diff --git a/.github/workflows/playwright-tests.yml b/.github/workflows/playwright-tests.yml
index b78a968..6159564 100644
--- a/.github/workflows/playwright-tests.yml
+++ b/.github/workflows/playwright-tests.yml
@@ -36,32 +36,12 @@ jobs:
             - name: Install Playwright
               run: npx playwright install chromium
 
-            - name: Start WordPress Playground
-              run: |
-                  npx @wp-playground/cli server \
-                    --blueprint=blueprint.json \
-                    --php=${{ matrix.php }} \
-                    --wp=${{ matrix.wp }} \
-                    --port=9400 \
-                    --auto-mount &
-                  echo "PLAYGROUND_PID=$!" >> $GITHUB_ENV
-              env:
-                  CI: true
-
-            - name: Wait for WordPress Playground to be ready
-              run: |
-                  timeout 60 bash -c 'until curl -sSf http://127.0.0.1:9400 > /dev/null 2>&1; do sleep 2; done' || echo "WordPress Playground may not be fully ready"
-                  sleep 5
-
-            - name: Debug - Check WordPress Playground status
-              run: |
-                  curl -I http://127.0.0.1:9400 || echo "WordPress Playground not responding"
-
             - name: Run E2E tests
               run: npm run test:e2e
               env:
-                  WP_BASE_URL: http://127.0.0.1:9400
                   CI: true
+                  PLAYGROUND_PHP: ${{ matrix.php }}
+                  PLAYGROUND_WP: ${{ matrix.wp }}
 
             - name: Upload test results
               if: always()
@@ -79,13 +59,6 @@ jobs:
                   path: playwright-report/
                   retention-days: 7
 
-            - name: Stop WordPress Playground
-              if: always()
-              run: |
-                  if [ ! -z "$PLAYGROUND_PID" ]; then
-                    kill $PLAYGROUND_PID || true
-                  fi
-
             - name: Comment test results on PR
               if: github.event_name == 'pull_request' && always()
               uses: daun/playwright-report-summary@v3
diff --git a/CLAUDE.md b/CLAUDE.md
index 0863184..4fcdaff 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -7,7 +7,7 @@ WordPress block plugin that embeds HubSpot Forms v4 directly in page content. Th
 Single block (`hubspot/form`) that:
 - Accepts Portal ID, region, Form ID, redirect URL, submit button text, GTM event name
 - Supports optional inner blocks as a success message shown in place of the form after submission
-- Emits a `<template>` element server-side containing the inner-block HTML; clones it on submission success via `view.js`
+- Serves that success/gated content from a REST endpoint (`/hubspot-form-block/v1/unlock`) only after submission — the content is never embedded in the page. With a HubSpot private app token configured, the submission is verified server-side against HubSpot before the content is released.
 
 ## Architecture
 
@@ -16,26 +16,29 @@ src/                    # Source (compiled by @wordpress/scripts → build/)
 ├── block.json          # Block registration, attributes, supports
 ├── index.js            # Block registration entry
 ├── edit.js             # Block editor UI (InspectorControls + inner blocks)
-├── save.js             # Saves inner block content (used by render.php)
-├── view.js             # Frontend JS: form events, success message clone, GTM
-├── render.php          # Server render callback — outputs form container + <template>
+├── save.js             # Saves inner block content (re-rendered by the unlock endpoint)
+├── view.js             # Frontend JS: form events, success-message fetch/inject, GTM
+├── render.php          # Server render callback — outputs form container + config (no message HTML)
 ├── editor.scss         # Editor-only styles
 └── style.scss          # Frontend + editor styles
+inc/
+└── inline-message.php  # Unlock REST endpoint, block locating, submission verification, HMAC tokens
 hubspot-form-block.php  # Plugin entry: registers block, enqueues HubSpot loader script
 ```
 
 ### Key patterns
 
-**Config injection (`render.php`):** Each form instance gets a unique `target` ID (`hubspot-form-{formId}-{n}`). A `<script>` block writes `window.hsForms[target] = {...config}` so `view.js` can pick it up when HubSpot fires `hs-form-event:on-ready`.
+**Config injection (`render.php`):** Each form instance gets a unique `target` ID (`hubspot-form-{formId}-{n}`). A `<script>` block writes `window.hsForms[target] = {...config}` so `view.js` can pick it up when HubSpot fires `hs-form-event:on-ready`. When inner blocks are present, the config also carries `gated`, `postId`, `formId`, `instance`, `restUrl`, and `pendingMessage`.
 
-**Success message (`render.php` → `view.js`):**
-When inner blocks are present and no `redirectUrl` is set, `render.php` emits:
-```html
-<template id="{target}-inline-message">...inner block HTML...</template>
-```
-On `hs-form-event:on-submission:success`, `view.js` finds the template by ID and clones its content into the form container, replacing the form with the success message. No sanitization needed — content is server-rendered WordPress block output.
+**Success message (server-fetched):**
+The inner-block HTML is **never** emitted into the page. On `hs-form-event:on-submission:success`, `view.js` POSTs to `POST /wp-json/hubspot-form-block/v1/unlock`. The handler (`inc/inline-message.php`):
+1. Validates the post is published/publicly viewable.
+2. `locate_form_block()` — re-parses the post, walks blocks in document order (expanding `core/block` synced patterns), and matches the Nth `hubspot/form` instance for the form ID (mirrors render.php's per-formId counter). This makes the content **per-page and per-instance**.
+3. Verifies the submission (see below), then `get_inline_message_html()` renders the located block's inner blocks and returns the HTML, which `view.js` injects. While unverified the endpoint returns `202` and the client polls with backoff; on failure it shows `pendingMessage`.
+
+**Submission verification (strong vs best-effort):** `get_private_token()` resolves a HubSpot private app token from the `HUBSPOT_FORMS_PRIVATE_TOKEN` constant → `hubspot_form_block_private_token` filter → `hubspot_embed_private_app_token` option (never exposed via REST). When present (**strong mode**), `verify_hubspot_submission()` calls `https://api.hubapi.com/form-integrations/v1/submissions/forms/{formId}` (host is region-agnostic) and requires a recent submission matching the page URL and email — the conversionId is *not* in that API response, so matching is heuristic. The submissions list is transient-cached and the endpoint is per-IP rate-limited. Without a token (**best-effort mode**) content is returned directly.
 
-**`WP_HTML_Tag_Processor` usage (`render.php`):** Used to rewrite the outer class on the inner-block wrapper div from `wp-block-hubspot-form` → `wp-block-hubspot-form__inline-message` before placing it in the template.
+**Repeat visits / `persistSuccess`:** On first unlock the server mints an HMAC `unlockToken` (`mint_unlock_token()`, signed with `wp_salt()`); `view.js` stores `{ path, token }` in `localStorage` keyed `hs-form-submitted:{formId}`. On return visits a slim inline `<script>` in render.php hides the form (no content exposed) and `view.js` replays the token, which `verify_unlock_token()` validates with no HubSpot call. `.is-hubspot-form-first-submission` blocks are stripped client-side on repeat visits only.
 
 ## Dev workflow
 
@@ -66,5 +69,6 @@ The `--webpack-copy-php` flag on `build`/`start` is required — it copies `rend
 
 - The HubSpot form renders **inline, not in an iframe** — it injects DOM directly into `<div id="{target}">`. Allow time for `hs-form-event:on-ready` before asserting form elements exist.
 - `--webpack-copy-php` is required in `build`/`start` scripts so `render.php` is included in `build/`. Do not remove it.
-- Block attributes are in `src/block.json`. The `inlineMessage` attribute in `block.json` is legacy (kept for backward-compat migration) — the live success-message mechanism now uses the `<template>` approach, not the `inlineMessage` string.
+- Block attributes are in `src/block.json`. The `inlineMessage` attribute in `block.json` is legacy (kept for backward-compat migration) — the live success-message mechanism now fetches inner-block content from the unlock REST endpoint, not the `inlineMessage` string or the old `<template>`.
+- Strong-mode verification can't be exercised in Playground (no HubSpot token, no outbound HTTP). The default E2E suite covers best-effort mode against the real endpoint and mocks the endpoint (`mockUnlockEndpoint` in `tests/helpers.js`) for polling/repeat-visit cases. To test strong mode, set the `hubspot_form_block_private_token` filter and short-circuit the HubSpot call via `pre_http_request`.
 - `build/` is committed on the `release` branch (via GitHub Actions) but gitignored on `main`.
diff --git a/README.md b/README.md
index 4545e59..34c4ba1 100644
--- a/README.md
+++ b/README.md
@@ -5,8 +5,8 @@ A WordPress block plugin that embeds HubSpot Forms v4 directly in page content.
 ## Features
 
 - **HubSpot Forms v4 API** — uses the modern developer embed API
-- **Inline success message** — add any WordPress blocks as the post-submission message; shown in place of the form after submission
-- **Gated content** — optionally remember submissions in the browser (per page URL) and show the success content immediately on return visits, hiding the form permanently; supports a "First Submission Message" block for content only shown at the moment of first submission
+- **Inline success message** — add any WordPress blocks as the post-submission message; shown in place of the form after submission. The content is never embedded in the page — it is fetched from a REST endpoint only after submitting, so it can't be read from the page source.
+- **Gated content** — the success content is served only after a submission. With a HubSpot private app token configured, the submission is verified server-side against HubSpot before the content is released (see [Gated content security](#gated-content-security)). Supports a "First Submission Message" block for content only shown at the moment of first submission, and remembers returning visitors per page URL.
 - **Global settings** — set Portal ID and region site-wide; override per block instance
 - **Google Tag Manager** — fires a configurable dataLayer event on submission (default: `hubspot_form_submit`)
 - **Deferred script loading** — HubSpot tracking JS loaded asynchronously in the footer
@@ -24,8 +24,8 @@ A WordPress block plugin that embeds HubSpot Forms v4 directly in page content.
 | Redirect URL | Redirect to this URL after submission. Overrides the inline message if set. |
 | Submit button text | Override the form's submit button label. |
 | GTM event name | dataLayer event name pushed on submission. Defaults to `hubspot_form_submit`. |
-| Success message (inner blocks) | WordPress blocks shown in place of the form after successful submission. Not shown if a redirect URL is set. |
-| Enable gated content | When on, the browser remembers that this form has been submitted on this page (stored in `localStorage`). Returning visitors see the success message immediately instead of the form. Use the "Insert First Submission Message" button to add a block whose content is only shown at the moment of the first submission — stripped on subsequent visits. Disabled when a redirect URL is set. |
+| Success message (inner blocks) | WordPress blocks shown in place of the form after successful submission. Fetched from the server after submitting (never embedded in the page). Not shown if a redirect URL is set. |
+| Enable gated content | When on, the success content is treated as gated: it is fetched only after a submission and, returning visitors are remembered per page URL (an unlock token stored in `localStorage`) so they see it again without re-submitting. Use the "Insert First Submission Message" button to add a block whose content is only shown at the moment of the first submission — stripped on subsequent visits. Disabled when a redirect URL is set. |
 
 ## Global settings
 
@@ -68,18 +68,45 @@ src/
 ├── index.js            # Block registration entry
 ├── edit.js             # Block editor UI (InspectorControls + inner blocks)
 ├── save.js             # Saves inner block content
-├── view.js             # Frontend JS: form events, success message, GTM
-├── render.php          # Server render: form container + <template> for success message
+├── view.js             # Frontend JS: form events, success-message fetch/inject, GTM
+├── render.php          # Server render: form container + config (no success-message HTML)
 ├── editor.scss         # Editor-only styles
 └── style.scss          # Frontend + editor styles
+inc/
+└── inline-message.php  # Unlock REST endpoint, block locating, submission verification
 hubspot-form-block.php  # Plugin entry: block registration, script enqueue, settings API
 ```
 
-**Config injection:** Each form instance gets a unique target ID (`hubspot-form-{formId}-{n}`). A `<script>` block writes `window.hsForms[target] = {...config}` so `view.js` can pick it up when HubSpot fires `hs-form-event:on-ready`.
+**Config injection:** Each form instance gets a unique target ID (`hubspot-form-{formId}-{n}`). A `<script>` block writes `window.hsForms[target] = {...config}` so `view.js` can pick it up when HubSpot fires `hs-form-event:on-ready`. When inner blocks are present the config also carries `gated`, `postId`, `formId`, `instance`, `restUrl` and `pendingMessage`.
 
-**Success message:** When inner blocks are present and no redirect URL is set, `render.php` emits a `<template id="{target}-inline-message">` containing the server-rendered block HTML. On `hs-form-event:on-submission:success`, `view.js` clones the template content into the form container, replacing the form with the success message.
+**Success message:** The inner-block HTML is never emitted into the page. On `hs-form-event:on-submission:success`, `view.js` POSTs to `POST /wp-json/hubspot-form-block/v1/unlock` with `postId`, `formId`, `instance` and the submitted email. The endpoint re-parses *that specific post*, locates *that specific form instance* (so the same form ID on different pages returns different content), renders its inner blocks, and returns the HTML, which `view.js` injects into the form container. While verification is in progress the endpoint replies `202` and the client retries with backoff; on repeated failure the `pendingMessage` is shown.
 
-**Gated content (`persistSuccess`):** When enabled, `view.js` writes the current `window.location.pathname` into a `localStorage` entry keyed `hs-form-submitted:{formId}` (value is a JSON array of paths, so the same form on different URLs is tracked independently). A synchronous inline `<script>` emitted by `render.php` checks this array on page load and pre-swaps the container before paint if the current path is present, preventing HubSpot from rendering the form at all. Any inner `core/group` block with class `is-hubspot-form-first-submission` (the "First Submission Message" variation) is stripped from the clone during pre-swap but preserved for the fresh-submission path.
+**Gated content (`persistSuccess`):** On first successful unlock the server mints a signed, expiring unlock token and returns it; `view.js` stores `{ path, token }` in a `localStorage` entry keyed `hs-form-submitted:{formId}`. On return visits a small inline `<script>` from `render.php` hides the form (no content is exposed) and `view.js` replays the token to the endpoint, which validates the HMAC and returns the content without contacting HubSpot. Any inner `core/group` block with class `is-hubspot-form-first-submission` (the "First Submission Message" variation) is stripped from the returned HTML on repeat visits but preserved for the fresh-submission path.
+
+## Gated content security
+
+Because HubSpot forms submit client-side, the plugin supports two modes for releasing gated content, selected automatically:
+
+- **Strong mode (recommended)** — when a HubSpot private app access token is configured, the unlock endpoint verifies that a matching, recent submission actually exists in HubSpot (matched by page URL, recency and the submitted email) before returning any content. Content cannot be obtained without genuinely completing the form.
+- **Best-effort mode (default, no token)** — the content is still kept out of the page and served from the endpoint, which defeats casual View-Source scraping and bots, but is not a hard guarantee against a determined client that knows the post/form identifiers.
+
+### Configuring the private app token (strong mode)
+
+1. In HubSpot, go to **Settings → Integrations → Private Apps → Create a private app**.
+2. Under **Scopes**, grant the **Forms** (read) scope.
+3. Create the app and copy the **access token**.
+4. Add it to `wp-config.php`:
+
+   ```php
+   define( 'HUBSPOT_FORMS_PRIVATE_TOKEN', 'pat-xxxxxxxx-...' );
+   ```
+
+   Alternatively, return it from the `hubspot_form_block_private_token` filter. The token is never exposed via the REST API.
+
+Notes:
+
+- The HubSpot API host is always `api.hubapi.com` regardless of the `eu1`/`na1` region setting (region only affects the JS embed hosts).
+- Forms placed in block-based theme template parts (outside the post content) can't be located by the unlock endpoint.
 
 ## Release workflow
 
diff --git a/hubspot-form-block.php b/hubspot-form-block.php
index 72b83ee..e72ee78 100644
--- a/hubspot-form-block.php
+++ b/hubspot-form-block.php
@@ -16,6 +16,8 @@
 
 namespace HM\HubspotFormBlock;
 
+require_once __DIR__ . '/inc/inline-message.php';
+
 /**
  * Registers the block using the metadata loaded from the `block.json` file.
  * Behind the scenes, it registers also all assets so they can be enqueued
@@ -110,6 +112,18 @@ function rest_api() {
 			'show_in_rest' => true,
 		]
 	);
+	// HubSpot private app access token used to verify form submissions before
+	// releasing gated content. Intentionally NOT exposed via the REST API.
+	// Prefer defining the HUBSPOT_FORMS_PRIVATE_TOKEN constant in wp-config.php.
+	register_setting(
+		'hubspot_embed',
+		'hubspot_embed_private_app_token',
+		[
+			'type' => 'string',
+			'sanitize_callback' => 'sanitize_text_field',
+			'show_in_rest' => false,
+		]
+	);
 }
 
