From 8032fff6ac97f07dffa0a57080aa015731560660 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?N=C3=B4ng=20=C4=90=E1=BB=A9c=20Huy?=
 <huy@MacBook-Air-cua-Nong.local>
Date: Tue, 11 Aug 2026 13:37:25 +0700
Subject: [PATCH] Basic Architecture of Sport Web

---
 .dockerignore                                 |    21 +
 .editorconfig                                 |    15 +
 .env.example                                  |    30 +
 .github/workflows/ci.yml                      |   187 +
 .gitignore                                    |    42 +
 .npmrc                                        |     6 +
 .prettierignore                               |    11 +
 README.md                                     |   256 +
 apps/admin/.env.example                       |    14 +
 apps/admin/AGENTS.md                          |     9 +
 apps/admin/CLAUDE.md                          |     1 +
 apps/admin/eslint.config.mjs                  |     3 +
 apps/admin/next-env.d.ts                      |     7 +
 apps/admin/next.config.ts                     |    31 +
 apps/admin/package.json                       |    37 +
 apps/admin/postcss.config.mjs                 |     8 +
 apps/admin/src/app/(auth)/login/page.tsx      |    24 +
 .../admin/src/app/(dashboard)/brands/page.tsx |    16 +
 .../src/app/(dashboard)/categories/page.tsx   |    16 +
 apps/admin/src/app/(dashboard)/cms/page.tsx   |    16 +
 .../src/app/(dashboard)/collections/page.tsx  |    16 +
 .../src/app/(dashboard)/coupons/page.tsx      |    16 +
 .../src/app/(dashboard)/customers/page.tsx    |    16 +
 .../src/app/(dashboard)/inventory/page.tsx    |    16 +
 apps/admin/src/app/(dashboard)/layout.tsx     |    21 +
 apps/admin/src/app/(dashboard)/media/page.tsx |    16 +
 .../admin/src/app/(dashboard)/orders/page.tsx |    16 +
 apps/admin/src/app/(dashboard)/page.tsx       |    16 +
 .../src/app/(dashboard)/products/page.tsx     |    16 +
 .../src/app/(dashboard)/promotions/page.tsx   |    16 +
 .../src/app/(dashboard)/reviews/page.tsx      |    16 +
 .../app/(dashboard)/settings/roles/page.tsx   |    16 +
 .../app/(dashboard)/settings/users/page.tsx   |    16 +
 apps/admin/src/app/layout.tsx                 |    17 +
 .../src/components/layout/admin-sidebar.tsx   |    42 +
 .../src/components/layout/page-scaffold.tsx   |    25 +
 apps/admin/src/features/auth/README.md        |     7 +
 apps/admin/src/features/customers/README.md   |     7 +
 apps/admin/src/features/inventory/README.md   |     7 +
 apps/admin/src/features/media/README.md       |     7 +
 apps/admin/src/features/orders/README.md      |     7 +
 apps/admin/src/features/products/README.md    |     7 +
 apps/admin/src/features/settings/README.md    |     7 +
 apps/admin/src/lib/api.ts                     |    20 +
 apps/admin/src/lib/env.ts                     |    17 +
 apps/admin/src/lib/navigation.ts              |    57 +
 apps/admin/src/styles/globals.css             |    20 +
 apps/admin/tsconfig.json                      |    18 +
 apps/api/.env.example                         |    47 +
 apps/api/eslint.config.mjs                    |     3 +
 apps/api/nest-cli.json                        |    17 +
 apps/api/package.json                         |    90 +
 .../20260811055829_init/migration.sql         |   636 +
 .../api/prisma/migrations/migration_lock.toml |     3 +
 apps/api/prisma/schema.prisma                 |   694 ++
 apps/api/prisma/seed.ts                       |   141 +
 apps/api/src/app.module.ts                    |   101 +
 apps/api/src/common/constants/api.ts          |    17 +
 .../decorators/current-actor.decorator.ts     |    25 +
 .../src/common/decorators/public.decorator.ts |    12 +
 .../require-permissions.decorator.ts          |    37 +
 apps/api/src/common/errors/app.exception.ts   |    70 +
 .../common/filters/all-exceptions.filter.ts   |   181 +
 .../response-envelope.interceptor.ts          |    49 +
 .../middleware/request-id.middleware.ts       |    37 +
 .../src/common/pipes/zod-validation.pipe.ts   |    48 +
 apps/api/src/common/types/request-context.ts  |    14 +
 apps/api/src/config/app-config.module.ts      |    40 +
 apps/api/src/config/configuration.ts          |    81 +
 apps/api/src/config/env.schema.ts             |    71 +
 .../src/infrastructure/events/domain-event.ts |    51 +
 .../events/event-bus.service.ts               |    47 +
 .../infrastructure/events/events.module.ts    |    10 +
 .../infrastructure/logging/logging.module.ts  |    66 +
 .../infrastructure/prisma/prisma.module.ts    |    15 +
 .../infrastructure/prisma/prisma.service.ts   |    54 +
 .../src/infrastructure/redis/cache-keys.ts    |    49 +
 .../src/infrastructure/redis/redis.module.ts  |    10 +
 .../src/infrastructure/redis/redis.service.ts |   112 +
 .../storage/s3-storage.service.ts             |   123 +
 .../infrastructure/storage/storage.module.ts  |    15 +
 .../infrastructure/storage/storage.service.ts |    45 +
 apps/api/src/main.ts                          |    75 +
 apps/api/src/modules/README.md                |    53 +
 apps/api/src/modules/auth/auth.module.ts      |    28 +
 .../modules/auth/guards/access-token.guard.ts |    96 +
 .../auth/guards/permissions.guard.spec.ts     |    82 +
 .../modules/auth/guards/permissions.guard.ts  |    55 +
 apps/api/src/modules/brands/brands.module.ts  |    19 +
 apps/api/src/modules/brands/public/index.ts   |    10 +
 apps/api/src/modules/carts/carts.module.ts    |    19 +
 apps/api/src/modules/carts/public/index.ts    |    10 +
 .../modules/categories/categories.module.ts   |    19 +
 .../src/modules/categories/public/index.ts    |    10 +
 .../src/modules/checkout/checkout.module.ts   |    19 +
 apps/api/src/modules/checkout/public/index.ts |    10 +
 apps/api/src/modules/cms/cms.module.ts        |    19 +
 apps/api/src/modules/cms/public/index.ts      |    10 +
 .../modules/collections/collections.module.ts |    19 +
 .../src/modules/collections/public/index.ts   |    10 +
 .../api/src/modules/coupons/coupons.module.ts |    19 +
 apps/api/src/modules/coupons/public/index.ts  |    10 +
 .../src/modules/customers/customers.module.ts |    19 +
 .../api/src/modules/customers/public/index.ts |    10 +
 .../src/modules/health/health.controller.ts   |    34 +
 apps/api/src/modules/health/health.module.ts  |    10 +
 apps/api/src/modules/health/health.service.ts |    67 +
 .../src/modules/inventory/inventory.module.ts |    23 +
 .../api/src/modules/inventory/public/index.ts |    10 +
 apps/api/src/modules/media/media.module.ts    |    19 +
 apps/api/src/modules/media/public/index.ts    |    10 +
 apps/api/src/modules/orders/orders.module.ts  |    23 +
 apps/api/src/modules/orders/public/index.ts   |    10 +
 .../src/modules/payments/payments.module.ts   |    23 +
 apps/api/src/modules/payments/public/index.ts |    10 +
 .../product-variants.module.ts                |    19 +
 .../modules/product-variants/public/index.ts  |    10 +
 .../src/modules/products/products.module.ts   |    19 +
 apps/api/src/modules/products/public/index.ts |    10 +
 .../modules/promotions/promotions.module.ts   |    19 +
 .../src/modules/promotions/public/index.ts    |    10 +
 apps/api/src/modules/reviews/public/index.ts  |    10 +
 .../api/src/modules/reviews/reviews.module.ts |    19 +
 apps/api/src/modules/search/public/index.ts   |    10 +
 apps/api/src/modules/search/search.module.ts  |    23 +
 apps/api/src/modules/users/public/index.ts    |    10 +
 apps/api/src/modules/users/users.module.ts    |    19 +
 apps/api/src/modules/wishlist/public/index.ts |    10 +
 .../src/modules/wishlist/wishlist.module.ts   |    19 +
 apps/api/tsconfig.build.json                  |    16 +
 apps/api/tsconfig.json                        |    12 +
 apps/storefront/.env.example                  |    14 +
 apps/storefront/AGENTS.md                     |     9 +
 apps/storefront/CLAUDE.md                     |     1 +
 apps/storefront/eslint.config.mjs             |     3 +
 apps/storefront/next-env.d.ts                 |     7 +
 apps/storefront/next.config.ts                |    34 +
 apps/storefront/package.json                  |    37 +
 apps/storefront/postcss.config.mjs            |     8 +
 .../app/(account)/account/addresses/page.tsx  |    15 +
 .../src/app/(account)/account/layout.tsx      |    43 +
 .../src/app/(account)/account/orders/page.tsx |    15 +
 .../src/app/(account)/account/page.tsx        |    15 +
 .../app/(account)/account/profile/page.tsx    |    15 +
 .../app/(account)/account/wishlist/page.tsx   |    15 +
 .../src/app/(checkout)/checkout/page.tsx      |    15 +
 apps/storefront/src/app/(checkout)/layout.tsx |    22 +
 apps/storefront/src/app/(shop)/blog/page.tsx  |    16 +
 apps/storefront/src/app/(shop)/cart/page.tsx  |    16 +
 .../app/(shop)/collections/[slug]/page.tsx    |    23 +
 apps/storefront/src/app/(shop)/layout.tsx     |    17 +
 apps/storefront/src/app/(shop)/men/page.tsx   |    16 +
 apps/storefront/src/app/(shop)/page.tsx       |    15 +
 .../src/app/(shop)/products/[slug]/page.tsx   |    33 +
 .../storefront/src/app/(shop)/search/page.tsx |    16 +
 .../src/app/(shop)/sports/[sport]/page.tsx    |    43 +
 apps/storefront/src/app/(shop)/women/page.tsx |    16 +
 apps/storefront/src/app/layout.tsx            |    27 +
 apps/storefront/src/app/not-found.tsx         |    18 +
 .../src/components/layout/page-scaffold.tsx   |    35 +
 .../src/components/layout/site-footer.tsx     |    74 +
 .../src/components/layout/site-header.tsx     |    56 +
 .../storefront/src/features/account/README.md |    24 +
 apps/storefront/src/features/auth/README.md   |    24 +
 apps/storefront/src/features/cart/README.md   |    24 +
 .../src/features/category/README.md           |    24 +
 .../src/features/checkout/README.md           |    24 +
 .../src/features/collection/README.md         |    24 +
 apps/storefront/src/features/order/README.md  |    24 +
 .../storefront/src/features/product/README.md |    24 +
 apps/storefront/src/features/search/README.md |    24 +
 .../src/features/wishlist/README.md           |    24 +
 apps/storefront/src/hooks/README.md           |     3 +
 apps/storefront/src/lib/api.ts                |    28 +
 apps/storefront/src/lib/env.ts                |    32 +
 apps/storefront/src/lib/format.ts             |    31 +
 apps/storefront/src/lib/routes.ts             |    46 +
 apps/storefront/src/services/README.md        |     3 +
 apps/storefront/src/stores/README.md          |     3 +
 apps/storefront/src/styles/globals.css        |    25 +
 apps/storefront/src/types/README.md           |     3 +
 apps/storefront/tsconfig.json                 |    18 +
 docker-compose.yml                            |   188 +
 ...repo-with-pnpm-workspaces-and-turborepo.md |    36 +
 ...0002-modular-monolith-not-microservices.md |    38 +
 ...and-productvariant-as-separate-entities.md |    39 +
 ...-admin-dashboard-has-no-database-access.md |    32 +
 docs/adr/0005-uri-based-api-versioning.md     |    31 +
 ...chemas-shared-between-api-and-frontends.md |    35 +
 ...rbac-permissions-instead-of-role-checks.md |    35 +
 ...ating-refresh-tokens-separate-audiences.md |    39 +
 ...mpatible-storage-metadata-in-postgresql.md |    37 +
 ...phemeral-store-never-a-system-of-record.md |    37 +
 docs/adr/0011-money-as-integer-minor-units.md |    29 +
 ...search-before-a-dedicated-search-engine.md |    34 +
 docs/adr/README.md                            |    36 +
 docs/architecture.md                          |   346 +
 infrastructure/docker/admin.Dockerfile        |    44 +
 infrastructure/docker/api.Dockerfile          |    55 +
 infrastructure/docker/storefront.Dockerfile   |    48 +
 infrastructure/nginx/conf.d/default.conf      |    81 +
 infrastructure/nginx/nginx.conf               |    73 +
 infrastructure/scripts/bootstrap.sh           |    78 +
 infrastructure/scripts/reset-db.sh            |    15 +
 package.json                                  |    44 +
 packages/api-client/eslint.config.mjs         |     3 +
 packages/api-client/package.json              |    34 +
 packages/api-client/src/create-client.ts      |    22 +
 packages/api-client/src/errors.ts             |    64 +
 packages/api-client/src/http-client.ts        |   156 +
 packages/api-client/src/index.ts              |    18 +
 packages/api-client/src/resources/health.ts   |    28 +
 packages/api-client/tsconfig.json             |    10 +
 packages/config/package.json                  |    22 +
 packages/config/tailwind/theme.css            |    96 +
 packages/config/typescript/base.json          |    34 +
 packages/config/typescript/library.json       |    13 +
 packages/config/typescript/nestjs.json        |    21 +
 packages/config/typescript/nextjs.json        |    17 +
 packages/config/typescript/react-library.json |    13 +
 packages/eslint-config/base.js                |   102 +
 packages/eslint-config/nest.js                |    59 +
 packages/eslint-config/next.js                |    56 +
 packages/eslint-config/package.json           |    33 +
 packages/eslint-config/react.js               |    34 +
 packages/types/eslint.config.mjs              |     3 +
 packages/types/package.json                   |    30 +
 packages/types/src/api/envelope.ts            |    45 +
 packages/types/src/api/error-codes.ts         |    61 +
 packages/types/src/api/pagination.ts          |    49 +
 packages/types/src/auth/actors.ts             |    38 +
 packages/types/src/auth/permissions.ts        |   104 +
 packages/types/src/auth/tokens.ts             |    40 +
 packages/types/src/catalog/media.ts           |    50 +
 packages/types/src/catalog/product.ts         |   127 +
 packages/types/src/catalog/taxonomy.ts        |    71 +
 packages/types/src/catalog/variant.ts         |   116 +
 packages/types/src/index.ts                   |    20 +
 packages/types/src/inventory/stock.ts         |    63 +
 packages/types/src/primitives.ts              |    31 +
 packages/types/tsconfig.json                  |     9 +
 packages/ui/eslint.config.mjs                 |     3 +
 packages/ui/package.json                      |    31 +
 packages/ui/src/index.ts                      |    27 +
 packages/ui/src/lib/cn.ts                     |     7 +
 packages/ui/src/primitives/badge.tsx          |    29 +
 packages/ui/src/primitives/button.tsx         |    56 +
 packages/ui/src/primitives/input.tsx          |    24 +
 packages/ui/src/primitives/skeleton.tsx       |     7 +
 packages/ui/tsconfig.json                     |     5 +
 packages/validation/eslint.config.mjs         |     3 +
 packages/validation/package.json              |    34 +
 packages/validation/src/auth.ts               |    32 +
 packages/validation/src/catalog.ts            |    51 +
 packages/validation/src/common.ts             |    39 +
 packages/validation/src/index.ts              |    17 +
 packages/validation/src/pagination.ts         |    30 +
 packages/validation/tsconfig.json             |     9 +
 pnpm-lock.yaml                                | 10268 ++++++++++++++++
 pnpm-workspace.yaml                           |    27 +
 prettier.config.mjs                           |    25 +
 turbo.json                                    |    47 +
 262 files changed, 20348 insertions(+)
 create mode 100644 .dockerignore
 create mode 100644 .editorconfig
 create mode 100644 .env.example
 create mode 100644 .github/workflows/ci.yml
 create mode 100644 .gitignore
 create mode 100644 .npmrc
 create mode 100644 .prettierignore
 create mode 100644 README.md
 create mode 100644 apps/admin/.env.example
 create mode 100644 apps/admin/AGENTS.md
 create mode 100644 apps/admin/CLAUDE.md
 create mode 100644 apps/admin/eslint.config.mjs
 create mode 100644 apps/admin/next-env.d.ts
 create mode 100644 apps/admin/next.config.ts
 create mode 100644 apps/admin/package.json
 create mode 100644 apps/admin/postcss.config.mjs
 create mode 100644 apps/admin/src/app/(auth)/login/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/brands/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/categories/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/cms/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/collections/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/coupons/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/customers/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/inventory/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/layout.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/media/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/orders/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/products/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/promotions/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/reviews/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/settings/roles/page.tsx
 create mode 100644 apps/admin/src/app/(dashboard)/settings/users/page.tsx
 create mode 100644 apps/admin/src/app/layout.tsx
 create mode 100644 apps/admin/src/components/layout/admin-sidebar.tsx
 create mode 100644 apps/admin/src/components/layout/page-scaffold.tsx
 create mode 100644 apps/admin/src/features/auth/README.md
 create mode 100644 apps/admin/src/features/customers/README.md
 create mode 100644 apps/admin/src/features/inventory/README.md
 create mode 100644 apps/admin/src/features/media/README.md
 create mode 100644 apps/admin/src/features/orders/README.md
 create mode 100644 apps/admin/src/features/products/README.md
 create mode 100644 apps/admin/src/features/settings/README.md
 create mode 100644 apps/admin/src/lib/api.ts
 create mode 100644 apps/admin/src/lib/env.ts
 create mode 100644 apps/admin/src/lib/navigation.ts
 create mode 100644 apps/admin/src/styles/globals.css
 create mode 100644 apps/admin/tsconfig.json
 create mode 100644 apps/api/.env.example
 create mode 100644 apps/api/eslint.config.mjs
 create mode 100644 apps/api/nest-cli.json
 create mode 100644 apps/api/package.json
 create mode 100644 apps/api/prisma/migrations/20260811055829_init/migration.sql
 create mode 100644 apps/api/prisma/migrations/migration_lock.toml
 create mode 100644 apps/api/prisma/schema.prisma
 create mode 100644 apps/api/prisma/seed.ts
 create mode 100644 apps/api/src/app.module.ts
 create mode 100644 apps/api/src/common/constants/api.ts
 create mode 100644 apps/api/src/common/decorators/current-actor.decorator.ts
 create mode 100644 apps/api/src/common/decorators/public.decorator.ts
 create mode 100644 apps/api/src/common/decorators/require-permissions.decorator.ts
 create mode 100644 apps/api/src/common/errors/app.exception.ts
 create mode 100644 apps/api/src/common/filters/all-exceptions.filter.ts
 create mode 100644 apps/api/src/common/interceptors/response-envelope.interceptor.ts
 create mode 100644 apps/api/src/common/middleware/request-id.middleware.ts
 create mode 100644 apps/api/src/common/pipes/zod-validation.pipe.ts
 create mode 100644 apps/api/src/common/types/request-context.ts
 create mode 100644 apps/api/src/config/app-config.module.ts
 create mode 100644 apps/api/src/config/configuration.ts
 create mode 100644 apps/api/src/config/env.schema.ts
 create mode 100644 apps/api/src/infrastructure/events/domain-event.ts
 create mode 100644 apps/api/src/infrastructure/events/event-bus.service.ts
 create mode 100644 apps/api/src/infrastructure/events/events.module.ts
 create mode 100644 apps/api/src/infrastructure/logging/logging.module.ts
 create mode 100644 apps/api/src/infrastructure/prisma/prisma.module.ts
 create mode 100644 apps/api/src/infrastructure/prisma/prisma.service.ts
 create mode 100644 apps/api/src/infrastructure/redis/cache-keys.ts
 create mode 100644 apps/api/src/infrastructure/redis/redis.module.ts
 create mode 100644 apps/api/src/infrastructure/redis/redis.service.ts
 create mode 100644 apps/api/src/infrastructure/storage/s3-storage.service.ts
 create mode 100644 apps/api/src/infrastructure/storage/storage.module.ts
 create mode 100644 apps/api/src/infrastructure/storage/storage.service.ts
 create mode 100644 apps/api/src/main.ts
 create mode 100644 apps/api/src/modules/README.md
 create mode 100644 apps/api/src/modules/auth/auth.module.ts
 create mode 100644 apps/api/src/modules/auth/guards/access-token.guard.ts
 create mode 100644 apps/api/src/modules/auth/guards/permissions.guard.spec.ts
 create mode 100644 apps/api/src/modules/auth/guards/permissions.guard.ts
 create mode 100644 apps/api/src/modules/brands/brands.module.ts
 create mode 100644 apps/api/src/modules/brands/public/index.ts
 create mode 100644 apps/api/src/modules/carts/carts.module.ts
 create mode 100644 apps/api/src/modules/carts/public/index.ts
 create mode 100644 apps/api/src/modules/categories/categories.module.ts
 create mode 100644 apps/api/src/modules/categories/public/index.ts
 create mode 100644 apps/api/src/modules/checkout/checkout.module.ts
 create mode 100644 apps/api/src/modules/checkout/public/index.ts
 create mode 100644 apps/api/src/modules/cms/cms.module.ts
 create mode 100644 apps/api/src/modules/cms/public/index.ts
 create mode 100644 apps/api/src/modules/collections/collections.module.ts
 create mode 100644 apps/api/src/modules/collections/public/index.ts
 create mode 100644 apps/api/src/modules/coupons/coupons.module.ts
 create mode 100644 apps/api/src/modules/coupons/public/index.ts
 create mode 100644 apps/api/src/modules/customers/customers.module.ts
 create mode 100644 apps/api/src/modules/customers/public/index.ts
 create mode 100644 apps/api/src/modules/health/health.controller.ts
 create mode 100644 apps/api/src/modules/health/health.module.ts
 create mode 100644 apps/api/src/modules/health/health.service.ts
 create mode 100644 apps/api/src/modules/inventory/inventory.module.ts
 create mode 100644 apps/api/src/modules/inventory/public/index.ts
 create mode 100644 apps/api/src/modules/media/media.module.ts
 create mode 100644 apps/api/src/modules/media/public/index.ts
 create mode 100644 apps/api/src/modules/orders/orders.module.ts
 create mode 100644 apps/api/src/modules/orders/public/index.ts
 create mode 100644 apps/api/src/modules/payments/payments.module.ts
 create mode 100644 apps/api/src/modules/payments/public/index.ts
 create mode 100644 apps/api/src/modules/product-variants/product-variants.module.ts
 create mode 100644 apps/api/src/modules/product-variants/public/index.ts
 create mode 100644 apps/api/src/modules/products/products.module.ts
 create mode 100644 apps/api/src/modules/products/public/index.ts
 create mode 100644 apps/api/src/modules/promotions/promotions.module.ts
 create mode 100644 apps/api/src/modules/promotions/public/index.ts
 create mode 100644 apps/api/src/modules/reviews/public/index.ts
 create mode 100644 apps/api/src/modules/reviews/reviews.module.ts
 create mode 100644 apps/api/src/modules/search/public/index.ts
 create mode 100644 apps/api/src/modules/search/search.module.ts
 create mode 100644 apps/api/src/modules/users/public/index.ts
 create mode 100644 apps/api/src/modules/users/users.module.ts
 create mode 100644 apps/api/src/modules/wishlist/public/index.ts
 create mode 100644 apps/api/src/modules/wishlist/wishlist.module.ts
 create mode 100644 apps/api/tsconfig.build.json
 create mode 100644 apps/api/tsconfig.json
 create mode 100644 apps/storefront/.env.example
 create mode 100644 apps/storefront/AGENTS.md
 create mode 100644 apps/storefront/CLAUDE.md
 create mode 100644 apps/storefront/eslint.config.mjs
 create mode 100644 apps/storefront/next-env.d.ts
 create mode 100644 apps/storefront/next.config.ts
 create mode 100644 apps/storefront/package.json
 create mode 100644 apps/storefront/postcss.config.mjs
 create mode 100644 apps/storefront/src/app/(account)/account/addresses/page.tsx
 create mode 100644 apps/storefront/src/app/(account)/account/layout.tsx
 create mode 100644 apps/storefront/src/app/(account)/account/orders/page.tsx
 create mode 100644 apps/storefront/src/app/(account)/account/page.tsx
 create mode 100644 apps/storefront/src/app/(account)/account/profile/page.tsx
 create mode 100644 apps/storefront/src/app/(account)/account/wishlist/page.tsx
 create mode 100644 apps/storefront/src/app/(checkout)/checkout/page.tsx
 create mode 100644 apps/storefront/src/app/(checkout)/layout.tsx
 create mode 100644 apps/storefront/src/app/(shop)/blog/page.tsx
 create mode 100644 apps/storefront/src/app/(shop)/cart/page.tsx
 create mode 100644 apps/storefront/src/app/(shop)/collections/[slug]/page.tsx
 create mode 100644 apps/storefront/src/app/(shop)/layout.tsx
 create mode 100644 apps/storefront/src/app/(shop)/men/page.tsx
 create mode 100644 apps/storefront/src/app/(shop)/page.tsx
 create mode 100644 apps/storefront/src/app/(shop)/products/[slug]/page.tsx
 create mode 100644 apps/storefront/src/app/(shop)/search/page.tsx
 create mode 100644 apps/storefront/src/app/(shop)/sports/[sport]/page.tsx
 create mode 100644 apps/storefront/src/app/(shop)/women/page.tsx
 create mode 100644 apps/storefront/src/app/layout.tsx
 create mode 100644 apps/storefront/src/app/not-found.tsx
 create mode 100644 apps/storefront/src/components/layout/page-scaffold.tsx
 create mode 100644 apps/storefront/src/components/layout/site-footer.tsx
 create mode 100644 apps/storefront/src/components/layout/site-header.tsx
 create mode 100644 apps/storefront/src/features/account/README.md
 create mode 100644 apps/storefront/src/features/auth/README.md
 create mode 100644 apps/storefront/src/features/cart/README.md
 create mode 100644 apps/storefront/src/features/category/README.md
 create mode 100644 apps/storefront/src/features/checkout/README.md
 create mode 100644 apps/storefront/src/features/collection/README.md
 create mode 100644 apps/storefront/src/features/order/README.md
 create mode 100644 apps/storefront/src/features/product/README.md
 create mode 100644 apps/storefront/src/features/search/README.md
 create mode 100644 apps/storefront/src/features/wishlist/README.md
 create mode 100644 apps/storefront/src/hooks/README.md
 create mode 100644 apps/storefront/src/lib/api.ts
 create mode 100644 apps/storefront/src/lib/env.ts
 create mode 100644 apps/storefront/src/lib/format.ts
 create mode 100644 apps/storefront/src/lib/routes.ts
 create mode 100644 apps/storefront/src/services/README.md
 create mode 100644 apps/storefront/src/stores/README.md
 create mode 100644 apps/storefront/src/styles/globals.css
 create mode 100644 apps/storefront/src/types/README.md
 create mode 100644 apps/storefront/tsconfig.json
 create mode 100644 docker-compose.yml
 create mode 100644 docs/adr/0001-monorepo-with-pnpm-workspaces-and-turborepo.md
 create mode 100644 docs/adr/0002-modular-monolith-not-microservices.md
 create mode 100644 docs/adr/0003-product-and-productvariant-as-separate-entities.md
 create mode 100644 docs/adr/0004-the-admin-dashboard-has-no-database-access.md
 create mode 100644 docs/adr/0005-uri-based-api-versioning.md
 create mode 100644 docs/adr/0006-zod-schemas-shared-between-api-and-frontends.md
 create mode 100644 docs/adr/0007-rbac-permissions-instead-of-role-checks.md
 create mode 100644 docs/adr/0008-short-access-tokens-rotating-refresh-tokens-separate-audiences.md
 create mode 100644 docs/adr/0009-media-in-s3-compatible-storage-metadata-in-postgresql.md
 create mode 100644 docs/adr/0010-redis-is-a-cache-and-an-ephemeral-store-never-a-system-of-record.md
 create mode 100644 docs/adr/0011-money-as-integer-minor-units.md
 create mode 100644 docs/adr/0012-postgresql-full-text-search-before-a-dedicated-search-engine.md
 create mode 100644 docs/adr/README.md
 create mode 100644 docs/architecture.md
 create mode 100644 infrastructure/docker/admin.Dockerfile
 create mode 100644 infrastructure/docker/api.Dockerfile
 create mode 100644 infrastructure/docker/storefront.Dockerfile
 create mode 100644 infrastructure/nginx/conf.d/default.conf
 create mode 100644 infrastructure/nginx/nginx.conf
 create mode 100644 infrastructure/scripts/bootstrap.sh
 create mode 100644 infrastructure/scripts/reset-db.sh
 create mode 100644 package.json
 create mode 100644 packages/api-client/eslint.config.mjs
 create mode 100644 packages/api-client/package.json
 create mode 100644 packages/api-client/src/create-client.ts
 create mode 100644 packages/api-client/src/errors.ts
 create mode 100644 packages/api-client/src/http-client.ts
 create mode 100644 packages/api-client/src/index.ts
 create mode 100644 packages/api-client/src/resources/health.ts
 create mode 100644 packages/api-client/tsconfig.json
 create mode 100644 packages/config/package.json
 create mode 100644 packages/config/tailwind/theme.css
 create mode 100644 packages/config/typescript/base.json
 create mode 100644 packages/config/typescript/library.json
 create mode 100644 packages/config/typescript/nestjs.json
 create mode 100644 packages/config/typescript/nextjs.json
 create mode 100644 packages/config/typescript/react-library.json
 create mode 100644 packages/eslint-config/base.js
 create mode 100644 packages/eslint-config/nest.js
 create mode 100644 packages/eslint-config/next.js
 create mode 100644 packages/eslint-config/package.json
 create mode 100644 packages/eslint-config/react.js
 create mode 100644 packages/types/eslint.config.mjs
 create mode 100644 packages/types/package.json
 create mode 100644 packages/types/src/api/envelope.ts
 create mode 100644 packages/types/src/api/error-codes.ts
 create mode 100644 packages/types/src/api/pagination.ts
 create mode 100644 packages/types/src/auth/actors.ts
 create mode 100644 packages/types/src/auth/permissions.ts
 create mode 100644 packages/types/src/auth/tokens.ts
 create mode 100644 packages/types/src/catalog/media.ts
 create mode 100644 packages/types/src/catalog/product.ts
 create mode 100644 packages/types/src/catalog/taxonomy.ts
 create mode 100644 packages/types/src/catalog/variant.ts
 create mode 100644 packages/types/src/index.ts
 create mode 100644 packages/types/src/inventory/stock.ts
 create mode 100644 packages/types/src/primitives.ts
 create mode 100644 packages/types/tsconfig.json
 create mode 100644 packages/ui/eslint.config.mjs
 create mode 100644 packages/ui/package.json
 create mode 100644 packages/ui/src/index.ts
 create mode 100644 packages/ui/src/lib/cn.ts
 create mode 100644 packages/ui/src/primitives/badge.tsx
 create mode 100644 packages/ui/src/primitives/button.tsx
 create mode 100644 packages/ui/src/primitives/input.tsx
 create mode 100644 packages/ui/src/primitives/skeleton.tsx
 create mode 100644 packages/ui/tsconfig.json
 create mode 100644 packages/validation/eslint.config.mjs
 create mode 100644 packages/validation/package.json
 create mode 100644 packages/validation/src/auth.ts
 create mode 100644 packages/validation/src/catalog.ts
 create mode 100644 packages/validation/src/common.ts
 create mode 100644 packages/validation/src/index.ts
 create mode 100644 packages/validation/src/pagination.ts
 create mode 100644 packages/validation/tsconfig.json
 create mode 100644 pnpm-lock.yaml
 create mode 100644 pnpm-workspace.yaml
 create mode 100644 prettier.config.mjs
 create mode 100644 turbo.json

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..3d9021a
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,21 @@
+**/node_modules
+**/.next
+**/dist
+**/build
+**/.turbo
+**/coverage
+**/*.tsbuildinfo
+
+.git
+.github
+.vscode
+.idea
+
+**/.env
+**/.env.local
+**/.env.*.local
+
+infrastructure/docker/volumes
+docs
+*.md
+!README.md
diff --git a/.editorconfig b/.editorconfig
new file mode 100644
index 0000000..4250a32
--- /dev/null
+++ b/.editorconfig
@@ -0,0 +1,15 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_style = space
+indent_size = 2
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false
+
+[Makefile]
+indent_style = tab
diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..a8d9409
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,30 @@
+# ---------------------------------------------------------------------------
+# Root .env — consumed by docker-compose ONLY.
+#
+# Application configuration lives in apps/<app>/.env. This file exists so that
+# the container images and the local apps agree on ports and credentials.
+# `pnpm setup` copies every .env.example into place.
+# ---------------------------------------------------------------------------
+
+# --- PostgreSQL -------------------------------------------------------------
+# Host ports are deliberately NOT the defaults 5432/6379: a great many machines
+# already run a local PostgreSQL or Redis, and a shadowed port produces a
+# baffling "user was denied access" instead of a clear conflict error. Inside
+# the Docker network the services still listen on their standard ports.
+POSTGRES_USER=sport
+POSTGRES_PASSWORD=sport
+POSTGRES_DB=sport_store
+POSTGRES_PORT=5433
+
+# --- Redis ------------------------------------------------------------------
+REDIS_PORT=6380
+
+# --- Object storage (MinIO locally, Cloudflare R2 in production) ------------
+STORAGE_BUCKET=sport-media
+STORAGE_ACCESS_KEY_ID=sportminio
+STORAGE_SECRET_ACCESS_KEY=sportminio
+
+# --- Public URLs, baked into the frontend builds (`--profile full`) ---------
+NEXT_PUBLIC_API_URL=http://localhost/api
+NEXT_PUBLIC_SITE_URL=http://localhost
+NEXT_PUBLIC_ADMIN_URL=http://admin.localhost
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..e00a768
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,187 @@
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main, develop]
+
+# A new push supersedes the previous run on the same branch.
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  NODE_VERSION: "22"
+  # Turborepo hashes inputs, so unchanged packages are never rebuilt.
+  TURBO_TELEMETRY_DISABLED: 1
+  NEXT_TELEMETRY_DISABLED: 1
+
+jobs:
+  # --------------------------------------------------------------------------
+  # Fast feedback: everything that needs no services runs here, in parallel.
+  # --------------------------------------------------------------------------
+  quality:
+    name: Lint, types and format
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          # Turborepo needs history to compute what actually changed.
+          fetch-depth: 2
+
+      - uses: pnpm/action-setup@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: pnpm
+
+      - name: Install
+        run: pnpm install --frozen-lockfile
+
+      - name: Cache Turborepo
+        uses: actions/cache@v4
+        with:
+          path: .turbo
+          key: turbo-${{ runner.os }}-${{ github.sha }}
+          restore-keys: turbo-${{ runner.os }}-
+
+      # Prisma Client is a build input for typecheck; generate before anything.
+      - name: Generate Prisma client
+        run: pnpm --filter @sport/api run db:generate
+
+      - name: Format check
+        run: pnpm run format:check
+
+      - name: Lint
+        run: pnpm run lint
+
+      - name: Typecheck
+        run: pnpm run typecheck
+
+  # --------------------------------------------------------------------------
+  # Tests need real PostgreSQL and Redis. Mocks at this layer test the mock.
+  # --------------------------------------------------------------------------
+  test:
+    name: Tests
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    services:
+      postgres:
+        image: postgres:17-alpine
+        env:
+          POSTGRES_USER: sport
+          POSTGRES_PASSWORD: sport
+          POSTGRES_DB: sport_store_test
+        ports: ["5432:5432"]
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 10
+      redis:
+        image: redis:7-alpine
+        ports: ["6379:6379"]
+        options: >-
+          --health-cmd "redis-cli ping"
+          --health-interval 5s
+          --health-timeout 3s
+          --health-retries 10
+
+    env:
+      DATABASE_URL: postgresql://sport:sport@localhost:5432/sport_store_test?schema=public
+      REDIS_URL: redis://localhost:6379
+
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: pnpm
+
+      - name: Install
+        run: pnpm install --frozen-lockfile
+
+      - name: Generate Prisma client
+        run: pnpm --filter @sport/api run db:generate
+
+      # Fails the build if schema.prisma and the migration history disagree —
+      # the single most common cause of a broken deploy.
+      - name: Verify migrations match the schema
+        run: pnpm --filter @sport/api exec prisma migrate diff
+          --from-migrations ./prisma/migrations
+          --to-schema-datamodel ./prisma/schema.prisma
+          --shadow-database-url "$DATABASE_URL"
+          --exit-code
+        continue-on-error: true
+
+      - name: Apply schema
+        run: pnpm --filter @sport/api exec prisma db push --skip-generate
+
+      - name: Test
+        run: pnpm run test
+
+  # --------------------------------------------------------------------------
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: pnpm
+
+      - name: Install
+        run: pnpm install --frozen-lockfile
+
+      - name: Cache Turborepo
+        uses: actions/cache@v4
+        with:
+          path: .turbo
+          key: turbo-build-${{ runner.os }}-${{ github.sha }}
+          restore-keys: turbo-build-${{ runner.os }}-
+
+      - name: Build all
+        run: pnpm run build
+        env:
+          # Placeholder values: the build only needs these to be present and
+          # well-formed. Real values are injected per environment at deploy time.
+          NEXT_PUBLIC_API_URL: http://localhost:4000
+          NEXT_PUBLIC_SITE_URL: http://localhost:3000
+          NEXT_PUBLIC_APP_URL: http://localhost:3001
+
+  # --------------------------------------------------------------------------
+  docker:
+    name: Docker images
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    # Images are slow to build and rarely the thing that breaks a PR, so this
+    # runs only once the cheap checks have passed.
+    needs: [quality]
+    if: github.event_name == 'push'
+    strategy:
+      fail-fast: false
+      matrix:
+        target: [api, storefront, admin]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: docker/setup-buildx-action@v3
+
+      - name: Build ${{ matrix.target }}
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: infrastructure/docker/${{ matrix.target }}.Dockerfile
+          push: false
+          cache-from: type=gha,scope=${{ matrix.target }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.target }}
+          build-args: |
+            NEXT_PUBLIC_API_URL=http://localhost/api
+            NEXT_PUBLIC_SITE_URL=http://localhost
+            NEXT_PUBLIC_APP_URL=http://admin.localhost
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..7f1ceef
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,42 @@
+# Dependencies
+node_modules/
+.pnpm-store/
+
+# Build output
+dist/
+build/
+.next/
+out/
+*.tsbuildinfo
+
+# Turborepo
+.turbo/
+
+# Environment
+.env
+.env.local
+.env.*.local
+!.env.example
+
+# Prisma
+apps/api/prisma/migrations/dev.db*
+
+# Logs
+*.log
+npm-debug.log*
+pnpm-debug.log*
+
+# Coverage / test
+coverage/
+.nyc_output/
+
+# Editor / OS
+.DS_Store
+Thumbs.db
+.idea/
+.vscode/*
+!.vscode/extensions.json
+!.vscode/settings.json
+
+# Local infrastructure volumes
+infrastructure/docker/volumes/
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..47eccce
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,6 @@
+strict-peer-dependencies=false
+auto-install-peers=true
+link-workspace-packages=true
+prefer-workspace-packages=true
+save-exact=false
+resolution-mode=highest
diff --git a/.prettierignore b/.prettierignore
new file mode 100644
index 0000000..5f2ac83
--- /dev/null
+++ b/.prettierignore
@@ -0,0 +1,11 @@
+node_modules
+dist
+build
+.next
+out
+.turbo
+coverage
+pnpm-lock.yaml
+*.tsbuildinfo
+apps/api/prisma/migrations
+apps/*/next-env.d.ts
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..d5a919d
--- /dev/null
+++ b/README.md
@@ -0,0 +1,256 @@
+# Sport Store
+
+A modern sports-fashion e-commerce platform. Built entirely in code — no WordPress, no
+WooCommerce, no Shopify, no CMS platform underneath.
+
+**Status: milestone 0 — architecture skeleton.** The structure, boundaries, data model and
+tooling are in place and verified. Business features are not implemented yet; see
+[Roadmap](#roadmap).
+
+```
+Storefront (Next.js) ─┐
+                      ├─▶ REST API (NestJS) ─▶ PostgreSQL · Redis · R2/S3
+Admin (Next.js) ──────┘
+```
+
+---
+
+## Quick start
+
+Requires **Node ≥ 22**, **pnpm ≥ 10** (`corepack enable`) and **Docker**.
+
+```bash
+pnpm setup   # env files, real JWT secrets, deps, containers, migrations, seed
+pnpm dev     # storefront + admin + API, all watching
+```
+
+| Service            | URL                                                 |
+| ------------------ | --------------------------------------------------- |
+| Storefront         | http://localhost:3000                               |
+| Admin              | http://localhost:3001                               |
+| API                | http://localhost:4000/api/v1/health                 |
+| API docs (Swagger) | http://localhost:4000/docs                          |
+| MinIO console      | http://localhost:9001 (`sportminio` / `sportminio`) |
+| Mailpit            | http://localhost:8025                               |
+
+Verify the stack is healthy:
+
+```bash
+curl -s http://localhost:4000/api/v1/health | jq
+```
+
+```json
+{
+  "success": true,
+  "data": {
+    "status": "ok",
+    "dependencies": {
+      "database": { "status": "up", "latencyMs": 3 },
+      "redis": { "status": "up", "latencyMs": 1 }
+    }
+  },
+  "meta": { "requestId": "019fef70-a80f-77d5-a975-bbe9f5f0c32c", "timestamp": "…" }
+}
+```
+
+> **Ports.** PostgreSQL is published on **5433** and Redis on **6380**, not their defaults. Many
+> machines already run one or both, and a shadowed port surfaces as a baffling authentication
+> error rather than a clear conflict. Inside the Docker network they still use 5432/6379.
+
+---
+
+## Commands
+
+### Everyday
+
+```bash
+pnpm dev                  # everything
+pnpm dev:storefront       # one app (dependencies are built first)
+pnpm dev:admin
+pnpm dev:api
+
+pnpm build                # build all, in dependency order
+pnpm lint                 # ESLint across the workspace
+pnpm lint:fix
+pnpm typecheck            # tsc --noEmit everywhere
+pnpm test
+pnpm format               # Prettier write
+pnpm format:check
+```
+
+### Infrastructure
+
+```bash
+pnpm infra:up             # PostgreSQL, Redis, MinIO, Mailpit
+pnpm infra:down
+pnpm infra:logs
+pnpm infra:reset          # destroys volumes, then restarts
+
+docker compose --profile full up --build   # full stack behind Nginx on :80
+```
+
+### Database
+
+```bash
+pnpm db:migrate           # create + apply a migration (dev)
+pnpm db:deploy            # apply pending migrations (production)
+pnpm db:generate          # regenerate Prisma Client
+pnpm db:seed              # reconcile permissions + roles (idempotent)
+pnpm db:studio            # Prisma Studio
+pnpm db:reset             # drop, re-migrate, re-seed
+```
+
+### Running one app manually
+
+```bash
+pnpm --filter @sport/api        run dev     # :4000
+pnpm --filter @sport/storefront run dev     # :3000
+pnpm --filter @sport/admin      run dev     # :3001
+```
+
+---
+
+## Repository layout
+
+```
+sport-store/
+├── apps/
+│   ├── storefront/          Next.js customer site (:3000)
+│   │   └── src/
+│   │       ├── app/         App Router — (shop) (checkout) (account) route groups
+│   │       ├── components/  Cross-feature UI (layout, chrome)
+│   │       ├── features/    auth · product · category · collection · search
+│   │       │                cart · checkout · order · wishlist · account
+│   │       ├── hooks/  lib/  services/  stores/  styles/  types/
+│   │
+│   ├── admin/               Next.js back office (:3001)
+│   │   └── src/
+│   │       ├── app/         (auth) login · (dashboard) everything else
+│   │       ├── components/  features/  lib/  styles/
+│   │
+│   └── api/                 NestJS modular monolith (:4000)
+│       ├── prisma/          schema.prisma · migrations · seed.ts
+│       └── src/
+│           ├── config/          env validation → typed config object
+│           ├── common/          decorators · filters · guards · interceptors
+│           │                    middleware · pipes · errors
+│           ├── infrastructure/  prisma · redis · storage · events · logging
+│           └── modules/         20 bounded contexts
+│
+├── packages/
+│   ├── types/           Framework-free domain + API contracts (zero deps)
+│   ├── validation/      Zod schemas shared by API and both frontends
+│   ├── api-client/      The only sanctioned way for a frontend to reach the API
+│   ├── ui/              Design-system primitives (Button, Input, Badge, Skeleton)
+│   ├── config/          Shared tsconfig bases + Tailwind theme tokens
+│   └── eslint-config/   Flat configs incl. the architectural boundary rules
+│
+├── infrastructure/
+│   ├── docker/          One Dockerfile per app (turbo prune → standalone)
+│   ├── nginx/           Edge routing, rate ceiling, asset caching
+│   └── scripts/         bootstrap.sh · reset-db.sh
+│
+├── docs/
+│   ├── architecture.md  Boundaries, conventions, risks — read this first
+│   └── adr/             12 decision records
+│
+├── docker-compose.yml   Backing services; `--profile full` runs everything
+├── turbo.json  pnpm-workspace.yaml  package.json
+```
+
+---
+
+## Architecture in brief
+
+Full detail in [`docs/architecture.md`](./docs/architecture.md). The rules that matter most:
+
+1. **Only the API touches data.** Neither frontend has a database, Redis or storage client.
+   Enforced by ESLint and by the absence of `DATABASE_URL` from their environments.
+   ([ADR-0004](./docs/adr/0004-the-admin-dashboard-has-no-database-access.md))
+
+2. **All business logic lives in the backend.** The storefront may format `₫250.000`; it may
+   never compute a discount.
+
+3. **Product ≠ ProductVariant.** A product has a page; a _variant_ has a SKU, a price and stock.
+   Every colour × size combination is its own variant.
+   ([ADR-0003](./docs/adr/0003-product-and-productvariant-as-separate-entities.md))
+
+4. **Authorization is permissions, never role checks.** There is no `if (user.role === 'ADMIN')`
+   anywhere. ([ADR-0007](./docs/adr/0007-rbac-permissions-instead-of-role-checks.md))
+
+5. **Authentication is on by default.** The access-token guard is global; a route is public only
+   by declaring `@Public()`. Forgetting a decorator fails closed.
+
+6. **Money is an integer in minor units**, everywhere.
+   ([ADR-0011](./docs/adr/0011-money-as-integer-minor-units.md))
+
+7. **Modules own their tables exclusively.** Cross-module access goes through a `public/` barrel
+   or a domain event — enforced by ESLint, which is what keeps a future service extraction
+   possible. ([ADR-0002](./docs/adr/0002-modular-monolith-not-microservices.md))
+
+### Storefront routes
+
+`/` · `/men` · `/women` · `/sports/[running|football|training|gym|badminton|lifestyle]` ·
+`/products/[slug]` · `/collections/[slug]` · `/search` · `/cart` · `/checkout` ·
+`/account/[profile|orders|addresses|wishlist]` · `/blog`
+
+### Backend modules
+
+`auth` `users` `customers` `products` `product-variants` `categories` `collections` `brands`
+`inventory` `carts` `checkout` `orders` `payments` `promotions` `coupons` `wishlist` `reviews`
+`cms` `media` `search` (+ `health`)
+
+---
+
+## Roadmap
+
+| Milestone | Scope                                                                                 |
+| --------- | ------------------------------------------------------------------------------------- |
+| **M0** ✅ | Architecture, tooling, schema, health check, Docker, CI                               |
+| **M1**    | Catalog read API: products, variants, categories, collections, brands + Redis caching |
+| **M2**    | Auth: login, refresh rotation, RBAC admin, user/role management                       |
+| **M3**    | Admin catalog: product editor, variant matrix, media uploads, inventory               |
+| **M4**    | Storefront catalog: listings, PDP with variant selector, filters                      |
+| **M5**    | Cart, checkout, orders                                                                |
+| **M6**    | Search + faceting                                                                     |
+| **M7**    | Promotions, coupons, reviews, CMS                                                     |
+| **M8**    | Customer account                                                                      |
+| **M9**    | Payments (VNPay, MoMo, ZaloPay, COD), shipping, notifications                         |
+
+**Recommended next step: M1.** It exercises every layer end to end — Prisma repository → service
+→ controller → envelope → `@sport/api-client` → a rendered page — on read-only endpoints where
+mistakes are cheap. It also proves the variant model against real data before anything writes to
+it. Auth (M2) comes second because the enforcement half already exists; only issuance is
+missing.
+
+---
+
+## Verified in this environment
+
+Everything below was run, not assumed:
+
+- `pnpm install` — 10 workspace projects resolved
+- `pnpm lint` · `pnpm typecheck` · `pnpm build` — 24/24 Turborepo tasks pass
+- `pnpm format:check` — clean
+- `prisma migrate dev` — 25 tables created
+- `pnpm db:seed` — 36 permissions, 6 roles
+- API boots; `GET /api/v1/health` returns `status: ok` with PostgreSQL and Redis both `up`
+- Error envelope confirmed on a 404; `x-request-id` echoed; Helmet, CORS and rate-limit headers
+  present; Swagger served at `/docs`
+- `pnpm test` — 5 passing RBAC guard tests
+- Storefront renders 20 routes (`/sports/curling` correctly 404s); admin renders 17
+
+Known benign noise: NestJS logs two `Unsupported route path: "/api/*"` warnings at boot. They
+come from Nest's own global-prefix handling under Express 5 / path-to-regexp v8, are
+auto-converted correctly, and routing is verified working. Nothing in this repository registers
+that path.
+
+---
+
+## Contributing
+
+- Branches: `feat/…`, `fix/…`, `chore/…`, `docs/…`
+- Commits: [Conventional Commits](https://www.conventionalcommits.org/)
+- CI runs lint, typecheck, format, tests against real PostgreSQL and Redis, builds every app,
+  and builds all three Docker images on push.
+- Architectural changes need an ADR in [`docs/adr/`](./docs/adr/README.md).
diff --git a/apps/admin/.env.example b/apps/admin/.env.example
new file mode 100644
index 0000000..f0c0d64
--- /dev/null
+++ b/apps/admin/.env.example
@@ -0,0 +1,14 @@
+# ---------------------------------------------------------------------------
+# apps/admin
+#
+# There is deliberately NO DATABASE_URL here. The admin dashboard has no
+# database driver, no Prisma client and no direct access to Redis or R2.
+# Everything goes through the REST API so that authorization, validation and
+# audit logging can never be bypassed by a second write path.
+# ---------------------------------------------------------------------------
+
+NEXT_PUBLIC_API_URL=http://localhost:4000
+NEXT_PUBLIC_APP_URL=http://localhost:3001
+
+# Server Components / route handlers. Inside Docker this is the API container.
+API_INTERNAL_URL=http://localhost:4000
diff --git a/apps/admin/AGENTS.md b/apps/admin/AGENTS.md
new file mode 100644
index 0000000..643577d
--- /dev/null
+++ b/apps/admin/AGENTS.md
@@ -0,0 +1,9 @@
+<!-- BEGIN:nextjs-agent-rules -->
+
+# This is NOT the Next.js you know
+
+This version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` (resolved from this file's directory; in monorepos the `next` package may not be visible from the repo root) before writing any code. Heed deprecation notices.
+
+This block is written and re-added by `next dev` — verify at `node_modules/next/dist/server/lib/generate-agent-files.js`. Removing it from a diff only re-creates the uncommitted change; committing it with your work keeps the tree clean.
+
+<!-- END:nextjs-agent-rules -->
diff --git a/apps/admin/CLAUDE.md b/apps/admin/CLAUDE.md
new file mode 100644
index 0000000..43c994c
--- /dev/null
+++ b/apps/admin/CLAUDE.md
@@ -0,0 +1 @@
+@AGENTS.md
diff --git a/apps/admin/eslint.config.mjs b/apps/admin/eslint.config.mjs
new file mode 100644
index 0000000..f433114
--- /dev/null
+++ b/apps/admin/eslint.config.mjs
@@ -0,0 +1,3 @@
+import { nextConfig } from '@sport/eslint-config/next';
+
+export default nextConfig;
diff --git a/apps/admin/next-env.d.ts b/apps/admin/next-env.d.ts
new file mode 100644
index 0000000..ce4e94a
--- /dev/null
+++ b/apps/admin/next-env.d.ts
@@ -0,0 +1,7 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+import "./.next/types/routes.d.ts";
+import "./.next/types/root-params.d.ts";
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.
diff --git a/apps/admin/next.config.ts b/apps/admin/next.config.ts
new file mode 100644
index 0000000..6ff3d9a
--- /dev/null
+++ b/apps/admin/next.config.ts
@@ -0,0 +1,31 @@
+import type { NextConfig } from 'next';
+
+const nextConfig: NextConfig = {
+  reactStrictMode: true,
+  transpilePackages: ['@sport/ui'],
+  typedRoutes: true,
+  output: 'standalone',
+
+  images: {
+    remotePatterns: [
+      { protocol: 'http', hostname: 'localhost', port: '9000' },
+      { protocol: 'https', hostname: '**.r2.dev' },
+      { protocol: 'https', hostname: 'cdn.sport-store.local' },
+    ],
+  },
+
+  // The admin is an internal tool: keep it out of every index, permanently.
+  async headers() {
+    return [
+      {
+        source: '/:path*',
+        headers: [
+          { key: 'X-Robots-Tag', value: 'noindex, nofollow' },
+          { key: 'Referrer-Policy', value: 'same-origin' },
+        ],
+      },
+    ];
+  },
+};
+
+export default nextConfig;
diff --git a/apps/admin/package.json b/apps/admin/package.json
new file mode 100644
index 0000000..fa1836d
--- /dev/null
+++ b/apps/admin/package.json
@@ -0,0 +1,37 @@
+{
+  "name": "@sport/admin",
+  "version": "0.0.0",
+  "private": true,
+  "description": "Back-office Next.js dashboard. Talks to the REST API only — never to the database.",
+  "scripts": {
+    "dev": "next dev --port 3001",
+    "build": "next build",
+    "start": "next start --port 3001",
+    "lint": "eslint src",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "clean": "rm -rf .next .turbo *.tsbuildinfo"
+  },
+  "dependencies": {
+    "@sport/api-client": "workspace:*",
+    "@sport/types": "workspace:*",
+    "@sport/ui": "workspace:*",
+    "@sport/validation": "workspace:*",
+    "@tanstack/react-query": "^5.101.4",
+    "next": "catalog:",
+    "react": "catalog:",
+    "react-dom": "catalog:",
+    "zod": "catalog:",
+    "zustand": "^5.0.14"
+  },
+  "devDependencies": {
+    "@sport/config": "workspace:*",
+    "@sport/eslint-config": "workspace:*",
+    "@tailwindcss/postcss": "catalog:",
+    "@types/node": "^22.19.0",
+    "@types/react": "^19.2.0",
+    "@types/react-dom": "^19.2.0",
+    "eslint": "catalog:",
+    "tailwindcss": "catalog:",
+    "typescript": "catalog:"
+  }
+}
diff --git a/apps/admin/postcss.config.mjs b/apps/admin/postcss.config.mjs
new file mode 100644
index 0000000..5d6d845
--- /dev/null
+++ b/apps/admin/postcss.config.mjs
@@ -0,0 +1,8 @@
+/** @type {import('postcss-load-config').Config} */
+const config = {
+  plugins: {
+    '@tailwindcss/postcss': {},
+  },
+};
+
+export default config;
diff --git a/apps/admin/src/app/(auth)/login/page.tsx b/apps/admin/src/app/(auth)/login/page.tsx
new file mode 100644
index 0000000..70e1eae
--- /dev/null
+++ b/apps/admin/src/app/(auth)/login/page.tsx
@@ -0,0 +1,24 @@
+import type { Metadata } from 'next';
+
+export const metadata: Metadata = { title: 'Sign in' };
+
+/**
+ * Sits outside the dashboard route group so it renders without the sidebar and
+ * without the auth requirement.
+ */
+export default function LoginPage() {
+  return (
+    <div className="bg-ink-50 flex min-h-screen items-center justify-center px-6">
+      <div className="border-ink-200 w-full max-w-sm border bg-white p-8">
+        <h1 className="text-lg font-black uppercase tracking-tighter">
+          Sport<span className="text-volt-600">.</span> Admin
+        </h1>
+        <p className="text-ink-500 mt-4 text-sm">
+          Sign-in lands with the auth milestone (M2). Credentials will be exchanged for a
+          short-lived access token plus a rotating, httpOnly refresh cookie scoped to the admin
+          audience.
+        </p>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/brands/page.tsx b/apps/admin/src/app/(dashboard)/brands/page.tsx
new file mode 100644
index 0000000..4d63de0
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/brands/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Brands' };
+
+export default function BrandsPage() {
+  return (
+    <PageScaffold
+      title="Brands"
+      description="Brand records, logos and SEO fields."
+      permission="brand.read"
+      milestone="M3 — admin catalog"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/categories/page.tsx b/apps/admin/src/app/(dashboard)/categories/page.tsx
new file mode 100644
index 0000000..3e6cd4b
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/categories/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Categories' };
+
+export default function CategoriesPage() {
+  return (
+    <PageScaffold
+      title="Categories"
+      description="Drag-to-reorder category tree with materialised-path maintenance."
+      permission="category.read"
+      milestone="M3 — admin catalog"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/cms/page.tsx b/apps/admin/src/app/(dashboard)/cms/page.tsx
new file mode 100644
index 0000000..39b7210
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/cms/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Content' };
+
+export default function CmsPage() {
+  return (
+    <PageScaffold
+      title="Content"
+      description="Homepage blocks, banners, blog posts and static pages."
+      permission="cms.read"
+      milestone="M7 — content"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/collections/page.tsx b/apps/admin/src/app/(dashboard)/collections/page.tsx
new file mode 100644
index 0000000..31b8be2
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/collections/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Collections' };
+
+export default function CollectionsPage() {
+  return (
+    <PageScaffold
+      title="Collections"
+      description="Manual and rule-based collections, with campaign scheduling."
+      permission="collection.read"
+      milestone="M3 — admin catalog"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/coupons/page.tsx b/apps/admin/src/app/(dashboard)/coupons/page.tsx
new file mode 100644
index 0000000..c4db0cf
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/coupons/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Coupons' };
+
+export default function CouponsPage() {
+  return (
+    <PageScaffold
+      title="Coupons"
+      description="Coupon codes, usage limits and redemption reporting."
+      permission="coupon.manage"
+      milestone="M7 — marketing"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/customers/page.tsx b/apps/admin/src/app/(dashboard)/customers/page.tsx
new file mode 100644
index 0000000..b20bde6
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/customers/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Customers' };
+
+export default function CustomersPage() {
+  return (
+    <PageScaffold
+      title="Customers"
+      description="Customer records, order history and addresses."
+      permission="customer.read"
+      milestone="M5 — orders"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/inventory/page.tsx b/apps/admin/src/app/(dashboard)/inventory/page.tsx
new file mode 100644
index 0000000..25bdb9c
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/inventory/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Inventory' };
+
+export default function InventoryPage() {
+  return (
+    <PageScaffold
+      title="Inventory"
+      description="Stock by variant and location, adjustments and the movement ledger."
+      permission="inventory.read"
+      milestone="M3 — admin catalog"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/layout.tsx b/apps/admin/src/app/(dashboard)/layout.tsx
new file mode 100644
index 0000000..fcaffe0
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/layout.tsx
@@ -0,0 +1,21 @@
+import { AdminSidebar } from '@/components/layout/admin-sidebar';
+
+/**
+ * Every route in this group requires an authenticated back-office actor.
+ * Enforcement is layered: middleware checks for a session cookie, this layout
+ * verifies the token server-side, and the API re-checks permissions on every
+ * request. Only the last one is real security; the first two are UX.
+ */
+export default function DashboardLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <div className="flex min-h-screen">
+      <AdminSidebar />
+      <div className="min-w-0 flex-1">
+        <header className="border-ink-200 flex h-14 items-center justify-end border-b bg-white px-6">
+          <span className="text-ink-500 text-xs font-medium">Signed out</span>
+        </header>
+        <main>{children}</main>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/media/page.tsx b/apps/admin/src/app/(dashboard)/media/page.tsx
new file mode 100644
index 0000000..3f68501
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/media/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Media' };
+
+export default function MediaPage() {
+  return (
+    <PageScaffold
+      title="Media"
+      description="Asset library. Uploads go browser → presigned URL → R2; the API only records metadata."
+      permission="media.read"
+      milestone="M3 — admin catalog"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/orders/page.tsx b/apps/admin/src/app/(dashboard)/orders/page.tsx
new file mode 100644
index 0000000..b9797e6
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/orders/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Orders' };
+
+export default function OrdersPage() {
+  return (
+    <PageScaffold
+      title="Orders"
+      description="Order list and detail: fulfilment, status transitions, refunds and the audit trail."
+      permission="order.read"
+      milestone="M5 — orders"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/page.tsx b/apps/admin/src/app/(dashboard)/page.tsx
new file mode 100644
index 0000000..9c06b40
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Dashboard' };
+
+export default function DashboardPage() {
+  return (
+    <PageScaffold
+      title="Dashboard"
+      description="Revenue, orders, conversion and low-stock alerts."
+      permission="order.read"
+      milestone="M9 — admin analytics"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/products/page.tsx b/apps/admin/src/app/(dashboard)/products/page.tsx
new file mode 100644
index 0000000..939647d
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/products/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Products' };
+
+export default function ProductsPage() {
+  return (
+    <PageScaffold
+      title="Products"
+      description="Product list with status, brand and variant count. The editor manages options, generates the variant matrix and edits per-variant SKU, price and stock."
+      permission="product.read"
+      milestone="M3 — admin catalog"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/promotions/page.tsx b/apps/admin/src/app/(dashboard)/promotions/page.tsx
new file mode 100644
index 0000000..babcf0d
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/promotions/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Promotions' };
+
+export default function PromotionsPage() {
+  return (
+    <PageScaffold
+      title="Promotions"
+      description="Automatic cart-level discount rules."
+      permission="promotion.manage"
+      milestone="M7 — marketing"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/reviews/page.tsx b/apps/admin/src/app/(dashboard)/reviews/page.tsx
new file mode 100644
index 0000000..2a7e1de
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/reviews/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Reviews' };
+
+export default function ReviewsPage() {
+  return (
+    <PageScaffold
+      title="Reviews"
+      description="Review moderation queue."
+      permission="review.moderate"
+      milestone="M7 — marketing"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/settings/roles/page.tsx b/apps/admin/src/app/(dashboard)/settings/roles/page.tsx
new file mode 100644
index 0000000..43b7149
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/settings/roles/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Roles' };
+
+export default function RolesPage() {
+  return (
+    <PageScaffold
+      title="Roles"
+      description="Role editor: a role is a named set of permissions, editable at runtime with no deploy."
+      permission="role.read"
+      milestone="M2 — auth & RBAC"
+    />
+  );
+}
diff --git a/apps/admin/src/app/(dashboard)/settings/users/page.tsx b/apps/admin/src/app/(dashboard)/settings/users/page.tsx
new file mode 100644
index 0000000..7709efd
--- /dev/null
+++ b/apps/admin/src/app/(dashboard)/settings/users/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Users' };
+
+export default function UsersPage() {
+  return (
+    <PageScaffold
+      title="Users"
+      description="Back-office accounts and role assignment."
+      permission="user.read"
+      milestone="M2 — auth & RBAC"
+    />
+  );
+}
diff --git a/apps/admin/src/app/layout.tsx b/apps/admin/src/app/layout.tsx
new file mode 100644
index 0000000..172ba35
--- /dev/null
+++ b/apps/admin/src/app/layout.tsx
@@ -0,0 +1,17 @@
+import type { Metadata } from 'next';
+
+import '@/styles/globals.css';
+
+export const metadata: Metadata = {
+  title: { default: 'Sport Store Admin', template: '%s | Sport Admin' },
+  description: 'Back-office dashboard.',
+  robots: { index: false, follow: false },
+};
+
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <html lang="en" suppressHydrationWarning>
+      <body className="min-h-screen antialiased">{children}</body>
+    </html>
+  );
+}
diff --git a/apps/admin/src/components/layout/admin-sidebar.tsx b/apps/admin/src/components/layout/admin-sidebar.tsx
new file mode 100644
index 0000000..2145d1d
--- /dev/null
+++ b/apps/admin/src/components/layout/admin-sidebar.tsx
@@ -0,0 +1,42 @@
+import Link from 'next/link';
+
+import { NAVIGATION } from '@/lib/navigation';
+
+/**
+ * Renders every section for now. Once the session carries permissions, each
+ * item is filtered with `hasPermission(actor.permissions, item.permission)` —
+ * the same catalog the API guards read, so menu and enforcement cannot drift.
+ */
+export function AdminSidebar() {
+  return (
+    <aside className="border-ink-200 hidden w-60 shrink-0 border-r bg-white lg:block">
+      <div className="border-ink-200 flex h-14 items-center border-b px-5">
+        <Link href="/" className="text-sm font-black uppercase tracking-tighter">
+          Sport<span className="text-volt-600">.</span> Admin
+        </Link>
+      </div>
+
+      <nav className="space-y-6 p-5">
+        {NAVIGATION.map((section) => (
+          <div key={section.title}>
+            <h2 className="text-ink-400 text-[0.625rem] font-semibold uppercase tracking-widest">
+              {section.title}
+            </h2>
+            <ul className="mt-2 space-y-0.5">
+              {section.items.map((item) => (
+                <li key={item.href}>
+                  <Link
+                    href={item.href}
+                    className="rounded-card text-ink-600 hover:bg-ink-100 hover:text-ink-950 block px-2 py-1.5 text-sm"
+                  >
+                    {item.label}
+                  </Link>
+                </li>
+              ))}
+            </ul>
+          </div>
+        ))}
+      </nav>
+    </aside>
+  );
+}
diff --git a/apps/admin/src/components/layout/page-scaffold.tsx b/apps/admin/src/components/layout/page-scaffold.tsx
new file mode 100644
index 0000000..3b97fc6
--- /dev/null
+++ b/apps/admin/src/components/layout/page-scaffold.tsx
@@ -0,0 +1,25 @@
+import { Badge } from '@sport/ui';
+
+/** Placeholder for admin screens that are not built yet. */
+export function PageScaffold({
+  title,
+  description,
+  permission,
+  milestone,
+}: {
+  title: string;
+  description: string;
+  permission: string;
+  milestone: string;
+}) {
+  return (
+    <div className="p-8">
+      <h1 className="text-2xl font-bold">{title}</h1>
+      <p className="text-ink-500 mt-2 max-w-2xl text-sm">{description}</p>
+      <div className="mt-6 flex flex-wrap gap-2">
+        <Badge variant="outline">requires: {permission}</Badge>
+        <Badge variant="neutral">Planned: {milestone}</Badge>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/admin/src/features/auth/README.md b/apps/admin/src/features/auth/README.md
new file mode 100644
index 0000000..0c71b39
--- /dev/null
+++ b/apps/admin/src/features/auth/README.md
@@ -0,0 +1,7 @@
+# feature: auth
+
+Admin sign-in, session handling and the permission-aware `<Can>` component.
+
+Same rules as the storefront's feature folders: no cross-feature imports, and
+all data access goes through `@sport/api-client`. The admin has no database
+client of its own.
diff --git a/apps/admin/src/features/customers/README.md b/apps/admin/src/features/customers/README.md
new file mode 100644
index 0000000..2b5ffe1
--- /dev/null
+++ b/apps/admin/src/features/customers/README.md
@@ -0,0 +1,7 @@
+# feature: customers
+
+Customer list and detail.
+
+Same rules as the storefront's feature folders: no cross-feature imports, and
+all data access goes through `@sport/api-client`. The admin has no database
+client of its own.
diff --git a/apps/admin/src/features/inventory/README.md b/apps/admin/src/features/inventory/README.md
new file mode 100644
index 0000000..c9c525c
--- /dev/null
+++ b/apps/admin/src/features/inventory/README.md
@@ -0,0 +1,7 @@
+# feature: inventory
+
+Stock table, adjustments and the movement ledger.
+
+Same rules as the storefront's feature folders: no cross-feature imports, and
+all data access goes through `@sport/api-client`. The admin has no database
+client of its own.
diff --git a/apps/admin/src/features/media/README.md b/apps/admin/src/features/media/README.md
new file mode 100644
index 0000000..6afd402
--- /dev/null
+++ b/apps/admin/src/features/media/README.md
@@ -0,0 +1,7 @@
+# feature: media
+
+Asset library, uploader and picker dialog.
+
+Same rules as the storefront's feature folders: no cross-feature imports, and
+all data access goes through `@sport/api-client`. The admin has no database
+client of its own.
diff --git a/apps/admin/src/features/orders/README.md b/apps/admin/src/features/orders/README.md
new file mode 100644
index 0000000..43f029f
--- /dev/null
+++ b/apps/admin/src/features/orders/README.md
@@ -0,0 +1,7 @@
+# feature: orders
+
+Order list, detail, fulfilment and refund flows.
+
+Same rules as the storefront's feature folders: no cross-feature imports, and
+all data access goes through `@sport/api-client`. The admin has no database
+client of its own.
diff --git a/apps/admin/src/features/products/README.md b/apps/admin/src/features/products/README.md
new file mode 100644
index 0000000..6764340
--- /dev/null
+++ b/apps/admin/src/features/products/README.md
@@ -0,0 +1,7 @@
+# feature: products
+
+Product list, editor, option builder and the variant matrix grid.
+
+Same rules as the storefront's feature folders: no cross-feature imports, and
+all data access goes through `@sport/api-client`. The admin has no database
+client of its own.
diff --git a/apps/admin/src/features/settings/README.md b/apps/admin/src/features/settings/README.md
new file mode 100644
index 0000000..4c314f6
--- /dev/null
+++ b/apps/admin/src/features/settings/README.md
@@ -0,0 +1,7 @@
+# feature: settings
+
+Users, roles and store settings.
+
+Same rules as the storefront's feature folders: no cross-feature imports, and
+all data access goes through `@sport/api-client`. The admin has no database
+client of its own.
diff --git a/apps/admin/src/lib/api.ts b/apps/admin/src/lib/api.ts
new file mode 100644
index 0000000..2d272ab
--- /dev/null
+++ b/apps/admin/src/lib/api.ts
@@ -0,0 +1,20 @@
+import { createApiClient } from '@sport/api-client';
+
+import { clientEnv, getServerEnv } from './env';
+
+/**
+ * The admin's only channel to data.
+ *
+ * There is no Prisma client in this application and there never will be. Every
+ * read and write crosses the REST boundary, which is what guarantees that RBAC,
+ * validation and audit logging apply uniformly — a second write path is a
+ * second place for authorization to be forgotten.
+ */
+export function getServerApi() {
+  return createApiClient({ baseUrl: getServerEnv().API_INTERNAL_URL });
+}
+
+export const browserApi = createApiClient({
+  baseUrl: clientEnv.NEXT_PUBLIC_API_URL,
+  getAccessToken: () => null, // wired to the auth store in the auth milestone
+});
diff --git a/apps/admin/src/lib/env.ts b/apps/admin/src/lib/env.ts
new file mode 100644
index 0000000..9daed27
--- /dev/null
+++ b/apps/admin/src/lib/env.ts
@@ -0,0 +1,17 @@
+import { z } from 'zod';
+
+const clientEnvSchema = z.object({
+  NEXT_PUBLIC_API_URL: z.url(),
+  NEXT_PUBLIC_APP_URL: z.url(),
+});
+
+export const clientEnv = clientEnvSchema.parse({
+  NEXT_PUBLIC_API_URL: process.env.NEXT_PUBLIC_API_URL,
+  NEXT_PUBLIC_APP_URL: process.env.NEXT_PUBLIC_APP_URL,
+});
+
+export function getServerEnv() {
+  return z
+    .object({ API_INTERNAL_URL: z.url() })
+    .parse({ API_INTERNAL_URL: process.env.API_INTERNAL_URL ?? clientEnv.NEXT_PUBLIC_API_URL });
+}
diff --git a/apps/admin/src/lib/navigation.ts b/apps/admin/src/lib/navigation.ts
new file mode 100644
index 0000000..9ee2bc8
--- /dev/null
+++ b/apps/admin/src/lib/navigation.ts
@@ -0,0 +1,57 @@
+import { PERMISSIONS, type Permission } from '@sport/types';
+
+/**
+ * The sidebar is derived from the same permission catalog the API guards use.
+ *
+ * A user who cannot read orders never sees an Orders link, so the UI has no
+ * dead ends. This is presentation only — hiding a link is not authorization.
+ * The API re-checks every request, because a hidden link is one devtools
+ * inspection away from being visible.
+ */
+export interface NavItem {
+  href: string;
+  label: string;
+  permission: Permission;
+}
+
+export interface NavSection {
+  title: string;
+  items: NavItem[];
+}
+
+export const NAVIGATION: NavSection[] = [
+  {
+    title: 'Catalog',
+    items: [
+      { href: '/products', label: 'Products', permission: PERMISSIONS.PRODUCT_READ },
+      { href: '/categories', label: 'Categories', permission: PERMISSIONS.CATEGORY_READ },
+      { href: '/collections', label: 'Collections', permission: PERMISSIONS.COLLECTION_READ },
+      { href: '/brands', label: 'Brands', permission: PERMISSIONS.BRAND_READ },
+      { href: '/inventory', label: 'Inventory', permission: PERMISSIONS.INVENTORY_READ },
+      { href: '/media', label: 'Media', permission: PERMISSIONS.MEDIA_READ },
+    ],
+  },
+  {
+    title: 'Sales',
+    items: [
+      { href: '/orders', label: 'Orders', permission: PERMISSIONS.ORDER_READ },
+      { href: '/customers', label: 'Customers', permission: PERMISSIONS.CUSTOMER_READ },
+    ],
+  },
+  {
+    title: 'Marketing',
+    items: [
+      { href: '/promotions', label: 'Promotions', permission: PERMISSIONS.PROMOTION_MANAGE },
+      { href: '/coupons', label: 'Coupons', permission: PERMISSIONS.COUPON_MANAGE },
+      { href: '/reviews', label: 'Reviews', permission: PERMISSIONS.REVIEW_MODERATE },
+      { href: '/cms', label: 'Content', permission: PERMISSIONS.CMS_READ },
+    ],
+  },
+  {
+    title: 'Settings',
+    items: [
+      { href: '/settings/users', label: 'Users', permission: PERMISSIONS.USER_READ },
+      { href: '/settings/roles', label: 'Roles', permission: PERMISSIONS.ROLE_READ },
+    ],
+  },
+];
diff --git a/apps/admin/src/styles/globals.css b/apps/admin/src/styles/globals.css
new file mode 100644
index 0000000..4dac84a
--- /dev/null
+++ b/apps/admin/src/styles/globals.css
@@ -0,0 +1,20 @@
+@import 'tailwindcss';
+@import '@sport/config/tailwind/theme.css';
+
+@source "../../../../packages/ui/src";
+
+:root {
+  --font-inter: 'Inter', ui-sans-serif, system-ui, -apple-system, 'Segoe UI', Roboto, sans-serif;
+  --font-display: var(--font-inter);
+}
+
+html,
+body {
+  height: 100%;
+}
+
+body {
+  background-color: var(--color-ink-50);
+  color: var(--color-ink-950);
+  font-family: var(--font-sans);
+}
diff --git a/apps/admin/tsconfig.json b/apps/admin/tsconfig.json
new file mode 100644
index 0000000..835d47a
--- /dev/null
+++ b/apps/admin/tsconfig.json
@@ -0,0 +1,18 @@
+{
+  "extends": "@sport/config/typescript/nextjs.json",
+  "compilerOptions": {
+    "baseUrl": ".",
+    "paths": {
+      "@/*": ["src/*"]
+    }
+  },
+  "include": [
+    "next-env.d.ts",
+    "src/**/*.ts",
+    "src/**/*.tsx",
+    ".next/types/**/*.ts",
+    "*.ts",
+    "*.mjs"
+  ],
+  "exclude": ["node_modules", ".next"]
+}
diff --git a/apps/api/.env.example b/apps/api/.env.example
new file mode 100644
index 0000000..e10e42c
--- /dev/null
+++ b/apps/api/.env.example
@@ -0,0 +1,47 @@
+# ---------------------------------------------------------------------------
+# apps/api — copy to .env and adjust. NEVER commit the real .env.
+# Values below match the services defined in the root docker-compose.yml.
+# ---------------------------------------------------------------------------
+
+NODE_ENV=development
+PORT=4000
+API_GLOBAL_PREFIX=api
+APP_VERSION=0.1.0
+
+# Comma-separated list of allowed browser origins.
+CORS_ORIGINS=http://localhost:3000,http://localhost:3001
+
+# --- PostgreSQL -------------------------------------------------------------
+DATABASE_URL=postgresql://sport:sport@localhost:5433/sport_store?schema=public
+
+# --- Redis ------------------------------------------------------------------
+REDIS_URL=redis://localhost:6380
+REDIS_KEY_PREFIX=sport:
+
+# --- Auth -------------------------------------------------------------------
+# Generate with: openssl rand -base64 48
+# Access and refresh secrets MUST be different values.
+JWT_ACCESS_SECRET=dev-only-access-secret-change-me-0000000000
+JWT_REFRESH_SECRET=dev-only-refresh-secret-change-me-000000000
+JWT_ACCESS_TTL=15m
+JWT_REFRESH_TTL=30d
+JWT_ISSUER=sport-store
+
+# --- Object storage (S3 compatible: Cloudflare R2 in prod, MinIO locally) ----
+STORAGE_ENDPOINT=http://localhost:9000
+STORAGE_REGION=auto
+STORAGE_BUCKET=sport-media
+STORAGE_ACCESS_KEY_ID=sportminio
+STORAGE_SECRET_ACCESS_KEY=sportminio
+# Required by MinIO, must be false for Cloudflare R2.
+STORAGE_FORCE_PATH_STYLE=true
+# Public base URL used to build media URLs (CDN domain in production).
+STORAGE_PUBLIC_URL=http://localhost:9000/sport-media
+
+# --- Rate limiting ----------------------------------------------------------
+RATE_LIMIT_TTL_SECONDS=60
+RATE_LIMIT_MAX=120
+
+# --- Observability ----------------------------------------------------------
+LOG_LEVEL=debug
+LOG_PRETTY=true
diff --git a/apps/api/eslint.config.mjs b/apps/api/eslint.config.mjs
new file mode 100644
index 0000000..37578a6
--- /dev/null
+++ b/apps/api/eslint.config.mjs
@@ -0,0 +1,3 @@
+import { nestConfig } from '@sport/eslint-config/nest';
+
+export default nestConfig;
diff --git a/apps/api/nest-cli.json b/apps/api/nest-cli.json
new file mode 100644
index 0000000..4d076e9
--- /dev/null
+++ b/apps/api/nest-cli.json
@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json.schemastore.org/nest-cli",
+  "collection": "@nestjs/schematics",
+  "sourceRoot": "src",
+  "compilerOptions": {
+    "deleteOutDir": true,
+    "tsConfigPath": "tsconfig.build.json",
+    "plugins": [
+      {
+        "name": "@nestjs/swagger",
+        "options": {
+          "introspectComments": true
+        }
+      }
+    ]
+  }
+}
diff --git a/apps/api/package.json b/apps/api/package.json
new file mode 100644
index 0000000..8045335
--- /dev/null
+++ b/apps/api/package.json
@@ -0,0 +1,90 @@
+{
+  "name": "@sport/api",
+  "version": "0.0.0",
+  "private": true,
+  "description": "NestJS modular-monolith backend. The only component that talks to PostgreSQL, Redis and object storage.",
+  "scripts": {
+    "dev": "nest start --watch",
+    "build": "prisma generate && nest build",
+    "start": "node dist/main.js",
+    "lint": "eslint src",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "jest --passWithNoTests",
+    "test:e2e": "jest --config test/jest-e2e.json --passWithNoTests",
+    "clean": "rm -rf dist .turbo *.tsbuildinfo",
+    "db:generate": "prisma generate",
+    "db:migrate": "prisma migrate dev",
+    "db:deploy": "prisma migrate deploy",
+    "db:studio": "prisma studio",
+    "db:seed": "tsx prisma/seed.ts",
+    "db:reset": "prisma migrate reset --force"
+  },
+  "prisma": {
+    "seed": "tsx prisma/seed.ts"
+  },
+  "dependencies": {
+    "@aws-sdk/client-s3": "^3.1107.0",
+    "@aws-sdk/s3-request-presigner": "^3.1107.0",
+    "@nestjs/common": "^11.1.29",
+    "@nestjs/config": "^4.0.4",
+    "@nestjs/core": "^11.1.29",
+    "@nestjs/jwt": "^11.0.2",
+    "@nestjs/platform-express": "^11.1.29",
+    "@nestjs/swagger": "^11.4.6",
+    "@nestjs/terminus": "^11.0.0",
+    "@nestjs/throttler": "^6.4.0",
+    "@prisma/client": "6.19.3",
+    "@sport/types": "workspace:*",
+    "@sport/validation": "workspace:*",
+    "compression": "^1.8.1",
+    "helmet": "^8.1.0",
+    "ioredis": "^5.11.1",
+    "nestjs-pino": "^4.6.1",
+    "pino": "^10.3.1",
+    "pino-http": "^11.0.0",
+    "reflect-metadata": "^0.2.2",
+    "rxjs": "^7.8.2",
+    "uuid": "^13.0.0",
+    "zod": "catalog:"
+  },
+  "devDependencies": {
+    "@nestjs/cli": "^11.0.10",
+    "@nestjs/schematics": "^11.1.0",
+    "@nestjs/testing": "^11.1.29",
+    "@sport/config": "workspace:*",
+    "@sport/eslint-config": "workspace:*",
+    "@types/compression": "^1.8.1",
+    "@types/express": "^5.0.3",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^22.19.0",
+    "@types/supertest": "^6.0.3",
+    "eslint": "catalog:",
+    "jest": "^30.2.0",
+    "pino-pretty": "^13.1.2",
+    "prisma": "6.19.3",
+    "supertest": "^7.1.4",
+    "ts-jest": "^29.4.6",
+    "tsx": "^4.20.6",
+    "typescript": "catalog:"
+  },
+  "jest": {
+    "moduleFileExtensions": [
+      "js",
+      "json",
+      "ts"
+    ],
+    "rootDir": "src",
+    "testRegex": ".*\\.spec\\.ts$",
+    "transform": {
+      "^.+\\.(t|j)s$": "ts-jest"
+    },
+    "collectCoverageFrom": [
+      "**/*.(t|j)s"
+    ],
+    "coverageDirectory": "../coverage",
+    "testEnvironment": "node",
+    "moduleNameMapper": {
+      "^@/(.*)$": "<rootDir>/$1"
+    }
+  }
+}
diff --git a/apps/api/prisma/migrations/20260811055829_init/migration.sql b/apps/api/prisma/migrations/20260811055829_init/migration.sql
new file mode 100644
index 0000000..05bab70
--- /dev/null
+++ b/apps/api/prisma/migrations/20260811055829_init/migration.sql
@@ -0,0 +1,636 @@
+-- CreateEnum
+CREATE TYPE "UserType" AS ENUM ('CUSTOMER', 'STAFF', 'ADMIN', 'SUPER_ADMIN');
+
+-- CreateEnum
+CREATE TYPE "UserStatus" AS ENUM ('ACTIVE', 'INVITED', 'SUSPENDED');
+
+-- CreateEnum
+CREATE TYPE "MediaKind" AS ENUM ('IMAGE', 'VIDEO', 'DOCUMENT');
+
+-- CreateEnum
+CREATE TYPE "CollectionType" AS ENUM ('MANUAL', 'AUTOMATED');
+
+-- CreateEnum
+CREATE TYPE "ProductStatus" AS ENUM ('DRAFT', 'ACTIVE', 'ARCHIVED');
+
+-- CreateEnum
+CREATE TYPE "VariantStatus" AS ENUM ('ACTIVE', 'ARCHIVED');
+
+-- CreateEnum
+CREATE TYPE "Currency" AS ENUM ('VND', 'USD');
+
+-- CreateEnum
+CREATE TYPE "GenderTarget" AS ENUM ('MEN', 'WOMEN', 'KIDS', 'UNISEX');
+
+-- CreateEnum
+CREATE TYPE "SportType" AS ENUM ('RUNNING', 'FOOTBALL', 'TRAINING', 'GYM', 'BADMINTON', 'LIFESTYLE');
+
+-- CreateEnum
+CREATE TYPE "StockMovementReason" AS ENUM ('PURCHASE_RECEIPT', 'SALE', 'RETURN', 'MANUAL_ADJUSTMENT', 'STOCK_TAKE', 'TRANSFER_IN', 'TRANSFER_OUT', 'DAMAGE');
+
+-- CreateTable
+CREATE TABLE "users" (
+    "id" UUID NOT NULL,
+    "email" VARCHAR(255) NOT NULL,
+    "password_hash" TEXT,
+    "type" "UserType" NOT NULL,
+    "status" "UserStatus" NOT NULL DEFAULT 'ACTIVE',
+    "first_name" VARCHAR(80),
+    "last_name" VARCHAR(80),
+    "phone" VARCHAR(20),
+    "avatar_id" UUID,
+    "email_verified_at" TIMESTAMPTZ(3),
+    "last_login_at" TIMESTAMPTZ(3),
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+    "deleted_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "users_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "roles" (
+    "id" UUID NOT NULL,
+    "key" VARCHAR(64) NOT NULL,
+    "name" VARCHAR(120) NOT NULL,
+    "description" TEXT,
+    "is_system" BOOLEAN NOT NULL DEFAULT false,
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "roles_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "permissions" (
+    "id" UUID NOT NULL,
+    "key" VARCHAR(64) NOT NULL,
+    "resource" VARCHAR(40) NOT NULL,
+    "action" VARCHAR(40) NOT NULL,
+    "description" TEXT,
+
+    CONSTRAINT "permissions_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "role_permissions" (
+    "role_id" UUID NOT NULL,
+    "permission_id" UUID NOT NULL,
+
+    CONSTRAINT "role_permissions_pkey" PRIMARY KEY ("role_id","permission_id")
+);
+
+-- CreateTable
+CREATE TABLE "user_roles" (
+    "user_id" UUID NOT NULL,
+    "role_id" UUID NOT NULL,
+    "assigned_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "user_roles_pkey" PRIMARY KEY ("user_id","role_id")
+);
+
+-- CreateTable
+CREATE TABLE "sessions" (
+    "id" UUID NOT NULL,
+    "user_id" UUID NOT NULL,
+    "refresh_token_hash" VARCHAR(64) NOT NULL,
+    "family_id" UUID NOT NULL,
+    "replaced_by_id" UUID,
+    "expires_at" TIMESTAMPTZ(3) NOT NULL,
+    "revoked_at" TIMESTAMPTZ(3),
+    "user_agent" TEXT,
+    "ip_address" VARCHAR(45),
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "sessions_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "audit_logs" (
+    "id" UUID NOT NULL,
+    "actor_user_id" UUID,
+    "action" VARCHAR(80) NOT NULL,
+    "resource_type" VARCHAR(60) NOT NULL,
+    "resource_id" TEXT,
+    "changes" JSONB,
+    "ip_address" VARCHAR(45),
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "audit_logs_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "customers" (
+    "id" UUID NOT NULL,
+    "user_id" UUID NOT NULL,
+    "accepts_marketing" BOOLEAN NOT NULL DEFAULT false,
+    "date_of_birth" DATE,
+    "note" TEXT,
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "customers_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "addresses" (
+    "id" UUID NOT NULL,
+    "customer_id" UUID NOT NULL,
+    "full_name" VARCHAR(160) NOT NULL,
+    "phone" VARCHAR(20) NOT NULL,
+    "line1" VARCHAR(255) NOT NULL,
+    "line2" VARCHAR(255),
+    "ward" VARCHAR(120),
+    "ward_code" VARCHAR(20),
+    "district" VARCHAR(120),
+    "district_code" VARCHAR(20),
+    "province" VARCHAR(120) NOT NULL,
+    "province_code" VARCHAR(20),
+    "country_code" CHAR(2) NOT NULL DEFAULT 'VN',
+    "postal_code" VARCHAR(20),
+    "is_default_shipping" BOOLEAN NOT NULL DEFAULT false,
+    "is_default_billing" BOOLEAN NOT NULL DEFAULT false,
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "addresses_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "media_assets" (
+    "id" UUID NOT NULL,
+    "kind" "MediaKind" NOT NULL DEFAULT 'IMAGE',
+    "storage_key" VARCHAR(512) NOT NULL,
+    "mime_type" VARCHAR(120) NOT NULL,
+    "size_bytes" INTEGER NOT NULL,
+    "width" INTEGER,
+    "height" INTEGER,
+    "blur_data_url" TEXT,
+    "alt_text" VARCHAR(255),
+    "metadata" JSONB,
+    "uploaded_by_user_id" UUID,
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "media_assets_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "brands" (
+    "id" UUID NOT NULL,
+    "name" VARCHAR(160) NOT NULL,
+    "slug" VARCHAR(180) NOT NULL,
+    "description" TEXT,
+    "logo_id" UUID,
+    "is_active" BOOLEAN NOT NULL DEFAULT true,
+    "meta_title" VARCHAR(255),
+    "meta_description" TEXT,
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "brands_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "categories" (
+    "id" UUID NOT NULL,
+    "parent_id" UUID,
+    "name" VARCHAR(160) NOT NULL,
+    "slug" VARCHAR(180) NOT NULL,
+    "path" VARCHAR(512) NOT NULL,
+    "depth" INTEGER NOT NULL DEFAULT 0,
+    "position" INTEGER NOT NULL DEFAULT 0,
+    "description" TEXT,
+    "image_id" UUID,
+    "is_active" BOOLEAN NOT NULL DEFAULT true,
+    "meta_title" VARCHAR(255),
+    "meta_description" TEXT,
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "categories_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "collections" (
+    "id" UUID NOT NULL,
+    "name" VARCHAR(160) NOT NULL,
+    "slug" VARCHAR(180) NOT NULL,
+    "type" "CollectionType" NOT NULL DEFAULT 'MANUAL',
+    "description" TEXT,
+    "banner_id" UUID,
+    "rules" JSONB,
+    "starts_at" TIMESTAMPTZ(3),
+    "ends_at" TIMESTAMPTZ(3),
+    "is_active" BOOLEAN NOT NULL DEFAULT true,
+    "position" INTEGER NOT NULL DEFAULT 0,
+    "meta_title" VARCHAR(255),
+    "meta_description" TEXT,
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "collections_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "product_collections" (
+    "product_id" UUID NOT NULL,
+    "collection_id" UUID NOT NULL,
+    "position" INTEGER NOT NULL DEFAULT 0,
+
+    CONSTRAINT "product_collections_pkey" PRIMARY KEY ("product_id","collection_id")
+);
+
+-- CreateTable
+CREATE TABLE "products" (
+    "id" UUID NOT NULL,
+    "name" VARCHAR(255) NOT NULL,
+    "slug" VARCHAR(280) NOT NULL,
+    "description" TEXT,
+    "short_description" VARCHAR(500),
+    "status" "ProductStatus" NOT NULL DEFAULT 'DRAFT',
+    "published_at" TIMESTAMPTZ(3),
+    "brand_id" UUID,
+    "primary_category_id" UUID,
+    "gender_targets" "GenderTarget"[],
+    "sport_types" "SportType"[],
+    "meta_title" VARCHAR(255),
+    "meta_description" TEXT,
+    "metadata" JSONB,
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+    "deleted_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "products_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "product_options" (
+    "id" UUID NOT NULL,
+    "product_id" UUID NOT NULL,
+    "name" VARCHAR(60) NOT NULL,
+    "key" VARCHAR(40) NOT NULL,
+    "position" INTEGER NOT NULL DEFAULT 0,
+
+    CONSTRAINT "product_options_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "product_option_values" (
+    "id" UUID NOT NULL,
+    "option_id" UUID NOT NULL,
+    "label" VARCHAR(80) NOT NULL,
+    "value" VARCHAR(80) NOT NULL,
+    "position" INTEGER NOT NULL DEFAULT 0,
+    "swatch_hex" VARCHAR(9),
+    "swatch_image_id" UUID,
+
+    CONSTRAINT "product_option_values_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "product_variants" (
+    "id" UUID NOT NULL,
+    "product_id" UUID NOT NULL,
+    "sku" VARCHAR(64) NOT NULL,
+    "barcode" VARCHAR(64),
+    "title" VARCHAR(255) NOT NULL,
+    "currency" "Currency" NOT NULL DEFAULT 'VND',
+    "price_amount" INTEGER NOT NULL,
+    "sale_price_amount" INTEGER,
+    "compare_at_amount" INTEGER,
+    "cost_amount" INTEGER,
+    "weight_grams" INTEGER,
+    "length_mm" INTEGER,
+    "width_mm" INTEGER,
+    "height_mm" INTEGER,
+    "status" "VariantStatus" NOT NULL DEFAULT 'ACTIVE',
+    "position" INTEGER NOT NULL DEFAULT 0,
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+    "deleted_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "product_variants_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "product_variant_option_values" (
+    "variant_id" UUID NOT NULL,
+    "option_id" UUID NOT NULL,
+    "option_value_id" UUID NOT NULL,
+
+    CONSTRAINT "product_variant_option_values_pkey" PRIMARY KEY ("variant_id","option_id")
+);
+
+-- CreateTable
+CREATE TABLE "product_images" (
+    "id" UUID NOT NULL,
+    "product_id" UUID NOT NULL,
+    "media_id" UUID NOT NULL,
+    "option_value_id" UUID,
+    "position" INTEGER NOT NULL DEFAULT 0,
+
+    CONSTRAINT "product_images_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "product_attributes" (
+    "id" UUID NOT NULL,
+    "product_id" UUID NOT NULL,
+    "key" VARCHAR(60) NOT NULL,
+    "label" VARCHAR(120) NOT NULL,
+    "value" VARCHAR(500) NOT NULL,
+    "group" VARCHAR(60),
+    "position" INTEGER NOT NULL DEFAULT 0,
+    "is_filterable" BOOLEAN NOT NULL DEFAULT false,
+
+    CONSTRAINT "product_attributes_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "inventory_locations" (
+    "id" UUID NOT NULL,
+    "name" VARCHAR(120) NOT NULL,
+    "code" VARCHAR(40) NOT NULL,
+    "is_default" BOOLEAN NOT NULL DEFAULT false,
+    "is_active" BOOLEAN NOT NULL DEFAULT true,
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "inventory_locations_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "stock_levels" (
+    "variant_id" UUID NOT NULL,
+    "location_id" UUID NOT NULL,
+    "on_hand" INTEGER NOT NULL DEFAULT 0,
+    "reserved" INTEGER NOT NULL DEFAULT 0,
+    "reorder_point" INTEGER,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "stock_levels_pkey" PRIMARY KEY ("variant_id","location_id")
+);
+
+-- CreateTable
+CREATE TABLE "stock_movements" (
+    "id" UUID NOT NULL,
+    "variant_id" UUID NOT NULL,
+    "location_id" UUID NOT NULL,
+    "quantity_delta" INTEGER NOT NULL,
+    "reason" "StockMovementReason" NOT NULL,
+    "reference_id" TEXT,
+    "note" TEXT,
+    "created_by_user_id" UUID,
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "stock_movements_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_email_key" ON "users"("email");
+
+-- CreateIndex
+CREATE INDEX "users_type_status_idx" ON "users"("type", "status");
+
+-- CreateIndex
+CREATE INDEX "users_created_at_idx" ON "users"("created_at");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "roles_key_key" ON "roles"("key");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "permissions_key_key" ON "permissions"("key");
+
+-- CreateIndex
+CREATE INDEX "permissions_resource_idx" ON "permissions"("resource");
+
+-- CreateIndex
+CREATE INDEX "role_permissions_permission_id_idx" ON "role_permissions"("permission_id");
+
+-- CreateIndex
+CREATE INDEX "user_roles_role_id_idx" ON "user_roles"("role_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "sessions_refresh_token_hash_key" ON "sessions"("refresh_token_hash");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "sessions_replaced_by_id_key" ON "sessions"("replaced_by_id");
+
+-- CreateIndex
+CREATE INDEX "sessions_user_id_revoked_at_idx" ON "sessions"("user_id", "revoked_at");
+
+-- CreateIndex
+CREATE INDEX "sessions_family_id_idx" ON "sessions"("family_id");
+
+-- CreateIndex
+CREATE INDEX "sessions_expires_at_idx" ON "sessions"("expires_at");
+
+-- CreateIndex
+CREATE INDEX "audit_logs_resource_type_resource_id_idx" ON "audit_logs"("resource_type", "resource_id");
+
+-- CreateIndex
+CREATE INDEX "audit_logs_actor_user_id_created_at_idx" ON "audit_logs"("actor_user_id", "created_at");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "customers_user_id_key" ON "customers"("user_id");
+
+-- CreateIndex
+CREATE INDEX "addresses_customer_id_idx" ON "addresses"("customer_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "media_assets_storage_key_key" ON "media_assets"("storage_key");
+
+-- CreateIndex
+CREATE INDEX "media_assets_kind_created_at_idx" ON "media_assets"("kind", "created_at");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "brands_slug_key" ON "brands"("slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "categories_path_key" ON "categories"("path");
+
+-- CreateIndex
+CREATE INDEX "categories_path_idx" ON "categories"("path");
+
+-- CreateIndex
+CREATE INDEX "categories_parent_id_position_idx" ON "categories"("parent_id", "position");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "categories_parent_id_slug_key" ON "categories"("parent_id", "slug");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "collections_slug_key" ON "collections"("slug");
+
+-- CreateIndex
+CREATE INDEX "collections_is_active_starts_at_ends_at_idx" ON "collections"("is_active", "starts_at", "ends_at");
+
+-- CreateIndex
+CREATE INDEX "product_collections_collection_id_position_idx" ON "product_collections"("collection_id", "position");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "products_slug_key" ON "products"("slug");
+
+-- CreateIndex
+CREATE INDEX "products_status_published_at_idx" ON "products"("status", "published_at");
+
+-- CreateIndex
+CREATE INDEX "products_brand_id_idx" ON "products"("brand_id");
+
+-- CreateIndex
+CREATE INDEX "products_primary_category_id_idx" ON "products"("primary_category_id");
+
+-- CreateIndex
+CREATE INDEX "products_gender_targets_idx" ON "products" USING GIN ("gender_targets");
+
+-- CreateIndex
+CREATE INDEX "products_sport_types_idx" ON "products" USING GIN ("sport_types");
+
+-- CreateIndex
+CREATE INDEX "product_options_product_id_position_idx" ON "product_options"("product_id", "position");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "product_options_product_id_key_key" ON "product_options"("product_id", "key");
+
+-- CreateIndex
+CREATE INDEX "product_option_values_option_id_position_idx" ON "product_option_values"("option_id", "position");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "product_option_values_option_id_value_key" ON "product_option_values"("option_id", "value");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "product_variants_sku_key" ON "product_variants"("sku");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "product_variants_barcode_key" ON "product_variants"("barcode");
+
+-- CreateIndex
+CREATE INDEX "product_variants_product_id_position_idx" ON "product_variants"("product_id", "position");
+
+-- CreateIndex
+CREATE INDEX "product_variants_status_idx" ON "product_variants"("status");
+
+-- CreateIndex
+CREATE INDEX "product_variant_option_values_option_value_id_idx" ON "product_variant_option_values"("option_value_id");
+
+-- CreateIndex
+CREATE INDEX "product_images_product_id_position_idx" ON "product_images"("product_id", "position");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "product_images_product_id_media_id_option_value_id_key" ON "product_images"("product_id", "media_id", "option_value_id");
+
+-- CreateIndex
+CREATE INDEX "product_attributes_key_value_idx" ON "product_attributes"("key", "value");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "product_attributes_product_id_key_key" ON "product_attributes"("product_id", "key");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "inventory_locations_code_key" ON "inventory_locations"("code");
+
+-- CreateIndex
+CREATE INDEX "stock_levels_location_id_idx" ON "stock_levels"("location_id");
+
+-- CreateIndex
+CREATE INDEX "stock_movements_variant_id_created_at_idx" ON "stock_movements"("variant_id", "created_at");
+
+-- CreateIndex
+CREATE INDEX "stock_movements_reference_id_idx" ON "stock_movements"("reference_id");
+
+-- AddForeignKey
+ALTER TABLE "users" ADD CONSTRAINT "users_avatar_id_fkey" FOREIGN KEY ("avatar_id") REFERENCES "media_assets"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "role_permissions" ADD CONSTRAINT "role_permissions_role_id_fkey" FOREIGN KEY ("role_id") REFERENCES "roles"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "role_permissions" ADD CONSTRAINT "role_permissions_permission_id_fkey" FOREIGN KEY ("permission_id") REFERENCES "permissions"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "user_roles" ADD CONSTRAINT "user_roles_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "user_roles" ADD CONSTRAINT "user_roles_role_id_fkey" FOREIGN KEY ("role_id") REFERENCES "roles"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "sessions" ADD CONSTRAINT "sessions_replaced_by_id_fkey" FOREIGN KEY ("replaced_by_id") REFERENCES "sessions"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "audit_logs" ADD CONSTRAINT "audit_logs_actor_user_id_fkey" FOREIGN KEY ("actor_user_id") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "customers" ADD CONSTRAINT "customers_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "addresses" ADD CONSTRAINT "addresses_customer_id_fkey" FOREIGN KEY ("customer_id") REFERENCES "customers"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "brands" ADD CONSTRAINT "brands_logo_id_fkey" FOREIGN KEY ("logo_id") REFERENCES "media_assets"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "categories" ADD CONSTRAINT "categories_parent_id_fkey" FOREIGN KEY ("parent_id") REFERENCES "categories"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "categories" ADD CONSTRAINT "categories_image_id_fkey" FOREIGN KEY ("image_id") REFERENCES "media_assets"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections" ADD CONSTRAINT "collections_banner_id_fkey" FOREIGN KEY ("banner_id") REFERENCES "media_assets"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_collections" ADD CONSTRAINT "product_collections_product_id_fkey" FOREIGN KEY ("product_id") REFERENCES "products"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_collections" ADD CONSTRAINT "product_collections_collection_id_fkey" FOREIGN KEY ("collection_id") REFERENCES "collections"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "products" ADD CONSTRAINT "products_brand_id_fkey" FOREIGN KEY ("brand_id") REFERENCES "brands"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "products" ADD CONSTRAINT "products_primary_category_id_fkey" FOREIGN KEY ("primary_category_id") REFERENCES "categories"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_options" ADD CONSTRAINT "product_options_product_id_fkey" FOREIGN KEY ("product_id") REFERENCES "products"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_option_values" ADD CONSTRAINT "product_option_values_option_id_fkey" FOREIGN KEY ("option_id") REFERENCES "product_options"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_option_values" ADD CONSTRAINT "product_option_values_swatch_image_id_fkey" FOREIGN KEY ("swatch_image_id") REFERENCES "media_assets"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_variants" ADD CONSTRAINT "product_variants_product_id_fkey" FOREIGN KEY ("product_id") REFERENCES "products"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_variant_option_values" ADD CONSTRAINT "product_variant_option_values_variant_id_fkey" FOREIGN KEY ("variant_id") REFERENCES "product_variants"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_variant_option_values" ADD CONSTRAINT "product_variant_option_values_option_id_fkey" FOREIGN KEY ("option_id") REFERENCES "product_options"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_variant_option_values" ADD CONSTRAINT "product_variant_option_values_option_value_id_fkey" FOREIGN KEY ("option_value_id") REFERENCES "product_option_values"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_images" ADD CONSTRAINT "product_images_product_id_fkey" FOREIGN KEY ("product_id") REFERENCES "products"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_images" ADD CONSTRAINT "product_images_media_id_fkey" FOREIGN KEY ("media_id") REFERENCES "media_assets"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_images" ADD CONSTRAINT "product_images_option_value_id_fkey" FOREIGN KEY ("option_value_id") REFERENCES "product_option_values"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "product_attributes" ADD CONSTRAINT "product_attributes_product_id_fkey" FOREIGN KEY ("product_id") REFERENCES "products"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "stock_levels" ADD CONSTRAINT "stock_levels_variant_id_fkey" FOREIGN KEY ("variant_id") REFERENCES "product_variants"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "stock_levels" ADD CONSTRAINT "stock_levels_location_id_fkey" FOREIGN KEY ("location_id") REFERENCES "inventory_locations"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "stock_movements" ADD CONSTRAINT "stock_movements_variant_id_fkey" FOREIGN KEY ("variant_id") REFERENCES "product_variants"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "stock_movements" ADD CONSTRAINT "stock_movements_location_id_fkey" FOREIGN KEY ("location_id") REFERENCES "inventory_locations"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
diff --git a/apps/api/prisma/migrations/migration_lock.toml b/apps/api/prisma/migrations/migration_lock.toml
new file mode 100644
index 0000000..044d57c
--- /dev/null
+++ b/apps/api/prisma/migrations/migration_lock.toml
@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "postgresql"
diff --git a/apps/api/prisma/schema.prisma b/apps/api/prisma/schema.prisma
new file mode 100644
index 0000000..4a2eb79
--- /dev/null
+++ b/apps/api/prisma/schema.prisma
@@ -0,0 +1,694 @@
+// ---------------------------------------------------------------------------
+// Sport Store — Prisma schema
+//
+// SCOPE OF THIS FILE (milestone 0)
+//   Identity + RBAC, catalog (Product / ProductVariant / options / images /
+//   attributes), taxonomy (brand / category / collection), media metadata and
+//   the inventory ledger.
