@deslop/gateway 0.1.1241 → 0.1.1244

package/dist/server.js

@@ -2167,7 +2167,7 @@ const emptyContext$1 = {
 * @category formatting
 * @since 2.0.0
 */
-function format$2(input, options) {
+function format$4(input, options) {
 	const space = options?.space ?? 0;
 	const ancestors = /* @__PURE__ */ new WeakSet();
 	const gap = !space ? "" : typeof space === "number" ? " ".repeat(space) : space;
@@ -2331,7 +2331,7 @@ function formatJson(input, options) {
 	return JSON.stringify(input, function(key, value) {
 		const original = Object.getOwnPropertyDescriptor(sources.get(this) ?? this, key)?.value;
 		const redacted = hasProperty(original, symbolRedactable) ? redact$2(original) : redact$2(value);
-		if (typeof redacted === "bigint") return format$2(redacted);
+		if (typeof redacted === "bigint") return format$4(redacted);
 		if (typeof redacted !== "object" || redacted === null) return redacted;
 		const current = redacted instanceof Error && !hasProperty(redacted, "toJSON") ? {
 			...redacted,
@@ -2476,7 +2476,7 @@ const toJson = (input) => {
 const toStringUnknown = (u, whitespace = 2) => {
 	if (typeof u === "string") return u;
 	try {
-		return typeof u === "object" ? formatJson(u, { space: whitespace }) : format$2(u, { space: whitespace });
+		return typeof u === "object" ? formatJson(u, { space: whitespace }) : format$4(u, { space: whitespace });
 	} catch {
 		return String(u);
 	}
@@ -2526,7 +2526,7 @@ const BaseProto = {
 		return this.toJSON();
 	},
 	toString() {
-		return format$2(this.toJSON());
+		return format$4(this.toJSON());
 	}
 };
 /**
@@ -2598,7 +2598,7 @@ var Class$2 = class {
 	* @since 2.0.0
 	*/
 	toString() {
-		return format$2(this.toJSON());
+		return format$4(this.toJSON());
 	}
 };
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/internal/stackTraceLimit.js
@@ -2766,7 +2766,7 @@ const PipeInspectableProto = {
 		return { ...this };
 	},
 	toString() {
-		return format$2(this.toJSON(), {
+		return format$4(this.toJSON(), {
 			ignoreToString: true,
 			space: 2
 		});
@@ -2818,7 +2818,7 @@ var CauseImpl = class {
 		};
 	}
 	toString() {
-		return `Cause(${format$2(this.reasons)})`;
+		return `Cause(${format$4(this.reasons)})`;
 	}
 	[NodeInspectSymbol]() {
 		return this.toJSON();
@@ -2862,7 +2862,7 @@ var ReasonBase = class {
 		return pipeArguments(this, arguments);
 	}
 	toString() {
-		return format$2(this);
+		return format$4(this);
 	}
 	[NodeInspectSymbol]() {
 		return this.toString();
@@ -2877,7 +2877,7 @@ var Fail = class extends ReasonBase {
 		this.error = error;
 	}
 	toString() {
-		return `Fail(${format$2(this.error)})`;
+		return `Fail(${format$4(this.error)})`;
 	}
 	toJSON() {
 		return {
@@ -2937,7 +2937,7 @@ var Die = class extends ReasonBase {
 		this.defect = defect;
 	}
 	toString() {
-		return `Die(${format$2(this.defect)})`;
+		return `Die(${format$4(this.defect)})`;
 	}
 	toJSON() {
 		return {
@@ -2998,7 +2998,7 @@ const makeExit = (options) => {
 		},
 		...makePrimitiveProto(options),
 		toString() {
-			return `${options.op}(${format$2(this[args])})`;
+			return `${options.op}(${format$4(this[args])})`;
 		},
 		toJSON() {
 			return {
@@ -3239,7 +3239,7 @@ const Prototype = (options) => makePrimitiveProto({
 * @category constructors
 * @since 2.0.0
 */
-const make$82 = (isEquivalent) => (self, that) => self === that || isEquivalent(self, that);
+const make$84 = (isEquivalent) => (self, that) => self === that || isEquivalent(self, that);
 const isStrictEquivalent = (x, y) => x === y;
 /**
 * Creates an equivalence relation that uses strict equality (`===`) to compare values.
@@ -3349,7 +3349,7 @@ const strictEqual = () => isStrictEquivalent;
 * @since 4.0.0
 */
 function Tuple$1(elements) {
-	return make$82((self, that) => {
+	return make$84((self, that) => {
 		if (self.length !== that.length) return false;
 		for (let i = 0; i < self.length; i++) if (!elements[i](self[i], that[i])) return false;
 		return true;
@@ -3359,7 +3359,7 @@ function Tuple$1(elements) {
 * @since 4.0.0
 */
 function Array_(item) {
-	return make$82((self, that) => {
+	return make$84((self, that) => {
 		if (self.length !== that.length) return false;
 		for (let i = 0; i < self.length; i++) if (!item(self[i], that[i])) return false;
 		return true;
@@ -3369,9 +3369,9 @@ function Array_(item) {
 /**
 * @since 2.0.0
 */
-const TypeId$67 = "~effect/Option";
+const TypeId$69 = "~effect/Option";
 const CommonProto$1 = {
-	[TypeId$67]: { _A: (_) => _ },
+	[TypeId$69]: { _A: (_) => _ },
 	...PipeInspectableProto,
 	[Symbol.iterator]() {
 		return new SingleShotGen(this);
@@ -3387,7 +3387,7 @@ const SomeProto = /*#__PURE__*/ Object.defineProperty(/*#__PURE__*/ Object.assig
 		return combine$2(hash(this._tag))(hash(this.value));
 	},
 	toString() {
-		return `some(${format$2(this.value)})`;
+		return `some(${format$4(this.value)})`;
 	},
 	toJSON() {
 		return {
@@ -3421,7 +3421,7 @@ const NoneProto = /*#__PURE__*/ Object.assign(/*#__PURE__*/ Object.create(Common
 	}
 });
 /** @internal */
-const isOption$1 = (input) => hasProperty(input, TypeId$67);
+const isOption$1 = (input) => hasProperty(input, TypeId$69);
 /** @internal */
 const isNone$1 = (fa) => fa._tag === "None";
 /** @internal */
@@ -3436,9 +3436,9 @@ SomeImpl.prototype = SomeProto;
 /** @internal */
 const some$2 = (value) => new SomeImpl(value);
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/internal/result.js
-const TypeId$66 = "~effect/Result";
+const TypeId$68 = "~effect/Result";
 const CommonProto = {
-	[TypeId$66]: {
+	[TypeId$68]: {
 		/* v8 ignore next 2 */
 		_A: (_) => _,
 		_E: (_) => _
@@ -3458,7 +3458,7 @@ const SuccessProto = /*#__PURE__*/ Object.assign(/*#__PURE__*/ Object.create(Com
 		return combine$2(hash(this._tag))(hash(this.success));
 	},
 	toString() {
-		return `success(${format$2(this.success)})`;
+		return `success(${format$4(this.success)})`;
 	},
 	toJSON() {
 		return {
@@ -3478,7 +3478,7 @@ const FailureProto = /*#__PURE__*/ Object.assign(/*#__PURE__*/ Object.create(Com
 		return combine$2(hash(this._tag))(hash(this.failure));
 	},
 	toString() {
-		return `failure(${format$2(this.failure)})`;
+		return `failure(${format$4(this.failure)})`;
 	},
 	toJSON() {
 		return {
@@ -3489,7 +3489,7 @@ const FailureProto = /*#__PURE__*/ Object.assign(/*#__PURE__*/ Object.create(Com
 	}
 });
 /** @internal */
-const isResult$1 = (input) => hasProperty(input, TypeId$66);
+const isResult$1 = (input) => hasProperty(input, TypeId$68);
 /** @internal */
 const isFailure$2 = (result) => result._tag === "Failure";
 /** @internal */
@@ -3508,6 +3508,8 @@ const SuccessImpl = function(success) {
 SuccessImpl.prototype = SuccessProto;
 /** @internal */
 const succeed$11 = (success) => new SuccessImpl(success);
+/** @internal */
+const getSuccess$1 = (self) => isFailure$2(self) ? none$1 : some$2(self.success);
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/Order.js
 /**
 * Defines comparison functions for ordered values.
@@ -3558,7 +3560,7 @@ const succeed$11 = (success) => new SuccessImpl(success);
 * @category constructors
 * @since 2.0.0
 */
-function make$81(compare) {
+function make$83(compare) {
 	return (self, that) => self === that ? 0 : compare(self, that);
 }
 /**
@@ -3589,7 +3591,7 @@ function make$81(compare) {
 * @category instances
 * @since 4.0.0
 */
-const String$10 = /*#__PURE__*/ make$81((self, that) => self < that ? -1 : 1);
+const String$10 = /*#__PURE__*/ make$83((self, that) => self < that ? -1 : 1);
 /**
 * Order instance for numbers that compares them numerically.
 *
@@ -3622,7 +3624,7 @@ const String$10 = /*#__PURE__*/ make$81((self, that) => self < that ? -1 : 1);
 * @category instances
 * @since 4.0.0
 */
-const Number$6 = /*#__PURE__*/ make$81((self, that) => {
+const Number$6 = /*#__PURE__*/ make$83((self, that) => {
 	if (globalThis.Number.isNaN(self) && globalThis.Number.isNaN(that)) return 0;
 	if (globalThis.Number.isNaN(self)) return -1;
 	if (globalThis.Number.isNaN(that)) return 1;
@@ -3661,7 +3663,7 @@ const Number$6 = /*#__PURE__*/ make$81((self, that) => {
 * @category mapping
 * @since 2.0.0
 */
-const mapInput = /*#__PURE__*/ dual(2, (self, f) => make$81((b1, b2) => self(f(b1), f(b2))));
+const mapInput = /*#__PURE__*/ dual(2, (self, f) => make$83((b1, b2) => self(f(b1), f(b2))));
 /**
 * Checks whether one value is strictly less than another according to the given order.
 *
@@ -4461,7 +4463,7 @@ const containsWith$1 = (isEquivalent) => dual(2, (self, a) => isNone(self) ? fal
 * @category predicates
 * @since 2.0.0
 */
-const contains$1 = /*#__PURE__*/ containsWith$1(/*#__PURE__*/ asEquivalence());
+const contains$2 = /*#__PURE__*/ containsWith$1(/*#__PURE__*/ asEquivalence());
 /**
 * Checks whether the value in a `Some` satisfies a predicate or refinement.
 *
@@ -4591,7 +4593,7 @@ const ServiceProto = {
 		return self;
 	},
 	context(self) {
-		return make$80(this, self);
+		return make$82(this, self);
 	},
 	use(f) {
 		return withFiber$1((fiber) => f(get$10(fiber.context, this)));
@@ -4602,7 +4604,7 @@ const ServiceProto = {
 };
 const cacheKeys = /*#__PURE__*/ new Set();
 const ReferenceTypeId = "~effect/Context/Reference";
-const TypeId$65 = "~effect/Context";
+const TypeId$67 = "~effect/Context";
 const FlattenAfterBaseHits = 8;
 const makeImpl$1 = (cacheRoot, base, overlay, depth, maxDepth) => {
 	const self = Object.create(Proto$22);
@@ -4701,7 +4703,7 @@ const Proto$22 = {
 		return flatten$4(this);
 	},
 	...PipeInspectableProto,
-	[TypeId$65]: { _Services: (_) => _ },
+	[TypeId$67]: { _Services: (_) => _ },
 	toJSON() {
 		return {
 			_id: "Context",
@@ -4757,7 +4759,7 @@ const hasSameCache = (self, that) => self.cacheRoot === that.cacheRoot;
 * @category guards
 * @since 2.0.0
 */
-const isContext = (u) => hasProperty(u, TypeId$65);
+const isContext = (u) => hasProperty(u, TypeId$67);
 /**
 * Checks whether the provided argument is a `Reference`.
 *
@@ -4814,7 +4816,7 @@ const emptyContext = /*#__PURE__*/ makeUnsafe$9(/*#__PURE__*/ new Map());
 * @category constructors
 * @since 2.0.0
 */
-const make$80 = (key, service) => makeUnsafe$9(/* @__PURE__ */ new Map([[key.key, service]]));
+const make$82 = (key, service) => makeUnsafe$9(/* @__PURE__ */ new Map([[key.key, service]]));
 /**
 * Adds a service to a given `Context`.
 *
@@ -5372,6 +5374,37 @@ const isFailure$1 = isFailure$2;
 */
 const isSuccess$1 = isSuccess$2;
 /**
+* Extracts the success value as an `Option`, discarding the failure.
+*
+* **When to use**
+*
+* Use when you need to extract the success value from a `Result` as an
+* `Option` and discard failure information.
+*
+* **Details**
+*
+* - `Success<A>` becomes `Some<A>`
+* - `Failure<E>` becomes `None`
+*
+* **Example** (Extracting the success as an Option)
+*
+* ```ts import.meta.vitest
+* import { Option, Result } from "effect"
+*
+* Result.getSuccess(Result.succeed("ok")) // => Option.some("ok")
+*
+* Result.getSuccess(Result.fail("err")) // => Option.none()
+* ```
+*
+* @see {@link getFailure} to extract the error instead
+* @see {@link fromOption} for the reverse conversion
+*
+* @stability stable
+* @category getters
+* @since 4.0.0
+*/
+const getSuccess = getSuccess$1;
+/**
 * Transforms the failure channel of a `Result`, leaving the success channel unchanged.
 *
 * **When to use**
@@ -6655,7 +6688,62 @@ const containsWith = (isEquivalent) => dual(2, (self, a) => {
 * @category predicates
 * @since 2.0.0
 */
-const contains = /*#__PURE__*/ containsWith(/*#__PURE__*/ asEquivalence());
+const contains$1 = /*#__PURE__*/ containsWith(/*#__PURE__*/ asEquivalence());
+const hashBucketsAdd = (buckets, value) => {
+	const hash$6 = hash(value);
+	const bucket = buckets.get(hash$6);
+	if (bucket === void 0) {
+		buckets.set(hash$6, [value]);
+		return true;
+	}
+	for (const previous of bucket) if (equals$1(previous, value)) return false;
+	bucket.push(value);
+	return true;
+};
+const makeHashBuckets = (values) => {
+	const buckets = /* @__PURE__ */ new Map();
+	for (const value of values) hashBucketsAdd(buckets, value);
+	return buckets;
+};
+const hashBucketsHas = (buckets, value) => {
+	const bucket = buckets.get(hash(value));
+	if (bucket === void 0) return false;
+	for (const candidate of bucket) if (equals$1(candidate, value)) return true;
+	return false;
+};
+/**
+* Computes elements in the first array that are not in the second, using
+* `Equal.asEquivalence()`.
+*
+* **When to use**
+*
+* Use when you need to keep values from the first array that are absent from
+* the second and the default `Equal.asEquivalence()` comparison is appropriate.
+*
+* **Example** (Computing array differences)
+*
+* ```ts import.meta.vitest
+* import { Array } from "effect"
+*
+* Array.difference([1, 2, 3], [2, 3, 4]) // => [1]
+* ```
+*
+* @see {@link differenceWith} — use custom equality
+* @see {@link union} — elements in either array
+* @see {@link intersection} — elements in both arrays
+*
+* @stability stable
+* @category set operations
+* @since 2.0.0
+*/
+const difference = /*#__PURE__*/ dual(2, (self, that) => {
+	const thatArray = fromIterable$5(that);
+	const selfArray = fromIterable$5(self);
+	if (selfArray.length === 0) return [];
+	if (thatArray.length === 0) return selfArray.filter(() => true);
+	const buckets = makeHashBuckets(thatArray);
+	return selfArray.filter((value) => !hashBucketsHas(buckets, value));
+});
 /**
 * Creates an empty array.
 *
@@ -6932,7 +7020,7 @@ const makeEquivalence$2 = Array_;
 */
 const join$2 = /*#__PURE__*/ dual(2, (self, sep) => fromIterable$5(self).join(sep));
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/Duration.js
-const TypeId$64 = "~effect/Duration";
+const TypeId$66 = "~effect/Duration";
 const bigint0$3 = /*#__PURE__*/ BigInt(0);
 const bigint1$2 = /*#__PURE__*/ BigInt(1);
 const bigint2 = /*#__PURE__*/ BigInt(2);
@@ -6948,7 +7036,7 @@ const bigintNanosPerDay = /*#__PURE__*/ BigInt(864e11);
 const bigintNanosPerWeek = /*#__PURE__*/ BigInt(6048e11);
 const roundTiesAwayFromZero = (input) => BigInt(Math.sign(input) * Math.round(Math.abs(input)));
 const roundMillisToNanos = (millis) => Number.isInteger(millis) ? BigInt(millis) * bigint1e6 : roundTiesAwayFromZero(millis * 1e6);
-const fromNanosNumber = (nanos) => make$79(Number.isFinite(nanos) ? roundTiesAwayFromZero(nanos) : nanos);
+const fromNanosNumber = (nanos) => make$81(Number.isFinite(nanos) ? roundTiesAwayFromZero(nanos) : nanos);
 const nanosToUnit = (nanos, divisor) => {
 	const value = Number(nanos);
 	if (Number.isFinite(value)) return value / divisor;
@@ -6971,9 +7059,9 @@ const divideTiesAwayFromZero = (numerator, denominator) => {
 };
 const fromMillisString = (input, scale) => {
 	const millis = Number(input) * scale;
-	if (!Number.isFinite(millis)) return make$79(millis);
+	if (!Number.isFinite(millis)) return make$81(millis);
 	const nanos = parseNanos(input, BigInt(scale) * bigint1e6);
-	return make$79(Number.isInteger(millis) && BigInt(millis) * bigint1e6 === nanos ? millis : nanos);
+	return make$81(Number.isInteger(millis) && BigInt(millis) * bigint1e6 === nanos ? millis : nanos);
 };
 const DURATION_REGEXP = /^(-?\d+(?:\.\d+)?)\s+(nanos?|micros?|millis?|seconds?|minutes?|hours?|days?|weeks?)$/;
 /**
@@ -7033,14 +7121,14 @@ const fromInputUnsafe$1 = (input) => {
 		}
 		case "object": {
 			if (input === null) break;
-			if (TypeId$64 in input) return input;
+			if (TypeId$66 in input) return input;
 			if (Array.isArray(input)) {
 				if (input.length !== 2 || !input.every(isNumber)) return invalid$3(input);
 				if (Number.isNaN(input[0]) || Number.isNaN(input[1])) return zero$2;
 				if (input[0] === -Infinity || input[1] === -Infinity) return negativeInfinity;
 				if (input[0] === Infinity || input[1] === Infinity) return infinity;
 				const nanos = input[0] * 1e9 + input[1];
-				return Number.isFinite(nanos) && Number.isInteger(input[0]) && Number.isInteger(input[1]) ? make$79(BigInt(input[0]) * bigint1e9 + BigInt(input[1])) : fromNanosNumber(nanos);
+				return Number.isFinite(nanos) && Number.isInteger(input[0]) && Number.isInteger(input[1]) ? make$81(BigInt(input[0]) * bigint1e9 + BigInt(input[1])) : fromNanosNumber(nanos);
 			}
 			const obj = input;
 			let millis = 0;
@@ -7051,13 +7139,13 @@ const fromInputUnsafe$1 = (input) => {
 			if (obj.seconds) millis += obj.seconds * 1e3;
 			if (obj.milliseconds) millis += obj.milliseconds;
 			if (!obj.microseconds && !obj.nanoseconds) {
-				if (!Number.isFinite(millis)) return make$79(millis);
+				if (!Number.isFinite(millis)) return make$81(millis);
 				const exact = sumObjectNanos(obj);
-				return exact === void 0 || BigInt(millis) * bigint1e6 === exact ? make$79(millis) : make$79(exact);
+				return exact === void 0 || BigInt(millis) * bigint1e6 === exact ? make$81(millis) : make$81(exact);
 			}
 			const nanos = millis * 1e6 + (obj.microseconds ?? 0) * 1e3 + (obj.nanoseconds ?? 0);
 			const exact = Number.isFinite(nanos) ? sumObjectNanos(obj) : void 0;
-			return exact === void 0 ? fromNanosNumber(nanos) : make$79(exact);
+			return exact === void 0 ? fromNanosNumber(nanos) : make$81(exact);
 		}
 	}
 	return invalid$3(input);
@@ -7104,7 +7192,7 @@ const zeroDurationValue = {
 const infinityDurationValue = { _tag: "Infinity" };
 const negativeInfinityDurationValue = { _tag: "NegativeInfinity" };
 const DurationProto = {
-	[TypeId$64]: TypeId$64,
+	[TypeId$66]: TypeId$66,
 	[symbol$3]() {
 		switch (this.value._tag) {
 			case "Millis": return hash(roundMillisToNanos(this.value.millis));
@@ -7152,7 +7240,7 @@ const DurationProto = {
 		return pipeArguments(this, arguments);
 	}
 };
-const make$79 = (input) => {
+const make$81 = (input) => {
 	const duration = Object.create(DurationProto);
 	if (typeof input === "number") {
 		if (isNaN(input) || input === 0 || Object.is(input, -0)) duration.value = zeroDurationValue;
@@ -7188,7 +7276,7 @@ const make$79 = (input) => {
 * @category guards
 * @since 2.0.0
 */
-const isDuration = (u) => hasProperty(u, TypeId$64);
+const isDuration = (u) => hasProperty(u, TypeId$66);
 /**
 * Checks whether a Duration is finite (not infinite).
 *
@@ -7275,8 +7363,8 @@ const abs = (self) => {
 	switch (self.value._tag) {
 		case "Infinity":
 		case "NegativeInfinity": return infinity;
-		case "Millis": return self.value.millis < 0 ? make$79(-self.value.millis) : self;
-		case "Nanos": return self.value.nanos < bigint0$3 ? make$79(-self.value.nanos) : self;
+		case "Millis": return self.value.millis < 0 ? make$81(-self.value.millis) : self;
+		case "Nanos": return self.value.nanos < bigint0$3 ? make$81(-self.value.nanos) : self;
 	}
 };
 /**
@@ -7294,7 +7382,7 @@ const abs = (self) => {
 * @category constructors
 * @since 2.0.0
 */
-const zero$2 = /*#__PURE__*/ make$79(0);
+const zero$2 = /*#__PURE__*/ make$81(0);
 /**
 * A Duration representing infinite time.
 *
@@ -7310,7 +7398,7 @@ const zero$2 = /*#__PURE__*/ make$79(0);
 * @category constructors
 * @since 2.0.0
 */
-const infinity = /*#__PURE__*/ make$79(Infinity);
+const infinity = /*#__PURE__*/ make$81(Infinity);
 /**
 * A Duration representing negative infinite time.
 *
@@ -7326,7 +7414,7 @@ const infinity = /*#__PURE__*/ make$79(Infinity);
 * @category constructors
 * @since 4.0.0
 */
-const negativeInfinity = /*#__PURE__*/ make$79(-Infinity);
+const negativeInfinity = /*#__PURE__*/ make$81(-Infinity);
 /**
 * Creates a Duration from nanoseconds.
 *
@@ -7342,7 +7430,7 @@ const negativeInfinity = /*#__PURE__*/ make$79(-Infinity);
 * @category constructors
 * @since 2.0.0
 */
-const nanos = (nanos) => make$79(nanos);
+const nanos = (nanos) => make$81(nanos);
 /**
 * Creates a Duration from milliseconds.
 *
@@ -7358,7 +7446,7 @@ const nanos = (nanos) => make$79(nanos);
 * @category constructors
 * @since 2.0.0
 */
-const millis = (millis) => make$79(millis);
+const millis = (millis) => make$81(millis);
 /**
 * Creates a Duration from seconds.
