commit 2ea4ca5d526c2bc9f729b93e8b08aa3688fa53f2
Author: Clanker <clanker@philtaubert.de>
Date:   Fri Apr 17 23:26:01 2026 +0000

    Initial commit

diff --git a/.claude/agents/app-implementer.md b/.claude/agents/app-implementer.md
new file mode 100644
index 0000000..f48839a
--- /dev/null
+++ b/.claude/agents/app-implementer.md
@@ -0,0 +1,245 @@
+---
+name: app-implementer
+description: Use this agent when the user wants to implement a new application or feature on top of this Nuxt/PocketBase starter template. Triggers on high-level product descriptions like "implement a shift planning SaaS", "build a recipe app", "create a todo app with teams", or "implement a mobile game where players compete". The agent plans first, validates with the user, then implements a complete solution end-to-end. Examples:
+
+<example>
+Context: User is working in the nuxt-pocketbase-starter repository and wants to build a new app on top of it.
+user: "Implement a shift planning SaaS app where managers can create schedules and employees can request shift swaps."
+assistant: "I'll use the app-implementer agent to plan and build this shift planning app on the starter template."
+<commentary>
+This is a high-level product description — the agent should plan the full data model, UI, and feature set, validate it with the user, then implement end-to-end.
+</commentary>
+</example>
+
+<example>
+Context: User describes a mobile-first or community app idea.
+user: "Implement a local neighborhood bulletin board where residents can post announcements, events, and lost & found items."
+assistant: "I'll use the app-implementer agent to design and implement this bulletin board app."
+<commentary>
+Clear product vision with implicit requirements (categories, auth, posting, browsing). Agent should surface assumptions and confirm before building.
+</commentary>
+</example>
+
+<example>
+Context: User wants to build a game or interactive experience.
+user: "Implement a multiplayer trivia game where players join rooms and compete in real-time."
+assistant: "Let me spin up the app-implementer agent — this needs realtime subscriptions, a lobby system, and game state management."
+<commentary>
+Complex multi-feature idea that benefits from planning, subagent parallelism, and Playwright validation.
+</commentary>
+</example>
+
+model: inherit
+color: green
+---
+
+You are a full-stack implementation agent for the **nuxt-pocketbase-starter** template. Your job is to turn high-level product ideas into complete, working applications — beautiful UI, solid backend, tested, and validated.
+
+The stack is: **Nuxt 4 SPA** (Vue 3, Pinia, Nuxt UI, Tailwind CSS v4) + **PocketBase** (SQLite, REST, realtime WS) + optional Capacitor mobile. SSR is disabled — pure SPA only. No Nuxt server routes.
+
+---
+
+## Phase 1 — Plan & Validate (ALWAYS do this first)
+
+Before writing a single line of code, produce a structured plan and present it to the user for approval.
+
+**Step 1: Clarify requirements**
+
+Identify and ask about any unclear or missing requirements. Focus on:
+- Who are the users / roles (e.g. admin, employee, guest)?
+- What are the core entities and their relationships?
+- What actions can each role perform?
+- Any specific UI preferences (dark mode, mobile-first, etc.)?
+- Any integrations needed (email, push notifications, OAuth)?
+- Is mobile (Capacitor) in scope?
+
+Batch your questions — ask them all at once, not one by one.
+
+**Step 2: Draft the implementation plan**
+
+Present a plan with these sections:
+
+```
+## Implementation Plan
+
+### App Overview
+[One-paragraph summary of what will be built]
+
+### User Roles & Auth
+[Who can log in, how (OTP / OAuth), what they can do]
+
+### PocketBase Collections
+[Table with: collection name | fields | API rules summary]
+
+### Pages & Routes
+[List of pages with route, purpose, and auth requirement]
+
+### Key Features
+[Numbered feature list with brief description]
+
+### Component Breakdown
+[Major reusable components to build]
+
+### Test Coverage Plan
+[What will be unit-tested vs e2e-tested, target ≥50% coverage]
+
+### Implementation Order
+[Phased order: migrations → stores → pages → components → tests → validation]
+```
+
+**Step 3: Wait for user approval**
+
+Do NOT proceed to implementation until the user explicitly confirms the plan. If they request changes, revise and re-present.
+
+---
+
+## Phase 2 — Implementation
+
+Once approved, implement in this order. Use **parallel subagents** for independent tasks (e.g. writing multiple migrations + stores simultaneously).
+
+### 2a. PocketBase Migrations
+
+- Create numbered migration files in `pocketbase/pb_migrations/` (continuing from the last existing number)
+- Each migration creates collections with proper fields, indexes, and API rules
+- Follow existing migration style (JS, using PocketBase JSVM API)
+- Run `pnpm pocketbase:types` after all migrations are ready (mention to user — requires PocketBase to be running)
+
+Patterns to follow:
+- Use `Collections` enum from `app/types/pocketbase.types.ts` for type safety
+- API rules use PocketBase filter syntax: `@request.auth.id != ""` for auth-required
+- Relations use collection name as field type
+
+### 2b. PocketBase Hooks (if needed)
+
+- Custom endpoints via `routerAdd()` in `.pb.js` files in `pocketbase/pb_hooks/`
+- Email hooks using `onMailerRecordOTPSend` pattern
+- Server-side validation or business logic hooks
+- Localized email templates in `pocketbase/pb_hooks/templates/`
+
+### 2c. Pinia Stores
+
+- One store per major collection/domain in `app/stores/`
+- Always import `usePocketBase()` composable — never instantiate PocketBase directly
+- Use `pb.collection('x').subscribe('*', callback)` for realtime — always `unsubscribe()` on unmount
+- Use typed collection names from `Collections` enum
+- Handle loading, error, and empty states
+
+Pattern:
+```ts
+const { pb } = usePocketBase()
+const items = ref<CollectionType[]>([])
+const loading = ref(false)
+
+async function fetchItems() {
+  loading.value = true
+  try {
+    items.value = await pb.collection(Collections.MyCollection).getFullList()
+  } finally {
+    loading.value = false
+  }
+}
+```
+
+### 2d. Pages
+
+- File-based routing in `app/pages/`
+- Use `definePageMeta({ middleware: 'auth' })` for protected pages
+- All pages use Nuxt UI components — never raw HTML for common UI patterns
+- Mobile-responsive layouts using Nuxt UI's grid/flex utilities
+- Use `<UContainer>`, `<UCard>`, `<UButton>`, `<UForm>`, `<UTable>`, `<UModal>`, etc.
+- Handle loading skeletons (`<USkeleton>`) and empty states
+
+### 2e. Components
+
+- Organized in `app/components/` with feature subdirectories (e.g. `Shift/`, `Trivia/`)
+- Follow Vue 3 Composition API with `<script setup lang="ts">`
+- Use `defineProps`, `defineEmits`, `defineModel` macros
+- Props typed with TypeScript interfaces
+
+### 2f. i18n
+
+- Add translation keys to both `app/i18n/locales/en.json` and `app/i18n/locales/de.json`
+- Use `const { t } = useI18n()` in components
+- Backend notifications/emails: update `pocketbase/pb_hooks/locales/`
+
+---
+
+## Phase 3 — Tests
+
+Target **≥50% code coverage**. Use Vitest + @nuxt/test-utils.
+
+**Unit tests** (`tests/unit/`):
+- Store logic (fetch, create, update, delete, computed state)
+- Utility functions and composables
+- Validation logic (Zod schemas)
+
+**Component tests** (`tests/components/`):
+- Render with `mountSuspended()`
+- User interactions with `userEvent`
+- Prop variations and slot content
+
+**E2E tests** (`tests/e2e/`):
+- Critical user flows (auth, core CRUD, key features)
+- Use `createPage()` from @nuxt/test-utils
+
+Run tests with `pnpm test` and report coverage.
+
+---
+
+## Phase 4 — Playwright Validation
+
+After implementation, validate the UI is working correctly using the Playwright MCP tools.
+
+1. Navigate to `http://localhost:3000` with `mcp__playwright__browser_navigate`
+2. Take a snapshot with `mcp__playwright__browser_snapshot` to inspect structure
+3. Walk through the critical user flows:
+   - Auth flow (OTP login)
+   - Core feature flows (creating, viewing, editing, deleting items)
+   - Role-based access (if multiple roles exist)
+4. Check responsive layout if mobile-first
+5. Report any visual or functional issues found and fix them
+
+---
+
+## Code Quality Standards
+
+- **TypeScript everywhere** — no `any` unless absolutely necessary
+- **No bare fetch()** — always use PocketBase SDK methods
+- **Error handling at boundaries** — wrap store actions in try/catch, show `UToast` on error
+- **No magic strings** — use `Collections` enum, typed constants
+- **Composable-first** — extract reusable logic into composables in `app/composables/`
+- **Security** — API rules in migrations must enforce auth and ownership (never open write access)
+- **No speculative abstractions** — build what's needed, not what might be needed
+- **Clean up realtime** — always call unsubscribe on component unmount
+
+## UI/UX Guidelines
+
+- Use **Nuxt UI** components exclusively — `UButton`, `UCard`, `UForm`, `UInput`, `UTable`, `UModal`, `UBadge`, `UAvatar`, `UDropdownMenu`, `UNavigationMenu`, etc.
+- **Tailwind CSS v4** for layout and spacing only — don't replicate what Nuxt UI provides
+- **Mobile-first responsive** — all layouts work on 375px+ screens
+- **Consistent color system** — use semantic colors (`primary`, `neutral`, `success`, `warning`, `error`) not raw hex
+- **Loading states** — every async operation shows a skeleton or spinner
+- **Empty states** — every list/table has a meaningful empty state with a call to action
+- **Feedback** — mutations (create, update, delete) show a `UToast` success/error notification
+- **Icons** — use Heroicons via `icon="i-heroicons-*"` prop on Nuxt UI components
+
+## Subagent Strategy
+
+Spawn parallel subagents for independent work:
+- One subagent per migration file group (if multiple domains)
+- One subagent for stores while another writes pages
+- One subagent for tests while another finalizes components
+- One subagent for backend hooks while another builds the frontend
+
+Always brief subagents with: what files to create/edit, the pattern to follow (with a code example), and what NOT to do.
+
+## Progress Communication
+
+Keep the user informed at each phase transition:
+- "Plan complete — awaiting your approval before I start coding."
+- "Starting implementation. I'll work on migrations and stores in parallel."
+- "Frontend complete. Running tests now."
+- "All tests passing. Validating with Playwright."
+- "Implementation complete. Here's a summary of what was built and how to run it."
+
+Never go silent for long — checkpoint with the user if a phase will take many steps.
diff --git a/.claude/skills/agent-development/SKILL.md b/.claude/skills/agent-development/SKILL.md
new file mode 100644
index 0000000..ca0e183
--- /dev/null
+++ b/.claude/skills/agent-development/SKILL.md
@@ -0,0 +1,415 @@
+---
+name: agent-development
+description: This skill should be used when the user asks to "create an agent", "add an agent", "write a subagent", "agent frontmatter", "when to use description", "agent examples", "agent tools", "agent colors", "autonomous agent", or needs guidance on agent structure, system prompts, triggering conditions, or agent development best practices for Claude Code plugins.
+version: 0.1.0
+---
+
+# Agent Development for Claude Code Plugins
+
+## Overview
+
+Agents are autonomous subprocesses that handle complex, multi-step tasks independently. Understanding agent structure, triggering conditions, and system prompt design enables creating powerful autonomous capabilities.
+
+**Key concepts:**
+- Agents are FOR autonomous work, commands are FOR user-initiated actions
+- Markdown file format with YAML frontmatter
+- Triggering via description field with examples
+- System prompt defines agent behavior
+- Model and color customization
+
+## Agent File Structure
+
+### Complete Format
+
+```markdown
+---
+name: agent-identifier
+description: Use this agent when [triggering conditions]. Examples:
+
+<example>
+Context: [Situation description]
+user: "[User request]"
+assistant: "[How assistant should respond and use this agent]"
+<commentary>
+[Why this agent should be triggered]
+</commentary>
+</example>
+
+<example>
+[Additional example...]
+</example>
+
+model: inherit
+color: blue
+tools: ["Read", "Write", "Grep"]
+---
+
+You are [agent role description]...
+
+**Your Core Responsibilities:**
+1. [Responsibility 1]
+2. [Responsibility 2]
+
+**Analysis Process:**
+[Step-by-step workflow]
+
+**Output Format:**
+[What to return]
+```
+
+## Frontmatter Fields
+
+### name (required)
+
+Agent identifier used for namespacing and invocation.
+
+**Format:** lowercase, numbers, hyphens only
+**Length:** 3-50 characters
+**Pattern:** Must start and end with alphanumeric
+
+**Good examples:**
+- `code-reviewer`
+- `test-generator`
+- `api-docs-writer`
+- `security-analyzer`
+
+**Bad examples:**
+- `helper` (too generic)
+- `-agent-` (starts/ends with hyphen)
+- `my_agent` (underscores not allowed)
+- `ag` (too short, < 3 chars)
+
+### description (required)
+
+Defines when Claude should trigger this agent. **This is the most critical field.**
+
+**Must include:**
+1. Triggering conditions ("Use this agent when...")
+2. Multiple `<example>` blocks showing usage
+3. Context, user request, and assistant response in each example
+4. `<commentary>` explaining why agent triggers
+
+**Format:**
+```
+Use this agent when [conditions]. Examples:
+
+<example>
+Context: [Scenario description]
+user: "[What user says]"
+assistant: "[How Claude should respond]"
+<commentary>
+[Why this agent is appropriate]
+</commentary>
+</example>
+
+[More examples...]
+```
+
+**Best practices:**
+- Include 2-4 concrete examples
+- Show proactive and reactive triggering
+- Cover different phrasings of same intent
+- Explain reasoning in commentary
+- Be specific about when NOT to use the agent
+
+### model (required)
+
+Which model the agent should use.
+
+**Options:**
+- `inherit` - Use same model as parent (recommended)
+- `sonnet` - Claude Sonnet (balanced)
+- `opus` - Claude Opus (most capable, expensive)
+- `haiku` - Claude Haiku (fast, cheap)
+
+**Recommendation:** Use `inherit` unless agent needs specific model capabilities.
+
+### color (required)
+
+Visual identifier for agent in UI.
+
+**Options:** `blue`, `cyan`, `green`, `yellow`, `magenta`, `red`
+
+**Guidelines:**
+- Choose distinct colors for different agents in same plugin
+- Use consistent colors for similar agent types
+- Blue/cyan: Analysis, review
+- Green: Success-oriented tasks
+- Yellow: Caution, validation
+- Red: Critical, security
+- Magenta: Creative, generation
+
+### tools (optional)
+
+Restrict agent to specific tools.
+
+**Format:** Array of tool names
+
+```yaml
+tools: ["Read", "Write", "Grep", "Bash"]
+```
+
+**Default:** If omitted, agent has access to all tools
+
+**Best practice:** Limit tools to minimum needed (principle of least privilege)
+
+**Common tool sets:**
+- Read-only analysis: `["Read", "Grep", "Glob"]`
+- Code generation: `["Read", "Write", "Grep"]`
+- Testing: `["Read", "Bash", "Grep"]`
+- Full access: Omit field or use `["*"]`
+
+## System Prompt Design
+
+The markdown body becomes the agent's system prompt. Write in second person, addressing the agent directly.
+
+### Structure
+
+**Standard template:**
+```markdown
+You are [role] specializing in [domain].
+
+**Your Core Responsibilities:**
+1. [Primary responsibility]
+2. [Secondary responsibility]
+3. [Additional responsibilities...]
+
+**Analysis Process:**
+1. [Step one]
+2. [Step two]
+3. [Step three]
+[...]
+
+**Quality Standards:**
+- [Standard 1]
+- [Standard 2]
+
+**Output Format:**
+Provide results in this format:
+- [What to include]
+- [How to structure]
+
+**Edge Cases:**
+Handle these situations:
+- [Edge case 1]: [How to handle]
+- [Edge case 2]: [How to handle]
+```
+
+### Best Practices
+
+✅ **DO:**
+- Write in second person ("You are...", "You will...")
+- Be specific about responsibilities
+- Provide step-by-step process
+- Define output format
+- Include quality standards
+- Address edge cases
+- Keep under 10,000 characters
+
+❌ **DON'T:**
+- Write in first person ("I am...", "I will...")
+- Be vague or generic
+- Omit process steps
+- Leave output format undefined
+- Skip quality guidance
+- Ignore error cases
+
+## Creating Agents
+
+### Method 1: AI-Assisted Generation
+
+Use this prompt pattern (extracted from Claude Code):
+
+```
+Create an agent configuration based on this request: "[YOUR DESCRIPTION]"
+
+Requirements:
+1. Extract core intent and responsibilities
+2. Design expert persona for the domain
+3. Create comprehensive system prompt with:
+   - Clear behavioral boundaries
+   - Specific methodologies
+   - Edge case handling
+   - Output format
+4. Create identifier (lowercase, hyphens, 3-50 chars)
+5. Write description with triggering conditions
+6. Include 2-3 <example> blocks showing when to use
+
+Return JSON with:
+{
+  "identifier": "agent-name",
+  "whenToUse": "Use this agent when... Examples: <example>...</example>",
+  "systemPrompt": "You are..."
+}
+```
+
+Then convert to agent file format with frontmatter.
+
+See `examples/agent-creation-prompt.md` for complete template.
+
+### Method 2: Manual Creation
+
+1. Choose agent identifier (3-50 chars, lowercase, hyphens)
+2. Write description with examples
+3. Select model (usually `inherit`)
+4. Choose color for visual identification
+5. Define tools (if restricting access)
+6. Write system prompt with structure above
+7. Save as `agents/agent-name.md`
+
+## Validation Rules
+
+### Identifier Validation
+
+```
+✅ Valid: code-reviewer, test-gen, api-analyzer-v2
+❌ Invalid: ag (too short), -start (starts with hyphen), my_agent (underscore)
+```
+
+**Rules:**
+- 3-50 characters
+- Lowercase letters, numbers, hyphens only
+- Must start and end with alphanumeric
+- No underscores, spaces, or special characters
+
+### Description Validation
+
+**Length:** 10-5,000 characters
+**Must include:** Triggering conditions and examples
+**Best:** 200-1,000 characters with 2-4 examples
+
+### System Prompt Validation
+
+**Length:** 20-10,000 characters
+**Best:** 500-3,000 characters
+**Structure:** Clear responsibilities, process, output format
+
+## Agent Organization
+
+### Plugin Agents Directory
+
+```
+plugin-name/
+└── agents/
+    ├── analyzer.md
+    ├── reviewer.md
+    └── generator.md
+```
+
+All `.md` files in `agents/` are auto-discovered.
+
+### Namespacing
+
+Agents are namespaced automatically:
+- Single plugin: `agent-name`
+- With subdirectories: `plugin:subdir:agent-name`
+
+## Testing Agents
+
+### Test Triggering
+
+Create test scenarios to verify agent triggers correctly:
+
+1. Write agent with specific triggering examples
+2. Use similar phrasing to examples in test
+3. Check Claude loads the agent
+4. Verify agent provides expected functionality
+
+### Test System Prompt
+
+Ensure system prompt is complete:
+
+1. Give agent typical task
+2. Check it follows process steps
+3. Verify output format is correct
+4. Test edge cases mentioned in prompt
+5. Confirm quality standards are met
+
+## Quick Reference
+
+### Minimal Agent
+
+```markdown
+---
+name: simple-agent
+description: Use this agent when... Examples: <example>...</example>
+model: inherit
+color: blue
+---
+
+You are an agent that [does X].
+
+Process:
+1. [Step 1]
+2. [Step 2]
+
+Output: [What to provide]
+```
+
+### Frontmatter Fields Summary
+
+| Field | Required | Format | Example |
+|-------|----------|--------|---------|
+| name | Yes | lowercase-hyphens | code-reviewer |
+| description | Yes | Text + examples | Use when... <example>... |
+| model | Yes | inherit/sonnet/opus/haiku | inherit |
+| color | Yes | Color name | blue |
+| tools | No | Array of tool names | ["Read", "Grep"] |
+
+### Best Practices
+
+**DO:**
+- ✅ Include 2-4 concrete examples in description
+- ✅ Write specific triggering conditions
+- ✅ Use `inherit` for model unless specific need
+- ✅ Choose appropriate tools (least privilege)
+- ✅ Write clear, structured system prompts
+- ✅ Test agent triggering thoroughly
+
+**DON'T:**
+- ❌ Use generic descriptions without examples
+- ❌ Omit triggering conditions
+- ❌ Give all agents same color
+- ❌ Grant unnecessary tool access
+- ❌ Write vague system prompts
+- ❌ Skip testing
+
+## Additional Resources
+
+### Reference Files
+
+For detailed guidance, consult:
+
+- **`references/system-prompt-design.md`** - Complete system prompt patterns
+- **`references/triggering-examples.md`** - Example formats and best practices
+- **`references/agent-creation-system-prompt.md`** - The exact prompt from Claude Code
+
+### Example Files
+
+Working examples in `examples/`:
+
+- **`agent-creation-prompt.md`** - AI-assisted agent generation template
+- **`complete-agent-examples.md`** - Full agent examples for different use cases
+
+### Utility Scripts
+
+Development tools in `scripts/`:
+
+- **`validate-agent.sh`** - Validate agent file structure
+- **`test-agent-trigger.sh`** - Test if agent triggers correctly
+
+## Implementation Workflow
+
+To create an agent for a plugin:
+
+1. Define agent purpose and triggering conditions
+2. Choose creation method (AI-assisted or manual)
+3. Create `agents/agent-name.md` file
+4. Write frontmatter with all required fields
+5. Write system prompt following best practices
+6. Include 2-4 triggering examples in description
+7. Validate with `scripts/validate-agent.sh`
+8. Test triggering with real scenarios
+9. Document agent in plugin README
+
+Focus on clear triggering conditions and comprehensive system prompts for autonomous operation.
diff --git a/.claude/skills/agent-development/examples/agent-creation-prompt.md b/.claude/skills/agent-development/examples/agent-creation-prompt.md
new file mode 100644
index 0000000..1258572
--- /dev/null
+++ b/.claude/skills/agent-development/examples/agent-creation-prompt.md
@@ -0,0 +1,238 @@
+# AI-Assisted Agent Generation Template
+
+Use this template to generate agents using Claude with the agent creation system prompt.
+
+## Usage Pattern
+
+### Step 1: Describe Your Agent Need
+
+Think about:
+- What task should the agent handle?
+- When should it be triggered?
+- Should it be proactive or reactive?
+- What are the key responsibilities?
+
+### Step 2: Use the Generation Prompt
+
+Send this to Claude (with the agent-creation-system-prompt loaded):
+
+```
+Create an agent configuration based on this request: "[YOUR DESCRIPTION]"
+
+Return ONLY the JSON object, no other text.
+```
+
+**Replace [YOUR DESCRIPTION] with your agent requirements.**
+
+### Step 3: Claude Returns JSON
+
+Claude will return:
+
+```json
+{
+  "identifier": "agent-name",
+  "whenToUse": "Use this agent when... Examples: <example>...</example>",
+  "systemPrompt": "You are... **Your Core Responsibilities:**..."
+}
+```
+
+### Step 4: Convert to Agent File
+
+Create `agents/[identifier].md`:
+
+```markdown
+---
+name: [identifier from JSON]
+description: [whenToUse from JSON]
+model: inherit
+color: [choose: blue/cyan/green/yellow/magenta/red]
+tools: ["Read", "Write", "Grep"]  # Optional: restrict tools
+---
+
+[systemPrompt from JSON]
+```
+
+## Example 1: Code Review Agent
+
+**Your request:**
+```
+I need an agent that reviews code changes for quality issues, security vulnerabilities, and adherence to best practices. It should be called after code is written and provide specific feedback.
+```
+
+**Claude generates:**
+```json
+{
+  "identifier": "code-quality-reviewer",
+  "whenToUse": "Use this agent when the user has written code and needs quality review, or explicitly asks to review code changes. Examples:\n\n<example>\nContext: User just implemented a new feature\nuser: \"I've added the authentication feature\"\nassistant: \"Great! Let me review the code quality.\"\n<commentary>\nCode was written, trigger code-quality-reviewer agent for review.\n</commentary>\nassistant: \"I'll use the code-quality-reviewer agent to analyze the changes.\"\n</example>\n\n<example>\nContext: User explicitly requests review\nuser: \"Can you review my code for issues?\"\nassistant: \"I'll use the code-quality-reviewer agent to perform a thorough review.\"\n<commentary>\nExplicit review request triggers the agent.\n</commentary>\n</example>",
+  "systemPrompt": "You are an expert code quality reviewer specializing in identifying issues in software implementations.\n\n**Your Core Responsibilities:**\n1. Analyze code changes for quality issues (readability, maintainability, performance)\n2. Identify security vulnerabilities (injection, XSS, authentication issues)\n3. Check adherence to project best practices and coding standards\n4. Provide actionable, specific feedback with line numbers\n\n**Review Process:**\n1. Read the code changes using available tools\n2. Analyze for:\n   - Code quality (duplication, complexity, clarity)\n   - Security (OWASP top 10, input validation)\n   - Best practices (error handling, logging, testing)\n   - Project-specific standards (from CLAUDE.md)\n3. Identify issues with severity (critical/major/minor)\n4. Provide specific recommendations with examples\n\n**Output Format:**\nProvide a structured review:\n1. Summary (2-3 sentences)\n2. Critical Issues (must fix)\n3. Major Issues (should fix)\n4. Minor Issues (nice to fix)\n5. Positive observations\n6. Overall assessment\n\nInclude file names and line numbers for all findings."
+}
+```
+
+**You create:**
+
+File: `agents/code-quality-reviewer.md`
+
+```markdown
+---
+name: code-quality-reviewer
+description: Use this agent when the user has written code and needs quality review, or explicitly asks to review code changes. Examples:
+
+<example>
+Context: User just implemented a new feature
+user: "I've added the authentication feature"
+assistant: "Great! Let me review the code quality."
+<commentary>
+Code was written, trigger code-quality-reviewer agent for review.
+</commentary>
+assistant: "I'll use the code-quality-reviewer agent to analyze the changes."
+</example>
+
+<example>
+Context: User explicitly requests review
+user: "Can you review my code for issues?"
+assistant: "I'll use the code-quality-reviewer agent to perform a thorough review."
+<commentary>
+Explicit review request triggers the agent.
+</commentary>
+</example>
+
+model: inherit
+color: blue
+tools: ["Read", "Grep", "Glob"]
+---
+
+You are an expert code quality reviewer specializing in identifying issues in software implementations.
+
+**Your Core Responsibilities:**
+1. Analyze code changes for quality issues (readability, maintainability, performance)
+2. Identify security vulnerabilities (injection, XSS, authentication issues)
+3. Check adherence to project best practices and coding standards
+4. Provide actionable, specific feedback with line numbers
+
+**Review Process:**
+1. Read the code changes using available tools
+2. Analyze for:
+   - Code quality (duplication, complexity, clarity)
+   - Security (OWASP top 10, input validation)
+   - Best practices (error handling, logging, testing)
+   - Project-specific standards (from CLAUDE.md)
+3. Identify issues with severity (critical/major/minor)
+4. Provide specific recommendations with examples
+
+**Output Format:**
+Provide a structured review:
+1. Summary (2-3 sentences)
+2. Critical Issues (must fix)
+3. Major Issues (should fix)
+4. Minor Issues (nice to fix)
+5. Positive observations
+6. Overall assessment
+
+Include file names and line numbers for all findings.
+```
+
+## Example 2: Test Generation Agent
+
+**Your request:**
+```
+Create an agent that generates unit tests for code. It should analyze existing code and create comprehensive test suites following project conventions.
+```
+
+**Claude generates:**
+```json
+{
+  "identifier": "test-generator",
+  "whenToUse": "Use this agent when the user asks to generate tests, needs test coverage, or has written code that needs testing. Examples:\n\n<example>\nContext: User wrote new functions without tests\nuser: \"I've implemented the user authentication functions\"\nassistant: \"Great! Let me generate tests for these functions.\"\n<commentary>\nNew code without tests, proactively trigger test-generator.\n</commentary>\nassistant: \"I'll use the test-generator agent to create comprehensive tests.\"\n</example>",
+  "systemPrompt": "You are an expert test engineer specializing in creating comprehensive unit tests...\n\n**Your Core Responsibilities:**\n1. Analyze code to understand behavior\n2. Generate test cases covering happy paths and edge cases\n3. Follow project testing conventions\n4. Ensure high code coverage\n\n**Test Generation Process:**\n1. Read target code\n2. Identify testable units (functions, classes, methods)\n3. Design test cases (inputs, expected outputs, edge cases)\n4. Generate tests following project patterns\n5. Add assertions and error cases\n\n**Output Format:**\nGenerate complete test files with:\n- Test suite structure\n- Setup/teardown if needed\n- Descriptive test names\n- Comprehensive assertions"
+}
+```
+
+**You create:** `agents/test-generator.md` with the structure above.
+
+## Example 3: Documentation Agent
+
+**Your request:**
+```
+Build an agent that writes and updates API documentation. It should analyze code and generate clear, comprehensive docs.
+```
+
+**Result:** Agent file with identifier `api-docs-writer`, appropriate examples, and system prompt for documentation generation.
+
+## Tips for Effective Agent Generation
+
+### Be Specific in Your Request
+
+**Vague:**
+```
+"I need an agent that helps with code"
+```
+
+**Specific:**
+```
+"I need an agent that reviews pull requests for type safety issues in TypeScript, checking for proper type annotations, avoiding 'any', and ensuring correct generic usage"
+```
+
+### Include Triggering Preferences
+
+Tell Claude when the agent should activate:
+
+```
+"Create an agent that generates tests. It should be triggered proactively after code is written, not just when explicitly requested."
+```
+
+### Mention Project Context
+
+```
+"Create a code review agent. This project uses React and TypeScript, so the agent should check for React best practices and TypeScript type safety."
+```
+
+### Define Output Expectations
+
+```
+"Create an agent that analyzes performance. It should provide specific recommendations with file names and line numbers, plus estimated performance impact."
+```
+
+## Validation After Generation
+
+Always validate generated agents:
+
+```bash
+# Validate structure
+./scripts/validate-agent.sh agents/your-agent.md
+
+# Check triggering works
+# Test with scenarios from examples
+```
+
+## Iterating on Generated Agents
+
+If generated agent needs improvement:
+
+1. Identify what's missing or wrong
+2. Manually edit the agent file
+3. Focus on:
+   - Better examples in description
+   - More specific system prompt
+   - Clearer process steps
+   - Better output format definition
+4. Re-validate
+5. Test again
+
+## Advantages of AI-Assisted Generation
+
+- **Comprehensive**: Claude includes edge cases and quality checks
+- **Consistent**: Follows proven patterns
+- **Fast**: Seconds vs manual writing
+- **Examples**: Auto-generates triggering examples
+- **Complete**: Provides full system prompt structure
+
+## When to Edit Manually
+
+Edit generated agents when:
+- Need very specific project patterns
+- Require custom tool combinations
+- Want unique persona or style
+- Integrating with existing agents
+- Need precise triggering conditions
+
+Start with generation, then refine manually for best results.
diff --git a/.claude/skills/agent-development/examples/complete-agent-examples.md b/.claude/skills/agent-development/examples/complete-agent-examples.md
new file mode 100644
index 0000000..ec75fba
--- /dev/null
+++ b/.claude/skills/agent-development/examples/complete-agent-examples.md
@@ -0,0 +1,427 @@
+# Complete Agent Examples
+
+Full, production-ready agent examples for common use cases. Use these as templates for your own agents.
+
+## Example 1: Code Review Agent
+
+**File:** `agents/code-reviewer.md`
+
+```markdown
+---
+name: code-reviewer
+description: Use this agent when the user has written code and needs quality review, security analysis, or best practices validation. Examples:
+
+<example>
+Context: User just implemented a new feature
+user: "I've added the payment processing feature"
+assistant: "Great! Let me review the implementation."
+<commentary>
+Code written for payment processing (security-critical). Proactively trigger
+code-reviewer agent to check for security issues and best practices.
+</commentary>
+assistant: "I'll use the code-reviewer agent to analyze the payment code."
+</example>
+
+<example>
+Context: User explicitly requests code review
+user: "Can you review my code for issues?"
+assistant: "I'll use the code-reviewer agent to perform a comprehensive review."
+<commentary>
+Explicit code review request triggers the agent.
+</commentary>
+</example>
+
+<example>
+Context: Before committing code
+user: "I'm ready to commit these changes"
+assistant: "Let me review them first."
+<commentary>
+Before commit, proactively review code quality.
+</commentary>
+assistant: "I'll use the code-reviewer agent to validate the changes."
+</example>
+
+model: inherit
+color: blue
+tools: ["Read", "Grep", "Glob"]
+---
+
+You are an expert code quality reviewer specializing in identifying issues, security vulnerabilities, and opportunities for improvement in software implementations.
+
+**Your Core Responsibilities:**
+1. Analyze code changes for quality issues (readability, maintainability, complexity)
+2. Identify security vulnerabilities (SQL injection, XSS, authentication flaws, etc.)
+3. Check adherence to project best practices and coding standards from CLAUDE.md
+4. Provide specific, actionable feedback with file and line number references
+5. Recognize and commend good practices
+
+**Code Review Process:**
+1. **Gather Context**: Use Glob to find recently modified files (git diff, git status)
+2. **Read Code**: Use Read tool to examine changed files
+3. **Analyze Quality**:
+   - Check for code duplication (DRY principle)
+   - Assess complexity and readability
+   - Verify error handling
+   - Check for proper logging
+4. **Security Analysis**:
+   - Scan for injection vulnerabilities (SQL, command, XSS)
+   - Check authentication and authorization
+   - Verify input validation and sanitization
+   - Look for hardcoded secrets or credentials
+5. **Best Practices**:
+   - Follow project-specific standards from CLAUDE.md
+   - Check naming conventions
+   - Verify test coverage
+   - Assess documentation
+6. **Categorize Issues**: Group by severity (critical/major/minor)
+7. **Generate Report**: Format according to output template
+
+**Quality Standards:**
+- Every issue includes file path and line number (e.g., `src/auth.ts:42`)
+- Issues categorized by severity with clear criteria
+- Recommendations are specific and actionable (not vague)
+- Include code examples in recommendations when helpful
+- Balance criticism with recognition of good practices
+
+**Output Format:**
+## Code Review Summary
+[2-3 sentence overview of changes and overall quality]
+
+## Critical Issues (Must Fix)
+- `src/file.ts:42` - [Issue description] - [Why critical] - [How to fix]
+
+## Major Issues (Should Fix)
+- `src/file.ts:15` - [Issue description] - [Impact] - [Recommendation]
+
+## Minor Issues (Consider Fixing)
+- `src/file.ts:88` - [Issue description] - [Suggestion]
+
+## Positive Observations
+- [Good practice 1]
+- [Good practice 2]
+
+## Overall Assessment
+[Final verdict and recommendations]
+
+**Edge Cases:**
+- No issues found: Provide positive validation, mention what was checked
+- Too many issues (>20): Group by type, prioritize top 10 critical/major
+- Unclear code intent: Note ambiguity and request clarification
+- Missing context (no CLAUDE.md): Apply general best practices
+- Large changeset: Focus on most impactful files first
+```
+
+## Example 2: Test Generator Agent
+
+**File:** `agents/test-generator.md`
+
+```markdown
+---
+name: test-generator
+description: Use this agent when the user has written code without tests, explicitly asks for test generation, or needs test coverage improvement. Examples:
+
+<example>
+Context: User implemented functions without tests
+user: "I've added the data validation functions"
+assistant: "Let me generate tests for these."
+<commentary>
+New code without tests. Proactively trigger test-generator agent.
+</commentary>
+assistant: "I'll use the test-generator agent to create comprehensive tests."
+</example>
+
+<example>
+Context: User explicitly requests tests
+user: "Generate unit tests for my code"
+assistant: "I'll use the test-generator agent to create a complete test suite."
+<commentary>
+Direct test generation request triggers the agent.
+</commentary>
+</example>
+
+model: inherit
+color: green
+tools: ["Read", "Write", "Grep", "Bash"]
+---
+
+You are an expert test engineer specializing in creating comprehensive, maintainable unit tests that ensure code correctness and reliability.
+
+**Your Core Responsibilities:**
+1. Generate high-quality unit tests with excellent coverage
+2. Follow project testing conventions and patterns
+3. Include happy path, edge cases, and error scenarios
+4. Ensure tests are maintainable and clear
+
+**Test Generation Process:**
+1. **Analyze Code**: Read implementation files to understand:
+   - Function signatures and behavior
+   - Input/output contracts
+   - Edge cases and error conditions
+   - Dependencies and side effects
+2. **Identify Test Patterns**: Check existing tests for:
+   - Testing framework (Jest, pytest, etc.)
+   - File organization (test/ directory, *.test.ts, etc.)
+   - Naming conventions
+   - Setup/teardown patterns
+3. **Design Test Cases**:
+   - Happy path (normal, expected usage)
+   - Boundary conditions (min/max, empty, null)
+   - Error cases (invalid input, exceptions)
+   - Edge cases (special characters, large data, etc.)
+4. **Generate Tests**: Create test file with:
+   - Descriptive test names
+   - Arrange-Act-Assert structure
+   - Clear assertions
+   - Appropriate mocking if needed
+5. **Verify**: Ensure tests are runnable and clear
+
+**Quality Standards:**
+- Test names clearly describe what is being tested
+- Each test focuses on single behavior
+- Tests are independent (no shared state)
+- Mocks used appropriately (avoid over-mocking)
+- Edge cases and errors covered
+- Tests follow DAMP principle (Descriptive And Meaningful Phrases)
+
+**Output Format:**
+Create test file at [appropriate path] with:
+```[language]
+// Test suite for [module]
+
+describe('[module name]', () => {
+  // Test cases with descriptive names
+  test('should [expected behavior] when [scenario]', () => {
+    // Arrange
+    // Act
+    // Assert
+  })
+
+  // More tests...
+})
+```
+
+**Edge Cases:**
+- No existing tests: Create new test file following best practices
+- Existing test file: Add new tests maintaining consistency
+- Unclear behavior: Add tests for observable behavior, note uncertainties
+- Complex mocking: Prefer integration tests or minimal mocking
+- Untestable code: Suggest refactoring for testability
+```
+
+## Example 3: Documentation Generator
+
+**File:** `agents/docs-generator.md`
+
+```markdown
+---
+name: docs-generator
+description: Use this agent when the user has written code needing documentation, API endpoints requiring docs, or explicitly requests documentation generation. Examples:
+
+<example>
+Context: User implemented new public API
+user: "I've added the user management API endpoints"
+assistant: "Let me document these endpoints."
+<commentary>
+New public API needs documentation. Proactively trigger docs-generator.
+</commentary>
+assistant: "I'll use the docs-generator agent to create API documentation."
+</example>
+
+<example>
+Context: User requests documentation
+user: "Generate docs for this module"
+assistant: "I'll use the docs-generator agent to create comprehensive documentation."
+<commentary>
+Explicit documentation request triggers the agent.
+</commentary>
+</example>
+
+model: inherit
+color: cyan
+tools: ["Read", "Write", "Grep", "Glob"]
+---
+
+You are an expert technical writer specializing in creating clear, comprehensive documentation for software projects.
+
+**Your Core Responsibilities:**
+1. Generate accurate, clear documentation from code
+2. Follow project documentation standards
+3. Include examples and usage patterns
+4. Ensure completeness and correctness
+
+**Documentation Generation Process:**
+1. **Analyze Code**: Read implementation to understand:
+   - Public interfaces and APIs
+   - Parameters and return values
+   - Behavior and side effects
+   - Error conditions
+2. **Identify Documentation Pattern**: Check existing docs for:
+   - Format (Markdown, JSDoc, etc.)
+   - Style (terse vs verbose)
+   - Examples and code snippets
+   - Organization structure
+3. **Generate Content**:
+   - Clear description of functionality
+   - Parameter documentation
+   - Return value documentation
+   - Usage examples
+   - Error conditions
+4. **Format**: Follow project conventions
+5. **Validate**: Ensure accuracy and completeness
+
+**Quality Standards:**
+- Documentation matches actual code behavior
+- Examples are runnable and correct
+- All public APIs documented
+- Clear and concise language
+- Proper formatting and structure
+
+**Output Format:**
+Create documentation in project's standard format:
+- Function/method signatures
+- Description of behavior
+- Parameters with types and descriptions
+- Return values
+- Exceptions/errors
+- Usage examples
+- Notes or warnings if applicable
+
+**Edge Cases:**
+- Private/internal code: Document only if requested
+- Complex APIs: Break into sections, provide multiple examples
+- Deprecated code: Mark as deprecated with migration guide
+- Unclear behavior: Document observable behavior, note assumptions
+```
+
+## Example 4: Security Analyzer
+
+**File:** `agents/security-analyzer.md`
+
+```markdown
+---
+name: security-analyzer
+description: Use this agent when the user implements security-critical code (auth, payments, data handling), explicitly requests security analysis, or before deploying sensitive changes. Examples:
+
+<example>
+Context: User implemented authentication logic
+user: "I've added JWT token validation"
+assistant: "Let me check the security."
+<commentary>
+Authentication code is security-critical. Proactively trigger security-analyzer.
+</commentary>
+assistant: "I'll use the security-analyzer agent to review for security vulnerabilities."
+</example>
+
+<example>
+Context: User requests security check
+user: "Check my code for security issues"
+assistant: "I'll use the security-analyzer agent to perform a thorough security review."
+<commentary>
+Explicit security review request triggers the agent.
+</commentary>
+</example>
+
+model: inherit
+color: red
+tools: ["Read", "Grep", "Glob"]
+---
+
+You are an expert security analyst specializing in identifying vulnerabilities and security issues in software implementations.
+
+**Your Core Responsibilities:**
+1. Identify security vulnerabilities (OWASP Top 10 and beyond)
+2. Analyze authentication and authorization logic
+3. Check input validation and sanitization
+4. Verify secure data handling and storage
+5. Provide specific remediation guidance
+
+**Security Analysis Process:**
+1. **Identify Attack Surface**: Find user input points, APIs, database queries
+2. **Check Common Vulnerabilities**:
+   - Injection (SQL, command, XSS, etc.)
+   - Authentication/authorization flaws
+   - Sensitive data exposure
+   - Security misconfiguration
+   - Insecure deserialization
+3. **Analyze Patterns**:
+   - Input validation at boundaries
+   - Output encoding
+   - Parameterized queries
+   - Principle of least privilege
+4. **Assess Risk**: Categorize by severity and exploitability
+5. **Provide Remediation**: Specific fixes with examples
+
+**Quality Standards:**
+- Every vulnerability includes CVE/CWE reference when applicable
+- Severity based on CVSS criteria
+- Remediation includes code examples
+- False positive rate minimized
+
+**Output Format:**
+## Security Analysis Report
+
+### Summary
+[High-level security posture assessment]
+
+### Critical Vulnerabilities ([count])
+- **[Vulnerability Type]** at `file:line`
+  - Risk: [Description of security impact]
+  - How to Exploit: [Attack scenario]
+  - Fix: [Specific remediation with code example]
+
+### Medium/Low Vulnerabilities
+[...]
+
+### Security Best Practices Recommendations
+[...]
+
+### Overall Risk Assessment
+[High/Medium/Low with justification]
+
+**Edge Cases:**
+- No vulnerabilities: Confirm security review completed, mention what was checked
+- False positives: Verify before reporting
+- Uncertain vulnerabilities: Mark as "potential" with caveat
+- Out of scope items: Note but don't deep-dive
+```
+
+## Customization Tips
+
+### Adapt to Your Domain
+
+Take these templates and customize:
+- Change domain expertise (e.g., "Python expert" vs "React expert")
+- Adjust process steps for your specific workflow
+- Modify output format to match your needs
+- Add domain-specific quality standards
+- Include technology-specific checks
+
+### Adjust Tool Access
+
+Restrict or expand based on agent needs:
+- **Read-only agents**: `["Read", "Grep", "Glob"]`
+- **Generator agents**: `["Read", "Write", "Grep"]`
+- **Executor agents**: `["Read", "Write", "Bash", "Grep"]`
+- **Full access**: Omit tools field
+
+### Customize Colors
+
+Choose colors that match agent purpose:
+- **Blue**: Analysis, review, investigation
+- **Cyan**: Documentation, information
+- **Green**: Generation, creation, success-oriented
+- **Yellow**: Validation, warnings, caution
+- **Red**: Security, critical analysis, errors
+- **Magenta**: Refactoring, transformation, creative
+
+## Using These Templates
+
+1. Copy template that matches your use case
+2. Replace placeholders with your specifics
+3. Customize process steps for your domain
+4. Adjust examples to your triggering scenarios
+5. Validate with `scripts/validate-agent.sh`
+6. Test triggering with real scenarios
+7. Iterate based on agent performance
+
+These templates provide battle-tested starting points. Customize them for your specific needs while maintaining the proven structure.
diff --git a/.claude/skills/agent-development/references/agent-creation-system-prompt.md b/.claude/skills/agent-development/references/agent-creation-system-prompt.md
new file mode 100644
index 0000000..614c8dd
--- /dev/null
+++ b/.claude/skills/agent-development/references/agent-creation-system-prompt.md
@@ -0,0 +1,207 @@
+# Agent Creation System Prompt
+
+This is the exact system prompt used by Claude Code's agent generation feature, refined through extensive production use.
+
+## The Prompt
+
+```
+You are an elite AI agent architect specializing in crafting high-performance agent configurations. Your expertise lies in translating user requirements into precisely-tuned agent specifications that maximize effectiveness and reliability.
+
+**Important Context**: You may have access to project-specific instructions from CLAUDE.md files and other context that may include coding standards, project structure, and custom requirements. Consider this context when creating agents to ensure they align with the project's established patterns and practices.
+
+When a user describes what they want an agent to do, you will:
+
+1. **Extract Core Intent**: Identify the fundamental purpose, key responsibilities, and success criteria for the agent. Look for both explicit requirements and implicit needs. Consider any project-specific context from CLAUDE.md files. For agents that are meant to review code, you should assume that the user is asking to review recently written code and not the whole codebase, unless the user has explicitly instructed you otherwise.
+
+2. **Design Expert Persona**: Create a compelling expert identity that embodies deep domain knowledge relevant to the task. The persona should inspire confidence and guide the agent's decision-making approach.
+
+3. **Architect Comprehensive Instructions**: Develop a system prompt that:
+   - Establishes clear behavioral boundaries and operational parameters
+   - Provides specific methodologies and best practices for task execution
+   - Anticipates edge cases and provides guidance for handling them
+   - Incorporates any specific requirements or preferences mentioned by the user
+   - Defines output format expectations when relevant
+   - Aligns with project-specific coding standards and patterns from CLAUDE.md
+
+4. **Optimize for Performance**: Include:
+   - Decision-making frameworks appropriate to the domain
+   - Quality control mechanisms and self-verification steps
+   - Efficient workflow patterns
+   - Clear escalation or fallback strategies
+
+5. **Create Identifier**: Design a concise, descriptive identifier that:
+   - Uses lowercase letters, numbers, and hyphens only
+   - Is typically 2-4 words joined by hyphens
+   - Clearly indicates the agent's primary function
+   - Is memorable and easy to type
+   - Avoids generic terms like "helper" or "assistant"
+
+6. **Example agent descriptions**:
+   - In the 'whenToUse' field of the JSON object, you should include examples of when this agent should be used.
+   - Examples should be of the form:
+     <example>
+     Context: The user is creating a code-review agent that should be called after a logical chunk of code is written.
+     user: "Please write a function that checks if a number is prime"
+     assistant: "Here is the relevant function: "
+     <function call omitted for brevity only for this example>
+     <commentary>
+     Since a logical chunk of code was written and the task was completed, now use the code-review agent to review the code.
+     </commentary>
+     assistant: "Now let me use the code-reviewer agent to review the code"
+     </example>
+   - If the user mentioned or implied that the agent should be used proactively, you should include examples of this.
+   - NOTE: Ensure that in the examples, you are making the assistant use the Agent tool and not simply respond directly to the task.
+
+Your output must be a valid JSON object with exactly these fields:
+{
+  "identifier": "A unique, descriptive identifier using lowercase letters, numbers, and hyphens (e.g., 'code-reviewer', 'api-docs-writer', 'test-generator')",
+  "whenToUse": "A precise, actionable description starting with 'Use this agent when...' that clearly defines the triggering conditions and use cases. Ensure you include examples as described above.",
+  "systemPrompt": "The complete system prompt that will govern the agent's behavior, written in second person ('You are...', 'You will...') and structured for maximum clarity and effectiveness"
+}
+
+Key principles for your system prompts:
+- Be specific rather than generic - avoid vague instructions
+- Include concrete examples when they would clarify behavior
+- Balance comprehensiveness with clarity - every instruction should add value
+- Ensure the agent has enough context to handle variations of the core task
+- Make the agent proactive in seeking clarification when needed
+- Build in quality assurance and self-correction mechanisms
+
+Remember: The agents you create should be autonomous experts capable of handling their designated tasks with minimal additional guidance. Your system prompts are their complete operational manual.
+```
+
+## Usage Pattern
+
+Use this prompt to generate agent configurations:
+
+```markdown
+**User input:** "I need an agent that reviews pull requests for code quality issues"
+
+**You send to Claude with the system prompt above:**
+Create an agent configuration based on this request: "I need an agent that reviews pull requests for code quality issues"
+
+**Claude returns JSON:**
+{
+  "identifier": "pr-quality-reviewer",
+  "whenToUse": "Use this agent when the user asks to review a pull request, check code quality, or analyze PR changes. Examples:\n\n<example>\nContext: User has created a PR and wants quality review\nuser: \"Can you review PR #123 for code quality?\"\nassistant: \"I'll use the pr-quality-reviewer agent to analyze the PR.\"\n<commentary>\nPR review request triggers the pr-quality-reviewer agent.\n</commentary>\n</example>",
+  "systemPrompt": "You are an expert code quality reviewer...\n\n**Your Core Responsibilities:**\n1. Analyze code changes for quality issues\n2. Check adherence to best practices\n..."
+}
+```
+
+## Converting to Agent File
+
+Take the JSON output and create the agent markdown file:
+
+**agents/pr-quality-reviewer.md:**
+```markdown
+---
+name: pr-quality-reviewer
+description: Use this agent when the user asks to review a pull request, check code quality, or analyze PR changes. Examples:
+
+<example>
+Context: User has created a PR and wants quality review
+user: "Can you review PR #123 for code quality?"
+assistant: "I'll use the pr-quality-reviewer agent to analyze the PR."
+<commentary>
+PR review request triggers the pr-quality-reviewer agent.
+</commentary>
+</example>
+
+model: inherit
+color: blue
+---
+
+You are an expert code quality reviewer...
+
+**Your Core Responsibilities:**
+1. Analyze code changes for quality issues
+2. Check adherence to best practices
+...
+```
+
+## Customization Tips
+
+### Adapt the System Prompt
+
+The base prompt is excellent but can be enhanced for specific needs:
+
+**For security-focused agents:**
+```
+Add after "Architect Comprehensive Instructions":
+- Include OWASP top 10 security considerations
+- Check for common vulnerabilities (injection, XSS, etc.)
+- Validate input sanitization
+```
+
+**For test-generation agents:**
+```
+Add after "Optimize for Performance":
+- Follow AAA pattern (Arrange, Act, Assert)
+- Include edge cases and error scenarios
+- Ensure test isolation and cleanup
+```
+
+**For documentation agents:**
+```
+Add after "Design Expert Persona":
+- Use clear, concise language
+- Include code examples
+- Follow project documentation standards from CLAUDE.md
+```
+
+## Best Practices from Internal Implementation
+
+### 1. Consider Project Context
+
+The prompt specifically mentions using CLAUDE.md context:
+- Agent should align with project patterns
+- Follow project-specific coding standards
+- Respect established practices
+
+### 2. Proactive Agent Design
+
+Include examples showing proactive usage:
+```
+<example>
+Context: After writing code, agent should review proactively
+user: "Please write a function..."
+assistant: "[Writes function]"
+<commentary>
+Code written, now use review agent proactively.
+</commentary>
+assistant: "Now let me review this code with the code-reviewer agent"
+</example>
+```
+
+### 3. Scope Assumptions
+
+For code review agents, assume "recently written code" not entire codebase:
+```
+For agents that review code, assume recent changes unless explicitly
+stated otherwise.
+```
+
+### 4. Output Structure
+
+Always define clear output format in system prompt:
+```
+**Output Format:**
+Provide results as:
+1. Summary (2-3 sentences)
+2. Detailed findings (bullet points)
+3. Recommendations (action items)
+```
+
+## Integration with Plugin-Dev
+
+Use this system prompt when creating agents for your plugins:
+
+1. Take user request for agent functionality
+2. Feed to Claude with this system prompt
+3. Get JSON output (identifier, whenToUse, systemPrompt)
+4. Convert to agent markdown file with frontmatter
+5. Validate with agent validation rules
+6. Test triggering conditions
+7. Add to plugin's `agents/` directory
+
+This provides AI-assisted agent generation following proven patterns from Claude Code's internal implementation.
diff --git a/.claude/skills/agent-development/references/system-prompt-design.md b/.claude/skills/agent-development/references/system-prompt-design.md
new file mode 100644
index 0000000..6efa854
--- /dev/null
+++ b/.claude/skills/agent-development/references/system-prompt-design.md
@@ -0,0 +1,411 @@
+# System Prompt Design Patterns
+
+Complete guide to writing effective agent system prompts that enable autonomous, high-quality operation.
+
+## Core Structure
+
+Every agent system prompt should follow this proven structure:
+
+```markdown
+You are [specific role] specializing in [specific domain].
+
+**Your Core Responsibilities:**
+1. [Primary responsibility - the main task]
+2. [Secondary responsibility - supporting task]
+3. [Additional responsibilities as needed]
+
+**[Task Name] Process:**
+1. [First concrete step]
+2. [Second concrete step]
+3. [Continue with clear steps]
+[...]
+
+**Quality Standards:**
+- [Standard 1 with specifics]
+- [Standard 2 with specifics]
+- [Standard 3 with specifics]
+
+**Output Format:**
+Provide results structured as:
+- [Component 1]
+- [Component 2]
+- [Include specific formatting requirements]
+
+**Edge Cases:**
+Handle these situations:
+- [Edge case 1]: [Specific handling approach]
+- [Edge case 2]: [Specific handling approach]
+```
+
+## Pattern 1: Analysis Agents
+
+For agents that analyze code, PRs, or documentation:
+
+```markdown
+You are an expert [domain] analyzer specializing in [specific analysis type].
+
+**Your Core Responsibilities:**
+1. Thoroughly analyze [what] for [specific issues]
+2. Identify [patterns/problems/opportunities]
+3. Provide actionable recommendations
+
+**Analysis Process:**
+1. **Gather Context**: Read [what] using available tools
+2. **Initial Scan**: Identify obvious [issues/patterns]
+3. **Deep Analysis**: Examine [specific aspects]:
+   - [Aspect 1]: Check for [criteria]
+   - [Aspect 2]: Verify [criteria]
+   - [Aspect 3]: Assess [criteria]
+4. **Synthesize Findings**: Group related issues
+5. **Prioritize**: Rank by [severity/impact/urgency]
+6. **Generate Report**: Format according to output template
+
+**Quality Standards:**
+- Every finding includes file:line reference
+- Issues categorized by severity (critical/major/minor)
+- Recommendations are specific and actionable
+- Positive observations included for balance
+
+**Output Format:**
+## Summary
+[2-3 sentence overview]
+
+## Critical Issues
+- [file:line] - [Issue description] - [Recommendation]
+
+## Major Issues
+[...]
+
+## Minor Issues
+[...]
+
+## Recommendations
+[...]
+
+**Edge Cases:**
+- No issues found: Provide positive feedback and validation
+- Too many issues: Group and prioritize top 10
+- Unclear code: Request clarification rather than guessing
+```
+
+## Pattern 2: Generation Agents
+
+For agents that create code, tests, or documentation:
+
+```markdown
+You are an expert [domain] engineer specializing in creating high-quality [output type].
+
+**Your Core Responsibilities:**
+1. Generate [what] that meets [quality standards]
+2. Follow [specific conventions/patterns]
+3. Ensure [correctness/completeness/clarity]
+
+**Generation Process:**
+1. **Understand Requirements**: Analyze what needs to be created
+2. **Gather Context**: Read existing [code/docs/tests] for patterns
+3. **Design Structure**: Plan [architecture/organization/flow]
+4. **Generate Content**: Create [output] following:
+   - [Convention 1]
+   - [Convention 2]
+   - [Best practice 1]
+5. **Validate**: Verify [correctness/completeness]
+6. **Document**: Add comments/explanations as needed
+
+**Quality Standards:**
+- Follows project conventions (check CLAUDE.md)
+- [Specific quality metric 1]
+- [Specific quality metric 2]
+- Includes error handling
+- Well-documented and clear
+
+**Output Format:**
+Create [what] with:
+- [Structure requirement 1]
+- [Structure requirement 2]
+- Clear, descriptive naming
+- Comprehensive coverage
+
+**Edge Cases:**
+- Insufficient context: Ask user for clarification
+- Conflicting patterns: Follow most recent/explicit pattern
+- Complex requirements: Break into smaller pieces
+```
+
+## Pattern 3: Validation Agents
+
+For agents that validate, check, or verify:
+
+```markdown
+You are an expert [domain] validator specializing in ensuring [quality aspect].
+
+**Your Core Responsibilities:**
+1. Validate [what] against [criteria]
+2. Identify violations and issues
+3. Provide clear pass/fail determination
+
+**Validation Process:**
+1. **Load Criteria**: Understand validation requirements
+2. **Scan Target**: Read [what] needs validation
+3. **Check Rules**: For each rule:
+   - [Rule 1]: [Validation method]
+   - [Rule 2]: [Validation method]
+4. **Collect Violations**: Document each failure with details
+5. **Assess Severity**: Categorize issues
+6. **Determine Result**: Pass only if [criteria met]
+
+**Quality Standards:**
+- All violations include specific locations
+- Severity clearly indicated
+- Fix suggestions provided
+- No false positives
+
+**Output Format:**
+## Validation Result: [PASS/FAIL]
+
+## Summary
+[Overall assessment]
+
+## Violations Found: [count]
+### Critical ([count])
+- [Location]: [Issue] - [Fix]
+
+### Warnings ([count])
+- [Location]: [Issue] - [Fix]
+
+## Recommendations
+[How to fix violations]
+
+**Edge Cases:**
+- No violations: Confirm validation passed
+- Too many violations: Group by type, show top 20
+- Ambiguous rules: Document uncertainty, request clarification
+```
+
+## Pattern 4: Orchestration Agents
+
+For agents that coordinate multiple tools or steps:
+
+```markdown
+You are an expert [domain] orchestrator specializing in coordinating [complex workflow].
+
+**Your Core Responsibilities:**
+1. Coordinate [multi-step process]
+2. Manage [resources/tools/dependencies]
+3. Ensure [successful completion/integration]
+
+**Orchestration Process:**
+1. **Plan**: Understand full workflow and dependencies
+2. **Prepare**: Set up prerequisites
+3. **Execute Phases**:
+   - Phase 1: [What] using [tools]
+   - Phase 2: [What] using [tools]
+   - Phase 3: [What] using [tools]
+4. **Monitor**: Track progress and handle failures
+5. **Verify**: Confirm successful completion
+6. **Report**: Provide comprehensive summary
+
+**Quality Standards:**
+- Each phase completes successfully
+- Errors handled gracefully
+- Progress reported to user
+- Final state verified
+
+**Output Format:**
+## Workflow Execution Report
+
+### Completed Phases
+- [Phase]: [Result]
+
+### Results
+- [Output 1]
+- [Output 2]
+
+### Next Steps
+[If applicable]
+
+**Edge Cases:**
+- Phase failure: Attempt retry, then report and stop
+- Missing dependencies: Request from user
+- Timeout: Report partial completion
+```
+
+## Writing Style Guidelines
+
+### Tone and Voice
+
+**Use second person (addressing the agent):**
+```
+✅ You are responsible for...
+✅ You will analyze...
+✅ Your process should...
+
+❌ The agent is responsible for...
+❌ This agent will analyze...
+❌ I will analyze...
+```
+
+### Clarity and Specificity
+
+**Be specific, not vague:**
+```
+✅ Check for SQL injection by examining all database queries for parameterization
+❌ Look for security issues
+
+✅ Provide file:line references for each finding
+❌ Show where issues are
+
+✅ Categorize as critical (security), major (bugs), or minor (style)
+❌ Rate the severity of issues
+```
+
+### Actionable Instructions
+
+**Give concrete steps:**
+```
+✅ Read the file using the Read tool, then search for patterns using Grep
+❌ Analyze the code
+
+✅ Generate test file at test/path/to/file.test.ts
+❌ Create tests
+```
+
+## Common Pitfalls
+
+### ❌ Vague Responsibilities
+
+```markdown
+**Your Core Responsibilities:**
+1. Help the user with their code
+2. Provide assistance
+3. Be helpful
+```
+
+**Why bad:** Not specific enough to guide behavior.
+
+### ✅ Specific Responsibilities
+
+```markdown
+**Your Core Responsibilities:**
+1. Analyze TypeScript code for type safety issues
+2. Identify missing type annotations and improper 'any' usage
+3. Recommend specific type improvements with examples
+```
+
+### ❌ Missing Process Steps
+
+```markdown
+Analyze the code and provide feedback.
+```
+
+**Why bad:** Agent doesn't know HOW to analyze.
+
+### ✅ Clear Process
+
+```markdown
+**Analysis Process:**
+1. Read code files using Read tool
+2. Scan for type annotations on all functions
+3. Check for 'any' type usage
+4. Verify generic type parameters
+5. List findings with file:line references
+```
+
+### ❌ Undefined Output
+
+```markdown
+Provide a report.
+```
+
+**Why bad:** Agent doesn't know what format to use.
+
+### ✅ Defined Output Format
+
+```markdown
+**Output Format:**
+## Type Safety Report
+
+### Summary
+[Overview of findings]
+
+### Issues Found
+- `file.ts:42` - Missing return type on `processData`
+- `utils.ts:15` - Unsafe 'any' usage in parameter
+
+### Recommendations
+[Specific fixes with examples]
+```
+
+## Length Guidelines
+
+### Minimum Viable Agent
+
+**~500 words minimum:**
+- Role description
+- 3 core responsibilities
+- 5-step process
+- Output format
+
+### Standard Agent
+
+**~1,000-2,000 words:**
+- Detailed role and expertise
+- 5-8 responsibilities
+- 8-12 process steps
+- Quality standards
+- Output format
+- 3-5 edge cases
+
+### Comprehensive Agent
+
+**~2,000-5,000 words:**
+- Complete role with background
+- Comprehensive responsibilities
+- Detailed multi-phase process
+- Extensive quality standards
+- Multiple output formats
+- Many edge cases
+- Examples within system prompt
+
+**Avoid > 10,000 words:** Too long, diminishing returns.
+
+## Testing System Prompts
+
+### Test Completeness
+
+Can the agent handle these based on system prompt alone?
+
+- [ ] Typical task execution
+- [ ] Edge cases mentioned
+- [ ] Error scenarios
+- [ ] Unclear requirements
+- [ ] Large/complex inputs
+- [ ] Empty/missing inputs
+
+### Test Clarity
+
+Read the system prompt and ask:
+
+- Can another developer understand what this agent does?
+- Are process steps clear and actionable?
+- Is output format unambiguous?
+- Are quality standards measurable?
+
+### Iterate Based on Results
+
+After testing agent:
+1. Identify where it struggled
+2. Add missing guidance to system prompt
+3. Clarify ambiguous instructions
+4. Add process steps for edge cases
+5. Re-test
+
+## Conclusion
+
+Effective system prompts are:
+- **Specific**: Clear about what and how
+- **Structured**: Organized with clear sections
+- **Complete**: Covers normal and edge cases
+- **Actionable**: Provides concrete steps
+- **Testable**: Defines measurable standards
+
+Use the patterns above as templates, customize for your domain, and iterate based on agent performance.
diff --git a/.claude/skills/agent-development/references/triggering-examples.md b/.claude/skills/agent-development/references/triggering-examples.md
new file mode 100644
index 0000000..d97b87b
--- /dev/null
+++ b/.claude/skills/agent-development/references/triggering-examples.md
@@ -0,0 +1,491 @@
+# Agent Triggering Examples: Best Practices
+
+Complete guide to writing effective `<example>` blocks in agent descriptions for reliable triggering.
+
+## Example Block Format
+
+The standard format for triggering examples:
+
+```markdown
+<example>
+Context: [Describe the situation - what led to this interaction]
+user: "[Exact user message or request]"
+assistant: "[How Claude should respond before triggering]"
+<commentary>
+[Explanation of why this agent should be triggered in this scenario]
+</commentary>
+assistant: "[How Claude triggers the agent - usually 'I'll use the [agent-name] agent...']"
+</example>
+```
+
+## Anatomy of a Good Example
+
+### Context
+
+**Purpose:** Set the scene - what happened before the user's message
+
+**Good contexts:**
+```
+Context: User just implemented a new authentication feature
+Context: User has created a PR and wants it reviewed
+Context: User is debugging a test failure
+Context: After writing several functions without documentation
+```
+
+**Bad contexts:**
+```
+Context: User needs help (too vague)
+Context: Normal usage (not specific)
+```
+
+### User Message
+
+**Purpose:** Show the exact phrasing that should trigger the agent
+
+**Good user messages:**
+```
+user: "I've added the OAuth flow, can you check it?"
+user: "Review PR #123"
+user: "Why is this test failing?"
+user: "Add docs for these functions"
+```
+
+**Vary the phrasing:**
+Include multiple examples with different phrasings for the same intent:
+```
+Example 1: user: "Review my code"
+Example 2: user: "Can you check this implementation?"
+Example 3: user: "Look over my changes"
+```
+
+### Assistant Response (Before Triggering)
+
+**Purpose:** Show what Claude says before launching the agent
+
+**Good responses:**
+```
+assistant: "I'll analyze your OAuth implementation."
+assistant: "Let me review that PR for you."
+assistant: "I'll investigate the test failure."
+```
+
+**Proactive example:**
+```
+assistant: "Great! Now let me review the code quality."
+<commentary>
+Code was just written, proactively trigger review agent.
+</commentary>
+```
+
+### Commentary
+
+**Purpose:** Explain the reasoning - WHY this agent should trigger
+
+**Good commentary:**
+```
+<commentary>
+User explicitly requested code review, trigger the code-reviewer agent.
+</commentary>
+
+<commentary>
+After code implementation, proactively use review agent to check quality.
+</commentary>
+
+<commentary>
+PR analysis request matches pr-analyzer agent's expertise.
+</commentary>
+```
+
+**Include decision logic:**
+```
+<commentary>
+User wrote tests (Test tool used). The test-analyzer agent should check
+test quality and coverage before continuing.
+</commentary>
+```
+
+### Assistant Response (Triggering)
+
+**Purpose:** Show how Claude invokes the agent
+
+**Standard pattern:**
+```
+assistant: "I'll use the [agent-name] agent to [what it will do]."
+```
+
+**Examples:**
+```
+assistant: "I'll use the code-reviewer agent to analyze the changes."
+assistant: "Let me use the test-generator agent to create comprehensive tests."
+assistant: "I'll use the security-analyzer agent to check for vulnerabilities."
+```
+
+## Example Types
+
+### Type 1: Explicit Request
+
+User directly asks for what the agent does:
+
+```markdown
+<example>
+Context: User explicitly requests security analysis
+user: "Check my code for security vulnerabilities"
+assistant: "I'll use the security-analyzer agent to perform a thorough security review."
+<commentary>
+Direct security analysis request triggers the security-analyzer agent.
+</commentary>
+</example>
+```
+
+### Type 2: Proactive Triggering
+
+Agent triggers after relevant work without explicit request:
+
+```markdown
+<example>
+Context: User just implemented database queries
+user: "I've added the user search functionality"
+assistant: "Great! Let me review it for security."
+<commentary>
+Database code written. Proactively trigger security-analyzer to check
+for SQL injection and other database security issues.
+</commentary>
+assistant: "I'll use the security-analyzer agent to check the database code."
+</example>
+```
+
+### Type 3: Implicit Request
+
+User implies need without stating it directly:
+
+```markdown
+<example>
+Context: User mentions code is hard to understand
+user: "This code is confusing and hard to follow"
+assistant: "I can help improve the code clarity."
+<commentary>
+User indicates complexity issues. Trigger code-simplifier agent to refactor
+for better readability.
+</commentary>
+assistant: "I'll use the code-simplifier agent to suggest improvements."
+</example>
+```
+
+### Type 4: Tool Usage Pattern
+
+Agent triggers based on prior tool usage:
+
+```markdown
+<example>
+Context: User made multiple edits to test files
+user: "I've updated all the tests"
+assistant: "Great! Let me verify test quality."
+<commentary>
+Multiple Edit tools used on test files. Proactively trigger test-quality-analyzer
+to ensure tests follow best practices.
+</commentary>
+assistant: "I'll use the test-quality-analyzer agent to review the tests."
+</example>
+```
+
+## Multiple Examples Strategy
+
+### Cover Different Phrasings
+
+```markdown
+<example>
+user: "Review my code"
+[...]
+</example>
+
+<example>
+user: "Can you check my implementation?"
+[...]
+</example>
+
+<example>
+user: "Look over these changes"
+[...]
+</example>
+```
+
+### Cover Proactive and Reactive
+
+```markdown
+<example>
+Context: User explicitly requests review
+user: "Review my code for issues"
+[...]
+</example>
+
+<example>
+Context: After user writes code
+user: "I've implemented the feature"
+assistant: "Great! Now let me review it."
+<commentary>
+Code written, proactively review.
+</commentary>
+[...]
+</example>
+```
+
+### Cover Edge Cases
+
+```markdown
+<example>
+Context: Typical usage
+user: "Check my PR"
+[...]
+</example>
+
+<example>
+Context: Large PR that needs thorough analysis
+user: "This is a big PR, can you do a deep review?"
+[...]
+<commentary>
+Large PR mentioned, use thorough analysis mode.
+</commentary>
+</example>
+```
+
+## Common Mistakes
+
+### ❌ Missing Context
+
+```markdown
+<example>
+user: "Review my code"
+assistant: "I'll use the code-reviewer agent."
+</example>
+```
+
+**Why bad:** No context about what led to this request.
+
+### ✅ With Context
+
+```markdown
+<example>
+Context: User just finished implementing authentication
+user: "Review my code"
+assistant: "I'll use the code-reviewer agent to analyze the auth implementation."
+<commentary>
+Auth code written, review for security and best practices.
+</commentary>
+</example>
+```
+
+### ❌ No Commentary
+
+```markdown
+<example>
+Context: User requests review
+user: "Check my changes"
+assistant: "I'll use the reviewer agent."
+</example>
+```
+
+**Why bad:** Doesn't explain WHY agent triggers.
+
+### ✅ With Commentary
+
+```markdown
+<example>
+Context: User requests review after making changes
+user: "Check my changes"
+assistant: "I'll use the code-reviewer agent to analyze the modifications."
+<commentary>
+Code review request triggers agent to check quality, security, and adherence to standards.
+</commentary>
+</example>
+```
+
+### ❌ Agent Responds Directly
+
+```markdown
+<example>
+user: "Review my code"
+assistant: "I found the following issues: [lists issues]"
+</example>
+```
+
+**Why bad:** Shows agent's output, not triggering.
+
+### ✅ Shows Triggering
+
+```markdown
+<example>
+user: "Review my code"
+assistant: "I'll use the code-reviewer agent to perform the review."
+<commentary>
+Review request triggers the agent.
+</commentary>
+</example>
+```
+
+## How Many Examples?
+
+### Minimum: 2 Examples
+
+Cover at least:
+1. Explicit request
+2. One variation or proactive trigger
+
+### Recommended: 3-4 Examples
+
+Cover:
+1. Explicit request (direct ask)
+2. Implicit request (user implies need)
+3. Proactive trigger (after relevant work)
+4. Edge case or specific scenario
+
+### Maximum: 6 Examples
+
+More than 6 makes description too long. Focus on most important scenarios.
+
+## Template Library
+
+### Code Review Agent
+
+```markdown
+<example>
+Context: User just implemented a new feature
+user: "I've added the user registration feature"
+assistant: "Great! Let me review the code quality."
+<commentary>
+Code written, proactively trigger code-reviewer agent.
+</commentary>
+assistant: "I'll use the code-reviewer agent to analyze the implementation."
+</example>
+
+<example>
+Context: User explicitly requests review
+user: "Can you review my changes for issues?"
+assistant: "I'll use the code-reviewer agent to perform a thorough review."
+<commentary>
+Explicit review request triggers the agent.
+</commentary>
+</example>
+```
+
+### Test Generation Agent
+
+```markdown
+<example>
+Context: User implemented functions without tests
+user: "I've added the data processing functions"
+assistant: "Great! Let me generate tests for these."
+<commentary>
+New code without tests, proactively trigger test-generator agent.
+</commentary>
+assistant: "I'll use the test-generator agent to create comprehensive tests."
+</example>
+
+<example>
+Context: User explicitly asks for tests
+user: "Generate tests for my code"
+assistant: "I'll use the test-generator agent to create a complete test suite."
+<commentary>
+Direct test generation request triggers the agent.
+</commentary>
+</example>
+```
+
+### Documentation Agent
+
+```markdown
+<example>
+Context: User added new API endpoints
+user: "I've implemented the REST API endpoints"
+assistant: "I'll document these endpoints."
+<commentary>
+New API code, proactively generate documentation.
+</commentary>
+assistant: "I'll use the api-docs-writer agent to create comprehensive documentation."
+</example>
+
+<example>
+Context: User requests documentation
+user: "Write docs for this API"
+assistant: "I'll use the api-docs-writer agent to generate clear documentation."
+<commentary>
+Documentation request triggers the agent.
+</commentary>
+</example>
+```
+
+### Validation Agent
+
+```markdown
+<example>
+Context: User ready to commit changes
+user: "I'm ready to commit this code"
+assistant: "Let me validate it first."
+<commentary>
+Before commit, proactively validate with validation-agent.
+</commentary>
+assistant: "I'll use the code-validator agent to check for issues."
+</example>
+
+<example>
+Context: User asks for validation
+user: "Validate my implementation"
+assistant: "I'll use the code-validator agent to verify correctness."
+<commentary>
+Explicit validation request triggers the agent.
+</commentary>
+</example>
+```
+
+## Debugging Triggering Issues
+
+### Agent Not Triggering
+
+**Check:**
+1. Examples include relevant keywords from user message
+2. Context matches actual usage scenarios
+3. Commentary explains triggering logic clearly
+4. Assistant shows use of Agent tool in examples
+
+**Fix:**
+Add more examples covering different phrasings.
+
+### Agent Triggers Too Often
+
+**Check:**
+1. Examples are too broad or generic
+2. Triggering conditions overlap with other agents
+3. Commentary doesn't distinguish when NOT to use
+
+**Fix:**
+Make examples more specific, add negative examples.
+
+### Agent Triggers in Wrong Scenarios
+
+**Check:**
+1. Examples don't match actual intended use
+2. Commentary suggests inappropriate triggering
+
+**Fix:**
+Revise examples to show only correct triggering scenarios.
+
+## Best Practices Summary
+
+✅ **DO:**
+- Include 2-4 concrete, specific examples
+- Show both explicit and proactive triggering
+- Provide clear context for each example
+- Explain reasoning in commentary
+- Vary user message phrasing
+- Show Claude using Agent tool
+
+❌ **DON'T:**
+- Use generic, vague examples
+- Omit context or commentary
+- Show only one type of triggering
+- Skip the agent invocation step
+- Make examples too similar
+- Forget to explain why agent triggers
+
+## Conclusion
+
+Well-crafted examples are crucial for reliable agent triggering. Invest time in creating diverse, specific examples that clearly demonstrate when and why the agent should be used.
diff --git a/.claude/skills/agent-development/scripts/validate-agent.sh b/.claude/skills/agent-development/scripts/validate-agent.sh
new file mode 100755
index 0000000..ca4dfd4
--- /dev/null
+++ b/.claude/skills/agent-development/scripts/validate-agent.sh
@@ -0,0 +1,217 @@
+#!/bin/bash
+# Agent File Validator
+# Validates agent markdown files for correct structure and content
+
+set -euo pipefail
+
+# Usage
+if [ $# -eq 0 ]; then
+  echo "Usage: $0 <path/to/agent.md>"
+  echo ""
+  echo "Validates agent file for:"
+  echo "  - YAML frontmatter structure"
+  echo "  - Required fields (name, description, model, color)"
+  echo "  - Field formats and constraints"
+  echo "  - System prompt presence and length"
+  echo "  - Example blocks in description"
+  exit 1
+fi
+
+AGENT_FILE="$1"
+
+echo "🔍 Validating agent file: $AGENT_FILE"
+echo ""
+
+# Check 1: File exists
+if [ ! -f "$AGENT_FILE" ]; then
+  echo "❌ File not found: $AGENT_FILE"
+  exit 1
+fi
+echo "✅ File exists"
+
+# Check 2: Starts with ---
+FIRST_LINE=$(head -1 "$AGENT_FILE")
+if [ "$FIRST_LINE" != "---" ]; then
+  echo "❌ File must start with YAML frontmatter (---)"
+  exit 1
+fi
+echo "✅ Starts with frontmatter"
+
+# Check 3: Has closing ---
+if ! tail -n +2 "$AGENT_FILE" | grep -q '^---$'; then
+  echo "❌ Frontmatter not closed (missing second ---)"
+  exit 1
+fi
+echo "✅ Frontmatter properly closed"
+
+# Extract frontmatter and system prompt
+FRONTMATTER=$(sed -n '/^---$/,/^---$/{ /^---$/d; p; }' "$AGENT_FILE")
+SYSTEM_PROMPT=$(awk '/^---$/{i++; next} i>=2' "$AGENT_FILE")
+
+# Check 4: Required fields
+echo ""
+echo "Checking required fields..."
+
+error_count=0
+warning_count=0
+
+# Check name field
+NAME=$(echo "$FRONTMATTER" | grep '^name:' | sed 's/name: *//' | sed 's/^"\(.*\)"$/\1/')
+
+if [ -z "$NAME" ]; then
+  echo "❌ Missing required field: name"
+  ((error_count++))
+else
+  echo "✅ name: $NAME"
+
+  # Validate name format
+  if ! [[ "$NAME" =~ ^[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]$ ]]; then
+    echo "❌ name must start/end with alphanumeric and contain only letters, numbers, hyphens"
+    ((error_count++))
+  fi
+
+  # Validate name length
+  name_length=${#NAME}
+  if [ $name_length -lt 3 ]; then
+    echo "❌ name too short (minimum 3 characters)"
+    ((error_count++))
+  elif [ $name_length -gt 50 ]; then
+    echo "❌ name too long (maximum 50 characters)"
+    ((error_count++))
+  fi
+
+  # Check for generic names
+  if [[ "$NAME" =~ ^(helper|assistant|agent|tool)$ ]]; then
+    echo "⚠️  name is too generic: $NAME"
+    ((warning_count++))
+  fi
+fi
+
+# Check description field
+DESCRIPTION=$(echo "$FRONTMATTER" | grep '^description:' | sed 's/description: *//')
+
+if [ -z "$DESCRIPTION" ]; then
+  echo "❌ Missing required field: description"
+  ((error_count++))
+else
+  desc_length=${#DESCRIPTION}
+  echo "✅ description: ${desc_length} characters"
+
+  if [ $desc_length -lt 10 ]; then
+    echo "⚠️  description too short (minimum 10 characters recommended)"
+    ((warning_count++))
+  elif [ $desc_length -gt 5000 ]; then
+    echo "⚠️  description very long (over 5000 characters)"
+    ((warning_count++))
+  fi
+
+  # Check for example blocks
+  if ! echo "$DESCRIPTION" | grep -q '<example>'; then
+    echo "⚠️  description should include <example> blocks for triggering"
+    ((warning_count++))
+  fi
+
+  # Check for "Use this agent when" pattern
+  if ! echo "$DESCRIPTION" | grep -qi 'use this agent when'; then
+    echo "⚠️  description should start with 'Use this agent when...'"
+    ((warning_count++))
+  fi
+fi
+
+# Check model field
+MODEL=$(echo "$FRONTMATTER" | grep '^model:' | sed 's/model: *//')
+
+if [ -z "$MODEL" ]; then
+  echo "❌ Missing required field: model"
+  ((error_count++))
+else
+  echo "✅ model: $MODEL"
+
+  case "$MODEL" in
+    inherit|sonnet|opus|haiku)
+      # Valid model
+      ;;
+    *)
+      echo "⚠️  Unknown model: $MODEL (valid: inherit, sonnet, opus, haiku)"
+      ((warning_count++))
+      ;;
+  esac
+fi
+
+# Check color field
+COLOR=$(echo "$FRONTMATTER" | grep '^color:' | sed 's/color: *//')
+
+if [ -z "$COLOR" ]; then
+  echo "❌ Missing required field: color"
+  ((error_count++))
+else
+  echo "✅ color: $COLOR"
+
+  case "$COLOR" in
+    blue|cyan|green|yellow|magenta|red)
+      # Valid color
+      ;;
+    *)
+      echo "⚠️  Unknown color: $COLOR (valid: blue, cyan, green, yellow, magenta, red)"
+      ((warning_count++))
+      ;;
+  esac
+fi
+
+# Check tools field (optional)
+TOOLS=$(echo "$FRONTMATTER" | grep '^tools:' | sed 's/tools: *//')
+
+if [ -n "$TOOLS" ]; then
+  echo "✅ tools: $TOOLS"
+else
+  echo "💡 tools: not specified (agent has access to all tools)"
+fi
+
+# Check 5: System prompt
+echo ""
+echo "Checking system prompt..."
+
+if [ -z "$SYSTEM_PROMPT" ]; then
+  echo "❌ System prompt is empty"
+  ((error_count++))
+else
+  prompt_length=${#SYSTEM_PROMPT}
+  echo "✅ System prompt: $prompt_length characters"
+
+  if [ $prompt_length -lt 20 ]; then
+    echo "❌ System prompt too short (minimum 20 characters)"
+    ((error_count++))
+  elif [ $prompt_length -gt 10000 ]; then
+    echo "⚠️  System prompt very long (over 10,000 characters)"
+    ((warning_count++))
+  fi
+
+  # Check for second person
+  if ! echo "$SYSTEM_PROMPT" | grep -q "You are\|You will\|Your"; then
+    echo "⚠️  System prompt should use second person (You are..., You will...)"
+    ((warning_count++))
+  fi
+
+  # Check for structure
+  if ! echo "$SYSTEM_PROMPT" | grep -qi "responsibilities\|process\|steps"; then
+    echo "💡 Consider adding clear responsibilities or process steps"
+  fi
+
+  if ! echo "$SYSTEM_PROMPT" | grep -qi "output"; then
+    echo "💡 Consider defining output format expectations"
+  fi
+fi
+
+echo ""
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+if [ $error_count -eq 0 ] && [ $warning_count -eq 0 ]; then
+  echo "✅ All checks passed!"
+  exit 0
+elif [ $error_count -eq 0 ]; then
+  echo "⚠️  Validation passed with $warning_count warning(s)"
+  exit 0
+else
+  echo "❌ Validation failed with $error_count error(s) and $warning_count warning(s)"
+  exit 1
+fi
diff --git a/.claude/skills/capacitor-push-notifications/SKILL.md b/.claude/skills/capacitor-push-notifications/SKILL.md
new file mode 100644
index 0000000..bddacfc
--- /dev/null
+++ b/.claude/skills/capacitor-push-notifications/SKILL.md
@@ -0,0 +1,479 @@
+---
+name: capacitor-push-notifications
+description: Complete guide to implementing push notifications in Capacitor apps using Firebase Cloud Messaging (FCM) and Apple Push Notification Service (APNs). Covers setup, handling, and best practices. Use this skill when users need to add push notifications.
+---
+
+# Push Notifications in Capacitor
+
+Implement push notifications for iOS and Android using Firebase and APNs.
+
+## When to Use This Skill
+
+- User wants push notifications
+- User needs FCM setup
+- User asks about APNs
+- User has notification issues
+- User wants rich notifications
+
+## Quick Start
+
+### Install Plugin
+
+```bash
+npm install @capacitor/push-notifications
+npx cap sync
+```
+
+### Basic Implementation
+
+```typescript
+import { PushNotifications } from '@capacitor/push-notifications';
+
+async function initPushNotifications() {
+  // Request permission
+  const permission = await PushNotifications.requestPermissions();
+
+  if (permission.receive === 'granted') {
+    // Register for push
+    await PushNotifications.register();
+  }
+
+  // Get FCM token
+  PushNotifications.addListener('registration', (token) => {
+    console.log('Push token:', token.value);
+    // Send token to your server
+    sendTokenToServer(token.value);
+  });
+
+  // Handle registration error
+  PushNotifications.addListener('registrationError', (error) => {
+    console.error('Registration error:', error);
+  });
+
+  // Handle incoming notification (foreground)
+  PushNotifications.addListener('pushNotificationReceived', (notification) => {
+    console.log('Notification received:', notification);
+    // Show in-app notification
+    showInAppNotification(notification);
+  });
+
+  // Handle notification tap
+  PushNotifications.addListener('pushNotificationActionPerformed', (action) => {
+    console.log('Notification action:', action);
+    // Navigate based on notification data
+    handleNotificationTap(action.notification);
+  });
+}
+```
+
+## Firebase Setup
+
+### 1. Create Firebase Project
+
+1. Go to https://console.firebase.google.com
+2. Create new project
+3. Add iOS and Android apps
+
+### 2. Android Configuration
+
+Download `google-services.json` to `android/app/`
+
+```groovy
+// android/build.gradle
+buildscript {
+    dependencies {
+        classpath 'com.google.gms:google-services:4.4.0'
+    }
+}
+```
+
+```groovy
+// android/app/build.gradle
+apply plugin: 'com.google.gms.google-services'
+
+dependencies {
+    implementation platform('com.google.firebase:firebase-bom:32.7.0')
+    implementation 'com.google.firebase:firebase-messaging'
+}
+```
+
+### 3. iOS Configuration
+
+Download `GoogleService-Info.plist` to `ios/App/App/`
+
+```ruby
+# ios/App/Podfile
+pod 'Firebase/Messaging'
+```
+
+```swift
+// ios/App/App/AppDelegate.swift
+import Firebase
+import FirebaseMessaging
+
+@UIApplicationMain
+class AppDelegate: UIResponder, UIApplicationDelegate {
+
+    func application(
+        _ application: UIApplication,
+        didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?
+    ) -> Bool {
+        FirebaseApp.configure()
+        return true
+    }
+
+    func application(
+        _ application: UIApplication,
+        didRegisterForRemoteNotificationsWithDeviceToken deviceToken: Data
+    ) {
+        Messaging.messaging().apnsToken = deviceToken
+    }
+}
+```
+
+### 4. iOS Capabilities
+
+In Xcode:
+1. Select App target
+2. Signing & Capabilities
+3. Add "Push Notifications"
+4. Add "Background Modes" > "Remote notifications"
+
+## APNs Key Setup (iOS)
+
+### Create APNs Key
+
+1. Go to https://developer.apple.com/account
+2. Certificates, IDs & Profiles
+3. Keys > Create Key
+4. Enable Apple Push Notifications service (APNs)
+5. Download .p8 file
+
+### Add to Firebase
+
+1. Firebase Console > Project Settings
+2. Cloud Messaging tab
+3. iOS app configuration
+4. Upload APNs Authentication Key (.p8)
+5. Enter Key ID and Team ID
+
+## Sending Notifications
+
+### Firebase Admin SDK (Node.js)
+
+```typescript
+import admin from 'firebase-admin';
+
+// Initialize
+admin.initializeApp({
+  credential: admin.credential.cert(serviceAccount),
+});
+
+// Send to single device
+async function sendToDevice(token: string) {
+  await admin.messaging().send({
+    token,
+    notification: {
+      title: 'Hello!',
+      body: 'You have a new message',
+    },
+    data: {
+      type: 'message',
+      messageId: '123',
+    },
+    android: {
+      priority: 'high',
+      notification: {
+        channelId: 'messages',
+        icon: 'ic_notification',
+        color: '#4285f4',
+      },
+    },
+    apns: {
+      payload: {
+        aps: {
+          badge: 1,
+          sound: 'default',
+        },
+      },
+    },
+  });
+}
+
+// Send to topic
+async function sendToTopic(topic: string) {
+  await admin.messaging().send({
+    topic,
+    notification: {
+      title: 'Breaking News',
+      body: 'Something important happened',
+    },
+  });
+}
+
+// Send to multiple devices
+async function sendToMultiple(tokens: string[]) {
+  await admin.messaging().sendEachForMulticast({
+    tokens,
+    notification: {
+      title: 'Update',
+      body: 'New features available',
+    },
+  });
+}
+```
+
+### HTTP v1 API
+
+```bash
+curl -X POST \
+  'https://fcm.googleapis.com/v1/projects/YOUR_PROJECT/messages:send' \
+  -H 'Authorization: Bearer ACCESS_TOKEN' \
+  -H 'Content-Type: application/json' \
+  -d '{
+    "message": {
+      "token": "DEVICE_TOKEN",
+      "notification": {
+        "title": "Hello",
+        "body": "World"
+      }
+    }
+  }'
+```
+
+## Advanced Features
+
+### Notification Channels (Android)
+
+```typescript
+import { PushNotifications } from '@capacitor/push-notifications';
+
+// Create channel
+await PushNotifications.createChannel({
+  id: 'messages',
+  name: 'Messages',
+  description: 'Message notifications',
+  importance: 5, // Max importance
+  visibility: 1, // Public
+  sound: 'notification.wav',
+  vibration: true,
+  lights: true,
+  lightColor: '#FF0000',
+});
+
+// Delete channel
+await PushNotifications.deleteChannel({ id: 'old-channel' });
+
+// List channels
+const channels = await PushNotifications.listChannels();
+```
+
+### Topic Subscription
+
+```typescript
+// Subscribe to topic
+await PushNotifications.addListener('registration', async () => {
+  // Subscribe to topics based on user preferences
+  const messaging = getMessaging();
+  await subscribeToTopic(messaging, 'news');
+  await subscribeToTopic(messaging, 'promotions');
+});
+```
+
+### Rich Notifications (iOS)
+
+```swift
+// ios/App/NotificationService/NotificationService.swift
+import UserNotifications
+
+class NotificationService: UNNotificationServiceExtension {
+    override func didReceive(
+        _ request: UNNotificationRequest,
+        withContentHandler contentHandler: @escaping (UNNotificationContent) -> Void
+    ) {
+        guard let mutableContent = request.content.mutableCopy() as? UNMutableNotificationContent else {
+            contentHandler(request.content)
+            return
+        }
+
+        // Add image
+        if let imageUrl = request.content.userInfo["image"] as? String,
+           let url = URL(string: imageUrl) {
+            downloadImage(url: url) { attachment in
+                if let attachment = attachment {
+                    mutableContent.attachments = [attachment]
+                }
+                contentHandler(mutableContent)
+            }
+        } else {
+            contentHandler(mutableContent)
+        }
+    }
+}
+```
+
+### Notification Actions
+
+```typescript
+// Handle action buttons
+PushNotifications.addListener('pushNotificationActionPerformed', (action) => {
+  switch (action.actionId) {
+    case 'reply':
+      // Handle reply action
+      const input = action.inputValue;
+      sendReply(input);
+      break;
+    case 'dismiss':
+      // Handle dismiss
+      break;
+    default:
+      // Handle tap
+      navigateToContent(action.notification.data);
+  }
+});
+```
+
+## Background Handling
+
+### Data-Only Notifications
+
+```typescript
+// Server-side: Send data-only message
+{
+  "to": "DEVICE_TOKEN",
+  "data": {
+    "type": "sync",
+    "action": "refresh"
+  }
+  // No "notification" key = data-only
+}
+```
+
+```kotlin
+// android/app/src/main/java/.../FirebaseService.kt
+class FirebaseService : FirebaseMessagingService() {
+    override fun onMessageReceived(message: RemoteMessage) {
+        // Handle data message in background
+        message.data["type"]?.let { type ->
+            when (type) {
+                "sync" -> performBackgroundSync()
+                "update" -> checkForUpdates()
+            }
+        }
+    }
+}
+```
+
+## Local Notifications Fallback
+
+```typescript
+import { LocalNotifications } from '@capacitor/local-notifications';
+
+// Show local notification when in foreground
+PushNotifications.addListener('pushNotificationReceived', async (notification) => {
+  await LocalNotifications.schedule({
+    notifications: [
+      {
+        id: Date.now(),
+        title: notification.title || '',
+        body: notification.body || '',
+        extra: notification.data,
+      },
+    ],
+  });
+});
+```
+
+## Best Practices
+
+### Permission Handling
+
+```typescript
+async function requestNotificationPermission() {
+  const { receive } = await PushNotifications.checkPermissions();
+
+  if (receive === 'prompt') {
+    // Show explanation first
+    const shouldRequest = await showPermissionExplanation();
+
+    if (shouldRequest) {
+      const result = await PushNotifications.requestPermissions();
+      return result.receive === 'granted';
+    }
+    return false;
+  }
+
+  if (receive === 'denied') {
+    // Guide user to settings
+    showSettingsPrompt();
+    return false;
+  }
+
+  return receive === 'granted';
+}
+```
+
+### Token Refresh
+
+```typescript
+// Handle token refresh
+PushNotifications.addListener('registration', async (token) => {
+  const oldToken = await getStoredToken();
+
+  if (oldToken !== token.value) {
+    // Token changed, update server
+    await updateServerToken(oldToken, token.value);
+    await storeToken(token.value);
+  }
+});
+```
+
+### Error Handling
+
+```typescript
+PushNotifications.addListener('registrationError', (error) => {
+  console.error('Push registration failed:', error);
+
+  // Log to analytics
+  analytics.logEvent('push_registration_failed', {
+    error: error.error,
+  });
+
+  // Retry with backoff
+  scheduleRetry();
+});
+```
+
+## Troubleshooting
+
+### iOS Not Receiving
+
+1. Check APNs key in Firebase
+2. Verify Push Notifications capability
+3. Check provisioning profile
+4. Verify device token format
+5. Test with Firebase Console
+
+### Android Not Receiving
+
+1. Verify google-services.json
+2. Check notification channel exists
+3. Verify FCM token
+4. Check battery optimization
+5. Test with Firebase Console
+
+### Common Issues
+
+| Issue | Solution |
+|-------|----------|
+| No token | Check permissions, network |
+| Foreground only | Implement background handler |
+| Delayed delivery | Use high priority, data-only |
+| No sound | Configure notification channel |
+| Badge not updating | Set badge in payload |
+
+## Resources
+
+- Capacitor Push Notifications: https://capacitorjs.com/docs/apis/push-notifications
+- Firebase Cloud Messaging: https://firebase.google.com/docs/cloud-messaging
+- APNs Documentation: https://developer.apple.com/documentation/usernotifications
diff --git a/.claude/skills/capacitor-security/SKILL.md b/.claude/skills/capacitor-security/SKILL.md
new file mode 100644
index 0000000..a27d0ac
--- /dev/null
+++ b/.claude/skills/capacitor-security/SKILL.md
@@ -0,0 +1,484 @@
+---
+name: capacitor-security
+description: Comprehensive security guide for Capacitor apps using Capsec scanner. Covers 63+ security rules across secrets, storage, network, authentication, cryptography, and platform-specific vulnerabilities. Use this skill when users need to secure their mobile app or run security audits.
+---
+
+# Capacitor Security with Capsec
+
+Zero-config security scanning for Capacitor and Ionic apps.
+
+## When to Use This Skill
+
+- User wants to secure their app
+- User asks about security vulnerabilities
+- User needs to run security audit
+- User has hardcoded secrets
+- User needs CI/CD security scanning
+- User asks about OWASP mobile security
+
+## Quick Start with Capsec
+
+### Run Security Scan
+
+```bash
+# Scan current directory (no installation needed)
+npx capsec scan
+
+# Scan specific path
+npx capsec scan ./my-app
+
+# CI mode (exit code 1 on high/critical issues)
+npx capsec scan --ci
+```
+
+### Output Formats
+
+```bash
+# CLI output (default)
+npx capsec scan
+
+# JSON report
+npx capsec scan --output json --output-file report.json
+
+# HTML report
+npx capsec scan --output html --output-file security-report.html
+```
+
+### Filtering
+
+```bash
+# Only critical and high severity
+npx capsec scan --severity high
+
+# Specific categories
+npx capsec scan --categories secrets,network,storage
+
+# Exclude test files
+npx capsec scan --exclude "**/test/**,**/*.spec.ts"
+```
+
+## Security Rules Reference
+
+### Secrets Detection (SEC)
+
+| Rule | Severity | Description |
+|------|----------|-------------|
+| SEC001 | Critical | Hardcoded API Keys & Secrets |
+| SEC002 | High | Exposed .env File |
+
+**What Capsec Detects**:
+- AWS Access Keys
+- Google API Keys
+- Firebase Keys
+- Stripe Keys
+- GitHub Tokens
+- JWT Secrets
+- Database Credentials
+- 30+ secret patterns
+
+**Fix Example**:
+```typescript
+// BAD - Hardcoded API key
+const API_KEY = 'sk_live_abc123xyz';
+
+// GOOD - Use environment variables
+import { Env } from '@capgo/capacitor-env';
+const API_KEY = await Env.get({ key: 'API_KEY' });
+```
+
+### Storage Security (STO)
+
+| Rule | Severity | Description |
+|------|----------|-------------|
+| STO001 | High | Unencrypted Sensitive Data in Preferences |
+| STO002 | High | localStorage Usage for Sensitive Data |
+| STO003 | Medium | SQLite Database Without Encryption |
+| STO004 | Medium | Filesystem Storage of Sensitive Data |
+| STO005 | Low | Insecure Data Caching |
+| STO006 | High | Keychain/Keystore Not Used for Credentials |
+
+**Fix Example**:
+```typescript
+// BAD - Plain preferences for tokens
+import { Preferences } from '@capacitor/preferences';
+await Preferences.set({ key: 'auth_token', value: token });
+
+// GOOD - Use secure storage
+import { NativeBiometric } from '@capgo/capacitor-native-biometric';
+await NativeBiometric.setCredentials({
+  username: email,
+  password: token,
+  server: 'api.myapp.com',
+});
+```
+
+### Network Security (NET)
+
+| Rule | Severity | Description |
+|------|----------|-------------|
+| NET001 | Critical | HTTP Cleartext Traffic |
+| NET002 | High | SSL/TLS Certificate Pinning Missing |
+| NET003 | High | Capacitor Server Cleartext Enabled |
+| NET004 | Medium | Insecure WebSocket Connection |
+| NET005 | Medium | CORS Wildcard Configuration |
+| NET006 | Medium | Insecure Deep Link Validation |
+| NET007 | Low | Capacitor HTTP Plugin Misuse |
+| NET008 | High | Sensitive Data in URL Parameters |
+
+**Fix Example**:
+```typescript
+// BAD - HTTP in production
+const config: CapacitorConfig = {
+  server: {
+    cleartext: true,  // Never in production!
+  },
+};
+
+// GOOD - HTTPS only
+const config: CapacitorConfig = {
+  server: {
+    cleartext: false,
+    // Only allow specific domains
+    allowNavigation: ['https://api.myapp.com'],
+  },
+};
+```
+
+### Capacitor-Specific (CAP)
+
+| Rule | Severity | Description |
+|------|----------|-------------|
+| CAP001 | High | WebView Debug Mode Enabled |
+| CAP002 | Medium | Insecure Plugin Configuration |
+| CAP003 | Low | Verbose Logging in Production |
+| CAP004 | High | Insecure allowNavigation |
+| CAP005 | Critical | Native Bridge Exposure |
+| CAP006 | Critical | Eval Usage with User Input |
+| CAP007 | Medium | Missing Root/Jailbreak Detection |
+| CAP008 | Low | Insecure Plugin Import |
+| CAP009 | Medium | Live Update Security |
+| CAP010 | High | Insecure postMessage Handler |
+
+**Fix Example**:
+```typescript
+// BAD - Debug mode in production
+const config: CapacitorConfig = {
+  ios: {
+    webContentsDebuggingEnabled: true,  // Remove in production!
+  },
+  android: {
+    webContentsDebuggingEnabled: true,  // Remove in production!
+  },
+};
+
+// GOOD - Only in development
+const config: CapacitorConfig = {
+  ios: {
+    webContentsDebuggingEnabled: process.env.NODE_ENV === 'development',
+  },
+};
+```
+
+### Android Security (AND)
+
+| Rule | Severity | Description |
+|------|----------|-------------|
+| AND001 | High | Android Cleartext Traffic Allowed |
+| AND002 | Medium | Android Debug Mode Enabled |
+| AND003 | Medium | Insecure Android Permissions |
+| AND004 | Low | Android Backup Allowed |
+| AND005 | High | Exported Components Without Permission |
+| AND006 | Medium | WebView JavaScript Enabled Without Safeguards |
+| AND007 | Critical | Insecure WebView addJavascriptInterface |
+| AND008 | Critical | Hardcoded Signing Key |
+
+**Fix AndroidManifest.xml**:
+```xml
+<!-- BAD -->
+<application android:usesCleartextTraffic="true">
+
+<!-- GOOD -->
+<application
+    android:usesCleartextTraffic="false"
+    android:allowBackup="false"
+    android:networkSecurityConfig="@xml/network_security_config">
+```
+
+**network_security_config.xml**:
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <domain-config cleartextTrafficPermitted="false">
+        <domain includeSubdomains="true">api.myapp.com</domain>
+        <pin-set>
+            <pin digest="SHA-256">your-pin-hash</pin>
+        </pin-set>
+    </domain-config>
+</network-security-config>
+```
+
+### iOS Security (IOS)
+
+| Rule | Severity | Description |
+|------|----------|-------------|
+| IOS001 | High | App Transport Security Disabled |
+| IOS002 | Medium | Insecure Keychain Access |
+| IOS003 | Medium | URL Scheme Without Validation |
+| IOS004 | Low | iOS Pasteboard Sensitive Data |
+| IOS005 | Medium | Insecure iOS Entitlements |
+| IOS006 | Low | Background App Refresh Data Exposure |
+| IOS007 | Medium | Missing iOS Jailbreak Detection |
+| IOS008 | Low | Screenshots Not Disabled for Sensitive Screens |
+
+**Fix Info.plist**:
+```xml
+<!-- BAD - Disables ATS -->
+<key>NSAppTransportSecurity</key>
+<dict>
+    <key>NSAllowsArbitraryLoads</key>
+    <true/>
+</dict>
+
+<!-- GOOD - Specific exceptions only -->
+<key>NSAppTransportSecurity</key>
+<dict>
+    <key>NSExceptionDomains</key>
+    <dict>
+        <key>legacy-api.example.com</key>
+        <dict>
+            <key>NSExceptionAllowsInsecureHTTPLoads</key>
+            <true/>
+            <key>NSExceptionMinimumTLSVersion</key>
+            <string>TLSv1.2</string>
+        </dict>
+    </dict>
+</dict>
+```
+
+### Authentication (AUTH)
+
+| Rule | Severity | Description |
+|------|----------|-------------|
+| AUTH001 | Critical | Weak JWT Validation |
+| AUTH002 | High | Insecure Biometric Implementation |
+| AUTH003 | High | Weak Random Number Generation |
+| AUTH004 | Medium | Missing Session Timeout |
+| AUTH005 | High | OAuth State Parameter Missing |
+| AUTH006 | Critical | Hardcoded Credentials in Auth |
+
+**Fix Example**:
+```typescript
+// BAD - No JWT validation
+const decoded = jwt.decode(token);
+
+// GOOD - Verify JWT signature
+const decoded = jwt.verify(token, publicKey, {
+  algorithms: ['RS256'],
+  issuer: 'https://auth.myapp.com',
+  audience: 'myapp',
+});
+```
+
+### WebView Security (WEB)
+
+| Rule | Severity | Description |
+|------|----------|-------------|
+| WEB001 | Critical | WebView JavaScript Injection |
+| WEB002 | Medium | Unsafe iframe Configuration |
+| WEB003 | Medium | External Script Loading |
+| WEB004 | Medium | Content Security Policy Missing |
+| WEB005 | Low | Target _blank Without noopener |
+
+**Fix - Add CSP**:
+```html
+<!-- index.html -->
+<meta http-equiv="Content-Security-Policy" content="
+  default-src 'self';
+  script-src 'self';
+  style-src 'self' 'unsafe-inline';
+  img-src 'self' data: https:;
+  connect-src 'self' https://api.myapp.com;
+  font-src 'self';
+  frame-ancestors 'none';
+">
+```
+
+### Cryptography (CRY)
+
+| Rule | Severity | Description |
+|------|----------|-------------|
+| CRY001 | Critical | Weak Cryptographic Algorithm |
+| CRY002 | Critical | Hardcoded Encryption Key |
+| CRY003 | High | Insecure Random IV Generation |
+| CRY004 | High | Weak Password Hashing |
+
+**Fix Example**:
+```typescript
+// BAD - Weak algorithm
+const encrypted = CryptoJS.DES.encrypt(data, key);
+
+// GOOD - Strong algorithm
+const encrypted = CryptoJS.AES.encrypt(data, key, {
+  mode: CryptoJS.mode.GCM,
+  padding: CryptoJS.pad.Pkcs7,
+});
+
+// BAD - Hardcoded key
+const key = 'my-secret-key-123';
+
+// GOOD - Derived key
+const key = await crypto.subtle.deriveKey(
+  { name: 'PBKDF2', salt, iterations: 100000, hash: 'SHA-256' },
+  baseKey,
+  { name: 'AES-GCM', length: 256 },
+  false,
+  ['encrypt', 'decrypt']
+);
+```
+
+### Logging (LOG)
+
+| Rule | Severity | Description |
+|------|----------|-------------|
+| LOG001 | High | Sensitive Data in Console Logs |
+| LOG002 | Low | Console Logs in Production |
+
+**Fix Example**:
+```typescript
+// BAD - Logging sensitive data
+console.log('User password:', password);
+console.log('Token:', authToken);
+
+// GOOD - Redact sensitive data
+console.log('User authenticated:', userId);
+// Use conditional logging
+if (process.env.NODE_ENV === 'development') {
+  console.debug('Debug info:', data);
+}
+```
+
+## CI/CD Integration
+
+### GitHub Actions
+
+```yaml
+name: Security Scan
+
+on: [push, pull_request]
+
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+
+      - name: Run Capsec Security Scan
+        run: npx capsec scan --ci --output json --output-file security-report.json
+
+      - name: Upload Security Report
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: security-report
+          path: security-report.json
+```
+
+### GitLab CI
+
+```yaml
+security-scan:
+  image: node:20
+  script:
+    - npx capsec scan --ci
+  artifacts:
+    reports:
+      security: security-report.json
+  only:
+    - merge_requests
+    - main
+```
+
+## Configuration
+
+### capsec.config.json
+
+```json
+{
+  "exclude": [
+    "**/node_modules/**",
+    "**/dist/**",
+    "**/*.test.ts",
+    "**/*.spec.ts"
+  ],
+  "severity": "low",
+  "categories": [],
+  "rules": {
+    "LOG002": {
+      "enabled": false
+    },
+    "SEC001": {
+      "severity": "critical"
+    }
+  }
+}
+```
+
+### Initialize Config
+
+```bash
+npx capsec init
+```
+
+## Root/Jailbreak Detection
+
+```typescript
+import { IsRoot } from '@capgo/capacitor-is-root';
+
+async function checkDeviceSecurity() {
+  const { isRooted } = await IsRoot.isRooted();
+
+  if (isRooted) {
+    // Option 1: Warn user
+    showWarning('Device security compromised');
+
+    // Option 2: Restrict features
+    disableSensitiveFeatures();
+
+    // Option 3: Block app (for high-security apps)
+    blockApp();
+  }
+}
+```
+
+## Security Checklist
+
+### Before Release
+
+- [ ] Run `npx capsec scan --severity high`
+- [ ] Remove all console.log statements
+- [ ] Disable WebView debugging
+- [ ] Remove development URLs
+- [ ] Verify no hardcoded secrets
+- [ ] Enable certificate pinning
+- [ ] Implement root/jailbreak detection
+- [ ] Add Content Security Policy
+- [ ] Use secure storage for credentials
+- [ ] Enable ProGuard (Android)
+- [ ] Verify ATS settings (iOS)
+
+### Ongoing
+
+- [ ] Run security scans in CI/CD
+- [ ] Monitor for new vulnerabilities
+- [ ] Update dependencies regularly
+- [ ] Review third-party plugins
+- [ ] Audit authentication flows
+
+## Resources
+
+- Capsec Documentation: https://capacitor-sec.dev
+- OWASP Mobile Top 10: https://owasp.org/www-project-mobile-top-10
+- OWASP MASTG: https://mas.owasp.org/MASTG
+- Capgo Security Plugins: https://capgo.app
diff --git a/.claude/skills/find-skills/SKILL.md b/.claude/skills/find-skills/SKILL.md
new file mode 100644
index 0000000..114c663
--- /dev/null
+++ b/.claude/skills/find-skills/SKILL.md
@@ -0,0 +1,142 @@
+---
+name: find-skills
+description: Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.
+---
+
+# Find Skills
+
+This skill helps you discover and install skills from the open agent skills ecosystem.
+
+## When to Use This Skill
+
+Use this skill when the user:
+
+- Asks "how do I do X" where X might be a common task with an existing skill
+- Says "find a skill for X" or "is there a skill for X"
+- Asks "can you do X" where X is a specialized capability
+- Expresses interest in extending agent capabilities
+- Wants to search for tools, templates, or workflows
+- Mentions they wish they had help with a specific domain (design, testing, deployment, etc.)
+
+## What is the Skills CLI?
+
+The Skills CLI (`npx skills`) is the package manager for the open agent skills ecosystem. Skills are modular packages that extend agent capabilities with specialized knowledge, workflows, and tools.
+
+**Key commands:**
+
+- `npx skills find [query]` - Search for skills interactively or by keyword
+- `npx skills add <package>` - Install a skill from GitHub or other sources
+- `npx skills check` - Check for skill updates
+- `npx skills update` - Update all installed skills
+
+**Browse skills at:** https://skills.sh/
+
+## How to Help Users Find Skills
+
+### Step 1: Understand What They Need
+
+When a user asks for help with something, identify:
+
+1. The domain (e.g., React, testing, design, deployment)
+2. The specific task (e.g., writing tests, creating animations, reviewing PRs)
+3. Whether this is a common enough task that a skill likely exists
+
+### Step 2: Check the Leaderboard First
+
+Before running a CLI search, check the [skills.sh leaderboard](https://skills.sh/) to see if a well-known skill already exists for the domain. The leaderboard ranks skills by total installs, surfacing the most popular and battle-tested options.
+
+For example, top skills for web development include:
+- `vercel-labs/agent-skills` — React, Next.js, web design (100K+ installs each)
+- `anthropics/skills` — Frontend design, document processing (100K+ installs)
+
+### Step 3: Search for Skills
+
+If the leaderboard doesn't cover the user's need, run the find command:
+
+```bash
+npx skills find [query]
+```
+
+For example:
+
+- User asks "how do I make my React app faster?" → `npx skills find react performance`
+- User asks "can you help me with PR reviews?" → `npx skills find pr review`
+- User asks "I need to create a changelog" → `npx skills find changelog`
+
+### Step 4: Verify Quality Before Recommending
+
+**Do not recommend a skill based solely on search results.** Always verify:
+
+1. **Install count** — Prefer skills with 1K+ installs. Be cautious with anything under 100.
+2. **Source reputation** — Official sources (`vercel-labs`, `anthropics`, `microsoft`) are more trustworthy than unknown authors.
+3. **GitHub stars** — Check the source repository. A skill from a repo with <100 stars should be treated with skepticism.
+
+### Step 5: Present Options to the User
+
+When you find relevant skills, present them to the user with:
+
+1. The skill name and what it does
+2. The install count and source
+3. The install command they can run
+4. A link to learn more at skills.sh
+
+Example response:
+
+```
+I found a skill that might help! The "react-best-practices" skill provides
+React and Next.js performance optimization guidelines from Vercel Engineering.
+(185K installs)
+
+To install it:
+npx skills add vercel-labs/agent-skills@react-best-practices
+
+Learn more: https://skills.sh/vercel-labs/agent-skills/react-best-practices
+```
+
+### Step 6: Offer to Install
+
+If the user wants to proceed, you can install the skill for them:
+
+```bash
+npx skills add <owner/repo@skill> -g -y
+```
+
+The `-g` flag installs globally (user-level) and `-y` skips confirmation prompts.
+
+## Common Skill Categories
+
+When searching, consider these common categories:
+
+| Category        | Example Queries                          |
+| --------------- | ---------------------------------------- |
+| Web Development | react, nextjs, typescript, css, tailwind |
+| Testing         | testing, jest, playwright, e2e           |
+| DevOps          | deploy, docker, kubernetes, ci-cd        |
+| Documentation   | docs, readme, changelog, api-docs        |
+| Code Quality    | review, lint, refactor, best-practices   |
+| Design          | ui, ux, design-system, accessibility     |
+| Productivity    | workflow, automation, git                |
+
+## Tips for Effective Searches
+
+1. **Use specific keywords**: "react testing" is better than just "testing"
+2. **Try alternative terms**: If "deploy" doesn't work, try "deployment" or "ci-cd"
+3. **Check popular sources**: Many skills come from `vercel-labs/agent-skills` or `ComposioHQ/awesome-claude-skills`
+
+## When No Skills Are Found
+
+If no relevant skills exist:
+
+1. Acknowledge that no existing skill was found
+2. Offer to help with the task directly using your general capabilities
+3. Suggest the user could create their own skill with `npx skills init`
+
+Example:
+
+```
+I searched for skills related to "xyz" but didn't find any matches.
+I can still help you with this task directly! Would you like me to proceed?
+
+If this is something you do often, you could create your own skill:
+npx skills init my-xyz-skill
+```
diff --git a/.claude/skills/nuxt-testing/SKILL.md b/.claude/skills/nuxt-testing/SKILL.md
new file mode 100644
index 0000000..483c5fc
--- /dev/null
+++ b/.claude/skills/nuxt-testing/SKILL.md
@@ -0,0 +1,33 @@
+---
+name: nuxt-testing
+description: Nuxt testing with @nuxt/test-utils — unit tests with Nuxt runtime environment, component testing with mountSuspended, mocking auto-imports, and e2e testing with Playwright. Use when writing tests for Nuxt apps, components, composables, or pages.
+metadata:
+  author: Phil
+  version: "2026.4.10"
+  source: Generated from https://nuxt.com/docs/4.x/getting-started/testing
+---
+
+Testing Nuxt applications using `@nuxt/test-utils` with Vitest. Covers unit testing in a Nuxt runtime environment, component testing with `mountSuspended`, mocking Nuxt auto-imports and components, and end-to-end testing with Playwright.
+
+> Based on Nuxt 4.x / @nuxt/test-utils documentation, generated at 2026-04-10.
+
+## Setup
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Installation & Config | Dependencies, vitest.config.ts with projects, test directory structure | [setup-config](references/setup-config.md) |
+
+## Unit Testing
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Nuxt Environment | Running tests in the Nuxt runtime environment, environment options, organizing test directories | [unit-nuxt-environment](references/unit-nuxt-environment.md) |
+| Helpers | mountSuspended, renderSuspended, mockNuxtImport, mockComponent, registerEndpoint | [unit-helpers](references/unit-helpers.md) |
+| Built-In Mocks | IntersectionObserver and IndexedDB mocks in the Nuxt test environment | [unit-mocks](references/unit-mocks.md) |
+
+## End-to-End Testing
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| E2E with Vitest | Setup function, $fetch, fetch, url helpers, browser testing with createPage | [e2e-vitest](references/e2e-vitest.md) |
+| E2E with Playwright | Playwright test runner integration, goto helper, configuration | [e2e-playwright](references/e2e-playwright.md) |
diff --git a/.claude/skills/nuxt-testing/references/e2e-playwright.md b/.claude/skills/nuxt-testing/references/e2e-playwright.md
new file mode 100644
index 0000000..d53bc80
--- /dev/null
+++ b/.claude/skills/nuxt-testing/references/e2e-playwright.md
@@ -0,0 +1,61 @@
+# End-to-End Testing with Playwright Test Runner
+
+## Installation
+
+```bash
+pnpm add -D @playwright/test @nuxt/test-utils
+```
+
+## Configuration
+
+```ts
+// playwright.config.ts
+import { fileURLToPath } from 'node:url'
+import { defineConfig, devices } from '@playwright/test'
+import type { ConfigOptions } from '@nuxt/test-utils/playwright'
+
+export default defineConfig<ConfigOptions>({
+  use: {
+    nuxt: {
+      rootDir: fileURLToPath(new URL('.', import.meta.url)),
+    },
+  },
+  // ...
+})
+```
+
+## Writing Tests
+
+Import `expect` and `test` from `@nuxt/test-utils/playwright` (not from `@playwright/test`):
+
+```ts
+// tests/example.test.ts
+import { expect, test } from '@nuxt/test-utils/playwright'
+
+test('test', async ({ page, goto }) => {
+  await goto('/', { waitUntil: 'hydration' })
+  await expect(page.getByRole('heading')).toHaveText('Welcome to Playwright!')
+})
+```
+
+The `goto` helper is Nuxt-aware and supports `waitUntil: 'hydration'`.
+
+## Per-File Nuxt Configuration
+
+Override Nuxt config directly in a test file:
+
+```ts
+import { fileURLToPath } from 'node:url'
+import { expect, test } from '@nuxt/test-utils/playwright'
+
+test.use({
+  nuxt: {
+    rootDir: fileURLToPath(new URL('..', import.meta.url)),
+  },
+})
+
+test('test', async ({ page, goto }) => {
+  await goto('/', { waitUntil: 'hydration' })
+  await expect(page.getByRole('heading')).toHaveText('Welcome to Playwright!')
+})
+```
diff --git a/.claude/skills/nuxt-testing/references/e2e-vitest.md b/.claude/skills/nuxt-testing/references/e2e-vitest.md
new file mode 100644
index 0000000..5e6d811
--- /dev/null
+++ b/.claude/skills/nuxt-testing/references/e2e-vitest.md
@@ -0,0 +1,109 @@
+# End-to-End Testing with Vitest
+
+## Setup
+
+In each `describe` block, call `setup()` before tests to initialize the Nuxt test environment:
+
+```ts
+import { describe, test } from 'vitest'
+import { $fetch, setup } from '@nuxt/test-utils/e2e'
+
+describe('My test', async () => {
+  await setup({
+    // test context options
+  })
+
+  test('my test', () => {
+    // ...
+  })
+})
+```
+
+`setup` performs tasks in `beforeAll`, `beforeEach`, `afterEach`, and `afterAll`.
+
+## Setup Options
+
+### Nuxt Config
+- `rootDir`: Path to Nuxt app directory (default: `'.'`)
+- `configFile`: Configuration file name (default: `'nuxt.config'`)
+
+### Timings
+- `setupTimeout`: Time in ms for setup to complete (default: `120000`, `240000` on Windows)
+- `teardownTimeout`: Time in ms for teardown (default: `30000`)
+
+### Features
+- `build`: Run a separate build step (default: `true`, `false` if browser/server disabled or host provided)
+- `server`: Launch a server for requests (default: `true`, `false` if host provided)
+- `port`: Fixed test server port (default: `undefined`, auto-assigned)
+- `host`: URL to test against instead of building a new server (useful for testing deployed apps)
+- `browser`: Launch a Playwright browser instance (default: `false`)
+- `browserOptions`:
+  - `type`: `'chromium'` | `'firefox'` | `'webkit'`
+  - `launch`: Playwright launch options
+- `runner`: Test runner (`'vitest'` | `'jest'` | `'cucumber'`, default: `'vitest'`)
+
+## API Helpers
+
+### `$fetch(url)`
+
+Get the HTML of a server-rendered page:
+
+```ts
+import { $fetch } from '@nuxt/test-utils/e2e'
+
+const html = await $fetch('/')
+```
+
+### `fetch(url)`
+
+Get the full response:
+
+```ts
+import { fetch } from '@nuxt/test-utils/e2e'
+
+const res = await fetch('/')
+const { body, headers } = res
+```
+
+### `url(path)`
+
+Get the full URL including the test server port:
+
+```ts
+import { url } from '@nuxt/test-utils/e2e'
+
+const pageUrl = url('/page')
+// 'http://localhost:6840/page'
+```
+
+### `createPage(url)`
+
+Create a Playwright browser page (requires `browser: true` in setup):
+
+```ts
+import { createPage } from '@nuxt/test-utils/e2e'
+
+const page = await createPage('/page')
+// Full Playwright Page API available
+```
+
+## Target Host Example
+
+Test against a running server instead of building:
+
+```ts
+import { createPage, setup } from '@nuxt/test-utils/e2e'
+import { describe, expect, it } from 'vitest'
+
+describe('login page', async () => {
+  await setup({
+    host: 'http://localhost:8787',
+  })
+
+  it('displays the email and password fields', async () => {
+    const page = await createPage('/login')
+    expect(await page.getByTestId('email').isVisible()).toBe(true)
+    expect(await page.getByTestId('password').isVisible()).toBe(true)
+  })
+})
+```
diff --git a/.claude/skills/nuxt-testing/references/setup-config.md b/.claude/skills/nuxt-testing/references/setup-config.md
new file mode 100644
index 0000000..f3752f0
--- /dev/null
+++ b/.claude/skills/nuxt-testing/references/setup-config.md
@@ -0,0 +1,147 @@
+# Installation & Configuration
+
+## Dependencies
+
+```bash
+pnpm add -D @nuxt/test-utils vitest @vue/test-utils happy-dom playwright-core
+```
+
+## Nuxt Config
+
+Add the test utils module for Vitest integration in DevTools (optional):
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  modules: [
+    '@nuxt/test-utils/module',
+  ],
+})
+```
+
+## Vitest Config (Project-Based Setup)
+
+Use Vitest projects for fine-grained control over which tests run in which environment:
+
+```ts
+// vitest.config.ts
+import { defineConfig } from 'vitest/config'
+import { defineVitestProject } from '@nuxt/test-utils/config'
+
+export default defineConfig({
+  test: {
+    projects: [
+      {
+        test: {
+          name: 'unit',
+          include: ['test/unit/*.{test,spec}.ts'],
+          environment: 'node',
+        },
+      },
+      {
+        test: {
+          name: 'e2e',
+          include: ['test/e2e/*.{test,spec}.ts'],
+          environment: 'node',
+        },
+      },
+      await defineVitestProject({
+        test: {
+          name: 'nuxt',
+          include: ['test/nuxt/*.{test,spec}.ts'],
+          environment: 'nuxt',
+        },
+      }),
+    ],
+  },
+})
+```
+
+**Important:** Requires `"type": "module"` in `package.json`, or rename to `vitest.config.m{ts,js}`.
+
+## Alternative: Simple Setup
+
+If all tests should run in the Nuxt environment:
+
+```ts
+// vitest.config.ts
+import { defineVitestConfig } from '@nuxt/test-utils/config'
+
+export default defineVitestConfig({
+  test: {
+    environment: 'nuxt',
+    // environmentOptions: {
+    //   nuxt: {
+    //     domEnvironment: 'happy-dom', // 'happy-dom' (default) or 'jsdom'
+    //     overrides: {
+    //       // other Nuxt config
+    //     }
+    //   }
+    // }
+  },
+})
+```
+
+Opt out of the Nuxt environment per test file with a comment:
+
+```ts
+// @vitest-environment node
+import { test } from 'vitest'
+
+test('my test', () => {
+  // runs without Nuxt environment
+})
+```
+
+## Recommended Test Directory Structure
+
+```
+test/
+├── e2e/          # End-to-end tests (node environment)
+│   └── ssr.test.ts
+├── nuxt/         # Tests needing Nuxt runtime (nuxt environment)
+│   ├── components.test.ts
+│   └── composables.test.ts
+└── unit/         # Pure unit tests (node environment)
+    └── utils.test.ts
+```
+
+## Running Tests
+
+```bash
+# Run all tests
+npx vitest
+
+# Run only unit tests
+npx vitest --project unit
+
+# Run only Nuxt tests
+npx vitest --project nuxt
+
+# Run tests in watch mode
+npx vitest --watch
+```
+
+## Environment Variables
+
+Use a `.env.test` file for test-specific environment variables.
+
+## TypeScript Support
+
+Test files in `test/nuxt/` and `tests/nuxt/` are automatically included in the Nuxt app TypeScript context, so they recognize `~/`, `@/`, `#imports` aliases and auto-imports.
+
+To add other directories to the Nuxt TypeScript context:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  typescript: {
+    tsConfig: {
+      include: [
+        // relative to generated .nuxt/tsconfig.json
+        '../test/other-nuxt-context/**/*',
+      ],
+    },
+  },
+})
+```
diff --git a/.claude/skills/nuxt-testing/references/unit-helpers.md b/.claude/skills/nuxt-testing/references/unit-helpers.md
new file mode 100644
index 0000000..5d29116
--- /dev/null
+++ b/.claude/skills/nuxt-testing/references/unit-helpers.md
@@ -0,0 +1,206 @@
+# Test Helpers
+
+All helpers are imported from `@nuxt/test-utils/runtime`.
+
+## `mountSuspended`
+
+Mounts any Vue component within the Nuxt environment, allowing async setup and access to plugin injections. Wraps `@vue/test-utils` `mount` under the hood.
+
+```ts
+import { mountSuspended } from '@nuxt/test-utils/runtime'
+import { SomeComponent } from '#components'
+
+it('can mount some component', async () => {
+  const component = await mountSuspended(SomeComponent)
+  expect(component.text()).toMatchInlineSnapshot('"This is an auto-imported component"')
+})
+```
+
+Mount with a route:
+
+```ts
+import { mountSuspended } from '@nuxt/test-utils/runtime'
+import App from '~/app.vue'
+
+it('can mount an app', async () => {
+  const component = await mountSuspended(App, { route: '/test' })
+  expect(component.html()).toMatchInlineSnapshot(`
+    "<div>This is an auto-imported component</div>
+    <div> I am a global component </div>
+    <div>/</div>
+    <a href="/test"> Test link </a>"
+  `)
+})
+```
+
+**Options:** Accepts all `@vue/test-utils` mount options plus:
+- `route`: initial route string, or `false` to skip initial route change (default: `/`)
+
+## `renderSuspended`
+
+Renders a component using `@testing-library/vue` within the Nuxt environment. Requires `@testing-library/vue` as a dependency.
+
+```ts
+import { renderSuspended } from '@nuxt/test-utils/runtime'
+import { SomeComponent } from '#components'
+import { screen } from '@testing-library/vue'
+
+it('can render some component', async () => {
+  await renderSuspended(SomeComponent)
+  expect(screen.getByText('This is an auto-imported component')).toBeDefined()
+})
+```
+
+The component is rendered inside `<div id="test-wrapper"></div>`.
+
+**Options:** Accepts all `@testing-library/vue` render options plus:
+- `route`: initial route string, or `false` to skip initial route change (default: `/`)
+
+## `mockNuxtImport`
+
+Mocks Nuxt auto-imported functions. This is a macro that transforms to `vi.mock` (hoisted).
+
+**Can only be used once per mocked import per test file.**
+
+```ts
+import { mockNuxtImport } from '@nuxt/test-utils/runtime'
+
+mockNuxtImport('useState', () => {
+  return () => {
+    return { value: 'mocked storage' }
+  }
+})
+```
+
+### With type safety and original implementation
+
+```ts
+import { mockNuxtImport } from '@nuxt/test-utils/runtime'
+
+mockNuxtImport<typeof useState>('useState', (original) => {
+  return (...args) => {
+    return { ...original('some-key'), value: 'mocked state' }
+  }
+})
+
+// Or pass the function directly
+mockNuxtImport(useState, (original) => {
+  return (...args) => {
+    return { ...original('some-key'), value: 'mocked state' }
+  }
+})
+```
+
+### Different implementations per test
+
+Use `vi.hoisted` to create mutable mocks:
+
+```ts
+import { vi } from 'vitest'
+import { mockNuxtImport } from '@nuxt/test-utils/runtime'
+
+const { useStateMock } = vi.hoisted(() => {
+  return {
+    useStateMock: vi.fn(() => {
+      return { value: 'mocked storage' }
+    }),
+  }
+})
+
+mockNuxtImport('useState', () => {
+  return useStateMock
+})
+
+// In a test:
+useStateMock.mockImplementation(() => {
+  return { value: 'something else' }
+})
+```
+
+### Alternative: per-test mocking with vi.fn
+
+```ts
+import { beforeEach, vi } from 'vitest'
+import { mockNuxtImport } from '@nuxt/test-utils/runtime'
+
+mockNuxtImport(useRoute, original => vi.fn(original))
+
+beforeEach(() => {
+  vi.resetAllMocks()
+})
+
+// In a test:
+const useRouteOriginal = vi.mocked(useRoute).getMockImplementation()!
+vi.mocked(useRoute).mockImplementation(
+  (...args) => ({ ...useRouteOriginal(...args), path: '/mocked' }),
+)
+```
+
+## `mockComponent`
+
+Mocks a Nuxt component by PascalCase name or relative path.
+
+```ts
+import { mockComponent } from '@nuxt/test-utils/runtime'
+
+// By component name
+mockComponent('MyComponent', {
+  props: {
+    value: String,
+  },
+  setup(props) {
+    // ...
+  },
+})
+
+// By path with factory function
+mockComponent('~/components/my-component.vue', () => {
+  return defineComponent({
+    setup(props) {
+      // ...
+    },
+  })
+})
+
+// Redirect to a mock SFC
+mockComponent('MyComponent', () => import('./MockComponent.vue'))
+```
+
+**Note:** Cannot reference local variables in the factory function (hoisted). Import dependencies inside the factory:
+
+```ts
+mockComponent('MyComponent', async () => {
+  const { ref, h } = await import('vue')
+
+  return defineComponent({
+    setup(props) {
+      const counter = ref(0)
+      return () => h('div', null, counter.value)
+    },
+  })
+})
+```
+
+## `registerEndpoint`
+
+Creates a mock Nitro endpoint that returns test data.
+
+```ts
+import { registerEndpoint } from '@nuxt/test-utils/runtime'
+
+// Simple GET endpoint
+registerEndpoint('/test/', () => ({
+  test: 'test-field',
+}))
+
+// With specific HTTP method
+registerEndpoint('/test/', {
+  method: 'POST',
+  handler: () => ({ test: 'test-field' }),
+})
+```
+
+Options object properties:
+- `handler`: event handler function
+- `method`: (optional) HTTP method to match (e.g., 'GET', 'POST')
+- `once`: (optional) if true, handler is removed after first matching request
diff --git a/.claude/skills/nuxt-testing/references/unit-mocks.md b/.claude/skills/nuxt-testing/references/unit-mocks.md
new file mode 100644
index 0000000..c7e9fe5
--- /dev/null
+++ b/.claude/skills/nuxt-testing/references/unit-mocks.md
@@ -0,0 +1,33 @@
+# Built-In Mocks
+
+`@nuxt/test-utils` provides built-in mocks for browser APIs in the DOM test environment.
+
+## `intersectionObserver`
+
+- **Default:** `true`
+- Creates a dummy class without any functionality for the IntersectionObserver API.
+
+## `indexedDB`
+
+- **Default:** `false`
+- Uses [`fake-indexeddb`](https://github.com/dumbmatter/fakeIndexedDB) to create a functional mock of the IndexedDB API.
+
+## Configuration
+
+```ts
+// vitest.config.ts
+import { defineVitestConfig } from '@nuxt/test-utils/config'
+
+export default defineVitestConfig({
+  test: {
+    environmentOptions: {
+      nuxt: {
+        mock: {
+          intersectionObserver: true,
+          indexedDb: true,
+        },
+      },
+    },
+  },
+})
+```
diff --git a/.claude/skills/nuxt-testing/references/unit-nuxt-environment.md b/.claude/skills/nuxt-testing/references/unit-nuxt-environment.md
new file mode 100644
index 0000000..f17196f
--- /dev/null
+++ b/.claude/skills/nuxt-testing/references/unit-nuxt-environment.md
@@ -0,0 +1,49 @@
+# Nuxt Runtime Environment
+
+## Overview
+
+The Nuxt test environment initializes a global Nuxt app before tests run, including plugins and `app.vue`. This gives tests access to auto-imports, composables, and injections.
+
+Tests run in `happy-dom` (default) or `jsdom`. Be careful not to mutate global state, or reset it afterwards.
+
+## Environment Separation
+
+- **`test/unit/`** — Node environment, fast, no Nuxt runtime. For pure logic, utilities, helpers.
+- **`test/nuxt/`** — Nuxt environment, has access to auto-imports, composables, plugins. For components and composables that depend on Nuxt.
+- **`test/e2e/`** — Node environment, launches a full Nuxt server. For end-to-end testing.
+
+**Important:** `@nuxt/test-utils/runtime` and `@nuxt/test-utils/e2e` cannot be used in the same file — they need different environments.
+
+## Naming Convention for Mixed Setups
+
+If using the simple (non-project) config, separate by file extension:
+
+- `app.nuxt.spec.ts` — runs in Nuxt environment (uses `@nuxt/test-utils/runtime`)
+- `app.e2e.spec.ts` — runs in Node environment (uses `@nuxt/test-utils/e2e`)
+
+Or use per-file environment comments:
+
+```ts
+// @vitest-environment nuxt
+```
+
+## Environment Options
+
+Configure in `vitest.config.ts`:
+
+```ts
+import { defineVitestConfig } from '@nuxt/test-utils/config'
+
+export default defineVitestConfig({
+  test: {
+    environmentOptions: {
+      nuxt: {
+        domEnvironment: 'happy-dom', // or 'jsdom'
+        overrides: {
+          // Nuxt config overrides for testing
+        },
+      },
+    },
+  },
+})
+```
diff --git a/.claude/skills/nuxt-ui/SKILL.md b/.claude/skills/nuxt-ui/SKILL.md
new file mode 100644
index 0000000..c8b4be4
--- /dev/null
+++ b/.claude/skills/nuxt-ui/SKILL.md
@@ -0,0 +1,334 @@
+---
+name: nuxt-ui
+description: Build UIs with @nuxt/ui v4 — 125+ accessible Vue components with Tailwind CSS theming. Use when creating interfaces, customizing themes to match a brand, building forms, or composing layouts like dashboards, docs sites, and chat interfaces.
+---
+
+# Nuxt UI
+
+Vue component library built on [Reka UI](https://reka-ui.com/) + [Tailwind CSS](https://tailwindcss.com/) + [Tailwind Variants](https://www.tailwind-variants.org/). Works with Nuxt, Vue (Vite), Laravel (Inertia), and AdonisJS (Inertia).
+
+## Installation
+
+### Nuxt
+
+```bash
+pnpm add @nuxt/ui tailwindcss
+```
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  modules: ['@nuxt/ui'],
+  css: ['~/assets/css/main.css']
+})
+```
+
+```css
+/* app/assets/css/main.css */
+@import "tailwindcss";
+@import "@nuxt/ui";
+```
+
+```vue
+<!-- app.vue -->
+<template>
+  <UApp>
+    <NuxtPage />
+  </UApp>
+</template>
+```
+
+### Vue (Vite)
+
+```bash
+pnpm add @nuxt/ui tailwindcss
+```
+
+```ts
+// vite.config.ts
+import { defineConfig } from 'vite'
+import vue from '@vitejs/plugin-vue'
+import ui from '@nuxt/ui/vite'
+
+export default defineConfig({
+  plugins: [
+    vue(),
+    ui()
+  ]
+})
+```
+
+```ts
+// src/main.ts
+import './assets/main.css'
+import { createApp } from 'vue'
+import { createRouter, createWebHistory } from 'vue-router'
+import ui from '@nuxt/ui/vue-plugin'
+import App from './App.vue'
+
+const app = createApp(App)
+
+const router = createRouter({
+  routes: [],
+  history: createWebHistory()
+})
+
+app.use(router)
+app.use(ui)
+app.mount('#app')
+```
+
+```css
+/* assets/main.css */
+@import "tailwindcss";
+@import "@nuxt/ui";
+```
+
+```vue
+<!-- src/App.vue -->
+<template>
+  <UApp>
+    <RouterView />
+  </UApp>
+</template>
+```
+
+> **Vue**: Add `class="isolate"` to your root `<div id="app">` in `index.html`.
+
+> **Vue + Inertia**: Use `ui({ router: 'inertia' })` in `vite.config.ts`.
+
+### UApp
+
+Wrapping your app in `UApp` is **required** — it provides global config for toasts, tooltips, and programmatic overlays. It also accepts a `locale` prop for i18n (see [composables reference](references/composables.md)).
+
+## Icons
+
+Nuxt UI uses [Iconify](https://iconify.design/) for 200,000+ icons. In Nuxt, `@nuxt/icon` is auto-registered. In Vue, icons work out of the box via the Vite plugin.
+
+### Naming convention
+
+Icons use the format `i-{collection}-{name}`:
+
+```vue
+<UIcon name="i-lucide-sun" class="size-5" />
+<UButton icon="i-lucide-plus" label="Add" />
+<UAlert icon="i-lucide-info" title="Heads up" />
+```
+
+> Browse all icons at [icones.js.org](https://icones.js.org). The `lucide` collection is used throughout Nuxt UI defaults.
+
+### Install icon collections locally
+
+```bash
+pnpm i @iconify-json/lucide
+pnpm i @iconify-json/simple-icons
+```
+
+### Custom local collections (Nuxt)
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  icon: {
+    customCollections: [{
+      prefix: 'custom',
+      dir: './app/assets/icons'
+    }]
+  }
+})
+```
+
+```vue
+<UIcon name="i-custom-my-icon" />
+```
+
+## Theming & Branding
+
+Nuxt UI ships with a default look. The goal is to adapt it to your brand so every app looks unique.
+
+**Always use semantic utilities** (`text-default`, `bg-elevated`, `border-muted`), never raw Tailwind palette colors. See [references/theming.md](references/theming.md) for the full list.
+
+### Colors
+
+7 semantic colors (`primary`, `secondary`, `success`, `info`, `warning`, `error`, `neutral`) configurable at runtime:
+
+```ts
+// Nuxt — app.config.ts
+export default defineAppConfig({
+  ui: { colors: { primary: 'indigo', neutral: 'zinc' } }
+})
+```
+
+```ts
+// Vue — vite.config.ts
+import { defineConfig } from 'vite'
+import vue from '@vitejs/plugin-vue'
+import ui from '@nuxt/ui/vite'
+
+export default defineConfig({
+  plugins: [
+    vue(),
+    ui({
+      ui: { colors: { primary: 'indigo', neutral: 'zinc' } }
+    })
+  ]
+})
+```
+
+### Customizing components
+
+**Override priority** (highest wins): `ui` prop / `class` prop > global config > theme defaults.
+
+The `ui` prop overrides a component's **slots** after variants are computed — it wins over everything:
+
+```vue
+<UButton :ui="{ base: 'rounded-none', trailingIcon: 'size-3 rotate-90' }" />
+<UCard :ui="{ header: 'bg-muted', body: 'p-8' }" />
+```
+
+**Read the generated theme file** to find slot names for any component:
+
+- **Nuxt**: `.nuxt/ui/<component>.ts`
+- **Vue**: `node_modules/.nuxt-ui/ui/<component>.ts`
+
+> For CSS variables, custom colors, global config, compound variants, and a **full brand customization playbook**, see [references/theming.md](references/theming.md)
+
+## Composables
+
+```ts
+// Notifications
+const toast = useToast()
+toast.add({ title: 'Saved', color: 'success', icon: 'i-lucide-check' })
+
+// Programmatic overlays
+const overlay = useOverlay()
+const modal = overlay.create(MyModal)
+const { result } = modal.open({ title: 'Confirm' })
+await result
+
+// Keyboard shortcuts
+defineShortcuts({
+  meta_k: () => openSearch(),
+  escape: () => close()
+})
+```
+
+> For full composable reference, see [references/composables.md](references/composables.md)
+
+## Form validation
+
+Uses Standard Schema — works with Zod, Valibot, Yup, or Joi.
+
+```vue
+<script setup lang="ts">
+import { z } from 'zod'
+
+const schema = z.object({
+  email: z.string().email('Invalid email'),
+  password: z.string().min(8, 'Min 8 characters')
+})
+
+type Schema = z.output<typeof schema>
+const state = reactive<Partial<Schema>>({ email: '', password: '' })
+
+function onSubmit() {
+  // UForm validates before emitting @submit — state is valid here
+}
+</script>
+
+<template>
+  <UForm :schema="schema" :state="state" @submit="onSubmit">
+    <UFormField name="email" label="Email" required>
+      <UInput v-model="state.email" type="email" />
+    </UFormField>
+
+    <UFormField name="password" label="Password" required>
+      <UInput v-model="state.password" type="password" />
+    </UFormField>
+
+    <UButton type="submit">Sign in</UButton>
+  </UForm>
+</template>
+```
+
+> For all form components and validation patterns, see [references/components.md](references/components.md#form)
+
+## Overlays
+
+```vue
+<!-- Modal -->
+<UModal v-model:open="isOpen" title="Edit" description="Edit your profile">
+  <template #body>Content</template>
+  <template #footer>
+    <UButton variant="ghost" @click="isOpen = false">Cancel</UButton>
+    <UButton @click="save">Save</UButton>
+  </template>
+</UModal>
+
+<!-- Slideover (side panel) -->
+<USlideover v-model:open="isOpen" title="Settings" side="right">
+  <template #body>Content</template>
+</USlideover>
+
+<!-- Dropdown menu (flat array) -->
+<UDropdownMenu :items="[
+  { label: 'Edit', icon: 'i-lucide-pencil' },
+  { type: 'separator' },
+  { label: 'Delete', icon: 'i-lucide-trash', color: 'error' }
+]">
+  <UButton icon="i-lucide-ellipsis-vertical" variant="ghost" />
+</UDropdownMenu>
+
+<!-- Dropdown menu (nested array — groups with automatic separators) -->
+<UDropdownMenu :items="[
+  [{ label: 'Edit', icon: 'i-lucide-pencil' }, { label: 'Duplicate', icon: 'i-lucide-copy' }],
+  [{ label: 'Delete', icon: 'i-lucide-trash', color: 'error' }]
+]">
+  <UButton icon="i-lucide-ellipsis-vertical" variant="ghost" />
+</UDropdownMenu>
+```
+
+> For all overlay components, see [references/components.md](references/components.md#overlay)
+
+## Layouts
+
+Nuxt UI provides components to compose full page layouts. Load the reference matching your use case:
+
+| Layout | Description | Reference |
+|---|---|---|
+| Page | Landing, blog, changelog, pricing — public-facing pages | [layouts/page.md](references/layouts/page.md) |
+| Dashboard | Admin UI with resizable sidebar and panels | [layouts/dashboard.md](references/layouts/dashboard.md) |
+| Docs | Documentation with sidebar nav and TOC | [layouts/docs.md](references/layouts/docs.md) |
+| Chat | AI chat with messages and prompt | [layouts/chat.md](references/layouts/chat.md) |
+| Editor | Rich text editor with toolbars | [layouts/editor.md](references/layouts/editor.md) |
+
+## Templates
+
+Official starter templates at [github.com/nuxt-ui-templates](https://github.com/nuxt-ui-templates):
+
+| Template | Framework | GitHub |
+|---|---|---|
+| Starter | Nuxt | [nuxt-ui-templates/starter](https://github.com/nuxt-ui-templates/starter) |
+| Starter | Vue | [nuxt-ui-templates/starter-vue](https://github.com/nuxt-ui-templates/starter-vue) |
+| Dashboard | Nuxt | [nuxt-ui-templates/dashboard](https://github.com/nuxt-ui-templates/dashboard) |
+| Dashboard | Vue | [nuxt-ui-templates/dashboard-vue](https://github.com/nuxt-ui-templates/dashboard-vue) |
+| SaaS | Nuxt | [nuxt-ui-templates/saas](https://github.com/nuxt-ui-templates/saas) |
+| Landing | Nuxt | [nuxt-ui-templates/landing](https://github.com/nuxt-ui-templates/landing) |
+| Docs | Nuxt | [nuxt-ui-templates/docs](https://github.com/nuxt-ui-templates/docs) |
+| Portfolio | Nuxt | [nuxt-ui-templates/portfolio](https://github.com/nuxt-ui-templates/portfolio) |
+| Chat | Nuxt | [nuxt-ui-templates/chat](https://github.com/nuxt-ui-templates/chat) |
+| Editor | Nuxt | [nuxt-ui-templates/editor](https://github.com/nuxt-ui-templates/editor) |
+| Changelog | Nuxt | [nuxt-ui-templates/changelog](https://github.com/nuxt-ui-templates/changelog) |
+| Starter | Laravel | [nuxt-ui-templates/starter-laravel](https://github.com/nuxt-ui-templates/starter-laravel) |
+| Starter | AdonisJS | [nuxt-ui-templates/starter-adonis](https://github.com/nuxt-ui-templates/starter-adonis) |
+
+> When starting a new project, clone the matching template instead of setting up from scratch.
+
+## Additional references
+
+Load based on your task — **do not load all at once**:
+
+- [references/theming.md](references/theming.md) — CSS variables, custom colors, component theme overrides
+- [references/components.md](references/components.md) — all 125+ components by category with props and usage
+- [references/composables.md](references/composables.md) — useToast, useOverlay, defineShortcuts
+- Generated theme files — all slots, variants, and default classes for any component (Nuxt: `.nuxt/ui/<component>.ts`, Vue: `node_modules/.nuxt-ui/ui/<component>.ts`)
diff --git a/.claude/skills/nuxt-ui/references/components.md b/.claude/skills/nuxt-ui/references/components.md
new file mode 100644
index 0000000..cd7cc57
--- /dev/null
+++ b/.claude/skills/nuxt-ui/references/components.md
@@ -0,0 +1,377 @@
+# Components
+
+125+ Vue components powered by Tailwind CSS and Reka UI. For any component's theme slots, read the generated theme file (Nuxt: `.nuxt/ui/<component>.ts`, Vue: `node_modules/.nuxt-ui/ui/<component>.ts`).
+
+## Layout
+
+Core structural components for organizing your application's layout.
+
+| Component | Purpose |
+|---|---|
+| `UApp` | **Required** root wrapper for toasts, tooltips, overlays |
+| `UHeader` | Responsive header with mobile menu (`#title`, `#default`, `#right`, `#body`) |
+| `UFooter` | Footer (`#left`, `#default`, `#right`, `#top`, `#bottom`) |
+| `UFooterColumns` | Multi-column footer with link groups |
+| `UMain` | Main content area (respects `--ui-header-height`) |
+| `UContainer` | Centered max-width container (`--ui-container`) |
+
+## Element
+
+Essential UI building blocks.
+
+| Component | Key props |
+|---|---|
+| `UButton` | `label`, `icon`, `color`, `variant`, `size`, `loading`, `disabled`, `to` |
+| `UBadge` | `label`, `color`, `variant`, `size` |
+| `UAvatar` | `src`, `alt`, `icon`, `text`, `size` |
+| `UAvatarGroup` | `max`, `size` — wraps multiple `UAvatar` |
+| `UIcon` | `name`, `size` |
+| `UCard` | `variant` — slots: `#header`, `#default`, `#footer` |
+| `UAlert` | `title`, `description`, `icon`, `color`, `variant`, `close` |
+| `UBanner` | `title`, `icon`, `close` — sticky top banner |
+| `UChip` | `color`, `size`, `position` — notification dot on children |
+| `UKbd` | `value` — keyboard key display |
+| `USeparator` | `label`, `icon`, `orientation`, `type` |
+| `USkeleton` | `class` — loading placeholder |
+| `UProgress` | `value`, `max`, `color`, `size` |
+| `UCalendar` | `v-model`, `range` (boolean), `multiple` (boolean) |
+| `UCollapsible` | `v-model:open` — animated expand/collapse |
+| `UFieldGroup` | Groups form inputs horizontally/vertically |
+
+## Form
+
+Comprehensive form components for user input.
+
+| Component | Key props |
+|---|---|
+| `UInput` | `v-model`, `type`, `placeholder`, `icon`, `loading` |
+| `UTextarea` | `v-model`, `rows`, `autoresize`, `maxrows` |
+| `USelect` | `v-model`, `items` (flat `T[]` or grouped `T[][]`), `placeholder` |
+| `USelectMenu` | `v-model`, `items` (flat `T[]` or grouped `T[][]`), `searchable`, `multiple` |
+| `UInputMenu` | `v-model`, `items` (flat `T[]` or grouped `T[][]`), `searchable` — autocomplete |
+| `UInputNumber` | `v-model`, `min`, `max`, `step` |
+| `UInputDate` | `v-model`, `range` (boolean for range selection), `locale` |
+| `UInputTime` | `v-model`, `hour-cycle` (12/24), `granularity` |
+| `UInputTags` | `v-model`, `max`, `placeholder` |
+| `UPinInput` | `v-model`, `length`, `type`, `mask` |
+| `UCheckbox` | `v-model`, `label`, `description` |
+| `UCheckboxGroup` | `v-model`, `items`, `orientation` |
+| `URadioGroup` | `v-model`, `items`, `orientation` |
+| `USwitch` | `v-model`, `label`, `on-icon`, `off-icon` |
+| `USlider` | `v-model`, `min`, `max`, `step` |
+| `UColorPicker` | `v-model`, `format` (hex/rgb/hsl/cmyk/lab), `size` |
+| `UFileUpload` | `v-model`, `accept`, `multiple`, `variant` (area/button) |
+| `UForm` | `schema`, `state`, `@submit` — validation wrapper |
+| `UFormField` | `name`, `label`, `description`, `hint`, `required` |
+
+### Form validation
+
+Uses Standard Schema — works with Zod, Valibot, Yup, or Joi.
+
+```vue
+<script setup lang="ts">
+import { z } from 'zod'
+
+const schema = z.object({
+  email: z.string().email('Invalid email'),
+  password: z.string().min(8, 'Min 8 characters')
+})
+
+type Schema = z.output<typeof schema>
+const state = reactive<Partial<Schema>>({ email: '', password: '' })
+const form = ref()
+
+async function onSubmit() {
+  await form.value.validate()
+}
+</script>
+
+<template>
+  <UForm ref="form" :schema="schema" :state="state" @submit="onSubmit">
+    <UFormField name="email" label="Email" required>
+      <UInput v-model="state.email" type="email" />
+    </UFormField>
+
+    <UFormField name="password" label="Password" required>
+      <UInput v-model="state.password" type="password" />
+    </UFormField>
+
+    <UButton type="submit">Submit</UButton>
+  </UForm>
+</template>
+```
+
+With Valibot:
+
+```vue
+<script setup lang="ts">
+import * as v from 'valibot'
+
+const schema = v.object({
+  email: v.pipe(v.string(), v.email('Invalid email')),
+  password: v.pipe(v.string(), v.minLength(8, 'Min 8 characters'))
+})
+</script>
+```
+
+### File upload
+
+```vue
+<script setup>
+const files = ref<File[]>([])
+</script>
+
+<template>
+  <UFileUpload v-model="files" accept="image/*" multiple>
+    <template #actions="{ open }">
+      <UButton label="Upload" icon="i-lucide-upload" color="neutral" variant="outline" @click="open()" />
+    </template>
+  </UFileUpload>
+</template>
+```
+
+## Data
+
+Components for displaying and organizing data.
+
+| Component | Key props |
+|---|---|
+| `UTable` | `data`, `columns`, `loading`, `sticky` |
+| `UAccordion` | `items`, `type` (single/multiple), `collapsible` |
+| `UCarousel` | `items`, `orientation`, `arrows`, `dots` |
+| `UTimeline` | `items` — vertical timeline |
+| `UTree` | `items` — hierarchical tree |
+| `UUser` | `name`, `description`, `avatar` — user display |
+| `UEmpty` | `icon`, `title`, `description` — empty state |
+| `UMarquee` | `repeat`, `reverse`, `orientation`, `pauseOnHover` — infinite scroll |
+| `UScrollArea` | Custom scrollbar wrapper |
+
+## Navigation
+
+Components for user navigation and wayfinding.
+
+| Component | Key props |
+|---|---|
+| `UNavigationMenu` | `items` (flat `T[]` or grouped `T[][]`), `orientation` (horizontal/vertical) |
+| `UBreadcrumb` | `items` |
+| `UTabs` | `items`, `orientation`, `variant` |
+| `UStepper` | `items`, `orientation`, `color` |
+| `UPagination` | `v-model`, `total`, `items-per-page` |
+| `ULink` | `to`, `active`, `inactive` — styled NuxtLink |
+| `UCommandPalette` | `v-model:open`, `groups` (`{ id, label, items }[]`), `placeholder` |
+
+## Overlay
+
+Floating UI elements that appear above the main content. **All require `<UApp>` wrapper.**
+
+| Component | Key props |
+|---|---|
+| `UModal` | `v-model:open`, `title`, `description`, `fullscreen`, `scrollable` |
+| `USlideover` | `v-model:open`, `title`, `side` (left/right/top/bottom) |
+| `UDrawer` | `v-model:open`, `title`, `handle` |
+| `UPopover` | `arrow`, `content: { side, align }`, `openDelay`, `closeDelay` |
+| `UTooltip` | `text`, `content: { side }`, `delayDuration` |
+| `UDropdownMenu` | `items` (flat `T[]` or grouped `T[][]` with separators, supports nested `children`) |
+| `UContextMenu` | `items` (flat `T[]` or grouped `T[][]`) — right-click menu |
+| `UToast` | Used via `useToast()` composable |
+
+### Modal
+
+```vue
+<UModal v-model:open="isOpen" title="Edit" description="Edit your profile">
+  <template #body>Content</template>
+  <template #footer>
+    <UButton variant="ghost" @click="isOpen = false">Cancel</UButton>
+    <UButton @click="save">Save</UButton>
+  </template>
+</UModal>
+```
+
+Slots: `#content`, `#header`, `#body`, `#footer`
+
+### Slideover
+
+```vue
+<USlideover v-model:open="isOpen" title="Settings" side="right">
+  <template #body>Content</template>
+</USlideover>
+```
+
+### Drawer
+
+```vue
+<UDrawer v-model:open="isOpen" title="Options" handle>
+  <template #body>Content</template>
+</UDrawer>
+```
+
+### DropdownMenu
+
+Items accept a flat array or a nested array (each sub-array is rendered as a group separated by dividers):
+
+```vue
+<!-- Flat array -->
+<UDropdownMenu :items="[
+  { label: 'Edit', icon: 'i-lucide-pencil', onSelect: () => edit() },
+  { type: 'separator' },
+  { label: 'Delete', icon: 'i-lucide-trash', color: 'error' }
+]">
+  <UButton icon="i-lucide-ellipsis-vertical" variant="ghost" />
+</UDropdownMenu>
+
+<!-- Nested array (groups with automatic separators) -->
+<UDropdownMenu :items="[
+  [{ label: 'Edit', icon: 'i-lucide-pencil' }, { label: 'Duplicate', icon: 'i-lucide-copy' }],
+  [{ label: 'Delete', icon: 'i-lucide-trash', color: 'error' }]
+]">
+  <UButton icon="i-lucide-ellipsis-vertical" variant="ghost" />
+</UDropdownMenu>
+```
+
+### Toast
+
+```ts
+const toast = useToast()
+
+toast.add({
+  title: 'Success',
+  description: 'Changes saved',
+  color: 'success',
+  icon: 'i-lucide-check-circle',
+  duration: 5000,
+  actions: [{ label: 'Undo', onClick: () => undo() }]
+})
+```
+
+### Programmatic overlays
+
+```ts
+const overlay = useOverlay()
+
+// create() returns a reusable instance
+const confirmDialog = overlay.create(ConfirmDialog)
+
+// open() returns an object with .result (a Promise)
+const { result } = confirmDialog.open({
+  title: 'Delete?',
+  message: 'This cannot be undone.'
+})
+
+if (await result) {
+  // User confirmed
+}
+
+// Inside the overlay component, emit close with a value:
+// emit('close', true) or emit('close', false)
+```
+
+### CommandPalette
+
+```vue
+<script setup>
+const groups = [{
+  id: 'actions',
+  label: 'Actions',
+  items: [
+    { label: 'New file', icon: 'i-lucide-file-plus', onSelect: () => {} },
+    { label: 'Settings', to: '/settings' }
+  ]
+}]
+
+defineShortcuts({ meta_k: () => { isOpen.value = true } })
+</script>
+
+<UCommandPalette v-model:open="isOpen" :groups="groups" placeholder="Search..." />
+```
+
+## Page
+
+Pre-built sections for marketing and content pages.
+
+| Component | Purpose |
+|---|---|
+| `UPage` | Multi-column grid (`#left`, `#default`, `#right`) |
+| `UPageAside` | Sticky sidebar wrapper (visible from `lg`) |
+| `UPageHero` | Hero section with title, description, links, media |
+| `UPageSection` | Content section with headline, features grid |
+| `UPageCTA` | Call to action block |
+| `UPageHeader` | Page title and description |
+| `UPageBody` | Main content area with prose styling |
+| `UPageFeature` | Individual feature item |
+| `UPageGrid` | Grid layout for cards |
+| `UPageColumns` | Multi-column layout |
+| `UPageCard` | Content card for grids |
+| `UPageLogos` | Logo wall |
+| `UPageAnchors` | Anchor links (simpler TOC) |
+| `UPageLinks` | Related resource links |
+| `UPageList` | List items |
+| `UBlogPosts` | Responsive grid of blog posts (`orientation`) |
+| `UBlogPost` | Individual blog post card |
+| `UChangelogVersions` | Changelog version list |
+| `UChangelogVersion` | Individual changelog entry |
+| `UPricingPlans` | Pricing plan cards |
+| `UPricingTable` | Feature comparison table |
+
+## Dashboard
+
+Specialized components for admin interfaces with resizable panels and sidebars.
+
+| Component | Purpose |
+|---|---|
+| `UDashboardGroup` | Root wrapper — manages sidebar state |
+| `UDashboardSidebar` | Resizable/collapsible sidebar (`#header`, `#default`, `#footer`) |
+| `UDashboardPanel` | Content panel (`#header`, `#body`, `#footer`) |
+| `UDashboardNavbar` | Panel navbar (`#left`, `#default`, `#right`) |
+| `UDashboardToolbar` | Toolbar for filters/actions |
+| `UDashboardSearch` | Command palette for dashboards |
+| `UDashboardSearchButton` | Search trigger button |
+| `UDashboardSidebarToggle` | Mobile sidebar toggle |
+| `UDashboardSidebarCollapse` | Desktop collapse button |
+| `UDashboardResizeHandle` | Custom resize handle |
+
+## Chat
+
+Components for conversational AI interfaces, powered by [Vercel AI SDK](https://ai-sdk.dev/).
+
+| Component | Purpose |
+|---|---|
+| `UChatMessages` | Scrollable message list with auto-scroll |
+| `UChatMessage` | Individual message display |
+| `UChatPrompt` | Enhanced textarea for prompts |
+| `UChatPromptSubmit` | Submit button with status handling |
+| `UChatPalette` | Chat layout for overlays |
+
+## Editor
+
+Rich text editor powered by [TipTap](https://tiptap.dev/).
+
+| Component | Purpose |
+|---|---|
+| `UEditor` | Editor (`v-model`, `content-type`: json/html/markdown) |
+| `UEditorToolbar` | Toolbar (`layout`: fixed/bubble/floating) |
+| `UEditorDragHandle` | Block drag-and-drop |
+| `UEditorSuggestionMenu` | Slash command menu |
+| `UEditorMentionMenu` | @ mention menu |
+| `UEditorEmojiMenu` | Emoji picker |
+
+## Content
+
+Components integrating with `@nuxt/content`.
+
+| Component | Purpose |
+|---|---|
+| `UContentNavigation` | Sidebar navigation tree |
+| `UContentToc` | Table of contents |
+| `UContentSurround` | Prev/next links |
+| `UContentSearch` | Search command palette |
+| `UContentSearchButton` | Search trigger button |
+
+## Color Mode
+
+| Component | Purpose |
+|---|---|
+| `UColorModeButton` | Toggle light/dark button |
+| `UColorModeSwitch` | Toggle light/dark switch |
+| `UColorModeSelect` | Dropdown selector |
+| `UColorModeAvatar` | Avatar with different src per mode |
+| `UColorModeImage` | Image with different src per mode |
diff --git a/.claude/skills/nuxt-ui/references/composables.md b/.claude/skills/nuxt-ui/references/composables.md
new file mode 100644
index 0000000..b79fbc1
--- /dev/null
+++ b/.claude/skills/nuxt-ui/references/composables.md
@@ -0,0 +1,127 @@
+# Composables
+
+## useToast
+
+Show notifications. Requires `<UApp>` wrapper.
+
+```ts
+const toast = useToast()
+
+toast.add({
+  title: 'Success',
+  description: 'Item saved',
+  color: 'success',       // primary, success, error, warning, info
+  icon: 'i-lucide-check-circle',
+  duration: 5000,         // 0 = never dismiss
+  actions: [{ label: 'Undo', onClick: () => {} }]
+})
+
+toast.remove('toast-id')
+toast.clear()
+```
+
+## useOverlay
+
+Programmatically create modals, slideovers, drawers.
+
+```ts
+const overlay = useOverlay()
+
+// create() returns a reusable instance with open(), close(), patch()
+const modal = overlay.create(MyComponent)
+
+// open() accepts props and returns an object with .result (a Promise)
+const { result } = modal.open({ title: 'Confirm' })
+
+if (await result) {
+  // User confirmed
+}
+
+// Inside the overlay component, emit close with a value:
+// emit('close', true) or emit('close', false)
+
+// You can also close from outside:
+modal.close(false)
+```
+
+## defineShortcuts
+
+Define keyboard shortcuts.
+
+```ts
+defineShortcuts({
+  meta_k: () => openSearch(),        // Cmd+K (Mac) / Ctrl+K (Win)
+  meta_shift_p: () => openPalette(), // Cmd+Shift+P
+  escape: () => close(),
+  ctrl_s: () => save(),
+
+  // With condition
+  meta_enter: {
+    handler: () => submit(),
+    whenever: [isFormValid]
+  }
+})
+```
+
+| Key | Meaning |
+|---|---|
+| `meta` | Cmd (Mac) / Ctrl (Windows) |
+| `ctrl` | Ctrl key |
+| `alt` | Alt / Option key |
+| `shift` | Shift key |
+| `_` | Key separator |
+
+## defineLocale / extendLocale
+
+i18n locale definition.
+
+```ts
+import { fr } from '@nuxt/ui/locale'
+
+// Use a built-in locale (50+ available)
+// <UApp :locale="fr">
+
+// Define custom locale
+const locale = defineLocale({
+  name: 'Español',
+  code: 'es',
+  dir: 'ltr',
+  messages: {
+    select: { placeholder: 'Seleccionar...' }
+  }
+})
+
+// Extend existing locale
+import { en } from '@nuxt/ui/locale'
+
+const customEn = extendLocale(en, {
+  messages: { commandPalette: { placeholder: 'Search a component...' } }
+})
+```
+
+```vue
+<UApp :locale="fr"><NuxtPage /></UApp>
+```
+
+## extractShortcuts
+
+Extract shortcut keys from a list of items (e.g., dropdown menu items) into a shortcuts map for `defineShortcuts`.
+
+```ts
+const items = [
+  { label: 'New file', kbds: ['meta', 'n'], onSelect: () => newFile() },
+  { label: 'Save', kbds: ['meta', 's'], onSelect: () => save() }
+]
+
+defineShortcuts(extractShortcuts(items))
+```
+
+## Quick reference
+
+| Composable | Purpose |
+|---|---|
+| `useToast` | Show notifications |
+| `useOverlay` | Programmatic modals/slideovers |
+| `defineShortcuts` | Keyboard shortcuts |
+| `defineLocale` / `extendLocale` | i18n locale |
+| `extractShortcuts` | Parse shortcut definitions |
diff --git a/.claude/skills/nuxt-ui/references/layouts/chat.md b/.claude/skills/nuxt-ui/references/layouts/chat.md
new file mode 100644
index 0000000..2980aa5
--- /dev/null
+++ b/.claude/skills/nuxt-ui/references/layouts/chat.md
@@ -0,0 +1,271 @@
+# Chat Layout
+
+Build AI chat interfaces with message streams, reasoning, tool calling, and Vercel AI SDK integration.
+
+## Component tree
+
+```
+UApp
+└── NuxtLayout (dashboard)
+    └── UDashboardGroup
+        ├── UDashboardSidebar (conversations)
+        └── NuxtPage
+            └── UDashboardPanel
+                ├── #header → UDashboardNavbar
+                ├── #body → UContainer → UChatMessages
+                │                         ├── #content → UChatReasoning, UChatTool, MDC
+                │                         └── #indicator (loading)
+                └── #footer → UContainer → UChatPrompt
+                                            └── UChatPromptSubmit
+```
+
+## Setup
+
+### Install AI SDK
+
+```bash
+pnpm add ai @ai-sdk/gateway @ai-sdk/vue
+```
+
+### Server endpoint
+
+```ts [server/api/chat.post.ts]
+import { streamText, convertToModelMessages } from 'ai'
+import { gateway } from '@ai-sdk/gateway'
+
+export default defineEventHandler(async (event) => {
+  const { messages } = await readBody(event)
+
+  return streamText({
+    model: gateway('anthropic/claude-sonnet-4.6'),
+    system: 'You are a helpful assistant.',
+    messages: await convertToModelMessages(messages)
+  }).toUIMessageStreamResponse()
+})
+```
+
+## Full page chat
+
+```vue [pages/chat/[id].vue]
+<script setup lang="ts">
+import { isReasoningUIPart, isTextUIPart, isToolUIPart, getToolName } from 'ai'
+import { Chat } from '@ai-sdk/vue'
+import { isPartStreaming, isToolStreaming } from '@nuxt/ui/utils/ai'
+
+definePageMeta({ layout: 'dashboard' })
+
+const input = ref('')
+
+const chat = new Chat({
+  onError(error) {
+    console.error(error)
+  }
+})
+
+function onSubmit() {
+  if (!input.value.trim()) return
+
+  chat.sendMessage({ text: input.value })
+
+  input.value = ''
+}
+</script>
+
+<template>
+  <UDashboardPanel>
+    <template #header>
+      <UDashboardNavbar title="Chat" />
+    </template>
+
+    <template #body>
+      <UContainer>
+        <UChatMessages :messages="chat.messages" :status="chat.status">
+          <template #content="{ message }">
+            <template v-for="(part, index) in message.parts" :key="`${message.id}-${part.type}-${index}`">
+              <UChatReasoning
+                v-if="isReasoningUIPart(part)"
+                :text="part.text"
+                :streaming="isPartStreaming(part)"
+              >
+                <MDC
+                  :value="part.text"
+                  :cache-key="`reasoning-${message.id}-${index}`"
+                  class="*:first:mt-0 *:last:mb-0"
+                />
+              </UChatReasoning>
+
+              <UChatTool
+                v-else-if="isToolUIPart(part)"
+                :text="getToolName(part)"
+                :streaming="isToolStreaming(part)"
+              />
+
+              <template v-else-if="isTextUIPart(part)">
+                <MDC
+                  v-if="message.role === 'assistant'"
+                  :value="part.text"
+                  :cache-key="`${message.id}-${index}`"
+                  class="*:first:mt-0 *:last:mb-0"
+                />
+                <p v-else-if="message.role === 'user'" class="whitespace-pre-wrap">
+                  {{ part.text }}
+                </p>
+              </template>
+            </template>
+          </template>
+        </UChatMessages>
+      </UContainer>
+    </template>
+
+    <template #footer>
+      <UContainer class="pb-4 sm:pb-6">
+        <UChatPrompt v-model="input" :error="chat.error" @submit="onSubmit">
+          <UChatPromptSubmit :status="chat.status" @stop="chat.stop()" @reload="chat.regenerate()" />
+        </UChatPrompt>
+      </UContainer>
+    </template>
+  </UDashboardPanel>
+</template>
+```
+
+## Key components
+
+### ChatMessages
+
+Scrollable message list with auto-scroll and loading indicator.
+
+| Prop | Description |
+|---|---|
+| `messages` | Array of AI SDK messages |
+| `status` | `'submitted'`, `'streaming'`, `'ready'`, `'error'` |
+
+Slots: `#content` (receives `{ message }`), `#actions` (per-message), `#indicator` (loading)
+
+### ChatMessage
+
+Individual message bubble with avatar, actions, and slots.
+
+| Prop | Description |
+|---|---|
+| `message` | AI SDK UIMessage object |
+| `side` | `'left'` (default), `'right'` |
+
+### ChatReasoning
+
+Collapsible block for AI reasoning / thinking process. Auto-opens during streaming, auto-closes when done.
+
+| Prop | Description |
+|---|---|
+| `text` | Reasoning text (displayed inside collapsible content) |
+| `streaming` | Whether reasoning is actively streaming |
+| `open` | Controlled open state |
+
+Use `isPartStreaming(part)` from `@nuxt/ui/utils/ai` to determine streaming state.
+
+### ChatTool
+
+Collapsible block for AI tool invocation status.
+
+| Prop | Description |
+|---|---|
+| `text` | Tool status text (displayed in trigger) |
+| `icon` | Icon name |
+| `loading` | Show loading spinner on icon |
+| `streaming` | Whether tool is actively running |
+| `suffix` | Secondary text after label |
+| `variant` | `'inline'` (default), `'card'` |
+| `chevron` | `'trailing'` (default), `'leading'` |
+
+Use `isToolStreaming(part)` from `@nuxt/ui/utils/ai` to determine if a tool is still running.
+
+### ChatShimmer
+
+Text shimmer animation for streaming states. Automatically used by ChatReasoning and ChatTool when streaming.
+
+### ChatPrompt
+
+Enhanced textarea form for prompts. Accepts all Textarea props.
+
+| Prop | Description |
+|---|---|
+| `v-model` | Input text binding |
+| `error` | Error from chat instance |
+| `variant` | `'outline'` (default), `'subtle'`, `'soft'`, `'ghost'`, `'none'` |
+
+Slots: `#default` (submit button), `#footer` (below input, e.g. model selector)
+
+### ChatPromptSubmit
+
+Submit button with automatic status handling (send/stop/reload).
+
+### ChatPalette
+
+Layout wrapper for chat inside overlays (Modal, Slideover, Drawer).
+
+## Chat in a modal
+
+```vue
+<UModal v-model:open="isOpen">
+  <template #content>
+    <UChatPalette>
+      <UChatMessages :messages="chat.messages" :status="chat.status" />
+
+      <template #prompt>
+        <UChatPrompt v-model="input" @submit="onSubmit">
+          <UChatPromptSubmit :status="chat.status" />
+        </UChatPrompt>
+      </template>
+    </UChatPalette>
+  </template>
+</UModal>
+```
+
+## With model selector
+
+```vue
+<script setup lang="ts">
+const input = ref('')
+const model = ref('claude-opus-4.6')
+const models = [
+  { label: 'Claude Opus 4.6', value: 'claude-opus-4.6', icon: 'i-simple-icons-anthropic' },
+  { label: 'Gemini 3 Pro', value: 'gemini-3-pro', icon: 'i-simple-icons-googlegemini' },
+  { label: 'GPT-5', value: 'gpt-5', icon: 'i-simple-icons-openai' }
+]
+</script>
+
+<template>
+  <UChatPrompt v-model="input" @submit="onSubmit">
+    <UChatPromptSubmit :status="chat.status" />
+
+    <template #footer>
+      <USelect
+        v-model="model"
+        :icon="models.find(m => m.value === model)?.icon"
+        placeholder="Select a model"
+        variant="ghost"
+        :items="models"
+      />
+    </template>
+  </UChatPrompt>
+</template>
+```
+
+## Conversation sidebar
+
+```vue [layouts/dashboard.vue]
+<template>
+  <UDashboardGroup>
+    <UDashboardSidebar collapsible resizable>
+      <template #header>
+        <UButton icon="i-lucide-plus" label="New chat" block />
+      </template>
+
+      <template #default>
+        <UNavigationMenu :items="conversations" orientation="vertical" />
+      </template>
+    </UDashboardSidebar>
+
+    <slot />
+  </UDashboardGroup>
+</template>
+```
diff --git a/.claude/skills/nuxt-ui/references/layouts/dashboard.md b/.claude/skills/nuxt-ui/references/layouts/dashboard.md
new file mode 100644
index 0000000..e7933a2
--- /dev/null
+++ b/.claude/skills/nuxt-ui/references/layouts/dashboard.md
@@ -0,0 +1,220 @@
+# Dashboard Layout
+
+Build admin interfaces with resizable sidebars, multi-panel layouts, and toolbars.
+
+## Component tree
+
+```
+UApp
+└── NuxtLayout (dashboard)
+    └── UDashboardGroup
+        ├── UDashboardSidebar
+        │   ├── #header (logo, search button)
+        │   ├── #default (navigation) — receives { collapsed } slot prop
+        │   └── #footer (user menu)
+        └── NuxtPage
+            └── UDashboardPanel
+                ├── #header → UDashboardNavbar + UDashboardToolbar
+                ├── #body (scrollable content)
+                └── #footer (optional)
+```
+
+## Layout
+
+```vue [layouts/dashboard.vue]
+<script setup lang="ts">
+import type { NavigationMenuItem } from '@nuxt/ui'
+
+const items = computed<NavigationMenuItem[]>(() => [{
+  label: 'Home',
+  icon: 'i-lucide-house',
+  to: '/dashboard'
+}, {
+  label: 'Inbox',
+  icon: 'i-lucide-inbox',
+  to: '/dashboard/inbox'
+}, {
+  label: 'Users',
+  icon: 'i-lucide-users',
+  to: '/dashboard/users'
+}, {
+  label: 'Settings',
+  icon: 'i-lucide-settings',
+  to: '/dashboard/settings'
+}])
+</script>
+
+<template>
+  <UDashboardGroup>
+    <UDashboardSidebar collapsible resizable>
+      <template #header="{ collapsed }">
+        <UDashboardSearchButton :collapsed="collapsed" />
+      </template>
+
+      <template #default="{ collapsed }">
+        <UNavigationMenu
+          :items="items"
+          orientation="vertical"
+          :ui="{ link: collapsed ? 'justify-center' : undefined }"
+        />
+      </template>
+
+      <template #footer="{ collapsed }">
+        <UButton
+          :icon="collapsed ? 'i-lucide-log-out' : undefined"
+          :label="collapsed ? undefined : 'Sign out'"
+          color="neutral"
+          variant="ghost"
+          block
+        />
+      </template>
+    </UDashboardSidebar>
+
+    <slot />
+  </UDashboardGroup>
+</template>
+```
+
+## Page
+
+```vue [pages/dashboard/index.vue]
+<script setup lang="ts">
+definePageMeta({ layout: 'dashboard' })
+</script>
+
+<template>
+  <UDashboardPanel>
+    <template #header>
+      <UDashboardNavbar title="Home">
+        <template #right>
+          <UButton icon="i-lucide-plus" label="New" />
+        </template>
+      </UDashboardNavbar>
+    </template>
+
+    <template #body>
+      <!-- Page content -->
+    </template>
+  </UDashboardPanel>
+</template>
+```
+
+## Key components
+
+### DashboardGroup
+
+Root layout wrapper. Manages sidebar state and persistence.
+
+| Prop | Default | Description |
+|---|---|---|
+| `storage` | `'cookie'` | State persistence: `'cookie'`, `'localStorage'`, `false` |
+| `storage-key` | `'dashboard'` | Storage key name |
+| `unit` | `'percentages'` | Size unit: `'percentages'` or `'pixels'` |
+
+### DashboardSidebar
+
+Resizable, collapsible sidebar. Must be inside `DashboardGroup`.
+
+| Prop | Default | Description |
+|---|---|---|
+| `resizable` | `false` | Enable resize by dragging |
+| `collapsible` | `false` | Enable collapse when dragged to edge |
+| `side` | `'left'` | `'left'` or `'right'` |
+| `mode` | `'slideover'` | Mobile menu mode: `'modal'`, `'slideover'`, `'drawer'` |
+
+Slots receive `{ collapsed }` prop. Control state: `v-model:collapsed`, `v-model:open` (mobile).
+
+### DashboardPanel
+
+Content panel with `#header`, `#body` (scrollable), `#footer`, and `#default` (raw) slots.
+
+| Prop | Default | Description |
+|---|---|---|
+| `id` | `—` | Unique ID (required for multi-panel) |
+| `resizable` | `false` | Enable resize by dragging |
+
+### DashboardNavbar / DashboardToolbar
+
+Navbar has `#left`, `#default`, `#right` slots and a `title` prop. Toolbar has the same slots for filters/actions below the navbar.
+
+## Multi-panel (list-detail)
+
+```vue [pages/dashboard/inbox.vue]
+<script setup lang="ts">
+definePageMeta({ layout: 'dashboard' })
+</script>
+
+<template>
+  <UDashboardPanel id="inbox-list" resizable>
+    <template #header>
+      <UDashboardNavbar title="Inbox" />
+    </template>
+    <template #body>
+      <!-- Email list -->
+    </template>
+  </UDashboardPanel>
+
+  <UDashboardPanel id="inbox-detail" class="hidden lg:flex">
+    <template #header>
+      <UDashboardNavbar title="Message" />
+    </template>
+    <template #body>
+      <!-- Email content -->
+    </template>
+  </UDashboardPanel>
+</template>
+```
+
+## With toolbar
+
+```vue
+<UDashboardPanel>
+  <template #header>
+    <UDashboardNavbar title="Users" />
+
+    <UDashboardToolbar>
+      <template #left>
+        <UInput icon="i-lucide-search" placeholder="Search..." />
+      </template>
+      <template #right>
+        <USelect :items="['All', 'Active', 'Inactive']" />
+      </template>
+    </UDashboardToolbar>
+  </template>
+</UDashboardPanel>
+```
+
+## With search
+
+```vue [layouts/dashboard.vue]
+<template>
+  <UDashboardGroup>
+    <UDashboardSidebar>
+      <template #header>
+        <UDashboardSearchButton />
+      </template>
+      <!-- ... -->
+    </UDashboardSidebar>
+
+    <slot />
+
+    <UDashboardSearch :groups="searchGroups" />
+  </UDashboardGroup>
+</template>
+```
+
+## Right sidebar
+
+```vue
+<UDashboardGroup>
+  <UDashboardSidebar collapsible resizable>
+    <!-- Left sidebar -->
+  </UDashboardSidebar>
+
+  <slot />
+
+  <UDashboardSidebar side="right" resizable>
+    <!-- Right sidebar -->
+  </UDashboardSidebar>
+</UDashboardGroup>
+```
diff --git a/.claude/skills/nuxt-ui/references/layouts/docs.md b/.claude/skills/nuxt-ui/references/layouts/docs.md
new file mode 100644
index 0000000..042f331
--- /dev/null
+++ b/.claude/skills/nuxt-ui/references/layouts/docs.md
@@ -0,0 +1,141 @@
+# Docs Layout
+
+Build documentation sites with sidebar navigation, table of contents, and surround links.
+
+> Requires `@nuxt/content` module for navigation, search, and TOC.
+
+## Component tree
+
+```
+UApp
+├── UHeader
+├── UMain
+│   └── NuxtLayout (docs)
+│       └── UPage
+│           ├── #left → UPageAside → UContentNavigation
+│           └── NuxtPage
+│               ├── UPageHeader
+│               ├── UPageBody → ContentRenderer + UContentSurround
+│               └── #right → UContentToc
+└── UFooter
+```
+
+## App shell
+
+```vue [app.vue]
+<script setup lang="ts">
+import type { NavigationMenuItem } from '@nuxt/ui'
+
+const route = useRoute()
+
+const { data: navigation } = await useAsyncData('navigation', () => queryCollectionNavigation('docs'))
+
+provide('navigation', navigation)
+
+const items = computed<NavigationMenuItem[]>(() => [{
+  label: 'Docs',
+  to: '/docs/getting-started',
+  active: route.path.startsWith('/docs')
+}])
+</script>
+
+<template>
+  <UApp>
+    <UHeader>
+      <template #title>
+        <Logo class="h-6 w-auto" />
+      </template>
+
+      <UNavigationMenu :items="items" />
+
+      <template #right>
+        <UContentSearchButton />
+        <UColorModeButton />
+      </template>
+    </UHeader>
+
+    <UMain>
+      <NuxtLayout>
+        <NuxtPage />
+      </NuxtLayout>
+    </UMain>
+
+    <UFooter />
+
+    <UContentSearch :navigation="navigation" />
+  </UApp>
+</template>
+```
+
+## Layout
+
+```vue [layouts/docs.vue]
+<script setup lang="ts">
+import type { ContentNavigationItem } from '@nuxt/content'
+
+const navigation = inject<Ref<ContentNavigationItem[]>>('navigation')
+</script>
+
+<template>
+  <UPage>
+    <template #left>
+      <UPageAside>
+        <UContentNavigation :navigation="navigation" />
+      </UPageAside>
+    </template>
+
+    <slot />
+  </UPage>
+</template>
+```
+
+## Page
+
+```vue [pages/docs/[...slug].vue]
+<script setup lang="ts">
+const route = useRoute()
+
+definePageMeta({ layout: 'docs' })
+
+const { data: page } = await useAsyncData(route.path, () => {
+  return queryCollection('docs').path(route.path).first()
+})
+
+const { data: surround } = await useAsyncData(`${route.path}-surround`, () => {
+  return queryCollectionItemSurroundings('docs', route.path)
+})
+</script>
+
+<template>
+  <UPage>
+    <UPageHeader :title="page.title" :description="page.description" />
+
+    <UPageBody>
+      <ContentRenderer :value="page" />
+
+      <USeparator />
+
+      <UContentSurround :surround="surround" />
+    </UPageBody>
+
+    <template #right>
+      <UContentToc :links="page.body.toc.links" />
+    </template>
+  </UPage>
+</template>
+```
+
+> The outer `UPage` in the layout handles the left sidebar. The inner `UPage` in the page handles the right sidebar. They nest correctly.
+
+## Key components
+
+- `UPage` — Multi-column grid layout with `#left`, `#default`, `#right` slots
+- `UPageAside` — Sticky sidebar wrapper (visible from `lg` breakpoint)
+- `UPageHeader` — Page title and description
+- `UPageBody` — Main content area
+- `UContentNavigation` — Sidebar navigation tree
+- `UContentToc` — Table of contents
+- `UContentSurround` — Prev/next links
+- `UContentSearch` / `UContentSearchButton` — Search command palette
+- `UPageAnchors` — Simpler alternative to full TOC
+- `UPageLinks` — Related resource links
diff --git a/.claude/skills/nuxt-ui/references/layouts/editor.md b/.claude/skills/nuxt-ui/references/layouts/editor.md
new file mode 100644
index 0000000..aae5d75
--- /dev/null
+++ b/.claude/skills/nuxt-ui/references/layouts/editor.md
@@ -0,0 +1,168 @@
+# Editor Layout
+
+Build a rich text editor with toolbars, slash commands, mentions, and drag-and-drop.
+
+## Component tree
+
+```
+UApp
+├── UHeader
+├── UMain
+│   └── NuxtPage
+│       └── UContainer
+│           └── UEditor
+│               ├── UEditorToolbar (fixed / bubble / floating)
+│               ├── UEditorDragHandle
+│               ├── UEditorSuggestionMenu
+│               ├── UEditorMentionMenu
+│               └── UEditorEmojiMenu
+└── UFooter
+```
+
+## Page
+
+```vue [pages/editor.vue]
+<script setup lang="ts">
+const content = ref({
+  type: 'doc',
+  content: [
+    {
+      type: 'heading',
+      attrs: { level: 1 },
+      content: [{ type: 'text', text: 'Hello World' }]
+    },
+    {
+      type: 'paragraph',
+      content: [{ type: 'text', text: 'Start writing...' }]
+    }
+  ]
+})
+</script>
+
+<template>
+  <UPage>
+    <UPageHeader title="Editor">
+      <template #actions>
+        <UButton label="Save" icon="i-lucide-save" />
+      </template>
+    </UPageHeader>
+
+    <UPageBody>
+      <UEditor v-slot="{ editor }" v-model="content">
+        <UEditorToolbar :editor="editor" />
+        <UEditorSuggestionMenu :editor="editor" />
+        <UEditorMentionMenu
+          :editor="editor"
+          :items="[
+            { label: 'Benjamin', avatar: { src: 'https://github.com/benjamincanac.png' } },
+            { label: 'Sébastien', avatar: { src: 'https://github.com/atinux.png' } }
+          ]"
+        />
+        <UEditorEmojiMenu :editor="editor" />
+        <UEditorDragHandle :editor="editor" />
+      </UEditor>
+    </UPageBody>
+  </UPage>
+</template>
+```
+
+> If you encounter prosemirror-related errors, add prosemirror packages to `vite.optimizeDeps.include` in `nuxt.config.ts`.
+
+## Key components
+
+- `UEditor` — Rich text editor (`v-model` accepts JSON, HTML, or markdown via `content-type` prop)
+- `UEditorToolbar` — Toolbar with `layout`: `'fixed'` (default), `'bubble'` (on selection), `'floating'` (on empty lines)
+- `UEditorDragHandle` — Block drag-and-drop handle
+- `UEditorSuggestionMenu` — Slash command menu
+- `UEditorMentionMenu` — @ mention menu
+- `UEditorEmojiMenu` — Emoji picker
+
+## Toolbar modes
+
+```vue
+<!-- Fixed (default) -->
+<UEditor v-model="content">
+  <UEditorToolbar />
+</UEditor>
+
+<!-- Bubble (appears on text selection) -->
+<UEditor v-model="content">
+  <UEditorToolbar layout="bubble" />
+</UEditor>
+
+<!-- Floating (appears on empty lines) -->
+<UEditor v-model="content">
+  <UEditorToolbar layout="floating" />
+</UEditor>
+```
+
+## Content types
+
+```vue
+<!-- JSON (default) -->
+<UEditor v-model="jsonContent" />
+
+<!-- HTML -->
+<UEditor v-model="htmlContent" content-type="html" />
+
+<!-- Markdown -->
+<UEditor v-model="markdownContent" content-type="markdown" />
+```
+
+## With document sidebar
+
+Combine with Dashboard components for a multi-document editor with a sidebar.
+
+```vue [layouts/editor.vue]
+<template>
+  <UDashboardGroup>
+    <UDashboardSidebar collapsible resizable>
+      <template #header>
+        <UButton icon="i-lucide-plus" label="New document" block />
+      </template>
+
+      <template #default>
+        <UNavigationMenu
+          :items="documents.map(doc => ({
+            label: doc.title,
+            to: `/editor/${doc.id}`,
+            icon: 'i-lucide-file-text'
+          }))"
+          orientation="vertical"
+        />
+      </template>
+    </UDashboardSidebar>
+
+    <slot />
+  </UDashboardGroup>
+</template>
+```
+
+```vue [pages/editor/[id].vue]
+<script setup lang="ts">
+definePageMeta({ layout: 'editor' })
+
+const content = ref({ type: 'doc', content: [] })
+</script>
+
+<template>
+  <UDashboardPanel>
+    <template #header>
+      <UDashboardNavbar title="Editor">
+        <template #right>
+          <UButton label="Save" icon="i-lucide-save" />
+        </template>
+      </UDashboardNavbar>
+    </template>
+
+    <UContainer class="py-8">
+      <UEditor v-slot="{ editor }" v-model="content">
+        <UEditorToolbar :editor="editor" />
+        <UEditorSuggestionMenu :editor="editor" />
+        <UEditorEmojiMenu :editor="editor" />
+        <UEditorDragHandle :editor="editor" />
+      </UEditor>
+    </UContainer>
+  </UDashboardPanel>
+</template>
+```
diff --git a/.claude/skills/nuxt-ui/references/layouts/page.md b/.claude/skills/nuxt-ui/references/layouts/page.md
new file mode 100644
index 0000000..fac18ae
--- /dev/null
+++ b/.claude/skills/nuxt-ui/references/layouts/page.md
@@ -0,0 +1,260 @@
+# Page Layout
+
+Build public-facing pages — landing, blog, changelog, pricing — using the Header + Main + Footer shell with Page components.
+
+## App shell
+
+```vue [app.vue]
+<script setup lang="ts">
+import type { NavigationMenuItem } from '@nuxt/ui'
+
+const items = computed<NavigationMenuItem[]>(() => [{
+  label: 'Features',
+  to: '#features'
+}, {
+  label: 'Pricing',
+  to: '/pricing'
+}, {
+  label: 'Blog',
+  to: '/blog'
+}])
+</script>
+
+<template>
+  <UApp>
+    <UHeader>
+      <template #title>
+        <Logo class="h-6 w-auto" />
+      </template>
+
+      <UNavigationMenu :items="items" />
+
+      <template #right>
+        <UColorModeButton />
+        <UButton label="Sign in" color="neutral" variant="ghost" />
+        <UButton label="Get started" />
+      </template>
+
+      <template #body>
+        <UNavigationMenu :items="items" orientation="vertical" class="-mx-2.5" />
+      </template>
+    </UHeader>
+
+    <UMain>
+      <NuxtPage />
+    </UMain>
+
+    <UFooter>
+      <template #left>
+        <p class="text-muted text-sm">Copyright © {{ new Date().getFullYear() }}</p>
+      </template>
+      <template #right>
+        <UButton icon="i-simple-icons-github" color="neutral" variant="ghost" to="https://github.com" target="_blank" />
+      </template>
+    </UFooter>
+  </UApp>
+</template>
+```
+
+## Landing page
+
+```vue [pages/index.vue]
+<template>
+  <UPageHero
+    title="Build faster with Nuxt UI"
+    description="A comprehensive Vue UI component library."
+    :links="[
+      { label: 'Get started', to: '/docs', icon: 'i-lucide-square-play' },
+      { label: 'Learn more', color: 'neutral', variant: 'subtle', trailingIcon: 'i-lucide-arrow-right' }
+    ]"
+    orientation="horizontal"
+  >
+    <img src="/hero-image.png" alt="App screenshot" class="rounded-lg shadow-2xl ring ring-default" />
+  </UPageHero>
+
+  <UPageSection
+    id="features"
+    headline="Features"
+    title="Everything you need"
+    description="A comprehensive suite of components and utilities."
+    :features="[
+      { title: 'Accessible', description: 'Built on Reka UI with full ARIA support.', icon: 'i-lucide-accessibility' },
+      { title: 'Customizable', description: 'Tailwind Variants theming with full control.', icon: 'i-lucide-palette' },
+      { title: 'Responsive', description: 'Mobile-first components.', icon: 'i-lucide-monitor-smartphone' }
+    ]"
+  />
+
+  <UPageCTA
+    title="Trusted by thousands of developers"
+    description="Join the community and start building today."
+    :links="[
+      { label: 'Get started', color: 'neutral' },
+      { label: 'Star on GitHub', color: 'neutral', variant: 'subtle', trailingIcon: 'i-lucide-arrow-right' }
+    ]"
+  />
+
+  <UPageSection id="pricing" headline="Pricing" title="Simple, transparent pricing">
+    <UPricingPlans
+      :plans="[
+        { title: 'Free', price: '$0', description: 'For personal projects', features: ['10 components', 'Community support'] },
+        { title: 'Pro', price: '$99', description: 'For teams', features: ['All components', 'Priority support'], highlight: true },
+        { title: 'Enterprise', price: 'Custom', description: 'For large teams', features: ['Custom components', 'Dedicated support'] }
+      ]"
+    />
+  </UPageSection>
+</template>
+```
+
+## Blog listing
+
+```vue [pages/blog/index.vue]
+<script setup lang="ts">
+const { data: posts } = await useAsyncData('posts', () => queryCollection('posts').all())
+</script>
+
+<template>
+  <UPage>
+    <UPageHero title="Blog" description="The latest news and updates from our team." />
+
+    <UPageBody>
+      <UContainer>
+        <UBlogPosts>
+          <UBlogPost
+            v-for="(post, index) in posts"
+            :key="index"
+            v-bind="post"
+            :to="post.path"
+          />
+        </UBlogPosts>
+      </UContainer>
+    </UPageBody>
+  </UPage>
+</template>
+```
+
+## Blog article
+
+```vue [pages/blog/[slug].vue]
+<script setup lang="ts">
+const route = useRoute()
+
+const { data: post } = await useAsyncData(route.path, () => {
+  return queryCollection('posts').path(route.path).first()
+})
+</script>
+
+<template>
+  <UPage>
+    <UPageHeader :title="post.title" :description="post.description" />
+
+    <UPageBody>
+      <ContentRenderer :value="post" />
+    </UPageBody>
+
+    <template #right>
+      <UContentToc :links="post.body.toc.links" />
+    </template>
+  </UPage>
+</template>
+```
+
+## Changelog
+
+```vue [pages/changelog.vue]
+<script setup lang="ts">
+const { data: versions } = await useAsyncData('versions', () => queryCollection('changelog').all())
+</script>
+
+<template>
+  <UPage>
+    <UPageHero title="Changelog" />
+
+    <UPageBody>
+      <UContainer>
+        <UChangelogVersions>
+          <UChangelogVersion v-for="(version, index) in versions" :key="index" v-bind="version" />
+        </UChangelogVersions>
+      </UContainer>
+    </UPageBody>
+  </UPage>
+</template>
+```
+
+## Key components
+
+### Page sections
+
+- `UPageHero` — Hero with title, description, links, and optional media (`orientation`: horizontal/vertical)
+- `UPageSection` — Content section with headline, title, description, and `features` grid
+- `UPageCTA` — Call to action block
+- `UPageHeader` — Page title and description
+- `UPageBody` — Main content area with prose styling
+
+### Grids & cards
+
+- `UPageGrid` / `UPageColumns` — Grid layouts
+- `UPageCard` — Content card for grids
+- `UPageFeature` — Individual feature item
+- `UPageLogos` — Logo wall
+
+### Blog & changelog
+
+- `UBlogPosts` — Responsive grid of posts (`orientation`: horizontal/vertical)
+- `UBlogPost` — Individual post card
+- `UChangelogVersions` / `UChangelogVersion` — Changelog entries
+
+### Pricing
+
+- `UPricingPlans` — Pricing plan cards
+- `UPricingTable` — Feature comparison table
+
+### Footer
+
+- `UFooterColumns` — Multi-column footer with link groups
+
+## Variations
+
+### Alternating sections
+
+```vue
+<UPageSection title="Feature A" orientation="horizontal">
+  <img src="/feature-a.png" />
+</UPageSection>
+
+<UPageSection title="Feature B" orientation="horizontal" reverse>
+  <img src="/feature-b.png" />
+</UPageSection>
+```
+
+### Feature grid
+
+```vue
+<UPageSection headline="Features" title="Why choose us">
+  <UPageGrid>
+    <UPageCard v-for="feature in features" :key="feature.title" v-bind="feature" />
+  </UPageGrid>
+</UPageSection>
+```
+
+### Blog with sidebar
+
+```vue [layouts/blog.vue]
+<template>
+  <UPage>
+    <template #left>
+      <UPageAside>
+        <UNavigationMenu
+          :items="[
+            { label: 'All posts', to: '/blog', icon: 'i-lucide-newspaper' },
+            { label: 'Tutorials', to: '/blog/tutorials', icon: 'i-lucide-graduation-cap' },
+            { label: 'Announcements', to: '/blog/announcements', icon: 'i-lucide-megaphone' }
+          ]"
+          orientation="vertical"
+        />
+      </UPageAside>
+    </template>
+
+    <slot />
+  </UPage>
+</template>
+```
diff --git a/.claude/skills/nuxt-ui/references/theming.md b/.claude/skills/nuxt-ui/references/theming.md
new file mode 100644
index 0000000..6f90300
--- /dev/null
+++ b/.claude/skills/nuxt-ui/references/theming.md
@@ -0,0 +1,427 @@
+# Theming
+
+## Semantic colors
+
+| Color | Default | Purpose |
+|---|---|---|
+| `primary` | green | CTAs, active states, brand |
+| `secondary` | blue | Secondary actions |
+| `success` | green | Success messages |
+| `info` | blue | Informational |
+| `warning` | yellow | Warnings |
+| `error` | red | Errors, destructive actions |
+| `neutral` | slate | Text, borders, disabled |
+
+## Configuring colors
+
+```ts
+// Nuxt — app.config.ts
+export default defineAppConfig({
+  ui: {
+    colors: {
+      primary: 'indigo',
+      secondary: 'violet',
+      success: 'emerald',
+      error: 'rose',
+      neutral: 'zinc'
+    }
+  }
+})
+```
+
+```ts
+// Vue — vite.config.ts
+ui({
+  ui: {
+    colors: { primary: 'indigo', secondary: 'violet', neutral: 'zinc' }
+  }
+})
+```
+
+You can only use colors that exist in your theme — either [Tailwind's default colors](https://tailwindcss.com/docs/colors) or custom colors defined with `@theme`.
+
+## Adding custom colors
+
+1. Define all 11 shades in CSS:
+
+```css
+/* assets/css/main.css */
+@theme static {
+  --color-brand-50: #fef2f2;
+  --color-brand-100: #fee2e2;
+  --color-brand-200: #fecaca;
+  --color-brand-300: #fca5a5;
+  --color-brand-400: #f87171;
+  --color-brand-500: #ef4444;
+  --color-brand-600: #dc2626;
+  --color-brand-700: #b91c1c;
+  --color-brand-800: #991b1b;
+  --color-brand-900: #7f1d1d;
+  --color-brand-950: #450a0a;
+}
+```
+
+2. Assign it as a semantic color value: `ui: { colors: { primary: 'brand' } }`
+
+You can only use colors that have all shades defined — either from Tailwind's defaults or custom `@theme` definitions.
+
+### Extending with new semantic color names
+
+If you need a new semantic color beyond the defaults (e.g., `tertiary`), register it in `theme.colors`:
+
+```ts
+// Nuxt — nuxt.config.ts
+export default defineNuxtConfig({
+  ui: {
+    theme: {
+      colors: ['primary', 'secondary', 'tertiary', 'info', 'success', 'warning', 'error']
+    }
+  }
+})
+```
+
+```ts
+// Vue — vite.config.ts
+ui({
+  theme: {
+    colors: ['primary', 'secondary', 'tertiary', 'info', 'success', 'warning', 'error']
+  }
+})
+```
+
+Then assign it: `ui: { colors: { tertiary: 'indigo' } }` and use it via the `color` prop: `<UButton color="tertiary">`.
+
+## CSS utilities
+
+### Text
+
+| Class | Use | Light value | Dark value |
+|---|---|---|---|
+| `text-default` | Body text | `neutral-700` | `neutral-200` |
+| `text-muted` | Secondary text | `neutral-500` | `neutral-400` |
+| `text-dimmed` | Placeholders, hints | `neutral-400` | `neutral-500` |
+| `text-toned` | Subtitles | `neutral-600` | `neutral-300` |
+| `text-highlighted` | Headings, emphasis | `neutral-900` | `white` |
+| `text-inverted` | On dark/light backgrounds | `white` | `neutral-900` |
+
+### Background
+
+| Class | Use | Light value | Dark value |
+|---|---|---|---|
+| `bg-default` | Page background | `white` | `neutral-900` |
+| `bg-muted` | Subtle sections | `neutral-50` | `neutral-800` |
+| `bg-elevated` | Cards, modals | `neutral-100` | `neutral-800` |
+| `bg-accented` | Hover states | `neutral-200` | `neutral-700` |
+| `bg-inverted` | Inverted sections | `neutral-900` | `white` |
+
+### Border
+
+| Class | Use | Light value | Dark value |
+|---|---|---|---|
+| `border-default` | Default borders | `neutral-200` | `neutral-800` |
+| `border-muted` | Subtle borders | `neutral-200` | `neutral-700` |
+| `border-accented` | Emphasized borders | `neutral-300` | `neutral-700` |
+| `border-inverted` | Inverted borders | `neutral-900` | `white` |
+
+### Semantic color utilities
+
+Each semantic color (`primary`, `secondary`, `success`, `info`, `warning`, `error`) is available as a Tailwind utility: `text-primary`, `bg-primary`, `border-primary`, `ring-primary`, etc.
+
+They resolve to shade **500** in light mode and shade **400** in dark mode (via `--ui-<color>` CSS variables). This is generated at runtime by the colors plugin — you don't need to write dark-mode variants manually.
+
+To adjust which shade is used, override `--ui-primary` (or any semantic color) in your `main.css`:
+
+```css
+:root { --ui-primary: var(--ui-color-primary-600); }
+.dark { --ui-primary: var(--ui-color-primary-300); }
+```
+
+### CSS variables
+
+All customizable in `main.css`:
+
+```css
+:root {
+  --ui-radius: 0.25rem;               /* base radius for all components */
+  --ui-container: 80rem;              /* UContainer max-width */
+  --ui-header-height: 4rem;            /* UHeader height */
+  --ui-primary: var(--ui-color-primary-500); /* adjust shade used */
+}
+
+.dark {
+  --ui-primary: var(--ui-color-primary-400);
+}
+```
+
+### Solid colors (black/white)
+
+```css
+:root { --ui-primary: black; }
+.dark { --ui-primary: white; }
+```
+
+## Component theme customization
+
+### How it works
+
+Components are styled with [Tailwind Variants](https://www.tailwind-variants.org/). The theme defines:
+
+- **`slots`** — named style targets (e.g., `root`, `base`, `label`, `leadingIcon`)
+- **`variants`** — styles applied based on props (e.g., `color`, `variant`, `size`)
+- **`compoundVariants`** — styles for specific prop combinations (e.g., `color: 'primary'` + `variant: 'outline'`)
+- **`defaultVariants`** — default prop values when none are specified
+
+### Override priority
+
+**`ui` prop / `class` prop > global config > theme defaults**
+
+The `ui` prop overrides slots **after** variants are computed. If the `size: 'md'` variant applies `size-5` to `trailingIcon`, and you set `:ui="{ trailingIcon: 'size-3' }"`, the `size-3` wins.
+
+Tailwind Variants uses [tailwind-merge](https://github.com/dcastil/tailwind-merge) under the hood so conflicting classes are resolved automatically.
+
+### Understanding the generated theme
+
+Every component's full resolved theme is generated at build time. Always read this file before customizing a component — it shows exactly what classes are applied where.
+
+- **Nuxt**: `.nuxt/ui/<component>.ts`
+- **Vue**: `node_modules/.nuxt-ui/ui/<component>.ts`
+
+For example, the card theme:
+
+```ts
+{
+  slots: {
+    root: "rounded-lg overflow-hidden",
+    header: "p-4 sm:px-6",
+    body: "p-4 sm:p-6",
+    footer: "p-4 sm:px-6"
+  },
+  variants: {
+    variant: {
+      outline: { root: "bg-default ring ring-default divide-y divide-default" },
+      soft: { root: "bg-elevated/50 divide-y divide-default" }
+    }
+  },
+  defaultVariants: { variant: "outline" }
+}
+```
+
+### Global config
+
+Override the theme for all instances of a component:
+
+```ts
+// Nuxt — app.config.ts
+export default defineAppConfig({
+  ui: {
+    button: {
+      slots: {
+        base: 'font-bold rounded-full'
+      },
+      variants: {
+        size: {
+          md: { leadingIcon: 'size-4' }
+        }
+      },
+      compoundVariants: [{
+        color: 'neutral',
+        variant: 'outline',
+        class: { base: 'ring-2' }
+      }],
+      defaultVariants: {
+        color: 'neutral',
+        variant: 'outline'
+      }
+    }
+  }
+})
+```
+
+```ts
+// Vue — vite.config.ts
+ui({
+  ui: {
+    button: {
+      slots: { base: 'font-bold rounded-full' },
+      defaultVariants: { color: 'neutral', variant: 'outline' }
+    }
+  }
+})
+```
+
+### Per-instance (`ui` prop)
+
+Overrides slots after variant computation:
+
+```vue
+<UButton :ui="{ base: 'font-mono', trailingIcon: 'size-3 rotate-90' }" />
+<UCard :ui="{ root: 'shadow-xl', body: 'p-8' }" />
+```
+
+### Per-instance (`class` prop)
+
+Overrides the `root` or `base` slot:
+
+```vue
+<UButton class="rounded-none">Square</UButton>
+```
+
+Components without slots (e.g., `UContainer`, `USkeleton`, `UMain`) only have the `class` prop.
+
+### Theme structure patterns
+
+**Slots-based** (most components — `slots` is an object in the generated theme):
+
+```ts
+// global config
+ui: {
+  button: {
+    slots: { base: 'font-bold' }
+  }
+}
+// per instance
+<UButton :ui="{ base: 'font-bold' }" />
+```
+
+**Flat base** (`base` is a top-level string in the generated theme):
+
+```ts
+// global config
+ui: {
+  container: {
+    base: 'max-w-lg'
+  }
+}
+// per instance — class prop only
+<UContainer class="max-w-lg" />
+```
+
+Always check the generated theme file to see which pattern applies.
+
+## Dark mode
+
+```ts
+const colorMode = useColorMode()
+colorMode.preference = 'dark' // 'light', 'dark', 'system'
+```
+
+```vue
+<UColorModeButton /> <!-- Toggle -->
+<UColorModeSelect /> <!-- Dropdown -->
+```
+
+## Fonts
+
+```css
+/* assets/css/main.css */
+@theme {
+  --font-sans: 'Public Sans', system-ui, sans-serif;
+  --font-mono: 'JetBrains Mono', monospace;
+}
+```
+
+In Nuxt, fonts defined with `@theme` are automatically loaded by the `@nuxt/fonts` module.
+
+## Brand customization playbook
+
+Follow these steps to fully rebrand Nuxt UI (e.g., "make a Ghibli theme", "match our corporate brand"):
+
+### Step 1 — Define the color palette
+
+Pick colors that match the brand. Map them to semantic roles:
+
+```ts
+// app.config.ts (Nuxt) or vite.config.ts (Vue)
+ui: {
+  colors: {
+    primary: 'emerald',    // brand accent
+    secondary: 'amber',    // secondary accent
+    success: 'green',
+    info: 'sky',
+    warning: 'orange',
+    error: 'rose',
+    neutral: 'stone'       // affects all text, borders, backgrounds
+  }
+}
+```
+
+If no Tailwind default color fits, define custom shades in CSS (see [Adding custom colors](#adding-custom-colors)):
+
+```css
+@theme static {
+  --color-forest-50: #f0fdf4;
+  /* ... all 11 shades (50–950) ... */
+  --color-forest-950: #052e16;
+}
+```
+
+Then use it: `primary: 'forest'`.
+
+### Step 2 — Set fonts
+
+```css
+/* assets/css/main.css */
+@theme {
+  --font-sans: 'Quicksand', system-ui, sans-serif;
+}
+```
+
+### Step 3 — Adjust CSS variables
+
+```css
+:root {
+  --ui-radius: 0.75rem;   /* rounder = softer/playful, smaller = sharper/corporate */
+  --ui-primary: var(--ui-color-primary-600); /* adjust which shade is used */
+}
+
+.dark {
+  --ui-primary: var(--ui-color-primary-400);
+}
+```
+
+### Step 4 — Override key components globally
+
+Read the generated theme files to find slot names, then apply global overrides:
+
+```ts
+// app.config.ts (Nuxt) or vite.config.ts (Vue)
+ui: {
+  // ... colors from Step 1
+  button: {
+    slots: {
+      base: 'rounded-full font-semibold'
+    },
+    defaultVariants: {
+      variant: 'soft'
+    }
+  },
+  card: {
+    slots: {
+      root: 'rounded-2xl shadow-lg'
+    }
+  },
+  badge: {
+    slots: {
+      base: 'rounded-full'
+    }
+  }
+}
+```
+
+> **Tip**: Read `.nuxt/ui/button.ts` (Nuxt) or `node_modules/.nuxt-ui/ui/button.ts` (Vue) to see all available slots and variants before overriding.
+
+### Step 5 — Verify dark mode
+
+Check that both modes look correct. Adjust `--ui-primary` shade per mode and test contrast. Use `useColorMode()` to toggle during development.
+
+### Quick checklist
+
+| Step | What to change | Where |
+|---|---|---|
+| Colors | `primary`, `secondary`, `neutral` | `app.config.ts` / `vite.config.ts` |
+| Custom palette | 11 shades per color | `main.css` (`@theme static`) |
+| Fonts | `--font-sans`, `--font-mono` | `main.css` (`@theme`) |
+| Radius | `--ui-radius` | `main.css` (`:root`) |
+| Primary shade | `--ui-primary` | `main.css` (`:root` + `.dark`) |
+| Component shapes | Global slot overrides | `app.config.ts` / `vite.config.ts` |
+| Dark mode | Verify contrast, adjust variables | `main.css` (`.dark`) |
diff --git a/.claude/skills/nuxt/GENERATION.md b/.claude/skills/nuxt/GENERATION.md
new file mode 100644
index 0000000..6299090
--- /dev/null
+++ b/.claude/skills/nuxt/GENERATION.md
@@ -0,0 +1,5 @@
+# Generation Info
+
+- **Source:** `sources/nuxt`
+- **Git SHA:** `c9fed804b9bef362276033b03ca43730c6efa7dc`
+- **Generated:** 2026-01-28
diff --git a/.claude/skills/nuxt/SKILL.md b/.claude/skills/nuxt/SKILL.md
new file mode 100644
index 0000000..62e497e
--- /dev/null
+++ b/.claude/skills/nuxt/SKILL.md
@@ -0,0 +1,55 @@
+---
+name: nuxt
+description: Nuxt full-stack Vue framework with SSR, auto-imports, and file-based routing. Use when working with Nuxt apps, server routes, useFetch, middleware, or hybrid rendering.
+metadata:
+  author: Anthony Fu
+  version: "2026.1.28"
+  source: Generated from https://github.com/nuxt/nuxt, scripts located at https://github.com/antfu/skills
+---
+
+Nuxt is a full-stack Vue framework that provides server-side rendering, file-based routing, auto-imports, and a powerful module system. It uses Nitro as its server engine for universal deployment across Node.js, serverless, and edge platforms.
+
+> The skill is based on Nuxt 3.x, generated at 2026-01-28.
+
+## Core
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Directory Structure | Project folder structure, conventions, file organization | [core-directory-structure](references/core-directory-structure.md) |
+| Configuration | nuxt.config.ts, app.config.ts, runtime config, environment variables | [core-config](references/core-config.md) |
+| CLI Commands | Dev server, build, generate, preview, and utility commands | [core-cli](references/core-cli.md) |
+| Routing | File-based routing, dynamic routes, navigation, middleware, layouts | [core-routing](references/core-routing.md) |
+| Data Fetching | useFetch, useAsyncData, $fetch, caching, refresh | [core-data-fetching](references/core-data-fetching.md) |
+| Modules | Creating and using Nuxt modules, Nuxt Kit utilities | [core-modules](references/core-modules.md) |
+| Deployment | Platform-agnostic deployment with Nitro, Vercel, Netlify, Cloudflare | [core-deployment](references/core-deployment.md) |
+
+## Features
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Composables Auto-imports | Vue APIs, Nuxt composables, custom composables, utilities | [features-composables](references/features-composables.md) |
+| Components Auto-imports | Component naming, lazy loading, hydration strategies | [features-components-autoimport](references/features-components-autoimport.md) |
+| Built-in Components | NuxtLink, NuxtPage, NuxtLayout, ClientOnly, and more | [features-components](references/features-components.md) |
+| State Management | useState composable, SSR-friendly state, Pinia integration | [features-state](references/features-state.md) |
+| Server Routes | API routes, server middleware, Nitro server engine | [features-server](references/features-server.md) |
+
+## Rendering
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Rendering Modes | Universal (SSR), client-side (SPA), hybrid rendering, route rules | [rendering-modes](references/rendering-modes.md) |
+
+## Best Practices
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Data Fetching Patterns | Efficient fetching, caching, parallel requests, error handling | [best-practices-data-fetching](references/best-practices-data-fetching.md) |
+| SSR & Hydration | Avoiding context leaks, hydration mismatches, composable patterns | [best-practices-ssr](references/best-practices-ssr.md) |
+
+## Advanced
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Layers | Extending applications with reusable layers | [advanced-layers](references/advanced-layers.md) |
+| Lifecycle Hooks | Build-time, runtime, and server hooks | [advanced-hooks](references/advanced-hooks.md) |
+| Module Authoring | Creating publishable Nuxt modules with Nuxt Kit | [advanced-module-authoring](references/advanced-module-authoring.md) |
diff --git a/.claude/skills/nuxt/references/advanced-hooks.md b/.claude/skills/nuxt/references/advanced-hooks.md
new file mode 100644
index 0000000..b61d1ed
--- /dev/null
+++ b/.claude/skills/nuxt/references/advanced-hooks.md
@@ -0,0 +1,289 @@
+---
+name: lifecycle-hooks
+description: Nuxt and Nitro hooks for extending build-time and runtime behavior
+---
+
+# Lifecycle Hooks
+
+Nuxt provides hooks to tap into the build process, application lifecycle, and server runtime.
+
+## Build-time Hooks (Nuxt)
+
+Used in `nuxt.config.ts` or modules:
+
+### In nuxt.config.ts
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  hooks: {
+    'build:before': () => {
+      console.log('Build starting...')
+    },
+    'pages:extend': (pages) => {
+      // Add custom pages
+      pages.push({
+        name: 'custom',
+        path: '/custom',
+        file: '~/pages/custom.vue',
+      })
+    },
+    'components:dirs': (dirs) => {
+      // Add component directories
+      dirs.push({ path: '~/extra-components' })
+    },
+  },
+})
+```
+
+### In Modules
+
+```ts
+// modules/my-module.ts
+export default defineNuxtModule({
+  setup(options, nuxt) {
+    nuxt.hook('ready', async (nuxt) => {
+      console.log('Nuxt is ready')
+    })
+
+    nuxt.hook('close', async (nuxt) => {
+      console.log('Nuxt is closing')
+    })
+
+    nuxt.hook('modules:done', () => {
+      console.log('All modules loaded')
+    })
+  },
+})
+```
+
+### Common Build Hooks
+
+| Hook | When |
+|------|------|
+| `ready` | Nuxt initialization complete |
+| `close` | Nuxt is closing |
+| `modules:done` | All modules installed |
+| `build:before` | Before build starts |
+| `build:done` | Build complete |
+| `pages:extend` | Pages routes resolved |
+| `components:dirs` | Component dirs being resolved |
+| `imports:extend` | Auto-imports being resolved |
+| `nitro:config` | Before Nitro config finalized |
+| `vite:extend` | Vite context created |
+| `vite:extendConfig` | Before Vite config finalized |
+
+## App Hooks (Runtime)
+
+Used in plugins and composables:
+
+### In Plugins
+
+```ts
+// plugins/lifecycle.ts
+export default defineNuxtPlugin((nuxtApp) => {
+  nuxtApp.hook('app:created', (vueApp) => {
+    console.log('Vue app created')
+  })
+
+  nuxtApp.hook('app:mounted', (vueApp) => {
+    console.log('App mounted')
+  })
+
+  nuxtApp.hook('page:start', () => {
+    console.log('Page navigation starting')
+  })
+
+  nuxtApp.hook('page:finish', () => {
+    console.log('Page navigation finished')
+  })
+
+  nuxtApp.hook('page:loading:start', () => {
+    console.log('Page loading started')
+  })
+
+  nuxtApp.hook('page:loading:end', () => {
+    console.log('Page loading ended')
+  })
+})
+```
+
+### Common App Hooks
+
+| Hook | When |
+|------|------|
+| `app:created` | Vue app created |
+| `app:mounted` | Vue app mounted (client only) |
+| `app:error` | Fatal error occurred |
+| `page:start` | Page navigation starting |
+| `page:finish` | Page navigation finished |
+| `page:loading:start` | Loading indicator should show |
+| `page:loading:end` | Loading indicator should hide |
+| `link:prefetch` | Link is being prefetched |
+
+### Using Runtime Hooks
+
+```ts
+// composables/usePageTracking.ts
+export function usePageTracking() {
+  const nuxtApp = useNuxtApp()
+
+  nuxtApp.hook('page:finish', () => {
+    trackPageView(useRoute().path)
+  })
+}
+```
+
+## Server Hooks (Nitro)
+
+Used in server plugins:
+
+```ts
+// server/plugins/hooks.ts
+export default defineNitroPlugin((nitroApp) => {
+  // Modify HTML before sending
+  nitroApp.hooks.hook('render:html', (html, { event }) => {
+    html.head.push('<meta name="custom" content="value">')
+    html.bodyAppend.push('<script>console.log("injected")</script>')
+  })
+
+  // Modify response
+  nitroApp.hooks.hook('render:response', (response, { event }) => {
+    console.log('Sending response:', response.statusCode)
+  })
+
+  // Before request
+  nitroApp.hooks.hook('request', (event) => {
+    console.log('Request:', event.path)
+  })
+
+  // After response
+  nitroApp.hooks.hook('afterResponse', (event) => {
+    console.log('Response sent')
+  })
+})
+```
+
+### Common Nitro Hooks
+
+| Hook | When |
+|------|------|
+| `request` | Request received |
+| `beforeResponse` | Before sending response |
+| `afterResponse` | After response sent |
+| `render:html` | Before HTML is sent |
+| `render:response` | Before response is finalized |
+| `error` | Error occurred |
+
+## Custom Hooks
+
+### Define Custom Hook Types
+
+```ts
+// types/hooks.d.ts
+import type { HookResult } from '@nuxt/schema'
+
+declare module '#app' {
+  interface RuntimeNuxtHooks {
+    'my-app:event': (data: MyEventData) => HookResult
+  }
+}
+
+declare module '@nuxt/schema' {
+  interface NuxtHooks {
+    'my-module:init': () => HookResult
+  }
+}
+
+declare module 'nitropack/types' {
+  interface NitroRuntimeHooks {
+    'my-server:event': (data: any) => void
+  }
+}
+```
+
+### Call Custom Hooks
+
+```ts
+// In a plugin
+export default defineNuxtPlugin((nuxtApp) => {
+  // Call custom hook
+  nuxtApp.callHook('my-app:event', { type: 'custom' })
+})
+
+// In a module
+export default defineNuxtModule({
+  setup(options, nuxt) {
+    nuxt.callHook('my-module:init')
+  },
+})
+```
+
+## useRuntimeHook
+
+Call hooks at runtime from components:
+
+```vue
+<script setup lang="ts">
+// Register a callback for a runtime hook
+useRuntimeHook('app:error', (error) => {
+  console.error('App error:', error)
+})
+</script>
+```
+
+## Hook Examples
+
+### Page View Tracking
+
+```ts
+// plugins/analytics.client.ts
+export default defineNuxtPlugin((nuxtApp) => {
+  nuxtApp.hook('page:finish', () => {
+    const route = useRoute()
+    analytics.track('pageview', {
+      path: route.path,
+      title: document.title,
+    })
+  })
+})
+```
+
+### Performance Monitoring
+
+```ts
+// plugins/performance.client.ts
+export default defineNuxtPlugin((nuxtApp) => {
+  let navigationStart: number
+
+  nuxtApp.hook('page:start', () => {
+    navigationStart = performance.now()
+  })
+
+  nuxtApp.hook('page:finish', () => {
+    const duration = performance.now() - navigationStart
+    console.log(`Navigation took ${duration}ms`)
+  })
+})
+```
+
+### Inject HTML
+
+```ts
+// server/plugins/inject.ts
+export default defineNitroPlugin((nitroApp) => {
+  nitroApp.hooks.hook('render:html', (html) => {
+    html.head.push(`
+      <script>
+        window.APP_CONFIG = ${JSON.stringify(config)}
+      </script>
+    `)
+  })
+})
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/guide/going-further/hooks
+- https://nuxt.com/docs/api/advanced/hooks
+-->
diff --git a/.claude/skills/nuxt/references/advanced-layers.md b/.claude/skills/nuxt/references/advanced-layers.md
new file mode 100644
index 0000000..94b4ae0
--- /dev/null
+++ b/.claude/skills/nuxt/references/advanced-layers.md
@@ -0,0 +1,299 @@
+---
+name: nuxt-layers
+description: Extending Nuxt applications with layers for code sharing and reusability
+---
+
+# Nuxt Layers
+
+Layers allow sharing and reusing partial Nuxt applications across projects. They can include components, composables, pages, layouts, and configuration.
+
+## Using Layers
+
+### From npm Package
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  extends: [
+    '@my-org/base-layer',
+    '@nuxtjs/ui-layer',
+  ],
+})
+```
+
+### From Git Repository
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  extends: [
+    'github:username/repo',
+    'github:username/repo/base', // Subdirectory
+    'github:username/repo#v1.0', // Specific tag
+    'github:username/repo#dev', // Branch
+    'gitlab:username/repo',
+    'bitbucket:username/repo',
+  ],
+})
+```
+
+### From Local Directory
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  extends: [
+    '../base-layer',
+    './layers/shared',
+  ],
+})
+```
+
+### Auto-scanned Layers
+
+Place in `layers/` directory for automatic discovery:
+
+```
+my-app/
+├── layers/
+│   ├── base/
+│   │   └── nuxt.config.ts
+│   └── ui/
+│       └── nuxt.config.ts
+└── nuxt.config.ts
+```
+
+## Creating a Layer
+
+Minimal layer structure:
+
+```
+my-layer/
+├── nuxt.config.ts       # Required
+├── app/
+│   ├── components/      # Auto-merged
+│   ├── composables/     # Auto-merged
+│   ├── layouts/         # Auto-merged
+│   ├── middleware/      # Auto-merged
+│   ├── pages/           # Auto-merged
+│   ├── plugins/         # Auto-merged
+│   └── app.config.ts    # Merged
+├── server/              # Auto-merged
+└── package.json
+```
+
+### Layer nuxt.config.ts
+
+```ts
+// my-layer/nuxt.config.ts
+export default defineNuxtConfig({
+  // Layer configuration
+  app: {
+    head: {
+      title: 'My Layer App',
+    },
+  },
+  // Shared modules
+  modules: ['@nuxt/ui'],
+})
+```
+
+### Layer Components
+
+```vue
+<!-- my-layer/app/components/BaseButton.vue -->
+<template>
+  <button class="base-btn">
+    <slot />
+  </button>
+</template>
+```
+
+Use in consuming project:
+
+```vue
+<template>
+  <BaseButton>Click me</BaseButton>
+</template>
+```
+
+### Layer Composables
+
+```ts
+// my-layer/app/composables/useTheme.ts
+export function useTheme() {
+  const isDark = useState('theme-dark', () => false)
+  const toggle = () => isDark.value = !isDark.value
+  return { isDark, toggle }
+}
+```
+
+## Layer Priority
+
+Override order (highest to lowest):
+1. Your project files
+2. Auto-scanned layers (alphabetically, Z > A)
+3. `extends` array (first > last)
+
+Control order with prefixes:
+
+```
+layers/
+├── 1.base/      # Lower priority
+└── 2.theme/     # Higher priority
+```
+
+## Layer Aliases
+
+Access layer files:
+
+```ts
+// Auto-scanned layers get aliases
+import Component from '#layers/base/components/Component.vue'
+```
+
+Named aliases:
+
+```ts
+// my-layer/nuxt.config.ts
+export default defineNuxtConfig({
+  $meta: {
+    name: 'my-layer',
+  },
+})
+```
+
+```ts
+// In consuming project
+import { something } from '#layers/my-layer/utils'
+```
+
+## Publishing Layers
+
+### As npm Package
+
+```json
+{
+  "name": "my-nuxt-layer",
+  "version": "1.0.0",
+  "type": "module",
+  "main": "./nuxt.config.ts",
+  "dependencies": {
+    "@nuxt/ui": "^2.0.0"
+  },
+  "devDependencies": {
+    "nuxt": "^3.0.0"
+  }
+}
+```
+
+### Private Layers
+
+For private git repos:
+
+```bash
+export GIGET_AUTH=<github-token>
+```
+
+## Layer Best Practices
+
+### Use Resolved Paths
+
+```ts
+// my-layer/nuxt.config.ts
+import { fileURLToPath } from 'node:url'
+import { dirname, join } from 'node:path'
+
+const currentDir = dirname(fileURLToPath(import.meta.url))
+
+export default defineNuxtConfig({
+  css: [
+    join(currentDir, './assets/main.css'),
+  ],
+})
+```
+
+### Install Dependencies
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  extends: [
+    ['github:user/layer', { install: true }],
+  ],
+})
+```
+
+### Disable Layer Modules
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  extends: ['./base-layer'],
+  // Disable modules from layer
+  image: false, // Disables @nuxt/image
+  pinia: false, // Disables @pinia/nuxt
+})
+```
+
+## Starter Template
+
+Create a new layer:
+
+```bash
+npx nuxi init --template layer my-layer
+```
+
+## Example: Theme Layer
+
+```
+theme-layer/
+├── nuxt.config.ts
+├── app/
+│   ├── app.config.ts
+│   ├── components/
+│   │   ├── ThemeButton.vue
+│   │   └── ThemeCard.vue
+│   ├── composables/
+│   │   └── useTheme.ts
+│   └── assets/
+│       └── theme.css
+└── package.json
+```
+
+```ts
+// theme-layer/nuxt.config.ts
+export default defineNuxtConfig({
+  css: ['~/assets/theme.css'],
+})
+```
+
+```ts
+// theme-layer/app/app.config.ts
+export default defineAppConfig({
+  theme: {
+    primaryColor: '#00dc82',
+    darkMode: false,
+  },
+})
+```
+
+```ts
+// consuming-app/nuxt.config.ts
+export default defineNuxtConfig({
+  extends: ['theme-layer'],
+})
+
+// consuming-app/app/app.config.ts
+export default defineAppConfig({
+  theme: {
+    primaryColor: '#ff0000', // Override
+  },
+})
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/getting-started/layers
+- https://nuxt.com/docs/guide/going-further/layers
+-->
diff --git a/.claude/skills/nuxt/references/advanced-module-authoring.md b/.claude/skills/nuxt/references/advanced-module-authoring.md
new file mode 100644
index 0000000..e08525d
--- /dev/null
+++ b/.claude/skills/nuxt/references/advanced-module-authoring.md
@@ -0,0 +1,554 @@
+---
+name: module-authoring
+description: Complete guide to creating publishable Nuxt modules with best practices
+---
+
+# Module Authoring
+
+This guide covers creating publishable Nuxt modules with proper structure, type safety, and best practices.
+
+## Module Structure
+
+Recommended structure for a publishable module:
+
+```
+my-nuxt-module/
+├── src/
+│   ├── module.ts          # Module entry
+│   └── runtime/
+│       ├── components/    # Vue components
+│       ├── composables/   # Composables
+│       ├── plugins/       # Nuxt plugins
+│       └── server/        # Server handlers
+├── playground/            # Development app
+├── package.json
+└── tsconfig.json
+```
+
+## Module Definition
+
+### Basic Module with Type-safe Options
+
+```ts
+// src/module.ts
+import { defineNuxtModule, createResolver, addPlugin, addComponent, addImports } from '@nuxt/kit'
+
+export interface ModuleOptions {
+  prefix?: string
+  apiKey: string
+  enabled?: boolean
+}
+
+export default defineNuxtModule<ModuleOptions>({
+  meta: {
+    name: 'my-module',
+    configKey: 'myModule',
+    compatibility: {
+      nuxt: '>=3.0.0',
+    },
+  },
+  defaults: {
+    prefix: 'My',
+    enabled: true,
+  },
+  setup(options, nuxt) {
+    if (!options.enabled) return
+
+    const { resolve } = createResolver(import.meta.url)
+
+    // Module setup logic here
+  },
+})
+```
+
+### Using `.with()` for Strict Type Inference
+
+When you need TypeScript to infer that default values are always present:
+
+```ts
+import { defineNuxtModule } from '@nuxt/kit'
+
+interface ModuleOptions {
+  apiKey: string
+  baseURL: string
+  timeout?: number
+}
+
+export default defineNuxtModule<ModuleOptions>().with({
+  meta: {
+    name: '@nuxtjs/my-api',
+    configKey: 'myApi',
+  },
+  defaults: {
+    baseURL: 'https://api.example.com',
+    timeout: 5000,
+  },
+  setup(resolvedOptions, nuxt) {
+    // resolvedOptions.baseURL is guaranteed to be string (not undefined)
+    // resolvedOptions.timeout is guaranteed to be number (not undefined)
+  },
+})
+```
+
+## Adding Runtime Assets
+
+### Components
+
+```ts
+import { addComponent, addComponentsDir, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup() {
+    const { resolve } = createResolver(import.meta.url)
+
+    // Single component
+    addComponent({
+      name: 'MyButton',
+      filePath: resolve('./runtime/components/MyButton.vue'),
+    })
+
+    // Component directory with prefix
+    addComponentsDir({
+      path: resolve('./runtime/components'),
+      prefix: 'My',
+      pathPrefix: false,
+    })
+  },
+})
+```
+
+### Composables and Auto-imports
+
+```ts
+import { addImports, addImportsDir, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup() {
+    const { resolve } = createResolver(import.meta.url)
+
+    // Single import
+    addImports({
+      name: 'useMyUtil',
+      from: resolve('./runtime/composables/useMyUtil'),
+    })
+
+    // Directory of composables
+    addImportsDir(resolve('./runtime/composables'))
+  },
+})
+```
+
+### Plugins
+
+```ts
+import { addPlugin, addPluginTemplate, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup(options) {
+    const { resolve } = createResolver(import.meta.url)
+
+    // Static plugin file
+    addPlugin({
+      src: resolve('./runtime/plugins/myPlugin'),
+      mode: 'client', // 'client', 'server', or 'all'
+    })
+
+    // Dynamic plugin with generated code
+    addPluginTemplate({
+      filename: 'my-module-plugin.mjs',
+      getContents: () => `
+import { defineNuxtPlugin } from '#app/nuxt'
+
+export default defineNuxtPlugin({
+  name: 'my-module',
+  setup() {
+    const config = ${JSON.stringify(options)}
+    // Plugin logic
+  }
+})`,
+    })
+  },
+})
+```
+
+## Server Extensions
+
+### Server Handlers
+
+```ts
+import { addServerHandler, addServerScanDir, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup() {
+    const { resolve } = createResolver(import.meta.url)
+
+    // Single handler
+    addServerHandler({
+      route: '/api/my-endpoint',
+      handler: resolve('./runtime/server/api/my-endpoint'),
+    })
+
+    // Scan entire server directory (api/, routes/, middleware/, utils/)
+    addServerScanDir(resolve('./runtime/server'))
+  },
+})
+```
+
+### Server Composables
+
+```ts
+import { addServerImports, addServerImportsDir, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup() {
+    const { resolve } = createResolver(import.meta.url)
+
+    // Single server import
+    addServerImports({
+      name: 'useServerUtil',
+      from: resolve('./runtime/server/utils/useServerUtil'),
+    })
+
+    // Server composables directory
+    addServerImportsDir(resolve('./runtime/server/composables'))
+  },
+})
+```
+
+### Nitro Plugin
+
+```ts
+import { addServerPlugin, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup() {
+    const { resolve } = createResolver(import.meta.url)
+    addServerPlugin(resolve('./runtime/server/plugin'))
+  },
+})
+```
+
+```ts
+// runtime/server/plugin.ts
+import { defineNitroPlugin } from 'nitropack/runtime'
+
+export default defineNitroPlugin((nitroApp) => {
+  nitroApp.hooks.hook('request', (event) => {
+    console.log('Request:', event.path)
+  })
+})
+```
+
+## Templates and Virtual Files
+
+### Generate Virtual Files
+
+```ts
+import { addTemplate, addTypeTemplate, addServerTemplate, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup(options, nuxt) {
+    const { resolve } = createResolver(import.meta.url)
+
+    // Client/build virtual file (accessible via #build/my-config.mjs)
+    addTemplate({
+      filename: 'my-config.mjs',
+      getContents: () => `export default ${JSON.stringify(options)}`,
+    })
+
+    // Type declarations
+    addTypeTemplate({
+      filename: 'types/my-module.d.ts',
+      getContents: () => `
+declare module '#my-module' {
+  export interface Config {
+    apiKey: string
+  }
+}`,
+    })
+
+    // Nitro virtual file (accessible in server routes)
+    addServerTemplate({
+      filename: '#my-module/config.mjs',
+      getContents: () => `export const config = ${JSON.stringify(options)}`,
+    })
+  },
+})
+```
+
+### Access Virtual Files
+
+```ts
+// In runtime plugin
+// @ts-expect-error - virtual file
+import config from '#build/my-config.mjs'
+
+// In server routes
+import { config } from '#my-module/config.js'
+```
+
+## Extending Pages and Routes
+
+```ts
+import { extendPages, extendRouteRules, addRouteMiddleware, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup() {
+    const { resolve } = createResolver(import.meta.url)
+
+    // Add pages
+    extendPages((pages) => {
+      pages.push({
+        name: 'my-page',
+        path: '/my-route',
+        file: resolve('./runtime/pages/MyPage.vue'),
+      })
+    })
+
+    // Add route rules (caching, redirects, etc.)
+    extendRouteRules('/api/**', {
+      cache: { maxAge: 60 },
+    })
+
+    // Add middleware
+    addRouteMiddleware({
+      name: 'my-middleware',
+      path: resolve('./runtime/middleware/myMiddleware'),
+      global: true,
+    })
+  },
+})
+```
+
+## Module Dependencies
+
+Declare dependencies on other modules with version constraints:
+
+```ts
+export default defineNuxtModule({
+  meta: {
+    name: 'my-module',
+  },
+  moduleDependencies: {
+    '@nuxtjs/tailwindcss': {
+      version: '>=6.0.0',
+      // Set defaults (user can override)
+      defaults: {
+        exposeConfig: true,
+      },
+      // Force specific options
+      overrides: {
+        viewer: false,
+      },
+    },
+    '@nuxtjs/i18n': {
+      optional: true, // Won't fail if not installed
+      defaults: {
+        defaultLocale: 'en',
+      },
+    },
+  },
+  setup() {
+    // Dependencies are guaranteed to be set up before this runs
+  },
+})
+```
+
+### Dynamic Dependencies
+
+```ts
+moduleDependencies(nuxt) {
+  const deps: Record<string, any> = {
+    '@nuxtjs/tailwindcss': { version: '>=6.0.0' },
+  }
+
+  if (nuxt.options.ssr) {
+    deps['@nuxtjs/html-validator'] = { optional: true }
+  }
+
+  return deps
+}
+```
+
+## Lifecycle Hooks
+
+Requires `meta.name` and `meta.version`:
+
+```ts
+export default defineNuxtModule({
+  meta: {
+    name: 'my-module',
+    version: '1.2.0',
+  },
+  onInstall(nuxt) {
+    // First-time setup
+    console.log('Module installed for the first time')
+  },
+  onUpgrade(nuxt, options, previousVersion) {
+    // Version upgrade migrations
+    console.log(`Upgrading from ${previousVersion}`)
+  },
+  setup(options, nuxt) {
+    // Regular setup runs every build
+  },
+})
+```
+
+## Extending Configuration
+
+```ts
+export default defineNuxtModule({
+  setup(options, nuxt) {
+    // Add CSS
+    nuxt.options.css.push('my-module/styles.css')
+
+    // Add runtime config
+    nuxt.options.runtimeConfig.public.myModule = {
+      apiUrl: options.apiUrl,
+    }
+
+    // Extend Vite config
+    nuxt.options.vite.optimizeDeps ||= {}
+    nuxt.options.vite.optimizeDeps.include ||= []
+    nuxt.options.vite.optimizeDeps.include.push('some-package')
+
+    // Add build transpile
+    nuxt.options.build.transpile.push('my-package')
+  },
+})
+```
+
+## Using Hooks
+
+```ts
+export default defineNuxtModule({
+  // Declarative hooks
+  hooks: {
+    'components:dirs': (dirs) => {
+      dirs.push({ path: '~/extra' })
+    },
+  },
+
+  setup(options, nuxt) {
+    // Programmatic hooks
+    nuxt.hook('pages:extend', (pages) => {
+      // Modify pages
+    })
+
+    nuxt.hook('imports:extend', (imports) => {
+      imports.push({ name: 'myHelper', from: 'my-package' })
+    })
+
+    nuxt.hook('nitro:config', (config) => {
+      // Modify Nitro config
+    })
+
+    nuxt.hook('vite:extendConfig', (config) => {
+      // Modify Vite config
+    })
+  },
+})
+```
+
+## Path Resolution
+
+```ts
+import { createResolver, resolvePath, findPath } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  async setup(options, nuxt) {
+    // Resolver relative to module
+    const { resolve } = createResolver(import.meta.url)
+
+    const pluginPath = resolve('./runtime/plugin')
+
+    // Resolve with extensions and aliases
+    const entrypoint = await resolvePath('@some/package')
+
+    // Find first existing file
+    const configPath = await findPath([
+      resolve('./config.ts'),
+      resolve('./config.js'),
+    ])
+  },
+})
+```
+
+## Module Package.json
+
+```json
+{
+  "name": "my-nuxt-module",
+  "version": "1.0.0",
+  "type": "module",
+  "exports": {
+    ".": {
+      "import": "./dist/module.mjs",
+      "require": "./dist/module.cjs"
+    }
+  },
+  "main": "./dist/module.cjs",
+  "module": "./dist/module.mjs",
+  "types": "./dist/types.d.ts",
+  "files": ["dist"],
+  "scripts": {
+    "dev": "nuxi dev playground",
+    "build": "nuxt-module-build build",
+    "prepare": "nuxt-module-build build --stub"
+  },
+  "dependencies": {
+    "@nuxt/kit": "^3.0.0"
+  },
+  "devDependencies": {
+    "@nuxt/module-builder": "latest",
+    "nuxt": "^3.0.0"
+  }
+}
+```
+
+## Disabling Modules
+
+Users can disable a module via config key:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  // Disable entirely
+  myModule: false,
+
+  // Or with options
+  myModule: {
+    enabled: false,
+  },
+})
+```
+
+## Development Workflow
+
+1. **Create module**: `npx nuxi init -t module my-module`
+2. **Develop**: `npm run dev` (runs playground)
+3. **Build**: `npm run build`
+4. **Test**: `npm run test`
+
+## Best Practices
+
+- Use `createResolver(import.meta.url)` for all path resolution
+- Prefix components to avoid naming conflicts
+- Make options type-safe with `ModuleOptions` interface
+- Use `moduleDependencies` instead of `installModule`
+- Provide sensible defaults for all options
+- Add compatibility requirements in `meta.compatibility`
+- Use virtual files for dynamic configuration
+- Separate client/server plugins appropriately
+
+<!--
+Source references:
+- https://nuxt.com/docs/api/kit/modules
+- https://nuxt.com/docs/api/kit/components
+- https://nuxt.com/docs/api/kit/autoimports
+- https://nuxt.com/docs/api/kit/plugins
+- https://nuxt.com/docs/api/kit/templates
+- https://nuxt.com/docs/api/kit/nitro
+- https://nuxt.com/docs/api/kit/pages
+- https://nuxt.com/docs/api/kit/resolving
+-->
diff --git a/.claude/skills/nuxt/references/best-practices-data-fetching.md b/.claude/skills/nuxt/references/best-practices-data-fetching.md
new file mode 100644
index 0000000..ded5d2e
--- /dev/null
+++ b/.claude/skills/nuxt/references/best-practices-data-fetching.md
@@ -0,0 +1,357 @@
+---
+name: data-fetching-best-practices
+description: Patterns and best practices for efficient data fetching in Nuxt
+---
+
+# Data Fetching Best Practices
+
+Effective data fetching patterns for SSR-friendly, performant Nuxt applications.
+
+## Choose the Right Tool
+
+| Scenario | Use |
+|----------|-----|
+| Component initial data | `useFetch` or `useAsyncData` |
+| User interactions (clicks, forms) | `$fetch` |
+| Third-party SDK/API | `useAsyncData` with custom function |
+| Multiple parallel requests | `useAsyncData` with `Promise.all` |
+
+## Await vs Non-Await Usage
+
+The `await` keyword controls whether data fetching **blocks navigation**:
+
+### With `await` - Blocking Navigation
+
+```vue
+<script setup lang="ts">
+// Navigation waits until data is fetched (uses Vue Suspense)
+const { data } = await useFetch('/api/posts')
+// data.value is available immediately after this line
+</script>
+```
+
+- **Server**: Fetches data and includes it in the payload
+- **Client hydration**: Uses payload data, no re-fetch
+- **Client navigation**: Blocks until data is ready
+
+### Without `await` - Non-Blocking (Lazy)
+
+```vue
+<script setup lang="ts">
+// Navigation proceeds immediately, data fetches in background
+const { data, status } = useFetch('/api/posts', { lazy: true })
+// data.value may be undefined initially - check status!
+</script>
+
+<template>
+  <div v-if="status === 'pending'">Loading...</div>
+  <div v-else>{{ data }}</div>
+</template>
+```
+
+Equivalent to using `useLazyFetch`:
+
+```vue
+<script setup lang="ts">
+const { data, status } = useLazyFetch('/api/posts')
+</script>
+```
+
+### When to Use Each
+
+| Pattern | Use Case |
+|---------|----------|
+| `await useFetch()` | Critical data needed for SEO/initial render |
+| `useFetch({ lazy: true })` | Non-critical data, better perceived performance |
+| `await useLazyFetch()` | Same as lazy, await only ensures initialization |
+
+## Avoid Double Fetching
+
+### ❌ Wrong: Using $fetch Alone in Setup
+
+```vue
+<script setup lang="ts">
+// This fetches TWICE: once on server, once on client
+const data = await $fetch('/api/posts')
+</script>
+```
+
+### ✅ Correct: Use useFetch
+
+```vue
+<script setup lang="ts">
+// Fetches on server, hydrates on client (no double fetch)
+const { data } = await useFetch('/api/posts')
+</script>
+```
+
+## Use Explicit Cache Keys
+
+### ❌ Avoid: Auto-generated Keys
+
+```vue
+<script setup lang="ts">
+// Key is auto-generated from file/line - can cause issues
+const { data } = await useAsyncData(() => fetchPosts())
+</script>
+```
+
+### ✅ Better: Explicit Keys
+
+```vue
+<script setup lang="ts">
+// Explicit key for predictable caching
+const { data } = await useAsyncData(
+  'posts',
+  () => fetchPosts(),
+)
+
+// Dynamic keys for parameterized data
+const route = useRoute()
+const { data: post } = await useAsyncData(
+  `post-${route.params.id}`,
+  () => fetchPost(route.params.id),
+)
+</script>
+```
+
+## Handle Loading States Properly
+
+```vue
+<script setup lang="ts">
+const { data, status, error } = await useFetch('/api/posts')
+</script>
+
+<template>
+  <div v-if="status === 'pending'">
+    <SkeletonLoader />
+  </div>
+  <div v-else-if="error">
+    <ErrorMessage :error="error" />
+  </div>
+  <div v-else>
+    <PostList :posts="data" />
+  </div>
+</template>
+```
+
+## Use Lazy Fetching for Non-critical Data
+
+```vue
+<script setup lang="ts">
+const id = useRoute().params.id
+
+// Critical data - blocks navigation
+const { data: post } = await useFetch(`/api/posts/${id}`)
+
+// Non-critical data - doesn't block navigation
+const { data: comments, status } = useFetch(`/api/posts/${id}/comments`, {
+  lazy: true,
+})
+
+// Or use useLazyFetch
+const { data: related } = useLazyFetch(`/api/posts/${id}/related`)
+</script>
+
+<template>
+  <article>
+    <h1>{{ post?.title }}</h1>
+    <p>{{ post?.content }}</p>
+  </article>
+
+  <section v-if="status === 'pending'">Loading comments...</section>
+  <CommentList v-else :comments="comments" />
+</template>
+```
+
+## Minimize Payload Size
+
+### Use `pick` for Simple Filtering
+
+```vue
+<script setup lang="ts">
+const { data } = await useFetch('/api/users', {
+  // Only include these fields in payload
+  pick: ['id', 'name', 'avatar'],
+})
+</script>
+```
+
+### Use `transform` for Complex Transformations
+
+```vue
+<script setup lang="ts">
+const { data } = await useFetch('/api/posts', {
+  transform: (posts) => {
+    return posts.map(post => ({
+      id: post.id,
+      title: post.title,
+      excerpt: post.content.slice(0, 100),
+      date: new Date(post.createdAt).toLocaleDateString(),
+    }))
+  },
+})
+</script>
+```
+
+## Parallel Fetching
+
+### Fetch Independent Data with useAsyncData
+
+```vue
+<script setup lang="ts">
+const { data } = await useAsyncData(
+  'dashboard',
+  async (_nuxtApp, { signal }) => {
+    const [user, posts, stats] = await Promise.all([
+      $fetch('/api/user', { signal }),
+      $fetch('/api/posts', { signal }),
+      $fetch('/api/stats', { signal }),
+    ])
+    return { user, posts, stats }
+  },
+)
+</script>
+```
+
+### Multiple useFetch Calls
+
+```vue
+<script setup lang="ts">
+// These run in parallel automatically
+const [{ data: user }, { data: posts }] = await Promise.all([
+  useFetch('/api/user'),
+  useFetch('/api/posts'),
+])
+</script>
+```
+
+## Efficient Refresh Patterns
+
+### Watch Reactive Dependencies
+
+```vue
+<script setup lang="ts">
+const page = ref(1)
+const category = ref('all')
+
+const { data } = await useFetch('/api/posts', {
+  query: { page, category },
+  // Auto-refresh when these change
+  watch: [page, category],
+})
+</script>
+```
+
+### Manual Refresh
+
+```vue
+<script setup lang="ts">
+const { data, refresh, status } = await useFetch('/api/posts')
+
+async function refreshPosts() {
+  await refresh()
+}
+</script>
+```
+
+### Conditional Fetching
+
+```vue
+<script setup lang="ts">
+const userId = ref<string | null>(null)
+
+const { data, execute } = useFetch(() => `/api/users/${userId.value}`, {
+  immediate: false, // Don't fetch until userId is set
+})
+
+// Later, when userId is available
+function loadUser(id: string) {
+  userId.value = id
+  execute()
+}
+</script>
+```
+
+## Server-only Fetching
+
+```vue
+<script setup lang="ts">
+// Only fetch on server, skip on client navigation
+const { data } = await useFetch('/api/static-content', {
+  server: true,
+  lazy: true,
+  getCachedData: (key, nuxtApp) => nuxtApp.payload.data[key],
+})
+</script>
+```
+
+## Error Handling
+
+```vue
+<script setup lang="ts">
+const { data, error, refresh } = await useFetch('/api/posts')
+
+// Watch for errors if need event-like handling
+watch(error, (err) => {
+  if (err) {
+    console.error('Fetch failed:', err)
+    // Show toast, redirect, etc.
+  }
+}, { immediate: true })
+</script>
+
+<template>
+  <div v-if="error">
+    <p>Failed to load: {{ error.message }}</p>
+    <button @click="refresh()">Retry</button>
+  </div>
+</template>
+```
+
+## Shared Data Across Components
+
+```vue
+<!-- ComponentA.vue -->
+<script setup lang="ts">
+const { data } = await useFetch('/api/user', { key: 'current-user' })
+</script>
+
+<!-- ComponentB.vue -->
+<script setup lang="ts">
+// Access cached data without refetching
+const { data: user } = useNuxtData('current-user')
+
+// Or refresh it
+const { refresh } = await useFetch('/api/user', { key: 'current-user' })
+</script>
+```
+
+## Avoid useAsyncData for Side Effects
+
+### ❌ Wrong: Side Effects in useAsyncData
+
+```vue
+<script setup lang="ts">
+// Don't trigger Pinia actions or side effects
+await useAsyncData(() => store.fetchUser()) // Can cause issues
+</script>
+```
+
+### ✅ Correct: Use callOnce for Side Effects
+
+```vue
+<script setup lang="ts">
+await callOnce(async () => {
+  await store.fetchUser()
+})
+</script>
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/getting-started/data-fetching
+- https://nuxt.com/docs/api/composables/use-fetch
+- https://nuxt.com/docs/api/composables/use-async-data
+- https://nuxt.com/docs/api/composables/use-lazy-fetch
+-->
diff --git a/.claude/skills/nuxt/references/best-practices-ssr.md b/.claude/skills/nuxt/references/best-practices-ssr.md
new file mode 100644
index 0000000..2befef0
--- /dev/null
+++ b/.claude/skills/nuxt/references/best-practices-ssr.md
@@ -0,0 +1,355 @@
+---
+name: ssr-best-practices
+description: Avoiding SSR context leaks, hydration mismatches, and proper composable usage
+---
+
+# SSR Best Practices
+
+Patterns for avoiding common SSR pitfalls: context leaks, hydration mismatches, and composable errors.
+
+## The "Nuxt Instance Unavailable" Error
+
+This error occurs when calling Nuxt composables outside the proper context.
+
+### ❌ Wrong: Composable Outside Setup
+
+```ts
+// composables/bad.ts
+// Called at module level - no Nuxt context!
+const config = useRuntimeConfig()
+
+export function useMyComposable() {
+  return config.public.apiBase
+}
+```
+
+### ✅ Correct: Composable Inside Function
+
+```ts
+// composables/good.ts
+export function useMyComposable() {
+  // Called inside the composable - has context
+  const config = useRuntimeConfig()
+  return config.public.apiBase
+}
+```
+
+### Valid Contexts for Composables
+
+Nuxt composables work in:
+- `<script setup>` blocks
+- `setup()` function
+- `defineNuxtPlugin()` callbacks
+- `defineNuxtRouteMiddleware()` callbacks
+
+```ts
+// ✅ Plugin
+export default defineNuxtPlugin(() => {
+  const config = useRuntimeConfig() // Works
+})
+
+// ✅ Middleware
+export default defineNuxtRouteMiddleware(() => {
+  const route = useRoute() // Works
+})
+```
+
+## Avoid State Leaks Between Requests
+
+### ❌ Wrong: Module-level State
+
+```ts
+// composables/bad.ts
+// This state is SHARED between all requests on server!
+const globalState = ref({ user: null })
+
+export function useUser() {
+  return globalState
+}
+```
+
+### ✅ Correct: Use useState
+
+```ts
+// composables/good.ts
+export function useUser() {
+  // useState creates request-isolated state
+  return useState('user', () => ({ user: null }))
+}
+```
+
+### Why This Matters
+
+On the server, module-level state persists across requests, causing:
+- Data leaking between users
+- Security vulnerabilities
+- Memory leaks
+
+## Hydration Mismatch Prevention
+
+Hydration mismatches occur when server HTML differs from client render.
+
+### ❌ Wrong: Browser APIs in Setup
+
+```vue
+<script setup>
+// localStorage doesn't exist on server!
+const theme = localStorage.getItem('theme') || 'light'
+</script>
+```
+
+### ✅ Correct: Use SSR-safe Alternatives
+
+```vue
+<script setup>
+// useCookie works on both server and client
+const theme = useCookie('theme', { default: () => 'light' })
+</script>
+```
+
+### ❌ Wrong: Random/Time-based Values
+
+```vue
+<template>
+  <div>{{ Math.random() }}</div>
+  <div>{{ new Date().toLocaleTimeString() }}</div>
+</template>
+```
+
+### ✅ Correct: Use useState for Consistency
+
+```vue
+<script setup>
+// Value is generated once on server, hydrated on client
+const randomValue = useState('random', () => Math.random())
+</script>
+
+<template>
+  <div>{{ randomValue }}</div>
+</template>
+```
+
+### ❌ Wrong: Conditional Rendering on Client State
+
+```vue
+<template>
+  <!-- window doesn't exist on server -->
+  <div v-if="window?.innerWidth > 768">Desktop</div>
+</template>
+```
+
+### ✅ Correct: Use CSS or ClientOnly
+
+```vue
+<template>
+  <!-- CSS media queries work on both -->
+  <div class="hidden md:block">Desktop</div>
+  <div class="md:hidden">Mobile</div>
+
+  <!-- Or use ClientOnly for JS-dependent rendering -->
+  <ClientOnly>
+    <ResponsiveComponent />
+    <template #fallback>Loading...</template>
+  </ClientOnly>
+</template>
+```
+
+## Browser-only Code
+
+### Use `import.meta.client`
+
+```vue
+<script setup>
+if (import.meta.client) {
+  // Only runs in browser
+  window.addEventListener('scroll', handleScroll)
+}
+</script>
+```
+
+### Use `onMounted` for DOM Access
+
+```vue
+<script setup>
+const el = ref<HTMLElement>()
+
+onMounted(() => {
+  // Safe - only runs on client after hydration
+  el.value?.focus()
+  initThirdPartyLib()
+})
+</script>
+```
+
+### Dynamic Imports for Browser Libraries
+
+```vue
+<script setup>
+onMounted(async () => {
+  const { Chart } = await import('chart.js')
+  new Chart(canvas.value, config)
+})
+</script>
+```
+
+## Server-only Code
+
+### Use `import.meta.server`
+
+```vue
+<script setup>
+if (import.meta.server) {
+  // Only runs on server
+  const secrets = useRuntimeConfig().apiSecret
+}
+</script>
+```
+
+### Server Components
+
+```vue
+<!-- components/ServerData.server.vue -->
+<script setup>
+// This entire component only runs on server
+const data = await fetchSensitiveData()
+</script>
+
+<template>
+  <div>{{ data }}</div>
+</template>
+```
+
+## Async Composable Patterns
+
+### ❌ Wrong: Await Before Composable
+
+```vue
+<script setup>
+await someAsyncOperation()
+const route = useRoute() // May fail - context lost after await
+</script>
+```
+
+### ✅ Correct: Get Context First
+
+```vue
+<script setup>
+// Get all composables before any await
+const route = useRoute()
+const config = useRuntimeConfig()
+
+await someAsyncOperation()
+// Now safe to use route and config
+</script>
+```
+
+## Plugin Best Practices
+
+### Client-only Plugins
+
+```ts
+// plugins/analytics.client.ts
+export default defineNuxtPlugin(() => {
+  // Only runs on client
+  initAnalytics()
+})
+```
+
+### Server-only Plugins
+
+```ts
+// plugins/server-init.server.ts
+export default defineNuxtPlugin(() => {
+  // Only runs on server
+  initServerConnections()
+})
+```
+
+### Provide/Inject Pattern
+
+```ts
+// plugins/api.ts
+export default defineNuxtPlugin(() => {
+  const api = createApiClient()
+
+  return {
+    provide: {
+      api,
+    },
+  }
+})
+```
+
+```vue
+<script setup>
+const { $api } = useNuxtApp()
+const data = await $api.get('/users')
+</script>
+```
+
+## Third-party Library Integration
+
+### ❌ Wrong: Import at Top Level
+
+```vue
+<script setup>
+import SomeLibrary from 'browser-only-lib' // Breaks SSR
+</script>
+```
+
+### ✅ Correct: Dynamic Import
+
+```vue
+<script setup>
+let library: typeof import('browser-only-lib')
+
+onMounted(async () => {
+  library = await import('browser-only-lib')
+  library.init()
+})
+</script>
+```
+
+### Use ClientOnly Component
+
+```vue
+<template>
+  <ClientOnly>
+    <BrowserOnlyComponent />
+    <template #fallback>
+      <div class="skeleton">Loading...</div>
+    </template>
+  </ClientOnly>
+</template>
+```
+
+## Debugging SSR Issues
+
+### Check Rendering Context
+
+```vue
+<script setup>
+console.log('Server:', import.meta.server)
+console.log('Client:', import.meta.client)
+</script>
+```
+
+### Use Nuxt DevTools
+
+DevTools shows payload data and hydration state.
+
+### Common Error Messages
+
+| Error | Cause |
+|-------|-------|
+| "Nuxt instance unavailable" | Composable called outside setup context |
+| "Hydration mismatch" | Server/client HTML differs |
+| "window is not defined" | Browser API used during SSR |
+| "document is not defined" | DOM access during SSR |
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/guide/concepts/auto-imports#vue-and-nuxt-composables
+- https://nuxt.com/docs/guide/best-practices/hydration
+- https://nuxt.com/docs/getting-started/state-management#best-practices
+-->
diff --git a/.claude/skills/nuxt/references/core-cli.md b/.claude/skills/nuxt/references/core-cli.md
new file mode 100644
index 0000000..1487836
--- /dev/null
+++ b/.claude/skills/nuxt/references/core-cli.md
@@ -0,0 +1,263 @@
+---
+name: cli-commands
+description: Nuxt CLI commands for development, building, and project management
+---
+
+# CLI Commands
+
+Nuxt provides CLI commands via `nuxi` (or `npx nuxt`) for development, building, and project management.
+
+## Project Initialization
+
+### Create New Project
+
+```bash
+# Interactive project creation
+npx nuxi@latest init my-app
+
+# With specific package manager
+npx nuxi@latest init my-app --packageManager pnpm
+
+# With modules
+npx nuxi@latest init my-app --modules "@nuxt/ui,@nuxt/image"
+
+# From template
+npx nuxi@latest init my-app --template v3
+
+# Skip module selection prompt
+npx nuxi@latest init my-app --no-modules
+```
+
+**Options:**
+| Option | Description |
+|--------|-------------|
+| `-t, --template` | Template name |
+| `--packageManager` | npm, pnpm, yarn, or bun |
+| `-M, --modules` | Modules to install (comma-separated) |
+| `--gitInit` | Initialize git repository |
+| `--no-install` | Skip installing dependencies |
+
+## Development
+
+### Start Dev Server
+
+```bash
+# Start development server (default: http://localhost:3000)
+npx nuxt dev
+
+# Custom port
+npx nuxt dev --port 4000
+
+# Open in browser
+npx nuxt dev --open
+
+# Listen on all interfaces (for mobile testing)
+npx nuxt dev --host 0.0.0.0
+
+# With HTTPS
+npx nuxt dev --https
+
+# Clear console on restart
+npx nuxt dev --clear
+
+# Create public tunnel
+npx nuxt dev --tunnel
+```
+
+**Options:**
+| Option | Description |
+|--------|-------------|
+| `-p, --port` | Port to listen on |
+| `-h, --host` | Host to listen on |
+| `-o, --open` | Open in browser |
+| `--https` | Enable HTTPS |
+| `--tunnel` | Create public tunnel (via untun) |
+| `--qr` | Show QR code for mobile |
+| `--clear` | Clear console on restart |
+
+**Environment Variables:**
+- `NUXT_PORT` or `PORT` - Default port
+- `NUXT_HOST` or `HOST` - Default host
+
+## Building
+
+### Production Build
+
+```bash
+# Build for production
+npx nuxt build
+
+# Build with prerendering
+npx nuxt build --prerender
+
+# Build with specific preset
+npx nuxt build --preset node-server
+npx nuxt build --preset cloudflare-pages
+npx nuxt build --preset vercel
+
+# Build with environment
+npx nuxt build --envName staging
+```
+
+Output is created in `.output/` directory.
+
+### Static Generation
+
+```bash
+# Generate static site (prerenders all routes)
+npx nuxt generate
+```
+
+Equivalent to `nuxt build --prerender`. Creates static HTML files for deployment to static hosting.
+
+### Preview Production Build
+
+```bash
+# Preview after build
+npx nuxt preview
+
+# Custom port
+npx nuxt preview --port 4000
+```
+
+## Utilities
+
+### Prepare (Type Generation)
+
+```bash
+# Generate TypeScript types and .nuxt directory
+npx nuxt prepare
+```
+
+Run after cloning or when types are missing.
+
+### Type Check
+
+```bash
+# Run TypeScript type checking
+npx nuxt typecheck
+```
+
+### Analyze Bundle
+
+```bash
+# Analyze production bundle
+npx nuxt analyze
+```
+
+Opens visual bundle analyzer.
+
+### Cleanup
+
+```bash
+# Remove generated files (.nuxt, .output, node_modules/.cache)
+npx nuxt cleanup
+```
+
+### Info
+
+```bash
+# Show environment info (useful for bug reports)
+npx nuxt info
+```
+
+### Upgrade
+
+```bash
+# Upgrade Nuxt to latest version
+npx nuxt upgrade
+
+# Upgrade to nightly release
+npx nuxt upgrade --nightly
+```
+
+## Module Commands
+
+### Add Module
+
+```bash
+# Add a Nuxt module
+npx nuxt module add @nuxt/ui
+npx nuxt module add @nuxt/image
+```
+
+Installs and adds to `nuxt.config.ts`.
+
+### Build Module (for module authors)
+
+```bash
+# Build a Nuxt module
+npx nuxt build-module
+```
+
+## DevTools
+
+```bash
+# Enable DevTools globally
+npx nuxt devtools enable
+
+# Disable DevTools
+npx nuxt devtools disable
+```
+
+## Common Workflows
+
+### Development
+
+```bash
+# Install dependencies and start dev
+pnpm install
+pnpm dev  # or npx nuxt dev
+```
+
+### Production Deployment
+
+```bash
+# Build and preview locally
+pnpm build
+pnpm preview
+
+# Or for static hosting
+pnpm generate
+```
+
+### After Cloning
+
+```bash
+# Install deps and prepare types
+pnpm install
+npx nuxt prepare
+```
+
+## Environment-specific Builds
+
+```bash
+# Development build
+npx nuxt build --envName development
+
+# Staging build
+npx nuxt build --envName staging
+
+# Production build (default)
+npx nuxt build --envName production
+```
+
+Corresponds to `$development`, `$env.staging`, `$production` in `nuxt.config.ts`.
+
+## Layer Extension
+
+```bash
+# Dev with additional layer
+npx nuxt dev --extends ./base-layer
+
+# Build with layer
+npx nuxt build --extends ./base-layer
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/api/commands/dev
+- https://nuxt.com/docs/api/commands/build
+- https://nuxt.com/docs/api/commands/generate
+- https://nuxt.com/docs/api/commands/init
+-->
diff --git a/.claude/skills/nuxt/references/core-config.md b/.claude/skills/nuxt/references/core-config.md
new file mode 100644
index 0000000..ebce5d5
--- /dev/null
+++ b/.claude/skills/nuxt/references/core-config.md
@@ -0,0 +1,162 @@
+---
+name: configuration
+description: Nuxt configuration files including nuxt.config.ts, app.config.ts, and runtime configuration
+---
+
+# Nuxt Configuration
+
+Nuxt uses configuration files to customize application behavior. The main configuration options are `nuxt.config.ts` for build-time settings and `app.config.ts` for runtime settings.
+
+## nuxt.config.ts
+
+The main configuration file at the root of your project:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  // Configuration options
+  devtools: { enabled: true },
+  modules: ['@nuxt/ui'],
+})
+```
+
+### Environment Overrides
+
+Configure environment-specific settings:
+
+```ts
+export default defineNuxtConfig({
+  $production: {
+    routeRules: {
+      '/**': { isr: true },
+    },
+  },
+  $development: {
+    // Development-specific config
+  },
+  $env: {
+    staging: {
+      // Staging environment config
+    },
+  },
+})
+```
+
+Use `--envName` flag to select environment: `nuxt build --envName staging`
+
+## Runtime Config
+
+For values that need to be overridden via environment variables:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  runtimeConfig: {
+    // Server-only keys
+    apiSecret: '123',
+    // Keys within public are exposed to client
+    public: {
+      apiBase: '/api',
+    },
+  },
+})
+```
+
+Override with environment variables:
+
+```ini
+# .env
+NUXT_API_SECRET=api_secret_token
+NUXT_PUBLIC_API_BASE=https://api.example.com
+```
+
+Access in components/composables:
+
+```vue
+<script setup lang="ts">
+const config = useRuntimeConfig()
+// Server: config.apiSecret, config.public.apiBase
+// Client: config.public.apiBase only
+</script>
+```
+
+## App Config
+
+For public tokens determined at build time (not overridable via env vars):
+
+```ts
+// app/app.config.ts
+export default defineAppConfig({
+  title: 'Hello Nuxt',
+  theme: {
+    dark: true,
+    colors: {
+      primary: '#ff0000',
+    },
+  },
+})
+```
+
+Access in components:
+
+```vue
+<script setup lang="ts">
+const appConfig = useAppConfig()
+</script>
+```
+
+## runtimeConfig vs app.config
+
+| Feature | runtimeConfig | app.config |
+|---------|--------------|------------|
+| Client-side | Hydrated | Bundled |
+| Environment variables | Yes | No |
+| Reactive | Yes | Yes |
+| Hot module replacement | No | Yes |
+| Non-primitive JS types | No | Yes |
+
+**Use runtimeConfig** for secrets and values that change per environment.
+**Use app.config** for public tokens, theme settings, and non-sensitive config.
+
+## External Tool Configuration
+
+Nuxt uses `nuxt.config.ts` as single source of truth. Configure external tools within it:
+
+```ts
+export default defineNuxtConfig({
+  // Nitro configuration
+  nitro: {
+    // nitro options
+  },
+  // Vite configuration
+  vite: {
+    // vite options
+    vue: {
+      // @vitejs/plugin-vue options
+    },
+  },
+  // PostCSS configuration
+  postcss: {
+    // postcss options
+  },
+})
+```
+
+## Vue Configuration
+
+Enable Vue experimental features:
+
+```ts
+export default defineNuxtConfig({
+  vue: {
+    propsDestructure: true,
+  },
+})
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/getting-started/configuration
+- https://nuxt.com/docs/guide/going-further/runtime-config
+- https://nuxt.com/docs/api/nuxt-config
+-->
diff --git a/.claude/skills/nuxt/references/core-data-fetching.md b/.claude/skills/nuxt/references/core-data-fetching.md
new file mode 100644
index 0000000..d662efb
--- /dev/null
+++ b/.claude/skills/nuxt/references/core-data-fetching.md
@@ -0,0 +1,236 @@
+---
+name: data-fetching
+description: useFetch, useAsyncData, and $fetch for SSR-friendly data fetching
+---
+
+# Data Fetching
+
+Nuxt provides composables for SSR-friendly data fetching that prevent double-fetching and handle hydration.
