": ["picomatch@4.0.2", "", {}, "sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg=="],
+    "mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "vite/postcss": ["postcss@8.5.3", "", { "dependencies": { "nanoid": "^3.3.8", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" } }, "sha512-dle9A3yYxlBSrt8Fu+IpjGT8SY8hN0mlaA6GY8t0P5PjIOZemULz/E2Bnm/2dcUOena75OTNkHI76uZBNUUq3A=="],
+    "nitropack/c12": ["c12@3.3.4", "", { "dependencies": { "chokidar": "^5.0.0", "confbox": "^0.2.4", "defu": "^6.1.6", "dotenv": "^17.3.1", "exsolve": "^1.0.8", "giget": "^3.2.0", "jiti": "^2.6.1", "ohash": "^2.0.11", "pathe": "^2.0.3", "perfect-debounce": "^2.1.0", "pkg-types": "^2.3.0", "rc9": "^3.0.1" }, "peerDependencies": { "magicast": "*" }, "optionalPeers": ["magicast"] }, "sha512-cM0ApFQSBXuourJejzwv/AuPRvAxordTyParRVcHjjtXirtkzM0uK2L9TTn9s0cXZbG7E55jCivRQzoxYmRAlA=="],
 
-    "vite/rollup": ["rollup@4.40.2", "", { "dependencies": { "@types/estree": "1.0.7" }, "optionalDependencies": { "@rollup/rollup-android-arm-eabi": "4.40.2", "@rollup/rollup-android-arm64": "4.40.2", "@rollup/rollup-darwin-arm64": "4.40.2", "@rollup/rollup-darwin-x64": "4.40.2", "@rollup/rollup-freebsd-arm64": "4.40.2", "@rollup/rollup-freebsd-x64": "4.40.2", "@rollup/rollup-linux-arm-gnueabihf": "4.40.2", "@rollup/rollup-linux-arm-musleabihf": "4.40.2", "@rollup/rollup-linux-arm64-gnu": "4.40.2", "@rollup/rollup-linux-arm64-musl": "4.40.2", "@rollup/rollup-linux-loongarch64-gnu": "4.40.2", "@rollup/rollup-linux-powerpc64le-gnu": "4.40.2", "@rollup/rollup-linux-riscv64-gnu": "4.40.2", "@rollup/rollup-linux-riscv64-musl": "4.40.2", "@rollup/rollup-linux-s390x-gnu": "4.40.2", "@rollup/rollup-linux-x64-gnu": "4.40.2", "@rollup/rollup-linux-x64-musl": "4.40.2", "@rollup/rollup-win32-arm64-msvc": "4.40.2", "@rollup/rollup-win32-ia32-msvc": "4.40.2", "@rollup/rollup-win32-x64-msvc": "4.40.2", "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-tfUOg6DTP4rhQ3VjOO6B4wyrJnGOX85requAXvqYTHsOgb2TFJdZ3aWpT8W2kPoypSGP7dZUyzxJ9ee4buM5Fg=="],
+    "nitropack/confbox": ["confbox@0.2.4", "", {}, "sha512-ysOGlgTFbN2/Y6Cg3Iye8YKulHw+R2fNXHrgSmXISQdMnomY6eNDprVdW9R5xBguEqI954+S6709UyiO7B+6OQ=="],
 
-    "vite/tinyglobby": ["tinyglobby@0.2.13", "", { "dependencies": { "fdir": "^6.4.4", "picomatch": "^4.0.2" } }, "sha512-mEwzpUgrLySlveBwEVDMKk5B57bhLPYovRfPAXD5gA/98Opn0rCDj3GtLwFvCvH5RK9uPCExUROW5NjDwvqkxw=="],
+    "nitropack/cookie-es": ["cookie-es@2.0.1", "", {}, "sha512-aVf4A4hI2w70LnF7GG+7xDQUkliwiXWXFvTjkip4+b64ygDQ2sJPRSKFDHbxn8o0xu9QzPkMuuiWIXyFSE2slA=="],
 
-    "vite-node/debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+    "nitropack/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "vite-node/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "nitropack/esbuild": ["esbuild@0.28.2", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.28.2", "@esbuild/android-arm": "0.28.2", "@esbuild/android-arm64": "0.28.2", "@esbuild/android-x64": "0.28.2", "@esbuild/darwin-arm64": "0.28.2", "@esbuild/darwin-x64": "0.28.2", "@esbuild/freebsd-arm64": "0.28.2", "@esbuild/freebsd-x64": "0.28.2", "@esbuild/linux-arm": "0.28.2", "@esbuild/linux-arm64": "0.28.2", "@esbuild/linux-ia32": "0.28.2", "@esbuild/linux-loong64": "0.28.2", "@esbuild/linux-mips64el": "0.28.2", "@esbuild/linux-ppc64": "0.28.2", "@esbuild/linux-riscv64": "0.28.2", "@esbuild/linux-s390x": "0.28.2", "@esbuild/linux-x64": "0.28.2", "@esbuild/netbsd-arm64": "0.28.2", "@esbuild/netbsd-x64": "0.28.2", "@esbuild/openbsd-arm64": "0.28.2", "@esbuild/openbsd-x64": "0.28.2", "@esbuild/openharmony-arm64": "0.28.2", "@esbuild/sunos-x64": "0.28.2", "@esbuild/win32-arm64": "0.28.2", "@esbuild/win32-ia32": "0.28.2", "@esbuild/win32-x64": "0.28.2" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA=="],
 
-    "vite-node/vite": ["vite@7.2.2", "", { "dependencies": { "esbuild": "^0.25.0", "fdir": "^6.5.0", "picomatch": "^4.0.3", "postcss": "^8.5.6", "rollup": "^4.43.0", "tinyglobby": "^0.2.15" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", "jiti": ">=1.21.0", "less": "^4.0.0", "lightningcss": "^1.21.0", "sass": "^1.70.0", "sass-embedded": "^1.70.0", "stylus": ">=0.54.8", "sugarss": "^5.0.0", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "jiti", "less", "lightningcss", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-BxAKBWmIbrDgrokdGZH1IgkIk/5mMHDreLDmCJ0qpyJaAteP8NvMhkwr/ZCQNqNH97bw/dANTE9PDzqwJghfMQ=="],
+    "nitropack/globby": ["globby@16.2.4", "", { "dependencies": { "@sindresorhus/merge-streams": "^4.0.0", "fast-glob": "^3.3.3", "ignore": "^7.0.5", "is-path-inside": "^4.0.0", "micromatch": "^4.0.8", "slash": "^5.1.0", "unicorn-magic": "^0.4.0" } }, "sha512-c8B/VNLmxRcmqqenRA9t+9IyOjf9+V6lTxPaUJLqOCONdQkWZ0ETYgX0qbtJqPsgCNusT9MZ5Jeidw8Eb9tn2g=="],
 
-    "vite-plugin-checker/npm-run-path": ["npm-run-path@6.0.0", "", { "dependencies": { "path-key": "^4.0.0", "unicorn-magic": "^0.3.0" } }, "sha512-9qny7Z9DsQU8Ou39ERsPU4OZQlSTP47ShQzuKZ6PRXpYLtIFgl/DEBYEXKlvcEa+9tHVcK8CF81Y2V72qaZhWA=="],
+    "nitropack/hookable": ["hookable@5.5.3", "", {}, "sha512-Yc+BQe8SvoXH1643Qez1zqLRmbA5rCL+sSmk6TVos0LWVfNIB7PGncdlId77WzLGSIB5KaWgTaNTs2lNVEI6VQ=="],
 
-    "vite-plugin-inspect/debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+    "nitropack/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "vite-plugin-inspect/unplugin-utils": ["unplugin-utils@0.3.1", "", { "dependencies": { "pathe": "^2.0.3", "picomatch": "^4.0.3" } }, "sha512-5lWVjgi6vuHhJ526bI4nlCOmkCIF3nnfXkCMDeMJrtdvxTs6ZFCM8oNufGTsDbKv/tJ/xj8RpvXjRuPBZJuJog=="],
+    "nitropack/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "vite-plugin-pwa/tinyglobby": ["tinyglobby@0.2.13", "", { "dependencies": { "fdir": "^6.4.4", "picomatch": "^4.0.2" } }, "sha512-mEwzpUgrLySlveBwEVDMKk5B57bhLPYovRfPAXD5gA/98Opn0rCDj3GtLwFvCvH5RK9uPCExUROW5NjDwvqkxw=="],
+    "nitropack/semver": ["semver@7.8.4", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-rUCObTnP32Q08R2uuIrt7r9PlEonuTmtuXYcW6s5kjdlj3xbnwe+21yXptAUYcMAABLkYYTtnmzb3w3EDZfueA=="],
 
-    "vite-plugin-vue-tracer/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "nitropack/unctx": ["unctx@2.5.0", "", { "dependencies": { "acorn": "^8.15.0", "estree-walker": "^3.0.3", "magic-string": "^0.30.21", "unplugin": "^2.3.11" } }, "sha512-p+Rz9x0R7X+CYDkT+Xg8/GhpcShTlU8n+cf9OtOEf7zEQsNcCZO1dPKNRDqvUTaq+P32PMMkxWHwfrxkqfqAYg=="],
 
-    "workbox-build/@rollup/plugin-replace": ["@rollup/plugin-replace@2.4.2", "", { "dependencies": { "@rollup/pluginutils": "^3.1.0", "magic-string": "^0.25.7" }, "peerDependencies": { "rollup": "^1.20.0 || ^2.0.0" } }, "sha512-IGcu+cydlUMZ5En85jxHH4qj2hta/11BHq95iHEyb2sbgiN0eCdzvUcHw5gt9pBL5lTi4JDYJ1acCoMGpTvEZg=="],
+    "nitropack/unimport": ["unimport@6.5.0", "", { "dependencies": { "acorn": "^8.18.0", "escape-string-regexp": "^5.0.0", "estree-walker": "^3.0.3", "local-pkg": "^1.2.1", "magic-string": "^1.2.3", "mlly": "^1.8.2", "pathe": "^2.0.3", "picomatch": "^4.0.7", "pkg-types": "^2.3.3", "scule": "^1.3.0", "strip-literal": "^4.0.0", "tinyglobby": "^0.2.17", "unplugin": "^3.3.0", "unplugin-utils": "^0.3.2" }, "peerDependencies": { "oxc-parser": "*", "rolldown": "^1.0.0" }, "optionalPeers": ["oxc-parser", "rolldown"] }, "sha512-t0KLJLRbebz3f7NrQe+vy2ObeugVeM1XqI2oeYnauddmHSglYj3U6bxOJ65IbXmOFkcAGFJK2OyGH7aqHPM6Ug=="],
 
-    "workbox-build/pretty-bytes": ["pretty-bytes@5.6.0", "", {}, "sha512-FFw039TmrBqFK8ma/7OL3sDz/VytdtJr044/QUJtH0wK9lb9jLq9tJyIxUwtQJHwar2BqtiA4iCWSwo9JLkzFg=="],
+    "npm-run-path/path-key": ["path-key@4.0.0", "", {}, "sha512-haREypq7xkM7ErfgIyA0z+Bj4AGKlMSdlQE2jvJo6huWD1EdkKYV+G/T4nq0YEF2vgTT8kqMFKo1uHn950r4SQ=="],
 
-    "@ampproject/remapping/@jridgewell/gen-mapping/@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
+    "nuxt/@nuxt/kit": ["@nuxt/kit@4.6.2", "", { "dependencies": { "consola": "^3.4.2", "defu": "^6.1.7", "destr": "^2.0.5", "errx": "^0.2.2", "exsolve": "^1.1.3", "ignore": "^7.0.12", "klona": "^2.0.6", "microdiff": "^1.6.0", "nostics": "^1.3.0", "package-manager-detector": "^1.9.0", "pathe": "^2.0.3", "rc9": "^3.1.0", "scule": "^1.3.0", "std-env": "^4.3.0", "tinyexec": "^1.3.1", "tinyglobby": "^0.2.17", "unctx": "^3.0.1", "verkit": "^0.5.0" }, "peerDependencies": { "@nuxt/schema": "^3.0.0 || ^4.0.0 || ^5.0.0-0", "confbox": ">=0.1.0", "dotenv": "*", "giget": ">=3.1.0", "jiti": "^2.0.0", "mlly": "^1.2.0", "oxc-parser": ">=0.56.0", "rolldown": ">=1.0.0" }, "optionalPeers": ["@nuxt/schema", "confbox", "dotenv", "giget", "jiti", "mlly", "oxc-parser", "rolldown"] }, "sha512-Vn9DJobc30WdR1vrlRcEAFSFy7NV5CWq3o6gxsfrdGb2FmCh0fuDyvbZC30rm2enyiPaOUPafKctFE/ToBjybw=="],
 
-    "@ampproject/remapping/@jridgewell/trace-mapping/@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
+    "nuxt/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@babel/core/@babel/generator/@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.3.8", "", { "dependencies": { "@jridgewell/set-array": "^1.2.1", "@jridgewell/sourcemap-codec": "^1.4.10", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-imAbBGkb+ebQyxKgzv5Hu2nmROxoDOXHh80evxdoXNOrvAnVx7zimzc1Oo5h9RlfV4vPXaE2iM5pOFbvOCClWA=="],
+    "nypm/citty": ["citty@0.1.6", "", { "dependencies": { "consola": "^3.2.3" } }, "sha512-tskPPKEs8D2KPafUypv2gxwJP8h/OaJmC82QQGGDQcHvXX43xF2VDACcJVmZ0EuSxkpO9Kc4MlrA3q0+FG58AQ=="],
 
-    "@babel/core/@babel/generator/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
+    "nypm/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "@babel/core/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "nypm/tinyexec": ["tinyexec@0.3.2", "", {}, "sha512-KQQR9yN7R5+OSwaK0XQoj22pwHoTlgYqmUscPYoknOoWCWfj/5/ABTMRi69FrKU5ffPVh5QcFikpWJI/P1ocHA=="],
 
-    "@babel/helper-create-class-features-plugin/@babel/traverse/debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+    "path-scurry/minipass": ["minipass@7.1.3", "", {}, "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A=="],
 
-    "@babel/helper-create-regexp-features-plugin/@babel/helper-annotate-as-pure/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "proper-lockfile/signal-exit": ["signal-exit@3.0.7", "", {}, "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ=="],
 
-    "@babel/helper-member-expression-to-functions/@babel/traverse/debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+    "rc9/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@babel/helper-module-imports/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "readdir-glob/minimatch": ["minimatch@5.1.9", "", { "dependencies": { "brace-expansion": "^2.0.1" } }, "sha512-7o1wEA2RyMP7Iu7GNba9vc0RWWGACJOCZBJX2GJWip0ikV+wcOsgVuY9uE8CPiyQhkGFSlhuSkZPavN7u1c2Fw=="],
 
-    "@babel/helper-optimise-call-expression/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "reka-ui/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@babel/helper-remap-async-to-generator/@babel/helper-annotate-as-pure/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "rollup-plugin-visualizer/source-map": ["source-map@0.8.0", "", {}, "sha512-d8EqvL+k/SOXCreS/SUzg2ciyHqBBLcN/yuRjFsbvVhHTE2pgei7oAhmPM7kWFbkX6OSMQfUq4KbkF3au9lhYQ=="],
 
-    "@babel/helper-replace-supers/@babel/helper-member-expression-to-functions/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "serve-placeholder/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@babel/helper-skip-transparent-expression-wrappers/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "source-map-support/source-map": ["source-map@0.6.1", "", {}, "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g=="],
 
-    "@babel/helper-wrap-function/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "string-width-cjs/emoji-regex": ["emoji-regex@8.0.0", "", {}, "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A=="],
 
-    "@babel/helpers/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "string-width-cjs/strip-ansi": ["strip-ansi@6.0.1", "", { "dependencies": { "ansi-regex": "^5.0.1" } }, "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A=="],
 
-    "@babel/plugin-transform-class-properties/@babel/helper-create-class-features-plugin/@babel/helper-annotate-as-pure": ["@babel/helper-annotate-as-pure@7.27.1", "", { "dependencies": { "@babel/types": "^7.27.1" } }, "sha512-WnuuDILl9oOBbKnb4L+DyODx7iC47XfzmNCpTttFsSp6hTG7XZxu60+4IO+2/hPfcGOoKbFiwoI/+zwARbNQow=="],
+    "strip-ansi-cjs/ansi-regex": ["ansi-regex@5.0.1", "", {}, "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ=="],
 
-    "@babel/plugin-transform-class-properties/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions": ["@babel/helper-member-expression-to-functions@7.27.1", "", { "dependencies": { "@babel/traverse": "^7.27.1", "@babel/types": "^7.27.1" } }, "sha512-E5chM8eWjTp/aNoVpcbfM7mLxu9XGLWYise2eBKGQomAk/Mb4XoxyqXTZbuTohbsl8EKqdlMhnDI2CCLfcs9wA=="],
+    "terser/commander": ["commander@2.20.3", "", {}, "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ=="],
 
-    "@babel/plugin-transform-class-properties/@babel/helper-create-class-features-plugin/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
+    "tsx/esbuild": ["esbuild@0.28.2", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.28.2", "@esbuild/android-arm": "0.28.2", "@esbuild/android-arm64": "0.28.2", "@esbuild/android-x64": "0.28.2", "@esbuild/darwin-arm64": "0.28.2", "@esbuild/darwin-x64": "0.28.2", "@esbuild/freebsd-arm64": "0.28.2", "@esbuild/freebsd-x64": "0.28.2", "@esbuild/linux-arm": "0.28.2", "@esbuild/linux-arm64": "0.28.2", "@esbuild/linux-ia32": "0.28.2", "@esbuild/linux-loong64": "0.28.2", "@esbuild/linux-mips64el": "0.28.2", "@esbuild/linux-ppc64": "0.28.2", "@esbuild/linux-riscv64": "0.28.2", "@esbuild/linux-s390x": "0.28.2", "@esbuild/linux-x64": "0.28.2", "@esbuild/netbsd-arm64": "0.28.2", "@esbuild/netbsd-x64": "0.28.2", "@esbuild/openbsd-arm64": "0.28.2", "@esbuild/openbsd-x64": "0.28.2", "@esbuild/openharmony-arm64": "0.28.2", "@esbuild/sunos-x64": "0.28.2", "@esbuild/win32-arm64": "0.28.2", "@esbuild/win32-ia32": "0.28.2", "@esbuild/win32-x64": "0.28.2" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA=="],
 
-    "@babel/plugin-transform-class-static-block/@babel/helper-create-class-features-plugin/@babel/helper-annotate-as-pure": ["@babel/helper-annotate-as-pure@7.27.1", "", { "dependencies": { "@babel/types": "^7.27.1" } }, "sha512-WnuuDILl9oOBbKnb4L+DyODx7iC47XfzmNCpTttFsSp6hTG7XZxu60+4IO+2/hPfcGOoKbFiwoI/+zwARbNQow=="],
+    "unimport/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "@babel/plugin-transform-class-static-block/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions": ["@babel/helper-member-expression-to-functions@7.27.1", "", { "dependencies": { "@babel/traverse": "^7.27.1", "@babel/types": "^7.27.1" } }, "sha512-E5chM8eWjTp/aNoVpcbfM7mLxu9XGLWYise2eBKGQomAk/Mb4XoxyqXTZbuTohbsl8EKqdlMhnDI2CCLfcs9wA=="],
+    "unplugin-auto-import/unimport": ["unimport@6.5.0", "", { "dependencies": { "acorn": "^8.18.0", "escape-string-regexp": "^5.0.0", "estree-walker": "^3.0.3", "local-pkg": "^1.2.1", "magic-string": "^1.2.3", "mlly": "^1.8.2", "pathe": "^2.0.3", "picomatch": "^4.0.7", "pkg-types": "^2.3.3", "scule": "^1.3.0", "strip-literal": "^4.0.0", "tinyglobby": "^0.2.17", "unplugin": "^3.3.0", "unplugin-utils": "^0.3.2" }, "peerDependencies": { "oxc-parser": "*", "rolldown": "^1.0.0" }, "optionalPeers": ["oxc-parser", "rolldown"] }, "sha512-t0KLJLRbebz3f7NrQe+vy2ObeugVeM1XqI2oeYnauddmHSglYj3U6bxOJ65IbXmOFkcAGFJK2OyGH7aqHPM6Ug=="],
 
-    "@babel/plugin-transform-class-static-block/@babel/helper-create-class-features-plugin/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
+    "unplugin-vue-components/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "@babel/plugin-transform-classes/@babel/helper-annotate-as-pure/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "unplugin-vue-components/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "@babel/plugin-transform-private-methods/@babel/helper-create-class-features-plugin/@babel/helper-annotate-as-pure": ["@babel/helper-annotate-as-pure@7.27.1", "", { "dependencies": { "@babel/types": "^7.27.1" } }, "sha512-WnuuDILl9oOBbKnb4L+DyODx7iC47XfzmNCpTttFsSp6hTG7XZxu60+4IO+2/hPfcGOoKbFiwoI/+zwARbNQow=="],
+    "untyped/citty": ["citty@0.1.6", "", { "dependencies": { "consola": "^3.2.3" } }, "sha512-tskPPKEs8D2KPafUypv2gxwJP8h/OaJmC82QQGGDQcHvXX43xF2VDACcJVmZ0EuSxkpO9Kc4MlrA3q0+FG58AQ=="],
 
-    "@babel/plugin-transform-private-methods/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions": ["@babel/helper-member-expression-to-functions@7.27.1", "", { "dependencies": { "@babel/traverse": "^7.27.1", "@babel/types": "^7.27.1" } }, "sha512-E5chM8eWjTp/aNoVpcbfM7mLxu9XGLWYise2eBKGQomAk/Mb4XoxyqXTZbuTohbsl8EKqdlMhnDI2CCLfcs9wA=="],
+    "untyped/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@babel/plugin-transform-private-methods/@babel/helper-create-class-features-plugin/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
+    "unwasm/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "@babel/plugin-transform-private-property-in-object/@babel/helper-annotate-as-pure/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "unwasm/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "@babel/plugin-transform-private-property-in-object/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions": ["@babel/helper-member-expression-to-functions@7.27.1", "", { "dependencies": { "@babel/traverse": "^7.27.1", "@babel/types": "^7.27.1" } }, "sha512-E5chM8eWjTp/aNoVpcbfM7mLxu9XGLWYise2eBKGQomAk/Mb4XoxyqXTZbuTohbsl8EKqdlMhnDI2CCLfcs9wA=="],
+    "vaul-vue/@vueuse/core": ["@vueuse/core@10.11.1", "", { "dependencies": { "@types/web-bluetooth": "^0.0.20", "@vueuse/metadata": "10.11.1", "@vueuse/shared": "10.11.1", "vue-demi": ">=0.14.8" } }, "sha512-guoy26JQktXPcz+0n3GukWIy/JDNKti9v6VEMu6kV2sYBsWuGiTU8OWdg+ADfUbHg3/3DlqySDe7JmdHrktiww=="],
 
-    "@babel/plugin-transform-private-property-in-object/@babel/helper-create-class-features-plugin/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
+    "vite-plugin-checker/npm-run-path": ["npm-run-path@6.0.0", "", { "dependencies": { "path-key": "^4.0.0", "unicorn-magic": "^0.3.0" } }, "sha512-9qny7Z9DsQU8Ou39ERsPU4OZQlSTP47ShQzuKZ6PRXpYLtIFgl/DEBYEXKlvcEa+9tHVcK8CF81Y2V72qaZhWA=="],
 
-    "@babel/preset-modules/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "vite-plugin-inspect/error-stack-parser-es": ["error-stack-parser-es@1.0.5", "", {}, "sha512-5qucVt2XcuGMcEGgWI7i+yZpmpByQ8J1lHhcL7PwqCwu9FPP3VUXzT4ltHe5i2z9dePwEHcDVOAfSnHsOlCXRA=="],
 
-    "@babel/template/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "vue-router/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "@babel/traverse/@babel/generator/@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.3.8", "", { "dependencies": { "@jridgewell/set-array": "^1.2.1", "@jridgewell/sourcemap-codec": "^1.4.10", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-imAbBGkb+ebQyxKgzv5Hu2nmROxoDOXHh80evxdoXNOrvAnVx7zimzc1Oo5h9RlfV4vPXaE2iM5pOFbvOCClWA=="],
+    "wrap-ansi/string-width": ["string-width@7.2.0", "", { "dependencies": { "emoji-regex": "^10.3.0", "get-east-asian-width": "^1.0.0", "strip-ansi": "^7.1.0" } }, "sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ=="],
 
-    "@babel/traverse/@babel/generator/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
+    "wrap-ansi-cjs/ansi-styles": ["ansi-styles@4.3.0", "", { "dependencies": { "color-convert": "^2.0.1" } }, "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg=="],
 
-    "@babel/traverse/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "wrap-ansi-cjs/string-width": ["string-width@4.2.3", "", { "dependencies": { "emoji-regex": "^8.0.0", "is-fullwidth-code-point": "^3.0.0", "strip-ansi": "^6.0.1" } }, "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g=="],
 
-    "@isaacs/cliui/string-width/emoji-regex": ["emoji-regex@9.2.2", "", {}, "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg=="],
+    "wrap-ansi-cjs/strip-ansi": ["strip-ansi@6.0.1", "", { "dependencies": { "ansi-regex": "^5.0.1" } }, "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A=="],
 
-    "@isaacs/cliui/strip-ansi/ansi-regex": ["ansi-regex@6.1.0", "", {}, "sha512-7HSX4QQb4CspciLpVFwyRe79O3xsIZDDLER21kERQ71oaPodF8jL725AgJMFAYbooIqolJoRLuM81SpeUkpkvA=="],
+    "youch-core/error-stack-parser-es": ["error-stack-parser-es@1.0.5", "", {}, "sha512-5qucVt2XcuGMcEGgWI7i+yZpmpByQ8J1lHhcL7PwqCwu9FPP3VUXzT4ltHe5i2z9dePwEHcDVOAfSnHsOlCXRA=="],
 
-    "@isaacs/cliui/wrap-ansi/ansi-styles": ["ansi-styles@6.2.1", "", {}, "sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug=="],
+    "@babel/core/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "@jridgewell/source-map/@jridgewell/gen-mapping/@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
+    "@babel/core/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@jridgewell/source-map/@jridgewell/trace-mapping/@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
+    "@babel/generator/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "@mapbox/node-pre-gyp/node-fetch/whatwg-url": ["whatwg-url@5.0.0", "", { "dependencies": { "tr46": "~0.0.3", "webidl-conversions": "^3.0.0" } }, "sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw=="],
+    "@babel/generator/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@nuxt/devtools-kit/@nuxt/kit/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@babel/helper-annotate-as-pure/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "@nuxt/kit/c12/magicast": ["magicast@0.3.5", "", { "dependencies": { "@babel/parser": "^7.25.4", "@babel/types": "^7.25.4", "source-map-js": "^1.2.0" } }, "sha512-L0WhttDl+2BOsybvEOLK7fW3UA0OQ0IQ2d6Zl2x/a6vVRs3bAY0ECOSHHeL5jD+SbOpOCUEi0y1DgHEn9Qn1AQ=="],
+    "@babel/helper-annotate-as-pure/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@nuxt/kit/c12/perfect-debounce": ["perfect-debounce@1.0.0", "", {}, "sha512-xCy9V055GLEqoFaHoC1SoLIaLmWctgCUaBaWxDZ7/Zx4CTyX7cJQLJOok/orfjZAh9kEYpjJa4d0KcJmCbctZA=="],
+    "@babel/helper-compilation-targets/lru-cache/yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
 
-    "@nuxt/kit/mlly/acorn": ["acorn@8.14.1", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-OvQ/2pUDKmgfCg++xsTX1wGxfTaszcHVcTctW4UJB4hibJx2HXxxO5UmVgyjMa+ZDsiaf5wWLXYpRWMmBI0QHg=="],
+    "@babel/helper-member-expression-to-functions/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "@nuxt/kit/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
+    "@babel/helper-member-expression-to-functions/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@nuxt/kit/tinyglobby/fdir": ["fdir@6.4.4", "", { "peerDependencies": { "picomatch": "^3 || ^4" }, "optionalPeers": ["picomatch"] }, "sha512-1NZP+GK4GfuAv3PqKvxQRDMjdSRZjnkq7KfhlNrCNNlZ0ygQFpebfrnfnq/W7fpUnAv9aGWmY1zKx7FYL3gwhg=="],
+    "@babel/helper-module-imports/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "@nuxt/kit/tinyglobby/picomatch": ["picomatch@4.0.2", "", {}, "sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg=="],
+    "@babel/helper-module-imports/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@nuxt/kit/unimport/acorn": ["acorn@8.14.1", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-OvQ/2pUDKmgfCg++xsTX1wGxfTaszcHVcTctW4UJB4hibJx2HXxxO5UmVgyjMa+ZDsiaf5wWLXYpRWMmBI0QHg=="],
+    "@babel/helper-optimise-call-expression/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "@nuxt/kit/unimport/local-pkg": ["local-pkg@1.1.1", "", { "dependencies": { "mlly": "^1.7.4", "pkg-types": "^2.0.1", "quansync": "^0.2.8" } }, "sha512-WunYko2W1NcdfAFpuLUoucsgULmgDBRkdxHxWQ7mK0cQqwPiy8E1enjuRBrhLtZkB5iScJ1XIPdhVEFK8aOLSg=="],
+    "@babel/helper-optimise-call-expression/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@nuxt/kit/unimport/magic-string": ["magic-string@0.30.17", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.0" } }, "sha512-sNPKHvyjVf7gyjwS4xGTaW/mCnF8wnjtifKBEhxfZ7E/S8tQ0rssrwGNn6q8JH/ohItJfSQp9mBtQYuTlH5QnA=="],
+    "@babel/helper-skip-transparent-expression-wrappers/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "@nuxt/kit/unimport/picomatch": ["picomatch@4.0.2", "", {}, "sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg=="],
+    "@babel/helper-skip-transparent-expression-wrappers/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@nuxt/kit/unimport/strip-literal": ["strip-literal@3.0.0", "", { "dependencies": { "js-tokens": "^9.0.1" } }, "sha512-TcccoMhJOM3OebGhSBEmp3UZ2SfDMZUEBdRA/9ynfLi8yYajyWX3JiXArcJt4Umh4vISpspkQIY8ZZoCqjbviA=="],
+    "@babel/helpers/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "@nuxt/kit/unimport/unplugin": ["unplugin@2.3.3", "", { "dependencies": { "acorn": "^8.14.1", "picomatch": "^4.0.2", "webpack-virtual-modules": "^0.6.2" } }, "sha512-DN4DgiS13HFrAapoRmmoa9B35QzmQVRH2k58HelO28htXVNEEFZ8CGlZL0aRHXOXtz9McwY6lqaZjcc15uWMow=="],
+    "@babel/helpers/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@nuxt/telemetry/ofetch/node-fetch-native": ["node-fetch-native@1.6.6", "", {}, "sha512-8Mc2HhqPdlIfedsuZoc3yioPuzp6b+L5jRCRY1QzuWZh2EGJVQrGppC6V6cF0bLdbW0+O2YpqCA25aF/1lvipQ=="],
+    "@babel/parser/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "@nuxt/vite-builder/vite/rollup": ["rollup@4.53.2", "", { "dependencies": { "@types/estree": "1.0.8" }, "optionalDependencies": { "@rollup/rollup-android-arm-eabi": "4.53.2", "@rollup/rollup-android-arm64": "4.53.2", "@rollup/rollup-darwin-arm64": "4.53.2", "@rollup/rollup-darwin-x64": "4.53.2", "@rollup/rollup-freebsd-arm64": "4.53.2", "@rollup/rollup-freebsd-x64": "4.53.2", "@rollup/rollup-linux-arm-gnueabihf": "4.53.2", "@rollup/rollup-linux-arm-musleabihf": "4.53.2", "@rollup/rollup-linux-arm64-gnu": "4.53.2", "@rollup/rollup-linux-arm64-musl": "4.53.2", "@rollup/rollup-linux-loong64-gnu": "4.53.2", "@rollup/rollup-linux-ppc64-gnu": "4.53.2", "@rollup/rollup-linux-riscv64-gnu": "4.53.2", "@rollup/rollup-linux-riscv64-musl": "4.53.2", "@rollup/rollup-linux-s390x-gnu": "4.53.2", "@rollup/rollup-linux-x64-gnu": "4.53.2", "@rollup/rollup-linux-x64-musl": "4.53.2", "@rollup/rollup-openharmony-arm64": "4.53.2", "@rollup/rollup-win32-arm64-msvc": "4.53.2", "@rollup/rollup-win32-ia32-msvc": "4.53.2", "@rollup/rollup-win32-x64-gnu": "4.53.2", "@rollup/rollup-win32-x64-msvc": "4.53.2", "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-MHngMYwGJVi6Fmnk6ISmnk7JAHRNF0UkuucA0CUW3N3a4KnONPEZz+vUanQP/ZC/iY1Qkf3bwPWzyY84wEks1g=="],
+    "@babel/parser/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@rollup/plugin-babel/@rollup/pluginutils/@types/estree": ["@types/estree@0.0.39", "", {}, "sha512-EYNwp3bU+98cpU4lAWYYL7Zz+2gryWH1qbdDTidVd6hkiR6weksdbMadyXKXNPEkQFhXM+hVO9ZygomHXp+AIw=="],
+    "@babel/template/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "@rollup/plugin-babel/@rollup/pluginutils/estree-walker": ["estree-walker@1.0.1", "", {}, "sha512-1fMXF3YP4pZZVozF8j/ZLfvnR8NSIljt56UhbZ5PeeDmmGHpgpdwQt7ITlGvYaQukCvuBRMLEiKiYC+oeIg4cg=="],
+    "@babel/template/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@rollup/plugin-babel/@rollup/pluginutils/picomatch": ["picomatch@2.3.1", "", {}, "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA=="],
+    "@babel/traverse/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "@rollup/plugin-inject/magic-string/@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
+    "@babel/traverse/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "@vercel/nft/glob/minimatch": ["minimatch@9.0.5", "", { "dependencies": { "brace-expansion": "^2.0.1" } }, "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow=="],
+    "@dxup/nuxt/@nuxt/kit/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "@vitejs/plugin-vue-jsx/@babel/core/@babel/helper-module-transforms": ["@babel/helper-module-transforms@7.28.3", "", { "dependencies": { "@babel/helper-module-imports": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1", "@babel/traverse": "^7.28.3" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-gytXUbs8k2sXS9PnQptz5o0QnpLL51SwASIORY6XaBKF88nsOT0Zw9szLqlSGQDP/4TljBAD5y98p2U1fqkdsw=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/android-arm": ["@esbuild/android-arm@0.18.20", "", { "os": "android", "cpu": "arm" }, "sha512-fyi7TDI/ijKKNZTUJAQqiG5T7YjJXgnzkURqmGj13C6dCqckZBLdl4h7bkhHt/t0WP+zO9/zwroDvANaOqO5Sw=="],
 
-    "@vitejs/plugin-vue-jsx/@babel/core/@babel/helpers": ["@babel/helpers@7.28.4", "", { "dependencies": { "@babel/template": "^7.27.2", "@babel/types": "^7.28.4" } }, "sha512-HFN59MmQXGHVyYadKLVumYsA9dBFun/ldYxipEjzA4196jpLZd8UjEEBLkbEkvfYreDqJhZxYAWFPtrfhNpj4w=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/android-arm64": ["@esbuild/android-arm64@0.18.20", "", { "os": "android", "cpu": "arm64" }, "sha512-Nz4rJcchGDtENV0eMKUNa6L12zz2zBDXuhj/Vjh18zGqB44Bi7MBMSXjgunJgjRhCmKOjnPuZp4Mb6OKqtMHLQ=="],
 
-    "@vitejs/plugin-vue-jsx/@babel/core/@babel/traverse": ["@babel/traverse@7.28.5", "", { "dependencies": { "@babel/code-frame": "^7.27.1", "@babel/generator": "^7.28.5", "@babel/helper-globals": "^7.28.0", "@babel/parser": "^7.28.5", "@babel/template": "^7.27.2", "@babel/types": "^7.28.5", "debug": "^4.3.1" } }, "sha512-TCCj4t55U90khlYkVV/0TfkJkAkUg3jZFA3Neb7unZT8CPok7iiRfaX0F+WnqWqt7OxhOn0uBKXCw4lbL8W0aQ=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/android-x64": ["@esbuild/android-x64@0.18.20", "", { "os": "android", "cpu": "x64" }, "sha512-8GDdlePJA8D6zlZYJV/jnrRAi6rOiNaCC/JclcXpB+KIuvfBN4owLtgzY2bsxnx666XjJx2kDPUmnTtR8qKQUg=="],
 
-    "@vitejs/plugin-vue-jsx/@babel/core/debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.18.20", "", { "os": "darwin", "cpu": "arm64" }, "sha512-bxRHW5kHU38zS2lPTPOyuyTm+S+eobPUnTNkdJEfAddYgEcll4xkT8DB9d2008DtTbl7uJag2HuE5NZAZgnNEA=="],
 
-    "@vitejs/plugin-vue-jsx/@babel/core/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.18.20", "", { "os": "darwin", "cpu": "x64" }, "sha512-pc5gxlMDxzm513qPGbCbDukOdsGtKhfxD1zJKXjCCcU7ju50O7MeAZ8c4krSJcOIJGFR+qx21yMMVYwiQvyTyQ=="],
 
-    "@vue-macros/common/unplugin-utils/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.18.20", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-yqDQHy4QHevpMAaxhhIwYPMv1NECwOvIpGCZkECn8w2WFHXjEwrBn3CeNIYsibZ/iZEUemj++M26W3cNR5h+Tw=="],
 
-    "@vue/babel-plugin-jsx/@babel/traverse/debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.18.20", "", { "os": "freebsd", "cpu": "x64" }, "sha512-tgWRPPuQsd3RmBZwarGVHZQvtzfEBOreNuxEMKFcd5DaDn2PbBxfwLcj4+aenoh7ctXcbXmOQIn8HI6mCSw5MQ=="],
 
-    "archiver-utils/glob/minimatch": ["minimatch@9.0.5", "", { "dependencies": { "brace-expansion": "^2.0.1" } }, "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-arm": ["@esbuild/linux-arm@0.18.20", "", { "os": "linux", "cpu": "arm" }, "sha512-/5bHkMWnq1EgKr1V+Ybz3s1hWXok7mDFUMQ4cG10AfW3wL02PSZi5kFpYKrptDsgb2WAJIvRcDm+qIvXf/apvg=="],
 
-    "cross-spawn/which/isexe": ["isexe@2.0.0", "", {}, "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.18.20", "", { "os": "linux", "cpu": "arm64" }, "sha512-2YbscF+UL7SQAVIpnWvYwM+3LskyDmPhe31pE7/aoTMFKKzIc9lLbyGUpmmb8a8AixOL61sQ/mFh3jEjHYFvdA=="],
 
-    "cssnano-preset-default/browserslist/caniuse-lite": ["caniuse-lite@1.0.30001755", "", {}, "sha512-44V+Jm6ctPj7R52Na4TLi3Zri4dWUljJd+RDm+j8LtNCc/ihLCT+X1TzoOAkRETEWqjuLnh9581Tl80FvK7jVA=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.18.20", "", { "os": "linux", "cpu": "ia32" }, "sha512-P4etWwq6IsReT0E1KHU40bOnzMHoH73aXp96Fs8TIT6z9Hu8G6+0SHSw9i2isWrD2nbx2qo5yUqACgdfVGx7TA=="],
 
-    "cssnano-preset-default/browserslist/electron-to-chromium": ["electron-to-chromium@1.5.255", "", {}, "sha512-Z9oIp4HrFF/cZkDPMpz2XSuVpc1THDpT4dlmATFlJUIBVCy9Vap5/rIXsASP1CscBacBqhabwh8vLctqBwEerQ=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.18.20", "", { "os": "linux", "cpu": "none" }, "sha512-nXW8nqBTrOpDLPgPY9uV+/1DjxoQ7DoB2N8eocyq8I9XuqJ7BiAMDMf9n1xZM9TgW0J8zrquIb/A7s3BJv7rjg=="],
 
-    "cssnano-preset-default/browserslist/node-releases": ["node-releases@2.0.27", "", {}, "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.18.20", "", { "os": "linux", "cpu": "none" }, "sha512-d5NeaXZcHp8PzYy5VnXV3VSd2D328Zb+9dEq5HE6bw6+N86JVPExrA6O68OPwobntbNJ0pzCpUFZTo3w0GyetQ=="],
 
-    "cssnano-preset-default/browserslist/update-browserslist-db": ["update-browserslist-db@1.1.4", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-q0SPT4xyU84saUX+tomz1WLkxUbuaJnR1xWt17M7fJtEJigJeWUNGUqrauFXsHnqev9y9JTRGwk13tFBuKby4A=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.18.20", "", { "os": "linux", "cpu": "ppc64" }, "sha512-WHPyeScRNcmANnLQkq6AfyXRFr5D6N2sKgkFo2FqguP44Nw2eyDlbTdZwd9GYk98DZG9QItIiTlFLHJHjxP3FA=="],
 
-    "csso/css-tree/mdn-data": ["mdn-data@2.0.28", "", {}, "sha512-aylIc7Z9y4yzHYAJNuESG3hfhC+0Ibp/MAMiaOZgNv4pmEdFyfZhhhny4MNiAfWdBQ1RQ2mfDWmM1x8SvGyp8g=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.18.20", "", { "os": "linux", "cpu": "none" }, "sha512-WSxo6h5ecI5XH34KC7w5veNnKkju3zBRLEQNY7mv5mtBmrP/MjNBCAlsM2u5hDBlS3NGcTQpoBvRzqBcRtpq1A=="],
 
-    "externality/mlly/acorn": ["acorn@8.14.1", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-OvQ/2pUDKmgfCg++xsTX1wGxfTaszcHVcTctW4UJB4hibJx2HXxxO5UmVgyjMa+ZDsiaf5wWLXYpRWMmBI0QHg=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.18.20", "", { "os": "linux", "cpu": "s390x" }, "sha512-+8231GMs3mAEth6Ja1iK0a1sQ3ohfcpzpRLH8uuc5/KVDFneH6jtAJLFGafpzpMRO6DzJ6AvXKze9LfFMrIHVQ=="],
 
-    "externality/mlly/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-x64": ["@esbuild/linux-x64@0.18.20", "", { "os": "linux", "cpu": "x64" }, "sha512-UYqiqemphJcNsFEskc73jQ7B9jgwjWrSayxawS6UVFZGWrAAtkzjxSqnoclCXxWtfwLdzU+vTpcNYhpn43uP1w=="],
 
-    "externality/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.18.20", "", { "os": "none", "cpu": "x64" }, "sha512-iO1c++VP6xUBUmltHZoMtCUdPlnPGdBom6IrO4gyKPFFVBKioIImVooR5I83nTew5UOYrk3gIJhbZh8X44y06A=="],
 
-    "filelist/minimatch/brace-expansion": ["brace-expansion@2.0.1", "", { "dependencies": { "balanced-match": "^1.0.0" } }, "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.18.20", "", { "os": "openbsd", "cpu": "x64" }, "sha512-e5e4YSsuQfX4cxcygw/UCPIEP6wbIL+se3sxPdCiMbFLBWu0eiZOJ7WoD+ptCLrmjZBK1Wk7I6D/I3NglUGOxg=="],
 
-    "giget/nypm/pkg-types": ["pkg-types@2.1.0", "", { "dependencies": { "confbox": "^0.2.1", "exsolve": "^1.0.1", "pathe": "^2.0.3" } }, "sha512-wmJwA+8ihJixSoHKxZJRBQG1oY8Yr9pGLzRmSsNms0iNWyHHAlZCa7mmKiFR10YPZuz/2k169JiS/inOjBCZ2A=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.18.20", "", { "os": "sunos", "cpu": "x64" }, "sha512-kDbFRFp0YpTQVVrqUd5FTYmWo45zGaXe0X8E1G/LKFC0v8x0vWrhOWSLITcCn63lmZIxfOMXtCfti/RxN/0wnQ=="],
 
-    "giget/nypm/tinyexec": ["tinyexec@0.3.2", "", {}, "sha512-KQQR9yN7R5+OSwaK0XQoj22pwHoTlgYqmUscPYoknOoWCWfj/5/ABTMRi69FrKU5ffPVh5QcFikpWJI/P1ocHA=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.18.20", "", { "os": "win32", "cpu": "arm64" }, "sha512-ddYFR6ItYgoaq4v4JmQQaAI5s7npztfV4Ag6NrhiaW0RrnOXqBkgwZLofVTlq1daVTQNhtI5oieTvkRPfZrePg=="],
 
-    "impound/unplugin/acorn": ["acorn@8.14.1", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-OvQ/2pUDKmgfCg++xsTX1wGxfTaszcHVcTctW4UJB4hibJx2HXxxO5UmVgyjMa+ZDsiaf5wWLXYpRWMmBI0QHg=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.18.20", "", { "os": "win32", "cpu": "ia32" }, "sha512-Wv7QBi3ID/rROT08SABTS7eV4hX26sVduqDOTe1MvGMjNd3EjOz4b7zeexIR62GTIEKrfJXKL9LFxTYgkyeu7g=="],
 
-    "impound/unplugin/picomatch": ["picomatch@4.0.2", "", {}, "sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg=="],
+    "@esbuild-kit/core-utils/esbuild/@esbuild/win32-x64": ["@esbuild/win32-x64@0.18.20", "", { "os": "win32", "cpu": "x64" }, "sha512-kTdfRcSiDfQca/y9QIkng02avJ+NCaQvrMejlsB3RRv5sE9rRoeBPISaZpKxHELzRxZyLvNts1P27W3wV+8geQ=="],
 
-    "lazystream/readable-stream/isarray": ["isarray@1.0.0", "", {}, "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ=="],
+    "@hey-api/codegen-core/c12/confbox": ["confbox@0.2.4", "", {}, "sha512-ysOGlgTFbN2/Y6Cg3Iye8YKulHw+R2fNXHrgSmXISQdMnomY6eNDprVdW9R5xBguEqI954+S6709UyiO7B+6OQ=="],
 
-    "lazystream/readable-stream/safe-buffer": ["safe-buffer@5.1.2", "", {}, "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g=="],
+    "@hey-api/codegen-core/c12/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "lazystream/readable-stream/string_decoder": ["string_decoder@1.1.1", "", { "dependencies": { "safe-buffer": "~5.1.0" } }, "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg=="],
+    "@hey-api/codegen-core/c12/dotenv": ["dotenv@17.4.2", "", {}, "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw=="],
 
-    "listhen/h3/cookie-es": ["cookie-es@1.2.2", "", {}, "sha512-+W7VmiVINB+ywl1HGXJXmrqkOhpKrIiVZV6tQuV54ZyQC7MMuBt81Vc336GMLoHBq5hV/F9eXgt5Mnx0Rha5Fg=="],
+    "@hey-api/codegen-core/c12/giget": ["giget@3.3.1", "", { "bin": { "giget": "dist/cli.mjs" } }, "sha512-r+mvuDjrjMpsdw46Kmeydb8bdHm7wOKw8wNBtTndkjbPjgAp5oUJUxRE76wZFknxIPokfWvep2qSXK37aXE6zg=="],
 
-    "listhen/h3/node-mock-http": ["node-mock-http@1.0.0", "", {}, "sha512-0uGYQ1WQL1M5kKvGRXWQ3uZCHtLTO8hln3oBjIusM75WoesZ909uQJs/Hb946i2SS+Gsrhkaa6iAO17jRIv6DQ=="],
+    "@isaacs/cliui/string-width/emoji-regex": ["emoji-regex@9.2.2", "", {}, "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg=="],
 
-    "listhen/mlly/acorn": ["acorn@8.14.1", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-OvQ/2pUDKmgfCg++xsTX1wGxfTaszcHVcTctW4UJB4hibJx2HXxxO5UmVgyjMa+ZDsiaf5wWLXYpRWMmBI0QHg=="],
+    "@mapbox/node-pre-gyp/tar/chownr": ["chownr@3.0.0", "", {}, "sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g=="],
 
-    "listhen/mlly/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "@mapbox/node-pre-gyp/tar/minipass": ["minipass@7.1.3", "", {}, "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A=="],
 
-    "listhen/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
+    "@mapbox/node-pre-gyp/tar/minizlib": ["minizlib@3.1.0", "", { "dependencies": { "minipass": "^7.1.2" } }, "sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw=="],
 
-    "mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
+    "@mapbox/node-pre-gyp/tar/yallist": ["yallist@5.0.0", "", {}, "sha512-YgvUTfwqyc7UXVMrB+SImsVYSmTS8X/tSrtdNZMImM+n7+QTriRXyXim0mBrTXNeqzVF0KWGgHPeiyViFFrNDw=="],
 
-    "mlly/pkg-types/mlly": ["mlly@1.7.4", "", { "dependencies": { "acorn": "^8.14.0", "pathe": "^2.0.1", "pkg-types": "^1.3.0", "ufo": "^1.5.4" } }, "sha512-qmdSIPC4bDJXgZTCR7XosJiNKySV7O215tsPtDN9iEO/7q/76b/ijtgRu/+epFXSJhijtTCCGp3DWS549P3xKw=="],
+    "@nuxt/devtools-kit/@nuxt/kit/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "nitropack/rollup/@rollup/rollup-android-arm-eabi": ["@rollup/rollup-android-arm-eabi@4.53.2", "", { "os": "android", "cpu": "arm" }, "sha512-yDPzwsgiFO26RJA4nZo8I+xqzh7sJTZIWQOxn+/XOdPE31lAvLIYCKqjV+lNH/vxE2L2iH3plKxDCRK6i+CwhA=="],
+    "@nuxt/devtools/@nuxt/kit/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "nitropack/rollup/@rollup/rollup-android-arm64": ["@rollup/rollup-android-arm64@4.53.2", "", { "os": "android", "cpu": "arm64" }, "sha512-k8FontTxIE7b0/OGKeSN5B6j25EuppBcWM33Z19JoVT7UTXFSo3D9CdU39wGTeb29NO3XxpMNauh09B+Ibw+9g=="],
+    "@nuxt/icon/@nuxt/kit/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "nitropack/rollup/@rollup/rollup-darwin-arm64": ["@rollup/rollup-darwin-arm64@4.53.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-A6s4gJpomNBtJ2yioj8bflM2oogDwzUiMl2yNJ2v9E7++sHrSrsQ29fOfn5DM/iCzpWcebNYEdXpaK4tr2RhfQ=="],
+    "@nuxt/icon/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "nitropack/rollup/@rollup/rollup-darwin-x64": ["@rollup/rollup-darwin-x64@4.53.2", "", { "os": "darwin", "cpu": "x64" }, "sha512-e6XqVmXlHrBlG56obu9gDRPW3O3hLxpwHpLsBJvuI8qqnsrtSZ9ERoWUXtPOkY8c78WghyPHZdmPhHLWNdAGEw=="],
+    "@nuxt/kit/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "nitropack/rollup/@rollup/rollup-freebsd-arm64": ["@rollup/rollup-freebsd-arm64@4.53.2", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-v0E9lJW8VsrwPux5Qe5CwmH/CF/2mQs6xU1MF3nmUxmZUCHazCjLgYvToOk+YuuUqLQBio1qkkREhxhc656ViA=="],
+    "@nuxt/kit/unctx/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "nitropack/rollup/@rollup/rollup-freebsd-x64": ["@rollup/rollup-freebsd-x64@4.53.2", "", { "os": "freebsd", "cpu": "x64" }, "sha512-ClAmAPx3ZCHtp6ysl4XEhWU69GUB1D+s7G9YjHGhIGCSrsg00nEGRRZHmINYxkdoJehde8VIsDC5t9C0gb6yqA=="],
+    "@nuxt/kit/unctx/unplugin": ["unplugin@2.3.11", "", { "dependencies": { "@jridgewell/remapping": "^2.3.5", "acorn": "^8.15.0", "picomatch": "^4.0.3", "webpack-virtual-modules": "^0.6.2" } }, "sha512-5uKD0nqiYVzlmCRs01Fhs2BdkEgBS3SAVP6ndrBsuK42iC2+JHyxM05Rm9G8+5mkmRtzMZGY8Ct5+mliZxU/Ww=="],
 
-    "nitropack/rollup/@rollup/rollup-linux-arm-gnueabihf": ["@rollup/rollup-linux-arm-gnueabihf@4.53.2", "", { "os": "linux", "cpu": "arm" }, "sha512-EPlb95nUsz6Dd9Qy13fI5kUPXNSljaG9FiJ4YUGU1O/Q77i5DYFW5KR8g1OzTcdZUqQQ1KdDqsTohdFVwCwjqg=="],
+    "@nuxt/kit/unimport/magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="],
 
-    "nitropack/rollup/@rollup/rollup-linux-arm-musleabihf": ["@rollup/rollup-linux-arm-musleabihf@4.53.2", "", { "os": "linux", "cpu": "arm" }, "sha512-BOmnVW+khAUX+YZvNfa0tGTEMVVEerOxN0pDk2E6N6DsEIa2Ctj48FOMfNDdrwinocKaC7YXUZ1pHlKpnkja/Q=="],
+    "@nuxt/kit/unimport/pkg-types": ["pkg-types@2.3.3", "", { "dependencies": { "confbox": "^0.3.1", "exsolve": "^1.1.1", "pathe": "^2.0.3" } }, "sha512-j/lCFdcppV0JxWpCEITdbDltBxPP6cHT+yNJ6Go2OgoSA9518X847X9z0p6LtA4Nc16+eQzCZjRrWanTGvHJ5w=="],
 
-    "nitropack/rollup/@rollup/rollup-linux-arm64-gnu": ["@rollup/rollup-linux-arm64-gnu@4.53.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-Xt2byDZ+6OVNuREgBXr4+CZDJtrVso5woFtpKdGPhpTPHcNG7D8YXeQzpNbFRxzTVqJf7kvPMCub/pcGUWgBjA=="],
+    "@nuxt/kit/unimport/strip-literal": ["strip-literal@3.1.0", "", { "dependencies": { "js-tokens": "^9.0.1" } }, "sha512-8r3mkIM/2+PpjHoOtiAW8Rg3jJLHaV7xPwG+YRGrv6FP0wwk/toTpATxWYOW0BKdWwl82VT2tFYi5DlROa0Mxg=="],
 
-    "nitropack/rollup/@rollup/rollup-linux-arm64-musl": ["@rollup/rollup-linux-arm64-musl@4.53.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-+LdZSldy/I9N8+klim/Y1HsKbJ3BbInHav5qE9Iy77dtHC/pibw1SR/fXlWyAk0ThnpRKoODwnAuSjqxFRDHUQ=="],
+    "@nuxt/kit/unimport/unplugin": ["unplugin@2.3.11", "", { "dependencies": { "@jridgewell/remapping": "^2.3.5", "acorn": "^8.15.0", "picomatch": "^4.0.3", "webpack-virtual-modules": "^0.6.2" } }, "sha512-5uKD0nqiYVzlmCRs01Fhs2BdkEgBS3SAVP6ndrBsuK42iC2+JHyxM05Rm9G8+5mkmRtzMZGY8Ct5+mliZxU/Ww=="],
 
-    "nitropack/rollup/@rollup/rollup-linux-riscv64-gnu": ["@rollup/rollup-linux-riscv64-gnu@4.53.2", "", { "os": "linux", "cpu": "none" }, "sha512-fMjKi+ojnmIvhk34gZP94vjogXNNUKMEYs+EDaB/5TG/wUkoeua7p7VCHnE6T2Tx+iaghAqQX8teQzcvrYpaQA=="],
+    "@nuxt/kit/unimport/unplugin-utils": ["unplugin-utils@0.2.5", "", { "dependencies": { "pathe": "^2.0.3", "picomatch": "^4.0.3" } }, "sha512-gwXJnPRewT4rT7sBi/IvxKTjsms7jX7QIDLOClApuZwR49SXbrB1z2NLUZ+vDHyqCj/n58OzRRqaW+B8OZi8vg=="],
 
-    "nitropack/rollup/@rollup/rollup-linux-riscv64-musl": ["@rollup/rollup-linux-riscv64-musl@4.53.2", "", { "os": "linux", "cpu": "none" }, "sha512-XuGFGU+VwUUV5kLvoAdi0Wz5Xbh2SrjIxCtZj6Wq8MDp4bflb/+ThZsVxokM7n0pcbkEr2h5/pzqzDYI7cCgLQ=="],
+    "@nuxt/kit/untyped/@babel/types": ["@babel/types@7.29.8", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg=="],
 
-    "nitropack/rollup/@rollup/rollup-linux-s390x-gnu": ["@rollup/rollup-linux-s390x-gnu@4.53.2", "", { "os": "linux", "cpu": "s390x" }, "sha512-w6yjZF0P+NGzWR3AXWX9zc0DNEGdtvykB03uhonSHMRa+oWA6novflo2WaJr6JZakG2ucsyb+rvhrKac6NIy+w=="],
+    "@nuxt/kit/untyped/citty": ["citty@0.1.6", "", { "dependencies": { "consola": "^3.2.3" } }, "sha512-tskPPKEs8D2KPafUypv2gxwJP8h/OaJmC82QQGGDQcHvXX43xF2VDACcJVmZ0EuSxkpO9Kc4MlrA3q0+FG58AQ=="],
 
-    "nitropack/rollup/@rollup/rollup-linux-x64-gnu": ["@rollup/rollup-linux-x64-gnu@4.53.2", "", { "os": "linux", "cpu": "x64" }, "sha512-yo8d6tdfdeBArzC7T/PnHd7OypfI9cbuZzPnzLJIyKYFhAQ8SvlkKtKBMbXDxe1h03Rcr7u++nFS7tqXz87Gtw=="],
+    "@nuxt/ui/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "nitropack/rollup/@rollup/rollup-linux-x64-musl": ["@rollup/rollup-linux-x64-musl@4.53.2", "", { "os": "linux", "cpu": "x64" }, "sha512-ah59c1YkCxKExPP8O9PwOvs+XRLKwh/mV+3YdKqQ5AMQ0r4M4ZDuOrpWkUaqO7fzAHdINzV9tEVu8vNw48z0lA=="],
+    "@nuxtjs/color-mode/@nuxt/kit/defu": ["defu@6.1.7", "", {}, "sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ=="],
 
-    "nitropack/rollup/@rollup/rollup-win32-arm64-msvc": ["@rollup/rollup-win32-arm64-msvc@4.53.2", "", { "os": "win32", "cpu": "arm64" }, "sha512-IlbHFYc/pQCgew/d5fslcy1KEaYVCJ44G8pajugd8VoOEI8ODhtb/j8XMhLpwHCMB3yk2J07ctup10gpw2nyMA=="],
+    "@tailwindcss/node/lightningcss/detect-libc": ["detect-libc@2.1.2", "", {}, "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ=="],
 
-    "nitropack/rollup/@rollup/rollup-win32-ia32-msvc": ["@rollup/rollup-win32-ia32-msvc@4.53.2", "", { "os": "win32", "cpu": "ia32" }, "sha512-lNlPEGgdUfSzdCWU176ku/dQRnA7W+Gp8d+cWv73jYrb8uT7HTVVxq62DUYxjbaByuf1Yk0RIIAbDzp+CnOTFg=="],
+    "@tailwindcss/node/lightningcss/lightningcss-android-arm64": ["lightningcss-android-arm64@1.32.0", "", { "os": "android", "cpu": "arm64" }, "sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg=="],
 
-    "nitropack/rollup/@rollup/rollup-win32-x64-msvc": ["@rollup/rollup-win32-x64-msvc@4.53.2", "", { "os": "win32", "cpu": "x64" }, "sha512-k+/Rkcyx//P6fetPoLMb8pBeqJBNGx81uuf7iljX9++yNBVRDQgD04L+SVXmXmh5ZP4/WOp4mWF0kmi06PW2tA=="],
+    "@tailwindcss/node/lightningcss/lightningcss-darwin-arm64": ["lightningcss-darwin-arm64@1.32.0", "", { "os": "darwin", "cpu": "arm64" }, "sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ=="],
 
-    "nitropack/rollup/@types/estree": ["@types/estree@1.0.8", "", {}, "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w=="],
+    "@tailwindcss/node/lightningcss/lightningcss-darwin-x64": ["lightningcss-darwin-x64@1.32.0", "", { "os": "darwin", "cpu": "x64" }, "sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w=="],
 
-    "postcss-colormin/browserslist/caniuse-lite": ["caniuse-lite@1.0.30001755", "", {}, "sha512-44V+Jm6ctPj7R52Na4TLi3Zri4dWUljJd+RDm+j8LtNCc/ihLCT+X1TzoOAkRETEWqjuLnh9581Tl80FvK7jVA=="],
+    "@tailwindcss/node/lightningcss/lightningcss-freebsd-x64": ["lightningcss-freebsd-x64@1.32.0", "", { "os": "freebsd", "cpu": "x64" }, "sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig=="],
 
-    "postcss-colormin/browserslist/electron-to-chromium": ["electron-to-chromium@1.5.255", "", {}, "sha512-Z9oIp4HrFF/cZkDPMpz2XSuVpc1THDpT4dlmATFlJUIBVCy9Vap5/rIXsASP1CscBacBqhabwh8vLctqBwEerQ=="],
+    "@tailwindcss/node/lightningcss/lightningcss-linux-arm-gnueabihf": ["lightningcss-linux-arm-gnueabihf@1.32.0", "", { "os": "linux", "cpu": "arm" }, "sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw=="],
 
-    "postcss-colormin/browserslist/node-releases": ["node-releases@2.0.27", "", {}, "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA=="],
+    "@tailwindcss/node/lightningcss/lightningcss-linux-arm64-gnu": ["lightningcss-linux-arm64-gnu@1.32.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ=="],
 
-    "postcss-colormin/browserslist/update-browserslist-db": ["update-browserslist-db@1.1.4", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-q0SPT4xyU84saUX+tomz1WLkxUbuaJnR1xWt17M7fJtEJigJeWUNGUqrauFXsHnqev9y9JTRGwk13tFBuKby4A=="],
+    "@tailwindcss/node/lightningcss/lightningcss-linux-arm64-musl": ["lightningcss-linux-arm64-musl@1.32.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg=="],
 
-    "postcss-convert-values/browserslist/caniuse-lite": ["caniuse-lite@1.0.30001755", "", {}, "sha512-44V+Jm6ctPj7R52Na4TLi3Zri4dWUljJd+RDm+j8LtNCc/ihLCT+X1TzoOAkRETEWqjuLnh9581Tl80FvK7jVA=="],
+    "@tailwindcss/node/lightningcss/lightningcss-linux-x64-gnu": ["lightningcss-linux-x64-gnu@1.32.0", "", { "os": "linux", "cpu": "x64" }, "sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA=="],
 
-    "postcss-convert-values/browserslist/electron-to-chromium": ["electron-to-chromium@1.5.255", "", {}, "sha512-Z9oIp4HrFF/cZkDPMpz2XSuVpc1THDpT4dlmATFlJUIBVCy9Vap5/rIXsASP1CscBacBqhabwh8vLctqBwEerQ=="],
+    "@tailwindcss/node/lightningcss/lightningcss-linux-x64-musl": ["lightningcss-linux-x64-musl@1.32.0", "", { "os": "linux", "cpu": "x64" }, "sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg=="],
 
-    "postcss-convert-values/browserslist/node-releases": ["node-releases@2.0.27", "", {}, "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA=="],
+    "@tailwindcss/node/lightningcss/lightningcss-win32-arm64-msvc": ["lightningcss-win32-arm64-msvc@1.32.0", "", { "os": "win32", "cpu": "arm64" }, "sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw=="],
 
-    "postcss-convert-values/browserslist/update-browserslist-db": ["update-browserslist-db@1.1.4", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-q0SPT4xyU84saUX+tomz1WLkxUbuaJnR1xWt17M7fJtEJigJeWUNGUqrauFXsHnqev9y9JTRGwk13tFBuKby4A=="],
+    "@tailwindcss/node/lightningcss/lightningcss-win32-x64-msvc": ["lightningcss-win32-x64-msvc@1.32.0", "", { "os": "win32", "cpu": "x64" }, "sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q=="],
 
-    "postcss-merge-rules/browserslist/caniuse-lite": ["caniuse-lite@1.0.30001755", "", {}, "sha512-44V+Jm6ctPj7R52Na4TLi3Zri4dWUljJd+RDm+j8LtNCc/ihLCT+X1TzoOAkRETEWqjuLnh9581Tl80FvK7jVA=="],
+    "@vue/babel-plugin-jsx/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "postcss-merge-rules/browserslist/electron-to-chromium": ["electron-to-chromium@1.5.255", "", {}, "sha512-Z9oIp4HrFF/cZkDPMpz2XSuVpc1THDpT4dlmATFlJUIBVCy9Vap5/rIXsASP1CscBacBqhabwh8vLctqBwEerQ=="],
+    "@vue/babel-plugin-jsx/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "postcss-merge-rules/browserslist/node-releases": ["node-releases@2.0.27", "", {}, "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA=="],
+    "archiver-utils/glob/minimatch": ["minimatch@9.0.9", "", { "dependencies": { "brace-expansion": "^2.0.2" } }, "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg=="],
 
-    "postcss-merge-rules/browserslist/update-browserslist-db": ["update-browserslist-db@1.1.4", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-q0SPT4xyU84saUX+tomz1WLkxUbuaJnR1xWt17M7fJtEJigJeWUNGUqrauFXsHnqev9y9JTRGwk13tFBuKby4A=="],
+    "archiver-utils/glob/minipass": ["minipass@7.1.3", "", {}, "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A=="],
 
-    "postcss-minify-params/browserslist/caniuse-lite": ["caniuse-lite@1.0.30001755", "", {}, "sha512-44V+Jm6ctPj7R52Na4TLi3Zri4dWUljJd+RDm+j8LtNCc/ihLCT+X1TzoOAkRETEWqjuLnh9581Tl80FvK7jVA=="],
+    "archiver-utils/glob/path-scurry": ["path-scurry@1.11.1", "", { "dependencies": { "lru-cache": "^10.2.0", "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0" } }, "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA=="],
 
-    "postcss-minify-params/browserslist/electron-to-chromium": ["electron-to-chromium@1.5.255", "", {}, "sha512-Z9oIp4HrFF/cZkDPMpz2XSuVpc1THDpT4dlmATFlJUIBVCy9Vap5/rIXsASP1CscBacBqhabwh8vLctqBwEerQ=="],
+    "c12/chokidar/readdirp": ["readdirp@4.1.2", "", {}, "sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg=="],
 
-    "postcss-minify-params/browserslist/node-releases": ["node-releases@2.0.27", "", {}, "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA=="],
+    "cross-spawn/which/isexe": ["isexe@2.0.0", "", {}, "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw=="],
 
-    "postcss-minify-params/browserslist/update-browserslist-db": ["update-browserslist-db@1.1.4", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-q0SPT4xyU84saUX+tomz1WLkxUbuaJnR1xWt17M7fJtEJigJeWUNGUqrauFXsHnqev9y9JTRGwk13tFBuKby4A=="],
+    "fontless/esbuild/@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.27.7", "", { "os": "aix", "cpu": "ppc64" }, "sha512-EKX3Qwmhz1eMdEJokhALr0YiD0lhQNwDqkPYyPhiSwKrh7/4KRjQc04sZ8db+5DVVnZ1LmbNDI1uAMPEUBnQPg=="],
 
-    "postcss-normalize-unicode/browserslist/caniuse-lite": ["caniuse-lite@1.0.30001755", "", {}, "sha512-44V+Jm6ctPj7R52Na4TLi3Zri4dWUljJd+RDm+j8LtNCc/ihLCT+X1TzoOAkRETEWqjuLnh9581Tl80FvK7jVA=="],
+    "fontless/esbuild/@esbuild/android-arm": ["@esbuild/android-arm@0.27.7", "", { "os": "android", "cpu": "arm" }, "sha512-jbPXvB4Yj2yBV7HUfE2KHe4GJX51QplCN1pGbYjvsyCZbQmies29EoJbkEc+vYuU5o45AfQn37vZlyXy4YJ8RQ=="],
 
-    "postcss-normalize-unicode/browserslist/electron-to-chromium": ["electron-to-chromium@1.5.255", "", {}, "sha512-Z9oIp4HrFF/cZkDPMpz2XSuVpc1THDpT4dlmATFlJUIBVCy9Vap5/rIXsASP1CscBacBqhabwh8vLctqBwEerQ=="],
+    "fontless/esbuild/@esbuild/android-arm64": ["@esbuild/android-arm64@0.27.7", "", { "os": "android", "cpu": "arm64" }, "sha512-62dPZHpIXzvChfvfLJow3q5dDtiNMkwiRzPylSCfriLvZeq0a1bWChrGx/BbUbPwOrsWKMn8idSllklzBy+dgQ=="],
 
-    "postcss-normalize-unicode/browserslist/node-releases": ["node-releases@2.0.27", "", {}, "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA=="],
+    "fontless/esbuild/@esbuild/android-x64": ["@esbuild/android-x64@0.27.7", "", { "os": "android", "cpu": "x64" }, "sha512-x5VpMODneVDb70PYV2VQOmIUUiBtY3D3mPBG8NxVk5CogneYhkR7MmM3yR/uMdITLrC1ml/NV1rj4bMJuy9MCg=="],
 
-    "postcss-normalize-unicode/browserslist/update-browserslist-db": ["update-browserslist-db@1.1.4", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-q0SPT4xyU84saUX+tomz1WLkxUbuaJnR1xWt17M7fJtEJigJeWUNGUqrauFXsHnqev9y9JTRGwk13tFBuKby4A=="],
+    "fontless/esbuild/@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.27.7", "", { "os": "darwin", "cpu": "arm64" }, "sha512-5lckdqeuBPlKUwvoCXIgI2D9/ABmPq3Rdp7IfL70393YgaASt7tbju3Ac+ePVi3KDH6N2RqePfHnXkaDtY9fkw=="],
 
-    "postcss-reduce-initial/browserslist/caniuse-lite": ["caniuse-lite@1.0.30001755", "", {}, "sha512-44V+Jm6ctPj7R52Na4TLi3Zri4dWUljJd+RDm+j8LtNCc/ihLCT+X1TzoOAkRETEWqjuLnh9581Tl80FvK7jVA=="],
+    "fontless/esbuild/@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.27.7", "", { "os": "darwin", "cpu": "x64" }, "sha512-rYnXrKcXuT7Z+WL5K980jVFdvVKhCHhUwid+dDYQpH+qu+TefcomiMAJpIiC2EM3Rjtq0sO3StMV/+3w3MyyqQ=="],
 
-    "postcss-reduce-initial/browserslist/electron-to-chromium": ["electron-to-chromium@1.5.255", "", {}, "sha512-Z9oIp4HrFF/cZkDPMpz2XSuVpc1THDpT4dlmATFlJUIBVCy9Vap5/rIXsASP1CscBacBqhabwh8vLctqBwEerQ=="],
+    "fontless/esbuild/@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.27.7", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-B48PqeCsEgOtzME2GbNM2roU29AMTuOIN91dsMO30t+Ydis3z/3Ngoj5hhnsOSSwNzS+6JppqWsuhTp6E82l2w=="],
 
-    "postcss-reduce-initial/browserslist/node-releases": ["node-releases@2.0.27", "", {}, "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA=="],
+    "fontless/esbuild/@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.27.7", "", { "os": "freebsd", "cpu": "x64" }, "sha512-jOBDK5XEjA4m5IJK3bpAQF9/Lelu/Z9ZcdhTRLf4cajlB+8VEhFFRjWgfy3M1O4rO2GQ/b2dLwCUGpiF/eATNQ=="],
 
-    "postcss-reduce-initial/browserslist/update-browserslist-db": ["update-browserslist-db@1.1.4", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-q0SPT4xyU84saUX+tomz1WLkxUbuaJnR1xWt17M7fJtEJigJeWUNGUqrauFXsHnqev9y9JTRGwk13tFBuKby4A=="],
+    "fontless/esbuild/@esbuild/linux-arm": ["@esbuild/linux-arm@0.27.7", "", { "os": "linux", "cpu": "arm" }, "sha512-RkT/YXYBTSULo3+af8Ib0ykH8u2MBh57o7q/DAs3lTJlyVQkgQvlrPTnjIzzRPQyavxtPtfg0EopvDyIt0j1rA=="],
 
-    "readdir-glob/minimatch/brace-expansion": ["brace-expansion@2.0.1", "", { "dependencies": { "balanced-match": "^1.0.0" } }, "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA=="],
+    "fontless/esbuild/@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.27.7", "", { "os": "linux", "cpu": "arm64" }, "sha512-RZPHBoxXuNnPQO9rvjh5jdkRmVizktkT7TCDkDmQ0W2SwHInKCAV95GRuvdSvA7w4VMwfCjUiPwDi0ZO6Nfe9A=="],
 
-    "rollup-plugin-visualizer/open/define-lazy-prop": ["define-lazy-prop@2.0.0", "", {}, "sha512-Ds09qNh8yw3khSjiJjiUInaGX9xlqZDY7JVryGxdxV7NPeuqQfplOpQ66yJFZut3jLa5zOwkXw1g9EI2uKh4Og=="],
+    "fontless/esbuild/@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.27.7", "", { "os": "linux", "cpu": "ia32" }, "sha512-GA48aKNkyQDbd3KtkplYWT102C5sn/EZTY4XROkxONgruHPU72l+gW+FfF8tf2cFjeHaRbWpOYa/uRBz/Xq1Pg=="],
 
-    "rollup-plugin-visualizer/open/is-docker": ["is-docker@2.2.1", "", { "bin": { "is-docker": "cli.js" } }, "sha512-F+i2BKsFrH66iaUFc0woD8sLy8getkwTwtOBjvs56Cx4CgJDeKQeqfz8wAYiSb8JOprWhHH5p77PbmYCvvUuXQ=="],
+    "fontless/esbuild/@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.27.7", "", { "os": "linux", "cpu": "none" }, "sha512-a4POruNM2oWsD4WKvBSEKGIiWQF8fZOAsycHOt6JBpZ+JN2n2JH9WAv56SOyu9X5IqAjqSIPTaJkqN8F7XOQ5Q=="],
 
-    "rollup-plugin-visualizer/open/is-wsl": ["is-wsl@2.2.0", "", { "dependencies": { "is-docker": "^2.0.0" } }, "sha512-fKzAra0rGJUUBwGBgNkHZuToZcn+TtXHpeCgmkMJMMYx1sQDYaCSyjJBSCa2nH1DGm7s3n1oBnohoVTBaN7Lww=="],
+    "fontless/esbuild/@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.27.7", "", { "os": "linux", "cpu": "none" }, "sha512-KabT5I6StirGfIz0FMgl1I+R1H73Gp0ofL9A3nG3i/cYFJzKHhouBV5VWK1CSgKvVaG4q1RNpCTR2LuTVB3fIw=="],
 
-    "unctx/magic-string/@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
+    "fontless/esbuild/@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.27.7", "", { "os": "linux", "cpu": "ppc64" }, "sha512-gRsL4x6wsGHGRqhtI+ifpN/vpOFTQtnbsupUF5R5YTAg+y/lKelYR1hXbnBdzDjGbMYjVJLJTd2OFmMewAgwlQ=="],
 
-    "unctx/unplugin/picomatch": ["picomatch@4.0.2", "", {}, "sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg=="],
+    "fontless/esbuild/@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.27.7", "", { "os": "linux", "cpu": "none" }, "sha512-hL25LbxO1QOngGzu2U5xeXtxXcW+/GvMN3ejANqXkxZ/opySAZMrc+9LY/WyjAan41unrR3YrmtTsUpwT66InQ=="],
 
-    "vite-node/vite/rollup": ["rollup@4.53.2", "", { "dependencies": { "@types/estree": "1.0.8" }, "optionalDependencies": { "@rollup/rollup-android-arm-eabi": "4.53.2", "@rollup/rollup-android-arm64": "4.53.2", "@rollup/rollup-darwin-arm64": "4.53.2", "@rollup/rollup-darwin-x64": "4.53.2", "@rollup/rollup-freebsd-arm64": "4.53.2", "@rollup/rollup-freebsd-x64": "4.53.2", "@rollup/rollup-linux-arm-gnueabihf": "4.53.2", "@rollup/rollup-linux-arm-musleabihf": "4.53.2", "@rollup/rollup-linux-arm64-gnu": "4.53.2", "@rollup/rollup-linux-arm64-musl": "4.53.2", "@rollup/rollup-linux-loong64-gnu": "4.53.2", "@rollup/rollup-linux-ppc64-gnu": "4.53.2", "@rollup/rollup-linux-riscv64-gnu": "4.53.2", "@rollup/rollup-linux-riscv64-musl": "4.53.2", "@rollup/rollup-linux-s390x-gnu": "4.53.2", "@rollup/rollup-linux-x64-gnu": "4.53.2", "@rollup/rollup-linux-x64-musl": "4.53.2", "@rollup/rollup-openharmony-arm64": "4.53.2", "@rollup/rollup-win32-arm64-msvc": "4.53.2", "@rollup/rollup-win32-ia32-msvc": "4.53.2", "@rollup/rollup-win32-x64-gnu": "4.53.2", "@rollup/rollup-win32-x64-msvc": "4.53.2", "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-MHngMYwGJVi6Fmnk6ISmnk7JAHRNF0UkuucA0CUW3N3a4KnONPEZz+vUanQP/ZC/iY1Qkf3bwPWzyY84wEks1g=="],
+    "fontless/esbuild/@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.27.7", "", { "os": "linux", "cpu": "s390x" }, "sha512-2k8go8Ycu1Kb46vEelhu1vqEP+UeRVj2zY1pSuPdgvbd5ykAw82Lrro28vXUrRmzEsUV0NzCf54yARIK8r0fdw=="],
 
-    "vite-plugin-checker/npm-run-path/path-key": ["path-key@4.0.0", "", {}, "sha512-haREypq7xkM7ErfgIyA0z+Bj4AGKlMSdlQE2jvJo6huWD1EdkKYV+G/T4nq0YEF2vgTT8kqMFKo1uHn950r4SQ=="],
+    "fontless/esbuild/@esbuild/linux-x64": ["@esbuild/linux-x64@0.27.7", "", { "os": "linux", "cpu": "x64" }, "sha512-hzznmADPt+OmsYzw1EE33ccA+HPdIqiCRq7cQeL1Jlq2gb1+OyWBkMCrYGBJ+sxVzve2ZJEVeePbLM2iEIZSxA=="],
 
-    "vite-plugin-inspect/unplugin-utils/pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="],
+    "fontless/esbuild/@esbuild/netbsd-arm64": ["@esbuild/netbsd-arm64@0.27.7", "", { "os": "none", "cpu": "arm64" }, "sha512-b6pqtrQdigZBwZxAn1UpazEisvwaIDvdbMbmrly7cDTMFnw/+3lVxxCTGOrkPVnsYIosJJXAsILG9XcQS+Yu6w=="],
 
-    "vite-plugin-pwa/tinyglobby/fdir": ["fdir@6.4.4", "", { "peerDependencies": { "picomatch": "^3 || ^4" }, "optionalPeers": ["picomatch"] }, "sha512-1NZP+GK4GfuAv3PqKvxQRDMjdSRZjnkq7KfhlNrCNNlZ0ygQFpebfrnfnq/W7fpUnAv9aGWmY1zKx7FYL3gwhg=="],
+    "fontless/esbuild/@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.27.7", "", { "os": "none", "cpu": "x64" }, "sha512-OfatkLojr6U+WN5EDYuoQhtM+1xco+/6FSzJJnuWiUw5eVcicbyK3dq5EeV/QHT1uy6GoDhGbFpprUiHUYggrw=="],
 
-    "vite-plugin-pwa/tinyglobby/picomatch": ["picomatch@4.0.2", "", {}, "sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg=="],
+    "fontless/esbuild/@esbuild/openbsd-arm64": ["@esbuild/openbsd-arm64@0.27.7", "", { "os": "openbsd", "cpu": "arm64" }, "sha512-AFuojMQTxAz75Fo8idVcqoQWEHIXFRbOc1TrVcFSgCZtQfSdc1RXgB3tjOn/krRHENUB4j00bfGjyl2mJrU37A=="],
 
-    "vite/esbuild/@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.25.4", "", { "os": "aix", "cpu": "ppc64" }, "sha512-1VCICWypeQKhVbE9oW/sJaAmjLxhVqacdkvPLEjwlttjfwENRSClS8EjBz0KzRyFSCPDIkuXW34Je/vk7zdB7Q=="],
+    "fontless/esbuild/@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.27.7", "", { "os": "openbsd", "cpu": "x64" }, "sha512-+A1NJmfM8WNDv5CLVQYJ5PshuRm/4cI6WMZRg1by1GwPIQPCTs1GLEUHwiiQGT5zDdyLiRM/l1G0Pv54gvtKIg=="],
 
-    "vite/esbuild/@esbuild/android-arm": ["@esbuild/android-arm@0.25.4", "", { "os": "android", "cpu": "arm" }, "sha512-QNdQEps7DfFwE3hXiU4BZeOV68HHzYwGd0Nthhd3uCkkEKK7/R6MTgM0P7H7FAs5pU/DIWsviMmEGxEoxIZ+ZQ=="],
+    "fontless/esbuild/@esbuild/openharmony-arm64": ["@esbuild/openharmony-arm64@0.27.7", "", { "os": "none", "cpu": "arm64" }, "sha512-+KrvYb/C8zA9CU/g0sR6w2RBw7IGc5J2BPnc3dYc5VJxHCSF1yNMxTV5LQ7GuKteQXZtspjFbiuW5/dOj7H4Yw=="],
 
-    "vite/esbuild/@esbuild/android-arm64": ["@esbuild/android-arm64@0.25.4", "", { "os": "android", "cpu": "arm64" }, "sha512-bBy69pgfhMGtCnwpC/x5QhfxAz/cBgQ9enbtwjf6V9lnPI/hMyT9iWpR1arm0l3kttTr4L0KSLpKmLp/ilKS9A=="],
+    "fontless/esbuild/@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.27.7", "", { "os": "sunos", "cpu": "x64" }, "sha512-ikktIhFBzQNt/QDyOL580ti9+5mL/YZeUPKU2ivGtGjdTYoqz6jObj6nOMfhASpS4GU4Q/Clh1QtxWAvcYKamA=="],
 
-    "vite/esbuild/@esbuild/android-x64": ["@esbuild/android-x64@0.25.4", "", { "os": "android", "cpu": "x64" }, "sha512-TVhdVtQIFuVpIIR282btcGC2oGQoSfZfmBdTip2anCaVYcqWlZXGcdcKIUklfX2wj0JklNYgz39OBqh2cqXvcQ=="],
+    "fontless/esbuild/@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.27.7", "", { "os": "win32", "cpu": "arm64" }, "sha512-7yRhbHvPqSpRUV7Q20VuDwbjW5kIMwTHpptuUzV+AA46kiPze5Z7qgt6CLCK3pWFrHeNfDd1VKgyP4O+ng17CA=="],
 
-    "vite/esbuild/@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.25.4", "", { "os": "darwin", "cpu": "arm64" }, "sha512-Y1giCfM4nlHDWEfSckMzeWNdQS31BQGs9/rouw6Ub91tkK79aIMTH3q9xHvzH8d0wDru5Ci0kWB8b3up/nl16g=="],
+    "fontless/esbuild/@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.27.7", "", { "os": "win32", "cpu": "ia32" }, "sha512-SmwKXe6VHIyZYbBLJrhOoCJRB/Z1tckzmgTLfFYOfpMAx63BJEaL9ExI8x7v0oAO3Zh6D/Oi1gVxEYr5oUCFhw=="],
 
-    "vite/esbuild/@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.25.4", "", { "os": "darwin", "cpu": "x64" }, "sha512-CJsry8ZGM5VFVeyUYB3cdKpd/H69PYez4eJh1W/t38vzutdjEjtP7hB6eLKBoOdxcAlCtEYHzQ/PJ/oU9I4u0A=="],
+    "fontless/esbuild/@esbuild/win32-x64": ["@esbuild/win32-x64@0.27.7", "", { "os": "win32", "cpu": "x64" }, "sha512-56hiAJPhwQ1R4i+21FVF7V8kSD5zZTdHcVuRFMW0hn753vVfQN8xlx4uOPT4xoGH0Z/oVATuR82AiqSTDIpaHg=="],
 
-    "vite/esbuild/@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.25.4", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-yYq+39NlTRzU2XmoPW4l5Ifpl9fqSk0nAJYM/V/WUGPEFfek1epLHJIkTQM6bBs1swApjO5nWgvr843g6TjxuQ=="],
+    "lazystream/readable-stream/safe-buffer": ["safe-buffer@5.1.2", "", {}, "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g=="],
 
-    "vite/esbuild/@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.25.4", "", { "os": "freebsd", "cpu": "x64" }, "sha512-0FgvOJ6UUMflsHSPLzdfDnnBBVoCDtBTVyn/MrWloUNvq/5SFmh13l3dvgRPkDihRxb77Y17MbqbCAa2strMQQ=="],
+    "lazystream/readable-stream/string_decoder": ["string_decoder@1.1.1", "", { "dependencies": { "safe-buffer": "~5.1.0" } }, "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg=="],
 
-    "vite/esbuild/@esbuild/linux-arm": ["@esbuild/linux-arm@0.25.4", "", { "os": "linux", "cpu": "arm" }, "sha512-kro4c0P85GMfFYqW4TWOpvmF8rFShbWGnrLqlzp4X1TNWjRY3JMYUfDCtOxPKOIY8B0WC8HN51hGP4I4hz4AaQ=="],
+    "local-pkg/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "vite/esbuild/@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.25.4", "", { "os": "linux", "cpu": "arm64" }, "sha512-+89UsQTfXdmjIvZS6nUnOOLoXnkUTB9hR5QAeLrQdzOSWZvNSAXAtcRDHWtqAUtAmv7ZM1WPOOeSxDzzzMogiQ=="],
+    "magic-regexp/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "vite/esbuild/@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.25.4", "", { "os": "linux", "cpu": "ia32" }, "sha512-yTEjoapy8UP3rv8dB0ip3AfMpRbyhSN3+hY8mo/i4QXFeDxmiYbEKp3ZRjBKcOP862Ua4b1PDfwlvbuwY7hIGQ=="],
+    "magicast/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "vite/esbuild/@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.25.4", "", { "os": "linux", "cpu": "none" }, "sha512-NeqqYkrcGzFwi6CGRGNMOjWGGSYOpqwCjS9fvaUlX5s3zwOtn1qwg1s2iE2svBe4Q/YOG1q6875lcAoQK/F4VA=="],
+    "magicast/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "vite/esbuild/@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.25.4", "", { "os": "linux", "cpu": "none" }, "sha512-IcvTlF9dtLrfL/M8WgNI/qJYBENP3ekgsHbYUIzEzq5XJzzVEV/fXY9WFPfEEXmu3ck2qJP8LG/p3Q8f7Zc2Xg=="],
+    "mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "vite/esbuild/@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.25.4", "", { "os": "linux", "cpu": "ppc64" }, "sha512-HOy0aLTJTVtoTeGZh4HSXaO6M95qu4k5lJcH4gxv56iaycfz1S8GO/5Jh6X4Y1YiI0h7cRyLi+HixMR+88swag=="],
+    "mlly/pkg-types/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "vite/esbuild/@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.25.4", "", { "os": "linux", "cpu": "none" }, "sha512-i8JUDAufpz9jOzo4yIShCTcXzS07vEgWzyX3NH2G7LEFVgrLEhjwL3ajFE4fZI3I4ZgiM7JH3GQ7ReObROvSUA=="],
+    "nitropack/c12/dotenv": ["dotenv@17.4.2", "", {}, "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw=="],
 
-    "vite/esbuild/@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.25.4", "", { "os": "linux", "cpu": "s390x" }, "sha512-jFnu+6UbLlzIjPQpWCNh5QtrcNfMLjgIavnwPQAfoGx4q17ocOU9MsQ2QVvFxwQoWpZT8DvTLooTvmOQXkO51g=="],
+    "nitropack/c12/giget": ["giget@3.3.1", "", { "bin": { "giget": "dist/cli.mjs" } }, "sha512-r+mvuDjrjMpsdw46Kmeydb8bdHm7wOKw8wNBtTndkjbPjgAp5oUJUxRE76wZFknxIPokfWvep2qSXK37aXE6zg=="],
 
-    "vite/esbuild/@esbuild/linux-x64": ["@esbuild/linux-x64@0.25.4", "", { "os": "linux", "cpu": "x64" }, "sha512-6e0cvXwzOnVWJHq+mskP8DNSrKBr1bULBvnFLpc1KY+d+irZSgZ02TGse5FsafKS5jg2e4pbvK6TPXaF/A6+CA=="],
+    "nitropack/esbuild/@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.28.2", "", { "os": "aix", "cpu": "ppc64" }, "sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ=="],
 
-    "vite/esbuild/@esbuild/netbsd-arm64": ["@esbuild/netbsd-arm64@0.25.4", "", { "os": "none", "cpu": "arm64" }, "sha512-vUnkBYxZW4hL/ie91hSqaSNjulOnYXE1VSLusnvHg2u3jewJBz3YzB9+oCw8DABeVqZGg94t9tyZFoHma8gWZQ=="],
+    "nitropack/esbuild/@esbuild/android-arm": ["@esbuild/android-arm@0.28.2", "", { "os": "android", "cpu": "arm" }, "sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg=="],
 
-    "vite/esbuild/@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.25.4", "", { "os": "none", "cpu": "x64" }, "sha512-XAg8pIQn5CzhOB8odIcAm42QsOfa98SBeKUdo4xa8OvX8LbMZqEtgeWE9P/Wxt7MlG2QqvjGths+nq48TrUiKw=="],
+    "nitropack/esbuild/@esbuild/android-arm64": ["@esbuild/android-arm64@0.28.2", "", { "os": "android", "cpu": "arm64" }, "sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A=="],
 
-    "vite/esbuild/@esbuild/openbsd-arm64": ["@esbuild/openbsd-arm64@0.25.4", "", { "os": "openbsd", "cpu": "arm64" }, "sha512-Ct2WcFEANlFDtp1nVAXSNBPDxyU+j7+tId//iHXU2f/lN5AmO4zLyhDcpR5Cz1r08mVxzt3Jpyt4PmXQ1O6+7A=="],
+    "nitropack/esbuild/@esbuild/android-x64": ["@esbuild/android-x64@0.28.2", "", { "os": "android", "cpu": "x64" }, "sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q=="],
 
-    "vite/esbuild/@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.25.4", "", { "os": "openbsd", "cpu": "x64" }, "sha512-xAGGhyOQ9Otm1Xu8NT1ifGLnA6M3sJxZ6ixylb+vIUVzvvd6GOALpwQrYrtlPouMqd/vSbgehz6HaVk4+7Afhw=="],
+    "nitropack/esbuild/@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.28.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw=="],
 
-    "vite/esbuild/@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.25.4", "", { "os": "sunos", "cpu": "x64" }, "sha512-Mw+tzy4pp6wZEK0+Lwr76pWLjrtjmJyUB23tHKqEDP74R3q95luY/bXqXZeYl4NYlvwOqoRKlInQialgCKy67Q=="],
+    "nitropack/esbuild/@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.28.2", "", { "os": "darwin", "cpu": "x64" }, "sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw=="],
 
-    "vite/esbuild/@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.25.4", "", { "os": "win32", "cpu": "arm64" }, "sha512-AVUP428VQTSddguz9dO9ngb+E5aScyg7nOeJDrF1HPYu555gmza3bDGMPhmVXL8svDSoqPCsCPjb265yG/kLKQ=="],
+    "nitropack/esbuild/@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.28.2", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw=="],
 
-    "vite/esbuild/@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.25.4", "", { "os": "win32", "cpu": "ia32" }, "sha512-i1sW+1i+oWvQzSgfRcxxG2k4I9n3O9NRqy8U+uugaT2Dy7kLO9Y7wI72haOahxceMX8hZAzgGou1FhndRldxRg=="],
+    "nitropack/esbuild/@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.28.2", "", { "os": "freebsd", "cpu": "x64" }, "sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg=="],
 
-    "vite/esbuild/@esbuild/win32-x64": ["@esbuild/win32-x64@0.25.4", "", { "os": "win32", "cpu": "x64" }, "sha512-nOT2vZNw6hJ+z43oP1SPea/G/6AbN6X+bGNhNuq8NtRHy4wsMhw765IKLNmnjek7GvjWBYQ8Q5VBoYTFg9y1UQ=="],
+    "nitropack/esbuild/@esbuild/linux-arm": ["@esbuild/linux-arm@0.28.2", "", { "os": "linux", "cpu": "arm" }, "sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w=="],
 
-    "vite/postcss/nanoid": ["nanoid@3.3.11", "", { "bin": { "nanoid": "bin/nanoid.cjs" } }, "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w=="],
+    "nitropack/esbuild/@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.28.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug=="],
 
-    "workbox-build/@rollup/plugin-replace/@rollup/pluginutils": ["@rollup/pluginutils@3.1.0", "", { "dependencies": { "@types/estree": "0.0.39", "estree-walker": "^1.0.1", "picomatch": "^2.2.2" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0" } }, "sha512-GksZ6pr6TpIjHm8h9lSQ8pi8BE9VeubNT0OMJ3B5uZJ8pz73NPiqOtCog/x2/QzM1ENChPKxMDhiQuRHsqc+lg=="],
+    "nitropack/esbuild/@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.28.2", "", { "os": "linux", "cpu": "ia32" }, "sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ=="],
 
-    "workbox-build/@rollup/plugin-replace/magic-string": ["magic-string@0.25.9", "", { "dependencies": { "sourcemap-codec": "^1.4.8" } }, "sha512-RmF0AsMzgt25qzqqLc1+MbHmhdx0ojF2Fvs4XnOqz2ZOBXzzkEwc/dJQZCYHAn7v1jbVOjAZfK8msRn4BxO4VQ=="],
+    "nitropack/esbuild/@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.28.2", "", { "os": "linux", "cpu": "none" }, "sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ=="],
 
-    "@babel/core/@babel/generator/@jridgewell/gen-mapping/@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
+    "nitropack/esbuild/@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.28.2", "", { "os": "linux", "cpu": "none" }, "sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA=="],
 
-    "@babel/core/@babel/generator/@jridgewell/trace-mapping/@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
+    "nitropack/esbuild/@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.28.2", "", { "os": "linux", "cpu": "ppc64" }, "sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ=="],
 
-    "@babel/helper-create-regexp-features-plugin/@babel/helper-annotate-as-pure/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "nitropack/esbuild/@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.28.2", "", { "os": "linux", "cpu": "none" }, "sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA=="],
 
-    "@babel/helper-remap-async-to-generator/@babel/helper-annotate-as-pure/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "nitropack/esbuild/@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.28.2", "", { "os": "linux", "cpu": "s390x" }, "sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg=="],
 
-    "@babel/helper-replace-supers/@babel/helper-member-expression-to-functions/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "nitropack/esbuild/@esbuild/linux-x64": ["@esbuild/linux-x64@0.28.2", "", { "os": "linux", "cpu": "x64" }, "sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ=="],
 
-    "@babel/plugin-transform-class-properties/@babel/helper-create-class-features-plugin/@babel/helper-annotate-as-pure/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "nitropack/esbuild/@esbuild/netbsd-arm64": ["@esbuild/netbsd-arm64@0.28.2", "", { "os": "none", "cpu": "arm64" }, "sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw=="],
 
-    "@babel/plugin-transform-class-properties/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "nitropack/esbuild/@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.28.2", "", { "os": "none", "cpu": "x64" }, "sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw=="],
 
-    "@babel/plugin-transform-class-static-block/@babel/helper-create-class-features-plugin/@babel/helper-annotate-as-pure/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "nitropack/esbuild/@esbuild/openbsd-arm64": ["@esbuild/openbsd-arm64@0.28.2", "", { "os": "openbsd", "cpu": "arm64" }, "sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ=="],
 
-    "@babel/plugin-transform-class-static-block/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "nitropack/esbuild/@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.28.2", "", { "os": "openbsd", "cpu": "x64" }, "sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw=="],
 
-    "@babel/plugin-transform-classes/@babel/helper-annotate-as-pure/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "nitropack/esbuild/@esbuild/openharmony-arm64": ["@esbuild/openharmony-arm64@0.28.2", "", { "os": "none", "cpu": "arm64" }, "sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q=="],
 
-    "@babel/plugin-transform-private-methods/@babel/helper-create-class-features-plugin/@babel/helper-annotate-as-pure/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "nitropack/esbuild/@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.28.2", "", { "os": "sunos", "cpu": "x64" }, "sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g=="],
 
-    "@babel/plugin-transform-private-methods/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "nitropack/esbuild/@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.28.2", "", { "os": "win32", "cpu": "arm64" }, "sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ=="],
 
-    "@babel/plugin-transform-private-property-in-object/@babel/helper-annotate-as-pure/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "nitropack/esbuild/@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.28.2", "", { "os": "win32", "cpu": "ia32" }, "sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA=="],
 
-    "@babel/plugin-transform-private-property-in-object/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "nitropack/esbuild/@esbuild/win32-x64": ["@esbuild/win32-x64@0.28.2", "", { "os": "win32", "cpu": "x64" }, "sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g=="],
 
-    "@babel/traverse/@babel/generator/@jridgewell/gen-mapping/@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
+    "nitropack/globby/@sindresorhus/merge-streams": ["@sindresorhus/merge-streams@4.0.0", "", {}, "sha512-tlqY9xq5ukxTUZBmoOp+m61cqwQD5pHJtFY3Mn8CA8ps6yghLH/Hw8UPdqg4OLmFW3IFlcXnQNmo/dh8HzXYIQ=="],
 
-    "@babel/traverse/@babel/generator/@jridgewell/trace-mapping/@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
+    "nitropack/globby/unicorn-magic": ["unicorn-magic@0.4.1", "", {}, "sha512-lzlXPoVB0Uy/FvTaUgX39RbixYiSKoc3JSoSf01+0c2B6FR3qdYIPN7Qjo/AV7n6sqLCk0509cT3LRj1oSZ1+A=="],
 
-    "@mapbox/node-pre-gyp/node-fetch/whatwg-url/tr46": ["tr46@0.0.3", "", {}, "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw=="],
+    "nitropack/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "@mapbox/node-pre-gyp/node-fetch/whatwg-url/webidl-conversions": ["webidl-conversions@3.0.1", "", {}, "sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ=="],
+    "nitropack/unctx/unplugin": ["unplugin@2.3.11", "", { "dependencies": { "@jridgewell/remapping": "^2.3.5", "acorn": "^8.15.0", "picomatch": "^4.0.3", "webpack-virtual-modules": "^0.6.2" } }, "sha512-5uKD0nqiYVzlmCRs01Fhs2BdkEgBS3SAVP6ndrBsuK42iC2+JHyxM05Rm9G8+5mkmRtzMZGY8Ct5+mliZxU/Ww=="],
 
-    "@nuxt/kit/c12/magicast/@babel/parser": ["@babel/parser@7.27.2", "", { "dependencies": { "@babel/types": "^7.27.1" }, "bin": "./bin/babel-parser.js" }, "sha512-QYLs8299NA7WM/bZAdp+CviYYkVoYXlDW2rzliy3chxd1PQjej7JORuMJDJXJUb9g0TT+B99EwaVLKmX+sPXWw=="],
+    "nitropack/unimport/magic-string": ["magic-string@1.4.3", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.6.0" } }, "sha512-z12OxmaPGE0F4xlpGdjuAUckipLpQlTAuAmyGhNoD7ODpYUzvDfvtxUbjM/jwznyP178oju/KDdyi220wNJ0RQ=="],
 
-    "@nuxt/kit/c12/magicast/@babel/types": ["@babel/types@7.27.1", "", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.27.1" } }, "sha512-+EzkxvLNfiUeKMgy/3luqfsCWFRXLb7U6wNQTk60tovuckwB15B191tJWvpp4HjiQWdJkCxO3Wbvc6jlk3Xb2Q=="],
+    "nypm/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "@nuxt/kit/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
+    "nypm/pkg-types/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "@nuxt/kit/unimport/local-pkg/quansync": ["quansync@0.2.10", "", {}, "sha512-t41VRkMYbkHyCYmOvx/6URnN80H7k4X0lLdBMGsz+maAwrJQYB1djpV6vHrQIBE0WBSGqhtEHrK9U3DWWH8v7A=="],
+    "readdir-glob/minimatch/brace-expansion": ["brace-expansion@2.1.7", "", { "dependencies": { "balanced-match": "^1.0.0" } }, "sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g=="],
 
-    "@nuxt/kit/unimport/magic-string/@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
+    "string-width-cjs/strip-ansi/ansi-regex": ["ansi-regex@5.0.1", "", {}, "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-android-arm-eabi": ["@rollup/rollup-android-arm-eabi@4.53.2", "", { "os": "android", "cpu": "arm" }, "sha512-yDPzwsgiFO26RJA4nZo8I+xqzh7sJTZIWQOxn+/XOdPE31lAvLIYCKqjV+lNH/vxE2L2iH3plKxDCRK6i+CwhA=="],
+    "tsx/esbuild/@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.28.2", "", { "os": "aix", "cpu": "ppc64" }, "sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-android-arm64": ["@rollup/rollup-android-arm64@4.53.2", "", { "os": "android", "cpu": "arm64" }, "sha512-k8FontTxIE7b0/OGKeSN5B6j25EuppBcWM33Z19JoVT7UTXFSo3D9CdU39wGTeb29NO3XxpMNauh09B+Ibw+9g=="],
+    "tsx/esbuild/@esbuild/android-arm": ["@esbuild/android-arm@0.28.2", "", { "os": "android", "cpu": "arm" }, "sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-darwin-arm64": ["@rollup/rollup-darwin-arm64@4.53.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-A6s4gJpomNBtJ2yioj8bflM2oogDwzUiMl2yNJ2v9E7++sHrSrsQ29fOfn5DM/iCzpWcebNYEdXpaK4tr2RhfQ=="],
+    "tsx/esbuild/@esbuild/android-arm64": ["@esbuild/android-arm64@0.28.2", "", { "os": "android", "cpu": "arm64" }, "sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-darwin-x64": ["@rollup/rollup-darwin-x64@4.53.2", "", { "os": "darwin", "cpu": "x64" }, "sha512-e6XqVmXlHrBlG56obu9gDRPW3O3hLxpwHpLsBJvuI8qqnsrtSZ9ERoWUXtPOkY8c78WghyPHZdmPhHLWNdAGEw=="],
+    "tsx/esbuild/@esbuild/android-x64": ["@esbuild/android-x64@0.28.2", "", { "os": "android", "cpu": "x64" }, "sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-freebsd-arm64": ["@rollup/rollup-freebsd-arm64@4.53.2", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-v0E9lJW8VsrwPux5Qe5CwmH/CF/2mQs6xU1MF3nmUxmZUCHazCjLgYvToOk+YuuUqLQBio1qkkREhxhc656ViA=="],
+    "tsx/esbuild/@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.28.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-freebsd-x64": ["@rollup/rollup-freebsd-x64@4.53.2", "", { "os": "freebsd", "cpu": "x64" }, "sha512-ClAmAPx3ZCHtp6ysl4XEhWU69GUB1D+s7G9YjHGhIGCSrsg00nEGRRZHmINYxkdoJehde8VIsDC5t9C0gb6yqA=="],
+    "tsx/esbuild/@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.28.2", "", { "os": "darwin", "cpu": "x64" }, "sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-linux-arm-gnueabihf": ["@rollup/rollup-linux-arm-gnueabihf@4.53.2", "", { "os": "linux", "cpu": "arm" }, "sha512-EPlb95nUsz6Dd9Qy13fI5kUPXNSljaG9FiJ4YUGU1O/Q77i5DYFW5KR8g1OzTcdZUqQQ1KdDqsTohdFVwCwjqg=="],
+    "tsx/esbuild/@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.28.2", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-linux-arm-musleabihf": ["@rollup/rollup-linux-arm-musleabihf@4.53.2", "", { "os": "linux", "cpu": "arm" }, "sha512-BOmnVW+khAUX+YZvNfa0tGTEMVVEerOxN0pDk2E6N6DsEIa2Ctj48FOMfNDdrwinocKaC7YXUZ1pHlKpnkja/Q=="],
+    "tsx/esbuild/@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.28.2", "", { "os": "freebsd", "cpu": "x64" }, "sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-linux-arm64-gnu": ["@rollup/rollup-linux-arm64-gnu@4.53.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-Xt2byDZ+6OVNuREgBXr4+CZDJtrVso5woFtpKdGPhpTPHcNG7D8YXeQzpNbFRxzTVqJf7kvPMCub/pcGUWgBjA=="],
+    "tsx/esbuild/@esbuild/linux-arm": ["@esbuild/linux-arm@0.28.2", "", { "os": "linux", "cpu": "arm" }, "sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-linux-arm64-musl": ["@rollup/rollup-linux-arm64-musl@4.53.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-+LdZSldy/I9N8+klim/Y1HsKbJ3BbInHav5qE9Iy77dtHC/pibw1SR/fXlWyAk0ThnpRKoODwnAuSjqxFRDHUQ=="],
+    "tsx/esbuild/@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.28.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-linux-riscv64-gnu": ["@rollup/rollup-linux-riscv64-gnu@4.53.2", "", { "os": "linux", "cpu": "none" }, "sha512-fMjKi+ojnmIvhk34gZP94vjogXNNUKMEYs+EDaB/5TG/wUkoeua7p7VCHnE6T2Tx+iaghAqQX8teQzcvrYpaQA=="],
+    "tsx/esbuild/@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.28.2", "", { "os": "linux", "cpu": "ia32" }, "sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-linux-riscv64-musl": ["@rollup/rollup-linux-riscv64-musl@4.53.2", "", { "os": "linux", "cpu": "none" }, "sha512-XuGFGU+VwUUV5kLvoAdi0Wz5Xbh2SrjIxCtZj6Wq8MDp4bflb/+ThZsVxokM7n0pcbkEr2h5/pzqzDYI7cCgLQ=="],
+    "tsx/esbuild/@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.28.2", "", { "os": "linux", "cpu": "none" }, "sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-linux-s390x-gnu": ["@rollup/rollup-linux-s390x-gnu@4.53.2", "", { "os": "linux", "cpu": "s390x" }, "sha512-w6yjZF0P+NGzWR3AXWX9zc0DNEGdtvykB03uhonSHMRa+oWA6novflo2WaJr6JZakG2ucsyb+rvhrKac6NIy+w=="],
+    "tsx/esbuild/@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.28.2", "", { "os": "linux", "cpu": "none" }, "sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-linux-x64-gnu": ["@rollup/rollup-linux-x64-gnu@4.53.2", "", { "os": "linux", "cpu": "x64" }, "sha512-yo8d6tdfdeBArzC7T/PnHd7OypfI9cbuZzPnzLJIyKYFhAQ8SvlkKtKBMbXDxe1h03Rcr7u++nFS7tqXz87Gtw=="],
+    "tsx/esbuild/@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.28.2", "", { "os": "linux", "cpu": "ppc64" }, "sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-linux-x64-musl": ["@rollup/rollup-linux-x64-musl@4.53.2", "", { "os": "linux", "cpu": "x64" }, "sha512-ah59c1YkCxKExPP8O9PwOvs+XRLKwh/mV+3YdKqQ5AMQ0r4M4ZDuOrpWkUaqO7fzAHdINzV9tEVu8vNw48z0lA=="],
+    "tsx/esbuild/@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.28.2", "", { "os": "linux", "cpu": "none" }, "sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-win32-arm64-msvc": ["@rollup/rollup-win32-arm64-msvc@4.53.2", "", { "os": "win32", "cpu": "arm64" }, "sha512-IlbHFYc/pQCgew/d5fslcy1KEaYVCJ44G8pajugd8VoOEI8ODhtb/j8XMhLpwHCMB3yk2J07ctup10gpw2nyMA=="],
+    "tsx/esbuild/@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.28.2", "", { "os": "linux", "cpu": "s390x" }, "sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-win32-ia32-msvc": ["@rollup/rollup-win32-ia32-msvc@4.53.2", "", { "os": "win32", "cpu": "ia32" }, "sha512-lNlPEGgdUfSzdCWU176ku/dQRnA7W+Gp8d+cWv73jYrb8uT7HTVVxq62DUYxjbaByuf1Yk0RIIAbDzp+CnOTFg=="],
+    "tsx/esbuild/@esbuild/linux-x64": ["@esbuild/linux-x64@0.28.2", "", { "os": "linux", "cpu": "x64" }, "sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ=="],
 
-    "@nuxt/vite-builder/vite/rollup/@rollup/rollup-win32-x64-msvc": ["@rollup/rollup-win32-x64-msvc@4.53.2", "", { "os": "win32", "cpu": "x64" }, "sha512-k+/Rkcyx//P6fetPoLMb8pBeqJBNGx81uuf7iljX9++yNBVRDQgD04L+SVXmXmh5ZP4/WOp4mWF0kmi06PW2tA=="],
+    "tsx/esbuild/@esbuild/netbsd-arm64": ["@esbuild/netbsd-arm64@0.28.2", "", { "os": "none", "cpu": "arm64" }, "sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw=="],
 
-    "@nuxt/vite-builder/vite/rollup/@types/estree": ["@types/estree@1.0.8", "", {}, "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w=="],
+    "tsx/esbuild/@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.28.2", "", { "os": "none", "cpu": "x64" }, "sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw=="],
 
-    "@vercel/nft/glob/minimatch/brace-expansion": ["brace-expansion@2.0.1", "", { "dependencies": { "balanced-match": "^1.0.0" } }, "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA=="],
+    "tsx/esbuild/@esbuild/openbsd-arm64": ["@esbuild/openbsd-arm64@0.28.2", "", { "os": "openbsd", "cpu": "arm64" }, "sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ=="],
 
-    "archiver-utils/glob/minimatch/brace-expansion": ["brace-expansion@2.0.1", "", { "dependencies": { "balanced-match": "^1.0.0" } }, "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA=="],
+    "tsx/esbuild/@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.28.2", "", { "os": "openbsd", "cpu": "x64" }, "sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw=="],
 
-    "externality/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
+    "tsx/esbuild/@esbuild/openharmony-arm64": ["@esbuild/openharmony-arm64@0.28.2", "", { "os": "none", "cpu": "arm64" }, "sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q=="],
 
-    "giget/nypm/pkg-types/exsolve": ["exsolve@1.0.5", "", {}, "sha512-pz5dvkYYKQ1AHVrgOzBKWeP4u4FRb3a6DNK2ucr0OoNwYIU4QWsJ+NM36LLzORT+z845MzKHHhpXiUF5nvQoJg=="],
+    "tsx/esbuild/@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.28.2", "", { "os": "sunos", "cpu": "x64" }, "sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g=="],
 
-    "listhen/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
+    "tsx/esbuild/@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.28.2", "", { "os": "win32", "cpu": "arm64" }, "sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ=="],
 
-    "mlly/pkg-types/mlly/acorn": ["acorn@8.14.1", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-OvQ/2pUDKmgfCg++xsTX1wGxfTaszcHVcTctW4UJB4hibJx2HXxxO5UmVgyjMa+ZDsiaf5wWLXYpRWMmBI0QHg=="],
+    "tsx/esbuild/@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.28.2", "", { "os": "win32", "cpu": "ia32" }, "sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-android-arm-eabi": ["@rollup/rollup-android-arm-eabi@4.53.2", "", { "os": "android", "cpu": "arm" }, "sha512-yDPzwsgiFO26RJA4nZo8I+xqzh7sJTZIWQOxn+/XOdPE31lAvLIYCKqjV+lNH/vxE2L2iH3plKxDCRK6i+CwhA=="],
+    "tsx/esbuild/@esbuild/win32-x64": ["@esbuild/win32-x64@0.28.2", "", { "os": "win32", "cpu": "x64" }, "sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-android-arm64": ["@rollup/rollup-android-arm64@4.53.2", "", { "os": "android", "cpu": "arm64" }, "sha512-k8FontTxIE7b0/OGKeSN5B6j25EuppBcWM33Z19JoVT7UTXFSo3D9CdU39wGTeb29NO3XxpMNauh09B+Ibw+9g=="],
+    "unimport/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-darwin-arm64": ["@rollup/rollup-darwin-arm64@4.53.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-A6s4gJpomNBtJ2yioj8bflM2oogDwzUiMl2yNJ2v9E7++sHrSrsQ29fOfn5DM/iCzpWcebNYEdXpaK4tr2RhfQ=="],
+    "unplugin-auto-import/unimport/mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-darwin-x64": ["@rollup/rollup-darwin-x64@4.53.2", "", { "os": "darwin", "cpu": "x64" }, "sha512-e6XqVmXlHrBlG56obu9gDRPW3O3hLxpwHpLsBJvuI8qqnsrtSZ9ERoWUXtPOkY8c78WghyPHZdmPhHLWNdAGEw=="],
+    "unplugin-vue-components/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-freebsd-arm64": ["@rollup/rollup-freebsd-arm64@4.53.2", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-v0E9lJW8VsrwPux5Qe5CwmH/CF/2mQs6xU1MF3nmUxmZUCHazCjLgYvToOk+YuuUqLQBio1qkkREhxhc656ViA=="],
+    "unwasm/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-freebsd-x64": ["@rollup/rollup-freebsd-x64@4.53.2", "", { "os": "freebsd", "cpu": "x64" }, "sha512-ClAmAPx3ZCHtp6ysl4XEhWU69GUB1D+s7G9YjHGhIGCSrsg00nEGRRZHmINYxkdoJehde8VIsDC5t9C0gb6yqA=="],
+    "vaul-vue/@vueuse/core/@types/web-bluetooth": ["@types/web-bluetooth@0.0.20", "", {}, "sha512-g9gZnnXVq7gM7v3tJCWV/qw7w+KeOlSHAhgF9RytFyifW6AF61hdT2ucrYhPq9hLs5JIryeupHV3qGk95dH9ow=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-linux-arm-gnueabihf": ["@rollup/rollup-linux-arm-gnueabihf@4.53.2", "", { "os": "linux", "cpu": "arm" }, "sha512-EPlb95nUsz6Dd9Qy13fI5kUPXNSljaG9FiJ4YUGU1O/Q77i5DYFW5KR8g1OzTcdZUqQQ1KdDqsTohdFVwCwjqg=="],
+    "vaul-vue/@vueuse/core/@vueuse/metadata": ["@vueuse/metadata@10.11.1", "", {}, "sha512-IGa5FXd003Ug1qAZmyE8wF3sJ81xGLSqTqtQ6jaVfkeZ4i5kS2mwQF61yhVqojRnenVew5PldLyRgvdl4YYuSw=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-linux-arm-musleabihf": ["@rollup/rollup-linux-arm-musleabihf@4.53.2", "", { "os": "linux", "cpu": "arm" }, "sha512-BOmnVW+khAUX+YZvNfa0tGTEMVVEerOxN0pDk2E6N6DsEIa2Ctj48FOMfNDdrwinocKaC7YXUZ1pHlKpnkja/Q=="],
+    "vaul-vue/@vueuse/core/@vueuse/shared": ["@vueuse/shared@10.11.1", "", { "dependencies": { "vue-demi": ">=0.14.8" } }, "sha512-LHpC8711VFZlDaYUXEBbFBCQ7GS3dVU9mjOhhMhXP6txTV4EhYQg/KGnQuvt/sPAtoUKq7VVUnL6mVtFoL42sA=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-linux-arm64-gnu": ["@rollup/rollup-linux-arm64-gnu@4.53.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-Xt2byDZ+6OVNuREgBXr4+CZDJtrVso5woFtpKdGPhpTPHcNG7D8YXeQzpNbFRxzTVqJf7kvPMCub/pcGUWgBjA=="],
+    "vite-plugin-checker/npm-run-path/path-key": ["path-key@4.0.0", "", {}, "sha512-haREypq7xkM7ErfgIyA0z+Bj4AGKlMSdlQE2jvJo6huWD1EdkKYV+G/T4nq0YEF2vgTT8kqMFKo1uHn950r4SQ=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-linux-arm64-musl": ["@rollup/rollup-linux-arm64-musl@4.53.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-+LdZSldy/I9N8+klim/Y1HsKbJ3BbInHav5qE9Iy77dtHC/pibw1SR/fXlWyAk0ThnpRKoODwnAuSjqxFRDHUQ=="],
+    "vue-router/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-linux-riscv64-gnu": ["@rollup/rollup-linux-riscv64-gnu@4.53.2", "", { "os": "linux", "cpu": "none" }, "sha512-fMjKi+ojnmIvhk34gZP94vjogXNNUKMEYs+EDaB/5TG/wUkoeua7p7VCHnE6T2Tx+iaghAqQX8teQzcvrYpaQA=="],
+    "wrap-ansi-cjs/string-width/emoji-regex": ["emoji-regex@8.0.0", "", {}, "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-linux-riscv64-musl": ["@rollup/rollup-linux-riscv64-musl@4.53.2", "", { "os": "linux", "cpu": "none" }, "sha512-XuGFGU+VwUUV5kLvoAdi0Wz5Xbh2SrjIxCtZj6Wq8MDp4bflb/+ThZsVxokM7n0pcbkEr2h5/pzqzDYI7cCgLQ=="],
+    "wrap-ansi-cjs/strip-ansi/ansi-regex": ["ansi-regex@5.0.1", "", {}, "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-linux-s390x-gnu": ["@rollup/rollup-linux-s390x-gnu@4.53.2", "", { "os": "linux", "cpu": "s390x" }, "sha512-w6yjZF0P+NGzWR3AXWX9zc0DNEGdtvykB03uhonSHMRa+oWA6novflo2WaJr6JZakG2ucsyb+rvhrKac6NIy+w=="],
+    "@nuxt/icon/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-linux-x64-gnu": ["@rollup/rollup-linux-x64-gnu@4.53.2", "", { "os": "linux", "cpu": "x64" }, "sha512-yo8d6tdfdeBArzC7T/PnHd7OypfI9cbuZzPnzLJIyKYFhAQ8SvlkKtKBMbXDxe1h03Rcr7u++nFS7tqXz87Gtw=="],
+    "@nuxt/kit/unimport/strip-literal/js-tokens": ["js-tokens@9.0.1", "", {}, "sha512-mxa9E9ITFOt0ban3j6L5MpjwegGz6lBQmM1IJkWeBZGcMxto50+eWdjC/52xDbS2vy0k7vIMK0Fe2wfL9OQSpQ=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-linux-x64-musl": ["@rollup/rollup-linux-x64-musl@4.53.2", "", { "os": "linux", "cpu": "x64" }, "sha512-ah59c1YkCxKExPP8O9PwOvs+XRLKwh/mV+3YdKqQ5AMQ0r4M4ZDuOrpWkUaqO7fzAHdINzV9tEVu8vNw48z0lA=="],
+    "@nuxt/kit/untyped/@babel/types/@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-win32-arm64-msvc": ["@rollup/rollup-win32-arm64-msvc@4.53.2", "", { "os": "win32", "cpu": "arm64" }, "sha512-IlbHFYc/pQCgew/d5fslcy1KEaYVCJ44G8pajugd8VoOEI8ODhtb/j8XMhLpwHCMB3yk2J07ctup10gpw2nyMA=="],
+    "@nuxt/kit/untyped/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-win32-ia32-msvc": ["@rollup/rollup-win32-ia32-msvc@4.53.2", "", { "os": "win32", "cpu": "ia32" }, "sha512-lNlPEGgdUfSzdCWU176ku/dQRnA7W+Gp8d+cWv73jYrb8uT7HTVVxq62DUYxjbaByuf1Yk0RIIAbDzp+CnOTFg=="],
+    "@nuxt/ui/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "vite-node/vite/rollup/@rollup/rollup-win32-x64-msvc": ["@rollup/rollup-win32-x64-msvc@4.53.2", "", { "os": "win32", "cpu": "x64" }, "sha512-k+/Rkcyx//P6fetPoLMb8pBeqJBNGx81uuf7iljX9++yNBVRDQgD04L+SVXmXmh5ZP4/WOp4mWF0kmi06PW2tA=="],
+    "archiver-utils/glob/minimatch/brace-expansion": ["brace-expansion@2.1.7", "", { "dependencies": { "balanced-match": "^1.0.0" } }, "sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g=="],
 
-    "vite-node/vite/rollup/@types/estree": ["@types/estree@1.0.8", "", {}, "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w=="],
+    "archiver-utils/glob/path-scurry/lru-cache": ["lru-cache@10.4.3", "", {}, "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ=="],
 
-    "workbox-build/@rollup/plugin-replace/@rollup/pluginutils/@types/estree": ["@types/estree@0.0.39", "", {}, "sha512-EYNwp3bU+98cpU4lAWYYL7Zz+2gryWH1qbdDTidVd6hkiR6weksdbMadyXKXNPEkQFhXM+hVO9ZygomHXp+AIw=="],
+    "local-pkg/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "workbox-build/@rollup/plugin-replace/@rollup/pluginutils/estree-walker": ["estree-walker@1.0.1", "", {}, "sha512-1fMXF3YP4pZZVozF8j/ZLfvnR8NSIljt56UhbZ5PeeDmmGHpgpdwQt7ITlGvYaQukCvuBRMLEiKiYC+oeIg4cg=="],
+    "magic-regexp/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "workbox-build/@rollup/plugin-replace/@rollup/pluginutils/picomatch": ["picomatch@2.3.1", "", {}, "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA=="],
+    "nitropack/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "@babel/plugin-transform-class-properties/@babel/helper-create-class-features-plugin/@babel/helper-annotate-as-pure/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "readdir-glob/minimatch/brace-expansion/balanced-match": ["balanced-match@1.0.2", "", {}, "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw=="],
 
-    "@babel/plugin-transform-class-properties/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "unimport/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "@babel/plugin-transform-class-static-block/@babel/helper-create-class-features-plugin/@babel/helper-annotate-as-pure/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "unplugin-auto-import/unimport/mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="],
 
-    "@babel/plugin-transform-class-static-block/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "unplugin-vue-components/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "@babel/plugin-transform-private-methods/@babel/helper-create-class-features-plugin/@babel/helper-annotate-as-pure/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "unwasm/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "@babel/plugin-transform-private-methods/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "vue-router/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
 
-    "@babel/plugin-transform-private-property-in-object/@babel/helper-create-class-features-plugin/@babel/helper-member-expression-to-functions/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "archiver-utils/glob/minimatch/brace-expansion/balanced-match": ["balanced-match@1.0.2", "", {}, "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw=="],
 
-    "@nuxt/kit/c12/magicast/@babel/types/@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.27.1", "", {}, "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow=="],
+    "unplugin-auto-import/unimport/mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="],
   }
 }
diff --git a/bunfig.toml b/bunfig.toml
new file mode 100644
index 0000000..4f736c9
--- /dev/null
+++ b/bunfig.toml
@@ -0,0 +1,4 @@
+[test]
+preload = ["./tests/helpers/preload.ts"]
+# Keep the test harness out of the coverage numbers (`bun run test:ci`).
+coveragePathIgnorePatterns = ["tests/**"]
\ No newline at end of file
diff --git a/components/DashboardPage.vue b/components/DashboardPage.vue
deleted file mode 100644
index f2fa047..0000000
--- a/components/DashboardPage.vue
+++ /dev/null
@@ -1,51 +0,0 @@
-<script setup lang="ts">
-
-const props = defineProps({
-    title: {
-        type: String,
-        required: true,
-    },
-    subtitle: {
-        type: String,
-        required: true,
-    },
-    image: {
-        type: String,
-        required: true,
-    }
-});
-
-// SEO Meta
-useSeoMeta({
-    title: `${props.title} | NetIgnite`,
-    description: props.subtitle,
-});
-
-</script>
-
-<template>
-    <div class="container" id="dashboard-page">
-
-        <!-- Header -->
-        <div class="mt-4 mb-5">
-            <div class="row align-items-center">
-                <div class="col-lg-6">
-                    <h1 class="fw-bold text-white mb-2">
-                        <i :class="image" class="text-primary me-3"></i>
-                        {{ title }}
-                    </h1>
-                    <p class="text-light opacity-75 mb-0">
-                        {{ subtitle }}
-                    </p>
-                </div>
-            </div>
-        </div>
-
-        <!-- Body -->
-        <div>
-            <slot></slot>
-        </div>
-
-    </div>
-</template>
-
diff --git a/components/Footer.vue b/components/Footer.vue
deleted file mode 100644
index 51f765d..0000000
--- a/components/Footer.vue
+++ /dev/null
@@ -1,47 +0,0 @@
-<script setup lang="ts">
-
-defineProps({
-    withMargin: {
-        type: Boolean,
-        default: true,
-    }
-});
-
-</script>
-
-<template>
-    <footer class="footer" :style="{ marginTop: withMargin ? '50px' : '0px' }">
-        <div class="container-fluid footer-legal">
-            <p class="legal-paragraph">
-                <span class="copyright-text">&copy;  {{ new Date().getFullYear() }} LeiCraft_MC. Alle Rechte vorbehalten</span><br>
-            </p>
-        </div>
-    </footer>
-</template>
-
-<style scoped>
-
-.footer {
-    margin-bottom: 0;
-}
-.footer-legal {
-    background-color: #1a1b2e;
-	text-align: center;
-}
-
-.legal-paragraph {
-	padding-top: 8px;
-    padding-bottom: 8px;
-    margin-bottom: 0;
-}
-
-.copyright-text {
-    background-color: #1a1b2e;
-}
-
-.legal-text {
-	text-decoration: none;
-	color: rgb(255, 254, 255, 0.75);
-}
-
-</style>
\ No newline at end of file
diff --git a/components/FormModal.vue b/components/FormModal.vue
deleted file mode 100644
index 7c7d071..0000000
--- a/components/FormModal.vue
+++ /dev/null
@@ -1,75 +0,0 @@
-<script setup lang="ts">
-import { FormModalHandler } from '@/utils/handlers/formModal';
-
-const { handler: modalHandler } = defineProps({
-    handler: {
-        type: Object,
-        required: true
-    }
-}) as { handler: FormModalHandler<any> };
-
-if (!modalHandler || !(modalHandler instanceof FormModalHandler)) {
-    throw new Error('Invalid handler provided to FormModal component');
-}
-
-async function submit() {
-    await modalHandler.form.submit();
-    closeModal();
-}
-
-function closeModal() {
-
-    if (modalHandler.settings.onModalClose) {
-        modalHandler.settings.onModalClose();
-    }
-
-    modalHandler.hideModal();
-    modalHandler.form.reset();
-}
-
-</script>
-
-<template>
-
-    <div class="modal fade" :class="{ show: handler.isModalVisible }"
-        :style="{ display: handler.isModalVisible ? 'block' : 'none' }" tabindex="-1">
-        <div class="modal-dialog modal-lg">
-            <div class="modal-content border-secondary form-modal">
-                <div class="modal-header border-secondary">
-                    <h5 class="modal-title text-white">
-                        <i v-if="handler.settings.header.icon" :class="handler.settings.header.icon" class="text-primary me-2"></i>
-                        {{ handler.settings.header.title }}
-                    </h5>
-                    <button type="button" class="btn-close btn-close-white" @click="closeModal"></button>
-                </div>
-                <div class="modal-body text-light">
-                    <form>
-                        <slot></slot>
-                    </form>
-                </div>
-                <div class="modal-footer border-secondary">
-                    <button type="button" class="btn btn-secondary" @click="closeModal">Cancel</button>
-                    <button type="button" class="btn btn-primary text-dark fw-bold" @click="submit">
-                        <i class="bi bi-check-circle me-2"></i>
-                        {{ handler.settings.submitText }}
-                    </button>
-                </div>
-            </div>
-        </div>
-    </div>
-    <div v-if="handler.isModalVisible" class="modal-backdrop fade show"></div>
-
-</template>
-
-<style scoped>
-
-.form-modal {
-    background-color: #1a1b2e;
-    /* border: 1px solid rgba(255, 255, 255, 0.1); */
-}
-
-.modal-backdrop {
-    background-color: rgba(0, 0, 0, 0.8);
-}
-
-</style>
\ No newline at end of file
diff --git a/components/Sidebar.vue b/components/Sidebar.vue
deleted file mode 100644
index 5444167..0000000
--- a/components/Sidebar.vue
+++ /dev/null
@@ -1,198 +0,0 @@
-<script setup lang="ts">
-
-import Logo from '@/components/img/logo-white.vue';
-
-const dashboard_sidebar = ref<HTMLElement | null>(null);
-
-function closeSidebar() {
-    // @ts-ignore
-    const offcanvas = bootstrap.Offcanvas.getInstance(dashboard_sidebar.value);
-    if (offcanvas) {
-        offcanvas.hide();
-    }
-}
-
-async function logoutUser() {
-    const result = await useAPI("/api/auth/logout", {
-        method: 'POST'
-    });
-    if (result.status !== "OK") {
-        useNotificationToast({
-            message: `Error logging out: ${result?.message || 'unknown error'}`,
-            type: 'error'
-        });
-        return;
-    }
-    useNotificationToast({
-        message: 'Logged out successfully',
-        type: 'success'
-    });
-
-    navigateTo('/auth/login');
-}
-
-</script>
-
-<template>
-    <!--<link rel="stylesheet" href=
-"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css"
-        integrity=
-"sha512-iecdLmaskl7CVkqkXNQ/ZH/XLlvWZOJyj7Yy7tcenmpD1ypASozpmT/E0iPtmFIB46ZmdtAc9eNBvH0H/ZpiBw=="
-        crossorigin="anonymous" 
-        referrerpolicy="no-referrer" /> -->
-    <div class="container-fluid p-0 d-flex h-100">
-        <div id="dashboard-sidebar" ref="dashboard_sidebar" class="d-flex flex-column flex-shrink-0 p-3 text-white offcanvas-lg offcanvas-start dashboard-sidebar-color">
-            <a href="#" class="navbar-brand">
-                <Logo />
-            </a><hr>
-            <ul class="mynav nav nav-pills flex-column mb-auto">
-                <li class="nav-item mb-1">
-                    <NuxtLink to="/" @click="closeSidebar">
-                        <!-- <i class="fa-regular fa-user"></i> -->
-                        Home
-                    </NuxtLink>
-                </li>
-
-                <li class="nav-item mb-1">
-                    <NuxtLink to="/devices" @click="closeSidebar">
-                        <!-- <i class="fa-regular fa-bookmark"></i> -->
-                        Devices
-                    </NuxtLink>
-                </li>
-                <li class="nav-item mb-1">
-                    <NuxtLink to="/agents" @click="closeSidebar">
-                        <!-- <i class="fa-regular fa-newspaper"></i> -->
-                        Agents
-                    </NuxtLink>
-                </li>
-
-                <!-- <li class="sidebar-item nav-item mb-1">
-                    <a href="#" 
-                       class="sidebar-link collapsed" 
-                       data-bs-toggle="collapse"
-                       data-bs-target="#settings"
-                       aria-expanded="false"
-                       aria-controls="settings">
-                        <i class="fas fa-cog pe-2"></i>
-                        <span class="topic">Settings </span>
-                    </a>
-                    <ul id="settings" 
-                        class="sidebar-dropdown list-unstyled collapse" 
-                        data-bs-parent="#sidebar">
-                        <li class="sidebar-item">
-                            <a href="#" class="sidebar-link">
-                                <i class="fas fa-sign-in-alt pe-2"></i>
-                                <span class="topic"> Login</span>
-                            </a>
-                        </li>
-                        <li class="sidebar-item">
-                            <a href="#" class="sidebar-link">
-                                <i class="fas fa-user-plus pe-2"></i>
-                                <span class="topic">Register</span>
-                            </a>
-                        </li>
-                        <li class="sidebar-item">
-                            <a href="#" class="sidebar-link">
-                                <i class="fas fa-sign-out-alt pe-2"></i>
-                                <span class="topic">Log Out</span>
-                            </a>
-                        </li>
-                    </ul>
-                </li> -->
-            </ul>
-            <hr>
-            <div class="dropdown">
-                <a class="d-flex align-items-center text-white text-decoration-none dropdown-toggle" id="dropdownUser1" data-bs-toggle="dropdown" aria-expanded="false">
-                    <!-- <img src="https://github.com/mdo.png" alt="hugenerd" width="30" height="30" class="rounded-circle"> -->
-                    <span>
-                        {{ SessionStore.useUserInfo().username || 'unknown' }}
-                    </span>
-                </a>
-                <ul class="dropdown-menu dropdown-menu-dark text-small shadow">
-                    <li><NuxtLink to="/account/settings" @click="closeSidebar" class="dropdown-item">Settings</NuxtLink></li>
-                    <li>
-                        <hr class="dropdown-divider">
-                    </li>
-                    <li><a class="dropdown-item" @click="logoutUser">Log out</a></li>
-                </ul>
-            </div>
-        </div>
-
-        <div class="flex-fill d-flex flex-column page-content-wrapper">
-            <div class="p-2 d-lg-none d-flex text-white dashboard-sidebar-color mobile-header align-items-center">
-                <a href="#" class="text-white" data-bs-toggle="offcanvas" data-bs-target="#dashboard-sidebar">
-                    <svg xmlns="http://www.w3.org/2000/svg" height="30px" viewBox="0 0 30 30">
-                        <path stroke="#ffffff" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"/>
-                    </svg>
-                </a>
-                <Logo style="height: 100%;" />
-            </div>
-            <div class="page-content">
-                <slot></slot>
-            </div>
-        </div>
-    </div>
-</template>
-
-<style scoped>
-
-#dashboard-sidebar {
-    min-width: 230px;
-    max-width: 250px;
-}
-
-.dashboard-sidebar-color {
-    background-color: #1a1b2e !important;
-}
-
-.mynav {
-    color: #fff;
-}
-
-.mynav li a {
-    color: #fff;
-    text-decoration: none;
-    width: 100%;
-    display: block;
-    border-radius: 5px;
-    padding: 8px 5px;
-}
-
-.mynav li a.active {
-    background: rgba(255, 255, 255, 0.2);
-}
-
-.mynav li a:hover {
-    background: rgba(255, 255, 255, 0.2);
-}
-
-.mynav li a i {
-    width: 25px;
-    text-align: center;
-}
-
-.page-content-wrapper {
-    height: 100vh; /* Full screen height */
-    overflow: hidden; /* Prevent page from scrolling */
-}   
-
-.page-content {
-    flex: 1 1 auto;
-    overflow-y: auto;
-    height: 100%; /* Ensure it fills the remaining space */
-}
-
-.mobile-header {
-    height: 55px;
-}
-
-.dropdown-menu {
-    background-color: #1a1b2e;
-    border: 1px solid rgba(255, 255, 255, 0.25);
-}
-
-.dropdown-divider {
-    border-color: rgba(255, 255, 255, 0.25);
-}
-
-</style>
\ No newline at end of file
diff --git a/components/SimpleTable.vue b/components/SimpleTable.vue
deleted file mode 100644
index 0ccee1b..0000000
--- a/components/SimpleTable.vue
+++ /dev/null
@@ -1,34 +0,0 @@
-<script setup lang="ts">
-
-
-
-</script>
-
-
-<template>
-    <div class="table-container rounded-4 overflow-hidden mb-4">
-        <table class="table table-dark table-hover mb-0">
-            <slot></slot>
-        </table>
-    </div>
-</template>
-
-
-<style scoped>
-
-.table-container {
-    background-color: #0b0c1b;
-    border: 1px solid rgba(255, 255, 255, 0.1);
-}
-
-.table {
-    margin-bottom: 0;
-}
-
-.table-dark {
-    --bs-table-bg: transparent;
-    --bs-table-striped-bg: rgba(255, 255, 255, 0.05);
-    --bs-table-hover-bg: rgba(255, 255, 255, 0.1);
-}
-
-</style>
\ No newline at end of file
diff --git a/components/forms/FormDescription.vue b/components/forms/FormDescription.vue
deleted file mode 100644
index 6e94810..0000000
--- a/components/forms/FormDescription.vue
+++ /dev/null
@@ -1,16 +0,0 @@
-
-<template>
-    <p class="small form-description">
-        <slot></slot>
-    </p>
-</template>
-
-<style scoped>
-
-.form-description {
-    margin-top: 4px;
-    color: #ffffff;
-    opacity: 0.7;
-}
-
-</style>
\ No newline at end of file
diff --git a/components/forms/FormGroup.vue b/components/forms/FormGroup.vue
deleted file mode 100644
index 7faf329..0000000
--- a/components/forms/FormGroup.vue
+++ /dev/null
@@ -1,6 +0,0 @@
-
-<template>
-    <div class="form-group mb-3">
-        <slot></slot>
-    </div>
-</template>
diff --git a/components/forms/FormInput.vue b/components/forms/FormInput.vue
deleted file mode 100644
index 00d87c5..0000000
--- a/components/forms/FormInput.vue
+++ /dev/null
@@ -1,31 +0,0 @@
-
-<script setup lang="ts">
-
-import { ref, watch } from 'vue'
-
-const props = defineProps({
-	modelValue: {}
-})
-const emit = defineEmits(['update:modelValue'])
-
-const internalValue = ref(props.modelValue)
-
-watch(() => props.modelValue, val => {
-	internalValue.value = val
-})
-
-watch(internalValue, val => {
-	emit('update:modelValue', val)
-});
-</script>
-
-
-<template>
-    <input type="text" class="form-control form-input" v-model="internalValue">
-</template>
-
-<style scoped>
-
-@import "/assets/css/forms.css";
-
-</style>
\ No newline at end of file
diff --git a/components/forms/FormLabel.vue b/components/forms/FormLabel.vue
deleted file mode 100644
index 07f3a9a..0000000
--- a/components/forms/FormLabel.vue
+++ /dev/null
@@ -1,8 +0,0 @@
-
-
-<template>
-    <label class="form-label mb-1">
-        <slot></slot>
-    </label>
-</template>
-
diff --git a/components/forms/FormPWInput.vue b/components/forms/FormPWInput.vue
deleted file mode 100644
index 4a4f9be..0000000
--- a/components/forms/FormPWInput.vue
+++ /dev/null
@@ -1,56 +0,0 @@
-
-<script setup lang="ts">
-
-import { ref, watch } from 'vue'
-
-const props = defineProps({
-	modelValue: {}
-})
-const emit = defineEmits(['update:modelValue'])
-
-const internalValue = ref(props.modelValue)
-
-defineOptions({
-  	inheritAttrs: false
-});
-
-watch(() => props.modelValue, val => {
-	internalValue.value = val
-})
-
-watch(internalValue, val => {
-	emit('update:modelValue', val)
-});
-
-const showPassword = ref(false);
-
-</script>
-
-
-<template>
-	<div class="password-input-container">
-		<input :type="showPassword ? 'text' : 'password'" class="form-control form-input" v-bind="$attrs" v-model="internalValue">
-		<span class="password-toggle" @click="showPassword = !showPassword">
-			<i :class="showPassword ? 'bi bi-eye-slash' : 'bi bi-eye'"></i>
-		</span>
-	</div>
-</template>
-
-<style scoped>
-
-@import "/assets/css/forms.css";
-
-.password-input-container {
-	position: relative;
-}
-.password-toggle {
-	position: absolute;
-	right: 10px;
-	top: 50%;
-	transform: translateY(-50%);
-	cursor: pointer;
-	color: white;
-	opacity: 0.7;
-}
-
-</style>
\ No newline at end of file
diff --git a/components/forms/FormSelect.vue b/components/forms/FormSelect.vue
deleted file mode 100644
index 2a7f165..0000000
--- a/components/forms/FormSelect.vue
+++ /dev/null
@@ -1,34 +0,0 @@
-
-<script setup lang="ts">
-
-import { ref, watch } from 'vue'
-
-const props = defineProps({
-	modelValue: {}
-})
-const emit = defineEmits(['update:modelValue'])
-
-const internalValue = ref(props.modelValue)
-
-watch(() => props.modelValue, val => {
-	internalValue.value = val
-})
-
-watch(internalValue, val => {
-	emit('update:modelValue', val)
-});
-
-</script>
-
-
-<template>
-    <select class="form-select form-input" v-model="internalValue">
-        <slot></slot>
-    </select>
-</template>
-
-<style scoped>
-
-@import "/assets/css/forms.css";
-
-</style>
\ No newline at end of file
diff --git a/components/forms/FormSubmitBtn.vue b/components/forms/FormSubmitBtn.vue
deleted file mode 100644
index 9dd6840..0000000
--- a/components/forms/FormSubmitBtn.vue
+++ /dev/null
@@ -1,8 +0,0 @@
-
-<template>
-
-    <button type="submit" class="btn btn-primary btn-block">
-        <slot></slot>
-    </button>
-
-</template>
\ No newline at end of file
diff --git a/components/forms/FormTextarea.vue b/components/forms/FormTextarea.vue
deleted file mode 100644
index 9423059..0000000
--- a/components/forms/FormTextarea.vue
+++ /dev/null
@@ -1,35 +0,0 @@
-
-<script setup lang="ts">
-
-import { ref, watch } from 'vue'
-
-const props = defineProps({
-	modelValue: {
-    type: [String, Number],
-    default: ''
-  }
-})
-const emit = defineEmits(['update:modelValue'])
-
-const internalValue = ref(props.modelValue)
-
-watch(() => props.modelValue, val => {
-	internalValue.value = val
-})
-
-watch(internalValue, val => {
-	emit('update:modelValue', val)
-});
-
-</script>
-
-
-<template>
-    <textarea class="form-control form-input" v-model="internalValue"></textarea>
-</template>
-
-<style scoped>
-
-@import "/assets/css/forms.css";
-
-</style>
\ No newline at end of file
diff --git a/components/img/icon.vue b/components/img/icon.vue
deleted file mode 100644
index 6a32104..0000000
--- a/components/img/icon.vue
+++ /dev/null
@@ -1,5 +0,0 @@
-<template>
-    <svg xmlns="http://www.w3.org/2000/svg" fill="#0087ff" viewBox="0 0 16 16">
-        <path d="M11.251.068a.5.5 0 0 1 .227.58L9.677 6.5H13a.5.5 0 0 1 .364.843l-8 8.5a.5.5 0 0 1-.842-.49L6.323 9.5H3a.5.5 0 0 1-.364-.843l8-8.5a.5.5 0 0 1 .615-.09z" />
-    </svg>
-</template>
\ No newline at end of file
diff --git a/components/img/logo-dark.vue b/components/img/logo-dark.vue
deleted file mode 100644
index 78b1af3..0000000
--- a/components/img/logo-dark.vue
+++ /dev/null
@@ -1,31 +0,0 @@
-<template>
-    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 37.4605686651 8">
-
-        <svg xmlns="http://www.w3.org/2000/svg" width="8" height="8" fill="#0087ff" viewBox="0 0 16 16">
-            <path d="M11.251.068a.5.5 0 0 1 .227.58L9.677 6.5H13a.5.5 0 0 1 .364.843l-8 8.5a.5.5 0 0 1-.842-.49L6.323 9.5H3a.5.5 0 0 1-.364-.843l8-8.5a.5.5 0 0 1 .615-.09z" />
-        </svg>
-
-        <svg xmlns="http://www.w3.org/2000/svg" x="9" y="1" width="10.3974767001" height="4.6750788431" fill="#000000" viewBox="0 10.199999809265137 82.4000015258789 37.04999923706055" data-asc="0.935">
-            <defs/>
-            <g>
-                <g>
-                    <g transform="translate(0, 0)">
-                        <path d="M1.25 46.75Q0.70 46.75 0.35 46.40Q0 46.05 0 45.50L0 13Q0 12.45 0.35 12.10Q0.70 11.75 1.25 11.75L5.80 11.75Q6.55 11.75 6.90 12.10Q7.25 12.45 7.35 12.65L20.70 33.50L20.70 13Q20.70 12.45 21.05 12.10Q21.40 11.75 21.90 11.75L27.00 11.75Q27.55 11.75 27.90 12.10Q28.25 12.45 28.25 13L28.25 45.50Q28.25 46 27.90 46.38Q27.55 46.75 27.00 46.75L22.40 46.75Q21.65 46.75 21.33 46.38Q21.00 46 20.85 45.85L7.55 25.65L7.55 45.50Q7.55 46.05 7.20 46.40Q6.85 46.75 6.30 46.75L1.25 46.75ZM46.70 47.25Q40.95 47.25 37.58 44.05Q34.20 40.85 34 34.75Q34 34.35 34 33.67Q34 33 34 32.60Q34.20 28.75 35.75 25.97Q37.30 23.20 40.10 21.72Q42.90 20.25 46.65 20.25Q50.85 20.25 53.67 21.97Q56.50 23.70 57.92 26.67Q59.35 29.65 59.35 33.50L59.35 34.65Q59.35 35.15 58.98 35.50Q58.60 35.85 58.10 35.85L41.75 35.85Q41.75 35.90 41.75 36.02Q41.75 36.15 41.75 36.25Q41.80 37.85 42.38 39.17Q42.95 40.50 44.02 41.30Q45.10 42.10 46.60 42.10Q47.85 42.10 48.65 41.75Q49.45 41.40 49.98 40.90Q50.50 40.40 50.75 40.05Q51.20 39.55 51.48 39.42Q51.75 39.30 52.35 39.30L57.55 39.30Q58.05 39.30 58.38 39.58Q58.70 39.85 58.65 40.35Q58.60 41.15 57.83 42.33Q57.05 43.50 55.55 44.63Q54.05 45.75 51.83 46.50Q49.60 47.25 46.70 47.25M41.75 31.30L51.55 31.30L51.55 31.20Q51.55 29.40 50.98 28.07Q50.40 26.75 49.30 26Q48.20 25.25 46.65 25.25Q45.10 25.25 44 26Q42.90 26.75 42.33 28.07Q41.75 29.40 41.75 31.20L41.75 31.30ZM76.85 46.75Q73.75 46.75 71.55 45.73Q69.35 44.70 68.23 42.55Q67.10 40.40 67.10 37.15L67.10 26.65L63.20 26.65Q62.65 26.65 62.30 26.30Q61.95 25.95 61.95 25.40L61.95 22Q61.95 21.45 62.30 21.10Q62.65 20.75 63.20 20.75L67.10 20.75L67.10 12.50Q67.10 11.95 67.48 11.60Q67.85 11.25 68.35 11.25L73.25 11.25Q73.80 11.25 74.15 11.60Q74.50 11.95 74.50 12.50L74.50 20.75L80.75 20.75Q81.25 20.75 81.60 21.10Q81.95 21.45 81.95 22L81.95 25.40Q81.95 25.95 81.60 26.30Q81.25 26.65 80.75 26.65L74.50 26.65L74.50 36.55Q74.50 38.45 75.18 39.52Q75.85 40.60 77.55 40.60L81.20 40.60Q81.70 40.60 82.05 40.95Q82.40 41.30 82.40 41.80L82.40 45.50Q82.40 46.05 82.05 46.40Q81.70 46.75 81.20 46.75L76.85 46.75Z"/>
-                    </g>
-                </g>
-            </g>
-        </svg>
-
-        <svg xmlns="http://www.w3.org/2000/svg" x="20.0157734325" y="1" width="17.4447952326" height="6" fill="#0087ff" viewBox="0 10.199999809265137 138.25 47.54999923706055" data-asc="0.935">
-            <defs/>
-            <g>
-                <g> 
-                    <g transform="translate(0, 0)">
-                        <path d="M1.25 46.75Q0.70 46.75 0.35 46.40Q0 46.05 0 45.50L0 13Q0 12.45 0.35 12.10Q0.70 11.75 1.25 11.75L6.90 11.75Q7.45 11.75 7.80 12.10Q8.15 12.45 8.15 13L8.15 45.50Q8.15 46.05 7.80 46.40Q7.45 46.75 6.90 46.75L1.25 46.75ZM27.20 57.75Q23.50 57.75 21.05 56.77Q18.60 55.80 17.18 54.42Q15.75 53.05 15.15 51.70Q14.55 50.35 14.50 49.60Q14.45 49.05 14.85 48.70Q15.25 48.35 15.75 48.35L21.10 48.35Q21.55 48.35 21.88 48.58Q22.20 48.80 22.40 49.35Q22.65 49.95 23.10 50.63Q23.55 51.30 24.48 51.75Q25.40 52.20 26.95 52.20Q28.70 52.20 29.85 51.70Q31.00 51.20 31.58 50Q32.15 48.80 32.15 46.75L32.15 43.40Q30.95 44.70 29.13 45.55Q27.30 46.40 24.65 46.40Q22.05 46.40 20.08 45.58Q18.10 44.75 16.80 43.23Q15.50 41.70 14.80 39.55Q14.10 37.40 14.00 34.70Q13.95 33.35 14.00 32.05Q14.10 29.45 14.80 27.30Q15.50 25.15 16.80 23.57Q18.10 22 20.08 21.13Q22.05 20.25 24.65 20.25Q27.40 20.25 29.35 21.30Q31.30 22.35 32.55 23.90L32.55 22Q32.55 21.50 32.90 21.13Q33.25 20.75 33.75 20.75L38.65 20.75Q39.15 20.75 39.53 21.13Q39.90 21.50 39.90 22L39.95 46.05Q39.95 49.80 38.50 52.40Q37.05 55 34.23 56.38Q31.40 57.75 27.20 57.75M26.95 40.55Q28.75 40.55 29.88 39.73Q31.00 38.90 31.55 37.63Q32.10 36.35 32.15 34.95Q32.20 34.40 32.20 33.38Q32.20 32.35 32.15 31.80Q32.10 30.40 31.55 29.13Q31.00 27.85 29.88 27.05Q28.75 26.25 26.95 26.25Q25.05 26.25 23.95 27.07Q22.85 27.90 22.35 29.25Q21.85 30.60 21.75 32.20Q21.70 33.40 21.75 34.55Q21.85 36.20 22.35 37.55Q22.85 38.90 23.95 39.73Q25.05 40.55 26.95 40.55ZM47.45 46.75Q46.95 46.75 46.60 46.40Q46.25 46.05 46.25 45.50L46.25 22Q46.25 21.45 46.60 21.10Q46.95 20.75 47.45 20.75L52.35 20.75Q52.90 20.75 53.25 21.10Q53.60 21.45 53.60 22L53.60 23.95Q54.90 22.35 56.95 21.30Q59 20.25 61.95 20.25Q64.90 20.25 67.13 21.57Q69.35 22.90 70.63 25.42Q71.90 27.95 71.90 31.55L71.90 45.50Q71.90 46.05 71.53 46.40Q71.15 46.75 70.65 46.75L65.35 46.75Q64.80 46.75 64.45 46.40Q64.10 46.05 64.10 45.50L64.10 31.85Q64.10 29.20 62.83 27.72Q61.55 26.25 59.10 26.25Q56.75 26.25 55.35 27.72Q53.95 29.20 53.95 31.85L53.95 45.50Q53.95 46.05 53.60 46.40Q53.25 46.75 52.75 46.75L47.45 46.75ZM79.10 46.75Q78.60 46.75 78.25 46.40Q77.90 46.05 77.90 45.50L77.90 22Q77.90 21.45 78.25 21.10Q78.60 20.75 79.10 20.75L84.10 20.75Q84.65 20.75 85 21.10Q85.35 21.45 85.35 22L85.35 45.50Q85.35 46.05 85 46.40Q84.65 46.75 84.10 46.75L79.10 46.75M78.95 16.75Q78.45 16.75 78.10 16.40Q77.75 16.05 77.75 15.50L77.75 11.50Q77.75 10.95 78.10 10.57Q78.45 10.20 78.95 10.20L84.20 10.20Q84.75 10.20 85.13 10.57Q85.50 10.95 85.50 11.50L85.50 15.50Q85.50 16.05 85.13 16.40Q84.75 16.75 84.20 16.75L78.95 16.75ZM104.10 46.75Q101 46.75 98.80 45.73Q96.60 44.70 95.48 42.55Q94.35 40.40 94.35 37.15L94.35 26.65L90.45 26.65Q89.90 26.65 89.55 26.30Q89.20 25.95 89.20 25.40L89.20 22Q89.20 21.45 89.55 21.10Q89.90 20.75 90.45 20.75L94.35 20.75L94.35 12.50Q94.35 11.95 94.73 11.60Q95.10 11.25 95.60 11.25L100.50 11.25Q101.05 11.25 101.40 11.60Q101.75 11.95 101.75 12.50L101.75 20.75L108 20.75Q108.50 20.75 108.85 21.10Q109.20 21.45 109.20 22L109.20 25.40Q109.20 25.95 108.85 26.30Q108.50 26.65 108 26.65L101.75 26.65L101.75 36.55Q101.75 38.45 102.43 39.52Q103.10 40.60 104.80 40.60L108.45 40.60Q108.95 40.60 109.30 40.95Q109.65 41.30 109.65 41.80L109.65 45.50Q109.65 46.05 109.30 46.40Q108.95 46.75 108.45 46.75L104.10 46.75ZM125.60 47.25Q119.85 47.25 116.48 44.05Q113.10 40.85 112.90 34.75Q112.90 34.35 112.90 33.67Q112.90 33 112.90 32.60Q113.10 28.75 114.65 25.97Q116.20 23.20 119.00 21.72Q121.80 20.25 125.55 20.25Q129.75 20.25 132.58 21.97Q135.40 23.70 136.83 26.67Q138.25 29.65 138.25 33.50L138.25 34.65Q138.25 35.15 137.88 35.50Q137.50 35.85 137 35.85L120.65 35.85Q120.65 35.90 120.65 36.02Q120.65 36.15 120.65 36.25Q120.70 37.85 121.28 39.17Q121.85 40.50 122.93 41.30Q124.00 42.10 125.50 42.10Q126.75 42.10 127.55 41.75Q128.35 41.40 128.88 40.90Q129.40 40.40 129.65 40.05Q130.10 39.55 130.38 39.42Q130.65 39.30 131.25 39.30L136.45 39.30Q136.95 39.30 137.28 39.58Q137.60 39.85 137.55 40.35Q137.50 41.15 136.73 42.33Q135.95 43.50 134.45 44.63Q132.95 45.75 130.73 46.50Q128.50 47.25 125.60 47.25M120.65 31.30L130.45 31.30L130.45 31.20Q130.45 29.40 129.88 28.07Q129.30 26.75 128.20 26Q127.10 25.25 125.55 25.25Q124.00 25.25 122.90 26Q121.80 26.75 121.23 28.07Q120.65 29.40 120.65 31.20L120.65 31.30Z"/>
-                    </g>
-                </g>
-            </g>
-        </svg>
-
-    </svg>
-</template>
diff --git a/components/img/logo-white.vue b/components/img/logo-white.vue
deleted file mode 100644
index 26dd5b2..0000000
--- a/components/img/logo-white.vue
+++ /dev/null
@@ -1,31 +0,0 @@
-<template>
-    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 37.4605686651 8">
-
-        <svg xmlns="http://www.w3.org/2000/svg" width="8" height="8" fill="#0087ff" viewBox="0 0 16 16">
-            <path d="M11.251.068a.5.5 0 0 1 .227.58L9.677 6.5H13a.5.5 0 0 1 .364.843l-8 8.5a.5.5 0 0 1-.842-.49L6.323 9.5H3a.5.5 0 0 1-.364-.843l8-8.5a.5.5 0 0 1 .615-.09z" />
-        </svg>
-
-        <svg xmlns="http://www.w3.org/2000/svg" x="9" y="1" width="10.3974767001" height="4.6750788431" fill="#ffffff" viewBox="0 10.199999809265137 82.4000015258789 37.04999923706055" data-asc="0.935">
-            <defs/>
-            <g>
-                <g>
-                    <g transform="translate(0, 0)">
-                        <path d="M1.25 46.75Q0.70 46.75 0.35 46.40Q0 46.05 0 45.50L0 13Q0 12.45 0.35 12.10Q0.70 11.75 1.25 11.75L5.80 11.75Q6.55 11.75 6.90 12.10Q7.25 12.45 7.35 12.65L20.70 33.50L20.70 13Q20.70 12.45 21.05 12.10Q21.40 11.75 21.90 11.75L27.00 11.75Q27.55 11.75 27.90 12.10Q28.25 12.45 28.25 13L28.25 45.50Q28.25 46 27.90 46.38Q27.55 46.75 27.00 46.75L22.40 46.75Q21.65 46.75 21.33 46.38Q21.00 46 20.85 45.85L7.55 25.65L7.55 45.50Q7.55 46.05 7.20 46.40Q6.85 46.75 6.30 46.75L1.25 46.75ZM46.70 47.25Q40.95 47.25 37.58 44.05Q34.20 40.85 34 34.75Q34 34.35 34 33.67Q34 33 34 32.60Q34.20 28.75 35.75 25.97Q37.30 23.20 40.10 21.72Q42.90 20.25 46.65 20.25Q50.85 20.25 53.67 21.97Q56.50 23.70 57.92 26.67Q59.35 29.65 59.35 33.50L59.35 34.65Q59.35 35.15 58.98 35.50Q58.60 35.85 58.10 35.85L41.75 35.85Q41.75 35.90 41.75 36.02Q41.75 36.15 41.75 36.25Q41.80 37.85 42.38 39.17Q42.95 40.50 44.02 41.30Q45.10 42.10 46.60 42.10Q47.85 42.10 48.65 41.75Q49.45 41.40 49.98 40.90Q50.50 40.40 50.75 40.05Q51.20 39.55 51.48 39.42Q51.75 39.30 52.35 39.30L57.55 39.30Q58.05 39.30 58.38 39.58Q58.70 39.85 58.65 40.35Q58.60 41.15 57.83 42.33Q57.05 43.50 55.55 44.63Q54.05 45.75 51.83 46.50Q49.60 47.25 46.70 47.25M41.75 31.30L51.55 31.30L51.55 31.20Q51.55 29.40 50.98 28.07Q50.40 26.75 49.30 26Q48.20 25.25 46.65 25.25Q45.10 25.25 44 26Q42.90 26.75 42.33 28.07Q41.75 29.40 41.75 31.20L41.75 31.30ZM76.85 46.75Q73.75 46.75 71.55 45.73Q69.35 44.70 68.23 42.55Q67.10 40.40 67.10 37.15L67.10 26.65L63.20 26.65Q62.65 26.65 62.30 26.30Q61.95 25.95 61.95 25.40L61.95 22Q61.95 21.45 62.30 21.10Q62.65 20.75 63.20 20.75L67.10 20.75L67.10 12.50Q67.10 11.95 67.48 11.60Q67.85 11.25 68.35 11.25L73.25 11.25Q73.80 11.25 74.15 11.60Q74.50 11.95 74.50 12.50L74.50 20.75L80.75 20.75Q81.25 20.75 81.60 21.10Q81.95 21.45 81.95 22L81.95 25.40Q81.95 25.95 81.60 26.30Q81.25 26.65 80.75 26.65L74.50 26.65L74.50 36.55Q74.50 38.45 75.18 39.52Q75.85 40.60 77.55 40.60L81.20 40.60Q81.70 40.60 82.05 40.95Q82.40 41.30 82.40 41.80L82.40 45.50Q82.40 46.05 82.05 46.40Q81.70 46.75 81.20 46.75L76.85 46.75Z"/>
-                    </g>
-                </g>
-            </g>
-        </svg>
-
-        <svg xmlns="http://www.w3.org/2000/svg" x="20.0157734325" y="1" width="17.4447952326" height="6" fill="#0087ff" viewBox="0 10.199999809265137 138.25 47.54999923706055" data-asc="0.935">
-            <defs/>
-            <g>
-                <g> 
-                    <g transform="translate(0, 0)">
-                        <path d="M1.25 46.75Q0.70 46.75 0.35 46.40Q0 46.05 0 45.50L0 13Q0 12.45 0.35 12.10Q0.70 11.75 1.25 11.75L6.90 11.75Q7.45 11.75 7.80 12.10Q8.15 12.45 8.15 13L8.15 45.50Q8.15 46.05 7.80 46.40Q7.45 46.75 6.90 46.75L1.25 46.75ZM27.20 57.75Q23.50 57.75 21.05 56.77Q18.60 55.80 17.18 54.42Q15.75 53.05 15.15 51.70Q14.55 50.35 14.50 49.60Q14.45 49.05 14.85 48.70Q15.25 48.35 15.75 48.35L21.10 48.35Q21.55 48.35 21.88 48.58Q22.20 48.80 22.40 49.35Q22.65 49.95 23.10 50.63Q23.55 51.30 24.48 51.75Q25.40 52.20 26.95 52.20Q28.70 52.20 29.85 51.70Q31.00 51.20 31.58 50Q32.15 48.80 32.15 46.75L32.15 43.40Q30.95 44.70 29.13 45.55Q27.30 46.40 24.65 46.40Q22.05 46.40 20.08 45.58Q18.10 44.75 16.80 43.23Q15.50 41.70 14.80 39.55Q14.10 37.40 14.00 34.70Q13.95 33.35 14.00 32.05Q14.10 29.45 14.80 27.30Q15.50 25.15 16.80 23.57Q18.10 22 20.08 21.13Q22.05 20.25 24.65 20.25Q27.40 20.25 29.35 21.30Q31.30 22.35 32.55 23.90L32.55 22Q32.55 21.50 32.90 21.13Q33.25 20.75 33.75 20.75L38.65 20.75Q39.15 20.75 39.53 21.13Q39.90 21.50 39.90 22L39.95 46.05Q39.95 49.80 38.50 52.40Q37.05 55 34.23 56.38Q31.40 57.75 27.20 57.75M26.95 40.55Q28.75 40.55 29.88 39.73Q31.00 38.90 31.55 37.63Q32.10 36.35 32.15 34.95Q32.20 34.40 32.20 33.38Q32.20 32.35 32.15 31.80Q32.10 30.40 31.55 29.13Q31.00 27.85 29.88 27.05Q28.75 26.25 26.95 26.25Q25.05 26.25 23.95 27.07Q22.85 27.90 22.35 29.25Q21.85 30.60 21.75 32.20Q21.70 33.40 21.75 34.55Q21.85 36.20 22.35 37.55Q22.85 38.90 23.95 39.73Q25.05 40.55 26.95 40.55ZM47.45 46.75Q46.95 46.75 46.60 46.40Q46.25 46.05 46.25 45.50L46.25 22Q46.25 21.45 46.60 21.10Q46.95 20.75 47.45 20.75L52.35 20.75Q52.90 20.75 53.25 21.10Q53.60 21.45 53.60 22L53.60 23.95Q54.90 22.35 56.95 21.30Q59 20.25 61.95 20.25Q64.90 20.25 67.13 21.57Q69.35 22.90 70.63 25.42Q71.90 27.95 71.90 31.55L71.90 45.50Q71.90 46.05 71.53 46.40Q71.15 46.75 70.65 46.75L65.35 46.75Q64.80 46.75 64.45 46.40Q64.10 46.05 64.10 45.50L64.10 31.85Q64.10 29.20 62.83 27.72Q61.55 26.25 59.10 26.25Q56.75 26.25 55.35 27.72Q53.95 29.20 53.95 31.85L53.95 45.50Q53.95 46.05 53.60 46.40Q53.25 46.75 52.75 46.75L47.45 46.75ZM79.10 46.75Q78.60 46.75 78.25 46.40Q77.90 46.05 77.90 45.50L77.90 22Q77.90 21.45 78.25 21.10Q78.60 20.75 79.10 20.75L84.10 20.75Q84.65 20.75 85 21.10Q85.35 21.45 85.35 22L85.35 45.50Q85.35 46.05 85 46.40Q84.65 46.75 84.10 46.75L79.10 46.75M78.95 16.75Q78.45 16.75 78.10 16.40Q77.75 16.05 77.75 15.50L77.75 11.50Q77.75 10.95 78.10 10.57Q78.45 10.20 78.95 10.20L84.20 10.20Q84.75 10.20 85.13 10.57Q85.50 10.95 85.50 11.50L85.50 15.50Q85.50 16.05 85.13 16.40Q84.75 16.75 84.20 16.75L78.95 16.75ZM104.10 46.75Q101 46.75 98.80 45.73Q96.60 44.70 95.48 42.55Q94.35 40.40 94.35 37.15L94.35 26.65L90.45 26.65Q89.90 26.65 89.55 26.30Q89.20 25.95 89.20 25.40L89.20 22Q89.20 21.45 89.55 21.10Q89.90 20.75 90.45 20.75L94.35 20.75L94.35 12.50Q94.35 11.95 94.73 11.60Q95.10 11.25 95.60 11.25L100.50 11.25Q101.05 11.25 101.40 11.60Q101.75 11.95 101.75 12.50L101.75 20.75L108 20.75Q108.50 20.75 108.85 21.10Q109.20 21.45 109.20 22L109.20 25.40Q109.20 25.95 108.85 26.30Q108.50 26.65 108 26.65L101.75 26.65L101.75 36.55Q101.75 38.45 102.43 39.52Q103.10 40.60 104.80 40.60L108.45 40.60Q108.95 40.60 109.30 40.95Q109.65 41.30 109.65 41.80L109.65 45.50Q109.65 46.05 109.30 46.40Q108.95 46.75 108.45 46.75L104.10 46.75ZM125.60 47.25Q119.85 47.25 116.48 44.05Q113.10 40.85 112.90 34.75Q112.90 34.35 112.90 33.67Q112.90 33 112.90 32.60Q113.10 28.75 114.65 25.97Q116.20 23.20 119.00 21.72Q121.80 20.25 125.55 20.25Q129.75 20.25 132.58 21.97Q135.40 23.70 136.83 26.67Q138.25 29.65 138.25 33.50L138.25 34.65Q138.25 35.15 137.88 35.50Q137.50 35.85 137 35.85L120.65 35.85Q120.65 35.90 120.65 36.02Q120.65 36.15 120.65 36.25Q120.70 37.85 121.28 39.17Q121.85 40.50 122.93 41.30Q124.00 42.10 125.50 42.10Q126.75 42.10 127.55 41.75Q128.35 41.40 128.88 40.90Q129.40 40.40 129.65 40.05Q130.10 39.55 130.38 39.42Q130.65 39.30 131.25 39.30L136.45 39.30Q136.95 39.30 137.28 39.58Q137.60 39.85 137.55 40.35Q137.50 41.15 136.73 42.33Q135.95 43.50 134.45 44.63Q132.95 45.75 130.73 46.50Q128.50 47.25 125.60 47.25M120.65 31.30L130.45 31.30L130.45 31.20Q130.45 29.40 129.88 28.07Q129.30 26.75 128.20 26Q127.10 25.25 125.55 25.25Q124.00 25.25 122.90 26Q121.80 26.75 121.23 28.07Q120.65 29.40 120.65 31.20L120.65 31.30Z"/>
-                    </g>
-                </g>
-            </g>
-        </svg>
-
-    </svg>
-</template>
diff --git a/components/test-websocket.vue b/components/test-websocket.vue
deleted file mode 100644
index 80fe76e..0000000
--- a/components/test-websocket.vue
+++ /dev/null
@@ -1,81 +0,0 @@
-<template>
-    <div>
-        <div :style="{ color: statusColor }">
-            Status: {{ connectionStatus }}
-        </div>
-
-        <button class="mt-2 px-4 py-2 rounded btn btn-primary"
-            :disabled="connectionStatus === 'Open' || connectionStatus === 'Connecting'" @click="connect">
-            Connect
-        </button>
-
-        <div id="messages" class="mt-4">
-            <div v-for="(msg, index) in messages" :key="index">
-                📩 {{ msg }}
-            </div>
-        </div>
-    </div>
-</template>
-
-<script setup lang="ts">
-
-import { ref, computed, onMounted } from 'vue'
-import { EncodingUtils } from '@/shared/encoding'
-
-const messages = ref<string[]>([])
-const connectionStatus = ref<'Connecting' | 'Open' | 'Closed' | 'Error'>('Closed')
-
-const statusColor = computed(() => {
-    switch (connectionStatus.value) {
-        case 'Connecting': return 'orange'
-        case 'Open': return 'green'
-        case 'Closed': return 'gray'
-        case 'Error': return 'red'
-    }
-})
-
-let socket: WebSocket | null = null
-
-
-function connect() {
-    if (connectionStatus.value === 'Open' || connectionStatus.value === 'Connecting') return
-
-    connectionStatus.value = 'Connecting'
-    socket = new WebSocket(`ws://localhost:3000/api/agent-control-service?id=${EncodingUtils.toHex("1")}&secret=${EncodingUtils.toHex("123456")}`);
-    console.log('Connecting to WebSocket server...')
-
-    socket.onopen = () => {
-        connectionStatus.value = 'Open'
-    }
-
-    socket.onmessage = async (event) => {
-
-        const msg = event.data as string;
-        messages.value.push(msg);
-
-        const [type, id, payload] = msg.split(':', 2);
-        
-        const response = `${type}:${id}:${JSON.stringify({
-            status: "success"
-        })}`;
-
-        console.log('Sending response:', response);
-        socket?.send(response);
-    }
-
-    socket.onclose = () => {
-        console.log('WebSocket connection closed', event)
-        connectionStatus.value = 'Closed'
-    }
-
-    socket.onerror = () => {
-        console.error('WebSocket error observed:', event)
-        connectionStatus.value = 'Error'
-    }
-}
-
-onMounted(() => {
-    connect();
-});
-
-</script>
diff --git a/composables/useAPI.ts b/composables/useAPI.ts
deleted file mode 100644
index 2108c35..0000000
--- a/composables/useAPI.ts
+++ /dev/null
@@ -1,120 +0,0 @@
-import type { FetchError } from 'ofetch';
-import type { NitroFetchRequest, AvailableRouterMethod as _AvailableRouterMethod } from 'nitropack';
-import type { Ref } from 'vue';
-import type { DefaultAsyncDataErrorValue, DefaultAsyncDataValue } from 'nuxt/app/defaults';
-import type { _AsyncData, KeysOf, PickFrom } from "@/node_modules/nuxt/dist/app/composables/asyncData.js";
-import type { FetchResult, UseFetchOptions } from '#app';
-
-type AvailableRouterMethod<R extends NitroFetchRequest> = Uppercase<_AvailableRouterMethod<R>>;
-
-// declare function useFetch<
-//     ResT = void,
-//     ErrorT = FetchError,
-//     ReqT extends NitroFetchRequest = NitroFetchRequest,
-//     Method extends AvailableRouterMethod<ReqT> = ResT extends void ? 'get' extends AvailableRouterMethod<ReqT> ? 'get' : AvailableRouterMethod<ReqT> : AvailableRouterMethod<ReqT>,
-//     _ResT = ResT extends void ? FetchResult<ReqT, Method> : ResT,
-//     DataT = _ResT,
-//     PickKeys extends KeysOf<DataT> = KeysOf<DataT>,
-//     DefaultT = DefaultAsyncDataValue
-// >(request: Ref<ReqT> | ReqT | (() => ReqT), opts?: UseFetchOptions<_ResT, DataT, PickKeys, DefaultT, ReqT, Method>): AsyncData<
-//     PickFrom<DataT, PickKeys> | DefaultT, ErrorT | DefaultAsyncDataErrorValue
-// >;
-
-// declare function useFetch<
-//     ResT = void,
-//     ErrorT = FetchError,
-//     ReqT extends NitroFetchRequest = NitroFetchRequest,
-//     Method extends AvailableRouterMethod<ReqT> = ResT extends void ? 'get' extends AvailableRouterMethod<ReqT> ? 'get' : AvailableRouterMethod<ReqT> : AvailableRouterMethod<ReqT>,
-//     _ResT = ResT extends void ? FetchResult<ReqT, Method> : ResT,
-//     DataT = _ResT,
-//     PickKeys extends KeysOf<DataT> = KeysOf<DataT>,
-//     DefaultT = DataT
-// >(request: Ref<ReqT> | ReqT | (() => ReqT), opts?: UseFetchOptions<_ResT, DataT, PickKeys, DefaultT, ReqT, Method>): AsyncData<
-//     PickFrom<DataT, PickKeys> | DefaultT, ErrorT | DefaultAsyncDataErrorValue
-// >;
-
-
-type FetchResponseData<DataT, PickKeys extends KeysOf<DataT>, DefaultT, ErrorT> = NonNullable<_AsyncData<PickFrom<DataT, PickKeys> | DefaultT, ErrorT | DefaultAsyncDataErrorValue>["data"]["value"]>;
-
-export type APIResponse<DataT, PickKeys extends KeysOf<DataT>, DefaultT, ErrorT, ResData = FetchResponseData<DataT, PickKeys, DefaultT, ErrorT>> = {
-    status: "ERROR";
-    message: string;
-    data: undefined;
-    // @ts-ignore
-} | ResData;
-
-
-export function useAPI<
-    ResT = void,
-    ErrorT = FetchError,
-    ReqT extends NitroFetchRequest = NitroFetchRequest,
-    Method extends AvailableRouterMethod<ReqT> = ResT extends void ? 'GET' extends AvailableRouterMethod<ReqT> ? 'GET' : AvailableRouterMethod<ReqT> : AvailableRouterMethod<ReqT>,
-    _ResT = ResT extends void ? FetchResult<ReqT, Method> : ResT,
-    DataT = _ResT,
-    PickKeys extends KeysOf<DataT> = KeysOf<DataT>,
-    DefaultT = DefaultAsyncDataValue
->(
-    request: Ref<ReqT> | ReqT | (() => ReqT),
-    opts?: UseFetchOptions<_ResT, DataT, PickKeys, DefaultT, ReqT, Method>,
-    disableAuthRedirect?: boolean
-): Promise<APIResponse<DataT, PickKeys, DefaultT, ErrorT>>;
-
-export function useAPI<
-    ResT = void,
-    ErrorT = FetchError,
-    ReqT extends NitroFetchRequest = NitroFetchRequest,
-    Method extends AvailableRouterMethod<ReqT> = ResT extends void ? 'GET' extends AvailableRouterMethod<ReqT> ? 'GET' : AvailableRouterMethod<ReqT> : AvailableRouterMethod<ReqT>,
-    _ResT = ResT extends void ? FetchResult<ReqT, Method> : ResT,
-    DataT = _ResT,
-    PickKeys extends KeysOf<DataT> = KeysOf<DataT>,
-    DefaultT = DataT
->(
-    request: Ref<ReqT> | ReqT | (() => ReqT),
-    opts?: UseFetchOptions<_ResT, DataT, PickKeys, DefaultT, ReqT, Method>,
-    disableAuthRedirect?: boolean
-): Promise<APIResponse<DataT, PickKeys, DefaultT, ErrorT>>;
-
-export async function useAPI(
-    request: Parameters<typeof useFetch>[0],
-    opts?: Parameters<typeof useFetch>[1],
-    disableAuthRedirect = false
-) {
-    
-    try {
-        let data: APIResponse<any, any, any, any>;
-
-        if (import.meta.server) {
-            data = (await useFetch(request, { ignoreResponseError: true, ...opts })).data?.value;
-        } else {
-
-            let requestValue = request as NitroFetchRequest;
-            if (typeof request === 'function') {
-                requestValue = request();
-            } else if (isRef(request)) {
-                requestValue = request.value;
-            }
-
-            data = (await $fetch(requestValue, { ignoreResponseError: true, ...opts } as any));
-        }
-        
-
-        if (data) {
-            if (import.meta.client && !disableAuthRedirect &&
-                data.status === "ERROR" && (data.message === "No session found" || data.message === "Invalid session")
-            ) {
-                navigateTo('/auth/login?url=' + encodeURIComponent(useRoute().fullPath));
-            }
-            return data;
-        }
-
-    } catch (error) {
-        console.error("API Error:", error);
-    }
-
-    return {
-        status: "ERROR",
-        message: "An error occurred while fetching the API data."
-    }
-
-}
-
diff --git a/composables/useDataFilter.ts b/composables/useDataFilter.ts
deleted file mode 100644
index 6f13129..0000000
--- a/composables/useDataFilter.ts
+++ /dev/null
@@ -1,46 +0,0 @@
-
-interface FilterSetting {
-    search?: {
-        query: Ref<string>;
-        props: string[];
-    };
-    match?: Array<{
-        query: Ref<string>;
-        prop: string;
-    }>;
-}
-
-export function useDataFilter<T extends Record<string, any>>(data: T[], setting: FilterSetting) {
-
-    return computed(() => {
-        let filtered = data;
-
-        if (setting.search && setting.search?.query.value) {
-
-            const query = setting.search.query.value.toLowerCase()
-            
-            filtered = filtered.filter(item => {
-
-                for (const prop of (setting.search as any).props as string[]) {
-                    const device = item;
-                    if (device[prop] && device[prop].toLowerCase().includes(query)) {
-                        return true;
-                    }
-                }
-            });
-        }
-
-        if (setting.match) {
-
-            for (const match of setting.match) {
-                if (match.query.value) {
-                    filtered = filtered.filter(item => item[match.prop] === match.query.value);
-                }
-            }
-
-        }
-
-        return filtered;
-    });
-
-}
\ No newline at end of file
diff --git a/composables/useNotificationToast.ts b/composables/useNotificationToast.ts
deleted file mode 100644
index 999eb2d..0000000
--- a/composables/useNotificationToast.ts
+++ /dev/null
@@ -1,69 +0,0 @@
-
-export interface NotificationToastSettings {
-    type: "success" | "error" | "info" | "warning";
-    message: string;
-}
-
-const toastTypes = {
-    success: {
-        backgroundColor: '#28a745',
-        borderColor: '#155724',
-        icon: 'check-circle-fill'
-    },
-    error: {
-        backgroundColor: '#dc3545',
-        borderColor: '#721c24',
-        icon: 'exclamation-triangle-fill'
-    },
-    info: {
-        backgroundColor: '#17a2b8',
-        borderColor: '#0c5460',
-        icon: 'info-circle-fill'
-    },
-    warning: {
-        backgroundColor: '#ffc107',
-        borderColor: '#856404',
-        icon: 'exclamation-circle-fill'
-    }
-}
-
-export function useNotificationToast(settings: NotificationToastSettings): void {
-
-    let toastContainer = document.getElementById('notification-toast-container');
-    if (!toastContainer) {
-        toastContainer = document.createElement('div');
-        toastContainer.id = 'notification-toast-container';
-        // toastContainer.className = 'toast-container position-fixed bottom-0 end-0 p-3 text-white';
-        toastContainer.className = 'toast-container position-fixed top-0 end-0 p-3 text-white';
-
-        // document.getElementById('dashboard-page')?.appendChild(toastContainer);
-        document.body.appendChild(toastContainer);
-    }
-
-    const toast = document.createElement('div');
-    toast.className = 'toast text-white d-flex p-2 align-items-center';
-    toast.setAttribute('role', 'alert');
-    toast.setAttribute('aria-live', 'assertive');
-    toast.setAttribute('aria-atomic', 'true');
-    toast.setAttribute('data-bs-delay', '2000');
-
-    toast.style.backgroundColor = toastTypes[settings.type].backgroundColor;
-    toast.style.border = '1px solid #343a40';
-    toast.style.borderRadius = '0.5rem';
-
-    toast.innerHTML = `
-        <i class="bi bi-${toastTypes[settings.type].icon} me-2"></i>
-        <div class="me-auto fs-6 fw-bold">${settings.message}</div>
-        <button type="button" class="btn-close" data-bs-dismiss="toast" aria-label="Close"></button>
-    `;
-
-    toastContainer.appendChild(toast);
-
-    // @ts-ignore
-    const ti = bootstrap.Toast.getOrCreateInstance(toast).show();
-
-
-    toast.addEventListener('hidden.bs.toast', () => {
-        toast.remove();
-    }, { once: true });
-}
diff --git a/config/config.sample.json b/config/config.sample.json
deleted file mode 100644
index 9e26dfe..0000000
--- a/config/config.sample.json
+++ /dev/null
@@ -1 +0,0 @@
-{}
\ No newline at end of file
diff --git a/devutils/createAgent.ts b/devutils/createAgent.ts
deleted file mode 100644
index 9953c03..0000000
--- a/devutils/createAgent.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-import { DBStorage } from '../server/db';
-import { AgentSecrets } from '../server/utils/auth/agentSecrets';
-
-await DBStorage.init();
-
-const secret = "123456";
-
-const agent: DBStorage.Agent.ModelWithoutID = {
-    name: "Test Agent",
-    type: "microcontroller",
-    description: "This is a test agent",
-    secretHash: AgentSecrets.hash(secret),
-    ownerID: 1
-}
-
-const id = await DBStorage.Agents.insert(agent);
-console.log(`Created test agent ${id} with secret '${secret}'. Restart the server to load it.`);
diff --git a/devutils/createTestUser.ts b/devutils/createTestUser.ts
deleted file mode 100644
index 1a7ff76..0000000
--- a/devutils/createTestUser.ts
+++ /dev/null
@@ -1,13 +0,0 @@
-import { DBStorage } from '../server/db';
-import bcrypt from 'bcrypt';
-
-await DBStorage.init();
-
-const myuser: DBStorage.User.ModelWithoutID = {
-    username: "admin",
-    password_hash: await bcrypt.hash("123456", 10),
-    role: "admin",
-    favorites: []
-}
-
-await DBStorage.Users.insert(myuser);
diff --git a/docker/Dockerfile b/docker/Dockerfile
index e46c6a8..ed4c42e 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -1,29 +1,40 @@
-FROM oven/bun:1 AS base
+# Production image: the full-stack server bundle (.output/ — Nuxt + the Hono API, Bun preset) on
+# the Bun runtime. Build it first (CI does this): `bun run build`. .output/ is self-contained;
+# only the Drizzle migrations are copied next to it — DB.init applies them on startup
+# (NETIGNITE_DB_AUTO_MIGRATE) from NETIGNITE_DB_MIGRATION_DIR. Layout: app under app/, data/
+# and config/ are volumes beside it.
+# Runtime config comes from the prefixed env: one `NETIGNITE_APP_URL` drives both the API side
+# (CORS, links in emails) and the browser's config — the Nitro banner in nuxt.config.ts maps it
+# onto `NUXT_PUBLIC_APP_URL` at server start; NUXT_PUBLIC_* remains a pure override.
+FROM oven/bun:1-slim
 