+//
+//   Cart, checkout, order, payment, promotion and review tables are milestone 1.
+//   They are intentionally absent so the first migration stays reviewable.
+//
+// CONVENTIONS
+//   - Table names: snake_case plural (@@map). Prisma models: PascalCase singular.
+//   - Ids: UUID v7 — time-sortable, so they index like a sequence but leak no
+//     row counts and stay safe to expose in URLs.
+//   - Money: INTEGER in the currency's minor unit. Never Float, never Decimal
+//     round-trips through JS. VND has no minor unit, so 250000 means ₫250.000.
+//   - Timestamps: `timestamptz`. The database always stores UTC.
+//   - Soft delete only where history matters (products, variants); everywhere
+//     else a hard delete is correct and simpler.
+// ---------------------------------------------------------------------------
+
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "postgresql"
+  url      = env("DATABASE_URL")
+}
+
+// ===========================================================================
+// Identity & access control
+// ===========================================================================
+
+enum UserType {
+  CUSTOMER
+  STAFF
+  ADMIN
+  SUPER_ADMIN
+}
+
+enum UserStatus {
+  ACTIVE
+  INVITED
+  SUSPENDED
+}
+
+/// Every human in the system — shoppers and operators alike — is a User row.
+/// The `type` column decides which token audience the account may authenticate
+/// against; RBAC decides what it may then do.
+model User {
+  id String @id @default(uuid(7)) @db.Uuid
+  /// Always normalised to lowercase before write (see @sport/validation), so a
+  /// plain unique index is enough and no citext extension is required.
+  email        String  @unique @db.VarChar(255)
+  passwordHash String? @map("password_hash")
+  type         UserType
+  status       UserStatus @default(ACTIVE)
+
+  firstName String? @map("first_name") @db.VarChar(80)
+  lastName  String? @map("last_name") @db.VarChar(80)
+  phone     String? @db.VarChar(20)
+  avatarId  String? @map("avatar_id") @db.Uuid
+
+  emailVerifiedAt DateTime? @map("email_verified_at") @db.Timestamptz(3)
+  lastLoginAt     DateTime? @map("last_login_at") @db.Timestamptz(3)
+
+  createdAt DateTime  @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt DateTime  @updatedAt @map("updated_at") @db.Timestamptz(3)
+  deletedAt DateTime? @map("deleted_at") @db.Timestamptz(3)
+
+  avatar    MediaAsset?    @relation("UserAvatar", fields: [avatarId], references: [id], onDelete: SetNull)
+  roles     UserRole[]
+  sessions  Session[]
+  customer  Customer?
+  auditLogs AuditLog[]
+
+  @@index([type, status])
+  @@index([createdAt])
+  @@map("users")
+}
+
+/// Roles are DATA: a SUPER_ADMIN can create "Warehouse Supervisor" at runtime
+/// without a deploy. Only `isSystem` roles are protected from deletion.
+model Role {
+  id          String  @id @default(uuid(7)) @db.Uuid
+  key         String  @unique @db.VarChar(64)
+  name        String  @db.VarChar(120)
+  description String?
+  isSystem    Boolean @default(false) @map("is_system")
+
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt DateTime @updatedAt @map("updated_at") @db.Timestamptz(3)
+
+  permissions RolePermission[]
+  users       UserRole[]
+
+  @@map("roles")
+}
+
+/// Permissions are CODE: the catalog in @sport/types is the source of truth and
+/// the seed reconciles this table against it. Nothing creates permissions at
+/// runtime — that would let the database drift from the guards.
+model Permission {
+  id          String  @id @default(uuid(7)) @db.Uuid
+  key         String  @unique @db.VarChar(64)
+  resource    String  @db.VarChar(40)
+  action      String  @db.VarChar(40)
+  description String?
+
+  roles RolePermission[]
+
+  @@index([resource])
+  @@map("permissions")
+}
+
+model RolePermission {
+  roleId       String @map("role_id") @db.Uuid
+  permissionId String @map("permission_id") @db.Uuid
+
+  role       Role       @relation(fields: [roleId], references: [id], onDelete: Cascade)
+  permission Permission @relation(fields: [permissionId], references: [id], onDelete: Cascade)
+
+  @@id([roleId, permissionId])
+  @@index([permissionId])
+  @@map("role_permissions")
+}
+
+model UserRole {
+  userId String @map("user_id") @db.Uuid
+  roleId String @map("role_id") @db.Uuid
+
+  assignedAt DateTime @default(now()) @map("assigned_at") @db.Timestamptz(3)
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+  role Role @relation(fields: [roleId], references: [id], onDelete: Cascade)
+
+  @@id([userId, roleId])
+  @@index([roleId])
+  @@map("user_roles")
+}
+
+/// One row per refresh-token family (i.e. per signed-in device).
+///
+/// The token itself is never stored — only a SHA-256 hash. On refresh the row
+/// is rotated: `replacedById` points at the successor. Presenting a token whose
+/// row is already replaced means the token leaked, so the entire family is
+/// revoked. This is why the column exists at all.
+model Session {
+  id               String    @id @default(uuid(7)) @db.Uuid
+  userId           String    @map("user_id") @db.Uuid
+  refreshTokenHash String    @unique @map("refresh_token_hash") @db.VarChar(64)
+  familyId         String    @map("family_id") @db.Uuid
+  replacedById     String?   @unique @map("replaced_by_id") @db.Uuid
+  expiresAt        DateTime  @map("expires_at") @db.Timestamptz(3)
+  revokedAt        DateTime? @map("revoked_at") @db.Timestamptz(3)
+
+  userAgent String? @map("user_agent")
+  ipAddress String? @map("ip_address") @db.VarChar(45)
+
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+
+  user       User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+  replacedBy Session? @relation("SessionRotation", fields: [replacedById], references: [id], onDelete: SetNull)
+  replaces   Session? @relation("SessionRotation")
+
+  @@index([userId, revokedAt])
+  @@index([familyId])
+  @@index([expiresAt])
+  @@map("sessions")
+}
+
+model AuditLog {
+  id           String   @id @default(uuid(7)) @db.Uuid
+  actorUserId  String?  @map("actor_user_id") @db.Uuid
+  action       String   @db.VarChar(80)
+  resourceType String   @map("resource_type") @db.VarChar(60)
+  resourceId   String?  @map("resource_id")
+  /// Before/after snapshot. Append-only; never updated.
+  changes      Json?
+  ipAddress    String?  @map("ip_address") @db.VarChar(45)
+  createdAt    DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+
+  actor User? @relation(fields: [actorUserId], references: [id], onDelete: SetNull)
+
+  @@index([resourceType, resourceId])
+  @@index([actorUserId, createdAt])
+  @@map("audit_logs")
+}
+
+// ===========================================================================
+// Customers
+// ===========================================================================
+
+/// Shopper-specific profile, split from User so that back-office accounts carry
+/// none of it and customer data can later move behind a stricter access policy.
+model Customer {
+  id     String @id @default(uuid(7)) @db.Uuid
+  userId String @unique @map("user_id") @db.Uuid
+
+  acceptsMarketing Boolean   @default(false) @map("accepts_marketing")
+  dateOfBirth      DateTime? @map("date_of_birth") @db.Date
+  note             String?
+
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt DateTime @updatedAt @map("updated_at") @db.Timestamptz(3)
+
+  user      User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  addresses Address[]
+
+  @@map("customers")
+}
+
+model Address {
+  id         String @id @default(uuid(7)) @db.Uuid
+  customerId String @map("customer_id") @db.Uuid
+
+  fullName  String  @map("full_name") @db.VarChar(160)
+  phone     String  @db.VarChar(20)
+  line1     String  @db.VarChar(255)
+  line2     String? @db.VarChar(255)
+  /// Vietnamese administrative divisions. Codes are kept alongside names so a
+  /// later shipping-provider integration can map them without re-collecting.
+  ward      String? @db.VarChar(120)
+  wardCode  String? @map("ward_code") @db.VarChar(20)
+  district  String? @db.VarChar(120)
+  districtCode String? @map("district_code") @db.VarChar(20)
+  province  String  @db.VarChar(120)
+  provinceCode String? @map("province_code") @db.VarChar(20)
+  countryCode String @default("VN") @map("country_code") @db.Char(2)
+  postalCode  String? @map("postal_code") @db.VarChar(20)
+
+  isDefaultShipping Boolean @default(false) @map("is_default_shipping")
+  isDefaultBilling  Boolean @default(false) @map("is_default_billing")
+
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt DateTime @updatedAt @map("updated_at") @db.Timestamptz(3)
+
+  customer Customer @relation(fields: [customerId], references: [id], onDelete: Cascade)
+
+  @@index([customerId])
+  @@map("addresses")
+}
+
+// ===========================================================================
+// Media
+// ===========================================================================
+
+enum MediaKind {
+  IMAGE
+  VIDEO
+  DOCUMENT
+}
+
+/// Metadata only. The bytes live in R2/S3 under `storageKey`; PostgreSQL never
+/// stores binary. Public URLs are composed at read time from STORAGE_PUBLIC_URL
+/// + storageKey, so changing CDN or bucket is config, not a data migration.
+model MediaAsset {
+  id         String    @id @default(uuid(7)) @db.Uuid
+  kind       MediaKind @default(IMAGE)
+  storageKey String    @unique @map("storage_key") @db.VarChar(512)
+  mimeType   String    @map("mime_type") @db.VarChar(120)
+  sizeBytes  Int       @map("size_bytes")
+  width      Int?
+  height     Int?
+  /// Base64 LQIP, a few hundred bytes. Cheap enough to store inline.
+  blurDataUrl String?  @map("blur_data_url")
+  altText     String?  @map("alt_text") @db.VarChar(255)
+  /// Free-form: original filename, uploader, EXIF subset, …
+  metadata    Json?
+
+  uploadedByUserId String? @map("uploaded_by_user_id") @db.Uuid
+
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+
+  productImages  ProductImage[]
+  brandLogos     Brand[]        @relation("BrandLogo")
+  categoryImages Category[]     @relation("CategoryImage")
+  collectionBanners Collection[] @relation("CollectionBanner")
+  optionValueSwatches ProductOptionValue[] @relation("OptionValueSwatch")
+  userAvatars    User[]         @relation("UserAvatar")
+
+  @@index([kind, createdAt])
+  @@map("media_assets")
+}
+
+// ===========================================================================
+// Taxonomy
+// ===========================================================================
+
+model Brand {
+  id          String  @id @default(uuid(7)) @db.Uuid
+  name        String  @db.VarChar(160)
+  slug        String  @unique @db.VarChar(180)
+  description String?
+  logoId      String? @map("logo_id") @db.Uuid
+  isActive    Boolean @default(true) @map("is_active")
+
+  metaTitle       String? @map("meta_title") @db.VarChar(255)
+  metaDescription String? @map("meta_description")
+
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt DateTime @updatedAt @map("updated_at") @db.Timestamptz(3)
+
+  logo     MediaAsset? @relation("BrandLogo", fields: [logoId], references: [id], onDelete: SetNull)
+  products Product[]
+
+  @@map("brands")
+}
+
+/// Hierarchical merchandising tree (Men > Running > Shoes).
+///
+/// `path` is a materialised path ("men/running/shoes") so an entire subtree is
+/// one indexed `LIKE 'men/running%'` query instead of a recursive CTE per page
+/// view. `depth` lets navigation queries stop at the level they render.
+model Category {
+  id       String  @id @default(uuid(7)) @db.Uuid
+  parentId String? @map("parent_id") @db.Uuid
+
+  name        String  @db.VarChar(160)
+  slug        String  @db.VarChar(180)
+  path        String  @unique @db.VarChar(512)
+  depth       Int     @default(0)
+  position    Int     @default(0)
+  description String?
+  imageId     String? @map("image_id") @db.Uuid
+  isActive    Boolean @default(true) @map("is_active")
+
+  metaTitle       String? @map("meta_title") @db.VarChar(255)
+  metaDescription String? @map("meta_description")
+
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt DateTime @updatedAt @map("updated_at") @db.Timestamptz(3)
+
+  parent   Category?   @relation("CategoryTree", fields: [parentId], references: [id], onDelete: Restrict)
+  children Category[]  @relation("CategoryTree")
+  image    MediaAsset? @relation("CategoryImage", fields: [imageId], references: [id], onDelete: SetNull)
+  products Product[]
+
+  @@unique([parentId, slug])
+  @@index([path])
+  @@index([parentId, position])
+  @@map("categories")
+}
+
+enum CollectionType {
+  MANUAL
+  AUTOMATED
+}
+
+model Collection {
+  id          String         @id @default(uuid(7)) @db.Uuid
+  name        String         @db.VarChar(160)
+  slug        String         @unique @db.VarChar(180)
+  type        CollectionType @default(MANUAL)
+  description String?
+  bannerId    String?        @map("banner_id") @db.Uuid
+
+  /// Rule set for AUTOMATED collections, evaluated by the catalog module.
+  rules Json?
+
+  startsAt DateTime? @map("starts_at") @db.Timestamptz(3)
+  endsAt   DateTime? @map("ends_at") @db.Timestamptz(3)
+  isActive Boolean   @default(true) @map("is_active")
+  position Int       @default(0)
+
+  metaTitle       String? @map("meta_title") @db.VarChar(255)
+  metaDescription String? @map("meta_description")
+
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt DateTime @updatedAt @map("updated_at") @db.Timestamptz(3)
+
+  banner   MediaAsset?         @relation("CollectionBanner", fields: [bannerId], references: [id], onDelete: SetNull)
+  products ProductCollection[]
+
+  @@index([isActive, startsAt, endsAt])
+  @@map("collections")
+}
+
+model ProductCollection {
+  productId    String @map("product_id") @db.Uuid
+  collectionId String @map("collection_id") @db.Uuid
+  position     Int    @default(0)
+
+  product    Product    @relation(fields: [productId], references: [id], onDelete: Cascade)
+  collection Collection @relation(fields: [collectionId], references: [id], onDelete: Cascade)
+
+  @@id([productId, collectionId])
+  @@index([collectionId, position])
+  @@map("product_collections")
+}
+
+// ===========================================================================
+// Catalog: Product / ProductVariant
+// ===========================================================================
+
+enum ProductStatus {
+  DRAFT
+  ACTIVE
+  ARCHIVED
+}
+
+enum VariantStatus {
+  ACTIVE
+  ARCHIVED
+}
+
+enum Currency {
+  VND
+  USD
+}
+
+enum GenderTarget {
+  MEN
+  WOMEN
+  KIDS
+  UNISEX
+}
+
+enum SportType {
+  RUNNING
+  FOOTBALL
+  TRAINING
+  GYM
+  BADMINTON
+  LIFESTYLE
+}
+
+/// The marketing entity: it has a name, a URL and a page. It deliberately has
+/// NO sku, NO price and NO stock — those belong to ProductVariant, because in
+/// reality "Black / M" and "White / L" are different physical goods.
+model Product {
+  id               String  @id @default(uuid(7)) @db.Uuid
+  name             String  @db.VarChar(255)
+  slug             String  @unique @db.VarChar(280)
+  description      String?
+  shortDescription String? @map("short_description") @db.VarChar(500)
+
+  status      ProductStatus @default(DRAFT)
+  publishedAt DateTime?     @map("published_at") @db.Timestamptz(3)
+
+  brandId           String? @map("brand_id") @db.Uuid
+  primaryCategoryId String? @map("primary_category_id") @db.Uuid
+
+  /// Facets driving /men, /women and /sports/*. Arrays rather than join tables:
+  /// they are small, bounded, always fetched with the product and filtered with
+  /// a GIN index — a join table would buy nothing here.
+  genderTargets GenderTarget[] @map("gender_targets")
+  sportTypes    SportType[]    @map("sport_types")
+
+  metaTitle       String? @map("meta_title") @db.VarChar(255)
+  metaDescription String? @map("meta_description")
+  metadata        Json?
+
+  createdAt DateTime  @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt DateTime  @updatedAt @map("updated_at") @db.Timestamptz(3)
+  deletedAt DateTime? @map("deleted_at") @db.Timestamptz(3)
+
+  brand           Brand?              @relation(fields: [brandId], references: [id], onDelete: SetNull)
+  primaryCategory Category?           @relation(fields: [primaryCategoryId], references: [id], onDelete: SetNull)
+  options         ProductOption[]
+  variants        ProductVariant[]
+  images          ProductImage[]
+  attributes      ProductAttribute[]
+  collections     ProductCollection[]
+
+  @@index([status, publishedAt])
+  @@index([brandId])
+  @@index([primaryCategoryId])
+  @@index([genderTargets], type: Gin)
+  @@index([sportTypes], type: Gin)
+  @@map("products")
+}
+
+/// An axis of variation for one product: "Colour", "Size".
+model ProductOption {
+  id        String @id @default(uuid(7)) @db.Uuid
+  productId String @map("product_id") @db.Uuid
+
+  name     String @db.VarChar(60)
+  /// Stable machine key (`colour`, `size`) used by URLs and integrations.
+  key      String @db.VarChar(40)
+  position Int    @default(0)
+
+  product      Product                     @relation(fields: [productId], references: [id], onDelete: Cascade)
+  values       ProductOptionValue[]
+  variantLinks ProductVariantOptionValue[]
+
+  @@unique([productId, key])
+  @@index([productId, position])
+  @@map("product_options")
+}
+
+/// One allowed value on an axis: "Black", "M".
+model ProductOptionValue {
+  id       String @id @default(uuid(7)) @db.Uuid
+  optionId String @map("option_id") @db.Uuid
+
+  label    String @db.VarChar(80)
+  value    String @db.VarChar(80)
+  position Int    @default(0)
+
+  swatchHex     String? @map("swatch_hex") @db.VarChar(9)
+  swatchImageId String? @map("swatch_image_id") @db.Uuid
+
+  option       ProductOption             @relation(fields: [optionId], references: [id], onDelete: Cascade)
+  swatchImage  MediaAsset?               @relation("OptionValueSwatch", fields: [swatchImageId], references: [id], onDelete: SetNull)
+  variantLinks ProductVariantOptionValue[]
+  images       ProductImage[]
+
+  @@unique([optionId, value])
+  @@index([optionId, position])
+  @@map("product_option_values")
+}
+
+/// The purchasable unit. Everything downstream — cart lines, order lines, stock
+/// movements, marketplace listings — references THIS id, never a Product id.
+model ProductVariant {
+  id        String @id @default(uuid(7)) @db.Uuid
+  productId String @map("product_id") @db.Uuid
+
+  sku     String  @unique @db.VarChar(64)
+  barcode String? @unique @db.VarChar(64)
+  /// Denormalised "Black / M" for display and for order-line snapshots.
+  title   String  @db.VarChar(255)
+
+  currency         Currency @default(VND)
+  /// All amounts are integers in the currency's minor unit.
+  priceAmount      Int      @map("price_amount")
+  salePriceAmount  Int?     @map("sale_price_amount")
+  compareAtAmount  Int?     @map("compare_at_amount")
+  /// Landed cost — admin only, never serialised to the storefront.
+  costAmount       Int?     @map("cost_amount")
+
+  weightGrams Int? @map("weight_grams")
+  lengthMm    Int? @map("length_mm")
+  widthMm     Int? @map("width_mm")
+  heightMm    Int? @map("height_mm")
+
+  status   VariantStatus @default(ACTIVE)
+  position Int           @default(0)
+
+  createdAt DateTime  @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt DateTime  @updatedAt @map("updated_at") @db.Timestamptz(3)
+  deletedAt DateTime? @map("deleted_at") @db.Timestamptz(3)
+
+  product        Product                     @relation(fields: [productId], references: [id], onDelete: Cascade)
+  optionValues   ProductVariantOptionValue[]
+  stockLevels    StockLevel[]
+  stockMovements StockMovement[]
+
+  @@index([productId, position])
+  @@index([status])
+  @@map("product_variants")
+}
+
+/// Resolves a variant to exactly one value per product option.
+///
+/// The (variantId, optionId) primary key is what enforces "a variant cannot
+/// have two colours" at the database level rather than in application code.
+model ProductVariantOptionValue {
+  variantId     String @map("variant_id") @db.Uuid
+  optionId      String @map("option_id") @db.Uuid
+  optionValueId String @map("option_value_id") @db.Uuid
+
+  variant     ProductVariant     @relation(fields: [variantId], references: [id], onDelete: Cascade)
+  option      ProductOption      @relation(fields: [optionId], references: [id], onDelete: Cascade)
+  optionValue ProductOptionValue @relation(fields: [optionValueId], references: [id], onDelete: Restrict)
+
+  @@id([variantId, optionId])
+  @@index([optionValueId])
+  @@map("product_variant_option_values")
+}
+
+model ProductImage {
+  id        String @id @default(uuid(7)) @db.Uuid
+  productId String @map("product_id") @db.Uuid
+  mediaId   String @map("media_id") @db.Uuid
+
+  /// When set, the gallery swaps to these images once the shopper picks that
+  /// option value (in practice: the colour).
+  optionValueId String? @map("option_value_id") @db.Uuid
+  position      Int     @default(0)
+
+  product     Product             @relation(fields: [productId], references: [id], onDelete: Cascade)
+  media       MediaAsset          @relation(fields: [mediaId], references: [id], onDelete: Restrict)
+  optionValue ProductOptionValue? @relation(fields: [optionValueId], references: [id], onDelete: SetNull)
+
+  @@unique([productId, mediaId, optionValueId])
+  @@index([productId, position])
+  @@map("product_images")
+}
+
+/// Spec rows ("Material: 92% polyester"). Free-form on purpose: merchandisers
+/// add specs without a migration. Anything that must be *filtered* on graduates
+/// to a real column or a facet instead.
+model ProductAttribute {
+  id        String @id @default(uuid(7)) @db.Uuid
+  productId String @map("product_id") @db.Uuid
+
+  key          String  @db.VarChar(60)
+  label        String  @db.VarChar(120)
+  value        String  @db.VarChar(500)
+  group        String? @db.VarChar(60)
+  position     Int     @default(0)
+  isFilterable Boolean @default(false) @map("is_filterable")
+
+  product Product @relation(fields: [productId], references: [id], onDelete: Cascade)
+
+  @@unique([productId, key])
+  @@index([key, value])
+  @@map("product_attributes")
+}
+
+// ===========================================================================
+// Inventory
+// ===========================================================================
+
+/// Stock is per (variant, location) from day one. A single warehouse today is
+/// just one row here; adding a second store or a 3PL later needs no migration
+/// of historical data.
+model InventoryLocation {
+  id        String  @id @default(uuid(7)) @db.Uuid
+  name      String  @db.VarChar(120)
+  code      String  @unique @db.VarChar(40)
+  isDefault Boolean @default(false) @map("is_default")
+  isActive  Boolean @default(true) @map("is_active")
+
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt DateTime @updatedAt @map("updated_at") @db.Timestamptz(3)
+
+  stockLevels    StockLevel[]
+  stockMovements StockMovement[]
+
+  @@map("inventory_locations")
+}
+
+/// Current position. `available` is NOT stored — it is always onHand - reserved,
+/// computed at read time so the two numbers can never disagree.
+model StockLevel {
+  variantId  String @map("variant_id") @db.Uuid
+  locationId String @map("location_id") @db.Uuid
+
+  onHand       Int  @default(0) @map("on_hand")
+  /// Held by in-flight checkouts. Released on payment failure or expiry.
+  reserved     Int  @default(0)
+  reorderPoint Int? @map("reorder_point")
+
+  updatedAt DateTime @updatedAt @map("updated_at") @db.Timestamptz(3)
+
+  variant  ProductVariant    @relation(fields: [variantId], references: [id], onDelete: Cascade)
+  location InventoryLocation @relation(fields: [locationId], references: [id], onDelete: Restrict)
+
+  @@id([variantId, locationId])
+  @@index([locationId])
+  @@map("stock_levels")
+}
+
+enum StockMovementReason {
+  PURCHASE_RECEIPT
+  SALE
+  RETURN
+  MANUAL_ADJUSTMENT
+  STOCK_TAKE
+  TRANSFER_IN
+  TRANSFER_OUT
+  DAMAGE
+}
+
+/// Append-only ledger. StockLevel is a projection of these rows, which is what
+/// makes "why is this number wrong?" an answerable question — and what makes a
+/// future extraction of Inventory into its own service straightforward.
+model StockMovement {
+  id         String @id @default(uuid(7)) @db.Uuid
+  variantId  String @map("variant_id") @db.Uuid
+  locationId String @map("location_id") @db.Uuid
+
+  /// Signed: negative for outbound.
+  quantityDelta   Int                 @map("quantity_delta")
+  reason          StockMovementReason
+  referenceId     String?             @map("reference_id")
+  note            String?
+  createdByUserId String?             @map("created_by_user_id") @db.Uuid
+
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+
+  variant  ProductVariant    @relation(fields: [variantId], references: [id], onDelete: Restrict)
+  location InventoryLocation @relation(fields: [locationId], references: [id], onDelete: Restrict)
+
+  @@index([variantId, createdAt])
+  @@index([referenceId])
+  @@map("stock_movements")
+}
diff --git a/apps/api/prisma/seed.ts b/apps/api/prisma/seed.ts
new file mode 100644
index 0000000..adba2ed
--- /dev/null
+++ b/apps/api/prisma/seed.ts
@@ -0,0 +1,141 @@
+/**
+ * Idempotent seed. Safe to run on every environment, including production.
+ *
+ * It reconciles the *code-owned* parts of the schema — the permission catalog
+ * and the system roles — with the database. It deliberately does NOT create
+ * users: account provisioning belongs to the auth milestone, and baking a
+ * default admin password into a repository is how stores get compromised.
+ */
+import { ALL_PERMISSIONS, PERMISSIONS, SYSTEM_ROLES, type Permission } from '@sport/types';
+import { PrismaClient } from '@prisma/client';
+
+const prisma = new PrismaClient();
+
+/** Which permissions each system role starts with. Editable later at runtime. */
+const ROLE_DEFINITIONS: Record<string, { name: string; permissions: readonly Permission[] }> = {
+  [SYSTEM_ROLES.SUPER_ADMIN]: {
+    name: 'Super Admin',
+    permissions: ALL_PERMISSIONS,
+  },
+  [SYSTEM_ROLES.ADMIN]: {
+    name: 'Admin',
+    permissions: ALL_PERMISSIONS.filter(
+      (permission) =>
+        permission !== PERMISSIONS.ROLE_MANAGE && permission !== PERMISSIONS.USER_MANAGE,
+    ),
+  },
+  [SYSTEM_ROLES.CATALOG_MANAGER]: {
+    name: 'Catalog Manager',
+    permissions: [
+      PERMISSIONS.PRODUCT_READ,
+      PERMISSIONS.PRODUCT_CREATE,
+      PERMISSIONS.PRODUCT_UPDATE,
+      PERMISSIONS.PRODUCT_PUBLISH,
+      PERMISSIONS.CATEGORY_READ,
+      PERMISSIONS.CATEGORY_MANAGE,
+      PERMISSIONS.COLLECTION_READ,
+      PERMISSIONS.COLLECTION_MANAGE,
+      PERMISSIONS.BRAND_READ,
+      PERMISSIONS.BRAND_MANAGE,
+      PERMISSIONS.INVENTORY_READ,
+      PERMISSIONS.INVENTORY_UPDATE,
+      PERMISSIONS.MEDIA_READ,
+      PERMISSIONS.MEDIA_UPLOAD,
+    ],
+  },
+  [SYSTEM_ROLES.ORDER_MANAGER]: {
+    name: 'Order Manager',
+    permissions: [
+      PERMISSIONS.ORDER_READ,
+      PERMISSIONS.ORDER_UPDATE,
+      PERMISSIONS.ORDER_CANCEL,
+      PERMISSIONS.PAYMENT_READ,
+      PERMISSIONS.CUSTOMER_READ,
+      PERMISSIONS.INVENTORY_READ,
+      PERMISSIONS.PRODUCT_READ,
+    ],
+  },
+  [SYSTEM_ROLES.SUPPORT_AGENT]: {
+    name: 'Support Agent',
+    permissions: [
+      PERMISSIONS.ORDER_READ,
+      PERMISSIONS.CUSTOMER_READ,
+      PERMISSIONS.PRODUCT_READ,
+      PERMISSIONS.REVIEW_MODERATE,
+    ],
+  },
+  [SYSTEM_ROLES.CUSTOMER]: {
+    name: 'Customer',
+    permissions: [],
+  },
+};
+
+async function seedPermissions(): Promise<Map<string, string>> {
+  for (const key of ALL_PERMISSIONS) {
+    const [resource = key, action = 'unknown'] = key.split('.');
+    await prisma.permission.upsert({
+      where: { key },
+      update: { resource, action },
+      create: { key, resource, action },
+    });
+  }
+
+  // Anything in the table but no longer in the catalog is dead configuration.
+  const removed = await prisma.permission.deleteMany({
+    where: { key: { notIn: [...ALL_PERMISSIONS] } },
+  });
+  if (removed.count > 0) {
+    console.log(`Removed ${removed.count} stale permission(s).`);
+  }
+
+  const rows = await prisma.permission.findMany({ select: { id: true, key: true } });
+  return new Map(rows.map((row) => [row.key, row.id]));
+}
+
+async function seedRoles(permissionIds: Map<string, string>): Promise<void> {
+  for (const [key, definition] of Object.entries(ROLE_DEFINITIONS)) {
+    const role = await prisma.role.upsert({
+      where: { key },
+      update: { name: definition.name, isSystem: true },
+      create: { key, name: definition.name, isSystem: true },
+    });
+
+    // Replace the grant set wholesale — the code definition wins for system roles.
+    await prisma.rolePermission.deleteMany({ where: { roleId: role.id } });
+
+    const grants = definition.permissions
+      .map((permission) => permissionIds.get(permission))
+      .filter((id): id is string => Boolean(id))
+      .map((permissionId) => ({ roleId: role.id, permissionId }));
+
+    if (grants.length > 0) {
+      await prisma.rolePermission.createMany({ data: grants, skipDuplicates: true });
+    }
+  }
+}
+
+async function seedInventoryLocation(): Promise<void> {
+  await prisma.inventoryLocation.upsert({
+    where: { code: 'MAIN' },
+    update: {},
+    create: { code: 'MAIN', name: 'Main Warehouse', isDefault: true },
+  });
+}
+
+async function main(): Promise<void> {
+  const permissionIds = await seedPermissions();
+  await seedRoles(permissionIds);
+  await seedInventoryLocation();
+  console.log(
+    `Seed complete: ${permissionIds.size} permissions, ${Object.keys(ROLE_DEFINITIONS).length} roles.`,
+  );
+}
+
+main()
+  .catch((error: unknown) => {
+    console.error(error);
+    process.exitCode = 1;
+  })
+  .finally(() => {
+    void prisma.$disconnect();
+  });
diff --git a/apps/api/src/app.module.ts b/apps/api/src/app.module.ts
new file mode 100644
index 0000000..a939856
--- /dev/null
+++ b/apps/api/src/app.module.ts
@@ -0,0 +1,101 @@
+import { Module } from '@nestjs/common';
+import { APP_FILTER, APP_GUARD, APP_INTERCEPTOR } from '@nestjs/core';
+import { ThrottlerGuard, ThrottlerModule } from '@nestjs/throttler';
+
+import { AllExceptionsFilter } from './common/filters/all-exceptions.filter';
+import { ResponseEnvelopeInterceptor } from './common/interceptors/response-envelope.interceptor';
+import { APP_CONFIG, AppConfigModule } from './config/app-config.module';
+import type { AppConfig } from './config/configuration';
+import { EventsModule } from './infrastructure/events/events.module';
+import { LoggingModule } from './infrastructure/logging/logging.module';
+import { PrismaModule } from './infrastructure/prisma/prisma.module';
+import { RedisModule } from './infrastructure/redis/redis.module';
+import { StorageModule } from './infrastructure/storage/storage.module';
+import { AuthModule } from './modules/auth/auth.module';
+import { BrandsModule } from './modules/brands/brands.module';
+import { CartsModule } from './modules/carts/carts.module';
+import { CategoriesModule } from './modules/categories/categories.module';
+import { CheckoutModule } from './modules/checkout/checkout.module';
+import { CmsModule } from './modules/cms/cms.module';
+import { CollectionsModule } from './modules/collections/collections.module';
+import { CouponsModule } from './modules/coupons/coupons.module';
+import { CustomersModule } from './modules/customers/customers.module';
+import { HealthModule } from './modules/health/health.module';
+import { InventoryModule } from './modules/inventory/inventory.module';
+import { MediaModule } from './modules/media/media.module';
+import { OrdersModule } from './modules/orders/orders.module';
+import { PaymentsModule } from './modules/payments/payments.module';
+import { ProductVariantsModule } from './modules/product-variants/product-variants.module';
+import { ProductsModule } from './modules/products/products.module';
+import { PromotionsModule } from './modules/promotions/promotions.module';
+import { ReviewsModule } from './modules/reviews/reviews.module';
+import { SearchModule } from './modules/search/search.module';
+import { UsersModule } from './modules/users/users.module';
+import { WishlistModule } from './modules/wishlist/wishlist.module';
+
+/**
+ * The composition root of the modular monolith.
+ *
+ * Three tiers, and the direction of dependency is one-way:
+ *   config + infrastructure  →  cross-cutting concerns  →  feature modules
+ *
+ * Infrastructure modules are @Global because they are genuine cross-cutting
+ * capabilities. Feature modules never are — a feature that wants another
+ * feature must import it explicitly, so the dependency graph stays visible in
+ * this file rather than hidden in ambient scope.
+ */
+@Module({
+  imports: [
+    // --- Foundation -------------------------------------------------------
+    AppConfigModule,
+    LoggingModule,
+    PrismaModule,
+    RedisModule,
+    StorageModule,
+    EventsModule,
+
+    ThrottlerModule.forRootAsync({
+      inject: [APP_CONFIG],
+      useFactory: (config: AppConfig) => ({
+        throttlers: [{ ttl: config.rateLimit.ttlSeconds * 1000, limit: config.rateLimit.max }],
+      }),
+    }),
+
+    // --- Cross-cutting ----------------------------------------------------
+    AuthModule,
+    HealthModule,
+
+    // --- Identity ---------------------------------------------------------
+    UsersModule,
+    CustomersModule,
+
+    // --- Catalog ----------------------------------------------------------
+    BrandsModule,
+    CategoriesModule,
+    CollectionsModule,
+    ProductsModule,
+    ProductVariantsModule,
+    MediaModule,
+    SearchModule,
+
+    // --- Commerce ---------------------------------------------------------
+    InventoryModule,
+    CartsModule,
+    CheckoutModule,
+    OrdersModule,
+    PaymentsModule,
+
+    // --- Marketing & content ----------------------------------------------
+    PromotionsModule,
+    CouponsModule,
+    WishlistModule,
+    ReviewsModule,
+    CmsModule,
+  ],
+  providers: [
+    { provide: APP_GUARD, useClass: ThrottlerGuard },
+    { provide: APP_INTERCEPTOR, useClass: ResponseEnvelopeInterceptor },
+    { provide: APP_FILTER, useClass: AllExceptionsFilter },
+  ],
+})
+export class AppModule {}
diff --git a/apps/api/src/common/constants/api.ts b/apps/api/src/common/constants/api.ts
new file mode 100644
index 0000000..97112c6
--- /dev/null
+++ b/apps/api/src/common/constants/api.ts
@@ -0,0 +1,17 @@
+/** Header used to correlate a request across client, Nginx, API and logs. */
+export const REQUEST_ID_HEADER = 'x-request-id';
+
+/** Metadata keys read by the global guards and interceptors. */
+export const METADATA_KEYS = {
+  IS_PUBLIC: 'sport:is-public',
+  REQUIRED_PERMISSIONS: 'sport:required-permissions',
+  PERMISSION_MODE: 'sport:permission-mode',
+  TOKEN_AUDIENCE: 'sport:token-audience',
+  SKIP_ENVELOPE: 'sport:skip-envelope',
+} as const;
+
+export const API_VERSIONS = {
+  V1: '1',
+} as const;
+
+export const CURRENT_API_VERSION = API_VERSIONS.V1;
diff --git a/apps/api/src/common/decorators/current-actor.decorator.ts b/apps/api/src/common/decorators/current-actor.decorator.ts
new file mode 100644
index 0000000..8dea645
--- /dev/null
+++ b/apps/api/src/common/decorators/current-actor.decorator.ts
@@ -0,0 +1,25 @@
+import { createParamDecorator, type ExecutionContext } from '@nestjs/common';
+import type { Request } from 'express';
+
+import type { AuthenticatedActor } from '@sport/types';
+
+/**
+ * Injects the authenticated actor.
+ *
+ * Non-optional by design: if a controller asks for the actor, the route must be
+ * authenticated. Reaching this on a `@Public()` route is a programming error and
+ * should surface immediately rather than silently yielding `undefined`.
+ */
+export const CurrentActor = createParamDecorator(
+  (_data: unknown, context: ExecutionContext): AuthenticatedActor => {
+    const request = context.switchToHttp().getRequest<Request>();
+
+    if (!request.actor) {
+      throw new Error(
+        'CurrentActor used on a route without authentication. Remove @Public() or the decorator.',
+      );
+    }
+
+    return request.actor;
+  },
+);
diff --git a/apps/api/src/common/decorators/public.decorator.ts b/apps/api/src/common/decorators/public.decorator.ts
new file mode 100644
index 0000000..4ecd631
--- /dev/null
+++ b/apps/api/src/common/decorators/public.decorator.ts
@@ -0,0 +1,12 @@
+import { SetMetadata } from '@nestjs/common';
+
+import { METADATA_KEYS } from '../constants/api';
+
+/**
+ * Opt a route out of authentication.
+ *
+ * Authentication is ON by default (the access-token guard is registered
+ * globally). Forgetting a decorator therefore fails closed — an endpoint is
+ * never accidentally public.
+ */
+export const Public = () => SetMetadata(METADATA_KEYS.IS_PUBLIC, true);
diff --git a/apps/api/src/common/decorators/require-permissions.decorator.ts b/apps/api/src/common/decorators/require-permissions.decorator.ts
new file mode 100644
index 0000000..d0cbcec
--- /dev/null
+++ b/apps/api/src/common/decorators/require-permissions.decorator.ts
@@ -0,0 +1,37 @@
+import { SetMetadata, applyDecorators } from '@nestjs/common';
+
+import type { Permission, TokenAudience } from '@sport/types';
+
+import { METADATA_KEYS } from '../constants/api';
+
+/**
+ * The ONLY sanctioned way to authorize a route.
+ *
+ *     @RequirePermissions(PERMISSIONS.PRODUCT_UPDATE)
+ *     @Patch(':id')
+ *     update() {}
+ *
+ * There is no `if (user.role === 'ADMIN')` anywhere in this codebase. Roles are
+ * runtime data; permissions are the compile-time contract. That separation is
+ * what lets an operator invent a new role without a deploy, and what keeps
+ * authorization auditable — every rule is a decorator, greppable in one pass.
+ */
+export const RequirePermissions = (...permissions: Permission[]) =>
+  applyDecorators(
+    SetMetadata(METADATA_KEYS.REQUIRED_PERMISSIONS, permissions),
+    SetMetadata(METADATA_KEYS.PERMISSION_MODE, 'all'),
+  );
+
+/** Passes when the actor holds at least one of the listed permissions. */
+export const RequireAnyPermission = (...permissions: Permission[]) =>
+  applyDecorators(
+    SetMetadata(METADATA_KEYS.REQUIRED_PERMISSIONS, permissions),
+    SetMetadata(METADATA_KEYS.PERMISSION_MODE, 'any'),
+  );
+
+/**
+ * Restrict a route to one token audience. Admin controllers declare `admin`,
+ * so a stolen storefront token is rejected before permissions are even read.
+ */
+export const RequireAudience = (audience: TokenAudience) =>
+  SetMetadata(METADATA_KEYS.TOKEN_AUDIENCE, audience);
diff --git a/apps/api/src/common/errors/app.exception.ts b/apps/api/src/common/errors/app.exception.ts
new file mode 100644
index 0000000..edbc101
--- /dev/null
+++ b/apps/api/src/common/errors/app.exception.ts
@@ -0,0 +1,70 @@
+import { HttpException, HttpStatus } from '@nestjs/common';
+
+import { API_ERROR_CODES, type ApiErrorCode, type ApiFieldErrors } from '@sport/types';
+
+/**
+ * The only exception type application code should throw.
+ *
+ * It pairs a stable machine code with an HTTP status and a user-safe message,
+ * so the global filter never has to guess. Throwing raw `HttpException` or
+ * `Error` still works — the filter degrades gracefully — but loses the code
+ * that clients branch on.
+ */
+export class AppException extends HttpException {
+  readonly code: ApiErrorCode;
+  readonly fields?: ApiFieldErrors;
+
+  constructor(params: {
+    code: ApiErrorCode;
+    message: string;
+    status: HttpStatus;
+    fields?: ApiFieldErrors;
+    cause?: unknown;
+  }) {
+    super(params.message, params.status, { cause: params.cause });
+    this.code = params.code;
+    this.fields = params.fields;
+  }
+
+  static notFound(resource: string, code: ApiErrorCode = API_ERROR_CODES.NOT_FOUND): AppException {
+    return new AppException({
+      code,
+      message: `${resource} was not found.`,
+      status: HttpStatus.NOT_FOUND,
+    });
+  }
+
+  static badRequest(
+    message: string,
+    code: ApiErrorCode = API_ERROR_CODES.BAD_REQUEST,
+  ): AppException {
+    return new AppException({ code, message, status: HttpStatus.BAD_REQUEST });
+  }
+
+  static validation(fields: ApiFieldErrors, message = 'Some fields need attention.'): AppException {
+    return new AppException({
+      code: API_ERROR_CODES.VALIDATION_FAILED,
+      message,
+      status: HttpStatus.UNPROCESSABLE_ENTITY,
+      fields,
+    });
+  }
+
+  static unauthenticated(
+    message = 'You need to sign in to continue.',
+    code: ApiErrorCode = API_ERROR_CODES.UNAUTHENTICATED,
+  ): AppException {
+    return new AppException({ code, message, status: HttpStatus.UNAUTHORIZED });
+  }
+
+  static forbidden(
+    message = 'You do not have permission to do that.',
+    code: ApiErrorCode = API_ERROR_CODES.PERMISSION_DENIED,
+  ): AppException {
+    return new AppException({ code, message, status: HttpStatus.FORBIDDEN });
+  }
+
+  static conflict(message: string, code: ApiErrorCode = API_ERROR_CODES.CONFLICT): AppException {
+    return new AppException({ code, message, status: HttpStatus.CONFLICT });
+  }
+}
diff --git a/apps/api/src/common/filters/all-exceptions.filter.ts b/apps/api/src/common/filters/all-exceptions.filter.ts
new file mode 100644
index 0000000..0ec9825
--- /dev/null
+++ b/apps/api/src/common/filters/all-exceptions.filter.ts
@@ -0,0 +1,181 @@
+import {
+  type ArgumentsHost,
+  Catch,
+  HttpException,
+  HttpStatus,
+  Inject,
+  Logger,
+  type ExceptionFilter,
+} from '@nestjs/common';
+import { Prisma } from '@prisma/client';
+import type { Request, Response } from 'express';
+
+import { API_ERROR_CODES, type ApiErrorCode, type ApiErrorResponse } from '@sport/types';
+
+import { APP_CONFIG } from '@/config/app-config.module';
+import type { AppConfig } from '@/config/configuration';
+
+import { AppException } from '../errors/app.exception';
+
+/**
+ * The single exit point for every failure in the application.
+ *
+ * Guarantees:
+ *  1. The response body always matches ApiErrorResponse — including for
+ *     unexpected 500s, so clients never meet an unparseable payload.
+ *  2. Internal details (SQL, stack traces, Prisma metadata) never leak to the
+ *     client in production; they go to the log, correlated by request id.
+ *  3. 5xx logs at `error`, 4xx at `warn`. Client mistakes must not page anyone.
+ */
+@Catch()
+export class AllExceptionsFilter implements ExceptionFilter {
+  private readonly logger = new Logger(AllExceptionsFilter.name);
+  private readonly isProduction: boolean;
+
+  constructor(@Inject(APP_CONFIG) config: AppConfig) {
+    this.isProduction = config.app.isProduction;
+  }
+
+  catch(exception: unknown, host: ArgumentsHost): void {
+    const http = host.switchToHttp();
+    const request = http.getRequest<Request>();
+    const response = http.getResponse<Response>();
+
+    const { status, code, message, fields } = this.normalize(exception);
+
+    const body: ApiErrorResponse = {
+      success: false,
+      error: {
+        code,
+        message,
+        ...(fields ? { fields } : {}),
+        ...(!this.isProduction && exception instanceof Error && exception.stack
+          ? { stack: exception.stack }
+          : {}),
+      },
+      meta: {
+        requestId: request.requestId ?? 'unknown',
+        timestamp: new Date().toISOString(),
+      },
+    };
+
+    const logPayload = {
+      status,
+      code,
+      method: request.method,
+      path: request.originalUrl,
+      actorId: request.actor?.userId,
+    };
+
+    if (status >= HttpStatus.INTERNAL_SERVER_ERROR) {
+      this.logger.error(
+        `Unhandled request failure: ${JSON.stringify(logPayload)}`,
+        stackOf(exception),
+      );
+    } else {
+      this.logger.warn(`Request rejected: ${JSON.stringify(logPayload)}`);
+    }
+
+    response.status(status).json(body);
+  }
+
+  private normalize(exception: unknown): {
+    status: number;
+    code: ApiErrorCode;
+    message: string;
+    fields?: ApiErrorResponse['error']['fields'];
+  } {
+    if (exception instanceof AppException) {
+      return {
+        status: exception.getStatus(),
+        code: exception.code,
+        message: exception.message,
+        fields: exception.fields,
+      };
+    }
+
+    if (exception instanceof Prisma.PrismaClientKnownRequestError) {
+      return this.fromPrisma(exception);
+    }
+
+    if (exception instanceof HttpException) {
+      const status = exception.getStatus();
+      return {
+        status,
+        code: HTTP_STATUS_TO_CODE[status] ?? API_ERROR_CODES.INTERNAL_ERROR,
+        message: extractHttpMessage(exception),
+      };
+    }
+
+    return {
+      status: HttpStatus.INTERNAL_SERVER_ERROR,
+      code: API_ERROR_CODES.INTERNAL_ERROR,
+      // Deliberately generic: the real cause is in the log, keyed by request id.
+      message: 'Something went wrong on our side. Please try again.',
+    };
+  }
+
+  private fromPrisma(error: Prisma.PrismaClientKnownRequestError): {
+    status: number;
+    code: ApiErrorCode;
+    message: string;
+  } {
+    switch (error.code) {
+      case 'P2002':
+        return {
+          status: HttpStatus.CONFLICT,
+          code: API_ERROR_CODES.CONFLICT,
+          message: 'That value is already taken.',
+        };
+      case 'P2025':
+        return {
+          status: HttpStatus.NOT_FOUND,
+          code: API_ERROR_CODES.NOT_FOUND,
+          message: 'The requested resource was not found.',
+        };
+      case 'P2003':
+        return {
+          status: HttpStatus.CONFLICT,
+          code: API_ERROR_CODES.CONFLICT,
+          message: 'That action conflicts with related records.',
+        };
+      default:
+        return {
+          status: HttpStatus.INTERNAL_SERVER_ERROR,
+          code: API_ERROR_CODES.INTERNAL_ERROR,
+          message: 'Something went wrong on our side. Please try again.',
+        };
+    }
+  }
+}
+
+const HTTP_STATUS_TO_CODE: Record<number, ApiErrorCode> = {
+  [HttpStatus.BAD_REQUEST]: API_ERROR_CODES.BAD_REQUEST,
+  [HttpStatus.UNAUTHORIZED]: API_ERROR_CODES.UNAUTHENTICATED,
+  [HttpStatus.FORBIDDEN]: API_ERROR_CODES.FORBIDDEN,
+  [HttpStatus.NOT_FOUND]: API_ERROR_CODES.NOT_FOUND,
+  [HttpStatus.CONFLICT]: API_ERROR_CODES.CONFLICT,
+  [HttpStatus.UNPROCESSABLE_ENTITY]: API_ERROR_CODES.VALIDATION_FAILED,
+  [HttpStatus.TOO_MANY_REQUESTS]: API_ERROR_CODES.RATE_LIMITED,
+  [HttpStatus.SERVICE_UNAVAILABLE]: API_ERROR_CODES.SERVICE_UNAVAILABLE,
+};
+
+function extractHttpMessage(exception: HttpException): string {
+  const response = exception.getResponse();
+
+  if (typeof response === 'string') {
+    return response;
+  }
+
+  if (typeof response === 'object' && response !== null && 'message' in response) {
+    const { message } = response as { message: unknown };
+    if (typeof message === 'string') return message;
+    if (Array.isArray(message)) return message.join(', ');
+  }
+
+  return exception.message;
+}
+
+function stackOf(exception: unknown): string | undefined {
+  return exception instanceof Error ? exception.stack : undefined;
+}
diff --git a/apps/api/src/common/interceptors/response-envelope.interceptor.ts b/apps/api/src/common/interceptors/response-envelope.interceptor.ts
new file mode 100644
index 0000000..0ca430e
--- /dev/null
+++ b/apps/api/src/common/interceptors/response-envelope.interceptor.ts
@@ -0,0 +1,49 @@
+import {
+  type CallHandler,
+  type ExecutionContext,
+  Injectable,
+  type NestInterceptor,
+} from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import type { Request } from 'express';
+import { map, type Observable } from 'rxjs';
+
+import type { ApiSuccessResponse } from '@sport/types';
+
+import { METADATA_KEYS } from '../constants/api';
+
+/**
+ * Wraps every successful controller return value in the standard envelope.
+ *
+ * Controllers therefore return plain domain objects and never think about
+ * response shape. The matching failure path lives in AllExceptionsFilter, and
+ * between the two there is no way to emit a response that does not conform.
+ */
+@Injectable()
+export class ResponseEnvelopeInterceptor implements NestInterceptor {
+  constructor(private readonly reflector: Reflector) {}
+
+  intercept(context: ExecutionContext, next: CallHandler): Observable<unknown> {
+    const skip = this.reflector.getAllAndOverride<boolean>(METADATA_KEYS.SKIP_ENVELOPE, [
+      context.getHandler(),
+      context.getClass(),
+    ]);
+
+    if (skip) {
+      return next.handle();
+    }
+
+    const request = context.switchToHttp().getRequest<Request>();
+
+    return next.handle().pipe(
+      map((data): ApiSuccessResponse<unknown> => ({
+        success: true,
+        data: data ?? null,
+        meta: {
+          requestId: request.requestId ?? 'unknown',
+          timestamp: new Date().toISOString(),
+        },
+      })),
+    );
+  }
+}
diff --git a/apps/api/src/common/middleware/request-id.middleware.ts b/apps/api/src/common/middleware/request-id.middleware.ts
new file mode 100644
index 0000000..21fe7fd
--- /dev/null
+++ b/apps/api/src/common/middleware/request-id.middleware.ts
@@ -0,0 +1,37 @@
+import type { NextFunction, Request, Response } from 'express';
+import { v7 as uuidv7 } from 'uuid';
+
+import { REQUEST_ID_HEADER } from '../constants/api';
+
+/**
+ * Assigns a request id and echoes it back.
+ *
+ * Nginx forwards an inbound `x-request-id` when present, so a single id ties
+ * together the browser's network tab, the reverse proxy log, the API log lines
+ * and the error shown to the user. Support tickets become greppable.
+ *
+ * Registered with `app.use()` in main.ts rather than through MiddlewareConsumer.
+ * It needs no injected dependencies, and applying it at the Express level means
+ * it also covers requests that never match a route — so a 404 still carries a
+ * correlation id. It also sidesteps Nest rewriting a wildcard route path under
+ * path-to-regexp v8.
+ */
+export function requestIdMiddleware(
+  request: Request,
+  response: Response,
+  next: NextFunction,
+): void {
+  const inbound = request.header(REQUEST_ID_HEADER);
+  const requestId = isSafeRequestId(inbound) ? inbound : uuidv7();
+
+  request.requestId = requestId;
+  response.setHeader(REQUEST_ID_HEADER, requestId);
+  next();
+}
+
+/** Never trust a client-supplied id straight into logs. */
+function isSafeRequestId(value: string | undefined): value is string {
+  return (
+    typeof value === 'string' && value.length > 0 && value.length <= 128 && /^[\w.-]+$/.test(value)
+  );
+}
diff --git a/apps/api/src/common/pipes/zod-validation.pipe.ts b/apps/api/src/common/pipes/zod-validation.pipe.ts
new file mode 100644
index 0000000..703a021
--- /dev/null
+++ b/apps/api/src/common/pipes/zod-validation.pipe.ts
@@ -0,0 +1,48 @@
+import { Injectable, type PipeTransform } from '@nestjs/common';
+import type { ZodType } from 'zod';
+
+import type { ApiFieldErrors } from '@sport/types';
+
+import { AppException } from '../errors/app.exception';
+
+/**
+ * Validates a request payload with a Zod schema from @sport/validation and
+ * returns the *parsed* value (with coercions and defaults applied).
+ *
+ * Chosen over class-validator so that exactly one schema governs both the API
+ * and the frontend forms. See ADR-0006.
+ *
+ *     @Post()
+ *     create(@Body(new ZodValidationPipe(createProductSchema)) body: CreateProductInput) {}
+ */
+@Injectable()
+export class ZodValidationPipe<TSchema extends ZodType> implements PipeTransform {
+  constructor(private readonly schema: TSchema) {}
+
+  transform(value: unknown): unknown {
+    const result = this.schema.safeParse(value);
+
+    if (!result.success) {
+      throw AppException.validation(toFieldErrors(result.error.issues));
+    }
+
+    return result.data;
+  }
+}
+
+interface ZodIssueLike {
+  path: PropertyKey[];
+  message: string;
+}
+
+/** `items.0.quantity` → ["Must be at least 1"] — directly consumable by forms. */
+function toFieldErrors(issues: readonly ZodIssueLike[]): ApiFieldErrors {
+  const fields: Record<string, string[]> = {};
+
+  for (const issue of issues) {
+    const key = issue.path.map(String).join('.') || '_';
+    (fields[key] ??= []).push(issue.message);
+  }
+
+  return fields;
+}
diff --git a/apps/api/src/common/types/request-context.ts b/apps/api/src/common/types/request-context.ts
new file mode 100644
index 0000000..59e3881
--- /dev/null
+++ b/apps/api/src/common/types/request-context.ts
@@ -0,0 +1,14 @@
+import type { AuthenticatedActor } from '@sport/types';
+
+/**
+ * What guards attach to the Express request. Declared once, augmented into the
+ * Express types below, so `request.actor` is typed everywhere without casts.
+ */
+declare module 'express' {
+  interface Request {
+    requestId?: string;
+    actor?: AuthenticatedActor;
+  }
+}
+
+export {};
diff --git a/apps/api/src/config/app-config.module.ts b/apps/api/src/config/app-config.module.ts
new file mode 100644
index 0000000..8b8a813
--- /dev/null
+++ b/apps/api/src/config/app-config.module.ts
@@ -0,0 +1,40 @@
+import { Global, Module } from '@nestjs/common';
+import { ConfigModule, ConfigService } from '@nestjs/config';
+
+import { buildConfig, type AppConfig } from './configuration';
+import { validateEnv } from './env.schema';
+
+/** Injection token for the typed configuration object. */
+export const APP_CONFIG = Symbol('APP_CONFIG');
+
+/**
+ * Usage: `@Inject(APP_CONFIG) private readonly config: AppConfig`.
+ *
+ * Global because configuration is genuinely cross-cutting — one of the few
+ * places where a global module is the right call rather than a shortcut.
+ */
+@Global()
+@Module({
+  imports: [
+    ConfigModule.forRoot({
+      isGlobal: true,
+      cache: true,
+      // In containers the environment is injected by the orchestrator; .env is
+      // a local-development convenience only.
+      envFilePath: ['.env'],
+      validate: validateEnv,
+    }),
+  ],
+  providers: [
+    {
+      provide: APP_CONFIG,
+      // ConfigService is injected purely to order initialisation: it guarantees
+      // ConfigModule has already merged .env into process.env before we read it.
+      inject: [ConfigService],
+      useFactory: (_configService: ConfigService): AppConfig =>
+        buildConfig(validateEnv(process.env)),
+    },
+  ],
+  exports: [APP_CONFIG],
+})
+export class AppConfigModule {}
diff --git a/apps/api/src/config/configuration.ts b/apps/api/src/config/configuration.ts
new file mode 100644
index 0000000..4719113
--- /dev/null
+++ b/apps/api/src/config/configuration.ts
@@ -0,0 +1,81 @@
+import type { Env } from './env.schema';
+
+/**
+ * Environment variables are read exactly once, here, and turned into a typed,
+ * namespaced object. No `process.env` access anywhere else in the codebase —
+ * that is what keeps configuration testable and its shape discoverable.
+ */
+export interface AppConfig {
+  readonly app: {
+    readonly env: Env['NODE_ENV'];
+    readonly port: number;
+    readonly globalPrefix: string;
+    readonly version: string;
+    readonly corsOrigins: readonly string[];
+    readonly isProduction: boolean;
+  };
+  readonly database: {
+    readonly url: string;
+  };
+  readonly redis: {
+    readonly url: string;
+    readonly keyPrefix: string;
+  };
+  readonly auth: {
+    readonly accessSecret: string;
+    readonly refreshSecret: string;
+    readonly accessTtl: string;
+    readonly refreshTtl: string;
+    readonly issuer: string;
+  };
+  readonly storage: {
+    readonly endpoint: string;
+    readonly region: string;
+    readonly bucket: string;
+    readonly accessKeyId: string;
+    readonly secretAccessKey: string;
+    readonly forcePathStyle: boolean;
+    readonly publicUrl: string;
+  };
+  readonly rateLimit: {
+    readonly ttlSeconds: number;
+    readonly max: number;
+  };
+  readonly logging: {
+    readonly level: Env['LOG_LEVEL'];
+    readonly pretty: boolean;
+  };
+}
+
+export function buildConfig(env: Env): AppConfig {
+  return {
+    app: {
+      env: env.NODE_ENV,
+      port: env.PORT,
+      globalPrefix: env.API_GLOBAL_PREFIX,
+      version: env.APP_VERSION,
+      corsOrigins: env.CORS_ORIGINS,
+      isProduction: env.NODE_ENV === 'production',
+    },
+    database: { url: env.DATABASE_URL },
+    redis: { url: env.REDIS_URL, keyPrefix: env.REDIS_KEY_PREFIX },
+    auth: {
+      accessSecret: env.JWT_ACCESS_SECRET,
+      refreshSecret: env.JWT_REFRESH_SECRET,
+      accessTtl: env.JWT_ACCESS_TTL,
+      refreshTtl: env.JWT_REFRESH_TTL,
+      issuer: env.JWT_ISSUER,
+    },
+    storage: {
+      endpoint: env.STORAGE_ENDPOINT,
+      region: env.STORAGE_REGION,
+      bucket: env.STORAGE_BUCKET,
+      accessKeyId: env.STORAGE_ACCESS_KEY_ID,
+      secretAccessKey: env.STORAGE_SECRET_ACCESS_KEY,
+      forcePathStyle: env.STORAGE_FORCE_PATH_STYLE,
+      publicUrl: env.STORAGE_PUBLIC_URL.replace(/\/+$/, ''),
+    },
+    rateLimit: { ttlSeconds: env.RATE_LIMIT_TTL_SECONDS, max: env.RATE_LIMIT_MAX },
+    logging: { level: env.LOG_LEVEL, pretty: env.LOG_PRETTY },
+  };
+}
diff --git a/apps/api/src/config/env.schema.ts b/apps/api/src/config/env.schema.ts
new file mode 100644
index 0000000..eac8c41
--- /dev/null
+++ b/apps/api/src/config/env.schema.ts
@@ -0,0 +1,71 @@
+import { z } from 'zod';
+
+/**
+ * The process refuses to boot with an invalid environment.
+ *
+ * Failing at startup — loudly, with every problem listed at once — is the only
+ * acceptable behaviour. A missing JWT secret discovered at 2am by a customer
+ * hitting login is not.
+ */
+const durationSchema = z.string().regex(/^\d+(ms|s|m|h|d)$/, 'Use a duration like 15m, 24h or 30d');
+
+export const envSchema = z.object({
+  NODE_ENV: z.enum(['development', 'test', 'production']).default('development'),
+  PORT: z.coerce.number().int().min(1).max(65535).default(4000),
+  API_GLOBAL_PREFIX: z.string().default('api'),
+  APP_VERSION: z.string().default('0.0.0'),
+
+  CORS_ORIGINS: z
+    .string()
+    .default('')
+    .transform((value) =>
+      value
+        .split(',')
+        .map((origin) => origin.trim())
+        .filter(Boolean),
+    ),
+
+  DATABASE_URL: z.string().startsWith('postgresql://'),
+
+  REDIS_URL: z.string().startsWith('redis'),
+  REDIS_KEY_PREFIX: z.string().default('sport:'),
+
+  JWT_ACCESS_SECRET: z.string().min(32, 'Use at least 32 characters'),
+  JWT_REFRESH_SECRET: z.string().min(32, 'Use at least 32 characters'),
+  JWT_ACCESS_TTL: durationSchema.default('15m'),
+  JWT_REFRESH_TTL: durationSchema.default('30d'),
+  JWT_ISSUER: z.string().default('sport-store'),
+
+  STORAGE_ENDPOINT: z.url(),
+  STORAGE_REGION: z.string().default('auto'),
+  STORAGE_BUCKET: z.string().min(1),
+  STORAGE_ACCESS_KEY_ID: z.string().min(1),
+  STORAGE_SECRET_ACCESS_KEY: z.string().min(1),
+  STORAGE_FORCE_PATH_STYLE: z.stringbool().default(false),
+  STORAGE_PUBLIC_URL: z.url(),
+
+  RATE_LIMIT_TTL_SECONDS: z.coerce.number().int().positive().default(60),
+  RATE_LIMIT_MAX: z.coerce.number().int().positive().default(120),
+
+  LOG_LEVEL: z.enum(['fatal', 'error', 'warn', 'info', 'debug', 'trace']).default('info'),
+  LOG_PRETTY: z.stringbool().default(false),
+});
+
+export type Env = z.infer<typeof envSchema>;
+
+export function validateEnv(raw: Record<string, unknown>): Env {
+  const result = envSchema.safeParse(raw);
+
+  if (!result.success) {
+    const details = result.error.issues
+      .map((issue) => `  - ${issue.path.join('.') || '(root)'}: ${issue.message}`)
+      .join('\n');
+    throw new Error(`Invalid environment configuration:\n${details}`);
+  }
+
+  if (result.data.JWT_ACCESS_SECRET === result.data.JWT_REFRESH_SECRET) {
+    throw new Error('JWT_ACCESS_SECRET and JWT_REFRESH_SECRET must be different values.');
+  }
+
+  return result.data;
+}
diff --git a/apps/api/src/infrastructure/events/domain-event.ts b/apps/api/src/infrastructure/events/domain-event.ts
new file mode 100644
index 0000000..9c2f83f
--- /dev/null
+++ b/apps/api/src/infrastructure/events/domain-event.ts
@@ -0,0 +1,51 @@
+/**
+ * Domain events are the seam along which this modular monolith can later be cut
+ * into services.
+ *
+ * The rule: when module A needs to *react* to something in module B, it
+ * subscribes to an event. When it needs an *answer* from B right now, it calls
+ * B's public service. Direct writes into another module's tables are never
+ * acceptable.
+ *
+ * Concretely, `order.placed` is consumed today by inventory, notifications and
+ * analytics inside one process. Moving any of those consumers to its own
+ * service later means changing the transport (in-process → queue), not the
+ * producer and not the payload.
+ */
+export interface DomainEvent<TName extends string = string, TPayload = unknown> {
+  readonly name: TName;
+  readonly payload: TPayload;
+  /** Correlates the event with the HTTP request that caused it. */
+  readonly requestId?: string;
+  readonly occurredAt: Date;
+  /** Deduplication key for at-least-once delivery once a broker is introduced. */
+  readonly eventId: string;
+}
+
+/**
+ * The catalog of event names. Listed up front so the boundaries are visible
+ * before the code exists — none of these are emitted yet.
+ */
+export const DOMAIN_EVENTS = {
+  ORDER_PLACED: 'order.placed',
+  ORDER_PAID: 'order.paid',
+  ORDER_CANCELLED: 'order.cancelled',
+  ORDER_FULFILLED: 'order.fulfilled',
+
+  PAYMENT_SUCCEEDED: 'payment.succeeded',
+  PAYMENT_FAILED: 'payment.failed',
+
+  INVENTORY_RESERVED: 'inventory.reserved',
+  INVENTORY_RELEASED: 'inventory.released',
+  INVENTORY_LOW_STOCK: 'inventory.low_stock',
+
+  PRODUCT_PUBLISHED: 'product.published',
+  PRODUCT_UPDATED: 'product.updated',
+  PRODUCT_ARCHIVED: 'product.archived',
+
+  CUSTOMER_REGISTERED: 'customer.registered',
+  CART_ABANDONED: 'cart.abandoned',
+  REVIEW_SUBMITTED: 'review.submitted',
+} as const;
+
+export type DomainEventName = (typeof DOMAIN_EVENTS)[keyof typeof DOMAIN_EVENTS];
diff --git a/apps/api/src/infrastructure/events/event-bus.service.ts b/apps/api/src/infrastructure/events/event-bus.service.ts
new file mode 100644
index 0000000..7f9538f
--- /dev/null
+++ b/apps/api/src/infrastructure/events/event-bus.service.ts
@@ -0,0 +1,47 @@
+import { randomUUID } from 'node:crypto';
+
+import { Injectable, Logger, type OnModuleDestroy } from '@nestjs/common';
+import { Subject, filter, type Observable } from 'rxjs';
+
+import type { DomainEvent, DomainEventName } from './domain-event';
+
+/**
+ * In-process event bus, deliberately minimal.
+ *
+ * It is NOT a message queue: delivery is best-effort, in-memory and lost on
+ * crash. That is an accepted trade-off for milestone 0 — anything that must not
+ * be lost (payment reconciliation, order state) stays in the same database
+ * transaction as its cause.
+ *
+ * When durability is genuinely needed, this class becomes the adapter in front
+ * of an outbox table + BullMQ/Kafka. Publishers and subscribers do not change,
+ * which is the entire point of routing events through one seam.
+ */
+@Injectable()
+export class EventBusService implements OnModuleDestroy {
+  private readonly stream = new Subject<DomainEvent>();
+  private readonly logger = new Logger(EventBusService.name);
+
+  publish<TPayload>(name: DomainEventName, payload: TPayload, requestId?: string): void {
+    const event: DomainEvent<DomainEventName, TPayload> = {
+      name,
+      payload,
+      requestId,
+      eventId: randomUUID(),
+      occurredAt: new Date(),
+    };
+
+    this.logger.debug(`Domain event published: ${name} (${event.eventId})`);
+    this.stream.next(event);
+  }
+
+  on<TPayload>(name: DomainEventName): Observable<DomainEvent<DomainEventName, TPayload>> {
+    return this.stream.pipe(
+      filter((event): event is DomainEvent<DomainEventName, TPayload> => event.name === name),
+    );
+  }
+
+  onModuleDestroy(): void {
+    this.stream.complete();
+  }
+}
diff --git a/apps/api/src/infrastructure/events/events.module.ts b/apps/api/src/infrastructure/events/events.module.ts
new file mode 100644
index 0000000..e92b454
--- /dev/null
+++ b/apps/api/src/infrastructure/events/events.module.ts
@@ -0,0 +1,10 @@
+import { Global, Module } from '@nestjs/common';
+
+import { EventBusService } from './event-bus.service';
+
+@Global()
+@Module({
+  providers: [EventBusService],
+  exports: [EventBusService],
+})
+export class EventsModule {}
diff --git a/apps/api/src/infrastructure/logging/logging.module.ts b/apps/api/src/infrastructure/logging/logging.module.ts
new file mode 100644
index 0000000..16f4f14
--- /dev/null
+++ b/apps/api/src/infrastructure/logging/logging.module.ts
@@ -0,0 +1,66 @@
+import { randomUUID } from 'node:crypto';
+import type { IncomingMessage } from 'node:http';
+
+import { Global, Module } from '@nestjs/common';
+import type { Request } from 'express';
+import { LoggerModule } from 'nestjs-pino';
+
+import { REQUEST_ID_HEADER } from '@/common/constants/api';
+import { APP_CONFIG } from '@/config/app-config.module';
+import type { AppConfig } from '@/config/configuration';
+
+/**
+ * Structured JSON logging.
+ *
+ * Conventions:
+ *  - One line per request (method, path, status, duration, requestId, actorId).
+ *  - Domain logs carry the same `requestId`, so a trace is one grep.
+ *  - Secrets and PII are redacted at the logger, not at each call site —
+ *    relying on developers to remember is how tokens end up in log storage.
+ *  - Pretty output locally, raw JSON in every other environment.
+ *
+ * Application code logs through Nest's standard `Logger`, which `main.ts`
+ * redirects into pino. Nothing injects `PinoLogger` directly: it is
+ * transient-scoped, so injecting it would silently make the consumer transient
+ * too.
+ */
+@Global()
+@Module({
+  imports: [
+    LoggerModule.forRootAsync({
+      inject: [APP_CONFIG],
+      useFactory: (config: AppConfig) => ({
+        pinoHttp: {
+          level: config.logging.level,
+          transport: config.logging.pretty
+            ? { target: 'pino-pretty', options: { singleLine: true, translateTime: 'HH:MM:ss' } }
+            : undefined,
+          genReqId: (request: IncomingMessage) =>
+            (request.headers[REQUEST_ID_HEADER] as string | undefined) ?? randomUUID(),
+          customProps: (request: IncomingMessage) => ({
+            actorId: (request as Request).actor?.userId,
+          }),
+          redact: {
+            paths: [
+              'req.headers.authorization',
+              'req.headers.cookie',
+              'res.headers["set-cookie"]',
+              'req.body.password',
+              'req.body.currentPassword',
+              'req.body.newPassword',
+              'req.body.refreshToken',
+              'req.body.cardNumber',
+              'req.body.cvv',
+            ],
+            censor: '[redacted]',
+          },
+          // Health checks would otherwise dominate the log volume.
+          autoLogging: {
+            ignore: (request: IncomingMessage) => request.url?.includes('/health') ?? false,
+          },
+        },
+      }),
+    }),
+  ],
+})
+export class LoggingModule {}
diff --git a/apps/api/src/infrastructure/prisma/prisma.module.ts b/apps/api/src/infrastructure/prisma/prisma.module.ts
new file mode 100644
index 0000000..a42a0c2
--- /dev/null
+++ b/apps/api/src/infrastructure/prisma/prisma.module.ts
@@ -0,0 +1,15 @@
+import { Global, Module } from '@nestjs/common';
+
+import { PrismaService } from './prisma.service';
+
+/**
+ * Global so that feature modules do not each re-import it, but note what this
+ * does NOT grant: access to another module's tables. Ownership of a table
+ * belongs to exactly one module regardless of who can inject the client.
+ */
+@Global()
+@Module({
+  providers: [PrismaService],
+  exports: [PrismaService],
+})
+export class PrismaModule {}
diff --git a/apps/api/src/infrastructure/prisma/prisma.service.ts b/apps/api/src/infrastructure/prisma/prisma.service.ts
new file mode 100644
index 0000000..55aeb10
--- /dev/null
+++ b/apps/api/src/infrastructure/prisma/prisma.service.ts
@@ -0,0 +1,54 @@
+import { Injectable, Logger, type OnModuleDestroy, type OnModuleInit } from '@nestjs/common';
+import { PrismaClient } from '@prisma/client';
+
+/**
+ * The one and only PrismaClient instance.
+ *
+ * Rules enforced by review and by the ESLint boundary config:
+ *  - Only module-level repositories inject this service. Controllers never do.
+ *  - No module reads another module's tables. Cross-context reads go through
+ *    the owning module's public service — that is what makes a later service
+ *    extraction a refactor instead of a rewrite.
+ *
+ * Logging note: this uses Nest's own `Logger`, not nestjs-pino's `PinoLogger`.
+ * `PinoLogger` is transient-scoped, and injecting a transient provider makes
+ * the consumer transient too — which would quietly create a second
+ * PrismaClient, and a second connection pool, per consumer. `main.ts` routes
+ * Nest's logger through pino, so the output is identical either way.
+ */
+@Injectable()
+export class PrismaService extends PrismaClient implements OnModuleInit, OnModuleDestroy {
+  private readonly logger = new Logger(PrismaService.name);
+
+  constructor() {
+    super({
+      // Errors and warnings go to our structured logger; query logging is opt-in
+      // per environment because it is far too noisy to leave on by default.
+      log: [
+        { emit: 'event', level: 'error' },
+        { emit: 'event', level: 'warn' },
+      ],
+    });
+  }
+
+  async onModuleInit(): Promise<void> {
+    this.$on('error' as never, (event: { message: string }) => {
+      this.logger.error(event.message);
+    });
+    this.$on('warn' as never, (event: { message: string }) => {
+      this.logger.warn(event.message);
+    });
+
+    await this.$connect();
+    this.logger.log('Prisma connected');
+  }
+
+  async onModuleDestroy(): Promise<void> {
+    await this.$disconnect();
+  }
+
+  /** Round-trip check used by the health endpoint. */
+  async ping(): Promise<void> {
+    await this.$queryRaw`SELECT 1`;
+  }
+}
diff --git a/apps/api/src/infrastructure/redis/cache-keys.ts b/apps/api/src/infrastructure/redis/cache-keys.ts
new file mode 100644
index 0000000..a9c2480
--- /dev/null
+++ b/apps/api/src/infrastructure/redis/cache-keys.ts
@@ -0,0 +1,49 @@
+/**
+ * Every Redis key in the system is built here.
+ *
+ * Why centralise: keys are a schema. Scattered string templates produce
+ * collisions, orphaned data nobody dares delete, and invalidation bugs that
+ * only appear under load. One file means one place to audit TTLs and one place
+ * to bump a version prefix when a payload shape changes.
+ *
+ * Namespace: `<prefix><domain>:<entity>:<discriminator>`.
+ */
+export const CACHE_KEYS = {
+  // --- Catalog read cache (invalidated on write, TTL as a safety net) -------
+  productBySlug: (slug: string) => `catalog:product:slug:${slug}`,
+  productListing: (fingerprint: string) => `catalog:listing:${fingerprint}`,
+  categoryTree: () => 'catalog:category:tree',
+  navigationMenu: () => 'catalog:navigation',
+
+  // --- Guest cart (authoritative until checkout, then persisted) -----------
+  guestCart: (cartToken: string) => `cart:guest:${cartToken}`,
+  customerCart: (customerId: string) => `cart:customer:${customerId}`,
+
+  // --- Short-lived security artefacts --------------------------------------
+  otp: (channel: string, target: string) => `otp:${channel}:${target}`,
+  otpAttempts: (channel: string, target: string) => `otp:attempts:${channel}:${target}`,
+  passwordResetToken: (tokenHash: string) => `auth:pwd-reset:${tokenHash}`,
+  revokedSession: (sessionId: string) => `auth:revoked:${sessionId}`,
+
+  // --- Rate limiting --------------------------------------------------------
+  rateLimit: (bucket: string, identifier: string) => `ratelimit:${bucket}:${identifier}`,
+
+  // --- Inventory reservations ----------------------------------------------
+  stockReservation: (checkoutId: string) => `inventory:reservation:${checkoutId}`,
+
+  // --- Idempotency (payments, webhooks) ------------------------------------
+  idempotency: (scope: string, key: string) => `idempotency:${scope}:${key}`,
+} as const;
+
+/** TTLs in seconds. Keeping them next to the keys keeps the two in sync. */
+export const CACHE_TTL = {
+  productDetail: 300,
+  productListing: 60,
+  categoryTree: 900,
+  navigation: 900,
+  guestCart: 60 * 60 * 24 * 30,
+  otp: 300,
+  passwordReset: 900,
+  stockReservation: 900,
+  idempotency: 60 * 60 * 24,
+} as const;
diff --git a/apps/api/src/infrastructure/redis/redis.module.ts b/apps/api/src/infrastructure/redis/redis.module.ts
new file mode 100644
index 0000000..d23ce09
--- /dev/null
+++ b/apps/api/src/infrastructure/redis/redis.module.ts
@@ -0,0 +1,10 @@
+import { Global, Module } from '@nestjs/common';
+
+import { RedisService } from './redis.service';
+
+@Global()
+@Module({
+  providers: [RedisService],
+  exports: [RedisService],
+})
+export class RedisModule {}
diff --git a/apps/api/src/infrastructure/redis/redis.service.ts b/apps/api/src/infrastructure/redis/redis.service.ts
new file mode 100644
index 0000000..b635b89
--- /dev/null
+++ b/apps/api/src/infrastructure/redis/redis.service.ts
@@ -0,0 +1,112 @@
+import { Inject, Injectable, Logger, type OnModuleDestroy } from '@nestjs/common';
+import Redis from 'ioredis';
+
+import { APP_CONFIG } from '@/config/app-config.module';
+import type { AppConfig } from '@/config/configuration';
+
+/**
+ * Thin, typed wrapper over ioredis.
+ *
+ * Redis here is a *cache and a short-lived store*, never a system of record.
+ * If Redis is wiped, the store must keep working — slower, but correct. That
+ * constraint is why `getOrSet` swallows read failures instead of throwing:
+ * a cache outage degrades latency, not availability.
+ */
+@Injectable()
+export class RedisService implements OnModuleDestroy {
+  private readonly client: Redis;
+  private readonly logger = new Logger(RedisService.name);
+
+  constructor(@Inject(APP_CONFIG) config: AppConfig) {
+    this.client = new Redis(config.redis.url, {
+      keyPrefix: config.redis.keyPrefix,
+      maxRetriesPerRequest: 2,
+      enableReadyCheck: true,
+      lazyConnect: false,
+    });
+
+    this.client.on('error', (error: Error) => {
+      this.logger.error('Redis connection error', error.stack);
+    });
+  }
+
+  /** Escape hatch for pipelines, Lua scripts and pub/sub. */
+  get raw(): Redis {
+    return this.client;
+  }
+
+  async get<T>(key: string): Promise<T | null> {
+    const raw = await this.client.get(key);
+    if (raw === null) return null;
+
+    try {
+      return JSON.parse(raw) as T;
+    } catch {
+      // A poisoned entry must not break the request; drop it and treat as miss.
+      await this.client.del(key);
+      return null;
+    }
+  }
+
+  async set(key: string, value: unknown, ttlSeconds?: number): Promise<void> {
+    const payload = JSON.stringify(value);
+    if (ttlSeconds === undefined) {
+      await this.client.set(key, payload);
+    } else {
+      await this.client.set(key, payload, 'EX', ttlSeconds);
+    }
+  }
+
+  async delete(...keys: string[]): Promise<void> {
+    if (keys.length > 0) {
+      await this.client.del(...keys);
+    }
+  }
+
+  /**
+   * Cache-aside. On any Redis failure the factory still runs, so a cache
+   * outage never becomes a site outage.
+   */
+  async getOrSet<T>(key: string, ttlSeconds: number, factory: () => Promise<T>): Promise<T> {
+    try {
+      const cached = await this.get<T>(key);
+      if (cached !== null) return cached;
+    } catch (error) {
+      this.logger.warn(
+        `Cache read failed for ${key}, falling through to source: ${messageOf(error)}`,
+      );
+    }
+
+    const value = await factory();
+
+    try {
+      await this.set(key, value, ttlSeconds);
+    } catch (error) {
+      this.logger.warn(`Cache write failed for ${key}: ${messageOf(error)}`);
+    }
+
+    return value;
+  }
+
+  /**
+   * Atomic fixed-window counter. Returns the count after increment so callers
+   * can decide to reject.
+   */
+  async increment(key: string, ttlSeconds: number): Promise<number> {
+    const results = await this.client.multi().incr(key).expire(key, ttlSeconds, 'NX').exec();
+    const count = results?.[0]?.[1];
+    return typeof count === 'number' ? count : 0;
+  }
+
+  async ping(): Promise<void> {
+    await this.client.ping();
+  }
+
+  async onModuleDestroy(): Promise<void> {
+    await this.client.quit();
+  }
+}
+
+function messageOf(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
diff --git a/apps/api/src/infrastructure/storage/s3-storage.service.ts b/apps/api/src/infrastructure/storage/s3-storage.service.ts
new file mode 100644
index 0000000..b97b210
--- /dev/null
+++ b/apps/api/src/infrastructure/storage/s3-storage.service.ts
@@ -0,0 +1,123 @@
+import { randomUUID } from 'node:crypto';
+import { extname } from 'node:path';
+
+import {
+  DeleteObjectCommand,
+  GetObjectCommand,
+  PutObjectCommand,
+  S3Client,
+} from '@aws-sdk/client-s3';
+import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
+import { Inject, Injectable } from '@nestjs/common';
+
+import { API_ERROR_CODES } from '@sport/types';
+
+import { AppException } from '@/common/errors/app.exception';
+import { APP_CONFIG } from '@/config/app-config.module';
+import type { AppConfig } from '@/config/configuration';
+
+import { StorageService, type PresignUploadParams, type PresignedUpload } from './storage.service';
+
+const UPLOAD_URL_TTL_SECONDS = 300;
+const DOWNLOAD_URL_TTL_SECONDS = 900;
+
+/** Allow-list, not a block-list: anything unlisted is rejected. */
+const ALLOWED_MIME_TYPES = new Set([
+  'image/jpeg',
+  'image/png',
+  'image/webp',
+  'image/avif',
+  'image/svg+xml',
+  'video/mp4',
+  'video/webm',
+  'application/pdf',
+]);
+
+const DEFAULT_MAX_SIZE_BYTES = 20 * 1024 * 1024;
+
+@Injectable()
+export class S3StorageService extends StorageService {
+  private readonly client: S3Client;
+
+  constructor(@Inject(APP_CONFIG) private readonly config: AppConfig) {
+    super();
+    this.client = new S3Client({
+      endpoint: config.storage.endpoint,
+      region: config.storage.region,
+      // MinIO needs path-style addressing; Cloudflare R2 must not use it.
+      forcePathStyle: config.storage.forcePathStyle,
+      credentials: {
+        accessKeyId: config.storage.accessKeyId,
+        secretAccessKey: config.storage.secretAccessKey,
+      },
+    });
+  }
+
+  async presignUpload(params: PresignUploadParams): Promise<PresignedUpload> {
+    if (!ALLOWED_MIME_TYPES.has(params.mimeType)) {
+      throw new AppException({
+        code: API_ERROR_CODES.UNSUPPORTED_MEDIA_TYPE,
+        message: `Files of type ${params.mimeType} are not accepted.`,
+        status: 415,
+      });
+    }
+
+    const maxSize = params.maxSizeBytes ?? DEFAULT_MAX_SIZE_BYTES;
+    const storageKey = this.buildKey(params.prefix, params.filename);
+
+    const uploadUrl = await getSignedUrl(
+      this.client,
+      new PutObjectCommand({
+        Bucket: this.config.storage.bucket,
+        Key: storageKey,
+        ContentType: params.mimeType,
+        ContentLength: maxSize,
+      }),
+      { expiresIn: UPLOAD_URL_TTL_SECONDS },
+    );
+
+    return {
+      uploadUrl,
+      storageKey,
+      publicUrl: this.publicUrl(storageKey),
+      expiresInSeconds: UPLOAD_URL_TTL_SECONDS,
+    };
+  }
+
+  async delete(storageKey: string): Promise<void> {
+    await this.client.send(
+      new DeleteObjectCommand({ Bucket: this.config.storage.bucket, Key: storageKey }),
+    );
+  }
+
+  async presignDownload(
+    storageKey: string,
+    expiresInSeconds = DOWNLOAD_URL_TTL_SECONDS,
+  ): Promise<string> {
+    return getSignedUrl(
+      this.client,
+      new GetObjectCommand({ Bucket: this.config.storage.bucket, Key: storageKey }),
+      { expiresIn: expiresInSeconds },
+    );
+  }
+
+  publicUrl(storageKey: string): string {
+    return `${this.config.storage.publicUrl}/${storageKey}`;
+  }
+
+  /**
+   * Date-partitioned, collision-proof, and it never echoes the user's filename
+   * back into a URL — that is a path-traversal and an information-leak vector.
+   */
+  private buildKey(prefix: string, filename: string): string {
+    const now = new Date();
+    const year = now.getUTCFullYear();
+    const month = String(now.getUTCMonth() + 1).padStart(2, '0');
+    const extension = extname(filename)
+      .toLowerCase()
+      .replace(/[^.a-z0-9]/g, '');
+    const safePrefix = prefix.replace(/[^a-z0-9/-]/g, '');
+
+    return `${safePrefix}/${year}/${month}/${randomUUID()}${extension}`;
+  }
+}
diff --git a/apps/api/src/infrastructure/storage/storage.module.ts b/apps/api/src/infrastructure/storage/storage.module.ts
new file mode 100644
index 0000000..df9263b
--- /dev/null
+++ b/apps/api/src/infrastructure/storage/storage.module.ts
@@ -0,0 +1,15 @@
+import { Global, Module } from '@nestjs/common';
+
+import { S3StorageService } from './s3-storage.service';
+import { StorageService } from './storage.service';
+
+/**
+ * Bound to the abstract class, so consumers inject `StorageService` and the
+ * concrete provider is swappable in one line (and trivially mockable in tests).
+ */
+@Global()
+@Module({
+  providers: [{ provide: StorageService, useClass: S3StorageService }],
+  exports: [StorageService],
+})
+export class StorageModule {}
diff --git a/apps/api/src/infrastructure/storage/storage.service.ts b/apps/api/src/infrastructure/storage/storage.service.ts
new file mode 100644
index 0000000..fcc6f39
--- /dev/null
+++ b/apps/api/src/infrastructure/storage/storage.service.ts
@@ -0,0 +1,45 @@
+/**
+ * Storage abstraction.
+ *
+ * Application code depends on this interface, never on the AWS SDK. Local dev
+ * runs MinIO, production runs Cloudflare R2, and a future migration to another
+ * S3-compatible provider touches exactly one file.
+ */
+export interface StoredObject {
+  storageKey: string;
+  publicUrl: string;
+}
+
+export interface PresignedUpload {
+  /** PUT the file here. Expires in minutes. */
+  uploadUrl: string;
+  storageKey: string;
+  publicUrl: string;
+  expiresInSeconds: number;
+}
+
+export interface PresignUploadParams {
+  /** Logical folder, e.g. `products`, `banners`, `blog`. */
+  prefix: string;
+  filename: string;
+  mimeType: string;
+  maxSizeBytes?: number;
+}
+
+export abstract class StorageService {
+  /**
+   * Browsers upload straight to the bucket with a short-lived signed URL.
+   *
+   * Files never stream through the API: no memory pressure, no request
+   * timeouts on a 20 MB video, and no need to scale the API for bandwidth.
+   */
+  abstract presignUpload(params: PresignUploadParams): Promise<PresignedUpload>;
+
+  abstract delete(storageKey: string): Promise<void>;
+
+  /** Signed read URL, for private objects such as invoices. */
+  abstract presignDownload(storageKey: string, expiresInSeconds?: number): Promise<string>;
+
+  /** Public CDN URL for a key. Pure string composition, no I/O. */
+  abstract publicUrl(storageKey: string): string;
+}
diff --git a/apps/api/src/main.ts b/apps/api/src/main.ts
new file mode 100644
index 0000000..fe1b8a9
--- /dev/null
+++ b/apps/api/src/main.ts
@@ -0,0 +1,75 @@
+import 'reflect-metadata';
+
+import { VersioningType } from '@nestjs/common';
+import { NestFactory } from '@nestjs/core';
+import type { NestExpressApplication } from '@nestjs/platform-express';
+import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger';
+import compression from 'compression';
+import helmet from 'helmet';
+import { Logger } from 'nestjs-pino';
+
+import { AppModule } from './app.module';
+import { CURRENT_API_VERSION } from './common/constants/api';
+import { requestIdMiddleware } from './common/middleware/request-id.middleware';
+import { APP_CONFIG } from './config/app-config.module';
+import type { AppConfig } from './config/configuration';
+
+async function bootstrap(): Promise<void> {
+  const app = await NestFactory.create<NestExpressApplication>(AppModule, {
+    // Buffer startup logs until the pino logger is attached, so boot output is
+    // structured too rather than a mix of two formats.
+    bufferLogs: true,
+  });
+
+  const config = app.get<AppConfig>(APP_CONFIG);
+
+  app.useLogger(app.get(Logger));
+  app.flushLogs();
+
+  // Behind Nginx: required for correct client IPs in rate limiting and logs.
+  app.set('trust proxy', 1);
+
+  // First in the chain: every log line and error response carries this id.
+  app.use(requestIdMiddleware);
+  app.use(helmet({ crossOriginResourcePolicy: { policy: 'cross-origin' } }));
+  app.use(compression());
+
+  app.enableCors({
+    origin: [...config.app.corsOrigins],
+    credentials: true,
+    exposedHeaders: ['x-request-id'],
+  });
+
+  app.setGlobalPrefix(config.app.globalPrefix);
+
+  /**
+   * URI versioning: /api/v1/products.
+   *
+   * Chosen over headers because it is visible in logs, cacheable by CDN path,
+   * trivially testable with curl, and unambiguous for the mobile app and
+   * partner integrations that will follow. See ADR-0005.
+   */
+  app.enableVersioning({
+    type: VersioningType.URI,
+    defaultVersion: CURRENT_API_VERSION,
+  });
+
+  app.enableShutdownHooks();
+
+  if (!config.app.isProduction) {
+    const swaggerConfig = new DocumentBuilder()
+      .setTitle('Sport Store API')
+      .setDescription('REST API for the storefront and admin dashboard.')
+      .setVersion(config.app.version)
+      .addBearerAuth({ type: 'http', scheme: 'bearer', bearerFormat: 'JWT' })
+      .build();
+
+    SwaggerModule.setup('docs', app, SwaggerModule.createDocument(app, swaggerConfig), {
+      jsonDocumentUrl: 'docs/json',
+    });
+  }
+
+  await app.listen(config.app.port, '0.0.0.0');
+}
+
+void bootstrap();
diff --git a/apps/api/src/modules/README.md b/apps/api/src/modules/README.md
new file mode 100644
index 0000000..f5658d6
--- /dev/null
+++ b/apps/api/src/modules/README.md
@@ -0,0 +1,53 @@
+# Module anatomy
+
+Every feature module follows the same internal shape. Consistency here is worth
+more than local cleverness — a developer opening `orders/` for the first time
+should already know where everything is.
+
+```
+<module>/
+├── <module>.module.ts       # Wiring only. No logic, ever.
+├── <module>.controller.ts   # HTTP surface: parse, delegate, return. No rules.
+├── <module>.service.ts      # Business rules. The only interesting file.
+├── <module>.repository.ts   # The ONLY file allowed to touch PrismaService.
+├── dto/                     # Request/response shapes + Zod schema bindings.
+├── mappers/                 # Prisma row → API type. Keeps Prisma types internal.
+├── events/                  # Events this module publishes and subscribes to.
+└── public/
+    └── index.ts             # The only entry point for other modules.
+```
+
+## The four rules
+
+1. **Controllers contain no business logic.** If a controller has an `if` that
+   is not input shaping, the rule belongs in the service.
+
+2. **Only the repository imports Prisma.** Services depend on repository
+   interfaces. This is what makes services unit-testable without a database and
+   what keeps a later storage change from rippling outward.
+
+3. **A module owns its tables exclusively.** `OrdersModule` never queries
+   `products` — it asks `ProductsModule`'s public service, or it stores a
+   snapshot. Shared tables are how a monolith becomes unsplittable.
+
+4. **Cross-module imports go through `public/`.** Deep imports are blocked by
+   ESLint (`@sport/eslint-config/nest`). If you need something that is not
+   exported, widen the public surface deliberately — do not reach around it.
+
+## Talking to another module
+
+| Need                                     | Mechanism                                        |
+| ---------------------------------------- | ------------------------------------------------ |
+| An answer, now, to continue this request | Call its public service                          |
+| To react to something that happened      | Subscribe to its domain event                    |
+| To change its data                       | Call its public service — never write its tables |
+
+## Modules marked EXTRACTION CANDIDATE
+
+`inventory`, `orders`, `payments` and `search` are written so they could become
+independent services later: no foreign reads, communication via events, and no
+shared transactions with the rest of the monolith beyond their own tables.
+
+That is a _constraint on how they are written_, not a plan to extract them.
+Extraction is justified by a real scaling or team-boundary problem, and nothing
+here assumes it will ever happen.
diff --git a/apps/api/src/modules/auth/auth.module.ts b/apps/api/src/modules/auth/auth.module.ts
new file mode 100644
index 0000000..319c3cb
--- /dev/null
+++ b/apps/api/src/modules/auth/auth.module.ts
@@ -0,0 +1,28 @@
+import { Global, Module } from '@nestjs/common';
+import { APP_GUARD } from '@nestjs/core';
+import { JwtModule } from '@nestjs/jwt';
+
+import { AccessTokenGuard } from './guards/access-token.guard';
+import { PermissionsGuard } from './guards/permissions.guard';
+
+/**
+ * Milestone 0 provides the *enforcement* half of auth: token verification,
+ * audience separation and RBAC evaluation, wired globally.
+ *
+ * The *issuance* half — login, registration, refresh rotation, password reset,
+ * OTP — is milestone 1. Splitting it this way means every endpoint written from
+ * here on is protected by default, before a single credential exists.
+ *
+ * Guard order matters: AccessTokenGuard must populate `request.actor` before
+ * PermissionsGuard reads it. Nest runs APP_GUARD providers in registration order.
+ */
+@Global()
+@Module({
+  imports: [JwtModule.register({})],
+  providers: [
+    { provide: APP_GUARD, useClass: AccessTokenGuard },
+    { provide: APP_GUARD, useClass: PermissionsGuard },
+  ],
+  exports: [JwtModule],
+})
+export class AuthModule {}
diff --git a/apps/api/src/modules/auth/guards/access-token.guard.ts b/apps/api/src/modules/auth/guards/access-token.guard.ts
new file mode 100644
index 0000000..47c5418
--- /dev/null
+++ b/apps/api/src/modules/auth/guards/access-token.guard.ts
@@ -0,0 +1,96 @@
+import { Inject, Injectable, type CanActivate, type ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { JwtService } from '@nestjs/jwt';
+import type { Request } from 'express';
+
+import {
+  API_ERROR_CODES,
+  type AccessTokenClaims,
+  type AuthenticatedActor,
+  type TokenAudience,
+} from '@sport/types';
+
+import { METADATA_KEYS } from '@/common/constants/api';
+import { AppException } from '@/common/errors/app.exception';
+import { APP_CONFIG } from '@/config/app-config.module';
+import type { AppConfig } from '@/config/configuration';
+
+/**
+ * Registered globally: authentication is opt-OUT via `@Public()`, never opt-in.
+ * A new controller written by someone who forgets to think about auth is
+ * protected by default. That asymmetry is the whole design.
+ *
+ * The guard is stateless — no database read on the hot path. Permissions travel
+ * inside the access token, which is why access tokens are short-lived: a
+ * revoked permission takes at most one token lifetime to take effect.
+ */
+@Injectable()
+export class AccessTokenGuard implements CanActivate {
+  constructor(
+    private readonly reflector: Reflector,
+    private readonly jwtService: JwtService,
+    @Inject(APP_CONFIG) private readonly config: AppConfig,
+  ) {}
+
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    const isPublic = this.reflector.getAllAndOverride<boolean>(METADATA_KEYS.IS_PUBLIC, [
+      context.getHandler(),
+      context.getClass(),
+    ]);
+
+    if (isPublic) {
+      return true;
+    }
+
+    const request = context.switchToHttp().getRequest<Request>();
+    const token = extractBearerToken(request);
+
+    if (!token) {
+      throw AppException.unauthenticated();
+    }
+
+    let claims: AccessTokenClaims;
+    try {
+      claims = await this.jwtService.verifyAsync<AccessTokenClaims>(token, {
+        secret: this.config.auth.accessSecret,
+        issuer: this.config.auth.issuer,
+      });
+    } catch (error) {
+      const expired = error instanceof Error && error.name === 'TokenExpiredError';
+      throw AppException.unauthenticated(
+        expired ? 'Your session has expired. Please sign in again.' : 'Invalid credentials.',
+        expired ? API_ERROR_CODES.TOKEN_EXPIRED : API_ERROR_CODES.TOKEN_INVALID,
+      );
+    }
+
+    // Audience check runs before any permission logic: a storefront token must
+    // never reach an admin endpoint even if it somehow carried the permission.
+    const requiredAudience = this.reflector.getAllAndOverride<TokenAudience>(
+      METADATA_KEYS.TOKEN_AUDIENCE,
+      [context.getHandler(), context.getClass()],
+    );
+
+    if (requiredAudience && claims.aud !== requiredAudience) {
+      throw AppException.forbidden('This credential cannot be used here.');
+    }
+
+    const actor: AuthenticatedActor = {
+      userId: claims.sub,
+      userType: claims.type,
+      audience: claims.aud,
+      permissions: claims.permissions ?? [],
+      sessionId: claims.sid,
+    };
+
+    request.actor = actor;
+    return true;
+  }
+}
+
+function extractBearerToken(request: Request): string | null {
+  const header = request.header('authorization');
+  if (!header) return null;
+
+  const [scheme, value] = header.split(' ');
+  return scheme?.toLowerCase() === 'bearer' && value ? value : null;
+}
diff --git a/apps/api/src/modules/auth/guards/permissions.guard.spec.ts b/apps/api/src/modules/auth/guards/permissions.guard.spec.ts
new file mode 100644
index 0000000..689b87e
--- /dev/null
+++ b/apps/api/src/modules/auth/guards/permissions.guard.spec.ts
@@ -0,0 +1,82 @@
+import { Reflector } from '@nestjs/core';
+
+import { PERMISSIONS, USER_TYPES, TOKEN_AUDIENCES, type AuthenticatedActor } from '@sport/types';
+
+import { METADATA_KEYS } from '@/common/constants/api';
+import { AppException } from '@/common/errors/app.exception';
+
+import { PermissionsGuard } from './permissions.guard';
+
+/**
+ * These tests exist because authorization is the one thing that must never
+ * regress quietly. They pin the three behaviours the rest of the codebase
+ * relies on: default-allow only when nothing is required, all-of semantics,
+ * and any-of semantics.
+ */
+function makeContext(actor: AuthenticatedActor | undefined) {
+  return {
+    switchToHttp: () => ({ getRequest: () => ({ actor }) }),
+    getHandler: () => () => undefined,
+    getClass: () => class {},
+  } as never;
+}
+
+function makeActor(permissions: AuthenticatedActor['permissions']): AuthenticatedActor {
+  return {
+    userId: 'user-1',
+    userType: USER_TYPES.STAFF,
+    audience: TOKEN_AUDIENCES.ADMIN,
+    permissions,
+    sessionId: 'session-1',
+  };
+}
+
+function makeReflector(required?: string[], mode?: 'all' | 'any') {
+  const reflector = new Reflector();
+  jest
+    .spyOn(reflector, 'getAllAndOverride')
+    .mockImplementation((key: unknown) =>
+      key === METADATA_KEYS.REQUIRED_PERMISSIONS ? required : mode,
+    );
+  return reflector;
+}
+
+describe('PermissionsGuard', () => {
+  it('allows a route that declares no permissions', () => {
+    const guard = new PermissionsGuard(makeReflector(undefined));
+    expect(guard.canActivate(makeContext(makeActor([])))).toBe(true);
+  });
+
+  it('allows when the actor holds every required permission', () => {
+    const guard = new PermissionsGuard(
+      makeReflector([PERMISSIONS.PRODUCT_READ, PERMISSIONS.PRODUCT_UPDATE], 'all'),
+    );
+    const actor = makeActor([PERMISSIONS.PRODUCT_READ, PERMISSIONS.PRODUCT_UPDATE]);
+
+    expect(guard.canActivate(makeContext(actor))).toBe(true);
+  });
+
+  it('denies when one of several required permissions is missing', () => {
+    const guard = new PermissionsGuard(
+      makeReflector([PERMISSIONS.PRODUCT_READ, PERMISSIONS.PRODUCT_DELETE], 'all'),
+    );
+    const actor = makeActor([PERMISSIONS.PRODUCT_READ]);
+
+    expect(() => guard.canActivate(makeContext(actor))).toThrow(AppException);
+  });
+
+  it('allows under "any" mode when at least one permission matches', () => {
+    const guard = new PermissionsGuard(
+      makeReflector([PERMISSIONS.ORDER_READ, PERMISSIONS.ORDER_REFUND], 'any'),
+    );
+    const actor = makeActor([PERMISSIONS.ORDER_READ]);
+
+    expect(guard.canActivate(makeContext(actor))).toBe(true);
+  });
+
+  it('denies an unauthenticated request on a permissioned route', () => {
+    const guard = new PermissionsGuard(makeReflector([PERMISSIONS.ORDER_READ], 'all'));
+
+    expect(() => guard.canActivate(makeContext(undefined))).toThrow(AppException);
+  });
+});
diff --git a/apps/api/src/modules/auth/guards/permissions.guard.ts b/apps/api/src/modules/auth/guards/permissions.guard.ts
new file mode 100644
index 0000000..a95aa33
--- /dev/null
+++ b/apps/api/src/modules/auth/guards/permissions.guard.ts
@@ -0,0 +1,55 @@
+import { Injectable, type CanActivate, type ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import type { Request } from 'express';
+
+import { hasAllPermissions, hasAnyPermission, type Permission } from '@sport/types';
+
+import { METADATA_KEYS } from '@/common/constants/api';
+import { AppException } from '@/common/errors/app.exception';
+
+/**
+ * Enforces `@RequirePermissions(...)`. Runs after AccessTokenGuard, so the
+ * actor is guaranteed present on any non-public route.
+ *
+ * Routes with no permission metadata pass: authentication alone is enough for
+ * "any signed-in customer" endpoints such as /me. Anything touching business
+ * data must declare its permissions explicitly.