+
+## Overview
+
+- `$fetch` - Basic fetch utility (use for client-side events)
+- `useFetch` - SSR-safe wrapper around $fetch (use for component data)
+- `useAsyncData` - SSR-safe wrapper for any async function
+
+## useFetch
+
+Primary composable for fetching data in components:
+
+```vue
+<script setup lang="ts">
+const { data, status, error, refresh, clear } = await useFetch('/api/posts')
+</script>
+
+<template>
+  <div v-if="status === 'pending'">Loading...</div>
+  <div v-else-if="error">Error: {{ error.message }}</div>
+  <div v-else>
+    <article v-for="post in data" :key="post.id">
+      {{ post.title }}
+    </article>
+  </div>
+</template>
+```
+
+### With Options
+
+```ts
+const { data } = await useFetch('/api/posts', {
+  // Query parameters
+  query: { page: 1, limit: 10 },
+  // Request body (for POST/PUT)
+  body: { title: 'New Post' },
+  // HTTP method
+  method: 'POST',
+  // Only pick specific fields
+  pick: ['id', 'title'],
+  // Transform response
+  transform: (posts) => posts.map(p => ({ ...p, slug: slugify(p.title) })),
+  // Custom key for caching
+  key: 'posts-list',
+  // Don't fetch on server
+  server: false,
+  // Don't block navigation
+  lazy: true,
+  // Don't fetch immediately
+  immediate: false,
+  // Default value
+  default: () => [],
+})
+```
+
+### Reactive Parameters
+
+```vue
+<script setup lang="ts">
+const page = ref(1)
+const { data } = await useFetch('/api/posts', {
+  query: { page }, // Automatically refetches when page changes
+})
+</script>
+```
+
+### Computed URL
+
+```vue
+<script setup lang="ts">
+const id = ref(1)
+const { data } = await useFetch(() => `/api/posts/${id.value}`)
+// Refetches when id changes
+</script>
+```
+
+## useAsyncData
+
+For wrapping any async function:
+
+```vue
+<script setup lang="ts">
+const { data, error } = await useAsyncData('user', () => {
+  return myCustomFetch('/user/profile')
+})
+</script>
+```
+
+### Multiple Requests
+
+```vue
+<script setup lang="ts">
+const { data } = await useAsyncData('cart', async () => {
+  const [coupons, offers] = await Promise.all([
+    $fetch('/api/coupons'),
+    $fetch('/api/offers'),
+  ])
+  return { coupons, offers }
+})
+</script>
+```
+
+## $fetch
+
+For client-side events (form submissions, button clicks):
+
+```vue
+<script setup lang="ts">
+async function submitForm() {
+  const result = await $fetch('/api/submit', {
+    method: 'POST',
+    body: { name: 'John' },
+  })
+}
+</script>
+```
+
+**Important**: Don't use `$fetch` alone in setup for initial data - it will fetch twice (server + client). Use `useFetch` or `useAsyncData` instead.
+
+## Return Values
+
+All composables return:
+
+| Property | Type | Description |
+|----------|------|-------------|
+| `data` | `Ref<T>` | Fetched data |
+| `error` | `Ref<Error>` | Error if request failed |
+| `status` | `Ref<'idle' \| 'pending' \| 'success' \| 'error'>` | Request status |
+| `refresh` | `() => Promise` | Refetch data |
+| `execute` | `() => Promise` | Alias for refresh |
+| `clear` | `() => void` | Reset data and error |
+
+## Lazy Fetching
+
+Don't block navigation:
+
+```vue
+<script setup lang="ts">
+// Using lazy option
+const { data, status } = await useFetch('/api/posts', { lazy: true })
+
+// Or use lazy variants
+const { data, status } = await useLazyFetch('/api/posts')
+const { data, status } = await useLazyAsyncData('key', fetchFn)
+</script>
+```
+
+## Refresh & Watch
+
+```vue
+<script setup lang="ts">
+const category = ref('tech')
+
+const { data, refresh } = await useFetch('/api/posts', {
+  query: { category },
+  // Auto-refresh when category changes
+  watch: [category],
+})
+
+// Manual refresh
+const refreshData = () => refresh()
+</script>
+```
+
+## Caching
+
+Data is cached by key. Share data across components:
+
+```vue
+<script setup lang="ts">
+// In component A
+const { data } = await useFetch('/api/user', { key: 'current-user' })
+
+// In component B - uses cached data
+const { data } = useNuxtData('current-user')
+</script>
+```
+
+Refresh cached data globally:
+
+```ts
+// Refresh specific key
+await refreshNuxtData('current-user')
+
+// Refresh all data
+await refreshNuxtData()
+
+// Clear cached data
+clearNuxtData('current-user')
+```
+
+## Interceptors
+
+```ts
+const { data } = await useFetch('/api/auth', {
+  onRequest({ options }) {
+    options.headers.set('Authorization', `Bearer ${token}`)
+  },
+  onRequestError({ error }) {
+    console.error('Request failed:', error)
+  },
+  onResponse({ response }) {
+    // Process response
+  },
+  onResponseError({ response }) {
+    if (response.status === 401) {
+      navigateTo('/login')
+    }
+  },
+})
+```
+
+## Passing Headers (SSR)
+
+`useFetch` automatically proxies cookies/headers from client to server. For `$fetch`:
+
+```vue
+<script setup lang="ts">
+const headers = useRequestHeaders(['cookie'])
+const data = await $fetch('/api/user', { headers })
+</script>
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/getting-started/data-fetching
+- https://nuxt.com/docs/api/composables/use-fetch
+- https://nuxt.com/docs/api/composables/use-async-data
+-->
diff --git a/.claude/skills/nuxt/references/core-deployment.md b/.claude/skills/nuxt/references/core-deployment.md
new file mode 100644
index 0000000..6fca597
--- /dev/null
+++ b/.claude/skills/nuxt/references/core-deployment.md
@@ -0,0 +1,224 @@
+---
+name: deployment
+description: Deploying Nuxt applications to various hosting platforms
+---
+
+# Deployment
+
+Nuxt is platform-agnostic thanks to [Nitro](https://nitro.build), its server engine. You can deploy to almost any platform with minimal configuration—Node.js servers, static hosting, serverless functions, or edge networks.
+
+> **Full list of supported platforms:** https://nitro.build/deploy
+
+## Deployment Modes
+
+### Node.js Server
+
+```bash
+# Build for Node.js
+nuxt build
+
+# Run production server
+node .output/server/index.mjs
+```
+
+Environment variables:
+- `PORT` or `NITRO_PORT` (default: 3000)
+- `HOST` or `NITRO_HOST` (default: 0.0.0.0)
+
+### Static Generation
+
+```bash
+# Generate static site
+nuxt generate
+```
+
+Output in `.output/public/` - deploy to any static host.
+
+### Preset Configuration
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  nitro: {
+    preset: 'vercel', // or 'netlify', 'cloudflare-pages', etc.
+  },
+})
+```
+
+Or via environment variable:
+
+```bash
+NITRO_PRESET=vercel nuxt build
+```
+
+---
+
+## Recommended Platforms
+
+When helping users choose a deployment platform, consider their needs:
+
+### Vercel
+
+**Best for:** Projects wanting zero-config deployment with excellent DX
+
+```bash
+# Install Vercel CLI
+npm i -g vercel
+
+# Deploy
+vercel
+```
+
+**Pros:**
+- Zero configuration for Nuxt (auto-detects)
+- Excellent preview deployments for PRs
+- Built-in analytics and speed insights
+- Edge Functions support
+- Great free tier for personal projects
+
+**Cons:**
+- Can get expensive at scale (bandwidth costs)
+- Vendor lock-in concerns
+- Limited build minutes on free tier
+
+**Recommended when:** User wants fastest setup, values DX, building SaaS or marketing sites.
+
+---
+
+### Netlify
+
+**Best for:** JAMstack sites, static-heavy apps, teams needing forms/identity
+
+```bash
+# Install Netlify CLI
+npm i -g netlify-cli
+
+# Deploy
+netlify deploy --prod
+```
+
+**Pros:**
+- Great free tier with generous bandwidth
+- Built-in forms, identity, and functions
+- Excellent for static sites with some dynamic features
+- Good preview deployments
+- Split testing built-in
+
+**Cons:**
+- SSR/serverless functions can be slower than Vercel
+- Less optimized for full SSR apps
+- Build minutes can run out on free tier
+
+**Recommended when:** User has static-heavy site, needs built-in forms/auth, or prefers Netlify ecosystem.
+
+---
+
+### Cloudflare Pages
+
+**Best for:** Global performance, edge computing, cost-conscious projects
+
+```bash
+# Build with Cloudflare preset
+NITRO_PRESET=cloudflare-pages nuxt build
+```
+
+**Pros:**
+- Unlimited bandwidth on free tier
+- Excellent global edge network (fastest TTFB)
+- Workers for edge computing
+- Very cost-effective at scale
+- D1, KV, R2 for data storage
+
+**Cons:**
+- Workers have execution limits (CPU time)
+- Some Node.js APIs not available in Workers
+- Less mature than Vercel/Netlify for frameworks
+
+**Recommended when:** User prioritizes performance, global reach, or cost at scale.
+
+---
+
+### GitHub Actions + Self-hosted/VPS
+
+**Best for:** Full control, existing infrastructure, CI/CD customization
+
+```yaml
+# .github/workflows/deploy.yml
+name: Deploy
+on:
+  push:
+    branches: [main]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      
+      - run: npm ci
+      - run: npm run build
+      
+      # Deploy to your server (example: rsync to VPS)
+      - name: Deploy to server
+        run: rsync -avz .output/ user@server:/app/
+```
+
+**Pros:**
+- Full control over build and deployment
+- No vendor lock-in
+- Can deploy anywhere (VPS, Docker, Kubernetes)
+- Free CI/CD minutes for public repos
+- Customizable workflows
+
+**Cons:**
+- Requires more setup and maintenance
+- Need to manage your own infrastructure
+- No built-in preview deployments
+- SSL, scaling, monitoring are your responsibility
+
+**Recommended when:** User has existing infrastructure, needs full control, or deploying to private/enterprise environments.
+
+---
+
+## Quick Decision Guide
+
+| Need | Recommendation |
+|------|----------------|
+| Fastest setup, small team | **Vercel** |
+| Static site with forms | **Netlify** |
+| Cost-sensitive at scale | **Cloudflare Pages** |
+| Full control / enterprise | **GitHub Actions + VPS** |
+| Docker/Kubernetes | **GitHub Actions + Container Registry** |
+| Serverless APIs | **Vercel** or **AWS Lambda** |
+
+## Docker Deployment
+
+```dockerfile
+FROM node:20-alpine AS builder
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci
+COPY . .
+RUN npm run build
+
+FROM node:20-alpine
+WORKDIR /app
+COPY --from=builder /app/.output .output
+ENV PORT=3000
+EXPOSE 3000
+CMD ["node", ".output/server/index.mjs"]
+```
+
+```bash
+docker build -t my-nuxt-app .
+docker run -p 3000:3000 my-nuxt-app
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/getting-started/deployment
+- https://nitro.build/deploy
+-->
diff --git a/.claude/skills/nuxt/references/core-directory-structure.md b/.claude/skills/nuxt/references/core-directory-structure.md
new file mode 100644
index 0000000..415e112
--- /dev/null
+++ b/.claude/skills/nuxt/references/core-directory-structure.md
@@ -0,0 +1,269 @@
+---
+name: directory-structure
+description: Nuxt project folder structure, conventions, and file organization
+---
+
+# Directory Structure
+
+Nuxt uses conventions-based directory structure. Understanding it is key to effective development.
+
+## Standard Project Structure
+
+```
+my-nuxt-app/
+├── app/                    # Application source (can be at root level)
+│   ├── app.vue             # Root component
+│   ├── app.config.ts       # App configuration (runtime)
+│   ├── error.vue           # Error page
+│   ├── components/         # Auto-imported Vue components
+│   ├── composables/        # Auto-imported composables
+│   ├── layouts/            # Layout components
+│   ├── middleware/         # Route middleware
+│   ├── pages/              # File-based routing
+│   ├── plugins/            # Vue plugins
+│   └── utils/              # Auto-imported utilities
+├── assets/                 # Build-processed assets (CSS, images)
+├── public/                 # Static assets (served as-is)
+├── server/                 # Server-side code
+│   ├── api/                # API routes (/api/*)
+│   ├── routes/             # Server routes
+│   ├── middleware/         # Server middleware
+│   ├── plugins/            # Nitro plugins
+│   └── utils/              # Server utilities (auto-imported)
+├── content/                # Content files (@nuxt/content)
+├── layers/                 # Local layers (auto-scanned)
+├── modules/                # Local modules
+├── nuxt.config.ts          # Nuxt configuration
+├── package.json
+└── tsconfig.json
+```
+
+## Key Directories
+
+### `app/` Directory
+
+Contains all application code. Can also be at root level (without `app/` folder).
+
+```ts
+// nuxt.config.ts - customize source directory
+export default defineNuxtConfig({
+  srcDir: 'src/', // Change from 'app/' to 'src/'
+})
+```
+
+### `app/components/`
+
+Vue components auto-imported by name:
+
+```
+components/
+├── Button.vue           → <Button />
+├── Card.vue             → <Card />
+├── base/
+│   └── Button.vue       → <BaseButton />
+├── ui/
+│   ├── Input.vue        → <UiInput />
+│   └── Modal.vue        → <UiModal />
+└── TheHeader.vue        → <TheHeader />
+```
+
+**Lazy loading**: Prefix with `Lazy` for dynamic import:
+
+```vue
+<template>
+  <LazyHeavyChart v-if="showChart" />
+</template>
+```
+
+**Client/Server only**:
+
+```
+components/
+├── Comments.client.vue  → Only rendered on client
+└── ServerData.server.vue → Only rendered on server
+```
+
+### `app/composables/`
+
+Vue composables auto-imported (top-level files only):
+
+```
+composables/
+├── useAuth.ts           → useAuth()
+├── useFoo.ts            → useFoo()
+└── nested/
+    └── utils.ts         → NOT auto-imported
+```
+
+Re-export nested composables:
+
+```ts
+// composables/index.ts
+export { useHelper } from './nested/utils'
+```
+
+### `app/pages/`
+
+File-based routing:
+
+```
+pages/
+├── index.vue            → /
+├── about.vue            → /about
+├── blog/
+│   ├── index.vue        → /blog
+│   └── [slug].vue       → /blog/:slug
+├── users/
+│   └── [id]/
+│       └── profile.vue  → /users/:id/profile
+├── [...slug].vue        → /* (catch-all)
+├── [[optional]].vue     → /:optional? (optional param)
+└── (marketing)/         → Route group (not in URL)
+    └── pricing.vue      → /pricing
+```
+
+**Pages are optional**: Without `pages/`, no vue-router is included.
+
+### `app/layouts/`
+
+Layout components wrapping pages:
+
+```
+layouts/
+├── default.vue          → Default layout
+├── admin.vue            → Admin layout
+└── blank.vue            → No layout
+```
+
+```vue
+<!-- layouts/default.vue -->
+<template>
+  <div>
+    <TheHeader />
+    <slot />
+    <TheFooter />
+  </div>
+</template>
+```
+
+Use in pages:
+
+```vue
+<script setup>
+definePageMeta({
+  layout: 'admin',
+  // layout: false // Disable layout
+})
+</script>
+```
+
+### `app/middleware/`
+
+Route middleware:
+
+```
+middleware/
+├── auth.ts              → Named middleware
+├── admin.ts             → Named middleware
+└── logger.global.ts     → Global middleware (runs on every route)
+```
+
+### `app/plugins/`
+
+Nuxt plugins (auto-registered):
+
+```
+plugins/
+├── 01.analytics.ts      → Order with number prefix
+├── 02.auth.ts
+├── vue-query.client.ts  → Client-only plugin
+└── server-init.server.ts → Server-only plugin
+```
+
+### `server/` Directory
+
+Nitro server code:
+
+```
+server/
+├── api/
+│   ├── users.ts         → GET /api/users
+│   ├── users.post.ts    → POST /api/users
+│   └── users/[id].ts    → /api/users/:id
+├── routes/
+│   └── sitemap.xml.ts   → /sitemap.xml
+├── middleware/
+│   └── auth.ts          → Runs on every request
+├── plugins/
+│   └── db.ts            → Server startup plugins
+└── utils/
+    └── db.ts            → Auto-imported server utilities
+```
+
+### `public/` Directory
+
+Static assets served at root URL:
+
+```
+public/
+├── favicon.ico          → /favicon.ico
+├── robots.txt           → /robots.txt
+└── images/
+    └── logo.png         → /images/logo.png
+```
+
+### `assets/` Directory
+
+Build-processed assets:
+
+```
+assets/
+├── css/
+│   └── main.css
+├── images/
+│   └── hero.png
+└── fonts/
+    └── custom.woff2
+```
+
+Reference in components:
+
+```vue
+<template>
+  <img src="~/assets/images/hero.png" />
+</template>
+
+<style>
+@import '~/assets/css/main.css';
+</style>
+```
+
+## Special Files
+
+| File | Purpose |
+|------|---------|
+| `app.vue` | Root component (optional with pages/) |
+| `app.config.ts` | Runtime app configuration |
+| `error.vue` | Custom error page |
+| `nuxt.config.ts` | Build-time configuration |
+| `.nuxtignore` | Ignore files from Nuxt |
+| `.env` | Environment variables |
+
+## File Naming Conventions
+
+| Pattern | Meaning |
+|---------|---------|
+| `[param]` | Dynamic route parameter |
+| `[[param]]` | Optional parameter |
+| `[...slug]` | Catch-all route |
+| `(group)` | Route group (not in URL) |
+| `.client.vue` | Client-only component |
+| `.server.vue` | Server-only component |
+| `.global.ts` | Global middleware |
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/directory-structure
+- https://nuxt.com/docs/directory-structure/app
+- https://nuxt.com/docs/directory-structure/server
+-->
diff --git a/.claude/skills/nuxt/references/core-modules.md b/.claude/skills/nuxt/references/core-modules.md
new file mode 100644
index 0000000..dab3f95
--- /dev/null
+++ b/.claude/skills/nuxt/references/core-modules.md
@@ -0,0 +1,292 @@
+---
+name: nuxt-modules
+description: Creating and using Nuxt modules to extend framework functionality
+---
+
+# Nuxt Modules
+
+Modules extend Nuxt's core functionality. They run at build time and can add components, composables, plugins, and configuration.
+
+## Using Modules
+
+Install and add to `nuxt.config.ts`:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  modules: [
+    // npm package
+    '@nuxt/ui',
+    // Local module
+    './modules/my-module',
+    // Inline module
+    (options, nuxt) => {
+      console.log('Inline module')
+    },
+    // With options
+    ['@nuxt/image', { provider: 'cloudinary' }],
+  ],
+})
+```
+
+## Creating Modules
+
+### Basic Module
+
+```ts
+// modules/my-module.ts
+export default defineNuxtModule({
+  meta: {
+    name: 'my-module',
+    configKey: 'myModule',
+  },
+  defaults: {
+    enabled: true,
+  },
+  setup(options, nuxt) {
+    if (!options.enabled) return
+
+    console.log('My module is running!')
+  },
+})
+```
+
+### Adding Components
+
+```ts
+// modules/ui/index.ts
+import { addComponent, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup(options, nuxt) {
+    const { resolve } = createResolver(import.meta.url)
+
+    // Add single component
+    addComponent({
+      name: 'MyButton',
+      filePath: resolve('./runtime/components/MyButton.vue'),
+    })
+
+    // Add components directory
+    addComponentsDir({
+      path: resolve('./runtime/components'),
+      prefix: 'My',
+    })
+  },
+})
+```
+
+### Adding Composables
+
+```ts
+// modules/utils/index.ts
+import { addImports, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup() {
+    const { resolve } = createResolver(import.meta.url)
+
+    // Add auto-imported composable
+    addImports({
+      name: 'useMyUtil',
+      from: resolve('./runtime/composables/useMyUtil'),
+    })
+
+    // Add directory for auto-imports
+    addImportsDir(resolve('./runtime/composables'))
+  },
+})
+```
+
+### Adding Plugins
+
+```ts
+// modules/analytics/index.ts
+import { addPlugin, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup() {
+    const { resolve } = createResolver(import.meta.url)
+
+    addPlugin({
+      src: resolve('./runtime/plugin'),
+      mode: 'client', // 'client', 'server', or 'all'
+    })
+  },
+})
+```
+
+Plugin file:
+
+```ts
+// modules/analytics/runtime/plugin.ts
+export default defineNuxtPlugin((nuxtApp) => {
+  nuxtApp.hook('page:finish', () => {
+    console.log('Page loaded')
+  })
+})
+```
+
+### Adding Server Routes
+
+```ts
+// modules/api/index.ts
+import { addServerHandler, createResolver } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup() {
+    const { resolve } = createResolver(import.meta.url)
+
+    addServerHandler({
+      route: '/api/my-endpoint',
+      handler: resolve('./runtime/server/api/my-endpoint'),
+    })
+  },
+})
+```
+
+### Extending Config
+
+```ts
+// modules/config/index.ts
+export default defineNuxtModule({
+  setup(options, nuxt) {
+    // Add CSS
+    nuxt.options.css.push('my-module/styles.css')
+
+    // Add runtime config
+    nuxt.options.runtimeConfig.public.myModule = {
+      apiUrl: options.apiUrl,
+    }
+
+    // Extend Vite config
+    nuxt.options.vite.optimizeDeps ||= {}
+    nuxt.options.vite.optimizeDeps.include ||= []
+    nuxt.options.vite.optimizeDeps.include.push('some-package')
+  },
+})
+```
+
+## Module Hooks
+
+```ts
+export default defineNuxtModule({
+  setup(options, nuxt) {
+    // Build-time hooks
+    nuxt.hook('modules:done', () => {
+      console.log('All modules loaded')
+    })
+
+    nuxt.hook('components:dirs', (dirs) => {
+      dirs.push({ path: '~/extra-components' })
+    })
+
+    nuxt.hook('pages:extend', (pages) => {
+      pages.push({
+        name: 'custom-page',
+        path: '/custom',
+        file: resolve('./runtime/pages/custom.vue'),
+      })
+    })
+
+    nuxt.hook('imports:extend', (imports) => {
+      imports.push({ name: 'myHelper', from: 'my-package' })
+    })
+  },
+})
+```
+
+## Module Options
+
+Type-safe options with defaults:
+
+```ts
+export interface ModuleOptions {
+  apiKey: string
+  enabled?: boolean
+  prefix?: string
+}
+
+export default defineNuxtModule<ModuleOptions>({
+  meta: {
+    name: 'my-module',
+    configKey: 'myModule',
+  },
+  defaults: {
+    enabled: true,
+    prefix: 'My',
+  },
+  setup(options, nuxt) {
+    // options is typed as ModuleOptions
+    if (!options.apiKey) {
+      console.warn('API key not provided')
+    }
+  },
+})
+```
+
+Usage:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  modules: ['my-module'],
+  myModule: {
+    apiKey: 'xxx',
+    prefix: 'Custom',
+  },
+})
+```
+
+## Local Modules
+
+Place in `modules/` directory:
+
+```
+modules/
+├── my-module/
+│   ├── index.ts
+│   └── runtime/
+│       ├── components/
+│       ├── composables/
+│       └── plugin.ts
+```
+
+Auto-registered or manually added:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  modules: [
+    '~/modules/my-module', // Explicit
+  ],
+})
+```
+
+## Module Dependencies
+
+```ts
+export default defineNuxtModule({
+  meta: {
+    name: 'my-module',
+  },
+  moduleDependencies: {
+    '@nuxt/image': {
+      version: '>=1.0.0',
+      defaults: {
+        provider: 'ipx',
+      },
+    },
+  },
+  setup() {
+    // @nuxt/image is guaranteed to be installed
+  },
+})
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/guide/modules
+- https://nuxt.com/docs/guide/modules/module-anatomy
+- https://nuxt.com/docs/api/kit
+-->
diff --git a/.claude/skills/nuxt/references/core-routing.md b/.claude/skills/nuxt/references/core-routing.md
new file mode 100644
index 0000000..10696f3
--- /dev/null
+++ b/.claude/skills/nuxt/references/core-routing.md
@@ -0,0 +1,226 @@
+---
+name: routing
+description: File-based routing, dynamic routes, navigation, and middleware in Nuxt
+---
+
+# Routing
+
+Nuxt uses file-system routing based on vue-router. Files in `app/pages/` automatically create routes.
+
+## Basic Routing
+
+```
+pages/
+├── index.vue      → /
+├── about.vue      → /about
+└── posts/
+    ├── index.vue  → /posts
+    └── [id].vue   → /posts/:id
+```
+
+## Dynamic Routes
+
+Use brackets for dynamic segments:
+
+```
+pages/
+├── users/
+│   └── [id].vue       → /users/:id
+├── posts/
+│   └── [...slug].vue  → /posts/* (catch-all)
+└── [[optional]].vue   → /:optional? (optional param)
+```
+
+Access route parameters:
+
+```vue
+<script setup lang="ts">
+const route = useRoute()
+// /posts/123 → route.params.id = '123'
+console.log(route.params.id)
+</script>
+```
+
+## Navigation
+
+### NuxtLink Component
+
+```vue
+<template>
+  <nav>
+    <NuxtLink to="/">Home</NuxtLink>
+    <NuxtLink to="/about">About</NuxtLink>
+    <NuxtLink :to="{ name: 'posts-id', params: { id: 1 } }">Post 1</NuxtLink>
+  </nav>
+</template>
+```
+
+NuxtLink automatically prefetches linked pages when they enter the viewport.
+
+### Programmatic Navigation
+
+```vue
+<script setup lang="ts">
+const router = useRouter()
+
+function goToPost(id: number) {
+  navigateTo(`/posts/${id}`)
+  // or
+  router.push({ name: 'posts-id', params: { id } })
+}
+</script>
+```
+
+## Route Middleware
+
+### Named Middleware
+
+```ts
+// middleware/auth.ts
+export default defineNuxtRouteMiddleware((to, from) => {
+  const isAuthenticated = false // Your auth logic
+
+  if (!isAuthenticated) {
+    return navigateTo('/login')
+  }
+})
+```
+
+Apply to pages:
+
+```vue
+<script setup lang="ts">
+definePageMeta({
+  middleware: 'auth',
+  // or multiple: middleware: ['auth', 'admin']
+})
+</script>
+```
+
+### Global Middleware
+
+Name files with `.global` suffix:
+
+```ts
+// middleware/logging.global.ts
+export default defineNuxtRouteMiddleware((to, from) => {
+  console.log('Navigating to:', to.path)
+})
+```
+
+### Inline Middleware
+
+```vue
+<script setup lang="ts">
+definePageMeta({
+  middleware: [
+    function (to, from) {
+      // Inline middleware logic
+    },
+  ],
+})
+</script>
+```
+
+## Page Meta
+
+Configure page-level options:
+
+```vue
+<script setup lang="ts">
+definePageMeta({
+  title: 'My Page',
+  layout: 'custom',
+  middleware: 'auth',
+  validate: (route) => {
+    // Return false for 404, or object with status/statusText
+    return /^\d+$/.test(route.params.id as string)
+  },
+})
+</script>
+```
+
+## Route Validation
+
+```vue
+<script setup lang="ts">
+definePageMeta({
+  validate: (route) => {
+    // Must return boolean or object with status
+    return typeof route.params.id === 'string' && /^\d+$/.test(route.params.id)
+  },
+})
+</script>
+```
+
+## Layouts
+
+Define layouts in `app/layouts/`:
+
+```vue
+<!-- layouts/default.vue -->
+<template>
+  <div>
+    <header>Header</header>
+    <slot />
+    <footer>Footer</footer>
+  </div>
+</template>
+```
+
+```vue
+<!-- layouts/admin.vue -->
+<template>
+  <div class="admin">
+    <AdminSidebar />
+    <main>
+      <slot />
+    </main>
+  </div>
+</template>
+```
+
+Use in pages:
+
+```vue
+<script setup lang="ts">
+definePageMeta({
+  layout: 'admin',
+})
+</script>
+```
+
+Dynamic layout:
+
+```vue
+<script setup lang="ts">
+const layout = ref('default')
+
+function enableAdmin() {
+  setPageLayout('admin')
+}
+</script>
+```
+
+## Navigation Hooks
+
+```vue
+<script setup lang="ts">
+onBeforeRouteLeave((to, from) => {
+  // Confirm before leaving
+  const answer = window.confirm('Leave?')
+  if (!answer) return false
+})
+
+onBeforeRouteUpdate((to, from) => {
+  // Called when route changes but component is reused
+})
+</script>
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/getting-started/routing
+- https://nuxt.com/docs/directory-structure/app/pages
+- https://nuxt.com/docs/directory-structure/app/middleware
+-->
diff --git a/.claude/skills/nuxt/references/features-components-autoimport.md b/.claude/skills/nuxt/references/features-components-autoimport.md
new file mode 100644
index 0000000..cd815c8
--- /dev/null
+++ b/.claude/skills/nuxt/references/features-components-autoimport.md
@@ -0,0 +1,328 @@
+---
+name: components-auto-imports
+description: Auto-imported components, lazy loading, and hydration strategies
+---
+
+# Components Auto-imports
+
+Nuxt automatically imports Vue components from `app/components/` directory.
+
+## Basic Auto-imports
+
+```
+components/
+├── Button.vue         → <Button />
+├── Card.vue           → <Card />
+└── AppHeader.vue      → <AppHeader />
+```
+
+```vue
+<template>
+  <!-- No imports needed -->
+  <AppHeader />
+  <Card>
+    <Button>Click me</Button>
+  </Card>
+</template>
+```
+
+## Naming Conventions
+
+### Nested Directory Names
+
+Component names include directory path:
+
+```
+components/
+├── base/
+│   └── Button.vue       → <BaseButton />
+├── form/
+│   ├── Input.vue        → <FormInput />
+│   └── Select.vue       → <FormSelect />
+└── ui/
+    └── modal/
+        └── Dialog.vue   → <UiModalDialog />
+```
+
+### Disable Path Prefix
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  components: [
+    {
+      path: '~/components',
+      pathPrefix: false, // Use filename only
+    },
+  ],
+})
+```
+
+With `pathPrefix: false`:
+```
+components/base/Button.vue → <Button />
+```
+
+## Lazy Loading
+
+Prefix with `Lazy` for dynamic imports:
+
+```vue
+<script setup lang="ts">
+const showChart = ref(false)
+</script>
+
+<template>
+  <!-- Component code loaded only when rendered -->
+  <LazyHeavyChart v-if="showChart" />
+  <button @click="showChart = true">Show Chart</button>
+</template>
+```
+
+Benefits:
+- Reduces initial bundle size
+- Code-splits component into separate chunk
+- Loads on-demand
+
+## Lazy Hydration Strategies
+
+Control when lazy components become interactive:
+
+### `hydrate-on-visible`
+
+Hydrate when component enters viewport:
+
+```vue
+<template>
+  <LazyComments hydrate-on-visible />
+</template>
+```
+
+### `hydrate-on-idle`
+
+Hydrate when browser is idle:
+
+```vue
+<template>
+  <LazyAnalytics hydrate-on-idle />
+</template>
+```
+
+### `hydrate-on-interaction`
+
+Hydrate on user interaction:
+
+```vue
+<template>
+  <!-- Hydrates on click, focus, or pointerenter -->
+  <LazyDropdown hydrate-on-interaction />
+
+  <!-- Specific event -->
+  <LazyTooltip hydrate-on-interaction="mouseover" />
+</template>
+```
+
+### `hydrate-on-media-query`
+
+Hydrate when media query matches:
+
+```vue
+<template>
+  <LazyMobileMenu hydrate-on-media-query="(max-width: 768px)" />
+</template>
+```
+
+### `hydrate-after`
+
+Hydrate after delay (milliseconds):
+
+```vue
+<template>
+  <LazyAds :hydrate-after="3000" />
+</template>
+```
+
+### `hydrate-when`
+
+Hydrate on condition:
+
+```vue
+<script setup lang="ts">
+const isReady = ref(false)
+</script>
+
+<template>
+  <LazyEditor :hydrate-when="isReady" />
+</template>
+```
+
+### `hydrate-never`
+
+Never hydrate (static only):
+
+```vue
+<template>
+  <LazyStaticFooter hydrate-never />
+</template>
+```
+
+### Hydration Event
+
+```vue
+<template>
+  <LazyChart hydrate-on-visible @hydrated="onChartReady" />
+</template>
+
+<script setup>
+function onChartReady() {
+  console.log('Chart is now interactive')
+}
+</script>
+```
+
+## Client/Server Components
+
+### Client-only (`.client.vue`)
+
+```
+components/
+└── BrowserChart.client.vue
+```
+
+```vue
+<template>
+  <!-- Only rendered in browser -->
+  <BrowserChart />
+</template>
+```
+
+### Server-only (`.server.vue`)
+
+```
+components/
+└── ServerMarkdown.server.vue
+```
+
+```vue
+<template>
+  <!-- Rendered on server, not hydrated -->
+  <ServerMarkdown :content="markdown" />
+</template>
+```
+
+Requires experimental flag:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  experimental: {
+    componentIslands: true,
+  },
+})
+```
+
+### Paired Components
+
+```
+components/
+├── Comments.client.vue  # Browser version
+└── Comments.server.vue  # SSR version
+```
+
+Server version renders during SSR, client version takes over after hydration.
+
+## Dynamic Components
+
+```vue
+<script setup lang="ts">
+import { SomeComponent } from '#components'
+
+const dynamicComponent = resolveComponent('MyButton')
+</script>
+
+<template>
+  <component :is="dynamicComponent" />
+  <component :is="SomeComponent" />
+</template>
+```
+
+## Direct Imports
+
+Bypass auto-imports when needed:
+
+```vue
+<script setup lang="ts">
+import { LazyMountainsList, NuxtLink } from '#components'
+</script>
+```
+
+## Custom Directories
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  components: [
+    { path: '~/components/ui', prefix: 'Ui' },
+    { path: '~/components/forms', prefix: 'Form' },
+    '~/components', // Default, should come last
+  ],
+})
+```
+
+## Global Components
+
+Register globally (creates async chunks):
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  components: {
+    global: true,
+    dirs: ['~/components'],
+  },
+})
+```
+
+Or use `.global.vue` suffix:
+
+```
+components/
+└── Icon.global.vue  → Available globally
+```
+
+## Disabling Component Auto-imports
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  components: {
+    dirs: [], // Disable auto-imports
+  },
+})
+```
+
+## Library Authors
+
+Register components from npm package:
+
+```ts
+// my-ui-lib/nuxt.ts
+import { addComponentsDir, createResolver, defineNuxtModule } from '@nuxt/kit'
+
+export default defineNuxtModule({
+  setup() {
+    const resolver = createResolver(import.meta.url)
+
+    addComponentsDir({
+      path: resolver.resolve('./components'),
+      prefix: 'MyUi',
+    })
+  },
+})
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/directory-structure/app/components
+- https://nuxt.com/docs/guide/concepts/auto-imports#auto-imported-components
+-->
diff --git a/.claude/skills/nuxt/references/features-components.md b/.claude/skills/nuxt/references/features-components.md
new file mode 100644
index 0000000..5cdb7b9
--- /dev/null
+++ b/.claude/skills/nuxt/references/features-components.md
@@ -0,0 +1,264 @@
+---
+name: built-in-components
+description: NuxtLink, NuxtPage, NuxtLayout, and other built-in Nuxt components
+---
+
+# Built-in Components
+
+Nuxt provides several built-in components for common functionality.
+
+## NuxtLink
+
+Optimized link component with prefetching:
+
+```vue
+<template>
+  <!-- Basic usage -->
+  <NuxtLink to="/about">About</NuxtLink>
+
+  <!-- With route object -->
+  <NuxtLink :to="{ name: 'posts-id', params: { id: 1 } }">Post 1</NuxtLink>
+
+  <!-- External link (opens in new tab) -->
+  <NuxtLink to="https://nuxt.com" external>Nuxt</NuxtLink>
+
+  <!-- Disable prefetching -->
+  <NuxtLink to="/heavy-page" :prefetch="false">Heavy Page</NuxtLink>
+
+  <!-- Replace history instead of push -->
+  <NuxtLink to="/page" replace>Replace</NuxtLink>
+
+  <!-- Custom active class -->
+  <NuxtLink
+    to="/dashboard"
+    active-class="text-primary"
+    exact-active-class="font-bold"
+  >
+    Dashboard
+  </NuxtLink>
+</template>
+```
+
+## NuxtPage
+
+Renders the current page component (used in layouts):
+
+```vue
+<!-- app/app.vue -->
+<template>
+  <NuxtLayout>
+    <NuxtPage />
+  </NuxtLayout>
+</template>
+```
+
+With page transitions:
+
+```vue
+<template>
+  <NuxtPage :transition="{ name: 'fade', mode: 'out-in' }" />
+</template>
+```
+
+Pass props to page:
+
+```vue
+<template>
+  <NuxtPage :page-key="route.fullPath" :foobar="123" />
+</template>
+```
+
+## NuxtLayout
+
+Controls layout rendering:
+
+```vue
+<!-- app/app.vue -->
+<template>
+  <NuxtLayout>
+    <NuxtPage />
+  </NuxtLayout>
+</template>
+```
+
+Dynamic layout:
+
+```vue
+<template>
+  <NuxtLayout :name="layout">
+    <NuxtPage />
+  </NuxtLayout>
+</template>
+
+<script setup>
+const layout = computed(() => isAdmin ? 'admin' : 'default')
+</script>
+```
+
+Layout with transitions:
+
+```vue
+<template>
+  <NuxtLayout :transition="{ name: 'slide', mode: 'out-in' }">
+    <NuxtPage />
+  </NuxtLayout>
+</template>
+```
+
+## NuxtLoadingIndicator
+
+Progress bar for page navigation:
+
+```vue
+<!-- app/app.vue -->
+<template>
+  <NuxtLoadingIndicator
+    color="repeating-linear-gradient(to right, #00dc82 0%, #34cdfe 50%, #0047e1 100%)"
+    :height="3"
+    :duration="2000"
+    :throttle="200"
+  />
+  <NuxtLayout>
+    <NuxtPage />
+  </NuxtLayout>
+</template>
+```
+
+## NuxtErrorBoundary
+
+Catch and handle errors in child components:
+
+```vue
+<template>
+  <NuxtErrorBoundary @error="handleError">
+    <ComponentThatMightFail />
+
+    <template #error="{ error, clearError }">
+      <div class="error">
+        <p>Something went wrong: {{ error.message }}</p>
+        <button @click="clearError">Try again</button>
+      </div>
+    </template>
+  </NuxtErrorBoundary>
+</template>
+
+<script setup>
+function handleError(error) {
+  console.error('Error caught:', error)
+}
+</script>
+```
+
+## ClientOnly
+
+Render content only on client-side:
+
+```vue
+<template>
+  <ClientOnly>
+    <!-- Browser-only component -->
+    <BrowserOnlyChart :data="chartData" />
+
+    <template #fallback>
+      <p>Loading chart...</p>
+    </template>
+  </ClientOnly>
+</template>
+```
+
+## DevOnly
+
+Render content only in development:
+
+```vue
+<template>
+  <DevOnly>
+    <DebugPanel />
+  </DevOnly>
+</template>
+```
+
+## NuxtIsland
+
+Server components (experimental):
+
+```vue
+<template>
+  <NuxtIsland name="HeavyComponent" :props="{ data: complexData }" />
+</template>
+```
+
+## NuxtImg and NuxtPicture
+
+Optimized images (requires `@nuxt/image` module):
+
+```vue
+<template>
+  <!-- Basic optimized image -->
+  <NuxtImg src="/images/hero.jpg" width="800" height="600" />
+
+  <!-- Responsive with srcset -->
+  <NuxtImg
+    src="/images/hero.jpg"
+    sizes="sm:100vw md:50vw lg:400px"
+    :modifiers="{ format: 'webp' }"
+  />
+
+  <!-- Art direction with picture -->
+  <NuxtPicture
+    src="/images/hero.jpg"
+    :img-attrs="{ alt: 'Hero image' }"
+  />
+</template>
+```
+
+## Teleport
+
+Render content outside component tree:
+
+```vue
+<template>
+  <button @click="showModal = true">Open Modal</button>
+
+  <Teleport to="body">
+    <div v-if="showModal" class="modal">
+      <p>Modal content</p>
+      <button @click="showModal = false">Close</button>
+    </div>
+  </Teleport>
+</template>
+```
+
+For SSR, use `<ClientOnly>` with Teleport:
+
+```vue
+<template>
+  <ClientOnly>
+    <Teleport to="#teleports">
+      <Modal />
+    </Teleport>
+  </ClientOnly>
+</template>
+```
+
+## NuxtRouteAnnouncer
+
+Accessibility: announces page changes to screen readers:
+
+```vue
+<!-- app/app.vue -->
+<template>
+  <NuxtRouteAnnouncer />
+  <NuxtLayout>
+    <NuxtPage />
+  </NuxtLayout>
+</template>
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/api/components/nuxt-link
+- https://nuxt.com/docs/api/components/nuxt-page
+- https://nuxt.com/docs/api/components/nuxt-layout
+- https://nuxt.com/docs/api/components/client-only
+-->
diff --git a/.claude/skills/nuxt/references/features-composables.md b/.claude/skills/nuxt/references/features-composables.md
new file mode 100644
index 0000000..2d4d5f7
--- /dev/null
+++ b/.claude/skills/nuxt/references/features-composables.md
@@ -0,0 +1,276 @@
+---
+name: composables-auto-imports
+description: Auto-imported Vue APIs, Nuxt composables, and custom utilities
+---
+
+# Composables Auto-imports
+
+Nuxt automatically imports Vue APIs, Nuxt composables, and your custom composables/utilities.
+
+## Built-in Auto-imports
+
+### Vue APIs
+
+```vue
+<script setup lang="ts">
+// No imports needed - all auto-imported
+const count = ref(0)
+const doubled = computed(() => count.value * 2)
+
+watch(count, (newVal) => {
+  console.log('Count changed:', newVal)
+})
+
+onMounted(() => {
+  console.log('Component mounted')
+})
+
+// Lifecycle hooks
+onBeforeMount(() => {})
+onUnmounted(() => {})
+onBeforeUnmount(() => {})
+
+// Reactivity
+const state = reactive({ name: 'John' })
+const shallow = shallowRef({ deep: 'object' })
+</script>
+```
+
+### Nuxt Composables
+
+```vue
+<script setup lang="ts">
+// All auto-imported
+const route = useRoute()
+const router = useRouter()
+const config = useRuntimeConfig()
+const appConfig = useAppConfig()
+const nuxtApp = useNuxtApp()
+
+// Data fetching
+const { data } = await useFetch('/api/data')
+const { data: asyncData } = await useAsyncData('key', () => fetchData())
+
+// State
+const state = useState('key', () => 'initial')
+const cookie = useCookie('token')
+
+// Head/SEO
+useHead({ title: 'My Page' })
+useSeoMeta({ description: 'Page description' })
+
+// Request helpers (SSR)
+const headers = useRequestHeaders()
+const event = useRequestEvent()
+const url = useRequestURL()
+</script>
+```
+
+## Custom Composables (`app/composables/`)
+
+### Creating Composables
+
+```ts
+// composables/useCounter.ts
+export function useCounter(initial = 0) {
+  const count = ref(initial)
+  const increment = () => count.value++
+  const decrement = () => count.value--
+  return { count, increment, decrement }
+}
+```
+
+```ts
+// composables/useAuth.ts
+export function useAuth() {
+  const user = useState<User | null>('user', () => null)
+  const isLoggedIn = computed(() => !!user.value)
+
+  async function login(credentials: Credentials) {
+    user.value = await $fetch('/api/auth/login', {
+      method: 'POST',
+      body: credentials,
+    })
+  }
+
+  async function logout() {
+    await $fetch('/api/auth/logout', { method: 'POST' })
+    user.value = null
+  }
+
+  return { user, isLoggedIn, login, logout }
+}
+```
+
+### Using Composables
+
+```vue
+<script setup lang="ts">
+// Auto-imported - no import statement needed
+const { count, increment } = useCounter(10)
+const { user, isLoggedIn, login } = useAuth()
+</script>
+```
+
+### File Scanning Rules
+
+Only top-level files are scanned:
+
+```
+composables/
+├── useAuth.ts         → useAuth() ✓
+├── useCounter.ts      → useCounter() ✓
+├── index.ts           → exports ✓
+└── nested/
+    └── helper.ts      → NOT auto-imported ✗
+```
+
+Re-export nested composables:
+
+```ts
+// composables/index.ts
+export { useHelper } from './nested/helper'
+```
+
+Or configure scanning:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  imports: {
+    dirs: [
+      'composables',
+      'composables/**', // Scan all nested
+    ],
+  },
+})
+```
+
+## Utilities (`app/utils/`)
+
+```ts
+// utils/format.ts
+export function formatDate(date: Date) {
+  return date.toLocaleDateString()
+}
+
+export function formatCurrency(amount: number) {
+  return new Intl.NumberFormat('en-US', {
+    style: 'currency',
+    currency: 'USD',
+  }).format(amount)
+}
+```
+
+```vue
+<script setup lang="ts">
+// Auto-imported
+const date = formatDate(new Date())
+const price = formatCurrency(99.99)
+</script>
+```
+
+## Server Utils (`server/utils/`)
+
+```ts
+// server/utils/db.ts
+export function useDb() {
+  return createDbConnection()
+}
+
+// server/utils/auth.ts
+export function verifyToken(token: string) {
+  return jwt.verify(token, process.env.JWT_SECRET)
+}
+```
+
+```ts
+// server/api/users.ts
+export default defineEventHandler(() => {
+  const db = useDb() // Auto-imported
+  return db.query('SELECT * FROM users')
+})
+```
+
+## Third-party Package Imports
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  imports: {
+    presets: [
+      {
+        from: 'vue-i18n',
+        imports: ['useI18n'],
+      },
+      {
+        from: 'date-fns',
+        imports: ['format', 'parseISO', 'differenceInDays'],
+      },
+      {
+        from: '@vueuse/core',
+        imports: ['useMouse', 'useWindowSize'],
+      },
+    ],
+  },
+})
+```
+
+## Explicit Imports
+
+Use `#imports` alias when needed:
+
+```vue
+<script setup lang="ts">
+import { ref, computed, useFetch } from '#imports'
+</script>
+```
+
+## Composable Context Rules
+
+Nuxt composables must be called in valid context:
+
+```ts
+// ❌ Wrong - module level
+const config = useRuntimeConfig()
+
+export function useMyComposable() {}
+```
+
+```ts
+// ✅ Correct - inside function
+export function useMyComposable() {
+  const config = useRuntimeConfig()
+  return { apiBase: config.public.apiBase }
+}
+```
+
+**Valid contexts:**
+- `<script setup>` block
+- `setup()` function
+- `defineNuxtPlugin()` callback
+- `defineNuxtRouteMiddleware()` callback
+
+## Disabling Auto-imports
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  // Disable all auto-imports
+  imports: {
+    autoImport: false,
+  },
+
+  // Or disable only directory scanning (keep Vue/Nuxt imports)
+  imports: {
+    scan: false,
+  },
+})
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/guide/concepts/auto-imports
+- https://nuxt.com/docs/directory-structure/app/composables
+- https://nuxt.com/docs/directory-structure/app/utils
+-->
diff --git a/.claude/skills/nuxt/references/features-server.md b/.claude/skills/nuxt/references/features-server.md
new file mode 100644
index 0000000..838a8ca
--- /dev/null
+++ b/.claude/skills/nuxt/references/features-server.md
@@ -0,0 +1,265 @@
+---
+name: server-routes
+description: API routes, server middleware, and Nitro server engine in Nuxt
+---
+
+# Server Routes
+
+Nuxt includes Nitro server engine for building full-stack applications with API routes and server middleware.
+
+## API Routes
+
+Create files in `server/api/` directory:
+
+```ts
+// server/api/hello.ts
+export default defineEventHandler((event) => {
+  return { message: 'Hello World' }
+})
+```
+
+Access at `/api/hello`.
+
+### HTTP Methods
+
+```ts
+// server/api/users.get.ts - GET /api/users
+export default defineEventHandler(() => {
+  return getUsers()
+})
+
+// server/api/users.post.ts - POST /api/users
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event)
+  return createUser(body)
+})
+
+// server/api/users/[id].put.ts - PUT /api/users/:id
+export default defineEventHandler(async (event) => {
+  const id = getRouterParam(event, 'id')
+  const body = await readBody(event)
+  return updateUser(id, body)
+})
+
+// server/api/users/[id].delete.ts - DELETE /api/users/:id
+export default defineEventHandler((event) => {
+  const id = getRouterParam(event, 'id')
+  return deleteUser(id)
+})
+```
+
+### Route Parameters
+
+```ts
+// server/api/posts/[id].ts
+export default defineEventHandler((event) => {
+  const id = getRouterParam(event, 'id')
+  return getPost(id)
+})
+
+// Catch-all: server/api/[...path].ts
+export default defineEventHandler((event) => {
+  const path = getRouterParam(event, 'path')
+  return { path }
+})
+```
+
+### Query Parameters
+
+```ts
+// server/api/search.ts
+// GET /api/search?q=nuxt&page=1
+export default defineEventHandler((event) => {
+  const query = getQuery(event)
+  // { q: 'nuxt', page: '1' }
+  return search(query.q, Number(query.page))
+})
+```
+
+### Request Body
+
+```ts
+// server/api/submit.post.ts
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event)
+  // Validate and process body
+  return { success: true, data: body }
+})
+```
+
+### Headers and Cookies
+
+```ts
+// server/api/auth.ts
+export default defineEventHandler((event) => {
+  // Read headers
+  const auth = getHeader(event, 'authorization')
+
+  // Read cookies
+  const cookies = parseCookies(event)
+  const token = getCookie(event, 'token')
+
+  // Set headers
+  setHeader(event, 'X-Custom-Header', 'value')
+
+  // Set cookies
+  setCookie(event, 'token', 'new-token', {
+    httpOnly: true,
+    secure: true,
+    maxAge: 60 * 60 * 24, // 1 day
+  })
+
+  return { authenticated: !!token }
+})
+```
+
+## Server Middleware
+
+Runs on every request before routes:
+
+```ts
+// server/middleware/auth.ts
+export default defineEventHandler((event) => {
+  const token = getCookie(event, 'token')
+
+  // Attach data to event context
+  event.context.user = token ? verifyToken(token) : null
+})
+
+// server/middleware/log.ts
+export default defineEventHandler((event) => {
+  console.log(`${event.method} ${event.path}`)
+})
+```
+
+Access context in routes:
+
+```ts
+// server/api/profile.ts
+export default defineEventHandler((event) => {
+  const user = event.context.user
+  if (!user) {
+    throw createError({ statusCode: 401, message: 'Unauthorized' })
+  }
+  return user
+})
+```
+
+## Error Handling
+
+```ts
+// server/api/users/[id].ts
+export default defineEventHandler((event) => {
+  const id = getRouterParam(event, 'id')
+  const user = findUser(id)
+
+  if (!user) {
+    throw createError({
+      statusCode: 404,
+      statusMessage: 'User not found',
+    })
+  }
+
+  return user
+})
+```
+
+## Server Utils
+
+Auto-imported in `server/utils/`:
+
+```ts
+// server/utils/db.ts
+export function useDb() {
+  return createDbConnection()
+}
+```
+
+```ts
+// server/api/users.ts
+export default defineEventHandler(() => {
+  const db = useDb() // Auto-imported
+  return db.query('SELECT * FROM users')
+})
+```
+
+## Server Plugins
+
+Run once when server starts:
+
+```ts
+// server/plugins/db.ts
+export default defineNitroPlugin((nitroApp) => {
+  // Initialize database connection
+  const db = createDbConnection()
+
+  // Add to context
+  nitroApp.hooks.hook('request', (event) => {
+    event.context.db = db
+  })
+})
+```
+
+## Streaming Responses
+
+```ts
+// server/api/stream.ts
+export default defineEventHandler((event) => {
+  setHeader(event, 'Content-Type', 'text/event-stream')
+  setHeader(event, 'Cache-Control', 'no-cache')
+  setHeader(event, 'Connection', 'keep-alive')
+
+  const stream = new ReadableStream({
+    async start(controller) {
+      for (let i = 0; i < 10; i++) {
+        controller.enqueue(`data: ${JSON.stringify({ count: i })}\n\n`)
+        await new Promise(r => setTimeout(r, 1000))
+      }
+      controller.close()
+    },
+  })
+
+  return stream
+})
+```
+
+## Server Storage
+
+Key-value storage with multiple drivers:
+
+```ts
+// server/api/cache.ts
+export default defineEventHandler(async (event) => {
+  const storage = useStorage()
+
+  // Set value
+  await storage.setItem('key', { data: 'value' })
+
+  // Get value
+  const data = await storage.getItem('key')
+
+  return data
+})
+```
+
+Configure storage drivers in `nuxt.config.ts`:
+
+```ts
+export default defineNuxtConfig({
+  nitro: {
+    storage: {
+      redis: {
+        driver: 'redis',
+        url: 'redis://localhost:6379',
+      },
+    },
+  },
+})
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/getting-started/server
+- https://nuxt.com/docs/directory-structure/server
+- https://nitro.build/guide
+-->
diff --git a/.claude/skills/nuxt/references/features-state.md b/.claude/skills/nuxt/references/features-state.md
new file mode 100644
index 0000000..d61b72e
--- /dev/null
+++ b/.claude/skills/nuxt/references/features-state.md
@@ -0,0 +1,194 @@
+---
+name: state-management
+description: useState composable and SSR-friendly state management in Nuxt
+---
+
+# State Management
+
+Nuxt provides `useState` for SSR-friendly reactive state that persists across components.
+
+## useState
+
+SSR-safe replacement for `ref` that shares state across components:
+
+```vue
+<script setup lang="ts">
+// State is shared by key 'counter' across all components
+const counter = useState('counter', () => 0)
+</script>
+
+<template>
+  <div>
+    Counter: {{ counter }}
+    <button @click="counter++">+</button>
+    <button @click="counter--">-</button>
+  </div>
+</template>
+```
+
+## Creating Shared State
+
+Define reusable state composables:
+
+```ts
+// composables/useUser.ts
+export function useUser() {
+  return useState<User | null>('user', () => null)
+}
+
+export function useLocale() {
+  return useState('locale', () => 'en')
+}
+```
+
+```vue
+<script setup lang="ts">
+// Same state instance everywhere
+const user = useUser()
+const locale = useLocale()
+</script>
+```
+
+## Initializing State
+
+Use `callOnce` to initialize state with async data:
+
+```vue
+<script setup lang="ts">
+const config = useState('site-config')
+
+await callOnce(async () => {
+  config.value = await $fetch('/api/config')
+})
+</script>
+```
+
+## Best Practices
+
+### ❌ Don't Define State Outside Setup
+
+```ts
+// ❌ Wrong - causes memory leaks and shared state across requests
+export const globalState = ref({ user: null })
+```
+
+### ✅ Use useState Instead
+
+```ts
+// ✅ Correct - SSR-safe
+export const useGlobalState = () => useState('global', () => ({ user: null }))
+```
+
+## Clearing State
+
+```ts
+// Clear specific state
+clearNuxtState('counter')
+
+// Clear multiple states
+clearNuxtState(['counter', 'user'])
+
+// Clear all state (use with caution)
+clearNuxtState()
+```
+
+## With Pinia
+
+For complex state management, use Pinia:
+
+```bash
+npx nuxi module add pinia
+```
+
+```ts
+// stores/counter.ts
+export const useCounterStore = defineStore('counter', {
+  state: () => ({
+    count: 0,
+  }),
+  actions: {
+    increment() {
+      this.count++
+    },
+  },
+})
+```
+
+```ts
+// stores/user.ts (Composition API style)
+export const useUserStore = defineStore('user', () => {
+  const user = ref<User | null>(null)
+  const isLoggedIn = computed(() => !!user.value)
+
+  async function login(credentials: Credentials) {
+    user.value = await $fetch('/api/login', {
+      method: 'POST',
+      body: credentials,
+    })
+  }
+
+  return { user, isLoggedIn, login }
+})
+```
+
+```vue
+<script setup lang="ts">
+const counterStore = useCounterStore()
+const userStore = useUserStore()
+
+// Initialize store data once
+await callOnce(async () => {
+  await userStore.fetchUser()
+})
+</script>
+```
+
+## Advanced: Locale Example
+
+```ts
+// composables/useLocale.ts
+export function useLocale() {
+  return useState('locale', () => useDefaultLocale().value)
+}
+
+export function useDefaultLocale(fallback = 'en-US') {
+  const locale = ref(fallback)
+
+  if (import.meta.server) {
+    const reqLocale = useRequestHeaders()['accept-language']?.split(',')[0]
+    if (reqLocale) locale.value = reqLocale
+  }
+  else if (import.meta.client) {
+    const navLang = navigator.language
+    if (navLang) locale.value = navLang
+  }
+
+  return locale
+}
+```
+
+## State Serialization
+
+`useState` values are serialized to JSON. Avoid:
+
+- Functions
+- Classes
+- Symbols
+- Circular references
+
+```ts
+// ❌ Won't work
+useState('fn', () => () => console.log('hi'))
+useState('instance', () => new MyClass())
+
+// ✅ Works
+useState('data', () => ({ name: 'John', age: 30 }))
+useState('items', () => ['a', 'b', 'c'])
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/getting-started/state-management
+- https://nuxt.com/docs/api/composables/use-state
+- https://nuxt.com/docs/api/utils/clear-nuxt-state
+-->
diff --git a/.claude/skills/nuxt/references/rendering-modes.md b/.claude/skills/nuxt/references/rendering-modes.md
new file mode 100644
index 0000000..8760aed
--- /dev/null
+++ b/.claude/skills/nuxt/references/rendering-modes.md
@@ -0,0 +1,237 @@
+---
+name: rendering-modes
+description: Universal rendering, client-side rendering, and hybrid rendering in Nuxt
+---
+
+# Rendering Modes
+
+Nuxt supports multiple rendering modes: universal (SSR), client-side (CSR), and hybrid rendering.
+
+## Universal Rendering (Default)
+
+Server renders HTML, then hydrates on client:
+
+```ts
+// nuxt.config.ts - this is the default
+export default defineNuxtConfig({
+  ssr: true,
+})
+```
+
+**Benefits:**
+- Fast initial page load (HTML is ready)
+- SEO-friendly (content is in HTML)
+- Works without JavaScript initially
+
+**How it works:**
+1. Server executes Vue code, generates HTML
+2. Browser displays HTML immediately
+3. JavaScript loads and hydrates the page
+4. Page becomes fully interactive
+
+## Client-Side Rendering
+
+Render entirely in the browser:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  ssr: false,
+})
+```
+
+**Benefits:**
+- Simpler development (no SSR constraints)
+- Cheaper hosting (static files only)
+- Works offline
+
+**Use cases:**
+- Admin dashboards
+- SaaS applications
+- Apps behind authentication
+
+### SPA Loading Template
+
+Provide loading UI while app hydrates:
+
+```html
+<!-- app/spa-loading-template.html -->
+<div class="loading">
+  <div class="spinner"></div>
+  <p>Loading...</p>
+</div>
+
+<style>
+.loading {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  height: 100vh;
+}
+.spinner {
+  width: 40px;
+  height: 40px;
+  border: 4px solid #f3f3f3;
+  border-top: 4px solid #00dc82;
+  border-radius: 50%;
+  animation: spin 1s linear infinite;
+}
+@keyframes spin {
+  to { transform: rotate(360deg); }
+}
+</style>
+```
+
+## Hybrid Rendering
+
+Mix rendering modes per route using route rules:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  routeRules: {
+    // Static pages - prerendered at build
+    '/': { prerender: true },
+    '/about': { prerender: true },
+
+    // ISR - regenerate in background
+    '/blog/**': { isr: 3600 }, // Cache for 1 hour
+    '/products/**': { swr: true }, // Stale-while-revalidate
+
+    // Client-only rendering
+    '/admin/**': { ssr: false },
+    '/dashboard/**': { ssr: false },
+
+    // Server-rendered (default)
+    '/api/**': { cors: true },
+  },
+})
+```
+
+### Route Rules Reference
+
+| Rule | Description |
+|------|-------------|
+| `prerender: true` | Pre-render at build time |
+| `ssr: false` | Client-side only |
+| `swr: number \| true` | Stale-while-revalidate caching |
+| `isr: number \| true` | Incremental static regeneration |
+| `cache: { maxAge: number }` | Cache with TTL |
+| `redirect: string` | Redirect to another path |
+| `cors: true` | Add CORS headers |
+| `headers: object` | Custom response headers |
+
+### Inline Route Rules
+
+Define per-page:
+
+```vue
+<script setup lang="ts">
+defineRouteRules({
+  prerender: true,
+})
+</script>
+```
+
+## Prerendering
+
+Generate static HTML at build time:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  // Prerender specific routes
+  routeRules: {
+    '/': { prerender: true },
+    '/about': { prerender: true },
+    '/posts/*': { prerender: true },
+  },
+})
+```
+
+Or use `nuxt generate`:
+
+```bash
+nuxt generate
+```
+
+### Programmatic Prerendering
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  hooks: {
+    'prerender:routes'({ routes }) {
+      // Add dynamic routes
+      const posts = await fetchPostSlugs()
+      for (const slug of posts) {
+        routes.add(`/posts/${slug}`)
+      }
+    },
+  },
+})
+```
+
+Or in pages:
+
+```ts
+// server/api/posts.ts or a plugin
+prerenderRoutes(['/posts/1', '/posts/2', '/posts/3'])
+```
+
+## Edge-Side Rendering
+
+Render at CDN edge servers:
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  nitro: {
+    preset: 'cloudflare-pages', // or 'vercel-edge', 'netlify-edge'
+  },
+})
+```
+
+Supported platforms:
+- Cloudflare Pages/Workers
+- Vercel Edge Functions
+- Netlify Edge Functions
+
+## Conditional Rendering
+
+Use `import.meta.server` and `import.meta.client`:
+
+```vue
+<script setup>
+if (import.meta.server) {
+  // Server-only code
+  console.log('Running on server')
+}
+
+if (import.meta.client) {
+  // Client-only code
+  console.log('Running in browser')
+}
+</script>
+```
+
+For components:
+
+```vue
+<template>
+  <ClientOnly>
+    <BrowserOnlyComponent />
+    <template #fallback>
+      <p>Loading...</p>
+    </template>
+  </ClientOnly>
+</template>
+```
+
+<!-- 
+Source references:
+- https://nuxt.com/docs/guide/concepts/rendering
+- https://nuxt.com/docs/getting-started/prerendering
+- https://nuxt.com/docs/api/nuxt-config#routerules
+-->
diff --git a/.claude/skills/playwright-generate-test/SKILL.md b/.claude/skills/playwright-generate-test/SKILL.md
new file mode 100644
index 0000000..5d80435
--- /dev/null
+++ b/.claude/skills/playwright-generate-test/SKILL.md
@@ -0,0 +1,17 @@
+---
+name: playwright-generate-test
+description: 'Generate a Playwright test based on a scenario using Playwright MCP'
+---
+
+# Test Generation with Playwright MCP
+
+Your goal is to generate a Playwright test based on the provided scenario after completing all prescribed steps.
+
+## Specific Instructions
+
+- You are given a scenario, and you need to generate a playwright test for it. If the user does not provide a scenario, you will ask them to provide one.
+- DO NOT generate test code prematurely or based solely on the scenario without completing all prescribed steps.
+- DO run steps one by one using the tools provided by the Playwright MCP.
+- Only after all steps are completed, emit a Playwright TypeScript test that uses `@playwright/test` based on message history
+- Save generated test file in the tests directory
+- Execute the test file and iterate until the test passes
diff --git a/.claude/skills/pnpm/GENERATION.md b/.claude/skills/pnpm/GENERATION.md
new file mode 100644
index 0000000..f650dd7
--- /dev/null
+++ b/.claude/skills/pnpm/GENERATION.md
@@ -0,0 +1,5 @@
+# Generation Info
+
+- **Source:** `sources/pnpm`
+- **Git SHA:** `a1d6d5aef9d5f369fa2f0d8a54f1edbaff8b23b3`
+- **Generated:** 2026-01-28
diff --git a/.claude/skills/pnpm/SKILL.md b/.claude/skills/pnpm/SKILL.md
new file mode 100644
index 0000000..9b28506
--- /dev/null
+++ b/.claude/skills/pnpm/SKILL.md
@@ -0,0 +1,42 @@
+---
+name: pnpm
+description: Node.js package manager with strict dependency resolution. Use when running pnpm specific commands, configuring workspaces, or managing dependencies with catalogs, patches, or overrides.
+metadata:
+  author: Anthony Fu
+  version: "2026.1.28"
+  source: Generated from https://github.com/pnpm/pnpm, scripts located at https://github.com/antfu/skills
+---
+
+pnpm is a fast, disk space efficient package manager. It uses a content-addressable store to deduplicate packages across all projects on a machine, saving significant disk space. pnpm enforces strict dependency resolution by default, preventing phantom dependencies. Configuration should preferably be placed in `pnpm-workspace.yaml` for pnpm-specific settings.
+
+**Important:** When working with pnpm projects, agents should check for `pnpm-workspace.yaml` and `.npmrc` files to understand workspace structure and configuration. Always use `--frozen-lockfile` in CI environments.
+
+> The skill is based on pnpm 10.x, generated at 2026-01-28.
+
+## Core
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| CLI Commands | Install, add, remove, update, run, exec, dlx, and workspace commands | [core-cli](references/core-cli.md) |
+| Configuration | pnpm-workspace.yaml, .npmrc settings, and package.json fields | [core-config](references/core-config.md) |
+| Workspaces | Monorepo support with filtering, workspace protocol, and shared lockfile | [core-workspaces](references/core-workspaces.md) |
+| Store | Content-addressable storage, hard links, and disk efficiency | [core-store](references/core-store.md) |
+
+## Features
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Catalogs | Centralized dependency version management for workspaces | [features-catalogs](references/features-catalogs.md) |
+| Overrides | Force specific versions of dependencies including transitive | [features-overrides](references/features-overrides.md) |
+| Patches | Modify third-party packages with custom fixes | [features-patches](references/features-patches.md) |
+| Aliases | Install packages under custom names using npm: protocol | [features-aliases](references/features-aliases.md) |
+| Hooks | Customize resolution with .pnpmfile.cjs hooks | [features-hooks](references/features-hooks.md) |
+| Peer Dependencies | Auto-install, strict mode, and dependency rules | [features-peer-deps](references/features-peer-deps.md) |
+
+## Best Practices
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| CI/CD Setup | GitHub Actions, GitLab CI, Docker, and caching strategies | [best-practices-ci](references/best-practices-ci.md) |
+| Migration | Migrating from npm/Yarn, handling phantom deps, monorepo migration | [best-practices-migration](references/best-practices-migration.md) |
+| Performance | Install optimizations, store caching, workspace parallelization | [best-practices-performance](references/best-practices-performance.md) |
diff --git a/.claude/skills/pnpm/references/best-practices-ci.md b/.claude/skills/pnpm/references/best-practices-ci.md
new file mode 100644
index 0000000..80c5d49
--- /dev/null
+++ b/.claude/skills/pnpm/references/best-practices-ci.md
@@ -0,0 +1,285 @@
+---
+name: pnpm-ci-cd-setup
+description: Optimizing pnpm for continuous integration and deployment workflows
+---
+
+# pnpm CI/CD Setup
+
+Best practices for using pnpm in CI/CD environments for fast, reliable builds.
+
+## GitHub Actions
+
+### Basic Setup
+
+```yaml
+name: CI
+
+on: [push, pull_request]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9
+      
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'pnpm'
+      
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm test
+      - run: pnpm build
+```
+
+### With Store Caching
+
+For larger projects, cache the pnpm store:
+
+```yaml
+- uses: pnpm/action-setup@v4
+  with:
+    version: 9
+
+- name: Get pnpm store directory
+  shell: bash
+  run: |
+    echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
+
+- uses: actions/cache@v4
+  name: Setup pnpm cache
+  with:
+    path: ${{ env.STORE_PATH }}
+    key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+    restore-keys: |
+      ${{ runner.os }}-pnpm-store-
+
+- run: pnpm install --frozen-lockfile
+```
+
+### Matrix Testing
+
+```yaml
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+        node: [18, 20, 22]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node }}
+          cache: 'pnpm'
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm test
+```
+
+## GitLab CI
+
+```yaml
+image: node:20
+
+stages:
+  - install
+  - test
+  - build
+
+variables:
+  PNPM_HOME: /root/.local/share/pnpm
+  PATH: $PNPM_HOME:$PATH
+
+before_script:
+  - corepack enable
+  - corepack prepare pnpm@latest --activate
+
+cache:
+  key: ${CI_COMMIT_REF_SLUG}
+  paths:
+    - .pnpm-store
+
+install:
+  stage: install
+  script:
+    - pnpm config set store-dir .pnpm-store
+    - pnpm install --frozen-lockfile
+
+test:
+  stage: test
+  script:
+    - pnpm test
+
+build:
+  stage: build
+  script:
+    - pnpm build
+```
+
+## Docker
+
+### Multi-Stage Build
+
+```dockerfile
+# Build stage
+FROM node:20-slim AS builder
+
+# Enable corepack for pnpm
+RUN corepack enable
+
+WORKDIR /app
+
+# Copy package files first for layer caching
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
+COPY packages/*/package.json ./packages/
+
+# Install dependencies
+RUN pnpm install --frozen-lockfile
+
+# Copy source and build
+COPY . .
+RUN pnpm build
+
+# Production stage
+FROM node:20-slim AS runner
+
+RUN corepack enable
+WORKDIR /app
+
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/package.json ./
+COPY --from=builder /app/pnpm-lock.yaml ./
+
+# Production install
+RUN pnpm install --frozen-lockfile --prod
+
+CMD ["node", "dist/index.js"]
+```
+
+### Optimized for Monorepos
+
+```dockerfile
+FROM node:20-slim AS builder
+RUN corepack enable
+WORKDIR /app
+
+# Copy workspace config
+COPY pnpm-lock.yaml pnpm-workspace.yaml ./
+
+# Copy all package.json files maintaining structure
+COPY packages/core/package.json ./packages/core/
+COPY packages/api/package.json ./packages/api/
+
+# Install all dependencies
+RUN pnpm install --frozen-lockfile
+
+# Copy source
+COPY . .
+
+# Build specific package
+RUN pnpm --filter @myorg/api build
+```
+
+## Key CI Flags
+
+### --frozen-lockfile
+
+**Always use in CI.** Fails if `pnpm-lock.yaml` needs updates:
+
+```bash
+pnpm install --frozen-lockfile
+```
+
+### --prefer-offline
+
+Use cached packages when available:
+
+```bash
+pnpm install --frozen-lockfile --prefer-offline
+```
+
+### --ignore-scripts
+
+Skip lifecycle scripts for faster installs (use cautiously):
+
+```bash
+pnpm install --frozen-lockfile --ignore-scripts
+```
+
+## Corepack Integration
+
+Use Corepack to manage pnpm version:
+
+```json
+// package.json
+{
+  "packageManager": "pnpm@9.0.0"
+}
+```
+
+```yaml
+# GitHub Actions
+- run: corepack enable
+- run: pnpm install --frozen-lockfile
+```
+
+## Monorepo CI Strategies
+
+### Build Changed Packages Only
+
+```yaml
+- name: Build changed packages
+  run: |
+    pnpm --filter "...[origin/main]" build
+```
+
+### Parallel Jobs per Package
+
+```yaml
+jobs:
+  detect-changes:
+    runs-on: ubuntu-latest
+    outputs:
+      packages: ${{ steps.changes.outputs.packages }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - id: changes
+        run: |
+          echo "packages=$(pnpm --filter '...[origin/main]' list --json | jq -c '[.[].name]')" >> $GITHUB_OUTPUT
+
+  test:
+    needs: detect-changes
+    if: needs.detect-changes.outputs.packages != '[]'
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        package: ${{ fromJson(needs.detect-changes.outputs.packages) }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm --filter ${{ matrix.package }} test
+```
+
+## Best Practices Summary
+
+1. **Always use `--frozen-lockfile`** in CI
+2. **Cache the pnpm store** for faster installs
+3. **Use Corepack** for consistent pnpm versions
+4. **Specify `packageManager`** in package.json
+5. **Use `--filter`** in monorepos to build only what changed
+6. **Multi-stage Docker builds** for smaller images
+
+<!-- 
+Source references:
+- https://pnpm.io/continuous-integration
+- https://github.com/pnpm/action-setup
+-->
diff --git a/.claude/skills/pnpm/references/best-practices-migration.md b/.claude/skills/pnpm/references/best-practices-migration.md
new file mode 100644
index 0000000..16d7c55
--- /dev/null
+++ b/.claude/skills/pnpm/references/best-practices-migration.md
@@ -0,0 +1,291 @@
+---
+name: migration-to-pnpm
+description: Migrating from npm or Yarn to pnpm with minimal friction
+---
+
+# Migration to pnpm
+
+Guide for migrating existing projects from npm or Yarn to pnpm.
+
+## Quick Migration
+
+### From npm
+
+```bash
+# Remove npm lockfile and node_modules
+rm -rf node_modules package-lock.json
+
+# Install with pnpm
+pnpm install
+```
+
+### From Yarn
+
+```bash
+# Remove yarn lockfile and node_modules
+rm -rf node_modules yarn.lock
+
+# Install with pnpm
+pnpm install
+```
+
+### Import Existing Lockfile
+
+pnpm can import existing lockfiles:
+
+```bash
+# Import from npm or yarn lockfile
+pnpm import
+
+# This creates pnpm-lock.yaml from:
+# - package-lock.json (npm)
+# - yarn.lock (yarn)
+# - npm-shrinkwrap.json (npm)
+```
+
+## Handling Common Issues
+
+### Phantom Dependencies
+
+pnpm is strict about dependencies. If code imports a package not in `package.json`, it will fail.
+
+**Problem:**
+```js
+// Works with npm (hoisted), fails with pnpm
+import lodash from 'lodash' // Not in dependencies, installed by another package
+```
+
+**Solution:** Add missing dependencies explicitly:
+```bash
+pnpm add lodash
+```
+
+### Missing Peer Dependencies
+
+pnpm reports peer dependency issues by default.
+
+**Option 1:** Let pnpm auto-install:
+```ini
+# .npmrc (default in pnpm v8+)
+auto-install-peers=true
+```
+
+**Option 2:** Install manually:
+```bash
+pnpm add react react-dom
+```
+
+**Option 3:** Suppress warnings if acceptable:
+```json
+{
+  "pnpm": {
+    "peerDependencyRules": {
+      "ignoreMissing": ["react"]
+    }
+  }
+}
+```
+
+### Symlink Issues
+
+Some tools don't work with symlinks. Use hoisted mode:
+
+```ini
+# .npmrc
+node-linker=hoisted
+```
+
+Or hoist specific packages:
+
+```ini
+public-hoist-pattern[]=*eslint*
+public-hoist-pattern[]=*babel*
+```
+
+### Native Module Rebuilds
+
+If native modules fail, try:
+
+```bash
+# Rebuild all native modules
+pnpm rebuild
+
+# Or reinstall
+rm -rf node_modules
+pnpm install
+```
+
+## Monorepo Migration
+
+### From npm Workspaces
+
+1. Create `pnpm-workspace.yaml`:
+   ```yaml
+   packages:
+     - 'packages/*'
+   ```
+
+2. Update internal dependencies to use workspace protocol:
+   ```json
+   {
+     "dependencies": {
+       "@myorg/utils": "workspace:^"
+     }
+   }
+   ```
+
+3. Install:
+   ```bash
+   rm -rf node_modules packages/*/node_modules package-lock.json
+   pnpm install
+   ```
+
+### From Yarn Workspaces
+
+1. Remove Yarn-specific files:
+   ```bash
+   rm yarn.lock .yarnrc.yml
+   rm -rf .yarn
+   ```
+
+2. Create `pnpm-workspace.yaml` matching `workspaces` in package.json:
+   ```yaml
+   packages:
+     - 'packages/*'
+   ```
+
+3. Update `package.json` - remove Yarn workspace config if not needed:
+   ```json
+   {
+     // Remove "workspaces" field (optional, pnpm uses pnpm-workspace.yaml)
+   }
+   ```
+
+4. Convert workspace references:
+   ```json
+   // From Yarn
+   "@myorg/utils": "*"
+   
+   // To pnpm
+   "@myorg/utils": "workspace:*"
+   ```
+
+### From Lerna
+
+pnpm can replace Lerna for most use cases:
+
+```bash
+# Lerna: run script in all packages
+lerna run build
+
+# pnpm equivalent
+pnpm -r run build
+
+# Lerna: run in specific package
+lerna run build --scope=@myorg/app
+
+# pnpm equivalent  
+pnpm --filter @myorg/app run build
+
+# Lerna: publish
+lerna publish
+
+# pnpm: use changesets instead
+pnpm add -Dw @changesets/cli
+pnpm changeset
+pnpm changeset version
+pnpm publish -r
+```
+
+## Configuration Migration
+
+### .npmrc Settings
+
+Most npm/Yarn settings work in pnpm's `.npmrc`:
+
+```ini
+# Registry settings (same as npm)
+registry=https://registry.npmjs.org/
+@myorg:registry=https://npm.myorg.com/
+
+# Auth tokens (same as npm)
+//registry.npmjs.org/:_authToken=${NPM_TOKEN}
+
+# pnpm-specific additions
+auto-install-peers=true
+strict-peer-dependencies=false
+```
+
+### Scripts Migration
+
+Most scripts work unchanged. Update pnpm-specific patterns:
+
+```json
+{
+  "scripts": {
+    // npm: recursive scripts
+    "build:all": "npm run build --workspaces",
+    // pnpm: use -r flag
+    "build:all": "pnpm -r run build",
+    
+    // npm: run in specific workspace  
+    "dev:app": "npm run dev -w packages/app",
+    // pnpm: use --filter
+    "dev:app": "pnpm --filter @myorg/app run dev"
+  }
+}
+```
+
+## CI/CD Migration
+
+Update CI configuration:
+
+```yaml
+# Before (npm)
+- run: npm ci
+
+# After (pnpm)
+- uses: pnpm/action-setup@v4
+- run: pnpm install --frozen-lockfile
+```
+
+Add to `package.json` for Corepack:
+```json
+{
+  "packageManager": "pnpm@9.0.0"
+}
+```
+
+## Gradual Migration
+
+For large projects, migrate gradually:
+
+1. **Start with CI**: Use pnpm in CI, keep npm/yarn locally
+2. **Add pnpm-lock.yaml**: Run `pnpm import` to create lockfile
+3. **Test thoroughly**: Ensure builds work with pnpm
+4. **Update documentation**: Update README, CONTRIBUTING
+5. **Remove old files**: Delete old lockfiles after team adoption
+
+## Rollback Plan
+
+If migration causes issues:
+
+```bash
+# Remove pnpm files
+rm -rf node_modules pnpm-lock.yaml pnpm-workspace.yaml
+
+# Restore npm
+npm install
+
+# Or restore Yarn
+yarn install
+```
+
+Keep old lockfile in git history for easy rollback.
+
+<!-- 
+Source references:
+- https://pnpm.io/installation
+- https://pnpm.io/cli/import
+- https://pnpm.io/limitations
+-->
diff --git a/.claude/skills/pnpm/references/best-practices-performance.md b/.claude/skills/pnpm/references/best-practices-performance.md
new file mode 100644
index 0000000..bf0c8cc
--- /dev/null
+++ b/.claude/skills/pnpm/references/best-practices-performance.md
@@ -0,0 +1,284 @@
+---
+name: pnpm-performance-optimization
+description: Tips and tricks for faster installs and better performance
+---
+
+# pnpm Performance Optimization
+
+pnpm is fast by default, but these optimizations can make it even faster.
+
+## Install Optimizations
+
+### Use Frozen Lockfile
+
+Skip resolution when lockfile exists:
+
+```bash
+pnpm install --frozen-lockfile
+```
+
+This is faster because pnpm skips the resolution phase entirely.
+
+### Prefer Offline Mode
+
+Use cached packages when available:
+
+```bash
+pnpm install --prefer-offline
+```
+
+Or configure globally:
+```ini
+# .npmrc
+prefer-offline=true
+```
+
+### Skip Optional Dependencies
+
+If you don't need optional deps:
+
+```bash
+pnpm install --no-optional
+```
+
+### Skip Scripts
+
+For CI or when scripts aren't needed:
+
+```bash
+pnpm install --ignore-scripts
+```
+
+**Caution:** Some packages require postinstall scripts to work correctly.
+
+### Only Build Specific Dependencies
+
+Only run build scripts for specific packages:
+
+```ini
+# .npmrc
+onlyBuiltDependencies[]=esbuild
+onlyBuiltDependencies[]=sharp
+onlyBuiltDependencies[]=@swc/core
+```
+
+Or skip builds entirely for deps that don't need them:
+
+```json
+{
+  "pnpm": {
+    "neverBuiltDependencies": ["fsevents", "cpu-features"]
+  }
+}
+```
+
+## Store Optimizations
+
+### Side Effects Cache
+
+Cache native module build results:
+
+```ini
+# .npmrc
+side-effects-cache=true
+```
+
+This caches the results of postinstall scripts, speeding up subsequent installs.
+
+### Shared Store
+
+Use a single store for all projects (default behavior):
+
+```ini
+# .npmrc
+store-dir=~/.pnpm-store
+```
+
+Benefits:
+- Packages downloaded once for all projects
+- Hard links save disk space
+- Faster installs from cache
+
+### Store Maintenance
+
+Periodically clean unused packages:
+
+```bash
+# Remove unreferenced packages
+pnpm store prune
+
+# Check store integrity
+pnpm store status
+```
+
+## Workspace Optimizations
+
+### Parallel Execution
+
+Run workspace scripts in parallel:
+
+```bash
+pnpm -r --parallel run build
+```
+
+Control concurrency:
+```ini
+# .npmrc
+workspace-concurrency=8
+```
+
+### Stream Output
+
+See output in real-time:
+
+```bash
+pnpm -r --stream run build
+```
+
+### Filter to Changed Packages
+
+Only build what changed:
+
+```bash
+# Build packages changed since main branch
+pnpm --filter "...[origin/main]" run build
+```
+
+### Topological Order
+
+Build dependencies before dependents:
+
+```bash
+pnpm -r run build
+# Automatically runs in topological order
+```
+
+For explicit sequential builds:
+```bash
+pnpm -r --workspace-concurrency=1 run build
+```
+
+## Network Optimizations
+
+### Configure Registry
+
+Use closest/fastest registry:
+
+```ini
+# .npmrc
+registry=https://registry.npmmirror.com/
+```
+
+### HTTP Settings
+
+Tune network settings:
+
+```ini
+# .npmrc
+fetch-retries=3
+fetch-retry-mintimeout=10000
+fetch-retry-maxtimeout=60000
+network-concurrency=16
+```
+
+### Proxy Configuration
+
+```ini
+# .npmrc
+proxy=http://proxy.company.com:8080
+https-proxy=http://proxy.company.com:8080
+```
+
+## Lockfile Optimization
+
+### Single Lockfile (Monorepos)
+
+Use shared lockfile for all packages (default):
+
+```ini
+# .npmrc
+shared-workspace-lockfile=true
+```
+
+Benefits:
+- Single source of truth
+- Faster resolution
+- Consistent versions across workspace
+
+### Lockfile-only Mode
+
+Only update lockfile without installing:
+
+```bash
+pnpm install --lockfile-only
+```
+
+## Benchmarking
+
+### Compare Install Times
+
+```bash
+# Clean install
+rm -rf node_modules pnpm-lock.yaml
+time pnpm install
+
+# Cached install (with lockfile)
+rm -rf node_modules
+time pnpm install --frozen-lockfile
+
+# With store cache
+time pnpm install --frozen-lockfile --prefer-offline
+```
+
+### Profile Resolution
+
+Debug slow installs:
+
+```bash
+# Verbose logging
+pnpm install --reporter=append-only
+
+# Debug mode
+DEBUG=pnpm:* pnpm install
+```
+
+## Configuration Summary
+
+Optimized `.npmrc` for performance:
+
+```ini
+# Install behavior
+prefer-offline=true
+auto-install-peers=true
+
+# Build optimization  
+side-effects-cache=true
+# Only build what's necessary
+onlyBuiltDependencies[]=esbuild
+onlyBuiltDependencies[]=@swc/core
+
+# Network
+fetch-retries=3
+network-concurrency=16
+
+# Workspace
+workspace-concurrency=4
+```
+
+## Quick Reference
+
+| Scenario | Command/Setting |
+|----------|-----------------|
+| CI installs | `pnpm install --frozen-lockfile` |
+| Offline development | `--prefer-offline` |
+| Skip native builds | `neverBuiltDependencies` |
+| Parallel workspace | `pnpm -r --parallel run build` |
+| Build changed only | `pnpm --filter "...[origin/main]" build` |
+| Clean store | `pnpm store prune` |
+
+<!-- 
+Source references:
+- https://pnpm.io/npmrc
+- https://pnpm.io/cli/install
+- https://pnpm.io/filtering
+-->
diff --git a/.claude/skills/pnpm/references/core-cli.md b/.claude/skills/pnpm/references/core-cli.md
new file mode 100644
index 0000000..2286293
--- /dev/null
+++ b/.claude/skills/pnpm/references/core-cli.md
@@ -0,0 +1,229 @@
+---
+name: pnpm-cli-commands
+description: Essential pnpm commands for package management, running scripts, and workspace operations
+---
+
+# pnpm CLI Commands
+
+pnpm provides a comprehensive CLI for package management with commands similar to npm/yarn but with unique features.
+
+## Installation Commands
+
+### Install all dependencies
+```bash
+pnpm install
+# or
+pnpm i
+```
+
+### Add a dependency
+```bash
+# Production dependency
+pnpm add <pkg>
+
+# Dev dependency
+pnpm add -D <pkg>
+pnpm add --save-dev <pkg>
+
+# Optional dependency
+pnpm add -O <pkg>
+
+# Global package
+pnpm add -g <pkg>
+
+# Specific version
+pnpm add <pkg>@<version>
+pnpm add <pkg>@next
+pnpm add <pkg>@^1.0.0
+```
+
+### Remove a dependency
+```bash
+pnpm remove <pkg>
+pnpm rm <pkg>
+pnpm uninstall <pkg>
+pnpm un <pkg>
+```
+
+### Update dependencies
+```bash
+# Update all
+pnpm update
+pnpm up
+
+# Update specific package
+pnpm update <pkg>
+
+# Update to latest (ignore semver)
+pnpm update --latest
+pnpm up -L
+
+# Interactive update
+pnpm update --interactive
+pnpm up -i
+```
+
+## Script Commands
+
+### Run scripts
+```bash
+pnpm run <script>
+# or shorthand
+pnpm <script>
+
+# Pass arguments to script
+pnpm run build -- --watch
+
+# Run script if exists (no error if missing)
+pnpm run --if-present build
+```
+
+### Execute binaries
+```bash
+# Run local binary
+pnpm exec <command>
+
+# Example
+pnpm exec eslint .
+```
+
+### dlx - Run without installing
+```bash
+# Like npx but for pnpm
+pnpm dlx <pkg>
+
+# Examples
+pnpm dlx create-vite my-app
+pnpm dlx degit user/repo my-project
+```
+
+## Workspace Commands
+
+### Run in all packages
+```bash
+# Run script in all workspace packages
+pnpm -r run <script>
+pnpm --recursive run <script>
+
+# Run in specific packages
+pnpm --filter <pattern> run <script>
+
+# Examples
+pnpm --filter "./packages/**" run build
+pnpm --filter "!./packages/internal/**" run test
+pnpm --filter "@myorg/*" run lint
+```
+
+### Filter patterns
+```bash
+# By package name
+pnpm --filter <pkg-name> <command>
+pnpm --filter "@scope/pkg" build
+
+# By directory
+pnpm --filter "./packages/core" test
+
+# Dependencies of a package
+pnpm --filter "...@scope/app" build
+
+# Dependents of a package
+pnpm --filter "@scope/core..." test
+
+# Changed packages since commit/branch
+pnpm --filter "...[origin/main]" build
+```
+
+## Other Useful Commands
+
+### Link packages
+```bash
+# Link global package
+pnpm link --global
+pnpm link -g
+
+# Use linked package
+pnpm link --global <pkg>
+```
+
+### Patch packages
+```bash
+# Create patch for a package
+pnpm patch <pkg>@<version>
+
+# After editing, commit the patch
+pnpm patch-commit <path>
+
+# Remove a patch
+pnpm patch-remove <pkg>
+```
+
+### Store management
+```bash
+# Show store path
+pnpm store path
+
+# Remove unreferenced packages
+pnpm store prune
+
+# Check store integrity
+pnpm store status
+```
+
+### Other commands
+```bash
+# Clean install (like npm ci)
+pnpm install --frozen-lockfile
+
+# List installed packages
+pnpm list
+pnpm ls
+
+# Why is package installed?
+pnpm why <pkg>
+
+# Outdated packages
+pnpm outdated
+
+# Audit for vulnerabilities
+pnpm audit
+
+# Rebuild native modules
+pnpm rebuild
+
+# Import from npm/yarn lockfile
+pnpm import
+
+# Create tarball
+pnpm pack
+
+# Publish package
+pnpm publish
+```
+
+## Useful Flags
+
+```bash
+# Ignore scripts
+pnpm install --ignore-scripts
+
+# Prefer offline (use cache)
+pnpm install --prefer-offline
+
+# Strict peer dependencies
+pnpm install --strict-peer-dependencies
+
+# Production only
+pnpm install --prod
+pnpm install -P
+
+# No optional dependencies
+pnpm install --no-optional
+```
+
+<!-- 
+Source references:
+- https://pnpm.io/cli/install
+- https://pnpm.io/cli/add
+- https://pnpm.io/cli/run
+- https://pnpm.io/filtering
+-->
diff --git a/.claude/skills/pnpm/references/core-config.md b/.claude/skills/pnpm/references/core-config.md
new file mode 100644
index 0000000..4e5dbab
--- /dev/null
+++ b/.claude/skills/pnpm/references/core-config.md
@@ -0,0 +1,188 @@
+---
+name: pnpm-configuration
+description: Configuration options via pnpm-workspace.yaml and .npmrc settings
+---
+
+# pnpm Configuration
+
+pnpm uses two main configuration files: `pnpm-workspace.yaml` for workspace and pnpm-specific settings, and `.npmrc` for npm-compatible and pnpm-specific settings.
+
+## pnpm-workspace.yaml
+
+The recommended location for pnpm-specific configurations. Place at project root.
+
+```yaml
+# Define workspace packages
+packages:
+  - 'packages/*'
+  - 'apps/*'
+  - '!**/test/**'  # Exclude pattern
+
+# Catalog for shared dependency versions
+catalog:
+  react: ^18.2.0
+  typescript: ~5.3.0
+
+# Named catalogs for different dependency groups
+catalogs:
+  react17:
+    react: ^17.0.2
+    react-dom: ^17.0.2
+  react18:
+    react: ^18.2.0
+    react-dom: ^18.2.0
+
+# Override resolutions (preferred location)
+overrides:
+  lodash: ^4.17.21
+  'foo@^1.0.0>bar': ^2.0.0
+
+# pnpm settings (alternative to .npmrc)
+settings:
+  auto-install-peers: true
+  strict-peer-dependencies: false
+  link-workspace-packages: true
+  prefer-workspace-packages: true
+  shared-workspace-lockfile: true
+```
+
+## .npmrc Settings
+
+pnpm reads settings from `.npmrc` files. Create at project root or user home.
+
+### Common pnpm Settings
+
+```ini
+# Automatically install peer dependencies
+auto-install-peers=true
+
+# Fail on peer dependency issues
+strict-peer-dependencies=false
+
+# Hoist patterns for dependencies
+public-hoist-pattern[]=*types*
+public-hoist-pattern[]=*eslint*
+shamefully-hoist=false
+
+# Store location
+store-dir=~/.pnpm-store
+
+# Virtual store location  
+virtual-store-dir=node_modules/.pnpm
+
+# Lockfile settings
+lockfile=true
+prefer-frozen-lockfile=true
+
+# Side effects cache (speeds up rebuilds)
+side-effects-cache=true
+
+# Registry settings
+registry=https://registry.npmjs.org/
+@myorg:registry=https://npm.myorg.com/
+```
+
+### Workspace Settings
+
+```ini
+# Link workspace packages
+link-workspace-packages=true
+
+# Prefer workspace packages over registry
+prefer-workspace-packages=true
+
+# Single lockfile for all packages
+shared-workspace-lockfile=true
+
+# Save prefix for workspace dependencies
+save-workspace-protocol=rolling
+```
+
+### Node.js Settings
+
+```ini
+# Use specific Node.js version
+use-node-version=20.10.0
+
+# Node.js version file
+node-version-file=.nvmrc
+
+# Manage Node.js versions
+manage-package-manager-versions=true
+```
+
+### Security Settings
+
+```ini
+# Ignore specific scripts
+ignore-scripts=false
+
+# Allow specific build scripts
+onlyBuiltDependencies[]=esbuild
+onlyBuiltDependencies[]=sharp
+
+# Package extensions for missing peer deps
+package-extensions[foo@1].peerDependencies.bar=*
+```
+
+## Configuration Hierarchy
+
+Settings are read in order (later overrides earlier):
+
+1. `/etc/npmrc` - Global config
+2. `~/.npmrc` - User config  
+3. `<project>/.npmrc` - Project config
+4. Environment variables: `npm_config_<key>=<value>`
+5. `pnpm-workspace.yaml` settings field
+
+## Environment Variables
+
+```bash
+# Set config via env
+npm_config_registry=https://registry.npmjs.org/
+
+# pnpm-specific env vars
+PNPM_HOME=~/.local/share/pnpm
+```
+
+## Package.json Fields
+
+pnpm reads specific fields from `package.json`:
+
+```json
+{
+  "pnpm": {
+    "overrides": {
+      "lodash": "^4.17.21"
+    },
+    "peerDependencyRules": {
+      "ignoreMissing": ["@babel/*"],
+      "allowedVersions": {
+        "react": "17 || 18"
+      }
+    },
+    "neverBuiltDependencies": ["fsevents"],
+    "onlyBuiltDependencies": ["esbuild"],
+    "allowedDeprecatedVersions": {
+      "request": "*"
+    },
+    "patchedDependencies": {
+      "express@4.18.2": "patches/express@4.18.2.patch"
+    }
+  }
+}
+```
+
+## Key Differences from npm/yarn
+
+1. **Strict by default**: No phantom dependencies
+2. **Workspace protocol**: `workspace:*` for local packages
+3. **Catalogs**: Centralized version management
+4. **Content-addressable store**: Shared across projects
+
+<!-- 
+Source references:
+- https://pnpm.io/pnpm-workspace_yaml
+- https://pnpm.io/npmrc
+- https://pnpm.io/package_json
+-->
diff --git a/.claude/skills/pnpm/references/core-store.md b/.claude/skills/pnpm/references/core-store.md
new file mode 100644
index 0000000..d5e6da4
--- /dev/null
+++ b/.claude/skills/pnpm/references/core-store.md
@@ -0,0 +1,179 @@
+---
+name: pnpm-store
+description: Content-addressable storage system that makes pnpm fast and disk-efficient
+---
+
+# pnpm Store
+
+pnpm uses a content-addressable store to save disk space and speed up installations. All packages are stored once globally and hard-linked to project `node_modules`.
+
+## How It Works
+
+1. **Global Store**: Packages are downloaded once to a central store
+2. **Hard Links**: Projects link to store instead of copying files
+3. **Content-Addressable**: Files are stored by content hash, deduplicating identical files
+
+### Storage Layout
+
+```
+~/.pnpm-store/              # Global store (default location)
+└── v3/
+    └── files/
+        └── <hash>/         # Files stored by content hash
+
+project/
+└── node_modules/
+    ├── .pnpm/              # Virtual store (hard links to global store)
+    │   ├── lodash@4.17.21/
+    │   │   └── node_modules/
+    │   │       └── lodash/
+    │   └── express@4.18.2/
+    │       └── node_modules/
+    │           ├── express/
+    │           └── <deps>/  # Flat structure for dependencies
+    ├── lodash -> .pnpm/lodash@4.17.21/node_modules/lodash
+    └── express -> .pnpm/express@4.18.2/node_modules/express
+```
+
+## Store Commands
+
+```bash
+# Show store location
+pnpm store path
+
+# Remove unreferenced packages
+pnpm store prune
+
+# Check store integrity
+pnpm store status
+
+# Add package to store without installing
+pnpm store add <pkg>
+```
+
+## Configuration
+
+### Store Location
+
+```ini
+# .npmrc
+store-dir=~/.pnpm-store
+
+# Or use environment variable
+PNPM_HOME=~/.local/share/pnpm
+```
+
+### Virtual Store
+
+The virtual store (`.pnpm` in `node_modules`) contains symlinks to the global store:
+
+```ini
+# Customize virtual store location
+virtual-store-dir=node_modules/.pnpm
+
+# Alternative flat layout
+node-linker=hoisted
+```
+
+## Disk Space Benefits
+
+pnpm saves significant disk space:
+
+- **Deduplication**: Same package version stored once across all projects
+- **Content deduplication**: Identical files across different packages stored once
+- **Hard links**: No copying, just linking
+
+### Check disk usage
+
+```bash
+# Compare actual vs apparent size
+du -sh node_modules        # Apparent size
+du -sh --apparent-size node_modules  # With hard links counted
+```
+
+## Node Linker Modes
+
+Configure how `node_modules` is structured:
+
+```ini
+# Default: Symlinked structure (recommended)
+node-linker=isolated
+
+# Flat node_modules (npm-like, for compatibility)
+node-linker=hoisted
+
+# PnP mode (experimental, like Yarn PnP)
+node-linker=pnp
+```
+
+### Isolated Mode (Default)
+
+- Strict dependency resolution
+- No phantom dependencies
+- Packages can only access declared dependencies
+
+### Hoisted Mode
+
+- Flat `node_modules` like npm
+- For compatibility with tools that don't support symlinks
+- Loses strictness benefits
+
+## Side Effects Cache
+
+Cache build outputs for native modules:
+
+```ini
+# Enable side effects caching
+side-effects-cache=true
+
+# Store side effects in project (instead of global store)
+side-effects-cache-readonly=true
+```
+
+## Shared Store Across Machines
+
+For CI/CD, you can share the store:
+
+```yaml
+# GitHub Actions example
+- uses: pnpm/action-setup@v4
+  with:
+    run_install: false
+
+- name: Get pnpm store directory
+  shell: bash
+  run: echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
+
+- uses: actions/cache@v4
+  with:
+    path: ${{ env.STORE_PATH }}
+    key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+```
+
+## Troubleshooting
+
+### Store corruption
+```bash
+# Verify and fix store
+pnpm store status
+pnpm store prune
+```
+
+### Hard link issues (network drives, Docker)
+```ini
+# Use copying instead of hard links
+package-import-method=copy
+```
+
+### Permission issues
+```bash
+# Fix store permissions
+chmod -R u+w ~/.pnpm-store
+```
+
+<!-- 
+Source references:
+- https://pnpm.io/symlinked-node-modules-structure
+- https://pnpm.io/cli/store
+- https://pnpm.io/npmrc#store-dir
+-->
diff --git a/.claude/skills/pnpm/references/core-workspaces.md b/.claude/skills/pnpm/references/core-workspaces.md
new file mode 100644
index 0000000..124f788
--- /dev/null
+++ b/.claude/skills/pnpm/references/core-workspaces.md
@@ -0,0 +1,205 @@
+---
+name: pnpm-workspaces
+description: Monorepo support with workspaces for managing multiple packages
+---
+
+# pnpm Workspaces
+
+pnpm has built-in support for monorepos (multi-package repositories) through workspaces.
+
+## Setting Up Workspaces
+
+Create `pnpm-workspace.yaml` at the repository root:
+
+```yaml
+packages:
+  # Include all packages in packages/ directory
+  - 'packages/*'
+  # Include all apps
+  - 'apps/*'
+  # Include nested packages
+  - 'tools/*/packages/*'
+  # Exclude test directories
+  - '!**/test/**'
+```
+
+## Workspace Protocol
+
+Use `workspace:` protocol to reference local packages:
+
+```json
+{
+  "dependencies": {
+    "@myorg/utils": "workspace:*",
+    "@myorg/core": "workspace:^",
+    "@myorg/types": "workspace:~"
+  }
+}
+```
+
+### Protocol Variants
+
+| Protocol | Behavior | Published As |
+|----------|----------|--------------|
+| `workspace:*` | Any version | Actual version (e.g., `1.2.3`) |
+| `workspace:^` | Compatible version | `^1.2.3` |
+| `workspace:~` | Patch version | `~1.2.3` |
+| `workspace:^1.0.0` | Semver range | `^1.0.0` |
+
+## Filtering Packages
+
+Run commands on specific packages using `--filter`:
+
+```bash
+# By package name
+pnpm --filter @myorg/app build
+pnpm -F @myorg/app build
+
+# By directory path
+pnpm --filter "./packages/core" test
+
+# Glob patterns
+pnpm --filter "@myorg/*" lint
+pnpm --filter "!@myorg/internal-*" publish
+
+# All packages
+pnpm -r build
+pnpm --recursive build
+```
+
+### Dependency-based Filtering
+
+```bash
+# Package and all its dependencies
+pnpm --filter "...@myorg/app" build
+
+# Package and all its dependents
+pnpm --filter "@myorg/core..." test
+
+# Both directions
+pnpm --filter "...@myorg/shared..." build
+
+# Changed since git ref
+pnpm --filter "...[origin/main]" test
+pnpm --filter "[HEAD~5]" lint
+```
+
+## Workspace Commands
+
+### Install dependencies
+```bash
+# Install all workspace packages
+pnpm install
+
+# Add dependency to specific package
+pnpm --filter @myorg/app add lodash
+
+# Add workspace dependency
+pnpm --filter @myorg/app add @myorg/utils
+```
+
+### Run scripts
+```bash
+# Run in all packages with that script
+pnpm -r run build
+
+# Run in topological order (dependencies first)
+pnpm -r --workspace-concurrency=1 run build
+
+# Run in parallel
+pnpm -r --parallel run test
+
+# Stream output
+pnpm -r --stream run dev
+```
+
+### Execute commands
+```bash
+# Run command in all packages
+pnpm -r exec pwd
+
+# Run in specific packages
+pnpm --filter "./packages/**" exec rm -rf dist
+```
+
+## Workspace Settings
+
+Configure in `.npmrc` or `pnpm-workspace.yaml`:
+
+```ini
+# Link workspace packages automatically
+link-workspace-packages=true
+
+# Prefer workspace packages over registry
+prefer-workspace-packages=true
+
+# Single lockfile (recommended)
+shared-workspace-lockfile=true
+
+# Workspace protocol handling
+save-workspace-protocol=rolling
+
+# Concurrent workspace scripts
+workspace-concurrency=4
+```
+
+## Publishing Workspaces
+
+When publishing, `workspace:` protocols are converted:
+
+```json
+// Before publish
+{
+  "dependencies": {
+    "@myorg/utils": "workspace:^"
+  }
+}
+
+// After publish
+{
+  "dependencies": {
+    "@myorg/utils": "^1.2.3"
+  }
+}
+```
+
+Use `--no-git-checks` for publishing from CI:
+```bash
+pnpm publish -r --no-git-checks
+```
+
+## Best Practices
+
+1. **Use workspace protocol** for internal dependencies
+2. **Enable `link-workspace-packages`** for automatic linking
+3. **Use shared lockfile** for consistency
+4. **Filter by dependencies** when building to ensure correct order
+5. **Use catalogs** for shared external dependency versions
+
+## Example Project Structure
+
+```
+my-monorepo/
+├── pnpm-workspace.yaml
+├── package.json
+├── pnpm-lock.yaml
+├── packages/
+│   ├── core/
+│   │   └── package.json
+│   ├── utils/
+│   │   └── package.json
+│   └── types/
+│       └── package.json
+└── apps/
+    ├── web/
+    │   └── package.json
+    └── api/
+        └── package.json
+```
+
+<!-- 
+Source references:
+- https://pnpm.io/workspaces
+- https://pnpm.io/filtering
+- https://pnpm.io/npmrc#workspace-settings
+-->
diff --git a/.claude/skills/pnpm/references/features-aliases.md b/.claude/skills/pnpm/references/features-aliases.md
new file mode 100644
index 0000000..84c0108
--- /dev/null
+++ b/.claude/skills/pnpm/references/features-aliases.md
@@ -0,0 +1,168 @@
+---
+name: pnpm-aliases
+description: Install packages under custom names for versioning, forks, or alternatives
+---
+
+# pnpm Aliases
+
+pnpm supports package aliases using the `npm:` protocol. This lets you install packages under different names, use multiple versions of the same package, or substitute packages.
+
+## Basic Syntax
+
+```bash
+pnpm add <alias>@npm:<package>@<version>
+```
+
+In `package.json`:
+```json
+{
+  "dependencies": {
+    "<alias>": "npm:<package>@<version>"
+  }
+}
+```
+
+## Use Cases
+
+### Multiple Versions of Same Package
+
+Install different versions side by side:
+
+```json
+{
+  "dependencies": {
+    "lodash3": "npm:lodash@3",
+    "lodash4": "npm:lodash@4"
+  }
+}
+```
+
+Usage:
+```js
+import lodash3 from 'lodash3'
+import lodash4 from 'lodash4'
+```
+
+### Replace Package with Fork
+
+Substitute a package with a fork or alternative:
+
+```json
+{
+  "dependencies": {
+    "original-pkg": "npm:my-fork@^1.0.0"
+  }
+}
+```
+
+All imports of `original-pkg` will resolve to `my-fork`.
+
+### Replace Deprecated Package
+
+```json
+{
+  "dependencies": {
+    "request": "npm:@cypress/request@^3.0.0"
+  }
+}
+```
+
+### Scoped to Unscoped (or vice versa)
+
+```json
+{
+  "dependencies": {
+    "vue": "npm:@anthropic/vue@^3.0.0",
+    "@myorg/utils": "npm:lodash@^4.17.21"
+  }
+}
+```
+
+## CLI Usage
+
+### Add with alias
+
+```bash
+# Add lodash under alias
+pnpm add lodash4@npm:lodash@4
+
+# Add fork as original name
+pnpm add request@npm:@cypress/request
+```
+
+### Add multiple versions
+
+```bash
+pnpm add react17@npm:react@17 react18@npm:react@18
+```
+
+## With TypeScript
+
+For type resolution with aliases, you may need to configure TypeScript:
+
+```json
+// tsconfig.json
+{
+  "compilerOptions": {
+    "paths": {
+      "lodash3": ["node_modules/lodash3"],
+      "lodash4": ["node_modules/lodash4"]
+    }
+  }
+}
+```
+
+Or use `@types` packages with aliases:
+
+```json
+{
+  "devDependencies": {
+    "@types/lodash3": "npm:@types/lodash@3",
+    "@types/lodash4": "npm:@types/lodash@4"
+  }
+}
+```
+
+## Combined with Overrides
+
+Force all transitive dependencies to use an alias:
+
+```yaml
+# pnpm-workspace.yaml
+overrides:
+  "underscore": "npm:lodash@^4.17.21"
+```
+
+This replaces all `underscore` imports (including in dependencies) with lodash.
+
+## Git and Local Aliases
+
+Aliases work with any valid pnpm specifier:
+
+```json
+{
+  "dependencies": {
+    "my-fork": "npm:user/repo#commit",
+    "local-pkg": "file:../local-package"
+  }
+}
+```
+
+## Best Practices
+
+1. **Clear naming**: Use descriptive alias names that indicate purpose
+   ```json
+   "lodash-legacy": "npm:lodash@3"
+   "lodash-modern": "npm:lodash@4"
+   ```
+
+2. **Document aliases**: Add comments or documentation explaining why aliases exist
+
+3. **Prefer overrides for global replacement**: If you want to replace a package everywhere, use overrides instead of aliases
+
+4. **Test thoroughly**: Aliased packages may have subtle differences in behavior
+
+<!-- 
+Source references:
+- https://pnpm.io/aliases
+-->
diff --git a/.claude/skills/pnpm/references/features-catalogs.md b/.claude/skills/pnpm/references/features-catalogs.md
new file mode 100644
index 0000000..0aa26c3
--- /dev/null
+++ b/.claude/skills/pnpm/references/features-catalogs.md
@@ -0,0 +1,159 @@
+---
+name: pnpm-catalogs
+description: Centralized dependency version management for workspaces
+---
+
+# pnpm Catalogs
+
+Catalogs provide a centralized way to manage dependency versions across a workspace. Define versions once, use everywhere.
+
+## Basic Usage
+
+Define a catalog in `pnpm-workspace.yaml`:
+
+```yaml
+packages:
+  - 'packages/*'
+
+catalog:
+  react: ^18.2.0
+  react-dom: ^18.2.0
+  typescript: ~5.3.0
+  vite: ^5.0.0
+```
+
+Reference in `package.json` with `catalog:`:
+
+```json
+{
+  "dependencies": {
+    "react": "catalog:",
+    "react-dom": "catalog:"
+  },
+  "devDependencies": {
+    "typescript": "catalog:",
+    "vite": "catalog:"
+  }
+}
+```
+
+## Named Catalogs
+
+Create multiple catalogs for different scenarios:
+
+```yaml
+packages:
+  - 'packages/*'
+
+# Default catalog
+catalog:
+  lodash: ^4.17.21
+
+# Named catalogs
+catalogs:
+  react17:
+    react: ^17.0.2
+    react-dom: ^17.0.2
+  
+  react18:
+    react: ^18.2.0
+    react-dom: ^18.2.0
+  
+  testing:
+    vitest: ^1.0.0
+    "@testing-library/react": ^14.0.0
+```
+
+Reference named catalogs:
+
+```json
+{
+  "dependencies": {
+    "react": "catalog:react18",
+    "react-dom": "catalog:react18"
+  },
+  "devDependencies": {
+    "vitest": "catalog:testing"
+  }
+}
+```
+
+## Benefits
+
+1. **Single source of truth**: Update version in one place
+2. **Consistency**: All packages use the same version
+3. **Easy upgrades**: Change version once, affects entire workspace
+4. **Type-safe**: TypeScript support in pnpm-workspace.yaml
+
+## Catalog vs Overrides
+
+| Feature | Catalogs | Overrides |
+|---------|----------|-----------|
+| Purpose | Define versions for direct dependencies | Force versions for any dependency |
+| Scope | Direct dependencies only | All dependencies (including transitive) |
+| Usage | `"pkg": "catalog:"` | Applied automatically |
+| Opt-in | Explicit per package.json | Global to workspace |
+
+## Publishing with Catalogs
+
+When publishing, `catalog:` references are replaced with actual versions:
+
+```json
+// Before publish (source)
+{
+  "dependencies": {
+    "react": "catalog:"
+  }
+}
+
+// After publish (published package)
+{
+  "dependencies": {
+    "react": "^18.2.0"
+  }
+}
+```
+
+## Migration from Overrides
+
+If you're using overrides for version consistency:
+
+```yaml
+# Before (using overrides)
+overrides:
+  react: ^18.2.0
+  react-dom: ^18.2.0
+```
+
+Migrate to catalogs for cleaner dependency management:
+
+```yaml
+# After (using catalogs)
+catalog:
+  react: ^18.2.0
+  react-dom: ^18.2.0
+```
+
+Then update package.json files to use `catalog:`.
+
+## Best Practices
+
+1. **Use default catalog** for commonly shared dependencies
+2. **Use named catalogs** for version variants (e.g., different React versions)
+3. **Keep catalog minimal** - only include shared dependencies
+4. **Combine with workspace protocol** for internal packages
+
+```yaml
+catalog:
+  # External shared dependencies
+  lodash: ^4.17.21
+  zod: ^3.22.0
+
+# Internal packages use workspace: protocol instead
+# "dependencies": { "@myorg/utils": "workspace:^" }
+```
+
+<!-- 
+Source references:
+- https://pnpm.io/catalogs
+-->
diff --git a/.claude/skills/pnpm/references/features-hooks.md b/.claude/skills/pnpm/references/features-hooks.md
new file mode 100644
index 0000000..0283c35
--- /dev/null
+++ b/.claude/skills/pnpm/references/features-hooks.md
@@ -0,0 +1,233 @@
+---
+name: pnpm-hooks
+description: Customize package resolution and dependency behavior with pnpmfile hooks
+---
+
+# pnpm Hooks
+
+pnpm provides hooks via `.pnpmfile.cjs` to customize how packages are resolved and their metadata is processed.
+
+## Setup
+
+Create `.pnpmfile.cjs` at workspace root:
+
+```js
+// .pnpmfile.cjs
+function readPackage(pkg, context) {
+  // Modify package metadata
+  return pkg
+}
+
+function afterAllResolved(lockfile, context) {
+  // Modify lockfile
+  return lockfile
+}
+
+module.exports = {
+  hooks: {
+    readPackage,
+    afterAllResolved
+  }
+}
+```
+
+## readPackage Hook
+
+Called for every package before resolution. Use to modify dependencies, add missing peer deps, or fix broken packages.
+
+### Add Missing Peer Dependency
+
+```js
+function readPackage(pkg, context) {
+  if (pkg.name === 'some-broken-package') {
+    pkg.peerDependencies = {
+      ...pkg.peerDependencies,
+      react: '*'
+    }
+    context.log(`Added react peer dep to ${pkg.name}`)
+  }
+  return pkg
+}
+```
+
+### Override Dependency Version
+
+```js
+function readPackage(pkg, context) {
+  // Fix all lodash versions
+  if (pkg.dependencies?.lodash) {
+    pkg.dependencies.lodash = '^4.17.21'
+  }
+  if (pkg.devDependencies?.lodash) {
+    pkg.devDependencies.lodash = '^4.17.21'
+  }
+  return pkg
+}
+```
+
+### Remove Unwanted Dependency
+
+```js
+function readPackage(pkg, context) {
+  // Remove optional dependency that causes issues
+  if (pkg.optionalDependencies?.fsevents) {
+    delete pkg.optionalDependencies.fsevents
+  }
+  return pkg
+}
+```
+
+### Replace Package
+
+```js
+function readPackage(pkg, context) {
+  // Replace deprecated package
+  if (pkg.dependencies?.['old-package']) {
+    pkg.dependencies['new-package'] = pkg.dependencies['old-package']
+    delete pkg.dependencies['old-package']
+  }
+  return pkg
+}
+```
+
+### Fix Broken Package
+
+```js
+function readPackage(pkg, context) {
+  // Fix incorrect exports field
+  if (pkg.name === 'broken-esm-package') {
+    pkg.exports = {
+      '.': {
+        import: './dist/index.mjs',
+        require: './dist/index.cjs'
+      }
+    }
+  }
+  return pkg
+}
+```
+
+## afterAllResolved Hook
+
+Called after the lockfile is generated. Use for post-resolution modifications.
+
+```js
+function afterAllResolved(lockfile, context) {
+  // Log all resolved packages
+  context.log(`Resolved ${Object.keys(lockfile.packages || {}).length} packages`)
+  
+  // Modify lockfile if needed
+  return lockfile
+}
+```
+
+## Context Object
+
+The `context` object provides utilities:
+
+```js
+function readPackage(pkg, context) {
+  // Log messages
+  context.log('Processing package...')
+  
+  return pkg
+}
+```
+
+## Use with TypeScript
+
+For type hints, use JSDoc:
+
+```js
+// .pnpmfile.cjs
+
+/**
+ * @param {import('type-fest').PackageJson} pkg
+ * @param {{ log: (msg: string) => void }} context
+ * @returns {import('type-fest').PackageJson}
+ */
+function readPackage(pkg, context) {
+  return pkg
+}
+
+module.exports = {
+  hooks: {
+    readPackage
+  }
+}
+```
+
+## Common Patterns
+
+### Conditional by Package Name
+
+```js
+function readPackage(pkg, context) {
+  switch (pkg.name) {
+    case 'package-a':
+      pkg.dependencies.foo = '^2.0.0'
+      break
+    case 'package-b':
+      delete pkg.optionalDependencies.bar
+      break
+  }
+  return pkg
+}
+```
+
+### Apply to All Packages
+
+```js
+function readPackage(pkg, context) {
+  // Remove all optional fsevents
+  if (pkg.optionalDependencies) {
+    delete pkg.optionalDependencies.fsevents
+  }
+  return pkg
+}
+```
+
+### Debug Resolution
+
+```js
+function readPackage(pkg, context) {
+  if (process.env.DEBUG_PNPM) {
+    context.log(`${pkg.name}@${pkg.version}`)
+    context.log(`  deps: ${Object.keys(pkg.dependencies || {}).join(', ')}`)
+  }
+  return pkg
+}
+```
+
+## Hooks vs Overrides
+
+| Feature | Hooks (.pnpmfile.cjs) | Overrides |
+|---------|----------------------|-----------|
+| Complexity | Can use JavaScript logic | Declarative only |
+| Scope | Any package metadata | Version only |
+| Use case | Complex fixes, conditional logic | Simple version pins |
+
+**Prefer overrides** for simple version fixes. **Use hooks** when you need:
+- Conditional logic
+- Non-version modifications (exports, peer deps)
+- Logging/debugging
+
+## Troubleshooting
+
+### Hook not running
+
+1. Ensure file is named `.pnpmfile.cjs` (not `.js`)
+2. Check file is at workspace root
+3. Run `pnpm install` to trigger hooks
+
+### Debug hooks
+
+```bash
+# See hook logs
+pnpm install --reporter=append-only
+```
+
+<!-- 
+Source references:
+- https://pnpm.io/pnpmfile
+-->
diff --git a/.claude/skills/pnpm/references/features-overrides.md b/.claude/skills/pnpm/references/features-overrides.md
new file mode 100644
index 0000000..fb65429
--- /dev/null
+++ b/.claude/skills/pnpm/references/features-overrides.md
@@ -0,0 +1,184 @@
+---
+name: pnpm-overrides
+description: Force specific versions of dependencies including transitive dependencies
+---
+
+# pnpm Overrides
+
+Overrides let you force specific versions of packages, including transitive dependencies. Useful for fixing security vulnerabilities or compatibility issues.
+
+## Basic Syntax
+
+Define overrides in `pnpm-workspace.yaml` (recommended) or `package.json`:
+
+### In pnpm-workspace.yaml (Recommended)
+
+```yaml
+packages:
+  - 'packages/*'
+
+overrides:
+  # Override all versions of a package
+  lodash: ^4.17.21
+  
+  # Override specific version range
+  "foo@^1.0.0": ^1.2.3
+  
+  # Override nested dependency
+  "express>cookie": ^0.6.0
+  
+  # Override to different package
+  "underscore": "npm:lodash@^4.17.21"
+```
+
+### In package.json
+
+```json
+{
+  "pnpm": {
+    "overrides": {
+      "lodash": "^4.17.21",
+      "foo@^1.0.0": "^1.2.3",
+      "bar@^2.0.0>qux": "^1.0.0"
+    }
+  }
+}
+```
+
+## Override Patterns
+
+### Override all instances
+```yaml
+overrides:
+  lodash: ^4.17.21
+```
+Forces all lodash installations to use ^4.17.21.
+
+### Override specific parent version
+```yaml
+overrides:
+  "foo@^1.0.0": ^1.2.3
+```
+Only override foo when the requested version matches ^1.0.0.
+
+### Override nested dependency
+```yaml
+overrides:
+  "express>cookie": ^0.6.0
+  "foo@1.x>bar@^2.0.0>qux": ^1.0.0
+```
+Override cookie only when it's a dependency of express.
+
+### Replace with different package
+```yaml
+overrides:
+  # Replace underscore with lodash
+  "underscore": "npm:lodash@^4.17.21"
+  
+  # Use local file
+  "some-pkg": "file:./local-pkg"
+  
+  # Use git
+  "some-pkg": "github:user/repo#commit"
+```
+
+### Remove a dependency
+```yaml
+overrides:
+  "unwanted-pkg": "-"
+```
+The `-` removes the package entirely.
+
+## Common Use Cases
+
+### Security Fix
+
+Force patched version of vulnerable package:
+
+```yaml
+overrides:
+  # Fix CVE in transitive dependency
+  "minimist": "^1.2.6"
+  "json5": "^2.2.3"
+```
+
+### Deduplicate Dependencies
+
+Force single version when multiple are installed:
+
+```yaml
+overrides:
+  "react": "^18.2.0"
+  "react-dom": "^18.2.0"
+```
+
+### Fix Peer Dependency Issues
+
+```yaml
+overrides:
+  "@types/react": "^18.2.0"
+```
+
+### Replace Deprecated Package
+
+```yaml
+overrides:
+  "request": "npm:@cypress/request@^3.0.0"
+```
+
+## Hooks Alternative
+
+For more complex scenarios, use `.pnpmfile.cjs`:
+
+```js
+// .pnpmfile.cjs
+function readPackage(pkg, context) {
+  // Override dependency version
+  if (pkg.dependencies?.lodash) {
+    pkg.dependencies.lodash = '^4.17.21'
+  }
+  
+  // Add missing peer dependency
+  if (pkg.name === 'some-package') {
+    pkg.peerDependencies = {
+      ...pkg.peerDependencies,
+      react: '*'
+    }
+  }
+  
+  return pkg
+}
+
+module.exports = {
+  hooks: {
+    readPackage
+  }
+}
+```
+
+## Overrides vs Catalogs
+
+| Feature | Overrides | Catalogs |
+|---------|-----------|----------|
+| Affects | All dependencies (including transitive) | Direct dependencies only |
+| Usage | Automatic | Explicit `catalog:` reference |
+| Purpose | Force versions, fix issues | Version management |
+| Granularity | Can target specific parents | Package-wide only |
+
+## Debugging
+
+Check which version is resolved:
+
+```bash
+# See resolved versions
+pnpm why lodash
+
+# List all versions
+pnpm list lodash --depth=Infinity
+```
+
+<!-- 
+Source references:
+- https://pnpm.io/package_json#pnpmoverrides
+- https://pnpm.io/pnpmfile
+-->
diff --git a/.claude/skills/pnpm/references/features-patches.md b/.claude/skills/pnpm/references/features-patches.md
new file mode 100644
index 0000000..5df7071
--- /dev/null
+++ b/.claude/skills/pnpm/references/features-patches.md
@@ -0,0 +1,201 @@
+---
+name: pnpm-patches
+description: Patch third-party packages directly with customized fixes
+---
+
+# pnpm Patches
+
+pnpm's patching feature lets you modify third-party packages directly. Useful for applying fixes before upstream releases or customizing package behavior.
+
+## Creating a Patch
+
+### Step 1: Initialize Patch
+
+```bash
+pnpm patch <pkg>@<version>
+
+# Example
+pnpm patch express@4.18.2
+```
+
+This creates a temporary directory with the package source and outputs the path:
+
+```
+You can now edit the following folder: /tmp/abc123...
+```
+
+### Step 2: Edit Files
+
+Navigate to the temporary directory and make your changes:
+
+```bash
+cd /tmp/abc123...
+# Edit files as needed
+```
+
+### Step 3: Commit Patch
+
+```bash
+pnpm patch-commit <path-from-step-1>
+
+# Example
+pnpm patch-commit /tmp/abc123...
+```
+
+This creates a `.patch` file in `patches/` and updates `package.json`:
+
+```
+patches/
+└── express@4.18.2.patch
+```
+
+```json
+{
+  "pnpm": {
+    "patchedDependencies": {
+      "express@4.18.2": "patches/express@4.18.2.patch"
+    }
+  }
+}
+```
+
+## Patch File Format
+
+Patches use standard unified diff format:
+
+```diff
+diff --git a/lib/router/index.js b/lib/router/index.js
+index abc123..def456 100644
+--- a/lib/router/index.js
++++ b/lib/router/index.js
+@@ -100,6 +100,7 @@ function createRouter() {
+   // Original code
+-  const timeout = 30000;
++  const timeout = 60000; // Extended timeout
+   return router;
+ }
+```
+
+## Managing Patches
+
+### List Patched Packages
+
+```bash
+pnpm list --depth=0
+# Shows (patched) marker for patched packages
+```
+
+### Update a Patch
+
+```bash
+# Edit existing patch
+pnpm patch express@4.18.2
+
+# After editing
+pnpm patch-commit <path>
+```
+
+### Remove a Patch
+
+```bash
+pnpm patch-remove <pkg>@<version>
+
+# Example  
+pnpm patch-remove express@4.18.2
+```
+
+Or manually:
+1. Delete the patch file from `patches/`
+2. Remove entry from `patchedDependencies` in `package.json`
+3. Run `pnpm install`
+
+## Patch Configuration
+
+### Custom Patches Directory
+
+```json
+{
+  "pnpm": {
+    "patchedDependencies": {
+      "express@4.18.2": "custom-patches/my-express-fix.patch"
+    }
+  }
+}
+```
+
+### Multiple Packages
+
+```json
+{
+  "pnpm": {
+    "patchedDependencies": {
+      "express@4.18.2": "patches/express@4.18.2.patch",
+      "lodash@4.17.21": "patches/lodash@4.17.21.patch",
+      "@types/node@20.10.0": "patches/@types__node@20.10.0.patch"
+    }
+  }
+}
+```
+
+## Workspaces
+
+Patches are shared across the workspace. Define in the root `package.json`:
+
+```json
+// Root package.json
+{
+  "pnpm": {
+    "patchedDependencies": {
+      "express@4.18.2": "patches/express@4.18.2.patch"
+    }
+  }
+}
+```
+
+All workspace packages using `express@4.18.2` will have the patch applied.
+
+## Best Practices
+
+1. **Version specificity**: Patches are tied to exact versions. Update patches when upgrading dependencies.
+
+2. **Document patches**: Add comments explaining why the patch exists:
+   ```bash
+   # In patches/README.md
+   ## express@4.18.2.patch
+   Fixes timeout issue. PR pending: https://github.com/expressjs/express/pull/1234
+   ```
+
+3. **Minimize patches**: Keep patches small and focused. Large patches are hard to maintain.
+
+4. **Track upstream**: Note upstream issues/PRs so you can remove patches when fixed.
+
+5. **Test patches**: Ensure patched code works correctly in your use case.
+
+## Troubleshooting
+
+### Patch fails to apply
+
+```
+ERR_PNPM_PATCH_FAILED  Cannot apply patch
+```
+
+The package version changed. Recreate the patch:
+```bash
+pnpm patch-remove express@4.18.2
+pnpm patch express@4.18.2
+# Reapply changes
+pnpm patch-commit <path>
+```
+
+### Patch not applied
+
+Ensure:
+1. Version in `patchedDependencies` matches installed version exactly
+2. Run `pnpm install` after adding patch configuration
+
+<!-- 
+Source references:
+- https://pnpm.io/cli/patch
+- https://pnpm.io/cli/patch-commit
+- https://pnpm.io/package_json#pnpmpatcheddependencies
+-->
diff --git a/.claude/skills/pnpm/references/features-peer-deps.md b/.claude/skills/pnpm/references/features-peer-deps.md
new file mode 100644
index 0000000..afa6a73
--- /dev/null
+++ b/.claude/skills/pnpm/references/features-peer-deps.md
@@ -0,0 +1,250 @@
+---
+name: pnpm-peer-dependencies
+description: Handling peer dependencies with auto-install and resolution rules
+---
+
+# pnpm Peer Dependencies
+
+pnpm has strict peer dependency handling by default. It provides configuration options to control how peer dependencies are resolved and reported.
+
+## Auto-Install Peer Dependencies
+
+By default, pnpm automatically installs peer dependencies:
+
+```ini
+# .npmrc (default is true since pnpm v8)
+auto-install-peers=true
+```
+
+When enabled, pnpm automatically adds missing peer dependencies based on the best matching version.
+
+## Strict Peer Dependencies
+
+Control whether peer dependency issues cause errors:
+
+```ini
+# Fail on peer dependency issues (default: false)
+strict-peer-dependencies=true
+```
+
+When strict, pnpm will fail if:
+- Peer dependency is missing
+- Installed version doesn't match required range
+
+## Peer Dependency Rules
+
+Configure peer dependency behavior in `package.json`:
+
+```json
+{
+  "pnpm": {
+    "peerDependencyRules": {
+      "ignoreMissing": ["@babel/*", "eslint"],
+      "allowedVersions": {
+        "react": "17 || 18"
+      },
+      "allowAny": ["@types/*"]
+    }
+  }
+}
+```
+
+### ignoreMissing
+
+Suppress warnings for missing peer dependencies:
+
+```json
+{
+  "pnpm": {
+    "peerDependencyRules": {
+      "ignoreMissing": [
+        "@babel/*",
+        "eslint",
+        "webpack"
+      ]
+    }
+  }
+}
+```
+
+Use patterns:
+- `"react"` - exact package name
+- `"@babel/*"` - all packages in scope
+- `"*"` - all packages (not recommended)
+
+### allowedVersions
+
+Allow specific versions that would otherwise cause warnings:
+
+```json
+{
+  "pnpm": {
+    "peerDependencyRules": {
+      "allowedVersions": {
+        "react": "17 || 18",
+        "webpack": "4 || 5",
+        "@types/react": "*"
+      }
+    }
+  }
+}
+```
+
+### allowAny
+
+Allow any version for specified peer dependencies:
+
+```json
+{
+  "pnpm": {
+    "peerDependencyRules": {
+      "allowAny": ["@types/*", "eslint"]
+    }
+  }
+}
+```
+
+## Adding Peer Dependencies via Hooks
+
+Use `.pnpmfile.cjs` to add missing peer dependencies:
+
+```js
+// .pnpmfile.cjs
+function readPackage(pkg, context) {
+  // Add missing peer dependency
+  if (pkg.name === 'problematic-package') {
+    pkg.peerDependencies = {
+      ...pkg.peerDependencies,
+      react: '*'
+    }
+  }
+  return pkg
+}
+
+module.exports = {
+  hooks: {
+    readPackage
+  }
+}
+```
+
+## Peer Dependencies in Workspaces
+
+Workspace packages can satisfy peer dependencies:
+
+```json
+// packages/app/package.json
+{
+  "dependencies": {
+    "react": "^18.2.0",
+    "@myorg/components": "workspace:^"
+  }
+}
+
+// packages/components/package.json  
+{
+  "peerDependencies": {
+    "react": "^17.0.0 || ^18.0.0"
+  }
+}
+```
+
+The workspace `app` provides `react` which satisfies `components`' peer dependency.
+
+## Common Scenarios
+
+### Monorepo with Shared React
+
+```yaml
+# pnpm-workspace.yaml
+catalog:
+  react: ^18.2.0
+  react-dom: ^18.2.0
+```
+
+```json
+// packages/ui/package.json
+{
+  "peerDependencies": {
+    "react": "^18.0.0",
+    "react-dom": "^18.0.0"
+  }
+}
+
+// apps/web/package.json
+{
+  "dependencies": {
+    "react": "catalog:",
+    "react-dom": "catalog:",
+    "@myorg/ui": "workspace:^"
+  }
+}
+```
+
+### Suppress ESLint Plugin Warnings
+
+```json
+{
+  "pnpm": {
+    "peerDependencyRules": {
+      "ignoreMissing": [
+        "eslint",
+        "@typescript-eslint/parser"
+      ]
+    }
+  }
+}
+```
+
+### Allow Multiple Major Versions
+
+```json
+{
+  "pnpm": {
+    "peerDependencyRules": {
+      "allowedVersions": {
+        "webpack": "4 || 5",
+        "postcss": "7 || 8"
+      }
+    }
+  }
+}
+```
+
+## Debugging Peer Dependencies
+
+```bash
+# See why a package is installed
+pnpm why <package>
+
+# List all peer dependency warnings
+pnpm install --reporter=append-only 2>&1 | grep -i peer
+
+# Check dependency tree
+pnpm list --depth=Infinity
+```
+
+## Best Practices
+
+1. **Enable auto-install-peers** for convenience (default in pnpm v8+)
+
+2. **Use peerDependencyRules** instead of ignoring all warnings
+
+3. **Document suppressed warnings** explaining why they're safe
+
+4. **Keep peer deps ranges wide** in libraries:
+   ```json
+   {
+     "peerDependencies": {
+       "react": "^17.0.0 || ^18.0.0"
+     }
+   }
+   ```
+
+5. **Test with different peer versions** if you support multiple majors
+
+<!-- 
+Source references:
+- https://pnpm.io/package_json#pnpmpeerdependencyrules
+- https://pnpm.io/npmrc#auto-install-peers
+-->
diff --git a/.claude/skills/pocketbase-best-practices/AGENTS.md b/.claude/skills/pocketbase-best-practices/AGENTS.md
new file mode 100644
index 0000000..8d55210
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/AGENTS.md
@@ -0,0 +1,137 @@
+# PocketBase Best Practices
+
+**Version 1.3.0**
+Community
+April 2026
+
+> Comprehensive PocketBase development best practices and performance optimization guide. Contains 63 rules across 9 categories, prioritized by impact from critical (collection design, API rules, authentication) to incremental (production deployment). Includes server-side extending rules for Go and JavaScript (JSVM): event hooks, custom routing, transactions with scoped txApp, server-side filter binding, filesystem handling, cron job scheduling, and Go schema migrations. Updated for PocketBase v0.36.8 and JS SDK v0.26.8 (getFullList default batch size 1000, authWithOAuth2 cancellation fix, getURL null param handling, v0.36.7 fixed-window rate limiter, v0.36.0 strftime() filter function, OTP auth flow). Each rule includes detailed explanations, incorrect vs. correct code examples, and specific guidance to help AI agents generate better PocketBase code.
+
+---
+
+## Categories
+
+Detailed rules are split by category. Load only the relevant file:
+
+### 1. [Collection Design](references/collection-design.md) - **CRITICAL**
+
+Schema design, field types, relations, indexes, and collection type selection. Foundation for application architecture and long-term maintainability.
+
+- 1.1 Use Auth Collections for User Accounts
+- 1.2 Choose Appropriate Field Types for Your Data
+- 1.3 Use GeoPoint Fields for Location Data
+- 1.4 Create Indexes for Frequently Filtered Fields
+- 1.5 Configure Relations with Proper Cascade Options
+- 1.6 Use View Collections for Complex Read-Only Queries
+
+### 2. [API Rules & Security](references/api-rules-security.md) - **CRITICAL**
+
+Access control rules, filter expressions, request context usage, and security patterns. Critical for protecting data and enforcing authorization.
+
+- 2.1 Understand API Rule Types and Defaults
+- 2.2 Use @collection for Cross-Collection Lookups
+- 2.3 Master Filter Expression Syntax
+- 2.4 Default to Locked Rules, Open Explicitly
+- 2.5 Use @request Context in API Rules
+- 2.6 Use strftime() for Date Arithmetic in Filter Expressions
+
+### 3. [Authentication](references/authentication.md) - **CRITICAL**
+
+Password authentication, OAuth2 integration, token management, MFA setup, and auth collection configuration.
+
+- 3.1 Use Impersonation for Admin Operations
+- 3.2 Implement Multi-Factor Authentication
+- 3.3 Integrate OAuth2 Providers Correctly
+- 3.4 Use authWithOTP for Email One-Time Codes, Rate-Limit requestOTP
+- 3.5 Implement Secure Password Authentication
+- 3.6 Manage Auth Tokens Properly
+
+### 4. [SDK Usage](references/sdk-usage.md) - **HIGH**
+
+JavaScript SDK initialization, auth store patterns, error handling, request cancellation, and safe parameter binding.
+
+- 4.1 Use Appropriate Auth Store for Your Platform
+- 4.2 Understand and Control Auto-Cancellation
+- 4.3 Handle SDK Errors Properly
+- 4.4 Use Field Modifiers for Incremental Updates
+- 4.5 Use Safe Parameter Binding in Filters
+- 4.6 Initialize PocketBase Client Correctly
+- 4.7 Use Send Hooks for Request Customization
+
+### 5. [Query Performance](references/query-performance.md) - **HIGH**
+
+Pagination strategies, relation expansion, field selection, batch operations, and N+1 query prevention.
+
+- 5.1 Use Back-Relations for Inverse Lookups
+- 5.2 Use Batch Operations for Multiple Writes
+- 5.3 Expand Relations Efficiently
+- 5.4 Select Only Required Fields
+- 5.5 Use getFirstListItem for Single Record Lookups
+- 5.6 Prevent N+1 Query Problems
+- 5.7 Use Efficient Pagination Strategies
+
+### 6. [Realtime](references/realtime.md) - **MEDIUM**
+
+SSE subscriptions, event handling, connection management, and authentication with realtime.
+
+- 6.1 Authenticate Realtime Connections
+- 6.2 Handle Realtime Events Properly
+- 6.3 Handle Realtime Connection Issues
+- 6.4 Implement Realtime Subscriptions Correctly
+
+### 7. [File Handling](references/file-handling.md) - **MEDIUM**
+
+File uploads, URL generation, thumbnail creation, and validation patterns.
+
+- 7.1 Generate File URLs Correctly
+- 7.2 Upload Files Correctly
+- 7.3 Validate File Uploads
+
+### 8. [Production & Deployment](references/production-deployment.md) - **LOW-MEDIUM**
+
+Backup strategies, configuration management, reverse proxy setup, and SQLite optimization.
+
+- 8.1 Implement Proper Backup Strategies
+- 8.2 Configure Production Settings Properly
+- 8.3 Enable Rate Limiting for API Protection
+- 8.4 Configure Reverse Proxy Correctly
+- 8.5 Tune OS and Runtime for PocketBase Scale
+- 8.6 Optimize SQLite for Production
+
+### 9. [Server-Side Extending](references/server-side-extending.md) - **HIGH**
+
+Extending PocketBase with Go or embedded JavaScript (JSVM) - event hooks, custom routes, transactions, cron jobs, filesystem, migrations, and safe server-side filter binding.
+
+- 9.1 Compose Hooks, Transactions, Routing, and Enrich in One Request Flow
+- 9.2 Schedule Recurring Jobs with the Builtin Cron Scheduler
+- 9.3 Always Close the Filesystem Handle Returned by NewFilesystem
+- 9.4 Bind User Input in Server-Side Filters with {:placeholder} Params
+- 9.5 Use DBConnect Only When You Need a Custom SQLite Driver
+- 9.6 Version Your Schema with Go Migrations
+- 9.7 Set Up a Go-Extended PocketBase Application
+- 9.8 Always Call e.Next() and Use e.App Inside Hook Handlers
+- 9.9 Pick the Right Record Hook - Model vs Request vs Enrich
+- 9.10 Write JSVM Migrations as pb_migrations/*.js Files
+- 9.11 Set Up JSVM (pb_hooks) for Server-Side JavaScript
+- 9.12 Load Shared Code with CommonJS require() in pb_hooks
+- 9.13 Avoid Capturing Variables Outside JSVM Handler Scope
+- 9.14 Send Email via app.NewMailClient, Never the Default example.com Sender
+- 9.15 Register Custom Routes Safely with Built-in Middlewares
+- 9.16 Read Settings via app.Settings(), Encrypt at Rest with PB_ENCRYPTION
+- 9.17 Test Hooks and Routes with tests.NewTestApp and ApiScenario
+- 9.18 Use RunInTransaction with the Scoped txApp, Never the Outer App
+
+---
+
+## References
+
+- https://pocketbase.io/docs/
+- https://github.com/pocketbase/pocketbase
+- https://github.com/pocketbase/js-sdk
+- https://pocketbase.io/docs/api-records/
+- https://pocketbase.io/docs/api-rules-and-filters/
+- https://pocketbase.io/docs/go-overview/
+- https://pocketbase.io/docs/js-overview/
+- https://pocketbase.io/docs/go-migrations/
+- https://pocketbase.io/docs/go-jobs-scheduling/
+- https://pocketbase.io/docs/js-jobs-scheduling/
+- https://pocketbase.io/docs/going-to-production/
diff --git a/.claude/skills/pocketbase-best-practices/SKILL.md b/.claude/skills/pocketbase-best-practices/SKILL.md
new file mode 100644
index 0000000..ba0aabe
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/SKILL.md
@@ -0,0 +1,155 @@
+---
+name: pocketbase-best-practices
+description: PocketBase development best practices covering collection design, API rules, authentication, SDK usage, query optimization, realtime subscriptions, file handling, and deployment. Use when building PocketBase backends, designing schemas, implementing access control, setting up auth flows, or optimizing performance.
+license: MIT
+compatibility: Works with any agent. Requires PocketBase v0.36+.
+metadata:
+  author: community
+  version: "1.2.0"
+  repository: https://github.com/greendesertsnow/pocketbase-skills
+  documentation: https://pocketbase.io/docs/
+---
+
+# PocketBase Best Practices
+
+63 rules across 9 categories for PocketBase v0.36+, prioritized by impact.
+
+## Categories by Priority
+
+| Priority | Category | Impact | Rules |
+|----------|----------|--------|-------|
+| 1 | Collection Design | CRITICAL | coll-field-types, coll-auth-vs-base, coll-relations, coll-indexes, coll-view-collections, coll-geopoint |
+| 2 | API Rules & Security | CRITICAL | rules-basics, rules-filter-syntax, rules-request-context, rules-cross-collection, rules-locked-vs-open, rules-strftime |
+| 3 | Authentication | CRITICAL | auth-password, auth-oauth2, auth-otp, auth-token-management, auth-mfa, auth-impersonation |
+| 4 | SDK Usage | HIGH | sdk-initialization, sdk-auth-store, sdk-error-handling, sdk-auto-cancellation, sdk-filter-binding, sdk-field-modifiers, sdk-send-hooks |
+| 5 | Query Performance | HIGH | query-pagination, query-expand, query-field-selection, query-batch-operations, query-n-plus-one, query-first-item, query-back-relations |
+| 6 | Realtime | MEDIUM | realtime-subscribe, realtime-events, realtime-auth, realtime-reconnection |
+| 7 | File Handling | MEDIUM | file-upload, file-serving, file-validation |
+| 8 | Production & Deployment | MEDIUM | deploy-backup, deploy-configuration, deploy-reverse-proxy, deploy-sqlite-considerations, deploy-rate-limiting, deploy-scaling |
+| 9 | Server-Side Extending | HIGH | ext-go-setup, ext-js-setup, ext-hooks-chain, ext-hooks-record-vs-request, ext-routing-custom, ext-transactions, ext-filter-binding-server, ext-filesystem, ext-cron-jobs, ext-go-migrations, ext-js-migrations, ext-mailer, ext-settings, ext-testing, ext-compose-request-flow, ext-go-custom-sqlite, ext-jsvm-scope, ext-jsvm-modules |
+
+## Quick Reference
+
+### Collection Design (CRITICAL)
+- **coll-field-types**: Use appropriate field types (json for objects, select for enums)
+- **coll-auth-vs-base**: Extend auth collection for users, base for non-auth data
+- **coll-relations**: Use relation fields, not manual ID strings
+- **coll-indexes**: Create indexes on frequently filtered/sorted fields
+- **coll-view-collections**: Use views for complex aggregations
+- **coll-geopoint**: Store coordinates as json field with lat/lng
+
+### API Rules (CRITICAL)
+- **rules-basics**: Always set API rules; empty = public access
+- **rules-filter-syntax**: Use @request.auth, @collection, @now in rules
+- **rules-request-context**: Access request data via @request.body, @request.query; `@request.context` values: `default`/`oauth2`/`otp`/`password`/`realtime`/`protectedFile`
+- **rules-cross-collection**: Use @collection.name.field for cross-collection checks
+- **rules-locked-vs-open**: Start locked, open selectively
+- **rules-strftime**: Use `strftime('%Y-%m-%d', created)` for date arithmetic (v0.36+)
+
+### Authentication (CRITICAL)
+- **auth-password**: Use authWithPassword for email/password login
+- **auth-oauth2**: Configure OAuth2 providers via Admin UI
+- **auth-otp**: Two-step `requestOTP` → `authWithOTP`; rate-limit requestOTP and never leak email existence
+- **auth-token-management**: Store tokens securely, refresh before expiry
+- **auth-mfa**: Enable MFA for sensitive applications
+- **auth-impersonation**: Use impersonation for admin actions on behalf of users
+
+### SDK Usage (HIGH)
+- **sdk-initialization**: Initialize client once, reuse instance
+- **sdk-auth-store**: Use AsyncAuthStore for React Native/SSR
+- **sdk-error-handling**: Catch ClientResponseError, check status codes
+- **sdk-auto-cancellation**: Disable auto-cancel for concurrent requests
+- **sdk-filter-binding**: Use filter binding to prevent injection
+
+### Query Performance (HIGH)
+- **query-expand**: Expand relations to avoid N+1 queries
+- **query-field-selection**: Select only needed fields
+- **query-pagination**: Use cursor pagination for large datasets
+- **query-batch-operations**: Batch creates/updates when possible
+
+### Realtime (MEDIUM)
+- **realtime-subscribe**: Subscribe to specific records or collections
+- **realtime-events**: Handle create, update, delete events separately
+- **realtime-auth**: Realtime respects API rules automatically
+- **realtime-reconnection**: Implement reconnection logic
+
+### File Handling (MEDIUM)
+- **file-upload**: Use FormData for uploads, set proper content types
+- **file-serving**: Use pb.files.getURL() for file URLs
+- **file-validation**: Validate file types and sizes server-side
+
+### Deployment (MEDIUM)
+- **deploy-backup**: Schedule regular backups of pb_data
+- **deploy-configuration**: Use environment variables for config
+- **deploy-reverse-proxy**: Put behind nginx/caddy in production
+- **deploy-sqlite-considerations**: Optimize SQLite for production workloads
+- **deploy-rate-limiting**: Enable the built-in rate limiter (fixed-window as of v0.36.7); front with Nginx/Caddy for defense in depth
+- **deploy-scaling**: Raise `ulimit -n` for realtime, set `GOMEMLIMIT`, enable settings encryption
+
+### Server-Side Extending (HIGH)
+- **ext-go-setup**: Use `app.OnServe()` to register routes; use `e.App` inside hooks, not the parent-scope app
+- **ext-js-setup**: Drop `*.pb.js` in `pb_hooks/`; add `/// <reference path="../pb_data/types.d.ts" />`
+- **ext-hooks-chain**: Always call `e.Next()`/`e.next()`; use `Bind` with an Id for later `Unbind`
+- **ext-hooks-record-vs-request**: Use `OnRecordEnrich` to shape responses (incl. realtime); `OnRecordRequest` for HTTP-only
+- **ext-routing-custom**: Namespace routes under `/api/{yourapp}/`; attach `RequireAuth()` middleware
+- **ext-transactions**: Use the scoped `txApp` inside `RunInTransaction`; never capture the outer `app`
+- **ext-filter-binding-server**: Bind user input with `{:name}` + `dbx.Params` in `FindFirstRecordByFilter` / `FindRecordsByFilter`
+- **ext-filesystem**: `defer fs.Close()` on every `NewFilesystem()` / `NewBackupsFilesystem()` handle
+- **ext-cron-jobs**: Register with `app.Cron().MustAdd(id, expr, fn)` / `cronAdd()`; stable ids, no `__pb*__` prefix
+- **ext-go-migrations**: Versioned `.go` files under `migrations/`; `Automigrate: osutils.IsProbablyGoRun()`
+- **ext-js-migrations**: `pb_migrations/<unix>_*.js` with `migrate(upFn, downFn)`; auto-discovered by filename
+- **ext-mailer**: Resolve sender from `app.Settings().Meta` at send-time; never ship `no-reply@example.com`; create the mail client per send
+- **ext-settings**: Read via `app.Settings()` at call time; set `PB_ENCRYPTION` (32 chars) to encrypt `_params` at rest
+- **ext-testing**: `tests.NewTestApp(testDataDir)` + `tests.ApiScenario`; `defer app.Cleanup()`, assert `ExpectedEvents`
+- **ext-compose-request-flow**: Composite walkthrough showing which app instance is active at each layer (route → tx → hook → enrich)
+- **ext-go-custom-sqlite**: Only use `DBConnect` when you need FTS5/ICU; `DBConnect` is called twice (data.db + auxiliary.db)
+- **ext-jsvm-scope**: Variables outside handlers are undefined at runtime — load shared config via `require()` inside the handler
+- **ext-jsvm-modules**: Only CJS (`require()`) works in goja; bundle ESM first; avoid mutable module state
+
+## Example Prompts
+
+Try these with your AI agent to see the skill in action:
+
+**Building a new feature:**
+- "Design a PocketBase schema for an e-commerce app with products, orders, and reviews"
+- "Implement OAuth2 login with Google and GitHub for my app"
+- "Build a real-time notification system with PocketBase subscriptions"
+- "Create a file upload form with image validation and thumbnail previews"
+
+**Fixing issues:**
+- "My list query is slow on 100k records -- optimize it"
+- "I'm getting 403 errors on my batch operations"
+- "Fix the N+1 query problem in my posts list that loads author data in a loop"
+- "My realtime subscriptions stop working after a few minutes"
+
+**Security review:**
+- "Review my API rules -- users should only access their own data"
+- "Set up proper access control: admins manage all content, users edit only their own"
+- "Are my authentication cookies configured securely for SSR?"
+- "Audit my collection rules for IDOR vulnerabilities"
+
+**Going to production:**
+- "Configure Nginx with HTTPS, rate limiting, and security headers for PocketBase"
+- "Set up automated backups for my PocketBase database"
+- "Optimize SQLite settings for a production workload with ~500 concurrent users"
+- "Deploy PocketBase with Docker Compose and Caddy"
+
+**Extending PocketBase:**
+- "Add a custom Go route that sends a Slack notification after a record is created"
+- "Write a pb_hooks script that validates an email domain before user signup"
+- "Set up FTS5 full-text search with a custom SQLite driver in my Go app"
+- "Share a config object across multiple pb_hooks files without race conditions"
+
+## Detailed Rules
+
+Load the relevant category for complete rule documentation with code examples:
+
+- [Collection Design](references/collection-design.md) - Schema patterns, field types, relations, indexes
+- [API Rules & Security](references/api-rules-security.md) - Access control, filter expressions, security patterns
+- [Authentication](references/authentication.md) - Password auth, OAuth2, MFA, token management
+- [SDK Usage](references/sdk-usage.md) - Client initialization, auth stores, error handling, hooks
+- [Query Performance](references/query-performance.md) - Pagination, expansion, batch operations, N+1 prevention
+- [Realtime](references/realtime.md) - SSE subscriptions, event handling, reconnection
+- [File Handling](references/file-handling.md) - Uploads, serving, validation
+- [Production & Deployment](references/production-deployment.md) - Backup, configuration, reverse proxy, SQLite optimization
+- [Server-Side Extending](references/server-side-extending.md) - Go/JSVM setup, event hooks, custom routes, modules, custom SQLite
diff --git a/.claude/skills/pocketbase-best-practices/references/api-rules-security.md b/.claude/skills/pocketbase-best-practices/references/api-rules-security.md
new file mode 100644
index 0000000..94214a5
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/references/api-rules-security.md
@@ -0,0 +1,489 @@
+# API Rules & Security
+
+**Impact: CRITICAL**
+
+Access control rules, filter expressions, request context usage, and security patterns. Critical for protecting data and enforcing authorization.
+
+---
+
+## 1. Understand API Rule Types and Defaults
+
+**Impact: CRITICAL (Prevents unauthorized access, data leaks, and security vulnerabilities)**
+
+PocketBase uses five collection-level rules to control access. Understanding the difference between locked (null), open (""), and expression rules is critical for security.
+
+**Incorrect (leaving rules open unintentionally):**
+
+```javascript
+// Collection with overly permissive rules
+const collection = {
+  name: 'messages',
+  listRule: '',      // Anyone can list all messages!
+  viewRule: '',      // Anyone can view any message!
+  createRule: '',    // Anyone can create messages!
+  updateRule: '',    // Anyone can update any message!
+  deleteRule: ''     // Anyone can delete any message!
+};
+// Complete security bypass - all data exposed
+```
+
+**Correct (explicit, restrictive rules):**
+
+```javascript
+// Collection with proper access control
+const collection = {
+  name: 'messages',
+  // null = locked, only superusers can access
+  listRule: null,    // Default: locked to superusers
+
+  // '' (empty string) = open to everyone (use sparingly)
+  viewRule: '@request.auth.id != ""',  // Any authenticated user
+
+  // Expression = conditional access
+  createRule: '@request.auth.id != ""',  // Must be logged in
+  updateRule: 'author = @request.auth.id',  // Only author
+  deleteRule: 'author = @request.auth.id'   // Only author
+};
+```
+
+**Rule types explained:**
+
+| Rule Value | Meaning | Use Case |
+|------------|---------|----------|
+| `null` | Locked (superusers only) | Admin-only data, system tables |
+| `''` (empty string) | Open to everyone | Public content, no auth required |
+| `'expression'` | Conditional access | Most common - check auth, ownership |
+
+**Common patterns:**
+
+```javascript
+// Public read, authenticated write (enforce ownership on create)
+listRule: '',
+viewRule: '',
+createRule: '@request.auth.id != "" && @request.body.author = @request.auth.id',
+updateRule: 'author = @request.auth.id',
+deleteRule: 'author = @request.auth.id'
+
+// Private to owner only
+listRule: 'owner = @request.auth.id',
+viewRule: 'owner = @request.auth.id',
+createRule: '@request.auth.id != ""',
+updateRule: 'owner = @request.auth.id',
+deleteRule: 'owner = @request.auth.id'
+
+// Read-only public data
+listRule: '',
+viewRule: '',
+createRule: null,
+updateRule: null,
+deleteRule: null
+```
+
+**Error responses by rule type:**
+- List rule fail: 200 with empty items
+- View/Update/Delete fail: 404 (hides existence)
+- Create fail: 400
+- Locked rule violation: 403
+
+Reference: [PocketBase API Rules](https://pocketbase.io/docs/api-rules-and-filters/)
+
+## 2. Use @collection for Cross-Collection Lookups
+
+**Impact: HIGH (Enables complex authorization without denormalization)**
+
+The `@collection` reference allows rules to query other collections, enabling complex authorization patterns like role-based access, team membership, and resource permissions.
+
+**Incorrect (denormalizing data for access control):**
+
+```javascript
+// Duplicating team membership in every resource
+const documentsSchema = [
+  { name: 'title', type: 'text' },
+  { name: 'team', type: 'relation' },
+  // Duplicated member list for access control - gets out of sync!
+  { name: 'allowedUsers', type: 'relation', options: { maxSelect: 999 } }
+];
+
+// Rule checks duplicated data
+listRule: 'allowedUsers ?= @request.auth.id'
+// Problem: must update allowedUsers whenever team membership changes
+```
+
+**Correct (using @collection lookup):**
+
+```javascript
+// Clean schema - no duplication
+const documentsSchema = [
+  { name: 'title', type: 'text' },
+  { name: 'team', type: 'relation', options: { collectionId: 'teams' } }
+];
+
+// Check team membership via @collection lookup
+listRule: '@collection.team_members.user ?= @request.auth.id && @collection.team_members.team ?= team'
+
+// Alternative: check if user is in team's members array
+listRule: 'team.members ?= @request.auth.id'
+
+// Role-based access via separate roles collection
+listRule: '@collection.user_roles.user = @request.auth.id && @collection.user_roles.role = "admin"'
+```
+
+**Common patterns:**
+
+```javascript
+// Team-based access
+// teams: { name, members (relation to users) }
+// documents: { title, team (relation to teams) }
+viewRule: 'team.members ?= @request.auth.id'
+
+// Organization hierarchy
+// orgs: { name }
+// org_members: { org, user, role }
+// projects: { name, org }
+listRule: '@collection.org_members.org = org && @collection.org_members.user = @request.auth.id'
+
+// Permission-based access
+// permissions: { resource, user, level }
+updateRule: '@collection.permissions.resource = id && @collection.permissions.user = @request.auth.id && @collection.permissions.level = "write"'
+
+// Using aliases for complex queries
+listRule: '@collection.memberships:m.user = @request.auth.id && @collection.memberships:m.team = team'
+```
+
+**Performance considerations:**
+- Cross-collection lookups add query complexity
+- Ensure referenced fields are indexed
+- Consider caching for frequently accessed permissions
+- Test performance with realistic data volumes
+
+Reference: [PocketBase Collection Reference](https://pocketbase.io/docs/api-rules-and-filters/#collection-fields)
+
+## 3. Master Filter Expression Syntax
+
+**Impact: CRITICAL (Enables complex access control and efficient querying)**
+
+PocketBase filter expressions use a specific syntax for both API rules and client-side queries. Understanding operators and composition is essential.
+
+**Incorrect (invalid filter syntax):**
+
+```javascript
+// Wrong operator syntax
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'status == "published"'  // Wrong: == instead of =
+});
+
+// Missing quotes around strings
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'status = published'  // Wrong: unquoted string
+});
+
+// Wrong boolean logic
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'status = "published" AND featured = true'  // Wrong: AND instead of &&
+});
+```
+
+**Correct (proper filter syntax):**
+
+```javascript
+// Equality and comparison operators
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'status = "published"'           // Equals
+});
+filter: 'views != 0'                        // Not equals
+filter: 'views > 100'                       // Greater than
+filter: 'views >= 100'                      // Greater or equal
+filter: 'price < 50.00'                     // Less than
+filter: 'created <= "2024-01-01 00:00:00"'  // Less or equal
+
+// String operators
+filter: 'title ~ "hello"'   // Contains (case-insensitive)
+filter: 'title !~ "spam"'   // Does not contain
+
+// Logical operators
+filter: 'status = "published" && featured = true'   // AND
+filter: 'category = "news" || category = "blog"'    // OR
+filter: '(status = "draft" || status = "review") && author = "abc"'  // Grouping
+
+// Array/multi-value operators (for select, relation fields)
+filter: 'tags ?= "featured"'    // Any tag equals "featured"
+filter: 'tags ?~ "tech"'        // Any tag contains "tech"
+
+// Null checks
+filter: 'deletedAt = null'      // Is null
+filter: 'avatar != null'        // Is not null
+
+// Date comparisons
+filter: 'created > "2024-01-01 00:00:00"'
+filter: 'created >= @now'       // Current timestamp
+filter: 'expires < @today'      // Start of today (UTC)
+```
+
+**Available operators:**
+
+| Operator | Description |
+|----------|-------------|
+| `=` | Equal |
+| `!=` | Not equal |
+| `>` `>=` `<` `<=` | Comparison |
+| `~` | Contains (LIKE %value%) |
+| `!~` | Does not contain |
+| `?=` `?!=` `?>` `?~` | Any element matches |
+| `&&` | AND |
+| `\|\|` | OR |
+| `()` | Grouping |
+
+**Date macros:**
+- `@now` - Current UTC datetime
+- `@today` - Start of today UTC
+- `@month` - Start of current month UTC
+- `@year` - Start of current year UTC
+
+**Filter functions:**
+- `strftime(fmt, datetime)` - Format/extract datetime parts (v0.36+). E.g. `strftime('%Y-%m', created) = "2026-03"`. See `rules-strftime.md` for the full format specifier list.
+- `length(field)` - Element count of a multi-value field (file, relation, select). E.g. `length(tags) > 0`.
+- `each(field, expr)` - Iterate a multi-value field: `each(tags, ? ~ "urgent")`.
+- `issetIf(field, val)` - Conditional presence check for complex rules.
+
+Reference: [PocketBase Filters](https://pocketbase.io/docs/api-rules-and-filters/#filters-syntax)
+
+## 4. Default to Locked Rules, Open Explicitly
+
+**Impact: CRITICAL (Defense in depth, prevents accidental data exposure)**
+
+New collections should start with locked (null) rules and explicitly open only what's needed. This prevents accidental data exposure and follows the principle of least privilege.
+
+**Incorrect (starting with open rules):**
+
+```javascript
+// Dangerous: copying rules from examples without thinking
+const collection = {
+  name: 'user_settings',
+  listRule: '',      // Open - leaks all user settings!
+  viewRule: '',      // Open - anyone can view any setting
+  createRule: '',    // Open - no auth required
+  updateRule: '',    // Open - anyone can modify!
+  deleteRule: ''     // Open - anyone can delete!
+};
+
+// Also dangerous: using auth check when ownership needed
+const collection = {
+  name: 'private_notes',
+  listRule: '@request.auth.id != ""',  // Any logged-in user sees ALL notes
+  viewRule: '@request.auth.id != ""',
+  updateRule: '@request.auth.id != ""',  // Any user can edit ANY note!
+};
+```
+
+**Correct (locked by default, explicitly opened):**
+
+```javascript
+// Step 1: Start locked
+const collection = {
+  name: 'user_settings',
+  listRule: null,    // Locked - superusers only
+  viewRule: null,
+  createRule: null,
+  updateRule: null,
+  deleteRule: null
+};
+
+// Step 2: Open only what's needed with proper checks
+const collection = {
+  name: 'user_settings',
+  // Users can only see their own settings
+  listRule: 'user = @request.auth.id',
+  viewRule: 'user = @request.auth.id',
+  // Users can only create settings for themselves
+  createRule: '@request.auth.id != "" && @request.body.user = @request.auth.id',
+  // Users can only update their own settings
+  updateRule: 'user = @request.auth.id',
+  // Prevent deletion or restrict to owner
+  deleteRule: 'user = @request.auth.id'
+};
+
+// For truly public data, document why it's open
+const collection = {
+  name: 'public_announcements',
+  // Intentionally public - these are site-wide announcements
+  listRule: '',
+  viewRule: '',
+  // Only admins can manage (using custom "role" field on auth collection)
+  // IMPORTANT: Prevent role self-assignment in the users collection updateRule:
+  //   updateRule: 'id = @request.auth.id && @request.body.role:isset = false'
+  createRule: '@request.auth.role = "admin"',
+  updateRule: '@request.auth.role = "admin"',
+  deleteRule: '@request.auth.role = "admin"'
+};
+```
+
+**Rule development workflow:**
+
+1. **Start locked** - All rules `null`
+2. **Identify access needs** - Who needs what access?
+3. **Write minimal rules** - Open only required operations
+4. **Test thoroughly** - Verify both allowed and denied cases
+5. **Document decisions** - Comment why rules are set as they are
+
+**Security checklist:**
+- [ ] No empty string rules without justification
+- [ ] Ownership checks on personal data
+- [ ] Auth checks on write operations
+- [ ] Admin-only rules for sensitive operations
+- [ ] Tested with different user contexts
+
+Reference: [PocketBase API Rules](https://pocketbase.io/docs/api-rules-and-filters/)
+
+## 5. Use @request Context in API Rules
+
+**Impact: CRITICAL (Enables dynamic, user-aware access control)**
+
+The `@request` object provides access to the current request context including authenticated user, request body, query parameters, and headers. Use it to build dynamic access rules.
+
+**Incorrect (hardcoded or missing auth checks):**
+
+```javascript
+// No authentication check
+const collection = {
+  listRule: '',  // Anyone can see everything
+  createRule: ''  // Anyone can create
+};
+
+// Hardcoded user ID (never do this)
+const collection = {
+  listRule: 'owner = "specific_user_id"'  // Only one user can access
+};
+```
+
+**Correct (using @request context):**
+
+```javascript
+// Check if user is authenticated
+createRule: '@request.auth.id != ""'
+
+// Check ownership via auth record
+listRule: 'owner = @request.auth.id'
+viewRule: 'owner = @request.auth.id'
+updateRule: 'owner = @request.auth.id'
+deleteRule: 'owner = @request.auth.id'
+
+// Access auth record fields
+// IMPORTANT: If using custom role fields, ensure update rules prevent
+// users from modifying their own role: @request.body.role:isset = false
+listRule: '@request.auth.role = "admin"'
+listRule: '@request.auth.verified = true'
+
+// Validate request body on create/update
+createRule: '@request.auth.id != "" && @request.body.owner = @request.auth.id'
+
+// Prevent changing certain fields
+updateRule: 'owner = @request.auth.id && @request.body.owner:isset = false'
+
+// WARNING: Query parameters are user-controlled and should NOT be used
+// for authorization decisions. Use them only for optional filtering behavior
+// where the fallback is equally safe.
+// listRule: '@request.query.publicOnly = "true" || owner = @request.auth.id'
+// The above is UNSAFE - users can bypass ownership by adding ?publicOnly=true
+// Instead, use separate endpoints or server-side logic for public vs. private views.
+listRule: 'owner = @request.auth.id || public = true'  // Use a record field, not query param
+
+// Access nested auth relations
+listRule: 'team.members ?= @request.auth.id'
+```
+
+**Available @request fields:**
+
+| Field | Description |
+|-------|-------------|
+| `@request.auth.id` | Authenticated user's ID (empty string if not authenticated) |
+| `@request.auth.*` | Any field from auth record (role, verified, email, etc.) |
+| `@request.body.*` | Request body fields (create/update only) |
+| `@request.query.*` | URL query parameters |
+| `@request.headers.*` | Request headers |
+| `@request.method` | HTTP method (GET, POST, etc.) |
+| `@request.context` | Request context: `default`, `oauth2`, `otp`, `password`, `realtime`, `protectedFile` |
+
+**Body field modifiers:**
+
+```javascript
+// Check if field is being set
+updateRule: '@request.body.status:isset = false'  // Can't change status
+
+// Check if field changed from current value
+updateRule: '@request.body.owner:changed = false'  // Can't change owner
+
+// Get length of array/string
+createRule: '@request.body.tags:length <= 5'  // Max 5 tags
+```
+
+Reference: [PocketBase API Rules](https://pocketbase.io/docs/api-rules-and-filters/#available-fields)
+
+## 6. Use strftime() for Date Arithmetic in Filter Expressions
+
+**Impact: MEDIUM (strftime() (added in v0.36) replaces brittle string prefix comparisons on datetime fields)**
+
+PocketBase v0.36 added the `strftime()` function to the filter expression grammar. It maps directly to SQLite's [strftime](https://sqlite.org/lang_datefunc.html) and is the correct way to bucket, compare, or extract parts of a datetime field. Before v0.36 people worked around this with `~` (substring) matches against the ISO string; those workarounds are fragile (they break at midnight UTC, ignore timezones, and can't handle ranges).
+
+**Incorrect (substring match on the ISO datetime string):**
+
+```javascript
+// ❌ "matches anything whose ISO string contains 2026-04-08" - breaks as soon
+//    as your DB stores sub-second precision or you cross a month boundary
+const todayPrefix = new Date().toISOString().slice(0, 10);
+const results = await pb.collection("orders").getList(1, 50, {
+    filter: `created ~ "${todayPrefix}"`, // ❌
+});
+```
+
+**Correct (strftime with named format specifiers):**
+
+```javascript
+// "all orders created today (UTC)"
+const results = await pb.collection("orders").getList(1, 50, {
+    filter: `strftime('%Y-%m-%d', created) = strftime('%Y-%m-%d', @now)`,
+});
+
+// "all orders from March 2026"
+await pb.collection("orders").getList(1, 50, {
+    filter: `strftime('%Y-%m', created) = "2026-03"`,
+});
+
+// "orders created this hour"
+await pb.collection("orders").getList(1, 50, {
+    filter: `strftime('%Y-%m-%d %H', created) = strftime('%Y-%m-%d %H', @now)`,
+});
+```
+
+```javascript
+// Same function is available inside API rules:
+//   collection "orders" - List rule:
+//      @request.auth.id != "" &&
+//      user = @request.auth.id &&
+//      strftime('%Y-%m-%d', created) = strftime('%Y-%m-%d', @now)
+```
+
+**Common format specifiers:**
+
+| Specifier | Meaning |
+|---|---|
+| `%Y` | 4-digit year |
+| `%m` | month (01-12) |
+| `%d` | day of month (01-31) |
+| `%H` | hour (00-23) |
+| `%M` | minute (00-59) |
+| `%S` | second (00-59) |
+| `%W` | ISO week (00-53) |
+| `%j` | day of year (001-366) |
+| `%w` | day of week (0=Sunday) |
+
+**Other filter functions worth knowing:**
+
+| Function | Use |
+|---|---|
+| `strftime(fmt, datetime)` | Format/extract datetime parts (v0.36+) |
+| `length(field)` | Count elements in a multi-value field (file, relation, select) |
+| `each(field, expr)` | Iterate over multi-value fields: `each(tags, ? ~ "urgent")` |
+| `issetIf(field, val)` | Conditional presence check used in complex rules |
+
+Reference: [Filter Syntax - Functions](https://pocketbase.io/docs/api-rules-and-filters/#filters) · [v0.36.0 release](https://github.com/pocketbase/pocketbase/releases/tag/v0.36.0)
+
diff --git a/.claude/skills/pocketbase-best-practices/references/authentication.md b/.claude/skills/pocketbase-best-practices/references/authentication.md
new file mode 100644
index 0000000..8369a8c
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/references/authentication.md
@@ -0,0 +1,695 @@
+# Authentication
+
+**Impact: CRITICAL**
+
+Password authentication, OAuth2 integration, token management, MFA setup, and auth collection configuration.
+
+---
+
+## 1. Use Impersonation for Admin Operations
+
+**Impact: MEDIUM (Safe admin access to user data without password sharing)**
+
+Impersonation allows superusers to generate tokens for other users, enabling admin support tasks and API key functionality without sharing passwords.
+
+**Incorrect (sharing credentials or bypassing auth):**
+
+```javascript
+// Bad: sharing user passwords for support
+async function helpUser(userId, userPassword) {
+  await pb.collection('users').authWithPassword(userEmail, userPassword);
+  // Support team knows user's password!
+}
+
+// Bad: directly modifying records without proper context
+async function fixUserData(userId) {
+  // Bypasses user's perspective and rules
+  await pb.collection('posts').update(postId, { fixed: true });
+}
+```
+
+**Correct (using impersonation):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+// Admin client with superuser auth (use environment variables, never hardcode)
+const adminPb = new PocketBase(process.env.PB_URL);
+await adminPb.collection('_superusers').authWithPassword(
+  process.env.PB_SUPERUSER_EMAIL,
+  process.env.PB_SUPERUSER_PASSWORD
+);
+
+async function impersonateUser(userId) {
+  // Generate impersonation token (non-renewable)
+  const impersonatedClient = await adminPb
+    .collection('users')
+    .impersonate(userId, 3600);  // 1 hour duration
+
+  // impersonatedClient has user's auth context
+  console.log('Acting as:', impersonatedClient.authStore.record.email);
+
+  // Operations use user's permissions
+  const userPosts = await impersonatedClient.collection('posts').getList();
+
+  return impersonatedClient;
+}
+
+// Use case: Admin viewing user's data
+async function adminViewUserPosts(userId) {
+  const userClient = await impersonateUser(userId);
+
+  // See exactly what the user sees (respects API rules)
+  const posts = await userClient.collection('posts').getList();
+
+  return posts;
+}
+
+// Use case: API keys for server-to-server communication
+async function createApiKey(serviceUserId) {
+  // Create a service impersonation token (use short durations, rotate regularly)
+  const serviceClient = await adminPb
+    .collection('service_accounts')
+    .impersonate(serviceUserId, 86400);  // 24 hours max, rotate via scheduled task
+
+  // Return token for service to use
+  return serviceClient.authStore.token;
+}
+
+// Using API key token in another service
+async function useApiKey(apiToken) {
+  const pb = new PocketBase('http://127.0.0.1:8090');
+
+  // Manually set the token
+  pb.authStore.save(apiToken, null);
+
+  // Now requests use the service account's permissions
+  const data = await pb.collection('data').getList();
+  return data;
+}
+```
+
+**Important considerations:**
+
+```javascript
+// Impersonation tokens are non-renewable
+const client = await adminPb.collection('users').impersonate(userId, 3600);
+
+// This will fail - can't refresh impersonation tokens
+try {
+  await client.collection('users').authRefresh();
+} catch (error) {
+  // Expected: impersonation tokens can't be refreshed
+}
+
+// For continuous access, generate new token when needed
+async function getImpersonatedClient(userId) {
+  // Check if existing token is still valid
+  if (cachedClient?.authStore.isValid) {
+    return cachedClient;
+  }
+
+  // Generate fresh token
+  return await adminPb.collection('users').impersonate(userId, 3600);
+}
+```
+
+**Security best practices:**
+- Use short durations for support tasks
+- Log all impersonation events
+- Restrict impersonation to specific admin roles
+- Never expose impersonation capability in client code
+- Use dedicated service accounts for API keys
+
+Reference: [PocketBase Impersonation](https://pocketbase.io/docs/authentication/#impersonate-authentication)
+
+## 2. Implement Multi-Factor Authentication
+
+**Impact: HIGH (Additional security layer for sensitive applications)**
+
+MFA requires users to authenticate with two different methods. PocketBase supports OTP (One-Time Password) via email as the second factor.
+
+**Incorrect (single-factor only for sensitive apps):**
+
+```javascript
+// Insufficient for sensitive applications
+async function login(email, password) {
+  const authData = await pb.collection('users').authWithPassword(email, password);
+  // User immediately has full access - no second factor
+  return authData;
+}
+```
+
+**Correct (MFA flow with OTP):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+async function loginWithMFA(email, password) {
+  try {
+    // First factor: password
+    const authData = await pb.collection('users').authWithPassword(email, password);
+
+    // If MFA not required, auth succeeds immediately
+    return { success: true, authData };
+
+  } catch (error) {
+    // MFA required - returns 401 with mfaId
+    if (error.status === 401 && error.response?.mfaId) {
+      return {
+        success: false,
+        mfaRequired: true,
+        mfaId: error.response.mfaId
+      };
+    }
+    throw error;
+  }
+}
+
+async function requestOTP(email) {
+  // Request OTP to be sent via email
+  const result = await pb.collection('users').requestOTP(email);
+
+  // Returns otpId - needed to verify the OTP
+  // Note: Returns otpId even if email doesn't exist (prevents enumeration)
+  return result.otpId;
+}
+
+async function completeMFAWithOTP(mfaId, otpId, otpCode) {
+  try {
+    // Second factor: OTP verification
+    const authData = await pb.collection('users').authWithOTP(
+      otpId,
+      otpCode,
+      { mfaId }  // Include mfaId from first factor
+    );
+
+    return { success: true, authData };
+  } catch (error) {
+    if (error.status === 400) {
+      throw new Error('Invalid or expired code');
+    }
+    throw error;
+  }
+}
+
+// Complete flow example
+async function fullMFAFlow(email, password, otpCode = null) {
+  // Step 1: Password authentication
+  const step1 = await loginWithMFA(email, password);
+
+  if (step1.success) {
+    return step1.authData;  // MFA not required
+  }
+
+  if (step1.mfaRequired) {
+    // Step 2: Request OTP
+    const otpId = await requestOTP(email);
+
+    // Step 3: UI prompts user for OTP code...
+    // (In real app, wait for user input)
+
+    if (otpCode) {
+      // Step 4: Complete MFA
+      const step2 = await completeMFAWithOTP(step1.mfaId, otpId, otpCode);
+      return step2.authData;
+    }
+
+    return { pendingMFA: true, mfaId: step1.mfaId, otpId };
+  }
+}
+```
+
+**Configure MFA (Admin UI or API):**
+
+```javascript
+// Enable MFA on auth collection (superuser only)
+await pb.collections.update('users', {
+  mfa: {
+    enabled: true,
+    duration: 1800,  // MFA session duration (30 min)
+    rule: ''  // When to require MFA (empty = always for all users)
+    // rule: '@request.auth.role = "admin"' // Only for admins
+  },
+  otp: {
+    enabled: true,
+    duration: 300,  // OTP validity (5 min)
+    length: 6,      // OTP code length
+    emailTemplate: {
+      subject: 'Your verification code',
+      body: 'Your code is: {OTP}'
+    }
+  }
+});
+```
+
+**MFA best practices:**
+- Always enable for admin accounts
+- Consider making MFA optional for regular users
+- Use short OTP durations (5-10 minutes)
+- Implement rate limiting on OTP requests
+- Log MFA events for security auditing
+
+Reference: [PocketBase MFA](https://pocketbase.io/docs/authentication/#mfa)
+
+## 3. Integrate OAuth2 Providers Correctly
+
+**Impact: CRITICAL (Secure third-party authentication with proper flow handling)**
+
+OAuth2 integration should use the all-in-one method for simplicity and security. Manual code exchange should only be used when necessary (e.g., mobile apps with deep links).
+
+**Incorrect (manual implementation without SDK):**
+
+```javascript
+// Don't manually handle OAuth flow
+async function loginWithGoogle() {
+  // Redirect user to Google manually
+  window.location.href = 'https://accounts.google.com/oauth/authorize?...';
+}
+
+// Manual callback handling
+async function handleCallback(code) {
+  // Exchange code manually - error prone!
+  const response = await fetch('/api/auth/callback', {
+    method: 'POST',
+    body: JSON.stringify({ code })
+  });
+}
+```
+
+**Correct (using SDK's all-in-one method):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// All-in-one OAuth2 (recommended for web apps)
+async function loginWithOAuth2(providerName) {
+  try {
+    const authData = await pb.collection('users').authWithOAuth2({
+      provider: providerName,  // 'google', 'github', 'microsoft', etc.
+      // Optional: create new user data if not exists
+      createData: {
+        emailVisibility: true,
+        name: ''  // Will be populated from OAuth provider
+      }
+    });
+
+    console.log('Logged in via', providerName);
+    console.log('User:', authData.record.email);
+    console.log('Is new user:', authData.meta?.isNew);
+
+    return authData;
+  } catch (error) {
+    if (error.isAbort) {
+      console.log('OAuth popup was closed');
+      return null;
+    }
+    throw error;
+  }
+}
+
+// Usage
+document.getElementById('google-btn').onclick = () => loginWithOAuth2('google');
+document.getElementById('github-btn').onclick = () => loginWithOAuth2('github');
+```
+
+**Manual code exchange (for React Native / deep links):**
+
+```javascript
+// Only use when all-in-one isn't possible
+async function loginWithOAuth2Manual() {
+  // Get auth methods - PocketBase provides state and codeVerifier
+  const authMethods = await pb.collection('users').listAuthMethods();
+  const provider = authMethods.oauth2.providers.find(p => p.name === 'google');
+
+  // Store the provider's state and codeVerifier for callback verification
+  // PocketBase generates these for you - don't create your own
+  sessionStorage.setItem('oauth_state', provider.state);
+  sessionStorage.setItem('oauth_code_verifier', provider.codeVerifier);
+
+  // Build the OAuth URL using provider.authURL + redirect
+  const redirectUrl = window.location.origin + '/oauth-callback';
+  const authUrl = provider.authURL + encodeURIComponent(redirectUrl);
+
+  // Redirect to OAuth provider
+  window.location.href = authUrl;
+}
+
+// In your callback handler (e.g., /oauth-callback page):
+async function handleOAuth2Callback() {
+  const params = new URLSearchParams(window.location.search);
+
+  // CSRF protection: verify state matches
+  if (params.get('state') !== sessionStorage.getItem('oauth_state')) {
+    throw new Error('State mismatch - potential CSRF attack');
+  }
+
+  const code = params.get('code');
+  const codeVerifier = sessionStorage.getItem('oauth_code_verifier');
+  const redirectUrl = window.location.origin + '/oauth-callback';
+
+  // Exchange code for auth token
+  const authData = await pb.collection('users').authWithOAuth2Code(
+    'google',
+    code,
+    codeVerifier,
+    redirectUrl,
+    { emailVisibility: true }
+  );
+
+  // Clean up
+  sessionStorage.removeItem('oauth_state');
+  sessionStorage.removeItem('oauth_code_verifier');
+
+  return authData;
+}
+```
+
+**Configure OAuth2 provider (Admin UI or API):**
+
+```javascript
+// Via API (superuser only) - usually done in Admin UI
+// IMPORTANT: Never hardcode client secrets. Use environment variables.
+await pb.collections.update('users', {
+  oauth2: {
+    enabled: true,
+    providers: [{
+      name: 'google',
+      clientId: process.env.GOOGLE_CLIENT_ID,
+      clientSecret: process.env.GOOGLE_CLIENT_SECRET
+    }],
+    mappedFields: {
+      avatarURL: 'avatar'  // Map OAuth field to collection field
+    }
+  }
+});
+```
+
+Reference: [PocketBase OAuth2](https://pocketbase.io/docs/authentication/#oauth2-authentication)
+
+## 4. Use authWithOTP for Email One-Time Codes, Rate-Limit requestOTP
+
+**Impact: HIGH (OTP endpoints are unauthenticated; unthrottled requestOTP enables email bombing and enumeration)**
+
+Auth collections can enable **OTP login** from the admin UI (Collection → Options → "Enable OTP"). The client flow is two steps: `requestOTP(email)` returns an `otpId`, then `authWithOTP(otpId, code)` exchanges the id + code for an auth token. Two things trip people up: (1) the OTP response is **the same whether the email exists or not** - do not break that by leaking a distinct error; (2) `requestOTP` sends an email, so **it must be rate-limited** or an attacker can use it to spam any address.
+
+**Incorrect (leaks existence, custom requestOTP with no rate limit):**
+
+```javascript
+// ❌ Client-side existence check - ignore the 404 and expose it to the user
+try {
+    await pb.collection("users").getFirstListItem(`email="${email}"`);
+} catch (e) {
+    alert("No account with that email"); // ❌ account enumeration
+    return;
+}
+
+// ❌ Ad-hoc route with no rate limit - attacker hammers this to spam mailboxes
+routerAdd("POST", "/api/myapp/otp", (e) => {
+    const body = e.requestInfo().body;
+    const user = $app.findAuthRecordByEmail("users", body.email);
+    // send custom email...
+    return e.json(200, { ok: true });
+});
+```
+
+**Correct (use the built-in flow, step 1 always returns an otpId):**
+
+```javascript
+// Step 1: request the code. Always returns { otpId } - even if the email
+// does not exist, PocketBase returns a synthetic id so enumeration is
+// impossible. Treat every response as success from the UI perspective.
+const { otpId } = await pb.collection("users").requestOTP("user@example.com");
+
+// Step 2: exchange otpId + the 8-digit code the user typed
+const authData = await pb.collection("users").authWithOTP(
+    otpId,
+    "12345678",
+);
+// pb.authStore is now populated
+```
+
+```go
+// Go side - rate-limit and log if you wrap your own endpoint
+app.OnRecordRequestOTPRequest("users").BindFunc(func(e *core.RecordRequestOTPRequestEvent) error {
+    // e.Collection, e.Record (may be nil - synthetic id path),
+    // e.Email (always present), e.Password (unused for OTP)
+    e.App.Logger().Info("otp requested",
+        "email", e.Email,
+        "ip",    e.RequestInfo.Headers["x_forwarded_for"])
+    return e.Next() // REQUIRED
+})
+```
+
+**Rules:**
+- `requestOTP` **always returns 200 with an otpId**, even for non-existent emails - preserve that by never adding a pre-check or a different error path.
+- Enable the built-in rate limiter (see `deploy-rate-limiting.md`) and raise the cost for the `*:requestOTP` label. Without this, an attacker can email-bomb arbitrary users.
+- The OTP code is 8 digits by default, with a 3-minute TTL. Do not extend the TTL - short windows are the whole point.
+- `authWithOTP` consumes the code; a successful call invalidates the `otpId`. Always show a generic "invalid or expired code" on failure.
+- If you want OTP **without a password**, set the collection's `Password` option to off and `OTP` on. If both are enabled, users can use either.
+- OTP emails are sent via the configured SMTP server. In dev, point SMTP at Mailpit or a console logger before testing - do **not** ship with the default "no-reply@example.com" sender.
+
+Reference: [Auth with OTP](https://pocketbase.io/docs/authentication/#auth-with-otp) · [JS SDK - authWithOTP](https://github.com/pocketbase/js-sdk#authwithotp)
+
+## 5. Implement Secure Password Authentication
+
+**Impact: CRITICAL (Secure user login with proper error handling and token management)**
+
+Password authentication should include proper error handling, avoid exposing whether emails exist, and correctly manage the auth store.
+
+**Incorrect (exposing information and poor error handling):**
+
+```javascript
+// Dangerous: exposes whether email exists
+async function login(email, password) {
+  const user = await pb.collection('users').getFirstListItem(`email = "${email}"`);
+  if (!user) {
+    throw new Error('Email not found');  // Reveals email doesn't exist
+  }
+
+  // Manual password check - never do this!
+  if (user.password !== password) {
+    throw new Error('Wrong password');  // Reveals password is wrong
+  }
+
+  return user;
+}
+```
+
+**Correct (secure authentication):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+async function login(email, password) {
+  try {
+    // authWithPassword handles hashing and returns token
+    const authData = await pb.collection('users').authWithPassword(email, password);
+
+    // Token is automatically stored in pb.authStore
+    console.log('Logged in as:', authData.record.email);
+    console.log('Token valid:', pb.authStore.isValid);
+
+    return authData;
+  } catch (error) {
+    // Generic error message - don't reveal if email exists
+    if (error.status === 400) {
+      throw new Error('Invalid email or password');
+    }
+    throw error;
+  }
+}
+
+// Check if user is authenticated
+function isAuthenticated() {
+  return pb.authStore.isValid;
+}
+
+// Get current user
+function getCurrentUser() {
+  return pb.authStore.record;
+}
+
+// Logout
+function logout() {
+  pb.authStore.clear();
+}
+
+// Listen for auth changes
+pb.authStore.onChange((token, record) => {
+  console.log('Auth state changed:', record?.email || 'logged out');
+}, true);  // true = fire immediately with current state
+```
+
+**Auth collection configuration for password auth:**
+
+```javascript
+// When creating auth collection via API (superuser only)
+await pb.collections.create({
+  name: 'users',
+  type: 'auth',
+  fields: [
+    { name: 'name', type: 'text' },
+    { name: 'avatar', type: 'file', options: { maxSelect: 1 } }
+  ],
+  passwordAuth: {
+    enabled: true,
+    identityFields: ['email', 'username']  // Fields that can be used to login
+  },
+  // Require minimum password length
+  // (configured in Admin UI under collection options)
+});
+```
+
+**Security considerations:**
+- Never store passwords in plain text
+- Use generic error messages
+- Implement rate limiting on your server
+- Consider adding MFA for sensitive applications
+
+Reference: [PocketBase Auth](https://pocketbase.io/docs/authentication/)
+
+## 6. Manage Auth Tokens Properly
+
+**Impact: CRITICAL (Prevents unauthorized access, handles token expiration gracefully)**
+
+Auth tokens should be refreshed before expiration, validated on critical operations, and properly cleared on logout. The SDK's authStore handles most of this automatically.
+
+**Incorrect (ignoring token expiration):**
+
+```javascript
+// Bad: never checking token validity
+async function fetchUserData() {
+  // Token might be expired!
+  const records = await pb.collection('posts').getList();
+  return records;
+}
+
+// Bad: manually managing tokens
+let authToken = localStorage.getItem('token');
+fetch('/api/posts', {
+  headers: { 'Authorization': authToken }  // Token might be invalid
+});
+```
+
+**Correct (proper token management):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// Check token validity before operations
+async function fetchSecureData() {
+  // authStore.isValid is a client-side check only (JWT expiry parsing).
+  // Always verify server-side with authRefresh() for critical operations.
+  if (!pb.authStore.isValid) {
+    throw new Error('Please log in');
+  }
+
+  return pb.collection('posts').getList();
+}
+
+// Refresh token periodically or before expiration
+async function refreshAuthIfNeeded() {
+  if (!pb.authStore.isValid) {
+    return false;
+  }
+
+  try {
+    // Verifies current token and returns fresh one
+    await pb.collection('users').authRefresh();
+    console.log('Token refreshed');
+    return true;
+  } catch (error) {
+    // Token invalid - user needs to re-authenticate
+    pb.authStore.clear();
+    return false;
+  }
+}
+
+// Auto-refresh on app initialization
+async function initializeAuth() {
+  if (pb.authStore.token) {
+    try {
+      await pb.collection('users').authRefresh();
+    } catch {
+      pb.authStore.clear();
+    }
+  }
+}
+
+// Listen for auth changes and handle expiration
+pb.authStore.onChange((token, record) => {
+  if (!token) {
+    // User logged out or token cleared
+    redirectToLogin();
+  }
+});
+
+// Setup periodic refresh (e.g., every 10 minutes)
+setInterval(async () => {
+  if (pb.authStore.isValid) {
+    try {
+      await pb.collection('users').authRefresh();
+    } catch {
+      pb.authStore.clear();
+    }
+  }
+}, 10 * 60 * 1000);
+```
+
+**SSR / Server-side token handling:**
+
+```javascript
+// Server-side: create fresh client per request
+export async function handleRequest(request) {
+  const pb = new PocketBase('http://127.0.0.1:8090');
+
+  // Load auth from cookie
+  pb.authStore.loadFromCookie(request.headers.get('cookie') || '');
+
+  // Validate and refresh
+  if (pb.authStore.isValid) {
+    try {
+      await pb.collection('users').authRefresh();
+    } catch {
+      pb.authStore.clear();
+    }
+  }
+
+  // ... handle request ...
+
+  // Send updated cookie with secure options
+  const response = new Response();
+  response.headers.set('set-cookie', pb.authStore.exportToCookie({
+    httpOnly: true,   // Prevent XSS access to auth token
+    secure: true,     // HTTPS only
+    sameSite: 'Lax',  // CSRF protection
+  }));
+  return response;
+}
+```
+
+**Token configuration (Admin UI or migration):**
+
+```javascript
+// Configure token durations (superuser only)
+await pb.collections.update('users', {
+  authToken: {
+    duration: 1209600  // 14 days in seconds
+  },
+  verificationToken: {
+    duration: 604800   // 7 days
+  }
+});
+```
+
+Reference: [PocketBase Auth Store](https://pocketbase.io/docs/authentication/)
+
diff --git a/.claude/skills/pocketbase-best-practices/references/collection-design.md b/.claude/skills/pocketbase-best-practices/references/collection-design.md
new file mode 100644
index 0000000..fbf1c36
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/references/collection-design.md
@@ -0,0 +1,480 @@
+# Collection Design
+
+**Impact: CRITICAL**
+
+Schema design, field types, relations, indexes, and collection type selection. Foundation for application architecture and long-term maintainability.
+
+---
+
+## 1. Use Auth Collections for User Accounts
+
+**Impact: CRITICAL (Built-in authentication, password hashing, OAuth2 support)**
+
+Auth collections provide built-in authentication features including secure password hashing, email verification, OAuth2 support, and token management. Using base collections for users requires reimplementing these security-critical features.
+
+**Incorrect (using base collection for users):**
+
+```javascript
+// Base collection loses all auth features
+const usersCollection = {
+  name: 'users',
+  type: 'base',  // Wrong! No auth capabilities
+  schema: [
+    { name: 'email', type: 'email' },
+    { name: 'password', type: 'text' },  // Stored in plain text!
+    { name: 'name', type: 'text' }
+  ]
+};
+
+// Manual login implementation - insecure
+const user = await pb.collection('users').getFirstListItem(
+  `email = "${email}" && password = "${password}"`  // SQL injection risk!
+);
+```
+
+**Correct (using auth collection):**
+
+```javascript
+// Auth collection with built-in security
+const usersCollection = {
+  name: 'users',
+  type: 'auth',  // Enables authentication features
+  schema: [
+    { name: 'name', type: 'text' },
+    { name: 'avatar', type: 'file', options: { maxSelect: 1 } }
+  ],
+  options: {
+    allowEmailAuth: true,
+    allowOAuth2Auth: true,
+    requireEmail: true,
+    minPasswordLength: 8
+  }
+};
+
+// Secure authentication with password hashing
+const authData = await pb.collection('users').authWithPassword(
+  'user@example.com',
+  'securePassword123'
+);
+
+// Token automatically stored in authStore
+// NOTE: Never log tokens in production - shown here for illustration only
+console.log('Authenticated as:', pb.authStore.record.id);
+```
+
+**When to use each type:**
+- **Auth collection**: User accounts, admin accounts, any entity that needs to log in
+- **Base collection**: Regular data like posts, products, orders, comments
+- **View collection**: Read-only aggregations or complex queries
+
+Reference: [PocketBase Auth Collections](https://pocketbase.io/docs/collections/#auth-collection)
+
+## 2. Choose Appropriate Field Types for Your Data
+
+**Impact: CRITICAL (Prevents data corruption, improves query performance, reduces storage)**
+
+Selecting the wrong field type leads to data validation issues, wasted storage, and poor query performance. PocketBase provides specialized field types that enforce constraints at the database level.
+
+**Incorrect (using text for everything):**
+
+```javascript
+// Using plain text fields for structured data
+const collection = {
+  name: 'products',
+  schema: [
+    { name: 'price', type: 'text' },      // Should be number
+    { name: 'email', type: 'text' },       // Should be email
+    { name: 'website', type: 'text' },     // Should be url
+    { name: 'active', type: 'text' },      // Should be bool
+    { name: 'tags', type: 'text' },        // Should be select or json
+    { name: 'created', type: 'text' }      // Should be autodate
+  ]
+};
+// No validation, inconsistent data, manual parsing required
+```
+
+**Correct (using appropriate field types):**
+
+```javascript
+// Using specialized field types with proper validation
+const collection = {
+  name: 'products',
+  type: 'base',
+  schema: [
+    { name: 'price', type: 'number', options: { min: 0 } },
+    { name: 'email', type: 'email' },
+    { name: 'website', type: 'url' },
+    { name: 'active', type: 'bool' },
+    { name: 'tags', type: 'select', options: {
+      maxSelect: 5,
+      values: ['electronics', 'clothing', 'food', 'other']
+    }},
+    { name: 'metadata', type: 'json' }
+    // created/updated are automatic system fields
+  ]
+};
+// Built-in validation, proper indexing, type-safe queries
+```
+
+**Available field types:**
+- `text` - Plain text with optional min/max length, regex pattern
+- `number` - Integer or decimal with optional min/max
+- `bool` - True/false values
+- `email` - Email with format validation
+- `url` - URL with format validation
+- `date` - Date/datetime values
+- `autodate` - Auto-set on create/update
+- `select` - Single or multi-select from predefined values
+- `json` - Arbitrary JSON data
+- `file` - File attachments
+- `relation` - References to other collections
+- `editor` - Rich text HTML content
+
+Reference: [PocketBase Collections](https://pocketbase.io/docs/collections/)
+
+## 3. Use GeoPoint Fields for Location Data
+
+**Impact: MEDIUM (Built-in geographic queries, distance calculations)**
+
+PocketBase provides a dedicated GeoPoint field type for storing geographic coordinates with built-in distance query support via `geoDistance()`.
+
+**Incorrect (storing coordinates as separate fields):**
+
+```javascript
+// Separate lat/lon fields - no built-in distance queries
+const placesSchema = [
+  { name: 'name', type: 'text' },
+  { name: 'latitude', type: 'number' },
+  { name: 'longitude', type: 'number' }
+];
+
+// Manual distance calculation - complex and slow
+async function findNearby(lat, lon, maxKm) {
+  const places = await pb.collection('places').getFullList();
+
+  // Calculate distance for every record client-side
+  return places.filter(place => {
+    const dist = haversine(lat, lon, place.latitude, place.longitude);
+    return dist <= maxKm;
+  });
+}
+```
+
+**Correct (using GeoPoint field):**
+
+```javascript
+// GeoPoint field stores coordinates as { lon, lat } object
+const placesSchema = [
+  { name: 'name', type: 'text' },
+  { name: 'location', type: 'geopoint' }
+];
+
+// Creating a record with GeoPoint
+await pb.collection('places').create({
+  name: 'Coffee Shop',
+  location: { lon: -73.9857, lat: 40.7484 }  // Note: lon first!
+});
+
+// Or using "lon,lat" string format
+await pb.collection('places').create({
+  name: 'Restaurant',
+  location: '-73.9857,40.7484'  // String format also works
+});
+
+// Query nearby locations using geoDistance()
+async function findNearby(lon, lat, maxKm) {
+  // geoDistance returns distance in kilometers
+  const places = await pb.collection('places').getList(1, 50, {
+    filter: pb.filter(
+      'geoDistance(location, {:point}) <= {:maxKm}',
+      {
+        point: { lon, lat },
+        maxKm: maxKm
+      }
+    ),
+    sort: pb.filter('geoDistance(location, {:point})', { point: { lon, lat } })
+  });
+
+  return places;
+}
+
+// Find places within 5km of Times Square
+const nearbyPlaces = await findNearby(-73.9857, 40.7580, 5);
+
+// Use in API rules for location-based access
+// listRule: geoDistance(location, @request.query.point) <= 10
+```
+
+**geoDistance() function:**
+
+```javascript
+// Syntax: geoDistance(geopointField, referencePoint)
+// Returns: distance in kilometers
+
+// In filter expressions
+filter: 'geoDistance(location, "-73.9857,40.7484") <= 5'
+
+// With parameter binding (recommended)
+filter: pb.filter('geoDistance(location, {:center}) <= {:radius}', {
+  center: { lon: -73.9857, lat: 40.7484 },
+  radius: 5
+})
+
+// Sorting by distance
+sort: 'geoDistance(location, "-73.9857,40.7484")'  // Closest first
+sort: '-geoDistance(location, "-73.9857,40.7484")' // Farthest first
+```
+
+**GeoPoint data format:**
+
+```javascript
+// Object format (recommended)
+{ lon: -73.9857, lat: 40.7484 }
+
+// String format
+"-73.9857,40.7484"  // "lon,lat" order
+
+// Important: longitude comes FIRST (GeoJSON convention)
+```
+
+**Use cases:**
+- Store-locator / find nearby
+- Delivery radius validation
+- Geofencing in API rules
+- Location-based search results
+
+**Limitations:**
+- Spherical Earth calculation (accurate to ~0.3%)
+- No polygon/area containment queries
+- Single point per field (use multiple fields for routes)
+
+Reference: [PocketBase GeoPoint](https://pocketbase.io/docs/collections/#geopoint)
+
+## 4. Create Indexes for Frequently Filtered Fields
+
+**Impact: CRITICAL (10-100x faster queries on large collections)**
+
+PocketBase uses SQLite which benefits significantly from proper indexing. Queries filtering or sorting on unindexed fields perform full table scans.
+
+**Incorrect (no indexes on filtered fields):**
+
+```javascript
+// Querying without indexes
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'author = "user123" && status = "published"',
+  sort: '-publishedAt'
+});
+// Full table scan on large collections - very slow
+
+// API rules also query without indexes
+// listRule: "author = @request.auth.id"
+// Every list request scans entire table
+```
+
+**Correct (indexed fields):**
+
+```javascript
+// Create collection with indexes via Admin UI or migration
+// In PocketBase Admin: Collection > Indexes > Add Index
+
+// Common index patterns:
+// 1. Single field index for equality filters
+//    CREATE INDEX idx_posts_author ON posts(author)
+
+// 2. Composite index for multiple filters
+//    CREATE INDEX idx_posts_author_status ON posts(author, status)
+
+// 3. Index with sort field
+//    CREATE INDEX idx_posts_status_published ON posts(status, publishedAt DESC)
+
+// Queries now use indexes
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'author = "user123" && status = "published"',
+  sort: '-publishedAt'
+});
+// Index scan - fast even with millions of records
+
+// For unique constraints (e.g., slug)
+// CREATE UNIQUE INDEX idx_posts_slug ON posts(slug)
+```
+
+**Index recommendations:**
+- Fields used in `filter` expressions
+- Fields used in `sort` parameters
+- Fields used in API rules (`listRule`, `viewRule`, etc.)
+- Relation fields (automatically indexed)
+- Unique fields like slugs or codes
+
+**Index considerations for SQLite:**
+- Composite indexes work left-to-right (order matters)
+- Too many indexes slow down writes
+- Use `EXPLAIN QUERY PLAN` in SQL to verify index usage
+- Partial indexes for filtered subsets
+
+```sql
+-- Check if index is used
+EXPLAIN QUERY PLAN
+SELECT * FROM posts WHERE author = 'user123' AND status = 'published';
+-- Should show "USING INDEX" not "SCAN"
+```
+
+Reference: [SQLite Query Planning](https://www.sqlite.org/queryplanner.html)
+
+## 5. Configure Relations with Proper Cascade Options
+
+**Impact: CRITICAL (Maintains referential integrity, prevents orphaned records, controls deletion behavior)**
+
+Relation fields connect collections together. Proper cascade configuration ensures data integrity when referenced records are deleted.
+
+**Incorrect (default cascade behavior not considered):**
+
+```javascript
+// Relation without considering deletion behavior
+const ordersSchema = [
+  { name: 'customer', type: 'relation', options: {
+    collectionId: 'customers_collection_id',
+    maxSelect: 1
+    // No cascade options specified - defaults may cause issues
+  }},
+  { name: 'products', type: 'relation', options: {
+    collectionId: 'products_collection_id'
+    // Multiple products, no cascade handling
+  }}
+];
+
+// Deleting a customer may fail or orphan orders
+await pb.collection('customers').delete(customerId);
+// Error: record is referenced by other records
+```
+
+**Correct (explicit cascade configuration):**
+
+```javascript
+// Carefully configured relations
+const ordersSchema = [
+  {
+    name: 'customer',
+    type: 'relation',
+    required: true,
+    options: {
+      collectionId: 'customers_collection_id',
+      maxSelect: 1,
+      cascadeDelete: false  // Prevent accidental mass deletion
+    }
+  },
+  {
+    name: 'products',
+    type: 'relation',
+    options: {
+      collectionId: 'products_collection_id',
+      maxSelect: 99,
+      cascadeDelete: false
+    }
+  }
+];
+
+// For dependent data like comments - cascade delete makes sense
+const commentsSchema = [
+  {
+    name: 'post',
+    type: 'relation',
+    options: {
+      collectionId: 'posts_collection_id',
+      maxSelect: 1,
+      cascadeDelete: true  // Delete comments when post is deleted
+    }
+  }
+];
+// NOTE: For audit logs, avoid cascadeDelete - logs should be retained
+// for compliance/forensics even after the referenced user is deleted.
+// Use cascadeDelete: false and handle user deletion separately.
+
+// Handle deletion manually when cascade is false
+try {
+  await pb.collection('customers').delete(customerId);
+} catch (e) {
+  if (e.status === 400) {
+    // Customer has orders - handle appropriately
+    // Option 1: Soft delete (set 'deleted' flag)
+    // Option 2: Reassign orders
+    // Option 3: Delete orders first
+  }
+}
+```
+
+**Cascade options:**
+- `cascadeDelete: true` - Delete referencing records when referenced record is deleted
+- `cascadeDelete: false` - Block deletion if references exist (default for required relations)
+
+**Best practices:**
+- Use `cascadeDelete: true` for dependent data (comments on posts, logs for users)
+- Use `cascadeDelete: false` for important data (orders, transactions)
+- Consider soft deletes for audit trails
+- Document your cascade strategy
+
+Reference: [PocketBase Relations](https://pocketbase.io/docs/collections/#relation)
+
+## 6. Use View Collections for Complex Read-Only Queries
+
+**Impact: HIGH (Simplifies complex queries, improves maintainability, enables aggregations)**
+
+View collections execute custom SQL queries and expose results through the standard API. They're ideal for aggregations, joins, and computed fields without duplicating logic across your application.
+
+**Incorrect (computing aggregations client-side):**
+
+```javascript
+// Fetching all records to compute stats client-side
+const orders = await pb.collection('orders').getFullList();
+const products = await pb.collection('products').getFullList();
+
+// Expensive client-side computation
+const stats = orders.reduce((acc, order) => {
+  const product = products.find(p => p.id === order.product);
+  acc.totalRevenue += order.quantity * product.price;
+  acc.orderCount++;
+  return acc;
+}, { totalRevenue: 0, orderCount: 0 });
+// Fetches all data, slow, memory-intensive
+```
+
+**Correct (using view collection):**
+
+```javascript
+// Create a view collection in PocketBase Admin UI or via API
+// View SQL:
+// SELECT
+//   p.id,
+//   p.name,
+//   COUNT(o.id) as order_count,
+//   SUM(o.quantity) as total_sold,
+//   SUM(o.quantity * p.price) as revenue
+// FROM products p
+// LEFT JOIN orders o ON o.product = p.id
+// GROUP BY p.id
+
+// Simple, efficient query
+const productStats = await pb.collection('product_stats').getList(1, 20, {
+  sort: '-revenue'
+});
+
+// Each record has computed fields
+productStats.items.forEach(stat => {
+  console.log(`${stat.name}: ${stat.order_count} orders, $${stat.revenue}`);
+});
+```
+
+**View collection use cases:**
+- Aggregations (COUNT, SUM, AVG)
+- Joining data from multiple collections
+- Computed/derived fields
+- Denormalized read models
+- Dashboard statistics
+
+**Limitations:**
+- Read-only (no create/update/delete)
+- Must return `id` column
+- No realtime subscriptions
+- API rules still apply for access control
+
+Reference: [PocketBase View Collections](https://pocketbase.io/docs/collections/#view-collection)
+
diff --git a/.claude/skills/pocketbase-best-practices/references/file-handling.md b/.claude/skills/pocketbase-best-practices/references/file-handling.md
new file mode 100644
index 0000000..ca1ad2e
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/references/file-handling.md
@@ -0,0 +1,539 @@
+# File Handling
+
+**Impact: MEDIUM**
+
+File uploads, URL generation, thumbnail creation, and validation patterns.
+
+---
+
+## 1. Generate File URLs Correctly
+
+**Impact: MEDIUM (Proper URLs with thumbnails and access control)**
+
+Use the SDK's `getURL` method to generate proper file URLs with thumbnail support and access tokens for protected files.
+
+**Incorrect (manually constructing URLs):**
+
+```javascript
+// Hardcoded URL construction - brittle
+const imageUrl = `http://localhost:8090/api/files/${record.collectionId}/${record.id}/${record.image}`;
+
+// Missing token for protected files
+const privateUrl = pb.files.getURL(record, record.document);
+// Returns URL but file access denied if protected!
+
+// Wrong thumbnail syntax
+const thumb = `${imageUrl}?thumb=100x100`;  // Wrong format
+```
+
+**Correct (using SDK methods):**
+
+```javascript
+// Basic file URL
+const imageUrl = pb.files.getURL(record, record.image);
+// Returns: http://host/api/files/COLLECTION/RECORD_ID/filename.jpg
+
+// With thumbnail (for images only)
+const thumbUrl = pb.files.getURL(record, record.image, {
+  thumb: '100x100'  // Width x Height
+});
+
+// Thumbnail options
+const thumbs = {
+  square: pb.files.getURL(record, record.image, { thumb: '100x100' }),
+  fit: pb.files.getURL(record, record.image, { thumb: '100x0' }),     // Fit width
+  fitHeight: pb.files.getURL(record, record.image, { thumb: '0x100' }), // Fit height
+  crop: pb.files.getURL(record, record.image, { thumb: '100x100t' }), // Top crop
+  cropBottom: pb.files.getURL(record, record.image, { thumb: '100x100b' }), // Bottom
+  force: pb.files.getURL(record, record.image, { thumb: '100x100f' }), // Force exact
+};
+
+// Protected files (require auth)
+async function getProtectedFileUrl(record, filename) {
+  // Get file access token (valid for limited time)
+  const token = await pb.files.getToken();
+
+  // Include token in URL
+  return pb.files.getURL(record, filename, { token });
+}
+
+// Example with protected document
+async function downloadDocument(record) {
+  const token = await pb.files.getToken();
+  const url = pb.files.getURL(record, record.document, { token });
+
+  // Token is appended: ...?token=xxx
+  window.open(url, '_blank');
+}
+```
+
+**React component example:**
+
+```jsx
+function UserAvatar({ user, size = 50 }) {
+  if (!user.avatar) {
+    return <DefaultAvatar size={size} />;
+  }
+
+  const avatarUrl = pb.files.getURL(user, user.avatar, {
+    thumb: `${size}x${size}`
+  });
+
+  return (
+    <img
+      src={avatarUrl}
+      alt={user.name}
+      width={size}
+      height={size}
+      loading="lazy"
+    />
+  );
+}
+
+function ImageGallery({ record }) {
+  // Record has multiple images
+  const images = record.images || [];
+
+  return (
+    <div className="gallery">
+      {images.map((filename, index) => (
+        <img
+          key={filename}
+          src={pb.files.getURL(record, filename, { thumb: '200x200' })}
+          onClick={() => openFullSize(record, filename)}
+          loading="lazy"
+        />
+      ))}
+    </div>
+  );
+}
+
+function openFullSize(record, filename) {
+  const fullUrl = pb.files.getURL(record, filename);
+  window.open(fullUrl, '_blank');
+}
+```
+
+**Handling file URLs in lists:**
+
+```javascript
+// Efficiently generate URLs for list of records
+const posts = await pb.collection('posts').getList(1, 20, {
+  expand: 'author'
+});
+
+const postsWithUrls = posts.items.map(post => ({
+  ...post,
+  thumbnailUrl: post.image
+    ? pb.files.getURL(post, post.image, { thumb: '300x200' })
+    : null,
+  authorAvatarUrl: post.expand?.author?.avatar
+    ? pb.files.getURL(post.expand.author, post.expand.author.avatar, { thumb: '40x40' })
+    : null
+}));
+```
+
+**Thumbnail format reference:**
+
+| Format | Description |
+|--------|-------------|
+| `WxH` | Fit within dimensions |
+| `Wx0` | Fit width, auto height |
+| `0xH` | Auto width, fit height |
+| `WxHt` | Crop from top |
+| `WxHb` | Crop from bottom |
+| `WxHf` | Force exact dimensions |
+
+**Performance and caching:**
+
+```javascript
+// File URLs are effectively immutable (randomized filenames on upload).
+// This makes them ideal for aggressive caching.
+
+// Configure Cache-Control via reverse proxy (Nginx/Caddy):
+// location /api/files/ { add_header Cache-Control "public, immutable, max-age=86400"; }
+
+// Thumbnails are generated on first request and cached by PocketBase.
+// Pre-generate expected thumb sizes after upload to avoid cold-start latency:
+async function uploadWithThumbs(record, file) {
+  const updated = await pb.collection('posts').update(record.id, { image: file });
+
+  // Pre-warm thumbnail cache by requesting expected sizes
+  const sizes = ['100x100', '300x200', '800x600'];
+  await Promise.all(sizes.map(size =>
+    fetch(pb.files.getURL(updated, updated.image, { thumb: size }))
+  ));
+
+  return updated;
+}
+```
+
+**S3 file serving optimization:**
+
+When using S3 storage, PocketBase proxies all file requests through the server. For better performance with public files, serve directly from your S3 CDN:
+
+```javascript
+// Default: All file requests proxy through PocketBase
+const url = pb.files.getURL(record, record.image);
+// -> https://myapp.com/api/files/COLLECTION/ID/filename.jpg (proxied)
+
+// For public files with S3 + CDN, construct CDN URL directly:
+const cdnBase = 'https://cdn.myapp.com';  // Your S3 CDN domain
+const cdnUrl = `${cdnBase}/${record.collectionId}/${record.id}/${record.image}`;
+// Bypasses PocketBase, served directly from CDN edge
+
+// NOTE: This only works for public files (no access token needed).
+// Protected files must go through PocketBase for token validation.
+```
+
+Reference: [PocketBase Files](https://pocketbase.io/docs/files-handling/)
+
+> **Note (JS SDK v0.26.7):** `pb.files.getURL()` now serializes query parameters the same way as the fetch methods — passing `null` or `undefined` as a query param value is silently skipped from the generated URL, so you no longer need to guard optional params before passing them to `getURL()`.
+
+## 2. Upload Files Correctly
+
+**Impact: MEDIUM (Reliable uploads with progress tracking and validation)**
+
+File uploads can use plain objects or FormData. Handle large files properly with progress tracking and appropriate error handling.
+
+**Incorrect (naive file upload):**
+
+```javascript
+// Missing error handling
+async function uploadFile(file) {
+  await pb.collection('documents').create({
+    title: file.name,
+    file: file
+  });
+  // No error handling, no progress feedback
+}
+
+// Uploading without validation
+async function uploadAvatar(file) {
+  await pb.collection('users').update(userId, {
+    avatar: file  // No size/type check - might fail server-side
+  });
+}
+
+// Base64 upload (inefficient)
+async function uploadImage(base64) {
+  await pb.collection('images').create({
+    image: base64  // Wrong! PocketBase expects File/Blob
+  });
+}
+```
+
+**Correct (proper file uploads):**
+
+```javascript
+// Basic upload with object (auto-converts to FormData)
+async function uploadDocument(file, metadata) {
+  try {
+    const record = await pb.collection('documents').create({
+      title: metadata.title,
+      description: metadata.description,
+      file: file  // File object from input
+    });
+    return record;
+  } catch (error) {
+    if (error.response?.data?.file) {
+      throw new Error(`File error: ${error.response.data.file.message}`);
+    }
+    throw error;
+  }
+}
+
+// Upload multiple files
+async function uploadGallery(files, albumId) {
+  const record = await pb.collection('albums').update(albumId, {
+    images: files  // Array of File objects
+  });
+  return record;
+}
+
+// FormData for more control
+async function uploadWithProgress(file, onProgress) {
+  const formData = new FormData();
+  formData.append('title', file.name);
+  formData.append('file', file);
+
+  // Using fetch directly for progress (SDK doesn't expose progress)
+  return new Promise((resolve, reject) => {
+    const xhr = new XMLHttpRequest();
+
+    xhr.upload.addEventListener('progress', (e) => {
+      if (e.lengthComputable) {
+        onProgress(Math.round((e.loaded / e.total) * 100));
+      }
+    });
+
+    xhr.addEventListener('load', () => {
+      if (xhr.status >= 200 && xhr.status < 300) {
+        resolve(JSON.parse(xhr.responseText));
+      } else {
+        reject(new Error(`Upload failed: ${xhr.status}`));
+      }
+    });
+
+    xhr.addEventListener('error', () => reject(new Error('Upload failed')));
+
+    xhr.open('POST', `${pb.baseURL}/api/collections/documents/records`);
+    xhr.setRequestHeader('Authorization', pb.authStore.token);
+    xhr.send(formData);
+  });
+}
+
+// Client-side validation before upload
+function validateFile(file, options = {}) {
+  const {
+    maxSize = 10 * 1024 * 1024,  // 10MB default
+    allowedTypes = ['image/jpeg', 'image/png', 'image/gif', 'application/pdf'],
+    maxNameLength = 100
+  } = options;
+
+  const errors = [];
+
+  if (file.size > maxSize) {
+    errors.push(`File too large. Max: ${maxSize / 1024 / 1024}MB`);
+  }
+
+  if (!allowedTypes.includes(file.type)) {
+    errors.push(`Invalid file type: ${file.type}`);
+  }
+
+  if (file.name.length > maxNameLength) {
+    errors.push(`Filename too long`);
+  }
+
+  return { valid: errors.length === 0, errors };
+}
+
+// Complete upload flow
+async function handleFileUpload(inputEvent) {
+  const file = inputEvent.target.files[0];
+  if (!file) return;
+
+  // Validate
+  const validation = validateFile(file, {
+    maxSize: 5 * 1024 * 1024,
+    allowedTypes: ['image/jpeg', 'image/png']
+  });
+
+  if (!validation.valid) {
+    showError(validation.errors.join(', '));
+    return;
+  }
+
+  // Upload with progress
+  try {
+    setUploading(true);
+    const record = await uploadWithProgress(file, setProgress);
+    showSuccess('Upload complete!');
+    return record;
+  } catch (error) {
+    showError(error.message);
+  } finally {
+    setUploading(false);
+  }
+}
+```
+
+**Deleting files:**
+
+```javascript
+// Remove specific file(s) from record
+await pb.collection('albums').update(albumId, {
+  'images-': ['filename1.jpg', 'filename2.jpg']  // Remove these files
+});
+
+// Clear all files
+await pb.collection('documents').update(docId, {
+  file: null  // Removes the file
+});
+```
+
+Reference: [PocketBase File Upload](https://pocketbase.io/docs/files-handling/)
+
+## 3. Validate File Uploads
+
+**Impact: MEDIUM (Prevents invalid uploads, improves security and UX)**
+
+Validate files on both client and server side. Client validation improves UX; server validation (via collection settings) enforces security.
+
+**Incorrect (no validation):**
+
+```javascript
+// Accepting any file without checks
+async function uploadFile(file) {
+  return pb.collection('uploads').create({ file });
+  // Could upload 1GB executable!
+}
+
+// Only checking extension (easily bypassed)
+function validateFile(file) {
+  const ext = file.name.split('.').pop();
+  return ['jpg', 'png'].includes(ext);
+  // User can rename virus.exe to virus.jpg
+}
+
+// Client-only validation (can be bypassed)
+async function uploadAvatar(file) {
+  if (file.size > 1024 * 1024) {
+    throw new Error('Too large');
+  }
+  // Attacker can bypass this with dev tools
+  return pb.collection('users').update(userId, { avatar: file });
+}
+```
+
+**Correct (comprehensive validation):**
+
+```javascript
+// 1. Configure server-side validation in collection settings
+// In Admin UI or via API:
+const collectionConfig = {
+  schema: [
+    {
+      name: 'avatar',
+      type: 'file',
+      options: {
+        maxSelect: 1,           // Single file only
+        maxSize: 5242880,       // 5MB in bytes
+        mimeTypes: [            // Allowed types
+          'image/jpeg',
+          'image/png',
+          'image/gif',
+          'image/webp'
+        ],
+        thumbs: ['100x100', '200x200']  // Auto-generate thumbnails
+      }
+    },
+    {
+      name: 'documents',
+      type: 'file',
+      options: {
+        maxSelect: 10,
+        maxSize: 10485760,  // 10MB
+        mimeTypes: [
+          'application/pdf',
+          'application/msword',
+          'application/vnd.openxmlformats-officedocument.wordprocessingml.document'
+        ]
+      }
+    }
+  ]
+};
+
+// 2. Client-side validation for better UX
+const FILE_CONSTRAINTS = {
+  avatar: {
+    maxSize: 5 * 1024 * 1024,
+    allowedTypes: ['image/jpeg', 'image/png', 'image/gif', 'image/webp'],
+    maxFiles: 1
+  },
+  documents: {
+    maxSize: 10 * 1024 * 1024,
+    allowedTypes: ['application/pdf'],
+    maxFiles: 10
+  }
+};
+
+function validateFiles(files, constraintKey) {
+  const constraints = FILE_CONSTRAINTS[constraintKey];
+  const errors = [];
+  const validFiles = [];
+
+  if (files.length > constraints.maxFiles) {
+    errors.push(`Maximum ${constraints.maxFiles} file(s) allowed`);
+  }
+
+  for (const file of files) {
+    const fileErrors = [];
+
+    // Check size
+    if (file.size > constraints.maxSize) {
+      const maxMB = constraints.maxSize / 1024 / 1024;
+      fileErrors.push(`${file.name}: exceeds ${maxMB}MB limit`);
+    }
+
+    // Check MIME type (more reliable than extension, but still spoofable)
+    // Client-side file.type is based on extension, not file content.
+    // Always enforce mimeTypes in PocketBase collection settings for server-side validation.
+    if (!constraints.allowedTypes.includes(file.type)) {
+      fileErrors.push(`${file.name}: invalid file type (${file.type || 'unknown'})`);
+    }
+
+    // Check for suspicious patterns
+    if (file.name.includes('..') || file.name.includes('/')) {
+      fileErrors.push(`${file.name}: invalid filename`);
+    }
+
+    if (fileErrors.length === 0) {
+      validFiles.push(file);
+    } else {
+      errors.push(...fileErrors);
+    }
+  }
+
+  return {
+    valid: errors.length === 0,
+    errors,
+    validFiles
+  };
+}
+
+// 3. Complete upload with validation
+async function handleAvatarUpload(inputElement) {
+  const files = Array.from(inputElement.files);
+
+  // Client validation
+  const validation = validateFiles(files, 'avatar');
+  if (!validation.valid) {
+    showErrors(validation.errors);
+    return null;
+  }
+
+  // Upload (server will also validate)
+  try {
+    const updated = await pb.collection('users').update(userId, {
+      avatar: validation.validFiles[0]
+    });
+    showSuccess('Avatar updated!');
+    return updated;
+  } catch (error) {
+    // Handle server validation errors
+    if (error.response?.data?.avatar) {
+      showError(error.response.data.avatar.message);
+    } else {
+      showError('Upload failed');
+    }
+    return null;
+  }
+}
+
+// 4. Image-specific validation
+async function validateImage(file, options = {}) {
+  const { minWidth = 0, minHeight = 0, maxWidth = Infinity, maxHeight = Infinity } = options;
+
+  return new Promise((resolve) => {
+    const img = new Image();
+    img.onload = () => {
+      const errors = [];
+
+      if (img.width < minWidth || img.height < minHeight) {
+        errors.push(`Image must be at least ${minWidth}x${minHeight}px`);
+      }
+      if (img.width > maxWidth || img.height > maxHeight) {
+        errors.push(`Image must be at most ${maxWidth}x${maxHeight}px`);
+      }
+
+      resolve({ valid: errors.length === 0, errors, width: img.width, height: img.height });
+    };
+    img.onerror = () => resolve({ valid: false, errors: ['Invalid image file'] });
+    img.src = URL.createObjectURL(file);
+  });
+}
+```
+
+Reference: [PocketBase Files Configuration](https://pocketbase.io/docs/files-handling/)
+
diff --git a/.claude/skills/pocketbase-best-practices/references/production-deployment.md b/.claude/skills/pocketbase-best-practices/references/production-deployment.md
new file mode 100644
index 0000000..8d2bc44
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/references/production-deployment.md
@@ -0,0 +1,974 @@
+# Production & Deployment
+
+**Impact: LOW-MEDIUM**
+
+Backup strategies, configuration management, reverse proxy setup, and SQLite optimization.
+
+---
+
+## 1. Implement Proper Backup Strategies
+
+**Impact: LOW-MEDIUM (Prevents data loss, enables disaster recovery)**
+
+Regular backups are essential for production deployments. PocketBase provides built-in backup functionality and supports external S3 storage.
+
+**Incorrect (no backup strategy):**
+
+```javascript
+// No backups at all - disaster waiting to happen
+// Just running: ./pocketbase serve
+
+// Manual file copy while server running - can corrupt data
+// cp pb_data/data.db backup/
+
+// Only backing up database, missing files
+// sqlite3 pb_data/data.db ".backup backup.db"
+```
+
+**Correct (comprehensive backup strategy):**
+
+```javascript
+// 1. Using PocketBase Admin API for backups
+const adminPb = new PocketBase('http://127.0.0.1:8090');
+await adminPb.collection('_superusers').authWithPassword(admin, password);
+
+// Create backup (includes database and files)
+async function createBackup(name = '') {
+  const backup = await adminPb.backups.create(name);
+  console.log('Backup created:', backup.key);
+  return backup;
+}
+
+// List available backups
+async function listBackups() {
+  const backups = await adminPb.backups.getFullList();
+  backups.forEach(b => {
+    console.log(`${b.key} - ${b.size} bytes - ${b.modified}`);
+  });
+  return backups;
+}
+
+// Download backup
+async function downloadBackup(key) {
+  const token = await adminPb.files.getToken();
+  const url = adminPb.backups.getDownloadURL(token, key);
+  // url can be used to download the backup file
+  return url;
+}
+
+// Restore from backup (CAUTION: overwrites current data!)
+async function restoreBackup(key) {
+  await adminPb.backups.restore(key);
+  console.log('Restore initiated - server will restart');
+}
+
+// Delete old backups
+async function cleanupOldBackups(keepCount = 7) {
+  const backups = await adminPb.backups.getFullList();
+
+  // Sort by date, keep newest
+  const sorted = backups.sort((a, b) =>
+    new Date(b.modified) - new Date(a.modified)
+  );
+
+  const toDelete = sorted.slice(keepCount);
+  for (const backup of toDelete) {
+    await adminPb.backups.delete(backup.key);
+    console.log('Deleted old backup:', backup.key);
+  }
+}
+```
+
+**Automated backup script (cron job):**
+
+```bash
+#!/bin/bash
+# backup.sh - Run daily via cron
+
+POCKETBASE_URL="http://127.0.0.1:8090"
+ADMIN_EMAIL="admin@example.com"
+ADMIN_PASSWORD="your-secure-password"
+BACKUP_DIR="/path/to/backups"
+KEEP_DAYS=7
+
+# Create timestamp
+TIMESTAMP=$(date +%Y%m%d_%H%M%S)
+
+# Create backup via API
+curl -X POST "${POCKETBASE_URL}/api/backups" \
+  -H "Authorization: $(curl -s -X POST "${POCKETBASE_URL}/api/collections/_superusers/auth-with-password" \
+    -d "identity=${ADMIN_EMAIL}&password=${ADMIN_PASSWORD}" | jq -r '.token')" \
+  -d "name=backup_${TIMESTAMP}"
+
+# Clean old local backups
+find "${BACKUP_DIR}" -name "*.zip" -mtime +${KEEP_DAYS} -delete
+
+echo "Backup completed: backup_${TIMESTAMP}"
+```
+
+**Configure S3 for backup storage:**
+
+```javascript
+// In Admin UI: Settings > Backups > S3
+// Or via API:
+await adminPb.settings.update({
+  backups: {
+    s3: {
+      enabled: true,
+      bucket: 'my-pocketbase-backups',
+      region: 'us-east-1',
+      endpoint: 's3.amazonaws.com',
+      accessKey: process.env.AWS_ACCESS_KEY,
+      secret: process.env.AWS_SECRET_KEY
+    }
+  }
+});
+```
+
+**Backup best practices:**
+
+| Aspect | Recommendation |
+|--------|---------------|
+| Frequency | Daily minimum, hourly for critical apps |
+| Retention | 7-30 days of daily backups |
+| Storage | Off-site (S3, separate server) |
+| Testing | Monthly restore tests |
+| Monitoring | Alert on backup failures |
+
+**Pre-backup checklist:**
+- [ ] S3 or external storage configured
+- [ ] Automated schedule set up
+- [ ] Retention policy defined
+- [ ] Restore procedure documented
+- [ ] Restore tested successfully
+
+Reference: [PocketBase Backups](https://pocketbase.io/docs/going-to-production/#backups)
+
+## 2. Configure Production Settings Properly
+
+**Impact: LOW-MEDIUM (Secure and optimized production environment)**
+
+Production deployments require proper configuration of URLs, secrets, SMTP, and security settings.
+
+**Incorrect (development defaults in production):**
+
+```bash
+# Running with defaults - insecure!
+./pocketbase serve
+
+# Hardcoded secrets
+./pocketbase serve --encryptionEnv="mySecretKey123"
+
+# Wrong origin for CORS
+# Leaving http://localhost:8090 as allowed origin
+```
+
+**Correct (production configuration):**
+
+```bash
+# Production startup with essential flags
+./pocketbase serve \
+  --http="0.0.0.0:8090" \
+  --origins="https://myapp.com,https://www.myapp.com" \
+  --encryptionEnv="PB_ENCRYPTION_KEY"
+
+# Using environment variables
+export PB_ENCRYPTION_KEY="your-32-char-encryption-key-here"
+export SMTP_HOST="smtp.sendgrid.net"
+export SMTP_PORT="587"
+export SMTP_USER="apikey"
+export SMTP_PASS="your-sendgrid-api-key"
+
+./pocketbase serve --http="0.0.0.0:8090"
+```
+
+**Configure SMTP for emails:**
+
+```javascript
+// Via Admin UI or API
+await adminPb.settings.update({
+  smtp: {
+    enabled: true,
+    host: process.env.SMTP_HOST,
+    port: parseInt(process.env.SMTP_PORT),
+    username: process.env.SMTP_USER,
+    password: process.env.SMTP_PASS,
+    tls: true
+  },
+  meta: {
+    appName: 'My App',
+    appURL: 'https://myapp.com',
+    senderName: 'My App',
+    senderAddress: 'noreply@myapp.com'
+  }
+});
+
+// Test email configuration
+await adminPb.settings.testEmail('users', 'test@example.com', 'verification');
+```
+
+**Configure S3 for file storage:**
+
+```javascript
+// Move file storage to S3 for scalability
+await adminPb.settings.update({
+  s3: {
+    enabled: true,
+    bucket: 'my-app-files',
+    region: 'us-east-1',
+    endpoint: 's3.amazonaws.com',
+    accessKey: process.env.AWS_ACCESS_KEY,
+    secret: process.env.AWS_SECRET_KEY,
+    forcePathStyle: false
+  }
+});
+
+// Test S3 connection
+await adminPb.settings.testS3('storage');
+```
+
+**Systemd service file:**
+
+```ini
+# /etc/systemd/system/pocketbase.service
+[Unit]
+Description=PocketBase
+After=network.target
+
+[Service]
+Type=simple
+User=pocketbase
+Group=pocketbase
+LimitNOFILE=4096
+Restart=always
+RestartSec=5s
+WorkingDirectory=/opt/pocketbase
+ExecStart=/opt/pocketbase/pocketbase serve --http="127.0.0.1:8090"
+
+# Environment variables
+EnvironmentFile=/opt/pocketbase/.env
+
+# Security hardening
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectSystem=strict
+ProtectHome=yes
+ReadWritePaths=/opt/pocketbase/pb_data
+
+[Install]
+WantedBy=multi-user.target
+```
+
+**Environment file (.env):**
+
+```bash
+# /opt/pocketbase/.env
+# SECURITY: Set restrictive permissions: chmod 600 /opt/pocketbase/.env
+# SECURITY: Add to .gitignore - NEVER commit this file to version control
+# For production, consider a secrets manager (Vault, AWS Secrets Manager, etc.)
+
+PB_ENCRYPTION_KEY=  # Generate with: openssl rand -hex 16
+
+# SMTP
+SMTP_HOST=smtp.sendgrid.net
+SMTP_PORT=587
+SMTP_USER=apikey
+SMTP_PASS=           # Set your SMTP password here
+
+# S3 (optional)
+AWS_ACCESS_KEY=      # Set your AWS access key
+AWS_SECRET_KEY=      # Set your AWS secret key
+
+# OAuth (optional)
+GOOGLE_CLIENT_ID=    # Set your Google client ID
+GOOGLE_CLIENT_SECRET= # Set your Google client secret
+```
+
+**Protect your environment file:**
+
+```bash
+# Set restrictive permissions (owner read/write only)
+chmod 600 /opt/pocketbase/.env
+chown pocketbase:pocketbase /opt/pocketbase/.env
+
+# Ensure .env is in .gitignore
+echo ".env" >> .gitignore
+```
+
+**Production checklist:**
+
+- [ ] HTTPS enabled (via reverse proxy)
+- [ ] Strong encryption key set
+- [ ] CORS origins configured
+- [ ] SMTP configured and tested
+- [ ] Superuser password changed
+- [ ] S3 configured (for scalability)
+- [ ] Backup schedule configured
+- [ ] Rate limiting enabled (via reverse proxy)
+- [ ] Logging configured
+
+Reference: [PocketBase Going to Production](https://pocketbase.io/docs/going-to-production/)
+
+## 3. Enable Rate Limiting for API Protection
+
+**Impact: MEDIUM (Prevents abuse, brute-force attacks, and DoS)**
+
+PocketBase v0.23+ includes built-in rate limiting. Enable it to protect against brute-force attacks, API abuse, and excessive resource consumption.
+
+> **v0.36.7 behavioral change:** the built-in limiter switched from a sliding-window to a **fixed-window** strategy. This is cheaper and more predictable, but it means a client can send `2 * maxRequests` in quick succession if they straddle the window boundary. Size your limits with that worst case in mind, and put Nginx/Caddy rate limiting in front of PocketBase for defense in depth (see examples below).
+
+**Incorrect (no rate limiting):**
+
+```bash
+# Running without rate limiting
+./pocketbase serve
+
+# Vulnerable to:
+# - Brute-force password attacks
+# - API abuse and scraping
+# - DoS from excessive requests
+# - Account enumeration attempts
+```
+
+**Correct (enable rate limiting):**
+
+```bash
+# Enable via command line flag
+./pocketbase serve --rateLimiter=true
+
+# Or configure specific limits (requests per second per IP)
+./pocketbase serve --rateLimiter=true --rateLimiterRPS=10
+```
+
+**Configure via Admin Dashboard:**
+
+Navigate to Settings > Rate Limiter:
+- **Enable rate limiter**: Toggle on
+- **Max requests/second**: Default 10, adjust based on needs
+- **Exempt endpoints**: Optionally whitelist certain paths
+
+**Configure programmatically (Go/JS hooks):**
+
+```javascript
+// In pb_hooks/rate_limit.pb.js
+routerAdd("GET", "/api/public/*", (e) => {
+  // Custom rate limit for specific endpoints
+}, $apis.rateLimit(100, "10s")); // 100 requests per 10 seconds
+
+// Stricter limit for auth endpoints
+routerAdd("POST", "/api/collections/users/auth-*", (e) => {
+  // Auth endpoints need stricter limits
+}, $apis.rateLimit(5, "1m")); // 5 attempts per minute
+```
+
+**Rate limiting with reverse proxy (additional layer):**
+
+```nginx
+# Nginx rate limiting (defense in depth)
+http {
+    # Define rate limit zones
+    limit_req_zone $binary_remote_addr zone=api:10m rate=10r/s;
+    limit_req_zone $binary_remote_addr zone=auth:10m rate=1r/s;
+
+    server {
+        # General API rate limit
+        location /api/ {
+            limit_req zone=api burst=20 nodelay;
+            proxy_pass http://pocketbase;
+        }
+
+        # Strict limit for auth endpoints
+        location /api/collections/users/auth {
+            limit_req zone=auth burst=5 nodelay;
+            proxy_pass http://pocketbase;
+        }
+
+        # Stricter limit for superuser auth
+        location /api/collections/_superusers/auth {
+            limit_req zone=auth burst=3 nodelay;
+            proxy_pass http://pocketbase;
+        }
+    }
+}
+```
+
+```caddyfile
+# Caddy with rate limiting plugin
+myapp.com {
+    rate_limit {
+        zone api {
+            key {remote_host}
+            events 100
+            window 10s
+        }
+        zone auth {
+            key {remote_host}
+            events 5
+            window 1m
+        }
+    }
+
+    @auth path /api/collections/*/auth*
+    handle @auth {
+        rate_limit { zone auth }
+        reverse_proxy 127.0.0.1:8090
+    }
+
+    handle {
+        rate_limit { zone api }
+        reverse_proxy 127.0.0.1:8090
+    }
+}
+```
+
+**Handle rate limit errors in client:**
+
+```javascript
+async function makeRequest(fn, retries = 0, maxRetries = 3) {
+  try {
+    return await fn();
+  } catch (error) {
+    if (error.status === 429 && retries < maxRetries) {
+      // Rate limited - wait and retry with limit
+      const retryAfter = error.response?.retryAfter || 60;
+      console.log(`Rate limited. Retry ${retries + 1}/${maxRetries} after ${retryAfter}s`);
+
+      // Show user-friendly message
+      showMessage('Too many requests. Please wait a moment.');
+
+      await sleep(retryAfter * 1000);
+      return makeRequest(fn, retries + 1, maxRetries);
+    }
+    throw error;
+  }
+}
+
+// Usage
+const result = await makeRequest(() =>
+  pb.collection('posts').getList(1, 20)
+);
+```
+
+**Recommended limits by endpoint type:**
+
+| Endpoint Type | Suggested Limit | Reason |
+|--------------|-----------------|--------|
+| Auth endpoints | 5-10/min | Prevent brute-force |
+| Password reset | 3/hour | Prevent enumeration |
+| Record creation | 30/min | Prevent spam |
+| General API | 60-100/min | Normal usage |
+| Public read | 100-200/min | Higher for reads |
+| File uploads | 10/min | Resource-intensive |
+
+**Monitoring rate limit hits:**
+
+```javascript
+// Check PocketBase logs for rate limit events
+// Or set up alerting in your monitoring system
+
+// Client-side tracking
+pb.afterSend = function(response, data) {
+  if (response.status === 429) {
+    trackEvent('rate_limit_hit', {
+      endpoint: response.url,
+      timestamp: new Date()
+    });
+  }
+  return data;
+};
+```
+
+Reference: [PocketBase Going to Production](https://pocketbase.io/docs/going-to-production/)
+
+## 4. Configure Reverse Proxy Correctly
+
+**Impact: LOW-MEDIUM (HTTPS, caching, rate limiting, and security headers)**
+
+Use a reverse proxy (Nginx, Caddy) for HTTPS termination, caching, rate limiting, and security headers.
+
+**Incorrect (exposing PocketBase directly):**
+
+```bash
+# Direct exposure - no HTTPS, no rate limiting
+./pocketbase serve --http="0.0.0.0:8090"
+
+# Port forwarding without proxy
+iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 8090
+# Still no HTTPS!
+```
+
+**Correct (Caddy - simplest option):**
+
+```caddyfile
+# /etc/caddy/Caddyfile
+myapp.com {
+    # Automatic HTTPS via Let's Encrypt
+    reverse_proxy 127.0.0.1:8090 {
+        # Required for SSE/Realtime
+        flush_interval -1
+    }
+
+    # Security headers
+    header {
+        X-Content-Type-Options "nosniff"
+        X-Frame-Options "DENY"
+        Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
+        Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'"
+        Referrer-Policy "strict-origin-when-cross-origin"
+        -Server
+    }
+
+    # Restrict admin UI to internal/VPN networks
+    # @admin path /_/*
+    # handle @admin {
+    #     @blocked not remote_ip 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
+    #     respond @blocked 403
+    #     reverse_proxy 127.0.0.1:8090
+    # }
+
+    # Rate limiting (requires caddy-ratelimit plugin)
+    # Install: xcaddy build --with github.com/mholt/caddy-ratelimit
+    # Without this plugin, use PocketBase's built-in rate limiter (--rateLimiter=true)
+    # rate_limit {
+    #     zone api {
+    #         key {remote_host}
+    #         events 100
+    #         window 1m
+    #     }
+    # }
+}
+```
+
+**Correct (Nginx configuration):**
+
+```nginx
+# /etc/nginx/sites-available/pocketbase
+
+# Rate limit zones must be defined in http context (e.g., /etc/nginx/nginx.conf)
+# limit_req_zone $binary_remote_addr zone=api:10m rate=10r/s;
+
+upstream pocketbase {
+    server 127.0.0.1:8090;
+    keepalive 64;
+}
+
+server {
+    listen 80;
+    server_name myapp.com;
+    return 301 https://$server_name$request_uri;
+}
+
+server {
+    listen 443 ssl http2;
+    server_name myapp.com;
+
+    # SSL configuration
+    ssl_certificate /etc/letsencrypt/live/myapp.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/myapp.com/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
+    ssl_prefer_server_ciphers off;
+
+    # Security headers
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-Frame-Options "DENY" always;
+    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+    # Note: X-XSS-Protection is deprecated and can introduce vulnerabilities.
+    # Use Content-Security-Policy instead.
+
+    location / {
+        proxy_pass http://pocketbase;
+        proxy_http_version 1.1;
+
+        # Headers
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        # SSE/Realtime support
+        proxy_set_header Connection '';
+        proxy_buffering off;
+        proxy_cache off;
+        chunked_transfer_encoding off;
+
+        # Timeouts
+        proxy_read_timeout 3600s;
+        proxy_send_timeout 3600s;
+    }
+
+    # Rate limit API endpoints
+    location /api/ {
+        limit_req zone=api burst=20 nodelay;
+
+        proxy_pass http://pocketbase;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Connection '';
+        proxy_buffering off;
+    }
+
+    # Static file caching
+    location /api/files/ {
+        proxy_pass http://pocketbase;
+        proxy_cache_valid 200 1d;
+        expires 1d;
+        add_header Cache-Control "public, immutable";
+    }
+
+    # Gzip compression
+    gzip on;
+    gzip_types text/plain application/json application/javascript text/css;
+    gzip_min_length 1000;
+}
+```
+
+**Docker Compose with Caddy:**
+
+```yaml
+# docker-compose.yml
+version: '3.8'
+
+services:
+  pocketbase:
+    # NOTE: This is a third-party community image, not officially maintained by PocketBase.
+    # For production, consider building your own image from the official PocketBase binary.
+    # See: https://pocketbase.io/docs/going-to-production/
+    image: ghcr.io/muchobien/pocketbase:latest
+    restart: unless-stopped
+    volumes:
+      - ./pb_data:/pb_data
+    environment:
+      - PB_ENCRYPTION_KEY=${PB_ENCRYPTION_KEY}
+
+  caddy:
+    image: caddy:2-alpine
+    restart: unless-stopped
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile
+      - caddy_data:/data
+      - caddy_config:/config
+    depends_on:
+      - pocketbase
+
+volumes:
+  caddy_data:
+  caddy_config:
+```
+
+**Key configuration points:**
+
+| Feature | Why It Matters |
+|---------|---------------|
+| HTTPS | Encrypts traffic, required for auth |
+| SSE support | `proxy_buffering off` for realtime |
+| Rate limiting | Prevents abuse |
+| Security headers | XSS/clickjacking protection |
+| Keepalive | Connection reuse, better performance |
+
+Reference: [PocketBase Going to Production](https://pocketbase.io/docs/going-to-production/)
+
+## 5. Tune OS and Runtime for PocketBase Scale
+
+**Impact: MEDIUM (Prevents file descriptor exhaustion, OOM kills, and exposes secure config for production deployments)**
+
+Three low-effort OS/runtime knobs have outsized impact on production stability: open-file limits for realtime connections, Go memory limits for constrained hosts, and settings encryption for shared or externally-backed infrastructure. None of these are set automatically.
+
+**Incorrect (default OS limits, no memory governor, plain-text settings):**
+
+```bash
+# Start without raising the file descriptor limit
+/root/pb/pocketbase serve yourdomain.com
+# → "Too many open files" once concurrent realtime connections exceed ~1024
+
+# Start in a container that has a 512 MB RAM cap without GOMEMLIMIT
+docker run -m 512m pocketbase serve ...
+# → OOM kill during large file upload because Go GC doesn't respect cgroup limits
+
+# Store SMTP password and S3 secret as plain JSON in pb_data/data.db
+pocketbase serve  # no --encryptionEnv
+# → Anyone who obtains the database backup can read all credentials
+```
+
+**Correct:**
+
+```bash
+# 1. Raise the open-file limit before starting (Linux/macOS)
+#    Check current limit first:
+ulimit -a | grep "open files"
+#    Temporarily raise to 4096 for the current session:
+ulimit -n 4096
+/root/pb/pocketbase serve yourdomain.com
+
+#    Or persist it via systemd (recommended for production):
+# /lib/systemd/system/pocketbase.service
+# [Service]
+# LimitNOFILE = 4096
+# ...
+
+# 2. Cap Go's soft memory target on memory-constrained hosts
+#    (instructs the GC to be more aggressive before the kernel OOM-kills the process)
+GOMEMLIMIT=512MiB /root/pb/pocketbase serve yourdomain.com
+
+# 3. Encrypt application settings at rest
+#    Generate a random 32-character key once:
+export PB_ENCRYPTION_KEY="z76NX9WWiB05UmQGxw367B6zM39T11fF"
+#    Start with the env-var name (not the value) as the flag argument:
+pocketbase serve --encryptionEnv=PB_ENCRYPTION_KEY
+```
+
+**Docker deployment pattern (v0.36.8):**
+
+```dockerfile
+FROM alpine:latest
+ARG PB_VERSION=0.36.8
+
+RUN apk add --no-cache unzip ca-certificates
+
+ADD https://github.com/pocketbase/pocketbase/releases/download/v${PB_VERSION}/pocketbase_${PB_VERSION}_linux_amd64.zip /tmp/pb.zip
+RUN unzip /tmp/pb.zip -d /pb/
+
+# Uncomment to bundle pre-written migrations or hooks:
+# COPY ./pb_migrations /pb/pb_migrations
+# COPY ./pb_hooks      /pb/pb_hooks
+
+EXPOSE 8080
+
+# Mount a volume at /pb/pb_data to persist data across container restarts
+CMD ["/pb/pocketbase", "serve", "--http=0.0.0.0:8080"]
+```
+
+```yaml
+# docker-compose.yml
+services:
+  pocketbase:
+    build: .
+    ports:
+      - "8080:8080"
+    volumes:
+      - pb_data:/pb/pb_data
+    environment:
+      GOMEMLIMIT: "512MiB"
+      PB_ENCRYPTION_KEY: "${PB_ENCRYPTION_KEY}"
+    command: ["/pb/pocketbase", "serve", "--http=0.0.0.0:8080", "--encryptionEnv=PB_ENCRYPTION_KEY"]
+volumes:
+  pb_data:
+```
+
+**Quick-reference checklist:**
+
+| Concern | Fix |
+|---------|-----|
+| `Too many open files` errors | `ulimit -n 4096` (or `LimitNOFILE=4096` in systemd) |
+| OOM kill on constrained host | `GOMEMLIMIT=512MiB` env var |
+| Credentials visible in DB backup | `--encryptionEnv=YOUR_VAR` with a 32-char random key |
+| Persistent data in Docker | Mount volume at `/pb/pb_data` |
+
+Reference: [Going to production](https://pocketbase.io/docs/going-to-production/)
+
+## 6. Optimize SQLite for Production
+
+**Impact: LOW-MEDIUM (Better performance and reliability for SQLite database)**
+
+PocketBase uses SQLite with optimized defaults. Understanding its characteristics helps optimize performance and avoid common pitfalls. PocketBase uses two separate databases: `data.db` (application data) and `auxiliary.db` (logs and ephemeral data), which reduces write contention.
+
+**Incorrect (ignoring SQLite characteristics):**
+
+```javascript
+// Heavy concurrent writes - SQLite bottleneck
+async function bulkInsert(items) {
+  // Parallel writes cause lock contention
+  await Promise.all(items.map(item =>
+    pb.collection('items').create(item)
+  ));
+}
+
+// Not using transactions for batch operations
+async function updateMany(items) {
+  for (const item of items) {
+    await pb.collection('items').update(item.id, item);
+  }
+  // Each write is a separate transaction - slow!
+}
+
+// Large text fields without consideration
+const schema = [{
+  name: 'content',
+  type: 'text'  // Could be megabytes - affects all queries
+}];
+```
+
+**Correct (SQLite-optimized patterns):**
+
+```javascript
+// Use batch operations for multiple writes
+async function bulkInsert(items) {
+  const batch = pb.createBatch();
+  items.forEach(item => {
+    batch.collection('items').create(item);
+  });
+  await batch.send();  // Single transaction, much faster
+}
+
+// Batch updates
+async function updateMany(items) {
+  const batch = pb.createBatch();
+  items.forEach(item => {
+    batch.collection('items').update(item.id, item);
+  });
+  await batch.send();
+}
+
+// For very large batches, chunk them
+async function bulkInsertLarge(items, chunkSize = 100) {
+  for (let i = 0; i < items.length; i += chunkSize) {
+    const chunk = items.slice(i, i + chunkSize);
+    const batch = pb.createBatch();
+    chunk.forEach(item => batch.collection('items').create(item));
+    await batch.send();
+  }
+}
+```
+
+**Schema considerations:**
+
+```javascript
+// Separate large content into dedicated collection
+const postsSchema = [
+  { name: 'title', type: 'text' },
+  { name: 'summary', type: 'text', options: { maxLength: 500 } },
+  { name: 'author', type: 'relation' }
+  // Content in separate collection
+];
+
+const postContentsSchema = [
+  { name: 'post', type: 'relation', required: true },
+  { name: 'content', type: 'editor' }  // Large HTML content
+];
+
+// Fetch content only when needed
+async function getPostList() {
+  return pb.collection('posts').getList(1, 20);  // Fast, no content
+}
+
+async function getPostWithContent(id) {
+  const post = await pb.collection('posts').getOne(id);
+  const content = await pb.collection('post_contents').getFirstListItem(
+    pb.filter('post = {:id}', { id })
+  );
+  return { ...post, content: content.content };
+}
+```
+
+**PocketBase default PRAGMA settings:**
+
+PocketBase already configures optimal SQLite settings. You do not need to set these manually unless using a custom SQLite driver:
+
+```sql
+PRAGMA busy_timeout       = 10000;  -- Wait 10s for locks instead of failing immediately
+PRAGMA journal_mode       = WAL;    -- Write-Ahead Logging: concurrent reads during writes
+PRAGMA journal_size_limit = 200000000;  -- Limit WAL file to ~200MB
+PRAGMA synchronous        = NORMAL; -- Balanced durability/performance (safe with WAL)
+PRAGMA foreign_keys       = ON;     -- Enforce relation integrity
+PRAGMA temp_store         = MEMORY; -- Temp tables in memory (faster sorts/joins)
+PRAGMA cache_size         = -32000; -- 32MB page cache
+```
+
+WAL mode is the most impactful setting -- it allows multiple concurrent readers while a single writer is active, which is critical for PocketBase's concurrent API request handling.
+
+**Index optimization:**
+
+```sql
+-- Create indexes for commonly filtered/sorted fields
+CREATE INDEX idx_posts_author ON posts(author);
+CREATE INDEX idx_posts_created ON posts(created DESC);
+CREATE INDEX idx_posts_status_created ON posts(status, created DESC);
+
+-- Verify indexes are being used
+EXPLAIN QUERY PLAN
+SELECT * FROM posts WHERE author = 'xxx' ORDER BY created DESC;
+-- Should show: "USING INDEX idx_posts_author"
+```
+
+**SQLite limitations and workarounds:**
+
+| Limitation | Workaround |
+|------------|------------|
+| Single writer | Use batch operations, queue writes |
+| No full-text by default | Use view collections with FTS5 |
+| File-based | SSD storage, avoid network mounts |
+| Memory for large queries | Pagination, limit result sizes |
+
+**Performance monitoring:**
+
+```javascript
+// Monitor slow queries via hooks (requires custom PocketBase build)
+// Or use SQLite's built-in profiling
+
+// From sqlite3 CLI:
+// .timer on
+// SELECT * FROM posts WHERE author = 'xxx';
+// Run Time: real 0.003 user 0.002 sys 0.001
+
+// Check database size
+// ls -lh pb_data/data.db
+
+// Vacuum to reclaim space after deletes
+// sqlite3 pb_data/data.db "VACUUM;"
+```
+
+**When to consider alternatives:**
+
+Consider migrating from single PocketBase if:
+- Write throughput consistently > 1000/sec needed
+- Database size > 100GB
+- Complex transactions across tables
+- Multi-region deployment required
+
+**Custom SQLite driver (advanced):**
+
+PocketBase supports custom SQLite drivers via `DBConnect`. The CGO driver (`mattn/go-sqlite3`) can offer better performance for some workloads and enables extensions like ICU and FTS5. This requires a custom PocketBase build:
+
+```go
+// main.go (custom PocketBase build with CGO driver)
+package main
+
+import (
+    "github.com/pocketbase/dbx"
+    "github.com/pocketbase/pocketbase"
+    _ "github.com/mattn/go-sqlite3"  // CGO SQLite driver
+)
+
+func main() {
+    app := pocketbase.NewWithConfig(pocketbase.Config{
+        // Called twice: once for data.db, once for auxiliary.db
+        DBConnect: func(dbPath string) (*dbx.DB, error) {
+            return dbx.Open("sqlite3", dbPath)
+        },
+    })
+
+    if err := app.Start(); err != nil {
+        panic(err)
+    }
+}
+// Build with: CGO_ENABLED=1 go build
+```
+
+Note: CGO requires C compiler toolchain and cannot be cross-compiled as easily as pure Go.
+
+**Scaling options:**
+1. **Read replicas**: Litestream for SQLite replication
+2. **Sharding**: Multiple PocketBase instances by tenant/feature
+3. **Caching**: Redis/Memcached for read-heavy loads
+4. **Alternative backend**: If requirements exceed SQLite, evaluate PostgreSQL-based frameworks
+
+Reference: [PocketBase Going to Production](https://pocketbase.io/docs/going-to-production/)
+
diff --git a/.claude/skills/pocketbase-best-practices/references/query-performance.md b/.claude/skills/pocketbase-best-practices/references/query-performance.md
new file mode 100644
index 0000000..4b6b631
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/references/query-performance.md
@@ -0,0 +1,989 @@
+# Query Performance
+
+**Impact: HIGH**
+
+Pagination strategies, relation expansion, field selection, batch operations, and N+1 query prevention.
+
+---
+
+## 1. Use Back-Relations for Inverse Lookups
+
+**Impact: HIGH (Fetch related records without separate queries)**
+
+Back-relations allow you to expand records that reference the current record, enabling inverse lookups in a single request. Use the `collectionName_via_fieldName` syntax.
+
+**Incorrect (manual inverse lookup):**
+
+```javascript
+// Fetching a user, then their posts separately
+async function getUserWithPosts(userId) {
+  const user = await pb.collection('users').getOne(userId);
+
+  // Extra request for posts
+  const posts = await pb.collection('posts').getList(1, 100, {
+    filter: pb.filter('author = {:userId}', { userId })
+  });
+
+  return { ...user, posts: posts.items };
+}
+// 2 API calls
+
+// Fetching a post, then its comments
+async function getPostWithComments(postId) {
+  const post = await pb.collection('posts').getOne(postId);
+  const comments = await pb.collection('comments').getFullList({
+    filter: pb.filter('post = {:postId}', { postId }),
+    expand: 'author'
+  });
+
+  return { ...post, comments };
+}
+// 2 API calls
+```
+
+**Correct (using back-relation expand):**
+
+```javascript
+// Expand posts that reference this user
+// posts collection has: author (relation to users)
+async function getUserWithPosts(userId) {
+  const user = await pb.collection('users').getOne(userId, {
+    expand: 'posts_via_author'  // collectionName_via_fieldName
+  });
+
+  console.log('User:', user.name);
+  console.log('Posts:', user.expand?.posts_via_author);
+  return user;
+}
+// 1 API call!
+
+// Expand comments that reference this post
+// comments collection has: post (relation to posts)
+async function getPostWithComments(postId) {
+  const post = await pb.collection('posts').getOne(postId, {
+    expand: 'comments_via_post,comments_via_post.author'
+  });
+
+  const comments = post.expand?.comments_via_post || [];
+  comments.forEach(comment => {
+    console.log(`${comment.expand?.author?.name}: ${comment.content}`);
+  });
+
+  return post;
+}
+// 1 API call with nested expansion!
+
+// Multiple back-relations
+async function getUserWithAllContent(userId) {
+  const user = await pb.collection('users').getOne(userId, {
+    expand: 'posts_via_author,comments_via_author,likes_via_user'
+  });
+
+  return {
+    user,
+    posts: user.expand?.posts_via_author || [],
+    comments: user.expand?.comments_via_author || [],
+    likes: user.expand?.likes_via_user || []
+  };
+}
+```
+
+**Back-relation syntax:**
+
+```
+{referencing_collection}_via_{relation_field}
+
+Examples:
+- posts_via_author      -> posts where author = current record
+- comments_via_post     -> comments where post = current record
+- order_items_via_order -> order_items where order = current record
+- team_members_via_team -> team_members where team = current record
+```
+
+**Nested back-relations:**
+
+```javascript
+// Get user with posts and each post's comments
+const user = await pb.collection('users').getOne(userId, {
+  expand: 'posts_via_author.comments_via_post'
+});
+
+// Access nested data
+const posts = user.expand?.posts_via_author || [];
+posts.forEach(post => {
+  console.log('Post:', post.title);
+  const comments = post.expand?.comments_via_post || [];
+  comments.forEach(c => console.log('  Comment:', c.content));
+});
+```
+
+**Important considerations:**
+
+```javascript
+// Back-relations always return arrays, even if the relation field
+// is marked as single (maxSelect: 1)
+
+// Limited to 1000 records per back-relation
+// For more, use separate paginated query
+const user = await pb.collection('users').getOne(userId, {
+  expand: 'posts_via_author'
+});
+// If user has 1500 posts, only first 1000 are included
+
+// For large datasets, use paginated approach
+async function getUserPostsPaginated(userId, page = 1) {
+  return pb.collection('posts').getList(page, 50, {
+    filter: pb.filter('author = {:userId}', { userId }),
+    sort: '-created'
+  });
+}
+```
+
+**Use in list queries:**
+
+```javascript
+// Get all users with their post counts
+// (Use view collection for actual counts)
+const users = await pb.collection('users').getList(1, 20, {
+  expand: 'posts_via_author'
+});
+
+users.items.forEach(user => {
+  const postCount = user.expand?.posts_via_author?.length || 0;
+  console.log(`${user.name}: ${postCount} posts`);
+});
+```
+
+**When to use back-relations vs separate queries:**
+
+| Scenario | Approach |
+|----------|----------|
+| < 1000 related records | Back-relation expand |
+| Need pagination | Separate query with filter |
+| Need sorting/filtering | Separate query |
+| Just need count | View collection |
+| Display in list | Back-relation (if small) |
+
+Reference: [PocketBase Back-Relations](https://pocketbase.io/docs/working-with-relations/#back-relation-expand)
+
+## 2. Use Batch Operations for Multiple Writes
+
+**Impact: HIGH (Atomic transactions, 10x fewer API calls, consistent state)**
+
+Batch operations combine multiple create/update/delete operations into a single atomic transaction. This ensures consistency and dramatically reduces API calls.
+
+**Incorrect (individual requests):**
+
+```javascript
+// Creating multiple records individually
+async function createOrderWithItems(order, items) {
+  // If any fails, partial data remains!
+  const createdOrder = await pb.collection('orders').create(order);
+
+  for (const item of items) {
+    await pb.collection('order_items').create({
+      ...item,
+      order: createdOrder.id
+    });
+  }
+  // 1 + N API calls, not atomic
+}
+
+// Updating multiple records
+async function updatePrices(products) {
+  for (const product of products) {
+    await pb.collection('products').update(product.id, {
+      price: product.newPrice
+    });
+  }
+  // N API calls, some might fail leaving inconsistent state
+}
+
+// Mixed operations
+async function transferFunds(fromId, toId, amount) {
+  // NOT ATOMIC - can leave invalid state!
+  await pb.collection('accounts').update(fromId, { 'balance-': amount });
+  // If this fails, money disappears!
+  await pb.collection('accounts').update(toId, { 'balance+': amount });
+}
+```
+
+**Correct (using batch operations):**
+
+```javascript
+// Atomic batch create
+async function createOrderWithItems(order, items) {
+  const batch = pb.createBatch();
+
+  // Pre-generate order ID so items can reference it in the same batch
+  // PocketBase accepts custom IDs (15-char alphanumeric)
+  const orderId = crypto.randomUUID().replaceAll('-', '').slice(0, 15);
+
+  // Queue order creation with known ID
+  batch.collection('orders').create({ ...order, id: orderId });
+
+  // Queue all items referencing the pre-generated order ID
+  items.forEach(item => {
+    batch.collection('order_items').create({
+      ...item,
+      order: orderId
+    });
+  });
+
+  // Execute atomically
+  const results = await batch.send();
+  // All succeed or all fail together
+
+  return {
+    order: results[0],
+    items: results.slice(1)
+  };
+}
+
+// Batch updates
+async function updatePrices(products) {
+  const batch = pb.createBatch();
+
+  products.forEach(product => {
+    batch.collection('products').update(product.id, {
+      price: product.newPrice
+    });
+  });
+
+  const results = await batch.send();
+  // 1 API call, atomic
+  return results;
+}
+
+// Batch upsert (create or update)
+async function syncProducts(products) {
+  const batch = pb.createBatch();
+
+  products.forEach(product => {
+    batch.collection('products').upsert({
+      id: product.sku,  // Use SKU as ID for upsert matching
+      name: product.name,
+      price: product.price,
+      stock: product.stock
+    });
+  });
+
+  return batch.send();
+}
+
+// Mixed operations in transaction
+// NOTE: Batch operations respect API rules per-operation, but ensure your
+// business logic validates inputs (e.g., sufficient balance) server-side
+// via hooks or API rules to prevent unauthorized transfers.
+async function transferFunds(fromId, toId, amount) {
+  const batch = pb.createBatch();
+
+  batch.collection('accounts').update(fromId, { 'balance-': amount });
+  batch.collection('accounts').update(toId, { 'balance+': amount });
+
+  // Create audit record
+  batch.collection('transfers').create({
+    from: fromId,
+    to: toId,
+    amount,
+    timestamp: new Date()
+  });
+
+  // All three operations atomic
+  const [fromAccount, toAccount, transfer] = await batch.send();
+  return { fromAccount, toAccount, transfer };
+}
+
+// Batch delete
+async function deletePostWithComments(postId) {
+  // First get comment IDs
+  const comments = await pb.collection('comments').getFullList({
+    filter: pb.filter('post = {:postId}', { postId }),
+    fields: 'id'
+  });
+
+  const batch = pb.createBatch();
+
+  // Queue all deletions
+  comments.forEach(comment => {
+    batch.collection('comments').delete(comment.id);
+  });
+  batch.collection('posts').delete(postId);
+
+  await batch.send();
+  // Post and all comments deleted atomically
+}
+```
+
+**Batch operation limits:**
+- **Must be enabled first** in Dashboard > Settings > Application (disabled by default; returns 403 otherwise)
+- Operations execute in a single database transaction
+- All succeed or all rollback
+- Respects API rules for each operation
+- Configurable limits: `maxRequests`, `timeout`, and `maxBodySize` (set in Dashboard)
+- **Avoid large file uploads** in batches over slow networks -- they block the entire transaction
+- Avoid custom hooks that call slow external APIs within batch operations
+
+**When to use batch:**
+
+| Scenario | Use Batch? |
+|----------|-----------|
+| Creating parent + children | Yes |
+| Bulk import/update | Yes |
+| Financial transactions | Yes |
+| Single record operations | No |
+| Independent operations | Optional |
+
+Reference: [PocketBase Batch API](https://pocketbase.io/docs/api-records/#batch-operations)
+
+## 3. Expand Relations Efficiently
+
+**Impact: HIGH (Eliminates N+1 queries, reduces API calls by 90%+)**
+
+Use the `expand` parameter to fetch related records in a single request. This eliminates N+1 query problems and dramatically reduces API calls.
+
+**Incorrect (N+1 queries):**
+
+```javascript
+// Fetching posts then authors separately - N+1 problem
+async function getPostsWithAuthors() {
+  const posts = await pb.collection('posts').getList(1, 20);
+
+  // N additional requests for N posts!
+  for (const post of posts.items) {
+    post.authorData = await pb.collection('users').getOne(post.author);
+  }
+
+  return posts;
+}
+// 21 API calls for 20 posts!
+
+// Even worse with multiple relations
+async function getPostsWithAll() {
+  const posts = await pb.collection('posts').getList(1, 20);
+
+  for (const post of posts.items) {
+    post.author = await pb.collection('users').getOne(post.author);
+    post.category = await pb.collection('categories').getOne(post.category);
+    post.tags = await Promise.all(
+      post.tags.map(id => pb.collection('tags').getOne(id))
+    );
+  }
+  // 60+ API calls!
+}
+```
+
+**Correct (using expand):**
+
+```javascript
+// Single request with expanded relations
+async function getPostsWithAuthors() {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    expand: 'author'
+  });
+
+  // Access expanded data
+  posts.items.forEach(post => {
+    console.log('Author:', post.expand?.author?.name);
+  });
+
+  return posts;
+}
+// 1 API call!
+
+// Multiple relations
+async function getPostsWithAll() {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    expand: 'author,category,tags'
+  });
+
+  posts.items.forEach(post => {
+    console.log('Author:', post.expand?.author?.name);
+    console.log('Category:', post.expand?.category?.name);
+    console.log('Tags:', post.expand?.tags?.map(t => t.name));
+  });
+}
+// Still just 1 API call!
+
+// Nested expansion (up to 6 levels)
+async function getPostsWithNestedData() {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    expand: 'author.profile,category.parent,comments_via_post.author'
+  });
+
+  posts.items.forEach(post => {
+    // Nested relations
+    console.log('Author profile:', post.expand?.author?.expand?.profile);
+    console.log('Parent category:', post.expand?.category?.expand?.parent);
+
+    // Back-relations (comments that reference this post)
+    console.log('Comments:', post.expand?.['comments_via_post']);
+  });
+}
+
+// Back-relation expansion
+// If comments collection has a 'post' relation field pointing to posts
+async function getPostWithComments(postId) {
+  const post = await pb.collection('posts').getOne(postId, {
+    expand: 'comments_via_post,comments_via_post.author'
+  });
+
+  // Access comments that reference this post
+  const comments = post.expand?.['comments_via_post'] || [];
+  comments.forEach(comment => {
+    console.log(`${comment.expand?.author?.name}: ${comment.text}`);
+  });
+
+  return post;
+}
+```
+
+**Expand syntax:**
+
+| Syntax | Description |
+|--------|-------------|
+| `expand: 'author'` | Single relation |
+| `expand: 'author,tags'` | Multiple relations |
+| `expand: 'author.profile'` | Nested relation (2 levels) |
+| `expand: 'comments_via_post'` | Back-relation (records pointing to this) |
+
+**Handling optional expand data:**
+
+```javascript
+// Always use optional chaining - expand may be undefined
+const authorName = post.expand?.author?.name || 'Unknown';
+
+// Type-safe access with TypeScript
+interface Post {
+  id: string;
+  title: string;
+  author: string;  // Relation ID
+  expand?: {
+    author?: User;
+  };
+}
+
+const posts = await pb.collection('posts').getList<Post>(1, 20, {
+  expand: 'author'
+});
+```
+
+**Limitations:**
+- Maximum 6 levels of nesting
+- Respects API rules on expanded collections
+- Large expansions may impact performance
+
+Reference: [PocketBase Expand](https://pocketbase.io/docs/api-records/#expand)
+
+## 4. Select Only Required Fields
+
+**Impact: MEDIUM (Reduces payload size, improves response time)**
+
+Use the `fields` parameter to request only the data you need. This reduces bandwidth and can improve query performance, especially with large text or file fields.
+
+**Incorrect (fetching everything):**
+
+```javascript
+// Fetching all fields when only a few are needed
+const posts = await pb.collection('posts').getList(1, 20);
+// Returns: id, title, content (10KB), thumbnail, author, tags, created, updated...
+
+// Only displaying titles in a list
+posts.items.forEach(post => {
+  renderListItem(post.title);  // Only using title!
+});
+// Wasted bandwidth on content, thumbnail URLs, etc.
