From da0212aa5f6cb58175b1a54056ca3648b268c63e Mon Sep 17 00:00:00 2001
From: Naomi Chopra <naomi.chopra.021@gmail.com>
Date: Wed, 12 Nov 2025 17:35:04 -0800
Subject: [PATCH 1/2] feat(assets): add static assets service for RefRef
 scripts

- Introduced a new `assets` application to serve static scripts for attribution tracking and referral widgets via Cloudflare.
- Implemented build scripts to copy and prepare assets for deployment, including versioning and checksum generation.
- Configured CORS and caching headers for optimal performance in production.
- Added comprehensive README documentation for setup, deployment, and usage instructions.
- Updated environment variables in the webapp to point to the new assets service.
- Created necessary configuration files for TypeScript, Wrangler, and Git ignore settings.
- Enhanced the overall project structure to support the new assets service.
---
 apps/assets/.gitignore         |   21 +
 apps/assets/README.md          |  430 +++++++++++++
 apps/assets/package.json       |   24 +
 apps/assets/public/_headers    |   24 +
 apps/assets/public/_redirects  |   11 +
 apps/assets/scripts/build.ts   |  126 ++++
 apps/assets/tsconfig.json      |   13 +
 apps/assets/wrangler.jsonc     |   12 +
 apps/refer/README.md           |  251 ++++++++
 apps/webapp/.env.example       |    8 +-
 apps/webapp/src/app/layout.tsx |    5 +-
 apps/webapp/src/env.ts         |    5 +
 pnpm-lock.yaml                 | 1029 +++++++++++++++++++++++++++-----
 turbo.json                     |    2 +-
 14 files changed, 1816 insertions(+), 145 deletions(-)
 create mode 100644 apps/assets/.gitignore
 create mode 100644 apps/assets/README.md
 create mode 100644 apps/assets/package.json
 create mode 100644 apps/assets/public/_headers
 create mode 100644 apps/assets/public/_redirects
 create mode 100644 apps/assets/scripts/build.ts
 create mode 100644 apps/assets/tsconfig.json
 create mode 100644 apps/assets/wrangler.jsonc
 create mode 100644 apps/refer/README.md

diff --git a/apps/assets/.gitignore b/apps/assets/.gitignore
new file mode 100644
index 0000000..49db43b
--- /dev/null
+++ b/apps/assets/.gitignore
@@ -0,0 +1,21 @@
+# Build outputs
+dist/
+
+# Generated assets (built from packages)
+public/*.js
+public/*.js.map
+
+# Keep configuration files
+!public/_headers
+!public/_redirects
+
+# Dependencies
+node_modules/
+
+# TypeScript
+*.tsbuildinfo
+
+# Environment
+.env
+.env.local
+.env.*.local
diff --git a/apps/assets/README.md b/apps/assets/README.md
new file mode 100644
index 0000000..f4d039a
--- /dev/null
+++ b/apps/assets/README.md
@@ -0,0 +1,430 @@
+# RefRef Assets Service
+
+Static assets service for serving RefRef scripts (attribution tracking and referral widget) via CDN.
+
+## Overview
+
+This app bundles and prepares RefRef scripts for deployment to Cloudflare Workers/Pages as a static site. Scripts are served with proper caching headers and CORS configuration for optimal performance.
+
+## Production vs Development
+
+⚠️ **This service is for PRODUCTION deployments only.**
+
+### Development (apps/refer)
+- Use the refer server for local development
+- Scripts served dynamically at `http://localhost:3002/scripts/*`
+- Hot-reloading and no build step needed
+- See [apps/refer/README.md](../refer/README.md) for details
+
+### Production (apps/assets - this service)
+- Deploy to Cloudflare Workers/Pages for CDN delivery
+- Scripts served from edge locations worldwide
+- Immutable caching for maximum performance
+- Version management and cache control
+- Lower bandwidth costs and server overhead
+
+**Key Benefit:** By separating static assets from your application server, you get:
+- Faster load times (CDN edge caching)
+- Reduced server load (no dynamic script serving)
+- Better scalability (Cloudflare's global network)
+- Cost efficiency (free tier for static assets)
+
+## Scripts Available
+
+- **attribution.v1.js** - Attribution tracking script
+- **widget.v1.js** - Referral widget
+- **attribution.latest.js** - Alias to latest attribution version
+- **widget.latest.js** - Alias to latest widget version
+
+## Development
+
+### Prerequisites
+
+Make sure the required packages are built:
+
+```bash
+# From monorepo root
+pnpm -F @refref/attribution-script build
+pnpm -F @refref/widget build
+```
+
+### Build Assets
+
+```bash
+# Build assets (copies bundles to public/)
+pnpm -F @refref/assets build
+
+# Clean generated files
+pnpm -F @refref/assets clean
+```
+
+### Build Output
+
+The build script will:
+1. Copy compiled bundles from packages to `public/`
+2. Name them with version suffix (e.g., `attribution.v1.js`)
+3. Generate checksums for verification
+4. Display build statistics
+
+## Deployment
+
+### Quick Deploy with Wrangler CLI
+
+Deploy directly from your local machine or CI/CD:
+
+```bash
+# Production deployment
+pnpm -F @refref/assets deploy:cloudflare
+
+# Dev/Preview deployment
+pnpm -F @refref/assets deploy:cloudflare:dev
+
+# Local preview with Wrangler
+pnpm -F @refref/assets preview
+```
+
+**First-time setup:**
+```bash
+# Login to Cloudflare (one-time)
+pnpm -F @refref/assets exec wrangler login
+
+# Then deploy
+pnpm -F @refref/assets deploy:cloudflare
+```
+
+**Deployment Process:**
+
+The deploy commands automatically:
+1. Build the assets (runs `tsx scripts/build.ts`)
+2. Copy bundles from packages to `public/` with versioning
+3. Deploy `public/` directory to Cloudflare Workers
+4. Production deploys to `refref-assets` worker
+5. Dev deploys to `refref-assets-dev` worker
+
+**After Deployment:**
+
+Your scripts will be available at:
+- Production: `https://refref-assets.workers.dev/attribution.v1.js`
+- Dev: `https://refref-assets-dev.workers.dev/attribution.v1.js`
+
+**Custom Domain Setup:**
+
+After your first deployment:
+1. Go to Cloudflare Dashboard → Workers & Pages
+2. Select your worker (`refref-assets`)
+3. Go to Settings → Domains & Routes
+4. Add custom domain: `assets.refref.ai`
+5. Cloudflare will automatically provision SSL certificate
+
+Then update your webapp environment:
+```bash
+# In apps/webapp/.env (or production environment)
+NEXT_PUBLIC_ASSETS_URL="https://assets.refref.ai"
+```
+
+### Cloudflare Pages Setup (Alternative)
+
+If you prefer using Cloudflare Pages dashboard instead of Wrangler:
+
+1. **Connect Repository**
+   - Go to Cloudflare Pages dashboard
+   - Create new project from GitHub repo
+   - Select `refref` repository
+
+2. **Build Configuration**
+   ```
+   Build command:    pnpm -F @refref/assets build
+   Build output dir: apps/assets/public
+   Root directory:   (leave as repo root)
+   ```
+
+3. **Environment Variables**
+   - None required (static files only)
+
+4. **Custom Domain**
+   - Add custom domain: `assets.refref.ai`
+   - Configure DNS as instructed by Cloudflare
+
+### CI/CD Deployment
+
+Add to your GitHub Actions or CI/CD pipeline:
+
+```yaml
+# .github/workflows/deploy-assets.yml
+name: Deploy Assets to Cloudflare
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'apps/assets/**'
+      - 'packages/attribution-script/**'
+      - 'packages/widget/**'
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Setup Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: '20'
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v2
+        with:
+          version: 10
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Build packages
+        run: |
+          pnpm -F @refref/attribution-script build
+          pnpm -F @refref/widget build
+
+      - name: Deploy to Cloudflare
+        run: pnpm -F @refref/assets deploy:cloudflare
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+```
+
+**Setup:**
+1. Create a Cloudflare API Token with Workers Deploy permissions
+2. Add as `CLOUDFLARE_API_TOKEN` in GitHub Secrets
+3. Push changes to trigger deployment
+
+### Cloudflare Configuration Files
+
+- **_headers** - Sets cache control and CORS headers
+  - Versioned files: 1 year immutable cache
+  - Latest aliases: 1 hour cache
+
+- **_redirects** - URL rewrites for latest aliases
+  - `/attribution.latest.js` → `/attribution.v1.js`
+  - `/widget.latest.js` → `/widget.v1.js`
+
+- **wrangler.jsonc** - Wrangler configuration
+  - Worker name: `refref-assets`
+  - Assets directory: `./public`
+  - Dev environment: `refref-assets-dev`
+
+## Usage
+
+### In Production
+
+Use the CDN URLs in your production application:
+
+```html
+<!-- Versioned URL (recommended - immutable caching) -->
+<script src="https://assets.refref.ai/attribution.v1.js"></script>
+<script src="https://assets.refref.ai/widget.v1.js"></script>
+
+<!-- Latest alias (always points to newest version) -->
+<script src="https://assets.refref.ai/attribution.latest.js"></script>
+<script src="https://assets.refref.ai/widget.latest.js"></script>
+
+<!-- Convenience shortcuts (no version) -->
+<script src="https://assets.refref.ai/attribution.js"></script>
+<script src="https://assets.refref.ai/widget.js"></script>
+```
+
+**In Next.js (apps/webapp):**
+
+```typescript
+// Configured via NEXT_PUBLIC_ASSETS_URL environment variable
+<Script
+  src={`${env.NEXT_PUBLIC_ASSETS_URL}/attribution.v1.js`}
+  strategy="beforeInteractive"
+/>
+```
+
+### In Development
+
+For local development, use the refer server instead:
+
+```bash
+# Refer server serves scripts dynamically at:
+http://localhost:3002/scripts/attribution.js
+http://localhost:3002/scripts/widget.js
+
+# Configure in apps/webapp/.env:
+NEXT_PUBLIC_ASSETS_URL="http://localhost:3002"
+```
+
+The refer server reads from package dist files, allowing hot-reloading during development. See [apps/refer/README.md](../refer/README.md) for details.
+
+## Versioning Strategy
+
+- **v1, v2, etc.** - Explicit versions with immutable caching
+- **latest** - Always points to newest stable version
+- **Bump version when:**
+  - Breaking API changes
+  - Significant behavior changes
+  - Major feature additions
+
+## File Structure
+
+```
+apps/assets/
+├── public/              # Output directory (deployed to Cloudflare)
+│   ├── _headers        # Cache control & CORS config
+│   ├── _redirects      # URL rewrites
+│   ├── attribution.v1.js   # Generated (gitignored)
+│   └── widget.v1.js        # Generated (gitignored)
+├── scripts/
+│   └── build.ts        # Build script
+├── package.json
+├── tsconfig.json
+└── README.md
+```
+
+## Troubleshooting
+
+### Build fails with "Source file not found"
+
+Make sure to build the packages first:
+```bash
+pnpm -F @refref/attribution-script build
+pnpm -F @refref/widget build
+```
+
+### Wrangler deployment fails
+
+**Authentication Error:**
+```bash
+# Login to Cloudflare
+pnpm -F @refref/assets exec wrangler login
+```
+
+**Build Errors:**
+```bash
+# Clean and rebuild
+pnpm -F @refref/assets clean
+pnpm -F @refref/attribution-script build
+pnpm -F @refref/widget build
+pnpm -F @refref/assets build
+```
+
+**Worker Already Exists:**
+If deploying for the first time and the worker name is taken, update `wrangler.jsonc`:
+```jsonc
+{
+  "name": "your-org-refref-assets"
+}
+```
+
+### Scripts not loading in production
+
+1. **Check Deployment Status**
+   - Go to Cloudflare Dashboard → Workers & Pages
+   - Verify deployment succeeded
+   - Check deployment logs for errors
+
+2. **Verify DNS Configuration**
+   - Ensure custom domain is properly configured
+   - Check DNS propagation (can take up to 24 hours)
+   - Test with workers.dev URL first
+
+3. **CORS Issues**
+   - Check browser console for CORS errors
+   - Verify `_headers` file is deployed
+   - Test with curl: `curl -I https://assets.refref.ai/attribution.v1.js`
+
+4. **Cache Issues**
+   - Clear browser cache
+   - Test in incognito mode
+   - Check Cloudflare cache settings
+
+### Local preview not working
+
+```bash
+# Ensure wrangler is installed
+pnpm -F @refref/assets exec wrangler --version
+
+# Try running directly
+cd apps/assets
+pnpm exec wrangler dev
+```
+
+## Maintenance
+
+### Adding a New Script
+
+1. Add configuration to `scripts/build.ts`:
+   ```typescript
+   {
+     name: "new-script",
+     version: "v1",
+     sourcePath: join(ROOT_DIR, "packages", "new-script", "dist", "bundle.js"),
+     outputName: "new-script.v1.js",
+   }
+   ```
+
+2. Update `_headers` and `_redirects` files
+
+3. Build and test
+
+### Updating to v2
+
+1. Update version in script config: `version: "v2"`
+2. Update output name: `outputName: "attribution.v2.js"`
+3. Update `_redirects` to point `latest` to new version
+4. Keep v1 files for backwards compatibility
+5. Deploy and test before updating application references
+
+## Quick Reference
+
+### Common Commands
+
+```bash
+# Build assets
+pnpm -F @refref/assets build
+
+# Deploy to production
+pnpm -F @refref/assets deploy:cloudflare
+
+# Deploy to dev/preview
+pnpm -F @refref/assets deploy:cloudflare:dev
+
+# Local preview
+pnpm -F @refref/assets preview
+
+# Clean generated files
+pnpm -F @refref/assets clean
+
+# Check wrangler version
+pnpm -F @refref/assets exec wrangler --version
+
+# View deployment logs
+pnpm -F @refref/assets exec wrangler tail refref-assets
+```
+
+### Environment Variables
+
+| Variable | Purpose | Example |
+|----------|---------|---------|
+| `NEXT_PUBLIC_ASSETS_URL` | CDN URL in webapp | `https://assets.refref.ai` |
+| `CLOUDFLARE_API_TOKEN` | CI/CD deployment | Set in GitHub Secrets |
+
+### Deployment Checklist
+
+- [ ] Build attribution and widget packages
+- [ ] Build assets app
+- [ ] Login to Wrangler (first time only)
+- [ ] Deploy to Cloudflare Workers
+- [ ] Verify deployment at workers.dev URL
+- [ ] Configure custom domain (optional)
+- [ ] Update `NEXT_PUBLIC_ASSETS_URL` in webapp
+- [ ] Test scripts loading in production
+
+## Related Documentation
+
+- [apps/refer](../refer/README.md) - Development script serving
+- [apps/webapp](../webapp/README.md) - Web application using these scripts
+- [packages/attribution-script](../../packages/attribution-script/README.md) - Attribution tracking
+- [packages/widget](../../packages/widget/README.md) - Referral widget
+- [Cloudflare Workers Docs](https://developers.cloudflare.com/workers/)
+- [Wrangler CLI Docs](https://developers.cloudflare.com/workers/wrangler/)
diff --git a/apps/assets/package.json b/apps/assets/package.json
new file mode 100644
index 0000000..7af8910
--- /dev/null
+++ b/apps/assets/package.json
@@ -0,0 +1,24 @@
+{
+  "name": "@refref/assets",
+  "version": "0.1.0",
+  "private": true,
+  "description": "Static assets service for RefRef scripts (attribution, widget)",
+  "type": "module",
+  "scripts": {
+    "build": "tsx scripts/build.ts",
+    "clean": "rm -rf public/*.js public/*.map",
+    "dev": "tsx scripts/build.ts --watch",
+    "deploy:cloudflare": "pnpm build && wrangler deploy",
+    "deploy:cloudflare:dev": "pnpm build && wrangler deploy --env dev",
+    "preview": "wrangler dev"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "@refref/attribution-script": "workspace:*",
+    "@refref/widget": "workspace:*",
+    "@refref/typescript-config": "workspace:*",
+    "tsx": "^4.7.1",
+    "typescript": "^5.9.2",
+    "wrangler": "^4.0.0"
+  }
+}
diff --git a/apps/assets/public/_headers b/apps/assets/public/_headers
new file mode 100644
index 0000000..549f11f
--- /dev/null
+++ b/apps/assets/public/_headers
@@ -0,0 +1,24 @@
+# Cloudflare Pages Headers Configuration
+# https://developers.cloudflare.com/pages/configuration/headers/
+
+# Versioned scripts - immutable, long-lived cache
+/attribution.v*.js
+  Cache-Control: public, max-age=31536000, immutable
+  Access-Control-Allow-Origin: *
+  Content-Type: application/javascript; charset=utf-8
+
+/widget.v*.js
+  Cache-Control: public, max-age=31536000, immutable
+  Access-Control-Allow-Origin: *
+  Content-Type: application/javascript; charset=utf-8
+
+# Latest aliases - short cache, allow CORS
+/attribution.latest.js
+  Cache-Control: public, max-age=3600
+  Access-Control-Allow-Origin: *
+  Content-Type: application/javascript; charset=utf-8
+
+/widget.latest.js
+  Cache-Control: public, max-age=3600
+  Access-Control-Allow-Origin: *
+  Content-Type: application/javascript; charset=utf-8
diff --git a/apps/assets/public/_redirects b/apps/assets/public/_redirects
new file mode 100644
index 0000000..08b0fbe
--- /dev/null
+++ b/apps/assets/public/_redirects
@@ -0,0 +1,11 @@
+# Cloudflare Pages Redirects Configuration
+# https://developers.cloudflare.com/pages/configuration/redirects/
+
+# Latest aliases point to current stable version (v1)
+# Using 200 status for rewrite (proxy) instead of 301/302 redirect
+/attribution.latest.js  /attribution.v1.js  200
+/widget.latest.js       /widget.v1.js       200
+
+# Optional: Add convenience aliases without version
+/attribution.js         /attribution.v1.js  200
+/widget.js              /widget.v1.js       200
diff --git a/apps/assets/scripts/build.ts b/apps/assets/scripts/build.ts
new file mode 100644
index 0000000..b82455d
--- /dev/null
+++ b/apps/assets/scripts/build.ts
@@ -0,0 +1,126 @@
+#!/usr/bin/env tsx
+
+import { copyFile, mkdir, readFile, stat } from "fs/promises";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+import { createHash } from "crypto";
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+
+// Paths
+const ROOT_DIR = join(__dirname, "..", "..", "..");
+const PUBLIC_DIR = join(__dirname, "..", "public");
+
+// Script configurations
+const SCRIPTS = [
+  {
+    name: "attribution",
+    version: "v1",
+    sourcePath: join(
+      ROOT_DIR,
+      "packages",
+      "attribution-script",
+      "dist",
+      "attribution-script.es.js"
+    ),
+    outputName: "attribution.v1.js",
+  },
+  {
+    name: "widget",
+    version: "v1",
+    sourcePath: join(ROOT_DIR, "packages", "widget", "dist", "widget.es.js"),
+    outputName: "widget.v1.js",
+  },
+];
+
+interface BuildStats {
+  name: string;
+  version: string;
+  size: number;
+  checksum: string;
+  outputPath: string;
+}
+
+async function calculateChecksum(filePath: string): Promise<string> {
+  const content = await readFile(filePath);
+  return createHash("sha256").update(content).digest("hex").slice(0, 8);
+}
+
+async function formatBytes(bytes: number): Promise<string> {
+  if (bytes === 0) return "0 B";
+  const k = 1024;
+  const sizes = ["B", "KB", "MB"];
+  const i = Math.floor(Math.log(bytes) / Math.log(k));
+  return `${parseFloat((bytes / Math.pow(k, i)).toFixed(2))} ${sizes[i]}`;
+}
+
+async function copyScript(config: (typeof SCRIPTS)[0]): Promise<BuildStats> {
+  const outputPath = join(PUBLIC_DIR, config.outputName);
+
+  // Check if source exists
+  try {
+    await stat(config.sourcePath);
+  } catch (error) {
+    throw new Error(
+      `Source file not found: ${config.sourcePath}\nMake sure to build the ${config.name} package first.`
+    );
+  }
+
+  // Copy file
+  await copyFile(config.sourcePath, outputPath);
+
+  // Get stats
+  const stats = await stat(outputPath);
+  const checksum = await calculateChecksum(outputPath);
+
+  return {
+    name: config.name,
+    version: config.version,
+    size: stats.size,
+    checksum,
+    outputPath,
+  };
+}
+
+async function build() {
+  console.log("🚀 Building RefRef assets...\n");
+
+  try {
+    // Ensure public directory exists
+    await mkdir(PUBLIC_DIR, { recursive: true });
+
+    // Copy all scripts
+    const results: BuildStats[] = [];
+    for (const config of SCRIPTS) {
+      console.log(`📦 Copying ${config.name}...`);
+      const stats = await copyScript(config);
+      results.push(stats);
+    }
+
+    // Print summary
+    console.log("\n✅ Build complete!\n");
+    console.log("📊 Build Summary:");
+    console.log("─".repeat(60));
+
+    for (const result of results) {
+      const sizeFormatted = await formatBytes(result.size);
+      console.log(
+        `${result.name.padEnd(20)} ${result.version.padEnd(10)} ${sizeFormatted.padEnd(15)} ${result.checksum}`
+      );
+    }
+
+    console.log("─".repeat(60));
+    console.log(`\n📁 Output directory: ${PUBLIC_DIR}`);
+    console.log("\n📝 Next steps:");
+    console.log("   1. Deploy public/ folder to Cloudflare Pages");
+    console.log("   2. Point assets.refref.ai to the deployment");
+    console.log("   3. Update NEXT_PUBLIC_ASSETS_URL in admin portal\n");
+  } catch (error) {
+    console.error("❌ Build failed:", error);
+    process.exit(1);
+  }
+}
+
+// Run build
+build();
diff --git a/apps/assets/tsconfig.json b/apps/assets/tsconfig.json
new file mode 100644
index 0000000..ee2d244
--- /dev/null
+++ b/apps/assets/tsconfig.json
@@ -0,0 +1,13 @@
+{
+  "extends": "@refref/typescript-config/base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "./scripts",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "target": "ES2022",
+    "lib": ["ES2022"]
+  },
+  "include": ["scripts/**/*"],
+  "exclude": ["node_modules", "dist", "public"]
+}
diff --git a/apps/assets/wrangler.jsonc b/apps/assets/wrangler.jsonc
new file mode 100644
index 0000000..50edbb0
--- /dev/null
+++ b/apps/assets/wrangler.jsonc
@@ -0,0 +1,12 @@
+{
+	"name": "refref-assets",
+	"compatibility_date": "2025-06-20",
+	"assets": {
+		"directory": "./public"
+	},
+	"env": {
+		"dev": {
+			"name": "refref-assets-dev"
+		}
+	}
+}
\ No newline at end of file
diff --git a/apps/refer/README.md b/apps/refer/README.md
new file mode 100644
index 0000000..bacc107
--- /dev/null
+++ b/apps/refer/README.md
@@ -0,0 +1,251 @@
+# RefRef Refer Server
+
+Public-facing Fastify server for handling referral redirects and serving scripts.
+
+## Overview
+
+The refer server provides public endpoints for:
+- **Referral Link Redirects** (`/r/:id`) - Redirects referral links to target URLs with attribution
+- **Script Serving** (`/scripts/*`) - Serves attribution and widget scripts **for development only**
+
+## Important: Script Serving for Production
+
+⚠️ **The `/scripts/` endpoints in this server are for local development only.**
+
+For production deployments:
+- Scripts should be served from the dedicated **`apps/assets`** service
+- Deploy assets to Cloudflare Workers/Pages for CDN delivery
+- Use `https://assets.refref.ai` (or your custom domain) for production
+- See [apps/assets/README.md](../assets/README.md) for deployment instructions
+
+### Why Separate Script Serving?
+
+**Development (Refer Server):**
+- Dynamic script serving with hot-reloading
+- No build step needed during development
+- Convenient for local testing
+
+**Production (Assets Service):**
+- Static CDN delivery at edge locations
+- Maximum performance with immutable caching
+- Lower bandwidth costs
+- Version management and cache control
+- No server overhead for static files
+
+## Development
+
+### Prerequisites
+
+```bash
+# Build required packages first
+pnpm -F @refref/attribution-script build
+pnpm -F @refref/widget build
+```
+
+### Run Development Server
+
+```bash
+# Start refer server (port 3002)
+pnpm -F @refref/refer dev
+
+# Run tests
+pnpm -F @refref/refer test
+
+# Run tests in watch mode
+pnpm -F @refref/refer test:watch
+```
+
+### Environment Variables
+
+Create `.env` in the refer app directory:
+
+```bash
+# Database
+DATABASE_URL="postgresql://postgres:postgres@localhost:5432/refref"
+
+# Server Configuration
+PORT=3002
+HOST="0.0.0.0"
+LOG_LEVEL="info"
+NODE_ENV="development"
+```
+
+## API Endpoints
+
+### Referral Link Redirect
+
+```
+GET /r/:slug
+```
+
+Redirects to the target URL associated with the referral link slug.
+
+**Performance:**
+- Optimized with database index on `referral_link.slug`
+- Single JOIN query for fast lookups
+- Minimal latency for redirect operations
+
+**Response:**
+- `302 Found` - Redirects to target URL
+- `404 Not Found` - Invalid or expired referral link
+
+### Script Endpoints (Development Only)
+
+```
+GET /scripts/attribution.js
+GET /scripts/widget.js
+```
+
+Serves RefRef scripts for local development.
+
+**Development Mode:**
+- Reads latest bundle from disk for hot-reloading
+- No cache headers for immediate updates
+- File paths: `packages/*/dist/*.es.js`
+
+**Test/Production Mode:**
+- Serves statically imported bundles
+- Long-lived cache headers (1 year immutable)
+
+**⚠️ Production Warning:**
+These endpoints should NOT be used in production. Deploy scripts via `apps/assets` instead for:
+- CDN delivery at edge locations
+- Immutable caching for better performance
+- Lower bandwidth costs
+- Version management
+
+See [apps/assets/README.md](../assets/README.md) for production deployment instructions.
+
+### Health Check
+
+```
+GET /health
+```
+
+Returns server health status.
+
+**Response:**
+```json
+{
+  "status": "ok",
+  "timestamp": "2025-01-01T00:00:00.000Z"
+}
+```
+
+## Architecture
+
+### Key Features
+
+- **Fastify Framework** - High-performance web framework
+- **CORS Enabled** - Allows cross-origin requests
+- **Rate Limiting** - Prevents abuse (20 requests/minute for scripts)
+- **Graceful Shutdown** - Handles SIGINT/SIGTERM signals
+- **Structured Logging** - JSON-formatted logs via Pino
+
+### Directory Structure
+
+```
+apps/refer/
+├── src/
+│   ├── index.ts           # Server entry point
+│   ├── routes/
+│   │   ├── health.ts      # Health check endpoint
+│   │   ├── redirect.ts    # Referral link redirects
+│   │   └── scripts.ts     # Script serving (dev only)
+│   └── plugins/           # Fastify plugins
+├── tests/                 # Vitest tests
+├── package.json
+├── tsconfig.json
+└── README.md
+```
+
+## Production Deployment
+
+### Script Serving
+
+**Do NOT deploy this server's script endpoints to production.**
+
+Instead:
+1. Use `apps/assets` for production script serving
+2. Deploy assets to Cloudflare Workers/Pages
+3. Update `NEXT_PUBLIC_ASSETS_URL` in webapp to assets CDN URL
+
+See [apps/assets/README.md](../assets/README.md) for details.
+
+### Referral Redirect Deployment
+
+The `/r/:id` redirect endpoint can be deployed as:
+- **Cloudflare Workers** - Global edge deployment
+- **Vercel/Netlify** - Serverless functions
+- **Traditional Server** - Docker container or VPS
+
+Ensure database connection is configured properly for production.
+
+## Testing
+
+```bash
+# Run all tests
+pnpm -F @refref/refer test
+
+# Watch mode
+pnpm -F @refref/refer test:watch
+
+# With UI
+pnpm -F @refref/refer test:ui
+```
+
+Tests use:
+- **Vitest** - Fast test runner
+- **Playwright** - HTTP request testing
+- In-memory database or mocks
+
+## Performance Optimization
+
+### Referral Redirect Optimization
+
+The `/r/:slug` endpoint is highly optimized:
+
+1. **Database Index** - `referral_link.slug` has an index for fast lookups
+2. **Single Query** - Uses JOIN to fetch all data in one query
+3. **Connection Pooling** - Efficient database connection management
+4. **Minimal Processing** - Direct redirect without complex logic
+
+### Script Serving Optimization (Development)
+
+- Development: Reads from disk for latest changes
+- Cache headers prevent browser caching during development
+
+## Troubleshooting
+
+### Scripts Not Loading in Development
+
+1. Build the packages:
+   ```bash
+   pnpm -F @refref/attribution-script build
+   pnpm -F @refref/widget build
+   ```
+
+2. Check file paths in `routes/scripts.ts`
+
+3. Verify server is running on port 3002
+
+### Referral Redirects Not Working
+
+1. Check database connection
+2. Verify referral link exists in database
+3. Check server logs for errors
+4. Ensure database index exists on `referral_link.slug`
+
+### Port Already in Use
+
+Change port in `.env`:
+```bash
+PORT=3003
+```
+
+## Related Documentation
+
+- [apps/assets](../assets/README.md) - Production script serving
+- [apps/api](../api/README.md) - Authenticated API endpoints
+- [apps/webapp](../webapp/README.md) - Web application
+- [packages/coredb](../../packages/coredb/README.md) - Database schema
diff --git a/apps/webapp/.env.example b/apps/webapp/.env.example
index 590175c..e732c58 100644
--- a/apps/webapp/.env.example
+++ b/apps/webapp/.env.example
@@ -48,7 +48,7 @@ NEXT_PUBLIC_POSTHOG_KEY=""
 NEXT_PUBLIC_POSTHOG_ENABLED="true"
 