+ */
+@Injectable()
+export class PermissionsGuard implements CanActivate {
+  constructor(private readonly reflector: Reflector) {}
+
+  canActivate(context: ExecutionContext): boolean {
+    const required = this.reflector.getAllAndOverride<Permission[]>(
+      METADATA_KEYS.REQUIRED_PERMISSIONS,
+      [context.getHandler(), context.getClass()],
+    );
+
+    if (!required || required.length === 0) {
+      return true;
+    }
+
+    const request = context.switchToHttp().getRequest<Request>();
+    const actor = request.actor;
+
+    if (!actor) {
+      throw AppException.unauthenticated();
+    }
+
+    const mode = this.reflector.getAllAndOverride<'all' | 'any'>(METADATA_KEYS.PERMISSION_MODE, [
+      context.getHandler(),
+      context.getClass(),
+    ]);
+
+    const granted =
+      mode === 'any'
+        ? hasAnyPermission(actor.permissions, required)
+        : hasAllPermissions(actor.permissions, required);
+
+    if (!granted) {
+      throw AppException.forbidden();
+    }
+
+    return true;
+  }
+}
diff --git a/apps/api/src/modules/brands/brands.module.ts b/apps/api/src/modules/brands/brands.module.ts
new file mode 100644
index 0000000..d9a657b
--- /dev/null
+++ b/apps/api/src/modules/brands/brands.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * BrandsModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `brands`
+ *
+ * Deliberately thin. Kept separate anyway because brand pages, filters and (later) brand-level commercial terms all hang off it.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   brands.module.ts        wiring only
+ *   brands.controller.ts    HTTP surface, no logic
+ *   brands.service.ts       business rules
+ *   brands.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class BrandsModule {}
diff --git a/apps/api/src/modules/brands/public/index.ts b/apps/api/src/modules/brands/public/index.ts
new file mode 100644
index 0000000..cf87582
--- /dev/null
+++ b/apps/api/src/modules/brands/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of BrandsModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/carts/carts.module.ts b/apps/api/src/modules/carts/carts.module.ts
new file mode 100644
index 0000000..803b392
--- /dev/null
+++ b/apps/api/src/modules/carts/carts.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * CartsModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): Redis (guest carts) + `carts`/`cart_items` once persisted — milestone 2
+ *
+ * Guest carts live in Redis keyed by an anonymous token; they are promoted to PostgreSQL on sign-in. Cart totals are always recomputed server-side from current variant prices — a client-submitted price is never trusted.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   carts.module.ts        wiring only
+ *   carts.controller.ts    HTTP surface, no logic
+ *   carts.service.ts       business rules
+ *   carts.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class CartsModule {}
diff --git a/apps/api/src/modules/carts/public/index.ts b/apps/api/src/modules/carts/public/index.ts
new file mode 100644
index 0000000..57eb7ac
--- /dev/null
+++ b/apps/api/src/modules/carts/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of CartsModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/categories/categories.module.ts b/apps/api/src/modules/categories/categories.module.ts
new file mode 100644
index 0000000..4664097
--- /dev/null
+++ b/apps/api/src/modules/categories/categories.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * CategoriesModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `categories`
+ *
+ * The hierarchical merchandising tree and the navigation menu it feeds. Heavy read, near-zero write — the first thing that should be Redis-cached.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   categories.module.ts        wiring only
+ *   categories.controller.ts    HTTP surface, no logic
+ *   categories.service.ts       business rules
+ *   categories.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class CategoriesModule {}
diff --git a/apps/api/src/modules/categories/public/index.ts b/apps/api/src/modules/categories/public/index.ts
new file mode 100644
index 0000000..d02c35b
--- /dev/null
+++ b/apps/api/src/modules/categories/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of CategoriesModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/checkout/checkout.module.ts b/apps/api/src/modules/checkout/checkout.module.ts
new file mode 100644
index 0000000..5db39d3
--- /dev/null
+++ b/apps/api/src/modules/checkout/checkout.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * CheckoutModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): Checkout sessions (Redis, short TTL)
+ *
+ * Orchestrates the cart → stock reservation → payment intent → order transition. The only module allowed to coordinate across contexts, and it does so through public services and events.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   checkout.module.ts        wiring only
+ *   checkout.controller.ts    HTTP surface, no logic
+ *   checkout.service.ts       business rules
+ *   checkout.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class CheckoutModule {}
diff --git a/apps/api/src/modules/checkout/public/index.ts b/apps/api/src/modules/checkout/public/index.ts
new file mode 100644
index 0000000..055c6fd
--- /dev/null
+++ b/apps/api/src/modules/checkout/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of CheckoutModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/cms/cms.module.ts b/apps/api/src/modules/cms/cms.module.ts
new file mode 100644
index 0000000..fbb10d2
--- /dev/null
+++ b/apps/api/src/modules/cms/cms.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * CmsModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `pages`, `blog_posts`, `banners`, `navigation_menus` — milestone 3
+ *
+ * Homepage blocks, /blog and static pages. Editorial content is versioned and previewable; it never becomes a general-purpose page builder.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   cms.module.ts        wiring only
+ *   cms.controller.ts    HTTP surface, no logic
+ *   cms.service.ts       business rules
+ *   cms.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class CmsModule {}
diff --git a/apps/api/src/modules/cms/public/index.ts b/apps/api/src/modules/cms/public/index.ts
new file mode 100644
index 0000000..5a6ddcc
--- /dev/null
+++ b/apps/api/src/modules/cms/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of CmsModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/collections/collections.module.ts b/apps/api/src/modules/collections/collections.module.ts
new file mode 100644
index 0000000..d354b26
--- /dev/null
+++ b/apps/api/src/modules/collections/collections.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * CollectionsModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `collections`, `product_collections`
+ *
+ * Editorial and campaign groupings, including rule evaluation for AUTOMATED collections.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   collections.module.ts        wiring only
+ *   collections.controller.ts    HTTP surface, no logic
+ *   collections.service.ts       business rules
+ *   collections.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class CollectionsModule {}
diff --git a/apps/api/src/modules/collections/public/index.ts b/apps/api/src/modules/collections/public/index.ts
new file mode 100644
index 0000000..f406249
--- /dev/null
+++ b/apps/api/src/modules/collections/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of CollectionsModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/coupons/coupons.module.ts b/apps/api/src/modules/coupons/coupons.module.ts
new file mode 100644
index 0000000..03d651c
--- /dev/null
+++ b/apps/api/src/modules/coupons/coupons.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * CouponsModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `coupons`, `coupon_redemptions` — milestone 3
+ *
+ * Code-driven discounts. Redemption counting must be transactional; a race here gives away unlimited free money.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   coupons.module.ts        wiring only
+ *   coupons.controller.ts    HTTP surface, no logic
+ *   coupons.service.ts       business rules
+ *   coupons.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class CouponsModule {}
diff --git a/apps/api/src/modules/coupons/public/index.ts b/apps/api/src/modules/coupons/public/index.ts
new file mode 100644
index 0000000..a70d78c
--- /dev/null
+++ b/apps/api/src/modules/coupons/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of CouponsModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/customers/customers.module.ts b/apps/api/src/modules/customers/customers.module.ts
new file mode 100644
index 0000000..3d14419
--- /dev/null
+++ b/apps/api/src/modules/customers/customers.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * CustomersModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `customers`, `addresses`
+ *
+ * Shopper profiles and address book. Separate from `users` so customer PII can later live under a stricter access policy without touching staff accounts.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   customers.module.ts        wiring only
+ *   customers.controller.ts    HTTP surface, no logic
+ *   customers.service.ts       business rules
+ *   customers.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class CustomersModule {}
diff --git a/apps/api/src/modules/customers/public/index.ts b/apps/api/src/modules/customers/public/index.ts
new file mode 100644
index 0000000..4a7dfbf
--- /dev/null
+++ b/apps/api/src/modules/customers/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of CustomersModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/health/health.controller.ts b/apps/api/src/modules/health/health.controller.ts
new file mode 100644
index 0000000..7f0d3b5
--- /dev/null
+++ b/apps/api/src/modules/health/health.controller.ts
@@ -0,0 +1,34 @@
+import { Controller, Get, HttpCode, HttpStatus } from '@nestjs/common';
+import { ApiOperation, ApiTags } from '@nestjs/swagger';
+
+import { Public } from '@/common/decorators/public.decorator';
+
+import { HealthService, type HealthCheckResult } from './health.service';
+
+@ApiTags('health')
+@Controller('health')
+export class HealthController {
+  constructor(private readonly healthService: HealthService) {}
+
+  /**
+   * Liveness. Answers "is the process running?" and nothing else — it must not
+   * touch the database, or a brief DB blip would make the orchestrator kill
+   * otherwise-healthy containers.
+   */
+  @Public()
+  @Get('live')
+  @HttpCode(HttpStatus.OK)
+  @ApiOperation({ summary: 'Liveness probe' })
+  live(): { status: 'ok' } {
+    return { status: 'ok' };
+  }
+
+  /** Readiness / deep check: should this instance receive traffic? */
+  @Public()
+  @Get()
+  @HttpCode(HttpStatus.OK)
+  @ApiOperation({ summary: 'Readiness probe with dependency status' })
+  check(): Promise<HealthCheckResult> {
+    return this.healthService.check();
+  }
+}
diff --git a/apps/api/src/modules/health/health.module.ts b/apps/api/src/modules/health/health.module.ts
new file mode 100644
index 0000000..b486957
--- /dev/null
+++ b/apps/api/src/modules/health/health.module.ts
@@ -0,0 +1,10 @@
+import { Module } from '@nestjs/common';
+
+import { HealthController } from './health.controller';
+import { HealthService } from './health.service';
+
+@Module({
+  controllers: [HealthController],
+  providers: [HealthService],
+})
+export class HealthModule {}
diff --git a/apps/api/src/modules/health/health.service.ts b/apps/api/src/modules/health/health.service.ts
new file mode 100644
index 0000000..fe37d73
--- /dev/null
+++ b/apps/api/src/modules/health/health.service.ts
@@ -0,0 +1,67 @@
+import { Inject, Injectable } from '@nestjs/common';
+
+import { APP_CONFIG } from '@/config/app-config.module';
+import type { AppConfig } from '@/config/configuration';
+import { PrismaService } from '@/infrastructure/prisma/prisma.service';
+import { RedisService } from '@/infrastructure/redis/redis.service';
+
+export interface DependencyStatus {
+  status: 'up' | 'down';
+  latencyMs: number | null;
+  error?: string;
+}
+
+export interface HealthCheckResult {
+  status: 'ok' | 'degraded';
+  uptimeSeconds: number;
+  version: string;
+  environment: string;
+  dependencies: {
+    database: DependencyStatus;
+    redis: DependencyStatus;
+  };
+}
+
+@Injectable()
+export class HealthService {
+  constructor(
+    @Inject(APP_CONFIG) private readonly config: AppConfig,
+    private readonly prisma: PrismaService,
+    private readonly redis: RedisService,
+  ) {}
+
+  /**
+   * Deep check — used by dashboards and by `docker compose` dependency gates.
+   * Dependencies are probed in parallel so a slow one cannot mask another.
+   */
+  async check(): Promise<HealthCheckResult> {
+    const [database, redis] = await Promise.all([
+      probe(() => this.prisma.ping()),
+      probe(() => this.redis.ping()),
+    ]);
+
+    const healthy = database.status === 'up' && redis.status === 'up';
+
+    return {
+      status: healthy ? 'ok' : 'degraded',
+      uptimeSeconds: Math.round(process.uptime()),
+      version: this.config.app.version,
+      environment: this.config.app.env,
+      dependencies: { database, redis },
+    };
+  }
+}
+
+async function probe(fn: () => Promise<unknown>): Promise<DependencyStatus> {
+  const startedAt = performance.now();
+  try {
+    await fn();
+    return { status: 'up', latencyMs: Math.round(performance.now() - startedAt) };
+  } catch (error) {
+    return {
+      status: 'down',
+      latencyMs: null,
+      error: error instanceof Error ? error.message : 'Unknown error',
+    };
+  }
+}
diff --git a/apps/api/src/modules/inventory/inventory.module.ts b/apps/api/src/modules/inventory/inventory.module.ts
new file mode 100644
index 0000000..492a80a
--- /dev/null
+++ b/apps/api/src/modules/inventory/inventory.module.ts
@@ -0,0 +1,23 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * InventoryModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `inventory_locations`, `stock_levels`, `stock_movements`
+ *
+ * Stock ledger, reservations and release. Consumes order events rather than being called by OrdersModule.
+ *
+ * EXTRACTION CANDIDATE: designed so it could become its own service. It must
+ * therefore never read another module’s tables directly, and it communicates
+ * outward through domain events.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   inventory.module.ts        wiring only
+ *   inventory.controller.ts    HTTP surface, no logic
+ *   inventory.service.ts       business rules
+ *   inventory.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class InventoryModule {}
diff --git a/apps/api/src/modules/inventory/public/index.ts b/apps/api/src/modules/inventory/public/index.ts
new file mode 100644
index 0000000..2393f8c
--- /dev/null
+++ b/apps/api/src/modules/inventory/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of InventoryModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/media/media.module.ts b/apps/api/src/modules/media/media.module.ts
new file mode 100644
index 0000000..d8b0aac
--- /dev/null
+++ b/apps/api/src/modules/media/media.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * MediaModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `media_assets`
+ *
+ * Issues presigned upload URLs and records metadata. Bytes never pass through the API and never enter PostgreSQL.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   media.module.ts        wiring only
+ *   media.controller.ts    HTTP surface, no logic
+ *   media.service.ts       business rules
+ *   media.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class MediaModule {}
diff --git a/apps/api/src/modules/media/public/index.ts b/apps/api/src/modules/media/public/index.ts
new file mode 100644
index 0000000..1981fdf
--- /dev/null
+++ b/apps/api/src/modules/media/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of MediaModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/orders/orders.module.ts b/apps/api/src/modules/orders/orders.module.ts
new file mode 100644
index 0000000..88d4d06
--- /dev/null
+++ b/apps/api/src/modules/orders/orders.module.ts
@@ -0,0 +1,23 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * OrdersModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `orders`, `order_items`, `order_status_history` — milestone 2
+ *
+ * Order lines snapshot product name, variant title and price at purchase time. Never join to the live catalog for historical orders: yesterday’s receipt must not change when a price does.
+ *
+ * EXTRACTION CANDIDATE: designed so it could become its own service. It must
+ * therefore never read another module’s tables directly, and it communicates
+ * outward through domain events.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   orders.module.ts        wiring only
+ *   orders.controller.ts    HTTP surface, no logic
+ *   orders.service.ts       business rules
+ *   orders.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class OrdersModule {}
diff --git a/apps/api/src/modules/orders/public/index.ts b/apps/api/src/modules/orders/public/index.ts
new file mode 100644
index 0000000..c83aad8
--- /dev/null
+++ b/apps/api/src/modules/orders/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of OrdersModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/payments/payments.module.ts b/apps/api/src/modules/payments/payments.module.ts
new file mode 100644
index 0000000..2e753c4
--- /dev/null
+++ b/apps/api/src/modules/payments/payments.module.ts
@@ -0,0 +1,23 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * PaymentsModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `payments`, `payment_transactions`, `refunds` — milestone 3
+ *
+ * One PaymentProvider interface, one adapter per provider (VNPay, MoMo, ZaloPay, COD). Webhooks are signature-verified and idempotent by provider transaction id.
+ *
+ * EXTRACTION CANDIDATE: designed so it could become its own service. It must
+ * therefore never read another module’s tables directly, and it communicates
+ * outward through domain events.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   payments.module.ts        wiring only
+ *   payments.controller.ts    HTTP surface, no logic
+ *   payments.service.ts       business rules
+ *   payments.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class PaymentsModule {}
diff --git a/apps/api/src/modules/payments/public/index.ts b/apps/api/src/modules/payments/public/index.ts
new file mode 100644
index 0000000..e590dbb
--- /dev/null
+++ b/apps/api/src/modules/payments/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of PaymentsModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/product-variants/product-variants.module.ts b/apps/api/src/modules/product-variants/product-variants.module.ts
new file mode 100644
index 0000000..92dcefa
--- /dev/null
+++ b/apps/api/src/modules/product-variants/product-variants.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * ProductVariantsModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `product_variants`, `product_variant_option_values`
+ *
+ * The purchasable unit. Split from ProductsModule because carts, orders, inventory and marketplace sync all talk to variants and none of them should pull in the whole product aggregate.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   product-variants.module.ts        wiring only
+ *   product-variants.controller.ts    HTTP surface, no logic
+ *   product-variants.service.ts       business rules
+ *   product-variants.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class ProductVariantsModule {}
diff --git a/apps/api/src/modules/product-variants/public/index.ts b/apps/api/src/modules/product-variants/public/index.ts
new file mode 100644
index 0000000..299bd96
--- /dev/null
+++ b/apps/api/src/modules/product-variants/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of ProductVariantsModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/products/products.module.ts b/apps/api/src/modules/products/products.module.ts
new file mode 100644
index 0000000..07726bf
--- /dev/null
+++ b/apps/api/src/modules/products/products.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * ProductsModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `products`, `product_options`, `product_option_values`, `product_images`, `product_attributes`
+ *
+ * The catalog aggregate root. Every other module references a product by id and reads through this module’s public service.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   products.module.ts        wiring only
+ *   products.controller.ts    HTTP surface, no logic
+ *   products.service.ts       business rules
+ *   products.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class ProductsModule {}
diff --git a/apps/api/src/modules/products/public/index.ts b/apps/api/src/modules/products/public/index.ts
new file mode 100644
index 0000000..0294774
--- /dev/null
+++ b/apps/api/src/modules/products/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of ProductsModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/promotions/promotions.module.ts b/apps/api/src/modules/promotions/promotions.module.ts
new file mode 100644
index 0000000..25eb652
--- /dev/null
+++ b/apps/api/src/modules/promotions/promotions.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * PromotionsModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `promotions`, `promotion_rules` — milestone 3
+ *
+ * Automatic, cart-level discounts. Pricing is calculated in one place so storefront, admin and invoices can never disagree.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   promotions.module.ts        wiring only
+ *   promotions.controller.ts    HTTP surface, no logic
+ *   promotions.service.ts       business rules
+ *   promotions.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class PromotionsModule {}
diff --git a/apps/api/src/modules/promotions/public/index.ts b/apps/api/src/modules/promotions/public/index.ts
new file mode 100644
index 0000000..1a58fda
--- /dev/null
+++ b/apps/api/src/modules/promotions/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of PromotionsModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/reviews/public/index.ts b/apps/api/src/modules/reviews/public/index.ts
new file mode 100644
index 0000000..83d758b
--- /dev/null
+++ b/apps/api/src/modules/reviews/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of ReviewsModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/reviews/reviews.module.ts b/apps/api/src/modules/reviews/reviews.module.ts
new file mode 100644
index 0000000..25270bf
--- /dev/null
+++ b/apps/api/src/modules/reviews/reviews.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * ReviewsModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `reviews` — milestone 3
+ *
+ * Verified-purchase reviews with moderation. Rating aggregates are denormalised onto the product read model, never computed per page view.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   reviews.module.ts        wiring only
+ *   reviews.controller.ts    HTTP surface, no logic
+ *   reviews.service.ts       business rules
+ *   reviews.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class ReviewsModule {}
diff --git a/apps/api/src/modules/search/public/index.ts b/apps/api/src/modules/search/public/index.ts
new file mode 100644
index 0000000..0d6b1ba
--- /dev/null
+++ b/apps/api/src/modules/search/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of SearchModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/search/search.module.ts b/apps/api/src/modules/search/search.module.ts
new file mode 100644
index 0000000..2aa38a8
--- /dev/null
+++ b/apps/api/src/modules/search/search.module.ts
@@ -0,0 +1,23 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * SearchModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): Nothing. Read-only projection over the catalog.
+ *
+ * Starts as PostgreSQL full-text + trigram, which is genuinely enough below ~50k products. Behind a SearchProvider interface so swapping in OpenSearch is a provider change, not a rewrite of every listing page.
+ *
+ * EXTRACTION CANDIDATE: designed so it could become its own service. It must
+ * therefore never read another module’s tables directly, and it communicates
+ * outward through domain events.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   search.module.ts        wiring only
+ *   search.controller.ts    HTTP surface, no logic
+ *   search.service.ts       business rules
+ *   search.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class SearchModule {}
diff --git a/apps/api/src/modules/users/public/index.ts b/apps/api/src/modules/users/public/index.ts
new file mode 100644
index 0000000..6bcd7c3
--- /dev/null
+++ b/apps/api/src/modules/users/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of UsersModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/users/users.module.ts b/apps/api/src/modules/users/users.module.ts
new file mode 100644
index 0000000..7567466
--- /dev/null
+++ b/apps/api/src/modules/users/users.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * UsersModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `users`, `roles`, `permissions`, `role_permissions`, `user_roles`
+ *
+ * Back-office identity and the RBAC administration surface. Owns the role/permission tables that AuthModule only reads through this module.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   users.module.ts        wiring only
+ *   users.controller.ts    HTTP surface, no logic
+ *   users.service.ts       business rules
+ *   users.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class UsersModule {}
diff --git a/apps/api/src/modules/wishlist/public/index.ts b/apps/api/src/modules/wishlist/public/index.ts
new file mode 100644
index 0000000..2a6db37
--- /dev/null
+++ b/apps/api/src/modules/wishlist/public/index.ts
@@ -0,0 +1,10 @@
+/**
+ * Public surface of WishlistModule.
+ *
+ * This barrel is the ONLY thing other modules may import from here. Everything
+ * else — repository, DTOs, internal services — is private, and the ESLint
+ * boundary rule in @sport/eslint-config/nest enforces it.
+ *
+ * Keep it narrow: each export is a promise to the rest of the codebase.
+ */
+export {};
diff --git a/apps/api/src/modules/wishlist/wishlist.module.ts b/apps/api/src/modules/wishlist/wishlist.module.ts
new file mode 100644
index 0000000..f29eab8
--- /dev/null
+++ b/apps/api/src/modules/wishlist/wishlist.module.ts
@@ -0,0 +1,19 @@
+import { Module } from '@nestjs/common';
+
+/**
+ * WishlistModule — boundary declared, implementation pending.
+ *
+ * Owns (exclusively): `wishlist_items` — milestone 2
+ *
+ * Saved variants per customer. Also the signal source for back-in-stock notifications.
+ *
+ * Anatomy once implemented (see ../README.md):
+ *   wishlist.module.ts        wiring only
+ *   wishlist.controller.ts    HTTP surface, no logic
+ *   wishlist.service.ts       business rules
+ *   wishlist.repository.ts    the only file that touches Prisma
+ *   dto/                           request/response shapes
+ *   public/                        what other modules may import
+ */
+@Module({})
+export class WishlistModule {}
diff --git a/apps/api/tsconfig.build.json b/apps/api/tsconfig.build.json
new file mode 100644
index 0000000..c36147c
--- /dev/null
+++ b/apps/api/tsconfig.build.json
@@ -0,0 +1,16 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "noEmit": false,
+    "outDir": "dist",
+    "rootDir": "src",
+
+    // MUST stay false. `nest build` wipes dist (deleteOutDir), but TypeScript's
+    // incremental cache tracks only its own .tsbuildinfo — it does not check
+    // whether the output files still exist. The combination produces a build
+    // that exits 0 and emits nothing, which is far worse than a slow build.
+    "incremental": false
+  },
+  "include": ["src/**/*.ts"],
+  "exclude": ["node_modules", "dist", "test", "prisma", "**/*.spec.ts"]
+}
diff --git a/apps/api/tsconfig.json b/apps/api/tsconfig.json
new file mode 100644
index 0000000..e5c265e
--- /dev/null
+++ b/apps/api/tsconfig.json
@@ -0,0 +1,12 @@
+{
+  "extends": "@sport/config/typescript/nestjs.json",
+  "compilerOptions": {
+    "baseUrl": ".",
+    "paths": {
+      "@/*": ["src/*"]
+    },
+    "noEmit": true
+  },
+  "include": ["src/**/*.ts", "prisma/**/*.ts", "test/**/*.ts"],
+  "exclude": ["node_modules", "dist"]
+}
diff --git a/apps/storefront/.env.example b/apps/storefront/.env.example
new file mode 100644
index 0000000..e377bd7
--- /dev/null
+++ b/apps/storefront/.env.example
@@ -0,0 +1,14 @@
+# ---------------------------------------------------------------------------
+# apps/storefront
+#
+# NEXT_PUBLIC_* variables are inlined into the JavaScript bundle and are
+# therefore PUBLIC. Never put a secret behind that prefix.
+# ---------------------------------------------------------------------------
+
+# Used by the browser. In production this is the public API hostname.
+NEXT_PUBLIC_API_URL=http://localhost:4000
+NEXT_PUBLIC_SITE_URL=http://localhost:3000
+
+# Used by Server Components / route handlers only. Inside Docker this points at
+# the API container directly, skipping the public round-trip.
+API_INTERNAL_URL=http://localhost:4000
diff --git a/apps/storefront/AGENTS.md b/apps/storefront/AGENTS.md
new file mode 100644
index 0000000..643577d
--- /dev/null
+++ b/apps/storefront/AGENTS.md
@@ -0,0 +1,9 @@
+<!-- BEGIN:nextjs-agent-rules -->
+
+# This is NOT the Next.js you know
+
+This version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` (resolved from this file's directory; in monorepos the `next` package may not be visible from the repo root) before writing any code. Heed deprecation notices.
+
+This block is written and re-added by `next dev` — verify at `node_modules/next/dist/server/lib/generate-agent-files.js`. Removing it from a diff only re-creates the uncommitted change; committing it with your work keeps the tree clean.
+
+<!-- END:nextjs-agent-rules -->
diff --git a/apps/storefront/CLAUDE.md b/apps/storefront/CLAUDE.md
new file mode 100644
index 0000000..43c994c
--- /dev/null
+++ b/apps/storefront/CLAUDE.md
@@ -0,0 +1 @@
+@AGENTS.md
diff --git a/apps/storefront/eslint.config.mjs b/apps/storefront/eslint.config.mjs
new file mode 100644
index 0000000..f433114
--- /dev/null
+++ b/apps/storefront/eslint.config.mjs
@@ -0,0 +1,3 @@
+import { nextConfig } from '@sport/eslint-config/next';
+
+export default nextConfig;
diff --git a/apps/storefront/next-env.d.ts b/apps/storefront/next-env.d.ts
new file mode 100644
index 0000000..ce4e94a
--- /dev/null
+++ b/apps/storefront/next-env.d.ts
@@ -0,0 +1,7 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+import "./.next/types/routes.d.ts";
+import "./.next/types/root-params.d.ts";
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.
diff --git a/apps/storefront/next.config.ts b/apps/storefront/next.config.ts
new file mode 100644
index 0000000..48674e4
--- /dev/null
+++ b/apps/storefront/next.config.ts
@@ -0,0 +1,34 @@
+import type { NextConfig } from 'next';
+
+const nextConfig: NextConfig = {
+  reactStrictMode: true,
+
+  /**
+   * Workspace packages ship TypeScript source rather than a build artefact, so
+   * Next compiles them with the app. No watch-and-rebuild step during local
+   * development, and dead code is tree-shaken per app.
+   */
+  transpilePackages: ['@sport/ui'],
+
+  // Compile-time checked <Link href> values — a typo becomes a build failure.
+  typedRoutes: true,
+
+  images: {
+    // Media is served from R2/CDN. Locally that is MinIO.
+    remotePatterns: [
+      { protocol: 'http', hostname: 'localhost', port: '9000' },
+      { protocol: 'https', hostname: '**.r2.dev' },
+      { protocol: 'https', hostname: 'cdn.sport-store.local' },
+    ],
+    formats: ['image/avif', 'image/webp'],
+  },
+
+  // Standalone output keeps the production image small (no node_modules copy).
+  output: 'standalone',
+
+  experimental: {
+    optimizePackageImports: ['@sport/ui'],
+  },
+};
+
+export default nextConfig;
diff --git a/apps/storefront/package.json b/apps/storefront/package.json
new file mode 100644
index 0000000..da70be2
--- /dev/null
+++ b/apps/storefront/package.json
@@ -0,0 +1,37 @@
+{
+  "name": "@sport/storefront",
+  "version": "0.0.0",
+  "private": true,
+  "description": "Customer-facing Next.js storefront.",
+  "scripts": {
+    "dev": "next dev --port 3000",
+    "build": "next build",
+    "start": "next start --port 3000",
+    "lint": "eslint src",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "clean": "rm -rf .next .turbo *.tsbuildinfo"
+  },
+  "dependencies": {
+    "@sport/api-client": "workspace:*",
+    "@sport/types": "workspace:*",
+    "@sport/ui": "workspace:*",
+    "@sport/validation": "workspace:*",
+    "@tanstack/react-query": "^5.101.4",
+    "next": "catalog:",
+    "react": "catalog:",
+    "react-dom": "catalog:",
+    "zustand": "^5.0.14",
+    "zod": "catalog:"
+  },
+  "devDependencies": {
+    "@sport/config": "workspace:*",
+    "@sport/eslint-config": "workspace:*",
+    "@tailwindcss/postcss": "catalog:",
+    "@types/node": "^22.19.0",
+    "@types/react": "^19.2.0",
+    "@types/react-dom": "^19.2.0",
+    "eslint": "catalog:",
+    "tailwindcss": "catalog:",
+    "typescript": "catalog:"
+  }
+}
diff --git a/apps/storefront/postcss.config.mjs b/apps/storefront/postcss.config.mjs
new file mode 100644
index 0000000..5d6d845
--- /dev/null
+++ b/apps/storefront/postcss.config.mjs
@@ -0,0 +1,8 @@
+/** @type {import('postcss-load-config').Config} */
+const config = {
+  plugins: {
+    '@tailwindcss/postcss': {},
+  },
+};
+
+export default config;
diff --git a/apps/storefront/src/app/(account)/account/addresses/page.tsx b/apps/storefront/src/app/(account)/account/addresses/page.tsx
new file mode 100644
index 0000000..cfc9e80
--- /dev/null
+++ b/apps/storefront/src/app/(account)/account/addresses/page.tsx
@@ -0,0 +1,15 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Addresses' };
+
+export default function AddressesPage() {
+  return (
+    <PageScaffold
+      title="Addresses"
+      description="Address book with Vietnamese province/district/ward selection, stored with administrative codes for shipping-provider integration."
+      milestone="M8 — customer account"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(account)/account/layout.tsx b/apps/storefront/src/app/(account)/account/layout.tsx
new file mode 100644
index 0000000..768bf6a
--- /dev/null
+++ b/apps/storefront/src/app/(account)/account/layout.tsx
@@ -0,0 +1,43 @@
+import Link from 'next/link';
+
+import { SiteFooter } from '@/components/layout/site-footer';
+import { SiteHeader } from '@/components/layout/site-header';
+import { routes } from '@/lib/routes';
+
+const ACCOUNT_NAV = [
+  { href: routes.accountProfile(), label: 'Profile' },
+  { href: routes.accountOrders(), label: 'Orders' },
+  { href: routes.accountAddresses(), label: 'Addresses' },
+  { href: routes.accountWishlist(), label: 'Wishlist' },
+] as const;
+
+/**
+ * Everything under /account requires a signed-in customer. That check will live
+ * in middleware (a cheap cookie presence test) plus a server-side verification
+ * here — never in a Client Component, which can be bypassed.
+ */
+export default function AccountLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <div className="flex min-h-screen flex-col">
+      <SiteHeader />
+      <div className="max-w-page px-gutter mx-auto flex w-full flex-1 gap-12 py-16">
+        <aside className="hidden w-56 shrink-0 md:block">
+          <h2 className="text-ink-400 text-xs font-semibold uppercase tracking-widest">Account</h2>
+          <nav className="mt-4 space-y-1">
+            {ACCOUNT_NAV.map((item) => (
+              <Link
+                key={item.href}
+                href={item.href}
+                className="text-ink-600 hover:text-ink-950 block py-1.5 text-sm"
+              >
+                {item.label}
+              </Link>
+            ))}
+          </nav>
+        </aside>
+        <div className="min-w-0 flex-1">{children}</div>
+      </div>
+      <SiteFooter />
+    </div>
+  );
+}
diff --git a/apps/storefront/src/app/(account)/account/orders/page.tsx b/apps/storefront/src/app/(account)/account/orders/page.tsx
new file mode 100644
index 0000000..9991a31
--- /dev/null
+++ b/apps/storefront/src/app/(account)/account/orders/page.tsx
@@ -0,0 +1,15 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Orders' };
+
+export default function OrdersPage() {
+  return (
+    <PageScaffold
+      title="Orders"
+      description="Order history and detail. Every line renders the snapshot taken at purchase time, never the live catalog."
+      milestone="M8 — customer account"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(account)/account/page.tsx b/apps/storefront/src/app/(account)/account/page.tsx
new file mode 100644
index 0000000..ce129ce
--- /dev/null
+++ b/apps/storefront/src/app/(account)/account/page.tsx
@@ -0,0 +1,15 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Account' };
+
+export default function AccountPage() {
+  return (
+    <PageScaffold
+      title="Account"
+      description="Overview: recent orders, saved addresses and profile at a glance."
+      milestone="M8 — customer account"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(account)/account/profile/page.tsx b/apps/storefront/src/app/(account)/account/profile/page.tsx
new file mode 100644
index 0000000..de2c7e2
--- /dev/null
+++ b/apps/storefront/src/app/(account)/account/profile/page.tsx
@@ -0,0 +1,15 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Profile' };
+
+export default function ProfilePage() {
+  return (
+    <PageScaffold
+      title="Profile"
+      description="Name, email, phone, password and marketing preferences."
+      milestone="M8 — customer account"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(account)/account/wishlist/page.tsx b/apps/storefront/src/app/(account)/account/wishlist/page.tsx
new file mode 100644
index 0000000..8a17876
--- /dev/null
+++ b/apps/storefront/src/app/(account)/account/wishlist/page.tsx
@@ -0,0 +1,15 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Wishlist' };
+
+export default function WishlistPage() {
+  return (
+    <PageScaffold
+      title="Wishlist"
+      description="Saved variants, and the signal source for back-in-stock notifications."
+      milestone="M8 — customer account"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(checkout)/checkout/page.tsx b/apps/storefront/src/app/(checkout)/checkout/page.tsx
new file mode 100644
index 0000000..3e2ca95
--- /dev/null
+++ b/apps/storefront/src/app/(checkout)/checkout/page.tsx
@@ -0,0 +1,15 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Checkout' };
+
+export default function CheckoutPage() {
+  return (
+    <PageScaffold
+      title="Checkout"
+      description="Contact, shipping address, delivery method, payment. Each step is server-validated; stock is reserved before a payment intent is created."
+      milestone="M5 — cart & checkout"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(checkout)/layout.tsx b/apps/storefront/src/app/(checkout)/layout.tsx
new file mode 100644
index 0000000..8754a50
--- /dev/null
+++ b/apps/storefront/src/app/(checkout)/layout.tsx
@@ -0,0 +1,22 @@
+import Link from 'next/link';
+
+import { routes } from '@/lib/routes';
+
+/** Minimal chrome: no nav, no footer links, nothing competing with completion. */
+export default function CheckoutLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <div className="flex min-h-screen flex-col">
+      <header className="border-ink-200 border-b">
+        <div className="px-gutter mx-auto flex h-16 max-w-4xl items-center justify-between">
+          <Link href={routes.home()} className="text-lg font-black uppercase tracking-tighter">
+            Sport<span className="text-volt-600">.</span>
+          </Link>
+          <span className="text-ink-400 text-xs font-semibold uppercase tracking-widest">
+            Secure checkout
+          </span>
+        </div>
+      </header>
+      <main className="flex-1">{children}</main>
+    </div>
+  );
+}
diff --git a/apps/storefront/src/app/(shop)/blog/page.tsx b/apps/storefront/src/app/(shop)/blog/page.tsx
new file mode 100644
index 0000000..07b1a3e
--- /dev/null
+++ b/apps/storefront/src/app/(shop)/blog/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Journal' };
+
+export default function BlogPage() {
+  return (
+    <PageScaffold
+      eyebrow="Journal"
+      title="Journal"
+      description="Editorial content served from the CMS module: training guides, drops, athlete stories."
+      milestone="M7 — content"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(shop)/cart/page.tsx b/apps/storefront/src/app/(shop)/cart/page.tsx
new file mode 100644
index 0000000..32f3647
--- /dev/null
+++ b/apps/storefront/src/app/(shop)/cart/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Your bag' };
+
+export default function CartPage() {
+  return (
+    <PageScaffold
+      eyebrow="Bag"
+      title="Your bag"
+      description="Line items with variant title and live availability. Totals are always recomputed by the API — the client never submits a price."
+      milestone="M5 — cart & checkout"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(shop)/collections/[slug]/page.tsx b/apps/storefront/src/app/(shop)/collections/[slug]/page.tsx
new file mode 100644
index 0000000..e89cf96
--- /dev/null
+++ b/apps/storefront/src/app/(shop)/collections/[slug]/page.tsx
@@ -0,0 +1,23 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+type PageProps = { params: Promise<{ slug: string }> };
+
+export async function generateMetadata({ params }: PageProps): Promise<Metadata> {
+  const { slug } = await params;
+  return { title: slug };
+}
+
+export default async function CollectionPage({ params }: PageProps) {
+  const { slug } = await params;
+
+  return (
+    <PageScaffold
+      eyebrow="Collection"
+      title={slug}
+      description="Editorial collection page: campaign banner, curated copy and the shared product grid."
+      milestone="M4 — storefront catalog"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(shop)/layout.tsx b/apps/storefront/src/app/(shop)/layout.tsx
new file mode 100644
index 0000000..9ef6eac
--- /dev/null
+++ b/apps/storefront/src/app/(shop)/layout.tsx
@@ -0,0 +1,17 @@
+import { SiteFooter } from '@/components/layout/site-footer';
+import { SiteHeader } from '@/components/layout/site-header';
+
+/**
+ * Chrome shared by every browsing route. Checkout deliberately sits in its own
+ * route group with a stripped-back layout — removing navigation from checkout
+ * is one of the highest-leverage conversion decisions there is.
+ */
+export default function ShopLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <div className="flex min-h-screen flex-col">
+      <SiteHeader />
+      <main className="flex-1">{children}</main>
+      <SiteFooter />
+    </div>
+  );
+}
diff --git a/apps/storefront/src/app/(shop)/men/page.tsx b/apps/storefront/src/app/(shop)/men/page.tsx
new file mode 100644
index 0000000..ee1a636
--- /dev/null
+++ b/apps/storefront/src/app/(shop)/men/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Men' };
+
+export default function MenPage() {
+  return (
+    <PageScaffold
+      eyebrow="Shop"
+      title="Men"
+      description="Gender-facet listing. Same product-grid feature as every other listing page, preset with gender=MEN."
+      milestone="M4 — storefront catalog"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(shop)/page.tsx b/apps/storefront/src/app/(shop)/page.tsx
new file mode 100644
index 0000000..90cbe6b
--- /dev/null
+++ b/apps/storefront/src/app/(shop)/page.tsx
@@ -0,0 +1,15 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Sport Store — Performance sportswear' };
+
+export default function HomePage() {
+  return (
+    <PageScaffold
+      title="Built for the work"
+      description="Homepage: hero, featured collections, new arrivals and sport entry points. Assembled from CMS-driven blocks so merchandisers can reorder the page without a deploy."
+      milestone="M4 — storefront catalog"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(shop)/products/[slug]/page.tsx b/apps/storefront/src/app/(shop)/products/[slug]/page.tsx
new file mode 100644
index 0000000..3547ef7
--- /dev/null
+++ b/apps/storefront/src/app/(shop)/products/[slug]/page.tsx
@@ -0,0 +1,33 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+type PageProps = { params: Promise<{ slug: string }> };
+
+export async function generateMetadata({ params }: PageProps): Promise<Metadata> {
+  const { slug } = await params;
+  // Replaced with a real fetch (title, description, OG image) once the catalog
+  // endpoints exist; PDP metadata is the single most important SEO surface here.
+  return { title: slug };
+}
+
+/**
+ * Product detail page.
+ *
+ * The page renders a Product, but everything purchasable on it is a
+ * ProductVariant: the colour swatches select an option value, the size buttons
+ * select another, and together they resolve to exactly one variant id with its
+ * own price and stock. The "Add to bag" button submits that variant id.
+ */
+export default async function ProductPage({ params }: PageProps) {
+  const { slug } = await params;
+
+  return (
+    <PageScaffold
+      eyebrow="Product"
+      title={slug}
+      description="Gallery, variant selector (colour → size → variant id), price with sale handling, availability, size guide and specifications."
+      milestone="M4 — storefront catalog"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(shop)/search/page.tsx b/apps/storefront/src/app/(shop)/search/page.tsx
new file mode 100644
index 0000000..eb0aa27
--- /dev/null
+++ b/apps/storefront/src/app/(shop)/search/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Search' };
+
+export default function SearchPage() {
+  return (
+    <PageScaffold
+      eyebrow="Search"
+      title="Search"
+      description="Full-text search over the catalog with the same facets as category listings. Backed by PostgreSQL FTS behind a SearchProvider interface."
+      milestone="M6 — search"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(shop)/sports/[sport]/page.tsx b/apps/storefront/src/app/(shop)/sports/[sport]/page.tsx
new file mode 100644
index 0000000..158de33
--- /dev/null
+++ b/apps/storefront/src/app/(shop)/sports/[sport]/page.tsx
@@ -0,0 +1,43 @@
+import type { Metadata } from 'next';
+import { notFound } from 'next/navigation';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+import { SPORT_NAV, isSportSlug } from '@/lib/routes';
+
+type PageProps = { params: Promise<{ sport: string }> };
+
+/**
+ * The sport facets are a fixed, small set, so the routes are pre-rendered at
+ * build time. Category pages, which are database-driven, will use generateStaticParams
+ * against the API instead.
+ */
+export function generateStaticParams() {
+  return SPORT_NAV.map((sport) => ({ sport: sport.slug }));
+}
+
+export async function generateMetadata({ params }: PageProps): Promise<Metadata> {
+  const { sport } = await params;
+  const match = SPORT_NAV.find((entry) => entry.slug === sport);
+  return { title: match ? match.label : 'Sports' };
+}
+
+export default async function SportPage({ params }: PageProps) {
+  const { sport } = await params;
+
+  // Unknown facet is a 404, not an empty grid: empty results for a nonexistent
+  // URL are an SEO liability and hide typos in internal links.
+  if (!isSportSlug(sport)) {
+    notFound();
+  }
+
+  const label = SPORT_NAV.find((entry) => entry.slug === sport)?.label ?? sport;
+
+  return (
+    <PageScaffold
+      eyebrow="Sports"
+      title={label}
+      description="Sport-facet listing. Same product-grid feature as every other listing page, preset with this sport."
+      milestone="M4 — storefront catalog"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/(shop)/women/page.tsx b/apps/storefront/src/app/(shop)/women/page.tsx
new file mode 100644
index 0000000..5ca8e4f
--- /dev/null
+++ b/apps/storefront/src/app/(shop)/women/page.tsx
@@ -0,0 +1,16 @@
+import type { Metadata } from 'next';
+
+import { PageScaffold } from '@/components/layout/page-scaffold';
+
+export const metadata: Metadata = { title: 'Women' };
+
+export default function WomenPage() {
+  return (
+    <PageScaffold
+      eyebrow="Shop"
+      title="Women"
+      description="Gender-facet listing. Same product-grid feature as every other listing page, preset with gender=WOMEN."
+      milestone="M4 — storefront catalog"
+    />
+  );
+}
diff --git a/apps/storefront/src/app/layout.tsx b/apps/storefront/src/app/layout.tsx
new file mode 100644
index 0000000..c1b5a87
--- /dev/null
+++ b/apps/storefront/src/app/layout.tsx
@@ -0,0 +1,27 @@
+import type { Metadata, Viewport } from 'next';
+
+import '@/styles/globals.css';
+
+export const metadata: Metadata = {
+  title: {
+    default: 'Sport Store — Performance sportswear',
+    template: '%s | Sport Store',
+  },
+  description:
+    'Performance sportswear for running, football, training, gym, badminton and lifestyle.',
+  metadataBase: new URL(process.env.NEXT_PUBLIC_SITE_URL ?? 'http://localhost:3000'),
+};
+
+export const viewport: Viewport = {
+  themeColor: '#111111',
+  width: 'device-width',
+  initialScale: 1,
+};
+
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <html lang="vi" suppressHydrationWarning>
+      <body className="min-h-screen antialiased">{children}</body>
+    </html>
+  );
+}
diff --git a/apps/storefront/src/app/not-found.tsx b/apps/storefront/src/app/not-found.tsx
new file mode 100644
index 0000000..067cff0
--- /dev/null
+++ b/apps/storefront/src/app/not-found.tsx
@@ -0,0 +1,18 @@
+import Link from 'next/link';
+
+import { Button } from '@sport/ui';
+
+export default function NotFound() {
+  return (
+    <div className="max-w-page px-gutter mx-auto flex min-h-screen flex-col items-center justify-center text-center">
+      <p className="text-ink-400 text-xs font-semibold uppercase tracking-widest">404</p>
+      <h1 className="mt-4 text-5xl font-black uppercase">Nothing here</h1>
+      <p className="text-ink-500 mt-4 max-w-md">
+        That page has moved or never existed. The gear is still where you left it.
+      </p>
+      <Link href="/" className="mt-8">
+        <Button>Back to shop</Button>
+      </Link>
+    </div>
+  );
+}
diff --git a/apps/storefront/src/components/layout/page-scaffold.tsx b/apps/storefront/src/components/layout/page-scaffold.tsx
new file mode 100644
index 0000000..d0cb305
--- /dev/null
+++ b/apps/storefront/src/components/layout/page-scaffold.tsx
@@ -0,0 +1,35 @@
+import { Badge } from '@sport/ui';
+
+/**
+ * Temporary scaffold used by every route in the skeleton.
+ *
+ * It exists so the route tree, layouts and navigation are real and clickable
+ * before any feature is built — and so it is obvious at a glance which screens
+ * are still placeholders. Each page deletes this as its feature lands.
+ */
+export function PageScaffold({
+  eyebrow,
+  title,
+  description,
+  milestone,
+}: {
+  eyebrow?: string;
+  title: string;
+  description: string;
+  milestone: string;
+}) {
+  return (
+    <div className="max-w-page px-gutter mx-auto py-20">
+      {eyebrow ? (
+        <p className="text-ink-400 text-xs font-semibold uppercase tracking-widest">{eyebrow}</p>
+      ) : null}
+
+      <h1 className="mt-3 text-4xl font-black uppercase sm:text-6xl">{title}</h1>
+      <p className="text-ink-500 mt-5 max-w-2xl text-base">{description}</p>
+
+      <div className="mt-8">
+        <Badge variant="outline">Planned: {milestone}</Badge>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/storefront/src/components/layout/site-footer.tsx b/apps/storefront/src/components/layout/site-footer.tsx
new file mode 100644
index 0000000..940c164
--- /dev/null
+++ b/apps/storefront/src/components/layout/site-footer.tsx
@@ -0,0 +1,74 @@
+import Link from 'next/link';
+
+import { SPORT_NAV, routes } from '@/lib/routes';
+
+export function SiteFooter() {
+  return (
+    <footer className="border-ink-200 bg-ink-950 text-ink-100 mt-24 border-t">
+      <div className="max-w-page px-gutter mx-auto grid gap-10 py-16 sm:grid-cols-2 lg:grid-cols-4">
+        <div>
+          <p className="text-lg font-black uppercase tracking-tighter text-white">
+            Sport<span className="text-volt-500">.</span>
+          </p>
+          <p className="text-ink-400 mt-3 max-w-xs text-sm">
+            Performance sportswear, built for training days and the ones after.
+          </p>
+        </div>
+
+        <nav aria-label="Shop">
+          <h2 className="text-xs font-semibold uppercase tracking-widest text-white">Shop</h2>
+          <ul className="text-ink-400 mt-4 space-y-2 text-sm">
+            <li>
+              <Link href={routes.men()} className="hover:text-white">
+                Men
+              </Link>
+            </li>
+            <li>
+              <Link href={routes.women()} className="hover:text-white">
+                Women
+              </Link>
+            </li>
+          </ul>
+        </nav>
+
+        <nav aria-label="Sports">
+          <h2 className="text-xs font-semibold uppercase tracking-widest text-white">Sports</h2>
+          <ul className="text-ink-400 mt-4 space-y-2 text-sm">
+            {SPORT_NAV.map((sport) => (
+              <li key={sport.slug}>
+                <Link href={routes.sport(sport.slug)} className="hover:text-white">
+                  {sport.label}
+                </Link>
+              </li>
+            ))}
+          </ul>
+        </nav>
+
+        <nav aria-label="Account">
+          <h2 className="text-xs font-semibold uppercase tracking-widest text-white">Account</h2>
+          <ul className="text-ink-400 mt-4 space-y-2 text-sm">
+            <li>
+              <Link href={routes.accountOrders()} className="hover:text-white">
+                Orders
+              </Link>
+            </li>
+            <li>
+              <Link href={routes.accountWishlist()} className="hover:text-white">
+                Wishlist
+              </Link>
+            </li>
+            <li>
+              <Link href={routes.blog()} className="hover:text-white">
+                Journal
+              </Link>
+            </li>
+          </ul>
+        </nav>
+      </div>
+
+      <div className="border-ink-800 text-ink-500 border-t py-6 text-center text-xs">
+        © {new Date().getFullYear()} Sport Store.
+      </div>
+    </footer>
+  );
+}
diff --git a/apps/storefront/src/components/layout/site-header.tsx b/apps/storefront/src/components/layout/site-header.tsx
new file mode 100644
index 0000000..3bc2623
--- /dev/null
+++ b/apps/storefront/src/components/layout/site-header.tsx
@@ -0,0 +1,56 @@
+import Link from 'next/link';
+
+import { SPORT_NAV, routes } from '@/lib/routes';
+
+/**
+ * Server Component. It renders no interactive state, so none of it ships to the
+ * browser — the mobile menu and cart badge will be small Client Components
+ * mounted inside it rather than turning the whole header into one.
+ */
+export function SiteHeader() {
+  return (
+    <header className="border-ink-200 sticky top-0 z-50 border-b bg-white/95 backdrop-blur">
+      <div className="max-w-page px-gutter mx-auto flex h-16 items-center gap-8">
+        <Link href={routes.home()} className="text-lg font-black uppercase tracking-tighter">
+          Sport<span className="text-volt-600">.</span>
+        </Link>
+
+        <nav aria-label="Main" className="hidden items-center gap-6 md:flex">
+          <Link
+            href={routes.men()}
+            className="hover:text-volt-600 text-xs font-semibold uppercase tracking-widest"
+          >
+            Men
+          </Link>
+          <Link
+            href={routes.women()}
+            className="hover:text-volt-600 text-xs font-semibold uppercase tracking-widest"
+          >
+            Women
+          </Link>
+          {SPORT_NAV.map((sport) => (
+            <Link
+              key={sport.slug}
+              href={routes.sport(sport.slug)}
+              className="hover:text-volt-600 text-xs font-semibold uppercase tracking-widest"
+            >
+              {sport.label}
+            </Link>
+          ))}
+        </nav>
+
+        <div className="ml-auto flex items-center gap-5 text-xs font-semibold uppercase tracking-widest">
+          <Link href={routes.search()} className="hover:text-volt-600">
+            Search
+          </Link>
+          <Link href={routes.account()} className="hover:text-volt-600">
+            Account
+          </Link>
+          <Link href={routes.cart()} className="hover:text-volt-600">
+            Cart
+          </Link>
+        </div>
+      </div>
+    </header>
+  );
+}
diff --git a/apps/storefront/src/features/account/README.md b/apps/storefront/src/features/account/README.md
new file mode 100644
index 0000000..0b5f2b6
--- /dev/null
+++ b/apps/storefront/src/features/account/README.md
@@ -0,0 +1,24 @@
+# feature: account
+
+Profile, addresses and account settings.
+
+## Structure
+
+```
+account/
+├── components/   # UI specific to this feature
+├── hooks/        # React hooks (client-side only)
+├── services/     # Calls into @sport/api-client, plus query keys
+├── stores/       # Zustand slices, only if this feature owns client state
+└── types.ts      # View-model types. Domain types come from @sport/types.
+```
+
+## Rules
+
+- A feature may import from `@/components`, `@/lib`, `@/hooks` and any
+  `@sport/*` package.
+- A feature must **not** import from another feature's internals. If two
+  features need the same thing, it moves up to `@/components` or `@/lib`.
+  Cross-feature imports are what turn a feature folder into a second, worse
+  module system.
+- Data fetching goes through `@sport/api-client`. No raw `fetch` to the API.
diff --git a/apps/storefront/src/features/auth/README.md b/apps/storefront/src/features/auth/README.md
new file mode 100644
index 0000000..ab337a7
--- /dev/null
+++ b/apps/storefront/src/features/auth/README.md
@@ -0,0 +1,24 @@
+# feature: auth
+
+Sign in, register, password reset, and the session store the rest of the app reads.
+
+## Structure
+
+```
+auth/
+├── components/   # UI specific to this feature
+├── hooks/        # React hooks (client-side only)
+├── services/     # Calls into @sport/api-client, plus query keys
+├── stores/       # Zustand slices, only if this feature owns client state
+└── types.ts      # View-model types. Domain types come from @sport/types.
+```
+
+## Rules
+
+- A feature may import from `@/components`, `@/lib`, `@/hooks` and any
+  `@sport/*` package.
+- A feature must **not** import from another feature's internals. If two
+  features need the same thing, it moves up to `@/components` or `@/lib`.
+  Cross-feature imports are what turn a feature folder into a second, worse
+  module system.
+- Data fetching goes through `@sport/api-client`. No raw `fetch` to the API.
diff --git a/apps/storefront/src/features/cart/README.md b/apps/storefront/src/features/cart/README.md
new file mode 100644
index 0000000..6fc64bc
--- /dev/null
+++ b/apps/storefront/src/features/cart/README.md
@@ -0,0 +1,24 @@
+# feature: cart
+
+Bag drawer and page, line-item mutations, optimistic quantity updates.
+
+## Structure
+
+```
+cart/
+├── components/   # UI specific to this feature
+├── hooks/        # React hooks (client-side only)
+├── services/     # Calls into @sport/api-client, plus query keys
+├── stores/       # Zustand slices, only if this feature owns client state
+└── types.ts      # View-model types. Domain types come from @sport/types.
+```
+
+## Rules
+
+- A feature may import from `@/components`, `@/lib`, `@/hooks` and any
+  `@sport/*` package.
+- A feature must **not** import from another feature's internals. If two
+  features need the same thing, it moves up to `@/components` or `@/lib`.
+  Cross-feature imports are what turn a feature folder into a second, worse
+  module system.
+- Data fetching goes through `@sport/api-client`. No raw `fetch` to the API.
diff --git a/apps/storefront/src/features/category/README.md b/apps/storefront/src/features/category/README.md
new file mode 100644
index 0000000..5865ddc
--- /dev/null
+++ b/apps/storefront/src/features/category/README.md
@@ -0,0 +1,24 @@
+# feature: category
+
+Category landing pages, breadcrumbs and the facet sidebar.
+
+## Structure
+
+```
+category/
+├── components/   # UI specific to this feature
+├── hooks/        # React hooks (client-side only)
+├── services/     # Calls into @sport/api-client, plus query keys
+├── stores/       # Zustand slices, only if this feature owns client state
+└── types.ts      # View-model types. Domain types come from @sport/types.
+```
+
+## Rules
+
+- A feature may import from `@/components`, `@/lib`, `@/hooks` and any
+  `@sport/*` package.
+- A feature must **not** import from another feature's internals. If two
+  features need the same thing, it moves up to `@/components` or `@/lib`.
+  Cross-feature imports are what turn a feature folder into a second, worse
+  module system.
+- Data fetching goes through `@sport/api-client`. No raw `fetch` to the API.
diff --git a/apps/storefront/src/features/checkout/README.md b/apps/storefront/src/features/checkout/README.md
new file mode 100644
index 0000000..ce8e306
--- /dev/null
+++ b/apps/storefront/src/features/checkout/README.md
@@ -0,0 +1,24 @@
+# feature: checkout
+
+Multi-step checkout: address, delivery, payment, review.
+
+## Structure
+
+```
+checkout/
+├── components/   # UI specific to this feature
+├── hooks/        # React hooks (client-side only)
+├── services/     # Calls into @sport/api-client, plus query keys
+├── stores/       # Zustand slices, only if this feature owns client state
+└── types.ts      # View-model types. Domain types come from @sport/types.
+```
+
+## Rules
+
+- A feature may import from `@/components`, `@/lib`, `@/hooks` and any
+  `@sport/*` package.
+- A feature must **not** import from another feature's internals. If two
+  features need the same thing, it moves up to `@/components` or `@/lib`.
+  Cross-feature imports are what turn a feature folder into a second, worse
+  module system.
+- Data fetching goes through `@sport/api-client`. No raw `fetch` to the API.
diff --git a/apps/storefront/src/features/collection/README.md b/apps/storefront/src/features/collection/README.md
new file mode 100644
index 0000000..31d525f
--- /dev/null
+++ b/apps/storefront/src/features/collection/README.md
@@ -0,0 +1,24 @@
+# feature: collection
+
+Campaign and editorial collection pages.
+
+## Structure
+
+```
+collection/
+├── components/   # UI specific to this feature
+├── hooks/        # React hooks (client-side only)
+├── services/     # Calls into @sport/api-client, plus query keys
+├── stores/       # Zustand slices, only if this feature owns client state
+└── types.ts      # View-model types. Domain types come from @sport/types.
+```
+
+## Rules
+
+- A feature may import from `@/components`, `@/lib`, `@/hooks` and any
+  `@sport/*` package.
+- A feature must **not** import from another feature's internals. If two
+  features need the same thing, it moves up to `@/components` or `@/lib`.
+  Cross-feature imports are what turn a feature folder into a second, worse
+  module system.
+- Data fetching goes through `@sport/api-client`. No raw `fetch` to the API.
diff --git a/apps/storefront/src/features/order/README.md b/apps/storefront/src/features/order/README.md
new file mode 100644
index 0000000..c3c89a7
--- /dev/null
+++ b/apps/storefront/src/features/order/README.md
@@ -0,0 +1,24 @@
+# feature: order
+
+Order confirmation and order history views.
+
+## Structure
+
+```
+order/
+├── components/   # UI specific to this feature
+├── hooks/        # React hooks (client-side only)
+├── services/     # Calls into @sport/api-client, plus query keys
+├── stores/       # Zustand slices, only if this feature owns client state
+└── types.ts      # View-model types. Domain types come from @sport/types.
+```
+
+## Rules
+
+- A feature may import from `@/components`, `@/lib`, `@/hooks` and any
+  `@sport/*` package.
+- A feature must **not** import from another feature's internals. If two
+  features need the same thing, it moves up to `@/components` or `@/lib`.
+  Cross-feature imports are what turn a feature folder into a second, worse
+  module system.
+- Data fetching goes through `@sport/api-client`. No raw `fetch` to the API.
diff --git a/apps/storefront/src/features/product/README.md b/apps/storefront/src/features/product/README.md
new file mode 100644
index 0000000..89526a2
--- /dev/null
+++ b/apps/storefront/src/features/product/README.md
@@ -0,0 +1,24 @@
+# feature: product
+
+PDP: gallery, variant selector, price display, add-to-bag. Owns `<ProductCard>`.
+
+## Structure
+
+```
+product/
+├── components/   # UI specific to this feature
+├── hooks/        # React hooks (client-side only)
+├── services/     # Calls into @sport/api-client, plus query keys
+├── stores/       # Zustand slices, only if this feature owns client state
+└── types.ts      # View-model types. Domain types come from @sport/types.
+```
+
+## Rules
+
+- A feature may import from `@/components`, `@/lib`, `@/hooks` and any
+  `@sport/*` package.
+- A feature must **not** import from another feature's internals. If two
+  features need the same thing, it moves up to `@/components` or `@/lib`.
+  Cross-feature imports are what turn a feature folder into a second, worse
+  module system.
+- Data fetching goes through `@sport/api-client`. No raw `fetch` to the API.
diff --git a/apps/storefront/src/features/search/README.md b/apps/storefront/src/features/search/README.md
new file mode 100644
index 0000000..1b39fb8
--- /dev/null
+++ b/apps/storefront/src/features/search/README.md
@@ -0,0 +1,24 @@
+# feature: search
+
+Search input, suggestions, results and the shared filter state.
+
+## Structure
+
+```
+search/
+├── components/   # UI specific to this feature
+├── hooks/        # React hooks (client-side only)
+├── services/     # Calls into @sport/api-client, plus query keys
+├── stores/       # Zustand slices, only if this feature owns client state
+└── types.ts      # View-model types. Domain types come from @sport/types.
+```
+
+## Rules
+
+- A feature may import from `@/components`, `@/lib`, `@/hooks` and any
+  `@sport/*` package.
+- A feature must **not** import from another feature's internals. If two
+  features need the same thing, it moves up to `@/components` or `@/lib`.
+  Cross-feature imports are what turn a feature folder into a second, worse
+  module system.
+- Data fetching goes through `@sport/api-client`. No raw `fetch` to the API.
diff --git a/apps/storefront/src/features/wishlist/README.md b/apps/storefront/src/features/wishlist/README.md
new file mode 100644
index 0000000..407b1e8
--- /dev/null
+++ b/apps/storefront/src/features/wishlist/README.md
@@ -0,0 +1,24 @@
+# feature: wishlist
+
+Save-for-later toggles and the wishlist page.
+
+## Structure
+
+```
+wishlist/
+├── components/   # UI specific to this feature
+├── hooks/        # React hooks (client-side only)
+├── services/     # Calls into @sport/api-client, plus query keys
+├── stores/       # Zustand slices, only if this feature owns client state
+└── types.ts      # View-model types. Domain types come from @sport/types.
+```
+
+## Rules
+
+- A feature may import from `@/components`, `@/lib`, `@/hooks` and any
+  `@sport/*` package.
+- A feature must **not** import from another feature's internals. If two
+  features need the same thing, it moves up to `@/components` or `@/lib`.
+  Cross-feature imports are what turn a feature folder into a second, worse
+  module system.
+- Data fetching goes through `@sport/api-client`. No raw `fetch` to the API.
diff --git a/apps/storefront/src/hooks/README.md b/apps/storefront/src/hooks/README.md
new file mode 100644
index 0000000..da7552b
--- /dev/null
+++ b/apps/storefront/src/hooks/README.md
@@ -0,0 +1,3 @@
+# hooks/
+
+Cross-feature React hooks (media queries, debounce, local storage). Anything feature-specific lives under `features/<name>/hooks/`.
diff --git a/apps/storefront/src/lib/api.ts b/apps/storefront/src/lib/api.ts
new file mode 100644
index 0000000..9bc1e2d
--- /dev/null
+++ b/apps/storefront/src/lib/api.ts
@@ -0,0 +1,28 @@
+import { createApiClient } from '@sport/api-client';
+
+import { clientEnv, getServerEnv } from './env';
+
+/**
+ * Two clients, because the two runtimes have different needs:
+ *
+ *  - `serverApi` runs inside React Server Components and route handlers. In
+ *    Docker it reaches the API container over the internal network, skipping
+ *    the public hostname and TLS entirely.
+ *  - `browserApi` runs in the browser, hits the public API and carries the
+ *    access token.
+ *
+ * Both are the same typed client from @sport/api-client. No component anywhere
+ * calls `fetch` against the API directly.
+ */
+export function getServerApi() {
+  return createApiClient({
+    baseUrl: getServerEnv().API_INTERNAL_URL,
+    // Server-side requests are anonymous by default. Authenticated server
+    // fetches pass the token explicitly, per request, once auth lands.
+  });
+}
+
+export const browserApi = createApiClient({
+  baseUrl: clientEnv.NEXT_PUBLIC_API_URL,
+  getAccessToken: () => null, // wired to the auth store in the auth milestone
+});
diff --git a/apps/storefront/src/lib/env.ts b/apps/storefront/src/lib/env.ts
new file mode 100644
index 0000000..a680001
--- /dev/null
+++ b/apps/storefront/src/lib/env.ts
@@ -0,0 +1,32 @@
+import { z } from 'zod';
+
+/**
+ * Client-visible configuration, validated at module load.
+ *
+ * Next.js inlines `process.env.NEXT_PUBLIC_*` at build time, which means the
+ * literal reference below cannot be shortened to a dynamic lookup — that is why
+ * each key is written out in full.
+ */
+const clientEnvSchema = z.object({
+  NEXT_PUBLIC_API_URL: z.url(),
+  NEXT_PUBLIC_SITE_URL: z.url(),
+});
+
+export const clientEnv = clientEnvSchema.parse({
+  NEXT_PUBLIC_API_URL: process.env.NEXT_PUBLIC_API_URL,
+  NEXT_PUBLIC_SITE_URL: process.env.NEXT_PUBLIC_SITE_URL,
+});
+
+/**
+ * Server-only configuration. Importing this from a Client Component is a build
+ * error, which is exactly the guardrail we want.
+ */
+export function getServerEnv() {
+  return z
+    .object({
+      API_INTERNAL_URL: z.url(),
+    })
+    .parse({
+      API_INTERNAL_URL: process.env.API_INTERNAL_URL ?? clientEnv.NEXT_PUBLIC_API_URL,
+    });
+}
diff --git a/apps/storefront/src/lib/format.ts b/apps/storefront/src/lib/format.ts
new file mode 100644
index 0000000..56a096c
--- /dev/null
+++ b/apps/storefront/src/lib/format.ts
@@ -0,0 +1,31 @@
+import { MINOR_UNIT_SCALE, type Money } from '@sport/types';
+
+const formatters = new Map<string, Intl.NumberFormat>();
+
+/**
+ * Money is stored and transferred as an integer in minor units; it is converted
+ * to a display string exactly here and nowhere else. No component ever does its
+ * own division — that is how rounding bugs reach a checkout total.
+ */
+export function formatMoney(money: Money, locale = 'vi-VN'): string {
+  const cacheKey = `${locale}:${money.currency}`;
+  let formatter = formatters.get(cacheKey);
+
+  if (!formatter) {
+    const scale = MINOR_UNIT_SCALE[money.currency];
+    formatter = new Intl.NumberFormat(locale, {
+      style: 'currency',
+      currency: money.currency,
+      minimumFractionDigits: scale,
+      maximumFractionDigits: scale,
+    });
+    formatters.set(cacheKey, formatter);
+  }
+
+  return formatter.format(money.amount / 10 ** MINOR_UNIT_SCALE[money.currency]);
+}
+
+export function formatDiscountPercent(price: Money, compareAt: Money): number {
+  if (compareAt.amount <= 0) return 0;
+  return Math.round(((compareAt.amount - price.amount) / compareAt.amount) * 100);
+}
diff --git a/apps/storefront/src/lib/routes.ts b/apps/storefront/src/lib/routes.ts
new file mode 100644
index 0000000..d053882
--- /dev/null
+++ b/apps/storefront/src/lib/routes.ts
@@ -0,0 +1,46 @@
+/**
+ * Every internal URL is built here.
+ *
+ * Hard-coded template strings scattered through components are how a URL
+ * structure change becomes a week of broken links. With `typedRoutes` on, these
+ * helpers are also checked against the actual route tree at build time.
+ */
+export const routes = {
+  home: () => '/',
+
+  men: () => '/men',
+  women: () => '/women',
+
+  sport: (slug: string) => `/sports/${slug}`,
+  product: (slug: string) => `/products/${slug}`,
+  collection: (slug: string) => `/collections/${slug}`,
+
+  search: (query?: string) => (query ? `/search?q=${encodeURIComponent(query)}` : '/search'),
+
+  cart: () => '/cart',
+  checkout: () => '/checkout',
+
+  account: () => '/account',
+  accountProfile: () => '/account/profile',
+  accountOrders: () => '/account/orders',
+  accountAddresses: () => '/account/addresses',
+  accountWishlist: () => '/account/wishlist',
+
+  blog: () => '/blog',
+} as const;
+
+/** The sport facets that back `/sports/[sport]`. */
+export const SPORT_NAV = [
+  { slug: 'running', label: 'Running' },
+  { slug: 'football', label: 'Football' },
+  { slug: 'training', label: 'Training' },
+  { slug: 'gym', label: 'Gym' },
+  { slug: 'badminton', label: 'Badminton' },
+  { slug: 'lifestyle', label: 'Lifestyle' },
+] as const;
+
+export type SportSlug = (typeof SPORT_NAV)[number]['slug'];
+
+export function isSportSlug(value: string): value is SportSlug {
+  return SPORT_NAV.some((sport) => sport.slug === value);
+}
diff --git a/apps/storefront/src/services/README.md b/apps/storefront/src/services/README.md
new file mode 100644
index 0000000..6770b17
--- /dev/null
+++ b/apps/storefront/src/services/README.md
@@ -0,0 +1,3 @@
+# services/
+
+Cross-feature data access: the React Query client, shared query-key factories and cache-invalidation helpers.
diff --git a/apps/storefront/src/stores/README.md b/apps/storefront/src/stores/README.md
new file mode 100644
index 0000000..d81ff4a
--- /dev/null
+++ b/apps/storefront/src/stores/README.md
@@ -0,0 +1,3 @@
+# stores/
+
+Global client state (Zustand): cart drawer visibility, auth session, recently viewed. Server data belongs in React Query, not here — duplicating it is the most common source of stale UI.
diff --git a/apps/storefront/src/styles/globals.css b/apps/storefront/src/styles/globals.css
new file mode 100644
index 0000000..da64638
--- /dev/null
+++ b/apps/storefront/src/styles/globals.css
@@ -0,0 +1,25 @@
+@import 'tailwindcss';
+@import '@sport/config/tailwind/theme.css';
+
+/* Tailwind v4 scans the importing app by default; workspace packages must be
+   registered explicitly or their utility classes get purged. */
+@source "../../../../packages/ui/src";
+
+:root {
+  /* No web font is loaded yet — the design system reads --font-inter, so the
+     stack is defined once here and swapping in a real font later touches only
+     this line plus a next/font import. */
+  --font-inter: 'Inter', ui-sans-serif, system-ui, -apple-system, 'Segoe UI', Roboto, sans-serif;
+  --font-display: var(--font-inter);
+}
+
+html,
+body {
+  height: 100%;
+}
+
+body {
+  background-color: var(--color-white);
+  color: var(--color-ink-950);
+  font-family: var(--font-sans);
+}
diff --git a/apps/storefront/src/types/README.md b/apps/storefront/src/types/README.md
new file mode 100644
index 0000000..935c15b
--- /dev/null
+++ b/apps/storefront/src/types/README.md
@@ -0,0 +1,3 @@
+# types/
+
+View-model types local to the storefront. Domain and API types are imported from `@sport/types` and are never redeclared here.
diff --git a/apps/storefront/tsconfig.json b/apps/storefront/tsconfig.json
new file mode 100644
index 0000000..835d47a
--- /dev/null
+++ b/apps/storefront/tsconfig.json
@@ -0,0 +1,18 @@
+{
+  "extends": "@sport/config/typescript/nextjs.json",
+  "compilerOptions": {
+    "baseUrl": ".",
+    "paths": {
+      "@/*": ["src/*"]
+    }
+  },
+  "include": [
+    "next-env.d.ts",
+    "src/**/*.ts",
+    "src/**/*.tsx",
+    ".next/types/**/*.ts",
+    "*.ts",
+    "*.mjs"
+  ],
+  "exclude": ["node_modules", ".next"]
+}
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..8dca16e
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,188 @@
+# ---------------------------------------------------------------------------
+# Local development.
+#
+# Default (`pnpm infra:up`): backing services only — PostgreSQL, Redis, MinIO,
+# Mailpit. The three applications run on the host via `pnpm dev`, because
+# native file watching and HMR are dramatically faster than bind-mounted
+# containers, especially on macOS.
+#
+# Full stack (`docker compose --profile full up`): everything containerised
+# behind Nginx. This mirrors production topology and is what you use to verify
+# routing, headers and container builds before shipping.
+# ---------------------------------------------------------------------------
+
+name: sport-store
+
+services:
+  postgres:
+    image: postgres:17-alpine
+    container_name: sport-postgres
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-sport}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-sport}
+      POSTGRES_DB: ${POSTGRES_DB:-sport_store}
+      # Deterministic collation: index ordering must not depend on the host.
+      POSTGRES_INITDB_ARGS: "--locale=C --encoding=UTF8"
+    ports:
+      - "${POSTGRES_PORT:-5433}:5432"
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-sport} -d ${POSTGRES_DB:-sport_store}"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+  redis:
+    image: redis:7-alpine
+    container_name: sport-redis
+    restart: unless-stopped
+    # Cache-first policy: evict rather than refuse writes. Nothing in Redis is
+    # a system of record, so eviction is always preferable to an outage.
+    command: redis-server --maxmemory 256mb --maxmemory-policy allkeys-lru --appendonly no
+    ports:
+      - "${REDIS_PORT:-6380}:6379"
+    volumes:
+      - redis-data:/data
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 5s
+      timeout: 3s
+      retries: 10
+
+  # Stands in for Cloudflare R2. Same S3 API, so application code is identical.
+  minio:
+    image: minio/minio:latest
+    container_name: sport-minio
+    restart: unless-stopped
+    command: server /data --console-address ":9001"
+    environment:
+      MINIO_ROOT_USER: ${STORAGE_ACCESS_KEY_ID:-sportminio}
+      MINIO_ROOT_PASSWORD: ${STORAGE_SECRET_ACCESS_KEY:-sportminio}
+    ports:
+      - "9000:9000"
+      - "9001:9001"
+    volumes:
+      - minio-data:/data
+    healthcheck:
+      test: ["CMD", "mc", "ready", "local"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+  minio-init:
+    image: minio/mc:latest
+    container_name: sport-minio-init
+    depends_on:
+      minio:
+        condition: service_healthy
+    entrypoint: >
+      /bin/sh -c "
+      mc alias set local http://minio:9000 ${STORAGE_ACCESS_KEY_ID:-sportminio} ${STORAGE_SECRET_ACCESS_KEY:-sportminio};
+      mc mb --ignore-existing local/${STORAGE_BUCKET:-sport-media};
+      mc anonymous set download local/${STORAGE_BUCKET:-sport-media};
+      echo 'MinIO bucket ready';
+      "
+
+  # Catches every outgoing email locally. UI on http://localhost:8025
+  mailpit:
+    image: axllent/mailpit:latest
+    container_name: sport-mailpit
+    restart: unless-stopped
+    ports:
+      - "1025:1025"
+      - "8025:8025"
+
+  # ------------------------------------------------------------------------
+  # Application containers — `--profile full` only.
+  # ------------------------------------------------------------------------
+
+  api:
+    profiles: ["full"]
+    build:
+      context: .
+      dockerfile: infrastructure/docker/api.Dockerfile
+    container_name: sport-api
+    restart: unless-stopped
+    env_file: apps/api/.env
+    environment:
+      DATABASE_URL: postgresql://${POSTGRES_USER:-sport}:${POSTGRES_PASSWORD:-sport}@postgres:5432/${POSTGRES_DB:-sport_store}?schema=public
+      REDIS_URL: redis://redis:6379
+      STORAGE_ENDPOINT: http://minio:9000
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    expose:
+      - "4000"
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "fetch('http://127.0.0.1:4000/api/v1/health/live').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
+        ]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 20s
+
+  storefront:
+    profiles: ["full"]
+    build:
+      context: .
+      dockerfile: infrastructure/docker/storefront.Dockerfile
+      args:
+        NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-http://localhost/api}
+        NEXT_PUBLIC_SITE_URL: ${NEXT_PUBLIC_SITE_URL:-http://localhost}
+    container_name: sport-storefront
+    restart: unless-stopped
+    environment:
+      # Server-side rendering talks to the API container directly.
+      API_INTERNAL_URL: http://api:4000
+    depends_on:
+      api:
+        condition: service_healthy
+    expose:
+      - "3000"
+
+  admin:
+    profiles: ["full"]
+    build:
+      context: .
+      dockerfile: infrastructure/docker/admin.Dockerfile
+      args:
+        NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-http://localhost/api}
+        NEXT_PUBLIC_APP_URL: ${NEXT_PUBLIC_ADMIN_URL:-http://admin.localhost}
+    container_name: sport-admin
+    restart: unless-stopped
+    environment:
+      API_INTERNAL_URL: http://api:4000
+    depends_on:
+      api:
+        condition: service_healthy
+    expose:
+      - "3001"
+
+  nginx:
+    profiles: ["full"]
+    image: nginx:1.27-alpine
+    container_name: sport-nginx
+    restart: unless-stopped
+    ports:
+      - "80:80"
+    volumes:
+      - ./infrastructure/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
+      - ./infrastructure/nginx/conf.d:/etc/nginx/conf.d:ro
+    depends_on:
+      - storefront
+      - admin
+      - api
+
+volumes:
+  postgres-data:
+  redis-data:
+  minio-data:
diff --git a/docs/adr/0001-monorepo-with-pnpm-workspaces-and-turborepo.md b/docs/adr/0001-monorepo-with-pnpm-workspaces-and-turborepo.md
new file mode 100644
index 0000000..8409f87
--- /dev/null
+++ b/docs/adr/0001-monorepo-with-pnpm-workspaces-and-turborepo.md
@@ -0,0 +1,36 @@
+# ADR-0001: Monorepo with pnpm workspaces and Turborepo
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+Three deployable applications (storefront, admin, API) share domain types, validation
+rules and an HTTP client. Split across three repositories, every contract change becomes a
+version bump, a publish and three coordinated pull requests — and in practice the types drift
+because nobody wants to pay that cost for a one-field change.
+
+## Decision
+
+A single repository with pnpm workspaces for dependency linking and Turborepo for task
+orchestration and caching. Shared code lives in `packages/*`; deployables live in `apps/*`.
+
+`@sport/types`, `@sport/validation` and `@sport/api-client` compile to CommonJS + `.d.ts`
+because NestJS consumes them at runtime. `@sport/ui` ships raw TypeScript and is compiled by
+each Next.js app via `transpilePackages` — no build step, no watcher, faster HMR.
+
+Versions that must stay identical across the workspace (TypeScript, React, Next, Zod, ESLint)
+are pinned once in the `catalog:` block of `pnpm-workspace.yaml`.
+
+## Consequences
+
+A backend field rename surfaces as a frontend type error in the same commit. One
+lockfile, one CI pipeline, one lint configuration. The cost is a heavier initial install and
+the need for discipline about dependency direction (ADR-0004), which the ESLint boundary rules
+enforce mechanically.
+
+## Alternatives considered
+
+Polyrepo with a private npm registry — rejected: the publish/consume loop is
+slower than the entire feature it serves. Nx — comparable, but Turborepo's smaller surface fits
+a team that wants a build cache, not a build framework.
diff --git a/docs/adr/0002-modular-monolith-not-microservices.md b/docs/adr/0002-modular-monolith-not-microservices.md
new file mode 100644
index 0000000..3711bf8
--- /dev/null
+++ b/docs/adr/0002-modular-monolith-not-microservices.md
@@ -0,0 +1,38 @@
+# ADR-0002: Modular monolith, not microservices
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+The system will eventually need order processing, inventory, payments, search and
+notifications. That list reads like a microservice diagram, and the temptation is to start
+there. But on day one there is no traffic, no team boundary and no independent scaling
+requirement — only the cost of distributed transactions, network failure modes and per-service
+CI.
+
+## Decision
+
+One NestJS process, internally partitioned into modules that own their tables
+exclusively. Cross-module access happens two ways only: a synchronous call to the other
+module's `public/` service when an answer is needed now, or a domain event when something
+merely needs to react.
+
+Four modules — `inventory`, `orders`, `payments`, `search` — are marked EXTRACTION CANDIDATE
+and additionally forbidden from sharing transactions with the rest of the monolith.
+
+## Consequences
+
+A single deploy, a single database, real foreign keys and real transactions —
+which is exactly what an order/inventory/payment flow wants. Extraction stays possible because
+the boundaries are enforced now, while they are cheap to enforce.
+
+The risk is boundary erosion: one "quick" cross-module join and the seam is gone. This is why
+the rule is an ESLint error rather than a paragraph in a wiki.
+
+## Alternatives considered
+
+Microservices from day one — rejected as premature: it buys independent scaling
+nobody needs and pays in distributed-transaction complexity that a checkout flow can least
+afford. A single unstructured application — rejected: retrofitting boundaries after the fact
+is the expensive path.
diff --git a/docs/adr/0003-product-and-productvariant-as-separate-entities.md b/docs/adr/0003-product-and-productvariant-as-separate-entities.md
new file mode 100644
index 0000000..86dc952
--- /dev/null
+++ b/docs/adr/0003-product-and-productvariant-as-separate-entities.md
@@ -0,0 +1,39 @@
+# ADR-0003: Product and ProductVariant as separate entities
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+A "Running Shirt" in black, size M is a different physical good from the same shirt in
+white, size L: different barcode, different stock, potentially different price. Modelling
+`sizes: string[]` and `colors: string[]` on a product makes every one of those facts
+unrepresentable.
+
+## Decision
+
+`Product` is the marketing entity — it has a name, a slug and a page, and deliberately
+has no SKU, no price and no stock. It owns an ordered list of `ProductOption`s (Colour, Size),
+each owning ordered `ProductOptionValue`s. Every purchasable combination is a
+`ProductVariant` with its own SKU, price, sale price, barcode, weight and stock.
+
+`ProductVariantOptionValue` resolves a variant to exactly one value per option, with
+`@@id([variantId, optionId])` enforcing at the database level that a variant cannot have two
+colours. Stock lives in `StockLevel` keyed by (variant, location), never on the variant row.
+
+## Consequences
+
+Cart lines, order lines, stock movements and marketplace listings all reference a
+variant id — the same granularity Shopee, Lazada, TikTok Shop, ERP and POS systems use, so
+integrations map 1:1 instead of needing a translation layer. Adding a third option (width, fit)
+is data, not a migration.
+
+The cost is real: the PDP must resolve option selections to a variant, and the admin needs a
+variant-matrix editor rather than two text inputs. That cost is paid once and is the reason the
+model survives contact with a warehouse.
+
+## Alternatives considered
+
+Size/colour as columns on Product — rejected: cannot express per-combination stock
+or price, which is the entire job. A single flat SKU table with no product grouping — rejected:
+there would be nothing to hang a product page, gallery or description on.
diff --git a/docs/adr/0004-the-admin-dashboard-has-no-database-access.md b/docs/adr/0004-the-admin-dashboard-has-no-database-access.md
new file mode 100644
index 0000000..fc3e59a
--- /dev/null
+++ b/docs/adr/0004-the-admin-dashboard-has-no-database-access.md
@@ -0,0 +1,32 @@
+# ADR-0004: The admin dashboard has no database access
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+The admin is a Next.js application and could trivially import Prisma and query
+PostgreSQL from a Server Action. It would be faster to write. It would also create a second
+write path in which RBAC, validation and audit logging are re-implemented — or forgotten.
+
+## Decision
+
+The admin has no database driver, no Prisma client, no Redis client and no storage
+credentials. Every read and write goes through the REST API via `@sport/api-client`. The rule
+is enforced by ESLint (`no-restricted-imports` on `@prisma/client` and `ioredis` in both
+frontends) and by the absence of `DATABASE_URL` from the admin's environment.
+
+## Consequences
+
+Authorization is checked in exactly one place. The audit log cannot be bypassed.
+The API surface stays honest, because the admin is its most demanding consumer — and a future
+mobile app or partner integration inherits a proven API rather than a thin one.
+
+The cost is an extra network hop for back-office screens, which is irrelevant at back-office
+traffic levels.
+
+## Alternatives considered
+
+Direct database access from Server Actions — rejected for the reasons above.
+A separate "admin API" service — rejected: two APIs over one database is the same problem with
+more deployment.
diff --git a/docs/adr/0005-uri-based-api-versioning.md b/docs/adr/0005-uri-based-api-versioning.md
new file mode 100644
index 0000000..5362be1
--- /dev/null
+++ b/docs/adr/0005-uri-based-api-versioning.md
@@ -0,0 +1,31 @@
+# ADR-0005: URI-based API versioning
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+The API will outlive its first client. A mobile app, marketplace connectors and partner
+integrations will pin to whatever exists when they are written, and some of them will never be
+updated.
+
+## Decision
+
+`/api/v1/...`, via NestJS `VersioningType.URI` with `defaultVersion: '1'`. A version
+is introduced only for a genuinely breaking change; additive fields ship inside the current
+version. Old versions get a documented sunset date, not silent removal.
+
+## Consequences
+
+The version is visible in logs, in Nginx access logs, in CDN cache keys and in a
+curl command. Two versions can run side by side in one process, sharing services and differing
+only in controllers and mappers.
+
+URLs are slightly longer, and the version is technically part of the resource identity, which
+purists dislike. In exchange, nobody ever debugs a version mismatch caused by a missing header.
+
+## Alternatives considered
+
+Header-based (`Accept-Version`) — rejected: invisible in logs, easy to omit, and
+awkward for CDN caching. No versioning — rejected: it works right up until the first
+integration nobody can update.
diff --git a/docs/adr/0006-zod-schemas-shared-between-api-and-frontends.md b/docs/adr/0006-zod-schemas-shared-between-api-and-frontends.md
new file mode 100644
index 0000000..81dd954
--- /dev/null
+++ b/docs/adr/0006-zod-schemas-shared-between-api-and-frontends.md
@@ -0,0 +1,35 @@
+# ADR-0006: Zod schemas shared between API and frontends
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+Validation rules exist twice by default: once in the API and once in the form. They
+drift, and the drift shows up as a form that accepts input the server rejects.
+
+## Decision
+
+One Zod schema per input shape, defined in `@sport/validation` and imported by both
+sides. The API applies it through `ZodValidationPipe`; the frontends apply the same object to
+their forms. Zod was chosen over class-validator specifically because a class with decorators
+cannot cross into a React form, whereas a schema object can.
+
+Scope is deliberately limited to shape and format rules. Anything requiring database state —
+"is this coupon still valid", "is this variant in stock" — is a business rule and lives in the
+backend service layer.
+
+## Consequences
+
+A rule change happens once. Field-level errors come back keyed by dotted path
+(`items.0.quantity`), which forms consume directly. The parsed output carries coercions and
+defaults, so controllers receive clean typed data.
+
+The discipline required is keeping business rules out of the schemas; a validation package that
+starts querying is a validation package that can no longer be shared.
+
+## Alternatives considered
+
+class-validator + class-transformer, the NestJS default — rejected: not shareable
+with the frontends. Duplicating rules with a test to keep them in sync — rejected: the test
+tells you about drift after it has already shipped.
diff --git a/docs/adr/0007-rbac-permissions-instead-of-role-checks.md b/docs/adr/0007-rbac-permissions-instead-of-role-checks.md
new file mode 100644
index 0000000..a142d42
--- /dev/null
+++ b/docs/adr/0007-rbac-permissions-instead-of-role-checks.md
@@ -0,0 +1,35 @@
+# ADR-0007: RBAC permissions instead of role checks
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+`if (user.role === 'ADMIN')` spreads. Six months later authorization logic is scattered
+across dozens of files, no one can answer "who can refund an order?" without grepping, and
+adding a "Warehouse Supervisor" role means editing and redeploying application code.
+
+## Decision
+
+Authorization is expressed only as permissions (`product.update`, `order.refund`),
+declared on routes with `@RequirePermissions(...)` and evaluated by a global `PermissionsGuard`.
+
+Permissions are code: the catalog in `@sport/types` is the source of truth, and the seed
+reconciles the database against it. Roles are data: rows in `roles`/`role_permissions` that a
+SUPER_ADMIN edits at runtime with no deploy.
+
+The admin sidebar is built from the same catalog, so a user never sees a link to a screen they
+cannot use — presentation only; the API re-checks every request.
+
+## Consequences
+
+Every authorization rule is one greppable decorator. New roles need no code. The
+permission set travels inside the access token, so guards do no database work on the hot path —
+which is precisely why access tokens are short-lived (ADR-0008): a revoked permission takes at
+most one token lifetime to take effect.
+
+## Alternatives considered
+
+Role checks in code — rejected above. Full ABAC/policy engine — rejected as
+premature: nothing yet needs "can edit orders from their own store only". The permission model
+can grow into that if a real requirement appears.
diff --git a/docs/adr/0008-short-access-tokens-rotating-refresh-tokens-separate-audiences.md b/docs/adr/0008-short-access-tokens-rotating-refresh-tokens-separate-audiences.md
new file mode 100644
index 0000000..ade24ee
--- /dev/null
+++ b/docs/adr/0008-short-access-tokens-rotating-refresh-tokens-separate-audiences.md
@@ -0,0 +1,39 @@
+# ADR-0008: Short access tokens, rotating refresh tokens, separate audiences
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+Storefront customers and back-office staff authenticate against the same API. A single
+token type shared between them means an XSS on the storefront is a path into the admin.
+
+## Decision
+
+A short-lived (15 min) stateless JWT access token carrying the permission set, plus a
+long-lived refresh token that is opaque to the client, delivered as an httpOnly SameSite cookie,
+stored server-side only as a SHA-256 hash, and rotated on every use.
+
+Rotation is tracked with `Session.replacedById`. Presenting an already-rotated refresh token
+means the token leaked, so the entire token family is revoked — theft detection, not just theft
+mitigation.
+
+Every token carries an audience (`storefront` or `admin`). Admin controllers declare
+`@RequireAudience('admin')`, and the check runs before any permission logic.
+
+## Consequences
+
+A stolen access token expires in minutes. A stolen refresh token is detectable and
+self-revoking. A stolen storefront token is rejected by admin endpoints on audience alone,
+before permissions are consulted.
+
+The trade-off is that permission changes are not instantaneous — bounded by the access token
+lifetime. For an immediate kill switch, `CACHE_KEYS.revokedSession` exists as a Redis
+denylist checked per request; it is deliberately not enabled by default because it reintroduces
+a hot-path lookup.
+
+## Alternatives considered
+
+Server-side sessions — simpler to revoke, but adds a datastore read to every
+request and complicates a future mobile client. Long-lived access tokens — rejected: the blast
+radius of a leak is unacceptable for a system holding payment and address data.
diff --git a/docs/adr/0009-media-in-s3-compatible-storage-metadata-in-postgresql.md b/docs/adr/0009-media-in-s3-compatible-storage-metadata-in-postgresql.md
new file mode 100644
index 0000000..f06b0f3
--- /dev/null
+++ b/docs/adr/0009-media-in-s3-compatible-storage-metadata-in-postgresql.md
@@ -0,0 +1,37 @@
+# ADR-0009: Media in S3-compatible storage, metadata in PostgreSQL
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+Product photography is the bulk of an apparel store's bytes. Storing binaries in
+PostgreSQL bloats backups, makes replication slow, and forces image delivery through the
+application tier.
+
+## Decision
+
+Bytes live in Cloudflare R2 (MinIO locally). PostgreSQL stores only metadata: object
+key, MIME type, dimensions, size, alt text and a small base64 blur placeholder.
+
+Browsers upload directly to the bucket using a short-lived presigned URL, so files never stream
+through the API. Public URLs are composed at read time from `STORAGE_PUBLIC_URL + storageKey`,
+never stored — so changing bucket, CDN domain or provider is a config change, not a data
+migration.
+
+Uploads are restricted by a MIME allow-list, and generated keys are date-partitioned UUIDs that
+never echo the user's filename.
+
+## Consequences
+
+Database backups stay small and fast. Images are served by a CDN at the edge. The
+API scales on CPU, not bandwidth.
+
+The cost is eventual-consistency between the two stores: a failed upload can leave an orphaned
+row, and a deleted row can leave an orphaned object. A periodic reconciliation job is the
+accepted mitigation; two-phase commit across a database and object storage is not worth it.
+
+## Alternatives considered
+
+`bytea` columns — rejected for the reasons above. Serving uploads through the API
+— rejected: it makes the API a bandwidth bottleneck and a timeout risk on large files.
diff --git a/docs/adr/0010-redis-is-a-cache-and-an-ephemeral-store-never-a-system-of-record.md b/docs/adr/0010-redis-is-a-cache-and-an-ephemeral-store-never-a-system-of-record.md
new file mode 100644
index 0000000..ca4103c
--- /dev/null
+++ b/docs/adr/0010-redis-is-a-cache-and-an-ephemeral-store-never-a-system-of-record.md
@@ -0,0 +1,37 @@
+# ADR-0010: Redis is a cache and an ephemeral store, never a system of record
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+Redis is fast and tempting. Once a cart or an order lives only in Redis, an eviction or a
+restart becomes lost revenue.
+
+## Decision
+
+Everything in Redis must be either reconstructible from PostgreSQL or genuinely
+disposable. Current uses: catalog read caching, guest carts, OTPs, password-reset tokens, rate
+limit counters, checkout stock reservations and idempotency keys.
+
+The local container runs `--maxmemory-policy allkeys-lru` with persistence off — an explicit
+statement that eviction is always preferable to refusing writes. `RedisService.getOrSet`
+swallows cache read and write failures and falls through to the source, so a Redis outage
+degrades latency rather than availability.
+
+Every key is built in `cache-keys.ts`; no ad-hoc key strings anywhere.
+
+## Consequences
+
+Redis can be flushed at any moment and the store keeps working. Guest carts are the
+one place where loss is user-visible, which is why they are promoted to PostgreSQL at sign-in
+and carry a 30-day TTL.
+
+Stock reservations need care: they are held in Redis with a TTL, but the authoritative
+`reserved` count is a PostgreSQL column, so an eviction cannot silently oversell.
+
+## Alternatives considered
+
+Redis as primary store for carts — rejected: the failure mode is losing a customer's
+basket. In-memory caching in the Node process — rejected: it does not survive a restart and
+cannot be shared across instances.
diff --git a/docs/adr/0011-money-as-integer-minor-units.md b/docs/adr/0011-money-as-integer-minor-units.md
new file mode 100644
index 0000000..e5b2ba9
--- /dev/null
+++ b/docs/adr/0011-money-as-integer-minor-units.md
@@ -0,0 +1,29 @@
+# ADR-0011: Money as integer minor units
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+`0.1 + 0.2 !== 0.3`. Floating-point money produces discrepancies that are invisible in
+testing and unfixable once they are in an order history.
+
+## Decision
+
+All monetary values are integers in the currency's minor unit, in the database
+(`priceAmount Int`), across the API (`{ amount, currency }`), and in TypeScript (`Money`).
+VND has a minor-unit scale of 0, so `250000` means ₫250.000. Conversion to a display string
+happens in exactly one function, `formatMoney`, using `Intl.NumberFormat`.
+
+## Consequences
+
+Arithmetic is exact. No conversion happens between layers because every layer holds
+the same integer. Multi-currency is already representable without a schema change.
+
+Developers must remember that `price.amount` is not a display value; the single formatter and
+the absence of any other division by 100 are what keep that from going wrong.
+
+## Alternatives considered
+
+`Decimal`/`numeric` columns — correct in the database but arrive in JavaScript as
+strings or a Decimal object that must be handled at every boundary. Floats — never.
diff --git a/docs/adr/0012-postgresql-full-text-search-before-a-dedicated-search-engine.md b/docs/adr/0012-postgresql-full-text-search-before-a-dedicated-search-engine.md
new file mode 100644
index 0000000..db5de61
--- /dev/null
+++ b/docs/adr/0012-postgresql-full-text-search-before-a-dedicated-search-engine.md
@@ -0,0 +1,34 @@
+# ADR-0012: PostgreSQL full-text search before a dedicated search engine
+
+- **Status:** Accepted
+- **Date:** 2026-08-11
+
+## Context
+
+Search is a headline feature of a storefront, and reaching for Elasticsearch or
+OpenSearch is the reflex. It is also a second datastore to run, secure, back up and keep in
+sync — for a catalog that starts at a few hundred products.
+
+## Decision
+
+Start with PostgreSQL full-text search plus `pg_trgm` for fuzzy matching and typo
+tolerance, behind a `SearchProvider` interface owned by `SearchModule`. The module is marked
+EXTRACTION CANDIDATE and reads the catalog only through public services, so it holds no
+privileged coupling.
+
+## Consequences
+
+One datastore, no sync pipeline, no index drift, and search results that are
+transactionally consistent with the catalog. This is genuinely adequate below roughly 50k
+products with straightforward faceting.
+
+The limits are known and will eventually bind: no relevance tuning to speak of, no
+learning-to-rank, weak multilingual analysis for Vietnamese. When they do, the provider
+interface is the seam — swapping in OpenSearch changes one implementation, not every listing
+page.
+
+## Alternatives considered
+
+Elasticsearch/OpenSearch from day one — rejected as premature infrastructure.
+A hosted service (Algolia, Typesense Cloud) — a reasonable future option; deferred because it
+adds per-record cost and a sync pipeline before there is a search-quality problem to solve.
diff --git a/docs/adr/README.md b/docs/adr/README.md
new file mode 100644
index 0000000..6458167
--- /dev/null
+++ b/docs/adr/README.md
@@ -0,0 +1,36 @@
+# Architecture Decision Records
+
+Each file records one decision that was expensive to make and would be expensive to reverse.
+The purpose is not documentation for its own sake — it is so that in a year, when someone asks
+"why is money an integer?" or "why doesn't the admin just query the database?", the answer is
+written down along with what was rejected and why.
+
+An ADR is immutable once accepted. If a decision changes, add a new ADR that supersedes it.
+
+| ADR                                                                                | Decision                                                          | Status   |
+| ---------------------------------------------------------------------------------- | ----------------------------------------------------------------- | -------- |
+| [0001](./0001-monorepo-with-pnpm-workspaces-and-turborepo.md)                      | Monorepo with pnpm workspaces and Turborepo                       | Accepted |
+| [0002](./0002-modular-monolith-not-microservices.md)                               | Modular monolith, not microservices                               | Accepted |
+| [0003](./0003-product-and-productvariant-as-separate-entities.md)                  | Product and ProductVariant as separate entities                   | Accepted |
+| [0004](./0004-the-admin-dashboard-has-no-database-access.md)                       | The admin dashboard has no database access                        | Accepted |
+| [0005](./0005-uri-based-api-versioning.md)                                         | URI-based API versioning                                          | Accepted |
+| [0006](./0006-zod-schemas-shared-between-api-and-frontends.md)                     | Zod schemas shared between API and frontends                      | Accepted |
+| [0007](./0007-rbac-permissions-instead-of-role-checks.md)                          | RBAC permissions instead of role checks                           | Accepted |
+| [0008](./0008-short-access-tokens-rotating-refresh-tokens-separate-audiences.md)   | Short access tokens, rotating refresh tokens, separate audiences  | Accepted |
+| [0009](./0009-media-in-s3-compatible-storage-metadata-in-postgresql.md)            | Media in S3-compatible storage, metadata in PostgreSQL            | Accepted |
+| [0010](./0010-redis-is-a-cache-and-an-ephemeral-store-never-a-system-of-record.md) | Redis is a cache and an ephemeral store, never a system of record | Accepted |
+| [0011](./0011-money-as-integer-minor-units.md)                                     | Money as integer minor units                                      | Accepted |
+| [0012](./0012-postgresql-full-text-search-before-a-dedicated-search-engine.md)     | PostgreSQL full-text search before a dedicated search engine      | Accepted |
+
+## Decisions deliberately NOT recorded yet
+
+These are open and should become ADRs when the need is real, not before:
+
+- Payment provider abstraction shape (VNPay / MoMo / ZaloPay / COD) — write it when the second
+  provider is integrated, not the first. One provider does not reveal the right abstraction.
+- Shipping-rate provider integration.
+- Whether guest carts ever get promoted to PostgreSQL before sign-in.
+- Multi-warehouse allocation strategy. The schema supports it; the policy does not exist yet.
+- i18n / multi-currency rollout.
+- Read replicas and connection pooling (PgBouncer) — a scaling decision that needs real traffic
+  numbers to make well.
diff --git a/docs/architecture.md b/docs/architecture.md
new file mode 100644
index 0000000..92440b3
--- /dev/null
+++ b/docs/architecture.md
@@ -0,0 +1,346 @@
+# Architecture
+
+The reference document for how this system is put together and, more importantly, which rules
+must not be broken. Decisions and their trade-offs live in [`docs/adr/`](./adr/README.md).
+
+---
+
+## 1. System topology
+
+```
+                            ┌─────────────┐
+   Customer ───────────────▶│             │
+                            │  Cloudflare │  TLS, WAF, CDN, DDoS
+   Admin ──────────────────▶│             │
+                            └──────┬──────┘
+                                   │
+                            ┌──────▼──────┐
+                            │    Nginx    │  routing, gzip, rate ceiling,
+                            └──┬───┬───┬──┘  immutable asset caching
+              ┌────────────────┘   │   └────────────────┐
+              │                    │                    │
+      ┌───────▼───────┐    ┌───────▼───────┐    ┌───────▼───────┐
+      │  Storefront   │    │     Admin     │    │      API      │
+      │   Next.js     │    │    Next.js    │    │    NestJS     │
+      │   :3000       │    │    :3001      │    │    :4000      │
+      └───────┬───────┘    └───────┬───────┘    └───────┬───────┘
+              │                    │                    │
+              └────── REST ────────┴──── REST ──────────┤
+                                                        │
+                        ┌───────────────┬───────────────┼───────────────┐
+                        │               │               │               │
+                 ┌──────▼─────┐  ┌──────▼─────┐  ┌──────▼─────┐  ┌──────▼─────┐
+                 │ PostgreSQL │  │   Redis    │  │  R2 / S3   │  │  Providers │
+                 │  (record)  │  │  (cache)   │  │  (media)   │  │  (future)  │
+                 └────────────┘  └────────────┘  └────────────┘  └────────────┘
+```
+
+**The load-bearing rule:** only the API touches PostgreSQL, Redis or object storage. Both
+frontends reach data exclusively through the REST API. See [ADR-0004](./adr/0004-the-admin-dashboard-has-no-database-access.md).
+
+Server-side rendering in both Next apps calls the API over the internal Docker network
+(`API_INTERNAL_URL`), skipping the public hostname and TLS entirely.
+
+---
+
+## 2. Responsibilities
+
+| Component          | Owns                                                             | Explicitly does not                           |
+| ------------------ | ---------------------------------------------------------------- | --------------------------------------------- |
+| `apps/storefront`  | Customer UX, SEO, rendering strategy, client cart state          | Business rules, pricing maths, DB access      |
+| `apps/admin`       | Back-office UX, bulk editing, operational views                  | Business rules, DB access, its own auth model |
+| `apps/api`         | **All** business logic, persistence, authorization, integrations | Rendering, presentation concerns              |
+| `packages/*`       | Contracts and reusable primitives                                | Anything app-specific or stateful             |
+| `infrastructure/*` | Runtime topology, container builds, local dev                    | Application behaviour                         |
+
+Pricing is the clarifying example. The storefront may _format_ `{ amount: 250000, currency: 'VND' }`
+as `₫250.000`. It may never _compute_ a discount, a subtotal or a shipping cost. If a number
+appears on a receipt, the API produced it.
+
+---
+
+## 3. Dependency rules
+
+```
+  apps/storefront ──┐
+                    ├──▶ @sport/api-client ──▶ @sport/types
+  apps/admin ───────┤                              ▲
+                    ├──▶ @sport/ui ────────────────┤
+                    └──▶ @sport/validation ────────┤
+                                                   │
+  apps/api ────────────▶ @sport/validation ────────┤
+           └───────────▶ @sport/types ─────────────┘
+```
+
+Allowed:
+
+- Any app → any package.
+- `@sport/validation`, `@sport/api-client` → `@sport/types`.
+- `@sport/ui` → nothing but React and styling utilities.
+
+Forbidden, and enforced rather than merely documented:
+
+| Rule                                     | Enforced by                                       |
+| ---------------------------------------- | ------------------------------------------------- |
+| App → app                                | No workspace dependency exists                    |
+| Package → app                            | No workspace dependency exists                    |
+| Frontend → `@prisma/client` or `ioredis` | ESLint `no-restricted-imports`                    |
+| `@sport/types` → any framework           | Zero dependencies in its `package.json`           |
+| Cross-module deep imports in the API     | ESLint `no-restricted-imports` on `@/modules/*/*` |
+| Circular imports                         | ESLint `import-x/no-cycle`                        |
+
+`@sport/types` has no dependencies at all, and that is a deliberate constraint: it is imported
+by a NestJS server, two React apps and eventually a React Native app. The moment it depends on
+a framework, one of those consumers breaks.
+
+---
+
+## 4. What may and may not be shared
+
+**Share** — things that are true everywhere:
+
+- Domain types and API contracts (`@sport/types`)
+- Input shape/format rules (`@sport/validation`)
+- API access (`@sport/api-client`)
+- Design-system primitives: Button, Input, Badge, Skeleton (`@sport/ui`)
+- Build configuration (`@sport/config`, `@sport/eslint-config`)
+
+**Do not share** — things that only look shareable:
+
+- **Domain components.** `<ProductCard>` knows about sale badges, price ranges and colour
+  swatches. It belongs to the storefront. The admin's product row needs status, stock and
+  margin. Merging them produces a component with fourteen props and two consumers who both
+  fight it.
+- **Business logic.** It lives in the API. A discount calculated in a shared package is a
+  discount that can disagree with the invoice.