+
+// Fetching user data with large profile fields
+const users = await pb.collection('users').getFullList();
+// Includes: avatar (file), bio (text), settings (json)...
+// When you only need names for a dropdown
+```
+
+**Correct (selecting specific fields):**
+
+```javascript
+// Select only needed fields
+const posts = await pb.collection('posts').getList(1, 20, {
+  fields: 'id,title,created'
+});
+// Returns only: { id, title, created }
+
+// For a dropdown/autocomplete
+const users = await pb.collection('users').getFullList({
+  fields: 'id,name,avatar'
+});
+
+// Include expanded relation fields
+const posts = await pb.collection('posts').getList(1, 20, {
+  expand: 'author',
+  fields: 'id,title,expand.author.name,expand.author.avatar'
+});
+// Returns: { id, title, expand: { author: { name, avatar } } }
+
+// Wildcard for all direct fields, specific for expand
+const posts = await pb.collection('posts').getList(1, 20, {
+  expand: 'author,category',
+  fields: '*,expand.author.name,expand.category.name'
+});
+// All post fields + only name from expanded relations
+```
+
+**Using excerpt modifier:**
+
+```javascript
+// Get truncated text content
+const posts = await pb.collection('posts').getList(1, 20, {
+  fields: 'id,title,content:excerpt(200,true)'
+});
+// content is truncated to 200 chars with "..." appended
+
+// Multiple excerpts
+const posts = await pb.collection('posts').getList(1, 20, {
+  fields: 'id,title:excerpt(50),content:excerpt(150,true)'
+});
+
+// Excerpt syntax: field:excerpt(maxLength, withEllipsis?)
+// - maxLength: maximum characters
+// - withEllipsis: append "..." if truncated (default: false)
+```
+
+**Common field selection patterns:**
+
+```javascript
+// List view - minimal data
+const listFields = 'id,title,thumbnail,author,created';
+
+// Card view - slightly more
+const cardFields = 'id,title,content:excerpt(200,true),thumbnail,author,created';
+
+// Detail view - most fields
+const detailFields = '*,expand.author.name,expand.author.avatar';
+
+// Autocomplete - just id and display text
+const autocompleteFields = 'id,name';
+
+// Table export - specific columns
+const exportFields = 'id,email,name,created,status';
+
+// Usage
+async function getPostsList() {
+  return pb.collection('posts').getList(1, 20, {
+    fields: listFields,
+    expand: 'author'
+  });
+}
+```
+
+**Performance impact:**
+
+| Field Type | Impact of Selecting |
+|------------|-------------------|
+| text/editor | High (can be large) |
+| file | Medium (URLs generated) |
+| json | Medium (can be large) |
+| relation | Low (just IDs) |
+| number/bool | Low |
+
+**Note:** Field selection happens after data is fetched from database, so it primarily saves bandwidth, not database queries. For database-level optimization, ensure proper indexes.
+
+Reference: [PocketBase Fields Parameter](https://pocketbase.io/docs/api-records/#fields)
+
+## 5. Use getFirstListItem for Single Record Lookups
+
+**Impact: MEDIUM (Cleaner code, automatic error handling for not found)**
+
+Use `getFirstListItem()` when you need to find a single record by a field value other than ID. It's cleaner than `getList()` with limit 1 and provides proper error handling.
+
+**Incorrect (manual single-record lookup):**
+
+```javascript
+// Using getList with limit 1 - verbose
+async function findUserByEmail(email) {
+  const result = await pb.collection('users').getList(1, 1, {
+    filter: pb.filter('email = {:email}', { email })
+  });
+
+  if (result.items.length === 0) {
+    throw new Error('User not found');
+  }
+
+  return result.items[0];
+}
+
+// Using getFullList then filtering - wasteful
+async function findUserByUsername(username) {
+  const users = await pb.collection('users').getFullList({
+    filter: pb.filter('username = {:username}', { username })
+  });
+  return users[0];  // Might be undefined!
+}
+
+// Fetching by ID when you have a different identifier
+async function findProductBySku(sku) {
+  // Wrong: getOne expects the record ID
+  const product = await pb.collection('products').getOne(sku);  // Fails!
+}
+```
+
+**Correct (using getFirstListItem):**
+
+```javascript
+// Clean single-record lookup by any field
+async function findUserByEmail(email) {
+  try {
+    const user = await pb.collection('users').getFirstListItem(
+      pb.filter('email = {:email}', { email })
+    );
+    return user;
+  } catch (error) {
+    if (error.status === 404) {
+      return null;  // Not found
+    }
+    throw error;
+  }
+}
+
+// Lookup by unique field
+async function findProductBySku(sku) {
+  return pb.collection('products').getFirstListItem(
+    pb.filter('sku = {:sku}', { sku })
+  );
+}
+
+// Lookup with expand
+async function findOrderByNumber(orderNumber) {
+  return pb.collection('orders').getFirstListItem(
+    pb.filter('orderNumber = {:num}', { num: orderNumber }),
+    { expand: 'customer,items' }
+  );
+}
+
+// Complex filter conditions
+async function findActiveSubscription(userId) {
+  return pb.collection('subscriptions').getFirstListItem(
+    pb.filter(
+      'user = {:userId} && status = "active" && expiresAt > @now',
+      { userId }
+    )
+  );
+}
+
+// With field selection
+async function getUserIdByEmail(email) {
+  const user = await pb.collection('users').getFirstListItem(
+    pb.filter('email = {:email}', { email }),
+    { fields: 'id' }
+  );
+  return user.id;
+}
+```
+
+**Comparison with getOne:**
+
+```javascript
+// getOne - fetch by record ID
+const post = await pb.collection('posts').getOne('abc123');
+
+// getFirstListItem - fetch by any filter (use pb.filter for safe binding)
+const post = await pb.collection('posts').getFirstListItem(
+  pb.filter('slug = {:slug}', { slug: 'hello-world' })
+);
+const user = await pb.collection('users').getFirstListItem(
+  pb.filter('username = {:name}', { name: 'john' })
+);
+const order = await pb.collection('orders').getFirstListItem(
+  pb.filter('orderNumber = {:num}', { num: 12345 })
+);
+```
+
+**Error handling:**
+
+```javascript
+// getFirstListItem throws 404 if no match found
+try {
+  const user = await pb.collection('users').getFirstListItem(
+    pb.filter('email = {:email}', { email })
+  );
+  return user;
+} catch (error) {
+  if (error.status === 404) {
+    // No matching record - handle appropriately
+    return null;
+  }
+  // Other error (network, auth, etc.)
+  throw error;
+}
+
+// Wrapper function for optional lookup
+async function findFirst(collection, filter, options = {}) {
+  try {
+    return await pb.collection(collection).getFirstListItem(filter, options);
+  } catch (error) {
+    if (error.status === 404) return null;
+    throw error;
+  }
+}
+
+// Usage
+const user = await findFirst('users', pb.filter('email = {:e}', { e: email }));
+if (!user) {
+  console.log('User not found');
+}
+```
+
+**When to use each method:**
+
+| Method | Use When |
+|--------|----------|
+| `getOne(id)` | You have the record ID |
+| `getFirstListItem(filter)` | Finding by unique field (email, slug, sku) |
+| `getList(1, 1, { filter })` | Need pagination metadata |
+| `getFullList({ filter })` | Expecting multiple results |
+
+Reference: [PocketBase Records API](https://pocketbase.io/docs/api-records/)
+
+## 6. Prevent N+1 Query Problems
+
+**Impact: HIGH (Reduces API calls from N+1 to 1-2, dramatically faster page loads)**
+
+N+1 queries occur when you fetch a list of records, then make additional requests for each record's related data. This pattern causes severe performance issues at scale.
+
+**Incorrect (N+1 patterns):**
+
+```javascript
+// Classic N+1: fetching related data in a loop
+async function getPostsWithDetails() {
+  const posts = await pb.collection('posts').getList(1, 20);  // 1 query
+
+  for (const post of posts.items) {
+    // N additional queries!
+    post.author = await pb.collection('users').getOne(post.author);
+    post.category = await pb.collection('categories').getOne(post.category);
+  }
+  // Total: 1 + 20 + 20 = 41 queries for 20 posts
+}
+
+// N+1 with Promise.all (faster but still N+1)
+async function getPostsParallel() {
+  const posts = await pb.collection('posts').getList(1, 20);
+
+  await Promise.all(posts.items.map(async post => {
+    post.author = await pb.collection('users').getOne(post.author);
+  }));
+  // Still 21 API calls, just parallel
+}
+
+// Hidden N+1 in rendering
+function PostList({ posts }) {
+  return posts.map(post => (
+    <PostCard
+      post={post}
+      author={useAuthor(post.author)}  // Each triggers a fetch!
+    />
+  ));
+}
+```
+
+**Correct (eliminate N+1):**
+
+```javascript
+// Solution 1: Use expand for relations
+async function getPostsWithDetails() {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    expand: 'author,category,tags'
+  });
+
+  // All data in one request
+  posts.items.forEach(post => {
+    console.log(post.expand?.author?.name);
+    console.log(post.expand?.category?.name);
+  });
+  // Total: 1 query
+}
+
+// Solution 2: Batch fetch related records
+async function getPostsWithAuthorsBatch() {
+  const posts = await pb.collection('posts').getList(1, 20);
+
+  // Collect unique author IDs
+  const authorIds = [...new Set(posts.items.map(p => p.author))];
+
+  // Single query for all authors (use pb.filter for safe binding)
+  const filter = authorIds.map(id => pb.filter('id = {:id}', { id })).join(' || ');
+  const authors = await pb.collection('users').getList(1, authorIds.length, {
+    filter
+  });
+
+  // Create lookup map
+  const authorMap = Object.fromEntries(
+    authors.items.map(a => [a.id, a])
+  );
+
+  // Attach to posts
+  posts.items.forEach(post => {
+    post.authorData = authorMap[post.author];
+  });
+  // Total: 2 queries regardless of post count
+}
+
+// Solution 3: Use view collection for complex joins
+// Create a view that joins posts with authors:
+// SELECT p.*, u.name as author_name, u.avatar as author_avatar
+// FROM posts p LEFT JOIN users u ON p.author = u.id
+
+async function getPostsFromView() {
+  const posts = await pb.collection('posts_with_authors').getList(1, 20);
+  // Single query, data already joined
+}
+
+// Solution 4: Back-relations with expand
+async function getUserWithPosts(userId) {
+  const user = await pb.collection('users').getOne(userId, {
+    expand: 'posts_via_author'  // All posts by this user
+  });
+
+  console.log('Posts by user:', user.expand?.posts_via_author);
+  // 1 query gets user + all their posts
+}
+```
+
+**Detecting N+1 in your code:**
+
+```javascript
+// Add request logging to detect N+1
+let requestCount = 0;
+pb.beforeSend = (url, options) => {
+  requestCount++;
+  console.log(`Request #${requestCount}: ${options.method} ${url}`);
+  return { url, options };
+};
+
+// Monitor during development
+async function loadPage() {
+  requestCount = 0;
+  await loadAllData();
+  console.log(`Total requests: ${requestCount}`);
+  // If this is >> number of records, you have N+1
+}
+```
+
+**Prevention checklist:**
+- [ ] Always use `expand` for displaying related data
+- [ ] Never fetch related records in loops
+- [ ] Batch fetch when expand isn't available
+- [ ] Consider view collections for complex joins
+- [ ] Monitor request counts during development
+
+Reference: [PocketBase Expand](https://pocketbase.io/docs/api-records/#expand)
+
+## 7. Use Efficient Pagination Strategies
+
+**Impact: HIGH (10-100x faster list queries on large collections)**
+
+Pagination impacts performance significantly. Use `skipTotal` for large datasets, cursor-based pagination for infinite scroll, and appropriate page sizes.
+
+**Incorrect (inefficient pagination):**
+
+```javascript
+// Fetching all records - memory and performance disaster
+const allPosts = await pb.collection('posts').getFullList();
+// Downloads entire table, crashes on large datasets
+
+// Default pagination without skipTotal
+const posts = await pb.collection('posts').getList(100, 20);
+// COUNT(*) runs on every request - slow on large tables
+
+// Using offset for infinite scroll
+async function loadMore(page) {
+  // As page increases, offset queries get slower
+  return pb.collection('posts').getList(page, 20);
+  // Page 1000: skips 19,980 rows before returning 20
+}
+```
+
+**Correct (optimized pagination):**
+
+```javascript
+// Use skipTotal for better performance on large collections
+const posts = await pb.collection('posts').getList(1, 20, {
+  skipTotal: true,  // Skip COUNT(*) query
+  sort: '-created'
+});
+// Returns items without totalItems/totalPages (faster)
+
+// Cursor-based pagination for infinite scroll
+async function loadMorePosts(lastCreated = null) {
+  const filter = lastCreated
+    ? pb.filter('created < {:cursor}', { cursor: lastCreated })
+    : '';
+
+  const result = await pb.collection('posts').getList(1, 20, {
+    filter,
+    sort: '-created',
+    skipTotal: true
+  });
+
+  // Next cursor is the last item's created date
+  const nextCursor = result.items.length > 0
+    ? result.items[result.items.length - 1].created
+    : null;
+
+  return { items: result.items, nextCursor };
+}
+
+// Usage for infinite scroll
+let cursor = null;
+async function loadNextPage() {
+  const { items, nextCursor } = await loadMorePosts(cursor);
+  cursor = nextCursor;
+  appendToList(items);
+}
+
+// Batched fetching when you need all records
+async function getAllPostsEfficiently() {
+  const allPosts = [];
+  let page = 1;
+  const perPage = 1000;  // Larger batches = fewer requests (max 1000 per API limit)
+
+  while (true) {
+    const result = await pb.collection('posts').getList(page, perPage, {
+      skipTotal: true
+    });
+
+    allPosts.push(...result.items);
+
+    if (result.items.length < perPage) {
+      break;  // No more records
+    }
+    page++;
+  }
+
+  return allPosts;
+}
+
+// Or use getFullList with batch option
+const allPosts = await pb.collection('posts').getFullList({
+  batch: 1000,  // Records per request (default 1000 since JS SDK v0.26.6; max 1000)
+  sort: '-created'
+});
+```
+
+**Choose the right approach:**
+
+| Use Case | Approach |
+|----------|----------|
+| Standard list with page numbers | `getList()` with page/perPage |
+| Large dataset, no total needed | `getList()` with `skipTotal: true` |
+| Infinite scroll | Cursor-based with `skipTotal: true` |
+| Export all data | `getFullList()` with batch size |
+| First N records only | `getList(1, N, { skipTotal: true })` |
+
+**Performance tips:**
+- Use `skipTotal: true` unless you need page count
+- Keep `perPage` reasonable (20-100 for UI, up to 1000 for batch exports)
+- Index fields used in sort and filter
+- Cursor pagination scales better than offset
+
+Reference: [PocketBase Records API](https://pocketbase.io/docs/api-records/)
+
diff --git a/.claude/skills/pocketbase-best-practices/references/realtime.md b/.claude/skills/pocketbase-best-practices/references/realtime.md
new file mode 100644
index 0000000..c989456
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/references/realtime.md
@@ -0,0 +1,693 @@
+# Realtime
+
+**Impact: MEDIUM**
+
+SSE subscriptions, event handling, connection management, and authentication with realtime.
+
+---
+
+## 1. Authenticate Realtime Connections
+
+**Impact: MEDIUM (Secure subscriptions respecting API rules)**
+
+Realtime subscriptions respect collection API rules. Ensure the connection is authenticated before subscribing to protected data.
+
+**Incorrect (subscribing without auth context):**
+
+```javascript
+// Subscribing before authentication
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// This will fail or return no data if collection requires auth
+pb.collection('private_messages').subscribe('*', (e) => {
+  // Won't receive events - not authenticated!
+  console.log(e.record);
+});
+
+// Later user logs in, but subscription doesn't update
+await pb.collection('users').authWithPassword(email, password);
+// Existing subscription still unauthenticated!
+```
+
+**Correct (authenticated subscriptions):**
+
+```javascript
+// Subscribe after authentication
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+async function initRealtime() {
+  // First authenticate
+  await pb.collection('users').authWithPassword(email, password);
+
+  // Now subscribe - will use auth context
+  pb.collection('private_messages').subscribe('*', (e) => {
+    // Receives events for messages user can access
+    console.log('New message:', e.record);
+  });
+}
+
+// Re-subscribe after auth changes
+function useAuthenticatedRealtime() {
+  const [messages, setMessages] = useState([]);
+  const unsubRef = useRef(null);
+
+  // Watch auth changes
+  useEffect(() => {
+    const removeListener = pb.authStore.onChange((token, record) => {
+      // Unsubscribe old connection
+      if (unsubRef.current) {
+        unsubRef.current();
+        unsubRef.current = null;
+      }
+
+      // Re-subscribe with new auth context if logged in
+      if (record) {
+        setupSubscription();
+      } else {
+        setMessages([]);
+      }
+    }, true);
+
+    return () => {
+      removeListener();
+      if (unsubRef.current) unsubRef.current();
+    };
+  }, []);
+
+  async function setupSubscription() {
+    unsubRef.current = await pb.collection('private_messages').subscribe('*', (e) => {
+      handleMessage(e);
+    });
+  }
+}
+
+// Handle auth token refresh with realtime
+pb.realtime.subscribe('PB_CONNECT', async (e) => {
+  console.log('Realtime connected');
+
+  // Verify auth is still valid
+  if (pb.authStore.isValid) {
+    try {
+      await pb.collection('users').authRefresh();
+    } catch {
+      pb.authStore.clear();
+      // Redirect to login
+    }
+  }
+});
+```
+
+**API rules apply to subscriptions:**
+
+```javascript
+// Collection rule: listRule: 'owner = @request.auth.id'
+
+// User A subscribed
+await pb.collection('users').authWithPassword('a@test.com', 'password');
+pb.collection('notes').subscribe('*', handler);
+// Only receives events for notes where owner = User A
+
+// Events from other users' notes are filtered out automatically
+```
+
+**Subscription authorization flow:**
+
+1. SSE connection established (no auth check)
+2. First subscription triggers authorization
+3. Auth token from `pb.authStore` is used
+4. Collection rules evaluated for each event
+5. Only matching events sent to client
+
+**Handling auth expiration:**
+
+```javascript
+// Setup disconnect handler
+pb.realtime.onDisconnect = (subscriptions) => {
+  console.log('Disconnected, had subscriptions:', subscriptions);
+
+  // Check if auth expired
+  if (!pb.authStore.isValid) {
+    // Token expired - need to re-authenticate
+    redirectToLogin();
+    return;
+  }
+
+  // Connection issue - realtime will auto-reconnect
+  // Re-subscribe after reconnection
+  pb.realtime.subscribe('PB_CONNECT', () => {
+    resubscribeAll(subscriptions);
+  });
+};
+
+function resubscribeAll(subscriptions) {
+  subscriptions.forEach(sub => {
+    const [collection, topic] = sub.split('/');
+    pb.collection(collection).subscribe(topic, handlers[sub]);
+  });
+}
+```
+
+Reference: [PocketBase Realtime Auth](https://pocketbase.io/docs/api-realtime/)
+
+## 2. Handle Realtime Events Properly
+
+**Impact: MEDIUM (Consistent UI state, proper optimistic updates)**
+
+Realtime events should update local state correctly, handle edge cases, and maintain UI consistency.
+
+**Incorrect (naive event handling):**
+
+```javascript
+// Blindly appending creates - may add duplicates
+pb.collection('posts').subscribe('*', (e) => {
+  if (e.action === 'create') {
+    posts.push(e.record);  // Might already exist from optimistic update!
+  }
+});
+
+// Not handling own actions
+pb.collection('posts').subscribe('*', (e) => {
+  // User creates post -> optimistic update
+  // Realtime event arrives -> duplicate!
+  setPosts(prev => [...prev, e.record]);
+});
+
+// Missing action types
+pb.collection('posts').subscribe('*', (e) => {
+  if (e.action === 'create') handleCreate(e);
+  // Ignoring update and delete!
+});
+```
+
+**Correct (robust event handling):**
+
+```javascript
+// Handle all action types with deduplication
+function useRealtimePosts() {
+  const [posts, setPosts] = useState([]);
+  const pendingCreates = useRef(new Set());
+
+  useEffect(() => {
+    loadPosts();
+
+    const unsub = pb.collection('posts').subscribe('*', (e) => {
+      switch (e.action) {
+        case 'create':
+          // Skip if we created it (optimistic update already applied)
+          if (pendingCreates.current.has(e.record.id)) {
+            pendingCreates.current.delete(e.record.id);
+            return;
+          }
+          setPosts(prev => {
+            // Deduplicate - might already exist
+            if (prev.some(p => p.id === e.record.id)) return prev;
+            return [e.record, ...prev];
+          });
+          break;
+
+        case 'update':
+          setPosts(prev => prev.map(p =>
+            p.id === e.record.id ? e.record : p
+          ));
+          break;
+
+        case 'delete':
+          setPosts(prev => prev.filter(p => p.id !== e.record.id));
+          break;
+      }
+    });
+
+    return unsub;
+  }, []);
+
+  async function createPost(data) {
+    // Optimistic update
+    const tempId = `temp_${Date.now()}`;
+    const optimisticPost = { ...data, id: tempId };
+    setPosts(prev => [optimisticPost, ...prev]);
+
+    try {
+      const created = await pb.collection('posts').create(data);
+      // Mark as pending so realtime event is ignored
+      pendingCreates.current.add(created.id);
+      // Replace optimistic with real
+      setPosts(prev => prev.map(p =>
+        p.id === tempId ? created : p
+      ));
+      return created;
+    } catch (error) {
+      // Rollback optimistic update
+      setPosts(prev => prev.filter(p => p.id !== tempId));
+      throw error;
+    }
+  }
+
+  return { posts, createPost };
+}
+
+// Batched updates for high-frequency changes
+function useRealtimeWithBatching() {
+  const [posts, setPosts] = useState([]);
+  const pendingUpdates = useRef([]);
+  const flushTimeout = useRef(null);
+
+  useEffect(() => {
+    const unsub = pb.collection('posts').subscribe('*', (e) => {
+      pendingUpdates.current.push(e);
+
+      // Batch updates every 100ms
+      if (!flushTimeout.current) {
+        flushTimeout.current = setTimeout(() => {
+          flushUpdates();
+          flushTimeout.current = null;
+        }, 100);
+      }
+    });
+
+    return () => {
+      unsub();
+      if (flushTimeout.current) clearTimeout(flushTimeout.current);
+    };
+  }, []);
+
+  function flushUpdates() {
+    const updates = pendingUpdates.current;
+    pendingUpdates.current = [];
+
+    setPosts(prev => {
+      let next = [...prev];
+      for (const e of updates) {
+        if (e.action === 'create') {
+          if (!next.some(p => p.id === e.record.id)) {
+            next.unshift(e.record);
+          }
+        } else if (e.action === 'update') {
+          next = next.map(p => p.id === e.record.id ? e.record : p);
+        } else if (e.action === 'delete') {
+          next = next.filter(p => p.id !== e.record.id);
+        }
+      }
+      return next;
+    });
+  }
+}
+```
+
+**Filtering events:**
+
+```javascript
+// Only handle events matching certain criteria
+pb.collection('posts').subscribe('*', (e) => {
+  // Only published posts
+  if (e.record.status !== 'published') return;
+
+  // Only posts by current user
+  if (e.record.author !== pb.authStore.record?.id) return;
+
+  handleEvent(e);
+});
+
+// Subscribe with expand to get related data
+pb.collection('posts').subscribe('*', (e) => {
+  // Note: expand data is included in realtime events
+  // if the subscription options include expand
+  console.log(e.record.expand?.author?.name);
+}, { expand: 'author' });
+```
+
+Reference: [PocketBase Realtime Events](https://pocketbase.io/docs/api-realtime/)
+
+## 3. Handle Realtime Connection Issues
+
+**Impact: MEDIUM (Reliable realtime even with network interruptions)**
+
+Realtime connections can disconnect due to network issues or server restarts. Implement proper reconnection handling and state synchronization.
+
+**Incorrect (ignoring connection issues):**
+
+```javascript
+// No reconnection handling - stale data after disconnect
+pb.collection('posts').subscribe('*', (e) => {
+  updateUI(e.record);
+});
+// If connection drops, UI shows stale data indefinitely
+
+// Assuming connection is always stable
+function PostList() {
+  useEffect(() => {
+    pb.collection('posts').subscribe('*', handleChange);
+  }, []);
+  // No awareness of connection state
+}
+```
+
+**Correct (robust connection handling):**
+
+```javascript
+// Monitor connection state
+function useRealtimeConnection() {
+  const [connected, setConnected] = useState(false);
+  const [lastSync, setLastSync] = useState(null);
+
+  useEffect(() => {
+    // Track connection state
+    const unsubConnect = pb.realtime.subscribe('PB_CONNECT', (e) => {
+      console.log('Connected, client ID:', e.clientId);
+      setConnected(true);
+
+      // Re-sync data after reconnection
+      if (lastSync) {
+        syncMissedUpdates(lastSync);
+      }
+      setLastSync(new Date());
+    });
+
+    // Handle disconnection
+    pb.realtime.onDisconnect = (activeSubscriptions) => {
+      console.log('Disconnected');
+      setConnected(false);
+      showOfflineIndicator();
+    };
+
+    return () => {
+      unsubConnect();
+    };
+  }, [lastSync]);
+
+  return { connected };
+}
+
+// Sync missed updates after reconnection
+async function syncMissedUpdates(since) {
+  // Fetch records modified since last sync
+  const updatedPosts = await pb.collection('posts').getList(1, 100, {
+    filter: pb.filter('updated > {:since}', { since }),
+    sort: '-updated'
+  });
+
+  // Merge with local state
+  updateLocalState(updatedPosts.items);
+}
+
+// Full implementation with resilience
+class RealtimeManager {
+  constructor(pb) {
+    this.pb = pb;
+    this.subscriptions = new Map();
+    this.lastSyncTimes = new Map();
+    this.reconnectAttempts = 0;
+    this.maxReconnectDelay = 30000;
+
+    this.setupConnectionHandlers();
+  }
+
+  setupConnectionHandlers() {
+    this.pb.realtime.subscribe('PB_CONNECT', () => {
+      console.log('Realtime connected');
+      this.reconnectAttempts = 0;
+      this.onReconnect();
+    });
+
+    this.pb.realtime.onDisconnect = (subs) => {
+      console.log('Realtime disconnected');
+      this.scheduleReconnect();
+    };
+  }
+
+  scheduleReconnect() {
+    // Exponential backoff with jitter
+    const delay = Math.min(
+      1000 * Math.pow(2, this.reconnectAttempts) + Math.random() * 1000,
+      this.maxReconnectDelay
+    );
+
+    this.reconnectAttempts++;
+
+    setTimeout(() => {
+      if (!this.pb.realtime.isConnected) {
+        this.resubscribeAll();
+      }
+    }, delay);
+  }
+
+  async onReconnect() {
+    // Sync data for each tracked collection
+    for (const [collection, lastSync] of this.lastSyncTimes) {
+      await this.syncCollection(collection, lastSync);
+    }
+  }
+
+  async syncCollection(collection, since) {
+    try {
+      const updates = await this.pb.collection(collection).getList(1, 1000, {
+        filter: this.pb.filter('updated > {:since}', { since }),
+        sort: 'updated'
+      });
+
+      // Notify subscribers of missed updates
+      const handler = this.subscriptions.get(collection);
+      if (handler) {
+        updates.items.forEach(record => {
+          handler({ action: 'update', record });
+        });
+      }
+
+      this.lastSyncTimes.set(collection, new Date());
+    } catch (error) {
+      console.error(`Failed to sync ${collection}:`, error);
+    }
+  }
+
+  async subscribe(collection, handler) {
+    this.subscriptions.set(collection, handler);
+    this.lastSyncTimes.set(collection, new Date());
+
+    return this.pb.collection(collection).subscribe('*', (e) => {
+      this.lastSyncTimes.set(collection, new Date());
+      handler(e);
+    });
+  }
+
+  async resubscribeAll() {
+    // Refresh auth token before resubscribing to ensure valid credentials
+    if (this.pb.authStore.isValid) {
+      try {
+        await this.pb.collection('users').authRefresh();
+      } catch {
+        this.pb.authStore.clear();
+      }
+    }
+
+    for (const [collection, handler] of this.subscriptions) {
+      this.pb.collection(collection).subscribe('*', handler);
+    }
+  }
+}
+
+// Usage
+const realtime = new RealtimeManager(pb);
+await realtime.subscribe('posts', handlePostChange);
+```
+
+**Connection timeout handling:**
+
+```javascript
+// Server sends disconnect after 5 min of no messages
+// SDK auto-reconnects, but you can handle it explicitly
+
+let lastHeartbeat = Date.now();
+
+pb.realtime.subscribe('PB_CONNECT', () => {
+  lastHeartbeat = Date.now();
+});
+
+// Check for stale connection
+setInterval(() => {
+  if (Date.now() - lastHeartbeat > 6 * 60 * 1000) {
+    console.log('Connection may be stale, refreshing...');
+    pb.realtime.unsubscribe();
+    resubscribeAll();
+  }
+}, 60000);
+```
+
+Reference: [PocketBase Realtime](https://pocketbase.io/docs/api-realtime/)
+
+## 4. Implement Realtime Subscriptions Correctly
+
+**Impact: MEDIUM (Live updates without polling, reduced server load)**
+
+PocketBase uses Server-Sent Events (SSE) for realtime updates. Proper subscription management prevents memory leaks and ensures reliable event delivery.
+
+**Incorrect (memory leaks and poor management):**
+
+```javascript
+// Missing unsubscribe - memory leak!
+function PostList() {
+  useEffect(() => {
+    pb.collection('posts').subscribe('*', (e) => {
+      updatePosts(e);
+    });
+    // No cleanup - subscription persists forever!
+  }, []);
+}
+
+// Subscribing multiple times
+function loadPosts() {
+  // Called on every render - creates duplicate subscriptions!
+  pb.collection('posts').subscribe('*', handleChange);
+}
+
+// Not handling reconnection
+pb.collection('posts').subscribe('*', (e) => {
+  // Assumes connection is always stable
+  updateUI(e);
+});
+```
+
+**Correct (proper subscription management):**
+
+```javascript
+// React example with cleanup
+function PostList() {
+  const [posts, setPosts] = useState([]);
+
+  useEffect(() => {
+    // Initial load
+    loadPosts();
+
+    // Subscribe to changes
+    const unsubscribe = pb.collection('posts').subscribe('*', (e) => {
+      if (e.action === 'create') {
+        setPosts(prev => [e.record, ...prev]);
+      } else if (e.action === 'update') {
+        setPosts(prev => prev.map(p =>
+          p.id === e.record.id ? e.record : p
+        ));
+      } else if (e.action === 'delete') {
+        setPosts(prev => prev.filter(p => p.id !== e.record.id));
+      }
+    });
+
+    // Cleanup on unmount
+    return () => {
+      unsubscribe();
+    };
+  }, []);
+
+  async function loadPosts() {
+    const result = await pb.collection('posts').getList(1, 50);
+    setPosts(result.items);
+  }
+
+  return <PostListUI posts={posts} />;
+}
+
+// Subscribe to specific record
+async function watchPost(postId) {
+  return pb.collection('posts').subscribe(postId, (e) => {
+    console.log('Post changed:', e.action, e.record);
+  });
+}
+
+// Subscribe to collection changes
+async function watchAllPosts() {
+  return pb.collection('posts').subscribe('*', (e) => {
+    console.log(`Post ${e.action}:`, e.record.title);
+  });
+}
+
+// Handle connection events
+pb.realtime.subscribe('PB_CONNECT', (e) => {
+  console.log('Realtime connected, client ID:', e.clientId);
+  // Re-sync data after reconnection
+  refreshData();
+});
+
+// Vanilla JS with proper cleanup
+class PostManager {
+  unsubscribes = [];
+
+  async init() {
+    this.unsubscribes.push(
+      await pb.collection('posts').subscribe('*', this.handlePostChange)
+    );
+    this.unsubscribes.push(
+      await pb.collection('comments').subscribe('*', this.handleCommentChange)
+    );
+  }
+
+  destroy() {
+    this.unsubscribes.forEach(unsub => unsub());
+    this.unsubscribes = [];
+  }
+
+  handlePostChange = (e) => { /* ... */ };
+  handleCommentChange = (e) => { /* ... */ };
+}
+```
+
+**Subscription event structure:**
+
+```javascript
+pb.collection('posts').subscribe('*', (event) => {
+  event.action;  // 'create' | 'update' | 'delete'
+  event.record;  // The affected record
+});
+
+// Full event type
+interface RealtimeEvent {
+  action: 'create' | 'update' | 'delete';
+  record: RecordModel;
+}
+```
+
+**Unsubscribe patterns:**
+
+```javascript
+// Unsubscribe from specific callback
+const unsub = await pb.collection('posts').subscribe('*', callback);
+unsub();  // Remove this specific subscription
+
+// Unsubscribe from all subscriptions on a topic
+pb.collection('posts').unsubscribe('*');  // All collection subs
+pb.collection('posts').unsubscribe('RECORD_ID');  // Specific record
+
+// Unsubscribe from all collection subscriptions
+pb.collection('posts').unsubscribe();
+
+// Unsubscribe from everything
+pb.realtime.unsubscribe();
+```
+
+**Performance considerations:**
+
+```javascript
+// Prefer specific record subscriptions over collection-wide when possible.
+// subscribe('*') checks ListRule for every connected client on each change.
+// subscribe(recordId) checks ViewRule -- fewer records to evaluate.
+
+// For high-traffic collections, subscribe to specific records:
+await pb.collection('orders').subscribe(orderId, handleOrderUpdate);
+// Instead of: pb.collection('orders').subscribe('*', handleAllOrders);
+
+// Use subscription options to reduce payload size (SDK v0.21+):
+await pb.collection('posts').subscribe('*', handleChange, {
+  fields: 'id,title,updated',  // Only receive specific fields
+  expand: 'author',            // Include expanded relations
+  filter: 'status = "published"'  // Only receive matching records
+});
+```
+
+**Subscription scope guidelines:**
+
+| Scenario | Recommended Scope |
+|----------|-------------------|
+| Watching a specific document | `subscribe(recordId)` |
+| Chat room messages | `subscribe('*')` with filter for room |
+| User notifications | `subscribe('*')` with filter for user |
+| Admin dashboard | `subscribe('*')` (need to see all) |
+| High-frequency data (IoT) | `subscribe(recordId)` per device |
+
+Reference: [PocketBase Realtime](https://pocketbase.io/docs/api-realtime/)
+
diff --git a/.claude/skills/pocketbase-best-practices/references/sdk-usage.md b/.claude/skills/pocketbase-best-practices/references/sdk-usage.md
new file mode 100644
index 0000000..9c02fae
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/references/sdk-usage.md
@@ -0,0 +1,1003 @@
+# SDK Usage
+
+**Impact: HIGH**
+
+JavaScript SDK initialization, auth store patterns, error handling, request cancellation, and safe parameter binding.
+
+---
+
+## 1. Use Appropriate Auth Store for Your Platform
+
+**Impact: HIGH (Proper auth persistence across sessions and page reloads)**
+
+The auth store persists authentication state. Choose the right store type based on your platform: LocalAuthStore for browsers, AsyncAuthStore for React Native, or custom stores for specific needs.
+
+**Incorrect (wrong store for platform):**
+
+```javascript
+// React Native: LocalAuthStore doesn't work correctly
+import PocketBase from 'pocketbase';
+const pb = new PocketBase('http://127.0.0.1:8090');
+// Auth state lost on app restart!
+
+// Deno server: LocalStorage shared between all clients
+import PocketBase from 'pocketbase';
+const pb = new PocketBase('http://127.0.0.1:8090');
+// All clients share the same auth state!
+
+// Server-side: Reusing single client for multiple users
+const pb = new PocketBase('http://127.0.0.1:8090');
+// User A logs in...
+// User B's request uses User A's auth!
+```
+
+**Correct (platform-appropriate stores):**
+
+```javascript
+// Browser (default LocalAuthStore - works automatically)
+import PocketBase from 'pocketbase';
+const pb = new PocketBase('http://127.0.0.1:8090');
+// Automatically persists to localStorage and syncs between tabs
+
+// React Native (AsyncAuthStore)
+import PocketBase, { AsyncAuthStore } from 'pocketbase';
+import AsyncStorage from '@react-native-async-storage/async-storage';
+
+const store = new AsyncAuthStore({
+  save: async (serialized) => {
+    await AsyncStorage.setItem('pb_auth', serialized);
+  },
+  initial: AsyncStorage.getItem('pb_auth'),
+  clear: async () => {
+    await AsyncStorage.removeItem('pb_auth');
+  }
+});
+
+const pb = new PocketBase('http://127.0.0.1:8090', store);
+
+// Server-side / SSR (create client per request)
+import PocketBase from 'pocketbase';
+
+export function createServerClient(cookieHeader) {
+  const pb = new PocketBase('http://127.0.0.1:8090');
+  pb.authStore.loadFromCookie(cookieHeader || '');
+  return pb;
+}
+
+// Deno/Cloudflare Workers (memory-only store)
+import PocketBase, { BaseAuthStore } from 'pocketbase';
+
+class MemoryAuthStore extends BaseAuthStore {
+  // Token only persists for request duration
+  // Each request must include auth via cookie/header
+}
+
+const pb = new PocketBase('http://127.0.0.1:8090', new MemoryAuthStore());
+```
+
+**Custom auth store example:**
+
+```javascript
+import PocketBase, { BaseAuthStore } from 'pocketbase';
+
+class SecureAuthStore extends BaseAuthStore {
+  constructor() {
+    super();
+    // Load initial state from secure storage
+    const data = secureStorage.get('pb_auth');
+    if (data) {
+      const { token, record } = JSON.parse(data);
+      this.save(token, record);
+    }
+  }
+
+  save(token, record) {
+    super.save(token, record);
+    // Persist to secure storage
+    secureStorage.set('pb_auth', JSON.stringify({ token, record }));
+  }
+
+  clear() {
+    super.clear();
+    secureStorage.remove('pb_auth');
+  }
+}
+
+const pb = new PocketBase('http://127.0.0.1:8090', new SecureAuthStore());
+```
+
+**Auth store methods:**
+
+```javascript
+// Available on all auth stores
+pb.authStore.token;        // Current token
+pb.authStore.record;       // Current auth record
+pb.authStore.isValid;      // Token exists and not expired
+pb.authStore.isSuperuser;  // Is superuser token
+
+pb.authStore.save(token, record);  // Save auth state
+pb.authStore.clear();              // Clear auth state
+
+// Listen for changes
+const unsubscribe = pb.authStore.onChange((token, record) => {
+  console.log('Auth changed:', record?.email);
+}, true);  // true = fire immediately
+
+// Cookie helpers (for SSR)
+pb.authStore.loadFromCookie(cookieString);
+pb.authStore.exportToCookie({ httpOnly: false, secure: true });
+```
+
+Reference: [PocketBase Authentication](https://pocketbase.io/docs/authentication/)
+
+## 2. Understand and Control Auto-Cancellation
+
+**Impact: MEDIUM (Prevents race conditions, improves UX for search/typeahead)**
+
+The SDK automatically cancels duplicate pending requests. This prevents race conditions but requires understanding for proper use in concurrent scenarios.
+
+**Incorrect (confused by auto-cancellation):**
+
+```javascript
+// These requests will interfere with each other!
+async function loadDashboard() {
+  // Only the last one executes, others cancelled
+  const posts = pb.collection('posts').getList(1, 20);
+  const users = pb.collection('posts').getList(1, 10);  // Different params but same path
+  const comments = pb.collection('posts').getList(1, 5);
+
+  // posts and users are cancelled, only comments executes
+  return Promise.all([posts, users, comments]);  // First two fail!
+}
+
+// Realtime combined with polling causes cancellation
+pb.collection('posts').subscribe('*', callback);
+setInterval(() => {
+  pb.collection('posts').getList();  // May cancel realtime!
+}, 5000);
+```
+
+**Correct (controlling auto-cancellation):**
+
+```javascript
+// Disable auto-cancellation for parallel requests
+async function loadDashboard() {
+  const [posts, users, recent] = await Promise.all([
+    pb.collection('posts').getList(1, 20, { requestKey: null }),
+    pb.collection('users').getList(1, 10, { requestKey: null }),
+    pb.collection('posts').getList(1, 5, { requestKey: 'recent' })
+  ]);
+  // All requests complete independently
+  return { posts, users, recent };
+}
+
+// Use unique request keys for different purposes
+async function searchPosts(query) {
+  return pb.collection('posts').getList(1, 20, {
+    filter: pb.filter('title ~ {:q}', { q: query }),
+    requestKey: 'post-search'  // Cancels previous searches only
+  });
+}
+
+async function loadPostDetails(postId) {
+  return pb.collection('posts').getOne(postId, {
+    requestKey: `post-${postId}`  // Unique per post
+  });
+}
+
+// Typeahead search - auto-cancellation is helpful here
+async function typeaheadSearch(query) {
+  // Previous search automatically cancelled when user types more
+  return pb.collection('products').getList(1, 10, {
+    filter: pb.filter('name ~ {:q}', { q: query })
+    // No requestKey = uses default (path-based), previous cancelled
+  });
+}
+
+// Globally disable auto-cancellation (use carefully)
+pb.autoCancellation(false);
+
+// Now all requests are independent
+await Promise.all([
+  pb.collection('posts').getList(1, 20),
+  pb.collection('posts').getList(1, 10),
+  pb.collection('posts').getList(1, 5)
+]);
+
+// Re-enable
+pb.autoCancellation(true);
+```
+
+**Manual cancellation:**
+
+```javascript
+// Cancel all pending requests
+pb.cancelAllRequests();
+
+// Cancel specific request by key
+pb.cancelRequest('post-search');
+
+// Example: Cancel on component unmount
+function PostList() {
+  useEffect(() => {
+    loadPosts();
+
+    return () => {
+      // Cleanup: cancel pending requests
+      pb.cancelRequest('post-list');
+    };
+  }, []);
+
+  async function loadPosts() {
+    const result = await pb.collection('posts').getList(1, 20, {
+      requestKey: 'post-list'
+    });
+    setPosts(result.items);
+  }
+}
+
+// Handle cancellation in catch
+async function fetchWithCancellation() {
+  try {
+    return await pb.collection('posts').getList();
+  } catch (error) {
+    if (error.isAbort) {
+      // Request was cancelled - this is expected
+      console.log('Request cancelled');
+      return null;
+    }
+    throw error;
+  }
+}
+```
+
+**When to use each approach:**
+
+| Scenario | Approach |
+|----------|----------|
+| Search/typeahead | Default (let it cancel) |
+| Parallel data loading | `requestKey: null` |
+| Grouped requests | Custom `requestKey` |
+| Component cleanup | `cancelRequest(key)` |
+| Testing/debugging | `autoCancellation(false)` |
+| OAuth2 flow cancel | `cancelRequest(requestKey)` — properly rejects the `authWithOAuth2()` Promise (JS SDK v0.26.8+) |
+
+> **Note (JS SDK v0.26.8):** Calling `pb.cancelRequest(requestKey)` while `authWithOAuth2()` is waiting now properly rejects the returned Promise. In earlier versions the manual cancellation did not account for the waiting realtime subscription, so the Promise could hang indefinitely.
+
+Reference: [PocketBase Auto-Cancellation](https://github.com/pocketbase/js-sdk#auto-cancellation)
+
+## 3. Handle SDK Errors Properly
+
+**Impact: HIGH (Graceful error recovery, better UX, easier debugging)**
+
+All SDK methods return Promises that may reject with `ClientResponseError`. Proper error handling improves user experience and simplifies debugging.
+
+**Incorrect (ignoring or poorly handling errors):**
+
+```javascript
+// No error handling
+const posts = await pb.collection('posts').getList();
+
+// Generic catch that loses information
+try {
+  await pb.collection('posts').create({ title: '' });
+} catch (e) {
+  alert('Something went wrong');  // No useful info
+}
+
+// Not checking specific error types
+try {
+  await pb.collection('posts').getOne('nonexistent');
+} catch (e) {
+  console.log(e.message);  // Missing status, response details
+}
+```
+
+**Correct (comprehensive error handling):**
+
+```javascript
+import PocketBase, { ClientResponseError } from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// Basic error handling with ClientResponseError
+async function createPost(data) {
+  try {
+    return await pb.collection('posts').create(data);
+  } catch (error) {
+    if (error instanceof ClientResponseError) {
+      console.log('Status:', error.status);
+      console.log('Response:', error.response);
+      console.log('URL:', error.url);
+      console.log('Is abort:', error.isAbort);
+
+      // Handle specific status codes
+      switch (error.status) {
+        case 400:
+          // Validation error - extract user-friendly messages only
+          // IMPORTANT: Don't expose raw error.response.data to clients
+          // as it may leak internal field names and validation rules
+          const fieldErrors = {};
+          if (error.response?.data) {
+            for (const [field, details] of Object.entries(error.response.data)) {
+              fieldErrors[field] = details.message;
+            }
+          }
+          return { error: 'validation', fields: fieldErrors };
+        case 401:
+          // Unauthorized - need to login
+          return { error: 'unauthorized' };
+        case 403:
+          // Forbidden - no permission
+          return { error: 'forbidden' };
+        case 404:
+          // Not found
+          return { error: 'not_found' };
+        default:
+          return { error: 'server_error' };
+      }
+    }
+    throw error;  // Re-throw non-PocketBase errors
+  }
+}
+
+// Handle validation errors with field details
+async function updateProfile(userId, data) {
+  try {
+    return await pb.collection('users').update(userId, data);
+  } catch (error) {
+    if (error.status === 400 && error.response?.data) {
+      // Extract field-specific errors
+      const fieldErrors = {};
+      for (const [field, details] of Object.entries(error.response.data)) {
+        fieldErrors[field] = details.message;
+      }
+      return { success: false, errors: fieldErrors };
+      // { errors: { email: "Invalid email format", name: "Required field" } }
+    }
+    throw error;
+  }
+}
+
+// Handle request cancellation
+async function searchWithCancel(query) {
+  try {
+    return await pb.collection('posts').getList(1, 20, {
+      filter: pb.filter('title ~ {:query}', { query })
+    });
+  } catch (error) {
+    if (error.isAbort) {
+      // Request was cancelled (e.g., user typed again)
+      console.log('Search cancelled');
+      return null;
+    }
+    throw error;
+  }
+}
+
+// Wrapper function for consistent error handling
+async function pbRequest(fn) {
+  try {
+    return { data: await fn(), error: null };
+  } catch (error) {
+    if (error instanceof ClientResponseError) {
+      return {
+        data: null,
+        error: {
+          status: error.status,
+          message: error.response?.message || 'Request failed',
+          data: error.response?.data || null
+        }
+      };
+    }
+    return {
+      data: null,
+      error: { status: 0, message: error.message, data: null }
+    };
+  }
+}
+
+// Usage
+const { data, error } = await pbRequest(() =>
+  pb.collection('posts').getList(1, 20)
+);
+
+if (error) {
+  console.log('Failed:', error.message);
+} else {
+  console.log('Posts:', data.items);
+}
+```
+
+**ClientResponseError structure:**
+
+```typescript
+interface ClientResponseError {
+  url: string;           // The request URL
+  status: number;        // HTTP status code (0 if network error)
+  response: {            // API response body
+    code: number;
+    message: string;
+    data: { [field: string]: { code: string; message: string } };
+  };
+  isAbort: boolean;      // True if request was cancelled
+  cause: Error | null;   // Original error (added in JS SDK v0.26.1)
+}
+```
+
+Reference: [PocketBase Error Handling](https://github.com/pocketbase/js-sdk#error-handling)
+
+## 4. Use Field Modifiers for Incremental Updates
+
+**Impact: HIGH (Atomic updates, prevents race conditions, cleaner code)**
+
+PocketBase supports `+` and `-` modifiers for incrementing numbers, appending/removing relation IDs, and managing file arrays without replacing the entire value.
+
+**Incorrect (read-modify-write pattern):**
+
+```javascript
+// Race condition: two users adding tags simultaneously
+async function addTag(postId, newTagId) {
+  const post = await pb.collection('posts').getOne(postId);
+  const currentTags = post.tags || [];
+
+  // Another user might have added a tag in between!
+  await pb.collection('posts').update(postId, {
+    tags: [...currentTags, newTagId]  // Might overwrite the other user's tag
+  });
+}
+
+// Inefficient for incrementing counters
+async function incrementViews(postId) {
+  const post = await pb.collection('posts').getOne(postId);
+  await pb.collection('posts').update(postId, {
+    views: post.views + 1  // Extra read, race condition
+  });
+}
+```
+
+**Correct (using field modifiers):**
+
+```javascript
+// Atomic relation append with + modifier
+async function addTag(postId, newTagId) {
+  await pb.collection('posts').update(postId, {
+    'tags+': newTagId  // Appends to existing tags atomically
+  });
+}
+
+// Append multiple relations
+async function addTags(postId, tagIds) {
+  await pb.collection('posts').update(postId, {
+    'tags+': tagIds  // Appends array of IDs
+  });
+}
+
+// Prepend relations (+ prefix)
+async function prependTag(postId, tagId) {
+  await pb.collection('posts').update(postId, {
+    '+tags': tagId  // Prepends to start of array
+  });
+}
+
+// Remove relations with - modifier
+async function removeTag(postId, tagId) {
+  await pb.collection('posts').update(postId, {
+    'tags-': tagId  // Removes specific tag
+  });
+}
+
+// Remove multiple relations
+async function removeTags(postId, tagIds) {
+  await pb.collection('posts').update(postId, {
+    'tags-': tagIds  // Removes all specified tags
+  });
+}
+
+// Atomic number increment
+async function incrementViews(postId) {
+  await pb.collection('posts').update(postId, {
+    'views+': 1  // Atomic increment, no race condition
+  });
+}
+
+// Atomic number decrement
+async function decrementStock(productId, quantity) {
+  await pb.collection('products').update(productId, {
+    'stock-': quantity  // Atomic decrement
+  });
+}
+
+// File append (for multi-file fields)
+async function addImage(albumId, newImage) {
+  await pb.collection('albums').update(albumId, {
+    'images+': newImage  // Appends new file to existing
+  });
+}
+
+// File removal
+async function removeImage(albumId, filename) {
+  await pb.collection('albums').update(albumId, {
+    'images-': filename  // Removes specific file by name
+  });
+}
+
+// Combined modifiers in single update
+async function updatePost(postId, data) {
+  await pb.collection('posts').update(postId, {
+    title: data.title,        // Replace field
+    'views+': 1,              // Increment number
+    'tags+': data.newTagId,   // Append relation
+    'tags-': data.oldTagId,   // Remove relation
+    'images+': data.newImage  // Append file
+  });
+}
+```
+
+**Modifier reference:**
+
+| Modifier | Field Types | Description |
+|----------|-------------|-------------|
+| `field+` or `+field` | relation, file | Append/prepend to array |
+| `field-` | relation, file | Remove from array |
+| `field+` | number | Increment by value |
+| `field-` | number | Decrement by value |
+
+**Benefits:**
+- **Atomic**: No read-modify-write race conditions
+- **Efficient**: Single request, no extra read needed
+- **Clean**: Expresses intent clearly
+
+**Note:** Modifiers only work with `update()`, not `create()`.
+
+Reference: [PocketBase Relations](https://pocketbase.io/docs/working-with-relations/)
+
+## 5. Use Safe Parameter Binding in Filters
+
+**Impact: CRITICAL (Prevents injection attacks, handles special characters correctly)**
+
+Always use `pb.filter()` with parameter binding when constructing filters with user input. String concatenation is vulnerable to injection attacks.
+
+**Incorrect (string concatenation - DANGEROUS):**
+
+```javascript
+// SQL/filter injection vulnerability!
+async function searchPosts(userInput) {
+  // User input: `test" || id != "` breaks out of string
+  const posts = await pb.collection('posts').getList(1, 20, {
+    filter: `title ~ "${userInput}"`  // VULNERABLE!
+  });
+  return posts;
+}
+
+// Even with escaping, easy to get wrong
+async function searchByEmail(email) {
+  const escaped = email.replace(/"/g, '\\"');  // Incomplete escaping
+  const users = await pb.collection('users').getList(1, 1, {
+    filter: `email = "${escaped}"`  // Still potentially vulnerable
+  });
+  return users;
+}
+
+// Template literals are just as dangerous
+const filter = `status = "${status}" && author = "${authorId}"`;
+```
+
+**Correct (using pb.filter with parameters):**
+
+```javascript
+// Safe parameter binding
+async function searchPosts(userInput) {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    filter: pb.filter('title ~ {:search}', { search: userInput })
+  });
+  return posts;
+}
+
+// Multiple parameters
+async function filterPosts(status, authorId, minViews) {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    filter: pb.filter(
+      'status = {:status} && author = {:author} && views >= {:views}',
+      { status, author: authorId, views: minViews }
+    )
+  });
+  return posts;
+}
+
+// Reusing parameters
+async function searchBothFields(query) {
+  const results = await pb.collection('posts').getList(1, 20, {
+    filter: pb.filter(
+      'title ~ {:q} || content ~ {:q}',
+      { q: query }  // Same parameter used twice
+    )
+  });
+  return results;
+}
+
+// Different parameter types
+async function complexFilter(options) {
+  const filter = pb.filter(
+    'created > {:date} && active = {:active} && category = {:cat}',
+    {
+      date: new Date('2024-01-01'),  // Date objects handled correctly
+      active: true,                    // Booleans
+      cat: options.category            // Strings auto-escaped
+    }
+  );
+
+  return pb.collection('posts').getList(1, 20, { filter });
+}
+
+// Null handling
+async function filterWithOptional(category) {
+  // Only include filter if value provided
+  const filter = category
+    ? pb.filter('category = {:cat}', { cat: category })
+    : '';
+
+  return pb.collection('posts').getList(1, 20, { filter });
+}
+
+// Building dynamic filters
+async function dynamicSearch(filters) {
+  const conditions = [];
+  const params = {};
+
+  if (filters.title) {
+    conditions.push('title ~ {:title}');
+    params.title = filters.title;
+  }
+
+  if (filters.author) {
+    conditions.push('author = {:author}');
+    params.author = filters.author;
+  }
+
+  if (filters.minDate) {
+    conditions.push('created >= {:minDate}');
+    params.minDate = filters.minDate;
+  }
+
+  const filter = conditions.length > 0
+    ? pb.filter(conditions.join(' && '), params)
+    : '';
+
+  return pb.collection('posts').getList(1, 20, { filter });
+}
+```
+
+**Supported parameter types:**
+
+| Type | Example | Notes |
+|------|---------|-------|
+| string | `'hello'` | Auto-escaped, quotes handled |
+| number | `123`, `45.67` | No quotes added |
+| boolean | `true`, `false` | Converted correctly |
+| Date | `new Date()` | Formatted for PocketBase |
+| null | `null` | For null comparisons |
+| other | `{...}` | JSON.stringify() applied |
+
+**Server-side is especially critical:**
+
+```javascript
+// Server-side code (Node.js, Deno, etc.) MUST use binding
+// because malicious users control the input directly
+
+export async function searchHandler(req) {
+  const userQuery = req.query.q;  // Untrusted input!
+
+  // ALWAYS use pb.filter() on server
+  const results = await pb.collection('posts').getList(1, 20, {
+    filter: pb.filter('title ~ {:q}', { q: userQuery })
+  });
+
+  return results;
+}
+```
+
+Reference: [PocketBase Filters](https://pocketbase.io/docs/api-rules-and-filters/)
+
+## 6. Initialize PocketBase Client Correctly
+
+**Impact: HIGH (Proper setup enables auth persistence, SSR support, and optimal performance)**
+
+Client initialization should consider the environment (browser, Node.js, SSR), auth store persistence, and any required polyfills.
+
+**Incorrect (environment-agnostic initialization):**
+
+```javascript
+// Missing polyfills in Node.js
+import PocketBase from 'pocketbase';
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// Node.js: EventSource not defined error on realtime
+pb.collection('posts').subscribe('*', callback);  // Fails!
+
+// Missing base URL
+const pb = new PocketBase();  // Uses '/' - likely wrong
+```
+
+**Correct (environment-aware initialization):**
+
+```javascript
+// Browser setup (no polyfills needed)
+// IMPORTANT: Use HTTPS in production (http is only for local development)
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');  // Use https:// in production
+
+// Node.js setup (requires polyfills for realtime)
+import PocketBase from 'pocketbase';
+import { EventSource } from 'eventsource';
+
+// Global polyfill for realtime
+global.EventSource = EventSource;
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// React Native setup (async auth store)
+import PocketBase, { AsyncAuthStore } from 'pocketbase';
+import AsyncStorage from '@react-native-async-storage/async-storage';
+import EventSource from 'react-native-sse';
+
+global.EventSource = EventSource;
+
+const store = new AsyncAuthStore({
+  save: async (serialized) => AsyncStorage.setItem('pb_auth', serialized),
+  initial: AsyncStorage.getItem('pb_auth'),
+});
+
+const pb = new PocketBase('http://127.0.0.1:8090', store);
+```
+
+**SSR initialization (per-request client):**
+
+```javascript
+// SvelteKit example
+// src/hooks.server.js
+import PocketBase from 'pocketbase';
+
+export async function handle({ event, resolve }) {
+  // Create fresh client for each request
+  event.locals.pb = new PocketBase('http://127.0.0.1:8090');
+
+  // Load auth from request cookie
+  event.locals.pb.authStore.loadFromCookie(
+    event.request.headers.get('cookie') || ''
+  );
+
+  // Validate token
+  if (event.locals.pb.authStore.isValid) {
+    try {
+      await event.locals.pb.collection('users').authRefresh();
+    } catch {
+      event.locals.pb.authStore.clear();
+    }
+  }
+
+  const response = await resolve(event);
+
+  // Send updated auth cookie with secure options
+  response.headers.append(
+    'set-cookie',
+    event.locals.pb.authStore.exportToCookie({
+      httpOnly: true,   // Prevent XSS access to auth token
+      secure: true,     // HTTPS only
+      sameSite: 'Lax',  // CSRF protection
+    })
+  );
+
+  return response;
+}
+```
+
+**TypeScript with typed collections:**
+
+```typescript
+import PocketBase, { RecordService } from 'pocketbase';
+
+// Define your record types
+interface User {
+  id: string;
+  email: string;
+  name: string;
+  avatar?: string;
+}
+
+interface Post {
+  id: string;
+  title: string;
+  content: string;
+  author: string;
+  published: boolean;
+}
+
+// Create typed client interface
+interface TypedPocketBase extends PocketBase {
+  collection(idOrName: string): RecordService;
+  collection(idOrName: 'users'): RecordService<User>;
+  collection(idOrName: 'posts'): RecordService<Post>;
+}
+
+const pb = new PocketBase('http://127.0.0.1:8090') as TypedPocketBase;
+
+// Now methods are typed
+const post = await pb.collection('posts').getOne('abc');  // Returns Post
+const users = await pb.collection('users').getList();      // Returns ListResult<User>
+```
+
+Reference: [PocketBase JS SDK](https://github.com/pocketbase/js-sdk)
+
+## 7. Use Send Hooks for Request Customization
+
+**Impact: MEDIUM (Custom headers, logging, response transformation)**
+
+The SDK provides `beforeSend` and `afterSend` hooks for intercepting and modifying requests and responses globally.
+
+**Incorrect (repeating logic in every request):**
+
+```javascript
+// Adding headers to every request manually
+const posts = await pb.collection('posts').getList(1, 20, {
+  headers: { 'X-Custom-Header': 'value' }
+});
+
+const users = await pb.collection('users').getList(1, 20, {
+  headers: { 'X-Custom-Header': 'value' }  // Repeated!
+});
+
+// Logging each request manually
+console.log('Fetching posts...');
+const posts = await pb.collection('posts').getList();
+console.log('Done');
+```
+
+**Correct (using send hooks):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// beforeSend - modify requests before they're sent
+pb.beforeSend = function(url, options) {
+  // Add custom headers to all requests
+  options.headers = Object.assign({}, options.headers, {
+    'X-Custom-Header': 'value',
+    'X-Request-ID': crypto.randomUUID()
+  });
+
+  // Log outgoing requests
+  console.log(`[${options.method}] ${url}`);
+
+  // Must return { url, options }
+  return { url, options };
+};
+
+// afterSend - process responses
+pb.afterSend = function(response, data) {
+  // Log response status
+  console.log(`Response: ${response.status}`);
+
+  // Transform or extend response data
+  if (data && typeof data === 'object') {
+    data._fetchedAt = new Date().toISOString();
+  }
+
+  // Return the (possibly modified) data
+  return data;
+};
+
+// All requests now automatically have headers and logging
+const posts = await pb.collection('posts').getList();
+const users = await pb.collection('users').getList();
+```
+
+**Practical examples:**
+
+```javascript
+// Request timing / performance monitoring
+let requestStart;
+pb.beforeSend = function(url, options) {
+  requestStart = performance.now();
+  return { url, options };
+};
+
+pb.afterSend = function(response, data) {
+  const duration = performance.now() - requestStart;
+  console.log(`${response.url}: ${duration.toFixed(2)}ms`);
+
+  // Send to analytics
+  trackApiPerformance(response.url, duration);
+
+  return data;
+};
+
+// Add auth token from different source
+pb.beforeSend = function(url, options) {
+  const externalToken = getTokenFromExternalAuth();
+  if (externalToken) {
+    options.headers = Object.assign({}, options.headers, {
+      'X-External-Auth': externalToken
+    });
+  }
+  return { url, options };
+};
+
+// Handle specific response codes globally
+pb.afterSend = function(response, data) {
+  if (response.status === 401) {
+    // Token expired - trigger re-auth
+    handleAuthExpired();
+  }
+
+  if (response.status === 503) {
+    // Service unavailable - show maintenance message
+    showMaintenanceMode();
+  }
+
+  return data;
+};
+
+// Retry failed requests (simplified example)
+const originalSend = pb.send.bind(pb);
+pb.send = async function(path, options) {
+  try {
+    return await originalSend(path, options);
+  } catch (error) {
+    if (error.status === 429) {  // Rate limited
+      await sleep(1000);
+      return originalSend(path, options);  // Retry once
+    }
+    throw error;
+  }
+};
+
+// Add request correlation for debugging
+let requestId = 0;
+pb.beforeSend = function(url, options) {
+  requestId++;
+  const correlationId = `req-${Date.now()}-${requestId}`;
+
+  options.headers = Object.assign({}, options.headers, {
+    'X-Correlation-ID': correlationId
+  });
+
+  console.log(`[${correlationId}] Starting: ${url}`);
+  return { url, options };
+};
+
+pb.afterSend = function(response, data) {
+  console.log(`Complete: ${response.status}`);
+  return data;
+};
+```
+
+**Hook signatures:**
+
+```typescript
+// beforeSend
+beforeSend?: (
+  url: string,
+  options: SendOptions
+) => { url: string; options: SendOptions } | Promise<{ url: string; options: SendOptions }>;
+
+// afterSend
+afterSend?: (
+  response: Response,
+  data: any
+) => any | Promise<any>;
+```
+
+**Use cases:**
+- Add custom headers (API keys, correlation IDs)
+- Request/response logging
+- Performance monitoring
+- Global error handling
+- Response transformation
+- Authentication middleware
+
+Reference: [PocketBase Send Hooks](https://github.com/pocketbase/js-sdk#send-hooks)
+
diff --git a/.claude/skills/pocketbase-best-practices/references/server-side-extending.md b/.claude/skills/pocketbase-best-practices/references/server-side-extending.md
new file mode 100644
index 0000000..000fad4
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/references/server-side-extending.md
@@ -0,0 +1,1820 @@
+# Server-Side Extending
+
+**Impact: HIGH**
+
+Extending PocketBase with Go or embedded JavaScript (JSVM) - event hooks, custom routes, transactions, cron jobs, filesystem, migrations, and safe server-side filter binding.
+
+---
+
+## 1. Compose Hooks, Transactions, Routing, and Enrich in One Request Flow
+
+**Impact: HIGH (Individual rules are atomic; this composite example shows which app instance applies at each layer and how errors propagate)**
+
+The atomic rules (`ext-hooks-chain`, `ext-transactions`, `ext-routing-custom`, `ext-hooks-record-vs-request`, `ext-filesystem`, `ext-filter-binding-server`) each teach a single trap. Real extending code touches **all of them in the same handler**. This rule walks through one complete request flow and annotates **which app instance is active at each layer** - the single most common source of extending bugs is reaching for the wrong one.
+
+### The flow
+
+`POST /api/myapp/posts` that: authenticates the caller, validates uniqueness with a bound filter, creates a record inside a transaction, uploads a thumbnail through a scoped filesystem, writes an audit log from an `OnRecordAfterCreateSuccess` hook, and shapes the response (including the realtime broadcast) in `OnRecordEnrich`.
+
+```
+HTTP request
+ │
+ ▼
+[group middleware]  apis.RequireAuth("users")          ◄── e.Auth is set after this
+ │
+ ▼
+[route handler]     se.App.RunInTransaction(func(txApp) {
+ │                    // ⚠️ inside the block, use ONLY txApp, never se.App or outer `app`
+ │                    FindFirstRecordByFilter(txApp, ...) // bound {:slug}
+ │                    txApp.Save(post)                     // fires OnRecord*Create / *Request
+ │                        │
+ │                        ▼
+ │                     [OnRecordAfterCreateSuccess hook]  ◄── e.App IS txApp here
+ │                        │                                    (hook fires inside the tx)
+ │                        e.App.Save(auditRecord)              → participates in rollback
+ │                        e.Next()                             → REQUIRED
+ │                        │
+ │                        ▼
+ │                     return to route handler
+ │                    fs := txApp.NewFilesystem()
+ │                    defer fs.Close()
+ │                    post.Set("thumb", file); txApp.Save(post)
+ │                    return nil  // commit
+ │                  })
+ │
+ ▼
+[enrich pass]       OnRecordEnrich fires                ◄── RUNS AFTER the tx committed
+ │                   (also fires for realtime SSE and list responses)
+ │                   e.App is the outer app; tx is already closed
+ ▼
+[response serialization] e.JSON(...)
+```
+
+### The code
+
+```go
+app.OnServe().BindFunc(func(se *core.ServeEvent) error {
+    g := se.Router.Group("/api/myapp")
+    g.Bind(apis.RequireAuth("users"))
+
+    g.POST("/posts", func(e *core.RequestEvent) error {
+        // ── Layer 1: route handler ────────────────────────────────────────
+        // e.App is the top-level app. e.Auth is populated by RequireAuth.
+        // e.RequestInfo holds headers/body/query.
+        body := struct {
+            Slug  string `json:"slug"`
+            Title string `json:"title"`
+        }{}
+        if err := e.BindBody(&body); err != nil {
+            return e.BadRequestError("invalid body", err)
+        }
+
+        var created *core.Record
+
+        // ── Layer 2: transaction ──────────────────────────────────────────
+        txErr := e.App.RunInTransaction(func(txApp core.App) error {
+            // ⚠️ From here until the closure returns, every DB call MUST go
+            //    through txApp. Capturing e.App or the outer `app` deadlocks
+            //    on the writer lock.
+
+            // Bound filter - see ext-filter-binding-server
+            existing, _ := txApp.FindFirstRecordByFilter(
+                "posts",
+                "slug = {:slug}",
+                dbx.Params{"slug": body.Slug},
+            )
+            if existing != nil {
+                return apis.NewBadRequestError("slug already taken", nil)
+            }
+
+            col, err := txApp.FindCollectionByNameOrId("posts")
+            if err != nil {
+                return err
+            }
+            post := core.NewRecord(col)
+            post.Set("slug", body.Slug)
+            post.Set("title", body.Title)
+            post.Set("author", e.Auth.Id)
+
+            // txApp.Save fires record hooks INSIDE the tx
+            if err := txApp.Save(post); err != nil {
+                return err
+            }
+
+            // ── Layer 3: filesystem (scoped to this request) ─────────────
+            fs, err := txApp.NewFilesystem()
+            if err != nil {
+                return err
+            }
+            defer fs.Close() // REQUIRED - see ext-filesystem
+
+            if uploaded, ok := e.RequestInfo.Body["thumb"].(*filesystem.File); ok {
+                post.Set("thumb", uploaded)
+                if err := txApp.Save(post); err != nil {
+                    return err
+                }
+            }
+
+            created = post
+            return nil // commit
+        })
+        if txErr != nil {
+            return txErr // framework maps it to a proper HTTP error
+        }
+
+        // ── Layer 5: response (enrich runs automatically) ────────────────
+        // e.App is the OUTER app again here - the tx has committed.
+        // OnRecordEnrich will fire during JSON serialization and for any
+        // realtime subscribers receiving the "create" event.
+        return e.JSON(http.StatusOK, created)
+    })
+
+    return se.Next()
+})
+
+// ── Layer 4: hooks ──────────────────────────────────────────────────────
+// These are registered once at startup, NOT inside the route handler.
+
+app.OnRecordAfterCreateSuccess("posts").Bind(&hook.Handler[*core.RecordEvent]{
+    Id: "audit-post-create",
+    Func: func(e *core.RecordEvent) error {
+        // ⚠️ e.App here is txApp when the parent Save happened inside a tx.
+        //    Always use e.App - never a captured outer `app` - so that the
+        //    audit record participates in the same transaction (and the
+        //    same rollback) as the parent Save.
+        col, err := e.App.FindCollectionByNameOrId("audit")
+        if err != nil {
+            return err
+        }
+        audit := core.NewRecord(col)
+        audit.Set("action", "post.create")
+        audit.Set("record", e.Record.Id)
+        audit.Set("actor", e.Record.GetString("author"))
+        if err := e.App.Save(audit); err != nil {
+            return err // rolls back the whole request
+        }
+        return e.Next() // REQUIRED - see ext-hooks-chain
+    },
+})
+
+app.OnRecordEnrich("posts").BindFunc(func(e *core.RecordEnrichEvent) error {
+    // Runs for:
+    //   - GET /api/collections/posts/records (list)
+    //   - GET /api/collections/posts/records/{id} (view)
+    //   - realtime SSE create/update broadcasts
+    //   - any apis.EnrichRecord call in a custom route
+    // Does NOT run inside a transaction; e.App is the outer app.
+    e.Record.Hide("internalNotes")
+
+    if e.RequestInfo != nil && e.RequestInfo.Auth != nil {
+        e.Record.WithCustomData(true)
+        e.Record.Set("isMine", e.Record.GetString("author") == e.RequestInfo.Auth.Id)
+    }
+    return e.Next()
+})
+```
+
+### The cheat sheet: "which app am I holding?"
+
+| Where you are | Use | Why |
+|---|---|---|
+| Top of a route handler (`func(e *core.RequestEvent)`) | `e.App` | Framework's top-level app; same object the server started with |
+| Inside `RunInTransaction(func(txApp) { ... })` | `txApp` **only** | Capturing the outer app deadlocks on the SQLite writer lock |
+| Inside a record hook fired from a `Save` inside a tx | `e.App` | The framework has already rebound `e.App` to `txApp` for you |
+| Inside a record hook fired from a non-tx `Save` | `e.App` | Same identifier, same rules, just points to the top-level app |
+| Inside `OnRecordEnrich` | `e.App` | Runs during response serialization, **after** the tx has committed |
+| Inside a `app.Cron()` callback | captured `app` / `se.App` | Cron has no per-run scoped app; wrap in `RunInTransaction` if you need atomicity |
+| Inside a migration function | the `app` argument | `m.Register(func(app core.App) error { ... })` - already transactional |
+
+### Error propagation in the chain
+
+- `return err` inside `RunInTransaction` → **rolls back everything**, including any audit records written by hooks that fired from nested `Save` calls.
+- `return err` from a hook handler → propagates back through the `Save` call → propagates out of the tx closure → rolls back.
+- **Not** calling `e.Next()` in a hook → the chain is broken **silently**. The framework's own post-save work (realtime broadcast, enrich pass, activity log) is skipped but no error is reported.
+- A panic inside the tx closure is recovered by PocketBase, the tx rolls back, and the panic is converted to a 500 response.
+- A panic inside a cron callback is recovered and logged - it does **not** take down the process.
+
+### When NOT to compose this much
+
+This example is realistic but also the ceiling of what should live in a single handler. If you find yourself stacking six concerns in one route, consider splitting the logic into a service function that takes `txApp` as a parameter and is called by the route. The same function is then reusable from cron jobs, migrations, and tests.
+
+Reference: cross-references `ext-hooks-chain.md`, `ext-transactions.md`, `ext-routing-custom.md`, `ext-hooks-record-vs-request.md`, `ext-filesystem.md`, `ext-filter-binding-server.md`.
+
+## 2. Schedule Recurring Jobs with the Builtin Cron Scheduler
+
+**Impact: MEDIUM (Avoids external schedulers and correctly integrates background tasks with the PocketBase lifecycle)**
+
+PocketBase includes a cron scheduler that starts automatically with `serve`. Register jobs before calling `app.Start()` (Go) or at the top level of a `pb_hooks` file (JSVM). Each job runs in its own goroutine and receives a standard cron expression.
+
+**Incorrect (external timer, blocking hook, replacing system jobs):**
+
+```go
+// ❌ Using a raw Go timer instead of the app cron – misses lifecycle management
+go func() {
+    for range time.Tick(2 * time.Minute) {
+        log.Println("cleanup")
+    }
+}()
+
+// ❌ Blocking inside a hook instead of scheduling
+app.OnServe().BindFunc(func(se *core.ServeEvent) error {
+    for {
+        time.Sleep(2 * time.Minute)
+        log.Println("cleanup") // ❌ blocks the hook and never returns se.Next()
+    }
+})
+
+// ❌ Removing all cron jobs wipes PocketBase's own log-cleanup and auto-backup jobs
+app.Cron().RemoveAll()
+```
+
+```javascript
+// ❌ JSVM: using setTimeout – not supported in the embedded goja engine
+setTimeout(() => console.log("run"), 120_000); // ReferenceError
+```
+
+**Correct – Go:**
+
+```go
+package main
+
+import (
+    "log"
+
+    "github.com/pocketbase/pocketbase"
+    "github.com/pocketbase/pocketbase/core"
+)
+
+func main() {
+    app := pocketbase.New()
+
+    // Register before app.Start() so the scheduler knows about the job at launch.
+    // MustAdd panics on an invalid cron expression (use Add if you prefer an error return).
+    app.Cron().MustAdd("cleanup-drafts", "0 3 * * *", func() {
+        // Runs every day at 03:00 UTC in its own goroutine.
+        // Use app directly here (not e.App) because this is not inside a hook.
+        records, err := app.FindAllRecords("posts",
+            core.FilterData("status = 'draft' && created < {:cutoff}"),
+        )
+        if err != nil {
+            app.Logger().Error("cron cleanup-drafts", "err", err)
+            return
+        }
+        for _, r := range records {
+            if err := app.Delete(r); err != nil {
+                app.Logger().Error("cron delete", "id", r.Id, "err", err)
+            }
+        }
+    })
+
+    // Remove a job by ID (e.g. during a feature flag toggle)
+    // app.Cron().Remove("cleanup-drafts")
+
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Correct – JSVM:**
+
+```javascript
+// pb_hooks/crons.pb.js
+/// <reference path="../pb_data/types.d.ts" />
+
+// Top-level cronAdd() registers the job at hook-load time.
+// The handler runs in its own goroutine and has access to $app.
+cronAdd("notify-unpublished", "*/30 * * * *", () => {
+    // Runs every 30 minutes
+    const records = $app.findAllRecords("posts",
+        $dbx.hashExp({ status: "draft" })
+    );
+    console.log(`Found ${records.length} unpublished posts`);
+});
+
+// Remove a registered job by ID (useful in tests or feature toggles)
+// cronRemove("notify-unpublished");
+```
+
+**Cron expression reference:**
+
+```
+┌─── minute        (0 - 59)
+│  ┌── hour         (0 - 23)
+│  │  ┌─ day-of-month (1 - 31)
+│  │  │  ┌ month       (1 - 12)
+│  │  │  │  ┌ day-of-week  (0 - 6, Sunday = 0)
+│  │  │  │  │
+*  *  *  *  *
+
+Examples:
+  */2 * * * *    every 2 minutes
+  0 3 * * *      daily at 03:00
+  0 0 * * 0      weekly on Sunday midnight
+  @hourly        macro equivalent to 0 * * * *
+```
+
+**Key rules:**
+- System jobs use the `__pb*__` ID prefix (e.g. `__pbLogsCleanup__`). Never call `RemoveAll()` or use that prefix for your own jobs.
+- All registered cron jobs are visible and can be manually triggered from _Dashboard > Settings > Crons_.
+- JSVM handlers have access to `$app` but **not** to outer-scope variables (see JSVM scope rule).
+- Go jobs can use `app` directly (not `e.App`) because they run outside the hook/transaction context.
+
+Reference: [Go – Jobs scheduling](https://pocketbase.io/docs/go-jobs-scheduling/) | [JS – Jobs scheduling](https://pocketbase.io/docs/js-jobs-scheduling/)
+
+## 3. Always Close the Filesystem Handle Returned by NewFilesystem
+
+**Impact: HIGH (Leaked filesystem clients keep S3 connections and file descriptors open until the process exits)**
+
+`app.NewFilesystem()` (Go) and `$app.newFilesystem()` (JS) return a filesystem client backed by either the local disk or S3, depending on the app settings. **The caller owns the handle** and must close it - there is no finalizer and no automatic pooling. Leaking handles leaks TCP connections to S3 and file descriptors on disk, and eventually the server will stop accepting uploads.
+
+PocketBase also ships a second client: `app.NewBackupsFilesystem()` for the backups bucket/directory, with the same ownership rules.
+
+**Incorrect (no close, raw bytes buffered in memory):**
+
+```go
+// ❌ Forgets to close fs - connection leaks
+func downloadAvatar(app core.App, key string) ([]byte, error) {
+    fs, err := app.NewFilesystem()
+    if err != nil {
+        return nil, err
+    }
+    // ❌ no defer fs.Close()
+
+    // ❌ GetFile loads the whole file into a reader; reading it all into a
+    //    byte slice defeats streaming for large files
+    r, err := fs.GetFile(key)
+    if err != nil {
+        return nil, err
+    }
+    defer r.Close()
+    return io.ReadAll(r)
+}
+```
+
+**Correct (defer Close, stream to the HTTP response):**
+
+```go
+func serveAvatar(app core.App, key string) echo.HandlerFunc {
+    return func(e *core.RequestEvent) error {
+        fs, err := app.NewFilesystem()
+        if err != nil {
+            return e.InternalServerError("filesystem init failed", err)
+        }
+        defer fs.Close() // REQUIRED
+
+        // Serve directly from the filesystem - handles ranges, content-type,
+        // and the X-Accel-Redirect / X-Sendfile headers when available
+        return fs.Serve(e.Response, e.Request, key, "avatar.jpg")
+    }
+}
+
+// Uploading a local file to the PocketBase-managed filesystem
+func importAvatar(app core.App, record *core.Record, path string) error {
+    f, err := filesystem.NewFileFromPath(path)
+    if err != nil {
+        return err
+    }
+    record.Set("avatar", f) // assignment + app.Save() persist it
+    return app.Save(record)
+}
+```
+
+```javascript
+// JSVM - file factories live on the $filesystem global
+const file1 = $filesystem.fileFromPath("/tmp/import.jpg");
+const file2 = $filesystem.fileFromBytes(new Uint8Array([0xff, 0xd8]), "logo.jpg");
+const file3 = $filesystem.fileFromURL("https://example.com/a.jpg");
+
+// Assigning to a record field triggers upload on save
+record.set("avatar", file1);
+$app.save(record);
+
+// Low-level client - MUST be closed
+const fs = $app.newFilesystem();
+try {
+    const list = fs.list("thumbs/");
+    for (const obj of list) {
+        console.log(obj.key, obj.size);
+    }
+} finally {
+    fs.close(); // REQUIRED
+}
+```
+
+**Rules:**
+- `defer fs.Close()` **immediately** after a successful `NewFilesystem()` / `NewBackupsFilesystem()` call (Go). In JS, wrap in `try { ... } finally { fs.close() }`.
+- Prefer the high-level record-field API (`record.Set("field", file)` + `app.Save`) over direct `fs.Upload` calls - it handles thumbs regeneration, orphan cleanup, and hook integration.
+- File factory functions (`filesystem.NewFileFromPath`, `NewFileFromBytes`, `NewFileFromURL` / JS `$filesystem.fileFromPath|Bytes|URL`) capture their input; they do not stream until save.
+- `fileFromURL` performs an HTTP GET and loads the body into memory - not appropriate for large files.
+- Do not share a single long-lived `fs` across unrelated requests; the object is cheap to create per request.
+
+Reference: [Go Filesystem](https://pocketbase.io/docs/go-filesystem/) · [JS Filesystem](https://pocketbase.io/docs/js-filesystem/)
+
+## 4. Bind User Input in Server-Side Filters with {:placeholder} Params
+
+**Impact: CRITICAL (String-concatenating user input into filter expressions is a direct injection vulnerability)**
+
+Server-side helpers like `FindFirstRecordByFilter`, `FindRecordsByFilter`, and `dbx.NewExp` accept a filter string that supports `{:name}` placeholders. **Never** concatenate user input into the filter - PocketBase's filter parser has its own syntax that is sensitive to quoting, and concatenation allows an attacker to alter the query (same class of bug as SQL injection).
+
+**Incorrect (string interpolation - filter injection):**
+
+```go
+// ❌ attacker sets email to:   x' || 1=1 || email='
+//    resulting filter bypasses the intended match entirely
+email := e.Request.URL.Query().Get("email")
+record, err := app.FindFirstRecordByFilter(
+    "users",
+    "email = '"+email+"' && verified = true", // ❌
+)
+```
+
+```javascript
+// JSVM - same class of bug
+const email = e.request.url.query().get("email");
+const record = $app.findFirstRecordByFilter(
+    "users",
+    `email = '${email}' && verified = true`, // ❌
+);
+```
+
+**Correct (named placeholders + params map):**
+
+```go
+import "github.com/pocketbase/dbx"
+
+email := e.Request.URL.Query().Get("email")
+record, err := app.FindFirstRecordByFilter(
+    "users",
+    "email = {:email} && verified = true",
+    dbx.Params{"email": email}, // values are quoted/escaped by the framework
+)
+if err != nil {
+    return e.NotFoundError("user not found", err)
+}
+
+// Paginated variant: FindRecordsByFilter(collection, filter, sort, limit, offset, params...)
+recs, err := app.FindRecordsByFilter(
+    "posts",
+    "author = {:author} && status = {:status}",
+    "-created",
+    20, 0,
+    dbx.Params{"author": e.Auth.Id, "status": "published"},
+)
+```
+
+```javascript
+// JSVM - second argument after the filter is the params object
+const record = $app.findFirstRecordByFilter(
+    "users",
+    "email = {:email} && verified = true",
+    { email: email },
+);
+
+const recs = $app.findRecordsByFilter(
+    "posts",
+    "author = {:author} && status = {:status}",
+    "-created", 20, 0,
+    { author: e.auth.id, status: "published" },
+);
+```
+
+**Rules:**
+- Placeholder syntax is `{:name}` inside the filter string, and the value is supplied via `dbx.Params{"name": value}` (Go) or a plain object (JS).
+- The same applies to `dbx.NewExp("LOWER(email) = {:email}", dbx.Params{"email": email})` when writing raw `dbx` expressions.
+- Passing a `types.DateTime` / `DateTime` value binds it correctly - do not stringify dates manually.
+- `nil` / `null` binds as SQL NULL; use `field = null` or `field != null` in the filter expression.
+- The filter grammar is the same as used by collection API rules - consult [Filter Syntax](https://pocketbase.io/docs/api-rules-and-filters/#filters) for operators.
+
+Reference: [Go database - FindRecordsByFilter](https://pocketbase.io/docs/go-records/#fetch-records-via-filter-expression) · [JS database - findRecordsByFilter](https://pocketbase.io/docs/js-records/#fetch-records-via-filter-expression)
+
+## 5. Use DBConnect Only When You Need a Custom SQLite Driver
+
+**Impact: MEDIUM (Incorrect driver setup breaks both data.db and auxiliary.db, or introduces unnecessary CGO)**
+
+PocketBase ships with the **pure-Go** `modernc.org/sqlite` driver (no CGO required). Only reach for a custom driver when you specifically need SQLite extensions like ICU, FTS5, or spatialite that the default driver doesn't expose. `DBConnect` is called **twice** — once for `pb_data/data.db` and once for `pb_data/auxiliary.db` — so driver registration and PRAGMAs must be idempotent.
+
+**Incorrect (unnecessary custom driver, mismatched builder, CGO without justification):**
+
+```go
+// ❌ Adding a CGO dependency with no need for extensions
+import _ "github.com/mattn/go-sqlite3"
+
+func main() {
+    app := pocketbase.NewWithConfig(pocketbase.Config{
+        DBConnect: func(dbPath string) (*dbx.DB, error) {
+            // ❌ "sqlite3" builder name used but "pb_sqlite3" driver was registered —
+            //    or vice versa — causing "unknown driver" / broken query generation
+            return dbx.Open("sqlite3", dbPath)
+        },
+    })
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Correct (mattn/go-sqlite3 with CGO — proper PRAGMA init hook and builder map entry):**
+
+```go
+package main
+
+import (
+    "database/sql"
+    "log"
+
+    "github.com/mattn/go-sqlite3"
+    "github.com/pocketbase/dbx"
+    "github.com/pocketbase/pocketbase"
+)
+
+func init() {
+    // Use a unique driver name to avoid conflicts with other packages.
+    // sql.Register panics if called twice with the same name, so put it in init().
+    sql.Register("pb_sqlite3", &sqlite3.SQLiteDriver{
+        ConnectHook: func(conn *sqlite3.SQLiteConn) error {
+            _, err := conn.Exec(`
+                PRAGMA busy_timeout      = 10000;
+                PRAGMA journal_mode      = WAL;
+                PRAGMA journal_size_limit = 200000000;
+                PRAGMA synchronous       = NORMAL;
+                PRAGMA foreign_keys      = ON;
+                PRAGMA temp_store        = MEMORY;
+                PRAGMA cache_size        = -32000;
+            `, nil)
+            return err
+        },
+    })
+    // Mirror the sqlite3 query builder so PocketBase generates correct SQL
+    dbx.BuilderFuncMap["pb_sqlite3"] = dbx.BuilderFuncMap["sqlite3"]
+}
+
+func main() {
+    app := pocketbase.NewWithConfig(pocketbase.Config{
+        DBConnect: func(dbPath string) (*dbx.DB, error) {
+            return dbx.Open("pb_sqlite3", dbPath)
+        },
+    })
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Correct (ncruces/go-sqlite3 — no CGO, PRAGMAs via DSN query string):**
+
+```go
+package main
+
+import (
+    "log"
+
+    "github.com/pocketbase/dbx"
+    "github.com/pocketbase/pocketbase"
+    _ "github.com/ncruces/go-sqlite3/driver"
+    _ "github.com/ncruces/go-sqlite3/embed"
+)
+
+func main() {
+    const pragmas = "?_pragma=busy_timeout(10000)" +
+        "&_pragma=journal_mode(WAL)" +
+        "&_pragma=journal_size_limit(200000000)" +
+        "&_pragma=synchronous(NORMAL)" +
+        "&_pragma=foreign_keys(ON)" +
+        "&_pragma=temp_store(MEMORY)" +
+        "&_pragma=cache_size(-32000)"
+
+    app := pocketbase.NewWithConfig(pocketbase.Config{
+        DBConnect: func(dbPath string) (*dbx.DB, error) {
+            return dbx.Open("sqlite3", "file:"+dbPath+pragmas)
+        },
+    })
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Conditional custom driver with default fallback:**
+
+```go
+app := pocketbase.NewWithConfig(pocketbase.Config{
+    DBConnect: func(dbPath string) (*dbx.DB, error) {
+        // Use custom driver only for the main data file; fall back for auxiliary
+        if strings.HasSuffix(dbPath, "data.db") {
+            return dbx.Open("pb_sqlite3", dbPath)
+        }
+        return core.DefaultDBConnect(dbPath)
+    },
+})
+```
+
+**Decision guide:**
+
+| Need | Driver |
+|------|--------|
+| Default (no extensions) | Built-in `modernc.org/sqlite` — no `DBConnect` config needed |
+| FTS5, ICU, spatialite | `mattn/go-sqlite3` (CGO) or `ncruces/go-sqlite3` (WASM, no CGO) |
+| Reduce binary size | `go build -tags no_default_driver` to exclude the default driver (~4 MB saved) |
+| Conditional fallback | Call `core.DefaultDBConnect(dbPath)` inside your `DBConnect` function |
+
+Reference: [Extend with Go - Custom SQLite driver](https://pocketbase.io/docs/go-overview/#custom-sqlite-driver)
+
+## 6. Version Your Schema with Go Migrations
+
+**Impact: HIGH (Guarantees repeatable, transactional schema evolution and eliminates manual dashboard changes in production)**
+
+PocketBase ships with a `migratecmd` plugin that generates versioned `.go` migration files, applies them automatically on `serve`, and lets you roll back with `migrate down`. Because the files are compiled into your binary, no extra migration tool is needed.
+
+**Incorrect (one-off SQL or dashboard changes in production):**
+
+```go
+// ❌ Running raw SQL directly at startup without a migration file –
+//    the change is applied every restart and has no rollback path.
+app.OnServe().BindFunc(func(se *core.ServeEvent) error {
+    _, err := app.DB().NewQuery(
+        "ALTER TABLE posts ADD COLUMN summary TEXT DEFAULT ''",
+    ).Execute()
+    return err
+})
+
+// ❌ Forgetting to import the migrations package means
+//    registered migrations are never executed.
+package main
+
+import (
+    "github.com/pocketbase/pocketbase"
+    "github.com/pocketbase/pocketbase/plugins/migratecmd"
+    // _ "myapp/migrations"  ← omitted: migrations never run
+)
+```
+
+**Correct (register migratecmd, import migrations package):**
+
+```go
+// main.go
+package main
+
+import (
+    "log"
+    "os"
+
+    "github.com/pocketbase/pocketbase"
+    "github.com/pocketbase/pocketbase/plugins/migratecmd"
+    "github.com/pocketbase/pocketbase/tools/osutils"
+
+    // Import side-effects only; this registers all init() migrations.
+    _ "myapp/migrations"
+)
+
+func main() {
+    app := pocketbase.New()
+
+    migratecmd.MustRegister(app, app.RootCmd, migratecmd.Config{
+        // Automigrate generates a new .go file whenever you make
+        // collection changes in the Dashboard (dev-only).
+        Automigrate: osutils.IsProbablyGoRun(),
+    })
+
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Create and write a migration:**
+
+```bash
+# Create a blank migration file in ./migrations/
+go run . migrate create "add_summary_to_posts"
+```
+
+```go
+// migrations/1687801090_add_summary_to_posts.go
+package migrations
+
+import (
+    "github.com/pocketbase/pocketbase/core"
+    m "github.com/pocketbase/pocketbase/migrations"
+)
+
+func init() {
+    m.Register(func(app core.App) error {
+        // app is a transactional App instance – safe to use directly.
+        collection, err := app.FindCollectionByNameOrId("posts")
+        if err != nil {
+            return err
+        }
+
+        collection.Fields.Add(&core.TextField{
+            Name:     "summary",
+            Required: false,
+        })
+
+        return app.Save(collection)
+    }, func(app core.App) error {
+        // Optional rollback
+        collection, err := app.FindCollectionByNameOrId("posts")
+        if err != nil {
+            return err
+        }
+        collection.Fields.RemoveByName("summary")
+        return app.Save(collection)
+    })
+}
+```
+
+**Snapshot all collections (useful for a fresh repo):**
+
+```bash
+# Generates a migration file that recreates your current schema from scratch.
+go run . migrate collections
+```
+
+**Clean up dev migration history:**
+
+```bash
+# Remove _migrations table entries that have no matching .go file.
+# Run after squashing or deleting intermediate dev migration files.
+go run . migrate history-sync
+```
+
+**Apply / roll back manually:**
+
+```bash
+go run . migrate up        # apply all unapplied migrations
+go run . migrate down 1    # revert the last applied migration
+```
+
+**Key details:**
+- Migration functions receive a **transactional** `core.App` – treat it as the database source of truth. Never use the outer `app` variable inside migration callbacks.
+- New unapplied migrations run automatically on every `serve` start – no manual step in production.
+- `Automigrate: osutils.IsProbablyGoRun()` limits auto-generation to `go run` (development) and prevents accidental file creation in production binaries.
+- Prefer the collection API (`app.Save(collection)`) over raw SQL `ALTER TABLE` so PocketBase's internal schema cache stays consistent.
+- Commit all generated `.go` files to version control; do **not** commit `pb_data/`.
+
+Reference: [Extend with Go – Migrations](https://pocketbase.io/docs/go-migrations/)
+
+## 7. Set Up a Go-Extended PocketBase Application
+
+**Impact: HIGH (Foundation for all custom Go business logic, hooks, and routing)**
+
+When extending PocketBase as a Go framework (v0.36+), the entry point is a small `main.go` that creates the app, registers hooks on `OnServe()`, and calls `app.Start()`. Avoid reaching for a global `app` variable inside hook handlers - use `e.App` instead so code works inside transactions.
+
+**Incorrect (global app reuse, no OnServe hook, bare http.Handler):**
+
+```go
+package main
+
+import (
+    "log"
+    "net/http"
+
+    "github.com/pocketbase/pocketbase"
+)
+
+var app = pocketbase.New() // global reference used inside handlers
+
+func main() {
+    // Routes registered directly via net/http - bypasses PocketBase's router,
+    // middleware chain, auth, rate limiter and body limit
+    http.HandleFunc("/hello", func(w http.ResponseWriter, r *http.Request) {
+        w.Write([]byte("hello"))
+    })
+
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Correct (register routes inside `OnServe`, use `e.App` in handlers):**
+
+```go
+package main
+
+import (
+    "log"
+    "net/http"
+    "os"
+
+    "github.com/pocketbase/pocketbase"
+    "github.com/pocketbase/pocketbase/apis"
+    "github.com/pocketbase/pocketbase/core"
+)
+
+func main() {
+    app := pocketbase.New()
+
+    app.OnServe().BindFunc(func(se *core.ServeEvent) error {
+        // Serve static assets from ./pb_public (if present)
+        se.Router.GET("/{path...}", apis.Static(os.DirFS("./pb_public"), false))
+
+        // Custom API route - namespaced under /api/{yourapp}/ to avoid
+        // colliding with built-in /api/collections, /api/realtime, etc.
+        se.Router.GET("/api/myapp/hello/{name}", func(e *core.RequestEvent) error {
+            return e.JSON(http.StatusOK, map[string]string{
+                "message": "hello " + e.Request.PathValue("name"),
+            })
+        }).Bind(apis.RequireAuth())
+
+        return se.Next()
+    })
+
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Project bootstrap:**
+
+```bash
+go mod init myapp
+go mod tidy
+go run . serve           # development
+go build && ./myapp serve  # production (statically linked binary)
+```
+
+**Key details:**
+- Requires **Go 1.25.0+** (PocketBase v0.36.7+ bumped the minimum to Go 1.25.0).
+- PocketBase ships with the pure-Go `modernc.org/sqlite` driver - **no CGO required** by default.
+- If you need FTS5, ICU, or a custom SQLite build, pass `core.DBConnect` in `pocketbase.NewWithConfig(...)` - it is called twice (once for `pb_data/data.db`, once for `pb_data/auxiliary.db`).
+- Inside hooks, prefer `e.App` over a captured parent-scope `app` - the hook may run inside a transaction and the parent `app` would deadlock.
+
+Reference: [Extend with Go - Overview](https://pocketbase.io/docs/go-overview/)
+
+## 8. Always Call e.Next() and Use e.App Inside Hook Handlers
+
+**Impact: CRITICAL (Forgetting e.Next() silently breaks the execution chain; reusing parent-scope app causes deadlocks)**
+
+Every PocketBase event hook handler is part of an execution chain. If the handler does not call `e.Next()` (Go) or `e.next()` (JS), **the remaining handlers and the core framework action are skipped silently**. Also, hooks may run inside a DB transaction - any database call made through a captured parent-scope `app`/`$app` instead of the event's own `e.App`/`e.app` will deadlock against the transaction.
+
+**Incorrect (missing `Next`, captured parent-scope app, global mutex):**
+
+```go
+var mu sync.Mutex // ❌ global lock invoked recursively by cascade hooks = deadlock
+app := pocketbase.New()
+
+app.OnRecordAfterCreateSuccess("articles").BindFunc(func(e *core.RecordEvent) error {
+    mu.Lock()
+    defer mu.Unlock()
+
+    // ❌ uses outer `app`, not `e.App` - deadlocks when the hook fires
+    //    inside a transaction, because the outer app is blocked on the
+    //    transaction's write lock
+    _, err := app.FindRecordById("audit", e.Record.Id)
+    if err != nil {
+        return err
+    }
+    return nil // ❌ forgot e.Next() - framework never persists the record
+})
+```
+
+```javascript
+// JSVM
+onRecordAfterCreateSuccess((e) => {
+    // ❌ no e.next() = downstream hooks and response serialization skipped
+    console.log("created", e.record.id);
+}, "articles");
+```
+
+**Correct (call Next, use `e.App`, attach an Id for later unbinding):**
+
+```go
+app := pocketbase.New()
+
+app.OnRecordAfterCreateSuccess("articles").Bind(&hook.Handler[*core.RecordEvent]{
+    Id:       "audit-article-create",
+    Priority: 10, // higher = later; default 0 = order of registration
+    Func: func(e *core.RecordEvent) error {
+        // Always use e.App - it is the transactional app when inside a tx
+        audit := core.NewRecord(/* ... */)
+        audit.Set("record", e.Record.Id)
+        if err := e.App.Save(audit); err != nil {
+            return err
+        }
+        return e.Next() // REQUIRED
+    },
+})
+
+// Later: app.OnRecordAfterCreateSuccess("articles").Unbind("audit-article-create")
+```
+
+```javascript
+// JSVM - e.app is the transactional app instance
+onRecordAfterCreateSuccess((e) => {
+    const audit = new Record($app.findCollectionByNameOrId("audit"));
+    audit.set("record", e.record.id);
+    e.app.save(audit);
+
+    e.next(); // REQUIRED
+}, "articles");
+```
+
+**Rules of the execution chain:**
+
+- `Bind(handler)` vs `BindFunc(func)`: `Bind` lets you set `Id` (for `Unbind`) and `Priority`; `BindFunc` auto-generates both.
+- Priority defaults to `0` = order of source registration. Lower numbers run first, negative priorities run before defaults (the built-in middlewares use priorities like `-1010`, `-1000`, `-990`).
+- **Never hold a global mutex across `e.Next()`** - cascade-delete and nested saves can re-enter the same hook and deadlock.
+- `Unbind(id)` removes a specific handler; `UnbindAll()` also removes **system handlers**, so only call it if you really mean to replace the default behavior.
+- `Trigger(event, ...)` is almost never needed in user code.
+
+Reference: [Go Event hooks](https://pocketbase.io/docs/go-event-hooks/) · [JS Event hooks](https://pocketbase.io/docs/js-event-hooks/)
+
+## 9. Pick the Right Record Hook - Model vs Request vs Enrich
+
+**Impact: HIGH (Wrong hook = missing request context, double-fired logic, or leaked fields in realtime events)**
+
+PocketBase v0.23+ splits record hooks into three families. Using the wrong one is the #1 source of "my hook doesn't fire" and "my hidden field still shows up in realtime events" bugs.
+
+| Family | Examples | Fires for | Has request context? |
+|--------|----------|-----------|----------------------|
+| **Model hooks** | `OnRecordCreate`, `OnRecordAfterCreateSuccess`, `OnRecordValidate` | Any save path - Web API **and** cron jobs, custom commands, migrations, calls from other hooks | No - `e.Record`, `e.App`, **no** `e.RequestInfo` |
+| **Request hooks** | `OnRecordCreateRequest`, `OnRecordsListRequest`, `OnRecordViewRequest` | **Only** the built-in Web API endpoints | Yes - `e.RequestInfo`, `e.Auth`, HTTP headers/body |
+| **Enrich hook** | `OnRecordEnrich` | Every response serialization, **including realtime SSE events** and `apis.enrichRecord` | Yes, via `e.RequestInfo` |
+
+**Incorrect (hiding a field in the request hook - leaks in realtime):**
+
+```go
+// ❌ Only runs for GET /api/collections/users/records/{id}.
+//    Realtime SSE subscribers still receive the "role" field.
+app.OnRecordViewRequest("users").BindFunc(func(e *core.RecordRequestEvent) error {
+    e.Record.Hide("role")
+    return e.Next()
+})
+```
+
+**Correct (use `OnRecordEnrich` so realtime and list responses also hide the field):**
+
+```go
+app.OnRecordEnrich("users").BindFunc(func(e *core.RecordEnrichEvent) error {
+    e.Record.Hide("role")
+
+    // Add a computed field only for authenticated users
+    if e.RequestInfo.Auth != nil {
+        e.Record.WithCustomData(true) // required to attach non-schema data
+        e.Record.Set("isOwner", e.Record.Id == e.RequestInfo.Auth.Id)
+    }
+    return e.Next()
+})
+```
+
+```javascript
+// JSVM
+onRecordEnrich((e) => {
+    e.record.hide("role");
+
+    if (e.requestInfo.auth?.collection()?.name === "users") {
+        e.record.withCustomData(true);
+        e.record.set("computedScore",
+            e.record.get("score") * e.requestInfo.auth.get("base"));
+    }
+    e.next();
+}, "users");
+```
+
+**Selection guide:**
+- Need to mutate the record before **any** save (API, cron, migration, nested hook)? → `OnRecordCreate` / `OnRecordUpdate` (pre-save) or `OnRecord*Success` (post-save).
+- Need access to HTTP headers, query params, or the authenticated client? → `OnRecord*Request`.
+- Need to hide fields, redact values, or attach computed props on responses including realtime? → **`OnRecordEnrich`** - this is the safest default for response shaping.
+- Need to validate before save? → `OnRecordValidate` (proxy over `OnModelValidate`).
+
+Reference: [Go Record request hooks](https://pocketbase.io/docs/go-event-hooks/#record-crud-request-hooks) · [JS Record model hooks](https://pocketbase.io/docs/js-event-hooks/#record-model-hooks)
+
+## 10. Write JSVM Migrations as pb_migrations/*.js Files
+
+**Impact: HIGH (JSVM migrations look different from Go ones; missing the timestamp prefix or the down-callback silently breaks replay)**
+
+JSVM migrations live in `pb_migrations/` next to the executable. Unlike Go migrations (which use `init()` + `m.Register(...)` inside a package imported from `main.go`), JSVM migrations are **auto-discovered by filename** and call the global `migrate()` function with an `up` callback and an optional `down` callback. `--automigrate` is on by default in v0.36+, so admin-UI changes generate these files for you; you also write them by hand for data migrations, seed data, and index changes that the UI can't express.
+
+**Incorrect (wrong filename format, missing down, raw SQL without cache invalidation):**
+
+```javascript
+// pb_migrations/add_audit.js   ❌ missing <unix>_ prefix - never runs
+migrate((app) => {
+    // ❌ Raw ALTER TABLE leaves PocketBase's internal collection cache stale
+    app.db().newQuery(
+        "ALTER TABLE posts ADD COLUMN summary TEXT DEFAULT ''"
+    ).execute();
+});
+// ❌ No down callback - `migrate down` cannot revert this in dev
+```
+
+**Correct (timestamped filename, collection API, both up and down):**
+
+```javascript
+// pb_migrations/1712500000_add_audit_collection.js
+/// <reference path="../pb_data/types.d.ts" />
+
+migrate(
+    // UP - runs on `serve` / `migrate up`
+    (app) => {
+        const collection = new Collection({
+            type: "base",
+            name: "audit",
+            fields: [
+                { name: "action", type: "text", required: true },
+                { name: "actor",  type: "relation", collectionId: "_pb_users_auth_", cascadeDelete: false },
+                { name: "meta",   type: "json" },
+                { name: "created", type: "autodate", onCreate: true },
+            ],
+            indexes: [
+                "CREATE INDEX idx_audit_actor ON audit (actor)",
+                "CREATE INDEX idx_audit_created ON audit (created)",
+            ],
+        });
+        app.save(collection);
+    },
+    // DOWN - runs on `migrate down N`
+    (app) => {
+        const collection = app.findCollectionByNameOrId("audit");
+        app.delete(collection);
+    },
+);
+```
+
+**Seed data migration (common pattern):**
+
+```javascript
+// pb_migrations/1712500100_seed_default_tags.js
+/// <reference path="../pb_data/types.d.ts" />
+
+migrate(
+    (app) => {
+        const tags = app.findCollectionByNameOrId("tags");
+        for (const name of ["urgent", "bug", "feature", "docs"]) {
+            const r = new Record(tags);
+            r.set("name", name);
+            app.save(r); // `app` here is the transactional app - all or nothing
+        }
+    },
+    (app) => {
+        const tags = app.findCollectionByNameOrId("tags");
+        for (const name of ["urgent", "bug", "feature", "docs"]) {
+            const r = app.findFirstRecordByFilter(
+                "tags",
+                "name = {:name}",
+                { name },
+            );
+            if (r) app.delete(r);
+        }
+    },
+);
+```
+
+**CLI commands (same as Go migrations):**
+
+```bash
+./pocketbase migrate create "add_audit_collection"  # templated blank file
+./pocketbase migrate up                              # apply pending
+./pocketbase migrate down 1                          # revert last
+./pocketbase migrate history-sync                    # reconcile _migrations table
+```
+
+**Rules:**
+- **Filename format**: `<unix_timestamp>_<description>.js`. The timestamp sets ordering. Never renumber a committed file.
+- **The `app` argument is transactional**: every migration runs inside its own transaction. Throw to roll back. Do not capture `$app` from the outer scope - use the `app` parameter so the work participates in the tx.
+- **Use the collection API** (`new Collection`, `app.save(collection)`), not raw `ALTER TABLE`. Raw SQL leaves PocketBase's in-memory schema cache stale until the next restart.
+- **Always write the down callback** in development. In production, down migrations are rare but the callback is what makes `migrate down 1` work during emergency rollbacks.
+- **Do not import from other files** - goja has no ES modules, and at migration time the `pb_hooks` loader has not necessarily run. Keep each migration self-contained.
+- **Commit `pb_migrations/` to version control**. Never commit `pb_data/`.
+- **Conflicting with Go migrations**: you can run either Go or JS migrations, not a mix of both in the same project. JSVM migrations are enabled by default; Go migrations require `migratecmd.MustRegister(...)` in `main.go`.
+
+Reference: [Extend with JavaScript - Migrations](https://pocketbase.io/docs/js-migrations/)
+
+## 11. Set Up JSVM (pb_hooks) for Server-Side JavaScript
+
+**Impact: HIGH (Correct setup unlocks hot-reload, type-completion, and the full JSVM API)**
+
+The prebuilt PocketBase executable embeds an ES5 JavaScript engine (goja). Drop `*.pb.js` files into a `pb_hooks` directory next to the executable and they load automatically at startup. Files are loaded in **filename sort order**, and on UNIX platforms the process auto-reloads when any `pb_hooks` file changes.
+
+**Incorrect (TypeScript without transpile, wrong filename, missing types reference):**
+
+```typescript
+// pb_hooks/main.ts  ❌ PocketBase loads ONLY *.pb.js - a .ts file is ignored
+import { something } from "./lib"; // ❌ ES modules not supported in goja
+
+routerAdd("GET", "/hello", (e) => e.json(200, { ok: true }));
+```
+
+```javascript
+// pb_hooks/hooks.js  ❌ wrong extension - must be *.pb.js
+// No /// reference -> editor shows every call as "any"
+onRecordAfterUpdateSuccess((e) => {
+    console.log(e.record.get("email"));
+    // Missing e.next() - stops the execution chain silently
+}, "users");
+```
+
+**Correct (valid filename, types reference, `e.next()` called):**
+
+```javascript
+// pb_hooks/main.pb.js
+/// <reference path="../pb_data/types.d.ts" />
+
+// Hooks defined earlier in the filename sort order run first.
+// Use prefixes like "01_", "10_", "99_" if order matters.
+
+routerAdd("GET", "/api/myapp/hello/{name}", (e) => {
+    const name = e.request.pathValue("name");
+    return e.json(200, { message: "Hello " + name });
+});
+
+onRecordAfterUpdateSuccess((e) => {
+    console.log("user updated:", e.record.get("email"));
+    e.next(); // REQUIRED - otherwise the execution chain is broken
+}, "users");
+```
+
+**Key details:**
+- JS method names are **camelCase** versions of their Go equivalents (`FindRecordById` → `$app.findRecordById`).
+- Errors are thrown as regular JS exceptions, not returned as values.
+- Global objects: `$app` (the app), `$apis` (routing helpers/middlewares), `$os` (OS primitives), `$security` (JWT, random strings, AES), `$filesystem` (file factories), `$dbx` (query builder), `$mails` (email helpers), `__hooks` (absolute path to `pb_hooks`).
+- `pb_data/types.d.ts` is regenerated automatically - commit the triple-slash reference but not the file itself if you prefer.
+- Auto-reload on file change works on UNIX only. On Windows, restart the process manually.
+
+Reference: [Extend with JavaScript - Overview](https://pocketbase.io/docs/js-overview/)
+
+## 12. Load Shared Code with CommonJS require() in pb_hooks
+
+**Impact: MEDIUM (Correct module usage prevents require() failures, race conditions, and ESM import errors)**
+
+The embedded JSVM (goja) supports **only CommonJS** (`require()`). ES module `import` syntax is not supported without pre-bundling. Modules use a shared registry — they are evaluated once and cached, so avoid mutable module-level state to prevent race conditions across concurrent requests.
+
+**Incorrect (ESM imports, mutable shared state, Node.js APIs):**
+
+```javascript
+// ❌ ESM import syntax — not supported by goja
+import { sendEmail } from "./utils.js";
+
+// ❌ Node.js APIs don't exist in the JSVM sandbox
+const fs = require("fs");
+fs.writeFileSync("output.txt", "hello"); // ReferenceError
+
+// ❌ Mutable module-level state is shared across concurrent requests
+// pb_hooks/counter.js
+let requestCount = 0;
+module.exports = { increment: () => ++requestCount }; // race condition
+```
+
+**Correct (CommonJS require, stateless helpers, JSVM bindings for OS/file ops):**
+
+```javascript
+// pb_hooks/utils.js  — stateless helper module
+module.exports = {
+    formatDate: (d) => new Date(d).toISOString().slice(0, 10),
+    validateEmail: (addr) => /^[^@]+@[^@]+\.[^@]+$/.test(addr),
+};
+
+// pb_hooks/main.pb.js
+/// <reference path="../pb_data/types.d.ts" />
+
+onRecordAfterCreateSuccess((e) => {
+    const utils = require(`${__hooks}/utils.js`);
+    const date = utils.formatDate(e.record.get("created"));
+    console.log("Record created on:", date);
+    e.next();
+}, "posts");
+
+// Use $os.* for file system operations (not Node.js fs)
+routerAdd("GET", "/api/myapp/read-config", (e) => {
+    const raw = $os.readFile(`${__hooks}/config.json`);
+    const cfg = JSON.parse(raw);
+    return e.json(200, { name: cfg.appName });
+});
+
+// Use $filesystem.s3(...) or $filesystem.local(...) for storage (v0.36.4+)
+routerAdd("POST", "/api/myapp/upload", (e) => {
+    const bucket = $filesystem.s3({
+        endpoint: "s3.amazonaws.com",
+        bucket:   "my-bucket",
+        region:   "us-east-1",
+        accessKey: $app.settings().s3.accessKey,
+        secret:    $app.settings().s3.secret,
+    });
+    // ... use bucket to store/retrieve files
+    return e.json(200, { ok: true });
+}, $apis.requireAuth());
+```
+
+**Using third-party CJS packages:**
+
+```javascript
+// node_modules/ is searched automatically alongside __hooks.
+// Install packages with npm next to the pb_hooks directory, then require by name.
+onBootstrap((e) => {
+    e.next();
+    // Only CJS-compatible packages work without bundling
+    const slugify = require("slugify");
+    console.log(slugify("Hello World")); // "Hello-World"
+});
+```
+
+**Using ESM-only packages (bundle to CJS first):**
+
+```bash
+# Bundle an ESM package to CJS with rollup before committing it to pb_hooks
+npx rollup node_modules/some-esm-pkg/index.js \
+  --file pb_hooks/vendor/some-esm-pkg.js \
+  --format cjs
+```
+
+```javascript
+onBootstrap((e) => {
+    e.next();
+    const pkg = require(`${__hooks}/vendor/some-esm-pkg.js`);
+});
+```
+
+**JSVM engine limitations:**
+- No `setTimeout` / `setInterval` — no async scheduling inside handlers.
+- No Node.js APIs (`fs`, `Buffer`, `process`, etc.) — use `$os.*` and `$filesystem.*` JSVM bindings instead.
+- No browser APIs (`fetch`, `window`, `localStorage`) — use `$app.newHttpClient()` for outbound HTTP requests.
+- ES6 is mostly supported but not fully spec-compliant (goja engine).
+- The prebuilt PocketBase executable starts a **pool of 15 JS runtimes** by default; adjust with `--hooksPool=N` for high-concurrency workloads (more runtimes = more memory, better throughput).
+- `nullString()`, `nullInt()`, `nullFloat()`, `nullBool()`, `nullArray()`, `nullObject()` helpers are available (v0.35.0+) for scanning nullable DB columns safely.
+
+Reference: [Extend with JavaScript - Loading modules](https://pocketbase.io/docs/js-overview/#loading-modules)
+
+## 13. Avoid Capturing Variables Outside JSVM Handler Scope
+
+**Impact: HIGH (Variables defined outside a handler are undefined at runtime due to handler serialization)**
+
+Each JSVM handler (hook, route, middleware) is **serialized and executed as an isolated program**. Variables or functions declared at the module/file scope are NOT accessible inside handler bodies. This is the most common source of `undefined` errors in `pb_hooks` code.
+
+**Incorrect (accessing outer-scope variable inside handler):**
+
+```javascript
+// pb_hooks/main.pb.js
+const APP_NAME = "myapp"; // ❌ will be undefined inside handlers
+
+onBootstrap((e) => {
+    e.next();
+    console.log(APP_NAME); // ❌ undefined — APP_NAME is not in handler scope
+});
+
+// ❌ Even $app references captured here may not work as expected
+const helper = (id) => $app.findRecordById("posts", id);
+
+onRecordAfterCreateSuccess((e) => {
+    helper(e.record.id); // ❌ helper is undefined inside the handler
+}, "posts");
+```
+
+**Correct (move shared state into a required module, or use `$app`/`e.app` directly):**
+
+```javascript
+// pb_hooks/config.js  — stateless CommonJS module
+module.exports = {
+    APP_NAME: "myapp",
+    MAX_RETRIES: 3,
+};
+
+// pb_hooks/main.pb.js
+/// <reference path="../pb_data/types.d.ts" />
+
+onBootstrap((e) => {
+    e.next();
+    // Load the shared module INSIDE the handler
+    const config = require(`${__hooks}/config.js`);
+    console.log(config.APP_NAME); // ✅ "myapp"
+});
+
+routerAdd("GET", "/api/myapp/status", (e) => {
+    const config = require(`${__hooks}/config.js`);
+    return e.json(200, { app: config.APP_NAME });
+});
+
+onRecordAfterCreateSuccess((e) => {
+    // Access the app directly via e.app inside the handler
+    const post = e.app.findRecordById("posts", e.record.id);
+    e.next();
+}, "posts");
+```
+
+**Key rules:**
+- Every handler body is serialized to a string and executed in its own isolated goja runtime context. There is no shared global state between handlers at runtime.
+- `require()` loads modules from a **shared registry** — modules are evaluated once and cached. Keep module-level code stateless; avoid mutable module exports to prevent data races under concurrent requests.
+- `__hooks` is always available inside handlers and resolves to the absolute path of the `pb_hooks` directory.
+- Error stack trace line numbers may not be accurate because of the handler serialization — log meaningful context manually when debugging.
+- Workaround for simple constants: move them to a `config.js` module and `require()` it inside each handler that needs it.
+
+Reference: [Extend with JavaScript - Handlers scope](https://pocketbase.io/docs/js-overview/#handlers-scope)
+
+## 14. Send Email via app.NewMailClient, Never the Default example.com Sender
+
+**Impact: HIGH (Default sender is no-reply@example.com; shipping it bounces every email and damages your SMTP reputation)**
+
+PocketBase ships with a mailer accessible through `app.NewMailClient()` (Go) or `$app.newMailClient()` (JS). It reads the SMTP settings configured in **Admin UI → Settings → Mail settings**, or falls back to a local `sendmail`-like client if SMTP is not configured. Two things bite people: (1) the default `Meta.senderAddress` is `no-reply@example.com` - shipping with that bounces every email and poisons your sender reputation; (2) there is no connection pooling, so long-lived mail client handles are **not** safe to share across requests - create one per send.
+
+**Incorrect (default sender, shared client, no error handling):**
+
+```go
+// ❌ Default sender is example.com, and this mailer instance is captured
+//    for the process lifetime - SMTP connections go stale
+var mailer = app.NewMailClient()
+
+app.OnRecordAfterCreateSuccess("orders").BindFunc(func(e *core.RecordEvent) error {
+    msg := &mailer.Message{
+        From:    mail.Address{Address: "no-reply@example.com"}, // ❌
+        To:      []mail.Address{{Address: e.Record.GetString("email")}},
+        Subject: "Order confirmed",
+        HTML:    "<p>Thanks</p>",
+    }
+    mailer.Send(msg) // ❌ error swallowed
+    return e.Next()
+})
+```
+
+**Correct (sender from settings, per-send client, explicit error path):**
+
+```go
+import (
+    "net/mail"
+    pbmail "github.com/pocketbase/pocketbase/tools/mailer"
+)
+
+app.OnRecordAfterCreateSuccess("orders").BindFunc(func(e *core.RecordEvent) error {
+    // IMPORTANT: resolve the sender from settings at send-time, not at
+    // startup - an admin can change it live from the UI
+    meta := e.App.Settings().Meta
+    from := mail.Address{
+        Name:    meta.SenderName,
+        Address: meta.SenderAddress,
+    }
+
+    msg := &pbmail.Message{
+        From:    from,
+        To:      []mail.Address{{Address: e.Record.GetString("email")}},
+        Subject: "Order confirmed",
+        HTML:    renderOrderEmail(e.Record), // your template function
+    }
+
+    // Create the client per send - avoids stale TCP sessions
+    if err := e.App.NewMailClient().Send(msg); err != nil {
+        e.App.Logger().Error("order email send failed",
+            "err",      err,
+            "recordId", e.Record.Id,
+        )
+        // Do NOT return the error - a failed email should not roll back the order
+    }
+    return e.Next()
+})
+```
+
+```javascript
+// JSVM - $mails global exposes message factories
+onRecordAfterCreateSuccess((e) => {
+    const meta = $app.settings().meta;
+
+    const message = new MailerMessage({
+        from: {
+            address: meta.senderAddress,
+            name:    meta.senderName,
+        },
+        to:      [{ address: e.record.get("email") }],
+        subject: "Order confirmed",
+        html:    `<p>Thanks for order ${e.record.id}</p>`,
+    });
+
+    try {
+        $app.newMailClient().send(message);
+    } catch (err) {
+        $app.logger().error("order email send failed", "err", err, "id", e.record.id);
+        // swallow - do not rollback the order
+    }
+    e.next();
+}, "orders");
+```
+
+**Templated emails via the built-in verification/reset templates:**
+
+```go
+// PocketBase has baked-in templates for verification, password reset, and
+// email change. Trigger them via apis.*Request helpers rather than building
+// your own message:
+//   apis.RecordRequestPasswordReset(app, authRecord)
+//   apis.RecordRequestVerification(app, authRecord)
+//   apis.RecordRequestEmailChange(app, authRecord, newEmail)
+//
+// These use the templates configured in Admin UI → Settings → Mail templates.
+```
+
+**Rules:**
+- **Always change `Meta.SenderAddress`** before shipping. In development, use Mailpit or MailHog; in production, use a verified domain that matches your SPF/DKIM records.
+- **Resolve the sender from `app.Settings().Meta` at send-time**, not at startup. Settings are mutable from the admin UI.
+- **Create the client per send** (`app.NewMailClient()` / `$app.newMailClient()`). It is cheap - it re-reads the SMTP settings each time, so config changes take effect without a restart.
+- **Never return a send error from a hook** unless the user's action genuinely depends on the email going out. Email failure is common (transient SMTP, address typo) and should not roll back a business transaction.
+- **Log failures with context** (record id, recipient domain) so you can grep them later. PocketBase does not retry failed sends.
+- **For bulk sending, queue it**. The mailer is synchronous - looping `Send()` over 10k records blocks the request. Push to a cron-drained queue collection instead.
+- **Template rendering**: Go users should use `html/template`; JS users can use template literals or pull in a tiny template lib. PocketBase itself only renders templates for its baked-in flows.
+
+Reference: [Go Mailer](https://pocketbase.io/docs/go-sending-emails/) · [JS Mailer](https://pocketbase.io/docs/js-sending-emails/)
+
+## 15. Register Custom Routes Safely with Built-in Middlewares
+
+**Impact: HIGH (Protects custom endpoints with auth, avoids /api path collisions, inherits rate limiting)**
+
+PocketBase routing is built on top of `net/http.ServeMux`. Custom routes are registered inside the `OnServe()` hook (Go) or via `routerAdd()` / `routerUse()` (JSVM). **Always** namespace custom routes under `/api/{yourapp}/...` to avoid colliding with built-in endpoints, and attach `apis.RequireAuth()` / `$apis.requireAuth()` (or stricter) to anything that is not meant to be public.
+
+**Incorrect (path collision, no auth, raw ResponseWriter):**
+
+```go
+// ❌ "/api/records" collides with /api/collections/{name}/records built-in
+se.Router.POST("/api/records", func(e *core.RequestEvent) error {
+    // ❌ no auth check - anyone can call this
+    // ❌ returns raw text; no content-type
+    e.Response.Write([]byte("ok"))
+    return nil
+})
+```
+
+**Correct (namespaced, authenticated, group-scoped middleware):**
+
+```go
+app.OnServe().BindFunc(func(se *core.ServeEvent) error {
+    // Group everything under /api/myapp/ and require auth for the entire group
+    g := se.Router.Group("/api/myapp")
+    g.Bind(apis.RequireAuth())                  // authenticated users only
+    g.Bind(apis.Gzip())                         // compress responses
+    g.Bind(apis.BodyLimit(10 << 20))            // per-route override of default 32MB limit
+
+    g.GET("/profile", func(e *core.RequestEvent) error {
+        return e.JSON(http.StatusOK, map[string]any{
+            "id":    e.Auth.Id,
+            "email": e.Auth.GetString("email"),
+        })
+    })
+
+    // Superuser-only admin endpoint
+    g.POST("/admin/rebuild-index", func(e *core.RequestEvent) error {
+        // ... do the work
+        return e.JSON(http.StatusOK, map[string]bool{"ok": true})
+    }).Bind(apis.RequireSuperuserAuth())
+
+    // Resource the owner (or a superuser) can access
+    g.GET("/users/{id}/private", func(e *core.RequestEvent) error {
+        return e.JSON(http.StatusOK, map[string]string{"private": "data"})
+    }).Bind(apis.RequireSuperuserOrOwnerAuth("id"))
+
+    return se.Next()
+})
+```
+
+```javascript
+// JSVM
+routerAdd("GET", "/api/myapp/profile", (e) => {
+    return e.json(200, {
+        id: e.auth.id,
+        email: e.auth.getString("email"),
+    });
+}, $apis.requireAuth());
+
+routerAdd("POST", "/api/myapp/admin/rebuild-index", (e) => {
+    return e.json(200, { ok: true });
+}, $apis.requireSuperuserAuth());
+```
+
+**Built-in middlewares (Go: `apis.*`, JS: `$apis.*`):**
+
+| Middleware | Use |
+|---|---|
+| `RequireGuestOnly()` | Reject authenticated clients (e.g. public signup forms) |
+| `RequireAuth(...collections)` | Require any auth record; optionally restrict to specific auth collections |
+| `RequireSuperuserAuth()` | Alias for `RequireAuth("_superusers")` |
+| `RequireSuperuserOrOwnerAuth("id")` | Allow superusers OR the auth record whose id matches the named path param |
+| `Gzip()` | Gzip-compress the response |
+| `BodyLimit(bytes)` | Override the default 32MB request body cap (0 = no limit) |
+| `SkipSuccessActivityLog()` | Suppress activity log for successful responses |
+
+**Path details:**
+- Patterns follow `net/http.ServeMux`: `{name}` = single segment, `{name...}` = catch-all.
+- A trailing `/` acts as a prefix wildcard; use `{$}` to anchor to the exact path only.
+- **Always** prefix custom routes with `/api/{yourapp}/` - do not put them under `/api/` alone, which collides with built-in collection / realtime / settings endpoints.
+- Order: global middlewares → group middlewares → route middlewares → handler. Use negative priorities to run before built-ins if needed.
+
+Reference: [Go Routing](https://pocketbase.io/docs/go-routing/) · [JS Routing](https://pocketbase.io/docs/js-routing/)
+
+## 16. Read Settings via app.Settings(), Encrypt at Rest with PB_ENCRYPTION
+
+**Impact: HIGH (Hardcoded secrets and unencrypted settings storage are the #1 source of credential leaks)**
+
+PocketBase stores every runtime-mutable setting (SMTP credentials, S3 keys, OAuth2 client secrets, JWT secrets for each auth collection) in the `_params` table as JSON. Admin UI edits write to the same place. There are two knobs that matter: (1) **how you read settings from Go/JS** - always via `app.Settings()` at call time, never captured at startup; (2) **how they are stored on disk** - set the `PB_ENCRYPTION` env var to a 32-char key so the whole blob is encrypted at rest. Without encryption, anyone with a copy of `data.db` has your SMTP password, OAuth2 secrets, and every collection's signing key.
+
+**Incorrect (hardcoded secret, captured at startup, unencrypted at rest):**
+
+```go
+// ❌ Secret compiled into the binary - leaks via `strings ./pocketbase`
+const slackWebhook = "https://hooks.slack.com/services/T00/B00/XXXX"
+
+// ❌ Captured once at startup - if an admin rotates the SMTP password via the
+//    UI, this stale value keeps trying until restart
+var smtpHost = app.Settings().SMTP.Host
+
+// ❌ No PB_ENCRYPTION set - `sqlite3 pb_data/data.db "SELECT * FROM _params"`
+//    prints every secret in plaintext
+./pocketbase serve
+```
+
+**Correct (env + settings lookup at call time + encryption at rest):**
+
+```bash
+# Generate a 32-char encryption key once and store it in your secrets manager
+# (1Password, SOPS, AWS SSM, etc). Commit NOTHING related to this value.
+openssl rand -hex 16    # 32 hex chars
+
+# Start with the key exported - PocketBase AES-encrypts _params on write
+# and decrypts on read. Losing the key == losing access to settings.
+export PB_ENCRYPTION="3a7c...deadbeef32charsexactly"
+./pocketbase serve
+```
+
+```go
+// Reading mutable settings at call time - reflects live UI changes
+func notifyAdmin(app core.App, msg string) error {
+    meta := app.Settings().Meta
+    from := mail.Address{Name: meta.SenderName, Address: meta.SenderAddress}
+    // ...
+}
+
+// Mutating settings programmatically (e.g. during a migration)
+settings := app.Settings()
+settings.Meta.AppName = "MyApp"
+settings.SMTP.Enabled = true
+settings.SMTP.Host = os.Getenv("SMTP_HOST") // inject from env at write time
+if err := app.Save(settings); err != nil {
+    return err
+}
+```
+
+```javascript
+// JSVM
+onBootstrap((e) => {
+    e.next();
+
+    const settings = $app.settings();
+    settings.meta.appName = "MyApp";
+    $app.save(settings);
+});
+
+// At send-time
+const meta = $app.settings().meta;
+```
+
+**Secrets that do NOT belong in `app.Settings()`:**
+
+- Database encryption key itself → `PB_ENCRYPTION` env var (not in the DB, obviously)
+- Third-party webhooks your code calls (Slack, Stripe, etc) → env vars, read via `os.Getenv` / `$os.getenv`
+- CI tokens, deploy keys → your secrets manager, not PocketBase
+
+`app.Settings()` is for things an **admin** should be able to rotate through the UI. Everything else lives in env vars, injected by your process supervisor (systemd, Docker, Kubernetes).
+
+**Key details:**
+- **`PB_ENCRYPTION` must be exactly 32 characters.** Anything else crashes at startup.
+- **Losing the key is unrecoverable** - the settings blob cannot be decrypted, and the server refuses to boot. Back up the key alongside (but separately from) your `pb_data` backups.
+- **Rotating the key**: start with the old key set, call `app.Settings()` → `app.Save(settings)` to re-encrypt under the new key, then restart with the new key. Do this under a maintenance window.
+- **Settings changes fire `OnSettingsReload`** - use it if you have in-memory state that depends on a setting (e.g. a rate limiter sized from `app.Settings().RateLimits.Default`).
+- **Do not call `app.Settings()` in a hot loop.** It returns a fresh copy each time. Cache for the duration of a single request, not the process.
+- **`app.Save(settings)`** persists and broadcasts the reload event. Mutating the returned struct without saving is a no-op.
+
+Reference: [Settings](https://pocketbase.io/docs/going-to-production/#use-encryption-for-the-pb_data-settings) · [OnSettingsReload hook](https://pocketbase.io/docs/go-event-hooks/#app-hooks)
+
+## 17. Test Hooks and Routes with tests.NewTestApp and ApiScenario
+
+**Impact: HIGH (Without the tests package you cannot exercise hooks, middleware, and transactions in isolation)**
+
+PocketBase ships a `tests` package specifically for integration-testing Go extensions. `tests.NewTestApp(testDataDir)` builds a fully-wired `core.App` over a **temp copy** of your test data directory, so you can register hooks, fire requests through the real router, and assert on the resulting DB state without spinning up a real HTTP server or touching `pb_data/`. The `tests.ApiScenario` struct drives the router the same way a real HTTP client would, including middleware and transactions. Curl-based shell tests cannot do either of these things.
+
+**Incorrect (hand-rolled HTTP client, shared dev DB, no hook reset):**
+
+```go
+// ❌ Hits the actual dev server - depends on side-effects from a previous run
+func TestCreatePost(t *testing.T) {
+    resp, _ := http.Post("http://localhost:8090/api/collections/posts/records",
+        "application/json",
+        strings.NewReader(`{"title":"hi"}`))
+    if resp.StatusCode != 200 {
+        t.Fatal("bad status")
+    }
+    // ❌ No DB assertion, no cleanup, no hook verification
+}
+```
+
+**Correct (NewTestApp + ApiScenario + AfterTestFunc assertions):**
+
+```go
+// internal/app/posts_test.go
+package app_test
+
+import (
+    "net/http"
+    "strings"
+    "testing"
+
+    "github.com/pocketbase/pocketbase/core"
+    "github.com/pocketbase/pocketbase/tests"
+
+    "myapp/internal/hooks" // your hook registration
+)
+
+// testDataDir is a checked-in pb_data snapshot with your collections.
+// Create it once with `./pocketbase --dir ./test_pb_data migrate up`
+// and commit it to your test fixtures.
+const testDataDir = "../../test_pb_data"
+
+func TestCreatePostFiresAudit(t *testing.T) {
+    // Each test gets its own copy of testDataDir - parallel-safe
+    app, err := tests.NewTestApp(testDataDir)
+    if err != nil {
+        t.Fatal(err)
+    }
+    defer app.Cleanup() // REQUIRED - removes the temp copy
+
+    // Register the hook under test against this isolated app
+    hooks.RegisterPostHooks(app)
+
+    scenario := tests.ApiScenario{
+        Name:   "POST /api/collections/posts/records as verified user",
+        Method: http.MethodPost,
+        URL:    "/api/collections/posts/records",
+        Body:   strings.NewReader(`{"title":"hello","slug":"hello"}`),
+        Headers: map[string]string{
+            "Authorization": testAuthHeader(app, "users", "alice@example.com"),
+            "Content-Type":  "application/json",
+        },
+        ExpectedStatus: 200,
+        ExpectedContent: []string{
+            `"title":"hello"`,
+            `"slug":"hello"`,
+        },
+        NotExpectedContent: []string{
+            `"internalNotes"`, // the enrich hook should hide this
+        },
+        ExpectedEvents: map[string]int{
+            "OnRecordCreateRequest":       1,
+            "OnRecordAfterCreateSuccess":  1,
+            "OnRecordEnrich":              1,
+        },
+        AfterTestFunc: func(t testing.TB, app *tests.TestApp, res *http.Response) {
+            // Assert side-effects in the DB using the SAME app instance
+            audits, err := app.FindRecordsByFilter(
+                "audit",
+                "action = 'post.create'",
+                "-created", 10, 0,
+            )
+            if err != nil {
+                t.Fatal(err)
+            }
+            if len(audits) != 1 {
+                t.Fatalf("expected 1 audit record, got %d", len(audits))
+            }
+        },
+        TestAppFactory: func(t testing.TB) *tests.TestApp { return app },
+    }
+
+    scenario.Test(t)
+}
+```
+
+**Table-driven variant (authz matrix):**
+
+```go
+func TestPostsListAuthz(t *testing.T) {
+    for _, tc := range []struct {
+        name   string
+        auth   string  // "", "users:alice", "users:bob", "_superusers:root"
+        expect int
+    }{
+        {"guest gets public posts",       "",                200},
+        {"authed gets own + public",      "users:alice",     200},
+        {"superuser sees everything",     "_superusers:root",200},
+    } {
+        t.Run(tc.name, func(t *testing.T) {
+            app, _ := tests.NewTestApp(testDataDir)
+            defer app.Cleanup()
+            hooks.RegisterPostHooks(app)
+
+            tests.ApiScenario{
+                Method:         http.MethodGet,
+                URL:            "/api/collections/posts/records",
+                Headers:        authHeaderFor(app, tc.auth),
+                ExpectedStatus: tc.expect,
+                TestAppFactory: func(t testing.TB) *tests.TestApp { return app },
+            }.Test(t)
+        })
+    }
+}
+```
+
+**Unit-testing a hook in isolation (no HTTP layer):**
+
+```go
+func TestAuditHookRollsBackOnAuditFailure(t *testing.T) {
+    app, _ := tests.NewTestApp(testDataDir)
+    defer app.Cleanup()
+    hooks.RegisterPostHooks(app)
+
+    // Delete the audit collection so the hook's Save fails
+    audit, _ := app.FindCollectionByNameOrId("audit")
+    _ = app.Delete(audit)
+
+    col, _ := app.FindCollectionByNameOrId("posts")
+    post := core.NewRecord(col)
+    post.Set("title", "should rollback")
+    post.Set("slug", "rollback")
+
+    if err := app.Save(post); err == nil {
+        t.Fatal("expected Save to fail because audit hook errored")
+    }
+
+    // Assert the post was NOT persisted (tx rolled back)
+    _, err := app.FindFirstRecordByFilter("posts", "slug = 'rollback'", nil)
+    if err == nil {
+        t.Fatal("post should not exist after rollback")
+    }
+}
+```
+
+**Rules:**
+- **Always `defer app.Cleanup()`** - otherwise temp directories leak under `/tmp`.
+- **Use a checked-in `test_pb_data/` fixture** with the collections you need. Do not depend on the dev `pb_data/` - tests must be hermetic.
+- **Register hooks against the test app**, not against a package-level `app` singleton. The test app is a fresh instance each time.
+- **`ExpectedEvents`** asserts that specific hooks fired the expected number of times - use it to catch "hook silently skipped because someone forgot `e.Next()`" regressions.
+- **`AfterTestFunc`** runs with the same app instance the scenario used, so you can query the DB to verify side-effects.
+- **Parallelize with `t.Parallel()`** - `NewTestApp` gives each goroutine its own copy, so there's no shared state.
+- **Tests run pure-Go SQLite** (`modernc.org/sqlite`) - no CGO, no extra setup, works on `go test ./...` out of the box.
+- **For JSVM**, there is no equivalent test harness yet - test pb_hooks by booting `tests.NewTestApp` with the `pb_hooks/` directory populated and exercising the router from Go. Pure-JS unit testing of hook bodies requires extracting the logic into a `require()`able module.
+
+Reference: [Testing](https://pocketbase.io/docs/go-testing/) · [tests package GoDoc](https://pkg.go.dev/github.com/pocketbase/pocketbase/tests)
+
+## 18. Use RunInTransaction with the Scoped txApp, Never the Outer App
+
+**Impact: CRITICAL (Mixing scoped and outer app inside a transaction silently deadlocks or writes outside the tx)**
+
+`app.RunInTransaction` (Go) and `$app.runInTransaction` (JS) wrap a block of work in a SQLite write transaction. The callback receives a **transaction-scoped app instance** (`txApp` / `txApp`). Every database call inside the block must go through that scoped instance - reusing the outer `app` / `$app` bypasses the transaction (silent partial writes) or deadlocks (SQLite allows only one writer).
+
+**Incorrect (outer `app` used inside the tx block):**
+
+```go
+// ❌ Uses the outer app for the second Save - deadlocks on the writer lock
+err := app.RunInTransaction(func(txApp core.App) error {
+    user := core.NewRecord(usersCol)
+    user.Set("email", "a@b.co")
+    if err := txApp.Save(user); err != nil {
+        return err
+    }
+
+    audit := core.NewRecord(auditCol)
+    audit.Set("user", user.Id)
+    return app.Save(audit) // ❌ NOT txApp - blocks forever
+})
+```
+
+**Correct (always `txApp` inside the block, return errors to roll back):**
+
+```go
+err := app.RunInTransaction(func(txApp core.App) error {
+    user := core.NewRecord(usersCol)
+    user.Set("email", "a@b.co")
+    if err := txApp.Save(user); err != nil {
+        return err // rollback
+    }
+
+    audit := core.NewRecord(auditCol)
+    audit.Set("user", user.Id)
+    if err := txApp.Save(audit); err != nil {
+        return err // rollback
+    }
+    return nil // commit
+})
+if err != nil {
+    return err
+}
+```
+
+```javascript
+// JSVM - the callback receives the transactional app
+$app.runInTransaction((txApp) => {
+    const user = new Record(txApp.findCollectionByNameOrId("users"));
+    user.set("email", "a@b.co");
+    txApp.save(user);
+
+    const audit = new Record(txApp.findCollectionByNameOrId("audit"));
+    audit.set("user", user.id);
+    txApp.save(audit);
+
+    // throw anywhere in this block to roll back the whole tx
+});
+```
+
+**Rules of the transaction:**
+- **Use only `txApp` / the callback's scoped app** inside the block. Capturing the outer `app` defeats the purpose and can deadlock.
+- Inside event hooks, `e.App` is already the transactional app when the hook fires inside a tx - prefer it over a captured parent-scope `app` for the same reason.
+- Return an error (Go) or `throw` (JS) to roll back. A successful return commits.
+- SQLite serializes writers - keep transactions **short**. Do not make HTTP calls, send emails, or wait on external systems inside the block.
+- Do not start a transaction inside another transaction on the same app - nested `RunInTransaction` on `txApp` is supported and reuses the existing transaction, but nested calls on the outer `app` will deadlock.
+- Hooks (`OnRecordAfterCreateSuccess`, etc.) fired from a `Save` inside a tx run **inside that tx**. Anything they do through `e.App` participates in the rollback; anything they do through a captured outer `app` does not.
+
+Reference: [Go database](https://pocketbase.io/docs/go-database/#transaction) · [JS database](https://pocketbase.io/docs/js-database/#transaction)
+
diff --git a/.claude/skills/pocketbase-best-practices/rules/_sections.md b/.claude/skills/pocketbase-best-practices/rules/_sections.md
new file mode 100644
index 0000000..f7bd086
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/_sections.md
@@ -0,0 +1,41 @@
+# Section Definitions
+
+This file defines the rule categories for PocketBase best practices. Rules are automatically assigned to sections based on their filename prefix.
+
+---
+
+## 1. Collection Design (coll)
+**Impact:** CRITICAL
+**Description:** Schema design, field types, relations, indexes, and collection type selection. Foundation for application architecture and long-term maintainability.
+
+## 2. API Rules & Security (rules)
+**Impact:** CRITICAL
+**Description:** Access control rules, filter expressions, request context usage, and security patterns. Critical for protecting data and enforcing authorization.
+
+## 3. Authentication (auth)
+**Impact:** CRITICAL
+**Description:** Password authentication, OAuth2 integration, token management, MFA setup, and auth collection configuration.
+
+## 4. SDK Usage (sdk)
+**Impact:** HIGH
+**Description:** JavaScript SDK initialization, auth store patterns, error handling, request cancellation, and safe parameter binding.
+
+## 5. Query Performance (query)
+**Impact:** HIGH
+**Description:** Pagination strategies, relation expansion, field selection, batch operations, and N+1 query prevention.
+
+## 6. Realtime (realtime)
+**Impact:** MEDIUM
+**Description:** SSE subscriptions, event handling, connection management, and authentication with realtime.
+
+## 7. File Handling (file)
+**Impact:** MEDIUM
+**Description:** File uploads, URL generation, thumbnail creation, and validation patterns.
+
+## 8. Production & Deployment (deploy)
+**Impact:** LOW-MEDIUM
+**Description:** Backup strategies, configuration management, reverse proxy setup, and SQLite optimization.
+
+## 9. Server-Side Extending (ext)
+**Impact:** HIGH
+**Description:** Extending PocketBase with Go or embedded JavaScript (JSVM) - event hooks, custom routes, transactions, cron jobs, filesystem, migrations, and safe server-side filter binding.
diff --git a/.claude/skills/pocketbase-best-practices/rules/_template.md b/.claude/skills/pocketbase-best-practices/rules/_template.md
new file mode 100644
index 0000000..4bb2819
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/_template.md
@@ -0,0 +1,33 @@
+---
+title: Clear, Action-Oriented Title (e.g., "Use Cursor-Based Pagination for Large Lists")
+impact: MEDIUM
+impactDescription: Brief description of performance/security impact
+tags: relevant, comma-separated, tags
+---
+
+## [Rule Title]
+
+[1-2 sentence explanation of the problem and why it matters. Focus on impact.]
+
+**Incorrect (describe the problem):**
+
+```javascript
+// Comment explaining what makes this problematic
+const result = await pb.collection('posts').getList();
+// Problem explanation
+```
+
+**Correct (describe the solution):**
+
+```javascript
+// Comment explaining why this is better
+const result = await pb.collection('posts').getList(1, 20, {
+  filter: 'published = true',
+  sort: '-created'
+});
+// Benefit explanation
+```
+
+[Optional: Additional context, edge cases, or trade-offs]
+
+Reference: [PocketBase Docs](https://pocketbase.io/docs/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/auth-impersonation.md b/.claude/skills/pocketbase-best-practices/rules/auth-impersonation.md
new file mode 100644
index 0000000..f7e9ba6
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/auth-impersonation.md
@@ -0,0 +1,121 @@
+---
+title: Use Impersonation for Admin Operations
+impact: MEDIUM
+impactDescription: Safe admin access to user data without password sharing
+tags: authentication, admin, impersonation, superuser
+---
+
+## Use Impersonation for Admin Operations
+
+Impersonation allows superusers to generate tokens for other users, enabling admin support tasks and API key functionality without sharing passwords.
+
+**Incorrect (sharing credentials or bypassing auth):**
+
+```javascript
+// Bad: sharing user passwords for support
+async function helpUser(userId, userPassword) {
+  await pb.collection('users').authWithPassword(userEmail, userPassword);
+  // Support team knows user's password!
+}
+
+// Bad: directly modifying records without proper context
+async function fixUserData(userId) {
+  // Bypasses user's perspective and rules
+  await pb.collection('posts').update(postId, { fixed: true });
+}
+```
+
+**Correct (using impersonation):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+// Admin client with superuser auth (use environment variables, never hardcode)
+const adminPb = new PocketBase(process.env.PB_URL);
+await adminPb.collection('_superusers').authWithPassword(
+  process.env.PB_SUPERUSER_EMAIL,
+  process.env.PB_SUPERUSER_PASSWORD
+);
+
+async function impersonateUser(userId) {
+  // Generate impersonation token (non-renewable)
+  const impersonatedClient = await adminPb
+    .collection('users')
+    .impersonate(userId, 3600);  // 1 hour duration
+
+  // impersonatedClient has user's auth context
+  console.log('Acting as:', impersonatedClient.authStore.record.email);
+
+  // Operations use user's permissions
+  const userPosts = await impersonatedClient.collection('posts').getList();
+
+  return impersonatedClient;
+}
+
+// Use case: Admin viewing user's data
+async function adminViewUserPosts(userId) {
+  const userClient = await impersonateUser(userId);
+
+  // See exactly what the user sees (respects API rules)
+  const posts = await userClient.collection('posts').getList();
+
+  return posts;
+}
+
+// Use case: API keys for server-to-server communication
+async function createApiKey(serviceUserId) {
+  // Create a service impersonation token (use short durations, rotate regularly)
+  const serviceClient = await adminPb
+    .collection('service_accounts')
+    .impersonate(serviceUserId, 86400);  // 24 hours max, rotate via scheduled task
+
+  // Return token for service to use
+  return serviceClient.authStore.token;
+}
+
+// Using API key token in another service
+async function useApiKey(apiToken) {
+  const pb = new PocketBase('http://127.0.0.1:8090');
+
+  // Manually set the token
+  pb.authStore.save(apiToken, null);
+
+  // Now requests use the service account's permissions
+  const data = await pb.collection('data').getList();
+  return data;
+}
+```
+
+**Important considerations:**
+
+```javascript
+// Impersonation tokens are non-renewable
+const client = await adminPb.collection('users').impersonate(userId, 3600);
+
+// This will fail - can't refresh impersonation tokens
+try {
+  await client.collection('users').authRefresh();
+} catch (error) {
+  // Expected: impersonation tokens can't be refreshed
+}
+
+// For continuous access, generate new token when needed
+async function getImpersonatedClient(userId) {
+  // Check if existing token is still valid
+  if (cachedClient?.authStore.isValid) {
+    return cachedClient;
+  }
+
+  // Generate fresh token
+  return await adminPb.collection('users').impersonate(userId, 3600);
+}
+```
+
+**Security best practices:**
+- Use short durations for support tasks
+- Log all impersonation events
+- Restrict impersonation to specific admin roles
+- Never expose impersonation capability in client code
+- Use dedicated service accounts for API keys
+
+Reference: [PocketBase Impersonation](https://pocketbase.io/docs/authentication/#impersonate-authentication)
diff --git a/.claude/skills/pocketbase-best-practices/rules/auth-mfa.md b/.claude/skills/pocketbase-best-practices/rules/auth-mfa.md
new file mode 100644
index 0000000..9574d77
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/auth-mfa.md
@@ -0,0 +1,135 @@
+---
+title: Implement Multi-Factor Authentication
+impact: HIGH
+impactDescription: Additional security layer for sensitive applications
+tags: authentication, mfa, security, 2fa, otp
+---
+
+## Implement Multi-Factor Authentication
+
+MFA requires users to authenticate with two different methods. PocketBase supports OTP (One-Time Password) via email as the second factor.
+
+**Incorrect (single-factor only for sensitive apps):**
+
+```javascript
+// Insufficient for sensitive applications
+async function login(email, password) {
+  const authData = await pb.collection('users').authWithPassword(email, password);
+  // User immediately has full access - no second factor
+  return authData;
+}
+```
+
+**Correct (MFA flow with OTP):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+async function loginWithMFA(email, password) {
+  try {
+    // First factor: password
+    const authData = await pb.collection('users').authWithPassword(email, password);
+
+    // If MFA not required, auth succeeds immediately
+    return { success: true, authData };
+
+  } catch (error) {
+    // MFA required - returns 401 with mfaId
+    if (error.status === 401 && error.response?.mfaId) {
+      return {
+        success: false,
+        mfaRequired: true,
+        mfaId: error.response.mfaId
+      };
+    }
+    throw error;
+  }
+}
+
+async function requestOTP(email) {
+  // Request OTP to be sent via email
+  const result = await pb.collection('users').requestOTP(email);
+
+  // Returns otpId - needed to verify the OTP
+  // Note: Returns otpId even if email doesn't exist (prevents enumeration)
+  return result.otpId;
+}
+
+async function completeMFAWithOTP(mfaId, otpId, otpCode) {
+  try {
+    // Second factor: OTP verification
+    const authData = await pb.collection('users').authWithOTP(
+      otpId,
+      otpCode,
+      { mfaId }  // Include mfaId from first factor
+    );
+
+    return { success: true, authData };
+  } catch (error) {
+    if (error.status === 400) {
+      throw new Error('Invalid or expired code');
+    }
+    throw error;
+  }
+}
+
+// Complete flow example
+async function fullMFAFlow(email, password, otpCode = null) {
+  // Step 1: Password authentication
+  const step1 = await loginWithMFA(email, password);
+
+  if (step1.success) {
+    return step1.authData;  // MFA not required
+  }
+
+  if (step1.mfaRequired) {
+    // Step 2: Request OTP
+    const otpId = await requestOTP(email);
+
+    // Step 3: UI prompts user for OTP code...
+    // (In real app, wait for user input)
+
+    if (otpCode) {
+      // Step 4: Complete MFA
+      const step2 = await completeMFAWithOTP(step1.mfaId, otpId, otpCode);
+      return step2.authData;
+    }
+
+    return { pendingMFA: true, mfaId: step1.mfaId, otpId };
+  }
+}
+```
+
+**Configure MFA (Admin UI or API):**
+
+```javascript
+// Enable MFA on auth collection (superuser only)
+await pb.collections.update('users', {
+  mfa: {
+    enabled: true,
+    duration: 1800,  // MFA session duration (30 min)
+    rule: ''  // When to require MFA (empty = always for all users)
+    // rule: '@request.auth.role = "admin"' // Only for admins
+  },
+  otp: {
+    enabled: true,
+    duration: 300,  // OTP validity (5 min)
+    length: 6,      // OTP code length
+    emailTemplate: {
+      subject: 'Your verification code',
+      body: 'Your code is: {OTP}'
+    }
+  }
+});
+```
+
+**MFA best practices:**
+- Always enable for admin accounts
+- Consider making MFA optional for regular users
+- Use short OTP durations (5-10 minutes)
+- Implement rate limiting on OTP requests
+- Log MFA events for security auditing
+
+Reference: [PocketBase MFA](https://pocketbase.io/docs/authentication/#mfa)
diff --git a/.claude/skills/pocketbase-best-practices/rules/auth-oauth2.md b/.claude/skills/pocketbase-best-practices/rules/auth-oauth2.md
new file mode 100644
index 0000000..5d16abf
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/auth-oauth2.md
@@ -0,0 +1,141 @@
+---
+title: Integrate OAuth2 Providers Correctly
+impact: CRITICAL
+impactDescription: Secure third-party authentication with proper flow handling
+tags: authentication, oauth2, google, github, social-login
+---
+
+## Integrate OAuth2 Providers Correctly
+
+OAuth2 integration should use the all-in-one method for simplicity and security. Manual code exchange should only be used when necessary (e.g., mobile apps with deep links).
+
+**Incorrect (manual implementation without SDK):**
+
+```javascript
+// Don't manually handle OAuth flow
+async function loginWithGoogle() {
+  // Redirect user to Google manually
+  window.location.href = 'https://accounts.google.com/oauth/authorize?...';
+}
+
+// Manual callback handling
+async function handleCallback(code) {
+  // Exchange code manually - error prone!
+  const response = await fetch('/api/auth/callback', {
+    method: 'POST',
+    body: JSON.stringify({ code })
+  });
+}
+```
+
+**Correct (using SDK's all-in-one method):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// All-in-one OAuth2 (recommended for web apps)
+async function loginWithOAuth2(providerName) {
+  try {
+    const authData = await pb.collection('users').authWithOAuth2({
+      provider: providerName,  // 'google', 'github', 'microsoft', etc.
+      // Optional: create new user data if not exists
+      createData: {
+        emailVisibility: true,
+        name: ''  // Will be populated from OAuth provider
+      }
+    });
+
+    console.log('Logged in via', providerName);
+    console.log('User:', authData.record.email);
+    console.log('Is new user:', authData.meta?.isNew);
+
+    return authData;
+  } catch (error) {
+    if (error.isAbort) {
+      console.log('OAuth popup was closed');
+      return null;
+    }
+    throw error;
+  }
+}
+
+// Usage
+document.getElementById('google-btn').onclick = () => loginWithOAuth2('google');
+document.getElementById('github-btn').onclick = () => loginWithOAuth2('github');
+```
+
+**Manual code exchange (for React Native / deep links):**
+
+```javascript
+// Only use when all-in-one isn't possible
+async function loginWithOAuth2Manual() {
+  // Get auth methods - PocketBase provides state and codeVerifier
+  const authMethods = await pb.collection('users').listAuthMethods();
+  const provider = authMethods.oauth2.providers.find(p => p.name === 'google');
+
+  // Store the provider's state and codeVerifier for callback verification
+  // PocketBase generates these for you - don't create your own
+  sessionStorage.setItem('oauth_state', provider.state);
+  sessionStorage.setItem('oauth_code_verifier', provider.codeVerifier);
+
+  // Build the OAuth URL using provider.authURL + redirect
+  const redirectUrl = window.location.origin + '/oauth-callback';
+  const authUrl = provider.authURL + encodeURIComponent(redirectUrl);
+
+  // Redirect to OAuth provider
+  window.location.href = authUrl;
+}
+
+// In your callback handler (e.g., /oauth-callback page):
+async function handleOAuth2Callback() {
+  const params = new URLSearchParams(window.location.search);
+
+  // CSRF protection: verify state matches
+  if (params.get('state') !== sessionStorage.getItem('oauth_state')) {
+    throw new Error('State mismatch - potential CSRF attack');
+  }
+
+  const code = params.get('code');
+  const codeVerifier = sessionStorage.getItem('oauth_code_verifier');
+  const redirectUrl = window.location.origin + '/oauth-callback';
+
+  // Exchange code for auth token
+  const authData = await pb.collection('users').authWithOAuth2Code(
+    'google',
+    code,
+    codeVerifier,
+    redirectUrl,
+    { emailVisibility: true }
+  );
+
+  // Clean up
+  sessionStorage.removeItem('oauth_state');
+  sessionStorage.removeItem('oauth_code_verifier');
+
+  return authData;
+}
+```
+
+**Configure OAuth2 provider (Admin UI or API):**
+
+```javascript
+// Via API (superuser only) - usually done in Admin UI
+// IMPORTANT: Never hardcode client secrets. Use environment variables.
+await pb.collections.update('users', {
+  oauth2: {
+    enabled: true,
+    providers: [{
+      name: 'google',
+      clientId: process.env.GOOGLE_CLIENT_ID,
+      clientSecret: process.env.GOOGLE_CLIENT_SECRET
+    }],
+    mappedFields: {
+      avatarURL: 'avatar'  // Map OAuth field to collection field
+    }
+  }
+});
+```
+
+Reference: [PocketBase OAuth2](https://pocketbase.io/docs/authentication/#oauth2-authentication)
diff --git a/.claude/skills/pocketbase-best-practices/rules/auth-otp.md b/.claude/skills/pocketbase-best-practices/rules/auth-otp.md
new file mode 100644
index 0000000..58b6ac0
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/auth-otp.md
@@ -0,0 +1,68 @@
+---
+title: Use authWithOTP for Email One-Time Codes, Rate-Limit requestOTP
+impact: HIGH
+impactDescription: OTP endpoints are unauthenticated; unthrottled requestOTP enables email bombing and enumeration
+tags: auth, otp, one-time-password, rate-limiting, enumeration
+---
+
+## Use authWithOTP for Email One-Time Codes, Rate-Limit requestOTP
+
+Auth collections can enable **OTP login** from the admin UI (Collection → Options → "Enable OTP"). The client flow is two steps: `requestOTP(email)` returns an `otpId`, then `authWithOTP(otpId, code)` exchanges the id + code for an auth token. Two things trip people up: (1) the OTP response is **the same whether the email exists or not** - do not break that by leaking a distinct error; (2) `requestOTP` sends an email, so **it must be rate-limited** or an attacker can use it to spam any address.
+
+**Incorrect (leaks existence, custom requestOTP with no rate limit):**
+
+```javascript
+// ❌ Client-side existence check - ignore the 404 and expose it to the user
+try {
+    await pb.collection("users").getFirstListItem(`email="${email}"`);
+} catch (e) {
+    alert("No account with that email"); // ❌ account enumeration
+    return;
+}
+
+// ❌ Ad-hoc route with no rate limit - attacker hammers this to spam mailboxes
+routerAdd("POST", "/api/myapp/otp", (e) => {
+    const body = e.requestInfo().body;
+    const user = $app.findAuthRecordByEmail("users", body.email);
+    // send custom email...
+    return e.json(200, { ok: true });
+});
+```
+
+**Correct (use the built-in flow, step 1 always returns an otpId):**
+
+```javascript
+// Step 1: request the code. Always returns { otpId } - even if the email
+// does not exist, PocketBase returns a synthetic id so enumeration is
+// impossible. Treat every response as success from the UI perspective.
+const { otpId } = await pb.collection("users").requestOTP("user@example.com");
+
+// Step 2: exchange otpId + the 8-digit code the user typed
+const authData = await pb.collection("users").authWithOTP(
+    otpId,
+    "12345678",
+);
+// pb.authStore is now populated
+```
+
+```go
+// Go side - rate-limit and log if you wrap your own endpoint
+app.OnRecordRequestOTPRequest("users").BindFunc(func(e *core.RecordRequestOTPRequestEvent) error {
+    // e.Collection, e.Record (may be nil - synthetic id path),
+    // e.Email (always present), e.Password (unused for OTP)
+    e.App.Logger().Info("otp requested",
+        "email", e.Email,
+        "ip",    e.RequestInfo.Headers["x_forwarded_for"])
+    return e.Next() // REQUIRED
+})
+```
+
+**Rules:**
+- `requestOTP` **always returns 200 with an otpId**, even for non-existent emails - preserve that by never adding a pre-check or a different error path.
+- Enable the built-in rate limiter (see `deploy-rate-limiting.md`) and raise the cost for the `*:requestOTP` label. Without this, an attacker can email-bomb arbitrary users.
+- The OTP code is 8 digits by default, with a 3-minute TTL. Do not extend the TTL - short windows are the whole point.
+- `authWithOTP` consumes the code; a successful call invalidates the `otpId`. Always show a generic "invalid or expired code" on failure.
+- If you want OTP **without a password**, set the collection's `Password` option to off and `OTP` on. If both are enabled, users can use either.
+- OTP emails are sent via the configured SMTP server. In dev, point SMTP at Mailpit or a console logger before testing - do **not** ship with the default "no-reply@example.com" sender.
+
+Reference: [Auth with OTP](https://pocketbase.io/docs/authentication/#auth-with-otp) · [JS SDK - authWithOTP](https://github.com/pocketbase/js-sdk#authwithotp)
diff --git a/.claude/skills/pocketbase-best-practices/rules/auth-password.md b/.claude/skills/pocketbase-best-practices/rules/auth-password.md
new file mode 100644
index 0000000..f63c50b
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/auth-password.md
@@ -0,0 +1,104 @@
+---
+title: Implement Secure Password Authentication
+impact: CRITICAL
+impactDescription: Secure user login with proper error handling and token management
+tags: authentication, password, login, security
+---
+
+## Implement Secure Password Authentication
+
+Password authentication should include proper error handling, avoid exposing whether emails exist, and correctly manage the auth store.
+
+**Incorrect (exposing information and poor error handling):**
+
+```javascript
+// Dangerous: exposes whether email exists
+async function login(email, password) {
+  const user = await pb.collection('users').getFirstListItem(`email = "${email}"`);
+  if (!user) {
+    throw new Error('Email not found');  // Reveals email doesn't exist
+  }
+
+  // Manual password check - never do this!
+  if (user.password !== password) {
+    throw new Error('Wrong password');  // Reveals password is wrong
+  }
+
+  return user;
+}
+```
+
+**Correct (secure authentication):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+async function login(email, password) {
+  try {
+    // authWithPassword handles hashing and returns token
+    const authData = await pb.collection('users').authWithPassword(email, password);
+
+    // Token is automatically stored in pb.authStore
+    console.log('Logged in as:', authData.record.email);
+    console.log('Token valid:', pb.authStore.isValid);
+
+    return authData;
+  } catch (error) {
+    // Generic error message - don't reveal if email exists
+    if (error.status === 400) {
+      throw new Error('Invalid email or password');
+    }
+    throw error;
+  }
+}
+
+// Check if user is authenticated
+function isAuthenticated() {
+  return pb.authStore.isValid;
+}
+
+// Get current user
+function getCurrentUser() {
+  return pb.authStore.record;
+}
+
+// Logout
+function logout() {
+  pb.authStore.clear();
+}
+
+// Listen for auth changes
+pb.authStore.onChange((token, record) => {
+  console.log('Auth state changed:', record?.email || 'logged out');
+}, true);  // true = fire immediately with current state
+```
+
+**Auth collection configuration for password auth:**
+
+```javascript
+// When creating auth collection via API (superuser only)
+await pb.collections.create({
+  name: 'users',
+  type: 'auth',
+  fields: [
+    { name: 'name', type: 'text' },
+    { name: 'avatar', type: 'file', options: { maxSelect: 1 } }
+  ],
+  passwordAuth: {
+    enabled: true,
+    identityFields: ['email', 'username']  // Fields that can be used to login
+  },
+  // Require minimum password length
+  // (configured in Admin UI under collection options)
+});
+```
+
+**Security considerations:**
+- Never store passwords in plain text
+- Use generic error messages
+- Implement rate limiting on your server
+- Consider adding MFA for sensitive applications
+
+Reference: [PocketBase Auth](https://pocketbase.io/docs/authentication/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/auth-token-management.md b/.claude/skills/pocketbase-best-practices/rules/auth-token-management.md
new file mode 100644
index 0000000..285fa08
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/auth-token-management.md
@@ -0,0 +1,142 @@
+---
+title: Manage Auth Tokens Properly
+impact: CRITICAL
+impactDescription: Prevents unauthorized access, handles token expiration gracefully
+tags: authentication, tokens, refresh, security, session
+---
+
+## Manage Auth Tokens Properly
+
+Auth tokens should be refreshed before expiration, validated on critical operations, and properly cleared on logout. The SDK's authStore handles most of this automatically.
+
+**Incorrect (ignoring token expiration):**
+
+```javascript
+// Bad: never checking token validity
+async function fetchUserData() {
+  // Token might be expired!
+  const records = await pb.collection('posts').getList();
+  return records;
+}
+
+// Bad: manually managing tokens
+let authToken = localStorage.getItem('token');
+fetch('/api/posts', {
+  headers: { 'Authorization': authToken }  // Token might be invalid
+});
+```
+
+**Correct (proper token management):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// Check token validity before operations
+async function fetchSecureData() {
+  // authStore.isValid is a client-side check only (JWT expiry parsing).
+  // Always verify server-side with authRefresh() for critical operations.
+  if (!pb.authStore.isValid) {
+    throw new Error('Please log in');
+  }
+
+  return pb.collection('posts').getList();
+}
+
+// Refresh token periodically or before expiration
+async function refreshAuthIfNeeded() {
+  if (!pb.authStore.isValid) {
+    return false;
+  }
+
+  try {
+    // Verifies current token and returns fresh one
+    await pb.collection('users').authRefresh();
+    console.log('Token refreshed');
+    return true;
+  } catch (error) {
+    // Token invalid - user needs to re-authenticate
+    pb.authStore.clear();
+    return false;
+  }
+}
+
+// Auto-refresh on app initialization
+async function initializeAuth() {
+  if (pb.authStore.token) {
+    try {
+      await pb.collection('users').authRefresh();
+    } catch {
+      pb.authStore.clear();
+    }
+  }
+}
+
+// Listen for auth changes and handle expiration
+pb.authStore.onChange((token, record) => {
+  if (!token) {
+    // User logged out or token cleared
+    redirectToLogin();
+  }
+});
+
+// Setup periodic refresh (e.g., every 10 minutes)
+setInterval(async () => {
+  if (pb.authStore.isValid) {
+    try {
+      await pb.collection('users').authRefresh();
+    } catch {
+      pb.authStore.clear();
+    }
+  }
+}, 10 * 60 * 1000);
+```
+
+**SSR / Server-side token handling:**
+
+```javascript
+// Server-side: create fresh client per request
+export async function handleRequest(request) {
+  const pb = new PocketBase('http://127.0.0.1:8090');
+
+  // Load auth from cookie
+  pb.authStore.loadFromCookie(request.headers.get('cookie') || '');
+
+  // Validate and refresh
+  if (pb.authStore.isValid) {
+    try {
+      await pb.collection('users').authRefresh();
+    } catch {
+      pb.authStore.clear();
+    }
+  }
+
+  // ... handle request ...
+
+  // Send updated cookie with secure options
+  const response = new Response();
+  response.headers.set('set-cookie', pb.authStore.exportToCookie({
+    httpOnly: true,   // Prevent XSS access to auth token
+    secure: true,     // HTTPS only
+    sameSite: 'Lax',  // CSRF protection
+  }));
+  return response;
+}
+```
+
+**Token configuration (Admin UI or migration):**
+
+```javascript
+// Configure token durations (superuser only)
+await pb.collections.update('users', {
+  authToken: {
+    duration: 1209600  // 14 days in seconds
+  },
+  verificationToken: {
+    duration: 604800   // 7 days
+  }
+});
+```
+
+Reference: [PocketBase Auth Store](https://pocketbase.io/docs/authentication/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/coll-auth-vs-base.md b/.claude/skills/pocketbase-best-practices/rules/coll-auth-vs-base.md
new file mode 100644
index 0000000..9936852
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/coll-auth-vs-base.md
@@ -0,0 +1,67 @@
+---
+title: Use Auth Collections for User Accounts
+impact: CRITICAL
+impactDescription: Built-in authentication, password hashing, OAuth2 support
+tags: collections, auth, users, authentication, design
+---
+
+## Use Auth Collections for User Accounts
+
+Auth collections provide built-in authentication features including secure password hashing, email verification, OAuth2 support, and token management. Using base collections for users requires reimplementing these security-critical features.
+
+**Incorrect (using base collection for users):**
+
+```javascript
+// Base collection loses all auth features
+const usersCollection = {
+  name: 'users',
+  type: 'base',  // Wrong! No auth capabilities
+  schema: [
+    { name: 'email', type: 'email' },
+    { name: 'password', type: 'text' },  // Stored in plain text!
+    { name: 'name', type: 'text' }
+  ]
+};
+
+// Manual login implementation - insecure
+const user = await pb.collection('users').getFirstListItem(
+  `email = "${email}" && password = "${password}"`  // SQL injection risk!
+);
+```
+
+**Correct (using auth collection):**
+
+```javascript
+// Auth collection with built-in security
+const usersCollection = {
+  name: 'users',
+  type: 'auth',  // Enables authentication features
+  schema: [
+    { name: 'name', type: 'text' },
+    { name: 'avatar', type: 'file', options: { maxSelect: 1 } }
+  ],
+  options: {
+    allowEmailAuth: true,
+    allowOAuth2Auth: true,
+    requireEmail: true,
+    minPasswordLength: 8
+  }
+};
+
+// Secure authentication with password hashing
+const authData = await pb.collection('users').authWithPassword(
+  'user@example.com',
+  'securePassword123'
+);
+
+// Token automatically stored in authStore
+// NOTE: Never log tokens in production - shown here for illustration only
+console.log('Authenticated as:', pb.authStore.record.id);
+```
+
+**When to use each type:**
+- **Auth collection**: User accounts, admin accounts, any entity that needs to log in
+- **Base collection**: Regular data like posts, products, orders, comments
+- **View collection**: Read-only aggregations or complex queries
+
+Reference: [PocketBase Auth Collections](https://pocketbase.io/docs/collections/#auth-collection)
diff --git a/.claude/skills/pocketbase-best-practices/rules/coll-field-types.md b/.claude/skills/pocketbase-best-practices/rules/coll-field-types.md
new file mode 100644
index 0000000..543c973
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/coll-field-types.md
@@ -0,0 +1,67 @@
+---
+title: Choose Appropriate Field Types for Your Data
+impact: CRITICAL
+impactDescription: Prevents data corruption, improves query performance, reduces storage
+tags: collections, schema, field-types, design
+---
+
+## Choose Appropriate Field Types for Your Data
+
+Selecting the wrong field type leads to data validation issues, wasted storage, and poor query performance. PocketBase provides specialized field types that enforce constraints at the database level.
+
+**Incorrect (using text for everything):**
+
+```javascript
+// Using plain text fields for structured data
+const collection = {
+  name: 'products',
+  schema: [
+    { name: 'price', type: 'text' },      // Should be number
+    { name: 'email', type: 'text' },       // Should be email
+    { name: 'website', type: 'text' },     // Should be url
+    { name: 'active', type: 'text' },      // Should be bool
+    { name: 'tags', type: 'text' },        // Should be select or json
+    { name: 'created', type: 'text' }      // Should be autodate
+  ]
+};
+// No validation, inconsistent data, manual parsing required
+```
+
+**Correct (using appropriate field types):**
+
+```javascript
+// Using specialized field types with proper validation
+const collection = {
+  name: 'products',
+  type: 'base',
+  schema: [
+    { name: 'price', type: 'number', options: { min: 0 } },
+    { name: 'email', type: 'email' },
+    { name: 'website', type: 'url' },
+    { name: 'active', type: 'bool' },
+    { name: 'tags', type: 'select', options: {
+      maxSelect: 5,
+      values: ['electronics', 'clothing', 'food', 'other']
+    }},
+    { name: 'metadata', type: 'json' }
+    // created/updated are automatic system fields
+  ]
+};
+// Built-in validation, proper indexing, type-safe queries
+```
+
+**Available field types:**
+- `text` - Plain text with optional min/max length, regex pattern
+- `number` - Integer or decimal with optional min/max
+- `bool` - True/false values
+- `email` - Email with format validation
+- `url` - URL with format validation
+- `date` - Date/datetime values
+- `autodate` - Auto-set on create/update
+- `select` - Single or multi-select from predefined values
+- `json` - Arbitrary JSON data
+- `file` - File attachments
+- `relation` - References to other collections
+- `editor` - Rich text HTML content
+
+Reference: [PocketBase Collections](https://pocketbase.io/docs/collections/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/coll-geopoint.md b/.claude/skills/pocketbase-best-practices/rules/coll-geopoint.md
new file mode 100644
index 0000000..0bb40e0
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/coll-geopoint.md
@@ -0,0 +1,122 @@
+---
+title: Use GeoPoint Fields for Location Data
+impact: MEDIUM
+impactDescription: Built-in geographic queries, distance calculations
+tags: collections, geopoint, location, geographic, maps
+---
+
+## Use GeoPoint Fields for Location Data
+
+PocketBase provides a dedicated GeoPoint field type for storing geographic coordinates with built-in distance query support via `geoDistance()`.
+
+**Incorrect (storing coordinates as separate fields):**
+
+```javascript
+// Separate lat/lon fields - no built-in distance queries
+const placesSchema = [
+  { name: 'name', type: 'text' },
+  { name: 'latitude', type: 'number' },
+  { name: 'longitude', type: 'number' }
+];
+
+// Manual distance calculation - complex and slow
+async function findNearby(lat, lon, maxKm) {
+  const places = await pb.collection('places').getFullList();
+
+  // Calculate distance for every record client-side
+  return places.filter(place => {
+    const dist = haversine(lat, lon, place.latitude, place.longitude);
+    return dist <= maxKm;
+  });
+}
+```
+
+**Correct (using GeoPoint field):**
+
+```javascript
+// GeoPoint field stores coordinates as { lon, lat } object
+const placesSchema = [
+  { name: 'name', type: 'text' },
+  { name: 'location', type: 'geopoint' }
+];
+
+// Creating a record with GeoPoint
+await pb.collection('places').create({
+  name: 'Coffee Shop',
+  location: { lon: -73.9857, lat: 40.7484 }  // Note: lon first!
+});
+
+// Or using "lon,lat" string format
+await pb.collection('places').create({
+  name: 'Restaurant',
+  location: '-73.9857,40.7484'  // String format also works
+});
+
+// Query nearby locations using geoDistance()
+async function findNearby(lon, lat, maxKm) {
+  // geoDistance returns distance in kilometers
+  const places = await pb.collection('places').getList(1, 50, {
+    filter: pb.filter(
+      'geoDistance(location, {:point}) <= {:maxKm}',
+      {
+        point: { lon, lat },
+        maxKm: maxKm
+      }
+    ),
+    sort: pb.filter('geoDistance(location, {:point})', { point: { lon, lat } })
+  });
+
+  return places;
+}
+
+// Find places within 5km of Times Square
+const nearbyPlaces = await findNearby(-73.9857, 40.7580, 5);
+
+// Use in API rules for location-based access
+// listRule: geoDistance(location, @request.query.point) <= 10
+```
+
+**geoDistance() function:**
+
+```javascript
+// Syntax: geoDistance(geopointField, referencePoint)
+// Returns: distance in kilometers
+
+// In filter expressions
+filter: 'geoDistance(location, "-73.9857,40.7484") <= 5'
+
+// With parameter binding (recommended)
+filter: pb.filter('geoDistance(location, {:center}) <= {:radius}', {
+  center: { lon: -73.9857, lat: 40.7484 },
+  radius: 5
+})
+
+// Sorting by distance
+sort: 'geoDistance(location, "-73.9857,40.7484")'  // Closest first
+sort: '-geoDistance(location, "-73.9857,40.7484")' // Farthest first
+```
+
+**GeoPoint data format:**
+
+```javascript
+// Object format (recommended)
+{ lon: -73.9857, lat: 40.7484 }
+
+// String format
+"-73.9857,40.7484"  // "lon,lat" order
+
+// Important: longitude comes FIRST (GeoJSON convention)
+```
+
+**Use cases:**
+- Store-locator / find nearby
+- Delivery radius validation
+- Geofencing in API rules
+- Location-based search results
+
+**Limitations:**
+- Spherical Earth calculation (accurate to ~0.3%)
+- No polygon/area containment queries
+- Single point per field (use multiple fields for routes)
+
+Reference: [PocketBase GeoPoint](https://pocketbase.io/docs/collections/#geopoint)
diff --git a/.claude/skills/pocketbase-best-practices/rules/coll-indexes.md b/.claude/skills/pocketbase-best-practices/rules/coll-indexes.md
new file mode 100644
index 0000000..377bbad
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/coll-indexes.md
@@ -0,0 +1,74 @@
+---
+title: Create Indexes for Frequently Filtered Fields
+impact: CRITICAL
+impactDescription: 10-100x faster queries on large collections
+tags: collections, indexes, performance, query-optimization
+---
+
+## Create Indexes for Frequently Filtered Fields
+
+PocketBase uses SQLite which benefits significantly from proper indexing. Queries filtering or sorting on unindexed fields perform full table scans.
+
+**Incorrect (no indexes on filtered fields):**
+
+```javascript
+// Querying without indexes
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'author = "user123" && status = "published"',
+  sort: '-publishedAt'
+});
+// Full table scan on large collections - very slow
+
+// API rules also query without indexes
+// listRule: "author = @request.auth.id"
+// Every list request scans entire table
+```
+
+**Correct (indexed fields):**
+
+```javascript
+// Create collection with indexes via Admin UI or migration
+// In PocketBase Admin: Collection > Indexes > Add Index
+
+// Common index patterns:
+// 1. Single field index for equality filters
+//    CREATE INDEX idx_posts_author ON posts(author)
+
+// 2. Composite index for multiple filters
+//    CREATE INDEX idx_posts_author_status ON posts(author, status)
+
+// 3. Index with sort field
+//    CREATE INDEX idx_posts_status_published ON posts(status, publishedAt DESC)
+
+// Queries now use indexes
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'author = "user123" && status = "published"',
+  sort: '-publishedAt'
+});
+// Index scan - fast even with millions of records
+
+// For unique constraints (e.g., slug)
+// CREATE UNIQUE INDEX idx_posts_slug ON posts(slug)
+```
+
+**Index recommendations:**
+- Fields used in `filter` expressions
+- Fields used in `sort` parameters
+- Fields used in API rules (`listRule`, `viewRule`, etc.)
+- Relation fields (automatically indexed)
+- Unique fields like slugs or codes
+
+**Index considerations for SQLite:**
+- Composite indexes work left-to-right (order matters)
+- Too many indexes slow down writes
+- Use `EXPLAIN QUERY PLAN` in SQL to verify index usage
+- Partial indexes for filtered subsets
+
+```sql
+-- Check if index is used
+EXPLAIN QUERY PLAN
+SELECT * FROM posts WHERE author = 'user123' AND status = 'published';
+-- Should show "USING INDEX" not "SCAN"
+```
+
+Reference: [SQLite Query Planning](https://www.sqlite.org/queryplanner.html)
diff --git a/.claude/skills/pocketbase-best-practices/rules/coll-relations.md b/.claude/skills/pocketbase-best-practices/rules/coll-relations.md
new file mode 100644
index 0000000..b6e9082
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/coll-relations.md
@@ -0,0 +1,98 @@
+---
+title: Configure Relations with Proper Cascade Options
+impact: CRITICAL
+impactDescription: Maintains referential integrity, prevents orphaned records, controls deletion behavior
+tags: collections, relations, foreign-keys, cascade, design
+---
+
+## Configure Relations with Proper Cascade Options
+
+Relation fields connect collections together. Proper cascade configuration ensures data integrity when referenced records are deleted.
+
+**Incorrect (default cascade behavior not considered):**
+
+```javascript
+// Relation without considering deletion behavior
+const ordersSchema = [
+  { name: 'customer', type: 'relation', options: {
+    collectionId: 'customers_collection_id',
+    maxSelect: 1
+    // No cascade options specified - defaults may cause issues
+  }},
+  { name: 'products', type: 'relation', options: {
+    collectionId: 'products_collection_id'
+    // Multiple products, no cascade handling
+  }}
+];
+
+// Deleting a customer may fail or orphan orders
+await pb.collection('customers').delete(customerId);
+// Error: record is referenced by other records
+```
+
+**Correct (explicit cascade configuration):**
+
+```javascript
+// Carefully configured relations
+const ordersSchema = [
+  {
+    name: 'customer',
+    type: 'relation',
+    required: true,
+    options: {
+      collectionId: 'customers_collection_id',
+      maxSelect: 1,
+      cascadeDelete: false  // Prevent accidental mass deletion
+    }
+  },
+  {
+    name: 'products',
+    type: 'relation',
+    options: {
+      collectionId: 'products_collection_id',
+      maxSelect: 99,
+      cascadeDelete: false
+    }
+  }
+];
+
+// For dependent data like comments - cascade delete makes sense
+const commentsSchema = [
+  {
+    name: 'post',
+    type: 'relation',
+    options: {
+      collectionId: 'posts_collection_id',
+      maxSelect: 1,
+      cascadeDelete: true  // Delete comments when post is deleted
+    }
+  }
+];
+// NOTE: For audit logs, avoid cascadeDelete - logs should be retained
+// for compliance/forensics even after the referenced user is deleted.
+// Use cascadeDelete: false and handle user deletion separately.
+
+// Handle deletion manually when cascade is false
+try {
+  await pb.collection('customers').delete(customerId);
+} catch (e) {
+  if (e.status === 400) {
+    // Customer has orders - handle appropriately
+    // Option 1: Soft delete (set 'deleted' flag)
+    // Option 2: Reassign orders
+    // Option 3: Delete orders first
+  }
+}
+```
+
+**Cascade options:**
+- `cascadeDelete: true` - Delete referencing records when referenced record is deleted
+- `cascadeDelete: false` - Block deletion if references exist (default for required relations)
+
+**Best practices:**
+- Use `cascadeDelete: true` for dependent data (comments on posts, logs for users)
+- Use `cascadeDelete: false` for important data (orders, transactions)
+- Consider soft deletes for audit trails
+- Document your cascade strategy
+
+Reference: [PocketBase Relations](https://pocketbase.io/docs/collections/#relation)
diff --git a/.claude/skills/pocketbase-best-practices/rules/coll-view-collections.md b/.claude/skills/pocketbase-best-practices/rules/coll-view-collections.md
new file mode 100644
index 0000000..a9fc662
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/coll-view-collections.md
@@ -0,0 +1,68 @@
+---
+title: Use View Collections for Complex Read-Only Queries
+impact: HIGH
+impactDescription: Simplifies complex queries, improves maintainability, enables aggregations
+tags: collections, views, sql, aggregation, design
+---
+
+## Use View Collections for Complex Read-Only Queries
+
+View collections execute custom SQL queries and expose results through the standard API. They're ideal for aggregations, joins, and computed fields without duplicating logic across your application.
+
+**Incorrect (computing aggregations client-side):**
+
+```javascript
+// Fetching all records to compute stats client-side
+const orders = await pb.collection('orders').getFullList();
+const products = await pb.collection('products').getFullList();
+
+// Expensive client-side computation
+const stats = orders.reduce((acc, order) => {
+  const product = products.find(p => p.id === order.product);
+  acc.totalRevenue += order.quantity * product.price;
+  acc.orderCount++;
+  return acc;
+}, { totalRevenue: 0, orderCount: 0 });
+// Fetches all data, slow, memory-intensive
+```
+
+**Correct (using view collection):**
+
+```javascript
+// Create a view collection in PocketBase Admin UI or via API
+// View SQL:
+// SELECT
+//   p.id,
+//   p.name,
+//   COUNT(o.id) as order_count,
+//   SUM(o.quantity) as total_sold,
+//   SUM(o.quantity * p.price) as revenue
+// FROM products p
+// LEFT JOIN orders o ON o.product = p.id
+// GROUP BY p.id
+
+// Simple, efficient query
+const productStats = await pb.collection('product_stats').getList(1, 20, {
+  sort: '-revenue'
+});
+
+// Each record has computed fields
+productStats.items.forEach(stat => {
+  console.log(`${stat.name}: ${stat.order_count} orders, $${stat.revenue}`);
+});
+```
+
+**View collection use cases:**
+- Aggregations (COUNT, SUM, AVG)
+- Joining data from multiple collections
+- Computed/derived fields
+- Denormalized read models
+- Dashboard statistics
+
+**Limitations:**
+- Read-only (no create/update/delete)
+- Must return `id` column
+- No realtime subscriptions
+- API rules still apply for access control
+
+Reference: [PocketBase View Collections](https://pocketbase.io/docs/collections/#view-collection)
diff --git a/.claude/skills/pocketbase-best-practices/rules/deploy-backup.md b/.claude/skills/pocketbase-best-practices/rules/deploy-backup.md
new file mode 100644
index 0000000..feeaf11
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/deploy-backup.md
@@ -0,0 +1,142 @@
+---
+title: Implement Proper Backup Strategies
+impact: LOW-MEDIUM
+impactDescription: Prevents data loss, enables disaster recovery
+tags: production, backup, disaster-recovery, data-protection
+---
+
+## Implement Proper Backup Strategies
+
+Regular backups are essential for production deployments. PocketBase provides built-in backup functionality and supports external S3 storage.
+
+**Incorrect (no backup strategy):**
+
+```javascript
+// No backups at all - disaster waiting to happen
+// Just running: ./pocketbase serve
+
+// Manual file copy while server running - can corrupt data
+// cp pb_data/data.db backup/
+
+// Only backing up database, missing files
+// sqlite3 pb_data/data.db ".backup backup.db"
+```
+
+**Correct (comprehensive backup strategy):**
+
+```javascript
+// 1. Using PocketBase Admin API for backups
+const adminPb = new PocketBase('http://127.0.0.1:8090');
+await adminPb.collection('_superusers').authWithPassword(admin, password);
+
+// Create backup (includes database and files)
+async function createBackup(name = '') {
+  const backup = await adminPb.backups.create(name);
+  console.log('Backup created:', backup.key);
+  return backup;
+}
+
+// List available backups
+async function listBackups() {
+  const backups = await adminPb.backups.getFullList();
+  backups.forEach(b => {
+    console.log(`${b.key} - ${b.size} bytes - ${b.modified}`);
+  });
+  return backups;
+}
+
+// Download backup
+async function downloadBackup(key) {
+  const token = await adminPb.files.getToken();
+  const url = adminPb.backups.getDownloadURL(token, key);
+  // url can be used to download the backup file
+  return url;
+}
+
+// Restore from backup (CAUTION: overwrites current data!)
+async function restoreBackup(key) {
+  await adminPb.backups.restore(key);
+  console.log('Restore initiated - server will restart');
+}
+
+// Delete old backups
+async function cleanupOldBackups(keepCount = 7) {
+  const backups = await adminPb.backups.getFullList();
+
+  // Sort by date, keep newest
+  const sorted = backups.sort((a, b) =>
+    new Date(b.modified) - new Date(a.modified)
+  );
+
+  const toDelete = sorted.slice(keepCount);
+  for (const backup of toDelete) {
+    await adminPb.backups.delete(backup.key);
+    console.log('Deleted old backup:', backup.key);
+  }
+}
+```
+
+**Automated backup script (cron job):**
+
+```bash
+#!/bin/bash
+# backup.sh - Run daily via cron
+
+POCKETBASE_URL="http://127.0.0.1:8090"
+ADMIN_EMAIL="admin@example.com"
+ADMIN_PASSWORD="your-secure-password"
+BACKUP_DIR="/path/to/backups"
+KEEP_DAYS=7
+
+# Create timestamp
+TIMESTAMP=$(date +%Y%m%d_%H%M%S)
+
+# Create backup via API
+curl -X POST "${POCKETBASE_URL}/api/backups" \
+  -H "Authorization: $(curl -s -X POST "${POCKETBASE_URL}/api/collections/_superusers/auth-with-password" \
+    -d "identity=${ADMIN_EMAIL}&password=${ADMIN_PASSWORD}" | jq -r '.token')" \
+  -d "name=backup_${TIMESTAMP}"
+
+# Clean old local backups
+find "${BACKUP_DIR}" -name "*.zip" -mtime +${KEEP_DAYS} -delete
+
+echo "Backup completed: backup_${TIMESTAMP}"
+```
+
+**Configure S3 for backup storage:**
+
+```javascript
+// In Admin UI: Settings > Backups > S3
+// Or via API:
+await adminPb.settings.update({
+  backups: {
+    s3: {
+      enabled: true,
+      bucket: 'my-pocketbase-backups',
+      region: 'us-east-1',
+      endpoint: 's3.amazonaws.com',
+      accessKey: process.env.AWS_ACCESS_KEY,
+      secret: process.env.AWS_SECRET_KEY
+    }
+  }
+});
+```
+
+**Backup best practices:**
+
+| Aspect | Recommendation |
+|--------|---------------|
+| Frequency | Daily minimum, hourly for critical apps |
+| Retention | 7-30 days of daily backups |
+| Storage | Off-site (S3, separate server) |
+| Testing | Monthly restore tests |
+| Monitoring | Alert on backup failures |
+
+**Pre-backup checklist:**
+- [ ] S3 or external storage configured
+- [ ] Automated schedule set up
+- [ ] Retention policy defined
+- [ ] Restore procedure documented
+- [ ] Restore tested successfully
+
+Reference: [PocketBase Backups](https://pocketbase.io/docs/going-to-production/#backups)
diff --git a/.claude/skills/pocketbase-best-practices/rules/deploy-configuration.md b/.claude/skills/pocketbase-best-practices/rules/deploy-configuration.md
new file mode 100644
index 0000000..e1362db
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/deploy-configuration.md
@@ -0,0 +1,169 @@
+---
+title: Configure Production Settings Properly
+impact: LOW-MEDIUM
+impactDescription: Secure and optimized production environment
+tags: production, configuration, security, environment
+---
+
+## Configure Production Settings Properly
+
+Production deployments require proper configuration of URLs, secrets, SMTP, and security settings.
+
+**Incorrect (development defaults in production):**
+
+```bash
+# Running with defaults - insecure!
+./pocketbase serve
+
+# Hardcoded secrets
+./pocketbase serve --encryptionEnv="mySecretKey123"
+
+# Wrong origin for CORS
+# Leaving http://localhost:8090 as allowed origin
+```
+
+**Correct (production configuration):**
+
+```bash
+# Production startup with essential flags
+./pocketbase serve \
+  --http="0.0.0.0:8090" \
+  --origins="https://myapp.com,https://www.myapp.com" \
+  --encryptionEnv="PB_ENCRYPTION_KEY"
+
+# Using environment variables
+export PB_ENCRYPTION_KEY="your-32-char-encryption-key-here"
+export SMTP_HOST="smtp.sendgrid.net"
+export SMTP_PORT="587"
+export SMTP_USER="apikey"
+export SMTP_PASS="your-sendgrid-api-key"
+
+./pocketbase serve --http="0.0.0.0:8090"
+```
+
+**Configure SMTP for emails:**
+
+```javascript
+// Via Admin UI or API
+await adminPb.settings.update({
+  smtp: {
+    enabled: true,
+    host: process.env.SMTP_HOST,
+    port: parseInt(process.env.SMTP_PORT),
+    username: process.env.SMTP_USER,
+    password: process.env.SMTP_PASS,
+    tls: true
+  },
+  meta: {
+    appName: 'My App',
+    appURL: 'https://myapp.com',
+    senderName: 'My App',
+    senderAddress: 'noreply@myapp.com'
+  }
+});
+
+// Test email configuration
+await adminPb.settings.testEmail('users', 'test@example.com', 'verification');
+```
+
+**Configure S3 for file storage:**
+
+```javascript
+// Move file storage to S3 for scalability
+await adminPb.settings.update({
+  s3: {
+    enabled: true,
+    bucket: 'my-app-files',
+    region: 'us-east-1',
+    endpoint: 's3.amazonaws.com',
+    accessKey: process.env.AWS_ACCESS_KEY,
+    secret: process.env.AWS_SECRET_KEY,
+    forcePathStyle: false
+  }
+});
+
+// Test S3 connection
+await adminPb.settings.testS3('storage');
+```
+
+**Systemd service file:**
+
+```ini
+# /etc/systemd/system/pocketbase.service
+[Unit]
+Description=PocketBase
+After=network.target
+
+[Service]
+Type=simple
+User=pocketbase
+Group=pocketbase
+LimitNOFILE=4096
+Restart=always
+RestartSec=5s
+WorkingDirectory=/opt/pocketbase
+ExecStart=/opt/pocketbase/pocketbase serve --http="127.0.0.1:8090"
+
+# Environment variables
+EnvironmentFile=/opt/pocketbase/.env
+
+# Security hardening
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectSystem=strict
+ProtectHome=yes
+ReadWritePaths=/opt/pocketbase/pb_data
+
+[Install]
+WantedBy=multi-user.target
+```
+
+**Environment file (.env):**
+
+```bash
+# /opt/pocketbase/.env
+# SECURITY: Set restrictive permissions: chmod 600 /opt/pocketbase/.env
+# SECURITY: Add to .gitignore - NEVER commit this file to version control
+# For production, consider a secrets manager (Vault, AWS Secrets Manager, etc.)
+
+PB_ENCRYPTION_KEY=  # Generate with: openssl rand -hex 16
+
+# SMTP
+SMTP_HOST=smtp.sendgrid.net
+SMTP_PORT=587
+SMTP_USER=apikey
+SMTP_PASS=           # Set your SMTP password here
+
+# S3 (optional)
+AWS_ACCESS_KEY=      # Set your AWS access key
+AWS_SECRET_KEY=      # Set your AWS secret key
+
+# OAuth (optional)
+GOOGLE_CLIENT_ID=    # Set your Google client ID
+GOOGLE_CLIENT_SECRET= # Set your Google client secret
+```
+
+**Protect your environment file:**
+
+```bash
+# Set restrictive permissions (owner read/write only)
+chmod 600 /opt/pocketbase/.env
+chown pocketbase:pocketbase /opt/pocketbase/.env
+
+# Ensure .env is in .gitignore
+echo ".env" >> .gitignore
+```
+
+**Production checklist:**
+
+- [ ] HTTPS enabled (via reverse proxy)
+- [ ] Strong encryption key set
+- [ ] CORS origins configured
+- [ ] SMTP configured and tested
+- [ ] Superuser password changed
+- [ ] S3 configured (for scalability)
+- [ ] Backup schedule configured
+- [ ] Rate limiting enabled (via reverse proxy)
+- [ ] Logging configured
+
+Reference: [PocketBase Going to Production](https://pocketbase.io/docs/going-to-production/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/deploy-rate-limiting.md b/.claude/skills/pocketbase-best-practices/rules/deploy-rate-limiting.md
new file mode 100644
index 0000000..52e093e
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/deploy-rate-limiting.md
@@ -0,0 +1,175 @@
+---
+title: Enable Rate Limiting for API Protection
+impact: MEDIUM
+impactDescription: Prevents abuse, brute-force attacks, and DoS
+tags: production, security, rate-limiting, abuse-prevention
+---
+
+## Enable Rate Limiting for API Protection
+
+PocketBase v0.23+ includes built-in rate limiting. Enable it to protect against brute-force attacks, API abuse, and excessive resource consumption.
+
+> **v0.36.7 behavioral change:** the built-in limiter switched from a sliding-window to a **fixed-window** strategy. This is cheaper and more predictable, but it means a client can send `2 * maxRequests` in quick succession if they straddle the window boundary. Size your limits with that worst case in mind, and put Nginx/Caddy rate limiting in front of PocketBase for defense in depth (see examples below).
+
+**Incorrect (no rate limiting):**
+
+```bash
+# Running without rate limiting
+./pocketbase serve
+
+# Vulnerable to:
+# - Brute-force password attacks
+# - API abuse and scraping
+# - DoS from excessive requests
+# - Account enumeration attempts
+```
+
+**Correct (enable rate limiting):**
+
+```bash
+# Enable via command line flag
+./pocketbase serve --rateLimiter=true
+
+# Or configure specific limits (requests per second per IP)
+./pocketbase serve --rateLimiter=true --rateLimiterRPS=10
+```
+
+**Configure via Admin Dashboard:**
+
+Navigate to Settings > Rate Limiter:
+- **Enable rate limiter**: Toggle on
+- **Max requests/second**: Default 10, adjust based on needs
+- **Exempt endpoints**: Optionally whitelist certain paths
+
+**Configure programmatically (Go/JS hooks):**
+
+```javascript
+// In pb_hooks/rate_limit.pb.js
+routerAdd("GET", "/api/public/*", (e) => {
+  // Custom rate limit for specific endpoints
+}, $apis.rateLimit(100, "10s")); // 100 requests per 10 seconds
+
+// Stricter limit for auth endpoints
+routerAdd("POST", "/api/collections/users/auth-*", (e) => {
+  // Auth endpoints need stricter limits
+}, $apis.rateLimit(5, "1m")); // 5 attempts per minute
+```
+
+**Rate limiting with reverse proxy (additional layer):**
+
+```nginx
+# Nginx rate limiting (defense in depth)
+http {
+    # Define rate limit zones
+    limit_req_zone $binary_remote_addr zone=api:10m rate=10r/s;
+    limit_req_zone $binary_remote_addr zone=auth:10m rate=1r/s;
+
+    server {
+        # General API rate limit
+        location /api/ {
+            limit_req zone=api burst=20 nodelay;
+            proxy_pass http://pocketbase;
+        }
+
+        # Strict limit for auth endpoints
+        location /api/collections/users/auth {
+            limit_req zone=auth burst=5 nodelay;
+            proxy_pass http://pocketbase;
+        }
+
+        # Stricter limit for superuser auth
+        location /api/collections/_superusers/auth {
+            limit_req zone=auth burst=3 nodelay;
+            proxy_pass http://pocketbase;
+        }
+    }
+}
+```
+
+```caddyfile
+# Caddy with rate limiting plugin
+myapp.com {
+    rate_limit {
+        zone api {
+            key {remote_host}
+            events 100
+            window 10s
+        }
+        zone auth {
+            key {remote_host}
+            events 5
+            window 1m
+        }
+    }
+
+    @auth path /api/collections/*/auth*
+    handle @auth {
+        rate_limit { zone auth }
+        reverse_proxy 127.0.0.1:8090
+    }
+
+    handle {
+        rate_limit { zone api }
+        reverse_proxy 127.0.0.1:8090
+    }
+}
+```
+
+**Handle rate limit errors in client:**
+
+```javascript
+async function makeRequest(fn, retries = 0, maxRetries = 3) {
+  try {
+    return await fn();
+  } catch (error) {
+    if (error.status === 429 && retries < maxRetries) {
+      // Rate limited - wait and retry with limit
+      const retryAfter = error.response?.retryAfter || 60;
+      console.log(`Rate limited. Retry ${retries + 1}/${maxRetries} after ${retryAfter}s`);
+
+      // Show user-friendly message
+      showMessage('Too many requests. Please wait a moment.');
+
+      await sleep(retryAfter * 1000);
+      return makeRequest(fn, retries + 1, maxRetries);
+    }
+    throw error;
+  }
+}
+
+// Usage
+const result = await makeRequest(() =>
+  pb.collection('posts').getList(1, 20)
+);
+```
+
+**Recommended limits by endpoint type:**
+
+| Endpoint Type | Suggested Limit | Reason |
+|--------------|-----------------|--------|
+| Auth endpoints | 5-10/min | Prevent brute-force |
+| Password reset | 3/hour | Prevent enumeration |
+| Record creation | 30/min | Prevent spam |
+| General API | 60-100/min | Normal usage |
+| Public read | 100-200/min | Higher for reads |
+| File uploads | 10/min | Resource-intensive |
+
+**Monitoring rate limit hits:**
+
+```javascript
+// Check PocketBase logs for rate limit events
+// Or set up alerting in your monitoring system
+
+// Client-side tracking
+pb.afterSend = function(response, data) {
+  if (response.status === 429) {
+    trackEvent('rate_limit_hit', {
+      endpoint: response.url,
+      timestamp: new Date()
+    });
+  }
+  return data;
+};
+```
+
+Reference: [PocketBase Going to Production](https://pocketbase.io/docs/going-to-production/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/deploy-reverse-proxy.md b/.claude/skills/pocketbase-best-practices/rules/deploy-reverse-proxy.md
new file mode 100644
index 0000000..5c04af4
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/deploy-reverse-proxy.md
@@ -0,0 +1,200 @@
+---
+title: Configure Reverse Proxy Correctly
+impact: LOW-MEDIUM
+impactDescription: HTTPS, caching, rate limiting, and security headers
+tags: production, nginx, caddy, https, proxy
+---
+
+## Configure Reverse Proxy Correctly
+
+Use a reverse proxy (Nginx, Caddy) for HTTPS termination, caching, rate limiting, and security headers.
+
+**Incorrect (exposing PocketBase directly):**
+
+```bash
+# Direct exposure - no HTTPS, no rate limiting
+./pocketbase serve --http="0.0.0.0:8090"
+
+# Port forwarding without proxy
+iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 8090
+# Still no HTTPS!
+```
+
+**Correct (Caddy - simplest option):**
+
+```caddyfile
+# /etc/caddy/Caddyfile
+myapp.com {
+    # Automatic HTTPS via Let's Encrypt
+    reverse_proxy 127.0.0.1:8090 {
+        # Required for SSE/Realtime
+        flush_interval -1
+    }
+
+    # Security headers
+    header {
+        X-Content-Type-Options "nosniff"
+        X-Frame-Options "DENY"
+        Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
+        Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'"
+        Referrer-Policy "strict-origin-when-cross-origin"
+        -Server
+    }
+
+    # Restrict admin UI to internal/VPN networks
+    # @admin path /_/*
+    # handle @admin {
+    #     @blocked not remote_ip 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
+    #     respond @blocked 403
+    #     reverse_proxy 127.0.0.1:8090
+    # }
+
+    # Rate limiting (requires caddy-ratelimit plugin)
+    # Install: xcaddy build --with github.com/mholt/caddy-ratelimit
+    # Without this plugin, use PocketBase's built-in rate limiter (--rateLimiter=true)
+    # rate_limit {
+    #     zone api {
+    #         key {remote_host}
+    #         events 100
+    #         window 1m
+    #     }
+    # }
+}
+```
+
+**Correct (Nginx configuration):**
+
+```nginx
+# /etc/nginx/sites-available/pocketbase
+
+# Rate limit zones must be defined in http context (e.g., /etc/nginx/nginx.conf)
+# limit_req_zone $binary_remote_addr zone=api:10m rate=10r/s;
+
+upstream pocketbase {
+    server 127.0.0.1:8090;
+    keepalive 64;
+}
+
+server {
+    listen 80;
+    server_name myapp.com;
+    return 301 https://$server_name$request_uri;
+}
+
+server {
+    listen 443 ssl http2;
+    server_name myapp.com;
+
+    # SSL configuration
+    ssl_certificate /etc/letsencrypt/live/myapp.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/myapp.com/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
+    ssl_prefer_server_ciphers off;
+
+    # Security headers
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-Frame-Options "DENY" always;
+    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+    # Note: X-XSS-Protection is deprecated and can introduce vulnerabilities.
+    # Use Content-Security-Policy instead.
+
+    location / {
+        proxy_pass http://pocketbase;
+        proxy_http_version 1.1;
+
+        # Headers
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        # SSE/Realtime support
+        proxy_set_header Connection '';
+        proxy_buffering off;
+        proxy_cache off;
+        chunked_transfer_encoding off;
+
+        # Timeouts
+        proxy_read_timeout 3600s;
+        proxy_send_timeout 3600s;
+    }
+
+    # Rate limit API endpoints
+    location /api/ {
+        limit_req zone=api burst=20 nodelay;
+
+        proxy_pass http://pocketbase;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Connection '';
+        proxy_buffering off;
+    }
+
+    # Static file caching
+    location /api/files/ {
+        proxy_pass http://pocketbase;
+        proxy_cache_valid 200 1d;
+        expires 1d;
+        add_header Cache-Control "public, immutable";
+    }
+
+    # Gzip compression
+    gzip on;
+    gzip_types text/plain application/json application/javascript text/css;
+    gzip_min_length 1000;
+}
+```
+
+**Docker Compose with Caddy:**
+
+```yaml
+# docker-compose.yml
+version: '3.8'
+
+services:
+  pocketbase:
+    # NOTE: This is a third-party community image, not officially maintained by PocketBase.
+    # For production, consider building your own image from the official PocketBase binary.
+    # See: https://pocketbase.io/docs/going-to-production/
+    image: ghcr.io/muchobien/pocketbase:latest
+    restart: unless-stopped
+    volumes:
+      - ./pb_data:/pb_data
+    environment:
+      - PB_ENCRYPTION_KEY=${PB_ENCRYPTION_KEY}
+
+  caddy:
+    image: caddy:2-alpine
+    restart: unless-stopped
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile
+      - caddy_data:/data
+      - caddy_config:/config
+    depends_on:
+      - pocketbase
+
+volumes:
+  caddy_data:
+  caddy_config:
+```
+
+**Key configuration points:**
+
+| Feature | Why It Matters |
+|---------|---------------|
+| HTTPS | Encrypts traffic, required for auth |
+| SSE support | `proxy_buffering off` for realtime |
+| Rate limiting | Prevents abuse |
+| Security headers | XSS/clickjacking protection |
+| Keepalive | Connection reuse, better performance |
+
+Reference: [PocketBase Going to Production](https://pocketbase.io/docs/going-to-production/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/deploy-scaling.md b/.claude/skills/pocketbase-best-practices/rules/deploy-scaling.md
new file mode 100644
index 0000000..2fc080a
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/deploy-scaling.md
@@ -0,0 +1,102 @@
+---
+title: Tune OS and Runtime for PocketBase Scale
+impact: MEDIUM
+impactDescription: Prevents file descriptor exhaustion, OOM kills, and exposes secure config for production deployments
+tags: production, scaling, ulimit, gomemlimit, docker, encryption, deployment
+---
+
+## Tune OS and Runtime for PocketBase Scale
+
+Three low-effort OS/runtime knobs have outsized impact on production stability: open-file limits for realtime connections, Go memory limits for constrained hosts, and settings encryption for shared or externally-backed infrastructure. None of these are set automatically.
+
+**Incorrect (default OS limits, no memory governor, plain-text settings):**
+
+```bash
+# Start without raising the file descriptor limit
+/root/pb/pocketbase serve yourdomain.com
+# → "Too many open files" once concurrent realtime connections exceed ~1024
+
+# Start in a container that has a 512 MB RAM cap without GOMEMLIMIT
+docker run -m 512m pocketbase serve ...
+# → OOM kill during large file upload because Go GC doesn't respect cgroup limits
+
+# Store SMTP password and S3 secret as plain JSON in pb_data/data.db
+pocketbase serve  # no --encryptionEnv
+# → Anyone who obtains the database backup can read all credentials
+```
+
+**Correct:**
+
+```bash
+# 1. Raise the open-file limit before starting (Linux/macOS)
+#    Check current limit first:
+ulimit -a | grep "open files"
+#    Temporarily raise to 4096 for the current session:
+ulimit -n 4096
+/root/pb/pocketbase serve yourdomain.com
+
+#    Or persist it via systemd (recommended for production):
+# /lib/systemd/system/pocketbase.service
+# [Service]
+# LimitNOFILE = 4096
+# ...
+
+# 2. Cap Go's soft memory target on memory-constrained hosts
+#    (instructs the GC to be more aggressive before the kernel OOM-kills the process)
+GOMEMLIMIT=512MiB /root/pb/pocketbase serve yourdomain.com
+
+# 3. Encrypt application settings at rest
+#    Generate a random 32-character key once:
+export PB_ENCRYPTION_KEY="z76NX9WWiB05UmQGxw367B6zM39T11fF"
+#    Start with the env-var name (not the value) as the flag argument:
+pocketbase serve --encryptionEnv=PB_ENCRYPTION_KEY
+```
+
+**Docker deployment pattern (v0.36.8):**
+
+```dockerfile
+FROM alpine:latest
+ARG PB_VERSION=0.36.8
+
+RUN apk add --no-cache unzip ca-certificates
+
+ADD https://github.com/pocketbase/pocketbase/releases/download/v${PB_VERSION}/pocketbase_${PB_VERSION}_linux_amd64.zip /tmp/pb.zip
+RUN unzip /tmp/pb.zip -d /pb/
+
+# Uncomment to bundle pre-written migrations or hooks:
+# COPY ./pb_migrations /pb/pb_migrations
+# COPY ./pb_hooks      /pb/pb_hooks
+
+EXPOSE 8080
+
+# Mount a volume at /pb/pb_data to persist data across container restarts
+CMD ["/pb/pocketbase", "serve", "--http=0.0.0.0:8080"]
+```
+
+```yaml
+# docker-compose.yml
+services:
+  pocketbase:
+    build: .
+    ports:
+      - "8080:8080"
+    volumes:
+      - pb_data:/pb/pb_data
+    environment:
+      GOMEMLIMIT: "512MiB"
+      PB_ENCRYPTION_KEY: "${PB_ENCRYPTION_KEY}"
+    command: ["/pb/pocketbase", "serve", "--http=0.0.0.0:8080", "--encryptionEnv=PB_ENCRYPTION_KEY"]
+volumes:
+  pb_data:
+```
+
+**Quick-reference checklist:**
+
+| Concern | Fix |
+|---------|-----|
+| `Too many open files` errors | `ulimit -n 4096` (or `LimitNOFILE=4096` in systemd) |
+| OOM kill on constrained host | `GOMEMLIMIT=512MiB` env var |
+| Credentials visible in DB backup | `--encryptionEnv=YOUR_VAR` with a 32-char random key |
+| Persistent data in Docker | Mount volume at `/pb/pb_data` |
+
+Reference: [Going to production](https://pocketbase.io/docs/going-to-production/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/deploy-sqlite-considerations.md b/.claude/skills/pocketbase-best-practices/rules/deploy-sqlite-considerations.md
new file mode 100644
index 0000000..3b5c580
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/deploy-sqlite-considerations.md
@@ -0,0 +1,202 @@
+---
+title: Optimize SQLite for Production
+impact: LOW-MEDIUM
+impactDescription: Better performance and reliability for SQLite database
+tags: production, sqlite, database, performance
+---
+
+## Optimize SQLite for Production
+
+PocketBase uses SQLite with optimized defaults. Understanding its characteristics helps optimize performance and avoid common pitfalls. PocketBase uses two separate databases: `data.db` (application data) and `auxiliary.db` (logs and ephemeral data), which reduces write contention.
+
+**Incorrect (ignoring SQLite characteristics):**
+
+```javascript
+// Heavy concurrent writes - SQLite bottleneck
+async function bulkInsert(items) {
+  // Parallel writes cause lock contention
+  await Promise.all(items.map(item =>
+    pb.collection('items').create(item)
+  ));
+}
+
+// Not using transactions for batch operations
+async function updateMany(items) {
+  for (const item of items) {
+    await pb.collection('items').update(item.id, item);
+  }
+  // Each write is a separate transaction - slow!
+}
+
+// Large text fields without consideration
+const schema = [{
+  name: 'content',
+  type: 'text'  // Could be megabytes - affects all queries
+}];
+```
+
+**Correct (SQLite-optimized patterns):**
+
+```javascript
+// Use batch operations for multiple writes
+async function bulkInsert(items) {
+  const batch = pb.createBatch();
+  items.forEach(item => {
+    batch.collection('items').create(item);
+  });
+  await batch.send();  // Single transaction, much faster
+}
+
+// Batch updates
+async function updateMany(items) {
+  const batch = pb.createBatch();
+  items.forEach(item => {
+    batch.collection('items').update(item.id, item);
+  });
+  await batch.send();
+}
+
+// For very large batches, chunk them
+async function bulkInsertLarge(items, chunkSize = 100) {
+  for (let i = 0; i < items.length; i += chunkSize) {
+    const chunk = items.slice(i, i + chunkSize);
+    const batch = pb.createBatch();
+    chunk.forEach(item => batch.collection('items').create(item));
+    await batch.send();
+  }
+}
+```
+
+**Schema considerations:**
+
+```javascript
+// Separate large content into dedicated collection
+const postsSchema = [
+  { name: 'title', type: 'text' },
+  { name: 'summary', type: 'text', options: { maxLength: 500 } },
+  { name: 'author', type: 'relation' }
+  // Content in separate collection
+];
+
+const postContentsSchema = [
+  { name: 'post', type: 'relation', required: true },
+  { name: 'content', type: 'editor' }  // Large HTML content
+];
+
+// Fetch content only when needed
+async function getPostList() {
+  return pb.collection('posts').getList(1, 20);  // Fast, no content
+}
+
+async function getPostWithContent(id) {
+  const post = await pb.collection('posts').getOne(id);
+  const content = await pb.collection('post_contents').getFirstListItem(
+    pb.filter('post = {:id}', { id })
+  );
+  return { ...post, content: content.content };
+}
+```
+
+**PocketBase default PRAGMA settings:**
+
+PocketBase already configures optimal SQLite settings. You do not need to set these manually unless using a custom SQLite driver:
+
+```sql
+PRAGMA busy_timeout       = 10000;  -- Wait 10s for locks instead of failing immediately
+PRAGMA journal_mode       = WAL;    -- Write-Ahead Logging: concurrent reads during writes
+PRAGMA journal_size_limit = 200000000;  -- Limit WAL file to ~200MB
+PRAGMA synchronous        = NORMAL; -- Balanced durability/performance (safe with WAL)
+PRAGMA foreign_keys       = ON;     -- Enforce relation integrity
+PRAGMA temp_store         = MEMORY; -- Temp tables in memory (faster sorts/joins)
+PRAGMA cache_size         = -32000; -- 32MB page cache
+```
+
+WAL mode is the most impactful setting -- it allows multiple concurrent readers while a single writer is active, which is critical for PocketBase's concurrent API request handling.
+
+**Index optimization:**
+
+```sql
+-- Create indexes for commonly filtered/sorted fields
+CREATE INDEX idx_posts_author ON posts(author);
+CREATE INDEX idx_posts_created ON posts(created DESC);
+CREATE INDEX idx_posts_status_created ON posts(status, created DESC);
+
+-- Verify indexes are being used
+EXPLAIN QUERY PLAN
+SELECT * FROM posts WHERE author = 'xxx' ORDER BY created DESC;
+-- Should show: "USING INDEX idx_posts_author"
+```
+
+**SQLite limitations and workarounds:**
+
+| Limitation | Workaround |
+|------------|------------|
+| Single writer | Use batch operations, queue writes |
+| No full-text by default | Use view collections with FTS5 |
+| File-based | SSD storage, avoid network mounts |
+| Memory for large queries | Pagination, limit result sizes |
+
+**Performance monitoring:**
+
+```javascript
+// Monitor slow queries via hooks (requires custom PocketBase build)
+// Or use SQLite's built-in profiling
+
+// From sqlite3 CLI:
+// .timer on
+// SELECT * FROM posts WHERE author = 'xxx';
+// Run Time: real 0.003 user 0.002 sys 0.001
+
+// Check database size
+// ls -lh pb_data/data.db
+
+// Vacuum to reclaim space after deletes
+// sqlite3 pb_data/data.db "VACUUM;"
+```
+
+**When to consider alternatives:**
+
+Consider migrating from single PocketBase if:
+- Write throughput consistently > 1000/sec needed
+- Database size > 100GB
+- Complex transactions across tables
+- Multi-region deployment required
+
+**Custom SQLite driver (advanced):**
+
+PocketBase supports custom SQLite drivers via `DBConnect`. The CGO driver (`mattn/go-sqlite3`) can offer better performance for some workloads and enables extensions like ICU and FTS5. This requires a custom PocketBase build:
+
+```go
+// main.go (custom PocketBase build with CGO driver)
+package main
+
+import (
+    "github.com/pocketbase/dbx"
+    "github.com/pocketbase/pocketbase"
+    _ "github.com/mattn/go-sqlite3"  // CGO SQLite driver
+)
+
+func main() {
+    app := pocketbase.NewWithConfig(pocketbase.Config{
+        // Called twice: once for data.db, once for auxiliary.db
+        DBConnect: func(dbPath string) (*dbx.DB, error) {
+            return dbx.Open("sqlite3", dbPath)
+        },
+    })
+
+    if err := app.Start(); err != nil {
+        panic(err)
+    }
+}
+// Build with: CGO_ENABLED=1 go build
+```
+
+Note: CGO requires C compiler toolchain and cannot be cross-compiled as easily as pure Go.
+
+**Scaling options:**
+1. **Read replicas**: Litestream for SQLite replication
+2. **Sharding**: Multiple PocketBase instances by tenant/feature
+3. **Caching**: Redis/Memcached for read-heavy loads
+4. **Alternative backend**: If requirements exceed SQLite, evaluate PostgreSQL-based frameworks
+
+Reference: [PocketBase Going to Production](https://pocketbase.io/docs/going-to-production/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-compose-request-flow.md b/.claude/skills/pocketbase-best-practices/rules/ext-compose-request-flow.md
new file mode 100644
index 0000000..a0f4cb2
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-compose-request-flow.md
@@ -0,0 +1,198 @@
+---
+title: Compose Hooks, Transactions, Routing, and Enrich in One Request Flow
+impact: HIGH
+impactDescription: Individual rules are atomic; this composite example shows which app instance applies at each layer and how errors propagate
+tags: extending, composition, transactions, hooks, enrich, routing, mental-model
+---
+
+## Compose Hooks, Transactions, Routing, and Enrich in One Request Flow
+
+The atomic rules (`ext-hooks-chain`, `ext-transactions`, `ext-routing-custom`, `ext-hooks-record-vs-request`, `ext-filesystem`, `ext-filter-binding-server`) each teach a single trap. Real extending code touches **all of them in the same handler**. This rule walks through one complete request flow and annotates **which app instance is active at each layer** - the single most common source of extending bugs is reaching for the wrong one.
+
+### The flow
+
+`POST /api/myapp/posts` that: authenticates the caller, validates uniqueness with a bound filter, creates a record inside a transaction, uploads a thumbnail through a scoped filesystem, writes an audit log from an `OnRecordAfterCreateSuccess` hook, and shapes the response (including the realtime broadcast) in `OnRecordEnrich`.
+
+```
+HTTP request
+ │
+ ▼
+[group middleware]  apis.RequireAuth("users")          ◄── e.Auth is set after this
+ │
+ ▼
+[route handler]     se.App.RunInTransaction(func(txApp) {
+ │                    // ⚠️ inside the block, use ONLY txApp, never se.App or outer `app`
+ │                    FindFirstRecordByFilter(txApp, ...) // bound {:slug}
+ │                    txApp.Save(post)                     // fires OnRecord*Create / *Request
+ │                        │
+ │                        ▼
+ │                     [OnRecordAfterCreateSuccess hook]  ◄── e.App IS txApp here
+ │                        │                                    (hook fires inside the tx)
+ │                        e.App.Save(auditRecord)              → participates in rollback
+ │                        e.Next()                             → REQUIRED
+ │                        │
+ │                        ▼
+ │                     return to route handler
+ │                    fs := txApp.NewFilesystem()
+ │                    defer fs.Close()
+ │                    post.Set("thumb", file); txApp.Save(post)
+ │                    return nil  // commit
+ │                  })
+ │
+ ▼
+[enrich pass]       OnRecordEnrich fires                ◄── RUNS AFTER the tx committed
+ │                   (also fires for realtime SSE and list responses)
+ │                   e.App is the outer app; tx is already closed
+ ▼
+[response serialization] e.JSON(...)
+```
+
+### The code
+
+```go
+app.OnServe().BindFunc(func(se *core.ServeEvent) error {
+    g := se.Router.Group("/api/myapp")
+    g.Bind(apis.RequireAuth("users"))
+
+    g.POST("/posts", func(e *core.RequestEvent) error {
+        // ── Layer 1: route handler ────────────────────────────────────────
+        // e.App is the top-level app. e.Auth is populated by RequireAuth.
+        // e.RequestInfo holds headers/body/query.
+        body := struct {
+            Slug  string `json:"slug"`
+            Title string `json:"title"`
+        }{}
+        if err := e.BindBody(&body); err != nil {
+            return e.BadRequestError("invalid body", err)
+        }
+
+        var created *core.Record
+
+        // ── Layer 2: transaction ──────────────────────────────────────────
+        txErr := e.App.RunInTransaction(func(txApp core.App) error {
+            // ⚠️ From here until the closure returns, every DB call MUST go
+            //    through txApp. Capturing e.App or the outer `app` deadlocks
+            //    on the writer lock.
+
+            // Bound filter - see ext-filter-binding-server
+            existing, _ := txApp.FindFirstRecordByFilter(
+                "posts",
+                "slug = {:slug}",
+                dbx.Params{"slug": body.Slug},
+            )
+            if existing != nil {
+                return apis.NewBadRequestError("slug already taken", nil)
+            }
+
+            col, err := txApp.FindCollectionByNameOrId("posts")
+            if err != nil {
+                return err
+            }
+            post := core.NewRecord(col)
+            post.Set("slug", body.Slug)
+            post.Set("title", body.Title)
+            post.Set("author", e.Auth.Id)
+
+            // txApp.Save fires record hooks INSIDE the tx
+            if err := txApp.Save(post); err != nil {
+                return err
+            }
+
+            // ── Layer 3: filesystem (scoped to this request) ─────────────
+            fs, err := txApp.NewFilesystem()
+            if err != nil {
+                return err
+            }
+            defer fs.Close() // REQUIRED - see ext-filesystem
+
+            if uploaded, ok := e.RequestInfo.Body["thumb"].(*filesystem.File); ok {
+                post.Set("thumb", uploaded)
+                if err := txApp.Save(post); err != nil {
+                    return err
+                }
+            }
+
+            created = post
+            return nil // commit
+        })
+        if txErr != nil {
+            return txErr // framework maps it to a proper HTTP error
+        }
+
+        // ── Layer 5: response (enrich runs automatically) ────────────────
+        // e.App is the OUTER app again here - the tx has committed.
+        // OnRecordEnrich will fire during JSON serialization and for any
+        // realtime subscribers receiving the "create" event.
+        return e.JSON(http.StatusOK, created)
+    })
+
+    return se.Next()
+})
+
+// ── Layer 4: hooks ──────────────────────────────────────────────────────
+// These are registered once at startup, NOT inside the route handler.
+
+app.OnRecordAfterCreateSuccess("posts").Bind(&hook.Handler[*core.RecordEvent]{
+    Id: "audit-post-create",
+    Func: func(e *core.RecordEvent) error {
+        // ⚠️ e.App here is txApp when the parent Save happened inside a tx.
+        //    Always use e.App - never a captured outer `app` - so that the
+        //    audit record participates in the same transaction (and the
+        //    same rollback) as the parent Save.
+        col, err := e.App.FindCollectionByNameOrId("audit")
+        if err != nil {
+            return err
+        }
+        audit := core.NewRecord(col)
+        audit.Set("action", "post.create")
+        audit.Set("record", e.Record.Id)
+        audit.Set("actor", e.Record.GetString("author"))
+        if err := e.App.Save(audit); err != nil {
+            return err // rolls back the whole request
+        }
+        return e.Next() // REQUIRED - see ext-hooks-chain
+    },
+})
+
+app.OnRecordEnrich("posts").BindFunc(func(e *core.RecordEnrichEvent) error {
+    // Runs for:
+    //   - GET /api/collections/posts/records (list)
+    //   - GET /api/collections/posts/records/{id} (view)
+    //   - realtime SSE create/update broadcasts
+    //   - any apis.EnrichRecord call in a custom route
+    // Does NOT run inside a transaction; e.App is the outer app.
+    e.Record.Hide("internalNotes")
+
+    if e.RequestInfo != nil && e.RequestInfo.Auth != nil {
+        e.Record.WithCustomData(true)
+        e.Record.Set("isMine", e.Record.GetString("author") == e.RequestInfo.Auth.Id)
+    }
+    return e.Next()
+})
+```
+
+### The cheat sheet: "which app am I holding?"
+
+| Where you are | Use | Why |
+|---|---|---|
+| Top of a route handler (`func(e *core.RequestEvent)`) | `e.App` | Framework's top-level app; same object the server started with |
+| Inside `RunInTransaction(func(txApp) { ... })` | `txApp` **only** | Capturing the outer app deadlocks on the SQLite writer lock |
+| Inside a record hook fired from a `Save` inside a tx | `e.App` | The framework has already rebound `e.App` to `txApp` for you |
+| Inside a record hook fired from a non-tx `Save` | `e.App` | Same identifier, same rules, just points to the top-level app |
+| Inside `OnRecordEnrich` | `e.App` | Runs during response serialization, **after** the tx has committed |
+| Inside a `app.Cron()` callback | captured `app` / `se.App` | Cron has no per-run scoped app; wrap in `RunInTransaction` if you need atomicity |
+| Inside a migration function | the `app` argument | `m.Register(func(app core.App) error { ... })` - already transactional |
+
+### Error propagation in the chain
+
+- `return err` inside `RunInTransaction` → **rolls back everything**, including any audit records written by hooks that fired from nested `Save` calls.
+- `return err` from a hook handler → propagates back through the `Save` call → propagates out of the tx closure → rolls back.
+- **Not** calling `e.Next()` in a hook → the chain is broken **silently**. The framework's own post-save work (realtime broadcast, enrich pass, activity log) is skipped but no error is reported.
+- A panic inside the tx closure is recovered by PocketBase, the tx rolls back, and the panic is converted to a 500 response.
+- A panic inside a cron callback is recovered and logged - it does **not** take down the process.
+
+### When NOT to compose this much
+
+This example is realistic but also the ceiling of what should live in a single handler. If you find yourself stacking six concerns in one route, consider splitting the logic into a service function that takes `txApp` as a parameter and is called by the route. The same function is then reusable from cron jobs, migrations, and tests.
+
+Reference: cross-references `ext-hooks-chain.md`, `ext-transactions.md`, `ext-routing-custom.md`, `ext-hooks-record-vs-request.md`, `ext-filesystem.md`, `ext-filter-binding-server.md`.
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-cron-jobs.md b/.claude/skills/pocketbase-best-practices/rules/ext-cron-jobs.md
new file mode 100644
index 0000000..cac93b9
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-cron-jobs.md
@@ -0,0 +1,126 @@
+---
+title: Schedule Recurring Jobs with the Builtin Cron Scheduler
+impact: MEDIUM
+impactDescription: Avoids external schedulers and correctly integrates background tasks with the PocketBase lifecycle
+tags: cron, scheduling, jobs, go, jsvm, extending
+---
+
+## Schedule Recurring Jobs with the Builtin Cron Scheduler
+
+PocketBase includes a cron scheduler that starts automatically with `serve`. Register jobs before calling `app.Start()` (Go) or at the top level of a `pb_hooks` file (JSVM). Each job runs in its own goroutine and receives a standard cron expression.
+
+**Incorrect (external timer, blocking hook, replacing system jobs):**
+
+```go
+// ❌ Using a raw Go timer instead of the app cron – misses lifecycle management
+go func() {
+    for range time.Tick(2 * time.Minute) {
+        log.Println("cleanup")
+    }
+}()
+
+// ❌ Blocking inside a hook instead of scheduling
+app.OnServe().BindFunc(func(se *core.ServeEvent) error {
+    for {
+        time.Sleep(2 * time.Minute)
+        log.Println("cleanup") // ❌ blocks the hook and never returns se.Next()
+    }
+})
+
+// ❌ Removing all cron jobs wipes PocketBase's own log-cleanup and auto-backup jobs
+app.Cron().RemoveAll()
+```
+
+```javascript
+// ❌ JSVM: using setTimeout – not supported in the embedded goja engine
+setTimeout(() => console.log("run"), 120_000); // ReferenceError
+```
+
+**Correct – Go:**
+
+```go
+package main
+
+import (
+    "log"
+
+    "github.com/pocketbase/pocketbase"
+    "github.com/pocketbase/pocketbase/core"
+)
+
+func main() {
+    app := pocketbase.New()
+
+    // Register before app.Start() so the scheduler knows about the job at launch.
+    // MustAdd panics on an invalid cron expression (use Add if you prefer an error return).
+    app.Cron().MustAdd("cleanup-drafts", "0 3 * * *", func() {
+        // Runs every day at 03:00 UTC in its own goroutine.
+        // Use app directly here (not e.App) because this is not inside a hook.
+        records, err := app.FindAllRecords("posts",
+            core.FilterData("status = 'draft' && created < {:cutoff}"),
+        )
+        if err != nil {
+            app.Logger().Error("cron cleanup-drafts", "err", err)
+            return
+        }
+        for _, r := range records {
+            if err := app.Delete(r); err != nil {
+                app.Logger().Error("cron delete", "id", r.Id, "err", err)
+            }
+        }
+    })
+
+    // Remove a job by ID (e.g. during a feature flag toggle)
+    // app.Cron().Remove("cleanup-drafts")
+
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Correct – JSVM:**
+
+```javascript
+// pb_hooks/crons.pb.js
+/// <reference path="../pb_data/types.d.ts" />
+
+// Top-level cronAdd() registers the job at hook-load time.
+// The handler runs in its own goroutine and has access to $app.
+cronAdd("notify-unpublished", "*/30 * * * *", () => {
+    // Runs every 30 minutes
+    const records = $app.findAllRecords("posts",
+        $dbx.hashExp({ status: "draft" })
+    );
+    console.log(`Found ${records.length} unpublished posts`);
+});
+
+// Remove a registered job by ID (useful in tests or feature toggles)
+// cronRemove("notify-unpublished");
+```
+
+**Cron expression reference:**
+
+```
+┌─── minute        (0 - 59)
+│  ┌── hour         (0 - 23)
+│  │  ┌─ day-of-month (1 - 31)
+│  │  │  ┌ month       (1 - 12)
+│  │  │  │  ┌ day-of-week  (0 - 6, Sunday = 0)
+│  │  │  │  │
+*  *  *  *  *
+
+Examples:
+  */2 * * * *    every 2 minutes
+  0 3 * * *      daily at 03:00
+  0 0 * * 0      weekly on Sunday midnight
+  @hourly        macro equivalent to 0 * * * *
+```
+
+**Key rules:**
+- System jobs use the `__pb*__` ID prefix (e.g. `__pbLogsCleanup__`). Never call `RemoveAll()` or use that prefix for your own jobs.
+- All registered cron jobs are visible and can be manually triggered from _Dashboard > Settings > Crons_.
+- JSVM handlers have access to `$app` but **not** to outer-scope variables (see JSVM scope rule).
+- Go jobs can use `app` directly (not `e.App`) because they run outside the hook/transaction context.
+
+Reference: [Go – Jobs scheduling](https://pocketbase.io/docs/go-jobs-scheduling/) | [JS – Jobs scheduling](https://pocketbase.io/docs/js-jobs-scheduling/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-filesystem.md b/.claude/skills/pocketbase-best-practices/rules/ext-filesystem.md
new file mode 100644
index 0000000..a07853e
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-filesystem.md
@@ -0,0 +1,93 @@
+---
+title: Always Close the Filesystem Handle Returned by NewFilesystem
+impact: HIGH
+impactDescription: Leaked filesystem clients keep S3 connections and file descriptors open until the process exits
+tags: filesystem, extending, files, s3, NewFilesystem, close
+---
+
+## Always Close the Filesystem Handle Returned by NewFilesystem
+
+`app.NewFilesystem()` (Go) and `$app.newFilesystem()` (JS) return a filesystem client backed by either the local disk or S3, depending on the app settings. **The caller owns the handle** and must close it - there is no finalizer and no automatic pooling. Leaking handles leaks TCP connections to S3 and file descriptors on disk, and eventually the server will stop accepting uploads.
+
+PocketBase also ships a second client: `app.NewBackupsFilesystem()` for the backups bucket/directory, with the same ownership rules.
+
+**Incorrect (no close, raw bytes buffered in memory):**
+
+```go
+// ❌ Forgets to close fs - connection leaks
+func downloadAvatar(app core.App, key string) ([]byte, error) {
+    fs, err := app.NewFilesystem()
+    if err != nil {
+        return nil, err
+    }
+    // ❌ no defer fs.Close()
+
+    // ❌ GetFile loads the whole file into a reader; reading it all into a
+    //    byte slice defeats streaming for large files
+    r, err := fs.GetFile(key)
+    if err != nil {
+        return nil, err
+    }
+    defer r.Close()
+    return io.ReadAll(r)
+}
+```
+
+**Correct (defer Close, stream to the HTTP response):**
+
+```go
+func serveAvatar(app core.App, key string) echo.HandlerFunc {
+    return func(e *core.RequestEvent) error {
+        fs, err := app.NewFilesystem()
+        if err != nil {
+            return e.InternalServerError("filesystem init failed", err)
+        }
+        defer fs.Close() // REQUIRED
+
+        // Serve directly from the filesystem - handles ranges, content-type,
+        // and the X-Accel-Redirect / X-Sendfile headers when available
+        return fs.Serve(e.Response, e.Request, key, "avatar.jpg")
+    }
+}
+
+// Uploading a local file to the PocketBase-managed filesystem
+func importAvatar(app core.App, record *core.Record, path string) error {
+    f, err := filesystem.NewFileFromPath(path)
+    if err != nil {
+        return err
+    }
+    record.Set("avatar", f) // assignment + app.Save() persist it
+    return app.Save(record)
+}
+```
+
+```javascript
+// JSVM - file factories live on the $filesystem global
+const file1 = $filesystem.fileFromPath("/tmp/import.jpg");
+const file2 = $filesystem.fileFromBytes(new Uint8Array([0xff, 0xd8]), "logo.jpg");
+const file3 = $filesystem.fileFromURL("https://example.com/a.jpg");
+
+// Assigning to a record field triggers upload on save
+record.set("avatar", file1);
+$app.save(record);
+
+// Low-level client - MUST be closed
+const fs = $app.newFilesystem();
+try {
+    const list = fs.list("thumbs/");
+    for (const obj of list) {
+        console.log(obj.key, obj.size);
+    }
+} finally {
+    fs.close(); // REQUIRED
+}
+```
+
+**Rules:**
+- `defer fs.Close()` **immediately** after a successful `NewFilesystem()` / `NewBackupsFilesystem()` call (Go). In JS, wrap in `try { ... } finally { fs.close() }`.
+- Prefer the high-level record-field API (`record.Set("field", file)` + `app.Save`) over direct `fs.Upload` calls - it handles thumbs regeneration, orphan cleanup, and hook integration.
+- File factory functions (`filesystem.NewFileFromPath`, `NewFileFromBytes`, `NewFileFromURL` / JS `$filesystem.fileFromPath|Bytes|URL`) capture their input; they do not stream until save.
+- `fileFromURL` performs an HTTP GET and loads the body into memory - not appropriate for large files.
+- Do not share a single long-lived `fs` across unrelated requests; the object is cheap to create per request.
+
+Reference: [Go Filesystem](https://pocketbase.io/docs/go-filesystem/) · [JS Filesystem](https://pocketbase.io/docs/js-filesystem/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-filter-binding-server.md b/.claude/skills/pocketbase-best-practices/rules/ext-filter-binding-server.md
new file mode 100644
index 0000000..01b835a
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-filter-binding-server.md
@@ -0,0 +1,81 @@
+---
+title: Bind User Input in Server-Side Filters with {:placeholder} Params
+impact: CRITICAL
+impactDescription: String-concatenating user input into filter expressions is a direct injection vulnerability
+tags: extending, filter, injection, security, FindRecordsByFilter, dbx
+---
+
+## Bind User Input in Server-Side Filters with {:placeholder} Params
+
+Server-side helpers like `FindFirstRecordByFilter`, `FindRecordsByFilter`, and `dbx.NewExp` accept a filter string that supports `{:name}` placeholders. **Never** concatenate user input into the filter - PocketBase's filter parser has its own syntax that is sensitive to quoting, and concatenation allows an attacker to alter the query (same class of bug as SQL injection).
+
+**Incorrect (string interpolation - filter injection):**
+
+```go
+// ❌ attacker sets email to:   x' || 1=1 || email='
+//    resulting filter bypasses the intended match entirely
+email := e.Request.URL.Query().Get("email")
+record, err := app.FindFirstRecordByFilter(
+    "users",
+    "email = '"+email+"' && verified = true", // ❌
+)
+```
+
+```javascript
+// JSVM - same class of bug
+const email = e.request.url.query().get("email");
+const record = $app.findFirstRecordByFilter(
+    "users",
+    `email = '${email}' && verified = true`, // ❌
+);
+```
+
+**Correct (named placeholders + params map):**
+
+```go
+import "github.com/pocketbase/dbx"
+
+email := e.Request.URL.Query().Get("email")
+record, err := app.FindFirstRecordByFilter(
+    "users",
+    "email = {:email} && verified = true",
+    dbx.Params{"email": email}, // values are quoted/escaped by the framework
+)
+if err != nil {
+    return e.NotFoundError("user not found", err)
+}
+
+// Paginated variant: FindRecordsByFilter(collection, filter, sort, limit, offset, params...)
+recs, err := app.FindRecordsByFilter(
+    "posts",
+    "author = {:author} && status = {:status}",
+    "-created",
+    20, 0,
+    dbx.Params{"author": e.Auth.Id, "status": "published"},
+)
+```
+
+```javascript
+// JSVM - second argument after the filter is the params object
+const record = $app.findFirstRecordByFilter(
+    "users",
+    "email = {:email} && verified = true",
+    { email: email },
+);
+
+const recs = $app.findRecordsByFilter(
+    "posts",
+    "author = {:author} && status = {:status}",
+    "-created", 20, 0,
+    { author: e.auth.id, status: "published" },
+);
+```
+
+**Rules:**
+- Placeholder syntax is `{:name}` inside the filter string, and the value is supplied via `dbx.Params{"name": value}` (Go) or a plain object (JS).
+- The same applies to `dbx.NewExp("LOWER(email) = {:email}", dbx.Params{"email": email})` when writing raw `dbx` expressions.
+- Passing a `types.DateTime` / `DateTime` value binds it correctly - do not stringify dates manually.
+- `nil` / `null` binds as SQL NULL; use `field = null` or `field != null` in the filter expression.
+- The filter grammar is the same as used by collection API rules - consult [Filter Syntax](https://pocketbase.io/docs/api-rules-and-filters/#filters) for operators.
+
+Reference: [Go database - FindRecordsByFilter](https://pocketbase.io/docs/go-records/#fetch-records-via-filter-expression) · [JS database - findRecordsByFilter](https://pocketbase.io/docs/js-records/#fetch-records-via-filter-expression)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-go-custom-sqlite.md b/.claude/skills/pocketbase-best-practices/rules/ext-go-custom-sqlite.md
new file mode 100644
index 0000000..5016dbb
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-go-custom-sqlite.md
@@ -0,0 +1,136 @@
+---
+title: Use DBConnect Only When You Need a Custom SQLite Driver
+impact: MEDIUM
+impactDescription: Incorrect driver setup breaks both data.db and auxiliary.db, or introduces unnecessary CGO
+tags: go, extending, sqlite, custom-driver, cgo, fts5, dbconnect
+---
+
+## Use DBConnect Only When You Need a Custom SQLite Driver
+
+PocketBase ships with the **pure-Go** `modernc.org/sqlite` driver (no CGO required). Only reach for a custom driver when you specifically need SQLite extensions like ICU, FTS5, or spatialite that the default driver doesn't expose. `DBConnect` is called **twice** — once for `pb_data/data.db` and once for `pb_data/auxiliary.db` — so driver registration and PRAGMAs must be idempotent.
+
+**Incorrect (unnecessary custom driver, mismatched builder, CGO without justification):**
+
+```go
+// ❌ Adding a CGO dependency with no need for extensions
+import _ "github.com/mattn/go-sqlite3"
+
+func main() {
+    app := pocketbase.NewWithConfig(pocketbase.Config{
+        DBConnect: func(dbPath string) (*dbx.DB, error) {
+            // ❌ "sqlite3" builder name used but "pb_sqlite3" driver was registered —
+            //    or vice versa — causing "unknown driver" / broken query generation
+            return dbx.Open("sqlite3", dbPath)
+        },
+    })
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Correct (mattn/go-sqlite3 with CGO — proper PRAGMA init hook and builder map entry):**
+
+```go
+package main
+
+import (
+    "database/sql"
+    "log"
+
+    "github.com/mattn/go-sqlite3"
+    "github.com/pocketbase/dbx"
+    "github.com/pocketbase/pocketbase"
+)
+
+func init() {
+    // Use a unique driver name to avoid conflicts with other packages.
+    // sql.Register panics if called twice with the same name, so put it in init().
+    sql.Register("pb_sqlite3", &sqlite3.SQLiteDriver{
+        ConnectHook: func(conn *sqlite3.SQLiteConn) error {
+            _, err := conn.Exec(`
+                PRAGMA busy_timeout      = 10000;
+                PRAGMA journal_mode      = WAL;
+                PRAGMA journal_size_limit = 200000000;
+                PRAGMA synchronous       = NORMAL;
+                PRAGMA foreign_keys      = ON;
+                PRAGMA temp_store        = MEMORY;
+                PRAGMA cache_size        = -32000;
+            `, nil)
+            return err
+        },
+    })
+    // Mirror the sqlite3 query builder so PocketBase generates correct SQL
+    dbx.BuilderFuncMap["pb_sqlite3"] = dbx.BuilderFuncMap["sqlite3"]
+}
+
+func main() {
+    app := pocketbase.NewWithConfig(pocketbase.Config{
+        DBConnect: func(dbPath string) (*dbx.DB, error) {
+            return dbx.Open("pb_sqlite3", dbPath)
+        },
+    })
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Correct (ncruces/go-sqlite3 — no CGO, PRAGMAs via DSN query string):**
+
+```go
+package main
+
+import (
+    "log"
+
+    "github.com/pocketbase/dbx"
+    "github.com/pocketbase/pocketbase"
+    _ "github.com/ncruces/go-sqlite3/driver"
+    _ "github.com/ncruces/go-sqlite3/embed"
+)
+
+func main() {
+    const pragmas = "?_pragma=busy_timeout(10000)" +
+        "&_pragma=journal_mode(WAL)" +
+        "&_pragma=journal_size_limit(200000000)" +
+        "&_pragma=synchronous(NORMAL)" +
+        "&_pragma=foreign_keys(ON)" +
+        "&_pragma=temp_store(MEMORY)" +
+        "&_pragma=cache_size(-32000)"
+
+    app := pocketbase.NewWithConfig(pocketbase.Config{
+        DBConnect: func(dbPath string) (*dbx.DB, error) {
+            return dbx.Open("sqlite3", "file:"+dbPath+pragmas)
+        },
+    })
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Conditional custom driver with default fallback:**
+
+```go
+app := pocketbase.NewWithConfig(pocketbase.Config{
+    DBConnect: func(dbPath string) (*dbx.DB, error) {
+        // Use custom driver only for the main data file; fall back for auxiliary
+        if strings.HasSuffix(dbPath, "data.db") {
+            return dbx.Open("pb_sqlite3", dbPath)
+        }
+        return core.DefaultDBConnect(dbPath)
+    },
+})
+```
+
+**Decision guide:**
+
+| Need | Driver |
+|------|--------|
+| Default (no extensions) | Built-in `modernc.org/sqlite` — no `DBConnect` config needed |
+| FTS5, ICU, spatialite | `mattn/go-sqlite3` (CGO) or `ncruces/go-sqlite3` (WASM, no CGO) |
+| Reduce binary size | `go build -tags no_default_driver` to exclude the default driver (~4 MB saved) |
+| Conditional fallback | Call `core.DefaultDBConnect(dbPath)` inside your `DBConnect` function |
+
+Reference: [Extend with Go - Custom SQLite driver](https://pocketbase.io/docs/go-overview/#custom-sqlite-driver)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-go-migrations.md b/.claude/skills/pocketbase-best-practices/rules/ext-go-migrations.md
new file mode 100644
index 0000000..0bc32b5
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-go-migrations.md
@@ -0,0 +1,139 @@
+---
+title: Version Your Schema with Go Migrations
+impact: HIGH
+impactDescription: Guarantees repeatable, transactional schema evolution and eliminates manual dashboard changes in production
+tags: go, migrations, schema, database, migratecmd, extending
+---
+
+## Version Your Schema with Go Migrations
+
+PocketBase ships with a `migratecmd` plugin that generates versioned `.go` migration files, applies them automatically on `serve`, and lets you roll back with `migrate down`. Because the files are compiled into your binary, no extra migration tool is needed.
+
+**Incorrect (one-off SQL or dashboard changes in production):**
+
+```go
+// ❌ Running raw SQL directly at startup without a migration file –
+//    the change is applied every restart and has no rollback path.
+app.OnServe().BindFunc(func(se *core.ServeEvent) error {
+    _, err := app.DB().NewQuery(
+        "ALTER TABLE posts ADD COLUMN summary TEXT DEFAULT ''",
+    ).Execute()
+    return err
+})
+
+// ❌ Forgetting to import the migrations package means
+//    registered migrations are never executed.
+package main
+
+import (
+    "github.com/pocketbase/pocketbase"
+    "github.com/pocketbase/pocketbase/plugins/migratecmd"
+    // _ "myapp/migrations"  ← omitted: migrations never run
+)
+```
+
+**Correct (register migratecmd, import migrations package):**
+
+```go
+// main.go
+package main
+
+import (
+    "log"
+    "os"
+
+    "github.com/pocketbase/pocketbase"
+    "github.com/pocketbase/pocketbase/plugins/migratecmd"
+    "github.com/pocketbase/pocketbase/tools/osutils"
+
+    // Import side-effects only; this registers all init() migrations.
+    _ "myapp/migrations"
+)
+
+func main() {
+    app := pocketbase.New()
+
+    migratecmd.MustRegister(app, app.RootCmd, migratecmd.Config{
+        // Automigrate generates a new .go file whenever you make
+        // collection changes in the Dashboard (dev-only).
+        Automigrate: osutils.IsProbablyGoRun(),
+    })
+
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Create and write a migration:**
+
+```bash
+# Create a blank migration file in ./migrations/
+go run . migrate create "add_summary_to_posts"
+```
+
+```go
+// migrations/1687801090_add_summary_to_posts.go
+package migrations
+
+import (
+    "github.com/pocketbase/pocketbase/core"
+    m "github.com/pocketbase/pocketbase/migrations"
+)
+
+func init() {
+    m.Register(func(app core.App) error {
+        // app is a transactional App instance – safe to use directly.
+        collection, err := app.FindCollectionByNameOrId("posts")
+        if err != nil {
+            return err
+        }
+
+        collection.Fields.Add(&core.TextField{
+            Name:     "summary",
+            Required: false,
+        })
+
+        return app.Save(collection)
+    }, func(app core.App) error {
+        // Optional rollback
+        collection, err := app.FindCollectionByNameOrId("posts")
+        if err != nil {
+            return err
+        }
+        collection.Fields.RemoveByName("summary")
+        return app.Save(collection)
+    })
+}
+```
+
+**Snapshot all collections (useful for a fresh repo):**
+
+```bash
+# Generates a migration file that recreates your current schema from scratch.
+go run . migrate collections
+```
+
+**Clean up dev migration history:**
+
+```bash
+# Remove _migrations table entries that have no matching .go file.
+# Run after squashing or deleting intermediate dev migration files.
+go run . migrate history-sync
+```
+
+**Apply / roll back manually:**
+
+```bash
+go run . migrate up        # apply all unapplied migrations
+go run . migrate down 1    # revert the last applied migration
+```
+
+**Key details:**
+- Migration functions receive a **transactional** `core.App` – treat it as the database source of truth. Never use the outer `app` variable inside migration callbacks.
+- New unapplied migrations run automatically on every `serve` start – no manual step in production.
+- `Automigrate: osutils.IsProbablyGoRun()` limits auto-generation to `go run` (development) and prevents accidental file creation in production binaries.
+- Prefer the collection API (`app.Save(collection)`) over raw SQL `ALTER TABLE` so PocketBase's internal schema cache stays consistent.
+- Commit all generated `.go` files to version control; do **not** commit `pb_data/`.
+
+Reference: [Extend with Go – Migrations](https://pocketbase.io/docs/go-migrations/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-go-setup.md b/.claude/skills/pocketbase-best-practices/rules/ext-go-setup.md
new file mode 100644
index 0000000..c04c40a
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-go-setup.md
@@ -0,0 +1,93 @@
+---
+title: Set Up a Go-Extended PocketBase Application
+impact: HIGH
+impactDescription: Foundation for all custom Go business logic, hooks, and routing
+tags: go, extending, setup, main, bootstrap
+---
+
+## Set Up a Go-Extended PocketBase Application
+
+When extending PocketBase as a Go framework (v0.36+), the entry point is a small `main.go` that creates the app, registers hooks on `OnServe()`, and calls `app.Start()`. Avoid reaching for a global `app` variable inside hook handlers - use `e.App` instead so code works inside transactions.
+
+**Incorrect (global app reuse, no OnServe hook, bare http.Handler):**
+
+```go
+package main
+
+import (
+    "log"
+    "net/http"
+
+    "github.com/pocketbase/pocketbase"
+)
+
+var app = pocketbase.New() // global reference used inside handlers
+
+func main() {
+    // Routes registered directly via net/http - bypasses PocketBase's router,
+    // middleware chain, auth, rate limiter and body limit
+    http.HandleFunc("/hello", func(w http.ResponseWriter, r *http.Request) {
+        w.Write([]byte("hello"))
+    })
+
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Correct (register routes inside `OnServe`, use `e.App` in handlers):**
+
+```go
+package main
+
+import (
+    "log"
+    "net/http"
+    "os"
+
+    "github.com/pocketbase/pocketbase"
+    "github.com/pocketbase/pocketbase/apis"
+    "github.com/pocketbase/pocketbase/core"
+)
+
+func main() {
+    app := pocketbase.New()
+
+    app.OnServe().BindFunc(func(se *core.ServeEvent) error {
+        // Serve static assets from ./pb_public (if present)
+        se.Router.GET("/{path...}", apis.Static(os.DirFS("./pb_public"), false))
+
+        // Custom API route - namespaced under /api/{yourapp}/ to avoid
+        // colliding with built-in /api/collections, /api/realtime, etc.
+        se.Router.GET("/api/myapp/hello/{name}", func(e *core.RequestEvent) error {
+            return e.JSON(http.StatusOK, map[string]string{
+                "message": "hello " + e.Request.PathValue("name"),
+            })
+        }).Bind(apis.RequireAuth())
+
+        return se.Next()
+    })
+
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
+    }
+}
+```
+
+**Project bootstrap:**
+
+```bash
+go mod init myapp
+go mod tidy
+go run . serve           # development
+go build && ./myapp serve  # production (statically linked binary)
+```
+
+**Key details:**
+- Requires **Go 1.25.0+** (PocketBase v0.36.7+ bumped the minimum to Go 1.25.0).
+- PocketBase ships with the pure-Go `modernc.org/sqlite` driver - **no CGO required** by default.
+- If you need FTS5, ICU, or a custom SQLite build, pass `core.DBConnect` in `pocketbase.NewWithConfig(...)` - it is called twice (once for `pb_data/data.db`, once for `pb_data/auxiliary.db`).
+- Inside hooks, prefer `e.App` over a captured parent-scope `app` - the hook may run inside a transaction and the parent `app` would deadlock.
+
+Reference: [Extend with Go - Overview](https://pocketbase.io/docs/go-overview/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-hooks-chain.md b/.claude/skills/pocketbase-best-practices/rules/ext-hooks-chain.md
new file mode 100644
index 0000000..e5a09e1
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-hooks-chain.md
@@ -0,0 +1,82 @@
+---
+title: Always Call e.Next() and Use e.App Inside Hook Handlers
+impact: CRITICAL
+impactDescription: Forgetting e.Next() silently breaks the execution chain; reusing parent-scope app causes deadlocks
+tags: hooks, events, extending, transactions, deadlock
+---
+
+## Always Call e.Next() and Use e.App Inside Hook Handlers
+
+Every PocketBase event hook handler is part of an execution chain. If the handler does not call `e.Next()` (Go) or `e.next()` (JS), **the remaining handlers and the core framework action are skipped silently**. Also, hooks may run inside a DB transaction - any database call made through a captured parent-scope `app`/`$app` instead of the event's own `e.App`/`e.app` will deadlock against the transaction.
+
+**Incorrect (missing `Next`, captured parent-scope app, global mutex):**
+
+```go
+var mu sync.Mutex // ❌ global lock invoked recursively by cascade hooks = deadlock
+app := pocketbase.New()
+
+app.OnRecordAfterCreateSuccess("articles").BindFunc(func(e *core.RecordEvent) error {
+    mu.Lock()
+    defer mu.Unlock()
+
+    // ❌ uses outer `app`, not `e.App` - deadlocks when the hook fires
+    //    inside a transaction, because the outer app is blocked on the
+    //    transaction's write lock
+    _, err := app.FindRecordById("audit", e.Record.Id)
+    if err != nil {
+        return err
+    }
+    return nil // ❌ forgot e.Next() - framework never persists the record
+})
+```
+
+```javascript
+// JSVM
+onRecordAfterCreateSuccess((e) => {
+    // ❌ no e.next() = downstream hooks and response serialization skipped
+    console.log("created", e.record.id);
+}, "articles");
+```
+
+**Correct (call Next, use `e.App`, attach an Id for later unbinding):**
+
+```go
+app := pocketbase.New()
+
+app.OnRecordAfterCreateSuccess("articles").Bind(&hook.Handler[*core.RecordEvent]{
+    Id:       "audit-article-create",
+    Priority: 10, // higher = later; default 0 = order of registration
+    Func: func(e *core.RecordEvent) error {
+        // Always use e.App - it is the transactional app when inside a tx
+        audit := core.NewRecord(/* ... */)
+        audit.Set("record", e.Record.Id)
+        if err := e.App.Save(audit); err != nil {
+            return err
+        }
+        return e.Next() // REQUIRED
+    },
+})
+
+// Later: app.OnRecordAfterCreateSuccess("articles").Unbind("audit-article-create")
+```
+
+```javascript
+// JSVM - e.app is the transactional app instance
+onRecordAfterCreateSuccess((e) => {
+    const audit = new Record($app.findCollectionByNameOrId("audit"));
+    audit.set("record", e.record.id);
+    e.app.save(audit);
+
+    e.next(); // REQUIRED
+}, "articles");
+```
+
+**Rules of the execution chain:**
+
+- `Bind(handler)` vs `BindFunc(func)`: `Bind` lets you set `Id` (for `Unbind`) and `Priority`; `BindFunc` auto-generates both.
+- Priority defaults to `0` = order of source registration. Lower numbers run first, negative priorities run before defaults (the built-in middlewares use priorities like `-1010`, `-1000`, `-990`).
+- **Never hold a global mutex across `e.Next()`** - cascade-delete and nested saves can re-enter the same hook and deadlock.
+- `Unbind(id)` removes a specific handler; `UnbindAll()` also removes **system handlers**, so only call it if you really mean to replace the default behavior.
+- `Trigger(event, ...)` is almost never needed in user code.
+
+Reference: [Go Event hooks](https://pocketbase.io/docs/go-event-hooks/) · [JS Event hooks](https://pocketbase.io/docs/js-event-hooks/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-hooks-record-vs-request.md b/.claude/skills/pocketbase-best-practices/rules/ext-hooks-record-vs-request.md
new file mode 100644
index 0000000..24f8a8b
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-hooks-record-vs-request.md
@@ -0,0 +1,64 @@
+---
+title: Pick the Right Record Hook - Model vs Request vs Enrich
+impact: HIGH
+impactDescription: Wrong hook = missing request context, double-fired logic, or leaked fields in realtime events
+tags: hooks, onRecordEnrich, onRecordRequest, model-hooks, extending
+---
+
+## Pick the Right Record Hook - Model vs Request vs Enrich
+
+PocketBase v0.23+ splits record hooks into three families. Using the wrong one is the #1 source of "my hook doesn't fire" and "my hidden field still shows up in realtime events" bugs.
+
+| Family | Examples | Fires for | Has request context? |
+|--------|----------|-----------|----------------------|
+| **Model hooks** | `OnRecordCreate`, `OnRecordAfterCreateSuccess`, `OnRecordValidate` | Any save path - Web API **and** cron jobs, custom commands, migrations, calls from other hooks | No - `e.Record`, `e.App`, **no** `e.RequestInfo` |
+| **Request hooks** | `OnRecordCreateRequest`, `OnRecordsListRequest`, `OnRecordViewRequest` | **Only** the built-in Web API endpoints | Yes - `e.RequestInfo`, `e.Auth`, HTTP headers/body |
+| **Enrich hook** | `OnRecordEnrich` | Every response serialization, **including realtime SSE events** and `apis.enrichRecord` | Yes, via `e.RequestInfo` |
+
+**Incorrect (hiding a field in the request hook - leaks in realtime):**
+
+```go
+// ❌ Only runs for GET /api/collections/users/records/{id}.
+//    Realtime SSE subscribers still receive the "role" field.
+app.OnRecordViewRequest("users").BindFunc(func(e *core.RecordRequestEvent) error {
+    e.Record.Hide("role")
+    return e.Next()
+})
+```
+
+**Correct (use `OnRecordEnrich` so realtime and list responses also hide the field):**
+
+```go
+app.OnRecordEnrich("users").BindFunc(func(e *core.RecordEnrichEvent) error {
+    e.Record.Hide("role")
+
+    // Add a computed field only for authenticated users
+    if e.RequestInfo.Auth != nil {
+        e.Record.WithCustomData(true) // required to attach non-schema data
+        e.Record.Set("isOwner", e.Record.Id == e.RequestInfo.Auth.Id)
+    }
+    return e.Next()
+})
+```
+
+```javascript
+// JSVM
+onRecordEnrich((e) => {
+    e.record.hide("role");
+
+    if (e.requestInfo.auth?.collection()?.name === "users") {
+        e.record.withCustomData(true);
+        e.record.set("computedScore",
+            e.record.get("score") * e.requestInfo.auth.get("base"));
+    }
+    e.next();
+}, "users");
+```
+
+**Selection guide:**
+- Need to mutate the record before **any** save (API, cron, migration, nested hook)? → `OnRecordCreate` / `OnRecordUpdate` (pre-save) or `OnRecord*Success` (post-save).
+- Need access to HTTP headers, query params, or the authenticated client? → `OnRecord*Request`.
+- Need to hide fields, redact values, or attach computed props on responses including realtime? → **`OnRecordEnrich`** - this is the safest default for response shaping.
+- Need to validate before save? → `OnRecordValidate` (proxy over `OnModelValidate`).
+
+Reference: [Go Record request hooks](https://pocketbase.io/docs/go-event-hooks/#record-crud-request-hooks) · [JS Record model hooks](https://pocketbase.io/docs/js-event-hooks/#record-model-hooks)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-js-migrations.md b/.claude/skills/pocketbase-best-practices/rules/ext-js-migrations.md
new file mode 100644
index 0000000..c1986d3
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-js-migrations.md
@@ -0,0 +1,105 @@
+---
+title: Write JSVM Migrations as pb_migrations/*.js Files
+impact: HIGH
+impactDescription: JSVM migrations look different from Go ones; missing the timestamp prefix or the down-callback silently breaks replay
+tags: jsvm, migrations, pb_migrations, schema, extending
+---
+
+## Write JSVM Migrations as pb_migrations/*.js Files
+
+JSVM migrations live in `pb_migrations/` next to the executable. Unlike Go migrations (which use `init()` + `m.Register(...)` inside a package imported from `main.go`), JSVM migrations are **auto-discovered by filename** and call the global `migrate()` function with an `up` callback and an optional `down` callback. `--automigrate` is on by default in v0.36+, so admin-UI changes generate these files for you; you also write them by hand for data migrations, seed data, and index changes that the UI can't express.
+
+**Incorrect (wrong filename format, missing down, raw SQL without cache invalidation):**
+
+```javascript
+// pb_migrations/add_audit.js   ❌ missing <unix>_ prefix - never runs
+migrate((app) => {
+    // ❌ Raw ALTER TABLE leaves PocketBase's internal collection cache stale
+    app.db().newQuery(
+        "ALTER TABLE posts ADD COLUMN summary TEXT DEFAULT ''"
+    ).execute();
+});
+// ❌ No down callback - `migrate down` cannot revert this in dev
+```
+
+**Correct (timestamped filename, collection API, both up and down):**
+
+```javascript
+// pb_migrations/1712500000_add_audit_collection.js
+/// <reference path="../pb_data/types.d.ts" />
+
+migrate(
+    // UP - runs on `serve` / `migrate up`
+    (app) => {
+        const collection = new Collection({
+            type: "base",
+            name: "audit",
+            fields: [
+                { name: "action", type: "text", required: true },
+                { name: "actor",  type: "relation", collectionId: "_pb_users_auth_", cascadeDelete: false },
+                { name: "meta",   type: "json" },
+                { name: "created", type: "autodate", onCreate: true },
+            ],
+            indexes: [
+                "CREATE INDEX idx_audit_actor ON audit (actor)",
+                "CREATE INDEX idx_audit_created ON audit (created)",
+            ],
+        });
+        app.save(collection);
+    },
+    // DOWN - runs on `migrate down N`
+    (app) => {
+        const collection = app.findCollectionByNameOrId("audit");
+        app.delete(collection);
+    },
+);
+```
+
+**Seed data migration (common pattern):**
+
+```javascript
+// pb_migrations/1712500100_seed_default_tags.js
+/// <reference path="../pb_data/types.d.ts" />
+
+migrate(
+    (app) => {
+        const tags = app.findCollectionByNameOrId("tags");
+        for (const name of ["urgent", "bug", "feature", "docs"]) {
+            const r = new Record(tags);
+            r.set("name", name);
+            app.save(r); // `app` here is the transactional app - all or nothing
+        }
+    },
+    (app) => {
+        const tags = app.findCollectionByNameOrId("tags");
+        for (const name of ["urgent", "bug", "feature", "docs"]) {
+            const r = app.findFirstRecordByFilter(
+                "tags",
+                "name = {:name}",
+                { name },
+            );
+            if (r) app.delete(r);
+        }
+    },
+);
+```
+
+**CLI commands (same as Go migrations):**
+
+```bash
+./pocketbase migrate create "add_audit_collection"  # templated blank file
+./pocketbase migrate up                              # apply pending
+./pocketbase migrate down 1                          # revert last
+./pocketbase migrate history-sync                    # reconcile _migrations table
+```
+
+**Rules:**
+- **Filename format**: `<unix_timestamp>_<description>.js`. The timestamp sets ordering. Never renumber a committed file.
+- **The `app` argument is transactional**: every migration runs inside its own transaction. Throw to roll back. Do not capture `$app` from the outer scope - use the `app` parameter so the work participates in the tx.
+- **Use the collection API** (`new Collection`, `app.save(collection)`), not raw `ALTER TABLE`. Raw SQL leaves PocketBase's in-memory schema cache stale until the next restart.
+- **Always write the down callback** in development. In production, down migrations are rare but the callback is what makes `migrate down 1` work during emergency rollbacks.
+- **Do not import from other files** - goja has no ES modules, and at migration time the `pb_hooks` loader has not necessarily run. Keep each migration self-contained.
+- **Commit `pb_migrations/` to version control**. Never commit `pb_data/`.
+- **Conflicting with Go migrations**: you can run either Go or JS migrations, not a mix of both in the same project. JSVM migrations are enabled by default; Go migrations require `migratecmd.MustRegister(...)` in `main.go`.
+
+Reference: [Extend with JavaScript - Migrations](https://pocketbase.io/docs/js-migrations/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-js-setup.md b/.claude/skills/pocketbase-best-practices/rules/ext-js-setup.md
new file mode 100644
index 0000000..895ca71
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-js-setup.md
@@ -0,0 +1,57 @@
+---
+title: Set Up JSVM (pb_hooks) for Server-Side JavaScript
+impact: HIGH
+impactDescription: Correct setup unlocks hot-reload, type-completion, and the full JSVM API
+tags: jsvm, pb_hooks, extending, setup, typescript
+---
+
+## Set Up JSVM (pb_hooks) for Server-Side JavaScript
+
+The prebuilt PocketBase executable embeds an ES5 JavaScript engine (goja). Drop `*.pb.js` files into a `pb_hooks` directory next to the executable and they load automatically at startup. Files are loaded in **filename sort order**, and on UNIX platforms the process auto-reloads when any `pb_hooks` file changes.
+
+**Incorrect (TypeScript without transpile, wrong filename, missing types reference):**
+
+```typescript
+// pb_hooks/main.ts  ❌ PocketBase loads ONLY *.pb.js - a .ts file is ignored
+import { something } from "./lib"; // ❌ ES modules not supported in goja
+
+routerAdd("GET", "/hello", (e) => e.json(200, { ok: true }));
+```
+
+```javascript
+// pb_hooks/hooks.js  ❌ wrong extension - must be *.pb.js
+// No /// reference -> editor shows every call as "any"
+onRecordAfterUpdateSuccess((e) => {
+    console.log(e.record.get("email"));
+    // Missing e.next() - stops the execution chain silently
+}, "users");
+```
+
+**Correct (valid filename, types reference, `e.next()` called):**
+
+```javascript
+// pb_hooks/main.pb.js
+/// <reference path="../pb_data/types.d.ts" />
+
+// Hooks defined earlier in the filename sort order run first.
+// Use prefixes like "01_", "10_", "99_" if order matters.
+
+routerAdd("GET", "/api/myapp/hello/{name}", (e) => {
+    const name = e.request.pathValue("name");
+    return e.json(200, { message: "Hello " + name });
+});
+
+onRecordAfterUpdateSuccess((e) => {
+    console.log("user updated:", e.record.get("email"));
+    e.next(); // REQUIRED - otherwise the execution chain is broken
+}, "users");
+```
+
+**Key details:**
+- JS method names are **camelCase** versions of their Go equivalents (`FindRecordById` → `$app.findRecordById`).
+- Errors are thrown as regular JS exceptions, not returned as values.
+- Global objects: `$app` (the app), `$apis` (routing helpers/middlewares), `$os` (OS primitives), `$security` (JWT, random strings, AES), `$filesystem` (file factories), `$dbx` (query builder), `$mails` (email helpers), `__hooks` (absolute path to `pb_hooks`).
+- `pb_data/types.d.ts` is regenerated automatically - commit the triple-slash reference but not the file itself if you prefer.
+- Auto-reload on file change works on UNIX only. On Windows, restart the process manually.
+
+Reference: [Extend with JavaScript - Overview](https://pocketbase.io/docs/js-overview/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-jsvm-modules.md b/.claude/skills/pocketbase-best-practices/rules/ext-jsvm-modules.md
new file mode 100644
index 0000000..8cbd74e
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-jsvm-modules.md
@@ -0,0 +1,105 @@
+---
+title: Load Shared Code with CommonJS require() in pb_hooks
+impact: MEDIUM
+impactDescription: Correct module usage prevents require() failures, race conditions, and ESM import errors
+tags: jsvm, pb_hooks, modules, require, commonjs, esm, filesystem
+---
+
+## Load Shared Code with CommonJS require() in pb_hooks
+
+The embedded JSVM (goja) supports **only CommonJS** (`require()`). ES module `import` syntax is not supported without pre-bundling. Modules use a shared registry — they are evaluated once and cached, so avoid mutable module-level state to prevent race conditions across concurrent requests.