 add_action( 'rest_api_init', __NAMESPACE__ . '\\rest_api' );
diff --git a/inc/inline-message.php b/inc/inline-message.php
new file mode 100644
index 0000000..e6b9a34
--- /dev/null
+++ b/inc/inline-message.php
@@ -0,0 +1,518 @@
+<?php
+/**
+ * Server-side gated content: locating form block instances, rendering their
+ * inner-block ("inline message") content on demand, and verifying that a
+ * HubSpot submission actually happened before releasing that content.
+ *
+ * The inner-block content is never emitted into the page. It is fetched from
+ * the REST endpoint registered here, which only returns it once a submission
+ * has been verified (strong mode, when a private app token is configured) or
+ * unconditionally (best-effort mode, no token).
+ *
+ * @package hubspot-form-block
+ */
+
+namespace HM\HubspotFormBlock;
+
+/**
+ * Resolve the HubSpot private app access token, if any.
+ *
+ * Read order: constant -> filter -> option (option intentionally NOT exposed
+ * via the REST API). When this returns a non-empty string, the unlock endpoint
+ * runs in "strong" mode and verifies submissions against HubSpot.
+ *
+ * @return string The token, or an empty string when none is configured.
+ */
+function get_private_token() : string {
+	$token = '';
+
+	if ( defined( 'HUBSPOT_FORMS_PRIVATE_TOKEN' ) && HUBSPOT_FORMS_PRIVATE_TOKEN ) {
+		$token = (string) HUBSPOT_FORMS_PRIVATE_TOKEN;
+	}
+
+	/**
+	 * Filter the HubSpot private app access token used to verify submissions.
+	 *
+	 * @param string $token The token resolved from the constant (may be empty).
+	 */
+	$token = (string) apply_filters( 'hubspot_form_block_private_token', $token );
+
+	if ( '' === $token ) {
+		$token = (string) get_option( 'hubspot_embed_private_app_token', '' );
+	}
+
+	return trim( $token );
+}
+
+/**
+ * Whether a parsed hubspot/form block has real inline-message inner content.
+ *
+ * Mirrors the predicate render.php uses to decide whether to treat inner
+ * blocks as a success message (ignoring an empty default paragraph).
+ *
+ * @param array $node Parsed block node.
+ * @return bool
+ */
+function block_has_inline_message( array $node ) : bool {
+	if ( ! empty( $node['attrs']['redirectUrl'] ) ) {
+		return false;
+	}
+	if ( empty( $node['innerBlocks'] ) ) {
+		return false;
+	}
+	$first = $node['innerBlocks'][0]['innerHTML'] ?? '';
+	return trim( $first ) !== '<p></p>';
+}
+
+/**
+ * Render the inline-message HTML for a set of inner blocks.
+ *
+ * Produces the same wrapper class render.php previously rewrote the saved
+ * block wrapper to, so the existing frontend styles apply unchanged.
+ *
+ * @param array $inner_blocks Parsed inner block nodes.
+ * @return string
+ */
+function get_inline_message_html( array $inner_blocks ) : string {
+	$inner = '';
+	foreach ( $inner_blocks as $child ) {
+		$inner .= render_block( $child );
+	}
+	return '<div class="wp-block-hubspot-form__inline-message">' . $inner . '</div>';
+}
+
+/**
+ * Collect every hubspot/form block in render (document, depth-first) order,
+ * expanding synced patterns (core/block) the same way render_block() does.
+ *
+ * @param array $blocks    Parsed blocks.
+ * @param array $collected Accumulator (passed by reference).
+ */
+function collect_form_blocks( array $blocks, array &$collected ) {
+	foreach ( $blocks as $block ) {
+		$name = $block['blockName'] ?? null;
+
+		if ( 'hubspot/form' === $name ) {
+			$collected[] = $block;
+		} elseif ( 'core/block' === $name && ! empty( $block['attrs']['ref'] ) ) {
+			$ref_post = get_post( (int) $block['attrs']['ref'] );
+			if ( $ref_post && 'wp_block' === $ref_post->post_type ) {
+				collect_form_blocks( parse_blocks( $ref_post->post_content ), $collected );
+			}
+		}
+
+		if ( ! empty( $block['innerBlocks'] ) ) {
+			collect_form_blocks( $block['innerBlocks'], $collected );
+		}
+	}
+}
+
+/**
+ * Locate the Nth hubspot/form block with a given form ID within a post.
+ *
+ * The instance index is per-form-ID and matches render.php's global
+ * $hubspot_form_block_instance_ids counter.
+ *
+ * @param int    $post_id  Post ID.
+ * @param string $form_id  HubSpot form ID.
+ * @param int    $instance 1-based per-form-ID instance index.
+ * @return array|null The parsed block node, or null when not found.
+ */
+function locate_form_block( int $post_id, string $form_id, int $instance ) {
+	$post = get_post( $post_id );
+	if ( ! $post ) {
+		return null;
+	}
+
+	$collected = [];
+	collect_form_blocks( parse_blocks( $post->post_content ), $collected );
+
+	$n = 0;
+	foreach ( $collected as $node ) {
+		if ( ( $node['attrs']['formId'] ?? '' ) !== $form_id ) {
+			continue;
+		}
+		$n++;
+		if ( $n === $instance ) {
+			return $node;
+		}
+	}
+
+	return null;
+}
+
+/**
+ * Secret used to sign repeat-visit unlock tokens.
+ *
+ * @return string
+ */
+function unlock_token_secret() : string {
+	return wp_salt( 'hsfb_unlock' );
+}
+
+/**
+ * Mint a signed, expiring unlock token for a specific form instance.
+ *
+ * Returned to the client on first successful unlock and replayed on repeat
+ * visits so persisted gated content can be re-served without another HubSpot
+ * lookup.
+ *
+ * @param int    $post_id  Post ID.
+ * @param string $form_id  HubSpot form ID.
+ * @param int    $instance Instance index.
+ * @return string
+ */
+function mint_unlock_token( int $post_id, string $form_id, int $instance ) : string {
+	/**
+	 * Filter the lifetime (in seconds) of a repeat-visit unlock token.
+	 *
+	 * @param int $ttl Token lifetime in seconds.
+	 */
+	$ttl    = (int) apply_filters( 'hubspot_form_block_unlock_token_ttl', MONTH_IN_SECONDS );
+	$expiry = time() + $ttl;
+	$payload = $post_id . '|' . $form_id . '|' . $instance . '|' . $expiry;
+	$sig     = hash_hmac( 'sha256', $payload, unlock_token_secret() );
+
+	return $expiry . '.' . $sig;
+}
+
+/**
+ * Verify a repeat-visit unlock token.
+ *
+ * @param string $token    Token from the client.
+ * @param int    $post_id  Post ID.
+ * @param string $form_id  HubSpot form ID.
+ * @param int    $instance Instance index.
+ * @return bool
+ */
+function verify_unlock_token( string $token, int $post_id, string $form_id, int $instance ) : bool {
+	if ( '' === $token || strpos( $token, '.' ) === false ) {
+		return false;
+	}
+
+	$parts  = explode( '.', $token, 2 );
+	$expiry = (int) $parts[0];
+	$sig    = $parts[1];
+
+	if ( $expiry < time() ) {
+		return false;
+	}
+
+	$payload  = $post_id . '|' . $form_id . '|' . $instance . '|' . $expiry;
+	$expected = hash_hmac( 'sha256', $payload, unlock_token_secret() );
+
+	return hash_equals( $expected, $sig );
+}
+
+/**
+ * Loosely compare two URLs by host + path (ignoring scheme, query and a
+ * trailing slash). Used to confirm a HubSpot submission came from this page.
+ *
+ * @param string $a First URL.
+ * @param string $b Second URL.
+ * @return bool
+ */
+function urls_match( string $a, string $b ) : bool {
+	$pa = wp_parse_url( $a );
+	$pb = wp_parse_url( $b );
+	if ( ! $pa || ! $pb ) {
+		return false;
+	}
+
+	$host_a = strtolower( $pa['host'] ?? '' );
+	$host_b = strtolower( $pb['host'] ?? '' );
+	$path_a = untrailingslashit( $pa['path'] ?? '' );
+	$path_b = untrailingslashit( $pb['path'] ?? '' );
+
+	return $host_a === $host_b && $path_a === $path_b;
+}
+
+/**
+ * Verify that a real, recent HubSpot submission exists for a form + page.
+ *
+ * Matching is heuristic: the HubSpot submissions API does not return the
+ * client-side conversionId, so we require a recent submission whose pageUrl
+ * matches this page and (when supplied) whose values contain the email. The
+ * submissions list is cached briefly to avoid hammering the API while the
+ * client polls.
+ *
+ * @param string $token    Private app access token.
+ * @param string $form_id  HubSpot form ID.
+ * @param string $email    Submitted email (may be empty).
+ * @param string $page_url Permalink of the page the form is on.
+ * @return bool True when a matching submission is found; false when not (yet).
+ */
+function verify_hubspot_submission( string $token, string $form_id, string $email, string $page_url ) : bool {
+	$cache_key   = 'hsfb_subs_' . md5( $form_id );
+	$submissions = get_transient( $cache_key );
+
+	if ( false === $submissions ) {
+		$response = wp_remote_get(
+			'https://api.hubapi.com/form-integrations/v1/submissions/forms/' . rawurlencode( $form_id ) . '?limit=50',
+			[
+				'timeout' => 5,
+				'headers' => [
+					'Authorization' => 'Bearer ' . $token,
+				],
+			]
+		);
+
+		if ( is_wp_error( $response ) || 200 !== wp_remote_retrieve_response_code( $response ) ) {
+			// Treat transient API failures as "not yet verified" so the client retries.
+			return false;
+		}
+
+		$body        = json_decode( wp_remote_retrieve_body( $response ), true );
+		$submissions = is_array( $body ) && isset( $body['results'] ) ? $body['results'] : [];
+
+		/**
+		 * Filter how long (seconds) the submissions list is cached per form.
+		 *
+		 * @param int $ttl Cache lifetime.
+		 */
+		$ttl = (int) apply_filters( 'hubspot_form_block_submissions_cache_ttl', 30 );
+		set_transient( $cache_key, $submissions, $ttl );
+	}
+
+	/**
+	 * Filter the recency window (seconds) within which a submission must have
+	 * occurred to be accepted as proof for a fresh unlock.
+	 *
+	 * @param int $window Window in seconds.
+	 */
+	$window_ms = (int) apply_filters( 'hubspot_form_block_submission_window', 5 * MINUTE_IN_SECONDS ) * 1000;
+	$now_ms    = time() * 1000;
+	$email     = strtolower( $email );
+
+	foreach ( (array) $submissions as $sub ) {
+		$submitted_at = isset( $sub['submittedAt'] ) ? (int) $sub['submittedAt'] : 0;
+		if ( $submitted_at && $submitted_at < $now_ms - $window_ms ) {
+			continue;
+		}
+
+		if ( ! empty( $sub['pageUrl'] ) && ! urls_match( $sub['pageUrl'], $page_url ) ) {
+			continue;
+		}
+
+		if ( '' !== $email ) {
+			$email_matched = false;
+			foreach ( (array) ( $sub['values'] ?? [] ) as $value ) {
+				if ( strtolower( (string) ( $value['value'] ?? '' ) ) === $email ) {
+					$email_matched = true;
+					break;
+				}
+			}
+			if ( ! $email_matched ) {
+				continue;
+			}
+		}
+
+		return true;
+	}
+
+	return false;
+}
+
+/**
+ * Best-effort resolution of the requesting client's IP address.
+ *
+ * REMOTE_ADDR alone is unreliable when the site sits behind a reverse proxy,
+ * load balancer or CDN (it then reports the proxy's address for everyone).
+ * This checks the common forwarded headers first, falling back to
+ * REMOTE_ADDR. Note that forwarded headers can be spoofed unless the site is
+ * actually behind a trusted proxy, so this is used only for rate limiting,
+ * never for access control. Hosts can pin the trusted header order via the
+ * `hubspot_form_block_client_ip_headers` filter or override the resolved
+ * value entirely via `hubspot_form_block_client_ip`.
+ *
+ * @return string The client IP, or an empty string when none can be resolved.
+ */
+function get_client_ip() : string {
+	/**
+	 * Filter the ordered list of $_SERVER keys consulted to resolve the client IP.
+	 *
+	 * Order matters: the first key that yields a valid IP wins. Restrict this
+	 * to headers your proxy actually sets to avoid trusting spoofable input.
+	 *
+	 * @param string[] $headers Ordered $_SERVER keys.
+	 */
+	$headers = (array) apply_filters(
+		'hubspot_form_block_client_ip_headers',
+		[
+			'HTTP_CF_CONNECTING_IP', // Cloudflare.
+			'HTTP_TRUE_CLIENT_IP',   // Akamai / Cloudflare Enterprise.
+			'HTTP_X_REAL_IP',        // Common nginx reverse proxy.
+			'HTTP_X_FORWARDED_FOR',  // Standard proxy chain (may be a list).
+			'REMOTE_ADDR',
+		]
+	);
+
+	$ip = '';
+	foreach ( $headers as $header ) {
+		if ( empty( $_SERVER[ $header ] ) ) {
+			continue;
+		}
+
+		$value = sanitize_text_field( wp_unslash( $_SERVER[ $header ] ) );
+
+		// X-Forwarded-For may be a comma-separated chain; the client is first.
+		foreach ( explode( ',', $value ) as $candidate ) {
+			$candidate = trim( $candidate );
+			if ( filter_var( $candidate, FILTER_VALIDATE_IP ) ) {
+				$ip = $candidate;
+				break 2;
+			}
+		}
+	}
+
+	/**
+	 * Filter the resolved client IP (e.g. to plug in a host-specific source).
+	 *
+	 * @param string $ip The resolved IP (may be empty).
+	 */
+	return (string) apply_filters( 'hubspot_form_block_client_ip', $ip );
+}
+
+/**
+ * Simple per-IP rate limiter for the unlock endpoint.
+ *
+ * @return bool True when the current request should be rejected.
+ */
+function unlock_is_rate_limited() : bool {
+	$ip = get_client_ip();
+	if ( '' === $ip ) {
+		return false;
+	}
+
+	/**
+	 * Filter the maximum number of unlock requests allowed per IP per minute.
+	 *
+	 * @param int $max Maximum requests.
+	 */
+	$max   = (int) apply_filters( 'hubspot_form_block_unlock_rate_limit', 30 );
+	$key   = 'hsfb_rl_' . md5( $ip );
+	$count = (int) get_transient( $key );
+
+	if ( $count >= $max ) {
+		return true;
+	}
+
+	set_transient( $key, $count + 1, MINUTE_IN_SECONDS );
+	return false;
+}
+
+/**
+ * Build the success response for an unlocked form instance.
+ *
+ * @param array  $node     Parsed form block node.
+ * @param int    $post_id  Post ID.
+ * @param string $form_id  HubSpot form ID.
+ * @param int    $instance Instance index.
+ * @return \WP_REST_Response
+ */
+function unlock_success_response( array $node, int $post_id, string $form_id, int $instance ) : \WP_REST_Response {
+	// Render with the post as the global context so context-dependent blocks
+	// (e.g. core/embed oEmbed caching) resolve the same way they do on the page.
+	global $post;
+	$previous = $post;
+	$post     = get_post( $post_id ); // phpcs:ignore WordPress.WP.GlobalVariablesOverride.Prohibited
+	setup_postdata( $post );
+
+	$html = get_inline_message_html( $node['innerBlocks'] );
+
+	$post = $previous; // phpcs:ignore WordPress.WP.GlobalVariablesOverride.Prohibited
+	wp_reset_postdata();
+
+	return new \WP_REST_Response(
+		[
+			'html'        => $html,
+			'unlockToken' => mint_unlock_token( $post_id, $form_id, $instance ),
+		],
+		200
+	);
+}
+
+/**
+ * Register the unlock REST route.
+ */
+function register_unlock_route() {
+	register_rest_route(
+		'hubspot-form-block/v1',
+		'/unlock',
+		[
+			'methods'             => 'POST',
+			'callback'            => __NAMESPACE__ . '\\rest_unlock',
+			'permission_callback' => '__return_true',
+			'args'                => [
+				'postId'      => [
+					'type'     => 'integer',
+					'required' => true,
+				],
+				'formId'      => [
+					'type'     => 'string',
+					'required' => true,
+				],
+				'instance'    => [ 'type' => 'integer' ],
+				'email'       => [ 'type' => 'string' ],
+				'unlockToken' => [ 'type' => 'string' ],
+			],
+		]
+	);
+}
+
+add_action( 'rest_api_init', __NAMESPACE__ . '\\register_unlock_route' );
+
+/**
+ * Handle a POST to the unlock endpoint.
+ *
+ * @param \WP_REST_Request $request Request.
+ * @return \WP_REST_Response
+ */
+function rest_unlock( \WP_REST_Request $request ) : \WP_REST_Response {
+	if ( unlock_is_rate_limited() ) {
+		return new \WP_REST_Response( [ 'status' => 'rate_limited' ], 429 );
+	}
+
+	$post_id      = absint( $request['postId'] );
+	$form_id      = sanitize_text_field( (string) $request['formId'] );
+	$instance     = max( 1, absint( $request['instance'] ) );
+	$email        = sanitize_email( (string) $request['email'] );
+	$unlock_token = is_string( $request['unlockToken'] ) ? $request['unlockToken'] : '';
+
+	if ( ! $post_id || '' === $form_id ) {
+		return new \WP_REST_Response( [ 'status' => 'invalid' ], 400 );
+	}
+
+	if ( 'publish' !== get_post_status( $post_id ) || ! is_post_publicly_viewable( $post_id ) ) {
+		return new \WP_REST_Response( [ 'status' => 'forbidden' ], 403 );
+	}
+
+	$node = locate_form_block( $post_id, $form_id, $instance );
+	if ( ! $node ) {
+		return new \WP_REST_Response( [ 'status' => 'not_found' ], 404 );
+	}
+
+	// Re-derive the form ID from the located block; never trust the client for content selection.
+	$form_id = (string) ( $node['attrs']['formId'] ?? $form_id );
+
+	if ( ! block_has_inline_message( $node ) ) {
+		return new \WP_REST_Response( null, 204 );
+	}
+
+	// Repeat-visit token path: a valid token alone unlocks (no HubSpot call).
+	if ( '' !== $unlock_token && verify_unlock_token( $unlock_token, $post_id, $form_id, $instance ) ) {
+		return unlock_success_response( $node, $post_id, $form_id, $instance );
+	}
+
+	$token = get_private_token();
+	if ( '' !== $token ) {
+		// Strong mode: require a verified HubSpot submission.
+		if ( ! verify_hubspot_submission( $token, $form_id, $email, (string) get_permalink( $post_id ) ) ) {
+			return new \WP_REST_Response( [ 'status' => 'pending' ], 202 );
+		}
+		return unlock_success_response( $node, $post_id, $form_id, $instance );
+	}
+
+	// Best-effort mode: no token configured, return content directly.
+	return unlock_success_response( $node, $post_id, $form_id, $instance );
+}
diff --git a/package-lock.json b/package-lock.json
index 6bc8093..88c40d6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,8 @@
 			"devDependencies": {
 				"@playwright/test": "^1.49.0",
 				"@wordpress/e2e-test-utils-playwright": "^1.15.0",
-				"@wordpress/scripts": "^27.9.0"
+				"@wordpress/scripts": "^27.9.0",
+				"@wp-playground/cli": "^3.1.45"
 			}
 		},
 		"node_modules/@ampproject/remapping": {
@@ -2693,6 +2694,19 @@
 				"eslint-scope": "5.1.1"
 			}
 		},
+		"node_modules/@nodable/entities": {
+			"version": "3.0.0",
+			"resolved": "https://registry.npmjs.org/@nodable/entities/-/entities-3.0.0.tgz",
+			"integrity": "sha512-8L9xFeTYKhm49xfIypoe2W5wV1m/3Z58kT+7kR9A8OyFxcPduI4VmxaUMQyKYrRjUoLLSXv6EKKID5Tvj9cUVw==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/nodable"
+				}
+			],
+			"license": "MIT"
+		},
 		"node_modules/@nodelib/fs.scandir": {
 			"version": "2.1.5",
 			"resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz",
@@ -2728,6 +2742,577 @@
 				"node": ">= 8"
 			}
 		},
+		"node_modules/@octokit/app": {
+			"version": "14.1.0",
+			"resolved": "https://registry.npmjs.org/@octokit/app/-/app-14.1.0.tgz",
+			"integrity": "sha512-g3uEsGOQCBl1+W1rgfwoRFUIR6PtvB2T1E4RpygeUU5LrLvlOqcxrt5lfykIeRpUPpupreGJUYl70fqMDXdTpw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/auth-app": "^6.0.0",
+				"@octokit/auth-unauthenticated": "^5.0.0",
+				"@octokit/core": "^5.0.0",
+				"@octokit/oauth-app": "^6.0.0",
+				"@octokit/plugin-paginate-rest": "^9.0.0",
+				"@octokit/types": "^12.0.0",
+				"@octokit/webhooks": "^12.0.4"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/auth-app": {
+			"version": "6.1.4",
+			"resolved": "https://registry.npmjs.org/@octokit/auth-app/-/auth-app-6.1.4.tgz",
+			"integrity": "sha512-QkXkSOHZK4dA5oUqY5Dk3S+5pN2s1igPjEASNQV8/vgJgW034fQWR16u7VsNOK/EljA00eyjYF5mWNxWKWhHRQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/auth-oauth-app": "^7.1.0",
+				"@octokit/auth-oauth-user": "^4.1.0",
+				"@octokit/request": "^8.3.1",
+				"@octokit/request-error": "^5.1.0",
+				"@octokit/types": "^13.1.0",
+				"deprecation": "^2.3.1",
+				"lru-cache": "npm:@wolfy1339/lru-cache@^11.0.2-patch.1",
+				"universal-github-app-jwt": "^1.1.2",
+				"universal-user-agent": "^6.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/auth-app/node_modules/@octokit/openapi-types": {
+			"version": "24.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+			"integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/auth-app/node_modules/@octokit/types": {
+			"version": "13.10.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+			"integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^24.2.0"
+			}
+		},
+		"node_modules/@octokit/auth-app/node_modules/lru-cache": {
+			"name": "@wolfy1339/lru-cache",
+			"version": "11.0.2-patch.1",
+			"resolved": "https://registry.npmjs.org/@wolfy1339/lru-cache/-/lru-cache-11.0.2-patch.1.tgz",
+			"integrity": "sha512-BgYZfL2ADCXKOw2wJtkM3slhHotawWkgIRRxq4wEybnZQPjvAp71SPX35xepMykTw8gXlzWcWPTY31hlbnRsDA==",
+			"dev": true,
+			"license": "ISC",
+			"engines": {
+				"node": "18 >=18.20 || 20 || >=22"
+			}
+		},
+		"node_modules/@octokit/auth-oauth-app": {
+			"version": "7.1.0",
+			"resolved": "https://registry.npmjs.org/@octokit/auth-oauth-app/-/auth-oauth-app-7.1.0.tgz",
+			"integrity": "sha512-w+SyJN/b0l/HEb4EOPRudo7uUOSW51jcK1jwLa+4r7PA8FPFpoxEnHBHMITqCsc/3Vo2qqFjgQfz/xUUvsSQnA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/auth-oauth-device": "^6.1.0",
+				"@octokit/auth-oauth-user": "^4.1.0",
+				"@octokit/request": "^8.3.1",
+				"@octokit/types": "^13.0.0",
+				"@types/btoa-lite": "^1.0.0",
+				"btoa-lite": "^1.0.0",
+				"universal-user-agent": "^6.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/auth-oauth-app/node_modules/@octokit/openapi-types": {
+			"version": "24.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+			"integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/auth-oauth-app/node_modules/@octokit/types": {
+			"version": "13.10.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+			"integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^24.2.0"
+			}
+		},
+		"node_modules/@octokit/auth-oauth-device": {
+			"version": "6.1.0",
+			"resolved": "https://registry.npmjs.org/@octokit/auth-oauth-device/-/auth-oauth-device-6.1.0.tgz",
+			"integrity": "sha512-FNQ7cb8kASufd6Ej4gnJ3f1QB5vJitkoV1O0/g6e6lUsQ7+VsSNRHRmFScN2tV4IgKA12frrr/cegUs0t+0/Lw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/oauth-methods": "^4.1.0",
+				"@octokit/request": "^8.3.1",
+				"@octokit/types": "^13.0.0",
+				"universal-user-agent": "^6.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/auth-oauth-device/node_modules/@octokit/openapi-types": {
+			"version": "24.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+			"integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/auth-oauth-device/node_modules/@octokit/types": {