-WORKDIR /opt/netignite/app
+RUN apt-get update && apt-get install -y --no-install-recommends curl ca-certificates \
+	&& rm -rf /var/lib/apt/lists/*
 
-COPY . .
-COPY ./config/config.sample.json /etc/netignite/config.sample.json
+WORKDIR /opt/netignite
 
-RUN bun install --production
-RUN bun run build
+COPY ./.output /opt/netignite/app/.output
+COPY ./drizzle/migrations /opt/netignite/app/drizzle/migrations
 
+EXPOSE 18232/tcp
 
-FROM base AS production
+ENV NODE_ENV=production
 
-WORKDIR /opt/netignite/
+ENV NITRO_HOST=::
+ENV NITRO_PORT=18232
 
-COPY --from=base /opt/netignite/app/.output ./app
+ENV NETIGNITE_DB_PATH=/opt/netignite/data/netignite.sqlite
+ENV NETIGNITE_DB_AUTO_MIGRATE=true
+ENV NETIGNITE_DB_MIGRATION_DIR=/opt/netignite/app/drizzle/migrations
 
-VOLUME [ "/opt/netignite/data" ]
-VOLUME [ "/opt/netignite/config" ]
-VOLUME [ "/opt/netignite/logs" ]
+ENV NETIGNITE_LOG_DIR=/opt/netignite/data/logs
+ENV NETIGNITE_CONFIG_BASE_DIR=/opt/netignite/config
 
-EXPOSE 18232/tcp
 
-ENV NITRO_ENV=production
-ENV NITRO_HOST=0.0.0.0
-ENV NITRO_PORT=18232
-ENV NETIGNITE_SAMPLE_CONFIG_PATH=/etc/netignite/config.sample.json
+VOLUME /opt/netignite/data
+VOLUME /opt/netignite/config
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=20s \
+	CMD curl -f http://localhost:18232/api/health || exit 1
 
-CMD [ "bun", "run", "./app/server/index.mjs" ]
+CMD ["bun", "run", "/opt/netignite/app/.output/server/index.mjs"]
diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index adc50e1..18a4efc 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -1,11 +1,28 @@
+# Runs the published image (built by .github/workflows/docker-publish.yml). Ports and DB paths are
+# baked into the image (docker/Dockerfile ENV) — set only what differs for this deployment.
+# NETIGNITE_APP_URL must be the public URL of the server (e.g. https://netignite.example.com).
 services:
+  
   netignite-server:
     image: ghcr.io/netignite-project/server:latest
     container_name: netignite-server
     restart: unless-stopped
     ports:
       - "18232:18232"
+    environment:
+      NETIGNITE_LOG_LEVEL: info
+
+      NETIGNITE_API_DISABLE_DOCS: false
+
+      NETIGNITE_APP_URL: http://localhost:18232
+
+      NETIGNITE_SMTP_HOST: "mail.example.com"
+      NETIGNITE_SMTP_PORT: 465
+      NETIGNITE_SMTP_USERNAME: "YourSMTPUsernameHere"
+      NETIGNITE_SMTP_PASSWORD: "YourSMTPPasswordHere"
+      NETIGNITE_SMTP_FROM: '"App" <system@app.example.com>'
+      NETIGNITE_SMTP_SECURE: true
+
     volumes:
-      - /opt/netignite/data:/opt/netignite/data
-      - /opt/netignite/config:/opt/netignite/config
-      - /opt/netignite/logs:/opt/netignite/logs
+      - ./data:/opt/netignite/data
+      - ./config:/opt/netignite/config
\ No newline at end of file
diff --git a/docker/pterodactyl/Dockerfile b/docker/pterodactyl/Dockerfile
deleted file mode 100644
index cc6d418..0000000
--- a/docker/pterodactyl/Dockerfile
+++ /dev/null
@@ -1,13 +0,0 @@
-FROM alpine
-
-RUN apk add --no-cache --update curl ca-certificates tar bash jq \
-    && adduser --disabled-password --home /home/container container
-
-USER container
-ENV  USER=container HOME=/home/container
-    
-WORKDIR /home/container
-    
-COPY ./entrypoint.sh /entrypoint.sh
-    
-CMD ["/bin/bash", "/entrypoint.sh"]
\ No newline at end of file
diff --git a/docker/pterodactyl/entrypoint.sh b/docker/pterodactyl/entrypoint.sh
deleted file mode 100644
index fe6c7b5..0000000
--- a/docker/pterodactyl/entrypoint.sh
+++ /dev/null
@@ -1,127 +0,0 @@
-#!/bin/bash
-
-function check_cpu_arch {
-    local arch=$(uname -m)
-    if [ "$arch" = "x86_64" ]; then
-        declare -g ARCH="linux_amd64"
-    elif [ "$arch" = "aarch64" ]; then
-        declare -g ARCH="linux_arm64"
-    else
-        echo "Unsupported architecture: $arch"
-        exit 1
-    fi
-}
-
-function extract_env_bool {
-    local var_name=$1
-    if [[ "${!var_name}" == "1" ]]; then
-        eval "$var_name=true"
-    else
-        eval "$var_name=false"
-    fi
-}
-
-function get_latest_version {
-    local include_prereleases=$1
-    local api_url="https://api.github.com/repos/leicraft/netignite-server/releases"
-
-    # Fetch releases from GitHub API
-    local releases_json=$(curl -s "$api_url")
-
-    if [ "$include_prereleases" == "true" ]; then
-        # Include prereleases
-        echo "$releases_json" | jq -r '.[0].tag_name'
-    else
-        # Exclude prereleases, find the first stable release
-        echo "$releases_json" | jq -r '[.[] | select(.prerelease == false)][0].tag_name'
-    fi
-}
-
-function get_current_version {
-    local version=$(./netignite-server --help 2>/dev/null)
-    echo "$version" | sed -n 's/^ntfy \([0-9]\+\.[0-9]\+\.[0-9]\+\).*/\1/p'
-}
-
-function download_ntfy {
-    local version=$1
-    local arch=$2
-    local name="ntfy_$(echo $version | cut -c2-)_${arch}"
-    local url="https://github.com/leicraft/netignite-server/releases/download/${version}/${name}.tar.gz"
-
-    echo "Downloading NetIgnite-Server version $version for architecture $arch..."
-
-    http_response_code="$(curl --write-out '%{http_code}' -sL -o $name.tar.gz "$url")"
-
-    if [ "$http_response_code" != "200" ]; then
-        echo "Failed to download NetIgnite-Server binary. HTTP response code: $http_response_code"
-        exit 1
-    fi
-
-    echo "Download complete. Extracting..."
-    tar zxvf "${name}.tar.gz"
-    if [ $? -ne 0 ]; then
-        echo "Failed to extract NetIgnite-Server binary."
-        exit 1
-    fi
-    
-    cp -a ${name}/netignite-server /home/container/netignite-server
-    chmod +x /home/container/netignite-server
-
-    cp -n ${name}/{client,server}/*.yml /home/container/conf
-
-    rm "${name}.tar.gz"
-    rm -rf $name
-
-    echo "NetIgnite-Server $version downloaded successfully."
-}
-
-function create_directories {
-    mkdir -p /home/container/conf
-    mkdir -p /home/container/logs
-    mkdir -p /home/container/data
-    mkdir -p /home/container/cache
-    mkdir -p /home/container/certs
-}
-
-function main {
-
-    echo "Starting..."
-
-    cd /home/container
-
-    check_cpu_arch
-
-    # Extract Startup CMD
-    STARTUP_CMD=$(echo ${STARTUP} | sed -e 's/{{/${/g' -e 's/}}/}/g')
-    extract_env_bool EXPERIMENTAL
-    
-    create_directories
-
-    LOCAL_VERSION=$(get_current_version)
-
-    if [ "$VERSION" == "latest" ]; then
-        
-        REMOTE_VERSION=$(get_latest_version $EXPERIMENTAL)
-
-        if [ "$REMOTE_VERSION" != "v$LOCAL_VERSION" ]; then
-            echo "New version available: $REMOTE_VERSION. Downloading..."
-            download_ntfy $REMOTE_VERSION $ARCH
-        else
-            echo "The latest version is already installed. Continuing..."
-        fi
-    else
-        
-        if [[ "v$VERSION" != "v$LOCAL_VERSION" ]]; then
-            echo "Requested version $VERSION is not installed. Downloading..."
-            download_ntfy v$VERSION $ARCH
-        else
-            echo "Requested version $VERSION is already installed. Continuing..."
-        fi
-
-    fi
-
-    eval ${STARTUP_CMD}
-}
-
-main
-
diff --git a/drizzle/configs/drizzle.config.ts b/drizzle/configs/drizzle.config.ts
new file mode 100644
index 0000000..45408f3
--- /dev/null
+++ b/drizzle/configs/drizzle.config.ts
@@ -0,0 +1,13 @@
+import { defineConfig } from "drizzle-kit";
+
+export default defineConfig({
+	out: "./drizzle/migrations",
+	schema: "./server/lib/db/schema.ts",
+	dialect: "sqlite",
+	dbCredentials: {
+		//@ts-ignore
+		url: process.env.NETIGNITE_DB_PATH || "./data/netignite.sqlite",
+	},
+	verbose: true,
+	strict: true,
+});
diff --git a/drizzle/migrations/0000_purple_thanos.sql b/drizzle/migrations/0000_purple_thanos.sql
new file mode 100644
index 0000000..7b6986c
--- /dev/null
+++ b/drizzle/migrations/0000_purple_thanos.sql
@@ -0,0 +1,150 @@
+CREATE TABLE `agent_enrollments` (
+	`id` text PRIMARY KEY NOT NULL,
+	`hashed_token` text NOT NULL,
+	`agent_id` integer NOT NULL,
+	`created_by_user_id` integer,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	`expires_at` integer NOT NULL,
+	`used_at` integer,
+	FOREIGN KEY (`agent_id`) REFERENCES `agents`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`created_by_user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE set null
+);
+--> statement-breakpoint
+CREATE TABLE `agents` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`owner_id` integer NOT NULL,
+	`name` text NOT NULL,
+	`description` text DEFAULT '' NOT NULL,
+	`kind` text NOT NULL,
+	`token_id` text,
+	`hashed_secret` text,
+	`enrolled_at` integer,
+	`capabilities` text DEFAULT '[]' NOT NULL,
+	`version` text,
+	`info` text,
+	`last_seen_at` integer,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	FOREIGN KEY (`owner_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `agents_token_id_unique` ON `agents` (`token_id`);--> statement-breakpoint
+CREATE TABLE `api_keys` (
+	`id` text PRIMARY KEY NOT NULL,
+	`hashed_token` text NOT NULL,
+	`user_id` integer NOT NULL,
+	`user_role` text NOT NULL,
+	`description` text NOT NULL,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	`expires_at` integer,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `device_favorites` (
+	`user_id` integer NOT NULL,
+	`device_id` integer NOT NULL,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	PRIMARY KEY(`user_id`, `device_id`),
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`device_id`) REFERENCES `devices`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `device_shares` (
+	`device_id` integer NOT NULL,
+	`user_id` integer NOT NULL,
+	`role` text NOT NULL,
+	`created_by_user_id` integer,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	PRIMARY KEY(`device_id`, `user_id`),
+	FOREIGN KEY (`device_id`) REFERENCES `devices`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`created_by_user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE set null
+);
+--> statement-breakpoint
+CREATE INDEX `device_shares_user_id_idx` ON `device_shares` (`user_id`);--> statement-breakpoint
+CREATE TABLE `devices` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`owner_id` integer NOT NULL,
+	`name` text NOT NULL,
+	`type` text NOT NULL,
+	`description` text DEFAULT '' NOT NULL,
+	`mac_address` text NOT NULL,
+	`wol_port` integer DEFAULT 9 NOT NULL,
+	`agent_id` integer,
+	`status_method` text DEFAULT 'none' NOT NULL,
+	`status_address` text,
+	`status_tcp_port` integer,
+	`host_agent_id` integer,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	FOREIGN KEY (`owner_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`agent_id`) REFERENCES `agents`(`id`) ON UPDATE no action ON DELETE set null,
+	FOREIGN KEY (`host_agent_id`) REFERENCES `agents`(`id`) ON UPDATE no action ON DELETE set null
+);
+--> statement-breakpoint
+CREATE INDEX `devices_owner_id_idx` ON `devices` (`owner_id`);--> statement-breakpoint
+CREATE TABLE `metadata` (
+	`key` text PRIMARY KEY NOT NULL,
+	`data` text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE `password_resets` (
+	`token` text PRIMARY KEY NOT NULL,
+	`user_id` integer NOT NULL,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	`expires_at` integer NOT NULL,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `scheduled_tasks` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`function` text NOT NULL,
+	`created_by_user_id` integer,
+	`args` text NOT NULL,
+	`autoDelete` integer DEFAULT 0 NOT NULL,
+	`storeLogs` integer DEFAULT 0 NOT NULL,
+	`status` text DEFAULT 'pending' NOT NULL,
+	`created_at` integer NOT NULL,
+	`finished_at` integer,
+	`result` text,
+	`message` text,
+	FOREIGN KEY (`created_by_user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE set null
+);
+--> statement-breakpoint
+CREATE TABLE `scheduled_tasks_paused_state` (
+	`task_id` integer PRIMARY KEY NOT NULL,
+	`next_step_to_execute` integer NOT NULL,
+	`data` text NOT NULL,
+	FOREIGN KEY (`task_id`) REFERENCES `scheduled_tasks`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `sessions` (
+	`id` text PRIMARY KEY NOT NULL,
+	`hashed_token` text NOT NULL,
+	`user_id` integer NOT NULL,
+	`user_role` text NOT NULL,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	`expires_at` integer NOT NULL,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE TABLE `user_preferences` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`user_id` integer NOT NULL,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	`key` text NOT NULL,
+	`data` text NOT NULL,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `user_preferences_user_id_key_unique` ON `user_preferences` (`user_id`,`key`);--> statement-breakpoint
+CREATE TABLE `users` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`username` text NOT NULL,
+	`display_name` text NOT NULL,
+	`email` text NOT NULL,
+	`password_hash` text NOT NULL,
+	`role` text DEFAULT 'user' NOT NULL,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `users_username_unique` ON `users` (`username`);--> statement-breakpoint
+CREATE UNIQUE INDEX `users_email_unique` ON `users` (`email`);
\ No newline at end of file
diff --git a/drizzle/migrations/meta/0000_snapshot.json b/drizzle/migrations/meta/0000_snapshot.json
new file mode 100644
index 0000000..40cd9f4
--- /dev/null
+++ b/drizzle/migrations/meta/0000_snapshot.json
@@ -0,0 +1,1065 @@
+{
+  "version": "6",
+  "dialect": "sqlite",
+  "id": "78a3ea50-2938-4b53-a0df-ac85ea526ed1",
+  "prevId": "00000000-0000-0000-0000-000000000000",
+  "tables": {
+    "agent_enrollments": {
+      "name": "agent_enrollments",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "hashed_token": {
+          "name": "hashed_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "agent_id": {
+          "name": "agent_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "agent_enrollments_agent_id_agents_id_fk": {
+          "name": "agent_enrollments_agent_id_agents_id_fk",
+          "tableFrom": "agent_enrollments",
+          "tableTo": "agents",
+          "columnsFrom": [
+            "agent_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "agent_enrollments_created_by_user_id_users_id_fk": {
+          "name": "agent_enrollments_created_by_user_id_users_id_fk",
+          "tableFrom": "agent_enrollments",
+          "tableTo": "users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "agents": {
+      "name": "agents",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "''"
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_id": {
+          "name": "token_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hashed_secret": {
+          "name": "hashed_secret",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "capabilities": {
+          "name": "capabilities",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'[]'"
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "info": {
+          "name": "info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_seen_at": {
+          "name": "last_seen_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "agents_token_id_unique": {
+          "name": "agents_token_id_unique",
+          "columns": [
+            "token_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "agents_owner_id_users_id_fk": {
+          "name": "agents_owner_id_users_id_fk",
+          "tableFrom": "agents",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "hashed_token": {
+          "name": "hashed_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_role": {
+          "name": "user_role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "device_favorites": {
+      "name": "device_favorites",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_id": {
+          "name": "device_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "device_favorites_user_id_users_id_fk": {
+          "name": "device_favorites_user_id_users_id_fk",
+          "tableFrom": "device_favorites",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "device_favorites_device_id_devices_id_fk": {
+          "name": "device_favorites_device_id_devices_id_fk",
+          "tableFrom": "device_favorites",
+          "tableTo": "devices",
+          "columnsFrom": [
+            "device_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "device_favorites_user_id_device_id_pk": {
+          "columns": [
+            "user_id",
+            "device_id"
+          ],
+          "name": "device_favorites_user_id_device_id_pk"
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "device_shares": {
+      "name": "device_shares",
+      "columns": {
+        "device_id": {
+          "name": "device_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "device_shares_user_id_idx": {
+          "name": "device_shares_user_id_idx",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "device_shares_device_id_devices_id_fk": {
+          "name": "device_shares_device_id_devices_id_fk",
+          "tableFrom": "device_shares",
+          "tableTo": "devices",
+          "columnsFrom": [
+            "device_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "device_shares_user_id_users_id_fk": {
+          "name": "device_shares_user_id_users_id_fk",
+          "tableFrom": "device_shares",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "device_shares_created_by_user_id_users_id_fk": {
+          "name": "device_shares_created_by_user_id_users_id_fk",
+          "tableFrom": "device_shares",
+          "tableTo": "users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "device_shares_device_id_user_id_pk": {
+          "columns": [
+            "device_id",
+            "user_id"
+          ],
+          "name": "device_shares_device_id_user_id_pk"
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "devices": {
+      "name": "devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "''"
+        },
+        "mac_address": {
+          "name": "mac_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "wol_port": {
+          "name": "wol_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 9
+        },
+        "agent_id": {
+          "name": "agent_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_method": {
+          "name": "status_method",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'none'"
+        },
+        "status_address": {
+          "name": "status_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_tcp_port": {
+          "name": "status_tcp_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_agent_id": {
+          "name": "host_agent_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "devices_owner_id_idx": {
+          "name": "devices_owner_id_idx",
+          "columns": [
+            "owner_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "devices_owner_id_users_id_fk": {
+          "name": "devices_owner_id_users_id_fk",
+          "tableFrom": "devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "devices_agent_id_agents_id_fk": {
+          "name": "devices_agent_id_agents_id_fk",
+          "tableFrom": "devices",
+          "tableTo": "agents",
+          "columnsFrom": [
+            "agent_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "devices_host_agent_id_agents_id_fk": {
+          "name": "devices_host_agent_id_agents_id_fk",
+          "tableFrom": "devices",
+          "tableTo": "agents",
+          "columnsFrom": [
+            "host_agent_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "metadata": {
+      "name": "metadata",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "password_resets": {
+      "name": "password_resets",
+      "columns": {
+        "token": {
+          "name": "token",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "password_resets_user_id_users_id_fk": {
+          "name": "password_resets_user_id_users_id_fk",
+          "tableFrom": "password_resets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "scheduled_tasks": {
+      "name": "scheduled_tasks",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "function": {
+          "name": "function",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "args": {
+          "name": "args",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "autoDelete": {
+          "name": "autoDelete",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "0"
+        },
+        "storeLogs": {
+          "name": "storeLogs",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "0"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'pending'"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "finished_at": {
+          "name": "finished_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "result": {
+          "name": "result",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "message": {
+          "name": "message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "scheduled_tasks_created_by_user_id_users_id_fk": {
+          "name": "scheduled_tasks_created_by_user_id_users_id_fk",
+          "tableFrom": "scheduled_tasks",
+          "tableTo": "users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "scheduled_tasks_paused_state": {
+      "name": "scheduled_tasks_paused_state",
+      "columns": {
+        "task_id": {
+          "name": "task_id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "next_step_to_execute": {
+          "name": "next_step_to_execute",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "scheduled_tasks_paused_state_task_id_scheduled_tasks_id_fk": {
+          "name": "scheduled_tasks_paused_state_task_id_scheduled_tasks_id_fk",
+          "tableFrom": "scheduled_tasks_paused_state",
+          "tableTo": "scheduled_tasks",
+          "columnsFrom": [
+            "task_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "hashed_token": {
+          "name": "hashed_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_role": {
+          "name": "user_role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "user_preferences_user_id_key_unique": {
+          "name": "user_preferences_user_id_key_unique",
+          "columns": [
+            "user_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'user'"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "users_username_unique": {
+          "name": "users_username_unique",
+          "columns": [
+            "username"
+          ],
+          "isUnique": true
+        },
+        "users_email_unique": {
+          "name": "users_email_unique",
+          "columns": [
+            "email"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    }
+  },
+  "views": {},
+  "enums": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/migrations/meta/_journal.json b/drizzle/migrations/meta/_journal.json
new file mode 100644
index 0000000..c1009a1
--- /dev/null
+++ b/drizzle/migrations/meta/_journal.json
@@ -0,0 +1,13 @@
+{
+  "version": "7",
+  "dialect": "sqlite",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "6",
+      "when": 1792371688828,
+      "tag": "0000_purple_thanos",
+      "breakpoints": true
+    }
+  ]
+}
\ No newline at end of file
diff --git a/error.vue b/error.vue
deleted file mode 100644
index 446b08e..0000000
--- a/error.vue
+++ /dev/null
@@ -1,60 +0,0 @@
-<template>
-    <div class="app">
-        <!-- <Header /> -->
-        <main class="content">
-            <div class="container-xxl error-wrapper">
-                <h1 class="text-center">Error {{ (error as any).statusCode }}</h1>
-            </div>
-        </main>
-        <Footer />
-    </div>
-</template>
-
-<script setup lang="ts">
-
-import type { NuxtError } from '#app';
-import Footer from '@/components/Footer.vue';
-
-const props = defineProps({
-    error: Object as () => NuxtError
-})
-
-const handleError = () => clearError({ redirect: '/' })
-
-useSeoMeta({
-    title: `Error ${(props.error as any).statusCode} | NetIgnite`,
-    description: 'An error occurred while processing your request.',
-});
-
-</script>
-
-<style scoped>
-
-.app {
-    font-family: "Rubik", sans-serif;
-    background-color: #0b0c1b;
-    color: white;
-    font-size: 16px;
-    margin: 0;
-    padding: 0;
-    min-height: 100vh;
-    word-wrap: break-word;
-    display: flex;
-    flex-direction: column;
-}
-
-.content {
-    margin-top: 6rem;
-    flex-grow: 1;
-    display: flex;
-    flex-direction: column;
-    height: 100%;
-}
-
-.error-wrapper {
-    margin: auto;
-    max-width: 500px;
-}
-</style>
-
-
diff --git a/example.env b/example.env
new file mode 100644
index 0000000..6d3332d
--- /dev/null
+++ b/example.env
@@ -0,0 +1,22 @@
+
+NETIGNITE_LOG_LEVEL=info
+
+# Booleans: exactly "true" or "false" (case-sensitive); anything else — including an empty value — fails at startup.
+# An unset variable falls back to the schema default.
+NETIGNITE_API_DISABLE_DOCS=false
+
+NETIGNITE_DB_PATH=./data/netignite.sqlite
+NETIGNITE_DB_AUTO_MIGRATE=true
+NETIGNITE_DB_MIGRATION_DIR=./drizzle/migrations
+
+NETIGNITE_LOG_DIR=./data/logs
+NETIGNITE_CONFIG_BASE_DIR=./config
+
+NETIGNITE_APP_URL=http://localhost:18232
+
+NETIGNITE_SMTP_HOST=mail.example.com
+NETIGNITE_SMTP_PORT=465
+NETIGNITE_SMTP_USERNAME=user
+NETIGNITE_SMTP_PASSWORD=
+NETIGNITE_SMTP_FROM='"App" <system@app.example.com>'
+NETIGNITE_SMTP_SECURE=true
\ No newline at end of file
diff --git a/layouts/auth.vue b/layouts/auth.vue
deleted file mode 100644
index 6c365f7..0000000
--- a/layouts/auth.vue
+++ /dev/null
@@ -1,41 +0,0 @@
-<template>
-    <div class="app">
-        <!-- <Header /> -->
-        <main class="content">
-            <slot />
-        </main>
-        <Footer />
-    </div>
-
-</template>
-
-<script setup lang="ts">
-
-
-</script>
-
-
-<style scoped>
-
-.app {
-    font-family: "Rubik", sans-serif;
-    background-color: #0b0c1b;
-    color: white;
-    font-size: 16px;
-    margin: 0;
-    padding: 0; 
-    min-height: 100vh;
-    word-wrap: break-word;
-    display:flex;
-    flex-direction:column; 
-}
-
-.content {
-    /* margin-top: 6rem; */
-    flex-grow: 1;
-    display: flex;
-    flex-direction: column;
-    height: 100%;
-}
-
-</style>
\ No newline at end of file
diff --git a/layouts/dashboard.vue b/layouts/dashboard.vue
deleted file mode 100644
index c2989a4..0000000
--- a/layouts/dashboard.vue
+++ /dev/null
@@ -1,60 +0,0 @@
-<template>
-    <div class="app">
-        <Sidebar class="sidebar">
-            <main class="content">
-                <div class="flex-grow-1">
-                    <slot />
-                </div>
-                <Footer :withMargin="true" />
-            </main>
-        </Sidebar>
-    </div>
-
-</template>
-
-<script setup lang="ts">
-    import Sidebar from '@/components/Sidebar.vue';
-</script>
-
-<style scoped>
-
-.app {
-    font-family: "Rubik", sans-serif;
-    background-color: #0b0c1b;
-    color: white;
-    font-size: 16px;
-    margin: 0;
-    padding: 0; 
-    min-height: 100vh;
-    word-wrap: break-word;
-    display: flex;
-    flex-direction: column;
-}
-
-.sidebar {
-    /* margin-top: 6rem; */
-    flex-grow: 1;
-
-}
-
-.content {
-    display: flex;
-    flex-direction: column;
-    min-height: 100%;
-}
-
-</style>
-
-<style>
-
-.box-container {
-    width: 100%;
-    padding: 30px;
-    background-color: #1a1b2e;
-    border-radius: 10px;
-    box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
-    margin-bottom: 1.5rem;
-}
-
-
-</style>
\ No newline at end of file
diff --git a/layouts/default.vue b/layouts/default.vue
deleted file mode 100644
index 1899175..0000000
--- a/layouts/default.vue
+++ /dev/null
@@ -1,40 +0,0 @@
-<template>
-    <VitePwaManifest />
-    <div class="app">
-        <!-- <Header /> -->
-        <main class="content">
-            <slot />
-        </main>
-        <Footer />
-    </div>
-
-</template>
-
-<script setup lang="ts">
-// import Header from '@/components/header/Header.vue';
-</script>
-
-<style scoped>
-
-.app {
-    font-family: "Rubik", sans-serif;
-    background-color: #0b0c1b;
-    color: white;
-    font-size: 16px;
-    margin: 0;
-    padding: 0; 
-    min-height: 100vh;
-    word-wrap: break-word;
-    display: flex;
-    flex-direction: column; 
-}
-
-.content {
-    margin-top: 6rem;
-    flex-grow: 1;
-    display: flex;
-    flex-direction: column;
-    height: 100%;
-}
-
-</style>
\ No newline at end of file
diff --git a/middleware/auth.ts b/middleware/auth.ts
deleted file mode 100644
index 8457b95..0000000
--- a/middleware/auth.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-import { SessionStore } from "@/utils/userStore";
-import { useAPI } from "@/composables/useAPI";
-
-export default defineNuxtRouteMiddleware(async(to) => {
-
-    if (to.path.startsWith('/auth')) {
-
-        const response = await useAPI('/api/auth/session');
-
-        if (response.status !== 'OK' || !response.data) {
-            return;
-        }
-
-        SessionStore.setUserInfo(response.data);
-
-        return navigateTo('/');
-    }
-
-    const response = await useAPI('/api/auth/session');
-
-    if (response.status !== 'OK' || !response.data) {
-        return navigateTo('/auth/login?url=' + encodeURIComponent(to.fullPath));
-    }
-
-    SessionStore.setUserInfo(response.data);
-
-    return;
-});
diff --git a/middleware/rewrites.global.ts b/middleware/rewrites.global.ts
deleted file mode 100644
index 9cf0924..0000000
--- a/middleware/rewrites.global.ts
+++ /dev/null
@@ -1,9 +0,0 @@
-
-export default defineNuxtRouteMiddleware((to) => {
-
-    if (to.path.endsWith('/') && to.path !== '/') {
-        // Redirect to the path without the trailing slash  
-        return navigateTo(to.path.slice(0, -1), { replace: true });
-    }
-
-});
diff --git a/nuxt.config.ts b/nuxt.config.ts
index a934d73..6d71608 100644
--- a/nuxt.config.ts
+++ b/nuxt.config.ts
@@ -1,71 +1,72 @@
 // https://nuxt.com/docs/api/configuration/nuxt-config
 export default defineNuxtConfig({
-    compatibilityDate: '2024-11-01',
-    devtools: { enabled: true },
+	compatibilityDate: "2026-09-01",
+	devtools: { enabled: true },
+	modules: ["@nuxt/ui"],
 
-    routeRules: {
-        '/dashboard': { redirect: '/' }
-    },
+	colorMode: {
+		preference: "dark",
+		fallback: "dark",
+		classSuffix: "",
+	},
 
-    ssr: true,
+	ssr: true,
 
-    app: {
-        head: {
-            charset: "utf-8",
-            viewport: "width=device-width, initial-scale=1, maximum-scale=1",
-            link: [
-                {
-                    rel: 'stylesheet',
-                    href: 'https://cdn.jsdelivr.net/npm/bootstrap@5.3.6/dist/css/bootstrap.min.css'
-                },
-                { rel: 'stylesheet', href: 'https://cdn.jsdelivr.net/npm/bootstrap-icons@1.13.1/font/bootstrap-icons.min.css' },
-                { rel: "preconnect", href: "https://fonts.googleapis.com" },
-                { rel: "preconnect", href: "https://fonts.gstatic.com", crossorigin: "" },
-                { rel: "stylesheet", href: "https://fonts.googleapis.com/css2?family=Rubik:wght@400;500;600;700;800;900&display=swap" },
+	css: ["~/assets/css/main.css"],
 
-                { rel: 'icon', type: 'image/x-icon', href: '/favicon.ico' }
-            ],
-            script: [
-                {
-                    src: 'https://cdn.jsdelivr.net/npm/bootstrap@5.3.6/dist/js/bootstrap.bundle.min.js',
-                    tagPosition: 'bodyClose'
-                }
-            ]
+	nitro: {
+		// Agent gateway (server/routes/ws/agent.ts); needs the Bun preset.
+		experimental: {
+			websocket: true,
+		},
 
-        }
-    },
+		rollupConfig: {
+			external: ["bun:sqlite"],
 
-    css: [
-        '/assets/css/global.css',
-    ],
+			output: {
+				banner: (function () {
+					const mappings = {
+						NETIGNITE_APP_URL: "APP_URL",
+					};
 
-    // build: {
-    //     transpile: ['@libsql/hrana-client', '@libsql/isomorphic-ws']
-    // },
+					const bannerCode = `
+						(function () {
+							const mappings = ${JSON.stringify(mappings)};
+							const env = globalThis.process?.env ?? {};
+							for (const [envName, runtimeName] of Object.entries(mappings)) {
+								if (!env['NUXT_PUBLIC_' + runtimeName] && env[envName]) {
+									env['NUXT_PUBLIC_' + runtimeName] = env[envName];
+								}
+							}
+						})();
+					`;
 
-    nitro: {
-        preset: 'bun',
-        experimental: {
-            websocket: true
-        }
-    },
+					return bannerCode.replace(/^\s+|\s+$/g, "").replace(/\n\s*/g, " ");
+				})(),
+			},
+		},
 
-    modules: ['@vite-pwa/nuxt'],
+		esbuild: {
+			options: {
+				target: "esnext",
+			},
+		},
+	},
 
-    pwa: {
-        registerType: 'autoUpdate',
-        manifest: {
-            name: 'NetIgnite',
-            short_name: 'NetIgnite',
-            start_url: '/',
-            description: 'NetIgnite - Power On Devices From Anywhere',
+	runtimeConfig: {
+		public: {
+			//@ts-ignore
+			appUrl: process.env.NETIGNITE_APP_URL || "http://localhost:18232",
+		},
+	},
 
-            display: 'standalone',
-            orientation: 'portrait',
+	routeRules: {
+		// The public website is netignite.dev; the app starts at the dashboard.
+		"/": { redirect: "/dashboard" },
+		"/dashboard/**": { ssr: false },
+		"/auth/**": { ssr: false },
+		"/**": { ssr: true },
+	},
 
-            theme_color: '#ffffff',
-            background_color: '#0b0c1b',
-        }
-    }
-
-});
\ No newline at end of file
+	telemetry: false,
+});
diff --git a/openapi-ts.config.ts b/openapi-ts.config.ts
new file mode 100644
index 0000000..bbf299e
--- /dev/null
+++ b/openapi-ts.config.ts
@@ -0,0 +1,7 @@
+import { defineConfig } from "@hey-api/openapi-ts";
+
+export default defineConfig({
+	input: "./data/temp-api-openapi.json",
+	output: "app/api-client",
+	plugins: ["@hey-api/client-nuxt", "@hey-api/typescript", "@hey-api/sdk", "zod"],
+});
diff --git a/package.json b/package.json
index 4aceb4e..0eae746 100644
--- a/package.json
+++ b/package.json
@@ -1,28 +1,56 @@
 {
-    "name": "nuxt-app",
-    "private": true,
-    "type": "module",
-    "scripts": {
-        "build": "nuxt build",
-        "dev": " nuxt dev --host 0.0.0.0 --port 3000",
-        "generate": "nuxt generate",
-        "preview": "nuxt preview",
-        "postinstall": "nuxt prepare"
-    },
-    "dependencies": {
-        "@libsql/client": "^0.15.15",
-        "@types/bcrypt": "^5.0.2",
-        "@vite-pwa/nuxt": "1.0.1",
-        "bcrypt": "^6.0.0",
-        "cron": "^4.3.4",
-        "nuxt": "^3.20.1",
-        "vue": "^3.5.24",
-        "vue-router": "^4.6.3",
-        "ws": "^8.18.3",
-        "zod": "^3.25.76"
-    },
-    "devDependencies": {
-        "@types/bun": "latest",
-        "@types/ws": "^8.18.1"
-    }
+	"name": "@netignite/server",
+	"version": "2.0.0-dev",
+	"private": true,
+	"type": "module",
+	"description": "NetIgnite server: dashboard, REST API and agent gateway",
+	"scripts": {
+		"check": "bunx --bun biome check",
+		"check:ci": "bunx --bun biome ci",
+		"format": "bunx --bun biome format --write",
+		"lint": "bunx --bun biome lint",
+		"typecheck": "bunx --bun nuxt typecheck && bunx --bun tsc -p ./tsconfig/tsconfig.typecheck.json && echo 'Typecheck passed!'",
+		"test": "bun test",
+		"test:ci": "bun test --coverage --reporter=junit --reporter-outfile=./junit.xml",
+		"db:generate": "bun scripts/db-utils && bunx --bun drizzle-kit generate --config=drizzle/configs/drizzle.config.ts",
+		"db:migrate": "bun scripts/db-utils && bunx --bun drizzle-kit migrate --config=drizzle/configs/drizzle.config.ts",
+		"api-client:generate": "bun scripts/api-client-generate.ts",
+		"dev": "bunx --bun nuxt dev --port 18232",
+		"generate": "bunx --bun nuxt generate",
+		"preview": "bunx --bun nuxt preview",
+		"postinstall": "bunx --bun nuxt prepare",
+		"build": "nuxt build --preset bun && bun build scripts/import-v1.ts --target bun --outfile .output/import-v1.mjs",
+		"import-v1": "bun scripts/import-v1.ts",
+		"start": "PORT=18232 bun run .output/server/index.mjs"
+	},
+	"dependencies": {
+		"@cleverjs/utils": "^1.2.5",
+		"@nuxt/ui": "^4.9.0",
+		"@hono/standard-validator": "^0.3.0",
+		"@scalar/hono-api-reference": "^0.11.9",
+		"drizzle-orm": "^0.45.2",
+		"drizzle-zod": "^0.8.3",
+		"hono": "^4.12.30",
+		"hono-openapi": "^1.3.1",
+		"nodemailer": "^9.0.0",
+		"zod": "^4.4.3",
+		"elliptic": "^6.6.1",
+		"nuxt": "^4.6.2",
+		"vue": "^3.5.39",
+		"vue-router": "^5.1.0"
+	},
+	"devDependencies": {
+		"@hey-api/nuxt": "^0.2.1",
+		"@hey-api/openapi-ts": "^0.99.0",
+		"@iconify-json/lucide": "^1.2.117",
+		"@biomejs/biome": "^2.5.0",
+		"@libsql/client": "^0.17.4",
+		"@types/bun": "^1.4.3",
+		"@types/nodemailer": "^8.0.1",
+		"@types/elliptic": "^6.4.18",
+		"drizzle-kit": "^0.31.10",
+		"bun-types": "^1.4.2",
+		"typescript": "^6.0.3",
+		"vue-tsc": "^3.3.6"
+	}
 }
diff --git a/pages/account/settings.vue b/pages/account/settings.vue
deleted file mode 100644
index 4a27813..0000000
--- a/pages/account/settings.vue
+++ /dev/null
@@ -1,101 +0,0 @@
-<script setup lang="ts">
-import { computed } from 'vue'
-import FormDescription from '~/components/forms/FormDescription.vue';
-import FormGroup from '~/components/forms/FormGroup.vue';
-import FormInput from '~/components/forms/FormInput.vue';
-import FormLabel from '~/components/forms/FormLabel.vue';
-import FormSubmitBtn from '~/components/forms/FormSubmitBtn.vue';
-import { useAPI } from '~/composables/useAPI';
-
-definePageMeta({
-    layout: 'dashboard',
-    middleware: 'auth',
-});
-
-
-const userInfo = structuredClone(toRaw(SessionStore.useUserInfo()));
-
-const newPassword = ref('');
-
-async function sumbitForm() {
-
-    try {
-
-        const response = await useAPI(`/api/account/${userInfo.userID}`, {
-            method: 'PUT',
-            body: JSON.stringify({
-                ...userInfo,
-                password: newPassword.value || undefined
-            })
-        });
-
-        if (response.status !== "OK") {
-            useNotificationToast({
-                message: `Error updating Account: ${response?.message || 'unknown error'}`,
-                type: 'error'
-            });
-            return;
-        }
-        useNotificationToast({
-            message: 'Account updated successfully',
-            type: 'success'
-        });
-
-        SessionStore.setUserInfo(userInfo);
-
-
-    } catch (error) {
-        useNotificationToast({
-            message: `Error: ${error instanceof Error ? error.message : 'unknown error'}`,
-            type: 'error'
-        });
-    }
-
-}
-
-const isSubmitDisabled = computed(() => {
-    return !userInfo.username;
-});
-
-</script>
-
-<template>
-
-    <DashboardPage title="Account Settings" subtitle="Manage your account settings" image="bi bi-gear">
-
-        <form @submit.prevent="sumbitForm" autocomplete="off">
-
-            <div class="box-container d-flex flex-column justify-content-center">
-
-                <h4 class="text-white mb-4">Your Account Details</h4>
-
-                <div class="row">
-                    <FormGroup class="col-md-6">
-                        <FormLabel>Username</FormLabel>
-                        <FormInput v-model="userInfo.username" placeholder="Enter your username" required />
-                        <FormDescription>
-                            This is your unique username for logging in.
-                        </FormDescription>
-                    </FormGroup>
-                    <FormGroup class="col-md-6">
-                        <FormLabel>Update Password</FormLabel>
-                        <FormInput type="password" v-model="newPassword" placeholder="Enter new password (optional)" />
-                        <FormDescription>
-                            You can update your password here. Leave it blank to keep the current password.
-                        </FormDescription>
-                    </FormGroup>
-                </div>
-
-                <div class="d-flex justify-content-end mt-4">
-                    <FormSubmitBtn class="btn btn-primary text-right" type="submit" :disabled="isSubmitDisabled">
-                        Update Account
-                    </FormSubmitBtn>
-                </div>
-
-            </div>
-
-        </form>
-
-    </DashboardPage>
-
-</template>
diff --git a/pages/agents/[id]/index.vue b/pages/agents/[id]/index.vue
deleted file mode 100644
index b24925b..0000000
--- a/pages/agents/[id]/index.vue
+++ /dev/null
@@ -1,278 +0,0 @@
-<script setup lang="ts">
-import DashboardPage from '@/components/DashboardPage.vue';
-import { Agent } from '@/utils/models/agent';
-import FormDescription from '~/components/forms/FormDescription.vue';
-import FormGroup from '~/components/forms/FormGroup.vue';
-import FormInput from '~/components/forms/FormInput.vue';
-import FormLabel from '~/components/forms/FormLabel.vue';
-import FormPWInput from '~/components/forms/FormPWInput.vue';
-import FormSelect from '~/components/forms/FormSelect.vue';
-import FormSubmitBtn from '~/components/forms/FormSubmitBtn.vue';
-import FormTextarea from '~/components/forms/FormTextarea.vue';
-import { useAPI } from '~/composables/useAPI';
-import { SessionStore } from '~/utils/userStore';
-
-definePageMeta({
-	layout: 'dashboard',
-	middleware: 'auth',
-});
-
-
-const route = useRoute();
-const agent_id = route.params.id;
-
-const isNewAgent = agent_id === "new";
-
-const initialNotification = ref<NotificationToastSettings | null>(null);
-
-// The server returns an agent's secret only when it is created or regenerated. After creating an
-// agent, the secret is handed over to the agent's page through this state and shown once.
-const newAgentSecret = useState<{ id: number; secret: string } | null>('new-agent-secret', () => null);
-
-async function getAgent() {
-
-    if (isNewAgent) {
-        return new Agent({
-            id: -1,
-            name: "",
-            description: "",
-            type: "" as any,
-            ownerID: SessionStore.useUserInfo().userID,
-            status: 'unknown',
-        });
-    }
-
-    const response = await useAPI(`/api/agents/${agent_id}` as `/api/agents/:id`, {
-        method: 'GET'
-    });
-
-    if (response.status !== "OK" || !response.data) {
-        initialNotification.value = {
-            message: `Error fetching agent: ${response?.message || 'unknown error'}`,
-            type: 'error'
-        };
-        return {} as Agent;
-    }
-    return new Agent({
-        ...response.data,
-        status: 'unknown',
-    });
-}
-
-const agent = reactive(await getAgent());
-
-const revealedSecret = ref<string | null>(
-    newAgentSecret.value && newAgentSecret.value.id === agent.id ? newAgentSecret.value.secret : null
-);
-newAgentSecret.value = null;
-
-const isRegenerating = ref(false);
-
-function getAgentInput() {
-    return {
-        name: agent.name,
-        type: agent.type,
-        description: agent.description,
-    };
-}
-
-async function sumbitForm() {
-
-    try {
-
-        if (isNewAgent) {
-            const response = await useAPI('/api/agents', {
-                method: 'POST',
-                body: JSON.stringify(getAgentInput())
-            });
-
-            if (response.status !== "OK" || !response.data) {
-                useNotificationToast({
-                    message: `Error creating agent: ${response?.message || 'unknown error'}`,
-                    type: 'error'
-                });
-                return;
-            }
-            useNotificationToast({
-                message: 'Agent created successfully',
-                type: 'success'
-            });
-            newAgentSecret.value = response.data;
-            navigateTo(`/agents/${response.data.id}`, { replace: true });
-
-        } else {
-
-            const response = await useAPI(`/api/agents/${agent.id}`, {
-                method: 'PUT',
-                body: JSON.stringify(getAgentInput())
-            });
-
-            if (response.status !== "OK") {
-                useNotificationToast({
-                    message: `Error updating agent: ${response?.message || 'unknown error'}`,
-                    type: 'error'
-                });
-                return;
-            }
-            useNotificationToast({
-                message: 'Agent updated successfully',
-                type: 'success'
-            });
-            navigateTo(`/agents/`);
-        }
-
-    } catch (error) {
-        useNotificationToast({
-            message: `Error: ${error instanceof Error ? error.message : 'unknown error'}`,
-            type: 'error'
-        });
-    }
-
-}
-
-async function regenerateSecret() {
-
-    if (!confirm('Generate a new secret? The agent is disconnected and can only reconnect once it is configured with the new secret.')) {
-        return;
-    }
-
-    isRegenerating.value = true;
-    try {
-        const response = await useAPI(`/api/agents/${agent.id}/regenerate-secret` as `/api/agents/:id/regenerate-secret`, {
-            method: 'POST'
-        });
-
-        if (response.status !== "OK" || !response.data) {
-            useNotificationToast({
-                message: `Error regenerating secret: ${response?.message || 'unknown error'}`,
-                type: 'error'
-            });
-            return;
-        }
-
-        revealedSecret.value = response.data.secret;
-        useNotificationToast({
-            message: 'New secret generated. Copy it now, it is only shown once.',
-            type: 'success'
-        });
-    } finally {
-        isRegenerating.value = false;
-    }
-}
-
-async function copySecret() {
-    if (!revealedSecret.value) return;
-    try {
-        await navigator.clipboard.writeText(revealedSecret.value);
-        useNotificationToast({ message: 'Secret copied to clipboard', type: 'success' });
-    } catch {
-        useNotificationToast({ message: 'Could not copy the secret. Reveal it and copy it manually.', type: 'error' });
-    }
-}
-
-const isSubmitDisabled = computed(() => {
-    return !agent.name || !agent.type;
-});
-
-onMounted(() => {
-    if (initialNotification.value && import.meta.client) {
-        useNotificationToast(initialNotification.value);
-        navigateTo('/agents');
-    }
-});
-
-</script>
-
-<template>
-
-    <DashboardPage v-if="!initialNotification" :title="isNewAgent ? 'Create New Agent' : 'Edit Agent'" subtitle="Manage your agent details" image="bi bi-wifi">
-
-        <form @submit.prevent="sumbitForm" autocomplete="off">
-
-            <div class="box-container d-flex flex-column justify-content-center">
-
-                <h4 class="text-white mb-4">Resource Details</h4>
-
-                <div class="row">
-                    <FormGroup class="col-md-6">
-                        <FormLabel>Name</FormLabel>
-                        <FormInput id="agentName" v-model="agent.name" placeholder="Enter agent name" required />
-                        <FormDescription>
-                            The name of the agent. This is used to identify the agent in the dashboard.
-                        </FormDescription>
-                    </FormGroup>
-                    <FormGroup class="col-md-6">
-                        <FormLabel class="form-label">Agent Type</FormLabel>
-                        <FormSelect v-model="agent.type" required>
-                            <option value="" disabled>Select Agent Type</option>
-                            <option v-for="type in Agent.Utils.getAllAgentTypes()" :value="type.name">
-                                {{ type.label }}
-                            </option>
-                        </FormSelect>
-                    </FormGroup>
-                    <FormGroup class="col-md-12">
-                        <FormLabel class="form-label">Description</FormLabel>
-                        <FormTextarea rows="2" v-model="agent.description" placeholder="Enter agent description"></FormTextarea>
-                    </FormGroup>
-                </div>
-
-                <div class="d-flex justify-content-end mt-4">
-                    <FormSubmitBtn class="btn btn-primary text-right" type="submit" :disabled="isSubmitDisabled">
-                        {{ isNewAgent ? 'Create Agent' : 'Update Agent' }}
-                    </FormSubmitBtn>
-                </div>
-
-            </div>
-
-            <div v-if="!isNewAgent" class="box-container d-flex flex-column justify-content-center mt-4">
-
-                <h4 class="text-white mb-4">Connection Details</h4>
-
-                <div class="row mb-2">
-                    <FormGroup class="col-md-6">
-                        <FormLabel>Connection ID</FormLabel>
-                        <FormInput v-model="agent.id" disabled />
-                    </FormGroup>
-                    <FormGroup class="col-md-6">
-                        <FormLabel>Connection Secret</FormLabel>
-                        <template v-if="revealedSecret">
-                            <FormPWInput v-model="revealedSecret" readonly />
-                            <FormDescription>
-                                Configure your agent with this secret now. For security reasons it is only
-                                stored as a hash and can't be shown again.
-                            </FormDescription>
-                        </template>
-                        <template v-else>
-                            <FormInput model-value="Hidden" disabled />
-                            <FormDescription>
-                                The secret is only shown once, when the agent is created. If you lost it,
-                                generate a new one.
-                            </FormDescription>
-                        </template>
-                    </FormGroup>
-                </div>
-
-                <div class="d-flex justify-content-end gap-2">
-                    <button v-if="revealedSecret" type="button" class="btn btn-secondary" @click="copySecret">
-                        <i class="bi bi-clipboard me-1"></i>
-                        Copy Secret
-                    </button>
-                    <button type="button" class="btn btn-warning" :disabled="isRegenerating" @click="regenerateSecret">
-                        <i class="bi bi-arrow-repeat me-1"></i>
-                        Regenerate Secret
-                    </button>
-                </div>
-
-            </div>
-
-        </form>
-
-    </DashboardPage>
-
-    <div></div>
-
-</template>
-
-<style scoped>
-
-</style>
diff --git a/pages/agents/index.vue b/pages/agents/index.vue
deleted file mode 100644
index 07f6489..0000000
--- a/pages/agents/index.vue
+++ /dev/null
@@ -1,214 +0,0 @@
-<template>
-    <DashboardPage title="Manage Agents" subtitle="View and manage your network agents" image="bi bi-wifi"
-        class="agent-management-page">
-
-        <div class="row mb-4">
-            <div class="col-md-4">
-                <div class="input-group">
-                    <span class="input-group-text form-input-small">
-                        <i class="bi bi-search text-light"></i>
-                    </span>
-                    <input type="text" class="form-control form-input-small" placeholder="Search agents..."
-                        v-model="searchQuery">
-                </div>
-            </div>
-            <div class="col-md-3">
-                <select class="form-select form-input" v-model="statusFilter">
-                    <option value="">All Status</option>
-                    <option v-for="type in ModelUtils.OnlineStatus.getAllTypes()" :value="type.name">
-                        {{ type.label }}
-                    </option>
-                </select>
-            </div>
-            <div class="col-md-3">
-                <select class="form-select form-input" v-model="typeFilter">
-                    <option value="">All Types</option>
-                    <option v-for="type in Agent.Utils.getAllAgentTypes()" :value="type.name">
-                        {{ type.label }}
-                    </option>
-                </select>
-            </div>
-            <div class="col-md-2">
-                <NuxtLink role="button" to="/agents/new" class="btn btn-primary fw-bold w-100">
-                    <i class="bi bi-plus-circle me-2"></i>
-                    Add New Agent
-                </NuxtLink>
-            </div>
-        </div>
-
-        <!-- Agent Table -->
-        <SimpleTable>
-            <thead>
-                <tr>
-                    <th scope="col">Agent</th>
-                    <th scope="col" class="text-center">Status</th>
-                    <th scope="col" class="text-end">Actions</th>
-                </tr>
-            </thead>
-            <tbody>
-                <tr v-for="(agent, index) in filteredAgents" :key="agent.id">
-                    <td>
-                        <div class="d-flex align-items-center">
-                            <div class="agent-icon me-3">
-                                <i :class="agent.getAgentIcon()"></i>
-                            </div>
-                            <div>
-                                <div class="fw-bold text-white text-break">{{ agent.name }}</div>
-                                <div class="small text-light opacity-75 text-break">{{ agent.description }}</div>
-                            </div>
-                        </div>
-                    </td>
-                    <td class="text-center">
-                        <span :class="agent.getStatusBadgeClass()" class="badge px-3 py-2">
-                            <i :class="agent.getStatusIcon()" class="me-1"></i>
-                            {{ agent.status.charAt(0).toUpperCase() + agent.status.slice(1) }}
-                        </span>
-                    </td>
-                    <td>
-                        <div class="d-flex justify-content-end gap-2">
-                            <button class="btn btn-info btn-sm" @click="agent.refreshStatus()" title="Ping">
-                                <i class="bi bi-arrow-repeat"></i>
-                            </button>
-                            <NuxtLink role="button" :to="`/agents/${agent.id}`" class="btn btn-primary btn-sm"
-                                title="Edit">
-                                <i class="bi bi-pencil"></i>
-                            </NuxtLink>
-                            <button class="btn btn-danger btn-sm" @click="deleteAgent(agent.id)" title="Delete">
-                                <i class="bi bi-trash"></i>
-                            </button>
-                        </div>
-                    </td>
-                </tr>
-            </tbody>
-        </SimpleTable>
-
-        <div v-if="filteredAgents.length === 0" class="text-center py-5 rounded-4 bg-dark bg-opacity-50">
-            <i class="bi bi-inbox text-light opacity-50" style="font-size: 4rem;"></i>
-            <h4 class="text-light opacity-75 mt-3">No agents found</h4>
-            <p class="text-light opacity-50">
-                {{ agents.length === 0 ? 'Add your first agent to get started' : 'No agents match your search criteria'
-                }}
-            </p>
-        </div>
-
-    </DashboardPage>
-</template>
-
-<script setup lang="ts">
-
-import { ref } from 'vue'
-import { Agent } from '@/utils/models/agent';
-
-import DashboardPage from '@/components/DashboardPage.vue';
-import SimpleTable from '~/components/SimpleTable.vue';
-import { ModelUtils } from '~/utils/models/utils';
-import { useDataFilter } from '~/composables/useDataFilter';
-import { useAPI } from '~/composables/useAPI';
-
-definePageMeta({
-    layout: 'dashboard',
-    middleware: 'auth',
-});
-
-const agents = reactive<Agent[]>(await getAgents());
-
-async function getAgents() {
-
-    const response = await useAPI("/api/agents", {
-        method: 'GET'
-    });
-        
-    if (response.status !== "OK" || !response.data) {
-        useNotificationToast({
-            message: `Error fetching agent: ${response?.message || 'unknown error'}`,
-            type: 'error'
-        });
-        return [];
-    }
-
-    return response.data.map((agentData) => new Agent({
-        ...agentData,
-        status: 'unknown'
-    }));
-
-}
-
-async function deleteAgent(agentId: number) {
-    if (confirm('Are you sure you want to delete this agent?')) {
-        const index = agents.findIndex(d => d.id === agentId)
-        if (index > -1) {
-            const response = await useAPI(`/api/agents/${agentId}`, {
-                method: 'DELETE',
-                body: JSON.stringify(agents[index]),
-            });
-
-            if (response.status !== "OK") {
-                useNotificationToast({
-                    message: `Error deleting agent: ${response?.message || 'unknown error'}`,
-                    type: 'error'
-                });
-                return;
-            }
-
-            agents.splice(index, 1);
-            useNotificationToast({
-                message: 'Agent deleted successfully',
-                type: 'success'
-            });
-        }
-    }
-}
-
-
-const searchQuery = ref('');
-const statusFilter = ref('');
-const typeFilter = ref('');
-
-const filteredAgents = useDataFilter(agents, {
-    search: {
-        query: searchQuery,
-        props: ['name', 'description'],
-    },
-    match: [
-        { query: statusFilter, prop: 'status' },    
-        { query: typeFilter, prop: 'type' }
-    ]
-});
-
-
-// Function to refresh all agent statuses
-function refreshAllAgentStatuses() {
-    return Agent.Utils.updateStatuses(agents);
-}
-
-let statusRefreshInterval: number | null = null;
-
-onMounted(() => {
-    refreshAllAgentStatuses();
-    statusRefreshInterval = window.setInterval(refreshAllAgentStatuses, 20000);
-});
-
-onUnmounted(() => {
-    if (statusRefreshInterval !== null) {
-        clearInterval(statusRefreshInterval);
-        statusRefreshInterval = null;
-    }
-});
-
-</script>
-
-<style scoped>
-@import url('/assets/css/forms.css');
-
-.agent-icon {
-    min-width: 40px;
-    width: 40px;
-    height: 40px;
-    display: flex;
-    align-items: center;
-    justify-content: center;
-    background-color: rgba(255, 255, 255, 0.05);
-    border-radius: 8px;
-    font-size: 1.25rem;
-}
-</style>
\ No newline at end of file
diff --git a/pages/auth/login.vue b/pages/auth/login.vue
deleted file mode 100644
index 7caec98..0000000
--- a/pages/auth/login.vue
+++ /dev/null
@@ -1,131 +0,0 @@
-<template>
-    <div class="container-xxl auth-wrapper">
-        <div class="auth-container d-flex flex-column justify-content-center align-items-center">
-
-            <div class="text-center h3 mt-2 mb-3">Welcome to NetIgnite</div>
-            <div class="text-center h6 text-secondary mb-5">Login to your account</div>
-            <form class="w-100" @submit.prevent="loginForm.submit">
-                <FormGroup>
-                    <FormLabel for="username">Username:</FormLabel>
-                    <FormInput id="username" v-model="loginForm.values.username" placeholder="Enter your username"
-                        required />
-                </FormGroup>
-                <FormGroup>
-                    <label for="password" class="mb-1">Password:</label>
-                    <FormInput type="password" id="password" v-model="loginForm.values.password"
-                        placeholder="Enter your password" required />
-                </FormGroup>
-                <FormsFormSubmitBtn class="submit-btn">Login</FormsFormSubmitBtn>
-            </form>
-        </div>
-    </div>
-
-</template>
-
-<script setup lang="ts">
-
-useSeoMeta({
-    title: "Login | NetIgnite",
-    description: "Login to your NetIgnite account",
-});
-definePageMeta({
-    layout: "auth",
-    middleware: "auth",
-});
-
-import { ref } from 'vue'
-import FormGroup from '~/components/forms/FormGroup.vue';
-import FormLabel from '~/components/forms/FormLabel.vue';
-import FormInput from '~/components/forms/FormInput.vue';
-
-import { SimpleForm } from '~/utils/simpleForm';
-import { useAPI } from '~/composables/useAPI';
-
-const route = useRoute()
-const redirectUrl = route.query.url || '/';
-
-const loginForm = new SimpleForm(
-    {
-        username: "",
-        password: "",
-    },
-
-    async function (values) {
-
-        try {
-            const response = await useAPI('/api/auth/login', {
-                method: 'POST',
-                body: values,
-                credentials: 'include',
-            }, true);
-
-            loginForm.reset();
-
-            if (response.status !== 'OK') {
-                useNotificationToast({
-                    message: "Login failed: " + (response?.message || 'Unknown error'),
-                    type: 'error',
-                });
-                return;
-            }
-
-            useNotificationToast({
-                message: "Login successful!",
-                type: 'success',
-            });
-            navigateTo(redirectUrl as string);
-            return;
-
-        } catch (error) {
-
-            useNotificationToast({
-                message: "Login failed: " + (error as Error).message,
-                type: 'error',
-            });
-        }
-        
-    }
-);
-
-
-</script>
-
-<style scoped>
-.auth-wrapper {
-    margin: auto;
-    max-width: 500px;
-}
-
-.auth-container {
-    width: 100%;
-    padding: 30px;
-    background-color: #1a1b2e;
-    border-radius: 10px;
-    box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
-}
-
-.submit-btn {
-    width: 100%;
-}
-
-.alert-message-box {
-    max-width: 500px;
-    position: fixed;
-    top: 10%;
-    left: 50%;
-    transform: translateX(-50%);
-    z-index: 1050;
-    /* above most Bootstrap elements */
-    min-width: 300px;
-    text-align: center;
-}
-
-.alert-message {
-    background-color: rgba(255, 255, 255, 0.85);
-    /* white with transparency */
-    box-shadow: 0 4px 10px rgba(0, 0, 0, 0.15);
-    padding: 1rem 1.5rem;
-    border-radius: 0.375rem;
-    text-align: center;
-}
-</style>
diff --git a/pages/auth/reset-password.vue b/pages/auth/reset-password.vue
deleted file mode 100644
index 78741a2..0000000
--- a/pages/auth/reset-password.vue
+++ /dev/null
@@ -1,16 +0,0 @@
-<template>
-    <div></div>
-</template>
-
-<script setup lang="ts">
-
-useSeoMeta({
-    title: 'Reset Password | NetIgnite',
-    description: 'Reset your password of your NetIgnite account',
-});
-definePageMeta({
-    layout: 'auth',
-    middleware: 'auth',
-});
-
-</script>
\ No newline at end of file
diff --git a/pages/devices/[id]/index.vue b/pages/devices/[id]/index.vue
deleted file mode 100644
index 8bc5ce0..0000000
--- a/pages/devices/[id]/index.vue
+++ /dev/null
@@ -1,230 +0,0 @@
-<script setup lang="ts">
-import DashboardPage from '@/components/DashboardPage.vue';
-import { Device } from '@/utils/models/device';
-import FormDescription from '~/components/forms/FormDescription.vue';
-import FormGroup from '~/components/forms/FormGroup.vue';
-import FormInput from '~/components/forms/FormInput.vue';
-import FormLabel from '~/components/forms/FormLabel.vue';
-import FormSelect from '~/components/forms/FormSelect.vue';
-import FormSubmitBtn from '~/components/forms/FormSubmitBtn.vue';
-import FormTextarea from '~/components/forms/FormTextarea.vue';
-import { useAPI } from '~/composables/useAPI';
-import type { NotificationToastSettings } from '~/composables/useNotificationToast';
-import { Agent } from '~/utils/models/agent';
-import { SessionStore } from '~/utils/userStore';
-
-definePageMeta({
-	layout: 'dashboard',
-	middleware: 'auth',
-});
-
-
-const route = useRoute();
-const device_id = route.params.id;
-
-const isNewDevice = device_id === "new";
-
-const initialNotification = ref<NotificationToastSettings | null>(null);
-
-async function getDevice() {
-
-    if (isNewDevice) {
-        return new Device({
-            id: -1,
-            name: "",
-            description: "",
-            type: "" as any,
-            macAddress: "",
-            port: 9,
-            agentID: -1,
-            ownerID: SessionStore.useUserInfo().userID,
-            status: 'unknown',
-        });
-    }
-
-    const response = await useAPI(`/api/devices/${device_id}` as `/api/devices/:id`, {
-        method: 'GET'
-    });
-        
-    if (response.status !== "OK" || !response.data) {
-        initialNotification.value = {
-            message: `Error fetching device: ${response?.message || 'unknown error'}`,
-            type: 'error'
-        };
-        return {} as Device;
-    }
-    return new Device({
-        ...response.data,
-        status: 'unknown',
-    });
-}
-
-async function getAgents() {
-
-    const response = await useAPI("/api/agents", {
-        method: 'GET'
-    });
-        
-    if (response.status !== "OK" || !response.data) {
-        initialNotification.value = {
-            message: `Error fetching agent: ${response?.message || 'unknown error'}`,
-            type: 'error'
-        };
-        await navigateTo('/404', { redirectCode: 404 });
-        return [];
-    }
-
-    return response.data.map((agentData) => new Agent({
-        ...agentData,
-        status: 'unknown'
-    }));
-
-}
-
-const device = reactive(await getDevice());
-const agents = await getAgents();
-
-async function sumbitForm() {
-
-    try {
-
-        if (isNewDevice) {
-            const response = await useAPI('/api/devices', {
-                method: 'POST',
-                body: JSON.stringify(device)
-            });
-
-            if (response.status !== "OK" || !response.data) {
-                useNotificationToast({
-                    message: `Error creating device: ${response?.message || 'unknown error'}`,
-                    type: 'error'
-                });
-                return;
-            }
-            useNotificationToast({
-                message: 'Device created successfully',
-                type: 'success'
-            });
-        } else {
-
-            const response = await useAPI(`/api/devices/${device.id}`, {
-                method: 'PUT',
-                body: JSON.stringify(device)
-            });
-
-            if (response.status !== "OK") {
-                useNotificationToast({
-                    message: `Error updating device: ${response?.message || 'unknown error'}`,
-                    type: 'error'
-                });
-                return;
-            }
-            useNotificationToast({
-                message: 'Device updated successfully',
-                type: 'success'
-            });
-        }
-
-        navigateTo('/devices');
-
-    } catch (error) {
-        useNotificationToast({
-            message: `Error: ${error instanceof Error ? error.message : 'unknown error'}`,
-            type: 'error'
-        });
-    }
-
-}
-
-const isSubmitDisabled = computed(() => {
-    return !device.name || !device.type || !device.macAddress || (device.port < 1 || device.port > 65535) || (device.agentID < 1);
-});
-
-
-onMounted(() => {
-    if (initialNotification.value && import.meta.client) {
-        useNotificationToast(initialNotification.value);
-        navigateTo('/devices');
-    }
-});
-
-</script>
-
-<template>
-
-    <DashboardPage v-if="!initialNotification" :title="isNewDevice ? 'Create New Device' : 'Edit Device'" subtitle="Manage your device details" image="bi bi-wifi">
-
-        <form @submit.prevent="sumbitForm" autocomplete="off">
-
-            <div class="box-container d-flex flex-column justify-content-center">
-
-                <h4 class="text-white mb-4">Resource Details</h4>
-
-                <div class="row">
-                    <FormGroup class="col-md-6">
-                        <FormLabel>Name</FormLabel>
-                        <FormInput v-model="device.name" placeholder="Enter device name" required />
-                        <FormDescription>
-                            The name of the device. This is used to identify the device in the dashboard.
-                        </FormDescription>
-                    </FormGroup>
-                    <FormGroup class="col-md-6">
-                        <FormLabel>Device Type</FormLabel>
-                        <FormSelect v-model="device.type" required>
-                            <option value="" disabled>Select Device Type</option>
-                            <option v-for="type in Device.Utils.getAllDeviceTypes()" :value="type.name">
-                                {{ type.label }}
-                            </option>
-                        </FormSelect>
-                    </FormGroup>
-                    <FormGroup class="col-md-12">
-                        <FormLabel>Description</FormLabel>
-                        <FormTextarea rows="2" v-model="device.description" placeholder="Enter device description"></FormTextarea>
-                    </FormGroup>
-                </div>
-
-            </div>
-
-            <div class="box-container d-flex flex-column justify-content-center mt-4">
-
-                <h4 class="text-white mb-4">Connection Details</h4>
-
-                <div class="row mb-4">
-                    <FormGroup class="col-md-6 row">
-                        <div class="col-md-9">
-                            <FormLabel>MAC Address</FormLabel>
-                            <FormInput v-model="device.macAddress" placeholder="Enter MAC address" required />
-                        </div>
-                        <div class="col-md-3">
-                            <FormLabel>Port</FormLabel>
-                            <FormInput v-model.number="device.port" type="number" min="1" max="65535" placeholder="Port" required />
-                        </div>
-                    </FormGroup>
-                    <FormGroup class="col-md-6">
-                        <FormLabel>Agent</FormLabel>
-                        <FormSelect v-model.number="device.agentID" required>
-                            <option value="" disabled>Select Agent</option>
-                            <option v-for="agent in agents" :value="agent.id">
-                                {{ agent.name }}
-                            </option>
-                        </FormSelect>
-                    </FormGroup>
-                </div>
-
-                <div class="d-flex justify-content-end">
-                    <FormSubmitBtn class="btn btn-primary text-right" type="submit" :disabled="isSubmitDisabled">
-                        {{ isNewDevice ? 'Create Device' : 'Update Device' }}
-                    </FormSubmitBtn>
-                </div>
-
-            </div>
-
-        </form>
-
-    </DashboardPage>
-
-</template>
-
-<style scoped>
-
-</style>
diff --git a/pages/devices/index.vue b/pages/devices/index.vue
deleted file mode 100644
index b0cf4ad..0000000
--- a/pages/devices/index.vue
+++ /dev/null
@@ -1,256 +0,0 @@
-<template>
-    <DashboardPage title="Manage Devices" subtitle="View and manage your network devices" image="bi bi-hdd-network"
-        class="device-management-page">
-
-        <div class="row mb-4">
-            <div class="col-md-4">
-                <div class="input-group">
-                    <span class="input-group-text form-input-small">
-                        <i class="bi bi-search text-light"></i>
-                    </span>
-                    <input type="text" class="form-control form-input-small" placeholder="Search devices..."
-                        v-model="searchQuery">
-                </div>
-            </div>
-            <div class="col-md-3">
-                <select class="form-select form-input" v-model="statusFilter">
-                    <option value="">All Status</option>
-                    <option v-for="type in ModelUtils.OnlineStatus.getAllTypes()" :value="type.name">
-                        {{ type.label }}
-                    </option>
-                </select>
-            </div>
-            <div class="col-md-3">
-                <select class="form-select form-input" v-model="typeFilter">
-                    <option value="">All Types</option>
-                    <option v-for="type in Device.Utils.getAllDeviceTypes()" :value="type.name">
-                        {{ type.label }}
-                    </option>
-                </select>
-            </div>
-            <div class="col-md-2">
-                <NuxtLink role="button" to="/devices/new" class="btn btn-primary fw-bold w-100">
-                    <i class="bi bi-plus-circle me-2"></i>
-                    Add New Device
-                </NuxtLink>
-            </div>
-        </div>
-
-        <!-- Device Table -->
-        <SimpleTable>
-            <thead>
-                <tr>
-                    <th scope="col">Device</th>
-                    <th scope="col" class="text-center">Status</th>
-                    <th scope="col" class="text-end">Actions</th>
-                </tr>
-            </thead>
-            <tbody>
-                <tr v-for="(device, index) in filteredDevices" :key="device.id">
-                    <td>
-                        <div class="d-flex align-items-center">
-                            <div class="device-icon me-3">
-                                <i :class="device.getDeviceIcon()"></i>
-                            </div>
-                            <div>
-                                <div class="fw-bold text-white text-break">{{ device.name }}</div>
-                                <div class="small text-light opacity-75 text-break">{{ device.description }}</div>
-                            </div>
-                        </div>
-                    </td>
-                    <td class="text-center">
-                        <span :class="device.getStatusBadgeClass()" class="badge px-3 py-2">
-                            <i :class="device.getStatusIcon()" class="me-1"></i>
-                            {{ device.status.charAt(0).toUpperCase() + device.status.slice(1) }}
-                        </span>
-                    </td>
-                    <td>
-                        <div class="d-flex justify-content-end gap-2">
-
-                            <button v-if="device.status !== 'online'" class="btn btn-success btn-sm"
-                                @click="device.wakeUP()" :disabled="device.powering" title="Power On">
-                                <i class="bi"
-                                    :class="device.powering ? 'spinner-border spinner-border-sm' : 'bi-power'"></i>
-                            </button>
-                            <button v-else-if="device.status === 'online'" class="btn btn-warning btn-sm"
-                                @click="device.shutdown()" title="Shutdown">
-                                <i class="bi bi-stop-circle"></i>
-                            </button>
-                            <button v-else class="btn btn-secondary btn-sm" disabled @click="device.shutdown()"
-                                title="Shutdown">
-                                <i class="bi bi-question-circle-fill"></i>
-                            </button>
-
-                            <button class="btn btn-info btn-sm" @click="device.refreshStatus()" title="Ping">
-                                <i class="bi bi-arrow-repeat"></i>
-                            </button>
-                            <NuxtLink role="button" :to="`/devices/${device.id}`" class="btn btn-primary btn-sm"
-                                title="Edit">
-                                <i class="bi bi-pencil"></i>
-                            </NuxtLink>
-                            <button class="btn btn-light btn-sm" @click="device.toggleFavorite()" title="Favorite">
-                                <i :class="device.getFavoriteIcon()"></i>
-                            </button>
-                            <button class="btn btn-danger btn-sm" @click="deleteDevice(device.id)" title="Delete">
-                                <i class="bi bi-trash"></i>
-                            </button>
-                        </div>
-                    </td>
-                </tr>
-            </tbody>
-        </SimpleTable>
-
-        <div v-if="filteredDevices.length === 0" class="text-center py-5 rounded-4 bg-dark bg-opacity-50">
-            <i class="bi bi-inbox text-light opacity-50" style="font-size: 4rem;"></i>
-            <h4 class="text-light opacity-75 mt-3">No devices found</h4>
-            <p class="text-light opacity-50">
-                {{ devices.length === 0 ? 'Add your first device to get started' : 'No devices match your search criteria' }}
-            </p>
-        </div>
-
-    </DashboardPage>
-</template>
-
-<script setup lang="ts">
-
-import { ref } from 'vue'
-import { Device } from '@/utils/models/device';
-
-import DashboardPage from '@/components/DashboardPage.vue';
-import SimpleTable from '~/components/SimpleTable.vue';
-import { ModelUtils } from '~/utils/models/utils';
-import { useDataFilter } from '~/composables/useDataFilter';
-import { useAPI } from '~/composables/useAPI';
-
-definePageMeta({
-    layout: 'dashboard',
-    middleware: 'auth',
-});
-
-
-// Reactive data
-const devices = reactive<Device[]>(await getDevices());
-
-async function getDevices() {
-
-    const response = await useAPI("/api/devices", {
-        method: 'GET'
-    });
-
-    if (response.status !== "OK" || !response.data) {
-        useNotificationToast({
-            message: `Error fetching device: ${response?.message || 'unknown error'}`,
-            type: 'error'
-        });
-        return [];
-    }
-
-    return response.data.map((deviceData) => new Device({
-        ...deviceData,
-        status: 'unknown'
-    }));
-
-}
-
-async function deleteDevice(deviceID: number) {
-    if (confirm('Are you sure you want to delete this device?')) {
-        const index = devices.findIndex(d => d.id === deviceID)
-        if (index > -1) {
-            const response = await useAPI(`/api/devices/${deviceID}`, {
-                method: 'DELETE',
-                body: JSON.stringify(devices[index]),
-            });
-
-            if (response.status !== "OK") {
-                useNotificationToast({
-                    message: `Error deleting device: ${response?.message || 'unknown error'}`,
-                    type: 'error'
-                });
-                return;
-            }
-                
-            devices.splice(index, 1);
-            useNotificationToast({
-                message: response.message,
-                type: 'success'
-            });
-        }
-    }
-}
-
-
-const searchQuery = ref('');
-const statusFilter = ref('');
-const typeFilter = ref('');
-
-const filteredDevices = useDataFilter(devices, {
-    search: {
-        query: searchQuery,
-        props: ['name', 'description'],
-    },
-    match: [
-        { query: statusFilter, prop: 'status' },
-        { query: typeFilter, prop: 'type' }
-    ]
-});
-
-
-function refreshAllDevicesStatuses() {
-    return Device.Utils.updateStatuses(devices);
-}
-
-let statusRefreshInterval: number | null = null;
-
-onMounted(() => {
-    refreshAllDevicesStatuses();
-    statusRefreshInterval = window.setInterval(refreshAllDevicesStatuses, 20000);
-});
-
-onUnmounted(() => {
-    if (statusRefreshInterval !== null) {
-        clearInterval(statusRefreshInterval);
-        statusRefreshInterval = null;
-    }
-});
-
-</script>
-
-<style scoped>
-@import url('/assets/css/forms.css');
-
-.device-icon {
-    min-width: 40px;
-    width: 40px;
-    height: 40px;
-    display: flex;
-    align-items: center;
-    justify-content: center;
-    background-color: rgba(255, 255, 255, 0.05);
-    border-radius: 8px;
-    font-size: 1.25rem;
-}
-</style>
-
-<!-- // Card View
-
-// <!-- 
-//                 .device-card {
-//     background-color: #0b0c1b;
-//     border: 1px solid rgba(255, 255, 255, 0.1);
-//     transition: transform 0.3s ease, box-shadow 0.3s ease;
-// }
-
-// .device-card:hover {
-//     transform: translateY(-5px);
-//     box-shadow: 0 10px 30px rgba(0, 0, 0, 0.2);
-// }
-
-// .device-icon-container {
-//     width: 60px;
-//     height: 60px;
-//     display: flex;
-//     align-items: center;
-//     justify-content: center;
-//     background-color: rgba(255, 255, 255, 0.05);
-//     border-radius: 12px;
-// } -->
\ No newline at end of file
diff --git a/pages/index.vue b/pages/index.vue
deleted file mode 100644
index c6f348b..0000000
--- a/pages/index.vue
+++ /dev/null
@@ -1,206 +0,0 @@
-<template>
-
-	<DashboardPage title="NetIgnite Dashboard" subtitle="Quickly manage your network devices" image="bi bi-speedometer2" class="device-management-page">
-
-		<div class="row g-4 mb-5">
-			<div class="col-md-3">
-				<div class="stat-card bg-success bg-opacity-10 rounded-4 p-4 text-center">
-					<i class="bi bi-check-circle-fill text-success fs-1 mb-2"></i>
-					<h3 class="fw-bold text-white">{{ onlineDevices }}</h3>
-					<p class="text-success mb-0">Online</p>
-				</div>
-			</div>
-			<div class="col-md-3">
-				<div class="stat-card bg-danger bg-opacity-10 rounded-4 p-4 text-center">
-					<i class="bi bi-x-circle-fill text-danger fs-1 mb-2"></i>
-					<h3 class="fw-bold text-white">{{ offlineDevices }}</h3>
-					<p class="text-danger mb-0">Offline</p>
-				</div>
-			</div>
-			<div class="col-md-3">
-				<div class="stat-card bg-secondary bg-opacity-10 rounded-4 p-4 text-center">
-					<i class="bi bi-question-circle-fill text-secondary fs-1 mb-2"></i>
-					<h3 class="fw-bold text-white">{{ unknownDevices }}</h3>
-					<p class="text-secondary mb-0">Unknown</p>
-				</div>
-			</div>
-			<div class="col-md-3">
-				<div class="stat-card bg-info bg-opacity-10 rounded-4 p-4 text-center">
-					<i class="bi bi-hdd-network-fill text-info fs-1 mb-2"></i>
-					<h3 class="fw-bold text-white">{{ totalDevices }}</h3>
-					<p class="text-info mb-0">Total Devices</p>
-				</div>
-			</div>
-		</div>
-
-		<h3 class="fw-bold text-white mb-0">Your Devices</h3>
-
-		<div class="row g-4 mt-3">
-			<div class="col-lg-4 col-md-6" v-for="device in devices" :key="device.id">
-				<div class="device-card rounded-4 p-4 h-100">
-					<div class="device-icon-container mb-3">
-						<i :class="device.getDeviceIcon()" class="fs-1"></i>
-					</div>
-
-					<h5 class="fw-bold text-white mb-2">{{ device.name }}</h5>
-					<p class="text-light opacity-75 mb-3">{{ device.description }}</p>
-
-					<div class="d-flex justify-content-between align-items-center">
-						<span :class="device.getStatusBadgeClass()" class="badge px-3 py-2">
-							<i :class="device.getStatusIcon()" class="me-1"></i>
-							{{ device.status.charAt(0).toUpperCase() + device.status.slice(1) }}
-						</span>
-
-						<div class="d-flex justify-content-end gap-2">
-							<button v-if="device.status !== 'online'" class="btn btn-success btn-sm"
-                                @click="device.wakeUP()" :disabled="device.powering" title="Power On">
-                                <i class="bi"
-                                    :class="device.powering ? 'spinner-border spinner-border-sm' : 'bi-power'"></i>
-                            </button>
-                            <button v-else-if="device.status === 'online'" class="btn btn-warning btn-sm"
-                                @click="device.shutdown()" title="Shutdown">
-                                <i class="bi bi-stop-circle"></i>
-                            </button>
-                            <button v-else class="btn btn-secondary btn-sm" disabled @click="device.shutdown()"
-                                title="Shutdown">
-                                <i class="bi bi-question-circle-fill"></i>
-                            </button>
-
-                            <button class="btn btn-info btn-sm" @click="device.refreshStatus()" title="Ping">
-                                <i class="bi bi-arrow-repeat"></i>
-                            </button>
-                            <NuxtLink role="button" :to="`/devices/${device.id}`" class="btn btn-primary btn-sm"
-                                title="Edit">
-                                <i class="bi bi-pencil"></i>
-                            </NuxtLink>
-						</div>
-					</div>
-				</div>
-			</div>
-		</div>
-
-		<div v-if="devices.length === 0" class="text-center py-5 rounded-4 bg-dark bg-opacity-50">
-            <i class="bi bi-inbox text-light opacity-50" style="font-size: 4rem;"></i>
-            <h4 class="text-light opacity-75 mt-3">No devices found</h4>
-            <p class="text-light opacity-50">
-				Add your first device to get started
-            </p>
-        </div>
-
-	</DashboardPage>
-</template>
-
-<script setup lang="ts">
-import { ref, computed, onMounted } from 'vue'
-import { useAPI } from '~/composables/useAPI';
-import { Device } from '~/utils/models/device';
-
-definePageMeta({
-    layout: 'dashboard',
-    middleware: 'auth',
-});
-
-
-// Reactive data
-const devices = reactive<Device[]>(await getDevices());
-
-async function getDevices() {
-
-    const response = await useAPI("/api/devices", {
-        method: 'GET',
-		query: {
-			// onlyFavorites: true
-		}
-    });
-
-    if (response.status !== "OK" || !response.data) {
-        useNotificationToast({
-            message: `Error fetching device: ${response?.message || 'unknown error'}`,
-            type: 'error'
-        });
-        return [];
-    }
-
-    return response.data.map((deviceData) => new Device({
-        ...deviceData,
-        status: 'unknown'
-    }));
-
-}
-
-
-function refreshAllDevicesStatuses() {
-    return Device.Utils.updateStatuses(devices);
-}
-
-let statusRefreshInterval: number | null = null;
-
-onMounted(() => {
-    refreshAllDevicesStatuses();
-    statusRefreshInterval = window.setInterval(refreshAllDevicesStatuses, 20000);
-});
-
-onUnmounted(() => {
-    if (statusRefreshInterval !== null) {
-        clearInterval(statusRefreshInterval);
-        statusRefreshInterval = null;
-    }
-});
-
-
-const totalDevices = computed(() => devices.length)
-const onlineDevices = computed(() => devices.filter(d => d.status === 'online').length)
-const offlineDevices = computed(() => devices.filter(d => d.status === 'offline').length)
-const unknownDevices = computed(() => devices.filter(d => d.status === 'unknown').length)
-
-</script>
-
-<style scoped>
-.stat-card {
-	background-color: #0b0c1b !important;
-	border: 1px solid rgba(255, 255, 255, 0.1);
-	transition: transform 0.3s ease, box-shadow 0.3s ease;
-}
-
-.stat-card:hover {
-	transform: translateY(-5px);
-	box-shadow: 0 10px 30px rgba(0, 0, 0, 0.2);
-}
-
-.device-card {
-	background-color: #0b0c1b;
-	border: 1px solid rgba(255, 255, 255, 0.1);
-	transition: transform 0.3s ease, box-shadow 0.3s ease;
-}
-
-.device-card:hover {
-	transform: translateY(-5px);
-	box-shadow: 0 10px 30px rgba(0, 0, 0, 0.2);
-}
-
-.device-icon-container {
-	width: 60px;
-	height: 60px;
-	display: flex;
-	align-items: center;
-	justify-content: center;
-	background-color: rgba(255, 255, 255, 0.05);
-	border-radius: 12px;
-}
-
-.device-details {
-	font-size: 0.9rem;
-}
-
-@media (max-width: 768px) {
-	.device-actions {
-		display: flex;
-		gap: 0.5rem;
-	}
-
-	.device-actions .btn {
-		padding: 0.25rem 0.5rem;
-		font-size: 0.875rem;
-	}
-}
-</style>
\ No newline at end of file
diff --git a/plugins/suppress-router-warn.client.ts b/plugins/suppress-router-warn.client.ts
deleted file mode 100644
index ab7b5fb..0000000
--- a/plugins/suppress-router-warn.client.ts
+++ /dev/null
@@ -1,14 +0,0 @@
-export default defineNuxtPlugin(() => {
-    if (process.env.NODE_ENV === 'production') {
-        const originalWarn = console.warn;
-        console.warn = (...args) => {
-            if (
-                typeof args[0] === 'string' &&
-                args[0].includes('[Vue Router warn]: No match found for location with path')
-            ) {
-                return; // Suppress this specific warning
-            }
-            originalWarn(...args); // Allow all other warnings
-        };
-    }
-});
diff --git a/public/robots.txt b/public/robots.txt
index d08d2f1..a68cf7c 100644
--- a/public/robots.txt
+++ b/public/robots.txt
@@ -1,3 +1,5 @@
 User-Agent: *
+Allow: /
+Disallow: /dashboard
 
-Disallow: /
+sitemap: https://www.leicraft.de/static/utils/sitemap.xml
\ No newline at end of file
diff --git a/public/static/logo/icon.png b/public/static/logo/icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..f13fb8ddb4dcca4a2c159343dd61182b560fd7aa
GIT binary patch
literal 10792
zcmZvCc{r5&8}~DY5m_QS*|!Nzp->{BkQpMTkxmjVDk{Xt5@t#zOV$uA#3-YFbWU|-
zQb?PKGjphO%AT>c*ivZBy!SIQ-uJrRKf0=~?{Y7n`*SakM0YnQS!q>i1VLm;L<cg0
zh`~R_kVQE7>sw^&4E!Y(Li{}p!TcM7{=wY%clA?PRG~WVqV5PjM2*-N>W@T3L>LDI
z9Su9MFT~$CIP~z9uhyyvqK%LoHd7+6e(5-xo-+{j@0j56;=R}dW#U$(v;SPuxi(b#
z(7#N5_Y2(|PrnrFXS#p<-Fopdv(>Ft#og@R&x`-8_TO<b_n2X5y`=1pVR2XGb%xS^
zxXT<l(3p_ODGhh{?B*1oSmfS#x|JyPXV2uHBOUTN$2B&5ZanqydcELB$7ey-h|7<O
z>Xz)#W@2Wv!K~_tZrDbnote9&c*{raYxi`^<W*!%nTA}|r(JfM`tY}3+m=uyozY3m
z;$aU>{irp;jO23#pFh;n{LlNg$d8gohA9zpNM@^lfWb(g#xaAnGBQ2`wq~-QiyF$U
zpOzT+ljvAFKHT&Dn=ZWxrMuNGf<CRVL|UG0bF$CO4}2}gE|aDIrC%#!T4wa45C4`R
z3Da3nIYwjgM#^5OBY5Uw&hkc;ZWTX|H2$-9RnLq%#Y??$MOZxZGY8+eynFfMjXX@w
znpY!?*`_Z&UG5h*AVjhx$2jNj-hl2Gor1M-Nx|cZ*997FXVMV-kX6a1)raz1uojbJ
zE$j34{T@fJ_%Rk-cBUGW&iIsm^3U{uR8CjDmfwZVHg5-Nn9}1oyUh2OPMQ|zq+&*7
zou}5@uWqh+dakghLV6VaQTlhYTpc-uh$(E-fNrG(Kh_gf_YK+VnfAccaX%mG;^#-)
z6D<)UXEmO9wRd0lZ$;h+F_!kjPWdCEO}e+X4j&RseWAAcqMUmbx@{dpYU}C$u{DCn
zirE-~g(N~^C7Cxb>#iG2Z5;g#8NLA5`)pP{yfiVPXk&S|_xz?5^SZ5yl60kxPze)9
z$<lT(-H;JS{3yLk3|H)3-kVm8r38VazTpDS{J<ofzR`W@whNC$J@fhvxL|MYi(Q+0
zf6$}YM(@_ttKTfr6K)n~tj#g2RmxK<@;=m)9JNYdVzq_ak7zT$&)NR2A<I9<Mnj`;
zJPb*v91Zx*<;a+M$N_5O9obO4)n@JhZ2gO)xy<a<iBP7^?VoMDwQgITN_ik$8~J_1
zmYbH+CEjHdKiQZv9BBF=>$_>1&UNvi)S!S5^cF#z#>xTp4sB9w7Fan<9rxC;a!*3=
z-+m;VAkAB20%u1)&ajsWO?5IH=#kIceroErH+u7yGtX9P;?{4i+*64u5Zpe6uGNcY
z)jnpcXhdF2jxn~{($)i#jdR3{Yu^s0rs7lk6^yqYF13Q4p1V~KFCO)yI=$TeWVYff
zfS>Yvz*SegX42QeGb){Rhru*PU`N8ri}y}H!)QBJQcpM1TEo#L1J}FfpB2~oQC++a
zcJaM_fIrJF-M^AuyR_Dw>hcbsD=7VmKCxBxfW)ZMU2RrL@{@eE7$cAez`#^Qk?xn&
zB+EAP>7T5Leu}Xp50#K|*4D1|^PsxOZ$L^7_Tcc$RzUZf1e46)RXaFXV}VCYBvzYw
zUufpBBuzf7Y=@T#CHJ$=Z3|O+xRO<Jcn`l=6II13z+_^1FR8nKFh?_VIxYG&Ji&y>
zDQWmvTQ-<;9bIdJwSYOh(!<$Cn+C?UCNE>@3^Fl&!}I#u7lS!AA+W6(wpnglBh{{U
zjctHRfxcO7UT1iB9jiDP9<&L82ag0?HL8tgYs7NlmeamsmngeXYuZRK;F=ldpwYBq
zJxXjR9A%g{;}j)J-}T5(eXp6RhueD?Qg72Em6oRjNp(-qCeK0qDm%Y_<81o!v;^A-
zv-f7*qgj5<Or07+I+yWc7slFglRT}KYdfq3SUQ*fVplV=<6zK*AgQbveg*#olCEUz
z`ezCz6_Z@#Emp;Iisd5OD=F`vEAF<IZC~D@_!^Fy!O?wlh&6R7_Li=#6tsDPZ?`b6
ztv;AvT<gj<l2~Kk2s=$+XKbzruq!W^^nZylv)VG*3$Co-#PxIfPWX9JUG_cXIbp!-
zlddQyM2heFt%Ga`_CnC}8QLe35>8))ODD41yN|LJ%23&7=U8EDPvmTcHas3}?7Bw!
z*u}4g_!|B#ZDVX^>kcq0-bSUv!yRr~9t^i{`$Y-TO<Y@P6io)44QfPngbWfy%~sgK
zH7sKhK2L-CH$W(qmz}$%{0vzoe}l{X&|Uf${}79m-nFEIEXL<;7w&RYJz$C5mQkg{
zDiMcmAz{G3*}nM)Rj}&VWsa4Xw)8Hp>KWI14s1zwn&;lZ9L|yH?=`)E3sz8oe6mX4
zhP)ECQAux$fP%n7<t}p!(5}=$HuY_g<y%{!xu*56`?*mvWB8CTs>=}AP67>8qX65m
zfbk7?39OP!)qJnbK=Szys24Ujk1e`u%qn3376d7&>5xr0t5={r>vw?ak_bwkgVO;g
z^)HKmz1VDM32d+iwD#GN@2B*yYKKQ?1-mbAaM2J-5k8*30)GgONq_~1k~kZ#5UrIu
zJQVf{Zo8vfcB&r6CSvW9f|v-zatH+D&~e~cqP4Wl)=J8mMjFKqpd6hgig|xjfj+qF
zCujL8`Yk%(HoNzofP%UMAs$$Ln7-1~!l9Cq0!N9kM$B4$fPSF1XfWsXiRm<H2+y*r
z`^hWrN2)$t%PPslX&{tsD-YYc7`1u6uit-j+B#$h)y47gw)lvjvoz%l3xw=iA_QvW
z)Q?QKbC(=KmMwYQbl`%)=_|$Fgyv5)<s2-XVzyw<UU29ZpzlDu#{Tp$Yq2}YLCn)F
zAh#nBeVfBPm$shK5_r^sFT;O<(-pRy8!**o;(pQSdte3US~Y~(%h}*fmn_~G_@Ywa
z83_`cD><<~BhrvneDY>2zoHi&BM|1<v$e@<{AJWyt1YZ$k_hvR$eOLGAig3Te$ME)
zBYqt@U*sLwz_lev<zh(6nJ;$LX&2~)*;8Fy!CNIgvUG|<Knho84Yx<jaN?&XpRgEi
z6BA{rlDE8>0_SHKJHr2E&VJCG47A|9`pdqx@#+Tm%vp{QPE`P|71_d4K+M9ia#4lA
z(+cE}S}>zHsJ@~PR6i&R^W?oiliBIufW!srj9zNXFXo^x=x**+lE<nQdw*L7FGztI
z{pZYhzO%mt#4rWmJ8REH`QQEr1)qGmfEwjJbC66Z2Ua7j1kELKUi|0Ky8{r&_D2=x
zg5vH0S7q^X-95g0;A*tgkhrA3%f8pcZw<@Qs|UcgAEd7nS&`}q+nDG!up-7<V)ca}
z_B!+~aJRC9D9|16^?nc#)`1lfkrf^9g(fz!2NyAy!i{%DxOBYt{akeiNC?%+N_W5|
z&eH8r05$o2_Xj~4(A-L*DA0@6!%NEDh_(drRNl)a+r=!LDoc-pKr6uLu{n_D_0zDo
zi@d2mF+Y8?Vc(>Oh&78onRidtl+|JEhO@*IcUa3DO9^6!pUOMVs{oPI)DcEpo}c1F
z3oCmKKq3L0Jsdxmj_fs5N2hDbAg2ufF;`2;g@0bx|A^;=)&Z05zo@fSxuD@nz*Z+>
z2T=GVaX!{Pynu$C!Hdz_^Zc32ddjseQwQTTa)Ne>ZAa|cM#HK=385f`vGajD$aS%0
z4wa?J;96;LEen6~kE@uQuiBS%6d8wsaIZj=Gv*DZxDB|~NkJa(z$)3`@NmN~`=yMo
z<APFxJhnp`Bs9Q2y9J9zKZ9pWFWoD6kW=miMm;~Z8fY>(y5C>5`ooCeb`q4a<@WCz
zt<Og)$_oO~mmr%5?s(s_C*NA`4!o3x+8;dqKt~kq9xdqWu=a*LAMB;_rnK&HEzdkG
z-Q0WWHnAU29BqdPB0$p5KljV1v0+kE@nHE}(D^9w<1vh8%2#*aSRISV6;@k@S4bj5
zgkJ=D!=@2xsbPrwa_#xJFKsy#X==537!WpODvJ8j5wO^9C>%O<zZ_aID!xXkqi6}R
z?=pD9f;ewi!xSt%u+HC(^J%^}pe8?sn0x>{AkGjLOxC<lZ@^Xxl1STLQHC$_1EfKN
zQ2KTu!z(qzHf7kha{;7cfS<q@7`q3TMCsjQGu*%KBU1RD^fS*T>*Z-rwh=)FJbqFg
zp{yEO5`Xoh0#y6S($C>K4Y+Qr$d-Pfl4>a89y?bo-4KH!D-ZziAYFgC#9vz@O4Hro
z?(jaO@U_b?EAE5583?}57KZzcK{@687J;XWF_!EPRGL1efyVZ^$#7NP!!CiBMijQt
z*?H+5oiRgAKFbP(`U`}z46s;r+JJszaGCN|U%`%xmPjdCl!OS@u<I@CQW3JIWB>WV
zW!ZFK+%P$$?Cb(CNiu-KVdxM_a!>wocG-5U#n#GFbK{KZZPc?$AYe((_q&%jr)EJZ
zT11A771#o63*1?Ha1UP(9=^)i+rRc%R_z-wnoh0&G997denFLal=?1ZI0yzgi={j3
zFF=wMHEV)_T^aL%?vXe>X)6_?lJ1Om9sLAVyIgjDBaQJ6R3{Ucru6nyGy{sGuVLxZ
zCKvBXM6O}kD+616i-k+>n>Xt#$~#7sDuOhRPs5f~A{2_DONp?wQWV<+h;7alKuL%w
zw#!liK<eOrq;Lyq9)zV^Ai**!!Lj=mx+Kb4qb`1KC*<vO>H5FFKwi=v*+ymB=wZN4
zh^RqICO|IZ_-{ZADGSj}fC7}`Z;2RgTY#eU#3vfZze<Lv114nm8A1i*nB70FH6&e)
zaqlV-R_>8gw|{^dKA_nQVZnw*Q#@amm?SdkDuUv&y$3J_X{qT+AmFT-u=PA2h^p%e
zPBNLx<8o~mK(E`NS4+u>zYuu<=uY(Z`m2M8r}r<aq?jd|^z8$+ygtg(qxD7RJcRDd
z!qTI4Mdl2A1^2Im`#&w1a|N8d*L{oL<{5CN0LNbv=|xRuJbi>*)tiu2q{+l2TB<i_
zalP65!n={eauQl69Y!sg>HNt$@#U)&E{>+4vBO^u8BPMM9-7h}Jpex>^yrR~@_7l?
zPoEE7CV&Dj7aAp9W+?yCW}B<FFPMYrWhW4KCzJx-44l4F<c;@y>-$gdY?P$$MLDLT
zB;r$f|4I!uCa1~vVo(MpiYC#Xi8g5r0#Bt7iq=MJ(}M4#xvd7a($*O#$D8545XAih
z$E~x@F-{%;t;^imS-+&1t>D?ChdfvT9@)XOfPyrcv3o`?cPb(7Gc&9cIr3H!?>6Q;
zI-09ApwZ-iit3;oi7ouyWhu`JIw*Vcm)K-W-UVNo&nXs2el~EfCO<Q2A0~I#ZyFva
z<q+1*Uzv<F^Q5W8(clt5zZ|Nn#Ao(wjm&TQiOOs#{{f_MmGjbL_!9^b?DK7zt%`;_
zdiIWaooaU_y>4(BiIp<V#-JN3NlUBcH^|6H+#+(atM#l3KdU3(^aE0q@p1B(f9udC
zd7W54w-~#?86?*E++yr&NDIgu??R)RjDPbqOn9fZs1;a7%Fk{ZC|U|T3;P$y7ax$*
zZ1(COwgL#?ejvbLabCY6RJ3rz?tZ_{7t@0&e}*BY%==l>GGj_;ro%tz(M=R6X?RG;
zA?q#)XD^r$@DgLaYd?;r3G2|BwE7D9xU$Z5cc!!cn15$oBz3E2B-UL|O7T|Y@~Ly6
zcHlo2dHuglRD|e&U)7P}gJ($Hor5y49@UMV{#d<SgS-Ns$e5#OBKe9j@+qudUO@GJ
zZRuoD`VvZ9VvH%vKJ&e~>mmEj=8VB~KwRlVlxhmZ$f%?@9DDVmF25|YFMI8TC<Bw*
z^&;TI*DJ6;qNaZ2VC@`B=KEWaUv>cZvskYT>~lsGCz-7|O-F*(s9f`qe1dgf3%-yU
zw?z8|kmoxWccoZw_^BFQS{NTI<!Pi9)O7tHPEM_f7Km~N(2tBS0+mDt<1f5iScd$7
zg0bVRR%l-&7(T1_$@${ZdKct>E@pGt;-3^brkWP!(jFlleeE$}p1oeuprOfMTa7XN
z111SFW52`H05zOc_uKaF?7?)_IIfT}N9>VPE`)-t`@25%Xf<LA&n{HO_y<GgW_Ox5
zZdj^8jzC>=UDUL})6^Wy&H<c>W5O#nI+^rqx&TkO^m^{T^X5aOj+J8<7jf60t3W{M
z=B(edB1U7V7vgF$h4^251tLlK#RiS;p<d{0D!}B}LD8JJeQN~lzu9o?)dx#OjiSmh
z#PI*?8)}q|nBiUF=m8>;VyyD8rM~80bwrvVA~5`efDIP^YH8fK4VM(ow|3y*6=wNr
z+qNDad><oO=m)8Fd0!YhZUAR~X_Q^><aFdD*e>1tMJVp_INZHOG9Z*jJ$tA{jeZ90
z^Uj+fkWGnXZ^eYFR|yk~a*KADpOQl)(jn7Y#$+^cgw|GCJmuH9&CJT-%b0@Q-TMj8
zWkTEQeaTXrT(UM=^BNn}=ynh{D!up6<eJ%fb7}4Ws_Is;byzl?h&V}DWcPwMW866V
z|Cd065u-R!RKURYf12)EjdX9LUa&GVuqq7V=-@10>eaG@PydeFbxo~WNu#Ja3j4Q{
zFn0c34n%OARPCJnAWF@|;a2HJbz~-BA$ClUj>}z7lk@no0r^InYqE7n$63go7TN2`
zavl-WX0<j@D(Z|i49bDu%=2WUHaZpAw?dlUBx-HIfcJ?pc=?H4)C<w|PROQ9|8MMg
zUBTL=iDpBh*lG2KOVUr?Q;ZZ_o`j<Q;MTDChC!Lh>mvyDcNn?F$E2dOHPAY?s;+-<
z(PV-J;&bWb*ixC0Ce)-FjD}gZ!mw5_!oq(!Xk*V)7~Kxpf$3V)Xu7^%-fXEx5q}I<
z=-pWtF9iI`Wupr6f*Dv^%n`Shic$8R$)Xth7B#%Lep*><-%9I5sP_HE=-%9=wb8H@
zBF28`UF2^@PvojsLGT?K!W#uOpwUsZ0X7pRFxI>k*)IbQ?fTMFVadjn<W5%&ij(q7
z?#bM>vWQ%1<uF!_8EoI~Bnk86n5<=$+~d_tG>Z0zAcO6Xim~`1)n=^LtBq5E)C)=V
zn8Glcg_T`qd9T=A8;eL|D~IR3$lp~%gD_G)6JQ$Ak85#AD2-G{tbXjK!ch5z%&3dd
z8<cHw$hDv7+G9r?-zR9atJt2h2i9I&YhBYO1+TrT_Bk!p{SQlo8d!VyXr?sR3pMm2
z<pQkTE#vWk?%-lGywtzBYB9PnF78JDzG3~;F|*}A{JEd5s>c#j-J>=j)R#2ze6~Vn
zAmPMieStph2iG=Wr#iyYmY>M2rKNsNr`YEm*mLlJW)GQ~^!hob(0kda_UJ9PN@gJU
z_b2rx{R&UOXyYf4!OZGB{SbpuFK}$2_L#q-)+@cZlx^=`VhWQ(<15zI{tQ`^-s)|T
zx6enjKe))AvR4lA$*CL@ODvG!J3&r%wt6FTdqS=mYym^_XjB06D6KrH?)}s>#_K6u
ze0#oDcgf(AY~R=a`Cj}+e*b*?n%a|!5g3{Q%ZVHio3(7DQD|}KObfSj-1^O)eW^Wl
z8i)u<rcdA4m-)KeI>cK@PiO~<woe6^k;Jd=Mn1?}?)g(rtv+%HI`-$=jP9o<1P0_c
zov*&8$JQy+gmG#4iisP8;%(&QXC0dSVdztacH?$wT`PRwP#Y^uE)*XdvGj7?FMYW4
z8x}WR4D$Hju|`>a7^)tJNtD-wo6UuUnwgbm!#x#o&{mb}pPH?B@;<lHOi|-TG`gTY
zi?gqNKPcDsVsm~wklYNq*yr6Yy*j1Y9p(!E^j){!vdYSFa;<@t9pP?4nw-1QwzUP1
z#@FP6F-_o++zf4u7PNj`l#<2|<%8rf#2gCMpIX`7!B#1|zqIyC)Y*5idpjt~g@z*f
z6W-`;Kdu5y{sbDkMv{%dtL5sU^KDU*hhbZAoRoX?VrWnjnoVoVsxSUlWRDL<pwxz`
zv(6a7=xy}WZ9_PRF0e+d^VUU4wm2mayFTh6L$c6pX+A{mG|FC2l*{ORrG^Y$gr%?f
z`eC;cYLZ@=V4Q>dS_G||j1(gVa6mnb#xVu@H`X^bnK7g0-XDUtDj8mA&|O<A2bQ81
z1}+`f3U9d!N1?`<!N5GH*?*2!hIYe55Uwu&PiRe@H|Mc*ap*5C)P*#{IR+yZ7=R3K
z>s{mewL$NG(GJFc<A>>r(Cb~hyx%5*yU*A$f%pZ!B0cyqGhXn+A)@pWnsTGe-V82b
z0w$onpvJl(l>-WUljSnX6R`BYajgd<^QI%dYc#=>y#)zAh2*OQHNdwx>V;M*Uopz#
z$64~3n|SMv9#-)S4}$K17b9NCn)pI{<F=4khjCh%(!cil@+aQaJ}UC2L=K$(5E?%K
z1_>I&*-cKuJO`S|oW;OfG|!7z`f$@Hnopy7-o~(a@DU?uVuf8BNNB!TWXQds$|Q*B
z<AeL!SZ}>dLw7O>&OxKYV)eB9LF#LDf$q{ES1{;oT3l6kkb1uLC|}0?!33!PTk%E;
z@n>lK8@2-37V6*`XeNzEv|YbKw=(k_V>bzYc<i}g$~f>^;EFHYgn&>SP3*ST<^33~
zCK%o%5NG>j>BHQOck1hXZAVwTejOe4(tz$G2nI@BVPX$ArH$^UUQnuYLds-85?MD+
zZ%%c*8C!>}6pT=`j0Nn7Yk)*ee%Z!?b7gMT{CD$dP}dQ@I6Z)|NJeD#vZE90_g-+z
zNP>y;WcPRhYvcAquAOxgaE%9aj+%S;I}ZOwpRB42gO!Y5D_;K`{MsbMWzvfROxZYW
z@-|Y`Y7p8A9p0AN<O*6na9<}zbIW0F(>5?(V5QnD``yWj=-97^ctXb;XlRxX!Fx?d
z`5NqB5BuNP$kPJQDMa{_SzoQW8iTUTM$8=sgtxXX)E10CM*}HsT#$7ReeyJ>2JFg?
zn)Qus;q;|e=N+P6psWWE!FQ_Gr&8VDt)CtR=~cjZ`5<bzLBJpD(b<jzVU;A}nbk-u
z`#fLU>1O8v7SUavLd>C1q?`obW`7(nNOG=zEmPUA0m(zx^K=?Q*<>tW7EK&{3yHA<
zy5ivz)7#tjAa4h7Ef5f%y`X4PBaLu)o(IWoQ?$&oWw`<h30SbIr^jRxKIKx@fx5CP
z4^4z+0>u+m_#y8W`7bUm3ow)ogMs0Y>Fw(dZr#Ky=?p{Mvm<AH<9?2x+*+i^u!4qd
z1?*Oo<Mi=igk=oolQkBstbDdFzdg(8h~q6{cuz|SMK*7eF}TR**2?}cFU@{bDT7X=
zR2B5xxnMF2(6a<w#j(P)=c`pKYUs9sFA27}f=g`D?mLsCxxD}Y9voVKD{o(TXI<W4
zW$acT_$2}+`nv#2n9UHL<gn@OLs$Ljo@iN>Knx#{rN4#&7FUQh&;U}r`+w8lX_i+F
z?&*(oPY*63b#e8O?3_lL^GC6}#ukzKRt_9_h@A16^&>CqYX)yNv=8-|D5tf!dG7tM
zQn0w(vG;3xH<5aQQ3*IM=^HP2+W0Gn;C-%R>8~MB9W8{ZJ)H`zHNl`lki2TH#3iz<
zB#~@zc~YQnXETv{mT?p;I#m6HH?WDV5q%}zyvo*U3+FTF83TG+C)S%+8KnK4<d$K+
z5v;>CtBvNxd1i?62L8=;;3+0}AOt8cUkJ3!_rTxT$?!&>c*vuK8j2gppw`7VIS-A+
z6`@^+W~LU|mGpq*8{WuN_DP}z5odCO;K_wG-3^V%?J$UX!bV^=Yu=3SooBb<WaZcv
zY7(OvP^`3vzx1mpT@1^CO7V>}T}Z=o&>Pl7SKbLcz;t<P)=M>XnU7+m+_@0ni{@Dl
zA6@{yh3VPZSM$c31maI>;o2&k4~vKTF*Eul#_svRB#rhfQIH;Ua}m!Y#)6?ob9E=_
zF?cr#ygNJBuMvmkB@yLo?*y~y8@6Sg8ejCkK_${G%np>nyEBK9Bx2SC-&6r<XfX3R
z0a2|r*P4-M!QKx+(TZzGP>WtQFfLO7NG8HlRU)IUM8yN&KBnfY>>SXz3TaX4Wq}v-
zvgs!hTOnK2gAtS9V?t6xg&^E_Axn_0X}Hp-QL)o4$!rbfFwKWX!a|a~7J$|Zaa#$-
zJ2mAJtp^IEy%ThpyY@G?cjo~*pF<ogLmacp=G$PravGQp;+X0pq&O-x*aX!I!J`Ah
z_DYBO5aQq|#BA=ttrHNYW_aZ*a6k?Y)C0$n?)4yrz3}5(b3sdj%Cc|^{69evlE8M&
z8_L&ond&hgc0UJyxh+5~8>)PQbQizIMijD)P#6GtOz~=B4d@>x7F7W45VSzi5Mx1=
zu|dEI7c@qfkhqXZdcoX25Vj8zY8Y-)iiPO^HAEc82%S)%Z-FJ*M6bM_x7G0j#XIoX
z1!;&9d?CIUe!WQ*<c6;ag-7-Zd_T;0sf^)K1v<>D5AU4sPj#8QtD`;Da|L@`eo-9r
zCm3S`$dfPAo|_Q0+RA|pGc?1qjkNN)Zd8ZKQb&~Pxwc+8DsQ0RGsAmc!P1MSz6-ct
z8b7EcrlwP%sY>dd5L9j?X2ECy-xhC+rF2#C222-{!rY?3-^L*+)$o##=FriWEwHHo
zc3u<}B&133=VW#xtrMd2XwaxL@CbB1cC(OBMl4Cm4`8xU1aR!C<|l}HO2*8%0)6HM
z*A`h|wla%gq}4Xum!E}Z(M`M+%IMhgR%atk)ZF9I6-Iv}4V}55B?%t=K-;P{>BBb@
z;VW8?mRb_W{P;m23eBPaL44G-ewn7t7a*iu$S>DV0envtZJaqahcl8FIHa>N#?b0U
z#jiR9?*kQ1bj99A+IQ}k6bC0F=K<()i?cUwd1NrvsbH?8%QRPmiR1s0+ubzcj%O}}
zYW~Gxf!4kKvUjf!S6o>r?KsC^Y`bYk7T30gbI?_@=K(+}Fd+?T-Pq>Khf1UadQLRC
zMwC6~4T!2b&LlAXc1p~23v_|kB0_-HGs|-!yIPbz;tj0E-f5QIn<SUPaDxck%j|qf
zQ>@_ZKi>IbF?(fZ>q?mRI=5XH6o`_<Fb;5Cj#>Z$*oTVQl`AAR0HrLQRk6E~HkT%t
zfk1Q}Ue~y`B5N`~00PUMPfhR3zj}jL?~jYKM5iFSq{rQQNVr#cjz9(?zsyt;34doN
z(aCQ~>4(g#lG*A4;CV+mINkE3-7k!K7C)J9fec?CHxXFQ;gG2X&fMg`m!Gv@!r=r$
z^_>zi!|Cw?QLe>LCd0whabrPLj($Yn8}nj&JhK4K8u|04TITDM%+_FVO3t6Mh^Riv
z)SWW33%>)g;$~KFG>sA3%kYVKX|oXLmmdhbY3Q`uu7EeH{#-3s7-$g5=8!$~R_x}B
z$SyMpK5B>eZ{#gbqD}b<`HqABE{<7VHe2f58WAE1nMH!!D@h{-j*@#E(J-#d0FM(?
z0q@KbHpVOc^w04%X}~pP1@QWgiDGQI-!DWua*;x}$7WXDrg7^mF2gS}Fmxfm-fG?|
zS^fM;d-qbvDikWH+3M>cSzRY=)O1Mxz<<qnegyUDr?^~y-Y2w8bI5!R73sBTf)#>R
z#0^@9Q2e}p3Tr9{lSbkKOkU?68J~b2qZUUZz;~)}Jnd3&#`K#)TbkIe0;j2ye|P0F
zI50aO*qwsy8k+Fk1hEYRrC9!>Oo|kUuq%%K4_<TlgVwg{S7=ptb?8IaB}NhuY6NeI
zmcfKU?3Bx4QjE53?Yp0&m3Zc#;4tOsF4H&aeC2Q7YF^inl0S^E-#ggTmCo1=P=D8#
zb|MoKCl^^IDd08YgV0`Do`0N#enboR1YFCE+bH^e?X^911{1elKCCENa1-B_kEOGW
zX(?HI`U<l0keeH)ZW)Ue6gIT<9p`l!b4i)>OJS)&?&nH;c;fLfN)IJ3TQmy(>q@tL
zrEZf4p8z!bN#x_;1QSlhn6c@|t>?QHSJAa3<HV1MRfu&V{0mLFmm3d{J5BFASb_KK
c5J+Y{w))WYAbvUgmM21TbaN=*;&<l%0Q;)a_5c6?