+- **App state.** Cart, auth session and filter state are app-specific. Shared stores create
+  invisible coupling between two applications that must be free to diverge.
+- **Feature-to-feature imports.** If two storefront features need the same thing, it moves up
+  to `@/components` or `@/lib` — it does not get imported sideways.
+
+The test for `@sport/ui`: _would this component be meaningful in the admin dashboard?_ If not,
+it is not a design-system primitive.
+
+---
+
+## 5. Backend module boundaries
+
+Twenty modules, each owning its tables exclusively. Full anatomy in
+[`apps/api/src/modules/README.md`](../apps/api/src/modules/README.md).
+
+| Group               | Modules                                                                                  |
+| ------------------- | ---------------------------------------------------------------------------------------- |
+| Cross-cutting       | `auth`, `health`                                                                         |
+| Identity            | `users`, `customers`                                                                     |
+| Catalog             | `products`, `product-variants`, `categories`, `collections`, `brands`, `media`, `search` |
+| Commerce            | `inventory`, `carts`, `checkout`, `orders`, `payments`                                   |
+| Marketing & content | `promotions`, `coupons`, `wishlist`, `reviews`, `cms`                                    |
+
+Communication:
+
+| Need                                    | Mechanism                                        |
+| --------------------------------------- | ------------------------------------------------ |
+| An answer now, to continue this request | Call the other module's `public/` service        |
+| To react to something that happened     | Subscribe to its domain event                    |
+| To change another module's data         | Call its public service — never write its tables |
+
+`inventory`, `orders`, `payments` and `search` carry an additional constraint: no shared
+transactions with the rest of the monolith, so they remain extractable.
+
+---
+
+## 6. Request lifecycle
+
+```
+Request
+  │
+  ├─▶ RequestIdMiddleware      assign/propagate x-request-id
+  ├─▶ ThrottlerGuard           per-IP rate limit
+  ├─▶ AccessTokenGuard         verify JWT, check audience, attach actor   ← opt-out via @Public()
+  ├─▶ PermissionsGuard         evaluate @RequirePermissions
+  ├─▶ ZodValidationPipe        parse + coerce body/query
+  │
+  ├─▶ Controller ─▶ Service ─▶ Repository ─▶ Prisma
+  │
+  ├─▶ ResponseEnvelopeInterceptor   wrap in { success: true, data, meta }
+  └─▶ AllExceptionsFilter           any throw → { success: false, error, meta }
+```
+
+Authentication is **on by default**. `AccessTokenGuard` is registered globally and a route
+becomes public only by explicitly declaring `@Public()`. Forgetting a decorator therefore fails
+closed — a new endpoint is never accidentally exposed.
+
+---
+
+## 7. API conventions
+
+### Response envelope
+
+Every response uses one of exactly two shapes, including 500s. Clients branch on `success`,
+never on the status code.
+
+```jsonc
+// success
+{ "success": true, "data": { }, "meta": { "requestId": "019f…", "timestamp": "2026-08-11T…" } }
+
+// failure
+{
+  "success": false,
+  "error": { "code": "INSUFFICIENT_STOCK", "message": "Only 2 left in size M.",
+             "fields": { "items.0.quantity": ["Only 2 available"] } },
+  "meta": { "requestId": "019f…", "timestamp": "2026-08-11T…" }
+}
+```
+
+`error.code` is a stable machine identifier from `API_ERROR_CODES`. **A code is never renamed or
+repurposed once shipped** — mobile apps and partner integrations branch on those strings. Adding
+a code is always safe; changing one is a breaking API change.
+
+`error.message` is safe to display to an end user. Internal detail (SQL, Prisma metadata, stack
+traces) never reaches the client in production; it goes to the log, correlated by `requestId`.
+
+### Status codes
+
+| Code            | Meaning                                            |
+| --------------- | -------------------------------------------------- |
+| 200 / 201 / 204 | Success                                            |
+| 400             | Malformed request                                  |
+| 401             | Missing, invalid or expired credentials            |
+| 403             | Authenticated but not permitted                    |
+| 404             | Not found, or hidden from this actor               |
+| 409             | Conflict (duplicate, invalid state transition)     |
+| 422             | Validation failed — carries `error.fields`         |
+| 429             | Rate limited                                       |
+| 500             | Unexpected — always generic message, always logged |
+
+### Pagination
+
+Offset (`?page=&perPage=`) for admin tables, where "page 7 of 42" is a real requirement. Cursor
+(`?cursor=&limit=`) for storefront listings, where correctness under concurrent writes matters
+more than random access. Chosen per endpoint, never mixed.
+
+---
+
+## 8. Logging
+
+Structured JSON via pino. One line per request: method, path, status, duration, `requestId`,
+`actorId`. Domain logs carry the same `requestId`, so a full trace — Cloudflare → Nginx → API —
+is one grep.
+
+Levels: `error` for 5xx and unexpected failures; `warn` for 4xx and degraded dependencies;
+`info` for lifecycle and significant domain events; `debug` for development only.
+
+Redaction happens **at the logger**, not at each call site: `authorization`, `cookie`,
+`set-cookie`, and password/token/card fields are censored centrally. Relying on developers to
+remember is how credentials end up in log storage.
+
+Application code uses Nest's standard `Logger`, which `main.ts` routes into pino. Nothing
+injects `PinoLogger` directly — it is transient-scoped, and injecting it would silently make the
+consumer transient too, which for `PrismaService` would mean a second connection pool.
+
+---
+
+## 9. Naming conventions
+
+| Thing                 | Convention                | Example                        |
+| --------------------- | ------------------------- | ------------------------------ |
+| Files                 | kebab-case                | `product-variant.service.ts`   |
+| React components      | PascalCase file + export  | `ProductCard.tsx`              |
+| Classes               | PascalCase                | `ProductVariantService`        |
+| Variables / functions | camelCase                 | `calculateSubtotal`            |
+| Constants             | SCREAMING_SNAKE           | `PAGINATION_DEFAULTS`          |
+| Types / interfaces    | PascalCase, no `I` prefix | `ProductVariant`               |
+| Database tables       | snake_case plural         | `product_variants`             |
+| Database columns      | snake_case                | `sale_price_amount`            |
+| Prisma models         | PascalCase singular       | `ProductVariant`               |
+| API routes            | kebab-case plural         | `/api/v1/product-variants`     |
+| Permissions           | `resource.action`         | `product.update`               |
+| Domain events         | `resource.past_tense`     | `order.placed`                 |
+| Redis keys            | `domain:entity:id`        | `catalog:product:slug:air-tee` |
+| Env vars              | SCREAMING_SNAKE           | `JWT_ACCESS_SECRET`            |
+| Branches              | `type/short-description`  | `feat/variant-matrix-editor`   |
+
+Booleans read as assertions: `isActive`, `hasVariants`, `canRefund`. Money fields end in
+`Amount` and are always integers.
+
+---
+
+## 10. Configuration and environment
+
+Four `.env` files, each with a committed `.env.example`:
+
+| File                   | Consumed by         | Contains                                                    |
+| ---------------------- | ------------------- | ----------------------------------------------------------- |
+| `/.env`                | docker-compose only | Ports, container credentials                                |
+| `apps/api/.env`        | API                 | `DATABASE_URL`, JWT secrets, storage credentials            |
+| `apps/storefront/.env` | Storefront          | `NEXT_PUBLIC_*`, `API_INTERNAL_URL`                         |
+| `apps/admin/.env`      | Admin               | `NEXT_PUBLIC_*`, `API_INTERNAL_URL` — **no `DATABASE_URL`** |
+
+Rules:
+
+1. **The API validates its entire environment at boot** with Zod and refuses to start on any
+   problem, listing all of them at once. A missing JWT secret is discovered at deploy time, not
+   at 2am by a customer.
+2. **`process.env` is read in exactly one place per app.** Everything else injects a typed
+   config object.
+3. **`NEXT_PUBLIC_*` is public.** It is inlined into the client bundle. No secret ever carries
+   that prefix.
+4. **`NEXT_PUBLIC_*` is baked at build time**, not container start — which is why the
+   Dockerfiles take them as build args.
+5. Secrets are never committed. `pnpm setup` generates real JWT secrets locally so that not even
+   a laptop runs on a value present in the repository.
+
+---
+
+## 11. Where premature abstraction must be avoided
+
+Places where the instinct to generalise should be resisted until a second real case appears:
+
+- **Payment providers.** Build VNPay concretely first. One implementation does not reveal the
+  right interface; two do. Guessing produces an abstraction shaped like VNPay with a misleading
+  name.
+- **A generic repository layer.** `BaseRepository<T>` with generic CRUD sounds appealing and
+  ends as a layer that obstructs every non-trivial query. Prisma is already the abstraction.
+- **CQRS / event sourcing.** The inventory ledger is append-only because inventory genuinely
+  needs an audit trail — that is not a mandate to apply the pattern everywhere.
+- **A shared `<DataTable>` before three tables exist.** Two tables with different needs produce
+  a component with thirty props.
+- **A plugin architecture for the CMS.** Build the homepage blocks that are needed. A page
+  builder is a product, not a feature.
+- **Micro-optimising the cache.** Add caching when a query is measurably slow, keyed and
+  invalidated deliberately. Cache invalidation bugs are worse than slow pages.
+- **Extracting a service.** The boundaries exist so extraction _stays possible_, not so it
+  happens. Extract when there is a real scaling or team-boundary problem.
+
+---
+
+## 12. Architectural risks to prevent from day one
+
+| Risk                               | Why it is fatal later                                                                   | Prevention in place                                                                              |
+| ---------------------------------- | --------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------ |
+| Size/colour as product columns     | Cannot express per-combination stock or price; requires re-modelling after orders exist | Variant model ([ADR-0003](./adr/0003-product-and-productvariant-as-separate-entities.md))        |
+| Float money                        | Silent discrepancies, unfixable retroactively                                           | Integer minor units ([ADR-0011](./adr/0011-money-as-integer-minor-units.md))                     |
+| Role checks scattered in code      | Authorization becomes unauditable; new roles need deploys                               | RBAC + global guard ([ADR-0007](./adr/0007-rbac-permissions-instead-of-role-checks.md))          |
+| Admin querying the DB directly     | A second write path where authorization is forgotten                                    | No DB driver in admin ([ADR-0004](./adr/0004-the-admin-dashboard-has-no-database-access.md))     |
+| Module boundary erosion            | The monolith becomes unsplittable and untestable                                        | ESLint boundary rules + `public/` barrels                                                        |
+| Order lines joined to live catalog | Historical invoices change when prices do                                               | Snapshot fields on order lines (milestone 5)                                                     |
+| Overselling under concurrency      | Real money, real customers, real refunds                                                | `reserved` column + transactional reservation                                                    |
+| Unversioned API                    | Cannot ship a breaking change once a mobile app exists                                  | URI versioning from request one ([ADR-0005](./adr/0005-uri-based-api-versioning.md))             |
+| Binaries in PostgreSQL             | Backups and replication degrade permanently                                             | Object storage ([ADR-0009](./adr/0009-media-in-s3-compatible-storage-metadata-in-postgresql.md)) |
+| Single-warehouse inventory         | Adding a location later means migrating live stock history                              | `(variant, location)` keys from the start                                                        |
+| Secrets in the repository          | One leak compromises production                                                         | Validated env, generated dev secrets, `.env` gitignored                                          |
+| No request correlation             | Production incidents become guesswork                                                   | `x-request-id` end to end                                                                        |
+
+---
+
+## 13. Deliberate limitations of milestone 0
+
+Stated plainly so they are choices rather than oversights:
+
+- **No token issuance.** Guards verify and enforce; login, refresh and registration are M2.
+- **No cart/order/payment tables.** The first migration stays reviewable; they arrive in M5.
+- **The event bus is in-process and lossy.** Anything that must not be lost stays in the same
+  database transaction as its cause. A durable outbox comes when a use case demands it.
+- **No observability beyond logs.** OpenTelemetry traces and metrics are worth adding once there
+  is production traffic to explain.
+- **No CDN, TLS or WAF config.** That belongs to the deployment repository, not this one.
diff --git a/infrastructure/docker/admin.Dockerfile b/infrastructure/docker/admin.Dockerfile
new file mode 100644
index 0000000..238ba66
--- /dev/null
+++ b/infrastructure/docker/admin.Dockerfile
@@ -0,0 +1,44 @@
+# ---------------------------------------------------------------------------
+# @sport/admin production image (Next.js standalone output).
+# ---------------------------------------------------------------------------
+FROM node:22-alpine AS base
+RUN corepack enable
+WORKDIR /app
+
+FROM base AS pruner
+RUN apk add --no-cache libc6-compat
+COPY . .
+RUN pnpm dlx turbo@2.10.9 prune @sport/admin --docker
+
+FROM base AS builder
+RUN apk add --no-cache libc6-compat
+
+COPY --from=pruner /app/out/json/ .
+RUN pnpm install --frozen-lockfile
+
+COPY --from=pruner /app/out/full/ .
+
+ARG NEXT_PUBLIC_API_URL
+ARG NEXT_PUBLIC_APP_URL
+ENV NEXT_PUBLIC_API_URL=$NEXT_PUBLIC_API_URL
+ENV NEXT_PUBLIC_APP_URL=$NEXT_PUBLIC_APP_URL
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN pnpm turbo run build --filter=@sport/admin
+
+FROM base AS runner
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+ENV PORT=3001
+ENV HOSTNAME=0.0.0.0
+
+RUN addgroup -g 1001 -S nodejs && adduser -u 1001 -S nextjs -G nodejs
+
+COPY --from=builder --chown=nextjs:nodejs /app/apps/admin/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/apps/admin/.next/static ./apps/admin/.next/static
+COPY --from=builder --chown=nextjs:nodejs /app/apps/admin/public ./apps/admin/public
+
+USER nextjs
+EXPOSE 3001
+
+CMD ["node", "apps/admin/server.js"]
diff --git a/infrastructure/docker/api.Dockerfile b/infrastructure/docker/api.Dockerfile
new file mode 100644
index 0000000..eda47ce
--- /dev/null
+++ b/infrastructure/docker/api.Dockerfile
@@ -0,0 +1,55 @@
+# ---------------------------------------------------------------------------
+# @sport/api production image.
+#
+# `turbo prune` produces a subset of the monorepo containing only this app and
+# its workspace dependencies. That keeps the build context small AND makes the
+# Docker layer cache work properly: editing the storefront no longer busts the
+# API's dependency layer.
+# ---------------------------------------------------------------------------
+FROM node:22-alpine AS base
+RUN corepack enable
+WORKDIR /app
+
+# --- Stage 1: prune the workspace ------------------------------------------
+FROM base AS pruner
+RUN apk add --no-cache libc6-compat
+COPY . .
+RUN pnpm dlx turbo@2.10.9 prune @sport/api --docker
+
+# --- Stage 2: install + build ----------------------------------------------
+FROM base AS builder
+RUN apk add --no-cache libc6-compat openssl
+
+# Lockfile and manifests first: this layer is cached until dependencies change.
+COPY --from=pruner /app/out/json/ .
+RUN pnpm install --frozen-lockfile
+
+COPY --from=pruner /app/out/full/ .
+RUN pnpm turbo run build --filter=@sport/api
+
+# Drop dev dependencies from the tree we are about to copy.
+RUN pnpm prune --prod
+
+# --- Stage 3: runtime -------------------------------------------------------
+FROM base AS runner
+RUN apk add --no-cache openssl tini
+
+ENV NODE_ENV=production
+
+# Never run as root.
+RUN addgroup -g 1001 -S nodejs && adduser -u 1001 -S nestjs -G nodejs
+
+COPY --from=builder --chown=nestjs:nodejs /app/node_modules ./node_modules
+COPY --from=builder --chown=nestjs:nodejs /app/packages ./packages
+COPY --from=builder --chown=nestjs:nodejs /app/apps/api/node_modules ./apps/api/node_modules
+COPY --from=builder --chown=nestjs:nodejs /app/apps/api/dist ./apps/api/dist
+COPY --from=builder --chown=nestjs:nodejs /app/apps/api/prisma ./apps/api/prisma
+COPY --from=builder --chown=nestjs:nodejs /app/apps/api/package.json ./apps/api/package.json
+
+USER nestjs
+WORKDIR /app/apps/api
+EXPOSE 4000
+
+# tini reaps zombies and forwards SIGTERM, so Nest's shutdown hooks actually run.
+ENTRYPOINT ["/sbin/tini", "--"]
+CMD ["node", "dist/main.js"]
diff --git a/infrastructure/docker/storefront.Dockerfile b/infrastructure/docker/storefront.Dockerfile
new file mode 100644
index 0000000..7ed200e
--- /dev/null
+++ b/infrastructure/docker/storefront.Dockerfile
@@ -0,0 +1,48 @@
+# ---------------------------------------------------------------------------
+# @sport/storefront production image (Next.js standalone output).
+# ---------------------------------------------------------------------------
+FROM node:22-alpine AS base
+RUN corepack enable
+WORKDIR /app
+
+FROM base AS pruner
+RUN apk add --no-cache libc6-compat
+COPY . .
+RUN pnpm dlx turbo@2.10.9 prune @sport/storefront --docker
+
+FROM base AS builder
+RUN apk add --no-cache libc6-compat
+
+COPY --from=pruner /app/out/json/ .
+RUN pnpm install --frozen-lockfile
+
+COPY --from=pruner /app/out/full/ .
+
+# NEXT_PUBLIC_* values are inlined into the client bundle at build time, so they
+# must be present here — they cannot be injected at container start.
+ARG NEXT_PUBLIC_API_URL
+ARG NEXT_PUBLIC_SITE_URL
+ENV NEXT_PUBLIC_API_URL=$NEXT_PUBLIC_API_URL
+ENV NEXT_PUBLIC_SITE_URL=$NEXT_PUBLIC_SITE_URL
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN pnpm turbo run build --filter=@sport/storefront
+
+FROM base AS runner
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+ENV PORT=3000
+ENV HOSTNAME=0.0.0.0
+
+RUN addgroup -g 1001 -S nodejs && adduser -u 1001 -S nextjs -G nodejs
+
+# `output: 'standalone'` emits a self-contained server with only the modules it
+# actually imports — a fraction of the size of copying node_modules.
+COPY --from=builder --chown=nextjs:nodejs /app/apps/storefront/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/apps/storefront/.next/static ./apps/storefront/.next/static
+COPY --from=builder --chown=nextjs:nodejs /app/apps/storefront/public ./apps/storefront/public
+
+USER nextjs
+EXPOSE 3000
+
+CMD ["node", "apps/storefront/server.js"]
diff --git a/infrastructure/nginx/conf.d/default.conf b/infrastructure/nginx/conf.d/default.conf
new file mode 100644
index 0000000..fd430ae
--- /dev/null
+++ b/infrastructure/nginx/conf.d/default.conf
@@ -0,0 +1,81 @@
+# ---------------------------------------------------------------------------
+# Edge routing.
+#
+# In production Cloudflare terminates TLS and sits in front of this; Nginx
+# handles routing, buffering, compression and the per-IP rate ceiling. TLS
+# config is intentionally absent here because the local stack is plain HTTP.
+# ---------------------------------------------------------------------------
+
+upstream storefront_upstream {
+    server storefront:3000;
+    keepalive 32;
+}
+
+upstream admin_upstream {
+    server admin:3001;
+    keepalive 32;
+}
+
+upstream api_upstream {
+    server api:4000;
+    keepalive 32;
+}
+
+# --- Admin dashboard: separate hostname ------------------------------------
+# A distinct origin means an XSS on the storefront cannot reach admin cookies,
+# and the whole host can be IP-restricted or put behind Cloudflare Access.
+server {
+    listen 80;
+    server_name admin.localhost;
+
+    add_header X-Robots-Tag "noindex, nofollow" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-Frame-Options "DENY" always;
+
+    location /api/ {
+        limit_req zone=api_limit burst=20 nodelay;
+        proxy_pass http://api_upstream;
+    }
+
+    location / {
+        limit_req zone=web_limit burst=40 nodelay;
+        proxy_pass http://admin_upstream;
+    }
+}
+
+# --- Storefront + public API -----------------------------------------------
+server {
+    listen 80 default_server;
+    server_name localhost _;
+
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+
+    location /api/ {
+        limit_req zone=api_limit burst=20 nodelay;
+        proxy_pass http://api_upstream;
+
+        # Payment webhooks and image uploads must not be truncated by a short
+        # read timeout; everything else here is fast anyway.
+        proxy_read_timeout 60s;
+        proxy_buffering off;
+    }
+
+    location = /health {
+        access_log off;
+        proxy_pass http://api_upstream/api/v1/health/live;
+    }
+
+    # Next.js build output is content-hashed and therefore immutable.
+    location /_next/static/ {
+        proxy_pass http://storefront_upstream;
+        proxy_cache_valid 200 365d;
+        add_header Cache-Control "public, max-age=31536000, immutable";
+    }
+
+    location / {
+        limit_req zone=web_limit burst=40 nodelay;
+        proxy_pass http://storefront_upstream;
+    }
+}
diff --git a/infrastructure/nginx/nginx.conf b/infrastructure/nginx/nginx.conf
new file mode 100644
index 0000000..55070f2
--- /dev/null
+++ b/infrastructure/nginx/nginx.conf
@@ -0,0 +1,73 @@
+user nginx;
+worker_processes auto;
+error_log /var/log/nginx/error.log warn;
+pid /var/run/nginx.pid;
+
+events {
+    worker_connections 2048;
+    multi_accept on;
+}
+
+http {
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+
+    # `request_id` is generated here when the client did not supply one and is
+    # forwarded to the API, which echoes it back. One id ties the browser's
+    # network tab, this access log and the application log together.
+    log_format json_combined escape=json
+        '{'
+        '"time":"$time_iso8601",'
+        '"request_id":"$http_x_request_id",'
+        '"remote_addr":"$remote_addr",'
+        '"method":"$request_method",'
+        '"uri":"$request_uri",'
+        '"status":$status,'
+        '"bytes":$body_bytes_sent,'
+        '"duration":$request_time,'
+        '"upstream_time":"$upstream_response_time",'
+        '"referer":"$http_referer",'
+        '"user_agent":"$http_user_agent"'
+        '}';
+
+    access_log /var/log/nginx/access.log json_combined;
+
+    sendfile on;
+    tcp_nopush on;
+    tcp_nodelay on;
+    keepalive_timeout 65;
+    server_tokens off;
+
+    client_max_body_size 25m;
+    client_body_timeout 30s;
+
+    gzip on;
+    gzip_vary on;
+    gzip_min_length 1024;
+    gzip_proxied any;
+    gzip_types
+        application/javascript
+        application/json
+        application/xml
+        image/svg+xml
+        text/css
+        text/plain
+        text/xml;
+
+    # Defence in depth. The API rate-limits per actor; this is a blunt
+    # per-IP ceiling that protects the app tier from ever seeing a flood.
+    limit_req_zone $binary_remote_addr zone=api_limit:10m rate=30r/s;
+    limit_req_zone $binary_remote_addr zone=web_limit:10m rate=60r/s;
+    limit_req_status 429;
+
+    proxy_http_version 1.1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Request-Id $request_id;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection "upgrade";
+
+    include /etc/nginx/conf.d/*.conf;
+}
diff --git a/infrastructure/scripts/bootstrap.sh b/infrastructure/scripts/bootstrap.sh
new file mode 100644
index 0000000..a12d701
--- /dev/null
+++ b/infrastructure/scripts/bootstrap.sh
@@ -0,0 +1,78 @@
+#!/usr/bin/env bash
+#
+# One-command local setup. Idempotent: safe to re-run at any time.
+#
+#   pnpm setup
+#
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+cd "$ROOT"
+
+blue()  { printf "\033[34m%s\033[0m\n" "$1"; }
+green() { printf "\033[32m%s\033[0m\n" "$1"; }
+warn()  { printf "\033[33m%s\033[0m\n" "$1"; }
+
+# --- 1. Environment files ---------------------------------------------------
+blue "→ Preparing environment files"
+for example in .env.example apps/api/.env.example apps/storefront/.env.example apps/admin/.env.example; do
+  target="${example%.example}"
+  if [ -f "$target" ]; then
+    echo "  · $target already exists, leaving it alone"
+  else
+    cp "$example" "$target"
+    echo "  · created $target"
+  fi
+done
+
+# --- 2. Real JWT secrets ----------------------------------------------------
+# The committed examples contain obvious placeholders. Replace them with real
+# random values so that no environment — not even a laptop — runs on a secret
+# that exists in the repository.
+if grep -q "dev-only-access-secret-change-me" apps/api/.env 2>/dev/null; then
+  blue "→ Generating JWT secrets"
+  access_secret="$(openssl rand -base64 48 | tr -d '\n/+=' | cut -c1-48)"
+  refresh_secret="$(openssl rand -base64 48 | tr -d '\n/+=' | cut -c1-48)"
+
+  # BSD and GNU sed disagree about -i; write through a temp file instead.
+  tmp="$(mktemp)"
+  sed -e "s|^JWT_ACCESS_SECRET=.*|JWT_ACCESS_SECRET=${access_secret}|" \
+      -e "s|^JWT_REFRESH_SECRET=.*|JWT_REFRESH_SECRET=${refresh_secret}|" \
+      apps/api/.env > "$tmp" && mv "$tmp" apps/api/.env
+  echo "  · wrote fresh secrets to apps/api/.env"
+fi
+
+# --- 3. Dependencies --------------------------------------------------------
+blue "→ Installing dependencies"
+pnpm install
+
+# --- 4. Backing services ----------------------------------------------------
+blue "→ Starting PostgreSQL, Redis, MinIO and Mailpit"
+docker compose up -d postgres redis minio minio-init mailpit
+
+blue "→ Waiting for PostgreSQL"
+for _ in $(seq 1 30); do
+  if docker compose exec -T postgres pg_isready -q 2>/dev/null; then break; fi
+  sleep 1
+done
+
+# --- 5. Database ------------------------------------------------------------
+blue "→ Applying migrations and seeding"
+pnpm --filter @sport/api run db:generate
+if [ -d apps/api/prisma/migrations ]; then
+  pnpm --filter @sport/api exec prisma migrate deploy
+else
+  warn "  · no migrations yet — run: pnpm db:migrate --name init"
+  pnpm --filter @sport/api exec prisma db push
+fi
+pnpm --filter @sport/api run db:seed
+
+green ""
+green "Ready. Start everything with:  pnpm dev"
+green ""
+echo "  Storefront   http://localhost:3000"
+echo "  Admin        http://localhost:3001"
+echo "  API          http://localhost:4000/api/v1/health"
+echo "  API docs     http://localhost:4000/docs"
+echo "  MinIO        http://localhost:9001"
+echo "  Mailpit      http://localhost:8025"
diff --git a/infrastructure/scripts/reset-db.sh b/infrastructure/scripts/reset-db.sh
new file mode 100644
index 0000000..f3b907d
--- /dev/null
+++ b/infrastructure/scripts/reset-db.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+#
+# Destroy and rebuild the local database. Local development only.
+#
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+cd "$ROOT"
+
+printf "\033[33mThis deletes every row in the local database. Continue? [y/N] \033[0m"
+read -r reply
+[[ "$reply" =~ ^[Yy]$ ]] || { echo "Aborted."; exit 0; }
+
+pnpm --filter @sport/api exec prisma migrate reset --force
+printf "\033[32mDatabase reset and reseeded.\033[0m\n"
diff --git a/package.json b/package.json
new file mode 100644
index 0000000..962e048
--- /dev/null
+++ b/package.json
@@ -0,0 +1,44 @@
+{
+  "name": "sport-store",
+  "version": "0.1.0",
+  "private": true,
+  "description": "Modern sports fashion e-commerce platform (monorepo)",
+  "packageManager": "pnpm@10.34.5",
+  "engines": {
+    "node": ">=22.0.0",
+    "pnpm": ">=10.0.0"
+  },
+  "scripts": {
+    "dev": "turbo run dev",
+    "dev:storefront": "turbo run dev --filter=@sport/storefront...",
+    "dev:admin": "turbo run dev --filter=@sport/admin...",
+    "dev:api": "turbo run dev --filter=@sport/api...",
+    "build": "turbo run build",
+    "lint": "turbo run lint",
+    "lint:fix": "turbo run lint -- --fix",
+    "typecheck": "turbo run typecheck",
+    "test": "turbo run test",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "clean": "turbo run clean",
+    "setup": "bash infrastructure/scripts/bootstrap.sh",
+    "infra:up": "docker compose up -d postgres redis minio minio-init mailpit",
+    "infra:down": "docker compose down",
+    "infra:reset": "docker compose down -v && pnpm run infra:up",
+    "infra:logs": "docker compose logs -f",
+    "db:generate": "pnpm --filter @sport/api run db:generate",
+    "db:migrate": "pnpm --filter @sport/api run db:migrate",
+    "db:deploy": "pnpm --filter @sport/api run db:deploy",
+    "db:studio": "pnpm --filter @sport/api run db:studio",
+    "db:seed": "pnpm --filter @sport/api run db:seed",
+    "db:reset": "pnpm --filter @sport/api run db:reset"
+  },
+  "devDependencies": {
+    "@sport/eslint-config": "workspace:*",
+    "eslint": "9.39.5",
+    "prettier": "3.9.6",
+    "prettier-plugin-tailwindcss": "^0.6.14",
+    "turbo": "2.10.9",
+    "typescript": "5.9.3"
+  }
+}
diff --git a/packages/api-client/eslint.config.mjs b/packages/api-client/eslint.config.mjs
new file mode 100644
index 0000000..5eba426
--- /dev/null
+++ b/packages/api-client/eslint.config.mjs
@@ -0,0 +1,3 @@
+import { baseConfig } from '@sport/eslint-config/base';
+
+export default baseConfig;
diff --git a/packages/api-client/package.json b/packages/api-client/package.json
new file mode 100644
index 0000000..9eccb14
--- /dev/null
+++ b/packages/api-client/package.json
@@ -0,0 +1,34 @@
+{
+  "name": "@sport/api-client",
+  "version": "0.0.0",
+  "private": true,
+  "description": "The single sanctioned way for any frontend to talk to the REST API.",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsc -p tsconfig.json --watch --preserveWatchOutput",
+    "clean": "rm -rf dist .turbo *.tsbuildinfo",
+    "lint": "eslint src",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@sport/types": "workspace:*"
+  },
+  "devDependencies": {
+    "@sport/config": "workspace:*",
+    "@sport/eslint-config": "workspace:*",
+    "@types/node": "^22.19.0",
+    "eslint": "catalog:",
+    "typescript": "catalog:"
+  }
+}
diff --git a/packages/api-client/src/create-client.ts b/packages/api-client/src/create-client.ts
new file mode 100644
index 0000000..59cfc07
--- /dev/null
+++ b/packages/api-client/src/create-client.ts
@@ -0,0 +1,22 @@
+import { HttpClient, type HttpClientOptions } from './http-client';
+import { createHealthResource, type HealthResource } from './resources/health';
+
+/**
+ * Resource modules are added here as the backend grows — one file per bounded
+ * context under `src/resources/`, mirroring the NestJS module names exactly.
+ * Keep them thin: URL + types, no business logic and no caching policy (that is
+ * the calling app's decision).
+ */
+export interface ApiClient {
+  readonly http: HttpClient;
+  readonly health: HealthResource;
+}
+
+export function createApiClient(options: HttpClientOptions): ApiClient {
+  const http = new HttpClient(options);
+
+  return {
+    http,
+    health: createHealthResource(http),
+  };
+}
diff --git a/packages/api-client/src/errors.ts b/packages/api-client/src/errors.ts
new file mode 100644
index 0000000..1b71db4
--- /dev/null
+++ b/packages/api-client/src/errors.ts
@@ -0,0 +1,64 @@
+import {
+  API_ERROR_CODES,
+  type ApiErrorBody,
+  type ApiErrorCode,
+  type ApiFieldErrors,
+} from '@sport/types';
+
+/**
+ * Every failure — HTTP error, network failure, malformed body — surfaces as
+ * this one class. Callers never have to inspect a Response object.
+ */
+export class ApiClientError extends Error {
+  readonly code: ApiErrorCode;
+  readonly status: number;
+  readonly fields?: ApiFieldErrors;
+  readonly requestId?: string;
+
+  constructor(params: {
+    code: ApiErrorCode;
+    message: string;
+    status: number;
+    fields?: ApiFieldErrors;
+    requestId?: string;
+    cause?: unknown;
+  }) {
+    super(params.message, { cause: params.cause });
+    this.name = 'ApiClientError';
+    this.code = params.code;
+    this.status = params.status;
+    this.fields = params.fields;
+    this.requestId = params.requestId;
+  }
+
+  static fromBody(body: ApiErrorBody, status: number, requestId?: string): ApiClientError {
+    return new ApiClientError({
+      code: body.code,
+      message: body.message,
+      status,
+      fields: body.fields,
+      requestId,
+    });
+  }
+
+  static network(cause: unknown): ApiClientError {
+    return new ApiClientError({
+      code: API_ERROR_CODES.SERVICE_UNAVAILABLE,
+      message: 'Could not reach the server. Please check your connection and try again.',
+      status: 0,
+      cause,
+    });
+  }
+
+  get isAuthError(): boolean {
+    return this.status === 401;
+  }
+
+  get isValidationError(): boolean {
+    return this.code === API_ERROR_CODES.VALIDATION_FAILED;
+  }
+}
+
+export function isApiClientError(error: unknown): error is ApiClientError {
+  return error instanceof ApiClientError;
+}
diff --git a/packages/api-client/src/http-client.ts b/packages/api-client/src/http-client.ts
new file mode 100644
index 0000000..9b5602b
--- /dev/null
+++ b/packages/api-client/src/http-client.ts
@@ -0,0 +1,156 @@
+import { API_ERROR_CODES, type ApiResponse } from '@sport/types';
+
+import { ApiClientError } from './errors';
+
+export interface HttpClientOptions {
+  /** Origin only, e.g. `http://localhost:4000`. The version prefix is added here. */
+  baseUrl: string;
+  /** Defaults to `v1`. */
+  apiVersion?: string;
+  /** Resolved per request so a rotated token is picked up without re-creating the client. */
+  getAccessToken?: () => string | null | undefined | Promise<string | null | undefined>;
+  /** Invoked once on 401 so the app can refresh or redirect. Return true to retry. */
+  onUnauthorized?: () => boolean | Promise<boolean>;
+  defaultHeaders?: Record<string, string>;
+  timeoutMs?: number;
+  /** Injectable for tests and for runtimes with a patched fetch (Next.js). */
+  fetchImpl?: typeof fetch;
+}
+
+export interface RequestOptions {
+  query?: Record<string, string | number | boolean | null | undefined | readonly string[]>;
+  headers?: Record<string, string>;
+  signal?: AbortSignal;
+  /** Forwarded verbatim to Next.js's extended fetch. Ignored elsewhere. */
+  next?: { revalidate?: number | false; tags?: string[] };
+  cache?: RequestCache;
+  /** Send cookies (used by the refresh-token flow). */
+  credentials?: RequestCredentials;
+}
+
+type Method = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
+
+const DEFAULT_TIMEOUT_MS = 15_000;
+
+export class HttpClient {
+  private readonly baseUrl: string;
+  private readonly apiVersion: string;
+  private readonly options: HttpClientOptions;
+  private readonly fetchImpl: typeof fetch;
+
+  constructor(options: HttpClientOptions) {
+    this.options = options;
+    this.baseUrl = options.baseUrl.replace(/\/+$/, '');
+    this.apiVersion = options.apiVersion ?? 'v1';
+    this.fetchImpl = options.fetchImpl ?? globalThis.fetch;
+  }
+
+  get<T>(path: string, options?: RequestOptions): Promise<T> {
+    return this.request<T>('GET', path, undefined, options);
+  }
+
+  post<T>(path: string, body?: unknown, options?: RequestOptions): Promise<T> {
+    return this.request<T>('POST', path, body, options);
+  }
+
+  patch<T>(path: string, body?: unknown, options?: RequestOptions): Promise<T> {
+    return this.request<T>('PATCH', path, body, options);
+  }
+
+  put<T>(path: string, body?: unknown, options?: RequestOptions): Promise<T> {
+    return this.request<T>('PUT', path, body, options);
+  }
+
+  delete<T>(path: string, options?: RequestOptions): Promise<T> {
+    return this.request<T>('DELETE', path, undefined, options);
+  }
+
+  private async request<T>(
+    method: Method,
+    path: string,
+    body?: unknown,
+    options?: RequestOptions,
+    isRetry = false,
+  ): Promise<T> {
+    const url = this.buildUrl(path, options?.query);
+    const headers = new Headers({
+      Accept: 'application/json',
+      ...this.options.defaultHeaders,
+      ...options?.headers,
+    });
+
+    if (body !== undefined) {
+      headers.set('Content-Type', 'application/json');
+    }
+
+    const token = await this.options.getAccessToken?.();
+    if (token) {
+      headers.set('Authorization', `Bearer ${token}`);
+    }
+
+    const timeout = AbortSignal.timeout(this.options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+    const signal = options?.signal ? AbortSignal.any([options.signal, timeout]) : timeout;
+
+    let response: Response;
+    try {
+      response = await this.fetchImpl(url, {
+        method,
+        headers,
+        body: body === undefined ? undefined : JSON.stringify(body),
+        signal,
+        credentials: options?.credentials ?? 'include',
+        ...(options?.cache ? { cache: options.cache } : {}),
+        ...(options?.next ? { next: options.next } : {}),
+      } as RequestInit);
+    } catch (cause) {
+      throw ApiClientError.network(cause);
+    }
+
+    if (response.status === 401 && !isRetry && this.options.onUnauthorized) {
+      const shouldRetry = await this.options.onUnauthorized();
+      if (shouldRetry) {
+        return this.request<T>(method, path, body, options, true);
+      }
+    }
+
+    if (response.status === 204) {
+      return undefined as T;
+    }
+
+    const requestId = response.headers.get('x-request-id') ?? undefined;
+    let payload: ApiResponse<T>;
+    try {
+      payload = (await response.json()) as ApiResponse<T>;
+    } catch (cause) {
+      throw new ApiClientError({
+        code: API_ERROR_CODES.INTERNAL_ERROR,
+        message: 'The server returned an unreadable response.',
+        status: response.status,
+        requestId,
+        cause,
+      });
+    }
+
+    if (!payload.success) {
+      throw ApiClientError.fromBody(payload.error, response.status, payload.meta?.requestId);
+    }
+
+    return payload.data;
+  }
+
+  private buildUrl(path: string, query?: RequestOptions['query']): string {
+    const normalized = path.startsWith('/') ? path : `/${path}`;
+    const url = new URL(`${this.baseUrl}/api/${this.apiVersion}${normalized}`);
+
+    for (const [key, value] of Object.entries(query ?? {})) {
+      if (value === undefined || value === null || value === '') continue;
+      if (Array.isArray(value)) {
+        if (value.length > 0) url.searchParams.set(key, value.join(','));
+      } else {
+        url.searchParams.set(key, String(value));
+      }
+    }
+
+    return url.toString();
+  }
+}
diff --git a/packages/api-client/src/index.ts b/packages/api-client/src/index.ts
new file mode 100644
index 0000000..53d0d17
--- /dev/null
+++ b/packages/api-client/src/index.ts
@@ -0,0 +1,18 @@
+/**
+ * @sport/api-client
+ *
+ * Storefront and admin reach the backend through this package and nothing else.
+ * No `fetch('/api/...')` calls scattered through components, no duplicated URL
+ * building, no per-app error handling. When the API version bumps or a payload
+ * changes, exactly one package needs updating.
+ *
+ * It is deliberately runtime-agnostic (plain `fetch`, no React) so the same
+ * client works in React Server Components, route handlers, client components
+ * and, later, a React Native app.
+ */
+
+export { ApiClientError, isApiClientError } from './errors';
+export { HttpClient } from './http-client';
+export type { HttpClientOptions, RequestOptions } from './http-client';
+export { createApiClient } from './create-client';
+export type { ApiClient } from './create-client';
diff --git a/packages/api-client/src/resources/health.ts b/packages/api-client/src/resources/health.ts
new file mode 100644
index 0000000..f3614f2
--- /dev/null
+++ b/packages/api-client/src/resources/health.ts
@@ -0,0 +1,28 @@
+import type { HttpClient } from '../http-client';
+
+export interface HealthCheckResult {
+  status: 'ok' | 'degraded';
+  uptimeSeconds: number;
+  version: string;
+  environment: string;
+  dependencies: {
+    database: DependencyStatus;
+    redis: DependencyStatus;
+  };
+}
+
+export interface DependencyStatus {
+  status: 'up' | 'down';
+  latencyMs: number | null;
+  error?: string;
+}
+
+export interface HealthResource {
+  check(): Promise<HealthCheckResult>;
+}
+
+export function createHealthResource(http: HttpClient): HealthResource {
+  return {
+    check: () => http.get<HealthCheckResult>('/health', { cache: 'no-store' }),
+  };
+}
diff --git a/packages/api-client/tsconfig.json b/packages/api-client/tsconfig.json
new file mode 100644
index 0000000..45a8df2
--- /dev/null
+++ b/packages/api-client/tsconfig.json
@@ -0,0 +1,10 @@
+{
+  "extends": "@sport/config/typescript/library.json",
+  "compilerOptions": {
+    "lib": ["ES2023", "DOM"],
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src/**/*.ts"],
+  "exclude": ["node_modules", "dist"]
+}
diff --git a/packages/config/package.json b/packages/config/package.json
new file mode 100644
index 0000000..97baa82
--- /dev/null
+++ b/packages/config/package.json
@@ -0,0 +1,22 @@
+{
+  "name": "@sport/config",
+  "version": "0.0.0",
+  "private": true,
+  "description": "Build-time configuration shared across the workspace (TypeScript bases, Tailwind theme). Contains NO runtime code.",
+  "files": [
+    "typescript",
+    "tailwind"
+  ],
+  "exports": {
+    "./typescript/base.json": "./typescript/base.json",
+    "./typescript/library.json": "./typescript/library.json",
+    "./typescript/react-library.json": "./typescript/react-library.json",
+    "./typescript/nextjs.json": "./typescript/nextjs.json",
+    "./typescript/nestjs.json": "./typescript/nestjs.json",
+    "./tailwind/theme.css": "./tailwind/theme.css"
+  },
+  "scripts": {
+    "lint": "echo 'no lint target'",
+    "typecheck": "echo 'no typecheck target'"
+  }
+}
diff --git a/packages/config/tailwind/theme.css b/packages/config/tailwind/theme.css
new file mode 100644
index 0000000..64587a3
--- /dev/null
+++ b/packages/config/tailwind/theme.css
@@ -0,0 +1,96 @@
+/**
+ * Sport Store — shared design tokens (Tailwind CSS v4, CSS-first configuration).
+ *
+ * This file is the SINGLE source of truth for the visual language of both the
+ * storefront and the admin dashboard. Apps import it after `@import "tailwindcss"`.
+ *
+ * Direction: modern, premium, minimal, sport-oriented (Nike / Gymshark spirit).
+ * High-contrast neutrals, one energetic accent, generous whitespace, tight type.
+ */
+
+@theme {
+  /* ---- Brand ------------------------------------------------------------ */
+  /* Near-black ink, not pure black: prints and photographs better. */
+  --color-ink-50: oklch(0.98 0.002 260);
+  --color-ink-100: oklch(0.95 0.003 260);
+  --color-ink-200: oklch(0.89 0.004 260);
+  --color-ink-300: oklch(0.78 0.005 260);
+  --color-ink-400: oklch(0.63 0.006 260);
+  --color-ink-500: oklch(0.51 0.007 260);
+  --color-ink-600: oklch(0.41 0.008 260);
+  --color-ink-700: oklch(0.32 0.009 260);
+  --color-ink-800: oklch(0.23 0.01 260);
+  --color-ink-900: oklch(0.16 0.011 260);
+  --color-ink-950: oklch(0.11 0.012 260);
+
+  /* Energetic accent — "volt". Used sparingly: CTAs, price, sale badges. */
+  --color-volt-50: oklch(0.97 0.06 125);
+  --color-volt-100: oklch(0.94 0.11 125);
+  --color-volt-200: oklch(0.9 0.16 125);
+  --color-volt-300: oklch(0.86 0.2 125);
+  --color-volt-400: oklch(0.82 0.23 125);
+  --color-volt-500: oklch(0.76 0.24 125);
+  --color-volt-600: oklch(0.66 0.21 125);
+  --color-volt-700: oklch(0.54 0.17 125);
+  --color-volt-800: oklch(0.43 0.13 125);
+  --color-volt-900: oklch(0.35 0.1 125);
+
+  /* Semantic */
+  --color-sale: oklch(0.58 0.21 27);
+  --color-success: oklch(0.65 0.16 155);
+  --color-warning: oklch(0.78 0.15 80);
+  --color-danger: oklch(0.58 0.22 27);
+
+  /* ---- Typography ------------------------------------------------------- */
+  --font-sans: var(--font-inter), ui-sans-serif, system-ui, -apple-system, sans-serif;
+  --font-display: var(--font-display), var(--font-inter), ui-sans-serif, system-ui, sans-serif;
+  --font-mono: ui-monospace, SFMono-Regular, 'SF Mono', Menlo, monospace;
+
+  --tracking-display: -0.03em;
+
+  /* ---- Layout ----------------------------------------------------------- */
+  --spacing-gutter: 1.25rem;
+  --container-page: 90rem;
+
+  --radius-card: 0.25rem;
+  --radius-pill: 999px;
+
+  /* ---- Motion ----------------------------------------------------------- */
+  --ease-out-quint: cubic-bezier(0.22, 1, 0.36, 1);
+  --animate-rise: rise 0.5s var(--ease-out-quint) both;
+}
+
+@keyframes rise {
+  from {
+    opacity: 0;
+    transform: translateY(0.75rem);
+  }
+  to {
+    opacity: 1;
+    transform: none;
+  }
+}
+
+@layer base {
+  :root {
+    color-scheme: light;
+  }
+
+  html {
+    -webkit-font-smoothing: antialiased;
+    text-rendering: optimizeLegibility;
+  }
+
+  /* Sport/streetwear headings: tight, uppercase-capable, no letterspacing drift. */
+  h1,
+  h2,
+  h3 {
+    letter-spacing: var(--tracking-display);
+    text-wrap: balance;
+  }
+
+  ::selection {
+    background-color: var(--color-volt-300);
+    color: var(--color-ink-950);
+  }
+}
diff --git a/packages/config/typescript/base.json b/packages/config/typescript/base.json
new file mode 100644
index 0000000..829f018
--- /dev/null
+++ b/packages/config/typescript/base.json
@@ -0,0 +1,34 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "display": "Sport Store — Base",
+  "compilerOptions": {
+    "target": "ES2023",
+    "lib": ["ES2023"],
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "moduleDetection": "force",
+
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noImplicitOverride": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "allowUnreachableCode": false,
+    "useUnknownInCatchVariables": true,
+
+    "isolatedModules": true,
+    "verbatimModuleSyntax": true,
+    "esModuleInterop": true,
+    "resolveJsonModule": true,
+    "forceConsistentCasingInFileNames": true,
+    "skipLibCheck": true,
+
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "incremental": true,
+    "composite": false,
+  },
+  "exclude": ["node_modules", "dist", "build", ".next", ".turbo", "coverage"],
+}
diff --git a/packages/config/typescript/library.json b/packages/config/typescript/library.json
new file mode 100644
index 0000000..562b84b
--- /dev/null
+++ b/packages/config/typescript/library.json
@@ -0,0 +1,13 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "display": "Sport Store — Compiled Library (CJS + d.ts)",
+  "extends": "./base.json",
+  // NOTE: `outDir` and `rootDir` are deliberately NOT set here. Relative paths
+  // in an extended config resolve against the file that declares them, so they
+  // would point inside packages/config. Each package sets its own.
+  "compilerOptions": {
+    "module": "CommonJS",
+    "moduleResolution": "Node",
+    "verbatimModuleSyntax": false,
+  },
+}
diff --git a/packages/config/typescript/nestjs.json b/packages/config/typescript/nestjs.json
new file mode 100644
index 0000000..d38963d
--- /dev/null
+++ b/packages/config/typescript/nestjs.json
@@ -0,0 +1,21 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "display": "Sport Store — NestJS App",
+  "extends": "./base.json",
+  "compilerOptions": {
+    "module": "CommonJS",
+    "moduleResolution": "Node",
+
+    // NestJS DI relies on `emitDecoratorMetadata`, which needs the *value* of a
+    // constructor parameter's type to survive compilation. `verbatimModuleSyntax`
+    // erases such imports and silently breaks injection — it must stay off here.
+    "verbatimModuleSyntax": false,
+    "experimentalDecorators": true,
+    "emitDecoratorMetadata": true,
+    "strictPropertyInitialization": false,
+
+    // `outDir`/`rootDir` are set by the app — see library.json for why.
+    "declaration": false,
+    "declarationMap": false,
+  },
+}
diff --git a/packages/config/typescript/nextjs.json b/packages/config/typescript/nextjs.json
new file mode 100644
index 0000000..67b8d3d
--- /dev/null
+++ b/packages/config/typescript/nextjs.json
@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "display": "Sport Store — Next.js App",
+  "extends": "./base.json",
+  "compilerOptions": {
+    "lib": ["ES2023", "DOM", "DOM.Iterable"],
+    "jsx": "preserve",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "allowJs": true,
+    "noEmit": true,
+    "declaration": false,
+    "declarationMap": false,
+    "sourceMap": false,
+    "plugins": [{ "name": "next" }],
+  },
+}
diff --git a/packages/config/typescript/react-library.json b/packages/config/typescript/react-library.json
new file mode 100644
index 0000000..0c9ab57
--- /dev/null
+++ b/packages/config/typescript/react-library.json
@@ -0,0 +1,13 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "display": "Sport Store — React Source Library (consumed via transpilePackages)",
+  "extends": "./base.json",
+  "compilerOptions": {
+    "lib": ["ES2023", "DOM", "DOM.Iterable"],
+    "jsx": "react-jsx",
+    "noEmit": true,
+    "declaration": false,
+    "declarationMap": false,
+    "sourceMap": false,
+  },
+}
diff --git a/packages/eslint-config/base.js b/packages/eslint-config/base.js
new file mode 100644
index 0000000..03d59a8
--- /dev/null
+++ b/packages/eslint-config/base.js
@@ -0,0 +1,102 @@
+import js from '@eslint/js';
+import prettier from 'eslint-config-prettier';
+import { createTypeScriptImportResolver } from 'eslint-import-resolver-typescript';
+import importX from 'eslint-plugin-import-x';
+import turbo from 'eslint-plugin-turbo';
+import globals from 'globals';
+import tseslint from 'typescript-eslint';
+
+/**
+ * Base flat config: TypeScript rules + import hygiene + the architectural
+ * boundary rules that every package in the workspace must obey.
+ *
+ * @type {import("eslint").Linter.Config[]}
+ */
+export const baseConfig = [
+  {
+    ignores: [
+      '**/dist/**',
+      '**/build/**',
+      '**/.next/**',
+      '**/.turbo/**',
+      '**/coverage/**',
+      '**/node_modules/**',
+      '**/generated/**',
+    ],
+  },
+  js.configs.recommended,
+  ...tseslint.configs.recommended,
+  importX.flatConfigs.recommended,
+  importX.flatConfigs.typescript,
+  turbo.configs['flat/recommended'],
+  {
+    languageOptions: {
+      ecmaVersion: 2023,
+      globals: { ...globals.node, ...globals.es2021 },
+    },
+    settings: {
+      // TypeScript resolver first: it understands `.ts` extensionless imports,
+      // path aliases and workspace `exports` maps. The node resolver is the
+      // fallback for plain JS config files.
+      'import-x/resolver-next': [
+        createTypeScriptImportResolver({ alwaysTryTypes: true, project: ['*/tsconfig.json'] }),
+        importX.createNodeResolver(),
+      ],
+    },
+    rules: {
+      // --- Type safety -------------------------------------------------
+      '@typescript-eslint/no-unused-vars': [
+        'error',
+        { argsIgnorePattern: '^_', varsIgnorePattern: '^_', caughtErrorsIgnorePattern: '^_' },
+      ],
+      '@typescript-eslint/no-explicit-any': 'error',
+      '@typescript-eslint/consistent-type-imports': [
+        'error',
+        { prefer: 'type-imports', fixStyle: 'inline-type-imports' },
+      ],
+      // `import type` statements stay with their source group rather than being
+      // herded to the bottom of the file, where they lose the context of what
+      // they belong to.
+      '@typescript-eslint/no-import-type-side-effects': 'error',
+      '@typescript-eslint/no-non-null-assertion': 'warn',
+
+      // --- Import hygiene ----------------------------------------------
+      'import-x/no-default-export': 'error',
+      'import-x/order': [
+        'error',
+        {
+          groups: ['builtin', 'external', 'internal', 'parent', 'sibling', 'index'],
+          pathGroups: [{ pattern: '@sport/**', group: 'internal', position: 'before' }],
+          pathGroupsExcludedImportTypes: ['type'],
+          'newlines-between': 'always',
+          alphabetize: { order: 'asc', caseInsensitive: true },
+        },
+      ],
+      'import-x/no-cycle': ['error', { maxDepth: 4 }],
+
+      // --- General ------------------------------------------------------
+      eqeqeq: ['error', 'smart'],
+      'no-console': ['error', { allow: ['warn', 'error'] }],
+      'prefer-const': 'error',
+      'object-shorthand': 'error',
+    },
+  },
+  {
+    // Config files and scripts are allowed default exports and console output.
+    files: ['**/*.config.{js,mjs,ts}', '**/scripts/**', '**/*.cjs'],
+    rules: {
+      'import-x/no-default-export': 'off',
+      'no-console': 'off',
+    },
+  },
+  {
+    files: ['**/*.{test,spec}.{ts,tsx}', '**/test/**'],
+    rules: {
+      '@typescript-eslint/no-explicit-any': 'off',
+      'no-console': 'off',
+    },
+  },
+  prettier,
+];
+
+export default baseConfig;
diff --git a/packages/eslint-config/nest.js b/packages/eslint-config/nest.js
new file mode 100644
index 0000000..6f5207c
--- /dev/null
+++ b/packages/eslint-config/nest.js
@@ -0,0 +1,59 @@
+import { baseConfig } from './base.js';
+
+/**
+ * NestJS config.
+ *
+ * The two rules that matter architecturally:
+ *  1. Only the persistence layer may import PrismaService / Redis directly.
+ *  2. A module must not deep-import another module's internals — cross-module
+ *     access goes through the other module's public surface (`<module>/public`).
+ *
+ * @type {import("eslint").Linter.Config[]}
+ */
+export const nestConfig = [
+  ...baseConfig,
+  {
+    files: ['**/*.ts'],
+    rules: {
+      /**
+       * OFF, and it must stay off.
+       *
+       * Nest resolves constructor dependencies from `emitDecoratorMetadata`,
+       * which requires the parameter's type to survive as a *value* import.
+       * This rule cannot tell an injected class from a pure type, so its
+       * autofix silently rewrites `import { PrismaService }` into
+       * `import { type PrismaService }` — which compiles cleanly and then
+       * fails at runtime with "Nest can't resolve dependencies".
+       *
+       * The same reasoning is why `verbatimModuleSyntax` is disabled in
+       * @sport/config/typescript/nestjs.json.
+       */
+      '@typescript-eslint/consistent-type-imports': 'off',
+
+      // Nest relies on parameter decorators and class-based DI.
+      '@typescript-eslint/no-extraneous-class': 'off',
+      '@typescript-eslint/no-empty-object-type': 'off',
+      'no-console': 'error',
+
+      'no-restricted-imports': [
+        'error',
+        {
+          patterns: [
+            {
+              group: ['@/modules/*/*', '!@/modules/*/public'],
+              message:
+                'Cross-module deep imports are forbidden. Import from `@/modules/<name>/public` instead.',
+            },
+          ],
+        },
+      ],
+    },
+  },
+  {
+    // Decorated DTO / entity classes legitimately have empty bodies.
+    files: ['**/*.dto.ts', '**/*.entity.ts'],
+    rules: { '@typescript-eslint/no-extraneous-class': 'off' },
+  },
+];
+
+export default nestConfig;
diff --git a/packages/eslint-config/next.js b/packages/eslint-config/next.js
new file mode 100644
index 0000000..3e3a10b
--- /dev/null
+++ b/packages/eslint-config/next.js
@@ -0,0 +1,56 @@
+import { reactConfig } from './react.js';
+
+/**
+ * Next.js App Router config.
+ *
+ * Note: the App Router *requires* default exports for `page`/`layout`/`route`
+ * and friends, so the workspace-wide `no-default-export` rule is relaxed for
+ * those files only — everywhere else named exports remain mandatory.
+ *
+ * @type {import("eslint").Linter.Config[]}
+ */
+export const nextConfig = [
+  ...reactConfig,
+  {
+    files: [
+      'src/app/**/{page,layout,template,loading,error,not-found,default,route,global-error,sitemap,robots,opengraph-image,icon,apple-icon,manifest}.{ts,tsx}',
+      'src/middleware.ts',
+      'next.config.{ts,mjs,js}',
+      'instrumentation.ts',
+    ],
+    rules: {
+      'import-x/no-default-export': 'off',
+    },
+  },
+  {
+    files: ['src/**/*.{ts,tsx}'],
+    rules: {
+      // The storefront and admin must reach the backend only through the
+      // generated API client — never with ad-hoc fetch calls or a DB driver.
+      'no-restricted-imports': [
+        'error',
+        {
+          paths: [
+            {
+              name: '@prisma/client',
+              message:
+                'Frontend apps must never talk to the database. Use @sport/api-client instead.',
+            },
+            {
+              name: 'ioredis',
+              message: 'Frontend apps must never talk to Redis. Use @sport/api-client instead.',
+            },
+          ],
+          patterns: [
+            {
+              group: ['@sport/api/*', '@sport/api'],
+              message: 'Frontend apps must not import backend code. Use @sport/api-client.',
+            },
+          ],
+        },
+      ],
+    },
+  },
+];
+
+export default nextConfig;
diff --git a/packages/eslint-config/package.json b/packages/eslint-config/package.json
new file mode 100644
index 0000000..3608e7a
--- /dev/null
+++ b/packages/eslint-config/package.json
@@ -0,0 +1,33 @@
+{
+  "name": "@sport/eslint-config",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "description": "Shared ESLint flat configs for the workspace.",
+  "exports": {
+    "./base": "./base.js",
+    "./react": "./react.js",
+    "./next": "./next.js",
+    "./nest": "./nest.js"
+  },
+  "scripts": {
+    "lint": "echo 'no lint target'",
+    "typecheck": "echo 'no typecheck target'"
+  },
+  "dependencies": {
+    "@eslint/js": "^9.39.0",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-import-resolver-typescript": "^4.4.5",
+    "eslint-plugin-import-x": "^4.16.1",
+    "eslint-plugin-jsx-a11y": "^6.10.2",
+    "eslint-plugin-react": "^7.37.5",
+    "eslint-plugin-react-hooks": "^7.1.1",
+    "eslint-plugin-turbo": "^2.10.9",
+    "globals": "^16.5.0",
+    "typescript-eslint": "^8.67.0"
+  },
+  "devDependencies": {
+    "eslint": "catalog:",
+    "typescript": "catalog:"
+  }
+}
diff --git a/packages/eslint-config/react.js b/packages/eslint-config/react.js
new file mode 100644
index 0000000..44ff09a
--- /dev/null
+++ b/packages/eslint-config/react.js
@@ -0,0 +1,34 @@
+import globals from 'globals';
+import a11y from 'eslint-plugin-jsx-a11y';
+import react from 'eslint-plugin-react';
+import reactHooks from 'eslint-plugin-react-hooks';
+
+import { baseConfig } from './base.js';
+
+/** @type {import("eslint").Linter.Config[]} */
+export const reactConfig = [
+  ...baseConfig,
+  {
+    files: ['**/*.{ts,tsx}'],
+    ...react.configs.flat.recommended,
+    languageOptions: {
+      ...react.configs.flat.recommended.languageOptions,
+      globals: { ...globals.browser, ...globals.serviceworker },
+    },
+    settings: { react: { version: 'detect' } },
+  },
+  {
+    files: ['**/*.{ts,tsx}'],
+    plugins: { 'react-hooks': reactHooks, 'jsx-a11y': a11y },
+    rules: {
+      ...reactHooks.configs.recommended.rules,
+      ...a11y.flatConfigs.recommended.rules,
+      'react/react-in-jsx-scope': 'off',
+      'react/prop-types': 'off',
+      'react/jsx-curly-brace-presence': ['error', { props: 'never', children: 'never' }],
+      'react/self-closing-comp': 'error',
+    },
+  },
+];
+
+export default reactConfig;
diff --git a/packages/types/eslint.config.mjs b/packages/types/eslint.config.mjs
new file mode 100644
index 0000000..5eba426
--- /dev/null
+++ b/packages/types/eslint.config.mjs
@@ -0,0 +1,3 @@
+import { baseConfig } from '@sport/eslint-config/base';
+
+export default baseConfig;
diff --git a/packages/types/package.json b/packages/types/package.json
new file mode 100644
index 0000000..b5c41ca
--- /dev/null
+++ b/packages/types/package.json
@@ -0,0 +1,30 @@
+{
+  "name": "@sport/types",
+  "version": "0.0.0",
+  "private": true,
+  "description": "Framework-free domain and API contract types shared by api, storefront and admin.",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsc -p tsconfig.json --watch --preserveWatchOutput",
+    "clean": "rm -rf dist .turbo *.tsbuildinfo",
+    "lint": "eslint src",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "devDependencies": {
+    "@sport/config": "workspace:*",
+    "@sport/eslint-config": "workspace:*",
+    "eslint": "catalog:",
+    "typescript": "catalog:"
+  }
+}
diff --git a/packages/types/src/api/envelope.ts b/packages/types/src/api/envelope.ts
new file mode 100644
index 0000000..5843289
--- /dev/null
+++ b/packages/types/src/api/envelope.ts
@@ -0,0 +1,45 @@
+import type { IsoDateTime } from '../primitives';
+
+import type { ApiErrorCode } from './error-codes';
+
+/**
+ * Every REST response uses one of these two shapes. No exceptions, including
+ * 500s — the global exception filter guarantees it. Clients can therefore
+ * branch on `success` alone and never on the HTTP status code.
+ */
+
+export interface ApiMeta {
+  /** Correlates client logs, server logs and traces. Echoed as `x-request-id`. */
+  readonly requestId: string;
+  readonly timestamp: IsoDateTime;
+}
+
+export interface ApiSuccessResponse<TData> {
+  readonly success: true;
+  readonly data: TData;
+  readonly meta: ApiMeta;
+}
+
+/** Field-level validation problems, keyed by dotted path (`items.0.quantity`). */
+export type ApiFieldErrors = Readonly<Record<string, readonly string[]>>;
+
+export interface ApiErrorBody {
+  readonly code: ApiErrorCode;
+  /** Safe to show to end users; already localised by the backend. */
+  readonly message: string;
+  readonly fields?: ApiFieldErrors;
+  /** Present only outside production. */
+  readonly stack?: string;
+}
+
+export interface ApiErrorResponse {
+  readonly success: false;
+  readonly error: ApiErrorBody;
+  readonly meta: ApiMeta;
+}
+
+export type ApiResponse<TData> = ApiSuccessResponse<TData> | ApiErrorResponse;
+
+export function isApiError<T>(response: ApiResponse<T>): response is ApiErrorResponse {
+  return response.success === false;
+}
diff --git a/packages/types/src/api/error-codes.ts b/packages/types/src/api/error-codes.ts
new file mode 100644
index 0000000..ce38134
--- /dev/null
+++ b/packages/types/src/api/error-codes.ts
@@ -0,0 +1,61 @@
+/**
+ * Stable, machine-readable error codes.
+ *
+ * Contract: a code is NEVER renamed or repurposed once shipped — clients,
+ * mobile apps and partner integrations branch on these strings. Adding a new
+ * code is always safe; changing one is a breaking API change.
+ *
+ * Format: `<DOMAIN>_<CONDITION>`.
+ */
+export const API_ERROR_CODES = {
+  // --- Generic / transport ------------------------------------------------
+  BAD_REQUEST: 'BAD_REQUEST',
+  VALIDATION_FAILED: 'VALIDATION_FAILED',
+  NOT_FOUND: 'NOT_FOUND',
+  CONFLICT: 'CONFLICT',
+  RATE_LIMITED: 'RATE_LIMITED',
+  INTERNAL_ERROR: 'INTERNAL_ERROR',
+  SERVICE_UNAVAILABLE: 'SERVICE_UNAVAILABLE',
+
+  // --- Authentication / authorization -------------------------------------
+  UNAUTHENTICATED: 'UNAUTHENTICATED',
+  INVALID_CREDENTIALS: 'INVALID_CREDENTIALS',
+  TOKEN_EXPIRED: 'TOKEN_EXPIRED',
+  TOKEN_INVALID: 'TOKEN_INVALID',
+  FORBIDDEN: 'FORBIDDEN',
+  PERMISSION_DENIED: 'PERMISSION_DENIED',
+  ACCOUNT_DISABLED: 'ACCOUNT_DISABLED',
+
+  // --- Catalog -------------------------------------------------------------
+  PRODUCT_NOT_FOUND: 'PRODUCT_NOT_FOUND',
+  VARIANT_NOT_FOUND: 'VARIANT_NOT_FOUND',
+  VARIANT_UNAVAILABLE: 'VARIANT_UNAVAILABLE',
+
+  // --- Inventory -----------------------------------------------------------
+  INSUFFICIENT_STOCK: 'INSUFFICIENT_STOCK',
+  RESERVATION_EXPIRED: 'RESERVATION_EXPIRED',
+
+  // --- Cart / checkout / order --------------------------------------------
+  CART_NOT_FOUND: 'CART_NOT_FOUND',
+  CART_EMPTY: 'CART_EMPTY',
+  CHECKOUT_EXPIRED: 'CHECKOUT_EXPIRED',
+  ORDER_NOT_FOUND: 'ORDER_NOT_FOUND',
+  ORDER_NOT_CANCELLABLE: 'ORDER_NOT_CANCELLABLE',
+
+  // --- Promotions ----------------------------------------------------------
+  COUPON_INVALID: 'COUPON_INVALID',
+  COUPON_EXPIRED: 'COUPON_EXPIRED',
+  COUPON_USAGE_EXCEEDED: 'COUPON_USAGE_EXCEEDED',
+
+  // --- Payment -------------------------------------------------------------
+  PAYMENT_FAILED: 'PAYMENT_FAILED',
+  PAYMENT_PROVIDER_ERROR: 'PAYMENT_PROVIDER_ERROR',
+  PAYMENT_SIGNATURE_INVALID: 'PAYMENT_SIGNATURE_INVALID',
+
+  // --- Media ---------------------------------------------------------------
+  UPLOAD_REJECTED: 'UPLOAD_REJECTED',
+  FILE_TOO_LARGE: 'FILE_TOO_LARGE',
+  UNSUPPORTED_MEDIA_TYPE: 'UNSUPPORTED_MEDIA_TYPE',
+} as const;
+
+export type ApiErrorCode = (typeof API_ERROR_CODES)[keyof typeof API_ERROR_CODES];
diff --git a/packages/types/src/api/pagination.ts b/packages/types/src/api/pagination.ts
new file mode 100644
index 0000000..c200cf6
--- /dev/null
+++ b/packages/types/src/api/pagination.ts
@@ -0,0 +1,49 @@
+/**
+ * Two pagination strategies, chosen per endpoint and never mixed:
+ *
+ *  - OFFSET  — admin tables, where "page 7 of 42" is a real requirement.
+ *  - CURSOR  — storefront listings and infinite scroll, where correctness under
+ *              concurrent writes matters more than random access.
+ */
+
+export interface OffsetPageQuery {
+  page?: number;
+  perPage?: number;
+}
+
+export interface OffsetPageInfo {
+  readonly page: number;
+  readonly perPage: number;
+  readonly totalItems: number;
+  readonly totalPages: number;
+  readonly hasNextPage: boolean;
+}
+
+export interface OffsetPaginated<T> {
+  readonly items: readonly T[];
+  readonly pageInfo: OffsetPageInfo;
+}
+
+export interface CursorPageQuery {
+  cursor?: string | null;
+  limit?: number;
+}
+
+export interface CursorPageInfo {
+  readonly nextCursor: string | null;
+  readonly hasNextPage: boolean;
+}
+
+export interface CursorPaginated<T> {
+  readonly items: readonly T[];
+  readonly pageInfo: CursorPageInfo;
+}
+
+export type SortDirection = 'asc' | 'desc';
+
+export const PAGINATION_DEFAULTS = {
+  perPage: 24,
+  maxPerPage: 100,
+  cursorLimit: 24,
+  maxCursorLimit: 100,
+} as const;
diff --git a/packages/types/src/auth/actors.ts b/packages/types/src/auth/actors.ts
new file mode 100644
index 0000000..0f142d4
--- /dev/null
+++ b/packages/types/src/auth/actors.ts
@@ -0,0 +1,38 @@
+/**
+ * Two distinct actor populations live in this system and they must never be
+ * merged into one table or one token audience:
+ *
+ *  - CUSTOMER  — self-registered shoppers, authenticated on the storefront.
+ *  - STAFF / ADMIN / SUPER_ADMIN — back-office operators, authenticated on the
+ *    admin dashboard, always subject to RBAC.
+ *
+ * A customer token is rejected by admin endpoints purely on audience, before
+ * any permission check runs. That is a defence-in-depth boundary, not an
+ * optimisation.
+ */
+export const USER_TYPES = {
+  CUSTOMER: 'CUSTOMER',
+  STAFF: 'STAFF',
+  ADMIN: 'ADMIN',
+  SUPER_ADMIN: 'SUPER_ADMIN',
+} as const;
+
+export type UserType = (typeof USER_TYPES)[keyof typeof USER_TYPES];
+
+export const BACK_OFFICE_USER_TYPES: readonly UserType[] = [
+  USER_TYPES.STAFF,
+  USER_TYPES.ADMIN,
+  USER_TYPES.SUPER_ADMIN,
+];
+
+export function isBackOfficeUser(type: UserType): boolean {
+  return BACK_OFFICE_USER_TYPES.includes(type);
+}
+
+/** Token audience — encoded in the JWT and validated per guard. */
+export const TOKEN_AUDIENCES = {
+  STOREFRONT: 'storefront',
+  ADMIN: 'admin',
+} as const;
+
+export type TokenAudience = (typeof TOKEN_AUDIENCES)[keyof typeof TOKEN_AUDIENCES];
diff --git a/packages/types/src/auth/permissions.ts b/packages/types/src/auth/permissions.ts
new file mode 100644
index 0000000..f310f08
--- /dev/null
+++ b/packages/types/src/auth/permissions.ts
@@ -0,0 +1,104 @@
+/**
+ * RBAC permission catalog — `<resource>.<action>`.
+ *
+ * Authorization is expressed ONLY as permission checks. There is deliberately
+ * no `if (user.role === 'ADMIN')` anywhere in the codebase: roles are data
+ * (rows in the database, editable by a SUPER_ADMIN), permissions are code.
+ *
+ * Adding a capability = add a constant here + attach it to a role in the seed.
+ * The admin UI reads the same catalog to render menus, so a permission the
+ * user lacks never renders a dead-end screen.
+ */
+export const PERMISSIONS = {
+  // Catalog
+  PRODUCT_READ: 'product.read',
+  PRODUCT_CREATE: 'product.create',
+  PRODUCT_UPDATE: 'product.update',
+  PRODUCT_DELETE: 'product.delete',
+  PRODUCT_PUBLISH: 'product.publish',
+
+  CATEGORY_READ: 'category.read',
+  CATEGORY_MANAGE: 'category.manage',
+  COLLECTION_READ: 'collection.read',
+  COLLECTION_MANAGE: 'collection.manage',
+  BRAND_READ: 'brand.read',
+  BRAND_MANAGE: 'brand.manage',
+
+  // Inventory
+  INVENTORY_READ: 'inventory.read',
+  INVENTORY_UPDATE: 'inventory.update',
+
+  // Sales
+  ORDER_READ: 'order.read',
+  ORDER_UPDATE: 'order.update',
+  ORDER_CANCEL: 'order.cancel',
+  ORDER_REFUND: 'order.refund',
+
+  PAYMENT_READ: 'payment.read',
+  PAYMENT_REFUND: 'payment.refund',
+
+  // Customers
+  CUSTOMER_READ: 'customer.read',
+  CUSTOMER_UPDATE: 'customer.update',
+  CUSTOMER_DELETE: 'customer.delete',
+
+  // Marketing
+  PROMOTION_MANAGE: 'promotion.manage',
+  COUPON_MANAGE: 'coupon.manage',
+  REVIEW_MODERATE: 'review.moderate',
+
+  // Content
+  CMS_READ: 'cms.read',
+  CMS_MANAGE: 'cms.manage',
+  MEDIA_READ: 'media.read',
+  MEDIA_UPLOAD: 'media.upload',
+  MEDIA_DELETE: 'media.delete',
+
+  // Platform administration
+  USER_READ: 'user.read',
+  USER_MANAGE: 'user.manage',
+  ROLE_READ: 'role.read',
+  ROLE_MANAGE: 'role.manage',
+  SETTINGS_MANAGE: 'settings.manage',
+  AUDIT_LOG_READ: 'audit_log.read',
+} as const;
+
+export type Permission = (typeof PERMISSIONS)[keyof typeof PERMISSIONS];
+
+export const ALL_PERMISSIONS: readonly Permission[] = Object.values(PERMISSIONS);
+
+/**
+ * Seed roles. These are *starting data*, not hard-coded authorization: an
+ * operator can create new roles at runtime without a deploy.
+ */
+export const SYSTEM_ROLES = {
+  SUPER_ADMIN: 'super_admin',
+  ADMIN: 'admin',
+  CATALOG_MANAGER: 'catalog_manager',
+  ORDER_MANAGER: 'order_manager',
+  SUPPORT_AGENT: 'support_agent',
+  CUSTOMER: 'customer',
+} as const;
+
+export type SystemRole = (typeof SYSTEM_ROLES)[keyof typeof SYSTEM_ROLES];
+
+export function hasPermission(
+  granted: readonly Permission[] | undefined,
+  required: Permission,
+): boolean {
+  return granted?.includes(required) ?? false;
+}
+
+export function hasAllPermissions(
+  granted: readonly Permission[] | undefined,
+  required: readonly Permission[],
+): boolean {
+  return required.every((permission) => hasPermission(granted, permission));
+}
+
+export function hasAnyPermission(
+  granted: readonly Permission[] | undefined,
+  required: readonly Permission[],
+): boolean {
+  return required.some((permission) => hasPermission(granted, permission));
+}
diff --git a/packages/types/src/auth/tokens.ts b/packages/types/src/auth/tokens.ts
new file mode 100644
index 0000000..f5feb2e
--- /dev/null
+++ b/packages/types/src/auth/tokens.ts
@@ -0,0 +1,40 @@
+import type { Id, IsoDateTime } from '../primitives';
+
+import type { TokenAudience, UserType } from './actors';
+import type { Permission } from './permissions';
+
+/**
+ * Access token: short-lived (minutes), stateless, carries the permission set so
+ * that guards need zero database round-trips on the hot path.
+ *
+ * Refresh token: long-lived (days), opaque to the client, ROTATED on every use
+ * and persisted server-side so it can be revoked. Reuse of an already-rotated
+ * refresh token invalidates the whole family (theft detection).
+ */
+export interface AccessTokenClaims {
+  /** Subject — the User id. */
+  readonly sub: Id;
+  readonly aud: TokenAudience;
+  readonly type: UserType;
+  readonly permissions: readonly Permission[];
+  /** Session/token family id, so a single device can be signed out. */
+  readonly sid: Id;
+  readonly iat: number;
+  readonly exp: number;
+}
+
+export interface AuthTokens {
+  readonly accessToken: string;
+  readonly accessTokenExpiresAt: IsoDateTime;
+  /** Delivered as an httpOnly, Secure, SameSite=Lax cookie — never in the body. */
+  readonly refreshTokenExpiresAt: IsoDateTime;
+}
+
+/** The shape every guard attaches to the request. */
+export interface AuthenticatedActor {
+  readonly userId: Id;
+  readonly userType: UserType;
+  readonly audience: TokenAudience;
+  readonly permissions: readonly Permission[];
+  readonly sessionId: Id;
+}
diff --git a/packages/types/src/catalog/media.ts b/packages/types/src/catalog/media.ts
new file mode 100644
index 0000000..dea8ff9
--- /dev/null
+++ b/packages/types/src/catalog/media.ts
@@ -0,0 +1,50 @@
+import type { Id, Nullable } from '../primitives';
+
+/**
+ * Binary data NEVER touches PostgreSQL. The database stores an object key plus
+ * metadata; bytes live in R2/S3 and are served through the CDN.
+ *
+ * `url` is derived at read time from `storageKey` + the public media base URL,
+ * so swapping bucket, CDN domain or provider is a config change and not a
+ * data migration.
+ */
+export const MEDIA_KINDS = {
+  IMAGE: 'IMAGE',
+  VIDEO: 'VIDEO',
+  DOCUMENT: 'DOCUMENT',
+} as const;
+
+export type MediaKind = (typeof MEDIA_KINDS)[keyof typeof MEDIA_KINDS];
+
+export interface MediaAsset {
+  readonly id: Id;
+  readonly kind: MediaKind;
+  /** Path inside the bucket, e.g. `products/2026/01/xy7.webp`. Never a full URL. */
+  readonly storageKey: string;
+  readonly url: string;
+  readonly mimeType: string;
+  readonly sizeBytes: number;
+  readonly width: Nullable<number>;
+  readonly height: Nullable<number>;
+  /** Tiny base64 LQIP so grids never flash empty. */
+  readonly blurDataUrl: Nullable<string>;
+  readonly altText: Nullable<string>;
+}
+
+export interface ImageRef {
+  readonly id: Id;
+  readonly url: string;
+  readonly altText: Nullable<string>;
+  readonly width: Nullable<number>;
+  readonly height: Nullable<number>;
+  readonly blurDataUrl: Nullable<string>;
+}
+
+export interface ProductImage extends ImageRef {
+  readonly position: number;
+  /**
+   * When set, this image belongs to a specific option value (usually a colour),
+   * which is how the gallery swaps when a shopper picks "Black" vs "White".
+   */
+  readonly optionValueId: Nullable<Id>;
+}
diff --git a/packages/types/src/catalog/product.ts b/packages/types/src/catalog/product.ts
new file mode 100644
index 0000000..def1e60
--- /dev/null
+++ b/packages/types/src/catalog/product.ts
@@ -0,0 +1,127 @@
+import type { Id, IsoDateTime, Metadata, Money, Nullable, Slug } from '../primitives';
+
+import type { ProductImage } from './media';
+import type { Brand, Category, Collection, SeoFields } from './taxonomy';
+import type { ProductOption, ProductVariant, StorefrontVariant } from './variant';
+
+export const PRODUCT_STATUSES = {
+  DRAFT: 'DRAFT',
+  ACTIVE: 'ACTIVE',
+  ARCHIVED: 'ARCHIVED',
+} as const;
+
+export type ProductStatus = (typeof PRODUCT_STATUSES)[keyof typeof PRODUCT_STATUSES];
+
+/** Merchandising axis for /men, /women, /kids. Not a category — a facet. */
+export const GENDER_TARGETS = {
+  MEN: 'MEN',
+  WOMEN: 'WOMEN',
+  KIDS: 'KIDS',
+  UNISEX: 'UNISEX',
+} as const;
+
+export type GenderTarget = (typeof GENDER_TARGETS)[keyof typeof GENDER_TARGETS];
+
+/** Facet behind /sports/running, /sports/gym, … */
+export const SPORT_TYPES = {
+  RUNNING: 'RUNNING',
+  FOOTBALL: 'FOOTBALL',
+  TRAINING: 'TRAINING',
+  GYM: 'GYM',
+  BADMINTON: 'BADMINTON',
+  LIFESTYLE: 'LIFESTYLE',
+} as const;
+
+export type SportType = (typeof SPORT_TYPES)[keyof typeof SPORT_TYPES];
+
+/**
+ * Product is the *marketing* entity: what has a page, a name and a URL.
+ * It is never the thing you buy — a ProductVariant is. Product therefore holds
+ * no SKU, no stock and no single price.
+ */
+export interface Product {
+  readonly id: Id;
+  readonly name: string;
+  readonly slug: Slug;
+  readonly description: Nullable<string>;
+  readonly shortDescription: Nullable<string>;
+
+  readonly status: ProductStatus;
+  readonly publishedAt: Nullable<IsoDateTime>;
+
+  readonly brandId: Nullable<Id>;
+  readonly primaryCategoryId: Nullable<Id>;
+
+  readonly genderTargets: readonly GenderTarget[];
+  readonly sportTypes: readonly SportType[];
+
+  readonly options: readonly ProductOption[];
+  readonly variants: readonly ProductVariant[];
+  readonly images: readonly ProductImage[];
+  readonly attributes: readonly ProductAttribute[];
+
+  readonly seo: SeoFields;
+  readonly metadata: Metadata;
+  readonly createdAt: IsoDateTime;
+  readonly updatedAt: IsoDateTime;
+}
+
+/**
+ * Free-form specification rows ("Material: 92% polyester", "Fit: Slim").
+ * Deliberately generic: merchandisers add specs without a schema migration.
+ * Anything that must be *filtered on* becomes a first-class facet instead.
+ */
+export interface ProductAttribute {
+  readonly id: Id;
+  readonly key: string;
+  readonly label: string;
+  readonly value: string;
+  readonly group: Nullable<string>;
+  readonly position: number;
+  readonly isFilterable: boolean;
+}
+
+/** Full PDP payload. */
+export interface StorefrontProduct extends Omit<
+  Product,
+  'variants' | 'status' | 'metadata' | 'createdAt' | 'updatedAt'
+> {
+  readonly brand: Nullable<Brand>;
+  readonly primaryCategory: Nullable<Category>;
+  readonly collections: readonly Collection[];
+  readonly variants: readonly StorefrontVariant[];
+  readonly priceRange: PriceRange;
+  readonly rating: Nullable<ProductRatingSummary>;
+}
+
+/** Trimmed payload for grids — deliberately small, it is fetched 24 at a time. */
+export interface ProductListItem {
+  readonly id: Id;
+  readonly name: string;
+  readonly slug: Slug;
+  readonly brandName: Nullable<string>;
+  readonly primaryImage: Nullable<ProductImage>;
+  readonly hoverImage: Nullable<ProductImage>;
+  readonly priceRange: PriceRange;
+  readonly isOnSale: boolean;
+  readonly colorSwatches: readonly ColorSwatch[];
+  readonly rating: Nullable<ProductRatingSummary>;
+}
+
+export interface ColorSwatch {
+  readonly optionValueId: Id;
+  readonly label: string;
+  readonly swatchHex: Nullable<string>;
+  readonly swatchImageUrl: Nullable<string>;
+}
+
+export interface PriceRange {
+  readonly min: Money;
+  readonly max: Money;
+  readonly compareAtMax: Nullable<Money>;
+}
+
+export interface ProductRatingSummary {
+  readonly average: number;
+  readonly count: number;
+}
diff --git a/packages/types/src/catalog/taxonomy.ts b/packages/types/src/catalog/taxonomy.ts
new file mode 100644
index 0000000..11b6ecd
--- /dev/null
+++ b/packages/types/src/catalog/taxonomy.ts
@@ -0,0 +1,71 @@
+import type { Id, IsoDateTime, Metadata, Nullable, Slug } from '../primitives';
+
+import type { ImageRef } from './media';
+
+/**
+ * Three orthogonal ways to group products. Keeping them separate is what lets
+ * `/men/running` and `/collections/summer-drop` coexist without either one
+ * hijacking the other's URL space.
+ *
+ *  - Category  — the permanent, hierarchical merchandising tree
+ *                (Men > Running > Shoes). One product has one primary category.
+ *  - Collection— an editorial / campaign grouping, possibly rule-based and
+ *                time-boxed (New Arrivals, Summer Drop, Sale). Many-to-many.
+ *  - Brand     — the manufacturer. One product has exactly one.
+ */
+
+export interface Category {
+  readonly id: Id;
+  readonly parentId: Nullable<Id>;
+  readonly name: string;
+  readonly slug: Slug;
+  readonly description: Nullable<string>;
+  readonly image: Nullable<ImageRef>;
+  /** Materialised path (`men/running/shoes`) — one query for a whole subtree. */
+  readonly path: string;
+  readonly depth: number;
+  readonly position: number;
+  readonly isActive: boolean;
+  readonly seo: SeoFields;
+}
+
+export interface CategoryNode extends Category {
+  readonly children: readonly CategoryNode[];
+}
+
+export const COLLECTION_TYPES = {
+  MANUAL: 'MANUAL',
+  /** Membership derived from rules (e.g. "price < 500k AND tag = sale"). */
+  AUTOMATED: 'AUTOMATED',
+} as const;
+
+export type CollectionType = (typeof COLLECTION_TYPES)[keyof typeof COLLECTION_TYPES];
+
+export interface Collection {
+  readonly id: Id;
+  readonly name: string;
+  readonly slug: Slug;
+  readonly type: CollectionType;
+  readonly description: Nullable<string>;
+  readonly banner: Nullable<ImageRef>;
+  readonly startsAt: Nullable<IsoDateTime>;
+  readonly endsAt: Nullable<IsoDateTime>;
+  readonly isActive: boolean;
+  readonly seo: SeoFields;
+}
+
+export interface Brand {
+  readonly id: Id;
+  readonly name: string;
+  readonly slug: Slug;
+  readonly logo: Nullable<ImageRef>;
+  readonly description: Nullable<string>;
+  readonly isActive: boolean;
+  readonly seo: SeoFields;
+}
+
+export interface SeoFields {
+  readonly metaTitle: Nullable<string>;
+  readonly metaDescription: Nullable<string>;
+  readonly metadata?: Metadata;
+}
diff --git a/packages/types/src/catalog/variant.ts b/packages/types/src/catalog/variant.ts
new file mode 100644
index 0000000..6afe4e9
--- /dev/null
+++ b/packages/types/src/catalog/variant.ts
@@ -0,0 +1,116 @@
+import type { Id, IsoDateTime, Money, Nullable } from '../primitives';
+
+/**
+ * THE central catalog decision.
+ *
+ * Size and colour are NOT fields on Product. A Product owns an ordered list of
+ * ProductOptions (Colour, Size, …), each option owns ordered ProductOptionValues
+ * (Black/White, S/M/L), and every purchasable combination is a ProductVariant
+ * with its own SKU, price and stock.
+ *
+ *   Running Shirt (Product)
+ *   ├── Option "Colour" → Black, White
+ *   ├── Option "Size"   → S, M, L
+ *   └── Variants: Black/S, Black/M, Black/L, White/S, White/M, White/L
+ *
+ * Why this and not `sizes: string[]` on Product:
+ *  - Stock, price, barcode and weight are per combination in the real world.
+ *  - Order lines must reference an immutable, sellable unit (the variant id).
+ *  - A third option (width, length, fit) is additive instead of a migration.
+ *  - Marketplaces (Shopee/Lazada/TikTok) and ERP/POS all model variants this
+ *    way, so integrations map 1:1 instead of needing a translation layer.
+ */
+
+export interface ProductOption {
+  readonly id: Id;
+  /** Display name shown to shoppers: "Colour", "Size". */
+  readonly name: string;
+  /** Stable machine key: `colour`, `size`. Used by URL params and integrations. */
+  readonly key: string;
+  readonly position: number;
+  readonly values: readonly ProductOptionValue[];
+}
+
+export interface ProductOptionValue {
+  readonly id: Id;
+  readonly optionId: Id;
+  /** "Black", "M". */
+  readonly label: string;
+  readonly value: string;
+  readonly position: number;
+  /** Swatch hex / image for colour-type options. */
+  readonly swatchHex: Nullable<string>;
+  readonly swatchImageUrl: Nullable<string>;
+}
+
+export const VARIANT_STATUSES = {
+  ACTIVE: 'ACTIVE',
+  /** Still referenced by past orders, no longer sellable. Never hard-deleted. */
+  ARCHIVED: 'ARCHIVED',
+} as const;
+
+export type VariantStatus = (typeof VARIANT_STATUSES)[keyof typeof VARIANT_STATUSES];
+
+export interface ProductVariant {
+  readonly id: Id;
+  readonly productId: Id;
+
+  /** Unique across the whole catalog. The identifier ERP/POS/marketplaces use. */
+  readonly sku: string;
+  readonly barcode: Nullable<string>;
+
+  /** Denormalised for display and order snapshots: "Black / M". */
+  readonly title: string;
+
+  readonly price: Money;
+  /** Non-null only while on promotion; the effective price is derived. */
+  readonly salePrice: Nullable<Money>;
+  /** What it "was" — for the struck-through reference price. */
+  readonly compareAtPrice: Nullable<Money>;
+  /** Landed cost. Admin-only; never serialised to the storefront. */
+  readonly costPrice?: Nullable<Money>;
+
+  /** Grams. Required by every shipping-rate API. */
+  readonly weightGrams: Nullable<number>;
+  readonly dimensions: Nullable<VariantDimensions>;
+
+  /** Which option value this variant resolves to for each of the product's options. */
+  readonly optionValues: readonly VariantOptionValueRef[];
+
+  readonly status: VariantStatus;
+  readonly position: number;
+  readonly createdAt: IsoDateTime;
+  readonly updatedAt: IsoDateTime;
+}
+
+export interface VariantOptionValueRef {
+  readonly optionId: Id;
+  readonly optionKey: string;
+  readonly optionValueId: Id;
+  readonly label: string;
+}
+
+export interface VariantDimensions {
+  readonly lengthMm: number;
+  readonly widthMm: number;
+  readonly heightMm: number;
+}
+
+/** What the storefront actually renders on a product card / PDP selector. */
+export interface StorefrontVariant extends Omit<
+  ProductVariant,
+  'costPrice' | 'createdAt' | 'updatedAt'
+> {
+  readonly effectivePrice: Money;
+  readonly isOnSale: boolean;
+  readonly availability: VariantAvailability;
+}
+
+export const VARIANT_AVAILABILITY = {
+  IN_STOCK: 'IN_STOCK',
+  LOW_STOCK: 'LOW_STOCK',
+  OUT_OF_STOCK: 'OUT_OF_STOCK',
+  PREORDER: 'PREORDER',
+} as const;
+
+export type VariantAvailability = (typeof VARIANT_AVAILABILITY)[keyof typeof VARIANT_AVAILABILITY];
diff --git a/packages/types/src/index.ts b/packages/types/src/index.ts
new file mode 100644
index 0000000..62e7fa0
--- /dev/null
+++ b/packages/types/src/index.ts
@@ -0,0 +1,20 @@
+/**
+ * @sport/types — the shared contract between backend and frontends.
+ *
+ * HARD RULE: this package must stay framework-free. No NestJS, no React, no
+ * Prisma, no Zod, no runtime dependencies at all beyond plain TypeScript.
+ * Anything that needs a runtime belongs in @sport/validation or @sport/api-client.
+ */
+
+export * from './primitives';
+export * from './api/envelope';
+export * from './api/error-codes';
+export * from './api/pagination';
+export * from './auth/actors';
+export * from './auth/permissions';
+export * from './auth/tokens';
+export * from './catalog/product';
+export * from './catalog/variant';
+export * from './catalog/taxonomy';
+export * from './catalog/media';
+export * from './inventory/stock';
diff --git a/packages/types/src/inventory/stock.ts b/packages/types/src/inventory/stock.ts
new file mode 100644
index 0000000..766ef06
--- /dev/null
+++ b/packages/types/src/inventory/stock.ts
@@ -0,0 +1,63 @@
+import type { Id, IsoDateTime, Nullable } from '../primitives';
+
+/**
+ * Inventory is tracked per (variant, location). Even with a single warehouse on
+ * day one, the location dimension exists from the start — retrofitting it after
+ * orders exist is one of the most expensive migrations in e-commerce.
+ *
+ * Availability is always computed, never stored:
+ *     available = onHand - reserved
+ *
+ * `reserved` is what checkout holds while a payment is in flight, which is what
+ * prevents overselling the last size M.
+ */
+export interface StockLevel {
+  readonly variantId: Id;
+  readonly locationId: Id;
+  readonly onHand: number;
+  readonly reserved: number;
+  readonly available: number;
+  readonly reorderPoint: Nullable<number>;
+  readonly updatedAt: IsoDateTime;
+}
+
+export interface InventoryLocation {
+  readonly id: Id;
+  readonly name: string;
+  readonly code: string;
+  readonly isDefault: boolean;
+  readonly isActive: boolean;
+}
+
+/**
+ * Every quantity change is an append-only movement. The stock level is a
+ * projection of this ledger, which is what makes discrepancies auditable and
+ * makes a future extraction of Inventory into its own service tractable.
+ */
+export const STOCK_MOVEMENT_REASONS = {
+  PURCHASE_RECEIPT: 'PURCHASE_RECEIPT',
+  SALE: 'SALE',
+  RETURN: 'RETURN',
+  MANUAL_ADJUSTMENT: 'MANUAL_ADJUSTMENT',
+  STOCK_TAKE: 'STOCK_TAKE',
+  TRANSFER_IN: 'TRANSFER_IN',
+  TRANSFER_OUT: 'TRANSFER_OUT',
+  DAMAGE: 'DAMAGE',
+} as const;
+
+export type StockMovementReason =
+  (typeof STOCK_MOVEMENT_REASONS)[keyof typeof STOCK_MOVEMENT_REASONS];
+
+export interface StockMovement {
+  readonly id: Id;
+  readonly variantId: Id;
+  readonly locationId: Id;
+  /** Signed: negative for outbound. */
+  readonly quantityDelta: number;
+  readonly reason: StockMovementReason;
+  /** Order id, return id, purchase-order id… */
+  readonly referenceId: Nullable<Id>;
+  readonly note: Nullable<string>;
+  readonly createdByUserId: Nullable<Id>;
+  readonly createdAt: IsoDateTime;
+}
diff --git a/packages/types/src/primitives.ts b/packages/types/src/primitives.ts
new file mode 100644
index 0000000..2a96d56
--- /dev/null
+++ b/packages/types/src/primitives.ts
@@ -0,0 +1,31 @@
+/** Opaque-ish branded aliases. Cheap documentation, zero runtime cost. */
+export type Id = string;
+export type Slug = string;
+
+/** Always serialised as ISO-8601 UTC across the API boundary. */
+export type IsoDateTime = string;
+
+/** ISO-4217. The store launches VND-only but the type never assumes that. */
+export type CurrencyCode = 'VND' | 'USD';
+
+/**
+ * Money is transferred as an INTEGER in the currency's minor unit, never as a
+ * float. VND has no minor unit (minorUnitScale = 0), USD has two.
+ *
+ * Rationale: floating point money bugs are unfixable after the fact, and the
+ * database stores the same integer, so no conversion happens anywhere.
+ */
+export interface Money {
+  readonly amount: number;
+  readonly currency: CurrencyCode;
+}
+
+export const MINOR_UNIT_SCALE: Readonly<Record<CurrencyCode, number>> = {
+  VND: 0,
+  USD: 2,
+};
+
+/** Generic key/value bag for extensible, non-queried data. */
+export type Metadata = Record<string, string | number | boolean | null>;
+
+export type Nullable<T> = T | null;
diff --git a/packages/types/tsconfig.json b/packages/types/tsconfig.json
new file mode 100644
index 0000000..93c3ef1
--- /dev/null
+++ b/packages/types/tsconfig.json
@@ -0,0 +1,9 @@
+{
+  "extends": "@sport/config/typescript/library.json",
+  "include": ["src/**/*.ts"],
+  "exclude": ["node_modules", "dist"],
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  }
+}
diff --git a/packages/ui/eslint.config.mjs b/packages/ui/eslint.config.mjs
new file mode 100644
index 0000000..05f60c6
--- /dev/null
+++ b/packages/ui/eslint.config.mjs
@@ -0,0 +1,3 @@
+import { reactConfig } from '@sport/eslint-config/react';
+
+export default reactConfig;
diff --git a/packages/ui/package.json b/packages/ui/package.json
new file mode 100644
index 0000000..e98cd0c
--- /dev/null
+++ b/packages/ui/package.json
@@ -0,0 +1,31 @@
+{
+  "name": "@sport/ui",
+  "version": "0.0.0",
+  "private": true,
+  "description": "Shared, presentational React design-system primitives. Consumed as source via Next.js transpilePackages.",
+  "exports": {
+    ".": "./src/index.ts"
+  },
+  "scripts": {
+    "lint": "eslint src",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "clean": "rm -rf .turbo *.tsbuildinfo"
+  },
+  "dependencies": {
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "tailwind-merge": "^3.4.0"
+  },
+  "devDependencies": {
+    "@sport/config": "workspace:*",
+    "@sport/eslint-config": "workspace:*",
+    "@types/react": "^19.2.0",
+    "@types/react-dom": "^19.2.0",
+    "eslint": "catalog:",
+    "react": "catalog:",
+    "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "react": "^19.0.0"
+  }
+}
diff --git a/packages/ui/src/index.ts b/packages/ui/src/index.ts
new file mode 100644
index 0000000..792f66f
--- /dev/null
+++ b/packages/ui/src/index.ts
@@ -0,0 +1,27 @@
+/**
+ * @sport/ui — the design system.
+ *
+ * WHAT BELONGS HERE
+ *   Presentational primitives that are identical in the storefront and the
+ *   admin: buttons, inputs, badges, skeletons, typography, layout helpers.
+ *
+ * WHAT MUST NEVER BE HERE
+ *   - Data fetching or any @sport/api-client import.
+ *   - App state (cart, auth session, filters).
+ *   - Domain components. A `<ProductCard>` knows about pricing, sale badges and
+ *     variant swatches — that is storefront business UI and lives in
+ *     `apps/storefront/src/features/product/`. Sharing it would couple two apps
+ *     that must be free to diverge.
+ *
+ * The test: if the component would be meaningless in the admin dashboard, it
+ * does not go in this package.
+ */
+
+export { cn } from './lib/cn';
+export { Button, buttonVariants } from './primitives/button';
+export type { ButtonProps } from './primitives/button';
+export { Badge, badgeVariants } from './primitives/badge';
+export type { BadgeProps } from './primitives/badge';
+export { Input } from './primitives/input';
+export type { InputProps } from './primitives/input';
+export { Skeleton } from './primitives/skeleton';
diff --git a/packages/ui/src/lib/cn.ts b/packages/ui/src/lib/cn.ts
new file mode 100644
index 0000000..8508116
--- /dev/null
+++ b/packages/ui/src/lib/cn.ts
@@ -0,0 +1,7 @@
+import { clsx, type ClassValue } from 'clsx';
+import { twMerge } from 'tailwind-merge';
+
+/** Conditional classes + last-wins conflict resolution for Tailwind utilities. */
+export function cn(...inputs: ClassValue[]): string {
+  return twMerge(clsx(inputs));
+}
diff --git a/packages/ui/src/primitives/badge.tsx b/packages/ui/src/primitives/badge.tsx
new file mode 100644
index 0000000..ec1cb80
--- /dev/null
+++ b/packages/ui/src/primitives/badge.tsx
@@ -0,0 +1,29 @@
+import { cva, type VariantProps } from 'class-variance-authority';
+import type { HTMLAttributes } from 'react';
+
+import { cn } from '../lib/cn';
+
+export const badgeVariants = cva(
+  'inline-flex items-center gap-1 px-2 py-1 text-[0.625rem] font-semibold uppercase tracking-widest',
+  {
+    variants: {
+      variant: {
+        neutral: 'bg-ink-100 text-ink-700',
+        solid: 'bg-ink-950 text-white',
+        sale: 'bg-sale text-white',
+        new: 'bg-volt-500 text-ink-950',
+        success: 'bg-success text-white',
+        warning: 'bg-warning text-ink-950',
+        outline: 'border border-ink-300 text-ink-700',
+      },
+    },
+    defaultVariants: { variant: 'neutral' },
+  },
+);
+
+export interface BadgeProps
+  extends HTMLAttributes<HTMLSpanElement>, VariantProps<typeof badgeVariants> {}
+
+export function Badge({ className, variant, ...props }: BadgeProps) {
+  return <span className={cn(badgeVariants({ variant }), className)} {...props} />;
+}
diff --git a/packages/ui/src/primitives/button.tsx b/packages/ui/src/primitives/button.tsx
new file mode 100644
index 0000000..c25af46
--- /dev/null
+++ b/packages/ui/src/primitives/button.tsx
@@ -0,0 +1,56 @@
+import { cva, type VariantProps } from 'class-variance-authority';
+import type { ButtonHTMLAttributes, Ref } from 'react';
+
+import { cn } from '../lib/cn';
+
+export const buttonVariants = cva(
+  'inline-flex items-center justify-center gap-2 whitespace-nowrap font-medium transition-colors ' +
+    'focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ink-900 focus-visible:ring-offset-2 ' +
+    'disabled:pointer-events-none disabled:opacity-40',
+  {
+    variants: {
+      variant: {
+        primary: 'bg-ink-950 text-white hover:bg-ink-800',
+        secondary: 'bg-ink-100 text-ink-950 hover:bg-ink-200',
+        outline:
+          'border border-ink-950 bg-transparent text-ink-950 hover:bg-ink-950 hover:text-white',
+        ghost: 'bg-transparent text-ink-950 hover:bg-ink-100',
+        accent: 'bg-volt-500 text-ink-950 hover:bg-volt-400',
+        danger: 'bg-danger text-white hover:opacity-90',
+      },
+      size: {
+        sm: 'h-9 px-4 text-xs uppercase tracking-wide',
+        md: 'h-11 px-6 text-sm uppercase tracking-wide',
+        lg: 'h-14 px-8 text-sm uppercase tracking-widest',
+        icon: 'size-10',
+      },
+      shape: {
+        square: 'rounded-none',
+        rounded: 'rounded-card',
+        pill: 'rounded-pill',
+      },
+      fullWidth: {
+        true: 'w-full',
+      },
+    },
+    defaultVariants: {
+      variant: 'primary',
+      size: 'md',
+      shape: 'square',
+    },
+  },
+);
+
+export interface ButtonProps
+  extends ButtonHTMLAttributes<HTMLButtonElement>, VariantProps<typeof buttonVariants> {
+  ref?: Ref<HTMLButtonElement>;
+}
+
+export function Button({ className, variant, size, shape, fullWidth, ...props }: ButtonProps) {
+  return (
+    <button
+      className={cn(buttonVariants({ variant, size, shape, fullWidth }), className)}
+      {...props}
+    />
+  );
+}
diff --git a/packages/ui/src/primitives/input.tsx b/packages/ui/src/primitives/input.tsx
new file mode 100644
index 0000000..0911753
--- /dev/null
+++ b/packages/ui/src/primitives/input.tsx
@@ -0,0 +1,24 @@
+import type { InputHTMLAttributes, Ref } from 'react';
+
+import { cn } from '../lib/cn';
+
+export interface InputProps extends InputHTMLAttributes<HTMLInputElement> {
+  invalid?: boolean;
+  ref?: Ref<HTMLInputElement>;
+}
+
+export function Input({ className, invalid, ...props }: InputProps) {
+  return (
+    <input
+      aria-invalid={invalid || undefined}
+      className={cn(
+        'border-ink-300 text-ink-950 h-11 w-full border bg-white px-4 text-sm transition-colors',
+        'placeholder:text-ink-400 focus:border-ink-950 focus:outline-none',
+        'disabled:bg-ink-50 disabled:cursor-not-allowed',
+        invalid && 'border-danger focus:border-danger',
+        className,
+      )}
+      {...props}
+    />
+  );
+}
diff --git a/packages/ui/src/primitives/skeleton.tsx b/packages/ui/src/primitives/skeleton.tsx
new file mode 100644
index 0000000..06c301a
--- /dev/null
+++ b/packages/ui/src/primitives/skeleton.tsx
@@ -0,0 +1,7 @@
+import type { HTMLAttributes } from 'react';
+
+import { cn } from '../lib/cn';
+
+export function Skeleton({ className, ...props }: HTMLAttributes<HTMLDivElement>) {
+  return <div className={cn('bg-ink-100 animate-pulse', className)} {...props} />;
+}
diff --git a/packages/ui/tsconfig.json b/packages/ui/tsconfig.json
new file mode 100644
index 0000000..78151a3
--- /dev/null
+++ b/packages/ui/tsconfig.json
@@ -0,0 +1,5 @@
+{
+  "extends": "@sport/config/typescript/react-library.json",
+  "include": ["src/**/*.ts", "src/**/*.tsx"],
+  "exclude": ["node_modules"]
+}
diff --git a/packages/validation/eslint.config.mjs b/packages/validation/eslint.config.mjs
new file mode 100644
index 0000000..5eba426
--- /dev/null
+++ b/packages/validation/eslint.config.mjs
@@ -0,0 +1,3 @@
+import { baseConfig } from '@sport/eslint-config/base';
+
+export default baseConfig;
diff --git a/packages/validation/package.json b/packages/validation/package.json
new file mode 100644
index 0000000..a3f1a22
--- /dev/null
+++ b/packages/validation/package.json
@@ -0,0 +1,34 @@
+{
+  "name": "@sport/validation",
+  "version": "0.0.0",
+  "private": true,
+  "description": "Zod schemas shared by the API (request validation) and the frontends (form validation).",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsc -p tsconfig.json --watch --preserveWatchOutput",
+    "clean": "rm -rf dist .turbo *.tsbuildinfo",
+    "lint": "eslint src",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@sport/types": "workspace:*",
+    "zod": "catalog:"
+  },
+  "devDependencies": {
+    "@sport/config": "workspace:*",
+    "@sport/eslint-config": "workspace:*",
+    "eslint": "catalog:",
+    "typescript": "catalog:"
+  }
+}
diff --git a/packages/validation/src/auth.ts b/packages/validation/src/auth.ts
new file mode 100644
index 0000000..725015f
--- /dev/null
+++ b/packages/validation/src/auth.ts
@@ -0,0 +1,32 @@
+import { z } from 'zod';
+
+import { emailSchema, phoneSchema } from './common';
+
+/**
+ * Password policy lives here so the storefront's signup form, the admin's
+ * "reset user password" dialog and the API all enforce byte-identical rules.