 # External Services (OPTIONAL)
-# URL of the refer server for loading widget and attribution scripts
-# In development: http://localhost:3002
-# In production: your refer server URL (e.g., https://refer.yourapp.com)
-NEXT_PUBLIC_REFER_URL="http://localhost:3002"
+# URL of the assets CDN for loading widget and attribution scripts
+# In development: http://localhost:3002 (refer server serves scripts dynamically)
+# In production: https://assets.refref.ai (Cloudflare Pages CDN)
+NEXT_PUBLIC_ASSETS_URL="http://localhost:3002"
diff --git a/apps/webapp/src/app/layout.tsx b/apps/webapp/src/app/layout.tsx
index 1eb15b7..dffd391 100644
--- a/apps/webapp/src/app/layout.tsx
+++ b/apps/webapp/src/app/layout.tsx
@@ -8,6 +8,7 @@ import { NuqsAdapter } from "nuqs/adapters/next/app";
 import { TRPCReactProvider } from "@/trpc/react";
 import { AuthUIProvider } from "@/components/providers/auth-ui-provider";
 import { PostHogProvider } from "@/components/providers/posthog-provider";
+import { env } from "@/env";
 
 export const metadata: Metadata = {
   title: "RefRef - Referral Management Platform",
@@ -31,7 +32,7 @@ export default function RootLayout({
         <Script
           suppressHydrationWarning
           type="module"
-          src={`${process.env.NEXT_PUBLIC_REFER_URL || 'http://localhost:3002'}/scripts/attribution.js`}
+          src={`${env.NEXT_PUBLIC_ASSETS_URL}/scripts/attribution.js`}
           strategy="beforeInteractive"
         />
         <Script
@@ -46,7 +47,7 @@ export default function RootLayout({
         <Script
           suppressHydrationWarning
           type="module"
-          src={`${process.env.NEXT_PUBLIC_REFER_URL || 'http://localhost:3002'}/scripts/widget.js`}
+          src={`${env.NEXT_PUBLIC_ASSETS_URL}/scripts/widget.js`}
           strategy="afterInteractive"
           defer
         />
diff --git a/apps/webapp/src/env.ts b/apps/webapp/src/env.ts
index 93ef0f0..6aaf24d 100644
--- a/apps/webapp/src/env.ts
+++ b/apps/webapp/src/env.ts
@@ -31,6 +31,10 @@ export const env = createEnv({
   client: {
     // NEXT_PUBLIC_CLIENTVAR: z.string(),
     NEXT_PUBLIC_APP_URL: z.url().default("http://localhost:3000"),
+    NEXT_PUBLIC_ASSETS_URL: z
+      .url()
+      .optional()
+      .default("http://localhost:3002"),
     NEXT_PUBLIC_REFREF_PRODUCT_ID: z.string().optional(),
     NEXT_PUBLIC_REFREF_PROGRAM_ID: z.string().optional(),
     NEXT_PUBLIC_ENABLE_PASSWORD_AUTH: z
@@ -71,6 +75,7 @@ export const env = createEnv({
     BETTER_AUTH_URL: process.env.BETTER_AUTH_URL,
     RESEND_API_KEY: process.env.RESEND_API_KEY,
     NEXT_PUBLIC_APP_URL: process.env.NEXT_PUBLIC_APP_URL,
+    NEXT_PUBLIC_ASSETS_URL: process.env.NEXT_PUBLIC_ASSETS_URL,
     GOOGLE_CLIENT_ID: process.env.GOOGLE_CLIENT_ID,
     GOOGLE_CLIENT_SECRET: process.env.GOOGLE_CLIENT_SECRET,
     REFERRAL_PROGRAM_CLIENT_ID: process.env.REFERRAL_PROGRAM_CLIENT_ID,
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index fa4bf8e..3d6c640 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -18,6 +18,152 @@ importers:
         specifier: 5.7.3
         version: 5.7.3
 
+  apps/api:
+    dependencies:
+      '@fastify/cors':
+        specifier: ^10.0.1
+        version: 10.1.0
+      '@paralleldrive/cuid2':
+        specifier: ^2.2.2
+        version: 2.2.2
+      '@refref/coredb':
+        specifier: workspace:*
+        version: link:../../packages/coredb
+      '@refref/id':
+        specifier: workspace:*
+        version: link:../../packages/id
+      '@refref/types':
+        specifier: workspace:*
+        version: link:../../packages/types
+      '@refref/utils':
+        specifier: workspace:*
+        version: link:../../packages/utils
+      '@tsndr/cloudflare-worker-jwt':
+        specifier: ^3.2.0
+        version: 3.2.0
+      better-auth:
+        specifier: ^1.3.32
+        version: 1.3.32(next@15.4.6(@babel/core@7.28.3)(react-dom@19.0.0(react@19.0.0))(react@19.0.0))(react-dom@19.0.0(react@19.0.0))(react@19.0.0)
+      dotenv:
+        specifier: ^17.2.3
+        version: 17.2.3
+      drizzle-orm:
+        specifier: ^0.33.0
+        version: 0.33.0(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
+      fastify:
+        specifier: ^5.2.0
+        version: 5.6.2
+      fastify-plugin:
+        specifier: ^5.0.1
+        version: 5.1.0
+      jose:
+        specifier: ^5.9.6
+        version: 5.10.0
+      postgres:
+        specifier: ^3.4.5
+        version: 3.4.7
+      zod:
+        specifier: ^3.23.8
+        version: 3.25.76
+    devDependencies:
+      '@types/node':
+        specifier: ^22.10.2
+        version: 22.19.0
+      '@vitest/ui':
+        specifier: ^2.1.8
+        version: 2.1.9(vitest@2.1.9)
+      pino-pretty:
+        specifier: ^13.0.0
+        version: 13.1.2
+      playwright:
+        specifier: ^1.49.1
+        version: 1.56.1
+      tsx:
+        specifier: ^4.19.2
+        version: 4.19.3
+      typescript:
+        specifier: ^5.7.2
+        version: 5.9.2
+      vitest:
+        specifier: ^2.1.8
+        version: 2.1.9(@types/node@22.19.0)(@vitest/ui@2.1.9)(lightningcss@1.30.1)(terser@5.44.0)
+
+  apps/assets:
+    devDependencies:
+      '@refref/attribution-script':
+        specifier: workspace:*
+        version: link:../../packages/attribution-script
+      '@refref/typescript-config':
+        specifier: workspace:*
+        version: link:../../packages/typescript-config
+      '@refref/widget':
+        specifier: workspace:*
+        version: link:../../packages/widget
+      tsx:
+        specifier: ^4.7.1
+        version: 4.19.3
+      typescript:
+        specifier: ^5.9.2
+        version: 5.9.2
+      wrangler:
+        specifier: ^4.0.0
+        version: 4.47.0
+
+  apps/refer:
+    dependencies:
+      '@fastify/cors':
+        specifier: ^10.0.1
+        version: 10.1.0
+      '@fastify/rate-limit':
+        specifier: ^10.3.0
+        version: 10.3.0
+      '@refref/attribution-script':
+        specifier: workspace:*
+        version: link:../../packages/attribution-script
+      '@refref/coredb':
+        specifier: workspace:*
+        version: link:../../packages/coredb
+      '@refref/utils':
+        specifier: workspace:*
+        version: link:../../packages/utils
+      '@refref/widget':
+        specifier: workspace:*
+        version: link:../../packages/widget
+      dotenv:
+        specifier: ^17.2.3
+        version: 17.2.3
+      drizzle-orm:
+        specifier: ^0.33.0
+        version: 0.33.0(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
+      fastify:
+        specifier: ^5.2.0
+        version: 5.6.2
+      postgres:
+        specifier: ^3.4.5
+        version: 3.4.7
+    devDependencies:
+      '@types/node':
+        specifier: ^22.10.2
+        version: 22.19.0
+      '@vitest/ui':
+        specifier: ^2.1.8
+        version: 2.1.9(vitest@2.1.9)
+      pino-pretty:
+        specifier: ^13.0.0
+        version: 13.1.2
+      playwright:
+        specifier: ^1.49.1
+        version: 1.56.1
+      tsx:
+        specifier: ^4.19.2
+        version: 4.19.3
+      typescript:
+        specifier: ^5.7.2
+        version: 5.9.2
+      vitest:
+        specifier: ^2.1.8
+        version: 2.1.9(@types/node@22.19.0)(@vitest/ui@2.1.9)(lightningcss@1.30.1)(terser@5.44.0)
+
   apps/webapp:
     dependencies:
       '@daveyplate/better-auth-ui':
@@ -199,7 +345,7 @@ importers:
         version: 0.4.6(react-dom@19.0.0(react@19.0.0))(react@19.0.0)
       nuqs:
         specifier: 2.4.3
-        version: 2.4.3(next@15.4.6(@babel/core@7.28.3)(react-dom@19.0.0(react@19.0.0))(react@19.0.0))(react@19.0.0)
+        version: 2.4.3(next@15.4.6(react-dom@19.0.0(react@19.0.0))(react@19.0.0))(react@19.0.0)
       plugins:
         specifier: link:better-auth/client/plugins
         version: link:better-auth/client/plugins
@@ -328,131 +474,6 @@ importers:
         specifier: ^2.1.8
         version: 2.1.9(@types/node@24.3.0)(@vitest/ui@2.1.9)(lightningcss@1.30.1)(terser@5.44.0)
 