literal 0
HcmV?d00001

diff --git a/public/static/logo/icon.svg b/public/static/logo/icon.svg
new file mode 100644
index 0000000..58d5dae
--- /dev/null
+++ b/public/static/logo/icon.svg
@@ -0,0 +1,3 @@
+<svg xmlns="http://www.w3.org/2000/svg" fill="#0087ff" viewBox="0 0 16 16">
+    <path d="M11.251.068a.5.5 0 0 1 .227.58L9.677 6.5H13a.5.5 0 0 1 .364.843l-8 8.5a.5.5 0 0 1-.842-.49L6.323 9.5H3a.5.5 0 0 1-.364-.843l8-8.5a.5.5 0 0 1 .615-.09z" />
+</svg>
\ No newline at end of file
diff --git a/public/static/utils/sitemap.xml b/public/static/utils/sitemap.xml
new file mode 100644
index 0000000..bae0bf1
--- /dev/null
+++ b/public/static/utils/sitemap.xml
@@ -0,0 +1,62 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<urlset
+      xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd">
+
+<url>
+  <loc>https://www.leicraft.de/</loc>
+  <lastmod>2026-06-22T00:00:00+00:00</lastmod>
+  <priority>1.0</priority>
+</url>
+<url>
+  <loc>https://www.leicraft.de/projects</loc>
+  <lastmod>2026-06-22T00:00:00+00:00</lastmod>
+  <priority>0.9</priority>
+</url>
+<url>
+  <loc>https://www.leicraft.de/projects/advena</loc>
+  <lastmod>2026-06-22T00:00:00+00:00</lastmod>
+  <priority>0.8</priority>
+</url>
+<url>
+  <loc>https://www.leicraft.de/projects/netignite</loc>
+  <lastmod>2026-06-22T00:00:00+00:00</lastmod>
+  <priority>0.8</priority>
+</url>
+<url>
+  <loc>https://www.leicraft.de/projects/leios</loc>
+  <lastmod>2026-06-22T00:00:00+00:00</lastmod>
+  <priority>0.8</priority>
+</url>
+<url>
+  <loc>https://www.leicraft.de/projects/delivr</loc>
+  <lastmod>2026-06-22T00:00:00+00:00</lastmod>
+  <priority>0.8</priority>
+</url>
+<url>
+  <loc>https://www.leicraft.de/projects/nowip</loc>
+  <lastmod>2026-06-22T00:00:00+00:00</lastmod>
+  <priority>0.8</priority>
+</url>
+<url>
+  <loc>https://www.leicraft.de/projects/leicraft-mc-hosting</loc>
+  <lastmod>2026-06-22T00:00:00+00:00</lastmod>
+  <priority>0.8</priority>
+</url>
+<url>
+  <loc>https://www.leicraft.de/projects/schwere-zeit</loc>
+  <lastmod>2026-06-22T00:00:00+00:00</lastmod>
+  <priority>0.8</priority>
+</url>
+<url>
+  <loc>https://www.leicraft.de/projects/mindcode</loc>
+  <lastmod>2026-07-03T00:00:00+00:00</lastmod>
+  <priority>0.8</priority>
+</url>
+<url>
+  <loc>https://www.leicraft.de/contact</loc>
+  <lastmod>2026-07-17T00:00:00+00:00</lastmod>
+  <priority>0.7</priority>
+</url>
+</urlset>
diff --git a/scripts/api-client-generate.ts b/scripts/api-client-generate.ts
new file mode 100644
index 0000000..544c1e2
--- /dev/null
+++ b/scripts/api-client-generate.ts
@@ -0,0 +1,27 @@
+import { existsSync, mkdirSync, rmSync } from "fs";
+import { API } from "../server/lib/api";
+
+if (!existsSync("./data/")) {
+	mkdirSync("./data/");
+}
+
+try {
+	await API.init([], false);
+
+	const res = await API.getApp().request("/docs/v1/openapi");
+	if (!res.ok) {
+		console.error(`Failed to generate OpenAPI spec: HTTP ${res.status}`);
+		process.exit(1);
+	}
+
+	await Bun.write("./data/temp-api-openapi.json", res);
+
+	await Bun.$`bunx openapi-ts`;
+	await Bun.$`bun scripts/patch-api-client.ts`;
+
+	rmSync("./data/temp-api-openapi.json", { force: true });
+} catch (err: any) {
+	console.error("[api-client-generate] Failed to generate OpenAPI spec:", err);
+	rmSync("./data/temp-api-openapi.json", { force: true });
+	process.exit(1);
+}
diff --git a/scripts/compile/compileCMD.ts b/scripts/compile/compileCMD.ts
new file mode 100644
index 0000000..ae52e68
--- /dev/null
+++ b/scripts/compile/compileCMD.ts
@@ -0,0 +1,113 @@
+/**
+ * The compile CLI commands, built on @cleverjs/cli.
+ *
+ *   bun run compile auto 1.2.3            → build for the host platform
+ *   bun run compile linux-x64-baseline 1.2.3 --no-version-tag
+ *   bun run compile all 1.2.3             → build every platform
+ *
+ * `--no-version-tag` omits the `-v<version>` suffix from the outfile (used by CI which tags
+ * images separately). See docs/11-cli-and-infra.md and docs/14-deployment.md.
+ */
+import {
+	CLIBaseCommand,
+	CLICommandArg,
+	type CLICommandArgParser,
+	type CLICommandContext,
+} from "@cleverjs/cli";
+import { Compiler, type PlatformArg, Platforms } from "./compiler";
+
+class CompileUtils {
+	static async getPackageJSONVersion() {
+		try {
+			const packageJSON = (await Bun.file(`${process.cwd()}/package.json`).json()) as {
+				version: string;
+			};
+			return packageJSON.version;
+		} catch (err: any) {
+			console.log(`Error reading package.json: ${err.stack}`);
+			process.exit(1);
+		}
+	}
+
+	static async getTargetVersion(args: Array<string | undefined>): Promise<[string, boolean]> {
+		if (args[0] === "--no-version-tag") {
+			const version = await CompileUtils.getPackageJSONVersion();
+			return [version, false];
+		}
+		const argvVersion = args[0] || process.env.APP_TARGET_VERSION;
+		const version = argvVersion || (await CompileUtils.getPackageJSONVersion());
+
+		if (!version) {
+			console.log("No version specified. Please specify a version.");
+			process.exit(1);
+		}
+
+		const versionInFileName = args[1] !== "--no-version-tag";
+		return [version, versionInFileName];
+	}
+}
+
+const CMD_ARG_SPEC = CLICommandArg.defineCLIArgSpecs({
+	args: [
+		{
+			name: "all",
+			variadic: true,
+			description: "Args",
+			type: "string",
+		},
+	],
+});
+
+export class CompileAllCMD extends CLIBaseCommand<typeof CMD_ARG_SPEC> {
+	constructor() {
+		super({
+			name: "all",
+			description: "Compile for all platforms",
+			args: CMD_ARG_SPEC,
+		});
+	}
+
+	override async run(
+		args: CLICommandArgParser.ParsedArgs<typeof CMD_ARG_SPEC>,
+		_ctx: CLICommandContext,
+	): Promise<boolean> {
+		const builds: Promise<void>[] = [];
+		const versionSettings = await CompileUtils.getTargetVersion(args.args.all);
+
+		for (const platform in Platforms) {
+			builds.push(new Compiler(platform as PlatformArg, ...versionSettings).build());
+		}
+		await Promise.all(builds);
+
+		return true;
+	}
+}
+
+export class CompileToTargetCMD extends CLIBaseCommand<typeof CMD_ARG_SPEC> {
+	readonly usage = "[<platform> | auto | all] [<version>] [--no-version-tag]";
+
+	constructor() {
+		super({
+			name: "auto",
+			description: "Compile for a specified platform",
+			aliases: Object.keys(Platforms),
+			args: CMD_ARG_SPEC,
+		});
+	}
+
+	override async run(
+		args: CLICommandArgParser.ParsedArgs<typeof CMD_ARG_SPEC>,
+		ctx: CLICommandContext,
+	): Promise<boolean> {
+		const platform = (ctx.raw_parent_args.at(-1) || "auto") as PlatformArg;
+
+		if (!Object.keys(Platforms).some((p) => p === platform) && platform !== "auto") {
+			console.log(`Invalid platform: ${platform}`);
+			return false;
+		}
+		const versionSettings = await CompileUtils.getTargetVersion(args.args.all);
+		await new Compiler(platform, ...versionSettings).build();
+
+		return true;
+	}
+}
diff --git a/scripts/compile/compiler.ts b/scripts/compile/compiler.ts
new file mode 100644
index 0000000..d4ac694
--- /dev/null
+++ b/scripts/compile/compiler.ts
@@ -0,0 +1,93 @@
+import { AppConstants } from "../../server/lib/utils/constants";
+
+/**
+ * The compile engine: wraps `bun build --compile --sourcemap --minify --bytecode` and injects
+ * `APP_VERSION` via `--define`. Targets: linux-x64 (modern), linux-x64-baseline, linux-arm64.
+ * The binary name comes from `AppConstants.BINARY_NAME`. See docs/11-cli-and-infra.md.
+ */
+export enum Platforms {
+	"linux-x64" = "bun-linux-x64-modern",
+	"linux-x64-baseline" = "bun-linux-x64-baseline",
+	"linux-arm64" = "bun-linux-arm64",
+
+	// "win-x64" = "bun-windows-x64-modern",
+	// "win-x64-baseline" = "bun-windows-x64-baseline",
+
+	// "macos-x64" = "bun-darwin-x64-modern",
+	// "macos-x64-baseline" = "bun-darwin-x64-baseline",
+	// "macos-arm64" = "bun-darwin-arm64"
+}
+
+export type PlatformArg = keyof typeof Platforms | "auto";
+
+class CompilerCommand {
+	public sourcemap = true;
+	public minify = true;
+	public bytecode = true;
+	public entrypoint = "./scripts/entrypoint.ts";
+	// Set the name in AppConstants.BINARY_NAME (server/lib/utils/constants.ts), e.g. leios-hub.
+	public outfile = `./build/bin/${AppConstants.BINARY_NAME}`;
+	public platform: PlatformArg = "auto";
+	public env: NodeJS.ProcessEnv = {};
+	private additionalArgs: string[] = [];
+
+	constructor(private baseCommand = "bun build --compile") {}
+
+	public addArg(arg: string) {
+		this.additionalArgs.push(arg);
+	}
+
+	public getCommand() {
+		return [
+			this.baseCommand,
+			this.sourcemap ? "--sourcemap" : "",
+			this.minify ? "--minify" : "",
+			this.bytecode ? "--bytecode --format=esm" : "",
+			this.entrypoint,
+			"--outfile",
+			this.outfile,
+			this.platform === "auto" ? "" : `--target=${Platforms[this.platform]}`,
+			...Object.entries(this.env).map(([key, value]) => `--define "process.env.${key}='${value}'"`),
+			...this.additionalArgs,
+		].join(" ");
+	}
+}
+
+export class Compiler {
+	private command = new CompilerCommand();
+
+	constructor(
+		private platform: PlatformArg,
+		private version: string,
+		versionInFileName: boolean,
+	) {
+		if (versionInFileName) {
+			this.command.outfile += `-v${this.version}`;
+		}
+
+		this.command.platform = platform;
+
+		if (platform !== "auto") {
+			if (!Object.keys(Platforms).some((p) => p === platform)) {
+				throw new Error(`Invalid platform: ${platform}`);
+			}
+			this.command.outfile += `-${platform}`;
+		}
+
+		this.command.env.APP_VERSION = this.version;
+
+		this.command.addArg("--asset ./drizzle/migrations");
+	}
+
+	async build() {
+		try {
+			console.log(`Building from sources. Version: ${this.version} Platform: ${this.platform}`);
+
+			const output = await Bun.$`${{ raw: this.command.getCommand() }}`.text();
+
+			console.log(output);
+		} catch (err: any) {
+			console.log(`Compiling Failed:\n`, err);
+		}
+	}
+}
diff --git a/scripts/compile/index.ts b/scripts/compile/index.ts
new file mode 100644
index 0000000..0c4a8df
--- /dev/null
+++ b/scripts/compile/index.ts
@@ -0,0 +1,20 @@
+/**
+ * The `compile` script entrypoint — `bun run ./scripts/compile`.
+ * Wires the compile CLI (built on @cleverjs/cli) and dispatches to CompileToTargetCMD /
+ * CompileAllCMD. See docs/11-cli-and-infra.md.
+ */
+import { CLIApp } from "@cleverjs/cli";
+import { CompileAllCMD, CompileToTargetCMD } from "./compileCMD";
+import { Platforms } from "./compiler";
+
+class CompileCMD extends CLIApp {
+	protected async run_help(): Promise<void> {
+		console.log("Usage: bun compile [<platform> | auto | all] [<version>] [--no-version-tag]");
+		console.log(`Platforms: ${Object.keys(Platforms).join(", ")}`);
+	}
+}
+
+await new CompileCMD()
+	.register(new CompileToTargetCMD())
+	.register(new CompileAllCMD())
+	.handle(process.argv.slice(2), "shell");
diff --git a/scripts/db-utils.ts b/scripts/db-utils.ts
new file mode 100644
index 0000000..4c3d70a
--- /dev/null
+++ b/scripts/db-utils.ts
@@ -0,0 +1,5 @@
+import { existsSync, mkdirSync } from "node:fs";
+
+if (!existsSync("./data/")) {
+	mkdirSync("./data/");
+}
diff --git a/scripts/entrypoint.ts b/scripts/entrypoint.ts
new file mode 100644
index 0000000..84cb11f
--- /dev/null
+++ b/scripts/entrypoint.ts
@@ -0,0 +1,10 @@
+/**
+ * Compiled-binary entrypoint — `bun run scripts/entrypoint.ts` (and the binary's
+ * ENTRYPOINT). Enables DB auto-migration on cold start, then starts the built Nitro server
+ * (`.output/server/index.mjs` — run `bun run build` first). See docs/14-deployment.md.
+ */
+process.env.NETIGNITE_DB_AUTO_MIGRATE = "true";
+
+await import("../.output/server/index.mjs");
+
+export {};
diff --git a/scripts/import-v1.ts b/scripts/import-v1.ts
new file mode 100644
index 0000000..006f841
--- /dev/null
+++ b/scripts/import-v1.ts
@@ -0,0 +1,75 @@
+/**
+ * Imports a NetIgnite v1 database into this server's database.
+ *
+ *   bun scripts/import-v1.ts --from ./data/db.sqlite [--dry-run] [--merge-users]
+ *
+ * `--merge-users` merges v1 users into existing v2 users with the same username; without it only
+ * the v1 `admin` is merged into the server's initial `admin`.
+ *
+ * In the Docker image (bundled by `bun run build` as `.output/import-v1.mjs`):
+ *
+ *   docker exec netignite-server bun /opt/netignite/app/.output/import-v1.mjs --from /opt/netignite/data/db.sqlite
+ *
+ * Uses the same NETIGNITE_* configuration as the server. Safe to run more than once.
+ */
+import { parseArgs } from "node:util";
+import { DB } from "../server/lib/db";
+import { V1Importer } from "../server/lib/migration/v1Import";
+import { ConfigHandler } from "../server/lib/utils/config";
+import { Logger } from "../server/lib/utils/logger";
+
+const { values } = parseArgs({
+	args: Bun.argv.slice(2),
+	options: {
+		from: { type: "string" },
+		"dry-run": { type: "boolean", default: false },
+		"merge-users": { type: "boolean", default: false },
+		help: { type: "boolean", short: "h", default: false },
+	},
+});
+
+if (values.help || !values.from) {
+	console.log("Usage: import-v1 --from <path to v1 db.sqlite> [--dry-run] [--merge-users]");
+	process.exit(values.help ? 0 : 1);
+}
+
+const config = await ConfigHandler.loadConfig();
+Logger.setLogLevel(config.LOG_LEVEL ?? "info");
+
+await DB.init(config.DB_PATH, true, config.CONFIG_BASE_DIR, config.DB_MIGRATION_DIR);
+
+try {
+	const report = await V1Importer.run({
+		sourcePath: values.from,
+		dryRun: values["dry-run"],
+		configBaseDir: config.CONFIG_BASE_DIR,
+		mergeUsers: values["merge-users"],
+	});
+
+	console.log(values["dry-run"] ? "\nDry run — nothing was changed.\n" : "\nImport finished.\n");
+	console.log(`Users imported: ${report.users.imported.length}`);
+	console.log(`Users merged:   ${report.users.merged.join(", ") || "-"}`);
+	for (const skipped of report.users.skipped)
+		console.log(`  skipped user ${skipped.username}: ${skipped.reason}`);
+	console.log(`Agents imported: ${report.agents.imported}`);
+	for (const skipped of report.agents.skipped)
+		console.log(`  skipped agent ${skipped.name}: ${skipped.reason}`);
+	console.log(`Devices imported: ${report.devices.imported}`);
+	for (const skipped of report.devices.skipped)
+		console.log(`  skipped device ${skipped.name}: ${skipped.reason}`);
+	console.log(`Favorites imported: ${report.favorites}`);
+
+	if (!values["dry-run"] && report.agents.imported > 0) {
+		console.log(
+			"\nImported agents have to be set up again: flash ESP32 agents with the v2 firmware from the " +
+				"dashboard, and pair Linux agents with `netignite-agent pair`.",
+		);
+	}
+	if (report.users.imported.length > 0) {
+		console.log(
+			`Imported users got a placeholder email (…@${V1Importer.PLACEHOLDER_EMAIL_DOMAIN}) and are asked to change it after logging in.`,
+		);
+	}
+} finally {
+	await DB.close();
+}
diff --git a/scripts/patch-api-client.ts b/scripts/patch-api-client.ts
new file mode 100644
index 0000000..e1e152c
--- /dev/null
+++ b/scripts/patch-api-client.ts
@@ -0,0 +1,19 @@
+/**
+ * Post-generation patch for `app/api-client` (see docs/05-api-contract.md › patch-api-client.ts).
+ *
+ * `@hey-api/client-nuxt` emits code whose internal generics do not line up with Nuxt 4.5's
+ * `useFetch`/`RequestResult` types, which fails `nuxt typecheck` although the runtime code and the
+ * public SDK signatures are fine. The affected generated files get `// @ts-nocheck`; callers keep
+ * their full types. Idempotent — runs after every `openapi-ts`.
+ */
+import { readFileSync, writeFileSync } from "node:fs";
+
+const FILES = ["app/api-client/sdk.gen.ts", "app/api-client/client/client.gen.ts"];
+const MARKER = "// @ts-nocheck — patched by scripts/patch-api-client.ts\n";
+
+for (const file of FILES) {
+	const source = readFileSync(file, "utf8");
+	if (source.startsWith(MARKER)) continue;
+	writeFileSync(file, MARKER + source);
+	console.log(`[patch-api-client] patched ${file}`);
+}
diff --git a/server/agent-control-service/agent.ts b/server/agent-control-service/agent.ts
deleted file mode 100644
index 784274e..0000000
--- a/server/agent-control-service/agent.ts
+++ /dev/null
@@ -1,137 +0,0 @@
-import { EncodingUtils } from "@/shared/encoding";
-import { AgentCMDRegistry } from "./commands/registry";
-import { AgentCommand } from "./commands/message";
-import { AgentControlService } from ".";
-import { AgentSecrets } from "../utils/auth/agentSecrets";
-
-export type AgentID = number;
-export type AgentsDB = Map<AgentID, ControllableAgent>;
-
-type Socket = {
-    websocket: {
-        readyState?: number | undefined;
-    }
-    send(data: string | ArrayBufferLike | Blob | ArrayBufferView): void;
-    close(): void;
-}
-
-type ControllableOnlineAgent = ControllableAgent & {
-    peerID: string;
-    socket: Socket;
-}
-
-const COMMAND_RESPONSE_TIMEOUT_MS = 5000;
-
-
-export class ControllableAgent implements ControllableAgent.IConfig {
-
-    public peerID: string | null = null;
-    public socket: Socket | null = null;
-
-    /** Commands waiting for a response, by command ID. Several commands can be in flight at once. */
-    private readonly pendingResponses = new Map<number, (payload: any) => void>();
-
-    constructor(
-        readonly id: number,
-        readonly ownerID: number,
-        public secretHash: string,
-    ) { }
-
-    static fromConfig(config: ControllableAgent.IConfig) {
-        return new ControllableAgent(
-            config.id,
-            config.ownerID,
-            config.secretHash
-        );
-    }
-
-    public verifySecret(secret: string) {
-        return AgentSecrets.verify(secret, this.secretHash);
-    }
-
-    public isOnline(): this is ControllableOnlineAgent {
-        return this.socket !== null && this.peerID !== null && this.socket.websocket.readyState === WebSocket.OPEN;
-    }
-
-    async sendCommand<C extends AgentCMDRegistry.Commands>(command: C, payload: AgentCMDRegistry.Payload<C>, withResponse?: true): Promise<AgentCMDRegistry.Response<C> | null>;
-    async sendCommand<C extends AgentCMDRegistry.Commands>(command: C, payload: AgentCMDRegistry.Payload<C>, withResponse: false): Promise<void>;
-    async sendCommand<C extends AgentCMDRegistry.Commands>(command: C, payload: AgentCMDRegistry.Payload<C>, withResponse: boolean): Promise<AgentCMDRegistry.Response<C> | null | void>;
-    async sendCommand<C extends AgentCMDRegistry.Commands>(command: C, payload: AgentCMDRegistry.Payload<C>, withResponse = true): Promise<AgentCMDRegistry.Response<C> | null | void> {
-        if (!this.isOnline()) {
-            return null;
-        }
-
-        const cmd = AgentCommand.create(command as any, payload as any);
-        const responseID = cmd.id;
-
-        if (!withResponse) {
-            this.socket.send(cmd.encode());
-            return;
-        }
-
-        const response = new Promise<AgentCMDRegistry.Response<C> | null>((resolve) => {
-
-            const timeout = setTimeout(() => {
-                this.pendingResponses.delete(responseID);
-                resolve(null);
-            }, COMMAND_RESPONSE_TIMEOUT_MS);
-
-            this.pendingResponses.set(responseID, (responsePayload) => {
-                clearTimeout(timeout);
-                this.pendingResponses.delete(responseID);
-                resolve(responsePayload);
-            });
-
-        });
-
-        this.socket.send(cmd.encode());
-
-        return response;
-    }
-
-    /** Resolves the pending command that a message from the agent answers. */
-    public handleMessage(data: string) {
-        const decoded = AgentCommand.fromDecoded(data);
-        if (!decoded) return;
-
-        this.pendingResponses.get(decoded.id)?.(decoded.payload);
-    }
-
-    async sendHeartbeat() {
-        if (this.isOnline()) {
-            const cmd = AgentCommand.create("HEARTBEAT", {});
-            this.socket.send(cmd.encode());
-        }
-    }
-
-    /** Forgets the connection and fails all commands still waiting for a response. */
-    public detachConnection() {
-        this.peerID = null;
-        this.socket = null;
-
-        for (const resolve of this.pendingResponses.values()) {
-            resolve(null);
-        }
-    }
-
-    async closeConnection() {
-        if (this.isOnline()) {
-            const clients = await AgentControlService.getClients();
-            clients.delete(this.peerID);
-            const socket = this.socket;
-
-            this.detachConnection();
-            socket.close();
-        }
-    }
-
-}
-
-export namespace ControllableAgent {
-    export interface IConfig {
-        id: AgentID;
-        ownerID: number;
-        secretHash: string;
-    }
-}
-
diff --git a/server/agent-control-service/commands/message.ts b/server/agent-control-service/commands/message.ts
deleted file mode 100644
index 74b997b..0000000
--- a/server/agent-control-service/commands/message.ts
+++ /dev/null
@@ -1,137 +0,0 @@
-import { AgentCMDRegistry } from "./registry";
-import { Utils } from "../../utils";
-
-export class AgentCommandUtils {
-    static matchesConfig(config: AgentCMDRegistry.PayloadConfig, data: any): boolean {
-        if (typeof data !== "object" || data === null) {
-            return false;
-        }
-
-        for (const key in config) {
-            const type = config[key];
-            const value = data[key];
-
-            if (type === "strArray") {
-                if (!Array.isArray(value) || !value.every(v => typeof v === "string")) {
-                    return false;
-                }
-            } else if (type === "numArray") {
-                if (!Array.isArray(value) || !value.every(v => typeof v === "number")) {
-                    return false;
-                }
-            } else if (typeof value !== type) {
-                return false;
-            }
-        }
-
-        return true;
-    }
-}
-
-
-abstract class AgentBaseMessage<
-    C extends AgentCMDRegistry.Commands,
-    P extends Record<string, any>
-> {
-    constructor(
-        readonly cmd: C,
-        readonly id: number,
-        readonly payload: P,
-    ) { }
-
-    abstract isValid(): boolean;
-
-    public encode() {
-        return `${this.cmd}:${this.id}:${JSON.stringify(this.payload)}`;
-    }
-}
-
-export class AgentCommand<
-    C extends AgentCMDRegistry.Commands,
-    P extends AgentCMDRegistry.Payload<C>
-> extends AgentBaseMessage<C, P> {
-
-    constructor(cmd: C, id: number, payload: P,) {
-        super(cmd, id, payload);
-    }
-
-    static create<
-        C extends AgentCMDRegistry.Commands,
-        P extends AgentCMDRegistry.Payload<C>
-    >(cmd: C, payload: P): AgentCommand<C, P> {
-        return new AgentCommand(cmd, Utils.getRandomU32(), payload);
-    }
-
-    public isValid() {
-        const config = AgentCMDRegistry[this.cmd].cmd as AgentCMDRegistry.PayloadConfig;
-        return AgentCommandUtils.matchesConfig(config, this.payload);
-    }
-
-    public static fromDecoded<
-        C extends AgentCMDRegistry.Commands = any,
-        P extends AgentCMDRegistry.Payload<C> = any
-    >(data: string): AgentCommand<C, P>  | null {
-        try {
-
-            const [cmd, raw_id, payloadStr] = Utils.splitNTimes(data, ':', 2);
-
-            if (!cmd || !raw_id || !payloadStr) {
-                return null;
-            }
-            const id = parseInt(raw_id);
-            const payload = JSON.parse(payloadStr) as P;
-
-            if (typeof id !== "number" || isNaN(id) || id < 0 || id > 0xFFFFFFFF || typeof payload !== "object") {
-                return null;
-            }
-
-            return new AgentCommand(cmd as C, id, payload as P);
-            
-        } catch {
-            return null;
-        }
-    }
-
-
-}
-
-export class AgentResponse<
-    C extends AgentCMDRegistry.Commands,
-    P extends AgentCMDRegistry.Response<C>
-> extends AgentBaseMessage<C, P> {
-
-    constructor(cmd: C, id: number, payload: P,) {
-        super(cmd, id, payload);
-    }
-
-    public isValid() {
-        const config = AgentCMDRegistry[this.cmd].res as AgentCMDRegistry.PayloadConfig;
-        return AgentCommandUtils.matchesConfig(config, this.payload);
-    }
-
-    public static fromDecoded<
-        C extends AgentCMDRegistry.Commands = any,
-        P extends AgentCMDRegistry.Response<C> = any
-    >(hex: Buffer): AgentResponse<C, P>  | null {
-        try {
-            const dataStr = hex.toString('utf-8');
-            const [cmd, raw_id, payloadStr] = Utils.splitNTimes(dataStr, ':', 2);
-
-            if (!cmd || !raw_id || !payloadStr) {
-                return null;
-            }
-            const id = parseInt(raw_id);
-            const payload = JSON.parse(payloadStr) as P;
-
-            if (typeof id !== "number" || isNaN(id) || id < 0 || id > 0xFFFFFFFF || typeof payload !== "object") {
-                return null;
-            }
-
-            return new AgentResponse(cmd as C, id, payload as P);
-            
-        } catch {
-            return null;
-        }
-    }
-
-}
diff --git a/server/agent-control-service/commands/registry.ts b/server/agent-control-service/commands/registry.ts
deleted file mode 100644
index f1c9fb5..0000000
--- a/server/agent-control-service/commands/registry.ts
+++ /dev/null
@@ -1,71 +0,0 @@
-type TypesMapping = {
-    string: string;
-    number: number;
-    boolean: boolean;
-    object: Record<string, any>;
-    strArray: string[];
-    numArray: number[];
-};
-
-type ResolveType<T> = T extends keyof TypesMapping ? TypesMapping[T] : never;
-
-type ResolveSchema<T> = {
-    readonly [K in keyof T]: ResolveType<T[K]>;
-};
-
-interface CommandConfig {
-    cmd: AgentCMDRegistry.PayloadConfig;
-    res: AgentCMDRegistry.PayloadConfig;
-};
-
-function createRegistry<const T extends Record<string, CommandConfig>>(config: T) {
-    return config as unknown as {
-        readonly [K in keyof T]: {
-            readonly cmd: ResolveSchema<T[K]["cmd"]>;
-            readonly res: ResolveSchema<T[K]["res"]>;
-        }
-    };
-}
-
-
-export namespace AgentCMDRegistry {
-
-    export type PayloadConfig = Record<string, keyof TypesMapping>;
-
-    export type Commands = keyof typeof AgentCMDRegistry;
-    export type Payload<C extends Commands, Config = (typeof AgentCMDRegistry)[C]["cmd"]> = {
-        [K in keyof Config]: Config[K];
-    }
-    export type Response<C extends Commands, Config = (typeof AgentCMDRegistry)[C]["res"]> = {
-        [K in keyof Config]: Config[K];
-    }
-
-}
-
-
-export const AgentCMDRegistry = createRegistry({
-    "WAKEUP": {
-        cmd: {
-            macAddress: "string",
-            port: "number",
-        },
-        res: {
-            status: "string", // "OK" or "ERROR"
-            message: "string",
-        }
-    },
-    "HEARTBEAT": {
-        cmd: {},
-        res: {}
-    },
-    "GET_STATUS": {
-        cmd: {
-            address: "string",
-        },
-        res: {
-            status: "string", // "OK" or "ERROR"
-            message: "string",
-            online: "string", // "online" or "offline" or "unknown"
-        }
-    }
-});
diff --git a/server/agent-control-service/index.ts b/server/agent-control-service/index.ts
deleted file mode 100644
index 4fbc25c..0000000
--- a/server/agent-control-service/index.ts
+++ /dev/null
@@ -1,64 +0,0 @@
-import { ControllableAgent, AgentsDB } from "./agent"
-import { ControlServiceServer } from "./server";
-
-export class AgentControlService {
-
-    private static initialized = false;
-
-    static readonly agents: AgentsDB = new Map<number, ControllableAgent>();
-
-    private static server: ControlServiceServer;
-    
-    static async init(config: AgentControlService.IConfig) {
-        if (this.initialized) return;
-        this.initialized = true;
-
-        for (const agentConfig of config.agents) {
-            const agent = ControllableAgent.fromConfig(agentConfig);
-            this.agents.set(agent.id, agent);
-        }
-
-        this.server = new ControlServiceServer(this.agents);
-    }
-
-    static isInitialized() {
-        return this.initialized;
-    }
-
-    static async getSocketHandler() {
-        if (!this.initialized) {
-            await new Promise((resolve) => {
-                setTimeout(resolve, 1000);
-            });
-            if (this.initialized) {
-                return this.server.getWebSocketHandler();
-            }
-            throw new Error("Control service not initialized");
-        }
-
-        return this.server.getWebSocketHandler();
-    }
-
-    static async getClients() {
-        if (!this.initialized) {
-            await new Promise((resolve) => {
-                setTimeout(resolve, 1000);
-            });
-            if (this.initialized) {
-                return this.server.clients;
-            }
-            throw new Error("Control service not initialized");
-        }
-
-        return this.server.clients;
-    }
-
-}
-
-export namespace AgentControlService {
-
-    export interface IConfig {
-        agents: ControllableAgent.IConfig[];
-    }
-
-}
\ No newline at end of file
diff --git a/server/agent-control-service/server.ts b/server/agent-control-service/server.ts
deleted file mode 100644
index 8cd96cd..0000000
--- a/server/agent-control-service/server.ts
+++ /dev/null
@@ -1,124 +0,0 @@
-import { Logger } from "../utils/logger";
-import type { ControllableAgent, AgentsDB } from "./agent";
-import type { Hooks as WSHooks } from "crossws"
-import { CronJob } from "cron";
-
-class ControlServiceServerUtils {
-
-    private static getBasicAuthCredentials(req: Request) {
-        try {
-            const authHeader = req.headers.get("authorization");
-            if (!authHeader) return null;
-
-            const [type, credentials] = authHeader.split(" ");
-            if (type !== "Basic" || !credentials) return null;
-
-            const decoded = Buffer.from(credentials, "base64").toString("utf8");
-
-            // Split at the first colon only: secrets from older versions may contain colons.
-            const separator = decoded.indexOf(":");
-            if (separator === -1) return null;
-            const raw_id = decoded.slice(0, separator);
-            const secret = decoded.slice(separator + 1);
-
-            if (!raw_id || !secret) return null;
-            const id = parseInt(raw_id, 10);
-            if (Number.isNaN(id) || !Number.isSafeInteger(id)) return null;
-
-            return { id, secret };
-        } catch {
-            return null;
-        }
-    }
-
-    static getAgent(req: Request, agents: AgentsDB) {
-
-        const credentials = this.getBasicAuthCredentials(req);
-        if (!credentials) return null;
-
-        const agent = agents.get(credentials.id);
-        if (!agent) return null;
-
-        if (!agent.verifySecret(credentials.secret)) return null;
-
-        return agent;
-
-    }
-
-}
-
-function ControlServiceServerHandlerFactory(clients: Map<string, ControllableAgent>, agents: AgentsDB): Partial<WSHooks> {
-    return {
-        async open(peer) {
-
-            const agent = ControlServiceServerUtils.getAgent(peer.request as Request, agents);
-            if (!agent) {
-                peer.close(1008, "Missing or invalid credentials");
-                return;
-            }
-
-            if (agent.isOnline()) {
-                Logger.log(`Agent '${agent.id}' is already connected. Closing previous connection.`);
-                await agent.closeConnection();
-            }
-
-            agent.peerID = peer.id;
-            agent.socket = peer;
-            clients.set(peer.id, agent);
-            Logger.log(`Agent '${agent.id}' connected`);
-        },
-
-        message(peer, message) {
-            clients.get(peer.id)?.handleMessage(message.text());
-        },
-
-        error(peer, error) {
-            const agent = clients.get(peer.id);
-            Logger.error(`WebSocket error: ${error} on agent '${agent ? agent.id : "unknown"}'`);
-        },
-
-        close(peer, { code, reason }) {
-            const agent = clients.get(peer.id);
-            if (agent) {
-                clients.delete(peer.id);
-                // A late close of a replaced connection must not detach the agent's new one.
-                if (agent.peerID === peer.id) {
-                    agent.detachConnection();
-                }
-                Logger.log(`Agent '${agent.id}' disconnected with code ${code} and reason: ${reason}`);
-            }
-        }
-    }
-}
-
-
-export class ControlServiceServer {
-
-    private readonly handler: Partial<WSHooks>;
-
-    readonly clients: Map<string, ControllableAgent> = new Map();
-
-    private readonly heartbeatJob: CronJob = new CronJob("* * * * *", async () => {
-
-        const promises: Promise<void>[] = [];
-
-        for (const agent of this.clients.values()) {
-            promises.push(agent.sendHeartbeat());
-        }
-
-        await Promise.all(promises);
-    });
-
-    constructor(
-        private readonly agents: AgentsDB
-    ) {
-        this.handler = ControlServiceServerHandlerFactory(this.clients, this.agents);
-
-        // Heartbeat job to send heartbeat to all connected agents every 60 seconds
-        this.heartbeatJob.start();
-    }
-
-    public getWebSocketHandler() {
-        return this.handler;
-    }
-}
\ No newline at end of file
diff --git a/server/api/account/[id]/index.put.ts b/server/api/account/[id]/index.put.ts
deleted file mode 100644
index da8e90e..0000000
--- a/server/api/account/[id]/index.put.ts
+++ /dev/null
@@ -1,73 +0,0 @@
-import { DBStorage } from "@/server/db";
-import type { APIUserInfo } from "~/server/utils/auth/handler";
-
-type UpdatePayload = Omit<DBStorage.User.ModelWithoutID, "role" | "password_hash"> & {
-    password?: string;
-    role?: DBStorage.User.Model.Role | undefined;
-};
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as APIUserInfo;
-    if (!userinfo) return;
-
-    let userID = userinfo.userID;
-    let userRole = undefined;
-
-    const payload = await readBody(event) as UpdatePayload | undefined;
-    if (
-        !payload ||
-        typeof payload.username !== "string" ||
-        // @TODO Better validation for favorites so only num arrays are allowed
-        !Array.isArray(payload.favorites)
-    ) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid payload" };
-    }
-
-
-    if (userinfo.adminMode) {
-        userID = parseInt(getRouterParam(event, "id") as string, 10);
-        if (Number.isNaN(userID) && !Number.isSafeInteger(userID)) {
-            setResponseStatus(event, 400);
-            return { status: "ERROR", message: "Invalid user ID" };
-        }
-    }
-
-    if (userinfo.adminMode === "superadmin" && userinfo.userID !== userID) {
-        if (!["user", "admin"].includes(payload.role as string)) {
-            setResponseStatus(event, 400);
-            return { status: "ERROR", message: "Invalid role" };
-        }
-        userRole = payload.role;
-    }
-
-    // Check if username is already taken
-    if (await DBStorage.Users.isUsernameTaken(payload.username, userID)) {
-        setResponseStatus(event, 409);
-        return { status: "ERROR", message: "Username is already taken" };
-    }
-
-    const updatePayload = {
-        id: userID,
-        role: userRole,
-        username: payload.username,
-        favorites: payload.favorites,
-        password: payload.password
-    }
-
-    const result = await DBStorage.Users.update(updatePayload);
-    if (!result) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to update User Account" };
-    }
-
-    const session = SessionHandler.getActiveSessionAndRefresh(getCookie(event, 'session') || "");
-    if (session) {
-        session.username = payload.username;
-        session.favorites = payload.favorites;
-    }
-
-    setResponseStatus(event, 201);
-    return { status: "OK", message: "User Account updated successfully" };
-});
\ No newline at end of file
diff --git a/server/api/admin/users/index.post.ts b/server/api/admin/users/index.post.ts
deleted file mode 100644
index 9d797ed..0000000
--- a/server/api/admin/users/index.post.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-// import { SessionHandler } from "../../utils/sessions";
-// import { DBStorage } from "../../utils/db";
-
-// type CreatePayload = DBStorage.Agent.ModelWithoutID;
-
-// export default defineEventHandler(async (event) => {
-
-//     const session = SessionHandler.isAuthenticatedSession(event);
-//     if (!session) return;
-
-//     const payload = await readBody(event) as CreatePayload | undefined;
-//     if (
-//         !payload ||
-//         typeof payload.name !== "string" ||
-//         typeof payload.secret !== "string" ||
-//         typeof payload.ownerID !== "number"
-//     ) {
-//         setResponseStatus(event, 400);
-//         return { status: "ERROR", message: "Invalid payload" };
-//     }
-
-//     const ownerIDExists = await DBStorage.Users.getByID(payload.ownerID);
-//     if (!ownerIDExists) {
-//         setResponseStatus(event, 400);
-//         return { status: "ERROR", message: "No matching user found for the given OwnerID" };
-//     }
-
-
-//     const result = await DBStorage.Agents.insert(payload);
-//     if (!result) {
-//         setResponseStatus(event, 500);
-//         return { status: "ERROR", message: "Failed to create Agent" };
-//     }
-
-//     setResponseStatus(event, 201);
-//     return { status: "OK", message: "Agent created successfully" };
-// });
\ No newline at end of file
diff --git a/server/api/agent-control-service.ts b/server/api/agent-control-service.ts
deleted file mode 100644
index e0c6315..0000000
--- a/server/api/agent-control-service.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import { AgentControlService } from "../agent-control-service";
-
-export default defineWebSocketHandler(
-    AgentControlService.getSocketHandler() as any
-)
\ No newline at end of file
diff --git a/server/api/agents/[id]/index.delete.ts b/server/api/agents/[id]/index.delete.ts
deleted file mode 100644
index 1788f08..0000000
--- a/server/api/agents/[id]/index.delete.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-import { UserAuthInfo } from "@/server/utils/auth/handler";
-import { DBStorage } from "@/server/db";
-import { AgentControlService } from "~/server/agent-control-service";
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const agentID = parseInt(getRouterParam(event, "id") as string, 10);
-    if (Number.isNaN(agentID) && !Number.isSafeInteger(agentID)) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid Agent ID" };
-    }
-
-    const agent = await DBStorage.Agents.getByIDAndOwnerID(agentID, userinfo.userID);
-    if (!agent || agent.ownerID !== userinfo.userID) {
-        setResponseStatus(event, 404);
-        return { status: "ERROR", message: "Agent not found or inaccessible by user" };
-    }
-
-    const result = await DBStorage.Agents.deleteByID(agentID);
-
-    if (!result) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to delete Agent" };
-    }
-
-    // Disconnect the deleted agent; otherwise its socket stays open and keeps receiving heartbeats.
-    await AgentControlService.agents.get(agentID)?.closeConnection();
-    AgentControlService.agents.delete(agentID);
-
-    setResponseStatus(event, 200);
-    return { status: "OK", message: "Agent deleted successfully" };
-});
diff --git a/server/api/agents/[id]/index.get.ts b/server/api/agents/[id]/index.get.ts
deleted file mode 100644
index f243f9d..0000000
--- a/server/api/agents/[id]/index.get.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-import { UserAuthInfo } from "@/server/utils/auth/handler";
-import { DBStorage } from "@/server/db";
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const agentID = parseInt(getRouterParam(event, "id") as string, 10);
-    if (Number.isNaN(agentID) && !Number.isSafeInteger(agentID)) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid Agent ID", data: null  };
-    }
-
-    const agent = await DBStorage.Agents.getByIDAndOwnerID(agentID, userinfo.userID);
-    if (!agent || agent.ownerID !== userinfo.userID) {
-        setResponseStatus(event, 404);
-        return { status: "ERROR", message: "Agent not found or inaccessible by user", data: null };
-    }
-
-    setResponseStatus(event, 200);
-    return { status: "OK", message: "Agent retrieved successfully", data: DBStorage.Agent.toPublic(agent) };
-});
diff --git a/server/api/agents/[id]/index.put.ts b/server/api/agents/[id]/index.put.ts
deleted file mode 100644
index 0f81ef3..0000000
--- a/server/api/agents/[id]/index.put.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-import { DBStorage } from "../../../db";
-import { Validation } from "~/server/utils/validation";
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const agentID = parseInt(getRouterParam(event, "id") as string, 10);
-    if (Number.isNaN(agentID) || !Number.isSafeInteger(agentID)) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid Agent ID" };
-    }
-
-    // The secret can't be set here; use POST /api/agents/:id/regenerate-secret.
-    const input = Validation.parseAgentInput(await readBody(event));
-    if (!input) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid payload" };
-    }
-
-    const result = await DBStorage.Agents.updateDetailsByOwner({
-        ...input,
-        id: agentID,
-        ownerID: userinfo.userID,
-    });
-
-    if (result === null) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to update Agent" };
-    }
-
-    if (!result) {
-        setResponseStatus(event, 404);
-        return { status: "ERROR", message: "Agent not found or inaccessible by user" };
-    }
-
-    setResponseStatus(event, 201);
-    return { status: "OK", message: "Agent updated successfully" };
-});
diff --git a/server/api/agents/[id]/regenerate-secret.post.ts b/server/api/agents/[id]/regenerate-secret.post.ts
deleted file mode 100644
index 7db3591..0000000
--- a/server/api/agents/[id]/regenerate-secret.post.ts
+++ /dev/null
@@ -1,41 +0,0 @@
-import { UserAuthInfo } from "@/server/utils/auth/handler";
-import { DBStorage } from "@/server/db";
-import { AgentControlService } from "~/server/agent-control-service";
-import { AgentSecrets } from "~/server/utils/auth/agentSecrets";
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const agentID = parseInt(getRouterParam(event, "id") as string, 10);
-    if (Number.isNaN(agentID) || !Number.isSafeInteger(agentID)) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid Agent ID", data: null };
-    }
-
-    const secret = AgentSecrets.generate();
-    const secretHash = AgentSecrets.hash(secret);
-
-    const result = await DBStorage.Agents.updateSecretHashByOwner(agentID, userinfo.userID, secretHash);
-
-    if (result === null) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to regenerate secret", data: null };
-    }
-
-    if (!result) {
-        setResponseStatus(event, 404);
-        return { status: "ERROR", message: "Agent not found or inaccessible by user", data: null };
-    }
-
-    // The old secret is invalid now: disconnect the agent until it reconnects with the new one.
-    const controllableAgent = AgentControlService.agents.get(agentID);
-    if (controllableAgent) {
-        controllableAgent.secretHash = secretHash;
-        await controllableAgent.closeConnection();
-    }
-
-    setResponseStatus(event, 200);
-    return { status: "OK", message: "Secret regenerated successfully", data: { id: agentID, secret } };
-});
diff --git a/server/api/agents/index.get.ts b/server/api/agents/index.get.ts
deleted file mode 100644
index ef00486..0000000
--- a/server/api/agents/index.get.ts
+++ /dev/null
@@ -1,18 +0,0 @@
-import { DBStorage } from '@/server/db';
-import type { UserAuthInfo } from '@/server/utils/auth/handler';
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const result = await DBStorage.Agents.getAllByOwnerID(userinfo.userID);
-    setResponseStatus(event, 200);
-
-    if (!result) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to retrieve agents.", data: null };
-    }
-
-    return { status: "OK", message: "Agents retrieved successfully.", data: result.map(DBStorage.Agent.toPublic) };
-});
diff --git a/server/api/agents/index.post.ts b/server/api/agents/index.post.ts
deleted file mode 100644
index 36ff382..0000000
--- a/server/api/agents/index.post.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-import { AgentControlService } from "~/server/agent-control-service";
-import { DBStorage } from "../../db";
-import { ControllableAgent } from "~/server/agent-control-service/agent";
-import { AgentSecrets } from "~/server/utils/auth/agentSecrets";
-import { Validation } from "~/server/utils/validation";
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const input = Validation.parseAgentInput(await readBody(event));
-    if (!input) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid payload", data: null };
-    }
-
-    // The secret is generated here and returned only in this response; only its hash is stored.
-    const secret = AgentSecrets.generate();
-    const agent: DBStorage.Agent.ModelWithoutID = {
-        ...input,
-        secretHash: AgentSecrets.hash(secret),
-        ownerID: userinfo.userID,
-    };
-
-    const id = await DBStorage.Agents.insert(agent);
-    if (!id) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to create Agent", data: null };
-    }
-
-    AgentControlService.agents.set(id, ControllableAgent.fromConfig({ ...agent, id }));
-
-    setResponseStatus(event, 201);
-    return { status: "OK", message: "Agent created successfully", data: { id, secret } };
-});
diff --git a/server/api/agents/status.get.ts b/server/api/agents/status.get.ts
deleted file mode 100644
index 7ecb7cd..0000000
--- a/server/api/agents/status.get.ts
+++ /dev/null
@@ -1,39 +0,0 @@
-import type { UserAuthInfo } from '@/server/utils/auth/handler';
-import { AgentControlService } from '~/server/agent-control-service';
-import { DBStorage } from '~/server/db';
-import type { ModelUtils } from '~/utils/models/utils';
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const idList = getQuery(event).ids?.toString().split(',').map(id => parseInt(id, 10)).filter(id => !isNaN(id));
-
-    const result: {
-        [id: string]: ModelUtils.OnlineStatus.Type
-    } = {};
-
-    const ownedAgents = await DBStorage.Agents.getAllByOwnerID(userinfo.userID);
-    if (!ownedAgents) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to retrieve agents statuses.", data: null };
-    }
-
-    for (const agent of ownedAgents) {
-
-        if (idList && !idList.includes(agent.id)) {
-            continue;
-        }
-        const agentStatus = AgentControlService.agents.get(agent.id);
-
-        if (!agentStatus) {
-            result[agent.id.toString()] = "unknown";
-            continue;
-        }
-        
-        result[agent.id.toString()] = agentStatus.isOnline() ? "online" : "offline";
-    }
-    
-    return { status: "OK", data: result};
-});
\ No newline at end of file
diff --git a/server/api/auth/login.post.ts b/server/api/auth/login.post.ts
deleted file mode 100644
index 9a65d8a..0000000
--- a/server/api/auth/login.post.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-import { SessionHandler } from '~/server/utils/auth/sessions';
-import { DBStorage } from '~/server/db';
-import bcrypt from 'bcrypt';
-
-function noMatchingCredentials(event: any) {
-    setResponseStatus(event, 401);
-    return { status: "ERROR", message: "No matching credentials found" };
-}
-
-export default defineEventHandler(async (event) => {
-
-    try {
-
-        const oldSessionID = getCookie(event, 'session');
-
-        if (oldSessionID && SessionHandler.getActiveSessionAndRefresh(oldSessionID)) {
-            deleteCookie(event, 'session');
-            setResponseStatus(event, 200);
-            return { status: "OK", message: "Already logged in" };
-        }
-
-        const body = await readBody(event);
-        const { username, password } = body;
-
-        if (typeof username !== 'string' || typeof password !== 'string') {
-            setResponseStatus(event, 400);
-            return { status: "ERROR", message: "Invalid payload" };
-        }
-
-        const user = await DBStorage.Users.getByUsername(username);
-        if (!user) return noMatchingCredentials(event);
-
-        const isValidPassword = await bcrypt.compare(password, user.password_hash);
-        if (!isValidPassword) return noMatchingCredentials(event);
-
-        const sessionID = SessionHandler.createSession(user);
-
-        setCookie(event, 'session', sessionID, {
-            path: '/',
-            maxAge: 60 * 60 * 24 * 30, // 30 days
-            httpOnly: true, // not readable from page scripts
-            sameSite: 'strict',
-            secure: process.env.NODE_ENV === 'production',
-        });
-
-        return { status: "OK", message: "Login successful" };
-
-    } catch (error) {
-        console.error("Error during login:", error);
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Internal server error" };
-    }
-});
diff --git a/server/api/auth/logout.post.ts b/server/api/auth/logout.post.ts
deleted file mode 100644
index bb42898..0000000
--- a/server/api/auth/logout.post.ts
+++ /dev/null
@@ -1,15 +0,0 @@
-import { SessionHandler } from '~/server/utils/auth/sessions';
-
-
-export default defineEventHandler(async (event) => {
-
-    const sessionID = getCookie(event, 'session');
-    if (sessionID) {
-        SessionHandler.destroySession(sessionID);
-        deleteCookie(event, 'session');
-    }
-
-    setResponseStatus(event, 200);
-    return { status: 'OK', message: 'Logged out successfully' };
-
-});
diff --git a/server/api/auth/session.get.ts b/server/api/auth/session.get.ts
deleted file mode 100644
index f6f158d..0000000
--- a/server/api/auth/session.get.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-import { getCookie } from "h3";
-
-export default defineEventHandler(async (event) => {
-
-    const sessionID = getCookie(event, 'session');
-    if (!sessionID) {
-        setResponseStatus(event, 401);
-        return { status: "ERROR", message: "No session found", data: null  };
-    }
-
-    const session = SessionHandler.getActiveSessionAndRefresh(sessionID);
-    if (!session) {
-        setResponseStatus(event, 401);
-        return { status: "ERROR", message: "Invalid session", data: null };
-    }
-
-    return { status: "OK", message: "Session valid", data: session };
-
-});
diff --git a/server/api/devices/[id]/index.delete.ts b/server/api/devices/[id]/index.delete.ts
deleted file mode 100644
index a6b1d1f..0000000
--- a/server/api/devices/[id]/index.delete.ts
+++ /dev/null
@@ -1,30 +0,0 @@
-import { DBStorage } from '@/server/db';
-import { UserAuthInfo } from '@/server/utils/auth/handler';
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const deviceID = parseInt(getRouterParam(event, "id") as string, 10);
-    if (Number.isNaN(deviceID) && !Number.isSafeInteger(deviceID)) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid Device ID" };
-    }
-
-    const device = await DBStorage.Devices.getByID(deviceID);
-    if (!device || device.ownerID !== userinfo.userID) {
-        setResponseStatus(event, 404);
-        return { status: "ERROR", message: "Device not found or inaccessible by user" };
-    }
-
-    const result = await DBStorage.Devices.deleteByID(deviceID);
-
-    if (!result) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to delete Device" };
-    }
-
-    setResponseStatus(event, 200);
-    return { status: "OK", message: "Device deleted successfully" };
-});
diff --git a/server/api/devices/[id]/index.get.ts b/server/api/devices/[id]/index.get.ts
deleted file mode 100644
index 6678cc8..0000000
--- a/server/api/devices/[id]/index.get.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-import { UserAuthInfo } from "@/server/utils/auth/handler";
-import { DBStorage } from "@/server/db";
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const deviceID = parseInt(getRouterParam(event, "id") as string, 10);
-    if (Number.isNaN(deviceID) && !Number.isSafeInteger(deviceID)) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid Device ID", data: null };
-    }
-
-    const device = await DBStorage.Devices.getByIDAndOwnerID(deviceID, userinfo.userID);
-    if (!device || device.ownerID !== userinfo.userID) {
-        setResponseStatus(event, 404);
-        return { status: "ERROR", message: "Device not found or inaccessible by user", data: null };
-    }
-
-    setResponseStatus(event, 200);
-    return { status: "OK", message: "Device retrieved successfully", data: device };
-});
diff --git a/server/api/devices/[id]/index.put.ts b/server/api/devices/[id]/index.put.ts
deleted file mode 100644
index d96631d..0000000
--- a/server/api/devices/[id]/index.put.ts
+++ /dev/null
@@ -1,42 +0,0 @@
-import { DBStorage } from "../../../db";
-import { Validation } from "~/server/utils/validation";
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const deviceID = parseInt(getRouterParam(event, "id") as string, 10);
-    if (Number.isNaN(deviceID) || !Number.isSafeInteger(deviceID)) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid Device ID" };
-    }
-
-    const input = Validation.parseDeviceInput(await readBody(event));
-    if (!input) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid payload" };
-    }
-
-    const device = await DBStorage.Devices.getByIDAndOwnerID(deviceID, userinfo.userID);
-    if (!device) {
-        setResponseStatus(event, 404);
-        return { status: "ERROR", message: "Device not found or inaccessible by user" };
-    }
-
-    // Devices can only be bound to the user's own agents.
-    const agent = await DBStorage.Agents.getByIDAndOwnerID(input.agentID, userinfo.userID);
-    if (!agent) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "No matching agent found for the given AgentID", data: null };
-    }
-
-    const result = await DBStorage.Devices.updateByOwner({ ...input, id: deviceID, ownerID: userinfo.userID });
-    if (!result) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to update Device" };
-    }
-
-    setResponseStatus(event, 201);
-    return { status: "OK", message: "Device updated successfully" };
-});
diff --git a/server/api/devices/[id]/wakeup.post.ts b/server/api/devices/[id]/wakeup.post.ts
deleted file mode 100644
index 65fa02b..0000000
--- a/server/api/devices/[id]/wakeup.post.ts
+++ /dev/null
@@ -1,113 +0,0 @@
-import { AgentControlService } from '@/server/agent-control-service';
-import { DBStorage } from '~/server/db';
-import { UserAuthInfo } from '~/server/utils/auth/handler';
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const deviceID = parseInt(getRouterParam(event, "id") as string, 10);
-    if (Number.isNaN(deviceID) && !Number.isSafeInteger(deviceID)) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid Device ID" };
-    }
-
-    const device = await DBStorage.Devices.getByID(deviceID);
-    if (!device || device.ownerID !== userinfo.userID) {
-        setResponseStatus(event, 404);
-        return { status: "ERROR", message: "Device not found or inaccessible by user" };
-    }
-
-    // Devices created before agent ownership was enforced may point at another user's agent.
-    const agent = AgentControlService.agents.get(device.agentID);
-    if (!agent || agent.ownerID !== userinfo.userID) {
-        setResponseStatus(event, 404);
-        return { status: "ERROR", message: "Agent not found" };
-    }
-
-    if (!agent.isOnline()) {
-        setResponseStatus(event, 503);
-        return { status: "ERROR", message: "Agent is offline" };
-    }
-
-    let result = null;
-    try {
-        result = await agent.sendCommand("WAKEUP", {
-            macAddress: device.macAddress,
-            port: device.port
-        });
-    } catch {}
-
-    if (!result) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: `Failed to send wakeup command` };
-    }
-
-    if (result?.status !== "OK") {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Wakeup command failed: " + result?.message };
-    }
-
-    setResponseStatus(event, 200);
-    return { status: "OK", message: "Wakeup command sent" };
-
-});
-
-
-// type WakeupPayload = {
-//     macAddress: string;
-// }
-
-// export default defineEventHandler(async (event) => {
-
-//     const session = SessionHandler.isAuthenticatedSession(event);
-//     if (!session) return;
-
-//     const agentID = parseInt(getRouterParam(event, "id") as string, 10);
-//     if (Number.isNaN(agentID) && !Number.isSafeInteger(agentID)) {
-//         setResponseStatus(event, 400);
-//         return { status: "ERROR", message: "Invalid Agent ID" };
-//     }
-
-//     const payload = await readBody(event) as WakeupPayload | undefined;
-
-//     const macAddress = payload?.macAddress;
-
-//     if (typeof macAddress !== "string") {
-//         setResponseStatus(event, 400);
-//         return { status: "ERROR", message: "Invalid MAC-Address" };
-//     }
-
-//     const agent = AgentControlService.agents.get(agentID);
-//     if (!agent) {
-//         setResponseStatus(event, 404);
-//         return { status: "ERROR", message: "Agent not found" };
-//     }
-
-//     if (!agent.isOnline()) {
-//         setResponseStatus(event, 503);
-//         return { status: "ERROR", message: "Agent is offline" };
-//     }
-
-//     let result = null;
-//     try {
-//         result = await agent.sendCommand("WAKEUP", {
-//             macAddress: macAddress,
-//             port: 9
-//         });
-//     } catch {}
-
-//     if (!result) {
-//         setResponseStatus(event, 500);
-//         return { status: "ERROR", message: `Failed to send wakeup command` };
-//     }
-
-//     if (result?.status !== "OK") {
-//         setResponseStatus(event, 500);
-//         return { status: "ERROR", message: "Wakeup command failed: " + result?.message };
-//     }
-
-//     setResponseStatus(event, 200);
-//     return { status: "OK", message: "Wakeup command sent" };
-// });
diff --git a/server/api/devices/index.get.ts b/server/api/devices/index.get.ts
deleted file mode 100644
index 337096f..0000000
--- a/server/api/devices/index.get.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-import { DBStorage } from '~/server/db';
-import { UserAuthInfo } from '~/server/utils/auth/handler';
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    let result = await DBStorage.Devices.getAllByOwnerID(userinfo.userID);
-    if (!result) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to retrieve devices." , data: null };
-    }
-
-    const onlyFavorites = getQuery(event).onlyFavorites?.toString() === 'true';
-
-    if (onlyFavorites) {
-        const favorites = userinfo.favorites || [];
-        result = result.filter(device => favorites.includes(device.id));
-    }
-
-    setResponseStatus(event, 200);
-    return { status: "OK",  message: "Devices retrieved successfully.", data: result};
-});
\ No newline at end of file
diff --git a/server/api/devices/index.post.ts b/server/api/devices/index.post.ts
deleted file mode 100644
index daec73f..0000000
--- a/server/api/devices/index.post.ts
+++ /dev/null
@@ -1,31 +0,0 @@
-import { DBStorage } from '~/server/db';
-import { UserAuthInfo } from '~/server/utils/auth/handler';
-import { Validation } from '~/server/utils/validation';
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const input = Validation.parseDeviceInput(await readBody(event));
-    if (!input) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "Invalid payload", data: null  };
-    }
-
-    // Devices can only be bound to the user's own agents.
-    const agent = await DBStorage.Agents.getByIDAndOwnerID(input.agentID, userinfo.userID);
-    if (!agent) {
-        setResponseStatus(event, 400);
-        return { status: "ERROR", message: "No matching agent found for the given AgentID", data: null };
-    }
-
-    const result = await DBStorage.Devices.insert({ ...input, ownerID: userinfo.userID });
-    if (!result) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to create Device", data: null };
-    }
-
-    setResponseStatus(event, 201);
-    return { status: "OK", message: "Device created successfully", data: result  };
-});
diff --git a/server/api/devices/status.get.ts b/server/api/devices/status.get.ts
deleted file mode 100644
index 37c53b7..0000000
--- a/server/api/devices/status.get.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-import type { UserAuthInfo } from '@/server/utils/auth/handler';
-import { AgentControlService } from '~/server/agent-control-service';
-import { DBStorage } from '~/server/db';
-import type { ModelUtils } from '~/utils/models/utils';
-
-export default defineEventHandler(async (event) => {
-
-    const userinfo = event.context.userinfo as UserAuthInfo;
-    if (!userinfo) return;
-
-    const idList = getQuery(event).ids?.toString().split(',').map(id => parseInt(id, 10)).filter(id => !isNaN(id));
-
-    const result: {
-        [id: string]: ModelUtils.OnlineStatus.Type
-    } = {};
-
-    const ownedDevices = await DBStorage.Devices.getAllByOwnerID(userinfo.userID);
-    if (!ownedDevices) {
-        setResponseStatus(event, 500);
-        return { status: "ERROR", message: "Failed to retrieve devices statuses.", data: null };
-    }
-
-    for (const device of ownedDevices) {
-
-        if (idList && !idList.includes(device.id)) {
-            continue;
-        }
-
-        const agent = AgentControlService.agents.get(device.agentID);
-        if (!agent || agent.ownerID !== userinfo.userID) {
-            result[device.id.toString()] = "unknown";
-            continue;
-        }
-
-        const deviceStatus = await agent.sendCommand("GET_STATUS", {
-            address: device.macAddress,
-        });
-        if (deviceStatus?.online) {
-            result[device.id.toString()] = deviceStatus.online as ModelUtils.OnlineStatus.Type;
-        } else {
-            result[device.id.toString()] = "unknown";
-        }
-
-    }
-    
-    return { status: "OK", data: result};
-});
\ No newline at end of file
diff --git a/server/db/index.ts b/server/db/index.ts
deleted file mode 100644
index 8bf9447..0000000
--- a/server/db/index.ts
+++ /dev/null
@@ -1,98 +0,0 @@
-import { createClient as createDBClient } from "@libsql/client";
-import { Client as DBClient } from "@libsql/core/api";
-import fs from "fs";
-import { UsersTable } from "./models/users";
-import { PasswordResetsTable } from "./models/password_resets";
-import { AgentsTable } from "./models/agents";
-import { DevicesTable } from "./models/devices";
-import { AbstractDBTable } from "./models/base";
-
-export class DBStorage {
-
-    private static db: DBClient | null = null;
-
-    private static readonly tables: Record<string, AbstractDBTable<any>> = {};
-
-    private constructor() {}
-
-    static async init() {
-        if (this.db) return this.db;
-
-        if (!fs.existsSync("./data")) {
-            fs.mkdirSync("./data", { recursive: true });
-        }
-
-        this.db = createDBClient({
-            url: "file:./data/db.sqlite"
-        });
-
-        await this.setup();
-    }
-
-    private static async setup() {    
-        if (!this.db) throw new Error("Database not initialized");
-
-        try {
-            
-            this.tables["users"] = new UsersTable(this.db);
-            this.tables["password_resets"] = new PasswordResetsTable(this.db);
-            this.tables["agents"] = new AgentsTable(this.db);
-            this.tables["devices"] = new DevicesTable(this.db);
-
-            // Initialize all tables
-            for (const table of Object.values(this.tables)) {
-                await this.db.execute(table.createTable());
-            }
-
-            const migratedSecrets = await this.Agents.hashPlaintextSecrets();
-            if (migratedSecrets > 0) {
-                console.log(`Hashed ${migratedSecrets} agent secret(s) stored in plaintext.`);
-            }
-
-            console.log("Database tables initialized successfully.");
-
-        } catch (error) {
-            console.error("Error setting up database tables:", error);
-        }
-
-    }
-
-    static get Users() {
-        return this.tables["users"] as DBStorage.User;
-    }
-    static get PasswordResets() {
-        return this.tables["password_resets"] as DBStorage.PasswordReset;
-    }
-    static get Agents() {
-        return this.tables["agents"] as DBStorage.Agent;
-    }
-    static get Devices() {
-        return this.tables["devices"] as DBStorage.Device;
-    }
-
-}
-
-export namespace DBStorage {
-
-    // export interface IConfig {
-    //     host: string;
-    //     port: number;
-    //     user: string;
-    //     password: string;
-    //     database: string;
-    // }
-
-    // export type ByIDTable = "agents" | "devices" | "users";
-    // export type ByTokenTable = /*"sessions"*/ | "password_resets";
-    // export type Table = ByIDTable | ByTokenTable;
-
-    export import User = UsersTable;
-    export import PasswordReset = PasswordResetsTable;
-    export import Agent = AgentsTable;
-    export import Device = DevicesTable;
-    // export type Session = SessionsTable;
-
-
-    export type ModelWithoutID<T> = Omit<T, "id">;
-
-}
\ No newline at end of file
diff --git a/server/db/models-test.ts b/server/db/models-test.ts
deleted file mode 100644
index 00be3fa..0000000
--- a/server/db/models-test.ts
+++ /dev/null
@@ -1,112 +0,0 @@
-
-// type SchemaType = "int" | "string" | "array" | "boolean";
-
-// type TypeMap = {
-//     int: number;
-//     string: string;
-//     array: number[];
-//     boolean: boolean;
-// }
-
-// interface SchemaBaseOptions<T extends SchemaType, Only extends readonly TypeMap[T][], AllowNull extends boolean = false, > {
-//     primaryKey?: boolean;
-//     autoIncrement?: boolean;
-//     unique?: boolean;
-//     allowNull?: AllowNull;
-//     only?: Only;
-//     default?: TypeMap[T];
-// };
-
-
-// interface SchemaConfig<T extends SchemaType, Only extends readonly TypeMap[T][] = readonly TypeMap[T][], AllowNull extends boolean = false> extends SchemaBaseOptions<T, Only, AllowNull> {
-//     type: T;
-// };
-
-// interface Schema {
-//     [key: string]: SchemaConfig<SchemaType>;
-// }
-
-// type Parsed<T extends Schema> = {
-//     [K in keyof T]: 
-//         T[K] extends { type: infer U, only: infer O, allowNull: true } 
-//             ? U extends SchemaType 
-//                 ? O extends any[] 
-//                     ? O[number] | null 
-//                     : never 
-//                 : never 
-//         : T[K] extends { type: infer U, only: infer O } 
-//             ? U extends SchemaType 
-//                 ? O extends any[] 
-//                     ? O[number] 
-//                     : never 
-//                 : never 
-//         : T[K] extends { type: infer U, allowNull: true } 
-//             ? U extends SchemaType 
-//                 ? TypeMap[U] | null 
-//                 : never 
-//         : T[K] extends { type: infer U } 
-//             ? U extends SchemaType 
-//                 ? TypeMap[U] 
-//                 : never 
-//             : never;
-// }
-
-
-// namespace ST {
-
-//     export function int(options: SchemaBaseOptions<"int"> = {}): SchemaConfig<"int"> {
-//         return {
-//             type: "int",
-//             allowNull: false,
-//             ...options
-//         };
-//     }
-
-//     export function string(options: SchemaBaseOptions<"string"> = {}): SchemaConfig<"string"> {
-//         return {
-//             type: "string",
-//             allowNull: false,
-//             ...options
-//         };
-//     }
-
-//     export function array(options: SchemaBaseOptions<"array"> = {}): SchemaConfig<"array"> {
-//         return {
-//             type: "array",
-//             allowNull: false,
-//             ...options
-//         };
-//     }
-
-//     export function boolean(options: SchemaBaseOptions<"boolean", any> = {}): SchemaConfig<"boolean"> {
-//         return {
-//             type: "boolean",
-//             allowNull: false,
-//             ...options
-//         };
-//     }
-
-//     export function id(): SchemaConfig<"int"> {
-//         return {
-//             type: "int",
-//             primaryKey: true,
-//             autoIncrement: true
-//         };
-//     }
-
-// }
-
-
-// const User = {
-//     id: ST.id(),
-//     username: ST.string({ unique: true }),
-//     password_hash: ST.string(),
-//     role: ST.string({ only: ["user", "admin"] }),
-//     favorites: ST.array({ default: [] }),
-// } as const;
-
-// const a = ST.string({ only: ["user", "admin"] })
-// a.only
-
-// type User = Parsed<typeof User>;
-
diff --git a/server/db/models/agents.ts b/server/db/models/agents.ts
deleted file mode 100644
index f2114b0..0000000
--- a/server/db/models/agents.ts
+++ /dev/null
@@ -1,133 +0,0 @@
-import { AbstractIDWithOwnerIDBasedTable } from "./base";
-import { AgentSecrets } from "../../utils/auth/agentSecrets";
-
-export namespace AgentsTable {
-
-    export interface Model {
-        id: number;
-        name: string;
-        type: Model.Type;
-        description: string;
-        /** SHA-256 hash of the agent secret (see `AgentSecrets`); the secret itself is never stored. */
-        secretHash: string;
-        ownerID: number;
-    }
-
-    export namespace Model {
-        export type Type = "server" | "microcontroller";
-    }
-
-    export type ModelWithoutID = Omit<Model, "id">;
-
-    /** The agent as returned by the API — without the secret hash. */
-    export type PublicModel = Omit<Model, "secretHash">;
-
-    /** Row layout in the database; the `secret` column holds the hash. */
-    export interface StoredModel extends Omit<Model, "secretHash"> {
-        secret: string;
-    }
-}
-
-export class AgentsTable extends AbstractIDWithOwnerIDBasedTable<AgentsTable.Model, AgentsTable.StoredModel> {
-
-    public readonly tableName = "agents";
-
-    static toPublic(agent: AgentsTable.Model): AgentsTable.PublicModel {
-        const { secretHash, ...publicAgent } = agent;
-        return publicAgent;
-    }
-
-    protected decode = (row: AgentsTable.StoredModel | null): AgentsTable.Model | null => {
-        if (!row) return null;
-        return {
-            id: row.id,
-            name: row.name,
-            type: row.type,
-            description: row.description,
-            secretHash: row.secret,
-            ownerID: row.ownerID,
-        };
-    };
-
-    public createTable() {
-        return `
-            CREATE TABLE IF NOT EXISTS agents (
-                id INTEGER PRIMARY KEY AUTOINCREMENT,
-                name TEXT NOT NULL,
-                type TEXT NOT NULL CHECK(type IN ('server', 'microcontroller')),
-                description TEXT NOT NULL,
-                secret TEXT NOT NULL,
-                ownerID INTEGER NOT NULL,
-                FOREIGN KEY (ownerID) REFERENCES users(id)
-            );
-        `;
-    }
-
-    /**
-     * Replaces secrets that older versions stored in plaintext with their hash. Agents keep
-     * working with their existing secret.
-     */
-    async hashPlaintextSecrets() {
-        const stmt = await this.db.execute(`SELECT id, secret FROM agents`);
-
-        let migrated = 0;
-        for (const row of stmt.rows as unknown as { id: number; secret: string }[]) {
-            if (AgentSecrets.isHash(row.secret)) continue;
-
-            await this.db.execute({
-                sql: `UPDATE agents SET secret = ? WHERE id = ?`,
-                args: [AgentSecrets.hash(row.secret), row.id]
-            });
-            migrated++;
-        }
-        return migrated;
-    }
-
-    /** Updates name, type and description. Returns false if the agent doesn't exist or isn't owned by `ownerID`. */
-    async updateDetailsByOwner(agent: AgentsTable.PublicModel) {
-        try {
-            const stmt = await this.db.execute({
-                sql: `
-                    UPDATE agents
-                    SET name = ?, type = ?, description = ?
-                    WHERE id = ? AND ownerID = ?
-                `,
-                args: [agent.name, agent.type, agent.description, agent.id, agent.ownerID]
-            });
-            return stmt.rowsAffected > 0;
-        } catch (error) {
-            console.error("Error updating agent:", error);
-            return null;
-        }
-    }
-
-    /** Returns false if the agent doesn't exist or isn't owned by `ownerID`. */
-    async updateSecretHashByOwner(id: number, ownerID: number, secretHash: string) {
-        try {
-            const stmt = await this.db.execute({
-                sql: `UPDATE agents SET secret = ? WHERE id = ? AND ownerID = ?`,
-                args: [secretHash, id, ownerID]
-            });
-            return stmt.rowsAffected > 0;
-        } catch (error) {
-            console.error("Error updating agent secret:", error);
-            return null;
-        }
-    }
-
-    async insert(agent: AgentsTable.ModelWithoutID) {
-        try {
-            if (!this.db) throw new Error("Database not initialized");
-
-            const stmt = await this.db.execute({
-                sql: `INSERT INTO agents (name, type, description, secret, ownerID) VALUES (?, ?, ?, ?, ?)`,
-                args: [agent.name, agent.type, agent.description, agent.secretHash, agent.ownerID]
-            });
-            return Number(stmt.lastInsertRowid);
-        } catch (error) {
-            console.error("Error inserting agent:", error);
-            return null;
-        }
-    }
-
-}
diff --git a/server/db/models/base.ts b/server/db/models/base.ts
deleted file mode 100644
index 0f09bc7..0000000
--- a/server/db/models/base.ts
+++ /dev/null
@@ -1,142 +0,0 @@
-import type { Client as DBClient } from "@libsql/core/api";
-
-export abstract class AbstractDBTable<T extends Record<string, any>, TStored extends Record<string, any> = T> {
-
-    abstract readonly tableName: string;
-
-    constructor(
-        protected readonly db: DBClient
-    ) {}
-
-    protected encode: (item: T) => TStored = (item: any) => item;
-    protected decode: (item: TStored | null) => T | null = (item: any) => item;
-
-    protected encodeMany(items: T[]) {
-        const result: TStored[] = [];
-        for (const item of items) {
-            const encodedItem = this.encode(item);
-            result.push(encodedItem);
-        }
-        return result;
-    }
-    protected decodeMany(items: TStored[]) {
-        const result: T[] = [];
-        for (const item of items) {
-            const decodedItem = this.decode(item);
-            if (!decodedItem) return null;
-            result.push(decodedItem);
-        }
-        return result;
-    }
-
-    abstract createTable(): string;
-
-    async getAll() {
-        try {
-            const stmt = await this.db.execute(`SELECT * FROM ${this.tableName}`);
-            return this.decodeMany(stmt.rows as any);
-        } catch (error) {
-            console.error(`Error getting all from table ${this.tableName}:`, error);
-            return null;
-        }
-    }
-
-    abstract insert(item: T): Promise<number | null>;
-
-}
-
-export abstract class AbstractIDBasedTable<T extends Record<string, any>, TStored extends Record<string, any> = T> extends AbstractDBTable<T, TStored> {
-
-    async getByID(id: number) {
-        try {
-            const stmt = await this.db.execute({
-                sql: `SELECT * FROM ${this.tableName} WHERE id = ?`,
-                args: [id]
-            });
-            return this.decode(stmt.rows[0] as any || null);
-        } catch (error) {
-            console.error(`Error getting by ID from table ${this.tableName}:`, error);
-            return null;
-        }
-    }
-
-    async deleteByID(id: number) {
-        try {
-            await this.db.execute({
-                sql: `DELETE FROM ${this.tableName} WHERE id = ?`,
-                args: [id]
-            });
-            return true;
-        } catch (error) {
-            console.error(`Error deleting by ID from table ${this.tableName}:`, error);
-            return null;
-        }
-    }
-
-}
-
-export abstract class AbstractTokenBasedTable<T extends Record<string, any>, TStored extends Record<string, any> = T> extends AbstractDBTable<T, TStored> {
-
-    async getByToken(token: string) {
-        try {
-            const stmt = await this.db.execute({
-                sql: `SELECT * FROM ${this.tableName} WHERE token = ?`,
-                args: [token]
-            })
-            return this.decode(stmt.rows[0] as any || null);
-        } catch (error) {
-            console.error(`Error getting by token from table ${this.tableName}:`, error);
-            return null;
-        }
-
-    }
-
-    async deleteByToken(token: string) {
-        try {
-            const stmt = await this.db.execute({
-                sql: `DELETE FROM ${this.tableName} WHERE token = ?`,
-                args: [token]
-            });
-            return true;
-        } catch (error) {
-            console.error(`Error deleting by token from table ${this.tableName}:`, error);
-            return false;
-        }
-    }
-}
-
-export abstract class AbstractIDWithOwnerIDBasedTable<T extends Record<string, any>, TStored extends Record<string, any> = T> extends AbstractIDBasedTable<T, TStored> {
-
-    async getByIDAndOwnerID(id: number, ownerID: number) {
-        try {
-            const stmt = await this.db.execute({
-                sql: `SELECT * FROM ${this.tableName} WHERE id = ? AND ownerID = ?`,
-                args: [id, ownerID]
-            });
-            return this.decode(stmt.rows[0] as any || null);
-        } catch (error) {
-            console.error(`Error getting by ID and owner ID from table ${this.tableName}:`, error);
-            return null;
-        }
-    }
-
-    async getAllByOwnerID(ownerID: number) {
-        try {
-            const stmt = await this.db.execute({
-                sql: `SELECT * FROM ${this.tableName} WHERE ownerID = ?`,
-                args: [ownerID]
-            });
-            return this.decodeMany(stmt.rows as any);
-        } catch (error) {
-            console.error(`Error getting all by owner ID from table ${this.tableName}:`, error);
-            return null;
-        }
-    }
-
-}
-
-export namespace AbstractDBTable {
-
-    export type ModelWithoutID<T extends Record<string, any>> = Omit<T, 'id'>;
-
-}
\ No newline at end of file
diff --git a/server/db/models/devices.ts b/server/db/models/devices.ts
deleted file mode 100644
index e9dc343..0000000
--- a/server/db/models/devices.ts
+++ /dev/null
@@ -1,80 +0,0 @@
-import { AbstractIDWithOwnerIDBasedTable } from "./base";
-
-export namespace DevicesTable {
-
-    export interface Model {
-        id: number;
-        name: string;
-        type: Model.Type;
-        description: string;
-        macAddress: string;
-        port: number;
-        agentID: number;
-        ownerID: number;
-    }
-
-    export namespace Model {
-        export type Type = 'server' | 'desktop' | 'laptop' | 'printer' | 'nas';
-    }
-
-    export type ModelWithoutID = Omit<Model, "id">;
-}
-
-export class DevicesTable extends AbstractIDWithOwnerIDBasedTable<DevicesTable.Model> {
-
-    public readonly tableName = "devices";
-
-    public createTable() {
-        return `
-            CREATE TABLE IF NOT EXISTS devices (
-                id INTEGER PRIMARY KEY AUTOINCREMENT,
-                name TEXT NOT NULL,
-                type TEXT NOT NULL CHECK(type IN ('server', 'desktop', 'laptop', 'printer', 'nas')),
-                description TEXT,
-                macAddress TEXT NOT NULL,
-                port INTEGER NOT NULL,
-                agentID INTEGER NOT NULL,
-                ownerID INTEGER NOT NULL,
-                FOREIGN KEY (agentID) REFERENCES agents(id),
-                FOREIGN KEY (ownerID) REFERENCES users(id)
-            );
-        `;
-    }
-
-    async updateByOwner(device: DevicesTable.Model) {
-        try {
-            const stmt = await this.db.execute({
-                sql: `
-                    UPDATE devices
-                    SET name = ?, type = ?, description = ?, macAddress = ?, port = ?, agentID = ?, ownerID = ?
-                    WHERE id = ? AND ownerID = ?
-                `,
-                args: [device.name, device.type, device.description, device.macAddress, device.port, device.agentID, device.ownerID, device.id, device.ownerID]
-            });
-            return true;
-        } catch (error) {
-            console.error("Error updating device:", error);
-            return null;
-        }
-    }
-
-    async insert(device: DevicesTable.ModelWithoutID) {
-        try {
-            if (!this.db) throw new Error("Database not initialized");
-
-            const stmt = await this.db.execute({
-                sql: `
-                    INSERT INTO devices (name, type, description, macAddress, port, agentID, ownerID)
-                    VALUES (?, ?, ?, ?, ?, ?, ?)
-                `,
-                args: [device.name, device.type, device.description, device.macAddress, device.port, device.agentID, device.ownerID]
-            });
-
-            return Number(stmt.lastInsertRowid);
-        } catch (error) {
-            console.error("Error inserting device:", error);
-            return null;
-        }
-    }
-
-}
diff --git a/server/db/models/password_resets.ts b/server/db/models/password_resets.ts
deleted file mode 100644
index 7ca27dd..0000000
--- a/server/db/models/password_resets.ts
+++ /dev/null
@@ -1,64 +0,0 @@
-import { AbstractTokenBasedTable } from "./base";
-
-export namespace PasswordResetsTable {
-
-    export interface Model {
-        token: string;
-        userID: number;
-        expiration_timestamp: number;
-    }
-
-    export type ModelWithoutID = Omit<Model, "token">;
-}
-
-export class PasswordResetsTable extends AbstractTokenBasedTable<PasswordResetsTable.Model> {
-
-    public readonly tableName = "password_resets";
-
-    public createTable() {
-        return `
-            CREATE TABLE IF NOT EXISTS password_resets (
-                token TEXT PRIMARY KEY,
-                userid INTEGER NOT NULL,
-                expiration_timestamp INTEGER NOT NULL,
-                FOREIGN KEY (userid) REFERENCES users(id)
-            );
-        `;
-    }
-
-    async getByToken(token: string) {
-        const result = await super.getByToken(token);
-        if (!result) return null;
-
-        if (Date.now() > result.expiration_timestamp) {
-            await this.deleteByToken(token);
-            return null;
-        }
-
-        return result as PasswordResetsTable.Model;
-    }
-
-    async insert(passwordReset: PasswordResetsTable.Model) {
-        if (!this.db) throw new Error("Database not initialized");
-
-        const stmt = await this.db.execute({
-            sql: `
-                INSERT INTO password_resets (token, userID, expiration_timestamp)
-                VALUES (?, ?, ?)
-            `,
-            args: [passwordReset.token, passwordReset.userID, passwordReset.expiration_timestamp]
-        });
-        return Number(stmt.lastInsertRowid);
-    }
-
-    async clearAllPasswordResets() {
-        try {
-            const stmt = await this.db.execute(`DELETE FROM password_resets`);
-            return true;
-        } catch (error) {
-            console.error("Error clearing all password resets:", error);
-            return false;
-        }
-    }
-
-}
diff --git a/server/db/models/sessions.ts b/server/db/models/sessions.ts
deleted file mode 100644
index 2f18abd..0000000
--- a/server/db/models/sessions.ts
+++ /dev/null
@@ -1,45 +0,0 @@
-
-
-        // export interface Session {
-        //     token: string;
-        //     userID: number;
-        //     expiration_timestamp: number;
-        // }
-
-            // this.db.execute(`
-            //     CREATE TABLE IF NOT EXISTS sessions (
-            //         token TEXT PRIMARY KEY,
-            //         userID INTEGER NOT NULL,
-            //         expiration_timestamp INTEGER NOT NULL,
-            //         FOREIGN KEY (userID) REFERENCES users(id)
-            //     );
-            // `);
-
-    // static getAllSessions() {
-    //     return this.getAllFromTable<DBStorage.Models.Session>("sessions");
-    // }
-
-    // static getSessionByToken(token: string) {
-    //     return this.getByTokenFromTable<DBStorage.Models.Session>("sessions", token);
-    // }
-
-    // static insertSession(session: DBStorage.Models.Session) {
-    //     if (!this.db) throw new Error("Database not initialized");
-
-    //     const stmt = this.db.prepare(`
-    //         INSERT INTO sessions (token, userID, expiration_timestamp)
-    //         VALUES (?, ?, ?)
-    //     `);
-    //     stmt.run(session.token, session.userID, session.expiration_timestamp);
-    //     stmt.finalize();
-    //     return true;
-    // }
-
-    // static clearAllSessions() {
-    //     if (!this.db) throw new Error("Database not initialized");
-
-    //     const stmt = this.db.prepare(`DELETE FROM sessions`);
-    //     stmt.run();
-    //     stmt.finalize();
-    //     return true;
-    // }
diff --git a/server/db/models/users.ts b/server/db/models/users.ts
deleted file mode 100644
index d3d192b..0000000
--- a/server/db/models/users.ts
+++ /dev/null
@@ -1,160 +0,0 @@
-import { ResultSet } from "@libsql/client";
-import { AbstractIDBasedTable } from "./base";
-
-
-export namespace UsersTable {
-
-    interface BaseModel {
-        id: number;
-        username: string;
-        password_hash: string;
-        role: Model.Role;
-    }
-
-    export interface Model extends BaseModel {
-        favorites: number[];
-    }
-
-    export type ModelWithoutID = Omit<Model, "id">;
-
-    export namespace Model {
-        export type Role = "admin" | "user";
-    }
-
-    export interface StoredModel extends BaseModel {
-        favorites: string; // JSON string of array
-    }
-
-    export type StoredModelWithoutID = Omit<StoredModel, "id">;
-
-}
-
-export class UsersTable extends AbstractIDBasedTable<UsersTable.Model, UsersTable.StoredModel> {
-
-    public readonly tableName = "users";
-
-    protected encode = (item: UsersTable.Model) => {
-        const encodedItem = structuredClone(item) as any as UsersTable.StoredModel;
-        encodedItem.favorites = JSON.stringify(item.favorites);
-        return encodedItem;
-    }
-
-    protected decode = (item: UsersTable.StoredModel | null) => {
-        if (!item) return null;
-
-        const decodedItem = structuredClone(item) as any as UsersTable.Model;
-        decodedItem.favorites = JSON.parse(item.favorites);
-        return decodedItem;
-    }
-
-    public createTable() {
-        return `
-            CREATE TABLE IF NOT EXISTS users (
-                id INTEGER PRIMARY KEY AUTOINCREMENT,
-                username TEXT NOT NULL UNIQUE,
-                password_hash TEXT NOT NULL,
-                role TEXT NOT NULL CHECK(role IN ('admin', 'user')),
-                favorites TEXT NOT NULL DEFAULT ''
-            );
-        `;
-    }
-
-    async getByUsername(username: string) {
-        try {
-            const stmt = await this.db.execute({
-                sql: `SELECT * FROM users WHERE username = ?`,
-                args: [username]
-            });
-
-            return this.decode(stmt.rows[0] as any || null);
-        } catch (error) {
-            console.error("Error getting user by username:", error);
-            return null;
-        }
-    }
-
-    async isUsernameTaken(username: string, currentOwnerID?: number) {
-        try {
-            let stmt: ResultSet;
-
-            if (currentOwnerID) {
-                stmt = await this.db.execute({
-                    sql: `
-                        SELECT COUNT(*) as count FROM users
-                        WHERE username = ? AND id != ?
-                    `,
-                    args: [username, currentOwnerID]
-                });
-            } else {
-                stmt = await this.db.execute({
-                    sql: `
-                        SELECT COUNT(*) as count FROM users
-                        WHERE username = ?
-                    `,
-                    args: [username]
-                });
-            }
-    
-            const row = stmt.rows[0] as any;
-            return row.count > 0;
-        } catch (error) {
-            console.error("Error checking if username is taken:", error);
-            return false;
-        }
-    }
-
-    async update(user: Omit<UsersTable.Model, "role" | "password_hash"> & { password?: string, role?: UsersTable.Model.Role }) {
-        try {
-
-            if (user.password) {
-                const password_hash = await AuthHandler.hashPassword(user.password);
-
-                const stmt = await this.db.execute({
-                    sql: `UPDATE users SET password_hash = ? WHERE id = ?`,
-                    args: [password_hash, user.id]
-                });
-
-            }
-
-            if (user.role) {
-                const stmt = await this.db.execute({
-                    sql: `UPDATE users SET role = ? WHERE id = ?`,
-                    args: [user.role, user.id]
-                });
-            }
-
-            const stmt = await this.db.execute({
-                sql: `
-                    UPDATE users
-                    SET username = ?, favorites = ?
-                    WHERE id = ?
-                `,
-                args: [user.username, JSON.stringify(user.favorites), user.id]
-            });
-            // stmt.run(user.username, user.password_hash, user.role, user.id);
-            // stmt.finalize();
-            return true;
-        } catch (error) {
-            console.error("Error updating user:", error);
-            return null;
-        }
-    }
-
-    async insert(user: UsersTable.ModelWithoutID) {
-        try {
-            const stmt = await this.db.execute({
-                sql: `
-                    INSERT INTO users (username, password_hash, role, favorites)
-                    VALUES (?, ?, ?, ?)
-                `,
-                args: [user.username, user.password_hash, user.role, JSON.stringify(user.favorites)]
-            });
-
-            return Number(stmt.lastInsertRowid);
-        } catch (error) {
-            console.error("Error inserting user:", error);
-            return null;
-        }
-    }
-
-}
diff --git a/server/lib/agents/auth.ts b/server/lib/agents/auth.ts
new file mode 100644
index 0000000..3624994
--- /dev/null
+++ b/server/lib/agents/auth.ts
@@ -0,0 +1,154 @@
+import { and, eq, isNull } from "drizzle-orm";
+import { AuthUtils } from "../api/utils/authHandler";
+import { DB } from "../db";
+import { AppConstants } from "../utils/constants";
+import { AgentCloseCodes, AgentRegistry } from "./registry";
+
+/**
+ * Agent credentials.
+ *
+ * 1. The dashboard creates a single-use enrollment token (`netignite_enroll_<id>:<base>`, 15 minutes)
+ *    and hands it to the agent: embedded in the ESP32 flash image, or as `netignite-agent pair`.
+ * 2. The agent generates its own secret and calls `POST /v1/agents/enroll`. The server stores only
+ *    the secret's hash and returns a token id.
+ * 3. The agent then connects with `Authorization: Bearer netignite_agent_<token_id>:<secret>`.
+ *
+ * The long-term secret never leaves the agent in clear, and enrolling again revokes the old one.
+ */
+export class AgentAuth {
+	static readonly AGENT_TOKEN_PREFIX = `${AppConstants.APP_KEYS_PREFIX}_agent_`;
+	static readonly ENROLLMENT_TOKEN_PREFIX = `${AppConstants.APP_KEYS_PREFIX}_enroll_`;
+
+	static readonly ENROLLMENT_TTL_MS = 15 * 60 * 1000;
+
+	/** Agent-generated secrets: 32–128 URL-safe characters (the agents send 64 hex characters). */
+	static readonly SECRET_PATTERN = /^[A-Za-z0-9_-]{32,128}$/;
+
+	/** Creates an enrollment token for the agent and invalidates any older unused one. */
+	static async createEnrollment(agentID: number, userID: number) {
+		const id = AuthUtils.createRandomTokenID();
+		const base = AuthUtils.createBaseToken();
+		const hashed_token = await AuthUtils.hashTokenBase(base);
+		const expires_at = Date.now() + this.ENROLLMENT_TTL_MS;
+
+		// Synchronous: drizzle's bun-sqlite transaction() commits at the first `await`.
+		DB.instance().transaction((tx) => {
+			tx
+				.delete(DB.Tables.agentEnrollments)
+				.where(
+					and(
+						eq(DB.Tables.agentEnrollments.agent_id, agentID),
+						isNull(DB.Tables.agentEnrollments.used_at),
+					),
+				)
+				.run();
+			tx
+				.insert(DB.Tables.agentEnrollments)
+				.values({ id, hashed_token, agent_id: agentID, created_by_user_id: userID, expires_at })
+				.run();
+		});
+
+		return { token: `${this.ENROLLMENT_TOKEN_PREFIX}${id}:${base}`, expires_at };
+	}
+
+	/**
+	 * Redeems an enrollment token and stores the agent's new credential. Returns the agent and the
+	 * token id it must use from now on, or null if the token is unknown, used or expired.
+	 */
+	static async enroll(enrollmentToken: string, secret: string) {
+		const parts = this.parseToken(enrollmentToken, this.ENROLLMENT_TOKEN_PREFIX);
+		if (!parts || !this.SECRET_PATTERN.test(secret)) return null;
+
+		const enrollment = await DB.instance()
+			.select()
+			.from(DB.Tables.agentEnrollments)
+			.where(eq(DB.Tables.agentEnrollments.id, parts.id))
+			.get();
+
+		if (
+			!enrollment ||
+			enrollment.used_at !== null ||
+			enrollment.expires_at < Date.now() ||
+			!(await AuthUtils.verifyHashedTokenBase(parts.base, enrollment.hashed_token))
+		) {
+			return null;
+		}
+
+		const tokenID = AuthUtils.createRandomTokenID();
+		const hashedSecret = await AuthUtils.hashTokenBase(secret);
+
+		// Synchronous: drizzle's bun-sqlite transaction() commits at the first `await`.
+		const agent = DB.instance().transaction((tx) => {
+			// Claim the token; a concurrent enrollment with the same token updates no row.
+			const claimed = tx
+				.update(DB.Tables.agentEnrollments)
+				.set({ used_at: Date.now() })
+				.where(
+					and(
+						eq(DB.Tables.agentEnrollments.id, enrollment.id),
+						isNull(DB.Tables.agentEnrollments.used_at),
+					),
+				)
+				.returning()
+				.get();
+			if (!claimed) return null;
+
+			return tx
+				.update(DB.Tables.agents)
+				.set({ token_id: tokenID, hashed_secret: hashedSecret, enrolled_at: Date.now() })
+				.where(eq(DB.Tables.agents.id, enrollment.agent_id))
+				.returning()
+				.get();
+		});
+
+		if (!agent) return null;
+
+		// A previously enrolled device with the old credential must not stay connected.
+		AgentRegistry.disconnect(agent.id, AgentCloseCodes.CREDENTIAL_REVOKED, "Agent was re-enrolled");
+
+		return { agent, token_id: tokenID };
+	}
+
+	/** Resolves an agent credential (`netignite_agent_<token_id>:<secret>`) to its agent. */
+	static async authenticate(fullToken: string) {
+		const parts = this.parseToken(fullToken, this.AGENT_TOKEN_PREFIX);
+		if (!parts) return null;
+
+		const agent = await DB.instance()
+			.select()
+			.from(DB.Tables.agents)
+			.where(eq(DB.Tables.agents.token_id, parts.id))
+			.get();
+
+		if (!agent?.hashed_secret) return null;
+		if (!(await AuthUtils.verifyHashedTokenBase(parts.base, agent.hashed_secret))) return null;
+
+		return agent;
+	}
+
+	/** Removes the agent's credential and pending enrollments, and disconnects it. */
+	static revoke(agentID: number) {
+		DB.instance().transaction((tx) => {
+			tx
+				.update(DB.Tables.agents)
+				.set({ token_id: null, hashed_secret: null, enrolled_at: null })
+				.where(eq(DB.Tables.agents.id, agentID))
+				.run();
+			tx
+				.delete(DB.Tables.agentEnrollments)
+				.where(eq(DB.Tables.agentEnrollments.agent_id, agentID))
+				.run();
+		});
+
+		AgentRegistry.disconnect(agentID, AgentCloseCodes.CREDENTIAL_REVOKED, "Credential revoked");
+	}
+
+	private static parseToken(token: string, prefix: string) {
+		if (!token.startsWith(prefix)) return null;
+
+		const [id, base, ...rest] = token.slice(prefix.length).split(":");
+		if (!id || !base || rest.length > 0) return null;
+
+		return { id, base };
+	}
+}
diff --git a/server/lib/agents/connection.ts b/server/lib/agents/connection.ts
new file mode 100644
index 0000000..23dc565
--- /dev/null
+++ b/server/lib/agents/connection.ts
@@ -0,0 +1,180 @@
+import { randomInt } from "node:crypto";
+import type { Peer } from "crossws";
+import type { AgentSettings } from "../api/utils/shared-models/netigniteData";
+import { Logger } from "../utils/logger";
+import { AgentProtocol } from "./protocol";
+
+export const DEFAULT_REQUEST_TIMEOUT_MS = 5000;
+
+export class AgentRequestError extends Error {
+	constructor(
+		readonly reason: AgentRequestError.Reason,
+		message: string,
+	) {
+		super(message);
+	}
+}
+
+export namespace AgentRequestError {
+	/**
+	 * - `offline`: the agent isn't connected (or disconnected while the request was pending)
+	 * - `unsupported`: the agent didn't advertise the capability
+	 * - `timeout`: no answer in time
+	 * - `rejected`: the agent answered with `ok: false`
+	 */
+	export type Reason = "offline" | "unsupported" | "timeout" | "rejected";
+}
+
+type PendingRequest = {
+	resolve: (payload: Record<string, unknown>) => void;
+	reject: (error: AgentRequestError) => void;
+	timer: ReturnType<typeof setTimeout>;
+};
+
+/** One live agent WebSocket. Requests are matched to answers by id, so several can be in flight. */
+export class AgentConnection {
+	private readonly pending = new Map<number, PendingRequest>();
+	private nextRequestID = randomInt(0, 0x7fffffff);
+	private closed = false;
+
+	hello: AgentProtocol.Hello | null = null;
+	readonly connectedAt = Date.now();
+	lastMessageAt = Date.now();
+
+	constructor(
+		readonly agentID: number,
+		readonly ownerID: number,
+		readonly kind: AgentSettings.Kind,
+		private readonly peer: Peer,
+	) {}
+
+	get peerID() {
+		return this.peer.id;
+	}
+
+	get isClosed() {
+		return this.closed;
+	}
+
+	hasCapability(capability: AgentProtocol.Capability) {
+		return this.hello?.capabilities.includes(capability) ?? false;
+	}
+
+	request<C extends AgentProtocol.Command>(
+		cmd: C,
+		payload: AgentProtocol.Commands[C]["req"],
+		timeoutMs = DEFAULT_REQUEST_TIMEOUT_MS,
+	): Promise<AgentProtocol.Commands[C]["res"]> {
+		if (this.closed) {
+			return Promise.reject(new AgentRequestError("offline", "Agent is offline"));
+		}
+
+		const capability = AgentProtocol.requiredCapability(cmd, payload);
+		const needsTcp =
+			cmd === "STATUS" && (payload as AgentProtocol.Commands["STATUS"]["req"]).tcp_port;
+		if (
+			(capability && !this.hasCapability(capability)) ||
+			(needsTcp && !this.hasCapability("status.tcp"))
+		) {
+			return Promise.reject(
+				new AgentRequestError("unsupported", `Agent doesn't support ${capability ?? "status.tcp"}`),
+			);
+		}
+
+		const id = this.nextRequestID;
+		this.nextRequestID = (this.nextRequestID + 1) % 0x100000000;
+
+		return new Promise((resolve, reject) => {
+			const timer = setTimeout(() => {
+				this.pending.delete(id);
+				reject(new AgentRequestError("timeout", "Agent didn't answer in time"));
+			}, timeoutMs);
+
+			this.pending.set(id, {
+				resolve: resolve as PendingRequest["resolve"],
+				reject,
+				timer,
+			});
+
+			this.send({ t: "req", id, cmd, p: payload as Record<string, unknown> });
+		});
+	}
+
+	/**
+	 * Handles a text frame from the agent. Answers resolve their request; events are returned to
+	 * the caller. Invalid frames are logged and dropped.
+	 */
+	handleText(text: string): Extract<AgentProtocol.Frame, { t: "evt" }> | null {
+		this.lastMessageAt = Date.now();
+
+		if (text.length > AgentProtocol.MAX_FRAME_BYTES) {
+			Logger.warn(
+				`Agent ${this.agentID}: dropped a frame larger than ${AgentProtocol.MAX_FRAME_BYTES} bytes`,
+			);
+			return null;
+		}
+
+		let frame: AgentProtocol.Frame;
+		try {
+			const parsed = AgentProtocol.Frame.safeParse(JSON.parse(text));
+			if (!parsed.success) {
+				Logger.warn(`Agent ${this.agentID}: dropped an invalid frame`);
+				return null;
+			}
+			frame = parsed.data;
+		} catch {
+			Logger.warn(`Agent ${this.agentID}: dropped a frame that isn't JSON`);
+			return null;
+		}
+
+		if (frame.t === "evt") return frame;
+
+		if (frame.t === "res") {
+			const pending = this.pending.get(frame.id);
+			if (!pending) return null;
+
+			this.pending.delete(frame.id);
+			clearTimeout(pending.timer);
+
+			if (frame.ok) {
+				pending.resolve(frame.p ?? {});
+			} else {
+				pending.reject(new AgentRequestError("rejected", frame.err || "Agent rejected the request"));
+			}
+			return null;
+		}
+
+		// Agents don't send requests in protocol v2.
+		this.send({ t: "res", id: frame.id, ok: false, err: `Unknown command ${frame.cmd}` });
+		return null;
+	}
+
+	/** Marks the connection closed and fails every pending request. */
+	detach() {
+		if (this.closed) return;
+		this.closed = true;
+
+		for (const [id, pending] of this.pending) {
+			clearTimeout(pending.timer);
+			pending.reject(new AgentRequestError("offline", "Agent disconnected"));
+			this.pending.delete(id);
+		}
+	}
+
+	close(code: number, reason: string) {
+		this.detach();
+		try {
+			this.peer.close(code, reason);
+		} catch {
+			// Already closed.
+		}
+	}
+
+	private send(frame: AgentProtocol.Frame) {
+		try {
+			this.peer.send(JSON.stringify(frame));
+		} catch (error) {
+			Logger.warn(`Agent ${this.agentID}: send failed`, error);
+		}
+	}
+}
diff --git a/server/lib/agents/gateway.ts b/server/lib/agents/gateway.ts
new file mode 100644
index 0000000..d591d57
--- /dev/null
+++ b/server/lib/agents/gateway.ts
@@ -0,0 +1,218 @@
+import type { Hooks, Peer } from "crossws";
+import { eq } from "drizzle-orm";
+import { DB } from "../db";
+import { Logger } from "../utils/logger";
+import { AgentAuth } from "./auth";
+import { AgentConnection, AgentRequestError } from "./connection";
+import { AgentProtocol } from "./protocol";
+import { AgentCloseCodes, AgentRegistry } from "./registry";
+
+type AgentPeerContext = { agentID?: number; ownerID?: number; kind?: AgentConnection["kind"] };
+
+/**
+ * Drives `/ws/agent`: authenticates the upgrade, waits for HELLO, keeps connections alive and
+ * dispatches agent events. Live state is in {@link AgentRegistry}.
+ */
+export class AgentGatewayRunner {
+	static readonly HELLO_TIMEOUT_MS = 10_000;
+	static readonly KEEPALIVE_INTERVAL_MS = 30_000;
+	/** A connection that sent nothing for this long is dropped. */
+	static readonly IDLE_TIMEOUT_MS = 75_000;
+	/** `last_seen_at` is written at most this often per agent. */
+	static readonly LAST_SEEN_WRITE_INTERVAL_MS = 60_000;
+
+	private static keepaliveTimer: ReturnType<typeof setInterval> | null = null;
+	private static readonly lastSeenWrites = new Map<number, number>();
+	private static readonly helloListeners = new Set<(connection: AgentConnection) => void>();
+	private static readonly eventHandlers = new Map<
+		string,
+		(connection: AgentConnection, payload: Record<string, unknown>) => void | Promise<void>
+	>();
+
+	static hooks(): Partial<Hooks> {
+		return {
+			upgrade: (request) => this.handleUpgrade(request),
+			open: (peer) => this.handleOpen(peer),
+			message: (peer, message) => this.handleMessage(peer, message.text()),
+			close: (peer) => this.handleClose(peer),
+			error: (peer, error) => {
+				Logger.warn(`Agent WebSocket error (peer ${peer.id}):`, error);
+			},
+		};
+	}
+
+	static start() {
+		if (this.keepaliveTimer) return;
+		this.keepaliveTimer = setInterval(() => this.keepalive(), this.KEEPALIVE_INTERVAL_MS);
+		this.keepaliveTimer.unref?.();
+	}
+
+	static stop() {
+		if (this.keepaliveTimer) clearInterval(this.keepaliveTimer);
+		this.keepaliveTimer = null;
+		AgentRegistry.disconnectAll(AgentCloseCodes.SERVER_SHUTDOWN, "Server shutting down");
+	}
+
+	/** Called whenever an agent finished its HELLO (used by the status service). */
+	static onHello(listener: (connection: AgentConnection) => void) {
+		this.helloListeners.add(listener);
+		return () => this.helloListeners.delete(listener);
+	}
+
+	/** Registers the handler for an agent event (`evt` frames other than HELLO). */
+	static onEvent(
+		cmd: string,
+		handler: (connection: AgentConnection, payload: Record<string, unknown>) => void | Promise<void>,
+	) {
+		this.eventHandlers.set(cmd, handler);
+	}
+
+	private static async handleUpgrade(request: { headers: Headers; context: AgentPeerContext }) {
+		const header = request.headers.get("authorization");
+		const token = header?.startsWith("Bearer ") ? header.slice("Bearer ".length).trim() : null;
+
+		const agent = token ? await AgentAuth.authenticate(token) : null;
+		if (!agent) {
+			return new Response("Missing or invalid agent credentials", { status: 401 });
+		}
+
+		request.context.agentID = agent.id;
+		request.context.ownerID = agent.owner_id;
+		request.context.kind = agent.kind;
+	}
+
+	private static handleOpen(peer: Peer) {
+		const { agentID, ownerID, kind } = peer.context as AgentPeerContext;
+		if (agentID === undefined || ownerID === undefined || kind === undefined) {
+			peer.close(1008, "Unauthenticated");
+			return;
+		}
+
+		const connection = new AgentConnection(agentID, ownerID, kind, peer);
+		AgentRegistry.register(connection);
+		Logger.debug(`Agent ${agentID} connected, waiting for HELLO`);
+
+		setTimeout(() => {
+			if (!connection.hello && !connection.isClosed) {
+				AgentRegistry.unregister(connection.peerID);
+				connection.close(AgentCloseCodes.INVALID_HELLO, "No HELLO received");
+			}
+		}, this.HELLO_TIMEOUT_MS).unref?.();
+	}
+
+	private static async handleMessage(peer: Peer, text: string) {
+		const connection = AgentRegistry.getByPeer(peer.id);
+		if (!connection) return;
+
+		const event = connection.handleText(text);
+		if (!event) return;
+
+		if (event.cmd === "HELLO") {
+			await this.handleHello(connection, event.p);
+			return;
+		}
+
+		if (!connection.hello) {
+			Logger.warn(`Agent ${connection.agentID} sent ${event.cmd} before HELLO`);
+			return;
+		}
+
+		const handler = this.eventHandlers.get(event.cmd);
+		if (!handler) {
+			Logger.debug(`Agent ${connection.agentID}: ignored unknown event ${event.cmd}`);
+			return;
+		}
+
+		try {
+			await handler(connection, event.p);
+		} catch (error) {
+			Logger.error(`Agent ${connection.agentID}: handling ${event.cmd} failed`, error);
+		}
+	}
+
+	private static async handleHello(connection: AgentConnection, payload: Record<string, unknown>) {
+		const hello = AgentProtocol.Hello.safeParse(payload);
+		if (!hello.success || hello.data.kind !== connection.kind) {
+			AgentRegistry.unregister(connection.peerID);
+			connection.close(
+				AgentCloseCodes.INVALID_HELLO,
+				hello.success
+					? "Agent kind doesn't match"
+					: `Unsupported HELLO (protocol ${AgentProtocol.VERSION} expected)`,
+			);
+			return;
+		}
+
+		connection.hello = hello.data;
+
+		await DB.instance()
+			.update(DB.Tables.agents)
+			.set({
+				capabilities: hello.data.capabilities,
+				version: hello.data.version,
+				info: hello.data.info ?? null,
+				last_seen_at: Date.now(),
+			})
+			.where(eq(DB.Tables.agents.id, connection.agentID));
+		this.lastSeenWrites.set(connection.agentID, Date.now());
+
+		Logger.info(`Agent ${connection.agentID} online (${hello.data.kind} ${hello.data.version})`);
+
+		for (const listener of this.helloListeners) {
+			try {
+				listener(connection);
+			} catch (error) {
+				Logger.error("HELLO listener failed", error);
+			}
+		}
+	}
+
+	private static async handleClose(peer: Peer) {
+		const connection = AgentRegistry.unregister(peer.id);
+		if (!connection) return;
+
+		Logger.info(`Agent ${connection.agentID} disconnected`);
+		await this.writeLastSeen(connection.agentID, true);
+	}
+
+	private static async keepalive() {
+		const now = Date.now();
+
+		for (const connection of AgentRegistry.all()) {
+			if (now - connection.lastMessageAt > this.IDLE_TIMEOUT_MS) {
+				Logger.warn(`Agent ${connection.agentID} unresponsive, closing`);
+				AgentRegistry.disconnect(
+					connection.agentID,
+					AgentCloseCodes.UNRESPONSIVE,
+					"No answer to keep-alive",
+				);
+				continue;
+			}
+
+			if (!connection.hello) continue;
+
+			connection
+				.request("PING", {}, 10_000)
+				.then(() => this.writeLastSeen(connection.agentID))
+				.catch((error) => {
+					if (!(error instanceof AgentRequestError)) Logger.error("Keep-alive failed", error);
+				});
+		}
+	}
+
+	private static async writeLastSeen(agentID: number, force = false) {
+		const now = Date.now();
+		const lastWrite = this.lastSeenWrites.get(agentID) ?? 0;
+		if (!force && now - lastWrite < this.LAST_SEEN_WRITE_INTERVAL_MS) return;
+
+		this.lastSeenWrites.set(agentID, now);
+		try {
+			await DB.instance()
+				.update(DB.Tables.agents)
+				.set({ last_seen_at: now })
+				.where(eq(DB.Tables.agents.id, agentID));
+		} catch (error) {
+			Logger.warn(`Failed to store last_seen_at of agent ${agentID}`, error);
+		}
+	}
+}
diff --git a/server/lib/agents/protocol.ts b/server/lib/agents/protocol.ts
new file mode 100644
index 0000000..3e788bb
--- /dev/null
+++ b/server/lib/agents/protocol.ts
@@ -0,0 +1,117 @@
+import { z } from "zod";
+import { AgentSettings } from "../api/utils/shared-models/netigniteData";
+
+/**
+ * NetIgnite agent protocol, version 2.
+ *
+ * Agents keep one WebSocket to `/ws/agent` open (`Authorization: Bearer netignite_agent_<id>:<secret>`).
+ * Every message is a JSON text frame:
+ *
+ * - `{ "t": "req", "id": <u32>, "cmd": "WAKE", "p": { ... } }`: a request (server → agent)
+ * - `{ "t": "res", "id": <u32>, "ok": true, "p": { ... } }`: the answer, same `id`
+ * - `{ "t": "res", "id": <u32>, "ok": false, "err": "..." }`: a failed request
+ * - `{ "t": "evt", "cmd": "HELLO", "p": { ... } }`: an event without an answer (agent → server)
+ *
+ * The first frame an agent sends is the `HELLO` event. The server only sends commands whose
+ * capability the agent listed there.
+ */
+export namespace AgentProtocol {
+	export const VERSION = 2;
+
+	/** Largest frame the server accepts from an agent. */
+	export const MAX_FRAME_BYTES = 64 * 1024;
+
+	export const Capabilities = [
+		// WAKE
+		"wake",
+		// STATUS targets and probes
+		"status.link_local",
+		"status.ip",
+		"status.host",
+		"status.tcp",
+		// The agent runs on the device itself (Linux agent): HOST_STATUS events, HOST_CONTROL
+		"host.status",
+		"host.control",
+	] as const;
+	export type Capability = (typeof Capabilities)[number];
+
+	const U32 = z.number().int().min(0).max(0xffffffff);
+	const Payload = z.record(z.string(), z.unknown());
+
+	export const Frame = z.discriminatedUnion("t", [
+		z.object({
+			t: z.literal("req"),
+			id: U32,
+			cmd: z.string().min(1).max(64),
+			p: Payload.default({}),
+		}),
+		z.object({
+			t: z.literal("res"),
+			id: U32,
+			ok: z.boolean(),
+			p: Payload.optional(),
+			err: z.string().max(1024).optional(),
+		}),
+		z.object({ t: z.literal("evt"), cmd: z.string().min(1).max(64), p: Payload.default({}) }),
+	]);
+	export type Frame = z.infer<typeof Frame>;
+
+	export const Hello = z.object({
+		protocol: z.literal(VERSION),
+		kind: AgentSettings.Kind,
+		version: z.string().min(1).max(64),
+		// Unknown capabilities are kept, so newer agents can talk to an older server.
+		capabilities: z.array(z.string().max(64)).max(64),
+		// Free-form diagnostics shown in the dashboard (IP addresses, RSSI, reset reason, ...).
+		info: z.record(z.string(), z.unknown()).optional(),
+	});
+	export type Hello = z.infer<typeof Hello>;
+
+	export const HostStatus = z.object({
+		hostname: z.string().max(255).optional(),
+		uptime_s: z.number().nonnegative().optional(),
+	});
+	export type HostStatus = z.infer<typeof HostStatus>;
+
+	export type StatusTarget =
+		| { type: "link_local"; mac: string }
+		| { type: "ip"; address: string }
+		| { type: "host"; host: string };
+
+	/** Requests the server sends, with the payload the agent answers with. */
+	export interface Commands {
+		/** Keep-alive. */
+		PING: { req: Record<string, never>; res: Record<string, never> };
+		/** Send a Wake-on-LAN magic packet. */
+		WAKE: { req: { mac: string; port: number }; res: Record<string, never> };
+		/** Check whether a device answers. Online if any requested probe answers. */
+		STATUS: {
+			req: { target: StatusTarget; icmp: boolean; tcp_port?: number };
+			res: { online: boolean };
+		};
+		/** Shut down or reboot the machine the agent runs on. */
+		HOST_CONTROL: { req: { action: "shutdown" | "reboot" }; res: Record<string, never> };
+	}
+	export type Command = keyof Commands;
+
+	/** Capability an agent must have advertised before the server sends a command. */
+	export function requiredCapability(
+		command: Command,
+		payload: Commands[Command]["req"],
+	): Capability | null {
+		switch (command) {
+			case "PING":
+				return null;
+			case "WAKE":
+				return "wake";
+			case "HOST_CONTROL":
+				return "host.control";
+			case "STATUS": {
+				const { target } = payload as Commands["STATUS"]["req"];
+				if (target.type === "link_local") return "status.link_local";
+				if (target.type === "ip") return "status.ip";
+				return "status.host";
+			}
+		}
+	}
+}
diff --git a/server/lib/agents/registry.ts b/server/lib/agents/registry.ts
new file mode 100644
index 0000000..89250d2
--- /dev/null
+++ b/server/lib/agents/registry.ts
@@ -0,0 +1,79 @@
+import type { AgentConnection } from "./connection";
+
+/** WebSocket close codes the server uses for agents. */
+export const AgentCloseCodes = {
+	SERVER_SHUTDOWN: 1001,
+	/** The same agent connected again; the older connection is dropped. */
+	REPLACED: 4000,
+	/** No HELLO after connecting, or an invalid one. */
+	INVALID_HELLO: 4001,
+	/** Keep-alive pings went unanswered. */
+	UNRESPONSIVE: 4002,
+	/** The agent was re-enrolled; its old credential no longer works. */
+	CREDENTIAL_REVOKED: 4003,
+	/** The agent was deleted. */
+	DELETED: 4004,
+} as const;
+
+/** Live agent connections, by agent id and by WebSocket peer id. */
+export class AgentRegistry {
+	private static readonly byAgent = new Map<number, AgentConnection>();
+	private static readonly byPeer = new Map<string, AgentConnection>();
+
+	/** Adds a connection. An existing connection of the same agent is closed first. */
+	static register(connection: AgentConnection) {
+		const previous = this.byAgent.get(connection.agentID);
+		if (previous) {
+			this.unregister(previous.peerID);
+			previous.close(AgentCloseCodes.REPLACED, "Replaced by a new connection");
+		}
+
+		this.byAgent.set(connection.agentID, connection);
+		this.byPeer.set(connection.peerID, connection);
+	}
+
+	/** Removes a connection (it is already closing). Returns it, or null if it was replaced earlier. */
+	static unregister(peerID: string) {
+		const connection = this.byPeer.get(peerID);
+		if (!connection) return null;
+
+		this.byPeer.delete(peerID);
+		if (this.byAgent.get(connection.agentID) === connection) {
+			this.byAgent.delete(connection.agentID);
+		}
+		connection.detach();
+		return connection;
+	}
+
+	static getByPeer(peerID: string) {
+		return this.byPeer.get(peerID) ?? null;
+	}
+
+	/** The agent's connection, once it has sent a valid HELLO. */
+	static get(agentID: number) {
+		const connection = this.byAgent.get(agentID);
+		return connection?.hello && !connection.isClosed ? connection : null;
+	}
+
+	static isOnline(agentID: number) {
+		return this.get(agentID) !== null;
+	}
+
+	static all() {
+		return [...this.byAgent.values()];
+	}
+
+	static disconnect(agentID: number, code: number, reason: string) {
+		const connection = this.byAgent.get(agentID);
+		if (!connection) return;
+
+		this.unregister(connection.peerID);
+		connection.close(code, reason);
+	}
+
+	static disconnectAll(code: number, reason: string) {
+		for (const connection of this.all()) {
+			this.disconnect(connection.agentID, code, reason);
+		}
+	}
+}
diff --git a/server/lib/api/index.ts b/server/lib/api/index.ts
new file mode 100644
index 0000000..b45a0cc
--- /dev/null
+++ b/server/lib/api/index.ts
@@ -0,0 +1,139 @@
+import { Scalar } from "@scalar/hono-api-reference";
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+import { HTTPException } from "hono/http-exception";
+import { prettyJSON } from "hono/pretty-json";
+import { openAPIRouteHandler } from "hono-openapi";
+import { AppConstants } from "../utils/constants";
+import { Logger } from "../utils/logger";
+import type { APIVersionRouter } from "./utils/apiVersionRouter";
+import { APIv1Router } from "./versions/v1";
+
+export class API {
+	protected static server: Bun.Server<undefined> | null = null;
+	protected static app: Hono | null;
+
+	protected static latestVersion: number | null = null;
+
+	protected static registerVersion(versionRouter: APIVersionRouter, disableDocs: boolean) {
+		if (!this.app) {
+			throw new Error("API not initialized. Call API.init() first.");
+		}
+
+		this.app.route(`/v${versionRouter.version}`, versionRouter.router);
+
+		if (!this.latestVersion || versionRouter.version > this.latestVersion) {
+			this.latestVersion = versionRouter.version;
+		}
+
+		if (!disableDocs) {
+			this.app.get(
+				`/docs/v${versionRouter.version}/openapi`,
+				openAPIRouteHandler(versionRouter.router, versionRouter.openAPIConfig),
+			);
+
+			this.app.get(
+				`/docs/v${versionRouter.version}`,
+				// Relative, so the docs page also finds its spec when the API is mounted under a prefix.
+				Scalar({ url: `./v${versionRouter.version}/openapi` }),
+			);
+		}
+	}
+
+	/**
+	 * Build the Hono app: prettyJSON, CORS (allow the frontend origins), error handler,
+	 * versioned routes, docs, /health, and a `/` redirect to the latest docs. Does NOT
+	 * call Bun.serve — call `start(port, hostname)` for that.
+	 */
+	static async init(frontendUrls: string[], disableDocs: boolean) {
+		this.app = new Hono();
+
+		this.app.use(prettyJSON());
+
+		this.app.use(
+			"*",
+			cors({
+				origin: frontendUrls,
+				allowHeaders: ["Content-Type", "Authorization"],
+				allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
+				maxAge: 600,
+				credentials: true,
+			}),
+		);
+
+		this.app.onError((err, c) => {
+			if (err instanceof HTTPException) {
+				// Return only safe error metadata — never leak Zod validation details
+				return c.json(
+					{
+						success: false,
+						code: err.status,
+						message: "Your input is invalid",
+					},
+					err.status,
+				);
+			}
+
+			Logger.error("Unhandled API error:", err);
+			return c.json({ success: false, code: 500, message: "Internal Server Error" }, 500);
+		});
+
+		this.registerVersion(new APIv1Router(), disableDocs);
+
+		this.app.get("/health", (c) => {
+			return c.json({
+				success: true,
+				code: 200,
+				message: `${AppConstants.APP_NAME} API is running`,
+				data: null,
+			});
+		});
+
+		if (!disableDocs) {
+			this.app.get("/", (c) => {
+				// Keep any mount prefix (e.g. `/api` in the full-stack template).
+				const base = c.req.path.endsWith("/") ? c.req.path.slice(0, -1) : c.req.path;
+				return c.redirect(`${base}/docs/v${this.latestVersion}`);
+			});
+		} else {
+			this.app.get("/", (c) => {
+				return c.json({
+					success: true,
+					code: 200,
+					message: `${AppConstants.APP_NAME} API is running. Documentation is disabled.`,
+					data: null,
+				});
+			});
+		}
+	}
+
+	static async start(port: number, hostname: string) {
+		if (!this.app) {
+			throw new Error(`${AppConstants.APP_NAME} API not initialized. Call API.init() first.`);
+		}
+
+		this.server = Bun.serve({ port, hostname, fetch: this.app.fetch });
+
+		const serverHostnameStr = this.server.hostname?.includes(":")
+			? `[${this.server.hostname}]`
+			: this.server.hostname;
+
+		Logger.log(
+			`${AppConstants.APP_NAME} API listening on ${this.server.protocol}://${serverHostnameStr}:${this.server.port}`,
+		);
+	}
+
+	static async stop() {
+		if (this.server) {
+			this.server.stop();
+			Logger.log(`${AppConstants.APP_NAME} API server stopped.`);
+		}
+	}
+
+	static getApp(): Hono {
+		if (!this.app) {
+			throw new Error(`${AppConstants.APP_NAME} API not initialized. Call API.init() first.`);
+		}
+		return this.app;
+	}
+}
diff --git a/server/lib/api/utils/api-res.ts b/server/lib/api/utils/api-res.ts
new file mode 100644
index 0000000..2a57096
--- /dev/null
+++ b/server/lib/api/utils/api-res.ts
@@ -0,0 +1,174 @@
+import { type Context } from "hono";
+import { z } from "zod";
+
+export class APIResponse {
+	static success<Data extends APIResponse.Types.RequiredReturnData>(
+		c: Context,
+		message: string,
+		data: Data,
+	) {
+		return c.json({ success: true, code: 200, message, data }, 200);
+	}
+
+	static successNoData(c: Context, message: string) {
+		return c.json({ success: true, code: 200, message, data: null }, 200);
+	}
+
+	static created<Data extends APIResponse.Types.RequiredReturnData>(
+		c: Context,
+		message: string,
+		data: Data,
+	) {
+		return c.json({ success: true, code: 201, message, data }, 201);
+	}
+
+	static createdNoData(c: Context, message: string) {
+		return c.json({ success: true, code: 201, message, data: null }, 201);
+	}
+
+	static accepted<Data extends APIResponse.Types.RequiredReturnData>(
+		c: Context,
+		message: string,
+		data: Data,
+	) {
+		return c.json({ success: true, code: 202, message, data }, 202);
+	}
+
+	static serverError(c: Context, message: string) {
+		return c.json({ success: false, code: 500, message }, 500);
+	}
+
+	static unauthorized(c: Context, message: string) {
+		return c.json({ success: false, code: 401, message }, 401);
+	}
+	static forbidden(c: Context, message: string) {
+		return c.json({ success: false, code: 403, message }, 403);
+	}
+
+	static badRequest(c: Context, message: string) {
+		return c.json({ success: false, code: 400, message }, 400);
+	}
+
+	static notFound(c: Context, message: string) {
+		return c.json({ success: false, code: 404, message }, 404);
+	}
+
+	static conflict(c: Context, message: string) {
+		return c.json({ success: false, code: 409, message }, 409);
+	}
+
+	static tooManyRequests(c: Context, message: string) {
+		return c.json({ success: false, code: 429, message }, 429);
+	}
+
+	static badGateway(c: Context, message: string) {
+		return c.json({ success: false, code: 502, message }, 502);
+	}
+
+	static serviceUnavailable(c: Context, message: string) {
+		return c.json({ success: false, code: 503, message }, 503);
+	}
+
+	static gatewayTimeout(c: Context, message: string) {
+		return c.json({ success: false, code: 504, message }, 504);
+	}
+}
+
+export namespace APIResponse.Utils {
+	export function genericErrorSchema<Code extends number, Message extends string>(
+		code: Code,
+		message: Message,
+	) {
+		return z.object({
+			success: z.literal(false),
+			code: z.literal(code),
+			message: z.literal(message),
+		});
+	}
+
+	export function createErrorSchemaFactory<Code extends number>(code: Code) {
+		return function <Message extends string>(message: Message) {
+			return genericErrorSchema(code, message);
+		};
+	}
+}
+
+export namespace APIResponse.Schema {
+	export function success<
+		Message extends string,
+		Data extends z.ZodType<APIResponse.Types.NonRequiredReturnData>,
+	>(message: Message, data: Data) {
+		return z.object({
+			success: z.literal(true),
+			code: z.literal(200),
+			message: z.literal(message),
+			data,
+		});
+	}
+
+	export function accepted<
+		Message extends string,
+		Data extends z.ZodType<APIResponse.Types.RequiredReturnData>,
+	>(message: Message, data: Data) {
+		return z.object({
+			success: z.literal(true),
+			code: z.literal(202),
+			message: z.literal(message),
+			data,
+		});
+	}
+
+	export function created<
+		Message extends string,
+		Data extends z.ZodType<APIResponse.Types.NonRequiredReturnData>,
+	>(message: Message, data: Data) {
+		return z.object({
+			success: z.literal(true),
+			code: z.literal(201),
+			message: z.literal(message),
+			data,
+		});
+	}
+
+	export const serverError = APIResponse.Utils.createErrorSchemaFactory(500);
+	export const unauthorized = APIResponse.Utils.createErrorSchemaFactory(401);
+	export const forbidden = APIResponse.Utils.createErrorSchemaFactory(403);
+	export const badRequest = APIResponse.Utils.createErrorSchemaFactory(400);
+	export const notFound = APIResponse.Utils.createErrorSchemaFactory(404);
+	export const conflict = APIResponse.Utils.createErrorSchemaFactory(409);
+	export const tooManyRequests = APIResponse.Utils.createErrorSchemaFactory(429);
+	export const badGateway = APIResponse.Utils.createErrorSchemaFactory(502);
+	export const serviceUnavailable = APIResponse.Utils.createErrorSchemaFactory(503);
+	export const gatewayTimeout = APIResponse.Utils.createErrorSchemaFactory(504);
+}
+
+export namespace APIResponse.Types {
+	// Can be JSON object or Array
+	export type RequiredReturnData = { [key: string]: any } | Array<any>;
+
+	export type NonRequiredReturnData = null | RequiredReturnData;
+
+	export type BasicReturnData =
+		| ReturnType<typeof APIResponse.success>
+		| ReturnType<typeof APIResponse.accepted>
+		| ReturnType<typeof APIResponse.created>
+		| ReturnType<typeof APIResponse.serverError>
+		| ReturnType<typeof APIResponse.unauthorized>
+		| ReturnType<typeof APIResponse.forbidden>
+		| ReturnType<typeof APIResponse.badRequest>
+		| ReturnType<typeof APIResponse.notFound>
+		| ReturnType<typeof APIResponse.conflict>
+		| ReturnType<typeof APIResponse.tooManyRequests>;
+
+	export type BasicResponseSchema =
+		| z.infer<ReturnType<typeof APIResponse.Schema.success<any, z.ZodType<NonRequiredReturnData>>>>
+		| z.infer<ReturnType<typeof APIResponse.Schema.accepted<any, z.ZodType<RequiredReturnData>>>>
+		| z.infer<ReturnType<typeof APIResponse.Schema.created<any, z.ZodType<RequiredReturnData>>>>
+		| z.infer<ReturnType<typeof APIResponse.Schema.serverError<any>>>
+		| z.infer<ReturnType<typeof APIResponse.Schema.unauthorized<any>>>
+		| z.infer<ReturnType<typeof APIResponse.Schema.forbidden<any>>>
+		| z.infer<ReturnType<typeof APIResponse.Schema.badRequest<any>>>
+		| z.infer<ReturnType<typeof APIResponse.Schema.notFound<any>>>
+		| z.infer<ReturnType<typeof APIResponse.Schema.conflict<any>>>
+		| z.infer<ReturnType<typeof APIResponse.Schema.tooManyRequests<any>>>;
+}
diff --git a/server/lib/api/utils/apiVersionRouter.ts b/server/lib/api/utils/apiVersionRouter.ts
new file mode 100644
index 0000000..35e2aa6
--- /dev/null
+++ b/server/lib/api/utils/apiVersionRouter.ts
@@ -0,0 +1,55 @@
+import { Hono } from "hono";
+import { HonoBase } from "hono/hono-base";
+import type { GenerateSpecOptions } from "hono-openapi";
+import { Logger } from "../../utils/logger";
+
+export abstract class APIVersionRouter<
+	T extends APIVersionRouter.InitSettings = APIVersionRouter.InitSettings,
+> {
+	readonly version: number;
+	readonly openAPIConfig: Readonly<APIVersionRouter.OpenAPIConfig>;
+	readonly router: HonoBase;
+
+	protected constructor(settings: Readonly<T>) {
+		this.version = settings.version;
+		this.openAPIConfig = settings.openAPIConfig;
+
+		if (settings.routes instanceof HonoBase) {
+			this.router = settings.routes;
+		} else if (Array.isArray(settings.routes)) {
+			this.router = new Hono();
+
+			for (const route of settings.routes as Array<{ router: HonoBase } | HonoBase>) {
+				if (route instanceof HonoBase) {
+					this.router.route("/", route);
+				} else if ("router" in route && route.router instanceof HonoBase) {
+					this.router.route("/", route.router);
+				} else {
+					Logger.error(
+						"Invalid route configuration: Each route must be a Hono instance or an object with a 'router' property that is a Hono instance.",
+						route,
+					);
+					throw new Error(
+						"Invalid route configuration: Each route must be a Hono instance or an object with a 'router' property that is a Hono instance.",
+					);
+				}
+			}
+		} else {
+			throw new Error(
+				"Invalid route configuration: 'routes' must be either a Hono instance or an array of Hono instances or objects with a 'router' property that is a Hono instance.",
+			);
+		}
+	}
+}
+
+export namespace APIVersionRouter {
+	export interface InitSettings {
+		version: number;
+		openAPIConfig: OpenAPIConfig;
+		routes: Routable;
+	}
+
+	export type OpenAPIConfig = Partial<GenerateSpecOptions>;
+
+	export type Routable = HonoBase | Array<{ router: HonoBase } | HonoBase>;
+}
diff --git a/server/lib/api/utils/authHandler.ts b/server/lib/api/utils/authHandler.ts
new file mode 100644
index 0000000..87c896b
--- /dev/null
+++ b/server/lib/api/utils/authHandler.ts
@@ -0,0 +1,405 @@
+import { eq } from "drizzle-orm";
+import type { Context } from "hono";
+import { DB } from "../../db";
+import type { DrizzleDB } from "../../db/utils";
+import { AppConstants } from "../../utils/constants";
+import { LCrypt } from "../../utils/crypto/lcrypt";
+import type { UserAccountSettings } from "./shared-models/accountData";
+
+// Opaque bearer-token auth. Token shape: `<prefix><id>:<base>`
+//   prefix — SESSION_TOKEN_PREFIX or API_KEY_PREFIX (carries the kind)
+//   id     — 32 random bytes hex; indexes the DB row
+//   base   — 32 random bytes hex; stored ONLY as Bun.password.hash(...)
+// The full token is handed to the client once at creation; the server re-resolves
+// it against the DB on every request (no JWT, no signed claims).
+
+export class AuthUtils {
+	static async getUserRole(userID: number, tx: DrizzleDB = DB.instance()) {
+		const user = await tx.select().from(DB.Tables.users).where(eq(DB.Tables.users.id, userID)).get();
+		if (!user) {
+			return null;
+		}
+		return user.role;
+	}
+
+	/** 32 random bytes as a 64-char hex string — used as the token id (DB row key). */
+	static createRandomTokenID() {
+		return LCrypt.randomBytes(32).toString("hex");
+	}
+
+	/** 32 random bytes as a 64-char hex string — the secret half, stored only hashed. */
+	static createBaseToken() {
+		return LCrypt.randomBytes(32).toString("hex");
+	}
+
+	static getFullToken(prefix: AuthHandler.TOKEN_PREFIX, tokenID: string, tokenBase: string) {
+		return `${prefix}${tokenID}:${tokenBase}`;
+	}
+
+	/** Split a full token into prefix/id/base, or null if the shape is wrong. */
+	static getTokenParts(fullToken: string) {
+		const parts = fullToken.split(":") as [string, string];
+		if (parts.length !== 2) {
+			return null;
+		}
+		if (parts[0].startsWith(SessionHandler.SESSION_TOKEN_PREFIX)) {
+			return {
+				prefix: SessionHandler.SESSION_TOKEN_PREFIX,
+				id: parts[0].substring(SessionHandler.SESSION_TOKEN_PREFIX.length),
+				base: parts[1],
+			} satisfies AuthHandler.TokenParts;
+		} else if (parts[0].startsWith(APIKeyHandler.API_KEY_PREFIX)) {
+			return {
+				prefix: APIKeyHandler.API_KEY_PREFIX,
+				id: parts[0].substring(APIKeyHandler.API_KEY_PREFIX.length),
+				base: parts[1],
+			} satisfies AuthHandler.TokenParts;
+		} else {
+			return null;
+		}
+	}
+
+	static hashTokenBase(tokenBase: string) {
+		return Bun.password.hash(tokenBase);
+	}
+
+	static verifyHashedTokenBase(tokenBase: string, hashedToken: string) {
+		return Bun.password.verify(tokenBase, hashedToken);
+	}
+}
+
+export class SessionHandler {
+	static readonly SESSION_TOKEN_PREFIX = `${AppConstants.APP_KEYS_PREFIX}_sess_`;
+
+	static async createSession(userID: number, tx: DrizzleDB = DB.instance()) {
+		const tokenID = AuthUtils.createRandomTokenID();
+		const tokenBase = AuthUtils.createBaseToken();
+
+		const fullToken = AuthUtils.getFullToken(this.SESSION_TOKEN_PREFIX, tokenID, tokenBase);
+
+		const result = await tx
+			.insert(DB.Tables.sessions)
+			.values({
+				id: tokenID,
+				hashed_token: await AuthUtils.hashTokenBase(tokenBase),
+				user_id: userID,
+				user_role: (await AuthUtils.getUserRole(userID, tx)) || "user",
+				expires_at: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).getTime(), // 7 days from now
+			})
+			.returning()
+			.get();
+
+		return {
+			token: fullToken,
+			user_id: result.user_id,
+			user_role: result.user_role,
+			created_at: result.created_at,
+			expires_at: result.expires_at,
+		} satisfies Omit<DB.Models.Session, "id" | "hashed_token"> & { token: string };
+	}
+
+	static async getSession(tokenParts: AuthHandler.TokenParts, tx: DrizzleDB = DB.instance()) {
+		if (!tokenParts.prefix.startsWith(this.SESSION_TOKEN_PREFIX)) {
+			return null;
+		}
+
+		const session = await tx
+			.select()
+			.from(DB.Tables.sessions)
+			.where(eq(DB.Tables.sessions.id, tokenParts.id))
+			.get();
+		if (!session) {
+			return null;
+		}
+
+		if (!(await AuthUtils.verifyHashedTokenBase(tokenParts.base, session.hashed_token))) {
+			return null;
+		}
+
+		return session;
+	}
+
+	static async isValidSession(session: DB.Models.Session, tx: DrizzleDB = DB.instance()) {
+		if (!session) {
+			return false;
+		}
+
+		if (session.expires_at < Date.now()) {
+			// Delete expired session
+			await tx.delete(DB.Tables.sessions).where(eq(DB.Tables.sessions.id, session.id));
+
+			return false;
+		}
+
+		return true;
+	}
+
+	static async inValidateAllSessionsForUser(userID: number, tx: DrizzleDB = DB.instance()) {
+		await tx.delete(DB.Tables.sessions).where(eq(DB.Tables.sessions.user_id, userID));
+	}
+
+	static async inValidateSession(tokenID: string, tx: DrizzleDB = DB.instance()) {
+		await tx.delete(DB.Tables.sessions).where(eq(DB.Tables.sessions.id, tokenID));
+	}
+
+	static async changeUserRoleInSessions(
+		userID: number,
+		newRole: UserAccountSettings.Role,
+		tx: DrizzleDB = DB.instance(),
+	) {
+		await tx
+			.update(DB.Tables.sessions)
+			.set({
+				user_role: newRole,
+			})
+			.where(eq(DB.Tables.sessions.user_id, userID));
+	}
+}
+
+export class APIKeyHandler {
+	static readonly API_KEY_PREFIX = `${AppConstants.APP_KEYS_PREFIX}_apikey_`;
+
+	static async createApiKey(
+		userID: number,
+		description: string,
+		expiresInDays?: number,
+		tx: DrizzleDB = DB.instance(),
+	) {
+		const expiresAt = expiresInDays
+			? new Date(Date.now() + expiresInDays * 24 * 60 * 60 * 1000).getTime()
+			: null;
+
+		const tokenID = AuthUtils.createRandomTokenID();
+		const tokenBase = AuthUtils.createBaseToken();
+
+		const fullToken = AuthUtils.getFullToken(this.API_KEY_PREFIX, tokenID, tokenBase);
+
+		const result = await tx
+			.insert(DB.Tables.apiKeys)
+			.values({
+				id: tokenID,
+				hashed_token: await AuthUtils.hashTokenBase(tokenBase),
+				user_id: userID,
+				user_role: (await AuthUtils.getUserRole(userID, tx)) || "user",
+				description: description,
+				expires_at: expiresAt,
+			})
+			.returning()
+			.get();
+
+		return {
+			token: fullToken,
+			user_id: result.user_id,
+			user_role: result.user_role,
+			created_at: result.created_at,
+			expires_at: result.expires_at,
+			description: result.description,
+		} satisfies Omit<DB.Models.ApiKey, "id" | "hashed_token"> & { token: string };
+	}
+
+	static async getApiKey(tokenParts: AuthHandler.TokenParts, tx: DrizzleDB = DB.instance()) {
+		if (!tokenParts.prefix.startsWith(this.API_KEY_PREFIX)) {
+			return null;
+		}
+
+		const key = await tx
+			.select()
+			.from(DB.Tables.apiKeys)
+			.where(eq(DB.Tables.apiKeys.id, tokenParts.id))
+			.get();
+
+		if (!key) {
+			return null;
+		}
+
+		if (!(await AuthUtils.verifyHashedTokenBase(tokenParts.base, key.hashed_token))) {
+			return null;
+		}
+
+		return key;
+	}
+
+	static async isValidApiKey(key: Omit<DB.Models.ApiKey, "id">, tx: DrizzleDB = DB.instance()) {
+		if (!key) {
+			return false;
+		}
+
+		if (key.expires_at && key.expires_at < Date.now()) {
+			return false;
+		}
+
+		return true;
+	}
+
+	static async deleteAllApiKeysForUser(userID: number, tx: DrizzleDB = DB.instance()) {
+		await tx.delete(DB.Tables.apiKeys).where(eq(DB.Tables.apiKeys.user_id, userID));
+	}
+
+	static async deleteApiKey(apiKeyID: string, tx: DrizzleDB = DB.instance()) {
+		await tx.delete(DB.Tables.apiKeys).where(eq(DB.Tables.apiKeys.id, apiKeyID));
+	}
+
+	static async changeUserRoleInApiKeys(
+		userID: number,
+		newRole: UserAccountSettings.Role,
+		tx: DrizzleDB = DB.instance(),
+	) {
+		await tx
+			.update(DB.Tables.apiKeys)
+			.set({
+				user_role: newRole,
+			})
+			.where(eq(DB.Tables.apiKeys.user_id, userID));
+	}
+}
+
+export class AuthHandler {
+	static getTokenType(token: string) {
+		if (token.startsWith(SessionHandler.SESSION_TOKEN_PREFIX)) {
+			return "session";
+		} else if (token.startsWith(APIKeyHandler.API_KEY_PREFIX)) {
+			return "apiKey";
+		} else {
+			return "unknown";
+		}
+	}
+
+	/** Resolve a bearer token into a session or apiKey auth context, or null. */
+	static async getAuthContext(
+		fullToken: string,
+		tx: DrizzleDB = DB.instance(),
+	): Promise<AuthHandler.AuthenticatedAuthContext | null> {
+		const tokenParts = AuthUtils.getTokenParts(fullToken);
+		if (!tokenParts) {
+			return null;
+		}
+
+		switch (this.getTokenType(fullToken)) {
+			case "session": {
+				const session = await SessionHandler.getSession(tokenParts, tx);
+				if (!session) {
+					return null;
+				}
+				return {
+					type: "session" as const,
+					...session,
+				};
+			}
+			case "apiKey": {
+				const apiKey = await APIKeyHandler.getApiKey(tokenParts, tx);
+				if (!apiKey) {
+					return null;
+				}
+				return {
+					type: "apiKey" as const,
+					...apiKey,
+				};
+			}
+			default:
+				return null;
+		}
+	}
+
+	static async isValidAuthContext(
+		authContext: AuthHandler.AuthContext,
+		tx: DrizzleDB = DB.instance(),
+	): Promise<boolean> {
+		switch (authContext.type) {
+			case "session":
+				return await SessionHandler.isValidSession(authContext, tx);
+			case "apiKey":
+				return await APIKeyHandler.isValidApiKey(authContext, tx);
+			default:
+				return false;
+		}
+	}
+
+	static async invalidateAuthContext(
+		authContext: AuthHandler.AuthContext,
+		tx: DrizzleDB = DB.instance(),
+	): Promise<void> {
+		switch (authContext.type) {
+			case "session":
+				await SessionHandler.inValidateSession(authContext.id, tx);
+				break;
+			case "apiKey":
+				await APIKeyHandler.deleteApiKey(authContext.id, tx);
+				break;
+		}
+	}
+
+	static async invalidateAllAuthContextsForUser(
+		userID: number,
+		tx: DrizzleDB = DB.instance(),
+	): Promise<void> {
+		return await Promise.all([
+			SessionHandler.inValidateAllSessionsForUser(userID, tx),
+			APIKeyHandler.deleteAllApiKeysForUser(userID, tx),
+		]).then(() => {
+			return;
+		});
+	}
+
+	static async changeUserRoleInAuthContexts(
+		userID: number,
+		newRole: UserAccountSettings.Role,
+		tx: DrizzleDB = DB.instance(),
+	): Promise<void> {
+		return await Promise.all([
+			SessionHandler.changeUserRoleInSessions(userID, newRole, tx),
+			APIKeyHandler.changeUserRoleInApiKeys(userID, newRole, tx),
+		]).then(() => {
+			return;
+		});
+	}
+}
+
+export namespace AuthHandler {
+	export type TOKEN_PREFIX =
+		| typeof SessionHandler.SESSION_TOKEN_PREFIX
+		| typeof APIKeyHandler.API_KEY_PREFIX;
+
+	export type AuthenticatedAuthContext = SessionAuthContext | ApiKeyAuthContext;
+	export type AuthContext = AuthenticatedAuthContext | UnauthenticatedAuthContext;
+
+	export interface SessionAuthContext extends DB.Models.Session {
+		readonly type: "session";
+	}
+
+	export interface ApiKeyAuthContext extends DB.Models.ApiKey {
+		readonly type: "apiKey";
+	}
+
+	export interface UnauthenticatedAuthContext {
+		readonly type: "unauthenticated";
+	}
+
+	export interface TokenParts {
+		readonly prefix: TOKEN_PREFIX;
+		readonly id: string;
+		readonly base: string;
+	}
+}
+
+export namespace AuthHandler.AuthContext {
+	export function get(c: Context): AuthHandler.AuthContext {
+		// @ts-ignore
+		const authContext = c.get("authContext") as AuthHandler.AuthContext | undefined;
+		if (!authContext) {
+			throw new Error("Auth context not set in context");
+		}
+		return authContext;
+	}
+
+	export function getAsSession(c: Context): AuthHandler.SessionAuthContext {
+		return AuthHandler.AuthContext.get(c) as AuthHandler.SessionAuthContext;
+	}
+
+	export function getAsApiKey(c: Context): AuthHandler.ApiKeyAuthContext {
+		return AuthHandler.AuthContext.get(c) as AuthHandler.ApiKeyAuthContext;
+	}
+
+	export function set(c: Context, authContext: AuthHandler.AuthContext) {
+		return c.set("authContext", authContext);
+	}
+}
diff --git a/server/lib/api/utils/email.ts b/server/lib/api/utils/email.ts
new file mode 100644
index 0000000..6a4fe06
--- /dev/null
+++ b/server/lib/api/utils/email.ts
@@ -0,0 +1,142 @@
+import type { Transporter } from "nodemailer";
+import nodemailer from "nodemailer";
+import { ConfigHandler } from "../../utils/config";
+import { AppConstants } from "../../utils/constants";
+import { Logger } from "../../utils/logger";
+
+export interface CapturedEmail {
+	from: string;
+	to: string;
+	subject: string;
+	html: string;
+	text: string;
+}
+
+export class EmailService {
+	private static enabled = false;
+	private static transporter: Transporter | null = null;
+
+	private static _from: string = AppConstants.DEFAULT_SMTP_FROM;
+
+	/**
+	 * Initialise the email service from the current config.
+	 * Safe to call even when SMTP is unconfigured — logs a warning and disables itself.
+	 *
+	 * When `transporter` is provided it is used instead of creating a real SMTP
+	 * transport, making the service testable without a live SMTP server.
+	 */
+	static init(transporter?: Transporter) {
+		const config = ConfigHandler.getConfig()!;
+		const host = config.SMTP_HOST;
+
+		if (transporter) {
+			this.transporter = transporter;
+			this.enabled = true;
+			if (config.SMTP_FROM) {
+				this._from = config.SMTP_FROM;
+			}
+			Logger.log("Email service initialised (test transport)");
+			return;
+		}
+
+		if (!host) {
+			Logger.warn("SMTP not configured — email features disabled");
+			return;
+		}
+
+		try {
+			this.transporter = nodemailer.createTransport({
+				host,
+				port: config.SMTP_PORT ?? 587,
+				secure: config.SMTP_SECURE === true,
+				auth: config.SMTP_USERNAME
+					? {
+							user: config.SMTP_USERNAME,
+							pass: config.SMTP_PASSWORD ?? "",
+						}
+					: undefined,
+			});
+
+			if (config.SMTP_FROM) {
+				this._from = config.SMTP_FROM;
+			}
+
+			this.enabled = true;
+			Logger.log(`Email service initialised (SMTP ${host}:${config.SMTP_PORT ?? 587})`);
+		} catch (err) {
+			Logger.error(`Failed to initialise email service: ${err}`);
+		}
+	}
+
+	/** Reset the service to its unconfigured state (for testing). */
+	static async reset() {
+		this.transporter = null;
+		this.enabled = false;
+		this._from = AppConstants.DEFAULT_SMTP_FROM;
+	}
+
+	/** Whether the email service is configured and ready. */
+	static isEnabled() {
+		return this.enabled;
+	}
+
+	/** The configured "from" address. */
+	static getFrom(): string {
+		return this._from;
+	}
+
+	/**
+	 * Send a password-reset email to a user.
+	 *
+	 * This is fire-and-forget: errors are logged but never thrown, so callers
+	 * should use `.catch()` if they need to react to failures.
+	 */
+	static async sendPasswordResetEmail(to: string, rawToken: string) {
+		if (!this.transporter) {
+			Logger.warn("Email service not available — cannot send password reset email");
+			return;
+		}
+
+		const config = ConfigHandler.getConfig() as NonNullable<
+			ReturnType<typeof ConfigHandler.getConfig>
+		>;
+		const appUrl = config.APP_URL;
+		const resetUrl = `${appUrl}/auth/reset-password?token=${encodeURIComponent(rawToken)}`;
+
+		const html = [
+			"<!DOCTYPE html>",
+			'<html><head><meta charset="utf-8"></head><body>',
+			"<div style=\"max-width:560px;margin:0 auto;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif\">",
+			"",
+			'  <h2 style="color:#1a1a2e">Password Reset Request</h2>',
+			"",
+			`  <p>We received a request to reset the password for your ${AppConstants.APP_NAME} account.`,
+			"  If you made this request, click the button below to set a new password.</p>",
+			"",
+			`  <a href="${resetUrl}" style="display:inline-block;padding:12px 28px;margin:20px 0;background:#2563eb;color:#fff;text-decoration:none;border-radius:6px;font-weight:600">Reset Password</a>`,
+			"",
+			'  <p style="color:#666;font-size:14px">This link will expire in <strong>1 hour</strong>.</p>',
+			"",
+			'  <hr style="border:none;border-top:1px solid #e5e7eb;margin:24px 0">',
+			"",
+			'  <p style="color:#999;font-size:13px">',
+			"  If you did not request a password reset, you can safely ignore this email.",
+			"  Your account remains secure.</p>",
+			"",
+			"</div>",
+			"</body></html>",
+		].join("\n");
+
+		try {
+			const info = await this.transporter.sendMail({
+				from: this._from,
+				to,
+				subject: `${AppConstants.APP_NAME} — Password Reset Request`,
+				html,
+			});
+			Logger.log(`Password reset email sent to ${to} (message-id: ${info.messageId})`);
+		} catch (err) {
+			Logger.error(`Failed to send password reset email to ${to}: ${err}`);
+		}
+	}
+}
diff --git a/server/lib/api/utils/metadata.ts b/server/lib/api/utils/metadata.ts
new file mode 100644
index 0000000..9383a90
--- /dev/null
+++ b/server/lib/api/utils/metadata.ts
@@ -0,0 +1,95 @@
+import { eq } from "drizzle-orm";
+import { z } from "zod";
+import { DB } from "../../db/index";
+
+export class RuntimeMetadata {
+	protected static readonly schemas = {
+		dummy: z.record(z.string(), z.any()).default({}),
+		settings: z
+			.object({
+				/** Lets anyone create an account at /auth/signup. Off by default for self-hosted servers. */
+				registration_enabled: z.boolean().default(false),
+			})
+			.default({ registration_enabled: false }),
+		/** v1 id → v2 id of everything imported by `import-v1`, so re-running it skips them. */
+		v1_import: z
+			.object({
+				users: z.record(z.string(), z.number()).default({}),
+				agents: z.record(z.string(), z.number()).default({}),
+				devices: z.record(z.string(), z.number()).default({}),
+			})
+			.default({ users: {}, agents: {}, devices: {} }),
+	} as const;
+
+	static getV1ImportState() {
+		return this.getMetadata("v1_import");
+	}
+
+	static setV1ImportState(state: z.infer<(typeof this.schemas)["v1_import"]>) {
+		return this.setMetadata("v1_import", state);
+	}
+
+	static getSettings() {
+		return this.getMetadata("settings");
+	}
+
+	static async updateSettings(update: Partial<z.infer<(typeof this.schemas)["settings"]>>) {
+		const settings = { ...(await this.getSettings()), ...update };
+		await this.setMetadata("settings", settings);
+		return settings;
+	}
+
+	/** A key without a stored row reads as its schema default; nothing is written. */
+	protected static getMetadata<T extends keyof typeof this.schemas>(
+		key: T,
+	): Promise<z.infer<(typeof this.schemas)[T]>>;
+	/**
+	 * @deprecated Call `getMetadata(key)`: a missing key then reads as its schema default. With
+	 * `createIfNotFound`, a missing key is still written with its default (`true`) or throws (`false`).
+	 */
+	protected static getMetadata<T extends keyof typeof this.schemas>(
+		key: T,
+		createIfNotFound: boolean,
+	): Promise<z.infer<(typeof this.schemas)[T]>>;
+	protected static async getMetadata<T extends keyof typeof this.schemas>(
+		key: T,
+		createIfNotFound?: boolean,
+	): Promise<z.infer<(typeof this.schemas)[T]>> {
+		const record = await DB.instance()
+			.select()
+			.from(DB.Tables.metadata)
+			.where(eq(DB.Tables.metadata.key, key))
+			.get();
+
+		// Indexing the heterogeneous `schemas` record by the generic key widens the
+		// parse result to a union, so narrow it back to this key's inferred type.
+		type Parsed = z.infer<(typeof this.schemas)[T]>;
+
+		if (!record && createIfNotFound !== undefined) {
+			if (!createIfNotFound) {
+				throw new Error(`Metadata with key '${key}' not found`);
+			}
+
+			const defaultData = this.schemas[key].parse(undefined) as Parsed;
+			await this.setMetadata(key, defaultData);
+			return defaultData;
+		}
+
+		return this.schemas[key].parse(record?.data) as Parsed;
+	}
+
+	protected static async setMetadata<T extends keyof typeof this.schemas>(
+		key: T,
+		data: z.infer<(typeof this.schemas)[T]>,
+	): Promise<void> {
+		const parsed = this.schemas[key].parse(data);
+
+		await DB.instance()
+			.insert(DB.Tables.metadata)
+			.values({ key, data: parsed })
+			.onConflictDoUpdate({
+				target: DB.Tables.metadata.key,
+				set: { data: parsed },
+			});
+	}
+}
diff --git a/server/lib/api/utils/preferences.ts b/server/lib/api/utils/preferences.ts
new file mode 100644
index 0000000..457bebb
--- /dev/null
+++ b/server/lib/api/utils/preferences.ts
@@ -0,0 +1,114 @@
+import { and, eq } from "drizzle-orm";
+import { z } from "zod";
+import { DB } from "../../db";
+import type { DrizzleDB } from "../../db/utils";
+
+export namespace UserPreferences {
+	// Each preference key maps to a fixed zod schema, so clients can't store
+	// arbitrary data. Add new keys here, then expose typed getters/setters below.
+	export const schemas = {
+		onboarding: z.object({
+			// Whether the user has completed the one-time, platform-wide welcome
+			// onboarding (preferences setup). Drives the first-login redirect,
+			// so it defaults to false until the user finishes or skips it.
+			completed: z.boolean().default(false),
+		}),
+	} as const;
+
+	export type Key = keyof typeof schemas;
+
+	// Every preference at once, keyed by preference key. Derived from `schemas`
+	// so newly added preferences are included automatically.
+	export const allSchema = z.object(schemas);
+	export type All = z.infer<typeof allSchema>;
+}
+
+/**
+ * Per-user key/value preference storage (e.g. remote email content policy),
+ * mirroring `RuntimeMetadata` but scoped to `user_id` instead of being global.
+ * Each key has a fixed zod schema so clients cannot store arbitrary data.
+ */
+export class UserPreferencesHandler {
+	static async get<T extends UserPreferences.Key>(
+		userID: number,
+		key: T,
+		tx: DrizzleDB = DB.instance(),
+	): Promise<z.infer<(typeof UserPreferences.schemas)[T]>> {
+		const record = await tx
+			.select()
+			.from(DB.Tables.userPreferences)
+			.where(
+				and(eq(DB.Tables.userPreferences.user_id, userID), eq(DB.Tables.userPreferences.key, key)),
+			)
+			.get();
+
+		// Indexing the heterogeneous `schemas` record by the generic key widens the
+		// parse result to a union, so narrow it back to this key's inferred type.
+		type Parsed = z.infer<(typeof UserPreferences.schemas)[T]>;
+
+		if (!record) {
+			// schemas[key] has per-field (not top-level) defaults, so it must be
+			// parsed against `{}` rather than `undefined` to fill them in.
+			return UserPreferences.schemas[key].parse({}) as Parsed;
+		}
+
+		return UserPreferences.schemas[key].parse(record.data) as Parsed;
+	}
+
+	/**
+	 * Fetch every preference in a single query. Keys without a stored row are
+	 * filled with their defaults, and stored keys no longer in `schemas` are dropped.
+	 */
+	static async getAll(userID: number, tx: DrizzleDB = DB.instance()): Promise<UserPreferences.All> {
+		const records = await tx
+			.select()
+			.from(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, userID))
+			.all();
+
+		const stored = new Map(records.map((record) => [record.key, record.data]));
+
+		// Same `{}` fallback as `get`, since the defaults are per-field.
+		const raw = Object.fromEntries(
+			Object.keys(UserPreferences.schemas).map((key) => [key, stored.get(key) ?? {}]),
+		);
+
+		return UserPreferences.allSchema.parse(raw);
+	}
+
+	static async set<T extends UserPreferences.Key>(
+		userID: number,
+		key: T,
+		data: z.infer<(typeof UserPreferences.schemas)[T]>,
+		tx: DrizzleDB = DB.instance(),
+	): Promise<void> {
+		const parsed = UserPreferences.schemas[key].parse(data);
+
+		await tx
+			.insert(DB.Tables.userPreferences)
+			.values({
+				user_id: userID,
+				key,
+				data: parsed,
+			})
+			.onConflictDoUpdate({
+				target: [DB.Tables.userPreferences.user_id, DB.Tables.userPreferences.key],
+				set: { data: parsed },
+			});
+	}
+
+	static async getOnboarding(userID: number) {
+		return this.get(userID, "onboarding");
+	}
+
+	static async setOnboarding(
+		userID: number,
+		data: z.infer<(typeof UserPreferences.schemas)["onboarding"]>,
+	) {
+		await this.set(userID, "onboarding", data);
+	}
+
+	static async deleteAllForUser(userID: number, tx: DrizzleDB = DB.instance()): Promise<void> {
+		await tx.delete(DB.Tables.userPreferences).where(eq(DB.Tables.userPreferences.user_id, userID));
+	}
+}
diff --git a/server/lib/api/utils/shared-models/accountData.ts b/server/lib/api/utils/shared-models/accountData.ts
new file mode 100644
index 0000000..efc942b
--- /dev/null
+++ b/server/lib/api/utils/shared-models/accountData.ts
@@ -0,0 +1,33 @@
+import z from "zod";
+
+export namespace UserDataPolicies {
+	export const Username = z
+		.string()
+		.min(5, "Must be at least 5 characters")
+		.max(40, "Must be at most 40 characters")
+		.regex(
+			/^(?!.*[.-]{2})(?!.*--)(?!.*\.\.)[a-z0-9](?:[a-z0-9._-]{3,38}[a-z0-9_])?$/,
+			"Username can only contain lowercase letters, numbers, dots, underscores, and hyphens; no consecutive dots or hyphens; must start with a letter/number; can end with a letter, number, or underscore",
+		);
+
+	export type Username = z.infer<typeof Username>;
+
+	export const Password = z
+		.string()
+		.min(8, "Must be at least 8 characters")
+		.max(50, "Must be at most 50 characters")
+		// Combined regex (one pass) instead of separate per-rule checks
+		.regex(
+			/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[\W_]).+$/,
+			"Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character",
+		)
+		.describe("New password for the account");
+
+	export type Password = z.infer<typeof Password>;
+}
+
+export namespace UserAccountSettings {
+	export const Roles = ["admin", "user"] as const;
+	export const Role = z.enum(Roles);
+	export type Role = z.infer<typeof Role>;
+}
diff --git a/server/lib/api/utils/shared-models/api-helper-models.ts b/server/lib/api/utils/shared-models/api-helper-models.ts
new file mode 100644
index 0000000..ad0f0e2
--- /dev/null
+++ b/server/lib/api/utils/shared-models/api-helper-models.ts
@@ -0,0 +1,17 @@
+import { z } from "zod";
+
+export namespace ApiHelperModels.ListAll {
+	export const Query = z.object({
+		limit: z.coerce.number().int().positive().min(1).max(100).default(10),
+		offset: z.coerce.number().int().min(0).default(0),
+		order: z.enum(["newest", "oldest"]).default("newest"),
+	});
+
+	export type Query = z.infer<typeof Query>;
+
+	export const QueryWithSearch = Query.extend({
+		searchString: z.string().min(3).optional(),
+	});
+
+	export type QueryWithSearch = z.infer<typeof QueryWithSearch>;
+}
diff --git a/server/lib/api/utils/shared-models/netigniteData.ts b/server/lib/api/utils/shared-models/netigniteData.ts
new file mode 100644
index 0000000..77129ef
--- /dev/null
+++ b/server/lib/api/utils/shared-models/netigniteData.ts
@@ -0,0 +1,54 @@
+import { z } from "zod";
+
+export namespace AgentSettings {
+	/** `esp32`: the ESP32 firmware. `linux`: the Linux agent (systemd service). */
+	export const Kinds = ["esp32", "linux"] as const;
+	export const Kind = z.enum(Kinds);
+	export type Kind = z.infer<typeof Kind>;
+
+	/** Connection state of an agent, as shown in the dashboard. */
+	export const ConnectionStates = ["online", "offline", "unenrolled"] as const;
+	export const ConnectionState = z.enum(ConnectionStates);
+	export type ConnectionState = z.infer<typeof ConnectionState>;
+}
+
+export namespace DeviceSettings {
+	export const Types = ["server", "desktop", "laptop", "printer", "nas", "other"] as const;
+	export const Type = z.enum(Types);
+	export type Type = z.infer<typeof Type>;
+
+	/**
+	 * How a device's online status is determined.
+	 * - `none`: never checked
+	 * - `link_local`: the agent pings the IPv6 link-local address derived from the MAC (EUI-64)
+	 * - `ipv4` / `ipv6`: the agent checks the configured `status_address`
+	 * - `ssh`: the agent probes the SSH port of `status_address`
+	 * - `host_agent`: a Linux agent running on the device reports it
+	 */
+	export const StatusMethods = ["none", "link_local", "ipv4", "ipv6", "ssh", "host_agent"] as const;
+	export const StatusMethod = z.enum(StatusMethods);
+	export type StatusMethod = z.infer<typeof StatusMethod>;
+
+	export const OnlineStates = ["online", "offline", "unknown"] as const;
+	export const OnlineState = z.enum(OnlineStates);
+	export type OnlineState = z.infer<typeof OnlineState>;
+
+	/** Six hex pairs separated by `:` or `-` (the format the agents accept). */
+	export const MacAddress = z
+		.string()
+		.regex(/^[0-9A-Fa-f]{2}([:-])(?:[0-9A-Fa-f]{2}\1){4}[0-9A-Fa-f]{2}$/, "Invalid MAC address")
+		.transform((mac) => mac.toUpperCase().replaceAll("-", ":"));
+
+	export const WolPort = z.number().int().min(1).max(65535);
+}
+
+export namespace ShareSettings {
+	/**
+	 * - `viewer`: sees the device and its status
+	 * - `operator`: + power on, shutdown, reboot
+	 * - `manager`: + edits the device's settings
+	 */
+	export const Roles = ["viewer", "operator", "manager"] as const;
+	export const Role = z.enum(Roles);
+	export type Role = z.infer<typeof Role>;
+}
diff --git a/server/lib/api/utils/specHelpers.ts b/server/lib/api/utils/specHelpers.ts
new file mode 100644
index 0000000..aa48ac7
--- /dev/null
+++ b/server/lib/api/utils/specHelpers.ts
@@ -0,0 +1,206 @@
+import { type MiddlewareHandler } from "hono";
+import { type DescribeRouteOptions, describeRoute, resolver } from "hono-openapi";
+import { z } from "zod";
+import { Utils } from "../../utils";
+import { APIResponse } from "./api-res";
+
+export class APIRouteSpec {
+	/**
+	 * @deprecated Use more specific methods like `authenticated` or `custom` instead.
+	 */
+	static basic(spec: APIResponseSpec.Types.DescribeRouteOptionsWithResponses): MiddlewareHandler {
+		return describeRoute(spec);
+	}
+
+	static custom(spec: APIResponseSpec.Types.DescribeRouteOptionsWithResponses): MiddlewareHandler {
+		return describeRoute(spec);
+	}
+
+	static authenticated(
+		spec: APIResponseSpec.Types.DescribeRouteOptionsWithResponses,
+	): MiddlewareHandler {
+		return describeRoute({
+			...spec,
+			security: [
+				{
+					bearerAuth: [],
+				},
+			],
+		});
+	}
+
+	static unauthenticated(
+		spec: APIResponseSpec.Types.DescribeRouteOptionsWithResponses,
+	): MiddlewareHandler {
+		return describeRoute({
+			...spec,
+			security: [],
+		});
+	}
+}
+
+export class APIResponseSpec {
+	static describeBasic<T extends APIResponseSpec.Types.BasicDescription[]>(...responseSchemas: T) {
+		return Utils.mergeObjects(...responseSchemas);
+	}
+
+	static describeWithWrongInputs<T extends APIResponseSpec.Types.BasicDescription[]>(
+		...responseSchemas: T
+	) {
+		return Utils.mergeObjects(
+			...responseSchemas,
+			APIResponseSpec.badRequest("Bad Request: Syntax or validation error in request"),
+		);
+	}
+
+	static success<Data extends z.ZodType<APIResponse.Types.NonRequiredReturnData>>(
+		description: string,
+		dataSchema: Data,
+	) {
+		return {
+			200: {
+				description,
+				content: {
+					"application/json": {
+						schema: resolver(APIResponse.Schema.success(description, dataSchema)),
+					},
+				},
+			},
+		};
+	}
+
+	static successNoData(description: string) {
+		return this.success(description, z.null());
+	}
+
+	static created<Data extends z.ZodType<APIResponse.Types.NonRequiredReturnData>>(
+		description: string,
+		dataSchema: Data,
+	) {
+		return {
+			201: {
+				description,
+				content: {
+					"application/json": {
+						schema: resolver(APIResponse.Schema.created(description, dataSchema)),
+					},
+				},
+			},
+		};
+	}
+
+	static createdNoData(description: string) {
+		return this.created(description, z.null());
+	}
+
+	static accepted<Data extends z.ZodType<APIResponse.Types.RequiredReturnData>>(
+		description: string,
+		dataSchema: Data,
+	) {
+		return {
+			202: {
+				description,
+				content: {
+					"application/json": {
+						schema: resolver(APIResponse.Schema.accepted(description, dataSchema)),
+					},
+				},
+			},
+		};
+	}
+
+	/**
+	 * @deprecated Use more specific error methods like `badRequest`, `unauthorized`, etc. instead.
+	 */
+	static genericError<StatusCode extends APIResponseSpec.Types.HTTP_ERROR_CODES>(
+		statusCode: StatusCode,
+		description: string,
+	) {
+		const settings = {
+			description,
+			content: {
+				"application/json": {
+					schema: resolver(APIResponse.Utils.genericErrorSchema(statusCode, description)),
+				},
+			},
+		};
+
+		return {
+			[statusCode as StatusCode]: settings,
+		} as {
+			[K in StatusCode]: typeof settings;
+		};
+	}
+
+	static serverError(message = "Internal Server Error: An unexpected error occurred on the server") {
+		return this.genericError(500, message);
+	}
+
+	static unauthorized(
+		message = "Unauthorized: Authentication is required and has failed or has not yet been provided",
+	) {
+		return this.genericError(401, message);
+	}
+	static forbidden(
+		message = "Forbidden: You do not have permission to access the requested resource",
+	) {
+		return this.genericError(403, message);
+	}
+
+	static badRequest(message = "Bad Request: Syntax or validation error in request") {
+		return this.genericError(400, message);
+	}
+
+	static notFound(message = "Not Found: The requested resource could not be found") {
+		return this.genericError(404, message);
+	}
+
+	static conflict(
+		message = "Conflict: The request could not be completed due to a conflict with the current state of the resource",
+	) {
+		return this.genericError(409, message);
+	}
+
+	static tooManyRequests(
+		message = "Too Many Requests: You have sent too many requests in a given amount of time",
+	) {
+		return this.genericError(429, message);
+	}
+
+	static badGateway(
+		message = "Bad Gateway: An upstream component (e.g. an agent) reported an error",
+	) {
+		return this.genericError(502, message);
+	}
+
+	static serviceUnavailable(
+		message = "Service Unavailable: A required component (e.g. an agent) is offline",
+	) {
+		return this.genericError(503, message);
+	}
+
+	static gatewayTimeout(
+		message = "Gateway Timeout: An upstream component (e.g. an agent) didn't answer in time",
+	) {
+		return this.genericError(504, message);
+	}
+}
+
+export namespace APIResponseSpec.Types {
+	export type BasicDescription = {
+		[statusCode: number]: {
+			description: string;
+			content: {
+				"application/json": {
+					schema: ReturnType<typeof resolver>;
+				};
+			};
+		};
+	};
+
+	export type DescribeRouteOptionsWithResponses = DescribeRouteOptions & {
+		responses: DescribeRouteOptions["responses"];
+	};
+
+	export type HTTP_ERROR_CODES = 400 | 401 | 403 | 404 | 409 | 429 | 500 | 502 | 503 | 504;
+}
diff --git a/server/lib/api/versions/v1/docs/index.ts b/server/lib/api/versions/v1/docs/index.ts
new file mode 100644
index 0000000..b2047a6
--- /dev/null
+++ b/server/lib/api/versions/v1/docs/index.ts
@@ -0,0 +1,18 @@
+export const DOCS_TAGS = {
+	ACCOUNT: "Account",
+	ACCOUNT_API_KEYS: "Account / API Keys",
+	ACCOUNT_PREFERENCES: "Account / Preferences",
+
+	AUTHENTICATION: "Authentication",
+
+	AGENTS: "Agents",
+	DEVICES: "Devices",
+	DEVICE_SHARES: "Devices / Sharing",
+
+	ADMIN_API: {
+		BASE: "Admin",
+
+		USERS: "Admin / Users",
+		SETTINGS: "Admin / Settings",
+	},
+};
diff --git a/server/lib/api/versions/v1/index.ts b/server/lib/api/versions/v1/index.ts
new file mode 100644
index 0000000..67a8fc7
--- /dev/null
+++ b/server/lib/api/versions/v1/index.ts
@@ -0,0 +1,156 @@
+import { Hono } from "hono";
+import { type GenerateSpecOptions } from "hono-openapi";
+import { AppConstants } from "../../../utils/constants";
+import { APIVersionRouter } from "../../utils/apiVersionRouter";
+import { DOCS_TAGS } from "./docs";
+import { authMiddlewareV1 } from "./middleware/auth";
+import { router as accountRouter } from "./routes/account";
+import { router as adminRouter } from "./routes/admin";
+import { router as agentsRouter } from "./routes/agents";
+import { router as authRouter } from "./routes/auth";
+import { router as devicesRouter } from "./routes/devices";
+
+const openAPIConfig: Partial<GenerateSpecOptions> = {
+	documentation: {
+		info: {
+			title: `${AppConstants.APP_NAME} API`,
+			version: "1.0.0",
+			description: `API for ${AppConstants.APP_NAME} Frontend and third-party clients`,
+		},
+		components: {
+			securitySchemes: {
+				bearerAuth: {
+					type: "http",
+					scheme: "bearer",
+					description: "Enter your bearer token in the format **Bearer &lt;token&gt;**",
+				},
+			},
+			responses: {
+				401: {
+					description: "Authentication information is missing or invalid",
+				},
+			},
+		},
+
+		// Disable global security because Scalar could not handle multiple security schemes properly
+		security: [
+			{
+				bearerAuth: [],
+			},
+		],
+
+		servers: [
+			{
+				url: `http://localhost:${AppConstants.APP_API_DEFAULT_PORT}/api/v1`,
+				description: "Local development server",
+			},
+			{
+				url: `${AppConstants.APP_API_DEFAULT_PROD_URL}/api/v1`,
+				description: "Production server",
+			},
+		],
+
+		"x-tagGroups": [
+			{
+				name: "Account & Authentication",
+				tags: [
+					DOCS_TAGS.ACCOUNT,
+					DOCS_TAGS.ACCOUNT_API_KEYS,
+					DOCS_TAGS.ACCOUNT_PREFERENCES,
+					DOCS_TAGS.AUTHENTICATION,
+				],
+			},
+			{
+				name: "Agents & Devices",
+				tags: [DOCS_TAGS.AGENTS, DOCS_TAGS.DEVICES, DOCS_TAGS.DEVICE_SHARES],
+			},
+			{
+				name: DOCS_TAGS.ADMIN_API.BASE,
+				tags: [DOCS_TAGS.ADMIN_API.USERS, DOCS_TAGS.ADMIN_API.SETTINGS],
+			},
+		],
+
+		tags: [
+			{
+				name: DOCS_TAGS.ACCOUNT,
+				description: "Endpoints for user account management",
+			},
+			{
+				name: DOCS_TAGS.ACCOUNT_API_KEYS,
+				// @ts-ignore
+				"x-displayName": "API Keys",
+				summary: "API Keys",
+				parent: DOCS_TAGS.ACCOUNT,
+				description: "Endpoints for managing account API keys",
+			},
+			{
+				name: DOCS_TAGS.ACCOUNT_PREFERENCES,
+				// @ts-ignore
+				"x-displayName": "Preferences",
+				summary: "Preferences",
+				parent: DOCS_TAGS.ACCOUNT,
+				description: "Endpoints for managing account preferences (e.g. remote email content policy)",
+			},
+
+			{
+				name: DOCS_TAGS.AUTHENTICATION,
+				description: "Endpoints for authentication and authorization",
+			},
+
+			{
+				name: DOCS_TAGS.AGENTS,
+				description:
+					"Agents (ESP32 firmware, Linux agent) that wake and check devices in their network",
+			},
+			{
+				name: DOCS_TAGS.DEVICES,
+				description: "Devices: Wake-on-LAN, status checks, shutdown and reboot",
+			},
+			{
+				name: DOCS_TAGS.DEVICE_SHARES,
+				// @ts-ignore
+				"x-displayName": "Sharing",
+				summary: "Sharing",
+				parent: DOCS_TAGS.DEVICES,
+				description: "Share devices with other users as viewer, operator or manager",
+			},
+
+			{
+				name: DOCS_TAGS.ADMIN_API.SETTINGS,
+				// @ts-ignore
+				"x-displayName": "Settings",
+				summary: "Settings",
+				parent: DOCS_TAGS.ADMIN_API.BASE,
+				description: "Server-wide settings such as public registration",
+			},
+			{
+				name: DOCS_TAGS.ADMIN_API.USERS,
+				// @ts-ignore
+				"x-displayName": "Users",
+				summary: "Users",
+				parent: DOCS_TAGS.ADMIN_API.BASE,
+				description: "Endpoints for user management",
+			},
+		],
+	},
+};
+
+const router = new Hono();
+
+router.use(authMiddlewareV1);
+
+router.route("/", authRouter);
+router.route("/", accountRouter);
+router.route("/", adminRouter);
+router.route("/", agentsRouter);
+router.route("/", devicesRouter);
+
+export class APIv1Router extends APIVersionRouter {
+	constructor() {
+		super({
+			version: 1,
+			openAPIConfig,
+			routes: router,
+		});
+	}
+}
diff --git a/server/lib/api/versions/v1/middleware/auth.ts b/server/lib/api/versions/v1/middleware/auth.ts
new file mode 100644
index 0000000..256ef8e
--- /dev/null
+++ b/server/lib/api/versions/v1/middleware/auth.ts
@@ -0,0 +1,64 @@
+import { createMiddleware } from "hono/factory";
+import { APIResponse } from "../../../utils/api-res";
+import { AuthHandler } from "../../../utils/authHandler";
+
+// Endpoints that stay reachable with a malformed, invalid or expired token (login, signup,
+// password reset), so a stale session cookie can never lock a user out of signing in again.
+const PUBLIC_AUTH_PATHS = [
+	"/v1/auth/login",
+	"/v1/auth/signup",
+	"/v1/auth/registration",
+	"/v1/auth/reset-password",
+	"/v1/agents/enroll",
+];
+
+// `c.req.path` is the full request path. Compare from `/v1/` on, so this also works when the
+// API is mounted under a prefix (the full-stack template serves it at `/api/v1/...`).
+function isPublicAuthPath(fullPath: string) {
+	const path = fullPath.slice(Math.max(fullPath.indexOf("/v1/"), 0));
+	return PUBLIC_AUTH_PATHS.some((publicPath) => path.startsWith(publicPath));
+}
+
+export const authMiddlewareV1 = createMiddleware(async (c, next) => {
+	const authHeader = c.req.header("Authorization");
+
+	if (!authHeader) {
+		AuthHandler.AuthContext.set(c, {
+			type: "unauthenticated",
+		} satisfies AuthHandler.UnauthenticatedAuthContext);
+
+		return await next();
+	}
+
+	if (!authHeader.startsWith("Bearer ")) {
+		if (isPublicAuthPath(c.req.path)) {
+			AuthHandler.AuthContext.set(c, {
+				type: "unauthenticated",
+			} satisfies AuthHandler.UnauthenticatedAuthContext);
+
+			return await next();
+		}
+
+		return APIResponse.unauthorized(c, "Invalid Authorization header");
+	}
+
+	const token = authHeader.substring("Bearer ".length);
+
+	const authContext = await AuthHandler.getAuthContext(token);
+
+	if (!authContext || !(await AuthHandler.isValidAuthContext(authContext))) {
+		if (isPublicAuthPath(c.req.path)) {
+			AuthHandler.AuthContext.set(c, {
+				type: "unauthenticated",
+			} satisfies AuthHandler.UnauthenticatedAuthContext);
+
+			return await next();
+		}
+
+		return APIResponse.unauthorized(c, "Invalid or expired token");
+	}
+
+	AuthHandler.AuthContext.set(c, authContext);
+
+	return await next();
+});
diff --git a/server/lib/api/versions/v1/middleware/requireUser.ts b/server/lib/api/versions/v1/middleware/requireUser.ts
new file mode 100644
index 0000000..ab7b0ef
--- /dev/null
+++ b/server/lib/api/versions/v1/middleware/requireUser.ts
@@ -0,0 +1,25 @@
+import type { Context } from "hono";
+import { createMiddleware } from "hono/factory";
+import { APIResponse } from "../../../utils/api-res";
+import { AuthHandler } from "../../../utils/authHandler";
+
+/**
+ * Rejects unauthenticated requests. Unlike the account routes, resource routes (agents, devices)
+ * accept sessions **and** API keys, so scripts can wake devices.
+ */
+export const requireUser = createMiddleware(async (c, next) => {
+	const authContext = AuthHandler.AuthContext.get(c);
+	if (authContext.type === "unauthenticated") {
+		return APIResponse.unauthorized(c, "Authentication required");
+	}
+	await next();
+});
+
+/** The authenticated user's id. Only call behind {@link requireUser}. */
+export function getUserID(c: Context) {
+	const authContext = AuthHandler.AuthContext.get(c);
+	if (authContext.type === "unauthenticated") {
+		throw new Error("getUserID() called on an unauthenticated request");
+	}
+	return authContext.user_id;
+}
diff --git a/server/lib/api/versions/v1/routes/account/apikeys/index.ts b/server/lib/api/versions/v1/routes/account/apikeys/index.ts
new file mode 100644
index 0000000..b505789
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/account/apikeys/index.ts
@@ -0,0 +1,224 @@
+import { and, eq } from "drizzle-orm";
+import { Hono } from "hono";
+import { validator } from "hono-openapi";
+import z from "zod";
+import { DB } from "../../../../../../db";
+import { type DrizzleDB } from "../../../../../../db/utils";
+import { Logger } from "../../../../../../utils/logger";
+import { APIResponse } from "../../../../../utils/api-res";
+import {
+	APIKeyHandler,
+	AuthHandler,
+	AuthUtils,
+	SessionHandler,
+} from "../../../../../utils/authHandler";
+import { APIResponseSpec, APIRouteSpec } from "../../../../../utils/specHelpers";
+import { DOCS_TAGS } from "../../../docs";
+import { AccountAPIKeysModel } from "./model";
+
+export const router = new Hono().basePath("/apikeys");
+
+router.get(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Get all API keys",
+		description: "Retrieve all API keys for the authenticated user's account.",
+		tags: [DOCS_TAGS.ACCOUNT_API_KEYS],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success(
+				"API keys retrieved successfully",
+				AccountAPIKeysModel.GetById.Response.array(),
+			),
+		),
+	}),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.getAsSession(c);
+
+		const apiKeys = DB.instance()
+			.select()
+			.from(DB.Tables.apiKeys)
+			.where(eq(DB.Tables.apiKeys.user_id, authContext.user_id))
+			.all();
+
+		const apiKeysWithoutSensitive = apiKeys.map((key) => ({
+			id: key.id,
+			description: key.description,
+			created_at: key.created_at,
+			expires_at: key.expires_at,
+		}));
+
+		return APIResponse.success(c, "API keys retrieved successfully", apiKeysWithoutSensitive);
+	},
+);
+
+router.post(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Create a new API key",
+		description: "Create a new API key for the authenticated user's account.",
+		tags: [DOCS_TAGS.ACCOUNT_API_KEYS],
+
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.success("API key created successfully", AccountAPIKeysModel.Create.Response),
+		),
+	}),
+
+	validator("json", AccountAPIKeysModel.Create.Body),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.getAsSession(c);
+
+		const apiKeyData = c.req.valid("json");
+
+		let expirationInDays: number | undefined;
+
+		switch (apiKeyData.expires_at) {
+			case "7d":
+				expirationInDays = 7;
+				break;
+			case "30d":
+				expirationInDays = 30;
+				break;
+			case "90d":
+				expirationInDays = 90;
+				break;
+			case "180d":
+				expirationInDays = 180;
+				break;
+			case "365d":
+				expirationInDays = 365;
+				break;
+			default:
+				expirationInDays = undefined;
+				break;
+		}
+
+		try {
+			const key = await DB.instance().transaction(async (tx: DrizzleDB) => {
+				return await APIKeyHandler.createApiKey(
+					authContext.user_id,
+					apiKeyData.description,
+					expirationInDays,
+					tx,
+				);
+			});
+
+			const tokenID = AuthUtils.getTokenParts(key.token)?.id;
+
+			if (!tokenID) {
+				throw new Error("Failed to parse token ID from generated API key");
+			}
+
+			const keyWithoutSensitive = {
+				id: tokenID,
+				token: key.token,
+			};
+
+			return APIResponse.success(
+				c,
+				"API key created successfully",
+				keyWithoutSensitive satisfies AccountAPIKeysModel.Create.Response,
+			);
+		} catch (error: any) {
+			Logger.error("Failed to create API key", error.stack || error.message || error);
+			return APIResponse.serverError(c, "Failed to create API key");
+		}
+	},
+);
+
+router.use(
+	"/:apiKeyID/*",
+
+	validator(
+		"param",
+		z.object({
+			apiKeyID: z.string().min(1).max(255),
+		}),
+	),
+
+	async (c, next) => {
+		const authContext = AuthHandler.AuthContext.getAsSession(c);
+
+		// @ts-ignore
+		const apiKeyID = (c.req.valid("param") as { apiKeyID: string }).apiKeyID;
+
+		const apiKey = await DB.instance()
+			.select()
+			.from(DB.Tables.apiKeys)
+			.where(
+				and(eq(DB.Tables.apiKeys.id, apiKeyID), eq(DB.Tables.apiKeys.user_id, authContext.user_id)),
+			)
+			.get();
+
+		if (!apiKey) {
+			return APIResponse.notFound(c, "API key not found");
+		}
+
+		// @ts-ignore
+		c.set("apiKey", apiKey);
+
+		await next();
+	},
+);
+
+router.get(
+	"/:apiKeyID",
+
+	APIRouteSpec.authenticated({
+		summary: "Get API key details",
+		description:
+			"Retrieve details of a specific API key by its ID for the authenticated user's account.",
+		tags: [DOCS_TAGS.ACCOUNT_API_KEYS],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("API key retrieved successfully", AccountAPIKeysModel.GetById.Response),
+			APIResponseSpec.notFound("API key not found"),
+		),
+	}),
+
+	async (c) => {
+		// @ts-ignore
+		const apiKey = c.get("apiKey") as DB.Models.ApiKey;
+
+		const apiKeyWithoutSensitive = {
+			id: apiKey.id,
+			description: apiKey.description,
+			created_at: apiKey.created_at,
+			expires_at: apiKey.expires_at,
+		};
+
+		return APIResponse.success(
+			c,
+			"API key retrieved successfully",
+			apiKeyWithoutSensitive satisfies AccountAPIKeysModel.GetById.Response,
+		);
+	},
+);
+
+router.delete(
+	"/:apiKeyID",
+
+	APIRouteSpec.authenticated({
+		summary: "Delete an API key",
+		description: "Delete an API key by its ID for the authenticated user's account.",
+		tags: [DOCS_TAGS.ACCOUNT_API_KEYS],
+
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.successNoData("API key deleted successfully"),
+			APIResponseSpec.notFound("API key not found"),
+		),
+	}),
+
+	async (c) => {
+		// @ts-ignore
+		const apiKey = c.get("apiKey") as DB.Models.ApiKey;
+
+		await APIKeyHandler.deleteApiKey(apiKey.id);
+
+		return APIResponse.successNoData(c, "API key deleted successfully");
+	},
+);
diff --git a/server/lib/api/versions/v1/routes/account/apikeys/model.ts b/server/lib/api/versions/v1/routes/account/apikeys/model.ts
new file mode 100644
index 0000000..e44c58b
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/account/apikeys/model.ts
@@ -0,0 +1,50 @@
+import { createInsertSchema, createSelectSchema } from "drizzle-zod";
+import z from "zod";
+import { DB } from "../../../../../../db";
+
+export namespace AccountAPIKeysModel.GetById {
+	export const Response = createSelectSchema(DB.Tables.apiKeys).omit({
+		user_id: true,
+		user_role: true,
+		hashed_token: true,
+	});
+
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AccountAPIKeysModel.GetAll {
+	export const Response = z.array(AccountAPIKeysModel.GetById.Response);
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AccountAPIKeysModel.Create {
+	export const Body = createInsertSchema(DB.Tables.apiKeys, {
+		expires_at: z.union([
+			z.literal("7d").meta({ title: "7 days" }),
+			z.literal("30d").meta({ title: "30 days" }),
+			z.literal("90d").meta({ title: "90 days" }),
+			z.literal("180d").meta({ title: "180 days" }),
+			z.literal("365d").meta({ title: "365 days" }),
+			z.literal(null).meta({ title: "No expiration" }),
+		]),
+		description: z
+			.string()
+			.min(1, "Description cannot be empty")
+			.max(255, "Description cannot exceed 255 characters"),
+	}).omit({
+		id: true,
+		user_id: true,
+		user_role: true,
+		hashed_token: true,
+		created_at: true,
+	});
+
+	export type Body = z.infer<typeof Body>;
+
+	export const Response = z.object({
+		id: z.string(),
+		token: z.string(),
+	});
+
+	export type Response = z.infer<typeof Response>;
+}
diff --git a/server/lib/api/versions/v1/routes/account/index.ts b/server/lib/api/versions/v1/routes/account/index.ts
new file mode 100644
index 0000000..bd86adb
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/account/index.ts
@@ -0,0 +1,239 @@
+import { eq } from "drizzle-orm";
+import { Hono } from "hono";
+import { validator } from "hono-openapi";
+import { DB } from "../../../../../db";
+import { type DrizzleDB } from "../../../../../db/utils";
+import { Logger } from "../../../../../utils/logger";
+import { APIResponse } from "../../../../utils/api-res";
+import { AuthHandler, SessionHandler } from "../../../../utils/authHandler";
+import { UserPreferencesHandler } from "../../../../utils/preferences";
+import { APIResponseSpec, APIRouteSpec } from "../../../../utils/specHelpers";
+import { DOCS_TAGS } from "../../docs";
+import { AccountModel } from "./model";
+
+export const router = new Hono().basePath("/account");
+
+// all routes below require authentication via session
+router.use("*", async (c, next) => {
+	const authContext = AuthHandler.AuthContext.get(c);
+
+	if (authContext.type !== "session") {
+		return APIResponse.unauthorized(c, "Your Auth Context is not a session");
+	}
+
+	await next();
+});
+
+router.get(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Get account information",
+		description: "Retrieve information about the authenticated user's account.",
+		tags: [DOCS_TAGS.ACCOUNT],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success(
+				"Account information retrieved successfully",
+				AccountModel.GetInfo.Response,
+			),
+			APIResponseSpec.unauthorized("Your Auth Context is not a session"),
+		),
+	}),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.getAsSession(c);
+
+		const user = DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.id, authContext.user_id))
+			.get();
+
+		if (!user) {
+			throw new Error("User not found but session exists");
+		}
+
+		const userWithoutSensitive = AccountModel.GetInfo.Response.parse(user);
+
+		return APIResponse.success(c, "Account information retrieved successfully", userWithoutSensitive);
+	},
+);
+
+router.put(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Update account information",
+		description: "Update information about the authenticated user's account.",
+		tags: [DOCS_TAGS.ACCOUNT],
+
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.successNoData("Account information updated successfully"),
+			APIResponseSpec.unauthorized("Your Auth Context is not a session"),
+			APIResponseSpec.conflict("Username or email already in use"),
+		),
+	}),
+
+	validator("json", AccountModel.UpdateInfo.Body),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.getAsSession(c);
+
+		const body = c.req.valid("json") as AccountModel.UpdateInfo.Body;
+		const { current_password, ...updates } = body;
+
+		// Verify current password before allowing changes
+		const user = await DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.id, authContext.user_id))
+			.get();
+
+		if (!user) {
+			throw new Error("User not found but session exists");
+		}
+
+		if (!(await Bun.password.verify(current_password, user.password_hash))) {
+			return APIResponse.unauthorized(c, "Current password is incorrect");
+		}
+
+		// Check for conflicts if changing username or email
+		if (updates.username && updates.username !== user.username) {
+			const usernameConflict = await DB.instance()
+				.select()
+				.from(DB.Tables.users)
+				.where(eq(DB.Tables.users.username, updates.username))
+				.get();
+			if (usernameConflict) {
+				return APIResponse.conflict(c, "Username already in use");
+			}
+		}
+
+		if (updates.email && updates.email !== user.email) {
+			const emailConflict = await DB.instance()
+				.select()
+				.from(DB.Tables.users)
+				.where(eq(DB.Tables.users.email, updates.email))
+				.get();
+			if (emailConflict) {
+				return APIResponse.conflict(c, "Email already in use");
+			}
+		}
+
+		await DB.instance()
+			.update(DB.Tables.users)
+			.set(updates)
+			.where(eq(DB.Tables.users.id, authContext.user_id))
+			.run();
+
+		return APIResponse.successNoData(c, "Account information updated successfully");
+	},
+);
+
+router.put(
+	"/password",
+
+	APIRouteSpec.authenticated({
+		summary: "Change account password",
+		description: "Change the password of the authenticated user's account.",
+		tags: [DOCS_TAGS.ACCOUNT],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.successNoData("Password changed successfully"),
+			APIResponseSpec.unauthorized("Your Auth Context is not a session"),
+			APIResponseSpec.badRequest(
+				"Current password is incorrect / Syntax or validation error in request",
+			),
+		),
+	}),
+
+	validator("json", AccountModel.UpdatePassword.Body),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.getAsSession(c);
+
+		const body = c.req.valid("json");
+
+		try {
+			const user = DB.instance()
+				.select()
+				.from(DB.Tables.users)
+				.where(eq(DB.Tables.users.id, authContext.user_id))
+				.get();
+
+			if (!user) {
+				throw new Error("User not found but session exists");
+			}
+
+			if ((await Bun.password.verify(body.current_password, user.password_hash)) === false) {
+				return APIResponse.unauthorized(c, "Current password is incorrect");
+			}
+
+			const newPasswordHash = await Bun.password.hash(body.new_password);
+
+			await DB.instance().transaction(async (tx: DrizzleDB) => {
+				await tx
+					.update(DB.Tables.users)
+					.set({
+						password_hash: newPasswordHash,
+					})
+					.where(eq(DB.Tables.users.id, authContext.user_id))
+					.run();
+
+				await SessionHandler.inValidateAllSessionsForUser(authContext.user_id, tx);
+			});
+
+			return APIResponse.successNoData(c, "Password changed successfully");
+		} catch (error: any) {
+			Logger.error("change password transaction failed:", error.stack || error.message || error);
+			return APIResponse.serverError(c, "Failed to change password");
+		}
+	},
+);
+
+router.delete(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Delete account",
+		description: "Permanently delete the authenticated user's account.",
+		tags: [DOCS_TAGS.ACCOUNT],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.successNoData("Account deleted successfully"),
+			APIResponseSpec.unauthorized("Your Auth Context is not a session"),
+		),
+	}),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.getAsSession(c);
+
+		try {
+			await DB.instance().transaction(async (tx: DrizzleDB) => {
+				// invalidate all sessions for the user
+				await AuthHandler.invalidateAllAuthContextsForUser(authContext.user_id, tx);
+
+				// delete password resets
+				await tx
+					.delete(DB.Tables.passwordResets)
+					.where(eq(DB.Tables.passwordResets.user_id, authContext.user_id))
+					.run();
+
+				// delete stored preferences
+				await UserPreferencesHandler.deleteAllForUser(authContext.user_id, tx);
+
+				// finally, delete the user account
+				await tx.delete(DB.Tables.users).where(eq(DB.Tables.users.id, authContext.user_id)).run();
+			});
+
+			return APIResponse.successNoData(c, "Account deleted successfully");
+		} catch (error: any) {
+			Logger.error("Failed to delete account", error.stack || error.message || error);
+			return APIResponse.serverError(c, "Failed to delete account");
+		}
+	},
+);
+
+router.route("/", (await import("./apikeys")).router);
+router.route("/", (await import("./preferences")).router);
diff --git a/server/lib/api/versions/v1/routes/account/model.ts b/server/lib/api/versions/v1/routes/account/model.ts
new file mode 100644
index 0000000..6786021
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/account/model.ts
@@ -0,0 +1,47 @@
+import { createSelectSchema, createUpdateSchema } from "drizzle-zod";
+import { z } from "zod";
+import { DB } from "../../../../../db";
+import { UserDataPolicies } from "../../../../utils/shared-models/accountData";
+
+export namespace AccountModel.GetInfo {
+	export const Response = createSelectSchema(DB.Tables.users).omit({
+		password_hash: true,
+	});
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AccountModel.UpdateInfo {
+	export const Body = createUpdateSchema(DB.Tables.users, {
+		username: UserDataPolicies.Username,
+		email: z.email("Invalid email"),
+	})
+		.omit({
+			id: true,
+			password_hash: true,
+			role: true,
+			created_at: true,
+		})
+		.partial()
+		.refine((data) => Object.values(data).some((value) => value !== undefined), {
+			message: "At least one field must be provided",
+		})
+		.and(
+			z.object({
+				current_password: z
+					.string()
+					.min(1)
+					.describe("Current password — required to confirm account changes"),
+			}),
+		);
+
+	export type Body = z.infer<typeof Body>;
+}
+
+export namespace AccountModel.UpdatePassword {
+	export const Body = z.object({
+		current_password: z.string().describe("Current password of the account"),
+		new_password: UserDataPolicies.Password,
+	});
+
+	export type Body = z.infer<typeof Body>;
+}
diff --git a/server/lib/api/versions/v1/routes/account/preferences/index.ts b/server/lib/api/versions/v1/routes/account/preferences/index.ts
new file mode 100644
index 0000000..59bf320
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/account/preferences/index.ts
@@ -0,0 +1,89 @@
+import { Hono } from "hono";
+import { validator } from "hono-openapi";
+import { APIResponse } from "../../../../../utils/api-res";
+import { AuthHandler } from "../../../../../utils/authHandler";
+import { UserPreferencesHandler } from "../../../../../utils/preferences";
+import { APIResponseSpec, APIRouteSpec } from "../../../../../utils/specHelpers";
+import { DOCS_TAGS } from "../../../docs";
+import { AccountPreferencesModel } from "./model";
+
+export const router = new Hono().basePath("/preferences");
+
+router.get(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Get all preferences",
+		description:
+			"Retrieve all of the authenticated user's preferences in a single request, keyed by the same names as the per-preference routes. Preferences that were never set are returned with their defaults.",
+		tags: [DOCS_TAGS.ACCOUNT_PREFERENCES],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success(
+				"Preferences retrieved successfully",
+				AccountPreferencesModel.GetAll.Response,
+			),
+		),
+	}),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.getAsSession(c);
+
+		const preferences = await UserPreferencesHandler.getAll(authContext.user_id);
+
+		return APIResponse.success(c, "Preferences retrieved successfully", preferences);
+	},
+);
+
+router.get(
+	"/onboarding",
+
+	APIRouteSpec.authenticated({
+		summary: "Get onboarding state",
+		description:
+			"Retrieve whether the authenticated user has completed the one-time, platform-wide welcome onboarding.",
+		tags: [DOCS_TAGS.ACCOUNT_PREFERENCES],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success(
+				"Onboarding state retrieved successfully",
+				AccountPreferencesModel.Onboarding.Response,
+			),
+		),
+	}),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.getAsSession(c);
+
+		const preference = await UserPreferencesHandler.getOnboarding(authContext.user_id);
+
+		return APIResponse.success(c, "Onboarding state retrieved successfully", preference);
+	},
+);
+
+router.put(
+	"/onboarding",
+
+	APIRouteSpec.authenticated({
+		summary: "Update onboarding state",
+		description:
+			"Set whether the authenticated user has completed the one-time, platform-wide welcome onboarding.",
+		tags: [DOCS_TAGS.ACCOUNT_PREFERENCES],
+
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.successNoData("Onboarding state updated successfully"),
+		),
+	}),
+
+	validator("json", AccountPreferencesModel.Onboarding.Body),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.getAsSession(c);
+
+		const body = c.req.valid("json");
+
+		await UserPreferencesHandler.setOnboarding(authContext.user_id, body);
+
+		return APIResponse.successNoData(c, "Onboarding state updated successfully");
+	},
+);
diff --git a/server/lib/api/versions/v1/routes/account/preferences/model.ts b/server/lib/api/versions/v1/routes/account/preferences/model.ts
new file mode 100644
index 0000000..ea832bc
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/account/preferences/model.ts
@@ -0,0 +1,15 @@
+import { z } from "zod";
+import { UserPreferences } from "../../../../../utils/preferences";
+
+export namespace AccountPreferencesModel.GetAll {
+	export const Response = UserPreferences.allSchema;
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AccountPreferencesModel.Onboarding {
+	export const Response = UserPreferences.schemas["onboarding"];
+	export type Response = z.infer<typeof Response>;
+
+	export const Body = Response;
+	export type Body = z.infer<typeof Body>;
+}
diff --git a/server/lib/api/versions/v1/routes/admin/index.ts b/server/lib/api/versions/v1/routes/admin/index.ts
new file mode 100644
index 0000000..8012565
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/admin/index.ts
@@ -0,0 +1,22 @@
+import { Hono } from "hono";
+import { APIResponse } from "../../../../utils/api-res";
+import { AuthHandler } from "../../../../utils/authHandler";
+
+export const router = new Hono().basePath("/admin");
+
+router.use("*", async (c, next) => {
+	const authContext = AuthHandler.AuthContext.get(c);
+
+	if (authContext.type === "unauthenticated") {
+		return APIResponse.unauthorized(c, "Authentication required");
+	}
+
+	if (authContext.user_role !== "admin") {
+		return APIResponse.forbidden(c, "This endpoint is restricted to administrators");
+	}
+
+	await next();
+});
+
+router.route("/", (await import("./users")).router);
+router.route("/", (await import("./settings")).router);
diff --git a/server/lib/api/versions/v1/routes/admin/settings/index.ts b/server/lib/api/versions/v1/routes/admin/settings/index.ts
new file mode 100644
index 0000000..f3740dd
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/admin/settings/index.ts
@@ -0,0 +1,46 @@
+import { Hono } from "hono";
+import { validator } from "hono-openapi";
+import z from "zod";
+import { APIResponse } from "../../../../../utils/api-res";
+import { RuntimeMetadata } from "../../../../../utils/metadata";
+import { APIResponseSpec, APIRouteSpec } from "../../../../../utils/specHelpers";
+import { DOCS_TAGS } from "../../../docs";
+
+export const router = new Hono().basePath("/settings");
+
+const Settings = z.object({
+	registration_enabled: z.boolean(),
+});
+
+router.get(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Get server settings",
+		tags: [DOCS_TAGS.ADMIN_API.SETTINGS],
+		responses: APIResponseSpec.describeBasic(APIResponseSpec.success("Settings retrieved", Settings)),
+	}),
+
+	async (c) => APIResponse.success(c, "Settings retrieved", await RuntimeMetadata.getSettings()),
+);
+
+router.put(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Update server settings",
+		tags: [DOCS_TAGS.ADMIN_API.SETTINGS],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.success("Settings updated", Settings),
+		),
+	}),
+
+	validator("json", Settings.partial()),
+
+	async (c) =>
+		APIResponse.success(
+			c,
+			"Settings updated",
+			await RuntimeMetadata.updateSettings(c.req.valid("json")),
+		),
+);
diff --git a/server/lib/api/versions/v1/routes/admin/users/index.ts b/server/lib/api/versions/v1/routes/admin/users/index.ts
new file mode 100644
index 0000000..d8dd0e7
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/admin/users/index.ts
@@ -0,0 +1,315 @@
+import { and, eq, like, or } from "drizzle-orm";
+import { Hono } from "hono";
+import { validator as zValidator } from "hono-openapi";
+import { DB } from "../../../../../../db";
+import { type DrizzleDB } from "../../../../../../db/utils";
+import { APIResponse } from "../../../../../utils/api-res";
+import { AuthHandler, SessionHandler } from "../../../../../utils/authHandler";
+import { UserPreferencesHandler } from "../../../../../utils/preferences";
+import { APIResponseSpec, APIRouteSpec } from "../../../../../utils/specHelpers";
+import { DOCS_TAGS } from "../../../docs";
+import { AdminUsersModel } from "./model";
+
+const TARGET_USER_KEY = "adminTargetUser";
+
+const sanitizeUser = (user: DB.Models.User) => AdminUsersModel.SafeUser.parse(user);
+
+export const router = new Hono().basePath("/users");
+
+router.get(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "List users",
+		description: "Retrieve user accounts with optional role and search filters.",
+		tags: [DOCS_TAGS.ADMIN_API.USERS],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Users retrieved successfully", AdminUsersModel.GetAll.Response),
+		),
+	}),
+
+	zValidator("query", AdminUsersModel.GetAll.Query),
+
+	async (c) => {
+		const filters = c.req.valid("query") as AdminUsersModel.GetAll.Query;
+
+		let predicate: ReturnType<typeof eq> | undefined;
+
+		if (filters.role) {
+			predicate = eq(DB.Tables.users.role, filters.role);
+		}
+
+		if (filters.search) {
+			const pattern = `%${filters.search}%`;
+			const searchPredicate = or(
+				like(DB.Tables.users.username, pattern),
+				like(DB.Tables.users.display_name, pattern),
+				like(DB.Tables.users.email, pattern),
+			);
+
+			predicate = predicate ? and(predicate, searchPredicate) : searchPredicate;
+		}
+
+		let query = DB.instance().select().from(DB.Tables.users).$dynamic();
+
+		if (predicate) {
+			query = query.where(predicate);
+		}
+
+		if (filters.limit) {
+			query = query.limit(filters.limit);
+		}
+
+		if (filters.offset) {
+			query = query.offset(filters.offset);
+		}
+
+		const users = await query.orderBy(DB.Tables.users.id);
+
+		return APIResponse.success(c, "Users retrieved successfully", users.map(sanitizeUser));
+	},
+);
+
+router.post(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Create user",
+		description: "Provision a new user account with the desired role.",
+		tags: [DOCS_TAGS.ADMIN_API.USERS],
+
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.created("User created successfully", AdminUsersModel.Create.Response),
+			APIResponseSpec.conflict("Conflict: Username or email already exists"),
+		),
+	}),
+
+	zValidator("json", AdminUsersModel.Create.Body),
+
+	async (c) => {
+		const body = c.req.valid("json") as AdminUsersModel.Create.Body;
+
+		const duplicate = DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(or(eq(DB.Tables.users.username, body.username), eq(DB.Tables.users.email, body.email)))
+			.get();
+
+		if (duplicate) {
+			return APIResponse.conflict(c, "A user with the same username or email already exists");
+		}
+
+		const { password, ...userData } = body;
+
+		const createdUser = DB.instance()
+			.insert(DB.Tables.users)
+			.values({
+				...userData,
+				password_hash: await Bun.password.hash(password),
+			})
+			.returning()
+			.get();
+
+		return APIResponse.created(c, "User created successfully", sanitizeUser(createdUser));
+	},
+);
+
+router.use(
+	"/:userId/*",
+
+	zValidator("param", AdminUsersModel.UserId.Params),
+
+	async (c, next) => {
+		// @ts-ignore - hono-openapi does not type "param" yet
+		const { userId } = c.req.valid("param") as AdminUsersModel.UserId.Params;
+
+		const user = DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.id, userId))
+			.get();
+
+		if (!user) {
+			return APIResponse.notFound(c, "User not found");
+		}
+
+		// @ts-ignore
+		c.set(TARGET_USER_KEY, user);
+
+		await next();
+	},
+);
+
+router.get(
+	"/:userId",
+
+	APIRouteSpec.authenticated({
+		summary: "Get user",
+		description: "Retrieve details for a specific user account.",
+		tags: [DOCS_TAGS.ADMIN_API.USERS],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("User retrieved successfully", AdminUsersModel.Create.Response),
+			APIResponseSpec.notFound("User not found"),
+		),
+	}),
+
+	async (c) => {
+		// @ts-ignore
+		const user = c.get(TARGET_USER_KEY) as DB.Models.User;
+		return APIResponse.success(c, "User retrieved successfully", sanitizeUser(user));
+	},
+);
+
+router.put(
+	"/:userId",
+
+	APIRouteSpec.authenticated({
+		summary: "Update user",
+		description: "Modify profile fields or role for a user account.",
+		tags: [DOCS_TAGS.ADMIN_API.USERS],
+
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.success("User updated successfully", AdminUsersModel.Create.Response),
+			APIResponseSpec.notFound("User not found"),
+			APIResponseSpec.conflict("Conflict: Username or email already exists"),
+		),
+	}),
+
+	zValidator("json", AdminUsersModel.Update.Body),
+
+	async (c) => {
+		// @ts-ignore
+		const user = c.get(TARGET_USER_KEY) as DB.Models.User;
+		const updateBody = c.req.valid("json") as AdminUsersModel.Update.Body;
+
+		const updates = Object.fromEntries(
+			Object.entries(updateBody).filter(([, value]) => value !== undefined),
+		) as Partial<AdminUsersModel.Update.Body>;
+
+		if (Object.keys(updates).length === 0) {
+			return APIResponse.badRequest(c, "Provide at least one field to update");
+		}
+
+		if (updates.username && updates.username !== user.username) {
+			const usernameConflict = DB.instance()
+				.select()
+				.from(DB.Tables.users)
+				.where(eq(DB.Tables.users.username, updates.username))
+				.get();
+
+			if (usernameConflict) {
+				return APIResponse.conflict(c, "Username already in use");
+			}
+		}
+
+		if (updates.email && updates.email !== user.email) {
+			const emailConflict = DB.instance()
+				.select()
+				.from(DB.Tables.users)
+				.where(eq(DB.Tables.users.email, updates.email))
+				.get();
+
+			if (emailConflict) {
+				return APIResponse.conflict(c, "Email already in use");
+			}
+		}
+
+		const roleChanged = updates.role && updates.role !== user.role;
+
+		await DB.instance()
+			.update(DB.Tables.users)
+			.set(updates)
+			.where(eq(DB.Tables.users.id, user.id))
+			.run();
+
+		if (roleChanged && updates.role) {
+			await AuthHandler.changeUserRoleInAuthContexts(user.id, updates.role);
+		}
+
+		const refreshed = DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.id, user.id))
+			.get();
+
+		if (!refreshed) {
+			throw new Error("User not found after update");
+		}
+
+		return APIResponse.success(c, "User updated successfully", sanitizeUser(refreshed));
+	},
+);
+
+router.put(
+	"/:userId/password",
+
+	APIRouteSpec.authenticated({
+		summary: "Reset user password",
+		description: "Set a new password for a user account and revoke active sessions.",
+		tags: [DOCS_TAGS.ADMIN_API.USERS],
+
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.successNoData("Password reset successfully"),
+			APIResponseSpec.notFound("User not found"),
+		),
+	}),
+
+	zValidator("json", AdminUsersModel.UpdatePassword.Body),
+
+	async (c) => {
+		// @ts-ignore
+		const user = c.get(TARGET_USER_KEY) as DB.Models.User;
+		const { password } = c.req.valid("json") as AdminUsersModel.UpdatePassword.Body;
+
+		const passwordHash = await Bun.password.hash(password);
+
+		await DB.instance()
+			.update(DB.Tables.users)
+			.set({
+				password_hash: passwordHash,
+			})
+			.where(eq(DB.Tables.users.id, user.id))
+			.run();
+
+		await SessionHandler.inValidateAllSessionsForUser(user.id);
+
+		return APIResponse.successNoData(c, "Password reset successfully");
+	},
+);
+
+router.delete(
+	"/:userId",
+
+	APIRouteSpec.authenticated({
+		summary: "Delete user",
+		description: "Permanently remove a user account and all of its associated data.",
+		tags: [DOCS_TAGS.ADMIN_API.USERS],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.successNoData("User deleted successfully"),
+			APIResponseSpec.notFound("User not found"),
+		),
+	}),
+
+	async (c) => {
+		// @ts-ignore
+		const user = c.get(TARGET_USER_KEY) as DB.Models.User;
+
+		await DB.instance().transaction(async (tx: DrizzleDB) => {
+			await AuthHandler.invalidateAllAuthContextsForUser(user.id, tx);
+
+			await tx
+				.delete(DB.Tables.passwordResets)
+				.where(eq(DB.Tables.passwordResets.user_id, user.id))
+				.run();
+
+			await UserPreferencesHandler.deleteAllForUser(user.id, tx);
+
+			await tx.delete(DB.Tables.users).where(eq(DB.Tables.users.id, user.id)).run();
+		});
+
+		return APIResponse.successNoData(c, "User deleted successfully");
+	},
+);
diff --git a/server/lib/api/versions/v1/routes/admin/users/model.ts b/server/lib/api/versions/v1/routes/admin/users/model.ts
new file mode 100644
index 0000000..f8ecde0
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/admin/users/model.ts
@@ -0,0 +1,78 @@
+import { createInsertSchema, createSelectSchema, createUpdateSchema } from "drizzle-zod";
+import z from "zod";
+import { DB } from "../../../../../../db";
+import {
+	UserAccountSettings,
+	UserDataPolicies,
+} from "../../../../../utils/shared-models/accountData";
+
+export namespace AdminUsersModel {
+	const BaseUser = createSelectSchema(DB.Tables.users);
+
+	export const SafeUser = BaseUser.omit({ password_hash: true });
+	export type SafeUser = z.infer<typeof SafeUser>;
+}
+
+export namespace AdminUsersModel.GetAll {
+	export const Query = z.object({
+		role: UserAccountSettings.Role.optional(),
+		search: z.string().min(1).max(64).optional(),
+		limit: z.coerce.number().int().min(1).max(100).optional(),
+		offset: z.coerce.number().int().min(0).optional(),
+	});
+	export type Query = z.infer<typeof Query>;
+
+	export const Response = z.array(SafeUser);
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AdminUsersModel.Create {
+	const InsertSchema = createInsertSchema(DB.Tables.users, {
+		username: UserDataPolicies.Username,
+		display_name: z.string().min(1).max(64),
+		email: z.email(),
+	}).omit({
+		id: true,
+		password_hash: true,
+		created_at: true,
+	});
+
+	export const Body = InsertSchema.extend({
+		password: z.string().min(8).max(128),
+	});
+	export type Body = z.infer<typeof Body>;
+
+	export const Response = SafeUser;
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AdminUsersModel.Update {
+	export const Body = createUpdateSchema(DB.Tables.users)
+		.omit({
+			id: true,
+			password_hash: true,
+			created_at: true,
+		})
+		.partial()
+		.refine((data) => Object.values(data).some((value) => value !== undefined), {
+			message: "At least one field must be provided",
+		});
+
+	export type Body = z.infer<typeof Body>;
+}
+
+export namespace AdminUsersModel.UpdatePassword {
+	export const Body = z.object({
+		password: UserDataPolicies.Password,
+	});
+
+	export type Body = z.infer<typeof Body>;
+}
+
+export namespace AdminUsersModel.UserId {
+	export const Params = z.object({
+		userId: z.coerce.number().int().positive(),
+	});
+
+	export type Params = z.infer<typeof Params>;
+}
diff --git a/server/lib/api/versions/v1/routes/agents/index.ts b/server/lib/api/versions/v1/routes/agents/index.ts
new file mode 100644
index 0000000..766b311
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/agents/index.ts
@@ -0,0 +1,297 @@
+import { and, eq } from "drizzle-orm";
+import type { Context } from "hono";
+import { Hono } from "hono";
+import { validator } from "hono-openapi";
+import z from "zod";
+import { AgentAuth } from "../../../../../agents/auth";
+import { AgentCloseCodes, AgentRegistry } from "../../../../../agents/registry";
+import { DB } from "../../../../../db";
+import { Logger } from "../../../../../utils/logger";
+import { APIResponse } from "../../../../utils/api-res";
+import { APIResponseSpec, APIRouteSpec } from "../../../../utils/specHelpers";
+import { DOCS_TAGS } from "../../docs";
+import { getUserID, requireUser } from "../../middleware/requireUser";
+import { AgentsModel } from "./model";
+
+export const router = new Hono().basePath("/agents");
+
+export function toAgentResponse(agent: DB.Models.Agent): AgentsModel.Agent {
+	return {
+		id: agent.id,
+		name: agent.name,
+		description: agent.description,
+		kind: agent.kind,
+		state:
+			agent.token_id === null ? "unenrolled" : AgentRegistry.isOnline(agent.id) ? "online" : "offline",
+		version: agent.version,
+		capabilities: agent.capabilities,
+		info: agent.info,
+		last_seen_at: agent.last_seen_at,
+		enrolled_at: agent.enrolled_at,
+		created_at: agent.created_at,
+	};
+}
+
+// --- Enrollment (called by agents, no user authentication) --------------------------------------
+
+const ENROLL_WINDOW_MS = 5 * 60 * 1000;
+const ENROLL_MAX_ATTEMPTS = 20;
+const enrollAttempts = new Map<string, { count: number; resetAt: number }>();
+
+function registerEnrollAttempt(c: Context) {
+	// @ts-ignore bun/hono provides a native request with connection info
+	const client = (c.req.raw as any)?.remoteAddr?.hostname ?? "unknown";
+	const now = Date.now();
+
+	let entry = enrollAttempts.get(client);
+	if (!entry || entry.resetAt <= now) {
+		entry = { count: 0, resetAt: now + ENROLL_WINDOW_MS };
+		enrollAttempts.set(client, entry);
+	}
+	entry.count += 1;
+	return entry.count <= ENROLL_MAX_ATTEMPTS;
+}
+
+router.post(
+	"/enroll",
+
+	APIRouteSpec.unauthenticated({
+		summary: "Enroll an agent",
+		description:
+			"Called by an agent with its single-use enrollment token and a secret it generated itself. " +
+			"Returns the token id the agent connects with: `Authorization: Bearer netignite_agent_<token_id>:<secret>`.",
+		tags: [DOCS_TAGS.AGENTS],
+
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.success("Agent enrolled", AgentsModel.Enroll.Response),
+			APIResponseSpec.unauthorized("Unauthorized: Unknown, used or expired enrollment token"),
+			APIResponseSpec.tooManyRequests("Too many enrollment attempts"),
+		),
+	}),
+
+	validator("json", AgentsModel.Enroll.Body),
+
+	async (c) => {
+		if (!registerEnrollAttempt(c)) {
+			return APIResponse.tooManyRequests(c, "Too many enrollment attempts, try again later");
+		}
+
+		const { enrollment_token, secret } = c.req.valid("json");
+		if (!AgentAuth.SECRET_PATTERN.test(secret)) {
+			return APIResponse.badRequest(
+				c,
+				"The secret must be 32–128 characters of A-Z, a-z, 0-9, _ and -",
+			);
+		}
+
+		const result = await AgentAuth.enroll(enrollment_token, secret);
+		if (!result) {
+			return APIResponse.unauthorized(c, "Unknown, used or expired enrollment token");
+		}
+
+		Logger.info(`Agent ${result.agent.id} enrolled`);
+		return APIResponse.success(c, "Agent enrolled", {
+			agent_id: result.agent.id,
+			kind: result.agent.kind,
+			token_id: result.token_id,
+		} satisfies AgentsModel.Enroll.Response);
+	},
+);
+
+// --- Management (the owner's agents) -----------------------------------------------------------
+
+router.use("*", async (c, next) => {
+	if (c.req.path.endsWith("/agents/enroll")) return await next();
+	return await requireUser(c, next);
+});
+
+router.get(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "List agents",
+		description: "All agents of the authenticated user. Agents are never shared.",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Agents retrieved", AgentsModel.Agent.array()),
+		),
+	}),
+
+	async (c) => {
+		const agents = await DB.instance()
+			.select()
+			.from(DB.Tables.agents)
+			.where(eq(DB.Tables.agents.owner_id, getUserID(c)))
+			.orderBy(DB.Tables.agents.name);
+
+		return APIResponse.success(c, "Agents retrieved", agents.map(toAgentResponse));
+	},
+);
+
+router.post(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Create an agent",
+		description: "Creates an agent. It can connect once it has been enrolled.",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.created("Agent created", AgentsModel.Agent),
+		),
+	}),
+
+	validator("json", AgentsModel.Create.Body),
+
+	async (c) => {
+		const body = c.req.valid("json");
+
+		const agent = await DB.instance()
+			.insert(DB.Tables.agents)
+			.values({ ...body, owner_id: getUserID(c) })
+			.returning()
+			.get();
+
+		return APIResponse.created(c, "Agent created", toAgentResponse(agent));
+	},
+);
+
+const AgentParam = z.object({ agentID: z.coerce.number().int().positive() });
+
+/** Resolves `:agentID` to an agent of the caller, or answers 404. */
+router.use("/:agentID/*", validator("param", AgentParam), async (c, next) => {
+	// @ts-ignore set by the validator above
+	const { agentID } = c.req.valid("param") as z.infer<typeof AgentParam>;
+
+	const agent = await DB.instance()
+		.select()
+		.from(DB.Tables.agents)
+		.where(and(eq(DB.Tables.agents.id, agentID), eq(DB.Tables.agents.owner_id, getUserID(c))))
+		.get();
+
+	if (!agent) return APIResponse.notFound(c, "Agent not found");
+
+	// @ts-ignore
+	c.set("agent", agent);
+	await next();
+});
+
+function getAgent(c: Context) {
+	// @ts-ignore set by the middleware above
+	return c.get("agent") as DB.Models.Agent;
+}
+
+router.get(
+	"/:agentID",
+
+	APIRouteSpec.authenticated({
+		summary: "Get an agent",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Agent retrieved", AgentsModel.Agent),
+			APIResponseSpec.notFound("Agent not found"),
+		),
+	}),
+
+	async (c) => APIResponse.success(c, "Agent retrieved", toAgentResponse(getAgent(c))),
+);
+
+router.put(
+	"/:agentID",
+
+	APIRouteSpec.authenticated({
+		summary: "Update an agent",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.success("Agent updated", AgentsModel.Agent),
+			APIResponseSpec.notFound("Agent not found"),
+		),
+	}),
+
+	validator("json", AgentsModel.Update.Body),
+
+	async (c) => {
+		const agent = await DB.instance()
+			.update(DB.Tables.agents)
+			.set(c.req.valid("json"))
+			.where(eq(DB.Tables.agents.id, getAgent(c).id))
+			.returning()
+			.get();
+
+		return APIResponse.success(c, "Agent updated", toAgentResponse(agent));
+	},
+);
+
+router.delete(
+	"/:agentID",
+
+	APIRouteSpec.authenticated({
+		summary: "Delete an agent",
+		description:
+			"Disconnects and deletes the agent. Devices that used it keep their settings but have no agent.",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.successNoData("Agent deleted"),
+			APIResponseSpec.notFound("Agent not found"),
+		),
+	}),
+
+	async (c) => {
+		const agent = getAgent(c);
+
+		await DB.instance().delete(DB.Tables.agents).where(eq(DB.Tables.agents.id, agent.id));
+		AgentRegistry.disconnect(agent.id, AgentCloseCodes.DELETED, "Agent deleted");
+
+		return APIResponse.successNoData(c, "Agent deleted");
+	},
+);
+
+router.post(
+	"/:agentID/enrollments",
+
+	APIRouteSpec.authenticated({
+		summary: "Create an enrollment token",
+		description:
+			"Creates a single-use enrollment token (valid 15 minutes) for `netignite-agent pair`. Older unused " +
+			"tokens of the agent stop working. Enrolling replaces the agent's current credential.",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.created("Enrollment token created", AgentsModel.Enrollment.Response),
+			APIResponseSpec.notFound("Agent not found"),
+		),
+	}),
+
+	async (c) => {
+		const enrollment = await AgentAuth.createEnrollment(getAgent(c).id, getUserID(c));
+		return APIResponse.created(
+			c,
+			"Enrollment token created",
+			enrollment satisfies AgentsModel.Enrollment.Response,
+		);
+	},
+);
+
+router.post(
+	"/:agentID/revoke",
+
+	APIRouteSpec.authenticated({
+		summary: "Revoke an agent's credential",
+		description: "Disconnects the agent. It can only connect again after a new enrollment.",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Credential revoked", AgentsModel.Agent),
+			APIResponseSpec.notFound("Agent not found"),
+		),
+	}),
+
+	async (c) => {
+		const agent = getAgent(c);
+		AgentAuth.revoke(agent.id);
+
+		const updated = await DB.instance()
+			.select()
+			.from(DB.Tables.agents)
+			.where(eq(DB.Tables.agents.id, agent.id))
+			.get();
+		return APIResponse.success(c, "Credential revoked", toAgentResponse(updated ?? agent));
+	},
+);
diff --git a/server/lib/api/versions/v1/routes/agents/model.ts b/server/lib/api/versions/v1/routes/agents/model.ts
new file mode 100644
index 0000000..872a5be
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/agents/model.ts
@@ -0,0 +1,65 @@
+import { z } from "zod";
+import { AgentSettings } from "../../../../utils/shared-models/netigniteData";
+
+export namespace AgentsModel {
+	export const Name = z.string().trim().min(1, "Name is required").max(64, "Name is too long");
+	export const Description = z.string().trim().max(500, "Description is too long");
+
+	export const Agent = z.object({
+		id: z.number(),
+		name: z.string(),
+		description: z.string(),
+		kind: AgentSettings.Kind,
+		state: AgentSettings.ConnectionState,
+		version: z.string().nullable(),
+		capabilities: z.array(z.string()),
+		info: z.record(z.string(), z.unknown()).nullable(),
+		last_seen_at: z.number().nullable(),
+		enrolled_at: z.number().nullable(),
+		created_at: z.number(),
+	});
+	export type Agent = z.infer<typeof Agent>;
+}
+
+export namespace AgentsModel.Create {
+	export const Body = z.object({
+		name: AgentsModel.Name,
+		description: AgentsModel.Description.default(""),
+		kind: AgentSettings.Kind,
+	});
+	export type Body = z.infer<typeof Body>;
+}
+
+export namespace AgentsModel.Update {
+	export const Body = z.object({
+		name: AgentsModel.Name.optional(),
+		description: AgentsModel.Description.optional(),
+	});
+	export type Body = z.infer<typeof Body>;
+}
+
+export namespace AgentsModel.Enrollment {
+	export const Response = z.object({
+		/** Single-use, valid for 15 minutes. */
+		token: z.string(),
+		expires_at: z.number(),
+	});
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AgentsModel.Enroll {
+	export const Body = z.object({
+		enrollment_token: z.string().min(1).max(256),
+		/** Generated by the agent: 32–128 characters `A-Z a-z 0-9 _ -`. */
+		secret: z.string().min(32).max(128),
+	});
+	export type Body = z.infer<typeof Body>;
+
+	export const Response = z.object({
+		agent_id: z.number(),
+		kind: AgentSettings.Kind,
+		/** The agent connects with `Authorization: Bearer netignite_agent_<token_id>:<secret>`. */
+		token_id: z.string(),
+	});
+	export type Response = z.infer<typeof Response>;
+}
diff --git a/server/lib/api/versions/v1/routes/auth/index.ts b/server/lib/api/versions/v1/routes/auth/index.ts
new file mode 100644
index 0000000..1232042
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/auth/index.ts
@@ -0,0 +1,325 @@
+import { eq, or } from "drizzle-orm";
+import type { Context } from "hono";
+import { Hono } from "hono";
+import { validator as zValidator } from "hono-openapi";
+import { DB } from "../../../../../db";
+import { type DrizzleDB } from "../../../../../db/utils";
+import { Logger } from "../../../../../utils/logger";
+import { APIResponse } from "../../../../utils/api-res";
+import { AuthHandler, SessionHandler } from "../../../../utils/authHandler";
+import { RuntimeMetadata } from "../../../../utils/metadata";
+import { APIResponseSpec, APIRouteSpec } from "../../../../utils/specHelpers";
+import { DOCS_TAGS } from "../../docs";
+import { AuthModel } from "./model";
+
+// Dummy bcrypt hash for timing-normalized login failures — prevents username enumeration
+// Generated once at module load so it's a valid, cost-equivalent hash
+const DUMMY_PASSWORD_HASH = await Bun.password.hash("dummy-timing-constant");
+
+// Simple in-memory rate limiter for login to reduce brute-force risk
+const LOGIN_WINDOW_MS = 5 * 60 * 1000; // 5 minutes
+const LOGIN_MAX_ATTEMPTS = 5;
+const LOGIN_MAX_GLOBAL_ATTEMPTS = 15; // Per-username limit across all IPs
+const loginAttempts = new Map<string, { count: number; resetAt: number }>();
+const globalLoginAttempts = new Map<string, { count: number; resetAt: number }>();
+
+// Periodic cleanup to prevent unbounded memory growth — runs every 5 minutes
+const LOGIN_CLEANUP_INTERVAL = setInterval(() => {
+	const now = Date.now();
+	for (const [key, entry] of loginAttempts) {
+		if (entry.resetAt <= now) loginAttempts.delete(key);
+	}
+	for (const [key, entry] of globalLoginAttempts) {
+		if (entry.resetAt <= now) globalLoginAttempts.delete(key);
+	}
+}, LOGIN_WINDOW_MS);
+// Allow the process to exit without waiting for this interval
+LOGIN_CLEANUP_INTERVAL.unref();
+
+function getClientId(c: Context) {
+	// @ts-ignore bun/hono provides a native request with connection info
+	const remote = (c.req.raw as any)?.remoteAddr?.hostname;
+	return remote || "unknown";
+}
+
+function getLoginAttemptKey(clientId: string, username: string) {
+	return `${clientId}:${username.toLowerCase()}`;
+}
+
+function getGlobalLoginAttemptKey(username: string) {
+	return username.toLowerCase();
+}
+
+/**
+ * Register a failed attempt, incrementing the counter atomically.
+ * Returns the new count after increment — no await between read and write.
+ */
+function registerFailedLoginAttempt(
+	loginAttemptKey: string,
+	globalKey: string,
+): { perIpCount: number; globalCount: number } {
+	const now = Date.now();
+
+	// Per-IP-per-username counter
+	let entry = loginAttempts.get(loginAttemptKey);
+	if (!entry || entry.resetAt <= now) {
+		entry = { count: 1, resetAt: now + LOGIN_WINDOW_MS };
+		loginAttempts.set(loginAttemptKey, entry);
+	} else {
+		entry.count += 1;
+	}
+
+	// Global per-username counter
+	let globalEntry = globalLoginAttempts.get(globalKey);
+	if (!globalEntry || globalEntry.resetAt <= now) {
+		globalEntry = { count: 1, resetAt: now + LOGIN_WINDOW_MS };
+		globalLoginAttempts.set(globalKey, globalEntry);
+	} else {
+		globalEntry.count += 1;
+	}
+
+	return { perIpCount: entry.count, globalCount: globalEntry.count };
+}
+
+function clearFailedLoginAttempts(loginAttemptKey: string, globalKey: string) {
+	loginAttempts.delete(loginAttemptKey);
+	globalLoginAttempts.delete(globalKey);
+}
+
+export const router = new Hono().basePath("/auth");
+
+router.post(
+	"/login",
+
+	APIRouteSpec.unauthenticated({
+		summary: "User Login",
+		description: "Authenticate a user with their username and password",
+		tags: [DOCS_TAGS.AUTHENTICATION],
+
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.success("Login successful", AuthModel.Login.Response),
+			APIResponseSpec.unauthorized("Unauthorized: Invalid username or password"),
+			APIResponseSpec.tooManyRequests("Too many login attempts. Try again later."),
+		),
+	}),
+
+	zValidator("json", AuthModel.Login.Body),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.get(c) as AuthHandler.UnauthenticatedAuthContext;
+		if (authContext.type !== "unauthenticated") {
+			return APIResponse.forbidden(c, "You are already authenticated");
+		}
+
+		const { username, password } = c.req.valid("json");
+
+		try {
+			const clientId = getClientId(c);
+			const loginAttemptKey = getLoginAttemptKey(clientId, username);
+			const globalKey = getGlobalLoginAttemptKey(username);
+
+			// Increment counters FIRST, then check limits — eliminates TOCTOU race
+			const { perIpCount, globalCount } = registerFailedLoginAttempt(loginAttemptKey, globalKey);
+
+			if (perIpCount > LOGIN_MAX_ATTEMPTS || globalCount > LOGIN_MAX_GLOBAL_ATTEMPTS) {
+				const retrySeconds = Math.max(1, Math.ceil(LOGIN_WINDOW_MS / 1000));
+				c.header("Retry-After", retrySeconds.toString());
+				return APIResponse.tooManyRequests(c, `Too many login attempts. Try again in ${retrySeconds}s`);
+			}
+
+			const user = DB.instance()
+				.select()
+				.from(DB.Tables.users)
+				.where(eq(DB.Tables.users.username, username))
+				.get();
+			if (!user) {
+				// Timing-normalized: always run a bcrypt call to prevent username enumeration
+				await Bun.password.verify("dummy-timing-constant", DUMMY_PASSWORD_HASH);
+				return APIResponse.unauthorized(c, "Invalid username or password");
+			}
+
+			const passwordMatch = await Bun.password.verify(password, user.password_hash);
+			if (!passwordMatch) {
+				return APIResponse.unauthorized(c, "Invalid username or password");
+			}
+
+			// Successful login — clear all counters for this user
+			clearFailedLoginAttempts(loginAttemptKey, globalKey);
+
+			// Users imported from NetIgnite v1 still have bcrypt hashes; upgrade them to argon2id.
+			if (user.password_hash.startsWith("$2")) {
+				await DB.instance()
+					.update(DB.Tables.users)
+					.set({ password_hash: await Bun.password.hash(password) })
+					.where(eq(DB.Tables.users.id, user.id));
+			}
+
+			const session = await DB.instance().transaction(async (tx: DrizzleDB) => {
+				return await SessionHandler.createSession(user.id, tx);
+			});
+
+			return APIResponse.success(c, "Login successful", session satisfies AuthModel.Login.Response);
+		} catch (error: any) {
+			Logger.error("Failed to create session", error.stack || error.message || error);
+			return APIResponse.serverError(c, "Failed to create session");
+		}
+	},
+);
+
+router.get(
+	"/session",
+
+	APIRouteSpec.authenticated({
+		summary: "Get Current Session",
+		description: "Retrieve the current user's session information",
+		tags: [DOCS_TAGS.AUTHENTICATION],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Session info retrieved successfully", AuthModel.Session.Response),
+			APIResponseSpec.unauthorized(
+				"Unauthorized: Invalid or missing session token / Your Auth Context is not a session",
+			),
+		),
+	}),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.get(c);
+		if (authContext.type !== "session") {
+			return APIResponse.unauthorized(c, "Your Auth Context is not a session");
+		}
+
+		return APIResponse.success(c, "Session info retrieved successfully", {
+			user_id: authContext.user_id,
+			user_role: authContext.user_role,
+			created_at: authContext.created_at,
+			expires_at: authContext.expires_at,
+		} satisfies AuthModel.Session.Response);
+	},
+);
+
+router.post(
+	"/logout",
+
+	APIRouteSpec.authenticated({
+		summary: "User Logout",
+		description: "Invalidate the current user's session",
+		tags: [DOCS_TAGS.AUTHENTICATION],
+
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.successNoData("Logout successful"),
+			APIResponseSpec.unauthorized(
+				"Unauthorized: Invalid or missing session token / Your Auth Context is not a session",
+			),
+		),
+	}),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.get(c);
+
+		if (authContext.type !== "session") {
+			return APIResponse.unauthorized(c, "Your Auth Context is not a session");
+		}
+
+		await SessionHandler.inValidateSession(authContext.id);
+
+		return APIResponse.successNoData(c, "Logout successful");
+	},
+);
+
+// Signup is allowed only while an admin has enabled public registration.
+const SIGNUP_WINDOW_MS = 60 * 60 * 1000;
+const SIGNUP_MAX_PER_CLIENT = 5;
+const signupAttempts = new Map<string, { count: number; resetAt: number }>();
+
+router.get(
+	"/registration",
+
+	APIRouteSpec.unauthenticated({
+		summary: "Registration status",
+		description: "Whether public sign-up is enabled on this server.",
+		tags: [DOCS_TAGS.AUTHENTICATION],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Registration status", AuthModel.Registration.Response),
+		),
+	}),
+
+	async (c) => {
+		const { registration_enabled } = await RuntimeMetadata.getSettings();
+		return APIResponse.success(c, "Registration status", { enabled: registration_enabled });
+	},
+);
+
+router.post(
+	"/signup",
+
+	APIRouteSpec.unauthenticated({
+		summary: "Sign up",
+		description:
+			"Creates a user account and logs it in. Only available while public registration is enabled.",
+		tags: [DOCS_TAGS.AUTHENTICATION],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.created("Account created", AuthModel.Signup.Response),
+			APIResponseSpec.forbidden("Public registration is disabled"),
+			APIResponseSpec.conflict("Username or email address already in use"),
+			APIResponseSpec.tooManyRequests("Too many sign-ups from this client"),
+		),
+	}),
+
+	zValidator("json", AuthModel.Signup.Body),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.get(c);
+		if (authContext.type !== "unauthenticated") {
+			return APIResponse.forbidden(c, "You are already authenticated");
+		}
+
+		if (!(await RuntimeMetadata.getSettings()).registration_enabled) {
+			return APIResponse.forbidden(c, "Public registration is disabled on this server");
+		}
+
+		const clientId = getClientId(c);
+		const now = Date.now();
+		let attempts = signupAttempts.get(clientId);
+		if (!attempts || attempts.resetAt <= now) {
+			attempts = { count: 0, resetAt: now + SIGNUP_WINDOW_MS };
+			signupAttempts.set(clientId, attempts);
+		}
+		attempts.count += 1;
+		if (attempts.count > SIGNUP_MAX_PER_CLIENT) {
+			return APIResponse.tooManyRequests(c, "Too many sign-ups, try again later");
+		}
+
+		const { username, email, password, display_name } = c.req.valid("json");
+
+		const duplicate = DB.instance()
+			.select({ id: DB.Tables.users.id })
+			.from(DB.Tables.users)
+			.where(or(eq(DB.Tables.users.username, username), eq(DB.Tables.users.email, email)))
+			.get();
+		if (duplicate) {
+			return APIResponse.conflict(c, "Username or email address already in use");
+		}
+
+		try {
+			const user = DB.instance()
+				.insert(DB.Tables.users)
+				.values({
+					username,
+					email,
+					display_name: display_name ?? username,
+					password_hash: await Bun.password.hash(password),
+					role: "user",
+				})
+				.returning()
+				.get();
+			const session = await SessionHandler.createSession(user.id);
+
+			return APIResponse.created(c, "Account created", session satisfies AuthModel.Signup.Response);
+		} catch (error: any) {
+			Logger.error("Failed to create account", error.stack || error.message || error);
+			return APIResponse.serverError(c, "Failed to create account");
+		}
+	},
+);
+
+router.route("/", (await import("./reset-password")).router);
diff --git a/server/lib/api/versions/v1/routes/auth/model.ts b/server/lib/api/versions/v1/routes/auth/model.ts
new file mode 100644
index 0000000..0b57ec4
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/auth/model.ts
@@ -0,0 +1,48 @@
+import { createSelectSchema } from "drizzle-zod";
+import { z } from "zod";
+import { DB } from "../../../../../db";
+import { UserDataPolicies } from "../../../../utils/shared-models/accountData";
+
+export namespace AuthModel.Login {
+	export const Body = z.object({
+		username: z.string(),
+		password: z.string(),
+	});
+	export type Body = z.infer<typeof Body>;
+
+	export const Response = createSelectSchema(DB.Tables.sessions)
+		.omit({
+			id: true,
+			hashed_token: true,
+		})
+		.extend({
+			token: z.string(),
+		});
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AuthModel.Session {
+	export const Response = createSelectSchema(DB.Tables.sessions).omit({
+		id: true,
+		hashed_token: true,
+	});
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AuthModel.Signup {
+	export const Body = z.object({
+		username: UserDataPolicies.Username,
+		display_name: z.string().trim().min(1).max(64).optional(),
+		email: z.email().trim(),
+		password: z.string().min(8).max(128),
+	});
+	export type Body = z.infer<typeof Body>;
+
+	export const Response = AuthModel.Login.Response;
+	export type Response = AuthModel.Login.Response;
+}
+
+export namespace AuthModel.Registration {
+	export const Response = z.object({ enabled: z.boolean() });
+	export type Response = z.infer<typeof Response>;
+}
diff --git a/server/lib/api/versions/v1/routes/auth/reset-password/index.ts b/server/lib/api/versions/v1/routes/auth/reset-password/index.ts
new file mode 100644
index 0000000..094ca01
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/auth/reset-password/index.ts
@@ -0,0 +1,235 @@
+import { randomBytes as crypto_randomBytes } from "crypto";
+import { eq } from "drizzle-orm";
+import { Hono } from "hono";
+import { validator as zValidator } from "hono-openapi";
+import { DB } from "../../../../../../db";
+import { type DrizzleDB } from "../../../../../../db/utils";
+import { LCrypt } from "../../../../../../utils/crypto/lcrypt";
+import { Logger } from "../../../../../../utils/logger";
+import { APIResponse } from "../../../../../utils/api-res";
+import { AuthHandler, SessionHandler } from "../../../../../utils/authHandler";
+import { EmailService } from "../../../../../utils/email";
+import { APIResponseSpec, APIRouteSpec } from "../../../../../utils/specHelpers";
+import { DOCS_TAGS } from "../../../docs";
+import { ResetPasswordModel } from "./model";
+
+// In-memory rate limiter for password reset requests
+const RESET_REQUEST_WINDOW_MS = 15 * 60 * 1000; // 15 minutes
+const RESET_REQUEST_MAX_PER_EMAIL = 1;
+const RESET_CONSUME_MAX_PER_TOKEN = 3;
+const resetRequestAttempts = new Map<string, { count: number; resetAt: number }>();
+const resetConsumeAttempts = new Map<string, { count: number; resetAt: number }>();
+
+// Periodic cleanup to prevent memory leaks
+const RESET_CLEANUP_INTERVAL = setInterval(() => {
+	const now = Date.now();
+	for (const [key, entry] of resetRequestAttempts) {
+		if (entry.resetAt <= now) resetRequestAttempts.delete(key);
+	}
+	for (const [key, entry] of resetConsumeAttempts) {
+		if (entry.resetAt <= now) resetConsumeAttempts.delete(key);
+	}
+}, RESET_REQUEST_WINDOW_MS);
+RESET_CLEANUP_INTERVAL.unref();
+
+// Tokens are stored hashed, never in plaintext. Uses LCrypt.sha256 (sha3-256)
+// so init-time tokens (db/index) and endpoint tokens share one algorithm.
+export function hashResetToken(resetToken: string) {
+	return LCrypt.sha256(resetToken).toHex();
+}
+
+function checkRateLimit(
+	map: Map<string, { count: number; resetAt: number }>,
+	key: string,
+	maxAttempts: number,
+	windowMs: number,
+): boolean {
+	const now = Date.now();
+	let entry = map.get(key);
+	if (!entry || entry.resetAt <= now) {
+		entry = { count: 1, resetAt: now + windowMs };
+		map.set(key, entry);
+		return true; // allowed
+	}
+	entry.count += 1;
+	if (entry.count > maxAttempts) {
+		return false; // blocked
+	}
+	return true;
+}
+
+export const router = new Hono().basePath("/reset-password");
+
+router.post(
+	"/",
+
+	APIRouteSpec.unauthenticated({
+		summary: "Reset your password using a reset token",
+		description: "Reset your password using a valid reset token",
+		tags: [DOCS_TAGS.AUTHENTICATION],
+
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.badRequest("Invalid reset token"),
+			APIResponseSpec.unauthorized("You are already authenticated"),
+			APIResponseSpec.successNoData("Password has been reset successfully"),
+		),
+	}),
+
+	zValidator("json", ResetPasswordModel.Reset.Body),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.get(c) as AuthHandler.UnauthenticatedAuthContext;
+		if (authContext.type !== "unauthenticated") {
+			return APIResponse.unauthorized(c, "You are already authenticated");
+		}
+
+		const resetData = c.req.valid("json");
+
+		try {
+			const hashedResetToken = hashResetToken(resetData.reset_token);
+
+			// Rate limit: max 3 attempts per token
+			if (
+				!checkRateLimit(
+					resetConsumeAttempts,
+					hashedResetToken,
+					RESET_CONSUME_MAX_PER_TOKEN,
+					RESET_REQUEST_WINDOW_MS,
+				)
+			) {
+				return APIResponse.badRequest(c, "Invalid reset token");
+			}
+
+			let checkToken = DB.instance()
+				.select()
+				.from(DB.Tables.passwordResets)
+				.where(eq(DB.Tables.passwordResets.token, hashedResetToken))
+				.get();
+
+			if (!checkToken) {
+				return APIResponse.badRequest(c, "Invalid reset token");
+			}
+
+			if (checkToken.expires_at < Date.now()) {
+				return APIResponse.badRequest(c, "Invalid reset token");
+			}
+
+			const user = DB.instance()
+				.select()
+				.from(DB.Tables.users)
+				.where(eq(DB.Tables.users.id, checkToken.user_id))
+				.get();
+
+			if (!user) {
+				throw new Error("User for reset token not found");
+			}
+
+			const newPasswordHash = await Bun.password.hash(resetData.new_password);
+
+			await DB.instance().transaction(async (tx: DrizzleDB) => {
+				await tx
+					.update(DB.Tables.users)
+					.set({
+						password_hash: newPasswordHash,
+					})
+					.where(eq(DB.Tables.users.id, user.id))
+					.run();
+
+				await AuthHandler.invalidateAllAuthContextsForUser(user.id, tx);
+
+				await tx
+					.delete(DB.Tables.passwordResets)
+					.where(eq(DB.Tables.passwordResets.user_id, user.id))
+					.run();
+			});
+
+			return APIResponse.successNoData(c, "Password has been reset successfully");
+		} catch (error: any) {
+			Logger.error("Failed to reset password", error.stack || error.message || error);
+			return APIResponse.serverError(c, "Failed to reset password");
+		}
+	},
+);
+
+router.post(
+	"/request",
+
+	APIRouteSpec.unauthenticated({
+		summary: "Request Password Reset",
+		description: "Request a password reset for a user using their username",
+		tags: [DOCS_TAGS.AUTHENTICATION],
+
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.successNoData("If the username exists, a password reset has been requested"),
+		),
+	}),
+
+	zValidator("json", ResetPasswordModel.RequestReset.Body),
+
+	async (c) => {
+		const authContext = AuthHandler.AuthContext.get(c) as AuthHandler.UnauthenticatedAuthContext;
+		if (authContext.type !== "unauthenticated") {
+			return APIResponse.unauthorized(c, "You are already authenticated");
+		}
+
+		const requestData = c.req.valid("json");
+
+		// Rate limit: max 1 reset request per email per 15 minutes
+		if (
+			!checkRateLimit(
+				resetRequestAttempts,
+				requestData.email.toLowerCase(),
+				RESET_REQUEST_MAX_PER_EMAIL,
+				RESET_REQUEST_WINDOW_MS,
+			)
+		) {
+			return APIResponse.successNoData(
+				c,
+				"If the username exists, a password reset has been requested",
+			);
+		}
+
+		const user = DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.email, requestData.email))
+			.get();
+
+		if (user) {
+			const resetToken = crypto_randomBytes(64).toString("hex");
+
+			try {
+				await DB.instance().transaction(async (tx: DrizzleDB) => {
+					// Delete any existing reset tokens for this user
+					await tx
+						.delete(DB.Tables.passwordResets)
+						.where(eq(DB.Tables.passwordResets.user_id, user.id))
+						.run();
+
+					// Create new reset token — 1 hour expiry (OWASP recommendation: 15-60 min)
+					await tx
+						.insert(DB.Tables.passwordResets)
+						.values({
+							user_id: user.id,
+							token: hashResetToken(resetToken),
+							expires_at: Date.now() + 60 * 60 * 1000, // 1 hour
+						})
+						.run();
+				});
+			} catch (error: any) {
+				Logger.error("Failed to request password reset", error.stack || error.message || error);
+				return APIResponse.serverError(c, "Failed to request password reset");
+			}
+
+			// send email with reset token (fire-and-forget — errors are logged server-side)
+			if (EmailService.isEnabled()) {
+				EmailService.sendPasswordResetEmail(user.email, resetToken);
+			}
+		}
+
+		return APIResponse.successNoData(
+			c,
+			"If the username exists, a password reset has been requested",
+		);
+	},
+);
diff --git a/server/lib/api/versions/v1/routes/auth/reset-password/model.ts b/server/lib/api/versions/v1/routes/auth/reset-password/model.ts
new file mode 100644
index 0000000..fbfece6
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/auth/reset-password/model.ts
@@ -0,0 +1,18 @@
+import z from "zod";
+import { UserDataPolicies } from "../../../../../utils/shared-models/accountData";
+
+export namespace ResetPasswordModel.RequestReset {
+	export const Body = z.object({
+		email: z.email(),
+	});
+	export type Body = z.infer<typeof Body>;
+}
+
+export namespace ResetPasswordModel.Reset {
+	export const Body = z.object({
+		reset_token: z.string().min(1),
+		new_password: UserDataPolicies.Password,
+	});
+
+	export type Body = z.infer<typeof Body>;
+}
diff --git a/server/lib/api/versions/v1/routes/devices/index.ts b/server/lib/api/versions/v1/routes/devices/index.ts
new file mode 100644
index 0000000..5814bbf
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/devices/index.ts
@@ -0,0 +1,638 @@
+import { and, eq, inArray, or } from "drizzle-orm";
+import type { Context } from "hono";
+import { Hono } from "hono";
+import { validator } from "hono-openapi";
+import z from "zod";
+import { DB } from "../../../../../db";
+import { DeviceActionError, DeviceActions } from "../../../../../devices/actions";
+import { DevicePermissions } from "../../../../../devices/permissions";
+import { DeviceStatusService } from "../../../../../devices/status";
+import { APIResponse } from "../../../../utils/api-res";
+import { APIResponseSpec, APIRouteSpec } from "../../../../utils/specHelpers";
+import { DOCS_TAGS } from "../../docs";
+import { getUserID, requireUser } from "../../middleware/requireUser";
+import { toAgentResponse } from "../agents";
+import { DevicesModel, validateStatusConfig } from "./model";
+
+export const router = new Hono().basePath("/devices");
+
+router.use("*", requireUser);
+
+type UserSummary = { id: number; username: string; display_name: string };
+
+async function getUsers(ids: number[]) {
+	if (ids.length === 0) return new Map<number, UserSummary>();
+
+	const users = await DB.instance()
+		.select({
+			id: DB.Tables.users.id,
+			username: DB.Tables.users.username,
+			display_name: DB.Tables.users.display_name,
+		})
+		.from(DB.Tables.users)
+		.where(inArray(DB.Tables.users.id, [...new Set(ids)]));
+	return new Map(users.map((user) => [user.id, user]));
+}
+
+async function getAgentSummaries(ids: (number | null)[]) {
+	const agentIDs = [...new Set(ids.filter((id): id is number => id !== null))];
+	if (agentIDs.length === 0) return new Map<number, NonNullable<DevicesModel.Device["agent"]>>();
+
+	const agents = await DB.instance()
+		.select()
+		.from(DB.Tables.agents)
+		.where(inArray(DB.Tables.agents.id, agentIDs));
+	return new Map(
+		agents.map((agent) => {
+			const { id, name, kind, state } = toAgentResponse(agent);
+			return [agent.id, { id, name, kind, state }];
+		}),
+	);
+}
+
+async function toDeviceResponses(userID: number, devices: DevicePermissions.DeviceWithRole[]) {
+	const owners = await getUsers(devices.map((device) => device.owner_id));
+	const agents = await getAgentSummaries(
+		devices.flatMap((device) => [device.agent_id, device.host_agent_id]),
+	);
+	const favorites = new Set(
+		(
+			await DB.instance()
+				.select({ device_id: DB.Tables.deviceFavorites.device_id })
+				.from(DB.Tables.deviceFavorites)
+				.where(eq(DB.Tables.deviceFavorites.user_id, userID))
+		).map((favorite) => favorite.device_id),
+	);
+
+	return devices.map(
+		(device): DevicesModel.Device => ({
+			id: device.id,
+			name: device.name,
+			type: device.type,
+			description: device.description,
+			mac_address: device.mac_address,
+			wol_port: device.wol_port,
+			agent_id: device.agent_id,
+			status_method: device.status_method,
+			status_address: device.status_address,
+			status_tcp_port: device.status_tcp_port,
+			host_agent_id: device.host_agent_id,
+			created_at: device.created_at,
+			access_role: device.access_role,
+			owner: owners.get(device.owner_id) ?? {
+				id: device.owner_id,
+				username: "unknown",
+				display_name: "Unknown",
+			},
+			agent: device.agent_id !== null ? (agents.get(device.agent_id) ?? null) : null,
+			host_agent: device.host_agent_id !== null ? (agents.get(device.host_agent_id) ?? null) : null,
+			favorite: favorites.has(device.id),
+			status: DeviceStatusService.get(device.id),
+			actions: DevicePermissions.can(device.access_role, "power")
+				? DeviceActions.availableActions(device)
+				: { power_on: false, shutdown: false, reboot: false },
+		}),
+	);
+}
+
+/** Agents referenced by a device must belong to the device's owner. */
+async function checkAgentOwnership(ownerID: number, agentIDs: (number | null | undefined)[]) {
+	const ids = agentIDs.filter((id): id is number => typeof id === "number");
+	if (ids.length === 0) return true;
+
+	const agents = await DB.instance()
+		.select({ id: DB.Tables.agents.id })
+		.from(DB.Tables.agents)
+		.where(and(inArray(DB.Tables.agents.id, ids), eq(DB.Tables.agents.owner_id, ownerID)));
+	return agents.length === new Set(ids).size;
+}
+
+async function checkHostAgentKind(hostAgentID: number | null | undefined) {
+	if (typeof hostAgentID !== "number") return true;
+	const agent = await DB.instance()
+		.select({ kind: DB.Tables.agents.kind })
+		.from(DB.Tables.agents)
+		.where(eq(DB.Tables.agents.id, hostAgentID))
+		.get();
+	return agent?.kind === "linux";
+}
+
+router.get(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "List devices",
+		description: "Devices the user owns and devices shared with them, with the user's role on each.",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Devices retrieved", DevicesModel.Device.array()),
+		),
+	}),
+
+	async (c) => {
+		const userID = getUserID(c);
+		const devices = await DevicePermissions.listAccessible(userID);
+		return APIResponse.success(c, "Devices retrieved", await toDeviceResponses(userID, devices));
+	},
+);
+
+router.post(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Create a device",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.created("Device created", DevicesModel.Device),
+		),
+	}),
+
+	validator("json", DevicesModel.Create.Body),
+
+	async (c) => {
+		const userID = getUserID(c);
+		const body = c.req.valid("json");
+
+		const statusError = validateStatusConfig(body.status_method, body.status_address);
+		if (statusError) return APIResponse.badRequest(c, statusError);
+
+		if (!(await checkAgentOwnership(userID, [body.agent_id, body.host_agent_id]))) {
+			return APIResponse.badRequest(c, "Unknown agent");
+		}
+		if (!(await checkHostAgentKind(body.host_agent_id))) {
+			return APIResponse.badRequest(c, "The host agent must be a Linux agent");
+		}
+
+		const device = await DB.instance()
+			.insert(DB.Tables.devices)
+			.values({ ...body, owner_id: userID })
+			.returning()
+			.get();
+
+		void DeviceStatusService.refresh(device);
+
+		const [response] = await toDeviceResponses(userID, [{ ...device, access_role: "owner" }]);
+		return APIResponse.created(c, "Device created", response as DevicesModel.Device);
+	},
+);
+
+// --- Single device ---------------------------------------------------------------------------
+
+const DeviceParam = z.object({ deviceID: z.coerce.number().int().positive() });
+
+/** Resolves `:deviceID` to a device the caller can access, or answers 404. */
+router.use("/:deviceID/*", validator("param", DeviceParam), async (c, next) => {
+	// @ts-ignore set by the validator above
+	const { deviceID } = c.req.valid("param") as z.infer<typeof DeviceParam>;
+
+	const device = await DevicePermissions.getAccess(getUserID(c), deviceID);
+	if (!device) return APIResponse.notFound(c, "Device not found");
+
+	// @ts-ignore
+	c.set("device", device);
+	await next();
+});
+
+function getDevice(c: Context) {
+	// @ts-ignore set by the middleware above
+	return c.get("device") as DevicePermissions.DeviceWithRole;
+}
+
+function forbidden(c: Context, action: DevicePermissions.Action) {
+	const messages: Record<DevicePermissions.Action, string> = {
+		read: "You can't access this device",
+		power: "Your role on this device doesn't allow power actions",
+		edit: "Your role on this device doesn't allow editing it",
+		manage: "Only the device's owner can do this",
+	};
+	return APIResponse.forbidden(c, messages[action]);
+}
+
+async function deviceResponse(c: Context, device: DevicePermissions.DeviceWithRole) {
+	const [response] = await toDeviceResponses(getUserID(c), [device]);
+	return response as DevicesModel.Device;
+}
+
+router.get(
+	"/:deviceID",
+
+	APIRouteSpec.authenticated({
+		summary: "Get a device",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Device retrieved", DevicesModel.Device),
+			APIResponseSpec.notFound("Device not found"),
+		),
+	}),
+
+	async (c) => APIResponse.success(c, "Device retrieved", await deviceResponse(c, getDevice(c))),
+);
+
+router.put(
+	"/:deviceID",
+
+	APIRouteSpec.authenticated({
+		summary: "Update a device",
+		description: "Owners and managers can edit a device; only the owner can change its agents.",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.success("Device updated", DevicesModel.Device),
+			APIResponseSpec.forbidden("Your role doesn't allow this change"),
+			APIResponseSpec.notFound("Device not found"),
+		),
+	}),
+
+	validator("json", DevicesModel.Update.Body),
+
+	async (c) => {
+		const device = getDevice(c);
+		const body = c.req.valid("json");
+
+		if (!DevicePermissions.can(device.access_role, "edit")) return forbidden(c, "edit");
+
+		const changesAgents =
+			(body.agent_id !== undefined && body.agent_id !== device.agent_id) ||
+			(body.host_agent_id !== undefined && body.host_agent_id !== device.host_agent_id);
+		if (changesAgents && !DevicePermissions.can(device.access_role, "manage"))
+			return forbidden(c, "manage");
+
+		const merged = { ...device, ...body };
+		const statusError = validateStatusConfig(merged.status_method, merged.status_address);
+		if (statusError) return APIResponse.badRequest(c, statusError);
+
+		if (!(await checkAgentOwnership(device.owner_id, [body.agent_id, body.host_agent_id]))) {
+			return APIResponse.badRequest(c, "Unknown agent");
+		}
+		if (!(await checkHostAgentKind(body.host_agent_id))) {
+			return APIResponse.badRequest(c, "The host agent must be a Linux agent");
+		}
+
+		const updated = await DB.instance()
+			.update(DB.Tables.devices)
+			.set(body)
+			.where(eq(DB.Tables.devices.id, device.id))
+			.returning()
+			.get();
+
+		DeviceStatusService.forget(device.id);
+		void DeviceStatusService.refresh(updated);
+
+		return APIResponse.success(
+			c,
+			"Device updated",
+			await deviceResponse(c, { ...updated, access_role: device.access_role }),
+		);
+	},
+);
+
+router.delete(
+	"/:deviceID",
+
+	APIRouteSpec.authenticated({
+		summary: "Delete a device",
+		description: "Only the owner can delete a device. Its shares are removed as well.",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.successNoData("Device deleted"),
+			APIResponseSpec.forbidden("Only the device's owner can do this"),
+			APIResponseSpec.notFound("Device not found"),
+		),
+	}),
+
+	async (c) => {
+		const device = getDevice(c);
+		if (!DevicePermissions.can(device.access_role, "manage")) return forbidden(c, "manage");
+
+		await DB.instance().delete(DB.Tables.devices).where(eq(DB.Tables.devices.id, device.id));
+		DeviceStatusService.forget(device.id);
+
+		return APIResponse.successNoData(c, "Device deleted");
+	},
+);
+
+// --- Power and status ------------------------------------------------------------------------
+
+function powerRoute(
+	path: string,
+	summary: string,
+	description: string,
+	run: (device: DB.Models.Device) => Promise<void>,
+	successMessage: string,
+) {
+	router.post(
+		`/:deviceID/${path}`,
+
+		APIRouteSpec.authenticated({
+			summary,
+			description,
+			tags: [DOCS_TAGS.DEVICES],
+			responses: APIResponseSpec.describeBasic(
+				APIResponseSpec.successNoData(successMessage),
+				APIResponseSpec.forbidden("Your role on this device doesn't allow power actions"),
+				APIResponseSpec.notFound("Device not found"),
+				APIResponseSpec.conflict("The device has no method for this action"),
+				APIResponseSpec.badGateway("The agent reported an error"),
+				APIResponseSpec.serviceUnavailable("The agent is offline"),
+				APIResponseSpec.gatewayTimeout("The agent didn't answer in time"),
+			),
+		}),
+
+		async (c) => {
+			const device = getDevice(c);
+			if (!DevicePermissions.can(device.access_role, "power")) return forbidden(c, "power");
+
+			try {
+				await run(device);
+			} catch (error) {
+				if (!(error instanceof DeviceActionError)) throw error;
+				switch (error.status) {
+					case 409:
+						return APIResponse.conflict(c, error.message);
+					case 502:
+						return APIResponse.badGateway(c, error.message);
+					case 503:
+						return APIResponse.serviceUnavailable(c, error.message);
+					case 504:
+						return APIResponse.gatewayTimeout(c, error.message);
+				}
+			}
+
+			return APIResponse.successNoData(c, successMessage);
+		},
+	);
+}
+
+powerRoute(
+	"power-on",
+	"Power on a device",
+	"Sends a Wake-on-LAN packet through the device's agent. Success means the packet was sent.",
+	(device) => DeviceActions.powerOn(device),
+	"Wake-on-LAN packet sent",
+);
+powerRoute(
+	"shutdown",
+	"Shut down a device",
+	"Shuts the device down through the Linux agent running on it.",
+	(device) => DeviceActions.hostControl(device, "shutdown"),
+	"Shutdown requested",
+);
+powerRoute(
+	"reboot",
+	"Reboot a device",
+	"Reboots the device through the Linux agent running on it.",
+	(device) => DeviceActions.hostControl(device, "reboot"),
+	"Reboot requested",
+);
+
+router.post(
+	"/:deviceID/status",
+
+	APIRouteSpec.authenticated({
+		summary: "Check a device's status now",
+		description:
+			"Runs the status check immediately (at most every 5 seconds per device) and returns the result.",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Status checked", DevicesModel.Status),
+			APIResponseSpec.notFound("Device not found"),
+		),
+	}),
+
+	async (c) =>
+		APIResponse.success(c, "Status checked", await DeviceStatusService.refresh(getDevice(c))),
+);
+
+router.put(
+	"/:deviceID/favorite",
+
+	APIRouteSpec.authenticated({
+		summary: "Add a device to your favorites",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.successNoData("Added to favorites"),
+			APIResponseSpec.notFound("Device not found"),
+		),
+	}),
+
+	async (c) => {
+		await DB.instance()
+			.insert(DB.Tables.deviceFavorites)
+			.values({ user_id: getUserID(c), device_id: getDevice(c).id })
+			.onConflictDoNothing();
+		return APIResponse.successNoData(c, "Added to favorites");
+	},
+);
+
+router.delete(
+	"/:deviceID/favorite",
+
+	APIRouteSpec.authenticated({
+		summary: "Remove a device from your favorites",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.successNoData("Removed from favorites"),
+			APIResponseSpec.notFound("Device not found"),
+		),
+	}),
+
+	async (c) => {
+		await DB.instance()
+			.delete(DB.Tables.deviceFavorites)
+			.where(
+				and(
+					eq(DB.Tables.deviceFavorites.user_id, getUserID(c)),
+					eq(DB.Tables.deviceFavorites.device_id, getDevice(c).id),
+				),
+			);
+		return APIResponse.successNoData(c, "Removed from favorites");
+	},
+);
+
+// --- Sharing ---------------------------------------------------------------------------------
+
+async function listShares(deviceID: number): Promise<DevicesModel.Share.Share[]> {
+	const shares = await DB.instance()
+		.select()
+		.from(DB.Tables.deviceShares)
+		.where(eq(DB.Tables.deviceShares.device_id, deviceID));
+	const users = await getUsers(shares.map((share) => share.user_id));
+
+	return shares.flatMap((share) => {
+		const user = users.get(share.user_id);
+		return user ? [{ user, role: share.role, created_at: share.created_at }] : [];
+	});
+}
+
+router.get(
+	"/:deviceID/shares",
+
+	APIRouteSpec.authenticated({
+		summary: "List a device's shares",
+		tags: [DOCS_TAGS.DEVICE_SHARES],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Shares retrieved", DevicesModel.Share.Share.array()),
+			APIResponseSpec.forbidden("Only the device's owner can do this"),
+			APIResponseSpec.notFound("Device not found"),
+		),
+	}),
+
+	async (c) => {
+		const device = getDevice(c);
+		if (!DevicePermissions.can(device.access_role, "manage")) return forbidden(c, "manage");
+		return APIResponse.success(c, "Shares retrieved", await listShares(device.id));
+	},
+);
+
+router.post(
+	"/:deviceID/shares",
+
+	APIRouteSpec.authenticated({
+		summary: "Share a device",
+		description: "Shares the device with another user, found by username or email address.",
+		tags: [DOCS_TAGS.DEVICE_SHARES],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.created("Device shared", DevicesModel.Share.Share),
+			APIResponseSpec.forbidden("Only the device's owner can do this"),
+			APIResponseSpec.notFound("Device or user not found"),
+			APIResponseSpec.conflict("The device is already shared with this user"),
+		),
+	}),
+
+	validator("json", DevicesModel.Share.CreateBody),
+
+	async (c) => {
+		const device = getDevice(c);
+		if (!DevicePermissions.can(device.access_role, "manage")) return forbidden(c, "manage");
+
+		const { user: identifier, role } = c.req.valid("json");
+
+		const user = await DB.instance()
+			.select({
+				id: DB.Tables.users.id,
+				username: DB.Tables.users.username,
+				display_name: DB.Tables.users.display_name,
+			})
+			.from(DB.Tables.users)
+			.where(
+				or(
+					eq(DB.Tables.users.username, identifier),
+					eq(DB.Tables.users.email, identifier),
+					eq(DB.Tables.users.email, identifier.toLowerCase()),
+				),
+			)
+			.get();
+
+		if (!user) return APIResponse.notFound(c, "No user with this username or email address");
+		if (user.id === device.owner_id)
+			return APIResponse.badRequest(c, "You can't share a device with its owner");
+
+		const share = await DB.instance()
+			.insert(DB.Tables.deviceShares)
+			.values({ device_id: device.id, user_id: user.id, role, created_by_user_id: getUserID(c) })
+			.onConflictDoNothing()
+			.returning()
+			.get();
+
+		if (!share) return APIResponse.conflict(c, "The device is already shared with this user");
+
+		return APIResponse.created(c, "Device shared", {
+			user,
+			role: share.role,
+			created_at: share.created_at,
+		});
+	},
+);
+
+const ShareParam = z.object({
+	deviceID: z.coerce.number().int().positive(),
+	userID: z.coerce.number().int().positive(),
+});
+
+router.put(
+	"/:deviceID/shares/:userID",
+
+	APIRouteSpec.authenticated({
+		summary: "Change a share's role",
+		tags: [DOCS_TAGS.DEVICE_SHARES],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.successNoData("Share updated"),
+			APIResponseSpec.forbidden("Only the device's owner can do this"),
+			APIResponseSpec.notFound("Device or share not found"),
+		),
+	}),
+
+	validator("param", ShareParam),
+	validator("json", DevicesModel.Share.UpdateBody),
+
+	async (c) => {
+		const device = getDevice(c);
+		if (!DevicePermissions.can(device.access_role, "manage")) return forbidden(c, "manage");
+
+		const updated = await DB.instance()
+			.update(DB.Tables.deviceShares)
+			.set({ role: c.req.valid("json").role })
+			.where(
+				and(
+					eq(DB.Tables.deviceShares.device_id, device.id),
+					eq(DB.Tables.deviceShares.user_id, c.req.valid("param").userID),
+				),
+			)
+			.returning()
+			.get();
+
+		if (!updated) return APIResponse.notFound(c, "Share not found");
+		return APIResponse.successNoData(c, "Share updated");
+	},
+);
+
+router.delete(
+	"/:deviceID/shares/:userID",
+
+	APIRouteSpec.authenticated({
+		summary: "Remove a share",
+		description:
+			"The owner removes a share, or a user leaves a device shared with them (their own user id).",
+		tags: [DOCS_TAGS.DEVICE_SHARES],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.successNoData("Share removed"),
+			APIResponseSpec.forbidden("Only the device's owner can do this"),
+			APIResponseSpec.notFound("Device or share not found"),
+		),
+	}),
+
+	validator("param", ShareParam),
+
+	async (c) => {
+		const device = getDevice(c);
+		const { userID } = c.req.valid("param");
+
+		const leaving = userID === getUserID(c);
+		if (!leaving && !DevicePermissions.can(device.access_role, "manage"))
+			return forbidden(c, "manage");
+
+		const removed = await DB.instance()
+			.delete(DB.Tables.deviceShares)
+			.where(
+				and(
+					eq(DB.Tables.deviceShares.device_id, device.id),
+					eq(DB.Tables.deviceShares.user_id, userID),
+				),
+			)
+			.returning()
+			.get();
+
+		if (!removed) return APIResponse.notFound(c, "Share not found");
+
+		// A user who loses access to a device shouldn't keep it as a favorite.
+		await DB.instance()
+			.delete(DB.Tables.deviceFavorites)
+			.where(
+				and(
+					eq(DB.Tables.deviceFavorites.device_id, device.id),
+					eq(DB.Tables.deviceFavorites.user_id, userID),
+				),
+			);
+
+		return APIResponse.successNoData(c, "Share removed");
+	},
+);
diff --git a/server/lib/api/versions/v1/routes/devices/model.ts b/server/lib/api/versions/v1/routes/devices/model.ts
new file mode 100644
index 0000000..3a2ba4f
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/devices/model.ts
@@ -0,0 +1,129 @@
+import { isIP } from "node:net";
+import { z } from "zod";
+import {
+	AgentSettings,
+	DeviceSettings,
+	ShareSettings,
+} from "../../../../utils/shared-models/netigniteData";
+
+const HOSTNAME =
+	/^(?=.{1,253}$)([A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)(\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)*\.?$/;
+
+/** Checks `status_address` against `status_method`; used by create and update. */
+export function validateStatusConfig(
+	method: DeviceSettings.StatusMethod,
+	address: string | null | undefined,
+): string | null {
+	switch (method) {
+		case "ipv4":
+			return address && isIP(address) === 4
+				? null
+				: "An IPv4 address is required for the IPv4 status check";
+		case "ipv6": {
+			// Allow a zone suffix (`fe80::1%eth0`); the agent uses its own interface.
+			const bare = address?.split("%")[0];
+			return bare && isIP(bare) === 6 ? null : "An IPv6 address is required for the IPv6 status check";
+		}
+		case "ssh":
+			return address && (isIP(address) !== 0 || HOSTNAME.test(address))
+				? null
+				: "An IP address or host name is required for the SSH status check";
+		default:
+			return null;
+	}
+}
+
+const AgentSummary = z.object({
+	id: z.number(),
+	name: z.string(),
+	kind: AgentSettings.Kind,
+	state: AgentSettings.ConnectionState,
+});
+
+export namespace DevicesModel {
+	export const AccessRole = z.enum(["owner", ...ShareSettings.Roles]);
+
+	export const Status = z.object({
+		state: DeviceSettings.OnlineState,
+		checked_at: z.number().nullable(),
+		reason: z.string().optional(),
+	});
+
+	export const Device = z.object({
+		id: z.number(),
+		name: z.string(),
+		type: DeviceSettings.Type,
+		description: z.string(),
+		mac_address: z.string(),
+		wol_port: z.number(),
+		agent_id: z.number().nullable(),
+		status_method: DeviceSettings.StatusMethod,
+		status_address: z.string().nullable(),
+		status_tcp_port: z.number().nullable(),
+		host_agent_id: z.number().nullable(),
+		created_at: z.number(),
+
+		/** The caller's role on this device. */
+		access_role: AccessRole,
+		owner: z.object({ id: z.number(), username: z.string(), display_name: z.string() }),
+		/** The agents' names and states, also readable by users the device is shared with. */
+		agent: AgentSummary.nullable(),
+		host_agent: AgentSummary.nullable(),
+		favorite: z.boolean(),
+		status: Status,
+		actions: z.object({ power_on: z.boolean(), shutdown: z.boolean(), reboot: z.boolean() }),
+	});
+	export type Device = z.infer<typeof Device>;
+
+	const Fields = {
+		name: z.string().trim().min(1, "Name is required").max(64, "Name is too long"),
+		type: DeviceSettings.Type,
+		description: z.string().trim().max(500, "Description is too long"),
+		mac_address: DeviceSettings.MacAddress,
+		wol_port: DeviceSettings.WolPort,
+		agent_id: z.number().int().positive().nullable(),
+		status_method: DeviceSettings.StatusMethod,
+		status_address: z.string().trim().min(1).max(253).nullable(),
+		status_tcp_port: z.number().int().min(1).max(65535).nullable(),
+		host_agent_id: z.number().int().positive().nullable(),
+	};
+
+	export namespace Create {
+		export const Body = z.object({
+			name: Fields.name,
+			type: Fields.type,
+			description: Fields.description.default(""),
+			mac_address: Fields.mac_address,
+			wol_port: Fields.wol_port.default(9),
+			agent_id: Fields.agent_id.default(null),
+			status_method: Fields.status_method.default("none"),
+			status_address: Fields.status_address.default(null),
+			status_tcp_port: Fields.status_tcp_port.default(null),
+			host_agent_id: Fields.host_agent_id.default(null),
+		});
+		export type Body = z.infer<typeof Body>;
+	}
+
+	/** All fields optional. `agent_id` and `host_agent_id` can only be changed by the owner. */
+	export namespace Update {
+		export const Body = z.object(Fields).partial();
+		export type Body = z.infer<typeof Body>;
+	}
+
+	export namespace Share {
+		export const Share = z.object({
+			user: z.object({ id: z.number(), username: z.string(), display_name: z.string() }),
+			role: ShareSettings.Role,
+			created_at: z.number(),
+		});
+		export type Share = z.infer<typeof Share>;
+
+		export const CreateBody = z.object({
+			/** Username or email address of the user to share with. */
+			user: z.string().trim().min(1).max(255),
+			role: ShareSettings.Role,
+		});
+
+		export const UpdateBody = z.object({ role: ShareSettings.Role });
+	}
+}
diff --git a/server/lib/db/index.ts b/server/lib/db/index.ts
new file mode 100644
index 0000000..ca4fb9c
--- /dev/null
+++ b/server/lib/db/index.ts
@@ -0,0 +1,168 @@
+import { sql } from "drizzle-orm";
+import { drizzle } from "drizzle-orm/bun-sqlite";
+import { migrate } from "drizzle-orm/bun-sqlite/migrator";
+import { mkdir as fs_mkdir } from "fs/promises";
+import { dirname as path_dirname, join as path_join } from "path";
+import { ConfigHandler } from "../utils/config";
+import { AppConstants } from "../utils/constants";
+import { LCrypt } from "../utils/crypto/lcrypt";
+import { Logger } from "../utils/logger";
+import * as TableSchema from "./schema";
+import { type DrizzleDB } from "./utils";
+
+export class DB {
+	protected static db: DrizzleDB.BunSQLite;
+
+	static async init(
+		path: string,
+		autoMigrate: boolean,
+		configBaseDir: string,
+		migrationsFolder: string,
+	) {
+		await fs_mkdir(path_dirname(path), { recursive: true });
+		await fs_mkdir(configBaseDir, { recursive: true });
+
+		this.db = drizzle(path);
+		if (autoMigrate) {
+			Logger.info("Running database migrations...");
+
+			//@ts-ignore
+			if (Bun?.isStandaloneExecutable) {
+				// `bun build --compile --asset ./drizzle/migrations` embeds the files as `migrations/...`
+				// next to the entry (`/$bunfs/root/migrations` on Linux) — without the `drizzle/` segment.
+				migrationsFolder = path_join(import.meta.dir, "migrations");
+			}
+
+			await migrate(this.db, { migrationsFolder });
+
+			Logger.info("Database migrations completed.");
+		}
+
+		// SQLite leaves foreign keys off unless enabled per connection; the schema's
+		// `onDelete` rules (shares, favorites, enrollments) depend on them.
+		this.db.run(sql`PRAGMA foreign_keys = ON`);
+
+		await this.createInitialAdminUserIfNeeded(configBaseDir);
+
+		Logger.info(`Database initialized at ${path}`);
+	}
+
+	private static async createInitialAdminUserIfNeeded(configBaseDir: string) {
+		const usersTableEmpty = (await this.db.select().from(DB.Tables.users).limit(1)).length === 0;
+		if (!usersTableEmpty) return;
+
+		const username = "admin";
+		const passwordResetToken = LCrypt.randomBytes(64).toString("hex");
+
+		let admin_user_id: number;
+
+		try {
+			admin_user_id = await this.db.transaction(async (tx) => {
+				const admin_user_id = await tx
+					.insert(DB.Tables.users)
+					.values({
+						username,
+						email: `${username}@${AppConstants.DEFAULT_EMAIL_FROM_HOST}`,
+						password_hash: await Bun.password.hash(LCrypt.randomBytes(32).toString("hex")),
+						display_name: "Default Administrator",
+						role: "admin",
+					})
+					.returning()
+					.get().id;
+
+				await tx.insert(DB.Tables.passwordResets).values({
+					token: LCrypt.sha256(passwordResetToken).toHex(),
+					user_id: admin_user_id,
+					expires_at: Date.now() + 7 * 24 * 60 * 60 * 1000, // 7 Days
+				});
+
+				return admin_user_id;
+			});
+		} catch (error) {
+			Logger.critical("Failed to create initial admin user:", error);
+			throw error;
+		}
+
+		// APP_URL is a required config value; the fallback only covers the
+		// impossible-after-loadConfig undefined case so the token file is still usable.
+		const APP_URL = ConfigHandler.getConfig()?.APP_URL || "https://<app-url>";
+
+		await Bun.write(
+			`${configBaseDir}/initial_admin_password_reset_token.txt`,
+			`${APP_URL}/auth/reset-password?token=${passwordResetToken}`,
+			{
+				mode: 0o600,
+				createPath: true,
+			},
+		);
+
+		Logger.info(
+			`Initial admin user created with username: ${username}.\n` +
+				`You can set the password under ${APP_URL}/auth/reset-password?token=${passwordResetToken}\n` +
+				`The url is also saved at ${configBaseDir}/initial_admin_password_reset_token.txt\n`,
+		);
+
+		return admin_user_id;
+	}
+
+	static instance() {
+		if (!this.db) {
+			throw new Error("Database not initialized. Call DB.init() first.");
+		}
+		return DB.db;
+	}
+
+	static async close() {
+		if (!this.db) return;
+
+		Logger.info("Database connection closed.");
+		await this.db.$client.close();
+
+		// `close()` calls sqlite3_close_v2, which defers releasing the OS file
+		// handle until any unfinalized prepared statements are garbage collected.
+		// Force that now so the underlying file is actually free (e.g. for tests
+		// that remove the DB file/directory right after closing).
+		Bun.gc(true);
+		await Bun.sleep(500);
+	}
+}
+
+export namespace DB.Tables {
+	export const users = TableSchema.users;
+	export const sessions = TableSchema.sessions;
+	export const passwordResets = TableSchema.passwordResets;
+	export const apiKeys = TableSchema.apiKeys;
+
+	export const userPreferences = TableSchema.userPreferences;
+
+	export const scheduled_tasks = TableSchema.scheduled_tasks;
+	export const scheduled_tasks_paused_state = TableSchema.scheduled_tasks_paused_state;
+
+	export const metadata = TableSchema.metadata;
+
+	export const agents = TableSchema.agents;
+	export const agentEnrollments = TableSchema.agentEnrollments;
+	export const devices = TableSchema.devices;
+	export const deviceShares = TableSchema.deviceShares;
+	export const deviceFavorites = TableSchema.deviceFavorites;
+}
+
+export namespace DB.Models {
+	export type User = typeof DB.Tables.users.$inferSelect;
+	export type Session = typeof DB.Tables.sessions.$inferSelect;
+	export type PasswordReset = typeof DB.Tables.passwordResets.$inferSelect;
+	export type ApiKey = typeof DB.Tables.apiKeys.$inferSelect;
+
+	export type UserPreference = typeof DB.Tables.userPreferences.$inferSelect;
+
+	export type ScheduledTask = typeof DB.Tables.scheduled_tasks.$inferSelect;
+	export type ScheduledTaskPausedState = typeof DB.Tables.scheduled_tasks_paused_state.$inferSelect;
+
+	export type Metadata = typeof DB.Tables.metadata.$inferSelect;
+
+	export type Agent = typeof DB.Tables.agents.$inferSelect;
+	export type AgentEnrollment = typeof DB.Tables.agentEnrollments.$inferSelect;
+	export type Device = typeof DB.Tables.devices.$inferSelect;
+	export type DeviceShare = typeof DB.Tables.deviceShares.$inferSelect;
+	export type DeviceFavorite = typeof DB.Tables.deviceFavorites.$inferSelect;
+}
diff --git a/server/lib/db/schema.ts b/server/lib/db/schema.ts
new file mode 100644
index 0000000..793a410
--- /dev/null
+++ b/server/lib/db/schema.ts
@@ -0,0 +1,260 @@
+import type { TaskHandler } from "@cleverjs/utils";
+import { desc, eq, sql } from "drizzle-orm";
+import {
+	index,
+	integer,
+	primaryKey,
+	sqliteTable,
+	text,
+	uniqueIndex,
+} from "drizzle-orm/sqlite-core";
+import { UserAccountSettings } from "../api/utils/shared-models/accountData";
+import {
+	AgentSettings,
+	DeviceSettings,
+	ShareSettings,
+} from "../api/utils/shared-models/netigniteData";
+import { SQLUtils } from "./utils";
+
+/**
+ * @deprecated Use DB.Tables.users to access this table.
+ */
+export const users = sqliteTable("users", {
+	id: SQLUtils.primaryKeyIntAutoIncrement("id"),
+
+	username: text().notNull().unique(),
+	display_name: text().notNull(),
+	email: text().notNull().unique(),
+	password_hash: text().notNull(),
+
+	role: text({
+		enum: UserAccountSettings.Roles,
+	})
+		.default("user")
+		.notNull(),
+
+	created_at: SQLUtils.getCreatedAtColumn(),
+});
+
+/**
+ * @deprecated Use DB.Tables.passwordResets to access this table.
+ */
+export const passwordResets = sqliteTable("password_resets", {
+	token: text().primaryKey(),
+	user_id: integer()
+		.notNull()
+		.references(() => users.id, { onDelete: "cascade" }),
+	created_at: SQLUtils.getCreatedAtColumn(),
+	expires_at: integer().notNull(),
+});
+
+/**
+ * @deprecated Use DB.Tables.sessions to access this table.
+ */
+export const sessions = sqliteTable("sessions", {
+	id: text().primaryKey(),
+	hashed_token: text().notNull(),
+	user_id: integer()
+		.notNull()
+		.references(() => users.id, { onDelete: "cascade" }),
+	// we cache user role here for easier permission checking without having to join the users table, and we will check the role in users table on every update to make sure it's still valid
+	user_role: text({
+		enum: UserAccountSettings.Roles,
+	}).notNull(),
+	created_at: SQLUtils.getCreatedAtColumn(),
+	expires_at: integer().notNull(),
+});
+
+/**
+ * @deprecated Use DB.Tables.apiKeys to access this table.
+ */
+export const apiKeys = sqliteTable("api_keys", {
+	id: text().primaryKey(),
+	hashed_token: text().notNull(),
+	user_id: integer()
+		.notNull()
+		.references(() => users.id, { onDelete: "cascade" }),
+	// we cache user role here for easier permission checking without having to join the users table, and we will check the role in users table on every update to make sure it's still valid
+	user_role: text({
+		enum: UserAccountSettings.Roles,
+	}).notNull(),
+	description: text().notNull(),
+	created_at: SQLUtils.getCreatedAtColumn(),
+	expires_at: integer(),
+});
+
+/**
+ * @deprecated Use DB.Tables.userPreferences to access this table.
+ */
+export const userPreferences = sqliteTable(
+	"user_preferences",
+	{
+		id: SQLUtils.primaryKeyIntAutoIncrement("id"),
+		user_id: integer()
+			.notNull()
+			.references(() => users.id, { onDelete: "cascade" }),
+		created_at: SQLUtils.getCreatedAtColumn(),
+
+		// Preference key, e.g. "remote-content-policy".
+		key: text().notNull(),
+		data: text({ mode: "json" }).$type<Record<string, any> | Array<any>>().notNull(),
+	},
+	(table) => [uniqueIndex("user_preferences_user_id_key_unique").on(table.user_id, table.key)],
+);
+
+/**
+ * @deprecated Use DB.Tables.scheduled_tasks to access this table.
+ */
+export const scheduled_tasks = sqliteTable("scheduled_tasks", {
+	id: integer().primaryKey({ autoIncrement: true }),
+	function: text().notNull(),
+	created_by_user_id: integer().references(() => users.id, { onDelete: "set null" }),
+	args: text({ mode: "json" }).$type<Record<string, any>>().notNull(),
+	autoDelete: integer({ mode: "boolean" }).notNull().default(sql`0`),
+	storeLogs: integer({ mode: "boolean" }).notNull().default(sql`0`),
+	status: text({ enum: ["pending", "running", "paused", "failed", "completed"] })
+		.notNull()
+		.default("pending"),
+	created_at: integer().notNull(),
+	finished_at: integer(),
+	result: text({ mode: "json" }).$type<Record<string, any>>(),
+	message: text(),
+});
+
+/**
+ * @deprecated Use DB.Tables.scheduled_tasks_paused_state to access this table.
+ */
+export const scheduled_tasks_paused_state = sqliteTable("scheduled_tasks_paused_state", {
+	task_id: integer()
+		.primaryKey()
+		.references(() => scheduled_tasks.id, { onDelete: "cascade" }),
+	next_step_to_execute: integer().notNull(),
+	data: text({ mode: "json" }).$type<TaskHandler.TempPausedTaskState["data"]>().notNull(),
+});
+
+/**
+ * @deprecated Use DB.Tables.metadata to access this table.
+ */
+export const metadata = sqliteTable("metadata", {
+	key: text().primaryKey(),
+	data: text({ mode: "json" }).$type<Record<string, any> | Array<any>>().notNull(),
+});
+
+/**
+ * @deprecated Use DB.Tables.agents to access this table.
+ */
+export const agents = sqliteTable("agents", {
+	id: SQLUtils.primaryKeyIntAutoIncrement("id"),
+	owner_id: integer()
+		.notNull()
+		.references(() => users.id, { onDelete: "cascade" }),
+
+	name: text().notNull(),
+	description: text().notNull().default(""),
+	kind: text({ enum: AgentSettings.Kinds }).notNull(),
+
+	// Set when the agent enrolls. The agent generates the secret itself; only its hash is stored.
+	// Full credential: `netignite_agent_<token_id>:<secret>`.
+	token_id: text().unique(),
+	hashed_secret: text(),
+	enrolled_at: integer(),
+
+	// Reported by the agent's HELLO.
+	capabilities: text({ mode: "json" }).$type<string[]>().notNull().default(sql`'[]'`),
+	version: text(),
+	info: text({ mode: "json" }).$type<Record<string, unknown>>(),
+	last_seen_at: integer(),
+
+	created_at: SQLUtils.getCreatedAtColumn(),
+});
+
+/**
+ * @deprecated Use DB.Tables.agentEnrollments to access this table.
+ *
+ * Single-use enrollment tokens (`netignite_enroll_<id>:<base>`), embedded in the ESP32 flash image
+ * or passed to `netignite-agent pair`.
+ */
+export const agentEnrollments = sqliteTable("agent_enrollments", {
+	id: text().primaryKey(),
+	hashed_token: text().notNull(),
+	agent_id: integer()
+		.notNull()
+		.references(() => agents.id, { onDelete: "cascade" }),
+	created_by_user_id: integer().references(() => users.id, { onDelete: "set null" }),
+	created_at: SQLUtils.getCreatedAtColumn(),
+	expires_at: integer().notNull(),
+	used_at: integer(),
+});
+
+/**
+ * @deprecated Use DB.Tables.devices to access this table.
+ */
+export const devices = sqliteTable(
+	"devices",
+	{
+		id: SQLUtils.primaryKeyIntAutoIncrement("id"),
+		owner_id: integer()
+			.notNull()
+			.references(() => users.id, { onDelete: "cascade" }),
+
+		name: text().notNull(),
+		type: text({ enum: DeviceSettings.Types }).notNull(),
+		description: text().notNull().default(""),
+
+		// Wake-on-LAN through `agent_id` (an agent in the same LAN).
+		mac_address: text().notNull(),
+		wol_port: integer().notNull().default(9),
+		agent_id: integer().references(() => agents.id, { onDelete: "set null" }),
+
+		status_method: text({ enum: DeviceSettings.StatusMethods }).notNull().default("none"),
+		// IPv4/IPv6 address (or host name for `ssh`) checked by `ipv4`, `ipv6` and `ssh`.
+		status_address: text(),
+		// Optional TCP port probed in addition to the ping (e.g. 22, 445, 3389).
+		status_tcp_port: integer(),
+
+		// A Linux agent running on the device itself: reports its status and offers shutdown/reboot.
+		host_agent_id: integer().references(() => agents.id, { onDelete: "set null" }),
+
+		created_at: SQLUtils.getCreatedAtColumn(),
+	},
+	(table) => [index("devices_owner_id_idx").on(table.owner_id)],
+);
+
+/**
+ * @deprecated Use DB.Tables.deviceShares to access this table.
+ */
+export const deviceShares = sqliteTable(
+	"device_shares",
+	{
+		device_id: integer()
+			.notNull()
+			.references(() => devices.id, { onDelete: "cascade" }),
+		user_id: integer()
+			.notNull()
+			.references(() => users.id, { onDelete: "cascade" }),
+		role: text({ enum: ShareSettings.Roles }).notNull(),
+		created_by_user_id: integer().references(() => users.id, { onDelete: "set null" }),
+		created_at: SQLUtils.getCreatedAtColumn(),
+	},
+	(table) => [
+		primaryKey({ columns: [table.device_id, table.user_id] }),
+		index("device_shares_user_id_idx").on(table.user_id),
+	],
+);
+
+/**
+ * @deprecated Use DB.Tables.deviceFavorites to access this table.
+ */
+export const deviceFavorites = sqliteTable(
+	"device_favorites",
+	{
+		user_id: integer()
+			.notNull()
+			.references(() => users.id, { onDelete: "cascade" }),
+		device_id: integer()
+			.notNull()
+			.references(() => devices.id, { onDelete: "cascade" }),
+		created_at: SQLUtils.getCreatedAtColumn(),
+	},
+	(table) => [primaryKey({ columns: [table.user_id, table.device_id] })],
+);
diff --git a/server/lib/db/utils.ts b/server/lib/db/utils.ts
new file mode 100644
index 0000000..05dfb36
--- /dev/null
+++ b/server/lib/db/utils.ts
@@ -0,0 +1,31 @@
+import { type entityKind, sql } from "drizzle-orm";
+import type { drizzle as drizzle_bun } from "drizzle-orm/bun-sqlite";
+import type { drizzle as drizzle_d1 } from "drizzle-orm/d1";
+import { BaseSQLiteDatabase, integer } from "drizzle-orm/sqlite-core";
+
+export declare class DrizzleDB extends BaseSQLiteDatabase<
+	"async" | "sync",
+	void,
+	Record<string, unknown>
+> {
+	static readonly [entityKind]: string;
+	$client?: any;
+	batch?: any;
+}
+
+export namespace DrizzleDB {
+	export type BunSQLite = ReturnType<typeof drizzle_bun>;
+	export type D1 = ReturnType<typeof drizzle_d1>;
+}
+
+export class SQLUtils {
+	/** `created_at` column: unix-epoch milliseconds, non-null, defaulted to now. */
+	static getCreatedAtColumn(name: string = "created_at") {
+		return integer(name, { mode: "number" }).notNull().default(sql`(unixepoch() * 1000)`);
+	}
+
+	/** Auto-incrementing integer primary key. */
+	static primaryKeyIntAutoIncrement(name: string = "id") {
+		return integer(name).primaryKey({ autoIncrement: true });
+	}
+}
diff --git a/server/lib/devices/actions.ts b/server/lib/devices/actions.ts
new file mode 100644
index 0000000..26132ce
--- /dev/null
+++ b/server/lib/devices/actions.ts
@@ -0,0 +1,73 @@
+import { AgentRequestError } from "../agents/connection";
+import { AgentRegistry } from "../agents/registry";
+import type { DB } from "../db";
+
+export class DeviceActionError extends Error {
+	constructor(
+		/** HTTP status the API answers with. */
+		readonly status: 409 | 502 | 503 | 504,
+		message: string,
+	) {
+		super(message);
+	}
+}
+
+/** Power actions on devices. Callers check {@link DevicePermissions} first. */
+export class DeviceActions {
+	/** Sends Wake-on-LAN through the device's agent. */
+	static async powerOn(device: DB.Models.Device) {
+		if (device.agent_id === null) {
+			throw new DeviceActionError(409, "No agent is assigned to this device");
+		}
+
+		const connection = AgentRegistry.get(device.agent_id);
+		if (!connection) throw new DeviceActionError(503, "Agent is offline");
+
+		await this.run(() =>
+			connection.request("WAKE", { mac: device.mac_address, port: device.wol_port }),
+		);
+	}
+
+	/** Shuts down or reboots the device through the Linux agent running on it. */
+	static async hostControl(device: DB.Models.Device, action: "shutdown" | "reboot") {
+		if (device.host_agent_id === null) {
+			throw new DeviceActionError(409, `No ${action} method is configured for this device`);
+		}
+
+		const connection = AgentRegistry.get(device.host_agent_id);
+		if (!connection) throw new DeviceActionError(503, "The device's host agent is offline");
+
+		await this.run(() => connection.request("HOST_CONTROL", { action }, 10_000));
+	}
+
+	/** Which power actions are currently possible, for the dashboard. */
+	static availableActions(device: DB.Models.Device) {
+		const wolAgent = device.agent_id !== null ? AgentRegistry.get(device.agent_id) : null;
+		const hostAgent = device.host_agent_id !== null ? AgentRegistry.get(device.host_agent_id) : null;
+
+		return {
+			power_on: wolAgent?.hasCapability("wake") ?? false,
+			shutdown: hostAgent?.hasCapability("host.control") ?? false,
+			reboot: hostAgent?.hasCapability("host.control") ?? false,
+		};
+	}
+
+	private static async run(request: () => Promise<unknown>) {
+		try {
+			await request();
+		} catch (error) {
+			if (!(error instanceof AgentRequestError)) throw error;
+
+			switch (error.reason) {
+				case "offline":
+					throw new DeviceActionError(503, "Agent is offline");
+				case "unsupported":
+					throw new DeviceActionError(409, "The agent doesn't support this action");
+				case "timeout":
+					throw new DeviceActionError(504, "The agent didn't answer in time");
+				case "rejected":
+					throw new DeviceActionError(502, `The agent reported an error: ${error.message}`);
+			}
+		}
+	}
+}
diff --git a/server/lib/devices/permissions.ts b/server/lib/devices/permissions.ts
new file mode 100644
index 0000000..282644c
--- /dev/null
+++ b/server/lib/devices/permissions.ts
@@ -0,0 +1,94 @@
+import { and, eq, inArray, or } from "drizzle-orm";
+import type { ShareSettings } from "../api/utils/shared-models/netigniteData";
+import { DB } from "../db";
+import type { DrizzleDB } from "../db/utils";
+
+/**
+ * Who may do what with a device. The owner can do everything; other users get a role per share.
+ *
+ * | Action   | owner | manager | operator | viewer |
+ * | -------- | ----- | ------- | -------- | ------ |
+ * | `read`   | ✓     | ✓       | ✓        | ✓      |
+ * | `power`  | ✓     | ✓       | ✓        |        |
+ * | `edit`   | ✓     | ✓       |          |        |
+ * | `manage` | ✓     |         |          |        |
+ *
+ * `manage` covers sharing, deleting, choosing the agents and credentials (agents are never shared).
+ */
+export class DevicePermissions {
+	static readonly ACTIONS_BY_ROLE: Record<
+		DevicePermissions.AccessRole,
+		readonly DevicePermissions.Action[]
+	> = {
+		owner: ["read", "power", "edit", "manage"],
+		manager: ["read", "power", "edit"],
+		operator: ["read", "power"],
+		viewer: ["read"],
+	};
+
+	static can(role: DevicePermissions.AccessRole, action: DevicePermissions.Action) {
+		return this.ACTIONS_BY_ROLE[role].includes(action);
+	}
+
+	/** The device and the user's role on it, or null if the user has no access. */
+	static async getAccess(
+		userID: number,
+		deviceID: number,
+		tx: DrizzleDB = DB.instance(),
+	): Promise<DevicePermissions.DeviceWithRole | null> {
+		const device = await tx
+			.select()
+			.from(DB.Tables.devices)
+			.where(eq(DB.Tables.devices.id, deviceID))
+			.get();
+		if (!device) return null;
+
+		if (device.owner_id === userID) return { ...device, access_role: "owner" };
+
+		const share = await tx
+			.select({ role: DB.Tables.deviceShares.role })
+			.from(DB.Tables.deviceShares)
+			.where(
+				and(eq(DB.Tables.deviceShares.device_id, deviceID), eq(DB.Tables.deviceShares.user_id, userID)),
+			)
+			.get();
+
+		return share ? { ...device, access_role: share.role } : null;
+	}
+
+	/** All devices the user owns or that are shared with them, each with the user's role. */
+	static async listAccessible(
+		userID: number,
+		tx: DrizzleDB = DB.instance(),
+	): Promise<DevicePermissions.DeviceWithRole[]> {
+		const shares = await tx
+			.select({ device_id: DB.Tables.deviceShares.device_id, role: DB.Tables.deviceShares.role })
+			.from(DB.Tables.deviceShares)
+			.where(eq(DB.Tables.deviceShares.user_id, userID));
+		const roleByDevice = new Map(shares.map((share) => [share.device_id, share.role]));
+
+		const devices = await tx
+			.select()
+			.from(DB.Tables.devices)
+			.where(
+				shares.length > 0
+					? or(
+							eq(DB.Tables.devices.owner_id, userID),
+							inArray(DB.Tables.devices.id, [...roleByDevice.keys()]),
+						)
+					: eq(DB.Tables.devices.owner_id, userID),
+			)
+			.orderBy(DB.Tables.devices.name);
+
+		return devices.map((device) => ({
+			...device,
+			access_role: device.owner_id === userID ? "owner" : (roleByDevice.get(device.id) ?? "viewer"),
+		}));
+	}
+}
+
+export namespace DevicePermissions {
+	export type Action = "read" | "power" | "edit" | "manage";
+	export type AccessRole = "owner" | ShareSettings.Role;
+	export type DeviceWithRole = DB.Models.Device & { access_role: AccessRole };
+}
diff --git a/server/lib/devices/status.ts b/server/lib/devices/status.ts
new file mode 100644
index 0000000..966ae30
--- /dev/null
+++ b/server/lib/devices/status.ts
@@ -0,0 +1,181 @@
+import { isIP } from "node:net";
+import { ne } from "drizzle-orm";
+import { AgentRequestError } from "../agents/connection";
+import { AgentGatewayRunner } from "../agents/gateway";
+import type { AgentProtocol } from "../agents/protocol";
+import { AgentRegistry } from "../agents/registry";
+import type { DeviceSettings } from "../api/utils/shared-models/netigniteData";
+import { DB } from "../db";
+import { Logger } from "../utils/logger";
+
+export type DeviceStatus = {
+	state: DeviceSettings.OnlineState;
+	/** Unix ms of the last check, null if never checked. */
+	checked_at: number | null;
+	/** Why the state is `unknown`, if it is. */
+	reason?: string;
+};
+
+/**
+ * Checks device status in the background and caches the result, so dashboards read the cache
+ * instead of making agents ping on every page load. Checks of one agent run one at a time;
+ * different agents are checked in parallel.
+ */
+export class DeviceStatusService {
+	static readonly INTERVAL_MS = 20_000;
+	static readonly CHECK_TIMEOUT_MS = 6_000;
+	/** Minimum time between two on-demand checks of the same device. */
+	static readonly MANUAL_REFRESH_MIN_INTERVAL_MS = 5_000;
+
+	private static readonly cache = new Map<number, DeviceStatus>();
+	private static timer: ReturnType<typeof setInterval> | null = null;
+	private static running = false;
+	private static readonly agentQueues = new Map<number, Promise<unknown>>();
+
+	static start() {
+		if (this.timer) return;
+
+		this.timer = setInterval(() => void this.refreshAll(), this.INTERVAL_MS);
+		this.timer.unref?.();
+
+		// A device's status changes as soon as its agent comes back.
+		AgentGatewayRunner.onHello((connection) => void this.refreshAgent(connection.agentID));
+	}
+
+	static stop() {
+		if (this.timer) clearInterval(this.timer);
+		this.timer = null;
+	}
+
+	static get(deviceID: number): DeviceStatus {
+		return this.cache.get(deviceID) ?? { state: "unknown", checked_at: null };
+	}
+
+	static forget(deviceID: number) {
+		this.cache.delete(deviceID);
+	}
+
+	/** Checks one device now (rate limited per device) and returns the new status. */
+	static async refresh(device: DB.Models.Device) {
+		const cached = this.cache.get(device.id);
+		if (cached?.checked_at && Date.now() - cached.checked_at < this.MANUAL_REFRESH_MIN_INTERVAL_MS) {
+			return cached;
+		}
+		return await this.check(device);
+	}
+
+	static async refreshAll() {
+		if (this.running) return;
+		this.running = true;
+
+		try {
+			const devices = await DB.instance()
+				.select()
+				.from(DB.Tables.devices)
+				.where(ne(DB.Tables.devices.status_method, "none"));
+
+			await Promise.all(devices.map((device) => this.check(device)));
+		} catch (error) {
+			Logger.error("Device status refresh failed", error);
+		} finally {
+			this.running = false;
+		}
+	}
+
+	private static async refreshAgent(agentID: number) {
+		const devices = await DB.instance().select().from(DB.Tables.devices);
+		await Promise.all(
+			devices
+				.filter((device) => device.agent_id === agentID || device.host_agent_id === agentID)
+				.map((device) => this.check(device)),
+		);
+	}
+
+	private static async check(device: DB.Models.Device): Promise<DeviceStatus> {
+		const status = await this.determine(device);
+		this.cache.set(device.id, status);
+		return status;
+	}
+
+	private static async determine(device: DB.Models.Device): Promise<DeviceStatus> {
+		const now = Date.now();
+
+		if (device.status_method === "none") {
+			return { state: "unknown", checked_at: null, reason: "Status checks are turned off" };
+		}
+
+		if (device.status_method === "host_agent") {
+			if (device.host_agent_id === null) {
+				return { state: "unknown", checked_at: now, reason: "No host agent assigned" };
+			}
+			return {
+				state: AgentRegistry.isOnline(device.host_agent_id) ? "online" : "offline",
+				checked_at: now,
+			};
+		}
+
+		const request = this.buildStatusRequest(device);
+		if (!request) {
+			return { state: "unknown", checked_at: now, reason: "No status address configured" };
+		}
+		if (device.agent_id === null) {
+			return { state: "unknown", checked_at: now, reason: "No agent assigned" };
+		}
+
+		const connection = AgentRegistry.get(device.agent_id);
+		if (!connection) {
+			return { state: "unknown", checked_at: now, reason: "Agent is offline" };
+		}
+
+		try {
+			const result = await this.enqueue(device.agent_id, () =>
+				connection.request("STATUS", request, this.CHECK_TIMEOUT_MS),
+			);
+			return { state: result.online ? "online" : "offline", checked_at: Date.now() };
+		} catch (error) {
+			if (error instanceof AgentRequestError) {
+				return { state: "unknown", checked_at: Date.now(), reason: error.message };
+			}
+			throw error;
+		}
+	}
+
+	/** The STATUS request for a device, or null if its configuration is incomplete. */
+	static buildStatusRequest(
+		device: DB.Models.Device,
+	): AgentProtocol.Commands["STATUS"]["req"] | null {
+		const tcp_port = device.status_tcp_port ?? undefined;
+
+		switch (device.status_method) {
+			case "link_local":
+				return { target: { type: "link_local", mac: device.mac_address }, icmp: true, tcp_port };
+			case "ipv4":
+			case "ipv6":
+				return device.status_address
+					? { target: { type: "ip", address: device.status_address }, icmp: true, tcp_port }
+					: null;
+			case "ssh": {
+				if (!device.status_address) return null;
+				const target: AgentProtocol.StatusTarget = isIP(device.status_address)
+					? { type: "ip", address: device.status_address }
+					: { type: "host", host: device.status_address };
+				return { target, icmp: false, tcp_port: tcp_port ?? 22 };
+			}
+			default:
+				return null;
+		}
+	}
+
+	/** Runs checks of the same agent one after another. */
+	private static enqueue<T>(agentID: number, task: () => Promise<T>): Promise<T> {
+		const previous = this.agentQueues.get(agentID) ?? Promise.resolve();
+		const next = previous.catch(() => undefined).then(task);
+		this.agentQueues.set(agentID, next);
+		void next
+			.finally(() => {
+				if (this.agentQueues.get(agentID) === next) this.agentQueues.delete(agentID);
+			})
+			.catch(() => undefined);
+		return next;
+	}
+}
diff --git a/server/lib/migration/v1Import.ts b/server/lib/migration/v1Import.ts
new file mode 100644
index 0000000..41abcb8
--- /dev/null
+++ b/server/lib/migration/v1Import.ts
@@ -0,0 +1,297 @@
+import { Database } from "bun:sqlite";
+import { existsSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { eq } from "drizzle-orm";
+import { RuntimeMetadata } from "../api/utils/metadata";
+import { DeviceSettings } from "../api/utils/shared-models/netigniteData";
+import { DB } from "../db";
+
+/** A synchronous bun-sqlite transaction. */
+type SyncTx = Parameters<Parameters<ReturnType<typeof DB.instance>["transaction"]>[0]>[0];
+
+type V1User = {
+	id: number;
+	username: string;
+	password_hash: string;
+	role: string;
+	favorites: string;
+};
+type V1Agent = { id: number; name: string; type: string; description: string; ownerID: number };
+type V1Device = {
+	id: number;
+	name: string;
+	type: string;
+	description: string | null;
+	macAddress: string;
+	port: number;
+	agentID: number;
+	ownerID: number;
+};
+
+export type V1ImportReport = {
+	dryRun: boolean;
+	users: { imported: string[]; merged: string[]; skipped: { username: string; reason: string }[] };
+	agents: { imported: number; skipped: { name: string; reason: string }[] };
+	devices: { imported: number; skipped: { name: string; reason: string }[] };
+	favorites: number;
+};
+
+/**
+ * Imports users, agents and devices from a NetIgnite v1 database (`data/db.sqlite`).
+ *
+ * - Users keep their bcrypt password hash (upgraded to argon2id at their next login) and get a
+ *   placeholder email address, which the `/welcome` onboarding asks them to change.
+ * - The v1 `admin` is merged into the v2 server's initial `admin`; with `mergeUsers`, every v1 user
+ *   whose username already exists in v2 is merged. A merged account takes over the v1 password
+ *   only if nobody has logged into it in v2 yet.
+ * - Agents are imported unenrolled: v1 credentials can't be used in v2, so each agent is set up
+ *   again (ESP32: flash the v2 firmware; Linux: `netignite-agent pair`).
+ * - Devices keep MAC address, port and agent, and use the `link_local` status check like v1.
+ *
+ * Idempotent: v1 → v2 ids are stored in the `v1_import` metadata and imported rows are skipped
+ * the next time.
+ */
+export class V1Importer {
+	static readonly PLACEHOLDER_EMAIL_DOMAIN = "imported.netignite.invalid";
+
+	static async run(options: {
+		sourcePath: string;
+		dryRun?: boolean;
+		configBaseDir?: string;
+		/** Merge v1 users into existing v2 users with the same username (not just `admin`). */
+		mergeUsers?: boolean;
+	}): Promise<V1ImportReport> {
+		const dryRun = options.dryRun ?? false;
+		const report: V1ImportReport = {
+			dryRun,
+			users: { imported: [], merged: [], skipped: [] },
+			agents: { imported: 0, skipped: [] },
+			devices: { imported: 0, skipped: [] },
+			favorites: 0,
+		};
+
+		if (!existsSync(options.sourcePath)) {
+			throw new Error(`v1 database not found: ${options.sourcePath}`);
+		}
+
+		const source = new Database(options.sourcePath, { readonly: true });
+		try {
+			const tables = new Set(
+				(
+					source.query("SELECT name FROM sqlite_master WHERE type = 'table'").all() as { name: string }[]
+				).map((row) => row.name),
+			);
+			for (const table of ["users", "agents", "devices"]) {
+				if (!tables.has(table))
+					throw new Error(`Not a NetIgnite v1 database: table "${table}" is missing`);
+			}
+
+			const v1Users = source.query("SELECT * FROM users ORDER BY id").all() as V1User[];
+			const v1Agents = source.query("SELECT * FROM agents ORDER BY id").all() as V1Agent[];
+			const v1Devices = source.query("SELECT * FROM devices ORDER BY id").all() as V1Device[];
+
+			// Cloned: a missing metadata key reads as a shared default object, which must not be mutated.
+			const state = structuredClone(await RuntimeMetadata.getV1ImportState());
+			const db = DB.instance();
+
+			// Synchronous on purpose: drizzle's bun-sqlite transaction() commits at the first `await`.
+			const work = (tx: SyncTx) => {
+				// --- Users ---
+				for (const v1 of v1Users) {
+					if (state.users[v1.id] !== undefined) continue;
+
+					const role = v1.role === "admin" ? "admin" : "user";
+					const existing = tx
+						.select()
+						.from(DB.Tables.users)
+						.where(eq(DB.Tables.users.username, v1.username))
+						.get();
+
+					if (existing) {
+						if (!this.isInitialAdmin(existing) && !options.mergeUsers) {
+							report.users.skipped.push({
+								username: v1.username,
+								reason: "username already exists in v2 (use --merge-users to merge them)",
+							});
+							continue;
+						}
+
+						if (this.neverLoggedIn(tx, existing)) {
+							tx
+								.update(DB.Tables.users)
+								.set({ password_hash: v1.password_hash, role })
+								.where(eq(DB.Tables.users.id, existing.id))
+								.run();
+							// Its password-reset link would otherwise still let anyone with the file set a password.
+							tx
+								.delete(DB.Tables.passwordResets)
+								.where(eq(DB.Tables.passwordResets.user_id, existing.id))
+								.run();
+						}
+						state.users[v1.id] = existing.id;
+						report.users.merged.push(v1.username);
+						continue;
+					}
+
+					const user = tx
+						.insert(DB.Tables.users)
+						.values({
+							username: v1.username,
+							display_name: v1.username,
+							email: `${v1.username}@${this.PLACEHOLDER_EMAIL_DOMAIN}`,
+							password_hash: v1.password_hash,
+							role,
+						})
+						.returning()
+						.get();
+					state.users[v1.id] = user.id;
+					report.users.imported.push(v1.username);
+				}
+
+				// --- Agents ---
+				for (const v1 of v1Agents) {
+					if (state.agents[v1.id] !== undefined) continue;
+
+					const ownerID = state.users[v1.ownerID];
+					if (ownerID === undefined) {
+						report.agents.skipped.push({ name: v1.name, reason: "owner wasn't imported" });
+						continue;
+					}
+
+					const agent = tx
+						.insert(DB.Tables.agents)
+						.values({
+							owner_id: ownerID,
+							name: v1.name.slice(0, 64) || `Agent ${v1.id}`,
+							description: (v1.description ?? "").slice(0, 500),
+							kind: v1.type === "server" ? "linux" : "esp32",
+						})
+						.returning()
+						.get();
+					state.agents[v1.id] = agent.id;
+					report.agents.imported += 1;
+				}
+
+				// --- Devices ---
+				for (const v1 of v1Devices) {
+					if (state.devices[v1.id] !== undefined) continue;
+
+					const ownerID = state.users[v1.ownerID];
+					if (ownerID === undefined) {
+						report.devices.skipped.push({ name: v1.name, reason: "owner wasn't imported" });
+						continue;
+					}
+
+					const mac = DeviceSettings.MacAddress.safeParse(v1.macAddress);
+					if (!mac.success) {
+						report.devices.skipped.push({
+							name: v1.name,
+							reason: `invalid MAC address "${v1.macAddress}"`,
+						});
+						continue;
+					}
+
+					const agentID = state.agents[v1.agentID] ?? null;
+					const type = DeviceSettings.Type.safeParse(v1.type);
+
+					const device = tx
+						.insert(DB.Tables.devices)
+						.values({
+							owner_id: ownerID,
+							name: v1.name.slice(0, 64) || `Device ${v1.id}`,
+							type: type.success ? type.data : "other",
+							description: (v1.description ?? "").slice(0, 500),
+							mac_address: mac.data,
+							wol_port: v1.port >= 1 && v1.port <= 65535 ? v1.port : 9,
+							// Only an agent of the same owner may wake the device.
+							agent_id: agentID !== null && this.agentOwner(tx, agentID) === ownerID ? agentID : null,
+							status_method: agentID !== null ? "link_local" : "none",
+						})
+						.returning()
+						.get();
+					state.devices[v1.id] = device.id;
+					report.devices.imported += 1;
+				}
+
+				// --- Favorites ---
+				for (const v1 of v1Users) {
+					const userID = state.users[v1.id];
+					if (userID === undefined) continue;
+
+					for (const v1DeviceID of this.parseFavorites(v1.favorites)) {
+						const deviceID = state.devices[v1DeviceID];
+						if (deviceID === undefined) continue;
+
+						const inserted = tx
+							.insert(DB.Tables.deviceFavorites)
+							.values({ user_id: userID, device_id: deviceID })
+							.onConflictDoNothing()
+							.returning()
+							.get();
+						if (inserted) report.favorites += 1;
+					}
+				}
+
+				if (!dryRun) {
+					tx
+						.insert(DB.Tables.metadata)
+						.values({ key: "v1_import", data: state })
+						.onConflictDoUpdate({ target: DB.Tables.metadata.key, set: { data: state } })
+						.run();
+				}
+			};
+
+			if (dryRun) {
+				// Run everything, then roll back.
+				try {
+					db.transaction((tx) => {
+						work(tx);
+						throw new DryRunRollback();
+					});
+				} catch (error) {
+					if (!(error instanceof DryRunRollback)) throw error;
+				}
+			} else {
+				db.transaction((tx) => work(tx));
+
+				if (report.users.merged.length > 0 && options.configBaseDir) {
+					const tokenFile = join(options.configBaseDir, "initial_admin_password_reset_token.txt");
+					if (existsSync(tokenFile)) rmSync(tokenFile);
+				}
+			}
+		} finally {
+			source.close();
+		}
+
+		return report;
+	}
+
+	/** The admin DB.init creates on an empty database. */
+	private static isInitialAdmin(user: DB.Models.User) {
+		return user.username === "admin" && user.display_name === "Default Administrator";
+	}
+
+	private static neverLoggedIn(tx: SyncTx, user: DB.Models.User) {
+		return !tx.select().from(DB.Tables.sessions).where(eq(DB.Tables.sessions.user_id, user.id)).get();
+	}
+
+	private static agentOwner(tx: SyncTx, agentID: number) {
+		const agent = tx
+			.select({ owner_id: DB.Tables.agents.owner_id })
+			.from(DB.Tables.agents)
+			.where(eq(DB.Tables.agents.id, agentID))
+			.get();
+		return agent?.owner_id ?? null;
+	}
+
+	private static parseFavorites(raw: string | null): number[] {
+		try {
+			const parsed = JSON.parse(raw || "[]");
+			return Array.isArray(parsed) ? parsed.filter((id): id is number => Number.isInteger(id)) : [];
+		} catch {
+			return [];
+		}
+	}
+}
+
+class DryRunRollback extends Error {}
diff --git a/server/lib/tasks/index.ts b/server/lib/tasks/index.ts
new file mode 100644
index 0000000..9f633e0
--- /dev/null
+++ b/server/lib/tasks/index.ts
@@ -0,0 +1,320 @@
+import { TaskHandler } from "@cleverjs/utils";
+import { and, asc, eq, or } from "drizzle-orm";
+import fs from "fs";
+import { dirname } from "path";
+import { DB } from "../db";
+import { ConfigHandler } from "../utils/config";
+import { Logger } from "../utils/logger";
+import { SampleTask } from "./sampleTask";
+import { TaskUtils } from "./utils";
+
+type AdditionalTaskMeta = {
+	created_by_user_id: number | null;
+};
+type TaskData = TaskHandler.BaseTaskData<AdditionalTaskMeta>;
+
+function buildPendingTaskData(
+	fn: TaskData["fn"],
+	args: TaskData["args"],
+	additionalMeta: AdditionalTaskMeta,
+	execOpts?: TaskHandler.TaskExecOptions,
+): Omit<TaskData, "id"> {
+	return {
+		...additionalMeta,
+		fn,
+		args,
+		execOptions: execOpts ?? null,
+		status: "pending",
+		created_at: Date.now(),
+		finished_at: null,
+		result: null,
+		message: null,
+	};
+}
+
+export class TaskStorage extends TaskHandler.AbstractStorageDriver<TaskData, AdditionalTaskMeta> {
+	private transportToDBFormat(task: TaskData, withID?: true): DB.Models.ScheduledTask;
+	private transportToDBFormat(task: TaskData, withID: false): Omit<DB.Models.ScheduledTask, "id">;
+	private transportToDBFormat(task: TaskData, withID = true): DB.Models.ScheduledTask {
+		return {
+			id: withID ? task.id! : (undefined as any),
+			function: task.fn,
+			created_by_user_id: task.created_by_user_id,
+			args: task.args,
+			status: task.status,
+			autoDelete: task.execOptions?.autoDelete ?? false,
+			storeLogs: task.execOptions?.storeLogs ?? false,
+			created_at: task.created_at,
+			finished_at: task.finished_at ?? null,
+			result: task.result ?? null,
+			message: task.message ?? null,
+		};
+	}
+
+	private transportFromDBFormat(dbModel: DB.Models.ScheduledTask): TaskData {
+		return {
+			id: dbModel.id,
+			fn: dbModel.function,
+			created_by_user_id: dbModel.created_by_user_id,
+			args: dbModel.args,
+			status: dbModel.status,
+			execOptions: {
+				autoDelete: dbModel.autoDelete,
+				storeLogs: dbModel.storeLogs,
+			},
+			created_at: dbModel.created_at,
+			finished_at: dbModel.finished_at,
+			result: dbModel.result,
+			message: dbModel.message,
+		};
+	}
+
+	async loadTask(id: number): Promise<TaskData | null> {
+		const data = DB.instance()
+			.select()
+			.from(DB.Tables.scheduled_tasks)
+			.where(eq(DB.Tables.scheduled_tasks.id, id))
+			.get();
+		if (!data) return null;
+		return this.transportFromDBFormat(data);
+	}
+
+	async createTask(data: Omit<TaskData, "id">): Promise<number> {
+		const result = DB.instance()
+			.insert(DB.Tables.scheduled_tasks)
+			.values(this.transportToDBFormat(data as any, false))
+			.returning()
+			.get();
+		return result.id;
+	}
+
+	async updateTask(data: TaskData): Promise<void> {
+		await DB.instance()
+			.update(DB.Tables.scheduled_tasks)
+			.set(this.transportToDBFormat(data, false))
+			.where(eq(DB.Tables.scheduled_tasks.id, data.id!));
+	}
+
+	async deleteTask(id: number): Promise<void> {
+		await DB.instance().delete(DB.Tables.scheduled_tasks).where(eq(DB.Tables.scheduled_tasks.id, id));
+	}
+
+	async loadPausedOrPendingTasks(): Promise<TaskData[]> {
+		const rows = DB.instance()
+			.select()
+			.from(DB.Tables.scheduled_tasks)
+			// paused or pending tasks, oldest first so earlier submissions run first
+			.where(
+				or(
+					eq(DB.Tables.scheduled_tasks.status, "paused"),
+					eq(DB.Tables.scheduled_tasks.status, "pending"),
+				),
+			)
+			.orderBy(asc(DB.Tables.scheduled_tasks.created_at))
+			.all();
+
+		return rows.map((row) => this.transportFromDBFormat(row));
+	}
+
+	async loadFinishedTasksWithAutoDelete(): Promise<TaskData[]> {
+		const rows = DB.instance()
+			.select()
+			.from(DB.Tables.scheduled_tasks)
+			.where(
+				and(
+					eq(DB.Tables.scheduled_tasks.status, "completed"),
+					eq(DB.Tables.scheduled_tasks.autoDelete, true),
+				),
+			)
+			.orderBy(asc(DB.Tables.scheduled_tasks.finished_at))
+			.all();
+		return rows.map((row) => this.transportFromDBFormat(row));
+	}
+
+	async loadPausedTaskState(taskID: number): Promise<TaskHandler.TempPausedTaskState | null> {
+		const row = DB.instance()
+			.select()
+			.from(DB.Tables.scheduled_tasks_paused_state)
+			.where(eq(DB.Tables.scheduled_tasks_paused_state.task_id, taskID))
+			.get();
+		if (!row) return null;
+		return {
+			nextStepToExecute: row.next_step_to_execute,
+			data: row.data,
+		};
+	}
+
+	async savePausedTaskState(
+		taskID: number,
+		pausedState: TaskHandler.TempPausedTaskState,
+	): Promise<void> {
+		const existing = DB.instance()
+			.select()
+			.from(DB.Tables.scheduled_tasks_paused_state)
+			.where(eq(DB.Tables.scheduled_tasks_paused_state.task_id, taskID))
+			.get();
+		if (existing) {
+			await DB.instance()
+				.update(DB.Tables.scheduled_tasks_paused_state)
+				.set({
+					next_step_to_execute: pausedState.nextStepToExecute,
+					data: pausedState.data,
+				})
+				.where(eq(DB.Tables.scheduled_tasks_paused_state.task_id, taskID));
+		} else {
+			await DB.instance().insert(DB.Tables.scheduled_tasks_paused_state).values({
+				task_id: taskID,
+				next_step_to_execute: pausedState.nextStepToExecute,
+				data: pausedState.data,
+			});
+		}
+	}
+
+	async deletePausedTaskState(taskID: number): Promise<void> {
+		await DB.instance()
+			.delete(DB.Tables.scheduled_tasks_paused_state)
+			.where(eq(DB.Tables.scheduled_tasks_paused_state.task_id, taskID));
+	}
+}
+
+class PersistentLogger implements TaskHandler.PersistentTaskLoggerLike {
+	readonly type = "persistent";
+
+	private readonly writeStream?: fs.WriteStream;
+	constructor(taskID: number) {
+		try {
+			const filePath = TaskUtils.getTaskLogFilePath(taskID);
+			// Synchronous: the stream below opens right away and must not race the directory creation.
+			fs.mkdirSync(dirname(filePath), { recursive: true });
+
+			this.writeStream = fs.createWriteStream(filePath, { flags: "a" });
+			// The open happens asynchronously; without a listener a failure (full disk, read-only
+			// volume) would be an uncaught exception.
+			this.writeStream.on("error", (err) => {
+				Logger.error("Persistent task logger failed:", err.message);
+			});
+		} catch (err) {
+			Logger.error("Failed to create persistent task logger:", (err as Error).message);
+		}
+	}
+
+	public debug(...msg: any[]) {
+		this.writeSafe(this.formatLine("DEBUG", msg));
+	}
+
+	public info(...msg: any[]) {
+		this.writeSafe(this.formatLine("INFO", msg));
+	}
+
+	public warn(...msg: any[]) {
+		this.writeSafe(this.formatLine("WARN", msg));
+	}
+
+	public error(...msg: any[]) {
+		this.writeSafe(this.formatLine("ERROR", msg));
+	}
+
+	private formatLine(level: string, msg: any[]) {
+		// Tasks also log objects and errors; inspect them instead of printing "[object Object]".
+		const text = msg.map((m) => (typeof m === "string" ? m : Bun.inspect(m))).join(" ");
+		return `[${new Date(Date.now()).toISOString()}] [${level}] ${text}\n`;
+	}
+
+	async close() {
+		if (!this.writeStream) {
+			return Promise.resolve();
+		}
+		if (!this.writeStream.writable) {
+			Logger.warn("Persistent task logger: write stream already closed");
+			return Promise.resolve();
+		}
+		try {
+			return new Promise<void>((resolve, reject) => {
+				const stream = this.writeStream as fs.WriteStream;
+				const cleanup = () => {
+					stream.removeListener("error", onError);
+				};
+				const onError = (err: Error) => {
+					cleanup();
+					Logger.error("Error closing persistent task logger:", err.message);
+					resolve(); // resolve rather than reject — closing is best-effort
+				};
+				stream.once("error", onError);
+				stream.end(() => {
+					cleanup();
+					resolve();
+				});
+			});
+		} catch (err) {
+			Logger.error("Error closing persistent task logger:", (err as Error).message);
+		}
+		return Promise.resolve();
+	}
+
+	private writeSafe(data: string) {
+		try {
+			if (this.writeStream && this.writeStream.writable) {
+				this.writeStream.write(data, (err) => {
+					if (err) {
+						Logger.error(`Trying to write: '${data}' but error occurred:`, err.message);
+					}
+				});
+			} else {
+				Logger.error(`Trying to write: '${data}' but no log file available`);
+			}
+		} catch (err) {
+			Logger.error(`Trying to write: '${data}' but error occurred:`, (err as Error).message);
+		}
+	}
+}
+
+const Registry = new TaskHandler.TaskFNRegistry().register(SampleTask);
+
+const taskStorage = new TaskStorage();
+
+export const TaskScheduler = new TaskHandler<
+	(typeof Registry)["registry"],
+	InstanceType<typeof TaskStorage>,
+	TaskData,
+	AdditionalTaskMeta
+>(
+	{
+		storage: taskStorage,
+		defaultLogger: Logger,
+		persistentLogger: PersistentLogger,
+	},
+	Registry,
+);
+
+/**
+ * @deprecated Use `TaskScheduler.enqueueTask(fn, args, additionalMeta, execOpts)`, which stores the
+ * task and queues it in one call. `activatePendingTask` reaches into TaskHandler's private queue.
+ */
+export class TaskQueueUtils {
+	static async createPendingTaskRecord(
+		fn: TaskData["fn"],
+		args: TaskData["args"],
+		additionalMeta: AdditionalTaskMeta,
+		execOpts?: TaskHandler.TaskExecOptions,
+	) {
+		return await taskStorage.createTask(buildPendingTaskData(fn, args, additionalMeta, execOpts));
+	}
+
+	static async activatePendingTask(taskID: number) {
+		const task = await taskStorage.loadTask(taskID);
+
+		if (!task) {
+			throw new Error(`Task ${taskID} not found after creation.`);
+		}
+
+		// Access the pending-tasks queue via the public processQueue method.
+		// The internal pending queue is not part of the documented API, so we
+		// rely on the queue being populated by enqueueTask for the scheduler to pick up.
+		(TaskScheduler as any).pendingTasks.push(task);
+		void TaskScheduler.processQueue();
+	}
+
+	static async deleteTaskRecord(taskID: number) {
+		await taskStorage.deleteTask(taskID);
+	}
+}
diff --git a/server/lib/tasks/sampleTask.ts b/server/lib/tasks/sampleTask.ts
new file mode 100644
index 0000000..6b69ed0
--- /dev/null
+++ b/server/lib/tasks/sampleTask.ts
@@ -0,0 +1,7 @@
+import { TaskHandler } from "@cleverjs/utils";
+
+export const SampleTask = new TaskHandler.BasicTaskFn("sampleTask", async (payload, logger) => {
+	logger.info("Executing SampleTask with payload:", payload);
+
+	return { success: true, message: "SampleTask executed successfully." };
+});
diff --git a/server/lib/tasks/utils.ts b/server/lib/tasks/utils.ts
new file mode 100644
index 0000000..215e387
--- /dev/null
+++ b/server/lib/tasks/utils.ts
@@ -0,0 +1,28 @@
+import { ConfigHandler } from "../utils/config";
+import { Logger } from "../utils/logger";
+
+export class TaskUtils {
+	static getTaskLogFilePath(taskID: number): string {
+		const config = ConfigHandler.getConfig();
+		if (!config) {
+			throw new Error("Config not loaded. Cannot determine log file path.");
+		}
+
+		return `${config.LOG_DIR}/tasks/task-${taskID}.log`;
+	}
+
+	static async getLogsForTask(taskID: number): Promise<string | null> {
+		try {
+			const logs = Bun.file(this.getTaskLogFilePath(taskID));
+
+			if (!(await logs.exists())) {
+				return null;
+			}
+
+			return await logs.text();
+		} catch (err) {
+			Logger.error("Failed to read task logs:", (err as Error).message);
+			return null;
+		}
+	}
+}
diff --git a/server/lib/utils/config.ts b/server/lib/utils/config.ts
new file mode 100644
index 0000000..3e0e4de
--- /dev/null
+++ b/server/lib/utils/config.ts
@@ -0,0 +1,155 @@
+import { z } from "zod";
+import { AppConstants } from "./constants";
+import { Logger } from "./logger";
+
+interface ConfigSchemaSettings {
+	[key: string]: CS.ConfigItem<z.ZodType>;
+}
+
+type ConfigLike<T extends ConfigSchemaSettings> = {
+	[K in keyof T]: z.infer<T[K]["_schema"]>;
+};
+
+class CS {
+	private constructor() {}
+
+	static string() {
+		return new CS.ConfigItem(z.string());
+	}
+
+	static number() {
+		return new CS.ConfigItem(z.coerce.number());
+	}
+
+	static boolean() {
+		return new CS.ConfigItem(
+			z.union(
+				[
+					z.boolean(),
+					z
+						.string()
+						.refine((val) => val === "true" || val === "false")
+						.transform((val) => val === "true"),
+				],
+				{ error: "Expected a boolean value ('true' or 'false')" },
+			),
+		);
+	}
+
+	static enum<const T extends readonly string[]>(values: T) {
+		return new CS.ConfigItem(z.enum(values));
+	}
+
+	static array() {
+		return new CS.ConfigItem(
+			z.string().transform<string[]>((val) => {
+				if (typeof val === "string") {
+					return val
+						.split(",")
+						.map((v) => v.trim())
+						.filter(Boolean);
+				}
+				return [];
+			}),
+		);
+	}
+}
+
+namespace CS {
+	export class ConfigItem<const Schema extends z.ZodType> {
+		constructor(public _schema: Schema) {}
+
+		public parse(value: unknown) {
+			return this._schema.safeParse(value);
+		}
+
+		public default(value: z.util.NoUndefined<z.core.output<Schema>>) {
+			this._schema = this._schema.default(value) as any;
+			return this as any as ConfigItem<z.ZodDefault<Schema>>;
+		}
+
+		public optional() {
+			this._schema = this._schema.optional() as any;
+			return this as any as ConfigItem<z.ZodOptional<Schema>>;
+		}
+	}
+}
+
+class ConfigSchema<T extends ConfigSchemaSettings> {
+	readonly schema: T;
+
+	constructor(schema: T) {
+		this.schema = schema;
+	}
+
+	public parse() {
+		const result: ConfigLike<T> = {} as ConfigLike<T>;
+
+		for (const [key, settings] of Object.entries(this.schema)) {
+			const value = process.env[`${AppConstants.APP_ENV_PREFIX}_${key}`];
+
+			const parseResult = settings.parse(value);
+			if (!parseResult.success) {
+				Logger.error(
+					`Failed to read the environment variable ${key}: ${parseResult.error.issues[0]?.message}`,
+				);
+				process.exit(1);
+			}
+
+			// Store the parsed (coerced/defaulted) value, not the raw env string —
+			// otherwise numbers/booleans stay strings and defaults/optionals are lost.
+			(result[key] as any) = parseResult.data;
+		}
+		return result;
+	}
+}
+
+export type ENVConfigLike = {
+	[K in Extract<
+		keyof typeof ConfigHandler.schema.schema,
+		string
+	> as `${typeof AppConstants.APP_ENV_PREFIX}_${K}`]: z.infer<
+		(typeof ConfigHandler.schema.schema)[K]["_schema"]
+	>;
+};
+
+export type ParsedConfig = ConfigLike<typeof ConfigHandler.schema.schema>;
+
+export class ConfigHandler {
+	// Public so ENVConfigLike / ParsedConfig can derive from it without @ts-ignore.
+	// Treat it as read-only.
+	static schema = new ConfigSchema({
+		LOG_LEVEL: CS.enum(["debug", "info", "warn", "error", "critical"]).default("info"),
+
+		API_DISABLE_DOCS: CS.boolean().default(false),
+
+		DB_PATH: CS.string().default("./data/netignite.sqlite"),
+		DB_AUTO_MIGRATE: CS.boolean().default(true),
+		DB_MIGRATION_DIR: CS.string().default("./drizzle/migrations"),
+
+		LOG_DIR: CS.string().default("./data/logs"),
+		CONFIG_BASE_DIR: CS.string().default("./config"),
+
+		APP_URL: CS.string(),
+
+		SMTP_HOST: CS.string().optional(),
+		SMTP_PORT: CS.number().optional(),
+		SMTP_USERNAME: CS.string().optional(),
+		SMTP_PASSWORD: CS.string().optional(),
+		SMTP_FROM: CS.string().optional(),
+		SMTP_SECURE: CS.boolean().optional(),
+	});
+
+	private static config: ParsedConfig | null = null;
+
+	/** You have to call {@link ConfigHandler.loadConfig} before trying to access the config. */
+	static getConfig() {
+		return this.config;
+	}
+
+	static async loadConfig() {
+		if (this.config) return this.config;
+		this.config = this.schema.parse();
+		return this.config;
+	}
+}
diff --git a/server/lib/utils/constants.ts b/server/lib/utils/constants.ts
new file mode 100644
index 0000000..9c14e01
--- /dev/null
+++ b/server/lib/utils/constants.ts
@@ -0,0 +1,17 @@
+export namespace AppConstants {
+	export const APP_NAME = "NetIgnite";
+
+	export const APP_ENV_PREFIX = "NETIGNITE";
+
+	export const APP_KEYS_PREFIX = "netignite";
+
+	export const APP_API_DEFAULT_PORT = 18232;
+
+	export const APP_API_DEFAULT_PROD_URL = "https://app.netignite.dev";
+
+	export const DEFAULT_EMAIL_FROM_HOST = "netignite.dev";
+
+	export const DEFAULT_SMTP_FROM = `\"${AppConstants.APP_NAME}\" <noreply@${AppConstants.DEFAULT_EMAIL_FROM_HOST}>`;
+
+	export const BINARY_NAME = "netignite-server";
+}
diff --git a/server/lib/utils/cron.ts b/server/lib/utils/cron.ts
new file mode 100644
index 0000000..3d5f6f1
--- /dev/null
+++ b/server/lib/utils/cron.ts
@@ -0,0 +1,63 @@
+import type { CronJob as BunCronJob } from "bun";
+import { Logger } from "./logger";
+
+class CronJob {
+	private _job: BunCronJob | null = null;
+
+	constructor(
+		private readonly cronExpression: string,
+		private readonly callback: () => Promise<void>,
+	) {}
+
+	start() {
+		// A rejected Bun.cron callback ends the process, so a failing run is logged instead.
+		this._job = Bun.cron(this.cronExpression, async () => {
+			try {
+				await this.callback();
+			} catch (err) {
+				Logger.error(`Cron job "${this.cronExpression}" failed:`, err);
+			}
+		});
+	}
+
+	async stop() {
+		if (this._job) {
+			await this._job.stop();
+		}
+	}
+}
+
+export class CronJobHandler {
+	private static jobs: CronJob[] = [];
+	private static initialized: boolean = false;
+
+	static async init() {
+		if (this.initialized) return;
+		this.initialized = true;
+
+		this.jobs.push(
+			new CronJob("* * * * *", async () => {
+				// do something every minute
+			}),
+
+			new CronJob("* * * * *", async () => {
+				// do something every minute
+			}),
+		);
+	}
+
+	static async startAll() {
+		if (!this.initialized) {
+			await this.init();
+		}
+		for (const job of this.jobs) {
+			job.start();
+		}
+	}
+
+	static async stopAll() {
+		for (const job of this.jobs) {
+			await job.stop();
+		}
+	}
+}
diff --git a/server/lib/utils/crypto/cryptoKeys.ts b/server/lib/utils/crypto/cryptoKeys.ts
new file mode 100644
index 0000000..47a8c24
--- /dev/null
+++ b/server/lib/utils/crypto/cryptoKeys.ts
@@ -0,0 +1,54 @@
+import { type ec as ellipticCurve } from "elliptic";
+import { FixedUint, Uint, Uint256 } from "low-level";
+import { LCrypt } from "./lcrypt";
+import { type EllipticBinarySignature, Signature } from "./signature";
+
+type NewKeyPair<T> = new (keyPair: ellipticCurve.KeyPair) => T;
+
+export class PublicKey extends FixedUint {
+	public static override readonly byteLength = 33;
+}
+
+export class PrivateKey extends Uint256 {}
+
+export class SharedSecret extends Uint256 {}
+
+export class PublicKeyPair {
+	protected keyPair: ellipticCurve.KeyPair;
+
+	constructor(keyPair: PublicKeyPair | ellipticCurve.KeyPair) {
+		this.keyPair = keyPair instanceof PublicKeyPair ? keyPair.keyPair : keyPair;
+	}
+
+	static fromPrivate<T>(this: NewKeyPair<T>, privateKey: PrivateKey) {
+		return new this(LCrypt.ec.keyFromPrivate(privateKey.getRaw()));
+	}
+
+	static fromPublic<T>(this: NewKeyPair<T>, publicKey: PublicKey) {
+		return new this(LCrypt.ec.keyFromPublic(publicKey.getRaw()));
+	}
+
+	public getPublic() {
+		return PublicKey.from(this.keyPair.getPublic(true, "array"));
+	}
+
+	public getPrivate() {
+		return PrivateKey.from(this.keyPair.getPrivate().toBuffer());
+	}
+}
+
+export class KeyPair extends PublicKeyPair {
+	public derive(publicKey: PublicKey) {
+		return new SharedSecret(
+			this.keyPair.derive(KeyPair.fromPublic(publicKey).keyPair.getPublic()).toBuffer(),
+		);
+	}
+
+	public sign(msg: Uint) {
+		return this.keyPair.sign(msg.getRaw()) as EllipticBinarySignature;
+	}
+
+	public verify(msg: Uint, signature: Signature) {
+		return this.keyPair.verify(msg.getRaw(), signature.getElliptic());
+	}
+}
diff --git a/server/lib/utils/crypto/lcrypt.ts b/server/lib/utils/crypto/lcrypt.ts
new file mode 100644
index 0000000..863b2be
--- /dev/null
+++ b/server/lib/utils/crypto/lcrypt.ts
@@ -0,0 +1,93 @@
+import crypto from "crypto";
+import { type curve, ec as ellipticCurve } from "elliptic";
+import { Uint, Uint256 } from "low-level";
+import { KeyPair, PrivateKey, PublicKey, PublicKeyPair, SharedSecret } from "./cryptoKeys";
+import { Signature } from "./signature";
+
+export class LCrypt {
+	static readonly ec = new ellipticCurve("secp256k1");
+
+	static sha256(input: Uint | Buffer | string) {
+		return new Uint256(
+			crypto
+				.createHash("sha3-256")
+				.update(input instanceof Uint ? input.getRaw() : input)
+				.digest(),
+		);
+	}
+
+	static sign(hash: Uint256, privateKey: PrivateKey) {
+		try {
+			const keyPair = KeyPair.fromPrivate(privateKey);
+			const signature = keyPair.sign(hash);
+			return Signature.fromElliptic(signature);
+		} catch (error: any) {
+			return Signature.alloc();
+		}
+	}
+
+	static getPublicKeyFromPrivateKey(privateKey: PrivateKey) {
+		try {
+			return KeyPair.fromPrivate(privateKey).getPublic();
+		} catch (error: any) {
+			return PublicKey.empty();
+		}
+	}
+
+	static getPublicKeyFromSignature(hash: Uint256, signature: Signature) {
+		try {
+			return PublicKey.from(
+				(
+					this.ec.recoverPubKey(
+						hash.getRaw(),
+						signature.getElliptic(),
+						signature.getRecoveryParam(),
+					) as curve.base.BasePoint
+				).encode("array", true),
+			);
+		} catch (error: any) {
+			return PublicKey.empty();
+		}
+	}
+
+	static randomBytes(length: number) {
+		return crypto.randomBytes(length);
+	}
+
+	static generatePrivateKey() {
+		return new PrivateKey(this.ec.genKeyPair().getPrivate().toBuffer());
+	}
+
+	static genPrivateKeyFromPasswd(passwd: string) {
+		return new PrivateKey(
+			crypto.pbkdf2Sync(passwd, this.sha256(Uint.from(passwd, "utf8")).getRaw(), 100000, 32, "sha256"),
+		);
+	}
+
+	static createSharedSecret(privateKey: PrivateKey, publicKey: PublicKey) {
+		const sourceKeyPair = KeyPair.fromPrivate(privateKey);
+		const destKeyPair = PublicKeyPair.fromPublic(publicKey);
+		return sourceKeyPair.derive(destKeyPair.getPublic());
+	}
+
+	static encryptData(data: Uint, sharedSecret: Uint256, algorithm: "aes-256-gcm" = "aes-256-gcm") {
+		const iv = this.randomBytes(16);
+
+		const cipher = crypto.createCipheriv(algorithm, sharedSecret.getRaw(), iv);
+
+		const encrypted = Uint.concat([cipher.update(data.getRaw()), cipher.final()]);
+
+		return Uint.concat([iv, cipher.getAuthTag(), encrypted]);
+	}
+
+	static decryptData(data: Uint, sharedSecret: Uint256, algorithm: "aes-256-gcm" = "aes-256-gcm") {
+		const iv = data.slice(0, 16);
+		const authTag = data.slice(16, 32);
+		const encrypted = data.slice(32);
+
+		const decipher = crypto.createDecipheriv(algorithm, sharedSecret.getRaw(), iv.getRaw());
+		decipher.setAuthTag(authTag.getRaw());
+
+		return Uint.concat([decipher.update(encrypted.getRaw()), decipher.final()]);
+	}
+}
diff --git a/server/lib/utils/crypto/objectCrypt.ts b/server/lib/utils/crypto/objectCrypt.ts
new file mode 100644
index 0000000..12fc6ff
--- /dev/null
+++ b/server/lib/utils/crypto/objectCrypt.ts
@@ -0,0 +1,48 @@
+import { Uint } from "low-level";
+import { LCrypt } from "./lcrypt";
+
+export class ObjectEncryption {
+	static encrypt<T extends object>(obj: T, key: string): string {
+		const keyHash = LCrypt.sha256(Uint.from(key, "utf8"));
+		const serializableData = this.extractData(obj);
+		const jsonString = JSON.stringify(serializableData);
+		const data = Uint.from(jsonString, "utf8");
+
+		return LCrypt.encryptData(data, keyHash).toHex();
+	}
+
+	static decrypt<T extends object>(encryptedHex: string, key: string): T {
+		const keyHash = LCrypt.sha256(Uint.from(key, "utf8"));
+
+		const encryptedData = Uint.from(encryptedHex, "hex");
+		const decryptedData = LCrypt.decryptData(encryptedData, keyHash);
+		const jsonString = decryptedData.toString("utf8");
+
+		return JSON.parse(jsonString) as T;
+	}
+
+	private static extractData<T extends object>(obj: T): Record<string, unknown> {
+		const result: Record<string, unknown> = {};
+
+		const allKeys = [
+			...Object.keys(obj),
+			...Object.getOwnPropertyNames(Object.getPrototypeOf(obj) || {}),
+		];
+
+		for (const field of allKeys) {
+			if (field === "constructor") continue;
+
+			try {
+				const value = (obj as any)[field];
+				if (typeof value === "function") continue;
+
+				JSON.stringify(value);
+				result[field] = value;
+			} catch {
+				// Skip non-serializable fields
+			}
+		}
+
+		return result;
+	}
+}
diff --git a/server/lib/utils/crypto/signature.ts b/server/lib/utils/crypto/signature.ts
new file mode 100644
index 0000000..14b0db6
--- /dev/null
+++ b/server/lib/utils/crypto/signature.ts
@@ -0,0 +1,62 @@
+import elliptic from "elliptic";
+import { FixedUint, Uint8, Uint64 } from "low-level";
+
+export interface EllipticBinarySignature extends elliptic.ec.Signature {
+	recoveryParam: number;
+}
+
+export class Signature extends FixedUint {
+	public static override byteLength = 66;
+
+	public static fromElliptic(signature: EllipticBinarySignature) {
+		return this.concat([
+			signature.r.toArrayLike(Buffer),
+			signature.s.toArrayLike(Buffer),
+			Uint8.from(signature.recoveryParam),
+		]);
+	}
+
+	public getElliptic() {
+		return {
+			r: this.buffer.subarray(1, 33),
+			s: this.buffer.subarray(33, 65),
+			recoveryParam: this.buffer.subarray(65, 66).readUint8(0),
+		};
+	}
+
+	public getRecoveryParam() {
+		return this.buffer.subarray(65, 66).readUint8(0);
+	}
+}
+
+export class FullSignature {
+	public r: Uint64;
+	public s: Uint64;
+	public recoveryParam: number;
+
+	constructor(r: Uint64, s: Uint64, recoveryParam: number) {
+		this.r = r;
+		this.s = s;
+		this.recoveryParam = recoveryParam;
+	}
+
+	public static fromRaw(raw: Signature) {
+		return new this(
+			new Uint64(raw.slice(1, 33).getRaw()),
+			new Uint64(raw.slice(33, 65).getRaw()),
+			raw.slice(65, 66).getRaw().readUint8(0),
+		);
+	}
+
+	public getRaw() {
+		return Signature.concat([this.r, this.s, Uint8.from(this.recoveryParam)]);
+	}
+
+	public getElliptic() {
+		return {
+			r: this.r.getRaw(),
+			s: this.s.getRaw(),
+			recoveryParam: this.recoveryParam,
+		};
+	}
+}
diff --git a/server/lib/utils/index.ts b/server/lib/utils/index.ts
new file mode 100644
index 0000000..18adb89
--- /dev/null
+++ b/server/lib/utils/index.ts
@@ -0,0 +1,81 @@
+import { randomBytes as crypto_randomBytes } from "crypto";
+import { mkdir as fs_mkdir } from "fs/promises";
+
+export class Utils {
+	static getRandomU32() {
+		const timeComponent = Date.now() % 0x100000000;
+		const randomComponent = crypto_randomBytes(4).readUInt32BE(0);
+
+		return (timeComponent + randomComponent) % 0x100000000;
+	}
+
+	static splitNTimes(str: string, delim: string, count: number) {
+		const parts = str.split(delim);
+		const tail = parts.slice(count).join(delim);
+		const result = parts.slice(0, count);
+		if (tail) result.push(tail);
+		return result;
+	}
+
+	static splitNTimesReverse(str: string, delim: string, count: number) {
+		const parts = str.split(delim);
+		const head = parts.slice(0, parts.length - count).join(delim);
+		const result = parts.slice(parts.length - count);
+		if (head) result.unshift(head);
+		return result;
+	}
+
+	static mergeObjects<T extends object[]>(...objects: T): Utils.MergeArray<T> {
+		return Object.assign({}, ...objects) as Utils.MergeArray<T>;
+	}
+
+	static sleep(ms: number) {
+		return new Promise<void>((resolve) => setTimeout(() => resolve(), ms));
+	}
+
+	static async ensureDirectoryExists(path: string) {
+		try {
+			await fs_mkdir(path, { recursive: true });
+		} catch (err) {
+			// ignore
+		}
+	}
+
+	static asExact<Shape>() {
+		return <T extends Shape>(obj: T & Utils.DeepExact<Shape, T>): T => obj;
+	}
+}
+
+export namespace Utils {
+	export type MergeArray<T extends object[]> = T extends [infer First, ...infer Rest]
+		? First & MergeArray<Rest extends object[] ? Rest : []>
+		: {};
+
+	export type CreateError<DoError extends boolean, T = symbol> = DoError extends true
+		? CreateError<DoError>
+		: T;
+
+	export type SameType<A, B> = CreateError<
+		(<T>() => T extends A ? 1 : 2) extends <T>() => T extends B ? 1 : 2 ? false : true,
+		A
+	>;
+
+	export type DeepExact<Shape, T> =
+		// 1. Bypass functions early
+		Shape extends (...args: any[]) => any
+			? T
+			: // 2. Handle Arrays/Tuples using Mapped Types
+				Shape extends readonly any[]
+				? T extends readonly any[]
+					? { [I in keyof T]: DeepExact<Shape[number], T[I]> }
+					: never
+				: // 3. Handle Objects
+					Shape extends object
+					? T extends object
+						? {
+								[K in keyof T]: K extends keyof Shape ? DeepExact<Shape[K], T[K]> : never;
+							}
+						: never
+					: // 4. Handle Primitives
+						T;
+}
diff --git a/server/lib/utils/logger.ts b/server/lib/utils/logger.ts
new file mode 100644
index 0000000..f171c5e
--- /dev/null
+++ b/server/lib/utils/logger.ts
@@ -0,0 +1,63 @@
+export class Logger {
+	private static readonly logLevelMap = {
+		debug: 0,
+		info: 1,
+		warn: 2,
+		error: 3,
+		critical: 4,
+	} as const;
+
+	private static logLevel: (typeof this.logLevelMap)[Logger.LogLevel] = this.logLevelMap.info;
+
+	static setLogLevel(level: Logger.LogLevel) {
+		if (this.logLevelMap[level] === undefined) {
+			throw new Error(`Invalid log level: ${level}`);
+		}
+		this.logLevel = this.logLevelMap[level];
+	}
+
+	static getLogLevel(): Logger.LogLevel {
+		const match = Object.entries(this.logLevelMap).find(([_, value]) => value === this.logLevel);
+		return (match ? match[0] : "info") as Logger.LogLevel;
+	}
+
+	static debug(...args: any[]) {
+		if (this.logLevel <= this.logLevelMap.debug) {
+			console.debug(`[${new Date(Date.now()).toISOString()}]`, "[DEBUG]", ...args);
+		}
+	}
+
+	static log(...args: any[]) {
+		if (this.logLevel <= this.logLevelMap.info) {
+			console.log(`[${new Date(Date.now()).toISOString()}]`, "[INFO]", ...args);
+		}
+	}
+
+	static info(...args: any[]) {
+		if (this.logLevel <= this.logLevelMap.info) {
+			console.info(`[${new Date(Date.now()).toISOString()}]`, "[INFO]", ...args);
+		}
+	}
+
+	static warn(...args: any[]) {
+		if (this.logLevel <= this.logLevelMap.warn) {
+			console.warn(`[${new Date(Date.now()).toISOString()}]`, "[WARN]", ...args);
+		}
+	}
+
+	static error(...args: any[]) {
+		if (this.logLevel <= this.logLevelMap.error) {
+			console.error(`[${new Date(Date.now()).toISOString()}]`, "[ERROR]", ...args);
+		}
+	}
+
+	static critical(...args: any[]) {
+		if (this.logLevel <= this.logLevelMap.critical) {
+			console.error(`[${new Date(Date.now()).toISOString()}]`, "[CRITICAL]", ...args);
+		}
+	}
+}
+
+export namespace Logger {
+	export type LogLevel = "debug" | "info" | "warn" | "error" | "critical";
+}
diff --git a/server/middleware/auth.ts b/server/middleware/auth.ts
deleted file mode 100644
index c92db3b..0000000
--- a/server/middleware/auth.ts
+++ /dev/null
@@ -1,14 +0,0 @@
-import { AuthHandler } from "../utils/auth/handler";
-
-export default defineEventHandler(async (event) => {
-
-    if (!event.node.req.url?.startsWith("/api/") || event.node.req.url?.startsWith("/api/auth") || event.node.req.url?.startsWith("/api/agent-control-service")) {
-        // Skip authentication for auth routes
-        return;
-    }
-
-    const info = AuthHandler.useAuth(event);
-    if (!info) return;
-
-    event.context.userinfo = info;
-});
diff --git a/server/plugins/startup.ts b/server/plugins/startup.ts
index c70ce8f..eccf149 100644
--- a/server/plugins/startup.ts
+++ b/server/plugins/startup.ts
@@ -1,82 +1,105 @@
-import { AgentControlService } from "../agent-control-service";
-import { ConfigHandler } from "../utils/config";
-import { DBStorage } from "../db";
-import { Logger } from "../utils/logger";
-import { SessionHandler } from "../utils/auth/sessions";
-import crypto from 'crypto';
-import { AuthHandler } from "../utils/auth/handler";
-
-async function createAdminUserIfNoneExists() {
-
-    const allUsers = await DBStorage.Users.getAll();
-
-    if (!allUsers) {
-        Logger.error("Error retrieving users from DB");
-        process.exit(1);
-    }
-
-    if (allUsers.length === 0) {
-
-        const randomAdminPassword = crypto.randomBytes(32).toString('hex');
-
-        const defaultAdmin = await DBStorage.Users.insert({
-            username: 'admin',
-            password_hash: await AuthHandler.hashPassword(randomAdminPassword),
-            role: 'admin',
-            favorites: []
-        });
-
-        await Bun.write('./data/initial_admin_credentials',
-            `Username: admin\nPassword: ${randomAdminPassword}\n`
-        );
-
-        Logger.log(
-            `No users found in database. Created default admin user.\n` +
-            `Username: admin\n` +
-            `Password: ${randomAdminPassword}\n` +
-            `Credentials have also been saved to ./data/initial_admin_credentials`
-        );
-
-        if (!defaultAdmin) {
-            Logger.error("Error creating default admin user");
-            process.exit(1);
-        }
-    }
-}
-
-export default defineNitroPlugin(async () => {
+import { defineNitroPlugin } from "nitropack/runtime";
+import { AgentGatewayRunner } from "../lib/agents/gateway";
+import { API } from "../lib/api";
+import { EmailService } from "../lib/api/utils/email";
+import { DB } from "../lib/db";
+import { DeviceStatusService } from "../lib/devices/status";
+import { TaskScheduler } from "../lib/tasks";
+import { Utils } from "../lib/utils";
+import { ConfigHandler } from "../lib/utils/config";
+import { AppConstants } from "../lib/utils/constants";
+import { CronJobHandler } from "../lib/utils/cron";
+import { Logger } from "../lib/utils/logger";
+
+// Runs once at Nitro boot — replaces Main.main() from the standalone backend shape.
+export default defineNitroPlugin(async (nitroApp) => {
+	let shutdownPromise: Promise<boolean> | null = null;
+
+	// Idempotent: every caller awaits the same run. Resolves to false if a step failed.
+	function shutdown(reason: string) {
+		shutdownPromise ??= (async () => {
+			try {
+				Logger.log(`Received ${reason}, shutting down...`);
+
+				await CronJobHandler.stopAll();
+
+				DeviceStatusService.stop();
+				AgentGatewayRunner.stop();
+
+				await API.stop();
+
+				await EmailService.reset();
+				await TaskScheduler.stopProcessing();
+
+				await DB.close();
+
+				Logger.log("Shutdown complete, exiting.");
+				return true;
+			} catch {
+				Logger.critical("Error during shutdown, forcing exit");
+				return false;
+			}
+		})();
+		return shutdownPromise;
+	}
+
+	nitroApp.hooks.hook("close", async () => {
+		await shutdown("close");
+	});
+
+	// The Bun preset installs no signal or error handlers and never calls the `close` hook.
+	// Registered first: Nitro doesn't await this plugin, so the server already listens during startup.
+	if (!import.meta.dev) {
+		for (const signal of ["SIGINT", "SIGTERM"] as const) {
+			process.once(signal, async () => {
+				process.exit((await shutdown(signal)) ? 0 : 1);
+			});
+		}
+
+		process.once("uncaughtException", async (error) => {
+			Logger.critical(
+				`Uncaught Exception:\n${Error.isError(error) ? (error.stack ?? error.message) : error}`,
+			);
+			await shutdown("uncaughtException");
+			process.exit(1);
+		});
+
+		process.once("unhandledRejection", async (reason) => {
+			Logger.critical(
+				`Unhandled Rejection:\n${Error.isError(reason) ? (reason.stack ?? reason.message) : reason}`,
+			);
+			await shutdown("unhandledRejection");
+			process.exit(1);
+		});
+	}
 