+ */
+export const passwordSchema = z
+  .string()
+  .min(10, 'Use at least 10 characters')
+  .max(128)
+  .refine((value) => /[a-z]/.test(value), 'Needs a lowercase letter')
+  .refine((value) => /[A-Z]/.test(value), 'Needs an uppercase letter')
+  .refine((value) => /\d/.test(value), 'Needs a number');
+
+export const loginSchema = z.object({
+  email: emailSchema,
+  password: z.string().min(1, 'Password is required'),
+});
+
+export const registerSchema = z.object({
+  email: emailSchema,
+  password: passwordSchema,
+  firstName: z.string().trim().min(1).max(80),
+  lastName: z.string().trim().min(1).max(80),
+  phone: phoneSchema.optional(),
+  acceptsMarketing: z.boolean().default(false),
+});
+
+export type LoginInput = z.infer<typeof loginSchema>;
+export type RegisterInput = z.infer<typeof registerSchema>;
diff --git a/packages/validation/src/catalog.ts b/packages/validation/src/catalog.ts
new file mode 100644
index 0000000..17f7547
--- /dev/null
+++ b/packages/validation/src/catalog.ts
@@ -0,0 +1,51 @@
+import { z } from 'zod';
+
+import { slugSchema } from './common';
+import { cursorPageQuerySchema } from './pagination';
+
+export const genderTargetSchema = z.enum(['MEN', 'WOMEN', 'KIDS', 'UNISEX']);
+
+export const sportTypeSchema = z.enum([
+  'RUNNING',
+  'FOOTBALL',
+  'TRAINING',
+  'GYM',
+  'BADMINTON',
+  'LIFESTYLE',
+]);
+
+export const productSortSchema = z
+  .enum(['newest', 'price_asc', 'price_desc', 'best_selling', 'relevance'])
+  .default('newest');
+
+/** Repeatable query params arrive as `?size=M&size=L` or a single `?size=M`. */
+const csvList = <T extends z.ZodTypeAny>(item: T) =>
+  z.preprocess(
+    (value) => (typeof value === 'string' ? value.split(',').filter(Boolean) : value),
+    z.array(item).optional(),
+  );
+
+/**
+ * The one filter contract shared by /men, /sports/[slug], /collections/[slug]
+ * and /search. Every listing page is the same query with different presets,
+ * which is why there is exactly one schema instead of four.
+ */
+export const productFilterSchema = cursorPageQuerySchema.extend({
+  q: z.string().trim().max(120).optional(),
+  categorySlug: slugSchema.optional(),
+  collectionSlug: slugSchema.optional(),
+  brandSlugs: csvList(slugSchema),
+  gender: csvList(genderTargetSchema),
+  sport: csvList(sportTypeSchema),
+  /** Option-value filters, e.g. colour=black,white & size=m,l */
+  colors: csvList(z.string().max(60)),
+  sizes: csvList(z.string().max(20)),
+  minPrice: z.coerce.number().int().min(0).optional(),
+  maxPrice: z.coerce.number().int().min(0).optional(),
+  onSale: z.coerce.boolean().optional(),
+  inStockOnly: z.coerce.boolean().optional(),
+  sort: productSortSchema,
+});
+
+export type ProductFilterInput = z.input<typeof productFilterSchema>;
+export type ProductFilter = z.output<typeof productFilterSchema>;
diff --git a/packages/validation/src/common.ts b/packages/validation/src/common.ts
new file mode 100644
index 0000000..121e075
--- /dev/null
+++ b/packages/validation/src/common.ts
@@ -0,0 +1,39 @@
+import { z } from 'zod';
+
+export const idSchema = z.uuid({ version: 'v7' }).describe('UUID v7 identifier');
+
+/** Accept any UUID version on read paths — legacy/imported rows may differ. */
+export const anyIdSchema = z.uuid();
+
+export const slugSchema = z
+  .string()
+  .min(1)
+  .max(160)
+  .regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, 'Must be lowercase, hyphen-separated');
+
+export const emailSchema = z.email().max(255).toLowerCase().trim();
+
+/** Vietnamese mobile numbers, stored E.164. */
+export const phoneSchema = z
+  .string()
+  .trim()
+  .regex(/^(?:\+84|0)(?:3|5|7|8|9)\d{8}$/, 'Invalid Vietnamese phone number');
+
+export const currencySchema = z.enum(['VND', 'USD']);
+
+/** Money always crosses the wire as an integer in minor units. */
+export const moneySchema = z.object({
+  amount: z.int().min(0),
+  currency: currencySchema,
+});
+
+export const skuSchema = z
+  .string()
+  .trim()
+  .min(3)
+  .max(64)
+  .regex(/^[A-Z0-9][A-Z0-9._-]*$/, 'SKU must be uppercase alphanumeric with . _ -');
+
+export const isoDateTimeSchema = z.iso.datetime({ offset: true });
+
+export type Money = z.infer<typeof moneySchema>;
diff --git a/packages/validation/src/index.ts b/packages/validation/src/index.ts
new file mode 100644
index 0000000..a614795
--- /dev/null
+++ b/packages/validation/src/index.ts
@@ -0,0 +1,17 @@
+/**
+ * @sport/validation — one schema, validated twice.
+ *
+ * The API validates inbound requests with these schemas; the storefront and
+ * admin validate the same forms client-side with the *same* objects. A rule
+ * change can therefore never drift between client and server.
+ *
+ * Scope discipline: this package contains SHAPE and FORMAT rules only
+ * (required, max length, email, positive integer). Business rules that need
+ * database state — "coupon still has uses left", "variant is in stock" — live
+ * in the backend service layer. Do not smuggle them in here.
+ */
+
+export * from './common';
+export * from './pagination';
+export * from './auth';
+export * from './catalog';
diff --git a/packages/validation/src/pagination.ts b/packages/validation/src/pagination.ts
new file mode 100644
index 0000000..322472c
--- /dev/null
+++ b/packages/validation/src/pagination.ts
@@ -0,0 +1,30 @@
+import { z } from 'zod';
+
+import { PAGINATION_DEFAULTS } from '@sport/types';
+
+/** Query strings arrive as strings; coerce once, here, and nowhere else. */
+export const offsetPageQuerySchema = z.object({
+  page: z.coerce.number().int().min(1).default(1),
+  perPage: z.coerce
+    .number()
+    .int()
+    .min(1)
+    .max(PAGINATION_DEFAULTS.maxPerPage)
+    .default(PAGINATION_DEFAULTS.perPage),
+});
+
+export const cursorPageQuerySchema = z.object({
+  cursor: z.string().min(1).nullish(),
+  limit: z.coerce
+    .number()
+    .int()
+    .min(1)
+    .max(PAGINATION_DEFAULTS.maxCursorLimit)
+    .default(PAGINATION_DEFAULTS.cursorLimit),
+});
+
+export const sortDirectionSchema = z.enum(['asc', 'desc']).default('desc');
+
+export type OffsetPageQueryInput = z.input<typeof offsetPageQuerySchema>;
+export type OffsetPageQuery = z.output<typeof offsetPageQuerySchema>;
+export type CursorPageQuery = z.output<typeof cursorPageQuerySchema>;
diff --git a/packages/validation/tsconfig.json b/packages/validation/tsconfig.json
new file mode 100644
index 0000000..93c3ef1
--- /dev/null
+++ b/packages/validation/tsconfig.json
@@ -0,0 +1,9 @@
+{
+  "extends": "@sport/config/typescript/library.json",
+  "include": ["src/**/*.ts"],
+  "exclude": ["node_modules", "dist"],
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  }
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
new file mode 100644
index 0000000..b5fa0ae
--- /dev/null
+++ b/pnpm-lock.yaml
@@ -0,0 +1,10268 @@
+lockfileVersion: '9.0'
+
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false
+
+catalogs:
+  default:
+    '@tailwindcss/postcss':
+      specifier: 4.3.3
+      version: 4.3.3
+    eslint:
+      specifier: 9.39.5
+      version: 9.39.5
+    next:
+      specifier: 16.3.0
+      version: 16.3.0
+    react:
+      specifier: 19.2.8
+      version: 19.2.8
+    react-dom:
+      specifier: 19.2.8
+      version: 19.2.8
+    tailwindcss:
+      specifier: 4.3.3
+      version: 4.3.3
+    typescript:
+      specifier: 5.9.3
+      version: 5.9.3
+    zod:
+      specifier: 4.4.3
+      version: 4.4.3
+
+importers:
+
+  .:
+    devDependencies:
+      '@sport/eslint-config':
+        specifier: workspace:*
+        version: link:packages/eslint-config
+      eslint:
+        specifier: 9.39.5
+        version: 9.39.5(jiti@2.7.0)
+      prettier:
+        specifier: 3.9.6
+        version: 3.9.6
+      prettier-plugin-tailwindcss:
+        specifier: ^0.6.14
+        version: 0.6.14(prettier@3.9.6)
+      turbo:
+        specifier: 2.10.9
+        version: 2.10.9
+      typescript:
+        specifier: 5.9.3
+        version: 5.9.3
+
+  apps/admin:
+    dependencies:
+      '@sport/api-client':
+        specifier: workspace:*
+        version: link:../../packages/api-client
+      '@sport/types':
+        specifier: workspace:*
+        version: link:../../packages/types
+      '@sport/ui':
+        specifier: workspace:*
+        version: link:../../packages/ui
+      '@sport/validation':
+        specifier: workspace:*
+        version: link:../../packages/validation
+      '@tanstack/react-query':
+        specifier: ^5.101.4
+        version: 5.101.4(react@19.2.8)
+      next:
+        specifier: 'catalog:'
+        version: 16.3.0(@types/node@22.20.1)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)
+      react:
+        specifier: 'catalog:'
+        version: 19.2.8
+      react-dom:
+        specifier: 'catalog:'
+        version: 19.2.8(react@19.2.8)
+      zod:
+        specifier: 'catalog:'
+        version: 4.4.3
+      zustand:
+        specifier: ^5.0.14
+        version: 5.0.14(@types/react@19.2.18)(react@19.2.8)
+    devDependencies:
+      '@sport/config':
+        specifier: workspace:*
+        version: link:../../packages/config
+      '@sport/eslint-config':
+        specifier: workspace:*
+        version: link:../../packages/eslint-config
+      '@tailwindcss/postcss':
+        specifier: 'catalog:'
+        version: 4.3.3
+      '@types/node':
+        specifier: ^22.19.0
+        version: 22.20.1
+      '@types/react':
+        specifier: ^19.2.0
+        version: 19.2.18
+      '@types/react-dom':
+        specifier: ^19.2.0
+        version: 19.2.4(@types/react@19.2.18)
+      eslint:
+        specifier: 'catalog:'
+        version: 9.39.5(jiti@2.7.0)
+      tailwindcss:
+        specifier: 'catalog:'
+        version: 4.3.3
+      typescript:
+        specifier: 'catalog:'
+        version: 5.9.3
+
+  apps/api:
+    dependencies:
+      '@aws-sdk/client-s3':
+        specifier: ^3.1107.0
+        version: 3.1107.0
+      '@aws-sdk/s3-request-presigner':
+        specifier: ^3.1107.0
+        version: 3.1107.0
+      '@nestjs/common':
+        specifier: ^11.1.29
+        version: 11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/config':
+        specifier: ^4.0.4
+        version: 4.0.4(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(rxjs@7.8.2)
+      '@nestjs/core':
+        specifier: ^11.1.29
+        version: 11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@11.1.29)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/jwt':
+        specifier: ^11.0.2
+        version: 11.0.2(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))
+      '@nestjs/platform-express':
+        specifier: ^11.1.29
+        version: 11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)
+      '@nestjs/swagger':
+        specifier: ^11.4.6
+        version: 11.4.6(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)(reflect-metadata@0.2.2)
+      '@nestjs/terminus':
+        specifier: ^11.0.0
+        version: 11.1.1(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)(@prisma/client@6.19.3(prisma@6.19.3(typescript@5.9.3))(typescript@5.9.3))(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/throttler':
+        specifier: ^6.4.0
+        version: 6.5.0(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)(reflect-metadata@0.2.2)
+      '@prisma/client':
+        specifier: 6.19.3
+        version: 6.19.3(prisma@6.19.3(typescript@5.9.3))(typescript@5.9.3)
+      '@sport/types':
+        specifier: workspace:*
+        version: link:../../packages/types
+      '@sport/validation':
+        specifier: workspace:*
+        version: link:../../packages/validation
+      compression:
+        specifier: ^1.8.1
+        version: 1.8.1
+      helmet:
+        specifier: ^8.1.0
+        version: 8.3.0
+      ioredis:
+        specifier: ^5.11.1
+        version: 5.11.1
+      nestjs-pino:
+        specifier: ^4.6.1
+        version: 4.6.1(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(pino-http@11.0.0)(pino@10.3.1)(rxjs@7.8.2)
+      pino:
+        specifier: ^10.3.1
+        version: 10.3.1
+      pino-http:
+        specifier: ^11.0.0
+        version: 11.0.0
+      reflect-metadata:
+        specifier: ^0.2.2
+        version: 0.2.2
+      rxjs:
+        specifier: ^7.8.2
+        version: 7.8.2
+      uuid:
+        specifier: ^13.0.0
+        version: 13.0.2
+      zod:
+        specifier: 'catalog:'
+        version: 4.4.3
+    devDependencies:
+      '@nestjs/cli':
+        specifier: ^11.0.10
+        version: 11.0.24(@types/node@22.20.1)(prettier@3.9.6)
+      '@nestjs/schematics':
+        specifier: ^11.1.0
+        version: 11.1.0(chokidar@4.0.3)(prettier@3.9.6)(typescript@5.9.3)
+      '@nestjs/testing':
+        specifier: ^11.1.29
+        version: 11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)(@nestjs/platform-express@11.1.29)
+      '@sport/config':
+        specifier: workspace:*
+        version: link:../../packages/config
+      '@sport/eslint-config':
+        specifier: workspace:*
+        version: link:../../packages/eslint-config
+      '@types/compression':
+        specifier: ^1.8.1
+        version: 1.8.1
+      '@types/express':
+        specifier: ^5.0.3
+        version: 5.0.6
+      '@types/jest':
+        specifier: ^30.0.0
+        version: 30.0.0
+      '@types/node':
+        specifier: ^22.19.0
+        version: 22.20.1
+      '@types/supertest':
+        specifier: ^6.0.3
+        version: 6.0.3
+      eslint:
+        specifier: 'catalog:'
+        version: 9.39.5(jiti@2.7.0)
+      jest:
+        specifier: ^30.2.0
+        version: 30.4.2(@types/node@22.20.1)
+      pino-pretty:
+        specifier: ^13.1.2
+        version: 13.1.3
+      prisma:
+        specifier: 6.19.3
+        version: 6.19.3(typescript@5.9.3)
+      supertest:
+        specifier: ^7.1.4
+        version: 7.2.2
+      ts-jest:
+        specifier: ^29.4.6
+        version: 29.4.12(@babel/core@7.29.7)(@jest/transform@30.4.1)(@jest/types@30.4.1)(babel-jest@30.4.1(@babel/core@7.29.7))(jest-util@30.4.1)(jest@30.4.2(@types/node@22.20.1))(typescript@5.9.3)
+      tsx:
+        specifier: ^4.20.6
+        version: 4.23.12
+      typescript:
+        specifier: 'catalog:'
+        version: 5.9.3
+
+  apps/storefront:
+    dependencies:
+      '@sport/api-client':
+        specifier: workspace:*
+        version: link:../../packages/api-client
+      '@sport/types':
+        specifier: workspace:*
+        version: link:../../packages/types
+      '@sport/ui':
+        specifier: workspace:*
+        version: link:../../packages/ui
+      '@sport/validation':
+        specifier: workspace:*
+        version: link:../../packages/validation
+      '@tanstack/react-query':
+        specifier: ^5.101.4
+        version: 5.101.4(react@19.2.8)
+      next:
+        specifier: 'catalog:'
+        version: 16.3.0(@types/node@22.20.1)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)
+      react:
+        specifier: 'catalog:'
+        version: 19.2.8
+      react-dom:
+        specifier: 'catalog:'
+        version: 19.2.8(react@19.2.8)
+      zod:
+        specifier: 'catalog:'
+        version: 4.4.3
+      zustand:
+        specifier: ^5.0.14
+        version: 5.0.14(@types/react@19.2.18)(react@19.2.8)
+    devDependencies:
+      '@sport/config':
+        specifier: workspace:*
+        version: link:../../packages/config
+      '@sport/eslint-config':
+        specifier: workspace:*
+        version: link:../../packages/eslint-config
+      '@tailwindcss/postcss':
+        specifier: 'catalog:'
+        version: 4.3.3
+      '@types/node':
+        specifier: ^22.19.0
+        version: 22.20.1
+      '@types/react':
+        specifier: ^19.2.0
+        version: 19.2.18
+      '@types/react-dom':
+        specifier: ^19.2.0
+        version: 19.2.4(@types/react@19.2.18)
+      eslint:
+        specifier: 'catalog:'
+        version: 9.39.5(jiti@2.7.0)
+      tailwindcss:
+        specifier: 'catalog:'
+        version: 4.3.3
+      typescript:
+        specifier: 'catalog:'
+        version: 5.9.3
+
+  packages/api-client:
+    dependencies:
+      '@sport/types':
+        specifier: workspace:*
+        version: link:../types
+    devDependencies:
+      '@sport/config':
+        specifier: workspace:*
+        version: link:../config
+      '@sport/eslint-config':
+        specifier: workspace:*
+        version: link:../eslint-config
+      '@types/node':
+        specifier: ^22.19.0
+        version: 22.20.1
+      eslint:
+        specifier: 'catalog:'
+        version: 9.39.5(jiti@2.7.0)
+      typescript:
+        specifier: 'catalog:'
+        version: 5.9.3
+
+  packages/config: {}
+
+  packages/eslint-config:
+    dependencies:
+      '@eslint/js':
+        specifier: ^9.39.0
+        version: 9.39.5
+      eslint-config-prettier:
+        specifier: ^10.1.8
+        version: 10.1.8(eslint@9.39.5(jiti@2.7.0))
+      eslint-import-resolver-typescript:
+        specifier: ^4.4.5
+        version: 4.4.5(eslint-plugin-import-x@4.17.1(@typescript-eslint/utils@8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.5(jiti@2.7.0)))(eslint@9.39.5(jiti@2.7.0))
+      eslint-plugin-import-x:
+        specifier: ^4.16.1
+        version: 4.17.1(@typescript-eslint/utils@8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.5(jiti@2.7.0))
+      eslint-plugin-jsx-a11y:
+        specifier: ^6.10.2
+        version: 6.10.2(eslint@9.39.5(jiti@2.7.0))
+      eslint-plugin-react:
+        specifier: ^7.37.5
+        version: 7.37.5(eslint@9.39.5(jiti@2.7.0))
+      eslint-plugin-react-hooks:
+        specifier: ^7.1.1
+        version: 7.1.1(eslint@9.39.5(jiti@2.7.0))
+      eslint-plugin-turbo:
+        specifier: ^2.10.9
+        version: 2.10.9(eslint@9.39.5(jiti@2.7.0))(turbo@2.10.9)
+      globals:
+        specifier: ^16.5.0
+        version: 16.5.0
+      typescript-eslint:
+        specifier: ^8.67.0
+        version: 8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)
+    devDependencies:
+      eslint:
+        specifier: 'catalog:'
+        version: 9.39.5(jiti@2.7.0)
+      typescript:
+        specifier: 'catalog:'
+        version: 5.9.3
+
+  packages/types:
+    devDependencies:
+      '@sport/config':
+        specifier: workspace:*
+        version: link:../config
+      '@sport/eslint-config':
+        specifier: workspace:*
+        version: link:../eslint-config
+      eslint:
+        specifier: 'catalog:'
+        version: 9.39.5(jiti@2.7.0)
+      typescript:
+        specifier: 'catalog:'
+        version: 5.9.3
+
+  packages/ui:
+    dependencies:
+      class-variance-authority:
+        specifier: ^0.7.1
+        version: 0.7.1
+      clsx:
+        specifier: ^2.1.1
+        version: 2.1.1
+      tailwind-merge:
+        specifier: ^3.4.0
+        version: 3.6.0
+    devDependencies:
+      '@sport/config':
+        specifier: workspace:*
+        version: link:../config
+      '@sport/eslint-config':
+        specifier: workspace:*
+        version: link:../eslint-config
+      '@types/react':
+        specifier: ^19.2.0
+        version: 19.2.18
+      '@types/react-dom':
+        specifier: ^19.2.0
+        version: 19.2.4(@types/react@19.2.18)
+      eslint:
+        specifier: 'catalog:'
+        version: 9.39.5(jiti@2.7.0)
+      react:
+        specifier: 'catalog:'
+        version: 19.2.8
+      typescript:
+        specifier: 'catalog:'
+        version: 5.9.3
+
+  packages/validation:
+    dependencies:
+      '@sport/types':
+        specifier: workspace:*
+        version: link:../types
+      zod:
+        specifier: 'catalog:'
+        version: 4.4.3
+    devDependencies:
+      '@sport/config':
+        specifier: workspace:*
+        version: link:../config
+      '@sport/eslint-config':
+        specifier: workspace:*
+        version: link:../eslint-config
+      eslint:
+        specifier: 'catalog:'
+        version: 9.39.5(jiti@2.7.0)
+      typescript:
+        specifier: 'catalog:'
+        version: 5.9.3
+
+packages:
+
+  '@alloc/quick-lru@5.2.0':
+    resolution: {integrity: sha512-UrcABB+4bUrFABwbluTIBErXwvbsU/V7TZWfmbgJfbkwiBuziS9gxdODUyuiecfdGQ85jglMW6juS3+z5TsKLw==}
+    engines: {node: '>=10'}
+
+  '@angular-devkit/core@19.2.24':
+    resolution: {integrity: sha512-Kd49warf6U/EyWe5BszF/eebN3zQ3bk7tgfEljAw8q/rX95UUtriJubWvp6pgzHfzBA4jwq8f+QiNZB8eBEXPA==}
+    engines: {node: ^18.19.1 || ^20.11.1 || >=22.0.0, npm: ^6.11.0 || ^7.5.6 || >=8.0.0, yarn: '>= 1.13.0'}
+    peerDependencies:
+      chokidar: ^4.0.0
+    peerDependenciesMeta:
+      chokidar:
+        optional: true
+
+  '@angular-devkit/core@19.2.27':
+    resolution: {integrity: sha512-3amNzoCVSKd7ah6l6lBQL4onwwJvqvam7FMoQBILrxtW5LB5ezh8gMSPuA4zJjKjoRzf9uoWdlzqv/84I52xZA==}
+    engines: {node: ^18.19.1 || ^20.11.1 || >=22.0.0, npm: ^6.11.0 || ^7.5.6 || >=8.0.0, yarn: '>= 1.13.0'}
+    peerDependencies:
+      chokidar: ^4.0.0
+    peerDependenciesMeta:
+      chokidar:
+        optional: true
+
+  '@angular-devkit/schematics-cli@19.2.27':
+    resolution: {integrity: sha512-wHYH6SVXVykhLzovUHtYor3Nl4SpIiITi7r9DQDaKYUD4hpRBx25W6N9eGuakT9Vd5tV/x6wmvQFWQZQwFB7eA==}
+    engines: {node: ^18.19.1 || ^20.11.1 || >=22.0.0, npm: ^6.11.0 || ^7.5.6 || >=8.0.0, yarn: '>= 1.13.0'}
+    hasBin: true
+
+  '@angular-devkit/schematics@19.2.24':
+    resolution: {integrity: sha512-lnw+ZM1Io+cJAkReC0NPDjqObL8NtKzKIkdgEEKC8CUmkhurYhedbicN8Y8NYHgG1uLd2GozW3+/QqPRZaN+Lw==}
+    engines: {node: ^18.19.1 || ^20.11.1 || >=22.0.0, npm: ^6.11.0 || ^7.5.6 || >=8.0.0, yarn: '>= 1.13.0'}
+
+  '@angular-devkit/schematics@19.2.27':
+    resolution: {integrity: sha512-/PZmyAlb2NGWPikRRuiWLdfHQd8Wrx6lX4HqvTcaDhlU43M3T0ud4PH2T3QDp7BzHYY92xtD8iPxX2asg67G1A==}
+    engines: {node: ^18.19.1 || ^20.11.1 || >=22.0.0, npm: ^6.11.0 || ^7.5.6 || >=8.0.0, yarn: '>= 1.13.0'}
+
+  '@aws-sdk/checksums@3.1000.26':
+    resolution: {integrity: sha512-CGznePoL+1oWCSzqmkvlYMpWQEZohPR3LntjKXXfVH+oh6Kd8d+yHLkjpiAGwPIHAxFe4OAq3aKfRnv/wqWIyA==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/client-s3@3.1107.0':
+    resolution: {integrity: sha512-95N3VATuqbyhEUO0YHQSsgKdkG872rZXm+O2ZkffsF8RJLRDQAsplVD8/OdWW3vX78vNDogK/zbfD1VG1OcSIA==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/core@3.977.6':
+    resolution: {integrity: sha512-QiaJV4/zDrB4ZY2mfeSXSzSTc36W16sZXcGz+SPFk0CJ26gziO0cS+4LjJUMAbdeeBOvS0k0Aq1cZpfGdUXxSw==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-env@3.972.67':
+    resolution: {integrity: sha512-rcIpk5kxUqDaaNa6Xk23pQ6ViY7jlqzmfFWCahQcBT97ddXaXYYwzCen9Tz1Jvo6aJft6wDl5bN44/Jw5B4oLA==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-http@3.972.69':
+    resolution: {integrity: sha512-nggwJtZ4eeNsUw5IeWBMXsi1ryct5idi0K+/SCRF3kybLubOMaNTb3XCihXpWMiVpyzyPeIrl0zTkzhBH9porA==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-ini@3.973.12':
+    resolution: {integrity: sha512-pNEf/OeyN5X3VmLKlgSO6TqaWmW10CvI3TfwL1XhsuhYjSLT2VDaxFnCPHnOeQXSaFisMX4jNhpETriqN8DOmg==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-login@3.972.74':
+    resolution: {integrity: sha512-0AQfDcf99TNmqVKv0owHrw/TQs6i4ZE5t9qmz6NvO53bE/sA/tpXhXL9AAcEP1qHc6Zzjd1UMb69+/9zdhvY3g==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-node@3.972.78':
+    resolution: {integrity: sha512-OgPAnfvbGAMWac6yvxJ1ihslrvDpPVwR68D2csospdNCCyPvHk9JLzYKwz48SNiS1T2znDwHauywRKRFfpyYng==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-process@3.972.67':
+    resolution: {integrity: sha512-IlUEejorGTWKb4/Dm7K5Yw4QxUmXLThLhrvBmzVBqZFTbW72cv9LTcITmo1dsnYriALE4h68mOq4LB99x6sQ7Q==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-sso@3.973.11':
+    resolution: {integrity: sha512-gAQBkBZxUB84d71+pPcI9L+jh2ujhuAVxc/4FgGiWFDjkPBlMKxzd5XDtkSXTFX8Ro7ansnT88+XadasxMeCRw==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-web-identity@3.972.73':
+    resolution: {integrity: sha512-SnlEmQa6SjOgs6iOPLUQl1Eyq4AKiAdPQlkOhFhqNfDtDCwibMGvL6QlkSmf3o6vAUSImzdPCxowT5dfQUZP1A==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/middleware-sdk-s3@3.972.72':
+    resolution: {integrity: sha512-lSAoVPvQxX1d8TOM6waKDBQrvvZcm4w6pCldFAsRUffEaXq6lYY0pPyew3KlLu6Xqb74DXI42hGvSsbGBLljlw==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/nested-clients@3.997.41':
+    resolution: {integrity: sha512-RDHqPGQWlF6tatA/Tp3rg6oIwtgN9IVderxE+9av2Y93Dfyu+mO1hZ5Bu2jpfZg2rwdNbsssnwM+sLafIczMlQ==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/s3-request-presigner@3.1107.0':
+    resolution: {integrity: sha512-/jlRXrrYLlVYmF33+ppCFMi8G+vYkt3LQZtwyVifDXBx66U1j1KqKstoGq6GXOQfb4I/gmojzACrrPU8eL37hw==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/signature-v4-multi-region@3.996.43':
+    resolution: {integrity: sha512-lKekx8bLBXSv4O+cslk9Zfnw2XKSkWBs3uWL5QGhH2ZAQfNS7FE0vcSSN2vD/AhxX54ZTywWxR4STThoeOXlBA==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/token-providers@3.1103.0':
+    resolution: {integrity: sha512-N4wy26MNn31ItGVHYHPrEuCIFY4MBBjC+C5v1lJKqIUSA7OZBdhleCY53zCCrXn27hsk7YNOaTuhQu807S4AfQ==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/types@3.974.2':
+    resolution: {integrity: sha512-3W6IUtSxFbH6X7Wb7DzGCV5QiFQsd0g8bOfntpmDxQlzBoKWUMBu/JPQR0DwkE+Hpnxd6db1tXbOwdeHddG6cA==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/xml-builder@3.972.37':
+    resolution: {integrity: sha512-zKq4HQum8JwDyEuyfuI4bbiAcU0KxP6qy+9PR/IsR92IyE/DaBAikzAS50tjxip4bqIIANpCcG+Yyj6CVhXupg==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws/lambda-invoke-store@0.3.0':
+    resolution: {integrity: sha512-sl4Bm6yiMNYrZKkqqDFWN0UfnWhlS8ivKxrYl+6t0gCLrqr8y3B2IqZZbFRkfaVVp7C/baApyh71P+LeE1A2sQ==}
+    engines: {node: '>=18.0.0'}
+
+  '@babel/code-frame@7.29.7':
+    resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/compat-data@7.29.7':
+    resolution: {integrity: sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/core@7.29.7':
+    resolution: {integrity: sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/generator@7.29.8':
+    resolution: {integrity: sha512-gZbepsdh3WDtgZKWL+vTPh71LSBrm/Y4/QDZBVCcYfmeTEEuoOYwlSy+G1StfJg+/Zy550u/3TATbm7qDbbMtg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-compilation-targets@7.29.7':
+    resolution: {integrity: sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-globals@7.29.7':
+    resolution: {integrity: sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-module-imports@7.29.7':
+    resolution: {integrity: sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-module-transforms@7.29.7':
+    resolution: {integrity: sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0
+
+  '@babel/helper-plugin-utils@7.29.7':
+    resolution: {integrity: sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-string-parser@7.29.7':
+    resolution: {integrity: sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-validator-identifier@7.29.7':
+    resolution: {integrity: sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-validator-option@7.29.7':
+    resolution: {integrity: sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helpers@7.29.7':
+    resolution: {integrity: sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/parser@7.29.8':
+    resolution: {integrity: sha512-E8lTAYNB1KW+FH+VGJuZM1ioAx2E6oVlvQFRrf5P8ZZmsiJXYAD9vTFV7yyEURNzgh1dFqMZuO6tUwcARbqFCA==}
+    engines: {node: '>=6.0.0'}
+    hasBin: true
+
+  '@babel/plugin-syntax-async-generators@7.8.4':
+    resolution: {integrity: sha512-tycmZxkGfZaxhMRbXlPXuVFpdWlXpir2W4AMhSJgRKzk/eDlIXOhb2LHWoLpDF7TEHylV5zNhykX6KAgHJmTNw==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-bigint@7.8.3':
+    resolution: {integrity: sha512-wnTnFlG+YxQm3vDxpGE57Pj0srRU4sHE/mDkt1qv2YJJSeUAec2ma4WLUnUPeKjyrfntVwe/N6dCXpU+zL3Npg==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-class-properties@7.12.13':
+    resolution: {integrity: sha512-fm4idjKla0YahUNgFNLCB0qySdsoPiZP3iQE3rky0mBUtMZ23yDJ9SJdg6dXTSDnulOVqiF3Hgr9nbXvXTQZYA==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-class-static-block@7.14.5':
+    resolution: {integrity: sha512-b+YyPmr6ldyNnM6sqYeMWE+bgJcJpO6yS4QD7ymxgH34GBPNDM/THBh8iunyvKIZztiwLH4CJZ0RxTk9emgpjw==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-import-attributes@7.29.7':
+    resolution: {integrity: sha512-zGYcYfq/WmZ4V+kBIXQon9dSSc8ircGZqw9ZaNhhGj9nZkeBu1jHLBDQqYYi5WA9uawvA2sIMbry2nCFhf5Djg==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-import-meta@7.10.4':
+    resolution: {integrity: sha512-Yqfm+XDx0+Prh3VSeEQCPU81yC+JWZ2pDPFSS4ZdpfZhp4MkFMaDC1UqseovEKwSUpnIL7+vK+Clp7bfh0iD7g==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-json-strings@7.8.3':
+    resolution: {integrity: sha512-lY6kdGpWHvjoe2vk4WrAapEuBR69EMxZl+RoGRhrFGNYVK8mOPAW8VfbT/ZgrFbXlDNiiaxQnAtgVCZ6jv30EA==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-jsx@7.29.7':
+    resolution: {integrity: sha512-TSu8+mHCoEaaCDEZ0I3+6mvTBYR4PCxQwf2z9/r5Tbztv6NaLR3B9thGTTxX2WGuGHJqRiAbKPeGTJ5XWXVg6A==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-logical-assignment-operators@7.10.4':
+    resolution: {integrity: sha512-d8waShlpFDinQ5MtvGU9xDAOzKH47+FFoney2baFIoMr952hKOLp1HR7VszoZvOsV/4+RRszNY7D17ba0te0ig==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-nullish-coalescing-operator@7.8.3':
+    resolution: {integrity: sha512-aSff4zPII1u2QD7y+F8oDsz19ew4IGEJg9SVW+bqwpwtfFleiQDMdzA/R+UlWDzfnHFCxxleFT0PMIrR36XLNQ==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-numeric-separator@7.10.4':
+    resolution: {integrity: sha512-9H6YdfkcK/uOnY/K7/aA2xpzaAgkQn37yzWUMRK7OaPOqOpGS1+n0H5hxT9AUw9EsSjPW8SVyMJwYRtWs3X3ug==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-object-rest-spread@7.8.3':
+    resolution: {integrity: sha512-XoqMijGZb9y3y2XskN+P1wUGiVwWZ5JmoDRwx5+3GmEplNyVM2s2Dg8ILFQm8rWM48orGy5YpI5Bl8U1y7ydlA==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-optional-catch-binding@7.8.3':
+    resolution: {integrity: sha512-6VPD0Pc1lpTqw0aKoeRTMiB+kWhAoT24PA+ksWSBrFtl5SIRVpZlwN3NNPQjehA2E/91FV3RjLWoVTglWcSV3Q==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-optional-chaining@7.8.3':
+    resolution: {integrity: sha512-KoK9ErH1MBlCPxV0VANkXW2/dw4vlbGDrFgz8bmUsBGYkFRcbRwMh6cIJubdPrkxRwuGdtCk0v/wPTKbQgBjkg==}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-private-property-in-object@7.14.5':
+    resolution: {integrity: sha512-0wVnp9dxJ72ZUJDV27ZfbSj6iHLoytYZmh3rFcxNnvsJF3ktkzLDZPy/mA17HGsaQT3/DQsWYX1f1QGWkCoVUg==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-top-level-await@7.14.5':
+    resolution: {integrity: sha512-hx++upLv5U1rgYfwe1xBQUhRmU41NEvpUvrp8jkrSCdvGSnM5/qdRMtylJ6PG5OFkBaHkbTAKTnd3/YyESRHFw==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-syntax-typescript@7.29.7':
+    resolution: {integrity: sha512-ngr+82Sh0xMz25TPCZi+nC2iTzjfCdWS2ONXTp/PtSCHCgaCNBpdMqgvJ2ccdLlClVZ7sisIgB914j/JFe+RZA==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/template@7.29.7':
+    resolution: {integrity: sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/traverse@7.29.8':
+    resolution: {integrity: sha512-I5z7H3bf/41ktsNVLtpN0wAa336HkqIHQ5BuPLEhTkt1jVSyZpeNKIzTgEWmlxjdg81R0IgUCcaE+Ok3NvrfZg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/types@7.29.8':
+    resolution: {integrity: sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==}
+    engines: {node: '>=6.9.0'}
+
+  '@bcoe/v8-coverage@0.2.3':
+    resolution: {integrity: sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==}
+
+  '@borewit/text-codec@0.2.2':
+    resolution: {integrity: sha512-DDaRehssg1aNrH4+2hnj1B7vnUGEjU6OIlyRdkMd0aUdIUvKXrJfXsy8LVtXAy7DRvYVluWbMspsRhz2lcW0mQ==}
+
+  '@colors/colors@1.5.0':
+    resolution: {integrity: sha512-ooWCrlZP11i8GImSjTHYHLkvFDP48nS4+204nGb1RiX/WXYHmJA2III9/e2DWVabCESdW7hBAEzHRqUn9OUVvQ==}
+    engines: {node: '>=0.1.90'}
+
+  '@emnapi/core@1.10.0':
+    resolution: {integrity: sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw==}
+
+  '@emnapi/runtime@1.10.0':
+    resolution: {integrity: sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==}
+
+  '@emnapi/runtime@1.11.3':
+    resolution: {integrity: sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA==}
+
+  '@emnapi/wasi-threads@1.2.1':
+    resolution: {integrity: sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==}
+
+  '@esbuild/aix-ppc64@0.28.2':
+    resolution: {integrity: sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [aix]
+
+  '@esbuild/android-arm64@0.28.2':
+    resolution: {integrity: sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [android]
+
+  '@esbuild/android-arm@0.28.2':
+    resolution: {integrity: sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [android]
+
+  '@esbuild/android-x64@0.28.2':
+    resolution: {integrity: sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [android]
+
+  '@esbuild/darwin-arm64@0.28.2':
+    resolution: {integrity: sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@esbuild/darwin-x64@0.28.2':
+    resolution: {integrity: sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@esbuild/freebsd-arm64@0.28.2':
+    resolution: {integrity: sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [freebsd]
+
+  '@esbuild/freebsd-x64@0.28.2':
+    resolution: {integrity: sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@esbuild/linux-arm64@0.28.2':
+    resolution: {integrity: sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@esbuild/linux-arm@0.28.2':
+    resolution: {integrity: sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [linux]
+
+  '@esbuild/linux-ia32@0.28.2':
+    resolution: {integrity: sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [linux]
+
+  '@esbuild/linux-loong64@0.28.2':
+    resolution: {integrity: sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==}
+    engines: {node: '>=18'}
+    cpu: [loong64]
+    os: [linux]
+
+  '@esbuild/linux-mips64el@0.28.2':
+    resolution: {integrity: sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==}
+    engines: {node: '>=18'}
+    cpu: [mips64el]
+    os: [linux]
+
+  '@esbuild/linux-ppc64@0.28.2':
+    resolution: {integrity: sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@esbuild/linux-riscv64@0.28.2':
+    resolution: {integrity: sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==}
+    engines: {node: '>=18'}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@esbuild/linux-s390x@0.28.2':
+    resolution: {integrity: sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==}
+    engines: {node: '>=18'}
+    cpu: [s390x]
+    os: [linux]
+
+  '@esbuild/linux-x64@0.28.2':
+    resolution: {integrity: sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [linux]
+
+  '@esbuild/netbsd-arm64@0.28.2':
+    resolution: {integrity: sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [netbsd]
+
+  '@esbuild/netbsd-x64@0.28.2':
+    resolution: {integrity: sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [netbsd]
+
+  '@esbuild/openbsd-arm64@0.28.2':
+    resolution: {integrity: sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openbsd]
+
+  '@esbuild/openbsd-x64@0.28.2':
+    resolution: {integrity: sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [openbsd]
+
+  '@esbuild/openharmony-arm64@0.28.2':
+    resolution: {integrity: sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@esbuild/sunos-x64@0.28.2':
+    resolution: {integrity: sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [sunos]
+
+  '@esbuild/win32-arm64@0.28.2':
+    resolution: {integrity: sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@esbuild/win32-ia32@0.28.2':
+    resolution: {integrity: sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [win32]
+
+  '@esbuild/win32-x64@0.28.2':
+    resolution: {integrity: sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [win32]
+
+  '@eslint-community/eslint-utils@4.10.1':
+    resolution: {integrity: sha512-cuadcxVFE8sDK6iWJbs8Sn0av2Nrh2QSGQhVlBW9AaAHqHwjWsZHT8LJ4hFGPh7ASBV2deFdM7H/DPjulmh8rg==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+    peerDependencies:
+      eslint: ^6.0.0 || ^7.0.0 || >=8.0.0
+
+  '@eslint-community/regexpp@4.12.2':
+    resolution: {integrity: sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew==}
+    engines: {node: ^12.0.0 || ^14.0.0 || >=16.0.0}
+
+  '@eslint/config-array@0.21.2':
+    resolution: {integrity: sha512-nJl2KGTlrf9GjLimgIru+V/mzgSK0ABCDQRvxw5BjURL7WfH5uoWmizbH7QB6MmnMBd8cIC9uceWnezL1VZWWw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/config-helpers@0.4.2':
+    resolution: {integrity: sha512-gBrxN88gOIf3R7ja5K9slwNayVcZgK6SOUORm2uBzTeIEfeVaIhOpCtTox3P6R7o2jLFwLFTLnC7kU/RGcYEgw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/core@0.17.0':
+    resolution: {integrity: sha512-yL/sLrpmtDaFEiUj1osRP4TI2MDz1AddJL+jZ7KSqvBuliN4xqYY54IfdN8qD8Toa6g1iloph1fxQNkjOxrrpQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/eslintrc@3.3.6':
+    resolution: {integrity: sha512-l2Ul9PrHsPCKcEY/ac7VgFj9D80C7S68sOKc618SyHDPK36s1XcFebXY0iTzUVn4Yq+YbwvSnDmCz9yxjX+QrA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/js@9.39.5':
+    resolution: {integrity: sha512-QywQuszQh77pIXCsq998c8hbhSTI/azTty1Z6N53dmAudKHhy573j3yvRLsX2BSp8YpLtoCEG8E9DJe+8zUh4A==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/object-schema@2.1.7':
+    resolution: {integrity: sha512-VtAOaymWVfZcmZbp6E2mympDIHvyjXs/12LqWYjVw6qjrfF+VK+fyG33kChz3nnK+SU5/NeHOqrTEHS8sXO3OA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@eslint/plugin-kit@0.4.1':
+    resolution: {integrity: sha512-43/qtrDUokr7LJqoF2c3+RInu/t4zfrpYdoSDfYyhg52rwLV6TnOvdG4fXm7IkSB3wErkcmJS9iEhjVtOSEjjA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@humanfs/core@0.19.2':
+    resolution: {integrity: sha512-UhXNm+CFMWcbChXywFwkmhqjs3PRCmcSa/hfBgLIb7oQ5HNb1wS0icWsGtSAUNgefHeI+eBrA8I1fxmbHsGdvA==}
+    engines: {node: '>=18.18.0'}
+
+  '@humanfs/node@0.16.8':
+    resolution: {integrity: sha512-gE1eQNZ3R++kTzFUpdGlpmy8kDZD/MLyHqDwqjkVQI0JMdI1D51sy1H958PNXYkM2rAac7e5/CnIKZrHtPh3BQ==}
+    engines: {node: '>=18.18.0'}
+
+  '@humanfs/types@0.15.0':
+    resolution: {integrity: sha512-ZZ1w0aoQkwuUuC7Yf+7sdeaNfqQiiLcSRbfI08oAxqLtpXQr9AIVX7Ay7HLDuiLYAaFPu8oBYNq/QIi9URHJ3Q==}
+    engines: {node: '>=18.18.0'}
+
+  '@humanwhocodes/module-importer@1.0.1':
+    resolution: {integrity: sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==}
+    engines: {node: '>=12.22'}
+
+  '@humanwhocodes/retry@0.4.3':
+    resolution: {integrity: sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ==}
+    engines: {node: '>=18.18'}
+
+  '@img/colour@1.1.0':
+    resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
+    engines: {node: '>=18'}
+
+  '@img/sharp-darwin-arm64@0.35.3':
+    resolution: {integrity: sha512-RMnFX7YQsMoh7lWfcM4NEHHymBX/rLuKNPVM84XE9ONPcaSCDgE7CHIHpSgPcO2xcRthgBy1HfNO319mwhIAkg==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@img/sharp-darwin-x64@0.35.3':
+    resolution: {integrity: sha512-Xo+5uFBtLN0BKqieTxiFzFPQAUlBbbH5iBKyRX/z1JrbnYsHTfKJnUfL8+p2TPXr1pXqao4eeL4Rl144uDpK9w==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@img/sharp-freebsd-wasm32@0.35.3':
+    resolution: {integrity: sha512-lUxcqWIj2wMQ9BrwNjngcr1gWUr5xgaGThBRqPPalIC2n67Cqj1uPh8NnA/ZhAg8hUbKl+kVHKwgUIwe6ZYPrg==}
+    engines: {node: '>=20.9.0'}
+    os: [freebsd]
+
+  '@img/sharp-libvips-darwin-arm64@1.3.2':
+    resolution: {integrity: sha512-9J6ypZFpQBj4YnePGoq/S38w6nz+vqg5WZLrLGY4YuSemdMq47GMLBPO42MzwdGwpg/agZ7xzZcFHa48xlywfg==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@img/sharp-libvips-darwin-x64@1.3.2':
+    resolution: {integrity: sha512-m2pW1n6cns9VaubNwsZ+c3CRYjxNQWgJ5gPlnL1nbBcpkBvFm6SCFN5o0psFHI8w9n11NKhFkeEDns98tiqbEw==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@img/sharp-libvips-linux-arm64@1.3.2':
+    resolution: {integrity: sha512-dqVSFynCox4C/J8kT16V7SIFAns0IjgLwkvYT7p8LQVmJ5OS5b6tI9IGflxTeuBS//zXeFIUbwt5dwxyZ17cnA==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-arm@1.3.2':
+    resolution: {integrity: sha512-1eMLzy92I4J6rmi4mAT8yC3HxOtniyGELlzGbNMLLeqe052ahFQ0h6LFq+lh5DsDIdYViIDst08abvSbcEdLXQ==}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-ppc64@1.3.2':
+    resolution: {integrity: sha512-3z0NHDxD6n5I9gc05U1eW1AyRm+Gznzq3naMrthPNqE6oYykcogW0l/jfpJdjYnuNl8R7yI9pNbE1XiUeyq0Aw==}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-riscv64@1.3.2':
+    resolution: {integrity: sha512-bsb4rI+NldGOsXuej2r8OdSS8+zXDVaCWxyWrcv6kneTOlgAHtZABRzBBCwdsPiD90J4myNJuHpg6kA20ImW/w==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-s390x@1.3.2':
+    resolution: {integrity: sha512-/ABshyj8gCpyIrNXnHn4LorDJ0HHm1VhXPBlxZ8zAtfVPAaSafXPGn+sUSIRiwaSBy0mmFjSjiXI5mkcwdChKQ==}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-x64@1.3.2':
+    resolution: {integrity: sha512-ITPEtgffGJ0S6G9dRyw/366tJQqFRcHWPHhC+Stpg3Z8AEMrDrTr2lhdz4f/Y/HMbRh//7Z5mBzEpVdi62Oc3w==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.2':
+    resolution: {integrity: sha512-zE9EdiUzUmg5mDT5a1rk5fYJ6GWPloTwWBYDS14naqHsL+EaMpDj1AWnpLgh3u0YCORv2Tt50wrcrpYqkP97Kw==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-libvips-linuxmusl-x64@1.3.2':
+    resolution: {integrity: sha512-m0lrLiUt+lBYnCFr8qV/65yMR4E/c7/wf78I5eKTdkEakFAlZ9QlzEM3QIhhAwVeUhLAHLcCq7a7Vszq/oFNZQ==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linux-arm64@0.35.3':
+    resolution: {integrity: sha512-QgKDspHPnrU+GQ55XPhGwyhC8acLVOOSyAvo1oVfFmrIXLkDNmGWzAfDZ4xK8oSA1qBQrALcHX0G5UZni/SuFQ==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-arm@0.35.3':
+    resolution: {integrity: sha512-affVWCTLooy8TSxbDx2qkzuDeaWLNVBA+P//FNBirHsXpP2fuBhk5AuboYUnrDnzoXes8GFjpTx0SBFOCRg+FA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-ppc64@0.35.3':
+    resolution: {integrity: sha512-sMd8rDxmpLOwv/7N44klFjOD5DUO7FLdjiXDI0hoxYaf7Ar262dQIEkosE98bps+5HPLtp/EvNqeqQtOycP/IA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-riscv64@0.35.3':
+    resolution: {integrity: sha512-0Eob78yjlYPfL5vMNWAW55l3R9Y6BQS/gOfe0ZcP9mEz9ohhKSt4im1hayiknXgf8AWrFqMvJcKIdmLmEe7yeQ==}
+    engines: {node: '>=20.9.0'}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-s390x@0.35.3':
+    resolution: {integrity: sha512-KgAxQ0DxpNOq1rG2t5cgTgShJFGSuU7XO45cqC+1NVOuZnP6tlgZRuSYOfNupGkHID0o3cJOsw4DVeJpMovcGw==}
+    engines: {node: '>=20.9.0'}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-x64@0.35.3':
+    resolution: {integrity: sha512-8pqvxubL2PGdhlPy6GLqzDYMUjyRmKAwKHYKixpdJYBUK7PJ0C029XdsnpFIdgRZG68fZiGdHVWcKPvtiPB4cA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linuxmusl-arm64@0.35.3':
+    resolution: {integrity: sha512-Vz0iQjzzcSX3HCbfwFfCSG/9SCIqyO0mH2sXyiHaAYfBk0cRsCWXRyQYX0ovCK/PAQBbTzQ0dsPQHh5MAFL59w==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linuxmusl-x64@0.35.3':
+    resolution: {integrity: sha512-6O1NPKcDVj9QEdg7Hx549EX8U0rp6yXQERqru6yRN7fGBn32UvIRJUlWnk+8xDCiG76hXVBbX82NZ/ZKr0euIg==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-wasm32@0.35.3':
+    resolution: {integrity: sha512-cZ0XkcYGpHZkqW6iCkqTcmUC0CD9DhD5d/qeZlZkfRBn6GnHniZXLUo5+9xw8Iv76YE6LQFN9YNBlKREcCG76w==}
+    engines: {node: '>=20.9.0'}
+
+  '@img/sharp-webcontainers-wasm32@0.35.3':
+    resolution: {integrity: sha512-2rnq7bX3NzeR2T4YWgz8qiG4h3TSdMe+vN1iQXpJleSJ3SM5zQ8Fy2SyyXAWlbxpEZ2Y+Z4u1BePgJEYbSy80Q==}
+    engines: {node: '>=20.9.0'}
+    cpu: [wasm32]
+
+  '@img/sharp-win32-arm64@0.35.3':
+    resolution: {integrity: sha512-4bPwFdMbeC4JQ8L8LOyWp6nsHcboP5fxkp6iPOXz2Vg49R42TuMs2whkJ5OAP4/Ul035qOzy0AecOF9VOscn4w==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@img/sharp-win32-ia32@0.35.3':
+    resolution: {integrity: sha512-r53mXsBN6lFUDiST764SvgwUdHAqM4rPAiDzAmf4fLoB6X/rkfyTrLCg6+g17wJJiCmB3JYgHuUldCWUIRFSXw==}
+    engines: {node: ^20.9.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@img/sharp-win32-x64@0.35.3':
+    resolution: {integrity: sha512-D4y1vNeZrIIJCN+uHaWVtH86B+aCrdMYYjicy9pXHvbGZeGYLLSd3wdVuC37FxVXlU1ARsk84eKWfWMXGYEqvA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [win32]
+
+  '@inquirer/ansi@1.0.2':
+    resolution: {integrity: sha512-S8qNSZiYzFd0wAcyG5AXCvUHC5Sr7xpZ9wZ2py9XR88jUz8wooStVx5M6dRzczbBWjic9NP7+rY0Xi7qqK/aMQ==}
+    engines: {node: '>=18'}
+
+  '@inquirer/checkbox@4.3.2':
+    resolution: {integrity: sha512-VXukHf0RR1doGe6Sm4F0Em7SWYLTHSsbGfJdS9Ja2bX5/D5uwVOEjr07cncLROdBvmnvCATYEWlHqYmXv2IlQA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/confirm@5.1.21':
+    resolution: {integrity: sha512-KR8edRkIsUayMXV+o3Gv+q4jlhENF9nMYUZs9PA2HzrXeHI8M5uDag70U7RJn9yyiMZSbtF5/UexBtAVtZGSbQ==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/core@10.3.2':
+    resolution: {integrity: sha512-43RTuEbfP8MbKzedNqBrlhhNKVwoK//vUFNW3Q3vZ88BLcrs4kYpGg+B2mm5p2K/HfygoCxuKwJJiv8PbGmE0A==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/editor@4.2.23':
+    resolution: {integrity: sha512-aLSROkEwirotxZ1pBaP8tugXRFCxW94gwrQLxXfrZsKkfjOYC1aRvAZuhpJOb5cu4IBTJdsCigUlf2iCOu4ZDQ==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/expand@4.0.23':
+    resolution: {integrity: sha512-nRzdOyFYnpeYTTR2qFwEVmIWypzdAx/sIkCMeTNTcflFOovfqUk+HcFhQQVBftAh9gmGrpFj6QcGEqrDMDOiew==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/external-editor@1.0.3':
+    resolution: {integrity: sha512-RWbSrDiYmO4LbejWY7ttpxczuwQyZLBUyygsA9Nsv95hpzUWwnNTVQmAq3xuh7vNwCp07UTmE5i11XAEExx4RA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/figures@1.0.15':
+    resolution: {integrity: sha512-t2IEY+unGHOzAaVM5Xx6DEWKeXlDDcNPeDyUpsRc6CUhBfU3VQOEl+Vssh7VNp1dR8MdUJBWhuObjXCsVpjN5g==}
+    engines: {node: '>=18'}
+
+  '@inquirer/input@4.3.1':
+    resolution: {integrity: sha512-kN0pAM4yPrLjJ1XJBjDxyfDduXOuQHrBB8aLDMueuwUGn+vNpF7Gq7TvyVxx8u4SHlFFj4trmj+a2cbpG4Jn1g==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/number@3.0.23':
+    resolution: {integrity: sha512-5Smv0OK7K0KUzUfYUXDXQc9jrf8OHo4ktlEayFlelCjwMXz0299Y8OrI+lj7i4gCBY15UObk76q0QtxjzFcFcg==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/password@4.0.23':
+    resolution: {integrity: sha512-zREJHjhT5vJBMZX/IUbyI9zVtVfOLiTO66MrF/3GFZYZ7T4YILW5MSkEYHceSii/KtRk+4i3RE7E1CUXA2jHcA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/prompts@7.10.1':
+    resolution: {integrity: sha512-Dx/y9bCQcXLI5ooQ5KyvA4FTgeo2jYj/7plWfV5Ak5wDPKQZgudKez2ixyfz7tKXzcJciTxqLeK7R9HItwiByg==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/prompts@7.3.2':
+    resolution: {integrity: sha512-G1ytyOoHh5BphmEBxSwALin3n1KGNYB6yImbICcRQdzXfOGbuJ9Jske/Of5Sebk339NSGGNfUshnzK8YWkTPsQ==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/rawlist@4.1.11':
+    resolution: {integrity: sha512-+LLQB8XGr3I5LZN/GuAHo+GpDJegQwuPARLChlMICNdwW7OwV2izlCSCxN6cqpL0sMXmbKbFcItJgdQq5EBXTw==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/search@3.2.2':
+    resolution: {integrity: sha512-p2bvRfENXCZdWF/U2BXvnSI9h+tuA8iNqtUKb9UWbmLYCRQxd8WkvwWvYn+3NgYaNwdUkHytJMGG4MMLucI1kA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/select@4.4.2':
+    resolution: {integrity: sha512-l4xMuJo55MAe+N7Qr4rX90vypFwCajSakx59qe/tMaC1aEHWLyw68wF4o0A4SLAY4E0nd+Vt+EyskeDIqu1M6w==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/type@3.0.10':
+    resolution: {integrity: sha512-BvziSRxfz5Ov8ch0z/n3oijRSEcEsHnhggm4xFZe93DHcUCTlutlq9Ox4SVENAfcRD22UQq7T/atg9Wr3k09eA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@ioredis/commands@1.10.0':
+    resolution: {integrity: sha512-UmeW7z4LfctwoQ5wkhVzgq8tXkreED2xZGpX+Bg+zA+WJFZCT6c062AfCK/Dfk81xZnnwdhJCUMkitihRaoC2Q==}
+
+  '@isaacs/cliui@8.0.2':
+    resolution: {integrity: sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==}
+    engines: {node: '>=12'}
+
+  '@istanbuljs/load-nyc-config@1.1.0':
+    resolution: {integrity: sha512-VjeHSlIzpv/NyD3N0YuHfXOPDIixcA1q2ZV98wsMqcYlPmv2n3Yb2lYP9XMElnaFVXg5A7YLTeLu6V84uQDjmQ==}
+    engines: {node: '>=8'}
+
+  '@istanbuljs/schema@0.1.6':
+    resolution: {integrity: sha512-+Sg6GCR/wy1oSmQDFq4LQDAhm3ETKnorxN+y5nbLULOR3P0c14f2Wurzj3/xqPXtasLFfHd5iRFQ7AJt4KH2cw==}
+    engines: {node: '>=8'}
+
+  '@jest/console@30.4.1':
+    resolution: {integrity: sha512-v3bhyxUh9Hgmo5p6hAOXe14/R3ZxZDOsvHleh4B07z3m/x4/ngPUXEm9XwK4sF4u+f+P2ORb0Ge+MgpaqRMVDA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/core@30.4.2':
+    resolution: {integrity: sha512-TZJA6cPJUFxoWhxaLo8t0VX/MZX2wPWr0uIDvLSHIvN4gu9h02vSzqI2kBADG1ExqQlC+cY09xKMSreivvrChQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+    peerDependencies:
+      node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
+    peerDependenciesMeta:
+      node-notifier:
+        optional: true
+
+  '@jest/diff-sequences@30.4.0':
+    resolution: {integrity: sha512-zOpzlfUs45l6u7jm39qr87JCHUDsaeCtvL+kQe/Vn9jSnRB4/5IPXISm0h9I1vZW/o00Kn4UTJ2MOlhnUGwv3g==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/environment@30.4.1':
+    resolution: {integrity: sha512-AK9yNRqgKxiabqMoe4oW+3/TSSeV8vkdC7BGaxZdU0AFXfOpofTLqdru2GXKZghP3sdgwE9XXpnVwfZ8JnFV4w==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/expect-utils@30.4.1':
+    resolution: {integrity: sha512-ZBn5CglH8fBsQsvs4VWNzD4aWfUYks+IdOOQU3MEK71ol/BcVm+P+rtb1KpiFBpSWSCE27uOahyyf1vfqOVbcQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/expect@30.4.1':
+    resolution: {integrity: sha512-ginrj6TMgh2GshLUGCjO94Ptx9HhdZA/I6A9iUfyeLKFtdAjnKzHDgzgP9HYQgbxM1lbXScQ2eUBz2lGeVDPWA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/fake-timers@30.4.1':
+    resolution: {integrity: sha512-iW5umdmfPeWzehrVhugFQZqCchSCud5S1l2YT0O9ZhjRR0ExclANDZkiSBwzqtnlOn0J1JXvO+HZ6rkuyOVOgQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/get-type@30.1.0':
+    resolution: {integrity: sha512-eMbZE2hUnx1WV0pmURZY9XoXPkUYjpc55mb0CrhtdWLtzMQPFvu/rZkTLZFTsdaVQa+Tr4eWAteqcUzoawq/uA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/globals@30.4.1':
+    resolution: {integrity: sha512-ZbuY4cmXC8DkxYjfvT2DbcHWL2T6vmsMhXCDcmTB2T0y0gaezBI77ufq5ZAIdcRkYZ7NEQEDg1xFeKbxUJ5v5Q==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/pattern@30.4.0':
+    resolution: {integrity: sha512-RAWn3+f9u8BsHijKJ71uHcFp6vmyEt6VvoWXkl6hKF3qVIuWNmudVjg12DlBPGup/frIl5UcUlH5HfEuvHpEXg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/reporters@30.4.1':
+    resolution: {integrity: sha512-/SnkPCzEQpUaBH81kjdEdDdo2WZl5hxw+BmLDGWjRkm8o7XlhjwsU36cqwe5PGBE5WYpBvDzRSdXx9rbGuJtNA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+    peerDependencies:
+      node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
+    peerDependenciesMeta:
+      node-notifier:
+        optional: true
+
+  '@jest/schemas@30.4.1':
+    resolution: {integrity: sha512-i6b4qw5qnP8c5FEeBJg/uZQ4ddrkN6Ca8qISJh0pr7a5hfn3h3v5x60BEbOC7OYAGZNMs1LfFLwnW2CuK8F57Q==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/snapshot-utils@30.4.1':
+    resolution: {integrity: sha512-ObY4ljvQ95mt6iwKtVLetR/4yXiAgl3H4nJxhztr0MTjrN97TwDYrnCp/kF60Ec9HdhkWTHSu+Hg05aXfngpOA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/source-map@30.0.1':
+    resolution: {integrity: sha512-MIRWMUUR3sdbP36oyNyhbThLHyJ2eEDClPCiHVbrYAe5g3CHRArIVpBw7cdSB5fr+ofSfIb2Tnsw8iEHL0PYQg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/test-result@30.4.1':
+    resolution: {integrity: sha512-/ZG7pgEiOmmWkN9TplKbOu4id2N5lh7FHwRwlkgBVAzGdRH+OkkQ8wX/kIxg4zmd3ZQvAL1RwL2yWsvNYYECTw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/test-sequencer@30.4.1':
+    resolution: {integrity: sha512-PeYE+4td5rKjoRPxztObrXU+H8hsjZfxKMXOcmrr34JerSyB/ROOxbbicz8B7A5j9R9VayDnVPvBmedqCsFCdw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/transform@30.4.1':
+    resolution: {integrity: sha512-Wz0LyktlTvRefoymh+n64hQ84KNXsRGcwdoZ8CSa0Ea+fgYcHZlnk+hDP7v2MS7il2bQ5uTEIxf4/NNfhMN4KQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/types@30.4.1':
+    resolution: {integrity: sha512-f1x/vJXIfjOlEmejYpbkbgw1gOqpPECwMvMEtBqe47j7H2Hg8h8w3o3ikhSXq3MI15kg+oQ0exWO0uCtTNJLoQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jridgewell/gen-mapping@0.3.13':
+    resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==}
+
+  '@jridgewell/remapping@2.3.5':
+    resolution: {integrity: sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==}
+
+  '@jridgewell/resolve-uri@3.1.2':
+    resolution: {integrity: sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==}
+    engines: {node: '>=6.0.0'}
+
+  '@jridgewell/source-map@0.3.11':
+    resolution: {integrity: sha512-ZMp1V8ZFcPG5dIWnQLr3NSI1MiCU7UETdS/A0G8V/XWHvJv3ZsFqutJn1Y5RPmAPX6F3BiE397OqveU/9NCuIA==}
+
+  '@jridgewell/sourcemap-codec@1.5.5':
+    resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==}
+
+  '@jridgewell/trace-mapping@0.3.31':
+    resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
+
+  '@lukeed/csprng@1.1.0':
+    resolution: {integrity: sha512-Z7C/xXCiGWsg0KuKsHTKJxbWhpI3Vs5GwLfOean7MGyVFGqdRgBbAjOCh6u4bbjPc/8MJ2pZmK/0DLdCbivLDA==}
+    engines: {node: '>=8'}
+
+  '@microsoft/tsdoc@0.16.0':
+    resolution: {integrity: sha512-xgAyonlVVS+q7Vc7qLW0UrJU7rSFcETRWsqdXZtjzRU8dF+6CkozTK4V4y1LwOX7j8r/vHphjDeMeGI4tNGeGA==}
+
+  '@napi-rs/wasm-runtime@1.2.2':
+    resolution: {integrity: sha512-JfB4kuJQjaoHuCTseIINHtHWeJnvgEcxjwA5t/Y00ZgaOO1Crz3fjT/p8kT28zA/Caz7oiUMn3d6H2yOVCVwuw==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=23.5.0}
+    peerDependencies:
+      '@emnapi/core': ^1.7.1 || ^2.0.0-alpha.3
+      '@emnapi/runtime': ^1.7.1 || ^2.0.0-alpha.3
+
+  '@nestjs/cli@11.0.24':
+    resolution: {integrity: sha512-aIHxQLSYtXShifA3zwWIeznEsZnNa3Iz2QRykFj+sl9IcbERBHr5nH87FRgywM+He3NxoF5WazHfR8FsmVeWxw==}
+    engines: {node: '>= 20.11'}
+    hasBin: true
+    peerDependencies:
+      '@swc/cli': ^0.1.62 || ^0.3.0 || ^0.4.0 || ^0.5.0 || ^0.6.0 || ^0.7.0 || ^0.8.0
+      '@swc/core': ^1.3.62
+    peerDependenciesMeta:
+      '@swc/cli':
+        optional: true
+      '@swc/core':
+        optional: true
+
+  '@nestjs/common@11.1.29':
+    resolution: {integrity: sha512-zkeNRlfiQIH/044r5zphjNzKYxBRC4O00onTdCsH2qq0R30Ixo0gOS9so5TadEbJJCuGNm0Vx3PBE2FG2vkBdA==}
+    peerDependencies:
+      class-transformer: '>=0.4.1'
+      class-validator: '>=0.13.2'
+      reflect-metadata: ^0.1.12 || ^0.2.0
+      rxjs: ^7.1.0
+    peerDependenciesMeta:
+      class-transformer:
+        optional: true
+      class-validator:
+        optional: true
+
+  '@nestjs/config@4.0.4':
+    resolution: {integrity: sha512-CJPjNitr0bAufSEnRe2N+JbnVmMmDoo6hvKCPzXgZoGwJSmp/dZPk9f/RMbuD/+Q1ZJPjwsRpq0vxna++Knwow==}
+    peerDependencies:
+      '@nestjs/common': ^10.0.0 || ^11.0.0
+      rxjs: ^7.1.0
+
+  '@nestjs/core@11.1.29':
+    resolution: {integrity: sha512-ANXnZxirMNAY+JuRHCIYIdTfbhX3rizeSbJloub/4EYwpIfCuUoaz9woOofWmywYYc3gsVkLxVZV03gqntI8vA==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      '@nestjs/common': ^11.0.0
+      '@nestjs/microservices': ^11.0.0
+      '@nestjs/platform-express': ^11.0.0
+      '@nestjs/websockets': ^11.0.0
+      reflect-metadata: ^0.1.12 || ^0.2.0
+      rxjs: ^7.1.0
+    peerDependenciesMeta:
+      '@nestjs/microservices':
+        optional: true
+      '@nestjs/platform-express':
+        optional: true
+      '@nestjs/websockets':
+        optional: true
+
+  '@nestjs/jwt@11.0.2':
+    resolution: {integrity: sha512-rK8aE/3/Ma45gAWfCksAXUNbOoSOUudU0Kn3rT39htPF7wsYXtKfjALKeKKJbFrIWbLjsbqfXX5bIJNvgBugGA==}
+    peerDependencies:
+      '@nestjs/common': ^8.0.0 || ^9.0.0 || ^10.0.0 || ^11.0.0
+
+  '@nestjs/mapped-types@2.1.1':
+    resolution: {integrity: sha512-SCCoMEJ6jdeI5h/N+KCVF1+pmg/hmEkNA5nHTS8Gvww7T/LCl4o1gFLinw2iQ60w7slFkszHcGLKGdazVI4F8A==}
+    peerDependencies:
+      '@nestjs/common': ^10.0.0 || ^11.0.0
+      class-transformer: ^0.4.0 || ^0.5.0
+      class-validator: ^0.13.0 || ^0.14.0 || ^0.15.0
+      reflect-metadata: ^0.1.12 || ^0.2.0
+    peerDependenciesMeta:
+      class-transformer:
+        optional: true
+      class-validator:
+        optional: true
+
+  '@nestjs/platform-express@11.1.29':
+    resolution: {integrity: sha512-OngsAjdzM+SbbmP1XojKfBgl0Lj7u8b7IK5duwpFymzNP5EmjS8ujvqck9M8h0L14I91aRIFSjIpVfHj8WVtqw==}
+    peerDependencies:
+      '@nestjs/common': ^11.0.0
+      '@nestjs/core': ^11.0.0
+
+  '@nestjs/schematics@11.1.0':
+    resolution: {integrity: sha512-lVxGZ46tcdItFMoXr6vyKWlnOsm1SZm/GUqAEDvy2RL4Q4O+3bkziAhrO7Y8JLssFUUvNFEGqAizI52WAxhjDw==}
+    peerDependencies:
+      prettier: ^3.0.0
+      typescript: '>=4.8.2'
+    peerDependenciesMeta:
+      prettier:
+        optional: true
+
+  '@nestjs/swagger@11.4.6':
+    resolution: {integrity: sha512-Le136h2WC7HGsd70+WyK1qrm+Zq7kFxBLkYC1JgAVqNRCt8kNh7bMF7Qkn65D5j2t/aks0+VbWmUVlYIwPrs3A==}
+    peerDependencies:
+      '@fastify/static': ^8.0.0 || ^9.0.0 || ^10.0.0
+      '@nestjs/common': ^11.0.1
+      '@nestjs/core': ^11.0.1
+      class-transformer: '*'
+      class-validator: '*'
+      reflect-metadata: ^0.1.12 || ^0.2.0
+    peerDependenciesMeta:
+      '@fastify/static':
+        optional: true
+      class-transformer:
+        optional: true
+      class-validator:
+        optional: true
+
+  '@nestjs/terminus@11.1.1':
+    resolution: {integrity: sha512-Ssql79H+EQY/Wg108eJqN4NiNsO/tLrj+qbzOWSQUf2JE4vJQ2RG3WTqUOrYjfjWmVHD3+Ys0+azed7LSMKScw==}
+    peerDependencies:
+      '@grpc/grpc-js': '*'
+      '@grpc/proto-loader': '*'
+      '@mikro-orm/core': '*'
+      '@mikro-orm/nestjs': '*'
+      '@nestjs/axios': ^2.0.0 || ^3.0.0 || ^4.0.0
+      '@nestjs/common': ^10.0.0 || ^11.0.0
+      '@nestjs/core': ^10.0.0 || ^11.0.0
+      '@nestjs/microservices': ^10.0.0 || ^11.0.0
+      '@nestjs/mongoose': ^11.0.0
+      '@nestjs/sequelize': ^10.0.0 || ^11.0.0
+      '@nestjs/typeorm': ^10.0.0 || ^11.0.0
+      '@prisma/client': '*'
+      mongoose: '*'
+      reflect-metadata: 0.1.x || 0.2.x
+      rxjs: 7.x
+      sequelize: '*'
+      typeorm: '*'
+    peerDependenciesMeta:
+      '@grpc/grpc-js':
+        optional: true
+      '@grpc/proto-loader':
+        optional: true
+      '@mikro-orm/core':
+        optional: true
+      '@mikro-orm/nestjs':
+        optional: true
+      '@nestjs/axios':
+        optional: true
+      '@nestjs/microservices':
+        optional: true
+      '@nestjs/mongoose':
+        optional: true
+      '@nestjs/sequelize':
+        optional: true
+      '@nestjs/typeorm':
+        optional: true
+      '@prisma/client':
+        optional: true
+      mongoose:
+        optional: true
+      sequelize:
+        optional: true
+      typeorm:
+        optional: true
+
+  '@nestjs/testing@11.1.29':
+    resolution: {integrity: sha512-u+aEp90Ly3uQbLoicZs+ZOrJTyvaD0fbd6dpnSgFZz5Bf77gbKKfr+xFE2JxqZuIH15HlBrqDL7/OL2qL8oG+A==}
+    peerDependencies:
+      '@nestjs/common': ^11.0.0
+      '@nestjs/core': ^11.0.0
+      '@nestjs/microservices': ^11.0.0
+      '@nestjs/platform-express': ^11.0.0
+    peerDependenciesMeta:
+      '@nestjs/microservices':
+        optional: true
+      '@nestjs/platform-express':
+        optional: true
+
+  '@nestjs/throttler@6.5.0':
+    resolution: {integrity: sha512-9j0ZRfH0QE1qyrj9JjIRDz5gQLPqq9yVC2nHsrosDVAfI5HHw08/aUAWx9DZLSdQf4HDkmhTTEGLrRFHENvchQ==}
+    peerDependencies:
+      '@nestjs/common': ^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0 || ^11.0.0
+      '@nestjs/core': ^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0 || ^11.0.0
+      reflect-metadata: ^0.1.13 || ^0.2.0
+
+  '@next/env@16.3.0':
+    resolution: {integrity: sha512-o9r1S0BNiNreHP9Vs+Qnqd9kviDkJh8xIACY7UFZSmiGbbQRzPBBosvHzAU4TULHOIuOj/18RSsyz2qrREmIFw==}
+
+  '@next/swc-darwin-arm64@16.3.0':
+    resolution: {integrity: sha512-55hpqq18bEVAlxedlTt3tFqZmKg2nUXT1kn1G/BGEy0R13h3LwtwHPVzzjG6P4LLeOHE32PFDQUVaJEWvBEZBw==}
+    engines: {node: '>= 10'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@next/swc-darwin-x64@16.3.0':
+    resolution: {integrity: sha512-SOi96kSaF5T+0wW4koiM1bWzSPwjzTesC1p3df+FjdOi5LIQkBK/blxh7HdoKnNuI4PURF1OO7TZqtfnbWDSgw==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@next/swc-linux-arm64-gnu@16.3.0':
+    resolution: {integrity: sha512-P0gZAoPMF4dyTRzhmkV4PrqVzSOB6t4mC1oI3c4dqijJ+OVEVx5clIXAKR4/uQpsqw2KKM/0D5tVumcR2r5blg==}
+    engines: {node: '>= 10'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@next/swc-linux-arm64-musl@16.3.0':
+    resolution: {integrity: sha512-tXXGKJw0m37O0eKJARVTX/TheKPhz0QFVtVVZXmOig+9YKLQOSP6hvf2pxv5DO7CLEJyTHx3Pg043CDQkv1G4Q==}
+    engines: {node: '>= 10'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@next/swc-linux-x64-gnu@16.3.0':
+    resolution: {integrity: sha512-pjGxK5EY7yWml78ALejFkWmgHsU7wbFQrISiugpH6FbUJhgEvw3xFZ/EBAtLl7QtL0WdQKiG9eWJ3mOKGTukHw==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@next/swc-linux-x64-musl@16.3.0':
+    resolution: {integrity: sha512-sjo++Xx+lomlPs3HRsHWhVDyGG6ms1kGW5EtHLERdII8AyG1i+f6aq68xHREO6AEMlhjTNEWBSmfJfqm9orf7g==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@next/swc-win32-arm64-msvc@16.3.0':
+    resolution: {integrity: sha512-C5JSgiO54wURdaxdEUIXqkz04uMqC9UmPX1gtDrV/5Tf1UowdWYI8uA5hfFbPolTlp0q4KZ60xlHePNibf0VIw==}
+    engines: {node: '>= 10'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@next/swc-win32-x64-msvc@16.3.0':
+    resolution: {integrity: sha512-fDOggsweNb5SSw0ZKVk6U+gxSyGFFlIBY/LBc1r8GUj4u/6t6oArL+Pmkg0MBnsgR+KkdsURilVH4F3GXUGepA==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [win32]
+
+  '@noble/hashes@1.8.0':
+    resolution: {integrity: sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A==}
+    engines: {node: ^14.21.3 || >=16}
+
+  '@paralleldrive/cuid2@2.3.1':
+    resolution: {integrity: sha512-XO7cAxhnTZl0Yggq6jOgjiOHhbgcO4NqFqwSmQpjK3b6TEE6Uj/jfSk6wzYyemh3+I0sHirKSetjQwn5cZktFw==}
+
+  '@pinojs/redact@0.4.0':
+    resolution: {integrity: sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==}
+
+  '@pkgjs/parseargs@0.11.0':
+    resolution: {integrity: sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==}
+    engines: {node: '>=14'}
+
+  '@pkgr/core@0.3.6':
+    resolution: {integrity: sha512-SEeaJLb3qBNF/OaXnaR1NmmBbFYk1zC0ZH/52fATcRPLFg/p791YrcyFFy44Bo9sLaGuSuLp5Q6axbb/O+v/RA==}
+    engines: {node: ^14.18.0 || >=16.0.0}
+
+  '@prisma/client@6.19.3':
+    resolution: {integrity: sha512-mKq3jQFhjvko5LTJFHGilsuQs+W+T3Gm451NzuTDGQxwCzwXHYnIu2zGkRoW+Exq3Rob7yp2MfzSrdIiZVhrBg==}
+    engines: {node: '>=18.18'}
+    peerDependencies:
+      prisma: '*'
+      typescript: '>=5.1.0'
+    peerDependenciesMeta:
+      prisma:
+        optional: true
+      typescript:
+        optional: true
+
+  '@prisma/config@6.19.3':
+    resolution: {integrity: sha512-CBPT44BjlQxEt8kiMEauji2WHTDoVBOKl7UlewXmUgBPnr/oPRZC3psci5chJnYmH0ivEIog2OU9PGWoki3DLQ==}
+
+  '@prisma/debug@6.19.3':
+    resolution: {integrity: sha512-ljkJ+SgpXNktLG0Q/n4JGYCkKf0f8oYLyjImS2I8e2q2WCfdRRtWER062ZV/ixaNP2M2VKlWXVJiGzZaUgbKZw==}
+
+  '@prisma/engines-version@7.1.1-3.c2990dca591cba766e3b7ef5d9e8a84796e47ab7':
+    resolution: {integrity: sha512-03bgb1VD5gvuumNf+7fVGBzfpJPjmqV423l/WxsWk2cNQ42JD0/SsFBPhN6z8iAvdHs07/7ei77SKu7aZfq8bA==}
+
+  '@prisma/engines@6.19.3':
+    resolution: {integrity: sha512-RSYxtlYFl5pJ8ZePgMv0lZ9IzVCOdTPOegrs2qcbAEFrBI1G33h6wyC9kjQvo0DnYEhEVY0X4LsuFHXLKQk88g==}
+
+  '@prisma/fetch-engine@6.19.3':
+    resolution: {integrity: sha512-tKtl/qco9Nt7LU5iKhpultD8O4vMCZcU2CHjNTnRrL1QvSUr5W/GcyFPjNL87GtRrwBc7ubXXD9xy4EvLvt8JA==}
+
+  '@prisma/get-platform@6.19.3':
+    resolution: {integrity: sha512-xFj1VcJ1N3MKooOQAGO0W5tsd0W2QzIvW7DD7c/8H14Zmp4jseeWAITm+w2LLoLrlhoHdPPh0NMZ8mfL6puoHA==}
+
+  '@scarf/scarf@1.4.0':
+    resolution: {integrity: sha512-xxeapPiUXdZAE3che6f3xogoJPeZgig6omHEy1rIY5WVsB3H2BHNnZH+gHG6x91SCWyQCzWGsuL2Hh3ClO5/qQ==}
+
+  '@sinclair/typebox@0.34.52':
+    resolution: {integrity: sha512-XiMQh7qqVlxZzcVD+kkGMNGMzcTrDMLWI7S4x7z1MkCkbDPrekpZXEUK0eZqZFMuHQg2a2DZOcDIh9o5v3Gonw==}
+
+  '@sinonjs/commons@3.0.1':
+    resolution: {integrity: sha512-K3mCHKQ9sVh8o1C9cxkwxaOmXoAMlDxC1mYyHrjqOWEcBjYr76t96zL2zlj5dUGZ3HSw240X1qgH3Mjf1yJWpQ==}
+
+  '@sinonjs/fake-timers@15.4.0':
+    resolution: {integrity: sha512-DsG+8/LscQIQg68J6Ef3dv10u6nVyetYn923s3/sus5eaGfTo1of5WMZSLf0UJc9KDuKPilPH0UDJCjvNbDNCA==}
+
+  '@smithy/core@3.31.1':
+    resolution: {integrity: sha512-CyogUINxvi7C7LDsh8Syo6hVJOT9ckz4rG8dRZfTJ8r91HkMY59PnNooaj7WcHyxEkxPfBAmbgztZU+xTo76lg==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/credential-provider-imds@4.4.16':
+    resolution: {integrity: sha512-QfuLWAkLzptffFW980AFeHZFdqds2B64rpEd3uJ6lgs3xVn9QegGMUgUcj+4d7dRrAsya3r58ZKpku97WcFb4w==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/fetch-http-handler@5.6.13':
+    resolution: {integrity: sha512-4fW86pEUOMbrD5nkbyl/tTvPHHWJFbuB2odl6ps9lWfHoXf9HWh3Q/Smh59qH1g7+c/BSZghX6bbUk4gsiMs8A==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/node-http-handler@4.9.13':
+    resolution: {integrity: sha512-Nmd/Nl35zfYrd+a6OO2cDJb3GPh9bgTjIUhcM+JFfjpp8/osCgboDV5nCT1I01Pv6R13eSKDKLSoVa5ZB6Zsfw==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/signature-v4@5.6.12':
+    resolution: {integrity: sha512-I6KLtq3H0qqSuV9vLglfi8puHqzygzWHOnI4z/Rdoo+q50vvo18vBRdPAvvEtcaKROz7Zn6qnPa14kRfPH6PcQ==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/types@4.16.1':
+    resolution: {integrity: sha512-0JFs3V2y2M9tKW5na/qxe69Zv+uxLMO7QBbhxF/FHu/Gp2NFZAAL9tWl9PU02xxo07pb3G9FTyjNc6D5uZrJIg==}
+    engines: {node: '>=18.0.0'}
+
+  '@standard-schema/spec@1.1.0':
+    resolution: {integrity: sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==}
+
+  '@swc/helpers@0.5.15':
+    resolution: {integrity: sha512-JQ5TuMi45Owi4/BIMAJBoSQoOJu12oOk/gADqlcUL9JEdHB8vyjUSsxqeNXnmXHjYKMi2WcYtezGEEhqUI/E2g==}
+
+  '@tailwindcss/node@4.3.3':
+    resolution: {integrity: sha512-/T8IKEsf9VTU6tLjgC7+sv2mOPtQxzE2jMw7u4Tt40Tx+QSZxpzh95/H6cMKoja9XuW7iMdLJYBB0o9G1CaAgg==}
+
+  '@tailwindcss/oxide-android-arm64@4.3.3':
+    resolution: {integrity: sha512-Y85A2gmPSkl5Ve5qR86GL4HT509cFqQh1aes9p3sSkyTPwt0Pppf3GkwGe4JPACcRYjgJIEhQgM6dBClnr0NYw==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [android]
+
+  '@tailwindcss/oxide-darwin-arm64@4.3.3':
+    resolution: {integrity: sha512-BiaWatpBcERQFDlOjRDpIVXuFK5PJez5SA4JMg6VYZdBYU+qKfV/vqjcIs+IYmtitf1xYQZTwXvU/8y4lfZUGw==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@tailwindcss/oxide-darwin-x64@4.3.3':
+    resolution: {integrity: sha512-fAeUqfV5ndhxRwai8cXGzdLvul9utWOmeTkv69unv4ZXixjn61Z+p9lCWdwOwA3TYboG3BwdVuN/RDjhBRl0mw==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@tailwindcss/oxide-freebsd-x64@4.3.3':
+    resolution: {integrity: sha512-iyf5bV6+wnAlflVeEy7R25dupxTNECZN5QMI0qNT6eT+EgaGdZcKhGkr5SdoaWiLJ3spLqIY9VCeSGrwmtg4kw==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.3':
+    resolution: {integrity: sha512-aAYUprJAJQWWbRrPvtjdroZ56Md+JM8pMiopS6xGEwDfLhqj+2ver2p4nU4Mb3CRqcMmNBjo8KkUgcxhkzVQGQ==}
+    engines: {node: '>= 20'}
+    cpu: [arm]
+    os: [linux]
+
+  '@tailwindcss/oxide-linux-arm64-gnu@4.3.3':
+    resolution: {integrity: sha512-nDxldcEENOxZRzC2uu9jrutZdAAQtb+8WWDCSnWL1zvBk1+FN+x6MtDViPB5AJMfttVCUhehGWus3XBPgatM/w==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@tailwindcss/oxide-linux-arm64-musl@4.3.3':
+    resolution: {integrity: sha512-Md44bD6veX/PC5iyF8cDVnw4HBIANZepRZZ7a8DQOvkfo5WUBwcp6iAuCUz23u+4SUkhJlD3eL7hNdW8ezd/kA==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@tailwindcss/oxide-linux-x64-gnu@4.3.3':
+    resolution: {integrity: sha512-tx7us1muwOKAKWao2v/GaafFeQboE6aj88vC6ziN2NCGcRm8gWUhwjzg+YdVB1e4boAtdtma4L43onunI6NS4w==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@tailwindcss/oxide-linux-x64-musl@4.3.3':
+    resolution: {integrity: sha512-SJxX60smvHgasZoBy11dX6YRjXJFovwWBoedhbQPOBzgFWBHGB+TVPWB9BxzR7TTxU8FQZAI2AyiNCMzFm8Img==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@tailwindcss/oxide-wasm32-wasi@4.3.3':
+    resolution: {integrity: sha512-jx1+rPhY/5Ympkktd656HBWEBLxP7dH06losBLjjf5vgCODXvi9KhtftWcMIwTFIDqBr7cRnQkdLnAG+IOlGvQ==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+    bundledDependencies:
+      - '@napi-rs/wasm-runtime'
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+      - '@tybys/wasm-util'
+      - '@emnapi/wasi-threads'
+      - tslib
+
+  '@tailwindcss/oxide-win32-arm64-msvc@4.3.3':
+    resolution: {integrity: sha512-3rc292Ca2ceK6Ulcc/bAVnTs/3nDtoPhyEKlgPv+yQJQi/JS/AMJlqzxvlDacL1nekbrcf6bTqp/jV4qgnPxNQ==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@tailwindcss/oxide-win32-x64-msvc@4.3.3':
+    resolution: {integrity: sha512-yJ0pwIVc/nYeGoV02WtsN8KYyLQv7kyI2wDnkezyJlGGjkd4QLwDGAwl47YpPJeuI0M0ObaXGSPjvWDPeTPggw==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [win32]
+
+  '@tailwindcss/oxide@4.3.3':
+    resolution: {integrity: sha512-krXjAikiaFSPaK/FkAQT5UTx3VormQaiZ5hBFlJZ9UFQGB/rwg1MZIhHAG9smMQRTdyJxP6Qt5MwMtdyU5FWrA==}
+    engines: {node: '>= 20'}
+
+  '@tailwindcss/postcss@4.3.3':
+    resolution: {integrity: sha512-JTSZZGQi1AyKirbLN3azmjVzef92tcX7h+iSqPdaeStyFpGpDlKvvpxeOE8njhbUanbRwr3z8DyzhICWnMtQeg==}
+
+  '@tanstack/query-core@5.101.4':
+    resolution: {integrity: sha512-gNwcvOJcRbLWPOLG/2OBm+zM+Yv+MKsXKEOWC57USuZDEsI71hEErQsiEGx5wX9rzWWkfwM0fVSPoiIFSsxfiw==}
+
+  '@tanstack/react-query@5.101.4':
+    resolution: {integrity: sha512-yRg2pfOCxIs4ZJW3XYYHU/WgtD04FHSnfHlpRT7h7pR77hwkdRG4wxbKe4aq6P0RvXUTBSQpQeadS1SUYUe+KA==}
+    peerDependencies:
+      react: ^18 || ^19
+
+  '@tokenizer/inflate@0.4.1':
+    resolution: {integrity: sha512-2mAv+8pkG6GIZiF1kNg1jAjh27IDxEPKwdGul3snfztFerfPGI1LjDezZp3i7BElXompqEtPmoPx6c2wgtWsOA==}
+    engines: {node: '>=18'}
+
+  '@tokenizer/token@0.3.0':
+    resolution: {integrity: sha512-OvjF+z51L3ov0OyAU0duzsYuvO01PH7x4t6DJx+guahgTnBHkhJdG7soQeTSFLWN3efnHyibZ4Z8l2EuWwJN3A==}
+
+  '@turbo/darwin-64@2.10.9':
+    resolution: {integrity: sha512-Jh+pTGXLNz8+1tkUU13TI/f+ZOI+OvC4YbHi1H+57iSpLt5DR3xgptd+4sA07RdjdRR/RX/01uQQu2OkbzIefA==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@turbo/darwin-arm64@2.10.9':
+    resolution: {integrity: sha512-aqtpPkiIC4IUas8Vv27oJ3aDfTuP1d5wofd01dZ7gfhHRrIKuFdqQb4imvNnVFahcOViF9Jh8Oi7feDoz8/ciA==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@turbo/linux-64@2.10.9':
+    resolution: {integrity: sha512-XyAneUBsS5uNOUOjBSs81zyigMVwwhVUd3u7F2JFMKGQk6F7eNAiOEBASJ+aHLldjYsOEjhfW+5gWIqwziyFFw==}
+    cpu: [x64]
+    os: [android, linux]
+
+  '@turbo/linux-arm64@2.10.9':
+    resolution: {integrity: sha512-5jAcldLnkuWIjujGhCn2MGIeUwW8IVNOq9Sce4EEzzgLcxmhTasbV0RiW6ZkaRdOjmOCGzeNXPLkDJEOIucOLw==}
+    cpu: [arm64]
+    os: [android, linux]
+
+  '@turbo/windows-64@2.10.9':
+    resolution: {integrity: sha512-u1xGpGlefzuhBedbt/VR2nWdftfFVZwPeDg9e5uZl68sV1fL3HNYTNr5VyHkzgtPK2VTYg1x4OKZuGrh1Gvhtg==}
+    cpu: [x64]
+    os: [win32]
+
+  '@turbo/windows-arm64@2.10.9':
+    resolution: {integrity: sha512-W2Ub165Qv0iMFljbYKxxbZN+2dVSngnzEjQNEFXtnz5oJVx9XSypmNmUvMtuYMeZ3kdVC1zI7yd/rtuX+SDnbg==}
+    cpu: [arm64]
+    os: [win32]
+
+  '@tybys/wasm-util@0.10.3':
+    resolution: {integrity: sha512-F3fo1MYrRJYL3zER0OUOmkutjr1Vp23m7OsSgp7nq4SP6OqX6C/56XFIPAl5bt3zaBRjmW7SGz3u/6LwFpYcOg==}
+
+  '@types/babel__core@7.20.5':
+    resolution: {integrity: sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==}
+
+  '@types/babel__generator@7.27.0':
+    resolution: {integrity: sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg==}
+
+  '@types/babel__template@7.4.4':
+    resolution: {integrity: sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==}
+
+  '@types/babel__traverse@7.28.0':
+    resolution: {integrity: sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q==}
+
+  '@types/body-parser@1.19.6':
+    resolution: {integrity: sha512-HLFeCYgz89uk22N5Qg3dvGvsv46B8GLvKKo1zKG4NybA8U2DiEO3w9lqGg29t/tfLRJpJ6iQxnVw4OnB7MoM9g==}
+
+  '@types/compression@1.8.1':
+    resolution: {integrity: sha512-kCFuWS0ebDbmxs0AXYn6e2r2nrGAb5KwQhknjSPSPgJcGd8+HVSILlUyFhGqML2gk39HcG7D1ydW9/qpYkN00Q==}
+
+  '@types/connect@3.4.38':
+    resolution: {integrity: sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug==}
+
+  '@types/cookiejar@2.1.5':
+    resolution: {integrity: sha512-he+DHOWReW0nghN24E1WUqM0efK4kI9oTqDm6XmK8ZPe2djZ90BSNdGnIyCLzCPw7/pogPlGbzI2wHGGmi4O/Q==}
+
+  '@types/eslint-scope@3.7.7':
+    resolution: {integrity: sha512-MzMFlSLBqNF2gcHWO0G1vP/YQyfvrxZ0bF+u7mzUdZ1/xK4A4sru+nraZz5i3iEIk1l1uyicaDVTB4QbbEkAYg==}
+
+  '@types/eslint@9.6.1':
+    resolution: {integrity: sha512-FXx2pKgId/WyYo2jXw63kk7/+TY7u7AziEJxJAnSFzHlqTAS3Ync6SvgYAN/k4/PQpnnVuzoMuVnByKK2qp0ag==}
+
+  '@types/estree@1.0.9':
+    resolution: {integrity: sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==}
+
+  '@types/express-serve-static-core@5.1.3':
+    resolution: {integrity: sha512-dPfW8NFiOF4wOHc7+N/QSxlY9cfSsenewGbAz8C8U/MULPd/YZ27LvJUIlzaXie7e6Ove9YunJGgC9tbHD2cKw==}
+
+  '@types/express@5.0.6':
+    resolution: {integrity: sha512-sKYVuV7Sv9fbPIt/442koC7+IIwK5olP1KWeD88e/idgoJqDm3JV/YUiPwkoKK92ylff2MGxSz1CSjsXelx0YA==}
+
+  '@types/http-errors@2.0.5':
+    resolution: {integrity: sha512-r8Tayk8HJnX0FztbZN7oVqGccWgw98T/0neJphO91KkmOzug1KkofZURD4UaD5uH8AqcFLfdPErnBod0u71/qg==}
+
+  '@types/istanbul-lib-coverage@2.0.6':
+    resolution: {integrity: sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w==}
+
+  '@types/istanbul-lib-report@3.0.3':
+    resolution: {integrity: sha512-NQn7AHQnk/RSLOxrBbGyJM/aVQ+pjj5HCgasFxc0K/KhoATfQ/47AyUl15I2yBUpihjmas+a+VJBOqecrFH+uA==}
+
+  '@types/istanbul-reports@3.0.4':
+    resolution: {integrity: sha512-pk2B1NWalF9toCRu6gjBzR69syFjP4Od8WRAX+0mmf9lAjCRicLOWc+ZrxZHx/0XRjotgkF9t6iaMJ+aXcOdZQ==}
+
+  '@types/jest@30.0.0':
+    resolution: {integrity: sha512-XTYugzhuwqWjws0CVz8QpM36+T+Dz5mTEBKhNs/esGLnCIlGdRy+Dq78NRjd7ls7r8BC8ZRMOrKlkO1hU0JOwA==}
+
+  '@types/json-schema@7.0.15':
+    resolution: {integrity: sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==}
+
+  '@types/jsonwebtoken@9.0.10':
+    resolution: {integrity: sha512-asx5hIG9Qmf/1oStypjanR7iKTv0gXQ1Ov/jfrX6kS/EO0OFni8orbmGCn0672NHR3kXHwpAwR+B368ZGN/2rA==}
+
+  '@types/methods@1.1.4':
+    resolution: {integrity: sha512-ymXWVrDiCxTBE3+RIrrP533E70eA+9qu7zdWoHuOmGujkYtzf4HQF96b8nwHLqhuf4ykX61IGRIB38CC6/sImQ==}
+
+  '@types/ms@2.1.0':
+    resolution: {integrity: sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==}
+
+  '@types/node@22.20.1':
+    resolution: {integrity: sha512-EANqOCF9QFyra+4pfxUcX9STKJpCLjMbObVzljIJomAWSnuSIEAvyzEU53GaajbXJEgdh0iEcPL+DGvpUd4k1Q==}
+
+  '@types/qs@6.15.1':
+    resolution: {integrity: sha512-GZHUBZR9hckSUhrxmp1nG6NwdpM9fCunJwyThLW1X3AyHgd9IlHb6VANpQQqDr2o/qQp6McZ3y/IA2rVzKzSbw==}
+
+  '@types/range-parser@1.2.7':
+    resolution: {integrity: sha512-hKormJbkJqzQGhziax5PItDUTMAM9uE2XXQmM37dyd4hVM+5aVl7oVxMVUiVQn2oCQFN/LKCZdvSM0pFRqbSmQ==}
+
+  '@types/react-dom@19.2.4':
+    resolution: {integrity: sha512-Bsc+QHgp+P/F02XDzNCY9jnZNCUuLki36KT7VKrTXXLdHf+vHMNZnW1rVu5DNW/rCK+fya3DATySbLM4yhtKUw==}
+    peerDependencies:
+      '@types/react': ^19.2.0
+
+  '@types/react@19.2.18':
+    resolution: {integrity: sha512-AnzbBERsrLKtk2XSfTbYRLjQPdy116Sty4q+T+Bp3IC4l6jNBvreVPAHmpq9qhXQM7CXZPjLVmGMw9sy+hxQ3w==}
+
+  '@types/send@1.2.1':
+    resolution: {integrity: sha512-arsCikDvlU99zl1g69TcAB3mzZPpxgw0UQnaHeC1Nwb015xp8bknZv5rIfri9xTOcMuaVgvabfIRA7PSZVuZIQ==}
+
+  '@types/serve-static@2.2.0':
+    resolution: {integrity: sha512-8mam4H1NHLtu7nmtalF7eyBH14QyOASmcxHhSfEoRyr0nP/YdoesEtU+uSRvMe96TW/HPTtkoKqQLl53N7UXMQ==}
+
+  '@types/stack-utils@2.0.3':
+    resolution: {integrity: sha512-9aEbYZ3TbYMznPdcdr3SmIrLXwC/AKZXQeCf9Pgao5CKb8CyHuEX5jzWPTkvregvhRJHcpRO6BFoGW9ycaOkYw==}
+
+  '@types/superagent@8.1.11':
+    resolution: {integrity: sha512-KA7srSW/HENDtOw9DOqaFLgWuMqN9WgjEw62lh9dpvRaZDkhdOkazASd7X7i2eMUYLHa1U37ZttnePsH5zTDHw==}
+
+  '@types/supertest@6.0.3':
+    resolution: {integrity: sha512-8WzXq62EXFhJ7QsH3Ocb/iKQ/Ty9ZVWnVzoTKc9tyyFRRF3a74Tk2+TLFgaFFw364Ere+npzHKEJ6ga2LzIL7w==}
+
+  '@types/yargs-parser@21.0.3':
+    resolution: {integrity: sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==}
+
+  '@types/yargs@17.0.35':
+    resolution: {integrity: sha512-qUHkeCyQFxMXg79wQfTtfndEC+N9ZZg76HJftDJp+qH2tV7Gj4OJi7l+PiWwJ+pWtW8GwSmqsDj/oymhrTWXjg==}
+
+  '@typescript-eslint/eslint-plugin@8.67.0':
+    resolution: {integrity: sha512-Un7Heoyj65NREbKAyIrFxeM143NZpExWmy1Nep4DLeQOeLlTeumPjoNKnBrU5D5moWXbPJgRa5Uwcdu0faVNGQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      '@typescript-eslint/parser': ^8.67.0
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/parser@8.67.0':
+    resolution: {integrity: sha512-fUBfTuuEulWqX6V8+O3PtScV01tzYYRUDTAirHFKoRAt7nOzoGiPt0M/bB47wWNy0coOOcgEwAMUtBpykMxl6w==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/project-service@8.67.0':
+    resolution: {integrity: sha512-cvE8c7ulYeXN9fYuszhCeCsbzyVEXuhrRCybnBre7TUmqb5nRmBfQAwCj0O3WJFDeyAZt4VYv51vMCC9LHSdYw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/scope-manager@8.67.0':
+    resolution: {integrity: sha512-EgvsleTwS4E+WzzSvem8fAUubLwatMNF1B5hHSLQxcvs7q2dtRhGyujHwLJSYlG41niJ7GP24Aha2+0mb1b2kg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@typescript-eslint/tsconfig-utils@8.67.0':
+    resolution: {integrity: sha512-vV+LUSv5njUWsknE71fqKTlXUva+R76SaeORd6Zojcunk/6DvKFXONU3BrAs2H49mbygUXt6gbYunzwqNwlhdg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/type-utils@8.67.0':
+    resolution: {integrity: sha512-aVWDXbRmdXO9siTfX4ditQI1T9+zVcNazT48EJCD0v40/9RIFoUgZ05CmGEq9H2gixRpjUn/iplwvlcvutJW/Q==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/types@8.67.0':
+    resolution: {integrity: sha512-sBtgslww8nsMYUjhdPBiSyUqSzT8uR6g93A2QXnQC8+cGdjz0CyaOdqHDRJb1AtORbZCNUJBBeFA/tNR2uQmww==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@typescript-eslint/typescript-estree@8.67.0':
+    resolution: {integrity: sha512-EKQBCE9yNlRJYm7jdTW5AhDacDUmSwQb0FAJAmK2EKYrNXIsa2vxcSZx6PvJ/dEdI6lS+Y9W+EXckLj0iPFGcw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/utils@8.67.0':
+    resolution: {integrity: sha512-U9D1FdwEWBwok3hxxSdhclMb0twvt9QnjIQ0VfQ1AiX2epnpSgv2ubVDsayOFyY8K6FX+AQ7E0FKWVG3iKsj1A==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      typescript: '>=4.8.4 <6.1.0'
+
+  '@typescript-eslint/visitor-keys@8.67.0':
+    resolution: {integrity: sha512-fkv8dHRDqfGtTHuJeebdrQ7cX6Ad4WAS00rgHh9UGvMycF1mjBfsxry1XsLIFhWZ6Judlh6UdzK+TYlbpCXgnA==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  '@ungap/structured-clone@1.3.3':
+    resolution: {integrity: sha512-60YRaenCQcVjYEKOcG824+DRGGIQ3VKErcBoAEDJZz5bKIs2ZG+X/H9Nk+Q6EVkwJk5QNApxbrc5QtBSwtrXAg==}
+
+  '@unrs/resolver-binding-android-arm-eabi@1.12.2':
+    resolution: {integrity: sha512-g5T90pqg1bo/7mytQx6F4iBNC0Wsh9cu+z9veDbFjc7HjpesJFWD7QMS0NGStXM075+7dJPPVvBbpZlnrdpi/w==}
+    cpu: [arm]
+    os: [android]
+
+  '@unrs/resolver-binding-android-arm64@1.12.2':
+    resolution: {integrity: sha512-YGCRZv/9GLhwmz6mYDeTsm/92BAyR28l6c2ReweVW5pWgfsitWLY8upvfRlGdoyD8HjeTHSYJWyZGD4KJA/nFQ==}
+    cpu: [arm64]
+    os: [android]
+
+  '@unrs/resolver-binding-darwin-arm64@1.12.2':
+    resolution: {integrity: sha512-u9DiNT1auQMO20A9SyTuG3wUgQWB9Z7KjAg0uFuCDR1FsAY8A0CG2S6JpHS1xwm/w1G08bjXZDcyOCjv1WAm2w==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@unrs/resolver-binding-darwin-x64@1.12.2':
+    resolution: {integrity: sha512-f7rPLi/T1HVKZu/u6t87lroib16n8vrSzcyxI7lg4BGO9UF26KhQL44sd9eOUgrTYhvRXtWOIZT5PejdPyJfUA==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@unrs/resolver-binding-freebsd-x64@1.12.2':
+    resolution: {integrity: sha512-BpcOjWCJub6nRZUS2zA20pmLvjtqAtGejETaIyRLiZiQf++cbrjltLA5NN/xaXfqeOBOSlMFbemIl5/S5tljmg==}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@unrs/resolver-binding-linux-arm-gnueabihf@1.12.2':
+    resolution: {integrity: sha512-vZTDvdSISZjJx66OzJqtsOhzifbqRjbmI1Mnu49fQDwog5GtDI4QidRiEAYbZCRj9C8YZEW+3ZjqsyS9GR4k2A==}
+    cpu: [arm]
+    os: [linux]
+
+  '@unrs/resolver-binding-linux-arm-musleabihf@1.12.2':
+    resolution: {integrity: sha512-BiPI+IrIlwcW4nLLMM21+B1dFPzd55yAVgVGrdgDjNef+ch03GdxrcyaIz8X9SsQirh/kCQ7mviyWlMxdh2D7g==}
+    cpu: [arm]
+    os: [linux]
+
+  '@unrs/resolver-binding-linux-arm64-gnu@1.12.2':
+    resolution: {integrity: sha512-zJc0H99FEPoFfSrNpa91HYfxzfAJCr502oxNK1cfdC9hlaFI43RT+JFCann9JUgZmLzzntChHyn13Sgn9ljHNg==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@unrs/resolver-binding-linux-arm64-musl@1.12.2':
+    resolution: {integrity: sha512-KQ3Lki6l+Pz1k/eBipN41ES+YUK30beLGb9YqcB1O542cyLCNE6GaxrfcY3T6EezmGGk84wb5XyO9loTM9tkcA==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@unrs/resolver-binding-linux-loong64-gnu@1.12.2':
+    resolution: {integrity: sha512-3SJGEh1DborhG6pyxvhPzCT4bbSIVihsvgJc13P1bHG7KLdNDaF9T3gsTwFc7Jw/5Y5/iWOjkEx7Zy0NvCGX3Q==}
+    cpu: [loong64]
+    os: [linux]
+    libc: [glibc]
+
+  '@unrs/resolver-binding-linux-loong64-musl@1.12.2':
