diff --git a/README.md b/README.md
index 9b724103..f0e5550e 100644
--- a/README.md
+++ b/README.md
@@ -42,7 +42,9 @@ That build:
    `config/*.js` files `welcome.htm` loads directly)
  - copies and minifies the xterm vendor assets
  - bundles the TUI and shared config into `dist/js/tui.bundle.js`
- - retains the original runtime bundle in `dist/js/app.bundle.js`
+ - builds the runtime bundle, then serves it and the three xterm scripts under
+   content-hashed names in `dist/static/` (rewriting `dist/index.html` to
+   match) so `_headers` can cache them immutably
  - emits a minified lazy-load asset for the RickRoll animation
  - generates the crawlable surface and `dist/index.html` (see below)
 
diff --git a/_headers b/_headers
new file mode 100644
index 00000000..d44c57a7
--- /dev/null
+++ b/_headers
@@ -0,0 +1,25 @@
+# Cache policy for Netlify. Without this file everything is served with
+# max-age=0, so every image, the video, and xterm.js were revalidated on every
+# visit. Paths are matched top to bottom; the most specific rule wins.
+
+# Fingerprinted copies of the homepage scripts (scripts/build-assets.js writes
+# them as static/<name>.<hash>.js and rewrites index.html to match). A changed
+# file gets a new name, so these can be cached forever.
+/static/*
+  Cache-Control: public, max-age=31536000, immutable
+
+# Logos, portraits, and the video change rarely and under the same name, so a
+# week bounds how stale a replaced logo can be.
+/images/*
+  Cache-Control: public, max-age=604800
+/videos/*
+  Cache-Control: public, max-age=604800
+
+# Unfingerprinted scripts and styles loaded by name (lazy loaders, welcome.htm,
+# tui.html). An hour keeps repeat visits cheap without pinning a stale build.
+/js/*
+  Cache-Control: public, max-age=3600
+/css/*
+  Cache-Control: public, max-age=3600
+/config/*
+  Cache-Control: public, max-age=3600
diff --git a/config/commands.js b/config/commands.js
index 88604626..46678253 100644
--- a/config/commands.js
+++ b/config/commands.js
@@ -678,17 +678,28 @@ const commands = {
     term.stylePrint("Coming soon! ;)");
   },
 
-  eval: function (args) {
-    term.stylePrint(
-      "please instead build a webstore with macros. in the meantime, the result is: " +
-        eval(args.join(" "))
-    );
-  },
-
   test: function () {
     _rickRoll();
   },
 
+  // ── claude ──────────────────────────────────────────────────────────────────
+  // Looks like launching the Claude Code CLI, then declines to be one.
+  claude: function () {
+    const clay = (text) => `\x1b[38;5;209m${text}\x1b[0;38m`;
+    const dim = (text) => `\x1b[2m${text}\x1b[0;38m`;
+    const cwd = "/" + term.cwd.replaceAll("~", `home/${term.user}`);
+
+    _claudeBox([
+      `${clay("✻")} Welcome to Claude Code!`,
+      "",
+      "  /help for help, /status for your current setup",
+      "",
+      `  cwd: ${cwd}`,
+    ]);
+    term.writeln("");
+    term.stylePrint(`${dim("※ Tip:")} We're not paying for your Claude tokens!`);
+  },
+
   // ── Upgrade ─────────────────────────────────────────────────────────────────
 
   // Animated sequence that "upgrades" the terminal to fund version 4.0.
@@ -946,6 +957,21 @@ function _filesHere() {
   return _DIRS[term.cwd].filter((e) => e != "README.md" || term.user == "root");
 }
 
+// Draws a rounded box like the Claude Code welcome banner. Lines are padded
+// to the box width; ANSI colour codes are ignored when measuring.
+function _claudeBox(lines) {
+  const visible = (s) => s.replace(/\x1b\[[0-9;]*m/g, "").length;
+  const inner = Math.max(
+    Math.min(term.cols, 76) - 4,
+    ...lines.map((l) => visible(l) + 1)
+  );
+  term.writeln(`╭${"─".repeat(inner + 2)}╮`);
+  for (const line of lines) {
+    term.writeln(`│ ${line}${" ".repeat(Math.max(0, inner - visible(line)))} │`);
+  }
+  term.writeln(`╰${"─".repeat(inner + 2)}╯`);
+}
+
 // ── Aliases ───────────────────────────────────────────────────────────────────
 // Simple one-to-one redirects. Each alias forwards its args to the target
 // command. Chains are fine — ge → great_expectations → superconductive.
diff --git a/config/fs.js b/config/fs.js
index 3ecaa36d..91ec7ed6 100644
--- a/config/fs.js
+++ b/config/fs.js
@@ -6,18 +6,21 @@
 // the browser's HTML entity encoding/decoding is what necessitates the
 // replaceAll() calls in getFileContents().
 //
-// Remote files (README.md, welcome.htm) are fetched from GitHub on first load
-// and inserted into the DOM the same way. Local files are inserted directly.
+// Remote files (README.md, welcome.htm) are fetched from this origin the first
+// time a command needs them and inserted into the DOM the same way. Local
+// files are inserted directly.
 
 // Files with hardcoded content that don't need to be fetched.
 const _LOCAL_FILES = {
   "id_rsa": "Nice try!",
 };
 
-// Files fetched from GitHub at startup. The key is used as the DOM element ID.
+// Files fetched on demand. The key is used as the DOM element ID. Both are
+// served from dist/ (the build copies README.md there), so they match the
+// deployed commit and need no cross-origin request to GitHub.
 const _REMOTE_FILES = {
-  "README.md": "https://raw.githubusercontent.com/rootvc/cli-website/main/README.md",
-  "welcome.htm": "https://raw.githubusercontent.com/rootvc/cli-website/main/welcome.htm",
+  "README.md": "/README.md",
+  "welcome.htm": "/welcome.htm",
 };
 
 // Combined map of all known files (used by `find`).
@@ -53,12 +56,10 @@ for (const [key, values] of Object.entries(_DIRS)) {
   }
 }
 
-// Called at terminal init to populate the DOM with file content.
+// Called at terminal init to populate the DOM with the inline files. Remote
+// files are not fetched here: `cat`/`grep` await ensureFileLoaded first, so
+// fetching them for every visitor only paid for the rare visitor who reads them.
 function preloadFiles() {
-  for (const name of Object.keys(_REMOTE_FILES)) {
-    _loadFile(name);
-  }
-
   for (const [name, content] of Object.entries(_LOCAL_FILES)) {
     _insertFileToDOM(name, content);
   }
diff --git a/config/help.js b/config/help.js
index dba2e580..c55611fb 100644
--- a/config/help.js
+++ b/config/help.js
@@ -14,6 +14,7 @@ const help = {
   "%locate%": "physical address",
   "%www%": "plain-text version of this site",
   "%jobs%": "check out our job openings",
+  "%claude%": "launch Claude Code",
   "%test%": "do not use",
   "%upgrade%": "upgrade to the latest version of Root Ventures",
   "%other%": "try your fav commands (e.g. %ls%, %groups%, %su%)",
diff --git a/config/portfolio.js b/config/portfolio.js
index 3f26f5cc..195f41ef 100644
--- a/config/portfolio.js
+++ b/config/portfolio.js
@@ -127,7 +127,7 @@ const portfolio = {
 
   seam: {
     name: "Seam",
-    url: "https://getseam.com",
+    url: "https://www.seam.co",
     description: "Seam provides an API for managing building systems.",
   },
 
@@ -226,11 +226,12 @@ const portfolio = {
       "Righthook reduces the time and cost required to develop autonomous vehicles.",
   },
 
-  sixwheel: {
-    name: "SixWheel",
-    url: "https://sixwheel.com",
+  // Formerly SixWheel.
+  revoy: {
+    name: "Revoy",
+    url: "https://www.revoy.com",
     description:
-      "SixWheel brings autonomy and electrification to long haul trucking operations.",
+      "Revoy electrifies long haul trucking with an autonomous EV unit that rides between tractor and trailer.",
   },
 
   radical: {
@@ -421,11 +422,12 @@ const portfolio = {
       "Loopwork is building the next generation of agents.",
   },
 
+  // Formerly Feather (feather.solutions). Slug kept so /#tldr-feather resolves.
   feather: {
-    name: "Feather",
-    url: "https://feather.solutions/",
+    name: "Finite Systems",
+    url: "https://finitesystems.com",
     description:
-      "Feather provides FEA that runs in the browser.",
+      "Finite Systems is an applied research lab building the future of engineering tools, starting with FEA that runs in the browser.",
   },
 
   vibe_robotics: {
@@ -468,6 +470,75 @@ const portfolio = {
     url: "https://fabro.sh/",
     description:
       "Lithos Computer, founded by Bryan Helmkamp, makes Fabro, a workflow harness that runs coding agents through deterministic graphs instead of a chat loop.",
+  },
+
+  lark: {
+    name: "Lark",
+    url: "https://lark.aero",
+    description: "Lark builds test tools for aerospace.",
+  },
+
+  flight_science: {
+    name: "Flight Science",
+    url: "https://flightscience.ai",
+    description:
+      "Flight Science is an AI aviation operations platform that helps airline dispatchers and pilots optimize fuel, avoid turbulence, and stay on time.",
+  },
+
+  maia: {
+    name: "MAIA Analytics",
+    url: "https://maia-analytics.com",
+    description:
+      "MAIA Analytics lets anyone query location data in plain language instead of GIS tooling.",
+  },
+
+  zep: {
+    name: "Zep",
+    url: "https://www.getzep.com",
+    description:
+      "Zep is a memory layer that gives AI agents persistent, structured memory across sessions.",
+  },
+
+  indices: {
+    name: "Indices",
+    url: "https://indices.io",
+    description:
+      "Indices turns any website into a reliable API.",
+  },
+
+  volund: {
+    name: "Volund",
+    url: "https://www.volundmfg.com",
+    description:
+      "Volund designs and manufactures small jet engines from first principles.",
+  },
+
+  lightmill: {
+    name: "Lightmill Systems",
+    url: "https://lightmill.us",
+    description:
+      "Lightmill Systems is pioneering large-format laser milling, a new way to produce precision metal parts.",
+  },
+
+  hexagon: {
+    name: "Hexagon Labs",
+    url: "https://joinhexagon.com",
+    description:
+      "Hexagon Labs builds Milo, an autonomous AI operating system that puts agents to work across enterprise tools and data.",
+  },
+
+  manzano: {
+    name: "Manzano Systems",
+    url: "https://www.manzanosystems.com",
+    description:
+      "Manzano Systems shrinks the room-sized laser systems that control quantum computers onto manufacturable photonic chips.",
+  },
+
+  westmag: {
+    name: "Western Magnetics",
+    url: "https://www.westmag.com",
+    description:
+      "Western Magnetics designs and manufactures electric motors for drones and actuators for robots, built with US and allied supply chains.",
   }
 };
 
diff --git a/css/styles.css b/css/styles.css
index 0b666175..74d20f4d 100644
--- a/css/styles.css
+++ b/css/styles.css
@@ -1,5 +1,3 @@
-@import url(https://fonts.googleapis.com/css?family=Abel|Source+Code+Pro&display=swap);
-
 body, html {
   height: 100%;
   overflow: hidden;
@@ -7,7 +5,6 @@ body, html {
 
