@deslop/portfolio 0.1.1248 → 0.1.1249

package/dist/server.js

@@ -5034,41 +5034,6 @@ const mergeAll$2 = (...ctxs) => {
 	return makeUnsafe$9(map);
 };
 /**
-* Returns a new `Context` with the specified service keys removed.
-*
-* **When to use**
-*
-* Use when you want to remove a denylist of services from a `Context`.
-*
-* **Example** (Omitting services from a context)
-*
-* ```ts import.meta.vitest
-* import { Context, Option, pipe } from "effect"
-*
-* const Port = Context.Service<{ PORT: number }>("Port")
-* const Timeout = Context.Service<{ TIMEOUT: number }>("Timeout")
-*
-* const someContext = pipe(
-*   Context.make(Port, { PORT: 8080 }),
-*   Context.add(Timeout, { TIMEOUT: 5000 })
-* )
-*
-* const context = pipe(someContext, Context.omit(Timeout))
-*
-* Context.getOption(context, Port) // => Option.some({ PORT: 8080 })
-* Context.getOption(context, Timeout) // => Option.none()
-* ```
-*
-* @see {@link pick} for keeping selected services
-*
-* @stability stable
-* @category filtering
-* @since 2.0.0
-*/
-const omit$1 = (...keys) => (self) => withFlat(self, (map) => {
-	for (let i = 0; i < keys.length; i++) map.delete(keys[i].key);
-});
-/**
 * Creates a context key with a default value.
 *
 * **When to use**
@@ -9696,7 +9661,7 @@ const forever$2 = /*#__PURE__*/ dual((args) => isEffect$1(args[0]), (self, optio
 	step: constVoid
 }));
 /** @internal */
-const catchCause$2 = /*#__PURE__*/ dual(2, (self, f) => new OnFailureImpl(self, f.length !== 1 ? (cause) => f(cause) : f));
+const catchCause$3 = /*#__PURE__*/ dual(2, (self, f) => new OnFailureImpl(self, f.length !== 1 ? (cause) => f(cause) : f));
 const OnFailureProto = /*#__PURE__*/ makePrimitiveProto({
 	op: "OnFailure",
 	[evaluate$1]: evaluateCont
@@ -9707,7 +9672,7 @@ const OnFailureImpl = function(self, f) {
 };
 OnFailureImpl.prototype = OnFailureProto;
 /** @internal */
-const catchCauseFilter$1 = /*#__PURE__*/ dual(3, (self, filter, f) => catchCause$2(self, (cause) => {
+const catchCauseFilter$1 = /*#__PURE__*/ dual(3, (self, filter, f) => catchCause$3(self, (cause) => {
 	const eb = filter(cause);
 	return isFailure$1(eb) ? failCause$5(eb.failure) : f(eb.success, cause);
 }));
@@ -9716,9 +9681,9 @@ const catch_$2 = /*#__PURE__*/ dual(2, (self, f) => catchCauseFilter$1(self, fin
 /** @internal */
 const catchDefect$1 = /*#__PURE__*/ dual(2, (self, f) => catchCauseFilter$1(self, findDefect, f));
 /** @internal */
-const tapCause$1 = /*#__PURE__*/ dual(2, (self, f) => catchCause$2(self, (cause) => andThen$1(f(cause), failCause$5(cause))));
+const tapCause$1 = /*#__PURE__*/ dual(2, (self, f) => catchCause$3(self, (cause) => andThen$1(f(cause), failCause$5(cause))));
 /** @internal */
-const tapCauseFilter = /*#__PURE__*/ dual(3, (self, filter, f) => catchCause$2(self, (cause) => {
+const tapCauseFilter = /*#__PURE__*/ dual(3, (self, filter, f) => catchCause$3(self, (cause) => {
 	const result = filter(cause);
 	if (isFailure$1(result)) return failCause$5(cause);
 	return andThen$1(f(result.success, cause), failCause$5(cause));
@@ -9726,14 +9691,14 @@ const tapCauseFilter = /*#__PURE__*/ dual(3, (self, filter, f) => catchCause$2(s
 /** @internal */
 const tapError$4 = /*#__PURE__*/ dual(2, (self, f) => tapCauseFilter(self, findError, (e) => f(e)));
 /** @internal */
-const catchIf$1 = /*#__PURE__*/ dual((args) => isEffect$1(args[0]), (self, predicate, f, orElse) => catchCause$2(self, (cause) => {