 *
@@ -7374,7 +7462,7 @@ const millis = (millis) => make$79(millis);
 * @category constructors
 * @since 2.0.0
 */
-const seconds = (seconds) => make$79(seconds * 1e3);
+const seconds = (seconds) => make$81(seconds * 1e3);
 /**
 * Converts a Duration to milliseconds.
 *
@@ -7541,7 +7629,7 @@ const matchPair = /*#__PURE__*/ dual(3, (self, that, options) => {
 * @category instances
 * @since 2.0.0
 */
-const Order$3 = /*#__PURE__*/ make$81((self, that) => matchPair(self, that, {
+const Order$3 = /*#__PURE__*/ make$83((self, that) => matchPair(self, that, {
 	onMillis: (self, that) => self < that ? -1 : self > that ? 1 : 0,
 	onNanos: (self, that) => self < that ? -1 : self > that ? 1 : 0,
 	onInfinity: (self, that) => {
@@ -7614,8 +7702,8 @@ const max = /*#__PURE__*/ max$1(Order$3);
 * @since 2.0.0
 */
 const sum = /*#__PURE__*/ dual(2, (self, that) => matchPair(self, that, {
-	onMillis: (self, that) => make$79(self + that),
-	onNanos: (self, that) => make$79(self + that),
+	onMillis: (self, that) => make$81(self + that),
+	onNanos: (self, that) => make$81(self + that),
 	onInfinity: (self, that) => {
 		const s = self.value._tag;
 		const t = that.value._tag;
@@ -7725,11 +7813,11 @@ const parts = (self) => {
 * @category converting
 * @since 2.0.0
 */
-const format$1 = (self) => {
+const format$3 = (self) => {
 	if (self.value._tag === "Infinity") return "Infinity";
 	if (self.value._tag === "NegativeInfinity") return "-Infinity";
 	if (isZero$1(self)) return "0";
-	if (isNegative(self)) return "-" + format$1(abs(self));
+	if (isNegative(self)) return "-" + format$3(abs(self));
 	const fragments = parts(self);
 	const pieces = [];
 	if (fragments.days !== 0) pieces.push(`${fragments.days}d`);
@@ -8439,7 +8527,7 @@ var ParentSpan = class extends (/*#__PURE__*/ Service$1()(ParentSpanKey, { fiber
 * @category constructors
 * @since 2.0.0
 */
-const make$78 = (options) => options;
+const make$80 = (options) => options;
 /**
 * Creates an `ExternalSpan` from trace and span identifiers, defaulting
 * `sampled` to `true` and annotations to an empty context when they are not
@@ -8619,7 +8707,7 @@ const Tracer = /*#__PURE__*/ Reference(TracerKey, {
 * @category references
 * @since 4.0.0
 */
-const nativeTracer = /*#__PURE__*/ make$78({ span: (options) => new NativeSpan(options) });
+const nativeTracer = /*#__PURE__*/ make$80({ span: (options) => new NativeSpan(options) });
 /**
 * Default in-memory `Span` implementation used by the native tracer. It
 * generates span and trace identifiers, stores attributes, events, and links,
@@ -9063,7 +9151,7 @@ var FiberImpl = class {
 	interruptUnsafe(fiberId, annotations) {
 		if (this._exit) return;
 		let cause = causeInterrupt(fiberId);
-		if (this.cache.stackFrame) cause = causeAnnotate(cause, make$80(StackTraceKey, this.cache.stackFrame));
+		if (this.cache.stackFrame) cause = causeAnnotate(cause, make$82(StackTraceKey, this.cache.stackFrame));
 		if (annotations) cause = causeAnnotate(cause, annotations);
 		this._interruptedCause = this._interruptedCause ? causeAddInterrupts(this._interruptedCause, cause) : cause;
 		if (this.interruptible) {
@@ -10026,7 +10114,7 @@ const delay$1 = /*#__PURE__*/ dual(2, (self, duration) => andThen$1(sleep$2(dura
 /** @internal */
 const timeoutOrElse$1 = /*#__PURE__*/ dual(2, (self, options) => flatMap$4(timeoutOption$1(self, options.duration), (option) => isNone(option) ? options.orElse() : succeed$9(option.value)));
 /** @internal */
-const timeoutErrorFromDuration = (duration) => new TimeoutError(`Operation timed out after '${format$1(duration)}'`);
+const timeoutErrorFromDuration = (duration) => new TimeoutError(`Operation timed out after '${format$3(duration)}'`);
 /** @internal */
 const timeout$1 = /*#__PURE__*/ dual(2, (self, duration) => {
 	const decoded = fromInputUnsafe$1(duration);
@@ -12197,7 +12285,7 @@ const hasInterrupts = exitHasInterrupts;
 */
 const asVoidAll = exitAsVoidAll;
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/Deferred.js
-const TypeId$63 = "~effect/Deferred";
+const TypeId$65 = "~effect/Deferred";
 /**
 * Checks whether a value is a `Deferred`.
 *
@@ -12210,9 +12298,9 @@ const TypeId$63 = "~effect/Deferred";
 * @category guards
 * @since 4.0.0
 */
-const isDeferred = (u) => hasProperty(u, TypeId$63);
+const isDeferred = (u) => hasProperty(u, TypeId$65);
 const DeferredProto = {
-	[TypeId$63]: {
+	[TypeId$65]: {
 		_A: identity,
 		_E: identity
 	},
@@ -12272,7 +12360,7 @@ const makeUnsafe$8 = () => new DeferredImpl();
 * @category constructors
 * @since 2.0.0
 */
-const make$77 = () => sync$2(() => makeUnsafe$8());
+const make$79 = () => sync$2(() => makeUnsafe$8());
 const _await = (self) => callback$2((resume) => {
 	if (self.effect) return resume(self.effect);
 	self.resumes ??= [];
@@ -12884,7 +12972,7 @@ const Scope = scopeTag;
 * @category constructors
 * @since 2.0.0
 */
-const make$76 = scopeMake;
+const make$78 = scopeMake;
 /**
 * Creates a new `Scope` synchronously without wrapping it in an `Effect`.
 * This is useful when you need a scope immediately but should be used with caution
@@ -13188,7 +13276,7 @@ const closeUnsafe = scopeCloseUnsafe;
 */
 const use$1 = scopeUse;
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/Layer.js
-const TypeId$62 = "~effect/Layer";
+const TypeId$64 = "~effect/Layer";
 const MemoMapTypeId = "~effect/Layer/MemoMap";
 const makeMemoMapEntry = (memoMap, layer) => {
 	const entry = {
@@ -13210,7 +13298,7 @@ const memoMapObserve = (entry, scope) => {
 	return true;
 };
 const LayerProto = {
-	[TypeId$62]: {
+	[TypeId$64]: {
 		_ROut: identity,
 		_E: identity,
 		_RIn: identity
@@ -13589,8 +13677,8 @@ const buildWithScope = /*#__PURE__*/ dual(2, (self, scope) => withFiber$1((fiber
 * @since 2.0.0
 */
 const succeed$6 = function() {
-	if (arguments.length === 1) return (resource) => succeedContext(make$80(arguments[0], resource));
-	return succeedContext(make$80(arguments[0], arguments[1]));
+	if (arguments.length === 1) return (resource) => succeedContext(make$82(arguments[0], resource));
+	return succeedContext(make$82(arguments[0], arguments[1]));
 };
 /**
 * Constructs a layer that provides all services in an already available
@@ -13702,8 +13790,8 @@ const empty$12 = /*#__PURE__*/ succeedContext(/*#__PURE__*/ empty$16());
 * @since 2.0.0
 */
 const sync$1 = function() {
-	if (arguments.length === 1) return (evaluate) => syncContext(() => make$80(arguments[0], evaluate()));
-	return syncContext(() => make$80(arguments[0], arguments[1]()));
+	if (arguments.length === 1) return (evaluate) => syncContext(() => make$82(arguments[0], evaluate()));
+	return syncContext(() => make$82(arguments[0], arguments[1]()));
 };
 /**
 * Constructs a layer lazily that provides all services in a `Context`.
@@ -13787,7 +13875,7 @@ const effect = function() {
 	if (arguments.length === 1) return (effect) => effectImpl(arguments[0], effect);
 	return effectImpl(arguments[0], arguments[1]);
 };
-const effectImpl = (service, effect) => effectContext(map$7(effect, (value) => make$80(service, value)));
+const effectImpl = (service, effect) => effectContext(map$7(effect, (value) => make$82(service, value)));
 /**
 * Constructs a layer from an effect that produces all services in a `Context`.
 *
@@ -14494,11 +14582,11 @@ const currentTimeMillis = currentTimeMillis$1;
 const currentTimeNanos = currentTimeNanos$1;
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/internal/dateTime.js
 /** @internal */
-const TypeId$61 = "~effect/DateTime";
+const TypeId$63 = "~effect/DateTime";
 /** @internal */
 const TimeZoneTypeId = "~effect/DateTime/TimeZone";
 const Proto$21 = {
-	[TypeId$61]: TypeId$61,
+	[TypeId$63]: TypeId$63,
 	pipe() {
 		return pipeArguments(this, arguments);
 	},
@@ -14625,7 +14713,7 @@ const makeZonedProto = (epochMillis, zone, partsUtc) => {
 	return self;
 };
 /** @internal */
-const isDateTime$1 = (u) => hasProperty(u, TypeId$61);
+const isDateTime$1 = (u) => hasProperty(u, TypeId$63);
 /** @internal */
 const isTimeZone = (u) => hasProperty(u, TimeZoneTypeId);
 /** @internal */
@@ -14690,7 +14778,7 @@ const makeZonedUnsafe$1 = (input, options) => {
 	return makeZonedFromAdjusted(self.epochMilliseconds, zone, options?.disambiguation ?? "compatible");
 };
 /** @internal */
-const make$75 = /*#__PURE__*/ liftThrowable(makeUnsafe$6);
+const make$77 = /*#__PURE__*/ liftThrowable(makeUnsafe$6);
 /** @internal */
 const toUtc$1 = (self) => makeUtc(self.epochMilliseconds);
 const validZoneCache = /*#__PURE__*/ new Map();
@@ -15352,7 +15440,7 @@ const matchEffect$1 = /*#__PURE__*/ dual(2, (self, options) => matchCauseEffect$
 	}
 }));
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/Schedule.js
-const TypeId$60 = "~effect/Schedule";
+const TypeId$62 = "~effect/Schedule";
 /**
 * Context reference containing metadata for the currently running schedule step.
 *
@@ -15378,7 +15466,7 @@ const CurrentMetadata = /*#__PURE__*/ Reference("effect/Schedule/CurrentMetadata
 	elapsedSincePrevious: 0
 }) });
 const ScheduleProto = {
-	[TypeId$60]: {
+	[TypeId$62]: {
 		_Out: identity,
 		_In: identity,
 		_Env: identity
@@ -15408,7 +15496,7 @@ const ScheduleProto = {
 * @category guards
 * @since 2.0.0
 */
-const isSchedule = (u) => hasProperty(u, TypeId$60);
+const isSchedule = (u) => hasProperty(u, TypeId$62);
 /**
 * Creates a Schedule from a step function that returns a Pull.
 *
@@ -15780,14 +15868,14 @@ const buildFromOptions = (options) => {
 	return schedule;
 };
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/MutableHashMap.js
-const TypeId$59 = "~effect/MutableHashMap";
+const TypeId$61 = "~effect/MutableHashMap";
 const MutableHashMapProto = {
-	[TypeId$59]: TypeId$59,
+	[TypeId$61]: TypeId$61,
 	[Symbol.iterator]() {
 		return this.backing[Symbol.iterator]();
 	},
 	toString() {
-		return `MutableHashMap(${format$2(Array.from(this))})`;
+		return `MutableHashMap(${format$4(Array.from(this))})`;
 	},
 	toJSON() {
 		return {
@@ -15869,7 +15957,7 @@ const empty$11 = () => {
 * @category constructors
 * @since 2.0.0
 */
-const make$74 = (...entries) => fromIterable$4(entries);
+const make$76 = (...entries) => fromIterable$4(entries);
 /**
 * Creates a MutableHashMap from an iterable collection of key-value pairs.
 *
@@ -21409,7 +21497,7 @@ const Empty$2 = /*#__PURE__*/ Symbol.for("effect/MutableList/Empty");
 * @category constructors
 * @since 2.0.0
 */
-const make$73 = () => ({
+const make$75 = () => ({
 	head: void 0,
 	tail: void 0,
 	length: 0
@@ -21843,7 +21931,7 @@ const remove$5 = (self, value) => filter$2(self, (v) => v !== value);
 * @stability stable
 * @since 3.8.0
 */
-const TypeId$58 = "~effect/Queue";
+const TypeId$60 = "~effect/Queue";
 const EnqueueTypeId = "~effect/Queue/Enqueue";
 const DequeueTypeId = "~effect/Queue/Dequeue";
 const variance$1 = {
@@ -21851,7 +21939,7 @@ const variance$1 = {
 	_E: identity
 };
 const QueueProto = {
-	[TypeId$58]: variance$1,
+	[TypeId$60]: variance$1,
 	[EnqueueTypeId]: variance$1,
 	[DequeueTypeId]: variance$1,
 	...PipeInspectableProto,
@@ -21906,12 +21994,12 @@ const QueueProto = {
 * @category constructors
 * @since 4.0.0
 */
-const make$72 = (options) => withFiber$1((fiber) => {
+const make$74 = (options) => withFiber$1((fiber) => {
 	const self = Object.create(QueueProto);
 	self.dispatcher = fiber.currentDispatcher;
 	self.capacity = options?.capacity ?? Number.POSITIVE_INFINITY;
 	self.strategy = options?.strategy ?? "suspend";
-	self.messages = make$73();
+	self.messages = make$75();
 	self.scheduleRunning = false;
 	self.state = {
 		_tag: "Open",
@@ -21952,7 +22040,7 @@ const make$72 = (options) => withFiber$1((fiber) => {
 * @category constructors
 * @since 2.0.0
 */
-const bounded = (capacity) => make$72({ capacity });
+const bounded = (capacity) => make$74({ capacity });
 /**
 * Creates a bounded queue with sliding strategy. When the queue reaches capacity,
 * new elements are added and the oldest elements are dropped.
@@ -21989,7 +22077,7 @@ const bounded = (capacity) => make$72({ capacity });
 * @category constructors
 * @since 2.0.0
 */
-const sliding$1 = (capacity) => make$72({
+const sliding$1 = (capacity) => make$74({
 	capacity,
 	strategy: "sliding"
 });
@@ -22028,7 +22116,7 @@ const sliding$1 = (capacity) => make$72({
 * @category constructors
 * @since 2.0.0
 */
-const dropping = (capacity) => make$72({
+const dropping = (capacity) => make$74({
 	capacity,
 	strategy: "dropping"
 });
@@ -23160,7 +23248,7 @@ const makeUuid = (bytes, randomBytes, format) => {
 * @category constructors
 * @since 4.0.0
 */
-const make$71 = (randomBytes) => {
+const make$73 = (randomBytes) => {
 	const randomBytesChecked = (size) => {
 		checkSize(size);
 		return randomBytes(size);
@@ -23206,7 +23294,7 @@ const fillRandom = (crypto, size) => {
 * @category layers
 * @since 4.0.0
 */
-const layerWebCrypto$7 = /*#__PURE__*/ effect(SecureRandom, /*#__PURE__*/ WebCrypto.use((crypto) => succeed$5(make$71((size) => fillRandom(crypto, size)))));
+const layerWebCrypto$7 = /*#__PURE__*/ effect(SecureRandom, /*#__PURE__*/ WebCrypto.use((crypto) => succeed$5(make$73((size) => fillRandom(crypto, size)))));
 /**
 * Synchronously generates `size` cryptographically secure random bytes from
 * `globalThis.crypto`.
@@ -23417,7 +23505,7 @@ var SemaphoreImpl = class {
 * @category constructors
 * @since 4.0.0
 */
-const make$70 = (permits) => sync$2(() => new SemaphoreImpl(permits));
+const make$72 = (permits) => sync$2(() => new SemaphoreImpl(permits));
 /**
 * Runs an effect with a single permit and releases the permit when the effect
 * completes.
@@ -23454,9 +23542,9 @@ const withPermit = (self, effect) => {
 * @stability stable
 * @since 2.0.0
 */
-const TypeId$57 = "~effect/BigDecimal";
+const TypeId$59 = "~effect/BigDecimal";
 const BigDecimalProto = {
-	[TypeId$57]: TypeId$57,
+	[TypeId$59]: TypeId$59,
 	[symbol$3]() {
 		const normalized = normalize$1(this);
 		return combine$2(string$3(String(normalized.value)), number$5(normalized.scale));
@@ -23465,7 +23553,7 @@ const BigDecimalProto = {
 		return isBigDecimal(that) && compare(this, that) === 0;
 	},
 	toString() {
-		return `BigDecimal(${format(this)})`;
+		return `BigDecimal(${format$2(this)})`;
 	},
 	toJSON() {
 		return {
@@ -23504,7 +23592,7 @@ const BigDecimalProto = {
 * @category guards
 * @since 2.0.0
 */
-const isBigDecimal = (u) => hasProperty(u, TypeId$57);
+const isBigDecimal = (u) => hasProperty(u, TypeId$59);
 /**
 * Creates a `BigDecimal` from a `bigint` value and a safe integer scale.
 *
@@ -23537,7 +23625,7 @@ const isBigDecimal = (u) => hasProperty(u, TypeId$57);
 * @category constructors
 * @since 2.0.0
 */
-const make$69 = (value, scale) => {
+const make$71 = (value, scale) => {
 	if (!Number.isSafeInteger(scale)) throw new RangeError(`Scale must be a safe integer, got ${scale}`);
 	const o = Object.create(BigDecimalProto);
 	o.value = value;
@@ -23545,7 +23633,7 @@ const make$69 = (value, scale) => {
 	return o;
 };
 const makeNormalized = (value, scale) => {
-	const o = make$69(value, scale);
+	const o = make$71(value, scale);
 	o.normalized = o;
 	return o;
 };
@@ -23669,7 +23757,7 @@ const sign = (n) => n.value === bigint0$1 ? 0 : n.value < bigint0$1 ? -1 : 1;
 * @category converting
 * @since 2.0.0
 */
-const format = (n) => {
+const format$2 = (n) => {
 	const normalized = normalize$1(n);
 	if (Math.abs(normalized.scale) >= 16) return toExponential(normalized);
 	const negative = normalized.value < bigint0$1;
@@ -23979,7 +24067,7 @@ const binaryUnits = [
 const allUnits = [...decimalUnits, .../*#__PURE__*/ binaryUnits.slice(1)];
 const unitsByName = /*#__PURE__*/ new Map(/*#__PURE__*/ allUnits.flatMap((unit) => unit.names.map((name) => [name, unit])));
 const unitsBySymbol = /*#__PURE__*/ new Map(/*#__PURE__*/ allUnits.map((unit) => [unit.symbol, unit]));
-const make$68 = (value) => value;
+const make$70 = (value) => value;
 /**
 * The byte size containing zero bytes.
 *
@@ -23987,13 +24075,13 @@ const make$68 = (value) => value;
 * @category constants
 * @since 4.0.0
 */
-const zero = /*#__PURE__*/ make$68(bigint0);
+const zero = /*#__PURE__*/ make$70(bigint0);
 const invalid$2 = (message) => {
 	throw new Error(`Invalid ByteSize: ${message}`);
 };
 const fromNumber = (input) => {
 	if (!Number.isSafeInteger(input) || input < 0) return invalid$2(`expected a non-negative safe integer, received ${input}`);
-	return make$68(BigInt(input));
+	return make$70(BigInt(input));
 };
 const maxSafeInteger = /*#__PURE__*/ BigInt(Number.MAX_SAFE_INTEGER);
 const scaleDecimal = (quantity, factor) => {
@@ -24009,14 +24097,14 @@ const scaleDecimal = (quantity, factor) => {
 const fromQuantity = (quantity, unit) => {
 	if (typeof quantity === "bigint") {
 		if (quantity < bigint0) return invalid$2(`expected a non-negative quantity, received ${quantity}`);
-		return make$68(quantity * unit.factor);
+		return make$70(quantity * unit.factor);
 	}
 	if (binaryUnits.includes(unit)) {
 		const value = quantity * Number(unit.factor);
-		if (Number.isSafeInteger(value) && value >= 0) return make$68(BigInt(value));
+		if (Number.isSafeInteger(value) && value >= 0) return make$70(BigInt(value));
 	} else {
 		const value = scaleDecimal(String(quantity), unit.factor);
-		if (value !== void 0 && value <= maxSafeInteger) return make$68(value);
+		if (value !== void 0 && value <= maxSafeInteger) return make$70(value);
 	}
 	return invalid$2(`expected an exact non-negative safe-integer byte result, received ${quantity} ${unit.symbol}`);
 };
@@ -24042,7 +24130,7 @@ const fromStringUnsafe = (input) => {
 	if (unit === void 0) return invalid$2(`unsupported unit ${JSON.stringify(match[2])}`);
 	const value = scaleDecimal(match[1], unit.factor);
 	if (value === void 0) return invalid$2(`${JSON.stringify(input)} does not represent an integral number of bytes`);
-	return make$68(value);
+	return make$70(value);
 };
 /**
 * Decodes a trusted input into a byte size and throws for invalid input.
@@ -24055,7 +24143,7 @@ const fromInputUnsafe = (input) => {
 	switch (typeof input) {
 		case "bigint":
 			if (input < bigint0) return invalid$2(`expected a non-negative bigint, received ${input}`);
-			return make$68(input);
+			return make$70(input);
 		case "number": return fromNumber(input);
 		case "string": return fromStringUnsafe(input);
 	}
@@ -24087,7 +24175,7 @@ const unitConstructor = (symbol) => (value) => fromQuantity(value, unitsBySymbol
 */
 const mebibytes = /*#__PURE__*/ unitConstructor("MiB");
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/Chunk.js
-const TypeId$56 = "~effect/Chunk";
+const TypeId$58 = "~effect/Chunk";
 function copy$2(src, srcPos, dest, destPos, len) {
 	for (let i = srcPos; i < Math.min(src.length, srcPos + len); i++) dest[destPos + i - srcPos] = src[i];
 	return dest;
@@ -24115,7 +24203,7 @@ const emptyArray = [];
 * @category instances
 * @since 4.0.0
 */
-const makeEquivalence$1 = (isEquivalent) => make$82((self, that) => {
+const makeEquivalence$1 = (isEquivalent) => make$84((self, that) => {
 	if (self.length !== that.length) return false;
 	const as = toReadonlyArray(self);
 	const bs = toReadonlyArray(that);
@@ -24124,9 +24212,9 @@ const makeEquivalence$1 = (isEquivalent) => make$82((self, that) => {
 });
 const _equivalence = /*#__PURE__*/ makeEquivalence$1(equals$1);
 const ChunkProto = {
-	[TypeId$56]: { _A: (_) => _ },
+	[TypeId$58]: { _A: (_) => _ },
 	toString() {
-		return `Chunk(${format$2(toReadonlyArray(this))})`;
+		return `Chunk(${format$4(toReadonlyArray(this))})`;
 	},
 	toJSON() {
 		return {
@@ -24210,7 +24298,7 @@ const makeChunk = (backing) => {
 * @category guards
 * @since 2.0.0
 */
-const isChunk = (u) => hasProperty(u, TypeId$56);
+const isChunk = (u) => hasProperty(u, TypeId$58);
 const _empty = /*#__PURE__*/ makeChunk({ _tag: "IEmpty" });
 const copyToArray = (self, array, initial) => {
 	switch (self.backing._tag) {
@@ -24291,7 +24379,7 @@ const toReadonlyArray = toReadonlyArray_;
 * @stability unstable
 * @since 4.0.0
 */
-const TypeId$55 = "~effect/crypto/CryptoError";
+const TypeId$57 = "~effect/crypto/CryptoError";
 const ReasonTypeId$1 = "~effect/crypto/CryptoError/Reason";
 /**
 * Reason for an argument that the operation rejects before using the key or
@@ -24444,7 +24532,7 @@ var CryptoError = class extends (/*#__PURE__*/ TaggedError$1("CryptoError")) {
 	*
 	* @since 4.0.0
 	*/
-	[TypeId$55] = TypeId$55;
+	[TypeId$57] = TypeId$57;
 	/**
 	* The reason's cause, when it has one.