 body {
   background-color: #2c2c2c;
-  font-family: "Abel";
   margin: 0;
 }
 
diff --git a/images/allspice.jpg b/images/allspice.jpg
index b346278b..da2c88e5 100644
Binary files a/images/allspice.jpg and b/images/allspice.jpg differ
diff --git a/images/aperture.jpg b/images/aperture.jpg
index c9002b48..e048abda 100644
Binary files a/images/aperture.jpg and b/images/aperture.jpg differ
diff --git a/images/aperturedata.jpg b/images/aperturedata.jpg
index 4a5eddb4..094ab871 100644
Binary files a/images/aperturedata.jpg and b/images/aperturedata.jpg differ
diff --git a/images/deepweave.jpg b/images/deepweave.jpg
index aa9d3091..92165754 100644
Binary files a/images/deepweave.jpg and b/images/deepweave.jpg differ
diff --git a/images/determinate.jpg b/images/determinate.jpg
index ee4cebb8..7c62ef9e 100644
Binary files a/images/determinate.jpg and b/images/determinate.jpg differ
diff --git a/images/digichem.jpg b/images/digichem.jpg
index 6e9b3592..01fb7176 100644
Binary files a/images/digichem.jpg and b/images/digichem.jpg differ
diff --git a/images/dusty.jpg b/images/dusty.jpg
index 78a85c17..5238d6d4 100644
Binary files a/images/dusty.jpg and b/images/dusty.jpg differ
diff --git a/images/feather.jpg b/images/feather.jpg
index 8f87a0bd..76a55e51 100644
Binary files a/images/feather.jpg and b/images/feather.jpg differ
diff --git a/images/flight_science.jpg b/images/flight_science.jpg
new file mode 100644
index 00000000..a07ea1bc
Binary files /dev/null and b/images/flight_science.jpg differ
diff --git a/images/fudge.jpg b/images/fudge.jpg
index d97bec52..76ad77d4 100644
Binary files a/images/fudge.jpg and b/images/fudge.jpg differ
diff --git a/images/ground_control.jpg b/images/ground_control.jpg
index 8fbe9329..f472113b 100644
Binary files a/images/ground_control.jpg and b/images/ground_control.jpg differ
diff --git a/images/hexagon.jpg b/images/hexagon.jpg
new file mode 100644
index 00000000..2c3777e6
Binary files /dev/null and b/images/hexagon.jpg differ
diff --git a/images/illoca.jpg b/images/illoca.jpg
index fd7e5765..da9acc9a 100644
Binary files a/images/illoca.jpg and b/images/illoca.jpg differ
diff --git a/images/indices.jpg b/images/indices.jpg
new file mode 100644
index 00000000..3c78be89
Binary files /dev/null and b/images/indices.jpg differ
diff --git a/images/integrated.jpg b/images/integrated.jpg
index 1d3bc9c1..e77aa9a7 100644
Binary files a/images/integrated.jpg and b/images/integrated.jpg differ
diff --git a/images/kayhan.jpg b/images/kayhan.jpg
index 8ba16c49..66704c5e 100644
Binary files a/images/kayhan.jpg and b/images/kayhan.jpg differ
diff --git a/images/kodra.jpg b/images/kodra.jpg
index 471d07a7..26660c7d 100644
Binary files a/images/kodra.jpg and b/images/kodra.jpg differ
diff --git a/images/lark.jpg b/images/lark.jpg
new file mode 100644
index 00000000..4da2a810
Binary files /dev/null and b/images/lark.jpg differ
diff --git a/images/latent.jpg b/images/latent.jpg
index 7852f957..53c10185 100644
Binary files a/images/latent.jpg and b/images/latent.jpg differ
diff --git a/images/lightmill.jpg b/images/lightmill.jpg
new file mode 100644
index 00000000..2c0afb37
Binary files /dev/null and b/images/lightmill.jpg differ
diff --git a/images/lithos.jpg b/images/lithos.jpg
index c0935c55..4837471b 100644
Binary files a/images/lithos.jpg and b/images/lithos.jpg differ
diff --git a/images/logo.png b/images/logo.png
index 036f5f3d..96f346a1 100644
Binary files a/images/logo.png and b/images/logo.png differ
diff --git a/images/loombotic.jpg b/images/loombotic.jpg
index 0284e524..eb7d9469 100644
Binary files a/images/loombotic.jpg and b/images/loombotic.jpg differ
diff --git a/images/loopwork.jpg b/images/loopwork.jpg
index 60e54e97..27789147 100644
Binary files a/images/loopwork.jpg and b/images/loopwork.jpg differ
diff --git a/images/maia.jpg b/images/maia.jpg
new file mode 100644
index 00000000..8522f172
Binary files /dev/null and b/images/maia.jpg differ
diff --git a/images/manzano.jpg b/images/manzano.jpg
new file mode 100644
index 00000000..4b79f1ee
Binary files /dev/null and b/images/manzano.jpg differ
diff --git a/images/oma_fertility.jpg b/images/oma_fertility.jpg
index cdefabfb..fa32cb19 100644
Binary files a/images/oma_fertility.jpg and b/images/oma_fertility.jpg differ
diff --git a/images/patterns.jpg b/images/patterns.jpg
index b1e4e865..1c2b7a65 100644
Binary files a/images/patterns.jpg and b/images/patterns.jpg differ
diff --git a/images/phyagents.jpg b/images/phyagents.jpg
index 6fd2015f..451cbc92 100644
Binary files a/images/phyagents.jpg and b/images/phyagents.jpg differ
diff --git a/images/quilter.jpg b/images/quilter.jpg
index 066bb602..4d4908a9 100644
Binary files a/images/quilter.jpg and b/images/quilter.jpg differ
diff --git a/images/revoy.jpg b/images/revoy.jpg
new file mode 100644
index 00000000..0f4d96b5
Binary files /dev/null and b/images/revoy.jpg differ
diff --git a/images/sixwheel.jpg b/images/sixwheel.jpg
deleted file mode 100644
index 7a096de4..00000000
Binary files a/images/sixwheel.jpg and /dev/null differ
diff --git a/images/stellar.jpg b/images/stellar.jpg
index 43a517c3..8ab44186 100644
Binary files a/images/stellar.jpg and b/images/stellar.jpg differ
diff --git a/images/subtrace.jpg b/images/subtrace.jpg
index 1610ebe4..0dbef0f1 100644
Binary files a/images/subtrace.jpg and b/images/subtrace.jpg differ
diff --git a/images/supertokens.jpg b/images/supertokens.jpg
index 00442dad..93b4f90e 100644
Binary files a/images/supertokens.jpg and b/images/supertokens.jpg differ
diff --git a/images/vibe_robotics.jpg b/images/vibe_robotics.jpg
index 7283d51b..7244eee4 100644
Binary files a/images/vibe_robotics.jpg and b/images/vibe_robotics.jpg differ
diff --git a/images/volund.jpg b/images/volund.jpg
new file mode 100644
index 00000000..99fe0cf4
Binary files /dev/null and b/images/volund.jpg differ
diff --git a/images/westmag.jpg b/images/westmag.jpg
new file mode 100644
index 00000000..86824e95
Binary files /dev/null and b/images/westmag.jpg differ
diff --git a/images/zep.jpg b/images/zep.jpg
new file mode 100644
index 00000000..3d60d51e
Binary files /dev/null and b/images/zep.jpg differ
diff --git a/index.html b/index.html
index 28a48fa4..74f79833 100644
--- a/index.html
+++ b/index.html
@@ -60,7 +60,6 @@
            and search engines discount display:none text. -->
       <h1 class="visually-hidden">Root Ventures | Seeding bold engineers</h1>
       <h2 class="visually-hidden">Seed stage venture capital firm investing in deep tech. San Francisco, CA</h2>
-      <img id="logo" src = "images/logo.png" alt="Root Ventures" style="display: none;"/>
       <!-- Google Tag Manager (noscript) -->
       <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-TQ954FQ"
         height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
diff --git a/js/ascii-art.js b/js/ascii-art.js
index 0736af9b..775373da 100644
--- a/js/ascii-art.js
+++ b/js/ascii-art.js
@@ -69,6 +69,11 @@ function _queueASCIIArtWork(task, timeout = 1000) {
   }
 }
 
+// Warms the art a visitor is likely to ask for first: the firm logo and the
+// team. Portfolio logos are deliberately not here — there are ~70 of them,
+// several megabytes in total, and `tldr <company>` already awaits its own
+// image via preloadCommandAssets before rendering, so preloading them only
+// cost every visitor the download and the dithering work.
 function preloadASCIIArt() {
   if (asciiArtPreloadPromise) {
     return asciiArtPreloadPromise;
@@ -77,7 +82,6 @@ function preloadASCIIArt() {
   const specs = [
     _getASCIIArtSpec("rootvc-square"),
     ...Object.keys(team).map((person) => _getASCIIArtSpec(person)),
-    ...Object.keys(portfolio).map((company) => _getASCIIArtSpec(company)),
   ].filter(Boolean);
 
   asciiArtPreloadPromise = window
diff --git a/js/geo.js b/js/geo.js
index a4bf7e35..ab6c4803 100644
--- a/js/geo.js
+++ b/js/geo.js
@@ -1,6 +1,6 @@
 function buildGeoPage() {
   const whois = document.getElementById("whois");
-  whois.innerHTML = whoisRoot.split(" Try")[0];
+  whois.textContent = firm.blurb;
 
   const portfolioTable = document.getElementById("portfolio");
   const sortedPortfolioKeys = Object.keys(portfolio).sort((a, b) => 
diff --git a/js/terminal-ext.js b/js/terminal-ext.js
index 37e37585..c365d63a 100644
--- a/js/terminal-ext.js
+++ b/js/terminal-ext.js
@@ -29,7 +29,8 @@ const extend = (term) => {
 
   // Cursor position relative to the start of the user's input (after the prompt).
   // Uses the raw xterm buffer position minus the prompt's character length.
-  term.pos = () => term._core.buffer.x - term._promptRawText().length - 1;
+  term.pos = () =>
+    term.buffer.active.cursorX - term._promptRawText().length - 1;
 
   // Plain-text prompt string used for length calculations.
   term._promptRawText = () =>
@@ -116,14 +117,11 @@ const extend = (term) => {
       text = _wordWrap(text, Math.min(term.cols, 76));
     }
 
-    // Replace %commandName% tokens with styled command names.
-    const cmds = Object.keys(commands);
-    for (const cmd of cmds) {
-      const cmdMatches = text.matchAll(`%${cmd}%`);
-      for (const match of cmdMatches) {
-        text = text.replace(match[0], colorText(cmd, "command"));
-      }
-    }
+    // Replace %commandName% tokens with styled command names. One alternation
+    // over every command name, built once, rather than a scan per command.
+    text = text.replace(_commandTokenRegex(), (_, cmd) =>
+      colorText(cmd, "command")
+    );
 
     term.writeln(text);
   };
@@ -343,14 +341,29 @@ const extend = (term) => {
 
   // ── Lifecycle ──────────────────────────────────────────────────────────────
 
-  // Called on window resize. xterm clears its buffer on resize, so we
-  // reinitialize the terminal and replay the entire command history to restore
-  // the visible output, then re-render the prompt at the bottom.
+  // Called on window resize. Output was wrapped and art was dithered for the
+  // old column count, so when the width changes the terminal is reinitialized
+  // and the command history replayed to redraw everything at the new width.
+  //
+  // Height-only resizes skip the replay: xterm keeps its buffer, and on phones
+  // the keyboard opening or the address bar collapsing fires resize with the
+  // same column count, which used to wipe and redraw the session every time.
+  //
+  // Commands in NO_REPLAY are animated or interactive — replaying `upgrade`
+  // locked the terminal for its whole animation again, and `apply` would have
+  // restarted the form — so their line is echoed but they are not rerun.
+  term.NO_REPLAY = ["tui", "upgrade", "apply", "test", "claude"];
   term.resizeListener = () => {
     if (window.rootTui?.active) {
       window.fitAddon.fit();
       return;
     }
+    const previousCols = term.cols;
+    window.fitAddon.fit();
+    if (term.cols === previousCols) {
+      term.scrollToBottom();
+      return;
+    }
     term._initialized = false;
     term.init(term.user, true);
     if (typeof preloadASCIIArt === "function") {
@@ -359,7 +372,9 @@ const extend = (term) => {
     term.runDeepLink({ replay: true });
     for (const c of term.history) {
       term.prompt("\r\n", ` ${c}\r\n`);
-      if (term.parseCommandLine(c).cmd !== "tui") term.command(c);
+      if (!term.NO_REPLAY.includes(term.parseCommandLine(c).cmd)) {
+        term.command(c);
+      }
     }
     term.prompt();
     term.scrollToBottom();
@@ -494,6 +509,20 @@ const extend = (term) => {
 
 // ── Helpers ──────────────────────────────────────────────────────────────────
 
+// Matches %name% for every registered command. Built on first use and cached;
+// the command set is fixed once config/commands.js has loaded.
+let _commandTokenRegexCache = null;
+function _commandTokenRegex() {
+  if (!_commandTokenRegexCache) {
+    const names = Object.keys(commands).map((cmd) =>
+      cmd.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")
+    );
+    _commandTokenRegexCache = new RegExp(`%(${names.join("|")})%`, "g");
+  }
+  _commandTokenRegexCache.lastIndex = 0;
+  return _commandTokenRegexCache;
+}
+
 // Wraps str at word boundaries to fit within maxWidth characters per line.
 // Falls back to a hard break at maxWidth if no whitespace is found.
 // TODO: This doesn't work well at detecting existing newlines in the input.
diff --git a/netlify/functions/submit-application.js b/netlify/functions/submit-application.js
index dadba28e..d85ed4af 100644
--- a/netlify/functions/submit-application.js
+++ b/netlify/functions/submit-application.js
@@ -1,60 +1,87 @@
-exports.handler = async (event, context) => {
-  // Only allow POST
-  if (event.httpMethod !== 'POST') {
-    return {
-      statusCode: 405,
-      body: JSON.stringify({ error: 'Method not allowed' }),
-    };
+// Forwards a job application to the Attio webhook.
+//
+// Only the fields the two forms send are forwarded, each capped at a length
+// that is generous for a real applicant, so an arbitrary payload cannot be
+// relayed into the CRM. A filled-in `website` field is a honeypot: neither form
+// renders it, so a value means a bot, which gets a success response and is
+// dropped on the floor.
+const FIELDS = {
+  name: 200,
+  email: 254,
+  linkedin: 500,
+  github: 100,
+  notes: 10000,
+  position: 200,
+};
+const MAX_BODY_BYTES = 20000;
+const HONEYPOT = "website";
+
+function sanitize(data) {
+  const clean = {};
+  for (const [field, max] of Object.entries(FIELDS)) {
+    const value = data[field];
+    if (value === undefined || value === null || value === "") continue;
+    if (typeof value !== "string") return null;
+    clean[field] = value.trim().slice(0, max);
+  }
+  return clean;
+}
+
+const json = (statusCode, body) => ({ statusCode, body: JSON.stringify(body) });
+
+exports.handler = async (event) => {
+  if (event.httpMethod !== "POST") {
+    return json(405, { error: "Method not allowed" });
   }
 
+  if ((event.body || "").length > MAX_BODY_BYTES) {
+    return json(413, { error: "Application is too large" });
+  }
+
+  let data;
   try {
-    const data = JSON.parse(event.body);
-
-    // Validate required fields
-    if (!data.name || !data.email) {
-      return {
-        statusCode: 400,
-        body: JSON.stringify({ error: 'Name and email are required' }),
-      };
-    }
+    data = JSON.parse(event.body);
+  } catch {
+    return json(400, { error: "Invalid JSON" });
+  }
+  if (!data || typeof data !== "object" || Array.isArray(data)) {
+    return json(400, { error: "Invalid JSON" });
+  }
 
-    // Forward to Attio webhook
-    const attioWebhookUrl = process.env.ATTIO_WEBHOOK_URL;
+  if (data[HONEYPOT]) {
+    return json(200, { success: true, message: "Application submitted successfully" });
+  }
 
+  const clean = sanitize(data);
+  if (!clean) {
+    return json(400, { error: "Fields must be strings" });
+  }
+  if (!clean.name || !clean.email) {
+    return json(400, { error: "Name and email are required" });
+  }
+
+  try {
+    const attioWebhookUrl = process.env.ATTIO_WEBHOOK_URL;
     if (!attioWebhookUrl) {
-      throw new Error('ATTIO_WEBHOOK_URL environment variable not set');
+      throw new Error("ATTIO_WEBHOOK_URL environment variable not set");
     }
 
-    const attioResponse = await fetch(
-      attioWebhookUrl,
-      {
-        method: 'POST',
-        headers: {
-          'Content-Type': 'application/json',
-        },
-        body: JSON.stringify(data),
-      }
-    );
+    const attioResponse = await fetch(attioWebhookUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(clean),
+    });
 
     if (!attioResponse.ok) {
       throw new Error(`Attio API error: ${attioResponse.status}`);
     }
 