+const catchIf$1 = /*#__PURE__*/ dual((args) => isEffect$1(args[0]), (self, predicate, f, orElse) => catchCause$3(self, (cause) => {
 	const error = findRecoverableError(cause);
 	if (isFailure$1(error)) return failCause$5(error.failure);
 	if (!predicate(error.success)) return orElse ? orElse(error.success) : failCause$5(cause);
 	return f(error.success);
 }));
 /** @internal */
-const catchFilter$1 = /*#__PURE__*/ dual((args) => isEffect$1(args[0]), (self, filter, f, orElse) => catchCause$2(self, (cause) => {
+const catchFilter$1 = /*#__PURE__*/ dual((args) => isEffect$1(args[0]), (self, filter, f, orElse) => catchCause$3(self, (cause) => {
 	const error = findRecoverableError(cause);
 	if (isFailure$1(error)) return failCause$5(error.failure);
 	const result = filter(error.success);
@@ -9760,7 +9725,7 @@ const catchReason$1 = /*#__PURE__*/ dual((args) => isEffect$1(args[0]), (self, e
 	return orElse ? orElse(reason, e) : fail$11(e);
 }));
 /** @internal */
-const mapError$3 = /*#__PURE__*/ dual(2, (self, f) => catchCause$2(self, (cause) => failCause$5(causeMap(cause, f))));
+const mapError$3 = /*#__PURE__*/ dual(2, (self, f) => catchCause$3(self, (cause) => failCause$5(causeMap(cause, f))));
 /** @internal */
 const mapBoth = /*#__PURE__*/ dual(2, (self, options) => matchCauseEffect$1(self, {
 	onFailure: (cause) => failCause$5(causeMap(cause, options.onFailure)),
@@ -9888,9 +9853,9 @@ const delay$1 = /*#__PURE__*/ dual(2, (self, duration) => andThen$1(sleep$1(dura
 /** @internal */
 const timeoutOrElse$1 = /*#__PURE__*/ dual(2, (self, options) => flatMap$4(timeoutOption$1(self, options.duration), (option) => isNone(option) ? options.orElse() : succeed$9(option.value)));
 /** @internal */
-const timeoutErrorFromDuration = (duration) => new TimeoutError(`Operation timed out after '${format$1(duration)}'`);
+const timeoutErrorFromDuration = (duration) => new TimeoutError$1(`Operation timed out after '${format$1(duration)}'`);
 /** @internal */
-const timeout$1 = /*#__PURE__*/ dual(2, (self, duration) => {
+const timeout$2 = /*#__PURE__*/ dual(2, (self, duration) => {
 	const decoded = fromInputUnsafe$1(duration);
 	return timeoutOrElse$1(self, {
 		duration: decoded,
@@ -9932,7 +9897,7 @@ const runFinalizer = (finalizer, exit_) => {
 		return exitDie(defect);
 	}
 };
-const combineFinalizerCause = (exit_, finalizer) => exitIsSuccess(exit_) ? finalizer : catchCause$2(finalizer, (cause) => failCause$5(causeElectDefects(causeCombine(exit_.cause, cause))));
+const combineFinalizerCause = (exit_, finalizer) => exitIsSuccess(exit_) ? finalizer : catchCause$3(finalizer, (cause) => failCause$5(causeElectDefects(causeCombine(exit_.cause, cause))));
 const scopeCloseFinalizers = /*#__PURE__*/ fnUntraced$1(function* (self, finalizers, exit_) {
 	let exits = [];
 	const fibers = [];
@@ -10680,6 +10645,15 @@ const withSpan$1 = function() {
 	return (self, ...args) => useSpan$1(name, fnArg ? fnArg(...args) : options, (span) => withParentSpan$1(self, span, traceOptions));
 };
 /** @internal */
+const annotateCurrentSpan$1 = (...args) => withFiber$1((fiber) => {
+	const span = fiber.currentSpanLocal;
+	if (span && span.status._tag !== "Ended") {
+		if (args.length === 1) for (const [key, value] of Object.entries(args[0])) span.attribute(key, value);
+		else span.attribute(args[0], args[1]);
+	}
+	return void_$3;
+});
+/** @internal */
 const ClockRef = /*#__PURE__*/ Reference("effect/Clock", { defaultValue: () => new ClockImpl() });