 	const config = await ConfigHandler.loadConfig();
-    if (!config) {
-        Logger.error("Error getting config");
-        process.exit(1);
-    }
-	Logger.log('Config loaded');
 
-    if (config.logLevel) {
-        Logger.setLogLevel(config.logLevel);
-    }
+	Logger.setLogLevel(config.LOG_LEVEL ?? "info");
+	Logger.log(`Starting ${AppConstants.APP_NAME}...`);
 
-    if (AgentControlService.isInitialized()) return;
+	await DB.init(
+		config.DB_PATH,
+		config.DB_AUTO_MIGRATE,
+		config.CONFIG_BASE_DIR,
+		config.DB_MIGRATION_DIR,
+	);
 
-    await DBStorage.init();
-    console.log('DB initialized');
+	await Utils.ensureDirectoryExists(config.LOG_DIR ?? "./data/logs");
 
-    await createAdminUserIfNoneExists();
-    console.log('Admin user check complete');
+	await EmailService.init();
 
-    await SessionHandler.init();
-    console.log('Session handler initialized');
+	await CronJobHandler.init();
+	await CronJobHandler.startAll();
 
-    const agents = await DBStorage.Agents.getAll();
+	// Not awaited: it runs the queued tasks to completion. Started before the API so that no
+	// request can enqueue first (TaskHandler then skips loading the stored pending/paused tasks).
+	TaskScheduler.processQueue().catch((err) => {
+		Logger.error("Task queue processing failed:", err);
+	});
 
-    if (!agents) {
-        Logger.error("Error getting agents from DB");
-        process.exit(1);
-    }
-
-    await AgentControlService.init({ ...config, agents });
-    console.log('Control service initialized');
+	await API.init([config.APP_URL], config.API_DISABLE_DOCS === true);
 