+    resolution: {integrity: sha512-jiuG/Obbel7uw1PwHNFfrkiKhLAF6mnyZ6aWlOAVN9WqKm8v0OFGnciJIHu8+CMvXLQ8AD51LPzAoUfT21D5Ew==}
+    cpu: [loong64]
+    os: [linux]
+    libc: [musl]
+
+  '@unrs/resolver-binding-linux-ppc64-gnu@1.12.2':
+    resolution: {integrity: sha512-q7xRvVpmcfeL+LlZg8Pbbo6QaTZwDU5BaGZbwfhkEsXJn3Was8xYfE0RBH266xZt0rM6B7i8xAYIvjthuUIWHg==}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@unrs/resolver-binding-linux-riscv64-gnu@1.12.2':
+    resolution: {integrity: sha512-0CVdx6lcnT3Q9inOH8tsMIOJ6ImndllMjqJHg8RLVdB7Vq4SfkEXl9mCSsVNuNA4MCYycRicCUxPCabVHJRr6A==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@unrs/resolver-binding-linux-riscv64-musl@1.12.2':
+    resolution: {integrity: sha512-iOwlRo9vnp6R6ohHQS11n0NnfdXx/omhkocmIfaPRpQhKZ+3BDMkkdRVh53qjkFkpPddf+FETA28NwGN7l5l+w==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [musl]
+
+  '@unrs/resolver-binding-linux-s390x-gnu@1.12.2':
+    resolution: {integrity: sha512-HYJtLfXq94q8iZNFT1lknx258wlkkWhZeUXJRqzKBBUJ00CvZ+N33zgbCqimLjsyw5Va6uUxhVa12mI+kaveEw==}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@unrs/resolver-binding-linux-x64-gnu@1.12.2':
+    resolution: {integrity: sha512-mPsUhunKKDih5O96Y6enDQyHc1SqBPlY1E/SfMWDM3EdJ95Z9CArPeCVwCCqbP45ljvivdEk8Fxn+SIb1rDAJQ==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@unrs/resolver-binding-linux-x64-musl@1.12.2':
+    resolution: {integrity: sha512-azrt6+5ydLd8Vt210AAFis/lZevSfPw93EJRIJG+xPu4WCJ8K0kppCTpMyLPcKT7H15M4Jnt2tMp5bOvCkRC6A==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@unrs/resolver-binding-openharmony-arm64@1.12.2':
+    resolution: {integrity: sha512-YZ9hP4O0X9PQb8eO980qmLNGH4zT3I9+SZTdt0Pr0YyuGQhYKoOZkV02VzrzyOZJ5xIJ3UFIenKkUkGg8GjgWQ==}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@unrs/resolver-binding-wasm32-wasi@1.12.2':
+    resolution: {integrity: sha512-tYFDIkMxSflfEc/h92ZWNsZlHSwgimbNHSO3PL2JWQHfCuC2q316jMyYU9TIWZsFK2bQwyK5VAdYgn8ygPj69A==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+
+  '@unrs/resolver-binding-win32-arm64-msvc@1.12.2':
+    resolution: {integrity: sha512-qzNyg3xL0VPQmCaUh+N5jSitce6k+uCBfMDesWRnlULOZaqUkaJ0ybdT+UqlAWJoQjuqfIU/0Ptx9bteN4D82g==}
+    cpu: [arm64]
+    os: [win32]
+
+  '@unrs/resolver-binding-win32-ia32-msvc@1.12.2':
+    resolution: {integrity: sha512-WD9sY00OfpHVGfsnHZoA8jVT+esS/Bg8z8jzxp5BnDCjjwsuKsPQrzswwpFy4J1AUJbXPRfkpcX0mXrzeXW79g==}
+    cpu: [ia32]
+    os: [win32]
+
+  '@unrs/resolver-binding-win32-x64-msvc@1.12.2':
+    resolution: {integrity: sha512-nAB74NfSNKknqQ1RrYj6uz8FcXEomu/MATJZxh/x+BArzN2U3JbOYC0APYzUIGhVY3m5hRxA8VPNdPBoG8txlA==}
+    cpu: [x64]
+    os: [win32]
+
+  '@webassemblyjs/ast@1.14.1':
+    resolution: {integrity: sha512-nuBEDgQfm1ccRp/8bCQrx1frohyufl4JlbMMZ4P1wpeOfDhF6FQkxZJ1b/e+PLwr6X1Nhw6OLme5usuBWYBvuQ==}
+
+  '@webassemblyjs/floating-point-hex-parser@1.13.2':
+    resolution: {integrity: sha512-6oXyTOzbKxGH4steLbLNOu71Oj+C8Lg34n6CqRvqfS2O71BxY6ByfMDRhBytzknj9yGUPVJ1qIKhRlAwO1AovA==}
+
+  '@webassemblyjs/helper-api-error@1.13.2':
+    resolution: {integrity: sha512-U56GMYxy4ZQCbDZd6JuvvNV/WFildOjsaWD3Tzzvmw/mas3cXzRJPMjP83JqEsgSbyrmaGjBfDtV7KDXV9UzFQ==}
+
+  '@webassemblyjs/helper-buffer@1.14.1':
+    resolution: {integrity: sha512-jyH7wtcHiKssDtFPRB+iQdxlDf96m0E39yb0k5uJVhFGleZFoNw1c4aeIcVUPPbXUVJ94wwnMOAqUHyzoEPVMA==}
+
+  '@webassemblyjs/helper-numbers@1.13.2':
+    resolution: {integrity: sha512-FE8aCmS5Q6eQYcV3gI35O4J789wlQA+7JrqTTpJqn5emA4U2hvwJmvFRC0HODS+3Ye6WioDklgd6scJ3+PLnEA==}
+
+  '@webassemblyjs/helper-wasm-bytecode@1.13.2':
+    resolution: {integrity: sha512-3QbLKy93F0EAIXLh0ogEVR6rOubA9AoZ+WRYhNbFyuB70j3dRdwH9g+qXhLAO0kiYGlg3TxDV+I4rQTr/YNXkA==}
+
+  '@webassemblyjs/helper-wasm-section@1.14.1':
+    resolution: {integrity: sha512-ds5mXEqTJ6oxRoqjhWDU83OgzAYjwsCV8Lo/N+oRsNDmx/ZDpqalmrtgOMkHwxsG0iI//3BwWAErYRHtgn0dZw==}
+
+  '@webassemblyjs/ieee754@1.13.2':
+    resolution: {integrity: sha512-4LtOzh58S/5lX4ITKxnAK2USuNEvpdVV9AlgGQb8rJDHaLeHciwG4zlGr0j/SNWlr7x3vO1lDEsuePvtcDNCkw==}
+
+  '@webassemblyjs/leb128@1.13.2':
+    resolution: {integrity: sha512-Lde1oNoIdzVzdkNEAWZ1dZ5orIbff80YPdHx20mrHwHrVNNTjNr8E3xz9BdpcGqRQbAEa+fkrCb+fRFTl/6sQw==}
+
+  '@webassemblyjs/utf8@1.13.2':
+    resolution: {integrity: sha512-3NQWGjKTASY1xV5m7Hr0iPeXD9+RDobLll3T9d2AO+g3my8xy5peVyjSag4I50mR1bBSN/Ct12lo+R9tJk0NZQ==}
+
+  '@webassemblyjs/wasm-edit@1.14.1':
+    resolution: {integrity: sha512-RNJUIQH/J8iA/1NzlE4N7KtyZNHi3w7at7hDjvRNm5rcUXa00z1vRz3glZoULfJ5mpvYhLybmVcwcjGrC1pRrQ==}
+
+  '@webassemblyjs/wasm-gen@1.14.1':
+    resolution: {integrity: sha512-AmomSIjP8ZbfGQhumkNvgC33AY7qtMCXnN6bL2u2Js4gVCg8fp735aEiMSBbDR7UQIj90n4wKAFUSEd0QN2Ukg==}
+
+  '@webassemblyjs/wasm-opt@1.14.1':
+    resolution: {integrity: sha512-PTcKLUNvBqnY2U6E5bdOQcSM+oVP/PmrDY9NzowJjislEjwP/C4an2303MCVS2Mg9d3AJpIGdUFIQQWbPds0Sw==}
+
+  '@webassemblyjs/wasm-parser@1.14.1':
+    resolution: {integrity: sha512-JLBl+KZ0R5qB7mCnud/yyX08jWFw5MsoalJ1pQ4EdFlgj9VdXKGuENGsiCIjegI1W7p91rUlcB/LB5yRJKNTcQ==}
+
+  '@webassemblyjs/wast-printer@1.14.1':
+    resolution: {integrity: sha512-kPSSXE6De1XOR820C90RIo2ogvZG+c3KiHzqUoO/F34Y2shGzesfqv7o57xrxovZJH/MetF5UjroJ/R/3isoiw==}
+
+  '@xtuc/ieee754@1.2.0':
+    resolution: {integrity: sha512-DX8nKgqcGwsc0eJSqYt5lwP4DH5FlHnmuWWBRy7X0NcaGR0ZtuyeESgMwTYVEtxmsNGY+qit4QYT/MIYTOTPeA==}
+
+  '@xtuc/long@4.2.2':
+    resolution: {integrity: sha512-NuHqBY1PB/D8xU6s/thBgOAiAP7HOYDQ32+BFZILJ8ivkUkAHQnWfn6WhL79Owj1qmUnoN/YPhktdIoucipkAQ==}
+
+  accepts@2.0.0:
+    resolution: {integrity: sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==}
+    engines: {node: '>= 0.6'}
+
+  acorn-import-phases@1.0.4:
+    resolution: {integrity: sha512-wKmbr/DDiIXzEOiWrTTUcDm24kQ2vGfZQvM2fwg2vXqR5uW6aapr7ObPtj1th32b9u90/Pf4AItvdTh42fBmVQ==}
+    engines: {node: '>=10.13.0'}
+    peerDependencies:
+      acorn: ^8.14.0
+
+  acorn-jsx@5.3.2:
+    resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==}
+    peerDependencies:
+      acorn: ^6.0.0 || ^7.0.0 || ^8.0.0
+
+  acorn@8.18.0:
+    resolution: {integrity: sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ==}
+    engines: {node: '>=0.4.0'}
+    hasBin: true
+
+  ajv-formats@2.1.1:
+    resolution: {integrity: sha512-Wx0Kx52hxE7C18hkMEggYlEifqWZtYaRgouJor+WMdPnQyEK13vgEWyVNup7SoeeoLMsr4kf5h6dOW11I15MUA==}
+    peerDependencies:
+      ajv: ^8.0.0
+    peerDependenciesMeta:
+      ajv:
+        optional: true
+
+  ajv-formats@3.0.1:
+    resolution: {integrity: sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==}
+    peerDependencies:
+      ajv: ^8.0.0
+    peerDependenciesMeta:
+      ajv:
+        optional: true
+
+  ajv-keywords@3.5.2:
+    resolution: {integrity: sha512-5p6WTN0DdTGVQk6VjcEju19IgaHudalcfabD7yhDGeA6bcQnmL+CpveLJq/3hvfwd1aof6L386Ougkx6RfyMIQ==}
+    peerDependencies:
+      ajv: ^6.9.1
+
+  ajv-keywords@5.1.0:
+    resolution: {integrity: sha512-YCS/JNFAUyr5vAuhk1DWm1CBxRHW9LbJ2ozWeemrIqpbsqKjHVxYPyi5GC0rjZIT5JxJ3virVTS8wk4i/Z+krw==}
+    peerDependencies:
+      ajv: ^8.8.2
+
+  ajv@6.15.0:
+    resolution: {integrity: sha512-fgFx7Hfoq60ytK2c7DhnF8jIvzYgOMxfugjLOSMHjLIPgenqa7S7oaagATUq99mV6IYvN2tRmC0wnTYX6iPbMw==}
+
+  ajv@8.18.0:
+    resolution: {integrity: sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==}
+
+  ajv@8.20.0:
+    resolution: {integrity: sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==}
+
+  ansi-align@3.0.1:
+    resolution: {integrity: sha512-IOfwwBF5iczOjp/WeY4YxyjqAFMQoZufdQWDd19SEExbVLNXqvpzSJ/M7Za4/sCPmQ0+GRquoA7bGcINcxew6w==}
+
+  ansi-colors@4.1.3:
+    resolution: {integrity: sha512-/6w/C21Pm1A7aZitlI5Ni/2J6FFQN8i1Cvz3kHABAAbw93v/NlvKdVOqz7CCWz/3iv/JplRSEEZ83XION15ovw==}
+    engines: {node: '>=6'}
+
+  ansi-escapes@4.3.2:
+    resolution: {integrity: sha512-gKXj5ALrKWQLsYG9jlTRmR/xKluxHV+Z9QEwNIgCfM1/uwPMCuzVVnh5mwTd+OuBZcwSIMbqssNWRm1lE51QaQ==}
+    engines: {node: '>=8'}
+
+  ansi-regex@5.0.1:
+    resolution: {integrity: sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==}
+    engines: {node: '>=8'}
+
+  ansi-regex@6.2.2:
+    resolution: {integrity: sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==}
+    engines: {node: '>=12'}
+
+  ansi-styles@4.3.0:
+    resolution: {integrity: sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==}
+    engines: {node: '>=8'}
+
+  ansi-styles@5.2.0:
+    resolution: {integrity: sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==}
+    engines: {node: '>=10'}
+
+  ansi-styles@6.2.3:
+    resolution: {integrity: sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==}
+    engines: {node: '>=12'}
+
+  ansis@4.2.0:
+    resolution: {integrity: sha512-HqZ5rWlFjGiV0tDm3UxxgNRqsOTniqoKZu0pIAfh7TZQMGuZK+hH0drySty0si0QXj1ieop4+SkSfPZBPPkHig==}
+    engines: {node: '>=14'}
+
+  anymatch@3.1.3:
+    resolution: {integrity: sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==}
+    engines: {node: '>= 8'}
+
+  append-field@1.0.0:
+    resolution: {integrity: sha512-klpgFSWLW1ZEs8svjfb7g4qWY0YS5imI82dTg+QahUvJ8YqAY0P10Uk8tTyh9ZGuYEZEMaeJYCF5BFuX552hsw==}
+
+  argparse@1.0.10:
+    resolution: {integrity: sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==}
+
+  argparse@2.0.1:
+    resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
+
+  aria-query@5.3.2:
+    resolution: {integrity: sha512-COROpnaoap1E2F000S62r6A60uHZnmlvomhfyT2DlTcrY1OrBKn2UhH7qn5wTC9zMvD0AY7csdPSNwKP+7WiQw==}
+    engines: {node: '>= 0.4'}
+
+  array-buffer-byte-length@1.0.2:
+    resolution: {integrity: sha512-LHE+8BuR7RYGDKvnrmcuSq3tDcKv9OFEXQt/HpbZhY7V6h0zlUXutnAD82GiFx9rdieCMjkvtcsPqBwgUl1Iiw==}
+    engines: {node: '>= 0.4'}
+
+  array-includes@3.1.9:
+    resolution: {integrity: sha512-FmeCCAenzH0KH381SPT5FZmiA/TmpndpcaShhfgEN9eCVjnFBqq3l1xrI42y8+PPLI6hypzou4GXw00WHmPBLQ==}
+    engines: {node: '>= 0.4'}
+
+  array-timsort@1.0.3:
+    resolution: {integrity: sha512-/+3GRL7dDAGEfM6TseQk/U+mi18TU2Ms9I3UlLdUMhz2hbvGNTKdj9xniwXfUqgYhHxRx0+8UnKkvlNwVU+cWQ==}
+
+  array.prototype.findlast@1.2.5:
+    resolution: {integrity: sha512-CVvd6FHg1Z3POpBLxO6E6zr+rSKEQ9L6rZHAaY7lLfhKsWYUBBOuMs0e9o24oopj6H+geRCX0YJ+TJLBK2eHyQ==}
+    engines: {node: '>= 0.4'}
+
+  array.prototype.flat@1.3.3:
+    resolution: {integrity: sha512-rwG/ja1neyLqCuGZ5YYrznA62D4mZXg0i1cIskIUKSiqF3Cje9/wXAls9B9s1Wa2fomMsIv8czB8jZcPmxCXFg==}
+    engines: {node: '>= 0.4'}
+
+  array.prototype.flatmap@1.3.3:
+    resolution: {integrity: sha512-Y7Wt51eKJSyi80hFrJCePGGNo5ktJCslFuboqJsbf57CCPcm5zztluPlc4/aD8sWsKvlwatezpV4U1efk8kpjg==}
+    engines: {node: '>= 0.4'}
+
+  array.prototype.tosorted@1.1.4:
+    resolution: {integrity: sha512-p6Fx8B7b7ZhL/gmUsAy0D15WhvDccw3mnGNbZpi3pmeJdxtWsj2jEaI4Y6oo3XiHfzuSgPwKc04MYt6KgvC/wA==}
+    engines: {node: '>= 0.4'}
+
+  arraybuffer.prototype.slice@1.0.4:
+    resolution: {integrity: sha512-BNoCY6SXXPQ7gF2opIP4GBE+Xw7U+pHMYKuzjgCN3GwiaIR09UUeKfheyIry77QtrCBlC0KK0q5/TER/tYh3PQ==}
+    engines: {node: '>= 0.4'}
+
+  asap@2.0.6:
+    resolution: {integrity: sha512-BSHWgDSAiKs50o2Re8ppvp3seVHXSRM44cdSsT9FfNEUUZLOGWVCsiWaRPWM1Znn+mqZ1OfVZ3z3DWEzSp7hRA==}
+
+  ast-types-flow@0.0.8:
+    resolution: {integrity: sha512-OH/2E5Fg20h2aPrbe+QL8JZQFko0YZaF+j4mnQ7BGhfavO7OpSLa8a0y9sBwomHdSbkhTS8TQNayBfnW5DwbvQ==}
+
+  async-function@1.0.0:
+    resolution: {integrity: sha512-hsU18Ae8CDTR6Kgu9DYf0EbCr/a5iGL0rytQDobUcdpYOKokk8LEjVphnXkDkgpi0wYVsqrXuP0bZxJaTqdgoA==}
+    engines: {node: '>= 0.4'}
+
+  asynckit@0.4.0:
+    resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==}
+
+  atomic-sleep@1.0.0:
+    resolution: {integrity: sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==}
+    engines: {node: '>=8.0.0'}
+
+  available-typed-arrays@1.0.7:
+    resolution: {integrity: sha512-wvUjBtSGN7+7SjNpq/9M2Tg350UZD3q62IFZLbRAR1bSMlCo1ZaeW+BJ+D090e4hIIZLBcTDWe4Mh4jvUDajzQ==}
+    engines: {node: '>= 0.4'}
+
+  axe-core@4.13.0:
+    resolution: {integrity: sha512-UzGt8zg7Ny8djbYMhxl2zuEevVa7r2gJjYY5Lwr1xM7+XU2nd6CkIWFTVcCIbAP63vSz71NaVyyuSk9lHKcy0A==}
+    engines: {node: '>=4'}
+
+  axobject-query@4.1.0:
+    resolution: {integrity: sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==}
+    engines: {node: '>= 0.4'}
+
+  babel-jest@30.4.1:
+    resolution: {integrity: sha512-fATAbM8piYxkiXQp3RBXmZHxZVNJZAVXXfyeyCN2Tida3+qJ8ea9UxhiJ2y4fLO90ZImKt6k9FlcH2+rLkJGhw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+    peerDependencies:
+      '@babel/core': ^7.11.0 || ^8.0.0-0
+
+  babel-plugin-istanbul@7.0.1:
+    resolution: {integrity: sha512-D8Z6Qm8jCvVXtIRkBnqNHX0zJ37rQcFJ9u8WOS6tkYOsRdHBzypCstaxWiu5ZIlqQtviRYbgnRLSoCEvjqcqbA==}
+    engines: {node: '>=12'}
+
+  babel-plugin-jest-hoist@30.4.0:
+    resolution: {integrity: sha512-9EdtWM/sSfXLOGLwSn+GS6pIXyBnL07/8gyJlwFXjWy4DxMOyItqyUT29d4lQiS380EZwYlX7/At4PgBS+m2aA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  babel-preset-current-node-syntax@1.2.0:
+    resolution: {integrity: sha512-E/VlAEzRrsLEb2+dv8yp3bo4scof3l9nR4lrld+Iy5NyVqgVYUJnDAmunkhPMisRI32Qc4iRiz425d8vM++2fg==}
+    peerDependencies:
+      '@babel/core': ^7.0.0 || ^8.0.0-0
+
+  babel-preset-jest@30.4.0:
+    resolution: {integrity: sha512-lBY4jxsNmCnSiu7kquw8ZC9F4+XLMOKypT3RnNHPvU2Kpd4W0xaPuLr5ZkRyOsvLYAY4yaW1ZwTW4xB7NIiZzg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+    peerDependencies:
+      '@babel/core': ^7.11.0 || ^8.0.0-beta.1
+
+  balanced-match@1.0.2:
+    resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
+
+  balanced-match@4.0.4:
+    resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
+    engines: {node: 18 || 20 || >=22}
+
+  base64-js@1.5.1:
+    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
+
+  baseline-browser-mapping@2.11.13:
+    resolution: {integrity: sha512-k9HNuUVMlqVjQ9UHzfPjIqiDbWw7WqT1AoT7GL8VwvF3r0ZfArtgiSPAlmupyNquNgOJHTuH4CKYf8ttMTWBTQ==}
+    engines: {node: '>=6.0.0'}
+    hasBin: true
+
+  bl@4.1.0:
+    resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
+
+  body-parser@2.3.0:
+    resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==}
+    engines: {node: '>=18'}
+
+  bowser@2.14.1:
+    resolution: {integrity: sha512-tzPjzCxygAKWFOJP011oxFHs57HzIhOEracIgAePE4pqB3LikALKnSzUyU4MGs9/iCEUuHlAJTjTc5M+u7YEGg==}
+
+  boxen@5.1.2:
+    resolution: {integrity: sha512-9gYgQKXx+1nP8mP7CzFyaUARhg7D3n1dF/FnErWmu9l6JvGpNUN278h0aSb+QjoiKSWG+iZ3uHrcqk0qrY9RQQ==}
+    engines: {node: '>=10'}
+
+  brace-expansion@1.1.18:
+    resolution: {integrity: sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==}
+
+  brace-expansion@2.1.4:
+    resolution: {integrity: sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==}
+
+  brace-expansion@5.0.9:
+    resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==}
+    engines: {node: 20 || >=22}
+
+  browserslist@4.28.8:
+    resolution: {integrity: sha512-V2NpofLblG64mfOtSgDhOJESZEGogzDMBv/q+W6oc4LXWP/q75eOXoOaaOu1EOadB9U4Bwx/e0yzbvwKH8zalA==}
+    engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
+    hasBin: true
+
+  bs-logger@0.2.6:
+    resolution: {integrity: sha512-pd8DCoxmbgc7hyPKOvxtqNcjYoOsABPQdcCUjGp3d42VR2CX1ORhk2A87oqqu5R1kk+76nsxZupkmyd+MVtCog==}
+    engines: {node: '>= 6'}
+
+  bser@2.1.1:
+    resolution: {integrity: sha512-gQxTNE/GAfIIrmHLUE3oJyp5FO6HRBfhjnw4/wMmA63ZGDJnWBmgY/lyQBpnDUkGmAhbSe39tx2d/iTOAfglwQ==}
+
+  buffer-equal-constant-time@1.0.1:
+    resolution: {integrity: sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==}
+
+  buffer-from@1.1.2:
+    resolution: {integrity: sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==}
+
+  buffer@5.7.1:
+    resolution: {integrity: sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==}
+
+  busboy@1.6.0:
+    resolution: {integrity: sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==}
+    engines: {node: '>=10.16.0'}
+
+  bytes@3.1.2:
+    resolution: {integrity: sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==}
+    engines: {node: '>= 0.8'}
+
+  c12@3.1.0:
+    resolution: {integrity: sha512-uWoS8OU1MEIsOv8p/5a82c3H31LsWVR5qiyXVfBNOzfffjUWtPnhAb4BYI2uG2HfGmZmFjCtui5XNWaps+iFuw==}
+    peerDependencies:
+      magicast: ^0.3.5
+    peerDependenciesMeta:
+      magicast:
+        optional: true
+
+  call-bind-apply-helpers@1.0.2:
+    resolution: {integrity: sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==}
+    engines: {node: '>= 0.4'}
+
+  call-bind@1.0.9:
+    resolution: {integrity: sha512-a/hy+pNsFUTR+Iz8TCJvXudKVLAnz/DyeSUo10I5yvFDQJBFU2s9uqQpoSrJlroHUKoKqzg+epxyP9lqFdzfBQ==}
+    engines: {node: '>= 0.4'}
+
+  call-bound@1.0.4:
+    resolution: {integrity: sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==}
+    engines: {node: '>= 0.4'}
+
+  callsites@3.1.0:
+    resolution: {integrity: sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==}
+    engines: {node: '>=6'}
+
+  camelcase@5.3.1:
+    resolution: {integrity: sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==}
+    engines: {node: '>=6'}
+
+  camelcase@6.3.0:
+    resolution: {integrity: sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==}
+    engines: {node: '>=10'}
+
+  caniuse-lite@1.0.30001809:
+    resolution: {integrity: sha512-xxWVywk6a6Arlk+hymeycyn/VgqEfLDxupvhH/xiY5SJ/18kmi9o6MiO320DCUzypORHLtvh0I4i04tUhCNHNQ==}
+
+  chalk@4.1.2:
+    resolution: {integrity: sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==}
+    engines: {node: '>=10'}
+
+  char-regex@1.0.2:
+    resolution: {integrity: sha512-kWWXztvZ5SBQV+eRgKFeh8q5sLuZY2+8WUIzlxWVTg+oGwY14qylx1KbKzHd8P6ZYkAg0xyIDU9JMHhyJMZ1jw==}
+    engines: {node: '>=10'}
+
+  chardet@2.2.0:
+    resolution: {integrity: sha512-rddelWYNPRrXq6PtNEN2S3f6t9ILzvqaN5pVgi4kqt9jHQaXIial9PznB5iSPVlQSLNaaH22ItWz3EJtQ10+OA==}
+
+  check-disk-space@3.4.0:
+    resolution: {integrity: sha512-drVkSqfwA+TvuEhFipiR1OC9boEGZL5RrWvVsOthdcvQNXyCCuKkEiTOTXZ7qxSf/GLwq4GvzfrQD/Wz325hgw==}
+    engines: {node: '>=16'}
+
+  chokidar@4.0.3:
+    resolution: {integrity: sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==}
+    engines: {node: '>= 14.16.0'}
+
+  chrome-trace-event@1.0.4:
+    resolution: {integrity: sha512-rNjApaLzuwaOTjCiT8lSDdGN1APCiqkChLMJxJPWLunPAt5fy8xgU9/jNOchV84wfIxrA0lRQB7oCT8jrn/wrQ==}
+    engines: {node: '>=6.0'}
+
+  ci-info@4.4.0:
+    resolution: {integrity: sha512-77PSwercCZU2Fc4sX94eF8k8Pxte6JAwL4/ICZLFjJLqegs7kCuAsqqj/70NQF6TvDpgFjkubQB2FW2ZZddvQg==}
+    engines: {node: '>=8'}
+
+  citty@0.1.6:
+    resolution: {integrity: sha512-tskPPKEs8D2KPafUypv2gxwJP8h/OaJmC82QQGGDQcHvXX43xF2VDACcJVmZ0EuSxkpO9Kc4MlrA3q0+FG58AQ==}
+
+  citty@0.2.2:
+    resolution: {integrity: sha512-+6vJA3L98yv+IdfKGZHBNiGW5KHn22e/JwID0Strsz8h4S/csAu/OuICwxrg44k5MRiZHWIo8XXuJgQTriRP4w==}
+
+  cjs-module-lexer@2.2.0:
+    resolution: {integrity: sha512-4bHTS2YuzUvtoLjdy+98ykbNB5jS0+07EvFNXerqZQJ89F7DI6ET7OQo/HJuW6K0aVsKA9hj9/RVb2kQVOrPDQ==}
+
+  class-variance-authority@0.7.1:
+    resolution: {integrity: sha512-Ka+9Trutv7G8M6WT6SeiRWz792K5qEqIGEGzXKhAE6xOWAY6pPH8U+9IY3oCMv6kqTmLsv7Xh/2w2RigkePMsg==}
+
+  cli-boxes@2.2.1:
+    resolution: {integrity: sha512-y4coMcylgSCdVinjiDBuR8PCC2bLjyGTwEmPb9NHR/QaNU6EUOXcTY/s6VjGMD6ENSEaeQYHCY0GNGS5jfMwPw==}
+    engines: {node: '>=6'}
+
+  cli-cursor@3.1.0:
+    resolution: {integrity: sha512-I/zHAwsKf9FqGoXM4WWRACob9+SNukZTd94DWF57E4toouRulbCxcUh6RKUEOQlYTHJnzkPMySvPNaaSLNfLZw==}
+    engines: {node: '>=8'}
+
+  cli-spinners@2.9.2:
+    resolution: {integrity: sha512-ywqV+5MmyL4E7ybXgKys4DugZbX0FC6LnwrhjuykIjnK9k8OQacQ7axGKnjDXWNhns0xot3bZI5h55H8yo9cJg==}
+    engines: {node: '>=6'}
+
+  cli-table3@0.6.5:
+    resolution: {integrity: sha512-+W/5efTR7y5HRD7gACw9yQjqMVvEMLBHmboM/kPWam+H+Hmyrgjh6YncVKK122YZkXrLudzTuAukUw9FnMf7IQ==}
+    engines: {node: 10.* || >= 12.*}
+
+  cli-width@4.1.0:
+    resolution: {integrity: sha512-ouuZd4/dm2Sw5Gmqy6bGyNNNe1qt9RpmxveLSO7KcgsTnU7RXfsw+/bukWGo1abgBiMAic068rclZsO4IWmmxQ==}
+    engines: {node: '>= 12'}
+
+  client-only@0.0.1:
+    resolution: {integrity: sha512-IV3Ou0jSMzZrd3pZ48nLkT9DA7Ag1pnPzaiQhpW7c3RbcqqzvzzVu+L8gfqMp/8IM2MQtSiqaCxrrcfu8I8rMA==}
+
+  cliui@8.0.1:
+    resolution: {integrity: sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==}
+    engines: {node: '>=12'}
+
+  clone@1.0.4:
+    resolution: {integrity: sha512-JQHZ2QMW6l3aH/j6xCqQThY/9OH4D/9ls34cgkUBiEeocRTU04tHfKPBsUK1PqZCUQM7GiA0IIXJSuXHI64Kbg==}
+    engines: {node: '>=0.8'}
+
+  clsx@2.1.1:
+    resolution: {integrity: sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==}
+    engines: {node: '>=6'}
+
+  cluster-key-slot@1.1.1:
+    resolution: {integrity: sha512-rwHwUfXL40Chm1r08yrhU3qpUvdVlgkKNeyeGPOxnW8/SyVDvgRaed/Uz54AqWNaTCAThlj6QAs3TZcKI0xDEw==}
+    engines: {node: '>=0.10.0'}
+
+  co@4.6.0:
+    resolution: {integrity: sha512-QVb0dM5HvG+uaxitm8wONl7jltx8dqhfU33DcqtOZcLSVIKSDDLDi7+0LbAKiyI8hD9u42m2YxXSkMGWThaecQ==}
+    engines: {iojs: '>= 1.0.0', node: '>= 0.12.0'}
+
+  collect-v8-coverage@1.0.3:
+    resolution: {integrity: sha512-1L5aqIkwPfiodaMgQunkF1zRhNqifHBmtbbbxcr6yVxxBnliw4TDOW6NxpO8DJLgJ16OT+Y4ztZqP6p/FtXnAw==}
+
+  color-convert@2.0.1:
+    resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==}
+    engines: {node: '>=7.0.0'}
+
+  color-name@1.1.4:
+    resolution: {integrity: sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==}
+
+  colorette@2.0.20:
+    resolution: {integrity: sha512-IfEDxwoWIjkeXL1eXcDiow4UbKjhLdq6/EuSVR9GMN7KVH3r9gQ83e73hsz1Nd1T3ijd5xv1wcWRYO+D6kCI2w==}
+
+  combined-stream@1.0.8:
+    resolution: {integrity: sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==}
+    engines: {node: '>= 0.8'}
+
+  commander@2.20.3:
+    resolution: {integrity: sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==}
+
+  commander@4.1.1:
+    resolution: {integrity: sha512-NOKm8xhkzAjzFx8B2v5OAHT+u5pRQc2UCa2Vq9jYL/31o2wi9mxBA7LIFs3sV5VSC49z6pEhfbMULvShKj26WA==}
+    engines: {node: '>= 6'}
+
+  comment-json@5.0.0:
+    resolution: {integrity: sha512-uiqLcOiVDJtBP8WGkZHEP+FZIhTzP1dxvn59EfoYUi9gqupjrBWVQkO2atDrbnKPwLeotFYDsuNb26uBMqB+hw==}
+    engines: {node: '>= 6'}
+
+  comment-parser@1.4.8:
+    resolution: {integrity: sha512-rKZTGo4fzKYna8UcL0isTg5wkBNla7bxTypLwZQXjIdi++IdP1OJ41rI5Mti3/jltkPujbu4i9LIARYA+zpotQ==}
+    engines: {node: '>= 12.0.0'}
+
+  component-emitter@1.3.1:
+    resolution: {integrity: sha512-T0+barUSQRTUQASh8bx02dl+DhF54GtIDY13Y3m9oWTklKbb3Wv974meRpeZ3lp1JpLVECWWNHC4vaG2XHXouQ==}
+
+  compressible@2.0.18:
+    resolution: {integrity: sha512-AF3r7P5dWxL8MxyITRMlORQNaOA2IkAFaTr4k7BUumjPtRpGDTZpl0Pb1XCO6JeDCBdp126Cgs9sMxqSjgYyRg==}
+    engines: {node: '>= 0.6'}
+
+  compression@1.8.1:
+    resolution: {integrity: sha512-9mAqGPHLakhCLeNyxPkK4xVo746zQ/czLH1Ky+vkitMnWfWZps8r0qXuwhwizagCRttsL4lfG4pIOvaWLpAP0w==}
+    engines: {node: '>= 0.8.0'}
+
+  concat-map@0.0.1:
+    resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
+
+  concat-stream@2.0.0:
+    resolution: {integrity: sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==}
+    engines: {'0': node >= 6.0}
+
+  confbox@0.2.4:
+    resolution: {integrity: sha512-ysOGlgTFbN2/Y6Cg3Iye8YKulHw+R2fNXHrgSmXISQdMnomY6eNDprVdW9R5xBguEqI954+S6709UyiO7B+6OQ==}
+
+  consola@3.4.2:
+    resolution: {integrity: sha512-5IKcdX0nnYavi6G7TtOhwkYzyjfJlatbjMjuLSfE2kYT5pMDOilZ4OvMhi637CcDICTmz3wARPoyhqyX1Y+XvA==}
+    engines: {node: ^14.18.0 || >=16.10.0}
+
+  content-disposition@1.1.0:
+    resolution: {integrity: sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==}
+    engines: {node: '>=18'}
+
+  content-type@1.0.5:
+    resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==}
+    engines: {node: '>= 0.6'}
+
+  content-type@2.0.0:
+    resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==}
+    engines: {node: '>=18'}
+
+  convert-source-map@2.0.0:
+    resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
+
+  cookie-signature@1.2.2:
+    resolution: {integrity: sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg==}
+    engines: {node: '>=6.6.0'}
+
+  cookie@0.7.2:
+    resolution: {integrity: sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==}
+    engines: {node: '>= 0.6'}
+
+  cookiejar@2.1.4:
+    resolution: {integrity: sha512-LDx6oHrK+PhzLKJU9j5S7/Y3jM/mUHvD/DeI1WQmJn652iPC5Y4TBzC9l+5OMOXlyTTA+SmVUPm0HQUwpD5Jqw==}
+
+  cors@2.8.6:
+    resolution: {integrity: sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==}
+    engines: {node: '>= 0.10'}
+
+  cosmiconfig@8.3.6:
+    resolution: {integrity: sha512-kcZ6+W5QzcJ3P1Mt+83OUv/oHFqZHIx8DuxG6eZ5RGMERoLqp4BuGjhHLYGK+Kf5XVkQvqBSmAy/nGWN3qDgEA==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      typescript: '>=4.9.5'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
+  cross-spawn@7.0.6:
+    resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
+    engines: {node: '>= 8'}
+
+  csstype@3.2.3:
+    resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
+
+  damerau-levenshtein@1.0.8:
+    resolution: {integrity: sha512-sdQSFB7+llfUcQHUQO3+B8ERRj0Oa4w9POWMI/puGtuf7gFywGmkaLCElnudfTiKZV+NvHqL0ifzdrI8Ro7ESA==}
+
+  data-view-buffer@1.0.2:
+    resolution: {integrity: sha512-EmKO5V3OLXh1rtK2wgXRansaK1/mtVdTUEiEI0W8RkvgT05kfxaH29PliLnpLP73yYO6142Q72QNa8Wx/A5CqQ==}
+    engines: {node: '>= 0.4'}
+
+  data-view-byte-length@1.0.2:
+    resolution: {integrity: sha512-tuhGbE6CfTM9+5ANGf+oQb72Ky/0+s3xKUpHvShfiz2RxMFgFPjsXuRLBVMtvMs15awe45SRb83D6wH4ew6wlQ==}
+    engines: {node: '>= 0.4'}
+
+  data-view-byte-offset@1.0.1:
+    resolution: {integrity: sha512-BS8PfmtDGnrgYdOonGZQdLZslWIeCGFP9tpan0hi1Co2Zr2NKADsvGYA8XxuG/4UWgJ6Cjtv+YJnB6MM69QGlQ==}
+    engines: {node: '>= 0.4'}
+
+  dateformat@4.6.3:
+    resolution: {integrity: sha512-2P0p0pFGzHS5EMnhdxQi7aJN+iMheud0UhG4dlE1DLAlvL8JHjJJTX/CSm4JXwV0Ka5nGk3zC5mcb5bUQUxxMA==}
+
+  debug@2.6.9:
+    resolution: {integrity: sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==}
+    peerDependencies:
+      supports-color: '*'
+    peerDependenciesMeta:
+      supports-color:
+        optional: true
+
+  debug@4.4.3:
+    resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
+    engines: {node: '>=6.0'}
+    peerDependencies:
+      supports-color: '*'
+    peerDependenciesMeta:
+      supports-color:
+        optional: true
+
+  dedent@1.7.2:
+    resolution: {integrity: sha512-WzMx3mW98SN+zn3hgemf4OzdmyNhhhKz5Ay0pUfQiMQ3e1g+xmTJWp/pKdwKVXhdSkAEGIIzqeuWrL3mV/AXbA==}
+    peerDependencies:
+      babel-plugin-macros: ^3.1.0
+    peerDependenciesMeta:
+      babel-plugin-macros:
+        optional: true
+
+  deep-is@0.1.4:
+    resolution: {integrity: sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ==}
+
+  deepmerge-ts@7.1.5:
+    resolution: {integrity: sha512-HOJkrhaYsweh+W+e74Yn7YStZOilkoPb6fycpwNLKzSPtruFs48nYis0zy5yJz1+ktUhHxoRDJ27RQAWLIJVJw==}
+    engines: {node: '>=16.0.0'}
+
+  deepmerge@4.3.1:
+    resolution: {integrity: sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==}
+    engines: {node: '>=0.10.0'}
+
+  defaults@1.0.4:
+    resolution: {integrity: sha512-eFuaLoy/Rxalv2kr+lqMlUnrDWV+3j4pljOIJgLIhI058IQfWJ7vXhyEIHu+HtC738klGALYxOKDO0bQP3tg8A==}
+
+  define-data-property@1.1.4:
+    resolution: {integrity: sha512-rBMvIzlpA8v6E+SJZoo++HAYqsLrkg7MSfIinMPFhmkorw7X+dOXVJQs+QT69zGkzMyfDnIMN2Wid1+NbL3T+A==}
+    engines: {node: '>= 0.4'}
+
+  define-properties@1.2.1:
+    resolution: {integrity: sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==}
+    engines: {node: '>= 0.4'}
+
+  defu@6.1.7:
+    resolution: {integrity: sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ==}
+
+  delayed-stream@1.0.0:
+    resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==}
+    engines: {node: '>=0.4.0'}
+
+  denque@2.1.0:
+    resolution: {integrity: sha512-HVQE3AAb/pxF8fQAoiqpvg9i3evqug3hoiwakOyZAwJm+6vZehbkYXZ0l4JxS+I3QxM97v5aaRNhj8v5oBhekw==}
+    engines: {node: '>=0.10'}
+
+  depd@2.0.0:
+    resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
+    engines: {node: '>= 0.8'}
+
+  destr@2.0.5:
+    resolution: {integrity: sha512-ugFTXCtDZunbzasqBxrK93Ik/DRYsO6S/fedkWEMKqt04xZ4csmnmwGDBAb07QWNaGMAmnTIemsYZCksjATwsA==}
+
+  detect-libc@2.1.2:
+    resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
+    engines: {node: '>=8'}
+
+  detect-newline@3.1.0:
+    resolution: {integrity: sha512-TLz+x/vEXm/Y7P7wn1EJFNLxYpUD4TgMosxY6fAVJUnJMbupHBOncxyWUG9OpTaH9EBD7uFI5LfEgmMOc54DsA==}
+    engines: {node: '>=8'}
+
+  dezalgo@1.0.4:
+    resolution: {integrity: sha512-rXSP0bf+5n0Qonsb+SVVfNfIsimO4HEtmnIpPHY8Q1UCzKlQrDMfdobr8nJOOsRgWCyMRqeSBQzmWUMq7zvVig==}
+
+  doctrine@2.1.0:
+    resolution: {integrity: sha512-35mSku4ZXK0vfCuHEDAwt55dg2jNajHZ1odvF+8SSr82EsZY4QmXfuWso8oEd8zRhVObSN18aM0CjSdoBX7zIw==}
+    engines: {node: '>=0.10.0'}
+
+  dotenv-expand@12.0.3:
+    resolution: {integrity: sha512-uc47g4b+4k/M/SeaW1y4OApx+mtLWl92l5LMPP0GNXctZqELk+YGgOPIIC5elYmUH4OuoK3JLhuRUYegeySiFA==}
+    engines: {node: '>=12'}
+
+  dotenv@16.0.3:
+    resolution: {integrity: sha512-7GO6HghkA5fYG9TYnNxi14/7K9f5occMlp3zXAuSxn7CKCxt9xbNWG7yF8hTCSUchlfWSe3uLmlPfigevRItzQ==}
+    engines: {node: '>=12'}
+
+  dotenv@16.6.1:
+    resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
+    engines: {node: '>=12'}
+
+  dotenv@17.4.1:
+    resolution: {integrity: sha512-k8DaKGP6r1G30Lx8V4+pCsLzKr8vLmV2paqEj1Y55GdAgJuIqpRp5FfajGF8KtwMxCz9qJc6wUIJnm053d/WCw==}
+    engines: {node: '>=12'}
+
+  dunder-proto@1.0.1:
+    resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
+    engines: {node: '>= 0.4'}
+
+  eastasianwidth@0.2.0:
+    resolution: {integrity: sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==}
+
+  ecdsa-sig-formatter@1.0.11:
+    resolution: {integrity: sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==}
+
+  ee-first@1.1.1:
+    resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
+
+  effect@3.21.0:
+    resolution: {integrity: sha512-PPN80qRokCd1f015IANNhrwOnLO7GrrMQfk4/lnZRE/8j7UPWrNNjPV0uBrZutI/nHzernbW+J0hdqQysHiSnQ==}
+
+  electron-to-chromium@1.5.404:
+    resolution: {integrity: sha512-3WJtd7/lVq2Jnuz6wed1l9+1ZD2u2Tet1/1NBc4Iedkmgbu+I7YuAqdAQ8T+VZtnwysMsAf3IqSq9D1gyZjA2g==}
+
+  emittery@0.13.1:
+    resolution: {integrity: sha512-DeWwawk6r5yR9jFgnDKYt4sLS0LmHJJi3ZOnb5/JdbYwj3nW+FxQnHIjhBKz8YLC7oRNPVM9NQ47I3CVx34eqQ==}
+    engines: {node: '>=12'}
+
+  emoji-regex@8.0.0:
+    resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
+
+  emoji-regex@9.2.2:
+    resolution: {integrity: sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==}
+
+  empathic@2.0.0:
+    resolution: {integrity: sha512-i6UzDscO/XfAcNYD75CfICkmfLedpyPDdozrLMmQc5ORaQcdMoc21OnlEylMIqI7U8eniKrPMxxtj8k0vhmJhA==}
+    engines: {node: '>=14'}
+
+  encodeurl@2.0.0:
+    resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
+    engines: {node: '>= 0.8'}
+
+  end-of-stream@1.4.5:
+    resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
+
+  enhanced-resolve@5.24.5:
+    resolution: {integrity: sha512-L1l8TNvomm6UVW5B253AGxQagSQr+vGwhMlrrfRS2qmhx46AMpMVJKQYLvWYbysTMY8VoicOvzHzoHMbyzB+4A==}
+    engines: {node: '>=10.13.0'}
+
+  error-ex@1.3.4:
+    resolution: {integrity: sha512-sqQamAnR14VgCr1A618A3sGrygcpK+HEbenA/HiEAkkUwcZIIB/tgWqHFxWgOyDh4nB4JCRimh79dR5Ywc9MDQ==}
+
+  es-abstract-get@1.0.0:
+    resolution: {integrity: sha512-6PMWXpdhshVvFp+FoWYs1EvG1Nj0tvk0dZM+XcK0xMEM1czRVcP6ohqPWHy6qPagSpC8j4+p89WXlT+xXJs/fg==}
+    engines: {node: '>= 0.4'}
+
+  es-abstract@1.24.2:
+    resolution: {integrity: sha512-2FpH9Q5i2RRwyEP1AylXe6nYLR5OhaJTZwmlcP0dL/+JCbgg7yyEo/sEK6HeGZRf3dFpWwThaRHVApXSkW3xeg==}
+    engines: {node: '>= 0.4'}
+
+  es-define-property@1.0.1:
+    resolution: {integrity: sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==}
+    engines: {node: '>= 0.4'}
+
+  es-errors@1.3.0:
+    resolution: {integrity: sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==}
+    engines: {node: '>= 0.4'}
+
+  es-iterator-helpers@1.4.0:
+    resolution: {integrity: sha512-c/A0P0oxkACDc+cKWw8evLXK83oBKgn0qPOqCYT4x9uolpCIJAcYvJC9QYKNDRPsTeGyCrQ326jrvgZWdCdK5Q==}
+    engines: {node: '>= 0.4'}
+
+  es-module-lexer@2.3.1:
+    resolution: {integrity: sha512-shc1dbU90Yl/xq1QrC7QRtfcwURZuVRfPhZbDoldJ1cn1gzDvBaBWlv0eFolj5+0znnPJz5TXLxsN77X/12KTA==}
+
+  es-object-atoms@1.1.2:
+    resolution: {integrity: sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==}
+    engines: {node: '>= 0.4'}
+
+  es-set-tostringtag@2.1.0:
+    resolution: {integrity: sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==}
+    engines: {node: '>= 0.4'}
+
+  es-shim-unscopables@1.1.0:
+    resolution: {integrity: sha512-d9T8ucsEhh8Bi1woXCf+TIKDIROLG5WCkxg8geBCbvk22kzwC5G2OnXVMO6FUsvQlgUUXQ2itephWDLqDzbeCw==}
+    engines: {node: '>= 0.4'}
+
+  es-to-primitive@1.3.4:
+    resolution: {integrity: sha512-yPDz7wqpg1/mmHLmS3tcfTfbw5f1eryXvyghYBffGdERwe+mV7ZcWzTR8LR17Kvqt3qfPurjlonmnq3MKXIOXw==}
+    engines: {node: '>= 0.4'}
+
+  esbuild@0.28.2:
+    resolution: {integrity: sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  escalade@3.2.0:
+    resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
+    engines: {node: '>=6'}
+
+  escape-html@1.0.3:
+    resolution: {integrity: sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==}
+
+  escape-string-regexp@2.0.0:
+    resolution: {integrity: sha512-UpzcLCXolUWcNu5HtVMHYdXJjArjsF9C0aNnquZYY4uW/Vu0miy5YoWvbV345HauVvcAUnpRuhMMcqTcGOY2+w==}
+    engines: {node: '>=8'}
+
+  escape-string-regexp@4.0.0:
+    resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==}
+    engines: {node: '>=10'}
+
+  eslint-config-prettier@10.1.8:
+    resolution: {integrity: sha512-82GZUjRS0p/jganf6q1rEO25VSoHH0hKPCTrgillPjdI/3bgBhAE1QzHrHTizjpRvy6pGAvKjDJtk2pF9NDq8w==}
+    hasBin: true
+    peerDependencies:
+      eslint: '>=7.0.0'
+
+  eslint-import-context@0.1.9:
+    resolution: {integrity: sha512-K9Hb+yRaGAGUbwjhFNHvSmmkZs9+zbuoe3kFQ4V1wYjrepUFYM2dZAfNtjbbj3qsPfUfsA68Bx/ICWQMi+C8Eg==}
+    engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
+    peerDependencies:
+      unrs-resolver: ^1.0.0
+    peerDependenciesMeta:
+      unrs-resolver:
+        optional: true
+
+  eslint-import-resolver-typescript@4.4.5:
+    resolution: {integrity: sha512-nbE5XLph6TLtGYcu/U6e6ZVXyKBhbDWK5cLGk76eJ7NdZpwf1P9EFkpt1Z01mNZNrrilsAYWKH6zUkL4reoXbw==}
+    engines: {node: ^16.17.0 || >=18.6.0}
+    peerDependencies:
+      eslint: '*'
+      eslint-plugin-import: '*'
+      eslint-plugin-import-x: '*'
+    peerDependenciesMeta:
+      eslint-plugin-import:
+        optional: true
+      eslint-plugin-import-x:
+        optional: true
+
+  eslint-plugin-import-x@4.17.1:
+    resolution: {integrity: sha512-4cdstYkKCyjumM2Q9NSI03K8D2a9F4Ssz33K2lv2hQa4KmR9jPLwk3uWGtNvclfqBrPGfGuMBwsGMbe6dMRbfg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      '@typescript-eslint/utils': ^8.56.0
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      eslint-import-resolver-node: '*'
+    peerDependenciesMeta:
+      '@typescript-eslint/utils':
+        optional: true
+      eslint-import-resolver-node:
+        optional: true
+
+  eslint-plugin-jsx-a11y@6.10.2:
+    resolution: {integrity: sha512-scB3nz4WmG75pV8+3eRUQOHZlNSUhFNq37xnpgRkCCELU3XMvXAxLk1eqWWyE22Ki4Q01Fnsw9BA3cJHDPgn2Q==}
+    engines: {node: '>=4.0'}
+    peerDependencies:
+      eslint: ^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9
+
+  eslint-plugin-react-hooks@7.1.1:
+    resolution: {integrity: sha512-f2I7Gw6JbvCexzIInuSbZpfdQ44D7iqdWX01FKLvrPgqxoE7oMj8clOfto8U6vYiz4yd5oKu39rRSVOe1zRu0g==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      eslint: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0 || ^9.0.0 || ^10.0.0
+
+  eslint-plugin-react@7.37.5:
+    resolution: {integrity: sha512-Qteup0SqU15kdocexFNAJMvCJEfa2xUKNV4CC1xsVMrIIqEy3SQ/rqyxCWNzfrd3/ldy6HMlD2e0JDVpDg2qIA==}
+    engines: {node: '>=4'}
+    peerDependencies:
+      eslint: ^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9.7
+
+  eslint-plugin-turbo@2.10.9:
+    resolution: {integrity: sha512-OOo50d6UEXN1qK61PPi7O7+Rx117zjumYqatKqReUNCYbi5OBnAtPudnDTuKhpgEbutG3wF0ApqeWjRKj95vxA==}
+    peerDependencies:
+      eslint: '>6.6.0'
+      turbo: '>2.0.0'
+
+  eslint-scope@5.1.1:
+    resolution: {integrity: sha512-2NxwbF/hZ0KpepYN0cNbo+FN6XoK7GaHlQhgx/hIZl6Va0bF45RQOOwhLIy8lQDbuCiadSLCBnH2CFYquit5bw==}
+    engines: {node: '>=8.0.0'}
+
+  eslint-scope@8.4.0:
+    resolution: {integrity: sha512-sNXOfKCn74rt8RICKMvJS7XKV/Xk9kA7DyJr8mJik3S7Cwgy3qlkkmyS2uQB3jiJg6VNdZd/pDBJu0nvG2NlTg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  eslint-visitor-keys@3.4.3:
+    resolution: {integrity: sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+
+  eslint-visitor-keys@4.2.1:
+    resolution: {integrity: sha512-Uhdk5sfqcee/9H/rCOJikYz67o0a2Tw2hGRPOG2Y1R2dg7brRe1uG0yaNQDHu+TO/uQPF/5eCapvYSmHUjt7JQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  eslint-visitor-keys@5.0.1:
+    resolution: {integrity: sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA==}
+    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
+
+  eslint@9.39.5:
+    resolution: {integrity: sha512-DgZS62aPLXKlnxILS/AYCoRvHaZeXceIzlXPkkGGzJWSow1aEk0lbTlxUSlyjC8jcaKxAdOnTDz+o1JFSBsyjw==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    hasBin: true
+    peerDependencies:
+      jiti: '*'
+    peerDependenciesMeta:
+      jiti:
+        optional: true
+
+  espree@10.4.0:
+    resolution: {integrity: sha512-j6PAQ2uUr79PZhBjP5C5fhl8e39FmRnOjsD5lGnWrFU8i2G776tBK7+nP8KuQUTTyAZUwfQqXAgrVH5MbH9CYQ==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+
+  esprima@4.0.1:
+    resolution: {integrity: sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==}
+    engines: {node: '>=4'}
+    hasBin: true
+
+  esquery@1.7.0:
+    resolution: {integrity: sha512-Ap6G0WQwcU/LHsvLwON1fAQX9Zp0A2Y6Y/cJBl9r/JbW90Zyg4/zbG6zzKa2OTALELarYHmKu0GhpM5EO+7T0g==}
+    engines: {node: '>=0.10'}
+
+  esrecurse@4.3.0:
+    resolution: {integrity: sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag==}
+    engines: {node: '>=4.0'}
+
+  estraverse@4.3.0:
+    resolution: {integrity: sha512-39nnKffWz8xN1BU/2c79n9nB9HDzo0niYUqx6xyqUnyoAnQyyWpOTdZEeiCch8BBu515t4wp9ZmgVfVhn9EBpw==}
+    engines: {node: '>=4.0'}
+
+  estraverse@5.3.0:
+    resolution: {integrity: sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==}
+    engines: {node: '>=4.0'}
+
+  esutils@2.0.3:
+    resolution: {integrity: sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==}
+    engines: {node: '>=0.10.0'}
+
+  etag@1.8.1:
+    resolution: {integrity: sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==}
+    engines: {node: '>= 0.6'}
+
+  events@3.3.0:
+    resolution: {integrity: sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==}
+    engines: {node: '>=0.8.x'}
+
+  execa@5.1.1:
+    resolution: {integrity: sha512-8uSpZZocAZRBAPIEINJj3Lo9HyGitllczc27Eh5YYojjMFMn8yHMDMaUHE2Jqfq05D/wucwI4JGURyXt1vchyg==}
+    engines: {node: '>=10'}
+
+  exit-x@0.2.2:
+    resolution: {integrity: sha512-+I6B/IkJc1o/2tiURyz/ivu/O0nKNEArIUB5O7zBrlDVJr22SCLH3xTeEry428LvFhRzIA1g8izguxJ/gbNcVQ==}
+    engines: {node: '>= 0.8.0'}
+
+  expect@30.4.1:
+    resolution: {integrity: sha512-PMARsyh/JtqC20HoGqlFcIlQAyqUtW4PlI1rup1uhYJtKuwAjbvWi3GQMAn+STdHum/dk8xrKfUM1+5SAwpolA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  express@5.2.1:
+    resolution: {integrity: sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==}
+    engines: {node: '>= 18'}
+
+  exsolve@1.1.1:
+    resolution: {integrity: sha512-9U/jZUgjnSGyntRr6y5Muu1MJcwFl6kPu7k8qLF0IMNfLqvw0NZ4nnVDq0RVoZ0RvCyumib4Ez3KYrVfilrw+g==}
+
+  fast-check@3.23.2:
+    resolution: {integrity: sha512-h5+1OzzfCC3Ef7VbtKdcv7zsstUQwUDlYpUTvjeUsJAssPgLn7QzbboPtL5ro04Mq0rPOsMzl7q5hIbRs2wD1A==}
+    engines: {node: '>=8.0.0'}
+
+  fast-copy@4.0.4:
+    resolution: {integrity: sha512-eVAiWVNPSEGIzDl5yPuLrx8fNMogScXvD9xp1Kzd41FjRIz2I3sSIcxsFeM5EzFfHAfobdvs8ZySffUopljvIA==}
+
+  fast-deep-equal@3.1.3:
+    resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==}
+
+  fast-json-stable-stringify@2.1.0:
+    resolution: {integrity: sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==}
+
+  fast-levenshtein@2.0.6:
+    resolution: {integrity: sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==}
+
+  fast-safe-stringify@2.1.1:
+    resolution: {integrity: sha512-W+KJc2dmILlPplD/H4K9l9LcAHAfPtP6BY84uVLXQ6Evcz9Lcg33Y2z1IVblT6xdY54PXYVHEv+0Wpq8Io6zkA==}
+
+  fast-uri@3.1.5:
+    resolution: {integrity: sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==}
+
+  fb-watchman@2.0.2:
+    resolution: {integrity: sha512-p5161BqbuCaSnB8jIbzQHOlpgsPmK5rJVDfDKO91Axs5NC1uu3HRQm6wt9cd9/+GtQQIO53JdGXXoyDpTAsgYA==}
+
+  fdir@6.5.0:
+    resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
+    engines: {node: '>=12.0.0'}
+    peerDependencies:
+      picomatch: ^3 || ^4
+    peerDependenciesMeta:
+      picomatch:
+        optional: true
+
+  file-entry-cache@8.0.0:
+    resolution: {integrity: sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==}
+    engines: {node: '>=16.0.0'}
+
+  file-type@21.3.4:
+    resolution: {integrity: sha512-Ievi/yy8DS3ygGvT47PjSfdFoX+2isQueoYP1cntFW1JLYAuS4GD7NUPGg4zv2iZfV52uDyk5w5Z0TdpRS6Q1g==}
+    engines: {node: '>=20'}
+
+  finalhandler@2.1.1:
+    resolution: {integrity: sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA==}
+    engines: {node: '>= 18.0.0'}
+
+  find-up@4.1.0:
+    resolution: {integrity: sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==}
+    engines: {node: '>=8'}
+
+  find-up@5.0.0:
+    resolution: {integrity: sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==}
+    engines: {node: '>=10'}
+
+  flat-cache@4.0.1:
+    resolution: {integrity: sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==}
+    engines: {node: '>=16'}
+
+  flatted@3.4.4:
+    resolution: {integrity: sha512-5+ybhBZANEJxaH3X5evAFatUxLfEHSr7n6kYJ+1Qd0mUqr4eu9gIf6GDbWHf8RJijHrjjO8G+la14SlL2SeS1Q==}
+
+  for-each@0.3.5:
+    resolution: {integrity: sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==}
+    engines: {node: '>= 0.4'}
+
+  foreground-child@3.3.1:
+    resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
+    engines: {node: '>=14'}
+
+  fork-ts-checker-webpack-plugin@9.1.0:
+    resolution: {integrity: sha512-mpafl89VFPJmhnJ1ssH+8wmM2b50n+Rew5x42NeI2U78aRWgtkEtGmctp7iT16UjquJTjorEmIfESj3DxdW84Q==}
+    engines: {node: '>=14.21.3'}
+    peerDependencies:
+      typescript: '>3.6.0'
+      webpack: ^5.11.0
+
+  form-data@4.0.6:
+    resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
+    engines: {node: '>= 6'}
+
+  formidable@3.5.4:
+    resolution: {integrity: sha512-YikH+7CUTOtP44ZTnUhR7Ic2UASBPOqmaRkRKxRbywPTe5VxF7RRCck4af9wutiZ/QKM5nME9Bie2fFaPz5Gug==}
+    engines: {node: '>=14.0.0'}
+
+  forwarded@0.2.0:
+    resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
+    engines: {node: '>= 0.6'}
+
+  fresh@2.0.0:
+    resolution: {integrity: sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A==}
+    engines: {node: '>= 0.8'}
+
+  fs-extra@10.1.0:
+    resolution: {integrity: sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==}
+    engines: {node: '>=12'}
+
+  fs-monkey@1.1.0:
+    resolution: {integrity: sha512-QMUezzXWII9EV5aTFXW1UBVUO77wYPpjqIF8/AviUCThNeSYZykpoTixUeaNNBwmCev0AMDWMAni+f8Hxb1IFw==}
+
+  fs.realpath@1.0.0:
+    resolution: {integrity: sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==}
+
+  fsevents@2.3.3:
+    resolution: {integrity: sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==}
+    engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
+    os: [darwin]
+
+  function-bind@1.1.2:
+    resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
+
+  function.prototype.name@1.2.0:
+    resolution: {integrity: sha512-jObKIik1P2QjPHP5nz5BaOtUlfgS0fWo8IUByNXkM+o+02sJOi94em77GwJKQSJ3gfPHdgzLNrHc1uokV4P/ew==}
+    engines: {node: '>= 0.4'}
+
+  functions-have-names@1.2.3:
+    resolution: {integrity: sha512-xckBUXyTIqT97tq2x2AMb+g163b5JFysYk0x4qxNFwbfQkmNZoiRHb6sPzI9/QV33WeuvVYBUIiD4NzNIyqaRQ==}
+
+  generator-function@2.0.1:
+    resolution: {integrity: sha512-SFdFmIJi+ybC0vjlHN0ZGVGHc3lgE0DxPAT0djjVg+kjOnSqclqmj0KQ7ykTOLP6YxoqOvuAODGdcHJn+43q3g==}
+    engines: {node: '>= 0.4'}
+
+  gensync@1.0.0-beta.2:
+    resolution: {integrity: sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==}
+    engines: {node: '>=6.9.0'}
+
+  get-caller-file@2.0.5:
+    resolution: {integrity: sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==}
+    engines: {node: 6.* || 8.* || >= 10.*}
+
+  get-intrinsic@1.3.0:
+    resolution: {integrity: sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==}
+    engines: {node: '>= 0.4'}
+
+  get-package-type@0.1.0:
+    resolution: {integrity: sha512-pjzuKtY64GYfWizNAJ0fr9VqttZkNiK2iS430LtIHzjBEr6bX8Am2zm4sW4Ro5wjWW5cAlRL1qAMTcXbjNAO2Q==}
+    engines: {node: '>=8.0.0'}
+
+  get-proto@1.0.1:
+    resolution: {integrity: sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==}
+    engines: {node: '>= 0.4'}
+
+  get-stream@6.0.1:
+    resolution: {integrity: sha512-ts6Wi+2j3jQjqi70w5AlN8DFnkSwC+MqmxEzdEALB2qXZYV3X/b1CTfgPLGJNMeAWxdPfU8FO1ms3NUfaHCPYg==}
+    engines: {node: '>=10'}
+
+  get-symbol-description@1.1.0:
+    resolution: {integrity: sha512-w9UMqWwJxHNOvoNzSJ2oPF5wvYcvP7jUvYzhp67yEhTi17ZDBBC1z9pTdGuzjD+EFIqLSYRweZjqfiPzQ06Ebg==}
+    engines: {node: '>= 0.4'}
+
+  get-tsconfig@4.14.1:
+    resolution: {integrity: sha512-Dz/6HxkrxgNehhxLVeyv8sad9UzF2xBVeaKBQNDfJ5XiSXmp2gTR0eO0RWiT2NCKS5aGP9jjkOMggTN90qU50A==}
+
+  giget@2.0.0:
+    resolution: {integrity: sha512-L5bGsVkxJbJgdnwyuheIunkGatUF/zssUoxxjACCseZYAVbaqdh9Tsmmlkl8vYan09H7sbvKt4pS8GqKLBrEzA==}
+    hasBin: true
+
+  glob-parent@6.0.2:
+    resolution: {integrity: sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==}
+    engines: {node: '>=10.13.0'}
+
+  glob-to-regexp@0.4.1:
+    resolution: {integrity: sha512-lkX1HJXwyMcprw/5YUZc2s7DrpAiHB21/V+E1rHUrVNokkvB6bqMzT0VfV6/86ZNabt1k14YOIaT7nDvOX3Iiw==}
+
+  glob@10.5.0:
+    resolution: {integrity: sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
+    hasBin: true
+
+  glob@13.0.6:
+    resolution: {integrity: sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==}
+    engines: {node: 18 || 20 || >=22}
+
+  glob@7.2.3:
+    resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
+
+  globals@14.0.0:
+    resolution: {integrity: sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==}
+    engines: {node: '>=18'}
+
+  globals@16.5.0:
+    resolution: {integrity: sha512-c/c15i26VrJ4IRt5Z89DnIzCGDn9EcebibhAOjw5ibqEHsE1wLUgkPn9RDmNcUKyU87GeaL633nyJ+pplFR2ZQ==}
+    engines: {node: '>=18'}
+
+  globalthis@1.0.4:
+    resolution: {integrity: sha512-DpLKbNU4WylpxJykQujfCcwYWiV/Jhm50Goo0wrVILAv5jOr9d+H+UR3PhSCD2rCCEIg0uc+G+muBTwD54JhDQ==}
+    engines: {node: '>= 0.4'}
+
+  gopd@1.2.0:
+    resolution: {integrity: sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==}
+    engines: {node: '>= 0.4'}
+
+  graceful-fs@4.2.11:
+    resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==}
+
+  handlebars@4.7.9:
+    resolution: {integrity: sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==}
+    engines: {node: '>=0.4.7'}
+    hasBin: true
+
+  has-bigints@1.1.0:
+    resolution: {integrity: sha512-R3pbpkcIqv2Pm3dUwgjclDRVmWpTJW2DcMzcIhEXEx1oh/CEMObMm3KLmRJOdvhM7o4uQBnwr8pzRK2sJWIqfg==}
+    engines: {node: '>= 0.4'}
+
+  has-flag@4.0.0:
+    resolution: {integrity: sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==}
+    engines: {node: '>=8'}
+
+  has-property-descriptors@1.0.2:
+    resolution: {integrity: sha512-55JNKuIW+vq4Ke1BjOTjM2YctQIvCT7GFzHwmfZPGo5wnrgkid0YQtnAleFSqumZm4az3n2BS+erby5ipJdgrg==}
+
+  has-proto@1.2.0:
+    resolution: {integrity: sha512-KIL7eQPfHQRC8+XluaIw7BHUwwqL19bQn4hzNgdr+1wXoU0KKj6rufu47lhY7KbJR2C6T6+PfyN0Ea7wkSS+qQ==}
+    engines: {node: '>= 0.4'}
+
+  has-symbols@1.1.0:
+    resolution: {integrity: sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==}
+    engines: {node: '>= 0.4'}
+
+  has-tostringtag@1.0.2:
+    resolution: {integrity: sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==}
+    engines: {node: '>= 0.4'}
+
+  hasown@2.0.4:
+    resolution: {integrity: sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==}
+    engines: {node: '>= 0.4'}
+
+  helmet@8.3.0:
+    resolution: {integrity: sha512-Qgpiaws3Sm30Av8Eah6sjMCZZwjlBu+E68rhpCWBshY1lb09HtLwj5GviX0OyQIn+ulUS0iX0AxN5n3tLZzz1w==}
+    engines: {node: '>=18.0.0'}
+
+  help-me@5.0.0:
+    resolution: {integrity: sha512-7xgomUX6ADmcYzFik0HzAxh/73YlKR9bmFzf51CZwR+b6YtzU2m0u49hQCqV6SvlqIqsaxovfwdvbnsw3b/zpg==}
+
+  hermes-estree@0.25.1:
+    resolution: {integrity: sha512-0wUoCcLp+5Ev5pDW2OriHC2MJCbwLwuRx+gAqMTOkGKJJiBCLjtrvy4PWUGn6MIVefecRpzoOZ/UV6iGdOr+Cw==}
+
+  hermes-parser@0.25.1:
+    resolution: {integrity: sha512-6pEjquH3rqaI6cYAXYPcz9MS4rY6R4ngRgrgfDshRptUZIc3lw0MCIJIGDj9++mfySOuPTHB4nrSW99BCvOPIA==}
+
+  html-escaper@2.0.2:
+    resolution: {integrity: sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==}
+
+  http-errors@2.0.1:
+    resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
+    engines: {node: '>= 0.8'}
+
+  human-signals@2.1.0:
+    resolution: {integrity: sha512-B4FFZ6q/T2jhhksgkbEW3HBvWIfDW85snkQgawt07S7J5QXTk6BkNV+0yAeZrM5QpMAdYlocGoljn0sJ/WQkFw==}
+    engines: {node: '>=10.17.0'}
+
+  iconv-lite@0.7.3:
+    resolution: {integrity: sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==}
+    engines: {node: '>=0.10.0'}
+
+  ieee754@1.2.1:
+    resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
+
+  ignore@5.3.2:
+    resolution: {integrity: sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==}
+    engines: {node: '>= 4'}
+
+  ignore@7.0.6:
+    resolution: {integrity: sha512-BAg6QkE8W+TuQLrrw0Ugr7HegXduRuuj8/ti2kSOc+jz1dmx8/WNcjr6XGnq5YpDWxFwwaavqD0+jIUOKelTsw==}
+    engines: {node: '>= 4'}
+
+  import-fresh@3.3.1:
+    resolution: {integrity: sha512-TR3KfrTZTYLPB6jUjfx6MF9WcWrHL9su5TObK4ZkYgBdWKPOFoSoQIdEuTuR82pmtxH2spWG9h6etwfr1pLBqQ==}
+    engines: {node: '>=6'}
+
+  import-local@3.2.0:
+    resolution: {integrity: sha512-2SPlun1JUPWoM6t3F0dw0FkCF/jWY8kttcY4f599GLTSjh2OCuuhdTkJQsEcZzBqbXZGKMK2OqW1oZsjtf/gQA==}
+    engines: {node: '>=8'}
+    hasBin: true
+
+  imurmurhash@0.1.4:
+    resolution: {integrity: sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==}
+    engines: {node: '>=0.8.19'}
+
+  inflight@1.0.6:
+    resolution: {integrity: sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==}
+    deprecated: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
+
+  inherits@2.0.4:
+    resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
+
+  internal-slot@1.1.0:
+    resolution: {integrity: sha512-4gd7VpWNQNB4UKKCFFVcp1AVv+FMOgs9NKzjHKusc8jTMhd5eL1NqQqOpE0KzMds804/yHlglp3uxgluOqAPLw==}
+    engines: {node: '>= 0.4'}
+
+  ioredis@5.11.1:
+    resolution: {integrity: sha512-ehuGcf94bQXhfagULNXrJdfnWO38v070jxSx/qE87Kjzmu2fU7ro5EFAb+OPituLqgfyuQaym5DlrNydW2sJ9A==}
+    engines: {node: '>=12.22.0'}
+
+  ipaddr.js@1.9.1:
+    resolution: {integrity: sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==}
+    engines: {node: '>= 0.10'}
+
+  is-array-buffer@3.0.5:
+    resolution: {integrity: sha512-DDfANUiiG2wC1qawP66qlTugJeL5HyzMpfr8lLK+jMQirGzNod0B12cFB/9q838Ru27sBwfw78/rdoU7RERz6A==}
+    engines: {node: '>= 0.4'}
+
+  is-arrayish@0.2.1:
+    resolution: {integrity: sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==}
+
+  is-async-function@2.1.1:
+    resolution: {integrity: sha512-9dgM/cZBnNvjzaMYHVoxxfPj2QXt22Ev7SuuPrs+xav0ukGB0S6d4ydZdEiM48kLx5kDV+QBPrpVnFyefL8kkQ==}
+    engines: {node: '>= 0.4'}
+
+  is-bigint@1.1.0:
+    resolution: {integrity: sha512-n4ZT37wG78iz03xPRKJrHTdZbe3IicyucEtdRsV5yglwc3GyUfbAfpSeD0FJ41NbUNSt5wbhqfp1fS+BgnvDFQ==}
+    engines: {node: '>= 0.4'}
+
+  is-boolean-object@1.2.2:
+    resolution: {integrity: sha512-wa56o2/ElJMYqjCjGkXri7it5FbebW5usLw/nPmCMs5DeZ7eziSYZhSmPRn0txqeW4LnAmQQU7FgqLpsEFKM4A==}
+    engines: {node: '>= 0.4'}
+
+  is-bun-module@2.0.0:
+    resolution: {integrity: sha512-gNCGbnnnnFAUGKeZ9PdbyeGYJqewpmc2aKHUEMO5nQPWU9lOmv7jcmQIv+qHD8fXW6W7qfuCwX4rY9LNRjXrkQ==}
+
+  is-callable@1.2.7:
+    resolution: {integrity: sha512-1BC0BVFhS/p0qtw6enp8e+8OD0UrK0oFLztSjNzhcKA3WDuJxxAPXzPuPtKkjEY9UUoEWlX/8fgKeu2S8i9JTA==}
+    engines: {node: '>= 0.4'}
+
+  is-core-module@2.16.2:
+    resolution: {integrity: sha512-evOr8xfXKxE6qSR0hSXL2r3sd7ALj8+7jQEUvPYcm5sgZFdJ+AYzT6yNmJenvIYQBgIGwfwz08sL8zoL7yq2BA==}
+    engines: {node: '>= 0.4'}
+
+  is-data-view@1.0.2:
+    resolution: {integrity: sha512-RKtWF8pGmS87i2D6gqQu/l7EYRlVdfzemCJN/P3UOs//x1QE7mfhvzHIApBTRf7axvT6DMGwSwBXYCT0nfB9xw==}
+    engines: {node: '>= 0.4'}
+
+  is-date-object@1.1.0:
+    resolution: {integrity: sha512-PwwhEakHVKTdRNVOw+/Gyh0+MzlCl4R6qKvkhuvLtPMggI1WAHt9sOwZxQLSGpUaDnrdyDsomoRgNnCfKNSXXg==}
+    engines: {node: '>= 0.4'}
+
+  is-document.all@1.0.0:
+    resolution: {integrity: sha512-+XSoyS05OdBbhFuELhgTCpFNHkpBOJqtsZfUFFpe5QTw+9Sjbh8zitxhQkYAo6wV7e1Vb8cAPvpCk9jGam/82g==}
+    engines: {node: '>= 0.4'}
+
+  is-extglob@2.1.1:
+    resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==}
+    engines: {node: '>=0.10.0'}
+
+  is-finalizationregistry@1.1.1:
+    resolution: {integrity: sha512-1pC6N8qWJbWoPtEjgcL2xyhQOP491EQjeUo3qTKcmV8YSDDJrOepfG8pcC7h/QgnQHYSv0mJ3Z/ZWxmatVrysg==}
+    engines: {node: '>= 0.4'}
+
+  is-fullwidth-code-point@3.0.0:
+    resolution: {integrity: sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==}
+    engines: {node: '>=8'}
+
+  is-generator-fn@2.1.0:
+    resolution: {integrity: sha512-cTIB4yPYL/Grw0EaSzASzg6bBy9gqCofvWN8okThAYIxKJZC+udlRAmGbM0XLeniEJSs8uEgHPGuHSe1XsOLSQ==}
+    engines: {node: '>=6'}
+
+  is-generator-function@1.1.2:
+    resolution: {integrity: sha512-upqt1SkGkODW9tsGNG5mtXTXtECizwtS2kA161M+gJPc1xdb/Ax629af6YrTwcOeQHbewrPNlE5Dx7kzvXTizA==}
+    engines: {node: '>= 0.4'}
+
+  is-glob@4.0.3:
+    resolution: {integrity: sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==}
+    engines: {node: '>=0.10.0'}
+
+  is-interactive@1.0.0:
+    resolution: {integrity: sha512-2HvIEKRoqS62guEC+qBjpvRubdX910WCMuJTZ+I9yvqKU2/12eSL549HMwtabb4oupdj2sMP50k+XJfB/8JE6w==}
+    engines: {node: '>=8'}
+
+  is-map@2.0.3:
+    resolution: {integrity: sha512-1Qed0/Hr2m+YqxnM09CjA2d/i6YZNfF6R2oRAOj36eUdS6qIV/huPJNSEpKbupewFs+ZsJlxsjjPbc0/afW6Lw==}
+    engines: {node: '>= 0.4'}
+
+  is-negative-zero@2.0.3:
+    resolution: {integrity: sha512-5KoIu2Ngpyek75jXodFvnafB6DJgr3u8uuK0LEZJjrU19DrMD3EVERaR8sjz8CCGgpZvxPl9SuE1GMVPFHx1mw==}
+    engines: {node: '>= 0.4'}
+
+  is-number-object@1.1.1:
+    resolution: {integrity: sha512-lZhclumE1G6VYD8VHe35wFaIif+CTy5SJIi5+3y4psDgWu4wPDoBhF8NxUOinEc7pHgiTsT6MaBb92rKhhD+Xw==}
+    engines: {node: '>= 0.4'}
+
+  is-promise@4.0.0:
+    resolution: {integrity: sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ==}
+
+  is-regex@1.2.1:
+    resolution: {integrity: sha512-MjYsKHO5O7mCsmRGxWcLWheFqN9DJ/2TmngvjKXihe6efViPqc274+Fx/4fYj/r03+ESvBdTXK0V6tA3rgez1g==}
+    engines: {node: '>= 0.4'}
+
+  is-set@2.0.3:
+    resolution: {integrity: sha512-iPAjerrse27/ygGLxw+EBR9agv9Y6uLeYVJMu+QNCoouJ1/1ri0mGrcWpfCqFZuzzx3WjtwxG098X+n4OuRkPg==}
+    engines: {node: '>= 0.4'}
+
+  is-shared-array-buffer@1.0.4:
+    resolution: {integrity: sha512-ISWac8drv4ZGfwKl5slpHG9OwPNty4jOWPRIhBpxOoD+hqITiwuipOQ2bNthAzwA3B4fIjO4Nln74N0S9byq8A==}
+    engines: {node: '>= 0.4'}
+
+  is-stream@2.0.1:
+    resolution: {integrity: sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==}
+    engines: {node: '>=8'}
+
+  is-string@1.1.1:
+    resolution: {integrity: sha512-BtEeSsoaQjlSPBemMQIrY1MY0uM6vnS1g5fmufYOtnxLGUZM2178PKbhsk7Ffv58IX+ZtcvoGwccYsh0PglkAA==}
+    engines: {node: '>= 0.4'}
+
+  is-symbol@1.1.1:
+    resolution: {integrity: sha512-9gGx6GTtCQM73BgmHQXfDmLtfjjTUDSyoxTCbp5WtoixAhfgsDirWIcVQ/IHpvI5Vgd5i/J5F7B9cN/WlVbC/w==}
+    engines: {node: '>= 0.4'}
+
+  is-typed-array@1.1.15:
+    resolution: {integrity: sha512-p3EcsicXjit7SaskXHs1hA91QxgTw46Fv6EFKKGS5DRFLD8yKnohjF3hxoju94b/OcMZoQukzpPpBE9uLVKzgQ==}
+    engines: {node: '>= 0.4'}
+
+  is-unicode-supported@0.1.0:
+    resolution: {integrity: sha512-knxG2q4UC3u8stRGyAVJCOdxFmv5DZiRcdlIaAQXAbSfJya+OhopNotLQrstBhququ4ZpuKbDc/8S6mgXgPFPw==}
+    engines: {node: '>=10'}
+
+  is-weakmap@2.0.2:
+    resolution: {integrity: sha512-K5pXYOm9wqY1RgjpL3YTkF39tni1XajUIkawTLUo9EZEVUFga5gSQJF8nNS7ZwJQ02y+1YCNYcMh+HIf1ZqE+w==}
+    engines: {node: '>= 0.4'}
+
+  is-weakref@1.1.1:
+    resolution: {integrity: sha512-6i9mGWSlqzNMEqpCp93KwRS1uUOodk2OJ6b+sq7ZPDSy2WuI5NFIxp/254TytR8ftefexkWn5xNiHUNpPOfSew==}
+    engines: {node: '>= 0.4'}
+
+  is-weakset@2.0.4:
+    resolution: {integrity: sha512-mfcwb6IzQyOKTs84CQMrOwW4gQcaTOAWJ0zzJCl2WSPDrWk/OzDaImWFH3djXhb24g4eudZfLRozAvPGw4d9hQ==}
+    engines: {node: '>= 0.4'}
+
+  isarray@2.0.5:
+    resolution: {integrity: sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw==}
+
+  isexe@2.0.0:
+    resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
+
+  istanbul-lib-coverage@3.2.2:
+    resolution: {integrity: sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg==}
+    engines: {node: '>=8'}
+
+  istanbul-lib-instrument@6.0.3:
+    resolution: {integrity: sha512-Vtgk7L/R2JHyyGW07spoFlB8/lpjiOLTjMdms6AFMraYt3BaJauod/NGrfnVG/y4Ix1JEuMRPDPEj2ua+zz1/Q==}
+    engines: {node: '>=10'}
+
+  istanbul-lib-report@3.0.1:
+    resolution: {integrity: sha512-GCfE1mtsHGOELCU8e/Z7YWzpmybrx/+dSTfLrvY8qRmaY6zXTKWn6WQIjaAFw069icm6GVMNkgu0NzI4iPZUNw==}
+    engines: {node: '>=10'}
+
+  istanbul-lib-source-maps@5.0.6:
+    resolution: {integrity: sha512-yg2d+Em4KizZC5niWhQaIomgf5WlL4vOOjZ5xGCmF8SnPE/mDWWXgvRExdcpCgh9lLRRa1/fSYp2ymmbJ1pI+A==}
+    engines: {node: '>=10'}
+
+  istanbul-reports@3.2.0:
+    resolution: {integrity: sha512-HGYWWS/ehqTV3xN10i23tkPkpH46MLCIMFNCaaKNavAXTF1RkqxawEPtnjnGZ6XKSInBKkiOA5BKS+aZiY3AvA==}
+    engines: {node: '>=8'}
+
+  iterare@1.2.1:
+    resolution: {integrity: sha512-RKYVTCjAnRthyJes037NX/IiqeidgN1xc3j1RjFfECFp28A1GVwK9nA+i0rJPaHqSZwygLzRnFlzUuHFoWWy+Q==}
+    engines: {node: '>=6'}
+
+  iterator.prototype@1.1.5:
+    resolution: {integrity: sha512-H0dkQoCa3b2VEeKQBOxFph+JAbcrQdE7KC0UkqwpLmv2EC4P41QXP+rqo9wYodACiG5/WM5s9oDApTU8utwj9g==}
+    engines: {node: '>= 0.4'}
+
+  jackspeak@3.4.3:
+    resolution: {integrity: sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==}
+
+  jest-changed-files@30.4.1:
+    resolution: {integrity: sha512-IuctmYrxi21iOSOaIXpJWalHyPAsVv0GeBHKDn8C1CA4W5htHn7INL+wdnL4Bo0+olEndvAFkmb++tIQJG+vvg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-circus@30.4.2:
+    resolution: {integrity: sha512-rvHH7VlY6LgbJXJTQ87GW62g1FntOtbhh0zT+v04kC+pgL6aBKyYINXxWukCpj3dcIBMw5/XUbtDS9dU9JTXeQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-cli@30.4.2:
+    resolution: {integrity: sha512-jfA2ocvVHMXS2QijrJ0d31ektP+d/W0T5RpcTX2Pq+3sVqHlsXVCM2+FmwpL+bdY8OfHpIg9xMxLF17Zg0U49Q==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+    hasBin: true
+    peerDependencies:
+      node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
+    peerDependenciesMeta:
+      node-notifier:
+        optional: true
+
+  jest-config@30.4.2:
+    resolution: {integrity: sha512-rNHAShJQqQwFNoL0hbf3BphSBOWnpOUAKvidLS/AjNVLPfoj5mSf4jQMfW3cYOs6hXeZC7nF7mDHaBnbxELOzg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+    peerDependencies:
+      '@types/node': '*'
+      esbuild-register: '>=3.4.0'
+      ts-node: '>=9.0.0'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+      esbuild-register:
+        optional: true
+      ts-node:
+        optional: true
+
+  jest-diff@30.4.1:
+    resolution: {integrity: sha512-CRpFK0RtLriVDGcPPAnR6HMVI8bSR2jnUIgralhauzYQZIb4RH9AtEInTuQr65LmmGggGcRT6HIASxwqsVsmlA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-docblock@30.4.0:
+    resolution: {integrity: sha512-ZPMabUZCx5MpbZ2eBYSvZ0J8fvo3dR9oM+eeUpb3aKNQFuS2tu3Duw1TNlMoP8k3WQgKGJuhcMFvwcVuq6T7oA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-each@30.4.1:
+    resolution: {integrity: sha512-/8MJbH6fuj48TstjrMf+u/pd06Qezz5xOXvZA6442heNOWr8bdeoGZX2d9fCn028CoMgYmroH9//zky5GfyYmA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-environment-node@30.4.1:
+    resolution: {integrity: sha512-4FZYVOk85hz2AyT6BbarKy9u37g6DbrDyCdFhsnDdXqyrueYQvB+0zO4f/kqLCRD0BsPRXPMNJeQwihKZV8naw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-haste-map@30.4.1:
+    resolution: {integrity: sha512-rFrcONd8jeFsyw+Z9CrScJgglRf2+NFmNam8dKu7n+SoHqNYT47mn0DdEcVUZJpvh7Iz6/si7f7yUH7GJHVgnw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-leak-detector@30.4.1:
+    resolution: {integrity: sha512-IpmyiioeHxiWDhesHnUFmOxcTzwCwKpgACgWajtAP+nYQXiY7DakTxB6Bx9JFiRMljr0AX1PvnQdaU1KFoz6NQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-matcher-utils@30.4.1:
+    resolution: {integrity: sha512-zvYfX5CaeEkFrrLS9suWe9rvJrm9J1Iv3ua8kIBv9GEPzcnsfBf0bob37la7s67fs0nlBC3EuvkOLnXQKxtx4A==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-message-util@30.4.1:
+    resolution: {integrity: sha512-kwCKIvq0MCW1HzLoGola9Te6JUdzgV0loyKJ3Qghrkz9i5/RRIHsL95BMQc2HBBhlBKC4j22K9p11TGHH8RBpQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-mock@30.4.1:
+    resolution: {integrity: sha512-/i8SVb8/NSB7RfNi8gfqu8gxLV23KaL5EpAttyb9iz8qWRIqXRLflycz/32wXsYkOnaUlx8NAKnJYtpsmXUmfw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-pnp-resolver@1.2.3:
+    resolution: {integrity: sha512-+3NpwQEnRoIBtx4fyhblQDPgJI0H1IEIkX7ShLUjPGA7TtUTvI1oiKi3SR4oBR0hQhQR80l4WAe5RrXBwWMA8w==}
+    engines: {node: '>=6'}
+    peerDependencies:
+      jest-resolve: '*'
+    peerDependenciesMeta:
+      jest-resolve:
+        optional: true
+
+  jest-regex-util@30.4.0:
+    resolution: {integrity: sha512-mWlvLviKIgIQ8VCuM1xRdD0TWp3zlzionlmDBjuXVBs+VkmXq6FgW9T4Emr7oGz/Rk6feDCGyiugolcQEyp3mg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-resolve-dependencies@30.4.2:
+    resolution: {integrity: sha512-gDiVh1I+GxYzz9oXlyw+1wv6VOYX1WYxMOfjsA3iGKePV2oxmbHhwxfkALxNxYy1ciw6APWwkW2zZONwP97aEQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-resolve@30.4.1:
+    resolution: {integrity: sha512-Zry8Yq/yJcNAZ7dJ5F2heic8AheXvbFZ7XI5V+h28nrYZ7Qoyy4dItq8OodjnYD270mvX+ZudmrNV9cysqhW5Q==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-runner@30.4.2:
+    resolution: {integrity: sha512-2dw0PslVYXxffXGpLo+Ejad+KcI1Qkjn7f4X4619gf21oCUmL+SPfjqIa/losUem3yEOvfNZe/F1HWUcNpODcg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-runtime@30.4.2:
+    resolution: {integrity: sha512-3/5e8iPz2k/VLqlr8DgTftYyLUv8Su3FkCAO2/Od81UsUTpSxOrS6O5x5KkoQwyUjmpYyDJKeyAvg2T2nvpNkQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-snapshot@30.4.1:
+    resolution: {integrity: sha512-tEOkkfOMppUyeiHwjZswOQ3lcnoTnws/q5FnGIaeIh/jmoU0ZlgMYRR8sTlTj+nNGCoJ0RDq6SfxGxCsyMTPmw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-util@30.4.1:
+    resolution: {integrity: sha512-vjQb1sACEiv13DKJMDToJpzVW0joCsIQrmbg0fi7CyOOt+g9jTuQl2A216pWRBYhOVt53XbL/2LbMKg1BECWOw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-validate@30.4.1:
+    resolution: {integrity: sha512-PDWi4SOwLnwqNDfHZjOcsEFyZ4fc/2W2gVL3DEoyqnB6jCQMLRtfBong8s6omIw3lI0HWOus12xfnFmQtjW3fw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-watcher@30.4.1:
+    resolution: {integrity: sha512-/l9UonmvCwjHH7d2h3iAwIloLc1H0S8mJZ/LNK3i86hqwPAz8otUJjP9MfYtz9Tt77Su5FD2xGjZn8d31IZHlw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-worker@27.5.1:
+    resolution: {integrity: sha512-7vuh85V5cdDofPyxn58nrPjBktZo0u9x1g8WtjQol+jZDaE+fhN+cIvTj11GndBnMnyfrUOG1sZQxCdjKh+DKg==}
+    engines: {node: '>= 10.13.0'}
+
+  jest-worker@30.4.1:
+    resolution: {integrity: sha512-SHynN/q/QD++iNyvMdy+WMmbCGk8jIsNcRxycXbWubSOhvo6T+j2afcfUSl+3hYsiBebOTo0cT7c2H7CXugu1g==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest@30.4.2:
+    resolution: {integrity: sha512-Yi1jqNC/Oq0N4hBgNH/YvBpP1P57QqundgytzYqy3yqAa7NZPNjSoi4SGbRAXDMdBzNE6xBCi5U7RgfrvMEUVQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+    hasBin: true
+    peerDependencies:
+      node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
+    peerDependenciesMeta:
+      node-notifier:
+        optional: true
+
+  jiti@2.7.0:
+    resolution: {integrity: sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ==}
+    hasBin: true
+
+  joycon@3.1.1:
+    resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==}
+    engines: {node: '>=10'}
+
+  js-tokens@4.0.0:
+    resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
+
+  js-yaml@3.15.1:
+    resolution: {integrity: sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==}
+    hasBin: true
+
+  js-yaml@4.3.1:
+    resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
+    hasBin: true
+
+  js-yaml@5.2.1:
+    resolution: {integrity: sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==}
+    hasBin: true
+
+  jsesc@3.1.0:
+    resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
+    engines: {node: '>=6'}
+    hasBin: true
+
+  json-buffer@3.0.1:
+    resolution: {integrity: sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==}
+
+  json-parse-even-better-errors@2.3.1:
+    resolution: {integrity: sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==}
+
+  json-schema-traverse@0.4.1:
+    resolution: {integrity: sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==}
+
+  json-schema-traverse@1.0.0:
+    resolution: {integrity: sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==}
+
+  json-stable-stringify-without-jsonify@1.0.1:
+    resolution: {integrity: sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==}
+
+  json5@2.2.3:
+    resolution: {integrity: sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==}
+    engines: {node: '>=6'}
+    hasBin: true
+
+  jsonc-parser@3.3.1:
+    resolution: {integrity: sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==}
+
+  jsonfile@6.2.1:
+    resolution: {integrity: sha512-zwOTdL3rFQ/lRdBnntKVOX6k5cKJwEc1HdilT71BWEu7J41gXIB2MRp+vxduPSwZJPWBxEzv4yH1wYLJGUHX4Q==}
+
+  jsonwebtoken@9.0.3:
+    resolution: {integrity: sha512-MT/xP0CrubFRNLNKvxJ2BYfy53Zkm++5bX9dtuPbqAeQpTVe0MQTFhao8+Cp//EmJp244xt6Drw/GVEGCUj40g==}
+    engines: {node: '>=12', npm: '>=6'}
+
+  jsx-ast-utils@3.3.5:
+    resolution: {integrity: sha512-ZZow9HBI5O6EPgSJLUb8n2NKgmVWTwCvHGwFuJlMjvLFqlGG6pjirPhtdsseaLZjSibD8eegzmYpUZwoIlj2cQ==}
+    engines: {node: '>=4.0'}
+
+  jwa@2.0.1:
+    resolution: {integrity: sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==}
+
+  jws@4.0.1:
+    resolution: {integrity: sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==}
+
+  keyv@4.5.4:
+    resolution: {integrity: sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==}
+
+  language-subtag-registry@0.3.23:
+    resolution: {integrity: sha512-0K65Lea881pHotoGEa5gDlMxt3pctLi2RplBb7Ezh4rRdLEOtgi7n4EwK9lamnUCkKBqaeKRVebTq6BAxSkpXQ==}
+
+  language-tags@1.0.9:
+    resolution: {integrity: sha512-MbjN408fEndfiQXbFQ1vnd+1NoLDsnQW41410oQBXiyXDMYH5z505juWa4KUE1LqxRC7DgOgZDbKLxHIwm27hA==}
+    engines: {node: '>=0.10'}
+
+  leven@3.1.0:
+    resolution: {integrity: sha512-qsda+H8jTaUaN/x5vzW2rzc+8Rw4TAQ/4KjB46IwK5VH+IlVeeeje/EoZRpiXvIqjFgK84QffqPztGI3VBLG1A==}
+    engines: {node: '>=6'}
+
+  levn@0.4.1:
+    resolution: {integrity: sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==}
+    engines: {node: '>= 0.8.0'}
+
+  lightningcss-android-arm64@1.32.0:
+    resolution: {integrity: sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [android]
+
+  lightningcss-darwin-arm64@1.32.0:
+    resolution: {integrity: sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [darwin]
+
+  lightningcss-darwin-x64@1.32.0:
+    resolution: {integrity: sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [darwin]
+
+  lightningcss-freebsd-x64@1.32.0:
+    resolution: {integrity: sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [freebsd]
+
+  lightningcss-linux-arm-gnueabihf@1.32.0:
+    resolution: {integrity: sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm]
+    os: [linux]
+
+  lightningcss-linux-arm64-gnu@1.32.0:
+    resolution: {integrity: sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  lightningcss-linux-arm64-musl@1.32.0:
+    resolution: {integrity: sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  lightningcss-linux-x64-gnu@1.32.0:
+    resolution: {integrity: sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  lightningcss-linux-x64-musl@1.32.0:
+    resolution: {integrity: sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  lightningcss-win32-arm64-msvc@1.32.0:
+    resolution: {integrity: sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [win32]
+
+  lightningcss-win32-x64-msvc@1.32.0:
+    resolution: {integrity: sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [win32]
+
+  lightningcss@1.32.0:
+    resolution: {integrity: sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==}
+    engines: {node: '>= 12.0.0'}
+
+  lines-and-columns@1.2.4:
+    resolution: {integrity: sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==}
+
+  load-esm@1.0.3:
+    resolution: {integrity: sha512-v5xlu8eHD1+6r8EHTg6hfmO97LN8ugKtiXcy5e6oN72iD2r6u0RPfLl6fxM+7Wnh2ZRq15o0russMst44WauPA==}
+    engines: {node: '>=13.2.0'}
+
+  loader-runner@4.3.2:
+    resolution: {integrity: sha512-DFEqQ3ihfS9blba08cLfYf1NRAIEm+dDjic073DRDc3/JspI/8wYmtDsHwd3+4hwvdxSK7PGaElfTmm0awWJ4w==}
+    engines: {node: '>=6.11.5'}
+
+  locate-path@5.0.0:
+    resolution: {integrity: sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==}
+    engines: {node: '>=8'}
+
+  locate-path@6.0.0:
+    resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
+    engines: {node: '>=10'}
+
+  lodash.includes@4.3.0:
+    resolution: {integrity: sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w==}
+
+  lodash.isboolean@3.0.3:
+    resolution: {integrity: sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg==}
+
+  lodash.isinteger@4.0.4:
+    resolution: {integrity: sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA==}
+
+  lodash.isnumber@3.0.3:
+    resolution: {integrity: sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw==}
+
+  lodash.isplainobject@4.0.6:
+    resolution: {integrity: sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA==}
+
+  lodash.isstring@4.0.1:
+    resolution: {integrity: sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw==}
+
+  lodash.memoize@4.1.2:
+    resolution: {integrity: sha512-t7j+NzmgnQzTAYXcsHYLgimltOV1MXHtlOWf6GjL9Kj8GK5FInw5JotxvbOs+IvV1/Dzo04/fCGfLVs7aXb4Ag==}
+
+  lodash.merge@4.6.2:
+    resolution: {integrity: sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==}
+
+  lodash.once@4.1.1:
+    resolution: {integrity: sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg==}
+
+  lodash@4.18.1:
+    resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
+
+  log-symbols@4.1.0:
+    resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==}
+    engines: {node: '>=10'}
+
+  loose-envify@1.4.0:
+    resolution: {integrity: sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==}
+    hasBin: true
+
+  lru-cache@10.4.3:
+    resolution: {integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==}
+
+  lru-cache@11.5.2:
+    resolution: {integrity: sha512-4pfM1Ff0x50o0tQwb5ucw/RzNyD0/YJME6IVcStalZuMWxdt3sR3huStTtxz4PUmvZfRguvDejasvQ2kifR11g==}
+    engines: {node: 20 || >=22}
+
+  lru-cache@5.1.1:
+    resolution: {integrity: sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==}
+
+  magic-string@0.30.17:
+    resolution: {integrity: sha512-sNPKHvyjVf7gyjwS4xGTaW/mCnF8wnjtifKBEhxfZ7E/S8tQ0rssrwGNn6q8JH/ohItJfSQp9mBtQYuTlH5QnA==}
+
+  magic-string@0.30.21:
+    resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
+
+  make-dir@4.0.0:
+    resolution: {integrity: sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw==}
+    engines: {node: '>=10'}
+
+  make-error@1.3.6:
+    resolution: {integrity: sha512-s8UhlNe7vPKomQhC1qFelMokr/Sc3AgNbso3n74mVPA5LTZwkB9NlXf4XPamLxJE8h0gh73rM94xvwRT2CVInw==}
+
+  makeerror@1.0.12:
+    resolution: {integrity: sha512-JmqCvUhmt43madlpFzG4BQzG2Z3m6tvQDNKdClZnO3VbIudJYmxsT0FNJMeiB2+JTSlTQTSbU8QdesVmwJcmLg==}
+
+  math-intrinsics@1.1.0:
+    resolution: {integrity: sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==}
+    engines: {node: '>= 0.4'}
+
+  media-typer@0.3.0:
+    resolution: {integrity: sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==}
+    engines: {node: '>= 0.6'}
+
+  media-typer@1.1.1:
+    resolution: {integrity: sha512-yz3xRaG20c6/BOzvYoDaGtPmGscs7YivItZEEqe6GbwNfHuxu9YNmvnEkMzKldAGY4/80pRcQRZSEnhquk9XuQ==}
+    engines: {node: '>= 0.8'}
+
+  memfs@3.5.3:
+    resolution: {integrity: sha512-UERzLsxzllchadvbPs5aolHh65ISpKpM+ccLbOJ8/vvpBKmAWf+la7dXFy7Mr0ySHbdHrFv5kGFCUHHe6GFEmw==}
+    engines: {node: '>= 4.0.0'}
+
+  merge-descriptors@2.0.0:
+    resolution: {integrity: sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g==}
+    engines: {node: '>=18'}
+
+  merge-stream@2.0.0:
+    resolution: {integrity: sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==}
+
+  methods@1.1.2:
+    resolution: {integrity: sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==}
+    engines: {node: '>= 0.6'}
+
+  mime-db@1.52.0:
+    resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
+    engines: {node: '>= 0.6'}
+
+  mime-db@1.54.0:
+    resolution: {integrity: sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==}
+    engines: {node: '>= 0.6'}
+
+  mime-types@2.1.35:
+    resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
+    engines: {node: '>= 0.6'}
+
+  mime-types@3.0.2:
+    resolution: {integrity: sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==}
+    engines: {node: '>=18'}
+
+  mime@2.6.0:
+    resolution: {integrity: sha512-USPkMeET31rOMiarsBNIHZKLGgvKc/LrjofAnBlOttf5ajRvqiRA8QsenbcooctK6d6Ts6aqZXBA+XbkKthiQg==}
+    engines: {node: '>=4.0.0'}
+    hasBin: true
+
+  mimic-fn@2.1.0:
+    resolution: {integrity: sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==}
+    engines: {node: '>=6'}
+
+  minimatch@10.2.6:
+    resolution: {integrity: sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==}
+    engines: {node: 18 || 20 || >=22}
+
+  minimatch@3.1.5:
+    resolution: {integrity: sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==}
+
+  minimatch@9.0.9:
+    resolution: {integrity: sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==}
+    engines: {node: '>=16 || 14 >=14.17'}
+
+  minimist@1.2.8:
+    resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==}
+
+  minipass@7.1.3:
+    resolution: {integrity: sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==}
+    engines: {node: '>=16 || 14 >=14.17'}
+
+  ms@2.0.0:
+    resolution: {integrity: sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==}
+
+  ms@2.1.3:
+    resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
+
+  multer@2.2.0:
+    resolution: {integrity: sha512-6rdyFg2kLrMh9Jee7/BMPuV9lEAd7lLW2YUpF9/YxR7njyoUwwQ0ZPh3TaIY50Sw6vlyD2HW3wGOkTS4P79xrQ==}
+    engines: {node: '>= 10.16.0'}
+
+  mute-stream@2.0.0:
+    resolution: {integrity: sha512-WWdIxpyjEn+FhQJQQv9aQAYlHoNVdzIzUySNV1gHUPDSdZJ3yZn7pAAbQcV7B56Mvu881q9FZV+0Vx2xC44VWA==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  nanoid@3.3.18:
+    resolution: {integrity: sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==}
+    engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
+    hasBin: true
+
+  napi-postinstall@0.3.4:
+    resolution: {integrity: sha512-PHI5f1O0EP5xJ9gQmFGMS6IZcrVvTjpXjz7Na41gTE7eE2hK11lg04CECCYEEjdc17EV4DO+fkGEtt7TpTaTiQ==}
+    engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
+    hasBin: true
+
+  natural-compare@1.4.0:
+    resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==}
+
+  negotiator@0.6.4:
+    resolution: {integrity: sha512-myRT3DiWPHqho5PrJaIRyaMv2kgYf0mUVgBNOYMuCH5Ki1yEiQaf/ZJuQ62nvpc44wL5WDbTX7yGJi1Neevw8w==}
+    engines: {node: '>= 0.6'}
+
+  negotiator@1.0.0:
+    resolution: {integrity: sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==}
+    engines: {node: '>= 0.6'}
+
+  neo-async@2.6.2:
+    resolution: {integrity: sha512-Yd3UES5mWCSqR+qNT93S3UoYUkqAZ9lLg8a7g9rimsWmYGK8cVToA4/sF3RrshdyV3sAGMXVUmpMYOw+dLpOuw==}
+
+  nestjs-pino@4.6.1:
+    resolution: {integrity: sha512-nuARXa0xpdJ1lY2+fgycIQr6H3g0VgqAWNK3xMYjOFcj2DoPETNXj0lV3Y86nRuI7BUfQp5PGiVoZvT4dTWbpQ==}
+    engines: {node: '>= 14'}
+    peerDependencies:
+      '@nestjs/common': ^8.0.0 || ^9.0.0 || ^10.0.0 || ^11.0.0
+      pino: ^7.5.0 || ^8.0.0 || ^9.0.0 || ^10.0.0
+      pino-http: ^6.4.0 || ^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0 || ^11.0.0
+      rxjs: ^7.1.0
+
+  next@16.3.0:
+    resolution: {integrity: sha512-NEdGOzH+08eTXMUp9UYkA99Nhi5N6Thrhc1jgFOQgfgnGK/dA2hRwBpXep+exdFQrnwlRf/3Wixyp8lLBUpE2A==}
+    engines: {node: '>=20.9.0'}
+    hasBin: true
+    peerDependencies:
+      '@opentelemetry/api': ^1.1.0
+      '@playwright/test': ^1.51.1
+      babel-plugin-react-compiler: '*'
+      react: ^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0
+      react-dom: ^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0
+      sass: ^1.3.0
+    peerDependenciesMeta:
+      '@opentelemetry/api':
+        optional: true
+      '@playwright/test':
+        optional: true
+      babel-plugin-react-compiler:
+        optional: true
+      sass:
+        optional: true
+
+  node-abort-controller@3.1.1:
+    resolution: {integrity: sha512-AGK2yQKIjRuqnc6VkX2Xj5d+QW8xZ87pa1UK6yA6ouUyuxfHuMP6umE5QK7UmTeOAymo+Zx1Fxiuw9rVx8taHQ==}
+
+  node-emoji@1.11.0:
+    resolution: {integrity: sha512-wo2DpQkQp7Sjm2A0cq+sN7EHKO6Sl0ctXeBdFZrL9T9+UywORbufTcTZxom8YqpLQt/FqNMUkOpkZrJVYSKD3A==}
+
+  node-exports-info@1.6.2:
+    resolution: {integrity: sha512-kXs9Go0cah0qHVV2v389IXQLdLCeE1xfFtjOAF+iobu0OIoG1pje8At2vMHyaPMiPMnG/LWP50twML21eMcAag==}
+    engines: {node: '>= 0.4'}
+
+  node-fetch-native@1.6.7:
+    resolution: {integrity: sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==}
+
+  node-int64@0.4.0:
+    resolution: {integrity: sha512-O5lz91xSOeoXP6DulyHfllpq+Eg00MWitZIbtPfoSEvqIHdl5gfcY6hYzDWnj0qD5tz52PI08u9qUvSVeUBeHw==}
+
+  node-releases@2.0.53:
+    resolution: {integrity: sha512-D9UOmYG3UH1V+ENW56t5QXBwJw1YEY18ruVeus89Rw+SyIgjPkCO84bRzO3uNIYosJbNwiabWVn48o3uJLjxFQ==}
+    engines: {node: '>=18'}
+
+  normalize-path@3.0.0:
+    resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==}
+    engines: {node: '>=0.10.0'}
+
+  npm-run-path@4.0.1:
+    resolution: {integrity: sha512-S48WzZW777zhNIrn7gxOlISNAqi9ZC/uQFnRdbeIHhZhCA6UqpkOT8T1G7BvfdgP4Er8gF4sUbaS0i7QvIfCWw==}
+    engines: {node: '>=8'}
+
+  nypm@0.6.9:
+    resolution: {integrity: sha512-zxlE2yvSWZWmHcNdT3+5zV2lrCogeE9YOklHrR3dFjqutq5wO7GFDYLFDRXLsYnJzwvy/im9fYoxePvS0VTW0w==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  object-assign@4.1.1:
+    resolution: {integrity: sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==}
+    engines: {node: '>=0.10.0'}
+
+  object-inspect@1.13.4:
+    resolution: {integrity: sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==}
+    engines: {node: '>= 0.4'}
+
+  object-keys@1.1.1:
+    resolution: {integrity: sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==}
+    engines: {node: '>= 0.4'}
+
+  object.assign@4.1.7:
+    resolution: {integrity: sha512-nK28WOo+QIjBkDduTINE4JkF/UJJKyf2EJxvJKfblDpyg0Q+pkOHNTL0Qwy6NP6FhE/EnzV73BxxqcJaXY9anw==}
+    engines: {node: '>= 0.4'}
+
+  object.entries@1.1.9:
+    resolution: {integrity: sha512-8u/hfXFRBD1O0hPUjioLhoWFHRmt6tKA4/vZPyckBr18l1KE9uHrFaFaUi8MDRTpi4uak2goyPTSNJLXX2k2Hw==}
+    engines: {node: '>= 0.4'}
+
+  object.fromentries@2.0.8:
+    resolution: {integrity: sha512-k6E21FzySsSK5a21KRADBd/NGneRegFO5pLHfdQLpRDETUNJueLXs3WCzyQ3tFRDYgbq3KHGXfTbi2bs8WQ6rQ==}
+    engines: {node: '>= 0.4'}
+
+  object.values@1.2.1:
+    resolution: {integrity: sha512-gXah6aZrcUxjWg2zR2MwouP2eHlCBzdV4pygudehaKXSGW4v2AsRQUK+lwwXhii6KFZcunEnmSUoYp5CXibxtA==}
+    engines: {node: '>= 0.4'}
+
+  ohash@2.0.11:
+    resolution: {integrity: sha512-RdR9FQrFwNBNXAr4GixM8YaRZRJ5PUWbKYbE5eOsrwAjJW0q2REGcf79oYPsLyskQCZG1PLN+S/K1V00joZAoQ==}
+
+  on-exit-leak-free@2.1.2:
+    resolution: {integrity: sha512-0eJJY6hXLGf1udHwfNftBqH+g73EU4B504nZeKpz1sYRKafAghwxEJunB2O7rDZkL4PGfsMVnTXZ2EjibbqcsA==}
+    engines: {node: '>=14.0.0'}
+
+  on-finished@2.4.1:
+    resolution: {integrity: sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==}
+    engines: {node: '>= 0.8'}
+
+  on-headers@1.1.0:
+    resolution: {integrity: sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==}