 	*
@@ -25279,7 +25367,7 @@ const redactedProto = (typeId, label) => ({
 		};
 	},
 	toString() {
-		return format$2(this.toJSON());
+		return format$4(this.toJSON());
 	},
 	[NodeInspectSymbol]() {
 		return this.toJSON();
@@ -25289,7 +25377,7 @@ const redactedProto = (typeId, label) => ({
 * Builds a key. Keys compare by reference: comparing key bytes is not constant
 * time, and structural equality would let secret keys act as `HashMap` keys.
 */
-const make$67 = (proto, algorithm, material) => byReferenceUnsafe(Object.create(proto, {
+const make$69 = (proto, algorithm, material) => byReferenceUnsafe(Object.create(proto, {
 	algorithm: {
 		value: algorithm,
 		enumerable: true
@@ -25297,7 +25385,7 @@ const make$67 = (proto, algorithm, material) => byReferenceUnsafe(Object.create(
 	[MaterialId]: { value: material }
 }));
 /** @internal */
-const makeBytes = (proto, algorithm, bytes) => make$67(proto, algorithm, {
+const makeBytes = (proto, algorithm, bytes) => make$69(proto, algorithm, {
 	_tag: "Bytes",
 	bytes
 });
@@ -25360,7 +25448,7 @@ const importedAlgorithm = (algorithm, cryptoKey) => {
 */
 const fromCryptoKey$3 = (module, method, proto, algorithm, cryptoKey, expected) => suspend$2(() => {
 	const problem = checkCryptoKey(cryptoKey, expected);
-	return problem === void 0 ? succeed$5(make$67(proto, importedAlgorithm(algorithm, cryptoKey), {
+	return problem === void 0 ? succeed$5(make$69(proto, importedAlgorithm(algorithm, cryptoKey), {
 		_tag: "CryptoKey",
 		cryptoKey
 	})) : invalidKey(module, method, problem);
@@ -25373,7 +25461,7 @@ const exportRaw = async (subtle, cryptoKey) => new Uint8Array(await subtle.expor
 *
 * @internal
 */
-const toBytes$5 = (module, key, exportKey) => suspend$2(() => {
+const toBytes$6 = (module, key, exportKey) => suspend$2(() => {
 	const stored = material(key);
 	if (stored._tag === "Bytes") return succeed$5(copyBytes(stored.bytes));
 	if (!stored.cryptoKey.extractable) return notExtractable(module, "toBytes");
@@ -25437,10 +25525,10 @@ var Aead_exports = /* @__PURE__ */ __exportAll$1({
 	key: () => key$3,
 	layerWebCrypto: () => layerWebCrypto$6,
 	layerWebCryptoWith: () => layerWebCryptoWith$1,
-	toBytes: () => toBytes$4,
+	toBytes: () => toBytes$5,
 	xchacha20Poly1305: () => xchacha20Poly1305
 });
-const TypeId$54 = "~effect/crypto/Aead/Key";
+const TypeId$56 = "~effect/crypto/Aead/Key";
 /**
 * AES-128-GCM, with a 16-byte key and a 12-byte nonce.
 *
@@ -25509,7 +25597,7 @@ const xchacha20Poly1305 = {
 	nonceLength: 24,
 	implementation: /* @__PURE__ */ chachaImplementation(xchacha20Poly1305$1)
 };
-const KeyProto$3 = /*#__PURE__*/ redactedProto(TypeId$54, "Aead.Key");
+const KeyProto$3 = /*#__PURE__*/ redactedProto(TypeId$56, "Aead.Key");
 /**
 * Checks whether a value is a {@link Key}.
 *
@@ -25517,7 +25605,7 @@ const KeyProto$3 = /*#__PURE__*/ redactedProto(TypeId$54, "Aead.Key");
 * @category guards
 * @since 4.0.0
 */
-const isKey$3 = (u) => hasProperty(u, TypeId$54);
+const isKey$3 = (u) => hasProperty(u, TypeId$56);
 /**
 * Service that generates keys, encrypts, and decrypts with authentication.
 *
@@ -25706,7 +25794,7 @@ const fromCryptoKey$2 = (algorithm, cryptoKey) => algorithm.implementation !== v
 * @category converting
 * @since 4.0.0
 */
-const toBytes$4 = (key) => toBytes$5("Aead", key, exportRaw);
+const toBytes$5 = (key) => toBytes$6("Aead", key, exportRaw);
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/crypto/Cipher.js
 /**
 * Unauthenticated encryption with no integrity: compose with `Mac`.
@@ -25746,9 +25834,9 @@ var Cipher_exports = /* @__PURE__ */ __exportAll$1({
 	isKey: () => isKey$2,
 	key: () => key$2,
 	layerWebCrypto: () => layerWebCrypto$5,
-	toBytes: () => toBytes$3
+	toBytes: () => toBytes$4
 });
-const TypeId$53 = "~effect/crypto/Cipher/Key";
+const TypeId$55 = "~effect/crypto/Cipher/Key";
 /**
 * AES-128-CTR, with a 16-byte key.
 *
@@ -25807,7 +25895,7 @@ const aes256Cbc = {
 	mode: "AES-CBC",
 	keyLength: 32
 };
-const KeyProto$2 = /*#__PURE__*/ redactedProto(TypeId$53, "Cipher.Key");
+const KeyProto$2 = /*#__PURE__*/ redactedProto(TypeId$55, "Cipher.Key");
 /**
 * Checks whether a value is a {@link Key}.
 *
@@ -25815,7 +25903,7 @@ const KeyProto$2 = /*#__PURE__*/ redactedProto(TypeId$53, "Cipher.Key");
 * @category guards
 * @since 4.0.0
 */
-const isKey$2 = (u) => hasProperty(u, TypeId$53);
+const isKey$2 = (u) => hasProperty(u, TypeId$55);
 /**
 * Service that generates keys, encrypts, and decrypts without
 * authentication.
@@ -25935,7 +26023,7 @@ const fromCryptoKey$1 = (algorithm, cryptoKey) => fromCryptoKey$3("Cipher", "fro
 * @category converting
 * @since 4.0.0
 */
-const toBytes$3 = (key) => toBytes$5("Cipher", key, exportRaw);
+const toBytes$4 = (key) => toBytes$6("Cipher", key, exportRaw);
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/crypto/internal/asymmetric.js
 const seedPrefix = (oid) => Uint8Array.of(48, 46, 2, 1, 0, 48, 5, 6, 3, 43, 101, oid, 4, 34, 4, 32);
 /** @internal */
@@ -26001,7 +26089,7 @@ const exportKey = (subtle, cryptoKey, spec, role) => role === "private" ? export
 *
 * @internal
 */
-const toBytes$2 = (family, key) => toBytes$5(family.module, key, (subtle, cryptoKey) => exportKey(subtle, cryptoKey, family.specOf(key.algorithm), family.isPrivateKey(key) ? "private" : "public"));
+const toBytes$3 = (family, key) => toBytes$6(family.module, key, (subtle, cryptoKey) => exportKey(subtle, cryptoKey, family.specOf(key.algorithm), family.isPrivateKey(key) ? "private" : "public"));
 /**
 * Per-layer caches for imported byte-backed keys.
 *
@@ -26534,9 +26622,9 @@ var Mac_exports = /* @__PURE__ */ __exportAll$1({
 	layerWebCrypto: () => layerWebCrypto$3,
 	layerWebCryptoWith: () => layerWebCryptoWith,
 	timingSafeEqual: () => timingSafeEqual,
-	toBytes: () => toBytes$1
+	toBytes: () => toBytes$2
 });
-const TypeId$52 = "~effect/crypto/Mac/Key";
+const TypeId$54 = "~effect/crypto/Mac/Key";
 /**
 * HMAC with SHA-1, with a 20-byte tag.
 *
@@ -26586,7 +26674,7 @@ const hmacSha512 = {
 	name: "hmacSha512",
 	hash: sha512
 };
-const KeyProto$1 = /*#__PURE__*/ redactedProto(TypeId$52, "Mac.Key");
+const KeyProto$1 = /*#__PURE__*/ redactedProto(TypeId$54, "Mac.Key");
 /**
 * Checks whether a value is a {@link Key}.
 *
@@ -26594,7 +26682,7 @@ const KeyProto$1 = /*#__PURE__*/ redactedProto(TypeId$52, "Mac.Key");
 * @category guards
 * @since 4.0.0
 */
-const isKey$1 = (u) => hasProperty(u, TypeId$52);
+const isKey$1 = (u) => hasProperty(u, TypeId$54);
 const blockSizes = {
 	"MD5": 64,
 	"SHA-1": 64,
@@ -26761,7 +26849,7 @@ const fromCryptoKey = (algorithm, cryptoKey) => fromCryptoKey$3("Mac", "fromCryp
 * @category converting
 * @since 4.0.0
 */
-const toBytes$1 = (key) => toBytes$5("Mac", key, exportRaw);
+const toBytes$2 = (key) => toBytes$6("Mac", key, exportRaw);
 /**
 * Compares two byte arrays in constant time.
 *
@@ -26873,7 +26961,7 @@ const family$1 = {
 /** @internal */
 const secretFamily = (algorithm) => "nonceLength" in algorithm ? Aead_exports : "mode" in algorithm ? Cipher_exports : "_tag" in algorithm ? {
 	key,
-	toBytes
+	toBytes: toBytes$1
 } : Mac_exports;
 const hmacParams = {
 	name: "HMAC",
@@ -27003,7 +27091,7 @@ const key = (algorithm, bytes) => fromBytes("KeyWrap", "key", KeyProto, algorith
 * @category converting
 * @since 4.0.0
 */
-const toBytes = (key) => isKey(key) ? toBytes$5("KeyWrap", key, exportRaw) : toBytes$2(family$1, key);
+const toBytes$1 = (key) => isKey(key) ? toBytes$6("KeyWrap", key, exportRaw) : toBytes$3(family$1, key);
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/crypto/Signature.js
 /**
 * Digital signatures: Ed25519, ECDSA on P-256, P-384 and P-521, RSA-PSS, and
@@ -27349,7 +27437,7 @@ const makeZonedUnsafe = makeZonedUnsafe$1;
 * @category constructors
 * @since 3.6.0
 */
-const make$66 = make$75;
+const make$68 = make$77;
 /**
 * Converts a `DateTime` to a UTC `DateTime`.
 *
@@ -27929,7 +28017,7 @@ var HashMapImpl = class {
 		return toJson(this);
 	}
 	toString() {
-		return `HashMap(${format$2(Array.from(this))})`;
+		return `HashMap(${format$4(Array.from(this))})`;
 	}
 	toJSON() {
 		return {
@@ -28046,7 +28134,7 @@ const HashSetProto = {
 		return keys(keyMap(this));
 	},
 	toString() {
-		return `HashSet(${format$2(Array.from(this))})`;
+		return `HashSet(${format$4(Array.from(this))})`;
 	},
 	toJSON() {
 		return {
@@ -28292,7 +28380,7 @@ const filter = /*#__PURE__*/ dual(2, filter$1);
 * @stability unstable
 * @since 4.0.0
 */
-const TypeId$51 = "~effect/http/Cookies";
+const TypeId$53 = "~effect/http/Cookies";
 /**
 * Returns `true` when a value is a `Cookies` collection.
 *
@@ -28300,7 +28388,7 @@ const TypeId$51 = "~effect/http/Cookies";
 * @category guards
 * @since 4.0.0
 */
-const isCookies = (u) => hasProperty(u, TypeId$51);
+const isCookies = (u) => hasProperty(u, TypeId$53);
 const CookieTypeId = "~effect/http/Cookies/Cookie";
 const CookieErrorTypeId = "~effect/http/Cookies/CookieError";
 /**
@@ -28354,7 +28442,7 @@ var CookiesError = class CookiesError extends (/*#__PURE__*/ TaggedError$1("Cook
 	}
 };
 const Proto$20 = {
-	[TypeId$51]: TypeId$51,
+	[TypeId$53]: TypeId$53,
 	...BaseProto,
 	toJSON() {
 		return {
@@ -28699,7 +28787,7 @@ const value$3 = (self) => {
 * @stability stable
 * @since 3.3.0
 */
-const TypeId$50 = "~effect/Redacted";
+const TypeId$52 = "~effect/Redacted";
 /**
 * Returns `true` if a value is a `Redacted` wrapper.
 *
@@ -28728,7 +28816,7 @@ const TypeId$50 = "~effect/Redacted";
 * @category guards
 * @since 3.3.0
 */
-const isRedacted = (u) => hasProperty(u, TypeId$50);
+const isRedacted = (u) => hasProperty(u, TypeId$52);
 /**
 * Creates a `Redacted` wrapper for a sensitive value.
 *
@@ -28756,14 +28844,14 @@ const isRedacted = (u) => hasProperty(u, TypeId$50);
 * @category constructors
 * @since 3.3.0
 */
-const make$65 = (value, options) => {
+const make$67 = (value, options) => {
 	const self = Object.create(Proto$19);
 	if (options?.label) self.label = options.label;
 	redactedRegistry.set(self, value);
 	return self;
 };
 const Proto$19 = {
-	[TypeId$50]: { _A: (_) => _ },
+	[TypeId$52]: { _A: (_) => _ },
 	label: void 0,
 	...PipeInspectableProto,
 	toJSON() {
@@ -28831,7 +28919,7 @@ const value$2 = value$3;
 * @category instances
 * @since 4.0.0
 */
-const makeEquivalence = (isEquivalent) => make$82((x, y) => isEquivalent(value$2(x), value$2(y)));
+const makeEquivalence = (isEquivalent) => make$84((x, y) => isEquivalent(value$2(x), value$2(y)));
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/http/Headers.js
 /**
 * Models HTTP headers for the unstable HTTP client and server modules.
@@ -28856,9 +28944,9 @@ const makeEquivalence = (isEquivalent) => make$82((x, y) => isEquivalent(value$2
 * @category type IDs
 * @since 4.0.0
 */
-const TypeId$49 = /*#__PURE__*/ Symbol.for("~effect/http/Headers");
+const TypeId$51 = /*#__PURE__*/ Symbol.for("~effect/http/Headers");
 const Proto$18 = /*#__PURE__*/ Object.defineProperties(/*#__PURE__*/ Object.create(null), {
-	[TypeId$49]: { value: TypeId$49 },
+	[TypeId$51]: { value: TypeId$51 },
 	[symbolRedactable]: { value(context) {
 		return redact$1(this, get$10(context, CurrentRedactedNames$1));
 	} },
@@ -28874,7 +28962,7 @@ const Proto$18 = /*#__PURE__*/ Object.defineProperties(/*#__PURE__*/ Object.crea
 	toString: { value: BaseProto.toString },
 	[NodeInspectSymbol]: { value: BaseProto[NodeInspectSymbol] }
 });
-const make$64 = (input) => Object.assign(Object.create(Proto$18), input);
+const make$66 = (input) => Object.assign(Object.create(Proto$18), input);
 /**
 * Provides an `Equivalence` instance that compares `Headers` by header names
 * and string values.
@@ -28951,7 +29039,7 @@ const get$6 = /*#__PURE__*/ dual(2, (self, key) => fromUndefinedOr(self[key.toLo
 * @since 4.0.0
 */
 const set$2 = /*#__PURE__*/ dual(3, (self, key, value) => {
-	const out = make$64(self);
+	const out = make$66(self);
 	out[key.toLowerCase()] = value;
 	return out;
 });
@@ -28966,7 +29054,7 @@ const set$2 = /*#__PURE__*/ dual(3, (self, key, value) => {
 * @category combinators
 * @since 4.0.0
 */
-const setAll$1 = /*#__PURE__*/ dual(2, (self, headers) => make$64({
+const setAll$1 = /*#__PURE__*/ dual(2, (self, headers) => make$66({
 	...self,
 	...fromInput$1(headers)
 }));
@@ -28982,7 +29070,7 @@ const setAll$1 = /*#__PURE__*/ dual(2, (self, headers) => make$64({
 * @since 4.0.0
 */
 const merge$3 = /*#__PURE__*/ dual(2, (self, headers) => {
-	const out = make$64(self);
+	const out = make$66(self);
 	Object.assign(out, headers);
 	return out;
 });
@@ -28998,7 +29086,7 @@ const merge$3 = /*#__PURE__*/ dual(2, (self, headers) => {
 * @since 4.0.0
 */
 const remove$1 = /*#__PURE__*/ dual(2, (self, key) => {
-	const out = make$64(self);
+	const out = make$66(self);
 	delete out[key.toLowerCase()];
 	return out;
 });
@@ -29018,8 +29106,8 @@ const redact$1 = /*#__PURE__*/ dual(2, (self, key) => {
 	const modify = (key) => {
 		if (typeof key === "string") {
 			const k = key.toLowerCase();
-			if (k in self) out[k] = make$65(self[k]);
-		} else for (const name in self) if (name.search(key) !== -1) out[name] = make$65(self[name]);
+			if (k in self) out[k] = make$67(self[k]);
+		} else for (const name in self) if (name.search(key) !== -1) out[name] = make$67(self[name]);
 	};
 	if (Array.isArray(key)) for (let i = 0; i < key.length; i++) modify(key[i]);
 	else modify(key);
@@ -29277,7 +29365,7 @@ const toPath = (url) => {
 * @stability unstable
 * @since 4.0.0
 */
-const TypeId$48 = "~effect/http/UrlParams";
+const TypeId$50 = "~effect/http/UrlParams";
 /**
 * Returns `true` when a value is a `UrlParams` instance.
 *
@@ -29285,10 +29373,10 @@ const TypeId$48 = "~effect/http/UrlParams";
 * @category guards
 * @since 4.0.0
 */
-const isUrlParams = (u) => hasProperty(u, TypeId$48);
+const isUrlParams = (u) => hasProperty(u, TypeId$50);
 const Proto$17 = {
 	...PipeInspectableProto,
-	[TypeId$48]: TypeId$48,
+	[TypeId$50]: TypeId$50,
 	[Symbol.iterator]() {
 		return this.params[Symbol.iterator]();
 	},
@@ -29319,7 +29407,7 @@ const Proto$17 = {
 * @category constructors
 * @since 4.0.0
 */
-const make$63 = (params) => {
+const make$65 = (params) => {
 	const self = Object.create(Proto$17);
 	self.params = params;
 	return self;
@@ -29345,7 +29433,7 @@ const fromInput = (input) => {
 		const [keys, value] = parsed[i];
 		out.push([`${keys[0]}[${keys.slice(1).join("][")}]`, value]);
 	} else out.push(parsed[i]);
-	return make$63(out);
+	return make$65(out);
 };
 const fromInputNested = (input) => {
 	const entries = typeof input[Symbol.iterator] === "function" ? fromIterable$5(input) : Object.entries(input);
@@ -29371,7 +29459,7 @@ const coerce = (value) => isRedacted(value) ? value : String(value);
 * @category instances
 * @since 4.0.0
 */
-const Equivalence$1 = /*#__PURE__*/ make$82((a, b) => arrayEquivalence(a.params, b.params));
+const Equivalence$1 = /*#__PURE__*/ make$84((a, b) => arrayEquivalence(a.params, b.params));
 const arrayEquivalence = /*#__PURE__*/ makeEquivalence$2(/*#__PURE__*/ makeEquivalence$4([/*#__PURE__*/ strictEqual(), /*#__PURE__*/ asEquivalence()]));
 /**
 * An empty `UrlParams` value.
@@ -29380,7 +29468,7 @@ const arrayEquivalence = /*#__PURE__*/ makeEquivalence$2(/*#__PURE__*/ makeEquiv
 * @category constructors
 * @since 4.0.0
 */
-const empty$5 = /*#__PURE__*/ make$63([]);
+const empty$5 = /*#__PURE__*/ make$65([]);
 /**
 * Sets multiple query parameters from input.
 *
@@ -29401,7 +29489,7 @@ const setAll = /*#__PURE__*/ dual(2, (self, input) => {
 		if (keys.has(self.params[i][0])) continue;
 		params.push(self.params[i]);
 	}
-	return make$63(params);
+	return make$65(params);
 });
 /**
 * Serializes `UrlParams` to a URL query string without a leading question mark.
@@ -29429,7 +29517,7 @@ const toString$1 = (input) => new URLSearchParams(fromInput(input).params.map(([
 */
 const redact = /*#__PURE__*/ dual(2, (self, key) => {
 	const patterns = Array.isArray(key) ? key : [key];
-	return self.params.map(([name, value]) => [name, typeof value === "string" && isRedactedName(name, patterns) ? make$65(value) : value]);
+	return self.params.map(([name, value]) => [name, typeof value === "string" && isRedactedName(name, patterns) ? make$67(value) : value]);
 });
 /**
 * Checks whether a parameter name matches one of the redaction patterns.
@@ -29618,7 +29706,7 @@ const fromOptionExit = (option) => option._tag === "None" ? missingExit : succee
 * @stability stable
 * @since 4.0.0
 */
-const TypeId$47 = "~effect/SchemaIssue/Issue";
+const TypeId$49 = "~effect/SchemaIssue/Issue";
 /**
 * Returns `true` if the given value is an {@link Issue}.
 *
@@ -29649,7 +29737,7 @@ const TypeId$47 = "~effect/SchemaIssue/Issue";
 * @since 4.0.0
 */
 function isIssue(u) {
-	return hasProperty(u, TypeId$47) && u[TypeId$47] === TypeId$47;
+	return hasProperty(u, TypeId$49) && u[TypeId$49] === TypeId$49;
 }
 /**
 * Returns `true` when an issue contains an input reported by the schema parser.
@@ -29685,7 +29773,7 @@ function hasInput(issue) {
 	return Object.hasOwn(issue, "input");
 }
 var IssueNodeImpl = class {
-	[TypeId$47] = TypeId$47;
+	[TypeId$49] = TypeId$49;
 	constructor(input, options) {
 		if (options?.reportInput === true && input !== missing) this.input = input;
 	}
@@ -30030,7 +30118,7 @@ const defaultLeafHook = (issue) => {
 */
 const defaultCheckHook = (issue) => findMessage(issue) ?? findMessage(issue.issue);
 function formatInput(issue) {
-	return hasInput(issue) ? format$2(issue.input) : void 0;
+	return hasInput(issue) ? format$4(issue.input) : void 0;
 }
 function findExpected(issue) {
 	const expected = issue.annotations?.expected;
@@ -30942,7 +31030,7 @@ const Middleware = class extends Class$3 {
 		return new Middleware(this.encode, this.decode);
 	}
 };
-const TypeId$46 = "~effect/SchemaTransformation/Transformation";
+const TypeId$48 = "~effect/SchemaTransformation/Transformation";
 /**
 * Constructs a bidirectional schema transformation from its decode and encode getters.