+	AgentGatewayRunner.start();
+	DeviceStatusService.start();
 });
-
diff --git a/server/routes/api/[...].ts b/server/routes/api/[...].ts
new file mode 100644
index 0000000..48c35ff
--- /dev/null
+++ b/server/routes/api/[...].ts
@@ -0,0 +1,44 @@
+import { defineEventHandler, getMethod, getRequestURL, readRawBody, setResponseStatus } from "h3";
+import { Hono } from "hono";
+import { API } from "../../lib/api";
+
+// Catch-all: forward every /api/** request to the Hono app (mounted at /api).
+// Hono then handles /api/v1/**, /api/health, /api/docs/v1. See docs/04-backend-hono.md.
+let wrapper: Hono | null = null;
+
+// Only cache the wrapper once `API.getApp()` succeeds. A request that arrives while
+// `server/plugins/startup.ts` is still running `API.init()` must not cache an empty router.
+function getWrapper(): Hono | null {
+	if (wrapper) return wrapper;
+	try {
+		const app = new Hono();
+		app.route("/api", API.getApp());
+		wrapper = app;
+		return wrapper;
+	} catch {
+		return null;
+	}
+}
+
+export default defineEventHandler(async (event) => {
+	const app = getWrapper();
+	if (!app) {
+		setResponseStatus(event, 503);
+		return {
+			success: false,
+			code: 503,
+			message: "API is starting, please retry shortly",
+		};
+	}
+
+	const url = getRequestURL(event);
+	const method = getMethod(event);
+
+	const request = new Request(url, {
+		method,
+		headers: event.headers,
+		body: method !== "GET" && method !== "HEAD" ? await readRawBody(event) : undefined,
+	});
+
+	return app.fetch(request);
+});
diff --git a/server/routes/ws/agent.ts b/server/routes/ws/agent.ts
new file mode 100644
index 0000000..27ba0b5
--- /dev/null
+++ b/server/routes/ws/agent.ts
@@ -0,0 +1,5 @@
+import { defineWebSocketHandler } from "h3";
+import { AgentGatewayRunner } from "../../lib/agents/gateway";
+
+// Agent connections (ESP32 firmware, Linux agent). See server/lib/agents/protocol.ts.
+export default defineWebSocketHandler(AgentGatewayRunner.hooks());
diff --git a/server/tsconfig.json b/server/tsconfig.json
deleted file mode 100644
index ee43271..0000000
--- a/server/tsconfig.json
+++ /dev/null
@@ -1,19 +0,0 @@
-{
-  "extends": "../.nuxt/tsconfig.server.json",
-
-  "compilerOptions": {
-
-    "target": "ESNext",
-
-    // Best practices
-    "strict": true,
-    "skipLibCheck": true,
-    "noFallthroughCasesInSwitch": true,
-    "noUncheckedIndexedAccess": true,
-
-    // Some stricter flags (disabled by default)
-    "noUnusedLocals": false,
-    "noUnusedParameters": false,
-    "noPropertyAccessFromIndexSignature": false
-  }
-}
diff --git a/server/utils/auth/agentSecrets.ts b/server/utils/auth/agentSecrets.ts
deleted file mode 100644
index 7db2dbf..0000000
--- a/server/utils/auth/agentSecrets.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-import { createHash, randomBytes, timingSafeEqual } from "crypto";
-
-/**
- * Agent secrets are generated by the server, shown to the user once and stored only as a
- * SHA-256 hash (`sha256:<hex>`). The secrets are 128-bit random values, so a fast unsalted hash
- * is sufficient — like API tokens, they can't be brute-forced from the hash.
- */
-export class AgentSecrets {
-
-    private static readonly HASH_PREFIX = "sha256:";
-
-    /** A new random secret: 32 hex characters (128 bit). */
-    static generate() {
-        return randomBytes(16).toString("hex");
-    }
-
-    static hash(secret: string) {
-        return this.HASH_PREFIX + createHash("sha256").update(secret, "utf8").digest("hex");
-    }
-
-    static isHash(value: string) {
-        return value.startsWith(this.HASH_PREFIX) && /^[0-9a-f]{64}$/.test(value.slice(this.HASH_PREFIX.length));
-    }
-
-    /** Constant-time check of a secret against a stored hash. */
-    static verify(secret: string, secretHash: string) {
-        if (!this.isHash(secretHash)) return false;
-
-        const expected = Buffer.from(secretHash.slice(this.HASH_PREFIX.length), "hex");
-        const actual = createHash("sha256").update(secret, "utf8").digest();
-
-        return timingSafeEqual(expected, actual);
-    }
-
-}
diff --git a/server/utils/auth/handler.ts b/server/utils/auth/handler.ts
deleted file mode 100644
index b3a106b..0000000
--- a/server/utils/auth/handler.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-import type { H3Event } from 'h3';
-import { SessionHandler } from './sessions';
-import type { DBStorage } from '@/server/db';
-import bcrypt from 'bcrypt';
-
-export interface UserAuthInfo {
-    userID: number;
-    username: string;
-    role: DBStorage.User.Model.Role;
-    favorites: number[];
-};
-
-export interface APIUserInfo extends UserAuthInfo {
-    adminMode: false | "admin" | "superadmin";
-};
-
-export class AuthHandler {
-
-    static useAuth(event: H3Event): APIUserInfo | false {
-        // @todo implement Remote API authentication
-
-        const session = SessionHandler.isAuthenticatedSession(event);
-        if (!session) return false;
-
-        let adminMode: false | "admin" | "superadmin" = false;
-
-        if (session.role === "admin" && getQuery(event).adminMode === "true") {
-            adminMode = session.userID === 1 ? "superadmin" : "admin";
-        }
-        return {
-            ...structuredClone(session),
-            adminMode
-        };
-    }
-
-    static async hashPassword(password: string) {
-        return await bcrypt.hash(password, 16);
-    }
-
-}
diff --git a/server/utils/auth/sessions.ts b/server/utils/auth/sessions.ts
deleted file mode 100644
index 8778662..0000000
--- a/server/utils/auth/sessions.ts
+++ /dev/null
@@ -1,96 +0,0 @@
-import { randomBytes } from 'crypto';
-import type { H3Event } from 'h3';
-import { DBStorage } from '~/server/db';
-import type { UserAuthInfo } from './handler';
-
-export class SessionData implements UserAuthInfo {
-
-    private static readonly EXPIRATION_TIME = 1000 * 60 * 60 * 24 * 30; // 30 days
-
-    constructor(
-        readonly userID: number,
-        public username: string,
-        public role: DBStorage.User.Model.Role,
-        public favorites: number[],
-        private expirationTimestamp = Date.now() + SessionData.EXPIRATION_TIME
-    ) {}
-
-    public isExpired() {
-        return Date.now() > this.expirationTimestamp;
-    }
-
-    public refresh() {
-        this.expirationTimestamp = Date.now() + SessionData.EXPIRATION_TIME;
-    }
-
-    public get expirationTime() {
-        return this.expirationTimestamp;
-    }
-
-}
-
-export class SessionHandler {
-
-    private static sessions: Map<string, SessionData>;
-
-    private constructor() {}
-
-    private static initialized = false;
-
-    static async init() {
-        if (this.initialized) return;
-        this.initialized = true;
-
-        this.sessions = new Map<string, SessionData>();
-    }
-
-    static createSession(user: DBStorage.User.Model) {
-        let sessionID: string = randomBytes(32).toString('hex');
-        // Ensure the session ID is unique
-        while (this.sessions.has(sessionID)) {
-            sessionID = randomBytes(32).toString('hex');
-        }
-
-        this.sessions.set(sessionID, new SessionData(user.id, user.username, user.role, user.favorites));
-        return sessionID;
-    }
-
-    static getActiveSessionAndRefresh(sessionID: string) {
-        const session = this.sessions.get(sessionID);
-        if (!session) {
-            return null;
-        }
-        if (session.isExpired()) {
-            this.destroySession(sessionID);
-            return null;
-        }
-        session.refresh();
-        return session;
-    }
-
-    static isAuthenticatedSession(event: H3Event) {
-
-        const sessionID = getCookie(event, 'session');
-        if (!sessionID) {
-            setResponseStatus(event, 401);
-            event.node.res.setHeader("Content-Type", "application/json");
-            event.node.res.end(JSON.stringify({ status: "ERROR", message: "No session found" }));
-            return false;
-        }
-
-        const session = this.getActiveSessionAndRefresh(sessionID);
-        if (!session) {
-            setResponseStatus(event, 401);
-            event.node.res.setHeader("Content-Type", "application/json");
-            event.node.res.end(JSON.stringify({ status: "ERROR", message: "Invalid session" }));
-            return false;
-        }
-
-        return session;
-    }
-
-    static destroySession(sessionID: string) {
-        this.sessions.delete(sessionID);
-    }
-
-}
\ No newline at end of file
diff --git a/server/utils/config.ts b/server/utils/config.ts
deleted file mode 100644
index f127acc..0000000
--- a/server/utils/config.ts
+++ /dev/null
@@ -1,51 +0,0 @@
-import { ControllableAgent } from "../agent-control-service/agent";
-import fs from "fs";
-import { Logger } from "./logger";
-
-export interface ConfigLike {
-	logLevel?: Logger.LogLevel;
-	//agents: ControllableAgent.IConfig[];
-}
-
-export class ConfigHandler {
-
-	private static readonly configFilePath = process.env.CONFIG_FILE_PATH || './config/config.json';
-	private static readonly sampleConfigFilePath = process.env.NETIGNITE_SAMPLE_CONFIG_PATH || './config/config.sample.json';
-
-	private static config: ConfigLike | null = null;
-
-	static async getConfig(): Promise<ConfigLike | null> {
-		return this.config;
-	}
-
-	static async loadConfig() {
-
-		// Check if the config is already loaded
-		if (this.config) return this.config;
-
-		try {
-
-			if (!fs.existsSync(this.configFilePath)) {
-				// If config file does not exist, create it from sample
-				if (fs.existsSync(this.sampleConfigFilePath)) {
-					fs.copyFileSync(this.sampleConfigFilePath, this.configFilePath);
-				} else {
-					console.error("Could not find config file or sample config file.");
-					process.exit(1);
-				}
-			}
-
-			// Load the config from config file is not already loaded
-			const configFile = fs.readFileSync(this.configFilePath, 'utf-8');
-			this.config = JSON.parse(configFile) as ConfigLike;
-			
-			// this.config = await Bun.file(this.configFilePath).json() as ConfigLike;
-			return this.config;
-
-		} catch (error) {
-			console.error("Error loading config file:", error);
-			process.exit(1);
-		}
-	}
-
-}
diff --git a/server/utils/index.ts b/server/utils/index.ts
deleted file mode 100644
index e8bab0e..0000000
--- a/server/utils/index.ts
+++ /dev/null
@@ -1,21 +0,0 @@
-import { randomBytes } from 'crypto';
-
-export class Utils {
-
-    static getRandomU32() {
-
-        const timeComponent = Date.now() % 0x100000000;
-        const randomComponent = randomBytes(4).readUInt32BE(0);
-
-        return (timeComponent + randomComponent) % 0x100000000;
-    }
-
-    static splitNTimes(str: string, delim: string, count: number) {
-        const parts = str.split(delim);
-        const tail = parts.slice(count).join(delim);
-        const result = parts.slice(0,count);
-        if (tail) result.push(tail);
-        return result;
-    }
-
-}
diff --git a/server/utils/logger.ts b/server/utils/logger.ts
deleted file mode 100644
index 525472f..0000000
--- a/server/utils/logger.ts
+++ /dev/null
@@ -1,59 +0,0 @@
-
-export class Logger {
-
-    private static readonly logLevelMap = {
-        debug: 0,
-        info: 1,
-        warn: 2,
-        error: 3,
-        critical: 4,
-    } as const;
-
-    private static logLevel: typeof this.logLevelMap[Logger.LogLevel] = this.logLevelMap.info;
-    
-    static setLogLevel(level: Logger.LogLevel) {
-        if (this.logLevelMap[level] === undefined) {
-            throw new Error(`Invalid log level: ${level}`);
-        }
-        this.logLevel = this.logLevelMap[level];
-    }
-
-    static getLogLevel(): Logger.LogLevel {
-        return Object.entries(this.logLevelMap).find(([_, value]) => value === this.logLevel) as any;
-    }
-
-    static debug(...args: any[]) {
-        if (this.logLevel <= this.logLevelMap.debug) {
-            console.debug(...args);
-        }
-    }
-
-    static log(...args: any[]) {
-        if (this.logLevel <= this.logLevelMap.info) {
-            console.log(...args);
-        }
-    }
-
-    static warn(...args: any[]) {
-        if (this.logLevel <= this.logLevelMap.warn) {
-            console.warn(...args);
-        }
-    }
-
-    static error(...args: any[]) {
-        if (this.logLevel <= this.logLevelMap.error) {
-            console.error(...args);
-        }
-    }
-
-    static critical(...args: any[]) {
-        if (this.logLevel <= this.logLevelMap.critical) {
-            console.error(...args);
-        }
-    }
-
-}
-
-export namespace Logger {
-    export type LogLevel = "debug" | "info" | "warn" | "error" | "critical";
-}
\ No newline at end of file
diff --git a/server/utils/validation.ts b/server/utils/validation.ts
deleted file mode 100644
index d91c85f..0000000
--- a/server/utils/validation.ts
+++ /dev/null
@@ -1,59 +0,0 @@
-import type { AgentsTable } from "../db/models/agents";
-import type { DevicesTable } from "../db/models/devices";
-
-const AGENT_TYPES: readonly AgentsTable.Model.Type[] = ["server", "microcontroller"];
-const DEVICE_TYPES: readonly DevicesTable.Model.Type[] = ["server", "desktop", "laptop", "printer", "nas"];
-
-// The formats agents accept: six hex pairs separated by colons or by dashes.
-const MAC_ADDRESS_REGEX = /^([0-9A-Fa-f]{2}:){5}[0-9A-Fa-f]{2}$|^([0-9A-Fa-f]{2}-){5}[0-9A-Fa-f]{2}$/;
-
-export namespace Validation {
-
-    export type AgentInput = Pick<AgentsTable.Model, "name" | "type" | "description">;
-    export type DeviceInput = Pick<DevicesTable.Model, "name" | "type" | "description" | "macAddress" | "port" | "agentID">;
-
-    export function isMacAddress(value: unknown): value is string {
-        return typeof value === "string" && MAC_ADDRESS_REGEX.test(value);
-    }
-
-    export function isPort(value: unknown): value is number {
-        return typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 65535;
-    }
-
-    /** The editable fields of an agent, or null if the payload is invalid. */
-    export function parseAgentInput(payload: any): AgentInput | null {
-        if (
-            !payload ||
-            typeof payload.name !== "string" ||
-            typeof payload.description !== "string" ||
-            !AGENT_TYPES.includes(payload.type)
-        ) {
-            return null;
-        }
-        return { name: payload.name, type: payload.type, description: payload.description };
-    }
-
-    /** The editable fields of a device, or null if the payload is invalid. */
-    export function parseDeviceInput(payload: any): DeviceInput | null {
-        if (
-            !payload ||
-            typeof payload.name !== "string" ||
-            !DEVICE_TYPES.includes(payload.type) ||
-            (payload.description !== undefined && payload.description !== null && typeof payload.description !== "string") ||
-            !isMacAddress(payload.macAddress) ||
-            !isPort(payload.port) ||
-            typeof payload.agentID !== "number" || !Number.isSafeInteger(payload.agentID)
-        ) {
-            return null;
-        }
-        return {
-            name: payload.name,
-            type: payload.type,
-            description: payload.description ?? "",
-            macAddress: payload.macAddress,
-            port: payload.port,
-            agentID: payload.agentID,
-        };
-    }
-
-}
diff --git a/shared/encoding.ts b/shared/encoding.ts
deleted file mode 100644
index 8764804..0000000
--- a/shared/encoding.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-
-export class EncodingUtils {
-    static toHex(str: string, bin = false) {
-        const uint8array = new TextEncoder().encode(str);
-        if (bin) return uint8array;
-        return Array.from(uint8array).map(b => b.toString(16).padStart(2, '0')).join('');
-    }
-
-    static async fromHex(buf: Uint8Array | ArrayBuffer | Blob): Promise<string> {
-
-        if (buf instanceof Blob) {
-            const arrayBuffer = await buf.arrayBuffer();
-            return this.fromHex(arrayBuffer);
-        }
-
-        return new TextDecoder().decode(new Uint8Array(buf));
-    }
-}
-
diff --git a/shared/utils.ts b/shared/utils.ts
deleted file mode 100644
index d36462b..0000000
--- a/shared/utils.ts
+++ /dev/null
@@ -1,34 +0,0 @@
-
-export class SharedUtils {
-
-    static deepMerge<T>(target: Partial<T>, source: Partial<T>): T {
-        const result = { ...target } as any;
-
-        for (const key in source) {
-            if (source.hasOwnProperty(key)) {
-                const sourceValue = source[key];
-                const targetValue = target[key];
-
-                if (
-                    sourceValue &&
-                    typeof sourceValue === 'object' &&
-                    !Array.isArray(sourceValue) &&
-                    targetValue &&
-                    typeof targetValue === 'object' &&
-                    !Array.isArray(targetValue)
-                ) {
-                    // Recursively merge nested objects
-                    result[key] = SharedUtils.deepMerge(targetValue, sourceValue);
-                } else {
-                    // Overwrite with source value
-                    result[key] = sourceValue;
-                }
-            }
-        }
-
-        return result;
-    }
-
-}
-
-
diff --git a/tests/agents.test.ts b/tests/agents.test.ts
deleted file mode 100644
index 97db8be..0000000
--- a/tests/agents.test.ts
+++ /dev/null
@@ -1,120 +0,0 @@
-import { describe, test, expect } from "bun:test";
-import { AgentSecrets } from "@/server/utils/auth/agentSecrets";
-import { Validation } from "@/server/utils/validation";
-import { ControllableAgent } from "@/server/agent-control-service/agent";
-import { AgentCommand, AgentResponse } from "@/server/agent-control-service/commands/message";
-
-describe('agent_secrets', () => {
-
-    test('generated secrets are random 32-character hex strings', () => {
-        const a = AgentSecrets.generate();
-        const b = AgentSecrets.generate();
-        expect(a).toMatch(/^[0-9a-f]{32}$/);
-        expect(a).not.toBe(b);
-    });
-
-    test('hash verifies only the matching secret', () => {
-        const secret = AgentSecrets.generate();
-        const hash = AgentSecrets.hash(secret);
-
-        expect(hash).not.toContain(secret);
-        expect(AgentSecrets.isHash(hash)).toBe(true);
-        expect(AgentSecrets.verify(secret, hash)).toBe(true);
-        expect(AgentSecrets.verify(secret + "x", hash)).toBe(false);
-        expect(AgentSecrets.verify("", hash)).toBe(false);
-    });
-
-    test('plaintext values are not treated as hashes', () => {
-        expect(AgentSecrets.isHash("123456")).toBe(false);
-        expect(AgentSecrets.isHash("sha256:not-a-hash")).toBe(false);
-        // A plaintext secret stored by an old version must never verify against itself.
-        expect(AgentSecrets.verify("123456", "123456")).toBe(false);
-    });
-
-    test('legacy secrets keep working after migration', () => {
-        const legacySecret = "with:colon";
-        expect(AgentSecrets.verify(legacySecret, AgentSecrets.hash(legacySecret))).toBe(true);
-    });
-
-});
-
-describe('payload_validation', () => {
-
-    const device: Validation.DeviceInput = {
-        name: "PC",
-        type: "desktop",
-        description: "Office",
-        macAddress: "AA:BB:CC:DD:EE:FF",
-        port: 9,
-        agentID: 1,
-    };
-
-    test('valid device payloads are accepted', () => {
-        expect(Validation.parseDeviceInput(device)).toEqual(device);
-        expect(Validation.parseDeviceInput({ ...device, macAddress: "aa-bb-cc-dd-ee-ff" })).not.toBeNull();
-        expect(Validation.parseDeviceInput({ ...device, description: undefined })?.description).toBe("");
-    });
-
-    test('invalid device payloads are rejected', () => {
-        expect(Validation.parseDeviceInput(null)).toBeNull();
-        expect(Validation.parseDeviceInput({ ...device, type: "toaster" })).toBeNull();
-        expect(Validation.parseDeviceInput({ ...device, macAddress: "AABBCCDDEEFF" })).toBeNull();
-        expect(Validation.parseDeviceInput({ ...device, macAddress: "AA:BB-CC:DD:EE:FF" })).toBeNull();
-        expect(Validation.parseDeviceInput({ ...device, port: 0 })).toBeNull();
-        expect(Validation.parseDeviceInput({ ...device, port: 9.5 })).toBeNull();
-        expect(Validation.parseDeviceInput({ ...device, port: 65536 })).toBeNull();
-        expect(Validation.parseDeviceInput({ ...device, agentID: "1" })).toBeNull();
-    });
-
-    test('agent payloads only carry editable fields', () => {
-        const input = Validation.parseAgentInput({
-            name: "ESP32", type: "microcontroller", description: "", secret: "chosen", ownerID: 99, id: -1,
-        });
-        expect(input).toEqual({ name: "ESP32", type: "microcontroller", description: "" });
-        expect(Validation.parseAgentInput({ name: "x", type: "robot", description: "" })).toBeNull();
-    });
-
-});
-
-describe('agent_commands', () => {
-
-    function connectedAgent() {
-        const sent: string[] = [];
-        const agent = new ControllableAgent(1, 1, AgentSecrets.hash("secret"));
-        agent.peerID = "peer";
-        agent.socket = {
-            websocket: { readyState: WebSocket.OPEN },
-            send: (data) => { sent.push(String(data)); },
-            close: () => {},
-        };
-        return { agent, sent };
-    }
-
-    test('concurrent commands each receive their own response', async () => {
-        const { agent, sent } = connectedAgent();
-
-        const wakeup = agent.sendCommand("WAKEUP", { macAddress: "AA:BB:CC:DD:EE:FF", port: 9 });
-        const status = agent.sendCommand("GET_STATUS", { address: "AA:BB:CC:DD:EE:FF" });
-
-        const [wakeupCmd, statusCmd] = sent.map((data) => AgentCommand.fromDecoded(data));
-        if (!wakeupCmd || !statusCmd) throw new Error("commands were not sent");
-
-        // Answer in reverse order.
-        agent.handleMessage(new AgentResponse("GET_STATUS", statusCmd.id, { status: "OK", message: "", online: "online" }).encode());
-        agent.handleMessage(new AgentResponse("WAKEUP", wakeupCmd.id, { status: "OK", message: "Wakeup successful" }).encode());
-
-        expect(await status).toEqual({ status: "OK", message: "", online: "online" });
-        expect(await wakeup).toEqual({ status: "OK", message: "Wakeup successful" });
-    });
-
-    test('pending commands fail when the connection is detached', async () => {
-        const { agent } = connectedAgent();
-
-        const wakeup = agent.sendCommand("WAKEUP", { macAddress: "AA:BB:CC:DD:EE:FF", port: 9 });
-        agent.detachConnection();
-
-        expect(await wakeup).toBeNull();
-        expect(agent.isOnline()).toBe(false);
-    });
-
-});
diff --git a/tests/api-routes-v1.test.ts b/tests/api-routes-v1.test.ts
new file mode 100644
index 0000000..866f369
--- /dev/null
+++ b/tests/api-routes-v1.test.ts
@@ -0,0 +1,968 @@
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
+import { randomUUID } from "crypto";
+import { and, desc, eq } from "drizzle-orm";
+import { API } from "../server/lib/api";
+import { AuthHandler, AuthUtils, SessionHandler } from "../server/lib/api/utils/authHandler";
+import { AccountModel } from "../server/lib/api/versions/v1/routes/account/model";
+import { AccountPreferencesModel } from "../server/lib/api/versions/v1/routes/account/preferences/model";
+import { AuthModel } from "../server/lib/api/versions/v1/routes/auth/model";
+import { hashResetToken } from "../server/lib/api/versions/v1/routes/auth/reset-password";
+import { DB } from "../server/lib/db";
+import { AppConstants } from "../server/lib/utils/constants";
+import { makeAPIRequest } from "./helpers/api";
+import { type SeededSession, type SeededUser, seedSession, seedUser } from "./helpers/seed";
+
+let testUser: SeededUser;
+let testAdmin: SeededUser;
+
+beforeAll(async () => {
+	testUser = await seedUser("user", { username: "testuser" }, "UserP@ss1");
+	testAdmin = await seedUser("admin", { username: "testadmin" }, "AdminP@ss1");
+});
+
+describe("Global API routes", async () => {
+	test("GET /health returns API health payload", async () => {
+		const res = await API.getApp().request("/health");
+		expect(res.status).toBe(200);
+
+		const body = (await res.json()) as any;
+		expect(body.success).toBe(true);
+		expect(body.message).toBe(`${AppConstants.APP_NAME} API is running`);
+	});
+
+	test("GET / redirects to the latest docs while docs are enabled", async () => {
+		const res = await API.getApp().request("/");
+		expect(res.status).toBe(302);
+		expect(res.headers.get("location")).toBe("/docs/v1");
+	});
+
+	test("every operation tag is declared and every declared tag is used", async () => {
+		const res = await API.getApp().request("/docs/v1/openapi");
+		const spec = (await res.json()) as any;
+
+		const declared = new Set<string>(spec.tags.map((tag: any) => tag.name));
+		const used = new Set<string>();
+		for (const operations of Object.values<any>(spec.paths)) {
+			for (const operation of Object.values<any>(operations)) {
+				for (const tag of operation.tags ?? []) used.add(tag);
+			}
+		}
+
+		expect([...used].filter((tag) => !declared.has(tag))).toEqual([]);
+		expect([...declared].filter((tag) => !used.has(tag))).toEqual([]);
+	});
+});
+
+describe("Auth routes and access checks", async () => {
+	let session_token: string;
+
+	test("POST /v1/auth/login authenticates and creates session", async () => {
+		const data = await makeAPIRequest("/v1/auth/login", {
+			method: "POST",
+			body: { username: testUser.username, password: testUser.password },
+			expectedBodySchema: AuthModel.Login.Response,
+		});
+
+		expect(data.token.startsWith(`${AppConstants.APP_KEYS_PREFIX}_sess_`)).toBe(true);
+
+		session_token = data.token;
+
+		const session = await AuthHandler.getAuthContext(data.token);
+
+		expect(session).toBeDefined();
+		if (!session) return;
+
+		expect(session.user_id).toBe(testUser.id);
+		expect(session.user_role).toBe("user");
+		expect(session.type).toBe("session");
+		expect(session.expires_at).toBeGreaterThan(Date.now());
+
+		const tokenParts = AuthUtils.getTokenParts(data.token);
+		expect(tokenParts).toBeDefined();
+		if (!tokenParts) return;
+
+		expect(await AuthUtils.verifyHashedTokenBase(tokenParts.base, session.hashed_token)).toBe(true);
+		expect(tokenParts.prefix).toBe(`${AppConstants.APP_KEYS_PREFIX}_sess_`);
+		expect(tokenParts.id).toBe(session.id);
+	});
+
+	test("POST /v1/auth/login with invalid credentials fails", async () => {
+		await makeAPIRequest(
+			"/v1/auth/login",
+			{
+				method: "POST",
+				body: { username: testUser.username, password: "WrongPassword" },
+			},
+			401,
+		);
+	});
+
+	test("GET /v1/auth/session returns current session info", async () => {
+		const data = await makeAPIRequest("/v1/auth/session", {
+			authToken: session_token,
+			expectedBodySchema: AuthModel.Session.Response,
+		});
+
+		expect(data.user_id).toBe(testUser.id);
+		expect(data.user_role).toBe("user");
+	});
+
+	test("GET /v1/auth/session with invalid token fails", async () => {
+		await makeAPIRequest(
+			"/v1/auth/session",
+			{
+				authToken: "invalid_token",
+			},
+			401,
+		);
+	});
+
+	test("GET /v1/auth/session with invalid authorization header fails", async () => {
+		await makeAPIRequest(
+			"/v1/auth/session",
+			{
+				additionalOptions: {
+					headers: {
+						Authorization: "Token invalid",
+					},
+				},
+			},
+			401,
+		);
+	});
+
+	test("GET /v1/auth/session with empty bearer token fails", async () => {
+		await makeAPIRequest(
+			"/v1/auth/session",
+			{
+				additionalOptions: {
+					headers: {
+						Authorization: "Bearer ",
+					},
+				},
+			},
+			401,
+		);
+	});
+
+	test("POST /v1/auth/login rate limits repeated failures", async () => {
+		const rateLimitedUser = await seedUser("user", {}, "LimitP@ss1");
+
+		for (let attempt = 0; attempt < 5; attempt++) {
+			await makeAPIRequest(
+				"/v1/auth/login",
+				{
+					method: "POST",
+					body: {
+						username: rateLimitedUser.username,
+						password: "WrongPassword",
+					},
+				},
+				401,
+			);
+		}
+
+		await makeAPIRequest(
+			"/v1/auth/login",
+			{
+				method: "POST",
+				body: {
+					username: rateLimitedUser.username,
+					password: "WrongPassword",
+				},
+			},
+			429,
+		);
+	});
+
+	test("POST /v1/auth/login clears failed-attempt counter after successful login", async () => {
+		const resetUser = await seedUser("user", {}, "ResetLimitP@ss1");
+
+		for (let attempt = 0; attempt < 4; attempt++) {
+			await makeAPIRequest(
+				"/v1/auth/login",
+				{
+					method: "POST",
+					body: {
+						username: resetUser.username,
+						password: "WrongPassword",
+					},
+				},
+				401,
+			);
+		}
+
+		const login = await makeAPIRequest(
+			"/v1/auth/login",
+			{
+				method: "POST",
+				body: {
+					username: resetUser.username,
+					password: resetUser.password,
+				},
+				expectedBodySchema: AuthModel.Login.Response,
+			},
+			200,
+		);
+
+		expect(login.token.startsWith(`${AppConstants.APP_KEYS_PREFIX}_sess_`)).toBe(true);
+
+		for (let attempt = 0; attempt < 5; attempt++) {
+			await makeAPIRequest(
+				"/v1/auth/login",
+				{
+					method: "POST",
+					body: {
+						username: resetUser.username,
+						password: "WrongPassword",
+					},
+				},
+				401,
+			);
+		}
+
+		await makeAPIRequest(
+			"/v1/auth/login",
+			{
+				method: "POST",
+				body: {
+					username: resetUser.username,
+					password: "WrongPassword",
+				},
+			},
+			429,
+		);
+	});
+
+	test("GET /v1/admin/users as non-admin fails", async () => {
+		// with auth token
+		await makeAPIRequest(
+			"/v1/admin/users",
+			{
+				authToken: session_token,
+			},
+			403,
+		);
+
+		// without auth token
+		await makeAPIRequest("/v1/admin/users", {}, 401);
+	});
+
+	test("POST /v1/auth/logout invalidates session", async () => {
+		await makeAPIRequest("/v1/auth/logout", {
+			method: "POST",
+			authToken: session_token,
+		});
+
+		const session = await AuthHandler.getAuthContext(session_token);
+
+		expect(session).toBeNil();
+	});
+});
+
+describe("Auth reset-password routes", async () => {
+	let resetUser: SeededUser;
+	let resetSessionToken: string;
+
+	beforeAll(async () => {
+		resetUser = await seedUser("user");
+		resetSessionToken = await seedSession(resetUser.id).then((s) => s.token);
+	});
+
+	test("POST /v1/auth/reset-password/request returns success for existing and unknown emails", async () => {
+		await makeAPIRequest(
+			"/v1/auth/reset-password/request",
+			{
+				method: "POST",
+				body: { email: resetUser.email },
+			},
+			200,
+		);
+
+		await makeAPIRequest(
+			"/v1/auth/reset-password/request",
+			{
+				method: "POST",
+				body: { email: `nope-${randomUUID()}@example.com` },
+			},
+			200,
+		);
+	});
+
+	test("POST /v1/auth/reset-password/request denies authenticated users", async () => {
+		await makeAPIRequest(
+			"/v1/auth/reset-password/request",
+			{
+				method: "POST",
+				authToken: resetSessionToken,
+				body: { email: resetUser.email },
+			},
+			401,
+		);
+	});
+
+	test("POST /v1/auth/reset-password with invalid token fails", async () => {
+		await makeAPIRequest(
+			"/v1/auth/reset-password",
+			{
+				method: "POST",
+				body: {
+					reset_token: "invalid-token",
+					new_password: "ResetP@ssw0rd1",
+				},
+			},
+			400,
+		);
+	});
+
+	test("POST /v1/auth/reset-password updates credentials for a valid reset token", async () => {
+		const validResetToken = `reset_${randomUUID().replace(/-/g, "")}`;
+		const nextPassword = "ResetP@ssw0rd1";
+		const wrongLoginIP = `203.0.113.${Math.floor(Math.random() * 200) + 1}`;
+		const correctLoginIP = `203.0.114.${Math.floor(Math.random() * 200) + 1}`;
+
+		await DB.instance()
+			.insert(DB.Tables.passwordResets)
+			.values({
+				token: hashResetToken(validResetToken),
+				user_id: resetUser.id,
+				expires_at: Date.now() + 10 * 60 * 1000,
+			})
+			.run();
+
+		await makeAPIRequest(
+			"/v1/auth/reset-password",
+			{
+				method: "POST",
+				body: {
+					reset_token: validResetToken,
+					new_password: nextPassword,
+				},
+			},
+			200,
+		);
+
+		await makeAPIRequest(
+			"/v1/auth/session",
+			{
+				authToken: resetSessionToken,
+			},
+			401,
+		);
+
+		await makeAPIRequest(
+			"/v1/auth/login",
+			{
+				method: "POST",
+				body: {
+					username: resetUser.username,
+					password: resetUser.password,
+				},
+				additionalOptions: {
+					headers: {
+						"x-forwarded-for": wrongLoginIP,
+					},
+				},
+			},
+			401,
+		);
+
+		const login = await makeAPIRequest(
+			"/v1/auth/login",
+			{
+				method: "POST",
+				body: {
+					username: resetUser.username,
+					password: nextPassword,
+				},
+				additionalOptions: {
+					headers: {
+						"x-forwarded-for": correctLoginIP,
+					},
+				},
+				expectedBodySchema: AuthModel.Login.Response,
+			},
+			200,
+		);
+
+		expect(login.token.startsWith(`${AppConstants.APP_KEYS_PREFIX}_sess_`)).toBe(true);
+		resetUser.password = nextPassword;
+	});
+});
+
+describe("Account routes", async () => {
+	let session_token: string;
+
+	beforeAll(async () => {
+		session_token = await seedSession(testUser.id).then((s) => s.token);
+	});
+
+	test("GET /v1/account returns current user", async () => {
+		const data = await makeAPIRequest("/v1/account", {
+			authToken: session_token,
+			expectedBodySchema: AccountModel.GetInfo.Response,
+		});
+
+		expect(data.id).toBe(testUser.id);
+		expect(data.username).toBe(testUser.username);
+		expect(data.display_name).toBe(testUser.display_name);
+		expect(data.email).toBe(testUser.email);
+		expect(data.role).toBe("user");
+	});
+
+	test("PUT /v1/account updates profile fields", async () => {
+		const newUserData = {
+			display_name: "Updated Name",
+			username: "updatedusername",
+			email: "updated@example.com",
+			current_password: testUser.password,
+		};
+
+		await makeAPIRequest("/v1/account", {
+			method: "PUT",
+			authToken: session_token,
+			body: newUserData,
+		});
+
+		testUser.display_name = newUserData.display_name;
+		testUser.username = newUserData.username;
+		testUser.email = newUserData.email;
+
+		const dbresult = DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.id, testUser.id))
+			.get();
+
+		expect(dbresult?.display_name).toBe(newUserData.display_name);
+		expect(dbresult?.username).toBe(newUserData.username);
+		expect(dbresult?.email).toBe(newUserData.email);
+	});
+
+	test("PUT /v1/account try updating role fails", async () => {
+		await makeAPIRequest(
+			"/v1/account",
+			{
+				method: "PUT",
+				authToken: session_token,
+				body: { role: "admin" },
+			},
+			400,
+		);
+
+		const dbresult = DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.id, testUser.id))
+			.get();
+		expect(dbresult?.role).toBe("user");
+	});
+
+	test("PUT /v1/account/password rotates credentials and invalidates old sessions", async () => {
+		const oldPassword = testUser.password;
+		const newPassword = "NewP@ssw0rd1";
+
+		await makeAPIRequest("/v1/account/password", {
+			method: "PUT",
+			authToken: session_token,
+			body: {
+				current_password: oldPassword,
+				new_password: newPassword,
+			},
+		});
+
+		testUser.password = newPassword;
+
+		// Old session should be invalidated
+		await makeAPIRequest(
+			"/v1/account",
+			{
+				authToken: session_token,
+			},
+			401,
+		);
+
+		// Login with old password should fail
+		await makeAPIRequest(
+			"/v1/auth/login",
+			{
+				method: "POST",
+				body: { username: testUser.username, password: oldPassword },
+			},
+			401,
+		);
+
+		// Login with new password should succeed
+		const data = await makeAPIRequest("/v1/auth/login", {
+			method: "POST",
+			body: { username: testUser.username, password: newPassword },
+			expectedBodySchema: AuthModel.Login.Response,
+		});
+
+		expect(data.token.startsWith(`${AppConstants.APP_KEYS_PREFIX}_sess_`)).toBe(true);
+
+		session_token = data.token;
+	});
+
+	test("DELETE /v1/account fails because of existing data", async () => {
+		// some data is created here to prevent deletion
+		// await makeAPIRequest(
+		// 	"/v1/account",
+		// 	{
+		// 		method: "DELETE",
+		// 		authToken: session_token,
+		// 	},
+		// 	400,
+		// );
+	});
+
+	test("DELETE /v1/account removes user data", async () => {
+		await makeAPIRequest("/v1/account", {
+			method: "DELETE",
+			authToken: session_token,
+		});
+
+		const dbresult = DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.id, testUser.id))
+			.get();
+		expect(dbresult).toBeUndefined();
+
+		// recreate test user for further tests
+		testUser = await seedUser("user", { username: "testuser" }, "UserP@ss1");
+	});
+});
+
+describe("Account API key routes", async () => {
+	let apiUser: SeededUser;
+	let apiUserSessionToken: string;
+	let createdApiKeyID: string;
+
+	beforeAll(async () => {
+		apiUser = await seedUser("user");
+		apiUserSessionToken = await seedSession(apiUser.id).then((s) => s.token);
+	});
+
+	test("GET /account/apikeys starts empty", async () => {
+		const list = await makeAPIRequest(
+			"/v1/account/apikeys",
+			{
+				authToken: apiUserSessionToken,
+			},
+			200,
+		);
+
+		expect(list).toEqual([]);
+	});
+
+	test("POST /account/apikeys creates an API key", async () => {
+		const created = await makeAPIRequest(
+			"/v1/account/apikeys",
+			{
+				method: "POST",
+				authToken: apiUserSessionToken,
+				body: {
+					description: "CI key",
+					expires_at: "30d",
+				},
+			},
+			200,
+		);
+
+		expect(created.id).toBeString();
+		expect(created.token).toBeString();
+
+		createdApiKeyID = created.id;
+	});
+
+	test("GET /account/apikeys/:apiKeyID returns key details", async () => {
+		const key = await makeAPIRequest(
+			`/v1/account/apikeys/${createdApiKeyID}`,
+			{
+				authToken: apiUserSessionToken,
+			},
+			200,
+		);
+
+		expect(key.id).toBe(createdApiKeyID);
+		expect(key.description).toBe("CI key");
+	});
+
+	test("DELETE /account/apikeys/:apiKeyID removes key", async () => {
+		await makeAPIRequest(
+			`/v1/account/apikeys/${createdApiKeyID}`,
+			{
+				method: "DELETE",
+				authToken: apiUserSessionToken,
+			},
+			200,
+		);
+
+		await makeAPIRequest(
+			`/v1/account/apikeys/${createdApiKeyID}`,
+			{
+				authToken: apiUserSessionToken,
+			},
+			404,
+		);
+	});
+});
+
+describe("Account Preferences Routes", async () => {
+	let preferencesTestUser: SeededUser;
+	let session_token: string;
+
+	beforeAll(async () => {
+		preferencesTestUser = await seedUser("user", { username: "preferencesuser" }, "PrefsP@ss1");
+		session_token = await seedSession(preferencesTestUser.id).then((s) => s.token);
+	});
+
+	afterAll(async () => {
+		SessionHandler.inValidateAllSessionsForUser(preferencesTestUser.id);
+
+		DB.instance()
+			.delete(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, preferencesTestUser.id))
+			.run();
+
+		DB.instance().delete(DB.Tables.users).where(eq(DB.Tables.users.id, preferencesTestUser.id)).run();
+	});
+
+	test("GET /v1/account/preferences/onboarding returns empty defaults when nothing is saved yet", async () => {
+		const data = await makeAPIRequest("/v1/account/preferences/onboarding", {
+			authToken: session_token,
+			expectedBodySchema: AccountPreferencesModel.Onboarding.Response,
+		});
+
+		expect(data.completed).toEqual(false);
+
+		// No row should exist yet - this is a computed default, not a persisted one.
+		const dbresult = DB.instance()
+			.select()
+			.from(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, preferencesTestUser.id))
+			.all();
+		expect(dbresult.length).toBe(0);
+	});
+
+	test("GET /v1/account/preferences/onboarding without auth fails", async () => {
+		await makeAPIRequest("/v1/account/preferences/onboarding", {}, 401);
+	});
+
+	test("PUT /v1/account/preferences/onboarding saves onboarding state", async () => {
+		await makeAPIRequest("/v1/account/preferences/onboarding", {
+			method: "PUT",
+			authToken: session_token,
+			body: {
+				completed: true,
+			},
+		});
+
+		const data = await makeAPIRequest("/v1/account/preferences/onboarding", {
+			authToken: session_token,
+			expectedBodySchema: AccountPreferencesModel.Onboarding.Response,
+		});
+
+		expect(data.completed).toEqual(true);
+
+		const dbresult = DB.instance()
+			.select()
+			.from(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, preferencesTestUser.id))
+			.all();
+		expect(dbresult.length).toBe(1);
+		expect(dbresult[0]?.key).toBe("onboarding");
+	});
+
+	test("PUT /v1/account/preferences/onboarding overwrites the previous state", async () => {
+		await makeAPIRequest("/v1/account/preferences/onboarding", {
+			method: "PUT",
+			authToken: session_token,
+			body: {
+				completed: false,
+			},
+		});
+		const data = await makeAPIRequest("/v1/account/preferences/onboarding", {
+			authToken: session_token,
+			expectedBodySchema: AccountPreferencesModel.Onboarding.Response,
+		});
+
+		// Replace semantics, not merge: the earlier "addresses" rule is gone.
+		expect(data.completed).toEqual(false);
+
+		const dbresult = DB.instance()
+			.select()
+			.from(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, preferencesTestUser.id))
+			.all();
+		expect(dbresult.length).toBe(1);
+	});
+
+	test("PUT /v1/account/preferences/onboarding concurrently still results in exactly one stored row", async () => {
+		await Promise.all([
+			makeAPIRequest("/v1/account/preferences/onboarding", {
+				method: "PUT",
+				authToken: session_token,
+				body: { completed: true },
+			}),
+			makeAPIRequest("/v1/account/preferences/onboarding", {
+				method: "PUT",
+				authToken: session_token,
+				body: { completed: false },
+			}),
+		]);
+
+		const dbresult = DB.instance()
+			.select()
+			.from(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, preferencesTestUser.id))
+			.all();
+		expect(dbresult.length).toBe(1);
+	});
+
+	test("PUT /v1/account/preferences/onboarding with invalid decision fails", async () => {
+		await makeAPIRequest(
+			"/v1/account/preferences/onboarding",
+			{
+				method: "PUT",
+				authToken: session_token,
+				body: {
+					completed: "not-a-boolean",
+				},
+			},
+			400,
+		);
+	});
+
+	test("PUT /v1/account/preferences/onboarding without auth fails", async () => {
+		await makeAPIRequest(
+			"/v1/account/preferences/onboarding",
+			{
+				method: "PUT",
+				body: { completed: true },
+			},
+			401,
+		);
+	});
+
+	test("Preferences are isolated per user", async () => {
+		const otherUser = await seedUser("user", { username: "preferencesotheruser" }, "OtherP@ss1");
+		const otherSession = await seedSession(otherUser.id).then((s) => s.token);
+
+		const data = await makeAPIRequest("/v1/account/preferences/onboarding", {
+			authToken: otherSession,
+			expectedBodySchema: AccountPreferencesModel.Onboarding.Response,
+		});
+
+		// Should NOT see preferencesTestUser's saved rules.
+		expect(data.completed).toEqual(false);
+
+		SessionHandler.inValidateAllSessionsForUser(otherUser.id);
+		DB.instance().delete(DB.Tables.users).where(eq(DB.Tables.users.id, otherUser.id)).run();
+	});
+
+	test("DELETE /v1/account also removes stored preferences", async () => {
+		const deletableUser = await seedUser(
+			"user",
+			{ username: "preferencesdeletableuser" },
+			"DeleteP@ss1",
+		);
+		const deletableSession = await seedSession(deletableUser.id).then((s) => s.token);
+
+		await makeAPIRequest("/v1/account/preferences/onboarding", {
+			method: "PUT",
+			authToken: deletableSession,
+			body: { completed: true },
+		});
+
+		const beforeDelete = DB.instance()
+			.select()
+			.from(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, deletableUser.id))
+			.all();
+		expect(beforeDelete.length).toBe(1);
+
+		await makeAPIRequest("/v1/account", {
+			method: "DELETE",
+			authToken: deletableSession,
+		});
+
+		const afterDelete = DB.instance()
+			.select()
+			.from(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, deletableUser.id))
+			.all();
+		expect(afterDelete.length).toBe(0);
+	});
+
+	test("GET /v1/account/preferences/onboarding defaults to completed=false with no stored row", async () => {
+		const onboardingUser = await seedUser("user", { username: "onboardinguser" }, "OnboardingP@ss1");
+		const onboardingSession = await seedSession(onboardingUser.id).then((s) => s.token);
+
+		const data = await makeAPIRequest("/v1/account/preferences/onboarding", {
+			authToken: onboardingSession,
+			expectedBodySchema: AccountPreferencesModel.Onboarding.Response,
+		});
+
+		expect(data.completed).toBe(false);
+
+		// Default is computed, not persisted.
+		const dbresult = DB.instance()
+			.select()
+			.from(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, onboardingUser.id))
+			.all();
+		expect(dbresult.length).toBe(0);
+
+		SessionHandler.inValidateAllSessionsForUser(onboardingUser.id);
+		DB.instance().delete(DB.Tables.users).where(eq(DB.Tables.users.id, onboardingUser.id)).run();
+	});
+
+	test("PUT /v1/account/preferences/onboarding persists completed=true and reads it back", async () => {
+		await makeAPIRequest("/v1/account/preferences/onboarding", {
+			method: "PUT",
+			authToken: session_token,
+			body: { completed: true },
+		});
+
+		const data = await makeAPIRequest("/v1/account/preferences/onboarding", {
+			authToken: session_token,
+			expectedBodySchema: AccountPreferencesModel.Onboarding.Response,
+		});
+
+		expect(data.completed).toBe(true);
+
+		const dbresult = DB.instance()
+			.select()
+			.from(DB.Tables.userPreferences)
+			.where(
+				and(
+					eq(DB.Tables.userPreferences.user_id, preferencesTestUser.id),
+					eq(DB.Tables.userPreferences.key, "onboarding"),
+				),
+			)
+			.all();
+		expect(dbresult.length).toBe(1);
+	});
+
+	test("GET /v1/account/preferences/onboarding without auth fails", async () => {
+		await makeAPIRequest("/v1/account/preferences/onboarding", {}, 401);
+	});
+
+	test("GET /v1/account/preferences returns every preference with defaults when nothing is saved yet", async () => {
+		const allPrefsUser = await seedUser("user", { username: "allprefsdefaultuser" }, "AllP@ss1");
+		const allPrefsSession = await seedSession(allPrefsUser.id).then((s) => s.token);
+
+		const data = await makeAPIRequest("/v1/account/preferences", {
+			authToken: allPrefsSession,
+			expectedBodySchema: AccountPreferencesModel.GetAll.Response,
+		});
+
+		expect(Object.keys(data).sort()).toEqual(
+			Object.keys(AccountPreferencesModel.GetAll.Response.shape).sort(),
+		);
+		expect(data).toMatchObject({
+			onboarding: { completed: false },
+		});
+
+		// Defaults are computed, not persisted.
+		const dbresult = DB.instance()
+			.select()
+			.from(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, allPrefsUser.id))
+			.all();
+		expect(dbresult.length).toBe(0);
+
+		SessionHandler.inValidateAllSessionsForUser(allPrefsUser.id);
+		DB.instance().delete(DB.Tables.users).where(eq(DB.Tables.users.id, allPrefsUser.id)).run();
+	});
+
+	test("GET /v1/account/preferences returns saved values matching the per-preference routes", async () => {
+		const allPrefsUser = await seedUser("user", { username: "allprefssaveduser" }, "AllP@ss1");
+		const allPrefsSession = await seedSession(allPrefsUser.id).then((s) => s.token);
+
+		await makeAPIRequest("/v1/account/preferences/onboarding", {
+			method: "PUT",
+			authToken: allPrefsSession,
+			body: { completed: false },
+		});
+
+		const data = await makeAPIRequest("/v1/account/preferences", {
+			authToken: allPrefsSession,
+			expectedBodySchema: AccountPreferencesModel.GetAll.Response,
+		});
+
+		expect(data["onboarding"].completed).toBe(false);
+
+		for (const key of Object.keys(data)) {
+			const single = await makeAPIRequest<unknown>(`/v1/account/preferences/${key}`, {
+				authToken: allPrefsSession,
+			});
+			expect(single).toEqual(data[key as keyof typeof data]);
+		}
+
+		SessionHandler.inValidateAllSessionsForUser(allPrefsUser.id);
+		DB.instance()
+			.delete(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, allPrefsUser.id))
+			.run();
+		DB.instance().delete(DB.Tables.users).where(eq(DB.Tables.users.id, allPrefsUser.id)).run();
+	});
+
+	test("GET /v1/account/preferences ignores stored keys that are no longer known preferences", async () => {
+		const allPrefsUser = await seedUser("user", { username: "allprefslegacyuser" }, "AllP@ss1");
+		const allPrefsSession = await seedSession(allPrefsUser.id).then((s) => s.token);
+
+		DB.instance()
+			.insert(DB.Tables.userPreferences)
+			.values({
+				user_id: allPrefsUser.id,
+				key: "legacy-preference",
+				data: { some: "value" },
+			})
+			.run();
+
+		// No expectedBodySchema: parsing would strip unknown keys and hide a leak.
+		const data = await makeAPIRequest<Record<string, unknown>>("/v1/account/preferences", {
+			authToken: allPrefsSession,
+		});
+
+		expect(Object.keys(data)).not.toContain("legacy-preference");
+		expect(Object.keys(data).sort()).toEqual(
+			Object.keys(AccountPreferencesModel.GetAll.Response.shape).sort(),
+		);
+
+		SessionHandler.inValidateAllSessionsForUser(allPrefsUser.id);
+		DB.instance()
+			.delete(DB.Tables.userPreferences)
+			.where(eq(DB.Tables.userPreferences.user_id, allPrefsUser.id))
+			.run();
+		DB.instance().delete(DB.Tables.users).where(eq(DB.Tables.users.id, allPrefsUser.id)).run();
+	});
+
+	test("GET /v1/account/preferences without auth fails", async () => {
+		await makeAPIRequest("/v1/account/preferences", {}, 401);
+	});
+});
+
+describe("Docs Routes", async () => {
+	test("GET /docs/v1/openapi returns API docs if enabled", async () => {
+		await makeAPIRequest("/docs/v1/openapi", {}, 200);
+	});
+
+	test("GET /docs/v1 returns API docs UI if enabled", async () => {
+		await makeAPIRequest("/docs/v1", {}, 200);
+	});
+
+	test("GET /docs/v1/openapi returns 404 if disabled", async () => {
+		await API.stop();
+		await API.init([], true);
+
+		await makeAPIRequest("/docs/v1/openapi", {}, 404);
+	});
+
+	test("GET /docs/v1 returns 404 if disabled", async () => {
+		await makeAPIRequest("/docs/v1", {}, 404);
+	});
+});
diff --git a/tests/email.test.ts b/tests/email.test.ts
new file mode 100644
index 0000000..8bc2dd3
--- /dev/null
+++ b/tests/email.test.ts
@@ -0,0 +1,286 @@
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
+import { randomUUID } from "crypto";
+import { eq } from "drizzle-orm";
+import { type CapturedEmail, EmailService } from "../server/lib/api/utils/email";
+import { hashResetToken } from "../server/lib/api/versions/v1/routes/auth/reset-password";
+import { DB } from "../server/lib/db";
+import { AppConstants } from "../server/lib/utils/constants";
+import { makeAPIRequest } from "./helpers/api";
+import { createMemoryTransport } from "./helpers/memory-transport";
+import type { SeededSession, SeededUser } from "./helpers/seed";
+import { seedSession, seedUser } from "./helpers/seed";
+
+/** Emails captured by the in-memory transport, isolated to this file. */
+const capturedEmails: CapturedEmail[] = [];
+
+describe("EmailService", () => {
+	beforeAll(() => {
+		// Inject the memory transport so we can assert on sent emails
+		EmailService.init(createMemoryTransport(capturedEmails));
+	});
+
+	afterAll(() => {
+		// Restore to unconfigured so other test files are unaffected
+		EmailService.reset();
+	});
+
+	test("isEnabled() returns true when memory transport is injected", () => {
+		expect(EmailService.isEnabled()).toBe(true);
+	});
+
+	test("starts with no captured emails", () => {
+		expect(capturedEmails).toHaveLength(0);
+	});
+});
+
+describe("Password reset email integration", () => {
+	let resetUser: SeededUser;
+	let resetSession: SeededSession;
+
+	beforeAll(async () => {
+		// Ensure the memory transport is active for this describe block too.
+		// Re-init is idempotent as long as we pass the same output array.
+		EmailService.init(createMemoryTransport(capturedEmails));
+
+		resetUser = await seedUser("user");
+		resetSession = await seedSession(resetUser.id);
+		capturedEmails.length = 0;
+	});
+
+	afterAll(() => {
+		EmailService.reset();
+	});
+
+	test("POST /auth/reset-password/request sends email for existing user", async () => {
+		await makeAPIRequest(
+			"/v1/auth/reset-password/request",
+			{
+				method: "POST",
+				body: { email: resetUser.email },
+			},
+			200,
+		);
+
+		expect(capturedEmails).toHaveLength(1);
+		expect(capturedEmails[0]!.to).toBe(resetUser.email);
+		expect(capturedEmails[0]!.subject).toBe(`${AppConstants.APP_NAME} — Password Reset Request`);
+	});
+
+	test("Email contains a valid reset link with token", async () => {
+		// Use a fresh user to avoid rate-limiting from the previous test
+		const freshUser = await seedUser("user");
+		capturedEmails.length = 0;
+
+		await makeAPIRequest(
+			"/v1/auth/reset-password/request",
+			{
+				method: "POST",
+				body: { email: freshUser.email },
+			},
+			200,
+		);
+
+		expect(capturedEmails).toHaveLength(1);
+
+		const html = capturedEmails[0]!.html;
+		// Extract the reset URL from the HTML
+		const urlMatch = html.match(/href="([^"]*reset-password\?token=[^"]+)"/);
+		expect(urlMatch).not.toBeNull();
+
+		const resetUrl = urlMatch![1]!;
+		const urlObj = new URL(resetUrl);
+		const token = urlObj.searchParams.get("token");
+		expect(token).not.toBeNull();
+		expect(token!.length).toBeGreaterThan(0);
+
+		// Verify the token is stored in DB (HMAC'd)
+		const hashed = hashResetToken(token!);
+		const dbToken = DB.instance()
+			.select()
+			.from(DB.Tables.passwordResets)
+			.where(eq(DB.Tables.passwordResets.token, hashed))
+			.get();
+		expect(dbToken).not.toBeNull();
+	});
+
+	test("POST /auth/reset-password/request does NOT send email for unknown user", async () => {
+		capturedEmails.length = 0;
+
+		await makeAPIRequest(
+			"/v1/auth/reset-password/request",
+			{
+				method: "POST",
+				body: { email: `nope-${randomUUID()}@example.com` },
+			},
+			200,
+		);
+
+		expect(capturedEmails).toHaveLength(0);
+	});
+
+	test("Rate limit prevents duplicate emails within the window", async () => {
+		const rateLimitUser = await seedUser("user");
+		capturedEmails.length = 0;
+
+		// First request — should send email
+		await makeAPIRequest(
+			"/v1/auth/reset-password/request",
+			{
+				method: "POST",
+				body: { email: rateLimitUser.email },
+			},
+			200,
+		);
+
+		expect(capturedEmails).toHaveLength(1);
+
+		// Second request for same email — rate limited, no email
+		await makeAPIRequest(
+			"/v1/auth/reset-password/request",
+			{
+				method: "POST",
+				body: { email: rateLimitUser.email },
+			},
+			200,
+		);
+
+		expect(capturedEmails).toHaveLength(1);
+	});
+
+	test("Authenticated users cannot request reset and no email is sent", async () => {
+		capturedEmails.length = 0;
+
+		await makeAPIRequest(
+			"/v1/auth/reset-password/request",
+			{
+				method: "POST",
+				authToken: resetSession.token,
+				body: { email: resetUser.email },
+			},
+			401,
+		);
+
+		expect(capturedEmails).toHaveLength(0);
+	});
+
+	test("Full reset flow: request → extract token from email → consume token → password changed", async () => {
+		const flowUser = await seedUser("user");
+		capturedEmails.length = 0;
+
+		const newPassword = "N3wP@ssw0rd!";
+
+		// 1. Request reset
+		await makeAPIRequest(
+			"/v1/auth/reset-password/request",
+			{
+				method: "POST",
+				body: { email: flowUser.email },
+			},
+			200,
+		);
+
+		// 2. Extract token from captured email
+		expect(capturedEmails).toHaveLength(1);
+		const urlMatch = capturedEmails[0]!.html.match(/href="([^"]*reset-password\?token=[^"]+)"/);
+		expect(urlMatch).not.toBeNull();
+		const token = new URL(urlMatch![1]!).searchParams.get("token")!;
+
+		// 3. Create a session before consuming the token — it should be invalidated
+		const oldSession = await seedSession(flowUser.id);
+
+		// 4. Consume the token (this invalidates all sessions for the user)
+		await makeAPIRequest(
+			"/v1/auth/reset-password",
+			{
+				method: "POST",
+				body: {
+					reset_token: token,
+					new_password: newPassword,
+				},
+			},
+			200,
+		);
+
+		// 5. Verify old session is invalidated
+		await makeAPIRequest("/v1/auth/session", { authToken: oldSession.token }, 401);
+
+		// 6. Verify new password works
+		const login = await makeAPIRequest(
+			"/v1/auth/login",
+			{
+				method: "POST",
+				body: {
+					username: flowUser.username,
+					password: newPassword,
+				},
+			},
+			200,
+		);
+
+		expect(login.token).toStartWith(`${AppConstants.APP_KEYS_PREFIX}_sess_`);
+	});
+
+	test("Expired reset token is rejected", async () => {
+		const expiredUser = await seedUser("user");
+		capturedEmails.length = 0;
+
+		const expiredToken = `expired_${randomUUID().replace(/-/g, "")}`;
+		await DB.instance()
+			.insert(DB.Tables.passwordResets)
+			.values({
+				token: hashResetToken(expiredToken),
+				user_id: expiredUser.id,
+				expires_at: Date.now() - 1000, // 1 second in the past
+			})
+			.run();
+
+		await makeAPIRequest(
+			"/v1/auth/reset-password",
+			{
+				method: "POST",
+				body: {
+					reset_token: expiredToken,
+					new_password: "N3wP@ssw0rd!",
+				},
+			},
+			400,
+		);
+	});
+
+	test("Consuming a reset token deletes all tokens for that user", async () => {
+		const multiTokenUser = await seedUser("user");
+		capturedEmails.length = 0;
+
+		const token1 = `multi_${randomUUID().replace(/-/g, "")}`;
+		const token2 = `multi_${randomUUID().replace(/-/g, "")}`;
+
+		await DB.instance()
+			.insert(DB.Tables.passwordResets)
+			.values([
+				{ token: hashResetToken(token1), user_id: multiTokenUser.id, expires_at: Date.now() + 600_000 },
+				{ token: hashResetToken(token2), user_id: multiTokenUser.id, expires_at: Date.now() + 600_000 },
+			])
+			.run();
+
+		// Consume token1
+		await makeAPIRequest(
+			"/v1/auth/reset-password",
+			{
+				method: "POST",
+				body: {
+					reset_token: token1,
+					new_password: "An0therP@ss!",
+				},
+			},
+			200,
+		);
+
+		// Both tokens should be gone
+		const remaining = DB.instance()
+			.select()
+			.from(DB.Tables.passwordResets)
+			.where(eq(DB.Tables.passwordResets.user_id, multiTokenUser.id))
+			.all();
+		expect(remaining).toHaveLength(0);
+	});
+});
diff --git a/tests/encoding.test.ts b/tests/encoding.test.ts
deleted file mode 100644
index 04e1df2..0000000
--- a/tests/encoding.test.ts
+++ /dev/null
@@ -1,45 +0,0 @@
-import { describe, test, expect } from "bun:test";
-import { AgentCommand, AgentResponse } from "@/server/agent-control-service/commands/message";
-
-describe('message_encoding', () => {
-
-    test('command encoding', () => {
-        
-        const command = new AgentCommand("WAKEUP", 123, {
-            macAddress: "00:11:22:33:44:55",
-            port: 8080,
-        });
-
-        const encoded = command.encode();
-        const decoded = AgentCommand.fromDecoded(encoded);
-        expect(decoded).not.toBeNull();
-
-        if (!decoded) return;
-        expect(decoded.cmd).toBe("WAKEUP");
-        expect(decoded.id).toBe(123);
-        expect(decoded.payload).toEqual({
-            macAddress: "00:11:22:33:44:55",
-            port: 8080,
-        });
-    });
-
-    test('response_encoding', () => {
-        
-        const response = new AgentResponse("WAKEUP", 123, {
-            status: "success",
-            message: "Agent woken up successfully",
-        });
-
-        const encoded = response.encode();
-        const decoded = AgentCommand.fromDecoded(encoded);
-        expect(decoded).not.toBeNull();
-        if (!decoded) return;
-        expect(decoded.cmd).toBe("WAKEUP");
-        expect(decoded.id).toBe(123);
-        expect(decoded.payload).toEqual({
-            status: "success",
-            message: "Agent woken up successfully",
-        });
-    });
-
-});
diff --git a/tests/helpers/api.ts b/tests/helpers/api.ts
new file mode 100644
index 0000000..d9b7978
--- /dev/null
+++ b/tests/helpers/api.ts
@@ -0,0 +1,87 @@
+import { expect } from "bun:test";
+import { ZodType, z } from "zod";
+import { API } from "../../server/lib/api";
+import { Logger } from "../../server/lib/utils/logger";
+
+type HeadersInit = RequestInit["headers"];
+
+export async function makeAPIRequest<ReturnBody = any>(
+	path: string,
+	opts: {
+		method?: "GET" | "POST" | "PUT" | "DELETE";
+		authToken?: string;
+		body?: Record<string, any>;
+		expectedBodySchema?: ZodType<ReturnBody>;
+		additionalOptions?: RequestInit;
+	} = {},
+	expectedCode?: number,
+) {
+	const baseHeaders: HeadersInit = {
+		...(opts.body ? { "Content-Type": "application/json" } : {}),
+		...(opts.authToken ? { Authorization: `Bearer ${opts.authToken}` } : {}),
+	};
+
+	if (opts.additionalOptions?.headers) {
+		const extraHeaders = opts.additionalOptions.headers as HeadersInit;
+		if (extraHeaders instanceof Headers) {
+			extraHeaders.forEach((value, key) => {
+				(baseHeaders as Record<string, string>)[key] = value;
+			});
+		} else {
+			Object.assign(baseHeaders as Record<string, string>, extraHeaders as Record<string, string>);
+		}
+	}
+
+	const resolvedBody =
+		opts.additionalOptions?.body ?? (opts.body ? JSON.stringify(opts.body) : undefined);
+
+	const options: RequestInit = {
+		method: opts.method ?? opts.additionalOptions?.method ?? "GET",
+		...opts.additionalOptions,
+		headers: baseHeaders,
+		body: resolvedBody,
+	};
+
+	const res = await API.getApp().request(path, options);
+
+	if (!expectedCode) {
+		const successStatusCodes = [200, 201, 202, 204];
+
+		if (!successStatusCodes.includes(res.status)) {
+			const errorText = await res.text();
+			Logger.error(`Expected status 2xx but got ${res.status}. Response body: ${errorText}`);
+		}
+
+		expect(res.status).toBeOneOf(successStatusCodes);
+	} else {
+		if (res.status !== expectedCode) {
+			const errorText = await res.text();
+			Logger.error(
+				`Expected status ${expectedCode} but got ${res.status}. Response body: ${errorText}`,
+			);
+		}
+
+		expect(res.status).toBe(expectedCode);
+	}
+
+	const contentType = res.headers.get("content-type") || "";
+	const resBody = contentType.includes("application/json") ? ((await res.json()) as any) : null;
+
+	if (opts.expectedBodySchema && resBody) {
+		const parseResult = opts.expectedBodySchema.safeParse(resBody.data || {});
+		if (parseResult.success) {
+			expect(parseResult.success).toBe(true);
+			return parseResult.data;
+		} else {
+			Logger.error("Response body did not match expected schema:", parseResult.error.message);
+			//@ts-ignore
+			expect(parseResult.success).toBe(true);
+		}
+	}
+
+	if (resBody && typeof resBody === "object" && "data" in resBody) {
+		return (resBody as any).data as ReturnBody;
+	}
+
+	return null as any as ReturnBody;
+}
diff --git a/tests/helpers/fake-agent.ts b/tests/helpers/fake-agent.ts
new file mode 100644
index 0000000..876922d
--- /dev/null
+++ b/tests/helpers/fake-agent.ts
@@ -0,0 +1,112 @@
+import { randomUUID } from "node:crypto";
+import { AgentGatewayRunner } from "../../server/lib/agents/gateway";
+import { makeAPIRequest } from "./api";
+
+type Frame = {
+	t: string;
+	id?: number;
+	cmd?: string;
+	p?: Record<string, unknown>;
+	ok?: boolean;
+	err?: string;
+};
+type Handler = (cmd: string, payload: Record<string, any>) => unknown | Promise<unknown>;
+
+/**
+ * An agent driven through the real gateway hooks (upgrade → open → message → close), without a
+ * network. `handler` answers the server's requests; throwing makes the agent answer `ok: false`.
+ */
+export class FakeAgent {
+	readonly id = randomUUID();
+	readonly context: Record<string, unknown> = {};
+	readonly requests: Frame[] = [];
+	closed: { code?: number; reason?: string } | null = null;
+
+	private readonly hooks = AgentGatewayRunner.hooks();
+
+	constructor(private handler: Handler = () => ({})) {}
+
+	/** Enrolls with a fresh enrollment token of `agentID` and returns the agent credential. */
+	static async enroll(agentID: number, ownerToken: string) {
+		const enrollment = await makeAPIRequest<{ token: string }>(`/v1/agents/${agentID}/enrollments`, {
+			method: "POST",
+			authToken: ownerToken,
+		});
+		const secret = randomUUID().replaceAll("-", "") + randomUUID().replaceAll("-", "");
+		const enrolled = await makeAPIRequest<{ token_id: string }>("/v1/agents/enroll", {
+			method: "POST",
+			body: { enrollment_token: enrollment.token, secret },
+		});
+		return `netignite_agent_${enrolled.token_id}:${secret}`;
+	}
+
+	/** Runs the upgrade hook; returns the rejection Response, or null if the upgrade was accepted. */
+	async upgrade(credential: string | null) {
+		const headers = new Headers(credential ? { Authorization: `Bearer ${credential}` } : {});
+		const result = await this.hooks.upgrade!({
+			url: "http://localhost/ws/agent",
+			headers,
+			context: this.context,
+		} as any);
+		return result instanceof Response ? result : null;
+	}
+
+	async connect(credential: string, hello: Record<string, unknown> | null = {}) {
+		const rejected = await this.upgrade(credential);
+		if (rejected) throw new Error(`Upgrade rejected with ${rejected.status}`);
+
+		await this.hooks.open!(this as any);
+		if (hello) {
+			await this.event("HELLO", {
+				protocol: 2,
+				kind: "esp32",
+				version: "2.0.0-test",
+				capabilities: ["wake", "status.link_local", "status.ip", "status.host", "status.tcp"],
+				...hello,
+			});
+		}
+	}
+
+	async event(cmd: string, payload: Record<string, unknown>) {
+		await this.receive({ t: "evt", cmd, p: payload });
+	}
+
+	async disconnect() {
+		await this.hooks.close!(this as any, { code: 1000, reason: "test" });
+	}
+
+	setHandler(handler: Handler) {
+		this.handler = handler;
+	}
+
+	// --- Peer interface used by the gateway ---
+
+	send(data: string) {
+		const frame = JSON.parse(data) as Frame;
+		if (frame.t !== "req") return;
+		this.requests.push(frame);
+
+		void (async () => {
+			try {
+				const result = await this.handler(frame.cmd as string, frame.p ?? {});
+				if (result === undefined) return; // never answer: simulates a hung agent
+				await this.receive({ t: "res", id: frame.id, ok: true, p: result as Record<string, unknown> });
+			} catch (error) {
+				await this.receive({
+					t: "res",
+					id: frame.id,
+					ok: false,
+					err: String((error as Error).message),
+				});
+			}
+		})();
+	}
+
+	close(code?: number, reason?: string) {
+		this.closed = { code, reason };
+	}
+
+	private async receive(frame: Frame) {
+		await this.hooks.message!(this as any, { text: () => JSON.stringify(frame) } as any);
+	}
+}
diff --git a/tests/helpers/memory-transport.ts b/tests/helpers/memory-transport.ts
new file mode 100644
index 0000000..11a003e
--- /dev/null
+++ b/tests/helpers/memory-transport.ts
@@ -0,0 +1,37 @@
+import type { Transporter } from "nodemailer";
+import nodemailer from "nodemailer";
+import type MailMessage from "nodemailer/lib/mailer/mail-message";
+import type { CapturedEmail } from "../../server/lib/api/utils/email";
+
+/**
+ * Build an in-memory nodemailer transport that captures every sent email
+ * into the provided array instead of delivering it over SMTP.
+ *
+ * Usage:
+ *   const emails: CapturedEmail[] = [];
+ *   const transport = createMemoryTransport(emails);
+ *   EmailService.init(transport);
+ */
+export function createMemoryTransport(capture: CapturedEmail[]): Transporter {
+	return nodemailer.createTransport({
+		name: "memory",
+		version: "1.0.0",
+		send: (mail: MailMessage, callback: (err: Error | null, info: any) => void) => {
+			capture.push({
+				from: (mail.data.from as string) ?? "",
+				to: (Array.isArray(mail.data.to) ? mail.data.to.join(", ") : (mail.data.to ?? "")) as string,
+				subject: (mail.data.subject as string) ?? "",
+				html: (mail.data.html as string) ?? "",
+				text: (mail.data.text as string) ?? "",
+			});
+			callback(null, {
+				messageId: `mock-${Date.now()}@memory`,
+				envelope: { from: mail.data.from as string, to: [mail.data.to as string].flat() },
+				accepted: [mail.data.to as string].flat(),
+				rejected: [],
+				pending: [],
+				response: "250 OK (memory)",
+			});
+		},
+	} as any);
+}
diff --git a/tests/helpers/preload.ts b/tests/helpers/preload.ts
new file mode 100644
index 0000000..7616902
--- /dev/null
+++ b/tests/helpers/preload.ts
@@ -0,0 +1,112 @@
+/// <reference types="bun-types" />
+
+import { afterAll, beforeAll } from "bun:test";
+import fs from "fs/promises";
+import path from "path";
+import { API } from "../../server/lib/api";
+import { DB } from "../../server/lib/db";
+import { Utils } from "../../server/lib/utils";
+import { ConfigHandler, type ENVConfigLike } from "../../server/lib/utils/config";
+
+function setTestEnv(rootDir: string) {
+	const envVars = {
+		NETIGNITE_LOG_LEVEL: "debug",
+
+		NETIGNITE_API_DISABLE_DOCS: false,
+
+		NETIGNITE_DB_PATH: path.join(rootDir, "db.sqlite"),
+		NETIGNITE_DB_AUTO_MIGRATE: true,
+		NETIGNITE_DB_MIGRATION_DIR: "./drizzle/migrations",
+
+		NETIGNITE_LOG_DIR: path.join(rootDir, "logs"),
+		NETIGNITE_CONFIG_BASE_DIR: rootDir,
+
+		NETIGNITE_APP_URL: "http://localhost:18232",
+
+		NETIGNITE_SMTP_HOST: "127.0.0.1",
+		NETIGNITE_SMTP_PORT: 12587,
+		NETIGNITE_SMTP_USERNAME: "",
+		NETIGNITE_SMTP_PASSWORD: "",
+		NETIGNITE_SMTP_FROM: '"App Test" <test@app.local>',
+		NETIGNITE_SMTP_SECURE: false,
+	} as const satisfies ENVConfigLike;
+
+	for (const [key, value] of Object.entries(envVars)) {
+		process.env[key] = String(value);
+	}
+}
+
+async function createIsolatedDataDir(): Promise<string> {
+	const root = await fs.mkdtemp(path.join(process.cwd(), "tmp-data-"));
+	return root;
+}
+
+async function runCommand(cmd: string[]) {
+	const process = Bun.spawn({
+		cmd,
+		stdin: "ignore",
+		stdout: "pipe",
+		stderr: "pipe",
+	});
+
+	const [stdout, stderr, exitCode] = await Promise.all([
+		process.stdout ? new Response(process.stdout).text() : Promise.resolve(""),
+		process.stderr ? new Response(process.stderr).text() : Promise.resolve(""),
+		process.exited,
+	]);
+
+	if (exitCode !== 0) {
+		throw new Error(`Command failed: ${cmd.join(" ")}\n${stderr || stdout}`.trim());
+	}
+}
+
+/**
+ * On Windows, file handles (e.g. the SQLite DB file) can take a moment to be
+ * released after closing, making an immediate recursive removal flaky (EBUSY).
+ * Retries manually since Bun's `fs.rm` doesn't reliably honor `maxRetries`/`retryDelay`.
+ */
+async function removeDirWithRetry(dir: string, attempts = 10, delayMs = 300) {
+	for (let attempt = 1; attempt <= attempts; attempt++) {
+		try {
+			await fs.rm(dir, { recursive: true, force: true });
+			return;
+		} catch (err: any) {
+			if (
+				attempt === attempts ||
+				(err?.code !== "EBUSY" && err?.code !== "ENOTEMPTY" && err?.code !== "EPERM")
+			) {
+				console.error(`Failed to remove directory ${dir} on attempt ${attempt}:`, err);
+			}
+			await Bun.sleep(delayMs);
+		}
+	}
+}
+
+let TMP_ROOT: string | null = null;
+
+beforeAll(async () => {
+	TMP_ROOT = await createIsolatedDataDir();
+
+	setTestEnv(TMP_ROOT);
+
+	const config = await ConfigHandler.loadConfig();
+
+	await DB.init(path.join(TMP_ROOT, "db.sqlite"), true, TMP_ROOT, "./drizzle/migrations");
+
+	// EmailService is NOT initialised here — tests that need it call
+	// EmailService.init(mockTransport) in their own beforeAll.
+
+	await API.init([config.APP_URL], false);
+
+	// await API.start(12521, "::");
+});
+
+afterAll(async () => {
+	await API.stop();
+
+	await DB.close();
+
+	if (TMP_ROOT) {
+		await removeDirWithRetry(TMP_ROOT);
+	}
+});
diff --git a/tests/helpers/seed.ts b/tests/helpers/seed.ts
new file mode 100644
index 0000000..e626007
--- /dev/null
+++ b/tests/helpers/seed.ts
@@ -0,0 +1,33 @@
+import { randomUUID } from "crypto";
+import { SessionHandler } from "../../server/lib/api/utils/authHandler";
+import { DB } from "../../server/lib/db";
+
+export type SeededUser = Omit<DB.Models.User, "password_hash"> & { password: string };
+export type SeededSession = Awaited<ReturnType<typeof SessionHandler.createSession>>;
+
+const DEFAULT_PASSWORD = "TestP@ssw0rd";
+
+export async function seedUser(
+	role: DB.Models.User["role"] = "user",
+	overrides: Partial<DB.Models.User> = {},
+	password: string = DEFAULT_PASSWORD,
+): Promise<SeededUser> {
+	const user = DB.instance()
+		.insert(DB.Tables.users)
+		.values({
+			username: overrides.username ?? `user_${randomUUID().slice(0, 8)}`,
+			display_name: overrides.display_name ?? "Test User",
+			email: overrides.email ?? `${randomUUID()}@example.com`,
+			password_hash: await Bun.password.hash(password),
+			role,
+		} as any)
+		.returning()
+		.get();
+
+	return { ...user, password } satisfies SeededUser;
+}
+
+export async function seedSession(user_id: number): Promise<SeededSession> {
+	const session = await SessionHandler.createSession(user_id);
+	return session satisfies SeededSession;
+}
diff --git a/tests/netignite.test.ts b/tests/netignite.test.ts
new file mode 100644
index 0000000..b0c5b95
--- /dev/null
+++ b/tests/netignite.test.ts
@@ -0,0 +1,571 @@
+import { beforeAll, describe, expect, test } from "bun:test";
+import { eq } from "drizzle-orm";
+import { AgentRegistry } from "../server/lib/agents/registry";
+import { RuntimeMetadata } from "../server/lib/api/utils/metadata";
+import { DB } from "../server/lib/db";
+import { DeviceStatusService } from "../server/lib/devices/status";
+import { makeAPIRequest } from "./helpers/api";
+import { FakeAgent } from "./helpers/fake-agent";
+import { type SeededSession, type SeededUser, seedSession, seedUser } from "./helpers/seed";
+
+type Actor = { user: SeededUser; session: SeededSession };
+
+async function actor(name: string): Promise<Actor> {
+	const user = await seedUser("user", {
+		username: `${name}_${Math.random().toString(36).slice(2, 8)}`,
+	});
+	return { user, session: await seedSession(user.id) };
+}
+
+let owner: Actor;
+let manager: Actor;
+let operator: Actor;
+let viewer: Actor;
+let stranger: Actor;
+
+beforeAll(async () => {
+	[owner, manager, operator, viewer, stranger] = (await Promise.all(
+		["owner", "manager", "operator", "viewer", "stranger"].map(actor),
+	)) as [Actor, Actor, Actor, Actor, Actor];
+});
+
+async function createAgent(token: string, kind: "esp32" | "linux" = "esp32") {
+	return await makeAPIRequest<{ id: number; state: string }>("/v1/agents", {
+		method: "POST",
+		authToken: token,
+		body: { name: `Agent ${kind}`, kind },
+	});
+}
+
+async function createDevice(token: string, body: Record<string, unknown> = {}) {
+	return await makeAPIRequest<{ id: number }>("/v1/devices", {
+		method: "POST",
+		authToken: token,
+		body: { name: "PC", type: "desktop", mac_address: "aa-bb-cc-dd-ee-ff", ...body },
+	});
+}
+
+describe("Agents and enrollment", () => {
+	test("a new agent is unenrolled and private to its owner", async () => {
+		const agent = await createAgent(owner.session.token);
+		expect(agent.state).toBe("unenrolled");
+
+		await makeAPIRequest(`/v1/agents/${agent.id}`, { authToken: stranger.session.token }, 404);
+		const list = await makeAPIRequest<{ id: number }[]>("/v1/agents", {
+			authToken: stranger.session.token,
+		});
+		expect(list.some((a) => a.id === agent.id)).toBe(false);
+	});
+
+	test("enrollment tokens are single use and the old credential is revoked on re-enrollment", async () => {
+		const agent = await createAgent(owner.session.token);
+		const { token } = await makeAPIRequest<{ token: string }>(`/v1/agents/${agent.id}/enrollments`, {
+			method: "POST",
+			authToken: owner.session.token,
+		});
+		const secret = "a".repeat(64);
+
+		await makeAPIRequest("/v1/agents/enroll", {
+			method: "POST",
+			body: { enrollment_token: token, secret },
+		});
+		await makeAPIRequest(
+			"/v1/agents/enroll",
+			{ method: "POST", body: { enrollment_token: token, secret } },
+			401,
+		);
+
+		const first = await FakeAgent.enroll(agent.id, owner.session.token);
+		const firstAgent = new FakeAgent();
+		await firstAgent.connect(first);
+		expect(AgentRegistry.isOnline(agent.id)).toBe(true);
+
+		const second = await FakeAgent.enroll(agent.id, owner.session.token);
+		expect(firstAgent.closed?.code).toBe(4003);
+		expect(await new FakeAgent().upgrade(first)).toBeInstanceOf(Response);
+		expect(await new FakeAgent().upgrade(second)).toBeNull();
+	});
+
+	test("enrollment rejects weak secrets and unknown tokens", async () => {
+		const agent = await createAgent(owner.session.token);
+		const { token } = await makeAPIRequest<{ token: string }>(`/v1/agents/${agent.id}/enrollments`, {
+			method: "POST",
+			authToken: owner.session.token,
+		});
+		await makeAPIRequest(
+			"/v1/agents/enroll",
+			{ method: "POST", body: { enrollment_token: token, secret: "short" } },
+			400,
+		);
+		await makeAPIRequest(
+			"/v1/agents/enroll",
+			{
+				method: "POST",
+				body: { enrollment_token: "netignite_enroll_nope:nope", secret: "b".repeat(64) },
+			},
+			401,
+		);
+	});
+
+	test("the gateway rejects missing or wrong credentials before the upgrade", async () => {
+		expect((await new FakeAgent().upgrade(null))?.status).toBe(401);
+		expect((await new FakeAgent().upgrade("netignite_agent_abc:def"))?.status).toBe(401);
+	});
+
+	test("an agent is online only after a valid HELLO", async () => {
+		const agent = await createAgent(owner.session.token);
+		const credential = await FakeAgent.enroll(agent.id, owner.session.token);
+
+		const silent = new FakeAgent();
+		await silent.connect(credential, null);
+		expect(AgentRegistry.isOnline(agent.id)).toBe(false);
+
+		const wrongKind = new FakeAgent();
+		await wrongKind.connect(credential, { kind: "linux" });
+		expect(wrongKind.closed?.code).toBe(4001);
+
+		const good = new FakeAgent();
+		await good.connect(credential);
+		expect(AgentRegistry.isOnline(agent.id)).toBe(true);
+		const fetched = await makeAPIRequest<{ state: string; version: string }>(
+			`/v1/agents/${agent.id}`,
+			{
+				authToken: owner.session.token,
+			},
+		);
+		expect(fetched).toMatchObject({ state: "online", version: "2.0.0-test" });
+
+		await good.disconnect();
+		expect(AgentRegistry.isOnline(agent.id)).toBe(false);
+	});
+
+	test("deleting an agent disconnects it and detaches its devices", async () => {
+		const agent = await createAgent(owner.session.token);
+		const credential = await FakeAgent.enroll(agent.id, owner.session.token);
+		const fake = new FakeAgent();
+		await fake.connect(credential);
+		const device = await createDevice(owner.session.token, { agent_id: agent.id });
+
+		await makeAPIRequest(`/v1/agents/${agent.id}`, {
+			method: "DELETE",
+			authToken: owner.session.token,
+		});
+		expect(fake.closed?.code).toBe(4004);
+
+		const fetched = await makeAPIRequest<{ agent_id: number | null }>(`/v1/devices/${device.id}`, {
+			authToken: owner.session.token,
+		});
+		expect(fetched.agent_id).toBeNull();
+	});
+});
+
+describe("Devices", () => {
+	test("validates MAC addresses, status configuration and agent ownership", async () => {
+		const token = owner.session.token;
+		await makeAPIRequest(
+			"/v1/devices",
+			{
+				method: "POST",
+				authToken: token,
+				body: { name: "x", type: "desktop", mac_address: "AABBCCDDEEFF" },
+			},
+			400,
+		);
+		await makeAPIRequest(
+			"/v1/devices",
+			{
+				method: "POST",
+				authToken: token,
+				body: { name: "x", type: "toaster", mac_address: "AA:BB:CC:DD:EE:FF" },
+			},
+			400,
+		);
+		await makeAPIRequest(
+			"/v1/devices",
+			{
+				method: "POST",
+				authToken: token,
+				body: {
+					name: "x",
+					type: "desktop",
+					mac_address: "AA:BB:CC:DD:EE:FF",
+					status_method: "ipv4",
+					status_address: "::1",
+				},
+			},
+			400,
+		);
+
+		const strangersAgent = await createAgent(stranger.session.token);
+		await makeAPIRequest(
+			"/v1/devices",
+			{
+				method: "POST",
+				authToken: token,
+				body: {
+					name: "x",
+					type: "desktop",
+					mac_address: "AA:BB:CC:DD:EE:FF",
+					agent_id: strangersAgent.id,
+				},
+			},
+			400,
+		);
+
+		const esp = await createAgent(token, "esp32");
+		await makeAPIRequest(
+			"/v1/devices",
+			{
+				method: "POST",
+				authToken: token,
+				body: { name: "x", type: "desktop", mac_address: "AA:BB:CC:DD:EE:FF", host_agent_id: esp.id },
+			},
+			400,
+		);
+
+		const created = await createDevice(token, {
+			status_method: "ipv6",
+			status_address: "fe80::1%eth0",
+		});
+		const fetched = await makeAPIRequest<{ mac_address: string }>(`/v1/devices/${created.id}`, {
+			authToken: token,
+		});
+		expect(fetched.mac_address).toBe("AA:BB:CC:DD:EE:FF");
+	});
+
+	test("power on sends WAKE through the device's agent and reports agent errors", async () => {
+		const agent = await createAgent(owner.session.token);
+		const device = await createDevice(owner.session.token, { agent_id: agent.id, wol_port: 7 });
+
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/power-on`,
+			{ method: "POST", authToken: owner.session.token },
+			503,
+		);
+
+		const fake = new FakeAgent();
+		await fake.connect(await FakeAgent.enroll(agent.id, owner.session.token));
+
+		await makeAPIRequest(`/v1/devices/${device.id}/power-on`, {
+			method: "POST",
+			authToken: owner.session.token,
+		});
+		const wake = fake.requests.find((frame) => frame.cmd === "WAKE");
+		expect(wake?.p).toEqual({ mac: "AA:BB:CC:DD:EE:FF", port: 7 });
+
+		fake.setHandler((cmd) => {
+			if (cmd === "WAKE") throw new Error("Invalid MAC address");
+			return {};
+		});
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/power-on`,
+			{ method: "POST", authToken: owner.session.token },
+			502,
+		);
+
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/shutdown`,
+			{ method: "POST", authToken: owner.session.token },
+			409,
+		);
+		await fake.disconnect();
+	});
+
+	test("concurrent commands to one agent each get their own answer", async () => {
+		const agent = await createAgent(owner.session.token);
+		const device = await createDevice(owner.session.token, {
+			agent_id: agent.id,
+			status_method: "ipv4",
+			status_address: "192.168.1.20",
+		});
+
+		const fake = new FakeAgent(async (cmd) => {
+			if (cmd === "STATUS") {
+				await Bun.sleep(300);
+				return { online: true };
+			}
+			return {};
+		});
+		await fake.connect(await FakeAgent.enroll(agent.id, owner.session.token));
+		DeviceStatusService.forget(device.id);
+
+		const [status] = await Promise.all([
+			makeAPIRequest<{ state: string }>(`/v1/devices/${device.id}/status`, {
+				method: "POST",
+				authToken: owner.session.token,
+			}),
+			Bun.sleep(50).then(() =>
+				makeAPIRequest(`/v1/devices/${device.id}/power-on`, {
+					method: "POST",
+					authToken: owner.session.token,
+				}),
+			),
+		]);
+		expect(status.state).toBe("online");
+
+		const statusRequest = fake.requests.find((frame) => frame.cmd === "STATUS");
+		expect(statusRequest?.p).toEqual({ target: { type: "ip", address: "192.168.1.20" }, icmp: true });
+		await fake.disconnect();
+	});
+
+	test("the SSH status method probes TCP port 22 without ICMP", async () => {
+		const agent = await createAgent(owner.session.token);
+		const device = await createDevice(owner.session.token, {
+			agent_id: agent.id,
+			status_method: "ssh",
+			status_address: "nas.local",
+		});
+		const fake = new FakeAgent((cmd) => (cmd === "STATUS" ? { online: false } : {}));
+		await fake.connect(await FakeAgent.enroll(agent.id, owner.session.token));
+		DeviceStatusService.forget(device.id);
+
+		const status = await makeAPIRequest<{ state: string }>(`/v1/devices/${device.id}/status`, {
+			method: "POST",
+			authToken: owner.session.token,
+		});
+		expect(status.state).toBe("offline");
+		expect(fake.requests.find((frame) => frame.cmd === "STATUS")?.p).toEqual({
+			target: { type: "host", host: "nas.local" },
+			icmp: false,
+			tcp_port: 22,
+		});
+		await fake.disconnect();
+	});
+
+	test("host agents report status and run shutdown", async () => {
+		const linux = await createAgent(owner.session.token, "linux");
+		const device = await createDevice(owner.session.token, {
+			status_method: "host_agent",
+			host_agent_id: linux.id,
+		});
+
+		const fake = new FakeAgent();
+		await fake.connect(await FakeAgent.enroll(linux.id, owner.session.token), {
+			kind: "linux",
+			capabilities: ["host.status", "host.control"],
+		});
+
+		DeviceStatusService.forget(device.id);
+		const status = await makeAPIRequest<{ state: string }>(`/v1/devices/${device.id}/status`, {
+			method: "POST",
+			authToken: owner.session.token,
+		});
+		expect(status.state).toBe("online");
+
+		await makeAPIRequest(`/v1/devices/${device.id}/shutdown`, {
+			method: "POST",
+			authToken: owner.session.token,
+		});
+		expect(fake.requests.find((frame) => frame.cmd === "HOST_CONTROL")?.p).toEqual({
+			action: "shutdown",
+		});
+		await fake.disconnect();
+	});
+});
+
+describe("Sharing and permissions", () => {
+	let deviceID: number;
+	let agentID: number;
+	let fake: FakeAgent;
+
+	beforeAll(async () => {
+		agentID = (await createAgent(owner.session.token)).id;
+		deviceID = (await createDevice(owner.session.token, { agent_id: agentID })).id;
+		fake = new FakeAgent();
+		await fake.connect(await FakeAgent.enroll(agentID, owner.session.token));
+
+		for (const [target, role] of [
+			[manager, "manager"],
+			[operator, "operator"],
+			[viewer, "viewer"],
+		] as const) {
+			await makeAPIRequest(`/v1/devices/${deviceID}/shares`, {
+				method: "POST",
+				authToken: owner.session.token,
+				body: { user: target.user.username, role },
+			});
+		}
+	});
+
+	test("shared devices appear in the list with the user's role", async () => {
+		const devices = await makeAPIRequest<
+			{ id: number; access_role: string; owner: { id: number } }[]
+		>("/v1/devices", {
+			authToken: operator.session.token,
+		});
+		const shared = devices.find((device) => device.id === deviceID);
+		expect(shared).toMatchObject({
+			access_role: "operator",
+			owner: { id: owner.user.id },
+			// Shared users can't list the owner's agents, but see which one the device uses.
+			agent: { id: agentID, name: "Agent esp32", state: "online" },
+		});
+	});
+
+	test("each role can do exactly what it should", async () => {
+		const cases: [Actor, { read: number; power: number; edit: number; manage: number }][] = [
+			[owner, { read: 200, power: 200, edit: 200, manage: 200 }],
+			[manager, { read: 200, power: 200, edit: 200, manage: 403 }],
+			[operator, { read: 200, power: 200, edit: 403, manage: 403 }],
+			[viewer, { read: 200, power: 403, edit: 403, manage: 403 }],
+			[stranger, { read: 404, power: 404, edit: 404, manage: 404 }],
+		];
+
+		for (const [who, expected] of cases) {
+			const authToken = who.session.token;
+			await makeAPIRequest(`/v1/devices/${deviceID}`, { authToken }, expected.read);
+			await makeAPIRequest(
+				`/v1/devices/${deviceID}/power-on`,
+				{ method: "POST", authToken },
+				expected.power,
+			);
+			await makeAPIRequest(
+				`/v1/devices/${deviceID}`,
+				{ method: "PUT", authToken, body: { description: "edited" } },
+				expected.edit,
+			);
+			await makeAPIRequest(`/v1/devices/${deviceID}/shares`, { authToken }, expected.manage);
+		}
+	});
+
+	test("managers can't move a device to another agent", async () => {
+		await makeAPIRequest(
+			`/v1/devices/${deviceID}`,
+			{ method: "PUT", authToken: manager.session.token, body: { agent_id: null } },
+			403,
+		);
+	});
+
+	test("sharing rejects unknown users, the owner and duplicates", async () => {
+		const authToken = owner.session.token;
+		await makeAPIRequest(
+			`/v1/devices/${deviceID}/shares`,
+			{ method: "POST", authToken, body: { user: "nobody_here", role: "viewer" } },
+			404,
+		);
+		await makeAPIRequest(
+			`/v1/devices/${deviceID}/shares`,
+			{ method: "POST", authToken, body: { user: owner.user.username, role: "viewer" } },
+			400,
+		);
+		await makeAPIRequest(
+			`/v1/devices/${deviceID}/shares`,
+			{ method: "POST", authToken, body: { user: viewer.user.email, role: "viewer" } },
+			409,
+		);
+	});
+
+	test("the owner changes roles; shared users can leave and lose their favorite", async () => {
+		await makeAPIRequest(`/v1/devices/${deviceID}/shares/${viewer.user.id}`, {
+			method: "PUT",
+			authToken: owner.session.token,
+			body: { role: "operator" },
+		});
+		await makeAPIRequest(`/v1/devices/${deviceID}/power-on`, {
+			method: "POST",
+			authToken: viewer.session.token,
+		});
+
+		await makeAPIRequest(`/v1/devices/${deviceID}/favorite`, {
+			method: "PUT",
+			authToken: viewer.session.token,
+		});
+		await makeAPIRequest(`/v1/devices/${deviceID}/shares/${viewer.user.id}`, {
+			method: "DELETE",
+			authToken: viewer.session.token,
+		});
+		await makeAPIRequest(`/v1/devices/${deviceID}`, { authToken: viewer.session.token }, 404);
+
+		const favorites = await DB.instance()
+			.select()
+			.from(DB.Tables.deviceFavorites)
+			.where(eq(DB.Tables.deviceFavorites.user_id, viewer.user.id));
+		expect(favorites).toHaveLength(0);
+
+		await makeAPIRequest(
+			`/v1/devices/${deviceID}/shares/${operator.user.id}`,
+			{ method: "DELETE", authToken: manager.session.token },
+			403,
+		);
+	});
+
+	test("deleting a device removes its shares", async () => {
+		const temp = await createDevice(owner.session.token);
+		await makeAPIRequest(`/v1/devices/${temp.id}/shares`, {
+			method: "POST",
+			authToken: owner.session.token,
+			body: { user: manager.user.username, role: "manager" },
+		});
+		await makeAPIRequest(
+			`/v1/devices/${temp.id}`,
+			{ method: "DELETE", authToken: manager.session.token },
+			403,
+		);
+		await makeAPIRequest(`/v1/devices/${temp.id}`, {
+			method: "DELETE",
+			authToken: owner.session.token,
+		});
+
+		const shares = await DB.instance()
+			.select()
+			.from(DB.Tables.deviceShares)
+			.where(eq(DB.Tables.deviceShares.device_id, temp.id));
+		expect(shares).toHaveLength(0);
+	});
+});
+
+describe("Registration", () => {
+	test("sign-up works only while enabled", async () => {
+		const body = { username: "newcomer", email: "newcomer@example.com", password: "Sup3rSecret!" };
+
+		await RuntimeMetadata.updateSettings({ registration_enabled: false });
+		expect((await makeAPIRequest<{ enabled: boolean }>("/v1/auth/registration")).enabled).toBe(false);
+		await makeAPIRequest("/v1/auth/signup", { method: "POST", body }, 403);
+
+		await RuntimeMetadata.updateSettings({ registration_enabled: true });
+		const session = await makeAPIRequest<{ token: string }>(
+			"/v1/auth/signup",
+			{ method: "POST", body },
+			201,
+		);
+		expect(session.token).toStartWith("netignite_sess_");
+		await makeAPIRequest("/v1/auth/signup", { method: "POST", body }, 409);
+
+		await RuntimeMetadata.updateSettings({ registration_enabled: false });
+	});
+
+	test("only admins can change server settings", async () => {
+		await makeAPIRequest(
+			"/v1/admin/settings",
+			{ method: "PUT", authToken: owner.session.token, body: { registration_enabled: true } },
+			403,
+		);
+
+		const admin = await seedUser("admin");
+		const adminSession = await seedSession(admin.id);
+		const settings = await makeAPIRequest<{ registration_enabled: boolean }>("/v1/admin/settings", {
+			authToken: adminSession.token,
+		});
+		expect(settings.registration_enabled).toBe(false);
+	});
+
+	test("users imported from v1 log in with bcrypt hashes, which are upgraded", async () => {
+		const bcrypt = await Bun.password.hash("V1password!", { algorithm: "bcrypt", cost: 4 });
+		const user = await seedUser("user", { username: "v1_user" });
+		await DB.instance()
+			.update(DB.Tables.users)
+			.set({ password_hash: bcrypt })
+			.where(eq(DB.Tables.users.id, user.id));
+
+		await makeAPIRequest("/v1/auth/login", {
+			method: "POST",
+			body: { username: "v1_user", password: "V1password!" },
+		});
+		const stored = await DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.id, user.id))
+			.get();
+		expect(stored?.password_hash.startsWith("$argon2id$")).toBe(true);
+	});
+});
diff --git a/tests/v1-import.test.ts b/tests/v1-import.test.ts
new file mode 100644
index 0000000..45048ef
--- /dev/null
+++ b/tests/v1-import.test.ts
@@ -0,0 +1,247 @@
+import { Database } from "bun:sqlite";
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { eq } from "drizzle-orm";
+import { DB } from "../server/lib/db";
+import { V1Importer } from "../server/lib/migration/v1Import";
+import { makeAPIRequest } from "./helpers/api";
+import { seedSession, seedUser } from "./helpers/seed";
+
+// Table definitions exactly as NetIgnite v1 (Server 0.1.x) creates them.
+const V1_SCHEMA = `
+CREATE TABLE users (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	username TEXT NOT NULL UNIQUE,
+	password_hash TEXT NOT NULL,
+	role TEXT NOT NULL CHECK(role IN ('admin', 'user')),
+	favorites TEXT NOT NULL DEFAULT ''
+);
+CREATE TABLE agents (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	name TEXT NOT NULL,
+	type TEXT NOT NULL CHECK(type IN ('server', 'microcontroller')),
+	description TEXT NOT NULL,
+	secret TEXT NOT NULL,
+	ownerID INTEGER NOT NULL
+);
+CREATE TABLE devices (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	name TEXT NOT NULL,
+	type TEXT NOT NULL CHECK(type IN ('server', 'desktop', 'laptop', 'printer', 'nas')),
+	description TEXT,
+	macAddress TEXT NOT NULL,
+	port INTEGER NOT NULL,
+	agentID INTEGER NOT NULL,
+	ownerID INTEGER NOT NULL
+);
+`;
+
+let dir: string;
+let v1Path: string;
+
+beforeAll(async () => {
+	dir = mkdtempSync(join(tmpdir(), "netignite-v1-"));
+	v1Path = join(dir, "db.sqlite");
+
+	const v1 = new Database(v1Path);
+	v1.exec(V1_SCHEMA);
+	const hash = (password: string) =>
+		Bun.password.hashSync(password, { algorithm: "bcrypt", cost: 4 });
+
+	v1.run(
+		"INSERT INTO users (id, username, password_hash, role, favorites) VALUES (1, 'v1alice', ?, 'admin', '[1, 99]')",
+		[hash("alice-pass")],
+	);
+	v1.run(
+		"INSERT INTO users (id, username, password_hash, role, favorites) VALUES (2, 'v1bobby', ?, 'user', '')",
+		[hash("bob-pass")],
+	);
+	v1.run(
+		"INSERT INTO agents (id, name, type, description, secret, ownerID) VALUES (1, 'Office ESP', 'microcontroller', 'desk', 'sha256:x', 1)",
+	);
+	v1.run(
+		"INSERT INTO agents (id, name, type, description, secret, ownerID) VALUES (2, 'Bob server', 'server', '', 'plain', 2)",
+	);
+	v1.run(
+		"INSERT INTO devices VALUES (1, 'Gaming PC', 'desktop', NULL, 'aa-bb-cc-dd-ee-01', 9, 1, 1)",
+	);
+	v1.run("INSERT INTO devices VALUES (2, 'Broken MAC', 'server', '', 'AABBCCDDEE02', 9, 1, 1)");
+	// v1 allowed binding a device to another user's agent; the import drops that link.
+	v1.run("INSERT INTO devices VALUES (3, 'Bob NAS', 'nas', 'rack', 'AA:BB:CC:DD:EE:03', 7, 1, 2)");
+	v1.close();
+});
+
+afterAll(() => {
+	rmSync(dir, { recursive: true, force: true });
+});
+
+describe("v1 import", () => {
+	test("a dry run changes nothing", async () => {
+		const report = await V1Importer.run({ sourcePath: v1Path, dryRun: true });
+		expect(report.users.imported).toEqual(["v1alice", "v1bobby"]);
+
+		const alice = await DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.username, "v1alice"))
+			.get();
+		expect(alice).toBeUndefined();
+	});
+
+	test("imports users, agents, devices and favorites", async () => {
+		const report = await V1Importer.run({ sourcePath: v1Path });
+
+		expect(report.users.imported).toEqual(["v1alice", "v1bobby"]);
+		expect(report.agents.imported).toBe(2);
+		expect(report.devices.imported).toBe(2);
+		expect(report.devices.skipped).toEqual([
+			{ name: "Broken MAC", reason: 'invalid MAC address "AABBCCDDEE02"' },
+		]);
+		expect(report.favorites).toBe(1);
+
+		const alice = await DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.username, "v1alice"))
+			.get();
+		expect(alice).toMatchObject({
+			role: "admin",
+			email: `v1alice@${V1Importer.PLACEHOLDER_EMAIL_DOMAIN}`,
+		});
+
+		const agents = await DB.instance()
+			.select()
+			.from(DB.Tables.agents)
+			.where(eq(DB.Tables.agents.owner_id, alice!.id));
+		expect(agents).toHaveLength(1);
+		expect(agents[0]).toMatchObject({ kind: "esp32", token_id: null, name: "Office ESP" });
+
+		const pc = await DB.instance()
+			.select()
+			.from(DB.Tables.devices)
+			.where(eq(DB.Tables.devices.name, "Gaming PC"))
+			.get();
+		expect(pc).toMatchObject({
+			mac_address: "AA:BB:CC:DD:EE:01",
+			agent_id: agents[0]!.id,
+			status_method: "link_local",
+		});
+
+		const nas = await DB.instance()
+			.select()
+			.from(DB.Tables.devices)
+			.where(eq(DB.Tables.devices.name, "Bob NAS"))
+			.get();
+		expect(nas).toMatchObject({ agent_id: null, status_method: "link_local", wol_port: 7 });
+	});
+
+	test("running it again imports nothing twice", async () => {
+		const report = await V1Importer.run({ sourcePath: v1Path });
+		expect(report.users.imported).toEqual([]);
+		expect(report.agents.imported).toBe(0);
+		expect(report.devices.imported).toBe(0);
+		expect(report.favorites).toBe(0);
+	});
+
+	test("imported users log in with their v1 password", async () => {
+		const session = await makeAPIRequest<{ token: string }>("/v1/auth/login", {
+			method: "POST",
+			body: { username: "v1bobby", password: "bob-pass" },
+		});
+		expect(session.token).toStartWith("netignite_sess_");
+	});
+
+	test("rejects files that aren't v1 databases", async () => {
+		const other = join(dir, "other.sqlite");
+		const db = new Database(other);
+		db.exec("CREATE TABLE foo (id INTEGER)");
+		db.close();
+		await expect(V1Importer.run({ sourcePath: other })).rejects.toThrow(
+			"Not a NetIgnite v1 database",
+		);
+	});
+});
+
+describe("v1 import: merging users", () => {
+	let mergeDir: string;
+	let mergePath: string;
+
+	beforeAll(async () => {
+		// A second v1 database: start from a clean import state, as a server only ever imports one.
+		await DB.instance().delete(DB.Tables.metadata).where(eq(DB.Tables.metadata.key, "v1_import"));
+
+		mergeDir = mkdtempSync(join(tmpdir(), "netignite-v1-merge-"));
+		mergePath = join(mergeDir, "db.sqlite");
+		const v1 = new Database(mergePath);
+		v1.exec(V1_SCHEMA);
+		const hash = (password: string) =>
+			Bun.password.hashSync(password, { algorithm: "bcrypt", cost: 4 });
+		v1.run("INSERT INTO users VALUES (1, 'admin', ?, 'admin', '')", [hash("admin-from-v1")]);
+		v1.run("INSERT INTO users VALUES (2, 'collide', ?, 'user', '')", [hash("collide-from-v1")]);
+		v1.run("INSERT INTO agents VALUES (1, 'Admin ESP', 'microcontroller', '', 's', 1)");
+		v1.run("INSERT INTO agents VALUES (2, 'Collide ESP', 'microcontroller', '', 's', 2)");
+		v1.close();
+
+		// A v2 user with the same name who already logged in.
+		const collide = await seedUser("user", { username: "collide" }, "collide-in-v2");
+		await seedSession(collide.id);
+	});
+
+	afterAll(() => {
+		rmSync(mergeDir, { recursive: true, force: true });
+	});
+
+	test("v1 admin is merged into the initial admin; other name clashes need --merge-users", async () => {
+		const initialAdmin = await DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.username, "admin"))
+			.get();
+		const adminLoggedInBefore = !!(await DB.instance()
+			.select()
+			.from(DB.Tables.sessions)
+			.where(eq(DB.Tables.sessions.user_id, initialAdmin!.id))
+			.get());
+
+		const report = await V1Importer.run({ sourcePath: mergePath });
+		expect(report.users.merged).toEqual(["admin"]);
+		expect(report.users.skipped).toEqual([
+			{
+				username: "collide",
+				reason: "username already exists in v2 (use --merge-users to merge them)",
+			},
+		]);
+		expect(report.agents.imported).toBe(1);
+
+		const adminAgents = await DB.instance()
+			.select()
+			.from(DB.Tables.agents)
+			.where(eq(DB.Tables.agents.owner_id, initialAdmin!.id));
+		expect(adminAgents.map((agent) => agent.name)).toContain("Admin ESP");
+
+		// The v1 password is only taken over by an account nobody has used in v2 yet.
+		await makeAPIRequest(
+			"/v1/auth/login",
+			{ method: "POST", body: { username: "admin", password: "admin-from-v1" } },
+			adminLoggedInBefore ? 401 : 200,
+		);
+	});
+
+	test("--merge-users merges the clash but keeps the password of a used v2 account", async () => {
+		const report = await V1Importer.run({ sourcePath: mergePath, mergeUsers: true });
+		expect(report.users.merged).toEqual(["collide"]);
+		expect(report.agents.imported).toBe(1);
+
+		await makeAPIRequest("/v1/auth/login", {
+			method: "POST",
+			body: { username: "collide", password: "collide-in-v2" },
+		});
+		await makeAPIRequest(
+			"/v1/auth/login",
+			{ method: "POST", body: { username: "collide", password: "collide-from-v1" } },
+			401,
+		);
+	});
+});
diff --git a/tsconfig.json b/tsconfig.json
index cc31c5d..3640acd 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -1,22 +1,18 @@
 {
-  // https://nuxt.com/docs/guide/concepts/typescript
-  "extends": "./.nuxt/tsconfig.json",
-
-  "compilerOptions": {
-
-    "target": "ESNext",
-    "types": ["bun-types"],
-
-    // Best practices
-    "strict": true,
-    "skipLibCheck": true,
-    "noFallthroughCasesInSwitch": true,
-    "noUncheckedIndexedAccess": true,
-
-    // Some stricter flags (disabled by default)
-    "noUnusedLocals": false,
-    "noUnusedParameters": false,
-    "noPropertyAccessFromIndexSignature": false
-  }
-
+	// https://nuxt.com/docs/guide/concepts/typescript
+	"files": [],
+	"references": [
+		{
+			"path": "./.nuxt/tsconfig.app.json"
+		},
+		{
+			"path": "./.nuxt/tsconfig.server.json"
+		},
+		{
+			"path": "./.nuxt/tsconfig.shared.json"
+		},
+		{
+			"path": "./.nuxt/tsconfig.node.json"
+		}
+	]
 }
diff --git a/tsconfig/tsconfig.typecheck.json b/tsconfig/tsconfig.typecheck.json
new file mode 100644
index 0000000..2f831a2
--- /dev/null
+++ b/tsconfig/tsconfig.typecheck.json
@@ -0,0 +1,12 @@
+{
+	"extends": "../.nuxt/tsconfig.json",
+	"compilerOptions": {
+		"noEmit": true,
+		"allowImportingTsExtensions": true,
+		"types": ["bun-types"]
+	},
+	// app/** is type-checked by `nuxt typecheck` (vue-tsc), which provides the
+	// Nuxt auto-import declarations (ref, computed, useState, ...). Plain tsc
+	// cannot resolve those globals, so this pass only covers tests/ and server/.
+	"include": ["../tests/**/*", "../server/**/*"]
+}
diff --git a/utils/handlers/formModal.ts b/utils/handlers/formModal.ts
deleted file mode 100644
index 8efd927..0000000
--- a/utils/handlers/formModal.ts
+++ /dev/null
@@ -1,54 +0,0 @@
-import { SharedUtils } from "@/shared/utils";
-import { SimpleForm } from "@/utils/simpleForm";
-
-interface FormModalSettings {
-    header: {
-        title: string;
-        icon?: string; // Optional icon for the header
-    }
-
-    submitText: string;
-
-    onModalClose?: () => void;
-}
-
-const defaultSettings: FormModalSettings = {
-    header: {
-        title: 'Form Modal'
-    },
-    submitText: 'Submit'
-}
-
-export class FormModalHandler<T extends Record<string, any>> {
-
-    private _isVisible: boolean = false;
-
-    public settings: FormModalSettings;
-
-    constructor(
-        settings: Partial<FormModalSettings>,
-        public form: SimpleForm<T>
-    ) {
-
-        this.settings = SharedUtils.deepMerge(defaultSettings, settings);
-
-        return reactive(this) as any as FormModalHandler<T>;
-    }
-
-    public get isModalVisible() {
-        return this._isVisible;
-    }
-
-    public showModal() {
-        this._isVisible = true;
-    }
-
-    public hideModal() {
-        this._isVisible = false;
-    }
-
-    public toggleModal() {
-        this._isVisible = !this._isVisible;
-    }
-
-}
diff --git a/utils/models/agent.ts b/utils/models/agent.ts
deleted file mode 100644
index 6d27ca2..0000000
--- a/utils/models/agent.ts
+++ /dev/null
@@ -1,152 +0,0 @@
-import { useAPI } from "~/composables/useAPI";
-import { ModelUtils } from "./utils";
-
-class AgentTypeData {
-    constructor(
-        readonly label: string,
-        readonly icon: string
-    ) {}
-}
-
-interface AgentTypeFullData extends AgentTypeData {
-    readonly name: Agent.Type;
-}
-
-class AgentUIUtils {
-
-    private static readonly typeList = {
-        server: new AgentTypeData('Server', 'bi bi-hdd-network text-info'),
-        microcontroller: new AgentTypeData('Microcontroller', 'bi bi-cpu text-primary')
-    } as const;
-
-
-    static getAgentTypeLabel(type: Agent.Type): string {
-        const data = this.typeList[type]
-        if (data && data.label) {
-            return data.label;
-        }
-        return 'Unknown Agent Type';
-    }
-
-    static getAllAgentTypes(): AgentTypeFullData[] {
-        return Object.entries(this.typeList).map(([name, data]) => ({
-            name: name as Agent.Type,
-            ...data
-        }));
-    }
-
-
-    static getAgentIcon(type: Agent.Type) {
-        const data = this.typeList[type]
-        if (data && data.icon) {
-            return data.icon;
-        }
-        return 'bi bi-Agent-hdd text-secondary';
-    }
-
-}
-
-export class Agent implements Agent.Data {
-
-    public id: number;
-    public name: string;
-    public type: Agent.Type;
-    public description: string;
-    public ownerID: number;
-    public status: ModelUtils.OnlineStatus.Type
-
-    constructor(data: Agent.Data) {
-        this.id = data.id;
-        this.name = data.name;
-        this.type = data.type;
-        this.description = data.description;
-        this.ownerID = data.ownerID;
-        this.status = data.status;
-    }
-
-    public getAgentIcon() {
-        return AgentUIUtils.getAgentIcon(this.type);
-    }
-
-    public getStatusBadgeClass() {
-        return ModelUtils.OnlineStatus.getStatusBadgeClass(this.status);
-    }
-
-    public getStatusIcon() {
-        return ModelUtils.OnlineStatus.getStatusIcon(this.status);
-    }
-
-    async refreshStatus() {
-
-        const statuses = await Agent.Utils.getStatuses([this.id]);
-        if (statuses && statuses[this.id.toString()]) {
-            const status = statuses[this.id.toString()];
-
-            if (status) {
-                this.status = status;
-                return
-            }
-        }
-        this.status = "unknown";
-        return
-    }
-}
-
-export namespace Agent {
-
-    export type Type = 'server' | 'microcontroller';
-
-    export interface Data {
-        id: number;
-        name: string;
-        type: Agent.Type;
-        description: string;
-        ownerID: number;
-        status: ModelUtils.OnlineStatus.Type;
-    }
-
-    export class Utils {
-
-        static async updateStatuses(agents: Agent.Data[]) {
-
-            const statuses = await this.getStatuses(agents.map(agent => agent.id));
-            if (!statuses) {
-                for (const agent of agents) {
-                    agent.status = "unknown";
-                }
-                return;
-            }
-
-            for (const agent of agents) {
-                const status = statuses[agent.id.toString()];
-                if (status) {
-                    agent.status = status;
-                } else {
-                    agent.status = "unknown";
-                }
-            }
-
-        }
-
-        static async getStatuses(idList: number[]) {
-            try {
-                const response = await useAPI('/api/agents/status', {
-                    method: 'GET',
-                    params: {
-                        ids: idList.join(',')
-                    }
-                });
-                return response.data || null;
-            } catch (error) {
-                return null;
-            }
-
-        }
-
-        static getAllAgentTypes() {
-            return AgentUIUtils.getAllAgentTypes();
-        }
-
-    }
-
-}
\ No newline at end of file
diff --git a/utils/models/device.ts b/utils/models/device.ts
deleted file mode 100644
index ed67268..0000000
--- a/utils/models/device.ts
+++ /dev/null
@@ -1,220 +0,0 @@
-import type { DBStorage } from "~/server/db";
-import { ModelUtils } from "./utils";
-import { useAPI } from "~/composables/useAPI";
-
-class DeviceTypeData {
-    constructor(
-        readonly label: string,
-        readonly icon: string
-    ) { }
-}
-
-interface DeviceTypeFullData extends DeviceTypeData {
-    readonly name: Device.Type;
-}
-
-class DeviceUIUtils {
-
-    private static readonly typeList = {
-        server: new DeviceTypeData('Server', 'bi bi-hdd-network text-info'),
-        desktop: new DeviceTypeData('Desktop PC', 'bi bi-pc-display text-primary'),
-        laptop: new DeviceTypeData('Laptop', 'bi bi-laptop text-primary'),
-        printer: new DeviceTypeData('Printer', 'bi bi-printer text-success'),
-        nas: new DeviceTypeData('NAS Storage', 'bi bi-hdd-stack text-info')
-    } as const;
-
-    static getDeviceTypeLabel(type: Device.Type): string {
-        const data = this.typeList[type]
-        if (data && data.label) {
-            return data.label;
-        }
-        return 'Unknown Device Type';
-    }
-
-    static getAllDeviceTypes(): DeviceTypeFullData[] {
-        return Object.entries(this.typeList).map(([name, data]) => ({
-            name: name as Device.Type,
-            ...data
-        }));
-    }
-
-
-    static getDeviceIcon(type: Device.Type) {
-        const data = this.typeList[type]
-        if (data && data.icon) {
-            return data.icon;
-        }
-        return 'bi bi-device-hdd text-secondary';
-    }
-
-}
-
-export class Device implements Device.Data {
-
-    public id: number;
-    public name: string;
-    public type: Device.Type;
-    public description: string;
-    public macAddress: string;
-    public port: number;
-    public agentID: number;
-    public ownerID: number;
-    public status: ModelUtils.OnlineStatus.Type;
-    public powering: boolean = false;
-    public isFavorite: boolean = false;
-
-    constructor(data: Device.Data) {
-        this.id = data.id;
-        this.name = data.name;
-        this.type = data.type;
-        this.description = data.description;
-        this.macAddress = data.macAddress;
-        this.port = data.port;
-        this.agentID = data.agentID;
-        this.ownerID = data.ownerID;
-        this.status = data.status;
-        this.powering = data.powering || false;
-        this.isFavorite = data.isFavorite || false;
-    }
-
-    public getDeviceIcon() {
-        return DeviceUIUtils.getDeviceIcon(this.type);
-    }
-
-    public getStatusBadgeClass() {
-        return ModelUtils.OnlineStatus.getStatusBadgeClass(this.status);
-    }
-
-    public getStatusIcon() {
-        return ModelUtils.OnlineStatus.getStatusIcon(this.status);
-    }
-
-    public getFavoriteIcon() {
-        return this.isFavorite ? "bi bi-star-fill" : "bi bi-star";
-    }
-
-
-    async wakeUP() {
-        try {
-            if (this.powering) {
-                useNotificationToast({
-                    message: "Device is already online or powering up.",
-                    type: "info"
-                });
-                return;
-            }
-            this.powering = true;
-
-            const response = await useAPI(`/api/devices/${this.id}/wakeup`, {
-                method: 'POST'
-            });
-
-            this.powering = false;
-
-            if (response.status !== "OK") {
-                useNotificationToast({
-                    message: `Failed to wake up device: ${response?.message || 'Unknown error'}`,
-                    type: "error"
-                });
-                return;
-            }
-
-            useNotificationToast({
-                message: `Device ${this.name} was successfully woken up.`,
-                type: "success"
-            });
-
-        } catch (error: any) {
-            useNotificationToast({
-                message: `Error waking up device: ${error.message || 'Unknown error'}`,
-                type: "error"
-            });
-        }
-    }
-
-    async shutdown() {
-        // @TODO: Implement shutdown logic
-
-        this.powering = false;
-        this.status = 'offline';
-
-        return "Shutdown functionality not implemented yet.";
-    }
-
-    async refreshStatus() {
-
-        const statuses = await Device.Utils.getStatuses([this.id]); //@ts-ignore
-        if (statuses && statuses[this.id.toString()]) { //@ts-ignore
-            const status = statuses[this.id.toString()];
-
-            if (status) {
-                this.status = status;
-                return
-            }
-        }
-        this.status = "unknown";
-        return
-
-    }
-
-    public toggleFavorite() {
-        this.isFavorite = !this.isFavorite;
-    }
-
-}
-
-export namespace Device {
-
-    export type Type = 'server' | 'desktop' | 'laptop' | 'printer' | 'nas';
-
-    export interface Data extends DBStorage.Device.Model {
-        status: ModelUtils.OnlineStatus.Type;
-        powering?: boolean;
-        isFavorite?: boolean;
-    }
-
-    export class Utils {
-
-        static async updateStatuses(devices: Device.Data[]) {
-
-            const statuses = await this.getStatuses(devices.map(device => device.id));
-            if (!statuses) {
-                for (const device of devices) {
-                    device.status = "unknown";
-                }
-                return;
-            }
-
-            for (const device of devices) { //@ts-ignore
-                const status = statuses[device.id.toString()];
-                if (status) {
-                    device.status = status;
-                } else {
-                    device.status = "unknown";
-                }
-            }
-
-        }
-
-        static async getStatuses(idList: number[]) {
-            try {
-                const response = await useAPI('/api/devices/status', {
-                    method: 'GET',
-                    params: {
-                        ids: idList.join(',')
-                    }
-                });
-                return response.data || null;
-            } catch (error) {
-                return null;
-            }
-
-        }
-
-        static getAllDeviceTypes() {
-            return DeviceUIUtils.getAllDeviceTypes();
-        }
-
-    }
-
-}
\ No newline at end of file
diff --git a/utils/models/utils.ts b/utils/models/utils.ts
deleted file mode 100644
index 2d64780..0000000
--- a/utils/models/utils.ts
+++ /dev/null
@@ -1,63 +0,0 @@
-
-
-export namespace ModelUtils {
-
-
-    export class OnlineStatus {
-
-        private static readonly typeList: Record<OnlineStatus.Type, OnlineStatus.Type.Data> = {
-            online: {
-                label: 'Online',
-                icon: 'bi bi-check-circle-fill',
-                class: 'bg-success'
-            },
-            offline: {
-                label: 'Offline',
-                icon: 'bi bi-x-circle-fill',
-                class: 'bg-danger'
-            },
-            unknown: {
-                label: 'Unknown',
-                icon: 'bi bi-question-circle-fill',
-                class: 'bg-secondary'
-            }
-        };
-
-        static getStatusBadgeClass(status: OnlineStatus.Type) {
-            return (this.typeList as any)[status]?.class || 'bg-secondary';
-        }
-
-        static getStatusIcon(status: OnlineStatus.Type) {
-            return (this.typeList as any)[status]?.icon || 'bi bi-question-circle-fill';
-        }
-
-        static getStatusLabel(status: OnlineStatus.Type) {
-            return (this.typeList as any)[status]?.label || 'Unknown';
-        }
-
-        static getAllTypes(): OnlineStatus.Type.FullData[] {
-            return Object.entries(this.typeList).map(([name, data]) => ({
-                name: name as OnlineStatus.Type,
-                ...data
-            }));
-        }
-
-    }
-
-    export namespace OnlineStatus {
-        export type Type = 'online' | 'offline' | 'unknown';
-        export namespace Type {
-
-            export interface Data {
-                label: string;
-                icon: string;
-                class: string;
-            }
-
-            export interface FullData extends Data {
-                name: Type;
-            }
-        }
-    }
-
-}
\ No newline at end of file
diff --git a/utils/simpleForm.ts b/utils/simpleForm.ts
deleted file mode 100644
index fab9d5e..0000000
--- a/utils/simpleForm.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-import { type Reactive, reactive, toRaw } from "vue";
-
-export class SimpleForm<T extends Record<string, any>> {
-
-    private _values: Reactive<T>;
-
-    constructor(
-        private readonly initial: T,
-        private readonly onSubmit: (values: Reactive<T>) => Promise<void> | void
-    ) {
-        this._values = reactive(structuredClone(toRaw(initial)));
-    }
-
-    public get values(): Reactive<T> {
-        return this._values;
-    }
-
-    public toObject() {
-        return structuredClone(toRaw(this._values));
-    }
-
-    public reset() {
-        for (const key in this._values) {
-            if (Object.prototype.hasOwnProperty.call(this._values, key)) {
-                const value = this.initial[key];
-                if (value !== undefined) {
-                    this._values[key] = structuredClone(value);
-                } else {
-                    delete this._values[key];
-                }
-            }
-        }
-    }
-
-    public set(values: Partial<T>) {
-        for (const key in values) {
-            if (Object.prototype.hasOwnProperty.call(values, key)) {
-                const value = values[key];
-                if (value !== undefined) {
-                    this._values[key] = structuredClone(value);
-                } else {
-                    delete this._values[key];
-                }
-            }
-        }
-    }
-
-    public submit() {
-        return this.onSubmit(this._values);
-    }
-
-}
-
diff --git a/utils/userStore.ts b/utils/userStore.ts
deleted file mode 100644
index c2f0be7..0000000
--- a/utils/userStore.ts
+++ /dev/null
@@ -1,16 +0,0 @@
-
-export class SessionStore {
-
-    private static readonly userInfo = reactive<UserAuthInfo>({} as any);
-
-    static useUserInfo() {
-        return this.userInfo;
-    }
-
-    static setUserInfo(userInfo: UserAuthInfo) {
-        for (const key in userInfo) {
-            (this.userInfo as any)[key] = (userInfo as any)[key];
-        }
-    }
-
-}

From 7ed87f431f6cb6a260f926d72925c2b97f2da32b Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Tue, 20 Oct 2026 11:51:02 +0200
Subject: [PATCH 02/17] test: allow the permission matrix test 30 seconds

It makes about 20 requests whose tokens are verified with argon2id, which can exceed the
default 5-second timeout on a busy machine.
---
 tests/netignite.test.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/netignite.test.ts b/tests/netignite.test.ts
index b0c5b95..1cb60de 100644
--- a/tests/netignite.test.ts
+++ b/tests/netignite.test.ts
@@ -426,7 +426,7 @@ describe("Sharing and permissions", () => {
 			);
 			await makeAPIRequest(`/v1/devices/${deviceID}/shares`, { authToken }, expected.manage);
 		}
-	});
+	}, 30_000);
 
 	test("managers can't move a device to another agent", async () => {
 		await makeAPIRequest(

From 3bcf6a7590b74aade73312910eaf91bcaa54d99d Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Tue, 20 Oct 2026 15:10:50 +0200
Subject: [PATCH 03/17] feat: show the ESP32 console setup command on the agent
 page

ESP32 firmware v2 is set up from its serial console with
`setup <server-url> <enrollment-token>`. The agent page now shows that command, like the
pairing command for Linux agents, until the browser installer is available.
---
 .../dashboard/agents/[agent_id]/index.vue     | 34 ++++++++++++-------
 1 file changed, 21 insertions(+), 13 deletions(-)

diff --git a/app/pages/dashboard/agents/[agent_id]/index.vue b/app/pages/dashboard/agents/[agent_id]/index.vue
index d9b695d..caf29c9 100644
--- a/app/pages/dashboard/agents/[agent_id]/index.vue
+++ b/app/pages/dashboard/agents/[agent_id]/index.vue
@@ -106,9 +106,13 @@ async function createEnrollment() {
 	enrollment.value = res.data;
 }
 
-const pairCommand = computed(() =>
-	enrollment.value ? `sudo netignite-agent pair ${appUrl} ${enrollment.value.token}` : "",
-);
+// The command that sets the agent up: the Linux agent's CLI, or the ESP32 firmware's serial console.
+const setupCommand = computed(() => {
+	if (!enrollment.value || agent.isNew) return "";
+	return agent.data.value.kind === "linux"
+		? `sudo netignite-agent pair ${appUrl} ${enrollment.value.token}`
+		: `setup ${appUrl} ${enrollment.value.token}`;
+});
 
 async function copy(text: string) {
 	try {
@@ -240,13 +244,17 @@ async function onDelete() {
 				icon="i-lucide-plug"
 			>
 				<template v-if="agent.data.value.kind === 'esp32'">
-					<UAlert
-						color="info"
-						variant="soft"
-						icon="i-lucide-usb"
-						title="Install from your browser"
-						description="The browser installer for the ESP32 firmware comes with the v2 firmware. Until then, use a manual enrollment token below."
-					/>
+					<ol class="list-decimal space-y-1 pl-5 text-sm text-slate-300">
+						<li>
+							Flash the NetIgnite ESP32 firmware v2 and open its serial console (USB, 115200 baud), for
+							example with PlatformIO's Serial Monitor.
+						</li>
+						<li>
+							Connect it to Wi-Fi: <code class="font-mono text-slate-200">wifi "&lt;network&gt;" "&lt;password&gt;"</code>
+						</li>
+						<li>Create the setup command below and paste it into the console. It works once and expires after 15 minutes.</li>
+					</ol>
+					<p class="mt-2 text-xs text-slate-500">A one-click browser installer is coming in a later update.</p>
 				</template>
 
 				<template v-else>
@@ -258,7 +266,7 @@ async function onDelete() {
 
 				<div class="mt-4 space-y-3">
 					<UButton
-						:label="enrollment ? 'Create a new token' : agent.data.value.kind === 'linux' ? 'Create pairing command' : 'Create enrollment token'"
+						:label="enrollment ? 'Create a new command' : 'Create setup command'"
 						icon="i-lucide-key-round"
 						color="neutral"
 						variant="outline"
@@ -269,7 +277,7 @@ async function onDelete() {
 					<template v-if="enrollment">
 						<div class="flex items-start gap-2 rounded-lg border border-slate-800 bg-slate-900/60 p-3">
 							<code class="flex-1 break-all font-mono text-sm text-slate-200">
-								{{ agent.data.value.kind === "linux" ? pairCommand : enrollment.token }}
+								{{ setupCommand }}
 							</code>
 							<UButton
 								icon="i-lucide-copy"
@@ -277,7 +285,7 @@ async function onDelete() {
 								variant="ghost"
 								size="sm"
 								aria-label="Copy"
-								@click="copy(agent.data.value.kind === 'linux' ? pairCommand : enrollment.token)"
+								@click="copy(setupCommand)"
 							/>
 						</div>
 						<p class="text-xs text-slate-500">

From 3a0b3dfbe0e8d71b695c9a22f8feafb67203b4b8 Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Tue, 20 Oct 2026 19:19:52 +0200
Subject: [PATCH 04/17] ci: run CI on v2, smoke-test the Docker image, make
 pre-releases safe

- CI also runs on pushes to v2 and builds the Docker image, starts it and checks health, the
  dashboard, the initial admin and the bundled v1 import tool.
- Create Release tags the commit it runs on (it used to tag the default branch), includes the
  database migrations in app.tar.gz, validates the version and publishes the Docker image.
  Versions with a suffix (2.0.0-beta.1) are always pre-releases.
- Publish Docker Images refuses to publish a stable image (which moves `latest`) from any
  branch other than main.
---
 .github/workflows/ci.yml             |  36 +++++++-
 .github/workflows/docker-publish.yml |  18 +++-
 .github/workflows/release.yml        | 121 ++++++++++++++++-----------
 3 files changed, 123 insertions(+), 52 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bcf774e..74b6d61 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,7 +2,7 @@ name: CI
 
 on:
   push:
-    branches: [main]
+    branches: [main, v2]
   pull_request:
   workflow_dispatch:
 
@@ -17,4 +17,36 @@ jobs:
       - run: bun install --frozen-lockfile
       - run: bun run check:ci
       - run: bun run typecheck
-      - run: bun test
\ No newline at end of file
+      - run: bun test
+
+  # Builds the Docker image like the release does and checks that it starts.
+  image:
+    needs: test
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - run: bun install --frozen-lockfile
+      - run: bun run build
+      - run: docker build -f docker/Dockerfile -t netignite-server:ci .
+      - name: Smoke test
+        run: |
+          docker run -d --name netignite -p 18232:18232 -e NETIGNITE_APP_URL=http://localhost:18232 netignite-server:ci
+          for i in $(seq 1 45); do
+            if curl -fsS http://localhost:18232/api/health; then break; fi
+            sleep 2
+          done
+          echo
+          curl -fsS http://localhost:18232/api/health
+          # Migrations ran and the initial admin was created
+          docker exec netignite test -f /opt/netignite/config/initial_admin_password_reset_token.txt
+          # The dashboard is served
+          curl -fsS -o /dev/null http://localhost:18232/auth/login
+          # The v1 import tool is in the image
+          docker exec netignite bun /opt/netignite/app/.output/import-v1.mjs --help
+      - name: Container log
+        if: always()
+        run: docker logs netignite || true
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 078aa9b..1b7a6b4 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -38,6 +38,22 @@ jobs:
       id-token: write
     
     steps:
+      # A stable image moves `latest`, which self-hosted servers pull: only main may publish one.
+      - name: Check version
+        env:
+          VERSION: ${{ inputs.version }}
+          PRE_RELEASE: ${{ inputs.pre_release }}
+          REF: ${{ github.ref }}
+        run: |
+          if ! [[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-(alpha|beta|rc|pre)\.[0-9]+)?$ ]]; then
+            echo "::error::Invalid version '$VERSION'. Use x.y.z or x.y.z-beta.n."
+            exit 1
+          fi
+          if [[ "$PRE_RELEASE" != "true" && "$REF" != "refs/heads/main" ]]; then
+            echo "::error::Only main can publish a stable image (tag 'latest'). Publish from $REF as a pre-release."
+            exit 1
+          fi
+
       - name: Checkout repository
         uses: actions/checkout@v4
 
@@ -48,7 +64,7 @@ jobs:
 
       - name: Install dependencies
         shell: bash
-        run: bun install
+        run: bun install --frozen-lockfile
       
       - name: Build Nuxt application
         run: bun run build
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 64b6ba2..19628d2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,76 +1,99 @@
 name: Create Release
 
+# Creates a GitHub release of the branch the workflow runs on and publishes its Docker image.
+# Pre-releases (a version like 2.0.0-beta.1, or the "pre-release" box) can run from any branch and
+# only push the versioned image tag. Stable releases must run from main; they also move `latest`.
+
 on:
   workflow_dispatch:
     inputs:
       version:
-        description: 'Release version Format: x.y.z-[alpha|beta|pre].n'
+        description: "Version: x.y.z, or x.y.z-alpha.n / -beta.n / -rc.n / -pre.n for a pre-release"
         required: true
       release_name:
-        description: 'Release title'
+        description: "Release title"
         required: true
       release_notes:
-        description: 'Release notes or changelog'
+        description: "Release notes or changelog"
         required: true
       prerelease:
-        description: 'Is this a pre-release?'
+        description: "Is this a pre-release? (Versions with a suffix always are.)"
         required: false
         default: false
         type: boolean
 
 jobs:
-  build:
+  check:
     runs-on: ubuntu-latest
-
+    outputs:
+      prerelease: ${{ steps.check.outputs.prerelease }}
     steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-
-    - name: Set up Bun
-      uses: oven-sh/setup-bun@v2
-      with:
-        bun-version: latest
-
-    - name: Install dependencies
-      run: bun install
-
-    - name: Test code
-      run: bun test
-
-    - name: Build Nuxt application
-      run: bun run build
-    
-    - name: Create Archive of .output
-      run: |
-        tar -czf app.tar.gz .output
+      - id: check
+        env:
+          VERSION: ${{ inputs.version }}
+          PRERELEASE: ${{ inputs.prerelease }}
+          REF: ${{ github.ref }}
+        run: |
+          if ! [[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-(alpha|beta|rc|pre)\.[0-9]+)?$ ]]; then
+            echo "::error::Invalid version '$VERSION'. Use x.y.z or x.y.z-beta.n."
+            exit 1
+          fi
+          prerelease=false
+          if [[ "$PRERELEASE" == "true" || "$VERSION" == *-* ]]; then prerelease=true; fi
+          if [[ "$prerelease" == "false" && "$REF" != "refs/heads/main" ]]; then
+            echo "::error::Stable releases move the image's 'latest' tag and can only be created from main. Use a pre-release version (e.g. $VERSION-beta.1) on $REF."
+            exit 1
+          fi
+          echo "prerelease=$prerelease" >> "$GITHUB_OUTPUT"
+          echo "Releasing v$VERSION from $REF (pre-release: $prerelease)"
 
-    - name: Upload build artifacts
-      uses: actions/upload-artifact@v4
-      with:
-        name: app
-        path: ./app.tar.gz
-        retention-days: 1  # Set to 1 day for temporary storage
+  build:
+    needs: check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - run: bun install --frozen-lockfile
+      - run: bun test
+      - run: bun run build
+      # The server applies the database migrations on startup, so they belong with the build.
+      - run: tar -czf app.tar.gz .output drizzle/migrations
+      - uses: actions/upload-artifact@v4
+        with:
+          name: app
+          path: ./app.tar.gz
+          retention-days: 1
 
   release:
-    needs: build
+    needs: [check, build]
     runs-on: ubuntu-latest
-
     permissions:
       contents: write
-
     steps:
-    - name: Download build artifacts
-      uses: actions/download-artifact@v4
-      with:
-        name: app
+      - uses: actions/download-artifact@v4
+        with:
+          name: app
+      - uses: ncipollo/release-action@v1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          tag: v${{ inputs.version }}
+          # Tag the commit this workflow runs on, not the default branch.
+          commit: ${{ github.sha }}
+          name: ${{ inputs.release_name }}
+          body: ${{ inputs.release_notes }}
+          prerelease: ${{ needs.check.outputs.prerelease }}
+          artifacts: ./app.tar.gz
 
-    - name: Create GitHub Release
-      id: create_release
-      uses: ncipollo/release-action@v1
-      with:
-        token: ${{ secrets.GITHUB_TOKEN }}
-        tag: v${{ github.event.inputs.version }}
-        name: ${{ github.event.inputs.release_name }}
-        body: ${{ github.event.inputs.release_notes }}
-        prerelease: ${{ github.event.inputs.prerelease }}
-        artifacts: ./app.tar.gz
\ No newline at end of file
+  docker:
+    needs: [check, release]
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    uses: ./.github/workflows/docker-publish.yml
+    with:
+      version: ${{ inputs.version }}
+      pre_release: ${{ needs.check.outputs.prerelease }}
+    secrets: inherit

From 852be284f3fe9aba1bc67d7964657f47a102f76f Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Tue, 20 Oct 2026 19:19:52 +0200
Subject: [PATCH 05/17] ci: run CI on v2, smoke-test the Docker image, make
 pre-releases safe

- CI also runs on pushes to v2 and builds the Docker image, starts it and checks health, the
  dashboard, the initial admin and the bundled v1 import tool.
- Create Release tags the commit it runs on (it used to tag the default branch), includes the
  database migrations in app.tar.gz, validates the version and publishes the Docker image.
  Versions with a suffix (2.0.0-beta.1) are always pre-releases.
- Publish Docker Images refuses to publish a stable image (which moves `latest`) from any
  branch other than main.
---
 .github/workflows/ci.yml             |  36 +++++++-
 .github/workflows/docker-publish.yml |  18 +++-
 .github/workflows/release.yml        | 121 ++++++++++++++++-----------
 3 files changed, 123 insertions(+), 52 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bcf774e..74b6d61 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,7 +2,7 @@ name: CI
 
 on:
   push:
-    branches: [main]
+    branches: [main, v2]
   pull_request:
   workflow_dispatch:
 
@@ -17,4 +17,36 @@ jobs:
       - run: bun install --frozen-lockfile
       - run: bun run check:ci
       - run: bun run typecheck
-      - run: bun test
\ No newline at end of file
+      - run: bun test
+
+  # Builds the Docker image like the release does and checks that it starts.
+  image:
+    needs: test
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - run: bun install --frozen-lockfile
+      - run: bun run build
+      - run: docker build -f docker/Dockerfile -t netignite-server:ci .
+      - name: Smoke test
+        run: |
+          docker run -d --name netignite -p 18232:18232 -e NETIGNITE_APP_URL=http://localhost:18232 netignite-server:ci
+          for i in $(seq 1 45); do
+            if curl -fsS http://localhost:18232/api/health; then break; fi
+            sleep 2
+          done
+          echo
+          curl -fsS http://localhost:18232/api/health
+          # Migrations ran and the initial admin was created
+          docker exec netignite test -f /opt/netignite/config/initial_admin_password_reset_token.txt
+          # The dashboard is served
+          curl -fsS -o /dev/null http://localhost:18232/auth/login
+          # The v1 import tool is in the image
+          docker exec netignite bun /opt/netignite/app/.output/import-v1.mjs --help
+      - name: Container log
+        if: always()
+        run: docker logs netignite || true
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 078aa9b..1b7a6b4 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -38,6 +38,22 @@ jobs:
       id-token: write
     
     steps:
+      # A stable image moves `latest`, which self-hosted servers pull: only main may publish one.
+      - name: Check version
+        env:
+          VERSION: ${{ inputs.version }}
+          PRE_RELEASE: ${{ inputs.pre_release }}
+          REF: ${{ github.ref }}
+        run: |
+          if ! [[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-(alpha|beta|rc|pre)\.[0-9]+)?$ ]]; then
+            echo "::error::Invalid version '$VERSION'. Use x.y.z or x.y.z-beta.n."
+            exit 1
+          fi
+          if [[ "$PRE_RELEASE" != "true" && "$REF" != "refs/heads/main" ]]; then
+            echo "::error::Only main can publish a stable image (tag 'latest'). Publish from $REF as a pre-release."
+            exit 1
+          fi
+
       - name: Checkout repository
         uses: actions/checkout@v4
 
@@ -48,7 +64,7 @@ jobs:
 
       - name: Install dependencies
         shell: bash
-        run: bun install
+        run: bun install --frozen-lockfile
       
       - name: Build Nuxt application
         run: bun run build
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 64b6ba2..19628d2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,76 +1,99 @@
 name: Create Release
 
+# Creates a GitHub release of the branch the workflow runs on and publishes its Docker image.
+# Pre-releases (a version like 2.0.0-beta.1, or the "pre-release" box) can run from any branch and
+# only push the versioned image tag. Stable releases must run from main; they also move `latest`.
+
 on:
   workflow_dispatch:
     inputs:
       version:
-        description: 'Release version Format: x.y.z-[alpha|beta|pre].n'
+        description: "Version: x.y.z, or x.y.z-alpha.n / -beta.n / -rc.n / -pre.n for a pre-release"
         required: true
       release_name:
-        description: 'Release title'
+        description: "Release title"
         required: true
       release_notes:
-        description: 'Release notes or changelog'
+        description: "Release notes or changelog"
         required: true
       prerelease:
-        description: 'Is this a pre-release?'
+        description: "Is this a pre-release? (Versions with a suffix always are.)"
         required: false
         default: false
         type: boolean
 
 jobs:
-  build:
+  check:
     runs-on: ubuntu-latest
-
+    outputs:
+      prerelease: ${{ steps.check.outputs.prerelease }}
     steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-
-    - name: Set up Bun
-      uses: oven-sh/setup-bun@v2
-      with:
-        bun-version: latest
-
-    - name: Install dependencies
-      run: bun install
-
-    - name: Test code
-      run: bun test
-
-    - name: Build Nuxt application
-      run: bun run build
-    
-    - name: Create Archive of .output
-      run: |
-        tar -czf app.tar.gz .output
+      - id: check
+        env:
+          VERSION: ${{ inputs.version }}
+          PRERELEASE: ${{ inputs.prerelease }}
+          REF: ${{ github.ref }}
+        run: |
+          if ! [[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-(alpha|beta|rc|pre)\.[0-9]+)?$ ]]; then
+            echo "::error::Invalid version '$VERSION'. Use x.y.z or x.y.z-beta.n."
+            exit 1
+          fi
+          prerelease=false
+          if [[ "$PRERELEASE" == "true" || "$VERSION" == *-* ]]; then prerelease=true; fi
+          if [[ "$prerelease" == "false" && "$REF" != "refs/heads/main" ]]; then
+            echo "::error::Stable releases move the image's 'latest' tag and can only be created from main. Use a pre-release version (e.g. $VERSION-beta.1) on $REF."
+            exit 1
+          fi
+          echo "prerelease=$prerelease" >> "$GITHUB_OUTPUT"
+          echo "Releasing v$VERSION from $REF (pre-release: $prerelease)"
 
-    - name: Upload build artifacts
-      uses: actions/upload-artifact@v4
-      with:
-        name: app
-        path: ./app.tar.gz
-        retention-days: 1  # Set to 1 day for temporary storage
+  build:
+    needs: check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - run: bun install --frozen-lockfile
+      - run: bun test
+      - run: bun run build
+      # The server applies the database migrations on startup, so they belong with the build.
+      - run: tar -czf app.tar.gz .output drizzle/migrations
+      - uses: actions/upload-artifact@v4
+        with:
+          name: app
+          path: ./app.tar.gz
+          retention-days: 1
 
   release:
-    needs: build
+    needs: [check, build]
     runs-on: ubuntu-latest
-
     permissions:
       contents: write
-
     steps:
-    - name: Download build artifacts
-      uses: actions/download-artifact@v4
-      with:
-        name: app
+      - uses: actions/download-artifact@v4
+        with:
+          name: app
+      - uses: ncipollo/release-action@v1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          tag: v${{ inputs.version }}
+          # Tag the commit this workflow runs on, not the default branch.
+          commit: ${{ github.sha }}
+          name: ${{ inputs.release_name }}
+          body: ${{ inputs.release_notes }}
+          prerelease: ${{ needs.check.outputs.prerelease }}
+          artifacts: ./app.tar.gz
 
-    - name: Create GitHub Release
-      id: create_release
-      uses: ncipollo/release-action@v1
-      with:
-        token: ${{ secrets.GITHUB_TOKEN }}
-        tag: v${{ github.event.inputs.version }}
-        name: ${{ github.event.inputs.release_name }}
-        body: ${{ github.event.inputs.release_notes }}
-        prerelease: ${{ github.event.inputs.prerelease }}
-        artifacts: ./app.tar.gz
\ No newline at end of file
+  docker:
+    needs: [check, release]
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    uses: ./.github/workflows/docker-publish.yml
+    with:
+      version: ${{ inputs.version }}
+      pre_release: ${{ needs.check.outputs.prerelease }}
+    secrets: inherit

From fd0afc126362722476134210493e11a735c92045 Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Tue, 20 Oct 2026 23:55:12 +0200
Subject: [PATCH 06/17] feat: ESP32 web installer with firmware catalog synced
 from GitHub

- Firmware catalog: syncs Agent-ESP32 GitHub releases (release.json + flash images) into
  NETIGNITE_FIRMWARE_DIR on start and every 6 hours, checks size and SHA-256 of every file and,
  with NETIGNITE_FIRMWARE_PUBLIC_KEY, the ECDSA signature of the app image. Keeps the 5 newest
  releases plus the newest stable one.
- NVS v2 image writer, byte-identical to Espressif's nvs_partition_gen.py (fixtures generated
  with esp-idf-nvs-partition-gen 0.3.0).
- POST /v1/agents/:id/flash-image: NVS image with the server URL, the agent's name and a new
  single-use enrollment token (no-store).
- GET /v1/firmware, GET /v1/firmware/:version/files/:file, GET /v1/admin/firmware,
  POST /v1/admin/firmware/sync; admin setting firmware_channel (stable/prerelease).
- Dashboard: agent Install tab with ESP Web Tools 10.4.0 (manifest and all parts as blob: URLs,
  parts checked against their SHA-256 in the browser), firmware section in Server Settings.
---
 .gitattributes                                |    1 +
 AGENTS.md                                     |   17 +-
 README.md                                     |   25 +-
 app/api-client/index.ts                       |    4 +-
 app/api-client/sdk.gen.ts                     |   59 +-
 app/api-client/types.gen.ts                   |  212 +++
 app/api-client/zod.gen.ts                     |  114 +-
 app/pages/dashboard/admin/settings.vue        |  124 ++
 app/pages/dashboard/agents/[agent_id].vue     |   25 +-
 .../dashboard/agents/[agent_id]/index.vue     |   16 +-
 .../dashboard/agents/[agent_id]/install.vue   |  302 +++++
 app/utils/espInstaller.ts                     |   86 ++
 bun.lock                                      |   27 +
 docker/Dockerfile                             |    3 +
 docker/docker-compose.yml                     |    4 +
 .../migrations/0001_glorious_silver_fox.sql   |   10 +
 drizzle/migrations/meta/0001_snapshot.json    | 1133 +++++++++++++++++
 drizzle/migrations/meta/_journal.json         |    7 +
 example.env                                   |    9 +
 nuxt.config.ts                                |    7 +
 package.json                                  |    9 +-
 server/lib/api/utils/metadata.ts              |   21 +-
 .../api/utils/shared-models/netigniteData.ts  |   46 +
 server/lib/api/versions/v1/docs/index.ts      |    2 +
 server/lib/api/versions/v1/index.ts           |   18 +-
 .../v1/routes/admin/firmware/index.ts         |   78 ++
 .../lib/api/versions/v1/routes/admin/index.ts |    1 +
 .../v1/routes/admin/settings/index.ts         |    3 +
 .../api/versions/v1/routes/agents/index.ts    |   57 +
 .../api/versions/v1/routes/agents/model.ts    |   30 +-
 .../api/versions/v1/routes/firmware/index.ts  |   94 ++
 .../api/versions/v1/routes/firmware/model.ts  |   40 +
 server/lib/db/index.ts                        |    2 +
 server/lib/db/schema.ts                       |   19 +
 server/lib/firmware/catalog.ts                |  363 ++++++
 server/lib/firmware/nvs.ts                    |  205 +++
 server/lib/firmware/provisioning.ts           |   38 +
 server/lib/utils/config.ts                    |   10 +
 server/lib/utils/cron.ts                      |   19 +-
 server/plugins/startup.ts                     |   14 +
 tests/firmware.test.ts                        |  428 +++++++
 tests/fixtures/nvs/multipage.bin              |  Bin 0 -> 20480 bytes
 tests/fixtures/nvs/multipage.csv              |   48 +
 tests/fixtures/nvs/provision.bin              |  Bin 0 -> 20480 bytes
 tests/fixtures/nvs/provision.csv              |    5 +
 tests/helpers/preload.ts                      |   10 +-
 tests/nvs.test.ts                             |   73 ++
 47 files changed, 3786 insertions(+), 32 deletions(-)
 create mode 100644 app/pages/dashboard/agents/[agent_id]/install.vue
 create mode 100644 app/utils/espInstaller.ts
 create mode 100644 drizzle/migrations/0001_glorious_silver_fox.sql
 create mode 100644 drizzle/migrations/meta/0001_snapshot.json
 create mode 100644 server/lib/api/versions/v1/routes/admin/firmware/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/firmware/index.ts
 create mode 100644 server/lib/api/versions/v1/routes/firmware/model.ts
 create mode 100644 server/lib/firmware/catalog.ts
 create mode 100644 server/lib/firmware/nvs.ts
 create mode 100644 server/lib/firmware/provisioning.ts
 create mode 100644 tests/firmware.test.ts
 create mode 100644 tests/fixtures/nvs/multipage.bin
 create mode 100644 tests/fixtures/nvs/multipage.csv
 create mode 100644 tests/fixtures/nvs/provision.bin
 create mode 100644 tests/fixtures/nvs/provision.csv
 create mode 100644 tests/nvs.test.ts

diff --git a/.gitattributes b/.gitattributes
index 7df4379..b3c8484 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -4,3 +4,4 @@
 *.png binary
 *.ico binary
 *.woff2 binary
+*.bin binary
diff --git a/AGENTS.md b/AGENTS.md
index a8d29d5..dd7d91b 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -50,5 +50,18 @@ Follow the LeiCraftMC Style Guides: https://github.com/LeiCraftMC/Style-Guides.
   on it.
 - `scripts/import-v1.ts` imports a NetIgnite v1 database (bundled into `.output/import-v1.mjs` by
   `bun run build`).
-- Tests: `tests/netignite.test.ts` (API + gateway with `tests/helpers/fake-agent.ts`) and
-  `tests/v1-import.test.ts`.
+- **Firmware** (`server/lib/firmware/`): `FirmwareCatalog` syncs Agent-ESP32 GitHub releases
+  (`release.json` + flash images, SHA-256 and optional ECDSA signature checks) into
+  `NETIGNITE_FIRMWARE_DIR`; no uploads. `NVSImage` writes ESP-IDF NVS v2 images byte-identical to
+  Espressif's `nvs_partition_gen.py` (fixtures in `tests/fixtures/nvs/`); `ProvisioningImage` only
+  writes the keys a release lists in `release.json` → `nvs.keys`. The firmware reads these NVS
+  keys, so change them together with Agent-ESP32's `src/Config.h`.
+- **Web installer** (`app/pages/dashboard/agents/[agent_id]/install.vue`): imports ESP Web Tools'
+  prebuilt bundle `esp-web-tools/dist/web/install-button.js`; the package's ES modules need an
+  older `@material/web` than npm resolves. All manifest parts are `blob:` URLs, so the enrollment
+  token never appears in a URL.
+- Run Biome's autofix only on the files you changed: on the whole tree it rewrites `@ts-ignore` to
+  `@ts-expect-error`, which breaks `nuxt typecheck`.
+- Tests: `tests/netignite.test.ts` (API + gateway with `tests/helpers/fake-agent.ts`),
+  `tests/v1-import.test.ts`, `tests/firmware.test.ts` (catalog against a fake GitHub, flash image)
+  and `tests/nvs.test.ts`.
diff --git a/README.md b/README.md
index 2133ad2..4c80460 100644
--- a/README.md
+++ b/README.md
@@ -29,6 +29,28 @@ The server listens on port **18232**. On first start it creates the user `admin`
 password-reset link to `config/initial_admin_password_reset_token.txt` (also printed to the log).
 Set `NETIGNITE_APP_URL` to the server's public URL; production logins need HTTPS.
 
+### ESP32 web installer
+
+Agents → an ESP32 agent → **Install** flashes the NetIgnite firmware from the browser (ESP Web
+Tools: Chrome, Edge or Firefox 151+ on a computer) and sets up Wi-Fi over Improv; the Wi-Fi
+password goes from the browser to the ESP32 only. Browsers allow USB access only on HTTPS pages
+(or `localhost`), so serve NetIgnite over HTTPS.
+
+The firmware comes from the GitHub releases of
+[Agent-ESP32](https://github.com/NetIgnite-project/Agent-ESP32): the server downloads the newest
+releases into `data/firmware/` on start and every 6 hours (admins: Server Settings → Sync now) and
+checks each file's SHA-256. The flash image also holds the agent's setup data: the server URL, its
+name and a single-use enrollment token (15 minutes). The agent generates its long-term secret
+itself when it enrolls.
+
+| Variable | Default | |
+| --- | --- | --- |
+| `NETIGNITE_FIRMWARE_SYNC` | `true` | Sync automatically; `false` for offline servers |
+| `NETIGNITE_FIRMWARE_REPO` | `NetIgnite-project/Agent-ESP32` | GitHub repository to sync from |
+| `NETIGNITE_FIRMWARE_DIR` | `./data/firmware` | Where releases are stored |
+| `NETIGNITE_FIRMWARE_PUBLIC_KEY` | — | PEM ECDSA P-256 key; then only signed releases are accepted |
+| `NETIGNITE_GITHUB_TOKEN` | — | Raises GitHub's API rate limit |
+
 ### Upgrading from v1
 
 The v2 image uses the same `/opt/netignite/data` and `/opt/netignite/config` volumes as v1. Its
@@ -81,7 +103,8 @@ bun run api-client:generate
 | --- | --- |
 | `server/lib/agents/` | Agent protocol, credentials, gateway and live connection registry |
 | `server/lib/devices/` | Device permissions (sharing roles), status polling, power actions |
-| `server/lib/api/versions/v1/routes/` | REST routes (`agents`, `devices`, `auth`, `account`, `admin`) |
+| `server/lib/firmware/` | Firmware catalog (GitHub release sync), NVS image writer for the web installer |
+| `server/lib/api/versions/v1/routes/` | REST routes (`agents`, `devices`, `firmware`, `auth`, `account`, `admin`) |
 | `server/lib/migration/v1Import.ts` | v1 database import |
 | `app/pages/dashboard/` | Dashboard: overview, devices, agents, settings, admin |
 
diff --git a/app/api-client/index.ts b/app/api-client/index.ts
index 894822f..b5951b3 100644
--- a/app/api-client/index.ts
+++ b/app/api-client/index.ts
@@ -1,4 +1,4 @@
 // This file is auto-generated by @hey-api/openapi-ts
 
-export { deleteAccount, deleteAccountApikeysByApiKeyId, deleteAdminUsersByUserId, deleteAgentsByAgentId, deleteDevicesByDeviceId, deleteDevicesByDeviceIdFavorite, deleteDevicesByDeviceIdSharesByUserId, getAccount, getAccountApikeys, getAccountApikeysByApiKeyId, getAccountPreferences, getAccountPreferencesOnboarding, getAdminSettings, getAdminUsers, getAdminUsersByUserId, getAgents, getAgentsByAgentId, getAuthRegistration, getAuthSession, getDevices, getDevicesByDeviceId, getDevicesByDeviceIdShares, type Options, postAccountApikeys, postAdminUsers, postAgents, postAgentsByAgentIdEnrollments, postAgentsByAgentIdRevoke, postAgentsEnroll, postAuthLogin, postAuthLogout, postAuthResetPassword, postAuthResetPasswordRequest, postAuthSignup, postDevices, postDevicesByDeviceIdPowerOn, postDevicesByDeviceIdReboot, postDevicesByDeviceIdShares, postDevicesByDeviceIdShutdown, postDevicesByDeviceIdStatus, putAccount, putAccountPassword, putAccountPreferencesOnboarding, putAdminSettings, putAdminUsersByUserId, putAdminUsersByUserIdPassword, putAgentsByAgentId, putDevicesByDeviceId, putDevicesByDeviceIdFavorite, putDevicesByDeviceIdSharesByUserId } from './sdk.gen';
-export type { ClientOptions, DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdErrors, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountApikeysByApiKeyIdResponses, DeleteAccountData, DeleteAccountError, DeleteAccountErrors, DeleteAccountResponse, DeleteAccountResponses, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdErrors, DeleteAdminUsersByUserIdResponse, DeleteAdminUsersByUserIdResponses, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdErrors, DeleteAgentsByAgentIdResponse, DeleteAgentsByAgentIdResponses, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdErrors, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteErrors, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdFavoriteResponses, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdResponses, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdErrors, DeleteDevicesByDeviceIdSharesByUserIdResponse, DeleteDevicesByDeviceIdSharesByUserIdResponses, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdErrors, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysByApiKeyIdResponses, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountApikeysResponses, GetAccountData, GetAccountError, GetAccountErrors, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesOnboardingResponses, GetAccountPreferencesResponse, GetAccountPreferencesResponses, GetAccountResponse, GetAccountResponses, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminSettingsResponses, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdErrors, GetAdminUsersByUserIdResponse, GetAdminUsersByUserIdResponses, GetAdminUsersData, GetAdminUsersError, GetAdminUsersErrors, GetAdminUsersResponse, GetAdminUsersResponses, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdErrors, GetAgentsByAgentIdResponse, GetAgentsByAgentIdResponses, GetAgentsData, GetAgentsResponse, GetAgentsResponses, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthRegistrationResponses, GetAuthSessionData, GetAuthSessionError, GetAuthSessionErrors, GetAuthSessionResponse, GetAuthSessionResponses, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdErrors, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdResponses, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesErrors, GetDevicesByDeviceIdSharesResponse, GetDevicesByDeviceIdSharesResponses, GetDevicesData, GetDevicesResponse, GetDevicesResponses, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysErrors, PostAccountApikeysResponse, PostAccountApikeysResponses, PostAdminUsersData, PostAdminUsersError, PostAdminUsersErrors, PostAdminUsersResponse, PostAdminUsersResponses, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsErrors, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdEnrollmentsResponses, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeErrors, PostAgentsByAgentIdRevokeResponse, PostAgentsByAgentIdRevokeResponses, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollErrors, PostAgentsEnrollResponse, PostAgentsEnrollResponses, PostAgentsError, PostAgentsErrors, PostAgentsResponse, PostAgentsResponses, PostAuthLoginData, PostAuthLoginError, PostAuthLoginErrors, PostAuthLoginResponse, PostAuthLoginResponses, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutErrors, PostAuthLogoutResponse, PostAuthLogoutResponses, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordErrors, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestErrors, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordRequestResponses, PostAuthResetPasswordResponse, PostAuthResetPasswordResponses, PostAuthSignupData, PostAuthSignupError, PostAuthSignupErrors, PostAuthSignupResponse, PostAuthSignupResponses, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnErrors, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdPowerOnResponses, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootErrors, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdRebootResponses, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesErrors, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdSharesResponses, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownErrors, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdShutdownResponses, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusErrors, PostDevicesByDeviceIdStatusResponse, PostDevicesByDeviceIdStatusResponses, PostDevicesData, PostDevicesError, PostDevicesErrors, PostDevicesResponse, PostDevicesResponses, PutAccountData, PutAccountError, PutAccountErrors, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordErrors, PutAccountPasswordResponse, PutAccountPasswordResponses, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingErrors, PutAccountPreferencesOnboardingResponse, PutAccountPreferencesOnboardingResponses, PutAccountResponse, PutAccountResponses, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsErrors, PutAdminSettingsResponse, PutAdminSettingsResponses, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdErrors, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordErrors, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdPasswordResponses, PutAdminUsersByUserIdResponse, PutAdminUsersByUserIdResponses, PutAgentsByAgentIdData, PutAgentsByAgentIdError, PutAgentsByAgentIdErrors, PutAgentsByAgentIdResponse, PutAgentsByAgentIdResponses, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdErrors, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteErrors, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdFavoriteResponses, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdResponses, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdErrors, PutDevicesByDeviceIdSharesByUserIdResponse, PutDevicesByDeviceIdSharesByUserIdResponses } from './types.gen';
+export { deleteAccount, deleteAccountApikeysByApiKeyId, deleteAdminUsersByUserId, deleteAgentsByAgentId, deleteDevicesByDeviceId, deleteDevicesByDeviceIdFavorite, deleteDevicesByDeviceIdSharesByUserId, getAccount, getAccountApikeys, getAccountApikeysByApiKeyId, getAccountPreferences, getAccountPreferencesOnboarding, getAdminFirmware, getAdminSettings, getAdminUsers, getAdminUsersByUserId, getAgents, getAgentsByAgentId, getAuthRegistration, getAuthSession, getDevices, getDevicesByDeviceId, getDevicesByDeviceIdShares, getFirmware, getFirmwareByVersionFilesByFile, type Options, postAccountApikeys, postAdminFirmwareSync, postAdminUsers, postAgents, postAgentsByAgentIdEnrollments, postAgentsByAgentIdFlashImage, postAgentsByAgentIdRevoke, postAgentsEnroll, postAuthLogin, postAuthLogout, postAuthResetPassword, postAuthResetPasswordRequest, postAuthSignup, postDevices, postDevicesByDeviceIdPowerOn, postDevicesByDeviceIdReboot, postDevicesByDeviceIdShares, postDevicesByDeviceIdShutdown, postDevicesByDeviceIdStatus, putAccount, putAccountPassword, putAccountPreferencesOnboarding, putAdminSettings, putAdminUsersByUserId, putAdminUsersByUserIdPassword, putAgentsByAgentId, putDevicesByDeviceId, putDevicesByDeviceIdFavorite, putDevicesByDeviceIdSharesByUserId } from './sdk.gen';
+export type { ClientOptions, DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdErrors, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountApikeysByApiKeyIdResponses, DeleteAccountData, DeleteAccountError, DeleteAccountErrors, DeleteAccountResponse, DeleteAccountResponses, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdErrors, DeleteAdminUsersByUserIdResponse, DeleteAdminUsersByUserIdResponses, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdErrors, DeleteAgentsByAgentIdResponse, DeleteAgentsByAgentIdResponses, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdErrors, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteErrors, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdFavoriteResponses, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdResponses, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdErrors, DeleteDevicesByDeviceIdSharesByUserIdResponse, DeleteDevicesByDeviceIdSharesByUserIdResponses, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdErrors, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysByApiKeyIdResponses, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountApikeysResponses, GetAccountData, GetAccountError, GetAccountErrors, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesOnboardingResponses, GetAccountPreferencesResponse, GetAccountPreferencesResponses, GetAccountResponse, GetAccountResponses, GetAdminFirmwareData, GetAdminFirmwareResponse, GetAdminFirmwareResponses, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminSettingsResponses, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdErrors, GetAdminUsersByUserIdResponse, GetAdminUsersByUserIdResponses, GetAdminUsersData, GetAdminUsersError, GetAdminUsersErrors, GetAdminUsersResponse, GetAdminUsersResponses, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdErrors, GetAgentsByAgentIdResponse, GetAgentsByAgentIdResponses, GetAgentsData, GetAgentsResponse, GetAgentsResponses, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthRegistrationResponses, GetAuthSessionData, GetAuthSessionError, GetAuthSessionErrors, GetAuthSessionResponse, GetAuthSessionResponses, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdErrors, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdResponses, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesErrors, GetDevicesByDeviceIdSharesResponse, GetDevicesByDeviceIdSharesResponses, GetDevicesData, GetDevicesResponse, GetDevicesResponses, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileError, GetFirmwareByVersionFilesByFileErrors, GetFirmwareByVersionFilesByFileResponse, GetFirmwareByVersionFilesByFileResponses, GetFirmwareData, GetFirmwareResponse, GetFirmwareResponses, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysErrors, PostAccountApikeysResponse, PostAccountApikeysResponses, PostAdminFirmwareSyncData, PostAdminFirmwareSyncError, PostAdminFirmwareSyncErrors, PostAdminFirmwareSyncResponse, PostAdminFirmwareSyncResponses, PostAdminUsersData, PostAdminUsersError, PostAdminUsersErrors, PostAdminUsersResponse, PostAdminUsersResponses, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsErrors, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdEnrollmentsResponses, PostAgentsByAgentIdFlashImageData, PostAgentsByAgentIdFlashImageError, PostAgentsByAgentIdFlashImageErrors, PostAgentsByAgentIdFlashImageResponse, PostAgentsByAgentIdFlashImageResponses, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeErrors, PostAgentsByAgentIdRevokeResponse, PostAgentsByAgentIdRevokeResponses, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollErrors, PostAgentsEnrollResponse, PostAgentsEnrollResponses, PostAgentsError, PostAgentsErrors, PostAgentsResponse, PostAgentsResponses, PostAuthLoginData, PostAuthLoginError, PostAuthLoginErrors, PostAuthLoginResponse, PostAuthLoginResponses, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutErrors, PostAuthLogoutResponse, PostAuthLogoutResponses, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordErrors, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestErrors, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordRequestResponses, PostAuthResetPasswordResponse, PostAuthResetPasswordResponses, PostAuthSignupData, PostAuthSignupError, PostAuthSignupErrors, PostAuthSignupResponse, PostAuthSignupResponses, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnErrors, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdPowerOnResponses, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootErrors, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdRebootResponses, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesErrors, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdSharesResponses, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownErrors, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdShutdownResponses, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusErrors, PostDevicesByDeviceIdStatusResponse, PostDevicesByDeviceIdStatusResponses, PostDevicesData, PostDevicesError, PostDevicesErrors, PostDevicesResponse, PostDevicesResponses, PutAccountData, PutAccountError, PutAccountErrors, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordErrors, PutAccountPasswordResponse, PutAccountPasswordResponses, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingErrors, PutAccountPreferencesOnboardingResponse, PutAccountPreferencesOnboardingResponses, PutAccountResponse, PutAccountResponses, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsErrors, PutAdminSettingsResponse, PutAdminSettingsResponses, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdErrors, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordErrors, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdPasswordResponses, PutAdminUsersByUserIdResponse, PutAdminUsersByUserIdResponses, PutAgentsByAgentIdData, PutAgentsByAgentIdError, PutAgentsByAgentIdErrors, PutAgentsByAgentIdResponse, PutAgentsByAgentIdResponses, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdErrors, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteErrors, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdFavoriteResponses, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdResponses, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdErrors, PutDevicesByDeviceIdSharesByUserIdResponse, PutDevicesByDeviceIdSharesByUserIdResponses } from './types.gen';
diff --git a/app/api-client/sdk.gen.ts b/app/api-client/sdk.gen.ts
index 7992f8d..05b30fb 100644
--- a/app/api-client/sdk.gen.ts
+++ b/app/api-client/sdk.gen.ts
@@ -3,7 +3,7 @@
 
 import type { Client, ClientMeta, Composable, Options as Options2, RequestResult, TDataShape } from './client';
 import { client } from './client.gen';
-import type { DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountData, DeleteAccountError, DeleteAccountResponse, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdResponse, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdResponse, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdResponse, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountData, GetAccountError, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesResponse, GetAccountResponse, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdResponse, GetAdminUsersData, GetAdminUsersError, GetAdminUsersResponse, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdResponse, GetAgentsData, GetAgentsResponse, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthSessionData, GetAuthSessionError, GetAuthSessionResponse, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesResponse, GetDevicesData, GetDevicesResponse, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysResponse, PostAdminUsersData, PostAdminUsersError, PostAdminUsersResponse, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeResponse, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollResponse, PostAgentsError, PostAgentsResponse, PostAuthLoginData, PostAuthLoginError, PostAuthLoginResponse, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutResponse, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordResponse, PostAuthSignupData, PostAuthSignupError, PostAuthSignupResponse, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusResponse, PostDevicesData, PostDevicesError, PostDevicesResponse, PutAccountData, PutAccountError, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordResponse, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingResponse, PutAccountResponse, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsResponse, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdResponse, PutAgentsByAgentIdData, PutAgentsByAgentIdError, PutAgentsByAgentIdResponse, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdResponse } from './types.gen';
+import type { DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountData, DeleteAccountError, DeleteAccountResponse, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdResponse, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdResponse, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdResponse, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountData, GetAccountError, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesResponse, GetAccountResponse, GetAdminFirmwareData, GetAdminFirmwareResponse, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdResponse, GetAdminUsersData, GetAdminUsersError, GetAdminUsersResponse, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdResponse, GetAgentsData, GetAgentsResponse, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthSessionData, GetAuthSessionError, GetAuthSessionResponse, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesResponse, GetDevicesData, GetDevicesResponse, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileError, GetFirmwareByVersionFilesByFileResponse, GetFirmwareData, GetFirmwareResponse, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysResponse, PostAdminFirmwareSyncData, PostAdminFirmwareSyncError, PostAdminFirmwareSyncResponse, PostAdminUsersData, PostAdminUsersError, PostAdminUsersResponse, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdFlashImageData, PostAgentsByAgentIdFlashImageError, PostAgentsByAgentIdFlashImageResponse, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeResponse, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollResponse, PostAgentsError, PostAgentsResponse, PostAuthLoginData, PostAuthLoginError, PostAuthLoginResponse, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutResponse, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordResponse, PostAuthSignupData, PostAuthSignupError, PostAuthSignupResponse, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusResponse, PostDevicesData, PostDevicesError, PostDevicesResponse, PutAccountData, PutAccountError, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordResponse, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingResponse, PutAccountResponse, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsResponse, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdResponse, PutAgentsByAgentIdData, PutAgentsByAgentIdError, PutAgentsByAgentIdResponse, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdResponse } from './types.gen';
 
 export type Options<TComposable extends Composable = '$fetch', TData extends TDataShape = TDataShape, ResT = unknown, DefaultT = undefined> = Options2<TComposable, TData, ResT, DefaultT> & {
     /**
@@ -341,6 +341,26 @@ export const putAdminSettings = <TComposable extends Composable = '$fetch', Defa
     }
 });
 
+/**
+ * Get the firmware sync state
+ */
+export const getAdminFirmware = <TComposable extends Composable = '$fetch', DefaultT extends GetAdminFirmwareResponse = GetAdminFirmwareResponse>(options: Options<TComposable, GetAdminFirmwareData, GetAdminFirmwareResponse, DefaultT>): RequestResult<TComposable, GetAdminFirmwareResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAdminFirmwareResponse | DefaultT, unknown, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/admin/firmware',
+    ...options
+});
+
+/**
+ * Sync firmware releases now
+ *
+ * Checks GitHub for new firmware releases and downloads them.
+ */
+export const postAdminFirmwareSync = <TComposable extends Composable = '$fetch', DefaultT extends PostAdminFirmwareSyncResponse = PostAdminFirmwareSyncResponse>(options: Options<TComposable, PostAdminFirmwareSyncData, PostAdminFirmwareSyncResponse, DefaultT>): RequestResult<TComposable, PostAdminFirmwareSyncResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAdminFirmwareSyncResponse | DefaultT, PostAdminFirmwareSyncError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/admin/firmware/sync',
+    ...options
+});
+
 /**
  * Enroll an agent
  *
@@ -436,6 +456,21 @@ export const postAgentsByAgentIdRevoke = <TComposable extends Composable = '$fet
     ...options
 });
 
+/**
+ * Create an ESP32 flash image
+ *
+ * Creates the NVS image the web installer flashes together with the firmware: the server URL, the agent's name and a new single-use enrollment token (valid 15 minutes; older unused tokens stop working). The agent enrolls with it on its first connection, which replaces its current credential.
+ */
+export const postAgentsByAgentIdFlashImage = <TComposable extends Composable = '$fetch', DefaultT extends PostAgentsByAgentIdFlashImageResponse = PostAgentsByAgentIdFlashImageResponse>(options: Options<TComposable, PostAgentsByAgentIdFlashImageData, PostAgentsByAgentIdFlashImageResponse, DefaultT>): RequestResult<TComposable, PostAgentsByAgentIdFlashImageResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAgentsByAgentIdFlashImageResponse | DefaultT, PostAgentsByAgentIdFlashImageError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}/flash-image',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
 /**
  * List devices
  *
@@ -604,3 +639,25 @@ export const putDevicesByDeviceIdSharesByUserId = <TComposable extends Composabl
         ...options.headers
     }
 });
+
+/**
+ * List firmware releases
+ *
+ * ESP32 firmware releases available for the web installer and OTA updates, newest first. They are synced from the GitHub releases of the Agent-ESP32 repository.
+ */
+export const getFirmware = <TComposable extends Composable = '$fetch', DefaultT extends GetFirmwareResponse = GetFirmwareResponse>(options: Options<TComposable, GetFirmwareData, GetFirmwareResponse, DefaultT>): RequestResult<TComposable, GetFirmwareResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetFirmwareResponse | DefaultT, unknown, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/firmware',
+    ...options
+});
+
+/**
+ * Download a firmware file
+ *
+ * A flash image (or the signature) of a synced release, for the web installer.
+ */
+export const getFirmwareByVersionFilesByFile = <TComposable extends Composable = '$fetch', DefaultT extends GetFirmwareByVersionFilesByFileResponse = GetFirmwareByVersionFilesByFileResponse>(options: Options<TComposable, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileResponse, DefaultT>): RequestResult<TComposable, GetFirmwareByVersionFilesByFileResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetFirmwareByVersionFilesByFileResponse | DefaultT, GetFirmwareByVersionFilesByFileError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/firmware/{version}/files/{file}',
+    ...options
+});
diff --git a/app/api-client/types.gen.ts b/app/api-client/types.gen.ts
index edd662b..836f1ad 100644
--- a/app/api-client/types.gen.ts
+++ b/app/api-client/types.gen.ts
@@ -1065,6 +1065,7 @@ export type GetAdminSettingsResponses = {
         message: 'Settings retrieved';
         data: {
             registration_enabled: boolean;
+            firmware_channel: 'stable' | 'prerelease';
         };
     };
 };
@@ -1074,6 +1075,7 @@ export type GetAdminSettingsResponse = GetAdminSettingsResponses[keyof GetAdminS
 export type PutAdminSettingsData = {
     body?: {
         registration_enabled?: boolean;
+        firmware_channel?: 'stable' | 'prerelease';
     };
     path?: never;
     query?: never;
@@ -1103,12 +1105,90 @@ export type PutAdminSettingsResponses = {
         message: 'Settings updated';
         data: {
             registration_enabled: boolean;
+            firmware_channel: 'stable' | 'prerelease';
         };
     };
 };
 
 export type PutAdminSettingsResponse = PutAdminSettingsResponses[keyof PutAdminSettingsResponses];
 
+export type GetAdminFirmwareData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/admin/firmware';
+};
+
+export type GetAdminFirmwareResponses = {
+    /**
+     * Sync state retrieved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Sync state retrieved';
+        data: {
+            enabled: boolean;
+            repo: string;
+            signature_required: boolean;
+            last_run_at: number | null;
+            last_success_at: number | null;
+            error: string | null;
+        };
+    };
+};
+
+export type GetAdminFirmwareResponse = GetAdminFirmwareResponses[keyof GetAdminFirmwareResponses];
+
+export type PostAdminFirmwareSyncData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/admin/firmware/sync';
+};
+
+export type PostAdminFirmwareSyncErrors = {
+    /**
+     * GitHub couldn't be reached or answered with an error
+     */
+    502: {
+        success: false;
+        code: 502;
+        message: 'GitHub couldn\'t be reached or answered with an error';
+    };
+};
+
+export type PostAdminFirmwareSyncError = PostAdminFirmwareSyncErrors[keyof PostAdminFirmwareSyncErrors];
+
+export type PostAdminFirmwareSyncResponses = {
+    /**
+     * Sync finished
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Sync finished';
+        data: {
+            added: Array<string>;
+            removed: Array<string>;
+            skipped: Array<{
+                version: string;
+                reason: string;
+            }>;
+            state: {
+                enabled: boolean;
+                repo: string;
+                signature_required: boolean;
+                last_run_at: number | null;
+                last_success_at: number | null;
+                error: string | null;
+            };
+        };
+    };
+};
+
+export type PostAdminFirmwareSyncResponse = PostAdminFirmwareSyncResponses[keyof PostAdminFirmwareSyncResponses];
+
 export type PostAgentsEnrollData = {
     body: {
         enrollment_token: string;
@@ -1521,6 +1601,58 @@ export type PostAgentsByAgentIdRevokeResponses = {
 
 export type PostAgentsByAgentIdRevokeResponse = PostAgentsByAgentIdRevokeResponses[keyof PostAgentsByAgentIdRevokeResponses];
 
+export type PostAgentsByAgentIdFlashImageData = {
+    body: {
+        version: string;
+        server_url?: string;
+    };
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}/flash-image';
+};
+
+export type PostAgentsByAgentIdFlashImageErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Agent or firmware release not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent or firmware release not found';
+    };
+};
+
+export type PostAgentsByAgentIdFlashImageError = PostAgentsByAgentIdFlashImageErrors[keyof PostAgentsByAgentIdFlashImageErrors];
+
+export type PostAgentsByAgentIdFlashImageResponses = {
+    /**
+     * Flash image created
+     */
+    201: {
+        success: true;
+        code: 201;
+        message: 'Flash image created';
+        data: {
+            image: string;
+            offset: number;
+            server_url: string;
+            expires_at: number;
+        };
+    };
+};
+
+export type PostAgentsByAgentIdFlashImageResponse = PostAgentsByAgentIdFlashImageResponses[keyof PostAgentsByAgentIdFlashImageResponses];
+
 export type GetDevicesData = {
     body?: never;
     path?: never;
@@ -2540,3 +2672,83 @@ export type PutDevicesByDeviceIdSharesByUserIdResponses = {
 };
 
 export type PutDevicesByDeviceIdSharesByUserIdResponse = PutDevicesByDeviceIdSharesByUserIdResponses[keyof PutDevicesByDeviceIdSharesByUserIdResponses];
+
+export type GetFirmwareData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/firmware';
+};
+
+export type GetFirmwareResponses = {
+    /**
+     * Firmware releases retrieved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Firmware releases retrieved';
+        data: {
+            channel: 'stable' | 'prerelease';
+            recommended: string | null;
+            releases: Array<{
+                version: string;
+                prerelease: boolean;
+                published_at: number;
+                release_url: string;
+                notes: string;
+                signature_verified: boolean;
+                chip_family: string;
+                parts: Array<{
+                    file: string;
+                    offset: number;
+                    size: number;
+                    sha256: string;
+                }>;
+                nvs_offset: number;
+            }>;
+        };
+    };
+};
+
+export type GetFirmwareResponse = GetFirmwareResponses[keyof GetFirmwareResponses];
+
+export type GetFirmwareByVersionFilesByFileData = {
+    body?: never;
+    path: {
+        version: string;
+        file: string;
+    };
+    query?: never;
+    url: '/firmware/{version}/files/{file}';
+};
+
+export type GetFirmwareByVersionFilesByFileErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Unknown release or file
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Unknown release or file';
+    };
+};
+
+export type GetFirmwareByVersionFilesByFileError = GetFirmwareByVersionFilesByFileErrors[keyof GetFirmwareByVersionFilesByFileErrors];
+
+export type GetFirmwareByVersionFilesByFileResponses = {
+    /**
+     * The file
+     */
+    200: Blob | File;
+};
+
+export type GetFirmwareByVersionFilesByFileResponse = GetFirmwareByVersionFilesByFileResponses[keyof GetFirmwareByVersionFilesByFileResponses];
diff --git a/app/api-client/zod.gen.ts b/app/api-client/zod.gen.ts
index d980f28..9f7e6e5 100644
--- a/app/api-client/zod.gen.ts
+++ b/app/api-client/zod.gen.ts
@@ -421,12 +421,14 @@ export const zGetAdminSettingsResponse = z.object({
     code: z.literal(200),
     message: z.literal('Settings retrieved'),
     data: z.object({
-        registration_enabled: z.boolean()
+        registration_enabled: z.boolean(),
+        firmware_channel: z.enum(['stable', 'prerelease'])
     })
 });
 
 export const zPutAdminSettingsBody = z.object({
-    registration_enabled: z.boolean().optional()
+    registration_enabled: z.boolean().optional(),
+    firmware_channel: z.enum(['stable', 'prerelease']).optional()
 });
 
 /**
@@ -437,7 +439,50 @@ export const zPutAdminSettingsResponse = z.object({
     code: z.literal(200),
     message: z.literal('Settings updated'),
     data: z.object({
-        registration_enabled: z.boolean()
+        registration_enabled: z.boolean(),
+        firmware_channel: z.enum(['stable', 'prerelease'])
+    })
+});
+
+/**
+ * Sync state retrieved
+ */
+export const zGetAdminFirmwareResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Sync state retrieved'),
+    data: z.object({
+        enabled: z.boolean(),
+        repo: z.string(),
+        signature_required: z.boolean(),
+        last_run_at: z.number().nullable(),
+        last_success_at: z.number().nullable(),
+        error: z.string().nullable()
+    })
+});
+
+/**
+ * Sync finished
+ */
+export const zPostAdminFirmwareSyncResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Sync finished'),
+    data: z.object({
+        added: z.array(z.string()),
+        removed: z.array(z.string()),
+        skipped: z.array(z.object({
+            version: z.string(),
+            reason: z.string()
+        })),
+        state: z.object({
+            enabled: z.boolean(),
+            repo: z.string(),
+            signature_required: z.boolean(),
+            last_run_at: z.number().nullable(),
+            last_success_at: z.number().nullable(),
+            error: z.string().nullable()
+        })
     })
 });
 
@@ -644,6 +689,30 @@ export const zPostAgentsByAgentIdRevokeResponse = z.object({
     })
 });
 
+export const zPostAgentsByAgentIdFlashImageBody = z.object({
+    version: z.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/),
+    server_url: z.url().max(200).optional()
+});
+
+export const zPostAgentsByAgentIdFlashImagePath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Flash image created
+ */
+export const zPostAgentsByAgentIdFlashImageResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(201),
+    message: z.literal('Flash image created'),
+    data: z.object({
+        image: z.string(),
+        offset: z.number(),
+        server_url: z.string(),
+        expires_at: z.number()
+    })
+});
+
 /**
  * Devices retrieved
  */
@@ -1242,3 +1311,42 @@ export const zPutDevicesByDeviceIdSharesByUserIdResponse = z.object({
     message: z.literal('Share updated'),
     data: z.null()
 });
+
+/**
+ * Firmware releases retrieved
+ */
+export const zGetFirmwareResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Firmware releases retrieved'),
+    data: z.object({
+        channel: z.enum(['stable', 'prerelease']),
+        recommended: z.string().nullable(),
+        releases: z.array(z.object({
+            version: z.string(),
+            prerelease: z.boolean(),
+            published_at: z.number(),
+            release_url: z.string(),
+            notes: z.string(),
+            signature_verified: z.boolean(),
+            chip_family: z.string(),
+            parts: z.array(z.object({
+                file: z.string(),
+                offset: z.number(),
+                size: z.number(),
+                sha256: z.string()
+            })),
+            nvs_offset: z.number()
+        }))
+    })
+});
+
+export const zGetFirmwareByVersionFilesByFilePath = z.object({
+    version: z.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/),
+    file: z.string().regex(/^[A-Za-z0-9_.-]+$/)
+});
+
+/**
+ * The file
+ */
+export const zGetFirmwareByVersionFilesByFileResponse = z.string();
diff --git a/app/pages/dashboard/admin/settings.vue b/app/pages/dashboard/admin/settings.vue
index df4c769..3efb554 100644
--- a/app/pages/dashboard/admin/settings.vue
+++ b/app/pages/dashboard/admin/settings.vue
@@ -39,6 +39,60 @@ async function setRegistration(enabled: boolean) {
 	}
 	await settings.refresh();
 }
+
+// --- Firmware ---
+
+const firmwareSync = await useAPIAsyncData("admin-firmware-sync", async () => {
+	const res = await useAPI((api) => api.getAdminFirmware({}));
+	return res.success ? res.data : null;
+});
+
+const firmware = await useAPIAsyncData("admin-firmware-catalog", async () => {
+	const res = await useAPI((api) => api.getFirmware({}));
+	return res.success ? res.data : null;
+});
+
+const channelItems = [
+	{ value: "stable", label: "Stable releases" },
+	{ value: "prerelease", label: "Include pre-releases" },
+];
+
+async function setChannel(channel: "stable" | "prerelease") {
+	saving.value = true;
+	const res = await useAPI((api) => api.putAdminSettings({ body: { firmware_channel: channel } }));
+	saving.value = false;
+	if (!res.success) {
+		toast.add({ title: "Couldn't save the setting", description: res.message, color: "error" });
+	}
+	await Promise.all([settings.refresh(), firmware.refresh()]);
+}
+
+const syncing = ref(false);
+
+async function syncNow() {
+	syncing.value = true;
+	const res = await useAPI((api) => api.postAdminFirmwareSync({}));
+	syncing.value = false;
+
+	if (!res.success) {
+		toast.add({ title: "Firmware sync failed", description: res.message, color: "error" });
+	} else {
+		const { added, removed, skipped } = res.data;
+		const changes = [
+			added.length > 0 ? `added ${added.join(", ")}` : null,
+			removed.length > 0 ? `removed ${removed.join(", ")}` : null,
+		].filter(Boolean);
+		toast.add({
+			title: changes.length > 0 ? "Firmware updated" : "Firmware is up to date",
+			description: [changes.join("; "), ...skipped.map((s) => `Skipped ${s.version}: ${s.reason}`)]
+				.filter(Boolean)
+				.join(". "),
+			color: skipped.length > 0 ? "warning" : "success",
+			icon: "i-lucide-check",
+		});
+	}
+	await Promise.all([firmwareSync.refresh(), firmware.refresh()]);
+}
 </script>
 
 <template>
@@ -69,6 +123,76 @@ async function setRegistration(enabled: boolean) {
 							/>
 						</div>
 					</DashboardSectionCard>
+
+					<DashboardSectionCard
+						title="ESP32 firmware"
+						description="Releases for the web installer, synced from GitHub"
+						icon="i-lucide-cpu"
+					>
+						<div class="space-y-6">
+							<div class="flex flex-col gap-4 md:flex-row md:items-start md:justify-between">
+								<div>
+									<h4 class="font-medium text-white">Default channel</h4>
+									<p class="mt-1 text-sm text-slate-400">
+										Which release the installer recommends. Users can still pick any synced release.
+									</p>
+								</div>
+								<USelect
+									:model-value="settings.data.value?.firmware_channel ?? 'stable'"
+									:items="channelItems"
+									:disabled="!settings.data.value || saving"
+									class="w-full md:w-56"
+									aria-label="Firmware channel"
+									@update:model-value="setChannel"
+								/>
+							</div>
+
+							<div class="flex flex-col gap-4 md:flex-row md:items-start md:justify-between">
+								<div class="text-sm">
+									<h4 class="font-medium text-white">Sync</h4>
+									<p class="mt-1 text-slate-400">
+										From
+										<a
+											v-if="firmwareSync.data.value"
+											:href="`https://github.com/${firmwareSync.data.value.repo}/releases`"
+											target="_blank"
+											rel="noopener"
+											class="text-primary hover:underline"
+											>{{ firmwareSync.data.value.repo }}</a
+										>
+										<template v-if="firmwareSync.data.value?.enabled">, automatically every 6 hours.</template>
+										<template v-else>. Automatic sync is off (NETIGNITE_FIRMWARE_SYNC).</template>
+										<template v-if="firmwareSync.data.value?.signature_required"> Only signed releases are accepted.</template>
+									</p>
+									<p class="mt-1 text-slate-500">
+										Last successful sync: {{ formatRelative(firmwareSync.data.value?.last_success_at) }}
+									</p>
+									<p v-if="firmwareSync.data.value?.error" class="mt-1 text-red-400">
+										Last attempt failed: {{ firmwareSync.data.value.error }}
+									</p>
+								</div>
+								<UButton
+									label="Sync now"
+									icon="i-lucide-refresh-cw"
+									color="neutral"
+									variant="outline"
+									:loading="syncing"
+									@click="syncNow"
+								/>
+							</div>
+
+							<ul v-if="(firmware.data.value?.releases.length ?? 0) > 0" class="divide-y divide-slate-800 rounded-lg border border-slate-800">
+								<li v-for="release in firmware.data.value?.releases" :key="release.version" class="flex flex-wrap items-center gap-3 px-4 py-2 text-sm">
+									<a :href="release.release_url" target="_blank" rel="noopener" class="font-mono text-white hover:underline">{{ release.version }}</a>
+									<UBadge v-if="release.version === firmware.data.value?.recommended" color="primary" variant="soft" size="sm">recommended</UBadge>
+									<UBadge v-if="release.prerelease" color="warning" variant="soft" size="sm">pre-release</UBadge>
+									<UBadge v-if="release.signature_verified" color="success" variant="soft" size="sm">signed</UBadge>
+									<span class="ml-auto text-slate-500">{{ formatDate(release.published_at) }}</span>
+								</li>
+							</ul>
+							<p v-else class="text-sm text-slate-500">No firmware releases synced yet.</p>
+						</div>
+					</DashboardSectionCard>
 				</div>
 			</DashboardPageBody>
 		</template>
diff --git a/app/pages/dashboard/agents/[agent_id].vue b/app/pages/dashboard/agents/[agent_id].vue
index 0047bdf..20a9e73 100644
--- a/app/pages/dashboard/agents/[agent_id].vue
+++ b/app/pages/dashboard/agents/[agent_id].vue
@@ -52,9 +52,10 @@ if (isNew) {
 }
 
 function getRoutesConfig(): UseSubrouterPathDynamics.RoutesConfig {
+	const base = `/dashboard/agents/${agentParam}`;
 	const name = agent?.value?.name ?? agentParam;
-	return {
-		[`/dashboard/agents/${agentParam}`]: {
+	const routes: UseSubrouterPathDynamics.RoutesConfig = {
+		[base]: {
 			isNavLink: true,
 			label: "General",
 			icon: "i-lucide-radio-tower",
@@ -70,6 +71,22 @@ function getRoutesConfig(): UseSubrouterPathDynamics.RoutesConfig {
 			},
 		},
 	};
+
+	if (!isNew && agent?.value?.kind === "esp32") {
+		routes[`${base}/install`] = {
+			isNavLink: true,
+			label: "Install",
+			icon: "i-lucide-usb",
+			getDynamicValues() {
+				return {
+					seoSettings: { title: `Install · ${name}`, description: `Install the firmware on ${name}` },
+					breadcrumbItems: [{ label: name, to: base }, { label: "Install" }],
+				};
+			},
+		};
+	}
+
+	return routes;
 }
 
 const subrouterPathDynamics = useSubrouterPathDynamics({
@@ -89,6 +106,10 @@ const routePathDynamicValues = await useAwaitedComputed(async () => {
 	<UDashboardPanel>
 		<template #header>
 			<DashboardPageHeader icon="i-lucide-radio-tower" :breadcrumb-items="routePathDynamicValues.breadcrumbItems" />
+
+			<UDashboardToolbar v-if="!isNew && !error && (subrouterPathDynamics.links[0]?.length ?? 0) > 1">
+				<UNavigationMenu :items="subrouterPathDynamics.links" highlight class="-mx-1 flex-1" />
+			</UDashboardToolbar>
 		</template>
 
 		<template #body>
diff --git a/app/pages/dashboard/agents/[agent_id]/index.vue b/app/pages/dashboard/agents/[agent_id]/index.vue
index caf29c9..8f950b6 100644
--- a/app/pages/dashboard/agents/[agent_id]/index.vue
+++ b/app/pages/dashboard/agents/[agent_id]/index.vue
@@ -244,9 +244,20 @@ async function onDelete() {
 				icon="i-lucide-plug"
 			>
 				<template v-if="agent.data.value.kind === 'esp32'">
-					<ol class="list-decimal space-y-1 pl-5 text-sm text-slate-300">
+					<p class="text-sm text-slate-300">
+						The easiest way: install the firmware from your browser. It sets up Wi-Fi and connects the agent.
+					</p>
+					<UButton
+						class="mt-3"
+						label="Open the web installer"
+						icon="i-lucide-usb"
+						:to="`/dashboard/agents/${agent.data.value.id}/install`"
+					/>
+
+					<p class="mt-6 text-sm font-medium text-white">Or over the serial console</p>
+					<ol class="mt-2 list-decimal space-y-1 pl-5 text-sm text-slate-300">
 						<li>
-							Flash the NetIgnite ESP32 firmware v2 and open its serial console (USB, 115200 baud), for
+							On an ESP32 with the NetIgnite firmware v2, open its serial console (USB, 115200 baud), for
 							example with PlatformIO's Serial Monitor.
 						</li>
 						<li>
@@ -254,7 +265,6 @@ async function onDelete() {
 						</li>
 						<li>Create the setup command below and paste it into the console. It works once and expires after 15 minutes.</li>
 					</ol>
-					<p class="mt-2 text-xs text-slate-500">A one-click browser installer is coming in a later update.</p>
 				</template>
 
 				<template v-else>
diff --git a/app/pages/dashboard/agents/[agent_id]/install.vue b/app/pages/dashboard/agents/[agent_id]/install.vue
new file mode 100644
index 0000000..4614738
--- /dev/null
+++ b/app/pages/dashboard/agents/[agent_id]/install.vue
@@ -0,0 +1,302 @@
+<script setup lang="ts">
+/**
+ * Web installer for ESP32 agents (ESP Web Tools): flashes the firmware with an NVS image holding
+ * the server URL and a single-use enrollment token, then sets up Wi-Fi over Improv. The Wi-Fi
+ * password goes from the browser to the device only.
+ */
+import { useUserInfoStore } from "~/composables/stores/useUserStore";
+import type { Agent, NewAgent } from "~/utils/types";
+
+const injected = useSubrouterInjectedData<Agent, NewAgent>("agent", true).inject();
+if (injected.isNew) await navigateTo("/dashboard/agents/new");
+const agent = computed(() => injected.data.value as Agent);
+
+const toast = useToast();
+const { appUrl } = useRuntimeAppConfigs();
+const apiBase = `${appUrl.replace(/\/$/, "")}/api/v1`;
+
+const user = await useUserInfoStore().use();
+const isAdmin = computed(() => user.value?.role === "admin");
+
+const catalog = await useAPIAsyncData("firmware-catalog", async () => {
+	const res = await useAPI((api) => api.getFirmware({}));
+	return res.success ? res.data : null;
+});
+const releases = computed(() => catalog.data.value?.releases ?? []);
+
+const version = ref<string | undefined>(
+	catalog.data.value?.recommended ?? catalog.data.value?.releases[0]?.version,
+);
+const versionItems = computed(() =>
+	releases.value.map((release) => ({
+		value: release.version,
+		label:
+			release.version === catalog.data.value?.recommended
+				? `${release.version} (recommended)`
+				: release.prerelease
+					? `${release.version} (pre-release)`
+					: release.version,
+	})),
+);
+const selectedRelease = computed(() => releases.value.find((r) => r.version === version.value));
+
+const serverURL = ref(appUrl);
+const showAdvanced = ref(false);
+
+// --- Prepare ------------------------------------------------------------------------------------
+
+const prepared = shallowRef<PreparedInstall | null>(null);
+const preparing = ref(false);
+const downloaded = ref(0);
+/** The agent's enrollment time before this install; a change means the new token was used. */
+const enrolledBefore = ref<number | null>(null);
+const now = ref(Date.now());
+
+const expired = computed(() => prepared.value !== null && now.value >= prepared.value.expiresAt);
+const connected = computed(
+	() =>
+		prepared.value !== null &&
+		agent.value.state === "online" &&
+		agent.value.enrolled_at !== enrolledBefore.value,
+);
+
+async function prepare() {
+	const release = selectedRelease.value;
+	if (!release) return;
+
+	preparing.value = true;
+	downloaded.value = 0;
+	try {
+		const sessionToken = useAppCookies().sessionToken.get().value ?? null;
+		const parts: { blob: Blob; offset: number }[] = [];
+		for (const part of release.parts) {
+			parts.push({
+				blob: await downloadFirmwarePart(apiBase, sessionToken, release, part),
+				offset: part.offset,
+			});
+			downloaded.value += 1;
+		}
+
+		const custom = serverURL.value.trim().replace(/\/$/, "");
+		const res = await useAPI((api) =>
+			api.postAgentsByAgentIdFlashImage({
+				path: { agentID: agent.value.id },
+				body: {
+					version: release.version,
+					server_url: custom && custom !== appUrl.replace(/\/$/, "") ? custom : undefined,
+				},
+			}),
+		);
+		if (!res.success) throw new Error(res.message);
+		parts.push({ blob: base64ToBlob(res.data.image), offset: res.data.offset });
+
+		prepared.value?.dispose();
+		enrolledBefore.value = agent.value.enrolled_at;
+		prepared.value = createInstall(release, parts, res.data.expires_at);
+		now.value = Date.now();
+	} catch (error) {
+		toast.add({
+			title: "Couldn't prepare the installer",
+			description: (error as Error).message,
+			color: "error",
+			icon: "i-lucide-alert-circle",
+		});
+	} finally {
+		preparing.value = false;
+	}
+}
+
+function reset() {
+	prepared.value?.dispose();
+	prepared.value = null;
+}
+
+watch(version, reset);
+
+// --- ESP Web Tools and connection status ----------------------------------------------------------
+
+onMounted(async () => {
+	// The prebuilt bundle: the package's ES modules expect an older @material/web than npm installs.
+	await import("esp-web-tools/dist/web/install-button.js");
+});
+onBeforeUnmount(() => prepared.value?.dispose());
+
+useInterval(async () => {
+	now.value = Date.now();
+	if (prepared.value && !connected.value) await injected.refresh?.();
+}, 3000);
+
+watch(connected, (value) => {
+	if (value) {
+		toast.add({
+			title: `${agent.value.name} is connected`,
+			color: "success",
+			icon: "i-lucide-check",
+		});
+	}
+});
+</script>
+
+<template>
+	<div class="mx-auto w-full space-y-6 lg:w-3xl">
+		<DashboardSectionCard
+			title="Install from the browser"
+			description="Flash the NetIgnite firmware over USB and connect the ESP32 to Wi-Fi"
+			icon="i-lucide-usb"
+		>
+			<UAlert
+				v-if="releases.length === 0"
+				color="warning"
+				variant="subtle"
+				icon="i-lucide-package-x"
+				title="No firmware available yet"
+				:description="
+					isAdmin
+						? 'This server hasn\'t downloaded any firmware release. Sync them under Server Settings.'
+						: 'This server hasn\'t downloaded any firmware release yet. Ask your administrator.'
+				"
+				:actions="isAdmin ? [{ label: 'Server Settings', to: '/dashboard/admin/settings', color: 'neutral', variant: 'outline' }] : []"
+			/>
+
+			<ol v-else class="space-y-8">
+				<!-- 1. Firmware -->
+				<li class="flex gap-4">
+					<span class="flex size-7 shrink-0 items-center justify-center rounded-full bg-primary/15 text-sm font-semibold text-primary-300">1</span>
+					<div class="flex-1 space-y-3">
+						<div>
+							<h4 class="font-medium text-white">Choose the firmware</h4>
+							<p class="mt-1 text-sm text-slate-400">For ESP32 boards (ESP32-WROOM / ESP32-WROVER, e.g. "ESP32 DevKit").</p>
+						</div>
+						<USelect v-model="version" :items="versionItems" class="w-full sm:w-72" aria-label="Firmware version" />
+						<p v-if="selectedRelease" class="text-xs text-slate-500">
+							Released {{ formatDate(selectedRelease.published_at) }} ·
+							<a :href="selectedRelease.release_url" target="_blank" rel="noopener" class="text-primary hover:underline">Release notes</a>
+							<template v-if="selectedRelease.signature_verified"> · signature verified</template>
+						</p>
+
+						<UButton
+							:label="showAdvanced ? 'Hide server address' : 'Change server address'"
+							:icon="showAdvanced ? 'i-lucide-chevron-up' : 'i-lucide-chevron-down'"
+							color="neutral"
+							variant="link"
+							size="sm"
+							class="px-0"
+							@click="showAdvanced = !showAdvanced"
+						/>
+						<UFormField
+							v-if="showAdvanced"
+							label="Server address"
+							description="The address the agent connects to. Change it only if the agent reaches this server under another address, e.g. inside your network."
+						>
+							<UInput v-model="serverURL" class="w-full" @update:model-value="reset" />
+						</UFormField>
+					</div>
+				</li>
+
+				<!-- 2. Prepare -->
+				<li class="flex gap-4">
+					<span class="flex size-7 shrink-0 items-center justify-center rounded-full bg-primary/15 text-sm font-semibold text-primary-300">2</span>
+					<div class="flex-1 space-y-3">
+						<div>
+							<h4 class="font-medium text-white">Prepare the installer</h4>
+							<p class="mt-1 text-sm text-slate-400">
+								Downloads the firmware and creates this agent's setup data with a single-use token. Installing
+								replaces the agent's current credential and the ESP32's Wi-Fi settings.
+							</p>
+						</div>
+						<UButton
+							:label="prepared ? 'Prepare again' : 'Prepare installer'"
+							icon="i-lucide-package-check"
+							:color="prepared && !expired ? 'neutral' : 'primary'"
+							:variant="prepared && !expired ? 'outline' : 'solid'"
+							:loading="preparing"
+							:disabled="!selectedRelease"
+							@click="prepare"
+						/>
+						<p v-if="preparing && selectedRelease" class="text-xs text-slate-500">
+							Downloading firmware… {{ downloaded }}/{{ selectedRelease.parts.length }}
+						</p>
+						<UAlert
+							v-if="expired"
+							color="warning"
+							variant="subtle"
+							icon="i-lucide-timer-off"
+							title="The setup token expired"
+							description="Prepare the installer again before you install."
+						/>
+						<p v-else-if="prepared" class="flex items-center gap-1.5 text-sm text-emerald-400">
+							<UIcon name="i-lucide-check" class="size-4" />
+							Ready: firmware {{ prepared.version }}. Install before {{ formatDate(prepared.expiresAt) }}.
+						</p>
+					</div>
+				</li>
+
+				<!-- 3. Install -->
+				<li class="flex gap-4">
+					<span class="flex size-7 shrink-0 items-center justify-center rounded-full bg-primary/15 text-sm font-semibold text-primary-300">3</span>
+					<div class="flex-1 space-y-3">
+						<div>
+							<h4 class="font-medium text-white">Connect and install</h4>
+							<p class="mt-1 text-sm text-slate-400">
+								Plug the ESP32 into this computer, click the button and pick its serial port. After the install,
+								enter your Wi-Fi in the dialog: the password goes straight to the ESP32, not to NetIgnite.
+							</p>
+						</div>
+						<ClientOnly>
+							<esp-web-install-button v-if="prepared && !expired" :manifest="prepared.manifestURL">
+								<UButton slot="activate" label="Connect and install" icon="i-lucide-usb" />
+								<UAlert
+									slot="unsupported"
+									color="warning"
+									variant="subtle"
+									icon="i-lucide-monitor-x"
+									title="This browser can't access USB devices"
+									description="Use Google Chrome, Microsoft Edge or Firefox (151 or newer) on a computer, or set the agent up over its serial console (General tab)."
+								/>
+								<UAlert
+									slot="not-allowed"
+									color="warning"
+									variant="subtle"
+									icon="i-lucide-shield-alert"
+									title="Installing needs HTTPS"
+									description="Browsers only allow USB access on HTTPS pages (or localhost). Open NetIgnite over HTTPS."
+								/>
+							</esp-web-install-button>
+							<UButton v-else label="Connect and install" icon="i-lucide-usb" disabled />
+						</ClientOnly>
+					</div>
+				</li>
+
+				<!-- 4. Connected -->
+				<li class="flex gap-4">
+					<span class="flex size-7 shrink-0 items-center justify-center rounded-full bg-primary/15 text-sm font-semibold text-primary-300">4</span>
+					<div class="flex-1 space-y-3">
+						<h4 class="font-medium text-white">Wait for the agent</h4>
+						<UAlert
+							v-if="connected"
+							color="success"
+							variant="subtle"
+							icon="i-lucide-circle-check"
+							:title="`${agent.name} is connected`"
+							:description="`Firmware ${agent.version ?? ''}. You can close the installer and add devices to this agent.`"
+							:actions="[{ label: 'Add device', icon: 'i-lucide-plus', to: '/dashboard/devices/new', color: 'neutral', variant: 'outline' }]"
+						/>
+						<p v-else-if="prepared" class="flex items-center gap-2 text-sm text-slate-400">
+							<UIcon name="i-lucide-loader-circle" class="size-4 animate-spin" />
+							Once it's on Wi-Fi, the agent connects to NetIgnite on its own. This page updates when it does.
+						</p>
+						<p v-else class="text-sm text-slate-500">The agent shows up here once it's connected.</p>
+					</div>
+				</li>
+			</ol>
+		</DashboardSectionCard>
+
+		<DashboardSectionCard title="Already installed?" icon="i-lucide-wifi" description="Change Wi-Fi without reinstalling">
+			<p class="text-sm text-slate-300">
+				Prepare the installer and click <em>Connect and install</em>: for an ESP32 that already runs NetIgnite, the
+				dialog offers <em>Change Wi-Fi</em> and <em>Logs &amp; console</em> without touching the firmware or its
+				credential.
+			</p>
+		</DashboardSectionCard>
+	</div>
+</template>
diff --git a/app/utils/espInstaller.ts b/app/utils/espInstaller.ts
new file mode 100644
index 0000000..2600b5a
--- /dev/null
+++ b/app/utils/espInstaller.ts
@@ -0,0 +1,86 @@
+/**
+ * Prepares an ESP Web Tools install: downloads the firmware's flash images from this server,
+ * checks them against the release's SHA-256s and builds a manifest whose parts (including the
+ * agent's NVS image with its enrollment token) are `blob:` URLs, so nothing secret ends up in a URL
+ * the browser could cache or log.
+ */
+import type { GetFirmwareResponses } from "~/api-client";
+
+export type FirmwareRelease = GetFirmwareResponses["200"]["data"]["releases"][number];
+
+export interface PreparedInstall {
+	version: string;
+	/** Pass to `<esp-web-install-button manifest>`. */
+	manifestURL: string;
+	/** When the enrollment token in the NVS image expires. */
+	expiresAt: number;
+	/** Revokes the blob URLs. */
+	dispose(): void;
+}
+
+async function sha256Hex(data: ArrayBuffer) {
+	const digest = await crypto.subtle.digest("SHA-256", data);
+	return Array.from(new Uint8Array(digest), (b) => b.toString(16).padStart(2, "0")).join("");
+}
+
+export async function downloadFirmwarePart(
+	apiBase: string,
+	sessionToken: string | null,
+	release: FirmwareRelease,
+	part: FirmwareRelease["parts"][number],
+) {
+	const url = `${apiBase}/firmware/${encodeURIComponent(release.version)}/files/${encodeURIComponent(part.file)}`;
+	const res = await fetch(url, {
+		headers: sessionToken ? { Authorization: `Bearer ${sessionToken}` } : {},
+	});
+	if (!res.ok) throw new Error(`Downloading ${part.file} failed (${res.status})`);
+
+	const data = await res.arrayBuffer();
+	if (data.byteLength !== part.size || (await sha256Hex(data)) !== part.sha256) {
+		throw new Error(`${part.file} arrived damaged. Try again.`);
+	}
+	return new Blob([data], { type: "application/octet-stream" });
+}
+
+export function createInstall(
+	release: FirmwareRelease,
+	parts: { blob: Blob; offset: number }[],
+	expiresAt: number,
+): PreparedInstall {
+	const urls: string[] = [];
+	const objectURL = (blob: Blob) => {
+		const url = URL.createObjectURL(blob);
+		urls.push(url);
+		return url;
+	};
+
+	const manifest = {
+		// Must equal the firmware's Improv name, so ESP Web Tools recognizes installed agents.
+		name: "NetIgnite Agent",
+		version: release.version,
+		new_install_prompt_erase: true,
+		builds: [
+			{
+				chipFamily: release.chip_family,
+				parts: [...parts]
+					.sort((a, b) => a.offset - b.offset)
+					.map((part) => ({ path: objectURL(part.blob), offset: part.offset })),
+			},
+		],
+	};
+
+	return {
+		version: release.version,
+		manifestURL: objectURL(new Blob([JSON.stringify(manifest)], { type: "application/json" })),
+		expiresAt,
+		dispose() {
+			for (const url of urls) URL.revokeObjectURL(url);
+		},
+	};
+}
+
+export function base64ToBlob(base64: string) {
+	return new Blob([Uint8Array.from(atob(base64), (c) => c.charCodeAt(0))], {
+		type: "application/octet-stream",
+	});
+}
diff --git a/bun.lock b/bun.lock
index 31b85db..d5b5b23 100644
--- a/bun.lock
+++ b/bun.lock
@@ -12,6 +12,7 @@
         "drizzle-orm": "^0.45.2",
         "drizzle-zod": "^0.8.3",
         "elliptic": "^6.6.1",
+        "esp-web-tools": "10.4.0",
         "hono": "^4.12.30",
         "hono-openapi": "^1.3.1",
         "nodemailer": "^9.0.0",
@@ -273,10 +274,18 @@
 
     "@libsql/win32-x64-msvc": ["@libsql/win32-x64-msvc@0.5.29", "", { "os": "win32", "cpu": "x64" }, "sha512-4/0CvEdhi6+KjMxMaVbFM2n2Z44escBRoEYpR+gZg64DdetzGnYm8mcNLcoySaDJZNaBd6wz5DNdgRmcI4hXcg=="],
 
+    "@lit-labs/ssr-dom-shim": ["@lit-labs/ssr-dom-shim@1.6.0", "", {}, "sha512-VHb0ALPMTlgKjM6yIxxoQNnpKyUKLD04VzeQdsiXkMqkvYlAHxq9glGLmgbb889/1GsohSOAjvQYoiBppXFqrQ=="],
+
+    "@lit/context": ["@lit/context@1.1.6", "", { "dependencies": { "@lit/reactive-element": "^1.6.2 || ^2.1.0" } }, "sha512-M26qDE6UkQbZA2mQ3RjJ3Gzd8TxP+/0obMgE5HfkfLhEEyYE3Bui4A5XHiGPjy0MUGAyxB3QgVuw2ciS0kHn6A=="],
+
+    "@lit/reactive-element": ["@lit/reactive-element@2.1.2", "", { "dependencies": { "@lit-labs/ssr-dom-shim": "^1.5.0" } }, "sha512-pbCDiVMnne1lYUIaYNN5wrwQXDtHaYtg7YEFPeW+hws6U47WeFvISGUWekPGKWOP1ygrs0ef0o1VJMk1exos5A=="],
+
     "@lukeed/ms": ["@lukeed/ms@2.0.2", "", {}, "sha512-9I2Zn6+NJLfaGoz9jN3lpwDgAYvfGeNYdbAIjJOqzs4Tpc+VU3Jqq4IofSUBKajiDS8k9fZIg18/z13mpk1bsA=="],
 
     "@mapbox/node-pre-gyp": ["@mapbox/node-pre-gyp@2.0.3", "", { "dependencies": { "consola": "^3.2.3", "detect-libc": "^2.0.0", "https-proxy-agent": "^7.0.5", "node-fetch": "^2.6.7", "nopt": "^8.0.0", "semver": "^7.5.3", "tar": "^7.4.0" }, "bin": { "node-pre-gyp": "bin/node-pre-gyp" } }, "sha512-uwPAhccfFJlsfCxMYTwOdVfOz3xqyj8xYL3zJj8f0pb30tLohnnFPhLuqp4/qoEz8sNxe4SESZedcBojRefIzg=="],
 
+    "@material/web": ["@material/web@2.5.0", "", { "dependencies": { "@lit/context": "^1.1.6", "lit": "^2.8.0 || ^3.0.0", "tslib": "^2.4.0" } }, "sha512-x2Uovyq8E/Zc1xHXd9s1eBMXF5pMHVAt70pISKd0fL3Ajj4L6zQaQUY/awcfR2RDAMKXC7i4+vr0arv1YaOR/g=="],
+
     "@napi-rs/lzma-linux-x64-gnu": ["@napi-rs/lzma-linux-x64-gnu@1.5.1", "", { "os": "linux", "cpu": "x64" }, "sha512-oTXEIha4SsuXdTA4Iyskj0kpdx2yVXdhd75c2v3xGrHFfVMsbhTPZU/nMPL4sWKo4pBHm3aucLaqGlF696dTyQ=="],
 
     "@neon-rs/load": ["@neon-rs/load@0.0.4", "", {}, "sha512-kTPhdZyTQxB+2wpiRcFWrDcejc4JI6tkPuS7UZCG4l6Zvc5kU/gGQ/ozvHTh1XR5tS+UlfAfGuPajjzQjCiHCw=="],
@@ -587,6 +596,8 @@
 
     "@types/resolve": ["@types/resolve@1.20.2", "", {}, "sha512-60BCwRFOZCQhDncwQdxxeOEEkbc5dIMccYLwbxsS4TUNeVECQ/pBJ0j09mrHOl/JJvpRPGwO9SvE4nR2Nb/a4Q=="],
 
+    "@types/trusted-types": ["@types/trusted-types@2.0.7", "", {}, "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw=="],
+
     "@types/web-bluetooth": ["@types/web-bluetooth@0.0.21", "", {}, "sha512-oIQLCGWtcFZy2JW77j9k8nHzAOpqMHLQejDA48XXMWH6tjCQHz5RCFz1bzsmROyL6PUm+LLnUiI4BCn221inxA=="],
 
     "@types/ws": ["@types/ws@8.18.2", "", { "dependencies": { "@types/node": "*" } }, "sha512-67MQl+fpWKVTT1NYdnmo3U4sc/xPo/zQBncVnI74qmQa0z/b+1g6iYqNmGCPbxO+zz2aklb08a0oHfegiVd0/w=="],
@@ -691,6 +702,8 @@
 
     "async-sema": ["async-sema@3.1.1", "", {}, "sha512-tLRNUXati5MFePdAk8dw7Qt7DpxPB60ofAgn8WRhW6a2rcimZnYBP9oxHiv0OHy+Wz7kPMG+t4LGdt31+4EmGg=="],
 
+    "atob-lite": ["atob-lite@2.0.0", "", {}, "sha512-LEeSAWeh2Gfa2FtlQE1shxQ8zi5F9GHarrGKz08TMdODD5T4eH6BMsvtnhbWZ+XQn+Gb6om/917ucvRu7l7ukw=="],
+
     "autoprefixer": ["autoprefixer@10.6.1", "", { "dependencies": { "browserslist": "^4.28.9", "caniuse-lite": "^1.0.30001810", "fraction.js": "^5.3.4", "picocolors": "^1.1.1", "postcss-value-parser": "^4.2.0" }, "peerDependencies": { "postcss": "^8.1.0" }, "bin": { "autoprefixer": "bin/autoprefixer" } }, "sha512-cL1Qz6ADZhcEbny/8HPfe99J6HhNoYtpX2LFLIbhgGE7Q1hlQVkYFdetDN7Id3KiQxhDrHwzlHr/YQCnZ8+xSA=="],
 
     "b4a": ["b4a@1.9.0", "", { "peerDependencies": { "react-native-b4a": "*" }, "optionalPeers": ["react-native-b4a"] }, "sha512-dpfcF9fDNR6++cthXR67iyhgqWy9CBouAvIWhIntzBG6cvK/cnIPiZQjBwi/ZqjjBEDGfoNDtmB0kTjroOJ3pQ=="],
@@ -885,6 +898,10 @@
 
     "escape-string-regexp": ["escape-string-regexp@5.0.0", "", {}, "sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw=="],
 
+    "esp-web-tools": ["esp-web-tools@10.4.0", "", { "dependencies": { "@material/web": "^2.2.0", "esptool-js": "^0.6.0", "improv-wifi-serial-sdk": "2.8.0", "lit": "^3.2.1", "tslib": "^2.8.1" } }, "sha512-3pwkeFFm5Fj7UQo8SJNYK5RXrtNCpq6X9QoI6bMT4GBZWgrJqjn0YvM9ihG74BtMoSFYXfmDtkehuxe50PTMPQ=="],
+
+    "esptool-js": ["esptool-js@0.6.1", "", { "dependencies": { "atob-lite": "^2.0.0", "pako": "^2.1.0", "tslib": "^2.4.1" } }, "sha512-WNgQTfaEIgHyEiT56pI5v7Tq6Pzjc2XaibLxAtWY4v3zE2Ofk5ImkJY5foEUr0JrdkfHWf6rNizAewN4/kSpHw=="],
+
     "estree-walker": ["estree-walker@3.0.3", "", { "dependencies": { "@types/estree": "^1.0.0" } }, "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g=="],
 
     "etag": ["etag@1.8.1", "", {}, "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg=="],
@@ -1013,6 +1030,8 @@
 
     "impound": ["impound@1.2.0", "", { "dependencies": { "@jridgewell/trace-mapping": "^0.3.31", "es-module-lexer": "^2.0.0", "pathe": "^2.0.3", "unplugin": "^3.0.0", "unplugin-utils": "^0.3.1" } }, "sha512-hbFh2WURN+XQ364SbblzubhEEj/B3qZCe80l/EHXPWM6/kZP2mvOllxwRBBWNxe4gLbqXZL0fxOZwoDCSlJZQw=="],
 
+    "improv-wifi-serial-sdk": ["improv-wifi-serial-sdk@2.8.0", "", { "dependencies": { "@material/web": "^2.4.1", "tslib": "^2.8.1" } }, "sha512-3MCm9NAD6c4OXyXl+jPqu0kNasIZi80JVeDkPaOQEI4JpItCaOAyQGdL/yg5mOqlKJ0nn2K/xb8H7enbNPc/5g=="],
+
     "inherits": ["inherits@2.0.4", "", {}, "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="],
 
     "ini": ["ini@4.1.1", "", {}, "sha512-QQnnxNyfvmHFIsj7gkPcYymR8Jdw/o7mp5ZFihxn6h8Ci6fh3Dx4E1gPjpQEpIuPo9XVNY/ZUwh4BPMjGyL01g=="],
@@ -1111,6 +1130,12 @@
 
     "listhen": ["listhen@1.10.1", "", { "dependencies": { "@parcel/watcher-wasm": "^2.5.6", "citty": "^0.2.2", "consola": "^3.4.2", "crossws": "^0.4.10", "defu": "^6.1.7", "get-port-please": "^3.2.0", "h3": "^1.15.11", "http-shutdown": "^1.2.2", "jiti": "^2.7.0", "node-forge": "^1.4.0", "pathe": "^2.0.3", "std-env": "^4.2.0", "tinyclip": "^0.1.15", "ufo": "^1.6.4", "untun": "^0.2.2", "uqr": "^0.1.3" }, "peerDependencies": { "@parcel/watcher": "^2.5.6" }, "optionalPeers": ["@parcel/watcher"], "bin": { "listen": "./bin/listhen.mjs", "listhen": "./bin/listhen.mjs" } }, "sha512-6nt/86SkqUQSLW1ofz8MxC6RhRMqOl3ONISe6qqvJ3xj09aJWQx6DhgSZpugs3PX4PXdOas/WD6A9jx6J2N19A=="],
 
+    "lit": ["lit@3.3.3", "", { "dependencies": { "@lit/reactive-element": "^2.1.0", "lit-element": "^4.2.0", "lit-html": "^3.3.0" } }, "sha512-fycuvZg/hkpozL00lm1pEJH5nN/lr9ZXd6mJI2HSN4+Bzc+LDNdEApJ6HFbPkdFNHLvOplIIuJvxkS4XUxqirw=="],
+
+    "lit-element": ["lit-element@4.2.2", "", { "dependencies": { "@lit-labs/ssr-dom-shim": "^1.5.0", "@lit/reactive-element": "^2.1.0", "lit-html": "^3.3.0" } }, "sha512-aFKhNToWxoyhkNDmWZwEva2SlQia+jfG0fjIWV//YeTaWrVnOxD89dPKfigCUspXFmjzOEUQpOkejH5Ly6sG0w=="],
+
+    "lit-html": ["lit-html@3.3.3", "", { "dependencies": { "@types/trusted-types": "^2.0.2" } }, "sha512-el8M6jK2o3RXBnrSHX3ZKrsN8zEV63pSExTO1wYJz7QndGYZ8353e2a5PPX+qHe2aGayfnchQmkAojaWAREOIA=="],
+
     "loader-utils": ["loader-utils@3.3.1", "", {}, "sha512-FMJTLMXfCLMLfJxcX9PFqX5qD88Z5MRGaZCVzfuqeZSPsyiBzs+pahDQjbIWz2QIzPZz0NX9Zy4FX3lmK6YHIg=="],
 
     "local-pkg": ["local-pkg@1.2.1", "", { "dependencies": { "mlly": "^1.7.4", "pkg-types": "^2.3.0", "quansync": "^0.2.11" } }, "sha512-++gUqRDEvcnN6Zhqrr+y/CkVEHhlrR96vZn3nZZPYzMcBUyBtTKzB9NadClFIsIVSsu+3i9tfk/erqy9kAmt7Q=="],
@@ -1237,6 +1262,8 @@
 
     "package-manager-detector": ["package-manager-detector@1.9.0", "", {}, "sha512-zAMfbta9nPA8AKkA4WdmNAT8R8s6Dk0/xwPsqNnRidMFcLo1YkLuPDTgs2f64XdzS8vbLNnoJ+uUIkgbz7oRHA=="],
 
+    "pako": ["pako@2.2.0", "", {}, "sha512-zJq6RP/5q+TO2OpFV3FHzlPnFjmkb7Nc99a5SNjJE+uu/PkpChs+NIZSSzbBoD+6kjiISXjfYdwj1ZRQ81dz/w=="],
+
     "parseurl": ["parseurl@1.3.3", "", {}, "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ=="],
 
     "path-browserify": ["path-browserify@1.0.1", "", {}, "sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g=="],
diff --git a/docker/Dockerfile b/docker/Dockerfile
index ed4c42e..db9005c 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -30,6 +30,9 @@ ENV NETIGNITE_DB_MIGRATION_DIR=/opt/netignite/app/drizzle/migrations
 ENV NETIGNITE_LOG_DIR=/opt/netignite/data/logs
 ENV NETIGNITE_CONFIG_BASE_DIR=/opt/netignite/config
 
+# ESP32 firmware releases downloaded from GitHub for the web installer.
+ENV NETIGNITE_FIRMWARE_DIR=/opt/netignite/data/firmware
+
 
 VOLUME /opt/netignite/data
 VOLUME /opt/netignite/config
diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index 18a4efc..d41ca5d 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -16,6 +16,10 @@ services:
 
       NETIGNITE_APP_URL: http://localhost:18232
 
+      # ESP32 firmware for the web installer is synced from GitHub releases. Optional:
+      # NETIGNITE_FIRMWARE_SYNC: false
+      # NETIGNITE_FIRMWARE_PUBLIC_KEY: /opt/netignite/config/firmware-signing.pub.pem
+
       NETIGNITE_SMTP_HOST: "mail.example.com"
       NETIGNITE_SMTP_PORT: 465
       NETIGNITE_SMTP_USERNAME: "YourSMTPUsernameHere"
diff --git a/drizzle/migrations/0001_glorious_silver_fox.sql b/drizzle/migrations/0001_glorious_silver_fox.sql
new file mode 100644
index 0000000..861d397
--- /dev/null
+++ b/drizzle/migrations/0001_glorious_silver_fox.sql
@@ -0,0 +1,10 @@
+CREATE TABLE `firmware_releases` (
+	`version` text PRIMARY KEY NOT NULL,
+	`prerelease` integer NOT NULL,
+	`published_at` integer NOT NULL,
+	`release_url` text NOT NULL,
+	`notes` text DEFAULT '' NOT NULL,
+	`manifest` text NOT NULL,
+	`signature_verified` integer NOT NULL,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL
+);
diff --git a/drizzle/migrations/meta/0001_snapshot.json b/drizzle/migrations/meta/0001_snapshot.json
new file mode 100644
index 0000000..c669a20
--- /dev/null
+++ b/drizzle/migrations/meta/0001_snapshot.json
@@ -0,0 +1,1133 @@
+{
+  "version": "6",
+  "dialect": "sqlite",
+  "id": "935cfe0b-c3a1-4812-b68c-42c08337cee4",
+  "prevId": "78a3ea50-2938-4b53-a0df-ac85ea526ed1",
+  "tables": {
+    "agent_enrollments": {
+      "name": "agent_enrollments",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "hashed_token": {
+          "name": "hashed_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "agent_id": {
+          "name": "agent_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "agent_enrollments_agent_id_agents_id_fk": {
+          "name": "agent_enrollments_agent_id_agents_id_fk",
+          "tableFrom": "agent_enrollments",
+          "tableTo": "agents",
+          "columnsFrom": [
+            "agent_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "agent_enrollments_created_by_user_id_users_id_fk": {
+          "name": "agent_enrollments_created_by_user_id_users_id_fk",
+          "tableFrom": "agent_enrollments",
+          "tableTo": "users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "agents": {
+      "name": "agents",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "''"
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_id": {
+          "name": "token_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hashed_secret": {
+          "name": "hashed_secret",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "capabilities": {
+          "name": "capabilities",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'[]'"
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "info": {
+          "name": "info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_seen_at": {
+          "name": "last_seen_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "agents_token_id_unique": {
+          "name": "agents_token_id_unique",
+          "columns": [
+            "token_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "agents_owner_id_users_id_fk": {
+          "name": "agents_owner_id_users_id_fk",
+          "tableFrom": "agents",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "hashed_token": {
+          "name": "hashed_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_role": {
+          "name": "user_role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "device_favorites": {
+      "name": "device_favorites",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_id": {
+          "name": "device_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "device_favorites_user_id_users_id_fk": {
+          "name": "device_favorites_user_id_users_id_fk",
+          "tableFrom": "device_favorites",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "device_favorites_device_id_devices_id_fk": {
+          "name": "device_favorites_device_id_devices_id_fk",
+          "tableFrom": "device_favorites",
+          "tableTo": "devices",
+          "columnsFrom": [
+            "device_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "device_favorites_user_id_device_id_pk": {
+          "columns": [
+            "user_id",
+            "device_id"
+          ],
+          "name": "device_favorites_user_id_device_id_pk"
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "device_shares": {
+      "name": "device_shares",
+      "columns": {
+        "device_id": {
+          "name": "device_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "device_shares_user_id_idx": {
+          "name": "device_shares_user_id_idx",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "device_shares_device_id_devices_id_fk": {
+          "name": "device_shares_device_id_devices_id_fk",
+          "tableFrom": "device_shares",
+          "tableTo": "devices",
+          "columnsFrom": [
+            "device_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "device_shares_user_id_users_id_fk": {
+          "name": "device_shares_user_id_users_id_fk",
+          "tableFrom": "device_shares",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "device_shares_created_by_user_id_users_id_fk": {
+          "name": "device_shares_created_by_user_id_users_id_fk",
+          "tableFrom": "device_shares",
+          "tableTo": "users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "device_shares_device_id_user_id_pk": {
+          "columns": [
+            "device_id",
+            "user_id"
+          ],
+          "name": "device_shares_device_id_user_id_pk"
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "devices": {
+      "name": "devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "''"
+        },
+        "mac_address": {
+          "name": "mac_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "wol_port": {
+          "name": "wol_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 9
+        },
+        "agent_id": {
+          "name": "agent_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_method": {
+          "name": "status_method",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'none'"
+        },
+        "status_address": {
+          "name": "status_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_tcp_port": {
+          "name": "status_tcp_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_agent_id": {
+          "name": "host_agent_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "devices_owner_id_idx": {
+          "name": "devices_owner_id_idx",
+          "columns": [
+            "owner_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "devices_owner_id_users_id_fk": {
+          "name": "devices_owner_id_users_id_fk",
+          "tableFrom": "devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "devices_agent_id_agents_id_fk": {
+          "name": "devices_agent_id_agents_id_fk",
+          "tableFrom": "devices",
+          "tableTo": "agents",
+          "columnsFrom": [
+            "agent_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "devices_host_agent_id_agents_id_fk": {
+          "name": "devices_host_agent_id_agents_id_fk",
+          "tableFrom": "devices",
+          "tableTo": "agents",
+          "columnsFrom": [
+            "host_agent_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "firmware_releases": {
+      "name": "firmware_releases",
+      "columns": {
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "prerelease": {
+          "name": "prerelease",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "published_at": {
+          "name": "published_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "release_url": {
+          "name": "release_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "''"
+        },
+        "manifest": {
+          "name": "manifest",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "signature_verified": {
+          "name": "signature_verified",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "metadata": {
+      "name": "metadata",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "password_resets": {
+      "name": "password_resets",
+      "columns": {
+        "token": {
+          "name": "token",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "password_resets_user_id_users_id_fk": {
+          "name": "password_resets_user_id_users_id_fk",
+          "tableFrom": "password_resets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "scheduled_tasks": {
+      "name": "scheduled_tasks",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "function": {
+          "name": "function",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "args": {
+          "name": "args",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "autoDelete": {
+          "name": "autoDelete",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "0"
+        },
+        "storeLogs": {
+          "name": "storeLogs",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "0"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'pending'"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "finished_at": {
+          "name": "finished_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "result": {
+          "name": "result",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "message": {
+          "name": "message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "scheduled_tasks_created_by_user_id_users_id_fk": {
+          "name": "scheduled_tasks_created_by_user_id_users_id_fk",
+          "tableFrom": "scheduled_tasks",
+          "tableTo": "users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "scheduled_tasks_paused_state": {
+      "name": "scheduled_tasks_paused_state",
+      "columns": {
+        "task_id": {
+          "name": "task_id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "next_step_to_execute": {
+          "name": "next_step_to_execute",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "scheduled_tasks_paused_state_task_id_scheduled_tasks_id_fk": {
+          "name": "scheduled_tasks_paused_state_task_id_scheduled_tasks_id_fk",
+          "tableFrom": "scheduled_tasks_paused_state",
+          "tableTo": "scheduled_tasks",
+          "columnsFrom": [
+            "task_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "hashed_token": {
+          "name": "hashed_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_role": {
+          "name": "user_role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "user_preferences_user_id_key_unique": {
+          "name": "user_preferences_user_id_key_unique",
+          "columns": [
+            "user_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'user'"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "users_username_unique": {
+          "name": "users_username_unique",
+          "columns": [
+            "username"
+          ],
+          "isUnique": true
+        },
+        "users_email_unique": {
+          "name": "users_email_unique",
+          "columns": [
+            "email"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    }
+  },
+  "views": {},
+  "enums": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/migrations/meta/_journal.json b/drizzle/migrations/meta/_journal.json
index c1009a1..7c51bb6 100644
--- a/drizzle/migrations/meta/_journal.json
+++ b/drizzle/migrations/meta/_journal.json
@@ -8,6 +8,13 @@
       "when": 1792371688828,
       "tag": "0000_purple_thanos",
       "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "6",
+      "when": 1792530394007,
+      "tag": "0001_glorious_silver_fox",
+      "breakpoints": true
     }
   ]
 }
\ No newline at end of file
diff --git a/example.env b/example.env
index 6d3332d..25e65c7 100644
--- a/example.env
+++ b/example.env
@@ -14,6 +14,15 @@ NETIGNITE_CONFIG_BASE_DIR=./config
 
 NETIGNITE_APP_URL=http://localhost:18232
 
+# ESP32 firmware for the web installer, synced from GitHub releases every 6 hours.
+NETIGNITE_FIRMWARE_SYNC=true
+NETIGNITE_FIRMWARE_REPO=NetIgnite-project/Agent-ESP32
+NETIGNITE_FIRMWARE_DIR=./data/firmware
+# Optional: PEM ECDSA P-256 public key; only releases with a valid firmware.sig are accepted.
+# NETIGNITE_FIRMWARE_PUBLIC_KEY=./config/firmware-signing.pub.pem
+# Optional: raises GitHub's API rate limit.
+# NETIGNITE_GITHUB_TOKEN=
+
 NETIGNITE_SMTP_HOST=mail.example.com
 NETIGNITE_SMTP_PORT=465
 NETIGNITE_SMTP_USERNAME=user
diff --git a/nuxt.config.ts b/nuxt.config.ts
index 6d71608..83dc2fe 100644
--- a/nuxt.config.ts
+++ b/nuxt.config.ts
@@ -14,6 +14,13 @@ export default defineNuxtConfig({
 
 	css: ["~/assets/css/main.css"],
 
+	vue: {
+		compilerOptions: {
+			// ESP Web Tools' web component (the ESP32 web installer).
+			isCustomElement: (tag) => tag.startsWith("esp-web-") || tag.startsWith("ewt-"),
+		},
+	},
+
 	nitro: {
 		// Agent gateway (server/routes/ws/agent.ts); needs the Bun preset.
 		experimental: {
diff --git a/package.json b/package.json
index 0eae746..1c56675 100644
--- a/package.json
+++ b/package.json
@@ -25,19 +25,20 @@
 	},
 	"dependencies": {
 		"@cleverjs/utils": "^1.2.5",
-		"@nuxt/ui": "^4.9.0",
 		"@hono/standard-validator": "^0.3.0",
+		"@nuxt/ui": "^4.9.0",
 		"@scalar/hono-api-reference": "^0.11.9",
 		"drizzle-orm": "^0.45.2",
 		"drizzle-zod": "^0.8.3",
+		"elliptic": "^6.6.1",
+		"esp-web-tools": "10.4.0",
 		"hono": "^4.12.30",
 		"hono-openapi": "^1.3.1",
 		"nodemailer": "^9.0.0",
-		"zod": "^4.4.3",
-		"elliptic": "^6.6.1",
 		"nuxt": "^4.6.2",
 		"vue": "^3.5.39",
-		"vue-router": "^5.1.0"
+		"vue-router": "^5.1.0",
+		"zod": "^4.4.3"
 	},
 	"devDependencies": {
 		"@hey-api/nuxt": "^0.2.1",
diff --git a/server/lib/api/utils/metadata.ts b/server/lib/api/utils/metadata.ts
index 9383a90..410e33f 100644
--- a/server/lib/api/utils/metadata.ts
+++ b/server/lib/api/utils/metadata.ts
@@ -1,6 +1,7 @@
 import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { DB } from "../../db/index";
+import { FirmwareSettings } from "./shared-models/netigniteData";
 
 export class RuntimeMetadata {
 	protected static readonly schemas = {
@@ -9,8 +10,18 @@ export class RuntimeMetadata {
 			.object({
 				/** Lets anyone create an account at /auth/signup. Off by default for self-hosted servers. */
 				registration_enabled: z.boolean().default(false),
+				/** Which ESP32 firmware releases the installer and OTA updates offer by default. */
+				firmware_channel: FirmwareSettings.Channel.default("stable"),
 			})
-			.default({ registration_enabled: false }),
+			.default({ registration_enabled: false, firmware_channel: "stable" }),
+		/** Outcome of the last firmware release sync from GitHub. */
+		firmware_sync: z
+			.object({
+				last_run_at: z.number().nullable().default(null),
+				last_success_at: z.number().nullable().default(null),
+				error: z.string().nullable().default(null),
+			})
+			.default({ last_run_at: null, last_success_at: null, error: null }),
 		/** v1 id → v2 id of everything imported by `import-v1`, so re-running it skips them. */
 		v1_import: z
 			.object({
@@ -33,6 +44,14 @@ export class RuntimeMetadata {
 		return this.getMetadata("settings");
 	}
 