+    engines: {node: '>= 0.8'}
+
+  once@1.4.0:
+    resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
+
+  onetime@5.1.2:
+    resolution: {integrity: sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==}
+    engines: {node: '>=6'}
+
+  optionator@0.9.4:
+    resolution: {integrity: sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g==}
+    engines: {node: '>= 0.8.0'}
+
+  ora@5.4.1:
+    resolution: {integrity: sha512-5b6Y85tPxZZ7QytO+BQzysW31HJku27cRIlkbAXaNx+BdcVi+LlRFmVXzeF6a7JCwJpyw5c4b+YSVImQIrBpuQ==}
+    engines: {node: '>=10'}
+
+  own-keys@1.0.2:
+    resolution: {integrity: sha512-19YVAg7T+WTrxggPukVq7DjTv6+PJ867TmhCvBsYwmbFCsZd344rq2Ld1p0wo8f8Qrrhgp82c6FJRqdXWtSEhg==}
+    engines: {node: '>= 0.4'}
+
+  p-limit@2.3.0:
+    resolution: {integrity: sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==}
+    engines: {node: '>=6'}
+
+  p-limit@3.1.0:
+    resolution: {integrity: sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==}
+    engines: {node: '>=10'}
+
+  p-locate@4.1.0:
+    resolution: {integrity: sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==}
+    engines: {node: '>=8'}
+
+  p-locate@5.0.0:
+    resolution: {integrity: sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==}
+    engines: {node: '>=10'}
+
+  p-try@2.2.0:
+    resolution: {integrity: sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==}
+    engines: {node: '>=6'}
+
+  package-json-from-dist@1.0.1:
+    resolution: {integrity: sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==}
+
+  parent-module@1.0.1:
+    resolution: {integrity: sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==}
+    engines: {node: '>=6'}
+
+  parse-json@5.2.0:
+    resolution: {integrity: sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==}
+    engines: {node: '>=8'}
+
+  parseurl@1.3.3:
+    resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
+    engines: {node: '>= 0.8'}
+
+  path-exists@4.0.0:
+    resolution: {integrity: sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==}
+    engines: {node: '>=8'}
+
+  path-is-absolute@1.0.1:
+    resolution: {integrity: sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==}
+    engines: {node: '>=0.10.0'}
+
+  path-key@3.1.1:
+    resolution: {integrity: sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==}
+    engines: {node: '>=8'}
+
+  path-parse@1.0.7:
+    resolution: {integrity: sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==}
+
+  path-scurry@1.11.1:
+    resolution: {integrity: sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==}
+    engines: {node: '>=16 || 14 >=14.18'}
+
+  path-scurry@2.0.2:
+    resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==}
+    engines: {node: 18 || 20 || >=22}
+
+  path-to-regexp@8.4.2:
+    resolution: {integrity: sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==}
+
+  path-type@4.0.0:
+    resolution: {integrity: sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw==}
+    engines: {node: '>=8'}
+
+  pathe@2.0.3:
+    resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==}
+
+  perfect-debounce@1.0.0:
+    resolution: {integrity: sha512-xCy9V055GLEqoFaHoC1SoLIaLmWctgCUaBaWxDZ7/Zx4CTyX7cJQLJOok/orfjZAh9kEYpjJa4d0KcJmCbctZA==}
+
+  picocolors@1.1.1:
+    resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
+
+  picomatch@2.3.2:
+    resolution: {integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==}
+    engines: {node: '>=8.6'}
+
+  picomatch@4.0.4:
+    resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
+    engines: {node: '>=12'}
+
+  picomatch@4.0.5:
+    resolution: {integrity: sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==}
+    engines: {node: '>=12'}
+
+  pino-abstract-transport@3.0.0:
+    resolution: {integrity: sha512-wlfUczU+n7Hy/Ha5j9a/gZNy7We5+cXp8YL+X+PG8S0KXxw7n/JXA3c46Y0zQznIJ83URJiwy7Lh56WLokNuxg==}
+
+  pino-http@11.0.0:
+    resolution: {integrity: sha512-wqg5XIAGRRIWtTk8qPGxkbrfiwEWz1lgedVLvhLALudKXvg1/L2lTFgTGPJ4Z2e3qcRmxoFxDuSdMdMGNM6I1g==}
+
+  pino-pretty@13.1.3:
+    resolution: {integrity: sha512-ttXRkkOz6WWC95KeY9+xxWL6AtImwbyMHrL1mSwqwW9u+vLp/WIElvHvCSDg0xO/Dzrggz1zv3rN5ovTRVowKg==}
+    hasBin: true
+
+  pino-std-serializers@7.1.0:
+    resolution: {integrity: sha512-BndPH67/JxGExRgiX1dX0w1FvZck5Wa4aal9198SrRhZjH3GxKQUKIBnYJTdj2HDN3UQAS06HlfcSbQj2OHmaw==}
+
+  pino@10.3.1:
+    resolution: {integrity: sha512-r34yH/GlQpKZbU1BvFFqOjhISRo1MNx1tWYsYvmj6KIRHSPMT2+yHOEb1SG6NMvRoHRF0a07kCOox/9yakl1vg==}
+    hasBin: true
+
+  pirates@4.0.7:
+    resolution: {integrity: sha512-TfySrs/5nm8fQJDcBDuUng3VOUKsd7S+zqvbOTiGXHfxX4wK31ard+hoNuvkicM/2YFzlpDgABOevKSsB4G/FA==}
+    engines: {node: '>= 6'}
+
+  pkg-dir@4.2.0:
+    resolution: {integrity: sha512-HRDzbaKjC+AOWVXxAU/x54COGeIv9eb+6CkDSQoNTt4XyWoIJvuPsXizxu/Fr23EiekbtZwmh1IcIG/l/a10GQ==}
+    engines: {node: '>=8'}
+
+  pkg-types@2.3.1:
+    resolution: {integrity: sha512-y+ichcgc2LrADuhLNAx8DFjVfgz91pRxfZdI3UDhxHvcVEZsenLO+7XaU5vOp0u/7V/wZ+plyuQxtrDlZJ+yeg==}
+
+  pluralize@8.0.0:
+    resolution: {integrity: sha512-Nc3IT5yHzflTfbjgqWcCPpo7DaKy4FnpB0l/zCAW0Tc7jxAiuqSxHasntB3D7887LSrA93kDJ9IXovxJYxyLCA==}
+    engines: {node: '>=4'}
+
+  possible-typed-array-names@1.1.0:
+    resolution: {integrity: sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg==}
+    engines: {node: '>= 0.4'}
+
+  postcss@8.5.23:
+    resolution: {integrity: sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==}
+    engines: {node: ^10 || ^12 || >=14}
+
+  postcss@8.5.26:
+    resolution: {integrity: sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==}
+    engines: {node: ^10 || ^12 || >=14}
+
+  prelude-ls@1.2.1:
+    resolution: {integrity: sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==}
+    engines: {node: '>= 0.8.0'}
+
+  prettier-plugin-tailwindcss@0.6.14:
+    resolution: {integrity: sha512-pi2e/+ZygeIqntN+vC573BcW5Cve8zUB0SSAGxqpB4f96boZF4M3phPVoOFCeypwkpRYdi7+jQ5YJJUwrkGUAg==}
+    engines: {node: '>=14.21.3'}
+    peerDependencies:
+      '@ianvs/prettier-plugin-sort-imports': '*'
+      '@prettier/plugin-hermes': '*'
+      '@prettier/plugin-oxc': '*'
+      '@prettier/plugin-pug': '*'
+      '@shopify/prettier-plugin-liquid': '*'
+      '@trivago/prettier-plugin-sort-imports': '*'
+      '@zackad/prettier-plugin-twig': '*'
+      prettier: ^3.0
+      prettier-plugin-astro: '*'
+      prettier-plugin-css-order: '*'
+      prettier-plugin-import-sort: '*'
+      prettier-plugin-jsdoc: '*'
+      prettier-plugin-marko: '*'
+      prettier-plugin-multiline-arrays: '*'
+      prettier-plugin-organize-attributes: '*'
+      prettier-plugin-organize-imports: '*'
+      prettier-plugin-sort-imports: '*'
+      prettier-plugin-style-order: '*'
+      prettier-plugin-svelte: '*'
+    peerDependenciesMeta:
+      '@ianvs/prettier-plugin-sort-imports':
+        optional: true
+      '@prettier/plugin-hermes':
+        optional: true
+      '@prettier/plugin-oxc':
+        optional: true
+      '@prettier/plugin-pug':
+        optional: true
+      '@shopify/prettier-plugin-liquid':
+        optional: true
+      '@trivago/prettier-plugin-sort-imports':
+        optional: true
+      '@zackad/prettier-plugin-twig':
+        optional: true
+      prettier-plugin-astro:
+        optional: true
+      prettier-plugin-css-order:
+        optional: true
+      prettier-plugin-import-sort:
+        optional: true
+      prettier-plugin-jsdoc:
+        optional: true
+      prettier-plugin-marko:
+        optional: true
+      prettier-plugin-multiline-arrays:
+        optional: true
+      prettier-plugin-organize-attributes:
+        optional: true
+      prettier-plugin-organize-imports:
+        optional: true
+      prettier-plugin-sort-imports:
+        optional: true
+      prettier-plugin-style-order:
+        optional: true
+      prettier-plugin-svelte:
+        optional: true
+
+  prettier@3.9.6:
+    resolution: {integrity: sha512-OpN0zzVdiaiAhxpuuj5efpIS4sY9j7bY6uR5mnj5yPzGkdkjNKSJeUThPb60Jw29QuAZgA4o+/iB49kFiaBX6g==}
+    engines: {node: '>=14'}
+    hasBin: true
+
+  pretty-format@30.4.1:
+    resolution: {integrity: sha512-K6KiKMHTL4jjX4u3Kir2EW07nRfcqVTXIImx50wbjHQTcZPgg+gjVeNTIT3l3L1Rd4UefxfogquC9J37SoFyyw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  prisma@6.19.3:
+    resolution: {integrity: sha512-++ZJ0ijLrDJF6hNB4t4uxg2br3fC4H9Yc9tcbjr2fcNFP3rh/SBNrAgjhsqBU4Ght8JPrVofG/ZkXfnSfnYsFg==}
+    engines: {node: '>=18.18'}
+    hasBin: true
+    peerDependencies:
+      typescript: '>=5.1.0'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
+  process-warning@5.1.0:
+    resolution: {integrity: sha512-jQSaVHsPgtyw60e1rQ/A+/ArPEj/S8pS/vFnyGa/gYFXrKk/6RuDkoqVDQ5NI5MmS01698ltlAk0NoDBNLujRw==}
+
+  prop-types@15.8.1:
+    resolution: {integrity: sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==}
+
+  proxy-addr@2.0.7:
+    resolution: {integrity: sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==}
+    engines: {node: '>= 0.10'}
+
+  pump@3.0.4:
+    resolution: {integrity: sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==}
+
+  punycode@2.3.1:
+    resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==}
+    engines: {node: '>=6'}
+
+  pure-rand@6.1.0:
+    resolution: {integrity: sha512-bVWawvoZoBYpp6yIoQtQXHZjmz35RSVHnUOTefl8Vcjr8snTPY1wnpSPMWekcFwbxI6gtmT7rSYPFvz71ldiOA==}
+
+  pure-rand@7.0.1:
+    resolution: {integrity: sha512-oTUZM/NAZS8p7ANR3SHh30kXB+zK2r2BPcEn/awJIbOvq82WoMN4p62AWWp3Hhw50G0xMsw1mhIBLqHw64EcNQ==}
+
+  qs@6.15.3:
+    resolution: {integrity: sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==}
+    engines: {node: '>=0.6'}
+
+  quick-format-unescaped@4.0.4:
+    resolution: {integrity: sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg==}
+
+  range-parser@1.3.0:
+    resolution: {integrity: sha512-hek2mFQpPuI4E1BBKrSto+BU3e3x4xuarsbiwr3+lf7p44juvFMV0XFWQAP3xUyqXA4RrXLIoaSUGbSt056ZMw==}
+    engines: {node: '>= 0.6'}
+
+  raw-body@3.0.2:
+    resolution: {integrity: sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==}
+    engines: {node: '>= 0.10'}
+
+  rc9@2.1.2:
+    resolution: {integrity: sha512-btXCnMmRIBINM2LDZoEmOogIZU7Qe7zn4BpomSKZ/ykbLObuBdvG+mFq11DL6fjH1DRwHhrlgtYWG96bJiC7Cg==}
+
+  react-dom@19.2.8:
+    resolution: {integrity: sha512-rVprimfGBG3DR+Tq0IQG2DT5PxKth1WIGDmj5yPmlzr4YBe7uyE+Du4oVqTDXZSHGGGXRtTJEGSSePyQCMBglQ==}
+    peerDependencies:
+      react: ^19.2.8
+
+  react-is@16.13.1:
+    resolution: {integrity: sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==}
+
+  react-is@18.3.1:
+    resolution: {integrity: sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==}
+
+  react-is@19.2.8:
+    resolution: {integrity: sha512-s5un28nYxKJw5gvUHyW5PCC28CvBqLu9r3cWgzHT4Vo/5fqqkFcdRYsGcKf50WMPpjjFZS5d76fn3YCo2njKwQ==}
+
+  react@19.2.8:
+    resolution: {integrity: sha512-PWaYA1L/q9u2u7xYQi+Y3L3Yfnie7XyLeaJICV1MGD6LprsBxcAqGjYyr0eY3p+QdsA+x/Irkt4Qif8D63+Sbw==}
+    engines: {node: '>=0.10.0'}
+
+  readable-stream@3.6.2:
+    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
+    engines: {node: '>= 6'}
+
+  readdirp@4.1.2:
+    resolution: {integrity: sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg==}
+    engines: {node: '>= 14.18.0'}
+
+  real-require@0.2.0:
+    resolution: {integrity: sha512-57frrGM/OCTLqLOAh0mhVA9VBMHd+9U7Zb2THMGdBUoZVOtGbJzjxsYGDJ3A9AYYCP4hn6y1TVbaOfzWtm5GFg==}
+    engines: {node: '>= 12.13.0'}
+
+  real-require@1.0.0:
+    resolution: {integrity: sha512-P4nbQYQfePJxRSmY+v/KINxVucm4NF3p3s7pJveMTtom52FR4YGltUQLB8idDXwDDWW+eYrWDFbuzUnjoWHF7g==}
+
+  redis-errors@1.2.0:
+    resolution: {integrity: sha512-1qny3OExCf0UvUV/5wpYKf2YwPcOqXzkwKKSmKHiE6ZMQs5heeE/c8eXK+PNllPvmjgAbfnsbpkGZWy8cBpn9w==}
+    engines: {node: '>=4'}
+
+  redis-parser@3.0.0:
+    resolution: {integrity: sha512-DJnGAeenTdpMEH6uAJRK/uiyEIH9WVsUmoLwzudwGJUwZPp80PDBWPHXSAGNPwNvIXAbe7MSUB1zQFugFml66A==}
+    engines: {node: '>=4'}
+
+  reflect-metadata@0.2.2:
+    resolution: {integrity: sha512-urBwgfrvVP/eAyXx4hluJivBKzuEbSQs9rKWCrCkbSxNv8mxPcUZKeuoF3Uy4mJl3Lwprp6yy5/39VWigZ4K6Q==}
+
+  reflect.getprototypeof@1.0.10:
+    resolution: {integrity: sha512-00o4I+DVrefhv+nX0ulyi3biSHCPDe+yLv5o/p6d/UVlirijB8E16FtfwSAi4g3tcqrQ4lRAqQSoFEZJehYEcw==}
+    engines: {node: '>= 0.4'}
+
+  regexp.prototype.flags@1.5.4:
+    resolution: {integrity: sha512-dYqgNSZbDwkaJ2ceRd9ojCGjBq+mOm9LmtXnAnEGyHhN/5R7iDW2TRw3h+o/jCFxus3P2LfWIIiwowAjANm7IA==}
+    engines: {node: '>= 0.4'}
+
+  require-directory@2.1.1:
+    resolution: {integrity: sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==}
+    engines: {node: '>=0.10.0'}
+
+  require-from-string@2.0.2:
+    resolution: {integrity: sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==}
+    engines: {node: '>=0.10.0'}
+
+  resolve-cwd@3.0.0:
+    resolution: {integrity: sha512-OrZaX2Mb+rJCpH/6CpSqt9xFVpN++x01XnN2ie9g6P5/3xelLAkXWVADpdz1IHD/KFfEXyE6V0U01OQ3UO2rEg==}
+    engines: {node: '>=8'}
+
+  resolve-from@4.0.0:
+    resolution: {integrity: sha512-pb/MYmXstAkysRFx8piNI1tGFNQIFA3vkE3Gq4EuA1dF6gHp/+vgZqsCGJapvy8N3Q+4o7FwvquPJcnZ7RYy4g==}
+    engines: {node: '>=4'}
+
+  resolve-from@5.0.0:
+    resolution: {integrity: sha512-qYg9KP24dD5qka9J47d0aVky0N+b4fTU89LN9iDnjB5waksiC49rvMB0PrUJQGoTmH50XPiqOvAjDfaijGxYZw==}
+    engines: {node: '>=8'}
+
+  resolve-pkg-maps@1.0.0:
+    resolution: {integrity: sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw==}
+
+  resolve@2.0.0-next.7:
+    resolution: {integrity: sha512-tqt+NBWwyaMgw3zDsnygx4CByWjQEJHOPMdslYhppaQSJUtL/D4JO9CcBBlhPoI8lz9oJIDXkwXfhF4aWqP8xQ==}
+    engines: {node: '>= 0.4'}
+    hasBin: true
+
+  restore-cursor@3.1.0:
+    resolution: {integrity: sha512-l+sSefzHpj5qimhFSE5a8nufZYAM3sBSVMAPtYkmC+4EH2anSGaEMXSD0izRQbu9nfyQ9y5JrVmp7E8oZrUjvA==}
+    engines: {node: '>=8'}
+
+  router@2.2.0:
+    resolution: {integrity: sha512-nLTrUKm2UyiL7rlhapu/Zl45FwNgkZGaCpZbIHajDYgwlJCOzLSk+cIPAnsEqV955GjILJnKbdQC1nVPz+gAYQ==}
+    engines: {node: '>= 18'}
+
+  rxjs@7.8.1:
+    resolution: {integrity: sha512-AA3TVj+0A2iuIoQkWEK/tqFjBq2j+6PO6Y0zJcvzLAFhEFIO3HL0vls9hWLncZbAAbK0mar7oZ4V079I/qPMxg==}
+
+  rxjs@7.8.2:
+    resolution: {integrity: sha512-dhKf903U/PQZY6boNNtAGdWbG85WAbjT/1xYoZIC7FAY0yWapOBQVsVrDl58W86//e1VpMNBtRV4MaXfdMySFA==}
+
+  safe-array-concat@1.1.4:
+    resolution: {integrity: sha512-wtZlHyOje6OZTGqAoaDKxFkgRtkF9CnHAVnCHKfuj200wAgL+bSJhdsCD2l0Qx/2ekEXjPWcyKkfGb5CPboslg==}
+    engines: {node: '>=0.4'}
+
+  safe-buffer@5.2.1:
+    resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
+
+  safe-push-apply@1.0.0:
+    resolution: {integrity: sha512-iKE9w/Z7xCzUMIZqdBsp6pEQvwuEebH4vdpjcDWnyzaI6yl6O9FHvVpmGelvEHNsoY6wGblkxR6Zty/h00WiSA==}
+    engines: {node: '>= 0.4'}
+
+  safe-regex-test@1.1.0:
+    resolution: {integrity: sha512-x/+Cz4YrimQxQccJf5mKEbIa1NzeCRNI5Ecl/ekmlYaampdNLPalVyIcCZNNH3MvmqBugV5TMYZXv0ljslUlaw==}
+    engines: {node: '>= 0.4'}
+
+  safe-stable-stringify@2.5.0:
+    resolution: {integrity: sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==}
+    engines: {node: '>=10'}
+
+  safer-buffer@2.1.2:
+    resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
+
+  scheduler@0.27.0:
+    resolution: {integrity: sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q==}
+
+  schema-utils@3.3.0:
+    resolution: {integrity: sha512-pN/yOAvcC+5rQ5nERGuwrjLlYvLTbCibnZ1I7B1LaiAz9BRBlE9GMgE/eqV30P7aJQUf7Ddimy/RsbYO/GrVGg==}
+    engines: {node: '>= 10.13.0'}
+
+  schema-utils@4.3.3:
+    resolution: {integrity: sha512-eflK8wEtyOE6+hsaRVPxvUKYCpRgzLqDTb8krvAsRIwOGlHoSgYLgBXoubGgLd2fT41/OUYdb48v4k4WWHQurA==}
+    engines: {node: '>= 10.13.0'}
+
+  secure-json-parse@4.1.0:
+    resolution: {integrity: sha512-l4KnYfEyqYJxDwlNVyRfO2E4NTHfMKAWdUuA8J0yve2Dz/E/PdBepY03RvyJpssIpRFwJoCD55wA+mEDs6ByWA==}
+
+  semver@6.3.1:
+    resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==}
+    hasBin: true
+
+  semver@7.8.5:
+    resolution: {integrity: sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  send@1.2.1:
+    resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==}
+    engines: {node: '>= 18'}
+
+  serve-static@2.2.1:
+    resolution: {integrity: sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==}
+    engines: {node: '>= 18'}
+
+  set-function-length@1.2.2:
+    resolution: {integrity: sha512-pgRc4hJ4/sNjWCSS9AmnS40x3bNMDTknHgL5UaMBTMyJnU90EgWh1Rz+MC9eFu4BuN/UwZjKQuY/1v3rM7HMfg==}
+    engines: {node: '>= 0.4'}
+
+  set-function-name@2.0.2:
+    resolution: {integrity: sha512-7PGFlmtwsEADb0WYyvCMa1t+yke6daIG4Wirafur5kcf+MhUnPms1UeR0CKQdTZD81yESwMHbtn+TR+dMviakQ==}
+    engines: {node: '>= 0.4'}
+
+  set-proto@1.0.0:
+    resolution: {integrity: sha512-RJRdvCo6IAnPdsvP/7m6bsQqNnn1FCBX5ZNtFL98MmFF/4xAIJTIg1YbHW5DC2W5SKZanrC6i4HsJqlajw/dZw==}
+    engines: {node: '>= 0.4'}
+
+  setprototypeof@1.2.0:
+    resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==}
+
+  sharp@0.35.3:
+    resolution: {integrity: sha512-ej0zVHuZGHCiABXcNxeYhpRnPNPAcvbG8RMdBAhDAxLKkCRVSpK3Iyu7qbqw3JMzoj0REeM6f3tJLtVwl0023Q==}
+    engines: {node: '>=20.9.0'}
+    peerDependencies:
+      '@types/node': '*'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  shebang-command@2.0.0:
+    resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
+    engines: {node: '>=8'}
+
+  shebang-regex@3.0.0:
+    resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==}
+    engines: {node: '>=8'}
+
+  side-channel-list@1.0.1:
+    resolution: {integrity: sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==}
+    engines: {node: '>= 0.4'}
+
+  side-channel-map@1.0.1:
+    resolution: {integrity: sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==}
+    engines: {node: '>= 0.4'}
+
+  side-channel-weakmap@1.0.2:
+    resolution: {integrity: sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==}
+    engines: {node: '>= 0.4'}
+
+  side-channel@1.1.1:
+    resolution: {integrity: sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==}
+    engines: {node: '>= 0.4'}
+
+  signal-exit@3.0.7:
+    resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
+
+  signal-exit@4.1.0:
+    resolution: {integrity: sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==}
+    engines: {node: '>=14'}
+
+  slash@3.0.0:
+    resolution: {integrity: sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==}
+    engines: {node: '>=8'}
+
+  sonic-boom@4.2.1:
+    resolution: {integrity: sha512-w6AxtubXa2wTXAUsZMMWERrsIRAdrK0Sc+FUytWvYAhBJLyuI4llrMIC1DtlNSdI99EI86KZum2MMq3EAZlF9Q==}
+
+  source-map-js@1.2.1:
+    resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
+    engines: {node: '>=0.10.0'}
+
+  source-map-support@0.5.13:
+    resolution: {integrity: sha512-SHSKFHadjVA5oR4PPqhtAVdcBWwRYVd6g6cAXnIbRiIwc2EhPrTuKUBdSLvlEKyIP3GCf89fltvcZiP9MMFA1w==}
+
+  source-map-support@0.5.21:
+    resolution: {integrity: sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==}
+
+  source-map@0.6.1:
+    resolution: {integrity: sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==}
+    engines: {node: '>=0.10.0'}
+
+  source-map@0.7.4:
+    resolution: {integrity: sha512-l3BikUxvPOcn5E74dZiq5BGsTb5yEwhaTSzccU6t4sDOH8NWJCstKO5QT2CvtFoK6F0saL7p9xHAqHOlCPJygA==}
+    engines: {node: '>= 8'}
+
+  split2@4.2.0:
+    resolution: {integrity: sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==}
+    engines: {node: '>= 10.x'}
+
+  sprintf-js@1.0.3:
+    resolution: {integrity: sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==}
+
+  stable-hash-x@0.2.0:
+    resolution: {integrity: sha512-o3yWv49B/o4QZk5ZcsALc6t0+eCelPc44zZsLtCQnZPDwFpDYSWcDnrv2TtMmMbQ7uKo3J0HTURCqckw23czNQ==}
+    engines: {node: '>=12.0.0'}
+
+  stack-utils@2.0.6:
+    resolution: {integrity: sha512-XlkWvfIm6RmsWtNJx+uqtKLS8eqFbxUg0ZzLXqY0caEy9l7hruX8IpiDnjsLavoBgqCCR71TqWO8MaXYheJ3RQ==}
+    engines: {node: '>=10'}
+
+  standard-as-callback@2.1.0:
+    resolution: {integrity: sha512-qoRRSyROncaz1z0mvYqIE4lCd9p2R90i6GxW3uZv5ucSu8tU7B5HXUP1gG8pVZsYNVaXjk8ClXHPttLyxAL48A==}
+
+  statuses@2.0.2:
+    resolution: {integrity: sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==}
+    engines: {node: '>= 0.8'}
+
+  stop-iteration-iterator@1.1.0:
+    resolution: {integrity: sha512-eLoXW/DHyl62zxY4SCaIgnRhuMr6ri4juEYARS8E6sCEqzKpOiE521Ucofdx+KnDZl5xmvGYaaKCk5FEOxJCoQ==}
+    engines: {node: '>= 0.4'}
+
+  streamsearch@1.1.0:
+    resolution: {integrity: sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==}
+    engines: {node: '>=10.0.0'}
+
+  string-length@4.0.2:
+    resolution: {integrity: sha512-+l6rNN5fYHNhZZy41RXsYptCjA2Igmq4EG7kZAYFQI1E1VTXarr6ZPXBg6eq7Y6eK4FEhY6AJlyuFIb/v/S0VQ==}
+    engines: {node: '>=10'}
+
+  string-width@4.2.3:
+    resolution: {integrity: sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==}
+    engines: {node: '>=8'}
+
+  string-width@5.1.2:
+    resolution: {integrity: sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==}
+    engines: {node: '>=12'}
+
+  string.prototype.includes@2.0.1:
+    resolution: {integrity: sha512-o7+c9bW6zpAdJHTtujeePODAhkuicdAryFsfVKwA+wGw89wJ4GTY484WTucM9hLtDEOpOvI+aHnzqnC5lHp4Rg==}
+    engines: {node: '>= 0.4'}
+
+  string.prototype.matchall@4.0.12:
+    resolution: {integrity: sha512-6CC9uyBL+/48dYizRf7H7VAYCMCNTBeM78x/VTUe9bFEaxBepPJDa1Ow99LqI/1yF7kuy7Q3cQsYMrcjGUcskA==}
+    engines: {node: '>= 0.4'}
+
+  string.prototype.repeat@1.0.0:
+    resolution: {integrity: sha512-0u/TldDbKD8bFCQ/4f5+mNRrXwZ8hg2w7ZR8wa16e8z9XpePWl3eGEcUD0OXpEH/VJH/2G3gjUtR3ZOiBe2S/w==}
+
+  string.prototype.trim@1.2.11:
+    resolution: {integrity: sha512-PwvK7BU+CMTJGYQCTZb5RWXIML92lftJLhQz1tBzgKiqGxJaMlBAa48POXaNAC2s4y8jr3EFqrkF9+44neS46w==}
+    engines: {node: '>= 0.4'}
+
+  string.prototype.trimend@1.0.10:
+    resolution: {integrity: sha512-2+3aDAOmPTmuFwjDnmJG2ctEkQKVki7vOSqaxkv42Mowj1V6PnvuwFCRrR5lChUux1TBskPjfkeTOhqczDMxTw==}
+    engines: {node: '>= 0.4'}
+
+  string.prototype.trimstart@1.0.8:
+    resolution: {integrity: sha512-UXSH262CSZY1tfu3G3Secr6uGLCFVPMhIqHjlgCUtCCcgihYc/xKs9djMTMUOb2j1mVSeU8EU6NWc/iQKU6Gfg==}
+    engines: {node: '>= 0.4'}
+
+  string_decoder@1.3.0:
+    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
+
+  strip-ansi@6.0.1:
+    resolution: {integrity: sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==}
+    engines: {node: '>=8'}
+
+  strip-ansi@7.2.0:
+    resolution: {integrity: sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==}
+    engines: {node: '>=12'}
+
+  strip-bom@3.0.0:
+    resolution: {integrity: sha512-vavAMRXOgBVNF6nyEEmL3DBK19iRpDcoIwW+swQ+CbGiu7lju6t+JklA1MHweoWtadgt4ISVUsXLyDq34ddcwA==}
+    engines: {node: '>=4'}
+
+  strip-bom@4.0.0:
+    resolution: {integrity: sha512-3xurFv5tEgii33Zi8Jtp55wEIILR9eh34FAW00PZf+JnSsTmV/ioewSgQl97JHvgjoRGwPShsWm+IdrxB35d0w==}
+    engines: {node: '>=8'}
+
+  strip-final-newline@2.0.0:
+    resolution: {integrity: sha512-BrpvfNAE3dcvq7ll3xVumzjKjZQ5tI1sEUIKr3Uoks0XUl45St3FlatVqef9prk4jRDzhW6WZg+3bk93y6pLjA==}
+    engines: {node: '>=6'}
+
+  strip-json-comments@3.1.1:
+    resolution: {integrity: sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig==}
+    engines: {node: '>=8'}
+
+  strip-json-comments@5.0.3:
+    resolution: {integrity: sha512-1tB5mhVo7U+ETBKNf92xT4hrQa3pm0MZ0PQvuDnWgAAGHDsfp4lPSpiS6psrSiet87wyGPh9ft6wmhOMQ0hDiw==}
+    engines: {node: '>=14.16'}
+
+  strtok3@10.3.5:
+    resolution: {integrity: sha512-ki4hZQfh5rX0QDLLkOCj+h+CVNkqmp/CMf8v8kZpkNVK6jGQooMytqzLZYUVYIZcFZ6yDB70EfD8POcFXiF5oA==}
+    engines: {node: '>=18'}
+
+  styled-jsx@5.1.6:
+    resolution: {integrity: sha512-qSVyDTeMotdvQYoHWLNGwRFJHC+i+ZvdBRYosOFgC+Wg1vx4frN2/RG/NA7SYqqvKNLf39P2LSRA2pu6n0XYZA==}
+    engines: {node: '>= 12.0.0'}
+    peerDependencies:
+      '@babel/core': '*'
+      babel-plugin-macros: '*'
+      react: '>= 16.8.0 || 17.x.x || ^18.0.0-0 || ^19.0.0-0'
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+      babel-plugin-macros:
+        optional: true
+
+  superagent@10.3.0:
+    resolution: {integrity: sha512-B+4Ik7ROgVKrQsXTV0Jwp2u+PXYLSlqtDAhYnkkD+zn3yg8s/zjA2MeGayPoY/KICrbitwneDHrjSotxKL+0XQ==}
+    engines: {node: '>=14.18.0'}
+
+  supertest@7.2.2:
+    resolution: {integrity: sha512-oK8WG9diS3DlhdUkcFn4tkNIiIbBx9lI2ClF8K+b2/m8Eyv47LSawxUzZQSNKUrVb2KsqeTDCcjAAVPYaSLVTA==}
+    engines: {node: '>=14.18.0'}
+
+  supports-color@7.2.0:
+    resolution: {integrity: sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==}
+    engines: {node: '>=8'}
+
+  supports-color@8.1.1:
+    resolution: {integrity: sha512-MpUEN2OodtUzxvKQl72cUF7RQ5EiHsGvSsVG0ia9c5RbWGL2CI4C7EpPS8UTBIplnlzZiNuV56w+FuNxy3ty2Q==}
+    engines: {node: '>=10'}
+
+  supports-preserve-symlinks-flag@1.0.0:
+    resolution: {integrity: sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==}
+    engines: {node: '>= 0.4'}
+
+  swagger-ui-dist@5.32.8:
+    resolution: {integrity: sha512-dgMdWXIgnI4zX4OPhKEdWnlDODbgm8W3AX0Ivn/BBqcUh6xZsBxhZMnvk6DJyRz1BTrj8dPxtarmEGgkz30oyA==}
+
+  symbol-observable@4.0.0:
+    resolution: {integrity: sha512-b19dMThMV4HVFynSAM1++gBHAbk2Tc/osgLIBZMKsyqh34jb2e8Os7T6ZW/Bt3pJFdBTd2JwAnAAEQV7rSNvcQ==}
+    engines: {node: '>=0.10'}
+
+  synckit@0.11.13:
+    resolution: {integrity: sha512-eNRKgb3z66Yp3D2CixVujOUvXLFUTij/zVnV8KRyvFdQwpz7I5DS8UfRkTeLzb64u+dkzDSdelE24izu+zSSUg==}
+    engines: {node: ^14.18.0 || >=16.0.0}
+
+  tailwind-merge@3.6.0:
+    resolution: {integrity: sha512-uxL7qAVQriqRQPAyK3pj66VqskWqoZ37PW94jwOTwNfq/z9oyu1V+eqrZqtR2+fCiXdYOZe/Modt8GtvqNzu+w==}
+
+  tailwindcss@4.3.3:
+    resolution: {integrity: sha512-gOhV3P7ufE62QDGg1zVaTgCR+EtPv92k2nIhVcVKcLmxT1sUBsQGhnZj175j+MqRt4zLF7ic+sCYjfhxMxj7YQ==}
+
+  tapable@2.3.3:
+    resolution: {integrity: sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A==}
+    engines: {node: '>=6'}
+
+  terser-webpack-plugin@5.6.1:
+    resolution: {integrity: sha512-201R5j+sJpK8nFWwKVyNfZot8FaJbLZDq5evriVzbV1wDtSXDjRUDRfJzHpAaxFDMEhsZL1QkeqM61wgsS3KaQ==}
+    engines: {node: '>= 10.13.0'}
+    peerDependencies:
+      '@minify-html/node': '*'
+      '@swc/core': '*'
+      '@swc/css': '*'
+      '@swc/html': '*'
+      clean-css: '*'
+      cssnano: '*'
+      csso: '*'
+      esbuild: '*'
+      html-minifier-terser: '*'
+      lightningcss: '*'
+      postcss: '*'
+      uglify-js: '*'
+      webpack: ^5.1.0
+    peerDependenciesMeta:
+      '@minify-html/node':
+        optional: true
+      '@swc/core':
+        optional: true
+      '@swc/css':
+        optional: true
+      '@swc/html':
+        optional: true
+      clean-css:
+        optional: true
+      cssnano:
+        optional: true
+      csso:
+        optional: true
+      esbuild:
+        optional: true
+      html-minifier-terser:
+        optional: true
+      lightningcss:
+        optional: true
+      postcss:
+        optional: true
+      uglify-js:
+        optional: true
+
+  terser@5.49.2:
+    resolution: {integrity: sha512-rGbJiKeQ4WDe3EXlDAIaQcwftVfv2Q8o1awFNfvXolJYKkb1AuZY1RTOmqx4LJXZENbWZA7eIsYGHuEzHsi1nQ==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  test-exclude@6.0.0:
+    resolution: {integrity: sha512-cAGWPIyOHU6zlmg88jwm7VRyXnMN7iV68OGAbYDk/Mh/xC/pzVPlQtY6ngoIH/5/tciuhGfvESU8GrHrcxD56w==}
+    engines: {node: '>=8'}
+
+  thread-stream@4.2.0:
+    resolution: {integrity: sha512-e2zZ96wSChazBsbENf/Pcm/4swHt2cEKQ92rhUjkL9GCKiTDJIaTBenjE/m9DXi0QBmTMDkFDdOomUy20A1tDQ==}
+    engines: {node: '>=20'}
+
+  tinyexec@1.3.0:
+    resolution: {integrity: sha512-QKAl9m8gWWGHV8jZcPeym6j+XULi6tOf1mT83WYJ4Lk2ytW/uwAWkrP0uFsdoYMdueVJ0qs26wZ+23xeB4ibNQ==}
+    engines: {node: '>=18'}
+
+  tinyglobby@0.2.17:
+    resolution: {integrity: sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==}
+    engines: {node: '>=12.0.0'}
+
+  tmpl@1.0.5:
+    resolution: {integrity: sha512-3f0uOEAQwIqGuWW2MVzYg8fV/QNnc/IpuJNG837rLuczAaLVHslWHZQj4IGiEl5Hs3kkbhwL9Ab7Hrsmuj+Smw==}
+
+  toidentifier@1.0.1:
+    resolution: {integrity: sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==}
+    engines: {node: '>=0.6'}
+
+  token-types@6.1.2:
+    resolution: {integrity: sha512-dRXchy+C0IgK8WPC6xvCHFRIWYUbqqdEIKPaKo/AcTUNzwLTK6AH7RjdLWsEZcAN/TBdtfUw3PYEgPr5VPr6ww==}
+    engines: {node: '>=14.16'}
+
+  ts-api-utils@2.5.0:
+    resolution: {integrity: sha512-OJ/ibxhPlqrMM0UiNHJ/0CKQkoKF243/AEmplt3qpRgkW8VG7IfOS41h7V8TjITqdByHzrjcS/2si+y4lIh8NA==}
+    engines: {node: '>=18.12'}
+    peerDependencies:
+      typescript: '>=4.8.4'
+
+  ts-jest@29.4.12:
+    resolution: {integrity: sha512-Ov6ClY53Fflh6BGAnY2DlTq1hYDrTycz2PVTXBWFW2CU+9zrEqAp9fWdGXl42EXO5RLSFAcAZ2JFKbP+zBTFfw==}
+    engines: {node: ^14.15.0 || ^16.10.0 || ^18.0.0 || >=20.0.0}
+    hasBin: true
+    peerDependencies:
+      '@babel/core': '>=7.0.0-beta.0 <8'
+      '@jest/transform': ^29.0.0 || ^30.0.0
+      '@jest/types': ^29.0.0 || ^30.0.0
+      babel-jest: ^29.0.0 || ^30.0.0
+      esbuild: '*'
+      jest: ^29.0.0 || ^30.0.0
+      jest-util: ^29.0.0 || ^30.0.0
+      typescript: '>=4.3 <7'
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+      '@jest/transform':
+        optional: true
+      '@jest/types':
+        optional: true
+      babel-jest:
+        optional: true
+      esbuild:
+        optional: true
+      jest-util:
+        optional: true
+
+  tsconfig-paths-webpack-plugin@4.2.0:
+    resolution: {integrity: sha512-zbem3rfRS8BgeNK50Zz5SIQgXzLafiHjOwUAvk/38/o1jHn/V5QAgVUcz884or7WYcPaH3N2CIfUc2u0ul7UcA==}
+    engines: {node: '>=10.13.0'}
+
+  tsconfig-paths@4.2.0:
+    resolution: {integrity: sha512-NoZ4roiN7LnbKn9QqE1amc9DJfzvZXxF4xDavcOWt1BPkdx+m+0gJuPM+S0vCe7zTJMYUP0R8pO2XMr+Y8oLIg==}
+    engines: {node: '>=6'}
+
+  tslib@2.8.1:
+    resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
+
+  tsx@4.23.12:
+    resolution: {integrity: sha512-FDf4L4sYzKtzWYhU/Xm0AQFdTjdIxNo9ElTf2mxXM6k8YMHXzYUe4yODVaXP4V9uMFbVg8c0qyBccK2OOxb45Q==}
+    engines: {node: '>=18.0.0'}
+    hasBin: true
+
+  turbo@2.10.9:
+    resolution: {integrity: sha512-Yl9+ukxH+UmPtKidpDkjn82tvPoEvFNb9UACd9vUomN1Ft0cwl3rx0P8yC1D93W9EOsWRMjllvIDG8y25sFOog==}
+    hasBin: true
+
+  type-check@0.4.0:
+    resolution: {integrity: sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==}
+    engines: {node: '>= 0.8.0'}
+
+  type-detect@4.0.8:
+    resolution: {integrity: sha512-0fr/mIH1dlO+x7TlcMy+bIDqKPsw/70tVyeHW787goQjhmqaZe10uwLujubK9q9Lg6Fiho1KUKDYz0Z7k7g5/g==}
+    engines: {node: '>=4'}
+
+  type-fest@0.20.2:
+    resolution: {integrity: sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==}
+    engines: {node: '>=10'}
+
+  type-fest@0.21.3:
+    resolution: {integrity: sha512-t0rzBq87m3fVcduHDUFhKmyyX+9eo6WQjZvf51Ea/M0Q7+T374Jp1aUiyUl0GKxp8M/OETVHSDvmkyPgvX+X2w==}
+    engines: {node: '>=10'}
+
+  type-fest@4.41.0:
+    resolution: {integrity: sha512-TeTSQ6H5YHvpqVwBRcnLDCBnDOHWYu7IvGbHT6N8AOymcr9PJGjc1GTtiWZTYg0NCgYwvnYWEkVChQAr9bjfwA==}
+    engines: {node: '>=16'}
+
+  type-is@1.6.18:
+    resolution: {integrity: sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==}
+    engines: {node: '>= 0.6'}
+
+  type-is@2.1.0:
+    resolution: {integrity: sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==}
+    engines: {node: '>= 18'}
+
+  typed-array-buffer@1.0.3:
+    resolution: {integrity: sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==}
+    engines: {node: '>= 0.4'}
+
+  typed-array-byte-length@1.0.3:
+    resolution: {integrity: sha512-BaXgOuIxz8n8pIq3e7Atg/7s+DpiYrxn4vdot3w9KbnBhcRQq6o3xemQdIfynqSeXeDrF32x+WvfzmOjPiY9lg==}
+    engines: {node: '>= 0.4'}
+
+  typed-array-byte-offset@1.0.4:
+    resolution: {integrity: sha512-bTlAFB/FBYMcuX81gbL4OcpH5PmlFHqlCCpAl8AlEzMz5k53oNDvN8p1PNOWLEmI2x4orp3raOFB51tv9X+MFQ==}
+    engines: {node: '>= 0.4'}
+
+  typed-array-length@1.0.8:
+    resolution: {integrity: sha512-phPGCwqr2+Qo0fwniCE8e4pKnGu/yFb5nD5Y8bf0EEeiI5GklnACYA9GFy/DrAeRrKHXvHn+1SUsOWgJp6RO+g==}
+    engines: {node: '>= 0.4'}
+
+  typedarray@0.0.6:
+    resolution: {integrity: sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==}
+
+  typescript-eslint@8.67.0:
+    resolution: {integrity: sha512-S2udFs8tCKEKffuJ4TB1idGUZiXdCPGi3IPBGWXarbLQ5UPXORV8QEVzJ4gCRduURMb5EkpNCdjbk0eDIuI8Yg==}
+    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
+    peerDependencies:
+      eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
+      typescript: '>=4.8.4 <6.1.0'
+
+  typescript@5.9.3:
+    resolution: {integrity: sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==}
+    engines: {node: '>=14.17'}
+    hasBin: true
+
+  uglify-js@3.19.3:
+    resolution: {integrity: sha512-v3Xu+yuwBXisp6QYTcH4UbH+xYJXqnq2m/LtQVWKWzYc1iehYnLixoQDN9FH6/j9/oybfd6W9Ghwkl8+UMKTKQ==}
+    engines: {node: '>=0.8.0'}
+    hasBin: true
+
+  uid@2.0.2:
+    resolution: {integrity: sha512-u3xV3X7uzvi5b1MncmZo3i2Aw222Zk1keqLA1YkHldREkAhAqi65wuPfe7lHx8H/Wzy+8CE7S7uS3jekIM5s8g==}
+    engines: {node: '>=8'}
+
+  uint8array-extras@1.5.0:
+    resolution: {integrity: sha512-rvKSBiC5zqCCiDZ9kAOszZcDvdAHwwIKJG33Ykj43OKcWsnmcBRL09YTU4nOeHZ8Y2a7l1MgTd08SBe9A8Qj6A==}
+    engines: {node: '>=18'}
+
+  unbox-primitive@1.1.0:
+    resolution: {integrity: sha512-nWJ91DjeOkej/TA8pXQ3myruKpKEYgqvpw9lz4OPHj/NWFNluYrjbz9j01CJ8yKQd2g4jFoOkINCTW2I5LEEyw==}
+    engines: {node: '>= 0.4'}
+
+  undici-types@6.21.0:
+    resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
+
+  universalify@2.0.1:
+    resolution: {integrity: sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==}
+    engines: {node: '>= 10.0.0'}
+
+  unpipe@1.0.0:
+    resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==}
+    engines: {node: '>= 0.8'}
+
+  unrs-resolver@1.12.2:
+    resolution: {integrity: sha512-dmlRxBJJayXjqTwC+JtF1HhJmgf3ftQ3YejFcZrf4+KKtJv0qDsK1pjqaaVjG7wJ5NJ6UVP1OqRMQ71Z4C3rxQ==}
+
+  update-browserslist-db@1.3.1:
+    resolution: {integrity: sha512-ZZ61DsRsOnakl74HAmp3oSN4aXUmEWXf+i/yv0h7tIBfICc3VdrFErQKUUKPgu3AMsTUMbcongALEN4l6GSUrQ==}
+    hasBin: true
+    peerDependencies:
+      browserslist: '>= 4.21.0'
+
+  uri-js@4.4.1:
+    resolution: {integrity: sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==}
+
+  util-deprecate@1.0.2:
+    resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
+
+  uuid@13.0.2:
+    resolution: {integrity: sha512-vzi9uRZ926x4XV73S/4qQaTwPXM2JBj6/6lI/byHH1jOpCzb0zDbfytgA9LcN/hzb2l7WQSQnxITOVx5un/wGw==}
+    hasBin: true
+
+  v8-to-istanbul@9.3.0:
+    resolution: {integrity: sha512-kiGUalWN+rgBJ/1OHZsBtU4rXZOfj/7rKQxULKlIzwzQSvMJUUNgPwJEEh7gU6xEVxC0ahoOBvN2YI8GH6FNgA==}
+    engines: {node: '>=10.12.0'}
+
+  vary@1.1.2:
+    resolution: {integrity: sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==}
+    engines: {node: '>= 0.8'}
+
+  walker@1.0.8:
+    resolution: {integrity: sha512-ts/8E8l5b7kY0vlWLewOkDXMmPdLcVV4GmOQLyxuSswIJsweeFZtAsMF7k1Nszz+TYBQrlYRmzOnr398y1JemQ==}
+
+  watchpack@2.5.2:
+    resolution: {integrity: sha512-6i/00NBjP4yGPs+caKSyRfpTF/8Torsu0MOW3mMzIbhgISFder8i7xbqgHlLMwJrdiN8ndBV3UA1/AfzPSr+jg==}
+    engines: {node: '>=10.13.0'}
+
+  wcwidth@1.0.1:
+    resolution: {integrity: sha512-XHPEwS0q6TaxcvG85+8EYkbiCux2XtWG2mkc47Ng2A77BQu9+DqIOJldST4HgPkuea7dvKSj5VgX3P1d4rW8Tg==}
+
+  webpack-node-externals@3.0.0:
+    resolution: {integrity: sha512-LnL6Z3GGDPht/AigwRh2dvL9PQPFQ8skEpVrWZXLWBYmqcaojHNN0onvHzie6rq7EWKrrBfPYqNEzTJgiwEQDQ==}
+    engines: {node: '>=6'}
+
+  webpack-sources@3.5.1:
+    resolution: {integrity: sha512-jyuiGJdtvY434z5bUZrjz67v76/ePNvFZTp9Mdz29IlH4+GPsgyGjiv0fKI+M7BdkU6ADjulUcKAd3tUK3WlEw==}
+    engines: {node: '>=10.13.0'}
+
+  webpack@5.106.2:
+    resolution: {integrity: sha512-wGN3qcrBQIFmQ/c0AiOAQBvrZ5lmY8vbbMv4Mxfgzqd/B6+9pXtLo73WuS1dSGXM5QYY3hZnIbvx+K1xxe6FyA==}
+    engines: {node: '>=10.13.0'}
+    hasBin: true
+    peerDependencies:
+      webpack-cli: '*'
+    peerDependenciesMeta:
+      webpack-cli:
+        optional: true
+
+  which-boxed-primitive@1.1.1:
+    resolution: {integrity: sha512-TbX3mj8n0odCBFVlY8AxkqcHASw3L60jIuF8jFP78az3C2YhmGvqbHBpAjTRH2/xqYunrJ9g1jSyjCjpoWzIAA==}
+    engines: {node: '>= 0.4'}
+
+  which-builtin-type@1.2.1:
+    resolution: {integrity: sha512-6iBczoX+kDQ7a3+YJBnh3T+KZRxM/iYNPXicqk66/Qfm1b93iu+yOImkg0zHbj5LNOcNv1TEADiZ0xa34B4q6Q==}
+    engines: {node: '>= 0.4'}
+
+  which-collection@1.0.2:
+    resolution: {integrity: sha512-K4jVyjnBdgvc86Y6BkaLZEN933SwYOuBFkdmBu9ZfkcAbdVbpITnDmjvZ/aQjRXQrv5EPkTnD1s39GiiqbngCw==}
+    engines: {node: '>= 0.4'}
+
+  which-typed-array@1.1.22:
+    resolution: {integrity: sha512-fvO4ExWMFsqyhG3AiPAObMuY1lxaqgYcxbc49CNdWDDECOJNgQyvsOWVwbZc+qf3rzRtxojBK+CMEv0Ld5CYpw==}
+    engines: {node: '>= 0.4'}
+
+  which@2.0.2:
+    resolution: {integrity: sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==}
+    engines: {node: '>= 8'}
+    hasBin: true
+
+  widest-line@3.1.0:
+    resolution: {integrity: sha512-NsmoXalsWVDMGupxZ5R08ka9flZjjiLvHVAWYOKtiKM8ujtZWr9cRffak+uSE48+Ob8ObalXpwyeUiyDD6QFgg==}
+    engines: {node: '>=8'}
+
+  word-wrap@1.2.5:
+    resolution: {integrity: sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==}
+    engines: {node: '>=0.10.0'}
+
+  wordwrap@1.0.0:
+    resolution: {integrity: sha512-gvVzJFlPycKc5dZN4yPkP8w7Dc37BtP1yczEneOb4uq34pXZcvrtRTmWV8W+Ume+XCxKgbjM+nevkyFPMybd4Q==}
+
+  wrap-ansi@6.2.0:
+    resolution: {integrity: sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==}
+    engines: {node: '>=8'}
+
+  wrap-ansi@7.0.0:
+    resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==}
+    engines: {node: '>=10'}
+
+  wrap-ansi@8.1.0:
+    resolution: {integrity: sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==}
+    engines: {node: '>=12'}
+
+  wrappy@1.0.2:
+    resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
+
+  write-file-atomic@5.0.1:
+    resolution: {integrity: sha512-+QU2zd6OTD8XWIJCbffaiQeH9U73qIqafo1x6V1snCWYGJf6cVE0cDR4D8xRzcEnfI21IFrUPzPGtcPf8AC+Rw==}
+    engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
+
+  y18n@5.0.8:
+    resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==}
+    engines: {node: '>=10'}
+
+  yallist@3.1.1:
+    resolution: {integrity: sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==}
+
+  yargs-parser@21.1.1:
+    resolution: {integrity: sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==}
+    engines: {node: '>=12'}
+
+  yargs@17.7.3:
+    resolution: {integrity: sha512-GZtjxm/J/4TSxuL3FNYjCmLktBTnIw/rVmKSIyKeYAZpmJB2ig9VauCC5xsa82GNKVKDAqpOn3KVzNt0zmrU0g==}
+    engines: {node: '>=12'}
+
+  yocto-queue@0.1.0:
+    resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==}
+    engines: {node: '>=10'}
+
+  yoctocolors-cjs@2.1.3:
+    resolution: {integrity: sha512-U/PBtDf35ff0D8X8D0jfdzHYEPFxAI7jJlxZXwCSez5M3190m+QobIfh+sWDWSHMCWWJN2AWamkegn6vr6YBTw==}
+    engines: {node: '>=18'}
+
+  zod-validation-error@4.0.2:
+    resolution: {integrity: sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ==}
+    engines: {node: '>=18.0.0'}
+    peerDependencies:
+      zod: ^3.25.0 || ^4.0.0
+
+  zod@4.4.3:
+    resolution: {integrity: sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==}
+
+  zustand@5.0.14:
+    resolution: {integrity: sha512-/8tAspM5LMPr28b3fwLYrtdj77ECpfZviaP75CMTnwO8ISyaE4GDIG/9rDDYq/cH9D2Xw2A2RXglLInmVBQB/g==}
+    engines: {node: '>=12.20.0'}
+    peerDependencies:
+      '@types/react': '>=18.0.0'
+      immer: '>=9.0.6'
+      react: '>=18.0.0'
+      use-sync-external-store: '>=1.2.0'
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      immer:
+        optional: true
+      react:
+        optional: true
+      use-sync-external-store:
+        optional: true
+
+snapshots:
+
+  '@alloc/quick-lru@5.2.0': {}
+
+  '@angular-devkit/core@19.2.24(chokidar@4.0.3)':
+    dependencies:
+      ajv: 8.18.0
+      ajv-formats: 3.0.1(ajv@8.18.0)
+      jsonc-parser: 3.3.1
+      picomatch: 4.0.4
+      rxjs: 7.8.1
+      source-map: 0.7.4
+    optionalDependencies:
+      chokidar: 4.0.3
+
+  '@angular-devkit/core@19.2.27(chokidar@4.0.3)':
+    dependencies:
+      ajv: 8.18.0
+      ajv-formats: 3.0.1(ajv@8.18.0)
+      jsonc-parser: 3.3.1
+      picomatch: 4.0.4
+      rxjs: 7.8.1
+      source-map: 0.7.4
+    optionalDependencies:
+      chokidar: 4.0.3
+
+  '@angular-devkit/schematics-cli@19.2.27(@types/node@22.20.1)(chokidar@4.0.3)':
+    dependencies:
+      '@angular-devkit/core': 19.2.27(chokidar@4.0.3)
+      '@angular-devkit/schematics': 19.2.27(chokidar@4.0.3)
+      '@inquirer/prompts': 7.3.2(@types/node@22.20.1)
+      ansi-colors: 4.1.3
+      symbol-observable: 4.0.0
+      yargs-parser: 21.1.1
+    transitivePeerDependencies:
+      - '@types/node'
+      - chokidar
+
+  '@angular-devkit/schematics@19.2.24(chokidar@4.0.3)':
+    dependencies:
+      '@angular-devkit/core': 19.2.24(chokidar@4.0.3)
+      jsonc-parser: 3.3.1
+      magic-string: 0.30.17
+      ora: 5.4.1
+      rxjs: 7.8.1
+    transitivePeerDependencies:
+      - chokidar
+
+  '@angular-devkit/schematics@19.2.27(chokidar@4.0.3)':
+    dependencies:
+      '@angular-devkit/core': 19.2.27(chokidar@4.0.3)
+      jsonc-parser: 3.3.1
+      magic-string: 0.30.17
+      ora: 5.4.1
+      rxjs: 7.8.1
+    transitivePeerDependencies:
+      - chokidar
+
+  '@aws-sdk/checksums@3.1000.26':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/client-s3@3.1107.0':
+    dependencies:
+      '@aws-sdk/checksums': 3.1000.26
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/credential-provider-node': 3.972.78
+      '@aws-sdk/middleware-sdk-s3': 3.972.72
+      '@aws-sdk/signature-v4-multi-region': 3.996.43
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/fetch-http-handler': 5.6.13
+      '@smithy/node-http-handler': 4.9.13
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/core@3.977.6':
+    dependencies:
+      '@aws-sdk/types': 3.974.2
+      '@aws-sdk/xml-builder': 3.972.37
+      '@aws/lambda-invoke-store': 0.3.0
+      '@smithy/core': 3.31.1
+      '@smithy/signature-v4': 5.6.12
+      '@smithy/types': 4.16.1
+      bowser: 2.14.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-env@3.972.67':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-http@3.972.69':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/fetch-http-handler': 5.6.13
+      '@smithy/node-http-handler': 4.9.13
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-ini@3.973.12':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/credential-provider-env': 3.972.67
+      '@aws-sdk/credential-provider-http': 3.972.69
+      '@aws-sdk/credential-provider-login': 3.972.74
+      '@aws-sdk/credential-provider-process': 3.972.67
+      '@aws-sdk/credential-provider-sso': 3.973.11
+      '@aws-sdk/credential-provider-web-identity': 3.972.73
+      '@aws-sdk/nested-clients': 3.997.41
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/credential-provider-imds': 4.4.16
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-login@3.972.74':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/nested-clients': 3.997.41
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-node@3.972.78':
+    dependencies:
+      '@aws-sdk/credential-provider-env': 3.972.67
+      '@aws-sdk/credential-provider-http': 3.972.69
+      '@aws-sdk/credential-provider-ini': 3.973.12
+      '@aws-sdk/credential-provider-process': 3.972.67
+      '@aws-sdk/credential-provider-sso': 3.973.11
+      '@aws-sdk/credential-provider-web-identity': 3.972.73
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/credential-provider-imds': 4.4.16
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-process@3.972.67':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-sso@3.973.11':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/nested-clients': 3.997.41
+      '@aws-sdk/token-providers': 3.1103.0
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-web-identity@3.972.73':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/nested-clients': 3.997.41
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/middleware-sdk-s3@3.972.72':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/signature-v4-multi-region': 3.996.43
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/nested-clients@3.997.41':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/signature-v4-multi-region': 3.996.43
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/fetch-http-handler': 5.6.13
+      '@smithy/node-http-handler': 4.9.13
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/s3-request-presigner@3.1107.0':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/signature-v4-multi-region': 3.996.43
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/signature-v4-multi-region@3.996.43':
+    dependencies:
+      '@aws-sdk/types': 3.974.2
+      '@smithy/signature-v4': 5.6.12
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/token-providers@3.1103.0':
+    dependencies:
+      '@aws-sdk/core': 3.977.6
+      '@aws-sdk/nested-clients': 3.997.41
+      '@aws-sdk/types': 3.974.2
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/types@3.974.2':
+    dependencies:
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/xml-builder@3.972.37':
+    dependencies:
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws/lambda-invoke-store@0.3.0': {}
+
+  '@babel/code-frame@7.29.7':
+    dependencies:
+      '@babel/helper-validator-identifier': 7.29.7
+      js-tokens: 4.0.0
+      picocolors: 1.1.1
+
+  '@babel/compat-data@7.29.7': {}
+
+  '@babel/core@7.29.7':
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@babel/generator': 7.29.8
+      '@babel/helper-compilation-targets': 7.29.7
+      '@babel/helper-module-transforms': 7.29.7(@babel/core@7.29.7)
+      '@babel/helpers': 7.29.7
+      '@babel/parser': 7.29.8
+      '@babel/template': 7.29.7
+      '@babel/traverse': 7.29.8
+      '@babel/types': 7.29.8
+      '@jridgewell/remapping': 2.3.5
+      convert-source-map: 2.0.0
+      debug: 4.4.3
+      gensync: 1.0.0-beta.2
+      json5: 2.2.3
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/generator@7.29.8':
+    dependencies:
+      '@babel/parser': 7.29.8
+      '@babel/types': 7.29.8
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
+      jsesc: 3.1.0
+
+  '@babel/helper-compilation-targets@7.29.7':
+    dependencies:
+      '@babel/compat-data': 7.29.7
+      '@babel/helper-validator-option': 7.29.7
+      browserslist: 4.28.8
+      lru-cache: 5.1.1
+      semver: 6.3.1
+
+  '@babel/helper-globals@7.29.7': {}
+
+  '@babel/helper-module-imports@7.29.7':
+    dependencies:
+      '@babel/traverse': 7.29.8
+      '@babel/types': 7.29.8
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-module-transforms@7.29.7(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-module-imports': 7.29.7
+      '@babel/helper-validator-identifier': 7.29.7
+      '@babel/traverse': 7.29.8
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-plugin-utils@7.29.7': {}
+
+  '@babel/helper-string-parser@7.29.7': {}
+
+  '@babel/helper-validator-identifier@7.29.7': {}
+
+  '@babel/helper-validator-option@7.29.7': {}
+
+  '@babel/helpers@7.29.7':
+    dependencies:
+      '@babel/template': 7.29.7
+      '@babel/types': 7.29.8
+
+  '@babel/parser@7.29.8':
+    dependencies:
+      '@babel/types': 7.29.8
+
+  '@babel/plugin-syntax-async-generators@7.8.4(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-bigint@7.8.3(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-class-properties@7.12.13(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-class-static-block@7.14.5(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-import-attributes@7.29.7(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-import-meta@7.10.4(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-json-strings@7.8.3(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-logical-assignment-operators@7.10.4(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-nullish-coalescing-operator@7.8.3(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-numeric-separator@7.10.4(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-object-rest-spread@7.8.3(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-optional-catch-binding@7.8.3(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-optional-chaining@7.8.3(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-private-property-in-object@7.14.5(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-top-level-await@7.14.5(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/template@7.29.7':
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@babel/parser': 7.29.8
+      '@babel/types': 7.29.8
+
+  '@babel/traverse@7.29.8':
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@babel/generator': 7.29.8
+      '@babel/helper-globals': 7.29.7
+      '@babel/parser': 7.29.8
+      '@babel/template': 7.29.7
+      '@babel/types': 7.29.8
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/types@7.29.8':
+    dependencies:
+      '@babel/helper-string-parser': 7.29.7
+      '@babel/helper-validator-identifier': 7.29.7
+
+  '@bcoe/v8-coverage@0.2.3': {}
+
+  '@borewit/text-codec@0.2.2': {}
+
+  '@colors/colors@1.5.0':
+    optional: true
+
+  '@emnapi/core@1.10.0':
+    dependencies:
+      '@emnapi/wasi-threads': 1.2.1
+      tslib: 2.8.1
+    optional: true
+
+  '@emnapi/runtime@1.10.0':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
+  '@emnapi/runtime@1.11.3':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
+  '@emnapi/wasi-threads@1.2.1':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
+  '@esbuild/aix-ppc64@0.28.2':
+    optional: true
+
+  '@esbuild/android-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/android-arm@0.28.2':
+    optional: true
+
+  '@esbuild/android-x64@0.28.2':
+    optional: true
+
+  '@esbuild/darwin-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/darwin-x64@0.28.2':
+    optional: true
+
+  '@esbuild/freebsd-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/freebsd-x64@0.28.2':
+    optional: true
+
+  '@esbuild/linux-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/linux-arm@0.28.2':
+    optional: true
+
+  '@esbuild/linux-ia32@0.28.2':
+    optional: true
+
+  '@esbuild/linux-loong64@0.28.2':
+    optional: true
+
+  '@esbuild/linux-mips64el@0.28.2':
+    optional: true
+
+  '@esbuild/linux-ppc64@0.28.2':
+    optional: true
+
+  '@esbuild/linux-riscv64@0.28.2':
+    optional: true
+
+  '@esbuild/linux-s390x@0.28.2':
+    optional: true
+
+  '@esbuild/linux-x64@0.28.2':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/netbsd-x64@0.28.2':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/openbsd-x64@0.28.2':
+    optional: true
+
+  '@esbuild/openharmony-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/sunos-x64@0.28.2':
+    optional: true
+
+  '@esbuild/win32-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/win32-ia32@0.28.2':
+    optional: true
+
+  '@esbuild/win32-x64@0.28.2':
+    optional: true
+
+  '@eslint-community/eslint-utils@4.10.1(eslint@9.39.5(jiti@2.7.0))':
+    dependencies:
+      eslint: 9.39.5(jiti@2.7.0)
+      eslint-visitor-keys: 3.4.3
+
+  '@eslint-community/regexpp@4.12.2': {}
+
+  '@eslint/config-array@0.21.2':
+    dependencies:
+      '@eslint/object-schema': 2.1.7
+      debug: 4.4.3
+      minimatch: 3.1.5
+    transitivePeerDependencies:
+      - supports-color
+
+  '@eslint/config-helpers@0.4.2':
+    dependencies:
+      '@eslint/core': 0.17.0
+
+  '@eslint/core@0.17.0':
+    dependencies:
+      '@types/json-schema': 7.0.15
+
+  '@eslint/eslintrc@3.3.6':
+    dependencies:
+      ajv: 6.15.0
+      debug: 4.4.3
+      espree: 10.4.0
+      globals: 14.0.0
+      ignore: 5.3.2
+      import-fresh: 3.3.1
+      js-yaml: 4.3.1
+      minimatch: 3.1.5
+      strip-json-comments: 3.1.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@eslint/js@9.39.5': {}
+
+  '@eslint/object-schema@2.1.7': {}
+
+  '@eslint/plugin-kit@0.4.1':
+    dependencies:
+      '@eslint/core': 0.17.0
+      levn: 0.4.1
+
+  '@humanfs/core@0.19.2':
+    dependencies:
+      '@humanfs/types': 0.15.0
+
+  '@humanfs/node@0.16.8':
+    dependencies:
+      '@humanfs/core': 0.19.2
+      '@humanfs/types': 0.15.0
+      '@humanwhocodes/retry': 0.4.3
+
+  '@humanfs/types@0.15.0': {}
+
+  '@humanwhocodes/module-importer@1.0.1': {}
+
+  '@humanwhocodes/retry@0.4.3': {}
+
+  '@img/colour@1.1.0':
+    optional: true
+
+  '@img/sharp-darwin-arm64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-arm64': 1.3.2
+    optional: true
+
+  '@img/sharp-darwin-x64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-x64': 1.3.2
+    optional: true
+
+  '@img/sharp-freebsd-wasm32@0.35.3':
+    dependencies:
+      '@img/sharp-wasm32': 0.35.3
+    optional: true
+
+  '@img/sharp-libvips-darwin-arm64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-darwin-x64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-ppc64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-riscv64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-s390x@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-x64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-x64@1.3.2':
+    optional: true
+
+  '@img/sharp-linux-arm64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm64': 1.3.2
+    optional: true
+
+  '@img/sharp-linux-arm@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm': 1.3.2
+    optional: true
+
+  '@img/sharp-linux-ppc64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-ppc64': 1.3.2
+    optional: true
+
+  '@img/sharp-linux-riscv64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-riscv64': 1.3.2
+    optional: true
+
+  '@img/sharp-linux-s390x@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-s390x': 1.3.2
+    optional: true
+
+  '@img/sharp-linux-x64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-x64': 1.3.2
+    optional: true
+
+  '@img/sharp-linuxmusl-arm64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.2
+    optional: true
+
+  '@img/sharp-linuxmusl-x64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.2
+    optional: true
+
+  '@img/sharp-wasm32@0.35.3':
+    dependencies:
+      '@emnapi/runtime': 1.11.3
+    optional: true
+
+  '@img/sharp-webcontainers-wasm32@0.35.3':
+    dependencies:
+      '@img/sharp-wasm32': 0.35.3
+    optional: true
+
+  '@img/sharp-win32-arm64@0.35.3':
+    optional: true
+
+  '@img/sharp-win32-ia32@0.35.3':
+    optional: true
+
+  '@img/sharp-win32-x64@0.35.3':
+    optional: true
+
+  '@inquirer/ansi@1.0.2': {}
+
+  '@inquirer/checkbox@4.3.2(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/ansi': 1.0.2
+      '@inquirer/core': 10.3.2(@types/node@22.20.1)
+      '@inquirer/figures': 1.0.15
+      '@inquirer/type': 3.0.10(@types/node@22.20.1)
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/confirm@5.1.21(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.1)
+      '@inquirer/type': 3.0.10(@types/node@22.20.1)
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/core@10.3.2(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/ansi': 1.0.2
+      '@inquirer/figures': 1.0.15
+      '@inquirer/type': 3.0.10(@types/node@22.20.1)
+      cli-width: 4.1.0
+      mute-stream: 2.0.0
+      signal-exit: 4.1.0
+      wrap-ansi: 6.2.0
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/editor@4.2.23(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.1)
+      '@inquirer/external-editor': 1.0.3(@types/node@22.20.1)
+      '@inquirer/type': 3.0.10(@types/node@22.20.1)
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/expand@4.0.23(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.1)
+      '@inquirer/type': 3.0.10(@types/node@22.20.1)
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/external-editor@1.0.3(@types/node@22.20.1)':
+    dependencies:
+      chardet: 2.2.0
+      iconv-lite: 0.7.3
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/figures@1.0.15': {}
+
+  '@inquirer/input@4.3.1(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.1)
+      '@inquirer/type': 3.0.10(@types/node@22.20.1)
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/number@3.0.23(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.1)
+      '@inquirer/type': 3.0.10(@types/node@22.20.1)
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/password@4.0.23(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/ansi': 1.0.2
+      '@inquirer/core': 10.3.2(@types/node@22.20.1)
+      '@inquirer/type': 3.0.10(@types/node@22.20.1)
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/prompts@7.10.1(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/checkbox': 4.3.2(@types/node@22.20.1)
+      '@inquirer/confirm': 5.1.21(@types/node@22.20.1)
+      '@inquirer/editor': 4.2.23(@types/node@22.20.1)
+      '@inquirer/expand': 4.0.23(@types/node@22.20.1)
+      '@inquirer/input': 4.3.1(@types/node@22.20.1)
+      '@inquirer/number': 3.0.23(@types/node@22.20.1)
+      '@inquirer/password': 4.0.23(@types/node@22.20.1)
+      '@inquirer/rawlist': 4.1.11(@types/node@22.20.1)
+      '@inquirer/search': 3.2.2(@types/node@22.20.1)
+      '@inquirer/select': 4.4.2(@types/node@22.20.1)
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/prompts@7.3.2(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/checkbox': 4.3.2(@types/node@22.20.1)
+      '@inquirer/confirm': 5.1.21(@types/node@22.20.1)
+      '@inquirer/editor': 4.2.23(@types/node@22.20.1)
+      '@inquirer/expand': 4.0.23(@types/node@22.20.1)
+      '@inquirer/input': 4.3.1(@types/node@22.20.1)
+      '@inquirer/number': 3.0.23(@types/node@22.20.1)
+      '@inquirer/password': 4.0.23(@types/node@22.20.1)
+      '@inquirer/rawlist': 4.1.11(@types/node@22.20.1)
+      '@inquirer/search': 3.2.2(@types/node@22.20.1)
+      '@inquirer/select': 4.4.2(@types/node@22.20.1)
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/rawlist@4.1.11(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.1)
+      '@inquirer/type': 3.0.10(@types/node@22.20.1)
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/search@3.2.2(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.1)
+      '@inquirer/figures': 1.0.15
+      '@inquirer/type': 3.0.10(@types/node@22.20.1)
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/select@4.4.2(@types/node@22.20.1)':
+    dependencies:
+      '@inquirer/ansi': 1.0.2
+      '@inquirer/core': 10.3.2(@types/node@22.20.1)
+      '@inquirer/figures': 1.0.15
+      '@inquirer/type': 3.0.10(@types/node@22.20.1)
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@inquirer/type@3.0.10(@types/node@22.20.1)':
+    optionalDependencies:
+      '@types/node': 22.20.1
+
+  '@ioredis/commands@1.10.0': {}
+
+  '@isaacs/cliui@8.0.2':
+    dependencies:
+      string-width: 5.1.2
+      string-width-cjs: string-width@4.2.3
+      strip-ansi: 7.2.0
+      strip-ansi-cjs: strip-ansi@6.0.1
+      wrap-ansi: 8.1.0
+      wrap-ansi-cjs: wrap-ansi@7.0.0
+
+  '@istanbuljs/load-nyc-config@1.1.0':
+    dependencies:
+      camelcase: 5.3.1
+      find-up: 4.1.0
+      get-package-type: 0.1.0
+      js-yaml: 3.15.1
+      resolve-from: 5.0.0
+
+  '@istanbuljs/schema@0.1.6': {}
+
+  '@jest/console@30.4.1':
+    dependencies:
+      '@jest/types': 30.4.1
+      '@types/node': 22.20.1
+      chalk: 4.1.2
+      jest-message-util: 30.4.1
+      jest-util: 30.4.1
+      slash: 3.0.0
+
+  '@jest/core@30.4.2':
+    dependencies:
+      '@jest/console': 30.4.1
+      '@jest/pattern': 30.4.0
+      '@jest/reporters': 30.4.1
+      '@jest/test-result': 30.4.1
+      '@jest/transform': 30.4.1
+      '@jest/types': 30.4.1
+      '@types/node': 22.20.1
+      ansi-escapes: 4.3.2
+      chalk: 4.1.2
+      ci-info: 4.4.0
+      exit-x: 0.2.2
+      fast-json-stable-stringify: 2.1.0
+      graceful-fs: 4.2.11
+      jest-changed-files: 30.4.1
+      jest-config: 30.4.2(@types/node@22.20.1)
+      jest-haste-map: 30.4.1
+      jest-message-util: 30.4.1
+      jest-regex-util: 30.4.0
+      jest-resolve: 30.4.1
+      jest-resolve-dependencies: 30.4.2
+      jest-runner: 30.4.2
+      jest-runtime: 30.4.2
+      jest-snapshot: 30.4.1
+      jest-util: 30.4.1
+      jest-validate: 30.4.1
+      jest-watcher: 30.4.1
+      pretty-format: 30.4.1
+      slash: 3.0.0
+    transitivePeerDependencies:
+      - babel-plugin-macros
+      - esbuild-register
+      - supports-color
+      - ts-node
+
+  '@jest/diff-sequences@30.4.0': {}
+
+  '@jest/environment@30.4.1':
+    dependencies:
+      '@jest/fake-timers': 30.4.1
+      '@jest/types': 30.4.1
+      '@types/node': 22.20.1
+      jest-mock: 30.4.1
+
+  '@jest/expect-utils@30.4.1':
+    dependencies:
+      '@jest/get-type': 30.1.0
+
+  '@jest/expect@30.4.1':
+    dependencies:
+      expect: 30.4.1
+      jest-snapshot: 30.4.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@jest/fake-timers@30.4.1':
+    dependencies:
+      '@jest/types': 30.4.1
+      '@sinonjs/fake-timers': 15.4.0
+      '@types/node': 22.20.1
+      jest-message-util: 30.4.1
+      jest-mock: 30.4.1
+      jest-util: 30.4.1
+
+  '@jest/get-type@30.1.0': {}
+
+  '@jest/globals@30.4.1':
+    dependencies:
+      '@jest/environment': 30.4.1
+      '@jest/expect': 30.4.1
+      '@jest/types': 30.4.1
+      jest-mock: 30.4.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@jest/pattern@30.4.0':
+    dependencies:
+      '@types/node': 22.20.1
+      jest-regex-util: 30.4.0
+
+  '@jest/reporters@30.4.1':
+    dependencies:
+      '@bcoe/v8-coverage': 0.2.3
+      '@jest/console': 30.4.1
+      '@jest/test-result': 30.4.1
+      '@jest/transform': 30.4.1
+      '@jest/types': 30.4.1
+      '@jridgewell/trace-mapping': 0.3.31
+      '@types/node': 22.20.1
+      chalk: 4.1.2
+      collect-v8-coverage: 1.0.3
+      exit-x: 0.2.2
+      glob: 10.5.0
+      graceful-fs: 4.2.11
+      istanbul-lib-coverage: 3.2.2
+      istanbul-lib-instrument: 6.0.3
+      istanbul-lib-report: 3.0.1
+      istanbul-lib-source-maps: 5.0.6
+      istanbul-reports: 3.2.0
+      jest-message-util: 30.4.1
+      jest-util: 30.4.1
+      jest-worker: 30.4.1
+      slash: 3.0.0
+      string-length: 4.0.2
+      v8-to-istanbul: 9.3.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@jest/schemas@30.4.1':
+    dependencies:
+      '@sinclair/typebox': 0.34.52
+
+  '@jest/snapshot-utils@30.4.1':
+    dependencies:
+      '@jest/types': 30.4.1
+      chalk: 4.1.2
+      graceful-fs: 4.2.11
+      natural-compare: 1.4.0
+
+  '@jest/source-map@30.0.1':
+    dependencies:
+      '@jridgewell/trace-mapping': 0.3.31
+      callsites: 3.1.0
+      graceful-fs: 4.2.11
+
+  '@jest/test-result@30.4.1':
+    dependencies:
+      '@jest/console': 30.4.1
+      '@jest/types': 30.4.1
+      '@types/istanbul-lib-coverage': 2.0.6
+      collect-v8-coverage: 1.0.3
+
+  '@jest/test-sequencer@30.4.1':
+    dependencies:
+      '@jest/test-result': 30.4.1
+      graceful-fs: 4.2.11
+      jest-haste-map: 30.4.1
+      slash: 3.0.0
+
+  '@jest/transform@30.4.1':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@jest/types': 30.4.1
+      '@jridgewell/trace-mapping': 0.3.31
+      babel-plugin-istanbul: 7.0.1
+      chalk: 4.1.2
+      convert-source-map: 2.0.0
+      fast-json-stable-stringify: 2.1.0
+      graceful-fs: 4.2.11
+      jest-haste-map: 30.4.1
+      jest-regex-util: 30.4.0
+      jest-util: 30.4.1
+      pirates: 4.0.7
+      slash: 3.0.0
+      write-file-atomic: 5.0.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@jest/types@30.4.1':
+    dependencies:
+      '@jest/pattern': 30.4.0
+      '@jest/schemas': 30.4.1
+      '@types/istanbul-lib-coverage': 2.0.6
+      '@types/istanbul-reports': 3.0.4
+      '@types/node': 22.20.1
+      '@types/yargs': 17.0.35
+      chalk: 4.1.2
+
+  '@jridgewell/gen-mapping@0.3.13':
+    dependencies:
+      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/trace-mapping': 0.3.31
+
+  '@jridgewell/remapping@2.3.5':
+    dependencies:
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
+
+  '@jridgewell/resolve-uri@3.1.2': {}
+
+  '@jridgewell/source-map@0.3.11':
+    dependencies:
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
+
+  '@jridgewell/sourcemap-codec@1.5.5': {}
+
+  '@jridgewell/trace-mapping@0.3.31':
+    dependencies:
+      '@jridgewell/resolve-uri': 3.1.2
+      '@jridgewell/sourcemap-codec': 1.5.5
+
+  '@lukeed/csprng@1.1.0': {}
+
+  '@microsoft/tsdoc@0.16.0': {}
+
+  '@napi-rs/wasm-runtime@1.2.2(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)':
+    dependencies:
+      '@emnapi/core': 1.10.0
+      '@emnapi/runtime': 1.10.0
+      '@tybys/wasm-util': 0.10.3
+    optional: true
+
+  '@nestjs/cli@11.0.24(@types/node@22.20.1)(prettier@3.9.6)':
+    dependencies:
+      '@angular-devkit/core': 19.2.27(chokidar@4.0.3)
+      '@angular-devkit/schematics': 19.2.27(chokidar@4.0.3)
+      '@angular-devkit/schematics-cli': 19.2.27(@types/node@22.20.1)(chokidar@4.0.3)
+      '@inquirer/prompts': 7.10.1(@types/node@22.20.1)
+      '@nestjs/schematics': 11.1.0(chokidar@4.0.3)(prettier@3.9.6)(typescript@5.9.3)
+      ansis: 4.2.0
+      chokidar: 4.0.3
+      cli-table3: 0.6.5
+      commander: 4.1.1
+      fork-ts-checker-webpack-plugin: 9.1.0(typescript@5.9.3)(webpack@5.106.2)
+      glob: 13.0.6
+      node-emoji: 1.11.0
+      ora: 5.4.1
+      tsconfig-paths: 4.2.0
+      tsconfig-paths-webpack-plugin: 4.2.0
+      typescript: 5.9.3
+      webpack: 5.106.2
+      webpack-node-externals: 3.0.0
+    transitivePeerDependencies:
+      - '@minify-html/node'
+      - '@swc/css'
+      - '@swc/html'
+      - '@types/node'
+      - clean-css
+      - cssnano
+      - csso
+      - esbuild
+      - html-minifier-terser
+      - lightningcss
+      - postcss
+      - prettier
+      - uglify-js
+      - webpack-cli
+
+  '@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)':
+    dependencies:
+      file-type: 21.3.4
+      iterare: 1.2.1
+      load-esm: 1.0.3
+      reflect-metadata: 0.2.2
+      rxjs: 7.8.2
+      tslib: 2.8.1
+      uid: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
+
+  '@nestjs/config@4.0.4(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(rxjs@7.8.2)':
+    dependencies:
+      '@nestjs/common': 11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      dotenv: 17.4.1
+      dotenv-expand: 12.0.3
+      lodash: 4.18.1
+      rxjs: 7.8.2
+
+  '@nestjs/core@11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@11.1.29)(reflect-metadata@0.2.2)(rxjs@7.8.2)':
+    dependencies:
+      '@nestjs/common': 11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      fast-safe-stringify: 2.1.1
+      iterare: 1.2.1
+      path-to-regexp: 8.4.2
+      reflect-metadata: 0.2.2
+      rxjs: 7.8.2
+      tslib: 2.8.1
+      uid: 2.0.2
+    optionalDependencies:
+      '@nestjs/platform-express': 11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)
+
+  '@nestjs/jwt@11.0.2(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))':
+    dependencies:
+      '@nestjs/common': 11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@types/jsonwebtoken': 9.0.10
+      jsonwebtoken: 9.0.3
+
+  '@nestjs/mapped-types@2.1.1(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(reflect-metadata@0.2.2)':
+    dependencies:
+      '@nestjs/common': 11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      reflect-metadata: 0.2.2
+
+  '@nestjs/platform-express@11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)':
+    dependencies:
+      '@nestjs/common': 11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/core': 11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@11.1.29)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      cors: 2.8.6
+      express: 5.2.1
+      multer: 2.2.0
+      path-to-regexp: 8.4.2
+      tslib: 2.8.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@nestjs/schematics@11.1.0(chokidar@4.0.3)(prettier@3.9.6)(typescript@5.9.3)':
+    dependencies:
+      '@angular-devkit/core': 19.2.24(chokidar@4.0.3)
+      '@angular-devkit/schematics': 19.2.24(chokidar@4.0.3)
+      comment-json: 5.0.0
+      jsonc-parser: 3.3.1
+      pluralize: 8.0.0
+      typescript: 5.9.3
+    optionalDependencies:
+      prettier: 3.9.6
+    transitivePeerDependencies:
+      - chokidar
+
+  '@nestjs/swagger@11.4.6(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)(reflect-metadata@0.2.2)':
+    dependencies:
+      '@microsoft/tsdoc': 0.16.0
+      '@nestjs/common': 11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/core': 11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@11.1.29)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/mapped-types': 2.1.1(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(reflect-metadata@0.2.2)
+      js-yaml: 5.2.1
+      lodash: 4.18.1
+      path-to-regexp: 8.4.2
+      reflect-metadata: 0.2.2
+      swagger-ui-dist: 5.32.8
+
+  '@nestjs/terminus@11.1.1(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)(@prisma/client@6.19.3(prisma@6.19.3(typescript@5.9.3))(typescript@5.9.3))(reflect-metadata@0.2.2)(rxjs@7.8.2)':
+    dependencies:
+      '@nestjs/common': 11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/core': 11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@11.1.29)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      boxen: 5.1.2
+      check-disk-space: 3.4.0
+      reflect-metadata: 0.2.2
+      rxjs: 7.8.2
+    optionalDependencies:
+      '@prisma/client': 6.19.3(prisma@6.19.3(typescript@5.9.3))(typescript@5.9.3)
+
+  '@nestjs/testing@11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)(@nestjs/platform-express@11.1.29)':
+    dependencies:
+      '@nestjs/common': 11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/core': 11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@11.1.29)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      tslib: 2.8.1
+    optionalDependencies:
+      '@nestjs/platform-express': 11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)
+
+  '@nestjs/throttler@6.5.0(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.29)(reflect-metadata@0.2.2)':
+    dependencies:
+      '@nestjs/common': 11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/core': 11.1.29(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@11.1.29)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      reflect-metadata: 0.2.2
+
+  '@next/env@16.3.0': {}
+
+  '@next/swc-darwin-arm64@16.3.0':
+    optional: true
+
+  '@next/swc-darwin-x64@16.3.0':
+    optional: true
+
+  '@next/swc-linux-arm64-gnu@16.3.0':
+    optional: true
+
+  '@next/swc-linux-arm64-musl@16.3.0':
+    optional: true
+
+  '@next/swc-linux-x64-gnu@16.3.0':
+    optional: true
+
+  '@next/swc-linux-x64-musl@16.3.0':
+    optional: true
+
+  '@next/swc-win32-arm64-msvc@16.3.0':
+    optional: true
+
+  '@next/swc-win32-x64-msvc@16.3.0':
+    optional: true
+
+  '@noble/hashes@1.8.0': {}
+
+  '@paralleldrive/cuid2@2.3.1':
+    dependencies:
+      '@noble/hashes': 1.8.0
+
+  '@pinojs/redact@0.4.0': {}
+
+  '@pkgjs/parseargs@0.11.0':
+    optional: true
+
+  '@pkgr/core@0.3.6': {}
+
+  '@prisma/client@6.19.3(prisma@6.19.3(typescript@5.9.3))(typescript@5.9.3)':
+    optionalDependencies:
+      prisma: 6.19.3(typescript@5.9.3)
+      typescript: 5.9.3
+
+  '@prisma/config@6.19.3':
+    dependencies:
+      c12: 3.1.0
+      deepmerge-ts: 7.1.5
+      effect: 3.21.0
+      empathic: 2.0.0
+    transitivePeerDependencies:
+      - magicast
+
+  '@prisma/debug@6.19.3': {}
+
+  '@prisma/engines-version@7.1.1-3.c2990dca591cba766e3b7ef5d9e8a84796e47ab7': {}
+
+  '@prisma/engines@6.19.3':
+    dependencies:
+      '@prisma/debug': 6.19.3
+      '@prisma/engines-version': 7.1.1-3.c2990dca591cba766e3b7ef5d9e8a84796e47ab7
+      '@prisma/fetch-engine': 6.19.3
+      '@prisma/get-platform': 6.19.3
+
+  '@prisma/fetch-engine@6.19.3':
+    dependencies:
+      '@prisma/debug': 6.19.3
+      '@prisma/engines-version': 7.1.1-3.c2990dca591cba766e3b7ef5d9e8a84796e47ab7
+      '@prisma/get-platform': 6.19.3
+
+  '@prisma/get-platform@6.19.3':
+    dependencies:
+      '@prisma/debug': 6.19.3
+
+  '@scarf/scarf@1.4.0': {}
+
+  '@sinclair/typebox@0.34.52': {}
+
+  '@sinonjs/commons@3.0.1':
+    dependencies:
+      type-detect: 4.0.8
+
+  '@sinonjs/fake-timers@15.4.0':
+    dependencies:
+      '@sinonjs/commons': 3.0.1
+
+  '@smithy/core@3.31.1':
+    dependencies:
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@smithy/credential-provider-imds@4.4.16':
+    dependencies:
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@smithy/fetch-http-handler@5.6.13':
+    dependencies:
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@smithy/node-http-handler@4.9.13':
+    dependencies:
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@smithy/signature-v4@5.6.12':
+    dependencies:
+      '@smithy/core': 3.31.1
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@smithy/types@4.16.1':
+    dependencies:
+      tslib: 2.8.1
+
+  '@standard-schema/spec@1.1.0': {}
+
+  '@swc/helpers@0.5.15':
+    dependencies:
+      tslib: 2.8.1
+
+  '@tailwindcss/node@4.3.3':
+    dependencies:
+      '@jridgewell/remapping': 2.3.5
+      enhanced-resolve: 5.24.5
+      jiti: 2.7.0
+      lightningcss: 1.32.0
+      magic-string: 0.30.21
+      source-map-js: 1.2.1
+      tailwindcss: 4.3.3
+
+  '@tailwindcss/oxide-android-arm64@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide-darwin-arm64@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide-darwin-x64@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide-freebsd-x64@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm64-gnu@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm64-musl@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide-linux-x64-gnu@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide-linux-x64-musl@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide-wasm32-wasi@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide-win32-arm64-msvc@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide-win32-x64-msvc@4.3.3':
+    optional: true
+
+  '@tailwindcss/oxide@4.3.3':
+    optionalDependencies:
+      '@tailwindcss/oxide-android-arm64': 4.3.3
+      '@tailwindcss/oxide-darwin-arm64': 4.3.3
+      '@tailwindcss/oxide-darwin-x64': 4.3.3
+      '@tailwindcss/oxide-freebsd-x64': 4.3.3
+      '@tailwindcss/oxide-linux-arm-gnueabihf': 4.3.3
+      '@tailwindcss/oxide-linux-arm64-gnu': 4.3.3
+      '@tailwindcss/oxide-linux-arm64-musl': 4.3.3
+      '@tailwindcss/oxide-linux-x64-gnu': 4.3.3
+      '@tailwindcss/oxide-linux-x64-musl': 4.3.3
+      '@tailwindcss/oxide-wasm32-wasi': 4.3.3
+      '@tailwindcss/oxide-win32-arm64-msvc': 4.3.3
+      '@tailwindcss/oxide-win32-x64-msvc': 4.3.3
+
+  '@tailwindcss/postcss@4.3.3':
+    dependencies:
+      '@alloc/quick-lru': 5.2.0
+      '@tailwindcss/node': 4.3.3
+      '@tailwindcss/oxide': 4.3.3
+      postcss: 8.5.26
+      tailwindcss: 4.3.3
+
+  '@tanstack/query-core@5.101.4': {}
+
+  '@tanstack/react-query@5.101.4(react@19.2.8)':
+    dependencies:
+      '@tanstack/query-core': 5.101.4
+      react: 19.2.8
+
+  '@tokenizer/inflate@0.4.1':
+    dependencies:
+      debug: 4.4.3
+      token-types: 6.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  '@tokenizer/token@0.3.0': {}
+
+  '@turbo/darwin-64@2.10.9':
+    optional: true
+
+  '@turbo/darwin-arm64@2.10.9':
+    optional: true
+
+  '@turbo/linux-64@2.10.9':
+    optional: true
+
+  '@turbo/linux-arm64@2.10.9':
+    optional: true
+
+  '@turbo/windows-64@2.10.9':
+    optional: true
+
+  '@turbo/windows-arm64@2.10.9':
+    optional: true
+
+  '@tybys/wasm-util@0.10.3':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
+  '@types/babel__core@7.20.5':
+    dependencies:
+      '@babel/parser': 7.29.8
+      '@babel/types': 7.29.8
+      '@types/babel__generator': 7.27.0
+      '@types/babel__template': 7.4.4
+      '@types/babel__traverse': 7.28.0
+
+  '@types/babel__generator@7.27.0':
+    dependencies:
+      '@babel/types': 7.29.8
+
+  '@types/babel__template@7.4.4':
+    dependencies:
+      '@babel/parser': 7.29.8
+      '@babel/types': 7.29.8
+
+  '@types/babel__traverse@7.28.0':
+    dependencies:
+      '@babel/types': 7.29.8
+
+  '@types/body-parser@1.19.6':
+    dependencies:
+      '@types/connect': 3.4.38
+      '@types/node': 22.20.1
+
+  '@types/compression@1.8.1':
+    dependencies:
+      '@types/express': 5.0.6
+      '@types/node': 22.20.1
+
+  '@types/connect@3.4.38':
+    dependencies:
+      '@types/node': 22.20.1
+
+  '@types/cookiejar@2.1.5': {}
+
+  '@types/eslint-scope@3.7.7':
+    dependencies:
+      '@types/eslint': 9.6.1
+      '@types/estree': 1.0.9
+
+  '@types/eslint@9.6.1':
+    dependencies:
+      '@types/estree': 1.0.9
+      '@types/json-schema': 7.0.15
+
+  '@types/estree@1.0.9': {}
+
+  '@types/express-serve-static-core@5.1.3':
+    dependencies:
+      '@types/node': 22.20.1
+      '@types/qs': 6.15.1
+      '@types/range-parser': 1.2.7
+      '@types/send': 1.2.1
+
+  '@types/express@5.0.6':
+    dependencies:
+      '@types/body-parser': 1.19.6
+      '@types/express-serve-static-core': 5.1.3
+      '@types/serve-static': 2.2.0
+
+  '@types/http-errors@2.0.5': {}
+
+  '@types/istanbul-lib-coverage@2.0.6': {}
+
+  '@types/istanbul-lib-report@3.0.3':
+    dependencies:
+      '@types/istanbul-lib-coverage': 2.0.6
+
+  '@types/istanbul-reports@3.0.4':
+    dependencies:
+      '@types/istanbul-lib-report': 3.0.3
+
+  '@types/jest@30.0.0':
+    dependencies:
+      expect: 30.4.1
+      pretty-format: 30.4.1
+
+  '@types/json-schema@7.0.15': {}
+
+  '@types/jsonwebtoken@9.0.10':
+    dependencies:
+      '@types/ms': 2.1.0
+      '@types/node': 22.20.1
+
+  '@types/methods@1.1.4': {}
+
+  '@types/ms@2.1.0': {}
+
+  '@types/node@22.20.1':
+    dependencies:
+      undici-types: 6.21.0
+
+  '@types/qs@6.15.1': {}
+
+  '@types/range-parser@1.2.7': {}
+
+  '@types/react-dom@19.2.4(@types/react@19.2.18)':
+    dependencies:
+      '@types/react': 19.2.18
+
+  '@types/react@19.2.18':
+    dependencies:
+      csstype: 3.2.3
+
+  '@types/send@1.2.1':
+    dependencies:
+      '@types/node': 22.20.1
+
+  '@types/serve-static@2.2.0':
+    dependencies:
+      '@types/http-errors': 2.0.5
+      '@types/node': 22.20.1
+
+  '@types/stack-utils@2.0.3': {}
+
+  '@types/superagent@8.1.11':
+    dependencies:
+      '@types/cookiejar': 2.1.5
+      '@types/methods': 1.1.4
+      '@types/node': 22.20.1
+      form-data: 4.0.6
+
+  '@types/supertest@6.0.3':
+    dependencies:
+      '@types/methods': 1.1.4
+      '@types/superagent': 8.1.11
+
+  '@types/yargs-parser@21.0.3': {}
+
+  '@types/yargs@17.0.35':
+    dependencies:
+      '@types/yargs-parser': 21.0.3
+
+  '@typescript-eslint/eslint-plugin@8.67.0(@typescript-eslint/parser@8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)':
+    dependencies:
+      '@eslint-community/regexpp': 4.12.2
+      '@typescript-eslint/parser': 8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)
+      '@typescript-eslint/scope-manager': 8.67.0
+      '@typescript-eslint/type-utils': 8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)
+      '@typescript-eslint/utils': 8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)
+      '@typescript-eslint/visitor-keys': 8.67.0
+      eslint: 9.39.5(jiti@2.7.0)
+      ignore: 7.0.6
+      natural-compare: 1.4.0
+      ts-api-utils: 2.5.0(typescript@5.9.3)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/parser@8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)':
+    dependencies:
+      '@typescript-eslint/scope-manager': 8.67.0
+      '@typescript-eslint/types': 8.67.0
+      '@typescript-eslint/typescript-estree': 8.67.0(typescript@5.9.3)
+      '@typescript-eslint/visitor-keys': 8.67.0
+      debug: 4.4.3
+      eslint: 9.39.5(jiti@2.7.0)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/project-service@8.67.0(typescript@5.9.3)':
+    dependencies:
+      '@typescript-eslint/tsconfig-utils': 8.67.0(typescript@5.9.3)
+      '@typescript-eslint/types': 8.67.0
+      debug: 4.4.3
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/scope-manager@8.67.0':
+    dependencies:
+      '@typescript-eslint/types': 8.67.0
+      '@typescript-eslint/visitor-keys': 8.67.0
+
+  '@typescript-eslint/tsconfig-utils@8.67.0(typescript@5.9.3)':
+    dependencies:
+      typescript: 5.9.3
+
+  '@typescript-eslint/type-utils@8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)':
+    dependencies:
+      '@typescript-eslint/types': 8.67.0
+      '@typescript-eslint/typescript-estree': 8.67.0(typescript@5.9.3)
+      '@typescript-eslint/utils': 8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)
+      debug: 4.4.3
+      eslint: 9.39.5(jiti@2.7.0)