+			"version": "13.10.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+			"integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^24.2.0"
+			}
+		},
+		"node_modules/@octokit/auth-oauth-user": {
+			"version": "4.1.0",
+			"resolved": "https://registry.npmjs.org/@octokit/auth-oauth-user/-/auth-oauth-user-4.1.0.tgz",
+			"integrity": "sha512-FrEp8mtFuS/BrJyjpur+4GARteUCrPeR/tZJzD8YourzoVhRics7u7we/aDcKv+yywRNwNi/P4fRi631rG/OyQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/auth-oauth-device": "^6.1.0",
+				"@octokit/oauth-methods": "^4.1.0",
+				"@octokit/request": "^8.3.1",
+				"@octokit/types": "^13.0.0",
+				"btoa-lite": "^1.0.0",
+				"universal-user-agent": "^6.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/auth-oauth-user/node_modules/@octokit/openapi-types": {
+			"version": "24.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+			"integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/auth-oauth-user/node_modules/@octokit/types": {
+			"version": "13.10.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+			"integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^24.2.0"
+			}
+		},
+		"node_modules/@octokit/auth-token": {
+			"version": "4.0.0",
+			"resolved": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-4.0.0.tgz",
+			"integrity": "sha512-tY/msAuJo6ARbK6SPIxZrPBms3xPbfwBrulZe0Wtr/DIY9lje2HeV1uoebShn6mx7SjCHif6EjMvoREj+gZ+SA==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/auth-unauthenticated": {
+			"version": "5.0.1",
+			"resolved": "https://registry.npmjs.org/@octokit/auth-unauthenticated/-/auth-unauthenticated-5.0.1.tgz",
+			"integrity": "sha512-oxeWzmBFxWd+XolxKTc4zr+h3mt+yofn4r7OfoIkR/Cj/o70eEGmPsFbueyJE2iBAGpjgTnEOKM3pnuEGVmiqg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/request-error": "^5.0.0",
+				"@octokit/types": "^12.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/core": {
+			"version": "5.2.2",
+			"resolved": "https://registry.npmjs.org/@octokit/core/-/core-5.2.2.tgz",
+			"integrity": "sha512-/g2d4sW9nUDJOMz3mabVQvOGhVa4e/BN/Um7yca9Bb2XTzPPnfTWHWQg+IsEYO7M3Vx+EXvaM/I2pJWIMun1bg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/auth-token": "^4.0.0",
+				"@octokit/graphql": "^7.1.0",
+				"@octokit/request": "^8.4.1",
+				"@octokit/request-error": "^5.1.1",
+				"@octokit/types": "^13.0.0",
+				"before-after-hook": "^2.2.0",
+				"universal-user-agent": "^6.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/core/node_modules/@octokit/openapi-types": {
+			"version": "24.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+			"integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/core/node_modules/@octokit/types": {
+			"version": "13.10.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+			"integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^24.2.0"
+			}
+		},
+		"node_modules/@octokit/endpoint": {
+			"version": "9.0.6",
+			"resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-9.0.6.tgz",
+			"integrity": "sha512-H1fNTMA57HbkFESSt3Y9+FBICv+0jFceJFPWDePYlR/iMGrwM5ph+Dd4XRQs+8X+PUFURLQgX9ChPfhJ/1uNQw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/types": "^13.1.0",
+				"universal-user-agent": "^6.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/endpoint/node_modules/@octokit/openapi-types": {
+			"version": "24.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+			"integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/endpoint/node_modules/@octokit/types": {
+			"version": "13.10.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+			"integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^24.2.0"
+			}
+		},
+		"node_modules/@octokit/graphql": {
+			"version": "7.1.1",
+			"resolved": "https://registry.npmjs.org/@octokit/graphql/-/graphql-7.1.1.tgz",
+			"integrity": "sha512-3mkDltSfcDUoa176nlGoA32RGjeWjl3K7F/BwHwRMJUW/IteSa4bnSV8p2ThNkcIcZU2umkZWxwETSSCJf2Q7g==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/request": "^8.4.1",
+				"@octokit/types": "^13.0.0",
+				"universal-user-agent": "^6.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/graphql/node_modules/@octokit/openapi-types": {
+			"version": "24.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+			"integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/graphql/node_modules/@octokit/types": {
+			"version": "13.10.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+			"integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^24.2.0"
+			}
+		},
+		"node_modules/@octokit/oauth-app": {
+			"version": "6.1.0",
+			"resolved": "https://registry.npmjs.org/@octokit/oauth-app/-/oauth-app-6.1.0.tgz",
+			"integrity": "sha512-nIn/8eUJ/BKUVzxUXd5vpzl1rwaVxMyYbQkNZjHrF7Vk/yu98/YDF/N2KeWO7uZ0g3b5EyiFXFkZI8rJ+DH1/g==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/auth-oauth-app": "^7.0.0",
+				"@octokit/auth-oauth-user": "^4.0.0",
+				"@octokit/auth-unauthenticated": "^5.0.0",
+				"@octokit/core": "^5.0.0",
+				"@octokit/oauth-authorization-url": "^6.0.2",
+				"@octokit/oauth-methods": "^4.0.0",
+				"@types/aws-lambda": "^8.10.83",
+				"universal-user-agent": "^6.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/oauth-authorization-url": {
+			"version": "6.0.2",
+			"resolved": "https://registry.npmjs.org/@octokit/oauth-authorization-url/-/oauth-authorization-url-6.0.2.tgz",
+			"integrity": "sha512-CdoJukjXXxqLNK4y/VOiVzQVjibqoj/xHgInekviUJV73y/BSIcwvJ/4aNHPBPKcPWFnd4/lO9uqRV65jXhcLA==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/oauth-methods": {
+			"version": "4.1.0",
+			"resolved": "https://registry.npmjs.org/@octokit/oauth-methods/-/oauth-methods-4.1.0.tgz",
+			"integrity": "sha512-4tuKnCRecJ6CG6gr0XcEXdZtkTDbfbnD5oaHBmLERTjTMZNi2CbfEHZxPU41xXLDG4DfKf+sonu00zvKI9NSbw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/oauth-authorization-url": "^6.0.2",
+				"@octokit/request": "^8.3.1",
+				"@octokit/request-error": "^5.1.0",
+				"@octokit/types": "^13.0.0",
+				"btoa-lite": "^1.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/oauth-methods/node_modules/@octokit/openapi-types": {
+			"version": "24.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+			"integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/oauth-methods/node_modules/@octokit/types": {
+			"version": "13.10.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+			"integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^24.2.0"
+			}
+		},
+		"node_modules/@octokit/openapi-types": {
+			"version": "20.0.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+			"integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/plugin-paginate-graphql": {
+			"version": "4.0.1",
+			"resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-graphql/-/plugin-paginate-graphql-4.0.1.tgz",
+			"integrity": "sha512-R8ZQNmrIKKpHWC6V2gum4x9LG2qF1RxRjo27gjQcG3j+vf2tLsEfE7I/wRWEPzYMaenr1M+qDAtNcwZve1ce1A==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">= 18"
+			},
+			"peerDependencies": {
+				"@octokit/core": ">=5"
+			}
+		},
+		"node_modules/@octokit/plugin-paginate-rest": {
+			"version": "9.2.2",
+			"resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-9.2.2.tgz",
+			"integrity": "sha512-u3KYkGF7GcZnSD/3UP0S7K5XUFT2FkOQdcfXZGZQPGv3lm4F2Xbf71lvjldr8c1H3nNbF+33cLEkWYbokGWqiQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/types": "^12.6.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			},
+			"peerDependencies": {
+				"@octokit/core": "5"
+			}
+		},
+		"node_modules/@octokit/plugin-rest-endpoint-methods": {
+			"version": "10.4.1",
+			"resolved": "https://registry.npmjs.org/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-10.4.1.tgz",
+			"integrity": "sha512-xV1b+ceKV9KytQe3zCVqjg+8GTGfDYwaT1ATU5isiUyVtlVAO3HNdzpS4sr4GBx4hxQ46s7ITtZrAsxG22+rVg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/types": "^12.6.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			},
+			"peerDependencies": {
+				"@octokit/core": "5"
+			}
+		},
+		"node_modules/@octokit/plugin-retry": {
+			"version": "6.1.0",
+			"resolved": "https://registry.npmjs.org/@octokit/plugin-retry/-/plugin-retry-6.1.0.tgz",
+			"integrity": "sha512-WrO3bvq4E1Xh1r2mT9w6SDFg01gFmP81nIG77+p/MqW1JeXXgL++6umim3t6x0Zj5pZm3rXAN+0HEjmmdhIRig==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/request-error": "^5.0.0",
+				"@octokit/types": "^13.0.0",
+				"bottleneck": "^2.15.3"
+			},
+			"engines": {
+				"node": ">= 18"
+			},
+			"peerDependencies": {
+				"@octokit/core": "5"
+			}
+		},
+		"node_modules/@octokit/plugin-retry/node_modules/@octokit/openapi-types": {
+			"version": "24.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+			"integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/plugin-retry/node_modules/@octokit/types": {
+			"version": "13.10.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+			"integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^24.2.0"
+			}
+		},
+		"node_modules/@octokit/plugin-throttling": {
+			"version": "8.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/plugin-throttling/-/plugin-throttling-8.2.0.tgz",
+			"integrity": "sha512-nOpWtLayKFpgqmgD0y3GqXafMFuKcA4tRPZIfu7BArd2lEZeb1988nhWhwx4aZWmjDmUfdgVf7W+Tt4AmvRmMQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/types": "^12.2.0",
+				"bottleneck": "^2.15.3"
+			},
+			"engines": {
+				"node": ">= 18"
+			},
+			"peerDependencies": {
+				"@octokit/core": "^5.0.0"
+			}
+		},
+		"node_modules/@octokit/request": {
+			"version": "8.4.1",
+			"resolved": "https://registry.npmjs.org/@octokit/request/-/request-8.4.1.tgz",
+			"integrity": "sha512-qnB2+SY3hkCmBxZsR/MPCybNmbJe4KAlfWErXq+rBKkQJlbjdJeS85VI9r8UqeLYLvnAenU8Q1okM/0MBsAGXw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/endpoint": "^9.0.6",
+				"@octokit/request-error": "^5.1.1",
+				"@octokit/types": "^13.1.0",
+				"universal-user-agent": "^6.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/request-error": {
+			"version": "5.1.1",
+			"resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-5.1.1.tgz",
+			"integrity": "sha512-v9iyEQJH6ZntoENr9/yXxjuezh4My67CBSu9r6Ve/05Iu5gNgnisNWOsoJHTP6k0Rr0+HQIpnH+kyammu90q/g==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/types": "^13.1.0",
+				"deprecation": "^2.0.0",
+				"once": "^1.4.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/request-error/node_modules/@octokit/openapi-types": {
+			"version": "24.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+			"integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/request-error/node_modules/@octokit/types": {
+			"version": "13.10.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+			"integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^24.2.0"
+			}
+		},
+		"node_modules/@octokit/request/node_modules/@octokit/openapi-types": {
+			"version": "24.2.0",
+			"resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+			"integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@octokit/request/node_modules/@octokit/types": {
+			"version": "13.10.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+			"integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^24.2.0"
+			}
+		},
+		"node_modules/@octokit/types": {
+			"version": "12.6.0",
+			"resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+			"integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/openapi-types": "^20.0.0"
+			}
+		},
+		"node_modules/@octokit/webhooks": {
+			"version": "12.3.2",
+			"resolved": "https://registry.npmjs.org/@octokit/webhooks/-/webhooks-12.3.2.tgz",
+			"integrity": "sha512-exj1MzVXoP7xnAcAB3jZ97pTvVPkQF9y6GA/dvYC47HV7vLv+24XRS6b/v/XnyikpEuvMhugEXdGtAlU086WkQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/request-error": "^5.0.0",
+				"@octokit/webhooks-methods": "^4.1.0",
+				"@octokit/webhooks-types": "7.6.1",
+				"aggregate-error": "^3.1.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/webhooks-methods": {
+			"version": "4.1.0",
+			"resolved": "https://registry.npmjs.org/@octokit/webhooks-methods/-/webhooks-methods-4.1.0.tgz",
+			"integrity": "sha512-zoQyKw8h9STNPqtm28UGOYFE7O6D4Il8VJwhAtMHFt2C4L0VQT1qGKLeefUOqHNs1mNRYSadVv7x0z8U2yyeWQ==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">= 18"
+			}
+		},
+		"node_modules/@octokit/webhooks-types": {
+			"version": "7.6.1",
+			"resolved": "https://registry.npmjs.org/@octokit/webhooks-types/-/webhooks-types-7.6.1.tgz",
+			"integrity": "sha512-S8u2cJzklBC0FgTwWVLaM8tMrDuDMVE4xiTK4EYXM9GntyvrdbSoxqDQa+Fh57CCNApyIpyeqPhhFEmHPfrXgw==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/@opentelemetry/api": {
 			"version": "1.9.1",
 			"resolved": "https://registry.npmjs.org/@opentelemetry/api/-/api-1.9.1.tgz",
@@ -3316,26 +3901,317 @@
 			"resolved": "https://registry.npmjs.org/@opentelemetry/sql-common/-/sql-common-0.40.1.tgz",
 			"integrity": "sha512-nSDlnHSqzC3pXn/wZEZVLuAuJ1MYMXPBwtv2qAbCa3847SaHItdE7SzUq/Jtb0KZmh1zfAbNi3AAMjztTT4Ugg==",
 			"dev": true,
-			"license": "Apache-2.0",
+			"license": "Apache-2.0",
+			"dependencies": {
+				"@opentelemetry/core": "^1.1.0"
+			},
+			"engines": {
+				"node": ">=14"
+			},
+			"peerDependencies": {
+				"@opentelemetry/api": "^1.1.0"
+			}
+		},
+		"node_modules/@paulirish/trace_engine": {
+			"version": "0.0.59",
+			"resolved": "https://registry.npmjs.org/@paulirish/trace_engine/-/trace_engine-0.0.59.tgz",
+			"integrity": "sha512-439NUzQGmH+9Y017/xCchBP9571J4bzhpcNhrxorf7r37wcyJZkgUfrUsRL3xl+JDcZ6ORhoFCzCw98c6S3YHw==",
+			"dev": true,
+			"license": "BSD-3-Clause",
+			"dependencies": {
+				"legacy-javascript": "latest",
+				"third-party-web": "latest"
+			}
+		},
+		"node_modules/@php-wasm/cli-util": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/cli-util/-/cli-util-3.1.45.tgz",
+			"integrity": "sha512-+ht22B6KPUsn5ORtApE5xYq+uIb7/Qv/NSOxYgNGSWf3O1rpxkbOMeCxtE7H3dvazJIlSF+/nsVHpHkcTZGOpA==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/util": "3.1.45",
+				"fast-xml-parser": "^5.8.0",
+				"jsonc-parser": "3.3.1"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/cli-util/node_modules/jsonc-parser": {
+			"version": "3.3.1",
+			"resolved": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.3.1.tgz",
+			"integrity": "sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@php-wasm/logger": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/logger/-/logger-3.1.45.tgz",
+			"integrity": "sha512-FYWGxaRZTM+aiRQ6/LlnFAdsixJ7VWQpM8Fe/61yWgpBamb1w3NEDRhYVR5DNjYWJVI5ha6pVxIsHtw018iA7g==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/node": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/node/-/node-3.1.45.tgz",
+			"integrity": "sha512-IFnGdNsQ0g8RwpFzg3gAt8VckFwshQ7g2Izwt+i+wi2Rtnj54DcPZpfMwliiq+c1XU1//jtXHBdczbwR75yW7A==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/cli-util": "3.1.45",
+				"@php-wasm/logger": "3.1.45",
+				"@php-wasm/node-5-2": "3.1.45",
+				"@php-wasm/node-7-4": "3.1.45",
+				"@php-wasm/node-8-0": "3.1.45",
+				"@php-wasm/node-8-1": "3.1.45",
+				"@php-wasm/node-8-2": "3.1.45",
+				"@php-wasm/node-8-3": "3.1.45",
+				"@php-wasm/node-8-4": "3.1.45",
+				"@php-wasm/node-8-5": "3.1.45",
+				"@php-wasm/universal": "3.1.45",
+				"@php-wasm/util": "3.1.45",
+				"fs-ext-extra-prebuilt": "2.2.7",
+				"wasm-feature-detect": "1.8.0",
+				"ws": "8.21.0"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/node-5-2": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/node-5-2/-/node-5-2-3.1.45.tgz",
+			"integrity": "sha512-mKYOI8/eWE7Gu9wOOwtcxGrhOfCfGlIqT3Jr1RK0qCsZ/GkiW2/EalsNC5wSWbaL9qdh4JUbXUoF7mE3dc+KRQ==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/universal": "3.1.45",
+				"wasm-feature-detect": "1.8.0"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/node-7-4": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/node-7-4/-/node-7-4-3.1.45.tgz",
+			"integrity": "sha512-3+VgXIL4y4Acb/OyNQAsIfz5I5GYlFmjw4M8l2Xx8TNBrixuOEO5vHmMoTssynZlmjoTLxBBzL2SaRHoubwi6g==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/universal": "3.1.45",
+				"wasm-feature-detect": "1.8.0"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/node-8-0": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/node-8-0/-/node-8-0-3.1.45.tgz",
+			"integrity": "sha512-6yJaW+mxgBWAy80IYRU41bh1LH4WsuDgqEWiHSumJcKOcNljSedUbm+YuLTY+Pnsov7u5yzkaBskslxGXcOlIQ==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/universal": "3.1.45",
+				"wasm-feature-detect": "1.8.0"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/node-8-1": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/node-8-1/-/node-8-1-3.1.45.tgz",
+			"integrity": "sha512-/5haLrmCySu40aDGtVAOukDBNYzCJ0JTXslXs36Rh8P9V2nlctVGO+Kp1m/74yCtdoJrZsRrBnVqKBCliVQjdg==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/universal": "3.1.45",
+				"wasm-feature-detect": "1.8.0"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/node-8-2": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/node-8-2/-/node-8-2-3.1.45.tgz",
+			"integrity": "sha512-fGsSHw6OTnNyjr6k87OqV8SYqRZlDrWYVSXFkOywXUbBvyAYeuttxHffYC4VoRZdRz+Ygu+2k2aPE06jpTTBFw==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/universal": "3.1.45",
+				"wasm-feature-detect": "1.8.0"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/node-8-3": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/node-8-3/-/node-8-3-3.1.45.tgz",
+			"integrity": "sha512-dq22w7k6zxSgRKEjFej2k2etHpWA/f6UZFQCwi0qPFTejlVRfGqJoY+6gwtF4PCCGXGD7J36XyRuSFuZz833MA==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/universal": "3.1.45",
+				"wasm-feature-detect": "1.8.0"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/node-8-4": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/node-8-4/-/node-8-4-3.1.45.tgz",
+			"integrity": "sha512-QElunKrFEpVa11Fdr6Afmw/gI/bCf5rxzAuXLBYfgghJP2w8sTT0M1ku1pocPEvMGeONbQgvHA06sDdKXhHEMA==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/universal": "3.1.45",
+				"wasm-feature-detect": "1.8.0"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/node-8-5": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/node-8-5/-/node-8-5-3.1.45.tgz",
+			"integrity": "sha512-FeKtaRMZorN1uRFbC6DILfv+Y9ImEMLjcpNVyT7zZ4WHPEf1yN0Q0Jo8VH9NNwCmkmiDAQN2gAIn3nKL8vsz+g==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/universal": "3.1.45",
+				"wasm-feature-detect": "1.8.0"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/progress": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/progress/-/progress-3.1.45.tgz",
+			"integrity": "sha512-rc/I9MSoqAPLRmrgArpWMrSq6s7R16ulrMjG3Ti5T4hfu+j2oxfBCHbrwzR57ITsgecjKZ+G9j/w+saQj9cgpQ==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/logger": "3.1.45"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/scopes": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/scopes/-/scopes-3.1.45.tgz",
+			"integrity": "sha512-7efo3IvGLMOcUuywB40avWz1c6c7YurmRW/hM44iPlhr72x9Wpth9eHjI+Gsn+qFISmUqjW+G2KHx9BD7BTQBA==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/stream-compression": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/stream-compression/-/stream-compression-3.1.45.tgz",
+			"integrity": "sha512-zLU1AGNEg1tuwm93LHrL8OcV24LyNglTg/CXV5CVZiMPpg1wfIDHJy11qqjZM8iCIJk87qYQhkKOjTnGinAVDg==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/util": "3.1.45"
+			}
+		},
+		"node_modules/@php-wasm/universal": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/universal/-/universal-3.1.45.tgz",
+			"integrity": "sha512-3x0TWQg6NEeO+M/oPA3rAP0hJB2gnsqwkb2sUipz0RQQXRkWEJjdrT20UVmGN/dXILDWeQg/VGxZhCktoWZGkA==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/logger": "3.1.45",
+				"@php-wasm/progress": "3.1.45",
+				"@php-wasm/stream-compression": "3.1.45",
+				"@php-wasm/util": "3.1.45",
+				"ini": "4.1.2"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/universal/node_modules/ini": {
+			"version": "4.1.2",
+			"resolved": "https://registry.npmjs.org/ini/-/ini-4.1.2.tgz",
+			"integrity": "sha512-AMB1mvwR1pyBFY/nSevUX6y8nJWS63/SzUKD3JyQn97s4xgIdgQPT75IRouIiBAN4yLQBUShNYVW0+UG25daCw==",
+			"dev": true,
+			"license": "ISC",
+			"engines": {
+				"node": "^14.17.0 || ^16.13.0 || >=18.0.0"
+			}
+		},
+		"node_modules/@php-wasm/util": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/util/-/util-3.1.45.tgz",
+			"integrity": "sha512-czXqXd2NJWkapV/zTr3WPSPdcgyI5KN7xSUusYpgkfljSovfvHOKKrTMQtbfPXRa9+MD8LmPQt+XStKPRp76Tg==",
+			"dev": true,
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@php-wasm/web-service-worker": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/web-service-worker/-/web-service-worker-3.1.45.tgz",
+			"integrity": "sha512-L8spIluLVlaOZ8CnNPfJ5IEM/e1YouQ9kB8GJL+NVm27Pci/pxBE5Hi7nsmau/oQJ6JTA6rXMuDh3wyicFU0Xg==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
 			"dependencies": {
-				"@opentelemetry/core": "^1.1.0"
+				"@php-wasm/scopes": "3.1.45",
+				"@php-wasm/universal": "3.1.45"
 			},
 			"engines": {
-				"node": ">=14"
-			},
-			"peerDependencies": {
-				"@opentelemetry/api": "^1.1.0"
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
 			}
 		},
-		"node_modules/@paulirish/trace_engine": {
-			"version": "0.0.59",
-			"resolved": "https://registry.npmjs.org/@paulirish/trace_engine/-/trace_engine-0.0.59.tgz",
-			"integrity": "sha512-439NUzQGmH+9Y017/xCchBP9571J4bzhpcNhrxorf7r37wcyJZkgUfrUsRL3xl+JDcZ6ORhoFCzCw98c6S3YHw==",
+		"node_modules/@php-wasm/xdebug-bridge": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@php-wasm/xdebug-bridge/-/xdebug-bridge-3.1.45.tgz",
+			"integrity": "sha512-InIWrSl9ULFEyIYbIK+uh2TK3N7VhQuycx3tRSaRY7YNpUGS2xxfNSt4BeJgBgUNmslKsQojSjCcmvumJW1mgg==",
 			"dev": true,
-			"license": "BSD-3-Clause",
+			"license": "GPL-2.0-or-later",
 			"dependencies": {
-				"legacy-javascript": "latest",
-				"third-party-web": "latest"
+				"@php-wasm/logger": "3.1.45",