-  apps/api:
-    dependencies:
-      '@fastify/cors':
-        specifier: ^10.0.1
-        version: 10.1.0
-      '@paralleldrive/cuid2':
-        specifier: ^2.2.2
-        version: 2.2.2
-      '@refref/coredb':
-        specifier: workspace:*
-        version: link:../../packages/coredb
-      '@refref/id':
-        specifier: workspace:*
-        version: link:../../packages/id
-      '@refref/types':
-        specifier: workspace:*
-        version: link:../../packages/types
-      '@refref/utils':
-        specifier: workspace:*
-        version: link:../../packages/utils
-      '@tsndr/cloudflare-worker-jwt':
-        specifier: ^3.2.0
-        version: 3.2.0
-      better-auth:
-        specifier: ^1.3.32
-        version: 1.3.32(next@15.4.6(@babel/core@7.28.3)(react-dom@19.0.0(react@19.0.0))(react@19.0.0))(react-dom@19.0.0(react@19.0.0))(react@19.0.0)
-      dotenv:
-        specifier: ^17.2.3
-        version: 17.2.3
-      drizzle-orm:
-        specifier: ^0.33.0
-        version: 0.33.0(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
-      fastify:
-        specifier: ^5.2.0
-        version: 5.6.2
-      fastify-plugin:
-        specifier: ^5.0.1
-        version: 5.1.0
-      jose:
-        specifier: ^5.9.6
-        version: 5.10.0
-      postgres:
-        specifier: ^3.4.5
-        version: 3.4.7
-      zod:
-        specifier: ^3.23.8
-        version: 3.25.76
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.0
-      '@vitest/ui':
-        specifier: ^2.1.8
-        version: 2.1.9(vitest@2.1.9)
-      pino-pretty:
-        specifier: ^13.0.0
-        version: 13.1.2
-      playwright:
-        specifier: ^1.49.1
-        version: 1.56.1
-      tsx:
-        specifier: ^4.19.2
-        version: 4.19.3
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.2
-      vitest:
-        specifier: ^2.1.8
-        version: 2.1.9(@types/node@22.19.0)(@vitest/ui@2.1.9)(lightningcss@1.30.1)(terser@5.44.0)
-
-  apps/refer:
-    dependencies:
-      '@fastify/cors':
-        specifier: ^10.0.1
-        version: 10.1.0
-      '@fastify/rate-limit':
-        specifier: ^10.3.0
-        version: 10.3.0
-      '@refref/attribution-script':
-        specifier: workspace:*
-        version: link:../../packages/attribution-script
-      '@refref/coredb':
-        specifier: workspace:*
-        version: link:../../packages/coredb
-      '@refref/utils':
-        specifier: workspace:*
-        version: link:../../packages/utils
-      '@refref/widget':
-        specifier: workspace:*
-        version: link:../../packages/widget
-      dotenv:
-        specifier: ^17.2.3
-        version: 17.2.3
-      drizzle-orm:
-        specifier: ^0.33.0
-        version: 0.33.0(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
-      fastify:
-        specifier: ^5.2.0
-        version: 5.6.2
-      postgres:
-        specifier: ^3.4.5
-        version: 3.4.7
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.0
-      '@vitest/ui':
-        specifier: ^2.1.8
-        version: 2.1.9(vitest@2.1.9)
-      pino-pretty:
-        specifier: ^13.0.0
-        version: 13.1.2
-      playwright:
-        specifier: ^1.49.1
-        version: 1.56.1
-      tsx:
-        specifier: ^4.19.2
-        version: 4.19.3
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.2
-      vitest:
-        specifier: ^2.1.8
-        version: 2.1.9(@types/node@22.19.0)(@vitest/ui@2.1.9)(lightningcss@1.30.1)(terser@5.44.0)
-
   packages/attribution-script:
     devDependencies:
       '@refref/eslint-config':
@@ -735,7 +756,7 @@ importers:
         version: 0.4.6(react-dom@19.0.0(react@19.0.0))(react@19.0.0)
       nuqs:
         specifier: 2.4.3
-        version: 2.4.3(next@15.4.6(@babel/core@7.28.3)(react-dom@19.0.0(react@19.0.0))(react@19.0.0))(react@19.0.0)
+        version: 2.4.3(next@15.4.6(react-dom@19.0.0(react@19.0.0))(react@19.0.0))(react@19.0.0)
       radix-ui:
         specifier: ^1.4.3
         version: 1.4.3(@types/react-dom@19.1.7(@types/react@19.1.10))(@types/react@19.1.10)(react-dom@19.0.0(react@19.0.0))(react@19.0.0)
@@ -1204,6 +1225,49 @@ packages:
   '@clack/prompts@0.10.1':
     resolution: {integrity: sha512-Q0T02vx8ZM9XSv9/Yde0jTmmBQufZhPJfYAg2XrrrxWWaZgq1rr8nU8Hv710BQ1dhoP8rtY7YUdpGej2Qza/cw==}
 
+  '@cloudflare/kv-asset-handler@0.4.0':
+    resolution: {integrity: sha512-+tv3z+SPp+gqTIcImN9o0hqE9xyfQjI1XD9pL6NuKjua9B1y7mNYv0S9cP+QEbA4ppVgGZEmKOvHX5G5Ei1CVA==}
+    engines: {node: '>=18.0.0'}
+
+  '@cloudflare/unenv-preset@2.7.10':
+    resolution: {integrity: sha512-mvsNAiJSduC/9yxv1ZpCxwgAXgcuoDvkl8yaHjxoLpFxXy2ugc6TZK20EKgv4yO0vZhAEKwqJm+eGOzf8Oc45w==}
+    peerDependencies:
+      unenv: 2.0.0-rc.24
+      workerd: ^1.20251106.1
+    peerDependenciesMeta:
+      workerd:
+        optional: true
+
+  '@cloudflare/workerd-darwin-64@1.20251109.0':
+    resolution: {integrity: sha512-GAYXHOgPTJm6F+mOt0/Zf+rL+xPfMp8zAxGN4pqkzJ6QVQA/mNVMMuj22dI5x8+Ey+lCulKC3rNs4K3VE12hlA==}
+    engines: {node: '>=16'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@cloudflare/workerd-darwin-arm64@1.20251109.0':
+    resolution: {integrity: sha512-fpLJvZi3i+btgrXJcOtKYrbmdnHVTKpaZigoKIcpBX4mbwxUh/GVbrCmOqLebr57asQC+PmBfghUEYniqRgnhA==}
+    engines: {node: '>=16'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@cloudflare/workerd-linux-64@1.20251109.0':
+    resolution: {integrity: sha512-5NjCnXQoaySFAGGn10w0rPfmEhTSKTP/k7f3aduvt1syt462+66X7luOME/k2x5EB/Z5L8xvwf3/LejSSZ4EVA==}
+    engines: {node: '>=16'}
+    cpu: [x64]
+    os: [linux]
+
+  '@cloudflare/workerd-linux-arm64@1.20251109.0':
+    resolution: {integrity: sha512-f2AeJlpSwrEvEV57+JU+vRPL8c/Dv8nwY4XW+YwnzPo2TpbI/zzqloPXQ6PY79ftDfEsJJPzQuaDDPq3UOGJQA==}
+    engines: {node: '>=16'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@cloudflare/workerd-windows-64@1.20251109.0':
+    resolution: {integrity: sha512-IGo/lzbYoeJdfLkpaKLoeG6C7Rwcf5kXjzV0wO8fLUSmlfOLQvXTIehWc7EkbHFHjPapDqYqR0KsmbizBi68Lg==}
+    engines: {node: '>=16'}
+    cpu: [x64]
+    os: [win32]
+
   '@colors/colors@1.6.0':
     resolution: {integrity: sha512-Ir+AOibqzrIsL6ajt3Rz3LskB7OiMVHqltZmspbW/TJuTVuyOMirVqAkjfY6JISiLHgyNqicAC8AyHHGzNd/dA==}
     engines: {node: '>=0.1.90'}
@@ -1326,6 +1390,12 @@ packages:
     cpu: [ppc64]
     os: [aix]
 
+  '@esbuild/aix-ppc64@0.25.4':
+    resolution: {integrity: sha512-1VCICWypeQKhVbE9oW/sJaAmjLxhVqacdkvPLEjwlttjfwENRSClS8EjBz0KzRyFSCPDIkuXW34Je/vk7zdB7Q==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [aix]
+
   '@esbuild/android-arm64@0.18.20':
     resolution: {integrity: sha512-Nz4rJcchGDtENV0eMKUNa6L12zz2zBDXuhj/Vjh18zGqB44Bi7MBMSXjgunJgjRhCmKOjnPuZp4Mb6OKqtMHLQ==}
     engines: {node: '>=12'}
@@ -1350,6 +1420,12 @@ packages:
     cpu: [arm64]
     os: [android]
 
+  '@esbuild/android-arm64@0.25.4':
+    resolution: {integrity: sha512-bBy69pgfhMGtCnwpC/x5QhfxAz/cBgQ9enbtwjf6V9lnPI/hMyT9iWpR1arm0l3kttTr4L0KSLpKmLp/ilKS9A==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [android]
+
   '@esbuild/android-arm@0.18.20':
     resolution: {integrity: sha512-fyi7TDI/ijKKNZTUJAQqiG5T7YjJXgnzkURqmGj13C6dCqckZBLdl4h7bkhHt/t0WP+zO9/zwroDvANaOqO5Sw==}
     engines: {node: '>=12'}
@@ -1374,6 +1450,12 @@ packages:
     cpu: [arm]
     os: [android]
 
+  '@esbuild/android-arm@0.25.4':
+    resolution: {integrity: sha512-QNdQEps7DfFwE3hXiU4BZeOV68HHzYwGd0Nthhd3uCkkEKK7/R6MTgM0P7H7FAs5pU/DIWsviMmEGxEoxIZ+ZQ==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [android]
+
   '@esbuild/android-x64@0.18.20':
     resolution: {integrity: sha512-8GDdlePJA8D6zlZYJV/jnrRAi6rOiNaCC/JclcXpB+KIuvfBN4owLtgzY2bsxnx666XjJx2kDPUmnTtR8qKQUg==}
     engines: {node: '>=12'}
@@ -1398,6 +1480,12 @@ packages:
     cpu: [x64]
     os: [android]
 
+  '@esbuild/android-x64@0.25.4':
+    resolution: {integrity: sha512-TVhdVtQIFuVpIIR282btcGC2oGQoSfZfmBdTip2anCaVYcqWlZXGcdcKIUklfX2wj0JklNYgz39OBqh2cqXvcQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [android]
+
   '@esbuild/darwin-arm64@0.18.20':
     resolution: {integrity: sha512-bxRHW5kHU38zS2lPTPOyuyTm+S+eobPUnTNkdJEfAddYgEcll4xkT8DB9d2008DtTbl7uJag2HuE5NZAZgnNEA==}
     engines: {node: '>=12'}
@@ -1422,6 +1510,12 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
+  '@esbuild/darwin-arm64@0.25.4':
+    resolution: {integrity: sha512-Y1giCfM4nlHDWEfSckMzeWNdQS31BQGs9/rouw6Ub91tkK79aIMTH3q9xHvzH8d0wDru5Ci0kWB8b3up/nl16g==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [darwin]
+
   '@esbuild/darwin-x64@0.18.20':
     resolution: {integrity: sha512-pc5gxlMDxzm513qPGbCbDukOdsGtKhfxD1zJKXjCCcU7ju50O7MeAZ8c4krSJcOIJGFR+qx21yMMVYwiQvyTyQ==}
     engines: {node: '>=12'}
@@ -1446,6 +1540,12 @@ packages:
     cpu: [x64]
     os: [darwin]
 
+  '@esbuild/darwin-x64@0.25.4':
+    resolution: {integrity: sha512-CJsry8ZGM5VFVeyUYB3cdKpd/H69PYez4eJh1W/t38vzutdjEjtP7hB6eLKBoOdxcAlCtEYHzQ/PJ/oU9I4u0A==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [darwin]
+
   '@esbuild/freebsd-arm64@0.18.20':
     resolution: {integrity: sha512-yqDQHy4QHevpMAaxhhIwYPMv1NECwOvIpGCZkECn8w2WFHXjEwrBn3CeNIYsibZ/iZEUemj++M26W3cNR5h+Tw==}
     engines: {node: '>=12'}
@@ -1470,6 +1570,12 @@ packages:
     cpu: [arm64]
     os: [freebsd]
 
+  '@esbuild/freebsd-arm64@0.25.4':
+    resolution: {integrity: sha512-yYq+39NlTRzU2XmoPW4l5Ifpl9fqSk0nAJYM/V/WUGPEFfek1epLHJIkTQM6bBs1swApjO5nWgvr843g6TjxuQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [freebsd]
+
   '@esbuild/freebsd-x64@0.18.20':
     resolution: {integrity: sha512-tgWRPPuQsd3RmBZwarGVHZQvtzfEBOreNuxEMKFcd5DaDn2PbBxfwLcj4+aenoh7ctXcbXmOQIn8HI6mCSw5MQ==}
     engines: {node: '>=12'}
@@ -1494,6 +1600,12 @@ packages:
     cpu: [x64]
     os: [freebsd]
 
+  '@esbuild/freebsd-x64@0.25.4':
+    resolution: {integrity: sha512-0FgvOJ6UUMflsHSPLzdfDnnBBVoCDtBTVyn/MrWloUNvq/5SFmh13l3dvgRPkDihRxb77Y17MbqbCAa2strMQQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [freebsd]
+
   '@esbuild/linux-arm64@0.18.20':
     resolution: {integrity: sha512-2YbscF+UL7SQAVIpnWvYwM+3LskyDmPhe31pE7/aoTMFKKzIc9lLbyGUpmmb8a8AixOL61sQ/mFh3jEjHYFvdA==}
     engines: {node: '>=12'}
@@ -1518,6 +1630,12 @@ packages:
     cpu: [arm64]
     os: [linux]
 
+  '@esbuild/linux-arm64@0.25.4':
+    resolution: {integrity: sha512-+89UsQTfXdmjIvZS6nUnOOLoXnkUTB9hR5QAeLrQdzOSWZvNSAXAtcRDHWtqAUtAmv7ZM1WPOOeSxDzzzMogiQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [linux]
+
   '@esbuild/linux-arm@0.18.20':
     resolution: {integrity: sha512-/5bHkMWnq1EgKr1V+Ybz3s1hWXok7mDFUMQ4cG10AfW3wL02PSZi5kFpYKrptDsgb2WAJIvRcDm+qIvXf/apvg==}
     engines: {node: '>=12'}
@@ -1542,6 +1660,12 @@ packages:
     cpu: [arm]
     os: [linux]
 
+  '@esbuild/linux-arm@0.25.4':
+    resolution: {integrity: sha512-kro4c0P85GMfFYqW4TWOpvmF8rFShbWGnrLqlzp4X1TNWjRY3JMYUfDCtOxPKOIY8B0WC8HN51hGP4I4hz4AaQ==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [linux]
+
   '@esbuild/linux-ia32@0.18.20':
     resolution: {integrity: sha512-P4etWwq6IsReT0E1KHU40bOnzMHoH73aXp96Fs8TIT6z9Hu8G6+0SHSw9i2isWrD2nbx2qo5yUqACgdfVGx7TA==}
     engines: {node: '>=12'}
@@ -1566,6 +1690,12 @@ packages:
     cpu: [ia32]
     os: [linux]
 
+  '@esbuild/linux-ia32@0.25.4':
+    resolution: {integrity: sha512-yTEjoapy8UP3rv8dB0ip3AfMpRbyhSN3+hY8mo/i4QXFeDxmiYbEKp3ZRjBKcOP862Ua4b1PDfwlvbuwY7hIGQ==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [linux]
+
   '@esbuild/linux-loong64@0.18.20':
     resolution: {integrity: sha512-nXW8nqBTrOpDLPgPY9uV+/1DjxoQ7DoB2N8eocyq8I9XuqJ7BiAMDMf9n1xZM9TgW0J8zrquIb/A7s3BJv7rjg==}
     engines: {node: '>=12'}
@@ -1590,6 +1720,12 @@ packages:
     cpu: [loong64]
     os: [linux]
 
+  '@esbuild/linux-loong64@0.25.4':
+    resolution: {integrity: sha512-NeqqYkrcGzFwi6CGRGNMOjWGGSYOpqwCjS9fvaUlX5s3zwOtn1qwg1s2iE2svBe4Q/YOG1q6875lcAoQK/F4VA==}
+    engines: {node: '>=18'}
+    cpu: [loong64]
+    os: [linux]
+
   '@esbuild/linux-mips64el@0.18.20':
     resolution: {integrity: sha512-d5NeaXZcHp8PzYy5VnXV3VSd2D328Zb+9dEq5HE6bw6+N86JVPExrA6O68OPwobntbNJ0pzCpUFZTo3w0GyetQ==}
     engines: {node: '>=12'}
@@ -1614,6 +1750,12 @@ packages:
     cpu: [mips64el]
     os: [linux]
 
+  '@esbuild/linux-mips64el@0.25.4':
+    resolution: {integrity: sha512-IcvTlF9dtLrfL/M8WgNI/qJYBENP3ekgsHbYUIzEzq5XJzzVEV/fXY9WFPfEEXmu3ck2qJP8LG/p3Q8f7Zc2Xg==}
+    engines: {node: '>=18'}
+    cpu: [mips64el]
+    os: [linux]
+
   '@esbuild/linux-ppc64@0.18.20':
     resolution: {integrity: sha512-WHPyeScRNcmANnLQkq6AfyXRFr5D6N2sKgkFo2FqguP44Nw2eyDlbTdZwd9GYk98DZG9QItIiTlFLHJHjxP3FA==}
     engines: {node: '>=12'}
@@ -1638,6 +1780,12 @@ packages:
     cpu: [ppc64]
     os: [linux]
 
+  '@esbuild/linux-ppc64@0.25.4':
+    resolution: {integrity: sha512-HOy0aLTJTVtoTeGZh4HSXaO6M95qu4k5lJcH4gxv56iaycfz1S8GO/5Jh6X4Y1YiI0h7cRyLi+HixMR+88swag==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [linux]
+
   '@esbuild/linux-riscv64@0.18.20':
     resolution: {integrity: sha512-WSxo6h5ecI5XH34KC7w5veNnKkju3zBRLEQNY7mv5mtBmrP/MjNBCAlsM2u5hDBlS3NGcTQpoBvRzqBcRtpq1A==}
     engines: {node: '>=12'}
@@ -1662,6 +1810,12 @@ packages:
     cpu: [riscv64]
     os: [linux]
 
+  '@esbuild/linux-riscv64@0.25.4':
+    resolution: {integrity: sha512-i8JUDAufpz9jOzo4yIShCTcXzS07vEgWzyX3NH2G7LEFVgrLEhjwL3ajFE4fZI3I4ZgiM7JH3GQ7ReObROvSUA==}
+    engines: {node: '>=18'}
+    cpu: [riscv64]
+    os: [linux]
+
   '@esbuild/linux-s390x@0.18.20':
     resolution: {integrity: sha512-+8231GMs3mAEth6Ja1iK0a1sQ3ohfcpzpRLH8uuc5/KVDFneH6jtAJLFGafpzpMRO6DzJ6AvXKze9LfFMrIHVQ==}
     engines: {node: '>=12'}
@@ -1686,6 +1840,12 @@ packages:
     cpu: [s390x]
     os: [linux]
 
+  '@esbuild/linux-s390x@0.25.4':
+    resolution: {integrity: sha512-jFnu+6UbLlzIjPQpWCNh5QtrcNfMLjgIavnwPQAfoGx4q17ocOU9MsQ2QVvFxwQoWpZT8DvTLooTvmOQXkO51g==}
+    engines: {node: '>=18'}
+    cpu: [s390x]
+    os: [linux]
+
   '@esbuild/linux-x64@0.18.20':
     resolution: {integrity: sha512-UYqiqemphJcNsFEskc73jQ7B9jgwjWrSayxawS6UVFZGWrAAtkzjxSqnoclCXxWtfwLdzU+vTpcNYhpn43uP1w==}
     engines: {node: '>=12'}
@@ -1710,12 +1870,24 @@ packages:
     cpu: [x64]
     os: [linux]
 