+	static getFirmwareSyncState() {
+		return this.getMetadata("firmware_sync");
+	}
+
+	static setFirmwareSyncState(state: z.infer<(typeof this.schemas)["firmware_sync"]>) {
+		return this.setMetadata("firmware_sync", state);
+	}
+
 	static async updateSettings(update: Partial<z.infer<(typeof this.schemas)["settings"]>>) {
 		const settings = { ...(await this.getSettings()), ...update };
 		await this.setMetadata("settings", settings);
diff --git a/server/lib/api/utils/shared-models/netigniteData.ts b/server/lib/api/utils/shared-models/netigniteData.ts
index 77129ef..ca074db 100644
--- a/server/lib/api/utils/shared-models/netigniteData.ts
+++ b/server/lib/api/utils/shared-models/netigniteData.ts
@@ -52,3 +52,49 @@ export namespace ShareSettings {
 	export const Role = z.enum(Roles);
 	export type Role = z.infer<typeof Role>;
 }
+
+export namespace FirmwareSettings {
+	/** `stable`: releases only. `prerelease`: also betas and release candidates. */
+	export const Channels = ["stable", "prerelease"] as const;
+	export const Channel = z.enum(Channels);
+	export type Channel = z.infer<typeof Channel>;
+
+	/** `2.0.0`, `2.1.0-beta.1`: a release tag without its `v`. */
+	export const Version = z.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/, "Invalid version");
+
+	const FileName = z.string().regex(/^[A-Za-z0-9_.-]+$/, "Invalid file name");
+
+	/**
+	 * `release.json` of an Agent-ESP32 release (scripts/collect_release.py): the flash images with
+	 * their offsets, and where the installer writes the agent's provisioning data.
+	 */
+	export const Manifest = z.object({
+		format: z.literal(1),
+		name: z.string(),
+		version: Version,
+		chip_family: z.literal("ESP32"),
+		board: z.string(),
+		protocol: z.number().int(),
+		parts: z
+			.array(
+				z.object({
+					file: FileName,
+					offset: z.number().int().nonnegative(),
+					size: z.number().int().positive(),
+					sha256: z.string().regex(/^[0-9a-f]{64}$/),
+				}),
+			)
+			.min(1),
+		nvs: z.object({
+			offset: z.number().int().nonnegative(),
+			size: z.number().int().positive(),
+			namespace: z.string().min(1).max(15),
+			keys: z.array(z.string()),
+		}),
+		app: z.object({
+			file: FileName,
+			signature: FileName.nullable(),
+		}),
+	});
+	export type Manifest = z.infer<typeof Manifest>;
+}
diff --git a/server/lib/api/versions/v1/docs/index.ts b/server/lib/api/versions/v1/docs/index.ts
index b2047a6..12a65b6 100644
--- a/server/lib/api/versions/v1/docs/index.ts
+++ b/server/lib/api/versions/v1/docs/index.ts
@@ -8,11 +8,13 @@ export const DOCS_TAGS = {
 	AGENTS: "Agents",
 	DEVICES: "Devices",
 	DEVICE_SHARES: "Devices / Sharing",
+	FIRMWARE: "Firmware",
 
 	ADMIN_API: {
 		BASE: "Admin",
 
 		USERS: "Admin / Users",
 		SETTINGS: "Admin / Settings",
+		FIRMWARE: "Admin / Firmware",
 	},
 };
diff --git a/server/lib/api/versions/v1/index.ts b/server/lib/api/versions/v1/index.ts
index 67a8fc7..1df5016 100644
--- a/server/lib/api/versions/v1/index.ts
+++ b/server/lib/api/versions/v1/index.ts
@@ -9,6 +9,7 @@ import { router as adminRouter } from "./routes/admin";
 import { router as agentsRouter } from "./routes/agents";
 import { router as authRouter } from "./routes/auth";
 import { router as devicesRouter } from "./routes/devices";
+import { router as firmwareRouter } from "./routes/firmware";
 
 const openAPIConfig: Partial<GenerateSpecOptions> = {
 	documentation: {
@@ -62,11 +63,11 @@ const openAPIConfig: Partial<GenerateSpecOptions> = {
 			},
 			{
 				name: "Agents & Devices",
-				tags: [DOCS_TAGS.AGENTS, DOCS_TAGS.DEVICES, DOCS_TAGS.DEVICE_SHARES],
+				tags: [DOCS_TAGS.AGENTS, DOCS_TAGS.DEVICES, DOCS_TAGS.DEVICE_SHARES, DOCS_TAGS.FIRMWARE],
 			},
 			{
 				name: DOCS_TAGS.ADMIN_API.BASE,
-				tags: [DOCS_TAGS.ADMIN_API.USERS, DOCS_TAGS.ADMIN_API.SETTINGS],
+				tags: [DOCS_TAGS.ADMIN_API.USERS, DOCS_TAGS.ADMIN_API.SETTINGS, DOCS_TAGS.ADMIN_API.FIRMWARE],
 			},
 		],
 
@@ -114,6 +115,10 @@ const openAPIConfig: Partial<GenerateSpecOptions> = {
 				parent: DOCS_TAGS.DEVICES,
 				description: "Share devices with other users as viewer, operator or manager",
 			},
+			{
+				name: DOCS_TAGS.FIRMWARE,
+				description: "ESP32 firmware releases for the web installer and OTA updates",
+			},
 
 			{
 				name: DOCS_TAGS.ADMIN_API.SETTINGS,
@@ -123,6 +128,14 @@ const openAPIConfig: Partial<GenerateSpecOptions> = {
 				parent: DOCS_TAGS.ADMIN_API.BASE,
 				description: "Server-wide settings such as public registration",
 			},
+			{
+				name: DOCS_TAGS.ADMIN_API.FIRMWARE,
+				// @ts-ignore
+				"x-displayName": "Firmware",
+				summary: "Firmware",
+				parent: DOCS_TAGS.ADMIN_API.BASE,
+				description: "Firmware release sync from GitHub",
+			},
 			{
 				name: DOCS_TAGS.ADMIN_API.USERS,
 				// @ts-ignore
@@ -144,6 +157,7 @@ router.route("/", accountRouter);
 router.route("/", adminRouter);
 router.route("/", agentsRouter);
 router.route("/", devicesRouter);
+router.route("/", firmwareRouter);
 
 export class APIv1Router extends APIVersionRouter {
 	constructor() {
diff --git a/server/lib/api/versions/v1/routes/admin/firmware/index.ts b/server/lib/api/versions/v1/routes/admin/firmware/index.ts
new file mode 100644
index 0000000..396b119
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/admin/firmware/index.ts
@@ -0,0 +1,78 @@
+import { Hono } from "hono";
+import z from "zod";
+import { FirmwareCatalog } from "../../../../../../firmware/catalog";
+import { ConfigHandler } from "../../../../../../utils/config";
+import { APIResponse } from "../../../../../utils/api-res";
+import { RuntimeMetadata } from "../../../../../utils/metadata";
+import { APIResponseSpec, APIRouteSpec } from "../../../../../utils/specHelpers";
+import { DOCS_TAGS } from "../../../docs";
+
+export const router = new Hono().basePath("/firmware");
+
+const SyncState = z.object({
+	/** Automatic sync (FIRMWARE_SYNC); a manual sync works either way. */
+	enabled: z.boolean(),
+	repo: z.string(),
+	/** Whether FIRMWARE_PUBLIC_KEY is set, so only signed releases are accepted. */
+	signature_required: z.boolean(),
+	last_run_at: z.number().nullable(),
+	last_success_at: z.number().nullable(),
+	error: z.string().nullable(),
+});
+
+const SyncResult = z.object({
+	added: z.array(z.string()),
+	removed: z.array(z.string()),
+	skipped: z.array(z.object({ version: z.string(), reason: z.string() })),
+	state: SyncState,
+});
+
+async function getState(): Promise<z.infer<typeof SyncState>> {
+	const config = ConfigHandler.getConfig();
+	return {
+		enabled: config?.FIRMWARE_SYNC ?? false,
+		repo: config?.FIRMWARE_REPO ?? "",
+		signature_required: Boolean(config?.FIRMWARE_PUBLIC_KEY),
+		...(await RuntimeMetadata.getFirmwareSyncState()),
+	};
+}
+
+router.get(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "Get the firmware sync state",
+		tags: [DOCS_TAGS.ADMIN_API.FIRMWARE],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Sync state retrieved", SyncState),
+		),
+	}),
+
+	async (c) => APIResponse.success(c, "Sync state retrieved", await getState()),
+);
+
+router.post(
+	"/sync",
+
+	APIRouteSpec.authenticated({
+		summary: "Sync firmware releases now",
+		description: "Checks GitHub for new firmware releases and downloads them.",
+		tags: [DOCS_TAGS.ADMIN_API.FIRMWARE],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Sync finished", SyncResult),
+			APIResponseSpec.badGateway("GitHub couldn't be reached or answered with an error"),
+		),
+	}),
+
+	async (c) => {
+		const result = await FirmwareCatalog.sync();
+		if (result.error) return APIResponse.badGateway(c, result.error);
+
+		return APIResponse.success(c, "Sync finished", {
+			added: result.added,
+			removed: result.removed,
+			skipped: result.skipped,
+			state: await getState(),
+		} satisfies z.infer<typeof SyncResult>);
+	},
+);
diff --git a/server/lib/api/versions/v1/routes/admin/index.ts b/server/lib/api/versions/v1/routes/admin/index.ts
index 8012565..6070f29 100644
--- a/server/lib/api/versions/v1/routes/admin/index.ts
+++ b/server/lib/api/versions/v1/routes/admin/index.ts
@@ -20,3 +20,4 @@ router.use("*", async (c, next) => {
 
 router.route("/", (await import("./users")).router);
 router.route("/", (await import("./settings")).router);
+router.route("/", (await import("./firmware")).router);
diff --git a/server/lib/api/versions/v1/routes/admin/settings/index.ts b/server/lib/api/versions/v1/routes/admin/settings/index.ts
index f3740dd..7950447 100644
--- a/server/lib/api/versions/v1/routes/admin/settings/index.ts
+++ b/server/lib/api/versions/v1/routes/admin/settings/index.ts
@@ -3,6 +3,7 @@ import { validator } from "hono-openapi";
 import z from "zod";
 import { APIResponse } from "../../../../../utils/api-res";
 import { RuntimeMetadata } from "../../../../../utils/metadata";
+import { FirmwareSettings } from "../../../../../utils/shared-models/netigniteData";
 import { APIResponseSpec, APIRouteSpec } from "../../../../../utils/specHelpers";
 import { DOCS_TAGS } from "../../../docs";
 
@@ -10,6 +11,8 @@ export const router = new Hono().basePath("/settings");
 
 const Settings = z.object({
 	registration_enabled: z.boolean(),
+	/** Firmware releases the installer and OTA updates offer by default. */
+	firmware_channel: FirmwareSettings.Channel,
 });
 
 router.get(
diff --git a/server/lib/api/versions/v1/routes/agents/index.ts b/server/lib/api/versions/v1/routes/agents/index.ts
index 766b311..4f80850 100644
--- a/server/lib/api/versions/v1/routes/agents/index.ts
+++ b/server/lib/api/versions/v1/routes/agents/index.ts
@@ -6,6 +6,9 @@ import z from "zod";
 import { AgentAuth } from "../../../../../agents/auth";
 import { AgentCloseCodes, AgentRegistry } from "../../../../../agents/registry";
 import { DB } from "../../../../../db";
+import { FirmwareCatalog } from "../../../../../firmware/catalog";
+import { ProvisioningImage } from "../../../../../firmware/provisioning";
+import { ConfigHandler } from "../../../../../utils/config";
 import { Logger } from "../../../../../utils/logger";
 import { APIResponse } from "../../../../utils/api-res";
 import { APIResponseSpec, APIRouteSpec } from "../../../../utils/specHelpers";
@@ -295,3 +298,57 @@ router.post(
 		return APIResponse.success(c, "Credential revoked", toAgentResponse(updated ?? agent));
 	},
 );
+
+router.post(
+	"/:agentID/flash-image",
+
+	APIRouteSpec.authenticated({
+		summary: "Create an ESP32 flash image",
+		description:
+			"Creates the NVS image the web installer flashes together with the firmware: the server URL, the " +
+			"agent's name and a new single-use enrollment token (valid 15 minutes; older unused tokens stop " +
+			"working). The agent enrolls with it on its first connection, which replaces its current credential.",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.created("Flash image created", AgentsModel.FlashImage.Response),
+			APIResponseSpec.notFound("Agent or firmware release not found"),
+		),
+	}),
+
+	validator("json", AgentsModel.FlashImage.Body),
+
+	async (c) => {
+		const agent = getAgent(c);
+		if (agent.kind !== "esp32") {
+			return APIResponse.badRequest(c, "Only ESP32 agents are installed from the browser");
+		}
+
+		const body = c.req.valid("json");
+		const release = await FirmwareCatalog.get(body.version);
+		if (!release) return APIResponse.notFound(c, "Firmware release not found");
+		if (!ProvisioningImage.supports(release.manifest)) {
+			return APIResponse.badRequest(
+				c,
+				`Firmware ${release.version} can't be set up by the web installer`,
+			);
+		}
+
+		const appURL = ConfigHandler.getConfig()?.APP_URL ?? "";
+		const serverURL = (body.server_url ?? appURL).replace(/\/$/, "");
+		const enrollment = await AgentAuth.createEnrollment(agent.id, getUserID(c));
+		const image = ProvisioningImage.build(release.manifest, {
+			server: serverURL,
+			enroll: enrollment.token,
+			name: agent.name,
+		});
+
+		// The image holds a credential: never cache it.
+		c.header("Cache-Control", "no-store");
+		return APIResponse.created(c, "Flash image created", {
+			image: Buffer.from(image).toString("base64"),
+			offset: release.manifest.nvs.offset,
+			server_url: serverURL,
+			expires_at: enrollment.expires_at,
+		} satisfies AgentsModel.FlashImage.Response);
+	},
+);
diff --git a/server/lib/api/versions/v1/routes/agents/model.ts b/server/lib/api/versions/v1/routes/agents/model.ts
index 872a5be..33ff5fc 100644
--- a/server/lib/api/versions/v1/routes/agents/model.ts
+++ b/server/lib/api/versions/v1/routes/agents/model.ts
@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { AgentSettings } from "../../../../utils/shared-models/netigniteData";
+import { AgentSettings, FirmwareSettings } from "../../../../utils/shared-models/netigniteData";
 
 export namespace AgentsModel {
 	export const Name = z.string().trim().min(1, "Name is required").max(64, "Name is too long");
@@ -63,3 +63,31 @@ export namespace AgentsModel.Enroll {
 	});
 	export type Response = z.infer<typeof Response>;
 }
+
+export namespace AgentsModel.FlashImage {
+	export const Body = z.object({
+		/** Firmware release the image is for (its NVS layout). */
+		version: FirmwareSettings.Version,
+		/** URL the agent connects to. Defaults to the server's public URL (NETIGNITE_APP_URL). */
+		server_url: z
+			.url({ protocol: /^https?$/, error: "Must be an http:// or https:// URL" })
+			.max(200)
+			.refine((url) => {
+				const parsed = new URL(url);
+				return !parsed.username && !parsed.password && !parsed.search && !parsed.hash;
+			}, "The URL can't contain credentials, a query or a fragment")
+			.optional(),
+	});
+	export type Body = z.infer<typeof Body>;
+
+	export const Response = z.object({
+		/** NVS partition image (base64) with the server URL, the agent's name and a single-use enrollment token. */
+		image: z.string(),
+		/** Flash offset of the image. */
+		offset: z.number(),
+		server_url: z.string(),
+		/** The enrollment token in the image expires at this time; flash before. */
+		expires_at: z.number(),
+	});
+	export type Response = z.infer<typeof Response>;
+}
diff --git a/server/lib/api/versions/v1/routes/firmware/index.ts b/server/lib/api/versions/v1/routes/firmware/index.ts
new file mode 100644
index 0000000..0c3b730
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/firmware/index.ts
@@ -0,0 +1,94 @@
+import { Hono } from "hono";
+import { validator } from "hono-openapi";
+import type { DB } from "../../../../../db";
+import { FirmwareCatalog } from "../../../../../firmware/catalog";
+import { APIResponse } from "../../../../utils/api-res";
+import { RuntimeMetadata } from "../../../../utils/metadata";
+import { APIResponseSpec, APIRouteSpec } from "../../../../utils/specHelpers";
+import { DOCS_TAGS } from "../../docs";
+import { requireUser } from "../../middleware/requireUser";
+import { FirmwareModel } from "./model";
+
+export const router = new Hono().basePath("/firmware");
+
+router.use("*", requireUser);
+
+export function toReleaseResponse(release: DB.Models.FirmwareRelease): FirmwareModel.Release {
+	return {
+		version: release.version,
+		prerelease: release.prerelease,
+		published_at: release.published_at,
+		release_url: release.release_url,
+		notes: release.notes,
+		signature_verified: release.signature_verified,
+		chip_family: release.manifest.chip_family,
+		parts: release.manifest.parts,
+		nvs_offset: release.manifest.nvs.offset,
+	};
+}
+
+router.get(
+	"/",
+
+	APIRouteSpec.authenticated({
+		summary: "List firmware releases",
+		description:
+			"ESP32 firmware releases available for the web installer and OTA updates, newest first. They " +
+			"are synced from the GitHub releases of the Agent-ESP32 repository.",
+		tags: [DOCS_TAGS.FIRMWARE],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Firmware releases retrieved", FirmwareModel.Catalog),
+		),
+	}),
+
+	async (c) => {
+		const releases = await FirmwareCatalog.list();
+		const { firmware_channel } = await RuntimeMetadata.getSettings();
+
+		return APIResponse.success(c, "Firmware releases retrieved", {
+			channel: firmware_channel,
+			recommended: FirmwareCatalog.recommended(releases, firmware_channel)?.version ?? null,
+			releases: releases.map(toReleaseResponse),
+		} satisfies FirmwareModel.Catalog);
+	},
+);
+
+router.get(
+	"/:version/files/:file",
+
+	APIRouteSpec.authenticated({
+		summary: "Download a firmware file",
+		description: "A flash image (or the signature) of a synced release, for the web installer.",
+		tags: [DOCS_TAGS.FIRMWARE],
+		responses: {
+			200: {
+				description: "The file",
+				content: { "application/octet-stream": { schema: { type: "string", format: "binary" } } },
+			},
+			...APIResponseSpec.notFound("Unknown release or file"),
+		},
+	}),
+
+	validator("param", FirmwareModel.FileParams),
+
+	async (c) => {
+		const { version, file } = c.req.valid("param");
+
+		const release = await FirmwareCatalog.get(version);
+		const filePath = release && FirmwareCatalog.filePath(release, file);
+		const data = filePath ? Bun.file(filePath) : null;
+		if (!data || !(await data.exists())) {
+			return APIResponse.notFound(c, "Unknown release or file");
+		}
+
+		return new Response(data, {
+			headers: {
+				"Content-Type": "application/octet-stream",
+				"Content-Length": String(data.size),
+				"Content-Disposition": `attachment; filename="${version}-${file}"`,
+				// A version's files never change.
+				"Cache-Control": "private, max-age=31536000, immutable",
+			},
+		});
+	},
+);
diff --git a/server/lib/api/versions/v1/routes/firmware/model.ts b/server/lib/api/versions/v1/routes/firmware/model.ts
new file mode 100644
index 0000000..9438626
--- /dev/null
+++ b/server/lib/api/versions/v1/routes/firmware/model.ts
@@ -0,0 +1,40 @@
+import { z } from "zod";
+import { FirmwareSettings } from "../../../../utils/shared-models/netigniteData";
+
+export namespace FirmwareModel {
+	export const Release = z.object({
+		version: z.string(),
+		prerelease: z.boolean(),
+		published_at: z.number(),
+		release_url: z.string(),
+		notes: z.string(),
+		/** Whether the app image's signature was checked against the server's public key. */
+		signature_verified: z.boolean(),
+		chip_family: z.string(),
+		/** Flash images with their offsets; download them from `/firmware/<version>/files/<file>`. */
+		parts: z.array(
+			z.object({
+				file: z.string(),
+				offset: z.number(),
+				size: z.number(),
+				sha256: z.string(),
+			}),
+		),
+		/** Where the installer writes the agent's provisioning data. */
+		nvs_offset: z.number(),
+	});
+	export type Release = z.infer<typeof Release>;
+
+	export const Catalog = z.object({
+		channel: FirmwareSettings.Channel,
+		/** The newest release of the channel; null if there is none. */
+		recommended: z.string().nullable(),
+		releases: z.array(Release),
+	});
+	export type Catalog = z.infer<typeof Catalog>;
+
+	export const FileParams = z.object({
+		version: FirmwareSettings.Version,
+		file: z.string().regex(/^[A-Za-z0-9_.-]+$/),
+	});
+}
diff --git a/server/lib/db/index.ts b/server/lib/db/index.ts
index ca4fb9c..6397610 100644
--- a/server/lib/db/index.ts
+++ b/server/lib/db/index.ts
@@ -145,6 +145,7 @@ export namespace DB.Tables {
 	export const devices = TableSchema.devices;
 	export const deviceShares = TableSchema.deviceShares;
 	export const deviceFavorites = TableSchema.deviceFavorites;
+	export const firmwareReleases = TableSchema.firmwareReleases;
 }
 
 export namespace DB.Models {
@@ -165,4 +166,5 @@ export namespace DB.Models {
 	export type Device = typeof DB.Tables.devices.$inferSelect;
 	export type DeviceShare = typeof DB.Tables.deviceShares.$inferSelect;
 	export type DeviceFavorite = typeof DB.Tables.deviceFavorites.$inferSelect;
+	export type FirmwareRelease = typeof DB.Tables.firmwareReleases.$inferSelect;
 }
diff --git a/server/lib/db/schema.ts b/server/lib/db/schema.ts
index 793a410..5d35205 100644
--- a/server/lib/db/schema.ts
+++ b/server/lib/db/schema.ts
@@ -12,6 +12,7 @@ import { UserAccountSettings } from "../api/utils/shared-models/accountData";
 import {
 	AgentSettings,
 	DeviceSettings,
+	type FirmwareSettings,
 	ShareSettings,
 } from "../api/utils/shared-models/netigniteData";
 import { SQLUtils } from "./utils";
@@ -186,6 +187,24 @@ export const agentEnrollments = sqliteTable("agent_enrollments", {
 	used_at: integer(),
 });
 
+/**
+ * @deprecated Use DB.Tables.firmwareReleases to access this table.
+ *
+ * ESP32 firmware releases synced from GitHub; the files are in `<FIRMWARE_DIR>/<version>/`.
+ */
+export const firmwareReleases = sqliteTable("firmware_releases", {
+	version: text().primaryKey(),
+	prerelease: integer({ mode: "boolean" }).notNull(),
+	published_at: integer().notNull(),
+	release_url: text().notNull(),
+	notes: text().notNull().default(""),
+	// The release's release.json.
+	manifest: text({ mode: "json" }).$type<FirmwareSettings.Manifest>().notNull(),
+	// Whether firmware.sig was checked against FIRMWARE_PUBLIC_KEY.
+	signature_verified: integer({ mode: "boolean" }).notNull(),
+	created_at: SQLUtils.getCreatedAtColumn(),
+});
+
 /**
  * @deprecated Use DB.Tables.devices to access this table.
  */
diff --git a/server/lib/firmware/catalog.ts b/server/lib/firmware/catalog.ts
new file mode 100644
index 0000000..7cb054e
--- /dev/null
+++ b/server/lib/firmware/catalog.ts
@@ -0,0 +1,363 @@
+import { createHash, randomBytes, verify } from "node:crypto";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { desc, eq } from "drizzle-orm";
+import { z } from "zod";
+import { RuntimeMetadata } from "../api/utils/metadata";
+import { FirmwareSettings } from "../api/utils/shared-models/netigniteData";
+import { DB } from "../db";
+import { Logger } from "../utils/logger";
+
+/**
+ * ESP32 firmware releases for the web installer and OTA updates.
+ *
+ * `sync()` reads the GitHub releases of the Agent-ESP32 repository, downloads the files listed in
+ * each release's `release.json`, checks their size and SHA-256 (and `firmware.sig` when a public
+ * key is configured) and keeps the newest releases in `<dir>/<version>/`. Firmware only ever comes
+ * from these releases; there are no uploads.
+ */
+export class FirmwareCatalog {
+	/** Releases kept locally; the newest stable release is kept in addition. */
+	static readonly KEEP_RELEASES = 5;
+	static readonly MAX_FILE_SIZE = 4 * 1024 * 1024;
+	/** The agent protocol this server speaks; releases for another one are skipped. */
+	static readonly PROTOCOL = 2;
+
+	protected static source: FirmwareCatalog.Source | null = null;
+	protected static running: Promise<FirmwareCatalog.SyncResult> | null = null;
+
+	static async configure(source: FirmwareCatalog.SourceOptions) {
+		this.source = {
+			...source,
+			apiURL: source.apiURL.replace(/\/$/, ""),
+			publicKey: source.publicKeyPath ? await Bun.file(source.publicKeyPath).text() : null,
+		};
+	}
+
+	static get configured() {
+		return this.source !== null;
+	}
+
+	/** Releases, newest first. */
+	static async list() {
+		const releases = await DB.instance()
+			.select()
+			.from(DB.Tables.firmwareReleases)
+			.orderBy(desc(DB.Tables.firmwareReleases.published_at));
+		return releases.sort((a, b) => Bun.semver.order(b.version, a.version));
+	}
+
+	static async get(version: string) {
+		return (
+			(await DB.instance()
+				.select()
+				.from(DB.Tables.firmwareReleases)
+				.where(eq(DB.Tables.firmwareReleases.version, version))
+				.get()) ?? null
+		);
+	}
+
+	/** The newest release of the channel, or null. */
+	static recommended(releases: DB.Models.FirmwareRelease[], channel: FirmwareSettings.Channel) {
+		return releases.find((release) => channel === "prerelease" || !release.prerelease) ?? null;
+	}
+
+	/**
+	 * Path of a file of a synced release: one of its flash images or its signature. Null if the
+	 * release or file is unknown.
+	 */
+	static filePath(release: DB.Models.FirmwareRelease, file: string) {
+		const known =
+			release.manifest.parts.some((part) => part.file === file) ||
+			release.manifest.app.signature === file;
+		if (!known || !this.source) return null;
+		return path.join(this.source.dir, release.version, file);
+	}
+
+	/** Runs a sync, or joins the one already running. Never throws; see the result's `error`. */
+	static sync() {
+		this.running ??= this.runSync().finally(() => {
+			this.running = null;
+		});
+		return this.running;
+	}
+
+	protected static async runSync(): Promise<FirmwareCatalog.SyncResult> {
+		const source = this.source;
+		const state = await RuntimeMetadata.getFirmwareSyncState();
+		const startedAt = Date.now();
+
+		if (!source) {
+			return { added: [], removed: [], skipped: [], error: "The firmware catalog isn't configured" };
+		}
+
+		try {
+			const result = await this.syncFrom(source);
+			await RuntimeMetadata.setFirmwareSyncState({
+				last_run_at: startedAt,
+				last_success_at: startedAt,
+				error: null,
+			});
+			if (result.added.length > 0 || result.removed.length > 0) {
+				Logger.info(
+					`Firmware sync: added ${result.added.join(", ") || "none"}, removed ${result.removed.join(", ") || "none"}`,
+				);
+			}
+			for (const skipped of result.skipped) {
+				Logger.warn(`Firmware sync: skipped ${skipped.version}: ${skipped.reason}`);
+			}
+			return result;
+		} catch (error) {
+			const message = Error.isError(error) ? error.message : String(error);
+			Logger.warn(`Firmware sync failed: ${message}`);
+			await RuntimeMetadata.setFirmwareSyncState({ ...state, last_run_at: startedAt, error: message });
+			return { added: [], removed: [], skipped: [], error: message };
+		}
+	}
+
+	protected static async syncFrom(
+		source: FirmwareCatalog.Source,
+	): Promise<FirmwareCatalog.SyncResult> {
+		const headers: Record<string, string> = {
+			Accept: "application/vnd.github+json",
+			"User-Agent": "NetIgnite-Server",
+			"X-GitHub-Api-Version": "2022-11-28",
+		};
+		if (source.token) headers.Authorization = `Bearer ${source.token}`;
+
+		const response = await fetch(`${source.apiURL}/repos/${source.repo}/releases?per_page=30`, {
+			headers,
+			signal: AbortSignal.timeout(30_000),
+		});
+		if (!response.ok) {
+			throw new Error(`GitHub answered ${response.status} for the releases of ${source.repo}`);
+		}
+		const releases = z.array(GitHubRelease).parse(await response.json());
+
+		const candidates = releases
+			.filter((release) => !release.draft)
+			.map((release) => ({ release, version: release.tag_name.replace(/^v/, "") }))
+			.filter(
+				({ release, version }) =>
+					FirmwareSettings.Version.safeParse(version).success &&
+					release.assets.some((asset) => asset.name === "release.json"),
+			)
+			.sort((a, b) => Bun.semver.order(b.version, a.version));
+
+		const keep = candidates.slice(0, this.KEEP_RELEASES);
+		const newestStable = candidates.find(({ release }) => !release.prerelease);
+		if (newestStable && !keep.includes(newestStable)) keep.push(newestStable);
+
+		const result: FirmwareCatalog.SyncResult = { added: [], removed: [], skipped: [], error: null };
+		const stored = new Map((await this.list()).map((release) => [release.version, release]));
+
+		for (const { release, version } of keep) {
+			const existing = stored.get(version);
+			if (existing && (await this.filesPresent(source, existing))) {
+				if (existing.prerelease !== release.prerelease) {
+					await DB.instance()
+						.update(DB.Tables.firmwareReleases)
+						.set({ prerelease: release.prerelease })
+						.where(eq(DB.Tables.firmwareReleases.version, version));
+				}
+				continue;
+			}
+
+			try {
+				await this.download(source, release, version);
+				result.added.push(version);
+			} catch (error) {
+				result.skipped.push({ version, reason: Error.isError(error) ? error.message : String(error) });
+			}
+		}
+
+		// Releases that are no longer among the newest (or were deleted on GitHub).
+		const kept = new Set(keep.map(({ version }) => version));
+		for (const version of stored.keys()) {
+			if (kept.has(version)) continue;
+			await DB.instance()
+				.delete(DB.Tables.firmwareReleases)
+				.where(eq(DB.Tables.firmwareReleases.version, version));
+			result.removed.push(version);
+		}
+		await this.removeStaleDirectories(source, kept);
+
+		return result;
+	}
+
+	protected static async download(
+		source: FirmwareCatalog.Source,
+		release: z.infer<typeof GitHubRelease>,
+		version: string,
+	) {
+		const asset = (name: string) => {
+			const found = release.assets.find((a) => a.name === name);
+			if (!found) throw new Error(`the release has no ${name}`);
+			return found;
+		};
+
+		const manifestData = await this.fetchFile(asset("release.json"), 64 * 1024);
+		const parsed = FirmwareSettings.Manifest.safeParse(
+			JSON.parse(new TextDecoder().decode(manifestData)),
+		);
+		if (!parsed.success) {
+			throw new Error(`invalid release.json: ${parsed.error.issues[0]?.message}`);
+		}
+		const manifest = parsed.data;
+		if (manifest.version !== version) {
+			throw new Error(`release.json is for version ${manifest.version}`);
+		}
+		if (manifest.protocol !== this.PROTOCOL) {
+			throw new Error(`the firmware speaks agent protocol ${manifest.protocol}, not ${this.PROTOCOL}`);
+		}
+		if (!manifest.parts.some((part) => part.file === manifest.app.file)) {
+			throw new Error("release.json doesn't list the app image as a part");
+		}
+
+		const incoming = path.join(source.dir, `.incoming-${version}-${randomBytes(4).toString("hex")}`);
+		await fs.mkdir(incoming, { recursive: true });
+
+		try {
+			const files = new Map<string, Uint8Array>();
+			for (const part of manifest.parts) {
+				const data = await this.fetchFile(asset(part.file), this.MAX_FILE_SIZE);
+				if (data.length !== part.size) {
+					throw new Error(`${part.file} has ${data.length} bytes, release.json says ${part.size}`);
+				}
+				if (createHash("sha256").update(data).digest("hex") !== part.sha256) {
+					throw new Error(`${part.file} doesn't match its SHA-256`);
+				}
+				files.set(part.file, data);
+			}
+
+			let signatureVerified = false;
+			if (manifest.app.signature) {
+				const signature = await this.fetchFile(asset(manifest.app.signature), 1024);
+				files.set(manifest.app.signature, signature);
+				if (source.publicKey) {
+					const app = files.get(manifest.app.file) as Uint8Array;
+					if (!verify("sha256", app, source.publicKey, signature)) {
+						throw new Error("the firmware signature is invalid");
+					}
+					signatureVerified = true;
+				}
+			}
+			if (source.publicKey && !signatureVerified) {
+				throw new Error("the release isn't signed, but FIRMWARE_PUBLIC_KEY requires a signature");
+			}
+
+			for (const [name, data] of files) {
+				await Bun.write(path.join(incoming, name), data);
+			}
+			await Bun.write(path.join(incoming, "release.json"), manifestData);
+
+			const target = path.join(source.dir, version);
+			await fs.rm(target, { recursive: true, force: true });
+			await fs.rename(incoming, target);
+
+			const row = {
+				version,
+				prerelease: release.prerelease,
+				published_at: Date.parse(release.published_at ?? release.created_at) || Date.now(),
+				release_url: release.html_url,
+				notes: (release.body ?? "").slice(0, 20_000),
+				manifest,
+				signature_verified: signatureVerified,
+			};
+			await DB.instance()
+				.insert(DB.Tables.firmwareReleases)
+				.values(row)
+				.onConflictDoUpdate({ target: DB.Tables.firmwareReleases.version, set: row });
+		} finally {
+			await fs.rm(incoming, { recursive: true, force: true });
+		}
+	}
+
+	/** Downloads a release asset (public repositories: no token, GitHub redirects to its CDN). */
+	protected static async fetchFile(
+		asset: { name: string; browser_download_url: string },
+		maxBytes: number,
+	) {
+		const response = await fetch(asset.browser_download_url, {
+			headers: { "User-Agent": "NetIgnite-Server" },
+			signal: AbortSignal.timeout(120_000),
+		});
+		if (!response.ok) throw new Error(`downloading ${asset.name} failed with ${response.status}`);
+		if (Number(response.headers.get("content-length") ?? 0) > maxBytes) {
+			throw new Error(`${asset.name} is too large`);
+		}
+		const data = new Uint8Array(await response.arrayBuffer());
+		if (data.length > maxBytes) throw new Error(`${asset.name} is too large`);
+		return data;
+	}
+
+	protected static async filesPresent(
+		source: FirmwareCatalog.Source,
+		release: DB.Models.FirmwareRelease,
+	) {
+		for (const part of release.manifest.parts) {
+			const file = Bun.file(path.join(source.dir, release.version, part.file));
+			if (!(await file.exists()) || file.size !== part.size) return false;
+		}
+		return true;
+	}
+
+	/**
+	 * Deletes version directories that aren't kept and leftovers of interrupted downloads. Only one
+	 * sync runs at a time, so no download is in progress here.
+	 */
+	protected static async removeStaleDirectories(source: FirmwareCatalog.Source, kept: Set<string>) {
+		let entries: string[];
+		try {
+			entries = await fs.readdir(source.dir);
+		} catch {
+			return;
+		}
+		for (const entry of entries) {
+			const stale =
+				entry.startsWith(".incoming-") ||
+				(FirmwareSettings.Version.safeParse(entry).success && !kept.has(entry));
+			if (stale) await fs.rm(path.join(source.dir, entry), { recursive: true, force: true });
+		}
+	}
+}
+
+export namespace FirmwareCatalog {
+	export interface SourceOptions {
+		/** `owner/name` of the GitHub repository. */
+		repo: string;
+		/** `https://api.github.com`, or a test server. */
+		apiURL: string;
+		dir: string;
+		publicKeyPath: string | null;
+		token: string | null;
+	}
+
+	export interface Source extends Omit<SourceOptions, "publicKeyPath"> {
+		publicKey: string | null;
+	}
+
+	export interface SyncResult {
+		added: string[];
+		removed: string[];
+		skipped: { version: string; reason: string }[];
+		error: string | null;
+	}
+}
+
+const GitHubRelease = z.object({
+	tag_name: z.string(),
+	html_url: z.string(),
+	body: z.string().nullable().optional(),
+	draft: z.boolean(),
+	prerelease: z.boolean(),
+	created_at: z.string(),
+	published_at: z.string().nullable(),
+	assets: z.array(
+		z.object({
+			name: z.string(),
+			size: z.number(),
+			browser_download_url: z.string(),
+		}),
+	),
+});
diff --git a/server/lib/firmware/nvs.ts b/server/lib/firmware/nvs.ts
new file mode 100644
index 0000000..13e2b29
--- /dev/null
+++ b/server/lib/firmware/nvs.ts
@@ -0,0 +1,205 @@
+/**
+ * Writes ESP-IDF NVS partition images (format version 2, unencrypted) — the same bytes as
+ * Espressif's `nvs_partition_gen.py` for the same entries. The web installer flashes one at the
+ * agent's NVS partition, so a new agent boots with its server URL and enrollment token.
+ *
+ * Layout of a 4 KB page: 32-byte header, 32-byte entry state bitmap, then 126 entries of 32 bytes.
+ * A string takes one header entry plus one entry per 32 bytes of data. The last page of the
+ * partition stays empty: NVS needs it for garbage collection.
+ */
+export class NVSImage {
+	static readonly PAGE_SIZE = 4096;
+
+	/** Max. length of a key or namespace name in bytes. */
+	static readonly MAX_KEY_LENGTH = 15;
+	/** Max. size of a string value in bytes, including its terminating NUL. */
+	static readonly MAX_STRING_SIZE = 4000;
+
+	/**
+	 * Builds an image of `size` bytes (a multiple of 4096, at least 3 pages) with the namespaces in
+	 * order. Throws if an entry is invalid or doesn't fit.
+	 */
+	static generate(namespaces: NVSImage.Namespace[], size: number): Uint8Array<ArrayBuffer> {
+		if (size % this.PAGE_SIZE !== 0 || size < 3 * this.PAGE_SIZE) {
+			throw new Error("The NVS partition size must be a multiple of 4096 and at least 12288 bytes");
+		}
+
+		const writer = new PageWriter(size / this.PAGE_SIZE - 1);
+		let namespaceIndex = 0;
+
+		for (const namespace of namespaces) {
+			namespaceIndex += 1;
+			writer.writePrimitive(0, namespace.name, { type: "u8", value: namespaceIndex });
+
+			for (const [key, value] of Object.entries(namespace.entries)) {
+				if (value.type === "string") {
+					writer.writeString(namespaceIndex, key, value.value);
+				} else {
+					writer.writePrimitive(namespaceIndex, key, value);
+				}
+			}
+		}
+
+		const image = new Uint8Array(size).fill(0xff);
+		writer.pages.forEach((page, index) => {
+			image.set(page.buffer, index * this.PAGE_SIZE);
+		});
+		return image;
+	}
+
+	/** CRC-32 as computed by `zlib.crc32(data, 0xFFFFFFFF)`, which NVS uses everywhere. */
+	static crc32(data: Uint8Array) {
+		let crc = 0;
+		for (const byte of data) {
+			crc = (CRC_TABLE[(crc ^ byte) & 0xff] as number) ^ (crc >>> 8);
+		}
+		return ~crc >>> 0;
+	}
+}
+
+export namespace NVSImage {
+	export type Value = { type: "string"; value: string } | { type: "u8" | "u32"; value: number };
+
+	export interface Namespace {
+		name: string;
+		entries: Record<string, Value>;
+	}
+}
+
+const ENTRY_SIZE = 32;
+const FIRST_ENTRY_OFFSET = 64;
+const ENTRIES_PER_PAGE = 126;
+
+const PAGE_STATE_ACTIVE = 0xfffffffe;
+const PAGE_STATE_FULL = 0xfffffffc;
+const PAGE_VERSION_2 = 0xfe;
+const CHUNK_ANY = 0xff;
+
+const ItemType = { u8: 0x01, u32: 0x04, string: 0x21 } as const;
+
+const CRC_TABLE = (() => {
+	const table = new Uint32Array(256);
+	for (let n = 0; n < 256; n++) {
+		let c = n;
+		for (let k = 0; k < 8; k++) c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;
+		table[n] = c >>> 0;
+	}
+	return table;
+})();
+
+class PageFullError extends Error {}
+
+class Page {
+	readonly buffer = new Uint8Array(NVSImage.PAGE_SIZE).fill(0xff);
+	private readonly view = new DataView(this.buffer.buffer);
+	entryCount = 0;
+
+	constructor(sequence: number) {
+		this.view.setUint32(0, PAGE_STATE_ACTIVE, true);
+		this.view.setUint32(4, sequence, true);
+		this.buffer[8] = PAGE_VERSION_2;
+		this.view.setUint32(28, NVSImage.crc32(this.buffer.subarray(4, 28)), true);
+	}
+
+	markFull() {
+		this.view.setUint32(0, PAGE_STATE_FULL, true);
+	}
+
+	/** Writes `data` from the next free entry on and marks `count` entries as written. */
+	write(data: Uint8Array, count: number) {
+		this.buffer.set(data, FIRST_ENTRY_OFFSET + ENTRY_SIZE * this.entryCount);
+		for (let i = 0; i < count; i++) {
+			// Two bits per entry: 11 empty, 10 written.
+			const bit = this.entryCount * 2;
+			(this.buffer[32 + (bit >> 3)] as number) &= ~(1 << (bit & 7));
+			this.entryCount += 1;
+		}
+	}
+}
+
+class PageWriter {
+	readonly pages: Page[] = [new Page(0)];
+
+	constructor(private readonly maxPages: number) {}
+
+	private get current() {
+		return this.pages[this.pages.length - 1] as Page;
+	}
+
+	private withNewPageOnFull(write: (page: Page) => void) {
+		try {
+			write(this.current);
+		} catch (error) {
+			if (!(error instanceof PageFullError)) throw error;
+			if (this.pages.length >= this.maxPages) {
+				throw new Error("The entries don't fit into the NVS partition");
+			}
+			this.current.markFull();
+			this.pages.push(new Page(this.pages.length));
+			write(this.current);
+		}
+	}
+
+	writePrimitive(namespaceIndex: number, key: string, value: { type: "u8" | "u32"; value: number }) {
+		const limit = value.type === "u8" ? 0xff : 0xffffffff;
+		if (!Number.isInteger(value.value) || value.value < 0 || value.value > limit) {
+			throw new Error(`NVS: ${key} isn't a valid ${value.type}`);
+		}
+
+		const entry = entryHeader(namespaceIndex, ItemType[value.type], 1, key);
+		const view = new DataView(entry.buffer);
+		if (value.type === "u8") entry[24] = value.value;
+		else view.setUint32(24, value.value, true);
+		setEntryCRC(entry);
+
+		this.withNewPageOnFull((page) => {
+			if (page.entryCount >= ENTRIES_PER_PAGE) throw new PageFullError();
+			page.write(entry, 1);
+		});
+	}
+
+	writeString(namespaceIndex: number, key: string, value: string) {
+		const data = new TextEncoder().encode(`${value}\0`);
+		if (data.length > NVSImage.MAX_STRING_SIZE) {
+			throw new Error(`NVS: ${key} is longer than ${NVSImage.MAX_STRING_SIZE - 1} bytes`);
+		}
+		const dataEntries = Math.ceil(data.length / ENTRY_SIZE);
+
+		const entry = entryHeader(namespaceIndex, ItemType.string, dataEntries + 1, key);
+		const view = new DataView(entry.buffer);
+		view.setUint16(24, data.length, true);
+		view.setUint32(28, NVSImage.crc32(data), true);
+		setEntryCRC(entry);
+
+		this.withNewPageOnFull((page) => {
+			// Like nvs_partition_gen.py: a string never ends in the page's last entry.
+			if (page.entryCount + dataEntries + 1 >= ENTRIES_PER_PAGE) throw new PageFullError();
+			page.write(entry, 1);
+			page.write(data, dataEntries);
+		});
+	}
+}
+
+function entryHeader(namespaceIndex: number, type: number, span: number, key: string) {
+	const keyBytes = new TextEncoder().encode(key);
+	if (keyBytes.length === 0 || keyBytes.length > NVSImage.MAX_KEY_LENGTH) {
+		throw new Error(`NVS: key "${key}" must be 1–${NVSImage.MAX_KEY_LENGTH} bytes long`);
+	}
+
+	const entry = new Uint8Array(ENTRY_SIZE).fill(0xff);
+	entry[0] = namespaceIndex;
+	entry[1] = type;
+	entry[2] = span;
+	entry[3] = CHUNK_ANY;
+	entry.fill(0, 8, 24);
+	entry.set(keyBytes, 8);
+	return entry;
+}
+
+/** The entry's CRC covers everything except the CRC field (bytes 4–7). */
+function setEntryCRC(entry: Uint8Array) {
+	const data = new Uint8Array(28);
+	data.set(entry.subarray(0, 4), 0);
+	data.set(entry.subarray(8, 32), 4);
+	new DataView(entry.buffer).setUint32(4, NVSImage.crc32(data), true);
+}
diff --git a/server/lib/firmware/provisioning.ts b/server/lib/firmware/provisioning.ts
new file mode 100644
index 0000000..650146e
--- /dev/null
+++ b/server/lib/firmware/provisioning.ts
@@ -0,0 +1,38 @@
+import type { FirmwareSettings } from "../api/utils/shared-models/netigniteData";
+import { NVSImage } from "./nvs";
+
+/**
+ * The NVS image the web installer flashes with the firmware: the server URL, a single-use
+ * enrollment token and the agent's name. The agent enrolls with the token on its first connection
+ * and generates its long-term secret itself, so the image holds nothing that stays valid.
+ */
+export class ProvisioningImage {
+	static readonly REQUIRED_KEYS = ["server", "enroll"] as const;
+
+	/** Whether the release's firmware reads its settings from an installer image. */
+	static supports(manifest: FirmwareSettings.Manifest) {
+		return this.REQUIRED_KEYS.every((key) => manifest.nvs.keys.includes(key));
+	}
+
+	/** Writes the values the firmware declares in `release.json` (`nvs.keys`), nothing else. */
+	static build(manifest: FirmwareSettings.Manifest, values: ProvisioningImage.Values) {
+		if (!this.supports(manifest)) {
+			throw new Error(`Firmware ${manifest.version} can't be set up by the web installer`);
+		}
+
+		const entries: Record<string, NVSImage.Value> = {};
+		for (const [key, value] of Object.entries(values)) {
+			if (manifest.nvs.keys.includes(key)) entries[key] = { type: "string", value };
+		}
+
+		return NVSImage.generate([{ name: manifest.nvs.namespace, entries }], manifest.nvs.size);
+	}
+}
+
+export namespace ProvisioningImage {
+	export interface Values {
+		server: string;
+		enroll: string;
+		name: string;
+	}
+}
diff --git a/server/lib/utils/config.ts b/server/lib/utils/config.ts
index 3e0e4de..89db5e5 100644
--- a/server/lib/utils/config.ts
+++ b/server/lib/utils/config.ts
@@ -132,6 +132,16 @@ export class ConfigHandler {
 
 		APP_URL: CS.string(),
 
+		// ESP32 firmware for the web installer and OTA updates, synced from the GitHub releases of
+		// FIRMWARE_REPO. FIRMWARE_PUBLIC_KEY: path to a PEM ECDSA P-256 public key; when set, only
+		// releases with a valid firmware.sig are accepted.
+		FIRMWARE_SYNC: CS.boolean().default(true),
+		FIRMWARE_REPO: CS.string().default("NetIgnite-project/Agent-ESP32"),
+		FIRMWARE_DIR: CS.string().default("./data/firmware"),
+		FIRMWARE_PUBLIC_KEY: CS.string().optional(),
+		/** Optional; raises GitHub's API rate limit for the release sync. */
+		GITHUB_TOKEN: CS.string().optional(),
+
 		SMTP_HOST: CS.string().optional(),
 		SMTP_PORT: CS.number().optional(),
 		SMTP_USERNAME: CS.string().optional(),
diff --git a/server/lib/utils/cron.ts b/server/lib/utils/cron.ts
index 3d5f6f1..971db6f 100644
--- a/server/lib/utils/cron.ts
+++ b/server/lib/utils/cron.ts
@@ -1,4 +1,6 @@
 import type { CronJob as BunCronJob } from "bun";
+import { FirmwareCatalog } from "../firmware/catalog";
+import { ConfigHandler } from "./config";
 import { Logger } from "./logger";
 
 class CronJob {
@@ -35,15 +37,14 @@ export class CronJobHandler {
 		if (this.initialized) return;
 		this.initialized = true;
 
-		this.jobs.push(
-			new CronJob("* * * * *", async () => {
-				// do something every minute
-			}),
-
-			new CronJob("* * * * *", async () => {
-				// do something every minute
-			}),
-		);
+		if (ConfigHandler.getConfig()?.FIRMWARE_SYNC) {
+			// New firmware releases (every 6 hours, off the hour to spread GitHub API requests).
+			this.jobs.push(
+				new CronJob("17 */6 * * *", async () => {
+					await FirmwareCatalog.sync();
+				}),
+			);
+		}
 	}
 
 	static async startAll() {
diff --git a/server/plugins/startup.ts b/server/plugins/startup.ts
index eccf149..8ae9bb5 100644
--- a/server/plugins/startup.ts
+++ b/server/plugins/startup.ts
@@ -4,6 +4,7 @@ import { API } from "../lib/api";
 import { EmailService } from "../lib/api/utils/email";
 import { DB } from "../lib/db";
 import { DeviceStatusService } from "../lib/devices/status";
+import { FirmwareCatalog } from "../lib/firmware/catalog";
 import { TaskScheduler } from "../lib/tasks";
 import { Utils } from "../lib/utils";
 import { ConfigHandler } from "../lib/utils/config";
@@ -89,6 +90,14 @@ export default defineNitroPlugin(async (nitroApp) => {
 
 	await EmailService.init();
 
+	await FirmwareCatalog.configure({
+		repo: config.FIRMWARE_REPO,
+		apiURL: "https://api.github.com",
+		dir: config.FIRMWARE_DIR,
+		publicKeyPath: config.FIRMWARE_PUBLIC_KEY ?? null,
+		token: config.GITHUB_TOKEN ?? null,
+	});
+
 	await CronJobHandler.init();
 	await CronJobHandler.startAll();
 
@@ -102,4 +111,9 @@ export default defineNitroPlugin(async (nitroApp) => {
 
 	AgentGatewayRunner.start();
 	DeviceStatusService.start();
+
+	if (config.FIRMWARE_SYNC) {
+		// In the background: the server is usable while the firmware downloads.
+		void FirmwareCatalog.sync();
+	}
 });
diff --git a/tests/firmware.test.ts b/tests/firmware.test.ts
new file mode 100644
index 0000000..2e6b082
--- /dev/null
+++ b/tests/firmware.test.ts
@@ -0,0 +1,428 @@
+import { afterAll, beforeAll, describe, expect, test } from "bun:test";
+import { createHash, generateKeyPairSync, sign } from "node:crypto";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { API } from "../server/lib/api";
+import { FirmwareCatalog } from "../server/lib/firmware/catalog";
+import { NVSImage } from "../server/lib/firmware/nvs";
+import { ConfigHandler } from "../server/lib/utils/config";
+import { makeAPIRequest } from "./helpers/api";
+import { type SeededSession, seedSession, seedUser } from "./helpers/seed";
+
+// --- A fake GitHub: the releases API and the asset downloads -----------------------------------
+
+type FakeRelease = {
+	tag: string;
+	prerelease?: boolean;
+	draft?: boolean;
+	files: Record<string, Uint8Array<ArrayBuffer>>;
+};
+
+let releases: FakeRelease[] = [];
+let githubStatus = 200;
+let github: ReturnType<typeof Bun.serve>;
+
+function sha256(data: Uint8Array) {
+	return createHash("sha256").update(data).digest("hex");
+}
+
+/** A release like the Agent-ESP32 CI builds it (scripts/collect_release.py). */
+function firmwareRelease(
+	version: string,
+	options: { prerelease?: boolean; signWith?: string; corrupt?: boolean } = {},
+): FakeRelease {
+	const parts: [string, number, number][] = [
+		["bootloader.bin", 0x1000, 300],
+		["partitions.bin", 0x8000, 3072],
+		["boot_app0.bin", 0xe000, 8192],
+		["firmware.bin", 0x10000, 50_000],
+	];
+	const files: Record<string, Uint8Array<ArrayBuffer>> = {};
+	for (const [name, , size] of parts) {
+		files[name] = crypto.getRandomValues(new Uint8Array(size));
+	}
+	if (options.signWith) {
+		files["firmware.sig"] = new Uint8Array(
+			sign("sha256", files["firmware.bin"] as Uint8Array, options.signWith),
+		);
+	}
+
+	const manifest = {
+		format: 1,
+		name: "NetIgnite Agent",
+		version,
+		chip_family: "ESP32",
+		board: "esp32dev",
+		protocol: 2,
+		parts: parts.map(([file, offset]) => ({
+			file,
+			offset,
+			size: (files[file] as Uint8Array).length,
+			sha256: sha256(files[file] as Uint8Array),
+		})),
+		nvs: { offset: 0x9000, size: 0x5000, namespace: "netignite", keys: ["server", "enroll", "name"] },
+		app: { file: "firmware.bin", signature: options.signWith ? "firmware.sig" : null },
+	};
+	if (options.corrupt) {
+		const app = files["firmware.bin"] as Uint8Array;
+		app[0] = (app[0] as number) ^ 0xff;
+	}
+	files["release.json"] = new TextEncoder().encode(JSON.stringify(manifest));
+
+	return { tag: `v${version}`, prerelease: options.prerelease, files };
+}
+
+let admin: SeededSession;
+let owner: SeededSession;
+let stranger: SeededSession;
+let firmwareDir: string;
+
+beforeAll(async () => {
+	github = Bun.serve({
+		port: 0,
+		fetch(req) {
+			const url = new URL(req.url);
+			if (url.pathname === "/repos/NetIgnite-project/Agent-ESP32/releases") {
+				if (githubStatus !== 200) return new Response("boom", { status: githubStatus });
+				return Response.json(
+					releases.map((release, index) => ({
+						tag_name: release.tag,
+						html_url: `https://github.com/NetIgnite-project/Agent-ESP32/releases/tag/${release.tag}`,
+						body: `Notes for ${release.tag}`,
+						draft: release.draft ?? false,
+						prerelease: release.prerelease ?? false,
+						created_at: new Date(Date.UTC(2026, 9, index + 1)).toISOString(),
+						published_at: new Date(Date.UTC(2026, 9, index + 1)).toISOString(),
+						assets: Object.entries(release.files).map(([name, data]) => ({
+							name,
+							size: data.length,
+							browser_download_url: `${url.origin}/download/${release.tag}/${name}`,
+						})),
+					})),
+				);
+			}
+			const match = url.pathname.match(/^\/download\/([^/]+)\/([^/]+)$/);
+			const data = match && releases.find((r) => r.tag === match[1])?.files[match[2] as string];
+			return data ? new Response(data) : new Response("not found", { status: 404 });
+		},
+	});
+
+	firmwareDir = ConfigHandler.getConfig()?.FIRMWARE_DIR as string;
+	await FirmwareCatalog.configure({
+		repo: "NetIgnite-project/Agent-ESP32",
+		apiURL: github.url.origin,
+		dir: firmwareDir,
+		publicKeyPath: null,
+		token: null,
+	});
+
+	admin = await seedSession((await seedUser("admin")).id);
+	owner = await seedSession((await seedUser("user")).id);
+	stranger = await seedSession((await seedUser("user")).id);
+});
+
+afterAll(() => {
+	github.stop(true);
+});
+
+async function createAgent(token: string, kind: "esp32" | "linux") {
+	return await makeAPIRequest<{ id: number }>("/v1/agents", {
+		method: "POST",
+		authToken: token,
+		body: { name: `Garage ${kind}`, kind },
+	});
+}
+
+describe("Firmware catalog", () => {
+	test("sync keeps valid releases and skips broken, draft and v1 ones", async () => {
+		const v1 = firmwareRelease("1.0.0");
+		delete v1.files["release.json"];
+		releases = [
+			v1,
+			firmwareRelease("2.0.0"),
+			firmwareRelease("2.0.1", { corrupt: true }),
+			firmwareRelease("2.1.0-beta.1", { prerelease: true }),
+			{ ...firmwareRelease("9.0.0"), draft: true },
+		];
+
+		const result = await FirmwareCatalog.sync();
+		expect(result.error).toBeNull();
+		expect(result.added.sort()).toEqual(["2.0.0", "2.1.0-beta.1"]);
+		expect(result.skipped).toEqual([
+			{ version: "2.0.1", reason: "firmware.bin doesn't match its SHA-256" },
+		]);
+
+		const catalog = await makeAPIRequest<{
+			channel: string;
+			recommended: string | null;
+			releases: { version: string; prerelease: boolean; parts: { file: string }[] }[];
+		}>("/v1/firmware", { authToken: owner.token });
+
+		expect(catalog.channel).toBe("stable");
+		expect(catalog.recommended).toBe("2.0.0");
+		expect(catalog.releases.map((r) => r.version)).toEqual(["2.1.0-beta.1", "2.0.0"]);
+		expect(catalog.releases[0]?.prerelease).toBe(true);
+
+		// Nothing half-downloaded is left behind.
+		expect((await fs.readdir(firmwareDir)).sort()).toEqual(["2.0.0", "2.1.0-beta.1"]);
+	});
+
+	test("a second sync downloads nothing again", async () => {
+		const result = await FirmwareCatalog.sync();
+		expect(result.added).toEqual([]);
+		expect(result.skipped.map((s) => s.version)).toEqual(["2.0.1"]);
+	});
+
+	test("serves the flash images to signed-in users only", async () => {
+		const release = releases.find((r) => r.tag === "v2.0.0") as FakeRelease;
+
+		const res = await API.getApp().request("/v1/firmware/2.0.0/files/firmware.bin", {
+			headers: { Authorization: `Bearer ${owner.token}` },
+		});
+		expect(res.status).toBe(200);
+		expect(res.headers.get("content-length")).toBe(String(release.files["firmware.bin"]?.length));
+		expect(new Uint8Array(await res.arrayBuffer())).toEqual(
+			release.files["firmware.bin"] as Uint8Array<ArrayBuffer>,
+		);
+
+		await makeAPIRequest("/v1/firmware/2.0.0/files/firmware.bin", {}, 401);
+		await makeAPIRequest("/v1/firmware/2.0.0/files/release.json", { authToken: owner.token }, 404);
+		await makeAPIRequest("/v1/firmware/2.0.0/files/secret.txt", { authToken: owner.token }, 404);
+		await makeAPIRequest("/v1/firmware/9.9.9/files/firmware.bin", { authToken: owner.token }, 404);
+		await makeAPIRequest(
+			"/v1/firmware/..%2F..%2Fdb/files/firmware.bin",
+			{ authToken: owner.token },
+			400,
+		);
+	});
+
+	test("the admin picks the channel", async () => {
+		await makeAPIRequest(
+			"/v1/admin/settings",
+			{ method: "PUT", authToken: owner.token, body: { firmware_channel: "prerelease" } },
+			403,
+		);
+
+		const settings = await makeAPIRequest<{
+			firmware_channel: string;
+			registration_enabled: boolean;
+		}>("/v1/admin/settings", {
+			method: "PUT",
+			authToken: admin.token,
+			body: { firmware_channel: "prerelease" },
+		});
+		expect(settings.firmware_channel).toBe("prerelease");
+
+		const catalog = await makeAPIRequest<{ recommended: string }>("/v1/firmware", {
+			authToken: owner.token,
+		});
+		expect(catalog.recommended).toBe("2.1.0-beta.1");
+
+		await makeAPIRequest("/v1/admin/settings", {
+			method: "PUT",
+			authToken: admin.token,
+			body: { firmware_channel: "stable" },
+		});
+	});
+
+	test("admins can sync manually; GitHub errors are reported", async () => {
+		await makeAPIRequest("/v1/admin/firmware/sync", { method: "POST", authToken: owner.token }, 403);
+
+		const result = await makeAPIRequest<{
+			added: string[];
+			state: { error: string | null; last_success_at: number };
+		}>("/v1/admin/firmware/sync", { method: "POST", authToken: admin.token });
+		expect(result.added).toEqual([]);
+		expect(result.state.error).toBeNull();
+		expect(result.state.last_success_at).toBeGreaterThan(0);
+
+		githubStatus = 500;
+		await makeAPIRequest("/v1/admin/firmware/sync", { method: "POST", authToken: admin.token }, 502);
+		const state = await makeAPIRequest<{ error: string; last_success_at: number }>(
+			"/v1/admin/firmware",
+			{
+				authToken: admin.token,
+			},
+		);
+		expect(state.error).toContain("500");
+		expect(state.last_success_at).toBe(result.state.last_success_at);
+		githubStatus = 200;
+
+		// A failed listing never removes releases.
+		expect((await FirmwareCatalog.list()).length).toBe(2);
+	});
+
+	test("releases removed from GitHub are removed locally", async () => {
+		releases = releases.filter((r) => r.tag !== "v2.1.0-beta.1");
+		const result = await FirmwareCatalog.sync();
+		expect(result.removed).toEqual(["2.1.0-beta.1"]);
+		expect(await fs.readdir(firmwareDir)).toEqual(["2.0.0"]);
+	});
+});
+
+describe("Flash image", () => {
+	test("contains the server URL, the agent's name and a working single-use enrollment token", async () => {
+		const agent = await createAgent(owner.token, "esp32");
+
+		const res = await API.getApp().request(`/v1/agents/${agent.id}/flash-image`, {
+			method: "POST",
+			headers: { Authorization: `Bearer ${owner.token}`, "Content-Type": "application/json" },
+			body: JSON.stringify({ version: "2.0.0" }),
+		});
+		expect(res.status).toBe(201);
+		expect(res.headers.get("cache-control")).toBe("no-store");
+
+		const { data } = (await res.json()) as {
+			data: { image: string; offset: number; server_url: string; expires_at: number };
+		};
+		expect(data.offset).toBe(0x9000);
+		expect(data.server_url).toBe("http://localhost:18232");
+
+		const image = new Uint8Array(Buffer.from(data.image, "base64"));
+		expect(image.length).toBe(0x5000);
+		const text = new TextDecoder("latin1").decode(image);
+		expect(text).toContain("http://localhost:18232\0");
+		expect(text).toContain("Garage esp32\0");
+
+		// Page header: active, version 2.
+		expect(new DataView(image.buffer).getUint32(0, true)).toBe(0xfffffffe);
+		expect(image[8]).toBe(0xfe);
+
+		const token = text.match(/netignite_enroll_[A-Za-z0-9]+:[A-Za-z0-9_-]+/)?.[0] as string;
+		expect(token).toBeDefined();
+
+		const secret = "a".repeat(64);
+		const enrolled = await makeAPIRequest<{ agent_id: number }>("/v1/agents/enroll", {
+			method: "POST",
+			body: { enrollment_token: token, secret },
+		});
+		expect(enrolled.agent_id).toBe(agent.id);
+		await makeAPIRequest(
+			"/v1/agents/enroll",
+			{ method: "POST", body: { enrollment_token: token, secret } },
+			401,
+		);
+	});
+
+	test("matches the image Espressif's tool would create", async () => {
+		const agent = await createAgent(owner.token, "esp32");
+		const data = await makeAPIRequest<{ image: string }>(`/v1/agents/${agent.id}/flash-image`, {
+			method: "POST",
+			authToken: owner.token,
+			body: { version: "2.0.0", server_url: "https://netignite.example/base/" },
+		});
+		const image = new Uint8Array(Buffer.from(data.image, "base64"));
+		const token = new TextDecoder("latin1")
+			.decode(image)
+			.match(/netignite_enroll_[^\0]+/)?.[0] as string;
+
+		const expected = NVSImage.generate(
+			[
+				{
+					name: "netignite",
+					entries: {
+						server: { type: "string", value: "https://netignite.example/base" },
+						enroll: { type: "string", value: token },
+						name: { type: "string", value: "Garage esp32" },
+					},
+				},
+			],
+			0x5000,
+		);
+		expect(image).toEqual(expected);
+	});
+
+	test("a new image invalidates the previous one's token", async () => {
+		const agent = await createAgent(owner.token, "esp32");
+		const tokenOf = async () => {
+			const data = await makeAPIRequest<{ image: string }>(`/v1/agents/${agent.id}/flash-image`, {
+				method: "POST",
+				authToken: owner.token,
+				body: { version: "2.0.0" },
+			});
+			return new TextDecoder("latin1")
+				.decode(Buffer.from(data.image, "base64"))
+				.match(/netignite_enroll_[^\0]+/)?.[0];
+		};
+		const first = await tokenOf();
+		const second = await tokenOf();
+
+		const secret = "b".repeat(64);
+		await makeAPIRequest(
+			"/v1/agents/enroll",
+			{ method: "POST", body: { enrollment_token: first, secret } },
+			401,
+		);
+		await makeAPIRequest("/v1/agents/enroll", {
+			method: "POST",
+			body: { enrollment_token: second, secret },
+		});
+	});
+
+	test("only for the owner's ESP32 agents, known releases and plain http(s) URLs", async () => {
+		const esp = await createAgent(owner.token, "esp32");
+		const linux = await createAgent(owner.token, "linux");
+		const request = (id: number, token: string, body: Record<string, unknown>, code: number) =>
+			makeAPIRequest(`/v1/agents/${id}/flash-image`, { method: "POST", authToken: token, body }, code);
+
+		await request(linux.id, owner.token, { version: "2.0.0" }, 400);
+		await request(esp.id, stranger.token, { version: "2.0.0" }, 404);
+		await request(esp.id, owner.token, { version: "9.9.9" }, 404);
+		await request(esp.id, owner.token, { version: "2.0.0", server_url: "ftp://example.com" }, 400);
+		await request(
+			esp.id,
+			owner.token,
+			{ version: "2.0.0", server_url: "https://user:pw@example.com" },
+			400,
+		);
+		await request(
+			esp.id,
+			owner.token,
+			{ version: "2.0.0", server_url: "https://example.com/?a=b" },
+			400,
+		);
+		await makeAPIRequest(
+			`/v1/agents/${esp.id}/flash-image`,
+			{ method: "POST", body: { version: "2.0.0" } },
+			401,
+		);
+	});
+});
+
+describe("Firmware signatures", () => {
+	test("with a public key, only correctly signed releases are accepted", async () => {
+		const keys = generateKeyPairSync("ec", { namedCurve: "prime256v1" });
+		const otherKeys = generateKeyPairSync("ec", { namedCurve: "prime256v1" });
+		const privateKey = keys.privateKey.export({ type: "pkcs8", format: "pem" }).toString();
+		const wrongKey = otherKeys.privateKey.export({ type: "pkcs8", format: "pem" }).toString();
+
+		const keyPath = path.join(firmwareDir, "..", "firmware-signing.pub.pem");
+		await Bun.write(keyPath, keys.publicKey.export({ type: "spki", format: "pem" }).toString());
+
+		const signedDir = path.join(firmwareDir, "..", "firmware-signed");
+		await FirmwareCatalog.configure({
+			repo: "NetIgnite-project/Agent-ESP32",
+			apiURL: github.url.origin,
+			dir: signedDir,
+			publicKeyPath: keyPath,
+			token: null,
+		});
+
+		releases = [
+			firmwareRelease("3.0.0"),
+			firmwareRelease("3.0.1", { signWith: wrongKey }),
+			firmwareRelease("3.0.2", { signWith: privateKey }),
+		];
+		const result = await FirmwareCatalog.sync();
+		expect(result.added).toEqual(["3.0.2"]);
+		expect(Object.fromEntries(result.skipped.map((s) => [s.version, s.reason]))).toEqual({
+			"3.0.0": "the release isn't signed, but FIRMWARE_PUBLIC_KEY requires a signature",
+			"3.0.1": "the firmware signature is invalid",
+		});
+
+		const release = await FirmwareCatalog.get("3.0.2");
+		expect(release?.signature_verified).toBe(true);
+		// The signature is served too (for OTA updates).
+		await makeAPIRequest("/v1/firmware/3.0.2/files/firmware.sig", { authToken: owner.token });
+	});
+});
diff --git a/tests/fixtures/nvs/multipage.bin b/tests/fixtures/nvs/multipage.bin
new file mode 100644
index 0000000000000000000000000000000000000000..478db3550e232ceecc8dc7ed3ad5c654f850e730
GIT binary patch
literal 20480
zcmeI0e@s<n7{~7q+|Y6gZD7SnaM0Q!IOhN&&@^YwbSrGl7>P)7y<Fc57vXYHb2Ju<
zvDxh>OUo?;BV)DI92VLZ!m`*zYb(<^1RKO3VKJ1plsrA}z4x4Zo_jC1D_r=aJ?9V3
z<-YIp{eI5}-se5%Oe>0Ffa4CF{g1}9Q{9~*k6VhtXjC2_z5Z9F#c8uv+ME_H28Yor
zW=t|Ei<iZJT4Sk}E!Cbe{xiX#C_>fp%5tZ(DmOj-#a(3?8M(PaajuXfN@Ds;r8O3q
zp(sYs?-Y}>?G9^+-6C7;UJ0|RA7xaArw7DRtEJLeVk=V}yu%9jpLpO>1ItiHJZCeg
z|1tP&m7L+WQKtu-d3|(&YaJ7C{SqiUIk9DIuji138Dx0<S5rl=F%j3t!2G`LiB505
zDkJ*K@cKMM#yFF3{R)`aRD9@bT(8PVnhdW$bg;IRW#amWU`E0#X(d7HRhdi!@G~oe
zC5>;eEL@)o^@HbP4u`5&WwNw10eIc|rH)lDmW}n(pl0O##<DQ<Rh#T!Have@OO2VW
z#`<t+O3baF&WEqB+N?%4T>sSiwZkk2>*v9&`>w9rf7kk|O^(OLm=vX0UF{FEHCTT=
z48Ql-MdNJsRhu>FYJ&ZJqLkz9Ljz2}3uqJ6ZR{BE`~RJ78X43Bz4<r%`t3VhnM}Y7
za0|>I8vm|iwvIvTWH9lI!Tl?y?!U$aynqW~;`8l4Tnef)$1i2@Qe$v`$x`0K1l#~h
zV8*u0eLv69Dpa`)mcW0JlE3Vp=a_&S$S&}&zx}olN+2?0GB~R=0?#~O&(xKtn1CBp
z1=PH1u9%EWhA>oQ2oM<0%}=aRPBQ^FI44YAV!Ci74CRPUks*gZCg(TVoBt;haD#jq
zW}RExayp{s;fu)-#~qXJUrikc853}W<@;~*$A{ZJk}{0yugdqC*Pl^}8<>C_DBpkU
z*{}&kl3|jsRP+D9yr-6lxc~9}mu>sofa<-!$S_xx;r^T7oPL&xxPS5eSH2wA6|7#9
zfo{b2m$yDT{|pmx|Ka;@R&>G>A?h_5UpG-x`OaMbip{>0iMYS;{nwTMjqAVlH5=be
zhfm&<|Ja4IOvL?zujzkocU6b2ui4;k!1I6c+0l9?;`Pt>-#wFUg?Fp3*?3no@4q*i
z?rdcuUcY?*t=nOWnWesFgIA*tocAO5KhgYU3ls7Bd>Z^)tv|jyH-9Y#zNyj0;Qp;W
z6E~TN*Ixnn4<$A1jEKJ$BXAXS|HRZ22bhT0?+f7nNL}lbk@VMM=(+&+@Be(XmPvU1
zZwLR)twpKx;IGC2M}GgaNO`beZyA$t|KLwYDQPJi=FeY?5pYkW`}c6?i@V&@#U$LH
z?2zyE*nPjxdp<2@@Gj@RKNvZ_fl0W()j+;$3HG*y%BRH)+9mZw7xpuM?l;1tMX=}p
z_KhFrxF7#RMB;ptd((F_3HSH?!1v6>t-TA(SHrCC5`6#dzqdS^NqB!)4EfG}pEltx
zkYR9!YvlFaBTM6%g!}(;C=iniqx9D&!yJDZUSGGW`xujO|Bi>5zl_D@>Fc%dx^B$t
zqgRafGYR+KM5vd>`fdiP*JOA%<@@8Ku}7^;!u>M^#;&$>b<SL`$>_SF|JA{}BX~b^
zy{XyiaF**|?-)$psU{e2n_4<<t178*l&NoreD8-$aD4}?o6;;5j@>rhBW^6@yHWJp
zaCzS+cDrL`UEj%Sd)dlgkGuol(?JA?01+SpM1Tko0U|&IhyW2F0z`la5CI}U1c(3;
zAOb{y2oM1xKm>>Y5g-CYfCvx)B0vO)01+SpM1Tko0U|&IhyW2F0z`la5CI}U1c(3;
VAOb{y2oM1xKm>>Y5%@n6_!l^DJ~03Q

literal 0
HcmV?d00001

diff --git a/tests/fixtures/nvs/multipage.csv b/tests/fixtures/nvs/multipage.csv
new file mode 100644
index 0000000..9b9dae6
--- /dev/null
+++ b/tests/fixtures/nvs/multipage.csv
@@ -0,0 +1,48 @@
+key,type,encoding,value
+netignite,namespace,,
+server,data,string,http://[fd00::1]:18232/base
+log_level,data,u8,3
+agent_id,data,u32,4294967295
+k0,data,string,v0
+k1,data,string,xxxxxxxv1
+k2,data,string,xxxxxxxxxxxxxxv2
+k3,data,string,xxxxxxxxxxxxxxxxxxxxxv3
+k4,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxv4
+k5,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv5
+k6,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv6
+k7,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv7
+k8,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv8
+k9,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv9
+k10,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv10
+k11,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv11
+k12,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv12
+k13,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv13
+k14,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv14
+k15,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv15
+k16,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv16
+k17,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv17
+k18,data,string,xxxxxxv18
+k19,data,string,xxxxxxxxxxxxxv19
+k20,data,string,xxxxxxxxxxxxxxxxxxxxv20
+k21,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxv21
+k22,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv22
+k23,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv23
+k24,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv24
+k25,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv25
+k26,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv26
+k27,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv27
+k28,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv28
+k29,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv29
+k30,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv30
+k31,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv31
+k32,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv32
+k33,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv33
+k34,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv34
+k35,data,string,xxxxxv35
+k36,data,string,xxxxxxxxxxxxv36
+k37,data,string,xxxxxxxxxxxxxxxxxxxv37
+k38,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxv38
+k39,data,string,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxv39
+other,namespace,,
+ip_mode,data,u8,1
+emoji,data,string,héllo wörld ✓
diff --git a/tests/fixtures/nvs/provision.bin b/tests/fixtures/nvs/provision.bin
new file mode 100644
index 0000000000000000000000000000000000000000..23f692743ac7147dcd70fd895bf4b38a6ce63689
GIT binary patch
literal 20480
zcmeIuO-lkn7{Kve=@gwiM1<Ztl&1EALYF`n4ALkp7fNJzNNIOlcDF@4_h~%Vsp#G(
z=~!N(qtp13M)VQ>56sNrd6}8tP)ez(7^?Gc+;2WV_51&2=9QYR%l)_aFHc0BE3XrY
z(J&SIv_wxOWcc`T5sDxd!6Y}@S2QU<PuG{*QRIikOs3`g>Di35En<})g`QfF!-tnO
z;RQF2Gw-jf{B3n(an{qER5Y*i6}u1~=UNAQ-Ns$ERy5s0+;Gc1wRWxZ`nFnGVI0Ml
zYddDX(zegKTV}4@vyASJohyf?QJCI6xj!LG)zw$8<^Fta{D>u0Ge{0D4?B_77GAP+
zQv204emWZh2q1s}0tg_000IagfB*srAb<b@2q1s}0tg_000IagfB*srAb<b@2q1s}
z0tg_000IagfB*srAb<b@2q1s}0tg_000IagfB*srAb<b@2q1s}0tg_000IagfB*tB
Ffp18^2*3aU

literal 0
HcmV?d00001

diff --git a/tests/fixtures/nvs/provision.csv b/tests/fixtures/nvs/provision.csv
new file mode 100644
index 0000000..6816a75
--- /dev/null
+++ b/tests/fixtures/nvs/provision.csv
@@ -0,0 +1,5 @@
+key,type,encoding,value
+netignite,namespace,,
+server,data,string,https://app.netignite.dev
+enroll,data,string,netignite_enroll_k3Jd9sQ2aB7xYz1P:Zm9vYmFyYmF6cXV4cXV1eGNvcmdlZ3JhdWx0Z2FycGx5d2FsZG9
+name,data,string,Kitchen ESP
diff --git a/tests/helpers/preload.ts b/tests/helpers/preload.ts
index 7616902..69576c2 100644
--- a/tests/helpers/preload.ts
+++ b/tests/helpers/preload.ts
@@ -23,6 +23,13 @@ function setTestEnv(rootDir: string) {
 
 		NETIGNITE_APP_URL: "http://localhost:18232",
 
+		// Tests configure the catalog with a fake GitHub (tests/firmware.test.ts).
+		NETIGNITE_FIRMWARE_SYNC: false,
+		NETIGNITE_FIRMWARE_REPO: "NetIgnite-project/Agent-ESP32",
+		NETIGNITE_FIRMWARE_DIR: path.join(rootDir, "firmware"),
+		NETIGNITE_FIRMWARE_PUBLIC_KEY: undefined,
+		NETIGNITE_GITHUB_TOKEN: undefined,
+
 		NETIGNITE_SMTP_HOST: "127.0.0.1",
 		NETIGNITE_SMTP_PORT: 12587,
 		NETIGNITE_SMTP_USERNAME: "",
@@ -32,7 +39,8 @@ function setTestEnv(rootDir: string) {
 	} as const satisfies ENVConfigLike;
 
 	for (const [key, value] of Object.entries(envVars)) {
-		process.env[key] = String(value);
+		if (value === undefined) delete process.env[key];
+		else process.env[key] = String(value);
 	}
 }
 
diff --git a/tests/nvs.test.ts b/tests/nvs.test.ts
new file mode 100644
index 0000000..d8b9b08
--- /dev/null
+++ b/tests/nvs.test.ts
@@ -0,0 +1,73 @@
+import { describe, expect, test } from "bun:test";
+import path from "path";
+import { NVSImage } from "../server/lib/firmware/nvs";
+
+const FIXTURES = path.join(import.meta.dir, "fixtures", "nvs");
+
+/**
+ * Reads an `nvs_partition_gen.py` CSV (key,type,encoding,value). The fixtures' `.bin` files were
+ * generated from these CSVs with Espressif's tool (esp-idf-nvs-partition-gen 0.3.0):
+ *
+ *   python -X utf8 -m esp_idf_nvs_partition_gen generate <name>.csv <name>.bin 0x5000
+ */
+async function readCSV(name: string) {
+	const lines = (await Bun.file(path.join(FIXTURES, `${name}.csv`)).text())
+		.trim()
+		.split("\n")
+		.slice(1);
+	const namespaces: NVSImage.Namespace[] = [];
+
+	for (const line of lines) {
+		const [key, type, encoding, ...rest] = line.split(",");
+		const value = rest.join(",");
+		if (type === "namespace") {
+			namespaces.push({ name: key as string, entries: {} });
+			continue;
+		}
+		const entries = (namespaces.at(-1) as NVSImage.Namespace).entries;
+		entries[key as string] =
+			encoding === "string"
+				? { type: "string", value }
+				: { type: encoding as "u8" | "u32", value: Number(value) };
+	}
+	return namespaces;
+}
+
+async function reference(name: string) {
+	return new Uint8Array(await Bun.file(path.join(FIXTURES, `${name}.bin`)).arrayBuffer());
+}
+
+describe("NVS image", () => {
+	test("CRC-32 matches zlib.crc32(data, 0xFFFFFFFF)", () => {
+		// python -c "import zlib; print(hex(zlib.crc32(b'123456789', 0xFFFFFFFF)))"
+		expect(NVSImage.crc32(new TextEncoder().encode("123456789"))).toBe(0xd202d277);
+	});
+
+	test("provisioning image is byte-identical to nvs_partition_gen.py", async () => {
+		const image = NVSImage.generate(await readCSV("provision"), 0x5000);
+		expect(image).toEqual(await reference("provision"));
+	});
+
+	test("multi-page image with u8/u32, two namespaces and UTF-8 is byte-identical", async () => {
+		const image = NVSImage.generate(await readCSV("multipage"), 0x5000);
+		expect(image).toEqual(await reference("multipage"));
+	});
+
+	test("rejects invalid keys, values and sizes", () => {
+		const one = (entries: Record<string, NVSImage.Value>) => [{ name: "netignite", entries }];
+
+		expect(() => NVSImage.generate(one({}), 0x5001)).toThrow();
+		expect(() => NVSImage.generate(one({}), 0x2000)).toThrow();
+		expect(() =>
+			NVSImage.generate(one({ "a-key-that-is-too-long": { type: "u8", value: 1 } }), 0x5000),
+		).toThrow();
+		expect(() => NVSImage.generate(one({ level: { type: "u8", value: 256 } }), 0x5000)).toThrow();
+		expect(() =>
+			NVSImage.generate(one({ big: { type: "string", value: "x".repeat(4000) } }), 0x5000),
+		).toThrow();
+
+		const full: Record<string, NVSImage.Value> = {};
+		for (let i = 0; i < 40; i++) full[`k${i}`] = { type: "string", value: "x".repeat(1000) };
+		expect(() => NVSImage.generate(one(full), 0x5000)).toThrow("don't fit");
+	});
+});

From a44bcda575933f1af1e5354a16472794e73f3e24 Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Wed, 21 Oct 2026 07:28:19 +0200
Subject: [PATCH 07/17] fix: write the agent's name as a valid host name into
 the flash image

The firmware uses its name as the DHCP host name, so "Garage ESP32" is written as "Garage-ESP32".
---
 server/lib/firmware/provisioning.ts | 20 ++++++++++++++++++--
 tests/firmware.test.ts              | 16 ++++++++++++++--
 2 files changed, 32 insertions(+), 4 deletions(-)

diff --git a/server/lib/firmware/provisioning.ts b/server/lib/firmware/provisioning.ts
index 650146e..afd97a2 100644
--- a/server/lib/firmware/provisioning.ts
+++ b/server/lib/firmware/provisioning.ts
@@ -21,12 +21,28 @@ export class ProvisioningImage {
 		}
 
 		const entries: Record<string, NVSImage.Value> = {};
-		for (const [key, value] of Object.entries(values)) {
-			if (manifest.nvs.keys.includes(key)) entries[key] = { type: "string", value };
+		const name = this.hostname(values.name);
+		for (const [key, value] of Object.entries({ ...values, name })) {
+			if (value && manifest.nvs.keys.includes(key)) entries[key] = { type: "string", value };
 		}
 
 		return NVSImage.generate([{ name: manifest.nvs.namespace, entries }], manifest.nvs.size);
 	}
+
+	/**
+	 * The firmware uses its name as the network host name: letters, digits and `-`, at most 63
+	 * characters. "Garage ESP32" becomes "Garage-ESP32"; an empty result keeps the firmware's default.
+	 */
+	static hostname(name: string) {
+		return name
+			.normalize("NFKD")
+			// Accents split off by NFKD: "Büro" → "Buro".
+			.replace(/\p{M}/gu, "")
+			.replace(/[^A-Za-z0-9-]+/g, "-")
+			.replace(/-{2,}/g, "-")
+			.slice(0, 63)
+			.replace(/^-+|-+$/g, "");
+	}
 }
 
 export namespace ProvisioningImage {
diff --git a/tests/firmware.test.ts b/tests/firmware.test.ts
index 2e6b082..44e3abd 100644
--- a/tests/firmware.test.ts
+++ b/tests/firmware.test.ts
@@ -5,6 +5,7 @@ import path from "node:path";
 import { API } from "../server/lib/api";
 import { FirmwareCatalog } from "../server/lib/firmware/catalog";
 import { NVSImage } from "../server/lib/firmware/nvs";
+import { ProvisioningImage } from "../server/lib/firmware/provisioning";
 import { ConfigHandler } from "../server/lib/utils/config";
 import { makeAPIRequest } from "./helpers/api";
 import { type SeededSession, seedSession, seedUser } from "./helpers/seed";
@@ -282,7 +283,8 @@ describe("Flash image", () => {
 		expect(image.length).toBe(0x5000);
 		const text = new TextDecoder("latin1").decode(image);
 		expect(text).toContain("http://localhost:18232\0");
-		expect(text).toContain("Garage esp32\0");
+		// As a host name: the firmware uses its name for DHCP.
+		expect(text).toContain("Garage-esp32\0");
 
 		// Page header: active, version 2.
 		expect(new DataView(image.buffer).getUint32(0, true)).toBe(0xfffffffe);
@@ -323,7 +325,7 @@ describe("Flash image", () => {
 					entries: {
 						server: { type: "string", value: "https://netignite.example/base" },
 						enroll: { type: "string", value: token },
-						name: { type: "string", value: "Garage esp32" },
+						name: { type: "string", value: "Garage-esp32" },
 					},
 				},
 			],
@@ -426,3 +428,13 @@ describe("Firmware signatures", () => {
 		await makeAPIRequest("/v1/firmware/3.0.2/files/firmware.sig", { authToken: owner.token });
 	});
 });
+
+describe("Provisioning image", () => {
+	test("agent names become valid host names", () => {
+		expect(ProvisioningImage.hostname("Garage ESP32")).toBe("Garage-ESP32");
+		expect(ProvisioningImage.hostname("Büro / Keller #2")).toBe("Buro-Keller-2");
+		expect(ProvisioningImage.hostname("--x--")).toBe("x");
+		expect(ProvisioningImage.hostname("日本")).toBe("");
+		expect(ProvisioningImage.hostname("a".repeat(80)).length).toBe(63);
+	});
+});

From 4cd61fdc04929c6878f510e524f6c6049e5980a0 Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Wed, 21 Oct 2026 08:41:58 +0200
Subject: [PATCH 08/17] feat: OTA updates, agent console and Linux agent
 installer

- OTA updates of ESP32 agents: POST /v1/agents/:id/update and /v1/agents/bulk-update (one agent
  after another). The server sends OTA_BEGIN with a path on this server; the agent downloads the
  image with its own credential (GET /v1/firmware/:version/files/:file now accepts ESP32 agent
  credentials), reports OTA_PROGRESS and restarts. HELLO with the new version, or
  info.ota_failed_version after a rollback, finishes the update. Agents report `update` and
  `update_available` (newer release of the admin's channel).
- Console: /ws/console streams an agent's log to its owner (first-message auth, Origin check,
  session checked every minute). REST: GET /logs, GET /info, PUT /device-config (server URL,
  host name, log level, IP; tried by the agent before it keeps them), POST /reboot,
  POST /factory-reset (also revokes the credential).
- Protocol: capabilities ota, logs, config, device.reboot, device.reset; LOG and OTA_PROGRESS
  events; the gateway notifies listeners when an agent disconnects.
- Enrollment takes the agent's kind; a token of another kind gets 409 and stays valid.
- /install/linux.sh: downloads the Linux agent from the Agent-Linux releases, checks SHA256SUMS,
  pairs and installs it. The dashboard shows it as the Linux agent's setup command.
- Dashboard: firmware card with update progress, Console tab, "Update n agents" on the list.
---
 AGENTS.md                                     |  14 +-
 README.md                                     |  31 +-
 app/api-client/index.ts                       |   4 +-
 app/api-client/sdk.gen.ts                     |  91 ++-
 app/api-client/types.gen.ts                   | 615 ++++++++++++++++++
 app/api-client/zod.gen.ts                     | 291 ++++++++-
 app/components/agents/FirmwareCard.vue        | 173 +++++
 app/pages/dashboard/agents/[agent_id].vue     |  14 +
 .../dashboard/agents/[agent_id]/console.vue   | 341 ++++++++++
 .../dashboard/agents/[agent_id]/index.vue     |  29 +-
 app/pages/dashboard/agents/index.vue          |  50 ++
 example.env                                   |   5 +
 server/lib/agents/auth.ts                     |  17 +-
 server/lib/agents/console.ts                  | 225 +++++++
 server/lib/agents/gateway.ts                  |  14 +
 server/lib/agents/linuxInstaller.ts           |  84 +++
 server/lib/agents/protocol.ts                 |  83 +++
 server/lib/api/versions/v1/middleware/auth.ts |  10 +
 .../api/versions/v1/routes/agents/index.ts    | 346 +++++++++-
 .../api/versions/v1/routes/agents/model.ts    | 102 +++
 .../api/versions/v1/routes/firmware/index.ts  |  20 +-
 server/lib/firmware/catalog.ts                |  16 +
 server/lib/firmware/ota.ts                    | 245 +++++++
 server/lib/firmware/provisioning.ts           |  18 +-
 server/lib/utils/config.ts                    |   6 +
 server/plugins/startup.ts                     |   5 +
 server/routes/install/linux.sh.ts             |  16 +
 server/routes/ws/console.ts                   |   5 +
 tests/agent-control.test.ts                   | 567 ++++++++++++++++
 tests/helpers/preload.ts                      |   2 +
 30 files changed, 3401 insertions(+), 38 deletions(-)
 create mode 100644 app/components/agents/FirmwareCard.vue
 create mode 100644 app/pages/dashboard/agents/[agent_id]/console.vue
 create mode 100644 server/lib/agents/console.ts
 create mode 100644 server/lib/agents/linuxInstaller.ts
 create mode 100644 server/lib/firmware/ota.ts
 create mode 100644 server/routes/install/linux.sh.ts
 create mode 100644 server/routes/ws/console.ts
 create mode 100644 tests/agent-control.test.ts

diff --git a/AGENTS.md b/AGENTS.md
index dd7d91b..cc9ee09 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -60,8 +60,18 @@ Follow the LeiCraftMC Style Guides: https://github.com/LeiCraftMC/Style-Guides.
   prebuilt bundle `esp-web-tools/dist/web/install-button.js`; the package's ES modules need an
   older `@material/web` than npm resolves. All manifest parts are `blob:` URLs, so the enrollment
   token never appears in a URL.
+- **OTA** (`server/lib/firmware/ota.ts`): `OTA_BEGIN` sends a path on this server; the agent
+  downloads `/api/v1/firmware/<version>/files/<file>` with its own agent credential (the auth
+  middleware treats agent tokens as unauthenticated; only that route accepts them). Progress is
+  in memory; HELLO with the new version (or `info.ota_failed_version` after a rollback) ends an
+  update.
+- **Console** (`server/lib/agents/console.ts`, `/ws/console`): the browser authenticates with its
+  first message (`{type:"auth", token, agent_id}`), owner only, Origin must be NETIGNITE_APP_URL;
+  the session is checked again every minute.
+- **Enrollment** takes the agent's `kind`; a token of another kind gets 409 and stays valid.
 - Run Biome's autofix only on the files you changed: on the whole tree it rewrites `@ts-ignore` to
   `@ts-expect-error`, which breaks `nuxt typecheck`.
 - Tests: `tests/netignite.test.ts` (API + gateway with `tests/helpers/fake-agent.ts`),
-  `tests/v1-import.test.ts`, `tests/firmware.test.ts` (catalog against a fake GitHub, flash image)
-  and `tests/nvs.test.ts`.
+  `tests/v1-import.test.ts`, `tests/firmware.test.ts` (catalog against a fake GitHub, flash image),
+  `tests/nvs.test.ts` and `tests/agent-control.test.ts` (OTA, console, device control, install
+  script).
diff --git a/README.md b/README.md
index 4c80460..ab843d2 100644
--- a/README.md
+++ b/README.md
@@ -51,6 +51,31 @@ itself when it enrolls.
 | `NETIGNITE_FIRMWARE_PUBLIC_KEY` | — | PEM ECDSA P-256 key; then only signed releases are accepted |
 | `NETIGNITE_GITHUB_TOKEN` | — | Raises GitHub's API rate limit |
 
+### Firmware updates and console
+
+ESP32 agents with firmware 2.1 or newer update over the network: the agent page shows **Update
+to …** when the admin's channel has a newer release (Agents → **Update n agents** updates several
+one after another). The agent downloads the image from this server with its own credential,
+checks its SHA-256 (and signature, if its firmware has a public key compiled in), restarts and goes
+back to the previous firmware if the new one doesn't reach the server within 5 minutes.
+
+The agent's **Console** tab shows its live log (WebSocket `/ws/console`) and changes its log
+level, server address, host name and IP settings, restarts or factory-resets it. A new server
+address or IP setting is only kept if the agent reaches the server with it within 2 minutes.
+
+### Linux agent
+
+The page of a Linux agent shows a one-line installer:
+
+```bash
+curl -fsSL https://<server>/install/linux.sh | sudo sh -s -- <enrollment-token>
+```
+
+`/install/linux.sh` downloads the agent from the [Agent-Linux](https://github.com/NetIgnite-project/Agent-Linux)
+releases (`NETIGNITE_LINUX_AGENT_REPO`; the newest release, pre-releases included, or the tag in
+`NETIGNITE_LINUX_AGENT_VERSION`), checks it against `SHA256SUMS`, pairs it and installs the
+systemd service.
+
 ### Upgrading from v1
 
 The v2 image uses the same `/opt/netignite/data` and `/opt/netignite/config` volumes as v1. Its
@@ -77,7 +102,7 @@ bun run dev
 
 The dev server runs on <http://localhost:18232> (port 18232 in dev and prod, an exception to the
 style guide's 12xxx ports kept for v1 compatibility). Endpoints: `/api/v1/**`, `/api/health`,
-`/api/docs/v1` (OpenAPI reference), `/ws/agent`.
+`/api/docs/v1` (OpenAPI reference), `/ws/agent`, `/ws/console`, `/install/linux.sh`.
 
 After changing the API, regenerate the typed client (boots the API in-process, no server needed):
 
@@ -101,9 +126,9 @@ bun run api-client:generate
 
 | Path | What it is |
 | --- | --- |
-| `server/lib/agents/` | Agent protocol, credentials, gateway and live connection registry |
+| `server/lib/agents/` | Agent protocol, credentials, gateway, live connection registry, console relay, Linux install script |
 | `server/lib/devices/` | Device permissions (sharing roles), status polling, power actions |
-| `server/lib/firmware/` | Firmware catalog (GitHub release sync), NVS image writer for the web installer |
+| `server/lib/firmware/` | Firmware catalog (GitHub release sync), NVS image writer for the web installer, OTA updates |
 | `server/lib/api/versions/v1/routes/` | REST routes (`agents`, `devices`, `firmware`, `auth`, `account`, `admin`) |
 | `server/lib/migration/v1Import.ts` | v1 database import |
 | `app/pages/dashboard/` | Dashboard: overview, devices, agents, settings, admin |
diff --git a/app/api-client/index.ts b/app/api-client/index.ts
index b5951b3..5645cb5 100644
--- a/app/api-client/index.ts
+++ b/app/api-client/index.ts
@@ -1,4 +1,4 @@
 // This file is auto-generated by @hey-api/openapi-ts
 
-export { deleteAccount, deleteAccountApikeysByApiKeyId, deleteAdminUsersByUserId, deleteAgentsByAgentId, deleteDevicesByDeviceId, deleteDevicesByDeviceIdFavorite, deleteDevicesByDeviceIdSharesByUserId, getAccount, getAccountApikeys, getAccountApikeysByApiKeyId, getAccountPreferences, getAccountPreferencesOnboarding, getAdminFirmware, getAdminSettings, getAdminUsers, getAdminUsersByUserId, getAgents, getAgentsByAgentId, getAuthRegistration, getAuthSession, getDevices, getDevicesByDeviceId, getDevicesByDeviceIdShares, getFirmware, getFirmwareByVersionFilesByFile, type Options, postAccountApikeys, postAdminFirmwareSync, postAdminUsers, postAgents, postAgentsByAgentIdEnrollments, postAgentsByAgentIdFlashImage, postAgentsByAgentIdRevoke, postAgentsEnroll, postAuthLogin, postAuthLogout, postAuthResetPassword, postAuthResetPasswordRequest, postAuthSignup, postDevices, postDevicesByDeviceIdPowerOn, postDevicesByDeviceIdReboot, postDevicesByDeviceIdShares, postDevicesByDeviceIdShutdown, postDevicesByDeviceIdStatus, putAccount, putAccountPassword, putAccountPreferencesOnboarding, putAdminSettings, putAdminUsersByUserId, putAdminUsersByUserIdPassword, putAgentsByAgentId, putDevicesByDeviceId, putDevicesByDeviceIdFavorite, putDevicesByDeviceIdSharesByUserId } from './sdk.gen';
-export type { ClientOptions, DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdErrors, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountApikeysByApiKeyIdResponses, DeleteAccountData, DeleteAccountError, DeleteAccountErrors, DeleteAccountResponse, DeleteAccountResponses, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdErrors, DeleteAdminUsersByUserIdResponse, DeleteAdminUsersByUserIdResponses, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdErrors, DeleteAgentsByAgentIdResponse, DeleteAgentsByAgentIdResponses, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdErrors, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteErrors, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdFavoriteResponses, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdResponses, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdErrors, DeleteDevicesByDeviceIdSharesByUserIdResponse, DeleteDevicesByDeviceIdSharesByUserIdResponses, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdErrors, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysByApiKeyIdResponses, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountApikeysResponses, GetAccountData, GetAccountError, GetAccountErrors, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesOnboardingResponses, GetAccountPreferencesResponse, GetAccountPreferencesResponses, GetAccountResponse, GetAccountResponses, GetAdminFirmwareData, GetAdminFirmwareResponse, GetAdminFirmwareResponses, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminSettingsResponses, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdErrors, GetAdminUsersByUserIdResponse, GetAdminUsersByUserIdResponses, GetAdminUsersData, GetAdminUsersError, GetAdminUsersErrors, GetAdminUsersResponse, GetAdminUsersResponses, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdErrors, GetAgentsByAgentIdResponse, GetAgentsByAgentIdResponses, GetAgentsData, GetAgentsResponse, GetAgentsResponses, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthRegistrationResponses, GetAuthSessionData, GetAuthSessionError, GetAuthSessionErrors, GetAuthSessionResponse, GetAuthSessionResponses, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdErrors, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdResponses, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesErrors, GetDevicesByDeviceIdSharesResponse, GetDevicesByDeviceIdSharesResponses, GetDevicesData, GetDevicesResponse, GetDevicesResponses, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileError, GetFirmwareByVersionFilesByFileErrors, GetFirmwareByVersionFilesByFileResponse, GetFirmwareByVersionFilesByFileResponses, GetFirmwareData, GetFirmwareResponse, GetFirmwareResponses, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysErrors, PostAccountApikeysResponse, PostAccountApikeysResponses, PostAdminFirmwareSyncData, PostAdminFirmwareSyncError, PostAdminFirmwareSyncErrors, PostAdminFirmwareSyncResponse, PostAdminFirmwareSyncResponses, PostAdminUsersData, PostAdminUsersError, PostAdminUsersErrors, PostAdminUsersResponse, PostAdminUsersResponses, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsErrors, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdEnrollmentsResponses, PostAgentsByAgentIdFlashImageData, PostAgentsByAgentIdFlashImageError, PostAgentsByAgentIdFlashImageErrors, PostAgentsByAgentIdFlashImageResponse, PostAgentsByAgentIdFlashImageResponses, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeErrors, PostAgentsByAgentIdRevokeResponse, PostAgentsByAgentIdRevokeResponses, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollErrors, PostAgentsEnrollResponse, PostAgentsEnrollResponses, PostAgentsError, PostAgentsErrors, PostAgentsResponse, PostAgentsResponses, PostAuthLoginData, PostAuthLoginError, PostAuthLoginErrors, PostAuthLoginResponse, PostAuthLoginResponses, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutErrors, PostAuthLogoutResponse, PostAuthLogoutResponses, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordErrors, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestErrors, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordRequestResponses, PostAuthResetPasswordResponse, PostAuthResetPasswordResponses, PostAuthSignupData, PostAuthSignupError, PostAuthSignupErrors, PostAuthSignupResponse, PostAuthSignupResponses, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnErrors, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdPowerOnResponses, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootErrors, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdRebootResponses, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesErrors, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdSharesResponses, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownErrors, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdShutdownResponses, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusErrors, PostDevicesByDeviceIdStatusResponse, PostDevicesByDeviceIdStatusResponses, PostDevicesData, PostDevicesError, PostDevicesErrors, PostDevicesResponse, PostDevicesResponses, PutAccountData, PutAccountError, PutAccountErrors, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordErrors, PutAccountPasswordResponse, PutAccountPasswordResponses, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingErrors, PutAccountPreferencesOnboardingResponse, PutAccountPreferencesOnboardingResponses, PutAccountResponse, PutAccountResponses, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsErrors, PutAdminSettingsResponse, PutAdminSettingsResponses, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdErrors, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordErrors, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdPasswordResponses, PutAdminUsersByUserIdResponse, PutAdminUsersByUserIdResponses, PutAgentsByAgentIdData, PutAgentsByAgentIdError, PutAgentsByAgentIdErrors, PutAgentsByAgentIdResponse, PutAgentsByAgentIdResponses, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdErrors, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteErrors, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdFavoriteResponses, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdResponses, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdErrors, PutDevicesByDeviceIdSharesByUserIdResponse, PutDevicesByDeviceIdSharesByUserIdResponses } from './types.gen';
+export { deleteAccount, deleteAccountApikeysByApiKeyId, deleteAdminUsersByUserId, deleteAgentsByAgentId, deleteDevicesByDeviceId, deleteDevicesByDeviceIdFavorite, deleteDevicesByDeviceIdSharesByUserId, getAccount, getAccountApikeys, getAccountApikeysByApiKeyId, getAccountPreferences, getAccountPreferencesOnboarding, getAdminFirmware, getAdminSettings, getAdminUsers, getAdminUsersByUserId, getAgents, getAgentsByAgentId, getAgentsByAgentIdInfo, getAgentsByAgentIdLogs, getAuthRegistration, getAuthSession, getDevices, getDevicesByDeviceId, getDevicesByDeviceIdShares, getFirmware, getFirmwareByVersionFilesByFile, type Options, postAccountApikeys, postAdminFirmwareSync, postAdminUsers, postAgents, postAgentsBulkUpdate, postAgentsByAgentIdEnrollments, postAgentsByAgentIdFactoryReset, postAgentsByAgentIdFlashImage, postAgentsByAgentIdReboot, postAgentsByAgentIdRevoke, postAgentsByAgentIdUpdate, postAgentsEnroll, postAuthLogin, postAuthLogout, postAuthResetPassword, postAuthResetPasswordRequest, postAuthSignup, postDevices, postDevicesByDeviceIdPowerOn, postDevicesByDeviceIdReboot, postDevicesByDeviceIdShares, postDevicesByDeviceIdShutdown, postDevicesByDeviceIdStatus, putAccount, putAccountPassword, putAccountPreferencesOnboarding, putAdminSettings, putAdminUsersByUserId, putAdminUsersByUserIdPassword, putAgentsByAgentId, putAgentsByAgentIdDeviceConfig, putDevicesByDeviceId, putDevicesByDeviceIdFavorite, putDevicesByDeviceIdSharesByUserId } from './sdk.gen';
+export type { ClientOptions, DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdErrors, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountApikeysByApiKeyIdResponses, DeleteAccountData, DeleteAccountError, DeleteAccountErrors, DeleteAccountResponse, DeleteAccountResponses, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdErrors, DeleteAdminUsersByUserIdResponse, DeleteAdminUsersByUserIdResponses, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdErrors, DeleteAgentsByAgentIdResponse, DeleteAgentsByAgentIdResponses, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdErrors, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteErrors, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdFavoriteResponses, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdResponses, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdErrors, DeleteDevicesByDeviceIdSharesByUserIdResponse, DeleteDevicesByDeviceIdSharesByUserIdResponses, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdErrors, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysByApiKeyIdResponses, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountApikeysResponses, GetAccountData, GetAccountError, GetAccountErrors, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesOnboardingResponses, GetAccountPreferencesResponse, GetAccountPreferencesResponses, GetAccountResponse, GetAccountResponses, GetAdminFirmwareData, GetAdminFirmwareResponse, GetAdminFirmwareResponses, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminSettingsResponses, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdErrors, GetAdminUsersByUserIdResponse, GetAdminUsersByUserIdResponses, GetAdminUsersData, GetAdminUsersError, GetAdminUsersErrors, GetAdminUsersResponse, GetAdminUsersResponses, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdErrors, GetAgentsByAgentIdInfoData, GetAgentsByAgentIdInfoError, GetAgentsByAgentIdInfoErrors, GetAgentsByAgentIdInfoResponse, GetAgentsByAgentIdInfoResponses, GetAgentsByAgentIdLogsData, GetAgentsByAgentIdLogsError, GetAgentsByAgentIdLogsErrors, GetAgentsByAgentIdLogsResponse, GetAgentsByAgentIdLogsResponses, GetAgentsByAgentIdResponse, GetAgentsByAgentIdResponses, GetAgentsData, GetAgentsResponse, GetAgentsResponses, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthRegistrationResponses, GetAuthSessionData, GetAuthSessionError, GetAuthSessionErrors, GetAuthSessionResponse, GetAuthSessionResponses, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdErrors, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdResponses, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesErrors, GetDevicesByDeviceIdSharesResponse, GetDevicesByDeviceIdSharesResponses, GetDevicesData, GetDevicesResponse, GetDevicesResponses, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileError, GetFirmwareByVersionFilesByFileErrors, GetFirmwareByVersionFilesByFileResponse, GetFirmwareByVersionFilesByFileResponses, GetFirmwareData, GetFirmwareResponse, GetFirmwareResponses, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysErrors, PostAccountApikeysResponse, PostAccountApikeysResponses, PostAdminFirmwareSyncData, PostAdminFirmwareSyncError, PostAdminFirmwareSyncErrors, PostAdminFirmwareSyncResponse, PostAdminFirmwareSyncResponses, PostAdminUsersData, PostAdminUsersError, PostAdminUsersErrors, PostAdminUsersResponse, PostAdminUsersResponses, PostAgentsBulkUpdateData, PostAgentsBulkUpdateError, PostAgentsBulkUpdateErrors, PostAgentsBulkUpdateResponse, PostAgentsBulkUpdateResponses, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsErrors, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdEnrollmentsResponses, PostAgentsByAgentIdFactoryResetData, PostAgentsByAgentIdFactoryResetError, PostAgentsByAgentIdFactoryResetErrors, PostAgentsByAgentIdFactoryResetResponse, PostAgentsByAgentIdFactoryResetResponses, PostAgentsByAgentIdFlashImageData, PostAgentsByAgentIdFlashImageError, PostAgentsByAgentIdFlashImageErrors, PostAgentsByAgentIdFlashImageResponse, PostAgentsByAgentIdFlashImageResponses, PostAgentsByAgentIdRebootData, PostAgentsByAgentIdRebootError, PostAgentsByAgentIdRebootErrors, PostAgentsByAgentIdRebootResponse, PostAgentsByAgentIdRebootResponses, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeErrors, PostAgentsByAgentIdRevokeResponse, PostAgentsByAgentIdRevokeResponses, PostAgentsByAgentIdUpdateData, PostAgentsByAgentIdUpdateError, PostAgentsByAgentIdUpdateErrors, PostAgentsByAgentIdUpdateResponse, PostAgentsByAgentIdUpdateResponses, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollErrors, PostAgentsEnrollResponse, PostAgentsEnrollResponses, PostAgentsError, PostAgentsErrors, PostAgentsResponse, PostAgentsResponses, PostAuthLoginData, PostAuthLoginError, PostAuthLoginErrors, PostAuthLoginResponse, PostAuthLoginResponses, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutErrors, PostAuthLogoutResponse, PostAuthLogoutResponses, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordErrors, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestErrors, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordRequestResponses, PostAuthResetPasswordResponse, PostAuthResetPasswordResponses, PostAuthSignupData, PostAuthSignupError, PostAuthSignupErrors, PostAuthSignupResponse, PostAuthSignupResponses, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnErrors, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdPowerOnResponses, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootErrors, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdRebootResponses, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesErrors, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdSharesResponses, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownErrors, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdShutdownResponses, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusErrors, PostDevicesByDeviceIdStatusResponse, PostDevicesByDeviceIdStatusResponses, PostDevicesData, PostDevicesError, PostDevicesErrors, PostDevicesResponse, PostDevicesResponses, PutAccountData, PutAccountError, PutAccountErrors, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordErrors, PutAccountPasswordResponse, PutAccountPasswordResponses, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingErrors, PutAccountPreferencesOnboardingResponse, PutAccountPreferencesOnboardingResponses, PutAccountResponse, PutAccountResponses, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsErrors, PutAdminSettingsResponse, PutAdminSettingsResponses, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdErrors, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordErrors, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdPasswordResponses, PutAdminUsersByUserIdResponse, PutAdminUsersByUserIdResponses, PutAgentsByAgentIdData, PutAgentsByAgentIdDeviceConfigData, PutAgentsByAgentIdDeviceConfigError, PutAgentsByAgentIdDeviceConfigErrors, PutAgentsByAgentIdDeviceConfigResponse, PutAgentsByAgentIdDeviceConfigResponses, PutAgentsByAgentIdError, PutAgentsByAgentIdErrors, PutAgentsByAgentIdResponse, PutAgentsByAgentIdResponses, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdErrors, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteErrors, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdFavoriteResponses, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdResponses, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdErrors, PutDevicesByDeviceIdSharesByUserIdResponse, PutDevicesByDeviceIdSharesByUserIdResponses } from './types.gen';
diff --git a/app/api-client/sdk.gen.ts b/app/api-client/sdk.gen.ts
index 05b30fb..c51454a 100644
--- a/app/api-client/sdk.gen.ts
+++ b/app/api-client/sdk.gen.ts
@@ -3,7 +3,7 @@
 
 import type { Client, ClientMeta, Composable, Options as Options2, RequestResult, TDataShape } from './client';
 import { client } from './client.gen';
-import type { DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountData, DeleteAccountError, DeleteAccountResponse, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdResponse, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdResponse, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdResponse, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountData, GetAccountError, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesResponse, GetAccountResponse, GetAdminFirmwareData, GetAdminFirmwareResponse, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdResponse, GetAdminUsersData, GetAdminUsersError, GetAdminUsersResponse, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdResponse, GetAgentsData, GetAgentsResponse, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthSessionData, GetAuthSessionError, GetAuthSessionResponse, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesResponse, GetDevicesData, GetDevicesResponse, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileError, GetFirmwareByVersionFilesByFileResponse, GetFirmwareData, GetFirmwareResponse, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysResponse, PostAdminFirmwareSyncData, PostAdminFirmwareSyncError, PostAdminFirmwareSyncResponse, PostAdminUsersData, PostAdminUsersError, PostAdminUsersResponse, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdFlashImageData, PostAgentsByAgentIdFlashImageError, PostAgentsByAgentIdFlashImageResponse, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeResponse, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollResponse, PostAgentsError, PostAgentsResponse, PostAuthLoginData, PostAuthLoginError, PostAuthLoginResponse, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutResponse, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordResponse, PostAuthSignupData, PostAuthSignupError, PostAuthSignupResponse, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusResponse, PostDevicesData, PostDevicesError, PostDevicesResponse, PutAccountData, PutAccountError, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordResponse, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingResponse, PutAccountResponse, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsResponse, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdResponse, PutAgentsByAgentIdData, PutAgentsByAgentIdError, PutAgentsByAgentIdResponse, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdResponse } from './types.gen';
+import type { DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountData, DeleteAccountError, DeleteAccountResponse, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdResponse, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdResponse, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdResponse, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountData, GetAccountError, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesResponse, GetAccountResponse, GetAdminFirmwareData, GetAdminFirmwareResponse, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdResponse, GetAdminUsersData, GetAdminUsersError, GetAdminUsersResponse, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdInfoData, GetAgentsByAgentIdInfoError, GetAgentsByAgentIdInfoResponse, GetAgentsByAgentIdLogsData, GetAgentsByAgentIdLogsError, GetAgentsByAgentIdLogsResponse, GetAgentsByAgentIdResponse, GetAgentsData, GetAgentsResponse, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthSessionData, GetAuthSessionError, GetAuthSessionResponse, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesResponse, GetDevicesData, GetDevicesResponse, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileError, GetFirmwareByVersionFilesByFileResponse, GetFirmwareData, GetFirmwareResponse, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysResponse, PostAdminFirmwareSyncData, PostAdminFirmwareSyncError, PostAdminFirmwareSyncResponse, PostAdminUsersData, PostAdminUsersError, PostAdminUsersResponse, PostAgentsBulkUpdateData, PostAgentsBulkUpdateError, PostAgentsBulkUpdateResponse, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdFactoryResetData, PostAgentsByAgentIdFactoryResetError, PostAgentsByAgentIdFactoryResetResponse, PostAgentsByAgentIdFlashImageData, PostAgentsByAgentIdFlashImageError, PostAgentsByAgentIdFlashImageResponse, PostAgentsByAgentIdRebootData, PostAgentsByAgentIdRebootError, PostAgentsByAgentIdRebootResponse, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeResponse, PostAgentsByAgentIdUpdateData, PostAgentsByAgentIdUpdateError, PostAgentsByAgentIdUpdateResponse, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollResponse, PostAgentsError, PostAgentsResponse, PostAuthLoginData, PostAuthLoginError, PostAuthLoginResponse, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutResponse, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordResponse, PostAuthSignupData, PostAuthSignupError, PostAuthSignupResponse, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusResponse, PostDevicesData, PostDevicesError, PostDevicesResponse, PutAccountData, PutAccountError, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordResponse, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingResponse, PutAccountResponse, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsResponse, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdResponse, PutAgentsByAgentIdData, PutAgentsByAgentIdDeviceConfigData, PutAgentsByAgentIdDeviceConfigError, PutAgentsByAgentIdDeviceConfigResponse, PutAgentsByAgentIdError, PutAgentsByAgentIdResponse, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdResponse } from './types.gen';
 
 export type Options<TComposable extends Composable = '$fetch', TData extends TDataShape = TDataShape, ResT = unknown, DefaultT = undefined> = Options2<TComposable, TData, ResT, DefaultT> & {
     /**
@@ -401,6 +401,21 @@ export const postAgents = <TComposable extends Composable = '$fetch', DefaultT e
     }
 });
 
+/**
+ * Update the firmware of several agents
+ *
+ * Updates the caller's ESP32 agents one after another (each update has to finish first) to the given or the recommended release. Offline agents and agents that already run it are skipped. Follow the progress in each agent's `update`.
+ */
+export const postAgentsBulkUpdate = <TComposable extends Composable = '$fetch', DefaultT extends PostAgentsBulkUpdateResponse = PostAgentsBulkUpdateResponse>(options: Options<TComposable, PostAgentsBulkUpdateData, PostAgentsBulkUpdateResponse, DefaultT>): RequestResult<TComposable, PostAgentsBulkUpdateResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAgentsBulkUpdateResponse | DefaultT, PostAgentsBulkUpdateError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/bulk-update',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
 /**
  * Delete an agent
  *
@@ -471,6 +486,78 @@ export const postAgentsByAgentIdFlashImage = <TComposable extends Composable = '
     }
 });
 
+/**
+ * Update an agent's firmware
+ *
+ * Starts an OTA update to the given or the recommended release. The agent downloads and checks the image, restarts, and goes back to its previous firmware if the new one doesn't reach the server. Follow the progress in the agent's `update`.
+ */
+export const postAgentsByAgentIdUpdate = <TComposable extends Composable = '$fetch', DefaultT extends PostAgentsByAgentIdUpdateResponse = PostAgentsByAgentIdUpdateResponse>(options: Options<TComposable, PostAgentsByAgentIdUpdateData, PostAgentsByAgentIdUpdateResponse, DefaultT>): RequestResult<TComposable, PostAgentsByAgentIdUpdateResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAgentsByAgentIdUpdateResponse | DefaultT, PostAgentsByAgentIdUpdateError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}/update',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Get an agent's log
+ *
+ * The agent's most recent log lines. For a live view, use the `/ws/console` WebSocket.
+ */
+export const getAgentsByAgentIdLogs = <TComposable extends Composable = '$fetch', DefaultT extends GetAgentsByAgentIdLogsResponse = GetAgentsByAgentIdLogsResponse>(options: Options<TComposable, GetAgentsByAgentIdLogsData, GetAgentsByAgentIdLogsResponse, DefaultT>): RequestResult<TComposable, GetAgentsByAgentIdLogsResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAgentsByAgentIdLogsResponse | DefaultT, GetAgentsByAgentIdLogsError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}/logs',
+    ...options
+});
+
+/**
+ * Get an agent's current diagnostics
+ *
+ * Asks the agent for its current state (network, memory, uptime, firmware).
+ */
+export const getAgentsByAgentIdInfo = <TComposable extends Composable = '$fetch', DefaultT extends GetAgentsByAgentIdInfoResponse = GetAgentsByAgentIdInfoResponse>(options: Options<TComposable, GetAgentsByAgentIdInfoData, GetAgentsByAgentIdInfoResponse, DefaultT>): RequestResult<TComposable, GetAgentsByAgentIdInfoResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetAgentsByAgentIdInfoResponse | DefaultT, GetAgentsByAgentIdInfoError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}/info',
+    ...options
+});
+
+/**
+ * Change an agent's settings
+ *
+ * Changes settings stored on the agent. A new server URL or IP setting is only kept if the agent reaches the server with it within 2 minutes; otherwise it restarts with the previous settings. Wi-Fi is changed over USB with the web installer (Improv), never through the server.
+ */
+export const putAgentsByAgentIdDeviceConfig = <TComposable extends Composable = '$fetch', DefaultT extends PutAgentsByAgentIdDeviceConfigResponse = PutAgentsByAgentIdDeviceConfigResponse>(options: Options<TComposable, PutAgentsByAgentIdDeviceConfigData, PutAgentsByAgentIdDeviceConfigResponse, DefaultT>): RequestResult<TComposable, PutAgentsByAgentIdDeviceConfigResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutAgentsByAgentIdDeviceConfigResponse | DefaultT, PutAgentsByAgentIdDeviceConfigError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}/device-config',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Restart an agent
+ */
+export const postAgentsByAgentIdReboot = <TComposable extends Composable = '$fetch', DefaultT extends PostAgentsByAgentIdRebootResponse = PostAgentsByAgentIdRebootResponse>(options: Options<TComposable, PostAgentsByAgentIdRebootData, PostAgentsByAgentIdRebootResponse, DefaultT>): RequestResult<TComposable, PostAgentsByAgentIdRebootResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAgentsByAgentIdRebootResponse | DefaultT, PostAgentsByAgentIdRebootError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}/reboot',
+    ...options
+});
+
+/**
+ * Factory-reset an agent
+ *
+ * Erases the agent's Wi-Fi, server and credential and restarts it. Its credential is revoked here too; set it up again with the web installer.
+ */
+export const postAgentsByAgentIdFactoryReset = <TComposable extends Composable = '$fetch', DefaultT extends PostAgentsByAgentIdFactoryResetResponse = PostAgentsByAgentIdFactoryResetResponse>(options: Options<TComposable, PostAgentsByAgentIdFactoryResetData, PostAgentsByAgentIdFactoryResetResponse, DefaultT>): RequestResult<TComposable, PostAgentsByAgentIdFactoryResetResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostAgentsByAgentIdFactoryResetResponse | DefaultT, PostAgentsByAgentIdFactoryResetError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/agents/{agentID}/factory-reset',
+    ...options
+});
+
 /**
  * List devices
  *
@@ -654,7 +741,7 @@ export const getFirmware = <TComposable extends Composable = '$fetch', DefaultT
 /**
  * Download a firmware file
  *
- * A flash image (or the signature) of a synced release, for the web installer.
+ * A flash image (or the signature) of a synced release, for the web installer. ESP32 agents download OTA updates here with their agent credential.
  */
 export const getFirmwareByVersionFilesByFile = <TComposable extends Composable = '$fetch', DefaultT extends GetFirmwareByVersionFilesByFileResponse = GetFirmwareByVersionFilesByFileResponse>(options: Options<TComposable, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileResponse, DefaultT>): RequestResult<TComposable, GetFirmwareByVersionFilesByFileResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetFirmwareByVersionFilesByFileResponse | DefaultT, GetFirmwareByVersionFilesByFileError, DefaultT>({
     security: [{ scheme: 'bearer', type: 'http' }],
diff --git a/app/api-client/types.gen.ts b/app/api-client/types.gen.ts
index 836f1ad..6fab9e1 100644
--- a/app/api-client/types.gen.ts
+++ b/app/api-client/types.gen.ts
@@ -1193,6 +1193,7 @@ export type PostAgentsEnrollData = {
     body: {
         enrollment_token: string;
         secret: string;
+        kind?: 'esp32' | 'linux';
     };
     path?: never;
     query?: never;
@@ -1216,6 +1217,14 @@ export type PostAgentsEnrollErrors = {
         code: 401;
         message: 'Unauthorized: Unknown, used or expired enrollment token';
     };
+    /**
+     * The token is for another kind of agent (it stays valid)
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The token is for another kind of agent (it stays valid)';
+    };
     /**
      * Too many enrollment attempts
      */
@@ -1275,6 +1284,16 @@ export type GetAgentsResponses = {
             last_seen_at: number | null;
             enrolled_at: number | null;
             created_at: number;
+            update: {
+                version: string;
+                from_version: string | null;
+                state: 'queued' | 'starting' | 'downloading' | 'restarting' | 'done' | 'failed';
+                percent: number;
+                error: string | null;
+                started_at: number;
+                updated_at: number;
+            } | null;
+            update_available: string | null;
         }>;
     };
 };
@@ -1327,12 +1346,74 @@ export type PostAgentsResponses = {
             last_seen_at: number | null;
             enrolled_at: number | null;
             created_at: number;
+            update: {
+                version: string;
+                from_version: string | null;
+                state: 'queued' | 'starting' | 'downloading' | 'restarting' | 'done' | 'failed';
+                percent: number;
+                error: string | null;
+                started_at: number;
+                updated_at: number;
+            } | null;
+            update_available: string | null;
         };
     };
 };
 
 export type PostAgentsResponse = PostAgentsResponses[keyof PostAgentsResponses];
 
+export type PostAgentsBulkUpdateData = {
+    body: {
+        agent_ids: Array<number>;
+        version?: string;
+    };
+    path?: never;
+    query?: never;
+    url: '/agents/bulk-update';
+};
+
+export type PostAgentsBulkUpdateErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Firmware release not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Firmware release not found';
+    };
+};
+
+export type PostAgentsBulkUpdateError = PostAgentsBulkUpdateErrors[keyof PostAgentsBulkUpdateErrors];
+
+export type PostAgentsBulkUpdateResponses = {
+    /**
+     * Updates queued
+     */
+    202: {
+        success: true;
+        code: 202;
+        message: 'Updates queued';
+        data: {
+            version: string;
+            queued: Array<number>;
+            skipped: Array<{
+                agent_id: number;
+                reason: string;
+            }>;
+        };
+    };
+};
+
+export type PostAgentsBulkUpdateResponse = PostAgentsBulkUpdateResponses[keyof PostAgentsBulkUpdateResponses];
+
 export type DeleteAgentsByAgentIdData = {
     body?: never;
     path: {
@@ -1429,6 +1510,16 @@ export type GetAgentsByAgentIdResponses = {
             last_seen_at: number | null;
             enrolled_at: number | null;
             created_at: number;
+            update: {
+                version: string;
+                from_version: string | null;
+                state: 'queued' | 'starting' | 'downloading' | 'restarting' | 'done' | 'failed';
+                percent: number;
+                error: string | null;
+                started_at: number;
+                updated_at: number;
+            } | null;
+            update_available: string | null;
         };
     };
 };
@@ -1490,6 +1581,16 @@ export type PutAgentsByAgentIdResponses = {
             last_seen_at: number | null;
             enrolled_at: number | null;
             created_at: number;
+            update: {
+                version: string;
+                from_version: string | null;
+                state: 'queued' | 'starting' | 'downloading' | 'restarting' | 'done' | 'failed';
+                percent: number;
+                error: string | null;
+                started_at: number;
+                updated_at: number;
+            } | null;
+            update_available: string | null;
         };
     };
 };
@@ -1595,6 +1696,16 @@ export type PostAgentsByAgentIdRevokeResponses = {
             last_seen_at: number | null;
             enrolled_at: number | null;
             created_at: number;
+            update: {
+                version: string;
+                from_version: string | null;
+                state: 'queued' | 'starting' | 'downloading' | 'restarting' | 'done' | 'failed';
+                percent: number;
+                error: string | null;
+                started_at: number;
+                updated_at: number;
+            } | null;
+            update_available: string | null;
         };
     };
 };
@@ -1653,6 +1764,510 @@ export type PostAgentsByAgentIdFlashImageResponses = {
 
 export type PostAgentsByAgentIdFlashImageResponse = PostAgentsByAgentIdFlashImageResponses[keyof PostAgentsByAgentIdFlashImageResponses];
 
+export type PostAgentsByAgentIdUpdateData = {
+    body?: {
+        version?: string;
+    };
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}/update';
+};
+
+export type PostAgentsByAgentIdUpdateErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Agent or firmware release not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent or firmware release not found';
+    };
+    /**
+     * The agent can't be updated now
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The agent can\'t be updated now';
+    };
+    /**
+     * The agent couldn't start the update
+     */
+    502: {
+        success: false;
+        code: 502;
+        message: 'The agent couldn\'t start the update';
+    };
+    /**
+     * The agent is offline
+     */
+    503: {
+        success: false;
+        code: 503;
+        message: 'The agent is offline';
+    };
+};
+
+export type PostAgentsByAgentIdUpdateError = PostAgentsByAgentIdUpdateErrors[keyof PostAgentsByAgentIdUpdateErrors];
+
+export type PostAgentsByAgentIdUpdateResponses = {
+    /**
+     * Update started
+     */
+    202: {
+        success: true;
+        code: 202;
+        message: 'Update started';
+        data: {
+            version: string;
+            from_version: string | null;
+            state: 'queued' | 'starting' | 'downloading' | 'restarting' | 'done' | 'failed';
+            percent: number;
+            error: string | null;
+            started_at: number;
+            updated_at: number;
+        };
+    };
+};
+
+export type PostAgentsByAgentIdUpdateResponse = PostAgentsByAgentIdUpdateResponses[keyof PostAgentsByAgentIdUpdateResponses];
+
+export type GetAgentsByAgentIdLogsData = {
+    body?: never;
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}/logs';
+};
+
+export type GetAgentsByAgentIdLogsErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Agent not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent not found';
+    };
+    /**
+     * The agent doesn't support this
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The agent doesn\'t support this';
+    };
+    /**
+     * The agent reported an error
+     */
+    502: {
+        success: false;
+        code: 502;
+        message: 'The agent reported an error';
+    };
+    /**
+     * The agent is offline
+     */
+    503: {
+        success: false;
+        code: 503;
+        message: 'The agent is offline';
+    };
+    /**
+     * The agent didn't answer in time
+     */
+    504: {
+        success: false;
+        code: 504;
+        message: 'The agent didn\'t answer in time';
+    };
+};
+
+export type GetAgentsByAgentIdLogsError = GetAgentsByAgentIdLogsErrors[keyof GetAgentsByAgentIdLogsErrors];
+
+export type GetAgentsByAgentIdLogsResponses = {
+    /**
+     * Log retrieved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Log retrieved';
+        data: {
+            lines: Array<string>;
+            level: 'error' | 'warn' | 'info' | 'debug' | null;
+        };
+    };
+};
+
+export type GetAgentsByAgentIdLogsResponse = GetAgentsByAgentIdLogsResponses[keyof GetAgentsByAgentIdLogsResponses];
+
+export type GetAgentsByAgentIdInfoData = {
+    body?: never;
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}/info';
+};
+
+export type GetAgentsByAgentIdInfoErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Agent not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent not found';
+    };
+    /**
+     * The agent doesn't support this
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The agent doesn\'t support this';
+    };
+    /**
+     * The agent reported an error
+     */
+    502: {
+        success: false;
+        code: 502;
+        message: 'The agent reported an error';
+    };
+    /**
+     * The agent is offline
+     */
+    503: {
+        success: false;
+        code: 503;
+        message: 'The agent is offline';
+    };
+    /**
+     * The agent didn't answer in time
+     */
+    504: {
+        success: false;
+        code: 504;
+        message: 'The agent didn\'t answer in time';
+    };
+};
+
+export type GetAgentsByAgentIdInfoError = GetAgentsByAgentIdInfoErrors[keyof GetAgentsByAgentIdInfoErrors];
+
+export type GetAgentsByAgentIdInfoResponses = {
+    /**
+     * Info retrieved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Info retrieved';
+        data: {
+            version: string | null;
+            info: {
+                [key: string]: unknown;
+            };
+        };
+    };
+};
+
+export type GetAgentsByAgentIdInfoResponse = GetAgentsByAgentIdInfoResponses[keyof GetAgentsByAgentIdInfoResponses];
+
+export type PutAgentsByAgentIdDeviceConfigData = {
+    body?: {
+        server_url?: string;
+        name?: string;
+        log_level?: 'error' | 'warn' | 'info' | 'debug';
+        ip?: {
+            mode: 'dhcp';
+        } | {
+            mode: 'static';
+            address: string;
+            gateway: string;
+            netmask: string;
+            dns1?: string;
+            dns2?: string;
+        };
+    };
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}/device-config';
+};
+
+export type PutAgentsByAgentIdDeviceConfigErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Agent not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent not found';
+    };
+    /**
+     * The agent doesn't support this
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The agent doesn\'t support this';
+    };
+    /**
+     * The agent reported an error
+     */
+    502: {
+        success: false;
+        code: 502;
+        message: 'The agent reported an error';
+    };
+    /**
+     * The agent is offline
+     */
+    503: {
+        success: false;
+        code: 503;
+        message: 'The agent is offline';
+    };
+    /**
+     * The agent didn't answer in time
+     */
+    504: {
+        success: false;
+        code: 504;
+        message: 'The agent didn\'t answer in time';
+    };
+};
+
+export type PutAgentsByAgentIdDeviceConfigError = PutAgentsByAgentIdDeviceConfigErrors[keyof PutAgentsByAgentIdDeviceConfigErrors];
+
+export type PutAgentsByAgentIdDeviceConfigResponses = {
+    /**
+     * Settings sent to the agent
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Settings sent to the agent';
+        data: null;
+    };
+};
+
+export type PutAgentsByAgentIdDeviceConfigResponse = PutAgentsByAgentIdDeviceConfigResponses[keyof PutAgentsByAgentIdDeviceConfigResponses];
+
+export type PostAgentsByAgentIdRebootData = {
+    body?: never;
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}/reboot';
+};
+
+export type PostAgentsByAgentIdRebootErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Agent not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent not found';
+    };
+    /**
+     * The agent doesn't support this
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The agent doesn\'t support this';
+    };
+    /**
+     * The agent reported an error
+     */
+    502: {
+        success: false;
+        code: 502;
+        message: 'The agent reported an error';
+    };
+    /**
+     * The agent is offline
+     */
+    503: {
+        success: false;
+        code: 503;
+        message: 'The agent is offline';
+    };
+    /**
+     * The agent didn't answer in time
+     */
+    504: {
+        success: false;
+        code: 504;
+        message: 'The agent didn\'t answer in time';
+    };
+};
+
+export type PostAgentsByAgentIdRebootError = PostAgentsByAgentIdRebootErrors[keyof PostAgentsByAgentIdRebootErrors];
+
+export type PostAgentsByAgentIdRebootResponses = {
+    /**
+     * The agent restarts
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'The agent restarts';
+        data: null;
+    };
+};
+
+export type PostAgentsByAgentIdRebootResponse = PostAgentsByAgentIdRebootResponses[keyof PostAgentsByAgentIdRebootResponses];
+
+export type PostAgentsByAgentIdFactoryResetData = {
+    body?: never;
+    path: {
+        agentID: number;
+    };
+    query?: never;
+    url: '/agents/{agentID}/factory-reset';
+};
+
+export type PostAgentsByAgentIdFactoryResetErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Agent not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Agent not found';
+    };
+    /**
+     * The agent doesn't support this
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The agent doesn\'t support this';
+    };
+    /**
+     * The agent reported an error
+     */
+    502: {
+        success: false;
+        code: 502;
+        message: 'The agent reported an error';
+    };
+    /**
+     * The agent is offline
+     */
+    503: {
+        success: false;
+        code: 503;
+        message: 'The agent is offline';
+    };
+    /**
+     * The agent didn't answer in time
+     */
+    504: {
+        success: false;
+        code: 504;
+        message: 'The agent didn\'t answer in time';
+    };
+};
+
+export type PostAgentsByAgentIdFactoryResetError = PostAgentsByAgentIdFactoryResetErrors[keyof PostAgentsByAgentIdFactoryResetErrors];
+
+export type PostAgentsByAgentIdFactoryResetResponses = {
+    /**
+     * The agent was reset
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'The agent was reset';
+        data: {
+            id: number;
+            name: string;
+            description: string;
+            kind: 'esp32' | 'linux';
+            state: 'online' | 'offline' | 'unenrolled';
+            version: string | null;
+            capabilities: Array<string>;
+            info: {
+                [key: string]: unknown;
+            } | null;
+            last_seen_at: number | null;
+            enrolled_at: number | null;
+            created_at: number;
+            update: {
+                version: string;
+                from_version: string | null;
+                state: 'queued' | 'starting' | 'downloading' | 'restarting' | 'done' | 'failed';
+                percent: number;
+                error: string | null;
+                started_at: number;
+                updated_at: number;
+            } | null;
+            update_available: string | null;
+        };
+    };
+};
+
+export type PostAgentsByAgentIdFactoryResetResponse = PostAgentsByAgentIdFactoryResetResponses[keyof PostAgentsByAgentIdFactoryResetResponses];
+
 export type GetDevicesData = {
     body?: never;
     path?: never;
diff --git a/app/api-client/zod.gen.ts b/app/api-client/zod.gen.ts
index 9f7e6e5..a2b2c38 100644
--- a/app/api-client/zod.gen.ts
+++ b/app/api-client/zod.gen.ts
@@ -488,7 +488,8 @@ export const zPostAdminFirmwareSyncResponse = z.object({
 
 export const zPostAgentsEnrollBody = z.object({
     enrollment_token: z.string().min(1).max(256),
-    secret: z.string().min(32).max(128)
+    secret: z.string().min(32).max(128),
+    kind: z.enum(['esp32', 'linux']).optional()
 });
 
 /**
@@ -527,7 +528,24 @@ export const zGetAgentsResponse = z.object({
         info: z.record(z.string(), z.unknown()).nullable(),
         last_seen_at: z.number().nullable(),
         enrolled_at: z.number().nullable(),
-        created_at: z.number()
+        created_at: z.number(),
+        update: z.object({
+            version: z.string(),
+            from_version: z.string().nullable(),
+            state: z.enum([
+                'queued',
+                'starting',
+                'downloading',
+                'restarting',
+                'done',
+                'failed'
+            ]),
+            percent: z.number(),
+            error: z.string().nullable(),
+            started_at: z.number(),
+            updated_at: z.number()
+        }).nullable(),
+        update_available: z.string().nullable()
     }))
 });
 
@@ -559,7 +577,46 @@ export const zPostAgentsResponse = z.object({
         info: z.record(z.string(), z.unknown()).nullable(),
         last_seen_at: z.number().nullable(),
         enrolled_at: z.number().nullable(),
-        created_at: z.number()
+        created_at: z.number(),
+        update: z.object({
+            version: z.string(),
+            from_version: z.string().nullable(),
+            state: z.enum([
+                'queued',
+                'starting',
+                'downloading',
+                'restarting',
+                'done',
+                'failed'
+            ]),
+            percent: z.number(),
+            error: z.string().nullable(),
+            started_at: z.number(),
+            updated_at: z.number()
+        }).nullable(),
+        update_available: z.string().nullable()
+    })
+});
+
+export const zPostAgentsBulkUpdateBody = z.object({
+    agent_ids: z.array(z.int().gt(0).lte(9007199254740991)).min(1).max(200),
+    version: z.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/).optional()
+});
+
+/**
+ * Updates queued
+ */
+export const zPostAgentsBulkUpdateResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(202),
+    message: z.literal('Updates queued'),
+    data: z.object({
+        version: z.string(),
+        queued: z.array(z.number()),
+        skipped: z.array(z.object({
+            agent_id: z.number(),
+            reason: z.string()
+        }))
     })
 });
 
@@ -603,7 +660,24 @@ export const zGetAgentsByAgentIdResponse = z.object({
         info: z.record(z.string(), z.unknown()).nullable(),
         last_seen_at: z.number().nullable(),
         enrolled_at: z.number().nullable(),
-        created_at: z.number()
+        created_at: z.number(),
+        update: z.object({
+            version: z.string(),
+            from_version: z.string().nullable(),
+            state: z.enum([
+                'queued',
+                'starting',
+                'downloading',
+                'restarting',
+                'done',
+                'failed'
+            ]),
+            percent: z.number(),
+            error: z.string().nullable(),
+            started_at: z.number(),
+            updated_at: z.number()
+        }).nullable(),
+        update_available: z.string().nullable()
     })
 });
 
@@ -638,7 +712,24 @@ export const zPutAgentsByAgentIdResponse = z.object({
         info: z.record(z.string(), z.unknown()).nullable(),
         last_seen_at: z.number().nullable(),
         enrolled_at: z.number().nullable(),
-        created_at: z.number()
+        created_at: z.number(),
+        update: z.object({
+            version: z.string(),
+            from_version: z.string().nullable(),
+            state: z.enum([
+                'queued',
+                'starting',
+                'downloading',
+                'restarting',
+                'done',
+                'failed'
+            ]),
+            percent: z.number(),
+            error: z.string().nullable(),
+            started_at: z.number(),
+            updated_at: z.number()
+        }).nullable(),
+        update_available: z.string().nullable()
     })
 });
 
@@ -685,7 +776,24 @@ export const zPostAgentsByAgentIdRevokeResponse = z.object({
         info: z.record(z.string(), z.unknown()).nullable(),
         last_seen_at: z.number().nullable(),
         enrolled_at: z.number().nullable(),
-        created_at: z.number()
+        created_at: z.number(),
+        update: z.object({
+            version: z.string(),
+            from_version: z.string().nullable(),
+            state: z.enum([
+                'queued',
+                'starting',
+                'downloading',
+                'restarting',
+                'done',
+                'failed'
+            ]),
+            percent: z.number(),
+            error: z.string().nullable(),
+            started_at: z.number(),
+            updated_at: z.number()
+        }).nullable(),
+        update_available: z.string().nullable()
     })
 });
 
@@ -713,6 +821,177 @@ export const zPostAgentsByAgentIdFlashImageResponse = z.object({
     })
 });
 
+export const zPostAgentsByAgentIdUpdateBody = z.object({
+    version: z.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/).optional()
+});
+
+export const zPostAgentsByAgentIdUpdatePath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Update started
+ */
+export const zPostAgentsByAgentIdUpdateResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(202),
+    message: z.literal('Update started'),
+    data: z.object({
+        version: z.string(),
+        from_version: z.string().nullable(),
+        state: z.enum([
+            'queued',
+            'starting',
+            'downloading',
+            'restarting',
+            'done',
+            'failed'
+        ]),
+        percent: z.number(),
+        error: z.string().nullable(),
+        started_at: z.number(),
+        updated_at: z.number()
+    })
+});
+
+export const zGetAgentsByAgentIdLogsPath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Log retrieved
+ */
+export const zGetAgentsByAgentIdLogsResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Log retrieved'),
+    data: z.object({
+        lines: z.array(z.string()),
+        level: z.enum([
+            'error',
+            'warn',
+            'info',
+            'debug'
+        ]).nullable()
+    })
+});
+
+export const zGetAgentsByAgentIdInfoPath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Info retrieved
+ */
+export const zGetAgentsByAgentIdInfoResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Info retrieved'),
+    data: z.object({
+        version: z.string().nullable(),
+        info: z.record(z.string(), z.unknown())
+    })
+});
+
+export const zPutAgentsByAgentIdDeviceConfigBody = z.object({
+    server_url: z.url().max(200).optional(),
+    name: z.string().regex(/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/).optional(),
+    log_level: z.enum([
+        'error',
+        'warn',
+        'info',
+        'debug'
+    ]).optional(),
+    ip: z.union([
+        z.object({
+            mode: z.literal('dhcp')
+        }),
+        z.object({
+            mode: z.literal('static'),
+            address: z.ipv4().regex(/^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/),
+            gateway: z.ipv4().regex(/^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/),
+            netmask: z.ipv4().regex(/^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/),
+            dns1: z.ipv4().regex(/^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/).optional(),
+            dns2: z.ipv4().regex(/^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/).optional()
+        })
+    ]).optional()
+});
+
+export const zPutAgentsByAgentIdDeviceConfigPath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Settings sent to the agent
+ */
+export const zPutAgentsByAgentIdDeviceConfigResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Settings sent to the agent'),
+    data: z.null()
+});
+
+export const zPostAgentsByAgentIdRebootPath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * The agent restarts
+ */
+export const zPostAgentsByAgentIdRebootResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('The agent restarts'),
+    data: z.null()
+});
+
+export const zPostAgentsByAgentIdFactoryResetPath = z.object({
+    agentID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * The agent was reset
+ */
+export const zPostAgentsByAgentIdFactoryResetResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('The agent was reset'),
+    data: z.object({
+        id: z.number(),
+        name: z.string(),
+        description: z.string(),
+        kind: z.enum(['esp32', 'linux']),
+        state: z.enum([
+            'online',
+            'offline',
+            'unenrolled'
+        ]),
+        version: z.string().nullable(),
+        capabilities: z.array(z.string()),
+        info: z.record(z.string(), z.unknown()).nullable(),
+        last_seen_at: z.number().nullable(),
+        enrolled_at: z.number().nullable(),
+        created_at: z.number(),
+        update: z.object({
+            version: z.string(),
+            from_version: z.string().nullable(),
+            state: z.enum([
+                'queued',
+                'starting',
+                'downloading',
+                'restarting',
+                'done',
+                'failed'
+            ]),
+            percent: z.number(),
+            error: z.string().nullable(),
+            started_at: z.number(),
+            updated_at: z.number()
+        }).nullable(),
+        update_available: z.string().nullable()
+    })
+});
+
 /**
  * Devices retrieved
  */
diff --git a/app/components/agents/FirmwareCard.vue b/app/components/agents/FirmwareCard.vue
new file mode 100644
index 0000000..4eb2bcc
--- /dev/null
+++ b/app/components/agents/FirmwareCard.vue
@@ -0,0 +1,173 @@
+<script setup lang="ts">
+/**
+ * Firmware of an ESP32 agent: current version, available update, OTA progress.
+ */
+import type { Agent } from "~/utils/types";
+
+const props = defineProps<{ agent: Agent }>();
+const emit = defineEmits<{ refresh: [] }>();
+
+const toast = useToast();
+
+const catalog = await useAPILazyAsyncData("firmware-catalog-ota", async () => {
+	const res = await useAPI((api) => api.getFirmware({}));
+	return res.success ? res.data : null;
+});
+
+const canUpdate = computed(() => props.agent.capabilities.includes("ota"));
+const online = computed(() => props.agent.state === "online");
+const update = computed(() => props.agent.update);
+const running = computed(
+	() => !!update.value && update.value.state !== "done" && update.value.state !== "failed",
+);
+const probation = computed(() => props.agent.info?.ota_probation === true);
+const failedVersion = computed(() => props.agent.info?.ota_failed_version as string | undefined);
+
+const UPDATE_STATES: Record<NonNullable<Agent["update"]>["state"], string> = {
+	queued: "Waiting for other agents to finish",
+	starting: "Starting",
+	downloading: "Downloading and installing",
+	restarting: "Restarting into the new firmware",
+	done: "Updated",
+	failed: "Failed",
+};
+
+const otherVersion = ref<string | undefined>();
+const versionItems = computed(() =>
+	(catalog.data.value?.releases ?? [])
+		.filter((release) => release.version !== props.agent.version)
+		.map((release) => ({
+			value: release.version,
+			label: release.prerelease ? `${release.version} (pre-release)` : release.version,
+		})),
+);
+
+const starting = ref(false);
+
+async function startUpdate(version?: string) {
+	starting.value = true;
+	const res = await useAPI((api) =>
+		api.postAgentsByAgentIdUpdate({ path: { agentID: props.agent.id }, body: { version } }),
+	);
+	starting.value = false;
+	if (!res.success) {
+		toast.add({ title: "Couldn't start the update", description: res.message, color: "error" });
+		return;
+	}
+	toast.add({
+		title: `Updating to ${res.data.version}`,
+		description: "The agent restarts when the new firmware is installed.",
+		icon: "i-lucide-download",
+	});
+	emit("refresh");
+}
+
+// Follow a running update closely.
+let timer: ReturnType<typeof setInterval> | null = null;
+watch(
+	running,
+	(isRunning) => {
+		if (isRunning && !timer && import.meta.client) timer = setInterval(() => emit("refresh"), 2000);
+		if (!isRunning && timer) {
+			clearInterval(timer);
+			timer = null;
+		}
+	},
+	{ immediate: true },
+);
+onBeforeUnmount(() => {
+	if (timer) clearInterval(timer);
+});
+</script>
+
+<template>
+	<DashboardSectionCard title="Firmware" description="Over-the-air updates from this server" icon="i-lucide-cpu">
+		<div class="space-y-4">
+			<div class="flex flex-wrap items-center gap-3">
+				<span class="font-mono text-lg text-white">{{ agent.version ?? "unknown" }}</span>
+				<UBadge v-if="agent.update_available && !running" color="primary" variant="soft">
+					{{ agent.update_available }} available
+				</UBadge>
+				<UBadge v-else-if="agent.version && !running && canUpdate" color="success" variant="soft">Up to date</UBadge>
+				<UBadge v-if="probation" color="warning" variant="soft">On probation</UBadge>
+			</div>
+
+			<UAlert
+				v-if="failedVersion"
+				color="warning"
+				variant="subtle"
+				icon="i-lucide-undo-2"
+				:title="`The update to ${failedVersion} was rolled back`"
+				description="The new firmware didn't reach the server after restarting, so the agent went back to its previous firmware."
+			/>
+
+			<UAlert
+				v-if="!canUpdate"
+				color="neutral"
+				variant="subtle"
+				icon="i-lucide-usb"
+				title="This firmware can't be updated over the network"
+				:description="agent.state === 'unenrolled' ? 'Set the agent up first.' : 'Install a newer firmware once with the web installer (Install tab).'"
+			/>
+
+			<!-- Running update -->
+			<div v-if="update && running" class="space-y-2">
+				<div class="flex items-center justify-between text-sm">
+					<span class="text-slate-300">{{ UPDATE_STATES[update.state] }} · {{ update.version }}</span>
+					<span v-if="update.state === 'downloading'" class="font-mono text-slate-400">{{ update.percent }}%</span>
+				</div>
+				<UProgress :model-value="update.state === 'downloading' ? update.percent : null" :max="100" />
+			</div>
+
+			<UAlert
+				v-else-if="update?.state === 'failed'"
+				color="error"
+				variant="subtle"
+				icon="i-lucide-circle-x"
+				:title="`Update to ${update.version} failed`"
+				:description="update.error ?? undefined"
+			/>
+			<UAlert
+				v-else-if="update?.state === 'done' && update.version === agent.version"
+				color="success"
+				variant="subtle"
+				icon="i-lucide-circle-check"
+				:title="`Updated from ${update.from_version ?? 'the previous version'} to ${update.version}`"
+			/>
+
+			<!-- Start an update -->
+			<div v-if="canUpdate && !running" class="flex flex-col gap-3 sm:flex-row sm:items-center">
+				<UButton
+					v-if="agent.update_available"
+					:label="`Update to ${agent.update_available}`"
+					icon="i-lucide-download"
+					:loading="starting"
+					:disabled="!online"
+					@click="startUpdate(agent.update_available)"
+				/>
+				<div v-if="versionItems.length > 0" class="flex items-center gap-2">
+					<USelect
+						v-model="otherVersion"
+						:items="versionItems"
+						placeholder="Other version"
+						class="w-48"
+						aria-label="Firmware version"
+					/>
+					<UButton
+						label="Install"
+						color="neutral"
+						variant="outline"
+						:disabled="!otherVersion || !online"
+						:loading="starting"
+						@click="startUpdate(otherVersion)"
+					/>
+				</div>
+			</div>
+			<p v-if="canUpdate && !online && !running" class="text-xs text-slate-500">The agent has to be online to update.</p>
+			<p v-if="canUpdate" class="text-xs text-slate-500">
+				The agent checks the download ({{ agent.info?.signed_updates ? "signature and SHA-256" : "SHA-256" }}), restarts, and
+				goes back to its previous firmware if the new one doesn't reach the server within 5 minutes.
+			</p>
+		</div>
+	</DashboardSectionCard>
+</template>
diff --git a/app/pages/dashboard/agents/[agent_id].vue b/app/pages/dashboard/agents/[agent_id].vue
index 20a9e73..bbebd11 100644
--- a/app/pages/dashboard/agents/[agent_id].vue
+++ b/app/pages/dashboard/agents/[agent_id].vue
@@ -72,6 +72,20 @@ function getRoutesConfig(): UseSubrouterPathDynamics.RoutesConfig {
 		},
 	};
 
+	if (!isNew && agent?.value?.kind === "esp32" && agent.value.capabilities.includes("logs")) {
+		routes[`${base}/console`] = {
+			isNavLink: true,
+			label: "Console",
+			icon: "i-lucide-terminal",
+			getDynamicValues() {
+				return {
+					seoSettings: { title: `Console · ${name}`, description: `Log and control of ${name}` },
+					breadcrumbItems: [{ label: name, to: base }, { label: "Console" }],
+				};
+			},
+		};
+	}
+
 	if (!isNew && agent?.value?.kind === "esp32") {
 		routes[`${base}/install`] = {
 			isNavLink: true,
diff --git a/app/pages/dashboard/agents/[agent_id]/console.vue b/app/pages/dashboard/agents/[agent_id]/console.vue
new file mode 100644
index 0000000..5cfd480
--- /dev/null
+++ b/app/pages/dashboard/agents/[agent_id]/console.vue
@@ -0,0 +1,341 @@
+<script setup lang="ts">
+/**
+ * Live log and remote control of an ESP32 agent: log level, restart, settings stored on the
+ * device (server address, host name, IP), factory reset. The log streams over `/ws/console`.
+ */
+import type { PutAgentsByAgentIdDeviceConfigData } from "~/api-client";
+import type { Agent, NewAgent } from "~/utils/types";
+
+type DeviceConfig = NonNullable<PutAgentsByAgentIdDeviceConfigData["body"]>;
+
+const injected = useSubrouterInjectedData<Agent, NewAgent>("agent", true).inject();
+if (injected.isNew) await navigateTo("/dashboard/agents/new");
+const agent = computed(() => injected.data.value as Agent);
+
+const toast = useToast();
+const { appUrl } = useRuntimeAppConfigs();
+
+const has = (capability: string) => agent.value.capabilities.includes(capability);
+
+// --- Live log ------------------------------------------------------------------------------------
+
+const MAX_LINES = 2000;
+const lines = ref<string[]>([]);
+const connection = ref<"connecting" | "online" | "offline" | "closed">("connecting");
+const consoleError = ref<string | null>(null);
+const level = ref<"error" | "warn" | "info" | "debug">("info");
+const follow = ref(true);
+const logBox = useTemplateRef<HTMLElement>("logBox");
+
+let socket: WebSocket | null = null;
+let reconnectTimer: ReturnType<typeof setTimeout> | null = null;
+let closedByPage = false;
+
+function append(newLines: string[], reset: boolean) {
+	lines.value = (reset ? newLines : [...lines.value, ...newLines]).slice(-MAX_LINES);
+	if (follow.value) {
+		nextTick(() => {
+			if (logBox.value) logBox.value.scrollTop = logBox.value.scrollHeight;
+		});
+	}
+}
+
+function connect() {
+	const token = useAppCookies().sessionToken.get().value;
+	if (!token) return;
+
+	connection.value = "connecting";
+	consoleError.value = null;
+	socket = new WebSocket(`${appUrl.replace(/^http/, "ws").replace(/\/$/, "")}/ws/console`);
+
+	socket.onopen = () => {
+		socket?.send(JSON.stringify({ type: "auth", token, agent_id: agent.value.id }));
+	};
+	socket.onmessage = (event) => {
+		const message = JSON.parse(event.data);
+		switch (message.type) {
+			case "ready":
+			case "state":
+				connection.value = message.online ? "online" : "offline";
+				if (message.type === "state")
+					append([message.online ? "— agent connected —" : "— agent disconnected —"], false);
+				break;
+			case "lines":
+				if (message.level) level.value = message.level;
+				append(
+					[...(message.dropped ? [`… ${message.dropped} lines skipped …`] : []), ...message.lines],
+					message.reset,
+				);
+				break;
+			case "error":
+				consoleError.value = message.message;
+				break;
+		}
+	};
+	socket.onclose = () => {
+		connection.value = "closed";
+		socket = null;
+		// Reconnect after network hiccups (the server checks the session again).
+		if (!closedByPage && !consoleError.value) reconnectTimer = setTimeout(connect, 5000);
+	};
+}
+
+onMounted(connect);
+onBeforeUnmount(() => {
+	closedByPage = true;
+	if (reconnectTimer) clearTimeout(reconnectTimer);
+	socket?.close();
+});
+
+async function copyLog() {
+	try {
+		await navigator.clipboard.writeText(lines.value.join("\n"));
+		toast.add({ title: "Log copied", icon: "i-lucide-clipboard-check", color: "success" });
+	} catch {
+		toast.add({ title: "Copy failed", color: "warning" });
+	}
+}
+
+// --- Settings on the device ----------------------------------------------------------------------
+
+const levelItems = [
+	{ value: "error", label: "Errors" },
+	{ value: "warn", label: "Warnings" },
+	{ value: "info", label: "Info" },
+	{ value: "debug", label: "Debug" },
+];
+
+async function sendConfig(body: DeviceConfig, success: string) {
+	const res = await useAPI((api) =>
+		api.putAgentsByAgentIdDeviceConfig({ path: { agentID: agent.value.id }, body }),
+	);
+	if (!res.success) {
+		toast.add({
+			title: "The agent didn't accept the change",
+			description: res.message,
+			color: "error",
+		});
+		return false;
+	}
+	toast.add({ title: success, color: "success", icon: "i-lucide-check" });
+	return true;
+}
+
+async function setLevel(value: "error" | "warn" | "info" | "debug") {
+	if (await sendConfig({ log_level: value }, `Log level: ${value}`)) level.value = value;
+}
+
+const settingsForm = reactive({
+	server_url: "",
+	name: (agent.value.info?.name as string | undefined) ?? "",
+	ipMode: (agent.value.info?.ip_mode as "dhcp" | "static" | undefined) ?? "dhcp",
+	address: "",
+	gateway: "",
+	netmask: "255.255.255.0",
+	dns1: "",
+});
+const savingSettings = ref(false);
+
+async function saveSettings() {
+	const body: DeviceConfig = {};
+	if (settingsForm.server_url.trim()) body.server_url = settingsForm.server_url.trim();
+	if (settingsForm.name.trim() && settingsForm.name.trim() !== agent.value.info?.name)
+		body.name = settingsForm.name.trim();
+	if (settingsForm.ipMode === "dhcp" && agent.value.info?.ip_mode === "static")
+		body.ip = { mode: "dhcp" };
+	if (settingsForm.ipMode === "static") {
+		body.ip = {
+			mode: "static",
+			address: settingsForm.address.trim(),
+			gateway: settingsForm.gateway.trim(),
+			netmask: settingsForm.netmask.trim(),
+			...(settingsForm.dns1.trim() ? { dns1: settingsForm.dns1.trim() } : {}),
+		};
+	}
+	if (Object.keys(body).length === 0) {
+		toast.add({ title: "Nothing changed", color: "neutral" });
+		return;
+	}
+
+	savingSettings.value = true;
+	const ok = await sendConfig(
+		body,
+		body.server_url || body.ip
+			? "The agent is trying the new settings"
+			: "Settings saved on the agent",
+	);
+	savingSettings.value = false;
+	if (ok) settingsForm.server_url = "";
+}
+
+// --- Restart and reset ---------------------------------------------------------------------------
+
+const restarting = ref(false);
+const resetOpen = ref(false);
+
+async function restart() {
+	restarting.value = true;
+	const res = await useAPI((api) =>
+		api.postAgentsByAgentIdReboot({ path: { agentID: agent.value.id } }),
+	);
+	restarting.value = false;
+	if (!res.success) {
+		toast.add({ title: "Couldn't restart the agent", description: res.message, color: "error" });
+		return;
+	}
+	toast.add({ title: "The agent restarts", icon: "i-lucide-rotate-ccw" });
+}
+
+async function factoryReset() {
+	const res = await useAPI((api) =>
+		api.postAgentsByAgentIdFactoryReset({ path: { agentID: agent.value.id } }),
+	);
+	if (!res.success) {
+		toast.add({ title: "Couldn't reset the agent", description: res.message, color: "error" });
+		throw new Error(res.message);
+	}
+	toast.add({
+		title: "The agent was reset",
+		description: "Set it up again with the web installer.",
+	});
+	await injected.refresh?.();
+	await navigateTo(`/dashboard/agents/${agent.value.id}/install`);
+}
+
+const CONNECTION_STATES = {
+	connecting: { label: "Connecting", color: "neutral" },
+	online: { label: "Live", color: "success" },
+	offline: { label: "Agent offline", color: "warning" },
+	closed: { label: "Disconnected", color: "error" },
+} as const;
+</script>
+
+<template>
+	<div class="mx-auto w-full space-y-6 lg:w-4xl">
+		<DashboardSectionCard title="Log" description="Live output of the agent" icon="i-lucide-scroll-text" flush>
+			<template #actions>
+				<UBadge :color="CONNECTION_STATES[connection].color" variant="soft">{{ CONNECTION_STATES[connection].label }}</UBadge>
+			</template>
+
+			<div class="flex flex-wrap items-center gap-3 border-b border-slate-800 px-6 py-3">
+				<USelect
+					:model-value="level"
+					:items="levelItems"
+					:disabled="connection !== 'online' || !has('config')"
+					class="w-40"
+					aria-label="Log level"
+					@update:model-value="setLevel"
+				/>
+				<USwitch v-model="follow" label="Follow" />
+				<div class="flex-1" />
+				<UButton icon="i-lucide-copy" color="neutral" variant="ghost" size="sm" label="Copy" @click="copyLog" />
+				<UButton icon="i-lucide-eraser" color="neutral" variant="ghost" size="sm" label="Clear" @click="lines = []" />
+			</div>
+
+			<UAlert v-if="consoleError" color="error" variant="subtle" icon="i-lucide-circle-x" :title="consoleError" class="m-4" />
+			<div
+				ref="logBox"
+				class="h-[28rem] overflow-y-auto bg-slate-950 px-4 py-3 font-mono text-xs leading-relaxed text-slate-300"
+				role="log"
+				aria-live="polite"
+			>
+				<p v-if="lines.length === 0" class="text-slate-500">
+					{{ connection === "online" ? "No log lines yet." : "The log appears here when the agent is online." }}
+				</p>
+				<div v-for="(line, index) in lines" :key="index" class="whitespace-pre-wrap break-all" :class="{
+					'text-red-400': / E /.test(line.slice(0, 14)),
+					'text-amber-300': / W /.test(line.slice(0, 14)),
+					'text-slate-500': / D /.test(line.slice(0, 14)) || line.startsWith('—') || line.startsWith('…'),
+				}">{{ line }}</div>
+			</div>
+		</DashboardSectionCard>
+
+		<DashboardSectionCard
+			title="Settings on the agent"
+			description="Changes are sent to the agent; Wi-Fi is changed over USB (Install tab)"
+			icon="i-lucide-sliders-horizontal"
+		>
+			<form class="space-y-5" @submit.prevent="saveSettings">
+				<UFormField
+					label="Server address"
+					description="Leave empty to keep it. The agent keeps a new address only if it reaches this server with it within 2 minutes."
+				>
+					<UInput v-model="settingsForm.server_url" placeholder="https://netignite.example.com" class="w-full" />
+				</UFormField>
+				<UFormField label="Host name" description="Letters, digits and -. Used after the next restart.">
+					<UInput v-model="settingsForm.name" class="w-full sm:w-80" />
+				</UFormField>
+				<UFormField label="IP address" description="A static address is also only kept if the agent reaches the server with it.">
+					<URadioGroup
+						v-model="settingsForm.ipMode"
+						orientation="horizontal"
+						:items="[
+							{ value: 'dhcp', label: 'Automatic (DHCP)' },
+							{ value: 'static', label: 'Static' },
+						]"
+					/>
+				</UFormField>
+				<div v-if="settingsForm.ipMode === 'static'" class="grid gap-4 sm:grid-cols-2">
+					<UFormField label="Address" required><UInput v-model="settingsForm.address" placeholder="192.168.1.50" class="w-full" /></UFormField>
+					<UFormField label="Gateway" required><UInput v-model="settingsForm.gateway" placeholder="192.168.1.1" class="w-full" /></UFormField>
+					<UFormField label="Netmask" required><UInput v-model="settingsForm.netmask" class="w-full" /></UFormField>
+					<UFormField label="DNS server"><UInput v-model="settingsForm.dns1" placeholder="Gateway" class="w-full" /></UFormField>
+				</div>
+				<div class="flex justify-end">
+					<UButton
+						type="submit"
+						label="Send to agent"
+						icon="i-lucide-send"
+						:loading="savingSettings"
+						:disabled="agent.state !== 'online' || !has('config')"
+					/>
+				</div>
+			</form>
+		</DashboardSectionCard>
+
+		<DashboardSectionCard title="Device" description="Restart or reset the agent" icon="i-lucide-power" tone="danger">
+			<div class="space-y-6">
+				<div class="flex flex-col gap-4 md:flex-row md:items-center">
+					<div class="flex-1">
+						<h4 class="font-medium text-white">Restart</h4>
+						<p class="mt-1 text-sm text-slate-400">
+							The agent is back online after a few seconds; until then its devices can't be woken or checked.
+						</p>
+					</div>
+					<UButton
+						label="Restart"
+						color="neutral"
+						variant="outline"
+						icon="i-lucide-rotate-ccw"
+						:loading="restarting"
+						:disabled="agent.state !== 'online' || !has('device.reboot')"
+						@click="restart"
+					/>
+				</div>
+				<div class="flex flex-col gap-4 md:flex-row md:items-center">
+					<div class="flex-1">
+						<h4 class="font-medium text-white">Factory reset</h4>
+						<p class="mt-1 text-sm text-slate-400">
+							Erases Wi-Fi, server and credential on the agent. Set it up again with the web installer.
+						</p>
+					</div>
+					<UButton
+						label="Factory reset"
+						color="error"
+						variant="soft"
+						icon="i-lucide-eraser"
+						:disabled="agent.state !== 'online' || !has('device.reset')"
+						@click="resetOpen = true"
+					/>
+				</div>
+			</div>
+		</DashboardSectionCard>
+
+		<DashboardDeleteModal
+			v-model:open="resetOpen"
+			title="Factory Reset"
+			warning-text="The agent forgets its Wi-Fi and credential and goes offline until it is set up again over USB."
+			:on-delete="factoryReset"
+		/>
+	</div>
+</template>
diff --git a/app/pages/dashboard/agents/[agent_id]/index.vue b/app/pages/dashboard/agents/[agent_id]/index.vue
index 8f950b6..e951bd7 100644
--- a/app/pages/dashboard/agents/[agent_id]/index.vue
+++ b/app/pages/dashboard/agents/[agent_id]/index.vue
@@ -106,13 +106,18 @@ async function createEnrollment() {
 	enrollment.value = res.data;
 }
 
-// The command that sets the agent up: the Linux agent's CLI, or the ESP32 firmware's serial console.
+// The command that sets the agent up: the Linux install script, or the ESP32 firmware's serial console.
+const serverUrl = appUrl.replace(/\/$/, "");
 const setupCommand = computed(() => {
 	if (!enrollment.value || agent.isNew) return "";
 	return agent.data.value.kind === "linux"
-		? `sudo netignite-agent pair ${appUrl} ${enrollment.value.token}`
-		: `setup ${appUrl} ${enrollment.value.token}`;
+		? `curl -fsSL ${serverUrl}/install/linux.sh | sudo sh -s -- ${enrollment.value.token}`
+		: `setup ${serverUrl} ${enrollment.value.token}`;
 });
+// For a machine that already has the Linux agent installed.
+const pairCommand = computed(() =>
+	enrollment.value ? `sudo netignite-agent pair ${serverUrl} ${enrollment.value.token}` : "",
+);
 
 async function copy(text: string) {
 	try {
@@ -238,6 +243,12 @@ async function onDelete() {
 				</dl>
 			</DashboardSectionCard>
 
+			<AgentsFirmwareCard
+				v-if="agent.data.value.kind === 'esp32' && agent.data.value.state !== 'unenrolled'"
+				:agent="agent.data.value"
+				@refresh="agent.refresh()"
+			/>
+
 			<DashboardSectionCard
 				:title="agent.data.value.state === 'unenrolled' ? 'Set up' : 'Set up again'"
 				:description="agent.data.value.state === 'unenrolled' ? 'Connect this agent to NetIgnite' : 'Replaces the current credential'"
@@ -269,8 +280,9 @@ async function onDelete() {
 
 				<template v-else>
 					<p class="text-sm text-slate-300">
-						Install the NetIgnite Linux agent on the machine, then run the pairing command on it. The
-						command works once and expires after 15 minutes.
+						Run the command below on the Linux machine (systemd, x86-64 or 64-bit ARM). It downloads the
+						NetIgnite agent, checks it, pairs it with this server and installs it as a service. The command
+						works once and expires after 15 minutes.
 					</p>
 				</template>
 
@@ -302,6 +314,13 @@ async function onDelete() {
 							Valid until {{ formatDate(enrollment.expires_at) }}. The agent generates its own secret when it
 							uses this token; NetIgnite never shows it.
 						</p>
+						<details v-if="agent.data.value.kind === 'linux'" class="text-xs text-slate-400">
+							<summary class="cursor-pointer">Agent already installed?</summary>
+							<div class="mt-2 flex items-start gap-2 rounded-lg border border-slate-800 bg-slate-900/60 p-3">
+								<code class="flex-1 break-all font-mono text-slate-200">{{ pairCommand }}</code>
+								<UButton icon="i-lucide-copy" color="neutral" variant="ghost" size="xs" aria-label="Copy" @click="copy(pairCommand)" />
+							</div>
+						</details>
 					</template>
 				</div>
 			</DashboardSectionCard>
diff --git a/app/pages/dashboard/agents/index.vue b/app/pages/dashboard/agents/index.vue
index b0c4fda..329109a 100644
--- a/app/pages/dashboard/agents/index.vue
+++ b/app/pages/dashboard/agents/index.vue
@@ -32,6 +32,35 @@ const agents = await useAPIAsyncData<Agent[]>("agents", async () => {
 
 useInterval(() => agents.refresh(), 20_000);
 
+// Online agents with a newer recommended firmware; updated one after another.
+const updatable = computed(() =>
+	(agents.data.value ?? []).filter(
+		(agent) =>
+			agent.update_available &&
+			agent.state === "online" &&
+			!(agent.update && agent.update.state !== "done" && agent.update.state !== "failed"),
+	),
+);
+const updatingAll = ref(false);
+
+async function updateAll() {
+	updatingAll.value = true;
+	const res = await useAPI((api) =>
+		api.postAgentsBulkUpdate({ body: { agent_ids: updatable.value.map((agent) => agent.id) } }),
+	);
+	updatingAll.value = false;
+	if (!res.success) {
+		toast.add({ title: "Couldn't start the updates", description: res.message, color: "error" });
+		return;
+	}
+	toast.add({
+		title: `Updating ${res.data.queued.length} agent${res.data.queued.length === 1 ? "" : "s"} to ${res.data.version}`,
+		description: "One after another; each agent restarts once its update is installed.",
+		icon: "i-lucide-download",
+	});
+	await agents.refresh();
+}
+
 const stateOptions = Object.entries(AgentStates).map(([value, state]) => ({
 	label: state.label,
 	value,
@@ -64,6 +93,15 @@ const stateOptions = Object.entries(AgentStates).map(([value, state]) => ({
 					@refresh="agents.refresh()"
 				>
 					<template #header-right>
+						<UButton
+							v-if="updatable.length > 0"
+							:label="`Update ${updatable.length} agent${updatable.length === 1 ? '' : 's'}`"
+							icon="i-lucide-download"
+							color="neutral"
+							variant="outline"
+							:loading="updatingAll"
+							@click="updateAll"
+						/>
 						<UButton label="Add agent" icon="i-lucide-plus" to="/dashboard/agents/new" />
 					</template>
 
@@ -91,6 +129,18 @@ const stateOptions = Object.entries(AgentStates).map(([value, state]) => ({
 
 					<template #version-cell="{ row }">
 						<span class="font-mono text-sm text-slate-300">{{ row.original.version ?? "—" }}</span>
+						<UBadge
+							v-if="row.original.update && !['done', 'failed'].includes(row.original.update.state)"
+							color="info"
+							variant="soft"
+							size="sm"
+							class="ml-2"
+						>
+							updating{{ row.original.update.state === "downloading" ? ` ${row.original.update.percent}%` : "" }}
+						</UBadge>
+						<UBadge v-else-if="row.original.update_available" color="primary" variant="soft" size="sm" class="ml-2">
+							{{ row.original.update_available }} available
+						</UBadge>
 					</template>
 
 					<template #last_seen_at-cell="{ row }">
diff --git a/example.env b/example.env
index 25e65c7..c6b8849 100644
--- a/example.env
+++ b/example.env
@@ -23,6 +23,11 @@ NETIGNITE_FIRMWARE_DIR=./data/firmware
 # Optional: raises GitHub's API rate limit.
 # NETIGNITE_GITHUB_TOKEN=
 
+# Linux agent install script (/install/linux.sh): GitHub repository, and optionally a fixed release
+# tag (default: the newest release, pre-releases included).
+NETIGNITE_LINUX_AGENT_REPO=NetIgnite-project/Agent-Linux
+# NETIGNITE_LINUX_AGENT_VERSION=v1.0.0
+
 NETIGNITE_SMTP_HOST=mail.example.com
 NETIGNITE_SMTP_PORT=465
 NETIGNITE_SMTP_USERNAME=user
diff --git a/server/lib/agents/auth.ts b/server/lib/agents/auth.ts
index 3624994..d4eda5b 100644
--- a/server/lib/agents/auth.ts
+++ b/server/lib/agents/auth.ts
@@ -1,5 +1,6 @@
 import { and, eq, isNull } from "drizzle-orm";
 import { AuthUtils } from "../api/utils/authHandler";
+import type { AgentSettings } from "../api/utils/shared-models/netigniteData";
 import { DB } from "../db";
 import { AppConstants } from "../utils/constants";
 import { AgentCloseCodes, AgentRegistry } from "./registry";
@@ -54,8 +55,11 @@ export class AgentAuth {
 	/**
 	 * Redeems an enrollment token and stores the agent's new credential. Returns the agent and the
 	 * token id it must use from now on, or null if the token is unknown, used or expired.
+	 *
+	 * With `expectedKind` (sent by current agents), a token of another kind of agent is refused
+	 * with `{ wrongKind }` before it is used, so it keeps working for the right device.
 	 */
-	static async enroll(enrollmentToken: string, secret: string) {
+	static async enroll(enrollmentToken: string, secret: string, expectedKind?: AgentSettings.Kind) {
 		const parts = this.parseToken(enrollmentToken, this.ENROLLMENT_TOKEN_PREFIX);
 		if (!parts || !this.SECRET_PATTERN.test(secret)) return null;
 
@@ -74,6 +78,15 @@ export class AgentAuth {
 			return null;
 		}
 
+		if (expectedKind) {
+			const target = await DB.instance()
+				.select({ kind: DB.Tables.agents.kind })
+				.from(DB.Tables.agents)
+				.where(eq(DB.Tables.agents.id, enrollment.agent_id))
+				.get();
+			if (target && target.kind !== expectedKind) return { wrongKind: target.kind } as const;
+		}
+
 		const tokenID = AuthUtils.createRandomTokenID();
 		const hashedSecret = await AuthUtils.hashTokenBase(secret);
 
@@ -106,7 +119,7 @@ export class AgentAuth {
 		// A previously enrolled device with the old credential must not stay connected.
 		AgentRegistry.disconnect(agent.id, AgentCloseCodes.CREDENTIAL_REVOKED, "Agent was re-enrolled");
 
-		return { agent, token_id: tokenID };
+		return { agent, token_id: tokenID, wrongKind: null };
 	}
 