+				"@php-wasm/universal": "3.1.45",
+				"ws": "8.21.0",
+				"xml2js": "0.6.2",
+				"yargs": "17.7.2"
+			},
+			"bin": {
+				"xdebug-bridge": "xdebug-bridge.js"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
 			}
 		},
 		"node_modules/@pkgr/core": {
@@ -4055,6 +4931,13 @@
 				"node": ">=10.13.0"
 			}
 		},
+		"node_modules/@types/aws-lambda": {
+			"version": "8.10.162",
+			"resolved": "https://registry.npmjs.org/@types/aws-lambda/-/aws-lambda-8.10.162.tgz",
+			"integrity": "sha512-Fn658grtLOci1oxi1391vvDWJRKNGWRSqfxRkmN/Iy3c0tQH1USMKEXcPYHLvope+ZgTFocx9FRQJx1muBL6qw==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/@types/babel__core": {
 			"version": "7.20.5",
 			"resolved": "https://registry.npmjs.org/@types/babel__core/-/babel__core-7.20.5.tgz",
@@ -4115,6 +4998,13 @@
 				"@types/node": "*"
 			}
 		},
+		"node_modules/@types/btoa-lite": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/@types/btoa-lite/-/btoa-lite-1.0.2.tgz",
+			"integrity": "sha512-ZYbcE2x7yrvNFJiU7xJGrpF/ihpkM7zKgw8bha3LNJSesvTtUNxbpzaT7WXBIryf6jovisrxTBvymxMeLLj1Mg==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/@types/connect": {
 			"version": "3.4.38",
 			"resolved": "https://registry.npmjs.org/@types/connect/-/connect-3.4.38.tgz",
@@ -4265,6 +5155,17 @@
 			"integrity": "sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==",
 			"dev": true
 		},
+		"node_modules/@types/jsonwebtoken": {
+			"version": "9.0.10",
+			"resolved": "https://registry.npmjs.org/@types/jsonwebtoken/-/jsonwebtoken-9.0.10.tgz",
+			"integrity": "sha512-asx5hIG9Qmf/1oStypjanR7iKTv0gXQ1Ov/jfrX6kS/EO0OFni8orbmGCn0672NHR3kXHwpAwR+B368ZGN/2rA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@types/ms": "*",
+				"@types/node": "*"
+			}
+		},
 		"node_modules/@types/mime": {
 			"version": "1.3.5",
 			"resolved": "https://registry.npmjs.org/@types/mime/-/mime-1.3.5.tgz",
@@ -4283,6 +5184,13 @@
 			"integrity": "sha512-hov8bUuiLiyFPGyFPE1lwWhmzYbirOXQNNo40+y3zow8aFVTeyn3VWL0VFFfdNddA8S4Vf0Tc062rzyNr7Paag==",
 			"dev": true
 		},
+		"node_modules/@types/ms": {
+			"version": "2.1.0",
+			"resolved": "https://registry.npmjs.org/@types/ms/-/ms-2.1.0.tgz",
+			"integrity": "sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/@types/mysql": {
 			"version": "2.15.26",
 			"resolved": "https://registry.npmjs.org/@types/mysql/-/mysql-2.15.26.tgz",
@@ -6084,6 +6992,145 @@
 				"node": ">=12"
 			}
 		},
+		"node_modules/@wp-playground/blueprints": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@wp-playground/blueprints/-/blueprints-3.1.45.tgz",
+			"integrity": "sha512-q7jEN5w6dgwpzk26mkSGLLPEsTQsRfily0wPolAwueyhq2bnY7Nil7r1k+JHTR2XpTSg3Y3rFyp3j1biOpbsDA==",
+			"dev": true,
+			"dependencies": {
+				"@php-wasm/logger": "3.1.45",
+				"@php-wasm/progress": "3.1.45",
+				"@php-wasm/stream-compression": "3.1.45",
+				"@php-wasm/universal": "3.1.45",
+				"@php-wasm/util": "3.1.45",
+				"@php-wasm/web-service-worker": "3.1.45",
+				"@wp-playground/common": "3.1.45",
+				"@wp-playground/storage": "3.1.45",
+				"@wp-playground/wordpress": "3.1.45",
+				"ajv": "8.18.0"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@wp-playground/blueprints/node_modules/ajv": {
+			"version": "8.18.0",
+			"resolved": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz",
+			"integrity": "sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"fast-deep-equal": "^3.1.3",
+				"fast-uri": "^3.0.1",
+				"json-schema-traverse": "^1.0.0",
+				"require-from-string": "^2.0.2"
+			},
+			"funding": {
+				"type": "github",
+				"url": "https://github.com/sponsors/epoberezkin"
+			}
+		},
+		"node_modules/@wp-playground/blueprints/node_modules/json-schema-traverse": {
+			"version": "1.0.0",
+			"resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+			"integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/@wp-playground/cli": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@wp-playground/cli/-/cli-3.1.45.tgz",
+			"integrity": "sha512-9cSDXOJoSdZSVrNBOraLlkiBMnvxy0EyaUrkr/8kBkNhWgNv2WhoPxMY25B0eh8nocH2mLVFHg9s4thuFghhug==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/cli-util": "3.1.45",
+				"@php-wasm/logger": "3.1.45",
+				"@php-wasm/node": "3.1.45",
+				"@php-wasm/progress": "3.1.45",
+				"@php-wasm/universal": "3.1.45",
+				"@php-wasm/util": "3.1.45",
+				"@php-wasm/xdebug-bridge": "3.1.45",
+				"@wp-playground/blueprints": "3.1.45",
+				"@wp-playground/common": "3.1.45",
+				"@wp-playground/storage": "3.1.45",
+				"@wp-playground/tools": "3.1.45",
+				"@wp-playground/wordpress": "3.1.45",
+				"express": "4.22.2",
+				"fs-extra": "11.1.1",
+				"tmp-promise": "3.0.3",
+				"wasm-feature-detect": "1.8.0",
+				"yargs": "17.7.2"
+			},
+			"bin": {
+				"wp-playground-cli": "wp-playground.js"
+			}
+		},
+		"node_modules/@wp-playground/common": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@wp-playground/common/-/common-3.1.45.tgz",
+			"integrity": "sha512-dhVGdPqp4D0RhodW9sxdI3gdKPI98ue0oyXX4AeL4toLvjzKF1nz3AwniojsuHbJr0RV0QhA/Z2rYcTjynLD8A==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/universal": "3.1.45",
+				"@php-wasm/util": "3.1.45"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@wp-playground/storage": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@wp-playground/storage/-/storage-3.1.45.tgz",
+			"integrity": "sha512-c9iWgHHhwEElroXqWBi8B7rSsvAbSYjCDA1m5zTmg+jpscbT8zLrIohJ3WANbWljeSxG4sWA87PLqARdchyl3A==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/stream-compression": "3.1.45",
+				"@php-wasm/universal": "3.1.45",
+				"@php-wasm/util": "3.1.45",
+				"@zip.js/zip.js": "2.7.57",
+				"isomorphic-git": "1.37.6",
+				"octokit": "3.1.2",
+				"pako": "^1.0.10",
+				"sha.js": "2.4.12"
+			}
+		},
+		"node_modules/@wp-playground/tools": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@wp-playground/tools/-/tools-3.1.45.tgz",
+			"integrity": "sha512-nhGuCsVgd0VIe+nQgrKKsVXCu2XHHSnj7+GiH4qIThYUpXLMZo/s+w1bI0ANGOCgpUTOv89Q2JOFPrn37+b3tA==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@wp-playground/blueprints": "3.1.45"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
+		"node_modules/@wp-playground/wordpress": {
+			"version": "3.1.45",
+			"resolved": "https://registry.npmjs.org/@wp-playground/wordpress/-/wordpress-3.1.45.tgz",
+			"integrity": "sha512-kQqx7m4oKRnSmTxiwdwVnUGetJINHVULMURff2+JZ4EGLqAUVscyCQ4YvQMnIho6gASyzt8TYLr3GqxU+1n6AA==",
+			"dev": true,
+			"license": "GPL-2.0-or-later",
+			"dependencies": {
+				"@php-wasm/logger": "3.1.45",
+				"@php-wasm/universal": "3.1.45",
+				"@php-wasm/util": "3.1.45",
+				"@wp-playground/common": "3.1.45",
+				"zstddec": "^0.2.0"
+			},
+			"engines": {
+				"node": ">=20.10.0",
+				"npm": ">=10.2.3"
+			}
+		},
 		"node_modules/@xtuc/ieee754": {
 			"version": "1.2.0",
 			"resolved": "https://registry.npmjs.org/@xtuc/ieee754/-/ieee754-1.2.0.tgz",
@@ -6096,6 +7143,18 @@
 			"integrity": "sha512-NuHqBY1PB/D8xU6s/thBgOAiAP7HOYDQ32+BFZILJ8ivkUkAHQnWfn6WhL79Owj1qmUnoN/YPhktdIoucipkAQ==",
 			"dev": true
 		},
+		"node_modules/@zip.js/zip.js": {
+			"version": "2.7.57",
+			"resolved": "https://registry.npmjs.org/@zip.js/zip.js/-/zip.js-2.7.57.tgz",
+			"integrity": "sha512-BtonQ1/jDnGiMed6OkV6rZYW78gLmLswkHOzyMrMb+CAR7CZO8phOHO6c2qw6qb1g1betN7kwEHhhZk30dv+NA==",
+			"dev": true,
+			"license": "BSD-3-Clause",
+			"engines": {
+				"bun": ">=0.7.0",
+				"deno": ">=1.0.0",
+				"node": ">=16.5.0"
+			}
+		},
 		"node_modules/abab": {
 			"version": "2.0.6",
 			"resolved": "https://registry.npmjs.org/abab/-/abab-2.0.6.tgz",
@@ -6103,6 +7162,19 @@
 			"deprecated": "Use your platform's native atob() and btoa() methods instead",
 			"dev": true
 		},
+		"node_modules/abort-controller": {
+			"version": "3.0.0",
+			"resolved": "https://registry.npmjs.org/abort-controller/-/abort-controller-3.0.0.tgz",
+			"integrity": "sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"event-target-shim": "^5.0.0"
+			},
+			"engines": {
+				"node": ">=6.5"
+			}
+		},
 		"node_modules/accepts": {
 			"version": "1.3.8",
 			"resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
@@ -6190,6 +7262,20 @@
 				"node": ">= 6.0.0"
 			}
 		},
+		"node_modules/aggregate-error": {
+			"version": "3.1.0",
+			"resolved": "https://registry.npmjs.org/aggregate-error/-/aggregate-error-3.1.0.tgz",
+			"integrity": "sha512-4I7Td01quW/RpocfNayFdFVk1qSuoh0E7JrbRJ16nH01HhKFQ88INq9Sd+nd72zqRySlr9BmDA8xlEJ6vJMrYA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"clean-stack": "^2.0.0",
+				"indent-string": "^4.0.0"
+			},
+			"engines": {
+				"node": ">=8"
+			}
+		},
 		"node_modules/ajv": {
 			"version": "6.12.6",
 			"resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
@@ -6349,6 +7435,19 @@
 				"node": ">= 8"
 			}
 		},
+		"node_modules/anynum": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/anynum/-/anynum-1.0.1.tgz",
+			"integrity": "sha512-N6//FLET/tXYNM/F6ABca1oH6fWB+KlTt909Le28WMDBk8oaT4vY17DCrwg2MvmuqUKt3Ni4N5dGJ/EoBgcO6A==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/NaturalIntelligence"
+				}
+			],
+			"license": "MIT"
+		},
 		"node_modules/are-docs-informative": {
 			"version": "0.0.2",
 			"resolved": "https://registry.npmjs.org/are-docs-informative/-/are-docs-informative-0.0.2.tgz",
@@ -6602,6 +7701,13 @@
 				"node": ">=8"
 			}
 		},
+		"node_modules/async-lock": {
+			"version": "1.4.1",
+			"resolved": "https://registry.npmjs.org/async-lock/-/async-lock-1.4.1.tgz",
+			"integrity": "sha512-Az2ZTpuytrtqENulXwO3GGv1Bztugx6TT37NIo7imr/Qo0gsYiGtSdBa2B6fsXhTpVZDNfu1Qn3pk531e3q+nQ==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/asynckit": {
 			"version": "0.4.0",
 			"resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
@@ -7034,6 +8140,13 @@
 			"integrity": "sha512-x+VAiMRL6UPkx+kudNvxTl6hB2XNNCG2r+7wixVfIYwu/2HKRXimwQyaumLjMveWvT2Hkd/cAJw+QBMfJ/EKVw==",
 			"dev": true
 		},
+		"node_modules/before-after-hook": {
+			"version": "2.2.3",
+			"resolved": "https://registry.npmjs.org/before-after-hook/-/before-after-hook-2.2.3.tgz",
+			"integrity": "sha512-NzUnlZexiaH/46WDhANlyR2bXRopNg4F/zuSA3OpZnllCUgRaOF2znDioDWrmbNVsuZk6l9pMquQB38cfBZwkQ==",
+			"dev": true,
+			"license": "Apache-2.0"
+		},
 		"node_modules/big.js": {
 			"version": "5.2.2",
 			"resolved": "https://registry.npmjs.org/big.js/-/big.js-5.2.2.tgz",
@@ -7067,23 +8180,24 @@
 			}
 		},
 		"node_modules/body-parser": {
-			"version": "1.20.2",
-			"resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.2.tgz",
-			"integrity": "sha512-ml9pReCu3M61kGlqoTm2umSXTlRTuGTx0bfYj+uIUKKYycG5NtSbeetV3faSU6R7ajOPw0g/J1PvK4qNy7s5bA==",
+			"version": "1.20.6",
+			"resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.6.tgz",
+			"integrity": "sha512-p5tAzS57i5MV9fZFDj9LeIiTZEufbSe2eDozP+ElheSUq1m74CRq1jI4mYNDdVs9vQztXFLuk/Gd6BWTdwRJ5g==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
-				"bytes": "3.1.2",
+				"bytes": "~3.1.2",
 				"content-type": "~1.0.5",
 				"debug": "2.6.9",
 				"depd": "2.0.0",
-				"destroy": "1.2.0",
-				"http-errors": "2.0.0",
-				"iconv-lite": "0.4.24",
-				"on-finished": "2.4.1",
-				"qs": "6.11.0",
-				"raw-body": "2.5.2",
+				"destroy": "~1.2.0",
+				"http-errors": "~2.0.1",
+				"iconv-lite": "~0.4.24",
+				"on-finished": "~2.4.1",
+				"qs": "~6.15.1",
+				"raw-body": "~2.5.3",
 				"type-is": "~1.6.18",
-				"unpipe": "1.0.0"
+				"unpipe": "~1.0.0"
 			},
 			"engines": {
 				"node": ">= 0.8",
@@ -7095,6 +8209,7 @@
 			"resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
 			"integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.8"
 			}
@@ -7104,6 +8219,7 @@
 			"resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
 			"integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"ms": "2.0.0"
 			}
@@ -7113,6 +8229,7 @@
 			"resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
 			"integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"safer-buffer": ">= 2.1.2 < 3"
 			},
@@ -7124,7 +8241,8 @@
 			"version": "2.0.0",
 			"resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
 			"integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
-			"dev": true
+			"dev": true,
+			"license": "MIT"
 		},
 		"node_modules/bonjour-service": {
 			"version": "1.2.1",
@@ -7142,6 +8260,13 @@
 			"integrity": "sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==",
 			"dev": true
 		},
+		"node_modules/bottleneck": {
+			"version": "2.19.5",
+			"resolved": "https://registry.npmjs.org/bottleneck/-/bottleneck-2.19.5.tgz",
+			"integrity": "sha512-VHiNCbI1lKdl44tGrhNfU3lup0Tj/ZBMJB5/2ZbNXRCPuRCO7ed2mgcK4r17y+KB2EfuYuRaVlwNbAeaWGSpbw==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/brace-expansion": {
 			"version": "2.0.1",
 			"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
@@ -7204,6 +8329,13 @@
 				"node-int64": "^0.4.0"
 			}
 		},
+		"node_modules/btoa-lite": {
+			"version": "1.0.0",
+			"resolved": "https://registry.npmjs.org/btoa-lite/-/btoa-lite-1.0.0.tgz",
+			"integrity": "sha512-gvW7InbIyF8AicrqWoptdW08pUxuhq8BEgowNajy9RhiE86fmGAGl+bLKo6oB8QP0CkqHLowfN0oJdKC/J6LbA==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/buffer": {
 			"version": "5.7.1",
 			"resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
@@ -7237,6 +8369,13 @@
 				"node": "*"
 			}
 		},
+		"node_modules/buffer-equal-constant-time": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz",
+			"integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
+			"dev": true,
+			"license": "BSD-3-Clause"
+		},
 		"node_modules/buffer-from": {
 			"version": "1.1.2",
 			"resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
@@ -7265,16 +8404,47 @@
 			}
 		},
 		"node_modules/call-bind": {
-			"version": "1.0.7",
-			"resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.7.tgz",
-			"integrity": "sha512-GHTSNSYICQ7scH7sZ+M2rFopRoLh8t2bLSW6BbgrtLsahOIB5iyAVJf9GjWK3cYTDaMj4XdBpM1cA6pIS0Kv2w==",
+			"version": "1.0.9",
+			"resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.9.tgz",
+			"integrity": "sha512-a/hy+pNsFUTR+Iz8TCJvXudKVLAnz/DyeSUo10I5yvFDQJBFU2s9uqQpoSrJlroHUKoKqzg+epxyP9lqFdzfBQ==",
 			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"call-bind-apply-helpers": "^1.0.2",
+				"es-define-property": "^1.0.1",
+				"get-intrinsic": "^1.3.0",
+				"set-function-length": "^1.2.2"
+			},
+			"engines": {
+				"node": ">= 0.4"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/ljharb"
+			}
+		},
+		"node_modules/call-bind-apply-helpers": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+			"integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+			"dev": true,
+			"license": "MIT",
 			"dependencies": {
-				"es-define-property": "^1.0.0",
 				"es-errors": "^1.3.0",
-				"function-bind": "^1.1.2",
-				"get-intrinsic": "^1.2.4",
-				"set-function-length": "^1.2.1"
+				"function-bind": "^1.1.2"
+			},
+			"engines": {
+				"node": ">= 0.4"
+			}
+		},
+		"node_modules/call-bound": {
+			"version": "1.0.4",
+			"resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+			"integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"call-bind-apply-helpers": "^1.0.2",
+				"get-intrinsic": "^1.3.0"
 			},
 			"engines": {
 				"node": ">= 0.4"
@@ -7552,6 +8722,23 @@
 			"integrity": "sha512-cuSVIHi9/9E/+821Qjdvngor+xpnlwnuwIyZOaLmHBVdXL+gP+I6QQB9VkO7RI77YIcTV+S1W9AreJ5eN63JBA==",
 			"dev": true
 		},
+		"node_modules/clean-git-ref": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/clean-git-ref/-/clean-git-ref-2.0.1.tgz",
+			"integrity": "sha512-bLSptAy2P0s6hU4PzuIMKmMJJSE6gLXGH1cntDu7bWJUksvuM+7ReOK61mozULErYvP6a15rnYl0zFDef+pyPw==",
+			"dev": true,
+			"license": "Apache-2.0"
+		},
+		"node_modules/clean-stack": {
+			"version": "2.2.0",
+			"resolved": "https://registry.npmjs.org/clean-stack/-/clean-stack-2.2.0.tgz",
+			"integrity": "sha512-4diC9HaTE+KRAMWhDhrGOECgWZxoevMc5TlkObMqNSsVU62PYzXZ/SMTjzyGAFF1YusgxGcSWTEXBhp0CPwQ1A==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=6"
+			}
+		},
 		"node_modules/clean-webpack-plugin": {
 			"version": "3.0.0",
 			"resolved": "https://registry.npmjs.org/clean-webpack-plugin/-/clean-webpack-plugin-3.0.0.tgz",
@@ -7793,6 +8980,7 @@
 			"resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
 			"integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.6"
 			}
@@ -7972,6 +9160,19 @@
 				"js-yaml": "bin/js-yaml.js"
 			}
 		},
+		"node_modules/crc-32": {
+			"version": "1.2.2",
+			"resolved": "https://registry.npmjs.org/crc-32/-/crc-32-1.2.2.tgz",
+			"integrity": "sha512-ROmzCKrTnOwybPcJApAA6WBWij23HVfGVNKqqrZpuyZOHqK2CwHSvpGuyt/UNNvaIjEd8X5IFGp4Mh+Ie1IHJQ==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"bin": {
+				"crc32": "bin/crc32.njs"
+			},
+			"engines": {
+				"node": ">=0.8"
+			}
+		},
 		"node_modules/create-jest": {
 			"version": "29.7.0",
 			"resolved": "https://registry.npmjs.org/create-jest/-/create-jest-29.7.0.tgz",
@@ -8465,6 +9666,22 @@
 			"integrity": "sha512-VBBaLc1MgL5XpzgIP7ny5Z6Nx3UrRkIViUkPUdtl9aya5amy3De1gsUUSB1g3+3sExYNjCAsAznmukyxCb1GRA==",
 			"dev": true
 		},
+		"node_modules/decompress-response": {
+			"version": "6.0.0",
+			"resolved": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz",
+			"integrity": "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"mimic-response": "^3.1.0"
+			},
+			"engines": {
+				"node": ">=10"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/sindresorhus"
+			}
+		},
 		"node_modules/dedent": {
 			"version": "1.5.3",
 			"resolved": "https://registry.npmjs.org/dedent/-/dedent-1.5.3.tgz",
@@ -8674,15 +9891,24 @@
 			"resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
 			"integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.8"
 			}
 		},
+		"node_modules/deprecation": {
+			"version": "2.3.1",
+			"resolved": "https://registry.npmjs.org/deprecation/-/deprecation-2.3.1.tgz",
+			"integrity": "sha512-xmHIy4F3scKVwMsQ4WnVaS8bHOx0DmVwRywosKhaILI0ywMDWPtBSku2HNxRvF7jtwDRsoEwYQSfbxj8b7RlJQ==",
+			"dev": true,
+			"license": "ISC"
+		},
 		"node_modules/destroy": {
 			"version": "1.2.0",
 			"resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
 			"integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.8",
 				"npm": "1.2.8000 || >= 1.4.16"
@@ -8719,6 +9945,13 @@
 				"node": "^14.15.0 || ^16.10.0 || >=18.0.0"
 			}
 		},
+		"node_modules/diff3": {
+			"version": "0.0.3",
+			"resolved": "https://registry.npmjs.org/diff3/-/diff3-0.0.3.tgz",
+			"integrity": "sha512-iSq8ngPOt0K53A6eVr4d5Kn6GNrM2nQZtC740pzIriHtn4pOQ2lyzEXQMBeVcWERN0ye7fhBsk9PbLLQOnUx/g==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/dir-glob": {
 			"version": "3.0.1",
 			"resolved": "https://registry.npmjs.org/dir-glob/-/dir-glob-3.0.1.tgz",
@@ -8862,17 +10095,43 @@
 				"url": "https://github.com/sponsors/sindresorhus"
 			}
 		},
+		"node_modules/dunder-proto": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+			"integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"call-bind-apply-helpers": "^1.0.1",
+				"es-errors": "^1.3.0",
+				"gopd": "^1.2.0"
+			},
+			"engines": {
+				"node": ">= 0.4"
+			}
+		},
 		"node_modules/duplexer": {
 			"version": "0.1.2",
 			"resolved": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.2.tgz",
 			"integrity": "sha512-jtD6YG370ZCIi/9GTaJKQxWTZD045+4R4hTk/x1UyoqadyJ9x9CgSi1RlVDQF8U2sxLLSnFkCaMihqljHIWgMg==",
 			"dev": true
 		},
+		"node_modules/ecdsa-sig-formatter": {
+			"version": "1.0.11",
+			"resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz",
+			"integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"dependencies": {
+				"safe-buffer": "^5.0.1"
+			}
+		},
 		"node_modules/ee-first": {
 			"version": "1.1.1",
 			"resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
 			"integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
-			"dev": true
+			"dev": true,
+			"license": "MIT"
 		},
 		"node_modules/electron-to-chromium": {
 			"version": "1.5.31",
@@ -8908,10 +10167,11 @@
 			}
 		},
 		"node_modules/encodeurl": {
-			"version": "1.0.2",
-			"resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
-			"integrity": "sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==",
+			"version": "2.0.0",
+			"resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
+			"integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.8"
 			}
@@ -9064,13 +10324,11 @@
 			}
 		},
 		"node_modules/es-define-property": {
-			"version": "1.0.0",
-			"resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.0.tgz",
-			"integrity": "sha512-jxayLKShrEqqzJ0eumQbVhTYQM27CfT1T35+gCgDFoL82JLsXqTJ76zv6A0YLOgEnLUMvLzsDsGIrl8NFpT2gQ==",
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+			"integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
 			"dev": true,
-			"dependencies": {
-				"get-intrinsic": "^1.2.4"
-			},
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.4"
 			}
@@ -9136,10 +10394,11 @@
 			"dev": true
 		},
 		"node_modules/es-object-atoms": {
-			"version": "1.0.0",
-			"resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.0.0.tgz",
-			"integrity": "sha512-MZ4iQ6JwHOBQjahnjwaC1ZtIBH+2ohjamzAO3oaHcXYup7qxjF2fixyH+Q71voWHeOkI2q/TnJao/KfXYIZWbw==",
+			"version": "1.1.2",
+			"resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
+			"integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"es-errors": "^1.3.0"
 			},
@@ -10121,10 +11380,21 @@
 			"resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
 			"integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.6"
 			}
 		},
+		"node_modules/event-target-shim": {
+			"version": "5.0.1",
+			"resolved": "https://registry.npmjs.org/event-target-shim/-/event-target-shim-5.0.1.tgz",
+			"integrity": "sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=6"
+			}
+		},
 		"node_modules/eventemitter3": {