 *
@@ -30951,7 +31039,7 @@ const TypeId$46 = "~effect/SchemaTransformation/Transformation";
 * @since 4.0.0
 */
 const Transformation = class extends Class$3 {
-	[TypeId$46] = TypeId$46;
+	[TypeId$48] = TypeId$48;
 	_tag = "Transformation";
 	decode;
 	encode;
@@ -30994,7 +31082,7 @@ const Transformation = class extends Class$3 {
 * @since 4.0.0
 */
 function isTransformation(u) {
-	return hasProperty(u, TypeId$46) && u[TypeId$46] === TypeId$46;
+	return hasProperty(u, TypeId$48) && u[TypeId$48] === TypeId$48;
 }
 /**
 * Constructs a `Transformation` from an object with `decode` and `encode`
@@ -31250,9 +31338,9 @@ const decodeJsonError = (input) => {
 const encodeUnknownAsJson = (input) => {
 	try {
 		const json = formatJson(input);
-		return json === void 0 ? format$2(input) : JSON.parse(json);
+		return json === void 0 ? format$4(input) : JSON.parse(json);
 	} catch {
-		return format$2(input);
+		return format$4(input);
 	}
 };
 const encodeJsonError = (input, options, encodeDefect) => {
@@ -31539,9 +31627,9 @@ const Context = class {
 		this.annotations = annotations;
 	}
 };
-const TypeId$45 = "~effect/Schema";
+const TypeId$47 = "~effect/Schema";
 var ASTNodeImpl = class {
-	[TypeId$45] = TypeId$45;
+	[TypeId$47] = TypeId$47;
 	annotations;
 	checks;
 	encoding;
@@ -31892,7 +31980,7 @@ const Literal$1 = class extends ASTNodeImpl {
 	literal;
 	constructor(literal, annotations, checks, encoding, context) {
 		super(annotations, checks, encoding, context);
-		if (typeof literal === "number" && !globalThis.Number.isFinite(literal)) throw new Error(`A numeric literal must be finite, got ${format$2(literal)}`);
+		if (typeof literal === "number" && !globalThis.Number.isFinite(literal)) throw new Error(`A numeric literal must be finite, got ${format$4(literal)}`);
 		this.literal = literal;
 	}
 	/** @internal */
@@ -33965,7 +34053,7 @@ function makeOption(schema) {
 * @category constructors
 * @since 4.0.0
 */
-function make$62(schema) {
+function make$64(schema) {
 	return makeConstructorSync(toType$1(schema.ast));
 }
 /**
@@ -34192,12 +34280,12 @@ const normalCompiler = (ast) => resolve(ast).parser;
 const constructorCompiler = (ast) => resolve(ast).makeEffect;
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/internal/schema/make.js
 /** @internal */
-const TypeId$44 = "~effect/Schema/Schema";
+const TypeId$46 = "~effect/Schema/Schema";
 const RebuildOptions = /*#__PURE__*/ Symbol();
 const SchemaProto = {
-	[TypeId$44]: TypeId$44,
+	[TypeId$46]: TypeId$46,
 	get make() {
-		const value = make$62(this);
+		const value = make$64(this);
 		Object.defineProperty(this, "make", {
 			value,
 			enumerable: true
@@ -34233,11 +34321,11 @@ const SchemaProto = {
 		return this.rebuild(appendChecks(this.ast, checks));
 	},
 	rebuild(ast) {
-		return make$61(ast, this[RebuildOptions]);
+		return make$63(ast, this[RebuildOptions]);
 	}
 };
 /** @internal */
-function make$61(ast, options) {
+function make$63(ast, options) {
 	function Schema() {}
 	const self = Object.setPrototypeOf(Schema, SchemaProto);
 	if (options && (Object.hasOwn(options, "name") || Object.hasOwn(options, "length") || Object.hasOwn(options, "__proto__"))) Object.defineProperties(self, Object.getOwnPropertyDescriptors({ ...options }));
@@ -34489,7 +34577,7 @@ const PRE_2020_TO_2020_COLLISIONS = [
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/internal/schema/toCodec.js
 /** @internal */
 function toCodecJson$1(schema) {
-	return make$61(toCodecJsonAST(schema.ast), { schema });
+	return make$63(toCodecJsonAST(schema.ast), { schema });
 }
 /** @internal */
 const toCodecJsonAST = /*#__PURE__*/ makeCodecDerivation(toCodecJsonASTStep);
@@ -34533,7 +34621,7 @@ function toCodecJsonASTStep(ast, recur) {
 		case "Declaration": {
 			const getLink = ast.annotations?.toCodecJson ?? ast.annotations?.toCodec;
 			if (!isFunction(getLink)) return replaceEncoding(ast, [unknownToJson]);
-			const link = getLink(ast.typeParameters.map((tp) => make$61(toEncoded$1(tp))));
+			const link = getLink(ast.typeParameters.map((tp) => make$63(toEncoded$1(tp))));
 			return link === void 0 ? ast : replaceEncoding(ast, [mapLink(link, recur)]);
 		}
 		case "Unknown": return replaceEncoding(ast, [unknownToJson]);
@@ -34560,7 +34648,7 @@ function toCodecJsonASTStep(ast, recur) {
 }
 /** @internal */
 function toCodecStringTree$1(schema) {
-	return make$61(toCodecStringTreeAST(schema.ast), { schema });
+	return make$63(toCodecStringTreeAST(schema.ast), { schema });
 }
 const toStringTreeReorder = /*#__PURE__*/ makeReorder((ast) => {
 	switch (ast._tag) {
@@ -34576,7 +34664,7 @@ const toStringTreeReorder = /*#__PURE__*/ makeReorder((ast) => {
 function toCodecStringTreeASTStep(ast, recur, onMissingAnnotation) {
 	switch (ast._tag) {
 		case "Declaration": {
-			const typeParameters = ast.typeParameters.map((tp) => make$61(recur(toEncoded$1(tp))));
+			const typeParameters = ast.typeParameters.map((tp) => make$63(recur(toEncoded$1(tp))));
 			const getStringTreeLink = ast.annotations?.toCodecStringTree;
 			if (isFunction(getStringTreeLink)) {
 				const link = getStringTreeLink(typeParameters);
@@ -35693,15 +35781,16 @@ const concat$2 = (chunks) => {
 * @category instances
 * @since 4.0.6
 */
-const Order$1 = /*#__PURE__*/ make$81((self, that) => {
+const Order$1 = /*#__PURE__*/ make$83((self, that) => {
 	const length = Math.min(self.length, that.length);
 	for (let i = 0; i < length; i++) if (self[i] !== that[i]) return self[i] < that[i] ? -1 : 1;
 	return self.length < that.length ? -1 : self.length > that.length ? 1 : 0;
 });
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/net/NetAddress.js
-const TypeId$43 = "~effect/net/NetAddress";
+const TypeId$45 = "~effect/net/NetAddress";
 const ipv4Value = (self) => self.value;
 const ipv6Words = (self) => self;
+const getMacBytes = (self) => self.bytes;
 /**
 * A checked network-address operation failure retaining the address or supplied input.
 *
@@ -35717,7 +35806,7 @@ const ipv6Words = (self) => self;
 * @since 4.0.0
 */
 var NetAddressError = class extends (/*#__PURE__*/ TaggedError$1("NetAddressError")) {};
-const isAddress = (u) => hasProperty(u, TypeId$43);
+const isAddress = (u) => hasProperty(u, TypeId$45);
 /**
 * Returns `true` when a value is an IPv4 address.
 *
@@ -35735,6 +35824,22 @@ const isIpv4Address = (u) => isAddress(u) && u._tag === "Ipv4Address";
 */
 const isIpv6Address = (u) => isAddress(u) && u._tag === "Ipv6Address";
 /**
+* Returns the bit width of an IP address.
+*
+* @stability unstable
+* @category getters
+* @since 4.0.0
+*/
+const width$1 = (address) => isIpv4Address(address) ? 32 : 128;
+/**
+* Returns `true` when a value is a MAC address.
+*
+* @stability unstable
+* @category guards
+* @since 4.0.0
+*/
+const isMacAddress = (u) => isAddress(u) && u._tag === "MacAddress";
+/**
 * Returns `true` when a value is a resolved IPv4 internet address.
 *
 * @stability unstable
@@ -35769,7 +35874,7 @@ const isUnixPathAddress = (u) => isAddress(u) && u._tag === "UnixPathAddress";
 const Ipv4Proto = {
 	...BaseProto,
 	_tag: "Ipv4Address",
-	[TypeId$43]: TypeId$43,
+	[TypeId$45]: TypeId$45,
 	[symbol$2](that) {
 		return isIpv4Address(that) && ipv4Value(this) === ipv4Value(that);
 	},
@@ -35786,7 +35891,7 @@ const Ipv4Proto = {
 const Ipv6Proto = {
 	...BaseProto,
 	_tag: "Ipv6Address",
-	[TypeId$43]: TypeId$43,
+	[TypeId$45]: TypeId$45,
 	[symbol$2](that) {
 		if (!isIpv6Address(that)) return false;
 		const self = ipv6Words(this);
@@ -35969,6 +36074,38 @@ const ipv6ToSegments = (self) => {
 	];
 };
 /**
+* Returns the sixteen numeric octets of an IPv6 address in a fresh array.
+*
+* @stability unstable
+* @category getters
+* @since 4.0.0
+*/
+const ipv6ToOctets = (self) => {
+	const { w0, w1, w2, w3 } = ipv6Words(self);
+	return [
+		...wordToOctets(w0),
+		...wordToOctets(w1),
+		...wordToOctets(w2),
+		...wordToOctets(w3)
+	];
+};
+/**
+* Returns `true` when the MAC address is the all-ones broadcast address.
+*
+* @stability unstable
+* @category predicates
+* @since 4.0.0
+*/
+const isMacBroadcast = (self) => getMacBytes(self).every((byte) => byte === 255);
+/**
+* Returns `true` when the MAC address has the IEEE group-address bit set.
+*
+* @stability unstable
+* @category predicates
+* @since 4.0.0
+*/
+const isMacMulticast = (self) => (getMacBytes(self)[0] & 1) !== 0;
+/**
 * Formats an IP address in canonical numeric form.
 *
 * @stability unstable
@@ -35995,6 +36132,109 @@ const formatIp = (self) => {
 	return `${segments.slice(0, bestStart).map((segment) => segment.toString(16)).join(":")}::${segments.slice(bestStart + bestLength).map((segment) => segment.toString(16)).join(":")}`;
 };
 /**
+* Returns `true` for the all-zero address of either IP version.
+*
+* @stability unstable
+* @category predicates
+* @since 4.0.0
+*/
+const isUnspecified = (self) => {
+	if (isIpv4Address(self)) return ipv4Value(self) === 0;
+	const { w0, w1, w2, w3 } = ipv6Words(self);
+	return w0 === 0 && w1 === 0 && w2 === 0 && w3 === 0;
+};
+/**
+* Returns `true` for IPv4 `127.0.0.0/8` or IPv6 `::1`.
+*
+* @stability unstable
+* @category predicates
+* @since 4.0.0
+*/
+const isLoopback = (self) => {
+	if (isIpv4Address(self)) return ipv4Value(self) >>> 24 === 127;
+	const { w0, w1, w2, w3 } = ipv6Words(self);
+	return w0 === 0 && w1 === 0 && w2 === 0 && w3 === 1;
+};
+/**
+* Returns `true` for IPv4 `224.0.0.0/4`, IPv6 `ff00::/8`, or a MAC address with
+* the IEEE group bit set, refining the value while preserving its address type.
+*
+* **Details**
+*
+* The MAC all-ones broadcast address has the group bit set and is multicast;
+* the IPv4 limited broadcast address `255.255.255.255` is not. Use
+* {@link isMacBroadcast} or {@link isBroadcast} to distinguish broadcast.
+*
+* **Example** (Classifying IP and MAC group addresses)
+*
+* ```ts import.meta.vitest
+* import { assert } from "@effect/vitest"
+* import { NetAddress } from "effect/net"
+*
+* const ip = NetAddress.ipFromStringUnsafe("239.255.0.1")
+* const mac = NetAddress.macAddressFromStringUnsafe("ff:ff:ff:ff:ff:ff")
+*
+* assert.isTrue(NetAddress.isMulticast(ip))
+* assert.isTrue(NetAddress.isMulticast(mac))
+* assert.isTrue(NetAddress.isBroadcast(mac))
+* assert.isFalse(NetAddress.isMulticast(NetAddress.ipv4Broadcast))
+* ```
+*
+* @stability unstable
+* @category predicates
+* @since 4.0.0
+*/
+const isMulticast = (self) => {
+	if (isMacAddress(self)) return isMacMulticast(self);
+	if (isIpv4Address(self)) return ipv4Value(self) >>> 28 === 14;
+	return ipv6Words(self).w0 >>> 24 === 255;
+};
+/**
+* Returns `true` for the IPv4 limited broadcast address `255.255.255.255` or
+* the MAC all-ones broadcast address.
+*
+* **Details**
+*
+* MAC broadcast is also multicast because its IEEE group bit is set. IPv4
+* limited broadcast is not multicast. Directed IPv4 broadcast cannot be
+* determined without a network prefix and is not classified here.
+*
+* @stability unstable
+* @category predicates
+* @since 4.0.0
+*/
+const isBroadcast = (self) => isMacAddress(self) ? isMacBroadcast(self) : ipv4Value(self) === 4294967295;
+/**
+* Returns `true` for IPv4 `169.254.0.0/16` or IPv6 `fe80::/10`.
+*
+* @stability unstable
+* @category predicates
+* @since 4.0.0
+*/
+const isLinkLocal = (self) => {
+	if (isIpv4Address(self)) return ipv4Value(self) >>> 16 === 43518;
+	return (ipv6Words(self).w0 >>> 16 & 65472) === 65152;
+};
+/**
+* Returns `true` for IPv4 private-use ranges defined by RFC 1918.
+*
+* @stability unstable
+* @category predicates
+* @since 4.0.0
+*/
+const isPrivate = (self) => {
+	const value = ipv4Value(self);
+	return value >>> 24 === 10 || (value >>> 16 & 65520) === 44048 || value >>> 16 === 49320;
+};
+/**
+* Returns `true` for IPv6 unique-local addresses in `fc00::/7`.
+*
+* @stability unstable
+* @category predicates
+* @since 4.0.0
+*/
+const isUniqueLocal = (self) => (ipv6Words(self).w0 >>> 24 & 254) === 252;
+/**
 * Returns `true` when an IPv6 address is in the `::ffff:0:0/96` mapped range.
 *
 * @stability unstable
@@ -36005,10 +36245,18 @@ const isIpv4Mapped = (self) => {
 	const { w0, w1, w2 } = ipv6Words(self);
 	return w0 === 0 && w1 === 0 && w2 === 65535;
 };
+/**
+* Extracts the IPv4 value from an IPv4-mapped IPv6 address.
+*
+* @stability unstable
+* @category converting
+* @since 4.0.0
+*/
+const fromIpv4Mapped = (self) => isIpv4Mapped(self) ? some$1(makeIpv4(ipv6Words(self).w3)) : none();
 const InetV4Proto = {
 	...BaseProto,
 	_tag: "InetAddressV4",
-	[TypeId$43]: TypeId$43,
+	[TypeId$45]: TypeId$45,
 	[symbol$2](that) {
 		return isInetAddressV4(that) && this.port === that.port && equals$1(this.address, that.address);
 	},
@@ -36025,7 +36273,7 @@ const InetV4Proto = {
 const InetV6Proto = {
 	...BaseProto,
 	_tag: "InetAddressV6",
-	[TypeId$43]: TypeId$43,
+	[TypeId$45]: TypeId$45,
 	[symbol$2](that) {
 		return isInetAddressV6(that) && this.port === that.port && this.scopeId === that.scopeId && equals$1(this.address, that.address);
 	},
@@ -36193,7 +36441,7 @@ const formatUrlUnsafe = (self, scheme = "http") => getOrThrow(formatUrl(self, sc
 const UnixPathProto = {
 	...BaseProto,
 	_tag: "UnixPathAddress",
-	[TypeId$43]: TypeId$43,
+	[TypeId$45]: TypeId$45,
 	[symbol$2](that) {
 		return isUnixPathAddress(that) && this.path === that.path;
 	},
@@ -36234,8 +36482,200 @@ const unixPathAddress = (path) => {
 const formatUnixPath = (self) => `unix://${self.path}`;
 ({ ...BaseProto });
 ({ ...BaseProto });
+// ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/net/IpInterface.js
+/**
+* IPv4 and IPv6 interface addresses that preserve host bits alongside a prefix length.
+*
+* @stability unstable
+* @since 4.0.0
+*/
+const TypeId$43 = "~effect/net/IpInterface";
+/**
+* Returns `true` when a value is an IP interface address.
+*
+* @stability unstable
+* @category guards
+* @since 4.0.0
+*/
+const isIpInterface = (u) => hasProperty(u, TypeId$43);
+const IpInterfaceProto = {
+	...BaseProto,
+	_tag: "IpInterface",
+	[TypeId$43]: TypeId$43,
+	[symbol$2](that) {
+		return isIpInterface(that) && this.prefixLength === that.prefixLength && equals$1(this.address, that.address);
+	},
+	[symbol$3]() {
+		return combine$2(hash(this.address), number$5(this.prefixLength));
+	},
+	toString() {
+		return format$1(this);
+	},
+	toJSON() {
+		return this.toString();
+	}
+};
+const interfaceError = (input, message) => fail$11(new NetAddressError({
+	input,
+	message
+}));
+/**
+* Creates an interface address while preserving all address bits.
+*
+* @stability unstable
+* @category constructors
+* @since 4.0.0
+*/
+const make$62 = (address, prefixLength) => {
+	const max = width$1(address);
+	if (!Number.isInteger(prefixLength) || prefixLength < 0 || prefixLength > max) return interfaceError(address, `prefix length must be an integer from 0 through ${max}`);
+	const self = Object.assign(Object.create(IpInterfaceProto), {
+		address,
+		prefixLength
+	});
+	return succeed$10(Object.freeze(self));
+};
+const parseAddressWithPrefix = (input, options) => {
+	const slash = input.indexOf("/");
+	if (slash === -1 && options?.prefix !== "required") return succeed$10({
+		address: input,
+		prefixLength: void 0
+	});
+	if (slash <= 0 || slash !== input.lastIndexOf("/") || slash === input.length - 1) return interfaceError(input, "expected an address and prefix length separated by one slash");
+	const prefix = input.slice(slash + 1);
+	if (!/^(0|[1-9][0-9]*)$/.test(prefix)) return interfaceError(input, "prefix length must be an unpadded ASCII decimal integer");
+	return succeed$10({
+		address: input.slice(0, slash),
+		prefixLength: Number(prefix)
+	});
+};
+/**
+* Parses an IP interface address while preserving host bits.
+*
+* **Details**
+*
+* A missing prefix defaults to the address width. Use `prefix: "required"` to
+* require one.
+*
+* @stability unstable
+* @category decoding
+* @since 4.0.0
+*/
+const fromString$2 = (input, options) => flatMap$6(parseAddressWithPrefix(input, options), (parts) => flatMap$6(ipFromString(parts.address), (address) => make$62(address, parts.prefixLength ?? width$1(address))));
+/**
+* Formats an interface address using canonical address text and its decimal prefix length.
+*
+* @stability unstable
+* @category encoding
+* @since 4.0.0
+*/
+const format$1 = (self) => `${formatIp(self.address)}/${self.prefixLength}`;
+// ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/net/IpNetwork.js
+/**
+* Pure, canonical IPv4 and IPv6 network prefixes using CIDR notation.
+*
+* @stability unstable
+* @since 4.0.0
+*/
+const TypeId$42 = "~effect/net/IpNetwork";
+/**
+* Returns `true` when a value is an IPv4 or IPv6 network prefix.
+*
+* @stability unstable
+* @category guards
+* @since 4.0.0
+*/
+const isIpNetwork = (u) => hasProperty(u, TypeId$42);
+const IpNetworkProto = {
+	...BaseProto,
+	_tag: "IpNetwork",
+	[TypeId$42]: TypeId$42,
+	[symbol$2](that) {
+		return isIpNetwork(that) && this.prefixLength === that.prefixLength && equals$1(this.address, that.address);
+	},
+	[symbol$3]() {
+		return combine$2(hash(this.address), number$5(this.prefixLength));
+	},
+	toString() {
+		return format(this);
+	},
+	toJSON() {
+		return this.toString();
+	}
+};
+const fromInterfaceValue = (value) => {
+	const self = Object.assign(Object.create(IpNetworkProto), {
+		address: value.address,
+		prefixLength: value.prefixLength
+	});
+	return Object.freeze(self);
+};
+const toBytes = (address) => isIpv4Address(address) ? ipv4ToOctets(address) : ipv6ToOctets(address);
+const maskBytes = (bytes, prefixLength) => {
+	const wholeBytes = Math.floor(prefixLength / 8);
+	const partialBits = prefixLength % 8;
+	return bytes.map((byte, index) => {
+		if (index < wholeBytes) return byte;
+		if (index === wholeBytes && partialBits !== 0) return byte & (255 << 8 - partialBits & 255);
+		return 0;
+	});
+};
+/**
+* Creates a network prefix when the address has no host bits set.
+*
+* **Gotchas**
+*
+* Use {@link fromAddress} when a host address should be truncated to its containing network.
+*
+* @stability unstable
+* @category constructors
+* @since 4.0.0
+*/
+const make$61 = (address, prefixLength) => {
+	return flatMap$6(make$62(address, prefixLength), (value) => {
+		const bytes = toBytes(address);
+		const masked = maskBytes(bytes, prefixLength);
+		if (bytes.some((byte, index) => byte !== masked[index])) return fail$11(new NetAddressError({
+			input: address,
+			message: "address has non-zero host bits"
+		}));
+		return succeed$10(fromInterfaceValue(value));
+	});
+};
+/**
+* Parses a strict IPv4 or IPv6 network prefix in CIDR notation.
+*
+* @stability unstable
+* @category decoding
+* @since 4.0.0
+*/
+const fromString$1 = (input) => {
+	return flatMap$6(fromString$2(input, { prefix: "required" }), (value) => make$61(value.address, value.prefixLength));
+};
+/**
+* Formats a network prefix using canonical address text and its decimal prefix length.
+*
+* @stability unstable
+* @category encoding
+* @since 4.0.0
+*/
+const format = (self) => `${formatIp(self.address)}/${self.prefixLength}`;
+const containsBytes = (self, address) => {
+	if (isIpv4Address(self.address) !== isIpv4Address(address)) return false;
+	const expected = toBytes(self.address);
+	const actual = maskBytes(toBytes(address), self.prefixLength);
+	return expected.every((byte, index) => byte === actual[index]);
+};
+/**
+* Returns `true` when a network prefix contains an IP address.
+*
+* @stability unstable
+* @category predicates
+* @since 4.0.0
+*/
+const contains = /*#__PURE__*/ dual(2, containsBytes);
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/Schema.js
-const TypeId$41 = TypeId$44;
+const TypeId$41 = TypeId$46;
 /**
 * Creates a schema for a **parametric** type (a generic container such as
 * `Array<A>`, `Option<A>`, etc.) by accepting a list of type-parameter schemas
@@ -36772,7 +37212,7 @@ const encodeSync = encodeUnknownSync$1;
 * @category constructors
 * @since 3.10.0
 */
-const make$60 = make$61;
+const make$60 = make$63;
 /**
 * Checks whether a value is a `Schema`.