 	/** Resolves an agent credential (`netignite_agent_<token_id>:<secret>`) to its agent. */
diff --git a/server/lib/agents/console.ts b/server/lib/agents/console.ts
new file mode 100644
index 0000000..e971637
--- /dev/null
+++ b/server/lib/agents/console.ts
@@ -0,0 +1,225 @@
+import type { Hooks, Peer } from "crossws";
+import { and, eq } from "drizzle-orm";
+import { z } from "zod";
+import { AuthHandler } from "../api/utils/authHandler";
+import { DB } from "../db";
+import { ConfigHandler } from "../utils/config";
+import { Logger } from "../utils/logger";
+import { AgentRequestError } from "./connection";
+import { AgentGatewayRunner } from "./gateway";
+import { AgentProtocol } from "./protocol";
+import { AgentRegistry } from "./registry";
+
+/**
+ * `/ws/console`: streams an agent's log to the dashboard.
+ *
+ * Browsers can't set headers on a WebSocket, so the first message authenticates:
+ * `{ "type": "auth", "token": "<session or API key>", "agent_id": 7 }`. Only the agent's owner
+ * may watch it (agents are never shared). The token is checked again every minute.
+ *
+ * Server → browser:
+ * - `{ "type": "ready", "online": bool }` after authenticating
+ * - `{ "type": "lines", "lines": [...], "reset": bool, "dropped"?: n, "level"?: "info" }`;
+ *   `reset` replaces what the browser shows (the agent's stored lines after (re)connecting)
+ * - `{ "type": "state", "online": bool }` when the agent connects or disconnects
+ * - `{ "type": "error", "message": "..." }`, then the connection closes
+ *
+ * While at least one browser watches an online agent, the agent is subscribed (`LOG_SUBSCRIBE`).
+ */
+export class ConsoleRelay {
+	static readonly AUTH_TIMEOUT_MS = 10_000;
+	static readonly REVALIDATE_INTERVAL_MS = 60_000;
+
+	private static readonly viewers = new Map<string, ConsoleRelay.Viewer>();
+	private static initialized = false;
+	private static revalidateTimer: ReturnType<typeof setInterval> | null = null;
+
+	static readonly CloseCodes = {
+		UNAUTHORIZED: 4401,
+		NOT_FOUND: 4404,
+		POLICY: 1008,
+	} as const;
+
+	static init() {
+		if (this.initialized) return;
+		this.initialized = true;
+
+		AgentGatewayRunner.onEvent("LOG", (connection, payload) => {
+			const event = AgentProtocol.LogEvent.safeParse(payload);
+			if (!event.success) return;
+			this.broadcast(connection.agentID, {
+				type: "lines",
+				lines: event.data.lines,
+				reset: false,
+				...(event.data.dropped ? { dropped: event.data.dropped } : {}),
+			});
+		});
+		AgentGatewayRunner.onHello((connection) => {
+			if (this.viewersOf(connection.agentID).length === 0) return;
+			this.broadcast(connection.agentID, { type: "state", online: true });
+			void this.subscribe(connection.agentID);
+		});
+		AgentGatewayRunner.onDisconnect((connection) => {
+			this.broadcast(connection.agentID, { type: "state", online: false });
+		});
+
+		this.revalidateTimer = setInterval(() => void this.revalidate(), this.REVALIDATE_INTERVAL_MS);
+		this.revalidateTimer.unref?.();
+	}
+
+	static stop() {
+		if (this.revalidateTimer) clearInterval(this.revalidateTimer);
+		this.revalidateTimer = null;
+		for (const viewer of this.viewers.values()) viewer.peer.close(1001, "Server shutting down");
+		this.viewers.clear();
+	}
+
+	static hooks(): Partial<Hooks> {
+		return {
+			upgrade: (request) => {
+				// Only the dashboard itself may open a console (no cross-site WebSocket hijacking).
+				const origin = request.headers.get("origin");
+				const appURL = ConfigHandler.getConfig()?.APP_URL;
+				if (origin && appURL && origin !== new URL(appURL).origin) {
+					return new Response("Origin not allowed", { status: 403 });
+				}
+			},
+			open: (peer) => {
+				this.viewers.set(peer.id, { peer, token: null, userID: null, agentID: null });
+				setTimeout(() => {
+					const viewer = this.viewers.get(peer.id);
+					if (viewer && viewer.agentID === null)
+						this.reject(viewer, this.CloseCodes.UNAUTHORIZED, "Not authenticated");
+				}, this.AUTH_TIMEOUT_MS).unref?.();
+			},
+			message: (peer, message) => this.handleMessage(peer, message.text()),
+			close: (peer) => this.handleClose(peer),
+			error: (peer, error) => Logger.warn(`Console WebSocket error (peer ${peer.id}):`, error),
+		};
+	}
+
+	private static async handleMessage(peer: Peer, text: string) {
+		const viewer = this.viewers.get(peer.id);
+		if (!viewer) return;
+		if (viewer.agentID !== null) return; // nothing else is accepted after authenticating
+
+		let message: z.infer<typeof AuthMessage>;
+		try {
+			const parsed = AuthMessage.safeParse(JSON.parse(text));
+			if (!parsed.success)
+				return this.reject(viewer, this.CloseCodes.POLICY, "Expected an auth message");
+			message = parsed.data;
+		} catch {
+			return this.reject(viewer, this.CloseCodes.POLICY, "Expected an auth message");
+		}
+
+		const auth = await AuthHandler.getAuthContext(message.token);
+		if (!auth || !(await AuthHandler.isValidAuthContext(auth))) {
+			return this.reject(viewer, this.CloseCodes.UNAUTHORIZED, "Invalid or expired token");
+		}
+
+		const agent = await DB.instance()
+			.select({ id: DB.Tables.agents.id })
+			.from(DB.Tables.agents)
+			.where(
+				and(eq(DB.Tables.agents.id, message.agent_id), eq(DB.Tables.agents.owner_id, auth.user_id)),
+			)
+			.get();
+		if (!agent) return this.reject(viewer, this.CloseCodes.NOT_FOUND, "Agent not found");
+
+		viewer.token = message.token;
+		viewer.userID = auth.user_id;
+		viewer.agentID = agent.id;
+
+		const online = AgentRegistry.isOnline(agent.id);
+		this.send(viewer, { type: "ready", online });
+		if (online) await this.subscribe(agent.id, viewer);
+	}
+
+	private static handleClose(peer: Peer) {
+		const viewer = this.viewers.get(peer.id);
+		this.viewers.delete(peer.id);
+		if (viewer?.agentID == null || this.viewersOf(viewer.agentID).length > 0) return;
+
+		// The last viewer left: stop the agent's stream.
+		AgentRegistry.get(viewer.agentID)
+			?.request("LOG_SUBSCRIBE", { enabled: false })
+			.catch(() => {});
+	}
+
+	/**
+	 * Subscribes the agent and sends its stored lines to `only`, or to every viewer (after the
+	 * agent reconnected).
+	 */
+	private static async subscribe(agentID: number, only?: ConsoleRelay.Viewer) {
+		const connection = AgentRegistry.get(agentID);
+		if (!connection?.hasCapability("logs")) return;
+
+		try {
+			const result = await connection.request("LOG_SUBSCRIBE", { enabled: true }, 10_000);
+			const message = {
+				type: "lines",
+				lines: result.lines ?? [],
+				reset: true,
+				...(result.level ? { level: result.level } : {}),
+			};
+			if (only) this.send(only, message);
+			else this.broadcast(agentID, message);
+		} catch (error) {
+			if (!(error instanceof AgentRequestError))
+				Logger.warn(`Agent ${agentID}: log subscription failed`, error);
+		}
+	}
+
+	private static async revalidate() {
+		for (const viewer of this.viewers.values()) {
+			if (!viewer.token) continue;
+			const auth = await AuthHandler.getAuthContext(viewer.token);
+			if (!auth || auth.user_id !== viewer.userID || !(await AuthHandler.isValidAuthContext(auth))) {
+				this.reject(viewer, this.CloseCodes.UNAUTHORIZED, "Session expired");
+			}
+		}
+	}
+
+	private static viewersOf(agentID: number) {
+		return [...this.viewers.values()].filter((viewer) => viewer.agentID === agentID);
+	}
+
+	private static broadcast(agentID: number, message: Record<string, unknown>) {
+		for (const viewer of this.viewersOf(agentID)) this.send(viewer, message);
+	}
+
+	private static send(viewer: ConsoleRelay.Viewer, message: Record<string, unknown>) {
+		try {
+			viewer.peer.send(JSON.stringify(message));
+		} catch {
+			// Closing.
+		}
+	}
+
+	private static reject(viewer: ConsoleRelay.Viewer, code: number, message: string) {
+		this.send(viewer, { type: "error", message });
+		this.viewers.delete(viewer.peer.id);
+		try {
+			viewer.peer.close(code, message);
+		} catch {
+			// Already closed.
+		}
+	}
+}
+
+export namespace ConsoleRelay {
+	export interface Viewer {
+		peer: Peer;
+		/** Kept to check the session again while the console is open. */
+		token: string | null;
+		userID: number | null;
+		agentID: number | null;
+	}
+}
+
+const AuthMessage = z.object({
+	type: z.literal("auth"),
+	token: z.string().min(1).max(512),
+	agent_id: z.number().int().positive(),
+});
diff --git a/server/lib/agents/gateway.ts b/server/lib/agents/gateway.ts
index d591d57..b95de15 100644
--- a/server/lib/agents/gateway.ts
+++ b/server/lib/agents/gateway.ts
@@ -24,6 +24,7 @@ export class AgentGatewayRunner {
 	private static keepaliveTimer: ReturnType<typeof setInterval> | null = null;
 	private static readonly lastSeenWrites = new Map<number, number>();
 	private static readonly helloListeners = new Set<(connection: AgentConnection) => void>();
+	private static readonly disconnectListeners = new Set<(connection: AgentConnection) => void>();
 	private static readonly eventHandlers = new Map<
 		string,
 		(connection: AgentConnection, payload: Record<string, unknown>) => void | Promise<void>
@@ -59,6 +60,12 @@ export class AgentGatewayRunner {
 		return () => this.helloListeners.delete(listener);
 	}
 
+	/** Called when an agent's connection closes (not when it was replaced by a newer one). */
+	static onDisconnect(listener: (connection: AgentConnection) => void) {
+		this.disconnectListeners.add(listener);
+		return () => this.disconnectListeners.delete(listener);
+	}
+
 	/** Registers the handler for an agent event (`evt` frames other than HELLO). */
 	static onEvent(
 		cmd: string,
@@ -172,6 +179,13 @@ export class AgentGatewayRunner {
 		if (!connection) return;
 
 		Logger.info(`Agent ${connection.agentID} disconnected`);
+		for (const listener of this.disconnectListeners) {
+			try {
+				listener(connection);
+			} catch (error) {
+				Logger.error("Disconnect listener failed", error);
+			}
+		}
 		await this.writeLastSeen(connection.agentID, true);
 	}
 
diff --git a/server/lib/agents/linuxInstaller.ts b/server/lib/agents/linuxInstaller.ts
new file mode 100644
index 0000000..21f8676
--- /dev/null
+++ b/server/lib/agents/linuxInstaller.ts
@@ -0,0 +1,84 @@
+/**
+ * The Linux agent's install script, served at `/install/linux.sh`:
+ *
+ *   curl -fsSL https://<server>/install/linux.sh | sudo sh -s -- <enrollment-token>
+ *
+ * Downloads the agent binary for the machine's CPU from the Agent-Linux GitHub releases, checks
+ * it against the release's SHA256SUMS, pairs it with this server (if a token is given) and
+ * installs the systemd service.
+ */
+export class LinuxInstaller {
+	static script(options: { serverURL: string; repo: string; version: string | null }) {
+		const quote = (value: string) => `'${value.replaceAll("'", `'"'"'`)}'`;
+
+		return `#!/bin/sh
+# NetIgnite Linux agent installer, served by ${options.serverURL.replace(/[\r\n]/g, "")}
+#
+#   curl -fsSL ${options.serverURL.replace(/[\r\n]/g, "")}/install/linux.sh | sudo sh -s -- <enrollment-token>
+#
+# Downloads netignite-agent from https://github.com/${options.repo.replace(/[\r\n]/g, "")}/releases,
+# checks it against SHA256SUMS, pairs it with this server and installs the systemd service.
+# Without a token it only installs or updates the agent.
+set -eu
+
+SERVER=${quote(options.serverURL)}
+REPO=${quote(options.repo)}
+VERSION="\${NETIGNITE_AGENT_VERSION:-${options.version ?? ""}}"
+TOKEN="\${1:-}"
+
+fail() {
+	echo "netignite: $*" >&2
+	exit 1
+}
+
+[ "$(uname -s)" = "Linux" ] || fail "the agent runs on Linux only"
+[ "$(id -u)" -eq 0 ] || fail "run as root: curl -fsSL $SERVER/install/linux.sh | sudo sh -s -- <token>"
+command -v curl >/dev/null 2>&1 || fail "curl is required"
+command -v sha256sum >/dev/null 2>&1 || fail "sha256sum is required"
+command -v systemctl >/dev/null 2>&1 || fail "the agent needs systemd"
+
+case "$(uname -m)" in
+	x86_64 | amd64)
+		# The default build needs AVX2; older CPUs get the baseline build.
+		if grep -qw avx2 /proc/cpuinfo 2>/dev/null; then ARCH=x64; else ARCH=x64-baseline; fi
+		;;
+	aarch64 | arm64) ARCH=arm64 ;;
+	*) fail "unsupported CPU: $(uname -m) (supported: x86-64, 64-bit ARM)" ;;
+esac
+
+# NETIGNITE_AGENT_BASE_URL: a mirror with the release files (netignite-agent-linux-*, SHA256SUMS).
+BASE="\${NETIGNITE_AGENT_BASE_URL:-}"
+if [ -z "$BASE" ]; then
+	if [ -z "$VERSION" ]; then
+		# The newest release, pre-releases included (GitHub's "latest" skips them).
+		VERSION=$(curl -fsSL "https://api.github.com/repos/$REPO/releases?per_page=1" |
+			sed -n 's/.*"tag_name": *"\\([^"]*\\)".*/\\1/p' | head -n 1)
+		[ -n "$VERSION" ] || fail "couldn't find a release of $REPO"
+	fi
+	BASE="https://github.com/$REPO/releases/download/$VERSION"
+fi
+
+FILE="netignite-agent-linux-$ARCH"
+TMP=$(mktemp -d)
+trap 'rm -rf "$TMP"' EXIT
+
+echo "Downloading $FILE $VERSION..."
+curl -fsSL -o "$TMP/$FILE" "$BASE/$FILE" || fail "download of $BASE/$FILE failed"
+curl -fsSL -o "$TMP/SHA256SUMS" "$BASE/SHA256SUMS" || fail "download of $BASE/SHA256SUMS failed"
+(
+	cd "$TMP"
+	grep -E "[ *]$FILE\\$" SHA256SUMS | sed "s/[ *]*$FILE\\$/  $FILE/" >"$FILE.sha256"
+	[ -s "$FILE.sha256" ] || fail "SHA256SUMS has no entry for $FILE"
+	sha256sum -c "$FILE.sha256" >/dev/null
+) || fail "the download doesn't match SHA256SUMS"
+chmod 755 "$TMP/$FILE"
+
+if [ -n "$TOKEN" ]; then
+	"$TMP/$FILE" pair "$SERVER" "$TOKEN"
+fi
+"$TMP/$FILE" install
+
+echo "Done. The agent shows up as online on its page in the NetIgnite dashboard."
+`;
+	}
+}
diff --git a/server/lib/agents/protocol.ts b/server/lib/agents/protocol.ts
index 3e788bb..318b03e 100644
--- a/server/lib/agents/protocol.ts
+++ b/server/lib/agents/protocol.ts
@@ -32,9 +32,54 @@ export namespace AgentProtocol {
 		// The agent runs on the device itself (Linux agent): HOST_STATUS events, HOST_CONTROL
 		"host.status",
 		"host.control",
+		// ESP32: OTA_BEGIN + OTA_PROGRESS events
+		"ota",
+		// GET_LOGS, LOG_SUBSCRIBE + LOG events
+		"logs",
+		// GET_INFO, CONFIG_SET
+		"config",
+		// REBOOT, FACTORY_RESET
+		"device.reboot",
+		"device.reset",
 	] as const;
 	export type Capability = (typeof Capabilities)[number];
 
+	/** `LOG` event: new log lines while subscribed. */
+	export const LogEvent = z.object({
+		lines: z.array(z.string().max(1024)).max(500),
+		/** Lines the agent dropped because its buffer was full. */
+		dropped: z.number().int().nonnegative().optional(),
+	});
+	export type LogEvent = z.infer<typeof LogEvent>;
+
+	/** `OTA_PROGRESS` event during an update. */
+	export const OtaProgressEvent = z.object({
+		version: z.string().max(64),
+		state: z.enum(["downloading", "installed", "failed"]),
+		percent: z.number().int().min(0).max(100),
+		error: z.string().max(256).optional(),
+	});
+	export type OtaProgressEvent = z.infer<typeof OtaProgressEvent>;
+
+	export type LogLevel = "error" | "warn" | "info" | "debug";
+
+	/** CONFIG_SET: only the fields present change. Server URL and IP changes are tried first. */
+	export type ConfigSet = {
+		server_url?: string;
+		name?: string;
+		log_level?: LogLevel;
+		ip?:
+			| { mode: "dhcp" }
+			| {
+					mode: "static";
+					address: string;
+					gateway: string;
+					netmask: string;
+					dns1?: string;
+					dns2?: string;
+			  };
+	};
+
 	const U32 = z.number().int().min(0).max(0xffffffff);
 	const Payload = z.record(z.string(), z.unknown());
 
@@ -91,6 +136,32 @@ export namespace AgentProtocol {
 		};
 		/** Shut down or reboot the machine the agent runs on. */
 		HOST_CONTROL: { req: { action: "shutdown" | "reboot" }; res: Record<string, never> };
+		/**
+		 * Download `path` from this server (with the agent credential) and install it. The answer
+		 * only means the download started; OTA_PROGRESS events follow, then a HELLO with the new
+		 * version.
+		 */
+		OTA_BEGIN: {
+			req: { version: string; path: string; size: number; sha256: string; signature?: string };
+			res: Record<string, never>;
+		};
+		/** The stored log lines. */
+		GET_LOGS: { req: Record<string, never>; res: { lines?: string[]; level?: LogLevel } };
+		/** With `enabled`, the stored lines; LOG events with new lines follow until disabled. */
+		LOG_SUBSCRIBE: {
+			req: { enabled: boolean };
+			res: { lines?: string[]; level?: LogLevel };
+		};
+		/** Current diagnostics (the same as HELLO's `info`). */
+		GET_INFO: {
+			req: Record<string, never>;
+			res: { version?: string; info?: Record<string, unknown> };
+		};
+		CONFIG_SET: { req: ConfigSet; res: Record<string, never> };
+		/** Restart the agent. */
+		REBOOT: { req: Record<string, never>; res: Record<string, never> };
+		/** Erase Wi-Fi, server and credential, then restart. The agent has to be set up again. */
+		FACTORY_RESET: { req: Record<string, never>; res: Record<string, never> };
 	}
 	export type Command = keyof Commands;
 
@@ -106,6 +177,18 @@ export namespace AgentProtocol {
 				return "wake";
 			case "HOST_CONTROL":
 				return "host.control";
+			case "OTA_BEGIN":
+				return "ota";
+			case "GET_LOGS":
+			case "LOG_SUBSCRIBE":
+				return "logs";
+			case "GET_INFO":
+			case "CONFIG_SET":
+				return "config";
+			case "REBOOT":
+				return "device.reboot";
+			case "FACTORY_RESET":
+				return "device.reset";
 			case "STATUS": {
 				const { target } = payload as Commands["STATUS"]["req"];
 				if (target.type === "link_local") return "status.link_local";
diff --git a/server/lib/api/versions/v1/middleware/auth.ts b/server/lib/api/versions/v1/middleware/auth.ts
index 256ef8e..dc779fb 100644
--- a/server/lib/api/versions/v1/middleware/auth.ts
+++ b/server/lib/api/versions/v1/middleware/auth.ts
@@ -1,4 +1,5 @@
 import { createMiddleware } from "hono/factory";
+import { AgentAuth } from "../../../../agents/auth";
 import { APIResponse } from "../../../utils/api-res";
 import { AuthHandler } from "../../../utils/authHandler";
 
@@ -44,6 +45,15 @@ export const authMiddlewareV1 = createMiddleware(async (c, next) => {
 
 	const token = authHeader.substring("Bearer ".length);
 
+	// Agent credentials never authenticate a user; the few routes agents call check them themselves.
+	if (token.startsWith(AgentAuth.AGENT_TOKEN_PREFIX)) {
+		AuthHandler.AuthContext.set(c, {
+			type: "unauthenticated",
+		} satisfies AuthHandler.UnauthenticatedAuthContext);
+
+		return await next();
+	}
+
 	const authContext = await AuthHandler.getAuthContext(token);
 
 	if (!authContext || !(await AuthHandler.isValidAuthContext(authContext))) {
diff --git a/server/lib/api/versions/v1/routes/agents/index.ts b/server/lib/api/versions/v1/routes/agents/index.ts
index 4f80850..993d94e 100644
--- a/server/lib/api/versions/v1/routes/agents/index.ts
+++ b/server/lib/api/versions/v1/routes/agents/index.ts
@@ -4,9 +4,12 @@ import { Hono } from "hono";
 import { validator } from "hono-openapi";
 import z from "zod";
 import { AgentAuth } from "../../../../../agents/auth";
+import { AgentRequestError } from "../../../../../agents/connection";
+import type { AgentProtocol } from "../../../../../agents/protocol";
 import { AgentCloseCodes, AgentRegistry } from "../../../../../agents/registry";
 import { DB } from "../../../../../db";
 import { FirmwareCatalog } from "../../../../../firmware/catalog";
+import { OtaError, OtaService } from "../../../../../firmware/ota";
 import { ProvisioningImage } from "../../../../../firmware/provisioning";
 import { ConfigHandler } from "../../../../../utils/config";
 import { Logger } from "../../../../../utils/logger";
@@ -18,7 +21,15 @@ import { AgentsModel } from "./model";
 
 export const router = new Hono().basePath("/agents");
 
-export function toAgentResponse(agent: DB.Models.Agent): AgentsModel.Agent {
+/**
+ * `recommended`: the recommended firmware version, to fill `update_available` (list and detail
+ * responses pass it).
+ */
+export function toAgentResponse(
+	agent: DB.Models.Agent,
+	recommended: string | null = null,
+): AgentsModel.Agent {
+	const canUpdate = agent.kind === "esp32" && agent.capabilities.includes("ota");
 	return {
 		id: agent.id,
 		name: agent.name,
@@ -32,15 +43,61 @@ export function toAgentResponse(agent: DB.Models.Agent): AgentsModel.Agent {
 		last_seen_at: agent.last_seen_at,
 		enrolled_at: agent.enrolled_at,
 		created_at: agent.created_at,
+		update: OtaService.get(agent.id),
+		update_available:
+			canUpdate && recommended && FirmwareCatalog.isNewer(recommended, agent.version)
+				? recommended
+				: null,
 	};
 }
 
+/** Answers a failed agent request like the device actions do. */
+function agentRequestError(c: Context, error: unknown) {
+	if (!(error instanceof AgentRequestError)) throw error;
+	switch (error.reason) {
+		case "unsupported":
+			return APIResponse.conflict(c, "This agent doesn't support that");
+		case "rejected":
+			return APIResponse.badGateway(c, error.message);
+		case "offline":
+			return APIResponse.serviceUnavailable(c, "The agent is offline");
+		case "timeout":
+			return APIResponse.gatewayTimeout(c, "The agent didn't answer in time");
+	}
+}
+
+/** Sends a request to the agent's live connection. */
+function requestAgent<C extends AgentProtocol.Command>(
+	agentID: number,
+	cmd: C,
+	payload: AgentProtocol.Commands[C]["req"],
+	timeoutMs?: number,
+) {
+	const connection = AgentRegistry.get(agentID);
+	if (!connection) {
+		return Promise.reject(new AgentRequestError("offline", "The agent is offline"));
+	}
+	return connection.request(cmd, payload, timeoutMs);
+}
+
+const AGENT_REQUEST_ERRORS = [
+	APIResponseSpec.conflict("The agent doesn't support this"),
+	APIResponseSpec.badGateway("The agent reported an error"),
+	APIResponseSpec.serviceUnavailable("The agent is offline"),
+	APIResponseSpec.gatewayTimeout("The agent didn't answer in time"),
+] as const;
+
 // --- Enrollment (called by agents, no user authentication) --------------------------------------
 
 const ENROLL_WINDOW_MS = 5 * 60 * 1000;
 const ENROLL_MAX_ATTEMPTS = 20;
 const enrollAttempts = new Map<string, { count: number; resetAt: number }>();
 
+/** For tests, which enroll more agents than one client may. */
+export function resetEnrollRateLimit() {
+	enrollAttempts.clear();
+}
+
 function registerEnrollAttempt(c: Context) {
 	// @ts-ignore bun/hono provides a native request with connection info
 	const client = (c.req.raw as any)?.remoteAddr?.hostname ?? "unknown";
@@ -68,6 +125,7 @@ router.post(
 		responses: APIResponseSpec.describeWithWrongInputs(
 			APIResponseSpec.success("Agent enrolled", AgentsModel.Enroll.Response),
 			APIResponseSpec.unauthorized("Unauthorized: Unknown, used or expired enrollment token"),
+			APIResponseSpec.conflict("The token is for another kind of agent (it stays valid)"),
 			APIResponseSpec.tooManyRequests("Too many enrollment attempts"),
 		),
 	}),
@@ -79,7 +137,7 @@ router.post(
 			return APIResponse.tooManyRequests(c, "Too many enrollment attempts, try again later");
 		}
 
-		const { enrollment_token, secret } = c.req.valid("json");
+		const { enrollment_token, secret, kind } = c.req.valid("json");
 		if (!AgentAuth.SECRET_PATTERN.test(secret)) {
 			return APIResponse.badRequest(
 				c,
@@ -87,10 +145,17 @@ router.post(
 			);
 		}
 
-		const result = await AgentAuth.enroll(enrollment_token, secret);
+		const result = await AgentAuth.enroll(enrollment_token, secret, kind);
 		if (!result) {
 			return APIResponse.unauthorized(c, "Unknown, used or expired enrollment token");
 		}
+		if (result.wrongKind) {
+			return APIResponse.conflict(
+				c,
+				`This enrollment token is for ${result.wrongKind === "esp32" ? "an ESP32" : "a Linux"} agent. ` +
+					"Create the token on the page of this agent.",
+			);
+		}
 
 		Logger.info(`Agent ${result.agent.id} enrolled`);
 		return APIResponse.success(c, "Agent enrolled", {
@@ -127,7 +192,12 @@ router.get(
 			.where(eq(DB.Tables.agents.owner_id, getUserID(c)))
 			.orderBy(DB.Tables.agents.name);
 
-		return APIResponse.success(c, "Agents retrieved", agents.map(toAgentResponse));
+		const recommended = (await FirmwareCatalog.recommendedRelease())?.version ?? null;
+		return APIResponse.success(
+			c,
+			"Agents retrieved",
+			agents.map((agent) => toAgentResponse(agent, recommended)),
+		);
 	},
 );
 
@@ -158,6 +228,69 @@ router.post(
 	},
 );
 
+router.post(
+	"/bulk-update",
+
+	APIRouteSpec.authenticated({
+		summary: "Update the firmware of several agents",
+		description:
+			"Updates the caller's ESP32 agents one after another (each update has to finish first) to the " +
+			"given or the recommended release. Offline agents and agents that already run it are skipped. " +
+			"Follow the progress in each agent's `update`.",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.accepted("Updates queued", AgentsModel.BulkUpdate.Response),
+			APIResponseSpec.notFound("Firmware release not found"),
+		),
+	}),
+
+	validator("json", AgentsModel.BulkUpdate.Body),
+
+	async (c) => {
+		const body = c.req.valid("json");
+		const release = body.version
+			? await FirmwareCatalog.get(body.version)
+			: await FirmwareCatalog.recommendedRelease();
+		if (!release) return APIResponse.notFound(c, "Firmware release not found");
+
+		const agents = await DB.instance()
+			.select()
+			.from(DB.Tables.agents)
+			.where(eq(DB.Tables.agents.owner_id, getUserID(c)));
+		const byID = new Map(agents.map((agent) => [agent.id, agent]));
+
+		const queued: DB.Models.Agent[] = [];
+		const skipped: AgentsModel.BulkUpdate.Response["skipped"] = [];
+		for (const id of new Set(body.agent_ids)) {
+			const agent = byID.get(id);
+			const connection = agent ? AgentRegistry.get(agent.id) : null;
+			const current = agent ? OtaService.get(agent.id) : null;
+			const reason = !agent
+				? "Agent not found"
+				: agent.kind !== "esp32"
+					? "Not an ESP32 agent"
+					: !connection
+						? "Offline"
+						: !connection.hasCapability("ota")
+							? "Its firmware can't be updated over the network"
+							: connection.hello?.version === release.version
+								? "Already up to date"
+								: current && OtaService.isRunning(current)
+									? "An update is already running"
+									: null;
+			if (reason || !agent) skipped.push({ agent_id: id, reason: reason ?? "Agent not found" });
+			else queued.push(agent);
+		}
+
+		OtaService.startMany(queued, release);
+		return APIResponse.accepted(c, "Updates queued", {
+			version: release.version,
+			queued: queued.map((agent) => agent.id),
+			skipped,
+		} satisfies AgentsModel.BulkUpdate.Response);
+	},
+);
+
 const AgentParam = z.object({ agentID: z.coerce.number().int().positive() });
 
 /** Resolves `:agentID` to an agent of the caller, or answers 404. */
@@ -195,7 +328,10 @@ router.get(
 		),
 	}),
 
-	async (c) => APIResponse.success(c, "Agent retrieved", toAgentResponse(getAgent(c))),
+	async (c) => {
+		const recommended = (await FirmwareCatalog.recommendedRelease())?.version ?? null;
+		return APIResponse.success(c, "Agent retrieved", toAgentResponse(getAgent(c), recommended));
+	},
 );
 
 router.put(
@@ -352,3 +488,203 @@ router.post(
 		} satisfies AgentsModel.FlashImage.Response);
 	},
 );
+
+// --- Firmware updates, console and device control (ESP32) ----------------------------------------
+
+router.post(
+	"/:agentID/update",
+
+	APIRouteSpec.authenticated({
+		summary: "Update an agent's firmware",
+		description:
+			"Starts an OTA update to the given or the recommended release. The agent downloads and checks the " +
+			"image, restarts, and goes back to its previous firmware if the new one doesn't reach the server. " +
+			"Follow the progress in the agent's `update`.",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.accepted("Update started", AgentsModel.FirmwareUpdate),
+			APIResponseSpec.notFound("Agent or firmware release not found"),
+			APIResponseSpec.conflict("The agent can't be updated now"),
+			APIResponseSpec.badGateway("The agent couldn't start the update"),
+			APIResponseSpec.serviceUnavailable("The agent is offline"),
+		),
+	}),
+
+	validator("json", AgentsModel.StartUpdate.Body),
+
+	async (c) => {
+		const agent = getAgent(c);
+		if (agent.kind !== "esp32") {
+			return APIResponse.badRequest(c, "Only ESP32 agents are updated by NetIgnite");
+		}
+
+		const { version } = c.req.valid("json");
+		const release = version
+			? await FirmwareCatalog.get(version)
+			: await FirmwareCatalog.recommendedRelease();
+		if (!release) return APIResponse.notFound(c, "Firmware release not found");
+
+		try {
+			const update = await OtaService.start(agent, release);
+			return APIResponse.accepted(c, "Update started", update);
+		} catch (error) {
+			if (!(error instanceof OtaError)) throw error;
+			switch (error.reason) {
+				case "offline":
+					return APIResponse.serviceUnavailable(c, error.message);
+				case "rejected":
+					return APIResponse.badGateway(c, error.message);
+				default:
+					return APIResponse.conflict(c, error.message);
+			}
+		}
+	},
+);
+
+router.get(
+	"/:agentID/logs",
+
+	APIRouteSpec.authenticated({
+		summary: "Get an agent's log",
+		description:
+			"The agent's most recent log lines. For a live view, use the `/ws/console` WebSocket.",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Log retrieved", AgentsModel.Logs.Response),
+			APIResponseSpec.notFound("Agent not found"),
+			...AGENT_REQUEST_ERRORS,
+		),
+	}),
+
+	async (c) => {
+		try {
+			const result = await requestAgent(getAgent(c).id, "GET_LOGS", {});
+			return APIResponse.success(c, "Log retrieved", {
+				lines: result.lines ?? [],
+				level: result.level ?? null,
+			} satisfies AgentsModel.Logs.Response);
+		} catch (error) {
+			return agentRequestError(c, error);
+		}
+	},
+);
+
+router.get(
+	"/:agentID/info",
+
+	APIRouteSpec.authenticated({
+		summary: "Get an agent's current diagnostics",
+		description: "Asks the agent for its current state (network, memory, uptime, firmware).",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("Info retrieved", AgentsModel.Info.Response),
+			APIResponseSpec.notFound("Agent not found"),
+			...AGENT_REQUEST_ERRORS,
+		),
+	}),
+
+	async (c) => {
+		const agent = getAgent(c);
+		try {
+			const result = await requestAgent(agent.id, "GET_INFO", {});
+			if (result.info) {
+				await DB.instance()
+					.update(DB.Tables.agents)
+					.set({ info: result.info })
+					.where(eq(DB.Tables.agents.id, agent.id));
+			}
+			return APIResponse.success(c, "Info retrieved", {
+				version: result.version ?? null,
+				info: result.info ?? {},
+			} satisfies AgentsModel.Info.Response);
+		} catch (error) {
+			return agentRequestError(c, error);
+		}
+	},
+);
+
+router.put(
+	"/:agentID/device-config",
+
+	APIRouteSpec.authenticated({
+		summary: "Change an agent's settings",
+		description:
+			"Changes settings stored on the agent. A new server URL or IP setting is only kept if the agent " +
+			"reaches the server with it within 2 minutes; otherwise it restarts with the previous settings. " +
+			"Wi-Fi is changed over USB with the web installer (Improv), never through the server.",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.successNoData("Settings sent to the agent"),
+			APIResponseSpec.notFound("Agent not found"),
+			...AGENT_REQUEST_ERRORS,
+		),
+	}),
+
+	validator("json", AgentsModel.DeviceConfig.Body),
+
+	async (c) => {
+		try {
+			await requestAgent(getAgent(c).id, "CONFIG_SET", c.req.valid("json"));
+			return APIResponse.successNoData(c, "Settings sent to the agent");
+		} catch (error) {
+			return agentRequestError(c, error);
+		}
+	},
+);
+
+router.post(
+	"/:agentID/reboot",
+
+	APIRouteSpec.authenticated({
+		summary: "Restart an agent",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.successNoData("The agent restarts"),
+			APIResponseSpec.notFound("Agent not found"),
+			...AGENT_REQUEST_ERRORS,
+		),
+	}),
+
+	async (c) => {
+		try {
+			await requestAgent(getAgent(c).id, "REBOOT", {});
+			return APIResponse.successNoData(c, "The agent restarts");
+		} catch (error) {
+			return agentRequestError(c, error);
+		}
+	},
+);
+
+router.post(
+	"/:agentID/factory-reset",
+
+	APIRouteSpec.authenticated({
+		summary: "Factory-reset an agent",
+		description:
+			"Erases the agent's Wi-Fi, server and credential and restarts it. Its credential is revoked here " +
+			"too; set it up again with the web installer.",
+		tags: [DOCS_TAGS.AGENTS],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("The agent was reset", AgentsModel.Agent),
+			APIResponseSpec.notFound("Agent not found"),
+			...AGENT_REQUEST_ERRORS,
+		),
+	}),
+
+	async (c) => {
+		const agent = getAgent(c);
+		try {
+			await requestAgent(agent.id, "FACTORY_RESET", {});
+		} catch (error) {
+			return agentRequestError(c, error);
+		}
+
+		AgentAuth.revoke(agent.id);
+		const updated = await DB.instance()
+			.select()
+			.from(DB.Tables.agents)
+			.where(eq(DB.Tables.agents.id, agent.id))
+			.get();
+		return APIResponse.success(c, "The agent was reset", toAgentResponse(updated ?? agent));
+	},
+);
diff --git a/server/lib/api/versions/v1/routes/agents/model.ts b/server/lib/api/versions/v1/routes/agents/model.ts
index 33ff5fc..9c33f0b 100644
--- a/server/lib/api/versions/v1/routes/agents/model.ts
+++ b/server/lib/api/versions/v1/routes/agents/model.ts
@@ -5,6 +5,18 @@ export namespace AgentsModel {
 	export const Name = z.string().trim().min(1, "Name is required").max(64, "Name is too long");
 	export const Description = z.string().trim().max(500, "Description is too long");
 
+	/** An OTA update of an ESP32 agent (kept in memory; see OtaService). */
+	export const FirmwareUpdate = z.object({
+		version: z.string(),
+		from_version: z.string().nullable(),
+		state: z.enum(["queued", "starting", "downloading", "restarting", "done", "failed"]),
+		percent: z.number(),
+		error: z.string().nullable(),
+		started_at: z.number(),
+		updated_at: z.number(),
+	});
+	export type FirmwareUpdate = z.infer<typeof FirmwareUpdate>;
+
 	export const Agent = z.object({
 		id: z.number(),
 		name: z.string(),
@@ -17,6 +29,10 @@ export namespace AgentsModel {
 		last_seen_at: z.number().nullable(),
 		enrolled_at: z.number().nullable(),
 		created_at: z.number(),
+		/** The current or last firmware update (ESP32). */
+		update: FirmwareUpdate.nullable(),
+		/** A newer firmware of the admin's channel, if the agent can be updated to it. */
+		update_available: z.string().nullable(),
 	});
 	export type Agent = z.infer<typeof Agent>;
 }
@@ -52,6 +68,8 @@ export namespace AgentsModel.Enroll {
 		enrollment_token: z.string().min(1).max(256),
 		/** Generated by the agent: 32–128 characters `A-Z a-z 0-9 _ -`. */
 		secret: z.string().min(32).max(128),
+		/** The enrolling agent's kind. A token of another kind is refused before it is used. */
+		kind: AgentSettings.Kind.optional(),
 	});
 	export type Body = z.infer<typeof Body>;
 
@@ -91,3 +109,87 @@ export namespace AgentsModel.FlashImage {
 	});
 	export type Response = z.infer<typeof Response>;
 }
+
+export namespace AgentsModel.StartUpdate {
+	export const Body = z.object({
+		/** A synced firmware release; defaults to the recommended one. Older versions are allowed. */
+		version: FirmwareSettings.Version.optional(),
+	});
+	export type Body = z.infer<typeof Body>;
+}
+
+export namespace AgentsModel.BulkUpdate {
+	export const Body = z.object({
+		agent_ids: z.array(z.number().int().positive()).min(1).max(200),
+		/** Defaults to the recommended release. */
+		version: FirmwareSettings.Version.optional(),
+	});
+	export type Body = z.infer<typeof Body>;
+
+	export const Response = z.object({
+		version: z.string(),
+		/** Updated one after another, in this order. */
+		queued: z.array(z.number()),
+		skipped: z.array(z.object({ agent_id: z.number(), reason: z.string() })),
+	});
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AgentsModel.Logs {
+	export const Response = z.object({
+		/** The agent's most recent log lines (about 16 KB), oldest first. */
+		lines: z.array(z.string()),
+		level: z.enum(["error", "warn", "info", "debug"]).nullable(),
+	});
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AgentsModel.Info {
+	export const Response = z.object({
+		version: z.string().nullable(),
+		info: z.record(z.string(), z.unknown()),
+	});
+	export type Response = z.infer<typeof Response>;
+}
+
+export namespace AgentsModel.DeviceConfig {
+	const IPv4 = z.ipv4({ error: "Must be an IPv4 address" });
+
+	export const Body = z
+		.object({
+			/**
+			 * Where the agent connects. The agent tries it and keeps it only if it reaches the server
+			 * with it within 2 minutes; otherwise it restarts with the previous address.
+			 */
+			server_url: z
+				.url({ protocol: /^https?$/, error: "Must be an http:// or https:// URL" })
+				.max(200)
+				.refine((url) => {
+					const parsed = new URL(url);
+					return !parsed.username && !parsed.password && !parsed.search && !parsed.hash;
+				}, "The URL can't contain credentials, a query or a fragment")
+				.optional(),
+			/** The agent's network host name (after its next restart). */
+			name: z
+				.string()
+				.regex(/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/, "Letters, digits and -, max. 63")
+				.optional(),
+			log_level: z.enum(["error", "warn", "info", "debug"]).optional(),
+			/** DHCP or a static IPv4 configuration; tried like `server_url`. */
+			ip: z
+				.discriminatedUnion("mode", [
+					z.object({ mode: z.literal("dhcp") }),
+					z.object({
+						mode: z.literal("static"),
+						address: IPv4,
+						gateway: IPv4,
+						netmask: IPv4,
+						dns1: IPv4.optional(),
+						dns2: IPv4.optional(),
+					}),
+				])
+				.optional(),
+		})
+		.refine((body) => Object.values(body).some((value) => value !== undefined), "Nothing to change");
+	export type Body = z.infer<typeof Body>;
+}
diff --git a/server/lib/api/versions/v1/routes/firmware/index.ts b/server/lib/api/versions/v1/routes/firmware/index.ts
index 0c3b730..399a06f 100644
--- a/server/lib/api/versions/v1/routes/firmware/index.ts
+++ b/server/lib/api/versions/v1/routes/firmware/index.ts
@@ -1,17 +1,29 @@
 import { Hono } from "hono";
 import { validator } from "hono-openapi";
+import { AgentAuth } from "../../../../../agents/auth";
 import type { DB } from "../../../../../db";
 import { FirmwareCatalog } from "../../../../../firmware/catalog";
 import { APIResponse } from "../../../../utils/api-res";
+import { AuthHandler } from "../../../../utils/authHandler";
 import { RuntimeMetadata } from "../../../../utils/metadata";
 import { APIResponseSpec, APIRouteSpec } from "../../../../utils/specHelpers";
 import { DOCS_TAGS } from "../../docs";
-import { requireUser } from "../../middleware/requireUser";
 import { FirmwareModel } from "./model";
 
 export const router = new Hono().basePath("/firmware");
 
-router.use("*", requireUser);
+// Users (the web installer), and ESP32 agents downloading an OTA update with their own credential.
+router.use("*", async (c, next) => {
+	if (AuthHandler.AuthContext.get(c).type !== "unauthenticated") return await next();
+
+	const header = c.req.header("Authorization");
+	const isFileDownload = c.req.method === "GET" && /\/files\/[^/]+$/.test(c.req.path);
+	if (isFileDownload && header?.startsWith(`Bearer ${AgentAuth.AGENT_TOKEN_PREFIX}`)) {
+		const agent = await AgentAuth.authenticate(header.slice("Bearer ".length).trim());
+		if (agent?.kind === "esp32") return await next();
+	}
+	return APIResponse.unauthorized(c, "Authentication required");
+});
 
 export function toReleaseResponse(release: DB.Models.FirmwareRelease): FirmwareModel.Release {
 	return {
@@ -58,7 +70,9 @@ router.get(
 
 	APIRouteSpec.authenticated({
 		summary: "Download a firmware file",
-		description: "A flash image (or the signature) of a synced release, for the web installer.",
+		description:
+			"A flash image (or the signature) of a synced release, for the web installer. ESP32 agents " +
+			"download OTA updates here with their agent credential.",
 		tags: [DOCS_TAGS.FIRMWARE],
 		responses: {
 			200: {
diff --git a/server/lib/firmware/catalog.ts b/server/lib/firmware/catalog.ts
index 7cb054e..f6fc3de 100644
--- a/server/lib/firmware/catalog.ts
+++ b/server/lib/firmware/catalog.ts
@@ -62,6 +62,22 @@ export class FirmwareCatalog {
 		return releases.find((release) => channel === "prerelease" || !release.prerelease) ?? null;
 	}
 
+	/** The newest release of the admin's channel, or null. */
+	static async recommendedRelease() {
+		const { firmware_channel } = await RuntimeMetadata.getSettings();
+		return this.recommended(await this.list(), firmware_channel);
+	}
+
+	/** Whether `version` is newer than the agent's `current` version (semver; unknown counts as older). */
+	static isNewer(version: string, current: string | null) {
+		if (!current) return true;
+		try {
+			return Bun.semver.order(version, current) > 0;
+		} catch {
+			return false;
+		}
+	}
+
 	/**
 	 * Path of a file of a synced release: one of its flash images or its signature. Null if the
 	 * release or file is unknown.
diff --git a/server/lib/firmware/ota.ts b/server/lib/firmware/ota.ts
new file mode 100644
index 0000000..c6492b9
--- /dev/null
+++ b/server/lib/firmware/ota.ts
@@ -0,0 +1,245 @@
+import path from "node:path";
+import { AgentRequestError } from "../agents/connection";
+import { AgentGatewayRunner } from "../agents/gateway";
+import { AgentProtocol } from "../agents/protocol";
+import { AgentRegistry } from "../agents/registry";
+import type { DB } from "../db";
+import { Logger } from "../utils/logger";
+import { FirmwareCatalog } from "./catalog";
+
+/**
+ * OTA updates of ESP32 agents. The server sends `OTA_BEGIN` with the path of a synced firmware
+ * image on this server; the agent downloads it with its own credential, verifies and installs it,
+ * reports `OTA_PROGRESS` and restarts. The update is done when the agent says HELLO with the new
+ * version; a rolled-back update reports the version in `info.ota_failed_version`.
+ *
+ * Progress is kept in memory: after a server restart, the agent's version tells the outcome.
+ */
+export class OtaService {
+	/** An update that takes longer than this (download, restart, reconnect) counts as failed. */
+	static readonly TIMEOUT_MS = 15 * 60 * 1000;
+	/** How long finished updates stay visible. */
+	static readonly KEEP_FINISHED_MS = 24 * 60 * 60 * 1000;
+
+	private static readonly updates = new Map<number, OtaService.Update>();
+	private static initialized = false;
+
+	static init() {
+		if (this.initialized) return;
+		this.initialized = true;
+
+		AgentGatewayRunner.onEvent("OTA_PROGRESS", (connection, payload) => {
+			const event = AgentProtocol.OtaProgressEvent.safeParse(payload);
+			if (event.success) this.onProgress(connection.agentID, event.data);
+		});
+		AgentGatewayRunner.onHello((connection) => {
+			if (connection.hello) this.onHello(connection.agentID, connection.hello);
+		});
+	}
+
+	/** The agent's current or last update, if any. */
+	static get(agentID: number): OtaService.Update | null {
+		const update = this.updates.get(agentID);
+		if (!update) return null;
+
+		const now = Date.now();
+		if (OtaService.isRunning(update) && now - update.started_at > this.TIMEOUT_MS) {
+			this.finish(agentID, update, "failed", "The update didn't finish in time");
+		} else if (!OtaService.isRunning(update) && now - update.updated_at > this.KEEP_FINISHED_MS) {
+			this.updates.delete(agentID);
+			return null;
+		}
+		return this.updates.get(agentID) ?? null;
+	}
+
+	/** Starts updating an online agent to `release`. Throws {@link OtaError}. */
+	static async start(agent: DB.Models.Agent, release: DB.Models.FirmwareRelease) {
+		const current = this.get(agent.id);
+		if (current && OtaService.isRunning(current) && current.state !== "queued") {
+			throw new OtaError("busy", `An update to ${current.version} is already running`);
+		}
+
+		const connection = AgentRegistry.get(agent.id);
+		if (!connection) throw new OtaError("offline", "The agent is offline");
+		if (!connection.hasCapability("ota")) {
+			throw new OtaError("unsupported", "This agent's firmware can't be updated over the network");
+		}
+		if (connection.hello?.version === release.version) {
+			throw new OtaError("current", `The agent already runs ${release.version}`);
+		}
+
+		const app = release.manifest.parts.find((part) => part.file === release.manifest.app.file);
+		if (!app) throw new OtaError("invalid", "The release has no app image");
+
+		let signature: string | undefined;
+		if (release.manifest.app.signature) {
+			const file = FirmwareCatalog.filePath(release, release.manifest.app.signature);
+			const data = file ? Bun.file(file) : null;
+			if (data && (await data.exists()))
+				signature = Buffer.from(await data.arrayBuffer()).toString("hex");
+		}
+
+		const update: OtaService.Update = {
+			version: release.version,
+			from_version: connection.hello?.version ?? agent.version,
+			state: "starting",
+			percent: 0,
+			error: null,
+			started_at: Date.now(),
+			updated_at: Date.now(),
+		};
+		this.updates.set(agent.id, update);
+
+		try {
+			await connection.request(
+				"OTA_BEGIN",
+				{
+					version: release.version,
+					// Relative to the agent's server URL, which may differ from NETIGNITE_APP_URL.
+					path: path.posix.join("/api/v1/firmware", release.version, "files", app.file),
+					size: app.size,
+					sha256: app.sha256,
+					...(signature ? { signature } : {}),
+				},
+				10_000,
+			);
+		} catch (error) {
+			const message =
+				error instanceof AgentRequestError ? error.message : "The agent couldn't start the update";
+			this.finish(agent.id, update, "failed", message);
+			throw new OtaError("rejected", message);
+		}
+
+		if (update.state === "starting") {
+			update.state = "downloading";
+			update.updated_at = Date.now();
+		}
+		Logger.info(`Agent ${agent.id}: updating ${update.from_version ?? "?"} → ${release.version}`);
+		return update;
+	}
+
+	/**
+	 * Updates agents one after another in the background: each update has to finish before the
+	 * next one starts. Agents that are offline or already current are skipped.
+	 */
+	static startMany(agents: DB.Models.Agent[], release: DB.Models.FirmwareRelease) {
+		for (const agent of agents) {
+			this.updates.set(agent.id, {
+				version: release.version,
+				from_version: agent.version,
+				state: "queued",
+				percent: 0,
+				error: null,
+				started_at: Date.now(),
+				updated_at: Date.now(),
+			});
+		}
+
+		void (async () => {
+			for (const agent of agents) {
+				const queued = this.updates.get(agent.id);
+				if (queued?.state !== "queued") continue;
+				try {
+					await this.start(agent, release);
+				} catch (error) {
+					const update = this.updates.get(agent.id);
+					if (update?.state === "queued" || update?.state === "starting") {
+						this.finish(agent.id, update, "failed", (error as Error).message);
+					}
+					continue;
+				}
+				await this.waitUntilFinished(agent.id);
+			}
+		})();
+	}
+
+	/** For tests. */
+	static reset() {
+		this.updates.clear();
+	}
+
+	private static async waitUntilFinished(agentID: number) {
+		while (true) {
+			const update = this.get(agentID);
+			if (!update || !OtaService.isRunning(update)) return;
+			await Bun.sleep(1000);
+		}
+	}
+
+	private static onProgress(agentID: number, event: AgentProtocol.OtaProgressEvent) {
+		const update = this.updates.get(agentID);
+		if (!update || update.version !== event.version || !OtaService.isRunning(update)) return;
+
+		update.updated_at = Date.now();
+		if (event.state === "failed") {
+			this.finish(agentID, update, "failed", event.error ?? "The agent couldn't install the update");
+		} else if (event.state === "installed") {
+			update.state = "restarting";
+			update.percent = 100;
+		} else {
+			update.state = "downloading";
+			update.percent = event.percent;
+		}
+	}
+
+	private static onHello(agentID: number, hello: AgentProtocol.Hello) {
+		const update = this.updates.get(agentID);
+		if (!update || !OtaService.isRunning(update) || update.state === "queued") return;
+
+		if (hello.version === update.version) {
+			this.finish(agentID, update, "done", null);
+		} else if (hello.info?.ota_failed_version === update.version) {
+			this.finish(
+				agentID,
+				update,
+				"failed",
+				`The new firmware didn't start correctly; the agent went back to ${hello.version}`,
+			);
+		} else if (update.state === "restarting") {
+			this.finish(agentID, update, "failed", `The agent restarted with ${hello.version}`);
+		}
+	}
+
+	private static finish(
+		agentID: number,
+		update: OtaService.Update,
+		state: "done" | "failed",
+		error: string | null,
+	) {
+		update.state = state;
+		update.error = error;
+		update.updated_at = Date.now();
+		if (state === "done") update.percent = 100;
+		Logger.info(
+			`Agent ${agentID}: update to ${update.version} ${state}${error ? ` (${error})` : ""}`,
+		);
+	}
+
+	static isRunning(update: OtaService.Update) {
+		return update.state !== "done" && update.state !== "failed";
+	}
+}
+
+export namespace OtaService {
+	export interface Update {
+		version: string;
+		from_version: string | null;
+		/**
+		 * `queued` (bulk update) → `starting` → `downloading` → `restarting` → `done` | `failed`.
+		 */
+		state: "queued" | "starting" | "downloading" | "restarting" | "done" | "failed";
+		percent: number;
+		error: string | null;
+		started_at: number;
+		updated_at: number;
+	}
+}
+
+export class OtaError extends Error {
+	constructor(
+		readonly reason: "busy" | "offline" | "unsupported" | "current" | "invalid" | "rejected",
+		message: string,
+	) {
+		super(message);
+	}
+}
diff --git a/server/lib/firmware/provisioning.ts b/server/lib/firmware/provisioning.ts
index afd97a2..2b34b1d 100644
--- a/server/lib/firmware/provisioning.ts
+++ b/server/lib/firmware/provisioning.ts
@@ -34,14 +34,16 @@ export class ProvisioningImage {
 	 * characters. "Garage ESP32" becomes "Garage-ESP32"; an empty result keeps the firmware's default.
 	 */
 	static hostname(name: string) {
-		return name
-			.normalize("NFKD")
-			// Accents split off by NFKD: "Büro" → "Buro".
-			.replace(/\p{M}/gu, "")
-			.replace(/[^A-Za-z0-9-]+/g, "-")
-			.replace(/-{2,}/g, "-")
-			.slice(0, 63)
-			.replace(/^-+|-+$/g, "");
+		return (
+			name
+				.normalize("NFKD")
+				// Accents split off by NFKD: "Büro" → "Buro".
+				.replace(/\p{M}/gu, "")
+				.replace(/[^A-Za-z0-9-]+/g, "-")
+				.replace(/-{2,}/g, "-")
+				.slice(0, 63)
+				.replace(/^-+|-+$/g, "")
+		);
 	}
 }
 
diff --git a/server/lib/utils/config.ts b/server/lib/utils/config.ts
index 89db5e5..80addea 100644
--- a/server/lib/utils/config.ts
+++ b/server/lib/utils/config.ts
@@ -142,6 +142,12 @@ export class ConfigHandler {
 		/** Optional; raises GitHub's API rate limit for the release sync. */
 		GITHUB_TOKEN: CS.string().optional(),
 
+		// The Linux agent's install script (/install/linux.sh) downloads the agent from the GitHub
+		// releases of LINUX_AGENT_REPO: the release tagged LINUX_AGENT_VERSION (e.g. v1.0.0), or the
+		// newest release, pre-releases included.
+		LINUX_AGENT_REPO: CS.string().default("NetIgnite-project/Agent-Linux"),
+		LINUX_AGENT_VERSION: CS.string().optional(),
+
 		SMTP_HOST: CS.string().optional(),
 		SMTP_PORT: CS.number().optional(),
 		SMTP_USERNAME: CS.string().optional(),
diff --git a/server/plugins/startup.ts b/server/plugins/startup.ts
index 8ae9bb5..ee26711 100644
--- a/server/plugins/startup.ts
+++ b/server/plugins/startup.ts
@@ -1,10 +1,12 @@
 import { defineNitroPlugin } from "nitropack/runtime";
+import { ConsoleRelay } from "../lib/agents/console";
 import { AgentGatewayRunner } from "../lib/agents/gateway";
 import { API } from "../lib/api";
 import { EmailService } from "../lib/api/utils/email";
 import { DB } from "../lib/db";
 import { DeviceStatusService } from "../lib/devices/status";
 import { FirmwareCatalog } from "../lib/firmware/catalog";
+import { OtaService } from "../lib/firmware/ota";
 import { TaskScheduler } from "../lib/tasks";
 import { Utils } from "../lib/utils";
 import { ConfigHandler } from "../lib/utils/config";
@@ -25,6 +27,7 @@ export default defineNitroPlugin(async (nitroApp) => {
 				await CronJobHandler.stopAll();
 
 				DeviceStatusService.stop();
+				ConsoleRelay.stop();
 				AgentGatewayRunner.stop();
 
 				await API.stop();
@@ -111,6 +114,8 @@ export default defineNitroPlugin(async (nitroApp) => {
 
 	AgentGatewayRunner.start();
 	DeviceStatusService.start();
+	OtaService.init();
+	ConsoleRelay.init();
 
 	if (config.FIRMWARE_SYNC) {
 		// In the background: the server is usable while the firmware downloads.
diff --git a/server/routes/install/linux.sh.ts b/server/routes/install/linux.sh.ts
new file mode 100644
index 0000000..633d479
--- /dev/null
+++ b/server/routes/install/linux.sh.ts
@@ -0,0 +1,16 @@
+import { defineEventHandler, setResponseHeader } from "h3";
+import { LinuxInstaller } from "../../lib/agents/linuxInstaller";
+import { ConfigHandler } from "../../lib/utils/config";
+
+// `curl -fsSL <server>/install/linux.sh | sudo sh -s -- <enrollment-token>`: installs the Linux agent.
+export default defineEventHandler((event) => {
+	const config = ConfigHandler.getConfig();
+
+	setResponseHeader(event, "Content-Type", "text/x-shellscript; charset=utf-8");
+	setResponseHeader(event, "Cache-Control", "no-cache");
+	return LinuxInstaller.script({
+		serverURL: (config?.APP_URL ?? "").replace(/\/$/, ""),
+		repo: config?.LINUX_AGENT_REPO ?? "NetIgnite-project/Agent-Linux",
+		version: config?.LINUX_AGENT_VERSION ?? null,
+	});
+});
diff --git a/server/routes/ws/console.ts b/server/routes/ws/console.ts
new file mode 100644
index 0000000..68b0bfc
--- /dev/null
+++ b/server/routes/ws/console.ts
@@ -0,0 +1,5 @@
+import { defineWebSocketHandler } from "h3";
+import { ConsoleRelay } from "../../lib/agents/console";
+
+// The dashboard's live agent log. See server/lib/agents/console.ts.
+export default defineWebSocketHandler(ConsoleRelay.hooks());
diff --git a/tests/agent-control.test.ts b/tests/agent-control.test.ts
new file mode 100644
index 0000000..b58b716
--- /dev/null
+++ b/tests/agent-control.test.ts
@@ -0,0 +1,567 @@
+import { afterAll, beforeAll, beforeEach, describe, expect, setDefaultTimeout, test } from "bun:test";
+import { createHash } from "node:crypto";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { ConsoleRelay } from "../server/lib/agents/console";
+import { LinuxInstaller } from "../server/lib/agents/linuxInstaller";
+import { AgentRegistry } from "../server/lib/agents/registry";
+import { API } from "../server/lib/api";
+import { RuntimeMetadata } from "../server/lib/api/utils/metadata";
+import { resetEnrollRateLimit } from "../server/lib/api/versions/v1/routes/agents";
+import { DB } from "../server/lib/db";
+import { FirmwareCatalog } from "../server/lib/firmware/catalog";
+import { OtaService } from "../server/lib/firmware/ota";
+import { ConfigHandler } from "../server/lib/utils/config";
+import { makeAPIRequest } from "./helpers/api";
+import { FakeAgent } from "./helpers/fake-agent";
+import { type SeededSession, seedSession, seedUser } from "./helpers/seed";
+
+const ESP32_CAPABILITIES = [
+	"wake",
+	"status.ip",
+	"ota",
+	"logs",
+	"config",
+	"device.reboot",
+	"device.reset",
+];
+
+// Enrolling an agent hashes its secret (argon2); several tests enroll a few agents.
+setDefaultTimeout(30_000);
+
+let owner: SeededSession;
+let stranger: SeededSession;
+let firmwareDir: string;
+
+/** A synced release with a 1 KB app image, written straight into the catalog. */
+async function seedRelease(version: string, prerelease = false) {
+	const app = crypto.getRandomValues(new Uint8Array(1024));
+	app[0] = 0xe9;
+	const dir = path.join(firmwareDir, version);
+	await fs.mkdir(dir, { recursive: true });
+	await Bun.write(path.join(dir, "firmware.bin"), app);
+
+	const sha256 = createHash("sha256").update(app).digest("hex");
+	await DB.instance()
+		.insert(DB.Tables.firmwareReleases)
+		.values({
+			version,
+			prerelease,
+			published_at: Date.now(),
+			release_url: `https://github.com/NetIgnite-project/Agent-ESP32/releases/tag/v${version}`,
+			manifest: {
+				format: 1,
+				name: "NetIgnite Agent",
+				version,
+				chip_family: "ESP32",
+				board: "esp32dev",
+				protocol: 2,
+				parts: [{ file: "firmware.bin", offset: 0x10000, size: app.length, sha256 }],
+				nvs: {
+					offset: 0x9000,
+					size: 0x5000,
+					namespace: "netignite",
+					keys: ["server", "enroll", "name"],
+				},
+				app: { file: "firmware.bin", signature: null },
+			},
+			signature_verified: false,
+		});
+	return { app, sha256 };
+}
+
+async function createAgent(kind: "esp32" | "linux" = "esp32") {
+	return await makeAPIRequest<{ id: number }>("/v1/agents", {
+		method: "POST",
+		authToken: owner.token,
+		body: { name: `Agent ${kind}`, kind },
+	});
+}
+
+/** An enrolled, connected ESP32 agent. */
+async function onlineAgent(
+	handler: ConstructorParameters<typeof FakeAgent>[0] = () => ({}),
+	hello: Record<string, unknown> = {},
+) {
+	const { id } = await createAgent();
+	const credential = await FakeAgent.enroll(id, owner.token);
+	const agent = new FakeAgent(handler);
+	await agent.connect(credential, { version: "2.0.0", capabilities: ESP32_CAPABILITIES, ...hello });
+	return { id, credential, agent };
+}
+
+async function getAgent(id: number) {
+	return await makeAPIRequest<{
+		version: string;
+		state: string;
+		update: { state: string; percent: number; version: string; error: string | null } | null;
+		update_available: string | null;
+	}>(`/v1/agents/${id}`, { authToken: owner.token });
+}
+
+const waitUntil = async (condition: () => boolean, timeoutMs = 5000) => {
+	const start = Date.now();
+	while (!condition()) {
+		if (Date.now() - start > timeoutMs) throw new Error("Timed out waiting");
+		await Bun.sleep(20);
+	}
+};
+
+beforeAll(async () => {
+	OtaService.init();
+	ConsoleRelay.init();
+
+	firmwareDir = path.join(ConfigHandler.getConfig()?.FIRMWARE_DIR as string, "..", "firmware-ota");
+	await FirmwareCatalog.configure({
+		repo: "NetIgnite-project/Agent-ESP32",
+		apiURL: "http://127.0.0.1:1",
+		dir: firmwareDir,
+		publicKeyPath: null,
+		token: null,
+	});
+	await DB.instance().delete(DB.Tables.firmwareReleases);
+	await seedRelease("2.1.0");
+	await seedRelease("2.2.0-beta.1", true);
+
+	owner = await seedSession((await seedUser("user")).id);
+	stranger = await seedSession((await seedUser("user")).id);
+});
+
+// Every test enrolls agents; keep the enrollment rate limit (per client) out of the way.
+beforeEach(() => resetEnrollRateLimit());
+
+afterAll(async () => {
+	OtaService.reset();
+	ConsoleRelay.stop();
+	resetEnrollRateLimit();
+	await DB.instance().delete(DB.Tables.firmwareReleases);
+	await RuntimeMetadata.updateSettings({ firmware_channel: "stable" });
+});
+
+describe("Firmware updates", () => {
+	test("an outdated ESP32 agent is offered the recommended release and updates", async () => {
+		const { id, credential, agent } = await onlineAgent();
+		expect((await getAgent(id)).update_available).toBe("2.1.0");
+
+		const started = await makeAPIRequest<{ state: string; version: string }>(
+			`/v1/agents/${id}/update`,
+			{ method: "POST", authToken: owner.token, body: {} },
+			202,
+		);
+		expect(started).toMatchObject({ state: "downloading", version: "2.1.0" });
+
+		const request = agent.requests.find((r) => r.cmd === "OTA_BEGIN");
+		const release = await FirmwareCatalog.get("2.1.0");
+		expect(request?.p).toEqual({
+			version: "2.1.0",
+			path: "/api/v1/firmware/2.1.0/files/firmware.bin",
+			size: 1024,
+			sha256: release?.manifest.parts[0]?.sha256,
+		});
+
+		// The agent downloads the image with its own credential.
+		const download = await API.getApp().request("/v1/firmware/2.1.0/files/firmware.bin", {
+			headers: { Authorization: `Bearer ${credential}` },
+		});
+		expect(download.status).toBe(200);
+		expect(download.headers.get("content-length")).toBe("1024");
+
+		await agent.event("OTA_PROGRESS", { version: "2.1.0", state: "downloading", percent: 40 });
+		expect((await getAgent(id)).update).toMatchObject({ state: "downloading", percent: 40 });
+		await agent.event("OTA_PROGRESS", { version: "2.1.0", state: "installed", percent: 100 });
+		expect((await getAgent(id)).update?.state).toBe("restarting");
+
+		// It restarts and comes back with the new version.
+		await agent.disconnect();
+		const restarted = new FakeAgent();
+		await restarted.connect(credential, { version: "2.1.0", capabilities: ESP32_CAPABILITIES });
+		const after = await getAgent(id);
+		expect(after.update).toMatchObject({ state: "done", percent: 100, error: null });
+		expect(after.update_available).toBeNull();
+
+		// The prerelease channel recommends the beta.
+		await makeAPIRequest("/v1/admin/settings", {
+			method: "PUT",
+			authToken: (await seedSession((await seedUser("admin")).id)).token,
+			body: { firmware_channel: "prerelease" },
+		});
+		expect((await getAgent(id)).update_available).toBe("2.2.0-beta.1");
+	});
+
+	test("a rolled-back update is reported as failed", async () => {
+		const { id, credential, agent } = await onlineAgent();
+		await makeAPIRequest(`/v1/agents/${id}/update`, {
+			method: "POST",
+			authToken: owner.token,
+			body: { version: "2.1.0" },
+		});
+		await agent.event("OTA_PROGRESS", { version: "2.1.0", state: "installed", percent: 100 });
+		await agent.disconnect();
+
+		const back = new FakeAgent();
+		await back.connect(credential, {
+			version: "2.0.0",
+			capabilities: ESP32_CAPABILITIES,
+			info: { ota_failed_version: "2.1.0" },
+		});
+		const update = (await getAgent(id)).update;
+		expect(update?.state).toBe("failed");
+		expect(update?.error).toContain("went back to 2.0.0");
+	});
+
+	test("errors reported by the agent fail the update", async () => {
+		const { id, agent } = await onlineAgent();
+		await makeAPIRequest(`/v1/agents/${id}/update`, {
+			method: "POST",
+			authToken: owner.token,
+			body: { version: "2.1.0" },
+		});
+		await agent.event("OTA_PROGRESS", {
+			version: "2.1.0",
+			state: "failed",
+			percent: 0,
+			error: "The download doesn't match its SHA-256",
+		});
+		expect((await getAgent(id)).update).toMatchObject({
+			state: "failed",
+			error: "The download doesn't match its SHA-256",
+		});
+	});
+
+	test("updates are refused when they can't work", async () => {
+		const update = (id: number, body: Record<string, unknown>, code: number, token = owner.token) =>
+			makeAPIRequest(`/v1/agents/${id}/update`, { method: "POST", authToken: token, body }, code);
+
+		const offline = await createAgent();
+		await update(offline.id, {}, 503);
+
+		const linux = await createAgent("linux");
+		await update(linux.id, {}, 400);
+
+		const old = await onlineAgent(() => ({}), { capabilities: ["wake"] });
+		await update(old.id, {}, 409);
+
+		const current = await onlineAgent(() => ({}), { version: "2.1.0" });
+		await update(current.id, { version: "2.1.0" }, 409);
+
+		const refusing = await onlineAgent((cmd) => {
+			if (cmd === "OTA_BEGIN") throw new Error("Not enough memory to start the update");
+			return {};
+		});
+		await update(refusing.id, { version: "2.1.0" }, 502);
+		expect((await getAgent(refusing.id)).update?.error).toContain("Not enough memory");
+
+		const busy = await onlineAgent();
+		await update(busy.id, { version: "2.1.0" }, 202);
+		await update(busy.id, { version: "2.1.0" }, 409);
+
+		await update(busy.id, { version: "9.9.9" }, 404);
+		await update(busy.id, {}, 404, stranger.token);
+	});
+
+	test("only ESP32 agents may download firmware with their credential", async () => {
+		const linux = await createAgent("linux");
+		const credential = await FakeAgent.enroll(linux.id, owner.token);
+		const fetchWith = (token: string) =>
+			API.getApp().request("/v1/firmware/2.1.0/files/firmware.bin", {
+				headers: { Authorization: `Bearer ${token}` },
+			});
+
+		expect((await fetchWith(credential)).status).toBe(401);
+		expect((await fetchWith("netignite_agent_nope:nope")).status).toBe(401);
+
+		// An agent credential never authenticates anything else.
+		const { credential: esp } = await onlineAgent();
+		expect(
+			(await API.getApp().request("/v1/agents", { headers: { Authorization: `Bearer ${esp}` } }))
+				.status,
+		).toBe(401);
+		expect(
+			(await API.getApp().request("/v1/firmware", { headers: { Authorization: `Bearer ${esp}` } }))
+				.status,
+		).toBe(401);
+	});
+
+	test("bulk updates run one agent after another", async () => {
+		const first = await onlineAgent();
+		const second = await onlineAgent();
+		const offline = await createAgent();
+
+		const result = await makeAPIRequest<{
+			queued: number[];
+			skipped: { agent_id: number; reason: string }[];
+		}>(
+			"/v1/agents/bulk-update",
+			{
+				method: "POST",
+				authToken: owner.token,
+				body: { agent_ids: [first.id, second.id, offline.id, 999999], version: "2.1.0" },
+			},
+			202,
+		);
+		expect(result.queued).toEqual([first.id, second.id]);
+		expect(result.skipped).toEqual([
+			{ agent_id: offline.id, reason: "Offline" },
+			{ agent_id: 999999, reason: "Agent not found" },
+		]);
+
+		await waitUntil(() => first.agent.requests.some((r) => r.cmd === "OTA_BEGIN"));
+		expect((await getAgent(second.id)).update?.state).toBe("queued");
+		expect(second.agent.requests.some((r) => r.cmd === "OTA_BEGIN")).toBe(false);
+
+		await first.agent.event("OTA_PROGRESS", {
+			version: "2.1.0",
+			state: "failed",
+			percent: 0,
+			error: "x",
+		});
+		await waitUntil(() => second.agent.requests.some((r) => r.cmd === "OTA_BEGIN"), 5000);
+		expect((await getAgent(second.id)).update?.state).toBe("downloading");
+	});
+});
+
+describe("Agent control", () => {
+	test("logs, info, settings, restart", async () => {
+		const { id, agent } = await onlineAgent((cmd) => {
+			if (cmd === "GET_LOGS") return { lines: ["[ 1] I booted", "[ 2] I online"], level: "info" };
+			if (cmd === "GET_INFO")
+				return { version: "2.0.0", info: { free_heap: 123456, ipv4: "10.0.0.9" } };
+			return {};
+		});
+
+		expect(await makeAPIRequest(`/v1/agents/${id}/logs`, { authToken: owner.token })).toEqual({
+			lines: ["[ 1] I booted", "[ 2] I online"],
+			level: "info",
+		});
+		expect(await makeAPIRequest(`/v1/agents/${id}/info`, { authToken: owner.token })).toEqual({
+			version: "2.0.0",
+			info: { free_heap: 123456, ipv4: "10.0.0.9" },
+		});
+
+		const config = (body: Record<string, unknown>, code?: number) =>
+			makeAPIRequest(
+				`/v1/agents/${id}/device-config`,
+				{ method: "PUT", authToken: owner.token, body },
+				code,
+			);
+		await config({
+			server_url: "https://netignite.example",
+			name: "Garage-ESP32",
+			log_level: "debug",
+			ip: {
+				mode: "static",
+				address: "192.168.1.50",
+				gateway: "192.168.1.1",
+				netmask: "255.255.255.0",
+			},
+		});
+		expect(agent.requests.find((r) => r.cmd === "CONFIG_SET")?.p).toEqual({
+			server_url: "https://netignite.example",
+			name: "Garage-ESP32",
+			log_level: "debug",
+			ip: {
+				mode: "static",
+				address: "192.168.1.50",
+				gateway: "192.168.1.1",
+				netmask: "255.255.255.0",
+			},
+		});
+		await config({}, 400);
+		await config({ name: "Garage ESP32" }, 400);
+		await config({ server_url: "https://user:pw@example.com" }, 400);
+		await config(
+			{ ip: { mode: "static", address: "192.168.1.500", gateway: "1.1.1.1", netmask: "255.0.0.0" } },
+			400,
+		);
+
+		await makeAPIRequest(`/v1/agents/${id}/reboot`, { method: "POST", authToken: owner.token });
+		expect(agent.requests.some((r) => r.cmd === "REBOOT")).toBe(true);
+
+		await makeAPIRequest(`/v1/agents/${id}/logs`, { authToken: stranger.token }, 404);
+		await makeAPIRequest(
+			`/v1/agents/${id}/reboot`,
+			{ method: "POST", authToken: stranger.token },
+			404,
+		);
+	});
+
+	test("agent errors map to HTTP codes", async () => {
+		const offline = await createAgent();
+		await makeAPIRequest(`/v1/agents/${offline.id}/logs`, { authToken: owner.token }, 503);
+
+		const old = await onlineAgent(() => ({}), { capabilities: ["wake"] });
+		await makeAPIRequest(`/v1/agents/${old.id}/logs`, { authToken: owner.token }, 409);
+
+		const failing = await onlineAgent(() => {
+			throw new Error("A previous server or network change is still being tried");
+		});
+		await makeAPIRequest(
+			`/v1/agents/${failing.id}/device-config`,
+			{ method: "PUT", authToken: owner.token, body: { log_level: "info" } },
+			502,
+		);
+	});
+
+	test("a factory reset also revokes the credential", async () => {
+		const { id, credential, agent } = await onlineAgent();
+		const reset = await makeAPIRequest<{ state: string }>(`/v1/agents/${id}/factory-reset`, {
+			method: "POST",
+			authToken: owner.token,
+		});
+		expect(agent.requests.some((r) => r.cmd === "FACTORY_RESET")).toBe(true);
+		expect(reset.state).toBe("unenrolled");
+		expect(agent.closed?.code).toBe(4003);
+		expect(await new FakeAgent().upgrade(credential)).toBeInstanceOf(Response);
+	});
+});
+
+/** A browser on `/ws/console`, driven through the relay's hooks. */
+class FakeViewer {
+	readonly id = crypto.randomUUID();
+	readonly messages: Record<string, any>[] = [];
+	closed: { code?: number; reason?: string } | null = null;
+	private readonly hooks = ConsoleRelay.hooks();
+
+	async open(origin = "http://localhost:18232") {
+		const rejected = await this.hooks.upgrade!({
+			headers: new Headers({ origin }),
+			context: {},
+		} as any);
+		if (rejected instanceof Response) return rejected;
+		await this.hooks.open!(this as any);
+		return null;
+	}
+
+	async say(message: unknown) {
+		await this.hooks.message!(this as any, { text: () => JSON.stringify(message) } as any);
+	}
+
+	async leave() {
+		await this.hooks.close!(this as any, { code: 1000, reason: "test" });
+	}
+
+	send(data: string) {
+		this.messages.push(JSON.parse(data));
+	}
+
+	close(code?: number, reason?: string) {
+		this.closed = { code, reason };
+	}
+}
+
+describe("Console", () => {
+	test("streams the owner's agent log", async () => {
+		let subscribed = false;
+		const { id, credential, agent } = await onlineAgent((cmd, payload) => {
+			if (cmd === "LOG_SUBSCRIBE") {
+				subscribed = payload.enabled;
+				return payload.enabled ? { lines: ["old line"], level: "info" } : {};
+			}
+			return {};
+		});
+
+		const viewer = new FakeViewer();
+		expect(await viewer.open()).toBeNull();
+		await viewer.say({ type: "auth", token: owner.token, agent_id: id });
+		await waitUntil(() => viewer.messages.length >= 2);
+		expect(viewer.messages).toEqual([
+			{ type: "ready", online: true },
+			{ type: "lines", lines: ["old line"], reset: true, level: "info" },
+		]);
+		expect(subscribed).toBe(true);
+
+		await agent.event("LOG", { lines: ["new line"] });
+		expect(viewer.messages.at(-1)).toEqual({ type: "lines", lines: ["new line"], reset: false });
+
+		// The agent restarts: the viewer sees it go and come back with its stored lines.
+		await agent.disconnect();
+		expect(viewer.messages.at(-1)).toEqual({ type: "state", online: false });
+		const back = new FakeAgent((cmd) =>
+			cmd === "LOG_SUBSCRIBE" ? { lines: ["after restart"] } : {},
+		);
+		await back.connect(credential, { version: "2.0.0", capabilities: ESP32_CAPABILITIES });
+		await waitUntil(() => viewer.messages.at(-1)?.lines?.[0] === "after restart");
+		expect(viewer.messages.at(-2)).toEqual({ type: "state", online: true });
+
+		// The last viewer leaves: the agent stops streaming.
+		await viewer.leave();
+		await waitUntil(() =>
+			back.requests.some((r) => r.cmd === "LOG_SUBSCRIBE" && r.p?.enabled === false),
+		);
+	});
+
+	test("only the owner, with a valid token, from the dashboard's origin", async () => {
+		const { id } = await onlineAgent();
+
+		const foreign = new FakeViewer();
+		expect((await foreign.open("https://evil.example"))?.status).toBe(403);
+
+		const intruder = new FakeViewer();
+		await intruder.open();
+		await intruder.say({ type: "auth", token: stranger.token, agent_id: id });
+		expect(intruder.closed?.code).toBe(4404);
+
+		const forged = new FakeViewer();
+		await forged.open();
+		await forged.say({ type: "auth", token: "netignite_sess_nope:nope", agent_id: id });
+		expect(forged.closed?.code).toBe(4401);
+
+		const confused = new FakeViewer();
+		await confused.open();
+		await confused.say({ hello: "there" });
+		expect(confused.closed?.code).toBe(1008);
+	});
+
+	test("an offline agent can be watched until it connects", async () => {
+		const { id } = await createAgent();
+		const viewer = new FakeViewer();
+		await viewer.open();
+		await viewer.say({ type: "auth", token: owner.token, agent_id: id });
+		expect(viewer.messages).toEqual([{ type: "ready", online: false }]);
+		expect(AgentRegistry.isOnline(id)).toBe(false);
+		await viewer.leave();
+	});
+});
+
+describe("Linux agent setup", () => {
+	test("an enrollment token of another agent kind is refused and stays valid", async () => {
+		const linux = await createAgent("linux");
+		const { token } = await makeAPIRequest<{ token: string }>(`/v1/agents/${linux.id}/enrollments`, {
+			method: "POST",
+			authToken: owner.token,
+		});
+		const secret = "c".repeat(64);
+
+		await makeAPIRequest(
+			"/v1/agents/enroll",
+			{ method: "POST", body: { enrollment_token: token, secret, kind: "esp32" } },
+			409,
+		);
+		const enrolled = await makeAPIRequest<{ agent_id: number; kind: string }>("/v1/agents/enroll", {
+			method: "POST",
+			body: { enrollment_token: token, secret, kind: "linux" },
+		});
+		expect(enrolled).toMatchObject({ agent_id: linux.id, kind: "linux" });
+	});
+
+	test("the install script is valid sh and uses the configured repository", async () => {
+		const script = LinuxInstaller.script({
+			serverURL: "https://netignite.example/it's",
+			repo: "Example/Agent-Linux",
+			version: "v1.2.3",
+		});
+		expect(script.startsWith("#!/bin/sh\n")).toBe(true);
+		expect(script).toContain(`SERVER='https://netignite.example/it'"'"'s'`);
+		expect(script).toContain("REPO='Example/Agent-Linux'");
+		expect(script).toContain('VERSION="${NETIGNITE_AGENT_VERSION:-v1.2.3}"');
+		expect(script).toContain("sha256sum -c");
+
+		const sh = Bun.which("sh");
+		if (sh) {
+			const file = path.join(firmwareDir, "linux.sh");
+			await Bun.write(file, script);
+			const check = Bun.spawnSync([sh, "-n", file]);
+			expect(check.exitCode).toBe(0);
+		}
+	});
+});
diff --git a/tests/helpers/preload.ts b/tests/helpers/preload.ts
index 69576c2..3b68095 100644
--- a/tests/helpers/preload.ts
+++ b/tests/helpers/preload.ts
@@ -29,6 +29,8 @@ function setTestEnv(rootDir: string) {
 		NETIGNITE_FIRMWARE_DIR: path.join(rootDir, "firmware"),
 		NETIGNITE_FIRMWARE_PUBLIC_KEY: undefined,
 		NETIGNITE_GITHUB_TOKEN: undefined,
+		NETIGNITE_LINUX_AGENT_REPO: "NetIgnite-project/Agent-Linux",
+		NETIGNITE_LINUX_AGENT_VERSION: undefined,
 
 		NETIGNITE_SMTP_HOST: "127.0.0.1",
 		NETIGNITE_SMTP_PORT: 12587,

From f25cef95ec0418ff9503993819fa4e1c2fdc3fc4 Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Wed, 21 Oct 2026 09:07:13 +0200
Subject: [PATCH 09/17] feat: SSH logins for shutdown and reboot

- Devices get an SSH login (owner only, write-only): a server-generated Ed25519 key pair (OpenSSH
  format; the dashboard shows the authorized_keys and sudoers lines) or a password. Secrets are
  encrypted with the server's secrets key (NETIGNITE_SECRETS_KEY or config/secrets.key).
- The device's agent logs in with SSH_CHECK (authentication only, no session) and SSH_EXEC (fixed
  shutdown/reboot command per OS, sudo optional). Host keys are trusted on first use: test the
  login, then trust the fingerprint; changing host or port un-trusts it.
- Shutdown and reboot use the device's host agent first, then SSH.
- API: GET/PUT/DELETE /v1/devices/:id/ssh, POST /ssh/test, POST /ssh/trust. Dashboard: SSH tab.
---
 AGENTS.md                                     |    8 +-
 README.md                                     |   11 +
 app/api-client/index.ts                       |    4 +-
 app/api-client/sdk.gen.ts                     |   67 +-
 app/api-client/types.gen.ts                   |  348 +++++
 app/api-client/zod.gen.ts                     |  142 ++
 app/pages/dashboard/devices/[device_id].vue   |   11 +
 .../dashboard/devices/[device_id]/ssh.vue     |  318 +++++
 app/utils/netignite.ts                        |    3 +-
 drizzle/migrations/0002_lethal_lyja.sql       |   14 +
 drizzle/migrations/meta/0002_snapshot.json    | 1238 +++++++++++++++++
 drizzle/migrations/meta/_journal.json         |    7 +
 example.env                                   |    3 +
 server/lib/agents/protocol.ts                 |   41 +
 .../api/utils/shared-models/netigniteData.ts  |   10 +
 .../api/versions/v1/routes/devices/index.ts   |  206 ++-
 .../api/versions/v1/routes/devices/model.ts   |   73 +
 server/lib/db/index.ts                        |    2 +
 server/lib/db/schema.ts                       |   28 +
 server/lib/devices/actions.ts                 |   65 +-
 server/lib/ssh/credentials.ts                 |  171 +++
 server/lib/ssh/keys.ts                        |   69 +
 server/lib/utils/config.ts                    |    3 +
 server/lib/utils/secrets.ts                   |   57 +
 tests/helpers/preload.ts                      |    1 +
 tests/ssh.test.ts                             |  387 ++++++
 26 files changed, 3266 insertions(+), 21 deletions(-)
 create mode 100644 app/pages/dashboard/devices/[device_id]/ssh.vue
 create mode 100644 drizzle/migrations/0002_lethal_lyja.sql
 create mode 100644 drizzle/migrations/meta/0002_snapshot.json
 create mode 100644 server/lib/ssh/credentials.ts
 create mode 100644 server/lib/ssh/keys.ts
 create mode 100644 server/lib/utils/secrets.ts
 create mode 100644 tests/ssh.test.ts

diff --git a/AGENTS.md b/AGENTS.md
index cc9ee09..5c9a1a3 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -68,10 +68,14 @@ Follow the LeiCraftMC Style Guides: https://github.com/LeiCraftMC/Style-Guides.
 - **Console** (`server/lib/agents/console.ts`, `/ws/console`): the browser authenticates with its
   first message (`{type:"auth", token, agent_id}`), owner only, Origin must be NETIGNITE_APP_URL;
   the session is checked again every minute.
+- **SSH** (`server/lib/ssh/`): logins are owner-only and write-only; secrets go through
+  `Secrets` (`server/lib/utils/secrets.ts`) and are only sent to the device's agent in
+  `SSH_CHECK`/`SSH_EXEC`. `SSH_EXEC` needs a trusted host key; changing host or port un-trusts it.
+  `DeviceActions.hostControl` prefers the device's host agent, then SSH.
 - **Enrollment** takes the agent's `kind`; a token of another kind gets 409 and stays valid.
 - Run Biome's autofix only on the files you changed: on the whole tree it rewrites `@ts-ignore` to
   `@ts-expect-error`, which breaks `nuxt typecheck`.
 - Tests: `tests/netignite.test.ts` (API + gateway with `tests/helpers/fake-agent.ts`),
   `tests/v1-import.test.ts`, `tests/firmware.test.ts` (catalog against a fake GitHub, flash image),
-  `tests/nvs.test.ts` and `tests/agent-control.test.ts` (OTA, console, device control, install
-  script).
+  `tests/nvs.test.ts`, `tests/agent-control.test.ts` (OTA, console, device control, install
+  script) and `tests/ssh.test.ts`.
diff --git a/README.md b/README.md
index ab843d2..6c8a9fe 100644
--- a/README.md
+++ b/README.md
@@ -63,6 +63,16 @@ The agent's **Console** tab shows its live log (WebSocket `/ws/console`) and cha
 level, server address, host name and IP settings, restarts or factory-resets it. A new server
 address or IP setting is only kept if the agent reaches the server with it within 2 minutes.
 
+### SSH shutdown and reboot
+
+A device's **SSH** tab (owner only) stores an SSH login: a key pair the server generates (the tab
+shows the `authorized_keys` and `sudoers` lines for the device) or a password. The device's agent
+(a Linux agent in Wake-on-LAN mode in the same network) logs in for shutdown and reboot; it runs only
+the fixed `shutdown` commands. Passwords and private keys are stored encrypted with the server's
+secrets key (`NETIGNITE_SECRETS_KEY`, or `config/secrets.key`; back it up) and are never returned by
+the API. The device's host key is trusted on first use: test the login, compare the fingerprint,
+trust it.
+
 ### Linux agent
 
 The page of a Linux agent shows a one-line installer:
@@ -128,6 +138,7 @@ bun run api-client:generate
 | --- | --- |
 | `server/lib/agents/` | Agent protocol, credentials, gateway, live connection registry, console relay, Linux install script |
 | `server/lib/devices/` | Device permissions (sharing roles), status polling, power actions |
+| `server/lib/ssh/` | SSH logins of devices (encrypted secrets, generated Ed25519 keys, host key trust) |
 | `server/lib/firmware/` | Firmware catalog (GitHub release sync), NVS image writer for the web installer, OTA updates |
 | `server/lib/api/versions/v1/routes/` | REST routes (`agents`, `devices`, `firmware`, `auth`, `account`, `admin`) |
 | `server/lib/migration/v1Import.ts` | v1 database import |
diff --git a/app/api-client/index.ts b/app/api-client/index.ts
index 5645cb5..555f487 100644
--- a/app/api-client/index.ts
+++ b/app/api-client/index.ts
@@ -1,4 +1,4 @@
 // This file is auto-generated by @hey-api/openapi-ts
 
-export { deleteAccount, deleteAccountApikeysByApiKeyId, deleteAdminUsersByUserId, deleteAgentsByAgentId, deleteDevicesByDeviceId, deleteDevicesByDeviceIdFavorite, deleteDevicesByDeviceIdSharesByUserId, getAccount, getAccountApikeys, getAccountApikeysByApiKeyId, getAccountPreferences, getAccountPreferencesOnboarding, getAdminFirmware, getAdminSettings, getAdminUsers, getAdminUsersByUserId, getAgents, getAgentsByAgentId, getAgentsByAgentIdInfo, getAgentsByAgentIdLogs, getAuthRegistration, getAuthSession, getDevices, getDevicesByDeviceId, getDevicesByDeviceIdShares, getFirmware, getFirmwareByVersionFilesByFile, type Options, postAccountApikeys, postAdminFirmwareSync, postAdminUsers, postAgents, postAgentsBulkUpdate, postAgentsByAgentIdEnrollments, postAgentsByAgentIdFactoryReset, postAgentsByAgentIdFlashImage, postAgentsByAgentIdReboot, postAgentsByAgentIdRevoke, postAgentsByAgentIdUpdate, postAgentsEnroll, postAuthLogin, postAuthLogout, postAuthResetPassword, postAuthResetPasswordRequest, postAuthSignup, postDevices, postDevicesByDeviceIdPowerOn, postDevicesByDeviceIdReboot, postDevicesByDeviceIdShares, postDevicesByDeviceIdShutdown, postDevicesByDeviceIdStatus, putAccount, putAccountPassword, putAccountPreferencesOnboarding, putAdminSettings, putAdminUsersByUserId, putAdminUsersByUserIdPassword, putAgentsByAgentId, putAgentsByAgentIdDeviceConfig, putDevicesByDeviceId, putDevicesByDeviceIdFavorite, putDevicesByDeviceIdSharesByUserId } from './sdk.gen';
-export type { ClientOptions, DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdErrors, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountApikeysByApiKeyIdResponses, DeleteAccountData, DeleteAccountError, DeleteAccountErrors, DeleteAccountResponse, DeleteAccountResponses, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdErrors, DeleteAdminUsersByUserIdResponse, DeleteAdminUsersByUserIdResponses, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdErrors, DeleteAgentsByAgentIdResponse, DeleteAgentsByAgentIdResponses, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdErrors, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteErrors, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdFavoriteResponses, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdResponses, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdErrors, DeleteDevicesByDeviceIdSharesByUserIdResponse, DeleteDevicesByDeviceIdSharesByUserIdResponses, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdErrors, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysByApiKeyIdResponses, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountApikeysResponses, GetAccountData, GetAccountError, GetAccountErrors, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesOnboardingResponses, GetAccountPreferencesResponse, GetAccountPreferencesResponses, GetAccountResponse, GetAccountResponses, GetAdminFirmwareData, GetAdminFirmwareResponse, GetAdminFirmwareResponses, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminSettingsResponses, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdErrors, GetAdminUsersByUserIdResponse, GetAdminUsersByUserIdResponses, GetAdminUsersData, GetAdminUsersError, GetAdminUsersErrors, GetAdminUsersResponse, GetAdminUsersResponses, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdErrors, GetAgentsByAgentIdInfoData, GetAgentsByAgentIdInfoError, GetAgentsByAgentIdInfoErrors, GetAgentsByAgentIdInfoResponse, GetAgentsByAgentIdInfoResponses, GetAgentsByAgentIdLogsData, GetAgentsByAgentIdLogsError, GetAgentsByAgentIdLogsErrors, GetAgentsByAgentIdLogsResponse, GetAgentsByAgentIdLogsResponses, GetAgentsByAgentIdResponse, GetAgentsByAgentIdResponses, GetAgentsData, GetAgentsResponse, GetAgentsResponses, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthRegistrationResponses, GetAuthSessionData, GetAuthSessionError, GetAuthSessionErrors, GetAuthSessionResponse, GetAuthSessionResponses, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdErrors, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdResponses, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesErrors, GetDevicesByDeviceIdSharesResponse, GetDevicesByDeviceIdSharesResponses, GetDevicesData, GetDevicesResponse, GetDevicesResponses, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileError, GetFirmwareByVersionFilesByFileErrors, GetFirmwareByVersionFilesByFileResponse, GetFirmwareByVersionFilesByFileResponses, GetFirmwareData, GetFirmwareResponse, GetFirmwareResponses, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysErrors, PostAccountApikeysResponse, PostAccountApikeysResponses, PostAdminFirmwareSyncData, PostAdminFirmwareSyncError, PostAdminFirmwareSyncErrors, PostAdminFirmwareSyncResponse, PostAdminFirmwareSyncResponses, PostAdminUsersData, PostAdminUsersError, PostAdminUsersErrors, PostAdminUsersResponse, PostAdminUsersResponses, PostAgentsBulkUpdateData, PostAgentsBulkUpdateError, PostAgentsBulkUpdateErrors, PostAgentsBulkUpdateResponse, PostAgentsBulkUpdateResponses, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsErrors, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdEnrollmentsResponses, PostAgentsByAgentIdFactoryResetData, PostAgentsByAgentIdFactoryResetError, PostAgentsByAgentIdFactoryResetErrors, PostAgentsByAgentIdFactoryResetResponse, PostAgentsByAgentIdFactoryResetResponses, PostAgentsByAgentIdFlashImageData, PostAgentsByAgentIdFlashImageError, PostAgentsByAgentIdFlashImageErrors, PostAgentsByAgentIdFlashImageResponse, PostAgentsByAgentIdFlashImageResponses, PostAgentsByAgentIdRebootData, PostAgentsByAgentIdRebootError, PostAgentsByAgentIdRebootErrors, PostAgentsByAgentIdRebootResponse, PostAgentsByAgentIdRebootResponses, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeErrors, PostAgentsByAgentIdRevokeResponse, PostAgentsByAgentIdRevokeResponses, PostAgentsByAgentIdUpdateData, PostAgentsByAgentIdUpdateError, PostAgentsByAgentIdUpdateErrors, PostAgentsByAgentIdUpdateResponse, PostAgentsByAgentIdUpdateResponses, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollErrors, PostAgentsEnrollResponse, PostAgentsEnrollResponses, PostAgentsError, PostAgentsErrors, PostAgentsResponse, PostAgentsResponses, PostAuthLoginData, PostAuthLoginError, PostAuthLoginErrors, PostAuthLoginResponse, PostAuthLoginResponses, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutErrors, PostAuthLogoutResponse, PostAuthLogoutResponses, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordErrors, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestErrors, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordRequestResponses, PostAuthResetPasswordResponse, PostAuthResetPasswordResponses, PostAuthSignupData, PostAuthSignupError, PostAuthSignupErrors, PostAuthSignupResponse, PostAuthSignupResponses, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnErrors, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdPowerOnResponses, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootErrors, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdRebootResponses, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesErrors, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdSharesResponses, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownErrors, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdShutdownResponses, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusErrors, PostDevicesByDeviceIdStatusResponse, PostDevicesByDeviceIdStatusResponses, PostDevicesData, PostDevicesError, PostDevicesErrors, PostDevicesResponse, PostDevicesResponses, PutAccountData, PutAccountError, PutAccountErrors, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordErrors, PutAccountPasswordResponse, PutAccountPasswordResponses, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingErrors, PutAccountPreferencesOnboardingResponse, PutAccountPreferencesOnboardingResponses, PutAccountResponse, PutAccountResponses, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsErrors, PutAdminSettingsResponse, PutAdminSettingsResponses, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdErrors, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordErrors, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdPasswordResponses, PutAdminUsersByUserIdResponse, PutAdminUsersByUserIdResponses, PutAgentsByAgentIdData, PutAgentsByAgentIdDeviceConfigData, PutAgentsByAgentIdDeviceConfigError, PutAgentsByAgentIdDeviceConfigErrors, PutAgentsByAgentIdDeviceConfigResponse, PutAgentsByAgentIdDeviceConfigResponses, PutAgentsByAgentIdError, PutAgentsByAgentIdErrors, PutAgentsByAgentIdResponse, PutAgentsByAgentIdResponses, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdErrors, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteErrors, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdFavoriteResponses, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdResponses, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdErrors, PutDevicesByDeviceIdSharesByUserIdResponse, PutDevicesByDeviceIdSharesByUserIdResponses } from './types.gen';
+export { deleteAccount, deleteAccountApikeysByApiKeyId, deleteAdminUsersByUserId, deleteAgentsByAgentId, deleteDevicesByDeviceId, deleteDevicesByDeviceIdFavorite, deleteDevicesByDeviceIdSharesByUserId, deleteDevicesByDeviceIdSsh, getAccount, getAccountApikeys, getAccountApikeysByApiKeyId, getAccountPreferences, getAccountPreferencesOnboarding, getAdminFirmware, getAdminSettings, getAdminUsers, getAdminUsersByUserId, getAgents, getAgentsByAgentId, getAgentsByAgentIdInfo, getAgentsByAgentIdLogs, getAuthRegistration, getAuthSession, getDevices, getDevicesByDeviceId, getDevicesByDeviceIdShares, getDevicesByDeviceIdSsh, getFirmware, getFirmwareByVersionFilesByFile, type Options, postAccountApikeys, postAdminFirmwareSync, postAdminUsers, postAgents, postAgentsBulkUpdate, postAgentsByAgentIdEnrollments, postAgentsByAgentIdFactoryReset, postAgentsByAgentIdFlashImage, postAgentsByAgentIdReboot, postAgentsByAgentIdRevoke, postAgentsByAgentIdUpdate, postAgentsEnroll, postAuthLogin, postAuthLogout, postAuthResetPassword, postAuthResetPasswordRequest, postAuthSignup, postDevices, postDevicesByDeviceIdPowerOn, postDevicesByDeviceIdReboot, postDevicesByDeviceIdShares, postDevicesByDeviceIdShutdown, postDevicesByDeviceIdSshTest, postDevicesByDeviceIdSshTrust, postDevicesByDeviceIdStatus, putAccount, putAccountPassword, putAccountPreferencesOnboarding, putAdminSettings, putAdminUsersByUserId, putAdminUsersByUserIdPassword, putAgentsByAgentId, putAgentsByAgentIdDeviceConfig, putDevicesByDeviceId, putDevicesByDeviceIdFavorite, putDevicesByDeviceIdSharesByUserId, putDevicesByDeviceIdSsh } from './sdk.gen';
+export type { ClientOptions, DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdErrors, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountApikeysByApiKeyIdResponses, DeleteAccountData, DeleteAccountError, DeleteAccountErrors, DeleteAccountResponse, DeleteAccountResponses, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdErrors, DeleteAdminUsersByUserIdResponse, DeleteAdminUsersByUserIdResponses, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdErrors, DeleteAgentsByAgentIdResponse, DeleteAgentsByAgentIdResponses, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdErrors, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteErrors, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdFavoriteResponses, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdResponses, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdErrors, DeleteDevicesByDeviceIdSharesByUserIdResponse, DeleteDevicesByDeviceIdSharesByUserIdResponses, DeleteDevicesByDeviceIdSshData, DeleteDevicesByDeviceIdSshError, DeleteDevicesByDeviceIdSshErrors, DeleteDevicesByDeviceIdSshResponse, DeleteDevicesByDeviceIdSshResponses, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdErrors, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysByApiKeyIdResponses, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountApikeysResponses, GetAccountData, GetAccountError, GetAccountErrors, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesOnboardingResponses, GetAccountPreferencesResponse, GetAccountPreferencesResponses, GetAccountResponse, GetAccountResponses, GetAdminFirmwareData, GetAdminFirmwareResponse, GetAdminFirmwareResponses, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminSettingsResponses, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdErrors, GetAdminUsersByUserIdResponse, GetAdminUsersByUserIdResponses, GetAdminUsersData, GetAdminUsersError, GetAdminUsersErrors, GetAdminUsersResponse, GetAdminUsersResponses, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdErrors, GetAgentsByAgentIdInfoData, GetAgentsByAgentIdInfoError, GetAgentsByAgentIdInfoErrors, GetAgentsByAgentIdInfoResponse, GetAgentsByAgentIdInfoResponses, GetAgentsByAgentIdLogsData, GetAgentsByAgentIdLogsError, GetAgentsByAgentIdLogsErrors, GetAgentsByAgentIdLogsResponse, GetAgentsByAgentIdLogsResponses, GetAgentsByAgentIdResponse, GetAgentsByAgentIdResponses, GetAgentsData, GetAgentsResponse, GetAgentsResponses, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthRegistrationResponses, GetAuthSessionData, GetAuthSessionError, GetAuthSessionErrors, GetAuthSessionResponse, GetAuthSessionResponses, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdErrors, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdResponses, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesErrors, GetDevicesByDeviceIdSharesResponse, GetDevicesByDeviceIdSharesResponses, GetDevicesByDeviceIdSshData, GetDevicesByDeviceIdSshError, GetDevicesByDeviceIdSshErrors, GetDevicesByDeviceIdSshResponse, GetDevicesByDeviceIdSshResponses, GetDevicesData, GetDevicesResponse, GetDevicesResponses, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileError, GetFirmwareByVersionFilesByFileErrors, GetFirmwareByVersionFilesByFileResponse, GetFirmwareByVersionFilesByFileResponses, GetFirmwareData, GetFirmwareResponse, GetFirmwareResponses, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysErrors, PostAccountApikeysResponse, PostAccountApikeysResponses, PostAdminFirmwareSyncData, PostAdminFirmwareSyncError, PostAdminFirmwareSyncErrors, PostAdminFirmwareSyncResponse, PostAdminFirmwareSyncResponses, PostAdminUsersData, PostAdminUsersError, PostAdminUsersErrors, PostAdminUsersResponse, PostAdminUsersResponses, PostAgentsBulkUpdateData, PostAgentsBulkUpdateError, PostAgentsBulkUpdateErrors, PostAgentsBulkUpdateResponse, PostAgentsBulkUpdateResponses, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsErrors, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdEnrollmentsResponses, PostAgentsByAgentIdFactoryResetData, PostAgentsByAgentIdFactoryResetError, PostAgentsByAgentIdFactoryResetErrors, PostAgentsByAgentIdFactoryResetResponse, PostAgentsByAgentIdFactoryResetResponses, PostAgentsByAgentIdFlashImageData, PostAgentsByAgentIdFlashImageError, PostAgentsByAgentIdFlashImageErrors, PostAgentsByAgentIdFlashImageResponse, PostAgentsByAgentIdFlashImageResponses, PostAgentsByAgentIdRebootData, PostAgentsByAgentIdRebootError, PostAgentsByAgentIdRebootErrors, PostAgentsByAgentIdRebootResponse, PostAgentsByAgentIdRebootResponses, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeErrors, PostAgentsByAgentIdRevokeResponse, PostAgentsByAgentIdRevokeResponses, PostAgentsByAgentIdUpdateData, PostAgentsByAgentIdUpdateError, PostAgentsByAgentIdUpdateErrors, PostAgentsByAgentIdUpdateResponse, PostAgentsByAgentIdUpdateResponses, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollErrors, PostAgentsEnrollResponse, PostAgentsEnrollResponses, PostAgentsError, PostAgentsErrors, PostAgentsResponse, PostAgentsResponses, PostAuthLoginData, PostAuthLoginError, PostAuthLoginErrors, PostAuthLoginResponse, PostAuthLoginResponses, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutErrors, PostAuthLogoutResponse, PostAuthLogoutResponses, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordErrors, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestErrors, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordRequestResponses, PostAuthResetPasswordResponse, PostAuthResetPasswordResponses, PostAuthSignupData, PostAuthSignupError, PostAuthSignupErrors, PostAuthSignupResponse, PostAuthSignupResponses, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnErrors, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdPowerOnResponses, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootErrors, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdRebootResponses, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesErrors, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdSharesResponses, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownErrors, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdShutdownResponses, PostDevicesByDeviceIdSshTestData, PostDevicesByDeviceIdSshTestError, PostDevicesByDeviceIdSshTestErrors, PostDevicesByDeviceIdSshTestResponse, PostDevicesByDeviceIdSshTestResponses, PostDevicesByDeviceIdSshTrustData, PostDevicesByDeviceIdSshTrustError, PostDevicesByDeviceIdSshTrustErrors, PostDevicesByDeviceIdSshTrustResponse, PostDevicesByDeviceIdSshTrustResponses, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusErrors, PostDevicesByDeviceIdStatusResponse, PostDevicesByDeviceIdStatusResponses, PostDevicesData, PostDevicesError, PostDevicesErrors, PostDevicesResponse, PostDevicesResponses, PutAccountData, PutAccountError, PutAccountErrors, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordErrors, PutAccountPasswordResponse, PutAccountPasswordResponses, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingErrors, PutAccountPreferencesOnboardingResponse, PutAccountPreferencesOnboardingResponses, PutAccountResponse, PutAccountResponses, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsErrors, PutAdminSettingsResponse, PutAdminSettingsResponses, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdErrors, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordErrors, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdPasswordResponses, PutAdminUsersByUserIdResponse, PutAdminUsersByUserIdResponses, PutAgentsByAgentIdData, PutAgentsByAgentIdDeviceConfigData, PutAgentsByAgentIdDeviceConfigError, PutAgentsByAgentIdDeviceConfigErrors, PutAgentsByAgentIdDeviceConfigResponse, PutAgentsByAgentIdDeviceConfigResponses, PutAgentsByAgentIdError, PutAgentsByAgentIdErrors, PutAgentsByAgentIdResponse, PutAgentsByAgentIdResponses, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdErrors, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteErrors, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdFavoriteResponses, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdResponses, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdErrors, PutDevicesByDeviceIdSharesByUserIdResponse, PutDevicesByDeviceIdSharesByUserIdResponses, PutDevicesByDeviceIdSshData, PutDevicesByDeviceIdSshError, PutDevicesByDeviceIdSshErrors, PutDevicesByDeviceIdSshResponse, PutDevicesByDeviceIdSshResponses } from './types.gen';
diff --git a/app/api-client/sdk.gen.ts b/app/api-client/sdk.gen.ts
index c51454a..72d6b64 100644
--- a/app/api-client/sdk.gen.ts
+++ b/app/api-client/sdk.gen.ts
@@ -3,7 +3,7 @@
 
 import type { Client, ClientMeta, Composable, Options as Options2, RequestResult, TDataShape } from './client';
 import { client } from './client.gen';
-import type { DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountData, DeleteAccountError, DeleteAccountResponse, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdResponse, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdResponse, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdResponse, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountData, GetAccountError, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesResponse, GetAccountResponse, GetAdminFirmwareData, GetAdminFirmwareResponse, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdResponse, GetAdminUsersData, GetAdminUsersError, GetAdminUsersResponse, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdInfoData, GetAgentsByAgentIdInfoError, GetAgentsByAgentIdInfoResponse, GetAgentsByAgentIdLogsData, GetAgentsByAgentIdLogsError, GetAgentsByAgentIdLogsResponse, GetAgentsByAgentIdResponse, GetAgentsData, GetAgentsResponse, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthSessionData, GetAuthSessionError, GetAuthSessionResponse, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesResponse, GetDevicesData, GetDevicesResponse, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileError, GetFirmwareByVersionFilesByFileResponse, GetFirmwareData, GetFirmwareResponse, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysResponse, PostAdminFirmwareSyncData, PostAdminFirmwareSyncError, PostAdminFirmwareSyncResponse, PostAdminUsersData, PostAdminUsersError, PostAdminUsersResponse, PostAgentsBulkUpdateData, PostAgentsBulkUpdateError, PostAgentsBulkUpdateResponse, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdFactoryResetData, PostAgentsByAgentIdFactoryResetError, PostAgentsByAgentIdFactoryResetResponse, PostAgentsByAgentIdFlashImageData, PostAgentsByAgentIdFlashImageError, PostAgentsByAgentIdFlashImageResponse, PostAgentsByAgentIdRebootData, PostAgentsByAgentIdRebootError, PostAgentsByAgentIdRebootResponse, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeResponse, PostAgentsByAgentIdUpdateData, PostAgentsByAgentIdUpdateError, PostAgentsByAgentIdUpdateResponse, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollResponse, PostAgentsError, PostAgentsResponse, PostAuthLoginData, PostAuthLoginError, PostAuthLoginResponse, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutResponse, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordResponse, PostAuthSignupData, PostAuthSignupError, PostAuthSignupResponse, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusResponse, PostDevicesData, PostDevicesError, PostDevicesResponse, PutAccountData, PutAccountError, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordResponse, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingResponse, PutAccountResponse, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsResponse, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdResponse, PutAgentsByAgentIdData, PutAgentsByAgentIdDeviceConfigData, PutAgentsByAgentIdDeviceConfigError, PutAgentsByAgentIdDeviceConfigResponse, PutAgentsByAgentIdError, PutAgentsByAgentIdResponse, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdResponse } from './types.gen';
+import type { DeleteAccountApikeysByApiKeyIdData, DeleteAccountApikeysByApiKeyIdError, DeleteAccountApikeysByApiKeyIdResponse, DeleteAccountData, DeleteAccountError, DeleteAccountResponse, DeleteAdminUsersByUserIdData, DeleteAdminUsersByUserIdError, DeleteAdminUsersByUserIdResponse, DeleteAgentsByAgentIdData, DeleteAgentsByAgentIdError, DeleteAgentsByAgentIdResponse, DeleteDevicesByDeviceIdData, DeleteDevicesByDeviceIdError, DeleteDevicesByDeviceIdFavoriteData, DeleteDevicesByDeviceIdFavoriteError, DeleteDevicesByDeviceIdFavoriteResponse, DeleteDevicesByDeviceIdResponse, DeleteDevicesByDeviceIdSharesByUserIdData, DeleteDevicesByDeviceIdSharesByUserIdError, DeleteDevicesByDeviceIdSharesByUserIdResponse, DeleteDevicesByDeviceIdSshData, DeleteDevicesByDeviceIdSshError, DeleteDevicesByDeviceIdSshResponse, GetAccountApikeysByApiKeyIdData, GetAccountApikeysByApiKeyIdError, GetAccountApikeysByApiKeyIdResponse, GetAccountApikeysData, GetAccountApikeysResponse, GetAccountData, GetAccountError, GetAccountPreferencesData, GetAccountPreferencesOnboardingData, GetAccountPreferencesOnboardingResponse, GetAccountPreferencesResponse, GetAccountResponse, GetAdminFirmwareData, GetAdminFirmwareResponse, GetAdminSettingsData, GetAdminSettingsResponse, GetAdminUsersByUserIdData, GetAdminUsersByUserIdError, GetAdminUsersByUserIdResponse, GetAdminUsersData, GetAdminUsersError, GetAdminUsersResponse, GetAgentsByAgentIdData, GetAgentsByAgentIdError, GetAgentsByAgentIdInfoData, GetAgentsByAgentIdInfoError, GetAgentsByAgentIdInfoResponse, GetAgentsByAgentIdLogsData, GetAgentsByAgentIdLogsError, GetAgentsByAgentIdLogsResponse, GetAgentsByAgentIdResponse, GetAgentsData, GetAgentsResponse, GetAuthRegistrationData, GetAuthRegistrationResponse, GetAuthSessionData, GetAuthSessionError, GetAuthSessionResponse, GetDevicesByDeviceIdData, GetDevicesByDeviceIdError, GetDevicesByDeviceIdResponse, GetDevicesByDeviceIdSharesData, GetDevicesByDeviceIdSharesError, GetDevicesByDeviceIdSharesResponse, GetDevicesByDeviceIdSshData, GetDevicesByDeviceIdSshError, GetDevicesByDeviceIdSshResponse, GetDevicesData, GetDevicesResponse, GetFirmwareByVersionFilesByFileData, GetFirmwareByVersionFilesByFileError, GetFirmwareByVersionFilesByFileResponse, GetFirmwareData, GetFirmwareResponse, PostAccountApikeysData, PostAccountApikeysError, PostAccountApikeysResponse, PostAdminFirmwareSyncData, PostAdminFirmwareSyncError, PostAdminFirmwareSyncResponse, PostAdminUsersData, PostAdminUsersError, PostAdminUsersResponse, PostAgentsBulkUpdateData, PostAgentsBulkUpdateError, PostAgentsBulkUpdateResponse, PostAgentsByAgentIdEnrollmentsData, PostAgentsByAgentIdEnrollmentsError, PostAgentsByAgentIdEnrollmentsResponse, PostAgentsByAgentIdFactoryResetData, PostAgentsByAgentIdFactoryResetError, PostAgentsByAgentIdFactoryResetResponse, PostAgentsByAgentIdFlashImageData, PostAgentsByAgentIdFlashImageError, PostAgentsByAgentIdFlashImageResponse, PostAgentsByAgentIdRebootData, PostAgentsByAgentIdRebootError, PostAgentsByAgentIdRebootResponse, PostAgentsByAgentIdRevokeData, PostAgentsByAgentIdRevokeError, PostAgentsByAgentIdRevokeResponse, PostAgentsByAgentIdUpdateData, PostAgentsByAgentIdUpdateError, PostAgentsByAgentIdUpdateResponse, PostAgentsData, PostAgentsEnrollData, PostAgentsEnrollError, PostAgentsEnrollResponse, PostAgentsError, PostAgentsResponse, PostAuthLoginData, PostAuthLoginError, PostAuthLoginResponse, PostAuthLogoutData, PostAuthLogoutError, PostAuthLogoutResponse, PostAuthResetPasswordData, PostAuthResetPasswordError, PostAuthResetPasswordRequestData, PostAuthResetPasswordRequestError, PostAuthResetPasswordRequestResponse, PostAuthResetPasswordResponse, PostAuthSignupData, PostAuthSignupError, PostAuthSignupResponse, PostDevicesByDeviceIdPowerOnData, PostDevicesByDeviceIdPowerOnError, PostDevicesByDeviceIdPowerOnResponse, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootError, PostDevicesByDeviceIdRebootResponse, PostDevicesByDeviceIdSharesData, PostDevicesByDeviceIdSharesError, PostDevicesByDeviceIdSharesResponse, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownError, PostDevicesByDeviceIdShutdownResponse, PostDevicesByDeviceIdSshTestData, PostDevicesByDeviceIdSshTestError, PostDevicesByDeviceIdSshTestResponse, PostDevicesByDeviceIdSshTrustData, PostDevicesByDeviceIdSshTrustError, PostDevicesByDeviceIdSshTrustResponse, PostDevicesByDeviceIdStatusData, PostDevicesByDeviceIdStatusError, PostDevicesByDeviceIdStatusResponse, PostDevicesData, PostDevicesError, PostDevicesResponse, PutAccountData, PutAccountError, PutAccountPasswordData, PutAccountPasswordError, PutAccountPasswordResponse, PutAccountPreferencesOnboardingData, PutAccountPreferencesOnboardingError, PutAccountPreferencesOnboardingResponse, PutAccountResponse, PutAdminSettingsData, PutAdminSettingsError, PutAdminSettingsResponse, PutAdminUsersByUserIdData, PutAdminUsersByUserIdError, PutAdminUsersByUserIdPasswordData, PutAdminUsersByUserIdPasswordError, PutAdminUsersByUserIdPasswordResponse, PutAdminUsersByUserIdResponse, PutAgentsByAgentIdData, PutAgentsByAgentIdDeviceConfigData, PutAgentsByAgentIdDeviceConfigError, PutAgentsByAgentIdDeviceConfigResponse, PutAgentsByAgentIdError, PutAgentsByAgentIdResponse, PutDevicesByDeviceIdData, PutDevicesByDeviceIdError, PutDevicesByDeviceIdFavoriteData, PutDevicesByDeviceIdFavoriteError, PutDevicesByDeviceIdFavoriteResponse, PutDevicesByDeviceIdResponse, PutDevicesByDeviceIdSharesByUserIdData, PutDevicesByDeviceIdSharesByUserIdError, PutDevicesByDeviceIdSharesByUserIdResponse, PutDevicesByDeviceIdSshData, PutDevicesByDeviceIdSshError, PutDevicesByDeviceIdSshResponse } from './types.gen';
 
 export type Options<TComposable extends Composable = '$fetch', TData extends TDataShape = TDataShape, ResT = unknown, DefaultT = undefined> = Options2<TComposable, TData, ResT, DefaultT> & {
     /**
@@ -631,7 +631,7 @@ export const postDevicesByDeviceIdPowerOn = <TComposable extends Composable = '$
 /**
  * Shut down a device
  *
- * Shuts the device down through the Linux agent running on it.
+ * Shuts the device down through the Linux agent running on it, or over SSH through its agent.
  */
 export const postDevicesByDeviceIdShutdown = <TComposable extends Composable = '$fetch', DefaultT extends PostDevicesByDeviceIdShutdownResponse = PostDevicesByDeviceIdShutdownResponse>(options: Options<TComposable, PostDevicesByDeviceIdShutdownData, PostDevicesByDeviceIdShutdownResponse, DefaultT>): RequestResult<TComposable, PostDevicesByDeviceIdShutdownResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostDevicesByDeviceIdShutdownResponse | DefaultT, PostDevicesByDeviceIdShutdownError, DefaultT>({
     security: [{ scheme: 'bearer', type: 'http' }],
@@ -642,7 +642,7 @@ export const postDevicesByDeviceIdShutdown = <TComposable extends Composable = '
 /**
  * Reboot a device
  *
- * Reboots the device through the Linux agent running on it.
+ * Reboots the device through the Linux agent running on it, or over SSH through its agent.
  */
 export const postDevicesByDeviceIdReboot = <TComposable extends Composable = '$fetch', DefaultT extends PostDevicesByDeviceIdRebootResponse = PostDevicesByDeviceIdRebootResponse>(options: Options<TComposable, PostDevicesByDeviceIdRebootData, PostDevicesByDeviceIdRebootResponse, DefaultT>): RequestResult<TComposable, PostDevicesByDeviceIdRebootResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostDevicesByDeviceIdRebootResponse | DefaultT, PostDevicesByDeviceIdRebootError, DefaultT>({
     security: [{ scheme: 'bearer', type: 'http' }],
@@ -727,6 +727,67 @@ export const putDevicesByDeviceIdSharesByUserId = <TComposable extends Composabl
     }
 });
 
+/**
+ * Remove a device's SSH login
+ */
+export const deleteDevicesByDeviceIdSsh = <TComposable extends Composable = '$fetch', DefaultT extends DeleteDevicesByDeviceIdSshResponse = DeleteDevicesByDeviceIdSshResponse>(options: Options<TComposable, DeleteDevicesByDeviceIdSshData, DeleteDevicesByDeviceIdSshResponse, DefaultT>): RequestResult<TComposable, DeleteDevicesByDeviceIdSshResponse | DefaultT, DefaultT> => (options.client ?? client).delete<TComposable, DeleteDevicesByDeviceIdSshResponse | DefaultT, DeleteDevicesByDeviceIdSshError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/ssh',
+    ...options
+});
+
+/**
+ * Get a device's SSH login
+ *
+ * The SSH login without its password or private key. Owner only.
+ */
+export const getDevicesByDeviceIdSsh = <TComposable extends Composable = '$fetch', DefaultT extends GetDevicesByDeviceIdSshResponse = GetDevicesByDeviceIdSshResponse>(options: Options<TComposable, GetDevicesByDeviceIdSshData, GetDevicesByDeviceIdSshResponse, DefaultT>): RequestResult<TComposable, GetDevicesByDeviceIdSshResponse | DefaultT, DefaultT> => (options.client ?? client).get<TComposable, GetDevicesByDeviceIdSshResponse | DefaultT, GetDevicesByDeviceIdSshError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/ssh',
+    ...options
+});
+
+/**
+ * Set a device's SSH login
+ *
+ * Stores the login the device's agent uses for shutdown and reboot over SSH. With `auth: { type: "generate_key" }` the server creates an Ed25519 key pair and returns the public key for the device's authorized_keys. Changing host or port un-trusts the host key.
+ */
+export const putDevicesByDeviceIdSsh = <TComposable extends Composable = '$fetch', DefaultT extends PutDevicesByDeviceIdSshResponse = PutDevicesByDeviceIdSshResponse>(options: Options<TComposable, PutDevicesByDeviceIdSshData, PutDevicesByDeviceIdSshResponse, DefaultT>): RequestResult<TComposable, PutDevicesByDeviceIdSshResponse | DefaultT, DefaultT> => (options.client ?? client).put<TComposable, PutDevicesByDeviceIdSshResponse | DefaultT, PutDevicesByDeviceIdSshError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/ssh',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
+/**
+ * Test a device's SSH login
+ *
+ * The device's agent logs in (without running anything) and reports the device's host key fingerprint. Trust it with `POST /ssh/trust` to allow shutdown and reboot.
+ */
+export const postDevicesByDeviceIdSshTest = <TComposable extends Composable = '$fetch', DefaultT extends PostDevicesByDeviceIdSshTestResponse = PostDevicesByDeviceIdSshTestResponse>(options: Options<TComposable, PostDevicesByDeviceIdSshTestData, PostDevicesByDeviceIdSshTestResponse, DefaultT>): RequestResult<TComposable, PostDevicesByDeviceIdSshTestResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostDevicesByDeviceIdSshTestResponse | DefaultT, PostDevicesByDeviceIdSshTestError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/ssh/test',
+    ...options
+});
+
+/**
+ * Trust a device's SSH host key
+ *
+ * Stores the fingerprint from a test login. Logins to another host key fail from then on.
+ */
+export const postDevicesByDeviceIdSshTrust = <TComposable extends Composable = '$fetch', DefaultT extends PostDevicesByDeviceIdSshTrustResponse = PostDevicesByDeviceIdSshTrustResponse>(options: Options<TComposable, PostDevicesByDeviceIdSshTrustData, PostDevicesByDeviceIdSshTrustResponse, DefaultT>): RequestResult<TComposable, PostDevicesByDeviceIdSshTrustResponse | DefaultT, DefaultT> => (options.client ?? client).post<TComposable, PostDevicesByDeviceIdSshTrustResponse | DefaultT, PostDevicesByDeviceIdSshTrustError, DefaultT>({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/devices/{deviceID}/ssh/trust',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+
 /**
  * List firmware releases
  *
diff --git a/app/api-client/types.gen.ts b/app/api-client/types.gen.ts
index 6fab9e1..0b251b1 100644
--- a/app/api-client/types.gen.ts
+++ b/app/api-client/types.gen.ts
@@ -3288,6 +3288,354 @@ export type PutDevicesByDeviceIdSharesByUserIdResponses = {
 
 export type PutDevicesByDeviceIdSharesByUserIdResponse = PutDevicesByDeviceIdSharesByUserIdResponses[keyof PutDevicesByDeviceIdSharesByUserIdResponses];
 
+export type DeleteDevicesByDeviceIdSshData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/ssh';
+};
+
+export type DeleteDevicesByDeviceIdSshErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Only the device's owner can do this
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Only the device\'s owner can do this';
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+};
+
+export type DeleteDevicesByDeviceIdSshError = DeleteDevicesByDeviceIdSshErrors[keyof DeleteDevicesByDeviceIdSshErrors];
+
+export type DeleteDevicesByDeviceIdSshResponses = {
+    /**
+     * SSH login removed
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'SSH login removed';
+        data: null;
+    };
+};
+
+export type DeleteDevicesByDeviceIdSshResponse = DeleteDevicesByDeviceIdSshResponses[keyof DeleteDevicesByDeviceIdSshResponses];
+
+export type GetDevicesByDeviceIdSshData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/ssh';
+};
+
+export type GetDevicesByDeviceIdSshErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Only the device's owner can do this
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Only the device\'s owner can do this';
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+};
+
+export type GetDevicesByDeviceIdSshError = GetDevicesByDeviceIdSshErrors[keyof GetDevicesByDeviceIdSshErrors];
+
+export type GetDevicesByDeviceIdSshResponses = {
+    /**
+     * SSH login retrieved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'SSH login retrieved';
+        data: {
+            configured: boolean;
+            host: string | null;
+            effective_host: string | null;
+            port: number | null;
+            username: string | null;
+            auth_type: 'password' | 'key' | null;
+            os: 'posix' | 'windows' | null;
+            sudo: boolean | null;
+            public_key: string | null;
+            host_key: string | null;
+            authorized_keys: string | null;
+            sudoers: string | null;
+            agent_ready: boolean;
+        };
+    };
+};
+
+export type GetDevicesByDeviceIdSshResponse = GetDevicesByDeviceIdSshResponses[keyof GetDevicesByDeviceIdSshResponses];
+
+export type PutDevicesByDeviceIdSshData = {
+    body: {
+        host?: string | null;
+        port?: number;
+        username: string;
+        os?: 'posix' | 'windows';
+        sudo?: boolean;
+        auth: {
+            type: 'password';
+            password: string;
+        } | {
+            type: 'generate_key';
+        } | {
+            type: 'keep';
+        };
+    };
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/ssh';
+};
+
+export type PutDevicesByDeviceIdSshErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Only the device's owner can do this
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Only the device\'s owner can do this';
+    };
+    /**
+     * Device not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device not found';
+    };
+};
+
+export type PutDevicesByDeviceIdSshError = PutDevicesByDeviceIdSshErrors[keyof PutDevicesByDeviceIdSshErrors];
+
+export type PutDevicesByDeviceIdSshResponses = {
+    /**
+     * SSH login saved
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'SSH login saved';
+        data: {
+            configured: boolean;
+            host: string | null;
+            effective_host: string | null;
+            port: number | null;
+            username: string | null;
+            auth_type: 'password' | 'key' | null;
+            os: 'posix' | 'windows' | null;
+            sudo: boolean | null;
+            public_key: string | null;
+            host_key: string | null;
+            authorized_keys: string | null;
+            sudoers: string | null;
+            agent_ready: boolean;
+        };
+    };
+};
+
+export type PutDevicesByDeviceIdSshResponse = PutDevicesByDeviceIdSshResponses[keyof PutDevicesByDeviceIdSshResponses];
+
+export type PostDevicesByDeviceIdSshTestData = {
+    body?: never;
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/ssh/test';
+};
+
+export type PostDevicesByDeviceIdSshTestErrors = {
+    /**
+     * Validation Error
+     */
+    400: {
+        success: false;
+        error: Array<unknown>;
+        data: unknown;
+    };
+    /**
+     * Only the device's owner can do this
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Only the device\'s owner can do this';
+    };
+    /**
+     * Device or SSH login not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device or SSH login not found';
+    };
+    /**
+     * The device's agent can't log in over SSH
+     */
+    409: {
+        success: false;
+        code: 409;
+        message: 'The device\'s agent can\'t log in over SSH';
+    };
+    /**
+     * The agent is offline
+     */
+    503: {
+        success: false;
+        code: 503;
+        message: 'The agent is offline';
+    };
+    /**
+     * The agent didn't answer in time
+     */
+    504: {
+        success: false;
+        code: 504;
+        message: 'The agent didn\'t answer in time';
+    };
+};
+
+export type PostDevicesByDeviceIdSshTestError = PostDevicesByDeviceIdSshTestErrors[keyof PostDevicesByDeviceIdSshTestErrors];
+
+export type PostDevicesByDeviceIdSshTestResponses = {
+    /**
+     * SSH login tested
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'SSH login tested';
+        data: {
+            online: boolean;
+            authenticated: boolean;
+            host_key: string | null;
+            trusted: boolean;
+            error: string | null;
+        };
+    };
+};
+
+export type PostDevicesByDeviceIdSshTestResponse = PostDevicesByDeviceIdSshTestResponses[keyof PostDevicesByDeviceIdSshTestResponses];
+
+export type PostDevicesByDeviceIdSshTrustData = {
+    body: {
+        host_key: string;
+    };
+    path: {
+        deviceID: number;
+    };
+    query?: never;
+    url: '/devices/{deviceID}/ssh/trust';
+};
+
+export type PostDevicesByDeviceIdSshTrustErrors = {
+    /**
+     * Bad Request: Syntax or validation error in request
+     */
+    400: {
+        success: false;
+        code: 400;
+        message: 'Bad Request: Syntax or validation error in request';
+    };
+    /**
+     * Only the device's owner can do this
+     */
+    403: {
+        success: false;
+        code: 403;
+        message: 'Only the device\'s owner can do this';
+    };
+    /**
+     * Device or SSH login not found
+     */
+    404: {
+        success: false;
+        code: 404;
+        message: 'Device or SSH login not found';
+    };
+};
+
+export type PostDevicesByDeviceIdSshTrustError = PostDevicesByDeviceIdSshTrustErrors[keyof PostDevicesByDeviceIdSshTrustErrors];
+
+export type PostDevicesByDeviceIdSshTrustResponses = {
+    /**
+     * Host key trusted
+     */
+    200: {
+        success: true;
+        code: 200;
+        message: 'Host key trusted';
+        data: {
+            configured: boolean;
+            host: string | null;
+            effective_host: string | null;
+            port: number | null;
+            username: string | null;
+            auth_type: 'password' | 'key' | null;
+            os: 'posix' | 'windows' | null;
+            sudo: boolean | null;
+            public_key: string | null;
+            host_key: string | null;
+            authorized_keys: string | null;
+            sudoers: string | null;
+            agent_ready: boolean;
+        };
+    };
+};
+
+export type PostDevicesByDeviceIdSshTrustResponse = PostDevicesByDeviceIdSshTrustResponses[keyof PostDevicesByDeviceIdSshTrustResponses];
+
 export type GetFirmwareData = {
     body?: never;
     path?: never;
diff --git a/app/api-client/zod.gen.ts b/app/api-client/zod.gen.ts
index a2b2c38..b052165 100644
--- a/app/api-client/zod.gen.ts
+++ b/app/api-client/zod.gen.ts
@@ -1591,6 +1591,148 @@ export const zPutDevicesByDeviceIdSharesByUserIdResponse = z.object({
     data: z.null()
 });
 
+export const zDeleteDevicesByDeviceIdSshPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * SSH login removed
+ */
+export const zDeleteDevicesByDeviceIdSshResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('SSH login removed'),
+    data: z.null()
+});
+
+export const zGetDevicesByDeviceIdSshPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * SSH login retrieved
+ */
+export const zGetDevicesByDeviceIdSshResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('SSH login retrieved'),
+    data: z.object({
+        configured: z.boolean(),
+        host: z.string().nullable(),
+        effective_host: z.string().nullable(),
+        port: z.number().nullable(),
+        username: z.string().nullable(),
+        auth_type: z.enum(['password', 'key']).nullable(),
+        os: z.enum(['posix', 'windows']).nullable(),
+        sudo: z.boolean().nullable(),
+        public_key: z.string().nullable(),
+        host_key: z.string().nullable(),
+        authorized_keys: z.string().nullable(),
+        sudoers: z.string().nullable(),
+        agent_ready: z.boolean()
+    })
+});
+
+export const zPutDevicesByDeviceIdSshBody = z.object({
+    host: z.string().max(253).nullish().default(null),
+    port: z.int().gte(1).lte(65535).optional().default(22),
+    username: z.string().min(1).max(64).regex(/^[A-Za-z0-9._@\\-]+$/),
+    os: z.enum(['posix', 'windows']).optional().default('posix'),
+    sudo: z.boolean().optional().default(true),
+    auth: z.union([
+        z.object({
+            type: z.literal('password'),
+            password: z.string().min(1).max(256)
+        }),
+        z.object({
+            type: z.literal('generate_key')
+        }),
+        z.object({
+            type: z.literal('keep')
+        })
+    ])
+});
+
+export const zPutDevicesByDeviceIdSshPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * SSH login saved
+ */
+export const zPutDevicesByDeviceIdSshResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('SSH login saved'),
+    data: z.object({
+        configured: z.boolean(),
+        host: z.string().nullable(),
+        effective_host: z.string().nullable(),
+        port: z.number().nullable(),
+        username: z.string().nullable(),
+        auth_type: z.enum(['password', 'key']).nullable(),
+        os: z.enum(['posix', 'windows']).nullable(),
+        sudo: z.boolean().nullable(),
+        public_key: z.string().nullable(),
+        host_key: z.string().nullable(),
+        authorized_keys: z.string().nullable(),
+        sudoers: z.string().nullable(),
+        agent_ready: z.boolean()
+    })
+});
+
+export const zPostDevicesByDeviceIdSshTestPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * SSH login tested
+ */
+export const zPostDevicesByDeviceIdSshTestResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('SSH login tested'),
+    data: z.object({
+        online: z.boolean(),
+        authenticated: z.boolean(),
+        host_key: z.string().nullable(),
+        trusted: z.boolean(),
+        error: z.string().nullable()
+    })
+});
+
+export const zPostDevicesByDeviceIdSshTrustBody = z.object({
+    host_key: z.string().regex(/^SHA256:[A-Za-z0-9+\/]{43}$/)
+});
+
+export const zPostDevicesByDeviceIdSshTrustPath = z.object({
+    deviceID: z.int().gt(0).lte(9007199254740991)
+});
+
+/**
+ * Host key trusted
+ */
+export const zPostDevicesByDeviceIdSshTrustResponse = z.object({
+    success: z.literal(true),
+    code: z.literal(200),
+    message: z.literal('Host key trusted'),
+    data: z.object({
+        configured: z.boolean(),
+        host: z.string().nullable(),
+        effective_host: z.string().nullable(),
+        port: z.number().nullable(),
+        username: z.string().nullable(),
+        auth_type: z.enum(['password', 'key']).nullable(),
+        os: z.enum(['posix', 'windows']).nullable(),
+        sudo: z.boolean().nullable(),
+        public_key: z.string().nullable(),
+        host_key: z.string().nullable(),
+        authorized_keys: z.string().nullable(),
+        sudoers: z.string().nullable(),
+        agent_ready: z.boolean()
+    })
+});
+
 /**
  * Firmware releases retrieved
  */
diff --git a/app/pages/dashboard/devices/[device_id].vue b/app/pages/dashboard/devices/[device_id].vue
index 02083ee..44404fe 100644
--- a/app/pages/dashboard/devices/[device_id].vue
+++ b/app/pages/dashboard/devices/[device_id].vue
@@ -97,6 +97,17 @@ function getRoutesConfig(): UseSubrouterPathDynamics.RoutesConfig {
 				};
 			},
 		};
+		routes[`${base}/ssh`] = {
+			isNavLink: true,
+			label: "SSH",
+			icon: "i-lucide-key-square",
+			getDynamicValues() {
+				return {
+					seoSettings: { title: `SSH · ${name}`, description: `SSH login of ${name}` },
+					breadcrumbItems: [{ label: name, to: base }, { label: "SSH" }],
+				};
+			},
+		};
 	}
 
 	return routes;
diff --git a/app/pages/dashboard/devices/[device_id]/ssh.vue b/app/pages/dashboard/devices/[device_id]/ssh.vue
new file mode 100644
index 0000000..21f40bf
--- /dev/null
+++ b/app/pages/dashboard/devices/[device_id]/ssh.vue
@@ -0,0 +1,318 @@
+<script setup lang="ts">
+/**
+ * The device's SSH login: the device's agent logs in to shut it down or reboot it. Owner only;
+ * the password or private key never comes back from the server.
+ */
+import type {
+	GetDevicesByDeviceIdSshResponses,
+	PostDevicesByDeviceIdSshTestResponses,
+	PutDevicesByDeviceIdSshData,
+} from "~/api-client";
+import type { Device, NewDevice } from "~/utils/types";
+
+type SshLogin = GetDevicesByDeviceIdSshResponses["200"]["data"];
+type TestResult = PostDevicesByDeviceIdSshTestResponses["200"]["data"];
+type SshBody = NonNullable<PutDevicesByDeviceIdSshData["body"]>;
+
+const toast = useToast();
+const device = useSubrouterInjectedData<Device, NewDevice>("device", true).inject();
+if (device.isNew || device.data.value.access_role !== "owner") {
+	throw createError({ statusCode: 403, statusMessage: "Only the device's owner can set up SSH" });
+}
+const deviceID = device.data.value.id;
+
+const login = await useAPIAsyncData<SshLogin | null>(`device-${deviceID}-ssh`, async () => {
+	const res = await useAPI((api) => api.getDevicesByDeviceIdSsh({ path: { deviceID } }));
+	return res.success ? res.data : null;
+});
+
+const form = reactive({
+	host: login.data.value?.host ?? "",
+	port: login.data.value?.port ?? 22,
+	username: login.data.value?.username ?? "",
+	os: login.data.value?.os ?? ("posix" as "posix" | "windows"),
+	sudo: login.data.value?.sudo ?? true,
+	auth: (login.data.value?.configured ? "keep" : "generate_key") as
+		| "generate_key"
+		| "password"
+		| "keep",
+	password: "",
+});
+
+const authItems = computed(() => [
+	...(login.data.value?.configured
+		? [
+				{
+					value: "keep",
+					label: "Keep the current",
+					description: login.data.value.auth_type === "key" ? "Key pair" : "Password",
+				},
+			]
+		: []),
+	{
+		value: "generate_key",
+		label: "New key pair",
+		description: "Recommended: the server creates an Ed25519 key",
+	},
+	{
+		value: "password",
+		label: "Password",
+		description: "Stored encrypted, only sent to the device's agent",
+	},
+]);
+
+const saving = ref(false);
+
+async function save() {
+	const body: SshBody = {
+		host: form.host.trim() || null,
+		port: Number(form.port) || 22,
+		username: form.username.trim(),
+		os: form.os,
+		sudo: form.sudo,
+		auth:
+			form.auth === "password"
+				? { type: "password", password: form.password }
+				: form.auth === "keep"
+					? { type: "keep" }
+					: { type: "generate_key" },
+	};
+	saving.value = true;
+	const res = await useAPI((api) => api.putDevicesByDeviceIdSsh({ path: { deviceID }, body }));
+	saving.value = false;
+	if (!res.success) {
+		toast.add({ title: "Couldn't save the SSH login", description: res.message, color: "error" });
+		return;
+	}
+	login.data.value = res.data;
+	form.auth = "keep";
+	form.password = "";
+	test.value = null;
+	toast.add({ title: "SSH login saved", color: "success", icon: "i-lucide-check" });
+}
+
+// --- Test and trust ------------------------------------------------------------------------------
+
+const test = ref<TestResult | null>(null);
+const testing = ref(false);
+
+async function runTest() {
+	testing.value = true;
+	const res = await useAPI((api) => api.postDevicesByDeviceIdSshTest({ path: { deviceID } }));
+	testing.value = false;
+	if (!res.success) {
+		toast.add({ title: "Couldn't test the login", description: res.message, color: "error" });
+		return;
+	}
+	test.value = res.data;
+}
+
+async function trust() {
+	if (!test.value?.host_key) return;
+	const res = await useAPI((api) =>
+		api.postDevicesByDeviceIdSshTrust({
+			path: { deviceID },
+			body: { host_key: test.value?.host_key as string },
+		}),
+	);
+	if (!res.success) {
+		toast.add({ title: "Couldn't trust the host key", description: res.message, color: "error" });
+		return;
+	}
+	login.data.value = res.data;
+	test.value = { ...test.value, trusted: true };
+	toast.add({
+		title: "Host key trusted",
+		description: "Shutdown and reboot now work over SSH.",
+		color: "success",
+	});
+	await device.refresh?.();
+}
+
+const TEST_ERRORS: Record<string, string> = {
+	host_key_mismatch:
+		"The device presents a different host key than the trusted one. If you reinstalled it, trust the new key; otherwise someone may be intercepting the connection.",
+	auth_failed:
+		"The device refused the login. Check the username and the password or authorized_keys.",
+};
+
+const removeOpen = ref(false);
+
+async function remove() {
+	const res = await useAPI((api) => api.deleteDevicesByDeviceIdSsh({ path: { deviceID } }));
+	if (!res.success) {
+		toast.add({ title: "Couldn't remove the SSH login", description: res.message, color: "error" });
+		throw new Error(res.message);
+	}
+	toast.add({ title: "SSH login removed", color: "success" });
+	await login.refresh();
+	test.value = null;
+	await device.refresh?.();
+}
+
+async function copy(text: string) {
+	try {
+		await navigator.clipboard.writeText(text);
+		toast.add({ title: "Copied to clipboard", icon: "i-lucide-clipboard-check", color: "success" });
+	} catch {
+		toast.add({
+			title: "Copy failed",
+			description: "Select the text and copy it manually.",
+			color: "warning",
+		});
+	}
+}
+</script>
+
+<template>
+	<div class="mx-auto w-full space-y-6 lg:w-3xl">
+		<DashboardSectionCard
+			title="SSH login"
+			description="The device's agent logs in over SSH to shut it down or reboot it"
+			icon="i-lucide-key-square"
+		>
+			<UAlert
+				v-if="login.data.value && !login.data.value.agent_ready"
+				class="mb-6"
+				color="warning"
+				variant="subtle"
+				icon="i-lucide-radio-tower"
+				title="This device's agent can't log in over SSH"
+				description="SSH needs a NetIgnite Linux agent in Wake-on-LAN mode in the device's network, assigned as the device's agent (General tab), and online."
+			/>
+
+			<form class="space-y-5" @submit.prevent="save">
+				<div class="grid gap-4 sm:grid-cols-[1fr_8rem]">
+					<UFormField label="Host" :description="`Empty: the status address${login.data.value?.effective_host && !form.host ? ` (${login.data.value.effective_host})` : ''}`">
+						<UInput v-model="form.host" placeholder="nas.local or 192.168.1.20" class="w-full" />
+					</UFormField>
+					<UFormField label="Port"><UInput v-model.number="form.port" type="number" min="1" max="65535" class="w-full" /></UFormField>
+				</div>
+				<UFormField label="Username" required>
+					<UInput v-model="form.username" placeholder="admin" class="w-full sm:w-80" autocomplete="off" />
+				</UFormField>
+				<UFormField label="Operating system">
+					<URadioGroup
+						v-model="form.os"
+						orientation="horizontal"
+						:items="[
+							{ value: 'posix', label: 'Linux, macOS, BSD' },
+							{ value: 'windows', label: 'Windows (OpenSSH)' },
+						]"
+					/>
+				</UFormField>
+				<USwitch
+					v-if="form.os === 'posix'"
+					v-model="form.sudo"
+					label="Use sudo"
+					description="Runs shutdown with sudo -n (not needed for root)."
+				/>
+				<UFormField label="Authentication">
+					<URadioGroup v-model="form.auth" :items="authItems" variant="card" class="w-full" />
+				</UFormField>
+				<UFormField v-if="form.auth === 'password'" label="Password" required>
+					<UInput v-model="form.password" type="password" class="w-full sm:w-80" autocomplete="new-password" />
+				</UFormField>
+				<div class="flex justify-end">
+					<UButton type="submit" :label="login.data.value?.configured ? 'Save' : 'Save login'" icon="i-lucide-save" :loading="saving" />
+				</div>
+			</form>
+		</DashboardSectionCard>
+
+		<DashboardSectionCard
+			v-if="login.data.value?.configured && (login.data.value.authorized_keys || login.data.value.sudoers)"
+			title="Prepare the device"
+			description="Run these on the device once"
+			icon="i-lucide-list-checks"
+		>
+			<div class="space-y-5 text-sm">
+				<div v-if="login.data.value.authorized_keys">
+					<p class="text-slate-300">
+						Add this line to <code class="font-mono">~/.ssh/authorized_keys</code> of
+						<strong>{{ login.data.value.username }}</strong>:
+					</p>
+					<div class="mt-2 flex items-start gap-2 rounded-lg border border-slate-800 bg-slate-900/60 p-3">
+						<code class="flex-1 break-all font-mono text-xs text-slate-200">{{ login.data.value.authorized_keys }}</code>
+						<UButton icon="i-lucide-copy" color="neutral" variant="ghost" size="sm" aria-label="Copy" @click="copy(login.data.value.authorized_keys as string)" />
+					</div>
+				</div>
+				<div v-if="login.data.value.sudoers">
+					<p class="text-slate-300">
+						Allow only shutdown and reboot without a password:
+						<code class="font-mono">sudo visudo -f /etc/sudoers.d/netignite</code>, then add:
+					</p>
+					<div class="mt-2 flex items-start gap-2 rounded-lg border border-slate-800 bg-slate-900/60 p-3">
+						<code class="flex-1 break-all font-mono text-xs text-slate-200">{{ login.data.value.sudoers }}</code>
+						<UButton icon="i-lucide-copy" color="neutral" variant="ghost" size="sm" aria-label="Copy" @click="copy(login.data.value.sudoers as string)" />
+					</div>
+				</div>
+			</div>
+		</DashboardSectionCard>
+
+		<DashboardSectionCard
+			v-if="login.data.value?.configured"
+			title="Host key"
+			description="Trusted on first use, so nobody can impersonate the device later"
+			icon="i-lucide-fingerprint"
+		>
+			<div class="space-y-4">
+				<p class="text-sm text-slate-300">
+					Trusted key:
+					<code v-if="login.data.value.host_key" class="break-all font-mono text-xs text-emerald-300">{{ login.data.value.host_key }}</code>
+					<span v-else class="text-amber-300">none yet. Shutdown and reboot over SSH work after you trust it.</span>
+				</p>
+
+				<UButton
+					label="Test login"
+					icon="i-lucide-plug-zap"
+					color="neutral"
+					variant="outline"
+					:loading="testing"
+					:disabled="!login.data.value.agent_ready"
+					@click="runTest"
+				/>
+
+				<template v-if="test">
+					<UAlert
+						v-if="!test.online"
+						color="error"
+						variant="subtle"
+						icon="i-lucide-circle-x"
+						title="The device didn't answer on its SSH port"
+					/>
+					<template v-else>
+						<UAlert
+							:color="test.authenticated && test.trusted ? 'success' : test.authenticated ? 'info' : 'warning'"
+							variant="subtle"
+							:icon="test.authenticated ? 'i-lucide-circle-check' : 'i-lucide-triangle-alert'"
+							:title="test.authenticated ? 'Login works' : 'Login failed'"
+							:description="test.error ? (TEST_ERRORS[test.error] ?? test.error) : undefined"
+						/>
+						<div v-if="test.host_key && !test.trusted" class="rounded-lg border border-slate-800 bg-slate-900/60 p-4 text-sm">
+							<p class="text-slate-300">The device presented this host key:</p>
+							<code class="mt-2 block break-all font-mono text-xs text-white">{{ test.host_key }}</code>
+							<p class="mt-2 text-xs text-slate-400">
+								Compare it on the device, e.g. <code class="font-mono">ssh-keygen -lf /etc/ssh/ssh_host_ed25519_key.pub</code>.
+							</p>
+							<UButton class="mt-3" label="Trust this host key" icon="i-lucide-shield-check" @click="trust" />
+						</div>
+					</template>
+				</template>
+			</div>
+		</DashboardSectionCard>
+
+		<DashboardSectionCard v-if="login.data.value?.configured" title="Remove" icon="i-lucide-trash-2" tone="danger">
+			<div class="flex flex-col gap-4 md:flex-row md:items-center">
+				<p class="flex-1 text-sm text-slate-400">Deletes the stored password or key. Remove the key from the device too.</p>
+				<UButton label="Remove SSH login" color="error" variant="soft" icon="i-lucide-trash-2" @click="removeOpen = true" />
+			</div>
+		</DashboardSectionCard>
+
+		<DashboardDeleteModal
+			v-model:open="removeOpen"
+			title="Remove SSH Login"
+			warning-text="Shutdown and reboot over SSH stop working until you set a new login."
+			:on-delete="remove"
+		/>
+	</div>
+</template>
diff --git a/app/utils/netignite.ts b/app/utils/netignite.ts
index 1f84953..418dc4b 100644
--- a/app/utils/netignite.ts
+++ b/app/utils/netignite.ts
@@ -34,7 +34,8 @@ export const StatusMethods: Record<
 	ipv6: { label: "IPv6 address", description: "The agent pings the device's IPv6 address." },
 	ssh: {
 		label: "SSH port",
-		description: "The agent checks whether the SSH port (22, or the port below) accepts connections.",
+		description:
+			"The agent checks whether the SSH port (22, or the port below) accepts connections. With an SSH login (SSH tab), it can also shut the device down and reboot it.",
 	},
 	host_agent: {
 		label: "Linux agent on the device",
diff --git a/drizzle/migrations/0002_lethal_lyja.sql b/drizzle/migrations/0002_lethal_lyja.sql
new file mode 100644
index 0000000..91f4065
--- /dev/null
+++ b/drizzle/migrations/0002_lethal_lyja.sql
@@ -0,0 +1,14 @@
+CREATE TABLE `device_ssh_credentials` (
+	`device_id` integer PRIMARY KEY NOT NULL,
+	`host` text,
+	`port` integer DEFAULT 22 NOT NULL,
+	`username` text NOT NULL,
+	`auth_type` text NOT NULL,
+	`secret_encrypted` text NOT NULL,
+	`public_key` text,
+	`os` text DEFAULT 'posix' NOT NULL,
+	`sudo` integer DEFAULT true NOT NULL,
+	`host_key` text,
+	`created_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	FOREIGN KEY (`device_id`) REFERENCES `devices`(`id`) ON UPDATE no action ON DELETE cascade
+);
diff --git a/drizzle/migrations/meta/0002_snapshot.json b/drizzle/migrations/meta/0002_snapshot.json
new file mode 100644
index 0000000..c9b167f
--- /dev/null
+++ b/drizzle/migrations/meta/0002_snapshot.json
@@ -0,0 +1,1238 @@
+{
+  "version": "6",
+  "dialect": "sqlite",
+  "id": "4209a2e4-0f59-4dbe-aa63-0f5af3d8df6a",
+  "prevId": "935cfe0b-c3a1-4812-b68c-42c08337cee4",
+  "tables": {
+    "agent_enrollments": {
+      "name": "agent_enrollments",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "hashed_token": {
+          "name": "hashed_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "agent_id": {
+          "name": "agent_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "agent_enrollments_agent_id_agents_id_fk": {
+          "name": "agent_enrollments_agent_id_agents_id_fk",
+          "tableFrom": "agent_enrollments",
+          "tableTo": "agents",
+          "columnsFrom": [
+            "agent_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "agent_enrollments_created_by_user_id_users_id_fk": {
+          "name": "agent_enrollments_created_by_user_id_users_id_fk",
+          "tableFrom": "agent_enrollments",
+          "tableTo": "users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "agents": {
+      "name": "agents",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "''"
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_id": {
+          "name": "token_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hashed_secret": {
+          "name": "hashed_secret",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "capabilities": {
+          "name": "capabilities",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'[]'"
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "info": {
+          "name": "info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_seen_at": {
+          "name": "last_seen_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "agents_token_id_unique": {
+          "name": "agents_token_id_unique",
+          "columns": [
+            "token_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "agents_owner_id_users_id_fk": {
+          "name": "agents_owner_id_users_id_fk",
+          "tableFrom": "agents",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "hashed_token": {
+          "name": "hashed_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_role": {
+          "name": "user_role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "device_favorites": {
+      "name": "device_favorites",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_id": {
+          "name": "device_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "device_favorites_user_id_users_id_fk": {
+          "name": "device_favorites_user_id_users_id_fk",
+          "tableFrom": "device_favorites",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "device_favorites_device_id_devices_id_fk": {
+          "name": "device_favorites_device_id_devices_id_fk",
+          "tableFrom": "device_favorites",
+          "tableTo": "devices",
+          "columnsFrom": [
+            "device_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "device_favorites_user_id_device_id_pk": {
+          "columns": [
+            "user_id",
+            "device_id"
+          ],
+          "name": "device_favorites_user_id_device_id_pk"
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "device_shares": {
+      "name": "device_shares",
+      "columns": {
+        "device_id": {
+          "name": "device_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "device_shares_user_id_idx": {
+          "name": "device_shares_user_id_idx",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "device_shares_device_id_devices_id_fk": {
+          "name": "device_shares_device_id_devices_id_fk",
+          "tableFrom": "device_shares",
+          "tableTo": "devices",
+          "columnsFrom": [
+            "device_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "device_shares_user_id_users_id_fk": {
+          "name": "device_shares_user_id_users_id_fk",
+          "tableFrom": "device_shares",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "device_shares_created_by_user_id_users_id_fk": {
+          "name": "device_shares_created_by_user_id_users_id_fk",
+          "tableFrom": "device_shares",
+          "tableTo": "users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "device_shares_device_id_user_id_pk": {
+          "columns": [
+            "device_id",
+            "user_id"
+          ],
+          "name": "device_shares_device_id_user_id_pk"
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "device_ssh_credentials": {
+      "name": "device_ssh_credentials",
+      "columns": {
+        "device_id": {
+          "name": "device_id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host": {
+          "name": "host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "port": {
+          "name": "port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 22
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "secret_encrypted": {
+          "name": "secret_encrypted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "os": {
+          "name": "os",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'posix'"
+        },
+        "sudo": {
+          "name": "sudo",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "host_key": {
+          "name": "host_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "device_ssh_credentials_device_id_devices_id_fk": {
+          "name": "device_ssh_credentials_device_id_devices_id_fk",
+          "tableFrom": "device_ssh_credentials",
+          "tableTo": "devices",
+          "columnsFrom": [
+            "device_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "devices": {
+      "name": "devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "''"
+        },
+        "mac_address": {
+          "name": "mac_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "wol_port": {
+          "name": "wol_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 9
+        },
+        "agent_id": {
+          "name": "agent_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_method": {
+          "name": "status_method",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'none'"
+        },
+        "status_address": {
+          "name": "status_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_tcp_port": {
+          "name": "status_tcp_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_agent_id": {
+          "name": "host_agent_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "devices_owner_id_idx": {
+          "name": "devices_owner_id_idx",
+          "columns": [
+            "owner_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "devices_owner_id_users_id_fk": {
+          "name": "devices_owner_id_users_id_fk",
+          "tableFrom": "devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "devices_agent_id_agents_id_fk": {
+          "name": "devices_agent_id_agents_id_fk",
+          "tableFrom": "devices",
+          "tableTo": "agents",
+          "columnsFrom": [
+            "agent_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "devices_host_agent_id_agents_id_fk": {
+          "name": "devices_host_agent_id_agents_id_fk",
+          "tableFrom": "devices",
+          "tableTo": "agents",
+          "columnsFrom": [
+            "host_agent_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "firmware_releases": {
+      "name": "firmware_releases",
+      "columns": {
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "prerelease": {
+          "name": "prerelease",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "published_at": {
+          "name": "published_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "release_url": {
+          "name": "release_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "''"
+        },
+        "manifest": {
+          "name": "manifest",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "signature_verified": {
+          "name": "signature_verified",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "metadata": {
+      "name": "metadata",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "password_resets": {
+      "name": "password_resets",
+      "columns": {
+        "token": {
+          "name": "token",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "password_resets_user_id_users_id_fk": {
+          "name": "password_resets_user_id_users_id_fk",
+          "tableFrom": "password_resets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "scheduled_tasks": {
+      "name": "scheduled_tasks",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "function": {
+          "name": "function",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "args": {
+          "name": "args",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "autoDelete": {
+          "name": "autoDelete",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "0"
+        },
+        "storeLogs": {
+          "name": "storeLogs",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "0"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'pending'"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "finished_at": {
+          "name": "finished_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "result": {
+          "name": "result",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "message": {
+          "name": "message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "scheduled_tasks_created_by_user_id_users_id_fk": {
+          "name": "scheduled_tasks_created_by_user_id_users_id_fk",
+          "tableFrom": "scheduled_tasks",
+          "tableTo": "users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "scheduled_tasks_paused_state": {
+      "name": "scheduled_tasks_paused_state",
+      "columns": {
+        "task_id": {
+          "name": "task_id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "next_step_to_execute": {
+          "name": "next_step_to_execute",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "scheduled_tasks_paused_state_task_id_scheduled_tasks_id_fk": {
+          "name": "scheduled_tasks_paused_state_task_id_scheduled_tasks_id_fk",
+          "tableFrom": "scheduled_tasks_paused_state",
+          "tableTo": "scheduled_tasks",
+          "columnsFrom": [
+            "task_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "hashed_token": {
+          "name": "hashed_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_role": {
+          "name": "user_role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "user_preferences_user_id_key_unique": {
+          "name": "user_preferences_user_id_key_unique",
+          "columns": [
+            "user_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'user'"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(unixepoch() * 1000)"
+        }
+      },
+      "indexes": {
+        "users_username_unique": {
+          "name": "users_username_unique",
+          "columns": [
+            "username"
+          ],
+          "isUnique": true
+        },
+        "users_email_unique": {
+          "name": "users_email_unique",
+          "columns": [
+            "email"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    }
+  },
+  "views": {},
+  "enums": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/migrations/meta/_journal.json b/drizzle/migrations/meta/_journal.json
index 7c51bb6..65ee615 100644
--- a/drizzle/migrations/meta/_journal.json
+++ b/drizzle/migrations/meta/_journal.json
@@ -15,6 +15,13 @@
       "when": 1792530394007,
       "tag": "0001_glorious_silver_fox",
       "breakpoints": true
+    },
+    {
+      "idx": 2,
+      "version": "6",
+      "when": 1792565522431,
+      "tag": "0002_lethal_lyja",
+      "breakpoints": true
     }
   ]
 }
\ No newline at end of file
diff --git a/example.env b/example.env
index c6b8849..9eac92e 100644
--- a/example.env
+++ b/example.env
@@ -14,6 +14,9 @@ NETIGNITE_CONFIG_BASE_DIR=./config
 
 NETIGNITE_APP_URL=http://localhost:18232
 
+# Encrypts SSH credentials in the database. Default: a key generated in config/secrets.key (back it up).
+# NETIGNITE_SECRETS_KEY=
+
 # ESP32 firmware for the web installer, synced from GitHub releases every 6 hours.
 NETIGNITE_FIRMWARE_SYNC=true
 NETIGNITE_FIRMWARE_REPO=NetIgnite-project/Agent-ESP32
diff --git a/server/lib/agents/protocol.ts b/server/lib/agents/protocol.ts
index 318b03e..7cc6784 100644
--- a/server/lib/agents/protocol.ts
+++ b/server/lib/agents/protocol.ts
@@ -41,6 +41,8 @@ export namespace AgentProtocol {
 		// REBOOT, FACTORY_RESET
 		"device.reboot",
 		"device.reset",
+		// SSH_CHECK, SSH_EXEC (logs into devices in the agent's network)
+		"ssh",
 	] as const;
 	export type Capability = (typeof Capabilities)[number];
 
@@ -63,6 +65,27 @@ export namespace AgentProtocol {
 
 	export type LogLevel = "error" | "warn" | "info" | "debug";
 
+	/**
+	 * An SSH login for SSH_CHECK / SSH_EXEC. `host_key`: the trusted fingerprint (`SHA256:…`); the
+	 * agent aborts before sending credentials if the server's key differs.
+	 */
+	export type SshTarget = {
+		host: string;
+		port: number;
+		username: string;
+		auth: { type: "password"; password: string } | { type: "key"; private_key: string };
+		host_key: string | null;
+	};
+
+	export type SshCheckResult = {
+		/** Whether the SSH port accepted the connection. */
+		online: boolean;
+		host_key?: string;
+		authenticated?: boolean;
+		/** `host_key_mismatch`, `auth_failed` or a short message. */
+		error?: string;
+	};
+
 	/** CONFIG_SET: only the fields present change. Server URL and IP changes are tried first. */
 	export type ConfigSet = {
 		server_url?: string;
@@ -162,6 +185,21 @@ export namespace AgentProtocol {
 		REBOOT: { req: Record<string, never>; res: Record<string, never> };
 		/** Erase Wi-Fi, server and credential, then restart. The agent has to be set up again. */
 		FACTORY_RESET: { req: Record<string, never>; res: Record<string, never> };
+		/** Log in over SSH without opening a session (forced commands never run). */
+		SSH_CHECK: { req: SshTarget; res: SshCheckResult };
+		/**
+		 * Log in (only with a trusted host key) and run the fixed shutdown or reboot command for the
+		 * OS: `[sudo -n ]shutdown -h|-r now`, or `shutdown /s|/r /t 0`.
+		 */
+		SSH_EXEC: {
+			req: SshTarget & {
+				host_key: string;
+				action: "shutdown" | "reboot";
+				os: "posix" | "windows";
+				sudo: boolean;
+			};
+			res: Record<string, never>;
+		};
 	}
 	export type Command = keyof Commands;
 
@@ -189,6 +227,9 @@ export namespace AgentProtocol {
 				return "device.reboot";
 			case "FACTORY_RESET":
 				return "device.reset";
+			case "SSH_CHECK":
+			case "SSH_EXEC":
+				return "ssh";
 			case "STATUS": {
 				const { target } = payload as Commands["STATUS"]["req"];
 				if (target.type === "link_local") return "status.link_local";
diff --git a/server/lib/api/utils/shared-models/netigniteData.ts b/server/lib/api/utils/shared-models/netigniteData.ts
index ca074db..751494b 100644
--- a/server/lib/api/utils/shared-models/netigniteData.ts
+++ b/server/lib/api/utils/shared-models/netigniteData.ts
@@ -40,6 +40,16 @@ export namespace DeviceSettings {
 		.transform((mac) => mac.toUpperCase().replaceAll("-", ":"));
 
 	export const WolPort = z.number().int().min(1).max(65535);
+
+	/** `password`, or `key`: an Ed25519 key pair the server generated. */
+	export const SshAuthTypes = ["password", "key"] as const;
+	export const SshAuthType = z.enum(SshAuthTypes);
+	export type SshAuthType = z.infer<typeof SshAuthType>;
+
+	/** Which shutdown command the agent runs: `shutdown -h now` (POSIX) or `shutdown /s /t 0`. */
+	export const SshOperatingSystems = ["posix", "windows"] as const;
+	export const SshOperatingSystem = z.enum(SshOperatingSystems);
+	export type SshOperatingSystem = z.infer<typeof SshOperatingSystem>;
 }
 
 export namespace ShareSettings {
diff --git a/server/lib/api/versions/v1/routes/devices/index.ts b/server/lib/api/versions/v1/routes/devices/index.ts
index 5814bbf..4292da1 100644
--- a/server/lib/api/versions/v1/routes/devices/index.ts
+++ b/server/lib/api/versions/v1/routes/devices/index.ts
@@ -3,10 +3,12 @@ import type { Context } from "hono";
 import { Hono } from "hono";
 import { validator } from "hono-openapi";
 import z from "zod";
+import { AgentRequestError } from "../../../../../agents/connection";
 import { DB } from "../../../../../db";
 import { DeviceActionError, DeviceActions } from "../../../../../devices/actions";
 import { DevicePermissions } from "../../../../../devices/permissions";
 import { DeviceStatusService } from "../../../../../devices/status";
+import { SshCredentialError, SshCredentials } from "../../../../../ssh/credentials";
 import { APIResponse } from "../../../../utils/api-res";
 import { APIResponseSpec, APIRouteSpec } from "../../../../utils/specHelpers";
 import { DOCS_TAGS } from "../../docs";
@@ -55,6 +57,7 @@ async function toDeviceResponses(userID: number, devices: DevicePermissions.Devi
 	const agents = await getAgentSummaries(
 		devices.flatMap((device) => [device.agent_id, device.host_agent_id]),
 	);
+	const sshTrusted = SshCredentials.trustedDeviceIDs(devices.map((device) => device.id));
 	const favorites = new Set(
 		(
 			await DB.instance()
@@ -89,7 +92,7 @@ async function toDeviceResponses(userID: number, devices: DevicePermissions.Devi
 			favorite: favorites.has(device.id),
 			status: DeviceStatusService.get(device.id),
 			actions: DevicePermissions.can(device.access_role, "power")
-				? DeviceActions.availableActions(device)
+				? DeviceActions.availableActions(device, sshTrusted.has(device.id))
 				: { power_on: false, shutdown: false, reboot: false },
 		}),
 	);
@@ -372,14 +375,14 @@ powerRoute(
 powerRoute(
 	"shutdown",
 	"Shut down a device",
-	"Shuts the device down through the Linux agent running on it.",
+	"Shuts the device down through the Linux agent running on it, or over SSH through its agent.",
 	(device) => DeviceActions.hostControl(device, "shutdown"),
 	"Shutdown requested",
 );
 powerRoute(
 	"reboot",
 	"Reboot a device",
-	"Reboots the device through the Linux agent running on it.",
+	"Reboots the device through the Linux agent running on it, or over SSH through its agent.",
 	(device) => DeviceActions.hostControl(device, "reboot"),
 	"Reboot requested",
 );
@@ -636,3 +639,200 @@ router.delete(
 		return APIResponse.successNoData(c, "Share removed");
 	},
 );
+
+// --- SSH login (owner only) ---------------------------------------------------------------------
+
+function toSshResponse(device: DB.Models.Device): DevicesModel.Ssh.Response {
+	const credential = SshCredentials.get(device.id);
+	const agentReady = SshCredentials.agentFor(device) !== null;
+	if (!credential) {
+		return {
+			configured: false,
+			host: null,
+			effective_host: device.status_address,
+			port: null,
+			username: null,
+			auth_type: null,
+			os: null,
+			sudo: null,
+			public_key: null,
+			host_key: null,
+			authorized_keys: null,
+			sudoers: null,
+			agent_ready: agentReady,
+		};
+	}
+	return {
+		configured: true,
+		host: credential.host,
+		effective_host: SshCredentials.host(device, credential),
+		port: credential.port,
+		username: credential.username,
+		auth_type: credential.auth_type,
+		os: credential.os,
+		sudo: credential.sudo,
+		public_key: credential.public_key,
+		host_key: credential.host_key,
+		...SshCredentials.setupHints(credential),
+		agent_ready: agentReady,
+	};
+}
+
+router.get(
+	"/:deviceID/ssh",
+
+	APIRouteSpec.authenticated({
+		summary: "Get a device's SSH login",
+		description: "The SSH login without its password or private key. Owner only.",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("SSH login retrieved", DevicesModel.Ssh.Response),
+			APIResponseSpec.forbidden("Only the device's owner can do this"),
+			APIResponseSpec.notFound("Device not found"),
+		),
+	}),
+
+	async (c) => {
+		const device = getDevice(c);
+		if (!DevicePermissions.can(device.access_role, "manage")) return forbidden(c, "manage");
+		return APIResponse.success(c, "SSH login retrieved", toSshResponse(device));
+	},
+);
+
+router.put(
+	"/:deviceID/ssh",
+
+	APIRouteSpec.authenticated({
+		summary: "Set a device's SSH login",
+		description:
+			"Stores the login the device's agent uses for shutdown and reboot over SSH. With " +
+			'`auth: { type: "generate_key" }` the server creates an Ed25519 key pair and returns the public key ' +
+			"for the device's authorized_keys. Changing host or port un-trusts the host key.",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.success("SSH login saved", DevicesModel.Ssh.Response),
+			APIResponseSpec.forbidden("Only the device's owner can do this"),
+			APIResponseSpec.notFound("Device not found"),
+		),
+	}),
+
+	validator("json", DevicesModel.Ssh.Body),
+
+	async (c) => {
+		const device = getDevice(c);
+		if (!DevicePermissions.can(device.access_role, "manage")) return forbidden(c, "manage");
+
+		const body = c.req.valid("json");
+		if (!body.host && !device.status_address) {
+			return APIResponse.badRequest(c, "Enter the device's host name or IP address");
+		}
+		try {
+			SshCredentials.save(device, body);
+		} catch (error) {
+			if (error instanceof SshCredentialError) return APIResponse.badRequest(c, error.message);
+			throw error;
+		}
+		return APIResponse.success(c, "SSH login saved", toSshResponse(device));
+	},
+);
+
+router.delete(
+	"/:deviceID/ssh",
+
+	APIRouteSpec.authenticated({
+		summary: "Remove a device's SSH login",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.successNoData("SSH login removed"),
+			APIResponseSpec.forbidden("Only the device's owner can do this"),
+			APIResponseSpec.notFound("Device not found"),
+		),
+	}),
+
+	async (c) => {
+		const device = getDevice(c);
+		if (!DevicePermissions.can(device.access_role, "manage")) return forbidden(c, "manage");
+		SshCredentials.delete(device.id);
+		return APIResponse.successNoData(c, "SSH login removed");
+	},
+);
+
+router.post(
+	"/:deviceID/ssh/test",
+
+	APIRouteSpec.authenticated({
+		summary: "Test a device's SSH login",
+		description:
+			"The device's agent logs in (without running anything) and reports the device's host key " +
+			"fingerprint. Trust it with `POST /ssh/trust` to allow shutdown and reboot.",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeBasic(
+			APIResponseSpec.success("SSH login tested", DevicesModel.Ssh.TestResponse),
+			APIResponseSpec.forbidden("Only the device's owner can do this"),
+			APIResponseSpec.notFound("Device or SSH login not found"),
+			APIResponseSpec.conflict("The device's agent can't log in over SSH"),
+			APIResponseSpec.serviceUnavailable("The agent is offline"),
+			APIResponseSpec.gatewayTimeout("The agent didn't answer in time"),
+		),
+	}),
+
+	async (c) => {
+		const device = getDevice(c);
+		if (!DevicePermissions.can(device.access_role, "manage")) return forbidden(c, "manage");
+
+		const credential = SshCredentials.get(device.id);
+		const target = credential ? SshCredentials.target(device, credential) : null;
+		if (!credential || !target) return APIResponse.notFound(c, "SSH login not found");
+
+		const agent = SshCredentials.agentFor(device);
+		if (!agent) {
+			return device.agent_id === null
+				? APIResponse.conflict(c, "No agent is assigned to this device")
+				: APIResponse.serviceUnavailable(c, "The device's agent is offline or can't log in over SSH");
+		}
+
+		try {
+			const result = await agent.request("SSH_CHECK", target, 10_000);
+			return APIResponse.success(c, "SSH login tested", {
+				online: result.online,
+				authenticated: result.authenticated ?? false,
+				host_key: result.host_key ?? null,
+				trusted: !!result.host_key && result.host_key === credential.host_key,
+				error: result.error ?? null,
+			} satisfies DevicesModel.Ssh.TestResponse);
+		} catch (error) {
+			if (!(error instanceof AgentRequestError)) throw error;
+			if (error.reason === "timeout")
+				return APIResponse.gatewayTimeout(c, "The agent didn't answer in time");
+			if (error.reason === "offline") return APIResponse.serviceUnavailable(c, "The agent is offline");
+			return APIResponse.badGateway(c, error.message);
+		}
+	},
+);
+
+router.post(
+	"/:deviceID/ssh/trust",
+
+	APIRouteSpec.authenticated({
+		summary: "Trust a device's SSH host key",
+		description:
+			"Stores the fingerprint from a test login. Logins to another host key fail from then on.",
+		tags: [DOCS_TAGS.DEVICES],
+		responses: APIResponseSpec.describeWithWrongInputs(
+			APIResponseSpec.success("Host key trusted", DevicesModel.Ssh.Response),
+			APIResponseSpec.forbidden("Only the device's owner can do this"),
+			APIResponseSpec.notFound("Device or SSH login not found"),
+		),
+	}),
+
+	validator("json", DevicesModel.Ssh.TrustBody),
+
+	async (c) => {
+		const device = getDevice(c);
+		if (!DevicePermissions.can(device.access_role, "manage")) return forbidden(c, "manage");
+		if (!SshCredentials.get(device.id)) return APIResponse.notFound(c, "SSH login not found");
+
+		SshCredentials.trust(device.id, c.req.valid("json").host_key);
+		return APIResponse.success(c, "Host key trusted", toSshResponse(device));
+	},
+);
diff --git a/server/lib/api/versions/v1/routes/devices/model.ts b/server/lib/api/versions/v1/routes/devices/model.ts
index 3a2ba4f..e0d8dab 100644
--- a/server/lib/api/versions/v1/routes/devices/model.ts
+++ b/server/lib/api/versions/v1/routes/devices/model.ts
@@ -127,3 +127,76 @@ export namespace DevicesModel {
 		export const UpdateBody = z.object({ role: ShareSettings.Role });
 	}
 }
+
+export namespace DevicesModel.Ssh {
+	const Host = z
+		.string()
+		.trim()
+		.max(253)
+		.refine(
+			(host) => isIP(host.split("%")[0] ?? "") !== 0 || HOSTNAME.test(host),
+			"Enter an IP address or host name",
+		);
+
+	export const Body = z.object({
+		/** Host name or IP; null uses the device's status address. */
+		host: Host.nullable().default(null),
+		port: z.number().int().min(1).max(65535).default(22),
+		username: z
+			.string()
+			.trim()
+			.min(1, "Username is required")
+			.max(64)
+			.regex(/^[A-Za-z0-9._@\\-]+$/, "Invalid username"),
+		/** `posix`: `shutdown -h now` (Linux, macOS, BSD); `windows`: `shutdown /s /t 0`. */
+		os: DeviceSettings.SshOperatingSystem.default("posix"),
+		/** POSIX: run the command with `sudo -n` (not for root). */
+		sudo: z.boolean().default(true),
+		/** A password, a new Ed25519 key generated by the server, or the stored secret. */
+		auth: z.discriminatedUnion("type", [
+			z.object({ type: z.literal("password"), password: z.string().min(1).max(256) }),
+			z.object({ type: z.literal("generate_key") }),
+			z.object({ type: z.literal("keep") }),
+		]),
+	});
+	export type Body = z.infer<typeof Body>;
+
+	/** The login without its secret. */
+	export const Response = z.object({
+		configured: z.boolean(),
+		host: z.string().nullable(),
+		/** The host the agent connects to (the login's, or the device's status address). */
+		effective_host: z.string().nullable(),
+		port: z.number().nullable(),
+		username: z.string().nullable(),
+		auth_type: DeviceSettings.SshAuthType.nullable(),
+		os: DeviceSettings.SshOperatingSystem.nullable(),
+		sudo: z.boolean().nullable(),
+		/** For a generated key: the public key. */
+		public_key: z.string().nullable(),
+		/** The trusted host key fingerprint; shutdown and reboot need one. */
+		host_key: z.string().nullable(),
+		/** Line for `~/.ssh/authorized_keys` on the device (generated keys). */
+		authorized_keys: z.string().nullable(),
+		/** Line for `/etc/sudoers.d/netignite` on the device (POSIX with sudo). */
+		sudoers: z.string().nullable(),
+		/** Whether the device's agent is online and can log in over SSH. */
+		agent_ready: z.boolean(),
+	});
+	export type Response = z.infer<typeof Response>;
+
+	export const TestResponse = z.object({
+		online: z.boolean(),
+		authenticated: z.boolean(),
+		/** The fingerprint the device presented. */
+		host_key: z.string().nullable(),
+		/** Whether it is the trusted one. */
+		trusted: z.boolean(),
+		error: z.string().nullable(),
+	});
+	export type TestResponse = z.infer<typeof TestResponse>;
+
+	export const TrustBody = z.object({
+		host_key: z.string().regex(/^SHA256:[A-Za-z0-9+/]{43}$/, "Invalid fingerprint"),
+	});
+}
diff --git a/server/lib/db/index.ts b/server/lib/db/index.ts
index 6397610..0cd2b76 100644
--- a/server/lib/db/index.ts
+++ b/server/lib/db/index.ts
@@ -146,6 +146,7 @@ export namespace DB.Tables {
 	export const deviceShares = TableSchema.deviceShares;
 	export const deviceFavorites = TableSchema.deviceFavorites;
 	export const firmwareReleases = TableSchema.firmwareReleases;
+	export const deviceSshCredentials = TableSchema.deviceSshCredentials;
 }
 
 export namespace DB.Models {
@@ -167,4 +168,5 @@ export namespace DB.Models {
 	export type DeviceShare = typeof DB.Tables.deviceShares.$inferSelect;
 	export type DeviceFavorite = typeof DB.Tables.deviceFavorites.$inferSelect;
 	export type FirmwareRelease = typeof DB.Tables.firmwareReleases.$inferSelect;
+	export type DeviceSshCredential = typeof DB.Tables.deviceSshCredentials.$inferSelect;
 }
diff --git a/server/lib/db/schema.ts b/server/lib/db/schema.ts
index 5d35205..8744692 100644
--- a/server/lib/db/schema.ts
+++ b/server/lib/db/schema.ts
@@ -239,6 +239,34 @@ export const devices = sqliteTable(
 	(table) => [index("devices_owner_id_idx").on(table.owner_id)],
 );
 
+/**
+ * @deprecated Use DB.Tables.deviceSshCredentials to access this table.
+ *
+ * How the device's agent logs in over SSH, for the authenticated status check and for shutdown
+ * and reboot. Write-only in the API: the secret (password or private key) is encrypted with the
+ * server's secrets key and only ever sent to the device's own agent.
+ */
+export const deviceSshCredentials = sqliteTable("device_ssh_credentials", {
+	device_id: integer()
+		.primaryKey()
+		.references(() => devices.id, { onDelete: "cascade" }),
+	/** Host name or IP; null means the device's status address. */
+	host: text(),
+	port: integer().notNull().default(22),
+	username: text().notNull(),
+	auth_type: text({ enum: DeviceSettings.SshAuthTypes }).notNull(),
+	/** `Secrets.encrypt()` of the password or the OpenSSH private key. */
+	secret_encrypted: text().notNull(),
+	/** For a key generated by the server: its `authorized_keys` public key. */
+	public_key: text(),
+	os: text({ enum: DeviceSettings.SshOperatingSystems }).notNull().default("posix"),
+	/** Run shutdown/reboot with `sudo -n` (POSIX, user isn't root). */
+	sudo: integer({ mode: "boolean" }).notNull().default(true),
+	/** The host key fingerprint the owner trusted (`SHA256:…`); null until confirmed. */
+	host_key: text(),
+	created_at: SQLUtils.getCreatedAtColumn(),
+});
+
 /**
  * @deprecated Use DB.Tables.deviceShares to access this table.
  */
diff --git a/server/lib/devices/actions.ts b/server/lib/devices/actions.ts
index 26132ce..02bbdc6 100644
--- a/server/lib/devices/actions.ts
+++ b/server/lib/devices/actions.ts
@@ -1,6 +1,7 @@
 import { AgentRequestError } from "../agents/connection";
 import { AgentRegistry } from "../agents/registry";
 import type { DB } from "../db";
+import { SshCredentials } from "../ssh/credentials";
 
 export class DeviceActionError extends Error {
 	constructor(
@@ -28,27 +29,71 @@ export class DeviceActions {
 		);
 	}
 
-	/** Shuts down or reboots the device through the Linux agent running on it. */
+	/**
+	 * Shuts down or reboots the device: through the Linux agent running on it, or else over SSH
+	 * through the device's agent (with a trusted host key).
+	 */
 	static async hostControl(device: DB.Models.Device, action: "shutdown" | "reboot") {
-		if (device.host_agent_id === null) {
-			throw new DeviceActionError(409, `No ${action} method is configured for this device`);
+		const hostAgent = device.host_agent_id !== null ? AgentRegistry.get(device.host_agent_id) : null;
+		if (hostAgent?.hasCapability("host.control")) {
+			await this.run(() => hostAgent.request("HOST_CONTROL", { action }, 10_000));
+			return;
 		}
 
-		const connection = AgentRegistry.get(device.host_agent_id);
-		if (!connection) throw new DeviceActionError(503, "The device's host agent is offline");
+		const credential = SshCredentials.get(device.id);
+		const target = credential ? SshCredentials.target(device, credential) : null;
+		if (credential && target) {
+			if (!target.host_key) {
+				throw new DeviceActionError(409, "Test the SSH login and trust the device's host key first");
+			}
+			const agent = SshCredentials.agentFor(device);
+			if (!agent) {
+				throw new DeviceActionError(
+					device.agent_id !== null && !AgentRegistry.get(device.agent_id) ? 503 : 409,
+					device.agent_id === null
+						? "No agent is assigned to this device"
+						: AgentRegistry.get(device.agent_id)
+							? "The device's agent can't log in over SSH"
+							: "Agent is offline",
+				);
+			}
+			await this.run(() =>
+				agent.request(
+					"SSH_EXEC",
+					{
+						...target,
+						host_key: target.host_key as string,
+						action,
+						os: credential.os,
+						sudo: credential.sudo && credential.username !== "root",
+					},
+					15_000,
+				),
+			);
+			return;
+		}
 