 			"version": "4.0.7",
 			"resolved": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-4.0.7.tgz",
@@ -10267,52 +11537,58 @@
 			"dev": true
 		},
 		"node_modules/express": {
-			"version": "4.19.2",
-			"resolved": "https://registry.npmjs.org/express/-/express-4.19.2.tgz",
-			"integrity": "sha512-5T6nhjsT+EOMzuck8JjBHARTHfMht0POzlA60WV2pMD3gyXw2LZnZ+ueGdNxG+0calOJcWKbpFcuzLZ91YWq9Q==",
+			"version": "4.22.2",
+			"resolved": "https://registry.npmjs.org/express/-/express-4.22.2.tgz",
+			"integrity": "sha512-IuL+Elrou2ZvCFHs18/CIzy2Nzvo25nZ1/D2eIZlz7c+QUayAcYoiM2BthCjs+EBHVpjYjcuLDAiCWgeIX3X1Q==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"accepts": "~1.3.8",
 				"array-flatten": "1.1.1",
-				"body-parser": "1.20.2",
-				"content-disposition": "0.5.4",
+				"body-parser": "~1.20.5",
+				"content-disposition": "~0.5.4",
 				"content-type": "~1.0.4",
-				"cookie": "0.6.0",
-				"cookie-signature": "1.0.6",
+				"cookie": "~0.7.1",
+				"cookie-signature": "~1.0.6",
 				"debug": "2.6.9",
 				"depd": "2.0.0",
-				"encodeurl": "~1.0.2",
+				"encodeurl": "~2.0.0",
 				"escape-html": "~1.0.3",
 				"etag": "~1.8.1",
-				"finalhandler": "1.2.0",
-				"fresh": "0.5.2",
-				"http-errors": "2.0.0",
-				"merge-descriptors": "1.0.1",
+				"finalhandler": "~1.3.1",
+				"fresh": "~0.5.2",
+				"http-errors": "~2.0.0",
+				"merge-descriptors": "1.0.3",
 				"methods": "~1.1.2",
-				"on-finished": "2.4.1",
+				"on-finished": "~2.4.1",
 				"parseurl": "~1.3.3",
-				"path-to-regexp": "0.1.7",
+				"path-to-regexp": "~0.1.12",
 				"proxy-addr": "~2.0.7",
-				"qs": "6.11.0",
+				"qs": "~6.15.1",
 				"range-parser": "~1.2.1",
 				"safe-buffer": "5.2.1",
-				"send": "0.18.0",
-				"serve-static": "1.15.0",
+				"send": "~0.19.0",
+				"serve-static": "~1.16.2",
 				"setprototypeof": "1.2.0",
-				"statuses": "2.0.1",
+				"statuses": "~2.0.1",
 				"type-is": "~1.6.18",
 				"utils-merge": "1.0.1",
 				"vary": "~1.1.2"
 			},
 			"engines": {
 				"node": ">= 0.10.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/express"
 			}
 		},
 		"node_modules/express/node_modules/cookie": {
-			"version": "0.6.0",
-			"resolved": "https://registry.npmjs.org/cookie/-/cookie-0.6.0.tgz",
-			"integrity": "sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==",
+			"version": "0.7.2",
+			"resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+			"integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.6"
 			}
@@ -10432,6 +11708,47 @@
 			"integrity": "sha512-MWipKbbYiYI0UC7cl8m/i/IWTqfC8YXsqjzybjddLsFjStroQzsHXkc73JutMvBiXmOvapk+axIl79ig5t55Bw==",
 			"dev": true
 		},
+		"node_modules/fast-xml-builder": {
+			"version": "1.3.0",
+			"resolved": "https://registry.npmjs.org/fast-xml-builder/-/fast-xml-builder-1.3.0.tgz",
+			"integrity": "sha512-F74cZEdCvuw9P41GAC3rod4X04jjWGM1JPEv/GWSqFTWLsdyMSBMBMlm9Hk3GLBgLBbdBNY8yee0pQh2RBVESQ==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/NaturalIntelligence"
+				}
+			],
+			"license": "MIT",
+			"dependencies": {
+				"path-expression-matcher": "^1.6.2",
+				"xml-naming": "^0.3.0"
+			}
+		},
+		"node_modules/fast-xml-parser": {
+			"version": "5.10.1",
+			"resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.10.1.tgz",
+			"integrity": "sha512-IEMIf7298kXuZSRFoGfMYrl7is8LpavODgbNz1cwIudv7KwVFnuU+UsMporfq6PD6aXSlawZlARiA3UywCTfMw==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/NaturalIntelligence"
+				}
+			],
+			"license": "MIT",
+			"dependencies": {
+				"@nodable/entities": "^3.0.0",
+				"fast-xml-builder": "^1.2.0",
+				"is-unsafe": "^2.0.0",
+				"path-expression-matcher": "^1.6.2",
+				"strnum": "^2.4.1",
+				"xml-naming": "^0.3.0"
+			},
+			"bin": {
+				"fxparser": "src/cli/cli.js"
+			}
+		},
 		"node_modules/fastest-levenshtein": {
 			"version": "1.0.16",
 			"resolved": "https://registry.npmjs.org/fastest-levenshtein/-/fastest-levenshtein-1.0.16.tgz",
@@ -10531,17 +11848,18 @@
 			}
 		},
 		"node_modules/finalhandler": {
-			"version": "1.2.0",
-			"resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.2.0.tgz",
-			"integrity": "sha512-5uXcUVftlQMFnWC9qu/svkWv3GTd2PfUhK/3PLkYNAe7FbqJMt3515HaxE6eRL74GdsriiwujiawdaB1BpEISg==",
+			"version": "1.3.2",
+			"resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz",
+			"integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"debug": "2.6.9",
-				"encodeurl": "~1.0.2",
+				"encodeurl": "~2.0.0",
 				"escape-html": "~1.0.3",
-				"on-finished": "2.4.1",
+				"on-finished": "~2.4.1",
 				"parseurl": "~1.3.3",
-				"statuses": "2.0.1",
+				"statuses": "~2.0.2",
 				"unpipe": "~1.0.0"
 			},
 			"engines": {
@@ -10553,6 +11871,7 @@
 			"resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
 			"integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"ms": "2.0.0"
 			}
@@ -10561,7 +11880,8 @@
 			"version": "2.0.0",
 			"resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
 			"integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
-			"dev": true
+			"dev": true,
+			"license": "MIT"
 		},
 		"node_modules/find-cache-dir": {
 			"version": "3.3.2",
@@ -10704,12 +12024,19 @@
 			}
 		},
 		"node_modules/for-each": {
-			"version": "0.3.3",
-			"resolved": "https://registry.npmjs.org/for-each/-/for-each-0.3.3.tgz",
-			"integrity": "sha512-jqYfLp7mo9vIyQf8ykW2v7A+2N4QjeCeI5+Dz9XraiO1ign81wjiH7Fb9vSOWvQfNtmSa4H2RoQTrrXivdUZmw==",
+			"version": "0.3.5",
+			"resolved": "https://registry.npmjs.org/for-each/-/for-each-0.3.5.tgz",
+			"integrity": "sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
-				"is-callable": "^1.1.3"
+				"is-callable": "^1.2.7"
+			},
+			"engines": {
+				"node": ">= 0.4"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/ljharb"
 			}
 		},
 		"node_modules/for-in": {
@@ -10781,6 +12108,7 @@
 			"resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
 			"integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.6"
 			}
@@ -10800,6 +12128,45 @@
 				"node": ">=0.10.0"
 			}
 		},
+		"node_modules/fs-ext-extra-prebuilt": {
+			"version": "2.2.7",
+			"resolved": "https://registry.npmjs.org/fs-ext-extra-prebuilt/-/fs-ext-extra-prebuilt-2.2.7.tgz",
+			"integrity": "sha512-Q7rayYRBDIvDF01HWOwSSjoaP+05N1g+o3BXL1Zf8Frw2JkjSmi4EtvCBITuW30l6hB2m2TW1pehdh8wyU/+gw==",
+			"dev": true,
+			"hasInstallScript": true,
+			"license": "MIT",
+			"dependencies": {
+				"nan": "^2.24.0"
+			},
+			"engines": {
+				"node": ">= 8.0.0"
+			}
+		},
+		"node_modules/fs-extra": {
+			"version": "11.1.1",
+			"resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.1.1.tgz",
+			"integrity": "sha512-MGIE4HOvQCeUCzmlHs0vXpih4ysz4wg9qiSAu6cd42lVwPbTM1TjV7RusoyQqMmk/95gdQZX72u+YW+c3eEpFQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"graceful-fs": "^4.2.0",
+				"jsonfile": "^6.0.1",
+				"universalify": "^2.0.0"
+			},
+			"engines": {
+				"node": ">=14.14"
+			}
+		},
+		"node_modules/fs-extra/node_modules/universalify": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/universalify/-/universalify-2.0.1.tgz",
+			"integrity": "sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">= 10.0.0"
+			}
+		},
 		"node_modules/fs-monkey": {
 			"version": "1.0.6",
 			"resolved": "https://registry.npmjs.org/fs-monkey/-/fs-monkey-1.0.6.tgz",
@@ -10881,16 +12248,22 @@
 			}
 		},
 		"node_modules/get-intrinsic": {
-			"version": "1.2.4",
-			"resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.2.4.tgz",
-			"integrity": "sha512-5uYhsJH8VJBTv7oslg4BznJYhDoRI6waYCxMmCdnTrcCrHA/fCFKoTFz2JKKE0HdDFUF7/oQuhzumXJK7paBRQ==",
+			"version": "1.3.0",
+			"resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+			"integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
+				"call-bind-apply-helpers": "^1.0.2",
+				"es-define-property": "^1.0.1",
 				"es-errors": "^1.3.0",
+				"es-object-atoms": "^1.1.1",
 				"function-bind": "^1.1.2",
-				"has-proto": "^1.0.1",
-				"has-symbols": "^1.0.3",
-				"hasown": "^2.0.0"
+				"get-proto": "^1.0.1",
+				"gopd": "^1.2.0",
+				"has-symbols": "^1.1.0",
+				"hasown": "^2.0.2",
+				"math-intrinsics": "^1.1.0"
 			},
 			"engines": {
 				"node": ">= 0.4"
@@ -10920,6 +12293,20 @@
 				"url": "https://github.com/sponsors/sindresorhus"
 			}
 		},
+		"node_modules/get-proto": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+			"integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"dunder-proto": "^1.0.1",
+				"es-object-atoms": "^1.0.0"
+			},
+			"engines": {
+				"node": ">= 0.4"
+			}
+		},
 		"node_modules/get-stdin": {
 			"version": "9.0.0",
 			"resolved": "https://registry.npmjs.org/get-stdin/-/get-stdin-9.0.0.tgz",
@@ -11128,12 +12515,13 @@
 			"dev": true
 		},
 		"node_modules/gopd": {
-			"version": "1.0.1",
-			"resolved": "https://registry.npmjs.org/gopd/-/gopd-1.0.1.tgz",
-			"integrity": "sha512-d65bNlIadxvpb/A2abVdlqKqV563juRnZ1Wtk6s1sIR8uNsXR70xqIzVqxVf1eTqDunwT2MkczEeaezCKTZhwA==",
+			"version": "1.2.0",
+			"resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+			"integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
 			"dev": true,
-			"dependencies": {
-				"get-intrinsic": "^1.1.3"
+			"license": "MIT",
+			"engines": {
+				"node": ">= 0.4"
 			},
 			"funding": {
 				"url": "https://github.com/sponsors/ljharb"
@@ -11224,10 +12612,11 @@
 			}
 		},
 		"node_modules/has-symbols": {
-			"version": "1.0.3",
-			"resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz",
-			"integrity": "sha512-l3LCuF6MgDNwTDKkdYGEihYjt5pRPbEg46rtlmnSPlUbgmB8LOIrKJbYYFBSbnPaJexMKtiPO8hmeRjRz2Td+A==",
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+			"integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.4"
 			},
@@ -11415,19 +12804,24 @@
 			"dev": true
 		},
 		"node_modules/http-errors": {
-			"version": "2.0.0",
-			"resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
-			"integrity": "sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ==",
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+			"integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
-				"depd": "2.0.0",
-				"inherits": "2.0.4",
-				"setprototypeof": "1.2.0",
-				"statuses": "2.0.1",
-				"toidentifier": "1.0.1"
+				"depd": "~2.0.0",
+				"inherits": "~2.0.4",
+				"setprototypeof": "~1.2.0",
+				"statuses": "~2.0.2",
+				"toidentifier": "~1.0.1"
 			},
 			"engines": {
 				"node": ">= 0.8"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/express"
 			}
 		},
 		"node_modules/http-link-header": {
@@ -12276,12 +13670,13 @@
 			}
 		},
 		"node_modules/is-typed-array": {
-			"version": "1.1.13",
-			"resolved": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.13.tgz",
-			"integrity": "sha512-uZ25/bUAlUY5fR4OKT4rZQEBrzQWYV9ZJYGGsUmEJ6thodVJ1HX64ePQ6Z0qPWP+m+Uq6e9UugrE38jeYsDSMw==",
+			"version": "1.1.15",
+			"resolved": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.15.tgz",
+			"integrity": "sha512-p3EcsicXjit7SaskXHs1hA91QxgTw46Fv6EFKKGS5DRFLD8yKnohjF3hxoju94b/OcMZoQukzpPpBE9uLVKzgQ==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
-				"which-typed-array": "^1.1.14"
+				"which-typed-array": "^1.1.16"
 			},
 			"engines": {
 				"node": ">= 0.4"
@@ -12309,6 +13704,19 @@
 				"url": "https://github.com/sponsors/sindresorhus"
 			}
 		},
+		"node_modules/is-unsafe": {
+			"version": "2.0.0",
+			"resolved": "https://registry.npmjs.org/is-unsafe/-/is-unsafe-2.0.0.tgz",
+			"integrity": "sha512-2LdV822R+wmI86unXA93WCFpL6g+av8ynWk0nrHyJqGop5VoocYsSLFgN8jrfalT6iGeLNM4KXuVSsULP53kEA==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/NaturalIntelligence"
+				}
+			],
+			"license": "MIT"
+		},
 		"node_modules/is-weakmap": {
 			"version": "2.0.2",
 			"resolved": "https://registry.npmjs.org/is-weakmap/-/is-weakmap-2.0.2.tgz",
@@ -12391,6 +13799,74 @@
 				"node": ">=0.10.0"
 			}
 		},
+		"node_modules/isomorphic-git": {
+			"version": "1.37.6",
+			"resolved": "https://registry.npmjs.org/isomorphic-git/-/isomorphic-git-1.37.6.tgz",
+			"integrity": "sha512-qr1NFCPsVTZ6YGqTXw0CzamnsHyH9QQ1OTEfeXIweSljRUMzuHFCJdUn0wc6OcjtTDns6knxjPb7N6LmJeftOA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"async-lock": "^1.4.1",
+				"clean-git-ref": "^2.0.1",
+				"crc-32": "^1.2.0",
+				"diff3": "0.0.3",
+				"ignore": "^5.1.4",
+				"minimisted": "^2.0.0",
+				"pako": "^1.0.10",
+				"pify": "^4.0.1",
+				"readable-stream": "^4.0.0",
+				"sha.js": "^2.4.12",
+				"simple-get": "^4.0.1"
+			},
+			"bin": {
+				"isogit": "cli.cjs"
+			},
+			"engines": {
+				"node": ">=14.17"
+			}
+		},
+		"node_modules/isomorphic-git/node_modules/buffer": {
+			"version": "6.0.3",
+			"resolved": "https://registry.npmjs.org/buffer/-/buffer-6.0.3.tgz",
+			"integrity": "sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/feross"
+				},
+				{
+					"type": "patreon",
+					"url": "https://www.patreon.com/feross"
+				},
+				{
+					"type": "consulting",
+					"url": "https://feross.org/support"
+				}
+			],
+			"license": "MIT",
+			"dependencies": {
+				"base64-js": "^1.3.1",
+				"ieee754": "^1.2.1"
+			}
+		},
+		"node_modules/isomorphic-git/node_modules/readable-stream": {
+			"version": "4.7.0",
+			"resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.7.0.tgz",
+			"integrity": "sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"abort-controller": "^3.0.0",
+				"buffer": "^6.0.3",
+				"events": "^3.3.0",
+				"process": "^0.11.10",
+				"string_decoder": "^1.3.0"
+			},
+			"engines": {
+				"node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+			}
+		},
 		"node_modules/istanbul-lib-coverage": {
 			"version": "3.2.2",
 			"resolved": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.2.tgz",
@@ -13269,6 +14745,65 @@
 			"integrity": "sha512-fQzRfAbIBnR0IQvftw9FJveWiHp72Fg20giDrHz6TdfB12UH/uue0D3hm57UB5KgAVuniLMCaS8P1IMj9NR7cA==",
 			"dev": true
 		},
+		"node_modules/jsonfile": {
+			"version": "6.2.1",
+			"resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.2.1.tgz",
+			"integrity": "sha512-zwOTdL3rFQ/lRdBnntKVOX6k5cKJwEc1HdilT71BWEu7J41gXIB2MRp+vxduPSwZJPWBxEzv4yH1wYLJGUHX4Q==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"universalify": "^2.0.0"
+			},
+			"optionalDependencies": {
+				"graceful-fs": "^4.1.6"
+			}
+		},
+		"node_modules/jsonfile/node_modules/universalify": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/universalify/-/universalify-2.0.1.tgz",
+			"integrity": "sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">= 10.0.0"
+			}
+		},
+		"node_modules/jsonwebtoken": {
+			"version": "9.0.3",
+			"resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.3.tgz",
+			"integrity": "sha512-MT/xP0CrubFRNLNKvxJ2BYfy53Zkm++5bX9dtuPbqAeQpTVe0MQTFhao8+Cp//EmJp244xt6Drw/GVEGCUj40g==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"jws": "^4.0.1",
+				"lodash.includes": "^4.3.0",
+				"lodash.isboolean": "^3.0.3",
+				"lodash.isinteger": "^4.0.4",
+				"lodash.isnumber": "^3.0.3",
+				"lodash.isplainobject": "^4.0.6",
+				"lodash.isstring": "^4.0.1",
+				"lodash.once": "^4.0.0",
+				"ms": "^2.1.1",
+				"semver": "^7.5.4"
+			},
+			"engines": {
+				"node": ">=12",
+				"npm": ">=6"
+			}
+		},
+		"node_modules/jsonwebtoken/node_modules/semver": {
+			"version": "7.8.5",
+			"resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+			"integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+			"dev": true,
+			"license": "ISC",
+			"bin": {
+				"semver": "bin/semver.js"
+			},
+			"engines": {
+				"node": ">=10"
+			}
+		},
 		"node_modules/jsx-ast-utils": {
 			"version": "3.3.5",
 			"resolved": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-3.3.5.tgz",
@@ -13284,6 +14819,29 @@
 				"node": ">=4.0"
 			}
 		},
+		"node_modules/jwa": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/jwa/-/jwa-2.0.1.tgz",
+			"integrity": "sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"buffer-equal-constant-time": "^1.0.1",
+				"ecdsa-sig-formatter": "1.0.11",
+				"safe-buffer": "^5.0.1"
+			}
+		},
+		"node_modules/jws": {
+			"version": "4.0.1",
+			"resolved": "https://registry.npmjs.org/jws/-/jws-4.0.1.tgz",
+			"integrity": "sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"jwa": "^2.0.1",
+				"safe-buffer": "^5.0.1"
+			}
+		},
 		"node_modules/keyv": {
 			"version": "4.5.4",
 			"resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
@@ -13622,6 +15180,48 @@
 			"integrity": "sha512-FT1yDzDYEoYWhnSGnpE/4Kj1fLZkDFyqRb7fNt6FdYOSxlUWAtp42Eh6Wb0rGIv/m9Bgo7x4GhQbm5Ys4SG5ow==",
 			"dev": true
 		},
+		"node_modules/lodash.includes": {
+			"version": "4.3.0",
+			"resolved": "https://registry.npmjs.org/lodash.includes/-/lodash.includes-4.3.0.tgz",
+			"integrity": "sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/lodash.isboolean": {
+			"version": "3.0.3",
+			"resolved": "https://registry.npmjs.org/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz",
+			"integrity": "sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/lodash.isinteger": {
+			"version": "4.0.4",
+			"resolved": "https://registry.npmjs.org/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz",
+			"integrity": "sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/lodash.isnumber": {
+			"version": "3.0.3",
+			"resolved": "https://registry.npmjs.org/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz",
+			"integrity": "sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/lodash.isplainobject": {
+			"version": "4.0.6",
+			"resolved": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz",
+			"integrity": "sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/lodash.isstring": {
+			"version": "4.0.1",
+			"resolved": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz",
+			"integrity": "sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/lodash.memoize": {
 			"version": "4.1.2",
 			"resolved": "https://registry.npmjs.org/lodash.memoize/-/lodash.memoize-4.1.2.tgz",
@@ -13634,6 +15234,13 @@
 			"integrity": "sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==",
 			"dev": true
 		},
+		"node_modules/lodash.once": {
+			"version": "4.1.1",
+			"resolved": "https://registry.npmjs.org/lodash.once/-/lodash.once-4.1.1.tgz",
+			"integrity": "sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/lodash.truncate": {
 			"version": "4.4.2",
 			"resolved": "https://registry.npmjs.org/lodash.truncate/-/lodash.truncate-4.4.2.tgz",
@@ -13886,6 +15493,16 @@
 			"dev": true,
 			"license": "Apache-2.0"
 		},
+		"node_modules/math-intrinsics": {
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+			"integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">= 0.4"
+			}
+		},
 		"node_modules/mathml-tag-names": {
 			"version": "2.1.3",
 			"resolved": "https://registry.npmjs.org/mathml-tag-names/-/mathml-tag-names-2.1.3.tgz",
@@ -13913,6 +15530,7 @@
 			"resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
 			"integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.6"
 			}
@@ -13998,10 +15616,14 @@
 			}
 		},
 		"node_modules/merge-descriptors": {
-			"version": "1.0.1",
-			"resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz",
-			"integrity": "sha512-cCi6g3/Zr1iqQi6ySbseM1Xvooa98N0w31jzUYrXPX2xqObmFGHJ0tQ5u74H3mVh7wLouTseZyYIq39g8cNp1w==",
-			"dev": true
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz",
+			"integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==",
+			"dev": true,
+			"license": "MIT",
+			"funding": {
+				"url": "https://github.com/sponsors/sindresorhus"
+			}
 		},
 		"node_modules/merge-stream": {
 			"version": "2.0.0",
@@ -14089,6 +15711,19 @@
 				"node": ">=6"
 			}
 		},
+		"node_modules/mimic-response": {
+			"version": "3.1.0",
+			"resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz",
+			"integrity": "sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=10"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/sindresorhus"
+			}
+		},
 		"node_modules/min-indent": {
 			"version": "1.0.1",
 			"resolved": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz",
@@ -14180,6 +15815,16 @@
 				"node": ">=0.10.0"
 			}
 		},
+		"node_modules/minimisted": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/minimisted/-/minimisted-2.0.1.tgz",
+			"integrity": "sha512-1oPjfuLQa2caorJUM8HV8lGgWCc0qqAO1MNv/k05G4qslmsndV/5WdNZrqCiyqiz3wohia2Ij2B7w2Dr7/IyrA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"minimist": "^1.2.5"
+			}
+		},
 		"node_modules/mitt": {
 			"version": "3.0.1",
 			"resolved": "https://registry.npmjs.org/mitt/-/mitt-3.0.1.tgz",
@@ -14250,6 +15895,13 @@
 				"multicast-dns": "cli.js"
 			}
 		},
+		"node_modules/nan": {
+			"version": "2.28.0",
+			"resolved": "https://registry.npmjs.org/nan/-/nan-2.28.0.tgz",
+			"integrity": "sha512-fTsDz99OTq2sVePhGdp4qQhggZFtKr64ZNVyVajRKtMOkJxYekplBh577PiJB12v/D3s2E5cGtOI45LWp6rnLQ==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/nanoid": {
 			"version": "3.3.7",
 			"resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.7.tgz",
@@ -14558,10 +16210,11 @@
 			"dev": true
 		},
 		"node_modules/object-inspect": {
-			"version": "1.13.2",
-			"resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.2.tgz",
-			"integrity": "sha512-IRZSRuzJiynemAXPYtPe5BoI/RESNYR7TYm50MC5Mqbd3Jmw5y790sErYw3V6SryFJD64b74qQQs9wn5Bg/k3g==",
+			"version": "1.13.4",
+			"resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+			"integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.4"
 			},
@@ -14681,11 +16334,34 @@
 			"integrity": "sha512-PX1wu0AmAdPqOL1mWhqmlOd8kOIZQwGZw6rh7uby9fTc5lhaOWFLX3I6R1hrF9k3zUY40e6igsLGkDXK92LJNg==",
 			"dev": true
 		},
+		"node_modules/octokit": {
+			"version": "3.1.2",
+			"resolved": "https://registry.npmjs.org/octokit/-/octokit-3.1.2.tgz",
+			"integrity": "sha512-MG5qmrTL5y8KYwFgE1A4JWmgfQBaIETE/lOlfwNYx1QOtCQHGVxkRJmdUJltFc1HVn73d61TlMhMyNTOtMl+ng==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@octokit/app": "^14.0.2",