-    return {
-      statusCode: 200,
-      body: JSON.stringify({
-        success: true,
-        message: 'Application submitted successfully'
-      }),
-    };
+    return json(200, { success: true, message: "Application submitted successfully" });
   } catch (error) {
-    console.error('Error submitting application:', error);
-    return {
-      statusCode: 500,
-      body: JSON.stringify({
-        error: 'Failed to submit application',
-        details: error.message
-      }),
-    };
+    console.error("Error submitting application:", error);
+    return json(500, { error: "Failed to submit application", details: error.message });
   }
 };
+
+exports.FIELDS = FIELDS;
+exports.MAX_BODY_BYTES = MAX_BODY_BYTES;
diff --git a/package-lock.json b/package-lock.json
index 9604b532..7ec2d719 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15,71 +15,44 @@
         "aalib.js": "^2.0.0"
       },
       "devDependencies": {
-        "jsdom": "^29.0.2",
-        "terser": "^5.46.1",
-        "vitest": "^4.1.4"
+        "jsdom": "^30.1.3",
+        "terser": "^5.51.2",
+        "vitest": "^5.1.0"
       }
     },
     "node_modules/@asamuzakjp/css-color": {
-      "version": "5.1.10",
-      "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-5.1.10.tgz",
-      "integrity": "sha512-02OhhkKtgNRuicQ/nF3TRnGsxL9wp0r3Y7VlKWyOHHGmGyvXv03y+PnymU8FKFJMTjIr1Bk8U2g1HWSLrpAHww==",
+      "version": "7.1.9",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-7.1.9.tgz",
+      "integrity": "sha512-vZ6JQVq8Ivgz6b/IBlAf90wZviXdluY13cQOPO+nJHbmXwGrPl2GcpqUY7a55/8ZVdfONXpCFMpRijOBCHNlcQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@csstools/css-calc": "^3.1.1",
-        "@csstools/css-color-parser": "^4.0.2",
-        "@csstools/css-parser-algorithms": "^4.0.0",
-        "@csstools/css-tokenizer": "^4.0.0"
+        "@csstools/css-calc": "^3.4.3",
+        "@csstools/css-color-parser": "^4.2.6",
+        "@csstools/css-parser-algorithms": "^4.0.2",
+        "@csstools/css-tokenizer": "^4.0.2",
+        "lru-cache": "^11.5.3"
       },
       "engines": {
-        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+        "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
       }
     },
     "node_modules/@asamuzakjp/dom-selector": {
-      "version": "7.0.9",
-      "resolved": "https://registry.npmjs.org/@asamuzakjp/dom-selector/-/dom-selector-7.0.9.tgz",
-      "integrity": "sha512-r3ElRr7y8ucyN2KdICwGsmj19RoN13CLCa/pvGydghWK6ZzeKQ+TcDjVdtEZz2ElpndM5jXw//B9CEee0mWnVg==",
+      "version": "10.0.5",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/dom-selector/-/dom-selector-10.0.5.tgz",
+      "integrity": "sha512-EgmJ7oEaGQECTn3H3wmnQpEy4hKY66VvM7VQndwPIQob3p877BgbyOUE3EX0LgXQCciF2H8KMdR+RznqjMNOLw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@asamuzakjp/nwsapi": "^2.3.9",
-        "bidi-js": "^1.0.3",
+        "bidi-js": "^1.1.0",
         "css-tree": "^3.2.1",
-        "is-potential-custom-element-name": "^1.0.1"
-      },
-      "engines": {
-        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
-      }
-    },
-    "node_modules/@asamuzakjp/dom-selector/node_modules/css-tree": {
-      "version": "3.2.1",
-      "resolved": "https://registry.npmjs.org/css-tree/-/css-tree-3.2.1.tgz",
-      "integrity": "sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "mdn-data": "2.27.1",
-        "source-map-js": "^1.2.1"
+        "is-potential-custom-element-name": "^1.0.1",
+        "lru-cache": "^11.5.3"
       },
       "engines": {
-        "node": "^10 || ^12.20.0 || ^14.13.0 || >=15.0.0"
+        "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
       }
     },
-    "node_modules/@asamuzakjp/dom-selector/node_modules/mdn-data": {
-      "version": "2.27.1",
-      "resolved": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.27.1.tgz",
-      "integrity": "sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==",
-      "dev": true,
-      "license": "CC0-1.0"
-    },
-    "node_modules/@asamuzakjp/nwsapi": {
-      "version": "2.3.9",
-      "resolved": "https://registry.npmjs.org/@asamuzakjp/nwsapi/-/nwsapi-2.3.9.tgz",
-      "integrity": "sha512-n8GuYSrI9bF7FFZ/SjhwevlHc8xaVlb/7HmHelnc/PZXBD2ZR49NnN9sMMuDdEGPeeRQ5d0hqlSlEpgCX3Wl0Q==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/@babel/helper-string-parser": {
       "version": "7.29.7",
       "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz",
@@ -139,31 +112,10 @@
         "specificity": "bin/cli.js"
       }
     },
-    "node_modules/@bramus/specificity/node_modules/css-tree": {
-      "version": "3.2.1",
-      "resolved": "https://registry.npmjs.org/css-tree/-/css-tree-3.2.1.tgz",
-      "integrity": "sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "mdn-data": "2.27.1",
-        "source-map-js": "^1.2.1"
-      },
-      "engines": {
-        "node": "^10 || ^12.20.0 || ^14.13.0 || >=15.0.0"
-      }
-    },
-    "node_modules/@bramus/specificity/node_modules/mdn-data": {
-      "version": "2.27.1",
-      "resolved": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.27.1.tgz",
-      "integrity": "sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==",
-      "dev": true,
-      "license": "CC0-1.0"
-    },
     "node_modules/@csstools/color-helpers": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/@csstools/color-helpers/-/color-helpers-6.0.2.tgz",
-      "integrity": "sha512-LMGQLS9EuADloEFkcTBR3BwV/CGHV7zyDxVRtVDTwdI2Ca4it0CCVTT9wCkxSgokjE5Ho41hEPgb8OEUwoXr6Q==",
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/@csstools/color-helpers/-/color-helpers-6.1.2.tgz",
+      "integrity": "sha512-grhRy3OKmniaAEKXMjua5z/EODX0MSqBGjunw8+j/3HQjOnahs2AGhvEOIYVUWcU6ScApbhLhVrQTX8XqrMrow==",
       "dev": true,
       "funding": [
         {
@@ -181,9 +133,9 @@
       }
     },
     "node_modules/@csstools/css-calc": {
-      "version": "3.2.0",
-      "resolved": "https://registry.npmjs.org/@csstools/css-calc/-/css-calc-3.2.0.tgz",
-      "integrity": "sha512-bR9e6o2BDB12jzN/gIbjHa5wLJ4UjD1CB9pM7ehlc0ddk6EBz+yYS1EV2MF55/HUxrHcB/hehAyt5vhsA3hx7w==",
+      "version": "3.4.3",
+      "resolved": "https://registry.npmjs.org/@csstools/css-calc/-/css-calc-3.4.3.tgz",
+      "integrity": "sha512-iex20d8CHVkyvg6B7UKV7uHnI2Bqo9g+EFfT9E0y+GvTvhZ/DwONJ+9aKb1dlqm0ZiGsL5RXjp0fCoJYnkeDjA==",
       "dev": true,
       "funding": [
         {
@@ -200,14 +152,14 @@
         "node": ">=20.19.0"
       },
       "peerDependencies": {
-        "@csstools/css-parser-algorithms": "^4.0.0",
-        "@csstools/css-tokenizer": "^4.0.0"
+        "@csstools/css-parser-algorithms": "^4.0.2",
+        "@csstools/css-tokenizer": "^4.0.2"
       }
     },
     "node_modules/@csstools/css-color-parser": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/@csstools/css-color-parser/-/css-color-parser-4.1.0.tgz",
-      "integrity": "sha512-U0KhLYmy2GVj6q4T3WaAe6NPuFYCPQoE3b0dRGxejWDgcPp8TP7S5rVdM5ZrFaqu4N67X8YaPBw14dQSYx3IyQ==",
+      "version": "4.2.7",
+      "resolved": "https://registry.npmjs.org/@csstools/css-color-parser/-/css-color-parser-4.2.7.tgz",
+      "integrity": "sha512-zgm9yjQz5iJB4VL8RyVwd71TWB8Q89FSxt/NzXoWqPSkEBOVtn9L6vAPtSc9hpKfB0Awo/AL2VKFHjYetBLFHQ==",
       "dev": true,
       "funding": [
         {
@@ -221,21 +173,21 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "@csstools/color-helpers": "^6.0.2",
-        "@csstools/css-calc": "^3.2.0"
+        "@csstools/color-helpers": "^6.1.2",
+        "@csstools/css-calc": "^3.4.3"
       },
       "engines": {
         "node": ">=20.19.0"
       },
       "peerDependencies": {
-        "@csstools/css-parser-algorithms": "^4.0.0",
-        "@csstools/css-tokenizer": "^4.0.0"
+        "@csstools/css-parser-algorithms": "^4.0.2",
+        "@csstools/css-tokenizer": "^4.0.2"
       }
     },
     "node_modules/@csstools/css-parser-algorithms": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/@csstools/css-parser-algorithms/-/css-parser-algorithms-4.0.0.tgz",
-      "integrity": "sha512-+B87qS7fIG3L5h3qwJ/IFbjoVoOe/bpOdh9hAjXbvx0o8ImEmUsGXN0inFOnk2ChCFgqkkGFQ+TpM5rbhkKe4w==",
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/@csstools/css-parser-algorithms/-/css-parser-algorithms-4.0.2.tgz",
+      "integrity": "sha512-40cSKyMvK+tq4qz6Awrlye2WGuOKt3FwPgtGg6KTfbHOWNw+Rk1rzbAtZnZ6IBhsY491HLRnDXwoyBAijmmILA==",
       "dev": true,
       "funding": [
         {
@@ -252,13 +204,38 @@
         "node": ">=20.19.0"
       },
       "peerDependencies": {
-        "@csstools/css-tokenizer": "^4.0.0"
+        "@csstools/css-tokenizer": "^4.0.2"
+      }
+    },
+    "node_modules/@csstools/css-syntax-patches-for-csstree": {
+      "version": "1.1.16",
+      "resolved": "https://registry.npmjs.org/@csstools/css-syntax-patches-for-csstree/-/css-syntax-patches-for-csstree-1.1.16.tgz",
+      "integrity": "sha512-LsDbJPP/B8cPasUJyTA5S99F7C4G93ngW8hUluXz8CFeOaaRnBPtBiIlvgcPYU0HmHNz8CXg+1vwFrIB4F6Dgw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT-0",
+      "peerDependencies": {
+        "css-tree": "^3.2.1"
+      },
+      "peerDependenciesMeta": {
+        "css-tree": {
+          "optional": true
+        }
       }
     },
     "node_modules/@csstools/css-tokenizer": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/@csstools/css-tokenizer/-/css-tokenizer-4.0.0.tgz",
-      "integrity": "sha512-QxULHAm7cNu72w97JUNCBFODFaXpbDg+dP8b/oWFAZ2MTRppA3U00Y2L1HqaS4J6yBqxwa/Y3nMBaxVKbB/NsA==",
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/@csstools/css-tokenizer/-/css-tokenizer-4.0.2.tgz",
+      "integrity": "sha512-OoKoR0f76dCY666JlcbhmVTs2drYj1GUXZTYTcbUgJjh9Nv41aFfZ21bPQTERm5+L5cBDo466NltB2lplS5GBw==",
       "dev": true,
       "funding": [
         {
@@ -276,9 +253,9 @@
       }
     },
     "node_modules/@exodus/bytes": {
-      "version": "1.15.0",
-      "resolved": "https://registry.npmjs.org/@exodus/bytes/-/bytes-1.15.0.tgz",
-      "integrity": "sha512-UY0nlA+feH81UGSHv92sLEPLCeZFjXOuHhrIo0HQydScuQc8s0A7kL/UdgwgDq8g8ilksmuoF35YVTNphV2aBQ==",
+      "version": "1.16.0",
+      "resolved": "https://registry.npmjs.org/@exodus/bytes/-/bytes-1.16.0.tgz",
+      "integrity": "sha512-IcpW84uEn3N7ETtNZMlxKhfl6Pec8rUNGOTBtWbK1FKhJxIFAptZyVrvVRVBimAJxJCgc3PxepxkdWWG4DVzfA==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -337,36 +314,56 @@
       }
     },
     "node_modules/@jridgewell/sourcemap-codec": {
-      "version": "1.5.5",
-      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
-      "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.6.0.tgz",
+      "integrity": "sha512-T7jf+5zgsZHwNJ4lvQ7/aezbyk0nNX+zJVWpmHA7VYsEx7a7qr5Rg5IbtJFqkgze5Y2sruq1RUY8Q837Od7iFw==",
       "dev": true,
       "license": "MIT"
     },
     "node_modules/@jridgewell/trace-mapping": {
-      "version": "0.3.25",
-      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.25.tgz",
-      "integrity": "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ==",
+      "version": "0.3.31",
+      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
+      "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@jridgewell/resolve-uri": "^3.1.0",
         "@jridgewell/sourcemap-codec": "^1.4.14"
       }
     },
     "node_modules/@oxc-project/types": {
-      "version": "0.144.0",
-      "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.144.0.tgz",
-      "integrity": "sha512-nuhZIOLuI6TFQ32I/WnUx+SCPY7SdSKwgnFHydAuoS1+Z4BRcaP+RRJmGzl9lw+0OFF7UmaESf7KQRXaNLHypg==",
+      "version": "0.156.0",
+      "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.156.0.tgz",
+      "integrity": "sha512-1Duyg48TdJNdyhEB8Xn1L36bT9Pv6GUtlKjHxOys8xkaF/rQq3XJE+bAurSK/AgIz5mGFsb77cn9Pb20+WCScw==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "funding": {
-        "url": "https://github.com/sponsors/Boshen"
+        "url": "https://github.com/sponsors/oxc-project"
+      }
+    },
+    "node_modules/@rolldown/binding-android-arm-eabi": {
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.16.tgz",
+      "integrity": "sha512-ia3DwAs0OsMGS7+IConptSiyk9pEXkOx/AbJ2n/lAGxH3QkWQus1t8d7gnAT38FCU2sQu8lUbeR6AiZFv4JxaA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "peer": true,
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-android-arm64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.4.tgz",
-      "integrity": "sha512-jHC2cnyKz5xU2fhECtFl8OZ83cYNt13GZQD+0uMJ/X3o+ijmd56okHhTUwxVSHPx1IRVIJEZ1/1pPzeLCU6XKA==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.16.tgz",
+      "integrity": "sha512-kx5wBiMB6E7TEvpl2B9gjLU004BkvEm2Dr941BFjx/SontPwSzNuQUIoVKxHHoSjpFIfHMmcguyLOtyn0hObRg==",
       "cpu": [
         "arm64"
       ],
@@ -376,14 +373,15 @@
       "os": [
         "android"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-darwin-arm64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.4.tgz",
-      "integrity": "sha512-Dc5mPD8F5F/FS8i01syd7FTF6yB2fVthH/TRkjwJkzUK6EpoxHtqvZQP5Zwq80/5z19TWYHIg1KOHboCgVx/aQ==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.16.tgz",
+      "integrity": "sha512-qslZrXnKJU4cUpjoAmtAo/KQM9e2IRMlmpig6Zpwj+8KWxW8v+nkAf9216Bsek9lOC1jvg2yCjygCFo2f83msQ==",
       "cpu": [
         "arm64"
       ],
@@ -393,14 +391,15 @@
       "os": [
         "darwin"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-darwin-x64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.4.tgz",
-      "integrity": "sha512-fpDm4oBo6SqLvWUYCmFhdde3U9KH2fRNNMeAnAPAIwxRL345xutL0EtEUcuoxsoazdJGv/MuDBQHlCDrtbvqOg==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.16.tgz",
+      "integrity": "sha512-FdF+y48ND13eAyM2mQn+85kvAqNlvRWROy2rhgA463X/0Gv4vGtazZtfaF1mRBLscYvtOlh4QnLjOWiFzX69OQ==",
       "cpu": [
         "x64"
       ],
@@ -410,14 +409,15 @@
       "os": [
         "darwin"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-freebsd-x64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.4.tgz",
-      "integrity": "sha512-rSJoreDE/HoIzoaib6MTp5jQtCTdMHKIvItAKT/ImS6Y6Ww76oUaeMyp4Vc/fAgd/ehji068IxetHXAnqUwN9A==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.16.tgz",
+      "integrity": "sha512-ddjqFM5e95AgLbUPtKIS7V1KTVlA0RUgCVr5mn+/IEhsdy3pr+Vuj/HZ7nlMN2FyxIwUktOH1LEPIQXO1v9y1Q==",
       "cpu": [
         "x64"
       ],
@@ -427,14 +427,15 @@
       "os": [
         "freebsd"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-linux-arm-gnueabihf": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.4.tgz",
-      "integrity": "sha512-/jm8OGHgn7oGaJu3i/qZI9spUGcJ+y/lk43ttQ/iO1tOd9NissG6o97bighBCiL+BKRngmcDuR6ikfwYdJmVuQ==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.16.tgz",
+      "integrity": "sha512-tHdKWbFkFBI687iim3LIyIvyL7j66VvQYkDPss5Stn/qyE2tWkR1YD0dXmXPFKKqT/o5ZEJVsaRsWS2meQwGOA==",
       "cpu": [
         "arm"
       ],
@@ -444,116 +445,141 @@
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-linux-arm64-gnu": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.4.tgz",
-      "integrity": "sha512-tIP06BeD9EqvECBrPZ+sqdPlYrT+aYaAiu1wYziVx5elRK/ftm33JxVDy2bXGbr6J0CrtirCkR87/X5a2euEng==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.16.tgz",
+      "integrity": "sha512-FJiLGAblPBMlBEdbOqw6kW6QcXDWAf/oJu7gYs9ZJZwmg+K+/zjFLxPTIY9izJUzxzc24FHvmseyA0IvJSl17w==",
       "cpu": [
         "arm64"
       ],
       "dev": true,
+      "libc": [
+        "glibc"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-linux-arm64-musl": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.4.tgz",
-      "integrity": "sha512-Ql1Q0EQqVThvn9VAVlwNzsUvbSFtCMGjLpRRi4pk5i7NZZ4n5ISiLMjHYtus4VQ2PvkSw24zyaCVsiS+sXPj1w==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.16.tgz",
+      "integrity": "sha512-hrJpblMsrQ58U9veWpbXzkhV5zStunds6HWLprqq1qauvgBr1E6P+24kLj6lSLI9vjRn/RYpjprhkHQPKGWpNg==",
       "cpu": [
         "arm64"
       ],
       "dev": true,
+      "libc": [
+        "musl"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-linux-ppc64-gnu": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.4.tgz",
-      "integrity": "sha512-GjbjXD4XXfN19D0LZNbmiCBUoDiRACsYHr0yaIbbn8aFsXjHZifcYqu/W5Er5X2X990WjHXFrxarn5chzItorQ==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.16.tgz",
+      "integrity": "sha512-qJd/dC6j6CwLG9/s/RP2nb1RZ0GIgj7Ioj7x/SYa3RzjVrlzrmH0fhIOpfvqQDeIsdP0loi+kHaMhJzY1PBIaA==",
       "cpu": [
         "ppc64"
       ],
       "dev": true,
+      "libc": [
+        "glibc"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-linux-s390x-gnu": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.4.tgz",
-      "integrity": "sha512-p5WR0NOwaRmJ/B1b6IjEFLLivwEsf3PrdBIhRbhTCQisbo2SvHHpG4ELB/+FgQNnB88LTOF86upmJmbvZdQ2lw==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.16.tgz",
+      "integrity": "sha512-Vx7Xg5uUJuNcujJjI70OICaH0EYj80BtOLZTSN7uOYg8QOLlyKnaG0IW7Fn/J0IpJsaKzmDKMhOQv1JBM9m9vg==",
       "cpu": [
         "s390x"
       ],
       "dev": true,
+      "libc": [
+        "glibc"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-linux-x64-gnu": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.4.tgz",
-      "integrity": "sha512-4/GyVjmhR+Tc6HLJvwc1sOhPqAZtySiSMesOZyX6JQ5XBxoTDEMKQzvo07NIK6nTon/SivlZqvhzvuVBNQhObQ==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.16.tgz",
+      "integrity": "sha512-TNKhgE3uJTsTzatUSSYt0Kgo+Oa2uSlSjz4r1aEIea7HX6ULBym4fAlYUhG1i6pjNf2njfCUAfKwr6C3E9Xg1w==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "libc": [
+        "glibc"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-linux-x64-musl": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.4.tgz",
-      "integrity": "sha512-l9eeLsCNvPpmSXUej0etw/J1eqV0Jj1D5G/xG6YTijmE6dkv6E2QezgWbTfQk63v952DPqrjOCoiqxq7Bw0YUQ==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.16.tgz",
+      "integrity": "sha512-7chXdpjXZ8qG0+mIxECN3cT9kvhZ3/oZhMX6Pp876P7CDrIy8nJswva6Mq357JR7eYXfuskwZxMeV1SzoZdHrA==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "libc": [
+        "musl"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-openharmony-arm64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.4.tgz",
-      "integrity": "sha512-e0F355MSTMm3+UOqtV3L24gFUp2N5m1f8L/7d56deik6va+AXdrt9F8LbzGpeWGWRbZEDq4m8NVnJDeBtf9DZg==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.16.tgz",
+      "integrity": "sha512-Kwjt+7uNTJK5/MDkGWGVO2KQPnj8yAV75dMpfwyHZrJSXWHrniOB0aUEWlVYf3H1hOqFLIStLdM5QXq6bnKmOQ==",
       "cpu": [
         "arm64"
       ],
@@ -563,14 +589,15 @@
       "os": [
         "openharmony"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-win32-arm64-msvc": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.4.tgz",
-      "integrity": "sha512-AWLi0uBRYh6QlE7OKhiz+phZC0qwtij2QZmhmOdsLdFn64m7oMpooE9ICE3lhm9xMb4SpDo2WbHcxX1iFLFtqw==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.16.tgz",
+      "integrity": "sha512-/LH6WfjDRXXJz/p5xl4TmU+jpcnwcxbKEQBW/GZE0JHfN0lGIyTtsUEGaQ/q/GikkGJ2yLKe6pwm7AnEWO8pdw==",
       "cpu": [
         "arm64"
       ],
@@ -580,14 +607,15 @@
       "os": [