-		await this.run(() => connection.request("HOST_CONTROL", { action }, 10_000));
+		if (device.host_agent_id !== null) {
+			throw new DeviceActionError(503, "The device's host agent is offline");
+		}
+		throw new DeviceActionError(409, `No ${action} method is configured for this device`);
 	}
 
-	/** Which power actions are currently possible, for the dashboard. */
-	static availableActions(device: DB.Models.Device) {
+	/**
+	 * Which power actions are currently possible, for the dashboard. `sshTrusted`: the device has an
+	 * SSH login with a trusted host key.
+	 */
+	static availableActions(device: DB.Models.Device, sshTrusted = false) {
 		const wolAgent = device.agent_id !== null ? AgentRegistry.get(device.agent_id) : null;
 		const hostAgent = device.host_agent_id !== null ? AgentRegistry.get(device.host_agent_id) : null;
+		const control =
+			(hostAgent?.hasCapability("host.control") ?? false) ||
+			(sshTrusted && (wolAgent?.hasCapability("ssh") ?? false));
 
 		return {
 			power_on: wolAgent?.hasCapability("wake") ?? false,
-			shutdown: hostAgent?.hasCapability("host.control") ?? false,
-			reboot: hostAgent?.hasCapability("host.control") ?? false,
+			shutdown: control,
+			reboot: control,
 		};
 	}
 
diff --git a/server/lib/ssh/credentials.ts b/server/lib/ssh/credentials.ts
new file mode 100644
index 0000000..a8a2785
--- /dev/null
+++ b/server/lib/ssh/credentials.ts
@@ -0,0 +1,171 @@
+import { and, eq, inArray, isNotNull } from "drizzle-orm";
+import type { AgentProtocol } from "../agents/protocol";
+import { AgentRegistry } from "../agents/registry";
+import type { DeviceSettings } from "../api/utils/shared-models/netigniteData";
+import { DB } from "../db";
+import { Secrets } from "../utils/secrets";
+import { SshKeys } from "./keys";
+
+/**
+ * SSH logins of devices: the device's agent (in the same network) logs in to check the login and
+ * to shut the device down or reboot it. Passwords and private keys are stored encrypted
+ * ({@link Secrets}) and only sent to that agent. Host keys are trusted on first use: the owner
+ * confirms the fingerprint of a test login; later logins to another key fail.
+ */
+export class SshCredentials {
+	static get(deviceID: number) {
+		return (
+			DB.instance()
+				.select()
+				.from(DB.Tables.deviceSshCredentials)
+				.where(eq(DB.Tables.deviceSshCredentials.device_id, deviceID))
+				.get() ?? null
+		);
+	}
+
+	/** Devices (of `deviceIDs`) whose SSH login has a trusted host key. */
+	static trustedDeviceIDs(deviceIDs: number[]) {
+		if (deviceIDs.length === 0) return new Set<number>();
+		const rows = DB.instance()
+			.select({ device_id: DB.Tables.deviceSshCredentials.device_id })
+			.from(DB.Tables.deviceSshCredentials)
+			.where(
+				and(
+					inArray(DB.Tables.deviceSshCredentials.device_id, deviceIDs),
+					isNotNull(DB.Tables.deviceSshCredentials.host_key),
+				),
+			)
+			.all();
+		return new Set(rows.map((row) => row.device_id));
+	}
+
+	/** Stores the login. The host key stays trusted only if host and port are unchanged. */
+	static save(device: DB.Models.Device, input: SshCredentials.Input) {
+		const existing = this.get(device.id);
+
+		let secret: string;
+		let publicKey: string | null = null;
+		let authType: DeviceSettings.SshAuthType;
+		switch (input.auth.type) {
+			case "password":
+				authType = "password";
+				secret = input.auth.password;
+				break;
+			case "generate_key": {
+				const key = SshKeys.generateEd25519(`netignite-device-${device.id}`);
+				authType = "key";
+				secret = key.privateKey;
+				publicKey = key.publicKey;
+				break;
+			}
+			case "keep":
+				if (!existing) throw new SshCredentialError("Enter a password or generate a key");
+				authType = existing.auth_type;
+				secret = Secrets.decrypt(existing.secret_encrypted);
+				publicKey = existing.public_key;
+				break;
+		}
+
+		const sameMachine = existing && existing.host === input.host && existing.port === input.port;
+		const row = {
+			device_id: device.id,
+			host: input.host,
+			port: input.port,
+			username: input.username,
+			auth_type: authType,
+			secret_encrypted: Secrets.encrypt(secret),
+			public_key: publicKey,
+			os: input.os,
+			sudo: input.sudo,
+			host_key: sameMachine ? existing.host_key : null,
+		};
+
+		return DB.instance()
+			.insert(DB.Tables.deviceSshCredentials)
+			.values(row)
+			.onConflictDoUpdate({ target: DB.Tables.deviceSshCredentials.device_id, set: row })
+			.returning()
+			.get();
+	}
+
+	static delete(deviceID: number) {
+		DB.instance()
+			.delete(DB.Tables.deviceSshCredentials)
+			.where(eq(DB.Tables.deviceSshCredentials.device_id, deviceID))
+			.run();
+	}
+
+	static trust(deviceID: number, hostKey: string) {
+		return DB.instance()
+			.update(DB.Tables.deviceSshCredentials)
+			.set({ host_key: hostKey })
+			.where(eq(DB.Tables.deviceSshCredentials.device_id, deviceID))
+			.returning()
+			.get();
+	}
+
+	/** The host the agent connects to: the login's own, or the device's status address. */
+	static host(device: DB.Models.Device, credential: DB.Models.DeviceSshCredential) {
+		return credential.host ?? device.status_address ?? null;
+	}
+
+	/** The login as the agent gets it (with the decrypted secret), or null without a host. */
+	static target(
+		device: DB.Models.Device,
+		credential: DB.Models.DeviceSshCredential,
+	): AgentProtocol.SshTarget | null {
+		const host = this.host(device, credential);
+		if (!host) return null;
+
+		const secret = Secrets.decrypt(credential.secret_encrypted);
+		return {
+			host,
+			port: credential.port,
+			username: credential.username,
+			auth:
+				credential.auth_type === "password"
+					? { type: "password", password: secret }
+					: { type: "key", private_key: secret },
+			host_key: credential.host_key,
+		};
+	}
+
+	/** The device's network agent, if it can log in over SSH. */
+	static agentFor(device: DB.Models.Device) {
+		const connection = device.agent_id !== null ? AgentRegistry.get(device.agent_id) : null;
+		return connection?.hasCapability("ssh") ? connection : null;
+	}
+
+	/** Setup instructions for the target machine. */
+	static setupHints(credential: DB.Models.DeviceSshCredential) {
+		const hints: { authorized_keys: string | null; sudoers: string | null } = {
+			authorized_keys: null,
+			sudoers: null,
+		};
+		if (credential.public_key) {
+			// `restrict`: no forwarding, no PTY; commands still run.
+			hints.authorized_keys = `restrict ${credential.public_key}`;
+		}
+		if (credential.os === "posix" && credential.sudo && credential.username !== "root") {
+			const commands = ["/usr/sbin/shutdown", "/sbin/shutdown"].flatMap((path) => [
+				`${path} -h now`,
+				`${path} -r now`,
+			]);
+			hints.sudoers = `${credential.username} ALL=(root) NOPASSWD: ${commands.join(", ")}`;
+		}
+		return hints;
+	}
+}
+
+export namespace SshCredentials {
+	export interface Input {
+		host: string | null;
+		port: number;
+		username: string;
+		os: DeviceSettings.SshOperatingSystem;
+		sudo: boolean;
+		auth: { type: "password"; password: string } | { type: "generate_key" } | { type: "keep" };
+	}
+}
+
+export class SshCredentialError extends Error {}
diff --git a/server/lib/ssh/keys.ts b/server/lib/ssh/keys.ts
new file mode 100644
index 0000000..b581ad0
--- /dev/null
+++ b/server/lib/ssh/keys.ts
@@ -0,0 +1,69 @@
+import { createHash, generateKeyPairSync, randomBytes } from "node:crypto";
+
+/**
+ * Ed25519 key pairs in OpenSSH's formats: the private key as `-----BEGIN OPENSSH PRIVATE KEY-----`
+ * (unencrypted, what `ssh-keygen -t ed25519 -N ""` writes) and the public key as an
+ * `authorized_keys` line. Node can't export these formats itself.
+ */
+export class SshKeys {
+	static generateEd25519(comment: string) {
+		const { publicKey, privateKey } = generateKeyPairSync("ed25519");
+		const pub = Buffer.from(publicKey.export({ format: "jwk" }).x as string, "base64url");
+		const seed = Buffer.from(privateKey.export({ format: "jwk" }).d as string, "base64url");
+
+		const publicBlob = Buffer.concat([sshString("ssh-ed25519"), sshString(pub)]);
+
+		// Private section: check ints, key type, public key, seed + public key, comment, padding.
+		const check = randomBytes(4);
+		let section = Buffer.concat([
+			check,
+			check,
+			sshString("ssh-ed25519"),
+			sshString(pub),
+			sshString(Buffer.concat([seed, pub])),
+			sshString(comment),
+		]);
+		const padding = Buffer.from(
+			Array.from({ length: (8 - (section.length % 8)) % 8 }, (_, i) => i + 1),
+		);
+		section = Buffer.concat([section, padding]);
+
+		const body = Buffer.concat([
+			Buffer.from("openssh-key-v1\0", "binary"),
+			sshString("none"), // cipher
+			sshString("none"), // KDF
+			sshString(""), // KDF options
+			uint32(1), // number of keys
+			sshString(publicBlob),
+			sshString(section),
+		]);
+
+		const lines = body.toString("base64").match(/.{1,70}/g) ?? [];
+		return {
+			privateKey: `-----BEGIN OPENSSH PRIVATE KEY-----\n${lines.join("\n")}\n-----END OPENSSH PRIVATE KEY-----\n`,
+			publicKey: `ssh-ed25519 ${publicBlob.toString("base64")} ${comment}`,
+			fingerprint: this.fingerprint(publicBlob),
+		};
+	}
+
+	/** OpenSSH's fingerprint of a key blob: `SHA256:` + unpadded base64 (what `ssh-keygen -l` shows). */
+	static fingerprint(blob: Buffer) {
+		return `SHA256:${createHash("sha256").update(blob).digest("base64").replace(/=+$/, "")}`;
+	}
+
+	/** Whether a string looks like an OpenSSH SHA-256 fingerprint. */
+	static isFingerprint(value: string) {
+		return /^SHA256:[A-Za-z0-9+/]{43}$/.test(value);
+	}
+}
+
+function uint32(value: number) {
+	const buffer = Buffer.alloc(4);
+	buffer.writeUInt32BE(value);
+	return buffer;
+}
+
+function sshString(value: string | Buffer) {
+	const data = typeof value === "string" ? Buffer.from(value, "utf8") : value;
+	return Buffer.concat([uint32(data.length), data]);
+}
diff --git a/server/lib/utils/config.ts b/server/lib/utils/config.ts
index 80addea..41310cc 100644
--- a/server/lib/utils/config.ts
+++ b/server/lib/utils/config.ts
@@ -132,6 +132,9 @@ export class ConfigHandler {
 
 		APP_URL: CS.string(),
 
+		// Encrypts SSH credentials in the database. Default: a key generated in CONFIG_BASE_DIR/secrets.key.
+		SECRETS_KEY: CS.string().optional(),
+
 		// ESP32 firmware for the web installer and OTA updates, synced from the GitHub releases of
 		// FIRMWARE_REPO. FIRMWARE_PUBLIC_KEY: path to a PEM ECDSA P-256 public key; when set, only
 		// releases with a valid firmware.sig are accepted.
diff --git a/server/lib/utils/secrets.ts b/server/lib/utils/secrets.ts
new file mode 100644
index 0000000..466f554
--- /dev/null
+++ b/server/lib/utils/secrets.ts
@@ -0,0 +1,57 @@
+import { randomBytes } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { ConfigHandler } from "./config";
+import { ObjectEncryption } from "./crypto/objectCrypt";
+
+/**
+ * Encrypts secrets stored in the database (SSH passwords and private keys) with the server's
+ * secrets key: NETIGNITE_SECRETS_KEY, or a key generated on first use in
+ * `<NETIGNITE_CONFIG_BASE_DIR>/secrets.key`. Without that key, stored secrets can't be decrypted,
+ * so back it up with the database.
+ */
+export class Secrets {
+	static readonly KEY_FILE = "secrets.key";
+
+	private static key: string | null = null;
+
+	static encrypt(value: string) {
+		return ObjectEncryption.encrypt({ value }, this.getKey());
+	}
+
+	static decrypt(encrypted: string) {
+		return ObjectEncryption.decrypt<{ value: string }>(encrypted, this.getKey()).value;
+	}
+
+	/** For tests. */
+	static reset() {
+		this.key = null;
+	}
+
+	private static getKey() {
+		if (this.key) return this.key;
+
+		const config = ConfigHandler.getConfig();
+		if (config?.SECRETS_KEY) {
+			this.key = config.SECRETS_KEY;
+			return this.key;
+		}
+
+		const file = path.join(config?.CONFIG_BASE_DIR ?? "./config", this.KEY_FILE);
+		if (fs.existsSync(file)) {
+			this.key = fs.readFileSync(file, "utf8").trim();
+		} else {
+			fs.mkdirSync(path.dirname(file), { recursive: true });
+			const key = randomBytes(32).toString("hex");
+			// `wx`: never overwrite a key another process wrote meanwhile.
+			try {
+				fs.writeFileSync(file, `${key}\n`, { mode: 0o600, flag: "wx" });
+				this.key = key;
+			} catch {
+				this.key = fs.readFileSync(file, "utf8").trim();
+			}
+		}
+		if (!this.key) throw new Error(`The secrets key in ${file} is empty`);
+		return this.key;
+	}
+}
diff --git a/tests/helpers/preload.ts b/tests/helpers/preload.ts
index 3b68095..f39620b 100644
--- a/tests/helpers/preload.ts
+++ b/tests/helpers/preload.ts
@@ -22,6 +22,7 @@ function setTestEnv(rootDir: string) {
 		NETIGNITE_CONFIG_BASE_DIR: rootDir,
 
 		NETIGNITE_APP_URL: "http://localhost:18232",
+		NETIGNITE_SECRETS_KEY: undefined,
 
 		// Tests configure the catalog with a fake GitHub (tests/firmware.test.ts).
 		NETIGNITE_FIRMWARE_SYNC: false,
diff --git a/tests/ssh.test.ts b/tests/ssh.test.ts
new file mode 100644
index 0000000..e6d588b
--- /dev/null
+++ b/tests/ssh.test.ts
@@ -0,0 +1,387 @@
+import {
+	afterAll,
+	beforeAll,
+	beforeEach,
+	describe,
+	expect,
+	setDefaultTimeout,
+	test,
+} from "bun:test";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { eq } from "drizzle-orm";
+import { resetEnrollRateLimit } from "../server/lib/api/versions/v1/routes/agents";
+import { DB } from "../server/lib/db";
+import { SshKeys } from "../server/lib/ssh/keys";
+import { Secrets } from "../server/lib/utils/secrets";
+import { makeAPIRequest } from "./helpers/api";
+import { FakeAgent } from "./helpers/fake-agent";
+import { type SeededSession, type SeededUser, seedSession, seedUser } from "./helpers/seed";
+
+// Enrolling an agent hashes its secret (argon2).
+setDefaultTimeout(30_000);
+
+const HOST_KEY = `SHA256:${"A".repeat(43)}`;
+const OTHER_HOST_KEY = `SHA256:${"B".repeat(43)}`;
+
+let owner: SeededSession;
+let managerUser: SeededUser;
+let manager: SeededSession;
+let stranger: SeededSession;
+
+beforeAll(async () => {
+	owner = await seedSession((await seedUser("user")).id);
+	managerUser = await seedUser("user");
+	manager = await seedSession(managerUser.id);
+	stranger = await seedSession((await seedUser("user")).id);
+});
+beforeEach(() => resetEnrollRateLimit());
+afterAll(() => resetEnrollRateLimit());
+
+/** A device behind a Linux agent in Wake-on-LAN mode (which logs in over SSH). */
+async function setup(
+	handler: ConstructorParameters<typeof FakeAgent>[0],
+	capabilities = ["wake", "status.tcp", "ssh"],
+) {
+	const agent = await makeAPIRequest<{ id: number }>("/v1/agents", {
+		method: "POST",
+		authToken: owner.token,
+		body: { name: "Network agent", kind: "linux" },
+	});
+	const credential = await FakeAgent.enroll(agent.id, owner.token);
+	const fake = new FakeAgent(handler);
+	await fake.connect(credential, { kind: "linux", capabilities });
+
+	const device = await makeAPIRequest<{ id: number }>("/v1/devices", {
+		method: "POST",
+		authToken: owner.token,
+		body: {
+			name: "NAS",
+			type: "nas",
+			mac_address: "aa:bb:cc:dd:ee:01",
+			agent_id: agent.id,
+			status_method: "ssh",
+			status_address: "192.168.1.20",
+		},
+	});
+	await makeAPIRequest(`/v1/devices/${device.id}/shares`, {
+		method: "POST",
+		authToken: owner.token,
+		body: { user: managerUser.username, role: "manager" },
+	});
+	return { device, fake };
+}
+
+type SshInfo = {
+	configured: boolean;
+	effective_host: string | null;
+	username: string | null;
+	auth_type: string | null;
+	public_key: string | null;
+	host_key: string | null;
+	authorized_keys: string | null;
+	sudoers: string | null;
+	agent_ready: boolean;
+};
+
+describe("SSH keys and secrets", () => {
+	test("generated keys are valid OpenSSH Ed25519 keys", async () => {
+		const key = SshKeys.generateEd25519("netignite-device-1");
+		expect(key.privateKey).toStartWith("-----BEGIN OPENSSH PRIVATE KEY-----\n");
+		expect(key.publicKey).toMatch(
+			/^ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAI[A-Za-z0-9+/]+=* netignite-device-1$/,
+		);
+		expect(SshKeys.isFingerprint(key.fingerprint)).toBe(true);
+
+		// ssh-keygen derives the same public key from the private key.
+		const keygen = Bun.which("ssh-keygen");
+		if (keygen) {
+			const file = path.join(fs.mkdtempSync(path.join(os.tmpdir(), "netignite-key-")), "id_ed25519");
+			fs.writeFileSync(file, key.privateKey, { mode: 0o600 });
+			const derived = Bun.spawnSync([keygen, "-y", "-f", file]);
+			expect(derived.stdout.toString().trim()).toBe(key.publicKey);
+		}
+	});
+
+	test("secrets are encrypted with the server's key", () => {
+		const encrypted = Secrets.encrypt("hunter2");
+		expect(encrypted).not.toContain("hunter2");
+		expect(Secrets.decrypt(encrypted)).toBe("hunter2");
+		expect(Secrets.encrypt("hunter2")).not.toBe(encrypted);
+	});
+});
+
+describe("SSH login", () => {
+	test("a password login is stored encrypted and never returned", async () => {
+		const { device } = await setup(() => ({}));
+		const saved = await makeAPIRequest<SshInfo>(`/v1/devices/${device.id}/ssh`, {
+			method: "PUT",
+			authToken: owner.token,
+			body: { username: "admin", auth: { type: "password", password: "s3cret-pw" } },
+		});
+		expect(saved).toMatchObject({
+			configured: true,
+			effective_host: "192.168.1.20",
+			username: "admin",
+			auth_type: "password",
+			public_key: null,
+			host_key: null,
+			agent_ready: true,
+		});
+		expect(saved.sudoers).toContain("admin ALL=(root) NOPASSWD: /usr/sbin/shutdown -h now");
+		expect(JSON.stringify(saved)).not.toContain("s3cret-pw");
+
+		const row = await DB.instance()
+			.select()
+			.from(DB.Tables.deviceSshCredentials)
+			.where(eq(DB.Tables.deviceSshCredentials.device_id, device.id))
+			.get();
+		expect(row?.secret_encrypted).not.toContain("s3cret-pw");
+	});
+
+	test("a generated key gives an authorized_keys line", async () => {
+		const { device } = await setup(() => ({}));
+		const saved = await makeAPIRequest<SshInfo>(`/v1/devices/${device.id}/ssh`, {
+			method: "PUT",
+			authToken: owner.token,
+			body: { username: "root", host: "nas.local", auth: { type: "generate_key" } },
+		});
+		expect(saved.auth_type).toBe("key");
+		expect(saved.effective_host).toBe("nas.local");
+		expect(saved.authorized_keys).toBe(`restrict ${saved.public_key}`);
+		expect(saved.sudoers).toBeNull(); // root needs no sudo
+		expect(JSON.stringify(saved)).not.toContain("PRIVATE KEY");
+
+		// "keep" keeps the key.
+		const kept = await makeAPIRequest<SshInfo>(`/v1/devices/${device.id}/ssh`, {
+			method: "PUT",
+			authToken: owner.token,
+			body: { username: "root", host: "nas.local", port: 2222, auth: { type: "keep" } },
+		});
+		expect(kept.public_key).toBe(saved.public_key);
+	});
+
+	test("only the owner manages the login", async () => {
+		const { device } = await setup(() => ({}));
+		const body = { username: "admin", auth: { type: "password", password: "pw" } };
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/ssh`,
+			{ method: "PUT", authToken: manager.token, body },
+			403,
+		);
+		await makeAPIRequest(`/v1/devices/${device.id}/ssh`, { authToken: manager.token }, 403);
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/ssh`,
+			{ method: "PUT", authToken: stranger.token, body },
+			404,
+		);
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/ssh/test`,
+			{ method: "POST", authToken: manager.token },
+			403,
+		);
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/ssh/trust`,
+			{ method: "POST", authToken: manager.token, body: { host_key: HOST_KEY } },
+			403,
+		);
+	});
+
+	test("invalid input is rejected", async () => {
+		const { device } = await setup(() => ({}));
+		const put = (body: Record<string, unknown>, code: number) =>
+			makeAPIRequest(
+				`/v1/devices/${device.id}/ssh`,
+				{ method: "PUT", authToken: owner.token, body },
+				code,
+			);
+		await put({ username: "admin", auth: { type: "keep" } }, 400); // nothing stored to keep
+		await put({ username: "a b", auth: { type: "generate_key" } }, 400);
+		await put({ username: "admin", port: 70000, auth: { type: "generate_key" } }, 400);
+		await put({ username: "admin", host: "not a host!", auth: { type: "generate_key" } }, 400);
+		await put({ username: "admin", auth: { type: "magic" } }, 400);
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/ssh/trust`,
+			{ method: "POST", authToken: owner.token, body: { host_key: "MD5:aa:bb" } },
+			400,
+		);
+	});
+
+	test("test, trust, then shutdown and reboot over SSH", async () => {
+		const requests: { cmd: string; p: Record<string, any> }[] = [];
+		const { device } = await setup((cmd, payload) => {
+			requests.push({ cmd, p: payload });
+			if (cmd === "SSH_CHECK") {
+				return payload.host_key && payload.host_key !== HOST_KEY
+					? { online: true, host_key: HOST_KEY, authenticated: false, error: "host_key_mismatch" }
+					: { online: true, host_key: HOST_KEY, authenticated: true };
+			}
+			return {};
+		});
+		await makeAPIRequest(`/v1/devices/${device.id}/ssh`, {
+			method: "PUT",
+			authToken: owner.token,
+			body: { username: "admin", auth: { type: "password", password: "pw" } },
+		});
+
+		// Not trusted yet: no shutdown.
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/shutdown`,
+			{ method: "POST", authToken: owner.token },
+			409,
+		);
+		let listed = await makeAPIRequest<{ actions: { shutdown: boolean } }>(
+			`/v1/devices/${device.id}`,
+			{
+				authToken: owner.token,
+			},
+		);
+		expect(listed.actions.shutdown).toBe(false);
+
+		const result = await makeAPIRequest<{
+			host_key: string;
+			trusted: boolean;
+			authenticated: boolean;
+		}>(`/v1/devices/${device.id}/ssh/test`, { method: "POST", authToken: owner.token });
+		expect(result).toMatchObject({ host_key: HOST_KEY, trusted: false, authenticated: true });
+		expect(requests.at(-1)).toEqual({
+			cmd: "SSH_CHECK",
+			p: {
+				host: "192.168.1.20",
+				port: 22,
+				username: "admin",
+				auth: { type: "password", password: "pw" },
+				host_key: null,
+			},
+		});
+
+		await makeAPIRequest(`/v1/devices/${device.id}/ssh/trust`, {
+			method: "POST",
+			authToken: owner.token,
+			body: { host_key: result.host_key },
+		});
+		listed = await makeAPIRequest(`/v1/devices/${device.id}`, { authToken: owner.token });
+		expect(listed.actions.shutdown).toBe(true);
+
+		// A manager may power the device down; the agent gets the trusted key and the fixed action.
+		await makeAPIRequest(`/v1/devices/${device.id}/reboot`, {
+			method: "POST",
+			authToken: manager.token,
+		});
+		expect(requests.at(-1)).toEqual({
+			cmd: "SSH_EXEC",
+			p: {
+				host: "192.168.1.20",
+				port: 22,
+				username: "admin",
+				auth: { type: "password", password: "pw" },
+				host_key: HOST_KEY,
+				action: "reboot",
+				os: "posix",
+				sudo: true,
+			},
+		});
+
+		// Changing the host un-trusts the key.
+		const moved = await makeAPIRequest<SshInfo>(`/v1/devices/${device.id}/ssh`, {
+			method: "PUT",
+			authToken: owner.token,
+			body: { username: "admin", host: "192.168.1.21", auth: { type: "keep" } },
+		});
+		expect(moved.host_key).toBeNull();
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/shutdown`,
+			{ method: "POST", authToken: owner.token },
+			409,
+		);
+	});
+
+	test("a changed host key is reported, and agent errors reach the user", async () => {
+		const { device } = await setup((cmd, payload) => {
+			if (cmd === "SSH_CHECK") {
+				return {
+					online: true,
+					host_key: OTHER_HOST_KEY,
+					authenticated: false,
+					error: "host_key_mismatch",
+				};
+			}
+			if (cmd === "SSH_EXEC" && payload.action === "shutdown")
+				throw new Error("sudo: a password is required");
+			return {};
+		});
+		await makeAPIRequest(`/v1/devices/${device.id}/ssh`, {
+			method: "PUT",
+			authToken: owner.token,
+			body: { username: "admin", auth: { type: "password", password: "pw" } },
+		});
+		await makeAPIRequest(`/v1/devices/${device.id}/ssh/trust`, {
+			method: "POST",
+			authToken: owner.token,
+			body: { host_key: HOST_KEY },
+		});
+
+		const result = await makeAPIRequest<{ trusted: boolean; error: string; host_key: string }>(
+			`/v1/devices/${device.id}/ssh/test`,
+			{ method: "POST", authToken: owner.token },
+		);
+		expect(result).toMatchObject({
+			trusted: false,
+			error: "host_key_mismatch",
+			host_key: OTHER_HOST_KEY,
+		});
+
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/shutdown`,
+			{ method: "POST", authToken: owner.token },
+			502,
+		);
+	});
+
+	test("an agent without SSH can't test or use the login", async () => {
+		const { device } = await setup(() => ({}), ["wake", "status.tcp"]);
+		const saved = await makeAPIRequest<SshInfo>(`/v1/devices/${device.id}/ssh`, {
+			method: "PUT",
+			authToken: owner.token,
+			body: { username: "admin", auth: { type: "password", password: "pw" } },
+		});
+		expect(saved.agent_ready).toBe(false);
+		await makeAPIRequest(
+			`/v1/devices/${device.id}/ssh/test`,
+			{ method: "POST", authToken: owner.token },
+			503,
+		);
+	});
+
+	test("removing the login and deleting the device remove the secret", async () => {
+		const { device } = await setup(() => ({}));
+		const put = () =>
+			makeAPIRequest(`/v1/devices/${device.id}/ssh`, {
+				method: "PUT",
+				authToken: owner.token,
+				body: { username: "admin", auth: { type: "generate_key" } },
+			});
+		const rows = () =>
+			DB.instance()
+				.select()
+				.from(DB.Tables.deviceSshCredentials)
+				.where(eq(DB.Tables.deviceSshCredentials.device_id, device.id))
+				.all();
+
+		await put();
+		await makeAPIRequest(`/v1/devices/${device.id}/ssh`, {
+			method: "DELETE",
+			authToken: owner.token,
+		});
+		expect(rows()).toHaveLength(0);
+		expect(
+			(await makeAPIRequest<SshInfo>(`/v1/devices/${device.id}/ssh`, { authToken: owner.token }))
+				.configured,
+		).toBe(false);
+
+		await put();
+		await makeAPIRequest(`/v1/devices/${device.id}`, { method: "DELETE", authToken: owner.token });
+		expect(rows()).toHaveLength(0);
+	});
+});

From 491cfe132cf0f771a36ea10b4d6c82bd22b8ebf8 Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Wed, 21 Oct 2026 12:36:44 +0200
Subject: [PATCH 10/17] feat: suggest an authorized_keys line that only allows
 shutdown and reboot

For POSIX devices the generated key's line gets a forced command that lets exactly the agent's two
commands through, so the key is useless for anything else. Status checks open no session, so the
forced command doesn't run for them.
---
 server/lib/ssh/credentials.ts | 15 ++++++++++++---
 tests/ssh.test.ts             |  5 ++++-
 2 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/server/lib/ssh/credentials.ts b/server/lib/ssh/credentials.ts
index a8a2785..2157be4 100644
--- a/server/lib/ssh/credentials.ts
+++ b/server/lib/ssh/credentials.ts
@@ -142,11 +142,20 @@ export class SshCredentials {
 			authorized_keys: null,
 			sudoers: null,
 		};
-		if (credential.public_key) {
-			// `restrict`: no forwarding, no PTY; commands still run.
+		const sudo = credential.sudo && credential.username !== "root";
+		if (credential.public_key && credential.os === "posix") {
+			// `restrict`: no forwarding, no PTY. The forced command lets exactly the agent's two
+			// commands through, so the key is useless for anything else. Logins for status checks open
+			// no session, so it doesn't run for them.
+			const prefix = sudo ? "sudo -n " : "";
+			const allowed = `'${prefix}shutdown -h now'|'${prefix}shutdown -r now'`;
+			const command = `case \\"$SSH_ORIGINAL_COMMAND\\" in ${allowed}) exec $SSH_ORIGINAL_COMMAND ;; *) echo 'Only shutdown and reboot are allowed' >&2; exit 1 ;; esac`;
+			hints.authorized_keys = `restrict,command="${command}" ${credential.public_key}`;
+		} else if (credential.public_key) {
+			// Windows' OpenSSH runs forced commands with cmd.exe; restrict forwarding only.
 			hints.authorized_keys = `restrict ${credential.public_key}`;
 		}
-		if (credential.os === "posix" && credential.sudo && credential.username !== "root") {
+		if (credential.os === "posix" && sudo) {
 			const commands = ["/usr/sbin/shutdown", "/sbin/shutdown"].flatMap((path) => [
 				`${path} -h now`,
 				`${path} -r now`,
diff --git a/tests/ssh.test.ts b/tests/ssh.test.ts
index e6d588b..dcad737 100644
--- a/tests/ssh.test.ts
+++ b/tests/ssh.test.ts
@@ -149,7 +149,10 @@ describe("SSH login", () => {
 		});
 		expect(saved.auth_type).toBe("key");
 		expect(saved.effective_host).toBe("nas.local");
-		expect(saved.authorized_keys).toBe(`restrict ${saved.public_key}`);
+		// A forced command lets exactly the two commands through (root: without sudo).
+		expect(saved.authorized_keys).toBe(
+			`restrict,command="case \\"$SSH_ORIGINAL_COMMAND\\" in 'shutdown -h now'|'shutdown -r now') exec $SSH_ORIGINAL_COMMAND ;; *) echo 'Only shutdown and reboot are allowed' >&2; exit 1 ;; esac" ${saved.public_key}`,
+		);
 		expect(saved.sudoers).toBeNull(); // root needs no sudo
 		expect(JSON.stringify(saved)).not.toContain("PRIVATE KEY");
 

From d6ba14d22d1e11c54b9f5790999f66cc58f33b7b Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Wed, 21 Oct 2026 12:39:03 +0200
Subject: [PATCH 11/17] docs: add a changelog

---
 CHANGELOG.md | 62 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 62 insertions(+)
 create mode 100644 CHANGELOG.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..4a08713
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,62 @@
+# Changelog
+
+## 2.0.0-beta.2 (unreleased)
+
+### New
+
+- **ESP32 web installer.** An ESP32 agent's **Install** tab flashes the firmware from the browser
+  (ESP Web Tools; Chrome, Edge or Firefox 151+ over HTTPS) together with the agent's setup data:
+  the server URL, its name and a single-use enrollment token. Wi-Fi is entered in the browser and
+  goes to the ESP32 only. Reinstalling or changing Wi-Fi works the same way.
+- **Firmware catalog.** The server downloads ESP32 firmware from the
+  [Agent-ESP32](https://github.com/NetIgnite-project/Agent-ESP32) GitHub releases on start and every
+  6 hours and checks every file's SHA-256 (and the signature with `NETIGNITE_FIRMWARE_PUBLIC_KEY`).
+  Admins pick the stable or pre-release channel and can sync manually under Server Settings.
+- **Firmware updates over the network** for ESP32 agents with firmware 2.0.0-beta.2 or newer, one
+  agent or several one after another. A new firmware that doesn't reach the server within
+  5 minutes goes back to the previous one, and the dashboard shows the failed update.
+- **Console** tab for ESP32 agents: live log, log level, server address, host name and IP settings
+  (tried before they are kept), restart and factory reset.
+- **Linux agent installer:** a Linux agent's page shows
+  `curl -fsSL https://<server>/install/linux.sh | sudo sh -s -- <token>`, which downloads the
+  [Agent-Linux](https://github.com/NetIgnite-project/Agent-Linux) binary for the machine's CPU,
+  checks it against `SHA256SUMS`, pairs it and installs the systemd service.
+- **SSH shutdown and reboot.** A device's **SSH** tab (owner only) stores a login: an Ed25519 key
+  pair the server generates (with ready-made `authorized_keys` and `sudoers` lines that allow only
+  shutdown and reboot) or a password. The device's agent logs in; host keys are trusted on first
+  use. Passwords and keys are stored encrypted and never returned by the API.
+
+### Changed
+
+- Enrollment takes the agent's kind and refuses a token of another kind (409) without using it up.
+- The ESP32 setup data writes the agent's name as a valid host name ("Garage ESP32" → "Garage-ESP32").
+
+### Configuration
+
+New, all optional: `NETIGNITE_FIRMWARE_SYNC`, `NETIGNITE_FIRMWARE_REPO`, `NETIGNITE_FIRMWARE_DIR`
+(Docker: `/opt/netignite/data/firmware`), `NETIGNITE_FIRMWARE_PUBLIC_KEY`, `NETIGNITE_GITHUB_TOKEN`,
+`NETIGNITE_LINUX_AGENT_REPO`, `NETIGNITE_LINUX_AGENT_VERSION`, `NETIGNITE_SECRETS_KEY` (default: a
+key generated in `config/secrets.key`; back it up with the database).
+
+### Upgrading from 2.0.0-beta.1
+
+The database migrations run on start. ESP32 agents with firmware 2.0.0-beta.1 keep working but
+can't be updated over the network or log in over SSH: install firmware 2.0.0-beta.2 once with the
+web installer.
+
+## 2.0.0-beta.1 (2026-10-20)
+
+The server rewritten on the LeiCraftMC full-stack Nuxt template (Nuxt 4, Hono, Drizzle on SQLite,
+Bun). Not compatible with v1 agents.
+
+- Dashboard: overview with favorites, devices, agents, account settings, admin area.
+- Agents (ESP32 firmware v2, Linux agent) enroll with a single-use token and generate their own
+  secret; protocol v2 over `/ws/agent`.
+- Devices: Wake-on-LAN, status checks by MAC (IPv6 link-local), IPv4, IPv6, SSH port or a Linux
+  agent running on the device; shutdown and reboot through that agent.
+- Sharing devices with other users as viewer, operator or manager.
+- Users: initial admin through a password-reset link, optional public sign-up, API keys, OpenAPI
+  reference at `/api/docs/v1`.
+- One-time import of a v1 database (`import-v1`).
+- Port 18232 and the `/opt/netignite/data` and `/opt/netignite/config` volumes as in v1; the
+  database is `data/netignite.sqlite`.

From fe23789597f878c7d65ee886a02e791c957d13ab Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Wed, 21 Oct 2026 13:21:02 +0200
Subject: [PATCH 12/17] fix: issues found while writing the v2 docs

- v1 import: the v1 admin's password only replaces the initial admin's while its password-reset
  link is unused; an admin who set a password and logged out kept losing it. The token file is
  only deleted in that case.
- An unreadable NETIGNITE_FIRMWARE_PUBLIC_KEY no longer crashes the server: every firmware sync
  fails with the reason (shown in Server Settings), so unsigned firmware is never accepted.
- Sign-up and admin "Create user" use the same password rule as changing and resetting a password,
  and the forms check it before submitting.
- "Remember me" keeps the session cookie for 7 days, as long as the session lasts.
- The SSH tab and README say that ESP32 agents (2.0.0-beta.2 and newer) log in over SSH too; OTA
  needs firmware 2.0.0-beta.2, not "2.1".
- docker-compose.yml: SMTP settings are commented out instead of pointing at a placeholder host.
---
 README.md                                     |  8 ++--
 app/api-client/types.gen.ts                   |  6 +++
 app/api-client/zod.gen.ts                     |  4 +-
 app/pages/auth/login.vue                      |  5 +-
 app/pages/auth/reset-password.vue             |  5 +-
 app/pages/auth/signup.vue                     |  5 +-
 app/pages/dashboard/admin/users.vue           |  2 +-
 .../dashboard/devices/[device_id]/ssh.vue     |  2 +-
 app/pages/dashboard/settings/security.vue     |  7 +--
 app/utils/password.ts                         | 17 +++++++
 docker/docker-compose.yml                     | 13 +++---
 .../versions/v1/routes/admin/users/model.ts   |  2 +-
 .../lib/api/versions/v1/routes/auth/model.ts  |  2 +-
 server/lib/firmware/catalog.ts                | 19 +++++++-
 server/lib/migration/v1Import.ts              | 22 +++++++--
 tests/firmware.test.ts                        | 14 ++++++
 tests/v1-import.test.ts                       | 46 +++++++++++++++----
 17 files changed, 134 insertions(+), 45 deletions(-)
 create mode 100644 app/utils/password.ts

diff --git a/README.md b/README.md
index 6c8a9fe..e649f47 100644
--- a/README.md
+++ b/README.md
@@ -48,12 +48,12 @@ itself when it enrolls.
 | `NETIGNITE_FIRMWARE_SYNC` | `true` | Sync automatically; `false` for offline servers |
 | `NETIGNITE_FIRMWARE_REPO` | `NetIgnite-project/Agent-ESP32` | GitHub repository to sync from |
 | `NETIGNITE_FIRMWARE_DIR` | `./data/firmware` | Where releases are stored |
-| `NETIGNITE_FIRMWARE_PUBLIC_KEY` | — | PEM ECDSA P-256 key; then only signed releases are accepted |
+| `NETIGNITE_FIRMWARE_PUBLIC_KEY` | — | Path of a PEM ECDSA P-256 public key; then only signed releases are accepted |
 | `NETIGNITE_GITHUB_TOKEN` | — | Raises GitHub's API rate limit |
 
 ### Firmware updates and console
 
-ESP32 agents with firmware 2.1 or newer update over the network: the agent page shows **Update
+ESP32 agents with firmware 2.0.0-beta.2 or newer update over the network: the agent page shows **Update
 to …** when the admin's channel has a newer release (Agents → **Update n agents** updates several
 one after another). The agent downloads the image from this server with its own credential,
 checks its SHA-256 (and signature, if its firmware has a public key compiled in), restarts and goes
@@ -67,8 +67,8 @@ address or IP setting is only kept if the agent reaches the server with it withi
 
 A device's **SSH** tab (owner only) stores an SSH login: a key pair the server generates (the tab
 shows the `authorized_keys` and `sudoers` lines for the device) or a password. The device's agent
-(a Linux agent in Wake-on-LAN mode in the same network) logs in for shutdown and reboot; it runs only
-the fixed `shutdown` commands. Passwords and private keys are stored encrypted with the server's
+(an ESP32 with firmware 2.0.0-beta.2 or newer, or a Linux agent in Wake-on-LAN mode, in the same
+network) logs in for shutdown and reboot; it runs only the fixed `shutdown` commands. Passwords and private keys are stored encrypted with the server's
 secrets key (`NETIGNITE_SECRETS_KEY`, or `config/secrets.key`; back it up) and are never returned by
 the API. The device's host key is trusted on first use: test the login, compare the fingerprint,
 trust it.
diff --git a/app/api-client/types.gen.ts b/app/api-client/types.gen.ts
index 0b251b1..06c2c81 100644
--- a/app/api-client/types.gen.ts
+++ b/app/api-client/types.gen.ts
@@ -164,6 +164,9 @@ export type PostAuthSignupData = {
         username: string;
         display_name?: string;
         email: string;
+        /**
+         * New password for the account
+         */
         password: string;
     };
     path?: never;
@@ -791,6 +794,9 @@ export type PostAdminUsersData = {
         display_name: string;
         email: string;
         role?: 'admin' | 'user';
+        /**
+         * New password for the account
+         */
         password: string;
     };
     path?: never;
diff --git a/app/api-client/zod.gen.ts b/app/api-client/zod.gen.ts
index b052165..b30fa64 100644
--- a/app/api-client/zod.gen.ts
+++ b/app/api-client/zod.gen.ts
@@ -64,7 +64,7 @@ export const zPostAuthSignupBody = z.object({
     username: z.string().min(5).max(40).regex(/^(?!.*[.-]{2})(?!.*--)(?!.*\.\.)[a-z0-9](?:[a-z0-9._-]{3,38}[a-z0-9_])?$/),
     display_name: z.string().min(1).max(64).optional(),
     email: z.email().regex(/^(?:[A-Za-z0-9_'+\-]+\.)*[A-Za-z0-9_'+\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$/),
-    password: z.string().min(8).max(128)
+    password: z.string().min(8).max(50).regex(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[\W_]).+$/)
 });
 
 /**
@@ -312,7 +312,7 @@ export const zPostAdminUsersBody = z.object({
     display_name: z.string().min(1).max(64),
     email: z.email().regex(/^(?:[A-Za-z0-9_'+\-]+\.)*[A-Za-z0-9_'+\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$/),
     role: z.enum(['admin', 'user']).optional(),
-    password: z.string().min(8).max(128)
+    password: z.string().min(8).max(50).regex(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[\W_]).+$/)
 });
 
 /**
diff --git a/app/pages/auth/login.vue b/app/pages/auth/login.vue
index 430b065..ed8a827 100644
--- a/app/pages/auth/login.vue
+++ b/app/pages/auth/login.vue
@@ -40,7 +40,7 @@ const fields: AuthFormField[] = [
 		name: "remember",
 		label: "Remember me",
 		type: "checkbox",
-		description: "You will stay logged in for 30 days.",
+		description: "You will stay logged in for 7 days.",
 	},
 ];
 
@@ -88,7 +88,8 @@ async function onSubmit(payload: FormSubmitEvent<Schema>) {
 
 	updateAPIClient(result.data.token);
 	useAppCookies().sessionToken.set(result.data.token, {
-		maxAge: payload.data.remember ? 60 * 60 * 24 * 30 : undefined, // 30 days only with "remember me"
+		// As long as the session lasts (7 days, server/lib/api/utils/authHandler.ts), only with "remember me"
+		maxAge: payload.data.remember ? 60 * 60 * 24 * 7 : undefined,
 	});
 
 	// Fresh per-user state for the new session.
diff --git a/app/pages/auth/reset-password.vue b/app/pages/auth/reset-password.vue
index 3467dac..f1903b7 100644
--- a/app/pages/auth/reset-password.vue
+++ b/app/pages/auth/reset-password.vue
@@ -35,10 +35,7 @@ const fields: AuthFormField[] = [
 ];
 
 const schema = z.object({
-	password: z
-		.string("Password is required")
-		.min(8, "Must be at least 8 characters")
-		.max(128, "Must be at most 128 characters"),
+	password: passwordRule,
 	confirm_password: z.string("Confirm Password is required").min(1, "Confirm Password is required"),
 });
 
diff --git a/app/pages/auth/signup.vue b/app/pages/auth/signup.vue
index 5b75e46..c47d192 100644
--- a/app/pages/auth/signup.vue
+++ b/app/pages/auth/signup.vue
@@ -59,10 +59,7 @@ const schema = z.object({
 		.max(40, "Must be at most 40 characters")
 		.regex(/^[a-z0-9._-]+$/, "Only lowercase letters, numbers, dots, dashes and underscores"),
 	email: z.email("Invalid email address").trim(),
-	password: z
-		.string("Password is required")
-		.min(8, "Must be at least 8 characters")
-		.max(128, "Must be at most 128 characters"),
+	password: passwordRule,
 	confirm_password: z.string("Confirm Password is required").min(1, "Confirm Password is required"),
 });
 
diff --git a/app/pages/dashboard/admin/users.vue b/app/pages/dashboard/admin/users.vue
index 4fe8507..69d8587 100644
--- a/app/pages/dashboard/admin/users.vue
+++ b/app/pages/dashboard/admin/users.vue
@@ -297,7 +297,7 @@ async function onDeleteUser() {
 		icon-color="amber"
 	>
 		<div class="space-y-4">
-			<UFormField label="New Password" description="At least 8 characters.">
+			<UFormField label="New Password" :description="PASSWORD_HINT">
 				<UInput v-model="passwordForm.password" type="password" placeholder="••••••••" class="w-full" />
 			</UFormField>
 
diff --git a/app/pages/dashboard/devices/[device_id]/ssh.vue b/app/pages/dashboard/devices/[device_id]/ssh.vue
index 21f40bf..0fe7742 100644
--- a/app/pages/dashboard/devices/[device_id]/ssh.vue
+++ b/app/pages/dashboard/devices/[device_id]/ssh.vue
@@ -178,7 +178,7 @@ async function copy(text: string) {
 				variant="subtle"
 				icon="i-lucide-radio-tower"
 				title="This device's agent can't log in over SSH"
-				description="SSH needs a NetIgnite Linux agent in Wake-on-LAN mode in the device's network, assigned as the device's agent (General tab), and online."
+				description="SSH needs an online agent in the device's network that can log in over SSH: an ESP32 with firmware 2.0.0-beta.2 or newer, or a Linux agent in Wake-on-LAN mode. Assign it as the device's agent (General tab)."
 			/>
 
 			<form class="space-y-5" @submit.prevent="save">
diff --git a/app/pages/dashboard/settings/security.vue b/app/pages/dashboard/settings/security.vue
index fe44ffb..451eeb9 100644
--- a/app/pages/dashboard/settings/security.vue
+++ b/app/pages/dashboard/settings/security.vue
@@ -7,10 +7,7 @@ const toast = useToast();
 
 const passwordSchema = z.object({
 	current_password: z.string("Current Password is required").min(1, "Current Password is required"),
-	new_password: z
-		.string("Password is required")
-		.min(8, "Must be at least 8 characters")
-		.max(128, "Must be at most 128 characters"),
+	new_password: passwordRule,
 	confirm_password: z.string("Confirm Password is required").min(1, "Confirm Password is required"),
 });
 
@@ -149,7 +146,7 @@ async function onDeleteAccount() {
 				<UFormField
 					name="new_password"
 					label="New Password"
-					description="At least 8 characters."
+					:description="PASSWORD_HINT"
 					required
 					class="flex items-start justify-between gap-4 py-4 first:pt-0 last:pb-0 max-sm:flex-col"
 					:ui="{ root: 'w-full sm:w-auto', container: 'w-full sm:w-auto' }"
diff --git a/app/utils/password.ts b/app/utils/password.ts
new file mode 100644
index 0000000..8344e41
--- /dev/null
+++ b/app/utils/password.ts
@@ -0,0 +1,17 @@
+import { z } from "zod";
+
+/**
+ * The server's password rule (`UserDataPolicies.Password` in
+ * server/lib/api/utils/shared-models/accountData.ts), for forms that check it before submitting.
+ */
+export const passwordRule = z
+	.string("Password is required")
+	.min(8, "Must be at least 8 characters")
+	.max(50, "Must be at most 50 characters")
+	.regex(
+		/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[\W_]).+$/,
+		"Needs an upper- and a lower-case letter, a digit and a special character",
+	);
+
+export const PASSWORD_HINT =
+	"8–50 characters with upper- and lower-case letters, a digit and a special character.";
diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index d41ca5d..9b91625 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -20,12 +20,13 @@ services:
       # NETIGNITE_FIRMWARE_SYNC: false
       # NETIGNITE_FIRMWARE_PUBLIC_KEY: /opt/netignite/config/firmware-signing.pub.pem
 
-      NETIGNITE_SMTP_HOST: "mail.example.com"
-      NETIGNITE_SMTP_PORT: 465
-      NETIGNITE_SMTP_USERNAME: "YourSMTPUsernameHere"
-      NETIGNITE_SMTP_PASSWORD: "YourSMTPPasswordHere"
-      NETIGNITE_SMTP_FROM: '"App" <system@app.example.com>'
-      NETIGNITE_SMTP_SECURE: true
+      # Optional: email (password resets). Without it, email features are off.
+      # NETIGNITE_SMTP_HOST: "mail.example.com"
+      # NETIGNITE_SMTP_PORT: 465
+      # NETIGNITE_SMTP_USERNAME: "YourSMTPUsernameHere"
+      # NETIGNITE_SMTP_PASSWORD: "YourSMTPPasswordHere"
+      # NETIGNITE_SMTP_FROM: '"NetIgnite" <netignite@example.com>'
+      # NETIGNITE_SMTP_SECURE: true
 
     volumes:
       - ./data:/opt/netignite/data
diff --git a/server/lib/api/versions/v1/routes/admin/users/model.ts b/server/lib/api/versions/v1/routes/admin/users/model.ts
index f8ecde0..ea93617 100644
--- a/server/lib/api/versions/v1/routes/admin/users/model.ts
+++ b/server/lib/api/versions/v1/routes/admin/users/model.ts
@@ -38,7 +38,7 @@ export namespace AdminUsersModel.Create {
 	});
 
 	export const Body = InsertSchema.extend({
-		password: z.string().min(8).max(128),
+		password: UserDataPolicies.Password,
 	});
 	export type Body = z.infer<typeof Body>;
 
diff --git a/server/lib/api/versions/v1/routes/auth/model.ts b/server/lib/api/versions/v1/routes/auth/model.ts
index 0b57ec4..d667620 100644
--- a/server/lib/api/versions/v1/routes/auth/model.ts
+++ b/server/lib/api/versions/v1/routes/auth/model.ts
@@ -34,7 +34,7 @@ export namespace AuthModel.Signup {
 		username: UserDataPolicies.Username,
 		display_name: z.string().trim().min(1).max(64).optional(),
 		email: z.email().trim(),
-		password: z.string().min(8).max(128),
+		password: UserDataPolicies.Password,
 	});
 	export type Body = z.infer<typeof Body>;
 
diff --git a/server/lib/firmware/catalog.ts b/server/lib/firmware/catalog.ts
index f6fc3de..30cc40a 100644
--- a/server/lib/firmware/catalog.ts
+++ b/server/lib/firmware/catalog.ts
@@ -27,10 +27,24 @@ export class FirmwareCatalog {
 	protected static running: Promise<FirmwareCatalog.SyncResult> | null = null;
 
 	static async configure(source: FirmwareCatalog.SourceOptions) {
+		let publicKey: string | null = null;
+		let configError: string | null = null;
+		if (source.publicKeyPath) {
+			try {
+				publicKey = await Bun.file(source.publicKeyPath).text();
+				if (!publicKey.includes("BEGIN PUBLIC KEY")) throw new Error("not a PEM public key");
+			} catch (error) {
+				// Don't fall back to unsigned firmware: every sync fails until the key is fixed.
+				configError = `NETIGNITE_FIRMWARE_PUBLIC_KEY: can't use ${source.publicKeyPath} (${(error as Error).message})`;
+				Logger.error(configError);
+			}
+		}
+
 		this.source = {
 			...source,
 			apiURL: source.apiURL.replace(/\/$/, ""),
-			publicKey: source.publicKeyPath ? await Bun.file(source.publicKeyPath).text() : null,
+			publicKey,
+			configError,
 		};
 	}
 
@@ -108,6 +122,7 @@ export class FirmwareCatalog {
 		}
 
 		try {
+			if (source.configError) throw new Error(source.configError);
 			const result = await this.syncFrom(source);
 			await RuntimeMetadata.setFirmwareSyncState({
 				last_run_at: startedAt,
@@ -351,6 +366,8 @@ export namespace FirmwareCatalog {
 
 	export interface Source extends Omit<SourceOptions, "publicKeyPath"> {
 		publicKey: string | null;
+		/** A configuration problem (unreadable public key) that makes every sync fail. */
+		configError: string | null;
 	}
 
 	export interface SyncResult {
diff --git a/server/lib/migration/v1Import.ts b/server/lib/migration/v1Import.ts
index 41abcb8..fb66573 100644
--- a/server/lib/migration/v1Import.ts
+++ b/server/lib/migration/v1Import.ts
@@ -93,6 +93,7 @@ export class V1Importer {
 			// Cloned: a missing metadata key reads as a shared default object, which must not be mutated.
 			const state = structuredClone(await RuntimeMetadata.getV1ImportState());
 			const db = DB.instance();
+			let adminPasswordTakenOver = false;
 
 			// Synchronous on purpose: drizzle's bun-sqlite transaction() commits at the first `await`.
 			const work = (tx: SyncTx) => {
@@ -116,7 +117,8 @@ export class V1Importer {
 							continue;
 						}
 
-						if (this.neverLoggedIn(tx, existing)) {
+						if (this.passwordNeverSet(tx, existing)) {
+							adminPasswordTakenOver = true;
 							tx
 								.update(DB.Tables.users)
 								.set({ password_hash: v1.password_hash, role })
@@ -254,7 +256,8 @@ export class V1Importer {
 			} else {
 				db.transaction((tx) => work(tx));
 
-				if (report.users.merged.length > 0 && options.configBaseDir) {
+				// The initial admin now has the v1 password; its password-reset link is void.
+				if (adminPasswordTakenOver && options.configBaseDir) {
 					const tokenFile = join(options.configBaseDir, "initial_admin_password_reset_token.txt");
 					if (existsSync(tokenFile)) rmSync(tokenFile);
 				}
@@ -271,8 +274,19 @@ export class V1Importer {
 		return user.username === "admin" && user.display_name === "Default Administrator";
 	}
 
-	private static neverLoggedIn(tx: SyncTx, user: DB.Models.User) {
-		return !tx.select().from(DB.Tables.sessions).where(eq(DB.Tables.sessions.user_id, user.id)).get();
+	/**
+	 * The initial admin whose password nobody has set yet: its password-reset link (from DB.init)
+	 * is still unused. Only then does it take over the v1 admin's password.
+	 */
+	private static passwordNeverSet(tx: SyncTx, user: DB.Models.User) {
+		return (
+			this.isInitialAdmin(user) &&
+			!!tx
+				.select()
+				.from(DB.Tables.passwordResets)
+				.where(eq(DB.Tables.passwordResets.user_id, user.id))
+				.get()
+		);
 	}
 
 	private static agentOwner(tx: SyncTx, agentID: number) {
diff --git a/tests/firmware.test.ts b/tests/firmware.test.ts
index 44e3abd..6e68b3b 100644
--- a/tests/firmware.test.ts
+++ b/tests/firmware.test.ts
@@ -438,3 +438,17 @@ describe("Provisioning image", () => {
 		expect(ProvisioningImage.hostname("a".repeat(80)).length).toBe(63);
 	});
 });
+
+describe("Firmware signature key", () => {
+	test("an unreadable public key fails every sync instead of accepting unsigned firmware", async () => {
+		await FirmwareCatalog.configure({
+			repo: "NetIgnite-project/Agent-ESP32",
+			apiURL: "http://127.0.0.1:1",
+			dir: path.join(firmwareDir, "..", "firmware-nokey"),
+			publicKeyPath: path.join(firmwareDir, "..", "missing.pub.pem"),
+			token: null,
+		});
+		const result = await FirmwareCatalog.sync();
+		expect(result.error).toStartWith("NETIGNITE_FIRMWARE_PUBLIC_KEY: can't use");
+	});
+});
diff --git a/tests/v1-import.test.ts b/tests/v1-import.test.ts
index 45048ef..cbf7631 100644
--- a/tests/v1-import.test.ts
+++ b/tests/v1-import.test.ts
@@ -4,6 +4,7 @@ import { mkdtempSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { eq } from "drizzle-orm";
+import { RuntimeMetadata } from "../server/lib/api/utils/metadata";
 import { DB } from "../server/lib/db";
 import { V1Importer } from "../server/lib/migration/v1Import";
 import { makeAPIRequest } from "./helpers/api";
@@ -199,10 +200,11 @@ describe("v1 import: merging users", () => {
 			.from(DB.Tables.users)
 			.where(eq(DB.Tables.users.username, "admin"))
 			.get();
-		const adminLoggedInBefore = !!(await DB.instance()
+		// Nobody has set the initial admin's password while its reset link is unused.
+		const adminPasswordUnset = !!(await DB.instance()
 			.select()
-			.from(DB.Tables.sessions)
-			.where(eq(DB.Tables.sessions.user_id, initialAdmin!.id))
+			.from(DB.Tables.passwordResets)
+			.where(eq(DB.Tables.passwordResets.user_id, initialAdmin!.id))
 			.get());
 
 		const report = await V1Importer.run({ sourcePath: mergePath });
@@ -221,12 +223,12 @@ describe("v1 import: merging users", () => {
 			.where(eq(DB.Tables.agents.owner_id, initialAdmin!.id));
 		expect(adminAgents.map((agent) => agent.name)).toContain("Admin ESP");
 
-		// The v1 password is only taken over by an account nobody has used in v2 yet.
-		await makeAPIRequest(
-			"/v1/auth/login",
-			{ method: "POST", body: { username: "admin", password: "admin-from-v1" } },
-			adminLoggedInBefore ? 401 : 200,
-		);
+		// The v1 password is only taken over by the initial admin whose password nobody has set yet.
+		expect(adminPasswordUnset).toBe(true);
+		await makeAPIRequest("/v1/auth/login", {
+			method: "POST",
+			body: { username: "admin", password: "admin-from-v1" },
+		});
 	});
 
 	test("--merge-users merges the clash but keeps the password of a used v2 account", async () => {
@@ -244,4 +246,30 @@ describe("v1 import: merging users", () => {
 			401,
 		);
 	});
+
+	test("an admin who set a password in v2 keeps it, even without a session", async () => {
+		const admin = await DB.instance()
+			.select()
+			.from(DB.Tables.users)
+			.where(eq(DB.Tables.users.username, "admin"))
+			.get();
+		await DB.instance()
+			.update(DB.Tables.users)
+			.set({ password_hash: await Bun.password.hash("set-in-v2-Passw0rd!") })
+			.where(eq(DB.Tables.users.id, admin!.id));
+		await DB.instance().delete(DB.Tables.sessions).where(eq(DB.Tables.sessions.user_id, admin!.id));
+		await RuntimeMetadata.setV1ImportState({ users: {}, agents: {}, devices: {} });
+
+		const report = await V1Importer.run({ sourcePath: mergePath });
+		expect(report.users.merged).toContain("admin");
+		await makeAPIRequest("/v1/auth/login", {
+			method: "POST",
+			body: { username: "admin", password: "set-in-v2-Passw0rd!" },
+		});
+		await makeAPIRequest(
+			"/v1/auth/login",
+			{ method: "POST", body: { username: "admin", password: "admin-from-v1" } },
+			401,
+		);
+	});
 });

From 8c8e5ff22bcc3c4e7b5247c8652166709037ac7c Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Wed, 21 Oct 2026 20:54:44 +0200
Subject: [PATCH 13/17] style: format the agent control test

---
 tests/agent-control.test.ts | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/tests/agent-control.test.ts b/tests/agent-control.test.ts
index b58b716..2123199 100644
--- a/tests/agent-control.test.ts
+++ b/tests/agent-control.test.ts
@@ -1,4 +1,12 @@
-import { afterAll, beforeAll, beforeEach, describe, expect, setDefaultTimeout, test } from "bun:test";
+import {
+	afterAll,
+	beforeAll,
+	beforeEach,
+	describe,
+	expect,
+	setDefaultTimeout,
+	test,
+} from "bun:test";
 import { createHash } from "node:crypto";
 import fs from "node:fs/promises";
 import path from "node:path";

From a2d5a89102c21ca8fd921fcff07e5e5034712f4b Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Wed, 21 Oct 2026 20:54:44 +0200
Subject: [PATCH 14/17] style: format the agent control test

---
 tests/agent-control.test.ts | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/tests/agent-control.test.ts b/tests/agent-control.test.ts
index b58b716..2123199 100644
--- a/tests/agent-control.test.ts
+++ b/tests/agent-control.test.ts
@@ -1,4 +1,12 @@
-import { afterAll, beforeAll, beforeEach, describe, expect, setDefaultTimeout, test } from "bun:test";
+import {
+	afterAll,
+	beforeAll,
+	beforeEach,
+	describe,
+	expect,
+	setDefaultTimeout,
+	test,
+} from "bun:test";
 import { createHash } from "node:crypto";
 import fs from "node:fs/promises";
 import path from "node:path";

From 3da12e263c32810ccb5a7a2864980fa370482d69 Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Wed, 21 Oct 2026 21:18:55 +0200
Subject: [PATCH 15/17] feat: install the dashboard as an app and recommend the
 Linux agent over SSH

- PWA: web app manifest, icons, a service worker that only serves an offline
  page when the server can't be reached (no API or WebSocket caching), and the
  iOS home screen meta tags.
- SSH tab: explains why the Linux agent is the safer choice, asks for a
  dedicated user without other rights and warns when the login is root or an
  administrator.
- README: the same advice in the SSH section.
---
 README.md                                     |   8 +++
 .../dashboard/devices/[device_id]/ssh.vue     |  28 +++++++-
 app/plugins/pwa.client.ts                     |  15 +++++
 nuxt.config.ts                                |  17 +++++
 public/manifest.webmanifest                   |  21 ++++++
 public/offline.html                           |  62 ++++++++++++++++++
 public/static/pwa/apple-touch-icon.png        | Bin 0 -> 2557 bytes
 public/static/pwa/icon-192.png                | Bin 0 -> 4642 bytes
 public/static/pwa/icon-512.png                | Bin 0 -> 14502 bytes
 public/static/pwa/icon-maskable-512.png       | Bin 0 -> 7004 bytes
 public/sw.js                                  |  26 ++++++++
 11 files changed, 175 insertions(+), 2 deletions(-)
 create mode 100644 app/plugins/pwa.client.ts
 create mode 100644 public/manifest.webmanifest
 create mode 100644 public/offline.html
 create mode 100644 public/static/pwa/apple-touch-icon.png
 create mode 100644 public/static/pwa/icon-192.png
 create mode 100644 public/static/pwa/icon-512.png
 create mode 100644 public/static/pwa/icon-maskable-512.png
 create mode 100644 public/sw.js

diff --git a/README.md b/README.md
index e649f47..0474f1a 100644
--- a/README.md
+++ b/README.md
@@ -73,6 +73,14 @@ secrets key (`NETIGNITE_SECRETS_KEY`, or `config/secrets.key`; back it up) and a
 the API. The device's host key is trusted on first use: test the login, compare the fingerprint,
 trust it.
 
+**Prefer the Linux agent** for Linux machines (installed on the device, chosen as its Linux agent):
+it can only shut down and reboot that machine, through polkit, and no login to the device is
+stored anywhere. With SSH, the server holds a login to the device and sends it to the agent for
+every command, so whoever gets the database and its secrets key can log in. If you use SSH, log in
+as a **dedicated, unprivileged user** that may only run the two shutdown commands (the generated
+`authorized_keys` line and `sudoers` line do exactly that), never as root or an administrator, and
+prefer a generated key over a password.
+
 ### Linux agent
 
 The page of a Linux agent shows a one-line installer:
diff --git a/app/pages/dashboard/devices/[device_id]/ssh.vue b/app/pages/dashboard/devices/[device_id]/ssh.vue
index 0fe7742..92acfb1 100644
--- a/app/pages/dashboard/devices/[device_id]/ssh.vue
+++ b/app/pages/dashboard/devices/[device_id]/ssh.vue
@@ -150,6 +150,13 @@ async function remove() {
 	await device.refresh?.();
 }
 
+// Logins that can do anything on the device: the stored secret then grants full control.
+const privilegedUser = computed(() =>
+	["root", "administrator", "admin"].includes(
+		form.username.trim().toLowerCase().split("\\").pop() ?? "",
+	),
+);
+
 async function copy(text: string) {
 	try {
 		await navigator.clipboard.writeText(text);
@@ -171,6 +178,15 @@ async function copy(text: string) {
 			description="The device's agent logs in over SSH to shut it down or reboot it"
 			icon="i-lucide-key-square"
 		>
+			<UAlert
+				class="mb-6"
+				color="info"
+				variant="subtle"
+				icon="i-lucide-shield"
+				title="Prefer the NetIgnite Linux agent"
+				description="For a Linux machine, install the Linux agent on it and choose it as the device's Linux agent instead: it can only shut down and reboot that machine, and no login to it is stored on the server. With SSH, the server keeps a login to the device (encrypted) and sends it to the agent for every command. If you use SSH, log in as a dedicated user without other rights that may only shut down and reboot (see Prepare the device), never as root or an administrator, and prefer a generated key over a password."
+			/>
+
 			<UAlert
 				v-if="login.data.value && !login.data.value.agent_ready"
 				class="mb-6"
@@ -188,9 +204,17 @@ async function copy(text: string) {
 					</UFormField>
 					<UFormField label="Port"><UInput v-model.number="form.port" type="number" min="1" max="65535" class="w-full" /></UFormField>
 				</div>
-				<UFormField label="Username" required>
-					<UInput v-model="form.username" placeholder="admin" class="w-full sm:w-80" autocomplete="off" />
+				<UFormField label="Username" required description="A dedicated user without other rights, e.g. netignite.">
+					<UInput v-model="form.username" placeholder="netignite" class="w-full sm:w-80" autocomplete="off" />
 				</UFormField>
+				<UAlert
+					v-if="privilegedUser"
+					color="warning"
+					variant="subtle"
+					icon="i-lucide-triangle-alert"
+					title="This login can do anything on the device"
+					description="Anyone who gets hold of it (e.g. from a server backup and its secrets key) controls the device. Create a user that may only shut down and reboot instead."
+				/>
 				<UFormField label="Operating system">
 					<URadioGroup
 						v-model="form.os"
diff --git a/app/plugins/pwa.client.ts b/app/plugins/pwa.client.ts
new file mode 100644
index 0000000..ec55342
--- /dev/null
+++ b/app/plugins/pwa.client.ts
@@ -0,0 +1,15 @@
+/**
+ * Registers the service worker (public/sw.js) that makes the dashboard installable as an app.
+ * Browsers only allow it on HTTPS pages and localhost.
+ */
+export default defineNuxtPlugin(() => {
+	if (!("serviceWorker" in navigator) || !window.isSecureContext) return;
+
+	const register = () => {
+		navigator.serviceWorker.register("/sw.js").catch(() => {
+			// Not installable then; the dashboard works the same.
+		});
+	};
+	if (document.readyState === "complete") register();
+	else window.addEventListener("load", register, { once: true });
+});
diff --git a/nuxt.config.ts b/nuxt.config.ts
index 83dc2fe..fc76dbb 100644
--- a/nuxt.config.ts
+++ b/nuxt.config.ts
@@ -14,6 +14,23 @@ export default defineNuxtConfig({
 
 	css: ["~/assets/css/main.css"],
 
+	app: {
+		head: {
+			// Installable as an app (PWA): public/manifest.webmanifest, public/sw.js.
+			link: [
+				{ rel: "manifest", href: "/manifest.webmanifest" },
+				{ rel: "apple-touch-icon", href: "/static/pwa/apple-touch-icon.png" },
+			],
+			meta: [
+				{ name: "theme-color", content: "#0b0c1b" },
+				{ name: "mobile-web-app-capable", content: "yes" },
+				{ name: "apple-mobile-web-app-capable", content: "yes" },
+				{ name: "apple-mobile-web-app-title", content: "NetIgnite" },
+				{ name: "apple-mobile-web-app-status-bar-style", content: "black-translucent" },
+			],
+		},
+	},
+
 	vue: {
 		compilerOptions: {
 			// ESP Web Tools' web component (the ESP32 web installer).
diff --git a/public/manifest.webmanifest b/public/manifest.webmanifest
new file mode 100644
index 0000000..9c498ac
--- /dev/null
+++ b/public/manifest.webmanifest
@@ -0,0 +1,21 @@
+{
+	"name": "NetIgnite",
+	"short_name": "NetIgnite",
+	"description": "Power on devices from anywhere",
+	"id": "/dashboard",
+	"start_url": "/dashboard",
+	"scope": "/",
+	"display": "standalone",
+	"background_color": "#0b0c1b",
+	"theme_color": "#0b0c1b",
+	"icons": [
+		{ "src": "/static/pwa/icon-192.png", "sizes": "192x192", "type": "image/png", "purpose": "any" },
+		{ "src": "/static/pwa/icon-512.png", "sizes": "512x512", "type": "image/png", "purpose": "any" },
+		{
+			"src": "/static/pwa/icon-maskable-512.png",
+			"sizes": "512x512",
+			"type": "image/png",
+			"purpose": "maskable"
+		}
+	]
+}
diff --git a/public/offline.html b/public/offline.html
new file mode 100644
index 0000000..44d7c5e
--- /dev/null
+++ b/public/offline.html
@@ -0,0 +1,62 @@
+<!doctype html>
+<html lang="en">
+	<head>
+		<meta charset="utf-8" />
+		<meta name="viewport" content="width=device-width, initial-scale=1" />
+		<meta name="theme-color" content="#0b0c1b" />
+		<title>Offline · NetIgnite</title>
+		<style>
+			body {
+				margin: 0;
+				min-height: 100vh;
+				display: flex;
+				align-items: center;
+				justify-content: center;
+				background: #0b0c1b;
+				color: #e2e8f0;
+				font-family: system-ui, -apple-system, "Segoe UI", sans-serif;
+				text-align: center;
+				padding: 1.5rem;
+				box-sizing: border-box;
+			}
+			main {
+				max-width: 26rem;
+			}
+			svg {
+				width: 3rem;
+				height: 3rem;
+			}
+			h1 {
+				font-size: 1.5rem;
+				margin: 1rem 0 0.5rem;
+				color: #fff;
+			}
+			p {
+				color: #94a3b8;
+				line-height: 1.5;
+			}
+			button {
+				margin-top: 1rem;
+				padding: 0.6rem 1.4rem;
+				border: 0;
+				border-radius: 0.5rem;
+				background: #0087ff;
+				color: #fff;
+				font-size: 1rem;
+				cursor: pointer;
+			}
+		</style>
+	</head>
+	<body>
+		<main>
+			<svg xmlns="http://www.w3.org/2000/svg" fill="#0087ff" viewBox="0 0 16 16" aria-hidden="true">
+				<path
+					d="M11.251.068a.5.5 0 0 1 .227.58L9.677 6.5H13a.5.5 0 0 1 .364.843l-8 8.5a.5.5 0 0 1-.842-.49L6.323 9.5H3a.5.5 0 0 1-.364-.843l8-8.5a.5.5 0 0 1 .615-.09z"
+				/>
+			</svg>
+			<h1>You're offline</h1>
+			<p>NetIgnite needs a connection to its server. Check your network and try again.</p>
+			<button type="button" onclick="location.reload()">Try again</button>
+		</main>
+	</body>
+</html>
diff --git a/public/static/pwa/apple-touch-icon.png b/public/static/pwa/apple-touch-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..afe9f0494cf623d6f866305befa03d292df81e3d
GIT binary patch
literal 2557
zcmcIm`#;lr7+*<~%@AqTq?uZnI8-L)*2R#;CdqP1r^Ue`moxX|vZ0WWOQFm?x8xFr
zX3-(0%OXZX3SpXS#+<MIhx5bd^L(D?{k&e!^M1cRpU>-wvnH5HN$!^ffk0B`_%lSn
z)@&__?Z94LnS32E+x&=Trl1NAVhRM>Rd0UA#5VBJ?69+^{A)$<eCBX-6YfA2^0tJQ
zf{UlI*Ft)Yf%Q<$U+2vuOYPUqk$Yk-ro@O05lLyV$nN4<^5Jr|i$TQ*agr&<(k6>|
z-!5O?Az9ug%c3^H{k#>ZJx)s_jz2O-Q1UF;>o?v!@NhWu*DQZwXT7fQ`C{4%XQ7!q
zXyC19QmkOP1j0MRVXtCFjj#MarZcjDT3yJqy?~@Mf<f5ziw`Z6ME4ssqGdc>u^|HV
za?E%s{jb>Uo@3THu^mpY#R{@}lh22*<(B>WhkuPX^QMxld+g~!jZ@4r{Fllh+d+}K
z>%enStMBF|c`Fq#jbUTLqm3;ay58^(i#?%X`$zI|cp`0wW#3+^qVhm!k6HPT^xe7m
zBcUey9jkn<U+smc=;l%*0;c?{<;-cVddiaDG&Kwj@q%>-_!_6(Naa+DCp__}{fE4<
zbnw8s{x@vL{##KBf2&|qL*cNi7~R(S)k7X$xk9ZQi)r~s;vuxtP`{zEImXN~=Phb>
z^jh3`c@&fmqI{1}S^``0p}6}kA*{7tUL14}3ToC2uf3z6D>bOw=U3&&TJ?~mF`Vwc
zCGvGxr5E~xn7B1z2HIjfjd85N>w?guo*S~r%@3Hk!W28aoh@6zT?pHhYhF^~LzNge
zIVo_cS*)P2GU&kaE?oP;uoHDRcgKuoSWe8nRvRAK9ZFz@|G02dDis3-r`L;;1$|L@
zz15m6=b|hO<PJ-*Z65Z2B(05UO6&>$3Hp{5Ia=J~+)%<5c9&0N``pz-Q7(x+y^5tQ
zqz{vZeqo;FrS2>H+3)^q15P7~v46_4?gz9F_sYFaSoVkCf^W#s#y2Bl)FB}|@pXCv
z$>o3f`GkBp?b^A(AT%_Ly5l8<d;$tCdCrvU+P5vhisd6?D&a@|p~{brd^TXGF+1v#
zS=g3yJGe_9S$Jgj>8%u<l#@h77$9R)?hR_0cc|)()q3qC?=6Gbe~><34zEo8I0Nw!
zX{|j;rJb%}%H<KOUK2VmTcA~?==MSAyJ0_fWc1Yi<qoC01)=4cE2<xedlLnP=(BJ1
zk=vEtQ^>XcF$~|4&lW4X6BX``;bL1M`53lvl`)}Vbg!jM>}Ob4O-(fW$F!<f$f?A%
z+g^1SEze>pUHY~nX-hP1%a2k@JlCcF1msNmLT9i9groR`cVrWo+4w}Z3@K&#<HAji
zifvV+Zp<y#!Fnz20U#X&i+MO9oodQzDSQb9`;qTx1C-UoL%L`9Q4nzrgw90v*{5TM
zvRt71$8E@GOgYKrho9Vi+K}~3IpujTdnKEaU3jcYI<?I{-6X6!0gT6feLywUL(NyJ
z8n+>vfm(|PO1Pb?d_zrdQR7zu0q!7r+2ld5`53=hJ0f}-u*9!cNR2(&ORfl}O{%TT
zCNT1n4LsKG@>-*+jh7B7U7gR)VmAGgRxiRY$@^A4IO%%Bt7op-W!eK)`Lt;9-aJ)%
zs++tSJ1tAm(MJ4CqsqHNc$pNVWTy{YRG%Qx)ZZ0f-;bchpymK)K+eb(*XDU72KB<r
ziaDVe@aTCMr`3ssYxnGkM!8+KiEUsq;y035L+T?W+*v6~^tDFj>8#sBJDFKHUxStR
zDWyflJrO?LsZ<3F2^SmM_o-y)i(IPK$0%-L2zIwRU!}LvmxF6e*LGeybj5*=>J$*#
zCiPFxjXH8QOAh{dY>kF`Cm>W$E<Fp~{Kp}ah{H=*v6Fp*(B_LBFG7mb6{KEFlqHV3
z#HCYrpZ0DUH|+OlHhL0#uW=Hd2)vqIK$w`}FTLcTTUnCBa2kwZlNa>(IhrLo$~z~d
z1slBbPRr8oGLIdxUDBauOA>#~#{;$dUR6!&y_(zuJLgpwm_4ofC&XZ7(n+p$#J<wU
z`Wwk*B&IDA;L&)IIh}tAD}m(56!YUa&FfNr{I?88I=9h((0RB=0do--yJKK{r03CQ
z?X+s%hnld1m?oY#@8uPDR=MZ8TIcajhw_61DMmey!qqx;EQ;K*UnLy|CBYn(pmX0n
zb944cAqShk#YVL*L(FpsJV9cy?bfX}pSf}>oqC2P4SvIc3>u|%HyqdG$3`l_yk{Rs
zP!*GmHwB4DS4ZdN8VcbypJl}j5Zzs?in(z@%wn?*s!KmFg3fks&iqsGEGP0ay!QYR
z$iX49r8^o${y}ttW6~0))EEXvy&~72=#a~>17JM_OAumC^31)bQ^iC{`eI#~g&CKB
z15TF=Mz!jIpeHu+!O6N8>a>6`zc>1MFKO(g@q(k*8um(Okb%sT2&bZTqq~%(Fy6kk
zgvIN%;yMV-$o`sJ#JQ}@6eG?fBW0>p4+~1~{}t5m(2FzBGBcHHe&wx%78|)@g~<Ro
zMU38S8rWF^)N;Y9{9U(A9bgTInTx|b)}d7Z?l$TY9jHD1s;^de7!?wcMm=K!p{Mqo
zT>D%c5{O=kzfaTNQ{!`7WO%)hNorJeSB^4)m__B9MmPffsUb`(50HoUZTxx*bZ;EP
zc3!bwL>D~<s@Y=moJsGuq(pDET=v4KOJ~E^0#NcxG-`}O{_=h2a#22zNWiX3h$l`7
z62o;*z1wlmM@xO2>VL;j-D^V8#<*=1IR9ODT@<Lb<y*HQ1FddymalKFFMR6Qw%ru_
zX>kR^)u;t9nKoq20A+KbfcpU8AYry44ik>W4c!3~x0FO80>UL(`;Af#e5&LngauGS
ze=8qoHF*{If*#-h*V-5kT!szylh-am=>6kt*|j4IZ}gKh6=4s&rR+R2#z7eV@wOSC
zz-(zw?Eq~ey8~MacEeW%>+q2djZ@3~mjVK+Tht?qac~sgws?oD=4HVxf)Cku!{`AU
z<yo72*v#{aN0y-ow{Do(H!dk(TPRhkUo~=2zran|x~7SgBIA(ZFWT7KI{sXx|GdN#
zQpy}e=!xOuw|}J=gbU9(WL8%+mjugLM?{OYvu64cNA3QfA?Ejdv?&(Pha}z++Ia!<
O9LW4E;Y@|8OXPo9NZ#H6

literal 0
HcmV?d00001

diff --git a/public/static/pwa/icon-192.png b/public/static/pwa/icon-192.png
new file mode 100644
index 0000000000000000000000000000000000000000..03f448a9e1a019a9ac0ca81908fb0cce02134671
GIT binary patch
literal 4642
zcmX9?bzBr(7oJ^~lx24j=@Ka^2}K2gl`a7R0g(j+N$JjIQBp#>yA@efK+*-JLs~(R
zlJ1gb;TymAkC{8a=bkzDnKS1+XYNGmXsN)dn5h5&fUBu0>Vjj-zk`AdJnQ~;AO{DC
zyRM2nfbVBr0RYr*HO2e-K3N-+c5$o=zU12%dk4QIjDwN>eXGz*YFSVVeVik!g3H&Z
zl=a+CL+0C%Z#7@>Uu}!s;D+%x(q)+&=9zpF3>MELfmyjSlSi4m_l$Q$=p}>>)s%9h
ze`WhO<OUeAH4d|njC4-OoSqRjv<4=$)wY5fZB7CkC?Rp`5Bh191}sX1S}GJrp?Rc=
z6+kU83Z3zp^rU(s3#}v1a}qrSmLYYS>3$J)iS@hIvdy)6-tk4xJ9m8c__*S`xX6TI
zKI|yFa;2l!=}dWJ6io!<3Rz=;eL`g+jTs+CAX$c-$`CaokL>^JKFu}5=q$G5XJMS%
z>)A9r<`hVY7N5jk3N}Oz-IP1v`x=w(Exx=dkDn8%JY28>^ra>VSzl@|4|yOCuQAg}
zIP+~+)SHai11Sur+gw1Bx>Yk;aT+p9jp$&QgU<<D2MFeF`Sfh$W8i46k(0;mtEY+{
zv6*vJ5P%w+{vhD9&T>F|g%~`wBeHm8<Km4fF(TrZ3A0|rRf?N2bQq2($p`QBPjbl3
zr8q|NJsRpmQGqWg_OfDm6e}3VRZUFOdN)?Q#A6GABHfCm;L*#9qpQzYudaTH7Wwq{
z(xuQGvoYzgw}&xrG!LB79U9`tp(2X5*RJ?pP3|!@J7n~1;*0O8mQ!sh@beZ3nP5DV
zJ3jAkCe^9llYIhF<*m|7E+}0Pz*BHpJABm4F%$CIe77(2Nh>(%zIXRL!+oWY`mo@w
zU%uMk%wCp^{B*|IDq)f-XBi44EQTnH)r+@^GbAgm3ZH%SL|xw(MSUmcKc;9Ftx}p1
zbgRebzOLCwgQ%8HEQxOmpc3$p_(Kj43<c8+1w0+t91F$H3vBo#j?~i6xI%c93(jD1
z+4p`a7m{)&^vsBHWvpTy<&T1`OT~>4oZ`du*RT{?B@+hxy0?7{GLf>JgVm}x_a4>^
zH@hB<g)?XuS4}JkRNBJ&mV1_@wAeSfe!ee7uXr3-r=Jx(MCJ>pJDsk+uVgzdS9`Fc
z>BfhPlpW;_xj_~SJ=P0;eSkP8imBlAd3O-v$4Z4)<(~*7HXWx;BZv>rPolyOT=8;p
zmfH`_yHK3zS^*lo&9>&9Y=Lx)ZZK7wkEam(-Ooa^OtB?j5^Y`_Y>_P-u88na94wtk
z$4dWgodviPH<koRD(wX|>hOL)ERqP@#8x>LX;USKRyLhUXS)iG+r4e1q4J%|)OSgB
z1Csj-LK+2@f;_wC$pQBhQht*Q>b`V_=jDP(vTysX5FHpL`ej*8AiO8_tT&=E6@LP`
zlW|Z}!pU@R><Z9k@$)Y5?T2x)i_(5IDL)3gR5sxf0DZT(b2j~;ihS|x3!qrIJJyWS
zw=sP&{Gu_~_?KiFk^lO8ns2_O0CfTol698|O~Mm6bZTxLGx<yUo9e}}W$X!L%YL|G
zUjOD%M7pE<!={tqj9SA9Gco~E?dMdoIpmu5y6AZa-#bb^j}vY3>pbAdiqAIJKQ08x
zR9vTyh@ed$ucy-axGGWfZmuN%y#rg^d+(j8@%57jDGJ@@mSIpMC{o^_gtUF(HFV{n
z^m%N)-&E-8*8V%Z%d7!uSHs2o*?Cuf5r5e4q#B~Bf>sb&zQJ8+2zBQ$ziA^)z}Ifi
z&(q@qkUKA)Tq)WUyg43G==06qNVxR-K6Z62cxdm_nrA3|H;VIS8g)|2Z}R6od~58j
z<Ga!2w?cCR$S6p8Lx&lHDE8(Dq?lC*=l7Uv1nh8>l4Lr@F1P#crb@Gvjgr^QS=IK~
z(_LOL&4m~e9C-RhvMcq)rh?epa_-sP9OVWe283mfhce#vf|lJY1KS|*=<b%3zU<!N
zCbf0C=qH(_ej~Ut6p2o*qAxr<mNsG0-tZyS-}H8DQs#nCq^+*^>JWBC3_FuXa^uwi
zXp!Hr5`W-Mc+IWqadU^`^zyk|w3KLc+D6ce;e=D*)}QRAwStD}ly>LBH~@zG86fa#
z>>U{w<ydD*ja*?OU~By#C-hIv8qTL9aVMr?z)#!>G_>`o%jW?_VGbdL_3uplz!C~W
zC;G7%ug4*pEy0^+it^iOj!)bjXo1|jj<#<ezd_h{3QlbnLR5i(`D$>|a>D)NQ3V+|
zUpF*p5uSBEstlbWA*&xA)RpKB**V`kUl*L`24wlod{g(r=vksSZgl^tWmW_388rO$
z(q9tU@yzX@uRnSuNQn#Y$*pJl?mKo$FtaSb**vBWor&-99m{tc5+-aJdVc1Kns$f-
zd|Ecb=%t_SWXjM2slNXf6~b1jKxeornT_q00%b(~roVsOdY=H)wUvX0(TDS&mb}ye
zlNl?8C^pnx;)e&&nYddk+}bS0_6Dmje_bEATdM(`!QIM-w_CmT`2jlI35SCZMMH~|
za$SYdrOHv|Afx>+_5P_nQ3Y08c6jMhDo8lwFy7Zm`oyChSv(9;>a;-SofKu)73S^8
zFTTSKABb0UYRVd;brOJa7cj>DpEh;F;>w%%6M@mLEsz#B@b9wa5Dba_67S=)MI0=T
z412qJ{Av&}J06I>uL81l+aF`1Y~k<8HO?>2FE;qQBT^=l>6wbMr^TW4`yYq(<YF=2
zOoa&}9826lYgx`GV4>GwRm4&gwL<jNgt{cH_G$dfT69rk(ophAo|oe&Mrm0MAQLOa
z;D!q>$dd9Klf;;w<R-T}i{yEfWP388U<Rl4{6c|@5j>u$v_?r6$c|6&2m*oX?VRW2
zLY+L+r7VA;cWu9N1#zkBMVt0w>oQiun<qBrRF8A*h>2e~P?fitO_{E^{V>>a_To0n
z800-~HT>O*c5Yr{(%@`~q|r}zkJQ=mIyice+4yT$#{7;1O@OEf39>FMB~BNU>5)1!
zUUvylp$&d+OL=XMX!dp4Pr;ihHl`5(g-Ff?F8oxXShfx8nz<=%BIX2bDbg|7y__Z?
zTilrBQcj07Bl465PIwspdF6@%{wrF&b4~B-v(_o`KFhtL%rn0);#^U<T`R$-IoRY)
z@vq;+Q9*yn7~x)f6=4YU%J9U$x&`qVrkzeh&W{^+CzI>&`6N1o?Gp6u>JX*%bZ4&J
z&AEo&ZN*lyJhy&vec40!q*aLN`p+jQB2i${%BSQi2{I)tB`=B)fGB9L*Y;-0v9AL{
zO7eNYJe7+Wzp*un30q<o0G`_0Qi{)IcOv~4GeL(+t*{n{%&0%9>_Bwdrmp<AqgJvu
z4zu7Lx3kg1dmIe^^t9ST7@6!O!WWG&RkWBiTM=nBguBA{F*_KS0yS@@{1T~Ybikw`
z805x5@;s@%1oYH<Nln`UdhQ=WY^k+Ih(O?7%7|ww(*Exd4Y#2%B$;MeL@8>J9PI=*
zl9L*YY<n4nJ`QZq7~=g45%qF_u`U0=C@<?canP1mhOMp*V_q5LBY<QY&hsuqp!{uP
z(l-C5ip6(}GKAb9Celk;=m*`&5BBfVQC;LWpaxg&xxNixlgdy>b=PQsO8x_*#@Q9~
z!9>Tz1<@x#52mYwHB;oRG0EQ<SU&k6sv?#|DwWd5FD0w*@IYL;GQ1#2Fm<AbZn-E#
z>Cpn=Z>ug$yeTd1=fmhrxdEDVcl;pcYgxg-^v^-Ku$CIYDw?THqHQ~b>4@N}oQxV5
zJX{vJHV9g#RmoO1hM<%rD-_NcE=n4sTM~gg=KWNQ$IUzamJu?ZQJdoO_n|s`f+N)B
z8=8|=taGXgQ6^JwLScDYi|=|pQeCKP<{q_ie7>K<X8jTbty>7^`q|E$JA-a<kA^Vn
zW&h;igJz!7N9i0E<E#W=^vhXWdvN_;n~$@tt2$ICJkNw!OxSdt9{iI8YvJW3bzf|6
z=mmB;zyje|`agY#k0oYhK|4?0a72FB0OgkyRF>-8bNwjQcc1B%xBUIqY>^<;_cQhR
zZ(pVz&#^DdN7)2s=4e<8S=E9^VAM2?WVNEK&;5aO7H|zRM}}t5iv%se(x>+qhGsTy
zx&|qWPqqvDzIuUKE@(bM*xByH!Sa-)q?-R9FO7?ZQ*7sDN_5Oy+1t%v1mw7ZTQf%1
zGte~c=x=g~Vf4AGfW3KtQ(JAja|cII=#jQ_(tqI0*mtv<)7ps2Mw+&g8>g3Pabob_
z#~Zo>hlPGqN){V6oK^G3gf<k2gY~*`{LRY_%u0hBkYx9qO%+xRs3=)w<vF{P?e&25
z6>J;WH7!MLh@m!?8VXTZTHM353LC%LqX*2!(ECtPsy({bB3LyA4RcjMdA9qw`DQij
z70euFP{L%;YbSy*P7X`KflAtv<zC!K^6@{K{~;UY%^ymg?mz35z{g(CN(881S~3}p
z^n<;3ysDP#Wbqn4hVS<^2xFLUPcdE?8$~#hQ4Dg=6||&0R0G0hf2?TF*Z8CSXZ`Wf
zJWW?2cc{vjTXt>2i}HC`>2Sn`C<<Ellh9a(W{{lix*_1bhUZevl08rb_3kCp#1%9x
z?tYdD5#;xN)~UU30#tN5>$S(8H?WCeDLShL)Lp2VJU{Iq+i8yCe4Y@-<&**7rM}IC
z8BvW~D&DBZh}l>^vhj+lED3<S<w{j|tncsKv!V3oi;@me#x$9yNpZA-F$I>F(_i@q
z3l@0riBG8^59MpIcTSJiZ#4Huf84b2sPa6~TUD|6rd#&;$!8%op9rP}i=cgPs-tZH
zW%?Zxr^WhUqG9jJpV{V+p_=ZIjF7P-UvuZ_7F~+P+%*vuzH%$A7#0JRSruIe-pn79
zu+3;`-Y*E0>2IfPzNju>Ho&SYXefvYdT;{^ZcEm<+GP=ShVQ3SY16Zvx#xU#wswq7
zR_6T(W4Qg!kqnj28^liMg;U#@C5w~Fvk_yn=d@GcCoF>Fv@pH|t9$g^@sVB0fuq8+
z3HO=H)-U+9n2s=8)@@_c5na-|J_X8O=>sc_Hzwe~&7)9{5~3w=x#kf)GAoB#OEcux
zAz@QDq&ICSdBF1-f_Sg!YKO&ne9BvBn47=V?rnZDIng5<=9Ar`5)a;by;x|$Rk6cG
zw}teUDS|??)LWk2Ruc1bZ+J1~?A=REZrk&nA5;JUeJ{D6prXikY?y(ZvRK?WHd$f?
z6qqH$p1-<*TBf;Bzx>r7)<9hDevOI+fV|<AgWKpkBd5b5+l+G?CU{E`U~M^7xk30<
zdta@eSvqpcaxsX_Y1eW)^nKwYfxt}5A<8N=w+aMh+J{)$%bsRmS%}vPrpZXqEUrk6
zST;d`3+VNood)3d<bn41PfT<DE{&HQW(7nK{d97X?0;k&hR%j~<?QQkS>zAa_ulkH
zNeJM7@P(+PJ^Y|4Bt$3W^}5FKK`k0@aO$mWkuD3iwD?H*x=>d=(43I+;5mWZ2i#CS
zl%<Qxvz+NXHtBS%agyr@pDFAPw?LVY%l+*q(W%&%k#v4dXp9?pqb*@X-xY;^x>!ns
zozvT!56{-iyGElgxIhR8Um;aX?lrDV71Y(=t$oxTj>iE@F<yLf>$y;PvbxpM%l9b}
zx>_Bm0`@+B+=n~h4!U7VjP+t)t8`+(dfSgHW7b3Hs(pK(G{yJhdXue8tq#|fzg9g(
z`W=1==$dJadW4_Y`Hj@V_LfaVHqAnRA<{KZ=lY=xGDdTp(p&_^w$xuI&-$fL`pa2O
z0AY`Q1}At}aQKJBK`6O<3MdKUmCq!fi*j9@X}j=}o%WQQ*$i}$IU}=C7f=3xPviu>
z7e+-I(w|5Ntsk_>wS`xTmU55St?`mMaTVB2ZE1(FNo;Y?kk@B5kdI@w-OLEs@La9i
zx$Ugkh_3-Sx$9#{7)@X*;zXEH8#&u;f^V&T;`}@lx8mV`$$eg(zmI&RSkdLc#S|sb
z#}70?`m~Yh+KX<VjoGU%CpEVyi>H5srcsfM&{+ydl*m67VAP8gh38%NWVpUQBhxod
y`BlVdTqy)Y|CB*<-J%0;@u7+Ycd*obE_bErFMHIT*i`VR51^)`rHGd|fAK$Ik<J|e

literal 0
HcmV?d00001

diff --git a/public/static/pwa/icon-512.png b/public/static/pwa/icon-512.png
new file mode 100644
index 0000000000000000000000000000000000000000..9f941d3d850e941794056bf961d4212310bbb4ba
GIT binary patch
literal 14502
zcmZ8|c_5T)`~N-mMyRYQ;aD1^WQj}|WQ{O(Er={hS}-9@3MX5#RFW-Ac7@6|5lME5
zWE)G_m$C0N^Sj4+&-?cKo_{)?`+n}_T0Yn3x}Iwu8K2i-L-Hd50Bm}?XR!d#!T+TL
zEKKm9mAhSA@E^n-td0gKY&$#!fDq6-t8RAp<=mi8>BTYs@$HEZI78>?XpF{9(T7hk
zEPu0!TkUZ_WPj-TUz~rvLa?4y6tFmO!{V3xBZu4H!{f)jLuWi^*4S>n_#MJ7s(Xcp
zo!#jx9?^TF-%iMGUkvD_6JTQzO_MWA%IzbOH4m^vI%ntFb{CQ+IKne?`?jqw&$y^f
z_z(Hoa=y?$jvGCAD_`!F?(1{j*JWnjrxx0!^#@fv$Y~CmBg@Thn*NweI)w2<BK>)~
z1Y6c92e-Joj+$08&ah?$u%;PxR_Y!2VV-9rCtvCliMugtPek;!#}&4<xp-eu7Ac<G
zEAi64^Puog1G%e&?+A=aaB8vjU6rptbZufEIvR47I@t+XOS#XjxAmMy0k0puKDDn~
zUX_1Zv1UwiaQaS=Ltx~P!q?-b>i5kaWNkF1r%wzVO_FFufp^?EPlF^*t;S&WQ<hmq
za%VX}`g^H|Z<N0#_g!G2m}BeFW;Vv)O9-<nkk>VyH0@Y7@RiidHDY7GLEaN=w}Jv9
zyxbK=8`m>7q_W-^7wZx4gH)B^Idxy5oQHnl^{qp(ad(ei6XU|$PftGg4d4ncVsL$%
zkTjgc3>MP%)$+v78y%>0zIpRI2VuFC4q3C`(@TK*D0S8{V}V-^U61Af!;=~;heRts
zT#2s?-Fi>yLK~I50*8fCQk13ILh=l@!W>JgmI3%8H2GS1l6cLWBThf@hfjm6I2WE!
zQ4y6AgIX38DWPh1o+SDJpzuzLVbDo(sBfs+JrDQXsbh^X)%f{s{kTU|%qI#V0ZE&*
z${7?^d{YOTb6kq&!;OWuUpelqm_oOvhLSL<jIQN#>sfgG4kh7-xq9nQ&B@=>C<Q0{
zCKfxq;aZcM23-AuFQ%G_)&Nj6I&d-9HniXV+*TnSi|jhZn3|qGAsX(Pm~d%2i4k<%
z(_nf0@NBi5($DRuxTo4Kp=qRh&J&LmZ5-DVd##D~0JJu?I5n>Hmk*R>TqKh7GjefR
zzWS>ym^8oX36ZHH!xvMub(DivwErSoy!H4VOSGOAi{ITR1Jx;;AidT`2VCrh2U0}0
zZ1`U@cAjE<L%m5oO<P;KZ8o2r#Tf8BYncfvM^|%G4Wxdo%`@*^bxq*;yNbRGlU7nW
z@!o2S_Xq{xx8BM*OxY@<{U{pO$dSKnd>MpN)B>EuV|}dh=b3>#mZiu{GTv4y{ykwt
z;A*LjH$!TN*J!6wqR*31xbR3zTUbc~FYBeF$5*3dZKRdxWXdb^q}HFwzMG{^0X)|p
zn{PwaQ;K5Tg!G8B=eY3~*Y`MI<x*?82w%>5xS-z~BNejszG_t9YMG4_GPPv+^H9^n
z4QtxbvK+iE#6P!tdna!s5=}z#7`1^o4(ILsEb;nB+yMZh#8EqBjP2&NsU%g>F`dpX
zM!WW?fHi>x)p;mAygjRL`H&=Uj>pU?5-Rk2sVUgp`E4rQx$d(;4{V~QekC>CQ%gy?
zmy3(5b8Xs>kBZ_PKWnnWA&VxWSpi7rseNCZ%geUv;opmHy8q$^ytseu#IdmC-y<Br
z#mA|^S$f$ZZTn%nkIrdh(@5ayeV$;J#oQXV4t0Ymc$gX!#KXS#y6<Onv#Q}8emiIZ
z)e_%t%QgErBS7lYmbfRiqu1a2ohu($ufiQsIER>=p5A<+^-Zxge=189fNVy&@RnK2
zJH5BaV@vabcPDP00GBSQ1fojRR@)E&qxszb<TC+F$!EC0cDWEY#N_0(^%bYUsRRVT
zhsaf;+PtexB-RPPc|Og2@#EPE_DHb)B1I3tWepZ?Mrl62N%H#!@+Bn3d16mWOnv+F
zoZ(x60K8CVkqpUD#@)Qx{P>VRDda>&vscQ^r&`|}&g>w-T$@2KD(Xn9m(gZ$$WY}I
z#hKZcT_VkDZdu9NL|%Y*;tBHQ)=%N*`$_E2_B(Zx!EXANQ+XgwVl_GmISt3C59L?O
zv<FK}7*jiXGaDSeEgnEC!?>L!YdAkU63;KEMT{;&czdtzoRCZG`P&ZxI&xd&6%qw-
z*z&4v(u{vm1uwp^FsJ8vuVBx%DgYVx6Ov+^qo_V`xW0n;I+?e9?ED##*mn~x`6bEg
z2q0vr!9ve{ZhY^myHDoj_3U5#_~f?hZ5E3Q%)rjEC138)tL=>B3Kh*63!q%-nds=;
zH3Oqk#*1ESzvRqSlV=K`Wt$$zc&}dMFkb%W4`cMI4TteB2{2AZfb2})0_JR2gdI^3
z;FYuMeDN;~5uV;_Eg!yqG|!uX+IWoAE4ycx`awLAp*tHG@b~n_`_;Fc&uv`=pys{?
ziwE1vda`(q{13P8-xq+uB~D7w-vt41Whptdc;X>TX^y#oYb`zeGmJ}{$=`oPkn<9j
z90)uBC>8HB%Z;l$t*J>UiX2mRxXi%k>?y?o)yQ9GuxVfsc<RSYL=LpfwHC#a6OjrG
z0Pv~GZDXCC+jmZ0a##_(IwA-S;!B0l&8~1@y}=CdDQ}On9PVZTtW*FN6rVEQPq(3u
zZk%+24hc47O;r=S1CMk&>ulY>7trT=OWdcsMK--$7+P!6K8;M9w<Y?ShBMkr<@+Cl
z&k4WPXhKds{oGo-ZF*gMr~FA(dC8s5N5uo$G(ylS!oVgOcU}M*3woeE!iAycSfB{)
z@Grs>lv|c;1;06mY=2RyCQl5>m^Ng0LP=KaQGY;B_BYMEgbrDz*gpmg&E(^|uf!%O
zD_2$q;C_+>iT&aRlhgBkLaw!Z#qg!AzHdW4ig%RKK^;HM$*Q6tasfk+E0&f$9vl;q
zb$p2DKfd*H6J@?XQlJr&X%xdM`$~UKXa55o-ystnpj?q#-C76L`@=3Pxvg!16t(s-
zod=k%#J|Xdd}h_TVtmr$bdZL9Qv@o?R<Y#d;X`{t>xqP|aAd;E>n@mY=pwy%lcYCD
z`QUvT*%nPuO1R5v1Ab9uIYux>6+8-6!+YkQr(QL0uQG_23ouW+Gpchr+<WKZxAwr)
z7NhFSjS01z%`6ci3Dz%LkDE^|Ff$5Fjoe5YG__T9)%G7n;2+C;)TwW#VjD|s5C7Pn
zBeyoGE%}8h<`?>%O7*VoqkJUxhWaU}4zLOcm<FB>TVeKUW(4fHCC5z`n<}}Z$Uhg<
z;sjqeSwCymCrQowrzJ1q`HS_+XE#Ed#|AI3uTI;uVpP>AZnEUtmr4*A`gpZvLGu^u
zY!b18o1xNJuki`4sD#{>iokrGGpR@PA!0Rftk#YoF{hp#!o6;(m`-E`{OM;VY}ouM
zYLT1DjeDwvv<}v*Q3DKbBUZW3OFY93NlKhvh}R5Yds9*}(JYJpDBKHD+a#S&{OG7x
z?3wi)v)ytJo^MpBJYuZqWLi;iey29=va%yWhI5F_9F2_cT{e61A^$yZ>$t+olzmD$
zT^X`iQ}sKC2@D&|-=7_d-UFs{l^qK8mpx)%*$duNz8-(4Fiy7og)MKkf*iR*-gV%9
zU|@%lmb3HPU$I__#}0xnb=kQy+`L5LdYyrJ#}(Pr=I52GRePAOHGT2&9%p~Sq?8Sw
z_Xe{yGXSq>gVUz<Vp18iD2wgKzg3S0R2B9xUmG)SUweSWM56$(vA8|Em%FISNZ68k
zzeQ&LVZ{)AcCe;OKL-kYkBX;@=fRvqHW*mmntH(OK662l4RsLX{_ycR)5rZ(4^=Es
zM#r+Y<gevjg;LSz5oJ40u(ZEOU;XJ!S^BMYx-T^?ub^r6lBvg)huQX0>0M3>t6i?o
zo40%}Lr7bXBwF`(Y$F`@v;Q1i7h%M227&_d-xcOnOGm_FofUS72`RUf_Sxt-dY94F
z?5N>+VjJ_y9D`$$OAZCN^{>6S-jfwF#LHK(Z{=KY?H<9GL96NrJBlFY+#^}Z;}x2X
zrOOv@wBN_LC^$)4iEr6)4L@L}+`mH)I!cdWr<VH7l1}zWYgEne`QS&N&drD}1BaCq
zAq3=lPRW`(wcn|%o+IYoU9PSe6yz%q61WINlYVhBgAk9&(M0pj&sTc(o~)y~m^i&4
zkg7%Wrl()r3(9b~Xo{#Y+3UZRC)r;9106ED$^}aE9oAHr*SYYy^(BwD_Jf;dr`NB=
zpV+Cu?R9lAPDt@@M>EP?+fLqmB3ds@`Dvnt0Ouv0TP>$zE>t<_#*8W^$K_rn@zrF{
z`Hkzu#Gz#9K&phf5kWVz`9^$8Rl4pyGKa()Qi9+VUJJ&iW4T9DibjL_Gf`_%#X8ul
z2q7EdM`ubhoe&b>$75Dr7L1NoW*GcHH!;8Z5OC~J-<$wFU!t9$0phdpq#5Z9cw;2%
z^EB+-{FB=PL=)AZk-&`m)=FB~!`#TDFCCo>Wj`{d4hHY}zW#F7l8+=XCY0dy*iQ#s
ztNFqUCverjJ-Ne?D)Deph5zDKDzpg_iuo<>N0ax*F#-DQ$Ou&)u@-0ubZKreOhp04
zBhQaOCKPAgOr+{QMm=)YiAfq3V8HmXZZ7(TkdGRyN8PrXrG(1w;ZfyD=w%=Yfj+DE
zn)Om76L?5mOkMGPfiOSYl_*4)fvD73WE$<|#IO>{%eS6EJ0Zj#HreUJRfzxvZiC>j
zqEG@~!mn`i4iru|PWT-?EqRKn-e<+a`AX;{BS?MQVpcJ0VQy6U72WuajZJd7q?;&#
ze}U|LsC$JCzA1U>b~sebdeq5di-(5B76db*61e}Oy?H-mJm6CNouaj<lh^YpI{d+@
z8jfH7!hlGV<U0jTDVw>th!NKNB&tY!OYKA5`w9@xi*B!7VY_s%1Q)UY(J9K`b%D|6
z)j40)@B`pwk)UFf>C;^05MkvcP)!!eY(YLrSR$SV8J1pOF2;`!iEBN<#qIwE4`9wB
zSxPh##XmJs*}S(43I|Cj5hqeUZSZNr5*J+V$$wOS-HlyVcIR<vI*g3vj!Vb5pACqN
zDOaUO@K;iW=O7qdlQek#al)~>_AUvP?nIB~@)(D!9AX5R)`z!D<;zyogA4VDCSODY
z=1e3QNPL(}CIEDuoqV1>YR-W={QZ}})s~-RjyXIXuxrsMyZ{~D^!C7B63RhQKD#Bv
zxylrH=^%j2sf4Pqa~7zC+gZ4n7k>}k3#$w4;DP&VpJ>W1n`9UJ-nM)mD|gbCs+pJy
z*?~Z~S;fvNbLW=T^H{VnYI&>r?rXpw1UE6$e|FsT>e?9+p8~i0&fDuZLvedkg=s5Y
z|BsKtk!RNJ3u=ALjG*T4z5Z)V@e>zk1k#Vox(O~v0r|b~@f-6tg3TCfzz|yd(ogiv
z=^bYGV7RyyM0tx{AM9carKS!V18~?JZWcc-9Sgm#i>;EHw)@cJU!_cuCu*6zQS<(v
z&`cf1Q{+cXGENYL%r4#y<#L8^m{+ZxWT&e4r$LsK;n<WQdE8p~>N3$}I%<&G5e1LU
z9&;E?vu)F_UVb_`YH)7iD@bwvrp3`r4wUElm8i~ri-|^eHaPkYz>_o6AonskwYE%x
zXu>b<w60bv0a=V5_UmKI#oTRfap*psO2ViTN(#Xg9EUq(Tn`PiB&I{{lSJ9L39HB8
z&D>1@-kaCiylV8gn2NLCQCB5zswNs*$=tCp^NTktA)b(uK5IG6r4#o9MJ|wfDIv$R
zw;(s!`w8v<?^@f;VakK|+6d5R!j<RQD4qLKVF>*wac>^=+ju9T`Y8SZjQrI}f|M&1
zK|2QEqBuuMtX?}p;k*TJahMUfh-mT>vzy8-{Tgoa7Wuz~#;}G0m_$?x6)hRK<xAo-
zygx_<NYKF}IdQolt)2P=7cnjaEh^E-?=={Jr;p2fsbHIV?#5!&H~CSv_M00V7zF4n
z@SWC@yyTtdI4+Rs`Z=G%4BbEaa(8UI<*iS1SS~*u*CV^4fo5rVpAKXgciwp)7EX$h
zwI-nq#e8Q@vr`dkQ2r9J2FaPDF@6~rLve9gb<=^vnp{9gtM=iP<YljF4f`tiG|qnx
zP27*qQbz#nUlEC~K4o%9dKxZ8b;e!aK6IEuKN|`+!2IDUnXYfw)fP;kH0y(R?s6AZ
z7&YFKt4fzw7^mKU3^y$})}J;Szy6PtWbHbmFA<uR85B+4ANVFuxI4%RH#iKPuJjek
z0$wdQ`QArd%+s3rz?x6A*(Xh>iZ7U}%>6|YEl9&!jJLj~-54II^m(V)hwR%w?vePU
zMFM_R(w3ov3K7=4Q(d^L5Elt3Hugw3_3x#ZZswF0OM*k`(|vK)>yIHaW}QU<8_d{j
zJ%7c96I|n{@AgsJ8ccAF+y79X7PR)cE30ZZ@4|~df-Y?CN^!@2emw2s_?*hj9v*0p
z7dQU{xuhGt37M0FiUbE>7)}S|(=sNmbMp>~(Y(aQV!T@iBDo<vj(ox&_*E(oWhMgc
z)lk&ndEuz}x)j$Js9aY+cIxIM2nadQLd5rfG5j{%$;@3L?xW-Cvse-MdqHp*1;xY3
zBEV^0HH`>%@U2SEpsS=JbRb5(48Hgw%yRJc@3MnLlTIi#r@Ct-F3fkhOR}sF_p^Ls
z*)ao>XwLrX%{a3oF#O1?Ai=QM|L`kD5=t%v3i<9E7^gi<Ax4lyrw#<kazSK)+onSw
z+NBxG=VO$=^|wQpmN9@r`lSDC;8oL69=`@%F$*ev9Xt!a%VbG)(XKvpr9-IqN8lmY
zu(ZI!J1{ID@^0-gWjO@i^QtkxGiARdSZVSO%?gNg%N7MRpy@iWaJMALXG~p*vLwEo
zh8;B-c!<=fT)FXFdFm;NQJsS1>vo}|A5xa15T#rcbGm8K1n=Z9R#Nn61TL;Cyobse
zN(CZN+0#N0vmtcr_ClL~PcyKuP`3Q%qLOH~D)GC5kX{<9Z=Jx_4iVahoe^ZG$=Fwf
zof9;kd^stQ>HgV6wRJ?T1_ckwzvow$%gw0=$X{7^bzG&Ou(YADy8b^GAv{cN>1%+<
zCH;sFM3{W_%Dda`uOF2-B9J+EHu3WCf}mX-3e;FRE<q$sgMdoZ>pPG~z5fjgD4qMN
z*+tLL7}p7(qplYYLJKjWJ+*(L|7<90I-(p-eLClR?%P@qv^8mHYY`e#omX>Pk|zYx
z3+mmDtVV%Sc_fh0fWpk*)rX58ZIzP{yhUVIdJmaF1>hpyf0$TEai%Q+t#YraPun|5
z+l6i7Ng;{L)OP3#5&IbdUr1ALxPs?mEAiwTUT9wqP^VF^Wc`x$m!JAH)TqW6%X+BJ
zCDFO~aDic#|EVR@`tzaWkp;n2rVUFrr3lA9AIalYnqhK8lQ)9iRQhWV=)hqOXok=l
zql<k=sGqhhP5J&UXvSzHTnIG2l{2eaQiX<$<2sD53&i)qqi^r|<!5$r3$HP8mV{Dz
zc$ci^s{^obrCI11t_#!5++PeAqk`(}*40wIQ2?J2Em%bJD1+zo0*s+=;bm8eC-GgW
zAa!onL;eXRD5apgY~fVA%`1>fxVozi=(r?NrLev5z6x3h%y!tnl)Nf-7?odoVex|6
zS`;D!$q42e|B63eZP<PA4k6Z#Z}goJgl}U9NSiY|Gn>s4RNB!@A&&;B_`Y<w>0Zc~
zBvY(r1?cO{C8U<eO(6_*rGeCf|59!yZQ5P8;0fK$cH?^Wya2t(=lMX4zcDR@{7bCu
zxMYh|rUekXVn~23`d_GE6!|=&h9Mh+=xgvuwD`wWPc)H1E-FLU^GyRn@1RZPlr6AJ
z#I8mKnT$gH1fYO!<{$A~Mjt|t^@ISut~6Zx=xOf|7;|4o&#XlSo&4L@ZvagfeT@rb
z=<^Mwk9IP1DIfLK`NRiVa~Cfo$l3p=9!?f_-l+Fbn}JKci@<?Y9*ux12unrKt8iRh
z_*IXd4(EU#h_P>%QeUl~`s%%7@a=t1)vr`WE6a7WsGk~c&E7OG)Awy#J5MJcdQB_g
z-DAn^S%ENOKpUFv1s5YIkZ#K@`+dXQNOcIkrz39kL$Y~5w@1^~2R|M4SbH{LW670Q
zHtc<bQnTO8Xe*A1N>)P|C^e#yFCcd+py{sCy!-p{CAd7{W{aL=z|~-`x3jE*&=kbt
zk6+4avR<aShsfz0Ss|+a1l(Tv{YYTb2Gi%frAPJ9n4X$aR!EX?7!K`$Lropk<(J1!
z_xLsd8`GEHI-XJTaLC;e?XiJ8bIL#@?IjD9u@dB9gI@!N6RKLwtnEb+3}$y505(l_
z8%ttwq2mJbgy|e!8dZr&z;Ow2=N?U(5I`8>>F`+=yD?|rxYk=ZpisNvO5ESUfC4Ty
zdhNZE$3LEHawMdKshCE;qr1yXz;raH?Dr9go)G~?-6WUh=KsuBwy#}LIl9da;|&5U
zG41~iP4@yY0z<I~(to230xLBQ8R0(zBA$kw!`&Q`G_uU7Td+~!%<bV{k7n9^OZayK
z>EK$5%pe*WeR&KqCOCcu%&H^s)qjvSOzs$Ev-+zy0cLH6kOSM^vZ$Au$3p6YJ0R3O
z$~I)WwmC*T*>M&H7C7rAkC$D7glGLcU53p{oAQ_?`6-n0K_s~M{C^ZqsQdbaHn+v`
zr}4z~s337o1U~$~ya1EiJ6|wu_0jl8H9XaeeT;xj(Q_m+_od%E++O&iT_{qDr;$j4
zt{@KGTobbEyrtKh{0EGUPIbMm9kfLGk_<^Gmn%>k22g$fz#!gJ>X})YbIz-RBHyFx
zvCy%F|Ld1v%Az29Vb}xZyM3A@>Vn_`U6)q7U<xp6(bz&0j4+D2UY)+t`kD}%s$~p}
zE&pJ22&^=9Lr`M5FCB_N0|l}Z|0NK`L=(JObHMtcrZ>%k+JDpGD|E%%v9}sku!VJS
z)oZ<i)X3Xv8>}Qg7j?Mh#pg2q?TrD!i@UE?c~;-1t~9_kU%@qVWNw5pJyXr@P=H<#
zeJ!Eqh&km+kxv7L6<)+iqv0%fkuPR9uf^ond#D!dd<f7%KEiR8${@kDzi9Q1X;ra?
z)`cjjl+r05?jsv)5;=Eu)Wg$(-RvLa0+XwCp(p#z?MG%3K04}1W0*LZXxD4uP%t{v
zlnosojy}mBAPF!^s3U47tus2uKIFh^5^eOlWf8KO_bU_5S4TYzzI!e6+_M}QbZBbJ
zr(W_pW{aBXABS&hB5Jb#2dlaYQgase^%}i}kwlYd4K5Jz^MC$`Z4KEnxAF;oH8(>@
z7s^Bdz9*2D<n5Fnf-XK~aXjbd`T?y(+okhCT<|VG|Bp^<6v9rakdhcAbPzRf%>Gxu
z08{azl4m@VM%nV9O4*EIf#m<F^ebCfj|zlw_aHjFh<?_~oc~lXp!Ca+-oTEJnM2iR
zqkvNW@1F-HFZ-m#&Fo6odo@L3dmsr8I>Et=Khh{D`tjh(ct58E+}=`QBw#=A2kg=Y
zGtHaSzVuuhc|eDM%(A&iWBQQr)2t!9N40QAL{V25stl%Q!y@|OBr{qu0tyyh!Tj!|
zvV<tnq~i+;Y+!uaJaU!E&#D|i4v)L<<>2k2Coy5r6iy?7s9xi(*ViWR1pcO>yUPqe
zbipT*Vk8s<keF8y`p>9hL#xcwC|{2UNGaaNCNj|kKpv!*dp<GUvFRW!3>RM_NFK8l
zIy5jPz_<Zl(?7pchGP(V_ose0SdhRh6P5w&AE3>x-WtDmOUH2y3vmI|;lM07+3R|?
zZ7_E@m%A-ABPEz3W$1rHBchLw#UODfOiJA&aR-Lqpg=UCx);W+Bi&(0j*ICo-<OGc
zc#&5C1F5Tz4(JrtGlTc8KV;!|6cH6h2d?(q>xa{kn>sg)tLAUP>eU-#Ak_a(Z?Qda
zQh?sY^}l+<+ouCeOx*TswQ)09ySU;!YG`r$;1sM$!8jqR_w9#eoX_GBSZru+RK>l%
z-M+&C7yH`;EZiT64gBlSG>x=Iw4BR}^BWbX70Haj0s;b}{TO#KWe(~q3+9v;;V~AX
z5E1;0Kyd#mB~O_$elG0&P8S;4QTm6<@FpdN^EvrDwVz&Dbtl*wZ^oW8OWO322qSPJ
z45{2*4zL(uM(YI-?pvu+wm23;(^k!MXt16MRWS}mCbElM!47I!(Q^yuyRf;{3p4uS
z0WD~zYeIb$+QHR{C#2S4ocIy}d9Ep!+wgioZnWS;5`zO5;e&c`HQBs(_&f=PF?_=W
zveTzaZAV8^=-%H+hhDs}ppy$ZvvTfBiWZ55Po$q<DA3H?wDsOc2XPHbyUS#C<%Ew;
z4d2h<^V}B4q6tGY0*u+v#*B|P{_aIKyo4r}?x;zY%(u#zB(OoLRKUWD7dD}OA+T8z
zLb2bYSMF|AvA|0clKc#Pgp1*ydai)^sMo$Ph9;eNqHud7%wn<^I=o;VA5w}g0Z8&6
zG`a4q4TUW|9!R}A_zN0l2yJy^mANbMuxSIFiW199l2C(n@D4W3-q~Ak+kIcxusEh{
z2FCf%pNAuwv@{~GWv42x(YK*S=4wi%X?Zub2qrZnFnftyT&@1`#K$%Mw$T8*$xWDK
zUy}%nHwHEuRcp7#1j}K)WjF+i!FV;}^kK?(x<7QfTd)Y(*s@&?Kc!MsOYYItt4AY;
zX+kshS`#Dgzsd0Jhk|7O#lOt;p@ZRIW~3dX_xjF;5oh@OB1`+RzpTrLpq+5h&S9ps
z^})5bEfP8%YS-yp_-XThl8a9F&b!mX<f(;199L=%Ey00#WxN471Go2Z4HGW+&6WGJ
z<jYXK-ysWEFis#}C9x>s*;e!3TzLY4{H_k-1+3^~BSNT&2IU#GgXg&1FZ@bkaIt~;
zVt%neZu0H>IOMD;42}Q7s0-wfb`g?tY7HZ5t$+RDe=m-}oFiSblBy88FD~#mQ~k^l
zNB~M1U^c^Jk}o+#^?+{aVYZ8!_@_{qUs9FlOrhKuijAnatCy?#VVwbHjWv8`PK*83
zA7=01B-aTSXe<t<Xc34|>PAylsXp}JCFpw)F=X@`Gpr9&exWXJmq8;KhW>30&lbl=
zS?BbyDyY@$(Gy;bqANW{n>tIG5P|N4T(=bw<A(A$M@!50DT_-cco)KaiqkznFF5{O
zhCYm~9ZT>KC^M(_<){vC7;|W$XE)mEGQyRRvy>jIfBd6KzY_Ab9C#INSWDz@^7b%o
zSPCw_kE1=+fKRh!e`&B&UH2Ut$f*ruEME7c4M1Dh&Ti_V^4HR$+FRXkeut{yW0>b^
z*G9l)(k^00=EcI^7c4^h!~<n|e_HR3(#~t5<W=q?W!m4eCJ3=02Nu4xQ*ZNElY7ju
z=Jwt1{_%?pnhx$yAFLh~5GH6CQ$}XEt0@_{1F6!`H0<@olfI0odBp{;XkWcdeh<yu
zo%VQiA!Vykb#({=-VNv!7oero!Ng_t33QUNkJJh1S?}SYLxepI%w$(%i6^l~mpdiL
zlFJ&Q!k$7|$(Ws|azmD+o%`8M(30}x5R5zSFt^=HUrFt@sG{g`AE`J`qawRCzx0uX
zlow%&6y0F+9(|fubo_v8n3y@Wj4h<_KRQ*NQA;?Nd94=?z=9kc=p`44|3?k9ng<;$
zIUNp8$bEh3chak||G0(J+*%Z!-3cVP$<XbZf~DpC>6w2z2iS(!(t))D2Z!B&gjowH
zf?mfAAw$Pl#UUB@@afe*kP6T$QZV`L%sEVvv(bDYIY2o3?Y#m~575d?N)gCBs?KYy
z#mL9Zf5=76eke(pzE+#)=1S&QSS)@K^f`*S$ptgweM&pdTz}{S)WIqtd)n<SF}SqG
zu1j=#_%#4p9cFmnPqK$&@etYcAAi8_hv#E%^3JBQtFWiL8VOi1B=G^rCBfm;+f9sc
z5rc$h782{94T&c~1nt-W2D78f(;woY7t*G}@IBjZ0JEjF^WRoRSB)g83#(XNXmorq
z34N0?UAnBaGl3e7RKr3;!eUpUB=<te2Uw8<9lwo3oW|vtNy88#qYd3lEncpARv^t)
ztG_4j%@Q)_%%lJ#2C^qSA?BCU?TvQ(pZ@^Wu0~QJJF2<NZ9x@`nImRJjj>*(C;93i
zjA13y?!-8i!|6|5C_tND6QIb=U4*sQdi~1(IY%}<Jg3J-N?o9;ynJ?Tlhi*bg-L?N
zac}B&w!U@n_EX8eofy~);{_cF0#{pE2U_dSpUN<HhRHplNg@S)LD561Z-y3G?rg<E
zjmkp`<Nmmt>i1iaV3J^24O1M<1DLcETg;MHwMbm^P#+<(Cy2D?^d_L=N3Ln$+c^$u
zBZX9roo5alq0Of~@AF>`+@*I*)i8@3h8f>`izKoXasPlLbho9)gOGyYIgy~x0)Czl
z<5U|LsM9Ll6dM!#cp3Q#jRZ&G0SojK3n|oLtD%f(0Y<zCZ8ExzdMEz`-XA84=V--6
zEfOEw)k@#fKX_}HY0u)VZLjCm1?E!+RX75pRvF*GeBM1L$(!1LC!h2WqXx9>x6kOM
zIs7<XWh(#Wql5p4B8bkZjqsk{l5)qdKduW@f(t@3?(pt|rPGEjIwd50C)|3A6~I6E
znBX7!Ueo0{YCEA0{)oNs%Z9tyTpsm~(ZJ`oA3;bkye(F5aUpPRd&q3991U^XWk0-7
zq|AtDu$~;jp-XF5Hq%D55n<ZM((DO8oorTkWEmLHN+adls0}kIzpZRRx&{JsffmVL
zdM4u{{zZ%1Pzoln>LP7+zEa6NlzKMN7CS=B#J-z_CKwJgf9VX@<&<4Yds#T18G@~g
zJuG<GzBFHrW34jnI=ez-f^0V?-WwWo$0#hH5Sk*&X_?rU=e>oOxu2ehW}AlqBg9A>
zlFz4npy0aS-b>5(NQ6)Ua~(`YLXPj27*XQO=Uwysht&cJc-mZZKh@s8Q0iW`T<8_h
zIUpmAh6T?In{!2!qB!$1kDOPnCm<%!lA8>hO!En99yhnerM$bp9zzDC3qPP>r3{qx
z?3Z$gC$*3N6IYAWrji&iVOlZXKA~V5LdF>qOM1+IVrvvaXwX{=nKqe3mmR9l+D4s7
zF4IeRX6e%aqP>N=L=t|QGvt)O(wUJ@1K*R`b;`xw33xk1s=#w^ZDBrG^D#X=_v)$g
z&e7%C!6p^*5JYVkPT`+zUkwZpLS8nm>(woJLl%^`v@FX-%HEmFiXLD3s3f=T`ApIk
ztABBX1=5#NPScaJZ<)Xp_VifLQ>C4w#5Xp(=-!P+;!ioK*Q5B{K=ko~H`}(f%yYh4
zJNGF~JDQ)aLugC|LMkn0DrCzl)59jEUXe(tXS(q*P~z^A4{QFyWSlDzq;S%>YJ9lk
zSO82^`m99fBI17Xkc2P=W=7kua1ZPLO-UR(*ziUBt~<w_?e3|10N!=xS5mF1mAj>c
z53SJ0P>*tpv~nk%iRyTppLaIeU5O{zuVfBFii+xg_YF>%HTl;5>dLL=3)s6uXjU1E
zc&Cdy@H^rz=-9$E5+(=gX+>58OBSLz{6X#u><kg+nZ4drT4~{59pgC|{WP%(F{0LX
z{6Jco7B~H)a1k8lQj%wGMna&4Wh)@~ZaqOz56f~zSjfg^tm}k)`-qy}E67?Th;RDP
zd%$7GAvv|aWi@RC=A2vBAoagI7Ys+QsVs}=<=VtcfYL&xyy*y5f~jr{q^TJ#&3RCb
zHTJvT?75iN=rA+ap4J7z^v2*H?E{@s_{m-m8%RZ85S?3MXN=I6o25MS8M!f*Y&|YO
z52BoUh_ui4sVd=g&zUeYCr!Q9&h)U*LJak1WZ^+zr?eLMBhVN)j*tj+h;(z6#lt;y
zfurvpOHseFVOeg#8D$2(*M<V&oC9J;0&AR@*xa_ILzKsg`4%H-Ga1okR{{Qs?y;Sl
zyK}<)F9h(>>CmUYyDLE9{BO3}Oh(vcXc$YF#XMleXS_=I`F^jo$YD8i`=$JlA;rF(
z;$1Vr){)pi`qeB!p70CoZ<*}c5eNhN)T?G$DMJf>+9Y@5kz}#r+kv!M4!4HoD6rkb
z3%H1lY{(t*RqHP|2_9p0e1JaWYYVc2=~EU3B|ttsMrzNcSbpylGk!V(Qbp0L?ruL-
z5UCa##yLMfj0KXYxNiuOy#TP$@ktf_@b*&@Wbw!PH!U<__uf0FEJ6LPueF)<tY8Lo
z$mR$7kx3`JifY5O!rm7ZZ4*H1W%kwUYT3YQV*wq6kqduMDgCI3`ZpJv_7eozC7K0`
z=xngE?m^*|n7v^oX%`18_0r}|tL1m!y{e_}LG`WN^DpE8YzMfup!7Zl4i5>M0nvEP
z4$a6%j1lTS#t9SD!nGd512p2b7}EW&`V^42>5$Z8CcpR0rc3=CQ|+#cvWvKFbRu@O
z`oed&alvx+#fk<uUqi5PyUck@m=*KZqxn11-fhqn;ozw0-xRR^^u?tUkYqGfRpmPM
z&;uiN-x4T~DNO>8;Jjw}z=kWWA1W51u+PI^D@;y5i`x0TFxGFnT53DJI@kI*Sm4pv
zn9=uHR}-9mC&G=Fmc3-z<A{m;thW8})w-X#$|`G&z-_ykH`lX`Aa+PBj}Ce@GlL@r
z-u~rPe$8pN=%B*+<Q`Ep;YK4&+F)X$U%fU_M--FkdvCGHTx4GQ%en5ZA}Ed8w^Bq;
zPHa0pFcT_(h|aivV?Z?alGQUujKEoRVBu^@V7kkMcreVHC(q2Mu3J$no2r(i$3AWc
zO05rGfYxxam=2?oP+I^Sw@3n%Rgte_zD~|}z8punSPQG&Xm`O(+(O>6u#i|B3;;R2
z8Z3J6e6PJNTWzf)O#ID=iBYc1`sk8X;+D(~yA+zgll>E;l!5}gy0PlBdjNpO^=MwD
z&o4@uPRMX(a+*C+)G*)VIDk2`u*)*0x;2h?<V@#w$fAGF2j&O0DLpcWVBZ9%>Be%p
z%8o+SexRr9bj1?4eh8-XprgxsZGAQ6uekxAQbqPV4RM#yG5aVLOrPLBNut6#fptC`
zZW|&1>pYQh#G2wI=M^C#Kx@O;C!cNn;<U^g|K*!RwOJKYW~TS+O`bi^cN+_3riwzh
z7kYHHfvCi87y3iXmSb|co&cnd!-m=5v?&n@Afl|0Y1UWTCfcSC8&S&h4>#7?ib#XL
z@3K#W_tomEF~h!&6A$<0#!nh)Z<X)o#oxc*+MeJ^-5r@8EyPaEt%{I4{{8`GO;IZb
zkL9*<9Divq!{&5jR(o7vijyv(UuUZkHc#qe-~OyLQU4GzUII^`9dzShYn^Sn0OF_A
zQ1{?+m7{ai2<%?5GpltY`x7Q~B_qebr}HCz=4I>)2;7?j&ymhu%a-oH;TFM&A(ImY
zIglKW$7pXj2G!Ql9tbuoe1YyGku#Ym9P#l!0QeDB^-SaLRR_ZPGe20(Br9=Omw(BM
zSKiF;fkM}@A2DKL_N`VKZ|)M0TuQp6GShP1H?k1!#J*4Cu3KvLdg<F1GD&V+0#DHY
z<mnJu$OwnTCiC9i-N@rH1>0sJ-c)(m#~YTAWSZwj2k<HyEP;wL9ovyMmx?S*f#0g9
zxAzpc+_sf_5i7u;S&P=zr%bUVOhKVl9$eIyStI7+{-BU+ewP5~Gi8x{7Jn>vtj_k`
zOS+%0u~YqVjb7^sy<+b^o`TI3;;2oVoWN$auB{4%WV#JwXI#6ccxBb)9%djk2PHu7
zPgtJ0HCMq6Tx%b;6}ItOallsGufh8QPIag)=($d``ChF4;s(|}+&Kz6cmZGeJ~Inl
zo}QVJBHw((Pr-klrT%t%K!4##?u5#;65~QzVPSIM(_UVF*ryF_tW_q+>y`}?c#hTe
zes1KJtH?a;?P*4i#NYpzmUrk@UI-U({az^?_mL|@k^c^CNVPc^P26ig8Q!@z7+Gek
znFZDwCmyFHG&%){_TGxDf{V5uV^|gMZgLK<FYq`uoy-Omo^IB+rj0cm*Gm(gV}dPb
zyxx}iTlLziJKd9XLV6D#TnM-r-^!t0uRU}Kc4r?53Nsgb#zyOe{<ePOF2so|Ls>_;
zYq^CVe*Og;eDAUfn{kz9Lxhufyxrp^h!=rvnMJMR4FtDhpUVefNAQ7+%m?%YFLELE
zNf|fLlZ2hgr(hF$Os`h*X#iZZ_fgvKQ;5||5yLj1)LC@cuY9&FAOU`>fgSa$TpBFu
zBkN3CiYJ!aMlXZX*9<#CiBt3OD^gD5#m8Z%t}jy9>_M+3)3zUJq3xA6iT<X1Qj+P3
z_+Y=*{ASt`?+$428SB#8>U~;hZT03rG$;Mn!_y{*)r4JxaIhu%%ke7C7#R;cyX8AX
zy|o@sh)uUInW`q6><GxA8)<8#a|aO%Et+_r>i566A+?kB(nD~1XzRA_iYp^wmiEH|
zlRYEx(UUt)_crpZb%3h8y@s=852w=$SRw-W{dX&>J%)QS1S+c@96oP)k9Bw<tp4`q
z^Y~r^r7tZgc!@0Dm<2WFEkA03+3b4TZBav2x`j0O;{qP-Tb`kgzp9`^-%L&IczxEA
zWA6%ufO|UPk^ptJxl{UGHsOta)?+_s1h7llS8J3T-^AUjJQRpBRApQ+>7L#u#Wy$X
zNSi|EaoSJYgvpoJJdfN@D1kq%hy=5bCE)h2Ee<WI88`EQxugSs%h@vy!Cy+qW2M+P
z1+z1=0DGykzTNtz-j=dQ1`wF})67HRx6n=zur1|jM8225VA$BU(nbe#(-&;a8@=j3
zN*nnd%?a*;Kf95IKR&Q!?KE`yF(tqRqM1g>qCW$V%nq#>>T#3g-^IL#mzbWMJS`Dc
zYTy)3fY-F?qbKL?Ft54~jtgY`z*>Vfdm8{`l&ART)#A)}@r374VS7!LL$^6H1(5j9
zr2u}Dhc;3?MsKnCK%RYFP`{rG@2`wDI%8zwnXa+nCFj=kD;fbJ_iN}nu1SkEDl##h
zQkzJ6{iLrD%))PPFOwT5vxNNXTWoyQ7@$K#EEXTUkTY2wr%!MrEZ=qMr+Z_RCNma?
z;tVwW6i{ct2zxN`TYJ>Ctjk1l%${+FUr@X|vDmf7XqQr0`0KUqV$Xxw4>aTB0I6Bt
z!KwWQV;8o!Ke(^5e}~lq<^=ES&dy7M$2u*=(C`~Cusc>;slGLi85&N}LwozYru|+?
zWODY*;zhYj++5Npzdxe=5=n<Q=v1Po2TNlUj1OvyZQt`zppMhaD``Wk@hOw5swo5L
zxL&(0JehXZ#(I|IkHwBAW%ruEPCI=|9m^dz@k)K9t$axY?l0h?BkZEfbA+`x{(*lY
zMIHMMZ7P)pA{sMpB_$=aGlU<P`Ob)3lYl=lGeuxvt7P%9GrU2`Z==u1$rxKpyARDJ
z<(Zp+Yk9_#sv|qP-xzsjgM^Yive-#5B@WZ*NYzu@%ag3<*v_?mii{sxatoz1*4f-y
zluJi#Wz;Vo<@Ss+c%3N!9nA~m(}f6WsqbV7d>Op4OC7A4o#-OJ34JLf=GWDw&0j`s
zj-#dzdJS0Z$CK6EouZv&uK=L}4HmMvpNQ4nx*#IUC!!3ihgn{?Vpx5_q3;13=S$LH
z?@?6LudI-0HL)<ymkCjZj-0JAk75Me)Hxq`<~wp;RsO*xUTlc~Y9oU}{b{M|8E@(`
z)`MI_9nl&ceotzn_LYh-5FAdejMvnxwGtmKrcnh;e7TS1Z98ND_@AEE`Ll%@c0vCS
Daq84@

literal 0
HcmV?d00001

diff --git a/public/static/pwa/icon-maskable-512.png b/public/static/pwa/icon-maskable-512.png
new file mode 100644
index 0000000000000000000000000000000000000000..c38e2285d73d4ea7e6cbc94874fc1d79ee1f35b8
GIT binary patch
literal 7004
zcmeHM`9GBF`@f$tGMQrRB8;t)WvCF5v2Tf}aO_c9bcAdpj9n^3NHSEGXtDJ<acpCY
zLQ|BI?CWGV*1~-5Ip=)8pTFVzeSLnKd9LSr?(4d*<$b;H=ecQh(s(zg2qyqwx2cJN
zH2^617X>h^pAZrK7w`x1vo_WPFW>K_10X7BYM^^M=;3UCX!4nrVCo_xV9-wR?0|w7
z-u`+<#_7inyoHHRlZ~j#U)vmF`VFQ$3Pz8pW<JPEEf_sPKcZq`&U;9VDOrYk)Mouc
zr5UaIxU455`La=C)-$AKVV`#+C1gIBF5&gy4Rv6APGeGIO>2;r^G<tmLw|D)-kVp+
zihV5tK&S#80pJh@fCGjA5apn|W;_5`B>+ISMgwq93V>XGsFMF*mH*3e@y+7^*W7fk
zcuw(m)TK_)^$SAGNP9hS2<Va(?jCmP9=CA7sU`iY55Jfl)D*U&<9F;!mS>ovrr4nt
zFOh+R+HB;o&q<rX=T|d!?+<JUzd{KqT%UL9=_`>rE>wOKfJ?(l8;OHHew{jJzu$<f
zWiA@*(|fbHPdOQtKC2Y!s?1zd-}PkkrgvPEQHu^=Iqm(Vu?Y=KU3f6Av-O9L|9~sA
zCY$>KA#in5d7vm4)FYtr9iwi<!X?O*u*h8a!_~{!i%%De0w%>B8!2CU&$ME<5;s(C
zvpHb^zQDKNvpD>QXK2Yvt0T|KQL8vu(>3qse#{Vhm_PN*?{yPpVJ|Mc{OvS_nfA!B
zL4nclx=R27DHARlg*8Jiu|YhHwz>E>5zc$r5t(=1)eTOo)DI=@^&98-M~SLoY#@d2
zRluLOzU<!8ys)tgp?=^2c*%y!OLI#WMs-J)&3i+_JfhwB^>tNIKt@vd^F+YaoeYb+
zj-3O)o|wF38^-`#^|fa7>nm665~iZEoIle;4?Zy0RY!ql`Mqj?mQ+tNCFXPtR;MjR
zKi55dxuX+4@TBy^Ou$;SVyaZlK3X_V0P4zis8-3VakzhzuD#f%ksHs6fRSPT?*dto
zi-#ZA7O(WsI_vm8I`dtI?(Ik)RjSpwID31uakWmuILzXyAs|1^Ob_V`4eNV;^yTcr
z4)9nXkmJ*Yo-Y>eBGrD$SGE*;l{kBA^xX%T(No18PP3hM{M{|HF2CQR|0TOy<jCy(
z(UG?3lryOlFNlE0r?RWcNu&LXPJ>#3k!(XaMHDcgR$o4Ke(r~zx7&Q*d*m8RFZSL1
zeOu?!eRI_dh?PMi0Qw`ZJAJ*YX{G13pN*Z#9uQj`K>fsl+%VlMh1FwWO^Klul>X`{
zxS|FMd@2fWFn^g$t(^(IvCZ*O8W6Q3Rc3jVf{G+}WoswN`bZyu8!;D5d^i@cV(`aM
zzTk9c_FfQo6bFX7qMKS*{MVu_p72#m!!YupfMaCor;z~f-Nq+PmI`hl!YY!0>KaqE
zFR&%u^|V8Zx+*IS_32|`k2nypV{$VxqrFfzw9iS$WIgdi6aZ1UzQ~LRL2O`A5)c*B
z#RelYA~GjWe)X=qw;B2f4WIFNFz)c>&8wmOeIfHn8h{HbQi<;v^D6~}dw(8-UdTf)
zPLIdZLcS;nRoB}3JBJ(1%vq5E5IPG3syVIHfXsXeYlOjrRjP!KU?-?9ZgTiY18PWc
zx6r=Qq5N3o>#OC+jzuXzonI(<XjA8Zbq4Evxs0o>89pV7fUx$Q>o2M=X1n!vMU?_x
zQ#>HnyKe3Z?A_7y)|C64aO~Z_t*6VFw&N%uyoGf>>!r3NOV{1iq}<_NlDVJT%rasI
zn)4Q{;eU|NL2uolne0Hw0dEOGMK`(0QhU&#IHt*HfBn#T*NG~=Rfl8wg=9`NAjQO7
zcwN1J7&_b=B0dU^%0vO8e0zYc7uTCt=Cnm;EvD`{3^;wLbLqvEsKvv1lk3`_4{=Z>
zRnS1>t@x4_s9uw6k~g<R6frRG9ZrhDZ49#4agc!K0aMmhbA)GyZOtrwc-*FD`joWM
z{F1<`xtbL0zdC4Q>2s>5K?sK1R0@1(%&IHB(O%nSvn!eaq}|Zq;IhP$*MqL8UCq4}
z79{kP9!L(QYm5bhiI1VMR-$=;hvSEDnG}5r2bCcqlLYYXkv`qu$Fr<`+ZfcZAZiS1
zoK-IFoc+c-k(I|$)TtHNczoH9E|<%N5Y=L&_f<MMG+EzT#z&o--;jh`3PyuH{9K~_
zU;6pfl2XMzO4m`!1~}l+xuH*KN;ieB{FYA(-nvAW%;iCd1<_Rn*Z(H~C1#e$9Sk_s
zELSP7mcN)hiNN$*V?cSM@Av#Qju+WoevXe}1?Wg>qv4EhLwB>9$vaC{yH&P=ON)kF
zONRSnA7{U^DaXhwe9GYhV(}<)tZioXx2!S~Qi7&Nh(xM5LgE2O{&=^NV=*6@@mt4}
z5E#5j3=pyNpLqA<PN2EvDIE%vD2NcBEJ5tdtp1IZAX&EN3--#u=Va>Lor4=h=yI{q
zY(w}&kh{2kwc>l<+~MbMwoASYY_ZXKa-H0n0+D+E^mITT$DV_5y}bxgn(nfYB5%Td
z$Rq9e<Q>nvIC20Q?3Nbp9ykDtxZEWq<?kg`qNVp&IceW1XSLE`0G$V*$VNCWi7%{}
z-bojik&2j~85RY}#vnPst*B*oKqT=YUfaauc@*J(+Tku6fChBIi3i^W93oF$?TRvZ
zJIv5A;Xsl3kJS&2FJ0>LGq}w*l+23;mp<o0%PL7T6X0kb8X+FE4~T*Qb8}M1gd0U(
zR$<kv==BD33ol?q!hyV#!P~V1%Q0Ox&5c@q&0)XJ)8)uv(3o}AFk?WqJ-;v>tFtYA
z1_P|~H2u!|_c%e#wt-erV8VkUziOjKW{4aNeJ`q$CXQNHM3GM~6cD_YSzYrhX9#-0
ziIBCJ?=&EcsQrXsvzNlepFgy1%SE5G{IkdD)%#K}y6!o_^;PGS!0=BTFyVYdyOwcP
z`QgK5d|3t8raCOYs~FIXcK_Bdkag#VDJfZIf!#F^hmdb?vlC)2&~<qmp)ZmsfY>`M
zSl<dB%YaS5F9l3~JL+})jbP2Ev6<o4@H|+Uj~n$W`ubDLpmRPbbk|LQ*R4vaKIf-g
z;6zF^$n;G7S|4Ue;v7O@K+3tv?>c?B+c}cj#$7YoGfX|mCS@AS`wgczO~07YB*`$G
zaJTE(E(=}9jY(WPVfv}zrre05FhZO;RKrR$a};{=NeaZ<!XdH?;?3LMCWb_w5JJ3t
z@JnccreFRtzb|TVfEm4vqZ;yn=9a(uUnsvY8A6|l28wJK)Gd_mU1dw+bc1m7jt3Z&
zgg4x}WX3Jk(aXX-DiH&u3eGo}EA|XKO;j7_6@ndl0GFTpFPpb8*j_N$D^P>)cGiT_
zV4ep|I-C-8Pqp3NX%xgBcl)y6{Cb$(<-6kOmBX}JcZ&7}vEK2`8RXXxwrdm*E13sl
zd}6A4^kZo-%t!p~(4mdS^fN5Vg=>yCCJGl{`#M!OC%!$Oqq3cMrQh;6L<w1K%sG!q
zhIF1MkqwLOoGTRPG`2_=M}Nd-8F9F4KD3p97e2%4;1i)kRnBqYal+vCDdyG}Q_F}-
z9Qf4E0t%Mc;{5wTvm`Q0*7Cntfe&bi=8jS1%P%A<V1QEgrK;Ecldn5dC~P|yH7B6D
z9S%5_FGZ?u-wW=t!D}=;RipFZuqd**%|C#_Dbp@zX8D(1<h$pzBIkw2Y5r3Je`_@q
zzjw5+9WH?*08Gy^?}{U3cp%I_Uu>9G_3Uq<?TiaUl&Ho7K1~F6$P?_Owb^B&-G+bV
z9B#BCaWzMR+#U5-S==PHCH$a>hR!eb=_zr#98PHatULZc_z?l7+vYYc>kewOpECg0
zPQk(D%TCwDQ?-I~D}6HUgKb$M21AXIAN>9$U3pMO8-u=I$d%SZP@{=uh@;`WtR!C>
zlX?9tZpB$M(=#ap-m#QO5l5FvgP@XY>y>qLl+sJDmhm{(bQ-_9f|{jRvN#$}&vmi?
z;0s3P^v?v*4ExqqQ(8nc4s4#if5q3<Yj}*1UpziCp)`H9j**W+sNN4<7JN63&^7Q4
zYY7f>rQBKsZ4O>T;3^#J_Ekf$W=a6v!d%DxTJg-ABz9rIt|nHi*eyIhJN%K>3lW-v
zLSe|H0{c4u7lW*RX=`In%|CSUN~53-VaNgF8*8L)Avi1cRC(6j4WU<e*${UjRxf-<
zg=(&(!y&ro{ri=T!g?hbZ5~iteAxDE2~(afhi?jA8E$lUNui(`F=Xq3&+YaLkJBqc
z9ER^!A03xK6Q#X>HZCcyu~rV4Pi)i=6p0{cW8ehz-;|%c=k0XmegP{&wHwwx?FXe7
z@;G!4;(!zE@jq|%>`7OILAQ$w6j1ly<7`jD<*_4HGQv7dPJc99^X-ZvlKpEk*a<=0
zs9Zzkf_|s6-nNW9jtIc`^l0Rb?1jOdblqenG%?2YbXMPIK0(Mn;Jul$uGp4|%%-j=
zyg!Dx`uDVjPN&i-O20c^rg$`9mB?^{L-2A5wEU`dl7usPx-6jH|GQYfyf%k*0`Rc6
zyBJU%(#RUTM7@7G-dITOd6bbqNhI-*6`p;s(G>1xg=yWn%rkB4*(6LzF%P+8Y5(9@
zr=0@4fz}-!J~lfb*5!wv#lU&ra(6st@E*(qXWv{vfHzFlZs<U&`c*{Y*GIYfE%C{5
z4%lz*c+ktA`0#)>3Oz>IxG)#v-({2Qh9i4%It=XBMx{*5IOc@^%*iVxN=t%0XC~T&
zoa`1NHK9WJ$r?$h;65Mnke%?94QYeW$k!!}mxLJ^>9MRBV)ut@dx-UUifuzkjCW#2
z3e_Lf#)$ADZO=E8>J_w6BQ23ayY6Pwl9DM%S?S4If!ni~)&LXkNISdMkXzG2nd9AE
zQMnN?02LvDXg<v*!8*QV)rlhg{FNMKns}->`pzBTkx93OC8y%Ge=~|(B*2-p*Pux&
z<oPmne@Ay5%zTqH==H2$e9jmN?5r^ET-ww0s>$t1-hREU6KmIfnxv+)onc1VFLW=Q
zrSBm}tdHu9z5E%m%ulzX%U^Zu;9<sd=AiVxZHW2h8=G*Hyo(evxCQXDHHlg98X1)T
zed`F;86GUir?C$EVn++iEG1_lC*Mjkr$s!M1SYB_?v!QB5{%k?IF}!MSyZ9(M3)V*
zL(*+hqCB|wM9o<er)gDA*e!NKJU2olZHTFh!WxYc_MH5=nOFi5R6!b;5IS?1ZVgyo
zB1k?P@V@?B;xg_KT+;)td2cPk-l$GSI|lr+rNNco;(>{r%Q!<~x-%moOXqE*5M;Ud
z{LLbX3~|Xz5R-~SVU0ofJhHUkk&mnT1S!G59tK=ABQq@!ma`P38)L7he{N?4|FH5I
z<*k^HUdDfj0r)#LatSAaDotGes+|`_LqQw!32q|0^!&M_0SU|eJ5~C-Tke>5rgFf3
zF+zi)CsUx(%*CgBw&!DQmmhq6L;kdQ&x;JVk;en_%<p@1?UOqSlosq4P(F~Gj96r{
z8kb)M8`&rw2sbi<0bPboJBAwnsLqB1hJu0{6F4?$S!YU$4}$mUx*%D~xo>yxagfMP
zFcE;fX|b>32H1;rPF92V-5zXza>$E|$HHqpxT(9tY(p?+*CCC#_53(1oYpXviibAX
zU8g^^D+KAngK3`L*F!3MA$K=ye%@4_Fj$=pSN@v;dCblZLUzI`N+4tik~#N;Y&S&;
z9YLc&up7PHbtDebs$E#;4+k({EO<6NCG#(HaCYNq-n4fN3Bj7&N01Cv_-&7g=EudO
zpz1{ohz?Hm?to`0XrE0A;L>9zb==zEvQj8;s(@~JX<c9;rnRp5Z;5Hx70)LUAY(8r
zslu;znV+bQ0WzvT89Co8uGlX`zA*&&w^zpah}qfG3`+<t>{dD`pyJlvd~GJJ%jVNf
zc0wC`@2B#aRSS<!LX&DZ5P#`|I)HKMz=LF-bS3P*_xC6xDKNhF(DSD0%Bo>5az*0Y
z`37uxG$0x^X*0_b*96s-{t-lGGfM6&YB$SH!D+I3e;H4_hXLpy+YU8I_xPh=k9!Cp
zWKi!@$7KD7OlssrxA(o>RA{{b@~=+sttW4evNG7Fi6ZBzzDZ&#1Vy0Gz?4xyNEUx2
zC|E;;l-Pj%NeRaI<UPvc9Z;|n3WAHmw^PHHBw+c-VgPU25&=w7wgTp=!r}Ze!5~E6
z#;)@Xzclj;D-W=G$;O2xho>Rmn#8IiZI(r=c!1X^+5(W)=kg&$YhT&$C5tY7M*y$k
zxk9hz4^itNRz2nJfmfS}pTt0Gq|gCK=P}(U`gZ0*h=$h3_tKHvNM;>(;SW&B(D}s(
z4?ocA4NUZk>wp(Ui%Q!Dtfw!%Hc9$G)AFl)6{gZIhM>qYkpJ5Ff``GYc0NtKjAco>
zF8MSb#AjzDz7D4m0$&Z#)5Osxuv5S0k6@_^f#@&@5H)aDy3?wS`la7_Dsd=sP_WGe
zRsyv88V^Zfz=-VTX54rpwFNRyIoqYa-*GiM?P3uK4m7uA-AElmu2mJ*z40}6g+~t+
z-W%JgA#P6Fz22t%Viz%JP^MxLo^S#@v=#60t~Va*A+kw=_**)Q(r%A5HhyVVzZMX$
zJ+|=+wL1>rm7J@oNz8xduUqowi-=f#fD;P;wi!Ktk@=%)B>jxhkn9bYTwUmjlyLXm
z1?1XRyI8GniaNW92trigbp}*l<6JIi*2I@h8S6}juUHHSZ&_V~`g8~2Ndupf_WMaQ
zzV8&Q0shh;-uVzMyyIPU%e<m{1J+6%MSePNw#{*&B`o7|Rb^4TW{v!+DAH>Pa4Pc&
zy=4+$GNgrarYDQg5+a13hLm}twH7&w;p85?v^E#NrbLECcDH<{lAA2=Ro&NHtJvcJ
z%%BT$b8JIPee*ufVaj#WY{gLW_7-Eqa*iJUzP3~eioUT#Ihuq5`AKKHjPMH<Cxkd4
zs>GjA4!C@Rg9=+Go(&;-)CB!i^7wtw%*|1lz#wD<hUgBYajuP@KRS1l7_x9@a1z8D
zjbQ-`Z?gV`dvAu(75RAlpEf%zKW`Ld0p@i9F2?a~ICJHcQ-_xS(@LM4y@682SX3oE
zIb(us!;TcQ4Rutsnu!W#d2$*1ssc7xO2pF=5U{fkut<m&?(Ju=>o#z0Q#f{!`Sk;#
z8y+&J1`b?6S&1T4s|~)AJ42xIa#iVu4fHg{04Sf{=7`-~EtwYxIor!YNxFasQTkBY
zFeM+iN`julH}kOyI$j4#l)QdPVVwaF8t4bi1@#j;z3W?pgKhG<fv^IK{HUC}{<lG_
zAMHjIJAn+{eFTrt#fi4#&YLH<=_ReoT;zsw#s*K<;oP#!$wUtK!f5wnJD9wapX0E7
zb+}0@aCuZ6800QA4~jaUPY(Y&uoeWV;BDpG!3TgU%mr0z<*ZM;*^?hVo2jdm)&%YW
zH*}bkA0iyzd!*(JX@`fwwGEE`zIq|GJ9P{7s|PpsGbPtX0#n4XRKo>vAO+7zKW0cW
z9o*PAwDs)p?YWQN-|vpO>T+#WM^0Ugyfy-@6ZRhO@y_0pDD3@JWBNr-ABRga1w&=W
pu|7wrM<D<GIPw4fi_ErA{b#->PuiayfS=2Nso_b3mwK*|{|0o3QQiOm

literal 0
HcmV?d00001

diff --git a/public/sw.js b/public/sw.js
new file mode 100644
index 0000000..7c361fa
--- /dev/null
+++ b/public/sw.js
@@ -0,0 +1,26 @@
+// NetIgnite service worker: makes the dashboard installable as an app (PWA). It caches nothing but
+// an offline page, because the dashboard always needs its server: API requests and WebSockets are
+// never intercepted, only page loads that fail without a connection.
+const CACHE = "netignite-offline-v1";
+const OFFLINE_URL = "/offline.html";
+
+self.addEventListener("install", (event) => {
+	event.waitUntil(caches.open(CACHE).then((cache) => cache.add(OFFLINE_URL)));
+	self.skipWaiting();
+});
+
+self.addEventListener("activate", (event) => {
+	event.waitUntil(
+		caches
+			.keys()
+			.then((keys) =>
+				Promise.all(keys.filter((key) => key !== CACHE).map((key) => caches.delete(key))),
+			)
+			.then(() => self.clients.claim()),
+	);
+});
+
+self.addEventListener("fetch", (event) => {
+	if (event.request.mode !== "navigate") return;
+	event.respondWith(fetch(event.request).catch(() => caches.match(OFFLINE_URL)));
+});

From 646df3568fc56712705eb9072c4978d778b2a21e Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Wed, 21 Oct 2026 21:32:32 +0200
Subject: [PATCH 16/17] fix: give Windows its own SSH login advice

Windows only shuts down for administrators, so "never use an administrator"
can't be followed there. With Windows selected, the SSH tab explains that the
login can't be restricted and asks for a separate account, a generated key and
restrict,from="<agent's IP>" instead; the root/admin warning is Linux-only.
---
 README.md                                     |  4 ++-
 .../dashboard/devices/[device_id]/ssh.vue     | 33 ++++++++++++++-----
 2 files changed, 28 insertions(+), 9 deletions(-)

diff --git a/README.md b/README.md
index 0474f1a..7525b60 100644
--- a/README.md
+++ b/README.md
@@ -79,7 +79,9 @@ stored anywhere. With SSH, the server holds a login to the device and sends it t
 every command, so whoever gets the database and its secrets key can log in. If you use SSH, log in
 as a **dedicated, unprivileged user** that may only run the two shutdown commands (the generated
 `authorized_keys` line and `sudoers` line do exactly that), never as root or an administrator, and
-prefer a generated key over a password.
+prefer a generated key over a password. Windows only shuts down for administrators, so there the
+login can't be restricted: use a separate account only for NetIgnite, a generated key, and accept
+the key only from the agent (`restrict,from="<agent's IP>" ssh-ed25519 …`).
 
 ### Linux agent
 
diff --git a/app/pages/dashboard/devices/[device_id]/ssh.vue b/app/pages/dashboard/devices/[device_id]/ssh.vue
index 92acfb1..c5b84a6 100644
--- a/app/pages/dashboard/devices/[device_id]/ssh.vue
+++ b/app/pages/dashboard/devices/[device_id]/ssh.vue
@@ -150,11 +150,28 @@ async function remove() {
 	await device.refresh?.();
 }
 
-// Logins that can do anything on the device: the stored secret then grants full control.
-const privilegedUser = computed(() =>
-	["root", "administrator", "admin"].includes(
-		form.username.trim().toLowerCase().split("\\").pop() ?? "",
-	),
+// Logins that can do anything on the device: the stored secret then grants full control. Windows
+// only shuts down for administrators, so there the advice is a separate account instead.
+const privilegedUser = computed(
+	() =>
+		form.os === "posix" &&
+		["root", "administrator", "admin"].includes(
+			form.username.trim().toLowerCase().split("\\").pop() ?? "",
+		),
+);
+
+const securityAdvice = computed(() =>
+	form.os === "windows"
+		? {
+				title: "This login has to be an administrator",
+				description:
+					"Windows only lets administrators shut down over SSH, so this login can't be limited to shutdown and reboot: anyone who gets hold of it (e.g. from a server backup and its secrets key) controls the PC. Use a separate account only for NetIgnite, a generated key instead of a password, and accept the key only from the agent: restrict,from=\"<agent's IP address>\" at the start of its line in administrators_authorized_keys.",
+			}
+		: {
+				title: "Prefer the NetIgnite Linux agent",
+				description:
+					"For a Linux machine, install the Linux agent on it and choose it as the device's Linux agent instead: it can only shut down and reboot that machine, and no login to it is stored on the server. With SSH, the server keeps a login to the device (encrypted) and sends it to the agent for every command. If you use SSH, log in as a dedicated user without other rights that may only shut down and reboot (see Prepare the device), never as root or an administrator, and prefer a generated key over a password.",
+			},
 );
 
 async function copy(text: string) {
@@ -183,8 +200,8 @@ async function copy(text: string) {
 				color="info"
 				variant="subtle"
 				icon="i-lucide-shield"
-				title="Prefer the NetIgnite Linux agent"
-				description="For a Linux machine, install the Linux agent on it and choose it as the device's Linux agent instead: it can only shut down and reboot that machine, and no login to it is stored on the server. With SSH, the server keeps a login to the device (encrypted) and sends it to the agent for every command. If you use SSH, log in as a dedicated user without other rights that may only shut down and reboot (see Prepare the device), never as root or an administrator, and prefer a generated key over a password."
+				:title="securityAdvice.title"
+				:description="securityAdvice.description"
 			/>
 
 			<UAlert
@@ -204,7 +221,7 @@ async function copy(text: string) {
 					</UFormField>
 					<UFormField label="Port"><UInput v-model.number="form.port" type="number" min="1" max="65535" class="w-full" /></UFormField>
 				</div>
-				<UFormField label="Username" required description="A dedicated user without other rights, e.g. netignite.">
+				<UFormField label="Username" required :description="form.os === 'windows' ? 'A separate administrator account only for NetIgnite, e.g. netignite.' : 'A dedicated user without other rights, e.g. netignite.'">
 					<UInput v-model="form.username" placeholder="netignite" class="w-full sm:w-80" autocomplete="off" />
 				</UFormField>
 				<UAlert

From 23b9108e1359bd282cf78a04e7be501c9933934f Mon Sep 17 00:00:00 2001
From: Linus Fischer <leicraft@leicraftmc.de>
Date: Wed, 21 Oct 2026 22:26:22 +0200
Subject: [PATCH 17/17] chore: prepare 2.0.0

- Warn on start when a v1 database (data/db.sqlite) lies next to the v2 one
  and nothing was imported from it: the stable release moves `latest`, so v1
  servers that pull it start v2 with an empty database.
- The Linux agent install script takes the newest stable Agent-Linux release,
  and a pre-release only while there is none.
- "Firmware 2.0.0 or newer" instead of 2.0.0-beta.2 in the SSH tab and README.
- Changelog for 2.0.0, written as the release notes for v1 users.
---
 CHANGELOG.md                                  | 44 ++++++++++++++++++-
 README.md                                     | 10 ++---
 .../dashboard/devices/[device_id]/ssh.vue     |  2 +-
 example.env                                   |  2 +-
 server/lib/agents/linuxInstaller.ts           |  9 ++--
 server/lib/migration/v1Import.ts              | 14 +++++-
 server/lib/utils/config.ts                    |  2 +-
 server/plugins/startup.ts                     | 12 +++++
 tests/agent-control.test.ts                   | 43 ++++++++++++++++++
 tests/v1-import.test.ts                       |  9 ++++
 10 files changed, 133 insertions(+), 14 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4a08713..3941306 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,41 @@
 # Changelog
 
-## 2.0.0-beta.2 (unreleased)
+## 2.0.0 (2026-10-21)
+
+The first stable release of NetIgnite v2: the server rewritten from scratch, with new agents for
+the ESP32 (firmware 2.0.0) and for Linux (Agent-Linux 1.0.0). It includes everything from
+2.0.0-beta.1 and 2.0.0-beta.2 below.
+
+### Upgrading from v1 (0.1.x)
+
+- **The `latest` image is now v2.** A v1 server that pulls it starts v2 with an empty database next
+  to the v1 one. The v1 users, agents and devices stay in `data/db.sqlite` until you import them,
+  and the server log says so on every start. To stay on v1 for now, use
+  `ghcr.io/netignite-project/server:0.1.3`.
+- Follow the [upgrade guide](https://netignite.dev/docs/server/upgrading): back up, start v2 with
+  the same volumes plus `NETIGNITE_APP_URL`, run `import-v1`, then set up the agents again.
+- v1 agents can't connect to v2. Install the ESP32 firmware 2.0.0 once over USB with the
+  dashboard's web installer; replace v1 "server" agents with the Linux agent.
+
+### What's new since v1
+
+- Wake-on-LAN through an ESP32 or Linux agent, and status checks by MAC (IPv6 link-local), IPv4,
+  IPv6, TCP port, SSH port or the Linux agent on the device.
+- Shutdown and reboot through the Linux agent on the device (recommended), or over SSH with a login
+  restricted to these two commands.
+- Sharing devices with other users as viewer, operator or manager.
+- ESP32 web installer, firmware updates over the network with automatic rollback, and a console.
+- Linux agent with a one-line installer.
+- Installable as an app (PWA); REST API with API keys and an OpenAPI reference at `/api/docs/v1`.
+
+### Changes since 2.0.0-beta.2
+
+- On start, the server warns when it finds a v1 database (`data/db.sqlite`) that hasn't been
+  imported, with the import command.
+- The Linux agent install script installs the newest stable Agent-Linux release, and a pre-release
+  only while there is none (before: the newest release, pre-releases included).
+
+## 2.0.0-beta.2 (2026-10-21)
 
 ### New
 
@@ -24,7 +59,12 @@
 - **SSH shutdown and reboot.** A device's **SSH** tab (owner only) stores a login: an Ed25519 key
   pair the server generates (with ready-made `authorized_keys` and `sudoers` lines that allow only
   shutdown and reboot) or a password. The device's agent logs in; host keys are trusted on first
-  use. Passwords and keys are stored encrypted and never returned by the API.
+  use. Passwords and keys are stored encrypted and never returned by the API. The tab recommends
+  the Linux agent instead where it runs, asks for a dedicated user that may only shut down and
+  reboot, and warns about `root` and administrator logins (Windows, which only shuts down for
+  administrators, gets its own advice).
+- **Installable as an app (PWA):** web app manifest, icons and a service worker that only shows an
+  offline page when the server can't be reached.
 
 ### Changed
 
diff --git a/README.md b/README.md
index 7525b60..69e7fc2 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ itself when it enrolls.
 
 ### Firmware updates and console
 
-ESP32 agents with firmware 2.0.0-beta.2 or newer update over the network: the agent page shows **Update
+ESP32 agents with firmware 2.0.0 or newer update over the network: the agent page shows **Update
 to …** when the admin's channel has a newer release (Agents → **Update n agents** updates several
 one after another). The agent downloads the image from this server with its own credential,
 checks its SHA-256 (and signature, if its firmware has a public key compiled in), restarts and goes
@@ -67,7 +67,7 @@ address or IP setting is only kept if the agent reaches the server with it withi
 
 A device's **SSH** tab (owner only) stores an SSH login: a key pair the server generates (the tab
 shows the `authorized_keys` and `sudoers` lines for the device) or a password. The device's agent
-(an ESP32 with firmware 2.0.0-beta.2 or newer, or a Linux agent in Wake-on-LAN mode, in the same
+(an ESP32 with firmware 2.0.0 or newer, or a Linux agent in Wake-on-LAN mode, in the same
 network) logs in for shutdown and reboot; it runs only the fixed `shutdown` commands. Passwords and private keys are stored encrypted with the server's
 secrets key (`NETIGNITE_SECRETS_KEY`, or `config/secrets.key`; back it up) and are never returned by
 the API. The device's host key is trusted on first use: test the login, compare the fingerprint,
@@ -92,9 +92,9 @@ curl -fsSL https://<server>/install/linux.sh | sudo sh -s -- <enrollment-token>
 ```
 
 `/install/linux.sh` downloads the agent from the [Agent-Linux](https://github.com/NetIgnite-project/Agent-Linux)
-releases (`NETIGNITE_LINUX_AGENT_REPO`; the newest release, pre-releases included, or the tag in
-`NETIGNITE_LINUX_AGENT_VERSION`), checks it against `SHA256SUMS`, pairs it and installs the
-systemd service.
+releases (`NETIGNITE_LINUX_AGENT_REPO`; the newest stable release, a pre-release only while there
+is none, or the tag in `NETIGNITE_LINUX_AGENT_VERSION`), checks it against `SHA256SUMS`, pairs it
+and installs the systemd service.
 
 ### Upgrading from v1
 
diff --git a/app/pages/dashboard/devices/[device_id]/ssh.vue b/app/pages/dashboard/devices/[device_id]/ssh.vue
index c5b84a6..5ee3f52 100644
--- a/app/pages/dashboard/devices/[device_id]/ssh.vue
+++ b/app/pages/dashboard/devices/[device_id]/ssh.vue
@@ -211,7 +211,7 @@ async function copy(text: string) {
 				variant="subtle"
 				icon="i-lucide-radio-tower"
 				title="This device's agent can't log in over SSH"
-				description="SSH needs an online agent in the device's network that can log in over SSH: an ESP32 with firmware 2.0.0-beta.2 or newer, or a Linux agent in Wake-on-LAN mode. Assign it as the device's agent (General tab)."
+				description="SSH needs an online agent in the device's network that can log in over SSH: an ESP32 with firmware 2.0.0 or newer, or a Linux agent in Wake-on-LAN mode. Assign it as the device's agent (General tab)."
 			/>
 
 			<form class="space-y-5" @submit.prevent="save">
diff --git a/example.env b/example.env
index 9eac92e..597bb5d 100644
--- a/example.env
+++ b/example.env
@@ -27,7 +27,7 @@ NETIGNITE_FIRMWARE_DIR=./data/firmware
 # NETIGNITE_GITHUB_TOKEN=
 
 # Linux agent install script (/install/linux.sh): GitHub repository, and optionally a fixed release
-# tag (default: the newest release, pre-releases included).
+# tag (default: the newest stable release; a pre-release only while there is none).
 NETIGNITE_LINUX_AGENT_REPO=NetIgnite-project/Agent-Linux
 # NETIGNITE_LINUX_AGENT_VERSION=v1.0.0
 
diff --git a/server/lib/agents/linuxInstaller.ts b/server/lib/agents/linuxInstaller.ts
index 21f8676..f11f702 100644
--- a/server/lib/agents/linuxInstaller.ts
+++ b/server/lib/agents/linuxInstaller.ts
@@ -50,9 +50,12 @@ esac
 BASE="\${NETIGNITE_AGENT_BASE_URL:-}"
 if [ -z "$BASE" ]; then
 	if [ -z "$VERSION" ]; then
-		# The newest release, pre-releases included (GitHub's "latest" skips them).
-		VERSION=$(curl -fsSL "https://api.github.com/repos/$REPO/releases?per_page=1" |
-			sed -n 's/.*"tag_name": *"\\([^"]*\\)".*/\\1/p' | head -n 1)
+		# The newest stable release (GitHub's "latest" skips pre-releases); the newest pre-release
+		# only while the repository has no stable release.
+		tag_name() { sed -n 's/.*"tag_name": *"\\([^"]*\\)".*/\\1/p' | head -n 1; }
+		VERSION=$(curl -fsL "https://api.github.com/repos/$REPO/releases/latest" | tag_name)
+		[ -n "$VERSION" ] ||
+			VERSION=$(curl -fsSL "https://api.github.com/repos/$REPO/releases?per_page=1" | tag_name)
 		[ -n "$VERSION" ] || fail "couldn't find a release of $REPO"
 	fi
 	BASE="https://github.com/$REPO/releases/download/$VERSION"
diff --git a/server/lib/migration/v1Import.ts b/server/lib/migration/v1Import.ts
index fb66573..51e77ae 100644
--- a/server/lib/migration/v1Import.ts
+++ b/server/lib/migration/v1Import.ts
@@ -1,6 +1,6 @@
 import { Database } from "bun:sqlite";
 import { existsSync, rmSync } from "node:fs";
-import { join } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { eq } from "drizzle-orm";
 import { RuntimeMetadata } from "../api/utils/metadata";
 import { DeviceSettings } from "../api/utils/shared-models/netigniteData";
@@ -54,6 +54,18 @@ export type V1ImportReport = {
 export class V1Importer {
 	static readonly PLACEHOLDER_EMAIL_DOMAIN = "imported.netignite.invalid";
 
+	/**
+	 * The v1 database (`db.sqlite`) next to the v2 database at `databasePath`, if it exists and
+	 * nothing was imported from it yet; otherwise null. A v1 server that pulled a v2 image starts
+	 * with an empty v2 database, and its users' data is still in that file.
+	 */
+	static async pendingV1Database(databasePath: string): Promise<string | null> {
+		const v1Path = join(dirname(databasePath), "db.sqlite");
+		if (resolve(v1Path) === resolve(databasePath) || !existsSync(v1Path)) return null;
+		const state = await RuntimeMetadata.getV1ImportState();
+		return Object.keys(state.users).length === 0 ? v1Path : null;
+	}
+
 	static async run(options: {
 		sourcePath: string;
 		dryRun?: boolean;
diff --git a/server/lib/utils/config.ts b/server/lib/utils/config.ts
index 41310cc..d32672a 100644
--- a/server/lib/utils/config.ts
+++ b/server/lib/utils/config.ts
@@ -147,7 +147,7 @@ export class ConfigHandler {
 
 		// The Linux agent's install script (/install/linux.sh) downloads the agent from the GitHub
 		// releases of LINUX_AGENT_REPO: the release tagged LINUX_AGENT_VERSION (e.g. v1.0.0), or the
-		// newest release, pre-releases included.
+		// newest stable release (a pre-release only while the repository has no stable release).
 		LINUX_AGENT_REPO: CS.string().default("NetIgnite-project/Agent-Linux"),
 		LINUX_AGENT_VERSION: CS.string().optional(),
 
diff --git a/server/plugins/startup.ts b/server/plugins/startup.ts
index ee26711..591a801 100644
--- a/server/plugins/startup.ts
+++ b/server/plugins/startup.ts
@@ -7,6 +7,7 @@ import { DB } from "../lib/db";
 import { DeviceStatusService } from "../lib/devices/status";
 import { FirmwareCatalog } from "../lib/firmware/catalog";
 import { OtaService } from "../lib/firmware/ota";
+import { V1Importer } from "../lib/migration/v1Import";
 import { TaskScheduler } from "../lib/tasks";
 import { Utils } from "../lib/utils";
 import { ConfigHandler } from "../lib/utils/config";
@@ -89,6 +90,17 @@ export default defineNitroPlugin(async (nitroApp) => {
 		config.DB_MIGRATION_DIR,
 	);
 
+	const v1Database = await V1Importer.pendingV1Database(config.DB_PATH);
+	if (v1Database) {
+		Logger.warn(
+			`Found a NetIgnite v1 database at ${v1Database} that hasn't been imported: its users, ` +
+				"agents and devices are still in it, not in this server. Import it:\n" +
+				`  Docker:      docker exec <container> bun /opt/netignite/app/.output/import-v1.mjs --from ${v1Database}\n` +
+				`  From source: bun scripts/import-v1.ts --from ${v1Database}\n` +
+				"Guide: https://netignite.dev/docs/server/upgrading (move the file away to hide this warning)",
+		);
+	}
+
 	await Utils.ensureDirectoryExists(config.LOG_DIR ?? "./data/logs");
 
 	await EmailService.init();
diff --git a/tests/agent-control.test.ts b/tests/agent-control.test.ts
index 2123199..41209c8 100644
--- a/tests/agent-control.test.ts
+++ b/tests/agent-control.test.ts
@@ -572,4 +572,47 @@ describe("Linux agent setup", () => {
 			expect(check.exitCode).toBe(0);
 		}
 	});
+
+	test("the install script takes the newest stable release, a pre-release only without one", async () => {
+		const sh = Bun.which("sh");
+		if (!sh) return;
+		const script = LinuxInstaller.script({
+			serverURL: "https://netignite.example",
+			repo: "Example/Agent-Linux",
+			version: null,
+		});
+		// Only the release lookup: the rest of the script needs root and systemd.
+		const lookup = script.match(/\tif \[ -z "\$VERSION" \]; then\n[\s\S]*?\n\tfi\n/)?.[0];
+		expect(lookup).toBeDefined();
+
+		// A fake curl: /releases/latest answers with $STABLE or 404s, the release list with a beta.
+		const bin = path.join(firmwareDir, "fake-bin");
+		const curl = path.join(bin, "curl");
+		await Bun.write(
+			curl,
+			[
+				"#!/bin/sh",
+				'case "$*" in',
+				'*releases/latest*) [ -n "$STABLE" ] || exit 22; echo "{\\"tag_name\\": \\"$STABLE\\"}" ;;',
+				'*) echo "{\\"tag_name\\": \\"v1.1.0-beta.1\\"}" ;;',
+				"esac",
+				"",
+			].join("\n"),
+		);
+		await fs.chmod(curl, 0o755);
+
+		const pick = (stable: string) =>
+			Bun.spawnSync(
+				[
+					sh,
+					"-c",
+					`set -eu\nfail() { echo "$*" >&2; exit 1; }\nREPO=Example/Agent-Linux\nVERSION=\n${lookup}echo "$VERSION"`,
+				],
+				{ env: { ...process.env, PATH: `${bin}${path.delimiter}${process.env.PATH}`, STABLE: stable } },
+			)
+				.stdout.toString()
+				.trim();
+		expect(pick("v1.0.0")).toBe("v1.0.0");
+		expect(pick("")).toBe("v1.1.0-beta.1");
+	});
 });
diff --git a/tests/v1-import.test.ts b/tests/v1-import.test.ts
index cbf7631..d7fd1f4 100644
--- a/tests/v1-import.test.ts
+++ b/tests/v1-import.test.ts
@@ -79,6 +79,11 @@ afterAll(() => {
 });
 
 describe("v1 import", () => {
+	test("a v1 database next to the v2 one is reported until something is imported", async () => {
+		expect(await V1Importer.pendingV1Database(join(dir, "netignite.sqlite"))).toBe(v1Path);
+		expect(await V1Importer.pendingV1Database(join(dir, "elsewhere", "netignite.sqlite"))).toBeNull();
+	});
+
 	test("a dry run changes nothing", async () => {
 		const report = await V1Importer.run({ sourcePath: v1Path, dryRun: true });
 		expect(report.users.imported).toEqual(["v1alice", "v1bobby"]);
@@ -138,6 +143,10 @@ describe("v1 import", () => {
 		expect(nas).toMatchObject({ agent_id: null, status_method: "link_local", wol_port: 7 });
 	});
 
+	test("an imported v1 database isn't reported anymore", async () => {
+		expect(await V1Importer.pendingV1Database(join(dir, "netignite.sqlite"))).toBeNull();
+	});
+
 	test("running it again imports nothing twice", async () => {
 		const report = await V1Importer.run({ sourcePath: v1Path });
 		expect(report.users.imported).toEqual([]);