+				"@octokit/core": "^5.0.0",
+				"@octokit/oauth-app": "^6.0.0",
+				"@octokit/plugin-paginate-graphql": "^4.0.0",
+				"@octokit/plugin-paginate-rest": "^9.0.0",
+				"@octokit/plugin-rest-endpoint-methods": "^10.0.0",
+				"@octokit/plugin-retry": "^6.0.0",
+				"@octokit/plugin-throttling": "^8.0.0",
+				"@octokit/request-error": "^5.0.0",
+				"@octokit/types": "^12.0.0"
+			},
+			"engines": {
+				"node": ">= 18"
+			}
+		},
 		"node_modules/on-finished": {
 			"version": "2.4.1",
 			"resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
 			"integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"ee-first": "1.1.1"
 			},
@@ -14923,6 +16599,13 @@
 				"node": ">= 14"
 			}
 		},
+		"node_modules/pako": {
+			"version": "1.0.11",
+			"resolved": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz",
+			"integrity": "sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==",
+			"dev": true,
+			"license": "(MIT AND Zlib)"
+		},
 		"node_modules/param-case": {
 			"version": "3.0.4",
 			"resolved": "https://registry.npmjs.org/param-case/-/param-case-3.0.4.tgz",
@@ -15028,6 +16711,22 @@
 				"node": ">=8"
 			}
 		},
+		"node_modules/path-expression-matcher": {
+			"version": "1.6.2",
+			"resolved": "https://registry.npmjs.org/path-expression-matcher/-/path-expression-matcher-1.6.2.tgz",
+			"integrity": "sha512-enSlaiat05iasnzmgNxRj8reFdj3puY2QpNgP1aPIaVfT6nn9ICuPoFlKHk8EN22HcwewshO+mN2DGbkCEOtqQ==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/NaturalIntelligence"
+				}
+			],
+			"license": "MIT",
+			"engines": {
+				"node": ">=14.0.0"
+			}
+		},
 		"node_modules/path-is-absolute": {
 			"version": "1.0.1",
 			"resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
@@ -15059,10 +16758,11 @@
 			"dev": true
 		},
 		"node_modules/path-to-regexp": {
-			"version": "0.1.7",
-			"resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz",
-			"integrity": "sha512-5DFkuoqlv1uYQKxy8omFBeJPQcdoE07Kv2sferDCrAq1ohOU+MSDswDIbnx3YAM60qIOnYa53wBhXW0EbMonrQ==",
-			"dev": true
+			"version": "0.1.13",
+			"resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz",
+			"integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==",
+			"dev": true,
+			"license": "MIT"
 		},
 		"node_modules/path-type": {
 			"version": "4.0.0",
@@ -15976,6 +17676,16 @@
 				"url": "https://github.com/chalk/ansi-styles?sponsor=1"
 			}
 		},
+		"node_modules/process": {
+			"version": "0.11.10",
+			"resolved": "https://registry.npmjs.org/process/-/process-0.11.10.tgz",
+			"integrity": "sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">= 0.6.0"
+			}
+		},
 		"node_modules/process-nextick-args": {
 			"version": "2.0.1",
 			"resolved": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
@@ -16261,12 +17971,14 @@
 			]
 		},
 		"node_modules/qs": {
-			"version": "6.11.0",
-			"resolved": "https://registry.npmjs.org/qs/-/qs-6.11.0.tgz",
-			"integrity": "sha512-MvjoMCJwEarSbUYk5O+nmoSzSutSsTwF85zcHPQ9OrlFoZOYIjaqBAJIqIXjptyD5vThxGq52Xu/MaJzRkIk4Q==",
+			"version": "6.15.3",
+			"resolved": "https://registry.npmjs.org/qs/-/qs-6.15.3.tgz",
+			"integrity": "sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==",
 			"dev": true,
+			"license": "BSD-3-Clause",
 			"dependencies": {
-				"side-channel": "^1.0.4"
+				"es-define-property": "^1.0.1",
+				"side-channel": "^1.1.1"
 			},
 			"engines": {
 				"node": ">=0.6"
@@ -16329,15 +18041,16 @@
 			}
 		},
 		"node_modules/raw-body": {
-			"version": "2.5.2",
-			"resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz",
-			"integrity": "sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==",
+			"version": "2.5.3",
+			"resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz",
+			"integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
-				"bytes": "3.1.2",
-				"http-errors": "2.0.0",
-				"iconv-lite": "0.4.24",
-				"unpipe": "1.0.0"
+				"bytes": "~3.1.2",
+				"http-errors": "~2.0.1",
+				"iconv-lite": "~0.4.24",
+				"unpipe": "~1.0.0"
 			},
 			"engines": {
 				"node": ">= 0.8"
@@ -16348,6 +18061,7 @@
 			"resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
 			"integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.8"
 			}
@@ -16357,6 +18071,7 @@
 			"resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
 			"integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"safer-buffer": ">= 2.1.2 < 3"
 			},
@@ -17052,6 +18767,16 @@
 				}
 			}
 		},
+		"node_modules/sax": {
+			"version": "1.6.0",
+			"resolved": "https://registry.npmjs.org/sax/-/sax-1.6.0.tgz",
+			"integrity": "sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==",
+			"dev": true,
+			"license": "BlueOak-1.0.0",
+			"engines": {
+				"node": ">=11.0.0"
+			}
+		},
 		"node_modules/saxes": {
 			"version": "6.0.0",
 			"resolved": "https://registry.npmjs.org/saxes/-/saxes-6.0.0.tgz",
@@ -17156,24 +18881,25 @@
 			}
 		},
 		"node_modules/send": {
-			"version": "0.18.0",
-			"resolved": "https://registry.npmjs.org/send/-/send-0.18.0.tgz",
-			"integrity": "sha512-qqWzuOjSFOuqPjFe4NOsMLafToQQwBSOEpS+FwEt3A2V3vKubTquT3vmLTQpFgMXp8AlFWFuP1qKaJZOtPpVXg==",
+			"version": "0.19.2",
+			"resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz",
+			"integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"debug": "2.6.9",
 				"depd": "2.0.0",
 				"destroy": "1.2.0",
-				"encodeurl": "~1.0.2",
+				"encodeurl": "~2.0.0",
 				"escape-html": "~1.0.3",
 				"etag": "~1.8.1",
-				"fresh": "0.5.2",
-				"http-errors": "2.0.0",
+				"fresh": "~0.5.2",
+				"http-errors": "~2.0.1",
 				"mime": "1.6.0",
 				"ms": "2.1.3",
-				"on-finished": "2.4.1",
+				"on-finished": "~2.4.1",
 				"range-parser": "~1.2.1",
-				"statuses": "2.0.1"
+				"statuses": "~2.0.2"
 			},
 			"engines": {
 				"node": ">= 0.8.0"
@@ -17184,6 +18910,7 @@
 			"resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
 			"integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"ms": "2.0.0"
 			}
@@ -17192,13 +18919,15 @@
 			"version": "2.0.0",
 			"resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
 			"integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
-			"dev": true
+			"dev": true,
+			"license": "MIT"
 		},
 		"node_modules/send/node_modules/mime": {
 			"version": "1.6.0",
 			"resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
 			"integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
 			"dev": true,
+			"license": "MIT",
 			"bin": {
 				"mime": "cli.js"
 			},
@@ -17210,7 +18939,8 @@
 			"version": "2.1.3",
 			"resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
 			"integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
-			"dev": true
+			"dev": true,
+			"license": "MIT"
 		},
 		"node_modules/sentence-case": {
 			"version": "3.0.4",
@@ -17311,15 +19041,16 @@
 			}
 		},
 		"node_modules/serve-static": {
-			"version": "1.15.0",
-			"resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz",
-			"integrity": "sha512-XGuRDNjXUijsUL0vl6nSD7cwURuzEgglbOaFuZM9g3kwDXOWVTck0jLzjPzGD+TazWbboZYu52/9/XPdUgne9g==",
+			"version": "1.16.3",
+			"resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz",
+			"integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
-				"encodeurl": "~1.0.2",
+				"encodeurl": "~2.0.0",
 				"escape-html": "~1.0.3",
 				"parseurl": "~1.3.3",
-				"send": "0.18.0"
+				"send": "~0.19.1"
 			},
 			"engines": {
 				"node": ">= 0.8.0"
@@ -17361,7 +19092,29 @@
 			"version": "1.2.0",
 			"resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
 			"integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
-			"dev": true
+			"dev": true,
+			"license": "ISC"
+		},
+		"node_modules/sha.js": {
+			"version": "2.4.12",
+			"resolved": "https://registry.npmjs.org/sha.js/-/sha.js-2.4.12.tgz",
+			"integrity": "sha512-8LzC5+bvI45BjpfXU8V5fdU2mfeKiQe1D1gIMn7XUlF3OTUrpdJpPPH4EMAnF0DsHHdSZqCdSss5qCmJKuiO3w==",
+			"dev": true,
+			"license": "(MIT AND BSD-3-Clause)",
+			"dependencies": {
+				"inherits": "^2.0.4",
+				"safe-buffer": "^5.2.1",
+				"to-buffer": "^1.2.0"
+			},
+			"bin": {
+				"sha.js": "bin.js"
+			},
+			"engines": {
+				"node": ">= 0.10"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/ljharb"
+			}
 		},
 		"node_modules/shallow-clone": {
 			"version": "0.1.2",
@@ -17437,15 +19190,73 @@
 			"license": "BSD-2-Clause"
 		},
 		"node_modules/side-channel": {
-			"version": "1.0.6",
-			"resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.6.tgz",
-			"integrity": "sha512-fDW/EZ6Q9RiO8eFG8Hj+7u/oW+XrPTIChwCOM2+th2A6OblDtYYIpve9m+KvI9Z4C9qSEXlaGR6bTEYHReuglA==",
+			"version": "1.1.1",
+			"resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
+			"integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
-				"call-bind": "^1.0.7",
 				"es-errors": "^1.3.0",
-				"get-intrinsic": "^1.2.4",
-				"object-inspect": "^1.13.1"
+				"object-inspect": "^1.13.4",
+				"side-channel-list": "^1.0.1",
+				"side-channel-map": "^1.0.1",
+				"side-channel-weakmap": "^1.0.2"
+			},
+			"engines": {
+				"node": ">= 0.4"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/ljharb"
+			}
+		},
+		"node_modules/side-channel-list": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+			"integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"es-errors": "^1.3.0",
+				"object-inspect": "^1.13.4"
+			},
+			"engines": {
+				"node": ">= 0.4"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/ljharb"
+			}
+		},
+		"node_modules/side-channel-map": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+			"integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"call-bound": "^1.0.2",
+				"es-errors": "^1.3.0",
+				"get-intrinsic": "^1.2.5",
+				"object-inspect": "^1.13.3"
+			},
+			"engines": {
+				"node": ">= 0.4"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/ljharb"
+			}
+		},
+		"node_modules/side-channel-weakmap": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+			"integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"call-bound": "^1.0.2",
+				"es-errors": "^1.3.0",
+				"get-intrinsic": "^1.2.5",
+				"object-inspect": "^1.13.3",
+				"side-channel-map": "^1.0.1"
 			},
 			"engines": {
 				"node": ">= 0.4"
@@ -17460,6 +19271,53 @@
 			"integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==",
 			"dev": true
 		},
+		"node_modules/simple-concat": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz",
+			"integrity": "sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/feross"
+				},
+				{
+					"type": "patreon",
+					"url": "https://www.patreon.com/feross"
+				},
+				{
+					"type": "consulting",
+					"url": "https://feross.org/support"
+				}
+			],
+			"license": "MIT"
+		},
+		"node_modules/simple-get": {
+			"version": "4.0.1",
+			"resolved": "https://registry.npmjs.org/simple-get/-/simple-get-4.0.1.tgz",
+			"integrity": "sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/feross"
+				},
+				{
+					"type": "patreon",
+					"url": "https://www.patreon.com/feross"
+				},
+				{
+					"type": "consulting",
+					"url": "https://feross.org/support"
+				}
+			],
+			"license": "MIT",
+			"dependencies": {
+				"decompress-response": "^6.0.0",
+				"once": "^1.3.1",
+				"simple-concat": "^1.0.0"
+			}
+		},
 		"node_modules/sirv": {
 			"version": "2.0.4",
 			"resolved": "https://registry.npmjs.org/sirv/-/sirv-2.0.4.tgz",
@@ -17783,10 +19641,11 @@
 			"dev": true
 		},
 		"node_modules/statuses": {
-			"version": "2.0.1",
-			"resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
-			"integrity": "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==",
+			"version": "2.0.2",
+			"resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+			"integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.8"
 			}
@@ -18027,6 +19886,22 @@
 				"node": ">=0.8.0"
 			}
 		},
+		"node_modules/strnum": {
+			"version": "2.4.1",
+			"resolved": "https://registry.npmjs.org/strnum/-/strnum-2.4.1.tgz",
+			"integrity": "sha512-M9eUSMT2dCB2cTNPG7UYj6KuK7RJR2SN2+yCV/fTW3xzTCS6EaGZ5pSMgDIjB7r8zSfTGk+dvvn9rTjpVS9Mwg==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/NaturalIntelligence"
+				}
+			],
+			"license": "MIT",
+			"dependencies": {
+				"anynum": "^1.0.1"
+			}
+		},
 		"node_modules/stubborn-fs": {
 			"version": "2.0.0",
 			"resolved": "https://registry.npmjs.org/stubborn-fs/-/stubborn-fs-2.0.0.tgz",
@@ -18653,12 +20528,47 @@
 				"tldts-core": "^7.0.28"
 			}
 		},
+		"node_modules/tmp": {
+			"version": "0.2.7",
+			"resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.7.tgz",
+			"integrity": "sha512-e0votIpp4Uo2AJYSzVHV6xCcawuiez3DzqDAbrTc3YxBkplN6e+dM13ZeIcZnDg/QpSuU2zfZ3rzwY8ukEnaXw==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=14.14"
+			}
+		},
+		"node_modules/tmp-promise": {
+			"version": "3.0.3",
+			"resolved": "https://registry.npmjs.org/tmp-promise/-/tmp-promise-3.0.3.tgz",
+			"integrity": "sha512-RwM7MoPojPxsOBYnyd2hy0bxtIlVrihNs9pj5SUvY8Zz1sQcQG2tG1hSr8PDxfgEB8RNKDhqbIlroIarSNDNsQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"tmp": "^0.2.0"
+			}
+		},
 		"node_modules/tmpl": {
 			"version": "1.0.5",
 			"resolved": "https://registry.npmjs.org/tmpl/-/tmpl-1.0.5.tgz",
 			"integrity": "sha512-3f0uOEAQwIqGuWW2MVzYg8fV/QNnc/IpuJNG837rLuczAaLVHslWHZQj4IGiEl5Hs3kkbhwL9Ab7Hrsmuj+Smw==",
 			"dev": true
 		},
+		"node_modules/to-buffer": {
+			"version": "1.2.2",
+			"resolved": "https://registry.npmjs.org/to-buffer/-/to-buffer-1.2.2.tgz",
+			"integrity": "sha512-db0E3UJjcFhpDhAF4tLo03oli3pwl3dbnzXOUIlRKrp+ldk/VUxzpWYZENsw2SZiuBjHAk7DfB0VU7NKdpb6sw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"isarray": "^2.0.5",
+				"safe-buffer": "^5.2.1",
+				"typed-array-buffer": "^1.0.3"
+			},
+			"engines": {
+				"node": ">= 0.4"
+			}
+		},
 		"node_modules/to-fast-properties": {
 			"version": "2.0.0",
 			"resolved": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-2.0.0.tgz",
@@ -18685,6 +20595,7 @@
 			"resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
 			"integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">=0.6"
 			}
@@ -18875,6 +20786,7 @@
 			"resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
 			"integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"media-typer": "0.3.0",
 				"mime-types": "~2.1.24"
@@ -18884,14 +20796,15 @@
 			}
 		},
 		"node_modules/typed-array-buffer": {
-			"version": "1.0.2",
-			"resolved": "https://registry.npmjs.org/typed-array-buffer/-/typed-array-buffer-1.0.2.tgz",
-			"integrity": "sha512-gEymJYKZtKXzzBzM4jqa9w6Q1Jjm7x2d+sh19AdsD4wqnMPDYyvwpsIc2Q/835kHuo3BEQ7CjelGhfTsoBb2MQ==",
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/typed-array-buffer/-/typed-array-buffer-1.0.3.tgz",
+			"integrity": "sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
-				"call-bind": "^1.0.7",
+				"call-bound": "^1.0.3",
 				"es-errors": "^1.3.0",
-				"is-typed-array": "^1.1.13"
+				"is-typed-array": "^1.1.14"
 			},
 			"engines": {
 				"node": ">= 0.4"
@@ -19078,6 +20991,24 @@
 				"node": ">=8"
 			}
 		},
+		"node_modules/universal-github-app-jwt": {
+			"version": "1.2.0",
+			"resolved": "https://registry.npmjs.org/universal-github-app-jwt/-/universal-github-app-jwt-1.2.0.tgz",
+			"integrity": "sha512-dncpMpnsKBk0eetwfN8D8OUHGfiDhhJ+mtsbMl+7PfW7mYjiH8LIcqRmYMtzYLgSh47HjfdBtrBwIQ/gizKR3g==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@types/jsonwebtoken": "^9.0.0",
+				"jsonwebtoken": "^9.0.2"
+			}
+		},
+		"node_modules/universal-user-agent": {
+			"version": "6.0.1",
+			"resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.1.tgz",
+			"integrity": "sha512-yCzhz6FN2wU1NiiQRogkTQszlQSlpWaw8SvVegAc+bDxbzHgh1vX8uIe8OYyMH6DwH+sdTJsgMl36+mSMdRJIQ==",
+			"dev": true,
+			"license": "ISC"
+		},
 		"node_modules/universalify": {
 			"version": "0.2.0",
 			"resolved": "https://registry.npmjs.org/universalify/-/universalify-0.2.0.tgz",
@@ -19092,6 +21023,7 @@
 			"resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
 			"integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">= 0.8"
 			}
@@ -19330,6 +21262,13 @@
 				"makeerror": "1.0.12"
 			}
 		},
+		"node_modules/wasm-feature-detect": {
+			"version": "1.8.0",
+			"resolved": "https://registry.npmjs.org/wasm-feature-detect/-/wasm-feature-detect-1.8.0.tgz",
+			"integrity": "sha512-zksaLKM2fVlnB5jQQDqKXXwYHLQUVH9es+5TOOHwGOVJOCeRBCiPjwSg+3tN2AdTCzjgli4jijCH290kXb/zWQ==",
+			"dev": true,
+			"license": "Apache-2.0"
+		},
 		"node_modules/watchpack": {
 			"version": "2.4.1",
 			"resolved": "https://registry.npmjs.org/watchpack/-/watchpack-2.4.1.tgz",
@@ -19893,15 +21832,18 @@
 			}
 		},
 		"node_modules/which-typed-array": {
-			"version": "1.1.15",
-			"resolved": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.15.tgz",
-			"integrity": "sha512-oV0jmFtUky6CXfkqehVvBP/LSWJ2sy4vWMioiENyJLePrBO/yKyV9OyJySfAKosh+RYkIl5zJCNZ8/4JncrpdA==",
+			"version": "1.1.22",
+			"resolved": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.22.tgz",
+			"integrity": "sha512-fvO4ExWMFsqyhG3AiPAObMuY1lxaqgYcxbc49CNdWDDECOJNgQyvsOWVwbZc+qf3rzRtxojBK+CMEv0Ld5CYpw==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"available-typed-arrays": "^1.0.7",
-				"call-bind": "^1.0.7",
-				"for-each": "^0.3.3",
-				"gopd": "^1.0.1",
+				"call-bind": "^1.0.9",
+				"call-bound": "^1.0.4",
+				"for-each": "^0.3.5",
+				"get-proto": "^1.0.1",
+				"gopd": "^1.2.0",
 				"has-tostringtag": "^1.0.2"
 			},
 			"engines": {
@@ -19963,10 +21905,11 @@
 			}
 		},
 		"node_modules/ws": {
-			"version": "8.18.0",
-			"resolved": "https://registry.npmjs.org/ws/-/ws-8.18.0.tgz",
-			"integrity": "sha512-8VbfWfHLbbwu3+N6OKsOMpBdT4kXPDDB9cJk2bJ6mh9ucxdlnNvH1e+roYkKmN9Nxw2yjz7VzeO9oOz2zJ04Pw==",
+			"version": "8.21.0",
+			"resolved": "https://registry.npmjs.org/ws/-/ws-8.21.0.tgz",
+			"integrity": "sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">=10.0.0"
 			},
@@ -20005,6 +21948,46 @@
 				"node": ">=12"
 			}
 		},
+		"node_modules/xml-naming": {
+			"version": "0.3.0",
+			"resolved": "https://registry.npmjs.org/xml-naming/-/xml-naming-0.3.0.tgz",
+			"integrity": "sha512-ghig2TBE/H11aOVgmahA3MhimvkBr6JIYknH/Dhdk10nXwdbIqBJsbfMxpvFPG8bAw77gN29aQWvKpmVoPlvPQ==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/NaturalIntelligence"
+				}
+			],
+			"license": "MIT",
+			"engines": {
+				"node": ">=16.0.0"
+			}
+		},
+		"node_modules/xml2js": {
+			"version": "0.6.2",
+			"resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.6.2.tgz",
+			"integrity": "sha512-T4rieHaC1EXcES0Kxxj4JWgaUQHDk+qwHcYOCFHfiwKz7tOVPLq7Hjq9dM1WCMhylqMEfP7hMcOIChvotiZegA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"sax": ">=0.6.0",
+				"xmlbuilder": "~11.0.0"
+			},
+			"engines": {
+				"node": ">=4.0.0"
+			}
+		},
+		"node_modules/xmlbuilder": {
+			"version": "11.0.1",
+			"resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz",
+			"integrity": "sha512-fDlsI/kFEx7gLvbecc0/ohLG50fugQp8ryHzMTuW9vSa1GJ0XYWKnhsUx7oie3G98+r56aTQIUB4kht42R3JvA==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=4.0"
+			}
+		},
 		"node_modules/xmlchars": {
 			"version": "2.2.0",
 			"resolved": "https://registry.npmjs.org/xmlchars/-/xmlchars-2.2.0.tgz",
@@ -20103,6 +22086,13 @@
 			"funding": {
 				"url": "https://github.com/sponsors/colinhacks"
 			}
+		},
+		"node_modules/zstddec": {
+			"version": "0.2.0",
+			"resolved": "https://registry.npmjs.org/zstddec/-/zstddec-0.2.0.tgz",
+			"integrity": "sha512-oyPnDa1X5c13+Y7mA/FDMNJrn4S8UNBe0KCqtDmor40Re7ALrPN6npFwyYVRRh+PqozZQdeg23QtbcamZnG5rA==",
+			"dev": true,
+			"license": "MIT AND BSD-3-Clause"
 		}
 	}
 }
diff --git a/package.json b/package.json
index e4233f9..049f7ba 100644
--- a/package.json
+++ b/package.json
@@ -14,7 +14,7 @@
 		"lint:js": "wp-scripts lint-js",
 		"lint:js:fix": "wp-scripts lint-js --fix",
 		"packages-update": "wp-scripts packages-update",
-		"playground:start": "npx --yes @wp-playground/cli@latest server --blueprint=blueprint.json --port=9400 --auto-mount",
+		"playground:start": "wp-playground-cli server --blueprint=blueprint.json --port=9400 --auto-mount",
 		"plugin-zip": "wp-scripts plugin-zip",
 		"start": "wp-scripts start --webpack-copy-php",
 		"test:e2e": "playwright test",
@@ -24,6 +24,7 @@
 	"devDependencies": {
 		"@playwright/test": "^1.49.0",
 		"@wordpress/e2e-test-utils-playwright": "^1.15.0",
-		"@wordpress/scripts": "^27.9.0"
+		"@wordpress/scripts": "^27.9.0",
+		"@wp-playground/cli": "^3.1.45"
 	}
 }
diff --git a/playwright.config.js b/playwright.config.js
index 72805b2..a607620 100644
--- a/playwright.config.js
+++ b/playwright.config.js
@@ -3,6 +3,11 @@
  */
 const config = {
 	testDir: './tests',
+	// The WordPress Playground server is started/stopped programmatically for
+	// the whole run (see tests/global-setup.js) instead of via a webServer
+	// command — no independent server process to start and poll in CI.
+	globalSetup: require.resolve( './tests/global-setup.js' ),
+	globalTeardown: require.resolve( './tests/global-teardown.js' ),
 	fullyParallel: true,
 	forbidOnly: !! process.env.CI,
 	retries: process.env.CI ? 2 : 0,
@@ -13,7 +18,9 @@ const config = {
 		[ 'list' ],
 	],
 	use: {
-		baseURL: process.env.WP_BASE_URL || 'http://127.0.0.1:9400',
+		baseURL:
+			process.env.WP_BASE_URL ||
+			`http://127.0.0.1:${ process.env.WP_PORT || 9400 }`,
 		trace: 'on-first-retry',
 	},
 	projects: [
@@ -22,18 +29,6 @@ const config = {
 			use: { browserName: 'chromium' },
 		},
 	],
-	webServer: process.env.CI
-		? undefined
-		: {
-				command: `npm run playground:start`,
-				url: process.env.WP_BASE_URL || 'http://127.0.0.1:9400',
-				wait: {
-					stdout: /Ready\!/,
-				},
-				stdout: 'pipe',
-				reuseExistingServer: true,
-				timeout: 60000,
-		  },
 };
 