 *
@@ -37876,7 +38316,7 @@ function isPattern(regExp, annotations) {
 	const source = regExp.source;
 	const flags = regExp.flags;
 	const canExport = /^[dg]*uy?$/.test(flags);
-	const runtimeRegExp = flags === "" ? `new globalThis.RegExp(${format$2(source)})` : `new globalThis.RegExp(${format$2(source)}, ${format$2(flags)})`;
+	const runtimeRegExp = flags === "" ? `new globalThis.RegExp(${format$4(source)})` : `new globalThis.RegExp(${format$4(source)}, ${format$4(flags)})`;
 	return isPattern$1(regExp, {
 		toJsonSchema: () => canExport ? { pattern: flags.endsWith("y") ? `^(?:${source})` : source } : [{}, true],
 		toCode: () => ({ runtime: `Schema.isPattern(${runtimeRegExp})` }),
@@ -37901,7 +38341,7 @@ const Finite = /*#__PURE__*/ make$60(finite);
 */
 function makeIsGreaterThan(options) {
 	const gt = isGreaterThan$1(options.order);
-	const formatter = options.formatter ?? format$2;
+	const formatter = options.formatter ?? format$4;
 	return (exclusiveMinimum, annotations) => {
 		return makeFilter((input) => gt(input, exclusiveMinimum), {
 			expected: `a value greater than ${formatter(exclusiveMinimum)}`,
@@ -37925,7 +38365,7 @@ function makeIsGreaterThan(options) {
 */
 function makeIsGreaterThanOrEqualTo(options) {
 	const gte = isGreaterThanOrEqualTo$2(options.order);
-	const formatter = options.formatter ?? format$2;
+	const formatter = options.formatter ?? format$4;
 	return (minimum, annotations) => {
 		return makeFilter((input) => gte(input, minimum), {
 			expected: `a value greater than or equal to ${formatter(minimum)}`,
@@ -37951,7 +38391,7 @@ function makeIsBetween(deriveOptions) {
 	const greaterThan = isGreaterThan$1(deriveOptions.order);
 	const lessThanOrEqualTo = isLessThanOrEqualTo$1(deriveOptions.order);
 	const lessThan = isLessThan$1(deriveOptions.order);
-	const formatter = deriveOptions.formatter ?? format$2;
+	const formatter = deriveOptions.formatter ?? format$4;
 	return (options, annotations) => {
 		const gte = options.exclusiveMinimum ? greaterThan : greaterThanOrEqualTo;
 		const lte = options.exclusiveMaximum ? lessThan : lessThanOrEqualTo;
@@ -37970,7 +38410,7 @@ function makeIsBetween(deriveOptions) {
 	};
 }
 function encodeNumberPayload(number) {
-	if (!globalThis.Number.isFinite(number)) throw new globalThis.RangeError(`Expected a finite number, got ${format$2(number)}`);
+	if (!globalThis.Number.isFinite(number)) throw new globalThis.RangeError(`Expected a finite number, got ${format$4(number)}`);
 	return number;
 }
 /**
@@ -38000,7 +38440,7 @@ const isGreaterThan = /*#__PURE__*/ makeIsGreaterThan({
 			payload: { exclusiveMinimum: encodeNumberPayload(exclusiveMinimum) }
 		},
 		toJsonSchema: () => ({ exclusiveMinimum }),
-		toCode: () => ({ runtime: `Schema.isGreaterThan(${format$2(exclusiveMinimum)})` })
+		toCode: () => ({ runtime: `Schema.isGreaterThan(${format$4(exclusiveMinimum)})` })
 	})
 });
 /**
@@ -38030,7 +38470,7 @@ const isGreaterThanOrEqualTo$1 = /*#__PURE__*/ makeIsGreaterThanOrEqualTo({
 			payload: { minimum: encodeNumberPayload(minimum) }
 		},
 		toJsonSchema: () => ({ minimum }),
-		toCode: () => ({ runtime: `Schema.isGreaterThanOrEqualTo(${format$2(minimum)})` })
+		toCode: () => ({ runtime: `Schema.isGreaterThanOrEqualTo(${format$4(minimum)})` })
 	})
 });
 /**
@@ -38074,7 +38514,7 @@ const isBetween = /*#__PURE__*/ makeIsBetween({
 				[exclusiveMinimum ? "exclusiveMinimum" : "minimum"]: options.minimum,
 				[exclusiveMaximum ? "exclusiveMaximum" : "maximum"]: options.maximum
 			}),
-			toCode: () => ({ runtime: `Schema.isBetween({ minimum: ${format$2(options.minimum)}, maximum: ${format$2(options.maximum)}, exclusiveMinimum: ${format$2(exclusiveMinimum)}, exclusiveMaximum: ${format$2(exclusiveMaximum)} })` })
+			toCode: () => ({ runtime: `Schema.isBetween({ minimum: ${format$4(options.minimum)}, maximum: ${format$4(options.maximum)}, exclusiveMinimum: ${format$4(exclusiveMinimum)}, exclusiveMaximum: ${format$4(exclusiveMaximum)} })` })
 		};
 	}
 });
@@ -38559,7 +38999,7 @@ function Cause(error, defect) {
 }
 const dateTimeUtcFromString = /*#__PURE__*/ transformEffect({
 	decode: (s, options) => {
-		return match$8(make$66(s), {
+		return match$8(make$68(s), {
 			onNone: () => fail$6(new InvalidValue$1({ expected: "a valid UTC DateTime string" }, s, options)),
 			onSome: (result) => succeed$5(toUtc(result))
 		});
@@ -38787,7 +39227,7 @@ function Redacted(value, options) {
 		if (isRedacted(input)) {
 			const label = decodeLabel !== void 0 ? mapErrorEager(decodeLabel(input.label, poptions), (issue) => new Pointer(["label"], issue)) : void_$1;
 			return flatMapEager(label, () => mapBothEager(decodeUnknownEffect$1(value)(value$2(input), poptions), {
-				onSuccess: (value) => make$65(value, { label: input.label }),
+				onSuccess: (value) => make$67(value, { label: input.label }),
 				onFailure: () => {
 					return new Composite(ast, [new Pointer(["value"], new InvalidValue$1(void 0, input, poptions))], input, poptions);
 				}
@@ -38800,13 +39240,13 @@ function Redacted(value, options) {
 			payload: normalizedOptions ?? null
 		},
 		toCode: ({ typeParameters }) => ({
-			runtime: normalizedOptions !== void 0 ? `Schema.Redacted(${typeParameters[0].runtime}, ${format$2(normalizedOptions)})` : `Schema.Redacted(${typeParameters[0].runtime})`,
+			runtime: normalizedOptions !== void 0 ? `Schema.Redacted(${typeParameters[0].runtime}, ${format$4(normalizedOptions)})` : `Schema.Redacted(${typeParameters[0].runtime})`,
 			Type: `Redacted.Redacted<${typeParameters[0].Type}>`,
 			importDeclarations: [`import * as Redacted from "effect/Redacted"`]
 		}),
 		expected: "Redacted",
 		toCodecJson: ([value]) => link$1()(value, {
-			decode: transform$3((e) => make$65(e, { label })),
+			decode: transform$3((e) => make$67(e, { label })),
 			encode: disallowJsonEncode ? forbidden((oe) => "Cannot serialize Redacted" + (isSome(oe) && typeof oe.value.label === "string" ? ` with label: "${oe.value.label}"` : "")) : transform$3(value$2)
 		}),
 		toEquivalence: ([value]) => makeEquivalence(value)
@@ -39006,7 +39446,7 @@ function isStruct(schema) {
 const Class = (identifier) => (schema, annotations) => {
 	const struct = isStruct(schema) ? schema : Struct(schema);
 	return makeClass(Class$1, identifier, struct, annotations, (identifier) => ({ toString() {
-		return `${identifier}(${format$2({ ...this })})`;
+		return `${identifier}(${format$4({ ...this })})`;
 	} }));
 };
 /**
@@ -39342,7 +39782,7 @@ const TypeId$40 = "~effect/Cache";
 const makeWith$2 = (lookup, options) => contextWith$1((context) => {
 	const self = Object.create(Proto$16);
 	self.lookup = (key) => updateContext$1(lookup(key), (input) => merge$5(context, input));
-	self.map = make$74();
+	self.map = make$76();
 	self.capacity = options.capacity;
 	self.timeToLive = options.timeToLive ? (exit, key) => fromInputUnsafe$1(options.timeToLive(exit, key)) : defaultTimeToLive;
 	return succeed$9(self);
@@ -40419,7 +40859,7 @@ const removeSubscribers = (subscribers, subscription, pollers) => {
 	set.delete(pollers);
 	if (set.size === 0) subscribers.delete(subscription);
 };
-const makeSubscriptionUnsafe = (pubsub, subscribers, strategy, ended) => new SubscriptionImpl(pubsub, subscribers, pubsub.subscribe(), make$73(), makeUnsafe$3(false), make$57(false), strategy, pubsub.replayWindow(), ended);
+const makeSubscriptionUnsafe = (pubsub, subscribers, strategy, ended) => new SubscriptionImpl(pubsub, subscribers, pubsub.subscribe(), make$75(), makeUnsafe$3(false), make$57(false), strategy, pubsub.replayWindow(), ended);
 var BoundedPubSubArb = class {
 	array;
 	replayIndices;
@@ -41462,7 +41902,7 @@ const fromTransformBracket = (f) => fromTransform$1(fnUntraced(function* (upstre
 * @since 4.0.0
 */
 const toTransform = (channel) => channel.transform;
-const asyncQueue = (scope, f, options) => make$72({
+const asyncQueue = (scope, f, options) => make$74({
 	capacity: options?.bufferSize,
 	strategy: options?.strategy
 }).pipe(tap$1((queue) => addFinalizer$1(scope, shutdown(queue))), tap$1((queue) => provide$3(f(queue), scope).pipe(catchCause$2((cause) => failCause$2(queue, cause)), forkIn(scope, { startImmediately: true }))));
@@ -46511,7 +46951,7 @@ function describeUnknown(u, preserveEmptyStrings) {
 	if (typeof u === "number" || typeof u === "boolean" || typeof u === "bigint") return makeValue(String(u));
 	if (Array.isArray(u)) return makeArray(u.length);
 	if (isObject$3(u)) return makeRecord(new Set(Object.keys(u)));
-	return makeValue(format$2(u));
+	return makeValue(format$4(u));
 }
 function stringNode(value, preserveEmptyStrings) {
 	const normalized = emptyStringAsMissing(value, preserveEmptyStrings);
@@ -49884,7 +50324,7 @@ var RateLimitError = class extends (/*#__PURE__*/ Error$1("effect/ai/AiError/Rat
 	}
 	get message() {
 		let msg = "Rate limit exceeded";
-		if (this.retryAfter) msg += `. Retry after ${format$1(this.retryAfter)}`;
+		if (this.retryAfter) msg += `. Retry after ${format$3(this.retryAfter)}`;
 		return msg;
 	}
 };
@@ -51531,7 +51971,7 @@ const FailureOrigin = /*#__PURE__*/ Reference("effect/ai/Toolkit/FailureOrigin",
 * @since 4.1.0
 */
 const PreliminaryBuffer = /*#__PURE__*/ Reference("effect/ai/Toolkit/PreliminaryBuffer", { defaultValue: () => "unbounded" });
-const failureCause = (error, origin) => annotate$2(fail$9(error), make$80(FailureOrigin, origin));
+const failureCause = (error, origin) => annotate$2(fail$9(error), make$82(FailureOrigin, origin));
 const failureOrigin = (error) => isSchemaError(error) ? "result" : "handler";
 const Proto$10 = {
 	.../*#__PURE__*/ Prototype({
@@ -51606,7 +52046,7 @@ const Proto$10 = {
 					const decodedParams = decodedParamsResult.success;
 					const capacity = yield* PreliminaryBuffer;
 					if (capacity !== "unbounded" && !(Number.isInteger(capacity) && capacity > 0)) return yield* die$2(`Tool "${name}": PreliminaryBuffer must be a positive integer, got ${capacity}`);
-					const queue = yield* make$72(capacity === "unbounded" ? void 0 : { capacity });
+					const queue = yield* make$74(capacity === "unbounded" ? void 0 : { capacity });
 					const context = {
 						toolCallId,
 						preliminary: (result) => asVoid(offer(queue, {
@@ -51637,7 +52077,7 @@ const Proto$10 = {
 							reason: error
 						}) : error;
 					};
-					return fromQueue(queue).pipe(tool.failureMode === "error" ? catchCause((cause) => failCause(map$6(fromReasons(cause.reasons.map((reason) => isFailReason(reason) ? reason.annotate(make$80(FailureOrigin, failureOrigin(reason.error)), { overwrite: true }) : reason)), normalizeError))) : catch_((error) => succeed$2({
+					return fromQueue(queue).pipe(tool.failureMode === "error" ? catchCause((cause) => failCause(map$6(fromReasons(cause.reasons.map((reason) => isFailReason(reason) ? reason.annotate(make$82(FailureOrigin, failureOrigin(reason.error)), { overwrite: true }) : reason)), normalizeError))) : catch_((error) => succeed$2({
 						result: normalizeError(error),
 						isFailure: true,
 						failureOrigin: failureOrigin(error),
@@ -51763,7 +52203,7 @@ var Proto$9 = class {
 		return this.toJSON();
 	}
 	toString() {
-		return format$2(this, { ignoreToString: true });
+		return format$4(this, { ignoreToString: true });
 	}
 };
 /**
@@ -52330,6 +52770,17 @@ const updateContentLength = (headers, body) => {
 };
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/http/Url.js
 /**
+* Parses and edits platform `URL` values.
+*
+* The HTTP modules use the standard `URL` object as their URL representation.
+* This module adds safe parsing and helpers that return updated copies when
+* changing credentials, host, path, protocol, query, or hash parts. Query
+* strings can also be read or updated through `UrlParams`.
+*
+* @stability unstable
+* @since 4.0.0
+*/
+/**
 * Error returned when constructing a `URL` fails.
 *
 * @stability unstable
@@ -52370,6 +52821,51 @@ const baseUrl = () => {
 		}
 	}
 };
+/**
+* Parses a URL string safely into a `URL` object, returning a `Result` type for
+* error handling.
+*
+* **Details**
+*
+* This function converts a string into a `URL` object, enabling safe URL
+* parsing with built-in error handling. If the string is invalid or fails to
+* parse, this function does not throw an error; instead, it wraps the error in
+* a `IllegalArgumentError` and returns it as the `Failure` value of an
+* `Result`. The `Success` value contains the successfully parsed `URL`.
+*
+* An optional `base` parameter can be provided to resolve relative URLs. If
+* specified, the function interprets the input `url` as relative to this
+* `base`. This is especially useful when dealing with URLs that might not be
+* fully qualified.
+*
+* **Example** (Parsing absolute and relative URLs)
+*
+* ```ts import.meta.vitest
+* import { Result } from "effect"
+* import { Url } from "effect/http"
+*
+* // Parse an absolute URL
+* //
+* //      ┌─── Result<URL, IllegalArgumentError>
+* //      ▼
+* const parsed = Url.fromString("https://example.com/path")
+*
+* Result.map(parsed, (url) => url.toString()) // => Result.succeed("https://example.com/path")
+*
+* // Parse a relative URL with a base
+* const relativeParsed = Url.fromString("/relative-path", "https://example.com")
+*
+* Result.map(relativeParsed, (url) => url.toString()) // => Result.succeed("https://example.com/relative-path")
+* ```
+*
+* @stability unstable
+* @category constructors
+* @since 4.0.0
+*/
+const fromString = (url, base) => try_$2({
+	try: () => new URL(url, base),
+	catch: () => new IllegalArgumentError(`Invalid URL: "${url}"${base !== void 0 ? ` with base "${base}"` : ""}`)
+});
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/http/HttpClientRequest.js
 const TypeId$16 = "~effect/http/HttpClientRequest";
 /**
@@ -58047,7 +58543,7 @@ function decodeValueUnchecked(layout, r) {
 			const value = r.zigzag();
 			const scale = r.zigzag();
 			if (scale > MAX_SAFE_BIGINT || -scale > MAX_SAFE_BIGINT) invalid("safe integer length", void 0, r.options);
-			return make$69(value, Number(scale));
+			return make$71(value, Number(scale));
 		}
 		case "json": {
 			const text = r.readUtf8(r.end - r.pos);
@@ -59113,7 +59609,7 @@ const RpcGroupProto = {
 		});
 	},
 	annotateRpcs(service, value) {
-		return this.annotateRpcsMerge(make$80(service, value));
+		return this.annotateRpcsMerge(make$82(service, value));
 	},
 	annotateMerge(context) {
 		return makeProto({
@@ -67816,7 +68312,7 @@ const makeHandlers = (core, _lifecycle, context) => {
 			const subscriptionMetadata = { "io.modelcontextprotocol/subscriptionId": requestId };
 			const resourceSubscriptions = new Set(honored.resourceSubscriptions);
 			const pending = yield* dropping(MAX_PENDING_SUBSCRIPTION_NOTIFICATIONS);
-			const overflowed = yield* make$77();
+			const overflowed = yield* make$79();
 			yield* gen(function* () {
 				while (true) {
 					const event = yield* take(events);
@@ -69406,7 +69902,7 @@ const makeNoSerialization = /*#__PURE__*/ fnUntraced(function* (group, options)
 	const services = yield* context();
 	const scope = get$10(services, Scope);
 	const trackFiber = runIn(forkUnsafe(scope, "parallel"));
-	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* make$70(concurrency);
+	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* make$72(concurrency);
 	const clients = /* @__PURE__ */ new Map();
 	let isShutdown = false;
 	const shutdownLatch = makeUnsafe$3(false);
@@ -69709,7 +70205,7 @@ const make$13 = /*#__PURE__*/ fnUntraced(function* (group, options) {
 	const { codecFor, disconnects, end, run, send, supportsAck, supportsSpanPropagation, supportsTransferables } = yield* Protocol$1;
 	const { encodeDefectUnsafe, encodeUnknownRequestExit } = defectCodecs(codecFor);
 	const services = yield* context();
-	const scope = yield* make$76();
+	const scope = yield* make$78();
 	const server = yield* makeNoSerialization(group, {
 		...options,
 		disableClientAcks: !supportsAck,
@@ -69985,7 +70481,7 @@ const makeProtocolWithHttpEffect = /*#__PURE__*/ fnUntraced(function* (options =
 	const { encodeDefectUnsafe } = defectCodecs(serialization.codecFor);
 	const includesFraming = serialization.includesFraming;
 	const isBinary = !serialization.contentType.includes("json");
-	const disconnects = yield* make$72();
+	const disconnects = yield* make$74();
 	let writeRequest;
 	let clientId = 0;
 	const clients = /* @__PURE__ */ new Map();
@@ -69998,7 +70494,7 @@ const makeProtocolWithHttpEffect = /*#__PURE__*/ fnUntraced(function* (options =
 		const requestHeaders = Object.entries(request.headers);
 		const data = yield* orDie$2(isBinary ? map$5(request.arrayBuffer, (buf) => new Uint8Array(buf)) : request.text);
 		const id = clientId++;
-		const queue = yield* make$72({ capacity: includesFraming && options.streamBufferSize !== "unbounded" ? options.streamBufferSize ?? 16 : void 0 });
+		const queue = yield* make$74({ capacity: includesFraming && options.streamBufferSize !== "unbounded" ? options.streamBufferSize ?? 16 : void 0 });
 		const parser = serialization.makeUnsafe();
 		const requestIds = [];
 		const offer$1 = (data) => typeof data === "string" ? offer(queue, encoder.encode(data)) : offer(queue, data);
@@ -70103,7 +70599,7 @@ const layerProtocolHttp = (options) => {
 const makeSocketProtocol = /*#__PURE__*/ gen(function* () {
 	const serialization = yield* RpcSerialization;
 	const { encodeDefectUnsafe } = defectCodecs(serialization.codecFor);
-	const disconnects = yield* make$72();
+	const disconnects = yield* make$74();
 	let clientId = 0;
 	const clients = /* @__PURE__ */ new Map();
 	const clientIds = /* @__PURE__ */ new Set();
@@ -70395,7 +70891,7 @@ const getMiddleware = (context) => {
 };
 const isMcpError = (error) => hasProperty(error, "code") && typeof error.code === "number" && hasProperty(error, "message") && typeof error.message === "string";
 const HandlerFailure = /*#__PURE__*/ Reference("effect/ai/McpServer/HandlerFailure", { defaultValue: () => false });
-const handlerFailure = /*#__PURE__*/ make$80(HandlerFailure, true);
+const handlerFailure = /*#__PURE__*/ make$82(HandlerFailure, true);
 const internalError = /*#__PURE__*/ new InternalError$1({ message: "Internal error" });
 const rejectWith = (error) => fail$6(new RequestRejected({
 	code: error.code,
@@ -70501,7 +70997,7 @@ var McpServer = class McpServer extends (/*#__PURE__*/ Service$1()("effect/ai/Mc
 		const resources = [];
 		const resourceTemplates = [];
 		const prompts = [];
-		const notificationsQueue = yield* make$72();
+		const notificationsQueue = yield* make$74();
 		const globalMiddleware = [];
 		const notificationDelivery = {
 			consumers: 0,
@@ -70513,7 +71009,7 @@ var McpServer = class McpServer extends (/*#__PURE__*/ Service$1()("effect/ai/Mc
 		const dispatcher = (yield* Scheduler).makeDispatcher();
 		const notifications = yield* makeNoSerialization$1(BroadcastServerNotificationRpcs, {
 			spanPrefix: "McpServer/Notifications",
-			onFromClient: (options) => make$77().pipe(flatMap$2((delivered) => withFiber((fiber) => {
+			onFromClient: (options) => make$79().pipe(flatMap$2((delivered) => withFiber((fiber) => {
 				const message = options.message;
 				if (message._tag !== "Request") return void_$1;
 				const notification = toInternalServerNotification(message);
@@ -70577,7 +71073,7 @@ var McpServer = class McpServer extends (/*#__PURE__*/ Service$1()("effect/ai/Mc
 		});
 		const service = McpServer.of({
 			notifications: notifications.client,
-			notifyElicitationComplete: ({ clientId, elicitationId }) => withoutSharedConsumer() ? void_$1 : make$77().pipe(flatMap$2((delivered) => offer(notificationsQueue, {
+			notifyElicitationComplete: ({ clientId, elicitationId }) => withoutSharedConsumer() ? void_$1 : make$79().pipe(flatMap$2((delivered) => offer(notificationsQueue, {
 				notification: ServerNotification.ElicitationComplete({ elicitationId }),
 				targetClientId: clientId,
 				delivered
@@ -71519,7 +72015,7 @@ const registerToolkit = /*#__PURE__*/ fnUntraced(function* (toolkit) {
 						isError: false,
 						content: []
 					})) : successResult(result.encodedResult);
-					return result.failureOrigin === "handler" ? map$5(encodeReturnedFailure(result.encodedResult), failureResult) : failCause$3(annotate$2(fail$9(result.result), make$80(FailureOrigin, result.failureOrigin ?? "result")));
+					return result.failureOrigin === "handler" ? map$5(encodeReturnedFailure(result.encodedResult), failureResult) : failCause$3(annotate$2(fail$9(result.result), make$82(FailureOrigin, result.failureOrigin ?? "result")));
 				}), catchCause$2(handleCause));
 			},
 			services
@@ -71832,7 +72328,7 @@ const parseTemplate$1 = (texts, values) => {
 	const endWord = () => {
 		if (word.length === 0) return;
 		const value = word.map(unwrap$1).join("");
-		words.push(word.length === 1 && isRedacted(word[0]) ? word[0] : word.some(isRedacted) ? make$65(value) : value);
+		words.push(word.length === 1 && isRedacted(word[0]) ? word[0] : word.some(isRedacted) ? make$67(value) : value);
 		word = [];
 		plain = true;
 		braceDepth = 0;
@@ -78527,7 +79023,7 @@ const layer$7 = /* @__PURE__ */ succeed$6(Stdio, /*#__PURE__*/ make$42({
 const layer$6 = /*#__PURE__*/ effect(Terminal, /*#__PURE__*/ (/* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQuit) {
 	const stdin = process.stdin;
 	const stdout = process.stdout;
-	const lines = yield* make$72();
+	const lines = yield* make$74();
 	let inputEnded = stdin.readableEnded;
 	let readlineActive = false;
 	const onStdinEnd = () => {
@@ -78589,7 +79085,7 @@ const layer$6 = /*#__PURE__*/ effect(Terminal, /*#__PURE__*/ (/* @__PURE__ */ fn
 		return queue;
 	});
 	const readInput = gen(function* () {
-		const queue = yield* make$72();
+		const queue = yield* make$74();
 		const handleKeypress = (s, k) => {
 			const userInput = {
 				input: fromUndefinedOr(s),
@@ -80205,7 +80701,7 @@ const String$4 = /*#__PURE__*/ makePrimitive("String", (value) => succeed$5(valu
 */
 const Choice = (choices) => {
 	const choiceMap = new Map(choices);
-	const validChoices = choices.map(([key]) => format$2(key)).join(" | ");
+	const validChoices = choices.map(([key]) => format$4(key)).join(" | ");
 	const primitive = makePrimitive("Choice", (value) => {
 		if (choiceMap.has(value)) return succeed$5(choiceMap.get(value));
 		return fail$6(validChoices);
@@ -80716,7 +81212,7 @@ const map$1 = /*#__PURE__*/ dual(2, (self, f) => flatMap(self, (a) => succeed(f(
 * @category constructors
 * @since 4.0.0
 */
-const Password = (options) => basePrompt(options, "password").pipe(map$1(make$65));
+const Password = (options) => basePrompt(options, "password").pipe(map$1(make$67));
 /**
 * Runs a prompt by reading terminal input and rendering prompt frames until the
 * prompt submits a value.