+  '@esbuild/linux-x64@0.25.4':
+    resolution: {integrity: sha512-6e0cvXwzOnVWJHq+mskP8DNSrKBr1bULBvnFLpc1KY+d+irZSgZ02TGse5FsafKS5jg2e4pbvK6TPXaF/A6+CA==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [linux]
+
   '@esbuild/netbsd-arm64@0.25.0':
     resolution: {integrity: sha512-RuG4PSMPFfrkH6UwCAqBzauBWTygTvb1nxWasEJooGSJ/NwRw7b2HOwyRTQIU97Hq37l3npXoZGYMy3b3xYvPw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [netbsd]
 
+  '@esbuild/netbsd-arm64@0.25.4':
+    resolution: {integrity: sha512-vUnkBYxZW4hL/ie91hSqaSNjulOnYXE1VSLusnvHg2u3jewJBz3YzB9+oCw8DABeVqZGg94t9tyZFoHma8gWZQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [netbsd]
+
   '@esbuild/netbsd-x64@0.18.20':
     resolution: {integrity: sha512-iO1c++VP6xUBUmltHZoMtCUdPlnPGdBom6IrO4gyKPFFVBKioIImVooR5I83nTew5UOYrk3gIJhbZh8X44y06A==}
     engines: {node: '>=12'}
@@ -1740,12 +1912,24 @@ packages:
     cpu: [x64]
     os: [netbsd]
 
+  '@esbuild/netbsd-x64@0.25.4':
+    resolution: {integrity: sha512-XAg8pIQn5CzhOB8odIcAm42QsOfa98SBeKUdo4xa8OvX8LbMZqEtgeWE9P/Wxt7MlG2QqvjGths+nq48TrUiKw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [netbsd]
+
   '@esbuild/openbsd-arm64@0.25.0':
     resolution: {integrity: sha512-21sUNbq2r84YE+SJDfaQRvdgznTD8Xc0oc3p3iW/a1EVWeNj/SdUCbm5U0itZPQYRuRTW20fPMWMpcrciH2EJw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [openbsd]
 
+  '@esbuild/openbsd-arm64@0.25.4':
+    resolution: {integrity: sha512-Ct2WcFEANlFDtp1nVAXSNBPDxyU+j7+tId//iHXU2f/lN5AmO4zLyhDcpR5Cz1r08mVxzt3Jpyt4PmXQ1O6+7A==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openbsd]
+
   '@esbuild/openbsd-x64@0.18.20':
     resolution: {integrity: sha512-e5e4YSsuQfX4cxcygw/UCPIEP6wbIL+se3sxPdCiMbFLBWu0eiZOJ7WoD+ptCLrmjZBK1Wk7I6D/I3NglUGOxg==}
     engines: {node: '>=12'}
@@ -1770,6 +1954,12 @@ packages:
     cpu: [x64]
     os: [openbsd]
 
+  '@esbuild/openbsd-x64@0.25.4':
+    resolution: {integrity: sha512-xAGGhyOQ9Otm1Xu8NT1ifGLnA6M3sJxZ6ixylb+vIUVzvvd6GOALpwQrYrtlPouMqd/vSbgehz6HaVk4+7Afhw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [openbsd]
+
   '@esbuild/sunos-x64@0.18.20':
     resolution: {integrity: sha512-kDbFRFp0YpTQVVrqUd5FTYmWo45zGaXe0X8E1G/LKFC0v8x0vWrhOWSLITcCn63lmZIxfOMXtCfti/RxN/0wnQ==}
     engines: {node: '>=12'}
@@ -1794,6 +1984,12 @@ packages:
     cpu: [x64]
     os: [sunos]
 
+  '@esbuild/sunos-x64@0.25.4':
+    resolution: {integrity: sha512-Mw+tzy4pp6wZEK0+Lwr76pWLjrtjmJyUB23tHKqEDP74R3q95luY/bXqXZeYl4NYlvwOqoRKlInQialgCKy67Q==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [sunos]
+
   '@esbuild/win32-arm64@0.18.20':
     resolution: {integrity: sha512-ddYFR6ItYgoaq4v4JmQQaAI5s7npztfV4Ag6NrhiaW0RrnOXqBkgwZLofVTlq1daVTQNhtI5oieTvkRPfZrePg==}
     engines: {node: '>=12'}
@@ -1818,6 +2014,12 @@ packages:
     cpu: [arm64]
     os: [win32]
 
+  '@esbuild/win32-arm64@0.25.4':
+    resolution: {integrity: sha512-AVUP428VQTSddguz9dO9ngb+E5aScyg7nOeJDrF1HPYu555gmza3bDGMPhmVXL8svDSoqPCsCPjb265yG/kLKQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [win32]
+
   '@esbuild/win32-ia32@0.18.20':
     resolution: {integrity: sha512-Wv7QBi3ID/rROT08SABTS7eV4hX26sVduqDOTe1MvGMjNd3EjOz4b7zeexIR62GTIEKrfJXKL9LFxTYgkyeu7g==}
     engines: {node: '>=12'}
@@ -1842,6 +2044,12 @@ packages:
     cpu: [ia32]
     os: [win32]
 
+  '@esbuild/win32-ia32@0.25.4':
+    resolution: {integrity: sha512-i1sW+1i+oWvQzSgfRcxxG2k4I9n3O9NRqy8U+uugaT2Dy7kLO9Y7wI72haOahxceMX8hZAzgGou1FhndRldxRg==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [win32]
+
   '@esbuild/win32-x64@0.18.20':
     resolution: {integrity: sha512-kTdfRcSiDfQca/y9QIkng02avJ+NCaQvrMejlsB3RRv5sE9rRoeBPISaZpKxHELzRxZyLvNts1P27W3wV+8geQ==}
     engines: {node: '>=12'}
@@ -1866,6 +2074,12 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@esbuild/win32-x64@0.25.4':
+    resolution: {integrity: sha512-nOT2vZNw6hJ+z43oP1SPea/G/6AbN6X+bGNhNuq8NtRHy4wsMhw765IKLNmnjek7GvjWBYQ8Q5VBoYTFg9y1UQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [win32]
+
   '@eslint-community/eslint-utils@4.4.1':
     resolution: {integrity: sha512-s3O3waFUrMV8P/XaF/+ZTp1X9XBZW1a4B97ZnjQF2KYWaFD2A8KyFBsrsfSjEmjn3RGWAIuvlneuZm3CUK3jbA==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
@@ -2004,33 +2218,65 @@ packages:
     resolution: {integrity: sha512-c7hNEllBlenFTHBky65mhq8WD2kbN9Q6gk0bTk8lSBvc554jpXSkST1iePudpt7+A/AQvuHs9EMqjHDXMY1lrA==}
     engines: {node: '>=18.18'}
 
+  '@img/sharp-darwin-arm64@0.33.5':
+    resolution: {integrity: sha512-UT4p+iz/2H4twwAoLCqfA9UH5pI6DggwKEGuaPy7nCVQ8ZsiY5PIcrRvD1DzuY3qYL07NtIQcWnBSY/heikIFQ==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [darwin]
+
   '@img/sharp-darwin-arm64@0.34.3':
     resolution: {integrity: sha512-ryFMfvxxpQRsgZJqBd4wsttYQbCxsJksrv9Lw/v798JcQ8+w84mBWuXwl+TT0WJ/WrYOLaYpwQXi3sA9nTIaIg==}
     engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
     cpu: [arm64]
     os: [darwin]
 
+  '@img/sharp-darwin-x64@0.33.5':
+    resolution: {integrity: sha512-fyHac4jIc1ANYGRDxtiqelIbdWkIuQaI84Mv45KvGRRxSAa7o7d1ZKAOBaYbnepLC1WqxfpimdeWfvqqSGwR2Q==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [darwin]
+
   '@img/sharp-darwin-x64@0.34.3':
     resolution: {integrity: sha512-yHpJYynROAj12TA6qil58hmPmAwxKKC7reUqtGLzsOHfP7/rniNGTL8tjWX6L3CTV4+5P4ypcS7Pp+7OB+8ihA==}
     engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
     cpu: [x64]
     os: [darwin]
 
+  '@img/sharp-libvips-darwin-arm64@1.0.4':
+    resolution: {integrity: sha512-XblONe153h0O2zuFfTAbQYAX2JhYmDHeWikp1LM9Hul9gVPjFY427k6dFEcOL72O01QxQsWi761svJ/ev9xEDg==}
+    cpu: [arm64]
+    os: [darwin]
+
   '@img/sharp-libvips-darwin-arm64@1.2.0':
     resolution: {integrity: sha512-sBZmpwmxqwlqG9ueWFXtockhsxefaV6O84BMOrhtg/YqbTaRdqDE7hxraVE3y6gVM4eExmfzW4a8el9ArLeEiQ==}
     cpu: [arm64]
     os: [darwin]
 
+  '@img/sharp-libvips-darwin-x64@1.0.4':
+    resolution: {integrity: sha512-xnGR8YuZYfJGmWPvmlunFaWJsb9T/AO2ykoP3Fz/0X5XV2aoYBPkX6xqCQvUTKKiLddarLaxpzNe+b1hjeWHAQ==}
+    cpu: [x64]
+    os: [darwin]
+
   '@img/sharp-libvips-darwin-x64@1.2.0':
     resolution: {integrity: sha512-M64XVuL94OgiNHa5/m2YvEQI5q2cl9d/wk0qFTDVXcYzi43lxuiFTftMR1tOnFQovVXNZJ5TURSDK2pNe9Yzqg==}
     cpu: [x64]
     os: [darwin]
 
+  '@img/sharp-libvips-linux-arm64@1.0.4':
+    resolution: {integrity: sha512-9B+taZ8DlyyqzZQnoeIvDVR/2F4EbMepXMc/NdVbkzsJbzkUjhXv/70GQJ7tdLA4YJgNP25zukcxpX2/SueNrA==}
+    cpu: [arm64]
+    os: [linux]
+
   '@img/sharp-libvips-linux-arm64@1.2.0':
     resolution: {integrity: sha512-RXwd0CgG+uPRX5YYrkzKyalt2OJYRiJQ8ED/fi1tq9WQW2jsQIn0tqrlR5l5dr/rjqq6AHAxURhj2DVjyQWSOA==}
     cpu: [arm64]
     os: [linux]
 
+  '@img/sharp-libvips-linux-arm@1.0.5':
+    resolution: {integrity: sha512-gvcC4ACAOPRNATg/ov8/MnbxFDJqf/pDePbBnuBDcjsI8PssmjoKMAz4LtLaVi+OnSb5FK/yIOamqDwGmXW32g==}
+    cpu: [arm]
+    os: [linux]
+
   '@img/sharp-libvips-linux-arm@1.2.0':
     resolution: {integrity: sha512-mWd2uWvDtL/nvIzThLq3fr2nnGfyr/XMXlq8ZJ9WMR6PXijHlC3ksp0IpuhK6bougvQrchUAfzRLnbsen0Cqvw==}
     cpu: [arm]
@@ -2041,30 +2287,62 @@ packages:
     cpu: [ppc64]
     os: [linux]
 
+  '@img/sharp-libvips-linux-s390x@1.0.4':
+    resolution: {integrity: sha512-u7Wz6ntiSSgGSGcjZ55im6uvTrOxSIS8/dgoVMoiGE9I6JAfU50yH5BoDlYA1tcuGS7g/QNtetJnxA6QEsCVTA==}
+    cpu: [s390x]
+    os: [linux]
+
   '@img/sharp-libvips-linux-s390x@1.2.0':
     resolution: {integrity: sha512-eMKfzDxLGT8mnmPJTNMcjfO33fLiTDsrMlUVcp6b96ETbnJmd4uvZxVJSKPQfS+odwfVaGifhsB07J1LynFehw==}
     cpu: [s390x]
     os: [linux]
 
+  '@img/sharp-libvips-linux-x64@1.0.4':
+    resolution: {integrity: sha512-MmWmQ3iPFZr0Iev+BAgVMb3ZyC4KeFc3jFxnNbEPas60e1cIfevbtuyf9nDGIzOaW9PdnDciJm+wFFaTlj5xYw==}
+    cpu: [x64]
+    os: [linux]
+
   '@img/sharp-libvips-linux-x64@1.2.0':
     resolution: {integrity: sha512-ZW3FPWIc7K1sH9E3nxIGB3y3dZkpJlMnkk7z5tu1nSkBoCgw2nSRTFHI5pB/3CQaJM0pdzMF3paf9ckKMSE9Tg==}
     cpu: [x64]
     os: [linux]
 
+  '@img/sharp-libvips-linuxmusl-arm64@1.0.4':
+    resolution: {integrity: sha512-9Ti+BbTYDcsbp4wfYib8Ctm1ilkugkA/uscUn6UXK1ldpC1JjiXbLfFZtRlBhjPZ5o1NCLiDbg8fhUPKStHoTA==}
+    cpu: [arm64]
+    os: [linux]
+
   '@img/sharp-libvips-linuxmusl-arm64@1.2.0':
     resolution: {integrity: sha512-UG+LqQJbf5VJ8NWJ5Z3tdIe/HXjuIdo4JeVNADXBFuG7z9zjoegpzzGIyV5zQKi4zaJjnAd2+g2nna8TZvuW9Q==}
     cpu: [arm64]
     os: [linux]
 
+  '@img/sharp-libvips-linuxmusl-x64@1.0.4':
+    resolution: {integrity: sha512-viYN1KX9m+/hGkJtvYYp+CCLgnJXwiQB39damAO7WMdKWlIhmYTfHjwSbQeUK/20vY154mwezd9HflVFM1wVSw==}
+    cpu: [x64]
+    os: [linux]
+
   '@img/sharp-libvips-linuxmusl-x64@1.2.0':
     resolution: {integrity: sha512-SRYOLR7CXPgNze8akZwjoGBoN1ThNZoqpOgfnOxmWsklTGVfJiGJoC/Lod7aNMGA1jSsKWM1+HRX43OP6p9+6Q==}
     cpu: [x64]
     os: [linux]
 
+  '@img/sharp-linux-arm64@0.33.5':
+    resolution: {integrity: sha512-JMVv+AMRyGOHtO1RFBiJy/MBsgz0x4AWrT6QoEVVTyh1E39TrCUpTRI7mx9VksGX4awWASxqCYLCV4wBZHAYxA==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [linux]
+
   '@img/sharp-linux-arm64@0.34.3':
     resolution: {integrity: sha512-QdrKe3EvQrqwkDrtuTIjI0bu6YEJHTgEeqdzI3uWJOH6G1O8Nl1iEeVYRGdj1h5I21CqxSvQp1Yv7xeU3ZewbA==}
     engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
+    cpu: [arm64]
+    os: [linux]
+
+  '@img/sharp-linux-arm@0.33.5':
+    resolution: {integrity: sha512-JTS1eldqZbJxjvKaAkxhZmBqPRGmxgu+qFKSInv8moZ2AmT5Yib3EQ1c6gp493HvrvV8QgdOXdyaIBrhvFhBMQ==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm]
     os: [linux]
 
   '@img/sharp-linux-arm@0.34.3':
@@ -2079,30 +2357,59 @@ packages:
     cpu: [ppc64]
     os: [linux]
 
+  '@img/sharp-linux-s390x@0.33.5':
+    resolution: {integrity: sha512-y/5PCd+mP4CA/sPDKl2961b+C9d+vPAveS33s6Z3zfASk2j5upL6fXVPZi7ztePZ5CuH+1kW8JtvxgbuXHRa4Q==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [s390x]
+    os: [linux]
+
   '@img/sharp-linux-s390x@0.34.3':
     resolution: {integrity: sha512-3gahT+A6c4cdc2edhsLHmIOXMb17ltffJlxR0aC2VPZfwKoTGZec6u5GrFgdR7ciJSsHT27BD3TIuGcuRT0KmQ==}
     engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
     cpu: [s390x]
     os: [linux]
 
+  '@img/sharp-linux-x64@0.33.5':
+    resolution: {integrity: sha512-opC+Ok5pRNAzuvq1AG0ar+1owsu842/Ab+4qvU879ippJBHvyY5n2mxF1izXqkPYlGuP/M556uh53jRLJmzTWA==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [linux]
+
   '@img/sharp-linux-x64@0.34.3':
     resolution: {integrity: sha512-8kYso8d806ypnSq3/Ly0QEw90V5ZoHh10yH0HnrzOCr6DKAPI6QVHvwleqMkVQ0m+fc7EH8ah0BB0QPuWY6zJQ==}
     engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
     cpu: [x64]
     os: [linux]
 
+  '@img/sharp-linuxmusl-arm64@0.33.5':
+    resolution: {integrity: sha512-XrHMZwGQGvJg2V/oRSUfSAfjfPxO+4DkiRh6p2AFjLQztWUuY/o8Mq0eMQVIY7HJ1CDQUJlxGGZRw1a5bqmd1g==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [linux]
+
   '@img/sharp-linuxmusl-arm64@0.34.3':
     resolution: {integrity: sha512-vAjbHDlr4izEiXM1OTggpCcPg9tn4YriK5vAjowJsHwdBIdx0fYRsURkxLG2RLm9gyBq66gwtWI8Gx0/ov+JKQ==}
     engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
     cpu: [arm64]
     os: [linux]
 
+  '@img/sharp-linuxmusl-x64@0.33.5':
+    resolution: {integrity: sha512-WT+d/cgqKkkKySYmqoZ8y3pxx7lx9vVejxW/W4DOFMYVSkErR+w7mf2u8m/y4+xHe7yY9DAXQMWQhpnMuFfScw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [linux]
+
   '@img/sharp-linuxmusl-x64@0.34.3':
     resolution: {integrity: sha512-gCWUn9547K5bwvOn9l5XGAEjVTTRji4aPTqLzGXHvIr6bIDZKNTA34seMPgM0WmSf+RYBH411VavCejp3PkOeQ==}
     engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
     cpu: [x64]
     os: [linux]
 
+  '@img/sharp-wasm32@0.33.5':
+    resolution: {integrity: sha512-ykUW4LVGaMcU9lu9thv85CbRMAwfeadCJHRsg2GmeRa/cJxsVY9Rbd57JcMxBkKHag5U/x7TSBpScF4U8ElVzg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [wasm32]
+
   '@img/sharp-wasm32@0.34.3':
     resolution: {integrity: sha512-+CyRcpagHMGteySaWos8IbnXcHgfDn7pO2fiC2slJxvNq9gDipYBN42/RagzctVRKgxATmfqOSulgZv5e1RdMg==}
     engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
@@ -2114,12 +2421,24 @@ packages:
     cpu: [arm64]
     os: [win32]
 
+  '@img/sharp-win32-ia32@0.33.5':
+    resolution: {integrity: sha512-T36PblLaTwuVJ/zw/LaH0PdZkRz5rd3SmMHX8GSmR7vtNSP5Z6bQkExdSK7xGWyxLw4sUknBuugTelgw2faBbQ==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [ia32]
+    os: [win32]
+
   '@img/sharp-win32-ia32@0.34.3':
     resolution: {integrity: sha512-xuCdhH44WxuXgOM714hn4amodJMZl3OEvf0GVTm0BEyMeA2to+8HEdRPShH0SLYptJY1uBw+SCFP9WVQi1Q/cw==}
     engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
     cpu: [ia32]
     os: [win32]
 
+  '@img/sharp-win32-x64@0.33.5':
+    resolution: {integrity: sha512-MpY/o8/8kj+EcnxwvrP4aTJSWw/aZ7JIGR4aBeZkZw5B7/Jn+tY9/VNwtcoGmdT7GfggGIU4kygOMSbYnOrAbg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [win32]
+
   '@img/sharp-win32-x64@0.34.3':
     resolution: {integrity: sha512-OWwz05d++TxzLEv4VnsTz5CmZ6mI6S05sfQGEMrNrQcOEERbX46332IvE7pO/EUiw7jUrrS40z/M7kPyjfl04g==}
     engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
@@ -2449,6 +2768,15 @@ packages:
   '@polka/url@1.0.0-next.29':
     resolution: {integrity: sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==}
 