 module.exports = config;
diff --git a/readme.txt b/readme.txt
index 3bbc5db..a13b016 100644
--- a/readme.txt
+++ b/readme.txt
@@ -2,7 +2,7 @@
 Contributors:      Human Made Limited
 Tags:              block, hubspot, forms
 Tested up to:      6.9
-Stable tag:        0.5.0
+Stable tag:        0.6.0
 License:           GPL-2.0-or-later
 License URI:       https://www.gnu.org/licenses/gpl-2.0.html
 
@@ -47,6 +47,14 @@ e.g.
 
 == Changelog ==
 
+= 0.6.0 =
+* Add: Gated success content is now fetched from a REST endpoint (`/hubspot-form-block/v1/unlock`) after submission instead of being embedded in the page — the content can no longer be read from the page source without submitting the form
+* Add: Strong gating mode — configure a HubSpot private app access token (`HUBSPOT_FORMS_PRIVATE_TOKEN` constant or `hubspot_form_block_private_token` filter) and the server verifies a real submission against HubSpot's Submissions API before releasing the content
+* Add: Best-effort mode (no token) keeps content out of the page source as a sensible default
+* Add: Signed, expiring unlock tokens so returning visitors with gated content enabled see it again without re-submitting; per-IP rate limiting (proxy/CDN-aware, checks forwarded headers with `hubspot_form_block_client_ip*` filters) and transient caching on the endpoint
+* Update: `view.js` fetches and injects the success message (polling with backoff while verification is pending) and shows a graceful pending message on failure
+* Remove: The server-rendered `<template>` success-message element and the localStorage pre-swap clone
+
 = 0.5.0 =
 * Add: Inner blocks as inline success message — add any WordPress blocks (paragraphs, images, embeds, etc.) directly inside the form block; they replace the form after successful submission
 * Add: Playwright end-to-end test suite covering block registration, form rendering, and inline success message behaviour
diff --git a/src/block.json b/src/block.json
index a83f400..4153ae6 100644
--- a/src/block.json
+++ b/src/block.json
@@ -2,7 +2,7 @@
 	"$schema": "https://schemas.wp.org/trunk/block.json",
 	"apiVersion": 3,
 	"name": "hubspot/form",
-	"version": "0.5.0",
+	"version": "0.6.0",
 	"title": "Hubspot Form",
 	"category": "embed",
 	"icon": "clipboard",
diff --git a/src/edit.js b/src/edit.js
index 538f80c..5a04d1d 100644
--- a/src/edit.js
+++ b/src/edit.js
@@ -245,7 +245,7 @@ export default function Edit( { attributes, setAttributes, clientId } ) {
 							'hubspot-form-block'
 						) }
 						help={ __(
-							'Remembers submissions in this browser per page. Use the "First Submission Message" block inside the success message area for content only shown immediately after submitting.',
+							'Gated content is fetched from the server only after submission, not embedded in the page. Configure a HubSpot private app token to verify submissions server-side. Use the "First Submission Message" block for content only shown immediately after submitting.',
 							'hubspot-form-block'
 						) }
 						checked={ persistSuccess }
diff --git a/src/render.php b/src/render.php
index 0fd1647..c9a13f4 100644
--- a/src/render.php
+++ b/src/render.php
@@ -78,18 +78,31 @@
 	$config['storageKey']     = 'hs-form-submitted:' . $form_id;
 }
 
-// Add inline message if inner blocks present.
+// Detect inline (gated) message inner blocks. The content itself is NOT
+// emitted into the page — it is fetched from the unlock REST endpoint after a
+// submission so it can't be read from the page source without submitting.
 $has_inline_message = (
 	! isset( $config['redirectUrl'] ) &&
 	! empty( $block->parsed_block['innerBlocks'] ) &&
 	trim( $block->parsed_block['innerBlocks'][0]['innerHTML'] ) !== '<p></p>'
 );
 if ( $has_inline_message ) {
-	$inline_message = new WP_HTML_Tag_Processor( $content );
-	$inline_message->next_tag( 'div' );
-	$inline_message->remove_class( 'wp-block-hubspot-form' );
-	$inline_message->add_class( 'wp-block-hubspot-form__inline-message' );
-	$inline_message_html = (string) $inline_message;
+	$config['gated']    = true;
+	$config['postId']   = $block->context['postId'] ?? get_the_ID();
+	$config['formId']   = $form_id;
+	$config['instance'] = $instance_id;
+	$config['restUrl']  = rest_url( 'hubspot-form-block/v1/unlock' );
+
+	/**
+	 * Filter the message shown when a submission succeeds but the gated content
+	 * can't be verified/retrieved in time.
+	 *
+	 * @param string $message Pending message text.
+	 */
+	$config['pendingMessage'] = (string) apply_filters(
+		'hubspot_form_block_pending_message',
+		__( 'Thank you! Your content will be available shortly — please check your email.', 'hubspot-form-block' )
+	);
 }
 
 // Google Tag Manager event.
@@ -108,9 +121,6 @@
 	window.hsForms = window.hsForms || {};
 	window.hsForms['<?php echo esc_js( $target ); ?>'] = <?php echo wp_json_encode( $config ); ?>;
 </script>
-<?php if ( $has_inline_message ) : ?>
-<template id="<?php echo esc_attr( $target ); ?>-inline-message"><?php echo $inline_message_html; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- server-rendered trusted block content ?></template>
-<?php endif; ?>
 <div <?php echo get_block_wrapper_attributes( $wrapper_attributes ); ?>>
 	<div class="wp-block-hubspot-form__loading"></div>
 	<noscript>
@@ -119,31 +129,34 @@
 </div>
 <?php if ( $has_inline_message && ! empty( $attributes['persistSuccess'] ) ) : ?>
 <script type="text/javascript">
+	// Returning-visitor no-flash hide: if this page was previously unlocked,
+	// hide the form container immediately. view.js then re-fetches the gated
+	// content from the unlock endpoint using the stored token. No content is
+	// exposed here — this only toggles a CSS class.
 	( function () {
 		try {
 			var cfg = window.hsForms && window.hsForms[ '<?php echo esc_js( $target ); ?>' ];
 			if ( ! cfg || ! cfg.persistSuccess || ! cfg.storageKey ) {
 				return;
 			}
-			var paths = [];
-			try { paths = JSON.parse( localStorage.getItem( cfg.storageKey ) || '[]' ); } catch ( e ) {}
-			if ( ! Array.isArray( paths ) || ! paths.includes( window.location.pathname ) ) {
+			var entries = [];
+			try { entries = JSON.parse( localStorage.getItem( cfg.storageKey ) || '[]' ); } catch ( e ) {}
+			if ( ! Array.isArray( entries ) ) {
 				return;
 			}
-			var tmpl = document.getElementById( '<?php echo esc_js( $target ); ?>-inline-message' );
-			var el   = document.getElementById( '<?php echo esc_js( $target ); ?>' );
-			if ( ! tmpl || ! el ) {
+			var hit = entries.some( function ( entry ) {
+				if ( typeof entry === 'string' ) {
+					return entry === window.location.pathname;
+				}
+				return entry && entry.path === window.location.pathname;
+			} );
+			if ( ! hit ) {
 				return;
 			}
-			var frag = tmpl.content.cloneNode( true );
-			frag.querySelectorAll( '.is-hubspot-form-first-submission' ).forEach( function ( n ) {
-				n.remove();
-			} );
-			el.replaceChildren( frag );
-			el.removeAttribute( 'data-form-id' );
-			el.removeAttribute( 'data-portal-id' );
-			el.removeAttribute( 'data-region' );
-			el.classList.remove( 'hs-form-html' );
+			var el = document.getElementById( '<?php echo esc_js( $target ); ?>' );
+			if ( el ) {
+				el.classList.add( 'is-unlocking' );
+			}
 		} catch ( e ) {}
 	} )();
 </script>
diff --git a/src/style.scss b/src/style.scss
index 96af2a9..2db1b42 100644
--- a/src/style.scss
+++ b/src/style.scss
@@ -11,3 +11,20 @@
 .wp-block-hubspot-form .hs-form__virality-link {
 	display: none;
 }
+
+/* While gated content is being fetched/verified, hide the form to avoid a
+ * flash of the form on returning visits. A short fetch then injects the
+ * content or a pending message. */
+.hs-form-html.is-unlocking > * {
+	display: none;
+}
+
+.wp-block-hubspot-form__pending {
+	opacity: 1;
+	transition: all 300ms ease-in;
+
+	/* stylelint-disable-next-line scss/at-rule-no-unknown */
+	@starting-style {
+		opacity: 0;
+	}
+}
diff --git a/src/view.js b/src/view.js
index 3f53837..dc1b94a 100644
--- a/src/view.js
+++ b/src/view.js
@@ -1,5 +1,227 @@
 /* global HubSpotFormsV4, dataLayer, localStorage */
 
+const PENDING_RETRIES = 5;
+const REQUEST_TIMEOUT = 10000;
+
+/**
+ * Resolve after `ms` milliseconds.
+ *
+ * @param {number} ms Delay.
+ * @return {Promise<void>} Promise.
+ */
+function wait( ms ) {
+	return new Promise( ( resolve ) => setTimeout( resolve, ms ) );
+}
+
+/**
+ * Exponential backoff (capped) for a given attempt.
+ *
+ * @param {number} attempt Zero-based attempt index.
+ * @return {number} Delay in milliseconds.
+ */
+function backoff( attempt ) {
+	return Math.min( 1000 * Math.pow( 2, attempt ), 8000 );
+}
+
+/**
+ * Read the persisted-unlock entries for a storage key.
+ *
+ * @param {string} key Storage key.
+ * @return {Array} Entries (objects `{ path, token }`, or legacy path strings).
+ */
+function readStore( key ) {
+	try {
+		const value = JSON.parse( localStorage.getItem( key ) || '[]' );
+		return Array.isArray( value ) ? value : [];
+	} catch ( e ) {
+		return [];
+	}
+}
+
+/**
+ * Return the stored unlock token for the current path, if any.
+ *
+ * @param {Object} config Form config.
+ * @return {{ found: boolean, token: ?string }} Lookup result.
+ */
+function storedUnlockForPath( config ) {
+	if ( ! config.storageKey ) {
+		return { found: false, token: null };
+	}
+	const entry = readStore( config.storageKey ).find( ( item ) => {
+		if ( typeof item === 'string' ) {
+			return item === window.location.pathname;
+		}
+		return item && item.path === window.location.pathname;
+	} );
+	if ( ! entry ) {
+		return { found: false, token: null };
+	}
+	return {
+		found: true,
+		token: typeof entry === 'object' ? entry.token || null : null,
+	};
+}
+
+/**
+ * Persist the unlock token for the current path.
+ *
+ * @param {string}  key   Storage key.
+ * @param {?string} token Unlock token (may be null in best-effort mode).
+ */
+function persistUnlock( key, token ) {
+	try {
+		const entries = readStore( key ).filter(
+			( item ) =>
+				item &&
+				typeof item === 'object' &&
+				item.path !== window.location.pathname
+		);
+		entries.push( {
+			path: window.location.pathname,
+			token: token || null,
+		} );
+		localStorage.setItem( key, JSON.stringify( entries ) );
+	} catch ( e ) {}
+}
+
+/**
+ * Extract an email value from HubSpot's form field values, regardless of the
+ * (array or object) shape the SDK returns.
+ *
+ * @param {*} values Field values from `form.getFormFieldValues()`.
+ * @return {string} Email, or empty string.
+ */
+function extractEmail( values ) {
+	if ( ! values ) {
+		return '';
+	}
+	if ( Array.isArray( values ) ) {
+		const field = values.find( ( item ) =>
+			/email/i.test( item?.name || '' )
+		);
+		return field?.value || '';
+	}
+	if ( typeof values === 'object' ) {
+		return values.email || '';
+	}
+	return '';
+}
+
+/**
+ * Inject server-rendered gated content into the form container.
+ *
+ * @param {HTMLElement} element       Form container.
+ * @param {string}      html          Trusted server-rendered HTML.
+ * @param {boolean}     isRepeatVisit Whether to strip first-submission-only content.
+ */
+function injectMessage( element, html, isRepeatVisit ) {
+	const template = document.createElement( 'template' );
+	template.innerHTML = html;
+	if ( isRepeatVisit ) {
+		template.content
+			.querySelectorAll( '.is-hubspot-form-first-submission' )
+			.forEach( ( node ) => node.remove() );
+	}
+	element.classList.remove( 'is-unlocking', 'hs-form-html' );
+	element.removeAttribute( 'data-form-id' );
+	element.removeAttribute( 'data-portal-id' );
+	element.removeAttribute( 'data-region' );
+	element.replaceChildren( template.content.cloneNode( true ) );
+}
+
+/**
+ * Show the graceful "available shortly" message in the container.
+ *
+ * @param {HTMLElement} element Form container.
+ * @param {Object}      config  Form config.
+ */
+function showPendingMessage( element, config ) {
+	element.classList.remove( 'is-unlocking' );
+	if ( ! config.pendingMessage ) {
+		return;
+	}
+	const paragraph = document.createElement( 'p' );
+	paragraph.className = 'wp-block-hubspot-form__pending';
+	paragraph.textContent = config.pendingMessage;
+	element.replaceChildren( paragraph );
+}
+
+/**
+ * Fetch gated content from the unlock endpoint, polling while the server
+ * reports a pending verification, then inject it (or a fallback message).
+ *
+ * @param {Object}  config                Form config.
+ * @param {string}  instanceId            Form container id.
+ * @param {Object}  payload               Extra request fields.
+ * @param {string}  [payload.email]       Submitted email.
+ * @param {?string} [payload.unlockToken] Repeat-visit token.
+ */
+async function unlock( config, instanceId, payload = {} ) {
+	const element = document.getElementById( instanceId );
+	if ( ! element ) {
+		return;
+	}
+
+	const isRepeatVisit = !! payload.unlockToken;
+	element.dataset.hsFormSubmitted = '1';
+	element.classList.add( 'is-unlocking' );
+
+	for ( let attempt = 0; attempt < PENDING_RETRIES; attempt++ ) {
+		const controller = new AbortController();
+		const timer = setTimeout( () => controller.abort(), REQUEST_TIMEOUT );
+		let response;
+
+		try {
+			response = await fetch( config.restUrl, {
+				method: 'POST',
+				headers: { 'Content-Type': 'application/json' },
+				body: JSON.stringify( {
+					postId: config.postId,
+					formId: config.formId,
+					instance: config.instance,
+					email: payload.email || '',
+					unlockToken: payload.unlockToken || '',
+				} ),
+				signal: controller.signal,
+			} );
+		} catch ( e ) {
+			clearTimeout( timer );
+			await wait( backoff( attempt ) );
+			continue;
+		}
+		clearTimeout( timer );
+
+		// Verification still in progress server-side — back off and retry.
+		if ( response.status === 202 ) {
+			await wait( backoff( attempt ) );
+			continue;
+		}
+
+		// No gated content for this instance — leave the form in place.
+		if ( response.status === 204 ) {
+			element.classList.remove( 'is-unlocking' );
+			return;
+		}
+
+		if ( ! response.ok ) {
+			break;
+		}
+
+		const data = await response.json().catch( () => ( {} ) );
+		if ( data && data.html ) {
+			injectMessage( element, data.html, isRepeatVisit );
+			if ( config.persistSuccess && config.storageKey ) {
+				persistUnlock( config.storageKey, data.unlockToken );
+			}
+			return;
+		}
+		break;
+	}
+
+	showPendingMessage( element, config );
+}
+
 window.addEventListener( 'hs-form-event:on-ready', ( event ) => {
 	window.hsForms = window.hsForms || {};
 	const form = HubSpotFormsV4.getFormFromEvent( event );
@@ -18,6 +240,9 @@ window.addEventListener( 'hs-form-event:on-ready', ( event ) => {
 	const submitButton = document.querySelector(
 		`#${ instanceId } [type="submit"]`
 	);
+	if ( ! submitButton ) {
+		return;
+	}
 	if ( config.submitButtonClass ) {
 		submitButton.classList.add( ...config.submitButtonClass.split( ' ' ) );
 	}
@@ -26,51 +251,64 @@ window.addEventListener( 'hs-form-event:on-ready', ( event ) => {
 	}
 } );
 
-window.addEventListener( 'hs-form-event:on-submission:success', ( event ) => {
-	window.dataLayer = window.dataLayer || [];
-	window.hsForms = window.hsForms || {};
+window.addEventListener(
+	'hs-form-event:on-submission:success',
+	async ( event ) => {
+		window.dataLayer = window.dataLayer || [];
+		window.hsForms = window.hsForms || {};
 
-	const form = HubSpotFormsV4.getFormFromEvent( event );
-	const instanceId = form.getInstanceId();
-	const config = window.hsForms[ instanceId ];
+		const form = HubSpotFormsV4.getFormFromEvent( event );
+		const instanceId = form.getInstanceId();
+		const config = window.hsForms[ instanceId ];
 
-	if ( ! config ) {
-		return;
-	}
+		if ( ! config ) {
+			return;
+		}
 
-	dataLayer.push( {
-		event: config.gtmEventName,
-		formId: form.getFormId(),
-		instanceId,
-		source: 'hubspot_form_wordpress_plugin',
-		conversionId: form.getConversionId(),
-	} );
+		dataLayer.push( {
+			event: config.gtmEventName,
+			formId: form.getFormId(),
+			instanceId,
+			source: 'hubspot_form_wordpress_plugin',
+			conversionId: form.getConversionId(),
+		} );
 
-	if ( config.redirectUrl ) {
-		window.location.href = config.redirectUrl;
-		return;
-	}
+		if ( config.redirectUrl ) {
+			window.location.href = config.redirectUrl;
+			return;
+		}
 
-	const template = document.getElementById(
-		`${ instanceId }-inline-message`
-	);
-	if ( template && template.content ) {
-		const element = document.getElementById( instanceId );
-		element.replaceChildren( template.content.cloneNode( true ) );
-	}
+		if ( ! config.gated ) {
+			return;
+		}
 