         "win32"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@rolldown/binding-win32-x64-msvc": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.4.tgz",
-      "integrity": "sha512-UwSDJOg3dqCAejWdxclJjCsh3Qq4vLYMDxmyHqo1btz3stK2VqgwNd3mm5tuIwzSlGIQ/1H9Hr+Zn09mrezNqQ==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.16.tgz",
+      "integrity": "sha512-1lv1KvX0Z871zfk7vw+dnXMMnHNyDwMzWG8Kv3HxDXMOhzCX4SHc7HK319fInP0i+0p9D8brkfzL7pJOaGl+tw==",
       "cpu": [
         "x64"
       ],
@@ -597,6 +625,7 @@
       "os": [
         "win32"
       ],
+      "peer": true,
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       }
@@ -606,14 +635,8 @@
       "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz",
       "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==",
       "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/@standard-schema/spec": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
-      "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==",
-      "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
     },
     "node_modules/@types/chai": {
       "version": "5.2.3",
@@ -634,45 +657,29 @@
       "license": "MIT"
     },
     "node_modules/@types/estree": {
-      "version": "1.0.5",
-      "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.5.tgz",
-      "integrity": "sha512-/kYRxGDLWzHOB7q+wtSUQlFrtcdUccpfy+X+9iMBpHK8QLLhx2wIPYuS5DYtR9Wa/YlZAbIovy7qVdB1Aq6Lyw==",
-      "dev": true
-    },
-    "node_modules/@vitest/expect": {
-      "version": "4.1.4",
-      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.4.tgz",
-      "integrity": "sha512-iPBpra+VDuXmBFI3FMKHSFXp3Gx5HfmSCE8X67Dn+bwephCnQCaB7qWK2ldHa+8ncN8hJU8VTMcxjPpyMkUjww==",
+      "version": "1.0.10",
+      "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.10.tgz",
+      "integrity": "sha512-lTyOMnOcmRBzdCv6/4zUZCrEhV0xrqQiUZBZtVcbmLHBXKLnN8q89v/wKRF/Q0HbwVsqbIG3o5HDoFl9sduM+g==",
       "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@standard-schema/spec": "^1.1.0",
-        "@types/chai": "^5.2.2",
-        "@vitest/spy": "4.1.4",
-        "@vitest/utils": "4.1.4",
-        "chai": "^6.2.2",
-        "tinyrainbow": "^3.1.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/vitest"
-      }
+      "license": "MIT"
     },
     "node_modules/@vitest/mocker": {
-      "version": "4.1.4",
-      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.4.tgz",
-      "integrity": "sha512-R9HTZBhW6yCSGbGQnDnH3QHfJxokKN4KB+Yvk9Q1le7eQNYwiCyKxmLmurSpFy6BzJanSLuEUDrD+j97Q+ZLPg==",
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-5.1.0.tgz",
+      "integrity": "sha512-5umB9/jlWcqVS6fsrFmv5Gdnpu6wAUio/lEOwAmvB7v+lFo/IW2B9FhAD0p19GCULTgMzLCdUmuCDCnAzWgppQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/spy": "4.1.4",
+        "@jridgewell/trace-mapping": "0.3.31",
+        "@vitest/spy": "5.1.0",
         "estree-walker": "^3.0.3",
-        "magic-string": "^0.30.21"
+        "magic-string": "^1.4.3"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       },
       "peerDependencies": {
-        "msw": "^2.4.9",
+        "msw": "^2.4.9 || ^3.0.0",
         "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
       },
       "peerDependenciesMeta": {
@@ -684,70 +691,12 @@
         }
       }
     },
-    "node_modules/@vitest/pretty-format": {
-      "version": "4.1.4",
-      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.4.tgz",
-      "integrity": "sha512-ddmDHU0gjEUyEVLxtZa7xamrpIefdEETu3nZjWtHeZX4QxqJ7tRxSteHVXJOcr8jhiLoGAhkK4WJ3WqBpjx42A==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "tinyrainbow": "^3.1.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/vitest"
-      }
-    },
-    "node_modules/@vitest/runner": {
-      "version": "4.1.4",
-      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.4.tgz",
-      "integrity": "sha512-xTp7VZ5aXP5ZJrn15UtJUWlx6qXLnGtF6jNxHepdPHpMfz/aVPx+htHtgcAL2mDXJgKhpoo2e9/hVJsIeFbytQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@vitest/utils": "4.1.4",
-        "pathe": "^2.0.3"
-      },
-      "funding": {
-        "url": "https://opencollective.com/vitest"
-      }
-    },
-    "node_modules/@vitest/snapshot": {
-      "version": "4.1.4",
-      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.4.tgz",
-      "integrity": "sha512-MCjCFgaS8aZz+m5nTcEcgk/xhWv0rEH4Yl53PPlMXOZ1/Ka2VcZU6CJ+MgYCZbcJvzGhQRjVrGQNZqkGPttIKw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@vitest/pretty-format": "4.1.4",
-        "@vitest/utils": "4.1.4",
-        "magic-string": "^0.30.21",
-        "pathe": "^2.0.3"
-      },
-      "funding": {
-        "url": "https://opencollective.com/vitest"
-      }
-    },
     "node_modules/@vitest/spy": {
-      "version": "4.1.4",
-      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.4.tgz",
-      "integrity": "sha512-XxNdAsKW7C+FLydqFJLb5KhJtl3PGCMmYwFRfhvIgxJvLSXhhVI1zM8f1qD3Zg7RCjTSzDVyct6sghs9UEgBEQ==",
-      "dev": true,
-      "license": "MIT",
-      "funding": {
-        "url": "https://opencollective.com/vitest"
-      }
-    },
-    "node_modules/@vitest/utils": {
-      "version": "4.1.4",
-      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.4.tgz",
-      "integrity": "sha512-13QMT+eysM5uVGa1rG4kegGYNp6cnQcsTc67ELFbhNLQO+vgsygtYJx2khvdt4gVQqSSpC/KT5FZZxUpP3Oatw==",
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-5.1.0.tgz",
+      "integrity": "sha512-2DPO5OMHWKrBngC+fCmTQqemNF0gidRhp3lxbBmRhW+M1XJrfgPpqNqWVevXtn2f2ufD5ZaR1B6B641aAlcX5A==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "@vitest/pretty-format": "4.1.4",
-        "convert-source-map": "^2.0.0",
-        "tinyrainbow": "^3.1.0"
-      },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
@@ -819,9 +768,9 @@
       }
     },
     "node_modules/bidi-js": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/bidi-js/-/bidi-js-1.0.3.tgz",
-      "integrity": "sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw==",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/bidi-js/-/bidi-js-1.1.0.tgz",
+      "integrity": "sha512-fX1Onk0tdVPC7obPWB5EbJ1z7NVhLq4m2xZLq2YXBkxzMXIGRpNMU88n0EPgWseKl12J7zXs7qrDxPK4sRs2fg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -836,9 +785,9 @@
       "license": "MIT"
     },
     "node_modules/chai": {
-      "version": "6.2.2",
-      "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz",
-      "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==",
+      "version": "6.3.0",
+      "resolved": "https://registry.npmjs.org/chai/-/chai-6.3.0.tgz",
+      "integrity": "sha512-XWAtwJ6OHO+tj0EKCs0Y2UamnyOxseZWltU4x2U2wh8g4AigdjwvtUjvLP2tqkA/avxHEtzxNaqGq/YGNwckKg==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -852,12 +801,19 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/convert-source-map": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz",
-      "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==",
+    "node_modules/css-tree": {
+      "version": "3.2.1",
+      "resolved": "https://registry.npmjs.org/css-tree/-/css-tree-3.2.1.tgz",
+      "integrity": "sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "dependencies": {
+        "mdn-data": "2.27.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12.20.0 || ^14.13.0 || >=15.0.0"
+      }
     },
     "node_modules/csstype": {
       "version": "3.1.3",
@@ -865,17 +821,17 @@
       "integrity": "sha512-M1uQkMl8rQK/szD0LNhtqxIPLpimGm8sOBwU7lLnCpSbTyY3yeU1Vc7l4KT5zT4s/yOxHH5O7tIuuLOCnLADRw=="
     },
     "node_modules/data-urls": {
-      "version": "7.0.0",
-      "resolved": "https://registry.npmjs.org/data-urls/-/data-urls-7.0.0.tgz",
-      "integrity": "sha512-23XHcCF+coGYevirZceTVD7NdJOqVn+49IHyxgszm+JIiHLoB2TkmPtsYkNWT1pvRSGkc35L6NHs0yHkN2SumA==",
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/data-urls/-/data-urls-8.0.0.tgz",
+      "integrity": "sha512-JQUCCK+/CAGbGGx618PlFZMXH81Jtj7t73CHv9dd/zVWvxgGT2zLFRjnKb+Ng46GIwcy+f7f88qd4duqllK+WQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "whatwg-mimetype": "^5.0.0",
-        "whatwg-url": "^16.0.0"
+        "whatwg-url": "^17.1.2"
       },
       "engines": {
-        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+        "node": "^22.14.0 || >=24.0.0"
       }
     },
     "node_modules/decimal.js": {
@@ -891,14 +847,28 @@
       "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
       "dev": true,
       "license": "Apache-2.0",
+      "peer": true,
       "engines": {
         "node": ">=8"
       }
     },
+    "node_modules/entities": {
+      "version": "9.0.0",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-9.0.0.tgz",
+      "integrity": "sha512-oJFNDJg3kTPwAD1cNn2+WmUq4wFoo09npc3Ydf1D7ED4smRiWrsKnaLxykrTWgyGEcusc87P5dxlAleol9kpkg==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
     "node_modules/es-module-lexer": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.0.0.tgz",
-      "integrity": "sha512-5POEcUuZybH7IdmGsD8wlf0AI55wMecM9rVBTI/qEAy2c1kTOm3DjFYjrBdI2K3BaJjJYfYFeRtM0t9ssnRuxw==",
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.2.tgz",
+      "integrity": "sha512-poHGpORABojJJucnV9KbOavETW8lBVnphkW77ER5/BQ5Fz7oXSoCNek7IH3vR5nRjdsEz926ibFYX8KtLQmdyw==",
       "dev": true,
       "license": "MIT"
     },
@@ -907,14 +877,15 @@
       "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz",
       "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@types/estree": "^1.0.0"
       }
     },
     "node_modules/expect-type": {
-      "version": "1.3.0",
-      "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.3.0.tgz",
-      "integrity": "sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==",
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.4.0.tgz",
+      "integrity": "sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==",
       "dev": true,
       "license": "Apache-2.0",
       "engines": {
@@ -950,21 +921,22 @@
       "os": [
         "darwin"
       ],
+      "peer": true,
       "engines": {
         "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
       }
     },
     "node_modules/html-encoding-sniffer": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-6.0.0.tgz",
-      "integrity": "sha512-CV9TW3Y3f8/wT0BRFc1/KAVQ3TUHiXmaAb6VW9vtiMFf7SLoMd1PdAc4W3KFOFETBJUb90KatHqlsZMWV+R9Gg==",
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-7.0.0.tgz",
+      "integrity": "sha512-UikN5yr7xsCDAq87Or5or0PAlD3HJJOKVzM05az588WnpDJ4Ux7a2A53Qi6gofGg2/EtvF/H4hCi/TXfCW4Y6w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@exodus/bytes": "^1.6.0"
+        "@exodus/bytes": "^1.15.1"
       },
       "engines": {
-        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+        "node": "^22.13.0 || >=24.0.0"
       }
     },
     "node_modules/is-potential-custom-element-name": {
@@ -975,39 +947,38 @@
       "license": "MIT"
     },
     "node_modules/jsdom": {
-      "version": "29.0.2",
-      "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-29.0.2.tgz",
-      "integrity": "sha512-9VnGEBosc/ZpwyOsJBCQ/3I5p7Q5ngOY14a9bf5btenAORmZfDse1ZEheMiWcJ3h81+Fv7HmJFdS0szo/waF2w==",
+      "version": "30.1.3",
+      "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-30.1.3.tgz",
+      "integrity": "sha512-hQMUPvRgN7KxsfIytDQji7bimuJeRQa6Qo5+iuiZQk5CafeRxLIA10/cG5YCBFNpD9RO3oqIiN4CO1Y44kxqXg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@asamuzakjp/css-color": "^5.1.5",
-        "@asamuzakjp/dom-selector": "^7.0.6",
+        "@asamuzakjp/css-color": "^7.1.3",
+        "@asamuzakjp/dom-selector": "^10.0.3",
         "@bramus/specificity": "^2.4.2",
-        "@csstools/css-syntax-patches-for-csstree": "^1.1.1",
-        "@exodus/bytes": "^1.15.0",
+        "@csstools/css-syntax-patches-for-csstree": "^1.1.15",
+        "@exodus/bytes": "^1.16.0",
         "css-tree": "^3.2.1",
-        "data-urls": "^7.0.0",
+        "data-urls": "^8.0.0",
         "decimal.js": "^10.6.0",
-        "html-encoding-sniffer": "^6.0.0",
+        "html-encoding-sniffer": "^7.0.0",
         "is-potential-custom-element-name": "^1.0.1",
-        "lru-cache": "^11.2.7",
-        "parse5": "^8.0.0",
+        "lru-cache": "^11.5.3",
+        "parse5": "^8.0.1",
         "saxes": "^6.0.0",
-        "symbol-tree": "^3.2.4",
-        "tough-cookie": "^6.0.1",
-        "undici": "^7.24.5",
-        "w3c-xmlserializer": "^5.0.0",
+        "tough-cookie": "^6.0.2",
+        "undici": "^8.12.1",
+        "w3c-xmlserializer": "^6.0.0",
         "webidl-conversions": "^8.0.1",
         "whatwg-mimetype": "^5.0.0",
-        "whatwg-url": "^16.0.1",
+        "whatwg-url": "^17.2.0",
         "xml-name-validator": "^5.0.0"
       },
       "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24.0.0"
+        "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
       },
       "peerDependencies": {
-        "canvas": "^3.0.0"
+        "canvas": "^3.2.3"
       },
       "peerDependenciesMeta": {
         "canvas": {
@@ -1015,58 +986,13 @@
         }
       }
     },
-    "node_modules/jsdom/node_modules/@csstools/css-syntax-patches-for-csstree": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@csstools/css-syntax-patches-for-csstree/-/css-syntax-patches-for-csstree-1.1.3.tgz",
-      "integrity": "sha512-SH60bMfrRCJF3morcdk57WklujF4Jr/EsQUzqkarfHXEFcAR1gg7fS/chAE922Sehgzc1/+Tz5H3Ypa1HiEKrg==",
-      "dev": true,
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/csstools"
-        },
-        {
-          "type": "opencollective",
-          "url": "https://opencollective.com/csstools"
-        }
-      ],
-      "license": "MIT-0",
-      "peerDependencies": {
-        "css-tree": "^3.2.1"
-      },
-      "peerDependenciesMeta": {
-        "css-tree": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/jsdom/node_modules/css-tree": {
-      "version": "3.2.1",
-      "resolved": "https://registry.npmjs.org/css-tree/-/css-tree-3.2.1.tgz",
-      "integrity": "sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "mdn-data": "2.27.1",
-        "source-map-js": "^1.2.1"
-      },
-      "engines": {
-        "node": "^10 || ^12.20.0 || ^14.13.0 || >=15.0.0"
-      }
-    },
-    "node_modules/jsdom/node_modules/mdn-data": {
-      "version": "2.27.1",
-      "resolved": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.27.1.tgz",
-      "integrity": "sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==",
-      "dev": true,
-      "license": "CC0-1.0"
-    },
     "node_modules/lightningcss": {
       "version": "1.33.0",
       "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz",
       "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==",
       "dev": true,
       "license": "MPL-2.0",
+      "peer": true,
       "dependencies": {
         "detect-libc": "^2.0.3"
       },
@@ -1104,6 +1030,7 @@
       "os": [
         "android"
       ],
+      "peer": true,
       "engines": {
         "node": ">= 12.0.0"
       },
@@ -1125,6 +1052,7 @@
       "os": [
         "darwin"
       ],
+      "peer": true,
       "engines": {
         "node": ">= 12.0.0"
       },
@@ -1146,6 +1074,7 @@
       "os": [
         "darwin"
       ],
+      "peer": true,
       "engines": {
         "node": ">= 12.0.0"
       },
@@ -1167,6 +1096,7 @@
       "os": [
         "freebsd"
       ],
+      "peer": true,
       "engines": {
         "node": ">= 12.0.0"
       },
@@ -1188,6 +1118,7 @@
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">= 12.0.0"
       },
@@ -1204,11 +1135,15 @@
         "arm64"
       ],
       "dev": true,
+      "libc": [
+        "glibc"
+      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">= 12.0.0"
       },
@@ -1225,11 +1160,15 @@
         "arm64"
       ],
       "dev": true,
+      "libc": [
+        "musl"
+      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">= 12.0.0"
       },
@@ -1246,11 +1185,15 @@
         "x64"
       ],
       "dev": true,
+      "libc": [
+        "glibc"
+      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">= 12.0.0"
       },
@@ -1267,11 +1210,15 @@
         "x64"
       ],
       "dev": true,
+      "libc": [
+        "musl"
+      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">= 12.0.0"
       },
@@ -1293,6 +1240,7 @@
       "os": [
         "win32"
       ],
+      "peer": true,
       "engines": {
         "node": ">= 12.0.0"
       },
@@ -1314,6 +1262,7 @@
       "os": [
         "win32"
       ],
+      "peer": true,
       "engines": {
         "node": ">= 12.0.0"
       },
@@ -1323,9 +1272,9 @@
       }
     },
     "node_modules/lru-cache": {
-      "version": "11.3.5",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.3.5.tgz",
-      "integrity": "sha512-NxVFwLAnrd9i7KUBxC4DrUhmgjzOs+1Qm50D3oF1/oL+r1NpZ4gA7xvG0/zJ8evR7zIKn4vLf7qTNduWFtCrRw==",
+      "version": "11.5.3",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.3.tgz",
+      "integrity": "sha512-U4N8FgzmWxc8k1VH8Kr6lQg18U7Fjvby6wXHVRX/ZZ7IwWbRMgrRbP0Wrb5q5NVinryp4SQampHKdvtecItxUg==",
       "dev": true,
       "license": "BlueOak-1.0.0",
       "engines": {
@@ -1333,19 +1282,26 @@
       }
     },
     "node_modules/magic-string": {
-      "version": "0.30.21",
-      "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",
-      "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==",
+      "version": "1.4.5",
+      "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.4.5.tgz",
+      "integrity": "sha512-oLLC2+YvQUfAa+vxoufE/yc1icb87M9iXIRqAoR/2EhE/8cb3SF/+Gi0c2By1B+5Vz2e2vQtUvHiu1+63Znh+w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@jridgewell/sourcemap-codec": "^1.5.5"
+        "@jridgewell/sourcemap-codec": "^1.6.0"
       }
     },
+    "node_modules/mdn-data": {
+      "version": "2.27.1",
+      "resolved": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.27.1.tgz",
+      "integrity": "sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==",
+      "dev": true,
+      "license": "CC0-1.0"
+    },
     "node_modules/nanoid": {
-      "version": "3.3.18",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
-      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
+      "version": "3.3.20",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz",
+      "integrity": "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ==",
       "funding": [
         {
           "type": "github",
@@ -1361,49 +1317,32 @@
       }
     },
     "node_modules/obug": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/obug/-/obug-2.1.1.tgz",
-      "integrity": "sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/obug/-/obug-3.0.0.tgz",
+      "integrity": "sha512-5vvB5+W7ePv+p3uqxi+RcW1XAzLW0/hxt3/4X4Lc4qHudzOhmBiBwOY6DRob4WnanAEGvNcLjF+KNOufrUoEQw==",
       "dev": true,
       "funding": [
         "https://github.com/sponsors/sxzz",
         "https://opencollective.com/debug"
       ],
-      "license": "MIT"
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.20.0"
+      }
     },
     "node_modules/parse5": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/parse5/-/parse5-8.0.0.tgz",