+  '@poppinss/colors@4.1.5':
+    resolution: {integrity: sha512-FvdDqtcRCtz6hThExcFOgW0cWX+xwSMWcRuQe5ZEb2m7cVQOAVZOIMt+/v9RxGiD9/OY16qJBXK4CVKWAPalBw==}
+
+  '@poppinss/dumper@0.6.5':
+    resolution: {integrity: sha512-NBdYIb90J7LfOI32dOewKI1r7wnkiH6m920puQ3qHUeZkxNkQiFnXVWoE6YtFSv6QOiPPf7ys6i+HWWecDz7sw==}
+
+  '@poppinss/exception@1.2.2':
+    resolution: {integrity: sha512-m7bpKCD4QMlFCjA/nKTs23fuvoVFoA83brRKmObCUNmi/9tVu8Ve3w4YQAnJu4q3Tjf5fr685HYIC/IA2zHRSg==}
+
   '@posthog/core@1.4.0':
     resolution: {integrity: sha512-jmW8/I//YOHAfjzokqas+Qtc2T57Ux8d2uIJu7FLcMGxywckHsl6od59CD18jtUzKToQdjQhV6Y3429qj+KeNw==}
 
@@ -4760,12 +5088,19 @@ packages:
   '@sinclair/typebox@0.27.8':
     resolution: {integrity: sha512-+Fj43pSMwJs4KRrH/938Uf+uAELIgVBmQzg/q1YG10djyfA3TnrU8N8XzqCh/okZdszqBQTZf96idMfE5lnwTA==}
 
+  '@sindresorhus/is@7.1.1':
+    resolution: {integrity: sha512-rO92VvpgMc3kfiTjGT52LEtJ8Yc5kCWhZjLQ3LwlA4pSgPpQO7bVpYXParOD8Jwf+cVQECJo3yP/4I8aZtUQTQ==}
+    engines: {node: '>=18'}
+
   '@sinonjs/commons@3.0.1':
     resolution: {integrity: sha512-K3mCHKQ9sVh8o1C9cxkwxaOmXoAMlDxC1mYyHrjqOWEcBjYr76t96zL2zlj5dUGZ3HSw240X1qgH3Mjf1yJWpQ==}
 
   '@sinonjs/fake-timers@10.3.0':
     resolution: {integrity: sha512-V4BG07kuYSUkTCSBHG8G8TNhM+F19jXFWnQtzj+we8DrkpSBCee9Z3Ms8yiGer/dlmhe35/Xdgyo3/0rQKg7YA==}
 
+  '@speed-highlight/core@1.2.12':
+    resolution: {integrity: sha512-uilwrK0Ygyri5dToHYdZSjcvpS2ZwX0w5aSt3GCEN9hrjxWCoeV4Z2DTXuxjwbntaLQIEEAlCeNQss5SoHvAEA==}
+
   '@standard-schema/utils@0.3.0':
     resolution: {integrity: sha512-e7Mew686owMaPJVNNLs55PUvgz371nKgwsc4vxE49zsODpJEnxgxRo2y/OKrqueavXgZNMDVj3DdHFlaSAeU8g==}
 
@@ -5555,6 +5890,10 @@ packages:
     peerDependencies:
       acorn: ^6.0.0 || ^7.0.0 || ^8.0.0
 
+  acorn-walk@8.3.2:
+    resolution: {integrity: sha512-cjkyv4OtNCIeqhHrfS81QWXoCBPExR/J62oyEqepVw8WaQeSqpW2uhuLPh1m9eWhDuOo/jUXVTlifvesOWp/4A==}
+    engines: {node: '>=0.4.0'}
+
   acorn-walk@8.3.4:
     resolution: {integrity: sha512-ueEepnujpqee2o5aIYnvHU6C0A42MNdsIDeqy5BydrkuC5R1ZuUFnm27EeFJGoEHJQgn3uleRvmTXaJgfXbt4g==}
     engines: {node: '>=0.4.0'}
@@ -5840,6 +6179,9 @@ packages:
   bl@4.1.0:
     resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
 
+  blake3-wasm@2.1.5:
+    resolution: {integrity: sha512-F1+K8EbfOZE49dtoPtmxUQrpXaBIl3ICvasLh+nJta0xkz+9kF/7uet9fLnwKqhDrmj6g+6K3Tw9yQPUg2ka5g==}
+
   brace-expansion@1.1.11:
     resolution: {integrity: sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==}
 
@@ -6545,6 +6887,9 @@ packages:
   error-ex@1.3.2:
     resolution: {integrity: sha512-7dFHNmqeFSEt2ZBsCriorKnn3Z2pj+fd9kmI6QoWw4//DL+icEBfc0U7qJCisqrTsKTjw4fNFy2pW9OqStD84g==}
 
+  error-stack-parser-es@1.0.5:
+    resolution: {integrity: sha512-5qucVt2XcuGMcEGgWI7i+yZpmpByQ8J1lHhcL7PwqCwu9FPP3VUXzT4ltHe5i2z9dePwEHcDVOAfSnHsOlCXRA==}
+
   es-abstract@1.23.9:
     resolution: {integrity: sha512-py07lI0wjxAC/DcfK1S6G7iANonniZwTISvdPzk9hzeH0IZIshbuuFxLIU96OyF89Yb9hiqWn8M/bY83KY5vzA==}
     engines: {node: '>= 0.4'}
@@ -6612,6 +6957,11 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
+  esbuild@0.25.4:
+    resolution: {integrity: sha512-8pgjLUcUjcgDg+2Q4NYXnPbo/vncAY4UmyaCm0jZevERqCHZIaWwdJHkf8XQtu4AxSKCdvrUbT0XUr1IdZzI8Q==}
+    engines: {node: '>=18'}
+    hasBin: true
+
   escalade@3.2.0:
     resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
     engines: {node: '>=6'}
@@ -6812,6 +7162,10 @@ packages:
     resolution: {integrity: sha512-8uSpZZocAZRBAPIEINJj3Lo9HyGitllczc27Eh5YYojjMFMn8yHMDMaUHE2Jqfq05D/wucwI4JGURyXt1vchyg==}
     engines: {node: '>=10'}
 
+  exit-hook@2.2.1:
+    resolution: {integrity: sha512-eNTPlAD67BmP31LDINZ3U7HSF8l57TxOY2PmBJ1shpCvpnxBF93mWCE8YHBnXs8qiUZJc9WDcWIeC3a2HIAMfw==}
+    engines: {node: '>=6'}
+
   exit@0.1.2:
     resolution: {integrity: sha512-Zk/eNKV2zbjpKzrsQ+n1G6poVbErQxJ0LBOJXaKZ1EViLzH+hrLu9cdXI4zw9dBQJslwBEpbQ2P1oS7nDxs6jQ==}
     engines: {node: '>= 0.8.0'}
@@ -7689,6 +8043,10 @@ packages:
     resolution: {integrity: sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==}
     engines: {node: '>=6'}
 
+  kleur@4.1.5:
+    resolution: {integrity: sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==}
+    engines: {node: '>=6'}
+
   kolorist@1.8.0:
     resolution: {integrity: sha512-Y+60/zizpJ3HRH8DCss+q95yr6145JXZo46OTpFvDZWLfRCE4qChOyk1b26nMaNpfHHgxagk9dXT5OP0Tfe+dQ==}
 
@@ -7924,6 +8282,11 @@ packages:
     resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
     engines: {node: '>= 0.6'}
 
+  mime@3.0.0:
+    resolution: {integrity: sha512-jSCU7/VB1loIWBZe14aEYHU/+1UMEHoaO7qxCOVJOw9GgH72VAWppxNcjU+x9a2k3GSIBXNKxXQFqRvvZ7vr3A==}
+    engines: {node: '>=10.0.0'}
+    hasBin: true
+
   mimic-fn@2.1.0:
     resolution: {integrity: sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==}
     engines: {node: '>=6'}
@@ -7932,6 +8295,11 @@ packages:
     resolution: {integrity: sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==}
     engines: {node: '>=10'}
 
+  miniflare@4.20251109.0:
+    resolution: {integrity: sha512-fm0J/IFrrx7RT1w3SIoDM5m7zPCa2wBtxBApy6G0QVjd2tx8w0WGlMFop6R49XyTfF1q3LRHCjFMfzJ8YS0RzQ==}
+    engines: {node: '>=18.0.0'}
+    hasBin: true
+
   minimatch@3.0.8:
     resolution: {integrity: sha512-6FsRAQsxQ61mw+qP1ZzbL9Bc78x2p5OqNgNpnoAFLTrX8n5Kxph0CsnhmKKNXTWjXqU5L0pGPR7hYk+XWZr60Q==}
 
@@ -8309,6 +8677,9 @@ packages:
     resolution: {integrity: sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==}
     engines: {node: '>=16 || 14 >=14.18'}
 
+  path-to-regexp@6.3.0:
+    resolution: {integrity: sha512-Yhpw4T9C6hPpgPeA28us07OJeqZ5EzQTkbfwuhsUg0c237RomFoETJgmp2sa3F/41gfLE6G5cqcYwznmeEeOlQ==}
+
   path-type@4.0.0:
     resolution: {integrity: sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw==}
     engines: {node: '>=8'}
@@ -8907,6 +9278,10 @@ packages:
     resolution: {integrity: sha512-RJRdvCo6IAnPdsvP/7m6bsQqNnn1FCBX5ZNtFL98MmFF/4xAIJTIg1YbHW5DC2W5SKZanrC6i4HsJqlajw/dZw==}
     engines: {node: '>= 0.4'}
 
+  sharp@0.33.5:
+    resolution: {integrity: sha512-haPVm1EkS9pgvHrQ/F3Xy+hgcuMV0Wm9vfIBSiwZ05k+xgb0PkBQpGsAA/oWdDobNaZTH5ppvHtzCFbnSEwHVw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+
   sharp@0.34.3:
     resolution: {integrity: sha512-eX2IQ6nFohW4DbvHIOLRB3MHFpYqaqvXd3Tp5e/T/dSH83fxaNJQRvDMhASmkNTsNTVF2/OOopzRCt7xokgPfg==}
     engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
@@ -9041,6 +9416,10 @@ packages:
     resolution: {integrity: sha512-eLoXW/DHyl62zxY4SCaIgnRhuMr6ri4juEYARS8E6sCEqzKpOiE521Ucofdx+KnDZl5xmvGYaaKCk5FEOxJCoQ==}
     engines: {node: '>= 0.4'}
 
+  stoppable@1.1.0:
+    resolution: {integrity: sha512-KXDYZ9dszj6bzvnEMRYvxgeTHU74QBFL54XKtP3nyMuJ81CFYtABZ3bAzL2EdFUaEwJOBOgENyFj3R7oTzDyyw==}
+    engines: {node: '>=4', npm: '>=6'}
+
   string-argv@0.3.2:
     resolution: {integrity: sha512-aqD2Q0144Z+/RqG52NeHEkZauTAUWJO8c6yTftGJKO3Tja5tUgIfmIl6kExvhtxSDP7fXB6DvzkfMpCd/F3G+Q==}
     engines: {node: '>=0.6.19'}
@@ -9144,6 +9523,10 @@ packages:
     resolution: {integrity: sha512-ay3d+LW/S6yppKoTz3Bq4mG0xrS5bFwfWEBmQfbC7lt5wmtk+Obq0TxVuA9eYRirBTQb1K3eEpBRHMQEo0WyVw==}
     engines: {node: '>=16'}
 
+  supports-color@10.2.2:
+    resolution: {integrity: sha512-SS+jx45GF1QjgEXQx4NJZV9ImqmO2NPz5FNsIHrsDjh2YsHnawpan7SNQ1o8NuhrbHZy9AZhIoCUiCeaW/C80g==}
+    engines: {node: '>=18'}
+
   supports-color@5.5.0:
     resolution: {integrity: sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==}
     engines: {node: '>=4'}
@@ -9525,6 +9908,13 @@ packages:
   undici-types@7.16.0:
     resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
 
+  undici@7.14.0:
+    resolution: {integrity: sha512-Vqs8HTzjpQXZeXdpsfChQTlafcMQaaIwnGwLam1wudSSjlJeQ3bw1j+TLPePgrCnCpUXx7Ba5Pdpf5OBih62NQ==}
+    engines: {node: '>=20.18.1'}
+
+  unenv@2.0.0-rc.24:
+    resolution: {integrity: sha512-i7qRCmY42zmCwnYlh9H2SvLEypEFGye5iRmEMKjcGi7zk9UquigRjFtTLz0TYqr0ZGLZhaMHl/foy1bZR+Cwlw==}
+
   universalify@0.1.2:
     resolution: {integrity: sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==}
     engines: {node: '>= 4.0.0'}
@@ -9858,6 +10248,21 @@ packages:
   wordwrap@1.0.0:
     resolution: {integrity: sha512-gvVzJFlPycKc5dZN4yPkP8w7Dc37BtP1yczEneOb4uq34pXZcvrtRTmWV8W+Ume+XCxKgbjM+nevkyFPMybd4Q==}
 
+  workerd@1.20251109.0:
+    resolution: {integrity: sha512-VfazMiymlzos0c1t9AhNi0w8gN9+ZbCVLdEE0VDOsI22WYa6yj+pYOhpZzI/mOzCGmk/o1eNjLMkfjWli6aRVg==}
+    engines: {node: '>=16'}
+    hasBin: true
+
+  wrangler@4.47.0:
+    resolution: {integrity: sha512-JP0U8oqUETK9D+ZbrSjFFOxGdufYsS6HsT0vLU1IAQrban9a6woMHdBZlGNn/lt8QA70xv1uFiJK8DUMPzC73A==}
+    engines: {node: '>=18.0.0'}
+    hasBin: true
+    peerDependencies:
+      '@cloudflare/workers-types': ^4.20251109.0
+    peerDependenciesMeta:
+      '@cloudflare/workers-types':
+        optional: true
+
   wrap-ansi@6.2.0:
     resolution: {integrity: sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==}
     engines: {node: '>=8'}
@@ -9877,6 +10282,18 @@ packages:
     resolution: {integrity: sha512-7KxauUdBmSdWnmpaGFg+ppNjKF8uNLry8LyzjauQDOVONfFLNKrKvQOxZ/VuTIcS/gge/YNahf5RIIQWTSarlg==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
 
+  ws@8.18.0:
+    resolution: {integrity: sha512-8VbfWfHLbbwu3+N6OKsOMpBdT4kXPDDB9cJk2bJ6mh9ucxdlnNvH1e+roYkKmN9Nxw2yjz7VzeO9oOz2zJ04Pw==}
+    engines: {node: '>=10.0.0'}
+    peerDependencies:
+      bufferutil: ^4.0.1
+      utf-8-validate: '>=5.0.2'
+    peerDependenciesMeta:
+      bufferutil:
+        optional: true
+      utf-8-validate:
+        optional: true
+
   y18n@5.0.8:
     resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==}
     engines: {node: '>=10'}
@@ -9920,11 +10337,20 @@ packages:
     resolution: {integrity: sha512-GQHQqAopRhwU8Kt1DDM8NjibDXHC8eoh1erhGAJPEyveY9qqVeXvVikNKrDz69sHowPMorbPUrH/mx8c50eiBQ==}
     engines: {node: '>=18'}
 
+  youch-core@0.3.3:
+    resolution: {integrity: sha512-ho7XuGjLaJ2hWHoK8yFnsUGy2Y5uDpqSTq1FkHLK4/oqKtyUU1AFbOOxY4IpC9f0fTLjwYbslUz0Po5BpD1wrA==}
+
+  youch@4.1.0-beta.10:
+    resolution: {integrity: sha512-rLfVLB4FgQneDr0dv1oddCVZmKjcJ6yX6mS4pU82Mq/Dt9a3cLZQ62pDBL4AUO+uVrCvtWz3ZFUL2HFAFJ/BXQ==}
+
   z-schema@5.0.5:
     resolution: {integrity: sha512-D7eujBWkLa3p2sIpJA0d1pr7es+a7m0vFAnZLlCEKq/Ij2k0MLi9Br2UPxoxdYystm5K1yeBGzub0FlYUEWj2Q==}
     engines: {node: '>=8.0.0'}
     hasBin: true
 
+  zod@3.22.3:
+    resolution: {integrity: sha512-EjIevzuJRiRPbVH4mGc8nApb/lVLKVpmUhAaR5R5doKGfAnGJ6Gr3CViAVjP+4FWSxCsybeWQdcgCtbX+7oZug==}
+
   zod@3.25.76:
     resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==}
 
@@ -10392,6 +10818,31 @@ snapshots:
       picocolors: 1.1.1
       sisteransi: 1.0.5
 
+  '@cloudflare/kv-asset-handler@0.4.0':
+    dependencies:
+      mime: 3.0.0
+
+  '@cloudflare/unenv-preset@2.7.10(unenv@2.0.0-rc.24)(workerd@1.20251109.0)':
+    dependencies:
+      unenv: 2.0.0-rc.24
+    optionalDependencies:
+      workerd: 1.20251109.0
+
+  '@cloudflare/workerd-darwin-64@1.20251109.0':
+    optional: true
+
+  '@cloudflare/workerd-darwin-arm64@1.20251109.0':
+    optional: true
+
+  '@cloudflare/workerd-linux-64@1.20251109.0':
+    optional: true
+
+  '@cloudflare/workerd-linux-arm64@1.20251109.0':
+    optional: true
+
+  '@cloudflare/workerd-windows-64@1.20251109.0':
+    optional: true
+
   '@colors/colors@1.6.0': {}
 
   '@cspotcode/source-map-support@0.8.1':
@@ -10528,6 +10979,9 @@ snapshots:
   '@esbuild/aix-ppc64@0.25.0':
     optional: true
 
+  '@esbuild/aix-ppc64@0.25.4':
+    optional: true
+
   '@esbuild/android-arm64@0.18.20':
     optional: true
 
@@ -10540,6 +10994,9 @@ snapshots:
   '@esbuild/android-arm64@0.25.0':
     optional: true
 
+  '@esbuild/android-arm64@0.25.4':
+    optional: true
+
   '@esbuild/android-arm@0.18.20':
     optional: true
 
@@ -10552,6 +11009,9 @@ snapshots:
   '@esbuild/android-arm@0.25.0':
     optional: true
 
+  '@esbuild/android-arm@0.25.4':
+    optional: true
+
   '@esbuild/android-x64@0.18.20':
     optional: true
 
@@ -10564,6 +11024,9 @@ snapshots:
   '@esbuild/android-x64@0.25.0':
     optional: true
 
+  '@esbuild/android-x64@0.25.4':
+    optional: true
+
   '@esbuild/darwin-arm64@0.18.20':
     optional: true
 
@@ -10576,6 +11039,9 @@ snapshots:
   '@esbuild/darwin-arm64@0.25.0':
     optional: true
 
+  '@esbuild/darwin-arm64@0.25.4':
+    optional: true
+
   '@esbuild/darwin-x64@0.18.20':
     optional: true
 
@@ -10588,6 +11054,9 @@ snapshots:
   '@esbuild/darwin-x64@0.25.0':
     optional: true
 
+  '@esbuild/darwin-x64@0.25.4':
+    optional: true
+
   '@esbuild/freebsd-arm64@0.18.20':
     optional: true
 
@@ -10600,6 +11069,9 @@ snapshots:
   '@esbuild/freebsd-arm64@0.25.0':
     optional: true
 
+  '@esbuild/freebsd-arm64@0.25.4':
+    optional: true
+
   '@esbuild/freebsd-x64@0.18.20':
     optional: true
 
@@ -10612,6 +11084,9 @@ snapshots:
   '@esbuild/freebsd-x64@0.25.0':
     optional: true
 
+  '@esbuild/freebsd-x64@0.25.4':
+    optional: true
+
   '@esbuild/linux-arm64@0.18.20':
     optional: true
 
@@ -10624,6 +11099,9 @@ snapshots:
   '@esbuild/linux-arm64@0.25.0':
     optional: true
 
+  '@esbuild/linux-arm64@0.25.4':
+    optional: true
+
   '@esbuild/linux-arm@0.18.20':
     optional: true
 