-	if ( config.persistSuccess && config.storageKey ) {
+		let email = '';
 		try {
-			const paths = JSON.parse(
-				localStorage.getItem( config.storageKey ) || '[]'
-			);
-			if ( ! paths.includes( window.location.pathname ) ) {
-				paths.push( window.location.pathname );
-				localStorage.setItem(
-					config.storageKey,
-					JSON.stringify( paths )
-				);
-			}
+			email = extractEmail( await form.getFormFieldValues() );
 		} catch ( e ) {}
+
+		unlock( config, instanceId, { email } );
 	}
-} );
+);
+
+// On load, re-fetch gated content for any persisted (returning-visitor) pages.
+function unlockPersistedForms() {
+	window.hsForms = window.hsForms || {};
+	Object.keys( window.hsForms ).forEach( ( instanceId ) => {
+		const config = window.hsForms[ instanceId ];
+		if ( ! config || ! config.gated || ! config.persistSuccess ) {
+			return;
+		}
+		const { found, token } = storedUnlockForPath( config );
+		if ( ! found ) {
+			return;
+		}
+		unlock( config, instanceId, { unlockToken: token || '' } );
+	} );
+}
+
+if ( document.readyState === 'loading' ) {
+	document.addEventListener( 'DOMContentLoaded', unlockPersistedForms );
+} else {
+	unlockPersistedForms();
+}
diff --git a/tests/form-render.spec.js b/tests/form-render.spec.js
index 1e0e3bd..2cb68d6 100644
--- a/tests/form-render.spec.js
+++ b/tests/form-render.spec.js
@@ -58,6 +58,12 @@ test.describe( 'HubSpot Form — frontend render', () => {
 				region: 'na1',
 				formId: FORM_ID,
 			},
+			innerBlocks: [
+				{
+					name: 'core/paragraph',
+					attributes: { content: 'Thank you!' },
+				},
+			],
 		} );
 
 		const postId = await editor.publishPost();
@@ -76,5 +82,13 @@ test.describe( 'HubSpot Form — frontend render', () => {
 
 		expect( config ).toBeTruthy();
 		expect( config.submitButtonClass ).toContain( 'hs-button' );
+
+		// Gated-content config keys used by the unlock endpoint.
+		expect( config.gated ).toBe( true );
+		expect( config.postId ).toBe( postId );
+		expect( config.formId ).toBe( FORM_ID );
+		expect( config.instance ).toBe( 1 );
+		expect( config.restUrl ).toContain( 'hubspot-form-block/v1/unlock' );
+		expect( typeof config.pendingMessage ).toBe( 'string' );
 	} );
 } );
diff --git a/tests/global-setup.js b/tests/global-setup.js
new file mode 100644
index 0000000..6883d05
--- /dev/null
+++ b/tests/global-setup.js
@@ -0,0 +1,45 @@
+/* global globalThis */
+const path = require( 'path' );
+const fs = require( 'fs' );
+const { runCLI } = require( '@wp-playground/cli' );
+
+const PLUGIN_DIR = path.resolve( __dirname, '..' );
+const PORT = Number( process.env.WP_PORT || 9400 );
+
+/**
+ * Boots a WordPress Playground server for the whole test run and stashes the
+ * handle so global teardown can dispose it.
+ *
+ * This mirrors the old `npm run playground:start` command (same blueprint,
+ * same auto-mounted-and-activated plugin) but runs it programmatically via
+ * the Playground CLI's `runCLI` API, so the test run owns the server
+ * lifecycle. That removes the brittle "spawn the server, poll a URL, hope
+ * it's ready" dance the CI workflow used to do.
+ *
+ * @see https://wordpress.github.io/wordpress-playground/guides/e2e-testing-with-playwright
+ */
+module.exports = async () => {
+	const blueprint = JSON.parse(
+		fs.readFileSync( path.join( PLUGIN_DIR, 'blueprint.json' ), 'utf8' )
+	);
+
+	const server = await runCLI( {
+		command: 'server',
+		port: PORT,
+		blueprint,
+		// Auto-detect this plugin, mount it into wp-content/plugins and
+		// activate it — the programmatic equivalent of the `--auto-mount` flag.
+		autoMount: PLUGIN_DIR,
+		// Let the CI matrix pin PHP/WordPress versions; without these the
+		// blueprint's preferredVersions apply.
+		...( process.env.PLAYGROUND_PHP
+			? { php: process.env.PLAYGROUND_PHP }
+			: {} ),
+		...( process.env.PLAYGROUND_WP
+			? { wp: process.env.PLAYGROUND_WP }
+			: {} ),
+	} );
+
+	// Hand the running server to global teardown (same Node process).
+	globalThis.__PLAYGROUND_SERVER__ = server;
+};
diff --git a/tests/global-teardown.js b/tests/global-teardown.js
new file mode 100644
index 0000000..e47b045
--- /dev/null
+++ b/tests/global-teardown.js
@@ -0,0 +1,13 @@
+/* global globalThis */
+
+/**
+ * Disposes the WordPress Playground server started in global setup, shutting
+ * down its worker threads so the test process can exit cleanly.
+ */
+module.exports = async () => {
+	const server = globalThis.__PLAYGROUND_SERVER__;
+	if ( server ) {
+		await server[ Symbol.asyncDispose ]();
+		globalThis.__PLAYGROUND_SERVER__ = undefined;
+	}
+};
diff --git a/tests/helpers.js b/tests/helpers.js
index 6f228c5..00215fd 100644
--- a/tests/helpers.js
+++ b/tests/helpers.js
@@ -17,15 +17,17 @@ function editorCanvas( page ) {
  * @param {import('@playwright/test').Page} page
  * @param {string}                          instanceId The form container id.
  * @param {string}                          formId     The HubSpot form id.
+ * @param {string}                          [email]    Submitted email value.
  */
-async function dispatchHubSpotSuccess( page, instanceId, formId ) {
+async function dispatchHubSpotSuccess( page, instanceId, formId, email = '' ) {
 	await page.evaluate(
-		( [ id, fId ] ) => {
+		( [ id, fId, mail ] ) => {
 			window.HubSpotFormsV4 = {
 				getFormFromEvent: () => ( {
 					getInstanceId: () => id,
 					getFormId: () => fId,
 					getConversionId: () => 'test-conversion-id',
+					getFormFieldValues: async () => ( { email: mail } ),
 				} ),
 			};
 			window.dataLayer = window.dataLayer || [];
@@ -33,29 +35,91 @@ async function dispatchHubSpotSuccess( page, instanceId, formId ) {
 				new Event( 'hs-form-event:on-submission:success' )
 			);
 		},
-		[ instanceId, formId ]
+		[ instanceId, formId, email ]
 	);
 }
 
 /**
- * Seeds localStorage with the form-submitted flag before the page navigates,
- * so the pre-swap inline script in render.php fires on page load.
+ * Intercepts the unlock REST endpoint and returns canned responses.
+ *
+ * By default returns a single 200 with `html`. Pass `pendingBefore` to return
+ * that many 202 "pending" responses before succeeding (to exercise polling).
  *
  * @param {import('@playwright/test').Page} page
- * @param {string}                          formId The HubSpot form id.
+ * @param {Object}                          [options]
+ * @param {string}                          [options.html]          HTML to return.
+ * @param {number}                          [options.pendingBefore] 202 responses first.
+ * @param {?string}                         [options.unlockToken]   Token to return.
  */
-async function presetFormSubmittedFlag( page, formId ) {
-	await page.addInitScript( ( fId ) => {
-		// eslint-disable-next-line no-undef
-		localStorage.setItem(
-			`hs-form-submitted:${ fId }`,
-			JSON.stringify( [ window.location.pathname ] )
-		);
-	}, formId );
+async function mockUnlockEndpoint( page, options = {} ) {
+	const {
+		html = '<div class="wp-block-hubspot-form__inline-message"><p>Thank you!</p></div>',
+		pendingBefore = 0,
+		unlockToken = 'test-unlock-token',
+	} = options;
+
+	let calls = 0;
+	await page.route( '**/hubspot-form-block/v1/unlock', async ( route ) => {
+		calls++;
+		if ( calls <= pendingBefore ) {
+			await route.fulfill( {
+				status: 202,
+				contentType: 'application/json',
+				body: JSON.stringify( { status: 'pending' } ),
+			} );
+			return;
+		}
+		await route.fulfill( {
+			status: 200,
+			contentType: 'application/json',
+			body: JSON.stringify( { html, unlockToken } ),
+		} );
+	} );
+}
+
+/**
+ * Asserts a string is absent from the raw page HTML (i.e. not in page source).
+ *
+ * @param {import('@playwright/test').Page} page
+ * @param {string}                          needle Text that must not appear.
+ * @return {Promise<boolean>} True when absent.
+ */
+async function isAbsentFromSource( page, needle ) {
+	const html = await page.content();
+	return ! html.includes( needle );
+}
+
+/**
+ * Seeds localStorage with a persisted unlock entry before the page navigates,
+ * so the returning-visitor flow in view.js fires on page load.
+ *
+ * @param {import('@playwright/test').Page} page
+ * @param {string}                          formId  The HubSpot form id.
+ * @param {?string}                         [token] Unlock token to seed.
+ */
+async function presetFormSubmittedFlag(
+	page,
+	formId,
+	token = 'test-unlock-token'
+) {
+	await page.addInitScript(
+		( [ fId, tok ] ) => {
+			// eslint-disable-next-line no-undef
+			localStorage.setItem(
+				`hs-form-submitted:${ fId }`,
+				JSON.stringify( [
+					{ path: window.location.pathname, token: tok },
+				] )
+			);
+		},
+		[ formId, token ]
+	);
 }
 
 module.exports = {
 	editorCanvas,
 	dispatchHubSpotSuccess,
+	mockUnlockEndpoint,
+	isAbsentFromSource,
 	presetFormSubmittedFlag,
 };
diff --git a/tests/inline-message.spec.js b/tests/inline-message.spec.js
index 251ea43..ba2103e 100644
--- a/tests/inline-message.spec.js
+++ b/tests/inline-message.spec.js
@@ -3,11 +3,13 @@
  */
 const { test, expect } = require( '@wordpress/e2e-test-utils-playwright' );
 
+const { dispatchHubSpotSuccess, isAbsentFromSource } = require( './helpers' );
+
 const PORTAL_ID = '148262752';
 const FORM_ID = 'ec0707d2-b7f5-47c5-bfef-76eb7e8f837e';
 
-test.describe( 'HubSpot Form — inline success message', () => {
-	test( 'should emit a <template> element when inner blocks are present', async ( {
+test.describe( 'HubSpot Form — gated success message', () => {
+	test( 'does not emit gated content into the page source, but injects it after submission', async ( {
 		admin,
 		editor,
 		page,
@@ -27,7 +29,7 @@ test.describe( 'HubSpot Form — inline success message', () => {
 			innerBlocks: [
 				{
 					name: 'core/paragraph',
-					attributes: { content: 'Thank you for signing up!' },
+					attributes: { content: 'Secret gated content!' },
 				},
 			],
 		} );
@@ -37,17 +39,37 @@ test.describe( 'HubSpot Form — inline success message', () => {
 
 		const container = page.locator( '.hs-form-html' );
 		await expect( container ).toBeAttached();
-
 		const instanceId = await container.getAttribute( 'id' );
 
-		// The <template> element is emitted server-side by render.php.
-		const template = page.locator(
-			`template#${ instanceId }-inline-message`
+		// The gated content must NOT be present in the page source, and the old
+		// <template> mechanism must be gone.
+		expect(
+			await isAbsentFromSource( page, 'Secret gated content!' )
+		).toBe( true );
+		await expect(
+			page.locator( `template#${ instanceId }-inline-message` )
+		).not.toBeAttached();
+
+		// The config should flag this instance as gated and carry the endpoint.
+		const config = await page.evaluate(
+			( id ) => window.hsForms?.[ id ],
+			instanceId
 		);
-		await expect( template ).toBeAttached();
+		expect( config.gated ).toBe( true );
+		expect( config.restUrl ).toContain( 'hubspot-form-block/v1/unlock' );
+
+		// After a successful submission the content is fetched and injected.
+		// (No token is configured in Playground, so the endpoint is best-effort.)
+		await dispatchHubSpotSuccess( page, instanceId, FORM_ID );
+
+		await expect(
+			page
+				.locator( `#${ instanceId } p` )
+				.filter( { hasText: 'Secret gated content!' } )
+		).toBeAttached();
 	} );
 
-	test( 'should include embed iframes inside the <template> without stripping', async ( {
+	test( 'preserves embed iframes in the fetched content', async ( {
 		admin,
 		editor,
 		page,
@@ -81,23 +103,17 @@ test.describe( 'HubSpot Form — inline success message', () => {
 
 		const container = page.locator( '.hs-form-html' );
 		await expect( container ).toBeAttached();
-
 		const instanceId = await container.getAttribute( 'id' );
 
-		// The template's content fragment should contain an iframe (YouTube embed).
-		// Previously DOMPurify stripped iframes; the <template> approach preserves them.
-		const hasIframe = await page.evaluate( ( id ) => {
-			const tmpl = document.getElementById( `${ id }-inline-message` );
-			if ( ! tmpl ) {
-				return false;
-			}
-			return tmpl.content.querySelector( 'iframe' ) !== null;
-		}, instanceId );
-
-		expect( hasIframe ).toBe( true );
+		await dispatchHubSpotSuccess( page, instanceId, FORM_ID );
+
+		// The fetched, injected content should contain the embed iframe.
+		await expect(
+			page.locator( `#${ instanceId } iframe` )
+		).toBeAttached();
 	} );
 
-	test( 'should not emit a <template> when no inner blocks are present', async ( {
+	test( 'does not flag the instance as gated when no inner blocks are present', async ( {
 		admin,
 		editor,
 		page,
@@ -121,11 +137,15 @@ test.describe( 'HubSpot Form — inline success message', () => {
 
 		const container = page.locator( '.hs-form-html' );
 		await expect( container ).toBeAttached();
-
 		const instanceId = await container.getAttribute( 'id' );
-		const template = page.locator(
-			`template#${ instanceId }-inline-message`
+
+		const config = await page.evaluate(
+			( id ) => window.hsForms?.[ id ],
+			instanceId
 		);
-		await expect( template ).not.toBeAttached();
+		expect( config.gated ).toBeUndefined();
+		await expect(
+			page.locator( `template#${ instanceId }-inline-message` )
+		).not.toBeAttached();
 	} );
 } );
diff --git a/tests/persist-success.spec.js b/tests/persist-success.spec.js
index 2f60dd6..6b566aa 100644
--- a/tests/persist-success.spec.js
+++ b/tests/persist-success.spec.js
@@ -5,13 +5,14 @@ const { test, expect } = require( '@wordpress/e2e-test-utils-playwright' );
 
 const {
 	dispatchHubSpotSuccess,
+	mockUnlockEndpoint,
 	presetFormSubmittedFlag,
 } = require( './helpers' );
 
 const PORTAL_ID = '148262752';
 const FORM_ID = 'ec0707d2-b7f5-47c5-bfef-76eb7e8f837e';
 
-test.describe( 'HubSpot Form — persist success', () => {
+test.describe( 'HubSpot Form — persist success (gated content)', () => {
 	test( 'should include persistSuccess and storageKey in injected config when enabled', async ( {
 		admin,
 		editor,
@@ -52,6 +53,8 @@ test.describe( 'HubSpot Form — persist success', () => {
 
 		expect( config.persistSuccess ).toBe( true );
 		expect( config.storageKey ).toBe( `hs-form-submitted:${ FORM_ID }` );
+		expect( config.gated ).toBe( true );
+		expect( config.restUrl ).toContain( 'hubspot-form-block/v1/unlock' );
 	} );
 
 	test( 'should not include persistSuccess or storageKey when not enabled', async ( {
@@ -132,70 +135,7 @@ test.describe( 'HubSpot Form — persist success', () => {
 		expect( config.storageKey ).toBeUndefined();
 	} );
 
-	test( 'should include the first-submission group in the <template>', async ( {
-		admin,
-		editor,
-		page,
-	} ) => {
-		await admin.createNewPost();
-		await editor.setPreferences( 'core/edit-post', {
-			welcomeGuide: false,
-		} );
-
-		await editor.insertBlock( {
-			name: 'hubspot/form',
-			attributes: {
-				portalId: PORTAL_ID,
-				region: 'na1',
-				formId: FORM_ID,
-				persistSuccess: true,
-			},
-			innerBlocks: [
-				{
-					name: 'core/paragraph',
-					attributes: { content: 'Thank you!' },
-				},
-				{
-					name: 'core/group',
-					attributes: {
-						className: 'is-hubspot-form-first-submission',
-					},
-					innerBlocks: [
-						{
-							name: 'core/heading',
-							attributes: {
-								content: 'One-time only message',
-								level: 3,
-							},
-						},
-					],
-				},
-			],
-		} );
-
-		const postId = await editor.publishPost();
-		await page.goto( `/?p=${ postId }` );
-
-		const container = page.locator( '.hs-form-html' );
-		await expect( container ).toBeAttached();
-		const instanceId = await container.getAttribute( 'id' );
-
-		const hasFirstSubmissionGroup = await page.evaluate( ( id ) => {
-			const tmpl = document.getElementById( `${ id }-inline-message` );
-			if ( ! tmpl ) {
-				return false;
-			}
-			return (
-				tmpl.content.querySelector(
-					'.is-hubspot-form-first-submission'
-				) !== null
-			);
-		}, instanceId );
-
-		expect( hasFirstSubmissionGroup ).toBe( true );
-	} );
-
-	test( 'should show full inline message including first-submission group on fresh success', async ( {
+	test( 'shows full message including first-submission group on fresh success and persists a token', async ( {
 		admin,
 		editor,
 		page,
@@ -243,43 +183,43 @@ test.describe( 'HubSpot Form — persist success', () => {
 		await expect( container ).toBeAttached();
 		const instanceId = await container.getAttribute( 'id' );
 
+		// Best-effort (no token) endpoint in Playground returns the content.
 		await dispatchHubSpotSuccess( page, instanceId, FORM_ID );
 
-		// The container should now show the full inline message.
 		await expect(
-			page.locator( `#${ instanceId } p` ).filter( {
-				hasText: 'Thank you!',
-			} )
+			page
+				.locator( `#${ instanceId } p` )
+				.filter( { hasText: 'Thank you!' } )
 		).toBeAttached();
 
-		// The first-submission group should still be present on first success.
+		// On a fresh submission, the first-submission group is preserved.
 		await expect(
 			page.locator( `#${ instanceId } .is-hubspot-form-first-submission` )
 		).toBeAttached();
 
-		// The localStorage entry should be an array containing the current pathname.
-		const { stored, pathname } = await page.evaluate( ( formId ) => {
+		// localStorage records this path with an unlock token (new shape).
+		const entry = await page.evaluate( ( formId ) => {
 			try {
-				return {
-					// eslint-disable-next-line no-undef
-					stored: JSON.parse(
-						// eslint-disable-next-line no-undef
-						localStorage.getItem(
-							`hs-form-submitted:${ formId }`
-						) || '[]'
-					),
+				// eslint-disable-next-line no-undef
+				const entries = JSON.parse(
 					// eslint-disable-next-line no-undef
-					pathname: window.location.pathname,
-				};
+					localStorage.getItem( `hs-form-submitted:${ formId }` ) ||
+						'[]'
+				);
+				return entries.find(
+					( item ) => item.path === window.location.pathname
+				);
 			} catch ( e ) {
-				return { stored: [], pathname: '' };
+				return null;
 			}
 		}, FORM_ID );
-		expect( Array.isArray( stored ) ).toBe( true );
-		expect( stored ).toContain( pathname );
+
+		expect( entry ).toBeTruthy();
+		expect( typeof entry.token ).toBe( 'string' );
+		expect( entry.token.length ).toBeGreaterThan( 0 );
 	} );
 
-	test( 'should pre-swap the container on repeat visit, stripping the first-submission group', async ( {
+	test( 'on repeat visit, re-fetches via stored token and strips the first-submission group', async ( {
 		admin,
 		editor,
 		page,
@@ -302,58 +242,47 @@ test.describe( 'HubSpot Form — persist success', () => {
 					name: 'core/paragraph',
 					attributes: { content: 'Thank you!' },
 				},
-				{
-					name: 'core/group',
-					attributes: {
-						className: 'is-hubspot-form-first-submission',
-					},
-					innerBlocks: [
-						{
-							name: 'core/heading',
-							attributes: {
-								content: 'One-time only message',
-								level: 3,
-							},
-						},
-					],
-				},
 			],
 		} );
 
 		const postId = await editor.publishPost();
 
-		// Seed localStorage before navigation to simulate a returning visitor.
+		// Deterministic gated content from the endpoint, including a
+		// first-submission group that should be stripped on repeat visits.
+		await mockUnlockEndpoint( page, {
+			html:
+				'<div class="wp-block-hubspot-form__inline-message">' +
+				'<p>Thank you!</p>' +
+				'<div class="is-hubspot-form-first-submission"><h3>One-time only message</h3></div>' +
+				'</div>',
+		} );
+
+		// Seed the persisted unlock token to simulate a returning visitor.
 		await presetFormSubmittedFlag( page, FORM_ID );
 		await page.goto( `/?p=${ postId }` );
 
-		// The container element keeps its id even after the pre-swap strips
-		// HubSpot's data attributes, so look it up by id via the template.
-		const instanceId = await page.evaluate( () => {
-			const tmpl = document.querySelector(
-				'template[id$="-inline-message"]'
-			);
-			return tmpl ? tmpl.id.replace( '-inline-message', '' ) : null;
-		} );
-
-		// The success paragraph should be present immediately after pre-swap.
-		const successParagraph = page.locator( `#${ instanceId } p` ).filter( {
-			hasText: 'Thank you!',
-		} );
-		await expect( successParagraph ).toBeAttached();
+		const instanceId = await page.evaluate(
+			() => Object.keys( window.hsForms || {} )[ 0 ]
+		);
 
-		// Wait 5 seconds to confirm the HubSpot SDK has not overwritten the
-		// pre-swapped content by re-rendering the form into the container.
-		await page.waitForTimeout( 5000 );
+		// The success paragraph is injected from the (token-verified) fetch.
+		const successParagraph = page
+			.locator( `#${ instanceId } p` )
+			.filter( { hasText: 'Thank you!' } );
 		await expect( successParagraph ).toBeAttached();
 
-		// The first-submission group should have been stripped.
+		// The first-submission group is stripped on repeat visits.
 		await expect(
 			page.locator( `#${ instanceId } .is-hubspot-form-first-submission` )
 		).not.toBeAttached();
 
-		// The loading spinner should not remain.
+		// The loading spinner should be gone after injection.
 		await expect(
 			page.locator( `#${ instanceId } .wp-block-hubspot-form__loading` )
 		).not.toBeAttached();
+
+		// Confirm HubSpot does not later overwrite the injected content.
+		await page.waitForTimeout( 3000 );
+		await expect( successParagraph ).toBeAttached();
 	} );
 } );