@@ -86604,7 +87100,7 @@ const runWith = (command, config) => {
 		}
 		const services = match$8(logLevel, {
 			onNone: () => empty$16(),
-			onSome: (level) => make$80(MinimumLogLevel, level)
+			onSome: (level) => make$82(MinimumLogLevel, level)
 		});
 		yield* provideContext$2(program, services);
 	}, catchFilter((error) => isCliError(error) && error._tag === "ShowHelp" ? succeed$10(error) : fail$11(error), (error) => andThen(showHelp(command, error, config.renderErrors !== false), fail$6(error))), catchFilter((error) => {
@@ -86994,32 +87490,25 @@ Struct({
 	expires_in: Finite,
 	refresh_token: NonEmptyString
 });
-const Origin = String$6.check(makeFilter((value) => {
-	if (!URL.canParse(value)) return false;
-	const url = new URL(value);
-	return contains(["http:", "https:"], url.protocol) && url.username === "" && url.password === "" && url.hash === "";
-}, { expected: "an HTTP(S) URL without credentials or a fragment" })).check(makeFilter((value) => {
-	if (!URL.canParse(value)) return false;
-	const url = new URL(value);
-	return url.pathname === "/" && url.search === "";
-}, { expected: "an HTTP(S) origin without a path or query" }));
-const SecureOrigin = Origin.check(makeFilter((value) => {
-	if (!URL.canParse(value)) return false;
-	const url = new URL(value);
-	return url.protocol === "https:" || contains([
-		"localhost",
-		"127.0.0.1",
-		"[::1]"
-	], url.hostname);
-}, { expected: "HTTPS outside loopback" }));
+const Origin = String$6.check(makeFilter((value) => exists(getSuccess(fromString(value)), (url) => contains$1(["http:", "https:"], url.protocol) && url.username === "" && url.password === "" && url.hash === ""), { expected: "an HTTP(S) URL without credentials or a fragment" })).check(makeFilter((value) => exists(getSuccess(fromString(value)), (url) => url.pathname === "/" && url.search === ""), { expected: "an HTTP(S) origin without a path or query" }));
+const SecureOrigin = Origin.check(makeFilter((value) => exists(getSuccess(fromString(value)), (url) => url.protocol === "https:" || contains$1([
+	"localhost",
+	"127.0.0.1",
+	"[::1]"
+], url.hostname)), { expected: "HTTPS outside loopback" }));
 const Port = String$6.check(isPattern(/^\d{1,5}$/u), makeFilter((value) => exists(parse$3(value), (port) => port >= 1 && port <= 65535), { expected: "a port between 1 and 65535" }));
 const AppVersion = String$6.check(isPattern(/^0\.1\.\d+$/u));
+const RUNTIME_PATH = "/api/runtime";
 const RuntimeConfig = Struct({
 	auth: optionalKey(String$6),
 	name: String$6,
 	traces: String$6,
 	version: AppVersion
 });
+const RPC_PATH = "/api/rpc";
+const MCP_PATH = "/mcp";
+const MCP_METADATA_PATH = "/.well-known/oauth-protected-resource/mcp";
+const MANIFEST_PATH = "/manifest.webmanifest";
 const Account = Struct({
 	...User.fields,
 	signOut: Boolean$5
@@ -87322,7 +87811,7 @@ const unknownToAttributeValue = (value) => {
 		case "bigint": return BigInt.asIntN(64, value) === value ? { intValue: String(value) } : { stringValue: String(value) };
 		case "number": return Number.isInteger(value) && value >= -int64Bound && value < int64Bound ? { intValue: Number.isSafeInteger(value) ? value : String(BigInt(value)) } : { doubleValue: value };
 		case "boolean": return { boolValue: value };
-		default: return { stringValue: format$2(value) };
+		default: return { stringValue: format$4(value) };
 	}
 };
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/observability/OtlpSerialization.js
@@ -87548,7 +88037,7 @@ const layer = /*#__PURE__*/ flow(/* @__PURE__ */ fnUntraced(function* (options)
 		if (!span.sampled) return;
 		exporter.push(makeOtlpSpan(span));
 	}
-	return make$78({
+	return make$80({
 		span(options) {
 			return new SpanImpl(options, exportFn);
 		},
@@ -87736,11 +88225,23 @@ function layerOtlp(serviceName, url, runtime, version) {
 	}));
 }
 // ../../packages/runtime/src/auth/lib/utils.ts
+const ISSUER_PATH = "/api/auth";
+const APPS_PATH = "/api/apps";
+const SESSION_PATH = "/auth/session";
+const VERIFY_PATH = "/auth/verify";
 const DEVELOPER = {
 	id: "github:0",
 	name: "dev"
 };
 const localAuth = map$2(option(String$5("AUTH_URL")), isNone);
+const adminIds = gen(function* () {
+	const listed = Array$1(String$6, "GITHUB_ADMINS");
+	if (yield* localAuth) return yield* withDefault$2(listed, ["0"]);
+	return yield* listed;
+});
+function isAdmin(admins, id) {
+	return contains$1(admins, replace("github:", "")(id));
+}
 function signInUrl(next) {
 	return `${new URL(next).origin}/auth/sign-in?${new URLSearchParams({ next })}`;
 }
@@ -87776,7 +88277,7 @@ const unavailable = text("The authorization service is temporarily unavailable;
 	status: 503
 });
 var Auth = class Auth extends Service$1()("@deslop/runtime/auth/service/Auth") {
-	static makeContext = (auth) => pipe$1(make$80(Auth, auth), add$1(RpcAuth, RpcAuth.of((effect, request) => pipe$1(auth.user(request.headers), flatMap$2((user) => raceFirst(provideService(effect, CurrentUser, user), pipe$1(delay(auth.user(request.headers), "5 minutes"), retry({ while: (error) => error.error === "temporarily_unavailable" }), forever)))))));
+	static makeContext = (auth) => pipe$1(make$82(Auth, auth), add$1(RpcAuth, RpcAuth.of((effect, request) => pipe$1(auth.user(request.headers), flatMap$2((user) => raceFirst(provideService(effect, CurrentUser, user), pipe$1(delay(auth.user(request.headers), "5 minutes"), retry({ while: (error) => error.error === "temporarily_unavailable" }), forever)))))));
 	static layer = effectContext(gen(function* () {
 		if (yield* localAuth) return Auth.makeContext(Auth.of({
 			access: developer,
@@ -87786,7 +88287,7 @@ var Auth = class Auth extends Service$1()("@deslop/runtime/auth/service/Auth") {
 		const canonical = new URL(yield* String$5("APP_URL")).origin;
 		const client = filterStatusOk(yield* HttpClient);
 		const access = fn("Auth.access")(function* (headers, audience) {
-			return yield* pipe$1(client.get(new URL("/auth/verify", issuer).href, {
+			return yield* pipe$1(client.get(new URL(VERIFY_PATH, issuer).href, {
 				headers: { authorization: headers["authorization"] ?? "" },
 				urlParams: { resource: audience }
 			}), flatMap$2(schemaBodyJson(User)), timeout("10 seconds"));
@@ -87795,7 +88296,7 @@ var Auth = class Auth extends Service$1()("@deslop/runtime/auth/service/Auth") {
 			access,
 			user: fn("Auth.user")(function* (headers) {
 				if (isSome(get$6(headers, "authorization"))) return yield* access(headers, canonical);
-				return yield* pipe$1(client.get(new URL("/auth/session", issuer).href, { headers: { cookie: headers["cookie"] ?? "" } }), flatMap$2(schemaBodyJson(User)), timeout("10 seconds"));
+				return yield* pipe$1(client.get(new URL(SESSION_PATH, issuer).href, { headers: { cookie: headers["cookie"] ?? "" } }), flatMap$2(schemaBodyJson(User)), timeout("10 seconds"));
 			}, rejected$1("Sign in first"))
 		}));
 	}));
@@ -87817,7 +88318,7 @@ function layerMcpAuth(resource) {
 		if (yield* localAuth) return (app) => provideService(app, CurrentUser, DEVELOPER);
 		return (app) => gen(function* () {
 			const headers = (yield* HttpServerRequest).headers;
-			const challenge = `Bearer resource_metadata="${new URL("/.well-known/oauth-protected-resource/mcp", resource).href}", scope="deslop"`;
+			const challenge = `Bearer resource_metadata="${new URL(MCP_METADATA_PATH, resource).href}", scope="deslop"`;
 			if (isNone(get$6(headers, "authorization"))) return text("OAuth authorization required; sign in with your MCP client", {
 				headers: { "www-authenticate": challenge },
 				status: 401
@@ -87890,7 +88391,7 @@ const guard = make$21((app) => gen(function* () {
 		const canonical = new URL(yield* String$5("APP_URL")).hostname;
 		if (!exists(liftThrowable(() => new URL(`http://${host}`))(), (url) => url.hostname === canonical || isSome(match$3(LOOPBACK)(url.hostname)))) return empty({ status: 403 });
 	}
-	if (exists(origin, (value) => !exists(liftThrowable(() => new URL(value).host)(), (originHost) => originHost === host)) && request.headers["sec-fetch-site"] !== "same-origin" && !contains(OTLP, headNonEmpty(split$1(request.url, "?")))) return empty({ status: 403 });
+	if (exists(origin, (value) => !exists(liftThrowable(() => new URL(value).host)(), (originHost) => originHost === host)) && request.headers["sec-fetch-site"] !== "same-origin" && !contains$1(OTLP, headNonEmpty(split$1(request.url, "?")))) return empty({ status: 403 });
 	return yield* app;
 }));
 function layerKeyValueStore(directory) {
@@ -87898,7 +88399,7 @@ function layerKeyValueStore(directory) {
 		const base = yield* KeyValueStore;
 		const fs = yield* FileSystem;
 		const path = yield* Path$1;
-		const writes = yield* make$70(1);
+		const writes = yield* make$72(1);
 		return make$43({
 			...omit$1(base, [
 				"set",
@@ -87953,7 +88454,7 @@ const layerRoutes = use((router) => gen(function* () {
 			})
 		});
 	});
-	yield* router.add("GET", "/api/runtime", gen(function* () {
+	yield* router.add("GET", RUNTIME_PATH, gen(function* () {
 		return yield* schemaJson(RuntimeConfig)({
 			...match$8(issuer, {
 				onNone: () => ({}),
@@ -87981,7 +88482,7 @@ const layerAnnounce = effectDiscard(gen(function* () {
 	yield* match$8(yield* option(String$5("AUTH_URL")), {
 		onNone: () => void_$1,
 		onSome: fnUntraced(function* (issuer) {
-			yield* pipe$1(post(new URL("/api/apps", issuer).href), bodyJsonUnsafe({ origin }), client.execute, delay("2 seconds"), retry({
+			yield* pipe$1(post(new URL(APPS_PATH, issuer).href), bodyJsonUnsafe({ origin }), client.execute, delay("2 seconds"), retry({
 				schedule: spaced("1 minute"),
 				times: 60
 			}), ignore$1({
@@ -88002,7 +88503,7 @@ const layerWeb = unwrap$7(gen(function* () {
 	const client = fileURLToPath(new URL("./client", import.meta.url));
 	if (!(yield* (yield* FileSystem).exists((yield* Path$1).join(client, "index.html")))) return empty$12;
 	const name = capitalize(yield* appName);
-	return mergeAll$1(add("GET", "/manifest.webmanifest", succeed$5(jsonUnsafe({
+	return mergeAll$1(add("GET", MANIFEST_PATH, succeed$5(jsonUnsafe({
 		background_color: "#0a0a0a",
 		display: "standalone",
 		icons: [{
@@ -88031,29 +88532,38 @@ const layerWeb = unwrap$7(gen(function* () {
 		spa: true
 	}));
 }));
-function layerMcp$1(options) {
+function layerRpc(options) {
+	return pipe$1(layerHttp$1({
+		disableTracing: options.disableTracing,
+		group: options.group,
+		path: RPC_PATH,
+		protocol: "websocket"
+	}), provide$2(options.handlers));
+}
+function layerMcp(options) {
 	return unwrap$7(gen(function* () {
 		const metadata = yield* packageMetadata;
 		const canonical = yield* String$5("APP_URL");
 		const issuer = yield* option(String$5("AUTH_URL"));
-		const resource = new URL("/mcp", canonical).href;
+		const resource = new URL(MCP_PATH, canonical).href;
 		const endpoint = pipe$1(layerHttp({
-			...options,
 			allowSessionTermination: true,
 			icons: [{ src: new URL("/icon", canonical).href }],
+			instructions: options.instructions,
 			name: yield* appName,
-			path: "/mcp",
+			path: MCP_PATH,
 			protocols: [
 				v2026_07_28,
 				v2025_11_25,
 				v2025_06_18
 			],
+			registrations: pipe$1(toolkit(options.tools), provide$2(options.handlers)),
 			version: metadata.version
 		}), provide$2(layerMcpAuth(resource)));
 		return match$8(issuer, {
 			onNone: () => endpoint,
-			onSome: (origin) => mergeAll$1(endpoint, add("GET", "/.well-known/oauth-protected-resource/mcp", succeed$5(jsonUnsafe({
-				authorization_servers: [new URL("/api/auth", origin).href],
+			onSome: (origin) => mergeAll$1(endpoint, add("GET", MCP_METADATA_PATH, succeed$5(jsonUnsafe({
+				authorization_servers: [new URL(ISSUER_PATH, origin).href],
 				bearer_methods_supported: ["header"],
 				resource,
 				scopes_supported: ["deslop"]
@@ -88183,7 +88693,7 @@ const update = fnUntraced(function* (name) {
 	yield* activate(name, path.join(directory, "node_modules", "@deslop", name));
 	yield* restart(name);
 	const kept = [latest, ...toArray$1(map$11(previous, (link) => path.basename(path.resolve(link, "../../.."))))];
-	yield* forEach$1(filter$5(yield* fs.readDirectory(path.join(root, "releases")), (entry) => !contains(kept, entry)), (entry) => fs.remove(path.join(root, "releases", entry), { recursive: true }), { concurrency: 1 });
+	yield* forEach$1(difference(yield* fs.readDirectory(path.join(root, "releases")), kept), (entry) => fs.remove(path.join(root, "releases", entry), { recursive: true }), { concurrency: 1 });
 	return `Updated ${name} from ${running} to ${latest}\n`;
 });
 // ../../packages/runtime/src/cli.ts
@@ -88283,152 +88793,6 @@ function runApp(app) {
 	});
 	runMain(pipe$1(program, scoped, provide(layerPlatform), provideService(LogToStderr, true)));
 }
-// src/services/connections/schema.ts
-var UpstreamError = class extends TaggedError()("UpstreamError", { cause: Defect() }) {};
-const ServerId = String$6.check(isPattern(/^[a-z0-9][a-z0-9_-]{0,23}$/u));
-const ServerUrl = NonEmptyString.check(isMaxLength(2048), makeFilter((value) => {
-	if (!URL.canParse(value)) return false;
-	const url = new URL(value);
-	return url.protocol === "https:" && url.username === "" && url.password === "" && url.hash === "";
-}, { expected: "a public HTTPS URL without credentials or a fragment" }));
-const AddServer = Struct({ url: ServerUrl });
-const ServerParams = Struct({ id: ServerId });
-const Metadata = Struct({
-	authorization_endpoint: NonEmptyString,
-	authorization_response_iss_parameter_supported: optionalKey(Boolean$5),
-	client_id_metadata_document_supported: optionalKey(Boolean$5),
-	issuer: NonEmptyString,
-	registration_endpoint: optionalKey(NonEmptyString),
-	token_endpoint: NonEmptyString
-});
-const Registration = Struct({ client_id: NonEmptyString });
-const Token = Struct({
-	access_token: NonEmptyString,
-	expires_in: optionalKey(Finite.check(isGreaterThan(0))),
-	refresh_token: optionalKey(NonEmptyString),
-	token_type: String$6.check(isPattern(/^Bearer$/iu))
-});
-const OAuth = Struct({
-	client: TaggedUnion({
-		Document: {},
-		Registered: { clientId: NonEmptyString }
-	}),
-	metadata: Metadata,
-	scope: String$6
-});
-const Link = TaggedUnion({
-	Authorized: {
-		expiresAt: Finite,
-		token: Token
-	},
-	Connected: {},
-	Disconnected: {}
-});
-const ServerIcon = Struct({
-	src: String$6,
-	theme: optionalKey(Literals(["light", "dark"]))
-});
-const ConnectionStore = Record$1(String$6, Struct({
-	error: optionalKey(String$6),
-	generation: NonEmptyString,
-	icons: optionalKey(ArraySchema(ServerIcon)),
-	id: ServerId,
-	instructions: optionalKey(String$6),
-	link: Link,
-	mode: Literals(["oauth", "public"]),
-	name: NonEmptyString,
-	oauth: optionalKey(OAuth),
-	tools: ArraySchema(String$6),
-	url: ServerUrl
-}));
-const ConnectionInfo = Struct({
-	error: optionalKey(String$6),
-	icons: ArraySchema(ServerIcon),
-	id: ServerId,
-	name: NonEmptyString,
-	status: Literals([
-		"Connected",
-		"Not connected",
-		"Expired"
-	]),
-	tools: ArraySchema(String$6),
-	url: ServerUrl
-});
-TaggedUnion({
-	Discovered: {
-		icons: ArraySchema(ServerIcon),
-		instructions: optionalKey(String$6),
-		tools: ArraySchema(String$6)
-	},
-	Failed: { error: String$6 }
-});
-const Callback = Struct({
-	code: optionalKey(NonEmptyString),
-	error: optionalKey(String$6),
-	iss: optionalKey(NonEmptyString),
-	state: NonEmptyString
-});
-// src/services/connections/lib/utils.ts
-const gatewayUrl = String$5("APP_URL");
-function clientMetadata(url) {
-	return {
-		client_id: `${url}/oauth/client.json`,
-		client_name: "Deslop MCP gateway",
-		grant_types: ["authorization_code", "refresh_token"],
-		redirect_uris: [`${url}/oauth/callback`],
-		response_types: ["code"],
-		token_endpoint_auth_method: "none"
-	};
-}
-function connectionStatus(connection, now) {
-	return valueTags(connection.link, {
-		Authorized: (link) => match$1(link.expiresAt <= now && link.token.refresh_token === void 0, {
-			onFalse: () => "Connected",
-			onTrue: () => "Expired"
-		}),
-		Connected: () => "Connected",
-		Disconnected: () => "Not connected"
-	});
-}
-function connectionInfo(connection, now) {
-	return {
-		...match$8(fromUndefinedOr(connection.error), {
-			onNone: () => ({}),
-			onSome: (error) => ({ error })
-		}),
-		...pick$1(connection, [
-			"id",
-			"name",
-			"tools",
-			"url"
-		]),
-		icons: connection.icons ?? [],
-		status: connectionStatus(connection, now)
-	};
-}
-function serverIcons(implementation) {
-	return pipe$1(implementation?.icons ?? [], filter$5((icon) => isSome(match$3(/^(?:https:|data:image\/)/u)(icon.src)) && icon.src.length <= 32768), take$3(2), map$8((icon) => ({
-		src: icon.src,
-		...match$8(fromUndefinedOr(icon.theme), {
-			onNone: () => ({}),
-			onSome: (theme) => ({ theme })
-		})
-	})));
-}
-function summary(connection) {
-	return pipe$1(fromUndefinedOr(connection.instructions), flatMap$7((text) => fromUndefinedOr(split$1(text, /(?<=\.)\s/u)[0])), map$11(slice(0, 160)), getOrElse(() => connection.name));
-}
-function describe(cause) {
-	if (is$2(AuthError)(cause)) return cause.message;
-	if (isTagged(cause, "TimeoutError")) return "It did not answer in time";
-	if (isHttpClientError(cause) && cause.reason._tag === "StatusCodeError") return `It answered HTTP ${cause.reason.response.status}`;
-	if (is$2(UpstreamError)(cause)) return describe(cause.cause);
-	if (hasProperty(cause, "message") && isString$1(cause.message)) return slice(0, 300)(cause.message);
-	return "It failed for an unknown reason";
-}
-function serverName(url) {
-	return pipe$1(new URL(url).hostname, replace(/^(?:api|app|mcp)\./u, ""), split$1("."), headNonEmpty, replaceAll(/[^a-z0-9_-]/giu, "-"), replaceAll(/^[^a-z0-9]+|[^a-z0-9]+$/giu, ""), slice(0, 16), toLowerCase);
-}
 // ../../node_modules/.pnpm/@modelcontextprotocol+client@2.4.0/node_modules/@modelcontextprotocol/client/dist/chunk-DYPzFuB5.mjs
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -114995,6 +115359,169 @@ var StreamableHTTPClientTransport = class {
 		});
 	}
 };
+// src/services/connections/schema.ts
+var UpstreamError = class extends TaggedError()("UpstreamError", { cause: Defect() }) {};
+const ServerId = String$6.check(isPattern(/^[a-z0-9][a-z0-9_-]{0,23}$/u));
+const ServerUrl = NonEmptyString.check(isMaxLength(2048), makeFilter((value) => exists(getSuccess(fromString(value)), (url) => url.protocol === "https:" && url.username === "" && url.password === "" && url.hash === ""), { expected: "a public HTTPS URL without credentials or a fragment" }));
+const AddServer = Struct({ url: ServerUrl });
+const ServerParams = Struct({ id: ServerId });
+const Metadata = Struct({
+	authorization_endpoint: NonEmptyString,
+	authorization_response_iss_parameter_supported: optionalKey(Boolean$5),
+	client_id_metadata_document_supported: optionalKey(Boolean$5),
+	issuer: NonEmptyString,
+	registration_endpoint: optionalKey(NonEmptyString),
+	token_endpoint: NonEmptyString
+});
+const Registration = Struct({ client_id: NonEmptyString });
+const Token = Struct({
+	access_token: NonEmptyString,
+	expires_in: optionalKey(Finite.check(isGreaterThan(0))),
+	refresh_token: optionalKey(NonEmptyString),
+	token_type: String$6.check(isPattern(/^Bearer$/iu))
+});
+const OAuth = Struct({
+	client: TaggedUnion({
+		Document: {},
+		Registered: { clientId: NonEmptyString }
+	}),
+	metadata: Metadata,
+	scope: String$6
+});
+const Link = TaggedUnion({
+	Authorized: {
+		expiresAt: Finite,
+		token: Token
+	},
+	Connected: {},
+	Disconnected: {}
+});
+const ServerIcon = Struct({
+	src: String$6,
+	theme: optionalKey(Literals(["light", "dark"]))
+});
+const ConnectionStore = Record$1(String$6, Struct({
+	error: optionalKey(String$6),
+	generation: NonEmptyString,
+	icons: optionalKey(ArraySchema(ServerIcon)),
+	id: ServerId,
+	instructions: optionalKey(String$6),
+	link: Link,
+	mode: Literals(["oauth", "public"]),
+	name: NonEmptyString,
+	oauth: optionalKey(OAuth),
+	tools: ArraySchema(String$6),
+	url: ServerUrl
+}));
+const ConnectionInfo = Struct({
+	error: optionalKey(String$6),
+	icons: ArraySchema(ServerIcon),
+	id: ServerId,