@@ -10636,6 +11114,9 @@ snapshots:
   '@esbuild/linux-arm@0.25.0':
     optional: true
 
+  '@esbuild/linux-arm@0.25.4':
+    optional: true
+
   '@esbuild/linux-ia32@0.18.20':
     optional: true
 
@@ -10648,6 +11129,9 @@ snapshots:
   '@esbuild/linux-ia32@0.25.0':
     optional: true
 
+  '@esbuild/linux-ia32@0.25.4':
+    optional: true
+
   '@esbuild/linux-loong64@0.18.20':
     optional: true
 
@@ -10660,6 +11144,9 @@ snapshots:
   '@esbuild/linux-loong64@0.25.0':
     optional: true
 
+  '@esbuild/linux-loong64@0.25.4':
+    optional: true
+
   '@esbuild/linux-mips64el@0.18.20':
     optional: true
 
@@ -10672,6 +11159,9 @@ snapshots:
   '@esbuild/linux-mips64el@0.25.0':
     optional: true
 
+  '@esbuild/linux-mips64el@0.25.4':
+    optional: true
+
   '@esbuild/linux-ppc64@0.18.20':
     optional: true
 
@@ -10684,6 +11174,9 @@ snapshots:
   '@esbuild/linux-ppc64@0.25.0':
     optional: true
 
+  '@esbuild/linux-ppc64@0.25.4':
+    optional: true
+
   '@esbuild/linux-riscv64@0.18.20':
     optional: true
 
@@ -10696,6 +11189,9 @@ snapshots:
   '@esbuild/linux-riscv64@0.25.0':
     optional: true
 
+  '@esbuild/linux-riscv64@0.25.4':
+    optional: true
+
   '@esbuild/linux-s390x@0.18.20':
     optional: true
 
@@ -10708,6 +11204,9 @@ snapshots:
   '@esbuild/linux-s390x@0.25.0':
     optional: true
 
+  '@esbuild/linux-s390x@0.25.4':
+    optional: true
+
   '@esbuild/linux-x64@0.18.20':
     optional: true
 
@@ -10720,9 +11219,15 @@ snapshots:
   '@esbuild/linux-x64@0.25.0':
     optional: true
 
+  '@esbuild/linux-x64@0.25.4':
+    optional: true
+
   '@esbuild/netbsd-arm64@0.25.0':
     optional: true
 
+  '@esbuild/netbsd-arm64@0.25.4':
+    optional: true
+
   '@esbuild/netbsd-x64@0.18.20':
     optional: true
 
@@ -10735,9 +11240,15 @@ snapshots:
   '@esbuild/netbsd-x64@0.25.0':
     optional: true
 
+  '@esbuild/netbsd-x64@0.25.4':
+    optional: true
+
   '@esbuild/openbsd-arm64@0.25.0':
     optional: true
 
+  '@esbuild/openbsd-arm64@0.25.4':
+    optional: true
+
   '@esbuild/openbsd-x64@0.18.20':
     optional: true
 
@@ -10750,6 +11261,9 @@ snapshots:
   '@esbuild/openbsd-x64@0.25.0':
     optional: true
 
+  '@esbuild/openbsd-x64@0.25.4':
+    optional: true
+
   '@esbuild/sunos-x64@0.18.20':
     optional: true
 
@@ -10762,6 +11276,9 @@ snapshots:
   '@esbuild/sunos-x64@0.25.0':
     optional: true
 
+  '@esbuild/sunos-x64@0.25.4':
+    optional: true
+
   '@esbuild/win32-arm64@0.18.20':
     optional: true
 
@@ -10774,6 +11291,9 @@ snapshots:
   '@esbuild/win32-arm64@0.25.0':
     optional: true
 
+  '@esbuild/win32-arm64@0.25.4':
+    optional: true
+
   '@esbuild/win32-ia32@0.18.20':
     optional: true
 
@@ -10786,6 +11306,9 @@ snapshots:
   '@esbuild/win32-ia32@0.25.0':
     optional: true
 
+  '@esbuild/win32-ia32@0.25.4':
+    optional: true
+
   '@esbuild/win32-x64@0.18.20':
     optional: true
 
@@ -10798,6 +11321,9 @@ snapshots:
   '@esbuild/win32-x64@0.25.0':
     optional: true
 
+  '@esbuild/win32-x64@0.25.4':
+    optional: true
+
   '@eslint-community/eslint-utils@4.4.1(eslint@9.20.0(jiti@2.5.1))':
     dependencies:
       eslint: 9.20.0(jiti@2.5.1)
@@ -10957,48 +11483,92 @@ snapshots:
 
   '@humanwhocodes/retry@0.4.1': {}
 
+  '@img/sharp-darwin-arm64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-arm64': 1.0.4
+    optional: true
+
   '@img/sharp-darwin-arm64@0.34.3':
     optionalDependencies:
       '@img/sharp-libvips-darwin-arm64': 1.2.0
     optional: true
 
+  '@img/sharp-darwin-x64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-x64': 1.0.4
+    optional: true
+
   '@img/sharp-darwin-x64@0.34.3':
     optionalDependencies:
       '@img/sharp-libvips-darwin-x64': 1.2.0
     optional: true
 
+  '@img/sharp-libvips-darwin-arm64@1.0.4':
+    optional: true
+
   '@img/sharp-libvips-darwin-arm64@1.2.0':
     optional: true
 
+  '@img/sharp-libvips-darwin-x64@1.0.4':
+    optional: true
+
   '@img/sharp-libvips-darwin-x64@1.2.0':
     optional: true
 
+  '@img/sharp-libvips-linux-arm64@1.0.4':
+    optional: true
+
   '@img/sharp-libvips-linux-arm64@1.2.0':
     optional: true
 
+  '@img/sharp-libvips-linux-arm@1.0.5':
+    optional: true
+
   '@img/sharp-libvips-linux-arm@1.2.0':
     optional: true
 
   '@img/sharp-libvips-linux-ppc64@1.2.0':
     optional: true
 
+  '@img/sharp-libvips-linux-s390x@1.0.4':
+    optional: true
+
   '@img/sharp-libvips-linux-s390x@1.2.0':
     optional: true
 
+  '@img/sharp-libvips-linux-x64@1.0.4':
+    optional: true
+
   '@img/sharp-libvips-linux-x64@1.2.0':
     optional: true
 
+  '@img/sharp-libvips-linuxmusl-arm64@1.0.4':
+    optional: true
+
   '@img/sharp-libvips-linuxmusl-arm64@1.2.0':
     optional: true
 
+  '@img/sharp-libvips-linuxmusl-x64@1.0.4':
+    optional: true
+
   '@img/sharp-libvips-linuxmusl-x64@1.2.0':
     optional: true
 
+  '@img/sharp-linux-arm64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm64': 1.0.4
+    optional: true
+
   '@img/sharp-linux-arm64@0.34.3':
     optionalDependencies:
       '@img/sharp-libvips-linux-arm64': 1.2.0
     optional: true
 
+  '@img/sharp-linux-arm@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm': 1.0.5
+    optional: true
+
   '@img/sharp-linux-arm@0.34.3':
     optionalDependencies:
       '@img/sharp-libvips-linux-arm': 1.2.0
@@ -11009,26 +11579,51 @@ snapshots:
       '@img/sharp-libvips-linux-ppc64': 1.2.0
     optional: true
 
+  '@img/sharp-linux-s390x@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-s390x': 1.0.4
+    optional: true
+
   '@img/sharp-linux-s390x@0.34.3':
     optionalDependencies:
       '@img/sharp-libvips-linux-s390x': 1.2.0
     optional: true
 
+  '@img/sharp-linux-x64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-x64': 1.0.4
+    optional: true
+
   '@img/sharp-linux-x64@0.34.3':
     optionalDependencies:
       '@img/sharp-libvips-linux-x64': 1.2.0
     optional: true
 
+  '@img/sharp-linuxmusl-arm64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-arm64': 1.0.4
+    optional: true
+
   '@img/sharp-linuxmusl-arm64@0.34.3':
     optionalDependencies:
       '@img/sharp-libvips-linuxmusl-arm64': 1.2.0
     optional: true
 
+  '@img/sharp-linuxmusl-x64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-x64': 1.0.4
+    optional: true
+
   '@img/sharp-linuxmusl-x64@0.34.3':
     optionalDependencies:
       '@img/sharp-libvips-linuxmusl-x64': 1.2.0
     optional: true
 
+  '@img/sharp-wasm32@0.33.5':
+    dependencies:
+      '@emnapi/runtime': 1.4.5
+    optional: true
+
   '@img/sharp-wasm32@0.34.3':
     dependencies:
       '@emnapi/runtime': 1.4.5
@@ -11037,9 +11632,15 @@ snapshots:
   '@img/sharp-win32-arm64@0.34.3':
     optional: true
 
+  '@img/sharp-win32-ia32@0.33.5':
+    optional: true
+
   '@img/sharp-win32-ia32@0.34.3':
     optional: true
 
+  '@img/sharp-win32-x64@0.33.5':
+    optional: true
+
   '@img/sharp-win32-x64@0.34.3':
     optional: true
 
@@ -11192,7 +11793,7 @@ snapshots:
       '@jest/test-result': 29.7.0
       '@jest/transform': 29.7.0
       '@jest/types': 29.6.3
-      '@jridgewell/trace-mapping': 0.3.30
+      '@jridgewell/trace-mapping': 0.3.31
       '@types/node': 22.19.0
       chalk: 4.1.2
       collect-v8-coverage: 1.0.2
@@ -11220,7 +11821,7 @@ snapshots:
 
   '@jest/source-map@29.6.3':
     dependencies:
-      '@jridgewell/trace-mapping': 0.3.30
+      '@jridgewell/trace-mapping': 0.3.31
       callsites: 3.1.0
       graceful-fs: 4.2.11
 
@@ -11242,7 +11843,7 @@ snapshots:
     dependencies:
       '@babel/core': 7.28.3
       '@jest/types': 29.6.3
-      '@jridgewell/trace-mapping': 0.3.30
+      '@jridgewell/trace-mapping': 0.3.31
       babel-plugin-istanbul: 6.1.1
       chalk: 4.1.2
       convert-source-map: 2.0.0
@@ -11270,7 +11871,7 @@ snapshots:
   '@jridgewell/gen-mapping@0.3.13':
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.0
-      '@jridgewell/trace-mapping': 0.3.30
+      '@jridgewell/trace-mapping': 0.3.31
 
   '@jridgewell/remapping@2.3.5':
     dependencies:
@@ -11296,12 +11897,12 @@ snapshots:
   '@jridgewell/trace-mapping@0.3.31':
     dependencies:
       '@jridgewell/resolve-uri': 3.1.2
-      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/sourcemap-codec': 1.5.0
 
   '@jridgewell/trace-mapping@0.3.9':
     dependencies:
       '@jridgewell/resolve-uri': 3.1.2
-      '@jridgewell/sourcemap-codec': 1.5.0
+      '@jridgewell/sourcemap-codec': 1.5.5
 
   '@levischuck/tiny-cbor@0.2.11': {}
 
@@ -11581,6 +12182,18 @@ snapshots:
 
   '@polka/url@1.0.0-next.29': {}
 
+  '@poppinss/colors@4.1.5':
+    dependencies:
+      kleur: 4.1.5
+
+  '@poppinss/dumper@0.6.5':
+    dependencies:
+      '@poppinss/colors': 4.1.5
+      '@sindresorhus/is': 7.1.1
+      supports-color: 10.2.2
+
+  '@poppinss/exception@1.2.2': {}
+
   '@posthog/core@1.4.0': {}
 
   '@prisma/client@5.22.0(prisma@5.22.0)':
@@ -14355,6 +14968,8 @@ snapshots:
 
   '@sinclair/typebox@0.27.8': {}
 
+  '@sindresorhus/is@7.1.1': {}
+
   '@sinonjs/commons@3.0.1':
     dependencies:
       type-detect: 4.0.8
@@ -14363,6 +14978,8 @@ snapshots:
     dependencies:
       '@sinonjs/commons': 3.0.1
 
+  '@speed-highlight/core@1.2.12': {}
+
   '@standard-schema/utils@0.3.0': {}
 
   '@swc/core-darwin-arm64@1.15.1':
@@ -15234,9 +15851,11 @@ snapshots:
     dependencies:
       acorn: 8.14.0
 
+  acorn-walk@8.3.2: {}
+
   acorn-walk@8.3.4:
     dependencies:
-      acorn: 8.14.0
+      acorn: 8.15.0
 
   acorn@8.14.0: {}
 
@@ -15566,6 +16185,8 @@ snapshots:
       inherits: 2.0.4
       readable-stream: 3.6.2
 
+  blake3-wasm@2.1.5: {}
+
   brace-expansion@1.1.11:
     dependencies:
       balanced-match: 1.0.2
@@ -15850,7 +16471,6 @@ snapshots:
     dependencies:
       color-convert: 2.0.1
       color-string: 1.9.1
-    optional: true
 
   colorette@2.0.20: {}
 
@@ -16191,6 +16811,8 @@ snapshots:
     dependencies:
       is-arrayish: 0.2.1
 
+  error-stack-parser-es@1.0.5: {}
+
   es-abstract@1.23.9:
     dependencies:
       array-buffer-byte-length: 1.0.2
@@ -16464,6 +17086,34 @@ snapshots:
       '@esbuild/win32-ia32': 0.25.0
       '@esbuild/win32-x64': 0.25.0
 
+  esbuild@0.25.4:
+    optionalDependencies:
+      '@esbuild/aix-ppc64': 0.25.4
+      '@esbuild/android-arm': 0.25.4
+      '@esbuild/android-arm64': 0.25.4
+      '@esbuild/android-x64': 0.25.4
+      '@esbuild/darwin-arm64': 0.25.4
+      '@esbuild/darwin-x64': 0.25.4
+      '@esbuild/freebsd-arm64': 0.25.4
+      '@esbuild/freebsd-x64': 0.25.4
+      '@esbuild/linux-arm': 0.25.4
+      '@esbuild/linux-arm64': 0.25.4
+      '@esbuild/linux-ia32': 0.25.4
+      '@esbuild/linux-loong64': 0.25.4
+      '@esbuild/linux-mips64el': 0.25.4
+      '@esbuild/linux-ppc64': 0.25.4
+      '@esbuild/linux-riscv64': 0.25.4
+      '@esbuild/linux-s390x': 0.25.4
+      '@esbuild/linux-x64': 0.25.4
+      '@esbuild/netbsd-arm64': 0.25.4
+      '@esbuild/netbsd-x64': 0.25.4
+      '@esbuild/openbsd-arm64': 0.25.4
+      '@esbuild/openbsd-x64': 0.25.4
+      '@esbuild/sunos-x64': 0.25.4
+      '@esbuild/win32-arm64': 0.25.4
+      '@esbuild/win32-ia32': 0.25.4
+      '@esbuild/win32-x64': 0.25.4
+
   escalade@3.2.0: {}
 
   escape-string-regexp@1.0.5: {}
@@ -16731,6 +17381,8 @@ snapshots:
       signal-exit: 3.0.7
       strip-final-newline: 2.0.0
 
+  exit-hook@2.2.1: {}
+
   exit@0.1.2: {}
 
   expand-template@2.0.3: {}
@@ -17859,6 +18511,8 @@ snapshots:
 
   kleur@3.0.3: {}
 
+  kleur@4.1.5: {}
+
   kolorist@1.8.0: {}
 
   kuler@2.0.0: {}
@@ -18048,10 +18702,30 @@ snapshots:
     dependencies:
       mime-db: 1.52.0
 
+  mime@3.0.0: {}
+
   mimic-fn@2.1.0: {}
 
   mimic-response@3.1.0: {}
 
+  miniflare@4.20251109.0:
+    dependencies:
+      '@cspotcode/source-map-support': 0.8.1
+      acorn: 8.14.0
+      acorn-walk: 8.3.2
+      exit-hook: 2.2.1
+      glob-to-regexp: 0.4.1
+      sharp: 0.33.5
+      stoppable: 1.1.0
+      undici: 7.14.0
+      workerd: 1.20251109.0
+      ws: 8.18.0
+      youch: 4.1.0-beta.10
+      zod: 3.22.3
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
   minimatch@3.0.8:
     dependencies:
       brace-expansion: 1.1.11
@@ -18224,7 +18898,7 @@ snapshots:
     dependencies:
       path-key: 3.1.1
 
-  nuqs@2.4.3(next@15.4.6(@babel/core@7.28.3)(react-dom@19.0.0(react@19.0.0))(react@19.0.0))(react@19.0.0):
+  nuqs@2.4.3(next@15.4.6(react-dom@19.0.0(react@19.0.0))(react@19.0.0))(react@19.0.0):
     dependencies:
       mitt: 3.0.1
       react: 19.0.0
@@ -18427,6 +19101,8 @@ snapshots:
       lru-cache: 10.4.3
       minipass: 7.1.2
 
+  path-to-regexp@6.3.0: {}
+
   path-type@4.0.0: {}
 
   pathe@1.1.2: {}
@@ -19239,6 +19915,32 @@ snapshots:
       es-errors: 1.3.0
       es-object-atoms: 1.1.1
 
+  sharp@0.33.5:
+    dependencies:
+      color: 4.2.3
+      detect-libc: 2.0.4
+      semver: 7.7.2
+    optionalDependencies:
+      '@img/sharp-darwin-arm64': 0.33.5
+      '@img/sharp-darwin-x64': 0.33.5
+      '@img/sharp-libvips-darwin-arm64': 1.0.4
+      '@img/sharp-libvips-darwin-x64': 1.0.4
+      '@img/sharp-libvips-linux-arm': 1.0.5
+      '@img/sharp-libvips-linux-arm64': 1.0.4
+      '@img/sharp-libvips-linux-s390x': 1.0.4
+      '@img/sharp-libvips-linux-x64': 1.0.4
+      '@img/sharp-libvips-linuxmusl-arm64': 1.0.4
+      '@img/sharp-libvips-linuxmusl-x64': 1.0.4
+      '@img/sharp-linux-arm': 0.33.5
+      '@img/sharp-linux-arm64': 0.33.5
+      '@img/sharp-linux-s390x': 0.33.5
+      '@img/sharp-linux-x64': 0.33.5
+      '@img/sharp-linuxmusl-arm64': 0.33.5
+      '@img/sharp-linuxmusl-x64': 0.33.5
+      '@img/sharp-wasm32': 0.33.5
+      '@img/sharp-win32-ia32': 0.33.5
+      '@img/sharp-win32-x64': 0.33.5
+
   sharp@0.34.3:
     dependencies:
       color: 4.2.3
@@ -19402,6 +20104,8 @@ snapshots:
       es-errors: 1.3.0
       internal-slot: 1.1.0
 
+  stoppable@1.1.0: {}
+
   string-argv@0.3.2: {}
 
   string-length@4.0.2:
@@ -19524,6 +20228,8 @@ snapshots:
     dependencies:
       copy-anything: 4.0.5
 
+  supports-color@10.2.2: {}
+
   supports-color@5.5.0:
     dependencies:
       has-flag: 3.0.0
@@ -19924,6 +20630,12 @@ snapshots:
   undici-types@7.16.0:
     optional: true
 
+  undici@7.14.0: {}
+
+  unenv@2.0.0-rc.24:
+    dependencies:
+      pathe: 2.0.3
+
   universalify@0.1.2: {}
 
   universalify@2.0.1: {}
@@ -20006,7 +20718,7 @@ snapshots:
 
   v8-to-istanbul@9.3.0:
     dependencies:
-      '@jridgewell/trace-mapping': 0.3.30
+      '@jridgewell/trace-mapping': 0.3.31
       '@types/istanbul-lib-coverage': 2.0.6
       convert-source-map: 2.0.0
 