+
+**Incorrect (ESM imports, mutable shared state, Node.js APIs):**
+
+```javascript
+// ❌ ESM import syntax — not supported by goja
+import { sendEmail } from "./utils.js";
+
+// ❌ Node.js APIs don't exist in the JSVM sandbox
+const fs = require("fs");
+fs.writeFileSync("output.txt", "hello"); // ReferenceError
+
+// ❌ Mutable module-level state is shared across concurrent requests
+// pb_hooks/counter.js
+let requestCount = 0;
+module.exports = { increment: () => ++requestCount }; // race condition
+```
+
+**Correct (CommonJS require, stateless helpers, JSVM bindings for OS/file ops):**
+
+```javascript
+// pb_hooks/utils.js  — stateless helper module
+module.exports = {
+    formatDate: (d) => new Date(d).toISOString().slice(0, 10),
+    validateEmail: (addr) => /^[^@]+@[^@]+\.[^@]+$/.test(addr),
+};
+
+// pb_hooks/main.pb.js
+/// <reference path="../pb_data/types.d.ts" />
+
+onRecordAfterCreateSuccess((e) => {
+    const utils = require(`${__hooks}/utils.js`);
+    const date = utils.formatDate(e.record.get("created"));
+    console.log("Record created on:", date);
+    e.next();
+}, "posts");
+
+// Use $os.* for file system operations (not Node.js fs)
+routerAdd("GET", "/api/myapp/read-config", (e) => {
+    const raw = $os.readFile(`${__hooks}/config.json`);
+    const cfg = JSON.parse(raw);
+    return e.json(200, { name: cfg.appName });
+});
+
+// Use $filesystem.s3(...) or $filesystem.local(...) for storage (v0.36.4+)
+routerAdd("POST", "/api/myapp/upload", (e) => {
+    const bucket = $filesystem.s3({
+        endpoint: "s3.amazonaws.com",
+        bucket:   "my-bucket",
+        region:   "us-east-1",
+        accessKey: $app.settings().s3.accessKey,
+        secret:    $app.settings().s3.secret,
+    });
+    // ... use bucket to store/retrieve files
+    return e.json(200, { ok: true });
+}, $apis.requireAuth());
+```
+
+**Using third-party CJS packages:**
+
+```javascript
+// node_modules/ is searched automatically alongside __hooks.
+// Install packages with npm next to the pb_hooks directory, then require by name.
+onBootstrap((e) => {
+    e.next();
+    // Only CJS-compatible packages work without bundling
+    const slugify = require("slugify");
+    console.log(slugify("Hello World")); // "Hello-World"
+});
+```
+
+**Using ESM-only packages (bundle to CJS first):**
+
+```bash
+# Bundle an ESM package to CJS with rollup before committing it to pb_hooks
+npx rollup node_modules/some-esm-pkg/index.js \
+  --file pb_hooks/vendor/some-esm-pkg.js \
+  --format cjs
+```
+
+```javascript
+onBootstrap((e) => {
+    e.next();
+    const pkg = require(`${__hooks}/vendor/some-esm-pkg.js`);
+});
+```
+
+**JSVM engine limitations:**
+- No `setTimeout` / `setInterval` — no async scheduling inside handlers.
+- No Node.js APIs (`fs`, `Buffer`, `process`, etc.) — use `$os.*` and `$filesystem.*` JSVM bindings instead.
+- No browser APIs (`fetch`, `window`, `localStorage`) — use `$app.newHttpClient()` for outbound HTTP requests.
+- ES6 is mostly supported but not fully spec-compliant (goja engine).
+- The prebuilt PocketBase executable starts a **pool of 15 JS runtimes** by default; adjust with `--hooksPool=N` for high-concurrency workloads (more runtimes = more memory, better throughput).
+- `nullString()`, `nullInt()`, `nullFloat()`, `nullBool()`, `nullArray()`, `nullObject()` helpers are available (v0.35.0+) for scanning nullable DB columns safely.
+
+Reference: [Extend with JavaScript - Loading modules](https://pocketbase.io/docs/js-overview/#loading-modules)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-jsvm-scope.md b/.claude/skills/pocketbase-best-practices/rules/ext-jsvm-scope.md
new file mode 100644
index 0000000..2a0367c
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-jsvm-scope.md
@@ -0,0 +1,69 @@
+---
+title: Avoid Capturing Variables Outside JSVM Handler Scope
+impact: HIGH
+impactDescription: Variables defined outside a handler are undefined at runtime due to handler serialization
+tags: jsvm, pb_hooks, scope, isolation, variables
+---
+
+## Avoid Capturing Variables Outside JSVM Handler Scope
+
+Each JSVM handler (hook, route, middleware) is **serialized and executed as an isolated program**. Variables or functions declared at the module/file scope are NOT accessible inside handler bodies. This is the most common source of `undefined` errors in `pb_hooks` code.
+
+**Incorrect (accessing outer-scope variable inside handler):**
+
+```javascript
+// pb_hooks/main.pb.js
+const APP_NAME = "myapp"; // ❌ will be undefined inside handlers
+
+onBootstrap((e) => {
+    e.next();
+    console.log(APP_NAME); // ❌ undefined — APP_NAME is not in handler scope
+});
+
+// ❌ Even $app references captured here may not work as expected
+const helper = (id) => $app.findRecordById("posts", id);
+
+onRecordAfterCreateSuccess((e) => {
+    helper(e.record.id); // ❌ helper is undefined inside the handler
+}, "posts");
+```
+
+**Correct (move shared state into a required module, or use `$app`/`e.app` directly):**
+
+```javascript
+// pb_hooks/config.js  — stateless CommonJS module
+module.exports = {
+    APP_NAME: "myapp",
+    MAX_RETRIES: 3,
+};
+
+// pb_hooks/main.pb.js
+/// <reference path="../pb_data/types.d.ts" />
+
+onBootstrap((e) => {
+    e.next();
+    // Load the shared module INSIDE the handler
+    const config = require(`${__hooks}/config.js`);
+    console.log(config.APP_NAME); // ✅ "myapp"
+});
+
+routerAdd("GET", "/api/myapp/status", (e) => {
+    const config = require(`${__hooks}/config.js`);
+    return e.json(200, { app: config.APP_NAME });
+});
+
+onRecordAfterCreateSuccess((e) => {
+    // Access the app directly via e.app inside the handler
+    const post = e.app.findRecordById("posts", e.record.id);
+    e.next();
+}, "posts");
+```
+
+**Key rules:**
+- Every handler body is serialized to a string and executed in its own isolated goja runtime context. There is no shared global state between handlers at runtime.
+- `require()` loads modules from a **shared registry** — modules are evaluated once and cached. Keep module-level code stateless; avoid mutable module exports to prevent data races under concurrent requests.
+- `__hooks` is always available inside handlers and resolves to the absolute path of the `pb_hooks` directory.
+- Error stack trace line numbers may not be accurate because of the handler serialization — log meaningful context manually when debugging.
+- Workaround for simple constants: move them to a `config.js` module and `require()` it inside each handler that needs it.
+
+Reference: [Extend with JavaScript - Handlers scope](https://pocketbase.io/docs/js-overview/#handlers-scope)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-mailer.md b/.claude/skills/pocketbase-best-practices/rules/ext-mailer.md
new file mode 100644
index 0000000..315d963
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-mailer.md
@@ -0,0 +1,114 @@
+---
+title: Send Email via app.NewMailClient, Never the Default example.com Sender
+impact: HIGH
+impactDescription: Default sender is no-reply@example.com; shipping it bounces every email and damages your SMTP reputation
+tags: mailer, email, smtp, $mails, extending, templates
+---
+
+## Send Email via app.NewMailClient, Never the Default example.com Sender
+
+PocketBase ships with a mailer accessible through `app.NewMailClient()` (Go) or `$app.newMailClient()` (JS). It reads the SMTP settings configured in **Admin UI → Settings → Mail settings**, or falls back to a local `sendmail`-like client if SMTP is not configured. Two things bite people: (1) the default `Meta.senderAddress` is `no-reply@example.com` - shipping with that bounces every email and poisons your sender reputation; (2) there is no connection pooling, so long-lived mail client handles are **not** safe to share across requests - create one per send.
+
+**Incorrect (default sender, shared client, no error handling):**
+
+```go
+// ❌ Default sender is example.com, and this mailer instance is captured
+//    for the process lifetime - SMTP connections go stale
+var mailer = app.NewMailClient()
+
+app.OnRecordAfterCreateSuccess("orders").BindFunc(func(e *core.RecordEvent) error {
+    msg := &mailer.Message{
+        From:    mail.Address{Address: "no-reply@example.com"}, // ❌
+        To:      []mail.Address{{Address: e.Record.GetString("email")}},
+        Subject: "Order confirmed",
+        HTML:    "<p>Thanks</p>",
+    }
+    mailer.Send(msg) // ❌ error swallowed
+    return e.Next()
+})
+```
+
+**Correct (sender from settings, per-send client, explicit error path):**
+
+```go
+import (
+    "net/mail"
+    pbmail "github.com/pocketbase/pocketbase/tools/mailer"
+)
+
+app.OnRecordAfterCreateSuccess("orders").BindFunc(func(e *core.RecordEvent) error {
+    // IMPORTANT: resolve the sender from settings at send-time, not at
+    // startup - an admin can change it live from the UI
+    meta := e.App.Settings().Meta
+    from := mail.Address{
+        Name:    meta.SenderName,
+        Address: meta.SenderAddress,
+    }
+
+    msg := &pbmail.Message{
+        From:    from,
+        To:      []mail.Address{{Address: e.Record.GetString("email")}},
+        Subject: "Order confirmed",
+        HTML:    renderOrderEmail(e.Record), // your template function
+    }
+
+    // Create the client per send - avoids stale TCP sessions
+    if err := e.App.NewMailClient().Send(msg); err != nil {
+        e.App.Logger().Error("order email send failed",
+            "err",      err,
+            "recordId", e.Record.Id,
+        )
+        // Do NOT return the error - a failed email should not roll back the order
+    }
+    return e.Next()
+})
+```
+
+```javascript
+// JSVM - $mails global exposes message factories
+onRecordAfterCreateSuccess((e) => {
+    const meta = $app.settings().meta;
+
+    const message = new MailerMessage({
+        from: {
+            address: meta.senderAddress,
+            name:    meta.senderName,
+        },
+        to:      [{ address: e.record.get("email") }],
+        subject: "Order confirmed",
+        html:    `<p>Thanks for order ${e.record.id}</p>`,
+    });
+
+    try {
+        $app.newMailClient().send(message);
+    } catch (err) {
+        $app.logger().error("order email send failed", "err", err, "id", e.record.id);
+        // swallow - do not rollback the order
+    }
+    e.next();
+}, "orders");
+```
+
+**Templated emails via the built-in verification/reset templates:**
+
+```go
+// PocketBase has baked-in templates for verification, password reset, and
+// email change. Trigger them via apis.*Request helpers rather than building
+// your own message:
+//   apis.RecordRequestPasswordReset(app, authRecord)
+//   apis.RecordRequestVerification(app, authRecord)
+//   apis.RecordRequestEmailChange(app, authRecord, newEmail)
+//
+// These use the templates configured in Admin UI → Settings → Mail templates.
+```
+
+**Rules:**
+- **Always change `Meta.SenderAddress`** before shipping. In development, use Mailpit or MailHog; in production, use a verified domain that matches your SPF/DKIM records.
+- **Resolve the sender from `app.Settings().Meta` at send-time**, not at startup. Settings are mutable from the admin UI.
+- **Create the client per send** (`app.NewMailClient()` / `$app.newMailClient()`). It is cheap - it re-reads the SMTP settings each time, so config changes take effect without a restart.
+- **Never return a send error from a hook** unless the user's action genuinely depends on the email going out. Email failure is common (transient SMTP, address typo) and should not roll back a business transaction.
+- **Log failures with context** (record id, recipient domain) so you can grep them later. PocketBase does not retry failed sends.
+- **For bulk sending, queue it**. The mailer is synchronous - looping `Send()` over 10k records blocks the request. Push to a cron-drained queue collection instead.
+- **Template rendering**: Go users should use `html/template`; JS users can use template literals or pull in a tiny template lib. PocketBase itself only renders templates for its baked-in flows.
+
+Reference: [Go Mailer](https://pocketbase.io/docs/go-sending-emails/) · [JS Mailer](https://pocketbase.io/docs/js-sending-emails/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-routing-custom.md b/.claude/skills/pocketbase-best-practices/rules/ext-routing-custom.md
new file mode 100644
index 0000000..14a1d1f
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-routing-custom.md
@@ -0,0 +1,88 @@
+---
+title: Register Custom Routes Safely with Built-in Middlewares
+impact: HIGH
+impactDescription: Protects custom endpoints with auth, avoids /api path collisions, inherits rate limiting
+tags: routing, middleware, extending, requireAuth, apis
+---
+
+## Register Custom Routes Safely with Built-in Middlewares
+
+PocketBase routing is built on top of `net/http.ServeMux`. Custom routes are registered inside the `OnServe()` hook (Go) or via `routerAdd()` / `routerUse()` (JSVM). **Always** namespace custom routes under `/api/{yourapp}/...` to avoid colliding with built-in endpoints, and attach `apis.RequireAuth()` / `$apis.requireAuth()` (or stricter) to anything that is not meant to be public.
+
+**Incorrect (path collision, no auth, raw ResponseWriter):**
+
+```go
+// ❌ "/api/records" collides with /api/collections/{name}/records built-in
+se.Router.POST("/api/records", func(e *core.RequestEvent) error {
+    // ❌ no auth check - anyone can call this
+    // ❌ returns raw text; no content-type
+    e.Response.Write([]byte("ok"))
+    return nil
+})
+```
+
+**Correct (namespaced, authenticated, group-scoped middleware):**
+
+```go
+app.OnServe().BindFunc(func(se *core.ServeEvent) error {
+    // Group everything under /api/myapp/ and require auth for the entire group
+    g := se.Router.Group("/api/myapp")
+    g.Bind(apis.RequireAuth())                  // authenticated users only
+    g.Bind(apis.Gzip())                         // compress responses
+    g.Bind(apis.BodyLimit(10 << 20))            // per-route override of default 32MB limit
+
+    g.GET("/profile", func(e *core.RequestEvent) error {
+        return e.JSON(http.StatusOK, map[string]any{
+            "id":    e.Auth.Id,
+            "email": e.Auth.GetString("email"),
+        })
+    })
+
+    // Superuser-only admin endpoint
+    g.POST("/admin/rebuild-index", func(e *core.RequestEvent) error {
+        // ... do the work
+        return e.JSON(http.StatusOK, map[string]bool{"ok": true})
+    }).Bind(apis.RequireSuperuserAuth())
+
+    // Resource the owner (or a superuser) can access
+    g.GET("/users/{id}/private", func(e *core.RequestEvent) error {
+        return e.JSON(http.StatusOK, map[string]string{"private": "data"})
+    }).Bind(apis.RequireSuperuserOrOwnerAuth("id"))
+
+    return se.Next()
+})
+```
+
+```javascript
+// JSVM
+routerAdd("GET", "/api/myapp/profile", (e) => {
+    return e.json(200, {
+        id: e.auth.id,
+        email: e.auth.getString("email"),
+    });
+}, $apis.requireAuth());
+
+routerAdd("POST", "/api/myapp/admin/rebuild-index", (e) => {
+    return e.json(200, { ok: true });
+}, $apis.requireSuperuserAuth());
+```
+
+**Built-in middlewares (Go: `apis.*`, JS: `$apis.*`):**
+
+| Middleware | Use |
+|---|---|
+| `RequireGuestOnly()` | Reject authenticated clients (e.g. public signup forms) |
+| `RequireAuth(...collections)` | Require any auth record; optionally restrict to specific auth collections |
+| `RequireSuperuserAuth()` | Alias for `RequireAuth("_superusers")` |
+| `RequireSuperuserOrOwnerAuth("id")` | Allow superusers OR the auth record whose id matches the named path param |
+| `Gzip()` | Gzip-compress the response |
+| `BodyLimit(bytes)` | Override the default 32MB request body cap (0 = no limit) |
+| `SkipSuccessActivityLog()` | Suppress activity log for successful responses |
+
+**Path details:**
+- Patterns follow `net/http.ServeMux`: `{name}` = single segment, `{name...}` = catch-all.
+- A trailing `/` acts as a prefix wildcard; use `{$}` to anchor to the exact path only.
+- **Always** prefix custom routes with `/api/{yourapp}/` - do not put them under `/api/` alone, which collides with built-in collection / realtime / settings endpoints.
+- Order: global middlewares → group middlewares → route middlewares → handler. Use negative priorities to run before built-ins if needed.
+
+Reference: [Go Routing](https://pocketbase.io/docs/go-routing/) · [JS Routing](https://pocketbase.io/docs/js-routing/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-settings.md b/.claude/skills/pocketbase-best-practices/rules/ext-settings.md
new file mode 100644
index 0000000..f44af94
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-settings.md
@@ -0,0 +1,88 @@
+---
+title: Read Settings via app.Settings(), Encrypt at Rest with PB_ENCRYPTION
+impact: HIGH
+impactDescription: Hardcoded secrets and unencrypted settings storage are the #1 source of credential leaks
+tags: settings, configuration, encryption, secrets, PB_ENCRYPTION, extending
+---
+
+## Read Settings via app.Settings(), Encrypt at Rest with PB_ENCRYPTION
+
+PocketBase stores every runtime-mutable setting (SMTP credentials, S3 keys, OAuth2 client secrets, JWT secrets for each auth collection) in the `_params` table as JSON. Admin UI edits write to the same place. There are two knobs that matter: (1) **how you read settings from Go/JS** - always via `app.Settings()` at call time, never captured at startup; (2) **how they are stored on disk** - set the `PB_ENCRYPTION` env var to a 32-char key so the whole blob is encrypted at rest. Without encryption, anyone with a copy of `data.db` has your SMTP password, OAuth2 secrets, and every collection's signing key.
+
+**Incorrect (hardcoded secret, captured at startup, unencrypted at rest):**
+
+```go
+// ❌ Secret compiled into the binary - leaks via `strings ./pocketbase`
+const slackWebhook = "https://hooks.slack.com/services/T00/B00/XXXX"
+
+// ❌ Captured once at startup - if an admin rotates the SMTP password via the
+//    UI, this stale value keeps trying until restart
+var smtpHost = app.Settings().SMTP.Host
+
+// ❌ No PB_ENCRYPTION set - `sqlite3 pb_data/data.db "SELECT * FROM _params"`
+//    prints every secret in plaintext
+./pocketbase serve
+```
+
+**Correct (env + settings lookup at call time + encryption at rest):**
+
+```bash
+# Generate a 32-char encryption key once and store it in your secrets manager
+# (1Password, SOPS, AWS SSM, etc). Commit NOTHING related to this value.
+openssl rand -hex 16    # 32 hex chars
+
+# Start with the key exported - PocketBase AES-encrypts _params on write
+# and decrypts on read. Losing the key == losing access to settings.
+export PB_ENCRYPTION="3a7c...deadbeef32charsexactly"
+./pocketbase serve
+```
+
+```go
+// Reading mutable settings at call time - reflects live UI changes
+func notifyAdmin(app core.App, msg string) error {
+    meta := app.Settings().Meta
+    from := mail.Address{Name: meta.SenderName, Address: meta.SenderAddress}
+    // ...
+}
+
+// Mutating settings programmatically (e.g. during a migration)
+settings := app.Settings()
+settings.Meta.AppName = "MyApp"
+settings.SMTP.Enabled = true
+settings.SMTP.Host = os.Getenv("SMTP_HOST") // inject from env at write time
+if err := app.Save(settings); err != nil {
+    return err
+}
+```
+
+```javascript
+// JSVM
+onBootstrap((e) => {
+    e.next();
+
+    const settings = $app.settings();
+    settings.meta.appName = "MyApp";
+    $app.save(settings);
+});
+
+// At send-time
+const meta = $app.settings().meta;
+```
+
+**Secrets that do NOT belong in `app.Settings()`:**
+
+- Database encryption key itself → `PB_ENCRYPTION` env var (not in the DB, obviously)
+- Third-party webhooks your code calls (Slack, Stripe, etc) → env vars, read via `os.Getenv` / `$os.getenv`
+- CI tokens, deploy keys → your secrets manager, not PocketBase
+
+`app.Settings()` is for things an **admin** should be able to rotate through the UI. Everything else lives in env vars, injected by your process supervisor (systemd, Docker, Kubernetes).
+
+**Key details:**
+- **`PB_ENCRYPTION` must be exactly 32 characters.** Anything else crashes at startup.
+- **Losing the key is unrecoverable** - the settings blob cannot be decrypted, and the server refuses to boot. Back up the key alongside (but separately from) your `pb_data` backups.
+- **Rotating the key**: start with the old key set, call `app.Settings()` → `app.Save(settings)` to re-encrypt under the new key, then restart with the new key. Do this under a maintenance window.
+- **Settings changes fire `OnSettingsReload`** - use it if you have in-memory state that depends on a setting (e.g. a rate limiter sized from `app.Settings().RateLimits.Default`).
+- **Do not call `app.Settings()` in a hot loop.** It returns a fresh copy each time. Cache for the duration of a single request, not the process.
+- **`app.Save(settings)`** persists and broadcasts the reload event. Mutating the returned struct without saving is a no-op.
+
+Reference: [Settings](https://pocketbase.io/docs/going-to-production/#use-encryption-for-the-pb_data-settings) · [OnSettingsReload hook](https://pocketbase.io/docs/go-event-hooks/#app-hooks)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-testing.md b/.claude/skills/pocketbase-best-practices/rules/ext-testing.md
new file mode 100644
index 0000000..0f0b5fc
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-testing.md
@@ -0,0 +1,173 @@
+---
+title: Test Hooks and Routes with tests.NewTestApp and ApiScenario
+instead of Curl
+impact: HIGH
+impactDescription: Without the tests package you cannot exercise hooks, middleware, and transactions in isolation
+tags: testing, tests, NewTestApp, ApiScenario, go, extending
+---
+
+## Test Hooks and Routes with tests.NewTestApp and ApiScenario
+
+PocketBase ships a `tests` package specifically for integration-testing Go extensions. `tests.NewTestApp(testDataDir)` builds a fully-wired `core.App` over a **temp copy** of your test data directory, so you can register hooks, fire requests through the real router, and assert on the resulting DB state without spinning up a real HTTP server or touching `pb_data/`. The `tests.ApiScenario` struct drives the router the same way a real HTTP client would, including middleware and transactions. Curl-based shell tests cannot do either of these things.
+
+**Incorrect (hand-rolled HTTP client, shared dev DB, no hook reset):**
+
+```go
+// ❌ Hits the actual dev server - depends on side-effects from a previous run
+func TestCreatePost(t *testing.T) {
+    resp, _ := http.Post("http://localhost:8090/api/collections/posts/records",
+        "application/json",
+        strings.NewReader(`{"title":"hi"}`))
+    if resp.StatusCode != 200 {
+        t.Fatal("bad status")
+    }
+    // ❌ No DB assertion, no cleanup, no hook verification
+}
+```
+
+**Correct (NewTestApp + ApiScenario + AfterTestFunc assertions):**
+
+```go
+// internal/app/posts_test.go
+package app_test
+
+import (
+    "net/http"
+    "strings"
+    "testing"
+
+    "github.com/pocketbase/pocketbase/core"
+    "github.com/pocketbase/pocketbase/tests"
+
+    "myapp/internal/hooks" // your hook registration
+)
+
+// testDataDir is a checked-in pb_data snapshot with your collections.
+// Create it once with `./pocketbase --dir ./test_pb_data migrate up`
+// and commit it to your test fixtures.
+const testDataDir = "../../test_pb_data"
+
+func TestCreatePostFiresAudit(t *testing.T) {
+    // Each test gets its own copy of testDataDir - parallel-safe
+    app, err := tests.NewTestApp(testDataDir)
+    if err != nil {
+        t.Fatal(err)
+    }
+    defer app.Cleanup() // REQUIRED - removes the temp copy
+
+    // Register the hook under test against this isolated app
+    hooks.RegisterPostHooks(app)
+
+    scenario := tests.ApiScenario{
+        Name:   "POST /api/collections/posts/records as verified user",
+        Method: http.MethodPost,
+        URL:    "/api/collections/posts/records",
+        Body:   strings.NewReader(`{"title":"hello","slug":"hello"}`),
+        Headers: map[string]string{
+            "Authorization": testAuthHeader(app, "users", "alice@example.com"),
+            "Content-Type":  "application/json",
+        },
+        ExpectedStatus: 200,
+        ExpectedContent: []string{
+            `"title":"hello"`,
+            `"slug":"hello"`,
+        },
+        NotExpectedContent: []string{
+            `"internalNotes"`, // the enrich hook should hide this
+        },
+        ExpectedEvents: map[string]int{
+            "OnRecordCreateRequest":       1,
+            "OnRecordAfterCreateSuccess":  1,
+            "OnRecordEnrich":              1,
+        },
+        AfterTestFunc: func(t testing.TB, app *tests.TestApp, res *http.Response) {
+            // Assert side-effects in the DB using the SAME app instance
+            audits, err := app.FindRecordsByFilter(
+                "audit",
+                "action = 'post.create'",
+                "-created", 10, 0,
+            )
+            if err != nil {
+                t.Fatal(err)
+            }
+            if len(audits) != 1 {
+                t.Fatalf("expected 1 audit record, got %d", len(audits))
+            }
+        },
+        TestAppFactory: func(t testing.TB) *tests.TestApp { return app },
+    }
+
+    scenario.Test(t)
+}
+```
+
+**Table-driven variant (authz matrix):**
+
+```go
+func TestPostsListAuthz(t *testing.T) {
+    for _, tc := range []struct {
+        name   string
+        auth   string  // "", "users:alice", "users:bob", "_superusers:root"
+        expect int
+    }{
+        {"guest gets public posts",       "",                200},
+        {"authed gets own + public",      "users:alice",     200},
+        {"superuser sees everything",     "_superusers:root",200},
+    } {
+        t.Run(tc.name, func(t *testing.T) {
+            app, _ := tests.NewTestApp(testDataDir)
+            defer app.Cleanup()
+            hooks.RegisterPostHooks(app)
+
+            tests.ApiScenario{
+                Method:         http.MethodGet,
+                URL:            "/api/collections/posts/records",
+                Headers:        authHeaderFor(app, tc.auth),
+                ExpectedStatus: tc.expect,
+                TestAppFactory: func(t testing.TB) *tests.TestApp { return app },
+            }.Test(t)
+        })
+    }
+}
+```
+
+**Unit-testing a hook in isolation (no HTTP layer):**
+
+```go
+func TestAuditHookRollsBackOnAuditFailure(t *testing.T) {
+    app, _ := tests.NewTestApp(testDataDir)
+    defer app.Cleanup()
+    hooks.RegisterPostHooks(app)
+
+    // Delete the audit collection so the hook's Save fails
+    audit, _ := app.FindCollectionByNameOrId("audit")
+    _ = app.Delete(audit)
+
+    col, _ := app.FindCollectionByNameOrId("posts")
+    post := core.NewRecord(col)
+    post.Set("title", "should rollback")
+    post.Set("slug", "rollback")
+
+    if err := app.Save(post); err == nil {
+        t.Fatal("expected Save to fail because audit hook errored")
+    }
+
+    // Assert the post was NOT persisted (tx rolled back)
+    _, err := app.FindFirstRecordByFilter("posts", "slug = 'rollback'", nil)
+    if err == nil {
+        t.Fatal("post should not exist after rollback")
+    }
+}
+```
+
+**Rules:**
+- **Always `defer app.Cleanup()`** - otherwise temp directories leak under `/tmp`.
+- **Use a checked-in `test_pb_data/` fixture** with the collections you need. Do not depend on the dev `pb_data/` - tests must be hermetic.
+- **Register hooks against the test app**, not against a package-level `app` singleton. The test app is a fresh instance each time.
+- **`ExpectedEvents`** asserts that specific hooks fired the expected number of times - use it to catch "hook silently skipped because someone forgot `e.Next()`" regressions.
+- **`AfterTestFunc`** runs with the same app instance the scenario used, so you can query the DB to verify side-effects.
+- **Parallelize with `t.Parallel()`** - `NewTestApp` gives each goroutine its own copy, so there's no shared state.
+- **Tests run pure-Go SQLite** (`modernc.org/sqlite`) - no CGO, no extra setup, works on `go test ./...` out of the box.
+- **For JSVM**, there is no equivalent test harness yet - test pb_hooks by booting `tests.NewTestApp` with the `pb_hooks/` directory populated and exercising the router from Go. Pure-JS unit testing of hook bodies requires extracting the logic into a `require()`able module.
+
+Reference: [Testing](https://pocketbase.io/docs/go-testing/) · [tests package GoDoc](https://pkg.go.dev/github.com/pocketbase/pocketbase/tests)
diff --git a/.claude/skills/pocketbase-best-practices/rules/ext-transactions.md b/.claude/skills/pocketbase-best-practices/rules/ext-transactions.md
new file mode 100644
index 0000000..435bc85
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/ext-transactions.md
@@ -0,0 +1,74 @@
+---
+title: Use RunInTransaction with the Scoped txApp, Never the Outer App
+impact: CRITICAL
+impactDescription: Mixing scoped and outer app inside a transaction silently deadlocks or writes outside the tx
+tags: transactions, extending, deadlock, runInTransaction, atomicity
+---
+
+## Use RunInTransaction with the Scoped txApp, Never the Outer App
+
+`app.RunInTransaction` (Go) and `$app.runInTransaction` (JS) wrap a block of work in a SQLite write transaction. The callback receives a **transaction-scoped app instance** (`txApp` / `txApp`). Every database call inside the block must go through that scoped instance - reusing the outer `app` / `$app` bypasses the transaction (silent partial writes) or deadlocks (SQLite allows only one writer).
+
+**Incorrect (outer `app` used inside the tx block):**
+
+```go
+// ❌ Uses the outer app for the second Save - deadlocks on the writer lock
+err := app.RunInTransaction(func(txApp core.App) error {
+    user := core.NewRecord(usersCol)
+    user.Set("email", "a@b.co")
+    if err := txApp.Save(user); err != nil {
+        return err
+    }
+
+    audit := core.NewRecord(auditCol)
+    audit.Set("user", user.Id)
+    return app.Save(audit) // ❌ NOT txApp - blocks forever
+})
+```
+
+**Correct (always `txApp` inside the block, return errors to roll back):**
+
+```go
+err := app.RunInTransaction(func(txApp core.App) error {
+    user := core.NewRecord(usersCol)
+    user.Set("email", "a@b.co")
+    if err := txApp.Save(user); err != nil {
+        return err // rollback
+    }
+
+    audit := core.NewRecord(auditCol)
+    audit.Set("user", user.Id)
+    if err := txApp.Save(audit); err != nil {
+        return err // rollback
+    }
+    return nil // commit
+})
+if err != nil {
+    return err
+}
+```
+
+```javascript
+// JSVM - the callback receives the transactional app
+$app.runInTransaction((txApp) => {
+    const user = new Record(txApp.findCollectionByNameOrId("users"));
+    user.set("email", "a@b.co");
+    txApp.save(user);
+
+    const audit = new Record(txApp.findCollectionByNameOrId("audit"));
+    audit.set("user", user.id);
+    txApp.save(audit);
+
+    // throw anywhere in this block to roll back the whole tx
+});
+```
+
+**Rules of the transaction:**
+- **Use only `txApp` / the callback's scoped app** inside the block. Capturing the outer `app` defeats the purpose and can deadlock.
+- Inside event hooks, `e.App` is already the transactional app when the hook fires inside a tx - prefer it over a captured parent-scope `app` for the same reason.
+- Return an error (Go) or `throw` (JS) to roll back. A successful return commits.
+- SQLite serializes writers - keep transactions **short**. Do not make HTTP calls, send emails, or wait on external systems inside the block.
+- Do not start a transaction inside another transaction on the same app - nested `RunInTransaction` on `txApp` is supported and reuses the existing transaction, but nested calls on the outer `app` will deadlock.
+- Hooks (`OnRecordAfterCreateSuccess`, etc.) fired from a `Save` inside a tx run **inside that tx**. Anything they do through `e.App` participates in the rollback; anything they do through a captured outer `app` does not.
+
+Reference: [Go database](https://pocketbase.io/docs/go-database/#transaction) · [JS database](https://pocketbase.io/docs/js-database/#transaction)
diff --git a/.claude/skills/pocketbase-best-practices/rules/file-serving.md b/.claude/skills/pocketbase-best-practices/rules/file-serving.md
new file mode 100644
index 0000000..32c7835
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/file-serving.md
@@ -0,0 +1,188 @@
+---
+title: Generate File URLs Correctly
+impact: MEDIUM
+impactDescription: Proper URLs with thumbnails and access control
+tags: files, urls, thumbnails, serving
+---
+
+## Generate File URLs Correctly
+
+Use the SDK's `getURL` method to generate proper file URLs with thumbnail support and access tokens for protected files.
+
+**Incorrect (manually constructing URLs):**
+
+```javascript
+// Hardcoded URL construction - brittle
+const imageUrl = `http://localhost:8090/api/files/${record.collectionId}/${record.id}/${record.image}`;
+
+// Missing token for protected files
+const privateUrl = pb.files.getURL(record, record.document);
+// Returns URL but file access denied if protected!
+
+// Wrong thumbnail syntax
+const thumb = `${imageUrl}?thumb=100x100`;  // Wrong format
+```
+
+**Correct (using SDK methods):**
+
+```javascript
+// Basic file URL
+const imageUrl = pb.files.getURL(record, record.image);
+// Returns: http://host/api/files/COLLECTION/RECORD_ID/filename.jpg
+
+// With thumbnail (for images only)
+const thumbUrl = pb.files.getURL(record, record.image, {
+  thumb: '100x100'  // Width x Height
+});
+
+// Thumbnail options
+const thumbs = {
+  square: pb.files.getURL(record, record.image, { thumb: '100x100' }),
+  fit: pb.files.getURL(record, record.image, { thumb: '100x0' }),     // Fit width
+  fitHeight: pb.files.getURL(record, record.image, { thumb: '0x100' }), // Fit height
+  crop: pb.files.getURL(record, record.image, { thumb: '100x100t' }), // Top crop
+  cropBottom: pb.files.getURL(record, record.image, { thumb: '100x100b' }), // Bottom
+  force: pb.files.getURL(record, record.image, { thumb: '100x100f' }), // Force exact
+};
+
+// Protected files (require auth)
+async function getProtectedFileUrl(record, filename) {
+  // Get file access token (valid for limited time)
+  const token = await pb.files.getToken();
+
+  // Include token in URL
+  return pb.files.getURL(record, filename, { token });
+}
+
+// Example with protected document
+async function downloadDocument(record) {
+  const token = await pb.files.getToken();
+  const url = pb.files.getURL(record, record.document, { token });
+
+  // Token is appended: ...?token=xxx
+  window.open(url, '_blank');
+}
+```
+
+**React component example:**
+
+```jsx
+function UserAvatar({ user, size = 50 }) {
+  if (!user.avatar) {
+    return <DefaultAvatar size={size} />;
+  }
+
+  const avatarUrl = pb.files.getURL(user, user.avatar, {
+    thumb: `${size}x${size}`
+  });
+
+  return (
+    <img
+      src={avatarUrl}
+      alt={user.name}
+      width={size}
+      height={size}
+      loading="lazy"
+    />
+  );
+}
+
+function ImageGallery({ record }) {
+  // Record has multiple images
+  const images = record.images || [];
+
+  return (
+    <div className="gallery">
+      {images.map((filename, index) => (
+        <img
+          key={filename}
+          src={pb.files.getURL(record, filename, { thumb: '200x200' })}
+          onClick={() => openFullSize(record, filename)}
+          loading="lazy"
+        />
+      ))}
+    </div>
+  );
+}
+
+function openFullSize(record, filename) {
+  const fullUrl = pb.files.getURL(record, filename);
+  window.open(fullUrl, '_blank');
+}
+```
+
+**Handling file URLs in lists:**
+
+```javascript
+// Efficiently generate URLs for list of records
+const posts = await pb.collection('posts').getList(1, 20, {
+  expand: 'author'
+});
+
+const postsWithUrls = posts.items.map(post => ({
+  ...post,
+  thumbnailUrl: post.image
+    ? pb.files.getURL(post, post.image, { thumb: '300x200' })
+    : null,
+  authorAvatarUrl: post.expand?.author?.avatar
+    ? pb.files.getURL(post.expand.author, post.expand.author.avatar, { thumb: '40x40' })
+    : null
+}));
+```
+
+**Thumbnail format reference:**
+
+| Format | Description |
+|--------|-------------|
+| `WxH` | Fit within dimensions |
+| `Wx0` | Fit width, auto height |
+| `0xH` | Auto width, fit height |
+| `WxHt` | Crop from top |
+| `WxHb` | Crop from bottom |
+| `WxHf` | Force exact dimensions |
+
+**Performance and caching:**
+
+```javascript
+// File URLs are effectively immutable (randomized filenames on upload).
+// This makes them ideal for aggressive caching.
+
+// Configure Cache-Control via reverse proxy (Nginx/Caddy):
+// location /api/files/ { add_header Cache-Control "public, immutable, max-age=86400"; }
+
+// Thumbnails are generated on first request and cached by PocketBase.
+// Pre-generate expected thumb sizes after upload to avoid cold-start latency:
+async function uploadWithThumbs(record, file) {
+  const updated = await pb.collection('posts').update(record.id, { image: file });
+
+  // Pre-warm thumbnail cache by requesting expected sizes
+  const sizes = ['100x100', '300x200', '800x600'];
+  await Promise.all(sizes.map(size =>
+    fetch(pb.files.getURL(updated, updated.image, { thumb: size }))
+  ));
+
+  return updated;
+}
+```
+
+**S3 file serving optimization:**
+
+When using S3 storage, PocketBase proxies all file requests through the server. For better performance with public files, serve directly from your S3 CDN:
+
+```javascript
+// Default: All file requests proxy through PocketBase
+const url = pb.files.getURL(record, record.image);
+// -> https://myapp.com/api/files/COLLECTION/ID/filename.jpg (proxied)
+
+// For public files with S3 + CDN, construct CDN URL directly:
+const cdnBase = 'https://cdn.myapp.com';  // Your S3 CDN domain
+const cdnUrl = `${cdnBase}/${record.collectionId}/${record.id}/${record.image}`;
+// Bypasses PocketBase, served directly from CDN edge
+
+// NOTE: This only works for public files (no access token needed).
+// Protected files must go through PocketBase for token validation.
+```
+
+Reference: [PocketBase Files](https://pocketbase.io/docs/files-handling/)
+
+> **Note (JS SDK v0.26.7):** `pb.files.getURL()` now serializes query parameters the same way as the fetch methods — passing `null` or `undefined` as a query param value is silently skipped from the generated URL, so you no longer need to guard optional params before passing them to `getURL()`.
diff --git a/.claude/skills/pocketbase-best-practices/rules/file-upload.md b/.claude/skills/pocketbase-best-practices/rules/file-upload.md
new file mode 100644
index 0000000..892277b
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/file-upload.md
@@ -0,0 +1,168 @@
+---
+title: Upload Files Correctly
+impact: MEDIUM
+impactDescription: Reliable uploads with progress tracking and validation
+tags: files, upload, storage, attachments
+---
+
+## Upload Files Correctly
+
+File uploads can use plain objects or FormData. Handle large files properly with progress tracking and appropriate error handling.
+
+**Incorrect (naive file upload):**
+
+```javascript
+// Missing error handling
+async function uploadFile(file) {
+  await pb.collection('documents').create({
+    title: file.name,
+    file: file
+  });
+  // No error handling, no progress feedback
+}
+
+// Uploading without validation
+async function uploadAvatar(file) {
+  await pb.collection('users').update(userId, {
+    avatar: file  // No size/type check - might fail server-side
+  });
+}
+
+// Base64 upload (inefficient)
+async function uploadImage(base64) {
+  await pb.collection('images').create({
+    image: base64  // Wrong! PocketBase expects File/Blob
+  });
+}
+```
+
+**Correct (proper file uploads):**
+
+```javascript
+// Basic upload with object (auto-converts to FormData)
+async function uploadDocument(file, metadata) {
+  try {
+    const record = await pb.collection('documents').create({
+      title: metadata.title,
+      description: metadata.description,
+      file: file  // File object from input
+    });
+    return record;
+  } catch (error) {
+    if (error.response?.data?.file) {
+      throw new Error(`File error: ${error.response.data.file.message}`);
+    }
+    throw error;
+  }
+}
+
+// Upload multiple files
+async function uploadGallery(files, albumId) {
+  const record = await pb.collection('albums').update(albumId, {
+    images: files  // Array of File objects
+  });
+  return record;
+}
+
+// FormData for more control
+async function uploadWithProgress(file, onProgress) {
+  const formData = new FormData();
+  formData.append('title', file.name);
+  formData.append('file', file);
+
+  // Using fetch directly for progress (SDK doesn't expose progress)
+  return new Promise((resolve, reject) => {
+    const xhr = new XMLHttpRequest();
+
+    xhr.upload.addEventListener('progress', (e) => {
+      if (e.lengthComputable) {
+        onProgress(Math.round((e.loaded / e.total) * 100));
+      }
+    });
+
+    xhr.addEventListener('load', () => {
+      if (xhr.status >= 200 && xhr.status < 300) {
+        resolve(JSON.parse(xhr.responseText));
+      } else {
+        reject(new Error(`Upload failed: ${xhr.status}`));
+      }
+    });
+
+    xhr.addEventListener('error', () => reject(new Error('Upload failed')));
+
+    xhr.open('POST', `${pb.baseURL}/api/collections/documents/records`);
+    xhr.setRequestHeader('Authorization', pb.authStore.token);
+    xhr.send(formData);
+  });
+}
+
+// Client-side validation before upload
+function validateFile(file, options = {}) {
+  const {
+    maxSize = 10 * 1024 * 1024,  // 10MB default
+    allowedTypes = ['image/jpeg', 'image/png', 'image/gif', 'application/pdf'],
+    maxNameLength = 100
+  } = options;
+
+  const errors = [];
+
+  if (file.size > maxSize) {
+    errors.push(`File too large. Max: ${maxSize / 1024 / 1024}MB`);
+  }
+
+  if (!allowedTypes.includes(file.type)) {
+    errors.push(`Invalid file type: ${file.type}`);
+  }
+
+  if (file.name.length > maxNameLength) {
+    errors.push(`Filename too long`);
+  }
+
+  return { valid: errors.length === 0, errors };
+}
+
+// Complete upload flow
+async function handleFileUpload(inputEvent) {
+  const file = inputEvent.target.files[0];
+  if (!file) return;
+
+  // Validate
+  const validation = validateFile(file, {
+    maxSize: 5 * 1024 * 1024,
+    allowedTypes: ['image/jpeg', 'image/png']
+  });
+
+  if (!validation.valid) {
+    showError(validation.errors.join(', '));
+    return;
+  }
+
+  // Upload with progress
+  try {
+    setUploading(true);
+    const record = await uploadWithProgress(file, setProgress);
+    showSuccess('Upload complete!');
+    return record;
+  } catch (error) {
+    showError(error.message);
+  } finally {
+    setUploading(false);
+  }
+}
+```
+
+**Deleting files:**
+
+```javascript
+// Remove specific file(s) from record
+await pb.collection('albums').update(albumId, {
+  'images-': ['filename1.jpg', 'filename2.jpg']  // Remove these files
+});
+
+// Clear all files
+await pb.collection('documents').update(docId, {
+  file: null  // Removes the file
+});
+```
+
+Reference: [PocketBase File Upload](https://pocketbase.io/docs/files-handling/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/file-validation.md b/.claude/skills/pocketbase-best-practices/rules/file-validation.md
new file mode 100644
index 0000000..7840277
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/file-validation.md
@@ -0,0 +1,187 @@
+---
+title: Validate File Uploads
+impact: MEDIUM
+impactDescription: Prevents invalid uploads, improves security and UX
+tags: files, validation, security, upload
+---
+
+## Validate File Uploads
+
+Validate files on both client and server side. Client validation improves UX; server validation (via collection settings) enforces security.
+
+**Incorrect (no validation):**
+
+```javascript
+// Accepting any file without checks
+async function uploadFile(file) {
+  return pb.collection('uploads').create({ file });
+  // Could upload 1GB executable!
+}
+
+// Only checking extension (easily bypassed)
+function validateFile(file) {
+  const ext = file.name.split('.').pop();
+  return ['jpg', 'png'].includes(ext);
+  // User can rename virus.exe to virus.jpg
+}
+
+// Client-only validation (can be bypassed)
+async function uploadAvatar(file) {
+  if (file.size > 1024 * 1024) {
+    throw new Error('Too large');
+  }
+  // Attacker can bypass this with dev tools
+  return pb.collection('users').update(userId, { avatar: file });
+}
+```
+
+**Correct (comprehensive validation):**
+
+```javascript
+// 1. Configure server-side validation in collection settings
+// In Admin UI or via API:
+const collectionConfig = {
+  schema: [
+    {
+      name: 'avatar',
+      type: 'file',
+      options: {
+        maxSelect: 1,           // Single file only
+        maxSize: 5242880,       // 5MB in bytes
+        mimeTypes: [            // Allowed types
+          'image/jpeg',
+          'image/png',
+          'image/gif',
+          'image/webp'
+        ],
+        thumbs: ['100x100', '200x200']  // Auto-generate thumbnails
+      }
+    },
+    {
+      name: 'documents',
+      type: 'file',
+      options: {
+        maxSelect: 10,
+        maxSize: 10485760,  // 10MB
+        mimeTypes: [
+          'application/pdf',
+          'application/msword',
+          'application/vnd.openxmlformats-officedocument.wordprocessingml.document'
+        ]
+      }
+    }
+  ]
+};
+
+// 2. Client-side validation for better UX
+const FILE_CONSTRAINTS = {
+  avatar: {
+    maxSize: 5 * 1024 * 1024,
+    allowedTypes: ['image/jpeg', 'image/png', 'image/gif', 'image/webp'],
+    maxFiles: 1
+  },
+  documents: {
+    maxSize: 10 * 1024 * 1024,
+    allowedTypes: ['application/pdf'],
+    maxFiles: 10
+  }
+};
+
+function validateFiles(files, constraintKey) {
+  const constraints = FILE_CONSTRAINTS[constraintKey];
+  const errors = [];
+  const validFiles = [];
+
+  if (files.length > constraints.maxFiles) {
+    errors.push(`Maximum ${constraints.maxFiles} file(s) allowed`);
+  }
+
+  for (const file of files) {
+    const fileErrors = [];
+
+    // Check size
+    if (file.size > constraints.maxSize) {
+      const maxMB = constraints.maxSize / 1024 / 1024;
+      fileErrors.push(`${file.name}: exceeds ${maxMB}MB limit`);
+    }
+
+    // Check MIME type (more reliable than extension, but still spoofable)
+    // Client-side file.type is based on extension, not file content.
+    // Always enforce mimeTypes in PocketBase collection settings for server-side validation.
+    if (!constraints.allowedTypes.includes(file.type)) {
+      fileErrors.push(`${file.name}: invalid file type (${file.type || 'unknown'})`);
+    }
+
+    // Check for suspicious patterns
+    if (file.name.includes('..') || file.name.includes('/')) {
+      fileErrors.push(`${file.name}: invalid filename`);
+    }
+
+    if (fileErrors.length === 0) {
+      validFiles.push(file);
+    } else {
+      errors.push(...fileErrors);
+    }
+  }
+
+  return {
+    valid: errors.length === 0,
+    errors,
+    validFiles
+  };
+}
+
+// 3. Complete upload with validation
+async function handleAvatarUpload(inputElement) {
+  const files = Array.from(inputElement.files);
+
+  // Client validation
+  const validation = validateFiles(files, 'avatar');
+  if (!validation.valid) {
+    showErrors(validation.errors);
+    return null;
+  }
+
+  // Upload (server will also validate)
+  try {
+    const updated = await pb.collection('users').update(userId, {
+      avatar: validation.validFiles[0]
+    });
+    showSuccess('Avatar updated!');
+    return updated;
+  } catch (error) {
+    // Handle server validation errors
+    if (error.response?.data?.avatar) {
+      showError(error.response.data.avatar.message);
+    } else {
+      showError('Upload failed');
+    }
+    return null;
+  }
+}
+
+// 4. Image-specific validation
+async function validateImage(file, options = {}) {
+  const { minWidth = 0, minHeight = 0, maxWidth = Infinity, maxHeight = Infinity } = options;
+
+  return new Promise((resolve) => {
+    const img = new Image();
+    img.onload = () => {
+      const errors = [];
+
+      if (img.width < minWidth || img.height < minHeight) {
+        errors.push(`Image must be at least ${minWidth}x${minHeight}px`);
+      }
+      if (img.width > maxWidth || img.height > maxHeight) {
+        errors.push(`Image must be at most ${maxWidth}x${maxHeight}px`);
+      }
+
+      resolve({ valid: errors.length === 0, errors, width: img.width, height: img.height });
+    };
+    img.onerror = () => resolve({ valid: false, errors: ['Invalid image file'] });
+    img.src = URL.createObjectURL(file);
+  });
+}
+```
+
+Reference: [PocketBase Files Configuration](https://pocketbase.io/docs/files-handling/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/query-back-relations.md b/.claude/skills/pocketbase-best-practices/rules/query-back-relations.md
new file mode 100644
index 0000000..2b7d95c
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/query-back-relations.md
@@ -0,0 +1,164 @@
+---
+title: Use Back-Relations for Inverse Lookups
+impact: HIGH
+impactDescription: Fetch related records without separate queries
+tags: query, relations, back-relations, expand, inverse
+---
+
+## Use Back-Relations for Inverse Lookups
+
+Back-relations allow you to expand records that reference the current record, enabling inverse lookups in a single request. Use the `collectionName_via_fieldName` syntax.
+
+**Incorrect (manual inverse lookup):**
+
+```javascript
+// Fetching a user, then their posts separately
+async function getUserWithPosts(userId) {
+  const user = await pb.collection('users').getOne(userId);
+
+  // Extra request for posts
+  const posts = await pb.collection('posts').getList(1, 100, {
+    filter: pb.filter('author = {:userId}', { userId })
+  });
+
+  return { ...user, posts: posts.items };
+}
+// 2 API calls
+
+// Fetching a post, then its comments
+async function getPostWithComments(postId) {
+  const post = await pb.collection('posts').getOne(postId);
+  const comments = await pb.collection('comments').getFullList({
+    filter: pb.filter('post = {:postId}', { postId }),
+    expand: 'author'
+  });
+
+  return { ...post, comments };
+}
+// 2 API calls
+```
+
+**Correct (using back-relation expand):**
+
+```javascript
+// Expand posts that reference this user
+// posts collection has: author (relation to users)
+async function getUserWithPosts(userId) {
+  const user = await pb.collection('users').getOne(userId, {
+    expand: 'posts_via_author'  // collectionName_via_fieldName
+  });
+
+  console.log('User:', user.name);
+  console.log('Posts:', user.expand?.posts_via_author);
+  return user;
+}
+// 1 API call!
+
+// Expand comments that reference this post
+// comments collection has: post (relation to posts)
+async function getPostWithComments(postId) {
+  const post = await pb.collection('posts').getOne(postId, {
+    expand: 'comments_via_post,comments_via_post.author'
+  });
+
+  const comments = post.expand?.comments_via_post || [];
+  comments.forEach(comment => {
+    console.log(`${comment.expand?.author?.name}: ${comment.content}`);
+  });
+
+  return post;
+}
+// 1 API call with nested expansion!
+
+// Multiple back-relations
+async function getUserWithAllContent(userId) {
+  const user = await pb.collection('users').getOne(userId, {
+    expand: 'posts_via_author,comments_via_author,likes_via_user'
+  });
+
+  return {
+    user,
+    posts: user.expand?.posts_via_author || [],
+    comments: user.expand?.comments_via_author || [],
+    likes: user.expand?.likes_via_user || []
+  };
+}
+```
+
+**Back-relation syntax:**
+
+```
+{referencing_collection}_via_{relation_field}
+
+Examples:
+- posts_via_author      -> posts where author = current record
+- comments_via_post     -> comments where post = current record
+- order_items_via_order -> order_items where order = current record
+- team_members_via_team -> team_members where team = current record
+```
+
+**Nested back-relations:**
+
+```javascript
+// Get user with posts and each post's comments
+const user = await pb.collection('users').getOne(userId, {
+  expand: 'posts_via_author.comments_via_post'
+});
+
+// Access nested data
+const posts = user.expand?.posts_via_author || [];
+posts.forEach(post => {
+  console.log('Post:', post.title);
+  const comments = post.expand?.comments_via_post || [];
+  comments.forEach(c => console.log('  Comment:', c.content));
+});
+```
+
+**Important considerations:**
+
+```javascript
+// Back-relations always return arrays, even if the relation field
+// is marked as single (maxSelect: 1)
+
+// Limited to 1000 records per back-relation
+// For more, use separate paginated query
+const user = await pb.collection('users').getOne(userId, {
+  expand: 'posts_via_author'
+});
+// If user has 1500 posts, only first 1000 are included
+
+// For large datasets, use paginated approach
+async function getUserPostsPaginated(userId, page = 1) {
+  return pb.collection('posts').getList(page, 50, {
+    filter: pb.filter('author = {:userId}', { userId }),
+    sort: '-created'
+  });
+}
+```
+
+**Use in list queries:**
+
+```javascript
+// Get all users with their post counts
+// (Use view collection for actual counts)
+const users = await pb.collection('users').getList(1, 20, {
+  expand: 'posts_via_author'
+});
+
+users.items.forEach(user => {
+  const postCount = user.expand?.posts_via_author?.length || 0;
+  console.log(`${user.name}: ${postCount} posts`);
+});
+```
+
+**When to use back-relations vs separate queries:**
+
+| Scenario | Approach |
+|----------|----------|
+| < 1000 related records | Back-relation expand |
+| Need pagination | Separate query with filter |
+| Need sorting/filtering | Separate query |
+| Just need count | View collection |
+| Display in list | Back-relation (if small) |
+
+Reference: [PocketBase Back-Relations](https://pocketbase.io/docs/working-with-relations/#back-relation-expand)
diff --git a/.claude/skills/pocketbase-best-practices/rules/query-batch-operations.md b/.claude/skills/pocketbase-best-practices/rules/query-batch-operations.md
new file mode 100644
index 0000000..631ecfa
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/query-batch-operations.md
@@ -0,0 +1,174 @@
+---
+title: Use Batch Operations for Multiple Writes
+impact: HIGH
+impactDescription: Atomic transactions, 10x fewer API calls, consistent state
+tags: query, batch, transactions, performance
+---
+
+## Use Batch Operations for Multiple Writes
+
+Batch operations combine multiple create/update/delete operations into a single atomic transaction. This ensures consistency and dramatically reduces API calls.
+
+**Incorrect (individual requests):**
+
+```javascript
+// Creating multiple records individually
+async function createOrderWithItems(order, items) {
+  // If any fails, partial data remains!
+  const createdOrder = await pb.collection('orders').create(order);
+
+  for (const item of items) {
+    await pb.collection('order_items').create({
+      ...item,
+      order: createdOrder.id
+    });
+  }
+  // 1 + N API calls, not atomic
+}
+
+// Updating multiple records
+async function updatePrices(products) {
+  for (const product of products) {
+    await pb.collection('products').update(product.id, {
+      price: product.newPrice
+    });
+  }
+  // N API calls, some might fail leaving inconsistent state
+}
+
+// Mixed operations
+async function transferFunds(fromId, toId, amount) {
+  // NOT ATOMIC - can leave invalid state!
+  await pb.collection('accounts').update(fromId, { 'balance-': amount });
+  // If this fails, money disappears!
+  await pb.collection('accounts').update(toId, { 'balance+': amount });
+}
+```
+
+**Correct (using batch operations):**
+
+```javascript
+// Atomic batch create
+async function createOrderWithItems(order, items) {
+  const batch = pb.createBatch();
+
+  // Pre-generate order ID so items can reference it in the same batch
+  // PocketBase accepts custom IDs (15-char alphanumeric)
+  const orderId = crypto.randomUUID().replaceAll('-', '').slice(0, 15);
+
+  // Queue order creation with known ID
+  batch.collection('orders').create({ ...order, id: orderId });
+
+  // Queue all items referencing the pre-generated order ID
+  items.forEach(item => {
+    batch.collection('order_items').create({
+      ...item,
+      order: orderId
+    });
+  });
+
+  // Execute atomically
+  const results = await batch.send();
+  // All succeed or all fail together
+
+  return {
+    order: results[0],
+    items: results.slice(1)
+  };
+}
+
+// Batch updates
+async function updatePrices(products) {
+  const batch = pb.createBatch();
+
+  products.forEach(product => {
+    batch.collection('products').update(product.id, {
+      price: product.newPrice
+    });
+  });
+
+  const results = await batch.send();
+  // 1 API call, atomic
+  return results;
+}
+
+// Batch upsert (create or update)
+async function syncProducts(products) {
+  const batch = pb.createBatch();
+
+  products.forEach(product => {
+    batch.collection('products').upsert({
+      id: product.sku,  // Use SKU as ID for upsert matching
+      name: product.name,
+      price: product.price,
+      stock: product.stock
+    });
+  });
+
+  return batch.send();
+}
+
+// Mixed operations in transaction
+// NOTE: Batch operations respect API rules per-operation, but ensure your
+// business logic validates inputs (e.g., sufficient balance) server-side
+// via hooks or API rules to prevent unauthorized transfers.
+async function transferFunds(fromId, toId, amount) {
+  const batch = pb.createBatch();
+
+  batch.collection('accounts').update(fromId, { 'balance-': amount });
+  batch.collection('accounts').update(toId, { 'balance+': amount });
+
+  // Create audit record
+  batch.collection('transfers').create({
+    from: fromId,
+    to: toId,
+    amount,
+    timestamp: new Date()
+  });
+
+  // All three operations atomic
+  const [fromAccount, toAccount, transfer] = await batch.send();
+  return { fromAccount, toAccount, transfer };
+}
+
+// Batch delete
+async function deletePostWithComments(postId) {
+  // First get comment IDs
+  const comments = await pb.collection('comments').getFullList({
+    filter: pb.filter('post = {:postId}', { postId }),
+    fields: 'id'
+  });
+
+  const batch = pb.createBatch();
+
+  // Queue all deletions
+  comments.forEach(comment => {
+    batch.collection('comments').delete(comment.id);
+  });
+  batch.collection('posts').delete(postId);
+
+  await batch.send();
+  // Post and all comments deleted atomically
+}
+```
+
+**Batch operation limits:**
+- **Must be enabled first** in Dashboard > Settings > Application (disabled by default; returns 403 otherwise)
+- Operations execute in a single database transaction
+- All succeed or all rollback
+- Respects API rules for each operation
+- Configurable limits: `maxRequests`, `timeout`, and `maxBodySize` (set in Dashboard)
+- **Avoid large file uploads** in batches over slow networks -- they block the entire transaction
+- Avoid custom hooks that call slow external APIs within batch operations
+
+**When to use batch:**
+
+| Scenario | Use Batch? |
+|----------|-----------|
+| Creating parent + children | Yes |
+| Bulk import/update | Yes |
+| Financial transactions | Yes |
+| Single record operations | No |
+| Independent operations | Optional |
+
+Reference: [PocketBase Batch API](https://pocketbase.io/docs/api-records/#batch-operations)
diff --git a/.claude/skills/pocketbase-best-practices/rules/query-expand.md b/.claude/skills/pocketbase-best-practices/rules/query-expand.md
new file mode 100644
index 0000000..df2a836
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/query-expand.md
@@ -0,0 +1,143 @@
+---
+title: Expand Relations Efficiently
+impact: HIGH
+impactDescription: Eliminates N+1 queries, reduces API calls by 90%+
+tags: query, relations, expand, joins, performance
+---
+
+## Expand Relations Efficiently
+
+Use the `expand` parameter to fetch related records in a single request. This eliminates N+1 query problems and dramatically reduces API calls.
+
+**Incorrect (N+1 queries):**
+
+```javascript
+// Fetching posts then authors separately - N+1 problem
+async function getPostsWithAuthors() {
+  const posts = await pb.collection('posts').getList(1, 20);
+
+  // N additional requests for N posts!
+  for (const post of posts.items) {
+    post.authorData = await pb.collection('users').getOne(post.author);
+  }
+
+  return posts;
+}
+// 21 API calls for 20 posts!
+
+// Even worse with multiple relations
+async function getPostsWithAll() {
+  const posts = await pb.collection('posts').getList(1, 20);
+
+  for (const post of posts.items) {
+    post.author = await pb.collection('users').getOne(post.author);
+    post.category = await pb.collection('categories').getOne(post.category);
+    post.tags = await Promise.all(
+      post.tags.map(id => pb.collection('tags').getOne(id))
+    );
+  }
+  // 60+ API calls!
+}
+```
+
+**Correct (using expand):**
+
+```javascript
+// Single request with expanded relations
+async function getPostsWithAuthors() {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    expand: 'author'
+  });
+
+  // Access expanded data
+  posts.items.forEach(post => {
+    console.log('Author:', post.expand?.author?.name);
+  });
+
+  return posts;
+}
+// 1 API call!
+
+// Multiple relations
+async function getPostsWithAll() {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    expand: 'author,category,tags'
+  });
+
+  posts.items.forEach(post => {
+    console.log('Author:', post.expand?.author?.name);
+    console.log('Category:', post.expand?.category?.name);
+    console.log('Tags:', post.expand?.tags?.map(t => t.name));
+  });
+}
+// Still just 1 API call!
+
+// Nested expansion (up to 6 levels)
+async function getPostsWithNestedData() {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    expand: 'author.profile,category.parent,comments_via_post.author'
+  });
+
+  posts.items.forEach(post => {
+    // Nested relations
+    console.log('Author profile:', post.expand?.author?.expand?.profile);
+    console.log('Parent category:', post.expand?.category?.expand?.parent);
+
+    // Back-relations (comments that reference this post)
+    console.log('Comments:', post.expand?.['comments_via_post']);
+  });
+}
+
+// Back-relation expansion
+// If comments collection has a 'post' relation field pointing to posts
+async function getPostWithComments(postId) {
+  const post = await pb.collection('posts').getOne(postId, {
+    expand: 'comments_via_post,comments_via_post.author'
+  });
+
+  // Access comments that reference this post
+  const comments = post.expand?.['comments_via_post'] || [];
+  comments.forEach(comment => {
+    console.log(`${comment.expand?.author?.name}: ${comment.text}`);
+  });
+
+  return post;
+}
+```
+
+**Expand syntax:**
+
+| Syntax | Description |
+|--------|-------------|
+| `expand: 'author'` | Single relation |
+| `expand: 'author,tags'` | Multiple relations |
+| `expand: 'author.profile'` | Nested relation (2 levels) |
+| `expand: 'comments_via_post'` | Back-relation (records pointing to this) |
+
+**Handling optional expand data:**
+
+```javascript
+// Always use optional chaining - expand may be undefined
+const authorName = post.expand?.author?.name || 'Unknown';
+
+// Type-safe access with TypeScript
+interface Post {
+  id: string;
+  title: string;
+  author: string;  // Relation ID
+  expand?: {
+    author?: User;
+  };
+}
+
+const posts = await pb.collection('posts').getList<Post>(1, 20, {
+  expand: 'author'
+});
+```
+
+**Limitations:**
+- Maximum 6 levels of nesting
+- Respects API rules on expanded collections
+- Large expansions may impact performance
+
+Reference: [PocketBase Expand](https://pocketbase.io/docs/api-records/#expand)
diff --git a/.claude/skills/pocketbase-best-practices/rules/query-field-selection.md b/.claude/skills/pocketbase-best-practices/rules/query-field-selection.md
new file mode 100644
index 0000000..ff70879
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/query-field-selection.md
@@ -0,0 +1,118 @@
+---
+title: Select Only Required Fields
+impact: MEDIUM
+impactDescription: Reduces payload size, improves response time
+tags: query, fields, performance, bandwidth
+---
+
+## Select Only Required Fields
+
+Use the `fields` parameter to request only the data you need. This reduces bandwidth and can improve query performance, especially with large text or file fields.
+
+**Incorrect (fetching everything):**
+
+```javascript
+// Fetching all fields when only a few are needed
+const posts = await pb.collection('posts').getList(1, 20);
+// Returns: id, title, content (10KB), thumbnail, author, tags, created, updated...
+
+// Only displaying titles in a list
+posts.items.forEach(post => {
+  renderListItem(post.title);  // Only using title!
+});
+// Wasted bandwidth on content, thumbnail URLs, etc.
+
+// Fetching user data with large profile fields
+const users = await pb.collection('users').getFullList();
+// Includes: avatar (file), bio (text), settings (json)...
+// When you only need names for a dropdown
+```
+
+**Correct (selecting specific fields):**
+
+```javascript
+// Select only needed fields
+const posts = await pb.collection('posts').getList(1, 20, {
+  fields: 'id,title,created'
+});
+// Returns only: { id, title, created }
+
+// For a dropdown/autocomplete
+const users = await pb.collection('users').getFullList({
+  fields: 'id,name,avatar'
+});
+
+// Include expanded relation fields
+const posts = await pb.collection('posts').getList(1, 20, {
+  expand: 'author',
+  fields: 'id,title,expand.author.name,expand.author.avatar'
+});
+// Returns: { id, title, expand: { author: { name, avatar } } }
+
+// Wildcard for all direct fields, specific for expand
+const posts = await pb.collection('posts').getList(1, 20, {
+  expand: 'author,category',
+  fields: '*,expand.author.name,expand.category.name'
+});
+// All post fields + only name from expanded relations
+```
+
+**Using excerpt modifier:**
+
+```javascript
+// Get truncated text content
+const posts = await pb.collection('posts').getList(1, 20, {
+  fields: 'id,title,content:excerpt(200,true)'
+});
+// content is truncated to 200 chars with "..." appended
+
+// Multiple excerpts
+const posts = await pb.collection('posts').getList(1, 20, {
+  fields: 'id,title:excerpt(50),content:excerpt(150,true)'
+});
+
+// Excerpt syntax: field:excerpt(maxLength, withEllipsis?)
+// - maxLength: maximum characters
+// - withEllipsis: append "..." if truncated (default: false)
+```
+
+**Common field selection patterns:**
+
+```javascript
+// List view - minimal data
+const listFields = 'id,title,thumbnail,author,created';
+
+// Card view - slightly more
+const cardFields = 'id,title,content:excerpt(200,true),thumbnail,author,created';
+
+// Detail view - most fields
+const detailFields = '*,expand.author.name,expand.author.avatar';
+
+// Autocomplete - just id and display text
+const autocompleteFields = 'id,name';
+
+// Table export - specific columns
+const exportFields = 'id,email,name,created,status';
+
+// Usage
+async function getPostsList() {
+  return pb.collection('posts').getList(1, 20, {
+    fields: listFields,
+    expand: 'author'
+  });
+}
+```
+
+**Performance impact:**
+
+| Field Type | Impact of Selecting |
+|------------|-------------------|
+| text/editor | High (can be large) |
+| file | Medium (URLs generated) |
+| json | Medium (can be large) |
+| relation | Low (just IDs) |
+| number/bool | Low |
+
+**Note:** Field selection happens after data is fetched from database, so it primarily saves bandwidth, not database queries. For database-level optimization, ensure proper indexes.
+
+Reference: [PocketBase Fields Parameter](https://pocketbase.io/docs/api-records/#fields)
diff --git a/.claude/skills/pocketbase-best-practices/rules/query-first-item.md b/.claude/skills/pocketbase-best-practices/rules/query-first-item.md
new file mode 100644
index 0000000..29fbe24
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/query-first-item.md
@@ -0,0 +1,158 @@
+---
+title: Use getFirstListItem for Single Record Lookups
+impact: MEDIUM
+impactDescription: Cleaner code, automatic error handling for not found
+tags: query, lookup, find, getFirstListItem
+---
+
+## Use getFirstListItem for Single Record Lookups
+
+Use `getFirstListItem()` when you need to find a single record by a field value other than ID. It's cleaner than `getList()` with limit 1 and provides proper error handling.
+
+**Incorrect (manual single-record lookup):**
+
+```javascript
+// Using getList with limit 1 - verbose
+async function findUserByEmail(email) {
+  const result = await pb.collection('users').getList(1, 1, {
+    filter: pb.filter('email = {:email}', { email })
+  });
+
+  if (result.items.length === 0) {
+    throw new Error('User not found');
+  }
+
+  return result.items[0];
+}
+
+// Using getFullList then filtering - wasteful
+async function findUserByUsername(username) {
+  const users = await pb.collection('users').getFullList({
+    filter: pb.filter('username = {:username}', { username })
+  });
+  return users[0];  // Might be undefined!
+}
+
+// Fetching by ID when you have a different identifier
+async function findProductBySku(sku) {
+  // Wrong: getOne expects the record ID
+  const product = await pb.collection('products').getOne(sku);  // Fails!
+}
+```
+
+**Correct (using getFirstListItem):**
+
+```javascript
+// Clean single-record lookup by any field
+async function findUserByEmail(email) {
+  try {
+    const user = await pb.collection('users').getFirstListItem(
+      pb.filter('email = {:email}', { email })
+    );
+    return user;
+  } catch (error) {
+    if (error.status === 404) {
+      return null;  // Not found
+    }
+    throw error;
+  }
+}
+
+// Lookup by unique field
+async function findProductBySku(sku) {
+  return pb.collection('products').getFirstListItem(
+    pb.filter('sku = {:sku}', { sku })
+  );
+}
+
+// Lookup with expand
+async function findOrderByNumber(orderNumber) {
+  return pb.collection('orders').getFirstListItem(
+    pb.filter('orderNumber = {:num}', { num: orderNumber }),
+    { expand: 'customer,items' }
+  );
+}
+
+// Complex filter conditions
+async function findActiveSubscription(userId) {
+  return pb.collection('subscriptions').getFirstListItem(
+    pb.filter(
+      'user = {:userId} && status = "active" && expiresAt > @now',
+      { userId }
+    )
+  );
+}
+
+// With field selection
+async function getUserIdByEmail(email) {
+  const user = await pb.collection('users').getFirstListItem(
+    pb.filter('email = {:email}', { email }),
+    { fields: 'id' }
+  );
+  return user.id;
+}
+```
+
+**Comparison with getOne:**
+
+```javascript
+// getOne - fetch by record ID
+const post = await pb.collection('posts').getOne('abc123');
+
+// getFirstListItem - fetch by any filter (use pb.filter for safe binding)
+const post = await pb.collection('posts').getFirstListItem(
+  pb.filter('slug = {:slug}', { slug: 'hello-world' })
+);
+const user = await pb.collection('users').getFirstListItem(
+  pb.filter('username = {:name}', { name: 'john' })
+);
+const order = await pb.collection('orders').getFirstListItem(
+  pb.filter('orderNumber = {:num}', { num: 12345 })
+);
+```
+
+**Error handling:**
+
+```javascript
+// getFirstListItem throws 404 if no match found
+try {
+  const user = await pb.collection('users').getFirstListItem(
+    pb.filter('email = {:email}', { email })
+  );
+  return user;
+} catch (error) {
+  if (error.status === 404) {
+    // No matching record - handle appropriately
+    return null;
+  }
+  // Other error (network, auth, etc.)
+  throw error;
+}
+
+// Wrapper function for optional lookup
+async function findFirst(collection, filter, options = {}) {
+  try {
+    return await pb.collection(collection).getFirstListItem(filter, options);
+  } catch (error) {
+    if (error.status === 404) return null;
+    throw error;
+  }
+}
+
+// Usage
+const user = await findFirst('users', pb.filter('email = {:e}', { e: email }));
+if (!user) {
+  console.log('User not found');
+}
+```
+
+**When to use each method:**
+
+| Method | Use When |
+|--------|----------|
+| `getOne(id)` | You have the record ID |
+| `getFirstListItem(filter)` | Finding by unique field (email, slug, sku) |
+| `getList(1, 1, { filter })` | Need pagination metadata |
+| `getFullList({ filter })` | Expecting multiple results |
+
+Reference: [PocketBase Records API](https://pocketbase.io/docs/api-records/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/query-n-plus-one.md b/.claude/skills/pocketbase-best-practices/rules/query-n-plus-one.md
new file mode 100644
index 0000000..8381491
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/query-n-plus-one.md
@@ -0,0 +1,138 @@
+---
+title: Prevent N+1 Query Problems
+impact: HIGH
+impactDescription: Reduces API calls from N+1 to 1-2, dramatically faster page loads
+tags: query, performance, n-plus-one, optimization
+---
+
+## Prevent N+1 Query Problems
+
+N+1 queries occur when you fetch a list of records, then make additional requests for each record's related data. This pattern causes severe performance issues at scale.
+
+**Incorrect (N+1 patterns):**
+
+```javascript
+// Classic N+1: fetching related data in a loop
+async function getPostsWithDetails() {
+  const posts = await pb.collection('posts').getList(1, 20);  // 1 query
+
+  for (const post of posts.items) {
+    // N additional queries!
+    post.author = await pb.collection('users').getOne(post.author);
+    post.category = await pb.collection('categories').getOne(post.category);
+  }
+  // Total: 1 + 20 + 20 = 41 queries for 20 posts
+}
+
+// N+1 with Promise.all (faster but still N+1)
+async function getPostsParallel() {
+  const posts = await pb.collection('posts').getList(1, 20);
+
+  await Promise.all(posts.items.map(async post => {
+    post.author = await pb.collection('users').getOne(post.author);
+  }));
+  // Still 21 API calls, just parallel
+}
+
+// Hidden N+1 in rendering
+function PostList({ posts }) {
+  return posts.map(post => (
+    <PostCard
+      post={post}
+      author={useAuthor(post.author)}  // Each triggers a fetch!
+    />
+  ));
+}
+```
+
+**Correct (eliminate N+1):**
+
+```javascript
+// Solution 1: Use expand for relations
+async function getPostsWithDetails() {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    expand: 'author,category,tags'
+  });
+
+  // All data in one request
+  posts.items.forEach(post => {
+    console.log(post.expand?.author?.name);
+    console.log(post.expand?.category?.name);
+  });
+  // Total: 1 query
+}
+
+// Solution 2: Batch fetch related records
+async function getPostsWithAuthorsBatch() {
+  const posts = await pb.collection('posts').getList(1, 20);
+
+  // Collect unique author IDs
+  const authorIds = [...new Set(posts.items.map(p => p.author))];
+
+  // Single query for all authors (use pb.filter for safe binding)
+  const filter = authorIds.map(id => pb.filter('id = {:id}', { id })).join(' || ');
+  const authors = await pb.collection('users').getList(1, authorIds.length, {
+    filter
+  });
+
+  // Create lookup map
+  const authorMap = Object.fromEntries(
+    authors.items.map(a => [a.id, a])
+  );
+
+  // Attach to posts
+  posts.items.forEach(post => {
+    post.authorData = authorMap[post.author];
+  });
+  // Total: 2 queries regardless of post count
+}
+
+// Solution 3: Use view collection for complex joins
+// Create a view that joins posts with authors:
+// SELECT p.*, u.name as author_name, u.avatar as author_avatar
+// FROM posts p LEFT JOIN users u ON p.author = u.id
+
+async function getPostsFromView() {
+  const posts = await pb.collection('posts_with_authors').getList(1, 20);
+  // Single query, data already joined
+}
+
+// Solution 4: Back-relations with expand
+async function getUserWithPosts(userId) {
+  const user = await pb.collection('users').getOne(userId, {
+    expand: 'posts_via_author'  // All posts by this user
+  });
+
+  console.log('Posts by user:', user.expand?.posts_via_author);
+  // 1 query gets user + all their posts
+}
+```
+
+**Detecting N+1 in your code:**
+
+```javascript
+// Add request logging to detect N+1
+let requestCount = 0;
+pb.beforeSend = (url, options) => {
+  requestCount++;
+  console.log(`Request #${requestCount}: ${options.method} ${url}`);
+  return { url, options };
+};
+
+// Monitor during development
+async function loadPage() {
+  requestCount = 0;
+  await loadAllData();
+  console.log(`Total requests: ${requestCount}`);
+  // If this is >> number of records, you have N+1
+}
+```
+
+**Prevention checklist:**
+- [ ] Always use `expand` for displaying related data
+- [ ] Never fetch related records in loops
+- [ ] Batch fetch when expand isn't available
+- [ ] Consider view collections for complex joins
+- [ ] Monitor request counts during development
+
+Reference: [PocketBase Expand](https://pocketbase.io/docs/api-records/#expand)
diff --git a/.claude/skills/pocketbase-best-practices/rules/query-pagination.md b/.claude/skills/pocketbase-best-practices/rules/query-pagination.md
new file mode 100644
index 0000000..dd0beea
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/query-pagination.md
@@ -0,0 +1,114 @@
+---
+title: Use Efficient Pagination Strategies
+impact: HIGH
+impactDescription: 10-100x faster list queries on large collections
+tags: query, pagination, performance, lists
+---
+
+## Use Efficient Pagination Strategies
+
+Pagination impacts performance significantly. Use `skipTotal` for large datasets, cursor-based pagination for infinite scroll, and appropriate page sizes.
+
+**Incorrect (inefficient pagination):**
+
+```javascript
+// Fetching all records - memory and performance disaster
+const allPosts = await pb.collection('posts').getFullList();
+// Downloads entire table, crashes on large datasets
+
+// Default pagination without skipTotal
+const posts = await pb.collection('posts').getList(100, 20);
+// COUNT(*) runs on every request - slow on large tables
+
+// Using offset for infinite scroll
+async function loadMore(page) {
+  // As page increases, offset queries get slower
+  return pb.collection('posts').getList(page, 20);
+  // Page 1000: skips 19,980 rows before returning 20
+}
+```
+
+**Correct (optimized pagination):**
+
+```javascript
+// Use skipTotal for better performance on large collections
+const posts = await pb.collection('posts').getList(1, 20, {
+  skipTotal: true,  // Skip COUNT(*) query
+  sort: '-created'
+});
+// Returns items without totalItems/totalPages (faster)
+
+// Cursor-based pagination for infinite scroll
+async function loadMorePosts(lastCreated = null) {
+  const filter = lastCreated
+    ? pb.filter('created < {:cursor}', { cursor: lastCreated })
+    : '';
+
+  const result = await pb.collection('posts').getList(1, 20, {
+    filter,
+    sort: '-created',
+    skipTotal: true
+  });
+
+  // Next cursor is the last item's created date
+  const nextCursor = result.items.length > 0
+    ? result.items[result.items.length - 1].created
+    : null;
+
+  return { items: result.items, nextCursor };
+}
+
+// Usage for infinite scroll
+let cursor = null;
+async function loadNextPage() {
+  const { items, nextCursor } = await loadMorePosts(cursor);
+  cursor = nextCursor;
+  appendToList(items);
+}
+
+// Batched fetching when you need all records
+async function getAllPostsEfficiently() {
+  const allPosts = [];
+  let page = 1;
+  const perPage = 1000;  // Larger batches = fewer requests (max 1000 per API limit)
+
+  while (true) {
+    const result = await pb.collection('posts').getList(page, perPage, {
+      skipTotal: true
+    });
+
+    allPosts.push(...result.items);
+
+    if (result.items.length < perPage) {
+      break;  // No more records
+    }
+    page++;
+  }
+
+  return allPosts;
+}
+
+// Or use getFullList with batch option
+const allPosts = await pb.collection('posts').getFullList({
+  batch: 1000,  // Records per request (default 1000 since JS SDK v0.26.6; max 1000)
+  sort: '-created'
+});
+```
+
+**Choose the right approach:**
+
+| Use Case | Approach |
+|----------|----------|
+| Standard list with page numbers | `getList()` with page/perPage |
+| Large dataset, no total needed | `getList()` with `skipTotal: true` |
+| Infinite scroll | Cursor-based with `skipTotal: true` |
+| Export all data | `getFullList()` with batch size |
+| First N records only | `getList(1, N, { skipTotal: true })` |
+
+**Performance tips:**
+- Use `skipTotal: true` unless you need page count
+- Keep `perPage` reasonable (20-100 for UI, up to 1000 for batch exports)
+- Index fields used in sort and filter
+- Cursor pagination scales better than offset
+
+Reference: [PocketBase Records API](https://pocketbase.io/docs/api-records/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/realtime-auth.md b/.claude/skills/pocketbase-best-practices/rules/realtime-auth.md
new file mode 100644
index 0000000..01d6fd8
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/realtime-auth.md
@@ -0,0 +1,147 @@
+---
+title: Authenticate Realtime Connections
+impact: MEDIUM
+impactDescription: Secure subscriptions respecting API rules
+tags: realtime, authentication, security, subscriptions
+---
+
+## Authenticate Realtime Connections
+
+Realtime subscriptions respect collection API rules. Ensure the connection is authenticated before subscribing to protected data.
+
+**Incorrect (subscribing without auth context):**
+
+```javascript
+// Subscribing before authentication
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// This will fail or return no data if collection requires auth
+pb.collection('private_messages').subscribe('*', (e) => {
+  // Won't receive events - not authenticated!
+  console.log(e.record);
+});
+
+// Later user logs in, but subscription doesn't update
+await pb.collection('users').authWithPassword(email, password);
+// Existing subscription still unauthenticated!
+```
+
+**Correct (authenticated subscriptions):**
+
+```javascript
+// Subscribe after authentication
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+async function initRealtime() {
+  // First authenticate
+  await pb.collection('users').authWithPassword(email, password);
+
+  // Now subscribe - will use auth context
+  pb.collection('private_messages').subscribe('*', (e) => {
+    // Receives events for messages user can access
+    console.log('New message:', e.record);
+  });
+}
+
+// Re-subscribe after auth changes
+function useAuthenticatedRealtime() {
+  const [messages, setMessages] = useState([]);
+  const unsubRef = useRef(null);
+
+  // Watch auth changes
+  useEffect(() => {
+    const removeListener = pb.authStore.onChange((token, record) => {
+      // Unsubscribe old connection
+      if (unsubRef.current) {
+        unsubRef.current();
+        unsubRef.current = null;
+      }
+
+      // Re-subscribe with new auth context if logged in
+      if (record) {
+        setupSubscription();
+      } else {
+        setMessages([]);
+      }
+    }, true);
+
+    return () => {
+      removeListener();
+      if (unsubRef.current) unsubRef.current();
+    };
+  }, []);
+
+  async function setupSubscription() {
+    unsubRef.current = await pb.collection('private_messages').subscribe('*', (e) => {
+      handleMessage(e);
+    });
+  }
+}
+
+// Handle auth token refresh with realtime
+pb.realtime.subscribe('PB_CONNECT', async (e) => {
+  console.log('Realtime connected');
+
+  // Verify auth is still valid
+  if (pb.authStore.isValid) {
+    try {
+      await pb.collection('users').authRefresh();
+    } catch {
+      pb.authStore.clear();
+      // Redirect to login
+    }
+  }
+});
+```
+
+**API rules apply to subscriptions:**
+
+```javascript
+// Collection rule: listRule: 'owner = @request.auth.id'
+
+// User A subscribed
+await pb.collection('users').authWithPassword('a@test.com', 'password');
+pb.collection('notes').subscribe('*', handler);
+// Only receives events for notes where owner = User A
+
+// Events from other users' notes are filtered out automatically
+```
+
+**Subscription authorization flow:**
+
+1. SSE connection established (no auth check)
+2. First subscription triggers authorization
+3. Auth token from `pb.authStore` is used
+4. Collection rules evaluated for each event
+5. Only matching events sent to client
+
+**Handling auth expiration:**
+
+```javascript
+// Setup disconnect handler
+pb.realtime.onDisconnect = (subscriptions) => {
+  console.log('Disconnected, had subscriptions:', subscriptions);
+
+  // Check if auth expired
+  if (!pb.authStore.isValid) {
+    // Token expired - need to re-authenticate
+    redirectToLogin();
+    return;
+  }
+
+  // Connection issue - realtime will auto-reconnect
+  // Re-subscribe after reconnection
+  pb.realtime.subscribe('PB_CONNECT', () => {
+    resubscribeAll(subscriptions);
+  });
+};
+
+function resubscribeAll(subscriptions) {
+  subscriptions.forEach(sub => {
+    const [collection, topic] = sub.split('/');
+    pb.collection(collection).subscribe(topic, handlers[sub]);
+  });
+}
+```
+
+Reference: [PocketBase Realtime Auth](https://pocketbase.io/docs/api-realtime/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/realtime-events.md b/.claude/skills/pocketbase-best-practices/rules/realtime-events.md
new file mode 100644
index 0000000..b6da8e3
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/realtime-events.md
@@ -0,0 +1,172 @@
+---
+title: Handle Realtime Events Properly
+impact: MEDIUM
+impactDescription: Consistent UI state, proper optimistic updates
+tags: realtime, events, state-management, ui
+---
+
+## Handle Realtime Events Properly
+
+Realtime events should update local state correctly, handle edge cases, and maintain UI consistency.
+
+**Incorrect (naive event handling):**
+
+```javascript
+// Blindly appending creates - may add duplicates
+pb.collection('posts').subscribe('*', (e) => {
+  if (e.action === 'create') {
+    posts.push(e.record);  // Might already exist from optimistic update!
+  }
+});
+
+// Not handling own actions
+pb.collection('posts').subscribe('*', (e) => {
+  // User creates post -> optimistic update
+  // Realtime event arrives -> duplicate!
+  setPosts(prev => [...prev, e.record]);
+});
+
+// Missing action types
+pb.collection('posts').subscribe('*', (e) => {
+  if (e.action === 'create') handleCreate(e);
+  // Ignoring update and delete!
+});
+```
+
+**Correct (robust event handling):**
+
+```javascript
+// Handle all action types with deduplication
+function useRealtimePosts() {
+  const [posts, setPosts] = useState([]);
+  const pendingCreates = useRef(new Set());
+
+  useEffect(() => {
+    loadPosts();
+
+    const unsub = pb.collection('posts').subscribe('*', (e) => {
+      switch (e.action) {
+        case 'create':
+          // Skip if we created it (optimistic update already applied)
+          if (pendingCreates.current.has(e.record.id)) {
+            pendingCreates.current.delete(e.record.id);
+            return;
+          }
+          setPosts(prev => {
+            // Deduplicate - might already exist
+            if (prev.some(p => p.id === e.record.id)) return prev;
+            return [e.record, ...prev];
+          });
+          break;
+
+        case 'update':
+          setPosts(prev => prev.map(p =>
+            p.id === e.record.id ? e.record : p
+          ));
+          break;
+
+        case 'delete':
+          setPosts(prev => prev.filter(p => p.id !== e.record.id));
+          break;
+      }
+    });
+
+    return unsub;
+  }, []);
+
+  async function createPost(data) {
+    // Optimistic update
+    const tempId = `temp_${Date.now()}`;
+    const optimisticPost = { ...data, id: tempId };
+    setPosts(prev => [optimisticPost, ...prev]);
+
+    try {
+      const created = await pb.collection('posts').create(data);
+      // Mark as pending so realtime event is ignored
+      pendingCreates.current.add(created.id);
+      // Replace optimistic with real
+      setPosts(prev => prev.map(p =>
+        p.id === tempId ? created : p
+      ));
+      return created;
+    } catch (error) {
+      // Rollback optimistic update
+      setPosts(prev => prev.filter(p => p.id !== tempId));
+      throw error;
+    }
+  }
+
+  return { posts, createPost };
+}
+
+// Batched updates for high-frequency changes
+function useRealtimeWithBatching() {
+  const [posts, setPosts] = useState([]);
+  const pendingUpdates = useRef([]);
+  const flushTimeout = useRef(null);
+
+  useEffect(() => {
+    const unsub = pb.collection('posts').subscribe('*', (e) => {
+      pendingUpdates.current.push(e);
+
+      // Batch updates every 100ms
+      if (!flushTimeout.current) {
+        flushTimeout.current = setTimeout(() => {
+          flushUpdates();
+          flushTimeout.current = null;
+        }, 100);
+      }
+    });
+
+    return () => {
+      unsub();
+      if (flushTimeout.current) clearTimeout(flushTimeout.current);
+    };
+  }, []);
+
+  function flushUpdates() {
+    const updates = pendingUpdates.current;
+    pendingUpdates.current = [];
+
+    setPosts(prev => {
+      let next = [...prev];
+      for (const e of updates) {
+        if (e.action === 'create') {
+          if (!next.some(p => p.id === e.record.id)) {
+            next.unshift(e.record);
+          }
+        } else if (e.action === 'update') {
+          next = next.map(p => p.id === e.record.id ? e.record : p);
+        } else if (e.action === 'delete') {
+          next = next.filter(p => p.id !== e.record.id);
+        }
+      }
+      return next;
+    });
+  }
+}
+```
+
+**Filtering events:**
+
+```javascript
+// Only handle events matching certain criteria
+pb.collection('posts').subscribe('*', (e) => {
+  // Only published posts
+  if (e.record.status !== 'published') return;
+
+  // Only posts by current user
+  if (e.record.author !== pb.authStore.record?.id) return;
+
+  handleEvent(e);
+});
+
+// Subscribe with expand to get related data
+pb.collection('posts').subscribe('*', (e) => {
+  // Note: expand data is included in realtime events
+  // if the subscription options include expand
+  console.log(e.record.expand?.author?.name);
+}, { expand: 'author' });
+```
+
+Reference: [PocketBase Realtime Events](https://pocketbase.io/docs/api-realtime/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/realtime-reconnection.md b/.claude/skills/pocketbase-best-practices/rules/realtime-reconnection.md
new file mode 100644
index 0000000..464532b
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/realtime-reconnection.md
@@ -0,0 +1,200 @@
+---
+title: Handle Realtime Connection Issues
+impact: MEDIUM
+impactDescription: Reliable realtime even with network interruptions
+tags: realtime, reconnection, resilience, offline
+---
+
+## Handle Realtime Connection Issues
+
+Realtime connections can disconnect due to network issues or server restarts. Implement proper reconnection handling and state synchronization.
+
+**Incorrect (ignoring connection issues):**
+
+```javascript
+// No reconnection handling - stale data after disconnect
+pb.collection('posts').subscribe('*', (e) => {
+  updateUI(e.record);
+});
+// If connection drops, UI shows stale data indefinitely
+
+// Assuming connection is always stable
+function PostList() {
+  useEffect(() => {
+    pb.collection('posts').subscribe('*', handleChange);
+  }, []);
+  // No awareness of connection state
+}
+```
+
+**Correct (robust connection handling):**
+
+```javascript
+// Monitor connection state
+function useRealtimeConnection() {
+  const [connected, setConnected] = useState(false);
+  const [lastSync, setLastSync] = useState(null);
+
+  useEffect(() => {
+    // Track connection state
+    const unsubConnect = pb.realtime.subscribe('PB_CONNECT', (e) => {
+      console.log('Connected, client ID:', e.clientId);
+      setConnected(true);
+
+      // Re-sync data after reconnection
+      if (lastSync) {
+        syncMissedUpdates(lastSync);
+      }
+      setLastSync(new Date());
+    });
+
+    // Handle disconnection
+    pb.realtime.onDisconnect = (activeSubscriptions) => {
+      console.log('Disconnected');
+      setConnected(false);
+      showOfflineIndicator();
+    };
+
+    return () => {
+      unsubConnect();
+    };
+  }, [lastSync]);
+
+  return { connected };
+}
+
+// Sync missed updates after reconnection
+async function syncMissedUpdates(since) {
+  // Fetch records modified since last sync
+  const updatedPosts = await pb.collection('posts').getList(1, 100, {
+    filter: pb.filter('updated > {:since}', { since }),
+    sort: '-updated'
+  });
+
+  // Merge with local state
+  updateLocalState(updatedPosts.items);
+}
+
+// Full implementation with resilience
+class RealtimeManager {
+  constructor(pb) {
+    this.pb = pb;
+    this.subscriptions = new Map();
+    this.lastSyncTimes = new Map();
+    this.reconnectAttempts = 0;
+    this.maxReconnectDelay = 30000;
+
+    this.setupConnectionHandlers();
+  }
+
+  setupConnectionHandlers() {
+    this.pb.realtime.subscribe('PB_CONNECT', () => {
+      console.log('Realtime connected');
+      this.reconnectAttempts = 0;
+      this.onReconnect();
+    });
+
+    this.pb.realtime.onDisconnect = (subs) => {
+      console.log('Realtime disconnected');
+      this.scheduleReconnect();
+    };
+  }
+
+  scheduleReconnect() {
+    // Exponential backoff with jitter
+    const delay = Math.min(
+      1000 * Math.pow(2, this.reconnectAttempts) + Math.random() * 1000,
+      this.maxReconnectDelay
+    );
+
+    this.reconnectAttempts++;
+
+    setTimeout(() => {
+      if (!this.pb.realtime.isConnected) {
+        this.resubscribeAll();
+      }
+    }, delay);
+  }
+
+  async onReconnect() {
+    // Sync data for each tracked collection
+    for (const [collection, lastSync] of this.lastSyncTimes) {
+      await this.syncCollection(collection, lastSync);
+    }
+  }
+
+  async syncCollection(collection, since) {
+    try {
+      const updates = await this.pb.collection(collection).getList(1, 1000, {
+        filter: this.pb.filter('updated > {:since}', { since }),
+        sort: 'updated'
+      });
+
+      // Notify subscribers of missed updates
+      const handler = this.subscriptions.get(collection);
+      if (handler) {
+        updates.items.forEach(record => {
+          handler({ action: 'update', record });
+        });
+      }
+
+      this.lastSyncTimes.set(collection, new Date());
+    } catch (error) {
+      console.error(`Failed to sync ${collection}:`, error);
+    }
+  }
+
+  async subscribe(collection, handler) {
+    this.subscriptions.set(collection, handler);
+    this.lastSyncTimes.set(collection, new Date());
+
+    return this.pb.collection(collection).subscribe('*', (e) => {
+      this.lastSyncTimes.set(collection, new Date());
+      handler(e);
+    });
+  }
+
+  async resubscribeAll() {
+    // Refresh auth token before resubscribing to ensure valid credentials
+    if (this.pb.authStore.isValid) {
+      try {
+        await this.pb.collection('users').authRefresh();
+      } catch {
+        this.pb.authStore.clear();
+      }
+    }
+
+    for (const [collection, handler] of this.subscriptions) {
+      this.pb.collection(collection).subscribe('*', handler);
+    }
+  }
+}
+
+// Usage
+const realtime = new RealtimeManager(pb);
+await realtime.subscribe('posts', handlePostChange);
+```
+
+**Connection timeout handling:**
+
+```javascript
+// Server sends disconnect after 5 min of no messages
+// SDK auto-reconnects, but you can handle it explicitly
+
+let lastHeartbeat = Date.now();
+
+pb.realtime.subscribe('PB_CONNECT', () => {
+  lastHeartbeat = Date.now();
+});
+
+// Check for stale connection
+setInterval(() => {
+  if (Date.now() - lastHeartbeat > 6 * 60 * 1000) {
+    console.log('Connection may be stale, refreshing...');
+    pb.realtime.unsubscribe();
+    resubscribeAll();
+  }
+}, 60000);
+```
+
+Reference: [PocketBase Realtime](https://pocketbase.io/docs/api-realtime/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/realtime-subscribe.md b/.claude/skills/pocketbase-best-practices/rules/realtime-subscribe.md
new file mode 100644
index 0000000..a81001e
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/realtime-subscribe.md
@@ -0,0 +1,182 @@
+---
+title: Implement Realtime Subscriptions Correctly
+impact: MEDIUM
+impactDescription: Live updates without polling, reduced server load
+tags: realtime, subscriptions, sse, websocket
+---
+
+## Implement Realtime Subscriptions Correctly
+
+PocketBase uses Server-Sent Events (SSE) for realtime updates. Proper subscription management prevents memory leaks and ensures reliable event delivery.
+
+**Incorrect (memory leaks and poor management):**
+
+```javascript
+// Missing unsubscribe - memory leak!
+function PostList() {
+  useEffect(() => {
+    pb.collection('posts').subscribe('*', (e) => {
+      updatePosts(e);
+    });
+    // No cleanup - subscription persists forever!
+  }, []);
+}
+
+// Subscribing multiple times
+function loadPosts() {
+  // Called on every render - creates duplicate subscriptions!
+  pb.collection('posts').subscribe('*', handleChange);
+}
+
+// Not handling reconnection
+pb.collection('posts').subscribe('*', (e) => {
+  // Assumes connection is always stable
+  updateUI(e);
+});
+```
+
+**Correct (proper subscription management):**
+
+```javascript
+// React example with cleanup
+function PostList() {
+  const [posts, setPosts] = useState([]);
+
+  useEffect(() => {
+    // Initial load
+    loadPosts();
+
+    // Subscribe to changes
+    const unsubscribe = pb.collection('posts').subscribe('*', (e) => {
+      if (e.action === 'create') {
+        setPosts(prev => [e.record, ...prev]);
+      } else if (e.action === 'update') {
+        setPosts(prev => prev.map(p =>
+          p.id === e.record.id ? e.record : p
+        ));
+      } else if (e.action === 'delete') {
+        setPosts(prev => prev.filter(p => p.id !== e.record.id));
+      }
+    });
+
+    // Cleanup on unmount
+    return () => {
+      unsubscribe();
+    };
+  }, []);
+
+  async function loadPosts() {
+    const result = await pb.collection('posts').getList(1, 50);
+    setPosts(result.items);
+  }
+
+  return <PostListUI posts={posts} />;
+}
+
+// Subscribe to specific record
+async function watchPost(postId) {
+  return pb.collection('posts').subscribe(postId, (e) => {
+    console.log('Post changed:', e.action, e.record);
+  });
+}
+
+// Subscribe to collection changes
+async function watchAllPosts() {
+  return pb.collection('posts').subscribe('*', (e) => {
+    console.log(`Post ${e.action}:`, e.record.title);
+  });
+}
+
+// Handle connection events
+pb.realtime.subscribe('PB_CONNECT', (e) => {
+  console.log('Realtime connected, client ID:', e.clientId);
+  // Re-sync data after reconnection
+  refreshData();
+});
+
+// Vanilla JS with proper cleanup
+class PostManager {
+  unsubscribes = [];
+
+  async init() {
+    this.unsubscribes.push(
+      await pb.collection('posts').subscribe('*', this.handlePostChange)
+    );
+    this.unsubscribes.push(
+      await pb.collection('comments').subscribe('*', this.handleCommentChange)
+    );
+  }
+
+  destroy() {
+    this.unsubscribes.forEach(unsub => unsub());
+    this.unsubscribes = [];
+  }
+
+  handlePostChange = (e) => { /* ... */ };
+  handleCommentChange = (e) => { /* ... */ };
+}
+```
+
+**Subscription event structure:**
+
+```javascript
+pb.collection('posts').subscribe('*', (event) => {
+  event.action;  // 'create' | 'update' | 'delete'
+  event.record;  // The affected record
+});
+
+// Full event type
+interface RealtimeEvent {
+  action: 'create' | 'update' | 'delete';
+  record: RecordModel;
+}
+```
+
+**Unsubscribe patterns:**
+
+```javascript
+// Unsubscribe from specific callback
+const unsub = await pb.collection('posts').subscribe('*', callback);
+unsub();  // Remove this specific subscription
+
+// Unsubscribe from all subscriptions on a topic
+pb.collection('posts').unsubscribe('*');  // All collection subs
+pb.collection('posts').unsubscribe('RECORD_ID');  // Specific record
+
+// Unsubscribe from all collection subscriptions
+pb.collection('posts').unsubscribe();
+
+// Unsubscribe from everything
+pb.realtime.unsubscribe();
+```
+
+**Performance considerations:**
+
+```javascript
+// Prefer specific record subscriptions over collection-wide when possible.
+// subscribe('*') checks ListRule for every connected client on each change.
+// subscribe(recordId) checks ViewRule -- fewer records to evaluate.
+
+// For high-traffic collections, subscribe to specific records:
+await pb.collection('orders').subscribe(orderId, handleOrderUpdate);
+// Instead of: pb.collection('orders').subscribe('*', handleAllOrders);
+
+// Use subscription options to reduce payload size (SDK v0.21+):
+await pb.collection('posts').subscribe('*', handleChange, {
+  fields: 'id,title,updated',  // Only receive specific fields
+  expand: 'author',            // Include expanded relations
+  filter: 'status = "published"'  // Only receive matching records
+});
+```
+
+**Subscription scope guidelines:**
+
+| Scenario | Recommended Scope |
+|----------|-------------------|
+| Watching a specific document | `subscribe(recordId)` |
+| Chat room messages | `subscribe('*')` with filter for room |
+| User notifications | `subscribe('*')` with filter for user |
+| Admin dashboard | `subscribe('*')` (need to see all) |
+| High-frequency data (IoT) | `subscribe(recordId)` per device |
+
+Reference: [PocketBase Realtime](https://pocketbase.io/docs/api-realtime/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/rules-basics.md b/.claude/skills/pocketbase-best-practices/rules/rules-basics.md
new file mode 100644
index 0000000..01c0e5d
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/rules-basics.md
@@ -0,0 +1,85 @@
+---
+title: Understand API Rule Types and Defaults
+impact: CRITICAL
+impactDescription: Prevents unauthorized access, data leaks, and security vulnerabilities
+tags: api-rules, security, access-control, authorization
+---
+
+## Understand API Rule Types and Defaults
+
+PocketBase uses five collection-level rules to control access. Understanding the difference between locked (null), open (""), and expression rules is critical for security.
+
+**Incorrect (leaving rules open unintentionally):**
+
+```javascript
+// Collection with overly permissive rules
+const collection = {
+  name: 'messages',
+  listRule: '',      // Anyone can list all messages!
+  viewRule: '',      // Anyone can view any message!
+  createRule: '',    // Anyone can create messages!
+  updateRule: '',    // Anyone can update any message!
+  deleteRule: ''     // Anyone can delete any message!
+};
+// Complete security bypass - all data exposed
+```
+
+**Correct (explicit, restrictive rules):**
+
+```javascript
+// Collection with proper access control
+const collection = {
+  name: 'messages',
+  // null = locked, only superusers can access
+  listRule: null,    // Default: locked to superusers
+
+  // '' (empty string) = open to everyone (use sparingly)
+  viewRule: '@request.auth.id != ""',  // Any authenticated user
+
+  // Expression = conditional access
+  createRule: '@request.auth.id != ""',  // Must be logged in
+  updateRule: 'author = @request.auth.id',  // Only author
+  deleteRule: 'author = @request.auth.id'   // Only author
+};
+```
+
+**Rule types explained:**
+
+| Rule Value | Meaning | Use Case |
+|------------|---------|----------|
+| `null` | Locked (superusers only) | Admin-only data, system tables |
+| `''` (empty string) | Open to everyone | Public content, no auth required |
+| `'expression'` | Conditional access | Most common - check auth, ownership |
+
+**Common patterns:**
+
+```javascript
+// Public read, authenticated write (enforce ownership on create)
+listRule: '',
+viewRule: '',
+createRule: '@request.auth.id != "" && @request.body.author = @request.auth.id',
+updateRule: 'author = @request.auth.id',
+deleteRule: 'author = @request.auth.id'
+
+// Private to owner only
+listRule: 'owner = @request.auth.id',
+viewRule: 'owner = @request.auth.id',
+createRule: '@request.auth.id != ""',
+updateRule: 'owner = @request.auth.id',
+deleteRule: 'owner = @request.auth.id'
+
+// Read-only public data
+listRule: '',
+viewRule: '',
+createRule: null,
+updateRule: null,
+deleteRule: null
+```
+
+**Error responses by rule type:**
+- List rule fail: 200 with empty items
+- View/Update/Delete fail: 404 (hides existence)
+- Create fail: 400
+- Locked rule violation: 403
+
+Reference: [PocketBase API Rules](https://pocketbase.io/docs/api-rules-and-filters/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/rules-cross-collection.md b/.claude/skills/pocketbase-best-practices/rules/rules-cross-collection.md
new file mode 100644
index 0000000..8e9ca61
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/rules-cross-collection.md
@@ -0,0 +1,75 @@
+---
+title: Use @collection for Cross-Collection Lookups
+impact: HIGH
+impactDescription: Enables complex authorization without denormalization
+tags: api-rules, security, cross-collection, relations
+---
+
+## Use @collection for Cross-Collection Lookups
+
+The `@collection` reference allows rules to query other collections, enabling complex authorization patterns like role-based access, team membership, and resource permissions.
+
+**Incorrect (denormalizing data for access control):**
+
+```javascript
+// Duplicating team membership in every resource
+const documentsSchema = [
+  { name: 'title', type: 'text' },
+  { name: 'team', type: 'relation' },
+  // Duplicated member list for access control - gets out of sync!
+  { name: 'allowedUsers', type: 'relation', options: { maxSelect: 999 } }
+];
+
+// Rule checks duplicated data
+listRule: 'allowedUsers ?= @request.auth.id'
+// Problem: must update allowedUsers whenever team membership changes
+```
+
+**Correct (using @collection lookup):**
+
+```javascript
+// Clean schema - no duplication
+const documentsSchema = [
+  { name: 'title', type: 'text' },
+  { name: 'team', type: 'relation', options: { collectionId: 'teams' } }
+];
+
+// Check team membership via @collection lookup
+listRule: '@collection.team_members.user ?= @request.auth.id && @collection.team_members.team ?= team'
+
+// Alternative: check if user is in team's members array
+listRule: 'team.members ?= @request.auth.id'
+
+// Role-based access via separate roles collection
+listRule: '@collection.user_roles.user = @request.auth.id && @collection.user_roles.role = "admin"'
+```
+
+**Common patterns:**
+
+```javascript
+// Team-based access
+// teams: { name, members (relation to users) }
+// documents: { title, team (relation to teams) }
+viewRule: 'team.members ?= @request.auth.id'
+
+// Organization hierarchy
+// orgs: { name }
+// org_members: { org, user, role }
+// projects: { name, org }
+listRule: '@collection.org_members.org = org && @collection.org_members.user = @request.auth.id'
+
+// Permission-based access
+// permissions: { resource, user, level }
+updateRule: '@collection.permissions.resource = id && @collection.permissions.user = @request.auth.id && @collection.permissions.level = "write"'
+
+// Using aliases for complex queries
+listRule: '@collection.memberships:m.user = @request.auth.id && @collection.memberships:m.team = team'
+```
+
+**Performance considerations:**
+- Cross-collection lookups add query complexity
+- Ensure referenced fields are indexed
+- Consider caching for frequently accessed permissions
+- Test performance with realistic data volumes
+
+Reference: [PocketBase Collection Reference](https://pocketbase.io/docs/api-rules-and-filters/#collection-fields)
diff --git a/.claude/skills/pocketbase-best-practices/rules/rules-filter-syntax.md b/.claude/skills/pocketbase-best-practices/rules/rules-filter-syntax.md
new file mode 100644
index 0000000..ef760e6
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/rules-filter-syntax.md
@@ -0,0 +1,93 @@
+---
+title: Master Filter Expression Syntax
+impact: CRITICAL
+impactDescription: Enables complex access control and efficient querying
+tags: api-rules, filters, syntax, operators, security
+---
+
+## Master Filter Expression Syntax
+
+PocketBase filter expressions use a specific syntax for both API rules and client-side queries. Understanding operators and composition is essential.
+
+**Incorrect (invalid filter syntax):**
+
+```javascript
+// Wrong operator syntax
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'status == "published"'  // Wrong: == instead of =
+});
+
+// Missing quotes around strings
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'status = published'  // Wrong: unquoted string
+});
+
+// Wrong boolean logic
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'status = "published" AND featured = true'  // Wrong: AND instead of &&
+});
+```
+
+**Correct (proper filter syntax):**
+
+```javascript
+// Equality and comparison operators
+const posts = await pb.collection('posts').getList(1, 20, {
+  filter: 'status = "published"'           // Equals
+});
+filter: 'views != 0'                        // Not equals
+filter: 'views > 100'                       // Greater than
+filter: 'views >= 100'                      // Greater or equal
+filter: 'price < 50.00'                     // Less than
+filter: 'created <= "2024-01-01 00:00:00"'  // Less or equal
+
+// String operators
+filter: 'title ~ "hello"'   // Contains (case-insensitive)
+filter: 'title !~ "spam"'   // Does not contain
+
+// Logical operators
+filter: 'status = "published" && featured = true'   // AND
+filter: 'category = "news" || category = "blog"'    // OR
+filter: '(status = "draft" || status = "review") && author = "abc"'  // Grouping
+
+// Array/multi-value operators (for select, relation fields)
+filter: 'tags ?= "featured"'    // Any tag equals "featured"
+filter: 'tags ?~ "tech"'        // Any tag contains "tech"
+
+// Null checks
+filter: 'deletedAt = null'      // Is null
+filter: 'avatar != null'        // Is not null
+
+// Date comparisons
+filter: 'created > "2024-01-01 00:00:00"'
+filter: 'created >= @now'       // Current timestamp
+filter: 'expires < @today'      // Start of today (UTC)
+```
+
+**Available operators:**
+
+| Operator | Description |
+|----------|-------------|
+| `=` | Equal |
+| `!=` | Not equal |
+| `>` `>=` `<` `<=` | Comparison |
+| `~` | Contains (LIKE %value%) |
+| `!~` | Does not contain |
+| `?=` `?!=` `?>` `?~` | Any element matches |
+| `&&` | AND |
+| `\|\|` | OR |
+| `()` | Grouping |
+
+**Date macros:**
+- `@now` - Current UTC datetime
+- `@today` - Start of today UTC
+- `@month` - Start of current month UTC
+- `@year` - Start of current year UTC
+
+**Filter functions:**
+- `strftime(fmt, datetime)` - Format/extract datetime parts (v0.36+). E.g. `strftime('%Y-%m', created) = "2026-03"`. See `rules-strftime.md` for the full format specifier list.
+- `length(field)` - Element count of a multi-value field (file, relation, select). E.g. `length(tags) > 0`.
+- `each(field, expr)` - Iterate a multi-value field: `each(tags, ? ~ "urgent")`.
+- `issetIf(field, val)` - Conditional presence check for complex rules.
+
+Reference: [PocketBase Filters](https://pocketbase.io/docs/api-rules-and-filters/#filters-syntax)
diff --git a/.claude/skills/pocketbase-best-practices/rules/rules-locked-vs-open.md b/.claude/skills/pocketbase-best-practices/rules/rules-locked-vs-open.md
new file mode 100644
index 0000000..94e97fa
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/rules-locked-vs-open.md
@@ -0,0 +1,91 @@
+---
+title: Default to Locked Rules, Open Explicitly
+impact: CRITICAL
+impactDescription: Defense in depth, prevents accidental data exposure
+tags: api-rules, security, defaults, best-practices
+---
+
+## Default to Locked Rules, Open Explicitly
+
+New collections should start with locked (null) rules and explicitly open only what's needed. This prevents accidental data exposure and follows the principle of least privilege.
+
+**Incorrect (starting with open rules):**
+
+```javascript
+// Dangerous: copying rules from examples without thinking
+const collection = {
+  name: 'user_settings',
+  listRule: '',      // Open - leaks all user settings!
+  viewRule: '',      // Open - anyone can view any setting
+  createRule: '',    // Open - no auth required
+  updateRule: '',    // Open - anyone can modify!
+  deleteRule: ''     // Open - anyone can delete!
+};
+
+// Also dangerous: using auth check when ownership needed
+const collection = {
+  name: 'private_notes',
+  listRule: '@request.auth.id != ""',  // Any logged-in user sees ALL notes
+  viewRule: '@request.auth.id != ""',
+  updateRule: '@request.auth.id != ""',  // Any user can edit ANY note!
+};
+```
+
+**Correct (locked by default, explicitly opened):**
+
+```javascript
+// Step 1: Start locked
+const collection = {
+  name: 'user_settings',
+  listRule: null,    // Locked - superusers only
+  viewRule: null,
+  createRule: null,
+  updateRule: null,
+  deleteRule: null
+};
+
+// Step 2: Open only what's needed with proper checks
+const collection = {
+  name: 'user_settings',
+  // Users can only see their own settings
+  listRule: 'user = @request.auth.id',
+  viewRule: 'user = @request.auth.id',
+  // Users can only create settings for themselves
+  createRule: '@request.auth.id != "" && @request.body.user = @request.auth.id',
+  // Users can only update their own settings
+  updateRule: 'user = @request.auth.id',
+  // Prevent deletion or restrict to owner
+  deleteRule: 'user = @request.auth.id'
+};
+
+// For truly public data, document why it's open
+const collection = {
+  name: 'public_announcements',
+  // Intentionally public - these are site-wide announcements
+  listRule: '',
+  viewRule: '',
+  // Only admins can manage (using custom "role" field on auth collection)
+  // IMPORTANT: Prevent role self-assignment in the users collection updateRule:
+  //   updateRule: 'id = @request.auth.id && @request.body.role:isset = false'
+  createRule: '@request.auth.role = "admin"',
+  updateRule: '@request.auth.role = "admin"',
+  deleteRule: '@request.auth.role = "admin"'
+};
+```
+
+**Rule development workflow:**
+
+1. **Start locked** - All rules `null`
+2. **Identify access needs** - Who needs what access?
+3. **Write minimal rules** - Open only required operations
+4. **Test thoroughly** - Verify both allowed and denied cases
+5. **Document decisions** - Comment why rules are set as they are
+
+**Security checklist:**
+- [ ] No empty string rules without justification
+- [ ] Ownership checks on personal data
+- [ ] Auth checks on write operations
+- [ ] Admin-only rules for sensitive operations
+- [ ] Tested with different user contexts
+
+Reference: [PocketBase API Rules](https://pocketbase.io/docs/api-rules-and-filters/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/rules-request-context.md b/.claude/skills/pocketbase-best-practices/rules/rules-request-context.md
new file mode 100644
index 0000000..607d543
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/rules-request-context.md
@@ -0,0 +1,88 @@
+---
+title: Use @request Context in API Rules
+impact: CRITICAL
+impactDescription: Enables dynamic, user-aware access control
+tags: api-rules, security, request-context, authentication
+---
+
+## Use @request Context in API Rules
+
+The `@request` object provides access to the current request context including authenticated user, request body, query parameters, and headers. Use it to build dynamic access rules.
+
+**Incorrect (hardcoded or missing auth checks):**
+
+```javascript
+// No authentication check
+const collection = {
+  listRule: '',  // Anyone can see everything
+  createRule: ''  // Anyone can create
+};
+
+// Hardcoded user ID (never do this)
+const collection = {
+  listRule: 'owner = "specific_user_id"'  // Only one user can access
+};
+```
+
+**Correct (using @request context):**
+
+```javascript
+// Check if user is authenticated
+createRule: '@request.auth.id != ""'
+
+// Check ownership via auth record
+listRule: 'owner = @request.auth.id'
+viewRule: 'owner = @request.auth.id'
+updateRule: 'owner = @request.auth.id'
+deleteRule: 'owner = @request.auth.id'
+
+// Access auth record fields
+// IMPORTANT: If using custom role fields, ensure update rules prevent
+// users from modifying their own role: @request.body.role:isset = false
+listRule: '@request.auth.role = "admin"'
+listRule: '@request.auth.verified = true'
+
+// Validate request body on create/update
+createRule: '@request.auth.id != "" && @request.body.owner = @request.auth.id'
+
+// Prevent changing certain fields
+updateRule: 'owner = @request.auth.id && @request.body.owner:isset = false'
+
+// WARNING: Query parameters are user-controlled and should NOT be used
+// for authorization decisions. Use them only for optional filtering behavior
+// where the fallback is equally safe.
+// listRule: '@request.query.publicOnly = "true" || owner = @request.auth.id'
+// The above is UNSAFE - users can bypass ownership by adding ?publicOnly=true
+// Instead, use separate endpoints or server-side logic for public vs. private views.
+listRule: 'owner = @request.auth.id || public = true'  // Use a record field, not query param
+
+// Access nested auth relations
+listRule: 'team.members ?= @request.auth.id'
+```
+
+**Available @request fields:**
+
+| Field | Description |
+|-------|-------------|
+| `@request.auth.id` | Authenticated user's ID (empty string if not authenticated) |
+| `@request.auth.*` | Any field from auth record (role, verified, email, etc.) |
+| `@request.body.*` | Request body fields (create/update only) |
+| `@request.query.*` | URL query parameters |
+| `@request.headers.*` | Request headers |
+| `@request.method` | HTTP method (GET, POST, etc.) |
+| `@request.context` | Request context: `default`, `oauth2`, `otp`, `password`, `realtime`, `protectedFile` |
+
+**Body field modifiers:**
+
+```javascript
+// Check if field is being set
+updateRule: '@request.body.status:isset = false'  // Can't change status
+
+// Check if field changed from current value
+updateRule: '@request.body.owner:changed = false'  // Can't change owner
+
+// Get length of array/string
+createRule: '@request.body.tags:length <= 5'  // Max 5 tags
+```
+
+Reference: [PocketBase API Rules](https://pocketbase.io/docs/api-rules-and-filters/#available-fields)
diff --git a/.claude/skills/pocketbase-best-practices/rules/rules-strftime.md b/.claude/skills/pocketbase-best-practices/rules/rules-strftime.md
new file mode 100644
index 0000000..b7b8ce1
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/rules-strftime.md
@@ -0,0 +1,73 @@
+---
+title: Use strftime() for Date Arithmetic in Filter Expressions
+impact: MEDIUM
+impactDescription: strftime() (added in v0.36) replaces brittle string prefix comparisons on datetime fields
+tags: filter, strftime, datetime, rules, v0.36
+---
+
+## Use strftime() for Date Arithmetic in Filter Expressions
+
+PocketBase v0.36 added the `strftime()` function to the filter expression grammar. It maps directly to SQLite's [strftime](https://sqlite.org/lang_datefunc.html) and is the correct way to bucket, compare, or extract parts of a datetime field. Before v0.36 people worked around this with `~` (substring) matches against the ISO string; those workarounds are fragile (they break at midnight UTC, ignore timezones, and can't handle ranges).
+
+**Incorrect (substring match on the ISO datetime string):**
+
+```javascript
+// ❌ "matches anything whose ISO string contains 2026-04-08" - breaks as soon
+//    as your DB stores sub-second precision or you cross a month boundary
+const todayPrefix = new Date().toISOString().slice(0, 10);
+const results = await pb.collection("orders").getList(1, 50, {
+    filter: `created ~ "${todayPrefix}"`, // ❌
+});
+```
+
+**Correct (strftime with named format specifiers):**
+
+```javascript
+// "all orders created today (UTC)"
+const results = await pb.collection("orders").getList(1, 50, {
+    filter: `strftime('%Y-%m-%d', created) = strftime('%Y-%m-%d', @now)`,
+});
+
+// "all orders from March 2026"
+await pb.collection("orders").getList(1, 50, {
+    filter: `strftime('%Y-%m', created) = "2026-03"`,
+});
+
+// "orders created this hour"
+await pb.collection("orders").getList(1, 50, {
+    filter: `strftime('%Y-%m-%d %H', created) = strftime('%Y-%m-%d %H', @now)`,
+});
+```
+
+```javascript
+// Same function is available inside API rules:
+//   collection "orders" - List rule:
+//      @request.auth.id != "" &&
+//      user = @request.auth.id &&
+//      strftime('%Y-%m-%d', created) = strftime('%Y-%m-%d', @now)
+```
+
+**Common format specifiers:**
+
+| Specifier | Meaning |
+|---|---|
+| `%Y` | 4-digit year |
+| `%m` | month (01-12) |
+| `%d` | day of month (01-31) |
+| `%H` | hour (00-23) |
+| `%M` | minute (00-59) |
+| `%S` | second (00-59) |
+| `%W` | ISO week (00-53) |
+| `%j` | day of year (001-366) |
+| `%w` | day of week (0=Sunday) |
+
+**Other filter functions worth knowing:**
+
+| Function | Use |
+|---|---|
+| `strftime(fmt, datetime)` | Format/extract datetime parts (v0.36+) |
+| `length(field)` | Count elements in a multi-value field (file, relation, select) |
+| `each(field, expr)` | Iterate over multi-value fields: `each(tags, ? ~ "urgent")` |
+| `issetIf(field, val)` | Conditional presence check used in complex rules |
+
+Reference: [Filter Syntax - Functions](https://pocketbase.io/docs/api-rules-and-filters/#filters) · [v0.36.0 release](https://github.com/pocketbase/pocketbase/releases/tag/v0.36.0)
diff --git a/.claude/skills/pocketbase-best-practices/rules/sdk-auth-store.md b/.claude/skills/pocketbase-best-practices/rules/sdk-auth-store.md
new file mode 100644
index 0000000..f0b7ade
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/sdk-auth-store.md
@@ -0,0 +1,128 @@
+---
+title: Use Appropriate Auth Store for Your Platform
+impact: HIGH
+impactDescription: Proper auth persistence across sessions and page reloads
+tags: sdk, auth-store, persistence, storage
+---
+
+## Use Appropriate Auth Store for Your Platform
+
+The auth store persists authentication state. Choose the right store type based on your platform: LocalAuthStore for browsers, AsyncAuthStore for React Native, or custom stores for specific needs.
+
+**Incorrect (wrong store for platform):**
+
+```javascript
+// React Native: LocalAuthStore doesn't work correctly
+import PocketBase from 'pocketbase';
+const pb = new PocketBase('http://127.0.0.1:8090');
+// Auth state lost on app restart!
+
+// Deno server: LocalStorage shared between all clients
+import PocketBase from 'pocketbase';
+const pb = new PocketBase('http://127.0.0.1:8090');
+// All clients share the same auth state!
+
+// Server-side: Reusing single client for multiple users
+const pb = new PocketBase('http://127.0.0.1:8090');
+// User A logs in...
+// User B's request uses User A's auth!
+```
+
+**Correct (platform-appropriate stores):**
+
+```javascript
+// Browser (default LocalAuthStore - works automatically)
+import PocketBase from 'pocketbase';
+const pb = new PocketBase('http://127.0.0.1:8090');
+// Automatically persists to localStorage and syncs between tabs
+
+// React Native (AsyncAuthStore)
+import PocketBase, { AsyncAuthStore } from 'pocketbase';
+import AsyncStorage from '@react-native-async-storage/async-storage';
+
+const store = new AsyncAuthStore({
+  save: async (serialized) => {
+    await AsyncStorage.setItem('pb_auth', serialized);
+  },
+  initial: AsyncStorage.getItem('pb_auth'),
+  clear: async () => {
+    await AsyncStorage.removeItem('pb_auth');
+  }
+});
+
+const pb = new PocketBase('http://127.0.0.1:8090', store);
+
+// Server-side / SSR (create client per request)
+import PocketBase from 'pocketbase';
+
+export function createServerClient(cookieHeader) {
+  const pb = new PocketBase('http://127.0.0.1:8090');
+  pb.authStore.loadFromCookie(cookieHeader || '');
+  return pb;
+}
+
+// Deno/Cloudflare Workers (memory-only store)
+import PocketBase, { BaseAuthStore } from 'pocketbase';
+
+class MemoryAuthStore extends BaseAuthStore {
+  // Token only persists for request duration
+  // Each request must include auth via cookie/header
+}
+
+const pb = new PocketBase('http://127.0.0.1:8090', new MemoryAuthStore());
+```
+
+**Custom auth store example:**
+
+```javascript
+import PocketBase, { BaseAuthStore } from 'pocketbase';
+
+class SecureAuthStore extends BaseAuthStore {
+  constructor() {
+    super();
+    // Load initial state from secure storage
+    const data = secureStorage.get('pb_auth');
+    if (data) {
+      const { token, record } = JSON.parse(data);
+      this.save(token, record);
+    }
+  }
+
+  save(token, record) {
+    super.save(token, record);
+    // Persist to secure storage
+    secureStorage.set('pb_auth', JSON.stringify({ token, record }));
+  }
+
+  clear() {
+    super.clear();
+    secureStorage.remove('pb_auth');
+  }
+}
+
+const pb = new PocketBase('http://127.0.0.1:8090', new SecureAuthStore());
+```
+
+**Auth store methods:**
+
+```javascript
+// Available on all auth stores
+pb.authStore.token;        // Current token
+pb.authStore.record;       // Current auth record
+pb.authStore.isValid;      // Token exists and not expired
+pb.authStore.isSuperuser;  // Is superuser token
+
+pb.authStore.save(token, record);  // Save auth state
+pb.authStore.clear();              // Clear auth state
+
+// Listen for changes
+const unsubscribe = pb.authStore.onChange((token, record) => {
+  console.log('Auth changed:', record?.email);
+}, true);  // true = fire immediately
+
+// Cookie helpers (for SSR)
+pb.authStore.loadFromCookie(cookieString);
+pb.authStore.exportToCookie({ httpOnly: false, secure: true });
+```
+
+Reference: [PocketBase Authentication](https://pocketbase.io/docs/authentication/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/sdk-auto-cancellation.md b/.claude/skills/pocketbase-best-practices/rules/sdk-auto-cancellation.md
new file mode 100644
index 0000000..e26c007
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/sdk-auto-cancellation.md
@@ -0,0 +1,140 @@
+---
+title: Understand and Control Auto-Cancellation
+impact: MEDIUM
+impactDescription: Prevents race conditions, improves UX for search/typeahead
+tags: sdk, cancellation, requests, performance
+---
+
+## Understand and Control Auto-Cancellation
+
+The SDK automatically cancels duplicate pending requests. This prevents race conditions but requires understanding for proper use in concurrent scenarios.
+
+**Incorrect (confused by auto-cancellation):**
+
+```javascript
+// These requests will interfere with each other!
+async function loadDashboard() {
+  // Only the last one executes, others cancelled
+  const posts = pb.collection('posts').getList(1, 20);
+  const users = pb.collection('posts').getList(1, 10);  // Different params but same path
+  const comments = pb.collection('posts').getList(1, 5);
+
+  // posts and users are cancelled, only comments executes
+  return Promise.all([posts, users, comments]);  // First two fail!
+}
+
+// Realtime combined with polling causes cancellation
+pb.collection('posts').subscribe('*', callback);
+setInterval(() => {
+  pb.collection('posts').getList();  // May cancel realtime!
+}, 5000);
+```
+
+**Correct (controlling auto-cancellation):**
+
+```javascript
+// Disable auto-cancellation for parallel requests
+async function loadDashboard() {
+  const [posts, users, recent] = await Promise.all([
+    pb.collection('posts').getList(1, 20, { requestKey: null }),
+    pb.collection('users').getList(1, 10, { requestKey: null }),
+    pb.collection('posts').getList(1, 5, { requestKey: 'recent' })
+  ]);
+  // All requests complete independently
+  return { posts, users, recent };
+}
+
+// Use unique request keys for different purposes
+async function searchPosts(query) {
+  return pb.collection('posts').getList(1, 20, {
+    filter: pb.filter('title ~ {:q}', { q: query }),
+    requestKey: 'post-search'  // Cancels previous searches only
+  });
+}
+
+async function loadPostDetails(postId) {
+  return pb.collection('posts').getOne(postId, {
+    requestKey: `post-${postId}`  // Unique per post
+  });
+}
+
+// Typeahead search - auto-cancellation is helpful here
+async function typeaheadSearch(query) {
+  // Previous search automatically cancelled when user types more
+  return pb.collection('products').getList(1, 10, {
+    filter: pb.filter('name ~ {:q}', { q: query })
+    // No requestKey = uses default (path-based), previous cancelled
+  });
+}
+
+// Globally disable auto-cancellation (use carefully)
+pb.autoCancellation(false);
+
+// Now all requests are independent
+await Promise.all([
+  pb.collection('posts').getList(1, 20),
+  pb.collection('posts').getList(1, 10),
+  pb.collection('posts').getList(1, 5)
+]);
+
+// Re-enable
+pb.autoCancellation(true);
+```
+
+**Manual cancellation:**
+
+```javascript
+// Cancel all pending requests
+pb.cancelAllRequests();
+
+// Cancel specific request by key
+pb.cancelRequest('post-search');
+
+// Example: Cancel on component unmount
+function PostList() {
+  useEffect(() => {
+    loadPosts();
+
+    return () => {
+      // Cleanup: cancel pending requests
+      pb.cancelRequest('post-list');
+    };
+  }, []);
+
+  async function loadPosts() {
+    const result = await pb.collection('posts').getList(1, 20, {
+      requestKey: 'post-list'
+    });
+    setPosts(result.items);
+  }
+}
+
+// Handle cancellation in catch
+async function fetchWithCancellation() {
+  try {
+    return await pb.collection('posts').getList();
+  } catch (error) {
+    if (error.isAbort) {
+      // Request was cancelled - this is expected
+      console.log('Request cancelled');
+      return null;
+    }
+    throw error;
+  }
+}
+```
+
+**When to use each approach:**
+
+| Scenario | Approach |
+|----------|----------|
+| Search/typeahead | Default (let it cancel) |
+| Parallel data loading | `requestKey: null` |
+| Grouped requests | Custom `requestKey` |
+| Component cleanup | `cancelRequest(key)` |
+| Testing/debugging | `autoCancellation(false)` |
+| OAuth2 flow cancel | `cancelRequest(requestKey)` — properly rejects the `authWithOAuth2()` Promise (JS SDK v0.26.8+) |
+
+> **Note (JS SDK v0.26.8):** Calling `pb.cancelRequest(requestKey)` while `authWithOAuth2()` is waiting now properly rejects the returned Promise. In earlier versions the manual cancellation did not account for the waiting realtime subscription, so the Promise could hang indefinitely.
+
+Reference: [PocketBase Auto-Cancellation](https://github.com/pocketbase/js-sdk#auto-cancellation)
diff --git a/.claude/skills/pocketbase-best-practices/rules/sdk-error-handling.md b/.claude/skills/pocketbase-best-practices/rules/sdk-error-handling.md
new file mode 100644
index 0000000..c3457e6
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/sdk-error-handling.md
@@ -0,0 +1,165 @@
+---
+title: Handle SDK Errors Properly
+impact: HIGH
+impactDescription: Graceful error recovery, better UX, easier debugging
+tags: sdk, errors, error-handling, exceptions
+---
+
+## Handle SDK Errors Properly
+
+All SDK methods return Promises that may reject with `ClientResponseError`. Proper error handling improves user experience and simplifies debugging.
+
+**Incorrect (ignoring or poorly handling errors):**
+
+```javascript
+// No error handling
+const posts = await pb.collection('posts').getList();
+
+// Generic catch that loses information
+try {
+  await pb.collection('posts').create({ title: '' });
+} catch (e) {
+  alert('Something went wrong');  // No useful info
+}
+
+// Not checking specific error types
+try {
+  await pb.collection('posts').getOne('nonexistent');
+} catch (e) {
+  console.log(e.message);  // Missing status, response details
+}
+```
+
+**Correct (comprehensive error handling):**
+
+```javascript
+import PocketBase, { ClientResponseError } from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// Basic error handling with ClientResponseError
+async function createPost(data) {
+  try {
+    return await pb.collection('posts').create(data);
+  } catch (error) {
+    if (error instanceof ClientResponseError) {
+      console.log('Status:', error.status);
+      console.log('Response:', error.response);
+      console.log('URL:', error.url);
+      console.log('Is abort:', error.isAbort);
+
+      // Handle specific status codes
+      switch (error.status) {
+        case 400:
+          // Validation error - extract user-friendly messages only
+          // IMPORTANT: Don't expose raw error.response.data to clients
+          // as it may leak internal field names and validation rules
+          const fieldErrors = {};
+          if (error.response?.data) {
+            for (const [field, details] of Object.entries(error.response.data)) {
+              fieldErrors[field] = details.message;
+            }
+          }
+          return { error: 'validation', fields: fieldErrors };
+        case 401:
+          // Unauthorized - need to login
+          return { error: 'unauthorized' };
+        case 403:
+          // Forbidden - no permission
+          return { error: 'forbidden' };
+        case 404:
+          // Not found
+          return { error: 'not_found' };
+        default:
+          return { error: 'server_error' };
+      }
+    }
+    throw error;  // Re-throw non-PocketBase errors
+  }
+}
+
+// Handle validation errors with field details
+async function updateProfile(userId, data) {
+  try {
+    return await pb.collection('users').update(userId, data);
+  } catch (error) {
+    if (error.status === 400 && error.response?.data) {
+      // Extract field-specific errors
+      const fieldErrors = {};
+      for (const [field, details] of Object.entries(error.response.data)) {
+        fieldErrors[field] = details.message;
+      }
+      return { success: false, errors: fieldErrors };
+      // { errors: { email: "Invalid email format", name: "Required field" } }
+    }
+    throw error;
+  }
+}
+
+// Handle request cancellation
+async function searchWithCancel(query) {
+  try {
+    return await pb.collection('posts').getList(1, 20, {
+      filter: pb.filter('title ~ {:query}', { query })
+    });
+  } catch (error) {
+    if (error.isAbort) {
+      // Request was cancelled (e.g., user typed again)
+      console.log('Search cancelled');
+      return null;
+    }
+    throw error;
+  }
+}
+
+// Wrapper function for consistent error handling
+async function pbRequest(fn) {
+  try {
+    return { data: await fn(), error: null };
+  } catch (error) {
+    if (error instanceof ClientResponseError) {
+      return {
+        data: null,
+        error: {
+          status: error.status,
+          message: error.response?.message || 'Request failed',
+          data: error.response?.data || null
+        }
+      };
+    }
+    return {
+      data: null,
+      error: { status: 0, message: error.message, data: null }
+    };
+  }
+}
+
+// Usage
+const { data, error } = await pbRequest(() =>
+  pb.collection('posts').getList(1, 20)
+);
+
+if (error) {
+  console.log('Failed:', error.message);
+} else {
+  console.log('Posts:', data.items);
+}
+```
+
+**ClientResponseError structure:**
+
+```typescript
+interface ClientResponseError {
+  url: string;           // The request URL
+  status: number;        // HTTP status code (0 if network error)
+  response: {            // API response body
+    code: number;
+    message: string;
+    data: { [field: string]: { code: string; message: string } };
+  };
+  isAbort: boolean;      // True if request was cancelled
+  cause: Error | null;   // Original error (added in JS SDK v0.26.1)
+}
+```
+
+Reference: [PocketBase Error Handling](https://github.com/pocketbase/js-sdk#error-handling)
diff --git a/.claude/skills/pocketbase-best-practices/rules/sdk-field-modifiers.md b/.claude/skills/pocketbase-best-practices/rules/sdk-field-modifiers.md
new file mode 100644
index 0000000..9a87ea3
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/sdk-field-modifiers.md
@@ -0,0 +1,129 @@
+---
+title: Use Field Modifiers for Incremental Updates
+impact: HIGH
+impactDescription: Atomic updates, prevents race conditions, cleaner code
+tags: sdk, modifiers, relations, files, numbers, atomic
+---
+
+## Use Field Modifiers for Incremental Updates
+
+PocketBase supports `+` and `-` modifiers for incrementing numbers, appending/removing relation IDs, and managing file arrays without replacing the entire value.
+
+**Incorrect (read-modify-write pattern):**
+
+```javascript
+// Race condition: two users adding tags simultaneously
+async function addTag(postId, newTagId) {
+  const post = await pb.collection('posts').getOne(postId);
+  const currentTags = post.tags || [];
+
+  // Another user might have added a tag in between!
+  await pb.collection('posts').update(postId, {
+    tags: [...currentTags, newTagId]  // Might overwrite the other user's tag
+  });
+}
+
+// Inefficient for incrementing counters
+async function incrementViews(postId) {
+  const post = await pb.collection('posts').getOne(postId);
+  await pb.collection('posts').update(postId, {
+    views: post.views + 1  // Extra read, race condition
+  });
+}
+```
+
+**Correct (using field modifiers):**
+
+```javascript
+// Atomic relation append with + modifier
+async function addTag(postId, newTagId) {
+  await pb.collection('posts').update(postId, {
+    'tags+': newTagId  // Appends to existing tags atomically
+  });
+}
+
+// Append multiple relations
+async function addTags(postId, tagIds) {
+  await pb.collection('posts').update(postId, {
+    'tags+': tagIds  // Appends array of IDs
+  });
+}
+
+// Prepend relations (+ prefix)
+async function prependTag(postId, tagId) {
+  await pb.collection('posts').update(postId, {
+    '+tags': tagId  // Prepends to start of array
+  });
+}
+
+// Remove relations with - modifier
+async function removeTag(postId, tagId) {
+  await pb.collection('posts').update(postId, {
+    'tags-': tagId  // Removes specific tag
+  });
+}
+
+// Remove multiple relations
+async function removeTags(postId, tagIds) {
+  await pb.collection('posts').update(postId, {
+    'tags-': tagIds  // Removes all specified tags
+  });
+}
+
+// Atomic number increment
+async function incrementViews(postId) {
+  await pb.collection('posts').update(postId, {
+    'views+': 1  // Atomic increment, no race condition
+  });
+}
+
+// Atomic number decrement
+async function decrementStock(productId, quantity) {
+  await pb.collection('products').update(productId, {
+    'stock-': quantity  // Atomic decrement
+  });
+}
+
+// File append (for multi-file fields)
+async function addImage(albumId, newImage) {
+  await pb.collection('albums').update(albumId, {
+    'images+': newImage  // Appends new file to existing
+  });
+}
+
+// File removal
+async function removeImage(albumId, filename) {
+  await pb.collection('albums').update(albumId, {
+    'images-': filename  // Removes specific file by name
+  });
+}
+
+// Combined modifiers in single update
+async function updatePost(postId, data) {
+  await pb.collection('posts').update(postId, {
+    title: data.title,        // Replace field
+    'views+': 1,              // Increment number
+    'tags+': data.newTagId,   // Append relation
+    'tags-': data.oldTagId,   // Remove relation
+    'images+': data.newImage  // Append file
+  });
+}
+```
+
+**Modifier reference:**
+
+| Modifier | Field Types | Description |
+|----------|-------------|-------------|
+| `field+` or `+field` | relation, file | Append/prepend to array |
+| `field-` | relation, file | Remove from array |
+| `field+` | number | Increment by value |
+| `field-` | number | Decrement by value |
+
+**Benefits:**
+- **Atomic**: No read-modify-write race conditions
+- **Efficient**: Single request, no extra read needed
+- **Clean**: Expresses intent clearly
+
+**Note:** Modifiers only work with `update()`, not `create()`.
+
+Reference: [PocketBase Relations](https://pocketbase.io/docs/working-with-relations/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/sdk-filter-binding.md b/.claude/skills/pocketbase-best-practices/rules/sdk-filter-binding.md
new file mode 100644
index 0000000..2809d0a
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/sdk-filter-binding.md
@@ -0,0 +1,151 @@
+---
+title: Use Safe Parameter Binding in Filters
+impact: CRITICAL
+impactDescription: Prevents injection attacks, handles special characters correctly
+tags: sdk, filters, security, injection, parameters
+---
+
+## Use Safe Parameter Binding in Filters
+
+Always use `pb.filter()` with parameter binding when constructing filters with user input. String concatenation is vulnerable to injection attacks.
+
+**Incorrect (string concatenation - DANGEROUS):**
+
+```javascript
+// SQL/filter injection vulnerability!
+async function searchPosts(userInput) {
+  // User input: `test" || id != "` breaks out of string
+  const posts = await pb.collection('posts').getList(1, 20, {
+    filter: `title ~ "${userInput}"`  // VULNERABLE!
+  });
+  return posts;
+}
+
+// Even with escaping, easy to get wrong
+async function searchByEmail(email) {
+  const escaped = email.replace(/"/g, '\\"');  // Incomplete escaping
+  const users = await pb.collection('users').getList(1, 1, {
+    filter: `email = "${escaped}"`  // Still potentially vulnerable
+  });
+  return users;
+}
+
+// Template literals are just as dangerous
+const filter = `status = "${status}" && author = "${authorId}"`;
+```
+
+**Correct (using pb.filter with parameters):**
+
+```javascript
+// Safe parameter binding
+async function searchPosts(userInput) {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    filter: pb.filter('title ~ {:search}', { search: userInput })
+  });
+  return posts;
+}
+
+// Multiple parameters
+async function filterPosts(status, authorId, minViews) {
+  const posts = await pb.collection('posts').getList(1, 20, {
+    filter: pb.filter(
+      'status = {:status} && author = {:author} && views >= {:views}',
+      { status, author: authorId, views: minViews }
+    )
+  });
+  return posts;
+}
+
+// Reusing parameters
+async function searchBothFields(query) {
+  const results = await pb.collection('posts').getList(1, 20, {
+    filter: pb.filter(
+      'title ~ {:q} || content ~ {:q}',
+      { q: query }  // Same parameter used twice
+    )
+  });
+  return results;
+}
+
+// Different parameter types
+async function complexFilter(options) {
+  const filter = pb.filter(
+    'created > {:date} && active = {:active} && category = {:cat}',
+    {
+      date: new Date('2024-01-01'),  // Date objects handled correctly
+      active: true,                    // Booleans
+      cat: options.category            // Strings auto-escaped
+    }
+  );
+
+  return pb.collection('posts').getList(1, 20, { filter });
+}
+
+// Null handling
+async function filterWithOptional(category) {
+  // Only include filter if value provided
+  const filter = category
+    ? pb.filter('category = {:cat}', { cat: category })
+    : '';
+
+  return pb.collection('posts').getList(1, 20, { filter });
+}
+
+// Building dynamic filters
+async function dynamicSearch(filters) {
+  const conditions = [];
+  const params = {};
+
+  if (filters.title) {
+    conditions.push('title ~ {:title}');
+    params.title = filters.title;
+  }
+
+  if (filters.author) {
+    conditions.push('author = {:author}');
+    params.author = filters.author;
+  }
+
+  if (filters.minDate) {
+    conditions.push('created >= {:minDate}');
+    params.minDate = filters.minDate;
+  }
+
+  const filter = conditions.length > 0
+    ? pb.filter(conditions.join(' && '), params)
+    : '';
+
+  return pb.collection('posts').getList(1, 20, { filter });
+}
+```
+
+**Supported parameter types:**
+
+| Type | Example | Notes |
+|------|---------|-------|
+| string | `'hello'` | Auto-escaped, quotes handled |
+| number | `123`, `45.67` | No quotes added |
+| boolean | `true`, `false` | Converted correctly |
+| Date | `new Date()` | Formatted for PocketBase |
+| null | `null` | For null comparisons |
+| other | `{...}` | JSON.stringify() applied |
+
+**Server-side is especially critical:**
+
+```javascript
+// Server-side code (Node.js, Deno, etc.) MUST use binding
+// because malicious users control the input directly
+
+export async function searchHandler(req) {
+  const userQuery = req.query.q;  // Untrusted input!
+
+  // ALWAYS use pb.filter() on server
+  const results = await pb.collection('posts').getList(1, 20, {
+    filter: pb.filter('title ~ {:q}', { q: userQuery })
+  });
+
+  return results;
+}
+```
+
+Reference: [PocketBase Filters](https://pocketbase.io/docs/api-rules-and-filters/)
diff --git a/.claude/skills/pocketbase-best-practices/rules/sdk-initialization.md b/.claude/skills/pocketbase-best-practices/rules/sdk-initialization.md
new file mode 100644
index 0000000..59decff
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/sdk-initialization.md
@@ -0,0 +1,135 @@
+---
+title: Initialize PocketBase Client Correctly
+impact: HIGH
+impactDescription: Proper setup enables auth persistence, SSR support, and optimal performance
+tags: sdk, initialization, client, setup
+---
+
+## Initialize PocketBase Client Correctly
+
+Client initialization should consider the environment (browser, Node.js, SSR), auth store persistence, and any required polyfills.
+
+**Incorrect (environment-agnostic initialization):**
+
+```javascript
+// Missing polyfills in Node.js
+import PocketBase from 'pocketbase';
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// Node.js: EventSource not defined error on realtime
+pb.collection('posts').subscribe('*', callback);  // Fails!
+
+// Missing base URL
+const pb = new PocketBase();  // Uses '/' - likely wrong
+```
+
+**Correct (environment-aware initialization):**
+
+```javascript
+// Browser setup (no polyfills needed)
+// IMPORTANT: Use HTTPS in production (http is only for local development)
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');  // Use https:// in production
+
+// Node.js setup (requires polyfills for realtime)
+import PocketBase from 'pocketbase';
+import { EventSource } from 'eventsource';
+
+// Global polyfill for realtime
+global.EventSource = EventSource;
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// React Native setup (async auth store)
+import PocketBase, { AsyncAuthStore } from 'pocketbase';
+import AsyncStorage from '@react-native-async-storage/async-storage';
+import EventSource from 'react-native-sse';
+
+global.EventSource = EventSource;
+
+const store = new AsyncAuthStore({
+  save: async (serialized) => AsyncStorage.setItem('pb_auth', serialized),
+  initial: AsyncStorage.getItem('pb_auth'),
+});
+
+const pb = new PocketBase('http://127.0.0.1:8090', store);
+```
+
+**SSR initialization (per-request client):**
+
+```javascript
+// SvelteKit example
+// src/hooks.server.js
+import PocketBase from 'pocketbase';
+
+export async function handle({ event, resolve }) {
+  // Create fresh client for each request
+  event.locals.pb = new PocketBase('http://127.0.0.1:8090');
+
+  // Load auth from request cookie
+  event.locals.pb.authStore.loadFromCookie(
+    event.request.headers.get('cookie') || ''
+  );
+
+  // Validate token
+  if (event.locals.pb.authStore.isValid) {
+    try {
+      await event.locals.pb.collection('users').authRefresh();
+    } catch {
+      event.locals.pb.authStore.clear();
+    }
+  }
+
+  const response = await resolve(event);
+
+  // Send updated auth cookie with secure options
+  response.headers.append(
+    'set-cookie',
+    event.locals.pb.authStore.exportToCookie({
+      httpOnly: true,   // Prevent XSS access to auth token
+      secure: true,     // HTTPS only
+      sameSite: 'Lax',  // CSRF protection
+    })
+  );
+
+  return response;
+}
+```
+
+**TypeScript with typed collections:**
+
+```typescript
+import PocketBase, { RecordService } from 'pocketbase';
+
+// Define your record types
+interface User {
+  id: string;
+  email: string;
+  name: string;
+  avatar?: string;
+}
+
+interface Post {
+  id: string;
+  title: string;
+  content: string;
+  author: string;
+  published: boolean;
+}
+
+// Create typed client interface
+interface TypedPocketBase extends PocketBase {
+  collection(idOrName: string): RecordService;
+  collection(idOrName: 'users'): RecordService<User>;
+  collection(idOrName: 'posts'): RecordService<Post>;
+}
+
+const pb = new PocketBase('http://127.0.0.1:8090') as TypedPocketBase;
+
+// Now methods are typed
+const post = await pb.collection('posts').getOne('abc');  // Returns Post
+const users = await pb.collection('users').getList();      // Returns ListResult<User>
+```
+
+Reference: [PocketBase JS SDK](https://github.com/pocketbase/js-sdk)
diff --git a/.claude/skills/pocketbase-best-practices/rules/sdk-send-hooks.md b/.claude/skills/pocketbase-best-practices/rules/sdk-send-hooks.md
new file mode 100644
index 0000000..f9d2aa0
--- /dev/null
+++ b/.claude/skills/pocketbase-best-practices/rules/sdk-send-hooks.md
@@ -0,0 +1,175 @@
+---
+title: Use Send Hooks for Request Customization
+impact: MEDIUM
+impactDescription: Custom headers, logging, response transformation
+tags: sdk, hooks, middleware, headers, logging
+---
+
+## Use Send Hooks for Request Customization
+
+The SDK provides `beforeSend` and `afterSend` hooks for intercepting and modifying requests and responses globally.
+
+**Incorrect (repeating logic in every request):**
+
+```javascript
+// Adding headers to every request manually
+const posts = await pb.collection('posts').getList(1, 20, {
+  headers: { 'X-Custom-Header': 'value' }
+});
+
+const users = await pb.collection('users').getList(1, 20, {
+  headers: { 'X-Custom-Header': 'value' }  // Repeated!
+});
+
+// Logging each request manually
+console.log('Fetching posts...');
+const posts = await pb.collection('posts').getList();
+console.log('Done');
+```
+
+**Correct (using send hooks):**
+
+```javascript
+import PocketBase from 'pocketbase';
+
+const pb = new PocketBase('http://127.0.0.1:8090');
+
+// beforeSend - modify requests before they're sent
+pb.beforeSend = function(url, options) {
+  // Add custom headers to all requests
+  options.headers = Object.assign({}, options.headers, {
+    'X-Custom-Header': 'value',
+    'X-Request-ID': crypto.randomUUID()
+  });
+
+  // Log outgoing requests
+  console.log(`[${options.method}] ${url}`);
+
+  // Must return { url, options }
+  return { url, options };
+};
+
+// afterSend - process responses
+pb.afterSend = function(response, data) {
+  // Log response status
+  console.log(`Response: ${response.status}`);
+
+  // Transform or extend response data
+  if (data && typeof data === 'object') {
+    data._fetchedAt = new Date().toISOString();
+  }
+
+  // Return the (possibly modified) data
+  return data;
+};
+
+// All requests now automatically have headers and logging
+const posts = await pb.collection('posts').getList();
+const users = await pb.collection('users').getList();
+```
+
+**Practical examples:**
+
+```javascript
+// Request timing / performance monitoring
+let requestStart;
+pb.beforeSend = function(url, options) {
+  requestStart = performance.now();
+  return { url, options };
+};
+
+pb.afterSend = function(response, data) {
+  const duration = performance.now() - requestStart;
+  console.log(`${response.url}: ${duration.toFixed(2)}ms`);
+
+  // Send to analytics
+  trackApiPerformance(response.url, duration);
+
+  return data;
+};
+
+// Add auth token from different source
+pb.beforeSend = function(url, options) {
+  const externalToken = getTokenFromExternalAuth();
+  if (externalToken) {
+    options.headers = Object.assign({}, options.headers, {
+      'X-External-Auth': externalToken
+    });
+  }
+  return { url, options };
+};
+
+// Handle specific response codes globally
+pb.afterSend = function(response, data) {
+  if (response.status === 401) {
+    // Token expired - trigger re-auth
+    handleAuthExpired();
+  }
+
+  if (response.status === 503) {
+    // Service unavailable - show maintenance message
+    showMaintenanceMode();
+  }
+
+  return data;
+};
+
+// Retry failed requests (simplified example)
+const originalSend = pb.send.bind(pb);
+pb.send = async function(path, options) {
+  try {
+    return await originalSend(path, options);
+  } catch (error) {
+    if (error.status === 429) {  // Rate limited
+      await sleep(1000);
+      return originalSend(path, options);  // Retry once
+    }
+    throw error;
+  }
+};
+
+// Add request correlation for debugging
+let requestId = 0;
+pb.beforeSend = function(url, options) {
+  requestId++;
+  const correlationId = `req-${Date.now()}-${requestId}`;
+
+  options.headers = Object.assign({}, options.headers, {
+    'X-Correlation-ID': correlationId
+  });
+
+  console.log(`[${correlationId}] Starting: ${url}`);
+  return { url, options };
+};
+
+pb.afterSend = function(response, data) {
+  console.log(`Complete: ${response.status}`);
+  return data;
+};
+```
+
+**Hook signatures:**
+
+```typescript
+// beforeSend
+beforeSend?: (
+  url: string,
+  options: SendOptions
+) => { url: string; options: SendOptions } | Promise<{ url: string; options: SendOptions }>;
+
+// afterSend
+afterSend?: (
+  response: Response,
+  data: any
+) => any | Promise<any>;
+```
+
+**Use cases:**
+- Add custom headers (API keys, correlation IDs)
+- Request/response logging
+- Performance monitoring
+- Global error handling
+- Response transformation
+- Authentication middleware
+
+Reference: [PocketBase Send Hooks](https://github.com/pocketbase/js-sdk#send-hooks)
diff --git a/.claude/skills/vite/GENERATION.md b/.claude/skills/vite/GENERATION.md
new file mode 100644
index 0000000..a4b1c4a
--- /dev/null
+++ b/.claude/skills/vite/GENERATION.md
@@ -0,0 +1,5 @@
+# Generation Info
+
+- **Source:** `sources/vite`
+- **Git SHA:** `c47015eba4f0de255218c35769628d87152216ca`
+- **Generated:** 2026-01-31
diff --git a/.claude/skills/vite/SKILL.md b/.claude/skills/vite/SKILL.md
new file mode 100644
index 0000000..0a00766
--- /dev/null
+++ b/.claude/skills/vite/SKILL.md
@@ -0,0 +1,72 @@
+---
+name: vite
+description: Vite build tool configuration, plugin API, SSR, and Vite 8 Rolldown migration. Use when working with Vite projects, vite.config.ts, Vite plugins, or building libraries/SSR apps with Vite.
+metadata:
+  author: Anthony Fu
+  version: "2026.1.31"
+  source: Generated from https://github.com/vitejs/vite, scripts at https://github.com/antfu/skills
+---
+
+# Vite
+
+> Based on Vite 8 beta (Rolldown-powered). Vite 8 uses Rolldown bundler and Oxc transformer.
+
+Vite is a next-generation frontend build tool with fast dev server (native ESM + HMR) and optimized production builds.
+
+## Preferences
+
+- Use TypeScript: prefer `vite.config.ts`
+- Always use ESM, avoid CommonJS
+
+## Core
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Configuration | `vite.config.ts`, `defineConfig`, conditional configs, `loadEnv` | [core-config](references/core-config.md) |
+| Features | `import.meta.glob`, asset queries (`?raw`, `?url`), `import.meta.env`, HMR API | [core-features](references/core-features.md) |
+| Plugin API | Vite-specific hooks, virtual modules, plugin ordering | [core-plugin-api](references/core-plugin-api.md) |
+
+## Build & SSR
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Build & SSR | Library mode, SSR middleware mode, `ssrLoadModule`, JavaScript API | [build-and-ssr](references/build-and-ssr.md) |
+
+## Advanced
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Environment API | Vite 6+ multi-environment support, custom runtimes | [environment-api](references/environment-api.md) |
+| Rolldown Migration | Vite 8 changes: Rolldown bundler, Oxc transformer, config migration | [rolldown-migration](references/rolldown-migration.md) |
+
+## Quick Reference
+
+### CLI Commands
+
+```bash
+vite              # Start dev server
+vite build        # Production build
+vite preview      # Preview production build
+vite build --ssr  # SSR build
+```
+
+### Common Config
+
+```ts
+import { defineConfig } from 'vite'
+
+export default defineConfig({
+  plugins: [],
+  resolve: { alias: { '@': '/src' } },
+  server: { port: 3000, proxy: { '/api': 'http://localhost:8080' } },
+  build: { target: 'esnext', outDir: 'dist' },
+})
+```
+
+### Official Plugins
+
+- `@vitejs/plugin-vue` - Vue 3 SFC support
+- `@vitejs/plugin-vue-jsx` - Vue 3 JSX
+- `@vitejs/plugin-react` - React with Oxc/Babel
+- `@vitejs/plugin-react-swc` - React with SWC
+- `@vitejs/plugin-legacy` - Legacy browser support
diff --git a/.claude/skills/vite/references/build-and-ssr.md b/.claude/skills/vite/references/build-and-ssr.md
new file mode 100644
index 0000000..ac46a9a
--- /dev/null
+++ b/.claude/skills/vite/references/build-and-ssr.md
@@ -0,0 +1,164 @@
+---
+name: vite-build-ssr
+description: Vite library mode, multi-page apps, JavaScript API, and SSR guidance
+---
+
+# Build and SSR
+
+## Library Mode
+
+Build a library for distribution:
+
+```ts
+// vite.config.ts
+import { resolve } from 'node:path'
+import { defineConfig } from 'vite'
+
+export default defineConfig({
+  build: {
+    lib: {
+      entry: resolve(import.meta.dirname, 'lib/main.ts'),
+      name: 'MyLib',
+      fileName: 'my-lib',
+    },
+    rolldownOptions: {
+      external: ['vue', 'react'],
+      output: {
+        globals: {
+          vue: 'Vue',
+          react: 'React',
+        },
+      },
+    },
+  },
+})
+```
+
+### Multiple Entries
+
+```ts
+build: {
+  lib: {
+    entry: {
+      'my-lib': resolve(import.meta.dirname, 'lib/main.ts'),
+      secondary: resolve(import.meta.dirname, 'lib/secondary.ts'),
+    },
+    name: 'MyLib',
+  },
+}
+```
+
+### Output Formats
+
+- Single entry: `es` and `umd`
+- Multiple entries: `es` and `cjs`
+
+### Package.json Setup
+
+```json
+{
+  "name": "my-lib",
+  "type": "module",
+  "files": ["dist"],
+  "main": "./dist/my-lib.umd.cjs",
+  "module": "./dist/my-lib.js",
+  "exports": {
+    ".": {
+      "import": "./dist/my-lib.js",
+      "require": "./dist/my-lib.umd.cjs"
+    },
+    "./style.css": "./dist/my-lib.css"
+  }
+}
+```
+
+## Multi-Page App
+
+```ts
+export default defineConfig({
+  build: {
+    rolldownOptions: {
+      input: {
+        main: resolve(import.meta.dirname, 'index.html'),
+        nested: resolve(import.meta.dirname, 'nested/index.html'),
+      },
+    },
+  },
+})
+```
+
+## SSR Development
+
+**Note:** Vite's SSR support is **low-level** and designed mostly for meta-framework authors, not application developers. If you need SSR for your app, use a Vite-based meta-framework instead:
+
+- **Nuxt** (Vue) - https://nuxt.com
+- **SvelteKit** (Svelte) - https://svelte.dev/docs/kit
+- **SolidStart** (Solid) - https://start.solidjs.com
+- **TanStack Start** (React) - https://tanstack.com/start
+
+These frameworks build on top of Vite's SSR primitives so you don't have to wire them up yourself.
+
+**Need a server?** Consider [Nitro](https://nitro.build) -- think of it as "Vite for servers." Nitro provides a portable, framework-agnostic server layer with file-based API routing, auto-imports, and deployment presets for dozens of platforms (Node.js, Deno, Bun, Cloudflare Workers, Vercel, Netlify, etc.). It integrates naturally with Vite and is what powers Nuxt's server engine. See the [Nitro docs](https://nitro.build) for more details.
+
+## JavaScript API
+
+### createServer
+
+```ts
+import { createServer } from 'vite'
+
+const server = await createServer({
+  configFile: false,
+  root: import.meta.dirname,
+  server: { port: 1337 },
+})
+
+await server.listen()
+server.printUrls()
+```
+
+### build
+
+```ts
+import { build } from 'vite'
+
+await build({
+  root: './project',
+  build: { outDir: 'dist' },
+})
+```
+
+### preview
+
+```ts
+import { preview } from 'vite'
+
+const previewServer = await preview({
+  preview: { port: 8080, open: true },
+})
+previewServer.printUrls()
+```
+
+### resolveConfig
+
+```ts
+import { resolveConfig } from 'vite'
+
+const config = await resolveConfig({}, 'build')
+```
+
+### loadEnv
+
+```ts
+import { loadEnv } from 'vite'
+
+const env = loadEnv('development', process.cwd(), '')
+// Loads all env vars (empty prefix = no filtering)
+```
+
+<!--
+Source references:
+- https://vite.dev/guide/build
+- https://vite.dev/guide/api-javascript
+- https://nitro.build
+-->
diff --git a/.claude/skills/vite/references/core-config.md b/.claude/skills/vite/references/core-config.md
new file mode 100644
index 0000000..039ba52
--- /dev/null
+++ b/.claude/skills/vite/references/core-config.md
@@ -0,0 +1,162 @@
+---
+name: vite-config
+description: Vite configuration patterns using vite.config.ts
+---
+
+# Vite Configuration
+
+## Basic Setup
+
+```ts
+// vite.config.ts
+import { defineConfig } from 'vite'
+
+export default defineConfig({
+  // config options
+})
+```
+
+Vite auto-resolves `vite.config.ts` from project root. Supports ES modules syntax regardless of `package.json` type.
+
+## Conditional Config
+
+Export a function to access command and mode:
+
+```ts
+export default defineConfig(({ command, mode, isSsrBuild, isPreview }) => {
+  if (command === 'serve') {
+    return { /* dev config */ }
+  } else {
+    return { /* build config */ }
+  }
+})
+```
+
+- `command`: `'serve'` during dev, `'build'` for production
+- `mode`: `'development'` or `'production'` (or custom via `--mode`)
+
+## Async Config
+
+```ts
+export default defineConfig(async ({ command, mode }) => {
+  const data = await fetchSomething()
+  return { /* config */ }
+})
+```
+
+## Using Environment Variables in Config
+
+`.env` files are loaded **after** config resolution. Use `loadEnv` to access them in config:
+
+```ts
+import { defineConfig, loadEnv } from 'vite'
+
+export default defineConfig(({ mode }) => {
+  // Load env files from cwd, include all vars (empty prefix)
+  const env = loadEnv(mode, process.cwd(), '')
+  
+  return {
+    define: {
+      __APP_ENV__: JSON.stringify(env.APP_ENV),
+    },
+    server: {
+      port: env.APP_PORT ? Number(env.APP_PORT) : 5173,
+    },
+  }
+})
+```
+
+## Key Config Options
+
+### resolve.alias
+
+```ts
+export default defineConfig({
+  resolve: {
+    alias: {
+      '@': '/src',
+      '~': '/src',
+    },
+  },
+})
+```
+
+### define (Global Constants)
+
+```ts
+export default defineConfig({
+  define: {
+    __APP_VERSION__: JSON.stringify('1.0.0'),
+    __API_URL__: 'window.__backend_api_url',
+  },
+})
+```
+
+Values must be JSON-serializable or single identifiers. Non-strings auto-wrapped with `JSON.stringify`.
+
+### plugins
+
+```ts
+import vue from '@vitejs/plugin-vue'
+
+export default defineConfig({
+  plugins: [vue()],
+})
+```
+
+Plugins array is flattened; falsy values ignored.
+
+### server.proxy
+
+```ts
+export default defineConfig({
+  server: {
+    proxy: {
+      '/api': {
+        target: 'http://localhost:3000',
+        changeOrigin: true,
+        rewrite: (path) => path.replace(/^\/api/, ''),
+      },
+    },
+  },
+})
+```
+
+### build.target
+
+Default: Baseline Widely Available browsers. Customize:
+
+```ts
+export default defineConfig({
+  build: {
+    target: 'esnext', // or 'es2020', ['chrome90', 'firefox88']
+  },
+})
+```
+
+## TypeScript Intellisense
+
+For plain JS config files:
+
+```js
+/** @type {import('vite').UserConfig} */
+export default {
+  // ...
+}
+```
+
+Or use `satisfies`:
+
+```ts
+import type { UserConfig } from 'vite'
+
+export default {
+  // ...
+} satisfies UserConfig
+```
+
+<!--
+Source references:
+- https://vite.dev/config/
+- https://vite.dev/guide/
+-->
diff --git a/.claude/skills/vite/references/core-features.md b/.claude/skills/vite/references/core-features.md
new file mode 100644
index 0000000..1403ac9
--- /dev/null
+++ b/.claude/skills/vite/references/core-features.md
@@ -0,0 +1,205 @@
+---
+name: vite-features
+description: Vite-specific import patterns and runtime features
+---
+
+# Vite Features
+
+## Glob Import
+
+Import multiple modules matching a pattern:
+
+```ts
+const modules = import.meta.glob('./dir/*.ts')
+// { './dir/foo.ts': () => import('./dir/foo.ts'), ... }
+
+for (const path in modules) {
+  modules[path]().then((mod) => {
+    console.log(path, mod)
+  })
+}
+```
+
+### Eager Loading
+
+```ts
+const modules = import.meta.glob('./dir/*.ts', { eager: true })
+// Modules loaded immediately, no dynamic import
+```
+
+### Named Imports
+
+```ts
+const modules = import.meta.glob('./dir/*.ts', { import: 'setup' })
+// Only imports the 'setup' export from each module
+
+const defaults = import.meta.glob('./dir/*.ts', { import: 'default', eager: true })
+```
+
+### Multiple Patterns
+
+```ts
+const modules = import.meta.glob(['./dir/*.ts', './another/*.ts'])
+```
+
+### Negative Patterns
+
+```ts
+const modules = import.meta.glob(['./dir/*.ts', '!**/ignored.ts'])
+```
+
+### Custom Queries
+
+```ts
+const svgRaw = import.meta.glob('./icons/*.svg', { query: '?raw', import: 'default' })
+const svgUrls = import.meta.glob('./icons/*.svg', { query: '?url', import: 'default' })
+```
+
+## Asset Import Queries
+
+### URL Import
+
+```ts
+import imgUrl from './img.png'
+// Returns resolved URL: '/src/img.png' (dev) or '/assets/img.2d8efhg.png' (build)
+```
+
+### Explicit URL
+
+```ts
+import workletUrl from './worklet.js?url'
+```
+
+### Raw String
+
+```ts
+import shaderCode from './shader.glsl?raw'
+```
+
+### Inline/No-Inline
+
+```ts
+import inlined from './small.png?inline'    // Force base64 inline
+import notInlined from './large.png?no-inline'  // Force separate file
+```
+
+### Web Workers
+
+```ts
+import Worker from './worker.ts?worker'
+const worker = new Worker()
+
+// Or inline:
+import InlineWorker from './worker.ts?worker&inline'
+```
+
+Preferred pattern using constructor:
+
+```ts
+const worker = new Worker(new URL('./worker.ts', import.meta.url), {
+  type: 'module',
+})
+```
+
+## Environment Variables
+
+### Built-in Constants
+
+```ts
+import.meta.env.MODE      // 'development' | 'production' | custom
+import.meta.env.BASE_URL  // Base URL from config
+import.meta.env.PROD      // true in production
+import.meta.env.DEV       // true in development
+import.meta.env.SSR       // true when running in server
+```
+
+### Custom Variables
+
+Only `VITE_` prefixed vars exposed to client:
+
+```
+# .env
+VITE_API_URL=https://api.example.com
+DB_PASSWORD=secret  # NOT exposed to client
+```
+
+```ts
+console.log(import.meta.env.VITE_API_URL) // works
+console.log(import.meta.env.DB_PASSWORD)  // undefined
+```
+
+### Mode-specific Files
+
+```
+.env                # always loaded
+.env.local          # always loaded, gitignored
+.env.[mode]         # only in specified mode
+.env.[mode].local   # only in specified mode, gitignored
+```
+
+### TypeScript Support
+
+```ts
+// vite-env.d.ts
+interface ImportMetaEnv {
+  readonly VITE_API_URL: string
+}
+
+interface ImportMeta {
+  readonly env: ImportMetaEnv
+}
+```
+
+### HTML Replacement
+
+```html
+<p>Running in %MODE%</p>
+<script>window.API = "%VITE_API_URL%"</script>
+```
+
+## CSS Modules
+
+Any `.module.css` file treated as CSS module:
+
+```ts
+import styles from './component.module.css'
+element.className = styles.button
+```
+
+With camelCase conversion:
+
+```ts
+// .my-class -> myClass (if css.modules.localsConvention configured)
+import { myClass } from './component.module.css'
+```
+
+## JSON Import
+
+```ts
+import pkg from './package.json'
+import { version } from './package.json'  // Named import with tree-shaking
+```
+
+## HMR API
+
+```ts
+if (import.meta.hot) {
+  import.meta.hot.accept((newModule) => {
+    // Handle update
+  })
+  
+  import.meta.hot.dispose((data) => {
+    // Cleanup before module is replaced
+  })
+  
+  import.meta.hot.invalidate()  // Force full reload
+}
+```
+
+<!--
+Source references:
+- https://vite.dev/guide/features
+- https://vite.dev/guide/env-and-mode
+- https://vite.dev/guide/assets
+- https://vite.dev/guide/api-hmr
+-->
diff --git a/.claude/skills/vite/references/core-plugin-api.md b/.claude/skills/vite/references/core-plugin-api.md
new file mode 100644
index 0000000..c115851
--- /dev/null
+++ b/.claude/skills/vite/references/core-plugin-api.md
@@ -0,0 +1,235 @@
+---
+name: vite-plugin-api
+description: Vite plugin authoring with Vite-specific hooks
+---
+
+# Vite Plugin API
+
+Vite plugins extend Rolldown's plugin interface with Vite-specific hooks.
+
+## Basic Structure
+
+```ts
+function myPlugin(): Plugin {
+  return {
+    name: 'my-plugin',
+    // hooks...
+  }
+}
+```
+
+## Vite-Specific Hooks
+
+### config
+
+Modify config before resolution:
+
+```ts
+const plugin = () => ({
+  name: 'add-alias',
+  config: () => ({
+    resolve: {
+      alias: { foo: 'bar' },
+    },
+  }),
+})
+```
+
+### configResolved
+
+Access final resolved config:
+
+```ts
+const plugin = () => {
+  let config: ResolvedConfig
+  return {
+    name: 'read-config',
+    configResolved(resolvedConfig) {
+      config = resolvedConfig
+    },
+    transform(code, id) {
+      if (config.command === 'serve') { /* dev */ }
+    },
+  }
+}
+```
+
+### configureServer
+
+Add custom middleware to dev server:
+
+```ts
+const plugin = () => ({
+  name: 'custom-middleware',
+  configureServer(server) {
+    server.middlewares.use((req, res, next) => {
+      // handle request
+      next()
+    })
+  },
+})
+```
+
+Return function to run **after** internal middlewares:
+
+```ts
+configureServer(server) {
+  return () => {
+    server.middlewares.use((req, res, next) => {
+      // runs after Vite's middlewares
+    })
+  }
+}
+```
+
+### transformIndexHtml
+
+Transform HTML entry files:
+
+```ts
+const plugin = () => ({
+  name: 'html-transform',
+  transformIndexHtml(html) {
+    return html.replace(/<title>(.*?)<\/title>/, '<title>New Title</title>')
+  },
+})
+```
+
+Inject tags:
+
+```ts
+transformIndexHtml() {
+  return [
+    { tag: 'script', attrs: { src: '/inject.js' }, injectTo: 'body' },
+  ]
+}
+```
+
+### handleHotUpdate
+
+Custom HMR handling:
+
+```ts
+handleHotUpdate({ server, modules, timestamp }) {
+  server.ws.send({ type: 'custom', event: 'special-update', data: {} })
+  return [] // empty = skip default HMR
+}
+```
+
+## Virtual Modules
+
+Serve virtual content without files on disk:
+
+```ts
+const plugin = () => {
+  const virtualModuleId = 'virtual:my-module'
+  const resolvedId = '\0' + virtualModuleId
+
+  return {
+    name: 'virtual-module',
+    resolveId(id) {
+      if (id === virtualModuleId) return resolvedId
+    },
+    load(id) {
+      if (id === resolvedId) {
+        return `export const msg = "from virtual module"`
+      }
+    },
+  }
+}
+```
+
+Usage:
+
+```ts
+import { msg } from 'virtual:my-module'
+```
+
+Convention: prefix user-facing path with `virtual:`, prefix resolved id with `\0`.
+
+## Plugin Ordering
+
+Use `enforce` to control execution order:
+
+```ts
+{
+  name: 'pre-plugin',
+  enforce: 'pre',  // runs before core plugins
+}
+
+{
+  name: 'post-plugin',
+  enforce: 'post', // runs after build plugins
+}
+```
+
+Order: Alias → `enforce: 'pre'` → Core → User (no enforce) → Build → `enforce: 'post'` → Post-build
+
+## Conditional Application
+
+```ts
+{
+  name: 'build-only',
+  apply: 'build',  // or 'serve'
+}
+
+// Function form:
+{
+  apply(config, { command }) {
+    return command === 'build' && !config.build.ssr
+  }
+}
+```
+
+## Universal Hooks (from Rolldown)
+
+These work in both dev and build:
+
+- `resolveId(id, importer)` - Resolve import paths
+- `load(id)` - Load module content
+- `transform(code, id)` - Transform module code
+
+```ts
+transform(code, id) {
+  if (id.endsWith('.custom')) {
+    return { code: compile(code), map: null }
+  }
+}
+```
+
+## Client-Server Communication
+
+Server to client:
+
+```ts
+configureServer(server) {
+  server.ws.send('my:event', { msg: 'hello' })
+}
+```
+
+Client side:
+
+```ts
+if (import.meta.hot) {
+  import.meta.hot.on('my:event', (data) => {
+    console.log(data.msg)
+  })
+}
+```
+
+Client to server:
+
+```ts
+// Client
+import.meta.hot.send('my:from-client', { msg: 'Hey!' })
+
+// Server
+server.ws.on('my:from-client', (data, client) => {
+  client.send('my:ack', { msg: 'Got it!' })
+})
+```
+
+<!--
+Source references:
+- https://vite.dev/guide/api-plugin
+-->
diff --git a/.claude/skills/vite/references/environment-api.md b/.claude/skills/vite/references/environment-api.md
new file mode 100644
index 0000000..006ff7f
--- /dev/null
+++ b/.claude/skills/vite/references/environment-api.md
@@ -0,0 +1,108 @@
+---
+name: vite-environment-api
+description: Vite 6+ Environment API for multiple runtime environments
+---
+
+# Environment API (Vite 6+)
+
+The Environment API formalizes multiple runtime environments beyond the traditional client/SSR split.
+
+## Concept
+
+Before Vite 6: Two implicit environments (`client` and `ssr`).
+
+Vite 6+: Configure as many environments as needed (browser, node server, edge server, etc.).
+
+## Basic Configuration
+
+For SPA/MPA, nothing changes—options apply to the implicit `client` environment:
+
+```ts
+export default defineConfig({
+  build: { sourcemap: false },
+  optimizeDeps: { include: ['lib'] },
+})
+```
+
+## Multiple Environments
+
+```ts
+export default defineConfig({
+  build: { sourcemap: false },  // Inherited by all environments
+  optimizeDeps: { include: ['lib'] },  // Client only
+  environments: {
+    // SSR environment
+    server: {},
+    // Edge runtime environment
+    edge: {
+      resolve: { noExternal: true },
+    },
+  },
+})
+```
+
+Environments inherit top-level config. Some options (like `optimizeDeps`) only apply to `client` by default.
+
+## Environment Options
+
+```ts
+interface EnvironmentOptions {
+  define?: Record<string, any>
+  resolve?: EnvironmentResolveOptions
+  optimizeDeps: DepOptimizationOptions
+  consumer?: 'client' | 'server'
+  dev: DevOptions
+  build: BuildOptions
+}
+```
+
+## Custom Environment Instances
+
+Runtime providers can define custom environments:
+
+```ts
+import { customEnvironment } from 'vite-environment-provider'
+
+export default defineConfig({
+  environments: {
+    ssr: customEnvironment({
+      build: { outDir: '/dist/ssr' },
+    }),
+  },
+})
+```
+
+Example: Cloudflare's Vite plugin runs code in `workerd` runtime during development.
+
+## Backward Compatibility
+
+- `server.moduleGraph` returns mixed client/SSR view
+- `ssrLoadModule` still works
+- Existing SSR apps work unchanged
+
+## When to Use
+
+- **End users**: Usually don't need to configure—frameworks handle it
+- **Plugin authors**: Use for environment-aware transformations
+- **Framework authors**: Create custom environments for their runtime needs
+
+## Plugin Environment Access
+
+Plugins can access environment in hooks:
+
+```ts
+{
+  name: 'env-aware',
+  transform(code, id, options) {
+    if (options?.ssr) {
+      // SSR-specific transform
+    }
+  },
+}
+```
+
+<!--
+Source references:
+- https://vite.dev/guide/api-environment
+- https://vite.dev/blog/announcing-vite6
+-->
diff --git a/.claude/skills/vite/references/rolldown-migration.md b/.claude/skills/vite/references/rolldown-migration.md
new file mode 100644
index 0000000..28d6d76
--- /dev/null
+++ b/.claude/skills/vite/references/rolldown-migration.md
@@ -0,0 +1,157 @@
+---
+name: vite-rolldown
+description: Vite 8 Rolldown bundler and Oxc transformer migration
+---
+
+# Rolldown Migration (Vite 8)
+
+Vite 8 replaces esbuild+Rollup with Rolldown, a unified Rust-based bundler.
+
+## What Changed
+
+| Before (Vite 7) | After (Vite 8) |
+|-----------------|----------------|
+| esbuild (dev transform) | Oxc Transformer |
+| esbuild (dep pre-bundling) | Rolldown |
+| Rollup (production build) | Rolldown |
+| `rollupOptions` | `rolldownOptions` |
+| `esbuild` option | `oxc` option |
+
+## Performance Impact
+
+- 10-30x faster than Rollup for production builds
+- Matches esbuild's dev performance
+- Unified behavior between dev and build
+
+## Config Migration
+
+### rollupOptions → rolldownOptions
+
+```ts
+// Before (Vite 7)
+export default defineConfig({
+  build: {
+    rollupOptions: {
+      external: ['vue'],
+      output: { globals: { vue: 'Vue' } },
+    },
+  },
+})
+
+// After (Vite 8)
+export default defineConfig({
+  build: {
+    rolldownOptions: {
+      external: ['vue'],
+      output: { globals: { vue: 'Vue' } },
+    },
+  },
+})
+```
+
+### esbuild → oxc
+
+```ts
+// Before (Vite 7)
+export default defineConfig({
+  esbuild: {
+    jsxFactory: 'h',
+    jsxFragment: 'Fragment',
+  },
+})
+
+// After (Vite 8)
+export default defineConfig({
+  oxc: {
+    jsx: {
+      runtime: 'classic',
+      pragma: 'h',
+      pragmaFrag: 'Fragment',
+    },
+  },
+})
+```
+
+### JSX Configuration
+
+```ts
+export default defineConfig({
+  oxc: {
+    jsx: {
+      runtime: 'automatic',  // or 'classic'
+      importSource: 'react', // for automatic runtime
+    },
+    jsxInject: `import React from 'react'`,  // auto-inject
+  },
+})
+```
+
+### Custom Transform Targets
+
+```ts
+export default defineConfig({
+  oxc: {
+    include: ['**/*.ts', '**/*.tsx'],
+    exclude: ['node_modules/**'],
+  },
+})
+```
+
+## Plugin Compatibility
+
+Most Vite plugins work unchanged. Rolldown supports Rollup's plugin API.
+
+If a plugin only works during build:
+
+```ts
+{
+  ...rollupPlugin(),
+  enforce: 'post',
+  apply: 'build',
+}
+```
+
+## New Capabilities
+
+Rolldown unlocks features not possible before:
+
+- Full bundle mode (experimental)
+- Module-level persistent cache
+- More flexible chunk splitting
+- Module Federation support
+
+## Gradual Migration
+
+For large projects, migrate via `rolldown-vite` first:
+
+```bash
+# Step 1: Test with rolldown-vite
+pnpm add -D rolldown-vite
+
+# Replace vite import in config
+import { defineConfig } from 'rolldown-vite'
+
+# Step 2: Once stable, upgrade to Vite 8
+pnpm add -D vite@8
+```
+
+## Overriding Vite in Frameworks
+
+When framework depends on older Vite:
+
+```json
+{
+  "pnpm": {
+    "overrides": {
+      "vite": "8.0.0"
+    }
+  }
+}
+```
+
+<!--
+Source references:
+- https://vite.dev/blog/announcing-vite8-beta
+- https://vite.dev/blog/announcing-vite7
+- https://vite.dev/config/shared-options#oxc
+-->
diff --git a/.claude/skills/vitest/GENERATION.md b/.claude/skills/vitest/GENERATION.md
new file mode 100644
index 0000000..9bc7664
--- /dev/null
+++ b/.claude/skills/vitest/GENERATION.md
@@ -0,0 +1,5 @@
+# Generation Info
+
+- **Source:** `sources/vitest`
+- **Git SHA:** `4a7321e10672f00f0bb698823a381c2cc245b8f7`
+- **Generated:** 2026-01-28
diff --git a/.claude/skills/vitest/SKILL.md b/.claude/skills/vitest/SKILL.md
new file mode 100644
index 0000000..0578bdc
--- /dev/null
+++ b/.claude/skills/vitest/SKILL.md
@@ -0,0 +1,52 @@
+---
+name: vitest
+description: Vitest fast unit testing framework powered by Vite with Jest-compatible API. Use when writing tests, mocking, configuring coverage, or working with test filtering and fixtures.
+metadata:
+  author: Anthony Fu
+  version: "2026.1.28"
+  source: Generated from https://github.com/vitest-dev/vitest, scripts located at https://github.com/antfu/skills
+---
+
+Vitest is a next-generation testing framework powered by Vite. It provides a Jest-compatible API with native ESM, TypeScript, and JSX support out of the box. Vitest shares the same config, transformers, resolvers, and plugins with your Vite app.
+
+**Key Features:**
+- Vite-native: Uses Vite's transformation pipeline for fast HMR-like test updates
+- Jest-compatible: Drop-in replacement for most Jest test suites
+- Smart watch mode: Only reruns affected tests based on module graph
+- Native ESM, TypeScript, JSX support without configuration
+- Multi-threaded workers for parallel test execution
+- Built-in coverage via V8 or Istanbul
+- Snapshot testing, mocking, and spy utilities
+
+> The skill is based on Vitest 3.x, generated at 2026-01-28.
+
+## Core
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Configuration | Vitest and Vite config integration, defineConfig usage | [core-config](references/core-config.md) |
+| CLI | Command line interface, commands and options | [core-cli](references/core-cli.md) |
+| Test API | test/it function, modifiers like skip, only, concurrent | [core-test-api](references/core-test-api.md) |
+| Describe API | describe/suite for grouping tests and nested suites | [core-describe](references/core-describe.md) |
+| Expect API | Assertions with toBe, toEqual, matchers and asymmetric matchers | [core-expect](references/core-expect.md) |
+| Hooks | beforeEach, afterEach, beforeAll, afterAll, aroundEach | [core-hooks](references/core-hooks.md) |
+
+## Features
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Mocking | Mock functions, modules, timers, dates with vi utilities | [features-mocking](references/features-mocking.md) |
+| Snapshots | Snapshot testing with toMatchSnapshot and inline snapshots | [features-snapshots](references/features-snapshots.md) |
+| Coverage | Code coverage with V8 or Istanbul providers | [features-coverage](references/features-coverage.md) |
+| Test Context | Test fixtures, context.expect, test.extend for custom fixtures | [features-context](references/features-context.md) |
+| Concurrency | Concurrent tests, parallel execution, sharding | [features-concurrency](references/features-concurrency.md) |
+| Filtering | Filter tests by name, file patterns, tags | [features-filtering](references/features-filtering.md) |
+
+## Advanced
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Vi Utilities | vi helper: mock, spyOn, fake timers, hoisted, waitFor | [advanced-vi](references/advanced-vi.md) |
+| Environments | Test environments: node, jsdom, happy-dom, custom | [advanced-environments](references/advanced-environments.md) |
+| Type Testing | Type-level testing with expectTypeOf and assertType | [advanced-type-testing](references/advanced-type-testing.md) |
+| Projects | Multi-project workspaces, different configs per project | [advanced-projects](references/advanced-projects.md) |
diff --git a/.claude/skills/vitest/references/advanced-environments.md b/.claude/skills/vitest/references/advanced-environments.md
new file mode 100644
index 0000000..25a1d5b
--- /dev/null
+++ b/.claude/skills/vitest/references/advanced-environments.md
@@ -0,0 +1,264 @@
+---
+name: test-environments
+description: Configure environments like jsdom, happy-dom for browser APIs
+---
+
+# Test Environments
+
+## Available Environments
+
+- `node` (default) - Node.js environment
+- `jsdom` - Browser-like with DOM APIs
+- `happy-dom` - Faster alternative to jsdom
+- `edge-runtime` - Vercel Edge Runtime
+
+## Configuration
+
+```ts
+// vitest.config.ts
+defineConfig({
+  test: {
+    environment: 'jsdom',
+    
+    // Environment-specific options
+    environmentOptions: {
+      jsdom: {
+        url: 'http://localhost',
+      },
+    },
+  },
+})
+```
+
+## Installing Environment Packages
+
+```bash
+# jsdom
+npm i -D jsdom
+
+# happy-dom (faster, fewer APIs)
+npm i -D happy-dom
+```
+
+## Per-File Environment
+
+Use magic comment at top of file:
+
+```ts
+// @vitest-environment jsdom
+
+import { expect, test } from 'vitest'
+
+test('DOM test', () => {
+  const div = document.createElement('div')
+  expect(div).toBeInstanceOf(HTMLDivElement)
+})
+```
+
+## jsdom Environment
+
+Full browser environment simulation:
+
+```ts
+// @vitest-environment jsdom
+
+test('DOM manipulation', () => {
+  document.body.innerHTML = '<div id="app"></div>'
+  
+  const app = document.getElementById('app')
+  app.textContent = 'Hello'
+  
+  expect(app.textContent).toBe('Hello')
+})
+
+test('window APIs', () => {
+  expect(window.location.href).toBeDefined()
+  expect(localStorage).toBeDefined()
+})
+```
+
+### jsdom Options
+
+```ts
+defineConfig({
+  test: {
+    environmentOptions: {
+      jsdom: {
+        url: 'http://localhost:3000',
+        html: '<!DOCTYPE html><html><body></body></html>',
+        userAgent: 'custom-agent',
+        resources: 'usable',
+      },
+    },
+  },
+})
+```
+
+## happy-dom Environment
+
+Faster but fewer APIs:
+
+```ts
+// @vitest-environment happy-dom
+
+test('basic DOM', () => {
+  const el = document.createElement('div')
+  el.className = 'test'
+  expect(el.className).toBe('test')
+})
+```
+
+## Multiple Environments per Project
+
+Use projects for different environments:
+
+```ts
+defineConfig({
+  test: {
+    projects: [
+      {
+        test: {
+          name: 'unit',
+          include: ['tests/unit/**/*.test.ts'],
+          environment: 'node',
+        },
+      },
+      {
+        test: {
+          name: 'dom',
+          include: ['tests/dom/**/*.test.ts'],
+          environment: 'jsdom',
+        },
+      },
+    ],
+  },
+})
+```
+
+## Custom Environment
+
+Create custom environment package:
+
+```ts
+// vitest-environment-custom/index.ts
+import type { Environment } from 'vitest/runtime'
+
+export default <Environment>{
+  name: 'custom',
+  viteEnvironment: 'ssr', // or 'client'
+  
+  setup() {
+    // Setup global state
+    globalThis.myGlobal = 'value'
+    
+    return {
+      teardown() {
+        delete globalThis.myGlobal
+      },
+    }
+  },
+}
+```
+
+Use with:
+
+```ts
+defineConfig({
+  test: {
+    environment: 'custom',
+  },
+})
+```
+
+## Environment with VM
+
+For full isolation:
+
+```ts
+export default <Environment>{
+  name: 'isolated',
+  viteEnvironment: 'ssr',
+  
+  async setupVM() {
+    const vm = await import('node:vm')
+    const context = vm.createContext()
+    
+    return {
+      getVmContext() {
+        return context
+      },
+      teardown() {},
+    }
+  },
+  
+  setup() {
+    return { teardown() {} }
+  },
+}
+```
+
+## Browser Mode (Separate from Environments)
+
+For real browser testing, use Vitest Browser Mode:
+
+```ts
+defineConfig({
+  test: {
+    browser: {
+      enabled: true,
+      name: 'chromium', // or 'firefox', 'webkit'
+      provider: 'playwright',
+    },
+  },
+})
+```
+
+## CSS and Assets
+
+In jsdom/happy-dom, configure CSS handling:
+
+```ts
+defineConfig({
+  test: {
+    css: true, // Process CSS
+    
+    // Or with options
+    css: {
+      include: /\.module\.css$/,
+      modules: {
+        classNameStrategy: 'non-scoped',
+      },
+    },
+  },
+})
+```
+
+## Fixing External Dependencies
+
+If external deps fail with CSS/asset errors:
+
+```ts
+defineConfig({
+  test: {
+    server: {
+      deps: {
+        inline: ['problematic-package'],
+      },
+    },
+  },
+})
+```
+
+## Key Points
+
+- Default is `node` - no browser APIs
+- Use `jsdom` for full browser simulation
+- Use `happy-dom` for faster tests with basic DOM
+- Per-file environment via `// @vitest-environment` comment
+- Use projects for multiple environment configurations
+- Browser Mode is for real browser testing, not environment
+
+<!-- 
+Source references:
+- https://vitest.dev/guide/environment.html
+-->
diff --git a/.claude/skills/vitest/references/advanced-projects.md b/.claude/skills/vitest/references/advanced-projects.md
new file mode 100644
index 0000000..57b9a73
--- /dev/null
+++ b/.claude/skills/vitest/references/advanced-projects.md
@@ -0,0 +1,300 @@
+---
+name: projects-workspaces
+description: Multi-project configuration for monorepos and different test types
+---
+
+# Projects
+
+Run different test configurations in the same Vitest process.
+
+## Basic Projects Setup
+
+```ts
+// vitest.config.ts
+defineConfig({
+  test: {
+    projects: [
+      // Glob patterns for config files
+      'packages/*',
+      
+      // Inline config
+      {
+        test: {
+          name: 'unit',
+          include: ['tests/unit/**/*.test.ts'],
+          environment: 'node',
+        },
+      },
+      {
+        test: {
+          name: 'integration',
+          include: ['tests/integration/**/*.test.ts'],
+          environment: 'jsdom',
+        },
+      },
+    ],
+  },
+})
+```
+
+## Monorepo Pattern
+
+```ts
+defineConfig({
+  test: {
+    projects: [
+      // Each package has its own vitest.config.ts
+      'packages/core',
+      'packages/cli',
+      'packages/utils',
+    ],
+  },
+})
+```
+
+Package config:
+
+```ts
+// packages/core/vitest.config.ts
+import { defineConfig } from 'vitest/config'
+
+export default defineConfig({
+  test: {
+    name: 'core',
+    include: ['src/**/*.test.ts'],
+    environment: 'node',
+  },
+})
+```
+
+## Different Environments
+
+Run same tests in different environments:
+
+```ts
+defineConfig({
+  test: {
+    projects: [
+      {
+        test: {
+          name: 'happy-dom',
+          root: './shared-tests',
+          environment: 'happy-dom',
+          setupFiles: ['./setup.happy-dom.ts'],
+        },
+      },
+      {
+        test: {
+          name: 'node',
+          root: './shared-tests',
+          environment: 'node',
+          setupFiles: ['./setup.node.ts'],
+        },
+      },
+    ],
+  },
+})
+```
+
+## Browser + Node Projects
+
+```ts
+defineConfig({
+  test: {
+    projects: [
+      {
+        test: {
+          name: 'unit',
+          include: ['tests/unit/**/*.test.ts'],
+          environment: 'node',
+        },
+      },
+      {
+        test: {
+          name: 'browser',
+          include: ['tests/browser/**/*.test.ts'],
+          browser: {
+            enabled: true,
+            name: 'chromium',
+            provider: 'playwright',
+          },
+        },
+      },
+    ],
+  },
+})
+```
+
+## Shared Configuration
+
+```ts
+// vitest.shared.ts
+export const sharedConfig = {
+  testTimeout: 10000,
+  setupFiles: ['./tests/setup.ts'],
+}
+
+// vitest.config.ts
+import { sharedConfig } from './vitest.shared'
+
+defineConfig({
+  test: {
+    projects: [
+      {
+        test: {
+          ...sharedConfig,
+          name: 'unit',
+          include: ['tests/unit/**/*.test.ts'],
+        },
+      },
+      {
+        test: {
+          ...sharedConfig,
+          name: 'e2e',
+          include: ['tests/e2e/**/*.test.ts'],
+        },
+      },
+    ],
+  },
+})
+```
+
+## Project-Specific Dependencies
+
+Each project can have different dependencies inlined:
+
+```ts
+defineConfig({
+  test: {
+    projects: [
+      {
+        test: {
+          name: 'project-a',
+          server: {
+            deps: {
+              inline: ['package-a'],
+            },
+          },
+        },
+      },
+    ],
+  },
+})
+```
+
+## Running Specific Projects
+
+```bash
+# Run specific project
+vitest --project unit
+vitest --project integration
+
+# Multiple projects
+vitest --project unit --project e2e
+
+# Exclude project
+vitest --project.ignore browser
+```
+
+## Providing Values to Projects
+
+Share values from config to tests:
+
+```ts
+// vitest.config.ts
+defineConfig({
+  test: {
+    projects: [
+      {
+        test: {
+          name: 'staging',
+          provide: {
+            apiUrl: 'https://staging.api.com',
+            debug: true,
+          },
+        },
+      },
+      {
+        test: {
+          name: 'production',
+          provide: {
+            apiUrl: 'https://api.com',
+            debug: false,
+          },
+        },
+      },
+    ],
+  },
+})
+
+// In tests, use inject
+import { inject } from 'vitest'
+
+test('uses correct api', () => {
+  const url = inject('apiUrl')
+  expect(url).toContain('api.com')
+})
+```
+
+## With Fixtures
+
+```ts
+const test = base.extend({
+  apiUrl: ['/default', { injected: true }],
+})
+
+test('uses injected url', ({ apiUrl }) => {
+  // apiUrl comes from project's provide config
+})
+```
+
+## Project Isolation
+
+Each project runs in its own thread pool by default:
+
+```ts
+defineConfig({
+  test: {
+    projects: [
+      {
+        test: {
+          name: 'isolated',
+          isolate: true, // Full isolation
+          pool: 'forks',
+        },
+      },
+    ],
+  },
+})
+```
+
+## Global Setup per Project
+
+```ts
+defineConfig({
+  test: {
+    projects: [
+      {
+        test: {
+          name: 'with-db',
+          globalSetup: ['./tests/db-setup.ts'],
+        },
+      },
+    ],
+  },
+})
+```
+
+## Key Points
+
+- Projects run in same Vitest process
+- Each project can have different environment, config
+- Use glob patterns for monorepo packages
+- Run specific projects with `--project` flag
+- Use `provide` to inject config values into tests
+- Projects inherit from root config unless overridden
+
+<!-- 
+Source references:
+- https://vitest.dev/guide/projects.html
+-->
diff --git a/.claude/skills/vitest/references/advanced-type-testing.md b/.claude/skills/vitest/references/advanced-type-testing.md
new file mode 100644
index 0000000..f67a034
--- /dev/null
+++ b/.claude/skills/vitest/references/advanced-type-testing.md
@@ -0,0 +1,237 @@
+---
+name: type-testing
+description: Test TypeScript types with expectTypeOf and assertType
+---
+
+# Type Testing
+
+Test TypeScript types without runtime execution.
+
+## Setup
+
+Type tests use `.test-d.ts` extension:
+
+```ts
+// math.test-d.ts
+import { expectTypeOf } from 'vitest'
+import { add } from './math'
+
+test('add returns number', () => {
+  expectTypeOf(add).returns.toBeNumber()
+})
+```
+
+## Configuration
+
+```ts
+defineConfig({
+  test: {
+    typecheck: {
+      enabled: true,
+      
+      // Only type check
+      only: false,
+      
+      // Checker: 'tsc' or 'vue-tsc'
+      checker: 'tsc',
+      
+      // Include patterns
+      include: ['**/*.test-d.ts'],
+      
+      // tsconfig to use
+      tsconfig: './tsconfig.json',
+    },
+  },
+})
+```
+
+## expectTypeOf API
+
+```ts
+import { expectTypeOf } from 'vitest'
+
+// Basic type checks
+expectTypeOf<string>().toBeString()
+expectTypeOf<number>().toBeNumber()
+expectTypeOf<boolean>().toBeBoolean()
+expectTypeOf<null>().toBeNull()
+expectTypeOf<undefined>().toBeUndefined()
+expectTypeOf<void>().toBeVoid()
+expectTypeOf<never>().toBeNever()
+expectTypeOf<any>().toBeAny()
+expectTypeOf<unknown>().toBeUnknown()
+expectTypeOf<object>().toBeObject()
+expectTypeOf<Function>().toBeFunction()
+expectTypeOf<[]>().toBeArray()
+expectTypeOf<symbol>().toBeSymbol()
+```
+
+## Value Type Checking
+
+```ts
+const value = 'hello'
+expectTypeOf(value).toBeString()
+
+const obj = { name: 'test', count: 42 }
+expectTypeOf(obj).toMatchTypeOf<{ name: string }>()
+expectTypeOf(obj).toHaveProperty('name')
+```
+
+## Function Types
+
+```ts
+function greet(name: string): string {
+  return `Hello, ${name}`
+}
+
+expectTypeOf(greet).toBeFunction()
+expectTypeOf(greet).parameters.toEqualTypeOf<[string]>()
+expectTypeOf(greet).returns.toBeString()
+
+// Parameter checking
+expectTypeOf(greet).parameter(0).toBeString()
+```
+
+## Object Types
+
+```ts
+interface User {
+  id: number
+  name: string
+  email?: string
+}
+
+expectTypeOf<User>().toHaveProperty('id')
+expectTypeOf<User>().toHaveProperty('name').toBeString()
+
+// Check shape
+expectTypeOf({ id: 1, name: 'test' }).toMatchTypeOf<User>()
+```
+
+## Equality vs Matching
+
+```ts
+interface A { x: number }
+interface B { x: number; y: string }
+
+// toMatchTypeOf - subset matching
+expectTypeOf<B>().toMatchTypeOf<A>()  // B extends A
+
+// toEqualTypeOf - exact match
+expectTypeOf<A>().not.toEqualTypeOf<B>()  // Not exact match
+expectTypeOf<A>().toEqualTypeOf<{ x: number }>()  // Exact match
+```
+
+## Branded Types
+
+```ts
+type UserId = number & { __brand: 'UserId' }
+type PostId = number & { __brand: 'PostId' }
+
+expectTypeOf<UserId>().not.toEqualTypeOf<PostId>()
+expectTypeOf<UserId>().not.toEqualTypeOf<number>()
+```
+
+## Generic Types
+
+```ts
+function identity<T>(value: T): T {
+  return value
+}
+
+expectTypeOf(identity<string>).returns.toBeString()
+expectTypeOf(identity<number>).returns.toBeNumber()
+```
+
+## Nullable Types
+
+```ts
+type MaybeString = string | null | undefined
+
+expectTypeOf<MaybeString>().toBeNullable()
+expectTypeOf<string>().not.toBeNullable()
+```
+
+## assertType
+
+Assert a value matches a type (no assertion at runtime):
+
+```ts
+import { assertType } from 'vitest'
+
+function getUser(): User | null {
+  return { id: 1, name: 'test' }
+}
+
+test('returns user', () => {
+  const result = getUser()
+  
+  // @ts-expect-error - should fail type check
+  assertType<string>(result)
+  
+  // Correct type
+  assertType<User | null>(result)
+})
+```
+
+## Using @ts-expect-error
+
+Test that code produces type error:
+
+```ts
+test('rejects wrong types', () => {
+  function requireString(s: string) {}
+  
+  // @ts-expect-error - number not assignable to string
+  requireString(123)
+})
+```
+
+## Running Type Tests
+
+```bash
+# Run type tests
+vitest typecheck
+
+# Run alongside unit tests
+vitest --typecheck
+
+# Type tests only
+vitest --typecheck.only
+```
+
+## Mixed Test Files
+
+Combine runtime and type tests:
+
+```ts
+// user.test.ts
+import { describe, expect, expectTypeOf, test } from 'vitest'
+import { createUser } from './user'
+
+describe('createUser', () => {
+  test('runtime: creates user', () => {
+    const user = createUser('John')
+    expect(user.name).toBe('John')
+  })
+
+  test('types: returns User type', () => {
+    expectTypeOf(createUser).returns.toMatchTypeOf<{ name: string }>()
+  })
+})
+```
+
+## Key Points
+
+- Use `.test-d.ts` for type-only tests
+- `expectTypeOf` for type assertions
+- `toMatchTypeOf` for subset matching
+- `toEqualTypeOf` for exact type matching
+- Use `@ts-expect-error` to test type errors
+- Run with `vitest typecheck` or `--typecheck`
+
+<!-- 
+Source references:
+- https://vitest.dev/guide/testing-types.html
+- https://vitest.dev/api/expect-typeof.html
+-->
diff --git a/.claude/skills/vitest/references/advanced-vi.md b/.claude/skills/vitest/references/advanced-vi.md
new file mode 100644
index 0000000..57a4784
--- /dev/null
+++ b/.claude/skills/vitest/references/advanced-vi.md
@@ -0,0 +1,249 @@
+---
+name: vi-utilities
+description: vi helper for mocking, timers, utilities
+---
+
+# Vi Utilities
+
+The `vi` helper provides mocking and utility functions.
+
+```ts
+import { vi } from 'vitest'
+```
+
+## Mock Functions
+
+```ts
+// Create mock
+const fn = vi.fn()
+const fnWithImpl = vi.fn((x) => x * 2)
+
+// Check if mock
+vi.isMockFunction(fn) // true
+
+// Mock methods
+fn.mockReturnValue(42)
+fn.mockReturnValueOnce(1)
+fn.mockResolvedValue(data)
+fn.mockRejectedValue(error)
+fn.mockImplementation(() => 'result')
+fn.mockImplementationOnce(() => 'once')
+
+// Clear/reset
+fn.mockClear()    // Clear call history
+fn.mockReset()    // Clear history + implementation
+fn.mockRestore()  // Restore original (for spies)
+```
+
+## Spying
+
+```ts
+const obj = { method: () => 'original' }
+
+const spy = vi.spyOn(obj, 'method')
+obj.method()
+
+expect(spy).toHaveBeenCalled()
+
+// Mock implementation
+spy.mockReturnValue('mocked')
+
+// Spy on getter/setter
+vi.spyOn(obj, 'prop', 'get').mockReturnValue('value')
+```
+
+## Module Mocking
+
+```ts
+// Hoisted to top of file
+vi.mock('./module', () => ({
+  fn: vi.fn(),
+}))
+
+// Partial mock
+vi.mock('./module', async (importOriginal) => ({
+  ...(await importOriginal()),
+  specificFn: vi.fn(),
+}))
+
+// Spy mode - keep implementation
+vi.mock('./module', { spy: true })
+
+// Import actual module inside mock
+const actual = await vi.importActual('./module')
+
+// Import as mock
+const mocked = await vi.importMock('./module')
+```
+
+## Dynamic Mocking
+
+```ts
+// Not hoisted - use with dynamic imports
+vi.doMock('./config', () => ({ key: 'value' }))
+const config = await import('./config')
+
+// Unmock
+vi.doUnmock('./config')
+vi.unmock('./module') // Hoisted
+```
+
+## Reset Modules
+
+```ts
+// Clear module cache
+vi.resetModules()
+
+// Wait for dynamic imports
+await vi.dynamicImportSettled()
+```
+
+## Fake Timers
+
+```ts
+vi.useFakeTimers()
+
+setTimeout(() => console.log('done'), 1000)
+
+// Advance time
+vi.advanceTimersByTime(1000)
+vi.advanceTimersByTimeAsync(1000)  // For async callbacks
+vi.advanceTimersToNextTimer()
+vi.advanceTimersToNextFrame()      // requestAnimationFrame
+
+// Run all timers
+vi.runAllTimers()
+vi.runAllTimersAsync()
+vi.runOnlyPendingTimers()
+
+// Clear timers
+vi.clearAllTimers()
+
+// Check state
+vi.getTimerCount()
+vi.isFakeTimers()
+
+// Restore
+vi.useRealTimers()
+```
+
+## Mock Date/Time
+
+```ts
+vi.setSystemTime(new Date('2024-01-01'))
+expect(new Date().getFullYear()).toBe(2024)
+
+vi.getMockedSystemTime()  // Get mocked date
+vi.getRealSystemTime()    // Get real time (ms)
+```
+
+## Global/Env Mocking
+
+```ts
+// Stub global
+vi.stubGlobal('fetch', vi.fn())
+vi.unstubAllGlobals()
+
+// Stub environment
+vi.stubEnv('API_KEY', 'test')
+vi.stubEnv('NODE_ENV', 'test')
+vi.unstubAllEnvs()
+```
+
+## Hoisted Code
+
+Run code before imports:
+
+```ts
+const mock = vi.hoisted(() => vi.fn())
+
+vi.mock('./module', () => ({
+  fn: mock, // Can reference hoisted variable
+}))
+```
+
+## Waiting Utilities
+
+```ts
+// Wait for callback to succeed
+await vi.waitFor(async () => {
+  const el = document.querySelector('.loaded')
+  expect(el).toBeTruthy()
+}, { timeout: 5000, interval: 100 })
+
+// Wait for truthy value
+const element = await vi.waitUntil(
+  () => document.querySelector('.loaded'),
+  { timeout: 5000 }
+)
+```
+
+## Mock Object
+
+Mock all methods of an object:
+
+```ts
+const original = {
+  method: () => 'real',
+  nested: { fn: () => 'nested' },
+}
+
+const mocked = vi.mockObject(original)
+mocked.method()  // undefined (mocked)
+mocked.method.mockReturnValue('mocked')
+
+// Spy mode
+const spied = vi.mockObject(original, { spy: true })
+spied.method()  // 'real'
+expect(spied.method).toHaveBeenCalled()
+```
+
+## Test Configuration
+
+```ts
+vi.setConfig({
+  testTimeout: 10_000,
+  hookTimeout: 10_000,
+})
+
+vi.resetConfig()
+```
+
+## Global Mock Management
+
+```ts
+vi.clearAllMocks()   // Clear all mock call history
+vi.resetAllMocks()   // Reset + clear implementation
+vi.restoreAllMocks() // Restore originals (spies)
+```
+
+## vi.mocked Type Helper
+
+TypeScript helper for mocked values:
+
+```ts
+import { myFn } from './module'
+vi.mock('./module')
+
+// Type as mock
+vi.mocked(myFn).mockReturnValue('typed')
+
+// Deep mocking
+vi.mocked(myModule, { deep: true })
+
+// Partial mock typing
+vi.mocked(fn, { partial: true }).mockResolvedValue({ ok: true })
+```
+
+## Key Points
+
+- `vi.mock` is hoisted - use `vi.doMock` for dynamic mocking
+- `vi.hoisted` lets you reference variables in mock factories
+- Use `vi.spyOn` to spy on existing methods
+- Fake timers require explicit setup and teardown
+- `vi.waitFor` retries until assertion passes
+
+<!-- 
+Source references:
+- https://vitest.dev/api/vi.html
+-->
diff --git a/.claude/skills/vitest/references/core-cli.md b/.claude/skills/vitest/references/core-cli.md
new file mode 100644
index 0000000..7a05c04
--- /dev/null
+++ b/.claude/skills/vitest/references/core-cli.md
@@ -0,0 +1,166 @@
+---
+name: vitest-cli
+description: Command line interface commands and options
+---
+
+# Command Line Interface
+
+## Commands
+
+### `vitest`
+
+Start Vitest in watch mode (dev) or run mode (CI):
+
+```bash
+vitest                    # Watch mode in dev, run mode in CI
+vitest foobar             # Run tests containing "foobar" in path
+vitest basic/foo.test.ts:10  # Run specific test by file and line number
+```
+
+### `vitest run`
+
+Run tests once without watch mode:
+
+```bash
+vitest run
+vitest run --coverage
+```
+
+### `vitest watch`
+
+Explicitly start watch mode:
+
+```bash
+vitest watch
+```
+
+### `vitest related`
+
+Run tests that import specific files (useful with lint-staged):
+
+```bash
+vitest related src/index.ts src/utils.ts --run
+```
+
+### `vitest bench`
+
+Run only benchmark tests:
+
+```bash
+vitest bench
+```
+
+### `vitest list`
+
+List all matching tests without running them:
+
+```bash
+vitest list                    # List test names
+vitest list --json             # Output as JSON
+vitest list --filesOnly        # List only test files
+```
+
+### `vitest init`
+
+Initialize project setup:
+
+```bash
+vitest init browser            # Set up browser testing
+```
+
+## Common Options
+
+```bash
+# Configuration
+--config <path>           # Path to config file
+--project <name>          # Run specific project
+
+# Filtering
+--testNamePattern, -t     # Run tests matching pattern
+--changed                 # Run tests for changed files
+--changed HEAD~1          # Tests for last commit changes
+
+# Reporters
+--reporter <name>         # default, verbose, dot, json, html
+--reporter=html --outputFile=report.html
+
+# Coverage
+--coverage                # Enable coverage
+--coverage.provider v8    # Use v8 provider
+--coverage.reporter text,html
+
+# Execution
+--shard <index>/<count>   # Split tests across machines
+--bail <n>                # Stop after n failures
+--retry <n>               # Retry failed tests n times
+--sequence.shuffle        # Randomize test order
+
+# Watch mode
+--no-watch                # Disable watch mode
+--standalone              # Start without running tests
+
+# Environment
+--environment <env>       # jsdom, happy-dom, node
+--globals                 # Enable global APIs
+
+# Debugging
+--inspect                 # Enable Node inspector
+--inspect-brk             # Break on start
+
+# Output
+--silent                  # Suppress console output
+--no-color                # Disable colors
+```
+
+## Package.json Scripts
+
+```json
+{
+  "scripts": {
+    "test": "vitest",
+    "test:run": "vitest run",
+    "test:ui": "vitest --ui",
+    "coverage": "vitest run --coverage"
+  }
+}
+```
+
+## Sharding for CI
+
+Split tests across multiple machines:
+
+```bash
+# Machine 1
+vitest run --shard=1/3 --reporter=blob
+
+# Machine 2
+vitest run --shard=2/3 --reporter=blob
+
+# Machine 3
+vitest run --shard=3/3 --reporter=blob
+
+# Merge reports
+vitest --merge-reports --reporter=junit
+```
+
+## Watch Mode Keyboard Shortcuts
+
+In watch mode, press:
+- `a` - Run all tests
+- `f` - Run only failed tests
+- `u` - Update snapshots
+- `p` - Filter by filename pattern
+- `t` - Filter by test name pattern
+- `q` - Quit
+
+## Key Points
+
+- Watch mode is default in dev, run mode in CI (when `process.env.CI` is set)
+- Use `--run` flag to ensure single run (important for lint-staged)
+- Both camelCase (`--testTimeout`) and kebab-case (`--test-timeout`) work
+- Boolean options can be negated with `--no-` prefix
+
+<!-- 
+Source references:
+- https://vitest.dev/guide/cli.html
+-->
diff --git a/.claude/skills/vitest/references/core-config.md b/.claude/skills/vitest/references/core-config.md
new file mode 100644
index 0000000..76002a5
--- /dev/null
+++ b/.claude/skills/vitest/references/core-config.md
@@ -0,0 +1,174 @@
+---
+name: vitest-configuration
+description: Configure Vitest with vite.config.ts or vitest.config.ts
+---
+
+# Configuration
+
+Vitest reads configuration from `vitest.config.ts` or `vite.config.ts`. It shares the same config format as Vite.
+
+## Basic Setup
+
+```ts
+// vitest.config.ts
+import { defineConfig } from 'vitest/config'
+
+export default defineConfig({
+  test: {
+    // test options
+  },
+})
+```
+
+## Using with Existing Vite Config
+
+Add Vitest types reference and use the `test` property:
+
+```ts
+// vite.config.ts
+/// <reference types="vitest/config" />
+import { defineConfig } from 'vite'
+
+export default defineConfig({
+  test: {
+    globals: true,
+    environment: 'jsdom',
+  },
+})
+```
+
+## Merging Configs
+
+If you have separate config files, use `mergeConfig`:
+
+```ts
+// vitest.config.ts
+import { defineConfig, mergeConfig } from 'vitest/config'
+import viteConfig from './vite.config'
+
+export default mergeConfig(viteConfig, defineConfig({
+  test: {
+    environment: 'jsdom',
+  },
+}))
+```
+
+## Common Options
+
+```ts
+defineConfig({
+  test: {
+    // Enable global APIs (describe, it, expect) without imports
+    globals: true,
+    
+    // Test environment: 'node', 'jsdom', 'happy-dom'
+    environment: 'node',
+    
+    // Setup files to run before each test file
+    setupFiles: ['./tests/setup.ts'],
+    
+    // Include patterns for test files
+    include: ['**/*.{test,spec}.{js,ts,jsx,tsx}'],
+    
+    // Exclude patterns
+    exclude: ['**/node_modules/**', '**/dist/**'],
+    
+    // Test timeout in ms
+    testTimeout: 5000,
+    
+    // Hook timeout in ms
+    hookTimeout: 10000,
+    
+    // Enable watch mode by default
+    watch: true,
+    
+    // Coverage configuration
+    coverage: {
+      provider: 'v8', // or 'istanbul'
+      reporter: ['text', 'html'],
+      include: ['src/**/*.ts'],
+    },
+    
+    // Run tests in isolation (each file in separate process)
+    isolate: true,
+    
+    // Pool for running tests: 'threads', 'forks', 'vmThreads'
+    pool: 'threads',
+    
+    // Number of threads/processes
+    poolOptions: {
+      threads: {
+        maxThreads: 4,
+        minThreads: 1,
+      },
+    },
+    
+    // Automatically clear mocks between tests
+    clearMocks: true,
+    
+    // Restore mocks between tests
+    restoreMocks: true,
+    
+    // Retry failed tests
+    retry: 0,
+    
+    // Stop after first failure
+    bail: 0,
+  },
+})
+```
+
+## Conditional Configuration
+
+Use `mode` or `process.env.VITEST` for test-specific config:
+
+```ts
+export default defineConfig(({ mode }) => ({
+  plugins: mode === 'test' ? [] : [myPlugin()],
+  test: {
+    // test options
+  },
+}))
+```
+
+## Projects (Monorepos)
+
+Run different configurations in the same Vitest process:
+
+```ts
+defineConfig({
+  test: {
+    projects: [
+      'packages/*',
+      {
+        test: {
+          name: 'unit',
+          include: ['tests/unit/**/*.test.ts'],
+          environment: 'node',
+        },
+      },
+      {
+        test: {
+          name: 'integration',
+          include: ['tests/integration/**/*.test.ts'],
+          environment: 'jsdom',
+        },
+      },
+    ],
+  },
+})
+```
+
+## Key Points
+
+- Vitest uses Vite's transformation pipeline - same `resolve.alias`, plugins work
+- `vitest.config.ts` takes priority over `vite.config.ts`
+- Use `--config` flag to specify a custom config path
+- `process.env.VITEST` is set to `true` when running tests
+- Test config uses `test` property, rest is Vite config
+
+<!-- 
+Source references:
+- https://vitest.dev/guide/#configuring-vitest
+- https://vitest.dev/config/
+-->
diff --git a/.claude/skills/vitest/references/core-describe.md b/.claude/skills/vitest/references/core-describe.md
new file mode 100644
index 0000000..3f7f3fe
--- /dev/null
+++ b/.claude/skills/vitest/references/core-describe.md
@@ -0,0 +1,193 @@
+---
+name: describe-api
+description: describe/suite for grouping tests into logical blocks
+---
+
+# Describe API
+
+Group related tests into suites for organization and shared setup.
+
+## Basic Usage
+
+```ts
+import { describe, expect, test } from 'vitest'
+
+describe('Math', () => {
+  test('adds numbers', () => {
+    expect(1 + 1).toBe(2)
+  })
+
+  test('subtracts numbers', () => {
+    expect(3 - 1).toBe(2)
+  })
+})
+
+// Alias: suite
+import { suite } from 'vitest'
+suite('equivalent to describe', () => {})
+```
+
+## Nested Suites
+
+```ts
+describe('User', () => {
+  describe('when logged in', () => {
+    test('shows dashboard', () => {})
+    test('can update profile', () => {})
+  })
+
+  describe('when logged out', () => {
+    test('shows login page', () => {})
+  })
+})
+```
+
+## Suite Options
+
+```ts
+// All tests inherit options
+describe('slow tests', { timeout: 30_000 }, () => {
+  test('test 1', () => {}) // 30s timeout
+  test('test 2', () => {}) // 30s timeout
+})
+```
+
+## Suite Modifiers
+
+### Skip Suites
+
+```ts
+describe.skip('skipped suite', () => {
+  test('wont run', () => {})
+})
+
+// Conditional
+describe.skipIf(process.env.CI)('not in CI', () => {})
+describe.runIf(!process.env.CI)('only local', () => {})
+```
+
+### Focus Suites
+
+```ts
+describe.only('only this suite runs', () => {
+  test('runs', () => {})
+})
+```
+
+### Todo Suites
+
+```ts
+describe.todo('implement later')
+```
+
+### Concurrent Suites
+
+```ts
+// All tests run in parallel
+describe.concurrent('parallel tests', () => {
+  test('test 1', async ({ expect }) => {})
+  test('test 2', async ({ expect }) => {})
+})
+```
+
+### Sequential in Concurrent
+
+```ts
+describe.concurrent('parallel', () => {
+  test('concurrent 1', async () => {})
+  
+  describe.sequential('must be sequential', () => {
+    test('step 1', async () => {})
+    test('step 2', async () => {})
+  })
+})
+```
+
+### Shuffle Tests
+
+```ts
+describe.shuffle('random order', () => {
+  test('test 1', () => {})
+  test('test 2', () => {})
+  test('test 3', () => {})
+})
+
+// Or with option
+describe('random', { shuffle: true }, () => {})
+```
+
+## Parameterized Suites
+
+### describe.each
+
+```ts
+describe.each([
+  { name: 'Chrome', version: 100 },
+  { name: 'Firefox', version: 90 },
+])('$name browser', ({ name, version }) => {
+  test('has version', () => {
+    expect(version).toBeGreaterThan(0)
+  })
+})
+```
+
+### describe.for
+
+```ts
+describe.for([
+  ['Chrome', 100],
+  ['Firefox', 90],
+])('%s browser', ([name, version]) => {
+  test('has version', () => {
+    expect(version).toBeGreaterThan(0)
+  })
+})
+```
+
+## Hooks in Suites
+
+```ts
+describe('Database', () => {
+  let db
+
+  beforeAll(async () => {
+    db = await createDb()
+  })
+
+  afterAll(async () => {
+    await db.close()
+  })
+
+  beforeEach(async () => {
+    await db.clear()
+  })
+
+  test('insert works', async () => {
+    await db.insert({ name: 'test' })
+    expect(await db.count()).toBe(1)
+  })
+})
+```
+
+## Modifier Combinations
+
+All modifiers can be chained:
+
+```ts
+describe.skip.concurrent('skipped concurrent', () => {})
+describe.only.shuffle('only and shuffled', () => {})
+describe.concurrent.skip('equivalent', () => {})
+```
+
+## Key Points
+
+- Top-level tests belong to an implicit file suite
+- Nested suites inherit parent's options (timeout, retry, etc.)
+- Hooks are scoped to their suite and nested suites
+- Use `describe.concurrent` with context's `expect` for snapshots
+- Shuffle order depends on `sequence.seed` config
+
+<!-- 
+Source references:
+- https://vitest.dev/api/describe.html
+-->
diff --git a/.claude/skills/vitest/references/core-expect.md b/.claude/skills/vitest/references/core-expect.md
new file mode 100644
index 0000000..91de00a
--- /dev/null
+++ b/.claude/skills/vitest/references/core-expect.md
@@ -0,0 +1,219 @@
+---
+name: expect-api
+description: Assertions with matchers, asymmetric matchers, and custom matchers
+---
+
+# Expect API
+
+Vitest uses Chai assertions with Jest-compatible API.
+
+## Basic Assertions
+
+```ts
+import { expect, test } from 'vitest'
+
+test('assertions', () => {
+  // Equality
+  expect(1 + 1).toBe(2)              // Strict equality (===)
+  expect({ a: 1 }).toEqual({ a: 1 }) // Deep equality
+
+  // Truthiness
+  expect(true).toBeTruthy()
+  expect(false).toBeFalsy()
+  expect(null).toBeNull()
+  expect(undefined).toBeUndefined()
+  expect('value').toBeDefined()
+
+  // Numbers
+  expect(10).toBeGreaterThan(5)
+  expect(10).toBeGreaterThanOrEqual(10)
+  expect(5).toBeLessThan(10)
+  expect(0.1 + 0.2).toBeCloseTo(0.3, 5)
+
+  // Strings
+  expect('hello world').toMatch(/world/)
+  expect('hello').toContain('ell')
+
+  // Arrays
+  expect([1, 2, 3]).toContain(2)
+  expect([{ a: 1 }]).toContainEqual({ a: 1 })
+  expect([1, 2, 3]).toHaveLength(3)
+
+  // Objects
+  expect({ a: 1, b: 2 }).toHaveProperty('a')
+  expect({ a: 1, b: 2 }).toHaveProperty('a', 1)
+  expect({ a: { b: 1 } }).toHaveProperty('a.b', 1)
+  expect({ a: 1 }).toMatchObject({ a: 1 })
+
+  // Types
+  expect('string').toBeTypeOf('string')
+  expect(new Date()).toBeInstanceOf(Date)
+})
+```
+
+## Negation
+
+```ts
+expect(1).not.toBe(2)
+expect({ a: 1 }).not.toEqual({ a: 2 })
+```
+
+## Error Assertions
+
+```ts
+// Sync errors - wrap in function
+expect(() => throwError()).toThrow()
+expect(() => throwError()).toThrow('message')
+expect(() => throwError()).toThrow(/pattern/)
+expect(() => throwError()).toThrow(CustomError)
+
+// Async errors - use rejects
+await expect(asyncThrow()).rejects.toThrow('error')
+```
+
+## Promise Assertions
+
+```ts
+// Resolves
+await expect(Promise.resolve(1)).resolves.toBe(1)
+await expect(fetchData()).resolves.toEqual({ data: true })
+
+// Rejects
+await expect(Promise.reject('error')).rejects.toBe('error')
+await expect(failingFetch()).rejects.toThrow()
+```
+
+## Spy/Mock Assertions
+
+```ts
+const fn = vi.fn()
+fn('arg1', 'arg2')
+fn('arg3')
+
+expect(fn).toHaveBeenCalled()
+expect(fn).toHaveBeenCalledTimes(2)
+expect(fn).toHaveBeenCalledWith('arg1', 'arg2')
+expect(fn).toHaveBeenLastCalledWith('arg3')
+expect(fn).toHaveBeenNthCalledWith(1, 'arg1', 'arg2')
+
+expect(fn).toHaveReturned()
+expect(fn).toHaveReturnedWith(value)
+```
+
+## Asymmetric Matchers
+
+Use inside `toEqual`, `toHaveBeenCalledWith`, etc:
+
+```ts
+expect({ id: 1, name: 'test' }).toEqual({
+  id: expect.any(Number),
+  name: expect.any(String),
+})
+
+expect({ a: 1, b: 2, c: 3 }).toEqual(
+  expect.objectContaining({ a: 1 })
+)
+
+expect([1, 2, 3, 4]).toEqual(
+  expect.arrayContaining([1, 3])
+)
+
+expect('hello world').toEqual(
+  expect.stringContaining('world')
+)
+
+expect('hello world').toEqual(
+  expect.stringMatching(/world$/)
+)
+
+expect({ value: null }).toEqual({
+  value: expect.anything() // Matches anything except null/undefined
+})
+
+// Negate with expect.not
+expect([1, 2]).toEqual(
+  expect.not.arrayContaining([3])
+)
+```
+
+## Soft Assertions
+
+Continue test after failure:
+
+```ts
+expect.soft(1).toBe(2) // Marks test failed but continues
+expect.soft(2).toBe(3) // Also runs
+// All failures reported at end
+```
+
+## Poll Assertions
+
+Retry until passes:
+
+```ts
+await expect.poll(() => fetchStatus()).toBe('ready')
+
+await expect.poll(
+  () => document.querySelector('.element'),
+  { interval: 100, timeout: 5000 }
+).toBeTruthy()
+```
+
+## Assertion Count
+
+```ts
+test('async assertions', async () => {
+  expect.assertions(2) // Exactly 2 assertions must run
+  
+  await doAsync((data) => {
+    expect(data).toBeDefined()
+    expect(data.id).toBe(1)
+  })
+})
+
+test('at least one', () => {
+  expect.hasAssertions() // At least 1 assertion must run
+})
+```
+
+## Extending Matchers
+
+```ts
+expect.extend({
+  toBeWithinRange(received, floor, ceiling) {
+    const pass = received >= floor && received <= ceiling
+    return {
+      pass,
+      message: () => 
+        `expected ${received} to be within range ${floor} - ${ceiling}`,
+    }
+  },
+})
+
+test('custom matcher', () => {
+  expect(100).toBeWithinRange(90, 110)
+})
+```
+
+## Snapshot Assertions
+
+```ts
+expect(data).toMatchSnapshot()
+expect(data).toMatchInlineSnapshot(`{ "id": 1 }`)
+await expect(result).toMatchFileSnapshot('./expected.json')
+
+expect(() => throw new Error('fail')).toThrowErrorMatchingSnapshot()
+```
+
+## Key Points
+
+- Use `toBe` for primitives, `toEqual` for objects/arrays
+- `toStrictEqual` checks undefined properties and array sparseness
+- Always `await` async assertions (`resolves`, `rejects`, `poll`)
+- Use context's `expect` in concurrent tests for correct tracking
+- `toThrow` requires wrapping sync code in a function
+
+<!-- 
+Source references:
+- https://vitest.dev/api/expect.html
+-->
diff --git a/.claude/skills/vitest/references/core-hooks.md b/.claude/skills/vitest/references/core-hooks.md
new file mode 100644
index 0000000..d0c2bfa
--- /dev/null
+++ b/.claude/skills/vitest/references/core-hooks.md
@@ -0,0 +1,244 @@
+---
+name: lifecycle-hooks
+description: beforeEach, afterEach, beforeAll, afterAll, and around hooks
+---
+
+# Lifecycle Hooks
+
+## Basic Hooks
+
+```ts
+import { afterAll, afterEach, beforeAll, beforeEach, test } from 'vitest'
+
+beforeAll(async () => {
+  // Runs once before all tests in file/suite
+  await setupDatabase()
+})
+
+afterAll(async () => {
+  // Runs once after all tests in file/suite
+  await teardownDatabase()
+})
+
+beforeEach(async () => {
+  // Runs before each test
+  await clearTestData()
+})
+
+afterEach(async () => {
+  // Runs after each test
+  await cleanupMocks()
+})
+```
+
+## Cleanup Return Pattern
+
+Return cleanup function from `before*` hooks:
+
+```ts
+beforeAll(async () => {
+  const server = await startServer()
+  
+  // Returned function runs as afterAll
+  return async () => {
+    await server.close()
+  }
+})
+
+beforeEach(async () => {
+  const connection = await connect()
+  
+  // Runs as afterEach
+  return () => connection.close()
+})
+```
+
+## Scoped Hooks
+
+Hooks apply to current suite and nested suites:
+
+```ts
+describe('outer', () => {
+  beforeEach(() => console.log('outer before'))
+  
+  test('test 1', () => {}) // outer before → test
+  
+  describe('inner', () => {
+    beforeEach(() => console.log('inner before'))
+    
+    test('test 2', () => {}) // outer before → inner before → test
+  })
+})
+```
+
+## Hook Timeout
+
+```ts
+beforeAll(async () => {
+  await slowSetup()
+}, 30_000) // 30 second timeout
+```
+
+## Around Hooks
+
+Wrap tests with setup/teardown context:
+
+```ts
+import { aroundEach, test } from 'vitest'
+
+// Wrap each test in database transaction
+aroundEach(async (runTest) => {
+  await db.beginTransaction()
+  await runTest() // Must be called!
+  await db.rollback()
+})
+
+test('insert user', async () => {
+  await db.insert({ name: 'Alice' })
+  // Automatically rolled back after test
+})
+```
+
+### aroundAll
+
+Wrap entire suite:
+
+```ts
+import { aroundAll, test } from 'vitest'
+
+aroundAll(async (runSuite) => {
+  console.log('before all tests')
+  await runSuite() // Must be called!
+  console.log('after all tests')
+})
+```
+
+### Multiple Around Hooks
+
+Nested like onion layers:
+
+```ts
+aroundEach(async (runTest) => {
+  console.log('outer before')
+  await runTest()
+  console.log('outer after')
+})
+
+aroundEach(async (runTest) => {
+  console.log('inner before')
+  await runTest()
+  console.log('inner after')
+})
+
+// Order: outer before → inner before → test → inner after → outer after
+```
+
+## Test Hooks
+
+Inside test body:
+
+```ts
+import { onTestFailed, onTestFinished, test } from 'vitest'
+
+test('with cleanup', () => {
+  const db = connect()
+  
+  // Runs after test finishes (pass or fail)
+  onTestFinished(() => db.close())
+  
+  // Only runs if test fails
+  onTestFailed(({ task }) => {
+    console.log('Failed:', task.result?.errors)
+  })
+  
+  db.query('SELECT * FROM users')
+})
+```
+
+### Reusable Cleanup Pattern
+
+```ts
+function useTestDb() {
+  const db = connect()
+  onTestFinished(() => db.close())
+  return db
+}
+
+test('query users', () => {
+  const db = useTestDb()
+  expect(db.query('SELECT * FROM users')).toBeDefined()
+})
+
+test('query orders', () => {
+  const db = useTestDb() // Fresh connection, auto-closed
+  expect(db.query('SELECT * FROM orders')).toBeDefined()
+})
+```
+
+## Concurrent Test Hooks
+
+For concurrent tests, use context's hooks:
+
+```ts
+test.concurrent('concurrent', ({ onTestFinished }) => {
+  const resource = allocate()
+  onTestFinished(() => resource.release())
+})
+```
+
+## Extended Test Hooks
+
+With `test.extend`, hooks are type-aware:
+
+```ts
+const test = base.extend<{ db: Database }>({
+  db: async ({}, use) => {
+    const db = await createDb()
+    await use(db)
+    await db.close()
+  },
+})
+
+// These hooks know about `db` fixture
+test.beforeEach(({ db }) => {
+  db.seed()
+})
+
+test.afterEach(({ db }) => {
+  db.clear()
+})
+```
+
+## Hook Execution Order
+
+Default order (stack):
+1. `beforeAll` (in order)
+2. `beforeEach` (in order)
+3. Test
+4. `afterEach` (reverse order)
+5. `afterAll` (reverse order)
+
+Configure with `sequence.hooks`:
+
+```ts
+defineConfig({
+  test: {
+    sequence: {
+      hooks: 'list', // 'stack' (default), 'list', 'parallel'
+    },
+  },
+})
+```
+
+## Key Points
+
+- Hooks are not called during type checking
+- Return cleanup function from `before*` to avoid `after*` duplication
+- `aroundEach`/`aroundAll` must call `runTest()`/`runSuite()`
+- `onTestFinished` always runs, even if test fails
+- Use context hooks for concurrent tests
+
+<!-- 
+Source references:
+- https://vitest.dev/api/hooks.html
+-->
diff --git a/.claude/skills/vitest/references/core-test-api.md b/.claude/skills/vitest/references/core-test-api.md
new file mode 100644
index 0000000..1f3c932
--- /dev/null
+++ b/.claude/skills/vitest/references/core-test-api.md
@@ -0,0 +1,233 @@
+---
+name: test-api
+description: test/it function for defining tests with modifiers
+---
+
+# Test API
+
+## Basic Test
+
+```ts
+import { expect, test } from 'vitest'
+
+test('adds numbers', () => {
+  expect(1 + 1).toBe(2)
+})
+
+// Alias: it
+import { it } from 'vitest'
+
+it('works the same', () => {
+  expect(true).toBe(true)
+})
+```
+
+## Async Tests
+
+```ts
+test('async test', async () => {
+  const result = await fetchData()
+  expect(result).toBeDefined()
+})
+
+// Promises are automatically awaited
+test('returns promise', () => {
+  return fetchData().then(result => {
+    expect(result).toBeDefined()
+  })
+})
+```
+
+## Test Options
+
+```ts
+// Timeout (default: 5000ms)
+test('slow test', async () => {
+  // ...
+}, 10_000)
+
+// Or with options object
+test('with options', { timeout: 10_000, retry: 2 }, async () => {
+  // ...
+})
+```
+
+## Test Modifiers
+
+### Skip Tests
+
+```ts
+test.skip('skipped test', () => {
+  // Won't run
+})
+
+// Conditional skip
+test.skipIf(process.env.CI)('not in CI', () => {})
+test.runIf(process.env.CI)('only in CI', () => {})
+
+// Dynamic skip via context
+test('dynamic skip', ({ skip }) => {
+  skip(someCondition, 'reason')
+  // ...
+})
+```
+
+### Focus Tests
+
+```ts
+test.only('only this runs', () => {
+  // Other tests in file are skipped
+})
+```
+
+### Todo Tests
+
+```ts
+test.todo('implement later')
+
+test.todo('with body', () => {
+  // Not run, shows in report
+})
+```
+
+### Failing Tests
+
+```ts
+test.fails('expected to fail', () => {
+  expect(1).toBe(2) // Test passes because assertion fails
+})
+```
+
+### Concurrent Tests
+
+```ts
+// Run tests in parallel
+test.concurrent('test 1', async ({ expect }) => {
+  // Use context.expect for concurrent tests
+  expect(await fetch1()).toBe('result')
+})
+
+test.concurrent('test 2', async ({ expect }) => {
+  expect(await fetch2()).toBe('result')
+})
+```
+
+### Sequential Tests
+
+```ts
+// Force sequential in concurrent context
+test.sequential('must run alone', async () => {})
+```
+
+## Parameterized Tests
+
+### test.each
+
+```ts
+test.each([
+  [1, 1, 2],
+  [1, 2, 3],
+  [2, 1, 3],
+])('add(%i, %i) = %i', (a, b, expected) => {
+  expect(a + b).toBe(expected)
+})
+
+// With objects
+test.each([
+  { a: 1, b: 1, expected: 2 },
+  { a: 1, b: 2, expected: 3 },
+])('add($a, $b) = $expected', ({ a, b, expected }) => {
+  expect(a + b).toBe(expected)
+})
+
+// Template literal
+test.each`
+  a    | b    | expected
+  ${1} | ${1} | ${2}
+  ${1} | ${2} | ${3}
+`('add($a, $b) = $expected', ({ a, b, expected }) => {
+  expect(a + b).toBe(expected)
+})
+```
+
+### test.for
+
+Preferred over `.each` - doesn't spread arrays:
+
+```ts
+test.for([
+  [1, 1, 2],
+  [1, 2, 3],
+])('add(%i, %i) = %i', ([a, b, expected], { expect }) => {
+  // Second arg is TestContext
+  expect(a + b).toBe(expected)
+})
+```
+
+## Test Context
+
+First argument provides context utilities:
+
+```ts
+test('with context', ({ expect, skip, task }) => {
+  console.log(task.name)   // Test name
+  skip(someCondition)      // Skip dynamically
+  expect(1).toBe(1)        // Context-bound expect
+})
+```
+
+## Custom Test with Fixtures
+
+```ts
+import { test as base } from 'vitest'
+
+const test = base.extend({
+  db: async ({}, use) => {
+    const db = await createDb()
+    await use(db)
+    await db.close()
+  },
+})
+
+test('query', async ({ db }) => {
+  const users = await db.query('SELECT * FROM users')
+  expect(users).toBeDefined()
+})
+```
+
+## Retry Configuration
+
+```ts
+test('flaky test', { retry: 3 }, async () => {
+  // Retries up to 3 times on failure
+})
+
+// Advanced retry options
+test('with delay', {
+  retry: {
+    count: 3,
+    delay: 1000,
+    condition: /timeout/i, // Only retry on timeout errors
+  },
+}, async () => {})
+```
+
+## Tags
+
+```ts
+test('database test', { tags: ['db', 'slow'] }, async () => {})
+
+// Run with: vitest --tags db
+```
+
+## Key Points
+
+- Tests with no body are marked as `todo`
+- `test.only` throws in CI unless `allowOnly: true`
+- Use context's `expect` for concurrent tests and snapshots
+- Function name is used as test name if passed as first arg
+
+<!-- 
+Source references:
+- https://vitest.dev/api/test.html
+-->
diff --git a/.claude/skills/vitest/references/features-concurrency.md b/.claude/skills/vitest/references/features-concurrency.md
new file mode 100644
index 0000000..412f60d
--- /dev/null
+++ b/.claude/skills/vitest/references/features-concurrency.md
@@ -0,0 +1,250 @@
+---
+name: concurrency-parallelism
+description: Concurrent tests, parallel execution, and sharding
+---
+
+# Concurrency & Parallelism
+
+## File Parallelism
+
+By default, Vitest runs test files in parallel across workers:
+
+```ts
+defineConfig({
+  test: {
+    // Run files in parallel (default: true)
+    fileParallelism: true,
+    
+    // Number of worker threads
+    maxWorkers: 4,
+    minWorkers: 1,
+    
+    // Pool type: 'threads', 'forks', 'vmThreads'
+    pool: 'threads',
+  },
+})
+```
+
+## Concurrent Tests
+
+Run tests within a file in parallel:
+
+```ts
+// Individual concurrent tests
+test.concurrent('test 1', async ({ expect }) => {
+  expect(await fetch1()).toBe('result')
+})
+
+test.concurrent('test 2', async ({ expect }) => {
+  expect(await fetch2()).toBe('result')
+})
+
+// All tests in suite concurrent
+describe.concurrent('parallel suite', () => {
+  test('test 1', async ({ expect }) => {})
+  test('test 2', async ({ expect }) => {})
+})
+```
+
+**Important:** Use `{ expect }` from context for concurrent tests.
+
+## Sequential in Concurrent Context
+
+Force sequential execution:
+
+```ts
+describe.concurrent('mostly parallel', () => {
+  test('parallel 1', async () => {})
+  test('parallel 2', async () => {})
+  
+  test.sequential('must run alone 1', async () => {})
+  test.sequential('must run alone 2', async () => {})
+})
+
+// Or entire suite
+describe.sequential('sequential suite', () => {
+  test('first', () => {})
+  test('second', () => {})
+})
+```
+
+## Max Concurrency
+
+Limit concurrent tests:
+
+```ts
+defineConfig({
+  test: {
+    maxConcurrency: 5, // Max concurrent tests per file
+  },
+})
+```
+
+## Isolation
+
+Each file runs in isolated environment by default:
+
+```ts
+defineConfig({
+  test: {
+    // Disable isolation for faster runs (less safe)
+    isolate: false,
+  },
+})
+```
+
+## Sharding
+
+Split tests across machines:
+
+```bash
+# Machine 1
+vitest run --shard=1/3
+
+# Machine 2
+vitest run --shard=2/3
+
+# Machine 3
+vitest run --shard=3/3
+```
+
+### CI Example (GitHub Actions)
+
+```yaml
+jobs:
+  test:
+    strategy:
+      matrix:
+        shard: [1, 2, 3]
+    steps:
+      - run: vitest run --shard=${{ matrix.shard }}/3 --reporter=blob
+      
+  merge:
+    needs: test
+    steps:
+      - run: vitest --merge-reports --reporter=junit
+```
+
+### Merge Reports
+
+```bash
+# Each shard outputs blob
+vitest run --shard=1/3 --reporter=blob --coverage
+vitest run --shard=2/3 --reporter=blob --coverage
+
+# Merge all blobs
+vitest --merge-reports --reporter=json --coverage
+```
+
+## Test Sequence
+
+Control test order:
+
+```ts
+defineConfig({
+  test: {
+    sequence: {
+      // Run tests in random order
+      shuffle: true,
+      
+      // Seed for reproducible shuffle
+      seed: 12345,
+      
+      // Hook execution order
+      hooks: 'stack', // 'stack', 'list', 'parallel'
+      
+      // All tests concurrent by default
+      concurrent: true,
+    },
+  },
+})
+```
+
+## Shuffle Tests
+
+Randomize to catch hidden dependencies:
+
+```ts
+// Via CLI
+vitest --sequence.shuffle
+
+// Per suite
+describe.shuffle('random order', () => {
+  test('test 1', () => {})
+  test('test 2', () => {})
+  test('test 3', () => {})
+})
+```
+
+## Pool Options
+
+### Threads (Default)
+
+```ts
+defineConfig({
+  test: {
+    pool: 'threads',
+    poolOptions: {
+      threads: {
+        maxThreads: 8,
+        minThreads: 2,
+        isolate: true,
+      },
+    },
+  },
+})
+```
+
+### Forks
+
+Better isolation, slower:
+
+```ts
+defineConfig({
+  test: {
+    pool: 'forks',
+    poolOptions: {
+      forks: {
+        maxForks: 4,
+        isolate: true,
+      },
+    },
+  },
+})
+```
+
+### VM Threads
+
+Full VM isolation per file:
+
+```ts
+defineConfig({
+  test: {
+    pool: 'vmThreads',
+  },
+})
+```
+
+## Bail on Failure
+
+Stop after first failure:
+
+```bash
+vitest --bail 1    # Stop after 1 failure
+vitest --bail      # Stop on first failure (same as --bail 1)
+```
+
+## Key Points
+
+- Files run in parallel by default
+- Use `.concurrent` for parallel tests within file
+- Always use context's `expect` in concurrent tests
+- Sharding splits tests across CI machines
+- Use `--merge-reports` to combine sharded results
+- Shuffle tests to find hidden dependencies
+
+<!-- 
+Source references:
+- https://vitest.dev/guide/features.html#running-tests-concurrently
+- https://vitest.dev/guide/improving-performance.html
+-->
diff --git a/.claude/skills/vitest/references/features-context.md b/.claude/skills/vitest/references/features-context.md
new file mode 100644
index 0000000..a9db0a1
--- /dev/null
+++ b/.claude/skills/vitest/references/features-context.md
@@ -0,0 +1,238 @@
+---
+name: test-context-fixtures
+description: Test context, custom fixtures with test.extend
+---
+
+# Test Context & Fixtures
+
+## Built-in Context
+
+Every test receives context as first argument:
+
+```ts
+test('context', ({ task, expect, skip }) => {
+  console.log(task.name)  // Test name
+  expect(1).toBe(1)       // Context-bound expect
+  skip()                  // Skip test dynamically
+})
+```
+
+### Context Properties
+
+- `task` - Test metadata (name, file, etc.)
+- `expect` - Expect bound to this test (important for concurrent tests)
+- `skip(condition?, message?)` - Skip the test
+- `onTestFinished(fn)` - Cleanup after test
+- `onTestFailed(fn)` - Run on failure only
+
+## Custom Fixtures with test.extend
+
+Create reusable test utilities:
+
+```ts
+import { test as base } from 'vitest'
+
+// Define fixture types
+interface Fixtures {
+  db: Database
+  user: User
+}
+
+// Create extended test
+export const test = base.extend<Fixtures>({
+  // Fixture with setup/teardown
+  db: async ({}, use) => {
+    const db = await createDatabase()
+    await use(db)           // Provide to test
+    await db.close()        // Cleanup
+  },
+  
+  // Fixture depending on another fixture
+  user: async ({ db }, use) => {
+    const user = await db.createUser({ name: 'Test' })
+    await use(user)
+    await db.deleteUser(user.id)
+  },
+})
+```
+
+Using fixtures:
+
+```ts
+test('query user', async ({ db, user }) => {
+  const found = await db.findUser(user.id)
+  expect(found).toEqual(user)
+})
+```
+
+## Fixture Initialization
+
+Fixtures only initialize when accessed:
+
+```ts
+const test = base.extend({
+  expensive: async ({}, use) => {
+    console.log('initializing')  // Only runs if test uses it
+    await use('value')
+  },
+})
+
+test('no fixture', () => {})           // expensive not called
+test('uses fixture', ({ expensive }) => {}) // expensive called
+```
+
+## Auto Fixtures
+
+Run fixture for every test:
+
+```ts
+const test = base.extend({
+  setup: [
+    async ({}, use) => {
+      await globalSetup()
+      await use()
+      await globalTeardown()
+    },
+    { auto: true }  // Always run
+  ],
+})
+```
+
+## Scoped Fixtures
+
+### File Scope
+
+Initialize once per file:
+
+```ts
+const test = base.extend({
+  connection: [
+    async ({}, use) => {
+      const conn = await connect()
+      await use(conn)
+      await conn.close()
+    },
+    { scope: 'file' }
+  ],
+})
+```
+
+### Worker Scope
+
+Initialize once per worker:
+
+```ts
+const test = base.extend({
+  sharedResource: [
+    async ({}, use) => {
+      await use(globalResource)
+    },
+    { scope: 'worker' }
+  ],
+})
+```
+
+## Injected Fixtures (from Config)
+
+Override fixtures per project:
+
+```ts
+// test file
+const test = base.extend({
+  apiUrl: ['/default', { injected: true }],
+})
+
+// vitest.config.ts
+defineConfig({
+  test: {
+    projects: [
+      {
+        test: {
+          name: 'prod',
+          provide: { apiUrl: 'https://api.prod.com' },
+        },
+      },
+    ],
+  },
+})
+```
+
+## Scoped Values per Suite
+
+Override fixture for specific suite:
+
+```ts
+const test = base.extend({
+  environment: 'development',
+})
+
+describe('production tests', () => {
+  test.scoped({ environment: 'production' })
+  
+  test('uses production', ({ environment }) => {
+    expect(environment).toBe('production')
+  })
+})
+
+test('uses default', ({ environment }) => {
+  expect(environment).toBe('development')
+})
+```
+
+## Extended Test Hooks
+
+Type-aware hooks with fixtures:
+
+```ts
+const test = base.extend<{ db: Database }>({
+  db: async ({}, use) => {
+    const db = await createDb()
+    await use(db)
+    await db.close()
+  },
+})
+
+// Hooks know about fixtures
+test.beforeEach(({ db }) => {
+  db.seed()
+})
+
+test.afterEach(({ db }) => {
+  db.clear()
+})
+```
+
+## Composing Fixtures
+
+Extend from another extended test:
+
+```ts
+// base-test.ts
+export const test = base.extend<{ db: Database }>({
+  db: async ({}, use) => { /* ... */ },
+})
+
+// admin-test.ts
+import { test as dbTest } from './base-test'
+
+export const test = dbTest.extend<{ admin: User }>({
+  admin: async ({ db }, use) => {
+    const admin = await db.createAdmin()
+    await use(admin)
+  },
+})
+```
+
+## Key Points
+
+- Use `{ }` destructuring to access fixtures
+- Fixtures are lazy - only initialize when accessed
+- Return cleanup function from fixtures
+- Use `{ auto: true }` for setup fixtures
+- Use `{ scope: 'file' }` for expensive shared resources
+- Fixtures compose - extend from extended tests
+
+<!-- 
+Source references:
+- https://vitest.dev/guide/test-context.html
+-->
diff --git a/.claude/skills/vitest/references/features-coverage.md b/.claude/skills/vitest/references/features-coverage.md
new file mode 100644
index 0000000..aaf44cf
--- /dev/null
+++ b/.claude/skills/vitest/references/features-coverage.md
@@ -0,0 +1,207 @@
+---
+name: code-coverage
+description: Code coverage with V8 or Istanbul providers
+---
+
+# Code Coverage
+
+## Setup
+
+```bash
+# Run tests with coverage
+vitest run --coverage
+```
+
+## Configuration
+
+```ts
+// vitest.config.ts
+defineConfig({
+  test: {
+    coverage: {
+      // Provider: 'v8' (default, faster) or 'istanbul' (more compatible)
+      provider: 'v8',
+      
+      // Enable coverage
+      enabled: true,
+      
+      // Reporters
+      reporter: ['text', 'json', 'html'],
+      
+      // Files to include
+      include: ['src/**/*.{ts,tsx}'],
+      
+      // Files to exclude
+      exclude: [
+        'node_modules/',
+        'tests/',
+        '**/*.d.ts',
+        '**/*.test.ts',
+      ],
+      
+      // Report uncovered files
+      all: true,
+      
+      // Thresholds
+      thresholds: {
+        lines: 80,
+        functions: 80,
+        branches: 80,
+        statements: 80,
+      },
+    },
+  },
+})
+```
+
+## Providers
+
+### V8 (Default)
+
+```bash
+npm i -D @vitest/coverage-v8
+```
+
+- Faster, no pre-instrumentation
+- Uses V8's native coverage
+- Recommended for most projects
+
+### Istanbul
+
+```bash
+npm i -D @vitest/coverage-istanbul
+```
+
+- Pre-instruments code
+- Works in any JS runtime
+- More overhead but widely compatible
+
+## Reporters
+
+```ts
+coverage: {
+  reporter: [
+    'text',           // Terminal output
+    'text-summary',   // Summary only
+    'json',           // JSON file
+    'html',           // HTML report
+    'lcov',           // For CI tools
+    'cobertura',      // XML format
+  ],
+  reportsDirectory: './coverage',
+}
+```
+
+## Thresholds
+
+Fail tests if coverage is below threshold:
+
+```ts
+coverage: {
+  thresholds: {
+    // Global thresholds
+    lines: 80,
+    functions: 75,
+    branches: 70,
+    statements: 80,
+    
+    // Per-file thresholds
+    perFile: true,
+    
+    // Auto-update thresholds (for gradual improvement)
+    autoUpdate: true,
+  },
+}
+```
+
+## Ignoring Code
+
+### V8
+
+```ts
+/* v8 ignore next -- @preserve */
+function ignored() {
+  return 'not covered'
+}
+
+/* v8 ignore start -- @preserve */
+// All code here ignored
+/* v8 ignore stop -- @preserve */
+```
+
+### Istanbul
+
+```ts
+/* istanbul ignore next -- @preserve */
+function ignored() {}
+
+/* istanbul ignore if -- @preserve */
+if (condition) {
+  // ignored
+}
+```
+
+Note: `@preserve` keeps comments through esbuild.
+
+## Package.json Scripts
+
+```json
+{
+  "scripts": {
+    "test": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "test:coverage:watch": "vitest --coverage"
+  }
+}
+```
+
+## Vitest UI Coverage
+
+Enable HTML coverage in Vitest UI:
+
+```ts
+coverage: {
+  enabled: true,
+  reporter: ['text', 'html'],
+}
+```
+
+Run with `vitest --ui` to view coverage visually.
+
+## CI Integration
+
+```yaml
+# GitHub Actions
+- name: Run tests with coverage
+  run: npm run test:coverage
+
+- name: Upload coverage to Codecov
+  uses: codecov/codecov-action@v3
+  with:
+    files: ./coverage/lcov.info
+```
+
+## Coverage with Sharding
+
+Merge coverage from sharded runs:
+
+```bash
+vitest run --shard=1/3 --coverage --reporter=blob
+vitest run --shard=2/3 --coverage --reporter=blob
+vitest run --shard=3/3 --coverage --reporter=blob
+
+vitest --merge-reports --coverage --reporter=json
+```
+
+## Key Points
+
+- V8 is faster, Istanbul is more compatible
+- Use `--coverage` flag or `coverage.enabled: true`
+- Include `all: true` to see uncovered files
+- Set thresholds to enforce minimum coverage
+- Use `@preserve` comment to keep ignore hints
+
+<!-- 
+Source references:
+- https://vitest.dev/guide/coverage.html
+-->
diff --git a/.claude/skills/vitest/references/features-filtering.md b/.claude/skills/vitest/references/features-filtering.md
new file mode 100644
index 0000000..24a41cb
--- /dev/null
+++ b/.claude/skills/vitest/references/features-filtering.md
@@ -0,0 +1,211 @@
+---
+name: test-filtering
+description: Filter tests by name, file patterns, and tags
+---
+
+# Test Filtering
+
+## CLI Filtering
+
+### By File Path
+
+```bash
+# Run files containing "user"
+vitest user
+
+# Multiple patterns
+vitest user auth
+
+# Specific file
+vitest src/user.test.ts
+
+# By line number
+vitest src/user.test.ts:25
+```
+
+### By Test Name
+
+```bash
+# Tests matching pattern
+vitest -t "login"
+vitest --testNamePattern "should.*work"
+
+# Regex patterns
+vitest -t "/user|auth/"
+```
+
+## Changed Files
+
+```bash
+# Uncommitted changes
+vitest --changed
+
+# Since specific commit
+vitest --changed HEAD~1
+vitest --changed abc123
+
+# Since branch
+vitest --changed origin/main
+```
+
+## Related Files
+
+Run tests that import specific files:
+
+```bash
+vitest related src/utils.ts src/api.ts --run
+```
+
+Useful with lint-staged:
+
+```js
+// .lintstagedrc.js
+export default {
+  '*.{ts,tsx}': 'vitest related --run',
+}
+```
+
+## Focus Tests (.only)
+
+```ts
+test.only('only this runs', () => {})
+
+describe.only('only this suite', () => {
+  test('runs', () => {})
+})
+```
+
+In CI, `.only` throws error unless configured:
+
+```ts
+defineConfig({
+  test: {
+    allowOnly: true, // Allow .only in CI
+  },
+})
+```
+
+## Skip Tests
+
+```ts
+test.skip('skipped', () => {})
+
+// Conditional
+test.skipIf(process.env.CI)('not in CI', () => {})
+test.runIf(!process.env.CI)('local only', () => {})
+
+// Dynamic skip
+test('dynamic', ({ skip }) => {
+  skip(someCondition, 'reason')
+})
+```
+
+## Tags
+
+Filter by custom tags:
+
+```ts
+test('database test', { tags: ['db'] }, () => {})
+test('slow test', { tags: ['slow', 'integration'] }, () => {})
+```
+
+Run tagged tests:
+
+```bash
+vitest --tags db
+vitest --tags "db,slow"      # OR
+vitest --tags db --tags slow # OR
+```
+
+Configure allowed tags:
+
+```ts
+defineConfig({
+  test: {
+    tags: ['db', 'slow', 'integration'],
+    strictTags: true, // Fail on unknown tags
+  },
+})
+```
+
+## Include/Exclude Patterns
+
+```ts
+defineConfig({
+  test: {
+    // Test file patterns
+    include: ['**/*.{test,spec}.{ts,tsx}'],
+    
+    // Exclude patterns
+    exclude: [
+      '**/node_modules/**',
+      '**/e2e/**',
+      '**/*.skip.test.ts',
+    ],
+    
+    // Include source for in-source testing
+    includeSource: ['src/**/*.ts'],
+  },
+})
+```
+
+## Watch Mode Filtering
+
+In watch mode, press:
+- `p` - Filter by filename pattern
+- `t` - Filter by test name pattern
+- `a` - Run all tests
+- `f` - Run only failed tests
+
+## Projects Filtering
+
+Run specific project:
+
+```bash
+vitest --project unit
+vitest --project integration --project e2e
+```
+
+## Environment-based Filtering
+
+```ts
+const isDev = process.env.NODE_ENV === 'development'
+const isCI = process.env.CI
+
+describe.skipIf(isCI)('local only tests', () => {})
+describe.runIf(isDev)('dev tests', () => {})
+```
+
+## Combining Filters
+
+```bash
+# File pattern + test name + changed
+vitest user -t "login" --changed
+
+# Related files + run mode
+vitest related src/auth.ts --run
+```
+
+## List Tests Without Running
+
+```bash
+vitest list                 # Show all test names
+vitest list -t "user"       # Filter by name
+vitest list --filesOnly     # Show only file paths
+vitest list --json          # JSON output
+```
+
+## Key Points
+
+- Use `-t` for test name pattern filtering
+- `--changed` runs only tests affected by changes
+- `--related` runs tests importing specific files
+- Tags provide semantic test grouping
+- Use `.only` for debugging, but configure CI to reject it
+- Watch mode has interactive filtering
+
+<!-- 
+Source references:
+- https://vitest.dev/guide/filtering.html
+- https://vitest.dev/guide/cli.html
+-->
diff --git a/.claude/skills/vitest/references/features-mocking.md b/.claude/skills/vitest/references/features-mocking.md
new file mode 100644
index 0000000..e351efe
--- /dev/null
+++ b/.claude/skills/vitest/references/features-mocking.md
@@ -0,0 +1,265 @@
+---
+name: mocking
+description: Mock functions, modules, timers, and dates with vi utilities
+---
+
+# Mocking
+
+## Mock Functions
+
+```ts
+import { expect, vi } from 'vitest'
+
+// Create mock function
+const fn = vi.fn()
+fn('hello')
+
+expect(fn).toHaveBeenCalled()
+expect(fn).toHaveBeenCalledWith('hello')
+
+// With implementation
+const add = vi.fn((a, b) => a + b)
+expect(add(1, 2)).toBe(3)
+
+// Mock return values
+fn.mockReturnValue(42)
+fn.mockReturnValueOnce(1).mockReturnValueOnce(2)
+fn.mockResolvedValue({ data: true })
+fn.mockRejectedValue(new Error('fail'))
+
+// Mock implementation
+fn.mockImplementation((x) => x * 2)
+fn.mockImplementationOnce(() => 'first call')
+```
+
+## Spying on Objects
+
+```ts
+const cart = {
+  getTotal: () => 100,
+}
+
+const spy = vi.spyOn(cart, 'getTotal')
+cart.getTotal()
+
+expect(spy).toHaveBeenCalled()
+
+// Mock implementation
+spy.mockReturnValue(200)
+expect(cart.getTotal()).toBe(200)
+
+// Restore original
+spy.mockRestore()
+```
+
+## Module Mocking
+
+```ts
+// vi.mock is hoisted to top of file
+vi.mock('./api', () => ({
+  fetchUser: vi.fn(() => ({ id: 1, name: 'Mock' })),
+}))
+
+import { fetchUser } from './api'
+
+test('mocked module', () => {
+  expect(fetchUser()).toEqual({ id: 1, name: 'Mock' })
+})
+```
+
+### Partial Mock
+
+```ts
+vi.mock('./utils', async (importOriginal) => {
+  const actual = await importOriginal()
+  return {
+    ...actual,
+    specificFunction: vi.fn(),
+  }
+})
+```
+
+### Auto-mock with Spy
+
+```ts
+// Keep implementation but spy on calls
+vi.mock('./calculator', { spy: true })
+
+import { add } from './calculator'
+
+test('spy on module', () => {
+  const result = add(1, 2) // Real implementation
+  expect(result).toBe(3)
+  expect(add).toHaveBeenCalledWith(1, 2)
+})
+```
+
+### Manual Mocks (__mocks__)
+
+```
+src/
+  __mocks__/
+    axios.ts      # Mocks 'axios'
+  api/
+    __mocks__/
+      client.ts   # Mocks './client'
+    client.ts
+```
+
+```ts
+// Just call vi.mock with no factory
+vi.mock('axios')
+vi.mock('./api/client')
+```
+
+## Dynamic Mocking (vi.doMock)
+
+Not hoisted - use for dynamic imports:
+
+```ts
+test('dynamic mock', async () => {
+  vi.doMock('./config', () => ({
+    apiUrl: 'http://test.local',
+  }))
+  
+  const { apiUrl } = await import('./config')
+  expect(apiUrl).toBe('http://test.local')
+  
+  vi.doUnmock('./config')
+})
+```
+
+## Mock Timers
+
+```ts
+import { afterEach, beforeEach, vi } from 'vitest'
+
+beforeEach(() => {
+  vi.useFakeTimers()
+})
+
+afterEach(() => {
+  vi.useRealTimers()
+})
+
+test('timers', () => {
+  const fn = vi.fn()
+  setTimeout(fn, 1000)
+  
+  expect(fn).not.toHaveBeenCalled()
+  
+  vi.advanceTimersByTime(1000)
+  expect(fn).toHaveBeenCalled()
+})
+
+// Other timer methods
+vi.runAllTimers()           // Run all pending timers
+vi.runOnlyPendingTimers()   // Run only currently pending
+vi.advanceTimersToNextTimer() // Advance to next timer
+```
+
+### Async Timer Methods
+
+```ts
+test('async timers', async () => {
+  vi.useFakeTimers()
+  
+  let resolved = false
+  setTimeout(() => Promise.resolve().then(() => { resolved = true }), 100)
+  
+  await vi.advanceTimersByTimeAsync(100)
+  expect(resolved).toBe(true)
+})
+```
+
+## Mock Dates
+
+```ts
+vi.setSystemTime(new Date('2024-01-01'))
+expect(new Date().getFullYear()).toBe(2024)
+
+vi.useRealTimers() // Restore
+```
+
+## Mock Globals
+
+```ts
+vi.stubGlobal('fetch', vi.fn(() => 
+  Promise.resolve({ json: () => ({ data: 'mock' }) })
+))
+
+// Restore
+vi.unstubAllGlobals()
+```
+
+## Mock Environment Variables
+
+```ts
+vi.stubEnv('API_KEY', 'test-key')
+expect(import.meta.env.API_KEY).toBe('test-key')
+
+// Restore
+vi.unstubAllEnvs()
+```
+
+## Clearing Mocks
+
+```ts
+const fn = vi.fn()
+fn()
+
+fn.mockClear()       // Clear call history
+fn.mockReset()       // Clear history + implementation
+fn.mockRestore()     // Restore original (for spies)
+
+// Global
+vi.clearAllMocks()
+vi.resetAllMocks()
+vi.restoreAllMocks()
+```
+
+## Config Auto-Reset
+
+```ts
+// vitest.config.ts
+defineConfig({
+  test: {
+    clearMocks: true,    // Clear before each test
+    mockReset: true,     // Reset before each test
+    restoreMocks: true,  // Restore after each test
+    unstubEnvs: true,    // Restore env vars
+    unstubGlobals: true, // Restore globals
+  },
+})
+```
+
+## Hoisted Variables for Mocks
+
+```ts
+const mockFn = vi.hoisted(() => vi.fn())
+
+vi.mock('./module', () => ({
+  getData: mockFn,
+}))
+
+import { getData } from './module'
+
+test('hoisted mock', () => {
+  mockFn.mockReturnValue('test')
+  expect(getData()).toBe('test')
+})
+```
+
+## Key Points
+
+- `vi.mock` is hoisted - called before imports
+- Use `vi.doMock` for dynamic, non-hoisted mocking
+- Always restore mocks to avoid test pollution
+- Use `{ spy: true }` to keep implementation but track calls
+- `vi.hoisted` lets you reference variables in mock factories
+
+<!-- 
+Source references:
+- https://vitest.dev/guide/mocking.html
+- https://vitest.dev/api/vi.html
+-->
diff --git a/.claude/skills/vitest/references/features-snapshots.md b/.claude/skills/vitest/references/features-snapshots.md
new file mode 100644
index 0000000..6868fb1
--- /dev/null
+++ b/.claude/skills/vitest/references/features-snapshots.md
@@ -0,0 +1,207 @@
+---
+name: snapshot-testing
+description: Snapshot testing with file, inline, and file snapshots
+---
+
+# Snapshot Testing
+
+Snapshot tests capture output and compare against stored references.
+
+## Basic Snapshot
+
+```ts
+import { expect, test } from 'vitest'
+
+test('snapshot', () => {
+  const result = generateOutput()
+  expect(result).toMatchSnapshot()
+})
+```
+
+First run creates `.snap` file:
+
+```js
+// __snapshots__/test.spec.ts.snap
+exports['snapshot 1'] = `
+{
+  "id": 1,
+  "name": "test"
+}
+`
+```
+
+## Inline Snapshots
+
+Stored directly in test file:
+
+```ts
+test('inline snapshot', () => {
+  const data = { foo: 'bar' }
+  expect(data).toMatchInlineSnapshot()
+})
+```
+
+Vitest updates the test file:
+
+```ts
+test('inline snapshot', () => {
+  const data = { foo: 'bar' }
+  expect(data).toMatchInlineSnapshot(`
+    {
+      "foo": "bar",
+    }
+  `)
+})
+```
+
+## File Snapshots
+
+Compare against explicit file:
+
+```ts
+test('render html', async () => {
+  const html = renderComponent()
+  await expect(html).toMatchFileSnapshot('./expected/component.html')
+})
+```
+
+## Snapshot Hints
+
+Add descriptive hints:
+
+```ts
+test('multiple snapshots', () => {
+  expect(header).toMatchSnapshot('header')
+  expect(body).toMatchSnapshot('body content')
+  expect(footer).toMatchSnapshot('footer')
+})
+```
+
+## Object Shape Matching
+
+Match partial structure:
+
+```ts
+test('shape snapshot', () => {
+  const data = { 
+    id: Math.random(), 
+    created: new Date(),
+    name: 'test' 
+  }
+  
+  expect(data).toMatchSnapshot({
+    id: expect.any(Number),
+    created: expect.any(Date),
+  })
+})
+```
+
+## Error Snapshots
+
+```ts
+test('error message', () => {
+  expect(() => {
+    throw new Error('Something went wrong')
+  }).toThrowErrorMatchingSnapshot()
+})
+
+test('inline error', () => {
+  expect(() => {
+    throw new Error('Bad input')
+  }).toThrowErrorMatchingInlineSnapshot(`[Error: Bad input]`)
+})
+```
+
+## Updating Snapshots
+
+```bash
+# Update all snapshots
+vitest -u
+vitest --update
+
+# In watch mode, press 'u' to update failed snapshots
+```
+
+## Custom Serializers
+
+Add custom snapshot formatting:
+
+```ts
+expect.addSnapshotSerializer({
+  test(val) {
+    return val && typeof val.toJSON === 'function'
+  },
+  serialize(val, config, indentation, depth, refs, printer) {
+    return printer(val.toJSON(), config, indentation, depth, refs)
+  },
+})
+```
+
+Or via config:
+
+```ts
+// vitest.config.ts
+defineConfig({
+  test: {
+    snapshotSerializers: ['./my-serializer.ts'],
+  },
+})
+```
+
+## Snapshot Format Options
+
+```ts
+defineConfig({
+  test: {
+    snapshotFormat: {
+      printBasicPrototype: false, // Don't print Array/Object prototypes
+      escapeString: false,
+    },
+  },
+})
+```
+
+## Concurrent Test Snapshots
+
+Use context's expect:
+
+```ts
+test.concurrent('concurrent 1', async ({ expect }) => {
+  expect(await getData()).toMatchSnapshot()
+})
+
+test.concurrent('concurrent 2', async ({ expect }) => {
+  expect(await getOther()).toMatchSnapshot()
+})
+```
+
+## Snapshot File Location
+
+Default: `__snapshots__/<test-file>.snap`
+
+Customize:
+
+```ts
+defineConfig({
+  test: {
+    resolveSnapshotPath: (testPath, snapExtension) => {
+      return testPath.replace('__tests__', '__snapshots__') + snapExtension
+    },
+  },
+})
+```
+
+## Key Points
+
+- Commit snapshot files to version control
+- Review snapshot changes in code review
+- Use hints for multiple snapshots in one test
+- Use `toMatchFileSnapshot` for large outputs (HTML, JSON)
+- Inline snapshots auto-update in test file
+- Use context's `expect` for concurrent tests
+
+<!-- 
+Source references:
+- https://vitest.dev/guide/snapshot.html
+- https://vitest.dev/api/expect.html#tomatchsnapshot
+-->
diff --git a/.claude/skills/vue-best-practices/LICENSE.md b/.claude/skills/vue-best-practices/LICENSE.md
new file mode 100644
index 0000000..3f08a54
--- /dev/null
+++ b/.claude/skills/vue-best-practices/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 hyf0, SerKo <https://github.com/serkodev>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/.claude/skills/vue-best-practices/SKILL.md b/.claude/skills/vue-best-practices/SKILL.md
new file mode 100644
index 0000000..feacd70
--- /dev/null
+++ b/.claude/skills/vue-best-practices/SKILL.md
@@ -0,0 +1,154 @@
+---
+name: vue-best-practices
+description: MUST be used for Vue.js tasks. Strongly recommends Composition API with `<script setup>` and TypeScript as the standard approach. Covers Vue 3, SSR, Volar, vue-tsc. Load for any Vue, .vue files, Vue Router, Pinia, or Vite with Vue work. ALWAYS use Composition API unless the project explicitly requires Options API.