+	name: NonEmptyString,
+	status: Literals([
+		"Connected",
+		"Not connected",
+		"Expired"
+	]),
+	tools: ArraySchema(String$6),
+	url: ServerUrl
+});
+TaggedUnion({
+	Discovered: {
+		icons: ArraySchema(ServerIcon),
+		instructions: optionalKey(String$6),
+		tools: ArraySchema(String$6)
+	},
+	Failed: { error: String$6 }
+});
+const Callback = Struct({
+	code: optionalKey(NonEmptyString),
+	error: optionalKey(String$6),
+	iss: optionalKey(NonEmptyString),
+	state: NonEmptyString
+});
+// src/services/connections/lib/utils.ts
+const gatewayUrl = String$5("APP_URL");
+function mcpClient() {
+	return new Client({
+		name: "Deslop MCP gateway",
+		version: "0.1.0"
+	}, { versionNegotiation: { mode: "auto" } });
+}
+function endSession(transport, client, fail, kind) {
+	return pipe$1(tryPromise({
+		catch: fail,
+		try: () => transport.terminateSession()
+	}), timeout("3 seconds"), ignore$1({
+		log: "Warn",
+		message: `Cannot terminate the ${kind} MCP session`
+	}), andThen(tryPromise({
+		catch: fail,
+		try: () => client.close()
+	})), ignore$1({
+		log: "Warn",
+		message: `Cannot close the ${kind} MCP client`
+	}));
+}
+function clientMetadata(url) {
+	return {
+		client_id: `${url}/oauth/client.json`,
+		client_name: "Deslop MCP gateway",
+		grant_types: ["authorization_code", "refresh_token"],
+		redirect_uris: [`${url}/oauth/callback`],
+		response_types: ["code"],
+		token_endpoint_auth_method: "none"
+	};
+}
+function connectionStatus(connection, now) {
+	return valueTags(connection.link, {
+		Authorized: (link) => match$1(link.expiresAt <= now && link.token.refresh_token === void 0, {
+			onFalse: () => "Connected",
+			onTrue: () => "Expired"
+		}),
+		Connected: () => "Connected",
+		Disconnected: () => "Not connected"
+	});
+}
+function connectionInfo(connection, now) {
+	return {
+		...match$8(fromUndefinedOr(connection.error), {
+			onNone: () => ({}),
+			onSome: (error) => ({ error })
+		}),
+		...pick$1(connection, [
+			"id",
+			"name",
+			"tools",
+			"url"
+		]),
+		icons: connection.icons ?? [],
+		status: connectionStatus(connection, now)
+	};
+}
+function serverIcons(implementation) {
+	return pipe$1(implementation?.icons ?? [], filter$5((icon) => isSome(match$3(/^(?:https:|data:image\/)/u)(icon.src)) && icon.src.length <= 32768), take$3(2), map$8((icon) => ({
+		src: icon.src,
+		...match$8(fromUndefinedOr(icon.theme), {
+			onNone: () => ({}),
+			onSome: (theme) => ({ theme })
+		})
+	})));
+}
+function summary(connection) {
+	return pipe$1(fromUndefinedOr(connection.instructions), flatMap$7((text) => fromUndefinedOr(split$1(text, /(?<=\.)\s/u)[0])), map$11(slice(0, 160)), getOrElse(() => connection.name));
+}
+function describe(cause) {
+	if (is$2(AuthError)(cause)) return cause.message;
+	if (isTagged(cause, "TimeoutError")) return "It did not answer in time";
+	if (isHttpClientError(cause) && cause.reason._tag === "StatusCodeError") return `It answered HTTP ${cause.reason.response.status}`;
+	if (is$2(UpstreamError)(cause)) return describe(cause.cause);
+	if (hasProperty(cause, "message") && isString$1(cause.message)) return slice(0, 300)(cause.message);
+	return "It failed for an unknown reason";
+}
+function serverName(url) {
+	return pipe$1(new URL(url).hostname, replace(/^(?:api|app|mcp)\./u, ""), split$1("."), headNonEmpty, replaceAll(/[^a-z0-9_-]/giu, "-"), replaceAll(/^[^a-z0-9]+|[^a-z0-9]+$/giu, ""), slice(0, 16), toLowerCase);
+}
 // src/services/connections/service.ts
 function failed(message) {
 	return mapError$2((cause) => {
@@ -115020,21 +115547,17 @@ var Connections = class Connections extends Service$1()("@deslop/gateway/service
 		const clientInfo = clientMetadata(origin);
 		const store = toSchemaStore(yield* KeyValueStore, ConnectionStore);
 		const state = yield* make$41(getOrElse(yield* store.get("servers"), () => ({})));
-		const listed = Array$1(String$6, "GITHUB_ADMINS");
-		const admins = yield* match$1(yield* localAuth, {
-			onFalse: () => listed,
-			onTrue: () => succeed$5(["0"])
-		});
+		const admins = yield* adminIds;
 		const traffic = yield* sliding(64);
 		const admin = fnUntraced(function* (user) {
-			if (!contains(admins, replace("github:", "")(user.id))) return yield* AuthError.make({
+			if (!isAdmin(admins, user.id)) return yield* AuthError.make({
 				error: "access_denied",
 				message: "Only an admin can manage MCP servers"
 			});
 		});
 		const locks = yield* make$59({
 			capacity: 256,
-			lookup: () => make$70(1)
+			lookup: () => make$72(1)
 		});
 		const client = filterStatusOk(yield* HttpClient);
 		const fetch = yield* Fetch;
@@ -115099,7 +115622,7 @@ var Connections = class Connections extends Service$1()("@deslop/gateway/service
 				}),
 				resource: connection.url
 			}), (request) => client.execute(request), flatMap$2(schemaBodyJson(Token)), tapErrorTag("HttpClientError", (cause) => {
-				if (cause.reason._tag !== "StatusCodeError" || !contains([400, 401], cause.reason.response.status)) return void_$1;
+				if (cause.reason._tag !== "StatusCodeError" || !contains$1([400, 401], cause.reason.response.status)) return void_$1;
 				return ended();
 			}), timeout("20 seconds"));
 			const now = yield* currentTimeMillis;
@@ -115194,16 +115717,7 @@ var Connections = class Connections extends Service$1()("@deslop/gateway/service
 					fetch,
 					requestInit: { redirect: "error" }
 				});
-				const anonymous = yield* acquireRelease(sync(() => new Client({
-					name: "Deslop MCP gateway",
-					version: "0.1.0"
-				}, { versionNegotiation: { mode: "auto" } })), (acquired) => pipe$1(tryPromise({
-					catch: (cause) => UpstreamError.make({ cause }),
-					try: () => transport.terminateSession()
-				}), timeout("3 seconds"), ignore$1({
-					log: "Warn",
-					message: "Cannot terminate the anonymous MCP session"
-				}), andThen(promise(() => acquired.close()))));
+				const anonymous = yield* acquireRelease(sync(mcpClient), (acquired) => endSession(transport, acquired, (cause) => UpstreamError.make({ cause }), "anonymous"));
 				yield* tryPromise({
 					catch: (cause) => UpstreamError.make({ cause }),
 					try: (signal) => anonymous.connect(transport, { signal })
@@ -115353,7 +115867,7 @@ var Connections = class Connections extends Service$1()("@deslop/gateway/service
 					if (params.error !== void 0 || params.code === void 0) return yield* AuthError.make({ message: `The provider declined the connection (${params.error ?? "no code"})` });
 					if (!valueTags(oauth.client, {
 						Document: () => params.iss === oauth.metadata.issuer && isNone(route),
-						Registered: () => contains$1(route, connection.id) && (params.iss === void 0 || params.iss === oauth.metadata.issuer)
+						Registered: () => contains$2(route, connection.id) && (params.iss === void 0 || params.iss === oauth.metadata.issuer)
 					})) return yield* AuthError.make({ message: "The answer came from another authorization server" });
 					yield* exchange(connection, oauth, {
 						code: params.code,
@@ -115442,7 +115956,7 @@ var Gateway = class Gateway extends Service$1()("@deslop/gateway/services/gatewa
 			const now = yield* currentTimeMillis;
 			return exists(yield* option$1(connections.get(id)), (found) => found.generation === generation && connectionStatus(found, now) === "Connected");
 		});
-		const refreshes = yield* make$70(1);
+		const refreshes = yield* make$72(1);
 		const scope$2 = yield* scope;
 		const remove = fnUntraced(function* (name) {
 			yield* update$1(installed, remove$7(name));
@@ -115492,22 +116006,7 @@ var Gateway = class Gateway extends Service$1()("@deslop/gateway/services/gatewa
 					fetch,
 					requestInit: { redirect: "error" }
 				});
-				const client = yield* acquireRelease(sync(() => new Client({
-					name: "Deslop MCP gateway",
-					version: "0.1.0"
-				}, { versionNegotiation: { mode: "auto" } })), (acquired) => pipe$1(tryPromise({
-					catch: rejected(server),
-					try: () => transport.terminateSession()
-				}), timeout("3 seconds"), ignore$1({
-					log: "Warn",
-					message: "Cannot terminate the upstream MCP session"
-				}), andThen(tryPromise({
-					catch: rejected(server),
-					try: () => acquired.close()
-				})), ignore$1({
-					log: "Warn",
-					message: "Cannot close the upstream MCP client"
-				})));
+				const client = yield* acquireRelease(sync(mcpClient), (acquired) => endSession(transport, acquired, rejected(server), "upstream"));
 				yield* tryPromise({
 					catch: rejected(server),
 					try: (signal) => client.connect(transport, { signal })
@@ -115555,7 +116054,7 @@ var Gateway = class Gateway extends Service$1()("@deslop/gateway/services/gatewa
 				"name",
 				"mode"
 			]);
-			const names = make$73();
+			const names = make$75();
 			for (const tool of found.tools) {
 				const upstreamName = tool.name;
 				const name = yield* namespaced(`${server.id}__${tool.name}`);
@@ -115631,13 +116130,16 @@ const COOKIE = {
 	sameSite: "lax",
 	secure: true
 };
+function returning(step) {
+	return pipe$1(step, orElseSucceed(() => redirect("/")), map$5(setHeader("cache-control", "no-store")));
+}
 const HttpHandlers = use((router) => gen(function* () {
 	const auth = yield* Auth;
 	const connections = yield* Connections;
 	const gateway = yield* Gateway;
 	const url = yield* gatewayUrl;
 	yield* router.add("GET", "/oauth/client.json", jsonUnsafe(clientMetadata(url)));
-	yield* router.add("GET", "/oauth/connect", pipe$1(gen(function* () {
+	yield* router.add("GET", "/oauth/connect", returning(gen(function* () {
 		const request = yield* HttpServerRequest;
 		const params = yield* schemaSearchParams(ServerParams);
 		return yield* match$8(yield* option$1(auth.user(request.headers)), {
@@ -115650,7 +116152,7 @@ const HttpHandlers = use((router) => gen(function* () {
 				})
 			}))
 		});
-	}), orElseSucceed(() => redirect("/")), map$5(setHeader("cache-control", "no-store"))));
+	})));
 	const callback = fnUntraced(function* (route) {
 		const request = yield* HttpServerRequest;
 		const user = yield* auth.user(request.headers);
@@ -115659,7 +116161,7 @@ const HttpHandlers = use((router) => gen(function* () {
 		yield* connections.complete(params, route, user);
 		yield* gateway.connected;
 		return expireCookieUnsafe(redirect("/"), `__Host-mcp-${params.state}`, COOKIE);
-	}, orElseSucceed(() => redirect("/")), map$5(setHeader("cache-control", "no-store")));
+	}, returning);
 	yield* router.add("GET", "/oauth/callback", callback(none()));
 	yield* router.add("GET", "/oauth/callback/:id", flatMap$2(params, (params) => callback(fromUndefinedOr(params["id"]))));
 }));
@@ -142744,985 +143246,57 @@ __reExport(Undici_exports, /* @__PURE__ */ __toESM$1(require_undici(), 1));
 * @since 4.0.0
 */
 var Undici_default = import_undici.default;
+// ../../packages/runtime/src/net.ts
+const BLOCKED = map$8([
+	"0.0.0.0/8",
+	"100.64.0.0/10",
+	"192.0.0.0/24",
+	"192.0.2.0/24",
+	"192.31.196.0/24",
+	"192.52.193.0/24",
+	"192.88.99.0/24",
+	"192.175.48.0/24",
+	"198.18.0.0/15",
+	"198.51.100.0/24",
+	"203.0.113.0/24",
+	"240.0.0.0/4",
+	"100::/64",
+	"2001::/23",
+	"2001:db8::/32",
+	"2002::/16",
+	"2620:4f:8000::/48",
+	"3fff::/20",
+	"5f00::/16",
+	"64:ff9b::/96",
+	"64:ff9b:1::/48",
+	"fec0::/10"
+], (source) => getOrThrow(fromString$1(source)));
+function isHome(ip) {
+	if (isIpv4Address(ip)) return isPrivate(ip);
+	return isUniqueLocal(ip);
+}
+function isPublicIp(ip) {
+	return !isUnspecified(ip) && !isLoopback(ip) && !isLinkLocal(ip) && !isMulticast(ip) && !(isIpv4Address(ip) && isBroadcast(ip)) && !isHome(ip) && !some(BLOCKED, (network) => contains(network, ip));
+}
+function isIpAddress(address) {
+	return isSuccess$1(ipFromString(address));
+}
+function isPublicAddress(address) {
+	return exists(getSuccess(ipFromString(address)), (ip) => {
+		if (isIpv6Address(ip)) return isPublicIp(getOrElse(fromIpv4Mapped(ip), () => ip));
+		return isPublicIp(ip);
+	});
+}
 // src/services/network/service.ts
-var import_ipaddr = /* @__PURE__ */ __toESM$1((/* @__PURE__ */ __commonJSMin$1(((exports, module, this$1) => {
-	(function(root) {
-		"use strict";
-		const ipv4Part = "(0?\\d+|0x[a-f0-9]+)";
-		const ipv4Regexes = {
-			fourOctet: new RegExp(`^${ipv4Part}\\.${ipv4Part}\\.${ipv4Part}\\.${ipv4Part}$`, "i"),
-			threeOctet: new RegExp(`^${ipv4Part}\\.${ipv4Part}\\.${ipv4Part}$`, "i"),
-			twoOctet: new RegExp(`^${ipv4Part}\\.${ipv4Part}$`, "i"),
-			longValue: new RegExp(`^${ipv4Part}$`, "i")
-		};
-		const octalRegex = new RegExp(`^0[0-7]+$`, "i");
-		const hexRegex = new RegExp(`^0x[a-f0-9]+$`, "i");
-		const zoneIndex = "%[0-9a-z]{1,}";
-		const ipv6Part = "(?:[0-9a-f]+::?)+";
-		const ipv6Regexes = {
-			zoneIndex: new RegExp(zoneIndex, "i"),
-			"native": new RegExp(`^(::)?(${ipv6Part})?([0-9a-f]+)?(::)?(${zoneIndex})?$`, "i"),
-			deprecatedTransitional: new RegExp(`^(?:::)(${ipv4Part}\\.${ipv4Part}\\.${ipv4Part}\\.${ipv4Part}(${zoneIndex})?)$`, "i"),
-			transitional: new RegExp(`^((?:${ipv6Part})|(?:::)(?:${ipv6Part})?)${ipv4Part}\\.${ipv4Part}\\.${ipv4Part}\\.${ipv4Part}(${zoneIndex})?$`, "i")
-		};
-		function expandIPv6(string, parts) {
-			if (string.indexOf("::") !== string.lastIndexOf("::")) return null;
-			let colonCount = 0;
-			let lastColon = -1;
-			let zoneId = (string.match(ipv6Regexes.zoneIndex) || [])[0];
-			let replacement, replacementCount;
-			if (zoneId) {
-				zoneId = zoneId.substring(1);
-				string = string.replace(/%.+$/, "");
-			}
-			while ((lastColon = string.indexOf(":", lastColon + 1)) >= 0) colonCount++;
-			if (string.substr(0, 2) === "::") colonCount--;
-			if (string.substr(-2, 2) === "::") colonCount--;
-			if (colonCount >= parts) return null;
-			replacementCount = parts - colonCount;
-			replacement = ":";
-			while (replacementCount--) replacement += "0:";
-			string = string.replace("::", replacement);
-			if (string[0] === ":") string = string.slice(1);
-			if (string[string.length - 1] === ":") string = string.slice(0, -1);
-			parts = (function() {
-				const ref = string.split(":");
-				const results = [];
-				for (let i = 0; i < ref.length; i++) results.push(ref[i].length > 4 ? NaN : parseInt(ref[i], 16));
-				return results;
-			})();
-			return {
-				parts,
-				zoneId
-			};
-		}
-		function matchCIDR(first, second, partSize, cidrBits) {
-			if (first.length !== second.length) throw new Error("ipaddr: cannot match CIDR for objects with different lengths");
-			let part = 0;
-			let shift;
-			while (cidrBits > 0) {
-				shift = partSize - cidrBits;
-				if (shift < 0) shift = 0;
-				if (first[part] >> shift !== second[part] >> shift) return false;
-				cidrBits -= partSize;
-				part += 1;
-			}
-			return true;
-		}
-		function parseIntAuto(string) {
-			if (hexRegex.test(string)) return parseInt(string, 16);
-			if (string[0] === "0" && !isNaN(parseInt(string[1], 10))) {
-				if (octalRegex.test(string)) return parseInt(string, 8);
-				throw new Error(`ipaddr: cannot parse ${string} as octal`);
-			}
-			return parseInt(string, 10);
-		}
-		function padPart(part, length) {
-			while (part.length < length) part = `0${part}`;
-			return part;
-		}
-		const ipaddr = {};
-		ipaddr.IPv4 = (function() {
-			function IPv4(octets) {
-				if (octets.length !== 4) throw new Error("ipaddr: ipv4 octet count should be 4");
-				let i, octet;
-				for (i = 0; i < octets.length; i++) {
-					octet = octets[i];
-					if (!(0 <= octet && octet <= 255)) throw new Error("ipaddr: ipv4 octet should fit in 8 bits");
-				}
-				this.octets = octets;
-			}
-			IPv4.prototype.SpecialRanges = {
-				unspecified: [[new IPv4([
-					0,
-					0,
-					0,
-					0
-				]), 8]],
-				broadcast: [[new IPv4([
-					255,
-					255,
-					255,
-					255
-				]), 32]],
-				multicast: [[new IPv4([
-					224,
-					0,
-					0,
-					0
-				]), 4]],
-				linkLocal: [[new IPv4([
-					169,
-					254,
-					0,
-					0
-				]), 16]],
-				loopback: [[new IPv4([
-					127,
-					0,
-					0,
-					0
-				]), 8]],
-				carrierGradeNat: [[new IPv4([
-					100,
-					64,
-					0,
-					0
-				]), 10]],
-				"private": [
-					[new IPv4([
-						10,
-						0,
-						0,
-						0
-					]), 8],
-					[new IPv4([
-						172,
-						16,
-						0,
-						0
-					]), 12],
-					[new IPv4([
-						192,
-						168,
-						0,
-						0
-					]), 16]
-				],
-				reserved: [
-					[new IPv4([
-						192,
-						0,
-						0,
-						0
-					]), 24],
-					[new IPv4([
-						192,
-						0,
-						2,
-						0
-					]), 24],
-					[new IPv4([
-						192,
-						88,
-						99,
-						0
-					]), 24],
-					[new IPv4([
-						198,
-						18,
-						0,
-						0
-					]), 15],
-					[new IPv4([
-						198,
-						51,
-						100,
-						0
-					]), 24],
-					[new IPv4([
-						203,
-						0,
-						113,
-						0
-					]), 24],
-					[new IPv4([
-						240,
-						0,
-						0,
-						0
-					]), 4]
-				],
-				as112: [[new IPv4([
-					192,
-					175,
-					48,
-					0
-				]), 24], [new IPv4([
-					192,
-					31,
-					196,
-					0
-				]), 24]],
-				amt: [[new IPv4([
-					192,
-					52,
-					193,
-					0
-				]), 24]]
-			};
-			IPv4.prototype.kind = function() {
-				return "ipv4";
-			};
-			IPv4.prototype.match = function(other, cidrRange) {
-				let ref;
-				if (cidrRange === void 0) {
-					ref = other;
-					other = ref[0];
-					cidrRange = ref[1];
-				}
-				if (other.kind() !== "ipv4") throw new Error("ipaddr: cannot match ipv4 address with non-ipv4 one");
-				return matchCIDR(this.octets, other.octets, 8, cidrRange);
-			};
-			IPv4.prototype.prefixLengthFromSubnetMask = function() {
-				let cidr = 0;
-				let stop = false;
-				const zerotable = {
-					0: 8,
-					128: 7,
-					192: 6,
-					224: 5,
-					240: 4,
-					248: 3,
-					252: 2,
-					254: 1,
-					255: 0
-				};
-				let i, octet, zeros;
-				for (i = 3; i >= 0; i -= 1) {
-					octet = this.octets[i];
-					if (octet in zerotable) {
-						zeros = zerotable[octet];
-						if (stop && zeros !== 0) return null;
-						if (zeros !== 8) stop = true;
-						cidr += zeros;
-					} else return null;
-				}
-				return 32 - cidr;
-			};
-			IPv4.prototype.range = function() {
-				return ipaddr.subnetMatch(this, this.SpecialRanges);
-			};
-			IPv4.prototype.toByteArray = function() {
-				return this.octets.slice(0);
-			};
-			IPv4.prototype.toIPv4MappedAddress = function() {
-				return ipaddr.IPv6.parse(`::ffff:${this.toString()}`);
-			};
-			IPv4.prototype.toNormalizedString = function() {
-				return this.toString();
-			};
-			IPv4.prototype.toString = function() {
-				return this.octets.join(".");
-			};
-			return IPv4;
-		})();
-		ipaddr.IPv4.broadcastAddressFromCIDR = function(string) {
-			try {
-				const cidr = this.parseCIDR(string);
-				const ipInterfaceOctets = cidr[0].toByteArray();
-				const subnetMaskOctets = this.subnetMaskFromPrefixLength(cidr[1]).toByteArray();
-				const octets = [];
-				let i = 0;
-				while (i < 4) {
-					octets.push(parseInt(ipInterfaceOctets[i], 10) | parseInt(subnetMaskOctets[i], 10) ^ 255);
-					i++;
-				}
-				return new this(octets);
-			} catch (e) {
-				throw new Error("ipaddr: the address does not have IPv4 CIDR format", { cause: e });
-			}
-		};
-		ipaddr.IPv4.isIPv4 = function(string) {
-			return this.parser(string) !== null;
-		};
-		ipaddr.IPv4.isValid = function(string) {
-			try {
-				new this(this.parser(string));
-				return true;
-			} catch {
-				return false;
-			}
-		};
-		ipaddr.IPv4.isValidCIDR = function(string) {
-			try {
-				this.parseCIDR(string);
-				return true;
-			} catch {
-				return false;
-			}
-		};
-		ipaddr.IPv4.isValidFourPartDecimal = function(string) {
-			if (ipaddr.IPv4.isValid(string) && string.match(/^(0|[1-9]\d*)(\.(0|[1-9]\d*)){3}$/)) return true;
-			else return false;
-		};
-		ipaddr.IPv4.isValidCIDRFourPartDecimal = function(string) {
-			const match = string.match(/^(.+)\/(\d+)$/);
-			if (!ipaddr.IPv4.isValidCIDR(string) || !match) return false;
-			return ipaddr.IPv4.isValidFourPartDecimal(match[1]);
-		};
-		ipaddr.IPv4.networkAddressFromCIDR = function(string) {