-      "integrity": "sha512-9m4m5GSgXjL4AjumKzq1Fgfp3Z8rsvjRNbnkVwfu2ImRqE5D0LnY2QfDen18FSY9C573YU5XxSapdHZTZ2WolA==",
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/parse5/-/parse5-8.1.0.tgz",
+      "integrity": "sha512-sq3qBFpee5jeocbFbO48VHlGr8sT7mbXS0vxlKN6sottBtJzrOG3998sr0llSZcQAGgfpdmEYAIZE0P9z0dE8w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "entities": "^6.0.0"
+        "entities": "^9.0.0"
       },
       "funding": {
         "url": "https://github.com/inikulin/parse5?sponsor=1"
       }
     },
-    "node_modules/parse5/node_modules/entities": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/entities/-/entities-6.0.1.tgz",
-      "integrity": "sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==",
-      "dev": true,
-      "license": "BSD-2-Clause",
-      "engines": {
-        "node": ">=0.12"
-      },
-      "funding": {
-        "url": "https://github.com/fb55/entities?sponsor=1"
-      }
-    },
-    "node_modules/pathe": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
-      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/picocolors": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
@@ -1411,9 +1350,9 @@
       "license": "ISC"
     },
     "node_modules/picomatch": {
-      "version": "4.0.5",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz",
-      "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==",
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz",
+      "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -1424,9 +1363,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.26",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz",
-      "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==",
+      "version": "8.5.32",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.32.tgz",
+      "integrity": "sha512-LJlKCCAUFKOuZxipUdYw1NzIITEsPcgyOG9LkvRJvuKj/bRzbuRY0ARXvL0pWGpsZvn8jku+LMep2eU0seHp8g==",
       "funding": [
         {
           "type": "opencollective",
@@ -1443,9 +1382,9 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.17",
+        "nanoid": "^3.3.20",
         "picocolors": "^1.1.1",
-        "source-map-js": "^1.2.1"
+        "source-map-js": "^1.2.2"
       },
       "engines": {
         "node": "^10 || ^12 || >=14"
@@ -1488,13 +1427,14 @@
       }
     },
     "node_modules/rolldown": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.4.tgz",
-      "integrity": "sha512-rSr7irW0K7QRWzjdJXqZowkcRdDtjRduh43rBltnVKd0VFq839l1lJoDvGJb6gl7+4rTTCrPWu+YfujUL8Ug7w==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.16.tgz",
+      "integrity": "sha512-bWvlMpFKiTfDKfnK7FC2MPgPeWCf/Kpwsq49ApdW+FQaBZb6O6dZ4MAPbPUjp7hYQrw/RobqCzn64BRrQecGHw==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
-        "@oxc-project/types": "=0.144.0",
+        "@oxc-project/types": "=0.156.0",
         "@rolldown/pluginutils": "^1.0.0"
       },
       "bin": {
@@ -1504,20 +1444,21 @@
         "node": "^20.19.0 || >=22.12.0"
       },
       "optionalDependencies": {
-        "@rolldown/binding-android-arm64": "1.2.4",
-        "@rolldown/binding-darwin-arm64": "1.2.4",
-        "@rolldown/binding-darwin-x64": "1.2.4",
-        "@rolldown/binding-freebsd-x64": "1.2.4",
-        "@rolldown/binding-linux-arm-gnueabihf": "1.2.4",
-        "@rolldown/binding-linux-arm64-gnu": "1.2.4",
-        "@rolldown/binding-linux-arm64-musl": "1.2.4",
-        "@rolldown/binding-linux-ppc64-gnu": "1.2.4",
-        "@rolldown/binding-linux-s390x-gnu": "1.2.4",
-        "@rolldown/binding-linux-x64-gnu": "1.2.4",
-        "@rolldown/binding-linux-x64-musl": "1.2.4",
-        "@rolldown/binding-openharmony-arm64": "1.2.4",
-        "@rolldown/binding-win32-arm64-msvc": "1.2.4",
-        "@rolldown/binding-win32-x64-msvc": "1.2.4"
+        "@rolldown/binding-android-arm-eabi": "1.2.16",
+        "@rolldown/binding-android-arm64": "1.2.16",
+        "@rolldown/binding-darwin-arm64": "1.2.16",
+        "@rolldown/binding-darwin-x64": "1.2.16",
+        "@rolldown/binding-freebsd-x64": "1.2.16",
+        "@rolldown/binding-linux-arm-gnueabihf": "1.2.16",
+        "@rolldown/binding-linux-arm64-gnu": "1.2.16",
+        "@rolldown/binding-linux-arm64-musl": "1.2.16",
+        "@rolldown/binding-linux-ppc64-gnu": "1.2.16",
+        "@rolldown/binding-linux-s390x-gnu": "1.2.16",
+        "@rolldown/binding-linux-x64-gnu": "1.2.16",
+        "@rolldown/binding-linux-x64-musl": "1.2.16",
+        "@rolldown/binding-openharmony-arm64": "1.2.16",
+        "@rolldown/binding-win32-arm64-msvc": "1.2.16",
+        "@rolldown/binding-win32-x64-msvc": "1.2.16"
       }
     },
     "node_modules/rxjs": {
@@ -1544,13 +1485,6 @@
         "node": ">=v12.22.7"
       }
     },
-    "node_modules/siginfo": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz",
-      "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==",
-      "dev": true,
-      "license": "ISC"
-    },
     "node_modules/source-map": {
       "version": "0.6.1",
       "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz",
@@ -1560,9 +1494,9 @@
       }
     },
     "node_modules/source-map-js": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
-      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
       "license": "BSD-3-Clause",
       "engines": {
         "node": ">=0.10.0"
@@ -1579,17 +1513,10 @@
         "source-map": "^0.6.0"
       }
     },
-    "node_modules/stackback": {
-      "version": "0.0.2",
-      "resolved": "https://registry.npmjs.org/stackback/-/stackback-0.0.2.tgz",
-      "integrity": "sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/std-env": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/std-env/-/std-env-4.1.0.tgz",
-      "integrity": "sha512-Rq7ybcX2RuC55r9oaPVEW7/xu3tj8u4GeBYHBWCychFtzMIr86A7e3PPEBPT37sHStKX3+TiX/Fr/ACmJLVlLQ==",
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/std-env/-/std-env-4.3.0.tgz",
+      "integrity": "sha512-OtU/EgQ1kIm5KwqQpBC6ZEMXrZRui11w8zgfTWp8cdO9B8OaPsbA8bTHO2P+HNo1VlUTGMVBwPhydu6poeXiag==",
       "dev": true,
       "license": "MIT"
     },
@@ -1601,17 +1528,10 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/symbol-tree": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
-      "integrity": "sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/terser": {
-      "version": "5.46.1",
-      "resolved": "https://registry.npmjs.org/terser/-/terser-5.46.1.tgz",
-      "integrity": "sha512-vzCjQO/rgUuK9sf8VJZvjqiqiHFaZLnOiimmUuOKODxWL8mm/xua7viT7aqX7dgPY60otQjUotzFMmCB4VdmqQ==",
+      "version": "5.51.2",
+      "resolved": "https://registry.npmjs.org/terser/-/terser-5.51.2.tgz",
+      "integrity": "sha512-bWnjSNscmuI+GJze6ZupnHP8G/cTcsJF+bXCeQknk2SHQsgbNJnLrqiH9jZ2W4STPVXH2mDKKRX3iwPhc9Cn/Q==",
       "dev": true,
       "license": "BSD-2-Clause",
       "dependencies": {
@@ -1628,16 +1548,19 @@
       }
     },
     "node_modules/tinybench": {
-      "version": "2.9.0",
-      "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
-      "integrity": "sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==",
+      "version": "6.2.3",
+      "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-6.2.3.tgz",
+      "integrity": "sha512-Al01C2JIBnO2CXCAPbpAl6sUiOZHeThGtHYNTa51JRw9PyWOCdr+9Ong05R4qg/Sk3+H645E8ov1h2c58ityNw==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.0.0"
+      }
     },
     "node_modules/tinyexec": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.1.1.tgz",
-      "integrity": "sha512-VKS/ZaQhhkKFMANmAOhhXVoIfBXblQxGX1myCQ2faQrfmobMftXeJPcZGp0gS07ocvGJWDLZGyOZDadDBqYIJg==",
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.3.1.tgz",
+      "integrity": "sha512-GCvB3aoys96IuDFBMcTB46JOR6mdMtAToqwiW8JlWhsoh1mhHi/xn9ss/Dg7N555GiJyEt2qzoG/NHCwM6h1EA==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -1661,40 +1584,30 @@
         "url": "https://github.com/sponsors/SuperchupuDev"
       }
     },
-    "node_modules/tinyrainbow": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/tinyrainbow/-/tinyrainbow-3.1.0.tgz",
-      "integrity": "sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14.0.0"
-      }
-    },
     "node_modules/tldts": {
-      "version": "7.0.28",
-      "resolved": "https://registry.npmjs.org/tldts/-/tldts-7.0.28.tgz",
-      "integrity": "sha512-+Zg3vWhRUv8B1maGSTFdev9mjoo8Etn2Ayfs4cnjlD3CsGkxXX4QyW3j2WJ0wdjYcYmy7Lx2RDsZMhgCWafKIw==",
+      "version": "7.4.19",
+      "resolved": "https://registry.npmjs.org/tldts/-/tldts-7.4.19.tgz",
+      "integrity": "sha512-48dH6aSpQnpbzDUc4vIQZ1VjB8tkK+e8c1yx05/SZK+rkssgjEOlxDd/yU8/a4vGYQ9vRgJr9dwMq9TJ0b3X2Q==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "tldts-core": "^7.0.28"
+        "tldts-core": "^7.4.19"
       },
       "bin": {
         "tldts": "bin/cli.js"
       }
     },
     "node_modules/tldts-core": {
-      "version": "7.0.28",
-      "resolved": "https://registry.npmjs.org/tldts-core/-/tldts-core-7.0.28.tgz",
-      "integrity": "sha512-7W5Efjhsc3chVdFhqtaU0KtK32J37Zcr9RKtID54nG+tIpcY79CQK/veYPODxtD/LJ4Lue66jvrQzIX2Z2/pUQ==",
+      "version": "7.4.20",
+      "resolved": "https://registry.npmjs.org/tldts-core/-/tldts-core-7.4.20.tgz",
+      "integrity": "sha512-C630TWXZCZmLq0F2bW4QqwnaaxCQ/svpAqvJwnC4JvgEM5ohhBnGsEzTLSOXcN+xjz+kEaHS5uoWIw2klnqd0A==",
       "dev": true,
       "license": "MIT"
     },
     "node_modules/tough-cookie": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-6.0.1.tgz",
-      "integrity": "sha512-LktZQb3IeoUWB9lqR5EWTHgW/VTITCXg4D21M+lvybRVdylLrRMnqaIONLVb5mav8vM19m44HIcGq4qASeu2Qw==",
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-6.0.2.tgz",
+      "integrity": "sha512-exgYmnmL/sJpR3upZfXG5PoatXQii55xAiXGXzY+sROLZ/Y+SLcp9PgJNI9Vz37HpQ74WvDcLT8eqm+kV3FzrA==",
       "dev": true,
       "license": "BSD-3-Clause",
       "dependencies": {
@@ -1705,39 +1618,40 @@
       }
     },
     "node_modules/tr46": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/tr46/-/tr46-6.0.0.tgz",
-      "integrity": "sha512-bLVMLPtstlZ4iMQHpFHTR7GAGj2jxi8Dg0s2h2MafAE4uSWF98FC/3MomU51iQAMf8/qDUbKWf5GxuvvVcXEhw==",
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/tr46/-/tr46-7.0.0.tgz",
+      "integrity": "sha512-BcDSDW+SIGWVOns1Zm6Yg91q9AEj7eaID0QDY9oIqJD1A8dscNwMcl9Sms2DeuWCNov1X0/oXanHGYQBSLwZsg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "punycode": "^2.3.1"
       },
       "engines": {
-        "node": ">=20"
+        "node": "^22.14.0 || >=24.0.0"
       }
     },
     "node_modules/undici": {
-      "version": "7.29.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz",
-      "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==",
+      "version": "8.12.3",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-8.12.3.tgz",
+      "integrity": "sha512-+fdndUTwBP86cVjihTp21hZHo7d6oj1c/47XPA3lL8mM0XHs+C4EkcjmgRsFnFk2f/UONGDy9ItBItmXsLOQHw==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">=20.18.1"
+        "node": ">=22.19.0"
       }
     },
     "node_modules/vite": {
-      "version": "8.2.1",
-      "resolved": "https://registry.npmjs.org/vite/-/vite-8.2.1.tgz",
-      "integrity": "sha512-EU/eS7BH3XROHh2YnBefjM6DBKA6ZeMZEYQbj7NLWg5wHYlhB8B/Mayd5XsgWq+NFYccDOTemRpdETWR6Ka/lw==",
+      "version": "8.3.5",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-8.3.5.tgz",
+      "integrity": "sha512-z1YpjieJ9g0ebTmQpLBv/oq9E3F9EIlOe+7LahW8SrE3LTiG3udBRUXQOlYXP9b+IC2q2phHeVxj9xGlw34OEQ==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "lightningcss": "^1.33.0",
-        "picomatch": "^4.0.5",
-        "postcss": "^8.5.25",
-        "rolldown": "~1.2.1",
+        "picomatch": "^4.0.7",
+        "postcss": "^8.5.30",
+        "rolldown": "~1.2.14",
         "tinyglobby": "^0.2.17"
       },
       "bin": {
@@ -1754,7 +1668,7 @@
       },
       "peerDependencies": {
         "@types/node": "^20.19.0 || >=22.12.0",
-        "@vitejs/devtools": "^0.4.0",
+        "@vitejs/devtools": "^0.7.1 || ^0.8.0",
         "esbuild": "^0.27.0 || ^0.28.0",
         "jiti": ">=1.21.0",
         "less": "^4.0.0",
@@ -1806,38 +1720,31 @@
       }
     },
     "node_modules/vitest": {
-      "version": "4.1.4",
-      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.4.tgz",
-      "integrity": "sha512-tFuJqTxKb8AvfyqMfnavXdzfy3h3sWZRWwfluGbkeR7n0HUev+FmNgZ8SDrRBTVrVCjgH5cA21qGbCffMNtWvg==",
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/vitest/-/vitest-5.1.0.tgz",
+      "integrity": "sha512-MzmNFnrwa8v8lF1bLxw3UJ4EREwVOVb75VqJZmUDRjJ6EluK/x9th7qTbaeDk41WxE1GxWqmTXcdsfobfH5sOA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/expect": "4.1.4",
-        "@vitest/mocker": "4.1.4",
-        "@vitest/pretty-format": "4.1.4",
-        "@vitest/runner": "4.1.4",
-        "@vitest/snapshot": "4.1.4",
-        "@vitest/spy": "4.1.4",
-        "@vitest/utils": "4.1.4",
-        "es-module-lexer": "^2.0.0",
-        "expect-type": "^1.3.0",
-        "magic-string": "^0.30.21",
-        "obug": "^2.1.1",
-        "pathe": "^2.0.3",
-        "picomatch": "^4.0.3",
-        "std-env": "^4.0.0-rc.1",
-        "tinybench": "^2.9.0",
-        "tinyexec": "^1.0.2",
-        "tinyglobby": "^0.2.15",
-        "tinyrainbow": "^3.1.0",
-        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0",
-        "why-is-node-running": "^2.3.0"
+        "@types/chai": "^5.2.2",
+        "@vitest/mocker": "5.1.0",
+        "chai": "^6.3.0",
+        "es-module-lexer": "^2.3.2",
+        "expect-type": "^1.4.0",
+        "magic-string": "^1.4.3",
+        "obug": "^3.0.0",
+        "picomatch": "^4.0.7",
+        "std-env": "^4.3.0",
+        "tinybench": "^6.2.2",
+        "tinyexec": "^1.3.1",
+        "tinyglobby": "^0.2.17",
+        "why-is-node-running": "3.2.1"
       },
       "bin": {
         "vitest": "vitest.mjs"
       },
       "engines": {
-        "node": "^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": "^22.12.0 || ^24.0.0 || >=26.0.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
@@ -1845,16 +1752,16 @@
       "peerDependencies": {
         "@edge-runtime/vm": "*",
         "@opentelemetry/api": "^1.9.0",
-        "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
-        "@vitest/browser-playwright": "4.1.4",
-        "@vitest/browser-preview": "4.1.4",
-        "@vitest/browser-webdriverio": "4.1.4",
-        "@vitest/coverage-istanbul": "4.1.4",
-        "@vitest/coverage-v8": "4.1.4",
-        "@vitest/ui": "4.1.4",
+        "@types/node": "^22.0.0 || >=24.0.0",
+        "@vitest/browser-playwright": "5.1.0",
+        "@vitest/browser-preview": "5.1.0",
+        "@vitest/browser-webdriverio": "^5.0.0-beta.5 || >=5.0.0",
+        "@vitest/coverage-istanbul": "5.1.0",
+        "@vitest/coverage-v8": "5.1.0",
+        "@vitest/ui": "5.1.0",
         "happy-dom": "*",
         "jsdom": "*",
-        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
+        "vite": "^6.4.0 || ^7.0.0 || ^8.0.0"
       },
       "peerDependenciesMeta": {
         "@edge-runtime/vm": {
@@ -1907,16 +1814,16 @@
       }
     },
     "node_modules/w3c-xmlserializer": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/w3c-xmlserializer/-/w3c-xmlserializer-5.0.0.tgz",
-      "integrity": "sha512-o8qghlI8NZHU1lLPrpi2+Uq7abh4GGPpYANlalzWxyWteJOCsr/P+oPBA49TOLu5FTZO4d3F9MnWJfiMo4BkmA==",
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/w3c-xmlserializer/-/w3c-xmlserializer-6.0.0.tgz",
+      "integrity": "sha512-4Nsy8K5Tr6SPDH9jhKJOHf7ChDrc1zufZTVSF7x72hwuEXBqxqk9G6cK+K2NRUtB3iELRJqjXb4JPDMBjMTl2Q==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "xml-name-validator": "^5.0.0"
       },
       "engines": {
-        "node": ">=18"
+        "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
       }
     },
     "node_modules/webidl-conversions": {
@@ -1940,35 +1847,31 @@
       }
     },
     "node_modules/whatwg-url": {
-      "version": "16.0.1",
-      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-16.0.1.tgz",
-      "integrity": "sha512-1to4zXBxmXHV3IiSSEInrreIlu02vUOvrhxJJH5vcxYTBDAx51cqZiKdyTxlecdKNSjj8EcxGBxNf6Vg+945gw==",
+      "version": "17.3.0",
+      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-17.3.0.tgz",
+      "integrity": "sha512-KwOAJrpf+GTgBvcBQJcP38sMF0DsQKdwtG+TxM2pW44P6E5k0hDbWrDmyuJDIF0Uef0aQq0ZoJs+5oI+k8ddhg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@exodus/bytes": "^1.11.0",
-        "tr46": "^6.0.0",
+        "@exodus/bytes": "^1.16.0",
+        "tr46": "^7.0.0",
         "webidl-conversions": "^8.0.1"
       },
       "engines": {
-        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+        "node": "^22.14.0 || >=24.0.0"
       }
     },
     "node_modules/why-is-node-running": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.3.0.tgz",
-      "integrity": "sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==",
+      "version": "3.2.1",
+      "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-3.2.1.tgz",
+      "integrity": "sha512-Tb2FUhB4vUsGQlfSquQLYkApkuPAFQXGFzxWKHHumVz2dK+X1RUm/HnID4+TfIGYJ1kTcwOaCk/buYCEJr6YjQ==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "siginfo": "^2.0.0",
-        "stackback": "0.0.2"
-      },
       "bin": {
         "why-is-node-running": "cli.js"
       },
       "engines": {
-        "node": ">=8"
+        "node": ">=20.11"
       }
     },
     "node_modules/xml-name-validator": {
diff --git a/package.json b/package.json
index a655c12a..08f208b2 100644
--- a/package.json
+++ b/package.json
@@ -16,13 +16,13 @@
   "scripts": {
     "build": "node scripts/build-assets.js",
     "build:pages": "node scripts/build-pages.js",
-    "start": "npm run build && npx netlify dev",
+    "start": "npm run build && npx --yes -p netlify-cli@27.16.2 netlify dev",
     "test": "vitest run",
     "test:watch": "vitest"
   },
   "devDependencies": {
-    "jsdom": "^29.0.2",
-    "terser": "^5.46.1",
-    "vitest": "^4.1.4"
+    "jsdom": "^30.1.3",
+    "terser": "^5.51.2",
+    "vitest": "^5.1.0"
   }
 }
diff --git a/scripts/build-assets.js b/scripts/build-assets.js
index df2e420d..8089a4f8 100644
--- a/scripts/build-assets.js
+++ b/scripts/build-assets.js
@@ -1,3 +1,4 @@
+const crypto = require("crypto");
 const fs = require("fs");
 const path = require("path");
 const { minify } = require("terser");
@@ -50,8 +51,12 @@ const appBundleSources = [
 // Copied into dist/ verbatim. config/*.js is here because welcome.htm loads it
 // with raw <script src> tags rather than through the bundle, and js/geo.js and
 // js/comcastify.js are fetched on demand by the terminal instead of bundled.
+// README.md is served so `cat README.md` reads the deployed copy from this
+// origin instead of GitHub. _headers is the Netlify cache policy.
 const staticAssets = [
+  "_headers",
   "favicon.png",
+  "README.md",
   "welcome.htm",
   "tui.html",
   "css/bootstrap.css",
@@ -127,6 +132,55 @@ async function copyVendorScript(asset) {
   console.log(`${asset.dest}: ${source.length} -> ${output.length} bytes`);
 }
 