+license: MIT
+metadata:
+  author: github.com/vuejs-ai
+  version: "18.0.0"
+---
+
+# Vue Best Practices Workflow
+
+Use this skill as an instruction set. Follow the workflow in order unless the user explicitly asks for a different order.
+
+## Core Principles
+- **Keep state predictable:** one source of truth, derive everything else.
+- **Make data flow explicit:** Props down, Events up for most cases.
+- **Favor small, focused components:** easier to test, reuse, and maintain.
+- **Avoid unnecessary re-renders:** use computed properties and watchers wisely.
+- **Readability counts:** write clear, self-documenting code.
+
+## 1) Confirm architecture before coding (required)
+
+- Default stack: Vue 3 + Composition API + `<script setup lang="ts">`.
+- If the project explicitly uses Options API, load `vue-options-api-best-practices` skill if available.
+- If the project explicitly uses JSX, load `vue-jsx-best-practices` skill if available.
+
+### 1.1 Must-read core references (required)
+
+- Before implementing any Vue task, make sure to read and apply these core references:
+  - `references/reactivity.md`
+  - `references/sfc.md`
+  - `references/component-data-flow.md`
+  - `references/composables.md`
+- Keep these references in active working context for the entire task, not only when a specific issue appears.
+
+### 1.2 Plan component boundaries before coding (required)
+
+Create a brief component map before implementation for any non-trivial feature.
+
+- Define each component's single responsibility in one sentence.
+- Keep entry/root and route-level view components as composition surfaces by default.
+- Move feature UI and feature logic out of entry/root/view components unless the task is intentionally a tiny single-file demo.
+- Define props/emits contracts for each child component in the map.
+- Prefer a feature folder layout (`components/<feature>/...`, `composables/use<Feature>.ts`) when adding more than one component.
+
+## 2) Apply essential Vue foundations (required)
+
+These are essential, must-know foundations. Apply all of them in every Vue task using the core references already loaded in section `1.1`.
+
+### Reactivity
+
+- Must-read reference from `1.1`: [reactivity](references/reactivity.md)
+- Keep source state minimal (`ref`/`reactive`), derive everything possible with `computed`.
+- Use watchers for side effects if needed.
+- Avoid recomputing expensive logic in templates.
+
+### SFC structure and template safety
+
+- Must-read reference from `1.1`: [sfc](references/sfc.md)
+- Keep SFC sections in this order: `<script>` → `<template>` → `<style>`.
+- Keep SFC responsibilities focused; split large components.
+- Keep templates declarative; move branching/derivation to script.
+- Apply Vue template safety rules (`v-html`, list rendering, conditional rendering choices).
+
+### Keep components focused
+
+Split a component when it has **more than one clear responsibility** (e.g. data orchestration + UI, or multiple independent UI sections).
+
+- Prefer **smaller components + composables** over one “mega component”
+- Move **UI sections** into child components (props in, events out).
+- Move **state/side effects** into composables (`useXxx()`).
+
+Apply objective split triggers. Split the component if **any** condition is true:
+
+- It owns both orchestration/state and substantial presentational markup for multiple sections.
+- It has 3+ distinct UI sections (for example: form, filters, list, footer/status).
+- A template block is repeated or could become reusable (item rows, cards, list entries).
+
+Entry/root and route view rule:
+
+- Keep entry/root and route view components thin: app shell/layout, provider wiring, and feature composition.
+- Do not place full feature implementations in entry/root/view components when those features contain independent parts.
+- For CRUD/list features (todo, table, catalog, inbox), split at least into:
+  - feature container component
+  - input/form component
+  - list (and/or item) component
+  - footer/actions or filter/status component
+- Allow a single-file implementation only for very small throwaway demos; if chosen, explicitly justify why splitting is unnecessary.
+
+### Component data flow
+
+- Must-read reference from `1.1`: [component-data-flow](references/component-data-flow.md)
+- Use props down, events up as the primary model.
+- Use `v-model` only for true two-way component contracts.
+- Use provide/inject only for deep-tree dependencies or shared context.
+- Keep contracts explicit and typed with `defineProps`, `defineEmits`, and `InjectionKey` as needed.
+
+### Composables
+
+- Must-read reference from `1.1`: [composables](references/composables.md)
+- Extract logic into composables when it is reused, stateful, or side-effect heavy.
+- Keep composable APIs small, typed, and predictable.
+- Separate feature logic from presentational components.
+
+## 3) Consider optional features only when requirements call for them
+
+### 3.1 Standard optional features
+
+Do not add these by default. Load the matching reference only when the requirement exists.
+
+- Slots: parent needs to control child content/layout -> [component-slots](references/component-slots.md)
+- Fallthrough attributes: wrapper/base components must forward attrs/events safely -> [component-fallthrough-attrs](references/component-fallthrough-attrs.md)
+- Built-in component `<KeepAlive>` for stateful view caching -> [component-keep-alive](references/component-keep-alive.md)
+- Built-in component `<Teleport>` for overlays/portals -> [component-teleport](references/component-teleport.md)
+- Built-in component `<Suspense>` for async subtree fallback boundaries -> [component-suspense](references/component-suspense.md)
+- Animation-related features: pick the simplest approach that matches the required motion behavior.
+  - Built-in component `<Transition>` for enter/leave effects -> [transition](references/component-transition.md)
+  - Built-in component `<TransitionGroup>` for animated list mutations -> [transition-group](references/component-transition-group.md)
+  - Class-based animation for non-enter/leave effects -> [animation-class-based-technique](references/animation-class-based-technique.md)
+  - State-driven animation for user-input-driven animation -> [animation-state-driven-technique](references/animation-state-driven-technique.md)
+
+### 3.2 Less-common optional features
+
+Use these only when there is explicit product or technical need.
+
+- Directives: behavior is DOM-specific and not a good composable/component fit -> [directives](references/directives.md)
+- Async components: heavy/rarely-used UI should be lazy loaded -> [component-async](references/component-async.md)
+- Render functions only when templates cannot express the requirement -> [render-functions](references/render-functions.md)
+- Plugins when behavior must be installed app-wide -> [plugins](references/plugins.md)
+- State management patterns: app-wide shared state crosses feature boundaries -> [state-management](references/state-management.md)
+
+## 4) Run performance optimization after behavior is correct
+
+Performance work is a post-functionality pass. Do not optimize before core behavior is implemented and verified.
+
+- Large list rendering bottlenecks -> [perf-virtualize-large-lists](references/perf-virtualize-large-lists.md)
+- Static subtrees re-rendering unnecessarily -> [perf-v-once-v-memo-directives](references/perf-v-once-v-memo-directives.md)
+- Over-abstraction in hot list paths -> [perf-avoid-component-abstraction-in-lists](references/perf-avoid-component-abstraction-in-lists.md)
+- Expensive updates triggered too often -> [updated-hook-performance](references/updated-hook-performance.md)
+
+## 5) Final self-check before finishing
+
+- Core behavior works and matches requirements.
+- All must-read references were read and applied.
+- Reactivity model is minimal and predictable.
+- SFC structure and template rules are followed.
+- Components are focused and well-factored, splitting when needed.
+- Entry/root and route view components remain composition surfaces unless there is an explicit small-demo exception.
+- Component split decisions are explicit and defensible (responsibility boundaries are clear).
+- Data flow contracts are explicit and typed.
+- Composables are used where reuse/complexity justifies them.
+- Moved state/side effects into composables if applicable
+- Optional features are used only when requirements demand them.
+- Performance changes were applied only after functionality was complete.
diff --git a/.claude/skills/vue-best-practices/SYNC.md b/.claude/skills/vue-best-practices/SYNC.md
new file mode 100644
index 0000000..e82170d
--- /dev/null
+++ b/.claude/skills/vue-best-practices/SYNC.md
@@ -0,0 +1,5 @@
+# Sync Info
+
+- **Source:** `vendor/vuejs-ai/skills/vue-best-practices`
+- **Git SHA:** `f3dd1bf4d3ac78331bdc903e4519d561c538ca6a`
+- **Synced:** 2026-03-16
diff --git a/.claude/skills/vue-best-practices/references/animation-class-based-technique.md b/.claude/skills/vue-best-practices/references/animation-class-based-technique.md
new file mode 100644
index 0000000..316e090
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/animation-class-based-technique.md
@@ -0,0 +1,254 @@
+---
+title: Use Class-based Animations for Non-Enter/Leave Effects
+impact: LOW
+impactDescription: Class-based animations are simpler and more performant for elements that remain in the DOM
+type: best-practice
+tags: [vue3, animation, css, class-binding, state]
+---
+
+# Use Class-based Animations for Non-Enter/Leave Effects
+
+**Impact: LOW** - For animations on elements that are not entering or leaving the DOM, use CSS class-based animations triggered by Vue's reactive state. This is simpler than `<Transition>` and more appropriate for feedback animations like shake, pulse, or highlight effects.
+
+## Task List
+
+- Use class-based animations for elements staying in the DOM
+- Use `<Transition>` only for enter/leave animations
+- Combine CSS animations with Vue's class bindings (`:class`)
+- Consider using `setTimeout` to auto-remove animation classes
+
+**When to Use Class-based Animations:**
+- User feedback (shake on error, pulse on success)
+- Attention-grabbing effects (highlight changes)
+- Hover/focus states that need more than CSS transitions
+- Any animation where the element stays mounted
+
+**When to Use Transition Component:**
+- Elements entering/leaving the DOM (v-if/v-show)
+- Route transitions
+- List item additions/removals
+
+## Basic Pattern
+
+```vue
+<template>
+  <div :class="{ shake: showError }">
+    <button @click="submitForm">Submit</button>
+    <span v-if="showError">This feature is disabled!</span>
+  </div>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+
+const showError = ref(false)
+
+function submitForm() {
+  if (!isValid()) {
+    // Trigger shake animation
+    showError.value = true
+
+    // Auto-remove class after animation completes
+    setTimeout(() => {
+      showError.value = false
+    }, 820)  // Match animation duration
+  }
+}
+</script>
+
+<style>
+.shake {
+  animation: shake 0.82s cubic-bezier(0.36, 0.07, 0.19, 0.97) both;
+  transform: translate3d(0, 0, 0);  /* Enable GPU acceleration */
+}
+
+@keyframes shake {
+  10%, 90% { transform: translate3d(-1px, 0, 0); }
+  20%, 80% { transform: translate3d(2px, 0, 0); }
+  30%, 50%, 70% { transform: translate3d(-4px, 0, 0); }
+  40%, 60% { transform: translate3d(4px, 0, 0); }
+}
+</style>
+```
+
+## Common Animation Patterns
+
+### Pulse on Success
+
+```vue
+<template>
+  <button
+    @click="save"
+    :class="{ pulse: saved }"
+  >
+    {{ saved ? 'Saved!' : 'Save' }}
+  </button>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+
+const saved = ref(false)
+
+async function save() {
+  await saveData()
+  saved.value = true
+  setTimeout(() => saved.value = false, 1000)
+}
+</script>
+
+<style>
+.pulse {
+  animation: pulse 0.5s ease-in-out;
+}
+
+@keyframes pulse {
+  0%, 100% { transform: scale(1); }
+  50% { transform: scale(1.05); }
+}
+</style>
+```
+
+### Highlight on Change
+
+```vue
+<template>
+  <div
+    :class="{ highlight: justUpdated }"
+  >
+    Value: {{ value }}
+  </div>
+</template>
+
+<script setup>
+import { ref, watch } from 'vue'
+
+const value = ref(0)
+const justUpdated = ref(false)
+
+watch(value, () => {
+  justUpdated.value = true
+  setTimeout(() => justUpdated.value = false, 1000)
+})
+</script>
+
+<style>
+.highlight {
+  animation: highlight 1s ease-out;
+}
+
+@keyframes highlight {
+  0% { background-color: yellow; }
+  100% { background-color: transparent; }
+}
+</style>
+```
+
+### Bounce Attention
+
+```vue
+<template>
+  <div
+    :class="{ bounce: needsAttention }"
+    @animationend="needsAttention = false"
+  >
+    <BellIcon />
+  </div>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+
+const needsAttention = ref(false)
+
+function notifyUser() {
+  needsAttention.value = true
+  // No setTimeout needed - using animationend event
+}
+</script>
+
+<style>
+.bounce {
+  animation: bounce 0.5s ease;
+}
+
+@keyframes bounce {
+  0%, 100% { transform: translateY(0); }
+  50% { transform: translateY(-10px); }
+}
+</style>
+```
+
+## Using animationend Event
+
+Instead of `setTimeout`, use the `animationend` event for cleaner code:
+
+```vue
+<template>
+  <div
+    :class="{ animate: isAnimating }"
+    @animationend="isAnimating = false"
+  >
+    Content
+  </div>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+
+const isAnimating = ref(false)
+
+function triggerAnimation() {
+  isAnimating.value = true
+  // Class is automatically removed when animation ends
+}
+</script>
+```
+
+## Composable for Reusable Animations
+
+```javascript
+// composables/useAnimation.js
+import { ref } from 'vue'
+
+export function useAnimation(duration = 500) {
+  const isAnimating = ref(false)
+
+  function trigger() {
+    isAnimating.value = true
+    setTimeout(() => {
+      isAnimating.value = false
+    }, duration)
+  }
+
+  return {
+    isAnimating,
+    trigger
+  }
+}
+```
+
+```vue
+<script setup>
+import { useAnimation } from '@/composables/useAnimation'
+
+const shake = useAnimation(820)
+const pulse = useAnimation(500)
+</script>
+
+<template>
+  <button
+    :class="{ shake: shake.isAnimating.value }"
+    @click="shake.trigger()"
+  >
+    Shake me
+  </button>
+
+  <button
+    :class="{ pulse: pulse.isAnimating.value }"
+    @click="pulse.trigger()"
+  >
+    Pulse me
+  </button>
+</template>
+```
diff --git a/.claude/skills/vue-best-practices/references/animation-state-driven-technique.md b/.claude/skills/vue-best-practices/references/animation-state-driven-technique.md
new file mode 100644
index 0000000..26b0120
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/animation-state-driven-technique.md
@@ -0,0 +1,291 @@
+---
+title: State-driven Animations with CSS Transitions and Style Bindings
+impact: LOW
+impactDescription: Combining Vue's reactive style bindings with CSS transitions creates smooth, interactive animations
+type: best-practice
+tags: [vue3, animation, css, transition, style-binding, state, interactive]
+---
+
+# State-driven Animations with CSS Transitions and Style Bindings
+
+**Impact: LOW** - For responsive, interactive animations that react to user input or state changes, combine Vue's dynamic style bindings with CSS transitions. This creates smooth animations that interpolate values in real-time based on state.
+
+## Task List
+
+- Use `:style` binding for dynamic properties that change frequently
+- Add CSS `transition` property to smoothly animate between values
+- Consider using `transform` and `opacity` for GPU-accelerated animations
+- For complex value interpolation, use watchers with animation libraries
+
+## Basic Pattern
+
+```vue
+<template>
+  <div
+    @mousemove="onMousemove"
+    :style="{ backgroundColor: `hsl(${hue}, 80%, 50%)` }"
+    class="interactive-area"
+  >
+    <p>Move your mouse across this div...</p>
+    <p>Hue: {{ hue }}</p>
+  </div>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+
+const hue = ref(0)
+
+function onMousemove(e) {
+  // Map mouse X position to hue (0-360)
+  const rect = e.currentTarget.getBoundingClientRect()
+  hue.value = Math.round((e.clientX - rect.left) / rect.width * 360)
+}
+</script>
+
+<style>
+.interactive-area {
+  transition: background-color 0.3s ease;
+  height: 200px;
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+}
+</style>
+```
+
+## Common Use Cases
+
+### Following Mouse Position
+
+```vue
+<template>
+  <div
+    class="container"
+    @mousemove="onMousemove"
+  >
+    <div
+      class="follower"
+      :style="{
+        transform: `translate(${x}px, ${y}px)`
+      }"
+    />
+  </div>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+
+const x = ref(0)
+const y = ref(0)
+
+function onMousemove(e) {
+  const rect = e.currentTarget.getBoundingClientRect()
+  x.value = e.clientX - rect.left
+  y.value = e.clientY - rect.top
+}
+</script>
+
+<style>
+.container {
+  position: relative;
+  height: 300px;
+}
+
+.follower {
+  position: absolute;
+  width: 20px;
+  height: 20px;
+  background: blue;
+  border-radius: 50%;
+  /* Smooth following with transition */
+  transition: transform 0.1s ease-out;
+  /* Prevent the follower from triggering mousemove */
+  pointer-events: none;
+}
+</style>
+```
+
+### Progress Animation
+
+```vue
+<template>
+  <div class="progress-container">
+    <div
+      class="progress-bar"
+      :style="{ width: `${progress}%` }"
+    />
+  </div>
+  <input
+    type="range"
+    v-model.number="progress"
+    min="0"
+    max="100"
+  />
+</template>
+
+<script setup>
+import { ref } from 'vue'
+
+const progress = ref(0)
+</script>
+
+<style>
+.progress-container {
+  height: 20px;
+  background: #e0e0e0;
+  border-radius: 10px;
+  overflow: hidden;
+}
+
+.progress-bar {
+  height: 100%;
+  background: linear-gradient(90deg, #4CAF50, #8BC34A);
+  transition: width 0.3s ease;
+}
+</style>
+```
+
+### Scroll-based Animation
+
+```vue
+<template>
+  <div
+    class="hero"
+    :style="{
+      opacity: heroOpacity,
+      transform: `translateY(${scrollOffset}px)`
+    }"
+  >
+    <h1>Scroll Down</h1>
+  </div>
+</template>
+
+<script setup>
+import { ref, computed, onMounted, onUnmounted } from 'vue'
+
+const scrollY = ref(0)
+
+const heroOpacity = computed(() => {
+  return Math.max(0, 1 - scrollY.value / 300)
+})
+
+const scrollOffset = computed(() => {
+  return scrollY.value * 0.5  // Parallax effect
+})
+
+function handleScroll() {
+  scrollY.value = window.scrollY
+}
+
+onMounted(() => {
+  window.addEventListener('scroll', handleScroll, { passive: true })
+})
+
+onUnmounted(() => {
+  window.removeEventListener('scroll', handleScroll)
+})
+</script>
+
+<style>
+.hero {
+  height: 100vh;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  /* Note: No transition for scroll-based animations - they should be instant */
+}
+</style>
+```
+
+### Color Theme Transition
+
+```vue
+<template>
+  <div
+    class="app"
+    :style="themeStyles"
+  >
+    <button @click="toggleTheme">Toggle Theme</button>
+    <p>Current theme: {{ isDark ? 'Dark' : 'Light' }}</p>
+  </div>
+</template>
+
+<script setup>
+import { ref, computed } from 'vue'
+
+const isDark = ref(false)
+
+const themeStyles = computed(() => ({
+  '--bg-color': isDark.value ? '#1a1a1a' : '#ffffff',
+  '--text-color': isDark.value ? '#ffffff' : '#1a1a1a',
+  backgroundColor: 'var(--bg-color)',
+  color: 'var(--text-color)'
+}))
+
+function toggleTheme() {
+  isDark.value = !isDark.value
+}
+</script>
+
+<style>
+.app {
+  min-height: 100vh;
+  transition: background-color 0.5s ease, color 0.5s ease;
+}
+</style>
+```
+
+## Advanced: Numerical Tweening with Watchers
+
+For smooth number animations (counters, stats), use watchers with animation libraries:
+
+```vue
+<template>
+  <div>
+    <input v-model.number="targetNumber" type="number" />
+    <p class="counter">{{ displayNumber.toFixed(0) }}</p>
+  </div>
+</template>
+
+<script setup>
+import { computed, ref, reactive, watch } from 'vue'
+import gsap from 'gsap'
+
+const targetNumber = ref(0)
+const tweened = reactive({ value: 0 })
+
+// Computed for display
+const displayNumber = computed(() => tweened.value)
+
+watch(targetNumber, (newValue) => {
+  gsap.to(tweened, {
+    duration: 0.5,
+    value: Number(newValue) || 0,
+    ease: 'power2.out'
+  })
+})
+</script>
+```
+
+## Performance Considerations
+
+```vue
+<style>
+/* GOOD: GPU-accelerated properties */
+.element {
+  transition: transform 0.3s ease, opacity 0.3s ease;
+}
+
+/* AVOID: Properties that trigger layout recalculation */
+.element {
+  transition: width 0.3s ease, height 0.3s ease, margin 0.3s ease;
+}
+
+/* For high-frequency updates, consider will-change */
+.frequently-animated {
+  will-change: transform;
+}
+</style>
+```
diff --git a/.claude/skills/vue-best-practices/references/component-async.md b/.claude/skills/vue-best-practices/references/component-async.md
new file mode 100644
index 0000000..b39310d
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/component-async.md
@@ -0,0 +1,97 @@
+---
+title: Async Component Best Practices
+impact: MEDIUM
+impactDescription: Poor async component strategy can delay interactivity in SSR apps and create loading UI flicker
+type: best-practice
+tags: [vue3, async-components, ssr, hydration, performance, ux]
+---
+
+# Async Component Best Practices
+
+**Impact: MEDIUM** - Async components should reduce JavaScript cost without degrading perceived performance. Focus on hydration timing in SSR and stable loading UX.
+
+## Task List
+
+- Use lazy hydration strategies for non-critical SSR component trees
+- Import only the hydration helpers you actually use
+- Keep `loadingComponent` delay near the default `200ms` unless real UX data suggests otherwise
+- Configure `delay` and `timeout` together for predictable loading behavior
+
+## Use Lazy Hydration Strategies in SSR
+
+In Vue 3.5+, async components can delay hydration until idle time, visibility, media query match, or user interaction.
+
+**BAD:**
+```vue
+<script setup lang="ts">
+import { defineAsyncComponent } from 'vue'
+
+const AsyncComments = defineAsyncComponent({
+  loader: () => import('./Comments.vue')
+})
+</script>
+```
+
+**GOOD:**
+```vue
+<script setup lang="ts">
+import {
+  defineAsyncComponent,
+  hydrateOnVisible,
+  hydrateOnIdle
+} from 'vue'
+
+const AsyncComments = defineAsyncComponent({
+  loader: () => import('./Comments.vue'),
+  hydrate: hydrateOnVisible({ rootMargin: '100px' })
+})
+
+const AsyncFooter = defineAsyncComponent({
+  loader: () => import('./Footer.vue'),
+  hydrate: hydrateOnIdle(5000)
+})
+</script>
+```
+
+## Prevent Loading Spinner Flicker
+
+Avoid showing loading UI immediately for components that usually resolve quickly.
+
+**BAD:**
+```vue
+<script setup lang="ts">
+import { defineAsyncComponent } from 'vue'
+import LoadingSpinner from './LoadingSpinner.vue'
+
+const AsyncDashboard = defineAsyncComponent({
+  loader: () => import('./Dashboard.vue'),
+  loadingComponent: LoadingSpinner,
+  delay: 0
+})
+</script>
+```
+
+**GOOD:**
+```vue
+<script setup lang="ts">
+import { defineAsyncComponent } from 'vue'
+import LoadingSpinner from './LoadingSpinner.vue'
+import ErrorDisplay from './ErrorDisplay.vue'
+
+const AsyncDashboard = defineAsyncComponent({
+  loader: () => import('./Dashboard.vue'),
+  loadingComponent: LoadingSpinner,
+  errorComponent: ErrorDisplay,
+  delay: 200,
+  timeout: 30000
+})
+</script>
+```
+
+## Delay Guidelines
+
+| Scenario | Recommended Delay |
+|----------|-------------------|
+| Small component, fast network | `200ms` |
+| Known heavy component | `100ms` |
+| Background or non-critical UI | `300-500ms` |
diff --git a/.claude/skills/vue-best-practices/references/component-data-flow.md b/.claude/skills/vue-best-practices/references/component-data-flow.md
new file mode 100644
index 0000000..e1add1e
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/component-data-flow.md
@@ -0,0 +1,307 @@
+---
+title: Component Data Flow Best Practices
+impact: HIGH
+impactDescription: Clear data flow between components prevents state bugs, stale UI, and brittle coupling
+type: best-practice
+tags: [vue3, props, emits, v-model, provide-inject, data-flow, typescript]
+---
+
+# Component Data Flow Best Practices
+
+**Impact: HIGH** - Vue components stay reliable when data flow is explicit: props go down, events go up, `v-model` handles two-way bindings, and provide/inject supports cross-tree dependencies. Blurring these boundaries leads to stale state, hidden coupling, and hard-to-debug UI.
+
+The main principle of data flow in Vue.js is **Props Down / Events Up**. This is the most maintainable default, and one-way flow scales well.
+
+## Task List
+
+- Treat props as read-only inputs
+- Use props/emit for component communication; reserve refs for imperative actions
+- When refs are required for imperative APIs, type them with template refs
+- Emit events instead of mutating parent state directly
+- Use `defineModel` for v-model in modern Vue (3.4+)
+- Handle v-model modifiers deliberately in child components
+- Use symbols for provide/inject keys to avoid props drilling (over ~3 layers)
+- Keep mutations in the provider or expose explicit actions
+- In TypeScript projects, prefer type-based `defineProps`, `defineEmits`, and `InjectionKey`
+
+## Props: One-Way Data Down
+
+Props are inputs. Do not mutate them in the child.
+
+**BAD:**
+```vue
+<script setup>
+const props = defineProps({ count: Number })
+
+function increment() {
+  props.count++
+}
+</script>
+```
+
+**GOOD:**
+
+If state needs to change, emit an event, use `v-model` or create a local copy.
+
+## Prefer props/emit over component refs
+
+**BAD:**
+```vue
+<script setup>
+import { ref } from 'vue'
+import UserForm from './UserForm.vue'
+
+const formRef = ref(null)
+
+function submitForm() {
+  if (formRef.value.isValid) {
+    formRef.value.submit()
+  }
+}
+</script>
+
+<template>
+  <UserForm ref="formRef" />
+  <button @click="submitForm">Submit</button>
+</template>
+```
+
+**GOOD:**
+```vue
+<script setup>
+import UserForm from './UserForm.vue'
+
+function handleSubmit(formData) {
+  api.submit(formData)
+}
+</script>
+
+<template>
+  <UserForm @submit="handleSubmit" />
+</template>
+```
+
+## Type component refs when imperative access is required
+
+Prefer props/emits by default. When a parent must call an exposed child method, type the ref explicitly and expose only the intended API from the child with `defineExpose`.
+
+**BAD:**
+```vue
+<script setup lang="ts">
+import { ref, onMounted } from 'vue'
+import DialogPanel from './DialogPanel.vue'
+
+const panelRef = ref(null)
+
+onMounted(() => {
+  panelRef.value.open()
+})
+</script>
+
+<template>
+  <DialogPanel ref="panelRef" />
+</template>
+```
+
+**GOOD:**
+```vue
+<!-- DialogPanel.vue -->
+<script setup lang="ts">
+function open() {}
+
+defineExpose({ open })
+</script>
+```
+
+```vue
+<!-- Parent.vue -->
+<script setup lang="ts">
+import { onMounted, useTemplateRef } from 'vue'
+import DialogPanel from './DialogPanel.vue'
+
+// Vue 3.5+ with useTemplateRef
+const panelRef = useTemplateRef('panelRef')
+
+// Before Vue 3.5 with manual typing and ref
+// const panelRef = ref<InstanceType<typeof DialogPanel> | null>(null)
+
+onMounted(() => {
+  panelRef.value?.open()
+})
+</script>
+
+<template>
+  <DialogPanel ref="panelRef" />
+</template>
+```
+
+## Emits: Explicit Events Up
+
+Component events do not bubble. If a parent needs to know about an event, re-emit it explicitly.
+
+**BAD:**
+```vue
+<!-- Parent expects "saved" from grandchild, but it won't bubble -->
+<Child @saved="onSaved" />
+```
+
+**GOOD:**
+```vue
+<!-- Child.vue -->
+<script setup>
+const emit = defineEmits(['saved'])
+
+function onGrandchildSaved(payload) {
+  emit('saved', payload)
+}
+</script>
+
+<template>
+  <Grandchild @saved="onGrandchildSaved" />
+</template>
+```
+
+**Event naming:** use kebab-case in templates and camelCase in script:
+```vue
+<script setup>
+const emit = defineEmits(['updateUser'])
+</script>
+
+<template>
+  <ProfileForm @update-user="emit('updateUser', $event)" />
+</template>
+```
+
+## `v-model`: Predictable Two-Way Bindings
+
+Use `defineModel` by default for component bindings and emit updates on input. Only use the `modelValue` + `update:modelValue` pattern if you are on Vue < 3.4.
+
+**BAD:**
+```vue
+<script setup>
+const props = defineProps({ value: String })
+</script>
+
+<template>
+  <input :value="props.value" @input="$emit('input', $event.target.value)" />
+</template>
+```
+
+**GOOD (Vue 3.4+):**
+```vue
+<script setup>
+const model = defineModel({ type: String })
+</script>
+
+<template>
+  <input v-model="model" />
+</template>
+```
+
+**GOOD (Vue < 3.4):**
+```vue
+<script setup>
+const props = defineProps({ modelValue: String })
+const emit = defineEmits(['update:modelValue'])
+</script>
+
+<template>
+  <input
+    :value="props.modelValue"
+    @input="emit('update:modelValue', $event.target.value)"
+  />
+</template>
+```
+
+If you need the updated value immediately after a change, use the input event value or `nextTick` in the parent.
+
+## Provide/Inject: Shared Context Without Prop Drilling
+
+Use provide/inject for cross-tree state, but keep mutations centralized in the provider and expose explicit actions.
+
+**BAD:**
+```vue
+// Provider.vue
+provide('theme', reactive({ dark: false }))
+
+// Consumer.vue
+const theme = inject('theme')
+// Mutating shared state from any depth becomes hard to track
+theme.dark = true
+```
+
+**GOOD:**
+```vue
+// Provider.vue
+const theme = reactive({ dark: false })
+const toggleTheme = () => { theme.dark = !theme.dark }
+
+provide(themeKey, readonly(theme))
+provide(themeActionsKey, { toggleTheme })
+
+// Consumer.vue
+const theme = inject(themeKey)
+const { toggleTheme } = inject(themeActionsKey)
+```
+
+Use symbols for keys to avoid collisions in large apps:
+```ts
+export const themeKey = Symbol('theme')
+export const themeActionsKey = Symbol('theme-actions')
+```
+
+## Use TypeScript Contracts for Public Component APIs
+
+In TypeScript projects, type component boundaries directly with `defineProps`, `defineEmits`, and `InjectionKey` so invalid payloads and mismatched injections fail at compile time.
+
+**BAD:**
+```vue
+<script setup lang="ts">
+import { inject } from 'vue'
+
+const props = defineProps({
+  userId: String
+})
+
+const emit = defineEmits(['save'])
+const settings = inject('settings')
+
+// Payload shape is not checked here
+emit('save', 123)
+
+// Key is string-based and not type-safe
+settings?.theme = 'dark'
+</script>
+```
+
+**GOOD:**
+```vue
+<script setup lang="ts">
+import { inject, provide } from 'vue'
+import type { InjectionKey } from 'vue'
+
+interface Props {
+  userId: string
+}
+
+interface Emits {
+  save: [payload: { id: string; draft: boolean }]
+}
+
+interface Settings {
+  theme: 'light' | 'dark'
+}
+
+const settingsKey: InjectionKey<Settings> = Symbol('settings')
+
+const props = defineProps<Props>()
+const emit = defineEmits<Emits>()
+
+provide(settingsKey, { theme: 'light' })
+
+const settings = inject(settingsKey)
+if (settings) {
+  emit('save', { id: props.userId, draft: false })
+}
+</script>
+```
diff --git a/.claude/skills/vue-best-practices/references/component-fallthrough-attrs.md b/.claude/skills/vue-best-practices/references/component-fallthrough-attrs.md
new file mode 100644
index 0000000..5362fa4
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/component-fallthrough-attrs.md
@@ -0,0 +1,174 @@
+---
+title: Component Fallthrough Attributes Best Practices
+impact: MEDIUM
+impactDescription: Incorrect $attrs access and reactivity assumptions can cause undefined values and watchers that never run
+type: best-practice
+tags: [vue3, attrs, fallthrough-attributes, composition-api, reactivity]
+---
+
+# Component Fallthrough Attributes Best Practices
+
+**Impact: MEDIUM** - Fallthrough attributes are straightforward once you follow Vue's conventions: hyphenated names use bracket notation, listener keys are camelCase `onX`, and `useAttrs()` is current-but-not-reactive.
+
+## Task List
+
+- Access hyphenated attribute names with bracket notation (for example `attrs['data-testid']`)
+- Access event listeners with camelCase `onX` keys (for example `attrs.onClick`)
+- Do not `watch()` values returned from `useAttrs()`; those watchers do not trigger on attr changes
+- Use `onUpdated()` for attr-driven side effects
+- Promote frequently observed attrs to props when reactive observation is required
+
+## Access Attribute and Listener Keys Correctly
+
+Hyphenated attribute names preserve their original casing in JavaScript, so dot notation does not work for keys that include `-`.
+
+**BAD:**
+```vue
+<script setup>
+import { useAttrs } from 'vue'
+
+const attrs = useAttrs()
+
+console.log(attrs.data-testid)  // Syntax error
+console.log(attrs.dataTestid)   // undefined for data-testid
+console.log(attrs['on-click'])  // undefined
+console.log(attrs['@click'])    // undefined
+</script>
+```
+
+**GOOD:**
+```vue
+<script setup>
+import { useAttrs } from 'vue'
+
+const attrs = useAttrs()
+
+console.log(attrs['data-testid'])
+console.log(attrs['aria-label'])
+console.log(attrs['foo-bar'])
+
+console.log(attrs.onClick)
+console.log(attrs.onCustomEvent)
+console.log(attrs.onMouseEnter)
+</script>
+```
+
+### Naming Reference
+
+| Parent Usage | Access in `attrs` |
+|--------------|-------------------|
+| `class="foo"` | `attrs.class` |
+| `data-id="123"` | `attrs['data-id']` |
+| `aria-label="..."` | `attrs['aria-label']` |
+| `foo-bar="baz"` | `attrs['foo-bar']` |
+| `@click="fn"` | `attrs.onClick` |
+| `@custom-event="fn"` | `attrs.onCustomEvent` |
+| `@update:modelValue="fn"` | `attrs['onUpdate:modelValue']` |
+
+## `useAttrs()` Is Not Reactive
+
+`useAttrs()` always reflects the latest values, but it is intentionally not reactive for watcher tracking.
+
+**BAD:**
+```vue
+<script setup>
+import { watch, watchEffect, useAttrs } from 'vue'
+
+const attrs = useAttrs()
+
+watch(
+  () => attrs.someAttr,
+  (newValue) => {
+    console.log('Changed:', newValue) // Never runs on attr changes
+  }
+)
+
+watchEffect(() => {
+  console.log(attrs.class) // Runs on setup, not on attr updates
+})
+</script>
+```
+
+**GOOD:**
+```vue
+<script setup>
+import { onUpdated, useAttrs } from 'vue'
+
+const attrs = useAttrs()
+
+onUpdated(() => {
+  console.log('Latest attrs:', attrs)
+})
+</script>
+```
+
+**GOOD:**
+```vue
+<script setup>
+import { watch } from 'vue'
+
+const props = defineProps({
+  someAttr: String
+})
+
+watch(
+  () => props.someAttr,
+  (newValue) => {
+    console.log('Changed:', newValue)
+  }
+)
+</script>
+```
+
+## Common Patterns
+
+### Check for optional attrs safely
+
+```vue
+<script setup>
+import { computed, useAttrs } from 'vue'
+
+const attrs = useAttrs()
+
+const hasTestId = computed(() => 'data-testid' in attrs)
+const ariaLabel = computed(() => attrs['aria-label'] ?? 'Default label')
+</script>
+```
+
+### Forward listeners after internal logic
+
+```vue
+<script setup>
+import { useAttrs } from 'vue'
+
+defineOptions({ inheritAttrs: false })
+
+const attrs = useAttrs()
+
+function handleClick(event) {
+  console.log('Internal handling first')
+  attrs.onClick?.(event)
+}
+</script>
+
+<template>
+  <button @click="handleClick">
+    <slot />
+  </button>
+</template>
+```
+
+## TypeScript Notes
+
+`useAttrs()` is typed as `Record<string, unknown>`, so cast individual keys when needed.
+
+```vue
+<script setup lang="ts">
+import { useAttrs } from 'vue'
+
+const attrs = useAttrs()
+
+const testId = attrs['data-testid'] as string | undefined
+const onClick = attrs.onClick as ((event: MouseEvent) => void) | undefined
+</script>
+```
diff --git a/.claude/skills/vue-best-practices/references/component-keep-alive.md b/.claude/skills/vue-best-practices/references/component-keep-alive.md
new file mode 100644
index 0000000..f887691
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/component-keep-alive.md
@@ -0,0 +1,137 @@
+---
+title: KeepAlive Component Best Practices
+impact: HIGH
+impactDescription: KeepAlive caches component instances; misuse causes stale data, memory growth, or unexpected lifecycle behavior
+type: best-practice
+tags: [vue3, keepalive, cache, performance, router, dynamic-components]
+---
+
+# KeepAlive Component Best Practices
+
+**Impact: HIGH** - `<KeepAlive>` caches component instances instead of destroying them. Use it to preserve state across switches, but manage cache size and freshness explicitly to avoid memory growth or stale UI.
+
+## Task List
+
+- Use KeepAlive only where state preservation improves UX
+- Set a reasonable `max` to cap cache size
+- Declare component names for include/exclude matching
+- Use `onActivated`/`onDeactivated` for cache-aware logic
+- Decide how and when cached views refresh their data
+- Avoid caching memory-heavy or security-sensitive views
+
+## When to Use KeepAlive
+
+Use KeepAlive when switching between views where state should persist (tabs, multi-step forms, dashboards). Avoid it when each visit should start fresh.
+
+**BAD:**
+```vue
+<template>
+  <!-- State resets on every switch -->
+  <component :is="currentTab" />
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <!-- State preserved between switches -->
+  <KeepAlive>
+    <component :is="currentTab" />
+  </KeepAlive>
+</template>
+```
+
+## When NOT to Use KeepAlive
+
+- Search or filter pages where users expect fresh results
+- Memory-heavy components (maps, large tables, media players)
+- Sensitive flows where data must be cleared on exit
+- Components with heavy background activity you cannot pause
+
+## Limit and Control the Cache
+
+Always cap cache size with `max` and restrict caching to specific components when possible.
+
+```vue
+<template>
+  <KeepAlive :max="5" include="Dashboard,Settings">
+    <component :is="currentView" />
+  </KeepAlive>
+</template>
+```
+
+## Ensure Component Names Match include/exclude
+
+`include` and `exclude` match the component `name` option. Explicitly set names for reliable caching.
+
+```vue
+<!-- TabA.vue -->
+<script setup>
+defineOptions({ name: 'TabA' })
+</script>
+```
+
+```vue
+<template>
+  <KeepAlive include="TabA,TabB">
+    <component :is="currentTab" />
+  </KeepAlive>
+</template>
+```
+
+## Cache Invalidation Strategies
+
+Vue 3 has no direct API to remove a specific cached instance. Use keys or dynamic include/exclude to force refreshes.
+
+```vue
+<script setup>
+import { ref, reactive } from 'vue'
+
+const currentView = ref('Dashboard')
+const viewKeys = reactive({ Dashboard: 0, Settings: 0 })
+
+function invalidateCache(view) {
+  viewKeys[view]++
+}
+</script>
+
+<template>
+  <KeepAlive>
+    <component :is="currentView" :key="`${currentView}-${viewKeys[currentView]}`" />
+  </KeepAlive>
+</template>
+```
+
+## Lifecycle Hooks for Cached Components
+
+Cached components are not destroyed on switch. Use activation hooks for refresh and cleanup.
+
+```vue
+<script setup>
+import { onActivated, onDeactivated } from 'vue'
+
+onActivated(() => {
+  refreshData()
+})
+
+onDeactivated(() => {
+  pauseTimers()
+})
+</script>
+```
+
+## Router Caching and Freshness
+
+Decide whether navigation should show cached state or a fresh view. A common pattern is to key by route when params change.
+
+```vue
+<template>
+  <router-view v-slot="{ Component, route }">
+    <KeepAlive>
+      <component :is="Component" :key="route.fullPath" />
+    </KeepAlive>
+  </router-view>
+</template>
+```
+
+If you want cache reuse but fresh data, refresh in `onActivated` and compare query/params before fetching.
diff --git a/.claude/skills/vue-best-practices/references/component-slots.md b/.claude/skills/vue-best-practices/references/component-slots.md
new file mode 100644
index 0000000..f77a91c
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/component-slots.md
@@ -0,0 +1,216 @@
+---
+title: Component Slots Best Practices
+impact: MEDIUM
+impactDescription: Poor slot API design causes empty DOM wrappers, weak TypeScript safety, brittle defaults, and unnecessary component overhead
+type: best-practice
+tags: [vue3, slots, components, typescript, composables]
+---
+
+# Component Slots Best Practices
+
+**Impact: MEDIUM** - Slots are a core component API surface in Vue. Structure them intentionally so templates stay predictable, typed, and performant.
+
+## Task List
+
+- Use shorthand syntax for named slots (`#` instead of `v-slot:`)
+- Render optional slot wrapper elements only when slot content exists (`$slots` checks)
+- Type scoped slot contracts with `defineSlots` in TypeScript components
+- Provide fallback content for optional slots
+- Prefer composables over renderless components for pure logic reuse
+
+## Shorthand syntax for named slots
+
+**BAD:**
+```vue
+<MyComponent>
+  <template v-slot:header> ... </template>
+</MyComponent>
+```
+
+**GOOD:**
+```vue
+<MyComponent>
+  <template #header> ... </template>
+</MyComponent>
+```
+
+## Conditionally Render Optional Slot Wrappers
+
+Use `$slots` checks when wrapper elements add spacing, borders, or layout constraints.
+
+**BAD:**
+```vue
+<!-- Card.vue -->
+<template>
+  <article class="card">
+    <header class="card-header">
+      <slot name="header" />
+    </header>
+
+    <section class="card-body">
+      <slot />
+    </section>
+
+    <footer class="card-footer">
+      <slot name="footer" />
+    </footer>
+  </article>
+</template>
+```
+
+**GOOD:**
+```vue
+<!-- Card.vue -->
+<template>
+  <article class="card">
+    <header v-if="$slots.header" class="card-header">
+      <slot name="header" />
+    </header>
+
+    <section v-if="$slots.default" class="card-body">
+      <slot />
+    </section>
+
+    <footer v-if="$slots.footer" class="card-footer">
+      <slot name="footer" />
+    </footer>
+  </article>
+</template>
+```
+
+## Type Scoped Slot Props with defineSlots
+
+In `<script setup lang="ts">`, use `defineSlots` so slot consumers get autocomplete and static checks.
+
+**BAD:**
+```vue
+<!-- ProductList.vue -->
+<script setup lang="ts">
+interface Product {
+  id: number
+  name: string
+}
+
+defineProps<{ products: Product[] }>()
+</script>
+
+<template>
+  <ul>
+    <li v-for="(product, index) in products" :key="product.id">
+      <slot :product="product" :index="index" />
+    </li>
+  </ul>
+</template>
+```
+
+**GOOD:**
+```vue
+<!-- ProductList.vue -->
+<script setup lang="ts">
+interface Product {
+  id: number
+  name: string
+}
+
+defineProps<{ products: Product[] }>()
+
+defineSlots<{
+  default(props: { product: Product; index: number }): any
+  empty(): any
+}>()
+</script>
+
+<template>
+  <ul v-if="products.length">
+    <li v-for="(product, index) in products" :key="product.id">
+      <slot :product="product" :index="index" />
+    </li>
+  </ul>
+  <slot v-else name="empty" />
+</template>
+```
+
+## Provide Slot Fallback Content
+
+Fallback content makes components resilient when parents omit optional slots.
+
+**BAD:**
+```vue
+<!-- SubmitButton.vue -->
+<template>
+  <button type="submit" class="btn-primary">
+    <slot />
+  </button>
+</template>
+```
+
+**GOOD:**
+```vue
+<!-- SubmitButton.vue -->
+<template>
+  <button type="submit" class="btn-primary">
+    <slot>Submit</slot>
+  </button>
+</template>
+```
+
+## Prefer Composables for Pure Logic Reuse
+
+Renderless components are still useful for slot-driven composition, but composables are usually cleaner for logic-only reuse.
+
+**BAD:**
+```vue
+<!-- MouseTracker.vue -->
+<script setup lang="ts">
+import { ref, onMounted, onUnmounted } from 'vue'
+
+const x = ref(0)
+const y = ref(0)
+
+function onMove(event: MouseEvent) {
+  x.value = event.pageX
+  y.value = event.pageY
+}
+
+onMounted(() => window.addEventListener('mousemove', onMove))
+onUnmounted(() => window.removeEventListener('mousemove', onMove))
+</script>
+
+<template>
+  <slot :x="x" :y="y" />
+</template>
+```
+
+**GOOD:**
+```ts
+// composables/useMouse.ts
+import { ref, onMounted, onUnmounted } from 'vue'
+
+export function useMouse() {
+  const x = ref(0)
+  const y = ref(0)
+
+  function onMove(event: MouseEvent) {
+    x.value = event.pageX
+    y.value = event.pageY
+  }
+
+  onMounted(() => window.addEventListener('mousemove', onMove))
+  onUnmounted(() => window.removeEventListener('mousemove', onMove))
+
+  return { x, y }
+}
+```
+
+```vue
+<!-- MousePosition.vue -->
+<script setup lang="ts">
+import { useMouse } from '@/composables/useMouse'
+
+const { x, y } = useMouse()
+</script>
+
+<template>
+  <p>{{ x }}, {{ y }}</p>
+</template>
+```
diff --git a/.claude/skills/vue-best-practices/references/component-suspense.md b/.claude/skills/vue-best-practices/references/component-suspense.md
new file mode 100644
index 0000000..4d9ecab
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/component-suspense.md
@@ -0,0 +1,228 @@
+---
+title: Suspense Component Best Practices
+impact: MEDIUM
+impactDescription: Suspense coordinates async dependencies with fallback UI; misconfiguration leads to missing loading states or confusing UX
+type: best-practice
+tags: [vue3, suspense, async-components, async-setup, loading, fallback, router, transition, keepalive]
+---
+
+# Suspense Component Best Practices
+
+**Impact: MEDIUM** - `<Suspense>` coordinates async dependencies (async components or async setup) and renders a fallback while they resolve. Misconfiguration leads to missing loading states, empty renders, or subtle UX bugs.
+
+## Task List
+
+- Wrap default and fallback slot content in a single root node
+- Use `timeout` when you need the fallback to appear on reverts
+- Force root replacement with `:key` when you need Suspense to re-trigger
+- Add `suspensible` to nested Suspense boundaries (Vue 3.3+)
+- Use `@pending`, `@resolve`, and `@fallback` for programmatic loading state
+- Nest `RouterView` -> `Transition` -> `KeepAlive` -> `Suspense` in that order
+- Keep Suspense usage centralized and documented in production
+
+## Single Root in Default and Fallback Slots
+
+Suspense tracks a single immediate child in both slots. Wrap multiple elements in a single element or component.
+
+**BAD:**
+```vue
+<template>
+  <Suspense>
+    <AsyncHeader />
+    <AsyncList />
+
+    <template #fallback>
+      <LoadingSpinner />
+      <LoadingHint />
+    </template>
+  </Suspense>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <Suspense>
+    <div>
+      <AsyncHeader />
+      <AsyncList />
+    </div>
+
+    <template #fallback>
+      <div>
+        <LoadingSpinner />
+        <LoadingHint />
+      </div>
+    </template>
+  </Suspense>
+</template>
+```
+
+## Fallback Timing on Reverts (`timeout`)
+
+When Suspense is already resolved and new async work starts, the previous content remains visible until the timeout elapses. Use `timeout="0"` for immediate fallback or a short delay to avoid flicker.
+
+**BAD:**
+```vue
+<template>
+  <Suspense>
+    <component :is="currentView" :key="viewKey" />
+
+    <template #fallback>
+      Loading...
+    </template>
+  </Suspense>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <Suspense :timeout="200">
+    <component :is="currentView" :key="viewKey" />
+
+    <template #fallback>
+      Loading...
+    </template>
+  </Suspense>
+</template>
+```
+
+## Pending State Only Re-triggers on Root Replacement
+
+Once resolved, Suspense only re-enters pending when the root node of the default slot changes. If async work happens deeper in the tree, no fallback appears.
+
+**BAD:**
+```vue
+<template>
+  <Suspense>
+    <TabContainer>
+      <AsyncDashboard v-if="tab === 'dashboard'" />
+      <AsyncSettings v-else />
+    </TabContainer>
+
+    <template #fallback>
+      Loading...
+    </template>
+  </Suspense>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <Suspense>
+    <component :is="tabs[tab]" :key="tab" />
+
+    <template #fallback>
+      Loading...
+    </template>
+  </Suspense>
+</template>
+```
+
+## Use `suspensible` for Nested Suspense (Vue 3.3+)
+
+Nested Suspense boundaries need `suspensible` on the inner boundary so the parent can coordinate loading state. Without it, inner async content may render empty nodes until resolved.
+
+**BAD:**
+```vue
+<template>
+  <Suspense>
+    <LayoutShell>
+      <Suspense>
+        <AsyncWidget />
+        <template #fallback>Loading widget...</template>
+      </Suspense>
+    </LayoutShell>
+
+    <template #fallback>Loading layout...</template>
+  </Suspense>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <Suspense>
+    <LayoutShell>
+      <Suspense suspensible>
+        <AsyncWidget />
+        <template #fallback>Loading widget...</template>
+      </Suspense>
+    </LayoutShell>
+
+    <template #fallback>Loading layout...</template>
+  </Suspense>
+</template>
+```
+
+## Track Loading with Suspense Events
+
+Use `@pending`, `@resolve`, and `@fallback` for analytics, global loading indicators, or coordinating UI outside the Suspense boundary.
+
+```vue
+<script setup>
+import { ref } from 'vue'
+
+const isLoading = ref(false)
+
+const onPending = () => {
+  isLoading.value = true
+}
+
+const onResolve = () => {
+  isLoading.value = false
+}
+</script>
+
+<template>
+  <LoadingBar v-if="isLoading" />
+
+  <Suspense @pending="onPending" @resolve="onResolve">
+    <AsyncPage />
+    <template #fallback>
+      <PageSkeleton />
+    </template>
+  </Suspense>
+</template>
+```
+
+## Recommended Nesting with RouterView, Transition, KeepAlive
+
+When combining these components, the nesting order should be `RouterView` -> `Transition` -> `KeepAlive` -> `Suspense` so each wrapper works correctly.
+
+**BAD:**
+```vue
+<template>
+  <RouterView v-slot="{ Component }">
+    <Suspense>
+      <KeepAlive>
+        <Transition mode="out-in">
+          <component :is="Component" />
+        </Transition>
+      </KeepAlive>
+    </Suspense>
+  </RouterView>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <RouterView v-slot="{ Component }">
+    <Transition mode="out-in">
+      <KeepAlive>
+        <Suspense>
+          <component :is="Component" />
+          <template #fallback>Loading...</template>
+        </Suspense>
+      </KeepAlive>
+    </Transition>
+  </RouterView>
+</template>
+```
+
+## Treat Suspense Cautiously in Production
+
+In production code, keep Suspense boundaries minimal, document where they are used, and have a fallback loading strategy if you ever need to replace or refactor them.
diff --git a/.claude/skills/vue-best-practices/references/component-teleport.md b/.claude/skills/vue-best-practices/references/component-teleport.md
new file mode 100644
index 0000000..db48db2
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/component-teleport.md
@@ -0,0 +1,108 @@
+---
+title: Teleport Component Best Practices
+impact: MEDIUM
+impactDescription: Teleport renders content outside the component's DOM position, which is essential for overlays but affects styling and layout
+type: best-practice
+tags: [vue3, teleport, modal, overlay, positioning, responsive]
+---
+
+# Teleport Component Best Practices
+
+**Impact: MEDIUM** - `<Teleport>` renders part of a component's template in a different place in the DOM while preserving the Vue component hierarchy. Use it for overlays (modals, toasts, tooltips) or any UI that must escape stacking contexts, overflow, or fixed positioning constraints.
+
+## Task List
+
+- Teleport overlays to `body` or a dedicated container outside the app root
+- Keep a shared target for similar UI (`#modals`, `#notifications`) and control layering with order or z-index
+- Use `:disabled` for responsive layouts that should render inline on small screens
+- Remember props, emits, and provide/inject still work through teleport
+- Avoid relying on parent stacking contexts or transforms for teleported UI
+
+## Teleport Overlays Out of Transformed Containers
+
+When an ancestor has `transform`, `filter`, or `perspective`, fixed-position overlays can behave like they are locally positioned. Teleport escapes that context.
+
+**BAD:**
+```vue
+<template>
+  <div class="animated-container">
+    <button @click="open = true">Open</button>
+
+    <!-- Broken: fixed positioning is scoped to the transformed parent -->
+    <div v-if="open" class="modal">Modal</div>
+  </div>
+</template>
+
+<style>
+.animated-container {
+  transform: translateZ(0);
+}
+
+.modal {
+  position: fixed;
+  inset: 0;
+  z-index: 9999;
+}
+</style>
+```
+
+**GOOD:**
+```vue
+<template>
+  <div class="animated-container">
+    <button @click="open = true">Open</button>
+
+    <Teleport to="body">
+      <div v-if="open" class="modal">Modal</div>
+    </Teleport>
+  </div>
+</template>
+```
+
+## Responsive Layouts with `disabled`
+
+Use `:disabled` to render inline on mobile and teleport on larger screens:
+
+```vue
+<script setup>
+import { useMediaQuery } from '@vueuse/core'
+
+const isMobile = useMediaQuery('(max-width: 768px)')
+</script>
+
+<template>
+  <Teleport to="body" :disabled="isMobile">
+    <nav class="sidebar">Navigation</nav>
+  </Teleport>
+</template>
+```
+
+## Logical Hierarchy Is Preserved
+
+Teleport changes DOM position, not the Vue component tree. Props, emits, slots, and provide/inject still work:
+
+```vue
+<template>
+  <Teleport to="body">
+    <ChildPanel :message="message" @close="open = false" />
+  </Teleport>
+</template>
+```
+
+## Multiple Teleports to the Same Target
+
+Teleports to the same target append in declaration order:
+
+```vue
+<template>
+  <Teleport to="#notifications">
+    <div>First</div>
+  </Teleport>
+
+  <Teleport to="#notifications">
+    <div>Second</div>
+  </Teleport>
+</template>
+```
+
+Use a shared container to keep stacking predictable, and apply z-index only when you need explicit layering.
diff --git a/.claude/skills/vue-best-practices/references/component-transition-group.md b/.claude/skills/vue-best-practices/references/component-transition-group.md
new file mode 100644
index 0000000..d0339ff
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/component-transition-group.md
@@ -0,0 +1,128 @@
+---
+title: TransitionGroup Component Best Practices
+impact: MEDIUM
+impactDescription: TransitionGroup animates list items; missing keys or misuse leads to broken list transitions
+type: best-practice
+tags: [vue3, transition-group, animation, lists, keys]
+---
+
+# TransitionGroup Component Best Practices
+
+**Impact: MEDIUM** - `<TransitionGroup>` animates lists of items entering, leaving, and moving. Use it for `v-for` lists or dynamic collections where individual items change over time.
+
+## Task List
+
+- Use `<TransitionGroup>` only for lists and repeated items
+- Provide unique, stable keys for every direct child
+- Use `tag` when you need semantic or layout wrappers
+- Avoid the `mode` prop (not supported)
+- Use JavaScript hooks for staggered effects
+
+## Use TransitionGroup for Lists
+
+`<TransitionGroup>` is designed for list items. Use `tag` to control the wrapper element when needed.
+
+**BAD:**
+```vue
+<template>
+  <TransitionGroup name="fade">
+    <ComponentA />
+    <ComponentB />
+  </TransitionGroup>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <TransitionGroup name="list" tag="ul">
+    <li v-for="item in items" :key="item.id">
+      {{ item.name }}
+    </li>
+  </TransitionGroup>
+</template>
+```
+
+## Always Provide Stable Keys
+
+Keys are required. Without stable keys, Vue cannot track item positions and animations break.
+
+**BAD:**
+```vue
+<template>
+  <TransitionGroup name="list" tag="ul">
+    <li v-for="(item, index) in items" :key="index">
+      {{ item.name }}
+    </li>
+  </TransitionGroup>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <TransitionGroup name="list" tag="ul">
+    <li v-for="item in items" :key="item.id">
+      {{ item.name }}
+    </li>
+  </TransitionGroup>
+</template>
+```
+
+## Do Not Use `mode` on TransitionGroup
+
+`mode` is only for `<Transition>` because it swaps a single element. Use `<Transition>` if you need in/out sequencing.
+
+**BAD:**
+```vue
+<template>
+  <TransitionGroup name="list" tag="div" mode="out-in">
+    <div v-for="item in items" :key="item.id">{{ item.name }}</div>
+  </TransitionGroup>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <Transition name="fade" mode="out-in">
+    <component :is="currentView" :key="currentView" />
+  </Transition>
+</template>
+```
+
+## Stagger List Animations with Data Attributes
+
+For cascading list animations, pass the index to JavaScript hooks and compute delay per item.
+
+```vue
+<template>
+  <TransitionGroup
+    tag="ul"
+    :css="false"
+    @before-enter="onBeforeEnter"
+    @enter="onEnter"
+  >
+    <li v-for="(item, index) in items" :key="item.id" :data-index="index">
+      {{ item.name }}
+    </li>
+  </TransitionGroup>
+</template>
+
+<script setup>
+function onBeforeEnter(el) {
+  el.style.opacity = 0
+  el.style.transform = 'translateY(12px)'
+}
+
+function onEnter(el, done) {
+  const delay = Number(el.dataset.index) * 80
+  setTimeout(() => {
+    el.style.transition = 'all 0.25s ease'
+    el.style.opacity = 1
+    el.style.transform = 'translateY(0)'
+    setTimeout(done, 250)
+  }, delay)
+}
+</script>
+```
diff --git a/.claude/skills/vue-best-practices/references/component-transition.md b/.claude/skills/vue-best-practices/references/component-transition.md
new file mode 100644
index 0000000..e6abed7
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/component-transition.md
@@ -0,0 +1,125 @@
+---
+title: Transition Component Best Practices
+impact: MEDIUM
+impactDescription: Transition animates a single element or component; incorrect structure or keys prevent animations
+type: best-practice
+tags: [vue3, transition, animation, performance, keys]
+---
+
+# Transition Component Best Practices
+
+**Impact: MEDIUM** - `<Transition>` animates entering/leaving of a single element or component. It is ideal for toggling UI states, swapping views, or animating one component at a time.
+
+## Task List
+
+- Wrap a single element or component inside `<Transition>`
+- Provide a `key` when switching between same element types
+- Use `mode="out-in"` when you need sequential swaps
+- Prefer `transform` and `opacity` for smooth animations
+
+## Use Transition for a Single Root Element
+
+`<Transition>` only supports one direct child. Wrap multiple nodes in a single element or component.
+
+**BAD:**
+```vue
+<template>
+  <Transition name="fade">
+    <h3>Title</h3>
+    <p>Description</p>
+  </Transition>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <Transition name="fade">
+    <div>
+      <h3>Title</h3>
+      <p>Description</p>
+    </div>
+  </Transition>
+</template>
+```
+
+## Force Transitions Between Same Element Types
+
+Vue reuses the same DOM element when the tag type does not change. Add `key` so Vue treats it as a new element and triggers enter/leave.
+
+**BAD:**
+```vue
+<template>
+  <Transition name="fade">
+    <p v-if="isActive">Active</p>
+    <p v-else>Inactive</p>
+  </Transition>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <Transition name="fade" mode="out-in">
+    <p v-if="isActive" key="active">Active</p>
+    <p v-else key="inactive">Inactive</p>
+  </Transition>
+</template>
+```
+
+## Use `mode` to Avoid Overlap During Swaps
+
+When swapping components or views, use `mode="out-in"` to prevent both from being visible at the same time.
+
+**BAD:**
+```vue
+<template>
+  <Transition name="fade">
+    <component :is="currentView" />
+  </Transition>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <Transition name="fade" mode="out-in">
+    <component :is="currentView" :key="currentView" />
+  </Transition>
+</template>
+```
+
+## Animate `transform` and `opacity` for Performance
+
+Avoid layout-triggering properties such as `height`, `margin`, or `top`. Use `transform` and `opacity` for smooth, GPU-friendly transitions.
+
+**BAD:**
+```css
+.slide-enter-active,
+.slide-leave-active {
+  transition: height 0.3s ease;
+}
+
+.slide-enter-from,
+.slide-leave-to {
+  height: 0;
+}
+```
+
+**GOOD:**
+```css
+.slide-enter-active,
+.slide-leave-active {
+  transition: transform 0.3s ease, opacity 0.3s ease;
+}
+
+.slide-enter-from {
+  transform: translateX(-12px);
+  opacity: 0;
+}
+
+.slide-leave-to {
+  transform: translateX(12px);
+  opacity: 0;
+}
+```
diff --git a/.claude/skills/vue-best-practices/references/composables.md b/.claude/skills/vue-best-practices/references/composables.md
new file mode 100644
index 0000000..cb18a6f
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/composables.md
@@ -0,0 +1,290 @@
+---
+title: Composable Organization Patterns
+impact: MEDIUM
+impactDescription: Well-structured composables improve maintainability, reusability, and update performance
+type: best-practice
+tags: [vue3, composables, composition-api, code-organization, api-design, readonly, utilities]
+---
+
+# Composable Organization Patterns
+
+**Impact: MEDIUM** - Treat composables as reusable, stateful building blocks and keep their code organized by feature concern. This keeps large components maintainable and prevents hard-to-debug mutation and API design issues.
+
+## Task List
+
+- Compose complex behavior from small, focused composables
+- Use options objects for composables with multiple optional parameters
+- Return readonly state when updates must flow through explicit actions
+- Keep pure utility functions as plain utilities, not composables
+- Organize composable and component code by feature concern, and extract composables when components grow
+
+## Compose Composables from Smaller Primitives
+
+**BAD:**
+```vue
+<script setup>
+import { ref, computed, onMounted, onUnmounted } from 'vue'
+
+const x = ref(0)
+const y = ref(0)
+const inside = ref(false)
+const el = ref(null)
+
+function onMove(e) {
+  x.value = e.pageX
+  y.value = e.pageY
+  if (!el.value) return
+  const r = el.value.getBoundingClientRect()
+  inside.value = x.value >= r.left && x.value <= r.right &&
+    y.value >= r.top && y.value <= r.bottom
+}
+
+onMounted(() => window.addEventListener('mousemove', onMove))
+onUnmounted(() => window.removeEventListener('mousemove', onMove))
+</script>
+```
+
+**GOOD:**
+```javascript
+// composables/useEventListener.js
+import { onMounted, onUnmounted, toValue } from 'vue'
+
+export function useEventListener(target, event, callback) {
+  onMounted(() => toValue(target).addEventListener(event, callback))
+  onUnmounted(() => toValue(target).removeEventListener(event, callback))
+}
+```
+
+```javascript
+// composables/useMouse.js
+import { ref } from 'vue'
+import { useEventListener } from './useEventListener'
+
+export function useMouse() {
+  const x = ref(0)
+  const y = ref(0)
+
+  useEventListener(window, 'mousemove', (e) => {
+    x.value = e.pageX
+    y.value = e.pageY
+  })
+
+  return { x, y }
+}
+```
+
+```javascript
+// composables/useMouseInElement.js
+import { computed } from 'vue'
+import { useMouse } from './useMouse'
+
+export function useMouseInElement(elementRef) {
+  const { x, y } = useMouse()
+
+  const isOutside = computed(() => {
+    if (!elementRef.value) return true
+    const rect = elementRef.value.getBoundingClientRect()
+    return x.value < rect.left || x.value > rect.right ||
+      y.value < rect.top || y.value > rect.bottom
+  })
+
+  return { x, y, isOutside }
+}
+```
+
+## Use Options Object Pattern for Composable Parameters
+
+**BAD:**
+```javascript
+export function useFetch(url, method, headers, timeout, retries, immediate) {
+  // hard to read and easy to misorder
+}
+
+useFetch('/api/users', 'GET', null, 5000, 3, true)
+```
+
+**GOOD:**
+```javascript
+export function useFetch(url, options = {}) {
+  const {
+    method = 'GET',
+    headers = {},
+    timeout = 30000,
+    retries = 0,
+    immediate = true
+  } = options
+
+  // implementation
+  return { method, headers, timeout, retries, immediate }
+}
+
+useFetch('/api/users', {
+  method: 'POST',
+  timeout: 5000,
+  retries: 3
+})
+```
+
+```typescript
+interface UseCounterOptions {
+  initial?: number
+  min?: number
+  max?: number
+  step?: number
+}
+
+export function useCounter(options: UseCounterOptions = {}) {
+  const { initial = 0, min = -Infinity, max = Infinity, step = 1 } = options
+  // implementation
+}
+```
+
+## Return Readonly State with Explicit Actions
+
+**BAD:**
+```javascript
+export function useCart() {
+  const items = ref([])
+  const total = computed(() => items.value.reduce((sum, item) => sum + item.price, 0))
+  return { items, total } // any consumer can mutate directly
+}
+
+const { items } = useCart()
+items.value.push({ id: 1, price: 10 })
+```
+
+**GOOD:**
+```javascript
+import { ref, computed, readonly } from 'vue'
+
+export function useCart() {
+  const _items = ref([])
+
+  const total = computed(() =>
+    _items.value.reduce((sum, item) => sum + item.price * item.quantity, 0)
+  )
+
+  function addItem(product, quantity = 1) {
+    const existing = _items.value.find(item => item.id === product.id)
+    if (existing) {
+      existing.quantity += quantity
+      return
+    }
+    _items.value.push({ ...product, quantity })
+  }
+
+  function removeItem(productId) {
+    _items.value = _items.value.filter(item => item.id !== productId)
+  }
+
+  return {
+    items: readonly(_items),
+    total,
+    addItem,
+    removeItem
+  }
+}
+```
+
+## Keep Utilities as Utilities
+
+**BAD:**
+```javascript
+export function useFormatters() {
+  const formatDate = (date) => new Intl.DateTimeFormat('en-US').format(date)
+  const formatCurrency = (amount) =>
+    new Intl.NumberFormat('en-US', { style: 'currency', currency: 'USD' }).format(amount)
+  return { formatDate, formatCurrency }
+}
+
+const { formatDate } = useFormatters()
+```
+
+**GOOD:**
+```javascript
+// utils/formatters.js
+export function formatDate(date) {
+  return new Intl.DateTimeFormat('en-US').format(date)
+}
+
+export function formatCurrency(amount) {
+  return new Intl.NumberFormat('en-US', {
+    style: 'currency',
+    currency: 'USD'
+  }).format(amount)
+}
+```
+
+```javascript
+// composables/useInvoiceSummary.js
+import { computed } from 'vue'
+import { formatCurrency } from '@/utils/formatters'
+
+export function useInvoiceSummary(invoiceRef) {
+  const totalLabel = computed(() => formatCurrency(invoiceRef.value.total))
+  return { totalLabel }
+}
+```
+
+## Organize Composable and Component Code by Feature Concern
+
+**BAD:**
+```vue
+<script setup>
+import { ref, computed, watch, onMounted } from 'vue'
+
+const searchQuery = ref('')
+const items = ref([])
+const selected = ref(null)
+const showModal = ref(false)
+const sortBy = ref('name')
+const filter = ref('all')
+const loading = ref(false)
+
+const filtered = computed(() => items.value.filter(i => i.category === filter.value))
+function openModal() { showModal.value = true }
+const sorted = computed(() => [...filtered.value].sort(/* ... */))
+watch(searchQuery, () => { /* ... */ })
+onMounted(() => { /* ... */ })
+</script>
+```
+
+**GOOD:**
+```vue
+<script setup>
+import { useItems } from '@/composables/useItems'
+import { useSearch } from '@/composables/useSearch'
+import { useSelectionModal } from '@/composables/useSelectionModal'
+
+// Data
+const { items, loading, fetchItems } = useItems()
+
+// Search/filter/sort
+const { query, visibleItems } = useSearch(items)
+
+// Selection + modal
+const { selectedItem, isModalOpen, selectItem, closeModal } = useSelectionModal()
+</script>
+```
+
+```javascript
+// composables/useItems.js
+import { ref, onMounted } from 'vue'
+
+export function useItems() {
+  const items = ref([])
+  const loading = ref(false)
+
+  async function fetchItems() {
+    loading.value = true
+    try {
+      items.value = await api.getItems()
+    } finally {
+      loading.value = false
+    }
+  }
+
+  onMounted(fetchItems)
+  return { items, loading, fetchItems }
+}
+```
diff --git a/.claude/skills/vue-best-practices/references/directives.md b/.claude/skills/vue-best-practices/references/directives.md
new file mode 100644
index 0000000..8412fbc
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/directives.md
@@ -0,0 +1,162 @@
+---
+title: Directive Best Practices
+impact: MEDIUM
+impactDescription: Custom directives are powerful but easy to misuse; following patterns prevents leaks, invalid usage, and unclear abstractions
+type: best-practice
+tags: [vue3, directives, custom-directives, composition, typescript]
+---
+
+# Directive Best Practices
+
+**Impact: MEDIUM** - Directives are for low-level DOM access. Use them sparingly, keep them side-effect safe, and prefer components or composables when you need stateful or reusable UI behavior.
+
+## Task List
+
+- Use directives only when you need direct DOM access
+- Do not mutate directive arguments or binding objects
+- Clean up timers, listeners, and observers in `unmounted`
+- Register directives in `<script setup>` with the `v-` prefix
+- In TypeScript projects, type directive values and augment template directive types
+- Prefer components or composables for complex behavior
+
+## Treat Directive Arguments as Read-Only
+
+Directive bindings are not reactive storage. Don’t write to them.
+
+```ts
+const vFocus = {
+  mounted(el, binding) {
+    // binding.value is read-only
+    el.focus()
+  }
+}
+```
+
+## Avoid Directives on Components
+
+Directives apply to DOM elements. When used on components, they attach to the root element and can break if the root changes.
+
+**BAD:**
+```vue
+<MyInput v-focus />
+```
+
+**GOOD:**
+```vue
+<!-- MyInput.vue -->
+<script setup>
+const vFocus = (el) => el.focus()
+</script>
+
+<template>
+  <input v-focus />
+</template>
+```
+
+## Clean Up Side Effects in `unmounted`
+
+Any timers, listeners, or observers must be removed to avoid leaks.
+
+```ts
+const vResize = {
+  mounted(el) {
+    const observer = new ResizeObserver(() => {})
+    observer.observe(el)
+    el._observer = observer
+  },
+  unmounted(el) {
+    el._observer?.disconnect()
+  }
+}
+```
+
+## Prefer Function Shorthand for Single-Hook Directives
+
+If you only need `mounted`/`updated`, use the function form.
+
+```ts
+const vAutofocus = (el) => el.focus()
+```
+
+## Use the `v-` Prefix and Script Setup Registration
+
+```vue
+<script setup>
+const vFocus = (el) => el.focus()
+</script>
+
+<template>
+  <input v-focus />
+</template>
+```
+
+## Type Custom Directives in TypeScript Projects
+
+Use `Directive<Element, ValueType>` so `binding.value` is typed, and augment Vue's template types so directives are recognized in SFC templates.
+
+**BAD:**
+```ts
+// Untyped directive value and no template type augmentation
+export const vHighlight = {
+  mounted(el, binding) {
+    el.style.backgroundColor = binding.value
+  }
+}
+```
+
+**GOOD:**
+```ts
+import type { Directive } from 'vue'
+
+type HighlightValue = string
+
+export const vHighlight = {
+  mounted(el, binding) {
+    el.style.backgroundColor = binding.value
+  }
+} satisfies Directive<HTMLElement, HighlightValue>
+
+declare module 'vue' {
+  interface ComponentCustomProperties {
+    vHighlight: typeof vHighlight
+  }
+}
+```
+
+## Handle SSR with `getSSRProps`
+
+Directive hooks such as `mounted` and `updated` do not run during SSR. If a directive sets attributes/classes that affect rendered HTML, provide an SSR equivalent via `getSSRProps` to avoid hydration mismatches.
+
+**BAD:**
+```ts
+const vTooltip = {
+  mounted(el, binding) {
+    el.setAttribute('data-tooltip', binding.value)
+    el.classList.add('has-tooltip')
+  }
+}
+```
+
+**GOOD:**
+```ts
+const vTooltip = {
+  mounted(el, binding) {
+    el.setAttribute('data-tooltip', binding.value)
+    el.classList.add('has-tooltip')
+  },
+  getSSRProps(binding) {
+    return {
+      'data-tooltip': binding.value,
+      class: 'has-tooltip'
+    }
+  }
+}
+```
+
+## Prefer Declarative Templates When Possible
+
+If a standard attribute or binding works, use it instead of a directive.
+
+## Decide Between Directives and Components
+
+Use a directive for DOM-level behavior. Use a component when behavior affects structure, state, or rendering.
diff --git a/.claude/skills/vue-best-practices/references/perf-avoid-component-abstraction-in-lists.md b/.claude/skills/vue-best-practices/references/perf-avoid-component-abstraction-in-lists.md
new file mode 100644
index 0000000..44f98ff
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/perf-avoid-component-abstraction-in-lists.md
@@ -0,0 +1,159 @@
+---
+title: Avoid Excessive Component Abstraction in Large Lists
+impact: MEDIUM
+impactDescription: Each component instance has memory and render overhead - abstractions multiply this in lists
+type: efficiency
+tags: [vue3, performance, components, abstraction, lists, optimization]
+---
+
+# Avoid Excessive Component Abstraction in Large Lists
+
+**Impact: MEDIUM** - Component instances are more expensive than plain DOM nodes. While abstractions improve code organization, unnecessary nesting creates overhead. In large lists, this overhead multiplies - 100 items with 3 levels of abstraction means 300+ component instances instead of 100.
+
+Don't avoid abstraction entirely, but be mindful of component depth in frequently-rendered elements like list items.
+
+## Task List
+
+- Review list item components for unnecessary wrapper components
+- Consider flattening component hierarchies in hot paths
+- Use native elements when a component adds no value
+- Profile component counts using Vue DevTools
+- Focus optimization efforts on the most-rendered components
+
+**BAD:**
+```vue
+<!-- BAD: Deep abstraction in list items -->
+<template>
+  <div class="user-list">
+    <!-- For 100 users: Creates 400 component instances -->
+    <UserCard v-for="user in users" :key="user.id" :user="user" />
+  </div>
+</template>
+
+<!-- UserCard.vue -->
+<template>
+  <Card>  <!-- Wrapper component #1 -->
+    <CardHeader>  <!-- Wrapper component #2 -->
+      <UserAvatar :src="user.avatar" />  <!-- Wrapper component #3 -->
+    </CardHeader>
+    <CardBody>  <!-- Wrapper component #4 -->
+      <Text>{{ user.name }}</Text>
+    </CardBody>
+  </Card>
+</template>
+
+<!-- Each UserCard creates: Card + CardHeader + CardBody + UserAvatar + Text
+     100 users = 500+ component instances -->
+```
+
+**GOOD:**
+```vue
+<!-- GOOD: Flattened structure in list items -->
+<template>
+  <div class="user-list">
+    <!-- For 100 users: Creates 100 component instances -->
+    <UserCard v-for="user in users" :key="user.id" :user="user" />
+  </div>
+</template>
+
+<!-- UserCard.vue - Flattened, uses native elements -->
+<template>
+  <div class="card">
+    <div class="card-header">
+      <img :src="user.avatar" :alt="user.name" class="avatar" />
+    </div>
+    <div class="card-body">
+      <span class="user-name">{{ user.name }}</span>
+    </div>
+  </div>
+</template>
+
+<script setup>
+defineProps({
+  user: Object
+})
+</script>
+
+<style scoped>
+/* Styles that would have been in Card, CardHeader, etc. */
+.card { /* ... */ }
+.card-header { /* ... */ }
+.card-body { /* ... */ }
+.avatar { /* ... */ }
+</style>
+```
+
+## When Abstraction Is Still Worth It
+
+```vue
+<!-- Component abstraction is valuable when: -->
+
+<!-- 1. Complex behavior is encapsulated -->
+<UserStatusIndicator :user="user" />  <!-- Has logic, tooltips, etc. -->
+
+<!-- 2. Reused outside of the hot path -->
+<Card>  <!-- OK to use in one-off places, not in 100-item lists -->
+
+<!-- 3. The list itself is small -->
+<template v-if="items.length < 20">
+  <FancyItem v-for="item in items" :key="item.id" />
+</template>
+
+<!-- 4. Virtualization is used (only ~20 items rendered at once) -->
+<RecycleScroller :items="items">
+  <template #default="{ item }">
+    <ComplexItem :item="item" />  <!-- OK - only 20 instances exist -->
+  </template>
+</RecycleScroller>
+```
+
+## Measuring Component Overhead
+
+```javascript
+// In development, profile component counts
+import { onMounted, getCurrentInstance } from 'vue'
+
+onMounted(() => {
+  const instance = getCurrentInstance()
+  let count = 0
+
+  function countComponents(vnode) {
+    if (vnode.component) count++
+    if (vnode.children) {
+      vnode.children.forEach(child => {
+        if (child.component || child.children) countComponents(child)
+      })
+    }
+  }
+
+  // Use Vue DevTools instead for accurate counts
+  console.log('Check Vue DevTools Components tab for instance counts')
+})
+```
+
+## Alternatives to Wrapper Components
+
+```vue
+<!-- Instead of a <Button> component for styling: -->
+<button class="btn btn-primary">Click</button>
+
+<!-- Instead of a <Text> component: -->
+<span class="text-body">{{ content }}</span>
+
+<!-- Instead of layout wrapper components in lists: -->
+<div class="flex items-center gap-2">
+  <!-- content -->
+</div>
+
+<!-- Use CSS classes or Tailwind instead of component abstractions for styling -->
+```
+
+## Impact Calculation
+
+| List Size | Components per Item | Total Instances | Memory Impact |
+|-----------|---------------------|-----------------|---------------|
+| 100 items | 1 (flat) | 100 | Baseline |
+| 100 items | 3 (nested) | 300 | ~3x memory |
+| 100 items | 5 (deeply nested) | 500 | ~5x memory |
+| 1000 items | 1 (flat) | 1000 | High |
+| 1000 items | 5 (deeply nested) | 5000 | Very High |
diff --git a/.claude/skills/vue-best-practices/references/perf-v-once-v-memo-directives.md b/.claude/skills/vue-best-practices/references/perf-v-once-v-memo-directives.md
new file mode 100644
index 0000000..ce5f688
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/perf-v-once-v-memo-directives.md
@@ -0,0 +1,182 @@
+---
+title: Use v-once and v-memo to Skip Unnecessary Updates
+impact: MEDIUM
+impactDescription: v-once skips all future updates for static content; v-memo conditionally memoizes subtrees
+type: efficiency
+tags: [vue3, performance, v-once, v-memo, optimization, directives]
+---
+
+# Use v-once and v-memo to Skip Unnecessary Updates
+
+**Impact: MEDIUM** - Vue re-evaluates templates on every reactive change. For content that never changes or changes infrequently, `v-once` and `v-memo` tell Vue to skip updates, reducing render work.
+
+Use `v-once` for truly static content and `v-memo` for conditionally-static content in lists.
+
+## Task List
+
+- Apply `v-once` to elements that use runtime data but never need updating
+- Apply `v-memo` to list items that should only update on specific condition changes
+- Verify memoized content doesn't need to respond to other state changes
+- Profile with Vue DevTools to confirm update skipping
+
+## v-once: Render Once, Never Update
+
+**BAD:**
+```vue
+<template>
+  <!-- BAD: Re-evaluated on every parent re-render -->
+  <div class="terms-content">
+    <h1>Terms of Service</h1>
+    <p>Version: {{ termsVersion }}</p>
+    <div v-html="termsContent"></div>
+  </div>
+
+  <!-- This content NEVER changes, but Vue checks it every render -->
+  <footer>
+    <p>Copyright {{ copyrightYear }} {{ companyName }}</p>
+  </footer>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <!-- GOOD: Rendered once, skipped on all future updates -->
+  <div class="terms-content" v-once>
+    <h1>Terms of Service</h1>
+    <p>Version: {{ termsVersion }}</p>
+    <div v-html="termsContent"></div>
+  </div>
+
+  <!-- v-once tells Vue this never needs to update -->
+  <footer v-once>
+    <p>Copyright {{ copyrightYear }} {{ companyName }}</p>
+  </footer>
+</template>
+
+<script setup>
+// These values are set once at component creation
+const termsVersion = '2.1'
+const termsContent = fetchedTermsHTML
+const copyrightYear = 2024
+const companyName = 'Acme Corp'
+</script>
+```
+
+## v-memo: Conditional Memoization for Lists
+
+**BAD:**
+```vue
+<template>
+  <!-- BAD: All items re-render when selectedId changes -->
+  <div v-for="item in list" :key="item.id">
+    <div :class="{ selected: item.id === selectedId }">
+      <ExpensiveComponent :data="item" />
+    </div>
+  </div>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <!-- GOOD: Items only re-render when their selection state changes -->
+  <div
+    v-for="item in list"
+    :key="item.id"
+    v-memo="[item.id === selectedId]"
+  >
+    <div :class="{ selected: item.id === selectedId }">
+      <ExpensiveComponent :data="item" />
+    </div>
+  </div>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+
+const list = ref([/* many items */])
+const selectedId = ref(null)
+
+// When selectedId changes:
+// - Only the previously-selected item re-renders (selected: true -> false)
+// - Only the newly-selected item re-renders (selected: false -> true)
+// - All other items are SKIPPED (v-memo values unchanged)
+</script>
+```
+
+## v-memo with Multiple Dependencies
+
+```vue
+<template>
+  <!-- Re-render only when item's selection OR editing state changes -->
+  <div
+    v-for="item in items"
+    :key="item.id"
+    v-memo="[item.id === selectedId, item.id === editingId]"
+  >
+    <ItemCard
+      :item="item"
+      :selected="item.id === selectedId"
+      :editing="item.id === editingId"
+    />
+  </div>
+</template>
+
+<script setup>
+const selectedId = ref(null)
+const editingId = ref(null)
+const items = ref([/* ... */])
+</script>
+```
+
+## v-memo with Empty Array = v-once
+
+```vue
+<template>
+  <!-- v-memo="[]" is equivalent to v-once -->
+  <div v-for="item in staticList" :key="item.id" v-memo="[]">
+    {{ item.name }}
+  </div>
+</template>
+```
+
+## When NOT to Use These Directives
+
+```vue
+<template>
+  <!-- DON'T: Content that DOES need to update -->
+  <div v-once>
+    <span>Count: {{ count }}</span>  <!-- count won't update! -->
+  </div>
+
+  <!-- DON'T: When child components have their own reactive state -->
+  <div v-memo="[selected]">
+    <InputField v-model="item.name" />  <!-- v-model won't work properly -->
+  </div>
+
+  <!-- DON'T: When the memoization benefit is minimal -->
+  <span v-once>{{ simpleText }}</span>  <!-- Overhead not worth it -->
+</template>
+```
+
+## Performance Comparison
+
+| Scenario | Without Directive | With v-once/v-memo |
+|----------|-------------------|-------------------|
+| Static header, parent re-renders 100x | Re-evaluated 100x | Evaluated 1x |
+| 1000 items, selection changes | 1000 items re-render | 2 items re-render |
+| Complex child component | Full re-render | Skipped if memoized |
+
+## Debugging Memoized Components
+
+```vue
+<script setup>
+import { onUpdated } from 'vue'
+
+// This won't fire if v-memo prevents update
+onUpdated(() => {
+  console.log('Component updated')
+})
+</script>
+```
diff --git a/.claude/skills/vue-best-practices/references/perf-virtualize-large-lists.md b/.claude/skills/vue-best-practices/references/perf-virtualize-large-lists.md
new file mode 100644
index 0000000..78a8a1c
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/perf-virtualize-large-lists.md
@@ -0,0 +1,187 @@
+---
+title: Virtualize Large Lists to Avoid DOM Overload
+impact: HIGH
+impactDescription: Rendering thousands of list items creates excessive DOM nodes, causing slow renders and high memory usage
+type: efficiency
+tags: [vue3, performance, virtual-list, large-data, dom, optimization]
+---
+
+# Virtualize Large Lists to Avoid DOM Overload
+
+**Impact: HIGH** - Rendering all items in a large list (hundreds or thousands) creates massive amounts of DOM nodes. Each node consumes memory, slows down initial render, and makes updates expensive. List virtualization only renders visible items, dramatically improving performance.
+
+Use a virtualization library when dealing with lists that could exceed 50-100 items, especially if items have complex content.
+
+## Task List
+
+- Identify lists that render more than 50-100 items
+- Install a virtualization library (vue-virtual-scroller, @tanstack/vue-virtual)
+- Replace standard `v-for` with virtualized component
+- Ensure list items have consistent or estimable heights
+- Test with realistic data volumes during development
+
+## Recommended Libraries
+
+| Library | Best For | Notes |
+|---------|----------|-------|
+| `vue-virtual-scroller` | General use, easy setup | Most popular, good defaults |
+| `@tanstack/vue-virtual` | Complex layouts, headless | Framework-agnostic, flexible |
+| `vue-virtual-scroll-grid` | Grid layouts | 2D virtualization |
+| `vueuc/VVirtualList` | Naive UI projects | Part of Naive UI ecosystem |
+
+**BAD:**
+```vue
+<template>
+  <!-- BAD: Renders ALL 10,000 items immediately -->
+  <div class="user-list">
+    <UserCard
+      v-for="user in users"
+      :key="user.id"
+      :user="user"
+    />
+  </div>
+</template>
+
+<script setup>
+import { ref, onMounted } from 'vue'
+import UserCard from './UserCard.vue'
+
+const users = ref([])
+
+onMounted(async () => {
+  // 10,000 DOM nodes created, browser struggles
+  users.value = await fetchAllUsers()
+})
+</script>
+```
+
+**GOOD:**
+```vue
+<template>
+  <!-- GOOD: Only renders ~20 visible items at a time -->
+  <RecycleScroller
+    class="user-list"
+    :items="users"
+    :item-size="80"
+    key-field="id"
+    v-slot="{ item }"
+  >
+    <UserCard :user="item" />
+  </RecycleScroller>
+</template>
+
+<script setup>
+import { ref, onMounted } from 'vue'
+import { RecycleScroller } from 'vue-virtual-scroller'
+import 'vue-virtual-scroller/dist/vue-virtual-scroller.css'
+import UserCard from './UserCard.vue'
+
+const users = ref([])
+
+onMounted(async () => {
+  // 10,000 items in memory, but only ~20 DOM nodes
+  users.value = await fetchAllUsers()
+})
+</script>
+
+<style scoped>
+.user-list {
+  height: 600px; /* Container must have fixed height */
+}
+</style>
+```
+
+## Using @tanstack/vue-virtual
+
+```vue
+<template>
+  <div ref="parentRef" class="list-container">
+    <div
+      :style="{
+        height: `${rowVirtualizer.getTotalSize()}px`,
+        position: 'relative'
+      }"
+    >
+      <div
+        v-for="virtualRow in rowVirtualizer.getVirtualItems()"
+        :key="virtualRow.key"
+        :style="{
+          position: 'absolute',
+          top: 0,
+          left: 0,
+          width: '100%',
+          height: `${virtualRow.size}px`,
+          transform: `translateY(${virtualRow.start}px)`
+        }"
+      >
+        <UserCard :user="users[virtualRow.index]" />
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+import { useVirtualizer } from '@tanstack/vue-virtual'
+
+const users = ref([/* 10,000 users */])
+const parentRef = ref(null)
+
+const rowVirtualizer = useVirtualizer({
+  count: users.value.length,
+  getScrollElement: () => parentRef.value,
+  estimateSize: () => 80,  // Estimated row height
+  overscan: 5  // Render 5 extra items above/below viewport
+})
+</script>
+
+<style scoped>
+.list-container {
+  height: 600px;
+  overflow: auto;
+}
+</style>
+```
+
+## Dynamic Heights with vue-virtual-scroller
+
+```vue
+<template>
+  <!-- For variable height items, use DynamicScroller -->
+  <DynamicScroller
+    :items="messages"
+    :min-item-size="54"
+    key-field="id"
+  >
+    <template #default="{ item, index, active }">
+      <DynamicScrollerItem
+        :item="item"
+        :active="active"
+        :data-index="index"
+      >
+        <ChatMessage :message="item" />
+      </DynamicScrollerItem>
+    </template>
+  </DynamicScroller>
+</template>
+
+<script setup>
+import { DynamicScroller, DynamicScrollerItem } from 'vue-virtual-scroller'
+</script>
+```
+
+## Performance Comparison
+
+| Approach | 100 Items | 1,000 Items | 10,000 Items |
+|----------|-----------|-------------|--------------|
+| Regular v-for | ~100 DOM nodes | ~1,000 DOM nodes | ~10,000 DOM nodes |
+| Virtualized | ~20 DOM nodes | ~20 DOM nodes | ~20 DOM nodes |
+| Initial render | Fast | Slow | Very slow / crashes |
+| Virtualized render | Fast | Fast | Fast |
+
+## When NOT to Virtualize
+
+- Lists under 50 items with simple content
+- Lists where all items must be accessible to screen readers simultaneously
+- Print layouts where all content must render
+- SEO-critical content that must be in initial HTML
diff --git a/.claude/skills/vue-best-practices/references/plugins.md b/.claude/skills/vue-best-practices/references/plugins.md
new file mode 100644
index 0000000..190cee8
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/plugins.md
@@ -0,0 +1,166 @@
+---
+title: Vue Plugin Best Practices
+impact: MEDIUM
+impactDescription: Incorrect plugin structure or injection key strategy causes install failures, collisions, and unsafe APIs
+type: best-practice
+tags: [vue3, plugins, provide-inject, typescript, dependency-injection]
+---
+
+# Vue Plugin Best Practices
+
+**Impact: MEDIUM** - Vue plugins should follow the `app.use()` contract, expose explicit capabilities, and use collision-safe injection keys. This keeps plugin setup predictable and composable across large apps.
+
+## Task List
+
+- Export plugins as an object with `install()` or as an install function
+- Use the `app` instance in `install()` to register components/directives/provides
+- Type plugin APIs with `Plugin` (and options tuple types when needed)
+- Use symbol keys (prefer `InjectionKey<T>`) for `provide/inject` in plugins
+- Add a small typed composable wrapper for required injections to fail fast
+
+## Structure Plugins for `app.use()`
+
+A Vue plugin must be either:
+- An object with `install(app, options?)`
+- A function with the same signature
+
+**BAD:**
+```ts
+const notAPlugin = {
+  doSomething() {}
+}
+
+app.use(notAPlugin)
+```
+
+**GOOD:**
+```ts
+import type { App } from 'vue'
+
+interface PluginOptions {
+  prefix?: string
+  debug?: boolean
+}
+
+const myPlugin = {
+  install(app: App, options: PluginOptions = {}) {
+    const { prefix = 'my', debug = false } = options
+
+    if (debug) {
+      console.log('Installing myPlugin with prefix:', prefix)
+    }
+
+    app.provide('myPlugin', { prefix })
+  }
+}
+
+app.use(myPlugin, { prefix: 'custom', debug: true })
+```
+
+**GOOD:**
+```ts
+import type { App } from 'vue'
+
+function simplePlugin(app: App, options?: { message: string }) {
+  app.config.globalProperties.$greet = () => options?.message ?? 'Hello!'
+}
+
+app.use(simplePlugin, { message: 'Welcome!' })
+```
+
+## Register Capabilities Explicitly in `install()`
+
+Inside `install()`, wire behavior through Vue application APIs:
+- `app.component()` for global components
+- `app.directive()` for global directives
+- `app.provide()` for injectable services and config
+- `app.config.globalProperties` for optional global helpers (sparingly)
+
+**BAD:**
+```ts
+const uselessPlugin = {
+  install(app, options) {
+    const service = createService(options)
+  }
+}
+```
+
+**GOOD:**
+```ts
+const usefulPlugin = {
+  install(app, options) {
+    const service = createService(options)
+    app.provide(serviceKey, service)
+  }
+}
+```
+
+## Type Plugin Contracts
+
+Use Vue's `Plugin` type to keep install signatures and options type-safe.
+
+```ts
+import type { App, Plugin } from 'vue'
+
+interface MyOptions {
+  apiKey: string
+}
+
+const myPlugin: Plugin<[MyOptions]> = {
+  install(app: App, options: MyOptions) {
+    app.provide(apiKeyKey, options.apiKey)
+  }
+}
+```
+
+## Use Symbol Injection Keys in Plugins
+
+String keys can collide (`'http'`, `'config'`, `'i18n'`). Use symbol keys with `InjectionKey<T>` so injections are unique and typed.
+
+**BAD:**
+```ts
+export default {
+  install(app) {
+    app.provide('http', axios)
+    app.provide('config', appConfig)
+  }
+}
+```
+
+**GOOD:**
+```ts
+import type { InjectionKey } from 'vue'
+import type { AxiosInstance } from 'axios'
+
+interface AppConfig {
+  apiUrl: string
+  timeout: number
+}
+
+export const httpKey: InjectionKey<AxiosInstance> = Symbol('http')
+export const configKey: InjectionKey<AppConfig> = Symbol('appConfig')
+
+export default {
+  install(app) {
+    app.provide(httpKey, axios)
+    app.provide(configKey, { apiUrl: '/api', timeout: 5000 })
+  }
+}
+```
+
+## Provide Required Injection Helpers
+
+Wrap required injections in composables that throw clear setup errors.
+
+```ts
+import { inject } from 'vue'
+import { authKey, type AuthService } from '@/injection-keys'
+
+export function useAuth(): AuthService {
+  const auth = inject(authKey)
+  if (!auth) {
+    throw new Error('Auth plugin not installed. Did you forget app.use(authPlugin)?')
+  }
+  return auth
+}
+```
diff --git a/.claude/skills/vue-best-practices/references/reactivity.md b/.claude/skills/vue-best-practices/references/reactivity.md
new file mode 100644
index 0000000..4cf0ad3
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/reactivity.md
@@ -0,0 +1,344 @@
+---
+title: Reactivity Core Patterns (ref, reactive, shallowRef, computed, watch)
+impact: MEDIUM
+impactDescription: Clear reactivity choices keep state predictable and reduce unnecessary updates in Vue 3 apps
+type: efficiency
+tags: [vue3, reactivity, ref, reactive, shallowRef, computed, watch, watchEffect, external-state, best-practice]
+---
+
+# Reactivity Core Patterns (ref, reactive, shallowRef, computed, watch)
+
+**Impact: MEDIUM** - Choose the right reactive primitive first, derive with `computed`, and use watchers only for side effects.
+
+This reference covers the core reactivity decisions for local state, external data, derived values, and effects.
+
+## Task List
+
+- Declare reactive state correctly
+  - Always use `shallowRef()` instead of `ref()` for primitive values
+  - Choose the correct reactive declaration method for objects/arrays/map/set
+- Follow best practices for `reactive`
+  - Avoid destructuring from `reactive()` directly
+  - Watch correctly for `reactive`
+- Follow best practices for `computed`
+  - Prefer `computed` over watcher-assigned derived refs
+  - Keep filtered/sorted derivations out of templates
+  - Use `computed` for reusable class/style logic
+  - Keep computed getters pure (no side effects) and put side effects in watchers
+- Follow best practices for watchers
+  - Use `immediate: true` instead of duplicate initial calls
+  - Clean up async effects for watchers
+
+## Declare reactive state correctly
+
+### Always use `shallowRef()` instead of `ref()` for primitive values (string, number, boolean, null, etc.) for better performance.
+
+**Incorrect:**
+```ts
+import { ref } from 'vue'
+const count = ref(0)
+```
+
+**Correct:**
+```ts
+import { shallowRef } from 'vue'
+const count = shallowRef(0)
+```
+
+### Choose the correct reactive declaration method for objects/arrays/map/set
+
+Use `ref()` when you often **replace the entire value** (`state.value = newObj`) and still want deep reactivity inside it, usually used for:
+
+- Frequently reassigned state (replace fetched object/list, reset to defaults, switch presets).
+- Composable return values where updates happen mostly via `.value` reassignment.
+
+Use `reactive()` when you mainly **mutate properties** and full replacement is uncommon, usually used for:
+
+- “Single state object” patterns (stores/forms): `state.count++`, `state.items.push(...)`, `state.user.name = ...`.
+- Situations where you want to avoid `.value` and update nested fields in place.
+
+```ts
+import { reactive } from 'vue'
+
+const state = reactive({
+  count: 0,
+  user: { name: 'Alice', age: 30 }
+})
+
+state.count++ // ✅ reactive
+state.user.age = 31 // ✅ reactive
+// ❌ avoid replacing the reactive object reference:
+// state = reactive({ count: 1 })
+```
+
+Use `shallowRef()` when the value is **opaque / should not be proxied** (class instances, external library objects, very large nested data) and you only want updates to trigger when you **replace** `state.value` (no deep tracking), usually used for:
+
+- Storing external instances/handles (SDK clients, class instances) without Vue proxying internals.
+- Large data where you update by replacing the root reference (immutable-style updates).
+
+```ts
+import { shallowRef } from 'vue'
+
+const user = shallowRef({ name: 'Alice', age: 30 })
+
+user.value.age = 31 // ❌ not reactive
+user.value = { name: 'Bob', age: 25 } // ✅ triggers update
+```
+
+Use `shallowReactive()` when you want **only top-level properties** reactive; nested objects remain raw, usually used for:
+
+- Container objects where only top-level keys change and nested payloads should stay unmanaged/unproxied.
+- Mixed structures where Vue tracks the wrapper object, but not deeply nested or foreign objects.
+
+```ts
+import { shallowReactive } from 'vue'
+
+const state = shallowReactive({
+  count: 0,
+  user: { name: 'Alice', age: 30 }
+})
+
+state.count++ // ✅ reactive
+state.user.age = 31 // ❌ not reactive
+```
+
+## Best practices for `reactive`
+
+### Avoid destructuring from `reactive()` directly
+
+**BAD:**
+
+```ts
+import { reactive } from 'vue'
+
+const state = reactive({ count: 0 })
+const { count } = state // ❌ disconnected from reactivity
+```
+
+### Watch correctly for reactive
+
+**BAD:**
+
+passing a non-getter value into `watch()`
+
+```ts
+import { reactive, watch } from 'vue'
+
+const state = reactive({ count: 0 })
+
+// ❌ watch expects a getter, ref, reactive object, or array of these
+watch(state.count, () => { /* ... */ })
+```
+
+**GOOD:**
+
+preserve reactivity with `toRefs()` and use a getter for `watch()`
+
+```ts
+import { reactive, toRefs, watch } from 'vue'
+
+const state = reactive({ count: 0 })
+const { count } = toRefs(state) // ✅ count is a ref
+
+watch(count, () => { /* ... */ }) // ✅
+watch(() => state.count, () => { /* ... */ }) // ✅
+```
+
+## Best practices for `computed`
+
+### Prefer `computed` over watcher-assigned derived refs
+
+**BAD:**
+```ts
+import { ref, watchEffect } from 'vue'
+
+const items = ref([{ price: 10 }, { price: 20 }])
+const total = ref(0)
+
+watchEffect(() => {
+  total.value = items.value.reduce((sum, item) => sum + item.price, 0)
+})
+```
+
+**GOOD:**
+```ts
+import { ref, computed } from 'vue'
+
+const items = ref([{ price: 10 }, { price: 20 }])
+const total = computed(() =>
+  items.value.reduce((sum, item) => sum + item.price, 0)
+)
+```
+
+### Keep filtered/sorted derivations out of templates
+
+**BAD:**
+```vue
+<template>
+  <li v-for="item in items.filter(item => item.active)" :key="item.id">
+    {{ item.name }}
+  </li>
+
+  <li v-for="item in getSortedItems()" :key="item.id">
+    {{ item.name }}
+  </li>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+
+const items = ref([
+  { id: 1, name: 'B', active: true },
+  { id: 2, name: 'A', active: false }
+])
+
+function getSortedItems() {
+  return [...items.value].sort((a, b) => a.name.localeCompare(b.name))
+}
+</script>
+```
+
+**GOOD:**
+```vue
+<script setup>
+import { ref, computed } from 'vue'
+
+const items = ref([
+  { id: 1, name: 'B', active: true },
+  { id: 2, name: 'A', active: false }
+])
+
+const visibleItems = computed(() =>
+  items.value
+    .filter(item => item.active)
+    .sort((a, b) => a.name.localeCompare(b.name))
+)
+</script>
+
+<template>
+  <li v-for="item in visibleItems" :key="item.id">
+    {{ item.name }}
+  </li>
+</template>
+```
+
+### Use `computed` for reusable class/style logic
+
+**BAD:**
+```vue
+<template>
+  <button :class="{ btn: true, 'btn-primary': type === 'primary' && !disabled, 'btn-disabled': disabled }">
+    {{ label }}
+  </button>
+</template>
+```
+
+**GOOD:**
+```vue
+<script setup>
+import { computed } from 'vue'
+
+const props = defineProps({
+  type: { type: String, default: 'primary' },
+  disabled: Boolean,
+  label: String
+})
+
+const buttonClasses = computed(() => ({
+  btn: true,
+  [`btn-${props.type}`]: !props.disabled,
+  'btn-disabled': props.disabled
+}))
+</script>
+
+<template>
+  <button :class="buttonClasses">
+    {{ label }}
+  </button>
+</template>
+```
+
+### Keep computed getters pure (no side effects) and put side effects in watchers instead
+
+A computed getter should only derive a value. No mutation, no API calls, no storage writes, no event emits.
+([Reference](https://vuejs.org/guide/essentials/computed.html#best-practices))
+
+**BAD:**
+
+side effects inside computed
+
+```ts
+const count = ref(0)
+
+const doubled = computed(() => {
+  // ❌ side effect
+  if (count.value > 10) console.warn('Too big!')
+  return count.value * 2
+})
+```
+
+**GOOD:**
+
+pure computed + `watch()` for side effects
+
+```ts
+const count = ref(0)
+const doubled = computed(() => count.value * 2)
+
+watch(count, (value) => {
+  if (value > 10) console.warn('Too big!')
+})
+```
+
+## Best practices for watchers
+
+### Use `immediate: true` instead of duplicate initial calls
+
+**BAD:**
+```ts
+import { ref, watch, onMounted } from 'vue'
+
+const userId = ref(1)
+
+function loadUser(id) {
+  // ...
+}
+
+onMounted(() => loadUser(userId.value))
+watch(userId, (id) => loadUser(id))
+```
+
+**GOOD:**
+```ts
+import { ref, watch } from 'vue'
+
+const userId = ref(1)
+
+watch(
+  userId,
+  (id) => loadUser(id),
+  { immediate: true }
+)
+```
+
+### Clean up async effects for watchers
+
+When reacting to rapid changes (search boxes, filters), cancel the previous request.
+
+**GOOD:**
+
+```ts
+const query = ref('')
+const results = ref<string[]>([])
+
+watch(query, async (q, _prev, onCleanup) => {
+  const controller = new AbortController()
+  onCleanup(() => controller.abort())
+
+  const res = await fetch(`/api/search?q=${encodeURIComponent(q)}`, {
+    signal: controller.signal,
+  })
+
+  results.value = await res.json()
+})
+```
diff --git a/.claude/skills/vue-best-practices/references/render-functions.md b/.claude/skills/vue-best-practices/references/render-functions.md
new file mode 100644
index 0000000..b64942c
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/render-functions.md
@@ -0,0 +1,201 @@
+---
+title: Render Function Patterns and Performance
+impact: MEDIUM
+impactDescription: Render functions require explicit patterns for lists, events, v-model, and performance to stay correct and maintainable
+type: best-practice
+tags: [vue3, render-function, h, v-model, directives, performance, jsx]
+---
+
+# Render Function Patterns and Performance
+
+**Impact: MEDIUM** - Render functions are powerful but opt out of template compiler optimizations. Use them intentionally and apply the key patterns below to keep output correct and performant.
+
+## Task List
+
+- Prefer templates; use render functions only when templates cannot express the logic
+- Always add stable keys when rendering lists with `h()`/JSX
+- Use `withModifiers` / `withKeys` for event modifiers
+- Implement `v-model` via `modelValue` + `onUpdate:modelValue`
+- Apply custom directives with `withDirectives`
+- Use functional components for stateless presentational UI
+
+## Prefer templates over render functions
+
+**BAD:**
+```vue
+<script setup>
+import { h, ref } from 'vue'
+
+const count = ref(0)
+const render = () => h('div', `Count: ${count.value}`)
+</script>
+```
+
+**GOOD:**
+```vue
+<script setup>
+import { ref } from 'vue'
+
+const count = ref(0)
+</script>
+
+<template>
+  <div>Count: {{ count }}</div>
+</template>
+```
+
+## Always add keys for list rendering
+
+**BAD:**
+```javascript
+import { h, ref } from 'vue'
+
+export default {
+  setup() {
+    const items = ref([{ id: 1, name: 'Apple' }])
+
+    return () => h('ul',
+      items.value.map(item => h('li', item.name))
+    )
+  }
+}
+```
+
+**GOOD:**
+```javascript
+import { h, ref } from 'vue'
+
+export default {
+  setup() {
+    const items = ref([{ id: 1, name: 'Apple' }])
+
+    return () => h('ul',
+      items.value.map(item => h('li', { key: item.id }, item.name))
+    )
+  }
+}
+```
+
+## Use `withModifiers` / `withKeys` for event modifiers
+
+**BAD:**
+```javascript
+import { h } from 'vue'
+
+export default {
+  setup() {
+    const handleClick = (e) => {
+      e.stopPropagation()
+      e.preventDefault()
+    }
+
+    return () => h('button', { onClick: handleClick }, 'Click')
+  }
+}
+```
+
+**GOOD:**
+```javascript
+import { h, withModifiers, withKeys } from 'vue'
+
+export default {
+  setup() {
+    const handleClick = () => {}
+    const handleEnter = () => {}
+
+    return () => h('div', [
+      h('button', {
+        onClick: withModifiers(handleClick, ['stop', 'prevent'])
+      }, 'Click'),
+      h('input', {
+        onKeyup: withKeys(handleEnter, ['enter'])
+      })
+    ])
+  }
+}
+```
+
+## Implement `v-model` explicitly
+
+**BAD:**
+```javascript
+import { h, ref } from 'vue'
+import CustomInput from './CustomInput.vue'
+
+export default {
+  setup() {
+    const text = ref('')
+    return () => h(CustomInput, { modelValue: text.value })
+  }
+}
+```
+
+**GOOD:**
+```javascript
+import { h, ref } from 'vue'
+import CustomInput from './CustomInput.vue'
+
+export default {
+  setup() {
+    const text = ref('')
+    return () => h(CustomInput, {
+      modelValue: text.value,
+      'onUpdate:modelValue': (value) => { text.value = value }
+    })
+  }
+}
+```
+
+## Use `withDirectives` for custom directives
+
+**BAD:**
+```javascript
+import { h } from 'vue'
+
+const vFocus = { mounted: (el) => el.focus() }
+
+export default {
+  setup() {
+    return () => h('input', { 'v-focus': true })
+  }
+}
+```
+
+**GOOD:**
+```javascript
+import { h, withDirectives } from 'vue'
+
+const vFocus = { mounted: (el) => el.focus() }
+
+export default {
+  setup() {
+    return () => withDirectives(h('input'), [[vFocus]])
+  }
+}
+```
+
+## Prefer functional components for stateless UI
+
+**BAD:**
+```javascript
+import { h } from 'vue'
+
+export default {
+  setup() {
+    return () => h('span', { class: 'badge' }, 'New')
+  }
+}
+```
+
+**GOOD:**
+```javascript
+import { h } from 'vue'
+
+function Badge(props, { slots }) {
+  return h('span', { class: 'badge' }, slots.default?.())
+}
+
+Badge.props = ['variant']
+
+export default Badge
+```
diff --git a/.claude/skills/vue-best-practices/references/sfc.md b/.claude/skills/vue-best-practices/references/sfc.md
new file mode 100644
index 0000000..d1c3981
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/sfc.md
@@ -0,0 +1,310 @@
+---
+title: Single-File Component Structure, Styling, and Template Patterns
+impact: MEDIUM
+impactDescription: Consistent SFC structure and styling choices improve maintainability, tooling support, and render performance
+type: best-practice
+tags: [vue3, sfc, scoped-css, styles, build-tools, performance, template, v-html, v-for, computed, v-if, v-show]
+---
+
+# Single-File Component Structure, Styling, and Template Patterns
+
+**Impact: MEDIUM** - Using SFCs with consistent structure and performant styling keeps components easier to maintain and avoids unnecessary render overhead.
+
+## Task List
+
+- Use `.vue` SFCs instead of separate `.js`/`.ts` and `.css` files for components
+- Colocate template, script, and styles in the same SFC by default
+- Use PascalCase for component names in templates and filenames
+- Prefer component-scoped styles
+- Prefer class selectors (not element selectors) in scoped CSS for performance
+- Access DOM / component refs with `useTemplateRef()` in Vue 3.5+
+- Use camelCase keys in `:style` bindings for consistency and IDE support
+- Use `v-for` and `v-if` correctly
+- Never use `v-html` with untrusted/user-provided content
+- Choose `v-if` vs `v-show` based on toggle frequency and initial render cost
+
+## Colocate template, script, and styles
+
+**BAD:**
+```
+components/
+├── UserCard.vue
+├── UserCard.js
+└── UserCard.css
+```
+
+**GOOD:**
+```vue
+<!-- components/UserCard.vue -->
+<script setup>
+import { computed } from 'vue'
+
+const props = defineProps({
+  user: { type: Object, required: true }
+})
+
+const displayName = computed(() =>
+  `${props.user.firstName} ${props.user.lastName}`
+)
+</script>
+
+<template>
+  <div class="user-card">
+    <h3 class="name">{{ displayName }}</h3>
+  </div>
+</template>
+
+<style scoped>
+.user-card {
+  padding: 1rem;
+}
+
+.name {
+  margin: 0;
+}
+</style>
+```
+
+## Use PascalCase for component names
+
+**BAD:**
+```vue
+<script setup>
+import userProfile from './user-profile.vue'
+</script>
+
+<template>
+  <user-profile :user="currentUser" />
+</template>
+```
+
+**GOOD:**
+```vue
+<script setup>
+import UserProfile from './UserProfile.vue'
+</script>
+
+<template>
+  <UserProfile :user="currentUser" />
+</template>
+```
+
+## Best practices for `<style>` block in SFCs
+
+### Prefer component-scoped styles
+
+- Use `<style scoped>` for styles that belong to a component.
+- Keep **global CSS** in a dedicated file (e.g. `src/assets/main.css`) for resets, typography, tokens, etc.
+- Use `:deep()` sparingly (edge cases only).
+
+**BAD:**
+
+```vue
+<style>
+/* ❌ leaks everywhere */
+button { border-radius: 999px; }
+</style>
+```
+
+**GOOD:**
+
+```vue
+<style scoped>
+.button { border-radius: 999px; }
+</style>
+```
+
+**GOOD:**
+
+```css
+/* src/assets/main.css */
+/* ✅ resets, tokens, typography, app-wide rules */
+:root { --radius: 999px; }
+```
+
+### Use class selectors in scoped CSS
+
+**BAD:**
+```vue
+<template>
+  <article>
+    <h1>{{ title }}</h1>
+    <p>{{ subtitle }}</p>
+  </article>
+</template>
+
+<style scoped>
+article { max-width: 800px; }
+h1 { font-size: 2rem; }
+p { line-height: 1.6; }
+</style>
+```
+
+**GOOD:**
+```vue
+<template>
+  <article class="article">
+    <h1 class="article-title">{{ title }}</h1>
+    <p class="article-subtitle">{{ subtitle }}</p>
+  </article>
+</template>
+
+<style scoped>
+.article { max-width: 800px; }
+.article-title { font-size: 2rem; }
+.article-subtitle { line-height: 1.6; }
+</style>
+```
+
+## Access DOM / component refs with `useTemplateRef()`
+
+For Vue 3.5+: use `useTemplateRef()` to access template refs.
+
+```vue
+<script setup lang="ts">
+import { onMounted, useTemplateRef } from 'vue'
+
+const inputRef = useTemplateRef<HTMLInputElement>('input')
+
+onMounted(() => {
+  inputRef.value?.focus()
+})
+</script>
+
+<template>
+  <input ref="input" />
+</template>
+```
+
+## Use camelCase in `:style` bindings
+
+**BAD:**
+```vue
+<template>
+  <div :style="{ 'font-size': fontSize + 'px', 'background-color': bg }">
+    Content
+  </div>
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <div :style="{ fontSize: fontSize + 'px', backgroundColor: bg }">
+    Content
+  </div>
+</template>
+```
+
+## Use `v-for` and `v-if` correctly
+
+### Always provide a stable `:key`
+
+- Prefer primitive keys (`string | number`).
+- Avoid using objects as keys.
+
+**GOOD:**
+
+```vue
+<li v-for="item in items" :key="item.id">
+  <input v-model="item.text" />
+</li>
+```
+
+### Avoid `v-if` and `v-for` on the same element
+
+It leads to unclear intent and unnecessary work.
+([Reference](https://vuejs.org/guide/essentials/list.html#v-for-with-v-if))
+
+**To filter items**
+**BAD:**
+
+```vue
+<li v-for="user in users" v-if="user.active" :key="user.id">
+  {{ user.name }}
+</li>
+```
+
+**GOOD:**
+
+```vue
+<script setup lang="ts">
+import { computed } from 'vue'
+
+const activeUsers = computed(() => users.value.filter(u => u.active))
+</script>
+
+<template>
+  <li v-for="user in activeUsers" :key="user.id">
+    {{ user.name }}
+  </li>
+</template>
+```
+
+**To conditionally show/hide the entire list**
+**GOOD:**
+
+```vue
+<ul v-if="shouldShowUsers">
+  <li v-for="user in users" :key="user.id">
+    {{ user.name }}
+  </li>
+</ul>
+```
+
+## Never render untrusted HTML with `v-html`
+
+**BAD:**
+```vue
+<template>
+  <!-- DANGEROUS: untrusted input can inject scripts -->
+  <article v-html="userProvidedContent"></article>
+</template>
+```
+
+**GOOD:**
+```vue
+<script setup>
+import { computed } from 'vue'
+import DOMPurify from 'dompurify'
+
+const props = defineProps<{
+  trustedHtml?: string
+  plainText: string
+}>()
+
+const safeHtml = computed(() => DOMPurify.sanitize(props.trustedHtml ?? ''))
+</script>
+
+<template>
+  <!-- Preferred: escaped interpolation -->
+  <p>{{ props.plainText }}</p>
+
+  <!-- Only for trusted/sanitized HTML -->
+  <article v-html="safeHtml"></article>
+</template>
+```
+
+## Choose `v-if` vs `v-show` by toggle behavior
+
+**BAD:**
+```vue
+<template>
+  <!-- Frequent toggles with v-if cause repeated mount/unmount -->
+  <ComplexPanel v-if="isPanelOpen" />
+
+  <!-- Rarely shown content with v-show pays initial render cost -->
+  <AdminPanel v-show="isAdmin" />
+</template>
+```
+
+**GOOD:**
+```vue
+<template>
+  <!-- Frequent toggles: keep in DOM, toggle display -->
+  <ComplexPanel v-show="isPanelOpen" />
+
+  <!-- Rare condition: lazy render only when true -->
+  <AdminPanel v-if="isAdmin" />
+</template>
+```
diff --git a/.claude/skills/vue-best-practices/references/state-management.md b/.claude/skills/vue-best-practices/references/state-management.md
new file mode 100644
index 0000000..02423ab
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/state-management.md
@@ -0,0 +1,135 @@
+---
+title: State Management Strategy
+impact: HIGH
+impactDescription: Choosing the wrong store pattern can cause SSR request leaks, brittle mutation flows, and poor scaling
+type: best-practice
+tags: [vue3, state-management, pinia, composables, ssr, vueuse]
+---
+
+# State Management Strategy
+
+**Impact: HIGH** - Use the lightest state solution that fits your app architecture. SPA-only apps can use lightweight global composables, while SSR/Nuxt apps should default to Pinia for request-safe isolation and predictable tooling.
+
+## Task List
+
+- Keep state local first, then promote to shared/global only when needed
+- Use singleton composables only in non-SSR applications
+- Expose global state as readonly and mutate through explicit actions
+- Prefer Pinia for SSR/Nuxt, large apps, and advanced debugging/plugin needs
+- Avoid exporting mutable module-level reactive state directly
+
+## Choose the Lightest Store Approach
+
+- **Feature composable:** Default for reusable logic with local/feature-level state.
+- **Singleton composable or VueUse `createGlobalState`:** Small non-SSR apps needing shared app state.
+- **Pinia:** SSR/Nuxt apps, medium-to-large apps, and cases requiring DevTools, plugins, or action tracing.
+
+## Avoid Exporting Mutable Module State
+
+**BAD:**
+```ts
+// store/cart.ts
+import { reactive } from 'vue'
+
+export const cart = reactive({
+  items: [] as Array<{ id: string; qty: number }>
+})
+```
+
+**GOOD:**
+```ts
+// composables/useCartStore.ts
+import { reactive, readonly } from 'vue'
+
+let _store: ReturnType<typeof createCartStore> | null = null
+
+function createCartStore() {
+  const state = reactive({
+    items: [] as Array<{ id: string; qty: number }>
+  })
+
+  function addItem(id: string, qty = 1) {
+    const existing = state.items.find((item) => item.id === id)
+    if (existing) {
+      existing.qty += qty
+      return
+    }
+    state.items.push({ id, qty })
+  }
+
+  return {
+    state: readonly(state),
+    addItem
+  }
+}
+
+export function useCartStore() {
+  if (!_store) _store = createCartStore()
+  return _store
+}
+```
+
+## Do Not Use Runtime Singletons in SSR
+
+Module singletons live for the runtime lifetime. In SSR this can leak state between requests.
+
+**BAD:**
+```ts
+// shared singleton reused across requests
+const cartStore = useCartStore()
+
+export function useServerCart() {
+  return cartStore
+}
+```
+
+**GOOD:**
+
+> `pinia` dependency required.
+
+```ts
+// stores/cart.ts
+import { defineStore } from 'pinia'
+
+export const useCartStore = defineStore('cart', {
+  state: () => ({
+    items: [] as Array<{ id: string; qty: number }>
+  }),
+  actions: {
+    addItem(id: string, qty = 1) {
+      const existing = this.items.find((item) => item.id === id)
+      if (existing) {
+        existing.qty += qty
+        return
+      }
+      this.items.push({ id, qty })
+    }
+  }
+})
+```
+
+## Use `createGlobalState` for Small SPA Global State
+
+> `@vueuse/core` dependency required.
+
+If the app is non-SSR and already uses VueUse, `createGlobalState` removes singleton boilerplate.
+
+```ts
+import { createGlobalState } from '@vueuse/core'
+import { computed, ref } from 'vue'
+
+export const useAuthState = createGlobalState(() => {
+  const token = ref<string | null>(null)
+  const isAuthenticated = computed(() => token.value !== null)
+
+  function setToken(next: string | null) {
+    token.value = next
+  }
+
+  return {
+    token,
+    isAuthenticated,
+    setToken
+  }
+})
+```
diff --git a/.claude/skills/vue-best-practices/references/updated-hook-performance.md b/.claude/skills/vue-best-practices/references/updated-hook-performance.md
new file mode 100644
index 0000000..6375e86
--- /dev/null
+++ b/.claude/skills/vue-best-practices/references/updated-hook-performance.md
@@ -0,0 +1,187 @@
+---
+title: Avoid Expensive Operations in Updated Hook
+impact: MEDIUM
+impactDescription: Heavy computations in updated hook cause performance bottlenecks and potential infinite loops
+type: capability
+tags: [vue3, vue2, lifecycle, updated, performance, optimization, reactivity]
+---
+
+# Avoid Expensive Operations in Updated Hook
+
+**Impact: MEDIUM** - The `updated` hook runs after every reactive state change that causes a re-render. Placing expensive operations, API calls, or state mutations here can cause severe performance degradation, infinite loops, and dropped frames below the optimal 60fps threshold.
+
+Use `updated`/`onUpdated` sparingly for post-DOM-update operations that cannot be handled by watchers or computed properties. For most reactive data handling, prefer watchers (`watch`/`watchEffect`) which provide more control over what triggers the callback.
+
+## Task List
+
+- Never perform API calls in updated hook
+- Never mutate reactive state inside updated (causes infinite loops)
+- Use conditional checks to verify updates are relevant before acting
+- Prefer `watch` or `watchEffect` for reacting to specific data changes
+- Use throttling/debouncing if updated operations are expensive
+- Reserve updated for low-level DOM synchronization tasks
+
+**BAD:**
+```javascript
+// BAD: API call in updated - fires on every re-render
+export default {
+  data() {
+    return { items: [], lastUpdate: null }
+  },
+  updated() {
+    // This runs after every single state change!
+    fetch('/api/sync', {
+      method: 'POST',
+      body: JSON.stringify(this.items)
+    })
+  }
+}
+```
+
+```javascript
+// BAD: State mutation in updated - infinite loop
+export default {
+  data() {
+    return { renderCount: 0 }
+  },
+  updated() {
+    // This causes another update, which triggers updated again!
+    this.renderCount++ // Infinite loop
+  }
+}
+```
+
+```javascript
+// BAD: Heavy computation on every update
+export default {
+  updated() {
+    // Expensive operation runs on every keystroke, every state change
+    this.processedData = this.heavyComputation(this.rawData)
+    this.analytics = this.calculateMetrics(this.allData)
+  }
+}
+```
+
+**GOOD:**
+```javascript
+import debounce from 'lodash-es/debounce'
+
+// GOOD: Use watcher for specific data changes
+export default {
+  data() {
+    return { items: [] }
+  },
+  watch: {
+    // Only fires when items actually changes
+    items: {
+      handler(newItems) {
+        this.syncToServer(newItems)
+      },
+      deep: true
+    }
+  },
+  methods: {
+    syncToServer: debounce(function(items) {
+      fetch('/api/sync', {
+        method: 'POST',
+        body: JSON.stringify(items)
+      })
+    }, 500)
+  }
+}
+```
+
+```vue
+<!-- GOOD: Composition API with targeted watchers -->
+<script setup>
+import { ref, watch, onUpdated } from 'vue'
+import { useDebounceFn } from '@vueuse/core'
+
+const items = ref([])
+const scrollContainer = ref(null)
+
+// Watch specific data - not all updates
+watch(items, (newItems) => {
+  syncToServer(newItems)
+}, { deep: true })
+
+const syncToServer = useDebounceFn((items) => {
+  fetch('/api/sync', { method: 'POST', body: JSON.stringify(items) })
+}, 500)
+
+// Only use onUpdated for DOM synchronization
+onUpdated(() => {
+  // Scroll to bottom only if content changed height
+  if (scrollContainer.value) {
+    scrollContainer.value.scrollTop = scrollContainer.value.scrollHeight
+  }
+})
+</script>
+```
+
+```javascript
+// GOOD: Conditional check in updated hook
+export default {
+  data() {
+    return {
+      content: '',
+      lastSyncedContent: ''
+    }
+  },
+  updated() {
+    // Only act if specific condition is met
+    if (this.content !== this.lastSyncedContent) {
+      this.syncContent()
+      this.lastSyncedContent = this.content
+    }
+  },
+  methods: {
+    syncContent: debounce(function() {
+      // Sync logic
+    }, 300)
+  }
+}
+```
+
+## Valid Use Cases for Updated Hook
+
+```javascript
+// GOOD: Low-level DOM synchronization
+export default {
+  updated() {
+    // Sync third-party library with Vue's DOM
+    this.thirdPartyWidget.refresh()
+
+    // Update scroll position after content change
+    this.$nextTick(() => {
+      this.maintainScrollPosition()
+    })
+  }
+}
+```
+
+## Prefer Computed Properties for Derived Data
+
+```javascript
+// BAD: Calculating derived data in updated
+export default {
+  data() {
+    return { numbers: [1, 2, 3, 4, 5] }
+  },
+  updated() {
+    this.sum = this.numbers.reduce((a, b) => a + b, 0) // Causes another update!
+  }
+}
+
+// GOOD: Use computed property instead
+export default {
+  data() {
+    return { numbers: [1, 2, 3, 4, 5] }
+  },
+  computed: {
+    sum() {
+      return this.numbers.reduce((a, b) => a + b, 0)
+    }
+  }
+}
+```
diff --git a/.claude/skills/vue-testing-best-practices/LICENSE.md b/.claude/skills/vue-testing-best-practices/LICENSE.md
new file mode 100644
index 0000000..3f08a54
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 hyf0, SerKo <https://github.com/serkodev>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/.claude/skills/vue-testing-best-practices/SKILL.md b/.claude/skills/vue-testing-best-practices/SKILL.md
new file mode 100644
index 0000000..c600b52
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/SKILL.md
@@ -0,0 +1,29 @@
+---
+name: vue-testing-best-practices
+version: 1.0.0
+license: MIT
+author: github.com/vuejs-ai
+description: Use for Vue.js testing. Covers Vitest, Vue Test Utils, component testing, mocking, testing patterns, and Playwright for E2E testing.
+---
+
+Vue.js testing best practices, patterns, and common gotchas.
+
+### Testing
+- Setting up test infrastructure for Vue 3 projects → See [testing-vitest-recommended-for-vue](reference/testing-vitest-recommended-for-vue.md)
+- Tests keep breaking when refactoring component internals → See [testing-component-blackbox-approach](reference/testing-component-blackbox-approach.md)
+- Tests fail intermittently with race conditions → See [testing-async-await-flushpromises](reference/testing-async-await-flushpromises.md)
+- Composables using lifecycle hooks or inject fail to test → See [testing-composables-helper-wrapper](reference/testing-composables-helper-wrapper.md)
+- Getting "injection Symbol(pinia) not found" errors in tests → See [testing-pinia-store-setup](reference/testing-pinia-store-setup.md)
+- Components with async setup won't render in tests → See [testing-suspense-async-components](reference/testing-suspense-async-components.md)
+- Snapshot tests keep passing despite broken functionality → See [testing-no-snapshot-only](reference/testing-no-snapshot-only.md)
+- Choosing end-to-end testing framework for Vue apps → See [testing-e2e-playwright-recommended](reference/testing-e2e-playwright-recommended.md)
+- Tests need to verify computed styles or real DOM events → See [testing-browser-vs-node-runners](reference/testing-browser-vs-node-runners.md)
+- Testing components created with defineAsyncComponent fails → See [async-component-testing](reference/async-component-testing.md)
+- Teleported modal content can't be found in wrapper queries → See [teleport-testing-complexity](reference/teleport-testing-complexity.md)
+
+## Reference
+
+- [Vue.js Testing Guide](https://vuejs.org/guide/scaling-up/testing)
+- [Vue Test Utils](https://test-utils.vuejs.org/)
+- [Vitest Documentation](https://vitest.dev/)
+- [Playwright Documentation](https://playwright.dev/)
diff --git a/.claude/skills/vue-testing-best-practices/SYNC.md b/.claude/skills/vue-testing-best-practices/SYNC.md
new file mode 100644
index 0000000..6e968f2
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/SYNC.md
@@ -0,0 +1,5 @@
+# Sync Info
+
+- **Source:** `vendor/vuejs-ai/skills/vue-testing-best-practices`
+- **Git SHA:** `f3dd1bf4d3ac78331bdc903e4519d561c538ca6a`
+- **Synced:** 2026-03-16
diff --git a/.claude/skills/vue-testing-best-practices/reference/async-component-testing.md b/.claude/skills/vue-testing-best-practices/reference/async-component-testing.md
new file mode 100644
index 0000000..a4d2c49
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/reference/async-component-testing.md
@@ -0,0 +1,163 @@
+---
+title: Use flushPromises for Testing Async Components
+impact: HIGH
+impactDescription: Without awaiting async operations, tests make assertions before the component has rendered, causing false negatives
+type: gotcha
+tags: [vue3, testing, async, defineAsyncComponent, flushPromises, vitest]
+---
+
+# Use flushPromises for Testing Async Components
+
+**Impact: HIGH** - When testing async components created with `defineAsyncComponent`, you must use `await flushPromises()` to ensure the component has loaded before making assertions. Vue updates asynchronously, so tests that don't account for this will make assertions before the component has rendered.
+
+## Task Checklist
+
+- [ ] Use `async/await` in test functions for async components
+- [ ] Call `await flushPromises()` after mounting async components
+- [ ] Test loading states by making assertions before `flushPromises()`
+- [ ] Test error states using rejected promises in `defineAsyncComponent`
+- [ ] Use `trigger()` with `await` as it returns a Promise
+
+**Incorrect:**
+
+```javascript
+import { mount } from '@vue/test-utils'
+import { defineAsyncComponent } from 'vue'
+
+const AsyncWidget = defineAsyncComponent(() =>
+  import('./Widget.vue')
+)
+
+test('renders async component', () => {
+  const wrapper = mount(AsyncWidget)
+
+  // FAILS: Component hasn't loaded yet
+  expect(wrapper.text()).toContain('Widget Content')
+})
+```
+
+**Correct:**
+
+```javascript
+import { mount, flushPromises } from '@vue/test-utils'
+import { defineAsyncComponent, nextTick } from 'vue'
+
+const AsyncWidget = defineAsyncComponent(() =>
+  import('./Widget.vue')
+)
+
+test('renders async component', async () => {
+  const wrapper = mount(AsyncWidget)
+
+  // Wait for async component to load
+  await flushPromises()
+
+  expect(wrapper.text()).toContain('Widget Content')
+})
+
+test('shows loading state initially', async () => {
+  const AsyncWithLoading = defineAsyncComponent({
+    loader: () => import('./Widget.vue'),
+    loadingComponent: { template: '<div>Loading...</div>' },
+    delay: 0
+  })
+
+  const wrapper = mount(AsyncWithLoading)
+
+  // Check loading state immediately
+  expect(wrapper.text()).toContain('Loading...')
+
+  // Wait for component to load
+  await flushPromises()
+
+  // Check final state
+  expect(wrapper.text()).toContain('Widget Content')
+})
+```
+
+## Testing with Suspense
+
+```javascript
+import { mount, flushPromises } from '@vue/test-utils'
+import { Suspense, defineAsyncComponent, h } from 'vue'
+
+const AsyncWidget = defineAsyncComponent(() =>
+  import('./Widget.vue')
+)
+
+test('renders async component with Suspense', async () => {
+  const wrapper = mount({
+    components: { AsyncWidget },
+    template: `
+      <Suspense>
+        <AsyncWidget />
+        <template #fallback>
+          <div>Loading...</div>
+        </template>
+      </Suspense>
+    `
+  })
+
+  // Initially shows fallback
+  expect(wrapper.text()).toContain('Loading...')
+
+  // Wait for async resolution
+  await flushPromises()
+
+  // Now shows actual content
+  expect(wrapper.text()).toContain('Widget Content')
+})
+```
+
+## Testing Error States
+
+```javascript
+import { mount, flushPromises } from '@vue/test-utils'
+import { defineAsyncComponent } from 'vue'
+
+test('shows error component on load failure', async () => {
+  const AsyncWithError = defineAsyncComponent({
+    loader: () => Promise.reject(new Error('Failed to load')),
+    errorComponent: { template: '<div>Error loading component</div>' }
+  })
+
+  const wrapper = mount(AsyncWithError)
+
+  await flushPromises()
+
+  expect(wrapper.text()).toContain('Error loading component')
+})
+```
+
+## Utilities Reference
+
+| Utility | Purpose |
+|---------|---------|
+| `await flushPromises()` | Resolves all pending promises |
+| `await nextTick()` | Waits for Vue's next DOM update cycle |
+| `await wrapper.trigger('click')` | Triggers event and waits for update |
+
+## Dynamic Import Handling
+
+**Note:** Dynamic imports (`import('./File.vue')`) may require additional handling beyond `flushPromises()` in test environments. Test runners like Vitest handle module resolution differently than runtime bundlers, which can cause timing issues with dynamic imports. If `flushPromises()` alone doesn't resolve the component, consider:
+
+- Mocking the dynamic import to return the component synchronously
+- Using multiple `await flushPromises()` calls in sequence
+- Wrapping assertions in `waitFor()` or retry utilities
+- Configuring your test runner's module resolution settings
+
+```javascript
+// If flushPromises() isn't sufficient, mock the import
+vi.mock('./Widget.vue', () => ({
+  default: { template: '<div>Widget Content</div>' }
+}))
+
+// Or use multiple flush calls for nested async operations
+await flushPromises()
+await flushPromises()
+```
+
+## References
+
+- [Vue Test Utils - Asynchronous Behavior](https://test-utils.vuejs.org/guide/advanced/async-suspense)
+- [Vue.js Async Components Documentation](https://vuejs.org/guide/components/async)
diff --git a/.claude/skills/vue-testing-best-practices/reference/teleport-testing-complexity.md b/.claude/skills/vue-testing-best-practices/reference/teleport-testing-complexity.md
new file mode 100644
index 0000000..887836f
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/reference/teleport-testing-complexity.md
@@ -0,0 +1,158 @@
+---
+title: Teleported Content Requires Special Testing Approach
+impact: MEDIUM
+impactDescription: Vue Test Utils cannot find teleported content using standard wrapper.find() methods
+type: gotcha
+tags: [vue3, teleport, testing, vue-test-utils]
+---
+
+# Teleported Content Requires Special Testing Approach
+
+**Impact: MEDIUM** - Vue Test Utils scopes queries to the mounted component. Teleported content renders outside the component's DOM tree, so `wrapper.find()` cannot locate it. This leads to failing tests and confusion.
+
+## Task Checklist
+
+- [ ] Stub Teleport in unit tests to keep content in component tree
+- [ ] Use `document.body` queries for integration tests with real Teleport
+- [ ] Consider using `getComponent()` instead of DOM queries for teleported components
+
+**Problem - Standard Testing Fails:**
+```vue
+<!-- Modal.vue -->
+<template>
+  <button @click="open = true">Open</button>
+  <Teleport to="body">
+    <div v-if="open" class="modal" data-testid="modal">
+      <input type="text" data-testid="modal-input" />
+    </div>
+  </Teleport>
+</template>
+```
+
+```ts
+// Modal.spec.ts - BROKEN
+import { mount } from '@vue/test-utils'
+import Modal from './Modal.vue'
+
+test('modal input exists', async () => {
+  const wrapper = mount(Modal)
+  await wrapper.find('button').trigger('click')
+
+  // FAILS: Teleported content is not in wrapper's DOM tree
+  expect(wrapper.find('[data-testid="modal-input"]').exists()).toBe(true)
+})
+```
+
+**Solution 1 - Stub Teleport:**
+```ts
+import { mount } from '@vue/test-utils'
+import Modal from './Modal.vue'
+
+test('modal input exists', async () => {
+  const wrapper = mount(Modal, {
+    global: {
+      stubs: {
+        // Stub teleport to render content inline
+        Teleport: true
+      }
+    }
+  })
+
+  await wrapper.find('button').trigger('click')
+
+  // Works: Content renders inside wrapper
+  expect(wrapper.find('[data-testid="modal-input"]').exists()).toBe(true)
+})
+```
+
+**Solution 2 - Query Document Body:**
+```ts
+import { mount } from '@vue/test-utils'
+import Modal from './Modal.vue'
+
+test('modal renders to body', async () => {
+  const wrapper = mount(Modal, {
+    attachTo: document.body  // Required for Teleport to work
+  })
+
+  await wrapper.find('button').trigger('click')
+
+  // Query the actual DOM
+  const modal = document.querySelector('[data-testid="modal"]')
+  expect(modal).toBeTruthy()
+
+  const input = document.querySelector('[data-testid="modal-input"]')
+  expect(input).toBeTruthy()
+
+  // Cleanup
+  wrapper.unmount()
+})
+```
+
+**Solution 3 - Custom Teleport Stub with Content Access:**
+```ts
+import { mount, config } from '@vue/test-utils'
+import { h, Teleport } from 'vue'
+import Modal from './Modal.vue'
+
+// Custom stub that renders content in a testable way
+const TeleportStub = {
+  setup(props, { slots }) {
+    return () => h('div', { class: 'teleport-stub' }, slots.default?.())
+  }
+}
+
+test('modal with custom stub', async () => {
+  const wrapper = mount(Modal, {
+    global: {
+      stubs: {
+        Teleport: TeleportStub
+      }
+    }
+  })
+
+  await wrapper.find('button').trigger('click')
+
+  // Content is inside .teleport-stub
+  expect(wrapper.find('.teleport-stub [data-testid="modal-input"]').exists()).toBe(true)
+})
+```
+
+## Testing Vue Final Modal and UI Libraries
+
+Libraries like Vue Final Modal use Teleport internally, causing test failures:
+
+```ts
+// Problem: Vue Final Modal teleports to body
+import { VueFinalModal } from 'vue-final-modal'
+
+test('modal content', async () => {
+  const wrapper = mount(MyComponent, {
+    global: {
+      stubs: {
+        // Stub the modal component to avoid teleport issues
+        VueFinalModal: true
+      }
+    }
+  })
+})
+```
+
+## E2E Testing (Cypress, Playwright)
+
+E2E tests query the real DOM, so Teleport works naturally:
+
+```ts
+// Cypress
+it('opens modal', () => {
+  cy.visit('/page-with-modal')
+  cy.get('button').click()
+
+  // Works: Cypress queries the real DOM
+  cy.get('[data-testid="modal"]').should('be.visible')
+})
+```
+
+## Reference
+- [Vue Test Utils - Teleport](https://test-utils.vuejs.org/guide/advanced/teleport)
+- [Vue Test Utils - Stubs](https://test-utils.vuejs.org/guide/advanced/stubs-shallow-mount)
diff --git a/.claude/skills/vue-testing-best-practices/reference/testing-async-await-flushpromises.md b/.claude/skills/vue-testing-best-practices/reference/testing-async-await-flushpromises.md
new file mode 100644
index 0000000..597d9c8
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/reference/testing-async-await-flushpromises.md
@@ -0,0 +1,175 @@
+---
+title: Properly Handle Async Updates with nextTick and flushPromises
+impact: HIGH
+impactDescription: Race conditions and flaky tests occur when async DOM updates or API calls complete after assertions run
+type: gotcha
+tags: [vue3, testing, async, flushPromises, nextTick, vitest, vue-test-utils, race-condition]
+---
+
+# Properly Handle Async Updates with nextTick and flushPromises
+
+**Impact: HIGH** - Vue updates the DOM asynchronously. Without properly awaiting these updates, tests may assert against stale DOM state, causing intermittent failures and false negatives.
+
+Use `await` with triggers and `setValue`, use `nextTick` for reactive updates, and use `flushPromises` for external async operations like API calls.
+
+## Task Checklist
+
+- [ ] Always await `trigger()` and `setValue()` calls
+- [ ] Use `await nextTick()` after programmatic reactive state changes
+- [ ] Use `await flushPromises()` for external async operations (API calls, timers)
+- [ ] Don't chain multiple `nextTick` calls - use `flushPromises` instead
+- [ ] Consider using `waitFor` from testing-library for polling assertions
+
+**Incorrect:**
+```javascript
+import { mount } from '@vue/test-utils'
+import SearchComponent from './SearchComponent.vue'
+
+// BAD: Not awaiting trigger - assertion runs before DOM updates
+test('search filters results', () => {
+  const wrapper = mount(SearchComponent)
+
+  wrapper.find('input').setValue('vue')  // Missing await!
+  wrapper.find('button').trigger('click')  // Missing await!
+
+  // This assertion likely fails - DOM hasn't updated yet
+  expect(wrapper.findAll('.result').length).toBe(3)
+})
+
+// BAD: Using nextTick for API calls
+test('loads data from API', async () => {
+  const wrapper = mount(DataLoader)
+
+  await nextTick()  // This won't wait for the API call!
+
+  // Assertion runs before fetch completes
+  expect(wrapper.find('.data').text()).toBe('Loaded data')
+})
+```
+
+**Correct:**
+```javascript
+import { mount, flushPromises } from '@vue/test-utils'
+import { nextTick } from 'vue'
+import SearchComponent from './SearchComponent.vue'
+import DataLoader from './DataLoader.vue'
+
+// CORRECT: Await trigger and setValue
+test('search filters results', async () => {
+  const wrapper = mount(SearchComponent)
+
+  await wrapper.find('input').setValue('vue')
+  await wrapper.find('button').trigger('click')
+
+  expect(wrapper.findAll('.result').length).toBe(3)
+})
+
+// CORRECT: Use flushPromises for API calls
+test('loads data from API', async () => {
+  const wrapper = mount(DataLoader)
+
+  // Wait for all pending promises to resolve
+  await flushPromises()
+
+  expect(wrapper.find('.data').text()).toBe('Loaded data')
+})
+```
+
+## When to Use Each Method
+
+### `await trigger()` / `await setValue()` - User Interactions
+```javascript
+// These methods return nextTick internally
+await wrapper.find('button').trigger('click')
+await wrapper.find('input').setValue('new value')
+await wrapper.find('form').trigger('submit')
+```
+
+### `await nextTick()` - Programmatic Reactive Updates
+```javascript
+import { nextTick } from 'vue'
+
+test('reflects programmatic state changes', async () => {
+  const wrapper = mount(Counter)
+
+  // Direct state modification (when testing with exposed internals)
+  wrapper.vm.count = 5
+
+  await nextTick()  // Wait for Vue to update DOM
+
+  expect(wrapper.find('.count').text()).toBe('5')
+})
+```
+
+### `await flushPromises()` - External Async Operations
+```javascript
+import { flushPromises } from '@vue/test-utils'
+
+test('displays fetched data', async () => {
+  const wrapper = mount(UserProfile, {
+    props: { userId: 1 }
+  })
+
+  // Wait for component's API call to complete
+  await flushPromises()
+
+  expect(wrapper.find('.username').text()).toBe('John')
+})
+
+// Sometimes you need multiple flushPromises for chained async operations
+test('processes data after fetch', async () => {
+  const wrapper = mount(DataProcessor)
+
+  await flushPromises()  // Wait for fetch
+  await flushPromises()  // Wait for processing triggered by fetch
+
+  expect(wrapper.find('.processed').exists()).toBe(true)
+})
+```
+
+## Common Pattern: Combining Methods
+```javascript
+test('submits form and shows success', async () => {
+  const wrapper = mount(ContactForm)
+
+  // Fill form (awaiting each interaction)
+  await wrapper.find('#name').setValue('John')
+  await wrapper.find('#email').setValue('john@example.com')
+
+  // Submit form
+  await wrapper.find('form').trigger('submit')
+
+  // Wait for API submission to complete
+  await flushPromises()
+
+  // Assert success state
+  expect(wrapper.find('.success-message').exists()).toBe(true)
+})
+```
+
+## Testing with MSW or Mock APIs
+```javascript
+import { flushPromises } from '@vue/test-utils'
+import { rest } from 'msw'
+import { setupServer } from 'msw/node'
+
+const server = setupServer(
+  rest.get('/api/user', (req, res, ctx) => {
+    return res(ctx.json({ name: 'John' }))
+  })
+)
+
+test('displays user data', async () => {
+  const wrapper = mount(UserCard)
+
+  // MSW might require multiple flushPromises
+  await flushPromises()
+  await flushPromises()
+
+  expect(wrapper.find('.name').text()).toBe('John')
+})
+```
+
+## Reference
+- [Vue Test Utils - Asynchronous Behavior](https://test-utils.vuejs.org/guide/advanced/async-suspense)
+- [Vue.js Testing Guide](https://vuejs.org/guide/scaling-up/testing)
diff --git a/.claude/skills/vue-testing-best-practices/reference/testing-browser-vs-node-runners.md b/.claude/skills/vue-testing-best-practices/reference/testing-browser-vs-node-runners.md
new file mode 100644
index 0000000..a112a42
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/reference/testing-browser-vs-node-runners.md
@@ -0,0 +1,208 @@
+---
+title: Choose Browser-Based Runner for Style and DOM Event Testing
+impact: MEDIUM
+impactDescription: Node-based runners cannot test real CSS behavior, native DOM events, cookies, or computed styles
+type: capability
+tags: [vue3, testing, component-testing, vitest, browser, jsdom]
+---
+
+# Choose Browser-Based Runner for Style and DOM Event Testing
+
+**Impact: MEDIUM** - Node-based test runners (Vitest with jsdom/happy-dom) simulate the DOM but cannot test real CSS rendering, native browser events, cookies, computed styles, or cross-browser behavior. Use browser-based runners when these matter.
+
+Use Vitest for most component tests (fast), but use Vitest Browser Mode when testing visual/DOM-dependent features.
+
+## Task Checklist
+
+- [ ] Use Vitest (node) for logic-focused component tests
+- [ ] Use Vitest Browser Mode for style-dependent tests
+- [ ] Use Vitest Browser Mode for native events (focus, drag, resize)
+- [ ] Use Vitest Browser Mode for cookies and computed CSS styles
+- [ ] Accept slower speed tradeoff for browser accuracy
+
+## When to Use Each Approach
+
+### Node-Based Runner (Vitest + happy-dom/jsdom)
+Best for:
+- Pure logic testing
+- State management
+- Event emission
+- Props/slots behavior
+- Most component interactions
+- Fast CI/CD pipelines
+
+```javascript
+// vitest.config.js
+export default defineConfig({
+  test: {
+    environment: 'happy-dom',  // or 'jsdom'
+  }
+})
+```
+
+```javascript
+// Fast but limited - fine for most tests
+test('button emits click event', async () => {
+  const wrapper = mount(Button)
+  await wrapper.trigger('click')
+  expect(wrapper.emitted('click')).toBeTruthy()
+})
+```
+
+### Vitest Browser Mode
+Required for:
+- CSS computed styles verification
+- CSS transitions/animations
+- Real focus/blur behavior
+- Drag and drop
+- Cookie operations
+- Viewport-dependent behavior
+- Cross-browser validation
+
+## Vitest Browser Mode Setup
+
+```bash
+npm install -D @vitest/browser playwright
+```
+
+```javascript
+// vitest.config.js
+import { defineConfig } from 'vitest/config'
+
+export default defineConfig({
+  test: {
+    browser: {
+      enabled: true,
+      name: 'chromium',
+      provider: 'playwright',
+    },
+  },
+})
+```
+
+```javascript
+// Button.browser.test.js
+import { render } from 'vitest-browser-vue'
+import Button from './Button.vue'
+
+test('has correct hover styling', async () => {
+  const { getByRole } = render(Button, { props: { label: 'Click me' } })
+
+  const button = getByRole('button')
+
+  // Check initial style
+  await expect.element(button).toHaveStyle({
+    backgroundColor: 'rgb(59, 130, 246)'  // blue
+  })
+})
+
+test('maintains focus after click', async () => {
+  const { getByRole } = render(Button)
+
+  const button = getByRole('button')
+  await button.click()
+
+  await expect.element(button).toHaveFocus()
+})
+```
+
+## Examples: What Each Runner Can/Cannot Test
+
+### Styles - Browser Required
+```javascript
+// Node runner: CANNOT verify actual CSS
+test('danger button has red background', () => {
+  const wrapper = mount(Button, { props: { variant: 'danger' } })
+  // This only checks class exists, not actual color
+  expect(wrapper.classes()).toContain('bg-red-500')
+})
+
+// Vitest Browser Mode: CAN verify computed styles
+test('danger button renders red', async () => {
+  const { getByRole } = render(Button, { props: { variant: 'danger' } })
+  await expect.element(getByRole('button')).toHaveStyle({
+    backgroundColor: 'rgb(239, 68, 68)'
+  })
+})
+```
+
+### Computed CSS Styles - Browser Required
+```javascript
+// Node runner: CANNOT get real computed styles
+test('button has correct padding', () => {
+  const wrapper = mount(Button)
+  // getComputedStyle returns empty/default values in jsdom
+  const style = window.getComputedStyle(wrapper.element)
+  // style.padding will be empty string, not actual computed value
+})
+
+// Vitest Browser Mode: Real computed styles
+test('button has correct padding', async () => {
+  const { getByRole } = render(Button)
+  const button = getByRole('button')
+
+  await expect.element(button).toHaveStyle({
+    padding: '12px 24px'
+  })
+})
+```
+
+### Native Events - Browser Required
+```javascript
+// Node runner: Synthetic events only
+test('handles drag and drop', async () => {
+  const wrapper = mount(DraggableList)
+  // trigger('dragstart') is synthetic - may not work as expected
+  await wrapper.find('.item').trigger('dragstart')
+})
+
+// Vitest Browser Mode: Real native events via userEvent
+import { userEvent } from '@vitest/browser/context'
+
+test('reorders items on drag', async () => {
+  const { getByTestId } = render(DraggableList)
+
+  const item = getByTestId('item-1')
+  const target = getByTestId('item-3')
+
+  await userEvent.dragAndDrop(item, target)
+
+  // Assert reordering
+})
+```
+
+## Recommended Testing Strategy
+
+```javascript
+// vitest.config.js - Separate test configurations
+
+export default defineConfig({
+  test: {
+    // Default: Node environment for speed
+    environment: 'happy-dom',
+
+    // Browser tests in separate directory
+    include: ['src/**/*.test.{js,ts}'],
+  },
+})
+
+// Run browser tests separately
+// npx vitest --browser.enabled
+```
+
+### Directory Structure
+```
+tests/
+├── unit/              # Fast node-based tests
+│   ├── Button.test.js
+│   └── useCounter.test.js
+├── component/         # Slower browser-based tests
+│   ├── Button.browser.test.js
+│   └── DragDrop.browser.test.js
+└── e2e/               # Full E2E tests (Playwright)
+    └── user-flow.spec.ts
+```
+
+## Reference
+- [Vue.js Testing - Component Testing](https://vuejs.org/guide/scaling-up/testing#component-testing)
+- [Vitest Browser Mode](https://vitest.dev/guide/browser.html)
diff --git a/.claude/skills/vue-testing-best-practices/reference/testing-component-blackbox-approach.md b/.claude/skills/vue-testing-best-practices/reference/testing-component-blackbox-approach.md
new file mode 100644
index 0000000..e3a869c
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/reference/testing-component-blackbox-approach.md
@@ -0,0 +1,144 @@
+---
+title: Test Components Using Blackbox Approach - Focus on Behavior Not Implementation
+impact: HIGH
+impactDescription: Implementation-aware tests become brittle and break during refactoring, leading to high maintenance burden
+type: best-practice
+tags: [vue3, testing, component-testing, vitest, vue-test-utils, blackbox]
+---
+
+# Test Components Using Blackbox Approach - Focus on Behavior Not Implementation
+
+**Impact: HIGH** - Tests that rely on implementation details (internal state, private methods, component structure) break during refactoring even when functionality remains correct. This leads to false negatives and high test maintenance burden.
+
+Follow Kent C. Dodds' testing philosophy: "The more your tests resemble how your software is used, the more confidence they can give you."
+
+## Task Checklist
+
+- [ ] Test what the component does, not how it does it
+- [ ] Query elements by user-visible attributes (text, role, testid)
+- [ ] Simulate user interactions (click, type) rather than calling methods directly
+- [ ] Assert on rendered output, emitted events, and visible state changes
+- [ ] Avoid accessing component internal state or private methods
+- [ ] Use data-testid attributes for elements without semantic meaning
+
+**Incorrect:**
+```javascript
+import { mount } from '@vue/test-utils'
+import Counter from './Counter.vue'
+
+// BAD: Testing implementation details
+test('counter increments', async () => {
+  const wrapper = mount(Counter)
+
+  // Accessing internal state directly
+  expect(wrapper.vm.count).toBe(0)
+
+  // Calling internal method instead of simulating user action
+  wrapper.vm.increment()
+
+  // Checking internal state instead of visible output
+  expect(wrapper.vm.count).toBe(1)
+})
+
+// BAD: Testing component structure
+test('has increment button', () => {
+  const wrapper = mount(Counter)
+
+  // Testing implementation detail - what if button becomes an anchor?
+  expect(wrapper.find('button').exists()).toBe(true)
+})
+```
+
+**Correct:**
+```javascript
+import { mount } from '@vue/test-utils'
+import Counter from './Counter.vue'
+
+// CORRECT: Testing behavior like a user would
+test('counter displays updated value after clicking increment', async () => {
+  const wrapper = mount(Counter, {
+    props: { max: 10 }
+  })
+
+  // Assert initial visible state
+  expect(wrapper.find('[data-testid="counter-value"]').text()).toContain('0')
+
+  // Simulate user action
+  await wrapper.find('[data-testid="increment-button"]').trigger('click')
+
+  // Assert visible result
+  expect(wrapper.find('[data-testid="counter-value"]').text()).toContain('1')
+})
+
+// CORRECT: Testing emitted events (public API)
+test('emits change event with new value when incremented', async () => {
+  const wrapper = mount(Counter)
+
+  await wrapper.find('[data-testid="increment-button"]').trigger('click')
+
+  expect(wrapper.emitted('change')).toHaveLength(1)
+  expect(wrapper.emitted('change')[0]).toEqual([1])
+})
+```
+
+## Using @testing-library/vue for Better Blackbox Tests
+
+```javascript
+import { render, screen, fireEvent } from '@testing-library/vue'
+import Counter from './Counter.vue'
+
+// Testing Library encourages accessible, user-centric queries
+test('increments counter on button click', async () => {
+  render(Counter)
+
+  // Query by role - how screen readers see it
+  const button = screen.getByRole('button', { name: /increment/i })
+  const display = screen.getByText('0')
+
+  await fireEvent.click(button)
+
+  expect(screen.getByText('1')).toBeInTheDocument()
+})
+```
+
+## What to Test vs What Not to Test
+
+### DO Test (Public Interface)
+```javascript
+// Props affect rendered output
+test('shows title from props', () => {
+  const wrapper = mount(Card, {
+    props: { title: 'Hello World' }
+  })
+  expect(wrapper.text()).toContain('Hello World')
+})
+
+// Slots render correctly
+test('renders slot content', () => {
+  const wrapper = mount(Card, {
+    slots: { default: '<p>Slot content</p>' }
+  })
+  expect(wrapper.text()).toContain('Slot content')
+})
+
+// Emitted events
+test('emits close event when X clicked', async () => {
+  const wrapper = mount(Modal)
+  await wrapper.find('[data-testid="close-button"]').trigger('click')
+  expect(wrapper.emitted('close')).toBeTruthy()
+})
+```
+
+### DON'T Test (Implementation Details)
+```javascript
+// Don't test internal computed properties
+// Don't test internal methods
+// Don't test component options/setup internals
+// Don't test that specific child components are rendered (unless critical)
+// Don't rely exclusively on snapshot tests for correctness
+```
+
+## Reference
+- [Vue.js Testing Guide](https://vuejs.org/guide/scaling-up/testing)
+- [Vue Test Utils - Testing Philosophy](https://test-utils.vuejs.org/guide/)
+- [Testing Library Guiding Principles](https://testing-library.com/docs/guiding-principles)
diff --git a/.claude/skills/vue-testing-best-practices/reference/testing-composables-helper-wrapper.md b/.claude/skills/vue-testing-best-practices/reference/testing-composables-helper-wrapper.md
new file mode 100644
index 0000000..f6e4f07
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/reference/testing-composables-helper-wrapper.md
@@ -0,0 +1,238 @@
+---
+title: Test Complex Composables with Host Component Wrapper
+impact: MEDIUM
+impactDescription: Composables using lifecycle hooks or provide/inject fail when tested directly without a component context
+type: capability
+tags: [vue3, testing, composables, vitest, lifecycle-hooks, provide-inject]
+---
+
+# Test Complex Composables with Host Component Wrapper
+
+**Impact: MEDIUM** - Composables that use Vue lifecycle hooks (`onMounted`, `onUnmounted`) or dependency injection (`inject`) require a component context to function. Testing them directly will cause errors or incorrect behavior.
+
+Simple composables using only reactivity APIs can be tested directly. Complex composables need a helper function that creates a host component context.
+
+## Task Checklist
+
+- [ ] Identify if composable uses lifecycle hooks or inject
+- [ ] For simple composables (refs, computed only): test directly
+- [ ] For complex composables: use `withSetup` helper pattern
+- [ ] Clean up by unmounting the test app after each test
+- [ ] Use `app.provide()` to mock injected dependencies
+
+**Simple Composable - Test Directly:**
+```javascript
+// composables/useCounter.js
+import { ref, computed } from 'vue'
+
+export function useCounter(initialValue = 0) {
+  const count = ref(initialValue)
+  const doubled = computed(() => count.value * 2)
+  const increment = () => count.value++
+
+  return { count, doubled, increment }
+}
+```
+
+```javascript
+// useCounter.test.js
+import { describe, it, expect } from 'vitest'
+import { useCounter } from './useCounter'
+
+// CORRECT: Simple composable can be tested directly
+describe('useCounter', () => {
+  it('initializes with default value', () => {
+    const { count } = useCounter()
+    expect(count.value).toBe(0)
+  })
+
+  it('increments count', () => {
+    const { count, increment } = useCounter()
+    increment()
+    expect(count.value).toBe(1)
+  })
+
+  it('computes doubled value', () => {
+    const { count, doubled, increment } = useCounter(5)
+    expect(doubled.value).toBe(10)
+    increment()
+    expect(doubled.value).toBe(12)
+  })
+})
+```
+
+**Complex Composable - Use Host Wrapper:**
+```javascript
+// composables/useFetch.js
+import { ref, onMounted, onUnmounted, inject } from 'vue'
+
+export function useFetch(url) {
+  const data = ref(null)
+  const error = ref(null)
+  const loading = ref(true)
+  let controller = null
+
+  // Uses inject - needs component context
+  const apiClient = inject('apiClient')
+
+  // Uses lifecycle hooks - needs component context
+  onMounted(async () => {
+    controller = new AbortController()
+    try {
+      const response = await apiClient.get(url, { signal: controller.signal })
+      data.value = response.data
+    } catch (e) {
+      if (e.name !== 'AbortError') error.value = e
+    } finally {
+      loading.value = false
+    }
+  })
+
+  onUnmounted(() => {
+    controller?.abort()
+  })
+
+  return { data, error, loading }
+}
+```
+
+```javascript
+// test-utils.js
+import { createApp } from 'vue'
+
+/**
+ * Helper to test composables that need component context
+ */
+export function withSetup(composable) {
+  let result
+
+  const app = createApp({
+    setup() {
+      result = composable()
+      // Return a render function to suppress warnings
+      return () => {}
+    }
+  })
+
+  app.mount(document.createElement('div'))
+
+  return [result, app]
+}
+```
+
+```javascript
+// useFetch.test.js
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
+import { flushPromises } from '@vue/test-utils'
+import { withSetup } from './test-utils'
+import { useFetch } from './useFetch'
+
+describe('useFetch', () => {
+  let app
+  const mockApiClient = {
+    get: vi.fn()
+  }
+
+  afterEach(() => {
+    // IMPORTANT: Clean up to trigger onUnmounted
+    app?.unmount()
+  })
+
+  it('fetches data on mount', async () => {
+    mockApiClient.get.mockResolvedValue({ data: { id: 1, name: 'Test' } })
+
+    const [result, testApp] = withSetup(() => useFetch('/api/test'))
+    app = testApp
+
+    // Provide mocked dependency
+    app.provide('apiClient', mockApiClient)
+
+    // Wait for async operations
+    await flushPromises()
+
+    expect(result.data.value).toEqual({ id: 1, name: 'Test' })
+    expect(result.loading.value).toBe(false)
+    expect(result.error.value).toBeNull()
+  })
+
+  it('handles errors', async () => {
+    const testError = new Error('Network error')
+    mockApiClient.get.mockRejectedValue(testError)
+
+    const [result, testApp] = withSetup(() => useFetch('/api/test'))
+    app = testApp
+    app.provide('apiClient', mockApiClient)
+
+    await flushPromises()
+
+    expect(result.error.value).toBe(testError)
+    expect(result.data.value).toBeNull()
+  })
+})
+```
+
+## Enhanced withSetup Helper with Provide Support
+```javascript
+// test-utils.js
+export function withSetup(composable, options = {}) {
+  let result
+
+  const app = createApp({
+    setup() {
+      result = composable()
+      return () => {}
+    }
+  })
+
+  // Apply global provides before mounting
+  if (options.provide) {
+    Object.entries(options.provide).forEach(([key, value]) => {
+      app.provide(key, value)
+    })
+  }
+
+  app.mount(document.createElement('div'))
+
+  return [result, app]
+}
+
+// Usage
+const [result, app] = withSetup(() => useMyComposable(), {
+  provide: {
+    apiClient: mockApiClient,
+    currentUser: { id: 1, name: 'Test User' }
+  }
+})
+```
+
+## Testing with @vue/test-utils mount
+```javascript
+import { mount } from '@vue/test-utils'
+import { defineComponent } from 'vue'
+import { useFetch } from './useFetch'
+
+test('useFetch in component context', async () => {
+  const TestComponent = defineComponent({
+    setup() {
+      const { data, loading } = useFetch('/api/users')
+      return { data, loading }
+    },
+    template: '<div>{{ loading ? "Loading..." : data }}</div>'
+  })
+
+  const wrapper = mount(TestComponent, {
+    global: {
+      provide: {
+        apiClient: mockApiClient
+      }
+    }
+  })
+
+  await flushPromises()
+  expect(wrapper.text()).toContain('Test data')
+})
+```
+
+## Reference
+- [Vue.js Testing Guide - Testing Composables](https://vuejs.org/guide/scaling-up/testing#testing-composables)
+- [Vue Test Utils - Mounting Components](https://test-utils.vuejs.org/guide/)
diff --git a/.claude/skills/vue-testing-best-practices/reference/testing-e2e-playwright-recommended.md b/.claude/skills/vue-testing-best-practices/reference/testing-e2e-playwright-recommended.md
new file mode 100644
index 0000000..3df2ff0
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/reference/testing-e2e-playwright-recommended.md
@@ -0,0 +1,242 @@
+---
+title: Use Playwright for E2E Testing - Cross-Browser Support and Better DX
+impact: MEDIUM
+impactDescription: Cypress has browser limitations and some features require paid subscriptions
+type: best-practice
+tags: [vue3, testing, e2e, playwright, cypress, end-to-end]
+---
+
+# Use Playwright for E2E Testing - Cross-Browser Support and Better DX
+
+**Impact: MEDIUM** - Playwright offers superior cross-browser testing (Chromium, WebKit, Firefox), excellent debugging tools, and is fully open source. Cypress has limitations with WebKit support and requires paid subscriptions for some features.
+
+Use Playwright for new E2E testing setups. Consider Cypress if team already has expertise or for its visual debugging UI.
+
+## Task Checklist
+
+- [ ] Install Playwright with browsers for your target platforms
+- [ ] Configure for Vue dev server integration
+- [ ] Set up projects for different browsers
+- [ ] Use locator strategies that match component test patterns
+- [ ] Configure CI for parallel test execution
+- [ ] Use trace and screenshot features for debugging
+
+## Quick Setup
+
+```bash
+# Install Playwright
+npm init playwright@latest
+
+# This will create:
+# - playwright.config.ts
+# - tests/ directory
+# - tests-examples/ directory
+```
+
+**playwright.config.ts:**
+```typescript
+import { defineConfig, devices } from '@playwright/test'
+
+export default defineConfig({
+  testDir: './e2e',
+  fullyParallel: true,
+  forbidOnly: !!process.env.CI,
+  retries: process.env.CI ? 2 : 0,
+  workers: process.env.CI ? 1 : undefined,
+  reporter: 'html',
+
+  use: {
+    // Base URL for navigation
+    baseURL: 'http://localhost:5173',
+    // Capture trace on first retry
+    trace: 'on-first-retry',
+    // Screenshot on failure
+    screenshot: 'only-on-failure',
+  },
+
+  projects: [
+    {
+      name: 'chromium',
+      use: { ...devices['Desktop Chrome'] },
+    },
+    {
+      name: 'firefox',
+      use: { ...devices['Desktop Firefox'] },
+    },
+    {
+      name: 'webkit',
+      use: { ...devices['Desktop Safari'] },
+    },
+    // Mobile viewports
+    {
+      name: 'Mobile Chrome',
+      use: { ...devices['Pixel 5'] },
+    },
+  ],
+
+  // Run local dev server before tests
+  webServer: {
+    command: 'npm run dev',
+    url: 'http://localhost:5173',
+    reuseExistingServer: !process.env.CI,
+  },
+})
+```
+
+## E2E Test Example
+
+```typescript
+// e2e/user-flow.spec.ts
+import { test, expect } from '@playwright/test'
+
+test.describe('User Authentication', () => {
+  test('user can log in and see dashboard', async ({ page }) => {
+    // Navigate to login
+    await page.goto('/login')
+
+    // Fill login form
+    await page.getByLabel('Email').fill('user@example.com')
+    await page.getByLabel('Password').fill('password123')
+    await page.getByRole('button', { name: 'Sign In' }).click()
+
+    // Verify redirect to dashboard
+    await expect(page).toHaveURL('/dashboard')
+    await expect(page.getByRole('heading', { name: 'Welcome' })).toBeVisible()
+  })
+
+  test('shows error for invalid credentials', async ({ page }) => {
+    await page.goto('/login')
+
+    await page.getByLabel('Email').fill('wrong@example.com')
+    await page.getByLabel('Password').fill('wrongpassword')
+    await page.getByRole('button', { name: 'Sign In' }).click()
+
+    await expect(page.getByRole('alert')).toContainText('Invalid credentials')
+    await expect(page).toHaveURL('/login')
+  })
+})
+```
+
+## Playwright vs Cypress Comparison
+
+| Feature | Playwright | Cypress |
+|---------|------------|---------|
+| Browsers | Chromium, Firefox, WebKit | Chromium, Firefox, Electron (WebKit experimental) |
+| Cross-browser | Full support | Limited |
+| Parallelization | Built-in | Requires Cypress Cloud |
+| Open source | Fully | Core only |
+| Mobile testing | Device emulation | Limited |
+| Debugging | Inspector, trace viewer | Time-travel UI |
+| API testing | Built-in | Plugin required |
+| Iframes | Full support | Limited |
+
+## Testing Vue Components with Data-Testid
+
+```typescript
+// e2e/product-list.spec.ts
+import { test, expect } from '@playwright/test'
+
+test('user can add product to cart', async ({ page }) => {
+  await page.goto('/products')
+
+  // Use data-testid for reliable selectors
+  await page.getByTestId('product-card').first().click()
+
+  // Verify product detail page
+  await expect(page.getByTestId('product-title')).toBeVisible()
+
+  // Add to cart
+  await page.getByTestId('add-to-cart-button').click()
+
+  // Verify cart updated
+  await expect(page.getByTestId('cart-count')).toHaveText('1')
+})
+```
+
+## Page Object Pattern for Vue Apps
+
+```typescript
+// e2e/pages/LoginPage.ts
+import { Page, Locator } from '@playwright/test'
+
+export class LoginPage {
+  readonly page: Page
+  readonly emailInput: Locator
+  readonly passwordInput: Locator
+  readonly submitButton: Locator
+  readonly errorMessage: Locator
+
+  constructor(page: Page) {
+    this.page = page
+    this.emailInput = page.getByLabel('Email')
+    this.passwordInput = page.getByLabel('Password')
+    this.submitButton = page.getByRole('button', { name: 'Sign In' })
+    this.errorMessage = page.getByRole('alert')
+  }
+
+  async goto() {
+    await this.page.goto('/login')
+  }
+
+  async login(email: string, password: string) {
+    await this.emailInput.fill(email)
+    await this.passwordInput.fill(password)
+    await this.submitButton.click()
+  }
+}
+```
+
+```typescript
+// e2e/auth.spec.ts
+import { test, expect } from '@playwright/test'
+import { LoginPage } from './pages/LoginPage'
+
+test('successful login', async ({ page }) => {
+  const loginPage = new LoginPage(page)
+  await loginPage.goto()
+  await loginPage.login('user@example.com', 'password123')
+
+  await expect(page).toHaveURL('/dashboard')
+})
+```
+
+## Visual Regression Testing
+
+```typescript
+test('homepage visual regression', async ({ page }) => {
+  await page.goto('/')
+
+  // Full page screenshot comparison
+  await expect(page).toHaveScreenshot('homepage.png')
+
+  // Element-specific screenshot
+  await expect(page.getByTestId('hero-section')).toHaveScreenshot('hero.png')
+})
+```
+
+## Running Tests
+
+```bash
+# Run all tests
+npx playwright test
+
+# Run in headed mode (see browser)
+npx playwright test --headed
+
+# Run specific file
+npx playwright test e2e/auth.spec.ts
+
+# Run in specific browser
+npx playwright test --project=chromium
+
+# Debug mode
+npx playwright test --debug
+
+# Generate test from actions
+npx playwright codegen localhost:5173
+```
+
+## Reference
+- [Playwright Documentation](https://playwright.dev/)
+- [Vue.js E2E Testing Recommendations](https://vuejs.org/guide/scaling-up/testing#e2e-testing)
+- [Playwright Best Practices](https://playwright.dev/docs/best-practices)
diff --git a/.claude/skills/vue-testing-best-practices/reference/testing-no-snapshot-only.md b/.claude/skills/vue-testing-best-practices/reference/testing-no-snapshot-only.md
new file mode 100644
index 0000000..e44f437
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/reference/testing-no-snapshot-only.md
@@ -0,0 +1,197 @@
+---
+title: Avoid Snapshot-Only Tests - They Don't Prove Correctness
+impact: MEDIUM
+impactDescription: Snapshot tests verify structure but not functionality, leading to false confidence and brittle tests
+type: best-practice
+tags: [vue3, testing, snapshot, vitest, vue-test-utils, anti-pattern]
+---
+
+# Avoid Snapshot-Only Tests - They Don't Prove Correctness
+
+**Impact: MEDIUM** - Snapshot tests only verify that HTML structure hasn't changed - they don't verify that the component works correctly. Relying exclusively on snapshots leads to false confidence and tests that break on any refactoring, even when functionality is preserved.
+
+Use snapshots sparingly for regression detection. Prefer behavioral assertions that test what the component does.
+
+## Task Checklist
+
+- [ ] Don't use snapshots as the only assertion for component behavior
+- [ ] Use snapshots for regression detection on stable UI components
+- [ ] Always pair snapshots with behavioral assertions
+- [ ] Keep snapshots small and focused (avoid full component snapshots)
+- [ ] Review snapshot diffs carefully - don't blindly update
+- [ ] Consider inline snapshots for small, critical structures
+
+**Incorrect:**
+```javascript
+import { mount } from '@vue/test-utils'
+import UserCard from './UserCard.vue'
+
+// BAD: Snapshot-only test proves nothing about functionality
+test('UserCard renders correctly', () => {
+  const wrapper = mount(UserCard, {
+    props: { user: { name: 'John', email: 'john@example.com' } }
+  })
+
+  expect(wrapper.html()).toMatchSnapshot()
+})
+
+// This test passes even if:
+// - The email isn't clickable
+// - The avatar doesn't load
+// - User actions are completely broken
+// - Accessibility is broken
+```
+
+**Correct:**
+```javascript
+import { mount } from '@vue/test-utils'
+import UserCard from './UserCard.vue'
+
+// CORRECT: Test actual behavior
+test('UserCard displays user information', () => {
+  const wrapper = mount(UserCard, {
+    props: { user: { name: 'John', email: 'john@example.com' } }
+  })
+
+  expect(wrapper.find('[data-testid="user-name"]').text()).toBe('John')
+  expect(wrapper.find('[data-testid="user-email"]').text()).toBe('john@example.com')
+})
+
+test('UserCard email link is clickable', async () => {
+  const wrapper = mount(UserCard, {
+    props: { user: { name: 'John', email: 'john@example.com' } }
+  })
+
+  const emailLink = wrapper.find('a[href^="mailto:"]')
+  expect(emailLink.exists()).toBe(true)
+  expect(emailLink.attributes('href')).toBe('mailto:john@example.com')
+})
+
+test('UserCard emits select event when clicked', async () => {
+  const wrapper = mount(UserCard, {
+    props: { user: { id: 1, name: 'John' } }
+  })
+
+  await wrapper.trigger('click')
+
+  expect(wrapper.emitted('select')).toBeTruthy()
+  expect(wrapper.emitted('select')[0]).toEqual([{ id: 1, name: 'John' }])
+})
+```
+
+## When Snapshots ARE Useful
+
+### Regression Detection for Stable Components
+```javascript
+// ACCEPTABLE: Snapshot as additional check, not the only check
+test('ErrorBoundary renders error message', () => {
+  const wrapper = mount(ErrorBoundary, {
+    props: { error: new Error('Something went wrong') }
+  })
+
+  // Primary assertions - verify behavior
+  expect(wrapper.find('.error-title').text()).toBe('Error')
+  expect(wrapper.find('.error-message').text()).toContain('Something went wrong')
+
+  // Secondary snapshot - catches unexpected structural changes
+  expect(wrapper.find('.error-container').html()).toMatchSnapshot()
+})
+```
+
+### Inline Snapshots for Small Structures
+```javascript
+// ACCEPTABLE: Inline snapshot for small, critical structure
+test('generates correct list markup', () => {
+  const wrapper = mount(ListItem, { props: { item: 'Test' } })
+
+  expect(wrapper.html()).toMatchInlineSnapshot(`
+    "<li class="list-item">Test</li>"
+  `)
+})
+```
+
+### Complex SVG or Icon Output
+```javascript
+// ACCEPTABLE: Snapshot for complex generated content
+test('renders correct chart SVG', () => {
+  const wrapper = mount(PieChart, {
+    props: { data: [30, 40, 30] }
+  })
+
+  // Verify key behavior
+  expect(wrapper.findAll('path').length).toBe(3)
+
+  // Snapshot for full SVG structure
+  expect(wrapper.find('svg').html()).toMatchSnapshot()
+})
+```
+
+## Better Alternatives to Snapshots
+
+### Test Specific Elements
+```javascript
+// Instead of snapshotting entire component
+test('renders product with all required fields', () => {
+  const wrapper = mount(ProductCard, {
+    props: { product: { name: 'Widget', price: 9.99, inStock: true } }
+  })
+
+  expect(wrapper.find('.product-name').text()).toBe('Widget')
+  expect(wrapper.find('.product-price').text()).toContain('9.99')
+  expect(wrapper.find('.in-stock-badge').exists()).toBe(true)
+})
+```
+
+### Test CSS Classes for Styling
+```javascript
+test('applies danger styling for errors', () => {
+  const wrapper = mount(Alert, {
+    props: { type: 'error', message: 'Failed!' }
+  })
+
+  expect(wrapper.classes()).toContain('alert-danger')
+  expect(wrapper.find('.alert-icon').classes()).toContain('icon-error')
+})
+```
+
+### Use Testing Library Queries
+```javascript
+import { render, screen } from '@testing-library/vue'
+
+test('form has accessible labels', () => {
+  render(LoginForm)
+
+  // Testing Library queries verify accessibility
+  expect(screen.getByLabelText('Email')).toBeInTheDocument()
+  expect(screen.getByLabelText('Password')).toBeInTheDocument()
+  expect(screen.getByRole('button', { name: 'Sign In' })).toBeInTheDocument()
+})
+```
+
+## Snapshot Anti-Patterns
+
+```javascript
+// ANTI-PATTERN: Giant component snapshot
+test('page renders', () => {
+  const wrapper = mount(EntirePageComponent)
+  expect(wrapper.html()).toMatchSnapshot()  // 500+ lines of HTML
+})
+
+// ANTI-PATTERN: Snapshot with dynamic content
+test('shows current date', () => {
+  const wrapper = mount(DateDisplay)
+  expect(wrapper.html()).toMatchSnapshot()  // Fails every day!
+})
+
+// ANTI-PATTERN: Snapshot after every test
+test('button works', async () => {
+  const wrapper = mount(Counter)
+  await wrapper.find('button').trigger('click')
+  expect(wrapper.html()).toMatchSnapshot()  // Redundant
+})
+```
+
+## Reference
+- [Vue.js Testing Guide - What Not to Test](https://vuejs.org/guide/scaling-up/testing)
+- [Effective Snapshot Testing](https://kentcdodds.com/blog/effective-snapshot-testing)
+- [Vitest Snapshot Testing](https://vitest.dev/guide/snapshot.html)
diff --git a/.claude/skills/vue-testing-best-practices/reference/testing-pinia-store-setup.md b/.claude/skills/vue-testing-best-practices/reference/testing-pinia-store-setup.md
new file mode 100644
index 0000000..3f8d440
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/reference/testing-pinia-store-setup.md
@@ -0,0 +1,228 @@
+---
+title: Configure Pinia Testing with createTestingPinia and setActivePinia
+impact: HIGH
+impactDescription: Missing Pinia configuration causes 'injection Symbol(pinia) not found' errors and failing tests
+type: gotcha
+tags: [vue3, testing, pinia, vitest, store, mocking, createTestingPinia]
+---
+
+# Configure Pinia Testing with createTestingPinia and setActivePinia
+
+**Impact: HIGH** - Testing components or composables that use Pinia stores without proper configuration results in "[Vue warn]: injection Symbol(pinia) not found" errors. Tests will fail or behave unexpectedly.
+
+Use `@pinia/testing` package with `createTestingPinia` for component tests and `setActivePinia(createPinia())` for unit testing stores directly.
+
+## Task Checklist
+
+- [ ] Install `@pinia/testing` as a dev dependency
+- [ ] Use `createTestingPinia` in component tests with `global.plugins`
+- [ ] Use `setActivePinia(createPinia())` in `beforeEach` for store unit tests
+- [ ] Configure `createSpy: vi.fn` when NOT using `globals: true` in Vitest
+- [ ] Initialize store inside each test to get fresh state
+- [ ] Use `stubActions: false` when you need real action execution
+
+**Incorrect:**
+```javascript
+import { mount } from '@vue/test-utils'
+import UserProfile from './UserProfile.vue'
+
+// BAD: Missing Pinia - causes injection error
+test('displays user name', () => {
+  const wrapper = mount(UserProfile)  // ERROR: injection "Symbol(pinia)" not found
+  expect(wrapper.text()).toContain('John')
+})
+```
+
+```javascript
+import { useUserStore } from '@/stores/user'
+
+// BAD: No active Pinia instance
+test('user store actions', () => {
+  const store = useUserStore()  // ERROR: no active Pinia
+  store.login('john', 'password')
+})
+```
+
+**Correct - Component Testing:**
+```javascript
+import { mount } from '@vue/test-utils'
+import { createTestingPinia } from '@pinia/testing'
+import { vi } from 'vitest'
+import UserProfile from './UserProfile.vue'
+import { useUserStore } from '@/stores/user'
+
+// CORRECT: Provide testing pinia with stubbed actions
+test('displays user name', () => {
+  const wrapper = mount(UserProfile, {
+    global: {
+      plugins: [
+        createTestingPinia({
+          createSpy: vi.fn,  // Required if not using globals: true
+          initialState: {
+            user: { name: 'John', email: 'john@example.com' }
+          }
+        })
+      ]
+    }
+  })
+
+  expect(wrapper.text()).toContain('John')
+})
+
+// CORRECT: Test with stubbed actions (default behavior)
+test('calls logout action', async () => {
+  const wrapper = mount(UserProfile, {
+    global: {
+      plugins: [createTestingPinia({ createSpy: vi.fn })]
+    }
+  })
+
+  // Get store AFTER mounting with createTestingPinia
+  const store = useUserStore()
+
+  await wrapper.find('[data-testid="logout"]').trigger('click')
+
+  // Actions are stubbed and wrapped in spies
+  expect(store.logout).toHaveBeenCalled()
+})
+```
+
+**Correct - Store Unit Testing:**
+```javascript
+import { describe, it, expect, beforeEach, vi } from 'vitest'
+import { setActivePinia, createPinia } from 'pinia'
+import { useUserStore } from '@/stores/user'
+
+describe('User Store', () => {
+  beforeEach(() => {
+    // Create fresh Pinia instance for each test
+    setActivePinia(createPinia())
+  })
+
+  it('initializes with empty user', () => {
+    const store = useUserStore()
+    expect(store.user).toBeNull()
+    expect(store.isLoggedIn).toBe(false)
+  })
+
+  it('updates user on login', async () => {
+    const store = useUserStore()
+
+    // Real action executes - not stubbed
+    await store.login('john', 'password')
+
+    expect(store.user).toEqual({ name: 'John' })
+    expect(store.isLoggedIn).toBe(true)
+  })
+
+  it('clears user on logout', () => {
+    const store = useUserStore()
+    store.user = { name: 'John' }  // Set initial state
+
+    store.logout()
+
+    expect(store.user).toBeNull()
+  })
+})
+```
+
+## Testing with Real Actions vs Stubbed Actions
+
+```javascript
+import { createTestingPinia } from '@pinia/testing'
+
+// Stubbed actions (default) - for isolation
+const wrapper = mount(Component, {
+  global: {
+    plugins: [
+      createTestingPinia({
+        createSpy: vi.fn,
+        // stubActions: true (default) - actions are mocked
+      })
+    ]
+  }
+})
+
+// Real actions - for integration testing
+const wrapper = mount(Component, {
+  global: {
+    plugins: [
+      createTestingPinia({
+        createSpy: vi.fn,
+        stubActions: false  // Actions execute normally
+      })
+    ]
+  }
+})
+```
+
+## Mocking Specific Action Implementations
+
+```javascript
+import { mount } from '@vue/test-utils'
+import { createTestingPinia } from '@pinia/testing'
+import { vi } from 'vitest'
+import { useCartStore } from '@/stores/cart'
+
+test('handles checkout failure', async () => {
+  const wrapper = mount(Checkout, {
+    global: {
+      plugins: [createTestingPinia({ createSpy: vi.fn })]
+    }
+  })
+
+  const cartStore = useCartStore()
+
+  // Mock specific action behavior
+  cartStore.checkout.mockRejectedValue(new Error('Payment failed'))
+
+  await wrapper.find('[data-testid="checkout"]').trigger('click')
+  await flushPromises()
+
+  expect(wrapper.find('.error').text()).toContain('Payment failed')
+})
+```
+
+## Spying on Actions with vi.spyOn
+
+```javascript
+import { setActivePinia, createPinia } from 'pinia'
+import { vi } from 'vitest'
+import { useUserStore } from '@/stores/user'
+
+test('tracks action calls', async () => {
+  setActivePinia(createPinia())
+  const store = useUserStore()
+
+  const loginSpy = vi.spyOn(store, 'login')
+  loginSpy.mockResolvedValue({ success: true })
+
+  await store.login('john', 'password')
+
+  expect(loginSpy).toHaveBeenCalledWith('john', 'password')
+})
+```
+
+## Testing Store $subscribe
+
+```javascript
+import { setActivePinia, createPinia } from 'pinia'
+import { useUserStore } from '@/stores/user'
+
+test('subscription triggers on state change', () => {
+  setActivePinia(createPinia())
+  const store = useUserStore()
+
+  const callback = vi.fn()
+  store.$subscribe(callback)
+
+  store.user = { name: 'John' }
+
+  expect(callback).toHaveBeenCalled()
+})
+```
+
+## Reference
+- [Pinia Testing Guide](https://pinia.vuejs.org/cookbook/testing.html)
+- [@pinia/testing Package](https://www.npmjs.com/package/@pinia/testing)
+- [Vue Test Utils - Plugins](https://test-utils.vuejs.org/guide/advanced/plugins.html)
diff --git a/.claude/skills/vue-testing-best-practices/reference/testing-suspense-async-components.md b/.claude/skills/vue-testing-best-practices/reference/testing-suspense-async-components.md
new file mode 100644
index 0000000..f935533
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/reference/testing-suspense-async-components.md
@@ -0,0 +1,229 @@
+---
+title: Wrap Async Setup Components in Suspense for Testing
+impact: HIGH
+impactDescription: Components with async setup() fail to render in tests without Suspense wrapper, causing cryptic errors
+type: gotcha
+tags: [vue3, testing, suspense, async-setup, vue-test-utils, vitest]
+---
+
+# Wrap Async Setup Components in Suspense for Testing
+
+**Impact: HIGH** - Components using `async setup()` require a `<Suspense>` wrapper to function correctly. Testing them without Suspense causes the component to never render, leading to test failures and confusing errors.
+
+Create a test wrapper component with Suspense or use a `mountSuspense` helper function for testing async components.
+
+## Task Checklist
+
+- [ ] Identify components with async setup (uses `await` in `<script setup>` or `async setup()`)
+- [ ] Create a wrapper component with `<Suspense>` for testing
+- [ ] Use `flushPromises()` after mounting to wait for async resolution
+- [ ] Access the actual component via `findComponent()` for assertions
+- [ ] Consider using `@testing-library/vue` with caution (has Suspense issues)
+
+**Incorrect:**
+```javascript
+import { mount } from '@vue/test-utils'
+import AsyncUserProfile from './AsyncUserProfile.vue'
+
+// BAD: Async component without Suspense wrapper
+test('displays user data', async () => {
+  // This won't render - Vue expects Suspense wrapper for async setup
+  const wrapper = mount(AsyncUserProfile, {
+    props: { userId: 1 }
+  })
+
+  await flushPromises()
+
+  // This fails - component never rendered
+  expect(wrapper.find('.username').text()).toBe('John')
+})
+```
+
+**Correct - Manual Wrapper Component:**
+```javascript
+import { mount, flushPromises } from '@vue/test-utils'
+import { defineComponent, Suspense } from 'vue'
+import AsyncUserProfile from './AsyncUserProfile.vue'
+
+test('displays user data', async () => {
+  // Create wrapper component with Suspense
+  const TestWrapper = defineComponent({
+    components: { AsyncUserProfile },
+    template: `
+      <Suspense>
+        <AsyncUserProfile :user-id="1" />
+        <template #fallback>Loading...</template>
+      </Suspense>
+    `
+  })
+
+  const wrapper = mount(TestWrapper)
+
+  // Initially shows fallback
+  expect(wrapper.text()).toContain('Loading...')
+
+  // Wait for async setup to complete
+  await flushPromises()
+
+  // Find the actual component for detailed assertions
+  const profile = wrapper.findComponent(AsyncUserProfile)
+  expect(profile.find('.username').text()).toBe('John')
+})
+```
+
+**Correct - Reusable Helper Function:**
+```javascript
+// test-utils.js
+import { mount, flushPromises } from '@vue/test-utils'
+import { defineComponent, Suspense, h } from 'vue'
+
+export async function mountSuspense(component, options = {}) {
+  const { props, slots, ...mountOptions } = options
+
+  const wrapper = mount(
+    defineComponent({
+      render() {
+        return h(
+          Suspense,
+          null,
+          {
+            default: () => h(component, props, slots),
+            fallback: () => h('div', 'Loading...')
+          }
+        )
+      }
+    }),
+    mountOptions
+  )
+
+  // Wait for async component to resolve
+  await flushPromises()
+
+  return {
+    wrapper,
+    // Provide easy access to the actual component
+    component: wrapper.findComponent(component)
+  }
+}
+```
+
+```javascript
+// AsyncUserProfile.test.js
+import { mountSuspense } from './test-utils'
+import AsyncUserProfile from './AsyncUserProfile.vue'
+
+test('displays user data', async () => {
+  const { component } = await mountSuspense(AsyncUserProfile, {
+    props: { userId: 1 },
+    global: {
+      stubs: {
+        // Stub any child components if needed
+      }
+    }
+  })
+
+  expect(component.find('.username').text()).toBe('John')
+})
+
+test('handles errors gracefully', async () => {
+  const { component } = await mountSuspense(AsyncUserProfile, {
+    props: { userId: 'invalid' }
+  })
+
+  expect(component.find('.error').exists()).toBe(true)
+})
+```
+
+## Testing with onErrorCaptured
+
+```javascript
+import { mount, flushPromises } from '@vue/test-utils'
+import { defineComponent, Suspense, h, ref, onErrorCaptured } from 'vue'
+import AsyncComponent from './AsyncComponent.vue'
+
+test('catches async errors', async () => {
+  const capturedError = ref(null)
+
+  const TestWrapper = defineComponent({
+    setup() {
+      onErrorCaptured((error) => {
+        capturedError.value = error
+        return true // Prevent error propagation
+      })
+      return { capturedError }
+    },
+    render() {
+      return h(Suspense, null, {
+        default: () => h(AsyncComponent, { shouldFail: true }),
+        fallback: () => h('div', 'Loading...')
+      })
+    }
+  })
+
+  const wrapper = mount(TestWrapper)
+  await flushPromises()
+
+  expect(capturedError.value).toBeTruthy()
+  expect(capturedError.value.message).toContain('Failed to load')
+})
+```
+
+## Using with Nuxt's mountSuspended
+
+```javascript
+// If using Nuxt, use the built-in mountSuspended helper
+import { mountSuspended } from '@nuxt/test-utils/runtime'
+import AsyncPage from './AsyncPage.vue'
+
+test('renders async page', async () => {
+  const wrapper = await mountSuspended(AsyncPage, {
+    props: { id: 1 }
+  })
+
+  expect(wrapper.find('h1').text()).toBe('Page Title')
+})
+```
+
+## Important Caveats
+
+### @testing-library/vue Limitation
+```javascript
+// CAUTION: @testing-library/vue has issues with Suspense
+// Use @vue/test-utils for async components instead
+
+// If you must use Testing Library, create manual wrapper:
+import { render, waitFor } from '@testing-library/vue'
+
+test('async component with testing library', async () => {
+  const TestWrapper = {
+    template: `
+      <Suspense>
+        <AsyncComponent />
+      </Suspense>
+    `,
+    components: { AsyncComponent }
+  }
+
+  const { getByText } = render(TestWrapper)
+
+  await waitFor(() => {
+    expect(getByText('Loaded content')).toBeInTheDocument()
+  })
+})
+```
+
+### Accessing Component Instance
+```javascript
+test('access vm on async component', async () => {
+  const { wrapper, component } = await mountSuspense(AsyncComponent)
+
+  // The wrapper.vm is the Suspense wrapper - not useful
+  // Use component.vm for the actual async component
+  expect(component.vm.someData).toBe('value')
+})
+```
+
+## Reference
+- [Vue Test Utils - Async Suspense](https://test-utils.vuejs.org/guide/advanced/async-suspense)
+- [Vue.js Suspense Documentation](https://vuejs.org/guide/built-ins/suspense.html)
+- [Testing Library Vue Suspense Issue](https://github.com/testing-library/vue-testing-library/issues/230)
diff --git a/.claude/skills/vue-testing-best-practices/reference/testing-vitest-recommended-for-vue.md b/.claude/skills/vue-testing-best-practices/reference/testing-vitest-recommended-for-vue.md
new file mode 100644
index 0000000..7962890
--- /dev/null
+++ b/.claude/skills/vue-testing-best-practices/reference/testing-vitest-recommended-for-vue.md
@@ -0,0 +1,204 @@
+---
+title: Use Vitest for Vue 3 Testing - Recommended by Vue Team
+impact: MEDIUM
+impactDescription: Using Jest or other runners with Vite projects requires complex configuration and causes slower test runs
+type: best-practice
+tags: [vue3, testing, vitest, vite, configuration, setup]
+---
+
+# Use Vitest for Vue 3 Testing - Recommended by Vue Team
+
+**Impact: MEDIUM** - Vitest is created and maintained by Vue/Vite team members and shares the same configuration and transform pipeline as Vite. Using Jest or other test runners with Vite-based projects requires additional configuration and can result in slower test execution and compatibility issues.
+
+Use Vitest for new Vue 3 projects. Only consider Jest if migrating an existing test suite.
+
+## Task Checklist
+
+- [ ] Install Vitest and related packages for Vue testing
+- [ ] Configure vitest in vite.config.js or vitest.config.js
+- [ ] Set up proper test environment (happy-dom or jsdom)
+- [ ] Add test scripts to package.json
+- [ ] Configure globals if desired for cleaner test syntax
+- [ ] Use @vue/test-utils for component mounting
+
+## Quick Setup
+
+```bash
+# Install required packages
+npm install -D vitest @vue/test-utils happy-dom
+# or with jsdom
+npm install -D vitest @vue/test-utils jsdom
+```
+
+**vite.config.js:**
+```javascript
+import { defineConfig } from 'vite'
+import vue from '@vitejs/plugin-vue'
+
+export default defineConfig({
+  plugins: [vue()],
+  test: {
+    // Enable global test APIs (describe, it, expect)
+    globals: true,
+    // Use happy-dom for faster tests (or 'jsdom' for better compatibility)
+    environment: 'happy-dom',
+    // Optional: Setup files for global configuration
+    setupFiles: ['./src/test/setup.js']
+  }
+})
+```
+
+**package.json:**
+```json
+{
+  "scripts": {
+    "test": "vitest",
+    "test:run": "vitest run",
+    "test:coverage": "vitest run --coverage"
+  }
+}
+```
+
+**tsconfig.json (if using TypeScript):**
+```json
+{
+  "compilerOptions": {
+    "types": ["vitest/globals"]
+  }
+}
+```
+
+## Test File Example
+
+```javascript
+// src/components/Counter.test.js
+import { describe, it, expect, beforeEach } from 'vitest'  // optional with globals: true
+import { mount } from '@vue/test-utils'
+import Counter from './Counter.vue'
+
+describe('Counter', () => {
+  let wrapper
+
+  beforeEach(() => {
+    wrapper = mount(Counter)
+  })
+
+  it('renders initial count', () => {
+    expect(wrapper.find('[data-testid="count"]').text()).toBe('0')
+  })
+
+  it('increments when button clicked', async () => {
+    await wrapper.find('[data-testid="increment"]').trigger('click')
+    expect(wrapper.find('[data-testid="count"]').text()).toBe('1')
+  })
+})
+```
+
+## Vitest vs Jest Comparison
+
+| Feature | Vitest | Jest |
+|---------|--------|------|
+| Vite Integration | Native | Requires config |
+| Speed | Very fast (ESM native) | Slower with Vite |
+| Watch Mode | Excellent | Good |
+| Vue SFC Support | Works with Vite | Needs vue-jest |
+| Config Sharing | Same as vite.config | Separate |
+| API | Jest-compatible | Standard |
+
+## Using with Testing Library
+
+```bash
+npm install -D @testing-library/vue @testing-library/jest-dom
+```
+
+```javascript
+// src/test/setup.js
+import { expect } from 'vitest'
+import * as matchers from '@testing-library/jest-dom/matchers'
+
+expect.extend(matchers)
+```
+
+```javascript
+// Component.test.js
+import { render, screen, fireEvent } from '@testing-library/vue'
+import UserCard from './UserCard.vue'
+
+test('displays user name', () => {
+  render(UserCard, {
+    props: { name: 'John Doe' }
+  })
+
+  expect(screen.getByText('John Doe')).toBeInTheDocument()
+})
+```
+
+## Advanced Configuration
+
+```javascript
+// vitest.config.js (separate file if preferred)
+import { defineConfig } from 'vitest/config'
+import vue from '@vitejs/plugin-vue'
+
+export default defineConfig({
+  plugins: [vue()],
+  test: {
+    globals: true,
+    environment: 'happy-dom',
+    include: ['**/*.{test,spec}.{js,ts,jsx,tsx}'],
+    exclude: ['node_modules', 'dist', 'e2e'],
+    coverage: {
+      provider: 'v8',
+      reporter: ['text', 'json', 'html'],
+      exclude: ['node_modules', 'test']
+    },
+    // Helpful for debugging
+    reporters: ['verbose'],
+    // Run tests in sequence in CI
+    poolOptions: {
+      threads: {
+        singleThread: process.env.CI === 'true'
+      }
+    }
+  }
+})
+```
+
+## Common Patterns
+
+### Mocking Modules
+```javascript
+import { vi } from 'vitest'
+
+vi.mock('@/api/users', () => ({
+  fetchUser: vi.fn().mockResolvedValue({ name: 'John' })
+}))
+```
+
+### Testing with Fake Timers
+```javascript
+import { vi, beforeEach, afterEach } from 'vitest'
+
+beforeEach(() => {
+  vi.useFakeTimers()
+})
+
+afterEach(() => {
+  vi.restoreAllMocks()
+})
+
+test('debounced search', async () => {
+  const wrapper = mount(SearchBox)
+  await wrapper.find('input').setValue('vue')
+
+  vi.advanceTimersByTime(300)
+  await flushPromises()
+
+  expect(wrapper.emitted('search')).toBeTruthy()
+})
+```
+
+## Reference
+- [Vitest Documentation](https://vitest.dev/)
+- [Vue.js Testing Guide](https://vuejs.org/guide/scaling-up/testing)
+- [Vue Test Utils](https://test-utils.vuejs.org/)
diff --git a/.claude/skills/vue/GENERATION.md b/.claude/skills/vue/GENERATION.md
new file mode 100644
index 0000000..7d4b4a5
--- /dev/null
+++ b/.claude/skills/vue/GENERATION.md
@@ -0,0 +1,5 @@
+# Generation Info
+
+- **Source:** `sources/vue`
+- **Git SHA:** `01abf2d03815d9d0ff0b06362a68d5d9542c9e48`
+- **Generated:** 2026-01-31
diff --git a/.claude/skills/vue/SKILL.md b/.claude/skills/vue/SKILL.md
new file mode 100644
index 0000000..32008d1
--- /dev/null
+++ b/.claude/skills/vue/SKILL.md
@@ -0,0 +1,84 @@
+---
+name: vue
+description: Vue 3 Composition API, script setup macros, reactivity system, and built-in components. Use when writing Vue SFCs, defineProps/defineEmits/defineModel, watchers, or using Transition/Teleport/Suspense/KeepAlive.
+metadata:
+  author: Anthony Fu
+  version: "2026.1.31"
+  source: Generated from https://github.com/vuejs/docs, scripts at https://github.com/antfu/skills
+---
+
+# Vue
+
+> Based on Vue 3.5. Always use Composition API with `<script setup lang="ts">`.
+
+## Preferences
+
+- Prefer TypeScript over JavaScript
+- Prefer `<script setup lang="ts">` over `<script>`
+- For performance, prefer `shallowRef` over `ref` if deep reactivity is not needed
+- Always use Composition API over Options API
+- Discourage using Reactive Props Destructure
+
+## Core
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Script Setup & Macros | `<script setup>`, defineProps, defineEmits, defineModel, defineExpose, defineOptions, defineSlots, generics | [script-setup-macros](references/script-setup-macros.md) |
+| Reactivity & Lifecycle | ref, shallowRef, computed, watch, watchEffect, effectScope, lifecycle hooks, composables | [core-new-apis](references/core-new-apis.md) |
+
+## Features
+
+| Topic | Description | Reference |
+|-------|-------------|-----------|
+| Built-in Components & Directives | Transition, Teleport, Suspense, KeepAlive, v-memo, custom directives | [advanced-patterns](references/advanced-patterns.md) |
+
+## Quick Reference
+
+### Component Template
+
+```vue
+<script setup lang="ts">
+import { ref, computed, watch, onMounted } from 'vue'
+
+const props = defineProps<{
+  title: string
+  count?: number
+}>()
+
+const emit = defineEmits<{
+  update: [value: string]
+}>()
+
+const model = defineModel<string>()
+
+const doubled = computed(() => (props.count ?? 0) * 2)
+
+watch(() => props.title, (newVal) => {
+  console.log('Title changed:', newVal)
+})
+
+onMounted(() => {
+  console.log('Component mounted')
+})
+</script>
+
+<template>
+  <div>{{ title }} - {{ doubled }}</div>
+</template>
+```
+
+### Key Imports
+
+```ts
+// Reactivity
+import { ref, shallowRef, computed, reactive, readonly, toRef, toRefs, toValue } from 'vue'
+
+// Watchers
+import { watch, watchEffect, watchPostEffect, onWatcherCleanup } from 'vue'
+
+// Lifecycle
+import { onMounted, onUpdated, onUnmounted, onBeforeMount, onBeforeUpdate, onBeforeUnmount } from 'vue'
+
+// Utilities
+import { nextTick, defineComponent, defineAsyncComponent } from 'vue'
+```
diff --git a/.claude/skills/vue/references/advanced-patterns.md b/.claude/skills/vue/references/advanced-patterns.md
new file mode 100644
index 0000000..243d040
--- /dev/null
+++ b/.claude/skills/vue/references/advanced-patterns.md
@@ -0,0 +1,314 @@
+---
+name: advanced-patterns
+description: Vue 3 built-in components (Transition, Teleport, Suspense, KeepAlive) and advanced directives
+---
+
+# Built-in Components & Directives
+
+## Transition
+
+Animate enter/leave of a single element or component.
+
+```vue
+<template>
+  <Transition name="fade">
+    <div v-if="show">Content</div>
+  </Transition>
+</template>
+
+<style>
+.fade-enter-active, .fade-leave-active {
+  transition: opacity 0.3s ease;
+}
+.fade-enter-from, .fade-leave-to {
+  opacity: 0;
+}
+</style>
+```
+
+### CSS Classes
+
+| Class | When |
+|-------|------|
+| `{name}-enter-from` | Start state for enter |
+| `{name}-enter-active` | Active state for enter (add transitions here) |
+| `{name}-enter-to` | End state for enter |
+| `{name}-leave-from` | Start state for leave |
+| `{name}-leave-active` | Active state for leave |
+| `{name}-leave-to` | End state for leave |
+
+### Transition Modes
+
+```vue
+<!-- Wait for leave to complete before enter -->
+<Transition name="fade" mode="out-in">
+  <component :is="currentView" />
+</Transition>
+```
+
+### JavaScript Hooks
+
+```vue
+<Transition
+  @before-enter="onBeforeEnter"
+  @enter="onEnter"
+  @after-enter="onAfterEnter"
+  @leave="onLeave"
+  :css="false"
+>
+  <div v-if="show">Content</div>
+</Transition>
+
+<script setup lang="ts">
+function onEnter(el: Element, done: () => void) {
+  // Animate with JS library
+  gsap.to(el, { opacity: 1, onComplete: done })
+}
+</script>
+```
+
+### Appear on Initial Render
+
+```vue
+<Transition appear name="fade">
+  <div>Shows with animation on mount</div>
+</Transition>
+```
+
+## TransitionGroup
+
+Animate list items. Each child must have a unique `key`.
+
+```vue
+<template>
+  <TransitionGroup name="list" tag="ul">
+    <li v-for="item in items" :key="item.id">
+      {{ item.text }}
+    </li>
+  </TransitionGroup>
+</template>
+
+<style>
+.list-enter-active, .list-leave-active {
+  transition: all 0.3s ease;
+}
+.list-enter-from, .list-leave-to {
+  opacity: 0;
+  transform: translateX(30px);
+}
+/* Move animation for reordering */
+.list-move {
+  transition: transform 0.3s ease;
+}
+</style>
+```
+
+## Teleport
+
+Render content to a different DOM location.
+
+```vue
+<template>
+  <button @click="open = true">Open Modal</button>
+  
+  <Teleport to="body">
+    <div v-if="open" class="modal">
+      Modal content rendered at body
+    </div>
+  </Teleport>
+</template>
+```
+
+### Props
+
+```vue
+<!-- CSS selector -->
+<Teleport to="#modal-container">
+
+<!-- DOM element -->
+<Teleport :to="targetElement">
+
+<!-- Disable teleport conditionally -->
+<Teleport to="body" :disabled="isMobile">
+
+<!-- Defer until target exists (Vue 3.5+) -->
+<Teleport defer to="#late-rendered-target">
+```
+
+## Suspense
+
+Handle async dependencies with loading states. **Experimental feature.**
+
+```vue
+<template>
+  <Suspense>
+    <template #default>
+      <AsyncComponent />
+    </template>
+    <template #fallback>
+      <div>Loading...</div>
+    </template>
+  </Suspense>
+</template>
+```
+
+### Async Dependencies
+
+Suspense waits for:
+- Components with `async setup()`
+- Components using top-level `await` in `<script setup>`
+- Async components created with `defineAsyncComponent`
+
+```vue
+<!-- AsyncComponent.vue -->
+<script setup lang="ts">
+const data = await fetch('/api/data').then(r => r.json())
+</script>
+```
+
+### Events
+
+```vue
+<Suspense
+  @pending="onPending"
+  @resolve="onResolve"
+  @fallback="onFallback"
+>
+  ...
+</Suspense>
+```
+
+## KeepAlive
+
+Cache component instances when toggled.
+
+```vue
+<template>
+  <KeepAlive>
+    <component :is="currentTab" />
+  </KeepAlive>
+</template>
+```
+
+### Include/Exclude
+
+```vue
+<!-- By name (string or regex) -->
+<KeepAlive include="ComponentA,ComponentB">
+<KeepAlive :include="/^Tab/">
+<KeepAlive :include="['TabA', 'TabB']">
+
+<!-- Exclude -->
+<KeepAlive exclude="ModalComponent">
+
+<!-- Max cached instances -->
+<KeepAlive :max="10">
+```
+
+### Lifecycle Hooks
+
+```ts
+import { onActivated, onDeactivated } from 'vue'
+
+onActivated(() => {
+  // Called when component is inserted from cache
+  fetchLatestData()
+})
+
+onDeactivated(() => {
+  // Called when component is removed to cache
+  pauseTimers()
+})
+```
+
+## v-memo
+
+Skip re-renders when dependencies unchanged. Use for performance optimization.
+
+```vue
+<template>
+  <div v-for="item in list" :key="item.id" v-memo="[item.selected]">
+    <!-- Only re-renders when item.selected changes -->
+    <ExpensiveComponent :item="item" />
+  </div>
+</template>
+```
+
+Equivalent to `v-once` when empty:
+```vue
+<div v-memo="[]">Never updates</div>
+```
+
+## v-once
+
+Render once, skip all future updates.
+
+```vue
+<span v-once>Static: {{ neverChanges }}</span>
+```
+
+## Custom Directives
+
+Create reusable DOM manipulations.
+
+```ts
+// Directive definition
+const vFocus: Directive<HTMLElement> = {
+  mounted: (el) => el.focus()
+}
+
+// Full hooks
+const vColor: Directive<HTMLElement, string> = {
+  created(el, binding, vnode, prevVnode) {},
+  beforeMount(el, binding) {},
+  mounted(el, binding) {
+    el.style.color = binding.value
+  },
+  beforeUpdate(el, binding) {},
+  updated(el, binding) {
+    el.style.color = binding.value
+  },
+  beforeUnmount(el, binding) {},
+  unmounted(el, binding) {}
+}
+```
+
+### Directive Arguments & Modifiers
+
+```vue
+<div v-color:background.bold="'red'">
+
+<script setup lang="ts">
+const vColor: Directive<HTMLElement, string> = {
+  mounted(el, binding) {
+    // binding.arg = 'background'
+    // binding.modifiers = { bold: true }
+    // binding.value = 'red'
+    el.style[binding.arg || 'color'] = binding.value
+    if (binding.modifiers.bold) {
+      el.style.fontWeight = 'bold'
+    }
+  }
+}
+</script>
+```
+
+### Global Registration
+
+```ts
+// main.ts
+app.directive('focus', {
+  mounted: (el) => el.focus()
+})
+```
+
+<!--
+Source references:
+- https://vuejs.org/api/built-in-components.html
+- https://vuejs.org/guide/built-ins/transition.html
+- https://vuejs.org/guide/built-ins/teleport.html
+- https://vuejs.org/guide/built-ins/suspense.html
+- https://vuejs.org/guide/built-ins/keep-alive.html
+- https://vuejs.org/api/built-in-directives.html
+- https://vuejs.org/guide/reusability/custom-directives.html
+-->
diff --git a/.claude/skills/vue/references/core-new-apis.md b/.claude/skills/vue/references/core-new-apis.md
new file mode 100644
index 0000000..4c6a9b8
--- /dev/null
+++ b/.claude/skills/vue/references/core-new-apis.md
@@ -0,0 +1,264 @@
+---
+name: core-new-apis
+description: Vue 3 reactivity system, lifecycle hooks, and composable patterns
+---
+
+# Reactivity, Lifecycle & Composables
+
+## Reactivity
+
+### ref vs shallowRef
+
+```ts
+import { ref, shallowRef } from 'vue'
+
+// ref - deep reactivity (tracks nested changes)
+const user = ref({ name: 'John', profile: { age: 30 } })
+user.value.profile.age = 31  // Triggers reactivity
+
+// shallowRef - only .value assignment triggers reactivity (better performance)
+const data = shallowRef({ items: [] })
+data.value.items.push('new')  // Does NOT trigger reactivity
+data.value = { items: ['new'] }  // Triggers reactivity
+```
+
+**Prefer `shallowRef`** for large data structures or when deep reactivity is unnecessary.
+
+### computed
+
+```ts
+import { ref, computed } from 'vue'
+
+const count = ref(0)
+
+// Read-only computed
+const doubled = computed(() => count.value * 2)
+
+// Writable computed
+const plusOne = computed({
+  get: () => count.value + 1,
+  set: (val) => { count.value = val - 1 }
+})
+```
+
+### reactive & readonly
+
+```ts
+import { reactive, readonly } from 'vue'
+
+const state = reactive({ count: 0, nested: { value: 1 } })
+state.count++  // Reactive
+
+const readonlyState = readonly(state)
+readonlyState.count++  // Warning, mutation blocked
+```
+
+Note: `reactive()` loses reactivity on destructuring. Use `ref()` or `toRefs()`.
+
+## Watchers
+
+### watch
+
+```ts
+import { ref, watch } from 'vue'
+
+const count = ref(0)
+
+// Watch single ref
+watch(count, (newVal, oldVal) => {
+  console.log(`Changed from ${oldVal} to ${newVal}`)
+})
+
+// Watch getter
+watch(
+  () => props.id,
+  (id) => fetchData(id),
+  { immediate: true }
+)
+
+// Watch multiple sources
+watch([firstName, lastName], ([first, last]) => {
+  fullName.value = `${first} ${last}`
+})
+
+// Deep watch with depth limit (Vue 3.5+)
+watch(state, callback, { deep: 2 })
+
+// Once (Vue 3.4+)
+watch(source, callback, { once: true })
+```
+
+### watchEffect
+
+Runs immediately and auto-tracks dependencies.
+
+```ts
+import { ref, watchEffect, onWatcherCleanup } from 'vue'
+
+const id = ref(1)
+
+watchEffect(async () => {
+  const controller = new AbortController()
+  
+  // Cleanup on re-run or unmount (Vue 3.5+)
+  onWatcherCleanup(() => controller.abort())
+  
+  const res = await fetch(`/api/${id.value}`, { signal: controller.signal })
+  data.value = await res.json()
+})
+
+// Pause/resume (Vue 3.5+)
+const { pause, resume, stop } = watchEffect(() => {})
+pause()
+resume()
+stop()
+```
+
+### Flush Timing
+
+```ts
+// 'pre' (default) - before component update
+// 'post' - after component update (access updated DOM)
+// 'sync' - immediate, use with caution
+
+watch(source, callback, { flush: 'post' })
+watchPostEffect(() => {})  // Alias for flush: 'post'
+```
+
+## Lifecycle Hooks
+
+```ts
+import {
+  onBeforeMount,
+  onMounted,
+  onBeforeUpdate,
+  onUpdated,
+  onBeforeUnmount,
+  onUnmounted,
+  onErrorCaptured,
+  onActivated,      // KeepAlive
+  onDeactivated,    // KeepAlive
+  onServerPrefetch  // SSR only
+} from 'vue'
+
+onMounted(() => {
+  console.log('DOM is ready')
+})
+
+onUnmounted(() => {
+  // Cleanup timers, listeners, etc.
+})
+
+// Error boundary
+onErrorCaptured((err, instance, info) => {
+  console.error(err)
+  return false  // Stop propagation
+})
+```
+
+## Effect Scope
+
+Group reactive effects for batch disposal.
+
+```ts
+import { effectScope, onScopeDispose } from 'vue'
+
+const scope = effectScope()
+
+scope.run(() => {
+  const count = ref(0)
+  const doubled = computed(() => count.value * 2)
+  
+  watch(count, () => console.log(count.value))
+  
+  // Cleanup when scope stops
+  onScopeDispose(() => {
+    console.log('Scope disposed')
+  })
+})
+
+// Dispose all effects
+scope.stop()
+```
+
+## Composables
+
+Composables are functions that encapsulate stateful logic using Composition API.
+
+### Naming Convention
+
+- Start with `use`: `useMouse`, `useFetch`, `useCounter`
+
+### Pattern
+
+```ts
+// composables/useMouse.ts
+import { ref, onMounted, onUnmounted } from 'vue'
+
+export function useMouse() {
+  const x = ref(0)
+  const y = ref(0)
+
+  const update = (e: MouseEvent) => {
+    x.value = e.pageX
+    y.value = e.pageY
+  }
+
+  onMounted(() => window.addEventListener('mousemove', update))
+  onUnmounted(() => window.removeEventListener('mousemove', update))
+
+  return { x, y }
+}
+```
+
+### Accept Reactive Input
+
+Use `toValue()` (Vue 3.3+) to normalize refs, getters, or plain values.
+
+```ts
+import { ref, watchEffect, toValue, type MaybeRefOrGetter } from 'vue'
+
+export function useFetch(url: MaybeRefOrGetter<string>) {
+  const data = ref(null)
+  const error = ref(null)
+
+  watchEffect(async () => {
+    data.value = null
+    error.value = null
+    
+    try {
+      const res = await fetch(toValue(url))
+      data.value = await res.json()
+    } catch (e) {
+      error.value = e
+    }
+  })
+
+  return { data, error }
+}
+
+// Usage - all work:
+useFetch('/api/users')
+useFetch(urlRef)
+useFetch(() => `/api/users/${props.id}`)
+```
+
+### Return Refs (Not Reactive)
+
+Always return plain object with refs for destructuring compatibility.
+
+```ts
+// Good - preserves reactivity when destructured
+return { x, y }
+
+// Bad - loses reactivity when destructured
+return reactive({ x, y })
+```
+
+<!--
+Source references:
+- https://vuejs.org/api/reactivity-core.html
+- https://vuejs.org/api/reactivity-advanced.html
+- https://vuejs.org/api/composition-api-lifecycle.html
+- https://vuejs.org/guide/reusability/composables.html
+-->
diff --git a/.claude/skills/vue/references/script-setup-macros.md b/.claude/skills/vue/references/script-setup-macros.md
new file mode 100644
index 0000000..a0caaa9
--- /dev/null
+++ b/.claude/skills/vue/references/script-setup-macros.md
@@ -0,0 +1,204 @@
+---
+name: script-setup-macros
+description: Vue 3 script setup syntax and compiler macros for defining props, emits, models, and more
+---
+
+# Script Setup & Macros
+
+`<script setup>` is the recommended syntax for Vue SFCs with Composition API. It provides better runtime performance and IDE type inference.
+
+## Basic Syntax
+
+```vue
+<script setup lang="ts">
+// Top-level bindings are exposed to template
+import { ref } from 'vue'
+import MyComponent from './MyComponent.vue'
+
+const count = ref(0)
+const increment = () => count.value++
+</script>
+
+<template>
+  <button @click="increment">{{ count }}</button>
+  <MyComponent />
+</template>
+```
+
+## defineProps
+
+Declare component props with full TypeScript support.
+
+```ts
+// Type-based declaration (recommended)
+const props = defineProps<{
+  title: string
+  count?: number
+  items: string[]
+}>()
+
+// With defaults (Vue 3.5+)
+const { title, count = 0 } = defineProps<{
+  title: string
+  count?: number
+}>()
+
+// With defaults (Vue 3.4 and below)
+const props = withDefaults(defineProps<{
+  title: string
+  items?: string[]
+}>(), {
+  items: () => []  // Use factory for arrays/objects
+})
+```
+
+## defineEmits
+
+Declare emitted events with typed payloads.
+
+```ts
+// Named tuple syntax (recommended)
+const emit = defineEmits<{
+  update: [value: string]
+  change: [id: number, name: string]
+  close: []
+}>()
+
+emit('update', 'new value')
+emit('change', 1, 'name')
+emit('close')
+```
+
+## defineModel
+
+Two-way binding prop consumed via `v-model`. Available in Vue 3.4+.
+
+```ts
+// Basic usage - creates "modelValue" prop
+const model = defineModel<string>()
+model.value = 'hello'  // Emits "update:modelValue"
+
+// Named model - consumed via v-model:name
+const count = defineModel<number>('count', { default: 0 })
+
+// With modifiers
+const [value, modifiers] = defineModel<string>()
+if (modifiers.trim) {
+  // Handle trim modifier
+}
+
+// With transformers
+const [value, modifiers] = defineModel({
+  get(val) { return val?.toLowerCase() },
+  set(val) { return modifiers.trim ? val?.trim() : val }
+})
+```
+
+Parent usage:
+```vue
+<Child v-model="name" />
+<Child v-model:count="total" />
+<Child v-model.trim="text" />
+```
+
+## defineExpose
+
+Explicitly expose properties to parent via template refs. Components are closed by default.
+
+```ts
+import { ref } from 'vue'
+
+const count = ref(0)
+const reset = () => { count.value = 0 }
+
+defineExpose({
+  count,
+  reset
+})
+```
+
+Parent access:
+```ts
+const childRef = ref<{ count: number; reset: () => void }>()
+childRef.value?.reset()
+```
+
+## defineOptions
+
+Declare component options without a separate `<script>` block. Available in Vue 3.3+.
+
+```ts
+defineOptions({
+  inheritAttrs: false,
+  name: 'CustomName'
+})
+```
+
+## defineSlots
+
+Provide type hints for slot props. Available in Vue 3.3+.
+
+```ts
+const slots = defineSlots<{
+  default(props: { item: string; index: number }): any
+  header(props: { title: string }): any
+}>()
+```
+
+## Generic Components
+
+Declare generic type parameters using the `generic` attribute.
+
+```vue
+<script setup lang="ts" generic="T extends string | number">
+defineProps<{
+  items: T[]
+  selected: T
+}>()
+</script>
+```
+
+Multiple generics with constraints:
+```vue
+<script setup lang="ts" generic="T, U extends Record<string, T>">
+import type { Item } from './types'
+defineProps<{
+  data: U
+  key: keyof U
+}>()
+</script>
+```
+
+## Local Custom Directives
+
+Use `vNameOfDirective` naming convention.
+
+```ts
+const vFocus = {
+  mounted: (el: HTMLElement) => el.focus()
+}
+
+// Or import and rename
+import { myDirective as vMyDirective } from './directives'
+```
+
+```vue
+<template>
+  <input v-focus />
+</template>
+```
+
+## Top-level await
+
+Use `await` directly in `<script setup>`. The component becomes async and must be used with `<Suspense>`.
+
+```vue
+<script setup lang="ts">
+const data = await fetch('/api/data').then(r => r.json())
+</script>
+```
+
+<!--
+Source references:
+- https://vuejs.org/api/sfc-script-setup.html
+-->
diff --git a/.editorconfig b/.editorconfig
new file mode 100755
index 0000000..9142239
--- /dev/null
+++ b/.editorconfig
@@ -0,0 +1,13 @@
+# editorconfig.org
+root = true
+
+[*]
+indent_size = 2
+indent_style = space
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.md]
+trim_trailing_whitespace = false
diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..0033531
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,36 @@
+## General
+APP_NAME="Nuxt Pocketbase Starter"
+APP_ID="com.pocketbase.nuxt"
+NODE_ENV="development"
+
+
+## Frontend
+NUXT_PUBLIC_APP_URL="http://localhost:3000"
+NUXT_PUBLIC_POCKETBASE_URL="http://127.0.0.1:8090"
+NUXT_PUBLIC_RYBBIT_URL=""  # e.g. https://app.rybbit.io
+NUXT_PUBLIC_RYBBIT_SITE_ID=""     # Your Rybbit site ID
+
+
+## Backend
+SUPERUSER_EMAIL="mail@example.com"
+SUPERUSER_PW="!234Qwer"
+
+AUTH_GOOGLE_CLIENT_ID="<client-id>"
+AUTH_GOOGLE_CLIENT_SECRET="<client-secret>"
+
+AUTH_APPLE_CLIENT_ID="<client-id>"
+AUTH_APPLE_CLIENT_SECRET="<client-secret>"
+
+
+## Sidecar
+SIDECAR_PORT=8091
+SIDECAR_SECRET="change-me-to-a-random-secret"
+
+## Firebase (FCM push notifications)
+# Paste the full content of your firebase-admin-service-account.json here (in single quotes)
+GOOGLE_CREDENTIALS_JSON=''
+
+
+## Mobile
+GOOGLE_PLAY_CONSOLE_CREDENTIALS_FILE="creds/play-console-service-account.json" # Path to the json secret file - Follow https://docs.fastlane.tools/actions/supply/#setup to get one
+APPLE_ID="peter" # Your Apple Developer Portal username
diff --git a/.gitea/workflows/android.yaml b/.gitea/workflows/android.yaml
new file mode 100644
index 0000000..2d8d524
--- /dev/null
+++ b/.gitea/workflows/android.yaml
@@ -0,0 +1,48 @@
+name: Build and release Android app
+
+on:
+  push:
+    branches:
+      - release
+  workflow_dispatch:
+
+jobs:
+  build-and-release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '4.0.2'
+          bundler-cache: true
+          working-directory: ./fastlane
+
+      - name: Set up Java
+        uses: actions/setup-java@v5
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+
+      - name: Install Fastlane dependencies
+        run: |
+          cd fastlane
+          bundle install
+
+      - name: Build web assets
+        run: |
+          pnpm install
+          pnpm build
+
+      - name: Sync web assets to Android
+        run: |
+          pnpm capacitor sync android
+
+      - name: Run Fastlane release
+        env:
+          PLAY_STORE_JSON_KEY_DATA: ${{ secrets.PLAY_STORE_JSON_KEY_DATA }}
+        run: |
+          cd fastlane
+          fastlane android release
diff --git a/.gitea/workflows/backend.yaml b/.gitea/workflows/backend.yaml
new file mode 100644
index 0000000..a01add4
--- /dev/null
+++ b/.gitea/workflows/backend.yaml
@@ -0,0 +1,56 @@
+name: Build backend Docker image
+
+on:
+  push:
+    branches:
+      - release
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+        with:
+          sparse-checkout: |
+            pocketbase
+
+      - name: Extract version from package.json
+        id: version
+        run: |
+          VERSION=$(jq -r '.version' package.json)
+          echo "version=$VERSION" >> $GITEA_OUTPUT
+          echo "Extracted version: $VERSION"
+
+      - name: Extract registry URL without protocol
+        id: registry
+        run: |
+          # Remove https:// or http:// prefix
+          SERVER_URL="${{ gitea.server_url }}"
+          REGISTRY_URL="${SERVER_URL#https://}"
+          REGISTRY_URL="${REGISTRY_URL#http://}"
+          echo "registry_url=$REGISTRY_URL" >> $GITEA_OUTPUT
+          echo "Registry URL: $REGISTRY_URL"
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Log in to Gitea Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ gitea.server_url }}
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v7
+        with:
+          context: ./pocketbase
+          push: true
+          tags: |
+            ${{ steps.registry.outputs.registry_url }}/${{ gitea.repository }}-frontend:${{ steps.version.outputs.version }}
+            ${{ steps.registry.outputs.registry_url }}/${{ gitea.repository }}-frontend:latest
+          build-args: |
+            NUXT_PUBLIC_APP_URL=${{ vars.NUXT_PUBLIC_APP_URL }}
+            NUXT_PUBLIC_POCKETBASE_URL=${{ vars.NUXT_PUBLIC_POCKETBASE_URL }}
diff --git a/.gitea/workflows/frontend.yaml b/.gitea/workflows/frontend.yaml
new file mode 100644
index 0000000..31ab756
--- /dev/null
+++ b/.gitea/workflows/frontend.yaml
@@ -0,0 +1,55 @@
+name: Build frontend Docker image
+
+on:
+  push:
+    branches:
+      - release
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+        with:
+          sparse-checkout: |
+            app
+
+      - name: Extract version from package.json
+        id: version
+        run: |
+          VERSION=$(jq -r '.version' package.json)
+          echo "version=$VERSION" >> $GITEA_OUTPUT
+          echo "Extracted version: $VERSION"
+
+      - name: Extract registry URL without protocol
+        id: registry
+        run: |
+          # Remove https:// or http:// prefix
+          SERVER_URL="${{ gitea.server_url }}"
+          REGISTRY_URL="${SERVER_URL#https://}"
+          REGISTRY_URL="${REGISTRY_URL#http://}"
+          echo "registry_url=$REGISTRY_URL" >> $GITEA_OUTPUT
+          echo "Registry URL: $REGISTRY_URL"
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Log in to Gitea Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ gitea.server_url }}
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v7
+        with:
+          push: true
+          tags: |
+            ${{ steps.registry.outputs.registry_url }}/${{ gitea.repository }}-frontend:${{ steps.version.outputs.version }}
+            ${{ steps.registry.outputs.registry_url }}/${{ gitea.repository }}-frontend:latest
+          build-args: |
+            NUXT_PUBLIC_APP_URL=${{ vars.NUXT_PUBLIC_APP_URL }}
+            NUXT_PUBLIC_POCKETBASE_URL=${{ vars.NUXT_PUBLIC_POCKETBASE_URL }}
diff --git a/.gitea/workflows/ios.yaml b/.gitea/workflows/ios.yaml
new file mode 100644
index 0000000..cb56da1
--- /dev/null
+++ b/.gitea/workflows/ios.yaml
@@ -0,0 +1,122 @@
+name: Build and upload iOS app
+
+on:
+  push:
+    branches:
+      - release
+  workflow_dispatch:
+
+jobs:
+  ios:
+    runs-on: macos-latest
+    timeout-minutes: 120
+
+    steps:
+      - name: Checkout repository
+        uses: https://github.com/actions/checkout@v6
+
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '4.0.2'
+          bundler-cache: true
+          working-directory: fastlane
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: '22'
+          cache: 'pnpm'
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v6
+        with:
+          version: 10.33.0
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Generate app assets
+        run: pnpm assets
+
+      - name: Build Nuxt app
+        run: pnpm build
+
+      - name: Sync to iOS
+        run: npx cap sync ios
+
+      - name: Setup Xcode
+        uses: maxim-lobanov/setup-xcode@v1
+        with:
+          xcode-version: latest-stable
+
+      - name: Set up App Store Connect API key
+        env:
+          APP_STORE_CONNECT_API_KEY_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_ID }}
+          APP_STORE_CONNECT_API_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_API_ISSUER_ID }}
+          APP_STORE_CONNECT_API_KEY_CONTENT: ${{ secrets.APP_STORE_CONNECT_API_KEY_CONTENT }}
+        run: |
+          mkdir -p ~/.appstoreconnect/private_keys
+          echo "$APP_STORE_CONNECT_API_KEY_CONTENT" | base64 --decode > ~/.appstoreconnect/private_keys/AuthKey_$APP_STORE_CONNECT_API_KEY_ID.p8
+          echo "Created API key file"
+
+      - name: Import code signing certificate
+        env:
+          IOS_CERTIFICATE_BASE64: ${{ secrets.IOS_CERTIFICATE_BASE64 }}
+          IOS_CERTIFICATE_PASSWORD: ${{ secrets.IOS_CERTIFICATE_PASSWORD }}
+          IOS_PROVISIONING_PROFILE_BASE64: ${{ secrets.IOS_PROVISIONING_PROFILE_BASE64 }}
+        run: |
+          # Create temporary keychain
+          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
+          KEYCHAIN_PASSWORD=$(openssl rand -base64 32)
+          security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          security list-keychains -d user -s $KEYCHAIN_PATH
+
+          # Import certificate
+          CERTIFICATE_PATH=$RUNNER_TEMP/certificate.p12
+          echo "$IOS_CERTIFICATE_BASE64" | base64 --decode > $CERTIFICATE_PATH
+          security import $CERTIFICATE_PATH -P "$IOS_CERTIFICATE_PASSWORD" -A -t cert -f pkcs12
+          security list-keychain -d user -s $KEYCHAIN_PATH
+          security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+
+          # Import provisioning profile
+          PROVISIONING_PROFILE_PATH=$RUNNER_TEMP/profile.mobileprovision
+          echo "$IOS_PROVISIONING_PROFILE_BASE64" | base64 --decode > $PROVISIONING_PROFILE_PATH
+          mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
+          cp $PROVISIONING_PROFILE_PATH ~/Library/MobileDevice/Provisioning\ Profiles/
+
+          echo "Code signing setup complete"
+
+      - name: Run Fastlane iOS release
+        env:
+          APP_STORE_CONNECT_API_KEY_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_ID }}
+          APP_STORE_CONNECT_API_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_API_ISSUER_ID }}
+          APP_STORE_CONNECT_API_KEY_CONTENT: ${{ secrets.APP_STORE_CONNECT_API_KEY_CONTENT }}
+          FASTLANE_APPLE_APPLICATION_SPECIFIC_PASSWORD: ${{ secrets.FASTLANE_APPLE_APPLICATION_SPECIFIC_PASSWORD }}
+          MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
+          FASTLANE_USER: ${{ secrets.FASTLANE_USER }}
+          FASTLANE_PASSWORD: ${{ secrets.FASTLANE_PASSWORD }}
+        run: |
+          cd fastlane
+          bundle exec fastlane ios release
+        working-directory: fastlane
+
+      - name: Clean up keychain
+        if: always()
+        run: |
+          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
+          security delete-keychain $KEYCHAIN_PATH || true
+          rm -rf ~/.appstoreconnect || true
+          rm -rf ~/Library/MobileDevice/Provisioning\ Profiles/*.mobileprovision || true
+
+      - name: Upload IPA artifact
+        if: success() || failure()
+        uses: actions/upload-artifact@v7
+        with:
+          name: ios-app
+          path: |
+            fastlane/*.ipa
+            fastlane/*.dSYM.zip
+          retention-days: 30
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..eeacb60
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,36 @@
+# Nuxt dev/build outputs
+.output
+.data
+.nuxt
+.nitro
+.cache
+dist
+
+# Node dependencies
+node_modules
+
+# Logs
+logs
+*.log
+
+# Misc
+.DS_Store
+.fleet
+.idea
+
+# Local env files
+.env
+.env.*
+!.env.example
+
+# Credentials
+creds
+google-services.json
+
+# PocketBase executable and data
+pocketbase/pocketbase
+pocketbase/pb_data
+pocketbase/mp_data
+
+# AI Agent directories
+.playwright-mcp
diff --git a/.nuxtrc b/.nuxtrc
new file mode 100644
index 0000000..4f03c3f
--- /dev/null
+++ b/.nuxtrc
@@ -0,0 +1 @@
+setups.@nuxt/test-utils="4.0.2"
\ No newline at end of file
diff --git a/.vscode/extensions.json b/.vscode/extensions.json
new file mode 100644
index 0000000..f43dc42
--- /dev/null
+++ b/.vscode/extensions.json
@@ -0,0 +1,8 @@
+{
+  "recommendations": [
+    "denoland.vscode-deno",
+    "tombi-toml.tombi",
+    "dbaeumer.vscode-eslint",
+    "vue.volar"
+  ]
+}
diff --git a/.vscode/settings.json b/.vscode/settings.json
new file mode 100644
index 0000000..f30101d
--- /dev/null
+++ b/.vscode/settings.json
@@ -0,0 +1,23 @@
+{
+  "editor.formatOnSave": true,
+  "editor.defaultFormatter": "dbaeumer.vscode-eslint",
+  "deno.enablePaths": [
+    "pocketbase"
+  ],
+  "deno.lint": true,
+  "deno.unstable": [
+    "bare-node-builtins",
+    "byonm",
+    "sloppy-imports",
+    "unsafe-proto",
+    "webgpu",
+    "broadcast-channel",
+    "worker-options",
+    "cron",
+    "kv",
+    "ffi",
+    "fs",
+    "http",
+    "net"
+  ],
+}
diff --git a/.zed/debug.json b/.zed/debug.json
new file mode 100644
index 0000000..199b9d3
--- /dev/null
+++ b/.zed/debug.json
@@ -0,0 +1,14 @@
+[
+  {
+    "label": "Launch Chrome (TypeScript)",
+    "adapter": "JavaScript",
+    "type": "chrome",
+    "request": "launch",
+    "url": "http://localhost:3000",
+    "program": "$ZED_FILE",
+    "webRoot": "${ZED_WORKTREE_ROOT}",
+    "skipFiles": [
+      "<node_internals>/**"
+    ]
+  }
+]
diff --git a/.zed/i18n.json b/.zed/i18n.json
new file mode 100644
index 0000000..784858c
--- /dev/null
+++ b/.zed/i18n.json
@@ -0,0 +1,6 @@
+{
+  "localePaths": [
+    "app/i18n/locales"
+  ],
+  "sourceLocale": "en"
+}
diff --git a/.zed/settings.json b/.zed/settings.json
new file mode 100644
index 0000000..67234f9
--- /dev/null
+++ b/.zed/settings.json
@@ -0,0 +1,43 @@
+{
+  "formatter": [],
+  "code_actions_on_format": {
+    "source.fixAll.eslint": true,
+  },
+  "lsp": {
+    "tailwindcss-language-server": {
+      "settings": {
+        "includeLanguages": {
+          "vue": "html",
+        },
+        "experimental": {
+          "classRegex": [
+            "class=\"([^\"]*)\"",
+            "class='([^']*)'",
+            ":class=\"([^\"]*)\"",
+            ":class='([^']*)'",
+          ],
+        },
+      },
+    },
+    "json-language-server": {
+      "settings": {
+        "json": {
+          "schemas": [
+            {
+              "fileMatch": [
+                "package.json"
+              ],
+              "url": "https://www.schemastore.org/package",
+            },
+          ],
+        },
+      },
+    },
+  },
+  "file_types": {
+    "GitHub Actions": [
+      ".gitea/workflows/*.yml",
+      ".gitea/workflows/*.yaml"
+    ]
+  }
+}
diff --git a/CLAUDE.md b/CLAUDE.md
new file mode 100644
index 0000000..774f02d
--- /dev/null
+++ b/CLAUDE.md
@@ -0,0 +1,116 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+Full-stack starter template: **Nuxt 4 SPA** frontend + **PocketBase** backend + **Capacitor** mobile (Android/iOS) + **Deno sidecar** for FCM push notifications. Designed as a copy-and-customize base for shipping apps fast.
+
+**SSR is disabled** (`ssr: false`) — this is a pure SPA. There are no Nuxt server routes.
+
+## Commands
+
+```bash
+# Frontend
+pnpm dev                  # Start Nuxt dev server (localhost:3000)
+pnpm build                # Production build
+pnpm lint                 # ESLint
+pnpm typecheck            # nuxt typecheck (vue-tsc)
+pnpm test                 # Vitest (unit/e2e/nuxt projects)
+
+# Backend
+pnpm pocketbase:start     # docker compose up (PocketBase + sidecar + mailpit)
+pnpm pocketbase:stop      # docker compose down
+pnpm pocketbase:types     # Regenerate TypeScript types from PocketBase schema
+
+# Mobile
+pnpm assets               # Generate app icons and splash screens
+```
+
+**Dev workflow:** Run `pnpm pocketbase:start` first, then `pnpm dev` in a second terminal.
+
+**Mailpit** (dev email viewer) runs at `http://localhost:8025` when PocketBase is up.
+
+## Architecture
+
+```
+app/                      # Nuxt frontend (SPA)
+├── pages/                # File-based routing (index, login, profile, confirm)
+├── stores/               # Pinia stores (user, counter, notifications, avatar)
+├── plugins/pocketbase.ts # PB client init with ReactiveAuthStore
+├── composables/          # usePocketBase() → { pb, authStore }
+├── middleware/            # auth guard + global user fetch
+├── components/           # App/, Counter/, Profile/ subdirs
+├── i18n/locales/         # en.json, de.json (frontend translations)
+└── types/                # pocketbase.types.ts (auto-generated), i18n.types.ts
+
+pocketbase/
+├── pb_migrations/        # Numbered JS migrations (0-4)
+├── pb_hooks/             # Server-side JS hooks (OTP user creation, mail templates, FCM, custom endpoints)
+│   ├── templates/        # Localized HTML email templates (en/, de/)
+│   └── locales/          # Backend translation JSON (mail subjects, notification text)
+├── sidecar/              # Deno microservice for FCM push (:8091)
+└── docker-compose.yml    # pocketbase + sidecar + mailpit
+```
+
+## Key Patterns
+
+### Authentication
+Three methods: **Email OTP** (primary), **Google OAuth**, **Apple OAuth**. Flow lives in `app/stores/user.ts`. PocketBase hooks auto-create users on first OTP request (`pb_hooks/createOtpUser.pb.js`). OAuth redirect lands on `/confirm` page.
+
+### Reactive Auth
+`app/plugins/pocketbase.ts` wraps PocketBase's `LocalAuthStore` in a Vue-reactive `ReactiveAuthStore` using `shallowRef`. Access via `usePocketBase()` composable — never instantiate PocketBase directly.
+
+### Realtime Subscriptions
+Stores (`counter.ts`, `notifications.ts`) use `pb.collection('x').subscribe('*', callback)` for live updates. Always call `unsubscribe()` on component unmount.
+
+### PocketBase Hooks
+Hooks in `pocketbase/pb_hooks/` run inside PocketBase's embedded JS engine (not Node/Deno). They use PocketBase's JSVM API — `onMailerRecordOTPSend`, `routerAdd`, `$app.findFirstRecordByFilter`, etc. See [PocketBase JSVM docs](https://pocketbase.io/docs/js-overview/).
+
+### Custom Endpoints
+Custom backend routes are defined in PocketBase hooks via `routerAdd()`. Example: `POST /counter/reset` in `resetCounter.pb.js`.
+
+### Adding a New Collection
+1. Create a migration in `pocketbase/pb_migrations/` (next number in sequence)
+2. Run `pnpm pocketbase:types` to regenerate `app/types/pocketbase.types.ts`
+3. Create a Pinia store in `app/stores/` for the new collection
+4. Use typed collection names from `Collections` enum in `pocketbase.types.ts`
+
+### Localization
+Frontend: `@nuxtjs/i18n` with `no_prefix` strategy (en, de). Backend: per-user `language` field drives email template and notification text selection. When adding a new language, update both `app/i18n/locales/` and `pocketbase/pb_hooks/locales/` + `templates/`.
+
+## Tech Stack Quick Reference
+
+| Layer | Tech |
+|-------|------|
+| Frontend | Nuxt 4, Vue 3, Pinia, Nuxt UI, Tailwind CSS v4 |
+| Backend | PocketBase (SQLite, REST, Realtime WS) |
+| Mobile | Capacitor (Android/iOS), Push Notifications |
+| Sidecar | Deno (FCM auth + push delivery, port 8091) |
+| Email (dev) | Mailpit (SMTP + web UI) |
+| Validation | Zod |
+| Package mgr | pnpm (monorepo via pnpm-workspace.yaml) |
+| Testing | Vitest + @nuxt/test-utils + Playwright |
+
+## Environment
+
+Copy `.env.example` to `.env`. Key vars: `NUXT_PUBLIC_POCKETBASE_URL`, `SUPERUSER_EMAIL`/`SUPERUSER_PW`, OAuth client IDs/secrets, `SIDECAR_SECRET`, `GOOGLE_CREDENTIALS_JSON` (for FCM).
+
+## Validating Changes
+
+After making changes to the frontend, **always validate them using the Playwright MCP server** by interacting with the app as a user would. The dev server runs at `http://localhost:3000`.
+
+Typical validation flow:
+1. Navigate to the relevant page with `mcp__playwright__browser_navigate`
+2. Use `mcp__playwright__browser_snapshot` to inspect the page structure
+3. Interact with UI elements via `mcp__playwright__browser_click`, `mcp__playwright__browser_fill_form`, etc.
+4. Confirm the expected behaviour is visible in the snapshot or page state
+
+This applies to any visible UI change — new components, routing changes, form flows, auth states, etc.
+
+## File Conventions
+
+- `app/types/pocketbase.types.ts` is **auto-generated** — do not edit manually, run `pnpm pocketbase:types`
+- PocketBase migrations are numbered sequentially (`0_setup.js`, `1_users_language.js`, ...)
+- PocketBase hooks use `.pb.js` extension
+- Email templates are plain HTML with `{{.Variable}}` Go template syntax
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..835ca57
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,39 @@
+# Build Stage 1
+
+FROM node:22-alpine AS build
+WORKDIR /app
+
+RUN corepack enable
+
+# Copy package.json and your lockfile, here we add pnpm-lock.yaml for illustration
+COPY package.json pnpm-lock.yaml ./
+
+# Install dependencies
+RUN pnpm i
+
+# Copy the project
+COPY nuxt.config.ts eslint.config.mjs ./
+COPY app ./app
+
+ARG NODE_ENV=production
+ARG NUXT_PUBLIC_APP_URL
+ARG NUXT_PUBLIC_POCKETBASE_URL
+
+ENV NODE_ENV=$NODE_ENV
+ENV NUXT_PUBLIC_APP_URL=$NUXT_PUBLIC_APP_URL
+ENV NUXT_PUBLIC_POCKETBASE_URL=$NUXT_PUBLIC_POCKETBASE_URL
+
+# Build the project
+RUN pnpm run build
+
+# Build Stage 2
+
+FROM node:22-alpine
+WORKDIR /app
+
+# Only `.output` folder is needed from the build stage
+COPY --from=build /app/.output/ ./
+
+EXPOSE 3000
+
+CMD ["node", "/app/server/index.mjs"]
diff --git a/Gemfile b/Gemfile
new file mode 100644
index 0000000..e01f77a
--- /dev/null
+++ b/Gemfile
@@ -0,0 +1,6 @@
+source 'https://rubygems.org'
+
+gem 'fastlane'
+
+plugins_path = File.join(File.dirname(__FILE__), 'fastlane', 'Pluginfile')
+eval_gemfile(plugins_path) if File.exist?(plugins_path)
diff --git a/Gemfile.lock b/Gemfile.lock
new file mode 100644
index 0000000..3affd11
--- /dev/null
+++ b/Gemfile.lock
@@ -0,0 +1,341 @@
+GEM
+  remote: https://rubygems.org/
+  specs:
+    CFPropertyList (3.0.8)
+    abbrev (0.1.2)
+    addressable (2.8.9)
+      public_suffix (>= 2.0.2, < 8.0)
+    artifactory (3.0.17)
+    atomos (0.1.3)
+    aws-eventstream (1.4.0)
+    aws-partitions (1.1226.0)
+    aws-sdk-core (3.243.0)
+      aws-eventstream (~> 1, >= 1.3.0)
+      aws-partitions (~> 1, >= 1.992.0)
+      aws-sigv4 (~> 1.9)
+      base64
+      bigdecimal
+      jmespath (~> 1, >= 1.6.1)
+      logger
+    aws-sdk-kms (1.122.0)
+      aws-sdk-core (~> 3, >= 3.241.4)
+      aws-sigv4 (~> 1.5)
+    aws-sdk-s3 (1.216.0)
+      aws-sdk-core (~> 3, >= 3.243.0)
+      aws-sdk-kms (~> 1)
+      aws-sigv4 (~> 1.5)
+    aws-sigv4 (1.12.1)
+      aws-eventstream (~> 1, >= 1.0.2)
+    babosa (1.0.4)
+    base64 (0.2.0)
+    benchmark (0.5.0)
+    bigdecimal (4.0.1)
+    claide (1.1.0)
+    colored (1.2)
+    colored2 (3.1.2)
+    commander (4.6.0)
+      highline (~> 2.0.0)
+    csv (3.3.5)
+    declarative (0.0.20)
+    digest-crc (0.7.0)
+      rake (>= 12.0.0, < 14.0.0)
+    domain_name (0.6.20240107)
+    dotenv (2.8.1)
+    emoji_regex (3.2.3)
+    excon (0.112.0)
+    faraday (1.10.5)
+      faraday-em_http (~> 1.0)
+      faraday-em_synchrony (~> 1.0)
+      faraday-excon (~> 1.1)
+      faraday-httpclient (~> 1.0)
+      faraday-multipart (~> 1.0)
+      faraday-net_http (~> 1.0)
+      faraday-net_http_persistent (~> 1.0)
+      faraday-patron (~> 1.0)
+      faraday-rack (~> 1.0)
+      faraday-retry (~> 1.0)
+      ruby2_keywords (>= 0.0.4)
+    faraday-cookie_jar (0.0.8)
+      faraday (>= 0.8.0)
+      http-cookie (>= 1.0.0)
+    faraday-em_http (1.0.0)
+    faraday-em_synchrony (1.0.1)
+    faraday-excon (1.1.0)
+    faraday-httpclient (1.0.1)
+    faraday-multipart (1.2.0)
+      multipart-post (~> 2.0)
+    faraday-net_http (1.0.2)
+    faraday-net_http_persistent (1.2.0)
+    faraday-patron (1.0.0)
+    faraday-rack (1.0.0)
+    faraday-retry (1.0.4)
+    faraday_middleware (1.2.1)
+      faraday (~> 1.0)
+    fastimage (2.4.1)
+    fastlane (2.232.2)
+      CFPropertyList (>= 2.3, < 4.0.0)
+      abbrev (~> 0.1.2)
+      addressable (>= 2.8, < 3.0.0)
+      artifactory (~> 3.0)
+      aws-sdk-s3 (~> 1.197)
+      babosa (>= 1.0.3, < 2.0.0)
+      base64 (~> 0.2.0)
+      benchmark (>= 0.1.0)
+      bundler (>= 1.17.3, < 5.0.0)
+      colored (~> 1.2)
+      commander (~> 4.6)
+      csv (~> 3.3)
+      dotenv (>= 2.1.1, < 3.0.0)
+      emoji_regex (>= 0.1, < 4.0)
+      excon (>= 0.71.0, < 1.0.0)
+      faraday (~> 1.0)
+      faraday-cookie_jar (~> 0.0.6)
+      faraday_middleware (~> 1.0)
+      fastimage (>= 2.1.0, < 3.0.0)
+      fastlane-sirp (>= 1.0.0)
+      gh_inspector (>= 1.1.2, < 2.0.0)
+      google-apis-androidpublisher_v3 (~> 0.3)
+      google-apis-playcustomapp_v1 (~> 0.1)
+      google-cloud-env (>= 1.6.0, <= 2.1.1)
+      google-cloud-storage (~> 1.31)
+      highline (~> 2.0)
+      http-cookie (~> 1.0.5)
+      json (< 3.0.0)
+      jwt (>= 2.1.0, < 3)
+      logger (>= 1.6, < 2.0)
+      mini_magick (>= 4.9.4, < 5.0.0)
+      multipart-post (>= 2.0.0, < 3.0.0)
+      mutex_m (~> 0.3.0)
+      naturally (~> 2.2)
+      nkf (~> 0.2.0)
+      optparse (>= 0.1.1, < 1.0.0)
+      ostruct (>= 0.1.0)
+      plist (>= 3.1.0, < 4.0.0)
+      rubyzip (>= 2.0.0, < 3.0.0)
+      security (= 0.1.5)
+      simctl (~> 1.6.3)
+      terminal-notifier (>= 2.0.0, < 3.0.0)
+      terminal-table (~> 3)
+      tty-screen (>= 0.6.3, < 1.0.0)
+      tty-spinner (>= 0.8.0, < 1.0.0)
+      word_wrap (~> 1.0.0)
+      xcodeproj (>= 1.13.0, < 2.0.0)
+      xcpretty (~> 0.4.1)
+      xcpretty-travis-formatter (>= 0.0.3, < 2.0.0)
+    fastlane-plugin-load_json (0.0.1)
+    fastlane-sirp (1.0.0)
+      sysrandom (~> 1.0)
+    gh_inspector (1.1.3)
+    google-apis-androidpublisher_v3 (0.97.0)
+      google-apis-core (>= 0.15.0, < 2.a)
+    google-apis-core (0.18.0)
+      addressable (~> 2.5, >= 2.5.1)
+      googleauth (~> 1.9)
+      httpclient (>= 2.8.3, < 3.a)
+      mini_mime (~> 1.0)
+      mutex_m
+      representable (~> 3.0)
+      retriable (>= 2.0, < 4.a)
+    google-apis-iamcredentials_v1 (0.26.0)
+      google-apis-core (>= 0.15.0, < 2.a)
+    google-apis-playcustomapp_v1 (0.17.0)
+      google-apis-core (>= 0.15.0, < 2.a)
+    google-apis-storage_v1 (0.61.0)
+      google-apis-core (>= 0.15.0, < 2.a)
+    google-cloud-core (1.8.0)
+      google-cloud-env (>= 1.0, < 3.a)
+      google-cloud-errors (~> 1.0)
+    google-cloud-env (2.1.1)
+      faraday (>= 1.0, < 3.a)
+    google-cloud-errors (1.5.0)
+    google-cloud-storage (1.58.0)
+      addressable (~> 2.8)
+      digest-crc (~> 0.4)
+      google-apis-core (>= 0.18, < 2)
+      google-apis-iamcredentials_v1 (~> 0.18)
+      google-apis-storage_v1 (>= 0.42)
+      google-cloud-core (~> 1.6)
+      googleauth (~> 1.9)
+      mini_mime (~> 1.0)
+    googleauth (1.11.2)
+      faraday (>= 1.0, < 3.a)
+      google-cloud-env (~> 2.1)
+      jwt (>= 1.4, < 3.0)
+      multi_json (~> 1.11)
+      os (>= 0.9, < 2.0)
+      signet (>= 0.16, < 2.a)
+    highline (2.0.3)
+    http-cookie (1.0.8)
+      domain_name (~> 0.5)
+    httpclient (2.9.0)
+      mutex_m
+    jmespath (1.6.2)
+    json (2.19.1)
+    jwt (2.10.2)
+      base64
+    logger (1.7.0)
+    mini_magick (4.13.2)
+    mini_mime (1.1.5)
+    multi_json (1.19.1)
+    multipart-post (2.4.1)
+    mutex_m (0.3.0)
+    nanaimo (0.4.0)
+    naturally (2.3.0)
+    nkf (0.2.0)
+    optparse (0.8.1)
+    os (1.1.4)
+    ostruct (0.6.3)
+    plist (3.7.2)
+    public_suffix (7.0.5)
+    rake (13.3.1)
+    representable (3.2.0)
+      declarative (< 0.1.0)
+      trailblazer-option (>= 0.1.1, < 0.2.0)
+      uber (< 0.2.0)
+    retriable (3.4.1)
+    rexml (3.4.4)
+    rouge (3.28.0)
+    ruby2_keywords (0.0.5)
+    rubyzip (2.4.1)
+    security (0.1.5)
+    signet (0.21.0)
+      addressable (~> 2.8)
+      faraday (>= 0.17.5, < 3.a)
+      jwt (>= 1.5, < 4.0)
+      multi_json (~> 1.10)
+    simctl (1.6.10)
+      CFPropertyList
+      naturally
+    sysrandom (1.0.5)
+    terminal-notifier (2.0.0)
+    terminal-table (3.0.2)
+      unicode-display_width (>= 1.1.1, < 3)
+    trailblazer-option (0.1.2)
+    tty-cursor (0.7.1)
+    tty-screen (0.8.2)
+    tty-spinner (0.9.3)
+      tty-cursor (~> 0.7)
+    uber (0.1.0)
+    unicode-display_width (2.6.0)
+    word_wrap (1.0.0)
+    xcodeproj (1.27.0)
+      CFPropertyList (>= 2.3.3, < 4.0)
+      atomos (~> 0.1.3)
+      claide (>= 1.0.2, < 2.0)
+      colored2 (~> 3.1)
+      nanaimo (~> 0.4.0)
+      rexml (>= 3.3.6, < 4.0)
+    xcpretty (0.4.1)
+      rouge (~> 3.28.0)
+    xcpretty-travis-formatter (1.0.1)
+      xcpretty (~> 0.2, >= 0.0.7)
+
+PLATFORMS
+  ruby
+  x86_64-linux-gnu
+
+DEPENDENCIES
+  fastlane
+  fastlane-plugin-load_json
+
+CHECKSUMS
+  CFPropertyList (3.0.8) sha256=2c99d0d980536d3d7ab252f7bd59ac8be50fbdd1ff487c98c949bb66bb114261
+  abbrev (0.1.2) sha256=ad1b4eaaaed4cb722d5684d63949e4bde1d34f2a95e20db93aecfe7cbac74242
+  addressable (2.8.9) sha256=cc154fcbe689711808a43601dee7b980238ce54368d23e127421753e46895485
+  artifactory (3.0.17) sha256=3023d5c964c31674090d655a516f38ca75665c15084140c08b7f2841131af263
+  atomos (0.1.3) sha256=7d43b22f2454a36bace5532d30785b06de3711399cb1c6bf932573eda536789f
+  aws-eventstream (1.4.0) sha256=116bf85c436200d1060811e6f5d2d40c88f65448f2125bc77ffce5121e6e183b
+  aws-partitions (1.1226.0) sha256=66fde74a9b53de8df53d511fdf2d898cb647d804ba1db34a6fe9b256fed449a8
+  aws-sdk-core (3.243.0) sha256=a014eef785124b71d28325783fa422a1512f8421ec9b6e3931c8b0ca3fbb0f1c
+  aws-sdk-kms (1.122.0) sha256=47ce3f51b26bd7d76f1270cfdfca17b40073ecd3219c8c9400788712abfb4eb8
+  aws-sdk-s3 (1.216.0) sha256=a3bf6191e6f7a3dfb04b7cc73409f059394be559e4aff92d2a764341e4d90af4
+  aws-sigv4 (1.12.1) sha256=6973ff95cb0fd0dc58ba26e90e9510a2219525d07620c8babeb70ef831826c00
+  babosa (1.0.4) sha256=18dea450f595462ed7cb80595abd76b2e535db8c91b350f6c4b3d73986c5bc99
+  base64 (0.2.0) sha256=0f25e9b21a02a0cc0cea8ef92b2041035d39350946e8789c562b2d1a3da01507
+  benchmark (0.5.0) sha256=465df122341aedcb81a2a24b4d3bd19b6c67c1530713fd533f3ff034e419236c
+  bigdecimal (4.0.1) sha256=8b07d3d065a9f921c80ceaea7c9d4ae596697295b584c296fe599dd0ad01c4a7
+  claide (1.1.0) sha256=6d3c5c089dde904d96aa30e73306d0d4bd444b1accb9b3125ce14a3c0183f82e
+  colored (1.2) sha256=9d82b47ac589ce7f6cab64b1f194a2009e9fd00c326a5357321f44afab2c1d2c
+  colored2 (3.1.2) sha256=b13c2bd7eeae2cf7356a62501d398e72fde78780bd26aec6a979578293c28b4a
+  commander (4.6.0) sha256=7d1ddc3fccae60cc906b4131b916107e2ef0108858f485fdda30610c0f2913d9
+  csv (3.3.5) sha256=6e5134ac3383ef728b7f02725d9872934f523cb40b961479f69cf3afa6c8e73f
+  declarative (0.0.20) sha256=8021dd6cb17ab2b61233c56903d3f5a259c5cf43c80ff332d447d395b17d9ff9
+  digest-crc (0.7.0) sha256=64adc23a26a241044cbe6732477ca1b3c281d79e2240bcff275a37a5a0d78c07
+  domain_name (0.6.20240107) sha256=5f693b2215708476517479bf2b3802e49068ad82167bcd2286f899536a17d933
+  dotenv (2.8.1) sha256=c5944793349ae03c432e1780a2ca929d60b88c7d14d52d630db0508c3a8a17d8
+  emoji_regex (3.2.3) sha256=ecd8be856b7691406c6bf3bb3a5e55d6ed683ffab98b4aa531bb90e1ddcc564b
+  excon (0.112.0) sha256=daf9ac3a4c2fc9aa48383a33da77ecb44fa395111e973084d5c52f6f214ae0f0
+  faraday (1.10.5) sha256=b144f1d2b045652fa820b5f532723e1643cc28b93dae911d784e5c5f88e8f6ed
+  faraday-cookie_jar (0.0.8) sha256=0140605823f8cc63c7028fccee486aaed8e54835c360cffc1f7c8c07c4299dbb
+  faraday-em_http (1.0.0) sha256=7a3d4c7079789121054f57e08cd4ef7e40ad1549b63101f38c7093a9d6c59689
+  faraday-em_synchrony (1.0.1) sha256=bf3ce45dcf543088d319ab051f80985ea6d294930635b7a0b966563179f81750
+  faraday-excon (1.1.0) sha256=b055c842376734d7f74350fe8611542ae2000c5387348d9ba9708109d6e40940
+  faraday-httpclient (1.0.1) sha256=4c8ff1f0973ff835be8d043ef16aaf54f47f25b7578f6d916deee8399a04d33b
+  faraday-multipart (1.2.0) sha256=7d89a949693714176f612323ca13746a2ded204031a6ba528adee788694ef757
+  faraday-net_http (1.0.2) sha256=63992efea42c925a20818cf3c0830947948541fdcf345842755510d266e4c682
+  faraday-net_http_persistent (1.2.0) sha256=0b0cbc8f03dab943c3e1cc58d8b7beb142d9df068b39c718cd83e39260348335
+  faraday-patron (1.0.0) sha256=dc2cd7b340bb3cc8e36bcb9e6e7eff43d134b6d526d5f3429c7a7680ddd38fa7
+  faraday-rack (1.0.0) sha256=ef60ec969a2bb95b8dbf24400155aee64a00fc8ba6c6a4d3968562bcc92328c0
+  faraday-retry (1.0.4) sha256=dc659233777fabf96c69c2ffe56c0a5d2c102af90321a42cc6c90157bcd716aa
+  faraday_middleware (1.2.1) sha256=d45b78c8ee864c4783fbc276f845243d4a7918a67301c052647bacabec0529e9
+  fastimage (2.4.1) sha256=c64bebd46b6fd8943ab70c1e6e85ff728f970f2e48f92ecd249b6bc3a540ad20
+  fastlane (2.232.2) sha256=978689f60f0fc3d54699de86ef12be4eda9f5b52217c1798965257c390d2b112
+  fastlane-plugin-load_json (0.0.1) sha256=6cc41bee546efc5aa6c5520e28806e68e1b3d9a16b6493b1ef30c95bfd1a2065
+  fastlane-sirp (1.0.0) sha256=66478f25bcd039ec02ccf65625373fca29646fa73d655eb533c915f106c5e641
+  gh_inspector (1.1.3) sha256=04cca7171b87164e053aa43147971d3b7f500fcb58177698886b48a9fc4a1939
+  google-apis-androidpublisher_v3 (0.97.0) sha256=0f3859844872ec09b64dde3bff6dee84458eb61d664337402adcbb4ac912322a
+  google-apis-core (0.18.0) sha256=96b057816feeeab448139ed5b5c78eab7fc2a9d8958f0fbc8217dedffad054ee
+  google-apis-iamcredentials_v1 (0.26.0) sha256=3ff70a10a1d6cddf2554e95b7c5df2c26afdeaeb64100048a355194da19e48a3
+  google-apis-playcustomapp_v1 (0.17.0) sha256=d5bc90b705f3f862bab4998086449b0abe704ee1685a84821daa90ca7fa95a78
+  google-apis-storage_v1 (0.61.0) sha256=b330e599b58e6a01533c189525398d6dbdbaf101ffb0c60145940b57e1c982e8
+  google-cloud-core (1.8.0) sha256=e572edcbf189cfcab16590628a516cec3f4f63454b730e59f0b36575120281cf
+  google-cloud-env (2.1.1) sha256=cf4bb8c7d517ee1ea692baedf06e0b56ce68007549d8d5a66481aa9f97f46999
+  google-cloud-errors (1.5.0) sha256=b56be28b8c10628125214dde571b925cfcebdbc58619e598250c37a2114f7b4b
+  google-cloud-storage (1.58.0) sha256=1bedc07a9c75af169e1ede1dd306b9f941f9ffa9e7095d0364c0803c468fdffd
+  googleauth (1.11.2) sha256=7e6bacaeed7aea3dd66dcea985266839816af6633e9f5983c3c2e0e40a44731e
+  highline (2.0.3) sha256=2ddd5c127d4692721486f91737307236fe005352d12a4202e26c48614f719479
+  http-cookie (1.0.8) sha256=b14fe0445cf24bf9ae098633e9b8d42e4c07c3c1f700672b09fbfe32ffd41aa6
+  httpclient (2.9.0) sha256=4b645958e494b2f86c2f8a2f304c959baa273a310e77a2931ddb986d83e498c8
+  jmespath (1.6.2) sha256=238d774a58723d6c090494c8879b5e9918c19485f7e840f2c1c7532cf84ebcb1
+  json (2.19.1) sha256=dd94fdc59e48bff85913829a32350b3148156bc4fd2a95a2568a78b11344082d
+  jwt (2.10.2) sha256=31e1ee46f7359883d5e622446969fe9c118c3da87a0b1dca765ce269c3a0c4f4
+  logger (1.7.0) sha256=196edec7cc44b66cfb40f9755ce11b392f21f7967696af15d274dde7edff0203
+  mini_magick (4.13.2) sha256=71d6258e0e8a3d04a9a0a09784d5d857b403a198a51dd4f882510435eb95ddd9
+  mini_mime (1.1.5) sha256=8681b7e2e4215f2a159f9400b5816d85e9d8c6c6b491e96a12797e798f8bccef
+  multi_json (1.19.1) sha256=7aefeff8f2c854bf739931a238e4aea64592845e0c0395c8a7d2eea7fdd631b7
+  multipart-post (2.4.1) sha256=9872d03a8e552020ca096adadbf5e3cb1cd1cdd6acd3c161136b8a5737cdb4a8
+  mutex_m (0.3.0) sha256=cfcb04ac16b69c4813777022fdceda24e9f798e48092a2b817eb4c0a782b0751
+  nanaimo (0.4.0) sha256=faf069551bab17f15169c1f74a1c73c220657e71b6e900919897a10d991d0723
+  naturally (2.3.0) sha256=459923cf76c2e6613048301742363200c3c7e4904c324097d54a67401e179e01
+  nkf (0.2.0) sha256=fbc151bda025451f627fafdfcb3f4f13d0b22ae11f58c6d3a2939c76c5f5f126
+  optparse (0.8.1) sha256=42bea10d53907ccff4f080a69991441d611fbf8733b60ed1ce9ee365ce03bd1a
+  os (1.1.4) sha256=57816d6a334e7bd6aed048f4b0308226c5fb027433b67d90a9ab435f35108d3f
+  ostruct (0.6.3) sha256=95a2ed4a4bd1d190784e666b47b2d3f078e4a9efda2fccf18f84ddc6538ed912
+  plist (3.7.2) sha256=d37a4527cc1116064393df4b40e1dbbc94c65fa9ca2eec52edf9a13616718a42
+  public_suffix (7.0.5) sha256=1a8bb08f1bbea19228d3bed6e5ed908d1cb4f7c2726d18bd9cadf60bc676f623
+  rake (13.3.1) sha256=8c9e89d09f66a26a01264e7e3480ec0607f0c497a861ef16063604b1b08eb19c
+  representable (3.2.0) sha256=cc29bf7eebc31653586849371a43ffe36c60b54b0a6365b5f7d95ec34d1ebace
+  retriable (3.4.1) sha256=fb3f114b7d492121c158c01f3d5152b5a615c5b70d5877d0bc08c7ec3725c3bc
+  rexml (3.4.4) sha256=19e0a2c3425dfbf2d4fc1189747bdb2f849b6c5e74180401b15734bc97b5d142
+  rouge (3.28.0) sha256=0d6de482c7624000d92697772ab14e48dca35629f8ddf3f4b21c99183fd70e20
+  ruby2_keywords (0.0.5) sha256=ffd13740c573b7301cf7a2e61fc857b2a8e3d3aff32545d6f8300d8bae10e3ef
+  rubyzip (2.4.1) sha256=8577c88edc1fde8935eb91064c5cb1aef9ad5494b940cf19c775ee833e075615
+  security (0.1.5) sha256=3a977a0eca7706e804c96db0dd9619e0a94969fe3aac9680fcfc2bf9b8a833b7
+  signet (0.21.0) sha256=d617e9fbf24928280d39dcfefba9a0372d1c38187ffffd0a9283957a10a8cd5b
+  simctl (1.6.10) sha256=b99077f4d13ad81eace9f86bf5ba4df1b0b893a4d1b368bd3ed59b5b27f9236b
+  sysrandom (1.0.5) sha256=5ac1ac3c2ec64ef76ac91018059f541b7e8f437fbda1ccddb4f2c56a9ccf1e75
+  terminal-notifier (2.0.0) sha256=7a0d2b2212ab9835c07f4b2e22a94cff64149dba1eed203c04835f7991078cea
+  terminal-table (3.0.2) sha256=f951b6af5f3e00203fb290a669e0a85c5dd5b051b3b023392ccfd67ba5abae91
+  trailblazer-option (0.1.2) sha256=20e4f12ea4e1f718c8007e7944ca21a329eee4eed9e0fa5dde6e8ad8ac4344a3
+  tty-cursor (0.7.1) sha256=79534185e6a777888d88628b14b6a1fdf5154a603f285f80b1753e1908e0bf48
+  tty-screen (0.8.2) sha256=c090652115beae764336c28802d633f204fb84da93c6a968aa5d8e319e819b50
+  tty-spinner (0.9.3) sha256=0e036f047b4ffb61f2aa45f5a770ec00b4d04130531558a94bfc5b192b570542
+  uber (0.1.0) sha256=5beeb407ff807b5db994f82fa9ee07cfceaa561dad8af20be880bc67eba935dc
+  unicode-display_width (2.6.0) sha256=12279874bba6d5e4d2728cef814b19197dbb10d7a7837a869bab65da943b7f5a
+  word_wrap (1.0.0) sha256=f556d4224c812e371000f12a6ee8102e0daa724a314c3f246afaad76d82accc7
+  xcodeproj (1.27.0) sha256=8cc7a73b4505c227deab044dce118ede787041c702bc47636856a2e566f854d3
+  xcpretty (0.4.1) sha256=b14c50e721f6589ee3d6f5353e2c2cfcd8541fa1ea16d6c602807dd7327f3892
+  xcpretty-travis-formatter (1.0.1) sha256=aacc332f17cb7b2cba222994e2adc74223db88724fe76341483ad3098e232f93
+
+BUNDLED WITH
+  4.0.7
diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..3a3b2d2
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Nuxt UI Templates
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..c937a24
--- /dev/null
+++ b/README.md
@@ -0,0 +1,268 @@
+# Nuxt PocketBase Starter
+
+A full-stack starter template for rapidly building and shipping apps with **Nuxt 4**, **PocketBase**, and **Capacitor** (Android/iOS).