@@ -20462,6 +21174,30 @@ snapshots:
 
   wordwrap@1.0.0: {}
 
+  workerd@1.20251109.0:
+    optionalDependencies:
+      '@cloudflare/workerd-darwin-64': 1.20251109.0
+      '@cloudflare/workerd-darwin-arm64': 1.20251109.0
+      '@cloudflare/workerd-linux-64': 1.20251109.0
+      '@cloudflare/workerd-linux-arm64': 1.20251109.0
+      '@cloudflare/workerd-windows-64': 1.20251109.0
+
+  wrangler@4.47.0:
+    dependencies:
+      '@cloudflare/kv-asset-handler': 0.4.0
+      '@cloudflare/unenv-preset': 2.7.10(unenv@2.0.0-rc.24)(workerd@1.20251109.0)
+      blake3-wasm: 2.1.5
+      esbuild: 0.25.4
+      miniflare: 4.20251109.0
+      path-to-regexp: 6.3.0
+      unenv: 2.0.0-rc.24
+      workerd: 1.20251109.0
+    optionalDependencies:
+      fsevents: 2.3.3
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
   wrap-ansi@6.2.0:
     dependencies:
       ansi-styles: 4.3.0
@@ -20487,6 +21223,8 @@ snapshots:
       imurmurhash: 0.1.4
       signal-exit: 3.0.7
 
+  ws@8.18.0: {}
+
   y18n@5.0.8: {}
 
   yallist@3.1.1: {}
@@ -20520,6 +21258,19 @@ snapshots:
 
   yoctocolors@2.1.1: {}
 
+  youch-core@0.3.3:
+    dependencies:
+      '@poppinss/exception': 1.2.2
+      error-stack-parser-es: 1.0.5
+
+  youch@4.1.0-beta.10:
+    dependencies:
+      '@poppinss/colors': 4.1.5
+      '@poppinss/dumper': 0.6.5
+      '@speed-highlight/core': 1.2.12
+      cookie: 1.0.2
+      youch-core: 0.3.3
+
   z-schema@5.0.5:
     dependencies:
       lodash.get: 4.4.2
@@ -20528,6 +21279,8 @@ snapshots:
     optionalDependencies:
       commander: 9.5.0
 
+  zod@3.22.3: {}
+
   zod@3.25.76: {}
 
   zod@4.0.17: {}
diff --git a/turbo.json b/turbo.json
index 4ba4a41..cbc0d55 100644
--- a/turbo.json
+++ b/turbo.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://turbo.build/schema.json",
   "ui": "tui",
-  "globalEnv": ["BETTER_AUTH_SECRET","DATABASE_URL","NEXT_PUBLIC_APP_URL","BETTER_AUTH_URL","NODE_ENV","RESEND_API_KEY","GOOGLE_CLIENT_ID","GOOGLE_CLIENT_SECRET","REFERRAL_PROGRAM_CLIENT_ID","REFERRAL_PROGRAM_CLIENT_SECRET","NEXT_PUBLIC_REFREF_PRODUCT_ID","NEXT_PUBLIC_REFREF_PROGRAM_ID"],
+  "globalEnv": ["BETTER_AUTH_SECRET","DATABASE_URL","NEXT_PUBLIC_APP_URL","NEXT_PUBLIC_ASSETS_URL","BETTER_AUTH_URL","NODE_ENV","RESEND_API_KEY","GOOGLE_CLIENT_ID","GOOGLE_CLIENT_SECRET","REFERRAL_PROGRAM_CLIENT_ID","REFERRAL_PROGRAM_CLIENT_SECRET","NEXT_PUBLIC_REFREF_PRODUCT_ID","NEXT_PUBLIC_REFREF_PROGRAM_ID"],
   "tasks": {
     "build": {
       "dependsOn": ["^build"],

From 8370d3caf31469b2de8e376507aec33874887cce Mon Sep 17 00:00:00 2001
From: Naomi Chopra <naomi.chopra.021@gmail.com>
Date: Wed, 12 Nov 2025 18:20:13 -0800
Subject: [PATCH 2/2] feat(assets): migrate to Cloudflare Workers Static Assets
 architecture

- Updated the assets service to utilize the new Cloudflare Workers Static Assets platform, replacing the previous Pages setup.
- Introduced a Worker script (`src/index.ts`) for handling routing, caching, and CORS headers.
- Replaced `wrangler.jsonc` with `wrangler.toml` for configuration, aligning with the new architecture.
- Removed obsolete `_headers` and `_redirects` files, now managed by the Worker.
- Enhanced TypeScript support and added necessary dependencies for the new setup.
- Updated README and migration documentation to reflect changes and provide guidance for deployment and local testing.
---
 apps/assets/MIGRATION.md                   | 140 +++++++++++++++++++++
 apps/assets/README.md                      | 108 +++++++++++++---
 apps/assets/package.json                   |   5 +-
 apps/assets/public/_headers                |  24 ----
 apps/assets/public/_redirects              |  11 --
 apps/assets/scripts/build.ts               |  59 +++++++--
 apps/assets/src/index.ts                   |  80 ++++++++++++
 apps/assets/tsconfig.json                  |   6 +-
 apps/assets/wrangler.jsonc                 |  12 --
 apps/assets/wrangler.toml                  |  14 +++
 apps/webapp/src/app/layout.tsx             |   4 +-
 packages/attribution-script/package.json   |   2 +-
 packages/attribution-script/vite.config.ts |  14 ++-
 packages/widget/package.json               |   2 +-
 packages/widget/vite.config.ts             |  17 ++-
 pnpm-lock.yaml                             |  39 +++---
 16 files changed, 437 insertions(+), 100 deletions(-)
 create mode 100644 apps/assets/MIGRATION.md
 delete mode 100644 apps/assets/public/_headers
 delete mode 100644 apps/assets/public/_redirects
 create mode 100644 apps/assets/src/index.ts
 delete mode 100644 apps/assets/wrangler.jsonc
 create mode 100644 apps/assets/wrangler.toml

diff --git a/apps/assets/MIGRATION.md b/apps/assets/MIGRATION.md
new file mode 100644
index 0000000..b1aec1b
--- /dev/null
+++ b/apps/assets/MIGRATION.md
@@ -0,0 +1,140 @@
+# Migration to Cloudflare Workers Static Assets
+
+## What Changed
+
+Cloudflare has unified Workers and Pages into a single **Workers Static Assets** platform. Our implementation has been updated to use this new architecture.
+
+## Old vs New Architecture
+
+### Before (Incorrect)
+```
+❌ Used wrangler.jsonc (wrong format)
+❌ Had main = "." (invalid)
+❌ Used _headers and _redirects files (Pages-only features)
+❌ No Worker script
+❌ Relied on Pages behavior for routing
+```
+
+### After (Correct)
+```
+✅ Uses wrangler.toml (correct format)
+✅ Has main = "src/index.ts" (Worker script)
+✅ Worker handles all routing and headers
+✅ Uses env.ASSETS binding to fetch static files
+✅ Follows Workers Static Assets best practices
+```
+
+## Key Changes
+
+### 1. Added Worker Script (`src/index.ts`)
+
+The Worker script handles:
+- **Route mappings**: `/scripts/widget.js` → `/widget.v1.js`
+- **Aliases**: `/attribution.latest.js` → `/attribution.v1.js`
+- **Cache headers**: Immutable for versioned, short cache for aliases
+- **CORS**: Automatic CORS headers for all scripts
+
+### 2. Updated Configuration (`wrangler.toml`)
+
+```toml
+# Before
+main = "."                    # ❌ Invalid
+
+# After
+main = "src/index.ts"         # ✅ Points to Worker script
+
+[assets]
+directory = "./public"
+binding = "ASSETS"            # ✅ Required for env.ASSETS.fetch()
+```
+
+### 3. Removed Obsolete Files
+
+- ❌ Deleted `_headers` (now handled in Worker)
+- ❌ Deleted `_redirects` (now handled in Worker)
+- ❌ Removed `wrangler.jsonc` (renamed to `.toml`)
+
+### 4. Added TypeScript Support
+
+```json
+{
+  "types": ["@cloudflare/workers-types"]
+}
+```
+
+## How It Works Now
+
+### Request Flow
+
+1. Request arrives: `https://assets.refref.ai/scripts/attribution.js`
+2. Worker checks route map: Maps to `/attribution.v1.js`
+3. Worker fetches from storage: `env.ASSETS.fetch(request)`
+4. Worker adds headers:
+   - `Cache-Control: public, max-age=3600`
+   - `Access-Control-Allow-Origin: *`
+5. Response sent to client
+
+### Supported URLs
+
+All these work automatically:
+
+```
+✅ /attribution.v1.js          (direct, immutable)
+✅ /widget.v1.js                (direct, immutable)
+✅ /attribution.latest.js       (alias to v1)
+✅ /widget.latest.js            (alias to v1)
+✅ /attribution.js              (alias to v1)
+✅ /widget.js                   (alias to v1)
+✅ /scripts/attribution.js      (backward compatibility)
+✅ /scripts/widget.js           (backward compatibility)
+```
+
+## Benefits of New Architecture
+
+1. **Unified Platform**: No more confusion between Workers and Pages
+2. **Code-based Routing**: Explicit, testable routing logic
+3. **Dynamic Control**: Can add logic, A/B testing, feature flags, etc.
+4. **Better Performance**: Cloudflare's asset storage + Worker caching
+5. **Type Safety**: Full TypeScript support with Workers types
+
+## Deployment
+
+No changes to deployment commands:
+
+```bash
+# Production
+pnpm -F @refref/assets deploy:cloudflare
+
+# Dev/Preview
+pnpm -F @refref/assets deploy:cloudflare:dev
+```
+
+The Worker + assets are deployed together as a single unit.
+
+## Testing Locally
+
+```bash
+# Start local dev server
+pnpm -F @refref/assets preview
+
+# Test routes
+curl http://localhost:8787/attribution.v1.js
+curl http://localhost:8787/scripts/widget.js
+```
+
+## Migration Checklist
+
+- [x] Created Worker script (`src/index.ts`)
+- [x] Updated `wrangler.toml` configuration
+- [x] Removed `_headers` and `_redirects` files
+- [x] Added `@cloudflare/workers-types` dependency
+- [x] Updated TypeScript configuration
+- [x] Updated README documentation
+- [x] Tested build process
+- [x] Ready for deployment
+
+## References
+
+- [Cloudflare Workers Static Assets Docs](https://developers.cloudflare.com/workers/static-assets/)
+- [Wrangler Configuration](https://developers.cloudflare.com/workers/wrangler/configuration/)
+- [Assets Binding](https://developers.cloudflare.com/workers/static-assets/binding/)
diff --git a/apps/assets/README.md b/apps/assets/README.md
index f4d039a..475d8c2 100644
--- a/apps/assets/README.md
+++ b/apps/assets/README.md
@@ -4,7 +4,15 @@ Static assets service for serving RefRef scripts (attribution tracking and refer
 
 ## Overview
 
-This app bundles and prepares RefRef scripts for deployment to Cloudflare Workers/Pages as a static site. Scripts are served with proper caching headers and CORS configuration for optimal performance.
+This app bundles and prepares RefRef scripts for deployment using **Cloudflare Workers Static Assets**. It combines a minimal Worker script with static file hosting to provide custom routing, headers, and caching for optimal performance.
+
+### Architecture
+
+- **Worker Script** (`src/index.ts`): Handles routing, redirects, and custom headers
+- **Static Assets** (`public/`): Versioned JavaScript bundles served from Cloudflare's network
+- **Assets Binding**: Worker fetches files from Cloudflare's asset storage via `env.ASSETS.fetch()`
+
+This is Cloudflare's new unified approach that replaces the separate Pages and Workers platforms.
 
 ## Production vs Development
 
@@ -88,10 +96,18 @@ pnpm -F @refref/assets preview
 # Login to Cloudflare (one-time)
 pnpm -F @refref/assets exec wrangler login
 
+# Select your Cloudflare account when prompted
 # Then deploy
 pnpm -F @refref/assets deploy:cloudflare
 ```
 
+**If you get auth errors:**
+```bash
+# Re-authenticate if token expires
+pnpm -F @refref/assets exec wrangler logout
+pnpm -F @refref/assets exec wrangler login
+```
+
 **Deployment Process:**
 
 The deploy commands automatically:
@@ -103,9 +119,21 @@ The deploy commands automatically:
 
 **After Deployment:**
 
-Your scripts will be available at:
-- Production: `https://refref-assets.workers.dev/attribution.v1.js`
-- Dev: `https://refref-assets-dev.workers.dev/attribution.v1.js`
+Your scripts will be available at your workers.dev URL:
+- Production: `https://refref-assets.<account-name>.workers.dev/attribution.v1.js`
+- Dev: `https://refref-assets-dev.<account-name>.workers.dev/attribution.v1.js`
+
+Example (replace with your account subdomain):
+```
+https://refref-assets.exa-fc4.workers.dev/attribution.v1.js
+https://refref-assets.exa-fc4.workers.dev/widget.v1.js
+```
+
+Test your deployment:
+```bash
+# Check if scripts are accessible
+curl -I https://refref-assets.<your-account>.workers.dev/attribution.v1.js
+```
 
 **Custom Domain Setup:**
 
@@ -196,20 +224,27 @@ jobs:
 2. Add as `CLOUDFLARE_API_TOKEN` in GitHub Secrets
 3. Push changes to trigger deployment
 
-### Cloudflare Configuration Files
+### Configuration Files
 
-- **_headers** - Sets cache control and CORS headers
-  - Versioned files: 1 year immutable cache
-  - Latest aliases: 1 hour cache
+**wrangler.toml** - Wrangler configuration for Workers Assets:
+```toml
+name = "refref-assets"
+main = "src/index.ts"              # Worker script
+compatibility_date = "2024-01-01"
 
-- **_redirects** - URL rewrites for latest aliases
-  - `/attribution.latest.js` → `/attribution.v1.js`
-  - `/widget.latest.js` → `/widget.v1.js`
+[assets]
+directory = "./public"              # Static assets directory
+binding = "ASSETS"                  # Binding name for env.ASSETS
 
-- **wrangler.jsonc** - Wrangler configuration
-  - Worker name: `refref-assets`
-  - Assets directory: `./public`
-  - Dev environment: `refref-assets-dev`
+[env.dev]
+name = "refref-assets-dev"         # Dev environment
+```
+
+**src/index.ts** - Worker script that handles:
+- **Routing**: Redirects aliases (`/attribution.latest.js` → `/attribution.v1.js`)
+- **Backward compatibility**: Maps `/scripts/*` to root files
+- **Cache headers**: Immutable caching for versioned files
+- **CORS**: Allows cross-origin requests for scripts
 
 ## Usage
 
@@ -265,17 +300,41 @@ The refer server reads from package dist files, allowing hot-reloading during de
   - Significant behavior changes
   - Major feature additions
 
+## How It Works
+
+### Request Flow
+
+1. **Request arrives** at Cloudflare Worker
+2. **Worker checks** if path needs rewriting (e.g., `/scripts/widget.js` → `/widget.v1.js`)
+3. **Worker fetches** asset from Cloudflare's asset storage via `env.ASSETS.fetch()`
+4. **Worker adds** custom headers (cache control, CORS)
+5. **Response sent** to client with optimized caching
+
+### Supported Routes
+
+| Request URL | Serves | Cache |
+|-------------|--------|-------|
+| `/attribution.v1.js` | Direct file | 1 year immutable |
+| `/widget.v1.js` | Direct file | 1 year immutable |
+| `/attribution.latest.js` | Redirects to v1 | 1 hour |
+| `/widget.latest.js` | Redirects to v1 | 1 hour |
+| `/attribution.js` | Redirects to v1 | 1 hour |
+| `/widget.js` | Redirects to v1 | 1 hour |
+| `/scripts/attribution.js` | Redirects to v1 | 1 hour |
+| `/scripts/widget.js` | Redirects to v1 | 1 hour |
+
 ## File Structure
 
 ```
 apps/assets/
 ├── public/              # Output directory (deployed to Cloudflare)
-│   ├── _headers        # Cache control & CORS config
-│   ├── _redirects      # URL rewrites
 │   ├── attribution.v1.js   # Generated (gitignored)
 │   └── widget.v1.js        # Generated (gitignored)
+├── src/
+│   └── index.ts         # Worker script (routing, headers)
 ├── scripts/
-│   └── build.ts        # Build script
+│   └── build.ts         # Build script (copies bundles)
+├── wrangler.toml        # Wrangler configuration
 ├── package.json
 ├── tsconfig.json
 └── README.md
@@ -293,12 +352,21 @@ pnpm -F @refref/widget build
 
 ### Wrangler deployment fails
 
-**Authentication Error:**
+**Authentication Error (`Failed to fetch auth token` or `Body is unusable`):**
+
+This happens when the Wrangler auth token expires or is invalid.
+
 ```bash
-# Login to Cloudflare
+# Clear existing auth and re-login
+pnpm -F @refref/assets exec wrangler logout
 pnpm -F @refref/assets exec wrangler login
+
+# Then retry deployment
+pnpm -F @refref/assets deploy:cloudflare
 ```
 