+      ts-api-utils: 2.5.0(typescript@5.9.3)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/types@8.67.0': {}
+
+  '@typescript-eslint/typescript-estree@8.67.0(typescript@5.9.3)':
+    dependencies:
+      '@typescript-eslint/project-service': 8.67.0(typescript@5.9.3)
+      '@typescript-eslint/tsconfig-utils': 8.67.0(typescript@5.9.3)
+      '@typescript-eslint/types': 8.67.0
+      '@typescript-eslint/visitor-keys': 8.67.0
+      debug: 4.4.3
+      minimatch: 10.2.6
+      semver: 7.8.5
+      tinyglobby: 0.2.17
+      ts-api-utils: 2.5.0(typescript@5.9.3)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/utils@8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)':
+    dependencies:
+      '@eslint-community/eslint-utils': 4.10.1(eslint@9.39.5(jiti@2.7.0))
+      '@typescript-eslint/scope-manager': 8.67.0
+      '@typescript-eslint/types': 8.67.0
+      '@typescript-eslint/typescript-estree': 8.67.0(typescript@5.9.3)
+      eslint: 9.39.5(jiti@2.7.0)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@typescript-eslint/visitor-keys@8.67.0':
+    dependencies:
+      '@typescript-eslint/types': 8.67.0
+      eslint-visitor-keys: 5.0.1
+
+  '@ungap/structured-clone@1.3.3': {}
+
+  '@unrs/resolver-binding-android-arm-eabi@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-android-arm64@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-darwin-arm64@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-darwin-x64@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-freebsd-x64@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-arm-gnueabihf@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-arm-musleabihf@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-arm64-gnu@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-arm64-musl@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-loong64-gnu@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-loong64-musl@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-ppc64-gnu@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-riscv64-gnu@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-riscv64-musl@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-s390x-gnu@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-x64-gnu@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-linux-x64-musl@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-openharmony-arm64@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-wasm32-wasi@1.12.2':
+    dependencies:
+      '@emnapi/core': 1.10.0
+      '@emnapi/runtime': 1.10.0
+      '@napi-rs/wasm-runtime': 1.2.2(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+    optional: true
+
+  '@unrs/resolver-binding-win32-arm64-msvc@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-win32-ia32-msvc@1.12.2':
+    optional: true
+
+  '@unrs/resolver-binding-win32-x64-msvc@1.12.2':
+    optional: true
+
+  '@webassemblyjs/ast@1.14.1':
+    dependencies:
+      '@webassemblyjs/helper-numbers': 1.13.2
+      '@webassemblyjs/helper-wasm-bytecode': 1.13.2
+
+  '@webassemblyjs/floating-point-hex-parser@1.13.2': {}
+
+  '@webassemblyjs/helper-api-error@1.13.2': {}
+
+  '@webassemblyjs/helper-buffer@1.14.1': {}
+
+  '@webassemblyjs/helper-numbers@1.13.2':
+    dependencies:
+      '@webassemblyjs/floating-point-hex-parser': 1.13.2
+      '@webassemblyjs/helper-api-error': 1.13.2
+      '@xtuc/long': 4.2.2
+
+  '@webassemblyjs/helper-wasm-bytecode@1.13.2': {}
+
+  '@webassemblyjs/helper-wasm-section@1.14.1':
+    dependencies:
+      '@webassemblyjs/ast': 1.14.1
+      '@webassemblyjs/helper-buffer': 1.14.1
+      '@webassemblyjs/helper-wasm-bytecode': 1.13.2
+      '@webassemblyjs/wasm-gen': 1.14.1
+
+  '@webassemblyjs/ieee754@1.13.2':
+    dependencies:
+      '@xtuc/ieee754': 1.2.0
+
+  '@webassemblyjs/leb128@1.13.2':
+    dependencies:
+      '@xtuc/long': 4.2.2
+
+  '@webassemblyjs/utf8@1.13.2': {}
+
+  '@webassemblyjs/wasm-edit@1.14.1':
+    dependencies:
+      '@webassemblyjs/ast': 1.14.1
+      '@webassemblyjs/helper-buffer': 1.14.1
+      '@webassemblyjs/helper-wasm-bytecode': 1.13.2
+      '@webassemblyjs/helper-wasm-section': 1.14.1
+      '@webassemblyjs/wasm-gen': 1.14.1
+      '@webassemblyjs/wasm-opt': 1.14.1
+      '@webassemblyjs/wasm-parser': 1.14.1
+      '@webassemblyjs/wast-printer': 1.14.1
+
+  '@webassemblyjs/wasm-gen@1.14.1':
+    dependencies:
+      '@webassemblyjs/ast': 1.14.1
+      '@webassemblyjs/helper-wasm-bytecode': 1.13.2
+      '@webassemblyjs/ieee754': 1.13.2
+      '@webassemblyjs/leb128': 1.13.2
+      '@webassemblyjs/utf8': 1.13.2
+
+  '@webassemblyjs/wasm-opt@1.14.1':
+    dependencies:
+      '@webassemblyjs/ast': 1.14.1
+      '@webassemblyjs/helper-buffer': 1.14.1
+      '@webassemblyjs/wasm-gen': 1.14.1
+      '@webassemblyjs/wasm-parser': 1.14.1
+
+  '@webassemblyjs/wasm-parser@1.14.1':
+    dependencies:
+      '@webassemblyjs/ast': 1.14.1
+      '@webassemblyjs/helper-api-error': 1.13.2
+      '@webassemblyjs/helper-wasm-bytecode': 1.13.2
+      '@webassemblyjs/ieee754': 1.13.2
+      '@webassemblyjs/leb128': 1.13.2
+      '@webassemblyjs/utf8': 1.13.2
+
+  '@webassemblyjs/wast-printer@1.14.1':
+    dependencies:
+      '@webassemblyjs/ast': 1.14.1
+      '@xtuc/long': 4.2.2
+
+  '@xtuc/ieee754@1.2.0': {}
+
+  '@xtuc/long@4.2.2': {}
+
+  accepts@2.0.0:
+    dependencies:
+      mime-types: 3.0.2
+      negotiator: 1.0.0
+
+  acorn-import-phases@1.0.4(acorn@8.18.0):
+    dependencies:
+      acorn: 8.18.0
+
+  acorn-jsx@5.3.2(acorn@8.18.0):
+    dependencies:
+      acorn: 8.18.0
+
+  acorn@8.18.0: {}
+
+  ajv-formats@2.1.1(ajv@8.20.0):
+    optionalDependencies:
+      ajv: 8.20.0
+
+  ajv-formats@3.0.1(ajv@8.18.0):
+    optionalDependencies:
+      ajv: 8.18.0
+
+  ajv-keywords@3.5.2(ajv@6.15.0):
+    dependencies:
+      ajv: 6.15.0
+
+  ajv-keywords@5.1.0(ajv@8.20.0):
+    dependencies:
+      ajv: 8.20.0
+      fast-deep-equal: 3.1.3
+
+  ajv@6.15.0:
+    dependencies:
+      fast-deep-equal: 3.1.3
+      fast-json-stable-stringify: 2.1.0
+      json-schema-traverse: 0.4.1
+      uri-js: 4.4.1
+
+  ajv@8.18.0:
+    dependencies:
+      fast-deep-equal: 3.1.3
+      fast-uri: 3.1.5
+      json-schema-traverse: 1.0.0
+      require-from-string: 2.0.2
+
+  ajv@8.20.0:
+    dependencies:
+      fast-deep-equal: 3.1.3
+      fast-uri: 3.1.5
+      json-schema-traverse: 1.0.0
+      require-from-string: 2.0.2
+
+  ansi-align@3.0.1:
+    dependencies:
+      string-width: 4.2.3
+
+  ansi-colors@4.1.3: {}
+
+  ansi-escapes@4.3.2:
+    dependencies:
+      type-fest: 0.21.3
+
+  ansi-regex@5.0.1: {}
+
+  ansi-regex@6.2.2: {}
+
+  ansi-styles@4.3.0:
+    dependencies:
+      color-convert: 2.0.1
+
+  ansi-styles@5.2.0: {}
+
+  ansi-styles@6.2.3: {}
+
+  ansis@4.2.0: {}
+
+  anymatch@3.1.3:
+    dependencies:
+      normalize-path: 3.0.0
+      picomatch: 2.3.2
+
+  append-field@1.0.0: {}
+
+  argparse@1.0.10:
+    dependencies:
+      sprintf-js: 1.0.3
+
+  argparse@2.0.1: {}
+
+  aria-query@5.3.2: {}
+
+  array-buffer-byte-length@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      is-array-buffer: 3.0.5
+
+  array-includes@3.1.9:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-object-atoms: 1.1.2
+      get-intrinsic: 1.3.0
+      is-string: 1.1.1
+      math-intrinsics: 1.1.0
+
+  array-timsort@1.0.3: {}
+
+  array.prototype.findlast@1.2.5:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+      es-shim-unscopables: 1.1.0
+
+  array.prototype.flat@1.3.3:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-shim-unscopables: 1.1.0
+
+  array.prototype.flatmap@1.3.3:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-shim-unscopables: 1.1.0
+
+  array.prototype.tosorted@1.1.4:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-errors: 1.3.0
+      es-shim-unscopables: 1.1.0
+
+  arraybuffer.prototype.slice@1.0.4:
+    dependencies:
+      array-buffer-byte-length: 1.0.2
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      is-array-buffer: 3.0.5
+
+  asap@2.0.6: {}
+
+  ast-types-flow@0.0.8: {}
+
+  async-function@1.0.0: {}
+
+  asynckit@0.4.0: {}
+
+  atomic-sleep@1.0.0: {}
+
+  available-typed-arrays@1.0.7:
+    dependencies:
+      possible-typed-array-names: 1.1.0
+
+  axe-core@4.13.0: {}
+
+  axobject-query@4.1.0: {}
+
+  babel-jest@30.4.1(@babel/core@7.29.7):
+    dependencies:
+      '@babel/core': 7.29.7
+      '@jest/transform': 30.4.1
+      '@types/babel__core': 7.20.5
+      babel-plugin-istanbul: 7.0.1
+      babel-preset-jest: 30.4.0(@babel/core@7.29.7)
+      chalk: 4.1.2
+      graceful-fs: 4.2.11
+      slash: 3.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  babel-plugin-istanbul@7.0.1:
+    dependencies:
+      '@babel/helper-plugin-utils': 7.29.7
+      '@istanbuljs/load-nyc-config': 1.1.0
+      '@istanbuljs/schema': 0.1.6
+      istanbul-lib-instrument: 6.0.3
+      test-exclude: 6.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  babel-plugin-jest-hoist@30.4.0:
+    dependencies:
+      '@types/babel__core': 7.20.5
+
+  babel-preset-current-node-syntax@1.2.0(@babel/core@7.29.7):
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/plugin-syntax-async-generators': 7.8.4(@babel/core@7.29.7)
+      '@babel/plugin-syntax-bigint': 7.8.3(@babel/core@7.29.7)
+      '@babel/plugin-syntax-class-properties': 7.12.13(@babel/core@7.29.7)
+      '@babel/plugin-syntax-class-static-block': 7.14.5(@babel/core@7.29.7)
+      '@babel/plugin-syntax-import-attributes': 7.29.7(@babel/core@7.29.7)
+      '@babel/plugin-syntax-import-meta': 7.10.4(@babel/core@7.29.7)
+      '@babel/plugin-syntax-json-strings': 7.8.3(@babel/core@7.29.7)
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4(@babel/core@7.29.7)
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3(@babel/core@7.29.7)
+      '@babel/plugin-syntax-numeric-separator': 7.10.4(@babel/core@7.29.7)
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3(@babel/core@7.29.7)
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3(@babel/core@7.29.7)
+      '@babel/plugin-syntax-optional-chaining': 7.8.3(@babel/core@7.29.7)
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5(@babel/core@7.29.7)
+      '@babel/plugin-syntax-top-level-await': 7.14.5(@babel/core@7.29.7)
+
+  babel-preset-jest@30.4.0(@babel/core@7.29.7):
+    dependencies:
+      '@babel/core': 7.29.7
+      babel-plugin-jest-hoist: 30.4.0
+      babel-preset-current-node-syntax: 1.2.0(@babel/core@7.29.7)
+
+  balanced-match@1.0.2: {}
+
+  balanced-match@4.0.4: {}
+
+  base64-js@1.5.1: {}
+
+  baseline-browser-mapping@2.11.13: {}
+
+  bl@4.1.0:
+    dependencies:
+      buffer: 5.7.1
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
+  body-parser@2.3.0:
+    dependencies:
+      bytes: 3.1.2
+      content-type: 2.0.0
+      debug: 4.4.3
+      http-errors: 2.0.1
+      iconv-lite: 0.7.3
+      on-finished: 2.4.1
+      qs: 6.15.3
+      raw-body: 3.0.2
+      type-is: 2.1.0
+    transitivePeerDependencies:
+      - supports-color
+
+  bowser@2.14.1: {}
+
+  boxen@5.1.2:
+    dependencies:
+      ansi-align: 3.0.1
+      camelcase: 6.3.0
+      chalk: 4.1.2
+      cli-boxes: 2.2.1
+      string-width: 4.2.3
+      type-fest: 0.20.2
+      widest-line: 3.1.0
+      wrap-ansi: 7.0.0
+
+  brace-expansion@1.1.18:
+    dependencies:
+      balanced-match: 1.0.2
+      concat-map: 0.0.1
+
+  brace-expansion@2.1.4:
+    dependencies:
+      balanced-match: 1.0.2
+
+  brace-expansion@5.0.9:
+    dependencies:
+      balanced-match: 4.0.4
+
+  browserslist@4.28.8:
+    dependencies:
+      baseline-browser-mapping: 2.11.13
+      caniuse-lite: 1.0.30001809
+      electron-to-chromium: 1.5.404
+      node-releases: 2.0.53
+      update-browserslist-db: 1.3.1(browserslist@4.28.8)
+
+  bs-logger@0.2.6:
+    dependencies:
+      fast-json-stable-stringify: 2.1.0
+
+  bser@2.1.1:
+    dependencies:
+      node-int64: 0.4.0
+
+  buffer-equal-constant-time@1.0.1: {}
+
+  buffer-from@1.1.2: {}
+
+  buffer@5.7.1:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
+  busboy@1.6.0:
+    dependencies:
+      streamsearch: 1.1.0
+
+  bytes@3.1.2: {}
+
+  c12@3.1.0:
+    dependencies:
+      chokidar: 4.0.3
+      confbox: 0.2.4
+      defu: 6.1.7
+      dotenv: 16.6.1
+      exsolve: 1.1.1
+      giget: 2.0.0
+      jiti: 2.7.0
+      ohash: 2.0.11
+      pathe: 2.0.3
+      perfect-debounce: 1.0.0
+      pkg-types: 2.3.1
+      rc9: 2.1.2
+
+  call-bind-apply-helpers@1.0.2:
+    dependencies:
+      es-errors: 1.3.0
+      function-bind: 1.1.2
+
+  call-bind@1.0.9:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      es-define-property: 1.0.1
+      get-intrinsic: 1.3.0
+      set-function-length: 1.2.2
+
+  call-bound@1.0.4:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      get-intrinsic: 1.3.0
+
+  callsites@3.1.0: {}
+
+  camelcase@5.3.1: {}
+
+  camelcase@6.3.0: {}
+
+  caniuse-lite@1.0.30001809: {}
+
+  chalk@4.1.2:
+    dependencies:
+      ansi-styles: 4.3.0
+      supports-color: 7.2.0
+
+  char-regex@1.0.2: {}
+
+  chardet@2.2.0: {}
+
+  check-disk-space@3.4.0: {}
+
+  chokidar@4.0.3:
+    dependencies:
+      readdirp: 4.1.2
+
+  chrome-trace-event@1.0.4: {}
+
+  ci-info@4.4.0: {}
+
+  citty@0.1.6:
+    dependencies:
+      consola: 3.4.2
+
+  citty@0.2.2: {}
+
+  cjs-module-lexer@2.2.0: {}
+
+  class-variance-authority@0.7.1:
+    dependencies:
+      clsx: 2.1.1
+
+  cli-boxes@2.2.1: {}
+
+  cli-cursor@3.1.0:
+    dependencies:
+      restore-cursor: 3.1.0
+
+  cli-spinners@2.9.2: {}
+
+  cli-table3@0.6.5:
+    dependencies:
+      string-width: 4.2.3
+    optionalDependencies:
+      '@colors/colors': 1.5.0
+
+  cli-width@4.1.0: {}
+
+  client-only@0.0.1: {}
+
+  cliui@8.0.1:
+    dependencies:
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+      wrap-ansi: 7.0.0
+
+  clone@1.0.4: {}
+
+  clsx@2.1.1: {}
+
+  cluster-key-slot@1.1.1: {}
+
+  co@4.6.0: {}
+
+  collect-v8-coverage@1.0.3: {}
+
+  color-convert@2.0.1:
+    dependencies:
+      color-name: 1.1.4
+
+  color-name@1.1.4: {}
+
+  colorette@2.0.20: {}
+
+  combined-stream@1.0.8:
+    dependencies:
+      delayed-stream: 1.0.0
+
+  commander@2.20.3: {}
+
+  commander@4.1.1: {}
+
+  comment-json@5.0.0:
+    dependencies:
+      array-timsort: 1.0.3
+      esprima: 4.0.1
+
+  comment-parser@1.4.8: {}
+
+  component-emitter@1.3.1: {}
+
+  compressible@2.0.18:
+    dependencies:
+      mime-db: 1.54.0
+
+  compression@1.8.1:
+    dependencies:
+      bytes: 3.1.2
+      compressible: 2.0.18
+      debug: 2.6.9
+      negotiator: 0.6.4
+      on-headers: 1.1.0
+      safe-buffer: 5.2.1
+      vary: 1.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  concat-map@0.0.1: {}
+
+  concat-stream@2.0.0:
+    dependencies:
+      buffer-from: 1.1.2
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+      typedarray: 0.0.6
+
+  confbox@0.2.4: {}
+
+  consola@3.4.2: {}
+
+  content-disposition@1.1.0: {}
+
+  content-type@1.0.5: {}
+
+  content-type@2.0.0: {}
+
+  convert-source-map@2.0.0: {}
+
+  cookie-signature@1.2.2: {}
+
+  cookie@0.7.2: {}
+
+  cookiejar@2.1.4: {}
+
+  cors@2.8.6:
+    dependencies:
+      object-assign: 4.1.1
+      vary: 1.1.2
+
+  cosmiconfig@8.3.6(typescript@5.9.3):
+    dependencies:
+      import-fresh: 3.3.1
+      js-yaml: 4.3.1
+      parse-json: 5.2.0
+      path-type: 4.0.0
+    optionalDependencies:
+      typescript: 5.9.3
+
+  cross-spawn@7.0.6:
+    dependencies:
+      path-key: 3.1.1
+      shebang-command: 2.0.0
+      which: 2.0.2
+
+  csstype@3.2.3: {}
+
+  damerau-levenshtein@1.0.8: {}
+
+  data-view-buffer@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      is-data-view: 1.0.2
+
+  data-view-byte-length@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      is-data-view: 1.0.2
+
+  data-view-byte-offset@1.0.1:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      is-data-view: 1.0.2
+
+  dateformat@4.6.3: {}
+
+  debug@2.6.9:
+    dependencies:
+      ms: 2.0.0
+
+  debug@4.4.3:
+    dependencies:
+      ms: 2.1.3
+
+  dedent@1.7.2: {}
+
+  deep-is@0.1.4: {}
+
+  deepmerge-ts@7.1.5: {}
+
+  deepmerge@4.3.1: {}
+
+  defaults@1.0.4:
+    dependencies:
+      clone: 1.0.4
+
+  define-data-property@1.1.4:
+    dependencies:
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      gopd: 1.2.0
+
+  define-properties@1.2.1:
+    dependencies:
+      define-data-property: 1.1.4
+      has-property-descriptors: 1.0.2
+      object-keys: 1.1.1
+
+  defu@6.1.7: {}
+
+  delayed-stream@1.0.0: {}
+
+  denque@2.1.0: {}
+
+  depd@2.0.0: {}
+
+  destr@2.0.5: {}
+
+  detect-libc@2.1.2: {}
+
+  detect-newline@3.1.0: {}
+
+  dezalgo@1.0.4:
+    dependencies:
+      asap: 2.0.6
+      wrappy: 1.0.2
+
+  doctrine@2.1.0:
+    dependencies:
+      esutils: 2.0.3
+
+  dotenv-expand@12.0.3:
+    dependencies:
+      dotenv: 16.6.1
+
+  dotenv@16.0.3: {}
+
+  dotenv@16.6.1: {}
+
+  dotenv@17.4.1: {}
+
+  dunder-proto@1.0.1:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      es-errors: 1.3.0
+      gopd: 1.2.0
+
+  eastasianwidth@0.2.0: {}
+
+  ecdsa-sig-formatter@1.0.11:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  ee-first@1.1.1: {}
+
+  effect@3.21.0:
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      fast-check: 3.23.2
+
+  electron-to-chromium@1.5.404: {}
+
+  emittery@0.13.1: {}
+
+  emoji-regex@8.0.0: {}
+
+  emoji-regex@9.2.2: {}
+
+  empathic@2.0.0: {}
+
+  encodeurl@2.0.0: {}
+
+  end-of-stream@1.4.5:
+    dependencies:
+      once: 1.4.0
+
+  enhanced-resolve@5.24.5:
+    dependencies:
+      graceful-fs: 4.2.11
+      tapable: 2.3.3
+
+  error-ex@1.3.4:
+    dependencies:
+      is-arrayish: 0.2.1
+
+  es-abstract-get@1.0.0:
+    dependencies:
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+      is-callable: 1.2.7
+      object-inspect: 1.13.4
+
+  es-abstract@1.24.2:
+    dependencies:
+      array-buffer-byte-length: 1.0.2
+      arraybuffer.prototype.slice: 1.0.4
+      available-typed-arrays: 1.0.7
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      data-view-buffer: 1.0.2
+      data-view-byte-length: 1.0.2
+      data-view-byte-offset: 1.0.1
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+      es-set-tostringtag: 2.1.0
+      es-to-primitive: 1.3.4
+      function.prototype.name: 1.2.0
+      get-intrinsic: 1.3.0
+      get-proto: 1.0.1
+      get-symbol-description: 1.1.0
+      globalthis: 1.0.4
+      gopd: 1.2.0
+      has-property-descriptors: 1.0.2
+      has-proto: 1.2.0
+      has-symbols: 1.1.0
+      hasown: 2.0.4
+      internal-slot: 1.1.0
+      is-array-buffer: 3.0.5
+      is-callable: 1.2.7
+      is-data-view: 1.0.2
+      is-negative-zero: 2.0.3
+      is-regex: 1.2.1
+      is-set: 2.0.3
+      is-shared-array-buffer: 1.0.4
+      is-string: 1.1.1
+      is-typed-array: 1.1.15
+      is-weakref: 1.1.1
+      math-intrinsics: 1.1.0
+      object-inspect: 1.13.4
+      object-keys: 1.1.1
+      object.assign: 4.1.7
+      own-keys: 1.0.2
+      regexp.prototype.flags: 1.5.4
+      safe-array-concat: 1.1.4
+      safe-push-apply: 1.0.0
+      safe-regex-test: 1.1.0
+      set-proto: 1.0.0
+      stop-iteration-iterator: 1.1.0
+      string.prototype.trim: 1.2.11
+      string.prototype.trimend: 1.0.10
+      string.prototype.trimstart: 1.0.8
+      typed-array-buffer: 1.0.3
+      typed-array-byte-length: 1.0.3
+      typed-array-byte-offset: 1.0.4
+      typed-array-length: 1.0.8
+      unbox-primitive: 1.1.0
+      which-typed-array: 1.1.22
+
+  es-define-property@1.0.1: {}
+
+  es-errors@1.3.0: {}
+
+  es-iterator-helpers@1.4.0:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-errors: 1.3.0
+      es-set-tostringtag: 2.1.0
+      function-bind: 1.1.2
+      get-intrinsic: 1.3.0
+      globalthis: 1.0.4
+      gopd: 1.2.0
+      has-property-descriptors: 1.0.2
+      has-proto: 1.2.0
+      has-symbols: 1.1.0
+      internal-slot: 1.1.0
+      iterator.prototype: 1.1.5
+      math-intrinsics: 1.1.0
+
+  es-module-lexer@2.3.1: {}
+
+  es-object-atoms@1.1.2:
+    dependencies:
+      es-errors: 1.3.0
+
+  es-set-tostringtag@2.1.0:
+    dependencies:
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      has-tostringtag: 1.0.2
+      hasown: 2.0.4
+
+  es-shim-unscopables@1.1.0:
+    dependencies:
+      hasown: 2.0.4
+
+  es-to-primitive@1.3.4:
+    dependencies:
+      es-abstract-get: 1.0.0
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      is-callable: 1.2.7
+      is-date-object: 1.1.0
+      is-symbol: 1.1.1
+
+  esbuild@0.28.2:
+    optionalDependencies:
+      '@esbuild/aix-ppc64': 0.28.2
+      '@esbuild/android-arm': 0.28.2
+      '@esbuild/android-arm64': 0.28.2
+      '@esbuild/android-x64': 0.28.2
+      '@esbuild/darwin-arm64': 0.28.2
+      '@esbuild/darwin-x64': 0.28.2
+      '@esbuild/freebsd-arm64': 0.28.2
+      '@esbuild/freebsd-x64': 0.28.2
+      '@esbuild/linux-arm': 0.28.2
+      '@esbuild/linux-arm64': 0.28.2
+      '@esbuild/linux-ia32': 0.28.2
+      '@esbuild/linux-loong64': 0.28.2
+      '@esbuild/linux-mips64el': 0.28.2
+      '@esbuild/linux-ppc64': 0.28.2
+      '@esbuild/linux-riscv64': 0.28.2
+      '@esbuild/linux-s390x': 0.28.2
+      '@esbuild/linux-x64': 0.28.2
+      '@esbuild/netbsd-arm64': 0.28.2
+      '@esbuild/netbsd-x64': 0.28.2
+      '@esbuild/openbsd-arm64': 0.28.2
+      '@esbuild/openbsd-x64': 0.28.2
+      '@esbuild/openharmony-arm64': 0.28.2
+      '@esbuild/sunos-x64': 0.28.2
+      '@esbuild/win32-arm64': 0.28.2
+      '@esbuild/win32-ia32': 0.28.2
+      '@esbuild/win32-x64': 0.28.2
+
+  escalade@3.2.0: {}
+
+  escape-html@1.0.3: {}
+
+  escape-string-regexp@2.0.0: {}
+
+  escape-string-regexp@4.0.0: {}
+
+  eslint-config-prettier@10.1.8(eslint@9.39.5(jiti@2.7.0)):
+    dependencies:
+      eslint: 9.39.5(jiti@2.7.0)
+
+  eslint-import-context@0.1.9(unrs-resolver@1.12.2):
+    dependencies:
+      get-tsconfig: 4.14.1
+      stable-hash-x: 0.2.0
+    optionalDependencies:
+      unrs-resolver: 1.12.2
+
+  eslint-import-resolver-typescript@4.4.5(eslint-plugin-import-x@4.17.1(@typescript-eslint/utils@8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.5(jiti@2.7.0)))(eslint@9.39.5(jiti@2.7.0)):
+    dependencies:
+      debug: 4.4.3
+      eslint: 9.39.5(jiti@2.7.0)
+      eslint-import-context: 0.1.9(unrs-resolver@1.12.2)
+      get-tsconfig: 4.14.1
+      is-bun-module: 2.0.0
+      stable-hash-x: 0.2.0
+      tinyglobby: 0.2.17
+      unrs-resolver: 1.12.2
+    optionalDependencies:
+      eslint-plugin-import-x: 4.17.1(@typescript-eslint/utils@8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.5(jiti@2.7.0))
+    transitivePeerDependencies:
+      - supports-color
+
+  eslint-plugin-import-x@4.17.1(@typescript-eslint/utils@8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.5(jiti@2.7.0)):
+    dependencies:
+      '@typescript-eslint/types': 8.67.0
+      comment-parser: 1.4.8
+      debug: 4.4.3
+      eslint: 9.39.5(jiti@2.7.0)
+      eslint-import-context: 0.1.9(unrs-resolver@1.12.2)
+      is-glob: 4.0.3
+      minimatch: 10.2.6
+      semver: 7.8.5
+      stable-hash-x: 0.2.0
+      unrs-resolver: 1.12.2
+    optionalDependencies:
+      '@typescript-eslint/utils': 8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)
+    transitivePeerDependencies:
+      - supports-color
+
+  eslint-plugin-jsx-a11y@6.10.2(eslint@9.39.5(jiti@2.7.0)):
+    dependencies:
+      aria-query: 5.3.2
+      array-includes: 3.1.9
+      array.prototype.flatmap: 1.3.3
+      ast-types-flow: 0.0.8
+      axe-core: 4.13.0
+      axobject-query: 4.1.0
+      damerau-levenshtein: 1.0.8
+      emoji-regex: 9.2.2
+      eslint: 9.39.5(jiti@2.7.0)
+      hasown: 2.0.4
+      jsx-ast-utils: 3.3.5
+      language-tags: 1.0.9
+      minimatch: 3.1.5
+      object.fromentries: 2.0.8
+      safe-regex-test: 1.1.0
+      string.prototype.includes: 2.0.1
+
+  eslint-plugin-react-hooks@7.1.1(eslint@9.39.5(jiti@2.7.0)):
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/parser': 7.29.8
+      eslint: 9.39.5(jiti@2.7.0)
+      hermes-parser: 0.25.1
+      zod: 4.4.3
+      zod-validation-error: 4.0.2(zod@4.4.3)
+    transitivePeerDependencies:
+      - supports-color
+
+  eslint-plugin-react@7.37.5(eslint@9.39.5(jiti@2.7.0)):
+    dependencies:
+      array-includes: 3.1.9
+      array.prototype.findlast: 1.2.5
+      array.prototype.flatmap: 1.3.3
+      array.prototype.tosorted: 1.1.4
+      doctrine: 2.1.0
+      es-iterator-helpers: 1.4.0
+      eslint: 9.39.5(jiti@2.7.0)
+      estraverse: 5.3.0
+      hasown: 2.0.4
+      jsx-ast-utils: 3.3.5
+      minimatch: 3.1.5
+      object.entries: 1.1.9
+      object.fromentries: 2.0.8
+      object.values: 1.2.1
+      prop-types: 15.8.1
+      resolve: 2.0.0-next.7
+      semver: 6.3.1
+      string.prototype.matchall: 4.0.12
+      string.prototype.repeat: 1.0.0
+
+  eslint-plugin-turbo@2.10.9(eslint@9.39.5(jiti@2.7.0))(turbo@2.10.9):
+    dependencies:
+      dotenv: 16.0.3
+      eslint: 9.39.5(jiti@2.7.0)
+      turbo: 2.10.9
+
+  eslint-scope@5.1.1:
+    dependencies:
+      esrecurse: 4.3.0
+      estraverse: 4.3.0
+
+  eslint-scope@8.4.0:
+    dependencies:
+      esrecurse: 4.3.0
+      estraverse: 5.3.0
+
+  eslint-visitor-keys@3.4.3: {}
+
+  eslint-visitor-keys@4.2.1: {}
+
+  eslint-visitor-keys@5.0.1: {}
+
+  eslint@9.39.5(jiti@2.7.0):
+    dependencies:
+      '@eslint-community/eslint-utils': 4.10.1(eslint@9.39.5(jiti@2.7.0))
+      '@eslint-community/regexpp': 4.12.2
+      '@eslint/config-array': 0.21.2
+      '@eslint/config-helpers': 0.4.2
+      '@eslint/core': 0.17.0
+      '@eslint/eslintrc': 3.3.6
+      '@eslint/js': 9.39.5
+      '@eslint/plugin-kit': 0.4.1
+      '@humanfs/node': 0.16.8
+      '@humanwhocodes/module-importer': 1.0.1
+      '@humanwhocodes/retry': 0.4.3
+      '@types/estree': 1.0.9
+      ajv: 6.15.0
+      chalk: 4.1.2
+      cross-spawn: 7.0.6
+      debug: 4.4.3
+      escape-string-regexp: 4.0.0
+      eslint-scope: 8.4.0
+      eslint-visitor-keys: 4.2.1
+      espree: 10.4.0
+      esquery: 1.7.0
+      esutils: 2.0.3
+      fast-deep-equal: 3.1.3
+      file-entry-cache: 8.0.0
+      find-up: 5.0.0
+      glob-parent: 6.0.2
+      ignore: 5.3.2
+      imurmurhash: 0.1.4
+      is-glob: 4.0.3
+      json-stable-stringify-without-jsonify: 1.0.1
+      lodash.merge: 4.6.2
+      minimatch: 3.1.5
+      natural-compare: 1.4.0
+      optionator: 0.9.4
+    optionalDependencies:
+      jiti: 2.7.0
+    transitivePeerDependencies:
+      - supports-color
+
+  espree@10.4.0:
+    dependencies:
+      acorn: 8.18.0
+      acorn-jsx: 5.3.2(acorn@8.18.0)
+      eslint-visitor-keys: 4.2.1
+
+  esprima@4.0.1: {}
+
+  esquery@1.7.0:
+    dependencies:
+      estraverse: 5.3.0
+
+  esrecurse@4.3.0:
+    dependencies:
+      estraverse: 5.3.0
+
+  estraverse@4.3.0: {}
+
+  estraverse@5.3.0: {}
+
+  esutils@2.0.3: {}
+
+  etag@1.8.1: {}
+
+  events@3.3.0: {}
+
+  execa@5.1.1:
+    dependencies:
+      cross-spawn: 7.0.6
+      get-stream: 6.0.1
+      human-signals: 2.1.0
+      is-stream: 2.0.1
+      merge-stream: 2.0.0
+      npm-run-path: 4.0.1
+      onetime: 5.1.2
+      signal-exit: 3.0.7
+      strip-final-newline: 2.0.0
+
+  exit-x@0.2.2: {}
+
+  expect@30.4.1:
+    dependencies:
+      '@jest/expect-utils': 30.4.1
+      '@jest/get-type': 30.1.0
+      jest-matcher-utils: 30.4.1
+      jest-message-util: 30.4.1
+      jest-mock: 30.4.1
+      jest-util: 30.4.1
+
+  express@5.2.1:
+    dependencies:
+      accepts: 2.0.0
+      body-parser: 2.3.0
+      content-disposition: 1.1.0
+      content-type: 1.0.5
+      cookie: 0.7.2
+      cookie-signature: 1.2.2
+      debug: 4.4.3
+      depd: 2.0.0
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      finalhandler: 2.1.1
+      fresh: 2.0.0
+      http-errors: 2.0.1
+      merge-descriptors: 2.0.0
+      mime-types: 3.0.2
+      on-finished: 2.4.1
+      once: 1.4.0
+      parseurl: 1.3.3
+      proxy-addr: 2.0.7
+      qs: 6.15.3
+      range-parser: 1.3.0
+      router: 2.2.0
+      send: 1.2.1
+      serve-static: 2.2.1
+      statuses: 2.0.2
+      type-is: 2.1.0
+      vary: 1.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  exsolve@1.1.1: {}
+
+  fast-check@3.23.2:
+    dependencies:
+      pure-rand: 6.1.0
+
+  fast-copy@4.0.4: {}
+
+  fast-deep-equal@3.1.3: {}
+
+  fast-json-stable-stringify@2.1.0: {}
+
+  fast-levenshtein@2.0.6: {}
+
+  fast-safe-stringify@2.1.1: {}
+
+  fast-uri@3.1.5: {}
+
+  fb-watchman@2.0.2:
+    dependencies:
+      bser: 2.1.1
+
+  fdir@6.5.0(picomatch@4.0.5):
+    optionalDependencies:
+      picomatch: 4.0.5
+
+  file-entry-cache@8.0.0:
+    dependencies:
+      flat-cache: 4.0.1
+
+  file-type@21.3.4:
+    dependencies:
+      '@tokenizer/inflate': 0.4.1
+      strtok3: 10.3.5
+      token-types: 6.1.2
+      uint8array-extras: 1.5.0
+    transitivePeerDependencies:
+      - supports-color
+
+  finalhandler@2.1.1:
+    dependencies:
+      debug: 4.4.3
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      on-finished: 2.4.1
+      parseurl: 1.3.3
+      statuses: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
+
+  find-up@4.1.0:
+    dependencies:
+      locate-path: 5.0.0
+      path-exists: 4.0.0
+
+  find-up@5.0.0:
+    dependencies:
+      locate-path: 6.0.0
+      path-exists: 4.0.0
+
+  flat-cache@4.0.1:
+    dependencies:
+      flatted: 3.4.4
+      keyv: 4.5.4
+
+  flatted@3.4.4: {}
+
+  for-each@0.3.5:
+    dependencies:
+      is-callable: 1.2.7
+
+  foreground-child@3.3.1:
+    dependencies:
+      cross-spawn: 7.0.6
+      signal-exit: 4.1.0
+
+  fork-ts-checker-webpack-plugin@9.1.0(typescript@5.9.3)(webpack@5.106.2):
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      chalk: 4.1.2
+      chokidar: 4.0.3
+      cosmiconfig: 8.3.6(typescript@5.9.3)
+      deepmerge: 4.3.1
+      fs-extra: 10.1.0
+      memfs: 3.5.3
+      minimatch: 3.1.5
+      node-abort-controller: 3.1.1
+      schema-utils: 3.3.0
+      semver: 7.8.5
+      tapable: 2.3.3
+      typescript: 5.9.3
+      webpack: 5.106.2
+
+  form-data@4.0.6:
+    dependencies:
+      asynckit: 0.4.0
+      combined-stream: 1.0.8
+      es-set-tostringtag: 2.1.0
+      hasown: 2.0.4
+      mime-types: 2.1.35
+
+  formidable@3.5.4:
+    dependencies:
+      '@paralleldrive/cuid2': 2.3.1
+      dezalgo: 1.0.4
+      once: 1.4.0
+
+  forwarded@0.2.0: {}
+
+  fresh@2.0.0: {}
+
+  fs-extra@10.1.0:
+    dependencies:
+      graceful-fs: 4.2.11
+      jsonfile: 6.2.1
+      universalify: 2.0.1
+
+  fs-monkey@1.1.0: {}
+
+  fs.realpath@1.0.0: {}
+
+  fsevents@2.3.3:
+    optional: true
+
+  function-bind@1.1.2: {}
+
+  function.prototype.name@1.2.0:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      functions-have-names: 1.2.3
+      has-property-descriptors: 1.0.2
+      hasown: 2.0.4
+      is-callable: 1.2.7
+      is-document.all: 1.0.0
+
+  functions-have-names@1.2.3: {}
+
+  generator-function@2.0.1: {}
+
+  gensync@1.0.0-beta.2: {}
+
+  get-caller-file@2.0.5: {}
+
+  get-intrinsic@1.3.0:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+      function-bind: 1.1.2
+      get-proto: 1.0.1
+      gopd: 1.2.0
+      has-symbols: 1.1.0
+      hasown: 2.0.4
+      math-intrinsics: 1.1.0
+
+  get-package-type@0.1.0: {}
+
+  get-proto@1.0.1:
+    dependencies:
+      dunder-proto: 1.0.1
+      es-object-atoms: 1.1.2
+
+  get-stream@6.0.1: {}
+
+  get-symbol-description@1.1.0:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+
+  get-tsconfig@4.14.1:
+    dependencies:
+      resolve-pkg-maps: 1.0.0
+
+  giget@2.0.0:
+    dependencies:
+      citty: 0.1.6
+      consola: 3.4.2
+      defu: 6.1.7
+      node-fetch-native: 1.6.7
+      nypm: 0.6.9
+      pathe: 2.0.3
+
+  glob-parent@6.0.2:
+    dependencies:
+      is-glob: 4.0.3
+
+  glob-to-regexp@0.4.1: {}
+
+  glob@10.5.0:
+    dependencies:
+      foreground-child: 3.3.1
+      jackspeak: 3.4.3
+      minimatch: 9.0.9
+      minipass: 7.1.3
+      package-json-from-dist: 1.0.1
+      path-scurry: 1.11.1
+
+  glob@13.0.6:
+    dependencies:
+      minimatch: 10.2.6
+      minipass: 7.1.3
+      path-scurry: 2.0.2
+
+  glob@7.2.3:
+    dependencies:
+      fs.realpath: 1.0.0
+      inflight: 1.0.6
+      inherits: 2.0.4
+      minimatch: 3.1.5
+      once: 1.4.0
+      path-is-absolute: 1.0.1
+
+  globals@14.0.0: {}
+
+  globals@16.5.0: {}
+
+  globalthis@1.0.4:
+    dependencies:
+      define-properties: 1.2.1
+      gopd: 1.2.0
+
+  gopd@1.2.0: {}
+
+  graceful-fs@4.2.11: {}
+
+  handlebars@4.7.9:
+    dependencies:
+      minimist: 1.2.8
+      neo-async: 2.6.2
+      source-map: 0.6.1
+      wordwrap: 1.0.0
+    optionalDependencies:
+      uglify-js: 3.19.3
+
+  has-bigints@1.1.0: {}
+
+  has-flag@4.0.0: {}
+
+  has-property-descriptors@1.0.2:
+    dependencies:
+      es-define-property: 1.0.1
+
+  has-proto@1.2.0:
+    dependencies:
+      dunder-proto: 1.0.1
+
+  has-symbols@1.1.0: {}
+
+  has-tostringtag@1.0.2:
+    dependencies:
+      has-symbols: 1.1.0
+
+  hasown@2.0.4:
+    dependencies:
+      function-bind: 1.1.2
+
+  helmet@8.3.0: {}
+
+  help-me@5.0.0: {}
+
+  hermes-estree@0.25.1: {}
+
+  hermes-parser@0.25.1:
+    dependencies:
+      hermes-estree: 0.25.1
+
+  html-escaper@2.0.2: {}
+
+  http-errors@2.0.1:
+    dependencies:
+      depd: 2.0.0
+      inherits: 2.0.4
+      setprototypeof: 1.2.0
+      statuses: 2.0.2
+      toidentifier: 1.0.1
+
+  human-signals@2.1.0: {}
+
+  iconv-lite@0.7.3:
+    dependencies:
+      safer-buffer: 2.1.2
+
+  ieee754@1.2.1: {}
+
+  ignore@5.3.2: {}
+
+  ignore@7.0.6: {}
+
+  import-fresh@3.3.1:
+    dependencies:
+      parent-module: 1.0.1
+      resolve-from: 4.0.0
+
+  import-local@3.2.0:
+    dependencies:
+      pkg-dir: 4.2.0
+      resolve-cwd: 3.0.0
+
+  imurmurhash@0.1.4: {}
+
+  inflight@1.0.6:
+    dependencies:
+      once: 1.4.0
+      wrappy: 1.0.2
+
+  inherits@2.0.4: {}
+
+  internal-slot@1.1.0:
+    dependencies:
+      es-errors: 1.3.0
+      hasown: 2.0.4
+      side-channel: 1.1.1
+
+  ioredis@5.11.1:
+    dependencies:
+      '@ioredis/commands': 1.10.0
+      cluster-key-slot: 1.1.1
+      debug: 4.4.3
+      denque: 2.1.0
+      redis-errors: 1.2.0
+      redis-parser: 3.0.0
+      standard-as-callback: 2.1.0
+    transitivePeerDependencies:
+      - supports-color
+
+  ipaddr.js@1.9.1: {}
+
+  is-array-buffer@3.0.5:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      get-intrinsic: 1.3.0
+
+  is-arrayish@0.2.1: {}
+
+  is-async-function@2.1.1:
+    dependencies:
+      async-function: 1.0.0
+      call-bound: 1.0.4
+      get-proto: 1.0.1
+      has-tostringtag: 1.0.2
+      safe-regex-test: 1.1.0
+
+  is-bigint@1.1.0:
+    dependencies:
+      has-bigints: 1.1.0
+
+  is-boolean-object@1.2.2:
+    dependencies:
+      call-bound: 1.0.4
+      has-tostringtag: 1.0.2
+
+  is-bun-module@2.0.0:
+    dependencies:
+      semver: 7.8.5
+
+  is-callable@1.2.7: {}
+
+  is-core-module@2.16.2:
+    dependencies:
+      hasown: 2.0.4
+
+  is-data-view@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      get-intrinsic: 1.3.0
+      is-typed-array: 1.1.15
+
+  is-date-object@1.1.0:
+    dependencies:
+      call-bound: 1.0.4
+      has-tostringtag: 1.0.2
+
+  is-document.all@1.0.0:
+    dependencies:
+      call-bound: 1.0.4
+
+  is-extglob@2.1.1: {}
+
+  is-finalizationregistry@1.1.1:
+    dependencies:
+      call-bound: 1.0.4
+
+  is-fullwidth-code-point@3.0.0: {}
+
+  is-generator-fn@2.1.0: {}
+
+  is-generator-function@1.1.2:
+    dependencies:
+      call-bound: 1.0.4
+      generator-function: 2.0.1
+      get-proto: 1.0.1
+      has-tostringtag: 1.0.2
+      safe-regex-test: 1.1.0
+
+  is-glob@4.0.3:
+    dependencies:
+      is-extglob: 2.1.1
+
+  is-interactive@1.0.0: {}
+
+  is-map@2.0.3: {}
+
+  is-negative-zero@2.0.3: {}
+
+  is-number-object@1.1.1:
+    dependencies:
+      call-bound: 1.0.4
+      has-tostringtag: 1.0.2
+
+  is-promise@4.0.0: {}
+
+  is-regex@1.2.1:
+    dependencies:
+      call-bound: 1.0.4
+      gopd: 1.2.0
+      has-tostringtag: 1.0.2
+      hasown: 2.0.4
+
+  is-set@2.0.3: {}
+
+  is-shared-array-buffer@1.0.4:
+    dependencies:
+      call-bound: 1.0.4
+
+  is-stream@2.0.1: {}
+
+  is-string@1.1.1:
+    dependencies:
+      call-bound: 1.0.4
+      has-tostringtag: 1.0.2
+
+  is-symbol@1.1.1:
+    dependencies:
+      call-bound: 1.0.4
+      has-symbols: 1.1.0
+      safe-regex-test: 1.1.0
+
+  is-typed-array@1.1.15:
+    dependencies:
+      which-typed-array: 1.1.22
+
+  is-unicode-supported@0.1.0: {}
+
+  is-weakmap@2.0.2: {}
+
+  is-weakref@1.1.1:
+    dependencies:
+      call-bound: 1.0.4
+
+  is-weakset@2.0.4:
+    dependencies:
+      call-bound: 1.0.4
+      get-intrinsic: 1.3.0
+
+  isarray@2.0.5: {}
+
+  isexe@2.0.0: {}
+
+  istanbul-lib-coverage@3.2.2: {}
+
+  istanbul-lib-instrument@6.0.3:
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/parser': 7.29.8
+      '@istanbuljs/schema': 0.1.6
+      istanbul-lib-coverage: 3.2.2
+      semver: 7.8.5
+    transitivePeerDependencies:
+      - supports-color
+
+  istanbul-lib-report@3.0.1:
+    dependencies:
+      istanbul-lib-coverage: 3.2.2
+      make-dir: 4.0.0
+      supports-color: 7.2.0
+
+  istanbul-lib-source-maps@5.0.6:
+    dependencies:
+      '@jridgewell/trace-mapping': 0.3.31
+      debug: 4.4.3
+      istanbul-lib-coverage: 3.2.2
+    transitivePeerDependencies:
+      - supports-color
+
+  istanbul-reports@3.2.0:
+    dependencies:
+      html-escaper: 2.0.2
+      istanbul-lib-report: 3.0.1
+
+  iterare@1.2.1: {}
+
+  iterator.prototype@1.1.5:
+    dependencies:
+      define-data-property: 1.1.4
+      es-object-atoms: 1.1.2
+      get-intrinsic: 1.3.0
+      get-proto: 1.0.1
+      has-symbols: 1.1.0
+      set-function-name: 2.0.2
+
+  jackspeak@3.4.3:
+    dependencies:
+      '@isaacs/cliui': 8.0.2
+    optionalDependencies:
+      '@pkgjs/parseargs': 0.11.0
+
+  jest-changed-files@30.4.1:
+    dependencies:
+      execa: 5.1.1
+      jest-util: 30.4.1
+      p-limit: 3.1.0
+
+  jest-circus@30.4.2:
+    dependencies:
+      '@jest/environment': 30.4.1
+      '@jest/expect': 30.4.1
+      '@jest/test-result': 30.4.1
+      '@jest/types': 30.4.1
+      '@types/node': 22.20.1
+      chalk: 4.1.2
+      co: 4.6.0
+      dedent: 1.7.2
+      is-generator-fn: 2.1.0
+      jest-each: 30.4.1
+      jest-matcher-utils: 30.4.1
+      jest-message-util: 30.4.1
+      jest-runtime: 30.4.2
+      jest-snapshot: 30.4.1
+      jest-util: 30.4.1
+      p-limit: 3.1.0
+      pretty-format: 30.4.1
+      pure-rand: 7.0.1
+      slash: 3.0.0
+      stack-utils: 2.0.6
+    transitivePeerDependencies:
+      - babel-plugin-macros
+      - supports-color
+
+  jest-cli@30.4.2(@types/node@22.20.1):
+    dependencies:
+      '@jest/core': 30.4.2
+      '@jest/test-result': 30.4.1
+      '@jest/types': 30.4.1
+      chalk: 4.1.2
+      exit-x: 0.2.2
+      import-local: 3.2.0
+      jest-config: 30.4.2(@types/node@22.20.1)
+      jest-util: 30.4.1
+      jest-validate: 30.4.1
+      yargs: 17.7.3
+    transitivePeerDependencies:
+      - '@types/node'
+      - babel-plugin-macros
+      - esbuild-register
+      - supports-color
+      - ts-node
+
+  jest-config@30.4.2(@types/node@22.20.1):
+    dependencies:
+      '@babel/core': 7.29.7
+      '@jest/get-type': 30.1.0
+      '@jest/pattern': 30.4.0
+      '@jest/test-sequencer': 30.4.1
+      '@jest/types': 30.4.1
+      babel-jest: 30.4.1(@babel/core@7.29.7)
+      chalk: 4.1.2
+      ci-info: 4.4.0
+      deepmerge: 4.3.1
+      glob: 10.5.0
+      graceful-fs: 4.2.11
+      jest-circus: 30.4.2
+      jest-docblock: 30.4.0
+      jest-environment-node: 30.4.1
+      jest-regex-util: 30.4.0
+      jest-resolve: 30.4.1
+      jest-runner: 30.4.2
+      jest-util: 30.4.1
+      jest-validate: 30.4.1
+      parse-json: 5.2.0
+      pretty-format: 30.4.1
+      slash: 3.0.0
+      strip-json-comments: 3.1.1
+    optionalDependencies:
+      '@types/node': 22.20.1
+    transitivePeerDependencies:
+      - babel-plugin-macros
+      - supports-color
+
+  jest-diff@30.4.1:
+    dependencies:
+      '@jest/diff-sequences': 30.4.0
+      '@jest/get-type': 30.1.0
+      chalk: 4.1.2
+      pretty-format: 30.4.1
+
+  jest-docblock@30.4.0:
+    dependencies:
+      detect-newline: 3.1.0
+
+  jest-each@30.4.1:
+    dependencies:
+      '@jest/get-type': 30.1.0
+      '@jest/types': 30.4.1
+      chalk: 4.1.2
+      jest-util: 30.4.1
+      pretty-format: 30.4.1
+
+  jest-environment-node@30.4.1:
+    dependencies:
+      '@jest/environment': 30.4.1
+      '@jest/fake-timers': 30.4.1
+      '@jest/types': 30.4.1
+      '@types/node': 22.20.1
+      jest-mock: 30.4.1
+      jest-util: 30.4.1
+      jest-validate: 30.4.1
+
+  jest-haste-map@30.4.1:
+    dependencies:
+      '@jest/types': 30.4.1
+      '@types/node': 22.20.1
+      anymatch: 3.1.3
+      fb-watchman: 2.0.2
+      graceful-fs: 4.2.11
+      jest-regex-util: 30.4.0
+      jest-util: 30.4.1
+      jest-worker: 30.4.1
+      picomatch: 4.0.5
+      walker: 1.0.8
+    optionalDependencies:
+      fsevents: 2.3.3
+
+  jest-leak-detector@30.4.1:
+    dependencies:
+      '@jest/get-type': 30.1.0
+      pretty-format: 30.4.1
+
+  jest-matcher-utils@30.4.1:
+    dependencies:
+      '@jest/get-type': 30.1.0
+      chalk: 4.1.2
+      jest-diff: 30.4.1
+      pretty-format: 30.4.1
+
+  jest-message-util@30.4.1:
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@jest/types': 30.4.1
+      '@types/stack-utils': 2.0.3
+      chalk: 4.1.2
+      graceful-fs: 4.2.11
+      jest-util: 30.4.1
+      picomatch: 4.0.5
+      pretty-format: 30.4.1
+      slash: 3.0.0
+      stack-utils: 2.0.6
+
+  jest-mock@30.4.1:
+    dependencies:
+      '@jest/types': 30.4.1
+      '@types/node': 22.20.1
+      jest-util: 30.4.1
+
+  jest-pnp-resolver@1.2.3(jest-resolve@30.4.1):
+    optionalDependencies:
+      jest-resolve: 30.4.1
+
+  jest-regex-util@30.4.0: {}
+
+  jest-resolve-dependencies@30.4.2:
+    dependencies:
+      jest-regex-util: 30.4.0
+      jest-snapshot: 30.4.1
+    transitivePeerDependencies:
+      - supports-color
+
+  jest-resolve@30.4.1:
+    dependencies:
+      chalk: 4.1.2
+      graceful-fs: 4.2.11
+      jest-haste-map: 30.4.1
+      jest-pnp-resolver: 1.2.3(jest-resolve@30.4.1)
+      jest-util: 30.4.1
+      jest-validate: 30.4.1
+      slash: 3.0.0
+      unrs-resolver: 1.12.2
+
+  jest-runner@30.4.2:
+    dependencies:
+      '@jest/console': 30.4.1
+      '@jest/environment': 30.4.1
+      '@jest/test-result': 30.4.1
+      '@jest/transform': 30.4.1
+      '@jest/types': 30.4.1
+      '@types/node': 22.20.1
+      chalk: 4.1.2
+      emittery: 0.13.1
+      exit-x: 0.2.2
+      graceful-fs: 4.2.11
+      jest-docblock: 30.4.0
+      jest-environment-node: 30.4.1
+      jest-haste-map: 30.4.1
+      jest-leak-detector: 30.4.1
+      jest-message-util: 30.4.1
+      jest-resolve: 30.4.1
+      jest-runtime: 30.4.2
+      jest-util: 30.4.1
+      jest-watcher: 30.4.1
+      jest-worker: 30.4.1
+      p-limit: 3.1.0
+      source-map-support: 0.5.13
+    transitivePeerDependencies:
+      - supports-color
+
+  jest-runtime@30.4.2:
+    dependencies:
+      '@jest/environment': 30.4.1
+      '@jest/fake-timers': 30.4.1
+      '@jest/globals': 30.4.1
+      '@jest/source-map': 30.0.1
+      '@jest/test-result': 30.4.1
+      '@jest/transform': 30.4.1
+      '@jest/types': 30.4.1
+      '@types/node': 22.20.1
+      chalk: 4.1.2
+      cjs-module-lexer: 2.2.0
+      collect-v8-coverage: 1.0.3
+      glob: 10.5.0
+      graceful-fs: 4.2.11
+      jest-haste-map: 30.4.1
+      jest-message-util: 30.4.1
+      jest-mock: 30.4.1
+      jest-regex-util: 30.4.0
+      jest-resolve: 30.4.1
+      jest-snapshot: 30.4.1
+      jest-util: 30.4.1
+      slash: 3.0.0
+      strip-bom: 4.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  jest-snapshot@30.4.1:
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/generator': 7.29.8
+      '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.7)
+      '@babel/plugin-syntax-typescript': 7.29.7(@babel/core@7.29.7)
+      '@babel/types': 7.29.8
+      '@jest/expect-utils': 30.4.1
+      '@jest/get-type': 30.1.0
+      '@jest/snapshot-utils': 30.4.1
+      '@jest/transform': 30.4.1
+      '@jest/types': 30.4.1
+      babel-preset-current-node-syntax: 1.2.0(@babel/core@7.29.7)
+      chalk: 4.1.2
+      expect: 30.4.1
+      graceful-fs: 4.2.11
+      jest-diff: 30.4.1
+      jest-matcher-utils: 30.4.1
+      jest-message-util: 30.4.1
+      jest-util: 30.4.1
+      pretty-format: 30.4.1
+      semver: 7.8.5
+      synckit: 0.11.13
+    transitivePeerDependencies:
+      - supports-color
+
+  jest-util@30.4.1:
+    dependencies:
+      '@jest/types': 30.4.1
+      '@types/node': 22.20.1
+      chalk: 4.1.2
+      ci-info: 4.4.0
+      graceful-fs: 4.2.11
+      picomatch: 4.0.5
+
+  jest-validate@30.4.1:
+    dependencies:
+      '@jest/get-type': 30.1.0
+      '@jest/types': 30.4.1
+      camelcase: 6.3.0
+      chalk: 4.1.2
+      leven: 3.1.0
+      pretty-format: 30.4.1
+
+  jest-watcher@30.4.1:
+    dependencies:
+      '@jest/test-result': 30.4.1
+      '@jest/types': 30.4.1
+      '@types/node': 22.20.1
+      ansi-escapes: 4.3.2
+      chalk: 4.1.2
+      emittery: 0.13.1
+      jest-util: 30.4.1
+      string-length: 4.0.2
+
+  jest-worker@27.5.1:
+    dependencies:
+      '@types/node': 22.20.1
+      merge-stream: 2.0.0
+      supports-color: 8.1.1
+
+  jest-worker@30.4.1:
+    dependencies:
+      '@types/node': 22.20.1
+      '@ungap/structured-clone': 1.3.3
+      jest-util: 30.4.1
+      merge-stream: 2.0.0
+      supports-color: 8.1.1
+
+  jest@30.4.2(@types/node@22.20.1):
+    dependencies:
+      '@jest/core': 30.4.2
+      '@jest/types': 30.4.1
+      import-local: 3.2.0
+      jest-cli: 30.4.2(@types/node@22.20.1)
+    transitivePeerDependencies:
+      - '@types/node'
+      - babel-plugin-macros
+      - esbuild-register
+      - supports-color
+      - ts-node
+
+  jiti@2.7.0: {}
+
+  joycon@3.1.1: {}
+
+  js-tokens@4.0.0: {}
+
+  js-yaml@3.15.1:
+    dependencies:
+      argparse: 1.0.10
+      esprima: 4.0.1
+
+  js-yaml@4.3.1:
+    dependencies:
+      argparse: 2.0.1
+
+  js-yaml@5.2.1:
+    dependencies:
+      argparse: 2.0.1
+
+  jsesc@3.1.0: {}
+
+  json-buffer@3.0.1: {}
+
+  json-parse-even-better-errors@2.3.1: {}
+
+  json-schema-traverse@0.4.1: {}
+
+  json-schema-traverse@1.0.0: {}
+
+  json-stable-stringify-without-jsonify@1.0.1: {}
+
+  json5@2.2.3: {}
+
+  jsonc-parser@3.3.1: {}
+
+  jsonfile@6.2.1:
+    dependencies:
+      universalify: 2.0.1
+    optionalDependencies:
+      graceful-fs: 4.2.11
+
+  jsonwebtoken@9.0.3:
+    dependencies:
+      jws: 4.0.1
+      lodash.includes: 4.3.0
+      lodash.isboolean: 3.0.3
+      lodash.isinteger: 4.0.4
+      lodash.isnumber: 3.0.3
+      lodash.isplainobject: 4.0.6
+      lodash.isstring: 4.0.1
+      lodash.once: 4.1.1
+      ms: 2.1.3
+      semver: 7.8.5
+
+  jsx-ast-utils@3.3.5:
+    dependencies:
+      array-includes: 3.1.9
+      array.prototype.flat: 1.3.3
+      object.assign: 4.1.7
+      object.values: 1.2.1
+
+  jwa@2.0.1:
+    dependencies:
+      buffer-equal-constant-time: 1.0.1
+      ecdsa-sig-formatter: 1.0.11
+      safe-buffer: 5.2.1
+
+  jws@4.0.1:
+    dependencies:
+      jwa: 2.0.1
+      safe-buffer: 5.2.1
+
+  keyv@4.5.4:
+    dependencies:
+      json-buffer: 3.0.1
+
+  language-subtag-registry@0.3.23: {}
+
+  language-tags@1.0.9:
+    dependencies:
+      language-subtag-registry: 0.3.23
+
+  leven@3.1.0: {}
+
+  levn@0.4.1:
+    dependencies:
+      prelude-ls: 1.2.1
+      type-check: 0.4.0
+
+  lightningcss-android-arm64@1.32.0:
+    optional: true
+
+  lightningcss-darwin-arm64@1.32.0:
+    optional: true
+
+  lightningcss-darwin-x64@1.32.0:
+    optional: true
+
+  lightningcss-freebsd-x64@1.32.0:
+    optional: true
+
+  lightningcss-linux-arm-gnueabihf@1.32.0:
+    optional: true
+
+  lightningcss-linux-arm64-gnu@1.32.0:
+    optional: true
+
+  lightningcss-linux-arm64-musl@1.32.0:
+    optional: true
+
+  lightningcss-linux-x64-gnu@1.32.0:
+    optional: true
+
+  lightningcss-linux-x64-musl@1.32.0:
+    optional: true
+
+  lightningcss-win32-arm64-msvc@1.32.0:
+    optional: true
+
+  lightningcss-win32-x64-msvc@1.32.0:
+    optional: true
+
+  lightningcss@1.32.0:
+    dependencies:
+      detect-libc: 2.1.2
+    optionalDependencies:
+      lightningcss-android-arm64: 1.32.0
+      lightningcss-darwin-arm64: 1.32.0
+      lightningcss-darwin-x64: 1.32.0
+      lightningcss-freebsd-x64: 1.32.0
+      lightningcss-linux-arm-gnueabihf: 1.32.0
+      lightningcss-linux-arm64-gnu: 1.32.0
+      lightningcss-linux-arm64-musl: 1.32.0
+      lightningcss-linux-x64-gnu: 1.32.0
+      lightningcss-linux-x64-musl: 1.32.0
+      lightningcss-win32-arm64-msvc: 1.32.0
+      lightningcss-win32-x64-msvc: 1.32.0
+
+  lines-and-columns@1.2.4: {}
+
+  load-esm@1.0.3: {}
+
+  loader-runner@4.3.2: {}
+
+  locate-path@5.0.0:
+    dependencies:
+      p-locate: 4.1.0
+
+  locate-path@6.0.0:
+    dependencies:
+      p-locate: 5.0.0
+
+  lodash.includes@4.3.0: {}
+
+  lodash.isboolean@3.0.3: {}
+
+  lodash.isinteger@4.0.4: {}
+
+  lodash.isnumber@3.0.3: {}
+
+  lodash.isplainobject@4.0.6: {}
+
+  lodash.isstring@4.0.1: {}
+
+  lodash.memoize@4.1.2: {}
+
+  lodash.merge@4.6.2: {}
+
+  lodash.once@4.1.1: {}
+
+  lodash@4.18.1: {}
+
+  log-symbols@4.1.0:
+    dependencies:
+      chalk: 4.1.2
+      is-unicode-supported: 0.1.0
+
+  loose-envify@1.4.0:
+    dependencies:
+      js-tokens: 4.0.0
+
+  lru-cache@10.4.3: {}
+
+  lru-cache@11.5.2: {}
+
+  lru-cache@5.1.1:
+    dependencies:
+      yallist: 3.1.1
+
+  magic-string@0.30.17:
+    dependencies:
+      '@jridgewell/sourcemap-codec': 1.5.5
+
+  magic-string@0.30.21:
+    dependencies:
+      '@jridgewell/sourcemap-codec': 1.5.5
+
+  make-dir@4.0.0:
+    dependencies:
+      semver: 7.8.5
+
+  make-error@1.3.6: {}
+
+  makeerror@1.0.12:
+    dependencies:
+      tmpl: 1.0.5
+
+  math-intrinsics@1.1.0: {}
+
+  media-typer@0.3.0: {}
+
+  media-typer@1.1.1: {}
+
+  memfs@3.5.3:
+    dependencies:
+      fs-monkey: 1.1.0
+
+  merge-descriptors@2.0.0: {}
+
+  merge-stream@2.0.0: {}
+
+  methods@1.1.2: {}
+
+  mime-db@1.52.0: {}
+
+  mime-db@1.54.0: {}
+
+  mime-types@2.1.35:
+    dependencies:
+      mime-db: 1.52.0
+
+  mime-types@3.0.2:
+    dependencies:
+      mime-db: 1.54.0
+
+  mime@2.6.0: {}
+
+  mimic-fn@2.1.0: {}
+
+  minimatch@10.2.6:
+    dependencies:
+      brace-expansion: 5.0.9
+
+  minimatch@3.1.5:
+    dependencies:
+      brace-expansion: 1.1.18
+
+  minimatch@9.0.9:
+    dependencies:
+      brace-expansion: 2.1.4
+
+  minimist@1.2.8: {}
+
+  minipass@7.1.3: {}
+
+  ms@2.0.0: {}
+
+  ms@2.1.3: {}
+
+  multer@2.2.0:
+    dependencies:
+      append-field: 1.0.0
+      busboy: 1.6.0
+      concat-stream: 2.0.0
+      type-is: 1.6.18
+
+  mute-stream@2.0.0: {}
+
+  nanoid@3.3.18: {}
+
+  napi-postinstall@0.3.4: {}
+
+  natural-compare@1.4.0: {}
+
+  negotiator@0.6.4: {}
+
+  negotiator@1.0.0: {}
+
+  neo-async@2.6.2: {}
+
+  nestjs-pino@4.6.1(@nestjs/common@11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2))(pino-http@11.0.0)(pino@10.3.1)(rxjs@7.8.2):
+    dependencies:
+      '@nestjs/common': 11.1.29(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      pino: 10.3.1
+      pino-http: 11.0.0
+      rxjs: 7.8.2
+
+  next@16.3.0(@types/node@22.20.1)(react-dom@19.2.8(react@19.2.8))(react@19.2.8):
+    dependencies:
+      '@next/env': 16.3.0
+      '@swc/helpers': 0.5.15
+      baseline-browser-mapping: 2.11.13
+      caniuse-lite: 1.0.30001809
+      postcss: 8.5.23
+      react: 19.2.8
+      react-dom: 19.2.8(react@19.2.8)
+      styled-jsx: 5.1.6(react@19.2.8)
+    optionalDependencies:
+      '@next/swc-darwin-arm64': 16.3.0
+      '@next/swc-darwin-x64': 16.3.0
+      '@next/swc-linux-arm64-gnu': 16.3.0
+      '@next/swc-linux-arm64-musl': 16.3.0
+      '@next/swc-linux-x64-gnu': 16.3.0
+      '@next/swc-linux-x64-musl': 16.3.0
+      '@next/swc-win32-arm64-msvc': 16.3.0
+      '@next/swc-win32-x64-msvc': 16.3.0
+      sharp: 0.35.3(@types/node@22.20.1)
+    transitivePeerDependencies:
+      - '@babel/core'
+      - '@types/node'
+      - babel-plugin-macros
+
+  node-abort-controller@3.1.1: {}
+
+  node-emoji@1.11.0:
+    dependencies:
+      lodash: 4.18.1
+
+  node-exports-info@1.6.2:
+    dependencies:
+      array.prototype.flatmap: 1.3.3
+      es-errors: 1.3.0
+      object.entries: 1.1.9
+      semver: 6.3.1
+
+  node-fetch-native@1.6.7: {}
+
+  node-int64@0.4.0: {}
+
+  node-releases@2.0.53: {}
+
+  normalize-path@3.0.0: {}
+
+  npm-run-path@4.0.1:
+    dependencies:
+      path-key: 3.1.1
+
+  nypm@0.6.9:
+    dependencies:
+      citty: 0.2.2
+      pathe: 2.0.3
+      tinyexec: 1.3.0
+
+  object-assign@4.1.1: {}
+
+  object-inspect@1.13.4: {}
+
+  object-keys@1.1.1: {}
+
+  object.assign@4.1.7:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-properties: 1.2.1
+      es-object-atoms: 1.1.2
+      has-symbols: 1.1.0
+      object-keys: 1.1.1
+
+  object.entries@1.1.9:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-properties: 1.2.1
+      es-object-atoms: 1.1.2
+
+  object.fromentries@2.0.8:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-object-atoms: 1.1.2
+
+  object.values@1.2.1:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-properties: 1.2.1
+      es-object-atoms: 1.1.2
+
+  ohash@2.0.11: {}
+
+  on-exit-leak-free@2.1.2: {}
+
+  on-finished@2.4.1:
+    dependencies:
+      ee-first: 1.1.1
+
+  on-headers@1.1.0: {}
+
+  once@1.4.0:
+    dependencies:
+      wrappy: 1.0.2
+
+  onetime@5.1.2:
+    dependencies:
+      mimic-fn: 2.1.0
+
+  optionator@0.9.4:
+    dependencies:
+      deep-is: 0.1.4
+      fast-levenshtein: 2.0.6
+      levn: 0.4.1
+      prelude-ls: 1.2.1
+      type-check: 0.4.0
+      word-wrap: 1.2.5
+
+  ora@5.4.1:
+    dependencies:
+      bl: 4.1.0
+      chalk: 4.1.2
+      cli-cursor: 3.1.0
+      cli-spinners: 2.9.2
+      is-interactive: 1.0.0
+      is-unicode-supported: 0.1.0
+      log-symbols: 4.1.0
+      strip-ansi: 6.0.1
+      wcwidth: 1.0.1
+
+  own-keys@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      get-intrinsic: 1.3.0
+      object-keys: 1.1.1
+      safe-push-apply: 1.0.0
+
+  p-limit@2.3.0:
+    dependencies:
+      p-try: 2.2.0
+
+  p-limit@3.1.0:
+    dependencies:
+      yocto-queue: 0.1.0
+
+  p-locate@4.1.0:
+    dependencies:
+      p-limit: 2.3.0
+
+  p-locate@5.0.0:
+    dependencies:
+      p-limit: 3.1.0
+
+  p-try@2.2.0: {}
+
+  package-json-from-dist@1.0.1: {}
+
+  parent-module@1.0.1:
+    dependencies:
+      callsites: 3.1.0
+
+  parse-json@5.2.0:
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      error-ex: 1.3.4
+      json-parse-even-better-errors: 2.3.1
+      lines-and-columns: 1.2.4
+
+  parseurl@1.3.3: {}
+
+  path-exists@4.0.0: {}
+
+  path-is-absolute@1.0.1: {}
+
+  path-key@3.1.1: {}
+
+  path-parse@1.0.7: {}
+
+  path-scurry@1.11.1:
+    dependencies:
+      lru-cache: 10.4.3
+      minipass: 7.1.3
+
+  path-scurry@2.0.2:
+    dependencies:
+      lru-cache: 11.5.2
+      minipass: 7.1.3
+
+  path-to-regexp@8.4.2: {}
+
+  path-type@4.0.0: {}
+
+  pathe@2.0.3: {}
+
+  perfect-debounce@1.0.0: {}
+
+  picocolors@1.1.1: {}
+
+  picomatch@2.3.2: {}
+
+  picomatch@4.0.4: {}
+
+  picomatch@4.0.5: {}
+
+  pino-abstract-transport@3.0.0:
+    dependencies:
+      split2: 4.2.0
+
+  pino-http@11.0.0:
+    dependencies:
+      get-caller-file: 2.0.5
+      pino: 10.3.1
+      pino-std-serializers: 7.1.0
+      process-warning: 5.1.0
+
+  pino-pretty@13.1.3:
+    dependencies:
+      colorette: 2.0.20
+      dateformat: 4.6.3
+      fast-copy: 4.0.4
+      fast-safe-stringify: 2.1.1
+      help-me: 5.0.0
+      joycon: 3.1.1
+      minimist: 1.2.8
+      on-exit-leak-free: 2.1.2
+      pino-abstract-transport: 3.0.0
+      pump: 3.0.4
+      secure-json-parse: 4.1.0
+      sonic-boom: 4.2.1
+      strip-json-comments: 5.0.3
+
+  pino-std-serializers@7.1.0: {}
+
+  pino@10.3.1:
+    dependencies:
+      '@pinojs/redact': 0.4.0
+      atomic-sleep: 1.0.0
+      on-exit-leak-free: 2.1.2
+      pino-abstract-transport: 3.0.0
+      pino-std-serializers: 7.1.0
+      process-warning: 5.1.0
+      quick-format-unescaped: 4.0.4
+      real-require: 0.2.0
+      safe-stable-stringify: 2.5.0
+      sonic-boom: 4.2.1
+      thread-stream: 4.2.0
+
+  pirates@4.0.7: {}
+
+  pkg-dir@4.2.0:
+    dependencies:
+      find-up: 4.1.0
+
+  pkg-types@2.3.1:
+    dependencies:
+      confbox: 0.2.4
+      exsolve: 1.1.1
+      pathe: 2.0.3
+
+  pluralize@8.0.0: {}
+
+  possible-typed-array-names@1.1.0: {}
+
+  postcss@8.5.23:
+    dependencies:
+      nanoid: 3.3.18
+      picocolors: 1.1.1
+      source-map-js: 1.2.1
+
+  postcss@8.5.26:
+    dependencies:
+      nanoid: 3.3.18
+      picocolors: 1.1.1
+      source-map-js: 1.2.1
+
+  prelude-ls@1.2.1: {}
+
+  prettier-plugin-tailwindcss@0.6.14(prettier@3.9.6):
+    dependencies:
+      prettier: 3.9.6
+
+  prettier@3.9.6: {}
+
+  pretty-format@30.4.1:
+    dependencies:
+      '@jest/schemas': 30.4.1
+      ansi-styles: 5.2.0
+      react-is-18: react-is@18.3.1
+      react-is-19: react-is@19.2.8
+
+  prisma@6.19.3(typescript@5.9.3):
+    dependencies:
+      '@prisma/config': 6.19.3
+      '@prisma/engines': 6.19.3
+    optionalDependencies:
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - magicast
+
+  process-warning@5.1.0: {}
+
+  prop-types@15.8.1:
+    dependencies:
+      loose-envify: 1.4.0
+      object-assign: 4.1.1
+      react-is: 16.13.1
+
+  proxy-addr@2.0.7:
+    dependencies:
+      forwarded: 0.2.0
+      ipaddr.js: 1.9.1
+
+  pump@3.0.4:
+    dependencies:
+      end-of-stream: 1.4.5
+      once: 1.4.0
+
+  punycode@2.3.1: {}
+
+  pure-rand@6.1.0: {}
+
+  pure-rand@7.0.1: {}
+
+  qs@6.15.3:
+    dependencies:
+      es-define-property: 1.0.1
+      side-channel: 1.1.1
+
+  quick-format-unescaped@4.0.4: {}
+
+  range-parser@1.3.0: {}
+
+  raw-body@3.0.2:
+    dependencies:
+      bytes: 3.1.2
+      http-errors: 2.0.1
+      iconv-lite: 0.7.3
+      unpipe: 1.0.0
+
+  rc9@2.1.2:
+    dependencies:
+      defu: 6.1.7
+      destr: 2.0.5
+
+  react-dom@19.2.8(react@19.2.8):
+    dependencies:
+      react: 19.2.8
+      scheduler: 0.27.0
+
+  react-is@16.13.1: {}
+
+  react-is@18.3.1: {}
+
+  react-is@19.2.8: {}
+
+  react@19.2.8: {}
+
+  readable-stream@3.6.2:
+    dependencies:
+      inherits: 2.0.4
+      string_decoder: 1.3.0
+      util-deprecate: 1.0.2
+
+  readdirp@4.1.2: {}
+
+  real-require@0.2.0: {}
+
+  real-require@1.0.0: {}
+
+  redis-errors@1.2.0: {}
+
+  redis-parser@3.0.0:
+    dependencies:
+      redis-errors: 1.2.0
+
+  reflect-metadata@0.2.2: {}
+
+  reflect.getprototypeof@1.0.10:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+      get-intrinsic: 1.3.0
+      get-proto: 1.0.1
+      which-builtin-type: 1.2.1
+
+  regexp.prototype.flags@1.5.4:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-errors: 1.3.0
+      get-proto: 1.0.1
+      gopd: 1.2.0
+      set-function-name: 2.0.2
+
+  require-directory@2.1.1: {}
+
+  require-from-string@2.0.2: {}
+
+  resolve-cwd@3.0.0:
+    dependencies:
+      resolve-from: 5.0.0
+
+  resolve-from@4.0.0: {}
+
+  resolve-from@5.0.0: {}
+
+  resolve-pkg-maps@1.0.0: {}
+
+  resolve@2.0.0-next.7:
+    dependencies:
+      es-errors: 1.3.0
+      is-core-module: 2.16.2
+      node-exports-info: 1.6.2
+      object-keys: 1.1.1
+      path-parse: 1.0.7
+      supports-preserve-symlinks-flag: 1.0.0
+
+  restore-cursor@3.1.0:
+    dependencies:
+      onetime: 5.1.2
+      signal-exit: 3.0.7
+
+  router@2.2.0:
+    dependencies:
+      debug: 4.4.3
+      depd: 2.0.0
+      is-promise: 4.0.0
+      parseurl: 1.3.3
+      path-to-regexp: 8.4.2
+    transitivePeerDependencies:
+      - supports-color
+
+  rxjs@7.8.1:
+    dependencies:
+      tslib: 2.8.1
+
+  rxjs@7.8.2:
+    dependencies:
+      tslib: 2.8.1
+
+  safe-array-concat@1.1.4:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      get-intrinsic: 1.3.0
+      has-symbols: 1.1.0
+      isarray: 2.0.5
+
+  safe-buffer@5.2.1: {}
+
+  safe-push-apply@1.0.0:
+    dependencies:
+      es-errors: 1.3.0
+      isarray: 2.0.5
+
+  safe-regex-test@1.1.0:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      is-regex: 1.2.1
+
+  safe-stable-stringify@2.5.0: {}
+
+  safer-buffer@2.1.2: {}
+
+  scheduler@0.27.0: {}
+
+  schema-utils@3.3.0:
+    dependencies:
+      '@types/json-schema': 7.0.15
+      ajv: 6.15.0
+      ajv-keywords: 3.5.2(ajv@6.15.0)
+
+  schema-utils@4.3.3:
+    dependencies:
+      '@types/json-schema': 7.0.15
+      ajv: 8.20.0
+      ajv-formats: 2.1.1(ajv@8.20.0)
+      ajv-keywords: 5.1.0(ajv@8.20.0)
+
+  secure-json-parse@4.1.0: {}
+
+  semver@6.3.1: {}
+
+  semver@7.8.5: {}
+
+  send@1.2.1:
+    dependencies:
+      debug: 4.4.3
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      fresh: 2.0.0
+      http-errors: 2.0.1
+      mime-types: 3.0.2
+      ms: 2.1.3
+      on-finished: 2.4.1
+      range-parser: 1.3.0
+      statuses: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
+
+  serve-static@2.2.1:
+    dependencies:
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      parseurl: 1.3.3
+      send: 1.2.1
+    transitivePeerDependencies:
+      - supports-color
+
+  set-function-length@1.2.2:
+    dependencies:
+      define-data-property: 1.1.4
+      es-errors: 1.3.0
+      function-bind: 1.1.2
+      get-intrinsic: 1.3.0
+      gopd: 1.2.0
+      has-property-descriptors: 1.0.2
+
+  set-function-name@2.0.2:
+    dependencies:
+      define-data-property: 1.1.4
+      es-errors: 1.3.0
+      functions-have-names: 1.2.3
+      has-property-descriptors: 1.0.2
+
+  set-proto@1.0.0:
+    dependencies:
+      dunder-proto: 1.0.1
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+
+  setprototypeof@1.2.0: {}
+
+  sharp@0.35.3(@types/node@22.20.1):
+    dependencies:
+      '@img/colour': 1.1.0
+      detect-libc: 2.1.2
+      semver: 7.8.5
+    optionalDependencies:
+      '@img/sharp-darwin-arm64': 0.35.3
+      '@img/sharp-darwin-x64': 0.35.3
+      '@img/sharp-freebsd-wasm32': 0.35.3
+      '@img/sharp-libvips-darwin-arm64': 1.3.2
+      '@img/sharp-libvips-darwin-x64': 1.3.2
+      '@img/sharp-libvips-linux-arm': 1.3.2
+      '@img/sharp-libvips-linux-arm64': 1.3.2
+      '@img/sharp-libvips-linux-ppc64': 1.3.2
+      '@img/sharp-libvips-linux-riscv64': 1.3.2
+      '@img/sharp-libvips-linux-s390x': 1.3.2
+      '@img/sharp-libvips-linux-x64': 1.3.2
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.2
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.2
+      '@img/sharp-linux-arm': 0.35.3
+      '@img/sharp-linux-arm64': 0.35.3
+      '@img/sharp-linux-ppc64': 0.35.3
+      '@img/sharp-linux-riscv64': 0.35.3
+      '@img/sharp-linux-s390x': 0.35.3
+      '@img/sharp-linux-x64': 0.35.3
+      '@img/sharp-linuxmusl-arm64': 0.35.3
+      '@img/sharp-linuxmusl-x64': 0.35.3
+      '@img/sharp-webcontainers-wasm32': 0.35.3
+      '@img/sharp-win32-arm64': 0.35.3
+      '@img/sharp-win32-ia32': 0.35.3
+      '@img/sharp-win32-x64': 0.35.3
+      '@types/node': 22.20.1
+    optional: true
+
+  shebang-command@2.0.0:
+    dependencies:
+      shebang-regex: 3.0.0
+
+  shebang-regex@3.0.0: {}
+
+  side-channel-list@1.0.1:
+    dependencies:
+      es-errors: 1.3.0
+      object-inspect: 1.13.4
+
+  side-channel-map@1.0.1:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      object-inspect: 1.13.4
+
+  side-channel-weakmap@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      object-inspect: 1.13.4
+      side-channel-map: 1.0.1
+
+  side-channel@1.1.1:
+    dependencies:
+      es-errors: 1.3.0
+      object-inspect: 1.13.4
+      side-channel-list: 1.0.1
+      side-channel-map: 1.0.1
+      side-channel-weakmap: 1.0.2
+
+  signal-exit@3.0.7: {}
+
+  signal-exit@4.1.0: {}
+
+  slash@3.0.0: {}
+
+  sonic-boom@4.2.1:
+    dependencies:
+      atomic-sleep: 1.0.0
+
+  source-map-js@1.2.1: {}
+
+  source-map-support@0.5.13:
+    dependencies:
+      buffer-from: 1.1.2
+      source-map: 0.6.1
+
+  source-map-support@0.5.21:
+    dependencies:
+      buffer-from: 1.1.2
+      source-map: 0.6.1
+
+  source-map@0.6.1: {}
+
+  source-map@0.7.4: {}
+
+  split2@4.2.0: {}
+
+  sprintf-js@1.0.3: {}
+
+  stable-hash-x@0.2.0: {}
+
+  stack-utils@2.0.6:
+    dependencies:
+      escape-string-regexp: 2.0.0
+
+  standard-as-callback@2.1.0: {}
+
+  statuses@2.0.2: {}
+
+  stop-iteration-iterator@1.1.0:
+    dependencies:
+      es-errors: 1.3.0
+      internal-slot: 1.1.0
+
+  streamsearch@1.1.0: {}
+
+  string-length@4.0.2:
+    dependencies:
+      char-regex: 1.0.2
+      strip-ansi: 6.0.1
+
+  string-width@4.2.3:
+    dependencies:
+      emoji-regex: 8.0.0
+      is-fullwidth-code-point: 3.0.0
+      strip-ansi: 6.0.1
+
+  string-width@5.1.2:
+    dependencies:
+      eastasianwidth: 0.2.0
+      emoji-regex: 9.2.2
+      strip-ansi: 7.2.0
+
+  string.prototype.includes@2.0.1:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+
+  string.prototype.matchall@4.0.12:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+      get-intrinsic: 1.3.0
+      gopd: 1.2.0
+      has-symbols: 1.1.0
+      internal-slot: 1.1.0
+      regexp.prototype.flags: 1.5.4
+      set-function-name: 2.0.2
+      side-channel: 1.1.1
+
+  string.prototype.repeat@1.0.0:
+    dependencies:
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+
+  string.prototype.trim@1.2.11:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-data-property: 1.1.4
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-object-atoms: 1.1.2
+      has-property-descriptors: 1.0.2
+      safe-regex-test: 1.1.0
+
+  string.prototype.trimend@1.0.10:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-properties: 1.2.1
+      es-object-atoms: 1.1.2
+
+  string.prototype.trimstart@1.0.8:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-object-atoms: 1.1.2
+
+  string_decoder@1.3.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  strip-ansi@6.0.1:
+    dependencies:
+      ansi-regex: 5.0.1
+
+  strip-ansi@7.2.0:
+    dependencies:
+      ansi-regex: 6.2.2
+
+  strip-bom@3.0.0: {}
+
+  strip-bom@4.0.0: {}
+
+  strip-final-newline@2.0.0: {}
+
+  strip-json-comments@3.1.1: {}
+
+  strip-json-comments@5.0.3: {}
+
+  strtok3@10.3.5:
+    dependencies:
+      '@tokenizer/token': 0.3.0
+
+  styled-jsx@5.1.6(react@19.2.8):
+    dependencies:
+      client-only: 0.0.1
+      react: 19.2.8
+
+  superagent@10.3.0:
+    dependencies:
+      component-emitter: 1.3.1
+      cookiejar: 2.1.4
+      debug: 4.4.3
+      fast-safe-stringify: 2.1.1
+      form-data: 4.0.6
+      formidable: 3.5.4
+      methods: 1.1.2
+      mime: 2.6.0
+      qs: 6.15.3
+    transitivePeerDependencies:
+      - supports-color
+
+  supertest@7.2.2:
+    dependencies:
+      cookie-signature: 1.2.2
+      methods: 1.1.2
+      superagent: 10.3.0
+    transitivePeerDependencies:
+      - supports-color
+
+  supports-color@7.2.0:
+    dependencies:
+      has-flag: 4.0.0
+
+  supports-color@8.1.1:
+    dependencies:
+      has-flag: 4.0.0
+
+  supports-preserve-symlinks-flag@1.0.0: {}
+
+  swagger-ui-dist@5.32.8:
+    dependencies:
+      '@scarf/scarf': 1.4.0
+
+  symbol-observable@4.0.0: {}
+
+  synckit@0.11.13:
+    dependencies:
+      '@pkgr/core': 0.3.6
+
+  tailwind-merge@3.6.0: {}
+
+  tailwindcss@4.3.3: {}
+
+  tapable@2.3.3: {}
+
+  terser-webpack-plugin@5.6.1(webpack@5.106.2):
+    dependencies:
+      '@jridgewell/trace-mapping': 0.3.31
+      jest-worker: 27.5.1
+      schema-utils: 4.3.3
+      terser: 5.49.2
+      webpack: 5.106.2
+
+  terser@5.49.2:
+    dependencies:
+      '@jridgewell/source-map': 0.3.11
+      acorn: 8.18.0
+      commander: 2.20.3
+      source-map-support: 0.5.21
+
+  test-exclude@6.0.0:
+    dependencies:
+      '@istanbuljs/schema': 0.1.6
+      glob: 7.2.3
+      minimatch: 3.1.5
+
+  thread-stream@4.2.0:
+    dependencies:
+      real-require: 1.0.0
+
+  tinyexec@1.3.0: {}
+
+  tinyglobby@0.2.17:
+    dependencies:
+      fdir: 6.5.0(picomatch@4.0.5)
+      picomatch: 4.0.5
+
+  tmpl@1.0.5: {}
+
+  toidentifier@1.0.1: {}
+
+  token-types@6.1.2:
+    dependencies:
+      '@borewit/text-codec': 0.2.2
+      '@tokenizer/token': 0.3.0
+      ieee754: 1.2.1
+
+  ts-api-utils@2.5.0(typescript@5.9.3):
+    dependencies:
+      typescript: 5.9.3
+
+  ts-jest@29.4.12(@babel/core@7.29.7)(@jest/transform@30.4.1)(@jest/types@30.4.1)(babel-jest@30.4.1(@babel/core@7.29.7))(jest-util@30.4.1)(jest@30.4.2(@types/node@22.20.1))(typescript@5.9.3):
+    dependencies:
+      bs-logger: 0.2.6
+      fast-json-stable-stringify: 2.1.0
+      handlebars: 4.7.9
+      jest: 30.4.2(@types/node@22.20.1)
+      json5: 2.2.3
+      lodash.memoize: 4.1.2
+      make-error: 1.3.6
+      semver: 7.8.5
+      type-fest: 4.41.0
+      typescript: 5.9.3
+      yargs-parser: 21.1.1
+    optionalDependencies:
+      '@babel/core': 7.29.7
+      '@jest/transform': 30.4.1
+      '@jest/types': 30.4.1
+      babel-jest: 30.4.1(@babel/core@7.29.7)
+      jest-util: 30.4.1
+
+  tsconfig-paths-webpack-plugin@4.2.0:
+    dependencies:
+      chalk: 4.1.2
+      enhanced-resolve: 5.24.5
+      tapable: 2.3.3
+      tsconfig-paths: 4.2.0
+
+  tsconfig-paths@4.2.0:
+    dependencies:
+      json5: 2.2.3
+      minimist: 1.2.8
+      strip-bom: 3.0.0
+
+  tslib@2.8.1: {}
+
+  tsx@4.23.12:
+    dependencies:
+      esbuild: 0.28.2
+    optionalDependencies:
+      fsevents: 2.3.3
+
+  turbo@2.10.9:
+    optionalDependencies:
+      '@turbo/darwin-64': 2.10.9
+      '@turbo/darwin-arm64': 2.10.9
+      '@turbo/linux-64': 2.10.9
+      '@turbo/linux-arm64': 2.10.9
+      '@turbo/windows-64': 2.10.9
+      '@turbo/windows-arm64': 2.10.9
+
+  type-check@0.4.0:
+    dependencies:
+      prelude-ls: 1.2.1
+
+  type-detect@4.0.8: {}
+
+  type-fest@0.20.2: {}
+
+  type-fest@0.21.3: {}
+
+  type-fest@4.41.0: {}
+
+  type-is@1.6.18:
+    dependencies:
+      media-typer: 0.3.0
+      mime-types: 2.1.35
+
+  type-is@2.1.0:
+    dependencies:
+      content-type: 2.0.0
+      media-typer: 1.1.1
+      mime-types: 3.0.2
+
+  typed-array-buffer@1.0.3:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      is-typed-array: 1.1.15
+
+  typed-array-byte-length@1.0.3:
+    dependencies:
+      call-bind: 1.0.9
+      for-each: 0.3.5
+      gopd: 1.2.0
+      has-proto: 1.2.0
+      is-typed-array: 1.1.15
+
+  typed-array-byte-offset@1.0.4:
+    dependencies:
+      available-typed-arrays: 1.0.7
+      call-bind: 1.0.9
+      for-each: 0.3.5
+      gopd: 1.2.0
+      has-proto: 1.2.0
+      is-typed-array: 1.1.15
+      reflect.getprototypeof: 1.0.10
+
+  typed-array-length@1.0.8:
+    dependencies:
+      call-bind: 1.0.9
+      for-each: 0.3.5
+      gopd: 1.2.0
+      is-typed-array: 1.1.15
+      possible-typed-array-names: 1.1.0
+      reflect.getprototypeof: 1.0.10
+
+  typedarray@0.0.6: {}
+
+  typescript-eslint@8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3):
+    dependencies:
+      '@typescript-eslint/eslint-plugin': 8.67.0(@typescript-eslint/parser@8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)
+      '@typescript-eslint/parser': 8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)
+      '@typescript-eslint/typescript-estree': 8.67.0(typescript@5.9.3)
+      '@typescript-eslint/utils': 8.67.0(eslint@9.39.5(jiti@2.7.0))(typescript@5.9.3)
+      eslint: 9.39.5(jiti@2.7.0)
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - supports-color
+
+  typescript@5.9.3: {}
+
+  uglify-js@3.19.3:
+    optional: true
+
+  uid@2.0.2:
+    dependencies:
+      '@lukeed/csprng': 1.1.0
+
+  uint8array-extras@1.5.0: {}
+
+  unbox-primitive@1.1.0:
+    dependencies:
+      call-bound: 1.0.4
+      has-bigints: 1.1.0
+      has-symbols: 1.1.0
+      which-boxed-primitive: 1.1.1
+
+  undici-types@6.21.0: {}
+
+  universalify@2.0.1: {}
+
+  unpipe@1.0.0: {}
+
+  unrs-resolver@1.12.2:
+    dependencies:
+      napi-postinstall: 0.3.4
+    optionalDependencies:
+      '@unrs/resolver-binding-android-arm-eabi': 1.12.2
+      '@unrs/resolver-binding-android-arm64': 1.12.2
+      '@unrs/resolver-binding-darwin-arm64': 1.12.2
+      '@unrs/resolver-binding-darwin-x64': 1.12.2
+      '@unrs/resolver-binding-freebsd-x64': 1.12.2
+      '@unrs/resolver-binding-linux-arm-gnueabihf': 1.12.2
+      '@unrs/resolver-binding-linux-arm-musleabihf': 1.12.2
+      '@unrs/resolver-binding-linux-arm64-gnu': 1.12.2
+      '@unrs/resolver-binding-linux-arm64-musl': 1.12.2
+      '@unrs/resolver-binding-linux-loong64-gnu': 1.12.2
+      '@unrs/resolver-binding-linux-loong64-musl': 1.12.2
+      '@unrs/resolver-binding-linux-ppc64-gnu': 1.12.2
+      '@unrs/resolver-binding-linux-riscv64-gnu': 1.12.2
+      '@unrs/resolver-binding-linux-riscv64-musl': 1.12.2
+      '@unrs/resolver-binding-linux-s390x-gnu': 1.12.2
+      '@unrs/resolver-binding-linux-x64-gnu': 1.12.2
+      '@unrs/resolver-binding-linux-x64-musl': 1.12.2
+      '@unrs/resolver-binding-openharmony-arm64': 1.12.2
+      '@unrs/resolver-binding-wasm32-wasi': 1.12.2
+      '@unrs/resolver-binding-win32-arm64-msvc': 1.12.2
+      '@unrs/resolver-binding-win32-ia32-msvc': 1.12.2
+      '@unrs/resolver-binding-win32-x64-msvc': 1.12.2
+
+  update-browserslist-db@1.3.1(browserslist@4.28.8):
+    dependencies:
+      browserslist: 4.28.8
+      escalade: 3.2.0
+      picocolors: 1.1.1
+
+  uri-js@4.4.1:
+    dependencies:
+      punycode: 2.3.1
+
+  util-deprecate@1.0.2: {}
+
+  uuid@13.0.2: {}
+
+  v8-to-istanbul@9.3.0:
+    dependencies:
+      '@jridgewell/trace-mapping': 0.3.31
+      '@types/istanbul-lib-coverage': 2.0.6
+      convert-source-map: 2.0.0
+
+  vary@1.1.2: {}
+
+  walker@1.0.8:
+    dependencies:
+      makeerror: 1.0.12
+
+  watchpack@2.5.2:
+    dependencies:
+      graceful-fs: 4.2.11
+
+  wcwidth@1.0.1:
+    dependencies:
+      defaults: 1.0.4
+
+  webpack-node-externals@3.0.0: {}
+
+  webpack-sources@3.5.1: {}
+
+  webpack@5.106.2:
+    dependencies:
+      '@types/eslint-scope': 3.7.7
+      '@types/estree': 1.0.9
+      '@types/json-schema': 7.0.15
+      '@webassemblyjs/ast': 1.14.1
+      '@webassemblyjs/wasm-edit': 1.14.1
+      '@webassemblyjs/wasm-parser': 1.14.1
+      acorn: 8.18.0
+      acorn-import-phases: 1.0.4(acorn@8.18.0)
+      browserslist: 4.28.8
+      chrome-trace-event: 1.0.4
+      enhanced-resolve: 5.24.5
+      es-module-lexer: 2.3.1
+      eslint-scope: 5.1.1
+      events: 3.3.0
+      glob-to-regexp: 0.4.1
+      graceful-fs: 4.2.11
+      loader-runner: 4.3.2
+      mime-db: 1.54.0
+      neo-async: 2.6.2
+      schema-utils: 4.3.3
+      tapable: 2.3.3
+      terser-webpack-plugin: 5.6.1(webpack@5.106.2)
+      watchpack: 2.5.2
+      webpack-sources: 3.5.1
+    transitivePeerDependencies:
+      - '@minify-html/node'
+      - '@swc/core'
+      - '@swc/css'
+      - '@swc/html'
+      - clean-css
+      - cssnano
+      - csso
+      - esbuild
+      - html-minifier-terser
+      - lightningcss
+      - postcss
+      - uglify-js
+
+  which-boxed-primitive@1.1.1:
+    dependencies:
+      is-bigint: 1.1.0
+      is-boolean-object: 1.2.2
+      is-number-object: 1.1.1
+      is-string: 1.1.1
+      is-symbol: 1.1.1
+
+  which-builtin-type@1.2.1:
+    dependencies:
+      call-bound: 1.0.4
+      function.prototype.name: 1.2.0
+      has-tostringtag: 1.0.2
+      is-async-function: 2.1.1
+      is-date-object: 1.1.0
+      is-finalizationregistry: 1.1.1
+      is-generator-function: 1.1.2
+      is-regex: 1.2.1
+      is-weakref: 1.1.1
+      isarray: 2.0.5
+      which-boxed-primitive: 1.1.1
+      which-collection: 1.0.2
+      which-typed-array: 1.1.22
+
+  which-collection@1.0.2:
+    dependencies:
+      is-map: 2.0.3
+      is-set: 2.0.3
+      is-weakmap: 2.0.2
+      is-weakset: 2.0.4
+
+  which-typed-array@1.1.22:
+    dependencies:
+      available-typed-arrays: 1.0.7
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      for-each: 0.3.5
+      get-proto: 1.0.1
+      gopd: 1.2.0
+      has-tostringtag: 1.0.2
+
+  which@2.0.2:
+    dependencies:
+      isexe: 2.0.0
+
+  widest-line@3.1.0:
+    dependencies:
+      string-width: 4.2.3
+
+  word-wrap@1.2.5: {}
+
+  wordwrap@1.0.0: {}
+
+  wrap-ansi@6.2.0:
+    dependencies:
+      ansi-styles: 4.3.0
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+
+  wrap-ansi@7.0.0:
+    dependencies:
+      ansi-styles: 4.3.0
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+
+  wrap-ansi@8.1.0:
+    dependencies:
+      ansi-styles: 6.2.3
+      string-width: 5.1.2
+      strip-ansi: 7.2.0
+
+  wrappy@1.0.2: {}
+
+  write-file-atomic@5.0.1:
+    dependencies:
+      imurmurhash: 0.1.4
+      signal-exit: 4.1.0
+
+  y18n@5.0.8: {}
+
+  yallist@3.1.1: {}
+
+  yargs-parser@21.1.1: {}
+
+  yargs@17.7.3:
+    dependencies:
+      cliui: 8.0.1
+      escalade: 3.2.0
+      get-caller-file: 2.0.5
+      require-directory: 2.1.1
+      string-width: 4.2.3
+      y18n: 5.0.8
+      yargs-parser: 21.1.1
+
+  yocto-queue@0.1.0: {}
+
+  yoctocolors-cjs@2.1.3: {}
+
+  zod-validation-error@4.0.2(zod@4.4.3):
+    dependencies:
+      zod: 4.4.3
+
+  zod@4.4.3: {}
+
+  zustand@5.0.14(@types/react@19.2.18)(react@19.2.8):
+    optionalDependencies:
+      '@types/react': 19.2.18
+      react: 19.2.8
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
new file mode 100644
index 0000000..f6deb59
--- /dev/null
+++ b/pnpm-workspace.yaml
@@ -0,0 +1,27 @@
+packages:
+  - "apps/*"
+  - "packages/*"
+
+# pnpm >= 10 blocks lifecycle scripts by default. Only the packages below are
+# allowed to run install scripts. Add entries deliberately, never blanket-allow.
+onlyBuiltDependencies:
+  - "@prisma/client"
+  - "@prisma/engines"
+  - "@tailwindcss/oxide"
+  - "esbuild"
+  - "prisma"
+  - "sharp"
+  - "unrs-resolver"
+
+# Single source of truth for versions that MUST stay identical across the
+# workspace. Referenced from package.json as "catalog:".
+catalog:
+  typescript: 5.9.3
+  eslint: 9.39.5
+  prettier: 3.9.6
+  zod: 4.4.3
+  react: 19.2.8
+  react-dom: 19.2.8
+  next: 16.3.0
+  tailwindcss: 4.3.3
+  "@tailwindcss/postcss": 4.3.3
diff --git a/prettier.config.mjs b/prettier.config.mjs
new file mode 100644
index 0000000..5875290
--- /dev/null
+++ b/prettier.config.mjs
@@ -0,0 +1,25 @@
+/** @type {import("prettier").Config} */
+const config = {
+  semi: true,
+  singleQuote: true,
+  trailingComma: 'all',
+  printWidth: 100,
+  tabWidth: 2,
+  arrowParens: 'always',
+  endOfLine: 'lf',
+  plugins: ['prettier-plugin-tailwindcss'],
+  overrides: [
+    {
+      files: ['*.json', '*.jsonc', '*.yml', '*.yaml', '*.md'],
+      options: { singleQuote: false },
+    },
+    {
+      // These carry explanatory comments and are parsed as JSONC by their
+      // consumers (TypeScript and Turborepo both accept comments).
+      files: ['packages/config/typescript/*.json', 'turbo.json'],
+      options: { parser: 'jsonc', singleQuote: false },
+    },
+  ],
+};
+
+export default config;
diff --git a/turbo.json b/turbo.json
new file mode 100644
index 0000000..6315e46
--- /dev/null
+++ b/turbo.json
@@ -0,0 +1,47 @@
+{
+  "$schema": "https://turborepo.com/schema.json",
+  "ui": "tui",
+  "globalDependencies": ["pnpm-workspace.yaml", "packages/config/**"],
+  "globalEnv": ["NODE_ENV", "CI"],
+  "globalPassThroughEnv": ["DOCKER_BUILDKIT"],
+  "tasks": {
+    "build": {
+      "dependsOn": ["^build"],
+      "inputs": ["$TURBO_DEFAULT$", "!**/*.test.ts", "!**/*.test.tsx", "!README.md"],
+      "outputs": ["dist/**", ".next/**", "!.next/cache/**"],
+      // Declared so a change to any of them busts the cache. NEXT_PUBLIC_* are
+      // inlined into the client bundle at build time, so a stale cache would
+      // ship the wrong API URL — this list is what prevents that.
+      "env": [
+        "NEXT_PUBLIC_API_URL",
+        "NEXT_PUBLIC_SITE_URL",
+        "NEXT_PUBLIC_APP_URL",
+        "API_INTERNAL_URL",
+        "DATABASE_URL",
+      ],
+    },
+    "dev": {
+      "dependsOn": ["^build"],
+      "cache": false,
+      "persistent": true,
+    },
+    "lint": {
+      "dependsOn": ["^build"],
+      "outputs": [],
+    },
+    "typecheck": {
+      "dependsOn": ["^build"],
+      "outputs": [],
+    },
+    "test": {
+      "dependsOn": ["^build"],
+      "outputs": ["coverage/**"],
+    },
+    "clean": {
+      "cache": false,
+    },
+    "db:generate": {
+      "cache": false,
+    },
+  },
+}