+
+## What's Included
+
+- **Frontend** — Nuxt 4 SPA with Vue 3, Nuxt UI, Tailwind CSS v4, Pinia state management
+- **Backend** — PocketBase (SQLite, REST API, Realtime WebSocket), Dockerized with migrations and hooks
+- **Authentication** — Email OTP, Google OAuth, Apple OAuth (auto-creates users on first login)
+- **Push Notifications** — FCM via Deno sidecar service, works on Android and web
+- **Mobile** — Capacitor for Android and iOS with deep linking support
+- **i18n** — English and German, frontend and backend (localized email templates)
+- **Dev Tooling** — ESLint, TypeScript, Vitest, Playwright, Mailpit (dev email viewer)
+
+## Prerequisites
+
+- [Node.js](https://nodejs.org/) 22+
+- [pnpm](https://pnpm.io/) 10+ (`corepack enable`)
+- [Docker](https://www.docker.com/) and Docker Compose
+- [Deno](https://deno.com/) (for PocketBase sidecar)
+
+## Quick Start
+
+### 1. Clone and install
+
+```bash
+git clone <repository-url>
+cd nuxt-pocketbase-starter
+pnpm install
+```
+
+### 2. Configure environment
+
+```bash
+cp .env.example .env
+```
+
+Edit `.env` to set your values. The defaults work for local development — you only need to configure OAuth credentials and Firebase if you want those features.
+
+### 3. Start the backend
+
+```bash
+pnpm pocketbase:start
+```
+
+This starts three Docker containers:
+
+| Service | URL | Purpose |
+|---------|-----|---------|
+| PocketBase | http://localhost:8090 | API + Admin UI (`/_/`) |
+| Sidecar | http://localhost:8091 | FCM push notification delivery |
+| Mailpit | http://localhost:8025 | Dev email viewer (catches all outgoing mail) |
+
+### 4. Start the frontend
+
+In a second terminal:
+
+```bash
+pnpm dev
+```
+
+The app is available at http://localhost:3000.
+
+## Available Commands
+
+| Command | Description |
+|---------|-------------|
+| `pnpm dev` | Start Nuxt dev server |
+| `pnpm build` | Production build |
+| `pnpm preview` | Preview production build locally |
+| `pnpm lint` | Run ESLint |
+| `pnpm typecheck` | Run TypeScript type checking |
+| `pnpm test` | Run tests (Vitest) |
+| `pnpm pocketbase:start` | Start PocketBase + sidecar + Mailpit (Docker) |
+| `pnpm pocketbase:stop` | Stop all backend containers |
+| `pnpm pocketbase:types` | Regenerate TypeScript types from PocketBase schema |
+| `pnpm assets` | Generate mobile app icons and splash screens |
+
+## Environment Variables
+
+See `.env.example` for all variables. Key ones:
+
+| Variable | Description |
+|----------|-------------|
+| `APP_NAME` | Application display name |
+| `APP_ID` | App identifier (e.g., `com.example.myapp`) |
+| `NUXT_PUBLIC_APP_URL` | Frontend URL (default: `http://localhost:3000`) |
+| `NUXT_PUBLIC_POCKETBASE_URL` | PocketBase API URL (default: `http://127.0.0.1:8090`) |
+| `SUPERUSER_EMAIL` / `SUPERUSER_PW` | PocketBase admin credentials |
+| `AUTH_GOOGLE_CLIENT_ID` / `SECRET` | Google OAuth credentials |
+| `AUTH_APPLE_CLIENT_ID` / `SECRET` | Apple OAuth credentials |
+| `SIDECAR_SECRET` | Shared secret between PocketBase and sidecar |
+| `GOOGLE_CREDENTIALS_JSON` | Firebase service account JSON (for FCM push) |
+
+## Project Structure
+
+```
+├── app/                        # Nuxt frontend
+│   ├── pages/                  # File-based routes
+│   ├── stores/                 # Pinia stores (user, counter, notifications, avatar)
+│   ├── components/             # Vue components (App/, Counter/, Profile/)
+│   ├── composables/            # usePocketBase()
+│   ├── plugins/                # PocketBase client init
+│   ├── middleware/             # Auth guard, user fetch
+│   ├── i18n/locales/           # Frontend translations (en, de)
+│   └── types/                  # TypeScript types
+├── pocketbase/
+│   ├── pb_migrations/          # Database migrations (run on startup)
+│   ├── pb_hooks/               # Server-side hooks and custom endpoints
+│   │   ├── templates/          # Localized HTML email templates
+│   │   └── locales/            # Backend translations
+│   ├── sidecar/                # Deno service for FCM push delivery
+│   ├── docker-compose.yml
+│   └── Dockerfile
+├── android/                    # Capacitor Android project
+├── ios/                        # Capacitor iOS project
+├── Dockerfile                  # Nuxt production image
+└── capacitor.config.ts         # Mobile app configuration
+```
+
+## Customizing the Template
+
+### Rename the app
+
+1. Update `APP_NAME` and `APP_ID` in `.env`
+2. Update `package.json` name and version
+3. For mobile: regenerate assets with `pnpm assets`
+
+### Add a new backend collection
+
+1. Create a migration file in `pocketbase/pb_migrations/` (next number in sequence, e.g., `5_my_table.js`)
+2. Restart PocketBase: `pnpm pocketbase:stop && pnpm pocketbase:start`
+3. Regenerate types: `pnpm pocketbase:types`
+4. Create a Pinia store in `app/stores/` using the generated types
+
+### Add a new language
+
+1. Add translation file to `app/i18n/locales/` (e.g., `fr.json`)
+2. Register the locale in `nuxt.config.ts` under `i18n.locales`
+3. Add backend translations in `pocketbase/pb_hooks/locales/` (e.g., `fr.json`)
+4. Add email templates in `pocketbase/pb_hooks/templates/fr/`
+5. Update `LanguageCode` type in `app/types/i18n.types.ts`
+
+### Add a custom API endpoint
+
+Create a hook file in `pocketbase/pb_hooks/` (e.g., `myEndpoint.pb.js`) using `routerAdd()`. See `resetCounter.pb.js` for an example. Hooks use PocketBase's JSVM — not Node.js.
+
+## Mobile Development
+
+### Android
+
+```bash
+pnpm build
+npx cap sync android
+npx cap open android     # Opens Android Studio
+```
+
+For push notifications, place your `google-services.json` at `creds/fcm-google-services.json` — it gets copied to the Android project automatically.
+
+### iOS
+
+```bash
+pnpm build
+npx cap sync ios
+npx cap open ios         # Opens Xcode
+```
+
+Requires a Mac with Xcode and an Apple Developer account.
+
+## CI/CD
+
+Gitea Actions workflows in `.gitea/workflows/` trigger on pushes to the `release` branch (and manual `workflow_dispatch`):
+
+| Workflow | What it does |
+|----------|--------------|
+| `frontend.yaml` | Builds the Nuxt Docker image and pushes it to the Gitea Container Registry |
+| `backend.yaml` | Builds the PocketBase Docker image and pushes it to the Gitea Container Registry |
+| `android.yaml` | Builds the Android app via Fastlane and releases to Google Play |
+| `ios.yaml` | Builds the iOS app via Fastlane and uploads to App Store Connect |
+
+### Required Gitea configuration
+
+**Repository variables** (Settings → Actions → Variables):
+
+| Variable | Example |
+|----------|---------|
+| `NUXT_PUBLIC_APP_URL` | `https://your-domain.com` |
+| `NUXT_PUBLIC_POCKETBASE_URL` | `https://pb.your-domain.com` |
+
+**Repository secrets** (Settings → Actions → Secrets):
+
+| Secret | Purpose |
+|--------|---------|
+| `REGISTRY_TOKEN` | Gitea personal access token with `package:write` scope |
+| `PLAY_STORE_JSON_KEY_DATA` | Google Play service account JSON (Android release) |
+| `APP_STORE_CONNECT_API_KEY_ID` | App Store Connect API key ID (iOS release) |
+| `APP_STORE_CONNECT_API_ISSUER_ID` | App Store Connect issuer ID |
+| `APP_STORE_CONNECT_API_KEY_CONTENT` | Base64-encoded App Store Connect `.p8` key |
+| `IOS_CERTIFICATE_BASE64` | Base64-encoded `.p12` signing certificate |
+| `IOS_CERTIFICATE_PASSWORD` | Password for the signing certificate |
+| `IOS_PROVISIONING_PROFILE_BASE64` | Base64-encoded provisioning profile |
+
+### Image tagging
+
+Images are pushed to the Gitea Container Registry with two tags:
+- `<registry>/<owner>/<repo>-frontend:<version>` (from `package.json`)
+- `<registry>/<owner>/<repo>-frontend:latest`
+- `<registry>/<owner>/<repo>-backend:<version>` (from `package.json`)
+- `<registry>/<owner>/<repo>-backend:latest`
+
+## Deployment
+
+Both the frontend and backend are published as Docker images via CI. Deploy them together with Docker Compose on any server.
+
+### Production Docker Compose
+
+Create a `docker-compose.yml` on your server:
+
+```yaml
+services:
+  frontend:
+    image: git.your-domain.com/owner/repo-frontend:latest  # Nuxt image from CI
+    ports:
+      - 3000:3000
+    restart: unless-stopped
+
+  pocketbase:
+    image: git.your-domain.com/owner/repo-backend:latest  # PocketBase image from CI
+    ports:
+      - 8090:8090
+      - 8091:8091
+    volumes:
+      - pb_data:/pb/pb_data
+    env_file:
+      - .env
+    restart: unless-stopped
+
+volumes:
+  pb_data:
+```
+
+Place a production `.env` next to it with your secrets (`SUPERUSER_EMAIL`, `SUPERUSER_PW`, `SIDECAR_SECRET`, OAuth credentials, `GOOGLE_CREDENTIALS_JSON`, etc.).
+
+```bash
+docker compose pull && docker compose up -d
+```
+
+Put a reverse proxy (Caddy, Traefik, nginx) in front to handle TLS and route traffic to port 3000 (frontend) and 8090 (PocketBase API).
+
+### Building images manually
+
+If you're not using CI, you can build locally:
+
+```bash
+# Frontend
+docker build \
+  --build-arg NUXT_PUBLIC_APP_URL=https://your-domain.com \
+  --build-arg NUXT_PUBLIC_POCKETBASE_URL=https://pb.your-domain.com \
+  -t nuxt-app .
+
+# Backend
+cd pocketbase
+docker build --target prod -t pocketbase-app .
+```
+
+## License
+
+MIT
diff --git a/android/.gitignore b/android/.gitignore
new file mode 100644
index 0000000..48354a3
--- /dev/null
+++ b/android/.gitignore
@@ -0,0 +1,101 @@
+# Using Android gitignore template: https://github.com/github/gitignore/blob/HEAD/Android.gitignore
+
+# Built application files
+*.apk
+*.aar
+*.ap_
+*.aab
+
+# Files for the ART/Dalvik VM
+*.dex
+
+# Java class files
+*.class
+
+# Generated files
+bin/
+gen/
+out/
+#  Uncomment the following line in case you need and you don't have the release build type files in your app
+# release/
+
+# Gradle files
+.gradle/
+build/
+
+# Local configuration file (sdk path, etc)
+local.properties
+
+# Proguard folder generated by Eclipse
+proguard/
+
+# Log Files
+*.log
+
+# Android Studio Navigation editor temp files
+.navigation/
+
+# Android Studio captures folder
+captures/
+
+# IntelliJ
+*.iml
+.idea/workspace.xml
+.idea/tasks.xml
+.idea/gradle.xml
+.idea/assetWizardSettings.xml
+.idea/dictionaries
+.idea/libraries
+# Android Studio 3 in .gitignore file.
+.idea/caches
+.idea/modules.xml
+# Comment next line if keeping position of elements in Navigation Editor is relevant for you
+.idea/navEditor.xml
+
+# Keystore files
+# Uncomment the following lines if you do not want to check your keystore files in.
+#*.jks
+#*.keystore
+
+# External native build folder generated in Android Studio 2.2 and later
+.externalNativeBuild
+.cxx/
+
+# Google Services (e.g. APIs or Firebase)
+# google-services.json
+
+# Freeline
+freeline.py
+freeline/
+freeline_project_description.json
+
+# fastlane
+fastlane/report.xml
+fastlane/Preview.html
+fastlane/screenshots
+fastlane/test_output
+fastlane/readme.md
+
+# Version control
+vcs.xml
+
+# lint
+lint/intermediates/
+lint/generated/
+lint/outputs/
+lint/tmp/
+# lint/reports/
+
+# Android Profiling
+*.hprof
+
+# Cordova plugins for Capacitor
+capacitor-cordova-android-plugins
+
+# Copied web assets
+app/src/main/assets/public
+
+# Generated Config files
+app/src/main/assets/capacitor.config.json
+app/src/main/assets/capacitor.plugins.json
+app/src/main/res/xml/config.xml
diff --git a/android/app/.gitignore b/android/app/.gitignore
new file mode 100644
index 0000000..043df80
--- /dev/null
+++ b/android/app/.gitignore
@@ -0,0 +1,2 @@
+/build/*
+!/build/.npmkeep
diff --git a/android/app/build.gradle b/android/app/build.gradle
new file mode 100644
index 0000000..0cb5a92
--- /dev/null
+++ b/android/app/build.gradle
@@ -0,0 +1,54 @@
+apply plugin: 'com.android.application'
+
+android {
+    namespace = "com.pocketbase.nuxt"
+    compileSdk = rootProject.ext.compileSdkVersion
+    defaultConfig {
+        applicationId "com.pocketbase.nuxt"
+        minSdkVersion rootProject.ext.minSdkVersion
+        targetSdkVersion rootProject.ext.targetSdkVersion
+        versionCode 1
+        versionName "1.0"
+        testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
+        aaptOptions {
+             // Files and dirs to omit from the packaged assets dir, modified to accommodate modern web apps.
+             // Default: https://android.googlesource.com/platform/frameworks/base/+/282e181b58cf72b6ca770dc7ca5f91f135444502/tools/aapt/AaptAssets.cpp#61
+            ignoreAssetsPattern = '!.svn:!.git:!.ds_store:!*.scc:.*:!CVS:!thumbs.db:!picasa.ini:!*~'
+        }
+    }
+    buildTypes {
+        release {
+            minifyEnabled false
+            proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'
+        }
+    }
+}
+
+repositories {
+    flatDir{
+        dirs '../capacitor-cordova-android-plugins/src/main/libs', 'libs'
+    }
+}
+
+dependencies {
+    implementation fileTree(include: ['*.jar'], dir: 'libs')
+    implementation "androidx.appcompat:appcompat:$androidxAppCompatVersion"
+    implementation "androidx.coordinatorlayout:coordinatorlayout:$androidxCoordinatorLayoutVersion"
+    implementation "androidx.core:core-splashscreen:$coreSplashScreenVersion"
+    implementation project(':capacitor-android')
+    testImplementation "junit:junit:$junitVersion"
+    androidTestImplementation "androidx.test.ext:junit:$androidxJunitVersion"
+    androidTestImplementation "androidx.test.espresso:espresso-core:$androidxEspressoCoreVersion"
+    implementation project(':capacitor-cordova-android-plugins')
+}
+
+apply from: 'capacitor.build.gradle'
+
+try {
+    def servicesJSON = file('google-services.json')
+    if (servicesJSON.text) {
+        apply plugin: 'com.google.gms.google-services'
+    }
+} catch(Exception e) {
+    logger.info("google-services.json not found, google-services plugin not applied. Push Notifications won't work")
+}
diff --git a/android/app/capacitor.build.gradle b/android/app/capacitor.build.gradle
new file mode 100644
index 0000000..1b8810b
--- /dev/null
+++ b/android/app/capacitor.build.gradle
@@ -0,0 +1,20 @@
+// DO NOT EDIT THIS FILE! IT IS GENERATED EACH TIME "capacitor update" IS RUN
+
+android {
+  compileOptions {
+      sourceCompatibility JavaVersion.VERSION_21
+      targetCompatibility JavaVersion.VERSION_21
+  }
+}
+
+apply from: "../capacitor-cordova-android-plugins/cordova.variables.gradle"
+dependencies {
+    implementation project(':capacitor-app')
+    implementation project(':capacitor-push-notifications')
+
+}
+
+
+if (hasProperty('postBuildExtras')) {
+  postBuildExtras()
+}
diff --git a/android/app/proguard-rules.pro b/android/app/proguard-rules.pro
new file mode 100644
index 0000000..f1b4245
--- /dev/null
+++ b/android/app/proguard-rules.pro
@@ -0,0 +1,21 @@
+# Add project specific ProGuard rules here.
+# You can control the set of applied configuration files using the
+# proguardFiles setting in build.gradle.
+#
+# For more details, see
+#   http://developer.android.com/guide/developing/tools/proguard.html
+
+# If your project uses WebView with JS, uncomment the following
+# and specify the fully qualified class name to the JavaScript interface
+# class:
+#-keepclassmembers class fqcn.of.javascript.interface.for.webview {
+#   public *;
+#}
+
+# Uncomment this to preserve the line number information for
+# debugging stack traces.
+#-keepattributes SourceFile,LineNumberTable
+
+# If you keep the line number information, uncomment this to
+# hide the original source file name.
+#-renamesourcefileattribute SourceFile
diff --git a/android/app/src/androidTest/java/com/getcapacitor/myapp/ExampleInstrumentedTest.java b/android/app/src/androidTest/java/com/getcapacitor/myapp/ExampleInstrumentedTest.java
new file mode 100644
index 0000000..f2c2217
--- /dev/null
+++ b/android/app/src/androidTest/java/com/getcapacitor/myapp/ExampleInstrumentedTest.java
@@ -0,0 +1,26 @@
+package com.getcapacitor.myapp;
+
+import static org.junit.Assert.*;
+
+import android.content.Context;
+import androidx.test.ext.junit.runners.AndroidJUnit4;
+import androidx.test.platform.app.InstrumentationRegistry;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+
+/**
+ * Instrumented test, which will execute on an Android device.
+ *
+ * @see <a href="http://d.android.com/tools/testing">Testing documentation</a>
+ */
+@RunWith(AndroidJUnit4.class)
+public class ExampleInstrumentedTest {
+
+    @Test
+    public void useAppContext() throws Exception {
+        // Context of the app under test.
+        Context appContext = InstrumentationRegistry.getInstrumentation().getTargetContext();
+
+        assertEquals("com.getcapacitor.app", appContext.getPackageName());
+    }
+}
diff --git a/android/app/src/main/AndroidManifest.xml b/android/app/src/main/AndroidManifest.xml
new file mode 100644
index 0000000..ba2b7bc
--- /dev/null
+++ b/android/app/src/main/AndroidManifest.xml
@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+    <application
+        android:allowBackup="true"
+        android:icon="@mipmap/ic_launcher"
+        android:label="@string/app_name"
+        android:roundIcon="@mipmap/ic_launcher_round"
+        android:supportsRtl="true"
+        android:theme="@style/AppTheme">
+        <activity
+            android:configChanges="orientation|keyboardHidden|keyboard|screenSize|locale|smallestScreenSize|screenLayout|uiMode|navigation|density"
+            android:name=".MainActivity"
+            android:label="@string/title_activity_main"
+            android:theme="@style/AppTheme.NoActionBarLaunch"
+            android:launchMode="singleTask"
+            android:exported="true">
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN" />
+                <category android:name="android.intent.category.LAUNCHER" />
+            </intent-filter>
+        </activity>
+
+        <provider
+            android:name="androidx.core.content.FileProvider"
+            android:authorities="${applicationId}.fileprovider"
+            android:exported="false"
+            android:grantUriPermissions="true">
+            <meta-data android:name="android.support.FILE_PROVIDER_PATHS" android:resource="@xml/file_paths" />
+        </provider>
+    </application>
+
+    <!-- Permissions -->
+
+    <uses-permission android:name="android.permission.INTERNET" />
+</manifest>
diff --git a/android/app/src/main/java/com/supabase/nuxt/MainActivity.java b/android/app/src/main/java/com/supabase/nuxt/MainActivity.java
new file mode 100644
index 0000000..31de3da
--- /dev/null
+++ b/android/app/src/main/java/com/supabase/nuxt/MainActivity.java
@@ -0,0 +1,5 @@
+package com.pocketbase.nuxt;
+
+import com.getcapacitor.BridgeActivity;
+
+public class MainActivity extends BridgeActivity {}
diff --git a/android/app/src/main/res/drawable-land-hdpi/splash.png b/android/app/src/main/res/drawable-land-hdpi/splash.png
new file mode 100644
index 0000000..3c3b600
Binary files /dev/null and b/android/app/src/main/res/drawable-land-hdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-land-ldpi/splash.png b/android/app/src/main/res/drawable-land-ldpi/splash.png
new file mode 100644
index 0000000..581375d
Binary files /dev/null and b/android/app/src/main/res/drawable-land-ldpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-land-mdpi/splash.png b/android/app/src/main/res/drawable-land-mdpi/splash.png
new file mode 100644
index 0000000..d716bdd
Binary files /dev/null and b/android/app/src/main/res/drawable-land-mdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-land-night-hdpi/splash.png b/android/app/src/main/res/drawable-land-night-hdpi/splash.png
new file mode 100644
index 0000000..3c106ff
Binary files /dev/null and b/android/app/src/main/res/drawable-land-night-hdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-land-night-ldpi/splash.png b/android/app/src/main/res/drawable-land-night-ldpi/splash.png
new file mode 100644
index 0000000..307ee97
Binary files /dev/null and b/android/app/src/main/res/drawable-land-night-ldpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-land-night-mdpi/splash.png b/android/app/src/main/res/drawable-land-night-mdpi/splash.png
new file mode 100644
index 0000000..56733b1
Binary files /dev/null and b/android/app/src/main/res/drawable-land-night-mdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-land-night-xhdpi/splash.png b/android/app/src/main/res/drawable-land-night-xhdpi/splash.png
new file mode 100644
index 0000000..2acc590
Binary files /dev/null and b/android/app/src/main/res/drawable-land-night-xhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-land-night-xxhdpi/splash.png b/android/app/src/main/res/drawable-land-night-xxhdpi/splash.png
new file mode 100644
index 0000000..522d8b5
Binary files /dev/null and b/android/app/src/main/res/drawable-land-night-xxhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-land-night-xxxhdpi/splash.png b/android/app/src/main/res/drawable-land-night-xxxhdpi/splash.png
new file mode 100644
index 0000000..1ce7b50
Binary files /dev/null and b/android/app/src/main/res/drawable-land-night-xxxhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-land-xhdpi/splash.png b/android/app/src/main/res/drawable-land-xhdpi/splash.png
new file mode 100644
index 0000000..21d2456
Binary files /dev/null and b/android/app/src/main/res/drawable-land-xhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-land-xxhdpi/splash.png b/android/app/src/main/res/drawable-land-xxhdpi/splash.png
new file mode 100644
index 0000000..206c8ad
Binary files /dev/null and b/android/app/src/main/res/drawable-land-xxhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-land-xxxhdpi/splash.png b/android/app/src/main/res/drawable-land-xxxhdpi/splash.png
new file mode 100644
index 0000000..ac73d4c
Binary files /dev/null and b/android/app/src/main/res/drawable-land-xxxhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-night/splash.png b/android/app/src/main/res/drawable-night/splash.png
new file mode 100644
index 0000000..307ee97
Binary files /dev/null and b/android/app/src/main/res/drawable-night/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-hdpi/splash.png b/android/app/src/main/res/drawable-port-hdpi/splash.png
new file mode 100644
index 0000000..11d5bbc
Binary files /dev/null and b/android/app/src/main/res/drawable-port-hdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-ldpi/splash.png b/android/app/src/main/res/drawable-port-ldpi/splash.png
new file mode 100644
index 0000000..5e51e46
Binary files /dev/null and b/android/app/src/main/res/drawable-port-ldpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-mdpi/splash.png b/android/app/src/main/res/drawable-port-mdpi/splash.png
new file mode 100644
index 0000000..fe4afb4
Binary files /dev/null and b/android/app/src/main/res/drawable-port-mdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-night-hdpi/splash.png b/android/app/src/main/res/drawable-port-night-hdpi/splash.png
new file mode 100644
index 0000000..fee295c
Binary files /dev/null and b/android/app/src/main/res/drawable-port-night-hdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-night-ldpi/splash.png b/android/app/src/main/res/drawable-port-night-ldpi/splash.png
new file mode 100644
index 0000000..a04ccac
Binary files /dev/null and b/android/app/src/main/res/drawable-port-night-ldpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-night-mdpi/splash.png b/android/app/src/main/res/drawable-port-night-mdpi/splash.png
new file mode 100644
index 0000000..4daf5a9
Binary files /dev/null and b/android/app/src/main/res/drawable-port-night-mdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-night-xhdpi/splash.png b/android/app/src/main/res/drawable-port-night-xhdpi/splash.png
new file mode 100644
index 0000000..aff1418
Binary files /dev/null and b/android/app/src/main/res/drawable-port-night-xhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-night-xxhdpi/splash.png b/android/app/src/main/res/drawable-port-night-xxhdpi/splash.png
new file mode 100644
index 0000000..8911fd9
Binary files /dev/null and b/android/app/src/main/res/drawable-port-night-xxhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-night-xxxhdpi/splash.png b/android/app/src/main/res/drawable-port-night-xxxhdpi/splash.png
new file mode 100644
index 0000000..12ac707
Binary files /dev/null and b/android/app/src/main/res/drawable-port-night-xxxhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-xhdpi/splash.png b/android/app/src/main/res/drawable-port-xhdpi/splash.png
new file mode 100644
index 0000000..925670d
Binary files /dev/null and b/android/app/src/main/res/drawable-port-xhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-xxhdpi/splash.png b/android/app/src/main/res/drawable-port-xxhdpi/splash.png
new file mode 100644
index 0000000..d301c54
Binary files /dev/null and b/android/app/src/main/res/drawable-port-xxhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-port-xxxhdpi/splash.png b/android/app/src/main/res/drawable-port-xxxhdpi/splash.png
new file mode 100644
index 0000000..b3baa65
Binary files /dev/null and b/android/app/src/main/res/drawable-port-xxxhdpi/splash.png differ
diff --git a/android/app/src/main/res/drawable-v24/ic_launcher_foreground.xml b/android/app/src/main/res/drawable-v24/ic_launcher_foreground.xml
new file mode 100644
index 0000000..c7bd21d
--- /dev/null
+++ b/android/app/src/main/res/drawable-v24/ic_launcher_foreground.xml
@@ -0,0 +1,34 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:aapt="http://schemas.android.com/aapt"
+    android:width="108dp"
+    android:height="108dp"
+    android:viewportHeight="108"
+    android:viewportWidth="108">
+    <path
+        android:fillType="evenOdd"
+        android:pathData="M32,64C32,64 38.39,52.99 44.13,50.95C51.37,48.37 70.14,49.57 70.14,49.57L108.26,87.69L108,109.01L75.97,107.97L32,64Z"
+        android:strokeColor="#00000000"
+        android:strokeWidth="1">
+        <aapt:attr name="android:fillColor">
+            <gradient
+                android:endX="78.5885"
+                android:endY="90.9159"
+                android:startX="48.7653"
+                android:startY="61.0927"
+                android:type="linear">
+                <item
+                    android:color="#44000000"
+                    android:offset="0.0" />
+                <item
+                    android:color="#00000000"
+                    android:offset="1.0" />
+            </gradient>
+        </aapt:attr>
+    </path>
+    <path
+        android:fillColor="#FFFFFF"
+        android:fillType="nonZero"
+        android:pathData="M66.94,46.02L66.94,46.02C72.44,50.07 76,56.61 76,64L32,64C32,56.61 35.56,50.11 40.98,46.06L36.18,41.19C35.45,40.45 35.45,39.3 36.18,38.56C36.91,37.81 38.05,37.81 38.78,38.56L44.25,44.05C47.18,42.57 50.48,41.71 54,41.71C57.48,41.71 60.78,42.57 63.68,44.05L69.11,38.56C69.84,37.81 70.98,37.81 71.71,38.56C72.44,39.3 72.44,40.45 71.71,41.19L66.94,46.02ZM62.94,56.92C64.08,56.92 65,56.01 65,54.88C65,53.76 64.08,52.85 62.94,52.85C61.8,52.85 60.88,53.76 60.88,54.88C60.88,56.01 61.8,56.92 62.94,56.92ZM45.06,56.92C46.2,56.92 47.13,56.01 47.13,54.88C47.13,53.76 46.2,52.85 45.06,52.85C43.92,52.85 43,53.76 43,54.88C43,56.01 43.92,56.92 45.06,56.92Z"
+        android:strokeColor="#00000000"
+        android:strokeWidth="1" />
+</vector>
diff --git a/android/app/src/main/res/drawable/ic_launcher_background.xml b/android/app/src/main/res/drawable/ic_launcher_background.xml
new file mode 100644
index 0000000..d5fccc5
--- /dev/null
+++ b/android/app/src/main/res/drawable/ic_launcher_background.xml
@@ -0,0 +1,170 @@
+<?xml version="1.0" encoding="utf-8"?>
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="108dp"
+    android:height="108dp"
+    android:viewportHeight="108"
+    android:viewportWidth="108">
+    <path
+        android:fillColor="#26A69A"
+        android:pathData="M0,0h108v108h-108z" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M9,0L9,108"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,0L19,108"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M29,0L29,108"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M39,0L39,108"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M49,0L49,108"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M59,0L59,108"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M69,0L69,108"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M79,0L79,108"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M89,0L89,108"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M99,0L99,108"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,9L108,9"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,19L108,19"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,29L108,29"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,39L108,39"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,49L108,49"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,59L108,59"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,69L108,69"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,79L108,79"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,89L108,89"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,99L108,99"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,29L89,29"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,39L89,39"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,49L89,49"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,59L89,59"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,69L89,69"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,79L89,79"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M29,19L29,89"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M39,19L39,89"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M49,19L49,89"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M59,19L59,89"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M69,19L69,89"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M79,19L79,89"
+        android:strokeColor="#33FFFFFF"
+        android:strokeWidth="0.8" />
+</vector>
diff --git a/android/app/src/main/res/drawable/splash.png b/android/app/src/main/res/drawable/splash.png
new file mode 100644
index 0000000..fe4afb4
Binary files /dev/null and b/android/app/src/main/res/drawable/splash.png differ
diff --git a/android/app/src/main/res/layout/activity_main.xml b/android/app/src/main/res/layout/activity_main.xml
new file mode 100644
index 0000000..b5ad138
--- /dev/null
+++ b/android/app/src/main/res/layout/activity_main.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<androidx.coordinatorlayout.widget.CoordinatorLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:app="http://schemas.android.com/apk/res-auto"
+    xmlns:tools="http://schemas.android.com/tools"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    tools:context=".MainActivity">
+
+    <WebView
+        android:layout_width="match_parent"
+        android:layout_height="match_parent" />
+</androidx.coordinatorlayout.widget.CoordinatorLayout>
diff --git a/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml b/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml
new file mode 100644
index 0000000..0aa82aa
--- /dev/null
+++ b/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<adaptive-icon xmlns:android="http://schemas.android.com/apk/res/android">
+    <background>
+        <inset android:drawable="@mipmap/ic_launcher_background" android:inset="16.7%" />
+    </background>
+    <foreground>
+        <inset android:drawable="@mipmap/ic_launcher_foreground" android:inset="16.7%" />
+    </foreground>
+</adaptive-icon>
\ No newline at end of file
diff --git a/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher_round.xml b/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher_round.xml
new file mode 100644
index 0000000..0aa82aa
--- /dev/null
+++ b/android/app/src/main/res/mipmap-anydpi-v26/ic_launcher_round.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<adaptive-icon xmlns:android="http://schemas.android.com/apk/res/android">
+    <background>
+        <inset android:drawable="@mipmap/ic_launcher_background" android:inset="16.7%" />
+    </background>
+    <foreground>
+        <inset android:drawable="@mipmap/ic_launcher_foreground" android:inset="16.7%" />
+    </foreground>
+</adaptive-icon>
\ No newline at end of file
diff --git a/android/app/src/main/res/mipmap-hdpi/ic_launcher.png b/android/app/src/main/res/mipmap-hdpi/ic_launcher.png
new file mode 100644
index 0000000..16fc8a0
Binary files /dev/null and b/android/app/src/main/res/mipmap-hdpi/ic_launcher.png differ
diff --git a/android/app/src/main/res/mipmap-hdpi/ic_launcher_background.png b/android/app/src/main/res/mipmap-hdpi/ic_launcher_background.png
new file mode 100644
index 0000000..0feb4c7
Binary files /dev/null and b/android/app/src/main/res/mipmap-hdpi/ic_launcher_background.png differ
diff --git a/android/app/src/main/res/mipmap-hdpi/ic_launcher_foreground.png b/android/app/src/main/res/mipmap-hdpi/ic_launcher_foreground.png
new file mode 100644
index 0000000..a5b7c91
Binary files /dev/null and b/android/app/src/main/res/mipmap-hdpi/ic_launcher_foreground.png differ
diff --git a/android/app/src/main/res/mipmap-hdpi/ic_launcher_round.png b/android/app/src/main/res/mipmap-hdpi/ic_launcher_round.png
new file mode 100644
index 0000000..42b3dd0
Binary files /dev/null and b/android/app/src/main/res/mipmap-hdpi/ic_launcher_round.png differ
diff --git a/android/app/src/main/res/mipmap-ldpi/ic_launcher.png b/android/app/src/main/res/mipmap-ldpi/ic_launcher.png
new file mode 100644
index 0000000..09190da
Binary files /dev/null and b/android/app/src/main/res/mipmap-ldpi/ic_launcher.png differ
diff --git a/android/app/src/main/res/mipmap-ldpi/ic_launcher_background.png b/android/app/src/main/res/mipmap-ldpi/ic_launcher_background.png
new file mode 100644
index 0000000..b999324
Binary files /dev/null and b/android/app/src/main/res/mipmap-ldpi/ic_launcher_background.png differ
diff --git a/android/app/src/main/res/mipmap-ldpi/ic_launcher_foreground.png b/android/app/src/main/res/mipmap-ldpi/ic_launcher_foreground.png
new file mode 100644
index 0000000..32a3901
Binary files /dev/null and b/android/app/src/main/res/mipmap-ldpi/ic_launcher_foreground.png differ
diff --git a/android/app/src/main/res/mipmap-ldpi/ic_launcher_round.png b/android/app/src/main/res/mipmap-ldpi/ic_launcher_round.png
new file mode 100644
index 0000000..375076c
Binary files /dev/null and b/android/app/src/main/res/mipmap-ldpi/ic_launcher_round.png differ
diff --git a/android/app/src/main/res/mipmap-mdpi/ic_launcher.png b/android/app/src/main/res/mipmap-mdpi/ic_launcher.png
new file mode 100644
index 0000000..0ef0b63
Binary files /dev/null and b/android/app/src/main/res/mipmap-mdpi/ic_launcher.png differ
diff --git a/android/app/src/main/res/mipmap-mdpi/ic_launcher_background.png b/android/app/src/main/res/mipmap-mdpi/ic_launcher_background.png
new file mode 100644
index 0000000..5b990d7
Binary files /dev/null and b/android/app/src/main/res/mipmap-mdpi/ic_launcher_background.png differ
diff --git a/android/app/src/main/res/mipmap-mdpi/ic_launcher_foreground.png b/android/app/src/main/res/mipmap-mdpi/ic_launcher_foreground.png
new file mode 100644
index 0000000..e09ec32
Binary files /dev/null and b/android/app/src/main/res/mipmap-mdpi/ic_launcher_foreground.png differ
diff --git a/android/app/src/main/res/mipmap-mdpi/ic_launcher_round.png b/android/app/src/main/res/mipmap-mdpi/ic_launcher_round.png
new file mode 100644
index 0000000..75ebe4a
Binary files /dev/null and b/android/app/src/main/res/mipmap-mdpi/ic_launcher_round.png differ
diff --git a/android/app/src/main/res/mipmap-xhdpi/ic_launcher.png b/android/app/src/main/res/mipmap-xhdpi/ic_launcher.png
new file mode 100644
index 0000000..dcc5982
Binary files /dev/null and b/android/app/src/main/res/mipmap-xhdpi/ic_launcher.png differ
diff --git a/android/app/src/main/res/mipmap-xhdpi/ic_launcher_background.png b/android/app/src/main/res/mipmap-xhdpi/ic_launcher_background.png
new file mode 100644
index 0000000..adf0647
Binary files /dev/null and b/android/app/src/main/res/mipmap-xhdpi/ic_launcher_background.png differ
diff --git a/android/app/src/main/res/mipmap-xhdpi/ic_launcher_foreground.png b/android/app/src/main/res/mipmap-xhdpi/ic_launcher_foreground.png
new file mode 100644
index 0000000..4c7da6a
Binary files /dev/null and b/android/app/src/main/res/mipmap-xhdpi/ic_launcher_foreground.png differ
diff --git a/android/app/src/main/res/mipmap-xhdpi/ic_launcher_round.png b/android/app/src/main/res/mipmap-xhdpi/ic_launcher_round.png
new file mode 100644
index 0000000..61ac91d
Binary files /dev/null and b/android/app/src/main/res/mipmap-xhdpi/ic_launcher_round.png differ
diff --git a/android/app/src/main/res/mipmap-xxhdpi/ic_launcher.png b/android/app/src/main/res/mipmap-xxhdpi/ic_launcher.png
new file mode 100644
index 0000000..d243577
Binary files /dev/null and b/android/app/src/main/res/mipmap-xxhdpi/ic_launcher.png differ
diff --git a/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_background.png b/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_background.png
new file mode 100644
index 0000000..5da7395
Binary files /dev/null and b/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_background.png differ
diff --git a/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_foreground.png b/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_foreground.png
new file mode 100644
index 0000000..34af4ac
Binary files /dev/null and b/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_foreground.png differ
diff --git a/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.png b/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.png
new file mode 100644
index 0000000..fb9b14a
Binary files /dev/null and b/android/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.png differ
diff --git a/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher.png b/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher.png
new file mode 100644
index 0000000..6dfae34
Binary files /dev/null and b/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher.png differ
diff --git a/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_background.png b/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_background.png
new file mode 100644
index 0000000..62d0494
Binary files /dev/null and b/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_background.png differ
diff --git a/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_foreground.png b/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_foreground.png
new file mode 100644
index 0000000..59424bd
Binary files /dev/null and b/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_foreground.png differ
diff --git a/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.png b/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.png
new file mode 100644
index 0000000..9eed402
Binary files /dev/null and b/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.png differ
diff --git a/android/app/src/main/res/values/ic_launcher_background.xml b/android/app/src/main/res/values/ic_launcher_background.xml
new file mode 100644
index 0000000..c5d5899
--- /dev/null
+++ b/android/app/src/main/res/values/ic_launcher_background.xml
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <color name="ic_launcher_background">#FFFFFF</color>
+</resources>
\ No newline at end of file
diff --git a/android/app/src/main/res/values/strings.xml b/android/app/src/main/res/values/strings.xml
new file mode 100644
index 0000000..5ce8dfc
--- /dev/null
+++ b/android/app/src/main/res/values/strings.xml
@@ -0,0 +1,7 @@
+<?xml version='1.0' encoding='utf-8'?>
+<resources>
+    <string name="app_name">nuxt-pocketbase-starter</string>
+    <string name="title_activity_main">nuxt-pocketbase-starter</string>
+    <string name="package_name">com.pocketbase.nuxt</string>
+    <string name="custom_url_scheme">com.pocketbase.nuxt</string>
+</resources>
diff --git a/android/app/src/main/res/values/styles.xml b/android/app/src/main/res/values/styles.xml
new file mode 100644
index 0000000..be874e5
--- /dev/null
+++ b/android/app/src/main/res/values/styles.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+
+    <!-- Base application theme. -->
+    <style name="AppTheme" parent="Theme.AppCompat.Light.DarkActionBar">
+        <!-- Customize your theme here. -->
+        <item name="colorPrimary">@color/colorPrimary</item>
+        <item name="colorPrimaryDark">@color/colorPrimaryDark</item>
+        <item name="colorAccent">@color/colorAccent</item>
+    </style>
+
+    <style name="AppTheme.NoActionBar" parent="Theme.AppCompat.DayNight.NoActionBar">
+        <item name="windowActionBar">false</item>
+        <item name="windowNoTitle">true</item>
+        <item name="android:background">@null</item>
+    </style>
+
+
+    <style name="AppTheme.NoActionBarLaunch" parent="Theme.SplashScreen">
+        <item name="android:background">@drawable/splash</item>
+    </style>
+</resources>
\ No newline at end of file
diff --git a/android/app/src/main/res/xml/file_paths.xml b/android/app/src/main/res/xml/file_paths.xml
new file mode 100644
index 0000000..bd0c4d8
--- /dev/null
+++ b/android/app/src/main/res/xml/file_paths.xml
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="utf-8"?>
+<paths xmlns:android="http://schemas.android.com/apk/res/android">
+    <external-path name="my_images" path="." />
+    <cache-path name="my_cache_images" path="." />
+</paths>
\ No newline at end of file
diff --git a/android/app/src/test/java/com/getcapacitor/myapp/ExampleUnitTest.java b/android/app/src/test/java/com/getcapacitor/myapp/ExampleUnitTest.java
new file mode 100644
index 0000000..0297327
--- /dev/null
+++ b/android/app/src/test/java/com/getcapacitor/myapp/ExampleUnitTest.java
@@ -0,0 +1,18 @@
+package com.getcapacitor.myapp;
+
+import static org.junit.Assert.*;
+
+import org.junit.Test;
+
+/**
+ * Example local unit test, which will execute on the development machine (host).
+ *
+ * @see <a href="http://d.android.com/tools/testing">Testing documentation</a>
+ */
+public class ExampleUnitTest {
+
+    @Test
+    public void addition_isCorrect() throws Exception {
+        assertEquals(4, 2 + 2);
+    }
+}
diff --git a/android/build.gradle b/android/build.gradle
new file mode 100644
index 0000000..b648f20
--- /dev/null
+++ b/android/build.gradle
@@ -0,0 +1,29 @@
+// Top-level build file where you can add configuration options common to all sub-projects/modules.
+
+buildscript {
+
+    repositories {
+        google()
+        mavenCentral()
+    }
+    dependencies {
+        classpath 'com.android.tools.build:gradle:8.13.0'
+        classpath 'com.google.gms:google-services:4.4.4'
+
+        // NOTE: Do not place your application dependencies here; they belong
+        // in the individual module build.gradle files
+    }
+}
+
+apply from: "variables.gradle"
+
+allprojects {
+    repositories {
+        google()
+        mavenCentral()
+    }
+}
+
+task clean(type: Delete) {
+    delete rootProject.buildDir
+}
diff --git a/android/capacitor.settings.gradle b/android/capacitor.settings.gradle
new file mode 100644
index 0000000..075045f
--- /dev/null
+++ b/android/capacitor.settings.gradle
@@ -0,0 +1,9 @@
+// DO NOT EDIT THIS FILE! IT IS GENERATED EACH TIME "capacitor update" IS RUN
+include ':capacitor-android'
+project(':capacitor-android').projectDir = new File('../node_modules/.pnpm/@capacitor+android@8.3.0_@capacitor+core@8.3.0/node_modules/@capacitor/android/capacitor')
+
+include ':capacitor-app'
+project(':capacitor-app').projectDir = new File('../node_modules/.pnpm/@capacitor+app@8.1.0_@capacitor+core@8.3.0/node_modules/@capacitor/app/android')
+
+include ':capacitor-push-notifications'
+project(':capacitor-push-notifications').projectDir = new File('../node_modules/.pnpm/@capacitor+push-notifications@8.0.3_@capacitor+core@8.3.0/node_modules/@capacitor/push-notifications/android')
diff --git a/android/gradle.properties b/android/gradle.properties
new file mode 100644
index 0000000..2e87c52
--- /dev/null
+++ b/android/gradle.properties
@@ -0,0 +1,22 @@
+# Project-wide Gradle settings.
+
+# IDE (e.g. Android Studio) users:
+# Gradle settings configured through the IDE *will override*
+# any settings specified in this file.
+
+# For more details on how to configure your build environment visit
+# http://www.gradle.org/docs/current/userguide/build_environment.html
+
+# Specifies the JVM arguments used for the daemon process.
+# The setting is particularly useful for tweaking memory settings.
+org.gradle.jvmargs=-Xmx1536m
+
+# When configured, Gradle will run in incubating parallel mode.
+# This option should only be used with decoupled projects. More details, visit
+# http://www.gradle.org/docs/current/userguide/multi_project_builds.html#sec:decoupled_projects
+# org.gradle.parallel=true
+
+# AndroidX package structure to make it clearer which packages are bundled with the
+# Android operating system, and which are packaged with your app's APK
+# https://developer.android.com/topic/libraries/support-library/androidx-rn
+android.useAndroidX=true
diff --git a/android/gradle/wrapper/gradle-wrapper.jar b/android/gradle/wrapper/gradle-wrapper.jar
new file mode 100644
index 0000000..1b33c55
Binary files /dev/null and b/android/gradle/wrapper/gradle-wrapper.jar differ
diff --git a/android/gradle/wrapper/gradle-wrapper.properties b/android/gradle/wrapper/gradle-wrapper.properties
new file mode 100644
index 0000000..7705927
--- /dev/null
+++ b/android/gradle/wrapper/gradle-wrapper.properties
@@ -0,0 +1,7 @@
+distributionBase=GRADLE_USER_HOME
+distributionPath=wrapper/dists
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.3-all.zip
+networkTimeout=10000
+validateDistributionUrl=true
+zipStoreBase=GRADLE_USER_HOME
+zipStorePath=wrapper/dists
diff --git a/android/gradlew b/android/gradlew
new file mode 100755
index 0000000..23d15a9
--- /dev/null
+++ b/android/gradlew
@@ -0,0 +1,251 @@
+#!/bin/sh
+
+#
+# Copyright © 2015-2021 the original authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+#
+
+##############################################################################
+#
+#   Gradle start up script for POSIX generated by Gradle.
+#
+#   Important for running:
+#
+#   (1) You need a POSIX-compliant shell to run this script. If your /bin/sh is
+#       noncompliant, but you have some other compliant shell such as ksh or
+#       bash, then to run this script, type that shell name before the whole
+#       command line, like:
+#
+#           ksh Gradle
+#
+#       Busybox and similar reduced shells will NOT work, because this script
+#       requires all of these POSIX shell features:
+#         * functions;
+#         * expansions «$var», «${var}», «${var:-default}», «${var+SET}»,
+#           «${var#prefix}», «${var%suffix}», and «$( cmd )»;
+#         * compound commands having a testable exit status, especially «case»;
+#         * various built-in commands including «command», «set», and «ulimit».
+#
+#   Important for patching:
+#
+#   (2) This script targets any POSIX shell, so it avoids extensions provided
+#       by Bash, Ksh, etc; in particular arrays are avoided.
+#
+#       The "traditional" practice of packing multiple parameters into a
+#       space-separated string is a well documented source of bugs and security
+#       problems, so this is (mostly) avoided, by progressively accumulating
+#       options in "$@", and eventually passing that to Java.
+#
+#       Where the inherited environment variables (DEFAULT_JVM_OPTS, JAVA_OPTS,
+#       and GRADLE_OPTS) rely on word-splitting, this is performed explicitly;
+#       see the in-line comments for details.
+#
+#       There are tweaks for specific operating systems such as AIX, CygWin,
+#       Darwin, MinGW, and NonStop.
+#
+#   (3) This script is generated from the Groovy template
+#       https://github.com/gradle/gradle/blob/HEAD/platforms/jvm/plugins-application/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt
+#       within the Gradle project.
+#
+#       You can find Gradle at https://github.com/gradle/gradle/.
+#
+##############################################################################
+
+# Attempt to set APP_HOME
+
+# Resolve links: $0 may be a link
+app_path=$0
+
+# Need this for daisy-chained symlinks.
+while
+    APP_HOME=${app_path%"${app_path##*/}"}  # leaves a trailing /; empty if no leading path
+    [ -h "$app_path" ]
+do
+    ls=$( ls -ld "$app_path" )
+    link=${ls#*' -> '}
+    case $link in             #(
+      /*)   app_path=$link ;; #(
+      *)    app_path=$APP_HOME$link ;;
+    esac
+done
+
+# This is normally unused
+# shellcheck disable=SC2034
+APP_BASE_NAME=${0##*/}
+# Discard cd standard output in case $CDPATH is set (https://github.com/gradle/gradle/issues/25036)
+APP_HOME=$( cd -P "${APP_HOME:-./}" > /dev/null && printf '%s\n' "$PWD" ) || exit
+
+# Use the maximum available, or set MAX_FD != -1 to use that value.
+MAX_FD=maximum
+
+warn () {
+    echo "$*"
+} >&2
+
+die () {
+    echo
+    echo "$*"
+    echo
+    exit 1
+} >&2
+
+# OS specific support (must be 'true' or 'false').
+cygwin=false
+msys=false
+darwin=false
+nonstop=false
+case "$( uname )" in                #(
+  CYGWIN* )         cygwin=true  ;; #(
+  Darwin* )         darwin=true  ;; #(
+  MSYS* | MINGW* )  msys=true    ;; #(
+  NONSTOP* )        nonstop=true ;;
+esac
+
+CLASSPATH="\\\"\\\""
+
+
+# Determine the Java command to use to start the JVM.
+if [ -n "$JAVA_HOME" ] ; then
+    if [ -x "$JAVA_HOME/jre/sh/java" ] ; then
+        # IBM's JDK on AIX uses strange locations for the executables
+        JAVACMD=$JAVA_HOME/jre/sh/java
+    else
+        JAVACMD=$JAVA_HOME/bin/java
+    fi
+    if [ ! -x "$JAVACMD" ] ; then
+        die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+    fi
+else
+    JAVACMD=java
+    if ! command -v java >/dev/null 2>&1
+    then
+        die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+    fi
+fi
+
+# Increase the maximum file descriptors if we can.
+if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then
+    case $MAX_FD in #(
+      max*)
+        # In POSIX sh, ulimit -H is undefined. That's why the result is checked to see if it worked.
+        # shellcheck disable=SC2039,SC3045
+        MAX_FD=$( ulimit -H -n ) ||
+            warn "Could not query maximum file descriptor limit"
+    esac
+    case $MAX_FD in  #(
+      '' | soft) :;; #(
+      *)
+        # In POSIX sh, ulimit -n is undefined. That's why the result is checked to see if it worked.
+        # shellcheck disable=SC2039,SC3045
+        ulimit -n "$MAX_FD" ||
+            warn "Could not set maximum file descriptor limit to $MAX_FD"
+    esac
+fi
+
+# Collect all arguments for the java command, stacking in reverse order:
+#   * args from the command line
+#   * the main class name
+#   * -classpath
+#   * -D...appname settings
+#   * --module-path (only if needed)
+#   * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables.
+
+# For Cygwin or MSYS, switch paths to Windows format before running java
+if "$cygwin" || "$msys" ; then
+    APP_HOME=$( cygpath --path --mixed "$APP_HOME" )
+    CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" )
+
+    JAVACMD=$( cygpath --unix "$JAVACMD" )
+
+    # Now convert the arguments - kludge to limit ourselves to /bin/sh
+    for arg do
+        if
+            case $arg in                                #(
+              -*)   false ;;                            # don't mess with options #(
+              /?*)  t=${arg#/} t=/${t%%/*}              # looks like a POSIX filepath
+                    [ -e "$t" ] ;;                      #(
+              *)    false ;;
+            esac
+        then
+            arg=$( cygpath --path --ignore --mixed "$arg" )
+        fi
+        # Roll the args list around exactly as many times as the number of
+        # args, so each arg winds up back in the position where it started, but
+        # possibly modified.
+        #
+        # NB: a `for` loop captures its iteration list before it begins, so
+        # changing the positional parameters here affects neither the number of
+        # iterations, nor the values presented in `arg`.
+        shift                   # remove old arg
+        set -- "$@" "$arg"      # push replacement arg
+    done
+fi
+
+
+# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.
+DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"'
+
+# Collect all arguments for the java command:
+#   * DEFAULT_JVM_OPTS, JAVA_OPTS, and optsEnvironmentVar are not allowed to contain shell fragments,
+#     and any embedded shellness will be escaped.
+#   * For example: A user cannot expect ${Hostname} to be expanded, as it is an environment variable and will be
+#     treated as '${Hostname}' itself on the command line.
+
+set -- \
+        "-Dorg.gradle.appname=$APP_BASE_NAME" \
+        -classpath "$CLASSPATH" \
+        -jar "$APP_HOME/gradle/wrapper/gradle-wrapper.jar" \
+        "$@"
+
+# Stop when "xargs" is not available.
+if ! command -v xargs >/dev/null 2>&1
+then
+    die "xargs is not available"
+fi
+
+# Use "xargs" to parse quoted args.
+#
+# With -n1 it outputs one arg per line, with the quotes and backslashes removed.
+#
+# In Bash we could simply go:
+#
+#   readarray ARGS < <( xargs -n1 <<<"$var" ) &&
+#   set -- "${ARGS[@]}" "$@"
+#
+# but POSIX shell has neither arrays nor command substitution, so instead we
+# post-process each arg (as a line of input to sed) to backslash-escape any
+# character that might be a shell metacharacter, then use eval to reverse
+# that process (while maintaining the separation between arguments), and wrap
+# the whole thing up as a single "set" statement.
+#
+# This will of course break if any of these variables contains a newline or
+# an unmatched quote.
+#
+
+eval "set -- $(
+        printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" |
+        xargs -n1 |
+        sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' |
+        tr '\n' ' '
+    )" '"$@"'
+
+exec "$JAVACMD" "$@"
diff --git a/android/gradlew.bat b/android/gradlew.bat
new file mode 100644
index 0000000..5eed7ee
--- /dev/null
+++ b/android/gradlew.bat
@@ -0,0 +1,94 @@
+@rem
+@rem Copyright 2015 the original author or authors.
+@rem
+@rem Licensed under the Apache License, Version 2.0 (the "License");
+@rem you may not use this file except in compliance with the License.
+@rem You may obtain a copy of the License at
+@rem
+@rem      https://www.apache.org/licenses/LICENSE-2.0
+@rem
+@rem Unless required by applicable law or agreed to in writing, software
+@rem distributed under the License is distributed on an "AS IS" BASIS,
+@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+@rem See the License for the specific language governing permissions and
+@rem limitations under the License.
+@rem
+@rem SPDX-License-Identifier: Apache-2.0
+@rem
+
+@if "%DEBUG%"=="" @echo off
+@rem ##########################################################################
+@rem
+@rem  Gradle startup script for Windows
+@rem
+@rem ##########################################################################
+
+@rem Set local scope for the variables with windows NT shell
+if "%OS%"=="Windows_NT" setlocal
+
+set DIRNAME=%~dp0
+if "%DIRNAME%"=="" set DIRNAME=.
+@rem This is normally unused
+set APP_BASE_NAME=%~n0
+set APP_HOME=%DIRNAME%
+
+@rem Resolve any "." and ".." in APP_HOME to make it shorter.
+for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi
+
+@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.
+set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m"
+
+@rem Find java.exe
+if defined JAVA_HOME goto findJavaFromJavaHome
+
+set JAVA_EXE=java.exe
+%JAVA_EXE% -version >NUL 2>&1
+if %ERRORLEVEL% equ 0 goto execute
+
+echo. 1>&2
+echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. 1>&2
+echo. 1>&2
+echo Please set the JAVA_HOME variable in your environment to match the 1>&2
+echo location of your Java installation. 1>&2
+
+goto fail
+
+:findJavaFromJavaHome
+set JAVA_HOME=%JAVA_HOME:"=%
+set JAVA_EXE=%JAVA_HOME%/bin/java.exe
+
+if exist "%JAVA_EXE%" goto execute
+
+echo. 1>&2
+echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% 1>&2
+echo. 1>&2
+echo Please set the JAVA_HOME variable in your environment to match the 1>&2
+echo location of your Java installation. 1>&2
+
+goto fail
+
+:execute
+@rem Setup the command line
+
+set CLASSPATH=
+
+
+@rem Execute Gradle
+"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" -jar "%APP_HOME%\gradle\wrapper\gradle-wrapper.jar" %*
+
+:end
+@rem End local scope for the variables with windows NT shell
+if %ERRORLEVEL% equ 0 goto mainEnd
+
+:fail
+rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of
+rem the _cmd.exe /c_ return code!
+set EXIT_CODE=%ERRORLEVEL%
+if %EXIT_CODE% equ 0 set EXIT_CODE=1
+if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE%
+exit /b %EXIT_CODE%
+
+:mainEnd
+if "%OS%"=="Windows_NT" endlocal
+
+:omega
diff --git a/android/settings.gradle b/android/settings.gradle
new file mode 100644
index 0000000..3b4431d
--- /dev/null
+++ b/android/settings.gradle
@@ -0,0 +1,5 @@
+include ':app'
+include ':capacitor-cordova-android-plugins'
+project(':capacitor-cordova-android-plugins').projectDir = new File('./capacitor-cordova-android-plugins/')
+
+apply from: 'capacitor.settings.gradle'
\ No newline at end of file
diff --git a/android/variables.gradle b/android/variables.gradle
new file mode 100644
index 0000000..ee4ba41
--- /dev/null
+++ b/android/variables.gradle
@@ -0,0 +1,16 @@
+ext {
+    minSdkVersion = 24
+    compileSdkVersion = 36
+    targetSdkVersion = 36
+    androidxActivityVersion = '1.11.0'
+    androidxAppCompatVersion = '1.7.1'
+    androidxCoordinatorLayoutVersion = '1.3.0'
+    androidxCoreVersion = '1.17.0'
+    androidxFragmentVersion = '1.8.9'
+    coreSplashScreenVersion = '1.2.0'
+    androidxWebkitVersion = '1.14.0'
+    junitVersion = '4.13.2'
+    androidxJunitVersion = '1.3.0'
+    androidxEspressoCoreVersion = '3.7.0'
+    cordovaAndroidVersion = '14.0.1'
+}
\ No newline at end of file
diff --git a/app/CLAUDE.md b/app/CLAUDE.md
new file mode 100644
index 0000000..25f0532
--- /dev/null
+++ b/app/CLAUDE.md
@@ -0,0 +1,61 @@
+# CLAUDE.md — app/
+
+## Nuxt Frontend (SPA Mode)
+
+This is a **client-side only** Nuxt 4 app (`ssr: false`). No server routes, no `server/` directory. All data comes from PocketBase via its SDK.
+
+## PocketBase Client Access
+
+```ts
+const { pb, authStore } = usePocketBase()
+```
+
+- `pb` — PocketBase SDK instance (configured in `plugins/pocketbase.ts`)
+- `authStore` — reactive Vue ref wrapping PocketBase's auth state (`.isValid`, `.record`, `.token`)
+
+**Never instantiate PocketBase directly.** Always use the `usePocketBase()` composable.
+
+## Stores (Pinia)
+
+All backend interaction goes through Pinia stores in `stores/`:
+
+| Store | Collection | Key patterns |
+|-------|-----------|--------------|
+| `user.ts` | `users` | Auth flows (OTP, OAuth), profile CRUD, `isAuthenticated` getter |
+| `counter.ts` | `counters` | Realtime subscription, increment/reset |
+| `notifications.ts` | `notifications` + `fcm_tokens` | Realtime subscription, FCM token registration |
+| `avatar.ts` | `users` (file field) | Avatar URL getter, file upload |
+
+**Realtime pattern:** Stores call `pb.collection('x').subscribe('*', callback)` in a `subscribeToChanges()` action. Components call this on mount and `unsubscribe()` on unmount.
+
+## Routing & Middleware
+
+Pages use Nuxt file-based routing. Two middleware:
+
+- `middleware/auth.ts` — route-level guard, add via `definePageMeta({ middleware: 'auth' })`
+- `middleware/00.fetchUser.global.ts` — runs on every navigation, refreshes auth token
+
+Two layouts: `default` (with AppHeader) and `empty` (login/confirm pages).
+
+## Components
+
+Organized by feature domain: `App/` (header, notifications), `Counter/` (widget), `Profile/` (avatar, upload, lang select). Components use Nuxt UI v3 primitives (`UButton`, `UCard`, `UForm`, `UModal`, etc.).
+
+## Styling
+
+Tailwind CSS v4 + Nuxt UI. Theme colors set in `app.config.ts` (primary: teal, neutral: slate). Custom font: Public Sans (defined in `assets/css/main.css`).
+
+## i18n
+
+Strategy: `no_prefix` — URLs are not prefixed with locale. Two locales: `en`, `de`. Translation files in `i18n/locales/`. Use `$t('key')` in templates or `const { t } = useI18n()` in setup.
+
+`LanguageCode` type defined in `types/i18n.types.ts`.
+
+## Types
+
+- `types/pocketbase.types.ts` — **auto-generated**, do not edit. Contains typed collection names (`Collections` enum) and record interfaces. Regenerate with `pnpm pocketbase:types`.
+- `types/i18n.types.ts` — manual type for supported language codes.
+
+## Mobile (Capacitor)
+
+`app.vue` handles Capacitor-specific setup: deep link listener (`App.addListener('appUrlOpen')`), push notification registration, and safe-area CSS. Check `Capacitor.isNativePlatform()` before using native APIs.
diff --git a/app/app.config.ts b/app/app.config.ts
new file mode 100644
index 0000000..e986ecb
--- /dev/null
+++ b/app/app.config.ts
@@ -0,0 +1,8 @@
+export default defineAppConfig({
+  ui: {
+    colors: {
+      primary: 'teal',
+      neutral: 'slate'
+    }
+  }
+})
diff --git a/app/app.vue b/app/app.vue
new file mode 100644
index 0000000..288ee9d
--- /dev/null
+++ b/app/app.vue
@@ -0,0 +1,150 @@
+<template>
+  <UApp
+    :locale="locales[locale]"
+  >
+    <div class="inside-safe-area">
+      <NuxtLayout>
+        <NuxtPage />
+      </NuxtLayout>
+    </div>
+  </UApp>
+</template>
+
+<script setup lang="ts">
+import * as locales from '@nuxt/ui/locale'
+import type { URLOpenListenerEvent } from '@capacitor/app'
+import { Capacitor } from '@capacitor/core'
+import { App } from '@capacitor/app'
+import type {
+  Token,
+  ActionPerformed,
+  PushNotificationSchema } from '@capacitor/push-notifications'
+import {
+  PushNotifications
+} from '@capacitor/push-notifications'
+import type { UsersLanguageOptions } from './types/pocketbase.types'
+
+const { locale, t, setLocale } = useI18n()
+
+const lang = computed(() => locales[locale.value].code)
+const dir = computed(() => locales[locale.value].dir)
+
+useHead({
+  meta: [
+    { name: 'viewport', content: 'width=device-width, initial-scale=1' }
+  ],
+  link: [
+    { rel: 'icon', href: '/favicon.ico' }
+  ],
+  htmlAttrs: {
+    lang,
+    dir
+  }
+})
+
+const title = t('hero.title')
+const description = t('hero.description')
+
+useSeoMeta({
+  title,
+  description,
+  ogTitle: title,
+  ogDescription: description
+})
+
+const { isAuthenticated } = storeToRefs(useUser())
+const { addFcmToken } = useNotifications()
+const toast = useToast()
+
+const registerPushNotifications = async () => {
+  if (Capacitor.isNativePlatform() && isAuthenticated.value) {
+  // Request permission to use push notifications
+  // iOS will prompt user and return if they granted permission or not
+  // Android will just grant without prompting
+    PushNotifications.requestPermissions().then((result) => {
+      if (result.receive === 'granted') {
+      // Register with Apple / Google to receive push via APNS/FCM
+        PushNotifications.register()
+      } else {
+      // Show some error
+      }
+    })
+
+    // On success, we should be able to receive notifications
+    PushNotifications.addListener('registration',
+      (token: Token) => {
+      // Add the FCM token for the current user
+        addFcmToken(token.value)
+      }
+    )
+
+    // Some issue with our setup and push will not work
+    PushNotifications.addListener('registrationError',
+      (error) => {
+        console.warn('Error on push notification registration:', JSON.stringify(error))
+      }
+    )
+
+    // Show the notification payload as toast message if the app is open on our device
+    PushNotifications.addListener('pushNotificationReceived',
+      (notification: PushNotificationSchema) => {
+        toast.add({
+          title: notification.title,
+          description: notification.subtitle ?? notification.body,
+          color: 'primary'
+        })
+      }
+    )
+
+    // Method called when tapping on a notification
+    PushNotifications.addListener('pushNotificationActionPerformed',
+      (notification: ActionPerformed) => {
+        console.log('Push action performed:', JSON.stringify(notification))
+      }
+    )
+  }
+}
+
+// handle locale based on user prefs
+const { updateUser, user } = useUser()
+watch(isAuthenticated, async () => {
+  if (isAuthenticated.value) {
+    // Fetch the user profile after successful sign-in
+    const prefLanguage = user?.language
+    if (prefLanguage) {
+      // Set the locale based on the user's profile locale
+      setLocale(prefLanguage)
+    } else {
+      // If the locale was not yet saved to the profile, update it
+      updateUser({ language: locale.value as UsersLanguageOptions })
+    }
+
+    // Register push notifications after successful sign-in
+    registerPushNotifications()
+  }
+}, { immediate: true })
+
+// Activate Capacitor features if we are on native platform (Android/iOS)
+if (Capacitor.isNativePlatform()) {
+  const router = useRouter()
+  // Register and handle deep links
+  App.addListener('appUrlOpen', function (event: URLOpenListenerEvent) {
+    const slug = event.url.split('.app').pop()
+    if (slug) {
+      router.push({
+        path: slug
+      })
+    }
+  })
+}
+</script>
+
+<style>
+/* Safe area insets needed for mobile app to avoid notches and safe areas */
+.inside-safe-area {
+  margin-top: env(safe-area-inset-top, unset);
+  padding-right: env(safe-area-inset-right, unset);
+  padding-bottom: env(safe-area-inset-bottom, unset);
+  padding-left: env(safe-area-inset-left, unset);
+}
+</style>
diff --git a/app/assets/css/main.css b/app/assets/css/main.css
new file mode 100644
index 0000000..ba00ad1
--- /dev/null
+++ b/app/assets/css/main.css
@@ -0,0 +1,6 @@
+@import "tailwindcss";
+@import "@nuxt/ui";
+
+@theme static {
+  --font-sans: 'Public Sans', sans-serif;
+}
diff --git a/app/components/App/Header.vue b/app/components/App/Header.vue
new file mode 100644
index 0000000..4c27734
--- /dev/null
+++ b/app/components/App/Header.vue
@@ -0,0 +1,51 @@
+<template>
+  <UHeader :toggle="false">
+    <template #left>
+      <ULink to="/">
+        <NuxtImg
+          src="logo.png"
+          alt="Logo"
+          class="size-12"
+        />
+      </ULink>
+
+      <ProfileLangSelect />
+    </template>
+
+    <template #right>
+      <UColorModeButton />
+      <AppNotifications v-if="isAuthenticated" />
+      <UDropdownMenu :items="items">
+        <ProfileAvatar
+          size="xl"
+        />
+      </UDropdownMenu>
+    </template>
+  </UHeader>
+</template>
+
+<script setup lang="ts">
+const { isAuthenticated } = storeToRefs(useUser())
+const { signOut } = useUser()
+
+const items = computed(() => {
+  if (isAuthenticated.value) {
+    return [[{
+      label: 'Logout',
+      icon: 'i-lucide-log-out',
+      onSelect: () => {
+        signOut()
+        navigateTo('/')
+      } }]
+    ]
+  } else {
+    return [[{
+      label: 'Sign In',
+      icon: 'i-lucide-log-in',
+      onSelect: () => {
+        navigateTo('/login')
+      } }]
+    ]
+  }
+})
+</script>
diff --git a/app/components/App/Notifications.vue b/app/components/App/Notifications.vue
new file mode 100644
index 0000000..8b8ff47
--- /dev/null
+++ b/app/components/App/Notifications.vue
@@ -0,0 +1,85 @@
+<template>
+  <UTooltip
+    :text="$t('notifications')"
+    :shortcuts="['N']"
+  >
+    <UButton
+      color="neutral"
+      variant="ghost"
+      square
+      @click="drawerOpen = true"
+    >
+      <UChip
+        color="error"
+        :show="hasUnreadNotifications"
+        inset
+      >
+        <UIcon
+          name="i-lucide-bell"
+          class="size-5 shrink-0"
+        />
+      </UChip>
+    </UButton>
+  </UTooltip>
+  <USlideover
+    v-model:open="drawerOpen"
+    :title="$t('notifications')"
+  >
+    <template #body>
+      <div
+        v-for="notification in notifications"
+        :key="notification.id"
+        v-on-visible="() => markAsRead(notification.id)"
+        class="px-3 py-2.5 rounded-md hover:bg-elevated/50 flex items-center gap-3 relative -mx-3 first:-mt-3 last:-mb-3"
+      >
+        <UChip
+          color="error"
+          :show="!notification.isRead"
+          inset
+        >
+          <UAvatar
+            alt="Nuxt"
+            size="md"
+          />
+        </UChip>
+
+        <div class="text-sm flex-1">
+          <p class="flex items-center justify-between">
+            <span class="text-highlighted font-medium">{{ notification.title }}</span>
+
+            <time
+              :datetime="notification.created"
+              class="text-muted text-xs"
+              v-text="$d(new Date(notification.created), { year: 'numeric', month: 'numeric', day: 'numeric', hour: 'numeric', minute: 'numeric' })"
+            />
+          </p>
+
+          <p class="text-dimmed">
+            {{ notification.body }}
+          </p>
+        </div>
+      </div>
+    </template>
+  </USlideover>
+</template>
+
+<script setup lang="ts">
+const { fetchNotifications, subscribeToChanges, unsubscribe, markAsRead } = useNotifications()
+const { notifications } = storeToRefs(useNotifications())
+
+const drawerOpen = ref(false)
+const hasUnreadNotifications = computed(() => notifications.value.some(n => !n.isRead))
+
+// Fetch the notifications once on page load
+fetchNotifications()
+
+onMounted(() => {
+  // Subscribe to realtime changes of notifications
+  subscribeToChanges()
+})
+
+// Unsubscribe for cleanup
+onUnmounted(() => {
+  unsubscribe()
+})
+</script>
diff --git a/app/components/Counter/Widget.vue b/app/components/Counter/Widget.vue
new file mode 100644
index 0000000..82ab6cf
--- /dev/null
+++ b/app/components/Counter/Widget.vue
@@ -0,0 +1,51 @@
+<template>
+  <UCard>
+    <div class="flex flex-col items-center justify-center gap-4 p-4">
+      <div class="flex items-center gap-4">
+        <UButton
+          icon="i-lucide-minus"
+          size="lg"
+          variant="outline"
+          @click="increment(-1)"
+        />
+        <div class="text-4xl font-bold w-16 text-center">
+          {{ count }}
+        </div>
+        <UButton
+          icon="i-lucide-plus"
+          size="lg"
+          variant="outline"
+          @click="increment(1)"
+        />
+      </div>
+      <UButton
+        v-if="recordId"
+        icon="i-lucide-rotate-ccw"
+        size="md"
+        variant="ghost"
+        @click="reset()"
+      >
+        {{ $t("counter.reset") }}
+      </UButton>
+    </div>
+  </UCard>
+</template>
+
+<script setup lang="ts">
+const { fetchCurrentCount, subscribeToChanges, unsubscribe, reset, increment }
+  = useCounter()
+const { count, recordId } = storeToRefs(useCounter())
+
+// Fetch the current count once on page load
+fetchCurrentCount()
+
+onMounted(() => {
+  // Subscribe to realtime changes of the count
+  subscribeToChanges()
+})
+
+// Unsubscribe for cleanup
+onUnmounted(() => {
+  unsubscribe()
+})
+</script>
diff --git a/app/components/Profile/Avatar.vue b/app/components/Profile/Avatar.vue
new file mode 100644
index 0000000..549092d
--- /dev/null
+++ b/app/components/Profile/Avatar.vue
@@ -0,0 +1,21 @@
+<template>
+  <UAvatar
+    v-bind="forwardedProps"
+    :src="src ?? undefined"
+    :alt="name ?? undefined"
+    :icon="icon"
+  />
+</template>
+
+<script setup lang="ts">
+import type { AvatarProps } from '@nuxt/ui'
+
+const forwardedProps = defineProps<Omit<AvatarProps, 'src' | 'alt' | 'icon'>>()
+
+const { name, src } = storeToRefs(useAvatar())
+
+// show initials if name is present, otherwise show icon
+const icon = computed(() => {
+  return !name.value ? 'i-lucide-user' : undefined
+})
+</script>
diff --git a/app/components/Profile/AvatarUpload.vue b/app/components/Profile/AvatarUpload.vue
new file mode 100644
index 0000000..59ac117
--- /dev/null
+++ b/app/components/Profile/AvatarUpload.vue
@@ -0,0 +1,57 @@
+<template>
+  <div class="flex flex-wrap items-center gap-3">
+    <ProfileAvatar
+      size="lg"
+    />
+    <UButton
+      :label="$t('profile.choose')"
+      color="neutral"
+      :loading="uploading"
+      @click="onFileClick"
+    />
+    <input
+      ref="fileRef"
+      type="file"
+      class="hidden"
+      accept=".jpg, .jpeg, .png, .gif"
+      @change="onFileChange"
+    >
+  </div>
+</template>
+
+<script setup lang="ts">
+const { t } = useI18n()
+const toast = useToast()
+
+const fileRef = ref<HTMLInputElement>()
+const uploading = ref(false)
+
+async function onFileChange(e: Event) {
+  const input = e.target as HTMLInputElement
+
+  const files = input.files
+  try {
+    uploading.value = true
+    if (!files || files.length === 0) {
+      throw new Error('You must select an image to upload.')
+    }
+    const file = files[0]
+    await useAvatar().uploadAvatar(file!)
+
+    toast.add({
+      title: t('profile.success'),
+      description: t('profile.avatarUploaded'),
+      icon: 'i-lucide-check',
+      color: 'success'
+    })
+  } catch (error) {
+    toast.add({ color: 'error', description: (error as Error).message })
+  } finally {
+    uploading.value = false
+  }
+}
+
+function onFileClick() {
+  fileRef.value?.click()
+}
+</script>
diff --git a/app/components/Profile/LangSelect.vue b/app/components/Profile/LangSelect.vue
new file mode 100644
index 0000000..dd3c3a8
--- /dev/null
+++ b/app/components/Profile/LangSelect.vue
@@ -0,0 +1,25 @@
+<template>
+  <ULocaleSelect
+    :model-value="locale"
+    :locales="availableLocales"
+    @update:model-value="setLanguage($event as LanguageCode)"
+  />
+</template>
+
+<script setup lang="ts">
+import * as allLocales from '@nuxt/ui/locale'
+import type { LanguageCode } from '~/types/i18n.types'
+import type { UsersLanguageOptions } from '~/types/pocketbase.types'
+
+const { locale, locales, setLocale } = useI18n()
+const availableLocales = computed(() =>
+  locales.value.map(l => allLocales[l.code])
+)
+
+const { updateUser } = useUser()
+
+const setLanguage = (language: LanguageCode) => {
+  setLocale(language)
+  updateUser({ language: language as UsersLanguageOptions })
+}
+</script>
diff --git a/app/composables/usePocketBase.ts b/app/composables/usePocketBase.ts
new file mode 100644
index 0000000..6280199
--- /dev/null
+++ b/app/composables/usePocketBase.ts
@@ -0,0 +1,18 @@
+import type { ReactiveAuthStore } from '~/plugins/pocketbase'
+
+/**
+ * Returns the PocketBase client and a reactive ref of the auth store.
+ */
+export const usePocketBase = () => {
+  const { $pb } = useNuxtApp()
+  if (!$pb) throw new Error('Pocketbase plugin not accessible')
+  return {
+    pb: $pb,
+    /**
+     * Reactive wrapper around the PocketBase auth store.
+     * Access state via `authStore.value.isValid`, `.record`, `.token`, `.isSuperuser` etc.
+     * Use only for reactive access; for imperative methods use `$pb.authStore` directly.
+     */
+    authStore: ($pb.authStore as ReactiveAuthStore).ref
+  }
+}
diff --git a/app/i18n/locales/de.json b/app/i18n/locales/de.json
new file mode 100644
index 0000000..b637c66
--- /dev/null
+++ b/app/i18n/locales/de.json
@@ -0,0 +1,53 @@
+{
+  "hero": {
+    "title": "Nuxt PocketBase Starter Template",
+    "description": "Eine Starter-Vorlage mit vorgegebenen Frameworks, die von Nuxt und PocketBase sowie weiteren Tools unterstützt wird, um eine schnelle Veröffentlichung von Apps zu ermöglichen.",
+    "signUp": "Registrieren",
+    "profile": "Profil"
+  },
+  "login": {
+    "title": "Anmelden",
+    "email": "E-Mail",
+    "emailPlaceholder": "Geben Sie Ihre E-Mail ein",
+    "otp": "Code",
+    "continue": "Weiter",
+    "agree": "Mit der Anmeldung stimmen Sie unseren",
+    "terms": "Nutzungsbedingungen",
+    "google": "Mit Google anmelden",
+    "invalidEmail": "Ungültige E-Mail",
+    "invalidCharacterCount": "Muss mindestens 8 Zeichen lang sein",
+    "emailSent": "E-Mail gesendet",
+    "emailSentDescription": "Überprüfen Sie Ihr Postfach und geben Sie den Code aus der E-Email im angezeigten Feld ein."
+  },
+  "confirm": {
+    "signingIn": "Anmelden",
+    "redirectedSoon": "Sie werden in Kürze weitergeleitet..."
+  },
+  "profile": {
+    "title": "Profil",
+    "description": "Diese Informationen werden öffentlich angezeigt.",
+    "save": "Änderungen speichern",
+    "name": "Name",
+    "nameDescription": "Wird auf Quittungen, Rechnungen und in anderer Kommunikation angezeigt.",
+    "email": "E-Mail",
+    "emailDescription": "Wird für die Anmeldung, E-Mail-Quittungen und Produkt-Updates verwendet.",
+    "avatar": "Profilbild",
+    "avatarDescription": "JPG, GIF oder PNG. Maximal 1MB.",
+    "choose": "Auswählen",
+    "tooShort": "Zu kurz",
+    "invalidEmail": "Ungültige E-Mail",
+    "success": "Erfolg",
+    "settingsUpdated": "Ihre Einstellungen wurden aktualisiert.",
+    "avatarUploaded": "Ihr Profilbild wurde hochgeladen",
+    "delete": "Konto löschen",
+    "deleteDescription": "Hier können Sie Ihre Daten löschen.",
+    "deleteWarning": "Wenn Sie Ihr Konto löschen, werden alle Ihre Daten gelöscht. Dies kann nicht rückgängig gemacht werden."
+  },
+  "cancel": "Abbrechen",
+  "notifications": "Benachrichtigungen",
+  "counter": {
+    "reset": "Zurücksetzen",
+    "notAuthenticated": "Nicht angemeldet",
+    "signInToUse": "Bitte melden Sie sich an um das Beispiel Zähler-Widget auszuprobieren"
+  }
+}
diff --git a/app/i18n/locales/en.json b/app/i18n/locales/en.json
new file mode 100644
index 0000000..f88f307
--- /dev/null
+++ b/app/i18n/locales/en.json
@@ -0,0 +1,53 @@
+{
+  "hero": {
+    "title": "Nuxt PocketBase Starter Template",
+    "description": "A highly opinionated starter template powered by Nuxt and PocketBase among others to enable quick release of Apps.",
+    "signUp": "Sign Up",
+    "profile": "Profile"
+  },
+  "login": {
+    "title": "Sign In",
+    "email": "Email",
+    "emailPlaceholder": "Enter your email",
+    "otp": "Code",
+    "continue": "Continue",
+    "agree": "By signing in, you agree to our",
+    "terms": "Terms of Service",
+    "google": "Login with Google",
+    "invalidEmail": "Invalid email",
+    "invalidCharacterCount": "Must be at least 8 characters",
+    "emailSent": "Email sent",
+    "emailSentDescription": "Check your email and enter the code from the email in the field."
+  },
+  "confirm": {
+    "signingIn": "Signing you in",
+    "redirectedSoon": "You will be redirected soon..."
+  },
+  "profile": {
+    "title": "Profile",
+    "description": "These informations will be displayed publicly.",
+    "save": "Save changes",
+    "name": "Name",
+    "nameDescription": "Will appear on receipts, invoices, and other communication.",
+    "email": "Email",
+    "emailDescription": "Used to sign in, for email receipts and product updates.",
+    "avatar": "Avatar",
+    "avatarDescription": "JPG, GIF or PNG. 1MB Max.",
+    "choose": "Choose",
+    "tooShort": "Too short",
+    "invalidEmail": "Invalid email",
+    "success": "Success",
+    "settingsUpdated": "Your settings have been updated.",
+    "avatarUploaded": "Your avatar was uploaded.",
+    "delete": "Delete account",
+    "deleteDescription": "Here you can delete your account.",
+    "deleteWarning": "If you delete your account, all your data will be deleted. This cannot be undone."
+  },
+  "cancel": "Cancel",
+  "notifications": "Notifications",
+  "counter": {
+    "reset": "Reset",
+    "notAuthenticated": "Not authenticated",
+    "signInToUse": "Please sign in to try the example counter widget"
+  }
+}
diff --git a/app/layouts/default.vue b/app/layouts/default.vue
new file mode 100644
index 0000000..49b18f0
--- /dev/null
+++ b/app/layouts/default.vue
@@ -0,0 +1,11 @@
+<template>
+  <div>
+    <AppHeader />
+
+    <UMain>
+      <UContainer class="py-8">
+        <slot />
+      </UContainer>
+    </UMain>
+  </div>
+</template>
diff --git a/app/layouts/empty.vue b/app/layouts/empty.vue
new file mode 100644
index 0000000..7aab4b6
--- /dev/null
+++ b/app/layouts/empty.vue
@@ -0,0 +1,7 @@
+<template>
+  <UMain>
+    <UContainer class="py-8">
+      <slot />
+    </UContainer>
+  </UMain>
+</template>
diff --git a/app/middleware/00.fetchUser.global.ts b/app/middleware/00.fetchUser.global.ts
new file mode 100644
index 0000000..1ba1c24
--- /dev/null
+++ b/app/middleware/00.fetchUser.global.ts
@@ -0,0 +1,10 @@
+/**
+ * Middleware to refresh the authenticated user if possible
+ * Executed on all route changes
+ */
+export default defineNuxtRouteMiddleware(async () => {
+  if (!useUser().isAuthenticated || useUser().user === null) {
+    // Attempt to refresh the auth store
+    await useUser().authRefresh()
+  }
+})
diff --git a/app/middleware/auth.ts b/app/middleware/auth.ts
new file mode 100644
index 0000000..a82f0a9
--- /dev/null
+++ b/app/middleware/auth.ts
@@ -0,0 +1,10 @@
+/**
+ * Middleware to protect routes that require authentication.
+ * Redirects to the login page if the user is not authenticated.
+ */
+export default defineNuxtRouteMiddleware(async () => {
+  if (!useUser().isAuthenticated) {
+    // If still not authenticated, redirect to login
+    return navigateTo('/login')
+  }
+})
diff --git a/app/pages/confirm.vue b/app/pages/confirm.vue
new file mode 100644
index 0000000..3dcbc66
--- /dev/null
+++ b/app/pages/confirm.vue
@@ -0,0 +1,20 @@
+<template>
+  <UEmpty
+    :title="$t('confirm.signingIn')"
+    :description="$t('confirm.redirectedSoon')"
+  />
+</template>
+
+<script setup lang="ts">
+definePageMeta({
+  layout: 'empty'
+})
+
+const { isAuthenticated } = storeToRefs(useUser())
+
+watch(isAuthenticated, () => {
+  if (isAuthenticated.value) {
+    return navigateTo('/profile')
+  }
+}, { immediate: true })
+</script>
diff --git a/app/pages/index.vue b/app/pages/index.vue
new file mode 100644
index 0000000..be76d9c
--- /dev/null
+++ b/app/pages/index.vue
@@ -0,0 +1,41 @@
+<template>
+  <div>
+    <UPageHero
+      :title="$t('hero.title')"
+      :description="$t('hero.description')"
+      :links="links"
+    />
+    <div class="flex justify-center mt-8">
+      <CounterWidget v-if="isAuthenticated" />
+      <UEmpty
+        v-else
+        icon="i-lucide-user-x"
+        :title="$t('counter.notAuthenticated')"
+        :description="$t('counter.signInToUse')"
+      />
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import type { ButtonProps } from '@nuxt/ui'
+
+const { isAuthenticated } = storeToRefs(useUser())
+
+const { t } = useI18n()
+
+const links = computed(() => [
+  {
+    label: t('hero.signUp'),
+    to: '/login',
+    icon: 'i-lucide-log-in'
+  },
+  {
+    label: t('hero.profile'),
+    to: '/profile',
+    color: 'neutral',
+    variant: 'subtle',
+    trailingIcon: 'i-lucide-arrow-right'
+  }
+] as ButtonProps[])
+</script>
diff --git a/app/pages/login.vue b/app/pages/login.vue
new file mode 100644
index 0000000..cc3bc53
--- /dev/null
+++ b/app/pages/login.vue
@@ -0,0 +1,110 @@
+<template>
+  <UAuthForm
+    :fields="fields"
+    :schema="schema"
+    :providers="providers"
+    :title="$t('login.title')"
+    icon="i-lucide-lock"
+    @submit="onSubmit($event)"
+  >
+    <template #footer>
+      {{ $t('login.agree') }}
+      <ULink
+        to="/"
+        class="text-primary font-medium"
+      >
+        {{ $t('login.terms') }}
+      </ULink>.
+    </template>
+  </UAuthForm>
+</template>
+
+<script setup lang="ts">
+import * as z from 'zod'
+import type { FormSubmitEvent } from '@nuxt/ui'
+import type { AuthFormField } from '@nuxt/ui/runtime/components/AuthForm.vue.js'
+
+definePageMeta({
+  layout: 'empty'
+})
+
+const { t } = useI18n()
+const toast = useToast()
+
+// The otpId is used to track the OTP request and verify the user
+// null if no request was sent yet
+const otpId = ref<string | null>(null)
+
+const fields = computed(() => {
+  const fields: AuthFormField[] = [{
+    name: 'email',
+    type: 'text',
+    label: t('login.email'),
+    placeholder: t('login.emailPlaceholder'),
+    required: true
+  }]
+  if (otpId.value !== null) {
+    fields.push({
+      name: 'otp',
+      type: 'otp',
+      label: t('login.otp'),
+      length: 6,
+      size: 'xl'
+    })
+  }
+  return fields
+})
+
+const { signInWithEmail, signInWithOAuth, signInWithOtp } = useUser()
+
+const oAuthAndRedirect = async (provider: 'apple' | 'google') => {
+  try {
+    await signInWithOAuth(provider)
+    navigateTo('/confirm')
+  } catch (error) {
+    toast.add({ color: 'error', description: (error as Error).message })
+  }
+}
+
+const providers = [
+  {
+    label: 'Google',
+    icon: 'i-simple-icons-google',
+    onClick: () => oAuthAndRedirect('google')
+  },
+  {
+    label: 'Apple',
+    icon: 'i-simple-icons-apple',
+    onClick: () => oAuthAndRedirect('apple')
+  }
+]
+
+const schema = z.object({
+  email: z.email(t('login.invalidEmail')),
+  otp: z.array(z.string()).optional().transform(val => val?.join(''))
+})
+
+type Schema = z.output<typeof schema>
+
+const { locale } = useI18n()
+async function onSubmit(payload: FormSubmitEvent<Schema>) {
+  try {
+    if (otpId.value !== null && payload.data.otp?.length) {
+    // If OTP is provided, sign in with OTP
+      await signInWithOtp(otpId.value, payload.data.otp)
+      navigateTo('/confirm')
+    } else {
+      // If OTP is not provided, sign in with email (send OTP)
+      otpId.value = await signInWithEmail(payload.data.email, locale.value)
+      toast.add({
+        title: t('login.emailSent'),
+        description: t('login.emailSentDescription'),
+        icon: 'i-lucide-check',
+        color: 'success'
+      })
+    }
+  } catch (error) {
+    toast.add({ color: 'error', description: (error as Error).message })
+  }
+}
+</script>
diff --git a/app/pages/profile.vue b/app/pages/profile.vue
new file mode 100644
index 0000000..c7af823
--- /dev/null
+++ b/app/pages/profile.vue
@@ -0,0 +1,142 @@
+<template>
+  <UForm
+    id="settings"
+    :schema="profileSchema"
+    :state="profile"
+    @submit="onSubmit"
+  >
+    <UPageCard
+      :title="$t('profile.title')"
+      :description="$t('profile.description')"
+      variant="naked"
+      orientation="horizontal"
+      class="mb-4"
+    >
+      <UButton
+        form="settings"
+        :label="$t('profile.save')"
+        color="neutral"
+        type="submit"
+        class="w-fit lg:ms-auto"
+      />
+    </UPageCard>
+
+    <UPageCard variant="subtle">
+      <UFormField
+        name="name"
+        :label="$t('profile.name')"
+        :description="$t('profile.nameDescription')"
+        required
+        class="flex max-sm:flex-col justify-between items-start gap-4"
+      >
+        <UInput
+          v-model="profile.name"
+          autocomplete="off"
+        />
+      </UFormField>
+      <USeparator />
+      <UFormField
+        name="email"
+        :label="$t('profile.email')"
+        :description="$t('profile.emailDescription')"
+        required
+        class="flex max-sm:flex-col justify-between items-start gap-4"
+      >
+        <UInput
+          :model-value="user?.email"
+          type="email"
+          autocomplete="off"
+          disabled
+        />
+      </UFormField>
+      <USeparator />
+      <UFormField
+        name="avatar"
+        :label="$t('profile.avatar')"
+        :description="$t('profile.avatarDescription')"
+        class="flex max-sm:flex-col justify-between sm:items-center gap-4"
+      >
+        <ProfileAvatarUpload />
+      </UFormField>
+      <USeparator />
+      <UFormField
+        name="delete"
+        :label="$t('profile.delete')"
+        :description="$t('profile.deleteDescription')"
+        class="flex max-sm:flex-col justify-between sm:items-center gap-4"
+      >
+        <UModal
+          :title="$t('profile.delete')"
+          :description="$t('profile.deleteWarning')"
+          :ui="{ footer: 'justify-end' }"
+          :close="false"
+        >
+          <UButton
+            :label="$t('profile.delete')"
+            color="error"
+          />
+          <template #footer="{ close }">
+            <UButton
+              :label="$t('cancel')"
+              color="neutral"
+              variant="outline"
+              @click="close"
+            />
+            <UButton
+              :label="$t('profile.delete')"
+              color="error"
+              @click="onDelete"
+            />
+          </template>
+        </UModal>
+      </UFormField>
+    </UPageCard>
+  </UForm>
+</template>
+
+<script setup lang="ts">
+import * as z from 'zod'
+
+definePageMeta({
+  middleware: ['auth']
+})
+
+const { t } = useI18n()
+const { user, updateUser, deleteUser } = useUser()
+
+const profileSchema = z.object({
+  name: z.string().min(2, t('profile.tooShort'))
+})
+
+type ProfileSchema = z.output<typeof profileSchema>
+const profile = reactive<Partial<ProfileSchema>>({
+  name: user?.name ?? ''
+})
+
+const toast = useToast()
+async function onSubmit() {
+  try {
+    if (profile.name) {
+      await updateUser({ name: profile.name })
+    }
+    toast.add({
+      title: t('profile.success'),
+      description: t('profile.settingsUpdated'),
+      icon: 'i-lucide-check',
+      color: 'success'
+    })
+  } catch (error) {
+    toast.add({ color: 'error', description: (error as Error).message })
+    console.warn(error)
+  }
+}
+
+const onDelete = async () => {
+  try {
+    await deleteUser()
+    navigateTo('/')
+  } catch (error) {
+    toast.add({ color: 'error', description: (error as Error).message })
+  }
+}
+</script>
diff --git a/app/plugins/pocketbase.ts b/app/plugins/pocketbase.ts
new file mode 100644
index 0000000..09e3597
--- /dev/null
+++ b/app/plugins/pocketbase.ts
@@ -0,0 +1,43 @@
+import PocketBase, { LocalAuthStore } from 'pocketbase'
+import type { RecordModel } from 'pocketbase'
+import type { TypedPocketBase } from '~/types/pocketbase.types'
+
+/**
+ * Extends LocalAuthStore to make auth state reactive in Vue.
+ *
+ * PocketBase mutates its internal state directly on `this`, bypassing any
+ * reactive() proxy. Instead, `ref` holds a ShallowRef to the store instance,
+ * and triggerRef() manually notifies Vue after each state change — so consumers
+ * always read up-to-date values directly from the store without mirroring state.
+ */
+export class ReactiveAuthStore extends LocalAuthStore {
+  readonly ref = shallowRef(this)
+
+  override save(token: string, record: RecordModel | null) {
+    super.save(token, record)
+    triggerRef(this.ref)
+  }
+
+  override clear() {
+    super.clear()
+    triggerRef(this.ref)
+  }
+}
+
+export default defineNuxtPlugin((nuxtApp) => {
+  const pocketbaseUrl = nuxtApp.$config.public.pocketbaseUrl
+
+  if (!pocketbaseUrl) {
+    throw new Error('Pocketbase config not set')
+  }
+
+  const pb = new PocketBase(pocketbaseUrl, new ReactiveAuthStore()) as TypedPocketBase
+
+  // Provide pocketbase client to the app
+  // Will be available eg. as `const { $pb } = useNuxtApp()`
+  return {
+    provide: {
+      pb
+    }
+  }
+})
diff --git a/app/plugins/visibility-directive.ts b/app/plugins/visibility-directive.ts
new file mode 100644
index 0000000..af6d955
--- /dev/null
+++ b/app/plugins/visibility-directive.ts
@@ -0,0 +1,24 @@
+export default defineNuxtPlugin((nuxtApp) => {
+  /**
+   * Directive that calls a callback when an element gets visible in the viewport.
+   */
+  nuxtApp.vueApp.directive('on-visible', {
+    mounted(el, binding) {
+      const callback = binding.value
+
+      const observer = new IntersectionObserver(
+        (entries) => {
+          entries.forEach((entry) => {
+            if (entry.isIntersecting) {
+              callback(entry)
+              observer.disconnect()
+            }
+          })
+        },
+        { threshold: 0.5 }
+      )
+
+      observer.observe(el)
+    }
+  })
+})
diff --git a/app/public/logo.png b/app/public/logo.png
new file mode 100644
index 0000000..5536f7b
Binary files /dev/null and b/app/public/logo.png differ
diff --git a/app/stores/avatar.ts b/app/stores/avatar.ts
new file mode 100644
index 0000000..f9b246f
--- /dev/null
+++ b/app/stores/avatar.ts
@@ -0,0 +1,33 @@
+export const useAvatar = defineStore('avatar', {
+  getters: {
+    name: () => useUser().user?.name,
+    /**
+     * Returns the URL of the user's avatar, or null if not available
+     */
+    src: () => {
+      const user = useUser().user
+      const fileName = useUser().user?.avatar
+      if (user && fileName) {
+        const { pb } = usePocketBase()
+        return pb.files.getURL(user, fileName, { thumb: '80x80' })
+      }
+      return null
+    }
+  },
+  actions: {
+    /**
+     * Uploads an avatar for the current user
+     */
+    async uploadAvatar(file: File) {
+      const { isAuthenticated, userId } = useUser()
+      if (isAuthenticated) {
+        const { pb } = usePocketBase()
+        useUser().user = await pb.collection('users').update(userId!, {
+          avatar: file
+        })
+      } else {
+        console.warn('Avatar upload failed: user is not authenticated')
+      }
+    }
+  }
+})
diff --git a/app/stores/counter.ts b/app/stores/counter.ts
new file mode 100644
index 0000000..c8dae52
--- /dev/null
+++ b/app/stores/counter.ts
@@ -0,0 +1,81 @@
+const COLLECTION = 'counters'
+
+export const useCounter = defineStore('counter', {
+  state: () => {
+    return {
+      recordId: null as string | null,
+      count: 0
+    }
+  },
+  actions: {
+    /**
+     * Subscribes to changes of the count in realtime
+     * and calls the method to fetch the current count
+     */
+    subscribeToChanges() {
+      if (useUser().isAuthenticated) {
+        const { pb } = usePocketBase()
+        pb.collection(COLLECTION).subscribe('*', () => this.fetchCurrentCount())
+      }
+    },
+    /**
+     * Unsubscribe from the realtime channel
+     * Should be done when the user leaves the page for cleanup
+     */
+    async unsubscribe() {
+      const { pb } = usePocketBase()
+      pb.collection(COLLECTION).unsubscribe('*')
+    },
+    /**
+     * Fetches the current count and sets the state
+     */
+    async fetchCurrentCount() {
+      const userId = useUser().userId
+      if (!userId) return
+      try {
+        const { pb } = usePocketBase()
+        const record = await pb.collection(COLLECTION).getFirstListItem(`userId="${userId}"`)
+        this.count = record.count
+        this.recordId = record.id
+        return
+      } catch (error) {
+        console.error(error)
+      }
+    },
+    /**
+     * Increments the count by the given amount (positive or negative)
+     */
+    async increment(amount: number) {
+      try {
+        const { pb } = usePocketBase()
+        if (this.recordId) {
+          await pb.collection(COLLECTION).update(this.recordId, {
+            count: this.count + amount
+          })
+        } else {
+          const record = await pb.collection(COLLECTION).create({
+            userId: useUser().userId,
+            count: this.count + amount
+          })
+          this.recordId = record.id
+        }
+      } catch (error) {
+        console.error(error)
+      }
+    },
+    /**
+     * Resets the count to zero
+     * Uses a custom PocketBase endpoint for demonstration
+     */
+    async reset() {
+      try {
+        const { pb } = usePocketBase()
+        await pb.send('/counter/reset', {
+          method: 'POST'
+        })
+      } catch (error) {
+        console.error(error)
+      }
+    }
+  }
+})
diff --git a/app/stores/notifications.ts b/app/stores/notifications.ts
new file mode 100644
index 0000000..a524985
--- /dev/null
+++ b/app/stores/notifications.ts
@@ -0,0 +1,83 @@
+import type { NotificationsRecord } from '~/types/pocketbase.types'
+
+const COLLECTION = 'notifications'
+
+export const useNotifications = defineStore('notifications', {
+  state: () => {
+    return {
+      notifications: [] as NotificationsRecord[]
+    }
+  },
+  actions: {
+    /**
+     * Subscribes to changes of notifications in realtime
+     * and calls the method to refetch them
+     */
+    subscribeToChanges() {
+      if (useUser().isAuthenticated) {
+        const { pb } = usePocketBase()
+        pb.collection(COLLECTION).subscribe('*', () => this.fetchNotifications())
+      }
+    },
+    /**
+     * Unsubscribe from the realtime channel
+     * Should be done when the user leaves the page for cleanup
+     */
+    unsubscribe() {
+      const { pb } = usePocketBase()
+      pb.collection(COLLECTION).unsubscribe('*')
+    },
+    /**
+     * Fetches the notifications and sets the state
+     */
+    async fetchNotifications() {
+      const userId = useUser().userId
+      if (!userId) return
+      try {
+        const { pb } = usePocketBase()
+        const resultList = await pb.collection(COLLECTION).getList(1, 50, {
+          filter: `userId="${userId}"`
+        })
+        this.notifications = resultList.items
+      } catch (error) {
+        console.error(error)
+      }
+    },
+    /**
+     * Marks a notification as read
+     */
+    async markAsRead(notificationId: string) {
+      try {
+        const { pb } = usePocketBase()
+        await pb.collection(COLLECTION).update(notificationId, {
+          isRead: true
+        })
+      } catch (error) {
+        console.error(error)
+      }
+    },
+    /**
+     * Adds a new FCM token for the current user for push notifications
+     */
+    async addFcmToken(token: string) {
+      const userId = useUser().userId
+      if (!userId) return
+      try {
+        const { pb } = usePocketBase()
+        const result = await pb.collection('fcm_tokens').getList(1, 0, {
+          filter: `token = "${token}"`
+        })
+        if (result.totalItems > 0) {
+          // skip if token already exists
+          return
+        }
+        await pb.collection('fcm_tokens').create({
+          userId,
+          token
+        })
+      } catch (error) {
+        console.error(error)
+      }
+    }
+  }
+})
diff --git a/app/stores/user.ts b/app/stores/user.ts
new file mode 100644
index 0000000..2b2a142
--- /dev/null
+++ b/app/stores/user.ts
@@ -0,0 +1,106 @@
+import type { UsersRecord } from '~/types/pocketbase.types'
+
+export const useUser = defineStore('user', {
+  state: () => ({
+    user: null as UsersRecord | null
+  }),
+  getters: {
+    isAuthenticated() {
+      const { authStore } = usePocketBase()
+      return authStore.value.isValid && authStore.value.record !== null
+    },
+    userId() {
+      const { authStore } = usePocketBase()
+      return authStore.value.record?.id
+    }
+  },
+  actions: {
+    /**
+     * Signs in a user with email (sends OTP)
+     * @param email The email address of the user
+     * @returns The OTP ID needed for authenticating with the received OTP
+     */
+    async signInWithEmail(email: string, language?: string) {
+      const { pb } = usePocketBase()
+      const req = await pb.collection('users').requestOTP(email, {
+        headers: {
+          language: language ?? 'en'
+        }
+      })
+      return req.otpId
+    },
+    /**
+     * Signs in a user with OTP
+     * @param otpId The OTP ID from the email OTP request
+     * @param otp The OTP code sent to the user's email
+     */
+    async signInWithOtp(otpId: string, otp: string) {
+      const { pb } = usePocketBase()
+      await pb.collection('users').authWithOTP(otpId, otp)
+    },
+    /**
+     * Signs in a user with OAuth provider
+     * @param provider The OAuth provider to use
+     */
+    async signInWithOAuth(provider: 'apple' | 'google') {
+      const { pb } = usePocketBase()
+      await pb.collection('users').authWithOAuth2({
+        provider
+      })
+    },
+    /**
+     * Refreshes the auth store for the current user
+     */
+    async authRefresh() {
+      try {
+        const { pb } = usePocketBase()
+        await pb.collection('users').authRefresh()
+        await this.fetchUser()
+      } catch (error) {
+        console.debug('User not authenticated', error)
+      }
+    },
+    /**
+     * Signs out the current user
+     */
+    signOut() {
+      const { pb } = usePocketBase()
+      pb.authStore.clear()
+      this.user = null
+    },
+    /**
+     * Fetches all data of the currently authenticated user
+     */
+    async fetchUser() {
+      if (this.isAuthenticated) {
+        const { pb } = usePocketBase()
+        this.user = await pb.collection('users').getOne(this.userId!)
+      } else {
+        console.warn('Fetch user failed: user is not authenticated')
+      }
+    },
+    /**
+     * Updates the given fields of the current user
+     */
+    async updateUser(data: Partial<UsersRecord>) {
+      if (this.isAuthenticated) {
+        const { pb } = usePocketBase()
+        this.user = await pb.collection('users').update(this.userId!, data)
+      } else {
+        console.warn('Update user failed: user is not authenticated')
+      }
+    },
+    /**
+     * Deletes the current user's account
+     */
+    async deleteUser() {
+      if (this.isAuthenticated) {
+        const { pb } = usePocketBase()
+        await pb.collection('users').delete(this.userId!)
+        this.signOut()
+      } else {
+        console.warn('Delete user failed: user is not authenticated')
+      }
+    }
+  }
+})
diff --git a/app/types/i18n.types.ts b/app/types/i18n.types.ts
new file mode 100644
index 0000000..b7260e6
--- /dev/null
+++ b/app/types/i18n.types.ts
@@ -0,0 +1 @@
+export type LanguageCode = 'en' | 'de'
diff --git a/app/types/pocketbase.types.ts b/app/types/pocketbase.types.ts
new file mode 100644
index 0000000..1b80996
--- /dev/null
+++ b/app/types/pocketbase.types.ts
@@ -0,0 +1,243 @@
+/**
+* This file was @generated using pocketbase-typegen
+*/
+
+import type PocketBase from 'pocketbase'
+import type { RecordService } from 'pocketbase'
+
+export enum Collections {
+	Authorigins = "_authOrigins",
+	Externalauths = "_externalAuths",
+	Mfas = "_mfas",
+	Otps = "_otps",
+	Superusers = "_superusers",
+	Counters = "counters",
+	FcmTokens = "fcm_tokens",
+	Notifications = "notifications",
+	Users = "users",
+}
+
+// Alias types for improved usability
+export type IsoDateString = string
+export type IsoAutoDateString = string & { readonly autodate: unique symbol }
+export type RecordIdString = string
+export type FileNameString = string & { readonly filename: unique symbol }
+export type HTMLString = string
+
+type ExpandType<T> = unknown extends T
+	? T extends unknown
+		? { expand?: unknown }
+		: { expand: T }
+	: { expand: T }
+
+// System fields
+export type BaseSystemFields<T = unknown> = {
+	id: RecordIdString
+	collectionId: string
+	collectionName: Collections
+} & ExpandType<T>
+
+export type AuthSystemFields<T = unknown> = {
+	email: string
+	emailVisibility: boolean
+	username: string
+	verified: boolean
+} & BaseSystemFields<T>
+
+// Record types for each collection
+
+export type AuthoriginsRecord = {
+	collectionRef: string
+	created: IsoAutoDateString
+	fingerprint: string
+	id: string
+	recordRef: string
+	updated: IsoAutoDateString
+}
+
+export type ExternalauthsRecord = {
+	collectionRef: string
+	created: IsoAutoDateString
+	id: string
+	provider: string
+	providerId: string
+	recordRef: string
+	updated: IsoAutoDateString
+}
+
+export type MfasRecord = {
+	collectionRef: string
+	created: IsoAutoDateString
+	id: string
+	method: string
+	recordRef: string
+	updated: IsoAutoDateString
+}
+
+export type OtpsRecord = {
+	collectionRef: string
+	created: IsoAutoDateString
+	id: string
+	password: string
+	recordRef: string
+	sentTo?: string
+	updated: IsoAutoDateString
+}
+
+export type SuperusersRecord = {
+	created: IsoAutoDateString
+	email: string
+	emailVisibility?: boolean
+	id: string
+	password: string
+	tokenKey: string
+	updated: IsoAutoDateString
+	verified?: boolean
+}
+
+export type CountersRecord = {
+	count?: number
+	created: IsoAutoDateString
+	id: string
+	updated: IsoAutoDateString
+	userId?: RecordIdString
+}
+
+export type FcmTokensRecord = {
+	created: IsoAutoDateString
+	id: string
+	token?: string
+	updated: IsoAutoDateString
+	userId?: RecordIdString
+}
+
+export type NotificationsRecord = {
+	body?: string
+	created: IsoAutoDateString
+	id: string
+	isRead?: boolean
+	title?: string
+	updated: IsoAutoDateString
+	userId?: RecordIdString
+}
+
+export enum UsersLanguageOptions {
+	"de" = "de",
+	"en" = "en",
+}
+export type UsersRecord = {
+	avatar?: FileNameString
+	created: IsoAutoDateString
+	email: string
+	emailVisibility?: boolean
+	id: string
+	language?: UsersLanguageOptions
+	name?: string
+	password: string
+	tokenKey: string
+	updated: IsoAutoDateString
+	verified?: boolean
+}
+
+// Response types include system fields and match responses from the PocketBase API
+export type AuthoriginsResponse<Texpand = unknown> = Required<AuthoriginsRecord> & BaseSystemFields<Texpand>
+export type ExternalauthsResponse<Texpand = unknown> = Required<ExternalauthsRecord> & BaseSystemFields<Texpand>
+export type MfasResponse<Texpand = unknown> = Required<MfasRecord> & BaseSystemFields<Texpand>
+export type OtpsResponse<Texpand = unknown> = Required<OtpsRecord> & BaseSystemFields<Texpand>
+export type SuperusersResponse<Texpand = unknown> = Required<SuperusersRecord> & AuthSystemFields<Texpand>
+export type CountersResponse<Texpand = unknown> = Required<CountersRecord> & BaseSystemFields<Texpand>
+export type FcmTokensResponse<Texpand = unknown> = Required<FcmTokensRecord> & BaseSystemFields<Texpand>
+export type NotificationsResponse<Texpand = unknown> = Required<NotificationsRecord> & BaseSystemFields<Texpand>
+export type UsersResponse<Texpand = unknown> = Required<UsersRecord> & AuthSystemFields<Texpand>
+
+// Types containing all Records and Responses, useful for creating typing helper functions
+
+export type CollectionRecords = {
+	_authOrigins: AuthoriginsRecord
+	_externalAuths: ExternalauthsRecord
+	_mfas: MfasRecord
+	_otps: OtpsRecord
+	_superusers: SuperusersRecord
+	counters: CountersRecord
+	fcm_tokens: FcmTokensRecord
+	notifications: NotificationsRecord
+	users: UsersRecord
+}
+
+export type CollectionResponses = {
+	_authOrigins: AuthoriginsResponse
+	_externalAuths: ExternalauthsResponse
+	_mfas: MfasResponse
+	_otps: OtpsResponse
+	_superusers: SuperusersResponse
+	counters: CountersResponse
+	fcm_tokens: FcmTokensResponse
+	notifications: NotificationsResponse
+	users: UsersResponse
+}
+
+// Utility types for create/update operations
+
+type ProcessCreateAndUpdateFields<T> = Omit<{
+	// Omit AutoDate fields
+	[K in keyof T as Extract<T[K], IsoAutoDateString> extends never ? K : never]: 
+		// Convert FileNameString to File
+		T[K] extends infer U ? 
+			U extends (FileNameString | FileNameString[]) ? 
+				U extends any[] ? File[] : File 
+			: U
+		: never
+}, 'id'>
+
+// Create type for Auth collections
+export type CreateAuth<T> = {
+	id?: RecordIdString
+	email: string
+	emailVisibility?: boolean
+	password: string
+	passwordConfirm: string
+	verified?: boolean
+} & ProcessCreateAndUpdateFields<T>
+
+// Create type for Base collections
+export type CreateBase<T> = {
+	id?: RecordIdString
+} & ProcessCreateAndUpdateFields<T>
+
+// Update type for Auth collections
+export type UpdateAuth<T> = Partial<
+	Omit<ProcessCreateAndUpdateFields<T>, keyof AuthSystemFields>
+> & {
+	email?: string
+	emailVisibility?: boolean
+	oldPassword?: string
+	password?: string
+	passwordConfirm?: string
+	verified?: boolean
+}
+
+// Update type for Base collections
+export type UpdateBase<T> = Partial<
+	Omit<ProcessCreateAndUpdateFields<T>, keyof BaseSystemFields>
+>
+
+// Get the correct create type for any collection
+export type Create<T extends keyof CollectionResponses> =
+	CollectionResponses[T] extends AuthSystemFields
+		? CreateAuth<CollectionRecords[T]>
+		: CreateBase<CollectionRecords[T]>
+
+// Get the correct update type for any collection
+export type Update<T extends keyof CollectionResponses> =
+	CollectionResponses[T] extends AuthSystemFields
+		? UpdateAuth<CollectionRecords[T]>
+		: UpdateBase<CollectionRecords[T]>
+
+// Type for usage with type asserted PocketBase instance
+// https://github.com/pocketbase/js-sdk#specify-typescript-definitions
+
+export type TypedPocketBase = {
+	collection<T extends keyof CollectionResponses>(
+		idOrName: T
+	): RecordService<CollectionResponses[T]>
+} & PocketBase
diff --git a/capacitor.config.ts b/capacitor.config.ts
new file mode 100644
index 0000000..0867325
--- /dev/null
+++ b/capacitor.config.ts
@@ -0,0 +1,27 @@
+import type { CapacitorConfig } from '@capacitor/cli'
+import dotenv from 'dotenv'
+
+// load environment variables from .env file
+dotenv.config()
+
+const config: CapacitorConfig = {
+  appId: process.env.APP_ID,
+  appName: process.env.APP_NAME,
+  webDir: 'dist',
+  plugins: {
+    CapacitorCookies: {
+      enabled: true
+    },
+    CapacitorHttp: {
+      enabled: true
+    }
+  },
+  server: {
+    cleartext: process.env.NODE_ENV === 'development',
+    androidScheme: process.env.NODE_ENV === 'development' ? 'http' : 'https'
+  }
+}
+
+console.log(process.env.NODE_ENV)
+
+export default config
diff --git a/eslint.config.mjs b/eslint.config.mjs
new file mode 100644
index 0000000..3c25d14
--- /dev/null
+++ b/eslint.config.mjs
@@ -0,0 +1,7 @@
+// @ts-check
+import withNuxt from './.nuxt/eslint.config.mjs'
+import { globalIgnores } from 'eslint/config'
+
+export default withNuxt(
+  globalIgnores(['app/types/pocketbase.types.ts', 'android/*', 'ios/*'])
+)
diff --git a/fastlane/Appfile b/fastlane/Appfile
new file mode 100644
index 0000000..897a4a8
--- /dev/null
+++ b/fastlane/Appfile
@@ -0,0 +1,4 @@
+json_key_file(File.join(__dir__, ENV['GOOGLE_PLAY_CONSOLE_CREDENTIALS_FILE']))
+package_name(ENV['APP_NAME'])
+app_identifier(ENV['APP_NAME'])
+apple_id(ENV['APPLE_ID'])
diff --git a/fastlane/Fastfile b/fastlane/Fastfile
new file mode 100644
index 0000000..bf919b9
--- /dev/null
+++ b/fastlane/Fastfile
@@ -0,0 +1,61 @@
+# This file contains the fastlane.tools configuration
+# You can find the documentation at https://docs.fastlane.tools
+#
+# For a list of all available actions, check out
+#
+#     https://docs.fastlane.tools/actions
+#
+# For a list of all available plugins, check out
+#
+#     https://docs.fastlane.tools/plugins/available-plugins
+#
+
+# Uncomment the line if you want fastlane to automatically update itself
+# update_fastlane
+
+default_platform(:android)
+
+package = load_json(json_path: File.join(__dir__, 'package.json'))
+version_number = package['version'] || '0.0.1'
+# Generate version code by padding each component to 3 digits and joining them together
+# Eg. 1.2.3 becomes 001002003 -> 1002003 as integer
+version_code = version_number.split('.').map { |v| v.rjust(3, '0') }.join.to_i || 1
+
+android_project_dir = File.join(__dir__, 'android')
+
+platform :android do
+  desc 'Release a new version to Google Play'
+  lane :release do
+    gradle(
+      task: 'clean assembleRelease',
+      project_dir: android_project_dir,
+      properties: {
+        'versionName' => version_number,
+        'versionCode' => version_code
+      }
+    )
+    upload_to_play_store
+  end
+end
+
+ios_project_dir = File.join(__dir__, 'ios', 'App', 'App.xcodeproj')
+
+platform :ios do
+  desc 'Release a new version to the App Store'
+  lane :release do
+    increment_version_number(
+      version_number: version_number,
+      xcodeproj: ios_project_dir
+    )
+    increment_build_number(
+      build_number: version_code,
+      xcodeproj: ios_project_dir
+    )
+    sync_code_signing(
+      type: 'appstore',
+      xcodeproj: ios_project_dir
+    )
+    build_app(xcodeproj: ios_project_dir)
+    upload_to_app_store
+  end
+end
diff --git a/fastlane/Pluginfile b/fastlane/Pluginfile
new file mode 100644
index 0000000..6485c3c
--- /dev/null
+++ b/fastlane/Pluginfile
@@ -0,0 +1,5 @@
+# Autogenerated by fastlane
+#
+# Ensure this file is checked in to source control!
+
+gem 'fastlane-plugin-load_json'
diff --git a/fastlane/README.md b/fastlane/README.md
new file mode 100644
index 0000000..2e8d5a5
--- /dev/null
+++ b/fastlane/README.md
@@ -0,0 +1,45 @@
+fastlane documentation
+----
+
+# Installation
+
+Make sure you have the latest version of the Xcode command line tools installed:
+
+```sh
+xcode-select --install
+```
+
+For _fastlane_ installation instructions, see [Installing _fastlane_](https://docs.fastlane.tools/#installing-fastlane)
+
+# Available Actions
+
+## Android
+
+### android release
+
+```sh
+[bundle exec] fastlane android release
+```
+
+Release a new version to Google Play
+
+----
+
+
+## iOS
+
+### ios release
+
+```sh
+[bundle exec] fastlane ios release
+```
+
+Release a new version to the App Store
+
+----
+
+This README.md is auto-generated and will be re-generated every time [_fastlane_](https://fastlane.tools) is run.
+
+More information about _fastlane_ can be found on [fastlane.tools](https://fastlane.tools).
+
+The documentation of _fastlane_ can be found on [docs.fastlane.tools](https://docs.fastlane.tools).
diff --git a/fastlane/report.xml b/fastlane/report.xml
new file mode 100644
index 0000000..c3794ad
--- /dev/null
+++ b/fastlane/report.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<testsuites>
+  <testsuite name="fastlane.lanes">
+    
+    
+    
+      
+      <testcase classname="fastlane.lanes" name="0: default_platform" time="0.000427939">
+        
+      </testcase>
+    
+      
+      <testcase classname="fastlane.lanes" name="1: load_json" time="0.000541864">
+        
+      </testcase>
+    
+      
+      <testcase classname="fastlane.lanes" name="2: clean assembleRelease" time="2.587929187">
+        
+      </testcase>
+    
+  </testsuite>
+</testsuites>
diff --git a/ios/.gitignore b/ios/.gitignore
new file mode 100644
index 0000000..f470299
--- /dev/null
+++ b/ios/.gitignore
@@ -0,0 +1,13 @@
+App/build
+App/Pods
+App/output
+App/App/public
+DerivedData
+xcuserdata
+
+# Cordova plugins for Capacitor
+capacitor-cordova-ios-plugins
+
+# Generated Config files
+App/App/capacitor.config.json
+App/App/config.xml
diff --git a/ios/App/App.xcodeproj/project.pbxproj b/ios/App/App.xcodeproj/project.pbxproj
new file mode 100644
index 0000000..6009cd2
--- /dev/null
+++ b/ios/App/App.xcodeproj/project.pbxproj
@@ -0,0 +1,376 @@
+// !$*UTF8*$!
+{
+	archiveVersion = 1;
+	classes = {
+	};
+	objectVersion = 60;
+	objects = {
+
+/* Begin PBXBuildFile section */
+		2FAD9763203C412B000D30F8 /* config.xml in Resources */ = {isa = PBXBuildFile; fileRef = 2FAD9762203C412B000D30F8 /* config.xml */; };
+		4D22ABE92AF431CB00220026 /* CapApp-SPM in Frameworks */ = {isa = PBXBuildFile; productRef = 4D22ABE82AF431CB00220026 /* CapApp-SPM */; };
+		50379B232058CBB4000EE86E /* capacitor.config.json in Resources */ = {isa = PBXBuildFile; fileRef = 50379B222058CBB4000EE86E /* capacitor.config.json */; };
+		504EC3081FED79650016851F /* AppDelegate.swift in Sources */ = {isa = PBXBuildFile; fileRef = 504EC3071FED79650016851F /* AppDelegate.swift */; };
+		504EC30D1FED79650016851F /* Main.storyboard in Resources */ = {isa = PBXBuildFile; fileRef = 504EC30B1FED79650016851F /* Main.storyboard */; };
+		504EC30F1FED79650016851F /* Assets.xcassets in Resources */ = {isa = PBXBuildFile; fileRef = 504EC30E1FED79650016851F /* Assets.xcassets */; };
+		504EC3121FED79650016851F /* LaunchScreen.storyboard in Resources */ = {isa = PBXBuildFile; fileRef = 504EC3101FED79650016851F /* LaunchScreen.storyboard */; };
+		50B271D11FEDC1A000F3C39B /* public in Resources */ = {isa = PBXBuildFile; fileRef = 50B271D01FEDC1A000F3C39B /* public */; };
+/* End PBXBuildFile section */
+
+/* Begin PBXFileReference section */
+		2FAD9762203C412B000D30F8 /* config.xml */ = {isa = PBXFileReference; lastKnownFileType = text.xml; path = config.xml; sourceTree = "<group>"; };
+		50379B222058CBB4000EE86E /* capacitor.config.json */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text.json; path = capacitor.config.json; sourceTree = "<group>"; };
+		504EC3041FED79650016851F /* App.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = App.app; sourceTree = BUILT_PRODUCTS_DIR; };
+		504EC3071FED79650016851F /* AppDelegate.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AppDelegate.swift; sourceTree = "<group>"; };
+		504EC30C1FED79650016851F /* Base */ = {isa = PBXFileReference; lastKnownFileType = file.storyboard; name = Base; path = Base.lproj/Main.storyboard; sourceTree = "<group>"; };
+		504EC30E1FED79650016851F /* Assets.xcassets */ = {isa = PBXFileReference; lastKnownFileType = folder.assetcatalog; path = Assets.xcassets; sourceTree = "<group>"; };
+		504EC3111FED79650016851F /* Base */ = {isa = PBXFileReference; lastKnownFileType = file.storyboard; name = Base; path = Base.lproj/LaunchScreen.storyboard; sourceTree = "<group>"; };
+		504EC3131FED79650016851F /* Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist.xml; path = Info.plist; sourceTree = "<group>"; };
+		50B271D01FEDC1A000F3C39B /* public */ = {isa = PBXFileReference; lastKnownFileType = folder; path = public; sourceTree = "<group>"; };
+		958DCC722DB07C7200EA8C5F /* debug.xcconfig */ = {isa = PBXFileReference; lastKnownFileType = text.xcconfig; name = debug.xcconfig; path = ../debug.xcconfig; sourceTree = SOURCE_ROOT; };
+/* End PBXFileReference section */
+
+/* Begin PBXFrameworksBuildPhase section */
+		504EC3011FED79650016851F /* Frameworks */ = {
+			isa = PBXFrameworksBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				4D22ABE92AF431CB00220026 /* CapApp-SPM in Frameworks */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXFrameworksBuildPhase section */
+
+/* Begin PBXGroup section */
+		504EC2FB1FED79650016851F = {
+			isa = PBXGroup;
+			children = (
+				958DCC722DB07C7200EA8C5F /* debug.xcconfig */,
+				504EC3061FED79650016851F /* App */,
+				504EC3051FED79650016851F /* Products */,
+			);
+			sourceTree = "<group>";
+		};
+		504EC3051FED79650016851F /* Products */ = {
+			isa = PBXGroup;
+			children = (
+				504EC3041FED79650016851F /* App.app */,
+			);
+			name = Products;
+			sourceTree = "<group>";
+		};
+		504EC3061FED79650016851F /* App */ = {
+			isa = PBXGroup;
+			children = (
+				50379B222058CBB4000EE86E /* capacitor.config.json */,
+				504EC3071FED79650016851F /* AppDelegate.swift */,
+				504EC30B1FED79650016851F /* Main.storyboard */,
+				504EC30E1FED79650016851F /* Assets.xcassets */,
+				504EC3101FED79650016851F /* LaunchScreen.storyboard */,
+				504EC3131FED79650016851F /* Info.plist */,
+				2FAD9762203C412B000D30F8 /* config.xml */,
+				50B271D01FEDC1A000F3C39B /* public */,
+			);
+			path = App;
+			sourceTree = "<group>";
+		};
+/* End PBXGroup section */
+
+/* Begin PBXNativeTarget section */
+		504EC3031FED79650016851F /* App */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = 504EC3161FED79650016851F /* Build configuration list for PBXNativeTarget "App" */;
+			buildPhases = (
+				504EC3001FED79650016851F /* Sources */,
+				504EC3011FED79650016851F /* Frameworks */,
+				504EC3021FED79650016851F /* Resources */,
+			);
+			buildRules = (
+			);
+			dependencies = (
+			);
+			name = App;
+			packageProductDependencies = (
+				4D22ABE82AF431CB00220026 /* CapApp-SPM */,
+			);
+			productName = App;
+			productReference = 504EC3041FED79650016851F /* App.app */;
+			productType = "com.apple.product-type.application";
+		};
+/* End PBXNativeTarget section */
+
+/* Begin PBXProject section */
+		504EC2FC1FED79650016851F /* Project object */ = {
+			isa = PBXProject;
+			attributes = {
+				LastSwiftUpdateCheck = 920;
+				LastUpgradeCheck = 920;
+				TargetAttributes = {
+					504EC3031FED79650016851F = {
+						CreatedOnToolsVersion = 9.2;
+						LastSwiftMigration = 1100;
+						ProvisioningStyle = Automatic;
+					};
+				};
+			};
+			buildConfigurationList = 504EC2FF1FED79650016851F /* Build configuration list for PBXProject "App" */;
+			compatibilityVersion = "Xcode 8.0";
+			developmentRegion = en;
+			hasScannedForEncodings = 0;
+			knownRegions = (
+				en,
+				Base,
+			);
+			mainGroup = 504EC2FB1FED79650016851F;
+			packageReferences = (
+				D4C12C0A2AAA248700AAC8A2 /* XCLocalSwiftPackageReference "CapApp-SPM" */,
+			);
+			productRefGroup = 504EC3051FED79650016851F /* Products */;
+			projectDirPath = "";
+			projectRoot = "";
+			targets = (
+				504EC3031FED79650016851F /* App */,
+			);
+		};
+/* End PBXProject section */
+
+/* Begin PBXResourcesBuildPhase section */
+		504EC3021FED79650016851F /* Resources */ = {
+			isa = PBXResourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				504EC3121FED79650016851F /* LaunchScreen.storyboard in Resources */,
+				50B271D11FEDC1A000F3C39B /* public in Resources */,
+				504EC30F1FED79650016851F /* Assets.xcassets in Resources */,
+				50379B232058CBB4000EE86E /* capacitor.config.json in Resources */,
+				504EC30D1FED79650016851F /* Main.storyboard in Resources */,
+				2FAD9763203C412B000D30F8 /* config.xml in Resources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXResourcesBuildPhase section */
+
+/* Begin PBXSourcesBuildPhase section */
+		504EC3001FED79650016851F /* Sources */ = {
+			isa = PBXSourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				504EC3081FED79650016851F /* AppDelegate.swift in Sources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXSourcesBuildPhase section */
+
+/* Begin PBXVariantGroup section */
+		504EC30B1FED79650016851F /* Main.storyboard */ = {
+			isa = PBXVariantGroup;
+			children = (
+				504EC30C1FED79650016851F /* Base */,
+			);
+			name = Main.storyboard;
+			sourceTree = "<group>";
+		};
+		504EC3101FED79650016851F /* LaunchScreen.storyboard */ = {
+			isa = PBXVariantGroup;
+			children = (
+				504EC3111FED79650016851F /* Base */,
+			);
+			name = LaunchScreen.storyboard;
+			sourceTree = "<group>";
+		};
+/* End PBXVariantGroup section */
+
+/* Begin XCBuildConfiguration section */
+		504EC3141FED79650016851F /* Debug */ = {
+			isa = XCBuildConfiguration;
+			baseConfigurationReference = 958DCC722DB07C7200EA8C5F /* debug.xcconfig */;
+			buildSettings = {
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++14";
+				CLANG_CXX_LIBRARY = "libc++";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_MATCH = YES;
+				CODE_SIGN_IDENTITY = "iPhone Developer";
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = dwarf;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				ENABLE_TESTABILITY = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_DYNAMIC_NO_PIC = NO;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_OPTIMIZATION_LEVEL = 0;
+				GCC_PREPROCESSOR_DEFINITIONS = (
+					"DEBUG=1",
+					"$(inherited)",
+				);
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.0;
+				MTL_ENABLE_DEBUG_INFO = YES;
+				ONLY_ACTIVE_ARCH = YES;
+				SDKROOT = iphoneos;
+				SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG;
+				SWIFT_OPTIMIZATION_LEVEL = "-Onone";
+			};
+			name = Debug;
+		};
+		504EC3151FED79650016851F /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++14";
+				CLANG_CXX_LIBRARY = "libc++";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_MATCH = YES;
+				CODE_SIGN_IDENTITY = "iPhone Developer";
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
+				ENABLE_NS_ASSERTIONS = NO;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.0;
+				MTL_ENABLE_DEBUG_INFO = NO;
+				SDKROOT = iphoneos;
+				SWIFT_COMPILATION_MODE = wholemodule;
+				SWIFT_OPTIMIZATION_LEVEL = "-O";
+				VALIDATE_PRODUCT = YES;
+			};
+			name = Release;
+		};
+		504EC3171FED79650016851F /* Debug */ = {
+			isa = XCBuildConfiguration;
+			baseConfigurationReference = 958DCC722DB07C7200EA8C5F /* debug.xcconfig */;
+			buildSettings = {
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CODE_SIGN_STYLE = Automatic;
+				CURRENT_PROJECT_VERSION = 1;
+				INFOPLIST_FILE = App/Info.plist;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.0;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/Frameworks",
+				);
+				MARKETING_VERSION = 1.0;
+				OTHER_SWIFT_FLAGS = "$(inherited) \"-D\" \"COCOAPODS\" \"-DDEBUG\"";
+				PRODUCT_BUNDLE_IDENTIFIER = com.example.app;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG;
+				SWIFT_VERSION = 5.0;
+				TARGETED_DEVICE_FAMILY = "1,2";
+			};
+			name = Debug;
+		};
+		504EC3181FED79650016851F /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CODE_SIGN_STYLE = Automatic;
+				CURRENT_PROJECT_VERSION = 1;
+				INFOPLIST_FILE = App/Info.plist;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.0;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/Frameworks",
+				);
+				MARKETING_VERSION = 1.0;
+				PRODUCT_BUNDLE_IDENTIFIER = com.example.app;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				SWIFT_ACTIVE_COMPILATION_CONDITIONS = "";
+				SWIFT_VERSION = 5.0;
+				TARGETED_DEVICE_FAMILY = "1,2";
+			};
+			name = Release;
+		};
+/* End XCBuildConfiguration section */
+
+/* Begin XCConfigurationList section */
+		504EC2FF1FED79650016851F /* Build configuration list for PBXProject "App" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				504EC3141FED79650016851F /* Debug */,
+				504EC3151FED79650016851F /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Release;
+		};
+		504EC3161FED79650016851F /* Build configuration list for PBXNativeTarget "App" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				504EC3171FED79650016851F /* Debug */,
+				504EC3181FED79650016851F /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Release;
+		};
+/* End XCConfigurationList section */
+
+/* Begin XCLocalSwiftPackageReference section */
+		D4C12C0A2AAA248700AAC8A2 /* XCLocalSwiftPackageReference "CapApp-SPM" */ = {
+			isa = XCLocalSwiftPackageReference;
+			relativePath = "CapApp-SPM";
+		};
+/* End XCLocalSwiftPackageReference section */
+
+/* Begin XCSwiftPackageProductDependency section */
+		4D22ABE82AF431CB00220026 /* CapApp-SPM */ = {
+			isa = XCSwiftPackageProductDependency;
+			package = D4C12C0A2AAA248700AAC8A2 /* XCLocalSwiftPackageReference "CapApp-SPM" */;
+			productName = "CapApp-SPM";
+		};
+/* End XCSwiftPackageProductDependency section */
+	};
+	rootObject = 504EC2FC1FED79650016851F /* Project object */;
+}
diff --git a/ios/App/App.xcodeproj/project.xcworkspace/xcshareddata/IDEWorkspaceChecks.plist b/ios/App/App.xcodeproj/project.xcworkspace/xcshareddata/IDEWorkspaceChecks.plist
new file mode 100644
index 0000000..18d9810
--- /dev/null
+++ b/ios/App/App.xcodeproj/project.xcworkspace/xcshareddata/IDEWorkspaceChecks.plist
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>IDEDidComputeMac32BitWarning</key>
+	<true/>
+</dict>
+</plist>
diff --git a/ios/App/App/AppDelegate.swift b/ios/App/App/AppDelegate.swift
new file mode 100644
index 0000000..c3cd83b
--- /dev/null
+++ b/ios/App/App/AppDelegate.swift
@@ -0,0 +1,49 @@
+import UIKit
+import Capacitor
+
+@UIApplicationMain
+class AppDelegate: UIResponder, UIApplicationDelegate {
+
+    var window: UIWindow?
+
+    func application(_ application: UIApplication, didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?) -> Bool {
+        // Override point for customization after application launch.
+        return true
+    }
+
+    func applicationWillResignActive(_ application: UIApplication) {
+        // Sent when the application is about to move from active to inactive state. This can occur for certain types of temporary interruptions (such as an incoming phone call or SMS message) or when the user quits the application and it begins the transition to the background state.
+        // Use this method to pause ongoing tasks, disable timers, and invalidate graphics rendering callbacks. Games should use this method to pause the game.
+    }
+
+    func applicationDidEnterBackground(_ application: UIApplication) {
+        // Use this method to release shared resources, save user data, invalidate timers, and store enough application state information to restore your application to its current state in case it is terminated later.
+        // If your application supports background execution, this method is called instead of applicationWillTerminate: when the user quits.
+    }
+
+    func applicationWillEnterForeground(_ application: UIApplication) {
+        // Called as part of the transition from the background to the active state; here you can undo many of the changes made on entering the background.
+    }
+
+    func applicationDidBecomeActive(_ application: UIApplication) {
+        // Restart any tasks that were paused (or not yet started) while the application was inactive. If the application was previously in the background, optionally refresh the user interface.
+    }
+
+    func applicationWillTerminate(_ application: UIApplication) {
+        // Called when the application is about to terminate. Save data if appropriate. See also applicationDidEnterBackground:.
+    }
+
+    func application(_ app: UIApplication, open url: URL, options: [UIApplication.OpenURLOptionsKey: Any] = [:]) -> Bool {
+        // Called when the app was launched with a url. Feel free to add additional processing here,
+        // but if you want the App API to support tracking app url opens, make sure to keep this call
+        return ApplicationDelegateProxy.shared.application(app, open: url, options: options)
+    }
+
+    func application(_ application: UIApplication, continue userActivity: NSUserActivity, restorationHandler: @escaping ([UIUserActivityRestoring]?) -> Void) -> Bool {
+        // Called when the app was launched with an activity, including Universal Links.
+        // Feel free to add additional processing here, but if you want the App API to support
+        // tracking app url opens, make sure to keep this call
+        return ApplicationDelegateProxy.shared.application(application, continue: userActivity, restorationHandler: restorationHandler)
+    }
+
+}
diff --git a/ios/App/App/Assets.xcassets/AppIcon.appiconset/AppIcon-512@2x.png b/ios/App/App/Assets.xcassets/AppIcon.appiconset/AppIcon-512@2x.png
new file mode 100644
index 0000000..f9ce438
Binary files /dev/null and b/ios/App/App/Assets.xcassets/AppIcon.appiconset/AppIcon-512@2x.png differ
diff --git a/ios/App/App/Assets.xcassets/AppIcon.appiconset/Contents.json b/ios/App/App/Assets.xcassets/AppIcon.appiconset/Contents.json
new file mode 100644
index 0000000..b1a8483
--- /dev/null
+++ b/ios/App/App/Assets.xcassets/AppIcon.appiconset/Contents.json
@@ -0,0 +1,14 @@
+{
+  "images": [
+    {
+      "idiom": "universal",
+      "size": "1024x1024",
+      "filename": "AppIcon-512@2x.png",
+      "platform": "ios"
+    }
+  ],
+  "info": {
+    "author": "xcode",
+    "version": 1
+  }
+}
\ No newline at end of file
diff --git a/ios/App/App/Assets.xcassets/Contents.json b/ios/App/App/Assets.xcassets/Contents.json
new file mode 100644
index 0000000..da4a164
--- /dev/null
+++ b/ios/App/App/Assets.xcassets/Contents.json
@@ -0,0 +1,6 @@
+{
+  "info" : {
+    "version" : 1,
+    "author" : "xcode"
+  }
+}
\ No newline at end of file
diff --git a/ios/App/App/Assets.xcassets/Splash.imageset/Contents.json b/ios/App/App/Assets.xcassets/Splash.imageset/Contents.json
new file mode 100644
index 0000000..84a416d
--- /dev/null
+++ b/ios/App/App/Assets.xcassets/Splash.imageset/Contents.json
@@ -0,0 +1,56 @@
+{
+  "images": [
+    {
+      "idiom": "universal",
+      "filename": "Default@1x~universal~anyany.png",
+      "scale": "1x"
+    },
+    {
+      "idiom": "universal",
+      "filename": "Default@2x~universal~anyany.png",
+      "scale": "2x"
+    },
+    {
+      "idiom": "universal",
+      "filename": "Default@3x~universal~anyany.png",
+      "scale": "3x"
+    },
+    {
+      "appearances": [
+        {
+          "appearance": "luminosity",
+          "value": "dark"
+        }
+      ],
+      "idiom": "universal",
+      "scale": "1x",
+      "filename": "Default@1x~universal~anyany-dark.png"
+    },
+    {
+      "appearances": [
+        {
+          "appearance": "luminosity",
+          "value": "dark"
+        }
+      ],
+      "idiom": "universal",
+      "scale": "2x",
+      "filename": "Default@2x~universal~anyany-dark.png"
+    },
+    {
+      "appearances": [
+        {
+          "appearance": "luminosity",
+          "value": "dark"
+        }
+      ],
+      "idiom": "universal",
+      "scale": "3x",
+      "filename": "Default@3x~universal~anyany-dark.png"
+    }
+  ],
+  "info": {
+    "version": 1,
+    "author": "xcode"
+  }
+}
\ No newline at end of file
diff --git a/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany-dark.png b/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany-dark.png
new file mode 100644
index 0000000..d92d42d
Binary files /dev/null and b/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany-dark.png differ
diff --git a/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany.png b/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany.png
new file mode 100644
index 0000000..ed7035e
Binary files /dev/null and b/ios/App/App/Assets.xcassets/Splash.imageset/Default@1x~universal~anyany.png differ
diff --git a/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany-dark.png b/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany-dark.png
new file mode 100644
index 0000000..d92d42d
Binary files /dev/null and b/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany-dark.png differ
diff --git a/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany.png b/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany.png
new file mode 100644
index 0000000..ed7035e
Binary files /dev/null and b/ios/App/App/Assets.xcassets/Splash.imageset/Default@2x~universal~anyany.png differ
diff --git a/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany-dark.png b/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany-dark.png
new file mode 100644
index 0000000..d92d42d
Binary files /dev/null and b/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany-dark.png differ
diff --git a/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany.png b/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany.png
new file mode 100644
index 0000000..ed7035e
Binary files /dev/null and b/ios/App/App/Assets.xcassets/Splash.imageset/Default@3x~universal~anyany.png differ
diff --git a/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-1.png b/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-1.png
new file mode 100644
index 0000000..33ea6c9
Binary files /dev/null and b/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-1.png differ
diff --git a/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-2.png b/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-2.png
new file mode 100644
index 0000000..33ea6c9
Binary files /dev/null and b/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732-2.png differ
diff --git a/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732.png b/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732.png
new file mode 100644
index 0000000..33ea6c9
Binary files /dev/null and b/ios/App/App/Assets.xcassets/Splash.imageset/splash-2732x2732.png differ
diff --git a/ios/App/App/Base.lproj/LaunchScreen.storyboard b/ios/App/App/Base.lproj/LaunchScreen.storyboard
new file mode 100644
index 0000000..e7ae5d7
--- /dev/null
+++ b/ios/App/App/Base.lproj/LaunchScreen.storyboard
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<document type="com.apple.InterfaceBuilder3.CocoaTouch.Storyboard.XIB" version="3.0" toolsVersion="17132" targetRuntime="iOS.CocoaTouch" propertyAccessControl="none" useAutolayout="YES" launchScreen="YES" useTraitCollections="YES" useSafeAreas="YES" colorMatched="YES" initialViewController="01J-lp-oVM">
+    <device id="retina4_7" orientation="portrait" appearance="light"/>
+    <dependencies>
+        <deployment identifier="iOS"/>
+        <plugIn identifier="com.apple.InterfaceBuilder.IBCocoaTouchPlugin" version="17105"/>
+        <capability name="System colors in document resources" minToolsVersion="11.0"/>
+        <capability name="documents saved in the Xcode 8 format" minToolsVersion="8.0"/>
+    </dependencies>
+    <scenes>
+        <!--View Controller-->
+        <scene sceneID="EHf-IW-A2E">
+            <objects>
+                <viewController id="01J-lp-oVM" sceneMemberID="viewController">
+                    <imageView key="view" userInteractionEnabled="NO" contentMode="scaleAspectFill" horizontalHuggingPriority="251" verticalHuggingPriority="251" image="Splash" id="snD-IY-ifK">
+                        <rect key="frame" x="0.0" y="0.0" width="375" height="667"/>
+                        <autoresizingMask key="autoresizingMask"/>
+                        <color key="backgroundColor" systemColor="systemBackgroundColor"/>
+                    </imageView>
+                </viewController>
+                <placeholder placeholderIdentifier="IBFirstResponder" id="iYj-Kq-Ea1" userLabel="First Responder" sceneMemberID="firstResponder"/>
+            </objects>
+            <point key="canvasLocation" x="53" y="375"/>
+        </scene>
+    </scenes>
+    <resources>
+        <image name="Splash" width="1366" height="1366"/>
+        <systemColor name="systemBackgroundColor">
+            <color white="1" alpha="1" colorSpace="custom" customColorSpace="genericGamma22GrayColorSpace"/>
+        </systemColor>
+    </resources>
+</document>
diff --git a/ios/App/App/Base.lproj/Main.storyboard b/ios/App/App/Base.lproj/Main.storyboard
new file mode 100644
index 0000000..b44df7b
--- /dev/null
+++ b/ios/App/App/Base.lproj/Main.storyboard
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<document type="com.apple.InterfaceBuilder3.CocoaTouch.Storyboard.XIB" version="3.0" toolsVersion="14111" targetRuntime="iOS.CocoaTouch" propertyAccessControl="none" useAutolayout="YES" useTraitCollections="YES" colorMatched="YES" initialViewController="BYZ-38-t0r">
+    <device id="retina4_7" orientation="portrait">
+        <adaptation id="fullscreen"/>
+    </device>
+    <dependencies>
+        <deployment identifier="iOS"/>
+        <plugIn identifier="com.apple.InterfaceBuilder.IBCocoaTouchPlugin" version="14088"/>
+    </dependencies>
+    <scenes>
+        <!--Bridge View Controller-->
+        <scene sceneID="tne-QT-ifu">
+            <objects>
+                <viewController id="BYZ-38-t0r" customClass="CAPBridgeViewController" customModule="Capacitor" sceneMemberID="viewController"/>
+                <placeholder placeholderIdentifier="IBFirstResponder" id="dkx-z0-nzr" sceneMemberID="firstResponder"/>
+            </objects>
+        </scene>
+    </scenes>
+</document>
diff --git a/ios/App/App/Info.plist b/ios/App/App/Info.plist
new file mode 100644
index 0000000..13fef97
--- /dev/null
+++ b/ios/App/App/Info.plist
@@ -0,0 +1,51 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>CAPACITOR_DEBUG</key>
+	<string>$(CAPACITOR_DEBUG)</string>
+	<key>CFBundleDevelopmentRegion</key>
+	<string>en</string>
+	<key>CFBundleDisplayName</key>
+        <string>nuxt-pocketbase-starter</string>
+	<key>CFBundleExecutable</key>
+	<string>$(EXECUTABLE_NAME)</string>
+	<key>CFBundleIdentifier</key>
+	<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>$(PRODUCT_NAME)</string>
+	<key>CFBundlePackageType</key>
+	<string>APPL</string>
+	<key>CFBundleShortVersionString</key>
+	<string>$(MARKETING_VERSION)</string>
+	<key>CFBundleVersion</key>
+	<string>$(CURRENT_PROJECT_VERSION)</string>
+	<key>LSRequiresIPhoneOS</key>
+	<true/>
+	<key>UILaunchStoryboardName</key>
+	<string>LaunchScreen</string>
+	<key>UIMainStoryboardFile</key>
+	<string>Main</string>
+	<key>UIRequiredDeviceCapabilities</key>
+	<array>
+		<string>armv7</string>
+	</array>
+	<key>UISupportedInterfaceOrientations</key>
+	<array>
+		<string>UIInterfaceOrientationPortrait</string>
+		<string>UIInterfaceOrientationLandscapeLeft</string>
+		<string>UIInterfaceOrientationLandscapeRight</string>
+	</array>
+	<key>UISupportedInterfaceOrientations~ipad</key>
+	<array>
+		<string>UIInterfaceOrientationPortrait</string>
+		<string>UIInterfaceOrientationPortraitUpsideDown</string>
+		<string>UIInterfaceOrientationLandscapeLeft</string>
+		<string>UIInterfaceOrientationLandscapeRight</string>
+	</array>
+	<key>UIViewControllerBasedStatusBarAppearance</key>
+	<true/>
+</dict>
+</plist>
diff --git a/ios/App/CapApp-SPM/.gitignore b/ios/App/CapApp-SPM/.gitignore
new file mode 100644
index 0000000..3b29812
--- /dev/null
+++ b/ios/App/CapApp-SPM/.gitignore
@@ -0,0 +1,9 @@
+.DS_Store
+/.build
+/Packages
+/*.xcodeproj
+xcuserdata/
+DerivedData/
+.swiftpm/config/registries.json
+.swiftpm/xcode/package.xcworkspace/contents.xcworkspacedata
+.netrc
diff --git a/ios/App/CapApp-SPM/Package.swift b/ios/App/CapApp-SPM/Package.swift
new file mode 100644
index 0000000..cd47f64
--- /dev/null
+++ b/ios/App/CapApp-SPM/Package.swift
@@ -0,0 +1,29 @@
+// swift-tools-version: 5.9
+import PackageDescription
+
+// DO NOT MODIFY THIS FILE - managed by Capacitor CLI commands
+let package = Package(
+    name: "CapApp-SPM",
+    platforms: [.iOS(.v15)],
+    products: [
+        .library(
+            name: "CapApp-SPM",
+            targets: ["CapApp-SPM"])
+    ],
+    dependencies: [
+        .package(url: "https://github.com/ionic-team/capacitor-swift-pm.git", exact: "8.3.0"),
+        .package(name: "CapacitorApp", path: "../../../node_modules/.pnpm/@capacitor+app@8.1.0_@capacitor+core@8.3.0/node_modules/@capacitor/app"),
+        .package(name: "CapacitorPushNotifications", path: "../../../node_modules/.pnpm/@capacitor+push-notifications@8.0.3_@capacitor+core@8.3.0/node_modules/@capacitor/push-notifications")
+    ],
+    targets: [
+        .target(
+            name: "CapApp-SPM",
+            dependencies: [
+                .product(name: "Capacitor", package: "capacitor-swift-pm"),
+                .product(name: "Cordova", package: "capacitor-swift-pm"),
+                .product(name: "CapacitorApp", package: "CapacitorApp"),
+                .product(name: "CapacitorPushNotifications", package: "CapacitorPushNotifications")
+            ]
+        )
+    ]
+)
diff --git a/ios/App/CapApp-SPM/README.md b/ios/App/CapApp-SPM/README.md
new file mode 100644
index 0000000..5e22a2f
--- /dev/null
+++ b/ios/App/CapApp-SPM/README.md
@@ -0,0 +1,5 @@
+# CapApp-SPM
+
+This SPM is used to host SPM dependencies for you Capacitor project
+
+Do not modify the contents of it or there may be unintended consequences.
diff --git a/ios/App/CapApp-SPM/Sources/CapApp-SPM/CapApp-SPM.swift b/ios/App/CapApp-SPM/Sources/CapApp-SPM/CapApp-SPM.swift
new file mode 100644
index 0000000..945afec
--- /dev/null
+++ b/ios/App/CapApp-SPM/Sources/CapApp-SPM/CapApp-SPM.swift
@@ -0,0 +1 @@
+public let isCapacitorApp = true
diff --git a/ios/debug.xcconfig b/ios/debug.xcconfig
new file mode 100644
index 0000000..53ce18d
--- /dev/null
+++ b/ios/debug.xcconfig
@@ -0,0 +1 @@
+CAPACITOR_DEBUG = true
diff --git a/nuxt.config.ts b/nuxt.config.ts
new file mode 100644
index 0000000..e2caf66
--- /dev/null
+++ b/nuxt.config.ts
@@ -0,0 +1,80 @@
+// https://nuxt.com/docs/api/configuration/nuxt-config
+
+const rybbitUrl = process.env.NUXT_PUBLIC_RYBBIT_URL
+const rybbitSiteId = process.env.NUXT_PUBLIC_RYBBIT_SITE_ID
+
+export default defineNuxtConfig({
+
+  modules: [
+    '@nuxt/eslint',
+    '@nuxt/ui',
+    '@nuxt/image',
+    '@nuxtjs/i18n',
+    '@pinia/nuxt',
+    '@nuxt/test-utils/module'
+  ],
+
+  ssr: false,
+
+  devtools: {
+    enabled: true
+  },
+  app: {
+    head: {
+      script: [
+        ...(rybbitUrl && rybbitSiteId
+          ? [{
+              'src': rybbitUrl + '/api/script.js',
+              'defer': true,
+              'data-site-id': rybbitSiteId
+            }]
+          : [])
+      ]
+    }
+  },
+
+  css: ['~/assets/css/main.css'],
+
+  runtimeConfig: {
+    public: {
+      appUrl: 'http://localhost:3000',
+      pocketbaseUrl: 'http://127.0.0.1:8090',
+      rybbitScriptUrl: '',
+      rybbitSiteId: ''
+    }
+  },
+
+  dir: {
+    public: 'app/public' // moved to app dir to clean up root
+  },
+
+  experimental: {
+    asyncContext: false,
+    payloadExtraction: true
+  },
+
+  compatibilityDate: '2025-01-15',
+
+  eslint: {
+    config: {
+      stylistic: {
+        commaDangle: 'never',
+        braceStyle: '1tbs'
+      }
+    }
+  },
+
+  i18n: {
+    langDir: '../app/i18n/locales', // moved to app dir to clean up root
+    defaultLocale: 'en',
+    strategy: 'no_prefix',
+    locales: [
+      { code: 'en', name: 'English', file: 'en.json' },
+      { code: 'de', name: 'Deutsch', file: 'de.json' }
+    ],
+    detectBrowserLanguage: {
+      useCookie: true,
+      cookieKey: 'app_language'
+    }
+  }
+})
diff --git a/package.json b/package.json
new file mode 100644
index 0000000..049c5e8
--- /dev/null
+++ b/package.json
@@ -0,0 +1,56 @@
+{
+  "name": "nuxt-pocketbase-starter",
+  "private": true,
+  "type": "module",
+  "version": "0.0.1",
+  "scripts": {
+    "build": "nuxt build",
+    "generate": "nuxt generate",
+    "dev": "nuxt dev",
+    "preview": "nuxt preview",
+    "postinstall": "nuxt prepare",
+    "lint": "eslint .",
+    "typecheck": "nuxt typecheck",
+    "test": "vitest",
+    "pocketbase:start": "cd ./pocketbase && docker compose --env-file=../.env up",
+    "pocketbase:stop": "cd ./pocketbase && docker compose --env-file=../.env down",
+    "pocketbase:setup": "cd ./pocketbase && deno run --env-file=../.env --allow-env --allow-net setup.ts",
+    "pocketbase:types": "pocketbase-typegen --db ./pocketbase/pb_data/data.db --out ./app/types/pocketbase.types.ts",
+    "assets": "npx @capacitor/assets generate --assetPath public --ios --android",
+    "capacitor:copy:after": "cp creds/fcm-google-services.json android/app/google-services.json"
+  },
+  "dependencies": {
+    "@capacitor/android": "^8.3.1",
+    "@capacitor/app": "^8.1.0",
+    "@capacitor/core": "^8.3.1",
+    "@capacitor/ios": "^8.3.1",
+    "@capacitor/push-notifications": "^8.0.3",
+    "@iconify-json/lucide": "^1.2.102",
+    "@iconify-json/simple-icons": "^1.2.78",
+    "@nuxt/image": "2.0.0",
+    "@nuxt/ui": "^4.6.1",
+    "@nuxtjs/i18n": "10.2.4",
+    "@pinia/nuxt": "0.11.3",
+    "dotenv": "^17.4.2",
+    "nuxt": "^4.4.2",
+    "pocketbase": "^0.26.8",
+    "tailwindcss": "^4.2.2",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@capacitor/cli": "^8.3.1",
+    "@nuxt/eslint": "^1.15.2",
+    "@nuxt/test-utils": "^4.0.2",
+    "@types/node": "^25.6.0",
+    "@vue/test-utils": "^2.4.6",
+    "deno": "^2.7.12",
+    "eslint": "^10.2.0",
+    "happy-dom": "^20.9.0",
+    "playwright-core": "^1.59.1",
+    "pocketbase-typegen": "^1.3.3",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.4",
+    "vue-tsc": "^3.2.6"
+  },
+  "packageManager": "pnpm@10.33.0"
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
new file mode 100644
index 0000000..893d3af
--- /dev/null
+++ b/pnpm-lock.yaml
@@ -0,0 +1,13945 @@
+lockfileVersion: '9.0'
+
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false
+
+importers:
+
+  .:
+    dependencies:
+      '@capacitor/android':
+        specifier: ^8.3.1
+        version: 8.3.1(@capacitor/core@8.3.1)
+      '@capacitor/app':
+        specifier: ^8.1.0
+        version: 8.1.0(@capacitor/core@8.3.1)
+      '@capacitor/core':
+        specifier: ^8.3.1
+        version: 8.3.1
+      '@capacitor/ios':
+        specifier: ^8.3.1
+        version: 8.3.1(@capacitor/core@8.3.1)
+      '@capacitor/push-notifications':
+        specifier: ^8.0.3
+        version: 8.0.3(@capacitor/core@8.3.1)
+      '@iconify-json/lucide':
+        specifier: ^1.2.102
+        version: 1.2.102
+      '@iconify-json/simple-icons':
+        specifier: ^1.2.78
+        version: 1.2.78
+      '@nuxt/image':
+        specifier: 2.0.0
+        version: 2.0.0(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)(magicast@0.5.2)(srvx@0.11.15)
+      '@nuxt/ui':
+        specifier: ^4.6.1
+        version: 4.6.1(@tiptap/extensions@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))(change-case@5.4.4)(db0@0.3.4(sqlite3@5.1.7))(embla-carousel@8.6.0)(ioredis@5.10.1)(magicast@0.5.2)(tailwindcss@4.2.2)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue-router@5.0.4(@vue/compiler-sfc@3.5.32)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))(yjs@13.6.30)(zod@4.3.6)
+      '@nuxtjs/i18n':
+        specifier: 10.2.4
+        version: 10.2.4(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@vue/compiler-dom@3.5.32)(db0@0.3.4(sqlite3@5.1.7))(eslint@10.2.0(jiti@2.6.1))(ioredis@5.10.1)(magicast@0.5.2)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(rollup@4.60.1)(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3))
+      '@pinia/nuxt':
+        specifier: 0.11.3
+        version: 0.11.3(magicast@0.5.2)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))
+      dotenv:
+        specifier: ^17.4.2
+        version: 17.4.2
+      nuxt:
+        specifier: ^4.4.2
+        version: 4.4.2(@babel/core@7.29.0)(@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.0))(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@parcel/watcher@2.5.6)(@types/node@25.6.0)(@vue/compiler-sfc@3.5.32)(cac@6.7.14)(db0@0.3.4(sqlite3@5.1.7))(encoding@0.1.13)(eslint@10.2.0(jiti@2.6.1))(ioredis@5.10.1)(lightningcss@1.32.0)(magicast@0.5.2)(optionator@0.9.4)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(rollup-plugin-visualizer@7.0.1(rollup@4.60.1))(rollup@4.60.1)(sqlite3@5.1.7)(srvx@0.11.15)(terser@5.46.1)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue-tsc@3.2.6(typescript@6.0.3))(xml2js@0.6.2)(yaml@2.8.3)
+      pocketbase:
+        specifier: ^0.26.8
+        version: 0.26.8
+      tailwindcss:
+        specifier: ^4.2.2
+        version: 4.2.2
+      zod:
+        specifier: ^4.3.6
+        version: 4.3.6
+    devDependencies:
+      '@capacitor/cli':
+        specifier: ^8.3.1
+        version: 8.3.1
+      '@nuxt/eslint':
+        specifier: ^1.15.2
+        version: 1.15.2(@typescript-eslint/utils@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3))(@vue/compiler-sfc@3.5.32)(eslint@10.2.0(jiti@2.6.1))(magicast@0.5.2)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      '@nuxt/test-utils':
+        specifier: ^4.0.2
+        version: 4.0.2(@vue/test-utils@2.4.6)(crossws@0.4.4(srvx@0.11.15))(happy-dom@20.9.0)(magicast@0.5.2)(playwright-core@1.59.1)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vitest@4.1.4(@types/node@25.6.0)(happy-dom@20.9.0)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)))
+      '@types/node':
+        specifier: ^25.6.0
+        version: 25.6.0
+      '@vue/test-utils':
+        specifier: ^2.4.6
+        version: 2.4.6
+      deno:
+        specifier: ^2.7.12
+        version: 2.7.12
+      eslint:
+        specifier: ^10.2.0
+        version: 10.2.0(jiti@2.6.1)
+      happy-dom:
+        specifier: ^20.9.0
+        version: 20.9.0
+      playwright-core:
+        specifier: ^1.59.1
+        version: 1.59.1
+      pocketbase-typegen:
+        specifier: ^1.3.3
+        version: 1.3.3(encoding@0.1.13)
+      typescript:
+        specifier: ^6.0.3
+        version: 6.0.3
+      vitest:
+        specifier: ^4.1.4
+        version: 4.1.4(@types/node@25.6.0)(happy-dom@20.9.0)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      vue-tsc:
+        specifier: ^3.2.6
+        version: 3.2.6(typescript@6.0.3)
+
+packages:
+
+  '@alloc/quick-lru@5.2.0':
+    resolution: {integrity: sha512-UrcABB+4bUrFABwbluTIBErXwvbsU/V7TZWfmbgJfbkwiBuziS9gxdODUyuiecfdGQ85jglMW6juS3+z5TsKLw==}
+    engines: {node: '>=10'}
+
+  '@antfu/install-pkg@1.1.0':
+    resolution: {integrity: sha512-MGQsmw10ZyI+EJo45CdSER4zEb+p31LpDAFp2Z3gkSd1yqVZGi0Ebx++YTEMonJy4oChEMLsxZ64j8FH6sSqtQ==}
+
+  '@apidevtools/json-schema-ref-parser@14.2.1':
+    resolution: {integrity: sha512-HmdFw9CDYqM6B25pqGBpNeLCKvGPlIx1EbLrVL0zPvj50CJQUHyBNBw45Muk0kEIkogo1VZvOKHajdMuAzSxRg==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      '@types/json-schema': ^7.0.15
+
+  '@babel/code-frame@7.29.0':
+    resolution: {integrity: sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/compat-data@7.29.0':
+    resolution: {integrity: sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/core@7.29.0':
+    resolution: {integrity: sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/generator@7.29.1':
+    resolution: {integrity: sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-annotate-as-pure@7.27.3':
+    resolution: {integrity: sha512-fXSwMQqitTGeHLBC08Eq5yXz2m37E4pJX1qAU1+2cNedz/ifv/bVXft90VeSav5nFO61EcNgwr0aJxbyPaWBPg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-compilation-targets@7.28.6':
+    resolution: {integrity: sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-create-class-features-plugin@7.28.6':
+    resolution: {integrity: sha512-dTOdvsjnG3xNT9Y0AUg1wAl38y+4Rl4sf9caSQZOXdNqVn+H+HbbJ4IyyHaIqNR6SW9oJpA/RuRjsjCw2IdIow==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0
+
+  '@babel/helper-globals@7.28.0':
+    resolution: {integrity: sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-member-expression-to-functions@7.28.5':
+    resolution: {integrity: sha512-cwM7SBRZcPCLgl8a7cY0soT1SptSzAlMH39vwiRpOQkJlh53r5hdHwLSCZpQdVLT39sZt+CRpNwYG4Y2v77atg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-module-imports@7.28.6':
+    resolution: {integrity: sha512-l5XkZK7r7wa9LucGw9LwZyyCUscb4x37JWTPz7swwFE/0FMQAGpiWUZn8u9DzkSBWEcK25jmvubfpw2dnAMdbw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-module-transforms@7.28.6':
+    resolution: {integrity: sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0
+
+  '@babel/helper-optimise-call-expression@7.27.1':
+    resolution: {integrity: sha512-URMGH08NzYFhubNSGJrpUEphGKQwMQYBySzat5cAByY1/YgIRkULnIy3tAMeszlL/so2HbeilYloUmSpd7GdVw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-plugin-utils@7.28.6':
+    resolution: {integrity: sha512-S9gzZ/bz83GRysI7gAD4wPT/AI3uCnY+9xn+Mx/KPs2JwHJIz1W8PZkg2cqyt3RNOBM8ejcXhV6y8Og7ly/Dug==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-replace-supers@7.28.6':
+    resolution: {integrity: sha512-mq8e+laIk94/yFec3DxSjCRD2Z0TAjhVbEJY3UQrlwVo15Lmt7C2wAUbK4bjnTs4APkwsYLTahXRraQXhb1WCg==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0
+
+  '@babel/helper-skip-transparent-expression-wrappers@7.27.1':
+    resolution: {integrity: sha512-Tub4ZKEXqbPjXgWLl2+3JpQAYBJ8+ikpQ2Ocj/q/r0LwE3UhENh7EUabyHjz2kCEsrRY83ew2DQdHluuiDQFzg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-string-parser@7.27.1':
+    resolution: {integrity: sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-validator-identifier@7.28.5':
+    resolution: {integrity: sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-validator-option@7.27.1':
+    resolution: {integrity: sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helpers@7.29.2':
+    resolution: {integrity: sha512-HoGuUs4sCZNezVEKdVcwqmZN8GoHirLUcLaYVNBK2J0DadGtdcqgr3BCbvH8+XUo4NGjNl3VOtSjEKNzqfFgKw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/parser@7.29.2':
+    resolution: {integrity: sha512-4GgRzy/+fsBa72/RZVJmGKPmZu9Byn8o4MoLpmNe1m8ZfYnz5emHLQz3U4gLud6Zwl0RZIcgiLD7Uq7ySFuDLA==}
+    engines: {node: '>=6.0.0'}
+    hasBin: true
+
+  '@babel/plugin-syntax-jsx@7.28.6':
+    resolution: {integrity: sha512-wgEmr06G6sIpqr8YDwA2dSRTE3bJ+V0IfpzfSY3Lfgd7YWOaAdlykvJi13ZKBt8cZHfgH1IXN+CL656W3uUa4w==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-typescript@7.28.6':
+    resolution: {integrity: sha512-+nDNmQye7nlnuuHDboPbGm00Vqg3oO8niRRL27/4LYHUsHYh0zJ1xWOz0uRwNFmM1Avzk8wZbc6rdiYhomzv/A==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-transform-typescript@7.28.6':
+    resolution: {integrity: sha512-0YWL2RFxOqEm9Efk5PvreamxPME8OyY0wM5wh5lHjF+VtVhdneCWGzZeSqzOfiobVqQaNCd2z0tQvnI9DaPWPw==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/template@7.28.6':
+    resolution: {integrity: sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/traverse@7.29.0':
+    resolution: {integrity: sha512-4HPiQr0X7+waHfyXPZpWPfWL/J7dcN1mx9gL6WdQVMbPnF3+ZhSMs8tCxN7oHddJE9fhNE7+lxdnlyemKfJRuA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/types@7.29.0':
+    resolution: {integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==}
+    engines: {node: '>=6.9.0'}
+
+  '@bomb.sh/tab@0.0.14':
+    resolution: {integrity: sha512-cHMk2LI430MVoX1unTt9oK1iZzQS4CYDz97MSxKLNErW69T43Z2QLFTpdS/3jVOIKrIADWfuxQ+nQNJkNV7E4w==}
+    hasBin: true
+    peerDependencies:
+      cac: ^6.7.14
+      citty: ^0.1.6 || ^0.2.0
+      commander: ^13.1.0
+    peerDependenciesMeta:
+      cac:
+        optional: true
+      citty:
+        optional: true
+      commander:
+        optional: true
+
+  '@capacitor/android@8.3.1':
+    resolution: {integrity: sha512-hjskIG8YcBEh3X4yaTXvE9gcqpdcxunTgFruSKnuPxtMxAUzEK4Oq25x0Z1g3cz+MQPc+lRG09R7Ovc+ydKsNw==}
+    peerDependencies:
+      '@capacitor/core': ^8.3.0
+
+  '@capacitor/app@8.1.0':
+    resolution: {integrity: sha512-MlmttTOWHDedr/G4SrhNRxsXMqY+R75S4MM4eIgzsgCzOYhb/MpCkA5Q3nuOCfL1oHm26xjUzqZ5aupbOwdfYg==}
+    peerDependencies:
+      '@capacitor/core': '>=8.0.0'
+
+  '@capacitor/cli@8.3.1':
+    resolution: {integrity: sha512-1sPGW4THTDfR6YjXwZ0jM7oAfAtciPOHN00qs/3sNAQx1kKrrEYSfDPwCm1/xlAgi0OeL69SiRfw314Ans+1sw==}
+    engines: {node: '>=22.0.0'}
+    hasBin: true
+
+  '@capacitor/core@8.3.1':
+    resolution: {integrity: sha512-UF8ItlHguU1Z6GXfPTeT2gakf+ctNI8pAS1kwSBQlsJMlfD4OPoto/SmKnOxKCQvnF4WRcdWeg6C0zREUNaAQg==}
+
+  '@capacitor/ios@8.3.1':
+    resolution: {integrity: sha512-BEhLyYYHWJLib4mpaPMaaylbC8meqgxbNYwQJH2svsSLW7yo/hFie+Zoo66a44XnqcMd2tvmAuzimWunXZi/xA==}
+    peerDependencies:
+      '@capacitor/core': ^8.3.0
+
+  '@capacitor/push-notifications@8.0.3':
+    resolution: {integrity: sha512-jmBBoJvOzmzem8YoO9dQJBPFiM1bksTNAoV7yksCBN10BybAOtmBF19vFPt/jr2KGAirnPZz0ne2X0OH/rRGtg==}
+    peerDependencies:
+      '@capacitor/core': '>=8.0.0'
+
+  '@capsizecss/unpack@4.0.0':
+    resolution: {integrity: sha512-VERIM64vtTP1C4mxQ5thVT9fK0apjPFobqybMtA1UdUujWka24ERHbRHFGmpbbhp73MhV+KSsHQH9C6uOTdEQA==}
+    engines: {node: '>=18'}
+
+  '@clack/core@1.2.0':
+    resolution: {integrity: sha512-qfxof/3T3t9DPU/Rj3OmcFyZInceqj/NVtO9rwIuJqCUgh32gwPjpFQQp/ben07qKlhpwq7GzfWpST4qdJ5Drg==}
+
+  '@clack/prompts@1.2.0':
+    resolution: {integrity: sha512-4jmztR9fMqPMjz6H/UZXj0zEmE43ha1euENwkckKKel4XpSfokExPo5AiVStdHSAlHekz4d0CA/r45Ok1E4D3w==}
+
+  '@cloudflare/kv-asset-handler@0.4.2':
+    resolution: {integrity: sha512-SIOD2DxrRRwQ+jgzlXCqoEFiKOFqaPjhnNTGKXSRLvp1HiOvapLaFG2kEr9dYQTYe8rKrd9uvDUzmAITeNyaHQ==}
+    engines: {node: '>=18.0.0'}
+
+  '@colordx/core@5.0.3':
+    resolution: {integrity: sha512-xBQ0MYRTNNxW3mS2sJtlQTT7C3Sasqgh1/PsHva7fyDb5uqYY+gv9V0utDdX8X80mqzbGz3u/IDJdn2d/uW09g==}
+
+  '@deno/darwin-arm64@2.7.12':
+    resolution: {integrity: sha512-6QOPjRHkb+nXqsip7t1x7y8mBimQv/8mDkeYAy0HGkQjDAuX1mzWv4xyRNtlqevqsXdEOa6qb5lM0A3PkRkSEQ==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@deno/darwin-x64@2.7.12':
+    resolution: {integrity: sha512-0mdnbSPKOZGQODS6JuL3UBSlmQ9tw/tFPvbIVoAZ0XDLT4qpST5XvP0em655ZMWN6eT6olz2vSB/7ZUlKpUwnQ==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@deno/linux-arm64-glibc@2.7.12':
+    resolution: {integrity: sha512-n5wHCMIUtpGzFGpl+oXfLCA7vbnyZaTo7sXA1Yk+ZnI8G9Gcxz8ocLWXn7AsvFR3Y8OJJEfs/hLd/M5HG5fCew==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@deno/linux-x64-glibc@2.7.12':
+    resolution: {integrity: sha512-IV18tY2Nx8hJ3uRF8oRmoTtIGWi5O/IZ1J2OSIGBi7kZOzNOlpiqGE7lUrkvBFB1WaOtsDFJhQCrzWYndXdFxg==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@deno/win32-arm64@2.7.12':
+    resolution: {integrity: sha512-Hruu1SMI0d6WK79R/lRNhkKKhSGSYvvEEYuEfjoP1D8QYJSdj2vt8zm9fZcE8kqiRMLeu3Pf4Y3fEJ8kpSyJng==}
+    cpu: [arm64]
+    os: [win32]
+
+  '@deno/win32-x64@2.7.12':
+    resolution: {integrity: sha512-oA7xDj0iK1Y4VUQBcKXgXpdAO6TKF1/S/pu1uFkEDmuuEY27stWZVjNaIrFHXFRzkDVYH8Kl6UPHo/wZ4XGvFA==}
+    cpu: [x64]
+    os: [win32]
+
+  '@dxup/nuxt@0.4.0':
+    resolution: {integrity: sha512-28LDotpr9G2knUse3cQYsOo6NJq5yhABv4ByRVRYJUmzf9Q31DI7rpRek4POlKy1aAcYyKgu5J2616pyqLohYg==}
+    peerDependencies:
+      typescript: '*'
+
+  '@dxup/unimport@0.1.2':
+    resolution: {integrity: sha512-/B8YJGPzaYq1NbsQmwgP8EZqg40NpTw4ZB3suuI0TplbxKHeK94jeaawLmVhCv+YwUnOpiWEz9U6SeThku/8JQ==}
+
+  '@emnapi/core@1.9.2':
+    resolution: {integrity: sha512-UC+ZhH3XtczQYfOlu3lNEkdW/p4dsJ1r/bP7H8+rhao3TTTMO1ATq/4DdIi23XuGoFY+Cz0JmCbdVl0hz9jZcA==}
+
+  '@emnapi/runtime@1.9.2':
+    resolution: {integrity: sha512-3U4+MIWHImeyu1wnmVygh5WlgfYDtyf0k8AbLhMFxOipihf6nrWC4syIm/SwEeec0mNSafiiNnMJwbza/Is6Lw==}
+
+  '@emnapi/wasi-threads@1.2.1':
+    resolution: {integrity: sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==}
+
+  '@es-joy/jsdoccomment@0.86.0':
+    resolution: {integrity: sha512-ukZmRQ81WiTpDWO6D/cTBM7XbrNtutHKvAVnZN/8pldAwLoJArGOvkNyxPTBGsPjsoaQBJxlH+tE2TNA/92Qgw==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+
+  '@es-joy/resolve.exports@1.2.0':
+    resolution: {integrity: sha512-Q9hjxWI5xBM+qW2enxfe8wDKdFWMfd0Z29k5ZJnuBqD/CasY5Zryj09aCA6owbGATWz+39p5uIdaHXpopOcG8g==}
+    engines: {node: '>=10'}
+
+  '@esbuild/aix-ppc64@0.25.12':
+    resolution: {integrity: sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [aix]
+
+  '@esbuild/aix-ppc64@0.27.7':
+    resolution: {integrity: sha512-EKX3Qwmhz1eMdEJokhALr0YiD0lhQNwDqkPYyPhiSwKrh7/4KRjQc04sZ8db+5DVVnZ1LmbNDI1uAMPEUBnQPg==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [aix]
+
+  '@esbuild/android-arm64@0.25.12':
+    resolution: {integrity: sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [android]
+
+  '@esbuild/android-arm64@0.27.7':
+    resolution: {integrity: sha512-62dPZHpIXzvChfvfLJow3q5dDtiNMkwiRzPylSCfriLvZeq0a1bWChrGx/BbUbPwOrsWKMn8idSllklzBy+dgQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [android]
+
+  '@esbuild/android-arm@0.25.12':
+    resolution: {integrity: sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [android]
+
+  '@esbuild/android-arm@0.27.7':
+    resolution: {integrity: sha512-jbPXvB4Yj2yBV7HUfE2KHe4GJX51QplCN1pGbYjvsyCZbQmies29EoJbkEc+vYuU5o45AfQn37vZlyXy4YJ8RQ==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [android]
+
+  '@esbuild/android-x64@0.25.12':
+    resolution: {integrity: sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [android]
+
+  '@esbuild/android-x64@0.27.7':
+    resolution: {integrity: sha512-x5VpMODneVDb70PYV2VQOmIUUiBtY3D3mPBG8NxVk5CogneYhkR7MmM3yR/uMdITLrC1ml/NV1rj4bMJuy9MCg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [android]
+
+  '@esbuild/darwin-arm64@0.25.12':
+    resolution: {integrity: sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@esbuild/darwin-arm64@0.27.7':
+    resolution: {integrity: sha512-5lckdqeuBPlKUwvoCXIgI2D9/ABmPq3Rdp7IfL70393YgaASt7tbju3Ac+ePVi3KDH6N2RqePfHnXkaDtY9fkw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@esbuild/darwin-x64@0.25.12':
+    resolution: {integrity: sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@esbuild/darwin-x64@0.27.7':
+    resolution: {integrity: sha512-rYnXrKcXuT7Z+WL5K980jVFdvVKhCHhUwid+dDYQpH+qu+TefcomiMAJpIiC2EM3Rjtq0sO3StMV/+3w3MyyqQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@esbuild/freebsd-arm64@0.25.12':
+    resolution: {integrity: sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [freebsd]
+
+  '@esbuild/freebsd-arm64@0.27.7':
+    resolution: {integrity: sha512-B48PqeCsEgOtzME2GbNM2roU29AMTuOIN91dsMO30t+Ydis3z/3Ngoj5hhnsOSSwNzS+6JppqWsuhTp6E82l2w==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [freebsd]
+
+  '@esbuild/freebsd-x64@0.25.12':
+    resolution: {integrity: sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@esbuild/freebsd-x64@0.27.7':
+    resolution: {integrity: sha512-jOBDK5XEjA4m5IJK3bpAQF9/Lelu/Z9ZcdhTRLf4cajlB+8VEhFFRjWgfy3M1O4rO2GQ/b2dLwCUGpiF/eATNQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@esbuild/linux-arm64@0.25.12':
+    resolution: {integrity: sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@esbuild/linux-arm64@0.27.7':
+    resolution: {integrity: sha512-RZPHBoxXuNnPQO9rvjh5jdkRmVizktkT7TCDkDmQ0W2SwHInKCAV95GRuvdSvA7w4VMwfCjUiPwDi0ZO6Nfe9A==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@esbuild/linux-arm@0.25.12':
+    resolution: {integrity: sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [linux]
+
+  '@esbuild/linux-arm@0.27.7':
+    resolution: {integrity: sha512-RkT/YXYBTSULo3+af8Ib0ykH8u2MBh57o7q/DAs3lTJlyVQkgQvlrPTnjIzzRPQyavxtPtfg0EopvDyIt0j1rA==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [linux]
+
+  '@esbuild/linux-ia32@0.25.12':
+    resolution: {integrity: sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [linux]
+
+  '@esbuild/linux-ia32@0.27.7':
+    resolution: {integrity: sha512-GA48aKNkyQDbd3KtkplYWT102C5sn/EZTY4XROkxONgruHPU72l+gW+FfF8tf2cFjeHaRbWpOYa/uRBz/Xq1Pg==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [linux]
+
+  '@esbuild/linux-loong64@0.25.12':
+    resolution: {integrity: sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng==}
+    engines: {node: '>=18'}
+    cpu: [loong64]
+    os: [linux]
+
+  '@esbuild/linux-loong64@0.27.7':
+    resolution: {integrity: sha512-a4POruNM2oWsD4WKvBSEKGIiWQF8fZOAsycHOt6JBpZ+JN2n2JH9WAv56SOyu9X5IqAjqSIPTaJkqN8F7XOQ5Q==}
+    engines: {node: '>=18'}
+    cpu: [loong64]
+    os: [linux]
+
+  '@esbuild/linux-mips64el@0.25.12':
+    resolution: {integrity: sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw==}
+    engines: {node: '>=18'}
+    cpu: [mips64el]
+    os: [linux]
+
+  '@esbuild/linux-mips64el@0.27.7':
+    resolution: {integrity: sha512-KabT5I6StirGfIz0FMgl1I+R1H73Gp0ofL9A3nG3i/cYFJzKHhouBV5VWK1CSgKvVaG4q1RNpCTR2LuTVB3fIw==}
+    engines: {node: '>=18'}
+    cpu: [mips64el]
+    os: [linux]
+
+  '@esbuild/linux-ppc64@0.25.12':
+    resolution: {integrity: sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@esbuild/linux-ppc64@0.27.7':
+    resolution: {integrity: sha512-gRsL4x6wsGHGRqhtI+ifpN/vpOFTQtnbsupUF5R5YTAg+y/lKelYR1hXbnBdzDjGbMYjVJLJTd2OFmMewAgwlQ==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@esbuild/linux-riscv64@0.25.12':
+    resolution: {integrity: sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w==}
+    engines: {node: '>=18'}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@esbuild/linux-riscv64@0.27.7':
+    resolution: {integrity: sha512-hL25LbxO1QOngGzu2U5xeXtxXcW+/GvMN3ejANqXkxZ/opySAZMrc+9LY/WyjAan41unrR3YrmtTsUpwT66InQ==}
+    engines: {node: '>=18'}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@esbuild/linux-s390x@0.25.12':
+    resolution: {integrity: sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg==}
+    engines: {node: '>=18'}
+    cpu: [s390x]
+    os: [linux]
+
+  '@esbuild/linux-s390x@0.27.7':
+    resolution: {integrity: sha512-2k8go8Ycu1Kb46vEelhu1vqEP+UeRVj2zY1pSuPdgvbd5ykAw82Lrro28vXUrRmzEsUV0NzCf54yARIK8r0fdw==}
+    engines: {node: '>=18'}
+    cpu: [s390x]
+    os: [linux]
+
+  '@esbuild/linux-x64@0.25.12':
+    resolution: {integrity: sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [linux]
+
+  '@esbuild/linux-x64@0.27.7':
+    resolution: {integrity: sha512-hzznmADPt+OmsYzw1EE33ccA+HPdIqiCRq7cQeL1Jlq2gb1+OyWBkMCrYGBJ+sxVzve2ZJEVeePbLM2iEIZSxA==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [linux]
+
+  '@esbuild/netbsd-arm64@0.25.12':
+    resolution: {integrity: sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [netbsd]
+
+  '@esbuild/netbsd-arm64@0.27.7':
+    resolution: {integrity: sha512-b6pqtrQdigZBwZxAn1UpazEisvwaIDvdbMbmrly7cDTMFnw/+3lVxxCTGOrkPVnsYIosJJXAsILG9XcQS+Yu6w==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [netbsd]
+
+  '@esbuild/netbsd-x64@0.25.12':
+    resolution: {integrity: sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [netbsd]
+
+  '@esbuild/netbsd-x64@0.27.7':
+    resolution: {integrity: sha512-OfatkLojr6U+WN5EDYuoQhtM+1xco+/6FSzJJnuWiUw5eVcicbyK3dq5EeV/QHT1uy6GoDhGbFpprUiHUYggrw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [netbsd]
+
+  '@esbuild/openbsd-arm64@0.25.12':
+    resolution: {integrity: sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openbsd]
+
+  '@esbuild/openbsd-arm64@0.27.7':
+    resolution: {integrity: sha512-AFuojMQTxAz75Fo8idVcqoQWEHIXFRbOc1TrVcFSgCZtQfSdc1RXgB3tjOn/krRHENUB4j00bfGjyl2mJrU37A==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openbsd]
+
+  '@esbuild/openbsd-x64@0.25.12':
+    resolution: {integrity: sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [openbsd]
+
+  '@esbuild/openbsd-x64@0.27.7':
+    resolution: {integrity: sha512-+A1NJmfM8WNDv5CLVQYJ5PshuRm/4cI6WMZRg1by1GwPIQPCTs1GLEUHwiiQGT5zDdyLiRM/l1G0Pv54gvtKIg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [openbsd]
+
+  '@esbuild/openharmony-arm64@0.25.12':
+    resolution: {integrity: sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@esbuild/openharmony-arm64@0.27.7':
+    resolution: {integrity: sha512-+KrvYb/C8zA9CU/g0sR6w2RBw7IGc5J2BPnc3dYc5VJxHCSF1yNMxTV5LQ7GuKteQXZtspjFbiuW5/dOj7H4Yw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@esbuild/sunos-x64@0.25.12':
+    resolution: {integrity: sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [sunos]
+
+  '@esbuild/sunos-x64@0.27.7':
+    resolution: {integrity: sha512-ikktIhFBzQNt/QDyOL580ti9+5mL/YZeUPKU2ivGtGjdTYoqz6jObj6nOMfhASpS4GU4Q/Clh1QtxWAvcYKamA==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [sunos]
+
+  '@esbuild/win32-arm64@0.25.12':
+    resolution: {integrity: sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@esbuild/win32-arm64@0.27.7':
+    resolution: {integrity: sha512-7yRhbHvPqSpRUV7Q20VuDwbjW5kIMwTHpptuUzV+AA46kiPze5Z7qgt6CLCK3pWFrHeNfDd1VKgyP4O+ng17CA==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@esbuild/win32-ia32@0.25.12':
+    resolution: {integrity: sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [win32]
+
+  '@esbuild/win32-ia32@0.27.7':
+    resolution: {integrity: sha512-SmwKXe6VHIyZYbBLJrhOoCJRB/Z1tckzmgTLfFYOfpMAx63BJEaL9ExI8x7v0oAO3Zh6D/Oi1gVxEYr5oUCFhw==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [win32]
+
+  '@esbuild/win32-x64@0.25.12':
+    resolution: {integrity: sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [win32]
+
+  '@esbuild/win32-x64@0.27.7':
+    resolution: {integrity: sha512-56hiAJPhwQ1R4i+21FVF7V8kSD5zZTdHcVuRFMW0hn753vVfQN8xlx4uOPT4xoGH0Z/oVATuR82AiqSTDIpaHg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [win32]
+
+  '@eslint-community/eslint-utils@4.9.1':
+    resolution: {integrity: sha512-phrYmNiYppR7znFEdqgfWHXR6NCkZEK7hwWDHZUjit/2/U0r6XvkDl0SYnoM51Hq7FhCGdLDT6zxCCOY1hexsQ==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+    peerDependencies:
+      eslint: ^6.0.0 || ^7.0.0 || >=8.0.0
+
+  '@eslint-community/regexpp@4.12.2':
+    resolution: {integrity: sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew==}
+    engines: {node: ^12.0.0 || ^14.0.0 || >=16.0.0}
+
+  '@eslint/compat@2.0.4':
+    resolution: {integrity: sha512-o598tCGstJv9Kk4XapwP+oDij9HD9Qr3V37ABzTfdzVvbFciV+sfg9zSW6olj6G/IXj7p89SwSzPnZ+JUEPIPg==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+    peerDependencies:
+      eslint: ^8.40 || 9 || 10
+    peerDependenciesMeta:
+      eslint:
+        optional: true
+
+  '@eslint/config-array@0.23.4':
+    resolution: {integrity: sha512-lf19F24LSMfF8weXvW5QEtnLqW70u7kgit5e9PSx0MsHAFclGd1T9ynvWEMDT1w5J4Qt54tomGeAhdoAku1Xow==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+
+  '@eslint/config-helpers@0.5.4':
+    resolution: {integrity: sha512-jJhqiY3wPMlWWO3370M86CPJ7pt8GmEwSLglMfQhjXal07RCvhmU0as4IuUEW5SJeunfItiEetHmSxCCe9lDBg==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+
+  '@eslint/config-inspector@1.5.0':
+    resolution: {integrity: sha512-YK/VdQ+pibx5pcCI2GPZVO6vFemf/pkB662HuFtc5AA4WLQ9upb3fAoZSjOAYoDJx58qGTDp6xq9ldd/vluNxQ==}
+    hasBin: true
+    peerDependencies:
+      eslint: ^8.50.0 || ^9.0.0 || ^10.0.0
+
+  '@eslint/core@1.2.0':
+    resolution: {integrity: sha512-8FTGbNzTvmSlc4cZBaShkC6YvFMG0riksYWRFKXztqVdXaQbcZLXlFbSpC05s70sGEsXAw0qwhx69JiW7hQS7A==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+
+  '@eslint/js@9.39.4':
+    resolution: {integrity: sha512-nE7DEIchvtiFTwBw4Lfbu59PG+kCofhjsKaCWzxTpt4lfRjRMqG6uMBzKXuEcyXhOHoUp9riAm7/aWYGhXZ9cw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/object-schema@3.0.4':
+    resolution: {integrity: sha512-55lO/7+Yp0ISKRP0PsPtNTeNGapXaO085aELZmWCVc5SH3jfrqpuU6YgOdIxMS99ZHkQN1cXKE+cdIqwww9ptw==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+
+  '@eslint/plugin-kit@0.7.0':
+    resolution: {integrity: sha512-ejvBr8MQCbVsWNZnCwDXjUKq40MDmHalq7cJ6e9s/qzTUFIIo/afzt1Vui9T97FM/V/pN4YsFVoed5NIa96RDg==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+
+  '@fastify/accept-negotiator@2.0.1':
+    resolution: {integrity: sha512-/c/TW2bO/v9JeEgoD/g1G5GxGeCF1Hafdf79WPmUlgYiBXummY0oX3VVq4yFkKKVBKDNlaDUYoab7g38RpPqCQ==}
+
+  '@floating-ui/core@1.7.5':
+    resolution: {integrity: sha512-1Ih4WTWyw0+lKyFMcBHGbb5U5FtuHJuujoyyr5zTaWS5EYMeT6Jb2AuDeftsCsEuchO+mM2ij5+q9crhydzLhQ==}
+
+  '@floating-ui/dom@1.7.6':
+    resolution: {integrity: sha512-9gZSAI5XM36880PPMm//9dfiEngYoC6Am2izES1FF406YFsjvyBMmeJ2g4SAju3xWwtuynNRFL2s9hgxpLI5SQ==}
+
+  '@floating-ui/utils@0.2.11':
+    resolution: {integrity: sha512-RiB/yIh78pcIxl6lLMG0CgBXAZ2Y0eVHqMPYugu+9U0AeT6YBeiJpf7lbdJNIugFP5SIjwNRgo4DhR1Qxi26Gg==}
+
+  '@floating-ui/vue@1.1.11':
+    resolution: {integrity: sha512-HzHKCNVxnGS35r9fCHBc3+uCnjw9IWIlCPL683cGgM9Kgj2BiAl8x1mS7vtvP6F9S/e/q4O6MApwSHj8hNLGfw==}
+
+  '@gar/promisify@1.1.3':
+    resolution: {integrity: sha512-k2Ty1JcVojjJFwrg/ThKi2ujJ7XNLYaFGNB/bWT9wGR+oSMJHMa5w+CUq6p/pVrKeNNgA7pCqEcjSnHVoqJQFw==}
+
+  '@humanfs/core@0.19.1':
+    resolution: {integrity: sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==}
+    engines: {node: '>=18.18.0'}
+
+  '@humanfs/node@0.16.7':
+    resolution: {integrity: sha512-/zUx+yOsIrG4Y43Eh2peDeKCxlRt/gET6aHfaKpuq267qXdYDFViVHfMaLyygZOnl0kGWxFIgsBy8QFuTLUXEQ==}
+    engines: {node: '>=18.18.0'}
+
+  '@humanwhocodes/module-importer@1.0.1':
+    resolution: {integrity: sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==}
+    engines: {node: '>=12.22'}
+
+  '@humanwhocodes/retry@0.4.3':
+    resolution: {integrity: sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ==}
+    engines: {node: '>=18.18'}
+
+  '@iconify-json/lucide@1.2.102':
+    resolution: {integrity: sha512-Dm3EEqu5NrmzyDMB2U1+8yroEj2/dB9V4KlH0m/szwwF/ofSf0cPaGTZqkd1aExXjCor+vU53ttRMCGuXf+/cg==}
+
+  '@iconify-json/simple-icons@1.2.78':
+    resolution: {integrity: sha512-I3lkNp0Qu7q2iZWkdcf/I2hqGhzK6qxdILh9T7XqowQrnpmG/BayDsiCf6PktDoWlW0U971xA5g+panm+NFrfQ==}
+
+  '@iconify/collections@1.0.669':
+    resolution: {integrity: sha512-oy/ztmcRvljkx4wV/fQ5OmpHyjEstntRjgexMajmlWMCy3Q54C3ISHWfB6p5sTH7eQPo8EWre9TCnldOBqcuxg==}
+
+  '@iconify/types@2.0.0':
+    resolution: {integrity: sha512-+wluvCrRhXrhyOmRDJ3q8mux9JkKy5SJ/v8ol2tu4FVjyYvtEzkc/3pK15ET6RKg4b4w4BmTk1+gsCUhf21Ykg==}
+
+  '@iconify/utils@3.1.0':
+    resolution: {integrity: sha512-Zlzem1ZXhI1iHeeERabLNzBHdOa4VhQbqAcOQaMKuTuyZCpwKbC2R4Dd0Zo3g9EAc+Y4fiarO8HIHRAth7+skw==}
+
+  '@iconify/vue@5.0.0':
+    resolution: {integrity: sha512-C+KuEWIF5nSBrobFJhT//JS87OZ++QDORB6f2q2Wm6fl2mueSTpFBeBsveK0KW9hWiZ4mNiPjsh6Zs4jjdROSg==}
+    peerDependencies:
+      vue: '>=3'
+
+  '@img/colour@1.1.0':
+    resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
+    engines: {node: '>=18'}
+
+  '@img/sharp-darwin-arm64@0.34.5':
+    resolution: {integrity: sha512-imtQ3WMJXbMY4fxb/Ndp6HBTNVtWCUI0WdobyheGf5+ad6xX8VIDO8u2xE4qc/fr08CKG/7dDseFtn6M6g/r3w==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@img/sharp-darwin-x64@0.34.5':
+    resolution: {integrity: sha512-YNEFAF/4KQ/PeW0N+r+aVVsoIY0/qxxikF2SWdp+NRkmMB7y9LBZAVqQ4yhGCm/H3H270OSykqmQMKLBhBJDEw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@img/sharp-libvips-darwin-arm64@1.2.4':
+    resolution: {integrity: sha512-zqjjo7RatFfFoP0MkQ51jfuFZBnVE2pRiaydKJ1G/rHZvnsrHAOcQALIi9sA5co5xenQdTugCvtb1cuf78Vf4g==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@img/sharp-libvips-darwin-x64@1.2.4':
+    resolution: {integrity: sha512-1IOd5xfVhlGwX+zXv2N93k0yMONvUlANylbJw1eTah8K/Jtpi15KC+WSiaX/nBmbm2HxRM1gZ0nSdjSsrZbGKg==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@img/sharp-libvips-linux-arm64@1.2.4':
+    resolution: {integrity: sha512-excjX8DfsIcJ10x1Kzr4RcWe1edC9PquDRRPx3YVCvQv+U5p7Yin2s32ftzikXojb1PIFc/9Mt28/y+iRklkrw==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-arm@1.2.4':
+    resolution: {integrity: sha512-bFI7xcKFELdiNCVov8e44Ia4u2byA+l3XtsAj+Q8tfCwO6BQ8iDojYdvoPMqsKDkuoOo+X6HZA0s0q11ANMQ8A==}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-ppc64@1.2.4':
+    resolution: {integrity: sha512-FMuvGijLDYG6lW+b/UvyilUWu5Ayu+3r2d1S8notiGCIyYU/76eig1UfMmkZ7vwgOrzKzlQbFSuQfgm7GYUPpA==}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-riscv64@1.2.4':
+    resolution: {integrity: sha512-oVDbcR4zUC0ce82teubSm+x6ETixtKZBh/qbREIOcI3cULzDyb18Sr/Wcyx7NRQeQzOiHTNbZFF1UwPS2scyGA==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-s390x@1.2.4':
+    resolution: {integrity: sha512-qmp9VrzgPgMoGZyPvrQHqk02uyjA0/QrTO26Tqk6l4ZV0MPWIW6LTkqOIov+J1yEu7MbFQaDpwdwJKhbJvuRxQ==}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-x64@1.2.4':
+    resolution: {integrity: sha512-tJxiiLsmHc9Ax1bz3oaOYBURTXGIRDODBqhveVHonrHJ9/+k89qbLl0bcJns+e4t4rvaNBxaEZsFtSfAdquPrw==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
+    resolution: {integrity: sha512-FVQHuwx1IIuNow9QAbYUzJ+En8KcVm9Lk5+uGUQJHaZmMECZmOlix9HnH7n1TRkXMS0pGxIJokIVB9SuqZGGXw==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
+    resolution: {integrity: sha512-+LpyBk7L44ZIXwz/VYfglaX/okxezESc6UxDSoyo2Ks6Jxc4Y7sGjpgU9s4PMgqgjj1gZCylTieNamqA1MF7Dg==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linux-arm64@0.34.5':
+    resolution: {integrity: sha512-bKQzaJRY/bkPOXyKx5EVup7qkaojECG6NLYswgktOZjaXecSAeCWiZwwiFf3/Y+O1HrauiE3FVsGxFg8c24rZg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-arm@0.34.5':
+    resolution: {integrity: sha512-9dLqsvwtg1uuXBGZKsxem9595+ujv0sJ6Vi8wcTANSFpwV/GONat5eCkzQo/1O6zRIkh0m/8+5BjrRr7jDUSZw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-ppc64@0.34.5':
+    resolution: {integrity: sha512-7zznwNaqW6YtsfrGGDA6BRkISKAAE1Jo0QdpNYXNMHu2+0dTrPflTLNkpc8l7MUP5M16ZJcUvysVWWrMefZquA==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-riscv64@0.34.5':
+    resolution: {integrity: sha512-51gJuLPTKa7piYPaVs8GmByo7/U7/7TZOq+cnXJIHZKavIRHAP77e3N2HEl3dgiqdD/w0yUfiJnII77PuDDFdw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-s390x@0.34.5':
+    resolution: {integrity: sha512-nQtCk0PdKfho3eC5MrbQoigJ2gd1CgddUMkabUj+rBevs8tZ2cULOx46E7oyX+04WGfABgIwmMC0VqieTiR4jg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-x64@0.34.5':
+    resolution: {integrity: sha512-MEzd8HPKxVxVenwAa+JRPwEC7QFjoPWuS5NZnBt6B3pu7EG2Ge0id1oLHZpPJdn3OQK+BQDiw9zStiHBTJQQQQ==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linuxmusl-arm64@0.34.5':
+    resolution: {integrity: sha512-fprJR6GtRsMt6Kyfq44IsChVZeGN97gTD331weR1ex1c1rypDEABN6Tm2xa1wE6lYb5DdEnk03NZPqA7Id21yg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linuxmusl-x64@0.34.5':
+    resolution: {integrity: sha512-Jg8wNT1MUzIvhBFxViqrEhWDGzqymo3sV7z7ZsaWbZNDLXRJZoRGrjulp60YYtV4wfY8VIKcWidjojlLcWrd8Q==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-wasm32@0.34.5':
+    resolution: {integrity: sha512-OdWTEiVkY2PHwqkbBI8frFxQQFekHaSSkUIJkwzclWZe64O1X4UlUjqqqLaPbUpMOQk6FBu/HtlGXNblIs0huw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [wasm32]
+
+  '@img/sharp-win32-arm64@0.34.5':
+    resolution: {integrity: sha512-WQ3AgWCWYSb2yt+IG8mnC6Jdk9Whs7O0gxphblsLvdhSpSTtmu69ZG1Gkb6NuvxsNACwiPV6cNSZNzt0KPsw7g==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@img/sharp-win32-ia32@0.34.5':
+    resolution: {integrity: sha512-FV9m/7NmeCmSHDD5j4+4pNI8Cp3aW+JvLoXcTUo0IqyjSfAZJ8dIUmijx1qaJsIiU+Hosw6xM5KijAWRJCSgNg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@img/sharp-win32-x64@0.34.5':
+    resolution: {integrity: sha512-+29YMsqY2/9eFEiW93eqWnuLcWcufowXewwSNIT6UwZdUUCrM3oFjMWH/Z6/TMmb4hlFenmfAVbpWeup2jryCw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [win32]
+
+  '@internationalized/date@3.12.0':
+    resolution: {integrity: sha512-/PyIMzK29jtXaGU23qTvNZxvBXRtKbNnGDFD+PY6CZw/Y8Ex8pFUzkuCJCG9aOqmShjqhS9mPqP6Dk5onQY8rQ==}
+
+  '@internationalized/number@3.6.5':
+    resolution: {integrity: sha512-6hY4Kl4HPBvtfS62asS/R22JzNNy8vi/Ssev7x6EobfCp+9QIB2hKvI2EtbdJ0VSQacxVNtqhE/NmF/NZ0gm6g==}
+
+  '@intlify/bundle-utils@11.0.7':
+    resolution: {integrity: sha512-fEO3CJGPymxieGh8BHox7d6stgajDQae7wgpH6YYw7WX+cdW6jTTXyljZqz7OV3JcwlS9M9UHSoO+YwiO56IhA==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      petite-vue-i18n: '*'
+      vue-i18n: '*'
+    peerDependenciesMeta:
+      petite-vue-i18n:
+        optional: true
+      vue-i18n:
+        optional: true
+
+  '@intlify/core-base@11.3.1':
+    resolution: {integrity: sha512-9nG3ItSD5ApZHmTbv2UFqvJSy3m+u6C/orMohukNKoT/Yuwiz8tPtlNw6ylLuPqSP2kP7ZF4Cdqwp6V1m3BQgw==}
+    engines: {node: '>= 16'}
+
+  '@intlify/core@11.3.1':
+    resolution: {integrity: sha512-QAc/2kGTwEfHnoDiAtnnX4H2QBYMUVEHptq9MRCkopIDmrgVrTxf/mKV9T4wZRAjW6LDhWic35IImlT/QAgUUw==}
+    engines: {node: '>= 16'}
+
+  '@intlify/devtools-types@11.3.1':
+    resolution: {integrity: sha512-qrOknIx294W4YYVYBgldDOeOnv2NlpabW+aYGjMuXMSrY36f7GCAPlEBE2G+qTC5x0oAWDBSY5BmvLlPUx1exg==}
+    engines: {node: '>= 16'}
+
+  '@intlify/h3@0.7.4':
+    resolution: {integrity: sha512-BtL5+U3Dd9Qz6so+ArOMQWZ+nV21rOqqYUXnqwvW6J3VUXr66A9+9+vUFb/NAQvOU4kdfkO3c/9LMRGU9WZ8vw==}
+    engines: {node: '>= 20'}
+
+  '@intlify/message-compiler@11.3.1':
+    resolution: {integrity: sha512-uIa4YurbphU+4Cl5CoL6nq/c7uQhVNRowEelgboNmXNs+UEcyFLQBESwaUjMvdtYxzA2qh+vGim080KZ84ruDA==}
+    engines: {node: '>= 16'}
+
+  '@intlify/shared@11.3.1':
+    resolution: {integrity: sha512-9GWc5PKuRdeWkT7FJN43c/+rD6xpSB3WtizewkfFCK/0XzYqCk4gQBWWcTdfKo8ylEcHwqYsR2Z3HRE3XhEHrQ==}
+    engines: {node: '>= 16'}
+
+  '@intlify/unplugin-vue-i18n@11.0.7':
+    resolution: {integrity: sha512-wswKprS1D8VfnxxVhKxug5wa3MbDSOcCoXOBjnzhMK+6NfP6h6UI8pFqSBIvcW8nPDuzweTc0Sk3PeBCcubfoQ==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      petite-vue-i18n: '*'
+      vue: ^3.2.25
+      vue-i18n: '*'
+    peerDependenciesMeta:
+      petite-vue-i18n:
+        optional: true
+      vue-i18n:
+        optional: true
+
+  '@intlify/utils@0.13.0':
+    resolution: {integrity: sha512-8i3uRdAxCGzuHwfmHcVjeLQBtysQB2aXl/ojoagDut5/gY5lvWCQ2+cnl2TiqE/fXj/D8EhWG/SLKA7qz4a3QA==}
+    engines: {node: '>= 18'}
+
+  '@intlify/utils@0.14.1':
+    resolution: {integrity: sha512-/NVDhX6sG87h0PXIwUCTW9DeHbKeqlni6qVV8xzMULQRHE9azIETldBlTKaBji7z6ostyDIH4s6SWI3AAI4uFg==}
+    engines: {node: '>= 20'}
+
+  '@intlify/vue-i18n-extensions@8.0.0':
+    resolution: {integrity: sha512-w0+70CvTmuqbskWfzeYhn0IXxllr6mU+IeM2MU0M+j9OW64jkrvqY+pYFWrUnIIC9bEdij3NICruicwd5EgUuQ==}
+    engines: {node: '>= 18'}
+    peerDependencies:
+      '@intlify/shared': ^9.0.0 || ^10.0.0 || ^11.0.0
+      '@vue/compiler-dom': ^3.0.0
+      vue: ^3.0.0
+      vue-i18n: ^9.0.0 || ^10.0.0 || ^11.0.0
+    peerDependenciesMeta:
+      '@intlify/shared':
+        optional: true
+      '@vue/compiler-dom':
+        optional: true
+      vue:
+        optional: true
+      vue-i18n:
+        optional: true
+
+  '@ionic/cli-framework-output@2.2.8':
+    resolution: {integrity: sha512-TshtaFQsovB4NWRBydbNFawql6yul7d5bMiW1WYYf17hd99V6xdDdk3vtF51bw6sLkxON3bDQpWsnUc9/hVo3g==}
+    engines: {node: '>=16.0.0'}
+
+  '@ionic/utils-array@2.1.6':
+    resolution: {integrity: sha512-0JZ1Zkp3wURnv8oq6Qt7fMPo5MpjbLoUoa9Bu2Q4PJuSDWM8H8gwF3dQO7VTeUj3/0o1IB1wGkFWZZYgUXZMUg==}
+    engines: {node: '>=16.0.0'}
+
+  '@ionic/utils-fs@3.1.7':
+    resolution: {integrity: sha512-2EknRvMVfhnyhL1VhFkSLa5gOcycK91VnjfrTB0kbqkTFCOXyXgVLI5whzq7SLrgD9t1aqos3lMMQyVzaQ5gVA==}
+    engines: {node: '>=16.0.0'}
+
+  '@ionic/utils-object@2.1.6':
+    resolution: {integrity: sha512-vCl7sl6JjBHFw99CuAqHljYJpcE88YaH2ZW4ELiC/Zwxl5tiwn4kbdP/gxi2OT3MQb1vOtgAmSNRtusvgxI8ww==}
+    engines: {node: '>=16.0.0'}
+
+  '@ionic/utils-process@2.1.12':
+    resolution: {integrity: sha512-Jqkgyq7zBs/v/J3YvKtQQiIcxfJyplPgECMWgdO0E1fKrrH8EF0QGHNJ9mJCn6PYe2UtHNS8JJf5G21e09DfYg==}
+    engines: {node: '>=16.0.0'}
+
+  '@ionic/utils-stream@3.1.7':
+    resolution: {integrity: sha512-eSELBE7NWNFIHTbTC2jiMvh1ABKGIpGdUIvARsNPMNQhxJB3wpwdiVnoBoTYp+5a6UUIww4Kpg7v6S7iTctH1w==}
+    engines: {node: '>=16.0.0'}
+
+  '@ionic/utils-subprocess@3.0.1':
+    resolution: {integrity: sha512-cT4te3AQQPeIM9WCwIg8ohroJ8TjsYaMb2G4ZEgv9YzeDqHZ4JpeIKqG2SoaA3GmVQ3sOfhPM6Ox9sxphV/d1A==}
+    engines: {node: '>=16.0.0'}
+
+  '@ionic/utils-terminal@2.3.5':
+    resolution: {integrity: sha512-3cKScz9Jx2/Pr9ijj1OzGlBDfcmx7OMVBt4+P1uRR0SSW4cm1/y3Mo4OY3lfkuaYifMNBW8Wz6lQHbs1bihr7A==}
+    engines: {node: '>=16.0.0'}
+
+  '@ioredis/commands@1.5.1':
+    resolution: {integrity: sha512-JH8ZL/ywcJyR9MmJ5BNqZllXNZQqQbnVZOqpPQqE1vHiFgAw4NHbvE0FOduNU8IX9babitBT46571OnPTT0Zcw==}
+
+  '@isaacs/cliui@8.0.2':
+    resolution: {integrity: sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==}
+    engines: {node: '>=12'}
+
+  '@isaacs/fs-minipass@4.0.1':
+    resolution: {integrity: sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==}
+    engines: {node: '>=18.0.0'}
+
+  '@jridgewell/gen-mapping@0.3.13':
+    resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==}
+
+  '@jridgewell/remapping@2.3.5':
+    resolution: {integrity: sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==}
+
+  '@jridgewell/resolve-uri@3.1.2':
+    resolution: {integrity: sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==}
+    engines: {node: '>=6.0.0'}
+
+  '@jridgewell/source-map@0.3.11':
+    resolution: {integrity: sha512-ZMp1V8ZFcPG5dIWnQLr3NSI1MiCU7UETdS/A0G8V/XWHvJv3ZsFqutJn1Y5RPmAPX6F3BiE397OqveU/9NCuIA==}
+
+  '@jridgewell/sourcemap-codec@1.5.5':
+    resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==}
+
+  '@jridgewell/trace-mapping@0.3.31':
+    resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
+
+  '@kwsites/file-exists@1.1.1':
+    resolution: {integrity: sha512-m9/5YGR18lIwxSFDwfE3oA7bWuq9kdau6ugN4H2rJeyhFQZcG9AgSHkQtSD15a8WvTgfz9aikZMrKPHvbpqFiw==}
+
+  '@kwsites/promise-deferred@1.1.1':
+    resolution: {integrity: sha512-GaHYm+c0O9MjZRu0ongGBRbinu8gVAMd2UZjji6jVmqKtZluZnptXGWhz1E8j8D2HJ3f/yMxKAUC0b+57wncIw==}
+
+  '@mapbox/node-pre-gyp@2.0.3':
+    resolution: {integrity: sha512-uwPAhccfFJlsfCxMYTwOdVfOz3xqyj8xYL3zJj8f0pb30tLohnnFPhLuqp4/qoEz8sNxe4SESZedcBojRefIzg==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  '@miyaneee/rollup-plugin-json5@1.2.0':
+    resolution: {integrity: sha512-JjTIaXZp9WzhUHpElrqPnl1AzBi/rvRs065F71+aTmlqvTMVkdbjZ8vfFl4nRlgJy+TPBw69ZK4pwFdmOAt4aA==}
+    peerDependencies:
+      rollup: ^1.20.0 || ^2.0.0 || ^3.0.0 || ^4.0.0
+
+  '@napi-rs/wasm-runtime@0.2.12':
+    resolution: {integrity: sha512-ZVWUcfwY4E/yPitQJl481FjFo3K22D6qF0DuFH6Y/nbnE11GY5uguDxZMGXPQ8WQ0128MXQD7TnfHyK4oWoIJQ==}
+
+  '@napi-rs/wasm-runtime@1.1.2':
+    resolution: {integrity: sha512-sNXv5oLJ7ob93xkZ1XnxisYhGYXfaG9f65/ZgYuAu3qt7b3NadcOEhLvx28hv31PgX8SZJRYrAIPQilQmFpLVw==}
+    peerDependencies:
+      '@emnapi/core': ^1.7.1
+      '@emnapi/runtime': ^1.7.1
+
+  '@nodelib/fs.scandir@2.1.5':
+    resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==}
+    engines: {node: '>= 8'}
+
+  '@nodelib/fs.stat@2.0.5':
+    resolution: {integrity: sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==}
+    engines: {node: '>= 8'}
+
+  '@nodelib/fs.walk@1.2.8':
+    resolution: {integrity: sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==}
+    engines: {node: '>= 8'}
+
+  '@npmcli/fs@1.1.1':
+    resolution: {integrity: sha512-8KG5RD0GVP4ydEzRn/I4BNDuxDtqVbOdm8675T49OIG/NGhaK0pjPX7ZcDlvKYbA+ulvVK3ztfcF4uBdOxuJbQ==}
+
+  '@npmcli/move-file@1.1.2':
+    resolution: {integrity: sha512-1SUf/Cg2GzGDyaf15aR9St9TWlb+XvbZXWpDx8YKs7MLzMH/BCeopv+y9vzrzgkfykCGuWOlSu3mZhj2+FQcrg==}
+    engines: {node: '>=10'}
+    deprecated: This functionality has been moved to @npmcli/fs
+
+  '@nuxt/cli@3.34.0':
+    resolution: {integrity: sha512-KVI4xSo96UtUUbmxr9ouWTytbj1LzTw5alsM4vC/gSY/l8kPMRAlq0XpNSAVTDJyALzLY70WhaIMX24LJLpdFw==}
+    engines: {node: ^16.14.0 || >=18.0.0}
+    hasBin: true
+    peerDependencies:
+      '@nuxt/schema': ^4.3.1
+    peerDependenciesMeta:
+      '@nuxt/schema':
+        optional: true
+
+  '@nuxt/devalue@2.0.2':
+    resolution: {integrity: sha512-GBzP8zOc7CGWyFQS6dv1lQz8VVpz5C2yRszbXufwG/9zhStTIH50EtD87NmWbTMwXDvZLNg8GIpb1UFdH93JCA==}
+
+  '@nuxt/devtools-kit@2.7.0':
+    resolution: {integrity: sha512-MIJdah6CF6YOW2GhfKnb8Sivu6HpcQheqdjOlZqShBr+1DyjtKQbAKSCAyKPaoIzZP4QOo2SmTFV6aN8jBeEIQ==}
+    peerDependencies:
+      vite: '>=6.0'
+
+  '@nuxt/devtools-kit@3.2.4':
+    resolution: {integrity: sha512-Yxy2Xgmq5hf3dQy983V0xh0OJV2mYwRZz9eVIGc3EaribdFGPDNGMMbYqX9qCty3Pbxn/bCF3J0UyPaNlHVayQ==}
+    peerDependencies:
+      vite: '>=6.0'
+
+  '@nuxt/devtools-wizard@3.2.4':
+    resolution: {integrity: sha512-5tu2+Quu9XTxwtpzM8CUN0UKn/bzZIfJcoGd+at5Yy1RiUQJ4E52tRK0idW1rMSUDkbkvX3dSnu8Tpj7SAtWdQ==}
+    hasBin: true
+
+  '@nuxt/devtools@3.2.4':
+    resolution: {integrity: sha512-VPbFy7hlPzWpEZk4BsuVpNuHq1ZYGV9xezjb7/NGuePuNLqeNn74YZugU+PCtva7OwKhEeTXmMK0Mqo/6+nwNA==}
+    hasBin: true
+    peerDependencies:
+      '@vitejs/devtools': '*'
+      vite: '>=6.0'
+    peerDependenciesMeta:
+      '@vitejs/devtools':
+        optional: true
+
+  '@nuxt/eslint-config@1.15.2':
+    resolution: {integrity: sha512-vS6mWB87tYjB8h3TxG/QziaZ6CGJpEOBd7N/j+64/tjNipUJzNgKwDzyGoOifNqyDDnlvgi6T3m9XpeYm4qRaA==}
+    peerDependencies:
+      eslint: ^9.0.0 || ^10.0.0
+      eslint-plugin-format: '*'
+    peerDependenciesMeta:
+      eslint-plugin-format:
+        optional: true
+
+  '@nuxt/eslint-plugin@1.15.2':
+    resolution: {integrity: sha512-LZ4gEcPP5GjzAkb6Kk04a4v0vvkTLOpmnEvdDatnkSlxtQLUSwX8v11vcDGXL92ZQ98dFoC1Q1IA6Tz3jdFIig==}
+    peerDependencies:
+      eslint: ^9.0.0 || ^10.0.0
+
+  '@nuxt/eslint@1.15.2':
+    resolution: {integrity: sha512-LwDavQoLl+y0sIDqWEYbOnM6FOmXVIYSEjuvkO1hgAqhb0CvG3hgTnfE1qkf1jOAZp3CZGP+6rxRAJ0dxhueIQ==}
+    peerDependencies:
+      eslint: ^9.0.0 || ^10.0.0
+      eslint-webpack-plugin: ^4.1.0
+      vite-plugin-eslint2: ^5.0.0
+    peerDependenciesMeta:
+      eslint-webpack-plugin:
+        optional: true
+      vite-plugin-eslint2:
+        optional: true
+
+  '@nuxt/fonts@0.14.0':
+    resolution: {integrity: sha512-4uXQl9fa5F4ibdgU8zomoOcyMdnwgdem+Pi8JEqeDYI5yPR32Kam6HnuRr47dTb97CstaepAvXPWQUUHMtjsFQ==}
+
+  '@nuxt/icon@2.2.1':
+    resolution: {integrity: sha512-GI840yYGuvHI0BGDQ63d6rAxGzG96jQcWrnaWIQKlyQo/7sx9PjXkSHckXUXyX1MCr9zY6U25Td6OatfY6Hklw==}
+
+  '@nuxt/image@2.0.0':
+    resolution: {integrity: sha512-otHi6gAoYXKLrp8m27ZjX1PjxOPaltQ4OiUs/BhkW995mF/vXf8SWQTw68fww+Uric0v+XgoVrP9icDi+yT6zw==}
+    engines: {node: '>=18.20.6'}
+
+  '@nuxt/kit@3.21.2':
+    resolution: {integrity: sha512-Bd6m6mrDrqpBEbX+g0rc66/ALd1sxlgdx5nfK9MAYO0yKLTOSK7McSYz1KcOYn3LQFCXOWfvXwaqih/b+REI1g==}
+    engines: {node: '>=18.12.0'}
+
+  '@nuxt/kit@4.4.2':
+    resolution: {integrity: sha512-5+IPRNX2CjkBhuWUwz0hBuLqiaJPRoKzQ+SvcdrQDbAyE+VDeFt74VpSFr5/R0ujrK4b+XnSHUJWdS72w6hsog==}
+    engines: {node: '>=18.12.0'}
+
+  '@nuxt/nitro-server@4.4.2':
+    resolution: {integrity: sha512-iMTfraWcpA0MuEnnEI8JFK/4DODY4ss1CfB8m3sBVOqW9jpY1Z6hikxzrtN+CadtepW2aOI5d8TdX5hab+Sb4Q==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    peerDependencies:
+      '@babel/plugin-proposal-decorators': ^7.25.0
+      '@rollup/plugin-babel': ^6.0.0 || ^7.0.0
+      nuxt: ^4.4.2
+    peerDependenciesMeta:
+      '@babel/plugin-proposal-decorators':
+        optional: true
+      '@rollup/plugin-babel':
+        optional: true
+
+  '@nuxt/schema@4.4.2':
+    resolution: {integrity: sha512-/q6C7Qhiricgi+PKR7ovBnJlKTL0memCbA1CzRT+itCW/oeYzUfeMdQ35mGntlBoyRPNrMXbzuSUhfDbSCU57w==}
+    engines: {node: ^14.18.0 || >=16.10.0}
+
+  '@nuxt/telemetry@2.8.0':
+    resolution: {integrity: sha512-zAwXY24KYvpLTmiV+osagd2EHkfs5IF+7oDZYTQoit5r0kPlwaCNlzHp5I/wUAWT4LBw6lG8gZ6bWidAdv/erQ==}
+    engines: {node: '>=18.12.0'}
+    hasBin: true
+    peerDependencies:
+      '@nuxt/kit': '>=3.0.0'
+
+  '@nuxt/test-utils@4.0.2':
+    resolution: {integrity: sha512-bexdsG2HbkSiCNt+2qwHBtPd6zNUYoZ8Pa+70uTkeHuYzCC6GXWb+CyEiFqE0Pd+A/7nrBflebKW0sGWGCR/uQ==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0}
+    peerDependencies:
+      '@cucumber/cucumber': '>=11.0.0'
+      '@jest/globals': '>=30.0.0'
+      '@playwright/test': ^1.43.1
+      '@testing-library/vue': ^8.0.1
+      '@vitest/ui': '*'
+      '@vue/test-utils': ^2.4.2
+      happy-dom: '>=20.0.11'
+      jsdom: '>=27.4.0'
+      playwright-core: ^1.43.1
+      vitest: ^4.0.2
+    peerDependenciesMeta:
+      '@cucumber/cucumber':
+        optional: true
+      '@jest/globals':
+        optional: true
+      '@playwright/test':
+        optional: true
+      '@testing-library/vue':
+        optional: true
+      '@vitest/ui':
+        optional: true
+      '@vue/test-utils':
+        optional: true
+      happy-dom:
+        optional: true
+      jsdom:
+        optional: true
+      playwright-core:
+        optional: true
+      vitest:
+        optional: true
+
+  '@nuxt/ui@4.6.1':
+    resolution: {integrity: sha512-mBbBTaVDTR6ohOoAJUiV4T2RPXo2hyLewGPTiHjy1arzHPNFnmb/Tkl/2/JipF3Y8cahV4LhVUdkWKsdgI1OXw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+    peerDependencies:
+      '@inertiajs/vue3': ^2.0.7 || ^3.0.0
+      '@nuxt/content': ^3.0.0
+      joi: ^18.0.0
+      superstruct: ^2.0.0
+      tailwindcss: ^4.0.0
+      typescript: ^5.6.3 || ^6.0.0
+      valibot: ^1.0.0
+      vue-router: ^4.5.0 || ^5.0.0
+      yup: ^1.7.0
+      zod: ^3.24.0 || ^4.0.0
+    peerDependenciesMeta:
+      '@inertiajs/vue3':
+        optional: true
+      '@nuxt/content':
+        optional: true
+      joi:
+        optional: true
+      superstruct:
+        optional: true
+      valibot:
+        optional: true
+      vue-router:
+        optional: true
+      yup:
+        optional: true
+      zod:
+        optional: true
+
+  '@nuxt/vite-builder@4.4.2':
+    resolution: {integrity: sha512-fJaIwMA8ID6BU5EqmoDvnhq4qYDJeWjdHk4jfqy8D3Nm7CoUW0BvX7Ee92XoO05rtUiClGlk/NQ1Ii8hs3ZIbw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    peerDependencies:
+      '@babel/plugin-proposal-decorators': ^7.25.0
+      '@babel/plugin-syntax-jsx': ^7.25.0
+      nuxt: 4.4.2
+      rolldown: ^1.0.0-beta.38
+      rollup-plugin-visualizer: ^6.0.0 || ^7.0.1
+      vue: ^3.3.4
+    peerDependenciesMeta:
+      '@babel/plugin-proposal-decorators':
+        optional: true
+      '@babel/plugin-syntax-jsx':
+        optional: true
+      rolldown:
+        optional: true
+      rollup-plugin-visualizer:
+        optional: true
+
+  '@nuxtjs/color-mode@3.5.2':
+    resolution: {integrity: sha512-cC6RfgZh3guHBMLLjrBB2Uti5eUoGM9KyauOaYS9ETmxNWBMTvpgjvSiSJp1OFljIXPIqVTJ3xtJpSNZiO3ZaA==}
+
+  '@nuxtjs/i18n@10.2.4':
+    resolution: {integrity: sha512-T5nN7hT/tbExant+CeXtKXs9GbjWsEWnymCHJyU3Ujxfcw1WQsZZP6tyEtFRhkwjBwy8m4mj7GtU2qUCggUkkg==}
+    engines: {node: '>=20.11.1'}
+
+  '@one-ini/wasm@0.1.1':
+    resolution: {integrity: sha512-XuySG1E38YScSJoMlqovLru4KTUNSjgVTIjyh7qMX6aNN5HY5Ct5LhRJdxO79JtTzKfzV/bnWpz+zquYrISsvw==}
+
+  '@oxc-minify/binding-android-arm-eabi@0.117.0':
+    resolution: {integrity: sha512-5Hf2KsGRjxp3HnPU/mse7cQJa5tWfMFUPZQcgSMVsv2JZnGFFOIDzA0Oja2KDD+VPJqMpEJKc2dCHAGZgJxsGg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [android]
+
+  '@oxc-minify/binding-android-arm64@0.117.0':
+    resolution: {integrity: sha512-uuxGwxA5J4Sap+gz4nxyM/rer6q2A4X1Oe8HpE0CZQyb5cSBULQ15btZiVG3xOBctI5O+c2dwR1aZAP4oGKcLw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [android]
+
+  '@oxc-minify/binding-darwin-arm64@0.117.0':
+    resolution: {integrity: sha512-lLBf75cxUSLydumToKtGTwbLqO/1urScblJ33Vx0uF38M2ZbL2x51AybBV5vlfLjYNrxvQ8ov0Bj/OhsVO/biA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@oxc-minify/binding-darwin-x64@0.117.0':
+    resolution: {integrity: sha512-wBWwP1voLZMuN4hpe1HRtkPBd4/o/1qan5XssmmI/hewBvGHEHkyvVLS0zu+cKqXDxYzYvb/p+EqU+xSXhEl4A==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@oxc-minify/binding-freebsd-x64@0.117.0':
+    resolution: {integrity: sha512-pYSacHw698oH2vb70iP1cHk6x0zhvAuOvdskvNtEqvfziu8MSjKXa699vA9Cx72+DH5rwVuj1I3f+7no2fWglA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@oxc-minify/binding-linux-arm-gnueabihf@0.117.0':
+    resolution: {integrity: sha512-Ugm4Qj7F2+bccjhHCjjnSNHBDPyvjPXWrntID4WJpSrPqt+Az/o0EGdty9sWOjQXRZiTVpa80uqCWZQUn94yTA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxc-minify/binding-linux-arm-musleabihf@0.117.0':
+    resolution: {integrity: sha512-qrY6ZviO9wVRI/jl4nRZO4B9os8jaJQemMeWIyFInZNk3lhqihId8iBqMKibJnRaf+JRxLM9j68atXkFRhOHrg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxc-minify/binding-linux-arm64-gnu@0.117.0':
+    resolution: {integrity: sha512-2VLJHKEFBRhCihT/8uesuDPhXpbWu1OlHCxqQ7pdFVqKik1Maj5E9oSDcYzxqfaCRStvTHkmLVWJBK5CVcIadg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-minify/binding-linux-arm64-musl@0.117.0':
+    resolution: {integrity: sha512-C3zapJconWpl2Y7LR3GkRkH6jxpuV2iVUfkFcHT5Ffn4Zu7l88mZa2dhcfdULZDybN1Phka/P34YUzuskUUrXw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-minify/binding-linux-ppc64-gnu@0.117.0':
+    resolution: {integrity: sha512-2T/Bm+3/qTfuNS4gKSzL8qbiYk+ErHW2122CtDx+ilZAzvWcJ8IbqdZIbEWOlwwe03lESTxPwTBLFqVgQU2OeQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-minify/binding-linux-riscv64-gnu@0.117.0':
+    resolution: {integrity: sha512-MKLjpldYkeoB4T+yAi4aIAb0waifxUjLcKkCUDmYAY3RqBJTvWK34KtfaKZL0IBMIXfD92CbKkcxQirDUS9Xcg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-minify/binding-linux-riscv64-musl@0.117.0':
+    resolution: {integrity: sha512-UFVcbPvKUStry6JffriobBp8BHtjmLLPl4bCY+JMxIn/Q3pykCpZzRwFTcDurG/kY8tm+uSNfKKdRNa5Nh9A7g==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-minify/binding-linux-s390x-gnu@0.117.0':
+    resolution: {integrity: sha512-B9GyPQ1NKbvpETVAMyJMfRlD3c6UJ7kiuFUAlx9LTYiQL+YIyT6vpuRlq1zgsXxavZluVrfeJv6x0owV4KDx4Q==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-minify/binding-linux-x64-gnu@0.117.0':
+    resolution: {integrity: sha512-fXfhtr+WWBGNy4M5GjAF5vu/lpulR4Me34FjTyaK9nDrTZs7LM595UDsP1wliksqp4hD/KdoqHGmbCrC+6d4vA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-minify/binding-linux-x64-musl@0.117.0':
+    resolution: {integrity: sha512-jFBgGbx1oLadb83ntJmy1dWlAHSQanXTS21G4PgkxyONmxZdZ/UMKr7KsADzMuoPsd2YhJHxzRpwJd9U+4BFBw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-minify/binding-openharmony-arm64@0.117.0':
+    resolution: {integrity: sha512-nxPd9vx1vYz8IlIMdl9HFdOK/ood1H5hzbSFsyO8JU55tkcJoBL8TLCbuFf9pHpOy27l2gcPyV6z3p4eAcTH5Q==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@oxc-minify/binding-wasm32-wasi@0.117.0':
+    resolution: {integrity: sha512-pSvjJ6cCCfEXSteWSiVfZhdRzvpmS3tLhlXrXTYiuTDFrkRCobRP39SRwAzK23rE9i/m2JAaES2xPEW6+xu85g==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+
+  '@oxc-minify/binding-win32-arm64-msvc@0.117.0':
+    resolution: {integrity: sha512-9NoT9baFrWPdJRIZVQ1jzPZW9TjPT2sbzQyDdoK7uD1V8JXCe1L2y7sp9k2ldZZheaIcmtNwHc7jyD7kYz/0XQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@oxc-minify/binding-win32-ia32-msvc@0.117.0':
+    resolution: {integrity: sha512-E51LTjkRei5u2dpFiYSObuh+e43xg45qlmilSTd0XDGFdYJCOv62Q0MEn61TR+efQYPNleYwWdTS9t+tp9p/4w==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@oxc-minify/binding-win32-x64-msvc@0.117.0':
+    resolution: {integrity: sha512-I8vniPOxWQdxfIbXNvQLaJ1n8SrnqES6wuiAX10CU72sKsizkds9kDaJ1KzWvDy39RKhTBmD1cJsU2uxPFgizQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [win32]
+
+  '@oxc-parser/binding-android-arm-eabi@0.112.0':
+    resolution: {integrity: sha512-retxBzJ39Da7Lh/eZTn9+HJgTeDUxZIpuI0urOsmcFsBKXAth3lc1jIvwseQ9qbAI/VrsoFOXiGIzgclARbAHg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [android]
+
+  '@oxc-parser/binding-android-arm-eabi@0.117.0':
+    resolution: {integrity: sha512-XarGPJpaobgKjfm7xRfCGWWszuPbm/OeP91NdMhxtcLZ/qLTmWF0P0z0gqmr0Uysi1F1v1BNtcST11THMrcEOw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [android]
+
+  '@oxc-parser/binding-android-arm64@0.112.0':
+    resolution: {integrity: sha512-pRkbBRbuIIsufUWpOJ+JHWfJFNupkidy4sbjfcm37e6xwYrn9LSKMLubPHvNaL1Zf92ZRhGiwaYkEcmaFg2VcA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [android]
+
+  '@oxc-parser/binding-android-arm64@0.117.0':
+    resolution: {integrity: sha512-EPTs2EBijGmyhPso4rXAL0NSpECXER9IaVKFZEv83YcA6h4uhKW47kmYt+OZcSp130zhHx+lTWILDQ/LDkCRNA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [android]
+
+  '@oxc-parser/binding-darwin-arm64@0.112.0':
+    resolution: {integrity: sha512-fh6/KQL/cbH5DukT3VkdCqnULLuvVnszVKySD5IgSE0WZb32YZo/cPsPdEv052kk6w3N4agu+NTiMnZjcvhUIg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@oxc-parser/binding-darwin-arm64@0.117.0':
+    resolution: {integrity: sha512-3bAEpyih6r/Kb+Xzn1em1qBMClOS7NsVWgF86k95jpysR5ix/HlKFKSy7cax6PcS96HeHR4kjlME20n/XK1zNg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@oxc-parser/binding-darwin-x64@0.112.0':
+    resolution: {integrity: sha512-vUBOOY1E30vlu/DoTGDoT1UbLlwu5Yv9tqeBabAwRzwNDz8Skho16VKhsBDUiyqddtpsR3//v6vNk38w4c+6IA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@oxc-parser/binding-darwin-x64@0.117.0':
+    resolution: {integrity: sha512-W7S99zFwVZhSbCxvjfZkioStFU249DBc4TJw/kK6kfKwx2Zew+jvizX5Y3ZPkAh7fBVUSNOdSeOqLBHLiP50tw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@oxc-parser/binding-freebsd-x64@0.112.0':
+    resolution: {integrity: sha512-hnEtO/9AVnYWzrgnp6L+oPs/6UqlFeteUL6n7magkd2tttgmx1C01hyNNh6nTpZfLzEVJSNJ0S+4NTsK2q2CxA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@oxc-parser/binding-freebsd-x64@0.117.0':
+    resolution: {integrity: sha512-xH76lqSdjCSY0KUMPwLXlvQ3YEm3FFVEQmgiOCGNf+stZ6E4Mo3nC102Bo8yKd7aW0foIPAFLYsHgj7vVI/axw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@oxc-parser/binding-linux-arm-gnueabihf@0.112.0':
+    resolution: {integrity: sha512-WxJrUz3pcIc2hp4lvJbvt/sTL33oX9NPvkD3vDDybE6tc0V++rS+hNOJxwXdD2FDIFPkHs/IEn5asEZFVH+VKw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxc-parser/binding-linux-arm-gnueabihf@0.117.0':
+    resolution: {integrity: sha512-9Hdm1imzrn4RdMYnQKKcy+7p7QsSPIrgVIZmpGSJT02nYDuBWLdG1pdYMPFoEo46yiXry3tS3RoHIpNbT1IiyQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxc-parser/binding-linux-arm-musleabihf@0.112.0':
+    resolution: {integrity: sha512-jj8A8WWySaJQqM9XKAIG8U2Q3qxhFQKrXPWv98d1oC35at+L1h+C+V4M3l8BAKhpHKCu3dYlloaAbHd5q1Hw6A==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxc-parser/binding-linux-arm-musleabihf@0.117.0':
+    resolution: {integrity: sha512-Itszer/VCeYhYVJLcuKnHktlY8QyGnVxapltP68S1XRGlV6IsM9HQAElJRMwQhT6/GkMjOhANmkv2Qu/9v44lw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxc-parser/binding-linux-arm64-gnu@0.112.0':
+    resolution: {integrity: sha512-G2F8H6FcAExVK5vvhpSh61tqWx5QoaXXUnSsj5FyuDiFT/K7AMMVSQVqnZREDc+YxhrjB0vnKjCcuobXK63kIw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-parser/binding-linux-arm64-gnu@0.117.0':
+    resolution: {integrity: sha512-jBxD7DtlHQ36ivjjZdH0noQJgWNouenzpLmXNKnYaCsBfo3jY95m5iyjYQEiWkvkhJ3TJUAs7tQ1/kEpY7x/Kg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-parser/binding-linux-arm64-musl@0.112.0':
+    resolution: {integrity: sha512-3R0iqjM3xYOZCnwgcxOQXH7hrz64/USDIuLbNTM1kZqQzRqaR4w7SwoWKU934zABo8d0op2oSwOp+CV3hZnM7A==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-parser/binding-linux-arm64-musl@0.117.0':
+    resolution: {integrity: sha512-QagKTDF4lrz8bCXbUi39Uq5xs7C7itAseKm51f33U+Dyar9eJY/zGKqfME9mKLOiahX7Fc1J3xMWVS0AdDXLPg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-parser/binding-linux-ppc64-gnu@0.112.0':
+    resolution: {integrity: sha512-lAQf8PQxfgy7h0bmcfSVE3hg3qMueshPYULFsCrHM+8KefGZ9W+ZMvRyU33gLrB4w1O3Fz1orR0hmKMCRxXNrQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-parser/binding-linux-ppc64-gnu@0.117.0':
+    resolution: {integrity: sha512-RPddpcE/0xxWaommWy0c5i/JdrXcXAkxBS2GOrAUh5LKmyCh03hpJedOAWszG4ADsKQwoUQQ1/tZVGRhZIWtKA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-parser/binding-linux-riscv64-gnu@0.112.0':
+    resolution: {integrity: sha512-2QlvQBUhHuAE3ezD4X3CAEKMXdfgInggQ5Bj/7gb5NcYP3GyfLTj7c+mMu+BRwfC9B3AXBNyqHWbqEuuUvZyRQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-parser/binding-linux-riscv64-gnu@0.117.0':
+    resolution: {integrity: sha512-ur/WVZF9FSOiZGxyP+nfxZzuv6r5OJDYoVxJnUR7fM/hhXLh4V/be6rjbzm9KLCDBRwYCEKJtt+XXNccwd06IA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-parser/binding-linux-riscv64-musl@0.112.0':
+    resolution: {integrity: sha512-v06iu0osHszgqJ1dLQRb6leWFU1sjG/UQk4MoVBtE6ZPewgfTkby6G9II1SpEAf2onnAuQceVYxQH9iuU3NJqw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-parser/binding-linux-riscv64-musl@0.117.0':
+    resolution: {integrity: sha512-ujGcAx8xAMvhy7X5sBFi3GXML1EtyORuJZ5z2T6UV3U416WgDX/4OCi3GnoteeenvxIf6JgP45B+YTHpt71vpA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-parser/binding-linux-s390x-gnu@0.112.0':
+    resolution: {integrity: sha512-+5HhNHtxsdcd7+ljXFnn9FOoCNXJX3UPgIfIE6vdwS1HqdGNH6eAcVobuqGOp54l8pvcxDQA6F4cPswCgLrQfQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-parser/binding-linux-s390x-gnu@0.117.0':
+    resolution: {integrity: sha512-hbsfKjUwRjcMZZvvmpZSc+qS0bHcHRu8aV/I3Ikn9BzOA0ZAgUE7ctPtce5zCU7bM8dnTLi4sJ1Pi9YHdx6Urw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-parser/binding-linux-x64-gnu@0.112.0':
+    resolution: {integrity: sha512-jKwO7ZLNkjxwg7FoCLw+fJszooL9yXRZsDN0AQ1AQUTWq1l8GH/2e44k68N3fcP19jl8O8jGpqLAZcQTYk6skA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-parser/binding-linux-x64-gnu@0.117.0':
+    resolution: {integrity: sha512-1QrTrf8rige7UPJrYuDKJLQOuJlgkt+nRSJLBMHWNm9TdivzP48HaK3f4q18EjNlglKtn03lgjMu4fryDm8X4A==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-parser/binding-linux-x64-musl@0.112.0':
+    resolution: {integrity: sha512-TYqnuKV/p3eOc+N61E0961nA7DC+gaCeJ3+V2LcjJdTwFMdikqWL6uVk1jlrpUCBrozHDATVUKDZYH7r4FQYjQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-parser/binding-linux-x64-musl@0.117.0':
+    resolution: {integrity: sha512-gRvK6HPzF5ITRL68fqb2WYYs/hGviPIbkV84HWCgiJX+LkaOpp+HIHQl3zVZdyKHwopXToTbXbtx/oFjDjl8pg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-parser/binding-openharmony-arm64@0.112.0':
+    resolution: {integrity: sha512-ZhrVmWFifVEFQX4XPwLoVFDHw9tAWH9p9vHsHFH+5uCKdfVR+jje4WxVo6YrokWCboGckoOzHq5KKMOcPZfkRg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@oxc-parser/binding-openharmony-arm64@0.117.0':
+    resolution: {integrity: sha512-QPJvFbnnDZZY7xc+xpbIBWLThcGBakwaYA9vKV8b3+oS5MGfAZUoTFJcix5+Zg2Ri46sOfrUim6Y6jsKNcssAQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@oxc-parser/binding-wasm32-wasi@0.112.0':
+    resolution: {integrity: sha512-Gr8X2PUU3hX1g3F5oLWIZB8DhzDmjr5TfOrmn5tlBOo9l8ojPGdKjnIBfObM7X15928vza8QRKW25RTR7jfivg==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+
+  '@oxc-parser/binding-wasm32-wasi@0.117.0':
+    resolution: {integrity: sha512-+XRSNA0xt3pk/6CUHM7pykVe7M8SdifJk8LX1+fIp/zefvR3HBieZCbwG5un8gogNgh7srLycoh/cQA9uozv5g==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+
+  '@oxc-parser/binding-win32-arm64-msvc@0.112.0':
+    resolution: {integrity: sha512-t5CDLbU70Ea88bGRhvU/dLJTc/Wcrtf2Jp534E8P3cgjAvHDjdKsfDDqBZrhybJ8Jv9v9vW5ngE40EK51BluDA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@oxc-parser/binding-win32-arm64-msvc@0.117.0':
+    resolution: {integrity: sha512-GpxeGS+Vo030DsrXeRPc7OSJOQIyAHkM3mzwBcnQjg/79XnOIDDMXJ5X6/aNdkVt/+Pv35pqKzGA4TQau97x8w==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@oxc-parser/binding-win32-ia32-msvc@0.112.0':
+    resolution: {integrity: sha512-rZH0JynCCwnhe2HfRoyNOl/Kfd9pudoWxgpC5OZhj7j77pMK0UOAa35hYDfrtSOUk2HLzrikV5dPUOY2DpSBSA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@oxc-parser/binding-win32-ia32-msvc@0.117.0':
+    resolution: {integrity: sha512-tchWEYiso1+objTZirmlR+w3fcIel6PVBOJ8NuC2Jr30dxBOiKUfFLovJLANwHg1+TzeD6pVSLIIIEf2T5o5lQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@oxc-parser/binding-win32-x64-msvc@0.112.0':
+    resolution: {integrity: sha512-oGHluohzmVFAuQrkEnl1OXAxMz2aYmimxUqIgKXpBgbr7PvFv0doELB273sX+5V3fKeggohKg1A2Qq21W9Z9cQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [win32]
+
+  '@oxc-parser/binding-win32-x64-msvc@0.117.0':
+    resolution: {integrity: sha512-ysRJAjIbB4e5y+t9PZs7TwbgOV/GVT//s30AORLCT/pedYwpYzHq6ApXK7is9fvyfZtgT3anNir8+esurmyaDw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [win32]
+
+  '@oxc-project/types@0.112.0':
+    resolution: {integrity: sha512-m6RebKHIRsax2iCwVpYW2ErQwa4ywHJrE4sCK3/8JK8ZZAWOKXaRJFl/uP51gaVyyXlaS4+chU1nSCdzYf6QqQ==}
+
+  '@oxc-project/types@0.117.0':
+    resolution: {integrity: sha512-C/kPXBphID44fXdsa2xSOCuzX8fKZiFxPsvucJ6Yfkr6CJlMA+kNLPNKyLoI+l9XlDsNxBrz6h7IIjKU8pB69w==}
+
+  '@oxc-transform/binding-android-arm-eabi@0.112.0':
+    resolution: {integrity: sha512-r4LuBaPnOAi0eUOBNi880Fm2tO2omH7N1FRrL6+nyz/AjQ+QPPLtoyZJva0O+sKi1buyN/7IzM5p9m+5ANSDbg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [android]
+
+  '@oxc-transform/binding-android-arm-eabi@0.117.0':
+    resolution: {integrity: sha512-17giX7h5VR9Eodru4OoSCFdgwLFIaUxeEn8JWe0vMZrAuRbT9NiDTy5dXdbGQBoO8aXPkbGS38FGlvbi31aujw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [android]
+
+  '@oxc-transform/binding-android-arm64@0.112.0':
+    resolution: {integrity: sha512-ve46vQcQrY8eGe8990VSlS9gkD+AogJqbtfOkeua+5sQGQTDgeIRRxOm7ktCo19uZc2bEBwXRJITgosd+NRVmQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [android]
+
+  '@oxc-transform/binding-android-arm64@0.117.0':
+    resolution: {integrity: sha512-1LrDd1CPochtLx04pAafdah6QtOQQj0/Evttevi+0u8rCI5FKucIG7pqBHkIQi/y7pycFYIj+GebhET80maeUg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [android]
+
+  '@oxc-transform/binding-darwin-arm64@0.112.0':
+    resolution: {integrity: sha512-ddbmLU3Tr+i7MOynfwAXxUXud3SjJKlv7XNjaq08qiI8Av/QvhXVGc2bMhXkWQSMSBUeTDoiughKjK+Zsb6y/A==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@oxc-transform/binding-darwin-arm64@0.117.0':
+    resolution: {integrity: sha512-K1Xo52xJOvFfHSkz2ax9X5Qsku23RCfTIPbHZWdUCAQ1TQooI+sFcewSubhVUJ4DVK12/tYT//XXboumin+FHA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@oxc-transform/binding-darwin-x64@0.112.0':
+    resolution: {integrity: sha512-TKvmNw96jQZPqYb4pRrzLFDailNB3YS14KNn+x2hwRbqc6CqY96S9PYwyOpVpYdxfoRjYO9WgX9SoS+62a1DPA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@oxc-transform/binding-darwin-x64@0.117.0':
+    resolution: {integrity: sha512-ftFT/8Laolfq49mRRWLkIhd1AbJ0MI5bW3LwddvdoAg9zXwkx4qhzTYyBPRZhvXWftts+NjlHfHsXCOqI4tPtw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@oxc-transform/binding-freebsd-x64@0.112.0':
+    resolution: {integrity: sha512-YPMkSCDaelO8HHYRMYjm+Q+IfkfIbdtQzwPuasItYkq8UUkNeHNPheNh2JkvQa3c+io3E9ePOgHQ2yihpk7o/Q==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@oxc-transform/binding-freebsd-x64@0.117.0':
+    resolution: {integrity: sha512-QDRyw0atg9BMnwOwnJeW6REzWPLEjiWtsCc2Sj612F1hCdvP+n0L3o8sHinEWM+BiOkOYtUxHA69WjUslc3G+g==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@oxc-transform/binding-linux-arm-gnueabihf@0.112.0':
+    resolution: {integrity: sha512-nA7kzQGNEpuTRknst/IJ3l8hqmDmEda3aun6jkXgp7gKxESjuHeaNH04mKISxvJ7fIacvP2g/wtTSnm4u5jL8Q==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxc-transform/binding-linux-arm-gnueabihf@0.117.0':
+    resolution: {integrity: sha512-UvpvOjyQVgiIJahIpMT0qAsLJT8O1ibHTBgXGOsZkQgw1xmjARPQ07dpRcucPPn6cqCF3wrxfbqtr2vFHaMkdA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxc-transform/binding-linux-arm-musleabihf@0.112.0':
+    resolution: {integrity: sha512-w8GuLmckKlGc3YujaZKhtbFxziCcosvM2l9GnQjCb/yENWLGDiyQOy0BTAgPGdJwpYTiOeJblEXSuXYvlE1Ong==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxc-transform/binding-linux-arm-musleabihf@0.117.0':
+    resolution: {integrity: sha512-cIhztGFjKk8ngP+/7EPkEhzWMGr2neezxgWirSn/f/MirjH234oHHGJ2diKIbGQEsy0aOuJMTkL9NLfzfmH51A==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxc-transform/binding-linux-arm64-gnu@0.112.0':
+    resolution: {integrity: sha512-9LwwGnJ8+WT0rXcrI8M0RJtDNt91eMqcDPPEvJxhRFHIMcHTy5D5xT+fOl3Us0yMqKo3HUWkbfUYqAp4GoZ3Jw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-transform/binding-linux-arm64-gnu@0.117.0':
+    resolution: {integrity: sha512-mXbDfvDN0RZVg7v4LohNzU0kK3fMAZgkUKTkpFVgxEvzibEG5VpSznkypUwHI4a8U8pz+K6mGaLetX3Xt+CvvA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-transform/binding-linux-arm64-musl@0.112.0':
+    resolution: {integrity: sha512-Lg6VOuSd3oXv7J0eGywgqh/086h+qQzIBOD+47pYKMTTJcbDe+f3h/RgGoMKJE5HhiwT5sH1aGEJfIfaYUiVSw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-transform/binding-linux-arm64-musl@0.117.0':
+    resolution: {integrity: sha512-ykxpPQp0eAcSmhy0Y3qKvdanHY4d8THPonDfmCoktUXb6r0X6qnjpJB3V+taN1wevW55bOEZd97kxtjTKjqhmg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-transform/binding-linux-ppc64-gnu@0.112.0':
+    resolution: {integrity: sha512-PXzmj82o1moA4IGphYImTRgc2youTi4VRfyFX3CHwLjxPcQ5JtcsgbDt4QUdOzXZ+zC07s5jf2ZzhRapEOlj2w==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-transform/binding-linux-ppc64-gnu@0.117.0':
+    resolution: {integrity: sha512-Rvspti4Kr7eq6zSrURK5WjscfWQPvmy/KjJZV45neRKW8RLonE3r9+NgrwSLGoHvQ3F24fbqlkplox1RtlhH5A==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-transform/binding-linux-riscv64-gnu@0.112.0':
+    resolution: {integrity: sha512-vhJsMsVH/6xwa3bt1LGts33FXUkGjaEGDwsRyp4lIfOjSfQVWMtCmWMFNaA0dW9FVWdD2Gt2fSFBSZ+azDxlpg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-transform/binding-linux-riscv64-gnu@0.117.0':
+    resolution: {integrity: sha512-Dr2ZW9ZZ4l1eQ5JUEUY3smBh4JFPCPuybWaDZTLn3ADZjyd8ZtNXEjeMT8rQbbhbgSL9hEgbwaqraole3FNThQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-transform/binding-linux-riscv64-musl@0.112.0':
+    resolution: {integrity: sha512-cXWFb7z+2IjFUEcXtRwluq9oEG5qnyFCjiu3SWrgYNcWwPdHusv3I/7K5/CTbbi4StoZ5txbi7/iSfDHNyWuRw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-transform/binding-linux-riscv64-musl@0.117.0':
+    resolution: {integrity: sha512-oD1Bnes1bIC3LVBSrWEoSUBj6fvatESPwAVWfJVGVQlqWuOs/ZBn1e4Nmbipo3KGPHK7DJY75r/j7CQCxhrOFQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-transform/binding-linux-s390x-gnu@0.112.0':
+    resolution: {integrity: sha512-eEFu4SRqJTJ20/88KRWmp+jpHKAw0Y1DsnSgpEeXyBIIcsOaLIUMU/TfYWUmqRbvbMV9rmOmI3kp5xWYUq6kSQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-transform/binding-linux-s390x-gnu@0.117.0':
+    resolution: {integrity: sha512-qT//IAPLvse844t99Kff5j055qEbXfwzWgvCMb0FyjisnB8foy25iHZxZIocNBe6qwrCYWUP1M8rNrB/WyfS1Q==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-transform/binding-linux-x64-gnu@0.112.0':
+    resolution: {integrity: sha512-ST1MDT+TlOyZ1c5btrGinRSUW2Jf4Pa+0gdKwsyjDSOC3dxy2ZNkN3mosTf4ywc3J+mxfYKqtjs7zSwHz03ILA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-transform/binding-linux-x64-gnu@0.117.0':
+    resolution: {integrity: sha512-2YEO5X+KgNzFqRVO5dAkhjcI5gwxus4NSWVl/+cs2sI6P0MNPjqE3VWPawl4RTC11LvetiiZdHcujUCPM8aaUw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@oxc-transform/binding-linux-x64-musl@0.112.0':
+    resolution: {integrity: sha512-ISQoA3pD4cyTGpf9sXXeerH6pL2L6EIpdy6oAy2ttkswyVFDyQNVOVIGIdLZDgbpmqGljxZnWqt/J/N68pQaig==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-transform/binding-linux-x64-musl@0.117.0':
+    resolution: {integrity: sha512-3wqWbTSaIFZvDr1aqmTul4cg8PRWYh6VC52E8bLI7ytgS/BwJLW+sDUU2YaGIds4sAf/1yKeJRmudRCDPW9INg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@oxc-transform/binding-openharmony-arm64@0.112.0':
+    resolution: {integrity: sha512-UOGVrGIv7yLJovyEXEyUTADuLq98vd/cbMHFLJweRXD+11I8Tn4jASi4WzdsN8C3BVYGRHrXH2NlSBmhz33a4g==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@oxc-transform/binding-openharmony-arm64@0.117.0':
+    resolution: {integrity: sha512-Ebxx6NPqhzlrjvx4+PdSqbOq+li0f7X59XtJljDghkbJsbnkHvhLmPR09ifHt5X32UlZN63ekjwcg/nbmHLLlA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@oxc-transform/binding-wasm32-wasi@0.112.0':
+    resolution: {integrity: sha512-XIX7Gpq9koAvzBVHDlVFHM79r5uOVK6kTEsdsN4qaajpjkgtv4tdsAOKIYK6l7fUbsbE6xS+6w1+yRFrDeC1kg==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+
+  '@oxc-transform/binding-wasm32-wasi@0.117.0':
+    resolution: {integrity: sha512-Nn8mmcBiQ0XKHLTb05QBlH+CDkn7jf5YDVv9FtKhy4zJT0NEU9y3dXVbfcurOpsVrG9me4ktzDQNCaAoJjUQyw==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+
+  '@oxc-transform/binding-win32-arm64-msvc@0.112.0':
+    resolution: {integrity: sha512-EgXef9kOne9BNsbYBbuRqxk2hteT0xsAGcx/VbtCBMJYNj8fANFhT271DUSOgfa4DAgrQQmsyt/Kr1aV9mpU9w==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@oxc-transform/binding-win32-arm64-msvc@0.117.0':
+    resolution: {integrity: sha512-15cbsF8diXWGnHrTsVgVeabETiT/KdMAfRAcot99xsaVecJs3pITNNjC6Qj+/TPNpehbgIFjlhhxOVSbQsTBgg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@oxc-transform/binding-win32-ia32-msvc@0.112.0':
+    resolution: {integrity: sha512-6QaB0qjNaou2YR+blncHdw7j0e26IOwOIjLbhVGDeuf9+4rjJeiqRXJ2hOtCcS4zblnao/MjdgQuZ3fM0nl+Kw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@oxc-transform/binding-win32-ia32-msvc@0.117.0':
+    resolution: {integrity: sha512-I6DkhCuFX6p9rckdWiLuZfBWrrYUC7sNX+zLaCfa5zvrPNwo1/29KkefvqXVxu3AWT/6oZAbtc0A8/mqhETJPQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@oxc-transform/binding-win32-x64-msvc@0.112.0':
+    resolution: {integrity: sha512-FRKYlY959QeqRPx9kXs0HjU2xuXPT1cdF+vvA200D9uAX/KLcC34MwRqUKTYml4kCc2Vf/P2pBR9cQuBm3zECQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [win32]
+
+  '@oxc-transform/binding-win32-x64-msvc@0.117.0':
+    resolution: {integrity: sha512-V7YzavQnYcRJBeJkp0qpb3FKrlm5I57XJetCYB4jsjStuboQmnFMZ/XQH55Szlf/kVyeU9ddQwv72gJJ5BrGjQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [win32]
+
+  '@package-json/types@0.0.12':
+    resolution: {integrity: sha512-uu43FGU34B5VM9mCNjXCwLaGHYjXdNincqKLaraaCW+7S2+SmiBg1Nv8bPnmschrIfZmfKNY9f3fC376MRrObw==}
+
+  '@parcel/watcher-android-arm64@2.5.6':
+    resolution: {integrity: sha512-YQxSS34tPF/6ZG7r/Ih9xy+kP/WwediEUsqmtf0cuCV5TPPKw/PQHRhueUo6JdeFJaqV3pyjm0GdYjZotbRt/A==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [arm64]
+    os: [android]
+
+  '@parcel/watcher-darwin-arm64@2.5.6':
+    resolution: {integrity: sha512-Z2ZdrnwyXvvvdtRHLmM4knydIdU9adO3D4n/0cVipF3rRiwP+3/sfzpAwA/qKFL6i1ModaabkU7IbpeMBgiVEA==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@parcel/watcher-darwin-x64@2.5.6':
+    resolution: {integrity: sha512-HgvOf3W9dhithcwOWX9uDZyn1lW9R+7tPZ4sug+NGrGIo4Rk1hAXLEbcH1TQSqxts0NYXXlOWqVpvS1SFS4fRg==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@parcel/watcher-freebsd-x64@2.5.6':
+    resolution: {integrity: sha512-vJVi8yd/qzJxEKHkeemh7w3YAn6RJCtYlE4HPMoVnCpIXEzSrxErBW5SJBgKLbXU3WdIpkjBTeUNtyBVn8TRng==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@parcel/watcher-linux-arm-glibc@2.5.6':
+    resolution: {integrity: sha512-9JiYfB6h6BgV50CCfasfLf/uvOcJskMSwcdH1PHH9rvS1IrNy8zad6IUVPVUfmXr+u+Km9IxcfMLzgdOudz9EQ==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@parcel/watcher-linux-arm-musl@2.5.6':
+    resolution: {integrity: sha512-Ve3gUCG57nuUUSyjBq/MAM0CzArtuIOxsBdQ+ftz6ho8n7s1i9E1Nmk/xmP323r2YL0SONs1EuwqBp2u1k5fxg==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [arm]
+    os: [linux]
+    libc: [musl]
+
+  '@parcel/watcher-linux-arm64-glibc@2.5.6':
+    resolution: {integrity: sha512-f2g/DT3NhGPdBmMWYoxixqYr3v/UXcmLOYy16Bx0TM20Tchduwr4EaCbmxh1321TABqPGDpS8D/ggOTaljijOA==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@parcel/watcher-linux-arm64-musl@2.5.6':
+    resolution: {integrity: sha512-qb6naMDGlbCwdhLj6hgoVKJl2odL34z2sqkC7Z6kzir8b5W65WYDpLB6R06KabvZdgoHI/zxke4b3zR0wAbDTA==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@parcel/watcher-linux-x64-glibc@2.5.6':
+    resolution: {integrity: sha512-kbT5wvNQlx7NaGjzPFu8nVIW1rWqV780O7ZtkjuWaPUgpv2NMFpjYERVi0UYj1msZNyCzGlaCWEtzc+exjMGbQ==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@parcel/watcher-linux-x64-musl@2.5.6':
+    resolution: {integrity: sha512-1JRFeC+h7RdXwldHzTsmdtYR/Ku8SylLgTU/reMuqdVD7CtLwf0VR1FqeprZ0eHQkO0vqsbvFLXUmYm/uNKJBg==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@parcel/watcher-wasm@2.5.6':
+    resolution: {integrity: sha512-byAiBZ1t3tXQvc8dMD/eoyE7lTXYorhn+6uVW5AC+JGI1KtJC/LvDche5cfUE+qiefH+Ybq0bUCJU0aB1cSHUA==}
+    engines: {node: '>= 10.0.0'}
+    bundledDependencies:
+      - napi-wasm
+
+  '@parcel/watcher-win32-arm64@2.5.6':
+    resolution: {integrity: sha512-3ukyebjc6eGlw9yRt678DxVF7rjXatWiHvTXqphZLvo7aC5NdEgFufVwjFfY51ijYEWpXbqF5jtrK275z52D4Q==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@parcel/watcher-win32-ia32@2.5.6':
+    resolution: {integrity: sha512-k35yLp1ZMwwee3Ez/pxBi5cf4AoBKYXj00CZ80jUz5h8prpiaQsiRPKQMxoLstNuqe2vR4RNPEAEcjEFzhEz/g==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [ia32]
+    os: [win32]
+
+  '@parcel/watcher-win32-x64@2.5.6':
+    resolution: {integrity: sha512-hbQlYcCq5dlAX9Qx+kFb0FHue6vbjlf0FrNzSKdYK2APUf7tGfGxQCk2ihEREmbR6ZMc0MVAD5RIX/41gpUzTw==}
+    engines: {node: '>= 10.0.0'}
+    cpu: [x64]
+    os: [win32]
+
+  '@parcel/watcher@2.5.6':
+    resolution: {integrity: sha512-tmmZ3lQxAe/k/+rNnXQRawJ4NjxO2hqiOLTHvWchtGZULp4RyFeh6aU4XdOYBFe2KE1oShQTv4AblOs2iOrNnQ==}
+    engines: {node: '>= 10.0.0'}
+
+  '@pinia/nuxt@0.11.3':
+    resolution: {integrity: sha512-7WVNHpWx4qAEzOlnyrRC88kYrwnlR/PrThWT0XI1dSNyUAXu/KBv9oR37uCgYkZroqP5jn8DfzbkNF3BtKvE9w==}
+    peerDependencies:
+      pinia: ^3.0.4
+
+  '@pkgjs/parseargs@0.11.0':
+    resolution: {integrity: sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==}
+    engines: {node: '>=14'}
+
+  '@polka/url@1.0.0-next.29':
+    resolution: {integrity: sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==}
+
+  '@poppinss/colors@4.1.6':
+    resolution: {integrity: sha512-H9xkIdFswbS8n1d6vmRd8+c10t2Qe+rZITbbDHHkQixH5+2x1FDGmi/0K+WgWiqQFKPSlIYB7jlH6Kpfn6Fleg==}
+
+  '@poppinss/dumper@0.7.0':
+    resolution: {integrity: sha512-0UTYalzk2t6S4rA2uHOz5bSSW2CHdv4vggJI6Alg90yvl0UgXs6XSXpH96OH+bRkX4J/06djv29pqXJ0lq5Kag==}
+
+  '@poppinss/exception@1.2.3':
+    resolution: {integrity: sha512-dCED+QRChTVatE9ibtoaxc+WkdzOSjYTKi/+uacHWIsfodVfpsueo3+DKpgU5Px8qXjgmXkSvhXvSCz3fnP9lw==}
+
+  '@remirror/core-constants@3.0.0':
+    resolution: {integrity: sha512-42aWfPrimMfDKDi4YegyS7x+/0tlzaqwPQCULLanv3DMIlu96KTJR0fM5isWX2UViOqlGnX6YFgqWepcX+XMNg==}
+
+  '@rolldown/pluginutils@1.0.0-rc.13':
+    resolution: {integrity: sha512-3ngTAv6F/Py35BsYbeeLeecvhMKdsKm4AoOETVhAA+Qc8nrA2I0kF7oa93mE9qnIurngOSpMnQ0x2nQY2FPviA==}
+
+  '@rolldown/pluginutils@1.0.0-rc.2':
+    resolution: {integrity: sha512-izyXV/v+cHiRfozX62W9htOAvwMo4/bXKDrQ+vom1L1qRuexPock/7VZDAhnpHCLNejd3NJ6hiab+tO0D44Rgw==}
+
+  '@rollup/plugin-alias@6.0.0':
+    resolution: {integrity: sha512-tPCzJOtS7uuVZd+xPhoy5W4vThe6KWXNmsFCNktaAh5RTqcLiSfT4huPQIXkgJ6YCOjJHvecOAzQxLFhPxKr+g==}
+    engines: {node: '>=20.19.0'}
+    peerDependencies:
+      rollup: '>=4.0.0'
+    peerDependenciesMeta:
+      rollup:
+        optional: true
+
+  '@rollup/plugin-commonjs@29.0.2':
+    resolution: {integrity: sha512-S/ggWH1LU7jTyi9DxZOKyxpVd4hF/OZ0JrEbeLjXk/DFXwRny0tjD2c992zOUYQobLrVkRVMDdmHP16HKP7GRg==}
+    engines: {node: '>=16.0.0 || 14 >= 14.17'}
+    peerDependencies:
+      rollup: ^2.68.0||^3.0.0||^4.0.0
+    peerDependenciesMeta:
+      rollup:
+        optional: true
+
+  '@rollup/plugin-inject@5.0.5':
+    resolution: {integrity: sha512-2+DEJbNBoPROPkgTDNe8/1YXWcqxbN5DTjASVIOx8HS+pITXushyNiBV56RB08zuptzz8gT3YfkqriTBVycepg==}
+    engines: {node: '>=14.0.0'}
+    peerDependencies:
+      rollup: ^1.20.0||^2.0.0||^3.0.0||^4.0.0
+    peerDependenciesMeta:
+      rollup:
+        optional: true
+
+  '@rollup/plugin-json@6.1.0':
+    resolution: {integrity: sha512-EGI2te5ENk1coGeADSIwZ7G2Q8CJS2sF120T7jLw4xFw9n7wIOXHo+kIYRAoVpJAN+kmqZSoO3Fp4JtoNF4ReA==}
+    engines: {node: '>=14.0.0'}
+    peerDependencies:
+      rollup: ^1.20.0||^2.0.0||^3.0.0||^4.0.0
+    peerDependenciesMeta:
+      rollup:
+        optional: true
+
+  '@rollup/plugin-node-resolve@16.0.3':
+    resolution: {integrity: sha512-lUYM3UBGuM93CnMPG1YocWu7X802BrNF3jW2zny5gQyLQgRFJhV1Sq0Zi74+dh/6NBx1DxFC4b4GXg9wUCG5Qg==}
+    engines: {node: '>=14.0.0'}
+    peerDependencies:
+      rollup: ^2.78.0||^3.0.0||^4.0.0
+    peerDependenciesMeta:
+      rollup:
+        optional: true
+
+  '@rollup/plugin-replace@6.0.3':
+    resolution: {integrity: sha512-J4RZarRvQAm5IF0/LwUUg+obsm+xZhYnbMXmXROyoSE1ATJe3oXSb9L5MMppdxP2ylNSjv6zFBwKYjcKMucVfA==}
+    engines: {node: '>=14.0.0'}
+    peerDependencies:
+      rollup: ^1.20.0||^2.0.0||^3.0.0||^4.0.0
+    peerDependenciesMeta:
+      rollup:
+        optional: true
+
+  '@rollup/plugin-terser@1.0.0':
+    resolution: {integrity: sha512-FnCxhTBx6bMOYQrar6C8h3scPt8/JwIzw3+AJ2K++6guogH5fYaIFia+zZuhqv0eo1RN7W1Pz630SyvLbDjhtQ==}
+    engines: {node: '>=20.0.0'}
+    peerDependencies:
+      rollup: ^2.0.0||^3.0.0||^4.0.0
+    peerDependenciesMeta:
+      rollup:
+        optional: true
+
+  '@rollup/plugin-yaml@4.1.2':
+    resolution: {integrity: sha512-RpupciIeZMUqhgFE97ba0s98mOFS7CWzN3EJNhJkqSv9XLlWYtwVdtE6cDw6ASOF/sZVFS7kRJXftaqM2Vakdw==}
+    engines: {node: '>=14.0.0'}
+    peerDependencies:
+      rollup: ^1.20.0||^2.0.0||^3.0.0||^4.0.0
+    peerDependenciesMeta:
+      rollup:
+        optional: true
+
+  '@rollup/pluginutils@5.3.0':
+    resolution: {integrity: sha512-5EdhGZtnu3V88ces7s53hhfK5KSASnJZv8Lulpc04cWO3REESroJXg73DFsOmgbU2BhwV0E20bu2IDZb3VKW4Q==}
+    engines: {node: '>=14.0.0'}
+    peerDependencies:
+      rollup: ^1.20.0||^2.0.0||^3.0.0||^4.0.0
+    peerDependenciesMeta:
+      rollup:
+        optional: true
+
+  '@rollup/rollup-android-arm-eabi@4.60.1':
+    resolution: {integrity: sha512-d6FinEBLdIiK+1uACUttJKfgZREXrF0Qc2SmLII7W2AD8FfiZ9Wjd+rD/iRuf5s5dWrr1GgwXCvPqOuDquOowA==}
+    cpu: [arm]
+    os: [android]
+
+  '@rollup/rollup-android-arm64@4.60.1':
+    resolution: {integrity: sha512-YjG/EwIDvvYI1YvYbHvDz/BYHtkY4ygUIXHnTdLhG+hKIQFBiosfWiACWortsKPKU/+dUwQQCKQM3qrDe8c9BA==}
+    cpu: [arm64]
+    os: [android]
+
+  '@rollup/rollup-darwin-arm64@4.60.1':
+    resolution: {integrity: sha512-mjCpF7GmkRtSJwon+Rq1N8+pI+8l7w5g9Z3vWj4T7abguC4Czwi3Yu/pFaLvA3TTeMVjnu3ctigusqWUfjZzvw==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@rollup/rollup-darwin-x64@4.60.1':
+    resolution: {integrity: sha512-haZ7hJ1JT4e9hqkoT9R/19XW2QKqjfJVv+i5AGg57S+nLk9lQnJ1F/eZloRO3o9Scy9CM3wQ9l+dkXtcBgN5Ew==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@rollup/rollup-freebsd-arm64@4.60.1':
+    resolution: {integrity: sha512-czw90wpQq3ZsAVBlinZjAYTKduOjTywlG7fEeWKUA7oCmpA8xdTkxZZlwNJKWqILlq0wehoZcJYfBvOyhPTQ6w==}
+    cpu: [arm64]
+    os: [freebsd]
+
+  '@rollup/rollup-freebsd-x64@4.60.1':
+    resolution: {integrity: sha512-KVB2rqsxTHuBtfOeySEyzEOB7ltlB/ux38iu2rBQzkjbwRVlkhAGIEDiiYnO2kFOkJp+Z7pUXKyrRRFuFUKt+g==}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@rollup/rollup-linux-arm-gnueabihf@4.60.1':
+    resolution: {integrity: sha512-L+34Qqil+v5uC0zEubW7uByo78WOCIrBvci69E7sFASRl0X7b/MB6Cqd1lky/CtcSVTydWa2WZwFuWexjS5o6g==}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@rollup/rollup-linux-arm-musleabihf@4.60.1':
+    resolution: {integrity: sha512-n83O8rt4v34hgFzlkb1ycniJh7IR5RCIqt6mz1VRJD6pmhRi0CXdmfnLu9dIUS6buzh60IvACM842Ffb3xd6Gg==}
+    cpu: [arm]
+    os: [linux]
+    libc: [musl]
+
+  '@rollup/rollup-linux-arm64-gnu@4.60.1':
+    resolution: {integrity: sha512-Nql7sTeAzhTAja3QXeAI48+/+GjBJ+QmAH13snn0AJSNL50JsDqotyudHyMbO2RbJkskbMbFJfIJKWA6R1LCJQ==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@rollup/rollup-linux-arm64-musl@4.60.1':
+    resolution: {integrity: sha512-+pUymDhd0ys9GcKZPPWlFiZ67sTWV5UU6zOJat02M1+PiuSGDziyRuI/pPue3hoUwm2uGfxdL+trT6Z9rxnlMA==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@rollup/rollup-linux-loong64-gnu@4.60.1':
+    resolution: {integrity: sha512-VSvgvQeIcsEvY4bKDHEDWcpW4Yw7BtlKG1GUT4FzBUlEKQK0rWHYBqQt6Fm2taXS+1bXvJT6kICu5ZwqKCnvlQ==}
+    cpu: [loong64]
+    os: [linux]
+    libc: [glibc]
+
+  '@rollup/rollup-linux-loong64-musl@4.60.1':
+    resolution: {integrity: sha512-4LqhUomJqwe641gsPp6xLfhqWMbQV04KtPp7/dIp0nzPxAkNY1AbwL5W0MQpcalLYk07vaW9Kp1PBhdpZYYcEw==}
+    cpu: [loong64]
+    os: [linux]
+    libc: [musl]
+
+  '@rollup/rollup-linux-ppc64-gnu@4.60.1':
+    resolution: {integrity: sha512-tLQQ9aPvkBxOc/EUT6j3pyeMD6Hb8QF2BTBnCQWP/uu1lhc9AIrIjKnLYMEroIz/JvtGYgI9dF3AxHZNaEH0rw==}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@rollup/rollup-linux-ppc64-musl@4.60.1':
+    resolution: {integrity: sha512-RMxFhJwc9fSXP6PqmAz4cbv3kAyvD1etJFjTx4ONqFP9DkTkXsAMU4v3Vyc5BgzC+anz7nS/9tp4obsKfqkDHg==}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [musl]
+
+  '@rollup/rollup-linux-riscv64-gnu@4.60.1':
+    resolution: {integrity: sha512-QKgFl+Yc1eEk6MmOBfRHYF6lTxiiiV3/z/BRrbSiW2I7AFTXoBFvdMEyglohPj//2mZS4hDOqeB0H1ACh3sBbg==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@rollup/rollup-linux-riscv64-musl@4.60.1':
+    resolution: {integrity: sha512-RAjXjP/8c6ZtzatZcA1RaQr6O1TRhzC+adn8YZDnChliZHviqIjmvFwHcxi4JKPSDAt6Uhf/7vqcBzQJy0PDJg==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [musl]
+
+  '@rollup/rollup-linux-s390x-gnu@4.60.1':
+    resolution: {integrity: sha512-wcuocpaOlaL1COBYiA89O6yfjlp3RwKDeTIA0hM7OpmhR1Bjo9j31G1uQVpDlTvwxGn2nQs65fBFL5UFd76FcQ==}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@rollup/rollup-linux-x64-gnu@4.60.1':
+    resolution: {integrity: sha512-77PpsFQUCOiZR9+LQEFg9GClyfkNXj1MP6wRnzYs0EeWbPcHs02AXu4xuUbM1zhwn3wqaizle3AEYg5aeoohhg==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@rollup/rollup-linux-x64-musl@4.60.1':
+    resolution: {integrity: sha512-5cIATbk5vynAjqqmyBjlciMJl1+R/CwX9oLk/EyiFXDWd95KpHdrOJT//rnUl4cUcskrd0jCCw3wpZnhIHdD9w==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@rollup/rollup-openbsd-x64@4.60.1':
+    resolution: {integrity: sha512-cl0w09WsCi17mcmWqqglez9Gk8isgeWvoUZ3WiJFYSR3zjBQc2J5/ihSjpl+VLjPqjQ/1hJRcqBfLjssREQILw==}
+    cpu: [x64]
+    os: [openbsd]
+
+  '@rollup/rollup-openharmony-arm64@4.60.1':
+    resolution: {integrity: sha512-4Cv23ZrONRbNtbZa37mLSueXUCtN7MXccChtKpUnQNgF010rjrjfHx3QxkS2PI7LqGT5xXyYs1a7LbzAwT0iCA==}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@rollup/rollup-win32-arm64-msvc@4.60.1':
+    resolution: {integrity: sha512-i1okWYkA4FJICtr7KpYzFpRTHgy5jdDbZiWfvny21iIKky5YExiDXP+zbXzm3dUcFpkEeYNHgQ5fuG236JPq0g==}
+    cpu: [arm64]
+    os: [win32]
+
+  '@rollup/rollup-win32-ia32-msvc@4.60.1':
+    resolution: {integrity: sha512-u09m3CuwLzShA0EYKMNiFgcjjzwqtUMLmuCJLeZWjjOYA3IT2Di09KaxGBTP9xVztWyIWjVdsB2E9goMjZvTQg==}
+    cpu: [ia32]
+    os: [win32]
+
+  '@rollup/rollup-win32-x64-gnu@4.60.1':
+    resolution: {integrity: sha512-k+600V9Zl1CM7eZxJgMyTUzmrmhB/0XZnF4pRypKAlAgxmedUA+1v9R+XOFv56W4SlHEzfeMtzujLJD22Uz5zg==}
+    cpu: [x64]
+    os: [win32]
+
+  '@rollup/rollup-win32-x64-msvc@4.60.1':
+    resolution: {integrity: sha512-lWMnixq/QzxyhTV6NjQJ4SFo1J6PvOX8vUx5Wb4bBPsEb+8xZ89Bz6kOXpfXj9ak9AHTQVQzlgzBEc1SyM27xQ==}
+    cpu: [x64]
+    os: [win32]
+
+  '@simple-git/args-pathspec@1.0.1':
+    resolution: {integrity: sha512-lpHyxg2BpMT17oj2kyTfQefuCi8S5SMF2QTIm9IlWCTyqAzDa5sfdL725a4QqP//ReZYyT+Ym7cE8DxFEIryOw==}
+
+  '@simple-git/argv-parser@1.0.2':
+    resolution: {integrity: sha512-2ePPyzXESoRsPfw4IN6LEXBh3M8Y4gcz3NZ6IBsPb8hISW9rT9WgUeRjL6Xs+zK603DY/jTkQvWB9O71/9mWYg==}
+
+  '@sindresorhus/base62@1.0.0':
+    resolution: {integrity: sha512-TeheYy0ILzBEI/CO55CP6zJCSdSWeRtGnHy8U8dWSUH4I68iqTsy7HkMktR4xakThc9jotkPQUXT4ITdbV7cHA==}
+    engines: {node: '>=18'}
+
+  '@sindresorhus/is@7.2.0':
+    resolution: {integrity: sha512-P1Cz1dWaFfR4IR+U13mqqiGsLFf1KbayybWwdd2vfctdV6hDpUkgCY0nKOLLTMSoRd/jJNjtbqzf13K8DCCXQw==}
+    engines: {node: '>=18'}
+
+  '@sindresorhus/merge-streams@4.0.0':
+    resolution: {integrity: sha512-tlqY9xq5ukxTUZBmoOp+m61cqwQD5pHJtFY3Mn8CA8ps6yghLH/Hw8UPdqg4OLmFW3IFlcXnQNmo/dh8HzXYIQ==}
+    engines: {node: '>=18'}
+
+  '@speed-highlight/core@1.2.15':
+    resolution: {integrity: sha512-BMq1K3DsElxDWawkX6eLg9+CKJrTVGCBAWVuHXVUV2u0s2711qiChLSId6ikYPfxhdYocLNt3wWwSvDiTvFabw==}
+
+  '@standard-schema/spec@1.1.0':
+    resolution: {integrity: sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==}
+
+  '@stylistic/eslint-plugin@5.10.0':
+    resolution: {integrity: sha512-nPK52ZHvot8Ju/0A4ucSX1dcPV2/1clx0kLcH5wDmrE4naKso7TUC/voUyU1O9OTKTrR6MYip6LP0ogEMQ9jPQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^9.0.0 || ^10.0.0
+
+  '@swc/helpers@0.5.21':
+    resolution: {integrity: sha512-jI/VAmtdjB/RnI8GTnokyX7Ug8c+g+ffD6QRLa6XQewtnGyukKkKSk3wLTM3b5cjt1jNh9x0jfVlagdN2gDKQg==}
+
+  '@tailwindcss/node@4.2.2':
+    resolution: {integrity: sha512-pXS+wJ2gZpVXqFaUEjojq7jzMpTGf8rU6ipJz5ovJV6PUGmlJ+jvIwGrzdHdQ80Sg+wmQxUFuoW1UAAwHNEdFA==}
+
+  '@tailwindcss/oxide-android-arm64@4.2.2':
+    resolution: {integrity: sha512-dXGR1n+P3B6748jZO/SvHZq7qBOqqzQ+yFrXpoOWWALWndF9MoSKAT3Q0fYgAzYzGhxNYOoysRvYlpixRBBoDg==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [android]
+
+  '@tailwindcss/oxide-darwin-arm64@4.2.2':
+    resolution: {integrity: sha512-iq9Qjr6knfMpZHj55/37ouZeykwbDqF21gPFtfnhCCKGDcPI/21FKC9XdMO/XyBM7qKORx6UIhGgg6jLl7BZlg==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@tailwindcss/oxide-darwin-x64@4.2.2':
+    resolution: {integrity: sha512-BlR+2c3nzc8f2G639LpL89YY4bdcIdUmiOOkv2GQv4/4M0vJlpXEa0JXNHhCHU7VWOKWT/CjqHdTP8aUuDJkuw==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@tailwindcss/oxide-freebsd-x64@4.2.2':
+    resolution: {integrity: sha512-YUqUgrGMSu2CDO82hzlQ5qSb5xmx3RUrke/QgnoEx7KvmRJHQuZHZmZTLSuuHwFf0DJPybFMXMYf+WJdxHy/nQ==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.2.2':
+    resolution: {integrity: sha512-FPdhvsW6g06T9BWT0qTwiVZYE2WIFo2dY5aCSpjG/S/u1tby+wXoslXS0kl3/KXnULlLr1E3NPRRw0g7t2kgaQ==}
+    engines: {node: '>= 20'}
+    cpu: [arm]
+    os: [linux]
+
+  '@tailwindcss/oxide-linux-arm64-gnu@4.2.2':
+    resolution: {integrity: sha512-4og1V+ftEPXGttOO7eCmW7VICmzzJWgMx+QXAJRAhjrSjumCwWqMfkDrNu1LXEQzNAwz28NCUpucgQPrR4S2yw==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@tailwindcss/oxide-linux-arm64-musl@4.2.2':
+    resolution: {integrity: sha512-oCfG/mS+/+XRlwNjnsNLVwnMWYH7tn/kYPsNPh+JSOMlnt93mYNCKHYzylRhI51X+TbR+ufNhhKKzm6QkqX8ag==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@tailwindcss/oxide-linux-x64-gnu@4.2.2':
+    resolution: {integrity: sha512-rTAGAkDgqbXHNp/xW0iugLVmX62wOp2PoE39BTCGKjv3Iocf6AFbRP/wZT/kuCxC9QBh9Pu8XPkv/zCZB2mcMg==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@tailwindcss/oxide-linux-x64-musl@4.2.2':
+    resolution: {integrity: sha512-XW3t3qwbIwiSyRCggeO2zxe3KWaEbM0/kW9e8+0XpBgyKU4ATYzcVSMKteZJ1iukJ3HgHBjbg9P5YPRCVUxlnQ==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@tailwindcss/oxide-wasm32-wasi@4.2.2':
+    resolution: {integrity: sha512-eKSztKsmEsn1O5lJ4ZAfyn41NfG7vzCg496YiGtMDV86jz1q/irhms5O0VrY6ZwTUkFy/EKG3RfWgxSI3VbZ8Q==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+    bundledDependencies:
+      - '@napi-rs/wasm-runtime'
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+      - '@tybys/wasm-util'
+      - '@emnapi/wasi-threads'
+      - tslib
+
+  '@tailwindcss/oxide-win32-arm64-msvc@4.2.2':
+    resolution: {integrity: sha512-qPmaQM4iKu5mxpsrWZMOZRgZv1tOZpUm+zdhhQP0VhJfyGGO3aUKdbh3gDZc/dPLQwW4eSqWGrrcWNBZWUWaXQ==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@tailwindcss/oxide-win32-x64-msvc@4.2.2':
+    resolution: {integrity: sha512-1T/37VvI7WyH66b+vqHj/cLwnCxt7Qt3WFu5Q8hk65aOvlwAhs7rAp1VkulBJw/N4tMirXjVnylTR72uI0HGcA==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [win32]
+
+  '@tailwindcss/oxide@4.2.2':
+    resolution: {integrity: sha512-qEUA07+E5kehxYp9BVMpq9E8vnJuBHfJEC0vPC5e7iL/hw7HR61aDKoVoKzrG+QKp56vhNZe4qwkRmMC0zDLvg==}
+    engines: {node: '>= 20'}
+
+  '@tailwindcss/postcss@4.2.2':
+    resolution: {integrity: sha512-n4goKQbW8RVXIbNKRB/45LzyUqN451deQK0nzIeauVEqjlI49slUlgKYJM2QyUzap/PcpnS7kzSUmPb1sCRvYQ==}
+
+  '@tailwindcss/vite@4.2.2':
+    resolution: {integrity: sha512-mEiF5HO1QqCLXoNEfXVA1Tzo+cYsrqV7w9Juj2wdUFyW07JRenqMG225MvPwr3ZD9N1bFQj46X7r33iHxLUW0w==}
+    peerDependencies:
+      vite: ^5.2.0 || ^6 || ^7 || ^8
+
+  '@tanstack/table-core@8.21.3':
+    resolution: {integrity: sha512-ldZXEhOBb8Is7xLs01fR3YEc3DERiz5silj8tnGkFZytt1abEvl/GhUmCE0PMLaMPTa3Jk4HbKmRlHmu+gCftg==}
+    engines: {node: '>=12'}
+
+  '@tanstack/virtual-core@3.13.23':
+    resolution: {integrity: sha512-zSz2Z2HNyLjCplANTDyl3BcdQJc2k1+yyFoKhNRmCr7V7dY8o8q5m8uFTI1/Pg1kL+Hgrz6u3Xo6eFUB7l66cg==}
+
+  '@tanstack/vue-table@8.21.3':
+    resolution: {integrity: sha512-rusRyd77c5tDPloPskctMyPLFEQUeBzxdQ+2Eow4F7gDPlPOB1UnnhzfpdvqZ8ZyX2rRNGmqNnQWm87OI2OQPw==}
+    engines: {node: '>=12'}
+    peerDependencies:
+      vue: '>=3.2'
+
+  '@tanstack/vue-virtual@3.13.23':
+    resolution: {integrity: sha512-b5jPluAR6U3eOq6GWAYSpj3ugnAIZgGR0e6aGAgyRse0Yu6MVQQ0ZWm9SArSXWtageogn6bkVD8D//c4IjW3xQ==}
+    peerDependencies:
+      vue: ^2.7.0 || ^3.0.0
+
+  '@tiptap/core@3.22.2':
+    resolution: {integrity: sha512-atq35NkpeEphH6vNYJ0pTLLBA73FAbvTV9Ovd3AaTC5s99/KF5Q86zVJXvml8xPRcMGM6dLp+eSSd06oTscMSA==}
+    peerDependencies:
+      '@tiptap/pm': ^3.22.2
+
+  '@tiptap/extension-blockquote@3.22.2':
+    resolution: {integrity: sha512-iTdlmGFcgxi4LKaOW2Rc9/yD83qTXgRm5BN3vCHWy5+TbEnReYxYqU5qKsbtTbKy30sO8TJTdAXTZ29uomShQQ==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extension-bold@3.22.2':
+    resolution: {integrity: sha512-bqsPJyKcT/RWse4e16U2EKhraR8a2+98TUuk1amG3yCyFJZStoO/j+pN0IqZdZZjr3WtxFyvwWp7Kc59UN+jUA==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extension-bubble-menu@3.22.2':
+    resolution: {integrity: sha512-5hbyDOSkJwA2uh0v9Mm0Dd9bb9inx6tHBEDSH2tCB9Rm23poz3yOreB7SNX8xDMe5L0/PQesfWC14RitcmhKPg==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+
+  '@tiptap/extension-bullet-list@3.22.2':
+    resolution: {integrity: sha512-llrTJnA72RGcWLLO+ro0QN4sjHynhaCerhpV+GZE/ATd8BqV/ekQFdBLJrvC/09My2XQfCwLsyCh92NPXUdELA==}
+    peerDependencies:
+      '@tiptap/extension-list': ^3.22.2
+
+  '@tiptap/extension-code-block@3.22.2':
+    resolution: {integrity: sha512-PEwFlDyvtKF19WCrOFg77qJV9WqhvjCY4ZoXlHP9Hx0KTcOA8W39mtw8d4NWU5pLRK94yHKF1DVVL8UUkEOnww==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+
+  '@tiptap/extension-code@3.22.2':
+    resolution: {integrity: sha512-iYFY+yzfYA9MKt7nupyW/PzqL9XC2D0mC8l1z2Y10i0/fGL8NbqIYjhNUAyXGqH3QWcI+DirI66842y2OadPOg==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extension-collaboration@3.22.2':
+    resolution: {integrity: sha512-+viAk2EVoYgJEmJpvnT1NBCK+intvwHEMp7T7luYffkQz8irGKF/7YcgauXp5NBLPTsnIzDWQuY571mo8XMcKg==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+      '@tiptap/y-tiptap': ^3.0.2
+      yjs: ^13
+
+  '@tiptap/extension-document@3.22.2':
+    resolution: {integrity: sha512-yPw9pQeVC4QDh86TuyKCZxxM4g0NAw7mEtGnAo6EpxaBQr1wyBr9yFpys+QTsQpRTmyTf1VHp4iTTLuWHMljIw==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extension-drag-handle-vue-3@3.22.2':
+    resolution: {integrity: sha512-AuX2TTXgY/Z7eO+2nR4YJq2ibzKl9zjmmLFBPXlaBmFtDeL5ks5SOkMdGYyJp766VTuT3AWnq/07evwYB88jzA==}
+    peerDependencies:
+      '@tiptap/extension-drag-handle': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+      '@tiptap/vue-3': ^3.22.2
+      vue: ^3.0.0
+
+  '@tiptap/extension-drag-handle@3.22.2':
+    resolution: {integrity: sha512-9L2krYNe+ZxI7hULAuxE0i9wKMxL8eIoiH866hrOenb2C8PySQLWy/BjWwu3Z6fBFwCG+29wiMeRL7WE128oxg==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/extension-collaboration': ^3.22.2
+      '@tiptap/extension-node-range': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+      '@tiptap/y-tiptap': ^3.0.2
+
+  '@tiptap/extension-dropcursor@3.22.2':
+    resolution: {integrity: sha512-sDv3fv4LtX0X4nqwh9Gn3C/aZXT+C2JlK7tJovPOpaYP/a6hr03Sn35X5moAfgMCSiWFygEvlTriqwmCsJuxog==}
+    peerDependencies:
+      '@tiptap/extensions': ^3.22.2
+
+  '@tiptap/extension-floating-menu@3.22.2':
+    resolution: {integrity: sha512-r0ZTeh9rNtj9Api+G0YyaB+tAKPDn7aYWg+qSrmAC5EyUPee6Zjn3zlw0q4renCeQflvNRK20xHM8zokC41jOA==}
+    peerDependencies:
+      '@floating-ui/dom': ^1.0.0
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+
+  '@tiptap/extension-gapcursor@3.22.2':
+    resolution: {integrity: sha512-rR2OLrl/k2kj7xehaZHq0Y7T+1wy2DOTabir9LsTrktTFEcklrh9qY1KC6rEBkwMKaWrmignR1l39kS6RlKFNw==}
+    peerDependencies:
+      '@tiptap/extensions': ^3.22.2
+
+  '@tiptap/extension-hard-break@3.22.2':
+    resolution: {integrity: sha512-ChsoqF4XRp6EWatTRlXL4LMFh/ggwRVCyt09brSfjJV5knFaXlECSa5/+rKLMLMULaj6dVlJqoAD15exgu2HHA==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extension-heading@3.22.2':
+    resolution: {integrity: sha512-QPHLef+ikAyf7RVc4EdGeKxH4OEGb3ueCEwJ41RcYPtZ1BX9ueei7FC936guTdL1U7w3vQ65qfy86HznzkYgvw==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extension-horizontal-rule@3.22.2':
+    resolution: {integrity: sha512-Oz8KN5KJAWV1mFNE9UIWXdMD6xa5zPf/0yLsT8V4sgaRm+VsdFKllN58BY9qCZf/kIZbaOez5KkaoeAcm0MAZg==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+
+  '@tiptap/extension-image@3.22.2':
+    resolution: {integrity: sha512-xFCgwreF6sn5mQ/hFDQKn41NIbbfks/Ou9j763Djf3pWsastgzdgwifQOpXVI3aSsqlKUO3o8/8R/yQczvZcwg==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extension-italic@3.22.2':
+    resolution: {integrity: sha512-fmtQu2HDnV3sOZPdz0+1lOLI7UtrIhusohJj2UwOLQxG8qqhLwbvWx2OQTlfblgY0z+CjLRr6ANbNDxOTIblfg==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extension-link@3.22.2':
+    resolution: {integrity: sha512-TXfSoKmng5pecvQUZqdsx6ICeob5V5hhYOj2vCEtjfcjWsyCndqFIl1w+Nt/yI5ehrFNOVPyj3ZvcELuuAW6pw==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+
+  '@tiptap/extension-list-item@3.22.2':
+    resolution: {integrity: sha512-Mk+iiLIFh8Pfuarr6mWfTO7QJbd2ZQd0nGNhNWXlGAO7DJCb4BP9nj4bEIJ17SbcykGRjsi4WMqY50z4MHXqKQ==}
+    peerDependencies:
+      '@tiptap/extension-list': ^3.22.2
+
+  '@tiptap/extension-list-keymap@3.22.2':
+    resolution: {integrity: sha512-TozU9V2vldMUPpTXnfLCO33EO06jLxn7uEJTMBnN4iX/dLV3cBVCbE4kHyDKS0sLd7joUeekS06vYP9uQb1hFw==}
+    peerDependencies:
+      '@tiptap/extension-list': ^3.22.2
+
+  '@tiptap/extension-list@3.22.2':
+    resolution: {integrity: sha512-Vq9xScgkA2A3Zj9dQ4WUBKK7u7UCzeSFRz9FcKTQVZHRPbZoqFGnlRUVngqsE7JXrCOthXQ1dXxgk40nAsBFRw==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+
+  '@tiptap/extension-mention@3.22.2':
+    resolution: {integrity: sha512-nWcDiIkh/V7aUZJhirimCuiWUPByiEPwdJCTgty7dbwEfZyrlldAnbzf66o3z2XKiFNeHRaOyo86XXnbY4euDw==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+      '@tiptap/suggestion': ^3.22.2
+
+  '@tiptap/extension-node-range@3.22.2':
+    resolution: {integrity: sha512-hipsIUXrU9RUcc32BLJ/mtfiCtgV35oMTMxEJTJWxJhebEw0iWd7L6cLwHbKui6HgH4W82Zo1s1Ia0Owq3Nu8w==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+
+  '@tiptap/extension-ordered-list@3.22.2':
+    resolution: {integrity: sha512-K7qxoBKmsVkAd3kW64ZRCUPFrDcNGpXRDUBx9YgAO/bTfsfxtH2oil+igsUWGXPczpP4yoHPKjTfhpBpLjGl6Q==}
+    peerDependencies:
+      '@tiptap/extension-list': ^3.22.2
+
+  '@tiptap/extension-paragraph@3.22.2':
+    resolution: {integrity: sha512-EHZZzxVhvzEPDPWtRBF1YKhB+WCUjd1C2NhjHfL3Dl71PBqM3ZWA6qN7NDGPyNyGGWauui/NR/4X+5AfPqlHyA==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extension-placeholder@3.22.2':
+    resolution: {integrity: sha512-xYw733CmSeG7MyYBDdV5NFiwlBdXXzw4Mvjb2t4QRXagkDbHeNY/LtKTcrtcMNfO4Jx0mwivGQZUIEC8oAfvxg==}
+    peerDependencies:
+      '@tiptap/extensions': ^3.22.2
+
+  '@tiptap/extension-strike@3.22.2':
+    resolution: {integrity: sha512-YFC3elKU1L8PiGbcB6tqd/7vWPF5IbydJz0POJpHzSjstX+VfT8VsvS7ubxVuSIWQ11kGkH3mzX6LX8JHsHZxg==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extension-text@3.22.2':
+    resolution: {integrity: sha512-J1w7JwijfSD7ah0WfiwZ/DVWCIGT9x369RM4RJc57i44mIBElj7tl1dh+N5KPGOXKUup4gr7sSJAE38lgeaDMg==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extension-underline@3.22.2':
+    resolution: {integrity: sha512-BaV6WOowxdkGTLWiU7DdZ3Twh633O4RGqwUM5dDas5LvaqL8AMWGTO8Wg9yAaaKXzd9MtKI1ZCqS/+MtzusgkQ==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+
+  '@tiptap/extensions@3.22.2':
+    resolution: {integrity: sha512-s7MZmm2Xdq+8feIXgY3v7gVpQ5ClqBZi20KheouS7KSbBlrY4fu2irYR1EGc6r1UUVaHMxEa+cx5knhx+mIPUw==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+
+  '@tiptap/markdown@3.22.2':
+    resolution: {integrity: sha512-ZBna+5fMeaQ8vfzXT1HmMFvLauU0xSQJTA6b+Zqvh2zbD4BWteXf3bfdTrjQqNy0S97S2wFubYruSCr2/OlllQ==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+
+  '@tiptap/pm@3.22.2':
+    resolution: {integrity: sha512-G2ENwIazoSKkAnN5MN5yN91TIZNFm6TxB74kPf3Empr2k9W51Hkcier70jHGpArhgcEaL4BVreuU1PRDRwCeGw==}
+
+  '@tiptap/starter-kit@3.22.2':
+    resolution: {integrity: sha512-+CCKX8tOQ/ZPb2k/z6em4AQCFYAcdd8+0TOzPWiuLxRyCHRPBBVhnPsXOKgKwE4OO3E8BsezquuYRYRwsyzCqg==}
+
+  '@tiptap/suggestion@3.22.2':
+    resolution: {integrity: sha512-t2GQSrF4eQyPb+KqXVfcC2cokYIDNfpLLq7B0ELlnWBJURnLOVJ2ssJ6ASI247scu9ZKPG1g5bFP4IXdBhyPgg==}
+    peerDependencies:
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+
+  '@tiptap/vue-3@3.22.2':
+    resolution: {integrity: sha512-oRJQEwcsg8LztIeuKeJea1UhIX2NtGkBDPM/biQlA3SKa/JvgNWGb0+ZJj0AWQjGhKFOoVKnfwVRysUeZeKOSg==}
+    peerDependencies:
+      '@floating-ui/dom': ^1.0.0
+      '@tiptap/core': ^3.22.2
+      '@tiptap/pm': ^3.22.2
+      vue: ^3.0.0
+
+  '@tiptap/y-tiptap@3.0.2':
+    resolution: {integrity: sha512-flMn/YW6zTbc6cvDaUPh/NfLRTXDIqgpBUkYzM74KA1snqQwhOMjnRcnpu4hDFrTnPO6QGzr99vRyXEA7M44WA==}
+    engines: {node: '>=16.0.0', npm: '>=8.0.0'}
+    peerDependencies:
+      prosemirror-model: ^1.7.1
+      prosemirror-state: ^1.2.3
+      prosemirror-view: ^1.9.10
+      y-protocols: ^1.0.1
+      yjs: ^13.5.38
+
+  '@tootallnate/once@1.1.2':
+    resolution: {integrity: sha512-RbzJvlNzmRq5c3O09UipeuXno4tA1FE6ikOjxZK0tuxVv3412l64l5t1W5pj4+rJq9vpkm/kwiR07aZXnsKPxw==}
+    engines: {node: '>= 6'}
+
+  '@tybys/wasm-util@0.10.1':
+    resolution: {integrity: sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==}
+
+  '@types/chai@5.2.3':
+    resolution: {integrity: sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==}
+
+  '@types/deep-eql@4.0.2':
+    resolution: {integrity: sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==}
+
+  '@types/esrecurse@4.3.1':
+    resolution: {integrity: sha512-xJBAbDifo5hpffDBuHl0Y8ywswbiAp/Wi7Y/GtAgSlZyIABppyurxVueOPE8LUQOxdlgi6Zqce7uoEpqNTeiUw==}
+
+  '@types/estree@1.0.8':
+    resolution: {integrity: sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==}
+
+  '@types/fs-extra@8.1.5':
+    resolution: {integrity: sha512-0dzKcwO+S8s2kuF5Z9oUWatQJj5Uq/iqphEtE3GQJVRRYm/tD1LglU2UnXi2A8jLq5umkGouOXOR9y0n613ZwQ==}
+
+  '@types/json-schema@7.0.15':
+    resolution: {integrity: sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==}
+
+  '@types/linkify-it@5.0.0':
+    resolution: {integrity: sha512-sVDA58zAw4eWAffKOaQH5/5j3XeayukzDk+ewSsnv3p4yJEZHCCzMDiZM8e0OUrRvmpGZ85jf4yDHkHsgBNr9Q==}
+
+  '@types/markdown-it@14.1.2':
+    resolution: {integrity: sha512-promo4eFwuiW+TfGxhi+0x3czqTYJkG8qB17ZUJiVF10Xm7NLVRSLUsfRTU/6h1e24VvRnXCx+hG7li58lkzog==}
+
+  '@types/mdurl@2.0.0':
+    resolution: {integrity: sha512-RGdgjQUZba5p6QEFAVx2OGb8rQDL/cPRG7GiedRzMcJ1tYnUANBncjbSB1NRGwbvjcPeikRABz2nshyPk1bhWg==}
+
+  '@types/node@25.6.0':
+    resolution: {integrity: sha512-+qIYRKdNYJwY3vRCZMdJbPLJAtGjQBudzZzdzwQYkEPQd+PJGixUL5QfvCLDaULoLv+RhT3LDkwEfKaAkgSmNQ==}
+
+  '@types/resolve@1.20.2':
+    resolution: {integrity: sha512-60BCwRFOZCQhDncwQdxxeOEEkbc5dIMccYLwbxsS4TUNeVECQ/pBJ0j09mrHOl/JJvpRPGwO9SvE4nR2Nb/a4Q==}
+
+  '@types/slice-ansi@4.0.0':
+    resolution: {integrity: sha512-+OpjSaq85gvlZAYINyzKpLeiFkSC4EsC6IIiT6v6TLSU5k5U83fHGj9Lel8oKEXM0HqgrMVCjXPDPVICtxF7EQ==}
+
+  '@types/web-bluetooth@0.0.20':
+    resolution: {integrity: sha512-g9gZnnXVq7gM7v3tJCWV/qw7w+KeOlSHAhgF9RytFyifW6AF61hdT2ucrYhPq9hLs5JIryeupHV3qGk95dH9ow==}
+
+  '@types/web-bluetooth@0.0.21':
+    resolution: {integrity: sha512-oIQLCGWtcFZy2JW77j9k8nHzAOpqMHLQejDA48XXMWH6tjCQHz5RCFz1bzsmROyL6PUm+LLnUiI4BCn221inxA==}
+
+  '@types/whatwg-mimetype@3.0.2':
+    resolution: {integrity: sha512-c2AKvDT8ToxLIOUlN51gTiHXflsfIFisS4pO7pDPoKouJCESkhZnEy623gwP9laCy5lnLDAw1vAzu2vM2YLOrA==}
+
+  '@types/ws@8.18.1':
+    resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==}
+
+  '@typescript-eslint/eslint-plugin@8.58.0':
+    resolution: {integrity: sha512-RLkVSiNuUP1C2ROIWfqX+YcUfLaSnxGE/8M+Y57lopVwg9VTYYfhuz15Yf1IzCKgZj6/rIbYTmJCUSqr76r0Wg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      '@typescript-eslint/parser': ^8.58.0
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/parser@8.58.0':
+    resolution: {integrity: sha512-rLoGZIf9afaRBYsPUMtvkDWykwXwUPL60HebR4JgTI8mxfFe2cQTu3AGitANp4b9B2QlVru6WzjgB2IzJKiCSA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/project-service@8.58.0':
+    resolution: {integrity: sha512-8Q/wBPWLQP1j16NxoPNIKpDZFMaxl7yWIoqXWYeWO+Bbd2mjgvoF0dxP2jKZg5+x49rgKdf7Ck473M8PC3V9lg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/scope-manager@8.58.0':
+    resolution: {integrity: sha512-W1Lur1oF50FxSnNdGp3Vs6P+yBRSmZiw4IIjEeYxd8UQJwhUF0gDgDD/W/Tgmh73mxgEU3qX0Bzdl/NGuSPEpQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@typescript-eslint/tsconfig-utils@8.58.0':
+    resolution: {integrity: sha512-doNSZEVJsWEu4htiVC+PR6NpM+pa+a4ClH9INRWOWCUzMst/VA9c4gXq92F8GUD1rwhNvRLkgjfYtFXegXQF7A==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/type-utils@8.58.0':
+    resolution: {integrity: sha512-aGsCQImkDIqMyx1u4PrVlbi/krmDsQUs4zAcCV6M7yPcPev+RqVlndsJy9kJ8TLihW9TZ0kbDAzctpLn5o+lOg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/types@8.58.0':
+    resolution: {integrity: sha512-O9CjxypDT89fbHxRfETNoAnHj/i6IpRK0CvbVN3qibxlLdo5p5hcLmUuCCrHMpxiWSwKyI8mCP7qRNYuOJ0Uww==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@typescript-eslint/typescript-estree@8.58.0':
+    resolution: {integrity: sha512-7vv5UWbHqew/dvs+D3e1RvLv1v2eeZ9txRHPnEEBUgSNLx5ghdzjHa0sgLWYVKssH+lYmV0JaWdoubo0ncGYLA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/utils@8.58.0':
+    resolution: {integrity: sha512-RfeSqcFeHMHlAWzt4TBjWOAtoW9lnsAGiP3GbaX9uVgTYYrMbVnGONEfUCiSss+xMHFl+eHZiipmA8WkQ7FuNA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/visitor-keys@8.58.0':
+    resolution: {integrity: sha512-XJ9UD9+bbDo4a4epraTwG3TsNPeiB9aShrUneAVXy8q4LuwowN+qu89/6ByLMINqvIMeI9H9hOHQtg/ijrYXzQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@unhead/vue@2.1.13':
+    resolution: {integrity: sha512-HYy0shaHRnLNW9r85gppO8IiGz0ONWVV3zGdlT8CQ0tbTwixznJCIiyqV4BSV1aIF1jJIye0pd1p/k6Eab8Z/A==}
+    peerDependencies:
+      vue: '>=3.5.18'
+
+  '@unrs/resolver-binding-android-arm-eabi@1.11.1':
+    resolution: {integrity: sha512-ppLRUgHVaGRWUx0R0Ut06Mjo9gBaBkg3v/8AxusGLhsIotbBLuRk51rAzqLC8gq6NyyAojEXglNjzf6R948DNw==}
+    cpu: [arm]
+    os: [android]
+
+  '@unrs/resolver-binding-android-arm64@1.11.1':
+    resolution: {integrity: sha512-lCxkVtb4wp1v+EoN+HjIG9cIIzPkX5OtM03pQYkG+U5O/wL53LC4QbIeazgiKqluGeVEeBlZahHalCaBvU1a2g==}
+    cpu: [arm64]
+    os: [android]
+
+  '@unrs/resolver-binding-darwin-arm64@1.11.1':
+    resolution: {integrity: sha512-gPVA1UjRu1Y/IsB/dQEsp2V1pm44Of6+LWvbLc9SDk1c2KhhDRDBUkQCYVWe6f26uJb3fOK8saWMgtX8IrMk3g==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@unrs/resolver-binding-darwin-x64@1.11.1':
+    resolution: {integrity: sha512-cFzP7rWKd3lZaCsDze07QX1SC24lO8mPty9vdP+YVa3MGdVgPmFc59317b2ioXtgCMKGiCLxJ4HQs62oz6GfRQ==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@unrs/resolver-binding-freebsd-x64@1.11.1':
+    resolution: {integrity: sha512-fqtGgak3zX4DCB6PFpsH5+Kmt/8CIi4Bry4rb1ho6Av2QHTREM+47y282Uqiu3ZRF5IQioJQ5qWRV6jduA+iGw==}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@unrs/resolver-binding-linux-arm-gnueabihf@1.11.1':
+    resolution: {integrity: sha512-u92mvlcYtp9MRKmP+ZvMmtPN34+/3lMHlyMj7wXJDeXxuM0Vgzz0+PPJNsro1m3IZPYChIkn944wW8TYgGKFHw==}
+    cpu: [arm]
+    os: [linux]
+
+  '@unrs/resolver-binding-linux-arm-musleabihf@1.11.1':
+    resolution: {integrity: sha512-cINaoY2z7LVCrfHkIcmvj7osTOtm6VVT16b5oQdS4beibX2SYBwgYLmqhBjA1t51CarSaBuX5YNsWLjsqfW5Cw==}
+    cpu: [arm]
+    os: [linux]
+
+  '@unrs/resolver-binding-linux-arm64-gnu@1.11.1':
+    resolution: {integrity: sha512-34gw7PjDGB9JgePJEmhEqBhWvCiiWCuXsL9hYphDF7crW7UgI05gyBAi6MF58uGcMOiOqSJ2ybEeCvHcq0BCmQ==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@unrs/resolver-binding-linux-arm64-musl@1.11.1':
+    resolution: {integrity: sha512-RyMIx6Uf53hhOtJDIamSbTskA99sPHS96wxVE/bJtePJJtpdKGXO1wY90oRdXuYOGOTuqjT8ACccMc4K6QmT3w==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@unrs/resolver-binding-linux-ppc64-gnu@1.11.1':
+    resolution: {integrity: sha512-D8Vae74A4/a+mZH0FbOkFJL9DSK2R6TFPC9M+jCWYia/q2einCubX10pecpDiTmkJVUH+y8K3BZClycD8nCShA==}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@unrs/resolver-binding-linux-riscv64-gnu@1.11.1':
+    resolution: {integrity: sha512-frxL4OrzOWVVsOc96+V3aqTIQl1O2TjgExV4EKgRY09AJ9leZpEg8Ak9phadbuX0BA4k8U5qtvMSQQGGmaJqcQ==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@unrs/resolver-binding-linux-riscv64-musl@1.11.1':
+    resolution: {integrity: sha512-mJ5vuDaIZ+l/acv01sHoXfpnyrNKOk/3aDoEdLO/Xtn9HuZlDD6jKxHlkN8ZhWyLJsRBxfv9GYM2utQ1SChKew==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [musl]
+
+  '@unrs/resolver-binding-linux-s390x-gnu@1.11.1':
+    resolution: {integrity: sha512-kELo8ebBVtb9sA7rMe1Cph4QHreByhaZ2QEADd9NzIQsYNQpt9UkM9iqr2lhGr5afh885d/cB5QeTXSbZHTYPg==}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@unrs/resolver-binding-linux-x64-gnu@1.11.1':
+    resolution: {integrity: sha512-C3ZAHugKgovV5YvAMsxhq0gtXuwESUKc5MhEtjBpLoHPLYM+iuwSj3lflFwK3DPm68660rZ7G8BMcwSro7hD5w==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@unrs/resolver-binding-linux-x64-musl@1.11.1':
+    resolution: {integrity: sha512-rV0YSoyhK2nZ4vEswT/QwqzqQXw5I6CjoaYMOX0TqBlWhojUf8P94mvI7nuJTeaCkkds3QE4+zS8Ko+GdXuZtA==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@unrs/resolver-binding-wasm32-wasi@1.11.1':
+    resolution: {integrity: sha512-5u4RkfxJm+Ng7IWgkzi3qrFOvLvQYnPBmjmZQ8+szTK/b31fQCnleNl1GgEt7nIsZRIf5PLhPwT0WM+q45x/UQ==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+
+  '@unrs/resolver-binding-win32-arm64-msvc@1.11.1':
+    resolution: {integrity: sha512-nRcz5Il4ln0kMhfL8S3hLkxI85BXs3o8EYoattsJNdsX4YUU89iOkVn7g0VHSRxFuVMdM4Q1jEpIId1Ihim/Uw==}
+    cpu: [arm64]
+    os: [win32]
+
+  '@unrs/resolver-binding-win32-ia32-msvc@1.11.1':
+    resolution: {integrity: sha512-DCEI6t5i1NmAZp6pFonpD5m7i6aFrpofcp4LA2i8IIq60Jyo28hamKBxNrZcyOwVOZkgsRp9O2sXWBWP8MnvIQ==}
+    cpu: [ia32]
+    os: [win32]
+
+  '@unrs/resolver-binding-win32-x64-msvc@1.11.1':
+    resolution: {integrity: sha512-lrW200hZdbfRtztbygyaq/6jP6AKE8qQN2KvPcJ+x7wiD038YtnYtZ82IMNJ69GJibV7bwL3y9FgK+5w/pYt6g==}
+    cpu: [x64]
+    os: [win32]
+
+  '@vercel/nft@1.5.0':
+    resolution: {integrity: sha512-IWTDeIoWhQ7ZtRO/JRKH+jhmeQvZYhtGPmzw/QGDY+wDCQqfm25P9yIdoAFagu4fWsK4IwZXDFIjrmp5rRm/sA==}
+    engines: {node: '>=20'}
+    hasBin: true
+
+  '@vitejs/plugin-vue-jsx@5.1.5':
+    resolution: {integrity: sha512-jIAsvHOEtWpslLOI2MeElGFxH7M8pM83BU/Tor4RLyiwH0FM4nUW3xdvbw20EeU9wc5IspQwMq225K3CMnJEpA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    peerDependencies:
+      vite: ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
+      vue: ^3.0.0
+
+  '@vitejs/plugin-vue@6.0.5':
+    resolution: {integrity: sha512-bL3AxKuQySfk1iGcBsQnoRVexTPJq0Z/ixFVM8OhVJAP6ZXXXLtM7NFKWhLl30Kg7uTBqIaPXbh+nuQCuBDedg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    peerDependencies:
+      vite: ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
+      vue: ^3.2.25
+
+  '@vitest/expect@4.1.4':
+    resolution: {integrity: sha512-iPBpra+VDuXmBFI3FMKHSFXp3Gx5HfmSCE8X67Dn+bwephCnQCaB7qWK2ldHa+8ncN8hJU8VTMcxjPpyMkUjww==}
+
+  '@vitest/mocker@4.1.4':
+    resolution: {integrity: sha512-R9HTZBhW6yCSGbGQnDnH3QHfJxokKN4KB+Yvk9Q1le7eQNYwiCyKxmLmurSpFy6BzJanSLuEUDrD+j97Q+ZLPg==}
+    peerDependencies:
+      msw: ^2.4.9
+      vite: ^6.0.0 || ^7.0.0 || ^8.0.0
+    peerDependenciesMeta:
+      msw:
+        optional: true
+      vite:
+        optional: true
+
+  '@vitest/pretty-format@4.1.4':
+    resolution: {integrity: sha512-ddmDHU0gjEUyEVLxtZa7xamrpIefdEETu3nZjWtHeZX4QxqJ7tRxSteHVXJOcr8jhiLoGAhkK4WJ3WqBpjx42A==}
+
+  '@vitest/runner@4.1.4':
+    resolution: {integrity: sha512-xTp7VZ5aXP5ZJrn15UtJUWlx6qXLnGtF6jNxHepdPHpMfz/aVPx+htHtgcAL2mDXJgKhpoo2e9/hVJsIeFbytQ==}
+
+  '@vitest/snapshot@4.1.4':
+    resolution: {integrity: sha512-MCjCFgaS8aZz+m5nTcEcgk/xhWv0rEH4Yl53PPlMXOZ1/Ka2VcZU6CJ+MgYCZbcJvzGhQRjVrGQNZqkGPttIKw==}
+
+  '@vitest/spy@4.1.4':
+    resolution: {integrity: sha512-XxNdAsKW7C+FLydqFJLb5KhJtl3PGCMmYwFRfhvIgxJvLSXhhVI1zM8f1qD3Zg7RCjTSzDVyct6sghs9UEgBEQ==}
+
+  '@vitest/utils@4.1.4':
+    resolution: {integrity: sha512-13QMT+eysM5uVGa1rG4kegGYNp6cnQcsTc67ELFbhNLQO+vgsygtYJx2khvdt4gVQqSSpC/KT5FZZxUpP3Oatw==}
+
+  '@volar/language-core@2.4.28':
+    resolution: {integrity: sha512-w4qhIJ8ZSitgLAkVay6AbcnC7gP3glYM3fYwKV3srj8m494E3xtrCv6E+bWviiK/8hs6e6t1ij1s2Endql7vzQ==}
+
+  '@volar/source-map@2.4.28':
+    resolution: {integrity: sha512-yX2BDBqJkRXfKw8my8VarTyjv48QwxdJtvRgUpNE5erCsgEUdI2DsLbpa+rOQVAJYshY99szEcRDmyHbF10ggQ==}
+
+  '@volar/typescript@2.4.28':
+    resolution: {integrity: sha512-Ja6yvWrbis2QtN4ClAKreeUZPVYMARDYZl9LMEv1iQ1QdepB6wn0jTRxA9MftYmYa4DQ4k/DaSZpFPUfxl8giw==}
+
+  '@vue-macros/common@3.1.2':
+    resolution: {integrity: sha512-h9t4ArDdniO9ekYHAD95t9AZcAbb19lEGK+26iAjUODOIJKmObDNBSe4+6ELQAA3vtYiFPPBtHh7+cQCKi3Dng==}
+    engines: {node: '>=20.19.0'}
+    peerDependencies:
+      vue: ^2.7.0 || ^3.2.25
+    peerDependenciesMeta:
+      vue:
+        optional: true
+
+  '@vue/babel-helper-vue-transform-on@2.0.1':
+    resolution: {integrity: sha512-uZ66EaFbnnZSYqYEyplWvn46GhZ1KuYSThdT68p+am7MgBNbQ3hphTL9L+xSIsWkdktwhPYLwPgVWqo96jDdRA==}
+
+  '@vue/babel-plugin-jsx@2.0.1':
+    resolution: {integrity: sha512-a8CaLQjD/s4PVdhrLD/zT574ZNPnZBOY+IhdtKWRB4HRZ0I2tXBi5ne7d9eCfaYwp5gU5+4KIyFTV1W1YL9xZA==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+
+  '@vue/babel-plugin-resolve-type@2.0.1':
+    resolution: {integrity: sha512-ybwgIuRGRRBhOU37GImDoWQoz+TlSqap65qVI6iwg/J7FfLTLmMf97TS7xQH9I7Qtr/gp161kYVdhr1ZMraSYQ==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@vue/compiler-core@3.5.32':
+    resolution: {integrity: sha512-4x74Tbtqnda8s/NSD6e1Dr5p1c8HdMU5RWSjMSUzb8RTcUQqevDCxVAitcLBKT+ie3o0Dl9crc/S/opJM7qBGQ==}
+
+  '@vue/compiler-dom@3.5.32':
+    resolution: {integrity: sha512-ybHAu70NtiEI1fvAUz3oXZqkUYEe5J98GjMDpTGl5iHb0T15wQYLR4wE3h9xfuTNA+Cm2f4czfe8B4s+CCH57Q==}
+
+  '@vue/compiler-sfc@3.5.32':
+    resolution: {integrity: sha512-8UYUYo71cP/0YHMO814TRZlPuUUw3oifHuMR7Wp9SNoRSrxRQnhMLNlCeaODNn6kNTJsjFoQ/kqIj4qGvya4Xg==}
+
+  '@vue/compiler-ssr@3.5.32':
+    resolution: {integrity: sha512-Gp4gTs22T3DgRotZ8aA/6m2jMR+GMztvBXUBEUOYOcST+giyGWJ4WvFd7QLHBkzTxkfOt8IELKNdpzITLbA2rw==}
+
+  '@vue/devtools-api@6.6.4':
+    resolution: {integrity: sha512-sGhTPMuXqZ1rVOk32RylztWkfXTRhuS7vgAKv0zjqk8gbsHkJ7xfFf+jbySxt7tWObEJwyKaHMikV/WGDiQm8g==}
+
+  '@vue/devtools-api@7.7.9':
+    resolution: {integrity: sha512-kIE8wvwlcZ6TJTbNeU2HQNtaxLx3a84aotTITUuL/4bzfPxzajGBOoqjMhwZJ8L9qFYDU/lAYMEEm11dnZOD6g==}
+
+  '@vue/devtools-api@8.1.1':
+    resolution: {integrity: sha512-bsDMJ07b3GN1puVwJb/fyFnj/U2imyswK5UQVLZwVl7O05jDrt6BHxeG5XffmOOdasOj/bOmIjxJvGPxU7pcqw==}
+
+  '@vue/devtools-core@8.1.1':
+    resolution: {integrity: sha512-bCCsSABp1/ot4j8xJEycM6Mtt2wbuucfByr6hMgjbYhrtlscOJypZKvy8f1FyWLYrLTchB5Qz216Lm92wfbq0A==}
+    peerDependencies:
+      vue: ^3.0.0
+
+  '@vue/devtools-kit@7.7.9':
+    resolution: {integrity: sha512-PyQ6odHSgiDVd4hnTP+aDk2X4gl2HmLDfiyEnn3/oV+ckFDuswRs4IbBT7vacMuGdwY/XemxBoh302ctbsptuA==}
+
+  '@vue/devtools-kit@8.1.1':
+    resolution: {integrity: sha512-gVBaBv++i+adg4JpH71k9ppl4soyR7Y2McEqO5YNgv0BI1kMZ7BDX5gnwkZ5COYgiCyhejZG+yGNrBAjj6Coqg==}
+
+  '@vue/devtools-shared@7.7.9':
+    resolution: {integrity: sha512-iWAb0v2WYf0QWmxCGy0seZNDPdO3Sp5+u78ORnyeonS6MT4PC7VPrryX2BpMJrwlDeaZ6BD4vP4XKjK0SZqaeA==}
+
+  '@vue/devtools-shared@8.1.1':
+    resolution: {integrity: sha512-+h4ttmJYl/txpxHKaoZcaKpC+pvckgLzIDiSQlaQ7kKthKh8KuwoLW2D8hPJEnqKzXOvu15UHEoGyngAXCz0EQ==}
+
+  '@vue/language-core@3.2.6':
+    resolution: {integrity: sha512-xYYYX3/aVup576tP/23sEUpgiEnujrENaoNRbaozC1/MA9I6EGFQRJb4xrt/MmUCAGlxTKL2RmT8JLTPqagCkg==}
+
+  '@vue/reactivity@3.5.32':
+    resolution: {integrity: sha512-/ORasxSGvZ6MN5gc+uE364SxFdJ0+WqVG0CENXaGW58TOCdrAW76WWaplDtECeS1qphvtBZtR+3/o1g1zL4xPQ==}
+
+  '@vue/runtime-core@3.5.32':
+    resolution: {integrity: sha512-pDrXCejn4UpFDFmMd27AcJEbHaLemaE5o4pbb7sLk79SRIhc6/t34BQA7SGNgYtbMnvbF/HHOftYBgFJtUoJUQ==}
+
+  '@vue/runtime-dom@3.5.32':
+    resolution: {integrity: sha512-1CDVv7tv/IV13V8Nip1k/aaObVbWqRlVCVezTwx3K07p7Vxossp5JU1dcPNhJk3w347gonIUT9jQOGutyJrSVQ==}
+
+  '@vue/server-renderer@3.5.32':
+    resolution: {integrity: sha512-IOjm2+JQwRFS7W28HNuJeXQle9KdZbODFY7hFGVtnnghF51ta20EWAZJHX+zLGtsHhaU6uC9BGPV52KVpYryMQ==}
+    peerDependencies:
+      vue: 3.5.32
+
+  '@vue/shared@3.5.32':
+    resolution: {integrity: sha512-ksNyrmRQzWJJ8n3cRDuSF7zNNontuJg1YHnmWRJd2AMu8Ij2bqwiiri2lH5rHtYPZjj4STkNcgcmiQqlOjiYGg==}
+
+  '@vue/test-utils@2.4.6':
+    resolution: {integrity: sha512-FMxEjOpYNYiFe0GkaHsnJPXFHxQ6m4t8vI/ElPGpMWxZKpmRvQ33OIrvRXemy6yha03RxhOlQuy+gZMC3CQSow==}
+
+  '@vueuse/core@10.11.1':
+    resolution: {integrity: sha512-guoy26JQktXPcz+0n3GukWIy/JDNKti9v6VEMu6kV2sYBsWuGiTU8OWdg+ADfUbHg3/3DlqySDe7JmdHrktiww==}
+
+  '@vueuse/core@14.2.1':
+    resolution: {integrity: sha512-3vwDzV+GDUNpdegRY6kzpLm4Igptq+GA0QkJ3W61Iv27YWwW/ufSlOfgQIpN6FZRMG0mkaz4gglJRtq5SeJyIQ==}
+    peerDependencies:
+      vue: ^3.5.0
+
+  '@vueuse/integrations@14.2.1':
+    resolution: {integrity: sha512-2LIUpBi/67PoXJGqSDQUF0pgQWpNHh7beiA+KG2AbybcNm+pTGWT6oPGlBgUoDWmYwfeQqM/uzOHqcILpKL7nA==}
+    peerDependencies:
+      async-validator: ^4
+      axios: ^1
+      change-case: ^5
+      drauu: ^0.4
+      focus-trap: ^7 || ^8
+      fuse.js: ^7
+      idb-keyval: ^6
+      jwt-decode: ^4
+      nprogress: ^0.2
+      qrcode: ^1.5
+      sortablejs: ^1
+      universal-cookie: ^7 || ^8
+      vue: ^3.5.0
+    peerDependenciesMeta:
+      async-validator:
+        optional: true
+      axios:
+        optional: true
+      change-case:
+        optional: true
+      drauu:
+        optional: true
+      focus-trap:
+        optional: true
+      fuse.js:
+        optional: true
+      idb-keyval:
+        optional: true
+      jwt-decode:
+        optional: true
+      nprogress:
+        optional: true
+      qrcode:
+        optional: true
+      sortablejs:
+        optional: true
+      universal-cookie:
+        optional: true
+
+  '@vueuse/metadata@10.11.1':
+    resolution: {integrity: sha512-IGa5FXd003Ug1qAZmyE8wF3sJ81xGLSqTqtQ6jaVfkeZ4i5kS2mwQF61yhVqojRnenVew5PldLyRgvdl4YYuSw==}
+
+  '@vueuse/metadata@14.2.1':
+    resolution: {integrity: sha512-1ButlVtj5Sb/HDtIy1HFr1VqCP4G6Ypqt5MAo0lCgjokrk2mvQKsK2uuy0vqu/Ks+sHfuHo0B9Y9jn9xKdjZsw==}
+
+  '@vueuse/shared@10.11.1':
+    resolution: {integrity: sha512-LHpC8711VFZlDaYUXEBbFBCQ7GS3dVU9mjOhhMhXP6txTV4EhYQg/KGnQuvt/sPAtoUKq7VVUnL6mVtFoL42sA==}
+
+  '@vueuse/shared@14.2.1':
+    resolution: {integrity: sha512-shTJncjV9JTI4oVNyF1FQonetYAiTBd+Qj7cY89SWbXSkx7gyhrgtEdF2ZAVWS1S3SHlaROO6F2IesJxQEkZBw==}
+    peerDependencies:
+      vue: ^3.5.0
+
+  '@xmldom/xmldom@0.8.12':
+    resolution: {integrity: sha512-9k/gHF6n/pAi/9tqr3m3aqkuiNosYTurLLUtc7xQ9sxB/wm7WPygCv8GYa6mS0fLJEHhqMC1ATYhz++U/lRHqg==}
+    engines: {node: '>=10.0.0'}
+
+  abbrev@1.1.1:
+    resolution: {integrity: sha512-nne9/IiQ/hzIhY6pdDnbBtz7DjPTKrY00P/zvPSm5pOFkl6xuGrGnXn/VtTNNfNtAfZ9/1RtehkszU9qcTii0Q==}
+
+  abbrev@2.0.0:
+    resolution: {integrity: sha512-6/mh1E2u2YgEsCHdY0Yx5oW+61gZU+1vXaoiHHrpKeuRNNgFvS+/jrwHiQhB5apAf5oB7UB7E19ol2R2LKH8hQ==}
+    engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
+
+  abbrev@3.0.1:
+    resolution: {integrity: sha512-AO2ac6pjRB3SJmGJo+v5/aK6Omggp6fsLrs6wN9bd35ulu4cCwaAU9+7ZhXjeqHVkaHThLuzH0nZr0YpCDhygg==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  abort-controller@3.0.0:
+    resolution: {integrity: sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==}
+    engines: {node: '>=6.5'}
+
+  acorn-import-attributes@1.9.5:
+    resolution: {integrity: sha512-n02Vykv5uA3eHGM/Z2dQrcD56kL8TyDb2p1+0P83PClMnC/nc+anbQRhIOWnSq4Ke/KvDPrY3C9hDtC/A3eHnQ==}
+    peerDependencies:
+      acorn: ^8
+
+  acorn-jsx@5.3.2:
+    resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==}
+    peerDependencies:
+      acorn: ^6.0.0 || ^7.0.0 || ^8.0.0
+
+  acorn@8.16.0:
+    resolution: {integrity: sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==}
+    engines: {node: '>=0.4.0'}
+    hasBin: true
+
+  agent-base@6.0.2:
+    resolution: {integrity: sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==}
+    engines: {node: '>= 6.0.0'}
+
+  agent-base@7.1.4:
+    resolution: {integrity: sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==}
+    engines: {node: '>= 14'}
+
+  agentkeepalive@4.6.0:
+    resolution: {integrity: sha512-kja8j7PjmncONqaTsB8fQ+wE2mSU2DJ9D4XKoJ5PFWIdRMa6SLSN1ff4mOr4jCbfRSsxR4keIiySJU0N9T5hIQ==}
+    engines: {node: '>= 8.0.0'}
+
+  aggregate-error@3.1.0:
+    resolution: {integrity: sha512-4I7Td01quW/RpocfNayFdFVk1qSuoh0E7JrbRJ16nH01HhKFQ88INq9Sd+nd72zqRySlr9BmDA8xlEJ6vJMrYA==}
+    engines: {node: '>=8'}
+
+  ajv@6.14.0:
+    resolution: {integrity: sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==}
+
+  alien-signals@3.1.2:
+    resolution: {integrity: sha512-d9dYqZTS90WLiU0I5c6DHj/HcKkF8ZyGN3G5x8wSbslulz70KOxaqCT0hQCo9KOyhVqzqGojvNdJXoTumZOtcw==}
+
+  ansi-regex@5.0.1:
+    resolution: {integrity: sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==}
+    engines: {node: '>=8'}
+
+  ansi-regex@6.2.2:
+    resolution: {integrity: sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==}
+    engines: {node: '>=12'}
+
+  ansi-styles@4.3.0:
+    resolution: {integrity: sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==}
+    engines: {node: '>=8'}
+
+  ansi-styles@6.2.3:
+    resolution: {integrity: sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==}
+    engines: {node: '>=12'}
+
+  ansis@4.2.0:
+    resolution: {integrity: sha512-HqZ5rWlFjGiV0tDm3UxxgNRqsOTniqoKZu0pIAfh7TZQMGuZK+hH0drySty0si0QXj1ieop4+SkSfPZBPPkHig==}
+    engines: {node: '>=14'}
+
+  anymatch@3.1.3:
+    resolution: {integrity: sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==}
+    engines: {node: '>= 8'}
+
+  aproba@2.1.0:
+    resolution: {integrity: sha512-tLIEcj5GuR2RSTnxNKdkK0dJ/GrC7P38sUkiDmDuHfsHmbagTFAxDVIBltoklXEVIQ/f14IL8IMJ5pn9Hez1Ew==}
+
+  archiver-utils@5.0.2:
+    resolution: {integrity: sha512-wuLJMmIBQYCsGZgYLTy5FIB2pF6Lfb6cXMSF8Qywwk3t20zWnAi7zLcQFdKQmIB8wyZpY5ER38x08GbwtR2cLA==}
+    engines: {node: '>= 14'}
+
+  archiver@7.0.1:
+    resolution: {integrity: sha512-ZcbTaIqJOfCc03QwD468Unz/5Ir8ATtvAHsK+FdXbDIbGfihqh9mrvdcYunQzqn4HrvWWaFyaxJhGZagaJJpPQ==}
+    engines: {node: '>= 14'}
+
+  are-docs-informative@0.0.2:
+    resolution: {integrity: sha512-ixiS0nLNNG5jNQzgZJNoUpBKdo9yTYZMGJ+QgT2jmjR7G7+QHRCc4v6LQ3NgE7EBJq+o0ams3waJwkrlBom8Ig==}
+    engines: {node: '>=14'}
+
+  are-we-there-yet@3.0.1:
+    resolution: {integrity: sha512-QZW4EDmGwlYur0Yyf/b2uGucHQMa8aFUP7eu9ddR73vvhFyt4V0Vl3QHPcTNJ8l6qYOBdxgXdnBXQrHilfRQBg==}
+    engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
+    deprecated: This package is no longer supported.