-			let cidr, i, ipInterfaceOctets, octets, subnetMaskOctets;
-			try {
-				cidr = this.parseCIDR(string);
-				ipInterfaceOctets = cidr[0].toByteArray();
-				subnetMaskOctets = this.subnetMaskFromPrefixLength(cidr[1]).toByteArray();
-				octets = [];
-				i = 0;
-				while (i < 4) {
-					octets.push(parseInt(ipInterfaceOctets[i], 10) & parseInt(subnetMaskOctets[i], 10));
-					i++;
-				}
-				return new this(octets);
-			} catch (e) {
-				throw new Error("ipaddr: the address does not have IPv4 CIDR format", { cause: e });
-			}
-		};
-		ipaddr.IPv4.parse = function(string) {
-			const parts = this.parser(string);
-			if (parts === null) throw new Error("ipaddr: string is not formatted like an IPv4 Address");
-			return new this(parts);
-		};
-		ipaddr.IPv4.parseCIDR = function(string) {
-			let match;
-			if (match = string.match(/^(.+)\/(\d+)$/)) {
-				const maskLength = parseInt(match[2]);
-				if (maskLength >= 0 && maskLength <= 32) {
-					const parsed = [this.parse(match[1]), maskLength];
-					Object.defineProperty(parsed, "toString", { value: function() {
-						return this.join("/");
-					} });
-					return parsed;
-				}
-			}
-			throw new Error("ipaddr: string is not formatted like an IPv4 CIDR range");
-		};
-		ipaddr.IPv4.parser = function(string) {
-			let match, part, value;
-			if (match = string.match(ipv4Regexes.fourOctet)) return (function() {
-				const ref = match.slice(1, 6);
-				const results = [];
-				for (let i = 0; i < ref.length; i++) {
-					part = ref[i];
-					results.push(parseIntAuto(part));
-				}
-				return results;
-			})();
-			else if (match = string.match(ipv4Regexes.longValue)) {
-				value = parseIntAuto(match[1]);
-				if (value > 4294967295 || value < 0) throw new Error("ipaddr: address outside defined range");
-				return (function() {
-					const results = [];
-					let shift = 0;
-					for (; shift <= 24; shift += 8) results.push(value >> shift & 255);
-					return results;
-				})().reverse();
-			} else if (match = string.match(ipv4Regexes.twoOctet)) return (function() {
-				const ref = match.slice(1, 4);
-				const results = [];
-				value = parseIntAuto(ref[1]);
-				if (value > 16777215 || value < 0) throw new Error("ipaddr: address outside defined range");
-				results.push(parseIntAuto(ref[0]));
-				results.push(value >> 16 & 255);
-				results.push(value >> 8 & 255);
-				results.push(value & 255);
-				return results;
-			})();
-			else if (match = string.match(ipv4Regexes.threeOctet)) return (function() {
-				const ref = match.slice(1, 5);
-				const results = [];
-				value = parseIntAuto(ref[2]);
-				if (value > 65535 || value < 0) throw new Error("ipaddr: address outside defined range");
-				results.push(parseIntAuto(ref[0]));
-				results.push(parseIntAuto(ref[1]));
-				results.push(value >> 8 & 255);
-				results.push(value & 255);
-				return results;
-			})();
-			else return null;
-		};
-		ipaddr.IPv4.subnetMaskFromPrefixLength = function(prefix) {
-			prefix = parseInt(prefix);
-			if (Number.isNaN(prefix) || prefix < 0 || prefix > 32) throw new Error("ipaddr: invalid IPv4 prefix length");
-			const octets = [
-				0,
-				0,
-				0,
-				0
-			];
-			let j = 0;
-			const filledOctetCount = Math.floor(prefix / 8);
-			while (j < filledOctetCount) {
-				octets[j] = 255;
-				j++;
-			}
-			if (filledOctetCount < 4) octets[filledOctetCount] = Math.pow(2, prefix % 8) - 1 << 8 - prefix % 8;
-			return new this(octets);
-		};
-		ipaddr.IPv6 = (function() {
-			function IPv6(parts, zoneId) {
-				let i, part;
-				if (parts.length === 16) {
-					this.parts = [];
-					for (i = 0; i <= 14; i += 2) this.parts.push(parts[i] << 8 | parts[i + 1]);
-				} else if (parts.length === 8) this.parts = parts;
-				else throw new Error("ipaddr: ipv6 part count should be 8 or 16");
-				for (i = 0; i < this.parts.length; i++) {
-					part = this.parts[i];
-					if (!(0 <= part && part <= 65535)) throw new Error("ipaddr: ipv6 part should fit in 16 bits");
-				}
-				if (zoneId) this.zoneId = zoneId;
-			}
-			IPv6.prototype.SpecialRanges = {
-				unspecified: [new IPv6([
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 128],
-				linkLocal: [new IPv6([
-					65152,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 10],
-				multicast: [new IPv6([
-					65280,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 8],
-				loopback: [new IPv6([
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					1
-				]), 128],
-				uniqueLocal: [new IPv6([
-					64512,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 7],
-				ipv4Mapped: [new IPv6([
-					0,
-					0,
-					0,
-					0,
-					0,
-					65535,
-					0,
-					0
-				]), 96],
-				deprecatedSiteLocal: [new IPv6([
-					65216,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 10],
-				discard: [new IPv6([
-					256,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 64],
-				rfc6145: [new IPv6([
-					0,
-					0,
-					0,
-					0,
-					65535,
-					0,
-					0,
-					0
-				]), 96],
-				rfc6052: [[new IPv6([
-					100,
-					65435,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 96], [new IPv6([
-					100,
-					65435,
-					1,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 48]],
-				"6to4": [new IPv6([
-					8194,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 16],
-				teredo: [new IPv6([
-					8193,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 32],
-				benchmarking: [new IPv6([
-					8193,
-					2,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 48],
-				amt: [new IPv6([
-					8193,
-					3,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 32],
-				as112v6: [[new IPv6([
-					8193,
-					4,
-					274,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 48], [new IPv6([
-					9760,
-					79,
-					32768,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 48]],
-				deprecatedOrchid: [new IPv6([
-					8193,
-					16,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 28],
-				orchid2: [new IPv6([
-					8193,
-					32,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 28],
-				droneRemoteIdProtocolEntityTags: [new IPv6([
-					8193,
-					48,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 28],
-				segmentRouting: [new IPv6([
-					24320,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0,
-					0
-				]), 16],
-				reserved: [
-					[new IPv6([
-						8193,
-						0,
-						0,
-						0,
-						0,
-						0,
-						0,
-						0
-					]), 23],
-					[new IPv6([
-						8193,
-						3512,
-						0,
-						0,
-						0,
-						0,
-						0,
-						0
-					]), 32],
-					[new IPv6([
-						16383,
-						0,
-						0,
-						0,
-						0,
-						0,
-						0,
-						0
-					]), 20]
-				]
-			};
-			IPv6.prototype.isIPv4MappedAddress = function() {
-				return this.range() === "ipv4Mapped";
-			};
-			IPv6.prototype.kind = function() {
-				return "ipv6";
-			};
-			IPv6.prototype.match = function(other, cidrRange) {
-				let ref;
-				if (cidrRange === void 0) {
-					ref = other;
-					other = ref[0];
-					cidrRange = ref[1];
-				}
-				if (other.kind() !== "ipv6") throw new Error("ipaddr: cannot match ipv6 address with non-ipv6 one");
-				return matchCIDR(this.parts, other.parts, 16, cidrRange);
-			};
-			IPv6.prototype.prefixLengthFromSubnetMask = function() {
-				let cidr = 0;
-				let stop = false;
-				const zerotable = {
-					0: 16,
-					32768: 15,
-					49152: 14,
-					57344: 13,
-					61440: 12,
-					63488: 11,
-					64512: 10,
-					65024: 9,
-					65280: 8,
-					65408: 7,
-					65472: 6,
-					65504: 5,
-					65520: 4,
-					65528: 3,
-					65532: 2,
-					65534: 1,
-					65535: 0
-				};
-				let part, zeros;
-				for (let i = 7; i >= 0; i -= 1) {
-					part = this.parts[i];
-					if (part in zerotable) {
-						zeros = zerotable[part];
-						if (stop && zeros !== 0) return null;
-						if (zeros !== 16) stop = true;
-						cidr += zeros;
-					} else return null;
-				}
-				return 128 - cidr;
-			};
-			IPv6.prototype.range = function() {
-				return ipaddr.subnetMatch(this, this.SpecialRanges);
-			};
-			IPv6.prototype.toByteArray = function() {
-				let part;
-				const bytes = [];
-				const ref = this.parts;
-				for (let i = 0; i < ref.length; i++) {
-					part = ref[i];
-					bytes.push(part >> 8);
-					bytes.push(part & 255);
-				}
-				return bytes;
-			};
-			IPv6.prototype.toFixedLengthString = function() {
-				const addr = (function() {
-					const results = [];
-					for (let i = 0; i < this.parts.length; i++) results.push(padPart(this.parts[i].toString(16), 4));
-					return results;
-				}).call(this).join(":");
-				let suffix = "";
-				if (this.zoneId) suffix = `%${this.zoneId}`;
-				return addr + suffix;
-			};
-			IPv6.prototype.toIPv4Address = function() {
-				if (!this.isIPv4MappedAddress()) throw new Error("ipaddr: trying to convert a generic ipv6 address to ipv4");
-				const ref = this.parts.slice(-2);
-				const high = ref[0];
-				const low = ref[1];
-				return new ipaddr.IPv4([
-					high >> 8,
-					high & 255,
-					low >> 8,
-					low & 255
-				]);
-			};
-			IPv6.prototype.toNormalizedString = function() {
-				const addr = (function() {
-					const results = [];
-					for (let i = 0; i < this.parts.length; i++) results.push(this.parts[i].toString(16));
-					return results;
-				}).call(this).join(":");
-				let suffix = "";
-				if (this.zoneId) suffix = `%${this.zoneId}`;
-				return addr + suffix;
-			};
-			IPv6.prototype.toRFC5952String = function() {
-				const regex = /((^|:)(0(:|$)){2,})/g;
-				let suffix = "";
-				if (this.zoneId) suffix = `%${this.zoneId}`;
-				const normalized = this.toNormalizedString();
-				const string = normalized.slice(0, normalized.length - suffix.length);
-				let bestMatchIndex = 0;
-				let bestMatchLength = -1;
-				let bestMatchGroups = -1;
-				let match;
-				while (match = regex.exec(string)) {
-					const groups = (match[0].match(/0/g) || []).length;
-					if (groups > bestMatchGroups) {
-						bestMatchGroups = groups;
-						bestMatchIndex = match.index;
-						bestMatchLength = match[0].length;
-					}
-				}
-				if (bestMatchLength < 0) return string + suffix;
-				return `${string.substring(0, bestMatchIndex)}::${string.substring(bestMatchIndex + bestMatchLength)}${suffix}`;
-			};
-			IPv6.prototype.toString = function() {
-				return this.toRFC5952String();
-			};
-			return IPv6;
-		})();
-		ipaddr.IPv6.broadcastAddressFromCIDR = function(string) {
-			try {
-				const cidr = this.parseCIDR(string);
-				const ipInterfaceOctets = cidr[0].toByteArray();
-				const subnetMaskOctets = this.subnetMaskFromPrefixLength(cidr[1]).toByteArray();
-				const octets = [];
-				let i = 0;
-				while (i < 16) {
-					octets.push(parseInt(ipInterfaceOctets[i], 10) | parseInt(subnetMaskOctets[i], 10) ^ 255);
-					i++;
-				}
-				return new this(octets);
-			} catch (e) {
-				throw new Error("ipaddr: the address does not have IPv6 CIDR format", { cause: e });
-			}
-		};
-		ipaddr.IPv6.isIPv6 = function(string) {
-			return this.parser(string) !== null;
-		};
-		ipaddr.IPv6.isValid = function(string) {
-			if (typeof string === "string" && string.indexOf(":") === -1) return false;
-			try {
-				const addr = this.parser(string);
-				new this(addr.parts, addr.zoneId);
-				return true;
-			} catch {
-				return false;
-			}
-		};
-		ipaddr.IPv6.isValidCIDR = function(string) {
-			if (typeof string === "string" && string.indexOf(":") === -1) return false;
-			try {
-				this.parseCIDR(string);
-				return true;
-			} catch {
-				return false;
-			}
-		};
-		ipaddr.IPv6.networkAddressFromCIDR = function(string) {
-			let cidr, i, ipInterfaceOctets, octets, subnetMaskOctets;
-			try {
-				cidr = this.parseCIDR(string);
-				ipInterfaceOctets = cidr[0].toByteArray();
-				subnetMaskOctets = this.subnetMaskFromPrefixLength(cidr[1]).toByteArray();
-				octets = [];
-				i = 0;
-				while (i < 16) {
-					octets.push(parseInt(ipInterfaceOctets[i], 10) & parseInt(subnetMaskOctets[i], 10));
-					i++;
-				}
-				return new this(octets);
-			} catch (e) {
-				throw new Error("ipaddr: the address does not have IPv6 CIDR format", { cause: e });
-			}
-		};
-		ipaddr.IPv6.parse = function(string) {
-			const addr = this.parser(string);
-			if (addr === null) throw new Error("ipaddr: string is not formatted like an IPv6 Address");
-			return new this(addr.parts, addr.zoneId);
-		};
-		ipaddr.IPv6.parseCIDR = function(string) {
-			let maskLength, match, parsed;
-			if (match = string.match(/^(.+)\/(\d+)$/)) {
-				maskLength = parseInt(match[2]);
-				if (maskLength >= 0 && maskLength <= 128) {
-					parsed = [this.parse(match[1]), maskLength];
-					Object.defineProperty(parsed, "toString", { value: function() {
-						return this.join("/");
-					} });
-					return parsed;
-				}
-			}
-			throw new Error("ipaddr: string is not formatted like an IPv6 CIDR range");
-		};
-		ipaddr.IPv6.parser = function(string) {
-			let addr, i, match, octet, octets, zoneId;
-			if (match = string.match(ipv6Regexes.deprecatedTransitional)) return this.parser(`::ffff:${match[1]}`);
-			if (ipv6Regexes.native.test(string)) return expandIPv6(string, 8);
-			if (match = string.match(ipv6Regexes.transitional)) {
-				zoneId = match[6] || "";
-				addr = match[1];
-				if (!match[1].endsWith("::")) addr = addr.slice(0, -1);
-				addr = expandIPv6(addr + zoneId, 6);
-				if (addr && addr.parts) {
-					octets = [
-						parseInt(match[2]),
-						parseInt(match[3]),
-						parseInt(match[4]),
-						parseInt(match[5])
-					];
-					for (i = 0; i < octets.length; i++) {
-						octet = octets[i];
-						if (!(0 <= octet && octet <= 255)) return null;
-					}
-					addr.parts.push(octets[0] << 8 | octets[1]);
-					addr.parts.push(octets[2] << 8 | octets[3]);
-					return {
-						parts: addr.parts,
-						zoneId: addr.zoneId
-					};
-				}
-			}
-			return null;
-		};
-		ipaddr.IPv6.subnetMaskFromPrefixLength = function(prefix) {
-			prefix = parseInt(prefix);
-			if (Number.isNaN(prefix) || prefix < 0 || prefix > 128) throw new Error("ipaddr: invalid IPv6 prefix length");
-			const octets = [
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0,
-				0
-			];
-			let j = 0;
-			const filledOctetCount = Math.floor(prefix / 8);
-			while (j < filledOctetCount) {
-				octets[j] = 255;
-				j++;
-			}
-			if (filledOctetCount < 16) octets[filledOctetCount] = Math.pow(2, prefix % 8) - 1 << 8 - prefix % 8;
-			return new this(octets);
-		};
-		ipaddr.fromByteArray = function(bytes) {
-			const length = bytes.length;
-			if (length === 4) return new ipaddr.IPv4(bytes);
-			else if (length === 16) return new ipaddr.IPv6(bytes);
-			else throw new Error("ipaddr: the binary input is neither an IPv6 nor IPv4 address");
-		};
-		ipaddr.isValid = function(string) {
-			return ipaddr.IPv6.isValid(string) || ipaddr.IPv4.isValid(string);
-		};
-		ipaddr.isValidCIDR = function(string) {
-			return ipaddr.IPv6.isValidCIDR(string) || ipaddr.IPv4.isValidCIDR(string);
-		};
-		ipaddr.parse = function(string) {
-			if (ipaddr.IPv6.isValid(string)) return ipaddr.IPv6.parse(string);
-			else if (ipaddr.IPv4.isValid(string)) return ipaddr.IPv4.parse(string);
-			else throw new Error("ipaddr: the address has neither IPv6 nor IPv4 format");
-		};
-		ipaddr.parseCIDR = function(string) {
-			try {
-				return ipaddr.IPv6.parseCIDR(string);
-			} catch {
-				try {
-					return ipaddr.IPv4.parseCIDR(string);
-				} catch (e) {
-					throw new Error("ipaddr: the address has neither IPv6 nor IPv4 CIDR format", { cause: e });
-				}
-			}
-		};
-		ipaddr.process = function(string) {
-			const addr = this.parse(string);
-			if (addr.kind() === "ipv6" && addr.isIPv4MappedAddress()) return addr.toIPv4Address();
-			else return addr;
-		};
-		ipaddr.subnetMatch = function(address, rangeList, defaultName) {
-			let i, rangeName, rangeSubnets, subnet;
-			if (defaultName === void 0 || defaultName === null) defaultName = "unicast";
-			for (rangeName in rangeList) if (Object.prototype.hasOwnProperty.call(rangeList, rangeName)) {
-				rangeSubnets = rangeList[rangeName];
-				if (rangeSubnets[0] && !(rangeSubnets[0] instanceof Array)) rangeSubnets = [rangeSubnets];
-				for (i = 0; i < rangeSubnets.length; i++) {
-					subnet = rangeSubnets[i];
-					if (address.kind() === subnet[0].kind() && address.match.apply(address, subnet)) return rangeName;
-				}
-			}
-			return defaultName;
-		};
-		if (typeof module !== "undefined" && module.exports) module.exports = ipaddr;
-		else root.ipaddr = ipaddr;
-	})(this$1);
-})))(), 1);
 function requestUrl(input) {
 	if (input instanceof Request) return new URL(input.url);
 	return new URL(input.toString());
 }
-function publicAddress(address) {
-	return import_ipaddr.default.isValid(address) && import_ipaddr.default.process(address).range() === "unicast";
-}
 const layerPublicFetch = effect(Fetch)(gen(function* () {
 	const fetch = yield* Fetch;
 	const dispatcher = yield* acquireRelease(sync(() => new Undici_exports.Agent({ connect: { lookup: (hostname, options, callback) => {
 		lookup(hostname, { all: true }, (error, addresses) => {
-			if (error !== null || isArrayEmpty(addresses) || !every$1(addresses, (entry) => publicAddress(entry.address))) {
+			if (error !== null || isArrayEmpty(addresses) || !every$1(addresses, (entry) => isPublicAddress(entry.address))) {
 				callback(error ?? AuthError.make({ message: "MCP endpoints must resolve to public addresses" }), "", 4);
 				return;
 			}
@@ -143733,7 +143307,7 @@ const layerPublicFetch = effect(Fetch)(gen(function* () {
 	return (input, options) => {
 		const url = requestUrl(input);
 		const hostname = replaceAll(/^\[|\]$/gu, "")(url.hostname);
-		if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.hash !== "" || import_ipaddr.default.isValid(hostname) && !publicAddress(hostname)) return runPromise(fail$6(AuthError.make({ message: "MCP endpoints must use public HTTPS URLs" })));
+		if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.hash !== "" || isIpAddress(hostname) && !isPublicAddress(hostname)) return runPromise(fail$6(AuthError.make({ message: "MCP endpoints must use public HTTPS URLs" })));
 		const init = {
 			...options,
 			dispatcher,
@@ -143775,26 +143349,25 @@ const ToolHandlers = Tools.toLayer(gen(function* () {
 		})) };
 	}) });
 }));
-const layerMcp = unwrap$7(gen(function* () {
-	const now = yield* currentTimeMillis;
-	return pipe$1(layerMcp$1({
-		instructions: join$2([
-			"Gateway to the user's MCP servers; tools are named <server>__<tool>.",
-			...map$8(filter$5(yield* (yield* Connections).definitions, (server) => connectionStatus(server, now) === "Connected"), (server) => `${server.id}: ${summary(server)}`),
-			"If a tool is missing or failing, list_mcp_connections says why."
-		], "\n"),
-		registrations: pipe$1(toolkit(Tools), provide$2(ToolHandlers))
-	}), provide$2(GatewayDiscovery.layer), provide$2(McpServer.layer));
-}));
 // src/main.server.ts
 const layerServices = pipe$1(Gateway.layer, provide$2(McpServer.layer), provideMerge(Connections.layer), provide$2(mergeAll$1(layerDataStore, layerUpstream)));
 runApp({
 	icon: icon_default,
-	routes: pipe$1(mergeAll$1(HttpHandlers, pipe$1(layerHttp$1({
+	routes: pipe$1(mergeAll$1(HttpHandlers, layerRpc({
 		group: RpcContracts,
-		path: "/api/rpc",
-		protocol: "websocket"
-	}), provide$2(RpcHandlers)), layerMcp), provide$2(layerServices)),
+		handlers: RpcHandlers
+	}), unwrap$7(gen(function* () {
+		const now = yield* currentTimeMillis;
+		return pipe$1(layerMcp({
+			handlers: ToolHandlers,
+			instructions: join$2([
+				"Gateway to the user's MCP servers; tools are named <server>__<tool>.",
+				...map$8(filter$5(yield* (yield* Connections).definitions, (server) => connectionStatus(server, now) === "Connected"), (server) => `${server.id}: ${summary(server)}`),
+				"If a tool is missing or failing, list_mcp_connections says why."
+			], "\n"),
+			tools: Tools
+		}), provide$2(GatewayDiscovery.layer), provide$2(McpServer.layer));
+	}))), provide$2(layerServices)),
 	settings: { GITHUB_ADMINS: ADMINS }
 });
 export {};