+The login will open your browser for OAuth authentication. Select your account when prompted.
+
 **Build Errors:**
 ```bash
 # Clean and rebuild
diff --git a/apps/assets/package.json b/apps/assets/package.json
index 7af8910..51fcd5e 100644
--- a/apps/assets/package.json
+++ b/apps/assets/package.json
@@ -12,11 +12,12 @@
     "deploy:cloudflare:dev": "pnpm build && wrangler deploy --env dev",
     "preview": "wrangler dev"
   },
-  "dependencies": {},
   "devDependencies": {
+    "@cloudflare/workers-types": "^4.20250115.0",
     "@refref/attribution-script": "workspace:*",
-    "@refref/widget": "workspace:*",
     "@refref/typescript-config": "workspace:*",
+    "@refref/widget": "workspace:*",
+    "@types/node": "^24.9.1",
     "tsx": "^4.7.1",
     "typescript": "^5.9.2",
     "wrangler": "^4.0.0"
diff --git a/apps/assets/public/_headers b/apps/assets/public/_headers
deleted file mode 100644
index 549f11f..0000000
--- a/apps/assets/public/_headers
+++ /dev/null
@@ -1,24 +0,0 @@
-# Cloudflare Pages Headers Configuration
-# https://developers.cloudflare.com/pages/configuration/headers/
-
-# Versioned scripts - immutable, long-lived cache
-/attribution.v*.js
-  Cache-Control: public, max-age=31536000, immutable
-  Access-Control-Allow-Origin: *
-  Content-Type: application/javascript; charset=utf-8
-
-/widget.v*.js
-  Cache-Control: public, max-age=31536000, immutable
-  Access-Control-Allow-Origin: *
-  Content-Type: application/javascript; charset=utf-8
-
-# Latest aliases - short cache, allow CORS
-/attribution.latest.js
-  Cache-Control: public, max-age=3600
-  Access-Control-Allow-Origin: *
-  Content-Type: application/javascript; charset=utf-8
-
-/widget.latest.js
-  Cache-Control: public, max-age=3600
-  Access-Control-Allow-Origin: *
-  Content-Type: application/javascript; charset=utf-8
diff --git a/apps/assets/public/_redirects b/apps/assets/public/_redirects
deleted file mode 100644
index 08b0fbe..0000000
--- a/apps/assets/public/_redirects
+++ /dev/null
@@ -1,11 +0,0 @@
-# Cloudflare Pages Redirects Configuration
-# https://developers.cloudflare.com/pages/configuration/redirects/
-
-# Latest aliases point to current stable version (v1)
-# Using 200 status for rewrite (proxy) instead of 301/302 redirect
-/attribution.latest.js  /attribution.v1.js  200
-/widget.latest.js       /widget.v1.js       200
-
-# Optional: Add convenience aliases without version
-/attribution.js         /attribution.v1.js  200
-/widget.js              /widget.v1.js       200
diff --git a/apps/assets/scripts/build.ts b/apps/assets/scripts/build.ts
index b82455d..202220e 100644
--- a/apps/assets/scripts/build.ts
+++ b/apps/assets/scripts/build.ts
@@ -4,6 +4,7 @@ import { copyFile, mkdir, readFile, stat } from "fs/promises";
 import { join, dirname } from "path";
 import { fileURLToPath } from "url";
 import { createHash } from "crypto";
+import { gzipSync, brotliCompressSync, constants as zlibConstants } from "zlib";
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -38,6 +39,8 @@ interface BuildStats {
   name: string;
   version: string;
   size: number;
+  gzipSize: number;
+  brotliSize: number;
   checksum: string;
   outputPath: string;
 }
@@ -70,14 +73,27 @@ async function copyScript(config: (typeof SCRIPTS)[0]): Promise<BuildStats> {
   // Copy file
   await copyFile(config.sourcePath, outputPath);
 
+  // Read content for compression stats
+  const content = await readFile(outputPath);
+
   // Get stats
   const stats = await stat(outputPath);
   const checksum = await calculateChecksum(outputPath);
 
+  // Calculate compressed sizes (what users actually download)
+  const gzipSize = gzipSync(content, { level: 9 }).length;
+  const brotliSize = brotliCompressSync(content, {
+    params: {
+      [zlibConstants.BROTLI_PARAM_QUALITY]: 11, // Maximum compression
+    },
+  }).length;
+
   return {
     name: config.name,
     version: config.version,
     size: stats.size,
+    gzipSize,
+    brotliSize,
     checksum,
     outputPath,
   };
@@ -101,21 +117,50 @@ async function build() {
     // Print summary
     console.log("\n✅ Build complete!\n");
     console.log("📊 Build Summary:");
-    console.log("─".repeat(60));
+    console.log("─".repeat(90));
+    console.log(
+      "Script".padEnd(20) +
+        "Version".padEnd(10) +
+        "Original".padEnd(15) +
+        "Gzip".padEnd(15) +
+        "Brotli".padEnd(15) +
+        "Hash"
+    );
+    console.log("─".repeat(90));
 
     for (const result of results) {
       const sizeFormatted = await formatBytes(result.size);
+      const gzipFormatted = await formatBytes(result.gzipSize);
+      const brotliFormatted = await formatBytes(result.brotliSize);
+
+      // Calculate compression ratios
+      const gzipRatio = (
+        ((result.size - result.gzipSize) / result.size) *
+        100
+      ).toFixed(1);
+      const brotliRatio = (
+        ((result.size - result.brotliSize) / result.size) *
+        100
+      ).toFixed(1);
+
       console.log(
-        `${result.name.padEnd(20)} ${result.version.padEnd(10)} ${sizeFormatted.padEnd(15)} ${result.checksum}`
+        `${result.name.padEnd(20)}${result.version.padEnd(10)}${sizeFormatted.padEnd(15)}${gzipFormatted.padEnd(15)}${brotliFormatted.padEnd(15)}${result.checksum}`
+      );
+      console.log(
+        `${"".padEnd(40)}(-${gzipRatio}%)${"".padEnd(8)}(-${brotliRatio}%)`
       );
     }
 
-    console.log("─".repeat(60));
-    console.log(`\n📁 Output directory: ${PUBLIC_DIR}`);
+    console.log("─".repeat(90));
+    console.log(
+      "\n💡 Cloudflare serves with Brotli compression automatically"
+    );
+    console.log(`📁 Output directory: ${PUBLIC_DIR}`);
     console.log("\n📝 Next steps:");
-    console.log("   1. Deploy public/ folder to Cloudflare Pages");
-    console.log("   2. Point assets.refref.ai to the deployment");
-    console.log("   3. Update NEXT_PUBLIC_ASSETS_URL in admin portal\n");
+    console.log("   1. Deploy: pnpm -F @refref/assets deploy:cloudflare");
+    console.log("   2. Verify: https://refref-assets.<account>.workers.dev");
+    console.log("   3. Configure custom domain (optional)");
+    console.log("   4. Update NEXT_PUBLIC_ASSETS_URL in webapp\n");
   } catch (error) {
     console.error("❌ Build failed:", error);
     process.exit(1);
diff --git a/apps/assets/src/index.ts b/apps/assets/src/index.ts
new file mode 100644
index 0000000..6d281b2
--- /dev/null
+++ b/apps/assets/src/index.ts
@@ -0,0 +1,80 @@
+/**
+ * RefRef Assets Worker
+ * Serves static assets with custom headers and routing logic
+ */
+
+interface Env {
+  ASSETS: Fetcher;
+}
+
+// Route mappings for aliases and backward compatibility
+const ROUTE_MAP: Record<string, string> = {
+  // Latest aliases
+  "/attribution.latest.js": "/attribution.v1.js",
+  "/widget.latest.js": "/widget.v1.js",
+
+  // Convenience aliases without version
+  "/attribution.js": "/attribution.v1.js",
+  "/widget.js": "/widget.v1.js",
+
+  // Backward compatibility with refer server paths
+  "/scripts/attribution.js": "/attribution.v1.js",
+  "/scripts/widget.js": "/widget.v1.js",
+};
+
+// Cache headers based on file pattern
+function getCacheHeaders(pathname: string): Record<string, string> {
+  // Versioned files: immutable, 1 year cache
+  if (pathname.match(/\.(v\d+)\.js$/)) {
+    return {
+      "Cache-Control": "public, max-age=31536000, immutable",
+    };
+  }
+
+  // Latest aliases: short cache
+  if (pathname.includes(".latest.")) {
+    return {
+      "Cache-Control": "public, max-age=3600",
+    };
+  }
+
+  // Default: no cache for other files
+  return {
+    "Cache-Control": "public, max-age=3600",
+  };
+}
+
+export default {
+  async fetch(request: Request, env: Env): Promise<Response> {
+    const url = new URL(request.url);
+    const pathname = url.pathname;
+
+    // Check if this path needs to be rewritten
+    const targetPath = ROUTE_MAP[pathname];
+    if (targetPath) {
+      // Rewrite the URL to the target path
+      url.pathname = targetPath;
+      request = new Request(url, request);
+    }
+
+    // Fetch the asset from Cloudflare's asset storage
+    const response = await env.ASSETS.fetch(request);
+
+    // Clone response to modify headers
+    const newResponse = new Response(response.body, response);
+
+    // Add custom headers based on file type
+    const cacheHeaders = getCacheHeaders(url.pathname);
+    Object.entries(cacheHeaders).forEach(([key, value]) => {
+      newResponse.headers.set(key, value);
+    });
+
+    // Always set CORS headers for scripts
+    if (url.pathname.endsWith(".js")) {
+      newResponse.headers.set("Access-Control-Allow-Origin", "*");
+      newResponse.headers.set("Content-Type", "application/javascript; charset=utf-8");
+    }
+
+    return newResponse;
+  },
+};
diff --git a/apps/assets/tsconfig.json b/apps/assets/tsconfig.json
index ee2d244..824a1ef 100644
--- a/apps/assets/tsconfig.json
+++ b/apps/assets/tsconfig.json
@@ -2,12 +2,12 @@
   "extends": "@refref/typescript-config/base.json",
   "compilerOptions": {
     "outDir": "./dist",
-    "rootDir": "./scripts",
     "module": "ESNext",
     "moduleResolution": "bundler",
     "target": "ES2022",
-    "lib": ["ES2022"]
+    "lib": ["ES2022"],
+    "types": ["node", "@cloudflare/workers-types"]
   },
-  "include": ["scripts/**/*"],
+  "include": ["src/**/*", "scripts/**/*"],
   "exclude": ["node_modules", "dist", "public"]
 }
diff --git a/apps/assets/wrangler.jsonc b/apps/assets/wrangler.jsonc
deleted file mode 100644
index 50edbb0..0000000
--- a/apps/assets/wrangler.jsonc
+++ /dev/null
@@ -1,12 +0,0 @@
-{
-	"name": "refref-assets",
-	"compatibility_date": "2025-06-20",
-	"assets": {
-		"directory": "./public"
-	},
-	"env": {
-		"dev": {
-			"name": "refref-assets-dev"
-		}
-	}
-}
\ No newline at end of file
diff --git a/apps/assets/wrangler.toml b/apps/assets/wrangler.toml
new file mode 100644
index 0000000..c12425b
--- /dev/null
+++ b/apps/assets/wrangler.toml
@@ -0,0 +1,14 @@
+# Wrangler configuration for RefRef Assets
+# https://developers.cloudflare.com/workers/wrangler/configuration/
+
+name = "refref-assets"
+main = "src/index.ts"
+compatibility_date = "2024-01-01"
+
+[assets]
+directory = "./public"
+binding = "ASSETS"
+
+# Dev/Preview environment
+[env.dev]
+name = "refref-assets-dev"
diff --git a/apps/webapp/src/app/layout.tsx b/apps/webapp/src/app/layout.tsx
index dffd391..f32a75d 100644
--- a/apps/webapp/src/app/layout.tsx
+++ b/apps/webapp/src/app/layout.tsx
@@ -32,7 +32,7 @@ export default function RootLayout({
         <Script
           suppressHydrationWarning
           type="module"
-          src={`${env.NEXT_PUBLIC_ASSETS_URL}/scripts/attribution.js`}
+          src={`${env.NEXT_PUBLIC_ASSETS_URL}/attribution.v1.js`}
           strategy="beforeInteractive"
         />
         <Script
@@ -47,7 +47,7 @@ export default function RootLayout({
         <Script
           suppressHydrationWarning
           type="module"
-          src={`${env.NEXT_PUBLIC_ASSETS_URL}/scripts/widget.js`}
+          src={`${env.NEXT_PUBLIC_ASSETS_URL}/widget.v1.js`}
           strategy="afterInteractive"
           defer
         />
diff --git a/packages/attribution-script/package.json b/packages/attribution-script/package.json
index 1f42980..b244874 100644
--- a/packages/attribution-script/package.json
+++ b/packages/attribution-script/package.json
@@ -19,7 +19,7 @@
   ],
   "scripts": {
     "dev": "vite",
-    "build": "vite build",
+    "build": "vite build --mode production",
     "clean": "rm -rf dist src/**/*.js src/**/*.js.map",
     "lint": "eslint . --report-unused-disable-directives",
     "test": "jest --passWithNoTests",
diff --git a/packages/attribution-script/vite.config.ts b/packages/attribution-script/vite.config.ts
index da92629..b483b94 100644
--- a/packages/attribution-script/vite.config.ts
+++ b/packages/attribution-script/vite.config.ts
@@ -26,10 +26,22 @@ export default defineConfig(({ mode }) => ({
       fileName: (format) => `attribution-script.${format}.js`,
       formats: ["es", "umd"],
     },
-    minify: mode === "production",
+    minify: mode === "production" ? "esbuild" : false,
     cssCodeSplit: false,
     sourcemap: mode !== "production",
     outDir: "dist",
     emptyOutDir: true,
+    rollupOptions: {
+      output: {
+        compact: true,
+        generatedCode: {
+          constBindings: true,
+        },
+      },
+      treeshake: {
+        preset: "recommended",
+        moduleSideEffects: false,
+      },
+    },
   },
 }));
diff --git a/packages/widget/package.json b/packages/widget/package.json
index 69bfebb..198fe73 100644
--- a/packages/widget/package.json
+++ b/packages/widget/package.json
@@ -19,7 +19,7 @@
   ],
   "scripts": {
     "dev": "vite",
-    "build": "tsc && vite build",
+    "build": "tsc && vite build --mode production",
     "build:widget": "tsc && vite build --out-dir dist/widget --mode development",
     "build:widget:production": "tsc && vite build --out-dir dist/widget --mode production",
     "lint": "eslint . --report-unused-disable-directives",
diff --git a/packages/widget/vite.config.ts b/packages/widget/vite.config.ts
index 8129ea3..a53c667 100644
--- a/packages/widget/vite.config.ts
+++ b/packages/widget/vite.config.ts
@@ -2,7 +2,6 @@ import { defineConfig } from "vite";
 import tailwindcss from "@tailwindcss/vite";
 import react from "@vitejs/plugin-react";
 import path from "path";
-import cssInjectedByJsPlugin from "vite-plugin-css-injected-by-js";
 import dts from "vite-plugin-dts";
 
 // https://vite.dev/config/
@@ -38,10 +37,24 @@ export default defineConfig(({ mode }) => ({
       fileName: (format) => `widget.${format}.js`,
       formats: ["es", "umd"],
     },
-    minify: mode === "production",
+    minify: mode === "production" ? "esbuild" : false,
     cssCodeSplit: false,
     sourcemap: mode !== "production",
     outDir: "dist",
     emptyOutDir: true,
+    rollupOptions: {
+      output: {
+        // Aggressive minification options
+        compact: true,
+        // Tree-shaking and dead code elimination
+        generatedCode: {
+          constBindings: true,
+        },
+      },
+      treeshake: {
+        preset: "recommended",
+        moduleSideEffects: false,
+      },
+    },
   },
 }));
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 3d6c640..ebc87b5 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -49,7 +49,7 @@ importers:
         version: 17.2.3
       drizzle-orm:
         specifier: ^0.33.0
-        version: 0.33.0(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
+        version: 0.33.0(@cloudflare/workers-types@4.20251111.0)(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
       fastify:
         specifier: ^5.2.0
         version: 5.6.2
@@ -90,6 +90,9 @@ importers:
 
   apps/assets:
     devDependencies:
+      '@cloudflare/workers-types':
+        specifier: ^4.20250115.0
+        version: 4.20251111.0
       '@refref/attribution-script':
         specifier: workspace:*
         version: link:../../packages/attribution-script
@@ -99,6 +102,9 @@ importers:
       '@refref/widget':
         specifier: workspace:*
         version: link:../../packages/widget
+      '@types/node':
+        specifier: ^24.9.1
+        version: 24.9.1
       tsx:
         specifier: ^4.7.1
         version: 4.19.3
@@ -107,7 +113,7 @@ importers:
         version: 5.9.2
       wrangler:
         specifier: ^4.0.0
-        version: 4.47.0
+        version: 4.47.0(@cloudflare/workers-types@4.20251111.0)
 
   apps/refer:
     dependencies:
@@ -134,7 +140,7 @@ importers:
         version: 17.2.3
       drizzle-orm:
         specifier: ^0.33.0
-        version: 0.33.0(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
+        version: 0.33.0(@cloudflare/workers-types@4.20251111.0)(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
       fastify:
         specifier: ^5.2.0
         version: 5.6.2
@@ -321,7 +327,7 @@ importers:
         version: 4.1.0
       drizzle-orm:
         specifier: ^0.33.0
-        version: 0.33.0(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
+        version: 0.33.0(@cloudflare/workers-types@4.20251111.0)(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
       embla-carousel-react:
         specifier: ^8.5.2
         version: 8.6.0(react@19.0.0)
@@ -409,7 +415,7 @@ importers:
     devDependencies:
       '@better-auth/cli':
         specifier: ^1.3.5
-        version: 1.3.7(@types/react@19.1.10)(kysely@0.28.8)(postgres@3.4.7)(react-dom@19.0.0(react@19.0.0))(react@19.0.0)(zod@4.0.17)
+        version: 1.3.7(@cloudflare/workers-types@4.20251111.0)(@types/react@19.1.10)(kysely@0.28.8)(postgres@3.4.7)(react-dom@19.0.0(react@19.0.0))(react@19.0.0)(zod@4.0.17)
       '@refref/attribution-script':
         specifier: workspace:*
         version: link:../../packages/attribution-script
@@ -514,7 +520,7 @@ importers:
         version: link:../types
       drizzle-orm:
         specifier: ^0.33.0
-        version: 0.33.0(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
+        version: 0.33.0(@cloudflare/workers-types@4.20251111.0)(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
       postgres:
         specifier: ^3.4.5
         version: 3.4.7
@@ -1268,6 +1274,9 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@cloudflare/workers-types@4.20251111.0':
+    resolution: {integrity: sha512-C8BgQRJlnxcUGycNr8pSKs7WBDQwc43p3pnuGv+Lc0KR2y6raR/9Rs7/lPqQ086ECYSiNqU6IPcbeszKbg4LXA==}
+
   '@colors/colors@1.6.0':
     resolution: {integrity: sha512-Ir+AOibqzrIsL6ajt3Rz3LskB7OiMVHqltZmspbW/TJuTVuyOMirVqAkjfY6JISiLHgyNqicAC8AyHHGzNd/dA==}
     engines: {node: '>=0.1.90'}
@@ -10708,7 +10717,7 @@ snapshots:
 
   '@bcoe/v8-coverage@0.2.3': {}
 
-  '@better-auth/cli@1.3.7(@types/react@19.1.10)(kysely@0.28.8)(postgres@3.4.7)(react-dom@19.0.0(react@19.0.0))(react@19.0.0)(zod@4.0.17)':
+  '@better-auth/cli@1.3.7(@cloudflare/workers-types@4.20251111.0)(@types/react@19.1.10)(kysely@0.28.8)(postgres@3.4.7)(react-dom@19.0.0(react@19.0.0))(react@19.0.0)(zod@4.0.17)':
     dependencies:
       '@babel/core': 7.28.3
       '@babel/preset-react': 7.27.1(@babel/core@7.28.3)
@@ -10724,7 +10733,7 @@ snapshots:
       chalk: 5.6.0
       commander: 12.1.0
       dotenv: 16.4.7
-      drizzle-orm: 0.33.0(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
+      drizzle-orm: 0.33.0(@cloudflare/workers-types@4.20251111.0)(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0)
       fs-extra: 11.3.1
       get-tsconfig: 4.10.0
       prettier: 3.6.2
@@ -10843,6 +10852,8 @@ snapshots:
   '@cloudflare/workerd-windows-64@1.20251109.0':
     optional: true
 
+  '@cloudflare/workers-types@4.20251111.0': {}
+
   '@colors/colors@1.6.0': {}
 
   '@cspotcode/source-map-support@0.8.1':
@@ -15408,7 +15419,6 @@ snapshots:
   '@types/node@24.9.1':
     dependencies:
       undici-types: 7.16.0
-    optional: true
 
   '@types/prompts@2.4.9':
     dependencies:
@@ -16749,8 +16759,9 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  drizzle-orm@0.33.0(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0):
+  drizzle-orm@0.33.0(@cloudflare/workers-types@4.20251111.0)(@prisma/client@5.22.0(prisma@5.22.0))(@types/better-sqlite3@7.6.13)(@types/react@19.1.10)(better-sqlite3@11.10.0)(kysely@0.28.8)(postgres@3.4.7)(prisma@5.22.0)(react@19.0.0):
     optionalDependencies:
+      '@cloudflare/workers-types': 4.20251111.0
       '@prisma/client': 5.22.0(prisma@5.22.0)
       '@types/better-sqlite3': 7.6.13
       '@types/react': 19.1.10
@@ -18416,7 +18427,7 @@ snapshots:
 
   jest-worker@27.5.1:
     dependencies:
-      '@types/node': 22.19.0
+      '@types/node': 24.9.1
       merge-stream: 2.0.0
       supports-color: 8.1.1
 
@@ -20627,8 +20638,7 @@ snapshots:
 
   undici-types@7.10.0: {}
 
-  undici-types@7.16.0:
-    optional: true
+  undici-types@7.16.0: {}
 
   undici@7.14.0: {}
 
@@ -21182,7 +21192,7 @@ snapshots:
       '@cloudflare/workerd-linux-arm64': 1.20251109.0
       '@cloudflare/workerd-windows-64': 1.20251109.0
 
-  wrangler@4.47.0:
+  wrangler@4.47.0(@cloudflare/workers-types@4.20251111.0):
     dependencies:
       '@cloudflare/kv-asset-handler': 0.4.0
       '@cloudflare/unenv-preset': 2.7.10(unenv@2.0.0-rc.24)(workerd@1.20251109.0)
@@ -21193,6 +21203,7 @@ snapshots:
       unenv: 2.0.0-rc.24
       workerd: 1.20251109.0
     optionalDependencies:
+      '@cloudflare/workers-types': 4.20251111.0
       fsevents: 2.3.3
     transitivePeerDependencies:
       - bufferutil