+// The homepage's scripts are served under content-hashed names so _headers can
+// cache them immutably: a changed file gets a new name, and index.html (which
+// is always revalidated) points at it. Everything else keeps its plain path.
+const FINGERPRINTED = [
+  "js/xterm.js",
+  "js/addon-fit.js",
+  "js/addon-web-links.js",
+  "js/app.bundle.js",
+];
+
+function fingerprintName(relativePath, content) {
+  const hash = crypto.createHash("sha256").update(content).digest("hex").slice(0, 10);
+  const ext = path.extname(relativePath);
+  const base = path.basename(relativePath, ext);
+  return `static/${base}.${hash}${ext}`;
+}
+
+// Rewrites each <script src="js/x.js"> in the homepage to its hashed path.
+function rewriteScriptSources(html, renames) {
+  let output = html;
+  for (const [from, to] of Object.entries(renames)) {
+    const tag = `src="${from}"`;
+    if (!output.includes(tag)) {
+      throw new Error(`index.html does not load ${from}; cannot fingerprint it`);
+    }
+    output = output.replace(tag, `src="${to}"`);
+  }
+  return output;
+}
+
+function fingerprintHomepageScripts() {
+  const renames = {};
+  for (const relativePath of FINGERPRINTED) {
+    const absolutePath = path.join(outDir, relativePath);
+    const content = fs.readFileSync(absolutePath);
+    const hashed = fingerprintName(relativePath, content);
+    writeText(hashed, content);
+    fs.rmSync(absolutePath);
+    renames[relativePath] = hashed;
+  }
+  const indexPath = path.join(outDir, "index.html");
+  fs.writeFileSync(
+    indexPath,
+    rewriteScriptSources(fs.readFileSync(indexPath, "utf8"), renames)
+  );
+  console.log(`fingerprinted: ${Object.values(renames).join(", ")}`);
+  return renames;
+}
+
 async function buildAppBundle() {
   const source = appBundleSources
     .map((file) => `// ${file}\n${readText(file)}`)
@@ -179,9 +233,19 @@ async function main() {
   // The crawlable static mirror, plus dist/index.html. Part of `npm run build`
   // so every Netlify deploy regenerates it from the current config/*.js.
   writePages();
+  // Must follow writePages(), which writes the index.html this rewrites.
+  fingerprintHomepageScripts();
 }
 