 const MAX_TIMER_MILLIS = 2 ** 31 - 1;
 var ClockImpl = class {
@@ -10747,7 +10721,7 @@ const TimeoutErrorTypeId = "~effect/Cause/TimeoutError";
 /** @internal */
 const isTimeoutError$1 = (u) => hasProperty(u, TimeoutErrorTypeId);
 /** @internal */
-var TimeoutError = class extends (/*#__PURE__*/ TaggedError$2("TimeoutError")) {
+var TimeoutError$1 = class extends (/*#__PURE__*/ TaggedError$2("TimeoutError")) {
 	[TimeoutErrorTypeId] = TimeoutErrorTypeId;
 	constructor(message) {
 		super({ message });
@@ -11578,6 +11552,22 @@ const done$2 = done$3;
 */
 const isTimeoutError = isTimeoutError$1;
 /**
+* Constructs a `TimeoutError` with an optional message.
+*
+* **Example** (Creating a TimeoutError)
+*
+* ```ts import.meta.vitest
+* import { Cause } from "effect"
+*
+* new Cause.TimeoutError("Operation timed out").message // => "Operation timed out"
+* ```
+*
+* @stability stable
+* @category constructors
+* @since 4.0.0
+*/
+const TimeoutError = TimeoutError$1;
+/**
 * Constructs an `IllegalArgumentError` with an optional message.
 *
 * **Example** (Creating an IllegalArgumentError)
@@ -13917,6 +13907,63 @@ const provideMerge = /*#__PURE__*/ dual(2, (self, that) => provideWith(self, tha
 */
 const flatMap$3 = /*#__PURE__*/ dual(2, (self, f) => fromBuild((memoMap, scope) => flatMap$4(self.build(memoMap, scope), (context) => f(context).build(memoMap, scope))));
 /**
+* Recovers from any failure cause by switching to another layer.
+*
+* **When to use**
+*
+* Use when you need `Layer` recovery to inspect more than the typed error,
+* such as defects or interruption information.
+*
+* **Details**
+*
+* The handler receives the full `Cause` of the failed layer, including typed
+* errors, unexpected defects, and interruption information, and returns the
+* fallback layer to build instead. Finalizers for resources acquired by the
+* failed layer are still run before the fallback layer is acquired.
+*
+* **Example** (Recovering from layer failures by cause)
+*
+* ```ts import.meta.vitest
+* import { Context, Data, Effect, Layer } from "effect"
+*
+* class DatabaseError extends Data.TaggedError("DatabaseError")<{
+*   message: string
+* }> {}
+*
+* class Database extends Context.Service<Database, {
+*   readonly query: (sql: string) => Effect.Effect<string>
+* }>()("Database") {}
+*
+* const primaryDatabaseLayer = Layer.effect(Database,
+*   Effect.fail(new DatabaseError({ message: "Primary DB unreachable" }))
+* )
+*
+* const databaseWithFallback = primaryDatabaseLayer.pipe(
+*   Layer.catchCause(() => {
+*     return Layer.succeed(Database, {
+*       query: Effect.fn("Database.query")((sql: string) => Effect.succeed(`Memory: ${sql}`))
+*     })
+*   })
+* )
+*
+* const program = Effect.gen(function*() {
+*   const database = yield* Database
+*   return yield* database.query("SELECT * FROM users")
+* }).pipe(
+*   Effect.provide(databaseWithFallback)
+* )
+*
+* await Effect.runPromise(program) // => "Memory: SELECT * FROM users"
+* ```
+*
+* @see {@link catchTag} for recovering from specific tagged errors
+*
+* @stability stable
+* @category error handling
+* @since 4.0.0
+*/
+const catchCause$2 = /*#__PURE__*/ dual(2, (self, onError) => fromBuildUnsafe((memoMap, scope) => catchCause$3(self.build(memoMap, scope), (cause) => onError(cause).build(memoMap, scope))));
+/**
 * Builds this layer and keeps it alive until the returned effect is interrupted.