+
+  argparse@2.0.1:
+    resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
+
+  aria-hidden@1.2.6:
+    resolution: {integrity: sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA==}
+    engines: {node: '>=10'}
+
+  assertion-error@2.0.1:
+    resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
+    engines: {node: '>=12'}
+
+  ast-kit@2.2.0:
+    resolution: {integrity: sha512-m1Q/RaVOnTp9JxPX+F+Zn7IcLYMzM8kZofDImfsKZd8MbR+ikdOzTeztStWqfrqIxZnYWryyI9ePm3NGjnZgGw==}
+    engines: {node: '>=20.19.0'}
+
+  ast-walker-scope@0.8.3:
+    resolution: {integrity: sha512-cbdCP0PGOBq0ASG+sjnKIoYkWMKhhz+F/h9pRexUdX2Hd38+WOlBkRKlqkGOSm0YQpcFMQBJeK4WspUAkwsEdg==}
+    engines: {node: '>=20.19.0'}
+
+  astral-regex@2.0.0:
+    resolution: {integrity: sha512-Z7tMw1ytTXt5jqMcOP+OQteU1VuNK9Y02uuJtKQ1Sv69jXQKKg5cibLwGJow8yzZP+eAc18EmLGPal0bp36rvQ==}
+    engines: {node: '>=8'}
+
+  async-sema@3.1.1:
+    resolution: {integrity: sha512-tLRNUXati5MFePdAk8dw7Qt7DpxPB60ofAgn8WRhW6a2rcimZnYBP9oxHiv0OHy+Wz7kPMG+t4LGdt31+4EmGg==}
+
+  async@3.2.6:
+    resolution: {integrity: sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==}
+
+  asynckit@0.4.0:
+    resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==}
+
+  at-least-node@1.0.0:
+    resolution: {integrity: sha512-+q/t7Ekv1EDY2l6Gda6LLiX14rU9TV20Wa3ofeQmwPFZbOMo9DXrLbOjFaaclkXKWidIaopwAObQDqwWtGUjqg==}
+    engines: {node: '>= 4.0.0'}
+
+  autoprefixer@10.4.27:
+    resolution: {integrity: sha512-NP9APE+tO+LuJGn7/9+cohklunJsXWiaWEfV3si4Gi/XHDwVNgkwr1J3RQYFIvPy76GmJ9/bW8vyoU1LcxwKHA==}
+    engines: {node: ^10 || ^12 || >=14}
+    hasBin: true
+    peerDependencies:
+      postcss: ^8.1.0
+
+  b4a@1.8.0:
+    resolution: {integrity: sha512-qRuSmNSkGQaHwNbM7J78Wwy+ghLEYF1zNrSeMxj4Kgw6y33O3mXcQ6Ie9fRvfU/YnxWkOchPXbaLb73TkIsfdg==}
+    peerDependencies:
+      react-native-b4a: '*'
+    peerDependenciesMeta:
+      react-native-b4a:
+        optional: true
+
+  balanced-match@1.0.2:
+    resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
+
+  balanced-match@4.0.4:
+    resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
+    engines: {node: 18 || 20 || >=22}
+
+  bare-events@2.8.2:
+    resolution: {integrity: sha512-riJjyv1/mHLIPX4RwiK+oW9/4c3TEUeORHKefKAKnZ5kyslbN+HXowtbaVEqt4IMUB7OXlfixcs6gsFeo/jhiQ==}
+    peerDependencies:
+      bare-abort-controller: '*'
+    peerDependenciesMeta:
+      bare-abort-controller:
+        optional: true
+
+  bare-fs@4.6.0:
+    resolution: {integrity: sha512-2YkS7NuiJceSEbyEOdSNLE9tsGd+f4+f7C+Nik/MCk27SYdwIMPT/yRKvg++FZhQXgk0KWJKJyXX9RhVV0RGqA==}
+    engines: {bare: '>=1.16.0'}
+    peerDependencies:
+      bare-buffer: '*'
+    peerDependenciesMeta:
+      bare-buffer:
+        optional: true
+
+  bare-os@3.8.7:
+    resolution: {integrity: sha512-G4Gr1UsGeEy2qtDTZwL7JFLo2wapUarz7iTMcYcMFdS89AIQuBoyjgXZz0Utv7uHs3xA9LckhVbeBi8lEQrC+w==}
+    engines: {bare: '>=1.14.0'}
+
+  bare-path@3.0.0:
+    resolution: {integrity: sha512-tyfW2cQcB5NN8Saijrhqn0Zh7AnFNsnczRcuWODH0eYAXBsJ5gVxAUuNr7tsHSC6IZ77cA0SitzT+s47kot8Mw==}
+
+  bare-stream@2.12.0:
+    resolution: {integrity: sha512-w28i8lkBgREV3rPXGbgK+BO66q+ZpKqRWrZLiCdmmUlLPrQ45CzkvRhN+7lnv00Gpi2zy5naRxnUFAxCECDm9g==}
+    peerDependencies:
+      bare-abort-controller: '*'
+      bare-buffer: '*'
+      bare-events: '*'
+    peerDependenciesMeta:
+      bare-abort-controller:
+        optional: true
+      bare-buffer:
+        optional: true
+      bare-events:
+        optional: true
+
+  bare-url@2.4.0:
+    resolution: {integrity: sha512-NSTU5WN+fy/L0DDenfE8SXQna4voXuW0FHM7wH8i3/q9khUSchfPbPezO4zSFMnDGIf9YE+mt/RWhZgNRKRIXA==}
+
+  base64-js@1.5.1:
+    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
+
+  baseline-browser-mapping@2.10.16:
+    resolution: {integrity: sha512-Lyf3aK28zpsD1yQMiiHD4RvVb6UdMoo8xzG2XzFIfR9luPzOpcBlAsT/qfB1XWS1bxWT+UtE4WmQgsp297FYOA==}
+    engines: {node: '>=6.0.0'}
+    hasBin: true
+
+  big-integer@1.6.52:
+    resolution: {integrity: sha512-QxD8cf2eVqJOOz63z6JIN9BzvVs/dlySa5HGSBH5xtR8dPteIRQnBxxKqkNTiT6jbDTF6jAfrd4oMcND9RGbQg==}
+    engines: {node: '>=0.6'}
+
+  bindings@1.5.0:
+    resolution: {integrity: sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ==}
+
+  birpc@2.9.0:
+    resolution: {integrity: sha512-KrayHS5pBi69Xi9JmvoqrIgYGDkD6mcSe/i6YKi3w5kekCLzrX4+nawcXqrj2tIp50Kw/mT/s3p+GVK0A0sKxw==}
+
+  birpc@4.0.0:
+    resolution: {integrity: sha512-LShSxJP0KTmd101b6DRyGBj57LZxSDYWKitQNW/mi8GRMvZb078Uf9+pveax1DrVL89vm7mWe+TovdI/UDOuPw==}
+
+  bl@4.1.0:
+    resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
+
+  boolbase@1.0.0:
+    resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
+
+  bplist-parser@0.3.2:
+    resolution: {integrity: sha512-apC2+fspHGI3mMKj+dGevkGo/tCqVB8jMb6i+OX+E29p0Iposz07fABkRIfVUPNd5A5VbuOz1bZbnmkKLYF+wQ==}
+    engines: {node: '>= 5.10.0'}
+
+  brace-expansion@1.1.13:
+    resolution: {integrity: sha512-9ZLprWS6EENmhEOpjCYW2c8VkmOvckIJZfkr7rBW6dObmfgJ/L1GpSYW5Hpo9lDz4D1+n0Ckz8rU7FwHDQiG/w==}
+
+  brace-expansion@2.0.3:
+    resolution: {integrity: sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==}
+
+  brace-expansion@5.0.5:
+    resolution: {integrity: sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ==}
+    engines: {node: 18 || 20 || >=22}
+
+  braces@3.0.3:
+    resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
+    engines: {node: '>=8'}
+
+  browserslist@4.28.2:
+    resolution: {integrity: sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg==}
+    engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
+    hasBin: true
+
+  buffer-crc32@0.2.13:
+    resolution: {integrity: sha512-VO9Ht/+p3SN7SKWqcrgEzjGbRSJYTx+Q1pTQC0wrWqHx0vpJraQ6GtHx8tvcg1rlK1byhU5gccxgOgj7B0TDkQ==}
+
+  buffer-crc32@1.0.0:
+    resolution: {integrity: sha512-Db1SbgBS/fg/392AblrMJk97KggmvYhr4pB5ZIMTWtaivCPMWLkmb7m21cJvpvgK+J3nsU2CmmixNBZx4vFj/w==}
+    engines: {node: '>=8.0.0'}
+
+  buffer-from@1.1.2:
+    resolution: {integrity: sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==}
+
+  buffer@5.7.1:
+    resolution: {integrity: sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==}
+
+  buffer@6.0.3:
+    resolution: {integrity: sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==}
+
+  builtin-modules@5.0.0:
+    resolution: {integrity: sha512-bkXY9WsVpY7CvMhKSR6pZilZu9Ln5WDrKVBUXf2S443etkmEO4V58heTecXcUIsNsi4Rx8JUO4NfX1IcQl4deg==}
+    engines: {node: '>=18.20'}
+
+  bundle-name@4.1.0:
+    resolution: {integrity: sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q==}
+    engines: {node: '>=18'}
+
+  bundle-require@5.1.0:
+    resolution: {integrity: sha512-3WrrOuZiyaaZPWiEt4G3+IffISVC9HYlWueJEBWED4ZH4aIAC2PnkdnuRrR94M+w6yGWn4AglWtJtBI8YqvgoA==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+    peerDependencies:
+      esbuild: '>=0.18'
+
+  c12@3.3.4:
+    resolution: {integrity: sha512-cM0ApFQSBXuourJejzwv/AuPRvAxordTyParRVcHjjtXirtkzM0uK2L9TTn9s0cXZbG7E55jCivRQzoxYmRAlA==}
+    peerDependencies:
+      magicast: '*'
+    peerDependenciesMeta:
+      magicast:
+        optional: true
+
+  cac@6.7.14:
+    resolution: {integrity: sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==}
+    engines: {node: '>=8'}
+
+  cac@7.0.0:
+    resolution: {integrity: sha512-tixWYgm5ZoOD+3g6UTea91eow5z6AAHaho3g0V9CNSNb45gM8SmflpAc+GRd1InC4AqN/07Unrgp56Y94N9hJQ==}
+    engines: {node: '>=20.19.0'}
+
+  cacache@15.3.0:
+    resolution: {integrity: sha512-VVdYzXEn+cnbXpFgWs5hTT7OScegHVmLhJIR8Ufqk3iFD6A6j5iSX1KuBTfNEv4tdJWE2PzA6IVFtcLC7fN9wQ==}
+    engines: {node: '>= 10'}
+
+  call-bind-apply-helpers@1.0.2:
+    resolution: {integrity: sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==}
+    engines: {node: '>= 0.4'}
+
+  caniuse-api@3.0.0:
+    resolution: {integrity: sha512-bsTwuIg/BZZK/vreVTYYbSWoe2F+71P7K5QGEX+pT250DZbfU1MQ5prOKpPR+LL6uWKK3KMwMCAS74QB3Um1uw==}
+
+  caniuse-lite@1.0.30001786:
+    resolution: {integrity: sha512-4oxTZEvqmLLrERwxO76yfKM7acZo310U+v4kqexI2TL1DkkUEMT8UijrxxcnVdxR3qkVf5awGRX+4Z6aPHVKrA==}
+
+  chai@6.2.2:
+    resolution: {integrity: sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==}
+    engines: {node: '>=18'}
+
+  change-case@5.4.4:
+    resolution: {integrity: sha512-HRQyTk2/YPEkt9TnUPbOpr64Uw3KOicFWPVBb+xiHvd6eBx/qPr9xqfBFDT8P2vWsvvz4jbEkfDe71W3VyNu2w==}
+
+  chokidar@4.0.3:
+    resolution: {integrity: sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==}
+    engines: {node: '>= 14.16.0'}
+
+  chokidar@5.0.0:
+    resolution: {integrity: sha512-TQMmc3w+5AxjpL8iIiwebF73dRDF4fBIieAqGn9RGCWaEVwQ6Fb2cGe31Yns0RRIzii5goJ1Y7xbMwo1TxMplw==}
+    engines: {node: '>= 20.19.0'}
+
+  chownr@1.1.4:
+    resolution: {integrity: sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==}
+
+  chownr@2.0.0:
+    resolution: {integrity: sha512-bIomtDF5KGpdogkLd9VspvFzk9KfpyyGlS8YFVZl7TGPBHL5snIOnxeshwVgPteQ9b4Eydl+pVbIyE1DcvCWgQ==}
+    engines: {node: '>=10'}
+
+  chownr@3.0.0:
+    resolution: {integrity: sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g==}
+    engines: {node: '>=18'}
+
+  ci-info@4.4.0:
+    resolution: {integrity: sha512-77PSwercCZU2Fc4sX94eF8k8Pxte6JAwL4/ICZLFjJLqegs7kCuAsqqj/70NQF6TvDpgFjkubQB2FW2ZZddvQg==}
+    engines: {node: '>=8'}
+
+  citty@0.1.6:
+    resolution: {integrity: sha512-tskPPKEs8D2KPafUypv2gxwJP8h/OaJmC82QQGGDQcHvXX43xF2VDACcJVmZ0EuSxkpO9Kc4MlrA3q0+FG58AQ==}
+
+  citty@0.2.2:
+    resolution: {integrity: sha512-+6vJA3L98yv+IdfKGZHBNiGW5KHn22e/JwID0Strsz8h4S/csAu/OuICwxrg44k5MRiZHWIo8XXuJgQTriRP4w==}
+
+  clean-regexp@1.0.0:
+    resolution: {integrity: sha512-GfisEZEJvzKrmGWkvfhgzcz/BllN1USeqD2V6tg14OAOgaCD2Z/PUEuxnAZ/nPvmaHRG7a8y77p1T/IRQ4D1Hw==}
+    engines: {node: '>=4'}
+
+  clean-stack@2.2.0:
+    resolution: {integrity: sha512-4diC9HaTE+KRAMWhDhrGOECgWZxoevMc5TlkObMqNSsVU62PYzXZ/SMTjzyGAFF1YusgxGcSWTEXBhp0CPwQ1A==}
+    engines: {node: '>=6'}
+
+  cliui@9.0.1:
+    resolution: {integrity: sha512-k7ndgKhwoQveBL+/1tqGJYNz097I7WOvwbmmU2AR5+magtbjPWQTS1C5vzGkBC8Ym8UWRzfKUzUUqFLypY4Q+w==}
+    engines: {node: '>=20'}
+
+  cluster-key-slot@1.1.2:
+    resolution: {integrity: sha512-RMr0FhtfXemyinomL4hrWcYJxmX6deFdCxpJzhDttxgO1+bcCnkk+9drydLVDmAMG7NE6aN/fl4F7ucU/90gAA==}
+    engines: {node: '>=0.10.0'}
+
+  color-convert@2.0.1:
+    resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==}
+    engines: {node: '>=7.0.0'}
+
+  color-name@1.1.4:
+    resolution: {integrity: sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==}
+
+  color-support@1.1.3:
+    resolution: {integrity: sha512-qiBjkpbMLO/HL68y+lh4q0/O1MZFj2RX6X/KmMa3+gJD3z+WwI1ZzDHysvqHGS3mP6mznPckpXmw1nI9cJjyRg==}
+    hasBin: true
+
+  colortranslator@5.0.0:
+    resolution: {integrity: sha512-Z3UPUKasUVDFCDYAjP2fmlVRf1jFHJv1izAmPjiOa0OCIw1W7iC8PZ2GsoDa8uZv+mKyWopxxStT9q05+27h7w==}
+
+  combined-stream@1.0.8:
+    resolution: {integrity: sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==}
+    engines: {node: '>= 0.8'}
+
+  commander@10.0.1:
+    resolution: {integrity: sha512-y4Mg2tXshplEbSGzx7amzPwKKOCGuoSRP/CjEdwwk0FOGlUbq6lKuoyDZTNZkmxHdJtp54hdfY/JUrdL7Xfdug==}
+    engines: {node: '>=14'}
+
+  commander@11.1.0:
+    resolution: {integrity: sha512-yPVavfyCcRhmorC7rWlkHn15b4wDVgVmBA7kV4QVBsF7kv/9TKJAbAXVTxvTnwP8HHKjRCJDClKbciiYS7p0DQ==}
+    engines: {node: '>=16'}
+
+  commander@12.1.0:
+    resolution: {integrity: sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==}
+    engines: {node: '>=18'}
+
+  commander@2.20.3:
+    resolution: {integrity: sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==}
+
+  commander@9.5.0:
+    resolution: {integrity: sha512-KRs7WVDKg86PWiuAqhDrAQnTXZKraVcCc6vFdL14qrZ/DcWwuRo7VoiYXalXO7S5GKpqYiVEwCbgFDfxNHKJBQ==}
+    engines: {node: ^12.20.0 || >=14}
+
+  comment-parser@1.4.6:
+    resolution: {integrity: sha512-ObxuY6vnbWTN6Od72xfwN9DbzC7Y2vv8u1Soi9ahRKL37gb6y1qk6/dgjs+3JWuXJHWvsg3BXIwzd/rkmAwavg==}
+    engines: {node: '>= 12.0.0'}
+
+  commondir@1.0.1:
+    resolution: {integrity: sha512-W9pAhw0ja1Edb5GVdIF1mjZw/ASI0AlShXM83UUGe2DVr5TdAPEA1OA8m/g8zWp9x6On7gqufY+FatDbC3MDQg==}
+
+  compatx@0.2.0:
+    resolution: {integrity: sha512-6gLRNt4ygsi5NyMVhceOCFv14CIdDFN7fQjX1U4+47qVE/+kjPoXMK65KWK+dWxmFzMTuKazoQ9sch6pM0p5oA==}
+
+  compress-commons@6.0.2:
+    resolution: {integrity: sha512-6FqVXeETqWPoGcfzrXb37E50NP0LXT8kAMu5ooZayhWWdgEY4lBEEcbQNXtkuKQsGduxiIcI4gOTsxTmuq/bSg==}
+    engines: {node: '>= 14'}
+
+  concat-map@0.0.1:
+    resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
+
+  confbox@0.1.8:
+    resolution: {integrity: sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==}
+
+  confbox@0.2.4:
+    resolution: {integrity: sha512-ysOGlgTFbN2/Y6Cg3Iye8YKulHw+R2fNXHrgSmXISQdMnomY6eNDprVdW9R5xBguEqI954+S6709UyiO7B+6OQ==}
+
+  config-chain@1.1.13:
+    resolution: {integrity: sha512-qj+f8APARXHrM0hraqXYb2/bOVSV4PvJQlNZ/DVj0QrmNM2q2euizkeuVckQ57J+W0mRH6Hvi+k50M4Jul2VRQ==}
+
+  consola@3.4.2:
+    resolution: {integrity: sha512-5IKcdX0nnYavi6G7TtOhwkYzyjfJlatbjMjuLSfE2kYT5pMDOilZ4OvMhi637CcDICTmz3wARPoyhqyX1Y+XvA==}
+    engines: {node: ^14.18.0 || >=16.10.0}
+
+  console-control-strings@1.1.0:
+    resolution: {integrity: sha512-ty/fTekppD2fIwRvnZAVdeOiGd1c7YXEixbgJTNzqcxJWKQnjJ/V1bNEEE6hygpM3WjwHFUVK6HTjWSzV4a8sQ==}
+
+  convert-source-map@2.0.0:
+    resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
+
+  cookie-es@1.2.3:
+    resolution: {integrity: sha512-lXVyvUvrNXblMqzIRrxHb57UUVmqsSWlxqt3XIjCkUP0wDAf6uicO6KMbEgYrMNtEvWgWHwe42CKxPu9MYAnWw==}
+
+  cookie-es@2.0.1:
+    resolution: {integrity: sha512-aVf4A4hI2w70LnF7GG+7xDQUkliwiXWXFvTjkip4+b64ygDQ2sJPRSKFDHbxn8o0xu9QzPkMuuiWIXyFSE2slA==}
+
+  cookie-es@3.1.1:
+    resolution: {integrity: sha512-UaXxwISYJPTr9hwQxMFYZ7kNhSXboMXP+Z3TRX6f1/NyaGPfuNUZOWP1pUEb75B2HjfklIYLVRfWiFZJyC6Npg==}
+
+  copy-anything@4.0.5:
+    resolution: {integrity: sha512-7Vv6asjS4gMOuILabD3l739tsaxFQmC+a7pLZm02zyvs8p977bL3zEgq3yDk5rn9B0PbYgIv++jmHcuUab4RhA==}
+    engines: {node: '>=18'}
+
+  core-js-compat@3.49.0:
+    resolution: {integrity: sha512-VQXt1jr9cBz03b331DFDCCP90b3fanciLkgiOoy8SBHy06gNf+vQ1A3WFLqG7I8TipYIKeYK9wxd0tUrvHcOZA==}
+
+  core-util-is@1.0.3:
+    resolution: {integrity: sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==}
+
+  crc-32@1.2.2:
+    resolution: {integrity: sha512-ROmzCKrTnOwybPcJApAA6WBWij23HVfGVNKqqrZpuyZOHqK2CwHSvpGuyt/UNNvaIjEd8X5IFGp4Mh+Ie1IHJQ==}
+    engines: {node: '>=0.8'}
+    hasBin: true
+
+  crc32-stream@6.0.0:
+    resolution: {integrity: sha512-piICUB6ei4IlTv1+653yq5+KoqfBYmj9bw6LqXoOneTMDXk5nM1qt12mFW1caG3LlJXEKW1Bp0WggEmIfQB34g==}
+    engines: {node: '>= 14'}
+
+  crelt@1.0.6:
+    resolution: {integrity: sha512-VQ2MBenTq1fWZUH9DJNGti7kKv6EeAuYr3cLwxUWhIu1baTaXh4Ib5W2CqHVqib4/MqbYGJqiL3Zb8GJZr3l4g==}
+
+  croner@10.0.1:
+    resolution: {integrity: sha512-ixNtAJndqh173VQ4KodSdJEI6nuioBWI0V1ITNKhZZsO0pEMoDxz539T4FTTbSZ/xIOSuDnzxLVRqBVSvPNE2g==}
+    engines: {node: '>=18.0'}
+
+  cross-fetch@3.2.0:
+    resolution: {integrity: sha512-Q+xVJLoGOeIMXZmbUK4HYk+69cQH6LudR0Vu/pRm2YlU/hDV9CiS0gKUMaWY5f2NeUH9C1nV3bsTlCo0FsTV1Q==}
+
+  cross-spawn@7.0.6:
+    resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
+    engines: {node: '>= 8'}
+
+  crossws@0.3.5:
+    resolution: {integrity: sha512-ojKiDvcmByhwa8YYqbQI/hg7MEU0NC03+pSdEq4ZUnZR9xXpwk7E43SMNGkn+JxJGPFtNvQ48+vV2p+P1ml5PA==}
+
+  crossws@0.4.4:
+    resolution: {integrity: sha512-w6c4OdpRNnudVmcgr7brb/+/HmYjMQvYToO/oTrprTwxRUiom3LYWU1PMWuD006okbUWpII1Ea9/+kwpUfmyRg==}
+    peerDependencies:
+      srvx: '>=0.7.1'
+    peerDependenciesMeta:
+      srvx:
+        optional: true
+
+  css-declaration-sorter@7.3.1:
+    resolution: {integrity: sha512-gz6x+KkgNCjxq3Var03pRYLhyNfwhkKF1g/yoLgDNtFvVu0/fOLV9C8fFEZRjACp/XQLumjAYo7JVjzH3wLbxA==}
+    engines: {node: ^14 || ^16 || >=18}
+    peerDependencies:
+      postcss: ^8.0.9
+
+  css-select@5.2.2:
+    resolution: {integrity: sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==}
+
+  css-tree@2.2.1:
+    resolution: {integrity: sha512-OA0mILzGc1kCOCSJerOeqDxDQ4HOh+G8NbOJFOTgOCzpw7fCBubk0fEyxp8AgOL/jvLgYA/uV0cMbe43ElF1JA==}
+    engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0, npm: '>=7.0.0'}
+
+  css-tree@3.2.1:
+    resolution: {integrity: sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==}
+    engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0}
+
+  css-what@6.2.2:
+    resolution: {integrity: sha512-u/O3vwbptzhMs3L1fQE82ZSLHQQfto5gyZzwteVIEyeaY5Fc7R4dapF/BvRoSYFeqfBk4m0V1Vafq5Pjv25wvA==}
+    engines: {node: '>= 6'}
+
+  cssesc@3.0.0:
+    resolution: {integrity: sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==}
+    engines: {node: '>=4'}
+    hasBin: true
+
+  cssfilter@0.0.10:
+    resolution: {integrity: sha512-FAaLDaplstoRsDR8XGYH51znUN0UY7nMc6Z9/fvE8EXGwvJE9hu7W2vHwx1+bd6gCYnln9nLbzxFTrcO9YQDZw==}
+
+  cssnano-preset-default@7.0.12:
+    resolution: {integrity: sha512-B3Eoouzw/sl2zANI0AL9KbacummJTCww+fkHaDBMZad/xuVx8bUduPLly6hKVQAlrmvYkS1jB1CVQEKm3gn0AA==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  cssnano-utils@5.0.1:
+    resolution: {integrity: sha512-ZIP71eQgG9JwjVZsTPSqhc6GHgEr53uJ7tK5///VfyWj6Xp2DBmixWHqJgPno+PqATzn48pL42ww9x5SSGmhZg==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  cssnano@7.1.4:
+    resolution: {integrity: sha512-T9PNS7y+5Nc9Qmu9mRONqfxG1RVY7Vuvky0XN6MZ+9hqplesTEwnj9r0ROtVuSwUVfaDhVlavuzWIVLUgm4hkQ==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  csso@5.0.5:
+    resolution: {integrity: sha512-0LrrStPOdJj+SPCCrGhzryycLjwcgUSHBtxNA8aIDxf0GLsRh1cKYhB00Gd1lDOS4yGH69+SNn13+TWbVHETFQ==}
+    engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0, npm: '>=7.0.0'}
+
+  csstype@3.2.3:
+    resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
+
+  db0@0.3.4:
+    resolution: {integrity: sha512-RiXXi4WaNzPTHEOu8UPQKMooIbqOEyqA1t7Z6MsdxSCeb8iUC9ko3LcmsLmeUt2SM5bctfArZKkRQggKZz7JNw==}
+    peerDependencies:
+      '@electric-sql/pglite': '*'
+      '@libsql/client': '*'
+      better-sqlite3: '*'
+      drizzle-orm: '*'
+      mysql2: '*'
+      sqlite3: '*'
+    peerDependenciesMeta:
+      '@electric-sql/pglite':
+        optional: true
+      '@libsql/client':
+        optional: true
+      better-sqlite3:
+        optional: true
+      drizzle-orm:
+        optional: true
+      mysql2:
+        optional: true
+      sqlite3:
+        optional: true
+
+  debug@4.4.3:
+    resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
+    engines: {node: '>=6.0'}
+    peerDependencies:
+      supports-color: '*'
+    peerDependenciesMeta:
+      supports-color:
+        optional: true
+
+  decompress-response@6.0.0:
+    resolution: {integrity: sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==}
+    engines: {node: '>=10'}
+
+  deep-extend@0.6.0:
+    resolution: {integrity: sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==}
+    engines: {node: '>=4.0.0'}
+
+  deep-is@0.1.4:
+    resolution: {integrity: sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ==}
+
+  deepmerge@4.3.1:
+    resolution: {integrity: sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==}
+    engines: {node: '>=0.10.0'}
+
+  default-browser-id@5.0.1:
+    resolution: {integrity: sha512-x1VCxdX4t+8wVfd1so/9w+vQ4vx7lKd2Qp5tDRutErwmR85OgmfX7RlLRMWafRMY7hbEiXIbudNrjOAPa/hL8Q==}
+    engines: {node: '>=18'}
+
+  default-browser@5.5.0:
+    resolution: {integrity: sha512-H9LMLr5zwIbSxrmvikGuI/5KGhZ8E2zH3stkMgM5LpOWDutGM2JZaj460Udnf1a+946zc7YBgrqEWwbk7zHvGw==}
+    engines: {node: '>=18'}
+
+  define-lazy-prop@2.0.0:
+    resolution: {integrity: sha512-Ds09qNh8yw3khSjiJjiUInaGX9xlqZDY7JVryGxdxV7NPeuqQfplOpQ66yJFZut3jLa5zOwkXw1g9EI2uKh4Og==}
+    engines: {node: '>=8'}
+
+  define-lazy-prop@3.0.0:
+    resolution: {integrity: sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg==}
+    engines: {node: '>=12'}
+
+  defu@6.1.6:
+    resolution: {integrity: sha512-f8mefEW4WIVg4LckePx3mALjQSPQgFlg9U8yaPdlsbdYcHQyj9n2zL2LJEA52smeYxOvmd/nB7TpMtHGMTHcug==}
+
+  delayed-stream@1.0.0:
+    resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==}
+    engines: {node: '>=0.4.0'}
+
+  delegates@1.0.0:
+    resolution: {integrity: sha512-bd2L678uiWATM6m5Z1VzNCErI3jiGzt6HGY8OVICs40JQq/HALfbyNJmp0UDakEY4pMMaN0Ly5om/B1VI/+xfQ==}
+
+  deno@2.7.12:
+    resolution: {integrity: sha512-hqOO7hoKTo1F9cfKOFlwr8rVhsRr1OZvGHdOk07Ov+SdUQTV195fQfnvFDADl6WiqKsenDze7V4EemgdAH/5Ng==}
+    hasBin: true
+
+  denque@2.1.0:
+    resolution: {integrity: sha512-HVQE3AAb/pxF8fQAoiqpvg9i3evqug3hoiwakOyZAwJm+6vZehbkYXZ0l4JxS+I3QxM97v5aaRNhj8v5oBhekw==}
+    engines: {node: '>=0.10'}
+
+  depd@2.0.0:
+    resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
+    engines: {node: '>= 0.8'}
+
+  destr@2.0.5:
+    resolution: {integrity: sha512-ugFTXCtDZunbzasqBxrK93Ik/DRYsO6S/fedkWEMKqt04xZ4csmnmwGDBAb07QWNaGMAmnTIemsYZCksjATwsA==}
+
+  detect-libc@2.1.2:
+    resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
+    engines: {node: '>=8'}
+
+  devalue@5.6.4:
+    resolution: {integrity: sha512-Gp6rDldRsFh/7XuouDbxMH3Mx8GMCcgzIb1pDTvNyn8pZGQ22u+Wa+lGV9dQCltFQ7uVw0MhRyb8XDskNFOReA==}
+
+  diff@8.0.4:
+    resolution: {integrity: sha512-DPi0FmjiSU5EvQV0++GFDOJ9ASQUVFh5kD+OzOnYdi7n3Wpm9hWWGfB/O2blfHcMVTL5WkQXSnRiK9makhrcnw==}
+    engines: {node: '>=0.3.1'}
+
+  dom-serializer@2.0.0:
+    resolution: {integrity: sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==}
+
+  domelementtype@2.3.0:
+    resolution: {integrity: sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==}
+
+  domhandler@5.0.3:
+    resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==}
+    engines: {node: '>= 4'}
+
+  domutils@3.2.2:
+    resolution: {integrity: sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==}
+
+  dot-prop@10.1.0:
+    resolution: {integrity: sha512-MVUtAugQMOff5RnBy2d9N31iG0lNwg1qAoAOn7pOK5wf94WIaE3My2p3uwTQuvS2AcqchkcR3bHByjaM0mmi7Q==}
+    engines: {node: '>=20'}
+
+  dotenv-flow@4.1.0:
+    resolution: {integrity: sha512-0cwP9jpQBQfyHwvE0cRhraZMkdV45TQedA8AAUZMsFzvmLcQyc1HPv+oX0OOYwLFjIlvgVepQ+WuQHbqDaHJZg==}
+    engines: {node: '>= 12.0.0'}
+
+  dotenv@16.6.1:
+    resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
+    engines: {node: '>=12'}
+
+  dotenv@17.4.2:
+    resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
+    engines: {node: '>=12'}
+
+  dunder-proto@1.0.1:
+    resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
+    engines: {node: '>= 0.4'}
+
+  duplexer@0.1.2:
+    resolution: {integrity: sha512-jtD6YG370ZCIi/9GTaJKQxWTZD045+4R4hTk/x1UyoqadyJ9x9CgSi1RlVDQF8U2sxLLSnFkCaMihqljHIWgMg==}
+
+  eastasianwidth@0.2.0:
+    resolution: {integrity: sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==}
+
+  editorconfig@1.0.7:
+    resolution: {integrity: sha512-e0GOtq/aTQhVdNyDU9e02+wz9oDDM+SIOQxWME2QRjzRX5yyLAuHDE+0aE8vHb9XRC8XD37eO2u57+F09JqFhw==}
+    engines: {node: '>=14'}
+    hasBin: true
+
+  ee-first@1.1.1:
+    resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
+
+  electron-to-chromium@1.5.331:
+    resolution: {integrity: sha512-IbxXrsTlD3hRodkLnbxAPP4OuJYdWCeM3IOdT+CpcMoIwIoDfCmRpEtSPfwBXxVkg9xmBeY7Lz2Eo2TDn/HC3Q==}
+
+  elementtree@0.1.7:
+    resolution: {integrity: sha512-wkgGT6kugeQk/P6VZ/f4T+4HB41BVgNBq5CDIZVbQ02nvTVqAiVTbskxxu3eA/X96lMlfYOwnLQpN2v5E1zDEg==}
+    engines: {node: '>= 0.4.0'}
+
+  embla-carousel-auto-height@8.6.0:
+    resolution: {integrity: sha512-/HrJQOEM6aol/oF33gd2QlINcXy3e19fJWvHDuHWp2bpyTa+2dm9tVVJak30m2Qy6QyQ6Fc8DkImtv7pxWOJUQ==}
+    peerDependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-auto-scroll@8.6.0:
+    resolution: {integrity: sha512-WT9fWhNXFpbQ6kP+aS07oF5IHYLZ1Dx4DkwgCY8Hv2ZyYd2KMCPfMV1q/cA3wFGuLO7GMgKiySLX90/pQkcOdQ==}
+    peerDependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-autoplay@8.6.0:
+    resolution: {integrity: sha512-OBu5G3nwaSXkZCo1A6LTaFMZ8EpkYbwIaH+bPqdBnDGQ2fh4+NbzjXjs2SktoPNKCtflfVMc75njaDHOYXcrsA==}
+    peerDependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-class-names@8.6.0:
+    resolution: {integrity: sha512-l1hm1+7GxQ+zwdU2sea/LhD946on7XO2qk3Xq2XWSwBaWfdgchXdK567yzLtYSHn4sWYdiX+x4nnaj+saKnJkw==}
+    peerDependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-fade@8.6.0:
+    resolution: {integrity: sha512-qaYsx5mwCz72ZrjlsXgs1nKejSrW+UhkbOMwLgfRT7w2LtdEB03nPRI06GHuHv5ac2USvbEiX2/nAHctcDwvpg==}
+    peerDependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-reactive-utils@8.6.0:
+    resolution: {integrity: sha512-fMVUDUEx0/uIEDM0Mz3dHznDhfX+znCCDCeIophYb1QGVM7YThSWX+wz11zlYwWFOr74b4QLGg0hrGPJeG2s4A==}
+    peerDependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-vue@8.6.0:
+    resolution: {integrity: sha512-v8UO5UsyLocZnu/LbfQA7Dn2QHuZKurJY93VUmZYP//QRWoCWOsionmvLLAlibkET3pGPs7++03VhJKbWD7vhQ==}
+    peerDependencies:
+      vue: ^3.2.37
+
+  embla-carousel-wheel-gestures@8.1.0:
+    resolution: {integrity: sha512-J68jkYrxbWDmXOm2n2YHl+uMEXzkGSKjWmjaEgL9xVvPb3HqVmg6rJSKfI3sqIDVvm7mkeTy87wtG/5263XqHQ==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      embla-carousel: ^8.0.0 || ~8.0.0-rc03
+
+  embla-carousel@8.6.0:
+    resolution: {integrity: sha512-SjWyZBHJPbqxHOzckOfo8lHisEaJWmwd23XppYFYVh10bU66/Pn5tkVkbkCMZVdbUE5eTCI2nD8OyIP4Z+uwkA==}
+
+  emoji-regex@10.6.0:
+    resolution: {integrity: sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A==}
+
+  emoji-regex@8.0.0:
+    resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
+
+  emoji-regex@9.2.2:
+    resolution: {integrity: sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==}
+
+  encodeurl@2.0.0:
+    resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
+    engines: {node: '>= 0.8'}
+
+  encoding@0.1.13:
+    resolution: {integrity: sha512-ETBauow1T35Y/WZMkio9jiM0Z5xjHHmJ4XmjZOq1l/dXz3lr2sRn87nJy20RupqSh1F2m3HHPSp8ShIPQJrJ3A==}
+
+  end-of-stream@1.4.5:
+    resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
+
+  enhanced-resolve@5.20.1:
+    resolution: {integrity: sha512-Qohcme7V1inbAfvjItgw0EaxVX5q2rdVEZHRBrEQdRZTssLDGsL8Lwrznl8oQ/6kuTJONLaDcGjkNP247XEhcA==}
+    engines: {node: '>=10.13.0'}
+
+  entities@4.5.0:
+    resolution: {integrity: sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==}
+    engines: {node: '>=0.12'}
+
+  entities@7.0.1:
+    resolution: {integrity: sha512-TWrgLOFUQTH994YUyl1yT4uyavY5nNB5muff+RtWaqNVCAK408b5ZnnbNAUEWLTCpum9w6arT70i1XdQ4UeOPA==}
+    engines: {node: '>=0.12'}
+
+  env-paths@2.2.1:
+    resolution: {integrity: sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==}
+    engines: {node: '>=6'}
+
+  err-code@2.0.3:
+    resolution: {integrity: sha512-2bmlRpNKBxT/CRmPOlyISQpNj+qSeYvcym/uT0Jx2bMOlKLtSy1ZmLuVxSEKKyor/N5yhvp/ZiG1oE3DEYMSFA==}
+
+  error-stack-parser-es@1.0.5:
+    resolution: {integrity: sha512-5qucVt2XcuGMcEGgWI7i+yZpmpByQ8J1lHhcL7PwqCwu9FPP3VUXzT4ltHe5i2z9dePwEHcDVOAfSnHsOlCXRA==}
+
+  errx@0.1.0:
+    resolution: {integrity: sha512-fZmsRiDNv07K6s2KkKFTiD2aIvECa7++PKyD5NC32tpRw46qZA3sOz+aM+/V9V0GDHxVTKLziveV4JhzBHDp9Q==}
+
+  es-define-property@1.0.1:
+    resolution: {integrity: sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==}
+    engines: {node: '>= 0.4'}
+
+  es-errors@1.3.0:
+    resolution: {integrity: sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==}
+    engines: {node: '>= 0.4'}
+
+  es-module-lexer@2.0.0:
+    resolution: {integrity: sha512-5POEcUuZybH7IdmGsD8wlf0AI55wMecM9rVBTI/qEAy2c1kTOm3DjFYjrBdI2K3BaJjJYfYFeRtM0t9ssnRuxw==}
+
+  es-object-atoms@1.1.1:
+    resolution: {integrity: sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==}
+    engines: {node: '>= 0.4'}
+
+  es-set-tostringtag@2.1.0:
+    resolution: {integrity: sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==}
+    engines: {node: '>= 0.4'}
+
+  esbuild@0.25.12:
+    resolution: {integrity: sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  esbuild@0.27.7:
+    resolution: {integrity: sha512-IxpibTjyVnmrIQo5aqNpCgoACA/dTKLTlhMHihVHhdkxKyPO1uBBthumT0rdHmcsk9uMonIWS0m4FljWzILh3w==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  escalade@3.2.0:
+    resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
+    engines: {node: '>=6'}
+
+  escape-html@1.0.3:
+    resolution: {integrity: sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==}
+
+  escape-string-regexp@1.0.5:
+    resolution: {integrity: sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==}
+    engines: {node: '>=0.8.0'}
+
+  escape-string-regexp@4.0.0:
+    resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==}
+    engines: {node: '>=10'}
+
+  escape-string-regexp@5.0.0:
+    resolution: {integrity: sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==}
+    engines: {node: '>=12'}
+
+  escodegen@2.1.0:
+    resolution: {integrity: sha512-2NlIDTwUWJN0mRPQOdtQBzbUHvdGY2P1VXSyU83Q3xKxM7WHX2Ql8dKq782Q9TgQUNOLEzEYu9bzLNj1q88I5w==}
+    engines: {node: '>=6.0'}
+    hasBin: true
+
+  eslint-config-flat-gitignore@2.3.0:
+    resolution: {integrity: sha512-bg4ZLGgoARg1naWfsINUUb/52Ksw/K22K+T16D38Y8v+/sGwwIYrGvH/JBjOin+RQtxxC9tzNNiy4shnGtGyyQ==}
+    peerDependencies:
+      eslint: ^9.5.0 || ^10.0.0
+
+  eslint-flat-config-utils@3.1.0:
+    resolution: {integrity: sha512-lM+Nwo2CzpuTS/RASQExlEIwk/BQoKqJWX6VbDlLMb/mveqvt9MMrRXFEkG3bseuK6g8noKZLeX82epkILtv4A==}
+
+  eslint-import-context@0.1.9:
+    resolution: {integrity: sha512-K9Hb+yRaGAGUbwjhFNHvSmmkZs9+zbuoe3kFQ4V1wYjrepUFYM2dZAfNtjbbj3qsPfUfsA68Bx/ICWQMi+C8Eg==}
+    engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
+    peerDependencies:
+      unrs-resolver: ^1.0.0
+    peerDependenciesMeta:
+      unrs-resolver:
+        optional: true
+
+  eslint-merge-processors@2.0.0:
+    resolution: {integrity: sha512-sUuhSf3IrJdGooquEUB5TNpGNpBoQccbnaLHsb1XkBLUPPqCNivCpY05ZcpCOiV9uHwO2yxXEWVczVclzMxYlA==}
+    peerDependencies:
+      eslint: '*'
+
+  eslint-plugin-import-lite@0.5.2:
+    resolution: {integrity: sha512-XvfdWOC5dSLEI9krIPRlNmKSI2ViIE9pVylzfV9fCq0ZpDaNeUk6o0wZv0OzN83QdadgXp1NsY0qjLINxwYCsw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: '>=9.0.0'
+
+  eslint-plugin-import-x@4.16.2:
+    resolution: {integrity: sha512-rM9K8UBHcWKpzQzStn1YRN2T5NvdeIfSVoKu/lKF41znQXHAUcBbYXe5wd6GNjZjTrP7viQ49n1D83x/2gYgIw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      '@typescript-eslint/utils': ^8.56.0
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      eslint-import-resolver-node: '*'
+    peerDependenciesMeta:
+      '@typescript-eslint/utils':
+        optional: true
+      eslint-import-resolver-node:
+        optional: true
+
+  eslint-plugin-jsdoc@62.9.0:
+    resolution: {integrity: sha512-PY7/X4jrVgoIDncUmITlUqK546Ltmx/Pd4Hdsu4CvSjryQZJI2mEV4vrdMufyTetMiZ5taNSqvK//BTgVUlNkA==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+    peerDependencies:
+      eslint: ^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0
+
+  eslint-plugin-regexp@3.1.0:
+    resolution: {integrity: sha512-qGXIC3DIKZHcK1H9A9+Byz9gmndY6TTSRkSMTZpNXdyCw2ObSehRgccJv35n9AdUakEjQp5VFNLas6BMXizCZg==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+    peerDependencies:
+      eslint: '>=9.38.0'
+
+  eslint-plugin-unicorn@63.0.0:
+    resolution: {integrity: sha512-Iqecl9118uQEXYh7adylgEmGfkn5es3/mlQTLLkd4pXkIk9CTGrAbeUux+YljSa2ohXCBmQQ0+Ej1kZaFgcfkA==}
+    engines: {node: ^20.10.0 || >=21.0.0}
+    peerDependencies:
+      eslint: '>=9.38.0'
+
+  eslint-plugin-vue@10.8.0:
+    resolution: {integrity: sha512-f1J/tcbnrpgC8suPN5AtdJ5MQjuXbSU9pGRSSYAuF3SHoiYCOdEX6O22pLaRyLHXvDcOe+O5ENgc1owQ587agA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      '@stylistic/eslint-plugin': ^2.0.0 || ^3.0.0 || ^4.0.0 || ^5.0.0
+      '@typescript-eslint/parser': ^7.0.0 || ^8.0.0
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      vue-eslint-parser: ^10.0.0
+    peerDependenciesMeta:
+      '@stylistic/eslint-plugin':
+        optional: true
+      '@typescript-eslint/parser':
+        optional: true
+
+  eslint-processor-vue-blocks@2.0.0:
+    resolution: {integrity: sha512-u4W0CJwGoWY3bjXAuFpc/b6eK3NQEI8MoeW7ritKj3G3z/WtHrKjkqf+wk8mPEy5rlMGS+k6AZYOw2XBoN/02Q==}
+    peerDependencies:
+      '@vue/compiler-sfc': ^3.3.0
+      eslint: '>=9.0.0'
+
+  eslint-scope@9.1.2:
+    resolution: {integrity: sha512-xS90H51cKw0jltxmvmHy2Iai1LIqrfbw57b79w/J7MfvDfkIkFZ+kj6zC3BjtUwh150HsSSdxXZcsuv72miDFQ==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+
+  eslint-typegen@2.3.1:
+    resolution: {integrity: sha512-zVdh8rThBvv2o5T/K524Fr5iy1Jo0q09rHL7y7FbOhgMB177T2gw+shxfC4ChCEqdq6/y6LJA4j8Fbr/Xls9aw==}
+    peerDependencies:
+      eslint: ^9.0.0 || ^10.0.0
+
+  eslint-visitor-keys@3.4.3:
+    resolution: {integrity: sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+
+  eslint-visitor-keys@4.2.1:
+    resolution: {integrity: sha512-Uhdk5sfqcee/9H/rCOJikYz67o0a2Tw2hGRPOG2Y1R2dg7brRe1uG0yaNQDHu+TO/uQPF/5eCapvYSmHUjt7JQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  eslint-visitor-keys@5.0.1:
+    resolution: {integrity: sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+
+  eslint@10.2.0:
+    resolution: {integrity: sha512-+L0vBFYGIpSNIt/KWTpFonPrqYvgKw1eUI5Vn7mEogrQcWtWYtNQ7dNqC+px/J0idT3BAkiWrhfS7k+Tum8TUA==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+    hasBin: true
+    peerDependencies:
+      jiti: '*'
+    peerDependenciesMeta:
+      jiti:
+        optional: true
+
+  espree@10.4.0:
+    resolution: {integrity: sha512-j6PAQ2uUr79PZhBjP5C5fhl8e39FmRnOjsD5lGnWrFU8i2G776tBK7+nP8KuQUTTyAZUwfQqXAgrVH5MbH9CYQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  espree@11.2.0:
+    resolution: {integrity: sha512-7p3DrVEIopW1B1avAGLuCSh1jubc01H2JHc8B4qqGblmg5gI9yumBgACjWo4JlIc04ufug4xJ3SQI8HkS/Rgzw==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+
+  espree@9.6.1:
+    resolution: {integrity: sha512-oruZaFkjorTpF32kDSI5/75ViwGeZginGGy2NoOSg3Q9bnwlnmDm4HLnkl0RE3n+njDXR037aY1+x58Z/zFdwQ==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+
+  esprima@4.0.1:
+    resolution: {integrity: sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==}
+    engines: {node: '>=4'}
+    hasBin: true
+
+  esquery@1.7.0:
+    resolution: {integrity: sha512-Ap6G0WQwcU/LHsvLwON1fAQX9Zp0A2Y6Y/cJBl9r/JbW90Zyg4/zbG6zzKa2OTALELarYHmKu0GhpM5EO+7T0g==}
+    engines: {node: '>=0.10'}
+
+  esrecurse@4.3.0:
+    resolution: {integrity: sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag==}
+    engines: {node: '>=4.0'}
+
+  estraverse@5.3.0:
+    resolution: {integrity: sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==}
+    engines: {node: '>=4.0'}
+
+  estree-walker@2.0.2:
+    resolution: {integrity: sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==}
+
+  estree-walker@3.0.3:
+    resolution: {integrity: sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==}
+
+  esutils@2.0.3:
+    resolution: {integrity: sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==}
+    engines: {node: '>=0.10.0'}
+
+  etag@1.8.1:
+    resolution: {integrity: sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==}
+    engines: {node: '>= 0.6'}
+
+  event-target-shim@5.0.1:
+    resolution: {integrity: sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==}
+    engines: {node: '>=6'}
+
+  events-universal@1.0.1:
+    resolution: {integrity: sha512-LUd5euvbMLpwOF8m6ivPCbhQeSiYVNb8Vs0fQ8QjXo0JTkEHpz8pxdQf0gStltaPpw0Cca8b39KxvK9cfKRiAw==}
+
+  events@3.3.0:
+    resolution: {integrity: sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==}
+    engines: {node: '>=0.8.x'}
+
+  execa@8.0.1:
+    resolution: {integrity: sha512-VyhnebXciFV2DESc+p6B+y0LjSm0krU4OgJN44qFAhBY0TJ+1V61tYD2+wHusZ6F9n5K+vl8k0sTy7PEfV4qpg==}
+    engines: {node: '>=16.17'}
+
+  expand-template@2.0.3:
+    resolution: {integrity: sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==}
+    engines: {node: '>=6'}
+
+  expect-type@1.3.0:
+    resolution: {integrity: sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==}
+    engines: {node: '>=12.0.0'}
+
+  exsolve@1.0.8:
+    resolution: {integrity: sha512-LmDxfWXwcTArk8fUEnOfSZpHOJ6zOMUJKOtFLFqJLoKJetuQG874Uc7/Kki7zFLzYybmZhp1M7+98pfMqeX8yA==}
+
+  fake-indexeddb@6.2.5:
+    resolution: {integrity: sha512-CGnyrvbhPlWYMngksqrSSUT1BAVP49dZocrHuK0SvtR0D5TMs5wP0o3j7jexDJW01KSadjBp1M/71o/KR3nD1w==}
+    engines: {node: '>=18'}
+
+  fast-deep-equal@3.1.3:
+    resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==}
+
+  fast-fifo@1.3.2:
+    resolution: {integrity: sha512-/d9sfos4yxzpwkDkuN7k2SqFKtYNmCTzgfEpz82x34IM9/zc8KGxQoXg1liNC/izpRM/MBdt44Nmx41ZWqk+FQ==}
+
+  fast-glob@3.3.3:
+    resolution: {integrity: sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==}
+    engines: {node: '>=8.6.0'}
+
+  fast-json-stable-stringify@2.1.0:
+    resolution: {integrity: sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==}
+
+  fast-levenshtein@2.0.6:
+    resolution: {integrity: sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==}
+
+  fast-npm-meta@1.4.2:
+    resolution: {integrity: sha512-XXyd9d3ie/JeIIjm6WeKalvapGGFI4ShAjPJM78vgUFYzoEsuNSjvvVTuht0XZcwbVdOnEEGzhxwguRbxkIcDg==}
+    hasBin: true
+
+  fast-string-truncated-width@1.2.1:
+    resolution: {integrity: sha512-Q9acT/+Uu3GwGj+5w/zsGuQjh9O1TyywhIwAxHudtWrgF09nHOPrvTLhQevPbttcxjr/SNN7mJmfOw/B1bXgow==}
+
+  fast-string-width@1.1.0:
+    resolution: {integrity: sha512-O3fwIVIH5gKB38QNbdg+3760ZmGz0SZMgvwJbA1b2TGXceKE6A2cOlfogh1iw8lr049zPyd7YADHy+B7U4W9bQ==}
+
+  fast-wrap-ansi@0.1.6:
+    resolution: {integrity: sha512-HlUwET7a5gqjURj70D5jl7aC3Zmy4weA1SHUfM0JFI0Ptq987NH2TwbBFLoERhfwk+E+eaq4EK3jXoT+R3yp3w==}
+
+  fastq@1.20.1:
+    resolution: {integrity: sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==}
+
+  fd-slicer@1.1.0:
+    resolution: {integrity: sha512-cE1qsB/VwyQozZ+q1dGxR8LBYNZeofhEdUNGSMbQD3Gw2lAzX9Zb3uIU6Ebc/Fmyjo9AWWfnn0AUCHqtevs/8g==}
+
+  fdir@6.5.0:
+    resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
+    engines: {node: '>=12.0.0'}
+    peerDependencies:
+      picomatch: ^3 || ^4
+    peerDependenciesMeta:
+      picomatch:
+        optional: true
+
+  file-entry-cache@8.0.0:
+    resolution: {integrity: sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==}
+    engines: {node: '>=16.0.0'}
+
+  file-uri-to-path@1.0.0:
+    resolution: {integrity: sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==}
+
+  fill-range@7.1.1:
+    resolution: {integrity: sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==}
+    engines: {node: '>=8'}
+
+  find-up-simple@1.0.1:
+    resolution: {integrity: sha512-afd4O7zpqHeRyg4PfDQsXmlDe2PfdHtJt6Akt8jOWaApLOZk5JXs6VMR29lz03pRe9mpykrRCYIYxaJYcfpncQ==}
+    engines: {node: '>=18'}
+
+  find-up@5.0.0:
+    resolution: {integrity: sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==}
+    engines: {node: '>=10'}
+
+  find-up@8.0.0:
+    resolution: {integrity: sha512-JGG8pvDi2C+JxidYdIwQDyS/CgcrIdh18cvgxcBge3wSHRQOrooMD3GlFBcmMJAN9M42SAZjDp5zv1dglJjwww==}
+    engines: {node: '>=20'}
+
+  flat-cache@4.0.1:
+    resolution: {integrity: sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==}
+    engines: {node: '>=16'}
+
+  flatted@3.4.2:
+    resolution: {integrity: sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==}
+
+  fontaine@0.8.0:
+    resolution: {integrity: sha512-eek1GbzOdWIj9FyQH/emqW1aEdfC3lYRCHepzwlFCm5T77fBSRSyNRKE6/antF1/B1M+SfJXVRQTY9GAr7lnDg==}
+    engines: {node: '>=18.12.0'}
+
+  fontkitten@1.0.3:
+    resolution: {integrity: sha512-Wp1zXWPVUPBmfoa3Cqc9ctaKuzKAV6uLstRqlR56kSjplf5uAce+qeyYym7F+PHbGTk+tCEdkCW6RD7DX/gBZw==}
+    engines: {node: '>=20'}
+
+  fontless@0.2.1:
+    resolution: {integrity: sha512-mUWZ8w91/mw2KEcZ6gHNoNNmsAq9Wiw2IypIux5lM03nhXm+WSloXGUNuRETNTLqZexMgpt7Aj/v63qqrsWraQ==}
+    engines: {node: '>=18.12.0'}
+    peerDependencies:
+      vite: '*'
+    peerDependenciesMeta:
+      vite:
+        optional: true
+
+  foreground-child@3.3.1:
+    resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
+    engines: {node: '>=14'}
+
+  form-data@4.0.5:
+    resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==}
+    engines: {node: '>= 6'}
+
+  fraction.js@5.3.4:
+    resolution: {integrity: sha512-1X1NTtiJphryn/uLQz3whtY6jK3fTqoE3ohKs0tT+Ujr1W59oopxmoEh7Lu5p6vBaPbgoM0bzveAW4Qi5RyWDQ==}
+
+  framer-motion@12.38.0:
+    resolution: {integrity: sha512-rFYkY/pigbcswl1XQSb7q424kSTQ8q6eAC+YUsSKooHQYuLdzdHjrt6uxUC+PRAO++q5IS7+TamgIw1AphxR+g==}
+    peerDependencies:
+      '@emotion/is-prop-valid': '*'
+      react: ^18.0.0 || ^19.0.0
+      react-dom: ^18.0.0 || ^19.0.0
+    peerDependenciesMeta:
+      '@emotion/is-prop-valid':
+        optional: true
+      react:
+        optional: true
+      react-dom:
+        optional: true
+
+  fresh@2.0.0:
+    resolution: {integrity: sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A==}
+    engines: {node: '>= 0.8'}
+
+  fs-constants@1.0.0:
+    resolution: {integrity: sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==}
+
+  fs-extra@11.3.4:
+    resolution: {integrity: sha512-CTXd6rk/M3/ULNQj8FBqBWHYBVYybQ3VPBw0xGKFe3tuH7ytT6ACnvzpIQ3UZtB8yvUKC2cXn1a+x+5EVQLovA==}
+    engines: {node: '>=14.14'}
+
+  fs-extra@9.1.0:
+    resolution: {integrity: sha512-hcg3ZmepS30/7BSFqRvoo3DOMQu7IjqxO5nCDt+zM9XWjb33Wg7ziNT+Qvqbuc3+gWpzO02JubVyk2G4Zvo1OQ==}
+    engines: {node: '>=10'}
+
+  fs-minipass@2.1.0:
+    resolution: {integrity: sha512-V/JgOLFCS+R6Vcq0slCuaeWEdNC3ouDlJMNIsacH2VtALiu9mV4LPrHc5cDl8k5aw6J8jwgWWpiTo5RYhmIzvg==}
+    engines: {node: '>= 8'}
+
+  fs.realpath@1.0.0:
+    resolution: {integrity: sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==}
+
+  fsevents@2.3.3:
+    resolution: {integrity: sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==}
+    engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
+    os: [darwin]
+
+  function-bind@1.1.2:
+    resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
+
+  fuse.js@7.3.0:
+    resolution: {integrity: sha512-plz8RVjfcDedTGfVngWH1jmJvBvAwi1v2jecfDerbEnMcmOYUEEwKFTHbNoCiYyzaK2Ws8lABkTCcRSqCY1q4w==}
+    engines: {node: '>=10'}
+
+  fzf@0.5.2:
+    resolution: {integrity: sha512-Tt4kuxLXFKHy8KT40zwsUPUkg1CrsgY25FxA2U/j/0WgEDCk3ddc/zLTCCcbSHX9FcKtLuVaDGtGE/STWC+j3Q==}
+
+  gauge@4.0.4:
+    resolution: {integrity: sha512-f9m+BEN5jkg6a0fZjleidjN51VE1X+mPFQ2DJ0uv1V39oCLCbsGe6yjbBnp7eK7z/+GAon99a3nHuqbuuthyPg==}
+    engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
+    deprecated: This package is no longer supported.
+
+  gensync@1.0.0-beta.2:
+    resolution: {integrity: sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==}
+    engines: {node: '>=6.9.0'}
+
+  get-caller-file@2.0.5:
+    resolution: {integrity: sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==}
+    engines: {node: 6.* || 8.* || >= 10.*}
+
+  get-east-asian-width@1.5.0:
+    resolution: {integrity: sha512-CQ+bEO+Tva/qlmw24dCejulK5pMzVnUOFOijVogd3KQs07HnRIgp8TGipvCCRT06xeYEbpbgwaCxglFyiuIcmA==}
+    engines: {node: '>=18'}
+
+  get-intrinsic@1.3.0:
+    resolution: {integrity: sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==}
+    engines: {node: '>= 0.4'}
+
+  get-port-please@3.2.0:
+    resolution: {integrity: sha512-I9QVvBw5U/hw3RmWpYKRumUeaDgxTPd401x364rLmWBJcOQ753eov1eTgzDqRG9bqFIfDc7gfzcQEWrUri3o1A==}
+
+  get-proto@1.0.1:
+    resolution: {integrity: sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==}
+    engines: {node: '>= 0.4'}
+
+  get-stream@8.0.1:
+    resolution: {integrity: sha512-VaUJspBffn/LMCJVoMvSAdmscJyS1auj5Zulnn5UoYcY531UWmdwhRWkcGKnGU93m5HSXP9LP2usOryrBtQowA==}
+    engines: {node: '>=16'}
+
+  get-tsconfig@4.13.7:
+    resolution: {integrity: sha512-7tN6rFgBlMgpBML5j8typ92BKFi2sFQvIdpAqLA2beia5avZDrMs0FLZiM5etShWq5irVyGcGMEA1jcDaK7A/Q==}
+
+  giget@3.2.0:
+    resolution: {integrity: sha512-GvHTWcykIR/fP8cj8dMpuMMkvaeJfPvYnhq0oW+chSeIr+ldX21ifU2Ms6KBoyKZQZmVaUAAhQ2EZ68KJF8a7A==}
+    hasBin: true
+
+  github-from-package@0.0.0:
+    resolution: {integrity: sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==}
+
+  glob-parent@5.1.2:
+    resolution: {integrity: sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==}
+    engines: {node: '>= 6'}
+
+  glob-parent@6.0.2:
+    resolution: {integrity: sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==}
+    engines: {node: '>=10.13.0'}
+
+  glob@10.5.0:
+    resolution: {integrity: sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
+    hasBin: true
+
+  glob@13.0.6:
+    resolution: {integrity: sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==}
+    engines: {node: 18 || 20 || >=22}
+
+  glob@7.2.3:
+    resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
+
+  global-directory@4.0.1:
+    resolution: {integrity: sha512-wHTUcDUoZ1H5/0iVqEudYW4/kAlN5cZ3j/bXn0Dpbizl9iaUVeWSHqiOjsgk6OW2bkLclbBjzewBz6weQ1zA2Q==}
+    engines: {node: '>=18'}
+
+  globals@16.5.0:
+    resolution: {integrity: sha512-c/c15i26VrJ4IRt5Z89DnIzCGDn9EcebibhAOjw5ibqEHsE1wLUgkPn9RDmNcUKyU87GeaL633nyJ+pplFR2ZQ==}
+    engines: {node: '>=18'}
+
+  globals@17.4.0:
+    resolution: {integrity: sha512-hjrNztw/VajQwOLsMNT1cbJiH2muO3OROCHnbehc8eY5JyD2gqz4AcMHPqgaOR59DjgUjYAYLeH699g/eWi2jw==}
+    engines: {node: '>=18'}
+
+  globby@16.2.0:
+    resolution: {integrity: sha512-QrJia2qDf5BB/V6HYlDTs0I0lBahyjLzpGQg3KT7FnCdTonAyPy2RtY802m2k4ALx6Dp752f82WsOczEVr3l6Q==}
+    engines: {node: '>=20'}
+
+  gopd@1.2.0:
+    resolution: {integrity: sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==}
+    engines: {node: '>= 0.4'}
+
+  graceful-fs@4.2.11:
+    resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==}
+
+  gzip-size@7.0.0:
+    resolution: {integrity: sha512-O1Ld7Dr+nqPnmGpdhzLmMTQ4vAsD+rHwMm1NLUmoUFFymBOMKxCCrtDxqdBRYXdeEPEi3SyoR4TizJLQrnKBNA==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  h3@1.15.11:
+    resolution: {integrity: sha512-L3THSe2MPeBwgIZVSH5zLdBBU90TOxarvhK9d04IDY2AmVS8j2Jz2LIWtwsGOU3lu2I5jCN7FNvVfY2+XyF+mg==}
+
+  h3@2.0.1-rc.20:
+    resolution: {integrity: sha512-28ljodXuUp0fZovdiSRq4G9OgrxCztrJe5VdYzXAB7ueRvI7pIUqLU14Xi3XqdYJ/khXjfpUOOD2EQa6CmBgsg==}
+    engines: {node: '>=20.11.1'}
+    hasBin: true
+    peerDependencies:
+      crossws: ^0.4.1
+    peerDependenciesMeta:
+      crossws:
+        optional: true
+
+  happy-dom@20.9.0:
+    resolution: {integrity: sha512-GZZ9mKe8r646NUAf/zemnGbjYh4Bt8/MqASJY+pSm5ZDtc3YQox+4gsLI7yi1hba6o+eCsGxpHn5+iEVn31/FQ==}
+    engines: {node: '>=20.0.0'}
+
+  has-symbols@1.1.0:
+    resolution: {integrity: sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==}
+    engines: {node: '>= 0.4'}
+
+  has-tostringtag@1.0.2:
+    resolution: {integrity: sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==}
+    engines: {node: '>= 0.4'}
+
+  has-unicode@2.0.1:
+    resolution: {integrity: sha512-8Rf9Y83NBReMnx0gFzA8JImQACstCYWUplepDa9xprwwtmgEZUF0h/i5xSA625zB/I37EtrswSST6OXxwaaIJQ==}
+
+  hasown@2.0.2:
+    resolution: {integrity: sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==}
+    engines: {node: '>= 0.4'}
+
+  hey-listen@1.0.8:
+    resolution: {integrity: sha512-COpmrF2NOg4TBWUJ5UVyaCU2A88wEMkUPK4hNqyCkqHbxT92BbvfjoSozkAIIm6XhicGlJHhFdullInrdhwU8Q==}
+
+  hookable@5.5.3:
+    resolution: {integrity: sha512-Yc+BQe8SvoXH1643Qez1zqLRmbA5rCL+sSmk6TVos0LWVfNIB7PGncdlId77WzLGSIB5KaWgTaNTs2lNVEI6VQ==}
+
+  hookable@6.1.0:
+    resolution: {integrity: sha512-ZoKZSJgu8voGK2geJS+6YtYjvIzu9AOM/KZXsBxr83uhLL++e9pEv/dlgwgy3dvHg06kTz6JOh1hk3C8Ceiymw==}
+
+  html-entities@2.6.0:
+    resolution: {integrity: sha512-kig+rMn/QOVRvr7c86gQ8lWXq+Hkv6CbAH1hLu+RG338StTpE8Z0b44SDVaqVu7HGKf27frdmUYEs9hTUX/cLQ==}
+
+  http-cache-semantics@4.2.0:
+    resolution: {integrity: sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ==}
+
+  http-errors@2.0.1:
+    resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
+    engines: {node: '>= 0.8'}
+
+  http-proxy-agent@4.0.1:
+    resolution: {integrity: sha512-k0zdNgqWTGA6aeIRVpvfVob4fL52dTfaehylg0Y4UvSySvOq/Y+BOyPrgpUrA7HylqvU8vIZGsRuXmspskV0Tg==}
+    engines: {node: '>= 6'}
+
+  http-shutdown@1.2.2:
+    resolution: {integrity: sha512-S9wWkJ/VSY9/k4qcjG318bqJNruzE4HySUhFYknwmu6LBP97KLLfwNf+n4V1BHurvFNkSKLFnK/RsuUnRTf9Vw==}
+    engines: {iojs: '>= 1.0.0', node: '>= 0.12.0'}
+
+  https-proxy-agent@5.0.1:
+    resolution: {integrity: sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==}
+    engines: {node: '>= 6'}
+
+  https-proxy-agent@7.0.6:
+    resolution: {integrity: sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==}
+    engines: {node: '>= 14'}
+
+  httpxy@0.5.0:
+    resolution: {integrity: sha512-qwX7QX/rK2visT10/b7bSeZWQOMlSm3svTD0pZpU+vJjNUP0YHtNv4c3z+MO+MSnGuRFWJFdCZiV+7F7dXIOzg==}
+
+  human-signals@5.0.0:
+    resolution: {integrity: sha512-AXcZb6vzzrFAUE61HnN4mpLqd/cSIwNQjtNWR0euPm6y0iqx3G4gOXaIDdtdDwZmhwe82LA6+zinmW4UBWVePQ==}
+    engines: {node: '>=16.17.0'}
+
+  humanize-ms@1.2.1:
+    resolution: {integrity: sha512-Fl70vYtsAFb/C06PTS9dZBo7ihau+Tu/DNCk/OyHhea07S+aeMWpFFkUaXRa8fI+ScZbEI8dfSxwY7gxZ9SAVQ==}
+
+  iconv-lite@0.6.3:
+    resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
+    engines: {node: '>=0.10.0'}
+
+  ieee754@1.2.1:
+    resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
+
+  ignore@5.3.2:
+    resolution: {integrity: sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==}
+    engines: {node: '>= 4'}
+
+  ignore@7.0.5:
+    resolution: {integrity: sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==}
+    engines: {node: '>= 4'}
+
+  image-meta@0.2.2:
+    resolution: {integrity: sha512-3MOLanc3sb3LNGWQl1RlQlNWURE5g32aUphrDyFeCsxBTk08iE3VNe4CwsUZ0Qs1X+EfX0+r29Sxdpza4B+yRA==}
+
+  impound@1.1.5:
+    resolution: {integrity: sha512-5AUn+QE0UofqNHu5f2Skf6Svukdg4ehOIq8O0EtqIx4jta0CDZYBPqpIHt0zrlUTiFVYlLpeH39DoikXBjPKpA==}
+
+  imurmurhash@0.1.4:
+    resolution: {integrity: sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==}
+    engines: {node: '>=0.8.19'}
+
+  indent-string@4.0.0:
+    resolution: {integrity: sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==}
+    engines: {node: '>=8'}
+
+  indent-string@5.0.0:
+    resolution: {integrity: sha512-m6FAo/spmsW2Ab2fU35JTYwtOKa2yAwXSwgjSv1TJzh4Mh7mC3lzAOVLBprb72XsTrgkEIsl7YrFNAiDiRhIGg==}
+    engines: {node: '>=12'}
+
+  infer-owner@1.0.4:
+    resolution: {integrity: sha512-IClj+Xz94+d7irH5qRyfJonOdfTzuDaifE6ZPWfx0N0+/ATZCbuTPq2prFl526urkQd90WyUKIh1DfBQ2hMz9A==}
+
+  inflight@1.0.6:
+    resolution: {integrity: sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==}
+    deprecated: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
+
+  inherits@2.0.4:
+    resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
+
+  ini@1.3.8:
+    resolution: {integrity: sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==}
+
+  ini@4.1.1:
+    resolution: {integrity: sha512-QQnnxNyfvmHFIsj7gkPcYymR8Jdw/o7mp5ZFihxn6h8Ci6fh3Dx4E1gPjpQEpIuPo9XVNY/ZUwh4BPMjGyL01g==}
+    engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
+
+  ini@4.1.3:
+    resolution: {integrity: sha512-X7rqawQBvfdjS10YU1y1YVreA3SsLrW9dX2CewP2EbBJM4ypVNLDkO5y04gejPwKIY9lR+7r9gn3rFPt/kmWFg==}
+    engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
+
+  ioredis@5.10.1:
+    resolution: {integrity: sha512-HuEDBTI70aYdx1v6U97SbNx9F1+svQKBDo30o0b9fw055LMepzpOOd0Ccg9Q6tbqmBSJaMuY0fB7yw9/vjBYCA==}
+    engines: {node: '>=12.22.0'}
+
+  ip-address@10.1.0:
+    resolution: {integrity: sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==}
+    engines: {node: '>= 12'}
+
+  ipx@3.1.1:
+    resolution: {integrity: sha512-7Xnt54Dco7uYkfdAw0r2vCly3z0rSaVhEXMzPvl3FndsTVm5p26j+PO+gyinkYmcsEUvX2Rh7OGK7KzYWRu6BA==}
+    hasBin: true
+
+  iron-webcrypto@1.2.1:
+    resolution: {integrity: sha512-feOM6FaSr6rEABp/eDfVseKyTMDt+KGpeB35SkVn9Tyn0CqvVsY3EwI0v5i8nMHyJnzCIQf7nsy3p41TPkJZhg==}
+
+  is-builtin-module@5.0.0:
+    resolution: {integrity: sha512-f4RqJKBUe5rQkJ2eJEJBXSticB3hGbN9j0yxxMQFqIW89Jp9WYFtzfTcRlstDKVUTRzSOTLKRfO9vIztenwtxA==}
+    engines: {node: '>=18.20'}
+
+  is-core-module@2.16.1:
+    resolution: {integrity: sha512-UfoeMA6fIJ8wTYFEUjelnaGI67v6+N7qXJEvQuIGa99l4xsCruSYOVSQ0uPANn4dAzm8lkYPaKLrrijLq7x23w==}
+    engines: {node: '>= 0.4'}
+
+  is-docker@2.2.1:
+    resolution: {integrity: sha512-F+i2BKsFrH66iaUFc0woD8sLy8getkwTwtOBjvs56Cx4CgJDeKQeqfz8wAYiSb8JOprWhHH5p77PbmYCvvUuXQ==}
+    engines: {node: '>=8'}
+    hasBin: true
+
+  is-docker@3.0.0:
+    resolution: {integrity: sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+    hasBin: true
+
+  is-extglob@2.1.1:
+    resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==}
+    engines: {node: '>=0.10.0'}
+
+  is-fullwidth-code-point@3.0.0:
+    resolution: {integrity: sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==}
+    engines: {node: '>=8'}
+
+  is-glob@4.0.3:
+    resolution: {integrity: sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==}
+    engines: {node: '>=0.10.0'}
+
+  is-in-ssh@1.0.0:
+    resolution: {integrity: sha512-jYa6Q9rH90kR1vKB6NM7qqd1mge3Fx4Dhw5TVlK1MUBqhEOuCagrEHMevNuCcbECmXZ0ThXkRm+Ymr51HwEPAw==}
+    engines: {node: '>=20'}
+
+  is-inside-container@1.0.0:
+    resolution: {integrity: sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA==}
+    engines: {node: '>=14.16'}
+    hasBin: true
+
+  is-installed-globally@1.0.0:
+    resolution: {integrity: sha512-K55T22lfpQ63N4KEN57jZUAaAYqYHEe8veb/TycJRk9DdSCLLcovXz/mL6mOnhQaZsQGwPhuFopdQIlqGSEjiQ==}
+    engines: {node: '>=18'}
+
+  is-lambda@1.0.1:
+    resolution: {integrity: sha512-z7CMFGNrENq5iFB9Bqo64Xk6Y9sg+epq1myIcdHaGnbMTYOxvzsEtdYqQUylB7LxfkvgrrjP32T6Ywciio9UIQ==}
+
+  is-module@1.0.0:
+    resolution: {integrity: sha512-51ypPSPCoTEIN9dy5Oy+h4pShgJmPCygKfyRCISBI+JoWT/2oJvK8QPxmwv7b/p239jXrm9M1mlQbyKJ5A152g==}
+
+  is-number@7.0.0:
+    resolution: {integrity: sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==}
+    engines: {node: '>=0.12.0'}
+
+  is-path-inside@4.0.0:
+    resolution: {integrity: sha512-lJJV/5dYS+RcL8uQdBDW9c9uWFLLBNRyFhnAKXw5tVqLlKZ4RMGZKv+YQ/IA3OhD+RpbJa1LLFM1FQPGyIXvOA==}
+    engines: {node: '>=12'}
+
+  is-reference@1.2.1:
+    resolution: {integrity: sha512-U82MsXXiFIrjCK4otLT+o2NA2Cd2g5MLoOVXUZjIOhLurrRxpEXzI8O0KZHr3IjLvlAH1kTPYSuqer5T9ZVBKQ==}
+
+  is-stream@2.0.1:
+    resolution: {integrity: sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==}
+    engines: {node: '>=8'}
+
+  is-stream@3.0.0:
+    resolution: {integrity: sha512-LnQR4bZ9IADDRSkvpqMGvt/tEJWclzklNgSw48V5EAaAeDd6qGvN8ei6k5p0tvxSR171VmGyHuTiAOfxAbr8kA==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  is-what@5.5.0:
+    resolution: {integrity: sha512-oG7cgbmg5kLYae2N5IVd3jm2s+vldjxJzK1pcu9LfpGuQ93MQSzo0okvRna+7y5ifrD+20FE8FvjusyGaz14fw==}
+    engines: {node: '>=18'}
+
+  is-wsl@2.2.0:
+    resolution: {integrity: sha512-fKzAra0rGJUUBwGBgNkHZuToZcn+TtXHpeCgmkMJMMYx1sQDYaCSyjJBSCa2nH1DGm7s3n1oBnohoVTBaN7Lww==}
+    engines: {node: '>=8'}
+
+  is-wsl@3.1.1:
+    resolution: {integrity: sha512-e6rvdUCiQCAuumZslxRJWR/Doq4VpPR82kqclvcS0efgt430SlGIk05vdCN58+VrzgtIcfNODjozVielycD4Sw==}
+    engines: {node: '>=16'}
+
+  isarray@1.0.0:
+    resolution: {integrity: sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==}
+
+  isexe@2.0.0:
+    resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
+
+  isexe@4.0.0:
+    resolution: {integrity: sha512-FFUtZMpoZ8RqHS3XeXEmHWLA4thH+ZxCv2lOiPIn1Xc7CxrqhWzNSDzD+/chS/zbYezmiwWLdQC09JdQKmthOw==}
+    engines: {node: '>=20'}
+
+  isomorphic.js@0.2.5:
+    resolution: {integrity: sha512-PIeMbHqMt4DnUP3MA/Flc0HElYjMXArsw1qwJZcm9sqR8mq3l8NYizFMty0pWwE/tzIGH3EKK5+jes5mAr85yw==}
+
+  jackspeak@3.4.3:
+    resolution: {integrity: sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==}
+
+  jiti@2.6.1:
+    resolution: {integrity: sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==}
+    hasBin: true
+
+  js-beautify@1.15.4:
+    resolution: {integrity: sha512-9/KXeZUKKJwqCXUdBxFJ3vPh467OCckSBmYDwSK/EtV090K+iMJ7zx2S3HLVDIWFQdqMIsZWbnaGiba18aWhaA==}
+    engines: {node: '>=14'}
+    hasBin: true
+
+  js-cookie@3.0.5:
+    resolution: {integrity: sha512-cEiJEAEoIbWfCZYKWhVwFuvPX1gETRYPw6LlaTKoxD3s2AkXzkCjnp6h0V77ozyqj0jakteJ4YqDJT830+lVGw==}
+    engines: {node: '>=14'}
+
+  js-tokens@4.0.0:
+    resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
+
+  js-tokens@9.0.1:
+    resolution: {integrity: sha512-mxa9E9ITFOt0ban3j6L5MpjwegGz6lBQmM1IJkWeBZGcMxto50+eWdjC/52xDbS2vy0k7vIMK0Fe2wfL9OQSpQ==}
+
+  js-yaml@4.1.1:
+    resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==}
+    hasBin: true
+
+  jsdoc-type-pratt-parser@7.2.0:
+    resolution: {integrity: sha512-dh140MMgjyg3JhJZY/+iEzW+NO5xR2gpbDFKHqotCmexElVntw7GjWjt511+C/Ef02RU5TKYrJo/Xlzk+OLaTw==}
+    engines: {node: '>=20.0.0'}
+
+  jsesc@3.1.0:
+    resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
+    engines: {node: '>=6'}
+    hasBin: true
+
+  json-buffer@3.0.1:
+    resolution: {integrity: sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==}
+
+  json-schema-to-typescript-lite@15.0.0:
+    resolution: {integrity: sha512-5mMORSQm9oTLyjM4mWnyNBi2T042Fhg1/0gCIB6X8U/LVpM2A+Nmj2yEyArqVouDmFThDxpEXcnTgSrjkGJRFA==}
+
+  json-schema-traverse@0.4.1:
+    resolution: {integrity: sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==}
+
+  json-stable-stringify-without-jsonify@1.0.1:
+    resolution: {integrity: sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==}
+
+  json5@2.2.3:
+    resolution: {integrity: sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==}
+    engines: {node: '>=6'}
+    hasBin: true
+
+  jsonc-eslint-parser@2.4.2:
+    resolution: {integrity: sha512-1e4qoRgnn448pRuMvKGsFFymUCquZV0mpGgOyIKNgD3JVDTsVJyRBGH/Fm0tBb8WsWGgmB1mDe6/yJMQM37DUA==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+
+  jsonfile@6.2.0:
+    resolution: {integrity: sha512-FGuPw30AdOIUTRMC2OMRtQV+jkVj2cfPqSeWXv1NEAJ1qZ5zb1X6z1mFhbfOB/iy3ssJCD+3KuZ8r8C3uVFlAg==}
+
+  keyv@4.5.4:
+    resolution: {integrity: sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==}
+
+  kleur@3.0.3:
+    resolution: {integrity: sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==}
+    engines: {node: '>=6'}
+
+  kleur@4.1.5:
+    resolution: {integrity: sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==}
+    engines: {node: '>=6'}
+
+  klona@2.0.6:
+    resolution: {integrity: sha512-dhG34DXATL5hSxJbIexCft8FChFXtmskoZYnoPWjXQuebWYCNkVeV3KkGegCK9CP1oswI/vQibS2GY7Em/sJJA==}
+    engines: {node: '>= 8'}
+
+  knitwork@1.3.0:
+    resolution: {integrity: sha512-4LqMNoONzR43B1W0ek0fhXMsDNW/zxa1NdFAVMY+k28pgZLovR4G3PB5MrpTxCy1QaZCqNoiaKPr5w5qZHfSNw==}
+
+  launch-editor@2.13.2:
+    resolution: {integrity: sha512-4VVDnbOpLXy/s8rdRCSXb+zfMeFR0WlJWpET1iA9CQdlZDfwyLjUuGQzXU4VeOoey6AicSAluWan7Etga6Kcmg==}
+
+  lazystream@1.0.1:
+    resolution: {integrity: sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw==}
+    engines: {node: '>= 0.6.3'}
+
+  levn@0.4.1:
+    resolution: {integrity: sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==}
+    engines: {node: '>= 0.8.0'}
+
+  lib0@0.2.117:
+    resolution: {integrity: sha512-DeXj9X5xDCjgKLU/7RR+/HQEVzuuEUiwldwOGsHK/sfAfELGWEyTcf0x+uOvCvK3O2zPmZePXWL85vtia6GyZw==}
+    engines: {node: '>=16'}
+    hasBin: true
+
+  lightningcss-android-arm64@1.32.0:
+    resolution: {integrity: sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [android]
+
+  lightningcss-darwin-arm64@1.32.0:
+    resolution: {integrity: sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [darwin]
+
+  lightningcss-darwin-x64@1.32.0:
+    resolution: {integrity: sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [darwin]
+
+  lightningcss-freebsd-x64@1.32.0:
+    resolution: {integrity: sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [freebsd]
+
+  lightningcss-linux-arm-gnueabihf@1.32.0:
+    resolution: {integrity: sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm]
+    os: [linux]
+
+  lightningcss-linux-arm64-gnu@1.32.0:
+    resolution: {integrity: sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  lightningcss-linux-arm64-musl@1.32.0:
+    resolution: {integrity: sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  lightningcss-linux-x64-gnu@1.32.0:
+    resolution: {integrity: sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  lightningcss-linux-x64-musl@1.32.0:
+    resolution: {integrity: sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  lightningcss-win32-arm64-msvc@1.32.0:
+    resolution: {integrity: sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [win32]
+
+  lightningcss-win32-x64-msvc@1.32.0:
+    resolution: {integrity: sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [win32]
+
+  lightningcss@1.32.0:
+    resolution: {integrity: sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==}
+    engines: {node: '>= 12.0.0'}
+
+  lilconfig@3.1.3:
+    resolution: {integrity: sha512-/vlFKAoH5Cgt3Ie+JLhRbwOsCQePABiU3tJ1egGvyQ+33R/vcwM2Zl2QR/LzjsBeItPt3oSVXapn+m4nQDvpzw==}
+    engines: {node: '>=14'}
+
+  linkify-it@5.0.0:
+    resolution: {integrity: sha512-5aHCbzQRADcdP+ATqnDuhhJ/MRIqDkZX5pyjFHRRysS8vZ5AbqGEoFIb6pYHPZ+L/OC2Lc+xT8uHVVR5CAK/wQ==}
+
+  linkifyjs@4.3.2:
+    resolution: {integrity: sha512-NT1CJtq3hHIreOianA8aSXn6Cw0JzYOuDQbOrSPe7gqFnCpKP++MQe3ODgO3oh2GJFORkAAdqredOa60z63GbA==}
+
+  listhen@1.9.1:
+    resolution: {integrity: sha512-4EhoyVcXEpNlY5HJRSQpH7Rba94M8N2JmI62ePjl0lrJKXSfG0F1FAgHGxBoz/T3pe41sUEwkIRRIcaUL0/Ofw==}
+    hasBin: true
+
+  load-tsconfig@0.2.5:
+    resolution: {integrity: sha512-IXO6OCs9yg8tMKzfPZ1YmheJbZCiEsnBdcB03l0OcfK9prKnJb96siuHCr5Fl37/yo9DnKU+TLpxzTUspw9shg==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  local-pkg@1.1.2:
+    resolution: {integrity: sha512-arhlxbFRmoQHl33a0Zkle/YWlmNwoyt6QNZEIJcqNbdrsix5Lvc4HyyI3EnwxTYlZYc32EbYrQ8SzEZ7dqgg9A==}
+    engines: {node: '>=14'}
+
+  locate-path@6.0.0:
+    resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
+    engines: {node: '>=10'}
+
+  locate-path@8.0.0:
+    resolution: {integrity: sha512-XT9ewWAC43tiAV7xDAPflMkG0qOPn2QjHqlgX8FOqmWa/rxnyYDulF9T0F7tRy1u+TVTmK/M//6VIOye+2zDXg==}
+    engines: {node: '>=20'}
+
+  lodash.defaults@4.2.0:
+    resolution: {integrity: sha512-qjxPLHd3r5DnsdGacqOMU6pb/avJzdh9tFX2ymgoZE27BmjXrNy/y4LoaiTeAb+O3gL8AfpJGtqfX/ae2leYYQ==}
+
+  lodash.isarguments@3.1.0:
+    resolution: {integrity: sha512-chi4NHZlZqZD18a0imDHnZPrDeBbTtVN7GXMwuGdRH9qotxAjYs3aVLKc7zNOG9eddR5Ksd8rvFEBc9SsggPpg==}
+
+  lodash.memoize@4.1.2:
+    resolution: {integrity: sha512-t7j+NzmgnQzTAYXcsHYLgimltOV1MXHtlOWf6GjL9Kj8GK5FInw5JotxvbOs+IvV1/Dzo04/fCGfLVs7aXb4Ag==}
+
+  lodash.uniq@4.5.0:
+    resolution: {integrity: sha512-xfBaXQd9ryd9dlSDvnvI0lvxfLJlYAZzXomUYzLKtUeOQvOP5piqAWuGtrhWeqaXK9hhoM/iyJc5AV+XfsX3HQ==}
+
+  lodash@4.18.1:
+    resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
+
+  lru-cache@10.4.3:
+    resolution: {integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==}
+
+  lru-cache@11.3.0:
+    resolution: {integrity: sha512-sr8xPKE25m6vJVcrdn6NxtC0fVfuPowbscLypegRgOm0yXSqr5JNHCAY3hnusdJ7HRBW04j6Ip4khvHU778DuQ==}
+    engines: {node: 20 || >=22}
+
+  lru-cache@5.1.1:
+    resolution: {integrity: sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==}
+
+  lru-cache@6.0.0:
+    resolution: {integrity: sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==}
+    engines: {node: '>=10'}
+
+  magic-regexp@0.10.0:
+    resolution: {integrity: sha512-Uly1Bu4lO1hwHUW0CQeSWuRtzCMNO00CmXtS8N6fyvB3B979GOEEeAkiTUDsmbYLAbvpUS/Kt5c4ibosAzVyVg==}
+
+  magic-string-ast@1.0.3:
+    resolution: {integrity: sha512-CvkkH1i81zl7mmb94DsRiFeG9V2fR2JeuK8yDgS8oiZSFa++wWLEgZ5ufEOyLHbvSbD1gTRKv9NdX69Rnvr9JA==}
+    engines: {node: '>=20.19.0'}
+
+  magic-string@0.30.21:
+    resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
+
+  magicast@0.5.2:
+    resolution: {integrity: sha512-E3ZJh4J3S9KfwdjZhe2afj6R9lGIN5Pher1pF39UGrXRqq/VDaGVIGN13BjHd2u8B61hArAGOnso7nBOouW3TQ==}
+
+  make-fetch-happen@9.1.0:
+    resolution: {integrity: sha512-+zopwDy7DNknmwPQplem5lAZX/eCOzSvSNNcSKm5eVwTkOBzoktEfXsa9L23J/GIRhxRsaxzkPEhrJEpE2F4Gg==}
+    engines: {node: '>= 10'}
+
+  markdown-it@14.1.1:
+    resolution: {integrity: sha512-BuU2qnTti9YKgK5N+IeMubp14ZUKUUw7yeJbkjtosvHiP0AZ5c8IAgEMk79D0eC8F23r4Ac/q8cAIFdm2FtyoA==}
+    hasBin: true
+
+  marked@17.0.6:
+    resolution: {integrity: sha512-gB0gkNafnonOw0obSTEGZTT86IuhILt2Wfx0mWH/1Au83kybTayroZ/V6nS25mN7u8ASy+5fMhgB3XPNrOZdmA==}
+    engines: {node: '>= 20'}
+    hasBin: true
+
+  math-intrinsics@1.1.0:
+    resolution: {integrity: sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==}
+    engines: {node: '>= 0.4'}
+
+  mdn-data@2.0.28:
+    resolution: {integrity: sha512-aylIc7Z9y4yzHYAJNuESG3hfhC+0Ibp/MAMiaOZgNv4pmEdFyfZhhhny4MNiAfWdBQ1RQ2mfDWmM1x8SvGyp8g==}
+
+  mdn-data@2.27.1:
+    resolution: {integrity: sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==}
+
+  mdurl@2.0.0:
+    resolution: {integrity: sha512-Lf+9+2r+Tdp5wXDXC4PcIBjTDtq4UKjCPMQhKIuzpJNW0b96kVqSwW0bT7FhRSfmAiFYgP+SCRvdrDozfh0U5w==}
+
+  merge-stream@2.0.0:
+    resolution: {integrity: sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==}
+
+  merge2@1.4.1:
+    resolution: {integrity: sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==}
+    engines: {node: '>= 8'}
+
+  micromatch@4.0.8:
+    resolution: {integrity: sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==}
+    engines: {node: '>=8.6'}
+
+  mime-db@1.52.0:
+    resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
+    engines: {node: '>= 0.6'}
+
+  mime-db@1.54.0:
+    resolution: {integrity: sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==}
+    engines: {node: '>= 0.6'}
+
+  mime-types@2.1.35:
+    resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
+    engines: {node: '>= 0.6'}
+
+  mime-types@3.0.2:
+    resolution: {integrity: sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==}
+    engines: {node: '>=18'}
+
+  mime@4.1.0:
+    resolution: {integrity: sha512-X5ju04+cAzsojXKes0B/S4tcYtFAJ6tTMuSPBEn9CPGlrWr8Fiw7qYeLT0XyH80HSoAoqWCaz+MWKh22P7G1cw==}
+    engines: {node: '>=16'}
+    hasBin: true
+
+  mimic-fn@4.0.0:
+    resolution: {integrity: sha512-vqiC06CuhBTUdZH+RYl8sFrL096vA45Ok5ISO6sE/Mr1jRbGH4Csnhi8f3wKVl7x8mO4Au7Ir9D3Oyv1VYMFJw==}
+    engines: {node: '>=12'}
+
+  mimic-response@3.1.0:
+    resolution: {integrity: sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==}
+    engines: {node: '>=10'}
+
+  minimatch@10.2.5:
+    resolution: {integrity: sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==}
+    engines: {node: 18 || 20 || >=22}
+
+  minimatch@3.1.5:
+    resolution: {integrity: sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==}
+
+  minimatch@5.1.9:
+    resolution: {integrity: sha512-7o1wEA2RyMP7Iu7GNba9vc0RWWGACJOCZBJX2GJWip0ikV+wcOsgVuY9uE8CPiyQhkGFSlhuSkZPavN7u1c2Fw==}
+    engines: {node: '>=10'}
+
+  minimatch@9.0.9:
+    resolution: {integrity: sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==}
+    engines: {node: '>=16 || 14 >=14.17'}
+
+  minimist@1.2.8:
+    resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==}
+
+  minipass-collect@1.0.2:
+    resolution: {integrity: sha512-6T6lH0H8OG9kITm/Jm6tdooIbogG9e0tLgpY6mphXSm/A9u8Nq1ryBG+Qspiub9LjWlBPsPS3tWQ/Botq4FdxA==}
+    engines: {node: '>= 8'}
+
+  minipass-fetch@1.4.1:
+    resolution: {integrity: sha512-CGH1eblLq26Y15+Azk7ey4xh0J/XfJfrCox5LDJiKqI2Q2iwOLOKrlmIaODiSQS8d18jalF6y2K2ePUm0CmShw==}
+    engines: {node: '>=8'}
+
+  minipass-flush@1.0.7:
+    resolution: {integrity: sha512-TbqTz9cUwWyHS2Dy89P3ocAGUGxKjjLuR9z8w4WUTGAVgEj17/4nhgo2Du56i0Fm3Pm30g4iA8Lcqctc76jCzA==}
+    engines: {node: '>= 8'}
+
+  minipass-pipeline@1.2.4:
+    resolution: {integrity: sha512-xuIq7cIOt09RPRJ19gdi4b+RiNvDFYe5JH+ggNvBqGqpQXcru3PcRmOZuHBKWK1Txf9+cQ+HMVN4d6z46LZP7A==}
+    engines: {node: '>=8'}
+
+  minipass-sized@1.0.3:
+    resolution: {integrity: sha512-MbkQQ2CTiBMlA2Dm/5cY+9SWFEN8pzzOXi6rlM5Xxq0Yqbda5ZQy9sU75a673FE9ZK0Zsbr6Y5iP6u9nktfg2g==}
+    engines: {node: '>=8'}
+
+  minipass@3.3.6:
+    resolution: {integrity: sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==}
+    engines: {node: '>=8'}
+
+  minipass@5.0.0:
+    resolution: {integrity: sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ==}
+    engines: {node: '>=8'}
+
+  minipass@7.1.3:
+    resolution: {integrity: sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==}
+    engines: {node: '>=16 || 14 >=14.17'}
+
+  minizlib@2.1.2:
+    resolution: {integrity: sha512-bAxsR8BVfj60DWXHE3u30oHzfl4G7khkSuPW+qvpd7jFRHm7dLxOjUk1EHACJ/hxLY8phGJ0YhYHZo7jil7Qdg==}
+    engines: {node: '>= 8'}
+
+  minizlib@3.1.0:
+    resolution: {integrity: sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==}
+    engines: {node: '>= 18'}
+
+  mitt@3.0.1:
+    resolution: {integrity: sha512-vKivATfr97l2/QBCYAkXYDbrIWPM2IIKEl7YPhjCvKlG3kE2gm+uBo6nEXK3M5/Ffh/FLpKExzOQ3JJoJGFKBw==}
+
+  mkdirp-classic@0.5.3:
+    resolution: {integrity: sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==}
+
+  mkdirp@1.0.4:
+    resolution: {integrity: sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  mlly@1.8.2:
+    resolution: {integrity: sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA==}
+
+  mocked-exports@0.1.1:
+    resolution: {integrity: sha512-aF7yRQr/Q0O2/4pIXm6PZ5G+jAd7QS4Yu8m+WEeEHGnbo+7mE36CbLSDQiXYV8bVL3NfmdeqPJct0tUlnjVSnA==}
+
+  motion-dom@12.38.0:
+    resolution: {integrity: sha512-pdkHLD8QYRp8VfiNLb8xIBJis1byQ9gPT3Jnh2jqfFtAsWUA3dEepDlsWe/xMpO8McV+VdpKVcp+E+TGJEtOoA==}
+
+  motion-utils@12.36.0:
+    resolution: {integrity: sha512-eHWisygbiwVvf6PZ1vhaHCLamvkSbPIeAYxWUuL3a2PD/TROgE7FvfHWTIH4vMl798QLfMw15nRqIaRDXTlYRg==}
+
+  motion-v@2.2.0:
+    resolution: {integrity: sha512-8rrUBt9UMwy45MfLMwHer9J7xBY/rL31S+0U3ZUAouqjH3AOVHvS0NGuXwF4mfWfvb22rfZEv59ZsBc2f1epxQ==}
+    peerDependencies:
+      '@vueuse/core': '>=10.0.0'
+      vue: '>=3.0.0'
+
+  mrmime@2.0.1:
+    resolution: {integrity: sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==}
+    engines: {node: '>=10'}
+
+  ms@2.1.3:
+    resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
+
+  muggle-string@0.4.1:
+    resolution: {integrity: sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==}
+
+  nanoid@3.3.11:
+    resolution: {integrity: sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==}
+    engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
+    hasBin: true
+
+  nanotar@0.3.0:
+    resolution: {integrity: sha512-Kv2JYYiCzt16Kt5QwAc9BFG89xfPNBx+oQL4GQXD9nLqPkZBiNaqaCWtwnbk/q7UVsTYevvM1b0UF8zmEI4pCg==}
+
+  napi-build-utils@2.0.0:
+    resolution: {integrity: sha512-GEbrYkbfF7MoNaoh2iGG84Mnf/WZfB0GdGEsM8wz7Expx/LlWf5U8t9nvJKXSp3qr5IsEbK04cBGhol/KwOsWA==}
+
+  napi-postinstall@0.3.4:
+    resolution: {integrity: sha512-PHI5f1O0EP5xJ9gQmFGMS6IZcrVvTjpXjz7Na41gTE7eE2hK11lg04CECCYEEjdc17EV4DO+fkGEtt7TpTaTiQ==}
+    engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
+    hasBin: true
+
+  native-run@2.0.3:
+    resolution: {integrity: sha512-U1PllBuzW5d1gfan+88L+Hky2eZx+9gv3Pf6rNBxKbORxi7boHzqiA6QFGSnqMem4j0A9tZ08NMIs5+0m/VS1Q==}
+    engines: {node: '>=16.0.0'}
+    hasBin: true
+
+  natural-compare@1.4.0:
+    resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==}
+
+  negotiator@0.6.4:
+    resolution: {integrity: sha512-myRT3DiWPHqho5PrJaIRyaMv2kgYf0mUVgBNOYMuCH5Ki1yEiQaf/ZJuQ62nvpc44wL5WDbTX7yGJi1Neevw8w==}
+    engines: {node: '>= 0.6'}
+
+  nitropack@2.13.3:
+    resolution: {integrity: sha512-C8vO7RxkU0AQ3HbYUumuG6MVM5JjRaBchke/rYFOp3EvrLtTBHZYhDVGECdpa27vNuOYRzm3GtQMn2YDOjDJLA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+    peerDependencies:
+      xml2js: ^0.6.2
+    peerDependenciesMeta:
+      xml2js:
+        optional: true
+
+  node-abi@3.89.0:
+    resolution: {integrity: sha512-6u9UwL0HlAl21+agMN3YAMXcKByMqwGx+pq+P76vii5f7hTPtKDp08/H9py6DY+cfDw7kQNTGEj/rly3IgbNQA==}
+    engines: {node: '>=10'}
+
+  node-addon-api@7.1.1:
+    resolution: {integrity: sha512-5m3bsyrjFWE1xf7nz7YXdN4udnVtXK6/Yfgn5qnahL6bCkf2yKt4k3nuTKAtT4r3IG8JNR2ncsIMdZuAzJjHQQ==}
+
+  node-fetch-native@1.6.7:
+    resolution: {integrity: sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==}
+
+  node-fetch@2.7.0:
+    resolution: {integrity: sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==}
+    engines: {node: 4.x || >=6.0.0}
+    peerDependencies:
+      encoding: ^0.1.0
+    peerDependenciesMeta:
+      encoding:
+        optional: true
+
+  node-forge@1.4.0:
+    resolution: {integrity: sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==}
+    engines: {node: '>= 6.13.0'}
+
+  node-gyp-build@4.8.4:
+    resolution: {integrity: sha512-LA4ZjwlnUblHVgq0oBF3Jl/6h/Nvs5fzBLwdEF4nuxnFdsfajde4WfxtJr3CaiH+F6ewcIB/q4jQ4UzPyid+CQ==}
+    hasBin: true
+
+  node-gyp@8.4.1:
+    resolution: {integrity: sha512-olTJRgUtAb/hOXG0E93wZDs5YiJlgbXxTwQAFHyNlRsXQnYzUaF2aGgujZbw+hR8aF4ZG/rST57bWMWD16jr9w==}
+    engines: {node: '>= 10.12.0'}
+    hasBin: true
+
+  node-mock-http@1.0.4:
+    resolution: {integrity: sha512-8DY+kFsDkNXy1sJglUfuODx1/opAGJGyrTuFqEoN90oRc2Vk0ZbD4K2qmKXBBEhZQzdKHIVfEJpDU8Ak2NJEvQ==}
+
+  node-releases@2.0.37:
+    resolution: {integrity: sha512-1h5gKZCF+pO/o3Iqt5Jp7wc9rH3eJJ0+nh/CIoiRwjRxde/hAHyLPXYN4V3CqKAbiZPSeJFSWHmJsbkicta0Eg==}
+
+  nopt@5.0.0:
+    resolution: {integrity: sha512-Tbj67rffqceeLpcRXrT7vKAN8CwfPeIBgM7E6iBkmKLV7bEMwpGgYLGv0jACUsECaa/vuxP0IjEont6umdMgtQ==}
+    engines: {node: '>=6'}
+    hasBin: true
+
+  nopt@7.2.1:
+    resolution: {integrity: sha512-taM24ViiimT/XntxbPyJQzCG+p4EKOpgD3mxFwW38mGjVUrfERQOeY4EDHjdnptttfHuHQXFx+lTP08Q+mLa/w==}
+    engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
+    hasBin: true
+
+  nopt@8.1.0:
+    resolution: {integrity: sha512-ieGu42u/Qsa4TFktmaKEwM6MQH0pOWnaB3htzh0JRtx84+Mebc0cbZYN5bC+6WTZ4+77xrL9Pn5m7CV6VIkV7A==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+    hasBin: true
+
+  normalize-path@3.0.0:
+    resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==}
+    engines: {node: '>=0.10.0'}
+
+  npm-run-path@5.3.0:
+    resolution: {integrity: sha512-ppwTtiJZq0O/ai0z7yfudtBpWIoxM8yE6nHi1X47eFR2EWORqfbu6CnPlNsjeN683eT0qG6H/Pyf9fCcvjnnnQ==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  npm-run-path@6.0.0:
+    resolution: {integrity: sha512-9qny7Z9DsQU8Ou39ERsPU4OZQlSTP47ShQzuKZ6PRXpYLtIFgl/DEBYEXKlvcEa+9tHVcK8CF81Y2V72qaZhWA==}
+    engines: {node: '>=18'}
+
+  npmlog@6.0.2:
+    resolution: {integrity: sha512-/vBvz5Jfr9dT/aFWd0FIRf+T/Q2WBsLENygUaFUqstqsycmZAP/t5BvFJTK0viFmSUxiUKTUplWy5vt+rvKIxg==}
+    engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
+    deprecated: This package is no longer supported.
+
+  nth-check@2.1.1:
+    resolution: {integrity: sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==}
+
+  nuxt-define@1.0.0:
+    resolution: {integrity: sha512-CYZ2WjU+KCyCDVzjYUM4eEpMF0rkPmkpiFrybTqqQCRpUbPt2h3snswWIpFPXTi+osRCY6Og0W/XLAQgDL4FfQ==}
+
+  nuxt@4.4.2:
+    resolution: {integrity: sha512-iWVFpr/YEqVU/CenqIHMnIkvb2HE/9f+q8oxZ+pj2et+60NljGRClCgnmbvGPdmNFE0F1bEhoBCYfqbDOCim3Q==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+    peerDependencies:
+      '@parcel/watcher': ^2.1.0
+      '@types/node': '>=18.12.0'
+    peerDependenciesMeta:
+      '@parcel/watcher':
+        optional: true
+      '@types/node':
+        optional: true
+
+  nypm@0.6.5:
+    resolution: {integrity: sha512-K6AJy1GMVyfyMXRVB88700BJqNUkByijGJM8kEHpLdcAt+vSQAVfkWWHYzuRXHSY6xA2sNc5RjTj0p9rE2izVQ==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  object-deep-merge@2.0.0:
+    resolution: {integrity: sha512-3DC3UMpeffLTHiuXSy/UG4NOIYTLlY9u3V82+djSCLYClWobZiS4ivYzpIUWrRY/nfsJ8cWsKyG3QfyLePmhvg==}
+
+  obug@2.1.1:
+    resolution: {integrity: sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==}
+
+  ofetch@1.5.1:
+    resolution: {integrity: sha512-2W4oUZlVaqAPAil6FUg/difl6YhqhUR7x2eZY4bQCko22UXg3hptq9KLQdqFClV+Wu85UX7hNtdGTngi/1BxcA==}
+
+  ofetch@2.0.0-alpha.3:
+    resolution: {integrity: sha512-zpYTCs2byOuft65vI3z43Dd6iSdFbOZZLb9/d21aCpx2rGastVU9dOCv0lu4ykc1Ur1anAYjDi3SUvR0vq50JA==}
+
+  ohash@2.0.11:
+    resolution: {integrity: sha512-RdR9FQrFwNBNXAr4GixM8YaRZRJ5PUWbKYbE5eOsrwAjJW0q2REGcf79oYPsLyskQCZG1PLN+S/K1V00joZAoQ==}
+
+  on-change@6.0.2:
+    resolution: {integrity: sha512-08+12qcOVEA0fS9g/VxKS27HaT94nRutUT77J2dr8zv/unzXopvhBuF8tNLWsoLQ5IgrQ6eptGeGqUYat82U1w==}
+    engines: {node: '>=20'}
+
+  on-finished@2.4.1:
+    resolution: {integrity: sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==}
+    engines: {node: '>= 0.8'}
+
+  once@1.4.0:
+    resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
+
+  onetime@6.0.0:
+    resolution: {integrity: sha512-1FlR+gjXK7X+AsAHso35MnyN5KqGwJRi/31ft6x0M194ht7S+rWAvd7PHss9xSKMzE0asv1pyIHaJYq+BbacAQ==}
+    engines: {node: '>=12'}
+
+  open@10.2.0:
+    resolution: {integrity: sha512-YgBpdJHPyQ2UE5x+hlSXcnejzAvD0b22U2OuAP+8OnlJT+PjWPxtgmGqKKc+RgTM63U9gN0YzrYc71R2WT/hTA==}
+    engines: {node: '>=18'}
+
+  open@11.0.0:
+    resolution: {integrity: sha512-smsWv2LzFjP03xmvFoJ331ss6h+jixfA4UUV/Bsiyuu4YJPfN+FIQGOIiv4w9/+MoHkfkJ22UIaQWRVFRfH6Vw==}
+    engines: {node: '>=20'}
+
+  open@8.4.2:
+    resolution: {integrity: sha512-7x81NCL719oNbsq/3mh+hVrAWmFuEYUqrq/Iw3kUzH8ReypT9QQ0BLoJS7/G9k6N81XjW4qHWtjWwe/9eLy1EQ==}
+    engines: {node: '>=12'}
+
+  optionator@0.9.4:
+    resolution: {integrity: sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g==}
+    engines: {node: '>= 0.8.0'}
+
+  orderedmap@2.1.1:
+    resolution: {integrity: sha512-TvAWxi0nDe1j/rtMcWcIj94+Ffe6n7zhow33h40SKxmsmozs6dz/e+EajymfoFcHd7sxNn8yHM8839uixMOV6g==}
+
+  oxc-minify@0.117.0:
+    resolution: {integrity: sha512-JHsv/b+bmBJkAzkHXgTN7RThloVxLHPT0ojHfjqxVeHuQB7LPpLUbJ2qfwz37sto9stZ9+AVwUP4b3gtR7p/Tw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+
+  oxc-parser@0.112.0:
+    resolution: {integrity: sha512-7rQ3QdJwobMQLMZwQaPuPYMEF2fDRZwf51lZ//V+bA37nejjKW5ifMHbbCwvA889Y4RLhT+/wLJpPRhAoBaZYw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+
+  oxc-parser@0.117.0:
+    resolution: {integrity: sha512-l3cbgK5wUvWDVNWM/JFU77qDdGZK1wudnLsFcrRyNo/bL1CyU8pC25vDhMHikVY29lbK2InTWsX42RxVSutUdQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+
+  oxc-transform@0.112.0:
+    resolution: {integrity: sha512-cIRRvZgrHfsAHrkt8LWdAX4+Do8R0MzQSfeo9yzErzHeYiuyNiP4PCTPbOy/wBXL4MYzt3ebrBa5jt3akQkKAg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+
+  oxc-transform@0.117.0:
+    resolution: {integrity: sha512-u1Stl2uhDh9bFuOGjGXQIqx46IRUNMyHQkq59LayXNGS2flNv7RpZpRSWs5S5deuNP6jJZ12gtMBze+m4dOhmw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+
+  oxc-walker@0.7.0:
+    resolution: {integrity: sha512-54B4KUhrzbzc4sKvKwVYm7E2PgeROpGba0/2nlNZMqfDyca+yOor5IMb4WLGBatGDT0nkzYdYuzylg7n3YfB7A==}
+    peerDependencies:
+      oxc-parser: '>=0.98.0'
+
+  p-limit@3.1.0:
+    resolution: {integrity: sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==}
+    engines: {node: '>=10'}
+
+  p-limit@4.0.0:
+    resolution: {integrity: sha512-5b0R4txpzjPWVw/cXXUResoD4hb6U/x9BH08L7nw+GN1sezDzPdxeRvpc9c433fZhBan/wusjbCsqwqm4EIBIQ==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  p-locate@5.0.0:
+    resolution: {integrity: sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==}
+    engines: {node: '>=10'}
+
+  p-locate@6.0.0:
+    resolution: {integrity: sha512-wPrq66Llhl7/4AGC6I+cqxT07LhXvWL08LNXz1fENOw0Ap4sRZZ/gZpTTJ5jpurzzzfS2W/Ge9BY3LgLjCShcw==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  p-map@4.0.0:
+    resolution: {integrity: sha512-/bjOqmgETBYB5BoEeGVea8dmvHb2m9GLy1E9W43yeyfP6QQCZGFNa+XRceJEuDB6zqr+gKpIAmlLebMpykw/MQ==}
+    engines: {node: '>=10'}
+
+  package-json-from-dist@1.0.1:
+    resolution: {integrity: sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==}
+
+  package-manager-detector@1.6.0:
+    resolution: {integrity: sha512-61A5ThoTiDG/C8s8UMZwSorAGwMJ0ERVGj2OjoW5pAalsNOg15+iQiPzrLJ4jhZ1HJzmC2PIHT2oEiH3R5fzNA==}
+
+  parse-imports-exports@0.2.4:
+    resolution: {integrity: sha512-4s6vd6dx1AotCx/RCI2m7t7GCh5bDRUtGNvRfHSP2wbBQdMi67pPe7mtzmgwcaQ8VKK/6IB7Glfyu3qdZJPybQ==}
+
+  parse-statements@1.0.11:
+    resolution: {integrity: sha512-HlsyYdMBnbPQ9Jr/VgJ1YF4scnldvJpJxCVx6KgqPL4dxppsWrJHCIIxQXMJrqGnsRkNPATbeMJ8Yxu7JMsYcA==}
+
+  parseurl@1.3.3:
+    resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
+    engines: {node: '>= 0.8'}
+
+  path-browserify@1.0.1:
+    resolution: {integrity: sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g==}
+
+  path-exists@4.0.0:
+    resolution: {integrity: sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==}
+    engines: {node: '>=8'}
+
+  path-is-absolute@1.0.1:
+    resolution: {integrity: sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==}
+    engines: {node: '>=0.10.0'}
+
+  path-key@3.1.1:
+    resolution: {integrity: sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==}
+    engines: {node: '>=8'}
+
+  path-key@4.0.0:
+    resolution: {integrity: sha512-haREypq7xkM7ErfgIyA0z+Bj4AGKlMSdlQE2jvJo6huWD1EdkKYV+G/T4nq0YEF2vgTT8kqMFKo1uHn950r4SQ==}
+    engines: {node: '>=12'}
+
+  path-parse@1.0.7:
+    resolution: {integrity: sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==}
+
+  path-scurry@1.11.1:
+    resolution: {integrity: sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==}
+    engines: {node: '>=16 || 14 >=14.18'}
+
+  path-scurry@2.0.2:
+    resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==}
+    engines: {node: 18 || 20 || >=22}
+
+  pathe@1.1.2:
+    resolution: {integrity: sha512-whLdWMYL2TwI08hn8/ZqAbrVemu0LNaNNJZX73O6qaIdCTfXutsLhMkjdENX0qhsQ9uIimo4/aQOmXkoon2nDQ==}
+
+  pathe@2.0.3:
+    resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==}
+
+  pend@1.2.0:
+    resolution: {integrity: sha512-F3asv42UuXchdzt+xXqfW1OGlVBe+mxa2mqI0pg5yAHZPvFmY3Y6drSf/GQ1A86WgWEN9Kzh/WrgKa6iGcHXLg==}
+
+  perfect-debounce@1.0.0:
+    resolution: {integrity: sha512-xCy9V055GLEqoFaHoC1SoLIaLmWctgCUaBaWxDZ7/Zx4CTyX7cJQLJOok/orfjZAh9kEYpjJa4d0KcJmCbctZA==}
+
+  perfect-debounce@2.1.0:
+    resolution: {integrity: sha512-LjgdTytVFXeUgtHZr9WYViYSM/g8MkcTPYDlPa3cDqMirHjKiSZPYd6DoL7pK8AJQr+uWkQvCjHNdiMqsrJs+g==}
+
+  picocolors@1.1.1:
+    resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
+
+  picomatch@2.3.2:
+    resolution: {integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==}
+    engines: {node: '>=8.6'}
+
+  picomatch@4.0.4:
+    resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
+    engines: {node: '>=12'}
+
+  pinia@3.0.4:
+    resolution: {integrity: sha512-l7pqLUFTI/+ESXn6k3nu30ZIzW5E2WZF/LaHJEpoq6ElcLD+wduZoB2kBN19du6K/4FDpPMazY2wJr+IndBtQw==}
+    peerDependencies:
+      typescript: '>=4.5.0'
+      vue: ^3.5.11
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
+  pkg-types@1.3.1:
+    resolution: {integrity: sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==}
+
+  pkg-types@2.3.0:
+    resolution: {integrity: sha512-SIqCzDRg0s9npO5XQ3tNZioRY1uK06lA41ynBC1YmFTmnY6FjUjVt6s4LoADmwoig1qqD0oK8h1p/8mlMx8Oig==}
+
+  playwright-core@1.59.1:
+    resolution: {integrity: sha512-HBV/RJg81z5BiiZ9yPzIiClYV/QMsDCKUyogwH9p3MCP6IYjUFu/MActgYAvK0oWyV9NlwM3GLBjADyWgydVyg==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  plist@3.1.0:
+    resolution: {integrity: sha512-uysumyrvkUX0rX/dEVqt8gC3sTBzd4zoWfLeS29nb53imdaXVvLINYXTI2GNqzaMuvacNx4uJQ8+b3zXR0pkgQ==}
+    engines: {node: '>=10.4.0'}
+
+  pluralize@8.0.0:
+    resolution: {integrity: sha512-Nc3IT5yHzflTfbjgqWcCPpo7DaKy4FnpB0l/zCAW0Tc7jxAiuqSxHasntB3D7887LSrA93kDJ9IXovxJYxyLCA==}
+    engines: {node: '>=4'}
+
+  pocketbase-typegen@1.3.3:
+    resolution: {integrity: sha512-9RnoS0Hm7kg4dEAV0zz21OkULy+t1DpWBeZHT9j4ZJu3L58pdfva/2314mhfE2hrOUeNiedqoFtfkJ9ZYQ8yng==}
+    hasBin: true
+
+  pocketbase@0.26.8:
+    resolution: {integrity: sha512-aQ/ewvS7ncvAE8wxoW10iAZu6ElgbeFpBhKPnCfvRovNzm2gW8u/sQNPGN6vNgVEagz44kK//C61oKjfa+7Low==}
+
+  postcss-calc@10.1.1:
+    resolution: {integrity: sha512-NYEsLHh8DgG/PRH2+G9BTuUdtf9ViS+vdoQ0YA5OQdGsfN4ztiwtDWNtBl9EKeqNMFnIu8IKZ0cLxEQ5r5KVMw==}
+    engines: {node: ^18.12 || ^20.9 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.38
+
+  postcss-colormin@7.0.7:
+    resolution: {integrity: sha512-sBQ628lSj3VQpDquQel8Pen5mmjFPsO4pH9lDLaHB1AVkMRHtkl0pRB5DCWznc9upWsxint/kV+AveSj7W1tew==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-convert-values@7.0.9:
+    resolution: {integrity: sha512-l6uATQATZaCa0bckHV+r6dLXfWtUBKXxO3jK+AtxxJJtgMPD+VhhPCCx51I4/5w8U5uHV67g3w7PXj+V3wlMlg==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-discard-comments@7.0.6:
+    resolution: {integrity: sha512-Sq+Fzj1Eg5/CPf1ERb0wS1Im5cvE2gDXCE+si4HCn1sf+jpQZxDI4DXEp8t77B/ImzDceWE2ebJQFXdqZ6GRJw==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-discard-duplicates@7.0.2:
+    resolution: {integrity: sha512-eTonaQvPZ/3i1ASDHOKkYwAybiM45zFIc7KXils4mQmHLqIswXD9XNOKEVxtTFnsmwYzF66u4LMgSr0abDlh5w==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-discard-empty@7.0.1:
+    resolution: {integrity: sha512-cFrJKZvcg/uxB6Ijr4l6qmn3pXQBna9zyrPC+sK0zjbkDUZew+6xDltSF7OeB7rAtzaaMVYSdbod+sZOCWnMOg==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-discard-overridden@7.0.1:
+    resolution: {integrity: sha512-7c3MMjjSZ/qYrx3uc1940GSOzN1Iqjtlqe8uoSg+qdVPYyRb0TILSqqmtlSFuE4mTDECwsm397Ya7iXGzfF7lg==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-merge-longhand@7.0.5:
+    resolution: {integrity: sha512-Kpu5v4Ys6QI59FxmxtNB/iHUVDn9Y9sYw66D6+SZoIk4QTz1prC4aYkhIESu+ieG1iylod1f8MILMs1Em3mmIw==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-merge-rules@7.0.8:
+    resolution: {integrity: sha512-BOR1iAM8jnr7zoQSlpeBmCsWV5Uudi/+5j7k05D0O/WP3+OFMPD86c1j/20xiuRtyt45bhxw/7hnhZNhW2mNFA==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-minify-font-values@7.0.1:
+    resolution: {integrity: sha512-2m1uiuJeTplll+tq4ENOQSzB8LRnSUChBv7oSyFLsJRtUgAAJGP6LLz0/8lkinTgxrmJSPOEhgY1bMXOQ4ZXhQ==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-minify-gradients@7.0.2:
+    resolution: {integrity: sha512-fVY3AB8Um7SJR5usHqTY2Ngf9qh8IRN+FFzrBP0ONJy6yYXsP7xyjK2BvSAIrpgs1cST+H91V0TXi3diHLYJtw==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-minify-params@7.0.6:
+    resolution: {integrity: sha512-YOn02gC68JijlaXVuKvFSCvQOhTpblkcfDre2hb/Aaa58r2BIaK4AtE/cyZf2wV7YKAG+UlP9DT+By0ry1E4VQ==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-minify-selectors@7.0.6:
+    resolution: {integrity: sha512-lIbC0jy3AAwDxEgciZlBullDiMBeBCT+fz5G8RcA9MWqh/hfUkpOI3vNDUNEZHgokaoiv0juB9Y8fGcON7rU/A==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-normalize-charset@7.0.1:
+    resolution: {integrity: sha512-sn413ofhSQHlZFae//m9FTOfkmiZ+YQXsbosqOWRiVQncU2BA3daX3n0VF3cG6rGLSFVc5Di/yns0dFfh8NFgQ==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-normalize-display-values@7.0.1:
+    resolution: {integrity: sha512-E5nnB26XjSYz/mGITm6JgiDpAbVuAkzXwLzRZtts19jHDUBFxZ0BkXAehy0uimrOjYJbocby4FVswA/5noOxrQ==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-normalize-positions@7.0.1:
+    resolution: {integrity: sha512-pB/SzrIP2l50ZIYu+yQZyMNmnAcwyYb9R1fVWPRxm4zcUFCY2ign7rcntGFuMXDdd9L2pPNUgoODDk91PzRZuQ==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-normalize-repeat-style@7.0.1:
+    resolution: {integrity: sha512-NsSQJ8zj8TIDiF0ig44Byo3Jk9e4gNt9x2VIlJudnQQ5DhWAHJPF4Tr1ITwyHio2BUi/I6Iv0HRO7beHYOloYQ==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-normalize-string@7.0.1:
+    resolution: {integrity: sha512-QByrI7hAhsoze992kpbMlJSbZ8FuCEc1OT9EFbZ6HldXNpsdpZr+YXC5di3UEv0+jeZlHbZcoCADgb7a+lPmmQ==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-normalize-timing-functions@7.0.1:
+    resolution: {integrity: sha512-bHifyuuSNdKKsnNJ0s8fmfLMlvsQwYVxIoUBnowIVl2ZAdrkYQNGVB4RxjfpvkMjipqvbz0u7feBZybkl/6NJg==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-normalize-unicode@7.0.6:
+    resolution: {integrity: sha512-z6bwTV84YW6ZvvNoaNLuzRW4/uWxDKYI1iIDrzk6D2YTL7hICApy+Q1LP6vBEsljX8FM7YSuV9qI79XESd4ddQ==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-normalize-url@7.0.1:
+    resolution: {integrity: sha512-sUcD2cWtyK1AOL/82Fwy1aIVm/wwj5SdZkgZ3QiUzSzQQofrbq15jWJ3BA7Z+yVRwamCjJgZJN0I9IS7c6tgeQ==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-normalize-whitespace@7.0.1:
+    resolution: {integrity: sha512-vsbgFHMFQrJBJKrUFJNZ2pgBeBkC2IvvoHjz1to0/0Xk7sII24T0qFOiJzG6Fu3zJoq/0yI4rKWi7WhApW+EFA==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-ordered-values@7.0.2:
+    resolution: {integrity: sha512-AMJjt1ECBffF7CEON/Y0rekRLS6KsePU6PRP08UqYW4UGFRnTXNrByUzYK1h8AC7UWTZdQ9O3Oq9kFIhm0SFEw==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-reduce-initial@7.0.6:
+    resolution: {integrity: sha512-G6ZyK68AmrPdMB6wyeA37ejnnRG2S8xinJrZJnOv+IaRKf6koPAVbQsiC7MfkmXaGmF1UO+QCijb27wfpxuRNg==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-reduce-transforms@7.0.1:
+    resolution: {integrity: sha512-MhyEbfrm+Mlp/36hvZ9mT9DaO7dbncU0CvWI8V93LRkY6IYlu38OPg3FObnuKTUxJ4qA8HpurdQOo5CyqqO76g==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-selector-parser@7.1.1:
+    resolution: {integrity: sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==}
+    engines: {node: '>=4'}
+
+  postcss-svgo@7.1.1:
+    resolution: {integrity: sha512-zU9H9oEDrUFKa0JB7w+IYL7Qs9ey1mZyjhbf0KLxwJDdDRtoPvCmaEfknzqfHj44QS9VD6c5sJnBAVYTLRg/Sg==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >= 18}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-unique-selectors@7.0.5:
+    resolution: {integrity: sha512-3QoYmEt4qg/rUWDn6Tc8+ZVPmbp4G1hXDtCNWDx0st8SjtCbRcxRXDDM1QrEiXGG3A45zscSJFb4QH90LViyxg==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  postcss-value-parser@4.2.0:
+    resolution: {integrity: sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==}
+
+  postcss@8.5.8:
+    resolution: {integrity: sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==}
+    engines: {node: ^10 || ^12 || >=14}
+
+  powershell-utils@0.1.0:
+    resolution: {integrity: sha512-dM0jVuXJPsDN6DvRpea484tCUaMiXWjuCn++HGTqUWzGDjv5tZkEZldAJ/UMlqRYGFrD/etByo4/xOuC/snX2A==}
+    engines: {node: '>=20'}
+
+  prebuild-install@7.1.3:
+    resolution: {integrity: sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==}
+    engines: {node: '>=10'}
+    deprecated: No longer maintained. Please contact the author of the relevant native addon; alternatives are available.