-module.exports = { appBundleSources, main, staticAssets, vendorScripts };
+module.exports = {
+  FINGERPRINTED,
+  appBundleSources,
+  fingerprintName,
+  main,
+  rewriteScriptSources,
+  staticAssets,
+  vendorScripts,
+};
 
 // Guarded so tests can import the bundle order without triggering a build.
 if (require.main === module) {
diff --git a/tests/ascii-art.test.js b/tests/ascii-art.test.js
index e8c52021..fed1283c 100644
--- a/tests/ascii-art.test.js
+++ b/tests/ascii-art.test.js
@@ -72,7 +72,10 @@ describe("ascii-art", () => {
     expect(getArt("lee")).toContain("images/lee.png");
   });
 
-  it("preloads root, team, and portfolio art in idle batches", async () => {
+  it("preloads root and team art in idle batches, and leaves portfolio art on demand", async () => {
+    // Portfolio logos are ~70 files and several megabytes; `tldr` awaits its
+    // own image before rendering, so warming them cost every visitor the whole
+    // download for nothing.
     const { preloadASCIIArt, isASCIIArtLoaded } = loadAsciiArt({
       term: { cols: 30 },
     });
@@ -81,8 +84,7 @@ describe("ascii-art", () => {
 
     expect(isASCIIArtLoaded("rootvc-square")).toBe(true);
     expect(isASCIIArtLoaded("lee")).toBe(true);
-    expect(isASCIIArtLoaded("esper")).toBe(true);
-    expect(env.window.scheduleIdleTask).toHaveBeenCalled();
+    expect(isASCIIArtLoaded("esper")).toBe(false);
   });
 
   it("settles instead of hanging when the image fails to load", async () => {
diff --git a/tests/build-pages.test.js b/tests/build-pages.test.js
index 7ddb9fab..ac9a0696 100644
--- a/tests/build-pages.test.js
+++ b/tests/build-pages.test.js
@@ -107,18 +107,20 @@ describe("config/*.js stay classic browser scripts", () => {
 });
 
 describe("script load order", () => {
-  it("welcome.htm loads config/firm.js before config/commands.js", () => {
-    // commands.js reads `firm` at the top level, so the reverse order is a
-    // temporal-dead-zone crash that takes out buildGeoPage(). Read the real
-    // <script> tags rather than raw offsets, so prose in a comment that happens
-    // to name a file cannot swing the result.
+  it("welcome.htm loads only the data configs it renders, firm.js first", () => {
+    // buildGeoPage() reads firm.blurb, portfolio and team directly. It used to
+    // pull in the whole terminal command set just to derive the blurb, which
+    // was the largest script on the page. Read the real <script> tags rather
+    // than raw offsets, so prose in a comment that names a file cannot swing
+    // the result.
     const source = fs.readFileSync(path.join(REPO_ROOT, "welcome.htm"), "utf8");
     const srcs = [...source.matchAll(/<script\s+src="([^"]+)"/g)].map((m) => m[1]);
 
-    expect(srcs).toContain("config/firm.js");
-    expect(srcs.indexOf("config/firm.js")).toBeLessThan(
-      srcs.indexOf("config/commands.js")
-    );
+    expect(srcs).not.toContain("config/commands.js");
+    for (const config of ["config/firm.js", "config/portfolio.js", "config/team.js"]) {
+      expect(srcs).toContain(config);
+    }
+    expect(srcs.indexOf("config/firm.js")).toBeLessThan(srcs.indexOf("config/portfolio.js"));
   });
 
   it("welcome.htm declares a document language", () => {
@@ -126,6 +128,38 @@ describe("script load order", () => {
     expect(doc.documentElement.getAttribute("lang")).toBe("en");
   });
 
+  it("serves the homepage scripts under content-hashed names with an immutable cache rule", () => {
+    const { FINGERPRINTED, fingerprintName, rewriteScriptSources, staticAssets } =
+      buildAssetsModule;
+    const html = renderIndexHtml(config);
+    const renames = {};
+    for (const file of FINGERPRINTED) {
+      renames[file] = fingerprintName(file, `content of ${file}`);
+      expect(renames[file]).toMatch(/^static\/[a-z.-]+\.[0-9a-f]{10}\.js$/);
+    }
+    // Same content, same name; different content, different name.
+    expect(fingerprintName("js/a.js", "x")).toBe(fingerprintName("js/a.js", "x"));
+    expect(fingerprintName("js/a.js", "x")).not.toBe(fingerprintName("js/a.js", "y"));
+
+    const rewritten = rewriteScriptSources(html, renames);
+    const doc = parse(rewritten);
+    for (const [from, to] of Object.entries(renames)) {
+      expect(doc.querySelector(`script[src="${from}"]`)).toBeNull();
+      expect(doc.querySelector(`script[src="${to}"]`)).not.toBeNull();
+    }
+    expect(() => rewriteScriptSources(html, { "js/missing.js": "static/x.js" })).toThrow(/missing\.js/);
+
+    // The cache policy that makes the hashing worthwhile ships with the build.
+    expect(staticAssets).toContain("_headers");
+    const headers = fs.readFileSync(path.join(REPO_ROOT, "_headers"), "utf8");
+    expect(headers).toMatch(/^\/static\/\*\n\s+Cache-Control: public, max-age=31536000, immutable/m);
+    expect(headers).toMatch(/^\/images\/\*\n\s+Cache-Control: public, max-age=\d+/m);
+  });
+
+  it("ships README.md so `cat README.md` is served from this origin", () => {
+    expect(buildAssetsModule.staticAssets).toContain("README.md");
+  });
+
   it("the app bundle lists config/firm.js before config/commands.js", () => {
     // Same constraint, enforced on the concatenation order in build-assets.js.
     const { appBundleSources } = buildAssetsModule;
diff --git a/tests/commands.test.js b/tests/commands.test.js
index bd1cf2bf..3f399917 100644
--- a/tests/commands.test.js
+++ b/tests/commands.test.js
@@ -201,6 +201,16 @@ describe("cd", () => {
   });
 });
 
+describe("eval is gone", () => {
+  // The URL fragment runs as a command on load, so `/#eval-<js>` was a
+  // reflected XSS on the origin: the command ran its argument through eval.
+  it("is not a command, so a crafted deep link gets 'Command not found'", () => {
+    const { commands } = loadCommands();
+    expect(commands.eval).toBeUndefined();
+    expect(Object.keys(commands).some((name) => /eval/i.test(name))).toBe(false);
+  });
+});
+
 describe("help stays in sync with commands", () => {
   // config/help.js is what `help` prints. Nothing links the two files, so a
   // command can be listed without existing — which is exactly what happened
@@ -226,3 +236,36 @@ describe("help stays in sync with commands", () => {
     expect(missing).toEqual([]);
   });
 });
+
+// `claude` looks like the Claude Code CLI starting up, then declines to be
+// one. It never loads anything and hands the prompt straight back.
+describe("claude", () => {
+  function loadClaudeTerm() {
+    const { commands, term } = loadCommands();
+    term._initialized = true;
+    const printed = () =>
+      [...term.stylePrint.mock.calls, ...term.writeln.mock.calls]
+        .map((c) => c[0])
+        .join("\n")
+        .replace(/\x1b\[[0-9;]*m/g, "");
+    return { claude: commands.claude, term, printed };
+  }
+
+  it("draws the welcome box, delivers the tip, and exits", () => {
+    const { claude, term, printed } = loadClaudeTerm();
+    expect(claude([])).toBeUndefined(); // terminal.js renders the prompt as usual
+    expect(printed()).toContain('Welcome to Claude Code!');
+    expect(printed()).toContain("cwd: /home/guest");
+    expect(printed()).toContain('※ Tip: We\'re not paying for your Claude tokens!');
+    expect(term.locked).toBeFalsy();
+  });
+
+  it("keeps the box edges aligned", () => {
+    const { claude, printed } = loadClaudeTerm();
+    claude([]);
+    const box = printed().split("\n").filter((l) => /^[╭│╰]/.test(l));
+    expect(box.length).toBeGreaterThan(2);
+    const widths = new Set(box.map((l) => l.length));
+    expect(widths.size).toBe(1);
+  });
+});
diff --git a/tests/fs.test.js b/tests/fs.test.js
index ed60438a..fe23a5f1 100644
--- a/tests/fs.test.js
+++ b/tests/fs.test.js
@@ -40,7 +40,7 @@ afterEach(() => {
 });
 
 describe("virtual fs", () => {
-  it("deduplicates concurrent remote file loads", async () => {
+  it("deduplicates concurrent remote file loads and fetches from this origin", async () => {
     const { _loadFile } = loadFs();
 
     const first = _loadFile("README.md");
@@ -51,6 +51,9 @@ describe("virtual fs", () => {
     await Promise.all([first, second]);
 
     expect(env.window.fetch).toHaveBeenCalledTimes(1);
+    // Used to hit raw.githubusercontent.com, a cross-origin dependency whose
+    // `main` branch need not match the deployed build.
+    expect(env.window.fetch).toHaveBeenCalledWith("/README.md");
     expect(env.document.getElementById("README.md")).not.toBeNull();
   });
 
diff --git a/tests/submit-application.test.js b/tests/submit-application.test.js
new file mode 100644
index 00000000..b675deeb
--- /dev/null
+++ b/tests/submit-application.test.js
@@ -0,0 +1,69 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { createRequire } from "node:module";
+
+const require = createRequire(import.meta.url);
+const { handler, FIELDS, MAX_BODY_BYTES } = require("../netlify/functions/submit-application.js");
+
+const post = (body) => handler({ httpMethod: "POST", body: typeof body === "string" ? body : JSON.stringify(body) });
+
+describe("submit-application", () => {
+  beforeEach(() => {
+    process.env.ATTIO_WEBHOOK_URL = "https://attio.example/webhook";
+    vi.stubGlobal("fetch", vi.fn(async () => ({ ok: true })));
+  });
+  afterEach(() => {
+    vi.unstubAllGlobals();
+    delete process.env.ATTIO_WEBHOOK_URL;
+  });
+
+  const forwarded = () => JSON.parse(fetch.mock.calls[0][1].body);
+
+  it("forwards only the known fields, trimmed and capped", async () => {
+    const response = await post({
+      name: "  Ada  ",
+      email: "ada@example.com",
+      notes: "x".repeat(FIELDS.notes + 50),
+      position: "Platform Engineer",
+      role: "admin",
+      __proto__: { polluted: true },
+      extra: { nested: "payload" },
+    });
+    expect(response.statusCode).toBe(200);
+    expect(fetch).toHaveBeenCalledTimes(1);
+    expect(fetch.mock.calls[0][0]).toBe("https://attio.example/webhook");
+    const body = forwarded();
+    expect(body).toEqual({
+      name: "Ada",
+      email: "ada@example.com",
+      notes: "x".repeat(FIELDS.notes),
+      position: "Platform Engineer",
+    });
+    expect(body).not.toHaveProperty("role");
+    expect(body).not.toHaveProperty("extra");
+  });
+
+  it("drops honeypot submissions without forwarding, but answers success", async () => {
+    const response = await post({ name: "Bot", email: "bot@example.com", website: "http://spam" });
+    expect(response.statusCode).toBe(200);
+    expect(fetch).not.toHaveBeenCalled();
+  });
+
+  it.each([
+    ["missing name", { email: "a@b.c" }, 400],
+    ["non-string field", { name: ["Ada"], email: "a@b.c" }, 400],
+    ["malformed JSON", "{not json", 400],
+    ["array body", [1, 2], 400],
+    ["oversized body", { name: "Ada", email: "a@b.c", notes: "x".repeat(MAX_BODY_BYTES) }, 413],
+  ])("rejects %s without forwarding", async (_, body, status) => {
+    const response = await post(body);
+    expect(response.statusCode).toBe(status);
+    expect(fetch).not.toHaveBeenCalled();
+  });
+
+  it("rejects non-POST and reports upstream failure", async () => {
+    expect((await handler({ httpMethod: "GET" })).statusCode).toBe(405);
+    fetch.mockResolvedValueOnce({ ok: false, status: 502 });
+    const response = await post({ name: "Ada", email: "a@b.c" });
+    expect(response.statusCode).toBe(500);
+  });
+});
diff --git a/tests/terminal-ext.test.js b/tests/terminal-ext.test.js
index 37eced69..3101cb33 100644
--- a/tests/terminal-ext.test.js
+++ b/tests/terminal-ext.test.js
@@ -28,7 +28,7 @@ function loadTerminalExt(globals = {}) {
 function createTerm(overrides = {}) {
   const term = {
     VERSION: 4,
-    _core: { buffer: { x: 0 } },
+    buffer: { active: { cursorX: 0 } },
     cols: 80,
     command: vi.fn(() => 0),
     currentLine: "",
@@ -53,10 +53,19 @@ afterEach(() => {
 });
 
 describe("terminal-ext", () => {
+  // Simulates fitAddon.fit() changing the column count on the next resize.
+  function fitTo(cols) {
+    env.window.fitAddon.fit.mockImplementation(() => {
+      env.window.__term.cols = cols;
+    });
+  }
+
   it("does not reopen the TUI when resizing replays CLI history or deep links", () => {
     const launch = vi.fn();
     const { extend } = loadTerminalExt({ commands: { tui: launch } });
     const term = createTerm(); extend(term);
+    env.window.__term = term;
+    fitTo(120);
     term.history = ['tui'];
     term.deepLink = 'tui';
     term.init = vi.fn(); term.prompt = vi.fn();
@@ -64,6 +73,77 @@ describe("terminal-ext", () => {
     expect(launch).not.toHaveBeenCalled();
     expect(term.prompt).toHaveBeenCalled();
   });
+
+  it("replays history only when the column count changes", () => {
+    // Phone keyboards and collapsing address bars fire resize with the same
+    // width. xterm keeps its buffer in that case, so wiping and redrawing the
+    // session was pure disruption.
+    const whois = vi.fn();
+    const { extend } = loadTerminalExt({ commands: { whois } });
+    const term = createTerm();
+    env.window.__term = term;
+    extend(term); // resets history, so it is set afterwards
+    term.history = ["whois lee"];
+    term.init = vi.fn();
+    term.prompt = vi.fn();
+
+    term.resizeListener(); // fit leaves cols at 80
+    expect(term.init).not.toHaveBeenCalled();
+    expect(whois).not.toHaveBeenCalled();
+    expect(term.scrollToBottom).toHaveBeenCalled();
+
+    fitTo(40);
+    term.resizeListener();
+    expect(term.init).toHaveBeenCalledWith("guest", true);
+    expect(whois).toHaveBeenCalledWith(["lee"]);
+  });
+
+  it("echoes but does not rerun animated or interactive commands on replay", () => {
+    // `upgrade` locks the terminal for its whole animation and `apply` opens a
+    // form; replaying either on a window resize was hostile.
+    const commands = Object.fromEntries(
+      ["upgrade", "apply", "test", "claude", "whois"].map((name) => [name, vi.fn()])
+    );
+    const { extend } = loadTerminalExt({ commands });
+    const term = createTerm();
+    env.window.__term = term;
+    extend(term);
+    term.history = ["upgrade", "apply 1", "test", "claude", "whois lee"];
+    fitTo(40);
+    term.init = vi.fn();
+    term.prompt = vi.fn();
+
+    term.resizeListener();
+
+    for (const name of ["upgrade", "apply", "test", "claude"]) {
+      expect(commands[name]).not.toHaveBeenCalled();
+    }
+    expect(commands.whois).toHaveBeenCalledWith(["lee"]);
+    // Every line is still echoed so the transcript reads as it did.
+    const echoed = term.prompt.mock.calls.map((c) => c[1]).filter(Boolean);
+    expect(echoed).toEqual(expect.arrayContaining([" upgrade\r\n", " apply 1\r\n"]));
+  });
+
+  it("reads the cursor through xterm's public buffer API", () => {
+    const { extend } = loadTerminalExt();
+    const term = createTerm({ buffer: { active: { cursorX: 25 } } });
+    extend(term);
+    // prompt is "guest:rootpc ~ $" (16 chars) plus the space.
+    expect(term.pos()).toBe(25 - "guest:rootpc ~ $".length - 1);
+  });
+
+  it("colorizes every %command% token in a line with one pass", () => {
+    const { extend } = loadTerminalExt({
+      commands: { help: vi.fn(), whois: vi.fn(), "c.d": vi.fn() },
+      colorText: (text, color) => (color === "command" ? `[${text}]` : text),
+    });
+    const term = createTerm();
+    extend(term);
+    term.stylePrint("Try %whois% or %help%; %nope% stays; %c.d% is escaped, %cxd% is not");
+    expect(term.writeln).toHaveBeenCalledWith(
+      "Try [whois] or [help]; %nope% stays; [c.d] is escaped, %cxd% is not"
+    );
+  });
   it("fits without resetting the retained CLI while the TUI is active", () => {
     const { extend } = loadTerminalExt({rootTui:{active:true}});
     const term = createTerm(); extend(term);
diff --git a/welcome.htm b/welcome.htm
index 52e58aff..4ec5231c 100644
--- a/welcome.htm
+++ b/welcome.htm
@@ -70,12 +70,9 @@
 
         <script src="js/geo.js"></script>
         <script src="js/comcastify.js"></script>
-        <!-- Order matters: config/commands.js reads `firm`, `portfolio`, and
-             `team` at the top level, so those must load first. -->
         <script src="config/firm.js"></script>
         <script src="config/portfolio.js"></script>
         <script src="config/team.js"></script>
-        <script src="config/commands.js"></script>
         <link rel="stylesheet" href="css/bootstrap.css" />
 
         <style>