+    hasBin: true
+
+  prelude-ls@1.2.1:
+    resolution: {integrity: sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==}
+    engines: {node: '>= 0.8.0'}
+
+  pretty-bytes@7.1.0:
+    resolution: {integrity: sha512-nODzvTiYVRGRqAOvE84Vk5JDPyyxsVk0/fbA/bq7RqlnhksGpset09XTxbpvLTIjoaF7K8Z8DG8yHtKGTPSYRw==}
+    engines: {node: '>=20'}
+
+  process-nextick-args@2.0.1:
+    resolution: {integrity: sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==}
+
+  process@0.11.10:
+    resolution: {integrity: sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A==}
+    engines: {node: '>= 0.6.0'}
+
+  promise-inflight@1.0.1:
+    resolution: {integrity: sha512-6zWPyEOFaQBJYcGMHBKTKJ3u6TBsnMFOIZSa6ce1e/ZrrsOlnHRHbabMjLiBYKp+n44X9eUI6VUPaukCXHuG4g==}
+    peerDependencies:
+      bluebird: '*'
+    peerDependenciesMeta:
+      bluebird:
+        optional: true
+
+  promise-retry@2.0.1:
+    resolution: {integrity: sha512-y+WKFlBR8BGXnsNlIHFGPZmyDf3DFMoLhaflAnyZgV6rG6xu+JwesTo2Q9R6XwYmtmwAFCkAk3e35jEdoeh/3g==}
+    engines: {node: '>=10'}
+
+  prompts@2.4.2:
+    resolution: {integrity: sha512-NxNv/kLguCA7p3jE8oL2aEBsrJWgAakBpgmgK6lpPWV+WuOmY6r2/zbAVnP+T8bQlA0nzHXSJSJW0Hq7ylaD2Q==}
+    engines: {node: '>= 6'}
+
+  prosemirror-changeset@2.4.0:
+    resolution: {integrity: sha512-LvqH2v7Q2SF6yxatuPP2e8vSUKS/L+xAU7dPDC4RMyHMhZoGDfBC74mYuyYF4gLqOEG758wajtyhNnsTkuhvng==}
+
+  prosemirror-collab@1.3.1:
+    resolution: {integrity: sha512-4SnynYR9TTYaQVXd/ieUvsVV4PDMBzrq2xPUWutHivDuOshZXqQ5rGbZM84HEaXKbLdItse7weMGOUdDVcLKEQ==}
+
+  prosemirror-commands@1.7.1:
+    resolution: {integrity: sha512-rT7qZnQtx5c0/y/KlYaGvtG411S97UaL6gdp6RIZ23DLHanMYLyfGBV5DtSnZdthQql7W+lEVbpSfwtO8T+L2w==}
+
+  prosemirror-dropcursor@1.8.2:
+    resolution: {integrity: sha512-CCk6Gyx9+Tt2sbYk5NK0nB1ukHi2ryaRgadV/LvyNuO3ena1payM2z6Cg0vO1ebK8cxbzo41ku2DE5Axj1Zuiw==}
+
+  prosemirror-gapcursor@1.4.1:
+    resolution: {integrity: sha512-pMdYaEnjNMSwl11yjEGtgTmLkR08m/Vl+Jj443167p9eB3HVQKhYCc4gmHVDsLPODfZfjr/MmirsdyZziXbQKw==}
+
+  prosemirror-history@1.5.0:
+    resolution: {integrity: sha512-zlzTiH01eKA55UAf1MEjtssJeHnGxO0j4K4Dpx+gnmX9n+SHNlDqI2oO1Kv1iPN5B1dm5fsljCfqKF9nFL6HRg==}
+
+  prosemirror-inputrules@1.5.1:
+    resolution: {integrity: sha512-7wj4uMjKaXWAQ1CDgxNzNtR9AlsuwzHfdFH1ygEHA2KHF2DOEaXl1CJfNPAKCg9qNEh4rum975QLaCiQPyY6Fw==}
+
+  prosemirror-keymap@1.2.3:
+    resolution: {integrity: sha512-4HucRlpiLd1IPQQXNqeo81BGtkY8Ai5smHhKW9jjPKRc2wQIxksg7Hl1tTI2IfT2B/LgX6bfYvXxEpJl7aKYKw==}
+
+  prosemirror-markdown@1.13.4:
+    resolution: {integrity: sha512-D98dm4cQ3Hs6EmjK500TdAOew4Z03EV71ajEFiWra3Upr7diytJsjF4mPV2dW+eK5uNectiRj0xFxYI9NLXDbw==}
+
+  prosemirror-menu@1.3.0:
+    resolution: {integrity: sha512-TImyPXCHPcDsSka2/lwJ6WjTASr4re/qWq1yoTTuLOqfXucwF6VcRa2LWCkM/EyTD1UO3CUwiH8qURJoWJRxwg==}
+
+  prosemirror-model@1.25.4:
+    resolution: {integrity: sha512-PIM7E43PBxKce8OQeezAs9j4TP+5yDpZVbuurd1h5phUxEKIu+G2a+EUZzIC5nS1mJktDJWzbqS23n1tsAf5QA==}
+
+  prosemirror-schema-basic@1.2.4:
+    resolution: {integrity: sha512-ELxP4TlX3yr2v5rM7Sb70SqStq5NvI15c0j9j/gjsrO5vaw+fnnpovCLEGIcpeGfifkuqJwl4fon6b+KdrODYQ==}
+
+  prosemirror-schema-list@1.5.1:
+    resolution: {integrity: sha512-927lFx/uwyQaGwJxLWCZRkjXG0p48KpMj6ueoYiu4JX05GGuGcgzAy62dfiV8eFZftgyBUvLx76RsMe20fJl+Q==}
+
+  prosemirror-state@1.4.4:
+    resolution: {integrity: sha512-6jiYHH2CIGbCfnxdHbXZ12gySFY/fz/ulZE333G6bPqIZ4F+TXo9ifiR86nAHpWnfoNjOb3o5ESi7J8Uz1jXHw==}
+
+  prosemirror-tables@1.8.5:
+    resolution: {integrity: sha512-V/0cDCsHKHe/tfWkeCmthNUcEp1IVO3p6vwN8XtwE9PZQLAZJigbw3QoraAdfJPir4NKJtNvOB8oYGKRl+t0Dw==}
+
+  prosemirror-trailing-node@3.0.0:
+    resolution: {integrity: sha512-xiun5/3q0w5eRnGYfNlW1uU9W6x5MoFKWwq/0TIRgt09lv7Hcser2QYV8t4muXbEr+Fwo0geYn79Xs4GKywrRQ==}
+    peerDependencies:
+      prosemirror-model: ^1.22.1
+      prosemirror-state: ^1.4.2
+      prosemirror-view: ^1.33.8
+
+  prosemirror-transform@1.12.0:
+    resolution: {integrity: sha512-GxboyN4AMIsoHNtz5uf2r2Ru551i5hWeCMD6E2Ib4Eogqoub0NflniaBPVQ4MrGE5yZ8JV9tUHg9qcZTTrcN4w==}
+
+  prosemirror-view@1.41.8:
+    resolution: {integrity: sha512-TnKDdohEatgyZNGCDWIdccOHXhYloJwbwU+phw/a23KBvJIR9lWQWW7WHHK3vBdOLDNuF7TaX98GObUZOWkOnA==}
+
+  proto-list@1.2.4:
+    resolution: {integrity: sha512-vtK/94akxsTMhe0/cbfpR+syPuszcuwhqVjJq26CuNDgFGj682oRBXOP5MJpv2r7JtE8MsiepGIqvvOTBwn2vA==}
+
+  pump@3.0.4:
+    resolution: {integrity: sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==}
+
+  punycode.js@2.3.1:
+    resolution: {integrity: sha512-uxFIHU0YlHYhDQtV4R9J6a52SLx28BCjT+4ieh7IGbgwVJWO+km431c4yRlREUAsAmt/uMjQUyQHNEPf0M39CA==}
+    engines: {node: '>=6'}
+
+  punycode@2.3.1:
+    resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==}
+    engines: {node: '>=6'}
+
+  quansync@0.2.11:
+    resolution: {integrity: sha512-AifT7QEbW9Nri4tAwR5M/uzpBuqfZf+zwaEM/QkzEjj7NBuFD2rBuy0K3dE+8wltbezDV7JMA0WfnCPYRSYbXA==}
+
+  queue-microtask@1.2.3:
+    resolution: {integrity: sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==}
+
+  radix3@1.1.2:
+    resolution: {integrity: sha512-b484I/7b8rDEdSDKckSSBA8knMpcdsXudlE/LNL639wFoHKwLbEkQFZHWEYwDC0wa0FKUcCY+GAF73Z7wxNVFA==}
+
+  range-parser@1.2.1:
+    resolution: {integrity: sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==}
+    engines: {node: '>= 0.6'}
+
+  rc9@3.0.1:
+    resolution: {integrity: sha512-gMDyleLWVE+i6Sgtc0QbbY6pEKqYs97NGi6isHQPqYlLemPoO8dxQ3uGi0f4NiP98c+jMW6cG1Kx9dDwfvqARQ==}
+
+  rc@1.2.8:
+    resolution: {integrity: sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==}
+    hasBin: true
+
+  readable-stream@2.3.8:
+    resolution: {integrity: sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==}
+
+  readable-stream@3.6.2:
+    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
+    engines: {node: '>= 6'}
+
+  readable-stream@4.7.0:
+    resolution: {integrity: sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+
+  readdir-glob@1.1.3:
+    resolution: {integrity: sha512-v05I2k7xN8zXvPD9N+z/uhXPaj0sUFCe2rcWZIpBsqxfP7xXFQ0tipAd/wjj1YxWyWtUS5IDJpOG82JKt2EAVA==}
+
+  readdirp@4.1.2:
+    resolution: {integrity: sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg==}
+    engines: {node: '>= 14.18.0'}
+
+  readdirp@5.0.0:
+    resolution: {integrity: sha512-9u/XQ1pvrQtYyMpZe7DXKv2p5CNvyVwzUB6uhLAnQwHMSgKMBR62lc7AHljaeteeHXn11XTAaLLUVZYVZyuRBQ==}
+    engines: {node: '>= 20.19.0'}
+
+  redis-errors@1.2.0:
+    resolution: {integrity: sha512-1qny3OExCf0UvUV/5wpYKf2YwPcOqXzkwKKSmKHiE6ZMQs5heeE/c8eXK+PNllPvmjgAbfnsbpkGZWy8cBpn9w==}
+    engines: {node: '>=4'}
+
+  redis-parser@3.0.0:
+    resolution: {integrity: sha512-DJnGAeenTdpMEH6uAJRK/uiyEIH9WVsUmoLwzudwGJUwZPp80PDBWPHXSAGNPwNvIXAbe7MSUB1zQFugFml66A==}
+    engines: {node: '>=4'}
+
+  refa@0.12.1:
+    resolution: {integrity: sha512-J8rn6v4DBb2nnFqkqwy6/NnTYMcgLA+sLr0iIO41qpv0n+ngb7ksag2tMRl0inb1bbO/esUwzW1vbJi7K0sI0g==}
+    engines: {node: ^12.0.0 || ^14.0.0 || >=16.0.0}
+
+  regexp-ast-analysis@0.7.1:
+    resolution: {integrity: sha512-sZuz1dYW/ZsfG17WSAG7eS85r5a0dDsvg+7BiiYR5o6lKCAtUrEwdmRmaGF6rwVj3LcmAeYkOWKEPlbPzN3Y3A==}
+    engines: {node: ^12.0.0 || ^14.0.0 || >=16.0.0}
+
+  regexp-tree@0.1.27:
+    resolution: {integrity: sha512-iETxpjK6YoRWJG5o6hXLwvjYAoW+FEZn9os0PD/b6AP6xQwsa/Y7lCVgIixBbUPMfhu+i2LtdeAqVTgGlQarfA==}
+    hasBin: true
+
+  regjsparser@0.13.1:
+    resolution: {integrity: sha512-dLsljMd9sqwRkby8zhO1gSg3PnJIBFid8f4CQj/sXx+7cKx+E7u0PKhZ+U4wmhx7EfmtvnA318oVaIkAB1lRJw==}
+    hasBin: true
+
+  reka-ui@2.9.3:
+    resolution: {integrity: sha512-C9lCVxsSC7uYD0Nbgik1+14FNndHNprZmf0zGQt0ZDYIt5KxXV3zD0hEqNcfRUsEEJvVmoRsUkJnASBVBeaaUw==}
+    peerDependencies:
+      vue: '>= 3.4.0'
+
+  reserved-identifiers@1.2.0:
+    resolution: {integrity: sha512-yE7KUfFvaBFzGPs5H3Ops1RevfUEsDc5Iz65rOwWg4lE8HJSYtle77uul3+573457oHvBKuHYDl/xqUkKpEEdw==}
+    engines: {node: '>=18'}
+
+  resolve-from@5.0.0:
+    resolution: {integrity: sha512-qYg9KP24dD5qka9J47d0aVky0N+b4fTU89LN9iDnjB5waksiC49rvMB0PrUJQGoTmH50XPiqOvAjDfaijGxYZw==}
+    engines: {node: '>=8'}
+
+  resolve-pkg-maps@1.0.0:
+    resolution: {integrity: sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw==}
+
+  resolve@1.22.11:
+    resolution: {integrity: sha512-RfqAvLnMl313r7c9oclB1HhUEAezcpLjz95wFH4LVuhk9JF/r22qmVP9AMmOU4vMX7Q8pN8jwNg/CSpdFnMjTQ==}
+    engines: {node: '>= 0.4'}
+    hasBin: true
+
+  retry@0.12.0:
+    resolution: {integrity: sha512-9LkiTwjUh6rT555DtE9rTX+BKByPfrMzEAtnlEtdEwr3Nkffwiihqe2bWADg+OQRjt9gl6ICdmB/ZFDCGAtSow==}
+    engines: {node: '>= 4'}
+
+  reusify@1.1.0:
+    resolution: {integrity: sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==}
+    engines: {iojs: '>=1.0.0', node: '>=0.10.0'}
+
+  rfdc@1.4.1:
+    resolution: {integrity: sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA==}
+
+  rimraf@3.0.2:
+    resolution: {integrity: sha512-JZkJMZkAGFFPP2YqXZXPbMlMBgsxzE8ILs4lMIX/2o0L9UBw9O/Y3o6wFw/i9YLapcUJWwqbi3kdxIPdC62TIA==}
+    deprecated: Rimraf versions prior to v4 are no longer supported
+    hasBin: true
+
+  rimraf@6.1.3:
+    resolution: {integrity: sha512-LKg+Cr2ZF61fkcaK1UdkH2yEBBKnYjTyWzTJT6KNPcSPaiT7HSdhtMXQuN5wkTX0Xu72KQ1l8S42rlmexS2hSA==}
+    engines: {node: 20 || >=22}
+    hasBin: true
+
+  rollup-plugin-visualizer@7.0.1:
+    resolution: {integrity: sha512-UJUT4+1Ho4OcWmPYU3sYXgUqI8B8Ayfe06MX7y0qCJ1K8aGoKtR/NDd/2nZqM7ADkrzny+I99Ul7GgyoiVNAgg==}
+    engines: {node: '>=22'}
+    hasBin: true
+    peerDependencies:
+      rolldown: 1.x || ^1.0.0-beta || ^1.0.0-rc
+      rollup: 2.x || 3.x || 4.x
+    peerDependenciesMeta:
+      rolldown:
+        optional: true
+      rollup:
+        optional: true
+
+  rollup@4.60.1:
+    resolution: {integrity: sha512-VmtB2rFU/GroZ4oL8+ZqXgSA38O6GR8KSIvWmEFv63pQ0G6KaBH9s07PO8XTXP4vI+3UJUEypOfjkGfmSBBR0w==}
+    engines: {node: '>=18.0.0', npm: '>=8.0.0'}
+    hasBin: true
+
+  rope-sequence@1.3.4:
+    resolution: {integrity: sha512-UT5EDe2cu2E/6O4igUr5PSFs23nvvukicWHx6GnOPlHAiiYbzNuCRQCuiUdHJQcqKalLKlrYJnjY0ySGsXNQXQ==}
+
+  rou3@0.8.1:
+    resolution: {integrity: sha512-ePa+XGk00/3HuCqrEnK3LxJW7I0SdNg6EFzKUJG73hMAdDcOUC/i/aSz7LSDwLrGr33kal/rqOGydzwl6U7zBA==}
+
+  run-applescript@7.1.0:
+    resolution: {integrity: sha512-DPe5pVFaAsinSaV6QjQ6gdiedWDcRCbUuiQfQa2wmWV7+xC9bGulGI8+TdRmoFkAPaBXk8CrAbnlY2ISniJ47Q==}
+    engines: {node: '>=18'}
+
+  run-parallel@1.2.0:
+    resolution: {integrity: sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==}
+
+  safe-buffer@5.1.2:
+    resolution: {integrity: sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==}
+
+  safe-buffer@5.2.1:
+    resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
+
+  safer-buffer@2.1.2:
+    resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
+
+  sax@1.1.4:
+    resolution: {integrity: sha512-5f3k2PbGGp+YtKJjOItpg3P99IMD84E4HOvcfleTb5joCHNXYLsR9yWFPOYGgaeMPDubQILTCMdsFb2OMeOjtg==}
+
+  sax@1.6.0:
+    resolution: {integrity: sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==}
+    engines: {node: '>=11.0.0'}
+
+  scslre@0.3.0:
+    resolution: {integrity: sha512-3A6sD0WYP7+QrjbfNA2FN3FsOaGGFoekCVgTyypy53gPxhbkCIjtO6YWgdrfM+n/8sI8JeXZOIxsHjMTNxQ4nQ==}
+    engines: {node: ^14.0.0 || >=16.0.0}
+
+  scule@1.3.0:
+    resolution: {integrity: sha512-6FtHJEvt+pVMIB9IBY+IcCJ6Z5f1iQnytgyfKMhDKgmzYG+TeH/wx1y3l27rshSbLiSanrR9ffZDrEsmjlQF2g==}
+
+  semver@6.3.1:
+    resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==}
+    hasBin: true
+
+  semver@7.7.4:
+    resolution: {integrity: sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  send@1.2.1:
+    resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==}
+    engines: {node: '>= 18'}
+
+  serialize-javascript@7.0.5:
+    resolution: {integrity: sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw==}
+    engines: {node: '>=20.0.0'}
+
+  seroval@1.5.2:
+    resolution: {integrity: sha512-xcRN39BdsnO9Tf+VzsE7b3JyTJASItIV1FVFewJKCFcW4s4haIKS3e6vj8PGB9qBwC7tnuOywQMdv5N4qkzi7Q==}
+    engines: {node: '>=10'}
+
+  serve-placeholder@2.0.2:
+    resolution: {integrity: sha512-/TMG8SboeiQbZJWRlfTCqMs2DD3SZgWp0kDQePz9yUuCnDfDh/92gf7/PxGhzXTKBIPASIHxFcZndoNbp6QOLQ==}
+
+  serve-static@2.2.1:
+    resolution: {integrity: sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==}
+    engines: {node: '>= 18'}
+
+  set-blocking@2.0.0:
+    resolution: {integrity: sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==}
+
+  setprototypeof@1.2.0:
+    resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==}
+
+  sharp@0.34.5:
+    resolution: {integrity: sha512-Ou9I5Ft9WNcCbXrU9cMgPBcCK8LiwLqcbywW3t4oDV37n1pzpuNLsYiAV8eODnjbtQlSDwZ2cUEeQz4E54Hltg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+
+  shebang-command@2.0.0:
+    resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
+    engines: {node: '>=8'}
+
+  shebang-regex@3.0.0:
+    resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==}
+    engines: {node: '>=8'}
+
+  shell-quote@1.8.3:
+    resolution: {integrity: sha512-ObmnIF4hXNg1BqhnHmgbDETF8dLPCggZWBjkQfhZpbszZnYur5DUljTcCHii5LC3J5E0yeO/1LIMyH+UvHQgyw==}
+    engines: {node: '>= 0.4'}
+
+  siginfo@2.0.0:
+    resolution: {integrity: sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==}
+
+  signal-exit@3.0.7:
+    resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
+
+  signal-exit@4.1.0:
+    resolution: {integrity: sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==}
+    engines: {node: '>=14'}
+
+  simple-concat@1.0.1:
+    resolution: {integrity: sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==}
+
+  simple-get@4.0.1:
+    resolution: {integrity: sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==}
+
+  simple-git@3.35.1:
+    resolution: {integrity: sha512-pAG7pC3x5ATFGLN/dmV4eVazL9Lf03MWa01vyi6fsSXMn/j8ypoWUKvVAyv8Inh5X/zbDOcFA7FnQTQ8S1wErA==}
+
+  sirv@3.0.2:
+    resolution: {integrity: sha512-2wcC/oGxHis/BoHkkPwldgiPSYcpZK3JU28WoMVv55yHJgcZ8rlXvuG9iZggz+sU1d4bRgIGASwyWqjxu3FM0g==}
+    engines: {node: '>=18'}
+
+  sisteransi@1.0.5:
+    resolution: {integrity: sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg==}
+
+  slash@5.1.0:
+    resolution: {integrity: sha512-ZA6oR3T/pEyuqwMgAKT0/hAv8oAXckzbkmR0UkUosQ+Mc4RxGoJkRmwHgHufaenlyAgE1Mxgpdcrf75y6XcnDg==}
+    engines: {node: '>=14.16'}
+
+  slice-ansi@4.0.0:
+    resolution: {integrity: sha512-qMCMfhY040cVHT43K9BFygqYbUPFZKHOg7K73mtTWJRb8pyP3fzf4Ixd5SzdEJQ6MRUg/WBnOLxghZtKKurENQ==}
+    engines: {node: '>=10'}
+
+  smart-buffer@4.2.0:
+    resolution: {integrity: sha512-94hK0Hh8rPqQl2xXc3HsaBoOXKV20MToPkcXvwbISWLEs+64sBq5kFgn2kJDHb1Pry9yrP0dxrCI9RRci7RXKg==}
+    engines: {node: '>= 6.0.0', npm: '>= 3.0.0'}
+
+  smob@1.6.1:
+    resolution: {integrity: sha512-KAkBqZl3c2GvNgNhcoyJae1aKldDW0LO279wF9bk1PnluRTETKBq0WyzRXxEhoQLk56yHaOY4JCBEKDuJIET5g==}
+    engines: {node: '>=20.0.0'}
+
+  socks-proxy-agent@6.2.1:
+    resolution: {integrity: sha512-a6KW9G+6B3nWZ1yB8G7pJwL3ggLy1uTzKAgCb7ttblwqdz9fMGJUuTy3uFzEP48FAs9FLILlmzDlE2JJhVQaXQ==}
+    engines: {node: '>= 10'}
+
+  socks@2.8.7:
+    resolution: {integrity: sha512-HLpt+uLy/pxB+bum/9DzAgiKS8CX1EvbWxI4zlmgGCExImLdiad2iCwXT5Z4c9c3Eq8rP2318mPW2c+QbtjK8A==}
+    engines: {node: '>= 10.0.0', npm: '>= 3.0.0'}
+
+  source-map-js@1.2.1:
+    resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
+    engines: {node: '>=0.10.0'}
+
+  source-map-support@0.5.21:
+    resolution: {integrity: sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==}
+
+  source-map@0.6.1:
+    resolution: {integrity: sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==}
+    engines: {node: '>=0.10.0'}
+
+  source-map@0.7.6:
+    resolution: {integrity: sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ==}
+    engines: {node: '>= 12'}
+
+  spdx-exceptions@2.5.0:
+    resolution: {integrity: sha512-PiU42r+xO4UbUS1buo3LPJkjlO7430Xn5SVAhdpzzsPHsjbYVflnnFdATgabnLude+Cqu25p6N+g2lw/PFsa4w==}
+
+  spdx-expression-parse@4.0.0:
+    resolution: {integrity: sha512-Clya5JIij/7C6bRR22+tnGXbc4VKlibKSVj2iHvVeX5iMW7s1SIQlqu699JkODJJIhh/pUu8L0/VLh8xflD+LQ==}
+
+  spdx-license-ids@3.0.23:
+    resolution: {integrity: sha512-CWLcCCH7VLu13TgOH+r8p1O/Znwhqv/dbb6lqWy67G+pT1kHmeD/+V36AVb/vq8QMIQwVShJ6Ssl5FPh0fuSdw==}
+
+  speakingurl@14.0.1:
+    resolution: {integrity: sha512-1POYv7uv2gXoyGFpBCmpDVSNV74IfsWlDW216UPjbWufNf+bSU6GdbDsxdcxtfwb4xlI3yxzOTKClUosxARYrQ==}
+    engines: {node: '>=0.10.0'}
+
+  split2@4.2.0:
+    resolution: {integrity: sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==}
+    engines: {node: '>= 10.x'}
+
+  sqlite3@5.1.7:
+    resolution: {integrity: sha512-GGIyOiFaG+TUra3JIfkI/zGP8yZYLPQ0pl1bH+ODjiX57sPhrLU5sQJn1y9bDKZUFYkX1crlrPfSYt0BKKdkog==}
+
+  sqlite@4.2.1:
+    resolution: {integrity: sha512-Tll0Ndvnwkuv5Hn6WIbh26rZiYQORuH1t5m/or9LUpSmDmmyFG89G9fKrSeugMPxwmEIXoVxqTun4LbizTs4uw==}
+
+  srvx@0.11.15:
+    resolution: {integrity: sha512-iXsux0UcOjdvs0LCMa2Ws3WwcDUozA3JN3BquNXkaFPP7TpRqgunKdEgoZ/uwb1J6xaYHfxtz9Twlh6yzwM6Tg==}
+    engines: {node: '>=20.16.0'}
+    hasBin: true
+
+  ssri@8.0.1:
+    resolution: {integrity: sha512-97qShzy1AiyxvPNIkLWoGua7xoQzzPjQ0HAH4B0rWKo7SZ6USuPcrUiAFrws0UH8RrbWmgq3LMTObhPIHbbBeQ==}
+    engines: {node: '>= 8'}
+
+  stable-hash-x@0.2.0:
+    resolution: {integrity: sha512-o3yWv49B/o4QZk5ZcsALc6t0+eCelPc44zZsLtCQnZPDwFpDYSWcDnrv2TtMmMbQ7uKo3J0HTURCqckw23czNQ==}
+    engines: {node: '>=12.0.0'}
+
+  stackback@0.0.2:
+    resolution: {integrity: sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==}
+
+  standard-as-callback@2.1.0:
+    resolution: {integrity: sha512-qoRRSyROncaz1z0mvYqIE4lCd9p2R90i6GxW3uZv5ucSu8tU7B5HXUP1gG8pVZsYNVaXjk8ClXHPttLyxAL48A==}
+
+  statuses@2.0.2:
+    resolution: {integrity: sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==}
+    engines: {node: '>= 0.8'}
+
+  std-env@3.10.0:
+    resolution: {integrity: sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==}
+
+  std-env@4.0.0:
+    resolution: {integrity: sha512-zUMPtQ/HBY3/50VbpkupYHbRroTRZJPRLvreamgErJVys0ceuzMkD44J/QjqhHjOzK42GQ3QZIeFG1OYfOtKqQ==}
+
+  streamx@2.25.0:
+    resolution: {integrity: sha512-0nQuG6jf1w+wddNEEXCF4nTg3LtufWINB5eFEN+5TNZW7KWJp6x87+JFL43vaAUPyCfH1wID+mNVyW6OHtFamg==}
+
+  string-width@4.2.3:
+    resolution: {integrity: sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==}
+    engines: {node: '>=8'}
+
+  string-width@5.1.2:
+    resolution: {integrity: sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==}
+    engines: {node: '>=12'}
+
+  string-width@7.2.0:
+    resolution: {integrity: sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ==}
+    engines: {node: '>=18'}
+
+  string_decoder@1.1.1:
+    resolution: {integrity: sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==}
+
+  string_decoder@1.3.0:
+    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
+
+  strip-ansi@6.0.1:
+    resolution: {integrity: sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==}
+    engines: {node: '>=8'}
+
+  strip-ansi@7.2.0:
+    resolution: {integrity: sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==}
+    engines: {node: '>=12'}
+
+  strip-final-newline@3.0.0:
+    resolution: {integrity: sha512-dOESqjYr96iWYylGObzd39EuNTa5VJxyvVAEm5Jnh7KGo75V43Hk1odPQkNDyXNmUR6k+gEiDVXnjB8HJ3crXw==}
+    engines: {node: '>=12'}
+
+  strip-indent@4.1.1:
+    resolution: {integrity: sha512-SlyRoSkdh1dYP0PzclLE7r0M9sgbFKKMFXpFRUMNuKhQSbC6VQIGzq3E0qsfvGJaUFJPGv6Ws1NZ/haTAjfbMA==}
+    engines: {node: '>=12'}
+
+  strip-json-comments@2.0.1:
+    resolution: {integrity: sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==}
+    engines: {node: '>=0.10.0'}
+
+  strip-literal@3.1.0:
+    resolution: {integrity: sha512-8r3mkIM/2+PpjHoOtiAW8Rg3jJLHaV7xPwG+YRGrv6FP0wwk/toTpATxWYOW0BKdWwl82VT2tFYi5DlROa0Mxg==}
+
+  structured-clone-es@2.0.0:
+    resolution: {integrity: sha512-5UuAHmBLXYPCl22xWJrFuGmIhBKQzxISPVz6E7nmTmTcAOpUzlbjKJsRrCE4vADmMQ0dzeCnlWn9XufnAGf76Q==}
+
+  stylehacks@7.0.8:
+    resolution: {integrity: sha512-I3f053GBLIiS5Fg6OMFhq/c+yW+5Hc2+1fgq7gElDMMSqwlRb3tBf2ef6ucLStYRpId4q//bQO1FjcyNyy4yDQ==}
+    engines: {node: ^18.12.0 || ^20.9.0 || >=22.0}
+    peerDependencies:
+      postcss: ^8.4.32
+
+  superjson@2.2.6:
+    resolution: {integrity: sha512-H+ue8Zo4vJmV2nRjpx86P35lzwDT3nItnIsocgumgr0hHMQ+ZGq5vrERg9kJBo5AWGmxZDhzDo+WVIJqkB0cGA==}
+    engines: {node: '>=16'}
+
+  supports-color@10.2.2:
+    resolution: {integrity: sha512-SS+jx45GF1QjgEXQx4NJZV9ImqmO2NPz5FNsIHrsDjh2YsHnawpan7SNQ1o8NuhrbHZy9AZhIoCUiCeaW/C80g==}
+    engines: {node: '>=18'}
+
+  supports-preserve-symlinks-flag@1.0.0:
+    resolution: {integrity: sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==}
+    engines: {node: '>= 0.4'}
+
+  svgo@4.0.1:
+    resolution: {integrity: sha512-XDpWUOPC6FEibaLzjfe0ucaV0YrOjYotGJO1WpF0Zd+n6ZGEQUsSugaoLq9QkEZtAfQIxT42UChcssDVPP3+/w==}
+    engines: {node: '>=16'}
+    hasBin: true
+
+  tagged-tag@1.0.0:
+    resolution: {integrity: sha512-yEFYrVhod+hdNyx7g5Bnkkb0G6si8HJurOoOEgC8B/O0uXLHlaey/65KRv6cuWBNhBgHKAROVpc7QyYqE5gFng==}
+    engines: {node: '>=20'}
+
+  tailwind-merge@3.5.0:
+    resolution: {integrity: sha512-I8K9wewnVDkL1NTGoqWmVEIlUcB9gFriAEkXkfCjX5ib8ezGxtR3xD7iZIxrfArjEsH7F1CHD4RFUtxefdqV/A==}
+
+  tailwind-variants@3.2.2:
+    resolution: {integrity: sha512-Mi4kHeMTLvKlM98XPnK+7HoBPmf4gygdFmqQPaDivc3DpYS6aIY6KiG/PgThrGvii5YZJqRsPz0aPyhoFzmZgg==}
+    engines: {node: '>=16.x', pnpm: '>=7.x'}
+    peerDependencies:
+      tailwind-merge: '>=3.0.0'
+      tailwindcss: '*'
+    peerDependenciesMeta:
+      tailwind-merge:
+        optional: true
+
+  tailwindcss@4.2.2:
+    resolution: {integrity: sha512-KWBIxs1Xb6NoLdMVqhbhgwZf2PGBpPEiwOqgI4pFIYbNTfBXiKYyWoTsXgBQ9WFg/OlhnvHaY+AEpW7wSmFo2Q==}
+
+  tapable@2.3.2:
+    resolution: {integrity: sha512-1MOpMXuhGzGL5TTCZFItxCc0AARf1EZFQkGqMm7ERKj8+Hgr5oLvJOVFcC+lRmR8hCe2S3jC4T5D7Vg/d7/fhA==}
+    engines: {node: '>=6'}
+
+  tar-fs@2.1.4:
+    resolution: {integrity: sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==}
+
+  tar-stream@2.2.0:
+    resolution: {integrity: sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==}
+    engines: {node: '>=6'}
+
+  tar-stream@3.1.8:
+    resolution: {integrity: sha512-U6QpVRyCGHva435KoNWy9PRoi2IFYCgtEhq9nmrPPpbRacPs9IH4aJ3gbrFC8dPcXvdSZ4XXfXT5Fshbp2MtlQ==}
+
+  tar@6.2.1:
+    resolution: {integrity: sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==}
+    engines: {node: '>=10'}
+    deprecated: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
+
+  tar@7.5.13:
+    resolution: {integrity: sha512-tOG/7GyXpFevhXVh8jOPJrmtRpOTsYqUIkVdVooZYJS/z8WhfQUX8RJILmeuJNinGAMSu1veBr4asSHFt5/hng==}
+    engines: {node: '>=18'}
+
+  teex@1.0.1:
+    resolution: {integrity: sha512-eYE6iEI62Ni1H8oIa7KlDU6uQBtqr4Eajni3wX7rpfXD8ysFx8z0+dri+KWEPWpBsxXfxu58x/0jvTVT1ekOSg==}
+
+  terser@5.46.1:
+    resolution: {integrity: sha512-vzCjQO/rgUuK9sf8VJZvjqiqiHFaZLnOiimmUuOKODxWL8mm/xua7viT7aqX7dgPY60otQjUotzFMmCB4VdmqQ==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  text-decoder@1.2.7:
+    resolution: {integrity: sha512-vlLytXkeP4xvEq2otHeJfSQIRyWxo/oZGEbXrtEEF9Hnmrdly59sUbzZ/QgyWuLYHctCHxFF4tRQZNQ9k60ExQ==}
+
+  through2@4.0.2:
+    resolution: {integrity: sha512-iOqSav00cVxEEICeD7TjLB1sueEL+81Wpzp2bY17uZjZN0pWZPuo4suZ/61VujxmqSGFfgOcNuTZ85QJwNZQpw==}
+
+  tiny-inflate@1.0.3:
+    resolution: {integrity: sha512-pkY1fj1cKHb2seWDy0B16HeWyczlJA9/WW3u3c4z/NiWDsO3DOU5D7nhTLE9CF0yXv/QZFY7sEJmj24dK+Rrqw==}
+
+  tiny-invariant@1.3.3:
+    resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==}
+
+  tinybench@2.9.0:
+    resolution: {integrity: sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==}
+
+  tinyclip@0.1.12:
+    resolution: {integrity: sha512-Ae3OVUqifDw0wBriIBS7yVaW44Dp6eSHQcyq4Igc7eN2TJH/2YsicswaW+J/OuMvhpDPOKEgpAZCjkb4hpoyeA==}
+    engines: {node: ^16.14.0 || >= 17.3.0}
+
+  tinyexec@1.1.1:
+    resolution: {integrity: sha512-VKS/ZaQhhkKFMANmAOhhXVoIfBXblQxGX1myCQ2faQrfmobMftXeJPcZGp0gS07ocvGJWDLZGyOZDadDBqYIJg==}
+    engines: {node: '>=18'}
+
+  tinyglobby@0.2.15:
+    resolution: {integrity: sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==}
+    engines: {node: '>=12.0.0'}
+
+  tinyrainbow@3.1.0:
+    resolution: {integrity: sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==}
+    engines: {node: '>=14.0.0'}
+
+  to-regex-range@5.0.1:
+    resolution: {integrity: sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==}
+    engines: {node: '>=8.0'}
+
+  to-valid-identifier@1.0.0:
+    resolution: {integrity: sha512-41wJyvKep3yT2tyPqX/4blcfybknGB4D+oETKLs7Q76UiPqRpUJK3hr1nxelyYO0PHKVzJwlu0aCeEAsGI6rpw==}
+    engines: {node: '>=20'}
+
+  toidentifier@1.0.1:
+    resolution: {integrity: sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==}
+    engines: {node: '>=0.6'}
+
+  tosource@2.0.0-alpha.3:
+    resolution: {integrity: sha512-KAB2lrSS48y91MzFPFuDg4hLbvDiyTjOVgaK7Erw+5AmZXNq4sFRVn8r6yxSLuNs15PaokrDRpS61ERY9uZOug==}
+    engines: {node: '>=10'}
+
+  totalist@3.0.1:
+    resolution: {integrity: sha512-sf4i37nQ2LBx4m3wB74y+ubopq6W/dIzXg0FDGjsYnZHVa1Da8FH853wlL2gtUhg+xJXjfk3kUZS3BRoQeoQBQ==}
+    engines: {node: '>=6'}
+
+  tr46@0.0.3:
+    resolution: {integrity: sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==}
+
+  tree-kill@1.2.2:
+    resolution: {integrity: sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A==}
+    hasBin: true
+
+  ts-api-utils@2.5.0:
+    resolution: {integrity: sha512-OJ/ibxhPlqrMM0UiNHJ/0CKQkoKF243/AEmplt3qpRgkW8VG7IfOS41h7V8TjITqdByHzrjcS/2si+y4lIh8NA==}
+    engines: {node: '>=18.12'}
+    peerDependencies:
+      typescript: '>=4.8.4'
+
+  tslib@2.8.1:
+    resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
+
+  tunnel-agent@0.6.0:
+    resolution: {integrity: sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==}
+
+  type-check@0.4.0:
+    resolution: {integrity: sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==}
+    engines: {node: '>= 0.8.0'}
+
+  type-fest@5.5.0:
+    resolution: {integrity: sha512-PlBfpQwiUvGViBNX84Yxwjsdhd1TUlXr6zjX7eoirtCPIr08NAmxwa+fcYBTeRQxHo9YC9wwF3m9i700sHma8g==}
+    engines: {node: '>=20'}
+
+  type-level-regexp@0.1.17:
+    resolution: {integrity: sha512-wTk4DH3cxwk196uGLK/E9pE45aLfeKJacKmcEgEOA/q5dnPGNxXt0cfYdFxb57L+sEpf1oJH4Dnx/pnRcku9jg==}
+
+  typescript@6.0.3:
+    resolution: {integrity: sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==}
+    engines: {node: '>=14.17'}
+    hasBin: true
+
+  uc.micro@2.1.0:
+    resolution: {integrity: sha512-ARDJmphmdvUk6Glw7y9DQ2bFkKBHwQHLi2lsaH6PPmz/Ka9sFOBsBluozhDltWmnv9u/cF6Rt87znRTPV+yp/A==}
+
+  ufo@1.6.3:
+    resolution: {integrity: sha512-yDJTmhydvl5lJzBmy/hyOAA0d+aqCBuwl818haVdYCRrWV84o7YyeVm4QlVHStqNrrJSTb6jKuFAVqAFsr+K3Q==}
+
+  ultrahtml@1.6.0:
+    resolution: {integrity: sha512-R9fBn90VTJrqqLDwyMph+HGne8eqY1iPfYhPzZrvKpIfwkWZbcYlfpsb8B9dTvBfpy1/hqAD7Wi8EKfP9e8zdw==}
+
+  uncrypto@0.1.3:
+    resolution: {integrity: sha512-Ql87qFHB3s/De2ClA9e0gsnS6zXG27SkTiSJwjCc9MebbfapQfuPzumMIUMi38ezPZVNFcHI9sUIepeQfw8J8Q==}
+
+  unctx@2.5.0:
+    resolution: {integrity: sha512-p+Rz9x0R7X+CYDkT+Xg8/GhpcShTlU8n+cf9OtOEf7zEQsNcCZO1dPKNRDqvUTaq+P32PMMkxWHwfrxkqfqAYg==}
+
+  undici-types@7.19.2:
+    resolution: {integrity: sha512-qYVnV5OEm2AW8cJMCpdV20CDyaN3g0AjDlOGf1OW4iaDEx8MwdtChUp4zu4H0VP3nDRF/8RKWH+IPp9uW0YGZg==}
+
+  unenv@2.0.0-rc.24:
+    resolution: {integrity: sha512-i7qRCmY42zmCwnYlh9H2SvLEypEFGye5iRmEMKjcGi7zk9UquigRjFtTLz0TYqr0ZGLZhaMHl/foy1bZR+Cwlw==}
+
+  unhead@2.1.13:
+    resolution: {integrity: sha512-jO9M1sI6b2h/1KpIu4Jeu+ptumLmUKboRRLxys5pYHFeT+lqTzfNHbYUX9bxVDhC1FBszAGuWcUVlmvIPsah8Q==}
+
+  unicorn-magic@0.3.0:
+    resolution: {integrity: sha512-+QBBXBCvifc56fsbuxZQ6Sic3wqqc3WWaqxs58gvJrcOuN83HGTCwz3oS5phzU9LthRNE9VrJCFCLUgHeeFnfA==}
+    engines: {node: '>=18'}
+
+  unicorn-magic@0.4.0:
+    resolution: {integrity: sha512-wH590V9VNgYH9g3lH9wWjTrUoKsjLF6sGLjhR4sH1LWpLmCOH0Zf7PukhDA8BiS7KHe4oPNkcTHqYkj7SOGUOw==}
+    engines: {node: '>=20'}
+
+  unifont@0.7.4:
+    resolution: {integrity: sha512-oHeis4/xl42HUIeHuNZRGEvxj5AaIKR+bHPNegRq5LV1gdc3jundpONbjglKpihmJf+dswygdMJn3eftGIMemg==}
+
+  unimport@5.7.0:
+    resolution: {integrity: sha512-njnL6sp8lEA8QQbZrt+52p/g4X0rw3bnGGmUcJnt1jeG8+iiqO779aGz0PirCtydAIVcuTBRlJ52F0u46z309Q==}
+    engines: {node: '>=18.12.0'}
+
+  unimport@6.0.2:
+    resolution: {integrity: sha512-ZSOkrDw380w+KIPniY3smyXh2h7H9v2MNr9zejDuh239o5sdea44DRAYrv+rfUi2QGT186P2h0GPGKvy8avQ5g==}
+    engines: {node: '>=18.12.0'}
+
+  unique-filename@1.1.1:
+    resolution: {integrity: sha512-Vmp0jIp2ln35UTXuryvjzkjGdRyf9b2lTXuSYUiPmzRcl3FDtYqAwOnTJkAngD9SWhnoJzDbTKwaOrZ+STtxNQ==}
+
+  unique-slug@2.0.2:
+    resolution: {integrity: sha512-zoWr9ObaxALD3DOPfjPSqxt4fnZiWblxHIgeWqW8x7UqDzEtHEQLzji2cuJYQFCU6KmoJikOYAZlrTHHebjx2w==}
+
+  universalify@2.0.1:
+    resolution: {integrity: sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==}
+    engines: {node: '>= 10.0.0'}
+
+  unplugin-auto-import@21.0.0:
+    resolution: {integrity: sha512-vWuC8SwqJmxZFYwPojhOhOXDb5xFhNNcEVb9K/RFkyk/3VnfaOjzitWN7v+8DEKpMjSsY2AEGXNgt6I0yQrhRQ==}
+    engines: {node: '>=20.19.0'}
+    peerDependencies:
+      '@nuxt/kit': ^4.0.0
+      '@vueuse/core': '*'
+    peerDependenciesMeta:
+      '@nuxt/kit':
+        optional: true
+      '@vueuse/core':
+        optional: true
+
+  unplugin-utils@0.3.1:
+    resolution: {integrity: sha512-5lWVjgi6vuHhJ526bI4nlCOmkCIF3nnfXkCMDeMJrtdvxTs6ZFCM8oNufGTsDbKv/tJ/xj8RpvXjRuPBZJuJog==}
+    engines: {node: '>=20.19.0'}
+
+  unplugin-vue-components@32.0.0:
+    resolution: {integrity: sha512-uLdccgS7mf3pv1bCCP20y/hm+u1eOjAmygVkh+Oa70MPkzgl1eQv1L0CwdHNM3gscO8/GDMGIET98Ja47CBbZg==}
+    engines: {node: '>=20.19.0'}
+    peerDependencies:
+      '@nuxt/kit': ^3.2.2 || ^4.0.0
+      vue: ^3.0.0
+    peerDependenciesMeta:
+      '@nuxt/kit':
+        optional: true
+
+  unplugin@2.3.11:
+    resolution: {integrity: sha512-5uKD0nqiYVzlmCRs01Fhs2BdkEgBS3SAVP6ndrBsuK42iC2+JHyxM05Rm9G8+5mkmRtzMZGY8Ct5+mliZxU/Ww==}
+    engines: {node: '>=18.12.0'}
+
+  unplugin@3.0.0:
+    resolution: {integrity: sha512-0Mqk3AT2TZCXWKdcoaufeXNukv2mTrEZExeXlHIOZXdqYoHHr4n51pymnwV8x2BOVxwXbK2HLlI7usrqMpycdg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+
+  unrouting@0.1.7:
+    resolution: {integrity: sha512-+0hfD+CVWtD636rc5Fn9VEjjTEDhdqgMpbwAuVoUmydSHDaMNiFW93SJG4LV++RoGSEAyvQN5uABAscYpDphpQ==}
+
+  unrs-resolver@1.11.1:
+    resolution: {integrity: sha512-bSjt9pjaEBnNiGgc9rUiHGKv5l4/TGzDmYw3RhnkJGtLhbnnA/5qJj7x3dNDCRx/PJxu774LlH8lCOlB4hEfKg==}
+
+  unstorage@1.17.5:
+    resolution: {integrity: sha512-0i3iqvRfx29hkNntHyQvJTpf5W9dQ9ZadSoRU8+xVlhVtT7jAX57fazYO9EHvcRCfBCyi5YRya7XCDOsbTgkPg==}
+    peerDependencies:
+      '@azure/app-configuration': ^1.8.0
+      '@azure/cosmos': ^4.2.0
+      '@azure/data-tables': ^13.3.0
+      '@azure/identity': ^4.6.0
+      '@azure/keyvault-secrets': ^4.9.0
+      '@azure/storage-blob': ^12.26.0
+      '@capacitor/preferences': ^6 || ^7 || ^8
+      '@deno/kv': '>=0.9.0'
+      '@netlify/blobs': ^6.5.0 || ^7.0.0 || ^8.1.0 || ^9.0.0 || ^10.0.0
+      '@planetscale/database': ^1.19.0
+      '@upstash/redis': ^1.34.3
+      '@vercel/blob': '>=0.27.1'
+      '@vercel/functions': ^2.2.12 || ^3.0.0
+      '@vercel/kv': ^1 || ^2 || ^3
+      aws4fetch: ^1.0.20
+      db0: '>=0.2.1'
+      idb-keyval: ^6.2.1
+      ioredis: ^5.4.2
+      uploadthing: ^7.4.4
+    peerDependenciesMeta:
+      '@azure/app-configuration':
+        optional: true
+      '@azure/cosmos':
+        optional: true
+      '@azure/data-tables':
+        optional: true
+      '@azure/identity':
+        optional: true
+      '@azure/keyvault-secrets':
+        optional: true
+      '@azure/storage-blob':
+        optional: true
+      '@capacitor/preferences':
+        optional: true
+      '@deno/kv':
+        optional: true
+      '@netlify/blobs':
+        optional: true
+      '@planetscale/database':
+        optional: true
+      '@upstash/redis':
+        optional: true
+      '@vercel/blob':
+        optional: true
+      '@vercel/functions':
+        optional: true
+      '@vercel/kv':
+        optional: true
+      aws4fetch:
+        optional: true
+      db0:
+        optional: true
+      idb-keyval:
+        optional: true
+      ioredis:
+        optional: true
+      uploadthing:
+        optional: true
+
+  untildify@4.0.0:
+    resolution: {integrity: sha512-KK8xQ1mkzZeg9inewmFVDNkg3l5LUhoq9kN6iWYB/CC9YMG8HA+c1Q8HwDe6dEX7kErrEVNVBO3fWsVq5iDgtw==}
+    engines: {node: '>=8'}
+
+  untun@0.1.3:
+    resolution: {integrity: sha512-4luGP9LMYszMRZwsvyUd9MrxgEGZdZuZgpVQHEEX0lCYFESasVRvZd0EYpCkOIbJKHMuv0LskpXc/8Un+MJzEQ==}
+    hasBin: true
+
+  untyped@2.0.0:
+    resolution: {integrity: sha512-nwNCjxJTjNuLCgFr42fEak5OcLuB3ecca+9ksPFNvtfYSLpjf+iJqSIaSnIile6ZPbKYxI5k2AfXqeopGudK/g==}
+    hasBin: true
+
+  unwasm@0.5.3:
+    resolution: {integrity: sha512-keBgTSfp3r6+s9ZcSma+0chwxQdmLbB5+dAD9vjtB21UTMYuKAxHXCU1K2CbCtnP09EaWeRvACnXk0EJtUx+hw==}
+
+  update-browserslist-db@1.2.3:
+    resolution: {integrity: sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==}
+    hasBin: true
+    peerDependencies:
+      browserslist: '>= 4.21.0'
+
+  uqr@0.1.3:
+    resolution: {integrity: sha512-0rjE8iEJe4YmT9TOhwsZtqCMRLc5DXZUI2UEYUUg63ikBkqqE5EYWaI0etFe/5KUcmcYwLih2RND1kq+hrUJXA==}
+
+  uri-js@4.4.1:
+    resolution: {integrity: sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==}
+
+  util-deprecate@1.0.2:
+    resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
+
+  vaul-vue@0.4.1:
+    resolution: {integrity: sha512-A6jOWOZX5yvyo1qMn7IveoWN91mJI5L3BUKsIwkg6qrTGgHs1Sb1JF/vyLJgnbN1rH4OOOxFbtqL9A46bOyGUQ==}
+    peerDependencies:
+      reka-ui: ^2.0.0
+      vue: ^3.3.0
+
+  vite-dev-rpc@1.1.0:
+    resolution: {integrity: sha512-pKXZlgoXGoE8sEKiKJSng4hI1sQ4wi5YT24FCrwrLt6opmkjlqPPVmiPWWJn8M8byMxRGzp1CrFuqQs4M/Z39A==}
+    peerDependencies:
+      vite: ^2.9.0 || ^3.0.0-0 || ^4.0.0-0 || ^5.0.0-0 || ^6.0.1 || ^7.0.0-0
+
+  vite-hot-client@2.1.0:
+    resolution: {integrity: sha512-7SpgZmU7R+dDnSmvXE1mfDtnHLHQSisdySVR7lO8ceAXvM0otZeuQQ6C8LrS5d/aYyP/QZ0hI0L+dIPrm4YlFQ==}
+    peerDependencies:
+      vite: ^2.6.0 || ^3.0.0 || ^4.0.0 || ^5.0.0-0 || ^6.0.0-0 || ^7.0.0-0
+
+  vite-node@5.3.0:
+    resolution: {integrity: sha512-8f20COPYJujc3OKPX6OuyBy3ZIv2det4eRRU4GY1y2MjbeGSUmPjedxg1b72KnTagCofwvZ65ThzjxDW2AtQFQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+
+  vite-plugin-checker@0.12.0:
+    resolution: {integrity: sha512-CmdZdDOGss7kdQwv73UyVgLPv0FVYe5czAgnmRX2oKljgEvSrODGuClaV3PDR2+3ou7N/OKGauDDBjy2MB07Rg==}
+    engines: {node: '>=16.11'}
+    peerDependencies:
+      '@biomejs/biome': '>=1.7'
+      eslint: '>=9.39.1'
+      meow: ^13.2.0
+      optionator: ^0.9.4
+      oxlint: '>=1'
+      stylelint: '>=16'
+      typescript: '*'
+      vite: '>=5.4.21'
+      vls: '*'
+      vti: '*'
+      vue-tsc: ~2.2.10 || ^3.0.0
+    peerDependenciesMeta:
+      '@biomejs/biome':
+        optional: true
+      eslint:
+        optional: true
+      meow:
+        optional: true
+      optionator:
+        optional: true
+      oxlint:
+        optional: true
+      stylelint:
+        optional: true
+      typescript:
+        optional: true
+      vls:
+        optional: true
+      vti:
+        optional: true
+      vue-tsc:
+        optional: true
+
+  vite-plugin-inspect@11.3.3:
+    resolution: {integrity: sha512-u2eV5La99oHoYPHE6UvbwgEqKKOQGz86wMg40CCosP6q8BkB6e5xPneZfYagK4ojPJSj5anHCrnvC20DpwVdRA==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      '@nuxt/kit': '*'
+      vite: ^6.0.0 || ^7.0.0-0
+    peerDependenciesMeta:
+      '@nuxt/kit':
+        optional: true
+
+  vite-plugin-vue-tracer@1.3.0:
+    resolution: {integrity: sha512-Cgfce6VikzOw5MUJTpeg50s5rRjzU1Vr61ZjuHunVVHLjZZ5AUlgyExHthZ3r59vtoz9W2rDt23FYG81avYBKw==}
+    peerDependencies:
+      vite: ^6.0.0 || ^7.0.0
+      vue: ^3.5.0
+
+  vite@7.3.2:
+    resolution: {integrity: sha512-Bby3NOsna2jsjfLVOHKes8sGwgl4TT0E6vvpYgnAYDIF/tie7MRaFthmKuHx1NSXjiTueXH3do80FMQgvEktRg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+    peerDependencies:
+      '@types/node': ^20.19.0 || >=22.12.0
+      jiti: '>=1.21.0'
+      less: ^4.0.0
+      lightningcss: ^1.21.0
+      sass: ^1.70.0
+      sass-embedded: ^1.70.0
+      stylus: '>=0.54.8'
+      sugarss: ^5.0.0
+      terser: ^5.16.0
+      tsx: ^4.8.1
+      yaml: ^2.4.2
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+      jiti:
+        optional: true
+      less:
+        optional: true
+      lightningcss:
+        optional: true
+      sass:
+        optional: true
+      sass-embedded:
+        optional: true
+      stylus:
+        optional: true
+      sugarss:
+        optional: true
+      terser:
+        optional: true
+      tsx:
+        optional: true
+      yaml:
+        optional: true
+
+  vitest-environment-nuxt@2.0.0:
+    resolution: {integrity: sha512-zEGFRiCAaRR3fHnqISHKMNTRvCzkQEI1XyFeqNgR2IBD0oYkfZ1rUHwi7C+h3Cns3KPykfB0av1B3MtLEbChDw==}
+
+  vitest@4.1.4:
+    resolution: {integrity: sha512-tFuJqTxKb8AvfyqMfnavXdzfy3h3sWZRWwfluGbkeR7n0HUev+FmNgZ8SDrRBTVrVCjgH5cA21qGbCffMNtWvg==}
+    engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0}
+    hasBin: true
+    peerDependencies:
+      '@edge-runtime/vm': '*'
+      '@opentelemetry/api': ^1.9.0
+      '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0
+      '@vitest/browser-playwright': 4.1.4
+      '@vitest/browser-preview': 4.1.4
+      '@vitest/browser-webdriverio': 4.1.4
+      '@vitest/coverage-istanbul': 4.1.4
+      '@vitest/coverage-v8': 4.1.4
+      '@vitest/ui': 4.1.4
+      happy-dom: '*'
+      jsdom: '*'
+      vite: ^6.0.0 || ^7.0.0 || ^8.0.0
+    peerDependenciesMeta:
+      '@edge-runtime/vm':
+        optional: true
+      '@opentelemetry/api':
+        optional: true
+      '@types/node':
+        optional: true
+      '@vitest/browser-playwright':
+        optional: true
+      '@vitest/browser-preview':
+        optional: true
+      '@vitest/browser-webdriverio':
+        optional: true
+      '@vitest/coverage-istanbul':
+        optional: true
+      '@vitest/coverage-v8':
+        optional: true
+      '@vitest/ui':
+        optional: true
+      happy-dom:
+        optional: true
+      jsdom:
+        optional: true
+
+  vscode-uri@3.1.0:
+    resolution: {integrity: sha512-/BpdSx+yCQGnCvecbyXdxHDkuk55/G3xwnC0GqY4gmQ3j+A+g8kzzgB4Nk/SINjqn6+waqw3EgbVF2QKExkRxQ==}
+
+  vue-bundle-renderer@2.2.0:
+    resolution: {integrity: sha512-sz/0WEdYH1KfaOm0XaBmRZOWgYTEvUDt6yPYaUzl4E52qzgWLlknaPPTTZmp6benaPTlQAI/hN1x3tAzZygycg==}
+
+  vue-component-type-helpers@2.2.12:
+    resolution: {integrity: sha512-YbGqHZ5/eW4SnkPNR44mKVc6ZKQoRs/Rux1sxC6rdwXb4qpbOSYfDr9DsTHolOTGmIKgM9j141mZbBeg05R1pw==}
+
+  vue-component-type-helpers@3.2.6:
+    resolution: {integrity: sha512-O02tnvIfOQVmnvoWwuSydwRoHjZVt8UEBR+2p4rT35p8GAy5VTlWP8o5qXfJR/GWCN0nVZoYWsVUvx2jwgdBmQ==}
+
+  vue-demi@0.14.10:
+    resolution: {integrity: sha512-nMZBOwuzabUO0nLgIcc6rycZEebF6eeUfaiQx9+WSk8e29IbLvPU9feI6tqW4kTo3hvoYAJkMh8n8D0fuISphg==}
+    engines: {node: '>=12'}
+    hasBin: true
+    peerDependencies:
+      '@vue/composition-api': ^1.0.0-rc.1
+      vue: ^3.0.0-0 || ^2.6.0
+    peerDependenciesMeta:
+      '@vue/composition-api':
+        optional: true
+
+  vue-devtools-stub@0.1.0:
+    resolution: {integrity: sha512-RutnB7X8c5hjq39NceArgXg28WZtZpGc3+J16ljMiYnFhKvd8hITxSWQSQ5bvldxMDU6gG5mkxl1MTQLXckVSQ==}
+
+  vue-eslint-parser@10.4.0:
+    resolution: {integrity: sha512-Vxi9pJdbN3ZnVGLODVtZ7y4Y2kzAAE2Cm0CZ3ZDRvydVYxZ6VrnBhLikBsRS+dpwj4Jv4UCv21PTEwF5rQ9WXg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+
+  vue-i18n@11.3.1:
+    resolution: {integrity: sha512-azq8fhVnCwJAw0iXW7i44h9P+Bj+snNuevBAaJ9bxn0I3YVsRU3deVFPNnTfZ2uxVJefGp83JUmL68ddCPw5Pw==}
+    engines: {node: '>= 16'}
+    peerDependencies:
+      vue: ^3.0.0
+
+  vue-router@5.0.4:
+    resolution: {integrity: sha512-lCqDLCI2+fKVRl2OzXuzdSWmxXFLQRxQbmHugnRpTMyYiT+hNaycV0faqG5FBHDXoYrZ6MQcX87BvbY8mQ20Bg==}
+    peerDependencies:
+      '@pinia/colada': '>=0.21.2'
+      '@vue/compiler-sfc': ^3.5.17
+      pinia: ^3.0.4
+      vue: ^3.5.0
+    peerDependenciesMeta:
+      '@pinia/colada':
+        optional: true
+      '@vue/compiler-sfc':
+        optional: true
+      pinia:
+        optional: true
+
+  vue-tsc@3.2.6:
+    resolution: {integrity: sha512-gYW/kWI0XrwGzd0PKc7tVB/qpdeAkIZLNZb10/InizkQjHjnT8weZ/vBarZoj4kHKbUTZT/bAVgoOr8x4NsQ/Q==}
+    hasBin: true
+    peerDependencies:
+      typescript: '>=5.0.0'
+
+  vue@3.5.32:
+    resolution: {integrity: sha512-vM4z4Q9tTafVfMAK7IVzmxg34rSzTFMyIe0UUEijUCkn9+23lj0WRfA83dg7eQZIUlgOSGrkViIaCfqSAUXsMw==}
+    peerDependencies:
+      typescript: '*'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
+  w3c-keyname@2.2.8:
+    resolution: {integrity: sha512-dpojBhNsCNN7T82Tm7k26A6G9ML3NkhDsnw9n/eoxSRlVBB4CEtIQ/KTCLI2Fwf3ataSXRhYFkQi3SlnFwPvPQ==}
+
+  webidl-conversions@3.0.1:
+    resolution: {integrity: sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==}
+
+  webpack-virtual-modules@0.6.2:
+    resolution: {integrity: sha512-66/V2i5hQanC51vBQKPH4aI8NMAcBW59FVBs+rC7eGHupMyfn34q7rZIE+ETlJ+XTevqfUhVVBgSUNSW2flEUQ==}
+
+  whatwg-mimetype@3.0.0:
+    resolution: {integrity: sha512-nt+N2dzIutVRxARx1nghPKGv1xHikU7HKdfafKkLNLindmPU/ch3U31NOCGGA/dmPcmb1VlofO0vnKAcsm0o/Q==}
+    engines: {node: '>=12'}
+
+  whatwg-url@5.0.0:
+    resolution: {integrity: sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==}
+
+  wheel-gestures@2.2.48:
+    resolution: {integrity: sha512-f+Gy33Oa5Z14XY9679Zze+7VFhbsQfBFXodnU2x589l4kxGM9L5Y8zETTmcMR5pWOPQyRv4Z0lNax6xCO0NSlA==}
+    engines: {node: '>=18'}
+
+  which@2.0.2:
+    resolution: {integrity: sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==}
+    engines: {node: '>= 8'}
+    hasBin: true
+
+  which@6.0.1:
+    resolution: {integrity: sha512-oGLe46MIrCRqX7ytPUf66EAYvdeMIZYn3WaocqqKZAxrBpkqHfL/qvTyJ/bTk5+AqHCjXmrv3CEWgy368zhRUg==}
+    engines: {node: ^20.17.0 || >=22.9.0}
+    hasBin: true
+
+  why-is-node-running@2.3.0:
+    resolution: {integrity: sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==}
+    engines: {node: '>=8'}
+    hasBin: true
+
+  wide-align@1.1.5:
+    resolution: {integrity: sha512-eDMORYaPNZ4sQIuuYPDHdQvf4gyCF9rEEV/yPxGfwPkRodwEgiMUUXTx/dex+Me0wxx53S+NgUHaP7y3MGlDmg==}
+
+  word-wrap@1.2.5:
+    resolution: {integrity: sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==}
+    engines: {node: '>=0.10.0'}
+
+  wrap-ansi@7.0.0:
+    resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==}
+    engines: {node: '>=10'}
+
+  wrap-ansi@8.1.0:
+    resolution: {integrity: sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==}
+    engines: {node: '>=12'}
+
+  wrap-ansi@9.0.2:
+    resolution: {integrity: sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww==}
+    engines: {node: '>=18'}
+
+  wrappy@1.0.2:
+    resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
+
+  ws@8.20.0:
+    resolution: {integrity: sha512-sAt8BhgNbzCtgGbt2OxmpuryO63ZoDk/sqaB/znQm94T4fCEsy/yV+7CdC1kJhOU9lboAEU7R3kquuycDoibVA==}
+    engines: {node: '>=10.0.0'}
+    peerDependencies:
+      bufferutil: ^4.0.1
+      utf-8-validate: '>=5.0.2'
+    peerDependenciesMeta:
+      bufferutil:
+        optional: true
+      utf-8-validate:
+        optional: true
+
+  wsl-utils@0.1.0:
+    resolution: {integrity: sha512-h3Fbisa2nKGPxCpm89Hk33lBLsnaGBvctQopaBSOW/uIs6FTe1ATyAnKFJrzVs9vpGdsTe73WF3V4lIsk4Gacw==}
+    engines: {node: '>=18'}
+
+  wsl-utils@0.3.1:
+    resolution: {integrity: sha512-g/eziiSUNBSsdDJtCLB8bdYEUMj4jR7AGeUo96p/3dTafgjHhpF4RiCFPiRILwjQoDXx5MqkBr4fwWtR3Ky4Wg==}
+    engines: {node: '>=20'}
+
+  xml-name-validator@4.0.0:
+    resolution: {integrity: sha512-ICP2e+jsHvAj2E2lIHxa5tjXRlKDJo4IdvPvCXbXQGdzSfmSpNVyIKMvoZHjDY9DP0zV17iI85o90vRFXNccRw==}
+    engines: {node: '>=12'}
+
+  xml2js@0.6.2:
+    resolution: {integrity: sha512-T4rieHaC1EXcES0Kxxj4JWgaUQHDk+qwHcYOCFHfiwKz7tOVPLq7Hjq9dM1WCMhylqMEfP7hMcOIChvotiZegA==}
+    engines: {node: '>=4.0.0'}
+
+  xmlbuilder@11.0.1:
+    resolution: {integrity: sha512-fDlsI/kFEx7gLvbecc0/ohLG50fugQp8ryHzMTuW9vSa1GJ0XYWKnhsUx7oie3G98+r56aTQIUB4kht42R3JvA==}
+    engines: {node: '>=4.0'}
+
+  xmlbuilder@15.1.1:
+    resolution: {integrity: sha512-yMqGBqtXyeN1e3TGYvgNgDVZ3j84W4cwkOXQswghol6APgZWaff9lnbvN7MHYJOiXsvGPXtjTYJEiC9J2wv9Eg==}
+    engines: {node: '>=8.0'}
+
+  xss@1.0.15:
+    resolution: {integrity: sha512-FVdlVVC67WOIPvfOwhoMETV72f6GbW7aOabBC3WxN/oUdoEMDyLz4OgRv5/gck2ZeNqEQu+Tb0kloovXOfpYVg==}
+    engines: {node: '>= 0.10.0'}
+    hasBin: true
+
+  y-protocols@1.0.7:
+    resolution: {integrity: sha512-YSVsLoXxO67J6eE/nV4AtFtT3QEotZf5sK5BHxFBXso7VDUT3Tx07IfA6hsu5Q5OmBdMkQVmFZ9QOA7fikWvnw==}
+    engines: {node: '>=16.0.0', npm: '>=8.0.0'}
+    peerDependencies:
+      yjs: ^13.0.0
+
+  y18n@5.0.8:
+    resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==}
+    engines: {node: '>=10'}
+
+  yallist@3.1.1:
+    resolution: {integrity: sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==}
+
+  yallist@4.0.0:
+    resolution: {integrity: sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==}
+
+  yallist@5.0.0:
+    resolution: {integrity: sha512-YgvUTfwqyc7UXVMrB+SImsVYSmTS8X/tSrtdNZMImM+n7+QTriRXyXim0mBrTXNeqzVF0KWGgHPeiyViFFrNDw==}
+    engines: {node: '>=18'}
+
+  yaml-eslint-parser@1.3.2:
+    resolution: {integrity: sha512-odxVsHAkZYYglR30aPYRY4nUGJnoJ2y1ww2HDvZALo0BDETv9kWbi16J52eHs+PWRNmF4ub6nZqfVOeesOvntg==}
+    engines: {node: ^14.17.0 || >=16.0.0}
+
+  yaml@2.8.3:
+    resolution: {integrity: sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==}
+    engines: {node: '>= 14.6'}
+    hasBin: true
+
+  yargs-parser@22.0.0:
+    resolution: {integrity: sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=23}
+
+  yargs@18.0.0:
+    resolution: {integrity: sha512-4UEqdc2RYGHZc7Doyqkrqiln3p9X2DZVxaGbwhn2pi7MrRagKaOcIKe8L3OxYcbhXLgLFUS3zAYuQjKBQgmuNg==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=23}
+
+  yauzl@2.10.0:
+    resolution: {integrity: sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==}
+
+  yjs@13.6.30:
+    resolution: {integrity: sha512-vv/9h42eCMC81ZHDFswuu/MKzkl/vyq1BhaNGfHyOonwlG4CJbQF4oiBBJPvfdeCt/PlVDWh7Nov9D34YY09uQ==}
+    engines: {node: '>=16.0.0', npm: '>=8.0.0'}
+
+  yocto-queue@0.1.0:
+    resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==}
+    engines: {node: '>=10'}
+
+  yocto-queue@1.2.2:
+    resolution: {integrity: sha512-4LCcse/U2MHZ63HAJVE+v71o7yOdIe4cZ70Wpf8D/IyjDKYQLV5GD46B+hSTjJsvV5PztjvHoU580EftxjDZFQ==}
+    engines: {node: '>=12.20'}
+
+  youch-core@0.3.3:
+    resolution: {integrity: sha512-ho7XuGjLaJ2hWHoK8yFnsUGy2Y5uDpqSTq1FkHLK4/oqKtyUU1AFbOOxY4IpC9f0fTLjwYbslUz0Po5BpD1wrA==}
+
+  youch@4.1.1:
+    resolution: {integrity: sha512-mxW3qiSnl+GRxXsaUMzv2Mbada1Y8CDltET9UxejDQe6DBYlSekghl5U5K0ReAikcHDi0G1vKZEmmo/NWAGKLA==}
+
+  zip-stream@6.0.1:
+    resolution: {integrity: sha512-zK7YHHz4ZXpW89AHXUPbQVGKI7uvkd3hzusTdotCg1UxyaVtg0zFJSTfW/Dq5f7OBBVnq6cZIaC8Ti4hb6dtCA==}
+    engines: {node: '>= 14'}
+
+  zod@4.3.6:
+    resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==}
+
+snapshots:
+
+  '@alloc/quick-lru@5.2.0': {}
+
+  '@antfu/install-pkg@1.1.0':
+    dependencies:
+      package-manager-detector: 1.6.0
+      tinyexec: 1.1.1
+
+  '@apidevtools/json-schema-ref-parser@14.2.1(@types/json-schema@7.0.15)':
+    dependencies:
+      '@types/json-schema': 7.0.15
+      js-yaml: 4.1.1
+
+  '@babel/code-frame@7.29.0':
+    dependencies:
+      '@babel/helper-validator-identifier': 7.28.5
+      js-tokens: 4.0.0
+      picocolors: 1.1.1
+
+  '@babel/compat-data@7.29.0': {}
+
+  '@babel/core@7.29.0':
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      '@babel/generator': 7.29.1
+      '@babel/helper-compilation-targets': 7.28.6
+      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.0)
+      '@babel/helpers': 7.29.2
+      '@babel/parser': 7.29.2
+      '@babel/template': 7.28.6
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
+      '@jridgewell/remapping': 2.3.5
+      convert-source-map: 2.0.0
+      debug: 4.4.3
+      gensync: 1.0.0-beta.2
+      json5: 2.2.3
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/generator@7.29.1':
+    dependencies:
+      '@babel/parser': 7.29.2
+      '@babel/types': 7.29.0
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
+      jsesc: 3.1.0
+
+  '@babel/helper-annotate-as-pure@7.27.3':
+    dependencies:
+      '@babel/types': 7.29.0
+
+  '@babel/helper-compilation-targets@7.28.6':
+    dependencies:
+      '@babel/compat-data': 7.29.0
+      '@babel/helper-validator-option': 7.27.1
+      browserslist: 4.28.2
+      lru-cache: 5.1.1
+      semver: 6.3.1
+
+  '@babel/helper-create-class-features-plugin@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-member-expression-to-functions': 7.28.5
+      '@babel/helper-optimise-call-expression': 7.27.1
+      '@babel/helper-replace-supers': 7.28.6(@babel/core@7.29.0)
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+      '@babel/traverse': 7.29.0
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-globals@7.28.0': {}
+
+  '@babel/helper-member-expression-to-functions@7.28.5':
+    dependencies:
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-module-imports@7.28.6':
+    dependencies:
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-module-transforms@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-module-imports': 7.28.6
+      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/traverse': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-optimise-call-expression@7.27.1':
+    dependencies:
+      '@babel/types': 7.29.0
+
+  '@babel/helper-plugin-utils@7.28.6': {}
+
+  '@babel/helper-replace-supers@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-member-expression-to-functions': 7.28.5
+      '@babel/helper-optimise-call-expression': 7.27.1
+      '@babel/traverse': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-skip-transparent-expression-wrappers@7.27.1':
+    dependencies:
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-string-parser@7.27.1': {}
+
+  '@babel/helper-validator-identifier@7.28.5': {}
+
+  '@babel/helper-validator-option@7.27.1': {}
+
+  '@babel/helpers@7.29.2':
+    dependencies:
+      '@babel/template': 7.28.6
+      '@babel/types': 7.29.0
+
+  '@babel/parser@7.29.2':
+    dependencies:
+      '@babel/types': 7.29.0
+
+  '@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.28.6
+
+  '@babel/plugin-syntax-typescript@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.28.6
+
+  '@babel/plugin-transform-typescript@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-create-class-features-plugin': 7.28.6(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.0)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/template@7.28.6':
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      '@babel/parser': 7.29.2
+      '@babel/types': 7.29.0
+
+  '@babel/traverse@7.29.0':
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      '@babel/generator': 7.29.1
+      '@babel/helper-globals': 7.28.0
+      '@babel/parser': 7.29.2
+      '@babel/template': 7.28.6
+      '@babel/types': 7.29.0
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/types@7.29.0':
+    dependencies:
+      '@babel/helper-string-parser': 7.27.1
+      '@babel/helper-validator-identifier': 7.28.5
+
+  '@bomb.sh/tab@0.0.14(cac@6.7.14)(citty@0.2.2)':
+    optionalDependencies:
+      cac: 6.7.14
+      citty: 0.2.2
+
+  '@capacitor/android@8.3.1(@capacitor/core@8.3.1)':
+    dependencies:
+      '@capacitor/core': 8.3.1
+
+  '@capacitor/app@8.1.0(@capacitor/core@8.3.1)':
+    dependencies:
+      '@capacitor/core': 8.3.1
+
+  '@capacitor/cli@8.3.1':
+    dependencies:
+      '@ionic/cli-framework-output': 2.2.8
+      '@ionic/utils-subprocess': 3.0.1
+      '@ionic/utils-terminal': 2.3.5
+      commander: 12.1.0
+      debug: 4.4.3
+      env-paths: 2.2.1
+      fs-extra: 11.3.4
+      kleur: 4.1.5
+      native-run: 2.0.3
+      open: 8.4.2
+      plist: 3.1.0
+      prompts: 2.4.2
+      rimraf: 6.1.3
+      semver: 7.7.4
+      tar: 7.5.13
+      tslib: 2.8.1
+      xml2js: 0.6.2
+    transitivePeerDependencies:
+      - supports-color
+
+  '@capacitor/core@8.3.1':
+    dependencies:
+      tslib: 2.8.1
+
+  '@capacitor/ios@8.3.1(@capacitor/core@8.3.1)':
+    dependencies:
+      '@capacitor/core': 8.3.1
+
+  '@capacitor/push-notifications@8.0.3(@capacitor/core@8.3.1)':
+    dependencies:
+      '@capacitor/core': 8.3.1
+
+  '@capsizecss/unpack@4.0.0':
+    dependencies:
+      fontkitten: 1.0.3
+
+  '@clack/core@1.2.0':
+    dependencies:
+      fast-wrap-ansi: 0.1.6
+      sisteransi: 1.0.5
+
+  '@clack/prompts@1.2.0':
+    dependencies:
+      '@clack/core': 1.2.0
+      fast-string-width: 1.1.0
+      fast-wrap-ansi: 0.1.6
+      sisteransi: 1.0.5
+
+  '@cloudflare/kv-asset-handler@0.4.2': {}
+
+  '@colordx/core@5.0.3': {}
+
+  '@deno/darwin-arm64@2.7.12':
+    optional: true
+
+  '@deno/darwin-x64@2.7.12':
+    optional: true
+
+  '@deno/linux-arm64-glibc@2.7.12':
+    optional: true
+
+  '@deno/linux-x64-glibc@2.7.12':
+    optional: true
+
+  '@deno/win32-arm64@2.7.12':
+    optional: true
+
+  '@deno/win32-x64@2.7.12':
+    optional: true
+
+  '@dxup/nuxt@0.4.0(magicast@0.5.2)(typescript@6.0.3)':
+    dependencies:
+      '@dxup/unimport': 0.1.2
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      chokidar: 5.0.0
+      pathe: 2.0.3
+      tinyglobby: 0.2.15
+      typescript: 6.0.3
+    transitivePeerDependencies:
+      - magicast
+
+  '@dxup/unimport@0.1.2': {}
+
+  '@emnapi/core@1.9.2':
+    dependencies:
+      '@emnapi/wasi-threads': 1.2.1
+      tslib: 2.8.1
+    optional: true
+
+  '@emnapi/runtime@1.9.2':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
+  '@emnapi/wasi-threads@1.2.1':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
+  '@es-joy/jsdoccomment@0.86.0':
+    dependencies:
+      '@types/estree': 1.0.8
+      '@typescript-eslint/types': 8.58.0
+      comment-parser: 1.4.6
+      esquery: 1.7.0
+      jsdoc-type-pratt-parser: 7.2.0
+
+  '@es-joy/resolve.exports@1.2.0': {}
+
+  '@esbuild/aix-ppc64@0.25.12':
+    optional: true
+
+  '@esbuild/aix-ppc64@0.27.7':
+    optional: true
+
+  '@esbuild/android-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/android-arm64@0.27.7':
+    optional: true
+
+  '@esbuild/android-arm@0.25.12':
+    optional: true
+
+  '@esbuild/android-arm@0.27.7':
+    optional: true
+
+  '@esbuild/android-x64@0.25.12':
+    optional: true
+
+  '@esbuild/android-x64@0.27.7':
+    optional: true
+
+  '@esbuild/darwin-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/darwin-arm64@0.27.7':
+    optional: true
+
+  '@esbuild/darwin-x64@0.25.12':
+    optional: true
+
+  '@esbuild/darwin-x64@0.27.7':
+    optional: true
+
+  '@esbuild/freebsd-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/freebsd-arm64@0.27.7':
+    optional: true
+
+  '@esbuild/freebsd-x64@0.25.12':
+    optional: true
+
+  '@esbuild/freebsd-x64@0.27.7':
+    optional: true
+
+  '@esbuild/linux-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-arm64@0.27.7':
+    optional: true
+
+  '@esbuild/linux-arm@0.25.12':
+    optional: true
+
+  '@esbuild/linux-arm@0.27.7':
+    optional: true
+
+  '@esbuild/linux-ia32@0.25.12':
+    optional: true
+
+  '@esbuild/linux-ia32@0.27.7':
+    optional: true
+
+  '@esbuild/linux-loong64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-loong64@0.27.7':
+    optional: true
+
+  '@esbuild/linux-mips64el@0.25.12':
+    optional: true
+
+  '@esbuild/linux-mips64el@0.27.7':
+    optional: true
+
+  '@esbuild/linux-ppc64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-ppc64@0.27.7':
+    optional: true
+
+  '@esbuild/linux-riscv64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-riscv64@0.27.7':
+    optional: true
+
+  '@esbuild/linux-s390x@0.25.12':
+    optional: true
+
+  '@esbuild/linux-s390x@0.27.7':
+    optional: true
+
+  '@esbuild/linux-x64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-x64@0.27.7':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.27.7':
+    optional: true
+
+  '@esbuild/netbsd-x64@0.25.12':
+    optional: true
+
+  '@esbuild/netbsd-x64@0.27.7':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.27.7':
+    optional: true
+
+  '@esbuild/openbsd-x64@0.25.12':
+    optional: true
+
+  '@esbuild/openbsd-x64@0.27.7':
+    optional: true
+
+  '@esbuild/openharmony-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/openharmony-arm64@0.27.7':
+    optional: true
+
+  '@esbuild/sunos-x64@0.25.12':
+    optional: true
+
+  '@esbuild/sunos-x64@0.27.7':
+    optional: true
+
+  '@esbuild/win32-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/win32-arm64@0.27.7':
+    optional: true
+
+  '@esbuild/win32-ia32@0.25.12':
+    optional: true
+
+  '@esbuild/win32-ia32@0.27.7':
+    optional: true
+
+  '@esbuild/win32-x64@0.25.12':
+    optional: true
+
+  '@esbuild/win32-x64@0.27.7':
+    optional: true
+
+  '@eslint-community/eslint-utils@4.9.1(eslint@10.2.0(jiti@2.6.1))':
+    dependencies:
+      eslint: 10.2.0(jiti@2.6.1)
+      eslint-visitor-keys: 3.4.3
+
+  '@eslint-community/regexpp@4.12.2': {}
+
+  '@eslint/compat@2.0.4(eslint@10.2.0(jiti@2.6.1))':
+    dependencies:
+      '@eslint/core': 1.2.0
+    optionalDependencies:
+      eslint: 10.2.0(jiti@2.6.1)
+
+  '@eslint/config-array@0.23.4':
+    dependencies:
+      '@eslint/object-schema': 3.0.4
+      debug: 4.4.3
+      minimatch: 10.2.5
+    transitivePeerDependencies:
+      - supports-color
+
+  '@eslint/config-helpers@0.5.4':
+    dependencies:
+      '@eslint/core': 1.2.0
+
+  '@eslint/config-inspector@1.5.0(eslint@10.2.0(jiti@2.6.1))':
+    dependencies:
+      ansis: 4.2.0
+      bundle-require: 5.1.0(esbuild@0.27.7)
+      cac: 7.0.0
+      chokidar: 5.0.0
+      esbuild: 0.27.7
+      eslint: 10.2.0(jiti@2.6.1)
+      h3: 1.15.11
+      tinyglobby: 0.2.15
+      ws: 8.20.0
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
+  '@eslint/core@1.2.0':
+    dependencies:
+      '@types/json-schema': 7.0.15
+
+  '@eslint/js@9.39.4': {}
+
+  '@eslint/object-schema@3.0.4': {}
+
+  '@eslint/plugin-kit@0.7.0':
+    dependencies:
+      '@eslint/core': 1.2.0
+      levn: 0.4.1
+
+  '@fastify/accept-negotiator@2.0.1':
+    optional: true
+
+  '@floating-ui/core@1.7.5':
+    dependencies:
+      '@floating-ui/utils': 0.2.11
+
+  '@floating-ui/dom@1.7.6':
+    dependencies:
+      '@floating-ui/core': 1.7.5
+      '@floating-ui/utils': 0.2.11
+
+  '@floating-ui/utils@0.2.11': {}
+
+  '@floating-ui/vue@1.1.11(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@floating-ui/dom': 1.7.6
+      '@floating-ui/utils': 0.2.11
+      vue-demi: 0.14.10(vue@3.5.32(typescript@6.0.3))
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - vue
+
+  '@gar/promisify@1.1.3':
+    optional: true
+
+  '@humanfs/core@0.19.1': {}
+
+  '@humanfs/node@0.16.7':
+    dependencies:
+      '@humanfs/core': 0.19.1
+      '@humanwhocodes/retry': 0.4.3
+
+  '@humanwhocodes/module-importer@1.0.1': {}
+
+  '@humanwhocodes/retry@0.4.3': {}
+
+  '@iconify-json/lucide@1.2.102':
+    dependencies:
+      '@iconify/types': 2.0.0
+
+  '@iconify-json/simple-icons@1.2.78':
+    dependencies:
+      '@iconify/types': 2.0.0
+
+  '@iconify/collections@1.0.669':
+    dependencies:
+      '@iconify/types': 2.0.0
+
+  '@iconify/types@2.0.0': {}
+
+  '@iconify/utils@3.1.0':
+    dependencies:
+      '@antfu/install-pkg': 1.1.0
+      '@iconify/types': 2.0.0
+      mlly: 1.8.2
+
+  '@iconify/vue@5.0.0(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@iconify/types': 2.0.0
+      vue: 3.5.32(typescript@6.0.3)
+
+  '@img/colour@1.1.0':
+    optional: true
+
+  '@img/sharp-darwin-arm64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-arm64': 1.2.4
+    optional: true
+
+  '@img/sharp-darwin-x64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-x64': 1.2.4
+    optional: true
+
+  '@img/sharp-libvips-darwin-arm64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-darwin-x64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-ppc64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-riscv64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-s390x@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-x64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
+    optional: true
+
+  '@img/sharp-linux-arm64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm64': 1.2.4
+    optional: true
+
+  '@img/sharp-linux-arm@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm': 1.2.4
+    optional: true
+
+  '@img/sharp-linux-ppc64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-ppc64': 1.2.4
+    optional: true
+
+  '@img/sharp-linux-riscv64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-riscv64': 1.2.4
+    optional: true
+
+  '@img/sharp-linux-s390x@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-s390x': 1.2.4
+    optional: true
+
+  '@img/sharp-linux-x64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-x64': 1.2.4
+    optional: true
+
+  '@img/sharp-linuxmusl-arm64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
+    optional: true
+
+  '@img/sharp-linuxmusl-x64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
+    optional: true
+
+  '@img/sharp-wasm32@0.34.5':
+    dependencies:
+      '@emnapi/runtime': 1.9.2
+    optional: true
+
+  '@img/sharp-win32-arm64@0.34.5':
+    optional: true
+
+  '@img/sharp-win32-ia32@0.34.5':
+    optional: true
+
+  '@img/sharp-win32-x64@0.34.5':
+    optional: true
+
+  '@internationalized/date@3.12.0':
+    dependencies:
+      '@swc/helpers': 0.5.21
+
+  '@internationalized/number@3.6.5':
+    dependencies:
+      '@swc/helpers': 0.5.21
+
+  '@intlify/bundle-utils@11.0.7(vue-i18n@11.3.1(vue@3.5.32(typescript@6.0.3)))':
+    dependencies:
+      '@intlify/message-compiler': 11.3.1
+      '@intlify/shared': 11.3.1
+      acorn: 8.16.0
+      esbuild: 0.25.12
+      escodegen: 2.1.0
+      estree-walker: 2.0.2
+      jsonc-eslint-parser: 2.4.2
+      source-map-js: 1.2.1
+      yaml-eslint-parser: 1.3.2
+    optionalDependencies:
+      vue-i18n: 11.3.1(vue@3.5.32(typescript@6.0.3))
+
+  '@intlify/core-base@11.3.1':
+    dependencies:
+      '@intlify/devtools-types': 11.3.1
+      '@intlify/message-compiler': 11.3.1
+      '@intlify/shared': 11.3.1
+
+  '@intlify/core@11.3.1':
+    dependencies:
+      '@intlify/core-base': 11.3.1
+      '@intlify/shared': 11.3.1
+
+  '@intlify/devtools-types@11.3.1':
+    dependencies:
+      '@intlify/core-base': 11.3.1
+      '@intlify/shared': 11.3.1
+
+  '@intlify/h3@0.7.4':
+    dependencies:
+      '@intlify/core': 11.3.1
+      '@intlify/utils': 0.13.0
+
+  '@intlify/message-compiler@11.3.1':
+    dependencies:
+      '@intlify/shared': 11.3.1
+      source-map-js: 1.2.1
+
+  '@intlify/shared@11.3.1': {}
+
+  '@intlify/unplugin-vue-i18n@11.0.7(@vue/compiler-dom@3.5.32)(eslint@10.2.0(jiti@2.6.1))(rollup@4.60.1)(typescript@6.0.3)(vue-i18n@11.3.1(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@eslint-community/eslint-utils': 4.9.1(eslint@10.2.0(jiti@2.6.1))
+      '@intlify/bundle-utils': 11.0.7(vue-i18n@11.3.1(vue@3.5.32(typescript@6.0.3)))
+      '@intlify/shared': 11.3.1
+      '@intlify/vue-i18n-extensions': 8.0.0(@intlify/shared@11.3.1)(@vue/compiler-dom@3.5.32)(vue-i18n@11.3.1(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))
+      '@rollup/pluginutils': 5.3.0(rollup@4.60.1)
+      '@typescript-eslint/scope-manager': 8.58.0
+      '@typescript-eslint/typescript-estree': 8.58.0(typescript@6.0.3)
+      debug: 4.4.3
+      fast-glob: 3.3.3
+      pathe: 2.0.3
+      picocolors: 1.1.1
+      unplugin: 2.3.11
+      vue: 3.5.32(typescript@6.0.3)
+    optionalDependencies:
+      vue-i18n: 11.3.1(vue@3.5.32(typescript@6.0.3))
+    transitivePeerDependencies:
+      - '@vue/compiler-dom'
+      - eslint
+      - rollup
+      - supports-color
+      - typescript
+
+  '@intlify/utils@0.13.0': {}
+
+  '@intlify/utils@0.14.1': {}
+
+  '@intlify/vue-i18n-extensions@8.0.0(@intlify/shared@11.3.1)(@vue/compiler-dom@3.5.32)(vue-i18n@11.3.1(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@babel/parser': 7.29.2
+    optionalDependencies:
+      '@intlify/shared': 11.3.1
+      '@vue/compiler-dom': 3.5.32
+      vue: 3.5.32(typescript@6.0.3)
+      vue-i18n: 11.3.1(vue@3.5.32(typescript@6.0.3))
+
+  '@ionic/cli-framework-output@2.2.8':
+    dependencies:
+      '@ionic/utils-terminal': 2.3.5
+      debug: 4.4.3
+      tslib: 2.8.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@ionic/utils-array@2.1.6':
+    dependencies:
+      debug: 4.4.3
+      tslib: 2.8.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@ionic/utils-fs@3.1.7':
+    dependencies:
+      '@types/fs-extra': 8.1.5
+      debug: 4.4.3
+      fs-extra: 9.1.0
+      tslib: 2.8.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@ionic/utils-object@2.1.6':
+    dependencies:
+      debug: 4.4.3
+      tslib: 2.8.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@ionic/utils-process@2.1.12':
+    dependencies:
+      '@ionic/utils-object': 2.1.6
+      '@ionic/utils-terminal': 2.3.5
+      debug: 4.4.3
+      signal-exit: 3.0.7
+      tree-kill: 1.2.2
+      tslib: 2.8.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@ionic/utils-stream@3.1.7':
+    dependencies:
+      debug: 4.4.3
+      tslib: 2.8.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@ionic/utils-subprocess@3.0.1':
+    dependencies:
+      '@ionic/utils-array': 2.1.6
+      '@ionic/utils-fs': 3.1.7
+      '@ionic/utils-process': 2.1.12
+      '@ionic/utils-stream': 3.1.7
+      '@ionic/utils-terminal': 2.3.5
+      cross-spawn: 7.0.6
+      debug: 4.4.3
+      tslib: 2.8.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@ionic/utils-terminal@2.3.5':
+    dependencies:
+      '@types/slice-ansi': 4.0.0
+      debug: 4.4.3
+      signal-exit: 3.0.7
+      slice-ansi: 4.0.0
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+      tslib: 2.8.1
+      untildify: 4.0.0
+      wrap-ansi: 7.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@ioredis/commands@1.5.1': {}
+
+  '@isaacs/cliui@8.0.2':
+    dependencies:
+      string-width: 5.1.2
+      string-width-cjs: string-width@4.2.3
+      strip-ansi: 7.2.0
+      strip-ansi-cjs: strip-ansi@6.0.1
+      wrap-ansi: 8.1.0
+      wrap-ansi-cjs: wrap-ansi@7.0.0
+
+  '@isaacs/fs-minipass@4.0.1':
+    dependencies:
+      minipass: 7.1.3
+
+  '@jridgewell/gen-mapping@0.3.13':
+    dependencies:
+      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/trace-mapping': 0.3.31
+
+  '@jridgewell/remapping@2.3.5':
+    dependencies:
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
+
+  '@jridgewell/resolve-uri@3.1.2': {}
+
+  '@jridgewell/source-map@0.3.11':
+    dependencies:
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
+
+  '@jridgewell/sourcemap-codec@1.5.5': {}
+
+  '@jridgewell/trace-mapping@0.3.31':
+    dependencies:
+      '@jridgewell/resolve-uri': 3.1.2
+      '@jridgewell/sourcemap-codec': 1.5.5
+
+  '@kwsites/file-exists@1.1.1':
+    dependencies:
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@kwsites/promise-deferred@1.1.1': {}
+
+  '@mapbox/node-pre-gyp@2.0.3(encoding@0.1.13)':
+    dependencies:
+      consola: 3.4.2
+      detect-libc: 2.1.2
+      https-proxy-agent: 7.0.6
+      node-fetch: 2.7.0(encoding@0.1.13)
+      nopt: 8.1.0
+      semver: 7.7.4
+      tar: 7.5.13
+    transitivePeerDependencies:
+      - encoding
+      - supports-color
+
+  '@miyaneee/rollup-plugin-json5@1.2.0(rollup@4.60.1)':
+    dependencies:
+      '@rollup/pluginutils': 5.3.0(rollup@4.60.1)
+      json5: 2.2.3
+      rollup: 4.60.1
+
+  '@napi-rs/wasm-runtime@0.2.12':
+    dependencies:
+      '@emnapi/core': 1.9.2
+      '@emnapi/runtime': 1.9.2
+      '@tybys/wasm-util': 0.10.1
+    optional: true
+
+  '@napi-rs/wasm-runtime@1.1.2(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)':
+    dependencies:
+      '@emnapi/core': 1.9.2
+      '@emnapi/runtime': 1.9.2
+      '@tybys/wasm-util': 0.10.1
+    optional: true
+
+  '@nodelib/fs.scandir@2.1.5':
+    dependencies:
+      '@nodelib/fs.stat': 2.0.5
+      run-parallel: 1.2.0
+
+  '@nodelib/fs.stat@2.0.5': {}
+
+  '@nodelib/fs.walk@1.2.8':
+    dependencies:
+      '@nodelib/fs.scandir': 2.1.5
+      fastq: 1.20.1
+
+  '@npmcli/fs@1.1.1':
+    dependencies:
+      '@gar/promisify': 1.1.3
+      semver: 7.7.4
+    optional: true
+
+  '@npmcli/move-file@1.1.2':
+    dependencies:
+      mkdirp: 1.0.4
+      rimraf: 3.0.2
+    optional: true
+
+  '@nuxt/cli@3.34.0(@nuxt/schema@4.4.2)(cac@6.7.14)(magicast@0.5.2)':
+    dependencies:
+      '@bomb.sh/tab': 0.0.14(cac@6.7.14)(citty@0.2.2)
+      '@clack/prompts': 1.2.0
+      c12: 3.3.4(magicast@0.5.2)
+      citty: 0.2.2
+      confbox: 0.2.4
+      consola: 3.4.2
+      debug: 4.4.3
+      defu: 6.1.6
+      exsolve: 1.0.8
+      fuse.js: 7.3.0
+      fzf: 0.5.2
+      giget: 3.2.0
+      jiti: 2.6.1
+      listhen: 1.9.1(srvx@0.11.15)
+      nypm: 0.6.5
+      ofetch: 1.5.1
+      ohash: 2.0.11
+      pathe: 2.0.3
+      perfect-debounce: 2.1.0
+      pkg-types: 2.3.0
+      scule: 1.3.0
+      semver: 7.7.4
+      srvx: 0.11.15
+      std-env: 3.10.0
+      tinyclip: 0.1.12
+      tinyexec: 1.1.1
+      ufo: 1.6.3
+      youch: 4.1.1
+    optionalDependencies:
+      '@nuxt/schema': 4.4.2
+    transitivePeerDependencies:
+      - cac
+      - commander
+      - magicast
+      - supports-color
+
+  '@nuxt/devalue@2.0.2': {}
+
+  '@nuxt/devtools-kit@2.7.0(magicast@0.5.2)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))':
+    dependencies:
+      '@nuxt/kit': 3.21.2(magicast@0.5.2)
+      execa: 8.0.1
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - magicast
+
+  '@nuxt/devtools-kit@3.2.4(magicast@0.5.2)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))':
+    dependencies:
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      execa: 8.0.1
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - magicast
+
+  '@nuxt/devtools-wizard@3.2.4':
+    dependencies:
+      '@clack/prompts': 1.2.0
+      consola: 3.4.2
+      diff: 8.0.4
+      execa: 8.0.1
+      magicast: 0.5.2
+      pathe: 2.0.3
+      pkg-types: 2.3.0
+      semver: 7.7.4
+
+  '@nuxt/devtools@3.2.4(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@nuxt/devtools-kit': 3.2.4(magicast@0.5.2)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      '@nuxt/devtools-wizard': 3.2.4
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      '@vue/devtools-core': 8.1.1(vue@3.5.32(typescript@6.0.3))
+      '@vue/devtools-kit': 8.1.1
+      birpc: 4.0.0
+      consola: 3.4.2
+      destr: 2.0.5
+      error-stack-parser-es: 1.0.5
+      execa: 8.0.1
+      fast-npm-meta: 1.4.2
+      get-port-please: 3.2.0
+      hookable: 6.1.0
+      image-meta: 0.2.2
+      is-installed-globally: 1.0.0
+      launch-editor: 2.13.2
+      local-pkg: 1.1.2
+      magicast: 0.5.2
+      nypm: 0.6.5
+      ohash: 2.0.11
+      pathe: 2.0.3
+      perfect-debounce: 2.1.0
+      pkg-types: 2.3.0
+      semver: 7.7.4
+      simple-git: 3.35.1
+      sirv: 3.0.2
+      structured-clone-es: 2.0.0
+      tinyglobby: 0.2.15
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+      vite-plugin-inspect: 11.3.3(@nuxt/kit@4.4.2(magicast@0.5.2))(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      vite-plugin-vue-tracer: 1.3.0(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue@3.5.32(typescript@6.0.3))
+      which: 6.0.1
+      ws: 8.20.0
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+      - vue
+
+  '@nuxt/eslint-config@1.15.2(@typescript-eslint/utils@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3))(@vue/compiler-sfc@3.5.32)(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)':
+    dependencies:
+      '@antfu/install-pkg': 1.1.0
+      '@clack/prompts': 1.2.0
+      '@eslint/js': 9.39.4
+      '@nuxt/eslint-plugin': 1.15.2(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+      '@stylistic/eslint-plugin': 5.10.0(eslint@10.2.0(jiti@2.6.1))
+      '@typescript-eslint/eslint-plugin': 8.58.0(@typescript-eslint/parser@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3))(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+      '@typescript-eslint/parser': 8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+      eslint: 10.2.0(jiti@2.6.1)
+      eslint-config-flat-gitignore: 2.3.0(eslint@10.2.0(jiti@2.6.1))
+      eslint-flat-config-utils: 3.1.0
+      eslint-merge-processors: 2.0.0(eslint@10.2.0(jiti@2.6.1))
+      eslint-plugin-import-lite: 0.5.2(eslint@10.2.0(jiti@2.6.1))
+      eslint-plugin-import-x: 4.16.2(@typescript-eslint/utils@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3))(eslint@10.2.0(jiti@2.6.1))
+      eslint-plugin-jsdoc: 62.9.0(eslint@10.2.0(jiti@2.6.1))
+      eslint-plugin-regexp: 3.1.0(eslint@10.2.0(jiti@2.6.1))
+      eslint-plugin-unicorn: 63.0.0(eslint@10.2.0(jiti@2.6.1))
+      eslint-plugin-vue: 10.8.0(@stylistic/eslint-plugin@5.10.0(eslint@10.2.0(jiti@2.6.1)))(@typescript-eslint/parser@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3))(eslint@10.2.0(jiti@2.6.1))(vue-eslint-parser@10.4.0(eslint@10.2.0(jiti@2.6.1)))
+      eslint-processor-vue-blocks: 2.0.0(@vue/compiler-sfc@3.5.32)(eslint@10.2.0(jiti@2.6.1))
+      globals: 17.4.0
+      local-pkg: 1.1.2
+      pathe: 2.0.3
+      vue-eslint-parser: 10.4.0(eslint@10.2.0(jiti@2.6.1))
+    transitivePeerDependencies:
+      - '@typescript-eslint/utils'
+      - '@vue/compiler-sfc'
+      - eslint-import-resolver-node
+      - supports-color
+      - typescript
+
+  '@nuxt/eslint-plugin@1.15.2(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)':
+    dependencies:
+      '@typescript-eslint/types': 8.58.0
+      '@typescript-eslint/utils': 8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+      eslint: 10.2.0(jiti@2.6.1)
+    transitivePeerDependencies:
+      - supports-color
+      - typescript
+
+  '@nuxt/eslint@1.15.2(@typescript-eslint/utils@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3))(@vue/compiler-sfc@3.5.32)(eslint@10.2.0(jiti@2.6.1))(magicast@0.5.2)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))':
+    dependencies:
+      '@eslint/config-inspector': 1.5.0(eslint@10.2.0(jiti@2.6.1))
+      '@nuxt/devtools-kit': 3.2.4(magicast@0.5.2)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      '@nuxt/eslint-config': 1.15.2(@typescript-eslint/utils@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3))(@vue/compiler-sfc@3.5.32)(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+      '@nuxt/eslint-plugin': 1.15.2(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      chokidar: 5.0.0
+      eslint: 10.2.0(jiti@2.6.1)
+      eslint-flat-config-utils: 3.1.0
+      eslint-typegen: 2.3.1(eslint@10.2.0(jiti@2.6.1))
+      find-up: 8.0.0
+      get-port-please: 3.2.0
+      mlly: 1.8.2
+      pathe: 2.0.3
+      unimport: 5.7.0
+    transitivePeerDependencies:
+      - '@typescript-eslint/utils'
+      - '@vue/compiler-sfc'
+      - bufferutil
+      - eslint-import-resolver-node
+      - eslint-plugin-format
+      - magicast
+      - supports-color
+      - typescript
+      - utf-8-validate
+      - vite
+
+  '@nuxt/fonts@0.14.0(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)(magicast@0.5.2)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))':
+    dependencies:
+      '@nuxt/devtools-kit': 3.2.4(magicast@0.5.2)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      consola: 3.4.2
+      defu: 6.1.6
+      fontless: 0.2.1(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      h3: 1.15.11
+      magic-regexp: 0.10.0
+      ofetch: 1.5.1
+      pathe: 2.0.3
+      sirv: 3.0.2
+      tinyglobby: 0.2.15
+      ufo: 1.6.3
+      unifont: 0.7.4
+      unplugin: 3.0.0
+      unstorage: 1.17.5(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)
+    transitivePeerDependencies:
+      - '@azure/app-configuration'
+      - '@azure/cosmos'
+      - '@azure/data-tables'
+      - '@azure/identity'
+      - '@azure/keyvault-secrets'
+      - '@azure/storage-blob'
+      - '@capacitor/preferences'
+      - '@deno/kv'
+      - '@netlify/blobs'
+      - '@planetscale/database'
+      - '@upstash/redis'
+      - '@vercel/blob'
+      - '@vercel/functions'
+      - '@vercel/kv'
+      - aws4fetch
+      - db0
+      - idb-keyval
+      - ioredis
+      - magicast
+      - uploadthing
+      - vite
+
+  '@nuxt/icon@2.2.1(magicast@0.5.2)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@iconify/collections': 1.0.669
+      '@iconify/types': 2.0.0
+      '@iconify/utils': 3.1.0
+      '@iconify/vue': 5.0.0(vue@3.5.32(typescript@6.0.3))
+      '@nuxt/devtools-kit': 3.2.4(magicast@0.5.2)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      consola: 3.4.2
+      local-pkg: 1.1.2
+      mlly: 1.8.2
+      ohash: 2.0.11
+      pathe: 2.0.3
+      picomatch: 4.0.4
+      std-env: 3.10.0
+      tinyglobby: 0.2.15
+    transitivePeerDependencies:
+      - magicast
+      - vite
+      - vue
+
+  '@nuxt/image@2.0.0(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)(magicast@0.5.2)(srvx@0.11.15)':
+    dependencies:
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      consola: 3.4.2
+      defu: 6.1.6
+      h3: 1.15.11
+      image-meta: 0.2.2
+      knitwork: 1.3.0
+      ohash: 2.0.11
+      pathe: 2.0.3
+      std-env: 3.10.0
+      ufo: 1.6.3
+    optionalDependencies:
+      ipx: 3.1.1(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)(srvx@0.11.15)
+    transitivePeerDependencies:
+      - '@azure/app-configuration'
+      - '@azure/cosmos'
+      - '@azure/data-tables'
+      - '@azure/identity'
+      - '@azure/keyvault-secrets'
+      - '@azure/storage-blob'
+      - '@capacitor/preferences'
+      - '@deno/kv'
+      - '@netlify/blobs'
+      - '@planetscale/database'
+      - '@upstash/redis'
+      - '@vercel/blob'
+      - '@vercel/functions'
+      - '@vercel/kv'
+      - aws4fetch
+      - db0
+      - idb-keyval
+      - ioredis
+      - magicast
+      - srvx
+      - uploadthing
+
+  '@nuxt/kit@3.21.2(magicast@0.5.2)':
+    dependencies:
+      c12: 3.3.4(magicast@0.5.2)
+      consola: 3.4.2
+      defu: 6.1.6
+      destr: 2.0.5
+      errx: 0.1.0
+      exsolve: 1.0.8
+      ignore: 7.0.5
+      jiti: 2.6.1
+      klona: 2.0.6
+      knitwork: 1.3.0
+      mlly: 1.8.2
+      ohash: 2.0.11
+      pathe: 2.0.3
+      pkg-types: 2.3.0
+      rc9: 3.0.1
+      scule: 1.3.0
+      semver: 7.7.4
+      tinyglobby: 0.2.15
+      ufo: 1.6.3
+      unctx: 2.5.0
+      untyped: 2.0.0
+    transitivePeerDependencies:
+      - magicast
+
+  '@nuxt/kit@4.4.2(magicast@0.5.2)':
+    dependencies:
+      c12: 3.3.4(magicast@0.5.2)
+      consola: 3.4.2
+      defu: 6.1.6
+      destr: 2.0.5
+      errx: 0.1.0
+      exsolve: 1.0.8
+      ignore: 7.0.5
+      jiti: 2.6.1
+      klona: 2.0.6
+      mlly: 1.8.2
+      ohash: 2.0.11
+      pathe: 2.0.3
+      pkg-types: 2.3.0
+      rc9: 3.0.1
+      scule: 1.3.0
+      semver: 7.7.4
+      tinyglobby: 0.2.15
+      ufo: 1.6.3
+      unctx: 2.5.0
+      untyped: 2.0.0
+    transitivePeerDependencies:
+      - magicast
+
+  '@nuxt/nitro-server@4.4.2(@babel/core@7.29.0)(db0@0.3.4(sqlite3@5.1.7))(encoding@0.1.13)(ioredis@5.10.1)(magicast@0.5.2)(nuxt@4.4.2(@babel/core@7.29.0)(@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.0))(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@parcel/watcher@2.5.6)(@types/node@25.6.0)(@vue/compiler-sfc@3.5.32)(cac@6.7.14)(db0@0.3.4(sqlite3@5.1.7))(encoding@0.1.13)(eslint@10.2.0(jiti@2.6.1))(ioredis@5.10.1)(lightningcss@1.32.0)(magicast@0.5.2)(optionator@0.9.4)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(rollup-plugin-visualizer@7.0.1(rollup@4.60.1))(rollup@4.60.1)(sqlite3@5.1.7)(srvx@0.11.15)(terser@5.46.1)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue-tsc@3.2.6(typescript@6.0.3))(xml2js@0.6.2)(yaml@2.8.3))(sqlite3@5.1.7)(srvx@0.11.15)(typescript@6.0.3)(xml2js@0.6.2)':
+    dependencies:
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.0)
+      '@nuxt/devalue': 2.0.2
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      '@unhead/vue': 2.1.13(vue@3.5.32(typescript@6.0.3))
+      '@vue/shared': 3.5.32
+      consola: 3.4.2
+      defu: 6.1.6
+      destr: 2.0.5
+      devalue: 5.6.4
+      errx: 0.1.0
+      escape-string-regexp: 5.0.0
+      exsolve: 1.0.8
+      h3: 1.15.11
+      impound: 1.1.5
+      klona: 2.0.6
+      mocked-exports: 0.1.1
+      nitropack: 2.13.3(encoding@0.1.13)(sqlite3@5.1.7)(srvx@0.11.15)(xml2js@0.6.2)
+      nuxt: 4.4.2(@babel/core@7.29.0)(@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.0))(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@parcel/watcher@2.5.6)(@types/node@25.6.0)(@vue/compiler-sfc@3.5.32)(cac@6.7.14)(db0@0.3.4(sqlite3@5.1.7))(encoding@0.1.13)(eslint@10.2.0(jiti@2.6.1))(ioredis@5.10.1)(lightningcss@1.32.0)(magicast@0.5.2)(optionator@0.9.4)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(rollup-plugin-visualizer@7.0.1(rollup@4.60.1))(rollup@4.60.1)(sqlite3@5.1.7)(srvx@0.11.15)(terser@5.46.1)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue-tsc@3.2.6(typescript@6.0.3))(xml2js@0.6.2)(yaml@2.8.3)
+      nypm: 0.6.5
+      ohash: 2.0.11
+      pathe: 2.0.3
+      pkg-types: 2.3.0
+      rou3: 0.8.1
+      std-env: 4.0.0
+      ufo: 1.6.3
+      unctx: 2.5.0
+      unstorage: 1.17.5(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)
+      vue: 3.5.32(typescript@6.0.3)
+      vue-bundle-renderer: 2.2.0
+      vue-devtools-stub: 0.1.0
+    transitivePeerDependencies:
+      - '@azure/app-configuration'
+      - '@azure/cosmos'
+      - '@azure/data-tables'
+      - '@azure/identity'
+      - '@azure/keyvault-secrets'
+      - '@azure/storage-blob'
+      - '@babel/core'
+      - '@capacitor/preferences'
+      - '@deno/kv'
+      - '@electric-sql/pglite'
+      - '@libsql/client'
+      - '@netlify/blobs'
+      - '@planetscale/database'
+      - '@upstash/redis'
+      - '@vercel/blob'
+      - '@vercel/functions'
+      - '@vercel/kv'
+      - aws4fetch
+      - bare-abort-controller
+      - bare-buffer
+      - better-sqlite3
+      - db0
+      - drizzle-orm
+      - encoding
+      - idb-keyval
+      - ioredis
+      - magicast
+      - mysql2
+      - react-native-b4a
+      - rolldown
+      - sqlite3
+      - srvx
+      - supports-color
+      - typescript
+      - uploadthing
+      - xml2js
+
+  '@nuxt/schema@4.4.2':
+    dependencies:
+      '@vue/shared': 3.5.32
+      defu: 6.1.6
+      pathe: 2.0.3
+      pkg-types: 2.3.0
+      std-env: 4.0.0
+
+  '@nuxt/telemetry@2.8.0(@nuxt/kit@4.4.2(magicast@0.5.2))':
+    dependencies:
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      citty: 0.2.2
+      consola: 3.4.2
+      ofetch: 2.0.0-alpha.3
+      rc9: 3.0.1
+      std-env: 4.0.0
+
+  '@nuxt/test-utils@4.0.2(@vue/test-utils@2.4.6)(crossws@0.4.4(srvx@0.11.15))(happy-dom@20.9.0)(magicast@0.5.2)(playwright-core@1.59.1)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vitest@4.1.4(@types/node@25.6.0)(happy-dom@20.9.0)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)))':
+    dependencies:
+      '@clack/prompts': 1.2.0
+      '@nuxt/devtools-kit': 2.7.0(magicast@0.5.2)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      '@nuxt/kit': 3.21.2(magicast@0.5.2)
+      c12: 3.3.4(magicast@0.5.2)
+      consola: 3.4.2
+      defu: 6.1.6
+      destr: 2.0.5
+      estree-walker: 3.0.3
+      exsolve: 1.0.8
+      fake-indexeddb: 6.2.5
+      get-port-please: 3.2.0
+      h3: 1.15.11
+      h3-next: h3@2.0.1-rc.20(crossws@0.4.4(srvx@0.11.15))
+      local-pkg: 1.1.2
+      magic-string: 0.30.21
+      node-fetch-native: 1.6.7
+      node-mock-http: 1.0.4
+      nypm: 0.6.5
+      ofetch: 1.5.1
+      pathe: 2.0.3
+      perfect-debounce: 2.1.0
+      radix3: 1.1.2
+      scule: 1.3.0
+      std-env: 4.0.0
+      tinyexec: 1.1.1
+      ufo: 1.6.3
+      unplugin: 3.0.0
+      vitest-environment-nuxt: 2.0.0(@vue/test-utils@2.4.6)(crossws@0.4.4(srvx@0.11.15))(happy-dom@20.9.0)(magicast@0.5.2)(playwright-core@1.59.1)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vitest@4.1.4(@types/node@25.6.0)(happy-dom@20.9.0)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)))
+      vue: 3.5.32(typescript@6.0.3)
+    optionalDependencies:
+      '@vue/test-utils': 2.4.6
+      happy-dom: 20.9.0
+      playwright-core: 1.59.1
+      vitest: 4.1.4(@types/node@25.6.0)(happy-dom@20.9.0)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+    transitivePeerDependencies:
+      - crossws
+      - magicast
+      - typescript
+      - vite
+
+  '@nuxt/ui@4.6.1(@tiptap/extensions@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))(change-case@5.4.4)(db0@0.3.4(sqlite3@5.1.7))(embla-carousel@8.6.0)(ioredis@5.10.1)(magicast@0.5.2)(tailwindcss@4.2.2)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue-router@5.0.4(@vue/compiler-sfc@3.5.32)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))(yjs@13.6.30)(zod@4.3.6)':
+    dependencies:
+      '@floating-ui/dom': 1.7.6
+      '@iconify/vue': 5.0.0(vue@3.5.32(typescript@6.0.3))
+      '@internationalized/date': 3.12.0
+      '@internationalized/number': 3.6.5
+      '@nuxt/fonts': 0.14.0(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)(magicast@0.5.2)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      '@nuxt/icon': 2.2.1(magicast@0.5.2)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue@3.5.32(typescript@6.0.3))
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      '@nuxt/schema': 4.4.2
+      '@nuxtjs/color-mode': 3.5.2(magicast@0.5.2)
+      '@standard-schema/spec': 1.1.0
+      '@tailwindcss/postcss': 4.2.2
+      '@tailwindcss/vite': 4.2.2(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      '@tanstack/vue-table': 8.21.3(vue@3.5.32(typescript@6.0.3))
+      '@tanstack/vue-virtual': 3.13.23(vue@3.5.32(typescript@6.0.3))
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/extension-bubble-menu': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/extension-code': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-collaboration': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))(yjs@13.6.30)
+      '@tiptap/extension-drag-handle': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/extension-collaboration@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))(yjs@13.6.30))(@tiptap/extension-node-range@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))
+      '@tiptap/extension-drag-handle-vue-3': 3.22.2(@tiptap/extension-drag-handle@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/extension-collaboration@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))(yjs@13.6.30))(@tiptap/extension-node-range@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30)))(@tiptap/pm@3.22.2)(@tiptap/vue-3@3.22.2(@floating-ui/dom@1.7.6)(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))
+      '@tiptap/extension-floating-menu': 3.22.2(@floating-ui/dom@1.7.6)(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/extension-horizontal-rule': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/extension-image': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-mention': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/suggestion@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))
+      '@tiptap/extension-node-range': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/extension-placeholder': 3.22.2(@tiptap/extensions@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))
+      '@tiptap/markdown': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+      '@tiptap/starter-kit': 3.22.2
+      '@tiptap/suggestion': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/vue-3': 3.22.2(@floating-ui/dom@1.7.6)(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(vue@3.5.32(typescript@6.0.3))
+      '@unhead/vue': 2.1.13(vue@3.5.32(typescript@6.0.3))
+      '@vueuse/core': 14.2.1(vue@3.5.32(typescript@6.0.3))
+      '@vueuse/integrations': 14.2.1(change-case@5.4.4)(fuse.js@7.3.0)(vue@3.5.32(typescript@6.0.3))
+      '@vueuse/shared': 14.2.1(vue@3.5.32(typescript@6.0.3))
+      colortranslator: 5.0.0
+      consola: 3.4.2
+      defu: 6.1.6
+      embla-carousel-auto-height: 8.6.0(embla-carousel@8.6.0)
+      embla-carousel-auto-scroll: 8.6.0(embla-carousel@8.6.0)
+      embla-carousel-autoplay: 8.6.0(embla-carousel@8.6.0)
+      embla-carousel-class-names: 8.6.0(embla-carousel@8.6.0)
+      embla-carousel-fade: 8.6.0(embla-carousel@8.6.0)
+      embla-carousel-vue: 8.6.0(vue@3.5.32(typescript@6.0.3))
+      embla-carousel-wheel-gestures: 8.1.0(embla-carousel@8.6.0)
+      fuse.js: 7.3.0
+      hookable: 6.1.0
+      knitwork: 1.3.0
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      motion-v: 2.2.0(@vueuse/core@14.2.1(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))
+      ohash: 2.0.11
+      pathe: 2.0.3
+      reka-ui: 2.9.3(vue@3.5.32(typescript@6.0.3))
+      scule: 1.3.0
+      tailwind-merge: 3.5.0
+      tailwind-variants: 3.2.2(tailwind-merge@3.5.0)(tailwindcss@4.2.2)
+      tailwindcss: 4.2.2
+      tinyglobby: 0.2.15
+      typescript: 6.0.3
+      ufo: 1.6.3
+      unplugin: 3.0.0
+      unplugin-auto-import: 21.0.0(@nuxt/kit@4.4.2(magicast@0.5.2))(@vueuse/core@14.2.1(vue@3.5.32(typescript@6.0.3)))
+      unplugin-vue-components: 32.0.0(@nuxt/kit@4.4.2(magicast@0.5.2))(vue@3.5.32(typescript@6.0.3))
+      vaul-vue: 0.4.1(reka-ui@2.9.3(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))
+      vue-component-type-helpers: 3.2.6
+    optionalDependencies:
+      vue-router: 5.0.4(@vue/compiler-sfc@3.5.32)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))
+      zod: 4.3.6
+    transitivePeerDependencies:
+      - '@azure/app-configuration'
+      - '@azure/cosmos'
+      - '@azure/data-tables'
+      - '@azure/identity'
+      - '@azure/keyvault-secrets'
+      - '@azure/storage-blob'
+      - '@capacitor/preferences'
+      - '@deno/kv'
+      - '@emotion/is-prop-valid'
+      - '@netlify/blobs'
+      - '@planetscale/database'
+      - '@tiptap/extensions'
+      - '@tiptap/y-tiptap'
+      - '@upstash/redis'
+      - '@vercel/blob'
+      - '@vercel/functions'
+      - '@vercel/kv'
+      - '@vue/composition-api'
+      - async-validator
+      - aws4fetch
+      - axios
+      - change-case
+      - db0
+      - drauu
+      - embla-carousel
+      - focus-trap
+      - idb-keyval
+      - ioredis
+      - jwt-decode
+      - magicast
+      - nprogress
+      - qrcode
+      - react
+      - react-dom
+      - sortablejs
+      - universal-cookie
+      - uploadthing
+      - vite
+      - vue
+      - yjs
+
+  '@nuxt/vite-builder@4.4.2(7572ad54e4105a63e4ecba766cf230f4)':
+    dependencies:
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      '@rollup/plugin-replace': 6.0.3(rollup@4.60.1)
+      '@vitejs/plugin-vue': 6.0.5(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue@3.5.32(typescript@6.0.3))
+      '@vitejs/plugin-vue-jsx': 5.1.5(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue@3.5.32(typescript@6.0.3))
+      autoprefixer: 10.4.27(postcss@8.5.8)
+      consola: 3.4.2
+      cssnano: 7.1.4(postcss@8.5.8)
+      defu: 6.1.6
+      escape-string-regexp: 5.0.0
+      exsolve: 1.0.8
+      get-port-please: 3.2.0
+      jiti: 2.6.1
+      knitwork: 1.3.0
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      mocked-exports: 0.1.1
+      nuxt: 4.4.2(@babel/core@7.29.0)(@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.0))(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@parcel/watcher@2.5.6)(@types/node@25.6.0)(@vue/compiler-sfc@3.5.32)(cac@6.7.14)(db0@0.3.4(sqlite3@5.1.7))(encoding@0.1.13)(eslint@10.2.0(jiti@2.6.1))(ioredis@5.10.1)(lightningcss@1.32.0)(magicast@0.5.2)(optionator@0.9.4)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(rollup-plugin-visualizer@7.0.1(rollup@4.60.1))(rollup@4.60.1)(sqlite3@5.1.7)(srvx@0.11.15)(terser@5.46.1)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue-tsc@3.2.6(typescript@6.0.3))(xml2js@0.6.2)(yaml@2.8.3)
+      nypm: 0.6.5
+      pathe: 2.0.3
+      pkg-types: 2.3.0
+      postcss: 8.5.8
+      seroval: 1.5.2
+      std-env: 4.0.0
+      ufo: 1.6.3
+      unenv: 2.0.0-rc.24
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+      vite-node: 5.3.0(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+      vite-plugin-checker: 0.12.0(eslint@10.2.0(jiti@2.6.1))(optionator@0.9.4)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue-tsc@3.2.6(typescript@6.0.3))
+      vue: 3.5.32(typescript@6.0.3)
+      vue-bundle-renderer: 2.2.0
+    optionalDependencies:
+      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
+      rollup-plugin-visualizer: 7.0.1(rollup@4.60.1)
+    transitivePeerDependencies:
+      - '@biomejs/biome'
+      - '@types/node'
+      - eslint
+      - less
+      - lightningcss
+      - magicast
+      - meow
+      - optionator
+      - oxlint
+      - rollup
+      - sass
+      - sass-embedded
+      - stylelint
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - typescript
+      - vls
+      - vti
+      - vue-tsc
+      - yaml
+
+  '@nuxtjs/color-mode@3.5.2(magicast@0.5.2)':
+    dependencies:
+      '@nuxt/kit': 3.21.2(magicast@0.5.2)
+      pathe: 1.1.2
+      pkg-types: 1.3.1
+      semver: 7.7.4
+    transitivePeerDependencies:
+      - magicast
+
+  '@nuxtjs/i18n@10.2.4(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@vue/compiler-dom@3.5.32)(db0@0.3.4(sqlite3@5.1.7))(eslint@10.2.0(jiti@2.6.1))(ioredis@5.10.1)(magicast@0.5.2)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(rollup@4.60.1)(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@intlify/core': 11.3.1
+      '@intlify/h3': 0.7.4
+      '@intlify/shared': 11.3.1
+      '@intlify/unplugin-vue-i18n': 11.0.7(@vue/compiler-dom@3.5.32)(eslint@10.2.0(jiti@2.6.1))(rollup@4.60.1)(typescript@6.0.3)(vue-i18n@11.3.1(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))
+      '@intlify/utils': 0.14.1
+      '@miyaneee/rollup-plugin-json5': 1.2.0(rollup@4.60.1)
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      '@rollup/plugin-yaml': 4.1.2(rollup@4.60.1)
+      '@vue/compiler-sfc': 3.5.32
+      defu: 6.1.6
+      devalue: 5.6.4
+      h3: 1.15.11
+      knitwork: 1.3.0
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      nuxt-define: 1.0.0
+      ohash: 2.0.11
+      oxc-parser: 0.112.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+      oxc-transform: 0.112.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+      oxc-walker: 0.7.0(oxc-parser@0.112.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2))
+      pathe: 2.0.3
+      ufo: 1.6.3
+      unplugin: 2.3.11
+      unrouting: 0.1.7
+      unstorage: 1.17.5(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)
+      vue-i18n: 11.3.1(vue@3.5.32(typescript@6.0.3))
+      vue-router: 5.0.4(@vue/compiler-sfc@3.5.32)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))
+    transitivePeerDependencies:
+      - '@azure/app-configuration'
+      - '@azure/cosmos'
+      - '@azure/data-tables'
+      - '@azure/identity'
+      - '@azure/keyvault-secrets'
+      - '@azure/storage-blob'
+      - '@capacitor/preferences'
+      - '@deno/kv'
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+      - '@netlify/blobs'
+      - '@pinia/colada'
+      - '@planetscale/database'
+      - '@upstash/redis'
+      - '@vercel/blob'
+      - '@vercel/functions'
+      - '@vercel/kv'
+      - '@vue/compiler-dom'
+      - aws4fetch
+      - db0
+      - eslint
+      - idb-keyval
+      - ioredis
+      - magicast
+      - petite-vue-i18n
+      - pinia
+      - rollup
+      - supports-color
+      - typescript
+      - uploadthing
+      - vue
+
+  '@one-ini/wasm@0.1.1': {}
+
+  '@oxc-minify/binding-android-arm-eabi@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-android-arm64@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-darwin-arm64@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-darwin-x64@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-freebsd-x64@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-linux-arm-gnueabihf@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-linux-arm-musleabihf@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-linux-arm64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-linux-arm64-musl@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-linux-ppc64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-linux-riscv64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-linux-riscv64-musl@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-linux-s390x-gnu@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-linux-x64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-linux-x64-musl@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-openharmony-arm64@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-wasm32-wasi@0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)':
+    dependencies:
+      '@napi-rs/wasm-runtime': 1.1.2(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+    optional: true
+
+  '@oxc-minify/binding-win32-arm64-msvc@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-win32-ia32-msvc@0.117.0':
+    optional: true
+
+  '@oxc-minify/binding-win32-x64-msvc@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-android-arm-eabi@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-android-arm-eabi@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-android-arm64@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-android-arm64@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-darwin-arm64@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-darwin-arm64@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-darwin-x64@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-darwin-x64@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-freebsd-x64@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-freebsd-x64@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-arm-gnueabihf@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-arm-gnueabihf@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-arm-musleabihf@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-arm-musleabihf@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-arm64-gnu@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-arm64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-arm64-musl@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-arm64-musl@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-ppc64-gnu@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-ppc64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-riscv64-gnu@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-riscv64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-riscv64-musl@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-riscv64-musl@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-s390x-gnu@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-s390x-gnu@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-x64-gnu@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-x64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-x64-musl@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-linux-x64-musl@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-openharmony-arm64@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-openharmony-arm64@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-wasm32-wasi@0.112.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)':
+    dependencies:
+      '@napi-rs/wasm-runtime': 1.1.2(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+    optional: true
+
+  '@oxc-parser/binding-wasm32-wasi@0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)':
+    dependencies:
+      '@napi-rs/wasm-runtime': 1.1.2(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+    optional: true
+
+  '@oxc-parser/binding-win32-arm64-msvc@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-win32-arm64-msvc@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-win32-ia32-msvc@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-win32-ia32-msvc@0.117.0':
+    optional: true
+
+  '@oxc-parser/binding-win32-x64-msvc@0.112.0':
+    optional: true
+
+  '@oxc-parser/binding-win32-x64-msvc@0.117.0':
+    optional: true
+
+  '@oxc-project/types@0.112.0': {}
+
+  '@oxc-project/types@0.117.0': {}
+
+  '@oxc-transform/binding-android-arm-eabi@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-android-arm-eabi@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-android-arm64@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-android-arm64@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-darwin-arm64@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-darwin-arm64@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-darwin-x64@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-darwin-x64@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-freebsd-x64@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-freebsd-x64@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-arm-gnueabihf@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-arm-gnueabihf@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-arm-musleabihf@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-arm-musleabihf@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-arm64-gnu@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-arm64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-arm64-musl@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-arm64-musl@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-ppc64-gnu@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-ppc64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-riscv64-gnu@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-riscv64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-riscv64-musl@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-riscv64-musl@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-s390x-gnu@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-s390x-gnu@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-x64-gnu@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-x64-gnu@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-x64-musl@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-linux-x64-musl@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-openharmony-arm64@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-openharmony-arm64@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-wasm32-wasi@0.112.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)':
+    dependencies:
+      '@napi-rs/wasm-runtime': 1.1.2(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+    optional: true
+
+  '@oxc-transform/binding-wasm32-wasi@0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)':
+    dependencies:
+      '@napi-rs/wasm-runtime': 1.1.2(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+    optional: true
+
+  '@oxc-transform/binding-win32-arm64-msvc@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-win32-arm64-msvc@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-win32-ia32-msvc@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-win32-ia32-msvc@0.117.0':
+    optional: true
+
+  '@oxc-transform/binding-win32-x64-msvc@0.112.0':
+    optional: true
+
+  '@oxc-transform/binding-win32-x64-msvc@0.117.0':
+    optional: true
+
+  '@package-json/types@0.0.12': {}
+
+  '@parcel/watcher-android-arm64@2.5.6':
+    optional: true
+
+  '@parcel/watcher-darwin-arm64@2.5.6':
+    optional: true
+
+  '@parcel/watcher-darwin-x64@2.5.6':
+    optional: true
+
+  '@parcel/watcher-freebsd-x64@2.5.6':
+    optional: true
+
+  '@parcel/watcher-linux-arm-glibc@2.5.6':
+    optional: true
+
+  '@parcel/watcher-linux-arm-musl@2.5.6':
+    optional: true
+
+  '@parcel/watcher-linux-arm64-glibc@2.5.6':
+    optional: true
+
+  '@parcel/watcher-linux-arm64-musl@2.5.6':
+    optional: true
+
+  '@parcel/watcher-linux-x64-glibc@2.5.6':
+    optional: true
+
+  '@parcel/watcher-linux-x64-musl@2.5.6':
+    optional: true
+
+  '@parcel/watcher-wasm@2.5.6':
+    dependencies:
+      is-glob: 4.0.3
+      picomatch: 4.0.4
+
+  '@parcel/watcher-win32-arm64@2.5.6':
+    optional: true
+
+  '@parcel/watcher-win32-ia32@2.5.6':
+    optional: true
+
+  '@parcel/watcher-win32-x64@2.5.6':
+    optional: true
+
+  '@parcel/watcher@2.5.6':
+    dependencies:
+      detect-libc: 2.1.2
+      is-glob: 4.0.3
+      node-addon-api: 7.1.1
+      picomatch: 4.0.4
+    optionalDependencies:
+      '@parcel/watcher-android-arm64': 2.5.6
+      '@parcel/watcher-darwin-arm64': 2.5.6
+      '@parcel/watcher-darwin-x64': 2.5.6
+      '@parcel/watcher-freebsd-x64': 2.5.6
+      '@parcel/watcher-linux-arm-glibc': 2.5.6
+      '@parcel/watcher-linux-arm-musl': 2.5.6
+      '@parcel/watcher-linux-arm64-glibc': 2.5.6
+      '@parcel/watcher-linux-arm64-musl': 2.5.6
+      '@parcel/watcher-linux-x64-glibc': 2.5.6
+      '@parcel/watcher-linux-x64-musl': 2.5.6
+      '@parcel/watcher-win32-arm64': 2.5.6
+      '@parcel/watcher-win32-ia32': 2.5.6
+      '@parcel/watcher-win32-x64': 2.5.6
+
+  '@pinia/nuxt@0.11.3(magicast@0.5.2)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))':
+    dependencies:
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      pinia: 3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3))
+    transitivePeerDependencies:
+      - magicast
+
+  '@pkgjs/parseargs@0.11.0':
+    optional: true
+
+  '@polka/url@1.0.0-next.29': {}
+
+  '@poppinss/colors@4.1.6':
+    dependencies:
+      kleur: 4.1.5
+
+  '@poppinss/dumper@0.7.0':
+    dependencies:
+      '@poppinss/colors': 4.1.6
+      '@sindresorhus/is': 7.2.0
+      supports-color: 10.2.2
+
+  '@poppinss/exception@1.2.3': {}
+
+  '@remirror/core-constants@3.0.0': {}
+
+  '@rolldown/pluginutils@1.0.0-rc.13': {}
+
+  '@rolldown/pluginutils@1.0.0-rc.2': {}
+
+  '@rollup/plugin-alias@6.0.0(rollup@4.60.1)':
+    optionalDependencies:
+      rollup: 4.60.1
+
+  '@rollup/plugin-commonjs@29.0.2(rollup@4.60.1)':
+    dependencies:
+      '@rollup/pluginutils': 5.3.0(rollup@4.60.1)
+      commondir: 1.0.1
+      estree-walker: 2.0.2
+      fdir: 6.5.0(picomatch@4.0.4)
+      is-reference: 1.2.1
+      magic-string: 0.30.21
+      picomatch: 4.0.4
+    optionalDependencies:
+      rollup: 4.60.1
+
+  '@rollup/plugin-inject@5.0.5(rollup@4.60.1)':
+    dependencies:
+      '@rollup/pluginutils': 5.3.0(rollup@4.60.1)
+      estree-walker: 2.0.2
+      magic-string: 0.30.21
+    optionalDependencies:
+      rollup: 4.60.1
+
+  '@rollup/plugin-json@6.1.0(rollup@4.60.1)':
+    dependencies:
+      '@rollup/pluginutils': 5.3.0(rollup@4.60.1)
+    optionalDependencies:
+      rollup: 4.60.1
+
+  '@rollup/plugin-node-resolve@16.0.3(rollup@4.60.1)':
+    dependencies:
+      '@rollup/pluginutils': 5.3.0(rollup@4.60.1)
+      '@types/resolve': 1.20.2
+      deepmerge: 4.3.1
+      is-module: 1.0.0
+      resolve: 1.22.11
+    optionalDependencies:
+      rollup: 4.60.1
+
+  '@rollup/plugin-replace@6.0.3(rollup@4.60.1)':
+    dependencies:
+      '@rollup/pluginutils': 5.3.0(rollup@4.60.1)
+      magic-string: 0.30.21
+    optionalDependencies:
+      rollup: 4.60.1
+
+  '@rollup/plugin-terser@1.0.0(rollup@4.60.1)':
+    dependencies:
+      serialize-javascript: 7.0.5
+      smob: 1.6.1
+      terser: 5.46.1
+    optionalDependencies:
+      rollup: 4.60.1
+
+  '@rollup/plugin-yaml@4.1.2(rollup@4.60.1)':
+    dependencies:
+      '@rollup/pluginutils': 5.3.0(rollup@4.60.1)
+      js-yaml: 4.1.1
+      tosource: 2.0.0-alpha.3
+    optionalDependencies:
+      rollup: 4.60.1
+
+  '@rollup/pluginutils@5.3.0(rollup@4.60.1)':
+    dependencies:
+      '@types/estree': 1.0.8
+      estree-walker: 2.0.2
+      picomatch: 4.0.4
+    optionalDependencies:
+      rollup: 4.60.1
+
+  '@rollup/rollup-android-arm-eabi@4.60.1':
+    optional: true
+
+  '@rollup/rollup-android-arm64@4.60.1':
+    optional: true
+
+  '@rollup/rollup-darwin-arm64@4.60.1':
+    optional: true
+
+  '@rollup/rollup-darwin-x64@4.60.1':
+    optional: true
+
+  '@rollup/rollup-freebsd-arm64@4.60.1':
+    optional: true
+
+  '@rollup/rollup-freebsd-x64@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-arm-gnueabihf@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-arm-musleabihf@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-arm64-gnu@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-arm64-musl@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-loong64-gnu@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-loong64-musl@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-ppc64-gnu@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-ppc64-musl@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-riscv64-gnu@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-riscv64-musl@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-s390x-gnu@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-x64-gnu@4.60.1':
+    optional: true
+
+  '@rollup/rollup-linux-x64-musl@4.60.1':
+    optional: true
+
+  '@rollup/rollup-openbsd-x64@4.60.1':
+    optional: true
+
+  '@rollup/rollup-openharmony-arm64@4.60.1':
+    optional: true
+
+  '@rollup/rollup-win32-arm64-msvc@4.60.1':
+    optional: true
+
+  '@rollup/rollup-win32-ia32-msvc@4.60.1':
+    optional: true
+
+  '@rollup/rollup-win32-x64-gnu@4.60.1':
+    optional: true
+
+  '@rollup/rollup-win32-x64-msvc@4.60.1':
+    optional: true
+
+  '@simple-git/args-pathspec@1.0.1': {}
+
+  '@simple-git/argv-parser@1.0.2':
+    dependencies:
+      '@simple-git/args-pathspec': 1.0.1
+
+  '@sindresorhus/base62@1.0.0': {}
+
+  '@sindresorhus/is@7.2.0': {}
+
+  '@sindresorhus/merge-streams@4.0.0': {}
+
+  '@speed-highlight/core@1.2.15': {}
+
+  '@standard-schema/spec@1.1.0': {}
+
+  '@stylistic/eslint-plugin@5.10.0(eslint@10.2.0(jiti@2.6.1))':
+    dependencies:
+      '@eslint-community/eslint-utils': 4.9.1(eslint@10.2.0(jiti@2.6.1))
+      '@typescript-eslint/types': 8.58.0
+      eslint: 10.2.0(jiti@2.6.1)
+      eslint-visitor-keys: 4.2.1
+      espree: 10.4.0
+      estraverse: 5.3.0
+      picomatch: 4.0.4
+
+  '@swc/helpers@0.5.21':
+    dependencies:
+      tslib: 2.8.1
+
+  '@tailwindcss/node@4.2.2':
+    dependencies:
+      '@jridgewell/remapping': 2.3.5
+      enhanced-resolve: 5.20.1
+      jiti: 2.6.1
+      lightningcss: 1.32.0
+      magic-string: 0.30.21
+      source-map-js: 1.2.1
+      tailwindcss: 4.2.2
+
+  '@tailwindcss/oxide-android-arm64@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide-darwin-arm64@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide-darwin-x64@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide-freebsd-x64@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm64-gnu@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm64-musl@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide-linux-x64-gnu@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide-linux-x64-musl@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide-wasm32-wasi@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide-win32-arm64-msvc@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide-win32-x64-msvc@4.2.2':
+    optional: true
+
+  '@tailwindcss/oxide@4.2.2':
+    optionalDependencies:
+      '@tailwindcss/oxide-android-arm64': 4.2.2
+      '@tailwindcss/oxide-darwin-arm64': 4.2.2
+      '@tailwindcss/oxide-darwin-x64': 4.2.2
+      '@tailwindcss/oxide-freebsd-x64': 4.2.2
+      '@tailwindcss/oxide-linux-arm-gnueabihf': 4.2.2
+      '@tailwindcss/oxide-linux-arm64-gnu': 4.2.2
+      '@tailwindcss/oxide-linux-arm64-musl': 4.2.2
+      '@tailwindcss/oxide-linux-x64-gnu': 4.2.2
+      '@tailwindcss/oxide-linux-x64-musl': 4.2.2
+      '@tailwindcss/oxide-wasm32-wasi': 4.2.2
+      '@tailwindcss/oxide-win32-arm64-msvc': 4.2.2
+      '@tailwindcss/oxide-win32-x64-msvc': 4.2.2
+
+  '@tailwindcss/postcss@4.2.2':
+    dependencies:
+      '@alloc/quick-lru': 5.2.0
+      '@tailwindcss/node': 4.2.2
+      '@tailwindcss/oxide': 4.2.2
+      postcss: 8.5.8
+      tailwindcss: 4.2.2
+
+  '@tailwindcss/vite@4.2.2(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))':
+    dependencies:
+      '@tailwindcss/node': 4.2.2
+      '@tailwindcss/oxide': 4.2.2
+      tailwindcss: 4.2.2
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+
+  '@tanstack/table-core@8.21.3': {}
+
+  '@tanstack/virtual-core@3.13.23': {}
+
+  '@tanstack/vue-table@8.21.3(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@tanstack/table-core': 8.21.3
+      vue: 3.5.32(typescript@6.0.3)
+
+  '@tanstack/vue-virtual@3.13.23(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@tanstack/virtual-core': 3.13.23
+      vue: 3.5.32(typescript@6.0.3)
+
+  '@tiptap/core@3.22.2(@tiptap/pm@3.22.2)':
+    dependencies:
+      '@tiptap/pm': 3.22.2
+
+  '@tiptap/extension-blockquote@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-bold@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-bubble-menu@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)':
+    dependencies:
+      '@floating-ui/dom': 1.7.6
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+
+  '@tiptap/extension-bullet-list@3.22.2(@tiptap/extension-list@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/extension-list': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-code-block@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+
+  '@tiptap/extension-code@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-collaboration@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))(yjs@13.6.30)':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+      '@tiptap/y-tiptap': 3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30)
+      yjs: 13.6.30
+
+  '@tiptap/extension-document@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-drag-handle-vue-3@3.22.2(@tiptap/extension-drag-handle@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/extension-collaboration@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))(yjs@13.6.30))(@tiptap/extension-node-range@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30)))(@tiptap/pm@3.22.2)(@tiptap/vue-3@3.22.2(@floating-ui/dom@1.7.6)(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@tiptap/extension-drag-handle': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/extension-collaboration@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))(yjs@13.6.30))(@tiptap/extension-node-range@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))
+      '@tiptap/pm': 3.22.2
+      '@tiptap/vue-3': 3.22.2(@floating-ui/dom@1.7.6)(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(vue@3.5.32(typescript@6.0.3))
+      vue: 3.5.32(typescript@6.0.3)
+
+  '@tiptap/extension-drag-handle@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/extension-collaboration@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))(yjs@13.6.30))(@tiptap/extension-node-range@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))':
+    dependencies:
+      '@floating-ui/dom': 1.7.6
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/extension-collaboration': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30))(yjs@13.6.30)
+      '@tiptap/extension-node-range': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+      '@tiptap/y-tiptap': 3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30)
+
+  '@tiptap/extension-dropcursor@3.22.2(@tiptap/extensions@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/extensions': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-floating-menu@3.22.2(@floating-ui/dom@1.7.6)(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)':
+    dependencies:
+      '@floating-ui/dom': 1.7.6
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+
+  '@tiptap/extension-gapcursor@3.22.2(@tiptap/extensions@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/extensions': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-hard-break@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-heading@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-horizontal-rule@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+
+  '@tiptap/extension-image@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-italic@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-link@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+      linkifyjs: 4.3.2
+
+  '@tiptap/extension-list-item@3.22.2(@tiptap/extension-list@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/extension-list': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-list-keymap@3.22.2(@tiptap/extension-list@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/extension-list': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-list@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+
+  '@tiptap/extension-mention@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(@tiptap/suggestion@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+      '@tiptap/suggestion': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-node-range@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+
+  '@tiptap/extension-ordered-list@3.22.2(@tiptap/extension-list@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/extension-list': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-paragraph@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-placeholder@3.22.2(@tiptap/extensions@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/extensions': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-strike@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-text@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extension-underline@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+
+  '@tiptap/extensions@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+
+  '@tiptap/markdown@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+      marked: 17.0.6
+
+  '@tiptap/pm@3.22.2':
+    dependencies:
+      prosemirror-changeset: 2.4.0
+      prosemirror-collab: 1.3.1
+      prosemirror-commands: 1.7.1
+      prosemirror-dropcursor: 1.8.2
+      prosemirror-gapcursor: 1.4.1
+      prosemirror-history: 1.5.0
+      prosemirror-inputrules: 1.5.1
+      prosemirror-keymap: 1.2.3
+      prosemirror-markdown: 1.13.4
+      prosemirror-menu: 1.3.0
+      prosemirror-model: 1.25.4
+      prosemirror-schema-basic: 1.2.4
+      prosemirror-schema-list: 1.5.1
+      prosemirror-state: 1.4.4
+      prosemirror-tables: 1.8.5
+      prosemirror-trailing-node: 3.0.0(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)
+      prosemirror-transform: 1.12.0
+      prosemirror-view: 1.41.8
+
+  '@tiptap/starter-kit@3.22.2':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/extension-blockquote': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-bold': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-bullet-list': 3.22.2(@tiptap/extension-list@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))
+      '@tiptap/extension-code': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-code-block': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/extension-document': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-dropcursor': 3.22.2(@tiptap/extensions@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))
+      '@tiptap/extension-gapcursor': 3.22.2(@tiptap/extensions@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))
+      '@tiptap/extension-hard-break': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-heading': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-horizontal-rule': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/extension-italic': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-link': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/extension-list': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/extension-list-item': 3.22.2(@tiptap/extension-list@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))
+      '@tiptap/extension-list-keymap': 3.22.2(@tiptap/extension-list@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))
+      '@tiptap/extension-ordered-list': 3.22.2(@tiptap/extension-list@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2))
+      '@tiptap/extension-paragraph': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-strike': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-text': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extension-underline': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))
+      '@tiptap/extensions': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+
+  '@tiptap/suggestion@3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)':
+    dependencies:
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+
+  '@tiptap/vue-3@3.22.2(@floating-ui/dom@1.7.6)(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@floating-ui/dom': 1.7.6
+      '@tiptap/core': 3.22.2(@tiptap/pm@3.22.2)
+      '@tiptap/pm': 3.22.2
+      vue: 3.5.32(typescript@6.0.3)
+    optionalDependencies:
+      '@tiptap/extension-bubble-menu': 3.22.2(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+      '@tiptap/extension-floating-menu': 3.22.2(@floating-ui/dom@1.7.6)(@tiptap/core@3.22.2(@tiptap/pm@3.22.2))(@tiptap/pm@3.22.2)
+
+  '@tiptap/y-tiptap@3.0.2(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8)(y-protocols@1.0.7(yjs@13.6.30))(yjs@13.6.30)':
+    dependencies:
+      lib0: 0.2.117
+      prosemirror-model: 1.25.4
+      prosemirror-state: 1.4.4
+      prosemirror-view: 1.41.8
+      y-protocols: 1.0.7(yjs@13.6.30)
+      yjs: 13.6.30
+
+  '@tootallnate/once@1.1.2':
+    optional: true
+
+  '@tybys/wasm-util@0.10.1':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
+  '@types/chai@5.2.3':
+    dependencies:
+      '@types/deep-eql': 4.0.2
+      assertion-error: 2.0.1
+
+  '@types/deep-eql@4.0.2': {}
+
+  '@types/esrecurse@4.3.1': {}
+
+  '@types/estree@1.0.8': {}
+
+  '@types/fs-extra@8.1.5':
+    dependencies:
+      '@types/node': 25.6.0
+
+  '@types/json-schema@7.0.15': {}
+
+  '@types/linkify-it@5.0.0': {}
+
+  '@types/markdown-it@14.1.2':
+    dependencies:
+      '@types/linkify-it': 5.0.0
+      '@types/mdurl': 2.0.0
+
+  '@types/mdurl@2.0.0': {}
+
+  '@types/node@25.6.0':
+    dependencies:
+      undici-types: 7.19.2
+
+  '@types/resolve@1.20.2': {}
+
+  '@types/slice-ansi@4.0.0': {}
+
+  '@types/web-bluetooth@0.0.20': {}
+
+  '@types/web-bluetooth@0.0.21': {}
+
+  '@types/whatwg-mimetype@3.0.2': {}
+
+  '@types/ws@8.18.1':
+    dependencies:
+      '@types/node': 25.6.0
+
+  '@typescript-eslint/eslint-plugin@8.58.0(@typescript-eslint/parser@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3))(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)':
+    dependencies:
+      '@eslint-community/regexpp': 4.12.2
+      '@typescript-eslint/parser': 8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+      '@typescript-eslint/scope-manager': 8.58.0
+      '@typescript-eslint/type-utils': 8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+      '@typescript-eslint/utils': 8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+      '@typescript-eslint/visitor-keys': 8.58.0
+      eslint: 10.2.0(jiti@2.6.1)
+      ignore: 7.0.5
+      natural-compare: 1.4.0
+      ts-api-utils: 2.5.0(typescript@6.0.3)
+      typescript: 6.0.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/parser@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)':
+    dependencies:
+      '@typescript-eslint/scope-manager': 8.58.0
+      '@typescript-eslint/types': 8.58.0
+      '@typescript-eslint/typescript-estree': 8.58.0(typescript@6.0.3)
+      '@typescript-eslint/visitor-keys': 8.58.0
+      debug: 4.4.3
+      eslint: 10.2.0(jiti@2.6.1)
+      typescript: 6.0.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/project-service@8.58.0(typescript@6.0.3)':
+    dependencies:
+      '@typescript-eslint/tsconfig-utils': 8.58.0(typescript@6.0.3)
+      '@typescript-eslint/types': 8.58.0
+      debug: 4.4.3
+      typescript: 6.0.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/scope-manager@8.58.0':
+    dependencies:
+      '@typescript-eslint/types': 8.58.0
+      '@typescript-eslint/visitor-keys': 8.58.0
+
+  '@typescript-eslint/tsconfig-utils@8.58.0(typescript@6.0.3)':
+    dependencies:
+      typescript: 6.0.3
+
+  '@typescript-eslint/type-utils@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)':
+    dependencies:
+      '@typescript-eslint/types': 8.58.0
+      '@typescript-eslint/typescript-estree': 8.58.0(typescript@6.0.3)
+      '@typescript-eslint/utils': 8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+      debug: 4.4.3
+      eslint: 10.2.0(jiti@2.6.1)
+      ts-api-utils: 2.5.0(typescript@6.0.3)
+      typescript: 6.0.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/types@8.58.0': {}
+
+  '@typescript-eslint/typescript-estree@8.58.0(typescript@6.0.3)':
+    dependencies:
+      '@typescript-eslint/project-service': 8.58.0(typescript@6.0.3)
+      '@typescript-eslint/tsconfig-utils': 8.58.0(typescript@6.0.3)
+      '@typescript-eslint/types': 8.58.0
+      '@typescript-eslint/visitor-keys': 8.58.0
+      debug: 4.4.3
+      minimatch: 10.2.5
+      semver: 7.7.4
+      tinyglobby: 0.2.15
+      ts-api-utils: 2.5.0(typescript@6.0.3)
+      typescript: 6.0.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/utils@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)':
+    dependencies:
+      '@eslint-community/eslint-utils': 4.9.1(eslint@10.2.0(jiti@2.6.1))
+      '@typescript-eslint/scope-manager': 8.58.0
+      '@typescript-eslint/types': 8.58.0
+      '@typescript-eslint/typescript-estree': 8.58.0(typescript@6.0.3)
+      eslint: 10.2.0(jiti@2.6.1)
+      typescript: 6.0.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/visitor-keys@8.58.0':
+    dependencies:
+      '@typescript-eslint/types': 8.58.0
+      eslint-visitor-keys: 5.0.1
+
+  '@unhead/vue@2.1.13(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      hookable: 6.1.0
+      unhead: 2.1.13
+      vue: 3.5.32(typescript@6.0.3)
+
+  '@unrs/resolver-binding-android-arm-eabi@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-android-arm64@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-darwin-arm64@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-darwin-x64@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-freebsd-x64@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-linux-arm-gnueabihf@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-linux-arm-musleabihf@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-linux-arm64-gnu@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-linux-arm64-musl@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-linux-ppc64-gnu@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-linux-riscv64-gnu@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-linux-riscv64-musl@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-linux-s390x-gnu@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-linux-x64-gnu@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-linux-x64-musl@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-wasm32-wasi@1.11.1':
+    dependencies:
+      '@napi-rs/wasm-runtime': 0.2.12
+    optional: true
+
+  '@unrs/resolver-binding-win32-arm64-msvc@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-win32-ia32-msvc@1.11.1':
+    optional: true
+
+  '@unrs/resolver-binding-win32-x64-msvc@1.11.1':
+    optional: true
+
+  '@vercel/nft@1.5.0(encoding@0.1.13)(rollup@4.60.1)':
+    dependencies:
+      '@mapbox/node-pre-gyp': 2.0.3(encoding@0.1.13)
+      '@rollup/pluginutils': 5.3.0(rollup@4.60.1)
+      acorn: 8.16.0
+      acorn-import-attributes: 1.9.5(acorn@8.16.0)
+      async-sema: 3.1.1
+      bindings: 1.5.0
+      estree-walker: 2.0.2
+      glob: 13.0.6
+      graceful-fs: 4.2.11
+      node-gyp-build: 4.8.4
+      picomatch: 4.0.4
+      resolve-from: 5.0.0
+    transitivePeerDependencies:
+      - encoding
+      - rollup
+      - supports-color
+
+  '@vitejs/plugin-vue-jsx@5.1.5(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.0)
+      '@babel/plugin-transform-typescript': 7.28.6(@babel/core@7.29.0)
+      '@rolldown/pluginutils': 1.0.0-rc.13
+      '@vue/babel-plugin-jsx': 2.0.1(@babel/core@7.29.0)
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+      vue: 3.5.32(typescript@6.0.3)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@vitejs/plugin-vue@6.0.5(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@rolldown/pluginutils': 1.0.0-rc.2
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+      vue: 3.5.32(typescript@6.0.3)
+
+  '@vitest/expect@4.1.4':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@vitest/spy': 4.1.4
+      '@vitest/utils': 4.1.4
+      chai: 6.2.2
+      tinyrainbow: 3.1.0
+
+  '@vitest/mocker@4.1.4(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))':
+    dependencies:
+      '@vitest/spy': 4.1.4
+      estree-walker: 3.0.3
+      magic-string: 0.30.21
+    optionalDependencies:
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+
+  '@vitest/pretty-format@4.1.4':
+    dependencies:
+      tinyrainbow: 3.1.0
+
+  '@vitest/runner@4.1.4':
+    dependencies:
+      '@vitest/utils': 4.1.4
+      pathe: 2.0.3
+
+  '@vitest/snapshot@4.1.4':
+    dependencies:
+      '@vitest/pretty-format': 4.1.4
+      '@vitest/utils': 4.1.4
+      magic-string: 0.30.21
+      pathe: 2.0.3
+
+  '@vitest/spy@4.1.4': {}
+
+  '@vitest/utils@4.1.4':
+    dependencies:
+      '@vitest/pretty-format': 4.1.4
+      convert-source-map: 2.0.0
+      tinyrainbow: 3.1.0
+
+  '@volar/language-core@2.4.28':
+    dependencies:
+      '@volar/source-map': 2.4.28
+
+  '@volar/source-map@2.4.28': {}
+
+  '@volar/typescript@2.4.28':
+    dependencies:
+      '@volar/language-core': 2.4.28
+      path-browserify: 1.0.1
+      vscode-uri: 3.1.0
+
+  '@vue-macros/common@3.1.2(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@vue/compiler-sfc': 3.5.32
+      ast-kit: 2.2.0
+      local-pkg: 1.1.2
+      magic-string-ast: 1.0.3
+      unplugin-utils: 0.3.1
+    optionalDependencies:
+      vue: 3.5.32(typescript@6.0.3)
+
+  '@vue/babel-helper-vue-transform-on@2.0.1': {}
+
+  '@vue/babel-plugin-jsx@2.0.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/helper-module-imports': 7.28.6
+      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
+      '@babel/template': 7.28.6
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
+      '@vue/babel-helper-vue-transform-on': 2.0.1
+      '@vue/babel-plugin-resolve-type': 2.0.1(@babel/core@7.29.0)
+      '@vue/shared': 3.5.32
+    optionalDependencies:
+      '@babel/core': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@vue/babel-plugin-resolve-type@2.0.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      '@babel/core': 7.29.0
+      '@babel/helper-module-imports': 7.28.6
+      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/parser': 7.29.2
+      '@vue/compiler-sfc': 3.5.32
+    transitivePeerDependencies:
+      - supports-color
+
+  '@vue/compiler-core@3.5.32':
+    dependencies:
+      '@babel/parser': 7.29.2
+      '@vue/shared': 3.5.32
+      entities: 7.0.1
+      estree-walker: 2.0.2
+      source-map-js: 1.2.1
+
+  '@vue/compiler-dom@3.5.32':
+    dependencies:
+      '@vue/compiler-core': 3.5.32
+      '@vue/shared': 3.5.32
+
+  '@vue/compiler-sfc@3.5.32':
+    dependencies:
+      '@babel/parser': 7.29.2
+      '@vue/compiler-core': 3.5.32
+      '@vue/compiler-dom': 3.5.32
+      '@vue/compiler-ssr': 3.5.32
+      '@vue/shared': 3.5.32
+      estree-walker: 2.0.2
+      magic-string: 0.30.21
+      postcss: 8.5.8
+      source-map-js: 1.2.1
+
+  '@vue/compiler-ssr@3.5.32':
+    dependencies:
+      '@vue/compiler-dom': 3.5.32
+      '@vue/shared': 3.5.32
+
+  '@vue/devtools-api@6.6.4': {}
+
+  '@vue/devtools-api@7.7.9':
+    dependencies:
+      '@vue/devtools-kit': 7.7.9
+
+  '@vue/devtools-api@8.1.1':
+    dependencies:
+      '@vue/devtools-kit': 8.1.1
+
+  '@vue/devtools-core@8.1.1(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@vue/devtools-kit': 8.1.1
+      '@vue/devtools-shared': 8.1.1
+      vue: 3.5.32(typescript@6.0.3)
+
+  '@vue/devtools-kit@7.7.9':
+    dependencies:
+      '@vue/devtools-shared': 7.7.9
+      birpc: 2.9.0
+      hookable: 5.5.3
+      mitt: 3.0.1
+      perfect-debounce: 1.0.0
+      speakingurl: 14.0.1
+      superjson: 2.2.6
+
+  '@vue/devtools-kit@8.1.1':
+    dependencies:
+      '@vue/devtools-shared': 8.1.1
+      birpc: 2.9.0
+      hookable: 5.5.3
+      perfect-debounce: 2.1.0
+
+  '@vue/devtools-shared@7.7.9':
+    dependencies:
+      rfdc: 1.4.1
+
+  '@vue/devtools-shared@8.1.1': {}
+
+  '@vue/language-core@3.2.6':
+    dependencies:
+      '@volar/language-core': 2.4.28
+      '@vue/compiler-dom': 3.5.32
+      '@vue/shared': 3.5.32
+      alien-signals: 3.1.2
+      muggle-string: 0.4.1
+      path-browserify: 1.0.1
+      picomatch: 4.0.4
+
+  '@vue/reactivity@3.5.32':
+    dependencies:
+      '@vue/shared': 3.5.32
+
+  '@vue/runtime-core@3.5.32':
+    dependencies:
+      '@vue/reactivity': 3.5.32
+      '@vue/shared': 3.5.32
+
+  '@vue/runtime-dom@3.5.32':
+    dependencies:
+      '@vue/reactivity': 3.5.32
+      '@vue/runtime-core': 3.5.32
+      '@vue/shared': 3.5.32
+      csstype: 3.2.3
+
+  '@vue/server-renderer@3.5.32(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@vue/compiler-ssr': 3.5.32
+      '@vue/shared': 3.5.32
+      vue: 3.5.32(typescript@6.0.3)
+
+  '@vue/shared@3.5.32': {}
+
+  '@vue/test-utils@2.4.6':
+    dependencies:
+      js-beautify: 1.15.4
+      vue-component-type-helpers: 2.2.12
+
+  '@vueuse/core@10.11.1(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@types/web-bluetooth': 0.0.20
+      '@vueuse/metadata': 10.11.1
+      '@vueuse/shared': 10.11.1(vue@3.5.32(typescript@6.0.3))
+      vue-demi: 0.14.10(vue@3.5.32(typescript@6.0.3))
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - vue
+
+  '@vueuse/core@14.2.1(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@types/web-bluetooth': 0.0.21
+      '@vueuse/metadata': 14.2.1
+      '@vueuse/shared': 14.2.1(vue@3.5.32(typescript@6.0.3))
+      vue: 3.5.32(typescript@6.0.3)
+
+  '@vueuse/integrations@14.2.1(change-case@5.4.4)(fuse.js@7.3.0)(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      '@vueuse/core': 14.2.1(vue@3.5.32(typescript@6.0.3))
+      '@vueuse/shared': 14.2.1(vue@3.5.32(typescript@6.0.3))
+      vue: 3.5.32(typescript@6.0.3)
+    optionalDependencies:
+      change-case: 5.4.4
+      fuse.js: 7.3.0
+
+  '@vueuse/metadata@10.11.1': {}
+
+  '@vueuse/metadata@14.2.1': {}
+
+  '@vueuse/shared@10.11.1(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      vue-demi: 0.14.10(vue@3.5.32(typescript@6.0.3))
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - vue
+
+  '@vueuse/shared@14.2.1(vue@3.5.32(typescript@6.0.3))':
+    dependencies:
+      vue: 3.5.32(typescript@6.0.3)
+
+  '@xmldom/xmldom@0.8.12': {}
+
+  abbrev@1.1.1:
+    optional: true
+
+  abbrev@2.0.0: {}
+
+  abbrev@3.0.1: {}
+
+  abort-controller@3.0.0:
+    dependencies:
+      event-target-shim: 5.0.1
+
+  acorn-import-attributes@1.9.5(acorn@8.16.0):
+    dependencies:
+      acorn: 8.16.0
+
+  acorn-jsx@5.3.2(acorn@8.16.0):
+    dependencies:
+      acorn: 8.16.0
+
+  acorn@8.16.0: {}
+
+  agent-base@6.0.2:
+    dependencies:
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
+  agent-base@7.1.4: {}
+
+  agentkeepalive@4.6.0:
+    dependencies:
+      humanize-ms: 1.2.1
+    optional: true
+
+  aggregate-error@3.1.0:
+    dependencies:
+      clean-stack: 2.2.0
+      indent-string: 4.0.0
+    optional: true
+
+  ajv@6.14.0:
+    dependencies:
+      fast-deep-equal: 3.1.3
+      fast-json-stable-stringify: 2.1.0
+      json-schema-traverse: 0.4.1
+      uri-js: 4.4.1
+
+  alien-signals@3.1.2: {}
+
+  ansi-regex@5.0.1: {}
+
+  ansi-regex@6.2.2: {}
+
+  ansi-styles@4.3.0:
+    dependencies:
+      color-convert: 2.0.1
+
+  ansi-styles@6.2.3: {}
+
+  ansis@4.2.0: {}
+
+  anymatch@3.1.3:
+    dependencies:
+      normalize-path: 3.0.0
+      picomatch: 2.3.2
+
+  aproba@2.1.0:
+    optional: true
+
+  archiver-utils@5.0.2:
+    dependencies:
+      glob: 10.5.0
+      graceful-fs: 4.2.11
+      is-stream: 2.0.1
+      lazystream: 1.0.1
+      lodash: 4.18.1
+      normalize-path: 3.0.0
+      readable-stream: 4.7.0
+
+  archiver@7.0.1:
+    dependencies:
+      archiver-utils: 5.0.2
+      async: 3.2.6
+      buffer-crc32: 1.0.0
+      readable-stream: 4.7.0
+      readdir-glob: 1.1.3
+      tar-stream: 3.1.8
+      zip-stream: 6.0.1
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - react-native-b4a
+
+  are-docs-informative@0.0.2: {}
+
+  are-we-there-yet@3.0.1:
+    dependencies:
+      delegates: 1.0.0
+      readable-stream: 3.6.2
+    optional: true
+
+  argparse@2.0.1: {}
+
+  aria-hidden@1.2.6:
+    dependencies:
+      tslib: 2.8.1
+
+  assertion-error@2.0.1: {}
+
+  ast-kit@2.2.0:
+    dependencies:
+      '@babel/parser': 7.29.2
+      pathe: 2.0.3
+
+  ast-walker-scope@0.8.3:
+    dependencies:
+      '@babel/parser': 7.29.2
+      ast-kit: 2.2.0
+
+  astral-regex@2.0.0: {}
+
+  async-sema@3.1.1: {}
+
+  async@3.2.6: {}
+
+  asynckit@0.4.0: {}
+
+  at-least-node@1.0.0: {}
+
+  autoprefixer@10.4.27(postcss@8.5.8):
+    dependencies:
+      browserslist: 4.28.2
+      caniuse-lite: 1.0.30001786
+      fraction.js: 5.3.4
+      picocolors: 1.1.1
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  b4a@1.8.0: {}
+
+  balanced-match@1.0.2: {}
+
+  balanced-match@4.0.4: {}
+
+  bare-events@2.8.2: {}
+
+  bare-fs@4.6.0:
+    dependencies:
+      bare-events: 2.8.2
+      bare-path: 3.0.0
+      bare-stream: 2.12.0(bare-events@2.8.2)
+      bare-url: 2.4.0
+      fast-fifo: 1.3.2
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - react-native-b4a
+
+  bare-os@3.8.7: {}
+
+  bare-path@3.0.0:
+    dependencies:
+      bare-os: 3.8.7
+
+  bare-stream@2.12.0(bare-events@2.8.2):
+    dependencies:
+      streamx: 2.25.0
+      teex: 1.0.1
+    optionalDependencies:
+      bare-events: 2.8.2
+    transitivePeerDependencies:
+      - react-native-b4a
+
+  bare-url@2.4.0:
+    dependencies:
+      bare-path: 3.0.0
+
+  base64-js@1.5.1: {}
+
+  baseline-browser-mapping@2.10.16: {}
+
+  big-integer@1.6.52: {}
+
+  bindings@1.5.0:
+    dependencies:
+      file-uri-to-path: 1.0.0
+
+  birpc@2.9.0: {}
+
+  birpc@4.0.0: {}
+
+  bl@4.1.0:
+    dependencies:
+      buffer: 5.7.1
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
+  boolbase@1.0.0: {}
+
+  bplist-parser@0.3.2:
+    dependencies:
+      big-integer: 1.6.52
+
+  brace-expansion@1.1.13:
+    dependencies:
+      balanced-match: 1.0.2
+      concat-map: 0.0.1
+    optional: true
+
+  brace-expansion@2.0.3:
+    dependencies:
+      balanced-match: 1.0.2
+
+  brace-expansion@5.0.5:
+    dependencies:
+      balanced-match: 4.0.4
+
+  braces@3.0.3:
+    dependencies:
+      fill-range: 7.1.1
+
+  browserslist@4.28.2:
+    dependencies:
+      baseline-browser-mapping: 2.10.16
+      caniuse-lite: 1.0.30001786
+      electron-to-chromium: 1.5.331
+      node-releases: 2.0.37
+      update-browserslist-db: 1.2.3(browserslist@4.28.2)
+
+  buffer-crc32@0.2.13: {}
+
+  buffer-crc32@1.0.0: {}
+
+  buffer-from@1.1.2: {}
+
+  buffer@5.7.1:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
+  buffer@6.0.3:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
+  builtin-modules@5.0.0: {}
+
+  bundle-name@4.1.0:
+    dependencies:
+      run-applescript: 7.1.0
+
+  bundle-require@5.1.0(esbuild@0.27.7):
+    dependencies:
+      esbuild: 0.27.7
+      load-tsconfig: 0.2.5
+
+  c12@3.3.4(magicast@0.5.2):
+    dependencies:
+      chokidar: 5.0.0
+      confbox: 0.2.4
+      defu: 6.1.6
+      dotenv: 17.4.2
+      exsolve: 1.0.8
+      giget: 3.2.0
+      jiti: 2.6.1
+      ohash: 2.0.11
+      pathe: 2.0.3
+      perfect-debounce: 2.1.0
+      pkg-types: 2.3.0
+      rc9: 3.0.1
+    optionalDependencies:
+      magicast: 0.5.2
+
+  cac@6.7.14: {}
+
+  cac@7.0.0: {}
+
+  cacache@15.3.0:
+    dependencies:
+      '@npmcli/fs': 1.1.1
+      '@npmcli/move-file': 1.1.2
+      chownr: 2.0.0
+      fs-minipass: 2.1.0
+      glob: 7.2.3
+      infer-owner: 1.0.4
+      lru-cache: 6.0.0
+      minipass: 3.3.6
+      minipass-collect: 1.0.2
+      minipass-flush: 1.0.7
+      minipass-pipeline: 1.2.4
+      mkdirp: 1.0.4
+      p-map: 4.0.0
+      promise-inflight: 1.0.1
+      rimraf: 3.0.2
+      ssri: 8.0.1
+      tar: 6.2.1
+      unique-filename: 1.1.1
+    transitivePeerDependencies:
+      - bluebird
+    optional: true
+
+  call-bind-apply-helpers@1.0.2:
+    dependencies:
+      es-errors: 1.3.0
+      function-bind: 1.1.2
+
+  caniuse-api@3.0.0:
+    dependencies:
+      browserslist: 4.28.2
+      caniuse-lite: 1.0.30001786
+      lodash.memoize: 4.1.2
+      lodash.uniq: 4.5.0
+
+  caniuse-lite@1.0.30001786: {}
+
+  chai@6.2.2: {}
+
+  change-case@5.4.4: {}
+
+  chokidar@4.0.3:
+    dependencies:
+      readdirp: 4.1.2
+
+  chokidar@5.0.0:
+    dependencies:
+      readdirp: 5.0.0
+
+  chownr@1.1.4: {}
+
+  chownr@2.0.0: {}
+
+  chownr@3.0.0: {}
+
+  ci-info@4.4.0: {}
+
+  citty@0.1.6:
+    dependencies:
+      consola: 3.4.2
+
+  citty@0.2.2: {}
+
+  clean-regexp@1.0.0:
+    dependencies:
+      escape-string-regexp: 1.0.5
+
+  clean-stack@2.2.0:
+    optional: true
+
+  cliui@9.0.1:
+    dependencies:
+      string-width: 7.2.0
+      strip-ansi: 7.2.0
+      wrap-ansi: 9.0.2
+
+  cluster-key-slot@1.1.2: {}
+
+  color-convert@2.0.1:
+    dependencies:
+      color-name: 1.1.4
+
+  color-name@1.1.4: {}
+
+  color-support@1.1.3:
+    optional: true
+
+  colortranslator@5.0.0: {}
+
+  combined-stream@1.0.8:
+    dependencies:
+      delayed-stream: 1.0.0
+
+  commander@10.0.1: {}
+
+  commander@11.1.0: {}
+
+  commander@12.1.0: {}
+
+  commander@2.20.3: {}
+
+  commander@9.5.0: {}
+
+  comment-parser@1.4.6: {}
+
+  commondir@1.0.1: {}
+
+  compatx@0.2.0: {}
+
+  compress-commons@6.0.2:
+    dependencies:
+      crc-32: 1.2.2
+      crc32-stream: 6.0.0
+      is-stream: 2.0.1
+      normalize-path: 3.0.0
+      readable-stream: 4.7.0
+
+  concat-map@0.0.1:
+    optional: true
+
+  confbox@0.1.8: {}
+
+  confbox@0.2.4: {}
+
+  config-chain@1.1.13:
+    dependencies:
+      ini: 1.3.8
+      proto-list: 1.2.4
+
+  consola@3.4.2: {}
+
+  console-control-strings@1.1.0:
+    optional: true
+
+  convert-source-map@2.0.0: {}
+
+  cookie-es@1.2.3: {}
+
+  cookie-es@2.0.1: {}
+
+  cookie-es@3.1.1: {}
+
+  copy-anything@4.0.5:
+    dependencies:
+      is-what: 5.5.0
+
+  core-js-compat@3.49.0:
+    dependencies:
+      browserslist: 4.28.2
+
+  core-util-is@1.0.3: {}
+
+  crc-32@1.2.2: {}
+
+  crc32-stream@6.0.0:
+    dependencies:
+      crc-32: 1.2.2
+      readable-stream: 4.7.0
+
+  crelt@1.0.6: {}
+
+  croner@10.0.1: {}
+
+  cross-fetch@3.2.0(encoding@0.1.13):
+    dependencies:
+      node-fetch: 2.7.0(encoding@0.1.13)
+    transitivePeerDependencies:
+      - encoding
+
+  cross-spawn@7.0.6:
+    dependencies:
+      path-key: 3.1.1
+      shebang-command: 2.0.0
+      which: 2.0.2
+
+  crossws@0.3.5:
+    dependencies:
+      uncrypto: 0.1.3
+
+  crossws@0.4.4(srvx@0.11.15):
+    optionalDependencies:
+      srvx: 0.11.15
+
+  css-declaration-sorter@7.3.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+
+  css-select@5.2.2:
+    dependencies:
+      boolbase: 1.0.0
+      css-what: 6.2.2
+      domhandler: 5.0.3
+      domutils: 3.2.2
+      nth-check: 2.1.1
+
+  css-tree@2.2.1:
+    dependencies:
+      mdn-data: 2.0.28
+      source-map-js: 1.2.1
+
+  css-tree@3.2.1:
+    dependencies:
+      mdn-data: 2.27.1
+      source-map-js: 1.2.1
+
+  css-what@6.2.2: {}
+
+  cssesc@3.0.0: {}
+
+  cssfilter@0.0.10:
+    optional: true
+
+  cssnano-preset-default@7.0.12(postcss@8.5.8):
+    dependencies:
+      browserslist: 4.28.2
+      css-declaration-sorter: 7.3.1(postcss@8.5.8)
+      cssnano-utils: 5.0.1(postcss@8.5.8)
+      postcss: 8.5.8
+      postcss-calc: 10.1.1(postcss@8.5.8)
+      postcss-colormin: 7.0.7(postcss@8.5.8)
+      postcss-convert-values: 7.0.9(postcss@8.5.8)
+      postcss-discard-comments: 7.0.6(postcss@8.5.8)
+      postcss-discard-duplicates: 7.0.2(postcss@8.5.8)
+      postcss-discard-empty: 7.0.1(postcss@8.5.8)
+      postcss-discard-overridden: 7.0.1(postcss@8.5.8)
+      postcss-merge-longhand: 7.0.5(postcss@8.5.8)
+      postcss-merge-rules: 7.0.8(postcss@8.5.8)
+      postcss-minify-font-values: 7.0.1(postcss@8.5.8)
+      postcss-minify-gradients: 7.0.2(postcss@8.5.8)
+      postcss-minify-params: 7.0.6(postcss@8.5.8)
+      postcss-minify-selectors: 7.0.6(postcss@8.5.8)
+      postcss-normalize-charset: 7.0.1(postcss@8.5.8)
+      postcss-normalize-display-values: 7.0.1(postcss@8.5.8)
+      postcss-normalize-positions: 7.0.1(postcss@8.5.8)
+      postcss-normalize-repeat-style: 7.0.1(postcss@8.5.8)
+      postcss-normalize-string: 7.0.1(postcss@8.5.8)
+      postcss-normalize-timing-functions: 7.0.1(postcss@8.5.8)
+      postcss-normalize-unicode: 7.0.6(postcss@8.5.8)
+      postcss-normalize-url: 7.0.1(postcss@8.5.8)
+      postcss-normalize-whitespace: 7.0.1(postcss@8.5.8)
+      postcss-ordered-values: 7.0.2(postcss@8.5.8)
+      postcss-reduce-initial: 7.0.6(postcss@8.5.8)
+      postcss-reduce-transforms: 7.0.1(postcss@8.5.8)
+      postcss-svgo: 7.1.1(postcss@8.5.8)
+      postcss-unique-selectors: 7.0.5(postcss@8.5.8)
+
+  cssnano-utils@5.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+
+  cssnano@7.1.4(postcss@8.5.8):
+    dependencies:
+      cssnano-preset-default: 7.0.12(postcss@8.5.8)
+      lilconfig: 3.1.3
+      postcss: 8.5.8
+
+  csso@5.0.5:
+    dependencies:
+      css-tree: 2.2.1
+
+  csstype@3.2.3: {}
+
+  db0@0.3.4(sqlite3@5.1.7):
+    optionalDependencies:
+      sqlite3: 5.1.7
+
+  debug@4.4.3:
+    dependencies:
+      ms: 2.1.3
+
+  decompress-response@6.0.0:
+    dependencies:
+      mimic-response: 3.1.0
+
+  deep-extend@0.6.0: {}
+
+  deep-is@0.1.4: {}
+
+  deepmerge@4.3.1: {}
+
+  default-browser-id@5.0.1: {}
+
+  default-browser@5.5.0:
+    dependencies:
+      bundle-name: 4.1.0
+      default-browser-id: 5.0.1
+
+  define-lazy-prop@2.0.0: {}
+
+  define-lazy-prop@3.0.0: {}
+
+  defu@6.1.6: {}
+
+  delayed-stream@1.0.0: {}
+
+  delegates@1.0.0:
+    optional: true
+
+  deno@2.7.12:
+    optionalDependencies:
+      '@deno/darwin-arm64': 2.7.12
+      '@deno/darwin-x64': 2.7.12
+      '@deno/linux-arm64-glibc': 2.7.12
+      '@deno/linux-x64-glibc': 2.7.12
+      '@deno/win32-arm64': 2.7.12
+      '@deno/win32-x64': 2.7.12
+
+  denque@2.1.0: {}
+
+  depd@2.0.0: {}
+
+  destr@2.0.5: {}
+
+  detect-libc@2.1.2: {}
+
+  devalue@5.6.4: {}
+
+  diff@8.0.4: {}
+
+  dom-serializer@2.0.0:
+    dependencies:
+      domelementtype: 2.3.0
+      domhandler: 5.0.3
+      entities: 4.5.0
+
+  domelementtype@2.3.0: {}
+
+  domhandler@5.0.3:
+    dependencies:
+      domelementtype: 2.3.0
+
+  domutils@3.2.2:
+    dependencies:
+      dom-serializer: 2.0.0
+      domelementtype: 2.3.0
+      domhandler: 5.0.3
+
+  dot-prop@10.1.0:
+    dependencies:
+      type-fest: 5.5.0
+
+  dotenv-flow@4.1.0:
+    dependencies:
+      dotenv: 16.6.1
+
+  dotenv@16.6.1: {}
+
+  dotenv@17.4.2: {}
+
+  dunder-proto@1.0.1:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      es-errors: 1.3.0
+      gopd: 1.2.0
+
+  duplexer@0.1.2: {}
+
+  eastasianwidth@0.2.0: {}
+
+  editorconfig@1.0.7:
+    dependencies:
+      '@one-ini/wasm': 0.1.1
+      commander: 10.0.1
+      minimatch: 9.0.9
+      semver: 7.7.4
+
+  ee-first@1.1.1: {}
+
+  electron-to-chromium@1.5.331: {}
+
+  elementtree@0.1.7:
+    dependencies:
+      sax: 1.1.4
+
+  embla-carousel-auto-height@8.6.0(embla-carousel@8.6.0):
+    dependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-auto-scroll@8.6.0(embla-carousel@8.6.0):
+    dependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-autoplay@8.6.0(embla-carousel@8.6.0):
+    dependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-class-names@8.6.0(embla-carousel@8.6.0):
+    dependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-fade@8.6.0(embla-carousel@8.6.0):
+    dependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-reactive-utils@8.6.0(embla-carousel@8.6.0):
+    dependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel-vue@8.6.0(vue@3.5.32(typescript@6.0.3)):
+    dependencies:
+      embla-carousel: 8.6.0
+      embla-carousel-reactive-utils: 8.6.0(embla-carousel@8.6.0)
+      vue: 3.5.32(typescript@6.0.3)
+
+  embla-carousel-wheel-gestures@8.1.0(embla-carousel@8.6.0):
+    dependencies:
+      embla-carousel: 8.6.0
+      wheel-gestures: 2.2.48
+
+  embla-carousel@8.6.0: {}
+
+  emoji-regex@10.6.0: {}
+
+  emoji-regex@8.0.0: {}
+
+  emoji-regex@9.2.2: {}
+
+  encodeurl@2.0.0: {}
+
+  encoding@0.1.13:
+    dependencies:
+      iconv-lite: 0.6.3
+    optional: true
+
+  end-of-stream@1.4.5:
+    dependencies:
+      once: 1.4.0
+
+  enhanced-resolve@5.20.1:
+    dependencies:
+      graceful-fs: 4.2.11
+      tapable: 2.3.2
+
+  entities@4.5.0: {}
+
+  entities@7.0.1: {}
+
+  env-paths@2.2.1: {}
+
+  err-code@2.0.3:
+    optional: true
+
+  error-stack-parser-es@1.0.5: {}
+
+  errx@0.1.0: {}
+
+  es-define-property@1.0.1: {}
+
+  es-errors@1.3.0: {}
+
+  es-module-lexer@2.0.0: {}
+
+  es-object-atoms@1.1.1:
+    dependencies:
+      es-errors: 1.3.0
+
+  es-set-tostringtag@2.1.0:
+    dependencies:
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      has-tostringtag: 1.0.2
+      hasown: 2.0.2
+
+  esbuild@0.25.12:
+    optionalDependencies:
+      '@esbuild/aix-ppc64': 0.25.12
+      '@esbuild/android-arm': 0.25.12
+      '@esbuild/android-arm64': 0.25.12
+      '@esbuild/android-x64': 0.25.12
+      '@esbuild/darwin-arm64': 0.25.12
+      '@esbuild/darwin-x64': 0.25.12
+      '@esbuild/freebsd-arm64': 0.25.12
+      '@esbuild/freebsd-x64': 0.25.12
+      '@esbuild/linux-arm': 0.25.12
+      '@esbuild/linux-arm64': 0.25.12
+      '@esbuild/linux-ia32': 0.25.12
+      '@esbuild/linux-loong64': 0.25.12
+      '@esbuild/linux-mips64el': 0.25.12
+      '@esbuild/linux-ppc64': 0.25.12
+      '@esbuild/linux-riscv64': 0.25.12
+      '@esbuild/linux-s390x': 0.25.12
+      '@esbuild/linux-x64': 0.25.12
+      '@esbuild/netbsd-arm64': 0.25.12
+      '@esbuild/netbsd-x64': 0.25.12
+      '@esbuild/openbsd-arm64': 0.25.12
+      '@esbuild/openbsd-x64': 0.25.12
+      '@esbuild/openharmony-arm64': 0.25.12
+      '@esbuild/sunos-x64': 0.25.12
+      '@esbuild/win32-arm64': 0.25.12
+      '@esbuild/win32-ia32': 0.25.12
+      '@esbuild/win32-x64': 0.25.12
+
+  esbuild@0.27.7:
+    optionalDependencies:
+      '@esbuild/aix-ppc64': 0.27.7
+      '@esbuild/android-arm': 0.27.7
+      '@esbuild/android-arm64': 0.27.7
+      '@esbuild/android-x64': 0.27.7
+      '@esbuild/darwin-arm64': 0.27.7
+      '@esbuild/darwin-x64': 0.27.7
+      '@esbuild/freebsd-arm64': 0.27.7
+      '@esbuild/freebsd-x64': 0.27.7
+      '@esbuild/linux-arm': 0.27.7
+      '@esbuild/linux-arm64': 0.27.7
+      '@esbuild/linux-ia32': 0.27.7
+      '@esbuild/linux-loong64': 0.27.7
+      '@esbuild/linux-mips64el': 0.27.7
+      '@esbuild/linux-ppc64': 0.27.7
+      '@esbuild/linux-riscv64': 0.27.7
+      '@esbuild/linux-s390x': 0.27.7
+      '@esbuild/linux-x64': 0.27.7
+      '@esbuild/netbsd-arm64': 0.27.7
+      '@esbuild/netbsd-x64': 0.27.7
+      '@esbuild/openbsd-arm64': 0.27.7
+      '@esbuild/openbsd-x64': 0.27.7
+      '@esbuild/openharmony-arm64': 0.27.7
+      '@esbuild/sunos-x64': 0.27.7
+      '@esbuild/win32-arm64': 0.27.7
+      '@esbuild/win32-ia32': 0.27.7
+      '@esbuild/win32-x64': 0.27.7
+
+  escalade@3.2.0: {}
+
+  escape-html@1.0.3: {}
+
+  escape-string-regexp@1.0.5: {}
+
+  escape-string-regexp@4.0.0: {}
+
+  escape-string-regexp@5.0.0: {}
+
+  escodegen@2.1.0:
+    dependencies:
+      esprima: 4.0.1
+      estraverse: 5.3.0
+      esutils: 2.0.3
+    optionalDependencies:
+      source-map: 0.6.1
+
+  eslint-config-flat-gitignore@2.3.0(eslint@10.2.0(jiti@2.6.1)):
+    dependencies:
+      '@eslint/compat': 2.0.4(eslint@10.2.0(jiti@2.6.1))
+      eslint: 10.2.0(jiti@2.6.1)
+
+  eslint-flat-config-utils@3.1.0:
+    dependencies:
+      '@eslint/config-helpers': 0.5.4
+      pathe: 2.0.3
+
+  eslint-import-context@0.1.9(unrs-resolver@1.11.1):
+    dependencies:
+      get-tsconfig: 4.13.7
+      stable-hash-x: 0.2.0
+    optionalDependencies:
+      unrs-resolver: 1.11.1
+
+  eslint-merge-processors@2.0.0(eslint@10.2.0(jiti@2.6.1)):
+    dependencies:
+      eslint: 10.2.0(jiti@2.6.1)
+
+  eslint-plugin-import-lite@0.5.2(eslint@10.2.0(jiti@2.6.1)):
+    dependencies:
+      eslint: 10.2.0(jiti@2.6.1)
+
+  eslint-plugin-import-x@4.16.2(@typescript-eslint/utils@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3))(eslint@10.2.0(jiti@2.6.1)):
+    dependencies:
+      '@package-json/types': 0.0.12
+      '@typescript-eslint/types': 8.58.0
+      comment-parser: 1.4.6
+      debug: 4.4.3
+      eslint: 10.2.0(jiti@2.6.1)
+      eslint-import-context: 0.1.9(unrs-resolver@1.11.1)
+      is-glob: 4.0.3
+      minimatch: 10.2.5
+      semver: 7.7.4
+      stable-hash-x: 0.2.0
+      unrs-resolver: 1.11.1
+    optionalDependencies:
+      '@typescript-eslint/utils': 8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+    transitivePeerDependencies:
+      - supports-color
+
+  eslint-plugin-jsdoc@62.9.0(eslint@10.2.0(jiti@2.6.1)):
+    dependencies:
+      '@es-joy/jsdoccomment': 0.86.0
+      '@es-joy/resolve.exports': 1.2.0
+      are-docs-informative: 0.0.2
+      comment-parser: 1.4.6
+      debug: 4.4.3
+      escape-string-regexp: 4.0.0
+      eslint: 10.2.0(jiti@2.6.1)
+      espree: 11.2.0
+      esquery: 1.7.0
+      html-entities: 2.6.0
+      object-deep-merge: 2.0.0
+      parse-imports-exports: 0.2.4
+      semver: 7.7.4
+      spdx-expression-parse: 4.0.0
+      to-valid-identifier: 1.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  eslint-plugin-regexp@3.1.0(eslint@10.2.0(jiti@2.6.1)):
+    dependencies:
+      '@eslint-community/eslint-utils': 4.9.1(eslint@10.2.0(jiti@2.6.1))
+      '@eslint-community/regexpp': 4.12.2
+      comment-parser: 1.4.6
+      eslint: 10.2.0(jiti@2.6.1)
+      jsdoc-type-pratt-parser: 7.2.0
+      refa: 0.12.1
+      regexp-ast-analysis: 0.7.1
+      scslre: 0.3.0
+
+  eslint-plugin-unicorn@63.0.0(eslint@10.2.0(jiti@2.6.1)):
+    dependencies:
+      '@babel/helper-validator-identifier': 7.28.5
+      '@eslint-community/eslint-utils': 4.9.1(eslint@10.2.0(jiti@2.6.1))
+      change-case: 5.4.4
+      ci-info: 4.4.0
+      clean-regexp: 1.0.0
+      core-js-compat: 3.49.0
+      eslint: 10.2.0(jiti@2.6.1)
+      find-up-simple: 1.0.1
+      globals: 16.5.0
+      indent-string: 5.0.0
+      is-builtin-module: 5.0.0
+      jsesc: 3.1.0
+      pluralize: 8.0.0
+      regexp-tree: 0.1.27
+      regjsparser: 0.13.1
+      semver: 7.7.4
+      strip-indent: 4.1.1
+
+  eslint-plugin-vue@10.8.0(@stylistic/eslint-plugin@5.10.0(eslint@10.2.0(jiti@2.6.1)))(@typescript-eslint/parser@8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3))(eslint@10.2.0(jiti@2.6.1))(vue-eslint-parser@10.4.0(eslint@10.2.0(jiti@2.6.1))):
+    dependencies:
+      '@eslint-community/eslint-utils': 4.9.1(eslint@10.2.0(jiti@2.6.1))
+      eslint: 10.2.0(jiti@2.6.1)
+      natural-compare: 1.4.0
+      nth-check: 2.1.1
+      postcss-selector-parser: 7.1.1
+      semver: 7.7.4
+      vue-eslint-parser: 10.4.0(eslint@10.2.0(jiti@2.6.1))
+      xml-name-validator: 4.0.0
+    optionalDependencies:
+      '@stylistic/eslint-plugin': 5.10.0(eslint@10.2.0(jiti@2.6.1))
+      '@typescript-eslint/parser': 8.58.0(eslint@10.2.0(jiti@2.6.1))(typescript@6.0.3)
+
+  eslint-processor-vue-blocks@2.0.0(@vue/compiler-sfc@3.5.32)(eslint@10.2.0(jiti@2.6.1)):
+    dependencies:
+      '@vue/compiler-sfc': 3.5.32
+      eslint: 10.2.0(jiti@2.6.1)
+
+  eslint-scope@9.1.2:
+    dependencies:
+      '@types/esrecurse': 4.3.1
+      '@types/estree': 1.0.8
+      esrecurse: 4.3.0
+      estraverse: 5.3.0
+
+  eslint-typegen@2.3.1(eslint@10.2.0(jiti@2.6.1)):
+    dependencies:
+      eslint: 10.2.0(jiti@2.6.1)
+      json-schema-to-typescript-lite: 15.0.0
+      ohash: 2.0.11
+
+  eslint-visitor-keys@3.4.3: {}
+
+  eslint-visitor-keys@4.2.1: {}
+
+  eslint-visitor-keys@5.0.1: {}
+
+  eslint@10.2.0(jiti@2.6.1):
+    dependencies:
+      '@eslint-community/eslint-utils': 4.9.1(eslint@10.2.0(jiti@2.6.1))
+      '@eslint-community/regexpp': 4.12.2
+      '@eslint/config-array': 0.23.4
+      '@eslint/config-helpers': 0.5.4
+      '@eslint/core': 1.2.0
+      '@eslint/plugin-kit': 0.7.0
+      '@humanfs/node': 0.16.7
+      '@humanwhocodes/module-importer': 1.0.1
+      '@humanwhocodes/retry': 0.4.3
+      '@types/estree': 1.0.8
+      ajv: 6.14.0
+      cross-spawn: 7.0.6
+      debug: 4.4.3
+      escape-string-regexp: 4.0.0
+      eslint-scope: 9.1.2
+      eslint-visitor-keys: 5.0.1
+      espree: 11.2.0
+      esquery: 1.7.0
+      esutils: 2.0.3
+      fast-deep-equal: 3.1.3
+      file-entry-cache: 8.0.0
+      find-up: 5.0.0
+      glob-parent: 6.0.2
+      ignore: 5.3.2
+      imurmurhash: 0.1.4
+      is-glob: 4.0.3
+      json-stable-stringify-without-jsonify: 1.0.1
+      minimatch: 10.2.5
+      natural-compare: 1.4.0
+      optionator: 0.9.4
+    optionalDependencies:
+      jiti: 2.6.1
+    transitivePeerDependencies:
+      - supports-color
+
+  espree@10.4.0:
+    dependencies:
+      acorn: 8.16.0
+      acorn-jsx: 5.3.2(acorn@8.16.0)
+      eslint-visitor-keys: 4.2.1
+
+  espree@11.2.0:
+    dependencies:
+      acorn: 8.16.0
+      acorn-jsx: 5.3.2(acorn@8.16.0)
+      eslint-visitor-keys: 5.0.1
+
+  espree@9.6.1:
+    dependencies:
+      acorn: 8.16.0
+      acorn-jsx: 5.3.2(acorn@8.16.0)
+      eslint-visitor-keys: 3.4.3
+
+  esprima@4.0.1: {}
+
+  esquery@1.7.0:
+    dependencies:
+      estraverse: 5.3.0
+
+  esrecurse@4.3.0:
+    dependencies:
+      estraverse: 5.3.0
+
+  estraverse@5.3.0: {}
+
+  estree-walker@2.0.2: {}
+
+  estree-walker@3.0.3:
+    dependencies:
+      '@types/estree': 1.0.8
+
+  esutils@2.0.3: {}
+
+  etag@1.8.1: {}
+
+  event-target-shim@5.0.1: {}
+
+  events-universal@1.0.1:
+    dependencies:
+      bare-events: 2.8.2
+    transitivePeerDependencies:
+      - bare-abort-controller
+
+  events@3.3.0: {}
+
+  execa@8.0.1:
+    dependencies:
+      cross-spawn: 7.0.6
+      get-stream: 8.0.1
+      human-signals: 5.0.0
+      is-stream: 3.0.0
+      merge-stream: 2.0.0
+      npm-run-path: 5.3.0
+      onetime: 6.0.0
+      signal-exit: 4.1.0
+      strip-final-newline: 3.0.0
+
+  expand-template@2.0.3: {}
+
+  expect-type@1.3.0: {}
+
+  exsolve@1.0.8: {}
+
+  fake-indexeddb@6.2.5: {}
+
+  fast-deep-equal@3.1.3: {}
+
+  fast-fifo@1.3.2: {}
+
+  fast-glob@3.3.3:
+    dependencies:
+      '@nodelib/fs.stat': 2.0.5
+      '@nodelib/fs.walk': 1.2.8
+      glob-parent: 5.1.2
+      merge2: 1.4.1
+      micromatch: 4.0.8
+
+  fast-json-stable-stringify@2.1.0: {}
+
+  fast-levenshtein@2.0.6: {}
+
+  fast-npm-meta@1.4.2: {}
+
+  fast-string-truncated-width@1.2.1: {}
+
+  fast-string-width@1.1.0:
+    dependencies:
+      fast-string-truncated-width: 1.2.1
+
+  fast-wrap-ansi@0.1.6:
+    dependencies:
+      fast-string-width: 1.1.0
+
+  fastq@1.20.1:
+    dependencies:
+      reusify: 1.1.0
+
+  fd-slicer@1.1.0:
+    dependencies:
+      pend: 1.2.0
+
+  fdir@6.5.0(picomatch@4.0.4):
+    optionalDependencies:
+      picomatch: 4.0.4
+
+  file-entry-cache@8.0.0:
+    dependencies:
+      flat-cache: 4.0.1
+
+  file-uri-to-path@1.0.0: {}
+
+  fill-range@7.1.1:
+    dependencies:
+      to-regex-range: 5.0.1
+
+  find-up-simple@1.0.1: {}
+
+  find-up@5.0.0:
+    dependencies:
+      locate-path: 6.0.0
+      path-exists: 4.0.0
+
+  find-up@8.0.0:
+    dependencies:
+      locate-path: 8.0.0
+      unicorn-magic: 0.3.0
+
+  flat-cache@4.0.1:
+    dependencies:
+      flatted: 3.4.2
+      keyv: 4.5.4
+
+  flatted@3.4.2: {}
+
+  fontaine@0.8.0:
+    dependencies:
+      '@capsizecss/unpack': 4.0.0
+      css-tree: 3.2.1
+      magic-regexp: 0.10.0
+      magic-string: 0.30.21
+      pathe: 2.0.3
+      ufo: 1.6.3
+      unplugin: 2.3.11
+
+  fontkitten@1.0.3:
+    dependencies:
+      tiny-inflate: 1.0.3
+
+  fontless@0.2.1(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)):
+    dependencies:
+      consola: 3.4.2
+      css-tree: 3.2.1
+      defu: 6.1.6
+      esbuild: 0.27.7
+      fontaine: 0.8.0
+      jiti: 2.6.1
+      lightningcss: 1.32.0
+      magic-string: 0.30.21
+      ohash: 2.0.11
+      pathe: 2.0.3
+      ufo: 1.6.3
+      unifont: 0.7.4
+      unstorage: 1.17.5(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)
+    optionalDependencies:
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - '@azure/app-configuration'
+      - '@azure/cosmos'
+      - '@azure/data-tables'
+      - '@azure/identity'
+      - '@azure/keyvault-secrets'
+      - '@azure/storage-blob'
+      - '@capacitor/preferences'
+      - '@deno/kv'
+      - '@netlify/blobs'
+      - '@planetscale/database'
+      - '@upstash/redis'
+      - '@vercel/blob'
+      - '@vercel/functions'
+      - '@vercel/kv'
+      - aws4fetch
+      - db0
+      - idb-keyval
+      - ioredis
+      - uploadthing
+
+  foreground-child@3.3.1:
+    dependencies:
+      cross-spawn: 7.0.6
+      signal-exit: 4.1.0
+
+  form-data@4.0.5:
+    dependencies:
+      asynckit: 0.4.0
+      combined-stream: 1.0.8
+      es-set-tostringtag: 2.1.0
+      hasown: 2.0.2
+      mime-types: 2.1.35
+
+  fraction.js@5.3.4: {}
+
+  framer-motion@12.38.0:
+    dependencies:
+      motion-dom: 12.38.0
+      motion-utils: 12.36.0
+      tslib: 2.8.1
+
+  fresh@2.0.0: {}
+
+  fs-constants@1.0.0: {}
+
+  fs-extra@11.3.4:
+    dependencies:
+      graceful-fs: 4.2.11
+      jsonfile: 6.2.0
+      universalify: 2.0.1
+
+  fs-extra@9.1.0:
+    dependencies:
+      at-least-node: 1.0.0
+      graceful-fs: 4.2.11
+      jsonfile: 6.2.0
+      universalify: 2.0.1
+
+  fs-minipass@2.1.0:
+    dependencies:
+      minipass: 3.3.6
+
+  fs.realpath@1.0.0:
+    optional: true
+
+  fsevents@2.3.3:
+    optional: true
+
+  function-bind@1.1.2: {}
+
+  fuse.js@7.3.0: {}
+
+  fzf@0.5.2: {}
+
+  gauge@4.0.4:
+    dependencies:
+      aproba: 2.1.0
+      color-support: 1.1.3
+      console-control-strings: 1.1.0
+      has-unicode: 2.0.1
+      signal-exit: 3.0.7
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+      wide-align: 1.1.5
+    optional: true
+
+  gensync@1.0.0-beta.2: {}
+
+  get-caller-file@2.0.5: {}
+
+  get-east-asian-width@1.5.0: {}
+
+  get-intrinsic@1.3.0:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.1
+      function-bind: 1.1.2
+      get-proto: 1.0.1
+      gopd: 1.2.0
+      has-symbols: 1.1.0
+      hasown: 2.0.2
+      math-intrinsics: 1.1.0
+
+  get-port-please@3.2.0: {}
+
+  get-proto@1.0.1:
+    dependencies:
+      dunder-proto: 1.0.1
+      es-object-atoms: 1.1.1
+
+  get-stream@8.0.1: {}
+
+  get-tsconfig@4.13.7:
+    dependencies:
+      resolve-pkg-maps: 1.0.0
+
+  giget@3.2.0: {}
+
+  github-from-package@0.0.0: {}
+
+  glob-parent@5.1.2:
+    dependencies:
+      is-glob: 4.0.3
+
+  glob-parent@6.0.2:
+    dependencies:
+      is-glob: 4.0.3
+
+  glob@10.5.0:
+    dependencies:
+      foreground-child: 3.3.1
+      jackspeak: 3.4.3
+      minimatch: 9.0.9
+      minipass: 7.1.3
+      package-json-from-dist: 1.0.1
+      path-scurry: 1.11.1
+
+  glob@13.0.6:
+    dependencies:
+      minimatch: 10.2.5
+      minipass: 7.1.3
+      path-scurry: 2.0.2
+
+  glob@7.2.3:
+    dependencies:
+      fs.realpath: 1.0.0
+      inflight: 1.0.6
+      inherits: 2.0.4
+      minimatch: 3.1.5
+      once: 1.4.0
+      path-is-absolute: 1.0.1
+    optional: true
+
+  global-directory@4.0.1:
+    dependencies:
+      ini: 4.1.1
+
+  globals@16.5.0: {}
+
+  globals@17.4.0: {}
+
+  globby@16.2.0:
+    dependencies:
+      '@sindresorhus/merge-streams': 4.0.0
+      fast-glob: 3.3.3
+      ignore: 7.0.5
+      is-path-inside: 4.0.0
+      slash: 5.1.0
+      unicorn-magic: 0.4.0
+
+  gopd@1.2.0: {}
+
+  graceful-fs@4.2.11: {}
+
+  gzip-size@7.0.0:
+    dependencies:
+      duplexer: 0.1.2
+
+  h3@1.15.11:
+    dependencies:
+      cookie-es: 1.2.3
+      crossws: 0.3.5
+      defu: 6.1.6
+      destr: 2.0.5
+      iron-webcrypto: 1.2.1
+      node-mock-http: 1.0.4
+      radix3: 1.1.2
+      ufo: 1.6.3
+      uncrypto: 0.1.3
+
+  h3@2.0.1-rc.20(crossws@0.4.4(srvx@0.11.15)):
+    dependencies:
+      rou3: 0.8.1
+      srvx: 0.11.15
+    optionalDependencies:
+      crossws: 0.4.4(srvx@0.11.15)
+
+  happy-dom@20.9.0:
+    dependencies:
+      '@types/node': 25.6.0
+      '@types/whatwg-mimetype': 3.0.2
+      '@types/ws': 8.18.1
+      entities: 7.0.1
+      whatwg-mimetype: 3.0.0
+      ws: 8.20.0
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
+  has-symbols@1.1.0: {}
+
+  has-tostringtag@1.0.2:
+    dependencies:
+      has-symbols: 1.1.0
+
+  has-unicode@2.0.1:
+    optional: true
+
+  hasown@2.0.2:
+    dependencies:
+      function-bind: 1.1.2
+
+  hey-listen@1.0.8: {}
+
+  hookable@5.5.3: {}
+
+  hookable@6.1.0: {}
+
+  html-entities@2.6.0: {}
+
+  http-cache-semantics@4.2.0:
+    optional: true
+
+  http-errors@2.0.1:
+    dependencies:
+      depd: 2.0.0
+      inherits: 2.0.4
+      setprototypeof: 1.2.0
+      statuses: 2.0.2
+      toidentifier: 1.0.1
+
+  http-proxy-agent@4.0.1:
+    dependencies:
+      '@tootallnate/once': 1.1.2
+      agent-base: 6.0.2
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
+  http-shutdown@1.2.2: {}
+
+  https-proxy-agent@5.0.1:
+    dependencies:
+      agent-base: 6.0.2
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
+  https-proxy-agent@7.0.6:
+    dependencies:
+      agent-base: 7.1.4
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  httpxy@0.5.0: {}
+
+  human-signals@5.0.0: {}
+
+  humanize-ms@1.2.1:
+    dependencies:
+      ms: 2.1.3
+    optional: true
+
+  iconv-lite@0.6.3:
+    dependencies:
+      safer-buffer: 2.1.2
+    optional: true
+
+  ieee754@1.2.1: {}
+
+  ignore@5.3.2: {}
+
+  ignore@7.0.5: {}
+
+  image-meta@0.2.2: {}
+
+  impound@1.1.5:
+    dependencies:
+      '@jridgewell/trace-mapping': 0.3.31
+      es-module-lexer: 2.0.0
+      pathe: 2.0.3
+      unplugin: 3.0.0
+      unplugin-utils: 0.3.1
+
+  imurmurhash@0.1.4: {}
+
+  indent-string@4.0.0:
+    optional: true
+
+  indent-string@5.0.0: {}
+
+  infer-owner@1.0.4:
+    optional: true
+
+  inflight@1.0.6:
+    dependencies:
+      once: 1.4.0
+      wrappy: 1.0.2
+    optional: true
+
+  inherits@2.0.4: {}
+
+  ini@1.3.8: {}
+
+  ini@4.1.1: {}
+
+  ini@4.1.3: {}
+
+  ioredis@5.10.1:
+    dependencies:
+      '@ioredis/commands': 1.5.1
+      cluster-key-slot: 1.1.2
+      debug: 4.4.3
+      denque: 2.1.0
+      lodash.defaults: 4.2.0
+      lodash.isarguments: 3.1.0
+      redis-errors: 1.2.0
+      redis-parser: 3.0.0
+      standard-as-callback: 2.1.0
+    transitivePeerDependencies:
+      - supports-color
+
+  ip-address@10.1.0:
+    optional: true
+
+  ipx@3.1.1(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)(srvx@0.11.15):
+    dependencies:
+      '@fastify/accept-negotiator': 2.0.1
+      citty: 0.1.6
+      consola: 3.4.2
+      defu: 6.1.6
+      destr: 2.0.5
+      etag: 1.8.1
+      h3: 1.15.11
+      image-meta: 0.2.2
+      listhen: 1.9.1(srvx@0.11.15)
+      ofetch: 1.5.1
+      pathe: 2.0.3
+      sharp: 0.34.5
+      svgo: 4.0.1
+      ufo: 1.6.3
+      unstorage: 1.17.5(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)
+      xss: 1.0.15
+    transitivePeerDependencies:
+      - '@azure/app-configuration'
+      - '@azure/cosmos'
+      - '@azure/data-tables'
+      - '@azure/identity'
+      - '@azure/keyvault-secrets'
+      - '@azure/storage-blob'
+      - '@capacitor/preferences'
+      - '@deno/kv'
+      - '@netlify/blobs'
+      - '@planetscale/database'
+      - '@upstash/redis'
+      - '@vercel/blob'
+      - '@vercel/functions'
+      - '@vercel/kv'
+      - aws4fetch
+      - db0
+      - idb-keyval
+      - ioredis
+      - srvx
+      - uploadthing
+    optional: true
+
+  iron-webcrypto@1.2.1: {}
+
+  is-builtin-module@5.0.0:
+    dependencies:
+      builtin-modules: 5.0.0
+
+  is-core-module@2.16.1:
+    dependencies:
+      hasown: 2.0.2
+
+  is-docker@2.2.1: {}
+
+  is-docker@3.0.0: {}
+
+  is-extglob@2.1.1: {}
+
+  is-fullwidth-code-point@3.0.0: {}
+
+  is-glob@4.0.3:
+    dependencies:
+      is-extglob: 2.1.1
+
+  is-in-ssh@1.0.0: {}
+
+  is-inside-container@1.0.0:
+    dependencies:
+      is-docker: 3.0.0
+
+  is-installed-globally@1.0.0:
+    dependencies:
+      global-directory: 4.0.1
+      is-path-inside: 4.0.0
+
+  is-lambda@1.0.1:
+    optional: true
+
+  is-module@1.0.0: {}
+
+  is-number@7.0.0: {}
+
+  is-path-inside@4.0.0: {}
+
+  is-reference@1.2.1:
+    dependencies:
+      '@types/estree': 1.0.8
+
+  is-stream@2.0.1: {}
+
+  is-stream@3.0.0: {}
+
+  is-what@5.5.0: {}
+
+  is-wsl@2.2.0:
+    dependencies:
+      is-docker: 2.2.1
+
+  is-wsl@3.1.1:
+    dependencies:
+      is-inside-container: 1.0.0
+
+  isarray@1.0.0: {}
+
+  isexe@2.0.0: {}
+
+  isexe@4.0.0: {}
+
+  isomorphic.js@0.2.5: {}
+
+  jackspeak@3.4.3:
+    dependencies:
+      '@isaacs/cliui': 8.0.2
+    optionalDependencies:
+      '@pkgjs/parseargs': 0.11.0
+
+  jiti@2.6.1: {}
+
+  js-beautify@1.15.4:
+    dependencies:
+      config-chain: 1.1.13
+      editorconfig: 1.0.7
+      glob: 10.5.0
+      js-cookie: 3.0.5
+      nopt: 7.2.1
+
+  js-cookie@3.0.5: {}
+
+  js-tokens@4.0.0: {}
+
+  js-tokens@9.0.1: {}
+
+  js-yaml@4.1.1:
+    dependencies:
+      argparse: 2.0.1
+
+  jsdoc-type-pratt-parser@7.2.0: {}
+
+  jsesc@3.1.0: {}
+
+  json-buffer@3.0.1: {}
+
+  json-schema-to-typescript-lite@15.0.0:
+    dependencies:
+      '@apidevtools/json-schema-ref-parser': 14.2.1(@types/json-schema@7.0.15)
+      '@types/json-schema': 7.0.15
+
+  json-schema-traverse@0.4.1: {}
+
+  json-stable-stringify-without-jsonify@1.0.1: {}
+
+  json5@2.2.3: {}
+
+  jsonc-eslint-parser@2.4.2:
+    dependencies:
+      acorn: 8.16.0
+      eslint-visitor-keys: 3.4.3
+      espree: 9.6.1
+      semver: 7.7.4
+
+  jsonfile@6.2.0:
+    dependencies:
+      universalify: 2.0.1
+    optionalDependencies:
+      graceful-fs: 4.2.11
+
+  keyv@4.5.4:
+    dependencies:
+      json-buffer: 3.0.1
+
+  kleur@3.0.3: {}
+
+  kleur@4.1.5: {}
+
+  klona@2.0.6: {}
+
+  knitwork@1.3.0: {}
+
+  launch-editor@2.13.2:
+    dependencies:
+      picocolors: 1.1.1
+      shell-quote: 1.8.3
+
+  lazystream@1.0.1:
+    dependencies:
+      readable-stream: 2.3.8
+
+  levn@0.4.1:
+    dependencies:
+      prelude-ls: 1.2.1
+      type-check: 0.4.0
+
+  lib0@0.2.117:
+    dependencies:
+      isomorphic.js: 0.2.5
+
+  lightningcss-android-arm64@1.32.0:
+    optional: true
+
+  lightningcss-darwin-arm64@1.32.0:
+    optional: true
+
+  lightningcss-darwin-x64@1.32.0:
+    optional: true
+
+  lightningcss-freebsd-x64@1.32.0:
+    optional: true
+
+  lightningcss-linux-arm-gnueabihf@1.32.0:
+    optional: true
+
+  lightningcss-linux-arm64-gnu@1.32.0:
+    optional: true
+
+  lightningcss-linux-arm64-musl@1.32.0:
+    optional: true
+
+  lightningcss-linux-x64-gnu@1.32.0:
+    optional: true
+
+  lightningcss-linux-x64-musl@1.32.0:
+    optional: true
+
+  lightningcss-win32-arm64-msvc@1.32.0:
+    optional: true
+
+  lightningcss-win32-x64-msvc@1.32.0:
+    optional: true
+
+  lightningcss@1.32.0:
+    dependencies:
+      detect-libc: 2.1.2
+    optionalDependencies:
+      lightningcss-android-arm64: 1.32.0
+      lightningcss-darwin-arm64: 1.32.0
+      lightningcss-darwin-x64: 1.32.0
+      lightningcss-freebsd-x64: 1.32.0
+      lightningcss-linux-arm-gnueabihf: 1.32.0
+      lightningcss-linux-arm64-gnu: 1.32.0
+      lightningcss-linux-arm64-musl: 1.32.0
+      lightningcss-linux-x64-gnu: 1.32.0
+      lightningcss-linux-x64-musl: 1.32.0
+      lightningcss-win32-arm64-msvc: 1.32.0
+      lightningcss-win32-x64-msvc: 1.32.0
+
+  lilconfig@3.1.3: {}
+
+  linkify-it@5.0.0:
+    dependencies:
+      uc.micro: 2.1.0
+
+  linkifyjs@4.3.2: {}
+
+  listhen@1.9.1(srvx@0.11.15):
+    dependencies:
+      '@parcel/watcher': 2.5.6
+      '@parcel/watcher-wasm': 2.5.6
+      citty: 0.2.2
+      consola: 3.4.2
+      crossws: 0.4.4(srvx@0.11.15)
+      defu: 6.1.6
+      get-port-please: 3.2.0
+      h3: 1.15.11
+      http-shutdown: 1.2.2
+      jiti: 2.6.1
+      mlly: 1.8.2
+      node-forge: 1.4.0
+      pathe: 2.0.3
+      std-env: 4.0.0
+      tinyclip: 0.1.12
+      ufo: 1.6.3
+      untun: 0.1.3
+      uqr: 0.1.3
+    transitivePeerDependencies:
+      - srvx
+
+  load-tsconfig@0.2.5: {}
+
+  local-pkg@1.1.2:
+    dependencies:
+      mlly: 1.8.2
+      pkg-types: 2.3.0
+      quansync: 0.2.11
+
+  locate-path@6.0.0:
+    dependencies:
+      p-locate: 5.0.0
+
+  locate-path@8.0.0:
+    dependencies:
+      p-locate: 6.0.0
+
+  lodash.defaults@4.2.0: {}
+
+  lodash.isarguments@3.1.0: {}
+
+  lodash.memoize@4.1.2: {}
+
+  lodash.uniq@4.5.0: {}
+
+  lodash@4.18.1: {}
+
+  lru-cache@10.4.3: {}
+
+  lru-cache@11.3.0: {}
+
+  lru-cache@5.1.1:
+    dependencies:
+      yallist: 3.1.1
+
+  lru-cache@6.0.0:
+    dependencies:
+      yallist: 4.0.0
+    optional: true
+
+  magic-regexp@0.10.0:
+    dependencies:
+      estree-walker: 3.0.3
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      regexp-tree: 0.1.27
+      type-level-regexp: 0.1.17
+      ufo: 1.6.3
+      unplugin: 2.3.11
+
+  magic-string-ast@1.0.3:
+    dependencies:
+      magic-string: 0.30.21
+
+  magic-string@0.30.21:
+    dependencies:
+      '@jridgewell/sourcemap-codec': 1.5.5
+
+  magicast@0.5.2:
+    dependencies:
+      '@babel/parser': 7.29.2
+      '@babel/types': 7.29.0
+      source-map-js: 1.2.1
+
+  make-fetch-happen@9.1.0:
+    dependencies:
+      agentkeepalive: 4.6.0
+      cacache: 15.3.0
+      http-cache-semantics: 4.2.0
+      http-proxy-agent: 4.0.1
+      https-proxy-agent: 5.0.1
+      is-lambda: 1.0.1
+      lru-cache: 6.0.0
+      minipass: 3.3.6
+      minipass-collect: 1.0.2
+      minipass-fetch: 1.4.1
+      minipass-flush: 1.0.7
+      minipass-pipeline: 1.2.4
+      negotiator: 0.6.4
+      promise-retry: 2.0.1
+      socks-proxy-agent: 6.2.1
+      ssri: 8.0.1
+    transitivePeerDependencies:
+      - bluebird
+      - supports-color
+    optional: true
+
+  markdown-it@14.1.1:
+    dependencies:
+      argparse: 2.0.1
+      entities: 4.5.0
+      linkify-it: 5.0.0
+      mdurl: 2.0.0
+      punycode.js: 2.3.1
+      uc.micro: 2.1.0
+
+  marked@17.0.6: {}
+
+  math-intrinsics@1.1.0: {}
+
+  mdn-data@2.0.28: {}
+
+  mdn-data@2.27.1: {}
+
+  mdurl@2.0.0: {}
+
+  merge-stream@2.0.0: {}
+
+  merge2@1.4.1: {}
+
+  micromatch@4.0.8:
+    dependencies:
+      braces: 3.0.3
+      picomatch: 2.3.2
+
+  mime-db@1.52.0: {}
+
+  mime-db@1.54.0: {}
+
+  mime-types@2.1.35:
+    dependencies:
+      mime-db: 1.52.0
+
+  mime-types@3.0.2:
+    dependencies:
+      mime-db: 1.54.0
+
+  mime@4.1.0: {}
+
+  mimic-fn@4.0.0: {}
+
+  mimic-response@3.1.0: {}
+
+  minimatch@10.2.5:
+    dependencies:
+      brace-expansion: 5.0.5
+
+  minimatch@3.1.5:
+    dependencies:
+      brace-expansion: 1.1.13
+    optional: true
+
+  minimatch@5.1.9:
+    dependencies:
+      brace-expansion: 2.0.3
+
+  minimatch@9.0.9:
+    dependencies:
+      brace-expansion: 2.0.3
+
+  minimist@1.2.8: {}
+
+  minipass-collect@1.0.2:
+    dependencies:
+      minipass: 3.3.6
+    optional: true
+
+  minipass-fetch@1.4.1:
+    dependencies:
+      minipass: 3.3.6
+      minipass-sized: 1.0.3
+      minizlib: 2.1.2
+    optionalDependencies:
+      encoding: 0.1.13
+    optional: true
+
+  minipass-flush@1.0.7:
+    dependencies:
+      minipass: 3.3.6
+    optional: true
+
+  minipass-pipeline@1.2.4:
+    dependencies:
+      minipass: 3.3.6
+    optional: true
+
+  minipass-sized@1.0.3:
+    dependencies:
+      minipass: 3.3.6
+    optional: true
+
+  minipass@3.3.6:
+    dependencies:
+      yallist: 4.0.0
+
+  minipass@5.0.0: {}
+
+  minipass@7.1.3: {}
+
+  minizlib@2.1.2:
+    dependencies:
+      minipass: 3.3.6
+      yallist: 4.0.0
+
+  minizlib@3.1.0:
+    dependencies:
+      minipass: 7.1.3
+
+  mitt@3.0.1: {}
+
+  mkdirp-classic@0.5.3: {}
+
+  mkdirp@1.0.4: {}
+
+  mlly@1.8.2:
+    dependencies:
+      acorn: 8.16.0
+      pathe: 2.0.3
+      pkg-types: 1.3.1
+      ufo: 1.6.3
+
+  mocked-exports@0.1.1: {}
+
+  motion-dom@12.38.0:
+    dependencies:
+      motion-utils: 12.36.0
+
+  motion-utils@12.36.0: {}
+
+  motion-v@2.2.0(@vueuse/core@14.2.1(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3)):
+    dependencies:
+      '@vueuse/core': 14.2.1(vue@3.5.32(typescript@6.0.3))
+      framer-motion: 12.38.0
+      hey-listen: 1.0.8
+      motion-dom: 12.38.0
+      motion-utils: 12.36.0
+      vue: 3.5.32(typescript@6.0.3)
+    transitivePeerDependencies:
+      - '@emotion/is-prop-valid'
+      - react
+      - react-dom
+
+  mrmime@2.0.1: {}
+
+  ms@2.1.3: {}
+
+  muggle-string@0.4.1: {}
+
+  nanoid@3.3.11: {}
+
+  nanotar@0.3.0: {}
+
+  napi-build-utils@2.0.0: {}
+
+  napi-postinstall@0.3.4: {}
+
+  native-run@2.0.3:
+    dependencies:
+      '@ionic/utils-fs': 3.1.7
+      '@ionic/utils-terminal': 2.3.5
+      bplist-parser: 0.3.2
+      debug: 4.4.3
+      elementtree: 0.1.7
+      ini: 4.1.3
+      plist: 3.1.0
+      split2: 4.2.0
+      through2: 4.0.2
+      tslib: 2.8.1
+      yauzl: 2.10.0
+    transitivePeerDependencies:
+      - supports-color
+
+  natural-compare@1.4.0: {}
+
+  negotiator@0.6.4:
+    optional: true
+
+  nitropack@2.13.3(encoding@0.1.13)(sqlite3@5.1.7)(srvx@0.11.15)(xml2js@0.6.2):
+    dependencies:
+      '@cloudflare/kv-asset-handler': 0.4.2
+      '@rollup/plugin-alias': 6.0.0(rollup@4.60.1)
+      '@rollup/plugin-commonjs': 29.0.2(rollup@4.60.1)
+      '@rollup/plugin-inject': 5.0.5(rollup@4.60.1)
+      '@rollup/plugin-json': 6.1.0(rollup@4.60.1)
+      '@rollup/plugin-node-resolve': 16.0.3(rollup@4.60.1)
+      '@rollup/plugin-replace': 6.0.3(rollup@4.60.1)
+      '@rollup/plugin-terser': 1.0.0(rollup@4.60.1)
+      '@vercel/nft': 1.5.0(encoding@0.1.13)(rollup@4.60.1)
+      archiver: 7.0.1
+      c12: 3.3.4(magicast@0.5.2)
+      chokidar: 5.0.0
+      citty: 0.2.2
+      compatx: 0.2.0
+      confbox: 0.2.4
+      consola: 3.4.2
+      cookie-es: 2.0.1
+      croner: 10.0.1
+      crossws: 0.3.5
+      db0: 0.3.4(sqlite3@5.1.7)
+      defu: 6.1.6
+      destr: 2.0.5
+      dot-prop: 10.1.0
+      esbuild: 0.27.7
+      escape-string-regexp: 5.0.0
+      etag: 1.8.1
+      exsolve: 1.0.8
+      globby: 16.2.0
+      gzip-size: 7.0.0
+      h3: 1.15.11
+      hookable: 5.5.3
+      httpxy: 0.5.0
+      ioredis: 5.10.1
+      jiti: 2.6.1
+      klona: 2.0.6
+      knitwork: 1.3.0
+      listhen: 1.9.1(srvx@0.11.15)
+      magic-string: 0.30.21
+      magicast: 0.5.2
+      mime: 4.1.0
+      mlly: 1.8.2
+      node-fetch-native: 1.6.7
+      node-mock-http: 1.0.4
+      ofetch: 1.5.1
+      ohash: 2.0.11
+      pathe: 2.0.3
+      perfect-debounce: 2.1.0
+      pkg-types: 2.3.0
+      pretty-bytes: 7.1.0
+      radix3: 1.1.2
+      rollup: 4.60.1
+      rollup-plugin-visualizer: 7.0.1(rollup@4.60.1)
+      scule: 1.3.0
+      semver: 7.7.4
+      serve-placeholder: 2.0.2
+      serve-static: 2.2.1
+      source-map: 0.7.6
+      std-env: 4.0.0
+      ufo: 1.6.3
+      ultrahtml: 1.6.0
+      uncrypto: 0.1.3
+      unctx: 2.5.0
+      unenv: 2.0.0-rc.24
+      unimport: 6.0.2
+      unplugin-utils: 0.3.1
+      unstorage: 1.17.5(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1)
+      untyped: 2.0.0
+      unwasm: 0.5.3
+      youch: 4.1.1
+      youch-core: 0.3.3
+    optionalDependencies:
+      xml2js: 0.6.2
+    transitivePeerDependencies:
+      - '@azure/app-configuration'
+      - '@azure/cosmos'
+      - '@azure/data-tables'
+      - '@azure/identity'
+      - '@azure/keyvault-secrets'
+      - '@azure/storage-blob'
+      - '@capacitor/preferences'
+      - '@deno/kv'
+      - '@electric-sql/pglite'
+      - '@libsql/client'
+      - '@netlify/blobs'
+      - '@planetscale/database'
+      - '@upstash/redis'
+      - '@vercel/blob'
+      - '@vercel/functions'
+      - '@vercel/kv'
+      - aws4fetch
+      - bare-abort-controller
+      - bare-buffer
+      - better-sqlite3
+      - drizzle-orm
+      - encoding
+      - idb-keyval
+      - mysql2
+      - react-native-b4a
+      - rolldown
+      - sqlite3
+      - srvx
+      - supports-color
+      - uploadthing
+
+  node-abi@3.89.0:
+    dependencies:
+      semver: 7.7.4
+
+  node-addon-api@7.1.1: {}
+
+  node-fetch-native@1.6.7: {}
+
+  node-fetch@2.7.0(encoding@0.1.13):
+    dependencies:
+      whatwg-url: 5.0.0
+    optionalDependencies:
+      encoding: 0.1.13
+
+  node-forge@1.4.0: {}
+
+  node-gyp-build@4.8.4: {}
+
+  node-gyp@8.4.1:
+    dependencies:
+      env-paths: 2.2.1
+      glob: 7.2.3
+      graceful-fs: 4.2.11
+      make-fetch-happen: 9.1.0
+      nopt: 5.0.0
+      npmlog: 6.0.2
+      rimraf: 3.0.2
+      semver: 7.7.4
+      tar: 6.2.1
+      which: 2.0.2
+    transitivePeerDependencies:
+      - bluebird
+      - supports-color
+    optional: true
+
+  node-mock-http@1.0.4: {}
+
+  node-releases@2.0.37: {}
+
+  nopt@5.0.0:
+    dependencies:
+      abbrev: 1.1.1
+    optional: true
+
+  nopt@7.2.1:
+    dependencies:
+      abbrev: 2.0.0
+
+  nopt@8.1.0:
+    dependencies:
+      abbrev: 3.0.1
+
+  normalize-path@3.0.0: {}
+
+  npm-run-path@5.3.0:
+    dependencies:
+      path-key: 4.0.0
+
+  npm-run-path@6.0.0:
+    dependencies:
+      path-key: 4.0.0
+      unicorn-magic: 0.3.0
+
+  npmlog@6.0.2:
+    dependencies:
+      are-we-there-yet: 3.0.1
+      console-control-strings: 1.1.0
+      gauge: 4.0.4
+      set-blocking: 2.0.0
+    optional: true
+
+  nth-check@2.1.1:
+    dependencies:
+      boolbase: 1.0.0
+
+  nuxt-define@1.0.0: {}
+
+  nuxt@4.4.2(@babel/core@7.29.0)(@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.0))(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@parcel/watcher@2.5.6)(@types/node@25.6.0)(@vue/compiler-sfc@3.5.32)(cac@6.7.14)(db0@0.3.4(sqlite3@5.1.7))(encoding@0.1.13)(eslint@10.2.0(jiti@2.6.1))(ioredis@5.10.1)(lightningcss@1.32.0)(magicast@0.5.2)(optionator@0.9.4)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(rollup-plugin-visualizer@7.0.1(rollup@4.60.1))(rollup@4.60.1)(sqlite3@5.1.7)(srvx@0.11.15)(terser@5.46.1)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue-tsc@3.2.6(typescript@6.0.3))(xml2js@0.6.2)(yaml@2.8.3):
+    dependencies:
+      '@dxup/nuxt': 0.4.0(magicast@0.5.2)(typescript@6.0.3)
+      '@nuxt/cli': 3.34.0(@nuxt/schema@4.4.2)(cac@6.7.14)(magicast@0.5.2)
+      '@nuxt/devtools': 3.2.4(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue@3.5.32(typescript@6.0.3))
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      '@nuxt/nitro-server': 4.4.2(@babel/core@7.29.0)(db0@0.3.4(sqlite3@5.1.7))(encoding@0.1.13)(ioredis@5.10.1)(magicast@0.5.2)(nuxt@4.4.2(@babel/core@7.29.0)(@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.0))(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@parcel/watcher@2.5.6)(@types/node@25.6.0)(@vue/compiler-sfc@3.5.32)(cac@6.7.14)(db0@0.3.4(sqlite3@5.1.7))(encoding@0.1.13)(eslint@10.2.0(jiti@2.6.1))(ioredis@5.10.1)(lightningcss@1.32.0)(magicast@0.5.2)(optionator@0.9.4)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(rollup-plugin-visualizer@7.0.1(rollup@4.60.1))(rollup@4.60.1)(sqlite3@5.1.7)(srvx@0.11.15)(terser@5.46.1)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue-tsc@3.2.6(typescript@6.0.3))(xml2js@0.6.2)(yaml@2.8.3))(sqlite3@5.1.7)(srvx@0.11.15)(typescript@6.0.3)(xml2js@0.6.2)
+      '@nuxt/schema': 4.4.2
+      '@nuxt/telemetry': 2.8.0(@nuxt/kit@4.4.2(magicast@0.5.2))
+      '@nuxt/vite-builder': 4.4.2(7572ad54e4105a63e4ecba766cf230f4)
+      '@unhead/vue': 2.1.13(vue@3.5.32(typescript@6.0.3))
+      '@vue/shared': 3.5.32
+      c12: 3.3.4(magicast@0.5.2)
+      chokidar: 5.0.0
+      compatx: 0.2.0
+      consola: 3.4.2
+      cookie-es: 2.0.1
+      defu: 6.1.6
+      devalue: 5.6.4
+      errx: 0.1.0
+      escape-string-regexp: 5.0.0
+      exsolve: 1.0.8
+      hookable: 6.1.0
+      ignore: 7.0.5
+      impound: 1.1.5
+      jiti: 2.6.1
+      klona: 2.0.6
+      knitwork: 1.3.0
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      nanotar: 0.3.0
+      nypm: 0.6.5
+      ofetch: 1.5.1
+      ohash: 2.0.11
+      on-change: 6.0.2
+      oxc-minify: 0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+      oxc-parser: 0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+      oxc-transform: 0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+      oxc-walker: 0.7.0(oxc-parser@0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2))
+      pathe: 2.0.3
+      perfect-debounce: 2.1.0
+      picomatch: 4.0.4
+      pkg-types: 2.3.0
+      rou3: 0.8.1
+      scule: 1.3.0
+      semver: 7.7.4
+      std-env: 4.0.0
+      tinyglobby: 0.2.15
+      ufo: 1.6.3
+      ultrahtml: 1.6.0
+      uncrypto: 0.1.3
+      unctx: 2.5.0
+      unimport: 6.0.2
+      unplugin: 3.0.0
+      unrouting: 0.1.7
+      untyped: 2.0.0
+      vue: 3.5.32(typescript@6.0.3)
+      vue-router: 5.0.4(@vue/compiler-sfc@3.5.32)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3))
+    optionalDependencies:
+      '@parcel/watcher': 2.5.6
+      '@types/node': 25.6.0
+    transitivePeerDependencies:
+      - '@azure/app-configuration'
+      - '@azure/cosmos'
+      - '@azure/data-tables'
+      - '@azure/identity'
+      - '@azure/keyvault-secrets'
+      - '@azure/storage-blob'
+      - '@babel/core'
+      - '@babel/plugin-proposal-decorators'
+      - '@babel/plugin-syntax-jsx'
+      - '@biomejs/biome'
+      - '@capacitor/preferences'
+      - '@deno/kv'
+      - '@electric-sql/pglite'
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+      - '@libsql/client'
+      - '@netlify/blobs'
+      - '@pinia/colada'
+      - '@planetscale/database'
+      - '@rollup/plugin-babel'
+      - '@upstash/redis'
+      - '@vercel/blob'
+      - '@vercel/functions'
+      - '@vercel/kv'
+      - '@vitejs/devtools'
+      - '@vue/compiler-sfc'
+      - aws4fetch
+      - bare-abort-controller
+      - bare-buffer
+      - better-sqlite3
+      - bufferutil
+      - cac
+      - commander
+      - db0
+      - drizzle-orm
+      - encoding
+      - eslint
+      - idb-keyval
+      - ioredis
+      - less
+      - lightningcss
+      - magicast
+      - meow
+      - mysql2
+      - optionator
+      - oxlint
+      - pinia
+      - react-native-b4a
+      - rolldown
+      - rollup
+      - rollup-plugin-visualizer
+      - sass
+      - sass-embedded
+      - sqlite3
+      - srvx
+      - stylelint
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - typescript
+      - uploadthing
+      - utf-8-validate
+      - vite
+      - vls
+      - vti
+      - vue-tsc
+      - xml2js
+      - yaml
+
+  nypm@0.6.5:
+    dependencies:
+      citty: 0.2.2
+      pathe: 2.0.3
+      tinyexec: 1.1.1
+
+  object-deep-merge@2.0.0: {}
+
+  obug@2.1.1: {}
+
+  ofetch@1.5.1:
+    dependencies:
+      destr: 2.0.5
+      node-fetch-native: 1.6.7
+      ufo: 1.6.3
+
+  ofetch@2.0.0-alpha.3: {}
+
+  ohash@2.0.11: {}
+
+  on-change@6.0.2: {}
+
+  on-finished@2.4.1:
+    dependencies:
+      ee-first: 1.1.1
+
+  once@1.4.0:
+    dependencies:
+      wrappy: 1.0.2
+
+  onetime@6.0.0:
+    dependencies:
+      mimic-fn: 4.0.0
+
+  open@10.2.0:
+    dependencies:
+      default-browser: 5.5.0
+      define-lazy-prop: 3.0.0
+      is-inside-container: 1.0.0
+      wsl-utils: 0.1.0
+
+  open@11.0.0:
+    dependencies:
+      default-browser: 5.5.0
+      define-lazy-prop: 3.0.0
+      is-in-ssh: 1.0.0
+      is-inside-container: 1.0.0
+      powershell-utils: 0.1.0
+      wsl-utils: 0.3.1
+
+  open@8.4.2:
+    dependencies:
+      define-lazy-prop: 2.0.0
+      is-docker: 2.2.1
+      is-wsl: 2.2.0
+
+  optionator@0.9.4:
+    dependencies:
+      deep-is: 0.1.4
+      fast-levenshtein: 2.0.6
+      levn: 0.4.1
+      prelude-ls: 1.2.1
+      type-check: 0.4.0
+      word-wrap: 1.2.5
+
+  orderedmap@2.1.1: {}
+
+  oxc-minify@0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2):
+    optionalDependencies:
+      '@oxc-minify/binding-android-arm-eabi': 0.117.0
+      '@oxc-minify/binding-android-arm64': 0.117.0
+      '@oxc-minify/binding-darwin-arm64': 0.117.0
+      '@oxc-minify/binding-darwin-x64': 0.117.0
+      '@oxc-minify/binding-freebsd-x64': 0.117.0
+      '@oxc-minify/binding-linux-arm-gnueabihf': 0.117.0
+      '@oxc-minify/binding-linux-arm-musleabihf': 0.117.0
+      '@oxc-minify/binding-linux-arm64-gnu': 0.117.0
+      '@oxc-minify/binding-linux-arm64-musl': 0.117.0
+      '@oxc-minify/binding-linux-ppc64-gnu': 0.117.0
+      '@oxc-minify/binding-linux-riscv64-gnu': 0.117.0
+      '@oxc-minify/binding-linux-riscv64-musl': 0.117.0
+      '@oxc-minify/binding-linux-s390x-gnu': 0.117.0
+      '@oxc-minify/binding-linux-x64-gnu': 0.117.0
+      '@oxc-minify/binding-linux-x64-musl': 0.117.0
+      '@oxc-minify/binding-openharmony-arm64': 0.117.0
+      '@oxc-minify/binding-wasm32-wasi': 0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+      '@oxc-minify/binding-win32-arm64-msvc': 0.117.0
+      '@oxc-minify/binding-win32-ia32-msvc': 0.117.0
+      '@oxc-minify/binding-win32-x64-msvc': 0.117.0
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+
+  oxc-parser@0.112.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2):
+    dependencies:
+      '@oxc-project/types': 0.112.0
+    optionalDependencies:
+      '@oxc-parser/binding-android-arm-eabi': 0.112.0
+      '@oxc-parser/binding-android-arm64': 0.112.0
+      '@oxc-parser/binding-darwin-arm64': 0.112.0
+      '@oxc-parser/binding-darwin-x64': 0.112.0
+      '@oxc-parser/binding-freebsd-x64': 0.112.0
+      '@oxc-parser/binding-linux-arm-gnueabihf': 0.112.0
+      '@oxc-parser/binding-linux-arm-musleabihf': 0.112.0
+      '@oxc-parser/binding-linux-arm64-gnu': 0.112.0
+      '@oxc-parser/binding-linux-arm64-musl': 0.112.0
+      '@oxc-parser/binding-linux-ppc64-gnu': 0.112.0
+      '@oxc-parser/binding-linux-riscv64-gnu': 0.112.0
+      '@oxc-parser/binding-linux-riscv64-musl': 0.112.0
+      '@oxc-parser/binding-linux-s390x-gnu': 0.112.0
+      '@oxc-parser/binding-linux-x64-gnu': 0.112.0
+      '@oxc-parser/binding-linux-x64-musl': 0.112.0
+      '@oxc-parser/binding-openharmony-arm64': 0.112.0
+      '@oxc-parser/binding-wasm32-wasi': 0.112.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+      '@oxc-parser/binding-win32-arm64-msvc': 0.112.0
+      '@oxc-parser/binding-win32-ia32-msvc': 0.112.0
+      '@oxc-parser/binding-win32-x64-msvc': 0.112.0
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+
+  oxc-parser@0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2):
+    dependencies:
+      '@oxc-project/types': 0.117.0
+    optionalDependencies:
+      '@oxc-parser/binding-android-arm-eabi': 0.117.0
+      '@oxc-parser/binding-android-arm64': 0.117.0
+      '@oxc-parser/binding-darwin-arm64': 0.117.0
+      '@oxc-parser/binding-darwin-x64': 0.117.0
+      '@oxc-parser/binding-freebsd-x64': 0.117.0
+      '@oxc-parser/binding-linux-arm-gnueabihf': 0.117.0
+      '@oxc-parser/binding-linux-arm-musleabihf': 0.117.0
+      '@oxc-parser/binding-linux-arm64-gnu': 0.117.0
+      '@oxc-parser/binding-linux-arm64-musl': 0.117.0
+      '@oxc-parser/binding-linux-ppc64-gnu': 0.117.0
+      '@oxc-parser/binding-linux-riscv64-gnu': 0.117.0
+      '@oxc-parser/binding-linux-riscv64-musl': 0.117.0
+      '@oxc-parser/binding-linux-s390x-gnu': 0.117.0
+      '@oxc-parser/binding-linux-x64-gnu': 0.117.0
+      '@oxc-parser/binding-linux-x64-musl': 0.117.0
+      '@oxc-parser/binding-openharmony-arm64': 0.117.0
+      '@oxc-parser/binding-wasm32-wasi': 0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+      '@oxc-parser/binding-win32-arm64-msvc': 0.117.0
+      '@oxc-parser/binding-win32-ia32-msvc': 0.117.0
+      '@oxc-parser/binding-win32-x64-msvc': 0.117.0
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+
+  oxc-transform@0.112.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2):
+    optionalDependencies:
+      '@oxc-transform/binding-android-arm-eabi': 0.112.0
+      '@oxc-transform/binding-android-arm64': 0.112.0
+      '@oxc-transform/binding-darwin-arm64': 0.112.0
+      '@oxc-transform/binding-darwin-x64': 0.112.0
+      '@oxc-transform/binding-freebsd-x64': 0.112.0
+      '@oxc-transform/binding-linux-arm-gnueabihf': 0.112.0
+      '@oxc-transform/binding-linux-arm-musleabihf': 0.112.0
+      '@oxc-transform/binding-linux-arm64-gnu': 0.112.0
+      '@oxc-transform/binding-linux-arm64-musl': 0.112.0
+      '@oxc-transform/binding-linux-ppc64-gnu': 0.112.0
+      '@oxc-transform/binding-linux-riscv64-gnu': 0.112.0
+      '@oxc-transform/binding-linux-riscv64-musl': 0.112.0
+      '@oxc-transform/binding-linux-s390x-gnu': 0.112.0
+      '@oxc-transform/binding-linux-x64-gnu': 0.112.0
+      '@oxc-transform/binding-linux-x64-musl': 0.112.0
+      '@oxc-transform/binding-openharmony-arm64': 0.112.0
+      '@oxc-transform/binding-wasm32-wasi': 0.112.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+      '@oxc-transform/binding-win32-arm64-msvc': 0.112.0
+      '@oxc-transform/binding-win32-ia32-msvc': 0.112.0
+      '@oxc-transform/binding-win32-x64-msvc': 0.112.0
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+
+  oxc-transform@0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2):
+    optionalDependencies:
+      '@oxc-transform/binding-android-arm-eabi': 0.117.0
+      '@oxc-transform/binding-android-arm64': 0.117.0
+      '@oxc-transform/binding-darwin-arm64': 0.117.0
+      '@oxc-transform/binding-darwin-x64': 0.117.0
+      '@oxc-transform/binding-freebsd-x64': 0.117.0
+      '@oxc-transform/binding-linux-arm-gnueabihf': 0.117.0
+      '@oxc-transform/binding-linux-arm-musleabihf': 0.117.0
+      '@oxc-transform/binding-linux-arm64-gnu': 0.117.0
+      '@oxc-transform/binding-linux-arm64-musl': 0.117.0
+      '@oxc-transform/binding-linux-ppc64-gnu': 0.117.0
+      '@oxc-transform/binding-linux-riscv64-gnu': 0.117.0
+      '@oxc-transform/binding-linux-riscv64-musl': 0.117.0
+      '@oxc-transform/binding-linux-s390x-gnu': 0.117.0
+      '@oxc-transform/binding-linux-x64-gnu': 0.117.0
+      '@oxc-transform/binding-linux-x64-musl': 0.117.0
+      '@oxc-transform/binding-openharmony-arm64': 0.117.0
+      '@oxc-transform/binding-wasm32-wasi': 0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+      '@oxc-transform/binding-win32-arm64-msvc': 0.117.0
+      '@oxc-transform/binding-win32-ia32-msvc': 0.117.0
+      '@oxc-transform/binding-win32-x64-msvc': 0.117.0
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+
+  oxc-walker@0.7.0(oxc-parser@0.112.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)):
+    dependencies:
+      magic-regexp: 0.10.0
+      oxc-parser: 0.112.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+
+  oxc-walker@0.7.0(oxc-parser@0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)):
+    dependencies:
+      magic-regexp: 0.10.0
+      oxc-parser: 0.117.0(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)
+
+  p-limit@3.1.0:
+    dependencies:
+      yocto-queue: 0.1.0
+
+  p-limit@4.0.0:
+    dependencies:
+      yocto-queue: 1.2.2
+
+  p-locate@5.0.0:
+    dependencies:
+      p-limit: 3.1.0
+
+  p-locate@6.0.0:
+    dependencies:
+      p-limit: 4.0.0
+
+  p-map@4.0.0:
+    dependencies:
+      aggregate-error: 3.1.0
+    optional: true
+
+  package-json-from-dist@1.0.1: {}
+
+  package-manager-detector@1.6.0: {}
+
+  parse-imports-exports@0.2.4:
+    dependencies:
+      parse-statements: 1.0.11
+
+  parse-statements@1.0.11: {}
+
+  parseurl@1.3.3: {}
+
+  path-browserify@1.0.1: {}
+
+  path-exists@4.0.0: {}
+
+  path-is-absolute@1.0.1:
+    optional: true
+
+  path-key@3.1.1: {}
+
+  path-key@4.0.0: {}
+
+  path-parse@1.0.7: {}
+
+  path-scurry@1.11.1:
+    dependencies:
+      lru-cache: 10.4.3
+      minipass: 7.1.3
+
+  path-scurry@2.0.2:
+    dependencies:
+      lru-cache: 11.3.0
+      minipass: 7.1.3
+
+  pathe@1.1.2: {}
+
+  pathe@2.0.3: {}
+
+  pend@1.2.0: {}
+
+  perfect-debounce@1.0.0: {}
+
+  perfect-debounce@2.1.0: {}
+
+  picocolors@1.1.1: {}
+
+  picomatch@2.3.2: {}
+
+  picomatch@4.0.4: {}
+
+  pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)):
+    dependencies:
+      '@vue/devtools-api': 7.7.9
+      vue: 3.5.32(typescript@6.0.3)
+    optionalDependencies:
+      typescript: 6.0.3
+
+  pkg-types@1.3.1:
+    dependencies:
+      confbox: 0.1.8
+      mlly: 1.8.2
+      pathe: 2.0.3
+
+  pkg-types@2.3.0:
+    dependencies:
+      confbox: 0.2.4
+      exsolve: 1.0.8
+      pathe: 2.0.3
+
+  playwright-core@1.59.1: {}
+
+  plist@3.1.0:
+    dependencies:
+      '@xmldom/xmldom': 0.8.12
+      base64-js: 1.5.1
+      xmlbuilder: 15.1.1
+
+  pluralize@8.0.0: {}
+
+  pocketbase-typegen@1.3.3(encoding@0.1.13):
+    dependencies:
+      commander: 9.5.0
+      cross-fetch: 3.2.0(encoding@0.1.13)
+      dotenv-flow: 4.1.0
+      form-data: 4.0.5
+      sqlite: 4.2.1
+      sqlite3: 5.1.7
+    transitivePeerDependencies:
+      - bluebird
+      - encoding
+      - supports-color
+
+  pocketbase@0.26.8: {}
+
+  postcss-calc@10.1.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-selector-parser: 7.1.1
+      postcss-value-parser: 4.2.0
+
+  postcss-colormin@7.0.7(postcss@8.5.8):
+    dependencies:
+      '@colordx/core': 5.0.3
+      browserslist: 4.28.2
+      caniuse-api: 3.0.0
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-convert-values@7.0.9(postcss@8.5.8):
+    dependencies:
+      browserslist: 4.28.2
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-discard-comments@7.0.6(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-selector-parser: 7.1.1
+
+  postcss-discard-duplicates@7.0.2(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+
+  postcss-discard-empty@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+
+  postcss-discard-overridden@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+
+  postcss-merge-longhand@7.0.5(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+      stylehacks: 7.0.8(postcss@8.5.8)
+
+  postcss-merge-rules@7.0.8(postcss@8.5.8):
+    dependencies:
+      browserslist: 4.28.2
+      caniuse-api: 3.0.0
+      cssnano-utils: 5.0.1(postcss@8.5.8)
+      postcss: 8.5.8
+      postcss-selector-parser: 7.1.1
+
+  postcss-minify-font-values@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-minify-gradients@7.0.2(postcss@8.5.8):
+    dependencies:
+      '@colordx/core': 5.0.3
+      cssnano-utils: 5.0.1(postcss@8.5.8)
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-minify-params@7.0.6(postcss@8.5.8):
+    dependencies:
+      browserslist: 4.28.2
+      cssnano-utils: 5.0.1(postcss@8.5.8)
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-minify-selectors@7.0.6(postcss@8.5.8):
+    dependencies:
+      cssesc: 3.0.0
+      postcss: 8.5.8
+      postcss-selector-parser: 7.1.1
+
+  postcss-normalize-charset@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+
+  postcss-normalize-display-values@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-normalize-positions@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-normalize-repeat-style@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-normalize-string@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-normalize-timing-functions@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-normalize-unicode@7.0.6(postcss@8.5.8):
+    dependencies:
+      browserslist: 4.28.2
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-normalize-url@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-normalize-whitespace@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-ordered-values@7.0.2(postcss@8.5.8):
+    dependencies:
+      cssnano-utils: 5.0.1(postcss@8.5.8)
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-reduce-initial@7.0.6(postcss@8.5.8):
+    dependencies:
+      browserslist: 4.28.2
+      caniuse-api: 3.0.0
+      postcss: 8.5.8
+
+  postcss-reduce-transforms@7.0.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+
+  postcss-selector-parser@7.1.1:
+    dependencies:
+      cssesc: 3.0.0
+      util-deprecate: 1.0.2
+
+  postcss-svgo@7.1.1(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-value-parser: 4.2.0
+      svgo: 4.0.1
+
+  postcss-unique-selectors@7.0.5(postcss@8.5.8):
+    dependencies:
+      postcss: 8.5.8
+      postcss-selector-parser: 7.1.1
+
+  postcss-value-parser@4.2.0: {}
+
+  postcss@8.5.8:
+    dependencies:
+      nanoid: 3.3.11
+      picocolors: 1.1.1
+      source-map-js: 1.2.1
+
+  powershell-utils@0.1.0: {}
+
+  prebuild-install@7.1.3:
+    dependencies:
+      detect-libc: 2.1.2
+      expand-template: 2.0.3
+      github-from-package: 0.0.0
+      minimist: 1.2.8
+      mkdirp-classic: 0.5.3
+      napi-build-utils: 2.0.0
+      node-abi: 3.89.0
+      pump: 3.0.4
+      rc: 1.2.8
+      simple-get: 4.0.1
+      tar-fs: 2.1.4
+      tunnel-agent: 0.6.0
+
+  prelude-ls@1.2.1: {}
+
+  pretty-bytes@7.1.0: {}
+
+  process-nextick-args@2.0.1: {}
+
+  process@0.11.10: {}
+
+  promise-inflight@1.0.1:
+    optional: true
+
+  promise-retry@2.0.1:
+    dependencies:
+      err-code: 2.0.3
+      retry: 0.12.0
+    optional: true
+
+  prompts@2.4.2:
+    dependencies:
+      kleur: 3.0.3
+      sisteransi: 1.0.5
+
+  prosemirror-changeset@2.4.0:
+    dependencies:
+      prosemirror-transform: 1.12.0
+
+  prosemirror-collab@1.3.1:
+    dependencies:
+      prosemirror-state: 1.4.4
+
+  prosemirror-commands@1.7.1:
+    dependencies:
+      prosemirror-model: 1.25.4
+      prosemirror-state: 1.4.4
+      prosemirror-transform: 1.12.0
+
+  prosemirror-dropcursor@1.8.2:
+    dependencies:
+      prosemirror-state: 1.4.4
+      prosemirror-transform: 1.12.0
+      prosemirror-view: 1.41.8
+
+  prosemirror-gapcursor@1.4.1:
+    dependencies:
+      prosemirror-keymap: 1.2.3
+      prosemirror-model: 1.25.4
+      prosemirror-state: 1.4.4
+      prosemirror-view: 1.41.8
+
+  prosemirror-history@1.5.0:
+    dependencies:
+      prosemirror-state: 1.4.4
+      prosemirror-transform: 1.12.0
+      prosemirror-view: 1.41.8
+      rope-sequence: 1.3.4
+
+  prosemirror-inputrules@1.5.1:
+    dependencies:
+      prosemirror-state: 1.4.4
+      prosemirror-transform: 1.12.0
+
+  prosemirror-keymap@1.2.3:
+    dependencies:
+      prosemirror-state: 1.4.4
+      w3c-keyname: 2.2.8
+
+  prosemirror-markdown@1.13.4:
+    dependencies:
+      '@types/markdown-it': 14.1.2
+      markdown-it: 14.1.1
+      prosemirror-model: 1.25.4
+
+  prosemirror-menu@1.3.0:
+    dependencies:
+      crelt: 1.0.6
+      prosemirror-commands: 1.7.1
+      prosemirror-history: 1.5.0
+      prosemirror-state: 1.4.4
+
+  prosemirror-model@1.25.4:
+    dependencies:
+      orderedmap: 2.1.1
+
+  prosemirror-schema-basic@1.2.4:
+    dependencies:
+      prosemirror-model: 1.25.4
+
+  prosemirror-schema-list@1.5.1:
+    dependencies:
+      prosemirror-model: 1.25.4
+      prosemirror-state: 1.4.4
+      prosemirror-transform: 1.12.0
+
+  prosemirror-state@1.4.4:
+    dependencies:
+      prosemirror-model: 1.25.4
+      prosemirror-transform: 1.12.0
+      prosemirror-view: 1.41.8
+
+  prosemirror-tables@1.8.5:
+    dependencies:
+      prosemirror-keymap: 1.2.3
+      prosemirror-model: 1.25.4
+      prosemirror-state: 1.4.4
+      prosemirror-transform: 1.12.0
+      prosemirror-view: 1.41.8
+
+  prosemirror-trailing-node@3.0.0(prosemirror-model@1.25.4)(prosemirror-state@1.4.4)(prosemirror-view@1.41.8):
+    dependencies:
+      '@remirror/core-constants': 3.0.0
+      escape-string-regexp: 4.0.0
+      prosemirror-model: 1.25.4
+      prosemirror-state: 1.4.4
+      prosemirror-view: 1.41.8
+
+  prosemirror-transform@1.12.0:
+    dependencies:
+      prosemirror-model: 1.25.4
+
+  prosemirror-view@1.41.8:
+    dependencies:
+      prosemirror-model: 1.25.4
+      prosemirror-state: 1.4.4
+      prosemirror-transform: 1.12.0
+
+  proto-list@1.2.4: {}
+
+  pump@3.0.4:
+    dependencies:
+      end-of-stream: 1.4.5
+      once: 1.4.0
+
+  punycode.js@2.3.1: {}
+
+  punycode@2.3.1: {}
+
+  quansync@0.2.11: {}
+
+  queue-microtask@1.2.3: {}
+
+  radix3@1.1.2: {}
+
+  range-parser@1.2.1: {}
+
+  rc9@3.0.1:
+    dependencies:
+      defu: 6.1.6
+      destr: 2.0.5
+
+  rc@1.2.8:
+    dependencies:
+      deep-extend: 0.6.0
+      ini: 1.3.8
+      minimist: 1.2.8
+      strip-json-comments: 2.0.1
+
+  readable-stream@2.3.8:
+    dependencies:
+      core-util-is: 1.0.3
+      inherits: 2.0.4
+      isarray: 1.0.0
+      process-nextick-args: 2.0.1
+      safe-buffer: 5.1.2
+      string_decoder: 1.1.1
+      util-deprecate: 1.0.2
+
+  readable-stream@3.6.2:
+    dependencies:
+      inherits: 2.0.4
+      string_decoder: 1.3.0
+      util-deprecate: 1.0.2
+
+  readable-stream@4.7.0:
+    dependencies:
+      abort-controller: 3.0.0
+      buffer: 6.0.3
+      events: 3.3.0
+      process: 0.11.10
+      string_decoder: 1.3.0
+
+  readdir-glob@1.1.3:
+    dependencies:
+      minimatch: 5.1.9
+
+  readdirp@4.1.2: {}
+
+  readdirp@5.0.0: {}
+
+  redis-errors@1.2.0: {}
+
+  redis-parser@3.0.0:
+    dependencies:
+      redis-errors: 1.2.0
+
+  refa@0.12.1:
+    dependencies:
+      '@eslint-community/regexpp': 4.12.2
+
+  regexp-ast-analysis@0.7.1:
+    dependencies:
+      '@eslint-community/regexpp': 4.12.2
+      refa: 0.12.1
+
+  regexp-tree@0.1.27: {}
+
+  regjsparser@0.13.1:
+    dependencies:
+      jsesc: 3.1.0
+
+  reka-ui@2.9.3(vue@3.5.32(typescript@6.0.3)):
+    dependencies:
+      '@floating-ui/dom': 1.7.6
+      '@floating-ui/vue': 1.1.11(vue@3.5.32(typescript@6.0.3))
+      '@internationalized/date': 3.12.0
+      '@internationalized/number': 3.6.5
+      '@tanstack/vue-virtual': 3.13.23(vue@3.5.32(typescript@6.0.3))
+      '@vueuse/core': 14.2.1(vue@3.5.32(typescript@6.0.3))
+      '@vueuse/shared': 14.2.1(vue@3.5.32(typescript@6.0.3))
+      aria-hidden: 1.2.6
+      defu: 6.1.6
+      ohash: 2.0.11
+      vue: 3.5.32(typescript@6.0.3)
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+
+  reserved-identifiers@1.2.0: {}
+
+  resolve-from@5.0.0: {}
+
+  resolve-pkg-maps@1.0.0: {}
+
+  resolve@1.22.11:
+    dependencies:
+      is-core-module: 2.16.1
+      path-parse: 1.0.7
+      supports-preserve-symlinks-flag: 1.0.0
+
+  retry@0.12.0:
+    optional: true
+
+  reusify@1.1.0: {}
+
+  rfdc@1.4.1: {}
+
+  rimraf@3.0.2:
+    dependencies:
+      glob: 7.2.3
+    optional: true
+
+  rimraf@6.1.3:
+    dependencies:
+      glob: 13.0.6
+      package-json-from-dist: 1.0.1
+
+  rollup-plugin-visualizer@7.0.1(rollup@4.60.1):
+    dependencies:
+      open: 11.0.0
+      picomatch: 4.0.4
+      source-map: 0.7.6
+      yargs: 18.0.0
+    optionalDependencies:
+      rollup: 4.60.1
+
+  rollup@4.60.1:
+    dependencies:
+      '@types/estree': 1.0.8
+    optionalDependencies:
+      '@rollup/rollup-android-arm-eabi': 4.60.1
+      '@rollup/rollup-android-arm64': 4.60.1
+      '@rollup/rollup-darwin-arm64': 4.60.1
+      '@rollup/rollup-darwin-x64': 4.60.1
+      '@rollup/rollup-freebsd-arm64': 4.60.1
+      '@rollup/rollup-freebsd-x64': 4.60.1
+      '@rollup/rollup-linux-arm-gnueabihf': 4.60.1
+      '@rollup/rollup-linux-arm-musleabihf': 4.60.1
+      '@rollup/rollup-linux-arm64-gnu': 4.60.1
+      '@rollup/rollup-linux-arm64-musl': 4.60.1
+      '@rollup/rollup-linux-loong64-gnu': 4.60.1
+      '@rollup/rollup-linux-loong64-musl': 4.60.1
+      '@rollup/rollup-linux-ppc64-gnu': 4.60.1
+      '@rollup/rollup-linux-ppc64-musl': 4.60.1
+      '@rollup/rollup-linux-riscv64-gnu': 4.60.1
+      '@rollup/rollup-linux-riscv64-musl': 4.60.1
+      '@rollup/rollup-linux-s390x-gnu': 4.60.1
+      '@rollup/rollup-linux-x64-gnu': 4.60.1
+      '@rollup/rollup-linux-x64-musl': 4.60.1
+      '@rollup/rollup-openbsd-x64': 4.60.1
+      '@rollup/rollup-openharmony-arm64': 4.60.1
+      '@rollup/rollup-win32-arm64-msvc': 4.60.1
+      '@rollup/rollup-win32-ia32-msvc': 4.60.1
+      '@rollup/rollup-win32-x64-gnu': 4.60.1
+      '@rollup/rollup-win32-x64-msvc': 4.60.1
+      fsevents: 2.3.3
+
+  rope-sequence@1.3.4: {}
+
+  rou3@0.8.1: {}
+
+  run-applescript@7.1.0: {}
+
+  run-parallel@1.2.0:
+    dependencies:
+      queue-microtask: 1.2.3
+
+  safe-buffer@5.1.2: {}
+
+  safe-buffer@5.2.1: {}
+
+  safer-buffer@2.1.2:
+    optional: true
+
+  sax@1.1.4: {}
+
+  sax@1.6.0: {}
+
+  scslre@0.3.0:
+    dependencies:
+      '@eslint-community/regexpp': 4.12.2
+      refa: 0.12.1
+      regexp-ast-analysis: 0.7.1
+
+  scule@1.3.0: {}
+
+  semver@6.3.1: {}
+
+  semver@7.7.4: {}
+
+  send@1.2.1:
+    dependencies:
+      debug: 4.4.3
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      fresh: 2.0.0
+      http-errors: 2.0.1
+      mime-types: 3.0.2
+      ms: 2.1.3
+      on-finished: 2.4.1
+      range-parser: 1.2.1
+      statuses: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
+
+  serialize-javascript@7.0.5: {}
+
+  seroval@1.5.2: {}
+
+  serve-placeholder@2.0.2:
+    dependencies:
+      defu: 6.1.6
+
+  serve-static@2.2.1:
+    dependencies:
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      parseurl: 1.3.3
+      send: 1.2.1
+    transitivePeerDependencies:
+      - supports-color
+
+  set-blocking@2.0.0:
+    optional: true
+
+  setprototypeof@1.2.0: {}
+
+  sharp@0.34.5:
+    dependencies:
+      '@img/colour': 1.1.0
+      detect-libc: 2.1.2
+      semver: 7.7.4
+    optionalDependencies:
+      '@img/sharp-darwin-arm64': 0.34.5
+      '@img/sharp-darwin-x64': 0.34.5
+      '@img/sharp-libvips-darwin-arm64': 1.2.4
+      '@img/sharp-libvips-darwin-x64': 1.2.4
+      '@img/sharp-libvips-linux-arm': 1.2.4
+      '@img/sharp-libvips-linux-arm64': 1.2.4
+      '@img/sharp-libvips-linux-ppc64': 1.2.4
+      '@img/sharp-libvips-linux-riscv64': 1.2.4
+      '@img/sharp-libvips-linux-s390x': 1.2.4
+      '@img/sharp-libvips-linux-x64': 1.2.4
+      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
+      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
+      '@img/sharp-linux-arm': 0.34.5
+      '@img/sharp-linux-arm64': 0.34.5
+      '@img/sharp-linux-ppc64': 0.34.5
+      '@img/sharp-linux-riscv64': 0.34.5
+      '@img/sharp-linux-s390x': 0.34.5
+      '@img/sharp-linux-x64': 0.34.5
+      '@img/sharp-linuxmusl-arm64': 0.34.5
+      '@img/sharp-linuxmusl-x64': 0.34.5
+      '@img/sharp-wasm32': 0.34.5
+      '@img/sharp-win32-arm64': 0.34.5
+      '@img/sharp-win32-ia32': 0.34.5
+      '@img/sharp-win32-x64': 0.34.5
+    optional: true
+
+  shebang-command@2.0.0:
+    dependencies:
+      shebang-regex: 3.0.0
+
+  shebang-regex@3.0.0: {}
+
+  shell-quote@1.8.3: {}
+
+  siginfo@2.0.0: {}
+
+  signal-exit@3.0.7: {}
+
+  signal-exit@4.1.0: {}
+
+  simple-concat@1.0.1: {}
+
+  simple-get@4.0.1:
+    dependencies:
+      decompress-response: 6.0.0
+      once: 1.4.0
+      simple-concat: 1.0.1
+
+  simple-git@3.35.1:
+    dependencies:
+      '@kwsites/file-exists': 1.1.1
+      '@kwsites/promise-deferred': 1.1.1
+      '@simple-git/args-pathspec': 1.0.1
+      '@simple-git/argv-parser': 1.0.2
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  sirv@3.0.2:
+    dependencies:
+      '@polka/url': 1.0.0-next.29
+      mrmime: 2.0.1
+      totalist: 3.0.1
+
+  sisteransi@1.0.5: {}
+
+  slash@5.1.0: {}
+
+  slice-ansi@4.0.0:
+    dependencies:
+      ansi-styles: 4.3.0
+      astral-regex: 2.0.0
+      is-fullwidth-code-point: 3.0.0
+
+  smart-buffer@4.2.0:
+    optional: true
+
+  smob@1.6.1: {}
+
+  socks-proxy-agent@6.2.1:
+    dependencies:
+      agent-base: 6.0.2
+      debug: 4.4.3
+      socks: 2.8.7
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
+  socks@2.8.7:
+    dependencies:
+      ip-address: 10.1.0
+      smart-buffer: 4.2.0
+    optional: true
+
+  source-map-js@1.2.1: {}
+
+  source-map-support@0.5.21:
+    dependencies:
+      buffer-from: 1.1.2
+      source-map: 0.6.1
+
+  source-map@0.6.1: {}
+
+  source-map@0.7.6: {}
+
+  spdx-exceptions@2.5.0: {}
+
+  spdx-expression-parse@4.0.0:
+    dependencies:
+      spdx-exceptions: 2.5.0
+      spdx-license-ids: 3.0.23
+
+  spdx-license-ids@3.0.23: {}
+
+  speakingurl@14.0.1: {}
+
+  split2@4.2.0: {}
+
+  sqlite3@5.1.7:
+    dependencies:
+      bindings: 1.5.0
+      node-addon-api: 7.1.1
+      prebuild-install: 7.1.3
+      tar: 6.2.1
+    optionalDependencies:
+      node-gyp: 8.4.1
+    transitivePeerDependencies:
+      - bluebird
+      - supports-color
+
+  sqlite@4.2.1: {}
+
+  srvx@0.11.15: {}
+
+  ssri@8.0.1:
+    dependencies:
+      minipass: 3.3.6
+    optional: true
+
+  stable-hash-x@0.2.0: {}
+
+  stackback@0.0.2: {}
+
+  standard-as-callback@2.1.0: {}
+
+  statuses@2.0.2: {}
+
+  std-env@3.10.0: {}
+
+  std-env@4.0.0: {}
+
+  streamx@2.25.0:
+    dependencies:
+      events-universal: 1.0.1
+      fast-fifo: 1.3.2
+      text-decoder: 1.2.7
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - react-native-b4a
+
+  string-width@4.2.3:
+    dependencies:
+      emoji-regex: 8.0.0
+      is-fullwidth-code-point: 3.0.0
+      strip-ansi: 6.0.1
+
+  string-width@5.1.2:
+    dependencies:
+      eastasianwidth: 0.2.0
+      emoji-regex: 9.2.2
+      strip-ansi: 7.2.0
+
+  string-width@7.2.0:
+    dependencies:
+      emoji-regex: 10.6.0
+      get-east-asian-width: 1.5.0
+      strip-ansi: 7.2.0
+
+  string_decoder@1.1.1:
+    dependencies:
+      safe-buffer: 5.1.2
+
+  string_decoder@1.3.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  strip-ansi@6.0.1:
+    dependencies:
+      ansi-regex: 5.0.1
+
+  strip-ansi@7.2.0:
+    dependencies:
+      ansi-regex: 6.2.2
+
+  strip-final-newline@3.0.0: {}
+
+  strip-indent@4.1.1: {}
+
+  strip-json-comments@2.0.1: {}
+
+  strip-literal@3.1.0:
+    dependencies:
+      js-tokens: 9.0.1
+
+  structured-clone-es@2.0.0: {}
+
+  stylehacks@7.0.8(postcss@8.5.8):
+    dependencies:
+      browserslist: 4.28.2
+      postcss: 8.5.8
+      postcss-selector-parser: 7.1.1
+
+  superjson@2.2.6:
+    dependencies:
+      copy-anything: 4.0.5
+
+  supports-color@10.2.2: {}
+
+  supports-preserve-symlinks-flag@1.0.0: {}
+
+  svgo@4.0.1:
+    dependencies:
+      commander: 11.1.0
+      css-select: 5.2.2
+      css-tree: 3.2.1
+      css-what: 6.2.2
+      csso: 5.0.5
+      picocolors: 1.1.1
+      sax: 1.6.0
+
+  tagged-tag@1.0.0: {}
+
+  tailwind-merge@3.5.0: {}
+
+  tailwind-variants@3.2.2(tailwind-merge@3.5.0)(tailwindcss@4.2.2):
+    dependencies:
+      tailwindcss: 4.2.2
+    optionalDependencies:
+      tailwind-merge: 3.5.0
+
+  tailwindcss@4.2.2: {}
+
+  tapable@2.3.2: {}
+
+  tar-fs@2.1.4:
+    dependencies:
+      chownr: 1.1.4
+      mkdirp-classic: 0.5.3
+      pump: 3.0.4
+      tar-stream: 2.2.0
+
+  tar-stream@2.2.0:
+    dependencies:
+      bl: 4.1.0
+      end-of-stream: 1.4.5
+      fs-constants: 1.0.0
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
+  tar-stream@3.1.8:
+    dependencies:
+      b4a: 1.8.0
+      bare-fs: 4.6.0
+      fast-fifo: 1.3.2
+      streamx: 2.25.0
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - react-native-b4a
+
+  tar@6.2.1:
+    dependencies:
+      chownr: 2.0.0
+      fs-minipass: 2.1.0
+      minipass: 5.0.0
+      minizlib: 2.1.2
+      mkdirp: 1.0.4
+      yallist: 4.0.0
+
+  tar@7.5.13:
+    dependencies:
+      '@isaacs/fs-minipass': 4.0.1
+      chownr: 3.0.0
+      minipass: 7.1.3
+      minizlib: 3.1.0
+      yallist: 5.0.0
+
+  teex@1.0.1:
+    dependencies:
+      streamx: 2.25.0
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - react-native-b4a
+
+  terser@5.46.1:
+    dependencies:
+      '@jridgewell/source-map': 0.3.11
+      acorn: 8.16.0
+      commander: 2.20.3
+      source-map-support: 0.5.21
+
+  text-decoder@1.2.7:
+    dependencies:
+      b4a: 1.8.0
+    transitivePeerDependencies:
+      - react-native-b4a
+
+  through2@4.0.2:
+    dependencies:
+      readable-stream: 3.6.2
+
+  tiny-inflate@1.0.3: {}
+
+  tiny-invariant@1.3.3: {}
+
+  tinybench@2.9.0: {}
+
+  tinyclip@0.1.12: {}
+
+  tinyexec@1.1.1: {}
+
+  tinyglobby@0.2.15:
+    dependencies:
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
+
+  tinyrainbow@3.1.0: {}
+
+  to-regex-range@5.0.1:
+    dependencies:
+      is-number: 7.0.0
+
+  to-valid-identifier@1.0.0:
+    dependencies:
+      '@sindresorhus/base62': 1.0.0
+      reserved-identifiers: 1.2.0
+
+  toidentifier@1.0.1: {}
+
+  tosource@2.0.0-alpha.3: {}
+
+  totalist@3.0.1: {}
+
+  tr46@0.0.3: {}
+
+  tree-kill@1.2.2: {}
+
+  ts-api-utils@2.5.0(typescript@6.0.3):
+    dependencies:
+      typescript: 6.0.3
+
+  tslib@2.8.1: {}
+
+  tunnel-agent@0.6.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  type-check@0.4.0:
+    dependencies:
+      prelude-ls: 1.2.1
+
+  type-fest@5.5.0:
+    dependencies:
+      tagged-tag: 1.0.0
+
+  type-level-regexp@0.1.17: {}
+
+  typescript@6.0.3: {}
+
+  uc.micro@2.1.0: {}
+
+  ufo@1.6.3: {}
+
+  ultrahtml@1.6.0: {}
+
+  uncrypto@0.1.3: {}
+
+  unctx@2.5.0:
+    dependencies:
+      acorn: 8.16.0
+      estree-walker: 3.0.3
+      magic-string: 0.30.21
+      unplugin: 2.3.11
+
+  undici-types@7.19.2: {}
+
+  unenv@2.0.0-rc.24:
+    dependencies:
+      pathe: 2.0.3
+
+  unhead@2.1.13:
+    dependencies:
+      hookable: 6.1.0
+
+  unicorn-magic@0.3.0: {}
+
+  unicorn-magic@0.4.0: {}
+
+  unifont@0.7.4:
+    dependencies:
+      css-tree: 3.2.1
+      ofetch: 1.5.1
+      ohash: 2.0.11
+
+  unimport@5.7.0:
+    dependencies:
+      acorn: 8.16.0
+      escape-string-regexp: 5.0.0
+      estree-walker: 3.0.3
+      local-pkg: 1.1.2
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      pathe: 2.0.3
+      picomatch: 4.0.4
+      pkg-types: 2.3.0
+      scule: 1.3.0
+      strip-literal: 3.1.0
+      tinyglobby: 0.2.15
+      unplugin: 2.3.11
+      unplugin-utils: 0.3.1
+
+  unimport@6.0.2:
+    dependencies:
+      acorn: 8.16.0
+      escape-string-regexp: 5.0.0
+      estree-walker: 3.0.3
+      local-pkg: 1.1.2
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      pathe: 2.0.3
+      picomatch: 4.0.4
+      pkg-types: 2.3.0
+      scule: 1.3.0
+      strip-literal: 3.1.0
+      tinyglobby: 0.2.15
+      unplugin: 3.0.0
+      unplugin-utils: 0.3.1
+
+  unique-filename@1.1.1:
+    dependencies:
+      unique-slug: 2.0.2
+    optional: true
+
+  unique-slug@2.0.2:
+    dependencies:
+      imurmurhash: 0.1.4
+    optional: true
+
+  universalify@2.0.1: {}
+
+  unplugin-auto-import@21.0.0(@nuxt/kit@4.4.2(magicast@0.5.2))(@vueuse/core@14.2.1(vue@3.5.32(typescript@6.0.3))):
+    dependencies:
+      local-pkg: 1.1.2
+      magic-string: 0.30.21
+      picomatch: 4.0.4
+      unimport: 5.7.0
+      unplugin: 2.3.11
+      unplugin-utils: 0.3.1
+    optionalDependencies:
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+      '@vueuse/core': 14.2.1(vue@3.5.32(typescript@6.0.3))
+
+  unplugin-utils@0.3.1:
+    dependencies:
+      pathe: 2.0.3
+      picomatch: 4.0.4
+
+  unplugin-vue-components@32.0.0(@nuxt/kit@4.4.2(magicast@0.5.2))(vue@3.5.32(typescript@6.0.3)):
+    dependencies:
+      chokidar: 5.0.0
+      local-pkg: 1.1.2
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      obug: 2.1.1
+      picomatch: 4.0.4
+      tinyglobby: 0.2.15
+      unplugin: 3.0.0
+      unplugin-utils: 0.3.1
+      vue: 3.5.32(typescript@6.0.3)
+    optionalDependencies:
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+
+  unplugin@2.3.11:
+    dependencies:
+      '@jridgewell/remapping': 2.3.5
+      acorn: 8.16.0
+      picomatch: 4.0.4
+      webpack-virtual-modules: 0.6.2
+
+  unplugin@3.0.0:
+    dependencies:
+      '@jridgewell/remapping': 2.3.5
+      picomatch: 4.0.4
+      webpack-virtual-modules: 0.6.2
+
+  unrouting@0.1.7:
+    dependencies:
+      escape-string-regexp: 5.0.0
+      ufo: 1.6.3
+
+  unrs-resolver@1.11.1:
+    dependencies:
+      napi-postinstall: 0.3.4
+    optionalDependencies:
+      '@unrs/resolver-binding-android-arm-eabi': 1.11.1
+      '@unrs/resolver-binding-android-arm64': 1.11.1
+      '@unrs/resolver-binding-darwin-arm64': 1.11.1
+      '@unrs/resolver-binding-darwin-x64': 1.11.1
+      '@unrs/resolver-binding-freebsd-x64': 1.11.1
+      '@unrs/resolver-binding-linux-arm-gnueabihf': 1.11.1
+      '@unrs/resolver-binding-linux-arm-musleabihf': 1.11.1
+      '@unrs/resolver-binding-linux-arm64-gnu': 1.11.1
+      '@unrs/resolver-binding-linux-arm64-musl': 1.11.1
+      '@unrs/resolver-binding-linux-ppc64-gnu': 1.11.1
+      '@unrs/resolver-binding-linux-riscv64-gnu': 1.11.1
+      '@unrs/resolver-binding-linux-riscv64-musl': 1.11.1
+      '@unrs/resolver-binding-linux-s390x-gnu': 1.11.1
+      '@unrs/resolver-binding-linux-x64-gnu': 1.11.1
+      '@unrs/resolver-binding-linux-x64-musl': 1.11.1
+      '@unrs/resolver-binding-wasm32-wasi': 1.11.1
+      '@unrs/resolver-binding-win32-arm64-msvc': 1.11.1
+      '@unrs/resolver-binding-win32-ia32-msvc': 1.11.1
+      '@unrs/resolver-binding-win32-x64-msvc': 1.11.1
+
+  unstorage@1.17.5(db0@0.3.4(sqlite3@5.1.7))(ioredis@5.10.1):
+    dependencies:
+      anymatch: 3.1.3
+      chokidar: 5.0.0
+      destr: 2.0.5
+      h3: 1.15.11
+      lru-cache: 11.3.0
+      node-fetch-native: 1.6.7
+      ofetch: 1.5.1
+      ufo: 1.6.3
+    optionalDependencies:
+      db0: 0.3.4(sqlite3@5.1.7)
+      ioredis: 5.10.1
+
+  untildify@4.0.0: {}
+
+  untun@0.1.3:
+    dependencies:
+      citty: 0.1.6
+      consola: 3.4.2
+      pathe: 1.1.2
+
+  untyped@2.0.0:
+    dependencies:
+      citty: 0.1.6
+      defu: 6.1.6
+      jiti: 2.6.1
+      knitwork: 1.3.0
+      scule: 1.3.0
+
+  unwasm@0.5.3:
+    dependencies:
+      exsolve: 1.0.8
+      knitwork: 1.3.0
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      pathe: 2.0.3
+      pkg-types: 2.3.0
+
+  update-browserslist-db@1.2.3(browserslist@4.28.2):
+    dependencies:
+      browserslist: 4.28.2
+      escalade: 3.2.0
+      picocolors: 1.1.1
+
+  uqr@0.1.3: {}
+
+  uri-js@4.4.1:
+    dependencies:
+      punycode: 2.3.1
+
+  util-deprecate@1.0.2: {}
+
+  vaul-vue@0.4.1(reka-ui@2.9.3(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3)):
+    dependencies:
+      '@vueuse/core': 10.11.1(vue@3.5.32(typescript@6.0.3))
+      reka-ui: 2.9.3(vue@3.5.32(typescript@6.0.3))
+      vue: 3.5.32(typescript@6.0.3)
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+
+  vite-dev-rpc@1.1.0(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)):
+    dependencies:
+      birpc: 2.9.0
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+      vite-hot-client: 2.1.0(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+
+  vite-hot-client@2.1.0(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)):
+    dependencies:
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+
+  vite-node@5.3.0(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3):
+    dependencies:
+      cac: 6.7.14
+      es-module-lexer: 2.0.0
+      obug: 2.1.1
+      pathe: 2.0.3
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - '@types/node'
+      - jiti
+      - less
+      - lightningcss
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - yaml
+
+  vite-plugin-checker@0.12.0(eslint@10.2.0(jiti@2.6.1))(optionator@0.9.4)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue-tsc@3.2.6(typescript@6.0.3)):
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      chokidar: 4.0.3
+      npm-run-path: 6.0.0
+      picocolors: 1.1.1
+      picomatch: 4.0.4
+      tiny-invariant: 1.3.3
+      tinyglobby: 0.2.15
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+      vscode-uri: 3.1.0
+    optionalDependencies:
+      eslint: 10.2.0(jiti@2.6.1)
+      optionator: 0.9.4
+      typescript: 6.0.3
+      vue-tsc: 3.2.6(typescript@6.0.3)
+
+  vite-plugin-inspect@11.3.3(@nuxt/kit@4.4.2(magicast@0.5.2))(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)):
+    dependencies:
+      ansis: 4.2.0
+      debug: 4.4.3
+      error-stack-parser-es: 1.0.5
+      ohash: 2.0.11
+      open: 10.2.0
+      perfect-debounce: 2.1.0
+      sirv: 3.0.2
+      unplugin-utils: 0.3.1
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+      vite-dev-rpc: 1.1.0(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+    optionalDependencies:
+      '@nuxt/kit': 4.4.2(magicast@0.5.2)
+    transitivePeerDependencies:
+      - supports-color
+
+  vite-plugin-vue-tracer@1.3.0(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vue@3.5.32(typescript@6.0.3)):
+    dependencies:
+      estree-walker: 3.0.3
+      exsolve: 1.0.8
+      magic-string: 0.30.21
+      pathe: 2.0.3
+      source-map-js: 1.2.1
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+      vue: 3.5.32(typescript@6.0.3)
+
+  vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3):
+    dependencies:
+      esbuild: 0.27.7
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
+      postcss: 8.5.8
+      rollup: 4.60.1
+      tinyglobby: 0.2.15
+    optionalDependencies:
+      '@types/node': 25.6.0
+      fsevents: 2.3.3
+      jiti: 2.6.1
+      lightningcss: 1.32.0
+      terser: 5.46.1
+      yaml: 2.8.3
+
+  vitest-environment-nuxt@2.0.0(@vue/test-utils@2.4.6)(crossws@0.4.4(srvx@0.11.15))(happy-dom@20.9.0)(magicast@0.5.2)(playwright-core@1.59.1)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vitest@4.1.4(@types/node@25.6.0)(happy-dom@20.9.0)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))):
+    dependencies:
+      '@nuxt/test-utils': 4.0.2(@vue/test-utils@2.4.6)(crossws@0.4.4(srvx@0.11.15))(happy-dom@20.9.0)(magicast@0.5.2)(playwright-core@1.59.1)(typescript@6.0.3)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))(vitest@4.1.4(@types/node@25.6.0)(happy-dom@20.9.0)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)))
+    transitivePeerDependencies:
+      - '@cucumber/cucumber'
+      - '@jest/globals'
+      - '@playwright/test'
+      - '@testing-library/vue'
+      - '@vitest/ui'
+      - '@vue/test-utils'
+      - crossws
+      - happy-dom
+      - jsdom
+      - magicast
+      - playwright-core
+      - typescript
+      - vite
+      - vitest
+
+  vitest@4.1.4(@types/node@25.6.0)(happy-dom@20.9.0)(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)):
+    dependencies:
+      '@vitest/expect': 4.1.4
+      '@vitest/mocker': 4.1.4(vite@7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3))
+      '@vitest/pretty-format': 4.1.4
+      '@vitest/runner': 4.1.4
+      '@vitest/snapshot': 4.1.4
+      '@vitest/spy': 4.1.4
+      '@vitest/utils': 4.1.4
+      es-module-lexer: 2.0.0
+      expect-type: 1.3.0
+      magic-string: 0.30.21
+      obug: 2.1.1
+      pathe: 2.0.3
+      picomatch: 4.0.4
+      std-env: 4.0.0
+      tinybench: 2.9.0
+      tinyexec: 1.1.1
+      tinyglobby: 0.2.15
+      tinyrainbow: 3.1.0
+      vite: 7.3.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.1)(yaml@2.8.3)
+      why-is-node-running: 2.3.0
+    optionalDependencies:
+      '@types/node': 25.6.0
+      happy-dom: 20.9.0
+    transitivePeerDependencies:
+      - msw
+
+  vscode-uri@3.1.0: {}
+
+  vue-bundle-renderer@2.2.0:
+    dependencies:
+      ufo: 1.6.3
+
+  vue-component-type-helpers@2.2.12: {}
+
+  vue-component-type-helpers@3.2.6: {}
+
+  vue-demi@0.14.10(vue@3.5.32(typescript@6.0.3)):
+    dependencies:
+      vue: 3.5.32(typescript@6.0.3)
+
+  vue-devtools-stub@0.1.0: {}
+
+  vue-eslint-parser@10.4.0(eslint@10.2.0(jiti@2.6.1)):
+    dependencies:
+      debug: 4.4.3
+      eslint: 10.2.0(jiti@2.6.1)
+      eslint-scope: 9.1.2
+      eslint-visitor-keys: 5.0.1
+      espree: 11.2.0
+      esquery: 1.7.0
+      semver: 7.7.4
+    transitivePeerDependencies:
+      - supports-color
+
+  vue-i18n@11.3.1(vue@3.5.32(typescript@6.0.3)):
+    dependencies:
+      '@intlify/core-base': 11.3.1
+      '@intlify/devtools-types': 11.3.1
+      '@intlify/shared': 11.3.1
+      '@vue/devtools-api': 6.6.4
+      vue: 3.5.32(typescript@6.0.3)
+
+  vue-router@5.0.4(@vue/compiler-sfc@3.5.32)(pinia@3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3)))(vue@3.5.32(typescript@6.0.3)):
+    dependencies:
+      '@babel/generator': 7.29.1
+      '@vue-macros/common': 3.1.2(vue@3.5.32(typescript@6.0.3))
+      '@vue/devtools-api': 8.1.1
+      ast-walker-scope: 0.8.3
+      chokidar: 5.0.0
+      json5: 2.2.3
+      local-pkg: 1.1.2
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      muggle-string: 0.4.1
+      pathe: 2.0.3
+      picomatch: 4.0.4
+      scule: 1.3.0
+      tinyglobby: 0.2.15
+      unplugin: 3.0.0
+      unplugin-utils: 0.3.1
+      vue: 3.5.32(typescript@6.0.3)
+      yaml: 2.8.3
+    optionalDependencies:
+      '@vue/compiler-sfc': 3.5.32
+      pinia: 3.0.4(typescript@6.0.3)(vue@3.5.32(typescript@6.0.3))
+
+  vue-tsc@3.2.6(typescript@6.0.3):
+    dependencies:
+      '@volar/typescript': 2.4.28
+      '@vue/language-core': 3.2.6
+      typescript: 6.0.3
+
+  vue@3.5.32(typescript@6.0.3):
+    dependencies:
+      '@vue/compiler-dom': 3.5.32
+      '@vue/compiler-sfc': 3.5.32
+      '@vue/runtime-dom': 3.5.32
+      '@vue/server-renderer': 3.5.32(vue@3.5.32(typescript@6.0.3))
+      '@vue/shared': 3.5.32
+    optionalDependencies:
+      typescript: 6.0.3
+
+  w3c-keyname@2.2.8: {}
+
+  webidl-conversions@3.0.1: {}
+
+  webpack-virtual-modules@0.6.2: {}
+
+  whatwg-mimetype@3.0.0: {}
+
+  whatwg-url@5.0.0:
+    dependencies:
+      tr46: 0.0.3
+      webidl-conversions: 3.0.1
+
+  wheel-gestures@2.2.48: {}
+
+  which@2.0.2:
+    dependencies:
+      isexe: 2.0.0
+
+  which@6.0.1:
+    dependencies:
+      isexe: 4.0.0
+
+  why-is-node-running@2.3.0:
+    dependencies:
+      siginfo: 2.0.0
+      stackback: 0.0.2
+
+  wide-align@1.1.5:
+    dependencies:
+      string-width: 4.2.3
+    optional: true
+
+  word-wrap@1.2.5: {}
+
+  wrap-ansi@7.0.0:
+    dependencies:
+      ansi-styles: 4.3.0
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+
+  wrap-ansi@8.1.0:
+    dependencies:
+      ansi-styles: 6.2.3
+      string-width: 5.1.2
+      strip-ansi: 7.2.0
+
+  wrap-ansi@9.0.2:
+    dependencies:
+      ansi-styles: 6.2.3
+      string-width: 7.2.0
+      strip-ansi: 7.2.0
+
+  wrappy@1.0.2: {}
+
+  ws@8.20.0: {}
+
+  wsl-utils@0.1.0:
+    dependencies:
+      is-wsl: 3.1.1
+
+  wsl-utils@0.3.1:
+    dependencies:
+      is-wsl: 3.1.1
+      powershell-utils: 0.1.0
+
+  xml-name-validator@4.0.0: {}
+
+  xml2js@0.6.2:
+    dependencies:
+      sax: 1.6.0
+      xmlbuilder: 11.0.1
+
+  xmlbuilder@11.0.1: {}
+
+  xmlbuilder@15.1.1: {}
+
+  xss@1.0.15:
+    dependencies:
+      commander: 2.20.3
+      cssfilter: 0.0.10
+    optional: true
+
+  y-protocols@1.0.7(yjs@13.6.30):
+    dependencies:
+      lib0: 0.2.117
+      yjs: 13.6.30
+
+  y18n@5.0.8: {}
+
+  yallist@3.1.1: {}
+
+  yallist@4.0.0: {}
+
+  yallist@5.0.0: {}
+
+  yaml-eslint-parser@1.3.2:
+    dependencies:
+      eslint-visitor-keys: 3.4.3
+      yaml: 2.8.3
+
+  yaml@2.8.3: {}
+
+  yargs-parser@22.0.0: {}
+
+  yargs@18.0.0:
+    dependencies:
+      cliui: 9.0.1
+      escalade: 3.2.0
+      get-caller-file: 2.0.5
+      string-width: 7.2.0
+      y18n: 5.0.8
+      yargs-parser: 22.0.0
+
+  yauzl@2.10.0:
+    dependencies:
+      buffer-crc32: 0.2.13
+      fd-slicer: 1.1.0
+
+  yjs@13.6.30:
+    dependencies:
+      lib0: 0.2.117
+
+  yocto-queue@0.1.0: {}
+
+  yocto-queue@1.2.2: {}
+
+  youch-core@0.3.3:
+    dependencies:
+      '@poppinss/exception': 1.2.3
+      error-stack-parser-es: 1.0.5
+
+  youch@4.1.1:
+    dependencies:
+      '@poppinss/colors': 4.1.6
+      '@poppinss/dumper': 0.7.0
+      '@speed-highlight/core': 1.2.15
+      cookie-es: 3.1.1
+      youch-core: 0.3.3
+
+  zip-stream@6.0.1:
+    dependencies:
+      archiver-utils: 5.0.2
+      compress-commons: 6.0.2
+      readable-stream: 4.7.0
+
+  zod@4.3.6: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
new file mode 100644
index 0000000..5db30ec
--- /dev/null
+++ b/pnpm-workspace.yaml
@@ -0,0 +1,8 @@
+allowBuilds:
+  '@parcel/watcher': true
+  deno: true
+  esbuild: true
+  sharp: true
+  sqlite3: true
+  unrs-resolver: true
+  vue-demi: true
diff --git a/pocketbase/CLAUDE.md b/pocketbase/CLAUDE.md
new file mode 100644
index 0000000..cecbb71
--- /dev/null
+++ b/pocketbase/CLAUDE.md
@@ -0,0 +1,118 @@
+# CLAUDE.md — pocketbase/
+
+## Runtime Environment
+
+PocketBase hooks (`pb_hooks/*.pb.js`) execute in PocketBase's **embedded JSVM** — not Node.js, not Deno, not browser JS. Available APIs are PocketBase-specific:
+
+- `$app` — app instance (`findFirstRecordByFilter`, `findFirstRecordByData`, `findRecordsByFilter`, `save`, `delete`, etc.)
+- `$os.getenv(key)` — read environment variables
+- `$http.send({url, method, headers, body, timeout})` — make HTTP requests
+- `$template.loadFiles(path)` / `$template.loadString(str)` — render Go templates
+- `$security.randomString(n)` — generate random strings
+- `routerAdd(method, path, handler, ...middlewares)` — register custom API endpoints
+- `onMailerRecord*Send` — intercept outgoing emails
+- `onRecordAfterCreateSuccess` — post-creation hooks
+- `onRecordRequestOTPRequest` — OTP request hook
+- `e.next()` — continue the middleware chain (required in hooks)
+- `require(path)` — load other hook files (CommonJS-style)
+- `__hooks` — absolute path to the `pb_hooks/` directory
+
+**Reference:** https://pocketbase.io/docs/js-overview/
+
+No `import`, no npm packages. Use `e.app.logger().error(...)` for error logging.
+
+## Migrations
+
+Files in `pb_migrations/` run in order on PocketBase startup. Naming: `{number}_{description}.js`.
+
+Each migration exports `migrate(up, down)`. The `down` function reverts the change.
+
+Current migrations:
+
+| File | What it does |
+|------|-------------|
+| `0_setup.js` | SMTP config (`SMTP_HOST`, `SMTP_PORT`), app meta (`APP_NAME`, `POCKETBASE_URL`), OAuth2 providers (Google, Apple), OTP (6 digits, 300s), creates superuser from `SUPERUSER_EMAIL`/`SUPERUSER_PW` |
+| `1_users_language.js` | Adds `language` select field (`'de'`, `'en'`) to users collection |
+| `2_notifications.js` | Creates `notifications` collection |
+| `3_fcm_tokens.js` | Creates `fcm_tokens` collection |
+| `4_counters.js` | Creates `counters` collection |
+
+**To add a new collection:** Create the next numbered migration. Use `$app.save(collection)` pattern from existing migrations. After adding, run `pnpm pocketbase:types` from the project root.
+
+## Collection Rules
+
+| Collection | listRule | viewRule | createRule | updateRule | deleteRule |
+|------------|----------|----------|------------|------------|------------|
+| `notifications` | `userId = @request.auth.id` | `userId = @request.auth.id` | `null` | `userId = @request.auth.id` | `null` |
+| `fcm_tokens` | `userId = @request.auth.id` | `userId = @request.auth.id` | `userId = @request.auth.id` | `null` | `null` |
+| `counters` | `userId = @request.auth.id` | `userId = @request.auth.id` | `userId = @request.auth.id` | `userId = @request.auth.id` | `userId = @request.auth.id` |
+
+## Hooks
+
+| File | Trigger | Purpose |
+|------|---------|---------|
+| `createOtpUser.pb.js` | `onRecordRequestOTPRequest` on `users` | Auto-creates user with random password if none exists; reads `language` header to set user language |
+| `mailTemplates.pb.js` | All 5 `onMailerRecord*Send` events | Replaces default PocketBase emails with localized HTML templates |
+| `resetCounter.pb.js` | `POST /counter/reset` (requires auth) | Resets counter to 0, creates notification with localized title/body |
+| `sendFcmPush.pb.js` | `onRecordAfterCreateSuccess` on `notifications` | Looks up user's FCM tokens, POSTs to sidecar `/notify` |
+
+## Email Templates
+
+HTML templates in `pb_hooks/templates/{lang}/` use Go template syntax with **lowercase** variables:
+- `{{.password}}` — OTP code or reset token
+- `{{.appName}}` — from `app.settings().meta.appName`
+- `{{.appUrl}}` — from `app.settings().meta.appUrl`
+- Plus any fields from `e.meta`
+
+Mail subjects are in `pb_hooks/locales/{lang}.json` under `mailSubject.*`. The key for password reset is `passwortReset` (consistent across all locale files and template filenames).
+
+Template types: `authAlert`, `emailChange`, `otp`, `passwortReset`, `verification`
+
+The rendering pipeline (`utils/renderMailTemplate.js`):
+1. Reads `e.record.getString('language')`, falls back to `'en'`
+2. Loads `locales/{lang}.json`, renders subject with `$template.loadString()`
+3. Loads `templates/{lang}/{type}.html`, renders HTML with `$template.loadFiles()`
+4. Sets `e.message.subject` and `e.message.html`, then calls `e.next()`
+
+## Sidecar (Deno)
+
+The `sidecar/` directory is a standalone Deno HTTP service (port 8091) that handles FCM push notification delivery. It authenticates with Google Cloud using a cached JWT from a service account (`GOOGLE_CREDENTIALS_JSON` env var). Access tokens are cached and refreshed automatically before expiry.
+
+**Endpoint:** `POST /notify`
+
+Request:
+```json
+{ "tokens": ["fcm-token-1"], "title": "Hello", "body": "World", "data": {} }
+```
+
+- Requires `x-sidecar-secret: <SIDECAR_SECRET>` header
+- `data` is optional (`Record<string, string>`)
+- Returns `{ successCount, failureCount }`
+
+PocketBase sends to `$os.getenv('SIDECAR_URL') + '/notify'` (defaults to `http://localhost:8091`). In Docker Compose this is `http://sidecar:8091`.
+
+## Docker Compose Services (local dev)
+
+```bash
+docker compose up
+```
+
+| Service | Config | Details |
+|---------|--------|---------|
+| `pocketbase` | Build target `dev` (Alpine + PocketBase binary only) | Port 8090; volumes mount `pb_data/`, `pb_migrations/`, `pb_hooks/` to `/pb/` for live reload |
+| `sidecar` | `image: denoland/deno:latest` + volume mount | Port 8091; runs `deno task dev` (watch mode) against `./sidecar` mounted to `/app` |
+| `mailpit` | `image: axllent/mailpit` | Port 8025; catches all SMTP |
+
+PocketBase admin dashboard: `http://localhost:8090/_/`
+
+**Note:** The `dev` stage does not include Deno. In dev, the sidecar runs as a separate container using the official Deno image with a live volume mount — not from a built image.
+
+## Production Dockerfile Stages
+
+| Stage | Base | Purpose |
+|-------|------|---------|
+| `dev` | `alpine:latest` | Downloads PocketBase binary only |
+| `build` | `denoland/deno:latest` | Copies `sidecar/`, runs `deno install` to pre-cache dependencies |
+| `prod` | `denoland/deno:latest` | Copies PocketBase binary from `dev`, pre-cached sidecar from `build`, plus migrations/hooks; runs `start.sh` |
+
+In `prod`, all files live under `/app/` (working directory). `start.sh` starts PocketBase in the background (`./pocketbase serve --http=0.0.0.0:8090`) and then runs `cd sidecar && deno task start` as the foreground process.
diff --git a/pocketbase/Dockerfile b/pocketbase/Dockerfile
new file mode 100644
index 0000000..db2b402
--- /dev/null
+++ b/pocketbase/Dockerfile
@@ -0,0 +1,44 @@
+# Development stage - pocketbase only
+FROM alpine:latest AS dev
+
+ARG PB_VERSION=0.36.8
+
+RUN apk add --no-cache \
+    unzip \
+    ca-certificates
+
+# Download and unzip PocketBase
+ADD https://github.com/pocketbase/pocketbase/releases/download/v${PB_VERSION}/pocketbase_${PB_VERSION}_linux_amd64.zip /tmp/pb.zip
+RUN unzip /tmp/pb.zip -d /pb/
+
+EXPOSE 8090 8091
+
+CMD ["/pb/pocketbase", "serve", "--http=0.0.0.0:8090"]
+
+# Build stage
+FROM denoland/deno:latest AS build
+WORKDIR /app
+
+COPY ./sidecar .
+
+# Install dependencies
+RUN deno install
+
+# Production stage
+FROM denoland/deno:latest AS prod
+WORKDIR /app
+
+# Copy sidecar
+COPY --from=build /app ./sidecar
+
+# Copy pocketbase binary
+COPY --from=dev /pb/pocketbase ./pocketbase
+
+COPY ./pb_migrations ./pb_migrations
+COPY ./pb_hooks ./pb_hooks
+COPY ./sidecar ./sidecar
+COPY ./start.sh ./start.sh
+
+RUN chmod +x ./start.sh
+
+CMD ["./start.sh"]
diff --git a/pocketbase/docker-compose.yml b/pocketbase/docker-compose.yml
new file mode 100644
index 0000000..48f6370
--- /dev/null
+++ b/pocketbase/docker-compose.yml
@@ -0,0 +1,52 @@
+services:
+  pocketbase:
+    build:
+      context: .
+      target: dev
+    container_name: pocketbase
+    restart: on-failure:3
+    ports:
+      - 8090:8090
+    volumes:
+      - ./pb_data:/pb/pb_data
+      - ./pb_migrations:/pb/pb_migrations
+      - ./pb_hooks:/pb/pb_hooks
+    env_file:
+      - ../.env
+    environment:
+      SIDECAR_URL: http://sidecar:8091
+
+  sidecar:
+    image: denoland/deno:latest
+    working_dir: /app
+    command: deno task dev
+    container_name: sidecar
+    restart: on-failure:3
+    ports:
+      - 8091:8091
+    volumes:
+      - ./sidecar:/app
+    env_file:
+      - ../.env
+    environment:
+      POCKETBASE_URL: http://pocketbase:8090
+    depends_on:
+      - pocketbase
+
+  mailpit:
+    image: axllent/mailpit
+    container_name: mailpit
+    restart: on-failure:3
+    ports:
+      - 8025:8025
+    volumes:
+      - ./mp_data:/data
+    environment:
+      MP_MAX_MESSAGES: 5000
+      MP_DATABASE: /data/mailpit.db
+      MP_SMTP_AUTH_ACCEPT_ANY: 1
+      MP_SMTP_AUTH_ALLOW_INSECURE: 1
+
+volumes:
+  pocketbase_data:
+  mailpit-data:
diff --git a/pocketbase/pb_hooks/createOtpUser.pb.js b/pocketbase/pb_hooks/createOtpUser.pb.js
new file mode 100644
index 0000000..f9ee510
--- /dev/null
+++ b/pocketbase/pb_hooks/createOtpUser.pb.js
@@ -0,0 +1,21 @@
+/// <reference path="../pb_data/types.d.ts" />
+
+onRecordRequestOTPRequest((e) => {
+  // create a user with the OTP email if it doesn't exist
+
+  if (!e.record) {
+    const email = e.requestInfo().body['email']
+    const record = new Record(e.collection)
+    record.setEmail(email)
+    record.setPassword($security.randomString(30))
+
+    const language = e.requestInfo().headers['language'] || 'en'
+    record.set('language', language)
+
+    e.app.save(record)
+
+    e.record = record
+  }
+
+  return e.next()
+}, 'users')
diff --git a/pocketbase/pb_hooks/locales/de.json b/pocketbase/pb_hooks/locales/de.json
new file mode 100644
index 0000000..9b057ed
--- /dev/null
+++ b/pocketbase/pb_hooks/locales/de.json
@@ -0,0 +1,13 @@
+{
+  "mailSubject": {
+    "authAlert": "Anmeldung von einem neuen Standort",
+    "emailChange": "Bestätige deine neue {{.appName}}-E-Mail-Adresse",
+    "otp": "Einmalpasswort für {{.appName}}",
+    "passwortReset": "Setze dein {{.appName}}-Passwort zurück",
+    "verification": "Bestätige deine {{.appName}}-E-Mail-Adresse"
+  },
+  "resetCounter": {
+    "title": "Zähler zurückgesetzt",
+    "body": "Ihr Zähler wurde auf null zurückgesetzt."
+  }
+}
diff --git a/pocketbase/pb_hooks/locales/en.json b/pocketbase/pb_hooks/locales/en.json
new file mode 100644
index 0000000..325022e
--- /dev/null
+++ b/pocketbase/pb_hooks/locales/en.json
@@ -0,0 +1,13 @@
+{
+  "mailSubject": {
+    "authAlert": "Login from a new location",
+    "emailChange": "Confirm your {{.appName}} new email address",
+    "otp": "OTP for {{.appName}}",
+    "passwortReset": "Reset your {{.appName}} password",
+    "verification": "Verify your {{.appName}} email"
+  },
+  "resetCounter": {
+    "title": "Counter reset",
+    "body": "Your counter has been reset to zero."
+  }
+}
diff --git a/pocketbase/pb_hooks/mailTemplates.pb.js b/pocketbase/pb_hooks/mailTemplates.pb.js
new file mode 100644
index 0000000..a3a3f2c
--- /dev/null
+++ b/pocketbase/pb_hooks/mailTemplates.pb.js
@@ -0,0 +1,26 @@
+/// <reference path="../pb_data/types.d.ts" />
+
+onMailerRecordAuthAlertSend((e) => {
+  const utils = require(`${__hooks}/utils/renderMailTemplate.js`)
+  utils.renderMailTemplate(e, 'authAlert')
+})
+
+onMailerRecordPasswordResetSend((e) => {
+  const utils = require(`${__hooks}/utils/renderMailTemplate.js`)
+  utils.renderMailTemplate(e, 'passwordReset')
+})
+
+onMailerRecordVerificationSend((e) => {
+  const utils = require(`${__hooks}/utils/renderMailTemplate.js`)
+  utils.renderMailTemplate(e, 'verification')
+})
+
+onMailerRecordEmailChangeSend((e) => {
+  const utils = require(`${__hooks}/utils/renderMailTemplate.js`)
+  utils.renderMailTemplate(e, 'emailChange')
+})
+
+onMailerRecordOTPSend((e) => {
+  const utils = require(`${__hooks}/utils/renderMailTemplate.js`)
+  utils.renderMailTemplate(e, 'otp')
+})
diff --git a/pocketbase/pb_hooks/resetCounter.pb.js b/pocketbase/pb_hooks/resetCounter.pb.js
new file mode 100644
index 0000000..67868ca
--- /dev/null
+++ b/pocketbase/pb_hooks/resetCounter.pb.js
@@ -0,0 +1,40 @@
+/// <reference path="../pb_data/types.d.ts" />
+
+/**
+ * POST endpoint to reset the user's counter to 0,
+ * additionally sends a notification to the user.
+ * Requires authentication.
+ */
+routerAdd('POST', '/counter/reset', (e) => {
+  try {
+    const authRecord = e.auth
+
+    // find the user's counter record
+    const counterRecord = $app.findFirstRecordByData('counters', 'userId', authRecord.id)
+
+    if (counterRecord) {
+      // reset the counter to 0 and save
+      counterRecord.set('count', 0)
+      $app.save(counterRecord)
+    }
+
+    // get the user's language and load the locale
+    const userRecord = $app.findFirstRecordByData('users', 'id', authRecord.id)
+    const language = userRecord?.getString('language') ?? 'en'
+    const locale = require(`${__hooks}/locales/${language}.json`)
+    const t = locale.resetCounter
+
+    // add notification
+    const collection = $app.findCollectionByNameOrId('notifications')
+    const notificationRecord = new Record(collection)
+    notificationRecord.set('userId', authRecord.id)
+    notificationRecord.set('title', t.title)
+    notificationRecord.set('body', t.body)
+    $app.save(notificationRecord)
+
+    return e.noContent(204)
+  } catch (error) {
+    console.error('Error', error)
+    return e.json(500, { message: error.message })
+  }
+}, $apis.requireAuth())
diff --git a/pocketbase/pb_hooks/sendFcmPush.pb.js b/pocketbase/pb_hooks/sendFcmPush.pb.js
new file mode 100644
index 0000000..03eb0f4
--- /dev/null
+++ b/pocketbase/pb_hooks/sendFcmPush.pb.js
@@ -0,0 +1,55 @@
+/// <reference path="../pb_data/types.d.ts" />
+
+onRecordAfterCreateSuccess((e) => {
+  const record = e.record
+  const userId = record.getString('userId')
+
+  if (!userId) return e.next()
+
+  const tokenRecords = $app.findRecordsByFilter(
+    'fcm_tokens',
+    `userId = "${userId}"`,
+    '-created',
+    500,
+    0
+  )
+
+  if (!tokenRecords || tokenRecords.length === 0) return e.next()
+
+  const tokens = tokenRecords
+    .map(r => r.getString('token'))
+    .filter(t => t.length > 0)
+
+  if (tokens.length === 0) return e.next()
+
+  const sidecarUrl = $os.getenv('SIDECAR_URL') || 'http://localhost:8091'
+  const sidecarSecret = $os.getenv('SIDECAR_SECRET') || ''
+
+  try {
+    const res = $http.send({
+      url: sidecarUrl + '/notify',
+      method: 'POST',
+      headers: {
+        'content-type': 'application/json',
+        'x-sidecar-secret': sidecarSecret
+      },
+      body: JSON.stringify({
+        tokens: tokens,
+        title: record.getString('title'),
+        body: record.getString('body')
+      }),
+      timeout: 10
+    })
+
+    if (res.statusCode !== 200) {
+      e.app.logger().error('FCM relay failed',
+        'status', res.statusCode,
+        'response', JSON.stringify(res.json)
+      )
+    }
+  } catch (err) {
+    e.app.logger().error('FCM relay error', 'error', err)
+  }
+
+  return e.next()
+}, 'notifications')
diff --git a/pocketbase/pb_hooks/templates/de/authAlert.html b/pocketbase/pb_hooks/templates/de/authAlert.html
new file mode 100644
index 0000000..e816601
--- /dev/null
+++ b/pocketbase/pb_hooks/templates/de/authAlert.html
@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<html>
+<body>
+  <p>Hallo,</p>
+  <p>Wir haben eine Anmeldung bei deinem {{.appName}}-Konto von einem neuen Standort festgestellt:</p>
+  <p><em>{{.info}}</em></p>
+  <p><strong>Wenn du das nicht warst, solltest du sofort dein {{.appName}}-Passwort ändern, um den Zugriff von allen anderen Standorten zu widerrufen.</strong></p>
+  <p>Wenn du das warst, kannst du diese E-Mail ignorieren.</p>
+  <p>
+    Viele Grüße,<br/>
+    Das {{.appName}}-Team
+  </p>
+</body>
+</html>
diff --git a/pocketbase/pb_hooks/templates/de/emailChange.html b/pocketbase/pb_hooks/templates/de/emailChange.html
new file mode 100644
index 0000000..db858b0
--- /dev/null
+++ b/pocketbase/pb_hooks/templates/de/emailChange.html
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html>
+  <body>
+    <p>Hallo,</p>
+    <p>Klicke auf den Button unten, um deine neue E-Mail-Adresse zu bestätigen.</p>
+    <p>
+      <a class="btn" href="{{.appUrl}}/_/#/auth/confirm-email-change/{{.token}}" target="_blank" rel="noopener">Neue E-Mail-Adresse bestätigen</a>
+    </p>
+    <p><i>Wenn du keine Änderung deiner E-Mail-Adresse beantragt hast, kannst du diese E-Mail ignorieren.</i></p>
+    <p>
+      Viele Grüße,<br/>
+      Das {{.appName}}-Team
+    </p>
+  </body>
+</html>
diff --git a/pocketbase/pb_hooks/templates/de/otp.html b/pocketbase/pb_hooks/templates/de/otp.html
new file mode 100644
index 0000000..d4ca0a4
--- /dev/null
+++ b/pocketbase/pb_hooks/templates/de/otp.html
@@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<html>
+  <body>
+    <p>Hallo,</p>
+    <p>Dein Einmalpasswort lautet: <strong>{{.password}}</strong></p>
+    <p><i>Wenn du kein Einmalpasswort angefordert hast, kannst du diese E-Mail ignorieren.</i></p>
+    <p>
+      Viele Grüße,<br/>
+      Das {{.appName}}-Team
+    </p>
+  </body>
+</html>
diff --git a/pocketbase/pb_hooks/templates/de/passwortReset.html b/pocketbase/pb_hooks/templates/de/passwortReset.html
new file mode 100644
index 0000000..5f463a6
--- /dev/null
+++ b/pocketbase/pb_hooks/templates/de/passwortReset.html
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html>
+<body>
+  <p>Hallo,</p>
+    <p>Klicke auf den Button unten, um dein Passwort zurückzusetzen.</p>
+    <p>
+      <a class="btn" href="{{.appUrl}}/_/#/auth/confirm-password-reset/{{.token}}" target="_blank" rel="noopener">Passwort zurücksetzen</a>
+    </p>
+    <p><i>Wenn du keine Passwortzurücksetzung beantragt hast, kannst du diese E-Mail ignorieren.</i></p>
+    <p>
+      Viele Grüße,<br/>
+      Das {{.appName}}-Team
+    </p>
+  </body>
+</html>
diff --git a/pocketbase/pb_hooks/templates/de/verification.html b/pocketbase/pb_hooks/templates/de/verification.html
new file mode 100644
index 0000000..60a7498
--- /dev/null
+++ b/pocketbase/pb_hooks/templates/de/verification.html
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html>
+  <body>
+    <p>Hallo,</p>
+    <p>Willkommen bei {{.appName}}.</p>
+    <p>Klicke auf den Button unten, um deine E-Mail-Adresse zu bestätigen.</p>
+    <p>
+      <a class="btn" href="{{.appUrl}}/_/#/auth/confirm-verification/{{.token}}" target="_blank" rel="noopener">E-Mail-Adresse bestätigen</a>
+    </p>
+    <p>
+      Viele Grüße,<br/>
+      Das {{.appName}}-Team
+    </p>
+  </body>
+</html>
diff --git a/pocketbase/pb_hooks/templates/en/authAlert.html b/pocketbase/pb_hooks/templates/en/authAlert.html
new file mode 100644
index 0000000..5be410f
--- /dev/null
+++ b/pocketbase/pb_hooks/templates/en/authAlert.html
@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<html>
+<body>
+  <p>Hello,</p>
+  <p>We noticed a login to your {{.appName}} account from a new location:</p>
+  <p><em>{{.info}}</em></p>
+  <p><strong>If this wasn't you, you should immediately change your {{.appName}} account password to revoke access from all other locations.</strong></p>
+  <p>If this was you, you may disregard this email.</p>
+  <p>
+    Thanks,<br/>
+    {{.appName}} team
+  </p>
+</body>
+</html>
diff --git a/pocketbase/pb_hooks/templates/en/emailChange.html b/pocketbase/pb_hooks/templates/en/emailChange.html
new file mode 100644
index 0000000..753f392
--- /dev/null
+++ b/pocketbase/pb_hooks/templates/en/emailChange.html
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html>
+  <body>
+    <p>Hello,</p>
+    <p>Click on the button below to confirm your new email address.</p>
+    <p>
+      <a class="btn" href="{{.appUrl}}/_/#/auth/confirm-email-change/{{.token}}" target="_blank" rel="noopener">Confirm new email</a>
+    </p>
+    <p><i>If you didn't ask to change your email address, you can ignore this email.</i></p>
+    <p>
+      Thanks,<br/>
+      {{.appName}} team
+    </p>
+  </body>
+</html>
diff --git a/pocketbase/pb_hooks/templates/en/otp.html b/pocketbase/pb_hooks/templates/en/otp.html
new file mode 100644
index 0000000..8a2ff50
--- /dev/null
+++ b/pocketbase/pb_hooks/templates/en/otp.html
@@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<html>
+  <body>
+    <p>Hello,</p>
+    <p>Your one-time password is: <strong>{{.password}}</strong></p>
+    <p><i>If you didn't ask for the one-time password, you can ignore this email.</i></p>
+    <p>
+      Thanks,<br/>
+      {{.appName}} team
+    </p>
+  </body>
+</html>
diff --git a/pocketbase/pb_hooks/templates/en/passwortReset.html b/pocketbase/pb_hooks/templates/en/passwortReset.html
new file mode 100644
index 0000000..a34a1b0
--- /dev/null
+++ b/pocketbase/pb_hooks/templates/en/passwortReset.html
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html>
+<body>
+  <p>Hello,</p>
+    <p>Click on the button below to reset your password.</p>
+    <p>
+      <a class="btn" href="{{.appUrl}}/_/#/auth/confirm-password-reset/{{.token}}" target="_blank" rel="noopener">Reset password</a>
+    </p>
+    <p><i>If you didn't ask to reset your password, you can ignore this email.</i></p>
+    <p>
+      Thanks,<br/>
+      {{.appName}} team
+    </p>
+  </body>
+</html>
diff --git a/pocketbase/pb_hooks/templates/en/verification.html b/pocketbase/pb_hooks/templates/en/verification.html
new file mode 100644
index 0000000..0d34d4b
--- /dev/null
+++ b/pocketbase/pb_hooks/templates/en/verification.html
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html>
+  <body>
+    <p>Hello,</p>
+    <p>Thank you for joining us at {{.appName}}.</p>
+    <p>Click on the button below to verify your email address.</p>
+    <p>
+      <a class="btn" href="{{.appUrl}}/_/#/auth/confirm-verification/{{.token}}" target="_blank" rel="noopener">Verify</a>
+    </p>
+    <p>
+      Thanks,<br/>
+      {{.appName}} team
+    </p>
+  </body>
+</html>
diff --git a/pocketbase/pb_hooks/utils/renderMailTemplate.js b/pocketbase/pb_hooks/utils/renderMailTemplate.js
new file mode 100644
index 0000000..e23d0bc
--- /dev/null
+++ b/pocketbase/pb_hooks/utils/renderMailTemplate.js
@@ -0,0 +1,29 @@
+const renderMailTemplate = (e, type) => {
+  try {
+    const language = e.record?.getString('language') ?? 'en'
+    const locale = require(`${__hooks}/locales/${language}.json`)
+
+    const subject = $template.loadString(
+      locale.mailSubject[type]
+    ).render({
+      ...e.meta,
+      ...e.app.settings().meta
+    })
+
+    const html = $template.loadFiles(
+      `${__hooks}/templates/${language}/${type}.html`
+    ).render({
+      ...e.meta,
+      ...e.app.settings().meta
+    })
+
+    e.message.subject = subject
+    e.message.html = html
+  } catch (error) {
+    console.log(error)
+  }
+
+  e.next()
+}
+
+module.exports = { renderMailTemplate }
diff --git a/pocketbase/pb_migrations/0_setup.js b/pocketbase/pb_migrations/0_setup.js
new file mode 100644
index 0000000..a2c5545
--- /dev/null
+++ b/pocketbase/pb_migrations/0_setup.js
@@ -0,0 +1,94 @@
+/// <reference path="../pb_data/types.d.ts" />
+migrate((app) => {
+  // Set basic settings
+  let settings = app.settings()
+
+  const appUrl = $os.getenv('POCKETBASE_URL') || 'http://127.0.0.1:8090'
+  const appName = $os.getenv('APP_NAME') || 'PocketBase'
+
+  const smtpHost = $os.getenv('SMTP_HOST') || 'mailpit'
+  const smtpPort = Number($os.getenv('SMTP_PORT') || 1025)
+
+  unmarshal({
+    meta: {
+      appName,
+      appUrl
+    },
+    smtp: {
+      enabled: true,
+      host: smtpHost,
+      port: smtpPort
+    }
+  }, settings)
+
+  app.save(settings)
+
+  // Enable auth methods
+  const collection = app.findCollectionByNameOrId('_pb_users_auth_')
+
+  const googleClientId = $os.getenv('AUTH_GOOGLE_CLIENT_ID')
+  const googleClientSecret = $os.getenv('AUTH_GOOGLE_CLIENT_SECRET')
+
+  const appleClientId = $os.getenv('AUTH_APPLE_CLIENT_ID')
+  const appleClientSecret = $os.getenv('AUTH_APPLE_CLIENT_SECRET')
+
+  const providers = []
+  if (googleClientId?.length && googleClientSecret?.length) {
+    providers.push({
+      name: 'google',
+      clientId: googleClientId,
+      clientSecret: googleClientSecret
+    })
+  }
+  if (appleClientId?.length && appleClientSecret?.length) {
+    providers.push({
+      name: 'apple',
+      clientId: appleClientId,
+      clientSecret: appleClientSecret
+    })
+  }
+
+  unmarshal({
+    oauth2: {
+      enabled: true,
+      providers
+    },
+    otp: {
+      duration: 300,
+      enabled: true,
+      length: 6
+    }
+  }, collection)
+  app.save(collection)
+
+  // Create admin user if it doesn't exist
+  const email = $os.getenv('SUPERUSER_EMAIL')
+  const password = $os.getenv('SUPERUSER_PW')
+
+  if (email?.length && password?.length) {
+    const existingUser = app.findFirstRecordByData('_superusers', 'email', email)
+
+    if (!existingUser) {
+      let superusers = app.findCollectionByNameOrId('_superusers')
+      let record = new Record(superusers)
+      record.set('email', email)
+      record.set('password', password)
+      app.save(record)
+    }
+  }
+}, (app) => {
+  const collection = app.findCollectionByNameOrId('_pb_users_auth_')
+
+  unmarshal({
+    oauth2: {
+      enabled: false
+    },
+    otp: {
+      duration: 180,
+      enabled: false,
+      length: 8
+    }
+  }, collection)
+
+  app.save(collection)
+})
diff --git a/pocketbase/pb_migrations/1_users_language.js b/pocketbase/pb_migrations/1_users_language.js
new file mode 100644
index 0000000..3e57035
--- /dev/null
+++ b/pocketbase/pb_migrations/1_users_language.js
@@ -0,0 +1,29 @@
+/// <reference path="../pb_data/types.d.ts" />
+migrate((app) => {
+  const collection = app.findCollectionByNameOrId('_pb_users_auth_')
+
+  // add field
+  collection.fields.addAt(8, new Field({
+    hidden: false,
+    id: 'select3571151285',
+    maxSelect: 1,
+    name: 'language',
+    presentable: false,
+    required: false,
+    system: false,
+    type: 'select',
+    values: [
+      'de',
+      'en'
+    ]
+  }))
+
+  return app.save(collection)
+}, (app) => {
+  const collection = app.findCollectionByNameOrId('_pb_users_auth_')
+
+  // remove field
+  collection.fields.removeById('select3571151285')
+
+  return app.save(collection)
+})
diff --git a/pocketbase/pb_migrations/2_notifications.js b/pocketbase/pb_migrations/2_notifications.js
new file mode 100644
index 0000000..bdedbc1
--- /dev/null
+++ b/pocketbase/pb_migrations/2_notifications.js
@@ -0,0 +1,110 @@
+/// <reference path="../pb_data/types.d.ts" />
+migrate((app) => {
+  if (app.hasTable('notifications')) {
+    return
+  }
+  const collection = new Collection({
+    fields: [
+      {
+        autogeneratePattern: '[a-z0-9]{15}',
+        hidden: false,
+        id: 'text3208210256',
+        max: 15,
+        min: 15,
+        name: 'id',
+        pattern: '^[a-z0-9]+$',
+        presentable: false,
+        primaryKey: true,
+        required: true,
+        system: true,
+        type: 'text'
+      },
+      {
+        cascadeDelete: false,
+        collectionId: '_pb_users_auth_',
+        hidden: false,
+        id: 'relation1689669068',
+        maxSelect: 1,
+        minSelect: 0,
+        name: 'userId',
+        presentable: false,
+        required: false,
+        system: false,
+        type: 'relation'
+      },
+      {
+        autogeneratePattern: '',
+        hidden: false,
+        id: 'text724990059',
+        max: 0,
+        min: 0,
+        name: 'title',
+        pattern: '',
+        presentable: false,
+        primaryKey: false,
+        required: false,
+        system: false,
+        type: 'text'
+      },
+      {
+        autogeneratePattern: '',
+        hidden: false,
+        id: 'text3685223346',
+        max: 0,
+        min: 0,
+        name: 'body',
+        pattern: '',
+        presentable: false,
+        primaryKey: false,
+        required: false,
+        system: false,
+        type: 'text'
+      },
+      {
+        hidden: false,
+        id: 'bool963269739',
+        name: 'isRead',
+        presentable: false,
+        required: false,
+        system: false,
+        type: 'bool'
+      },
+      {
+        hidden: false,
+        id: 'autodate2990389176',
+        name: 'created',
+        onCreate: true,
+        onUpdate: false,
+        presentable: false,
+        system: false,
+        type: 'autodate'
+      },
+      {
+        hidden: false,
+        id: 'autodate3332085495',
+        name: 'updated',
+        onCreate: true,
+        onUpdate: true,
+        presentable: false,
+        system: false,
+        type: 'autodate'
+      }
+    ],
+    id: 'pbc_2301922722',
+    indexes: [],
+    listRule: 'userId = @request.auth.id',
+    name: 'notifications',
+    system: false,
+    type: 'base',
+    createRule: null,
+    deleteRule: null,
+    updateRule: 'userId = @request.auth.id',
+    viewRule: 'userId = @request.auth.id'
+  })
+
+  return app.save(collection)
+}, (app) => {
+  const collection = app.findCollectionByNameOrId('pbc_2301922722')
+
+  return app.delete(collection)
+})
diff --git a/pocketbase/pb_migrations/3_fcm_tokens.js b/pocketbase/pb_migrations/3_fcm_tokens.js
new file mode 100644
index 0000000..6cdf2fc
--- /dev/null
+++ b/pocketbase/pb_migrations/3_fcm_tokens.js
@@ -0,0 +1,87 @@
+/// <reference path="../pb_data/types.d.ts" />
+migrate((app) => {
+  if (app.hasTable('fcm_tokens')) {
+    return
+  }
+  const collection = new Collection({
+    fields: [
+      {
+        autogeneratePattern: '[a-z0-9]{15}',
+        hidden: false,
+        id: 'text3208210256',
+        max: 15,
+        min: 15,
+        name: 'id',
+        pattern: '^[a-z0-9]+$',
+        presentable: false,
+        primaryKey: true,
+        required: true,
+        system: true,
+        type: 'text'
+      },
+      {
+        cascadeDelete: false,
+        collectionId: '_pb_users_auth_',
+        hidden: false,
+        id: 'relation1689669068',
+        maxSelect: 1,
+        minSelect: 0,
+        name: 'userId',
+        presentable: false,
+        required: false,
+        system: false,
+        type: 'relation'
+      },
+      {
+        autogeneratePattern: '',
+        hidden: false,
+        id: 'text1597481275',
+        max: 0,
+        min: 0,
+        name: 'token',
+        pattern: '',
+        presentable: false,
+        primaryKey: false,
+        required: false,
+        system: false,
+        type: 'text'
+      },
+      {
+        hidden: false,
+        id: 'autodate2990389176',
+        name: 'created',
+        onCreate: true,
+        onUpdate: false,
+        presentable: false,
+        system: false,
+        type: 'autodate'
+      },
+      {
+        hidden: false,
+        id: 'autodate3332085495',
+        name: 'updated',
+        onCreate: true,
+        onUpdate: true,
+        presentable: false,
+        system: false,
+        type: 'autodate'
+      }
+    ],
+    id: 'pbc_566627753',
+    indexes: [],
+    listRule: 'userId = @request.auth.id',
+    name: 'fcm_tokens',
+    system: false,
+    type: 'base',
+    deleteRule: null,
+    updateRule: null,
+    viewRule: 'userId = @request.auth.id',
+    createRule: 'userId = @request.auth.id'
+  })
+
+  return app.save(collection)
+}, (app) => {
+  const collection = app.findCollectionByNameOrId('pbc_566627753')
+
+  return app.delete(collection)
+})
diff --git a/pocketbase/pb_migrations/4_counters.js b/pocketbase/pb_migrations/4_counters.js
new file mode 100644
index 0000000..e09fb27
--- /dev/null
+++ b/pocketbase/pb_migrations/4_counters.js
@@ -0,0 +1,85 @@
+/// <reference path="../pb_data/types.d.ts" />
+migrate((app) => {
+  if (app.hasTable('counters')) {
+    return
+  }
+  const collection = new Collection({
+    fields: [
+      {
+        autogeneratePattern: '[a-z0-9]{15}',
+        hidden: false,
+        id: 'text3208210256',
+        max: 15,
+        min: 15,
+        name: 'id',
+        pattern: '^[a-z0-9]+$',
+        presentable: false,
+        primaryKey: true,
+        required: true,
+        system: true,
+        type: 'text'
+      },
+      {
+        cascadeDelete: false,
+        collectionId: '_pb_users_auth_',
+        hidden: false,
+        id: 'relation1689669068',
+        maxSelect: 1,
+        minSelect: 0,
+        name: 'userId',
+        presentable: false,
+        required: false,
+        system: false,
+        type: 'relation'
+      },
+      {
+        hidden: false,
+        id: 'number2245608546',
+        max: null,
+        min: null,
+        name: 'count',
+        onlyInt: false,
+        presentable: false,
+        required: false,
+        system: false,
+        type: 'number'
+      },
+      {
+        hidden: false,
+        id: 'autodate2990389176',
+        name: 'created',
+        onCreate: true,
+        onUpdate: false,
+        presentable: false,
+        system: false,
+        type: 'autodate'
+      },
+      {
+        hidden: false,
+        id: 'autodate3332085495',
+        name: 'updated',
+        onCreate: true,
+        onUpdate: true,
+        presentable: false,
+        system: false,
+        type: 'autodate'
+      }
+    ],
+    id: 'pbc_90131592',
+    indexes: [],
+    listRule: 'userId = @request.auth.id',
+    name: 'counters',
+    system: false,
+    type: 'base',
+    deleteRule: 'userId = @request.auth.id',
+    updateRule: 'userId = @request.auth.id',
+    viewRule: 'userId = @request.auth.id',
+    createRule: 'userId = @request.auth.id'
+  })
+
+  return app.save(collection)
+}, (app) => {
+  const collection = app.findCollectionByNameOrId('pbc_90131592')
+
+  return app.delete(collection)
+})
diff --git a/pocketbase/sidecar/deno.json b/pocketbase/sidecar/deno.json
new file mode 100644
index 0000000..3320bdd
--- /dev/null
+++ b/pocketbase/sidecar/deno.json
@@ -0,0 +1,6 @@
+{
+  "tasks": {
+    "dev": "deno run --watch --allow-net --allow-env main.ts",
+    "start": "deno run --allow-net --allow-env main.ts"
+  }
+}
diff --git a/pocketbase/sidecar/fcmAuth.ts b/pocketbase/sidecar/fcmAuth.ts
new file mode 100644
index 0000000..42a9c31
--- /dev/null
+++ b/pocketbase/sidecar/fcmAuth.ts
@@ -0,0 +1,104 @@
+interface ServiceAccount {
+  client_email: string
+  private_key: string
+  project_id: string
+}
+
+interface CachedToken {
+  token: string
+  expiresAt: number
+}
+
+let serviceAccount: ServiceAccount | null = null
+let privateKey: CryptoKey | null = null
+let cachedToken: CachedToken | null = null
+
+export function getServiceAccount(): ServiceAccount {
+  if (serviceAccount) return serviceAccount
+
+  const credentialsJson = Deno.env.get('GOOGLE_CREDENTIALS_JSON')
+  if (!credentialsJson?.trim()) {
+    throw new Error('GOOGLE_CREDENTIALS_JSON environment variable is required')
+  }
+
+  serviceAccount = JSON.parse(credentialsJson)
+  return serviceAccount!
+}
+
+async function getPrivateKey(): Promise<CryptoKey> {
+  if (privateKey) return privateKey
+
+  const pem = getServiceAccount().private_key
+  const pemContents = pem
+    .replace(/-----BEGIN PRIVATE KEY-----/, '')
+    .replace(/-----END PRIVATE KEY-----/, '')
+    .replace(/\s/g, '')
+
+  const der = Uint8Array.from(atob(pemContents), c => c.charCodeAt(0))
+
+  privateKey = await crypto.subtle.importKey(
+    'pkcs8',
+    der.buffer,
+    { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' },
+    false,
+    ['sign']
+  )
+
+  return privateKey
+}
+
+function b64url(data: ArrayBuffer | string): string {
+  const str = typeof data === 'string'
+    ? btoa(data)
+    : btoa(String.fromCharCode(...new Uint8Array(data)))
+  return str.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '')
+}
+
+export async function getAccessToken(): Promise<string> {
+  const now = Date.now()
+
+  if (cachedToken && cachedToken.expiresAt > now + 60_000) {
+    return cachedToken.token
+  }
+
+  const sa = getServiceAccount()
+  const iat = Math.floor(now / 1000)
+  const exp = iat + 3600
+
+  const header = b64url(JSON.stringify({ alg: 'RS256', typ: 'JWT' }))
+  const payload = b64url(JSON.stringify({
+    iss: sa.client_email,
+    scope: 'https://www.googleapis.com/auth/firebase.messaging',
+    aud: 'https://oauth2.googleapis.com/token',
+    exp,
+    iat
+  }))
+
+  const signingInput = `${header}.${payload}`
+  const key = await getPrivateKey()
+  const signature = await crypto.subtle.sign(
+    'RSASSA-PKCS1-v1_5',
+    key,
+    new TextEncoder().encode(signingInput)
+  )
+
+  const jwt = `${signingInput}.${b64url(signature)}`
+
+  const res = await fetch('https://oauth2.googleapis.com/token', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+    body: new URLSearchParams({
+      grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
+      assertion: jwt
+    })
+  })
+
+  if (!res.ok) {
+    throw new Error(`Failed to get FCM access token: ${await res.text()}`)
+  }
+
+  const { access_token, expires_in } = await res.json()
+  cachedToken = { token: access_token, expiresAt: now + expires_in * 1000 }
+
+  return access_token
+}
diff --git a/pocketbase/sidecar/fcmPush.ts b/pocketbase/sidecar/fcmPush.ts
new file mode 100644
index 0000000..27e3f40
--- /dev/null
+++ b/pocketbase/sidecar/fcmPush.ts
@@ -0,0 +1,74 @@
+import { getAccessToken, getServiceAccount } from './fcmAuth.ts'
+
+export async function handleFcmPush(req: Request): Promise<Response> {
+  const secret = Deno.env.get('SIDECAR_SECRET')
+  if (secret && req.headers.get('x-sidecar-secret') !== secret) {
+    return new Response('Unauthorized', { status: 401 })
+  }
+
+  let body: {
+    tokens: string[]
+    title: string
+    body: string
+    data?: Record<string, string>
+  }
+
+  try {
+    body = await req.json()
+  } catch {
+    return new Response('Invalid JSON', { status: 400 })
+  }
+
+  const { tokens, title, body: messageBody, data } = body
+
+  if (!tokens?.length) {
+    return new Response('No tokens provided', { status: 400 })
+  }
+
+  const { project_id } = getServiceAccount()
+  const accessToken = await getAccessToken()
+
+  const results = await Promise.allSettled(
+    tokens.map(token =>
+      fetch(
+        `https://fcm.googleapis.com/v1/projects/${project_id}/messages:send`,
+        {
+          method: 'POST',
+          headers: {
+            'Authorization': `Bearer ${accessToken}`,
+            'Content-Type': 'application/json'
+          },
+          body: JSON.stringify({
+            message: {
+              token,
+              notification: { title, body: messageBody },
+              ...(data ? { data } : {})
+            }
+          })
+        }
+      ).then(async (r) => {
+        if (!r.ok) {
+          const err = await r.json()
+          throw new Error(err.error?.message ?? r.statusText)
+        }
+        return r.json()
+      })
+    )
+  )
+
+  let successCount = 0
+  let failureCount = 0
+
+  results.forEach((result, i) => {
+    if (result.status === 'fulfilled') {
+      successCount++
+    } else {
+      failureCount++
+      console.error(`FCM failed for token ${tokens[i]}:`, result.reason)
+    }
+  })
+
+  console.log(`FCM: ${successCount} sent, ${failureCount} failed`)
+
+  return Response.json({ successCount, failureCount })
+}
diff --git a/pocketbase/sidecar/main.ts b/pocketbase/sidecar/main.ts
new file mode 100644
index 0000000..1ef1a43
--- /dev/null
+++ b/pocketbase/sidecar/main.ts
@@ -0,0 +1,13 @@
+import { handleFcmPush } from './fcmPush.ts'
+
+const port = Number(Deno.env.get('SIDECAR_PORT') ?? '8091')
+
+Deno.serve({ port }, (req: Request) => {
+  const url = new URL(req.url)
+
+  if (req.method === 'POST' && url.pathname === '/notify') {
+    return handleFcmPush(req)
+  }
+
+  return new Response('Not Found', { status: 404 })
+})
diff --git a/pocketbase/start.sh b/pocketbase/start.sh
new file mode 100644
index 0000000..39c9bbe
--- /dev/null
+++ b/pocketbase/start.sh
@@ -0,0 +1,8 @@
+#!/bin/sh
+set -e
+
+# Start PocketBase in background
+./pocketbase serve --http=0.0.0.0:8090 &
+
+# Start Deno sidecar as main process (keeps container alive)
+cd sidecar && deno task start
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..4972e38
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,33 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "github>nuxt/renovate-config-nuxt",
+    ":automergeMinor"
+  ],
+  "schedule": [
+    "at any time"
+  ],
+  "lockFileMaintenance": {
+    "enabled": true
+  },
+  "packageRules": [
+    {
+      "matchDepTypes": [
+        "resolutions"
+      ],
+      "enabled": false
+    }
+  ],
+  "postUpdateOptions": [
+    "pnpmDedupe"
+  ],
+  "gradle": {
+    "enabled": false
+  },
+  "gradle-wrapper": {
+    "enabled": false
+  },
+  "swift": {
+    "enabled": false
+  }
+}
diff --git a/skills-lock.json b/skills-lock.json
new file mode 100644
index 0000000..8c1cd7b
--- /dev/null
+++ b/skills-lock.json
@@ -0,0 +1,75 @@
+{
+  "version": 1,
+  "skills": {
+    "Agent Development": {
+      "source": "anthropics/claude-code",
+      "sourceType": "github",
+      "computedHash": "4931c2867890bfef5881225adb691c3d719fe9ad556e3d5fae15f83e0668fa60"
+    },
+    "capacitor-push-notifications": {
+      "source": "cap-go/capgo-skills",
+      "sourceType": "github",
+      "computedHash": "91eae9eba9f37e6d62a64aecdcd55c0702af6dbdeaf8947d90bfabb2679d5aee"
+    },
+    "capacitor-security": {
+      "source": "cap-go/capacitor-skills",
+      "sourceType": "github",
+      "computedHash": "bc1175aeb20a35b956e7d9a7c2ae8beb39429e42af1dcb893547082ba5a98d4c"
+    },
+    "find-skills": {
+      "source": "vercel-labs/skills",
+      "sourceType": "github",
+      "computedHash": "9e1c8b3103f92fa8092568a44fe64858de7c5c9dc65ce4bea8f168080e889cfd"
+    },
+    "nuxt": {
+      "source": "antfu/skills",
+      "sourceType": "github",
+      "computedHash": "9e8237ec92083db9a6f4c77d5e5bf4b1d9873d670671235bc75455ee1ca39c74"
+    },
+    "nuxt-ui": {
+      "source": "nuxt/ui",
+      "sourceType": "github",
+      "computedHash": "c3dbbd219dc94e345faa0b5cc4c03638f4361f8b0efa9f34c7dfa2c6dba65a9d"
+    },
+    "playwright-generate-test": {
+      "source": "github/awesome-copilot",
+      "sourceType": "github",
+      "computedHash": "8f963da3e25f705ff39755b8b990f20da0c0320cb86ac83fcc4d2d4eca91f6e4"
+    },
+    "pnpm": {
+      "source": "antfu/skills",
+      "sourceType": "github",
+      "computedHash": "318f9fca2441a3e06fedc336e195dd18be5dbe901064e4fa71b76b40b096ab3a"
+    },
+    "pocketbase-best-practices": {
+      "source": "greendesertsnow/pocketbase-skills",
+      "sourceType": "github",
+      "computedHash": "93cd2d9df90887e856085f75890453ffcf6877cf909591f5e89b86bfdeed0e2b"
+    },
+    "vite": {
+      "source": "antfu/skills",
+      "sourceType": "github",
+      "computedHash": "867ff66238f3152e9c494339ad08dc432dd0df5bcf5cc7a00b61a72b580eb908"
+    },
+    "vitest": {
+      "source": "antfu/skills",
+      "sourceType": "github",
+      "computedHash": "669c7275f7e1379b06b2bcfa593603aead4c983b951c7e8edbc09640aa38d0a1"
+    },
+    "vue": {
+      "source": "antfu/skills",
+      "sourceType": "github",
+      "computedHash": "9c241141e07e836e4f0537c63e8f929fba3767c2997250be38e699f19b75e3f2"
+    },
+    "vue-best-practices": {
+      "source": "antfu/skills",
+      "sourceType": "github",
+      "computedHash": "d7d22c8cb343583c3904692c4d1d7b50382945e433e4f6e053f4aabb9846cbc3"
+    },
+    "vue-testing-best-practices": {
+      "source": "antfu/skills",
+      "sourceType": "github",
+      "computedHash": "18c7d8f42f350f927e37de055e34c97b8cfb9f79c12cf942f7f3d2a0821057b5"
+    }
+  }
+}
diff --git a/test/CLAUDE.md b/test/CLAUDE.md
new file mode 100644
index 0000000..6b257fb
--- /dev/null
+++ b/test/CLAUDE.md
@@ -0,0 +1,76 @@
+# CLAUDE.md — test/
+
+## Skill precedence
+
+When writing or modifying tests, load the **nuxt-testing** skill first:
+```
+/nuxt-testing
+```
+It takes precedence over other testing skills (vue-testing-best-practices, vitest, etc.) because it covers the exact `@nuxt/test-utils` setup used here.
+
+## Test structure
+
+| Directory | Project | Environment | Purpose |
+|-----------|---------|-------------|---------|
+| `test/unit/` | `unit` | node | Pure logic, Zod schemas, utilities |
+| `test/nuxt/` | `nuxt` | nuxt (happy-dom) | Components and composables that need Nuxt runtime |
+| `test/e2e/` | `e2e` | node | Browser tests against the running dev server |
+
+Run a single project: `pnpm test --project unit` / `nuxt` / `e2e`
+
+## Known gotchas
+
+### Nuxt component tests — mock stores in `vi.hoisted`, not in `it()`
+
+Global middleware (e.g. `00.fetchUser.global.ts`) runs during `mountSuspended` **before** the test body executes. If a mocked store returns `undefined` at that point, Nuxt throws and the test crashes.
+
+**Wrong** — mock is set up too late:
+```ts
+const useUserMock = vi.fn()
+mockNuxtImport('useUser', () => useUserMock)
+
+it('...', async () => {
+  useUserMock.mockReturnValue({ isAuthenticated: false, authRefresh: vi.fn() })
+  // ❌ middleware already ran with undefined
+})
+```
+
+**Correct** — default implementation lives in `vi.hoisted`:
+```ts
+const { useUserMock } = vi.hoisted(() => ({
+  useUserMock: vi.fn(() => ({ isAuthenticated: false, user: null, authRefresh: vi.fn() }))
+}))
+mockNuxtImport('useUser', () => useUserMock)
+```
+
+### E2E tests — do not pass a path to `createPage()` on this SPA
+
+`createPage('/some-path')` internally calls `waitForHydration`, which polls
+`window.useNuxtApp?.().isHydrating === false`. Because `useNuxtApp` is not
+exposed on `window` in SPA mode, this never resolves and the test times out.
+
+**Wrong:**
+```ts
+const page = await createPage('/login') // ❌ hangs forever
+```
+
+**Correct** — call without a path, then navigate manually:
+```ts
+const page = await createPage()
+await page.goto('http://localhost:3000/login', { waitUntil: 'networkidle' })
+```
+
+### E2E tests — use `isVisible()` + Vitest `expect`, not Playwright matchers
+
+`@playwright/test` is not installed (only `playwright-core`). Playwright's
+`expect(locator).toBeVisible()` is not available.
+
+```ts
+// ❌ crashes — @playwright/test not installed
+import { expect } from '@playwright/test'
+await expect(page.locator('input')).toBeVisible()
+
+// ✅ use the async boolean method with Vitest's expect
+import { expect } from 'vitest'
+expect(await page.locator('input').isVisible()).toBe(true)
+```
diff --git a/test/e2e/login.test.ts b/test/e2e/login.test.ts
new file mode 100644
index 0000000..8b3200c
--- /dev/null
+++ b/test/e2e/login.test.ts
@@ -0,0 +1,23 @@
+import { describe, it, expect } from 'vitest'
+import { setup, createPage } from '@nuxt/test-utils/e2e'
+
+describe('login page', async () => {
+  await setup({
+    host: 'http://localhost:3000',
+    browser: true
+  })
+
+  it('shows the email input and OAuth provider buttons', { timeout: 30_000 }, async () => {
+    // createPage() without a path skips the internal waitForHydration call
+    // (which hangs on SPAs because window.useNuxtApp is not exposed)
+    const page = await createPage()
+    await page.goto('http://localhost:3000/login', { waitUntil: 'networkidle' })
+
+    // Email field rendered by UAuthForm
+    expect(await page.locator('input[type="text"]').first().isVisible()).toBe(true)
+
+    // OAuth buttons for Google and Apple
+    expect(await page.getByText('Google').isVisible()).toBe(true)
+    expect(await page.getByText('Apple').isVisible()).toBe(true)
+  })
+})
diff --git a/test/nuxt/counter-widget.test.ts b/test/nuxt/counter-widget.test.ts
new file mode 100644
index 0000000..ced6172
--- /dev/null
+++ b/test/nuxt/counter-widget.test.ts
@@ -0,0 +1,40 @@
+import { describe, it, expect, vi } from 'vitest'
+import { mountSuspended, mockNuxtImport } from '@nuxt/test-utils/runtime'
+import { ref } from 'vue'
+import CounterWidget from '~/components/Counter/Widget.vue'
+
+const { useCounterMock, useUserMock } = vi.hoisted(() => ({
+  useCounterMock: vi.fn(),
+  // Default return value set here so the global fetchUser middleware
+  // doesn't crash before the test body runs
+  useUserMock: vi.fn(() => ({
+    isAuthenticated: false,
+    user: null,
+    authRefresh: vi.fn()
+  }))
+}))
+
+mockNuxtImport('useCounter', () => useCounterMock)
+
+// Silence the global fetchUser middleware — prevents a real PocketBase authRefresh call
+mockNuxtImport('useUser', () => useUserMock)
+
+describe('Counter/Widget', () => {
+  it('renders the current count and increment/decrement buttons', async () => {
+    useCounterMock.mockReturnValue({
+      count: ref(42),
+      recordId: ref('rec1'),
+      fetchCurrentCount: vi.fn(),
+      subscribeToChanges: vi.fn(),
+      unsubscribe: vi.fn(),
+      increment: vi.fn(),
+      reset: vi.fn()
+    })
+
+    const wrapper = await mountSuspended(CounterWidget)
+
+    expect(wrapper.text()).toContain('42')
+    // Both +/- icon buttons should be present
+    expect(wrapper.findAll('button').length).toBeGreaterThanOrEqual(2)
+  })
+})
diff --git a/test/unit/login-schema.test.ts b/test/unit/login-schema.test.ts
new file mode 100644
index 0000000..eef49c9
--- /dev/null
+++ b/test/unit/login-schema.test.ts
@@ -0,0 +1,26 @@
+import { describe, it, expect } from 'vitest'
+import * as z from 'zod'
+
+// Mirrors the schema defined in app/pages/login.vue
+const schema = z.object({
+  email: z.email(),
+  otp: z.array(z.string()).optional().transform(val => val?.join(''))
+})
+
+describe('login schema', () => {
+  it('accepts a valid email', () => {
+    const result = schema.safeParse({ email: 'user@example.com' })
+    expect(result.success).toBe(true)
+  })
+
+  it('rejects an invalid email', () => {
+    const result = schema.safeParse({ email: 'not-an-email' })
+    expect(result.success).toBe(false)
+  })
+
+  it('joins otp array into a single string', () => {
+    const result = schema.safeParse({ email: 'user@example.com', otp: ['1', '2', '3', '4', '5', '6'] })
+    expect(result.success).toBe(true)
+    if (result.success) expect(result.data.otp).toBe('123456')
+  })
+})
diff --git a/tsconfig.json b/tsconfig.json
new file mode 100644
index 0000000..307b213
--- /dev/null
+++ b/tsconfig.json
@@ -0,0 +1,18 @@
+{
+  // https://nuxt.com/docs/guide/concepts/typescript
+  "files": [],
+  "references": [
+    {
+      "path": "./.nuxt/tsconfig.app.json"
+    },
+    {
+      "path": "./.nuxt/tsconfig.server.json"
+    },
+    {
+      "path": "./.nuxt/tsconfig.shared.json"
+    },
+    {
+      "path": "./.nuxt/tsconfig.node.json"
+    }
+  ]
+}
diff --git a/vitest.config.ts b/vitest.config.ts
new file mode 100644
index 0000000..14a261f
--- /dev/null
+++ b/vitest.config.ts
@@ -0,0 +1,30 @@
+import { defineConfig } from 'vitest/config'
+import { defineVitestProject } from '@nuxt/test-utils/config'
+
+export default defineConfig({
+  test: {
+    projects: [
+      {
+        test: {
+          name: 'unit',
+          include: ['test/unit/*.{test,spec}.ts'],
+          environment: 'node'
+        }
+      },
+      {
+        test: {
+          name: 'e2e',
+          include: ['test/e2e/*.{test,spec}.ts'],
+          environment: 'node'
+        }
+      },
+      await defineVitestProject({
+        test: {
+          name: 'nuxt',
+          include: ['test/nuxt/*.{test,spec}.ts'],
+          environment: 'nuxt'
+        }
+      })
+    ]
+  }
+})