 *
 * **When to use**
@@ -14579,6 +14626,23 @@ globalThis.String;
 */
 const toUpperCase = (self) => self.toUpperCase();
 /**
+* Converts a string to lowercase.
+*
+* **Example** (Converting strings to lowercase)
+*
+* ```ts import.meta.vitest
+* import { pipe, String } from "effect"
+*
+* pipe("A", String.toLowerCase) // => "a"
+* String.toLowerCase("HELLO") // => "hello"
+* ```
+*
+* @stability stable
+* @category transforming
+* @since 2.0.0
+*/
+const toLowerCase = (self) => self.toLowerCase();
+/**
 * Capitalizes the first character (Unicode code point) of a string.
 *
 * **Example** (Capitalizing a string)
@@ -14643,6 +14707,23 @@ const split$1 = /*#__PURE__*/ dual(2, (self, separator) => {
 	return isArrayNonEmpty$1(out) ? out : [self];
 });
 /**
+* Returns `true` if the string starts with the specified search string.
+*
+* **Example** (Checking string prefixes)
+*
+* ```ts import.meta.vitest
+* import { pipe, String } from "effect"
+*
+* pipe("hello world", String.startsWith("hello")) // => true
+* pipe("hello world", String.startsWith("world")) // => false
+* ```
+*
+* @stability stable
+* @category predicates
+* @since 2.0.0
+*/
+const startsWith = (searchString, position) => (self) => self.startsWith(searchString, position);
+/**
 * Returns `true` if the string ends with the specified search string.
 *
 * **Example** (Checking string suffixes)
@@ -15052,7 +15133,7 @@ const fromStepWithMetadata = (step) => fromStep(map$7(step, (f) => {
 * @category destructors
 * @since 4.0.0
 */
-const toStep = (schedule) => catchCause$2(schedule.step, (cause) => succeed$9(() => failCause$5(cause)));
+const toStep = (schedule) => catchCause$3(schedule.step, (cause) => succeed$9(() => failCause$5(cause)));
 /**
 * Extracts a step function from a `Schedule` that sleeps for each computed
 * delay and returns metadata for the completed step.
@@ -16905,7 +16986,7 @@ const catchReason = catchReason$1;
 * @category error handling
 * @since 4.0.0
 */
-const catchCause$1 = catchCause$2;
+const catchCause$1 = catchCause$3;
 /**
 * Recovers from defects using a provided recovery function.
 *
@@ -17411,7 +17492,7 @@ const orElseSucceed = orElseSucceed$1;
 * @category delays & timeouts
 * @since 2.0.0
 */
-const timeout = timeout$1;
+const timeout$1 = timeout$2;
 /**
 * Runs an effect with a time limit and represents only the timeout case as
 * `Option.none`.
@@ -18819,6 +18900,31 @@ const repeat = repeat$1;
 */
 const withTracerEnabled = withTracerEnabled$1;
 /**
+* Adds an annotation to the current span if available.
+*
+* **Example** (Annotating the current span)
+*
+* ```ts import.meta.vitest
+* import { Effect } from "effect"
+*
+* const program = Effect.gen(function*() {
+*   yield* Effect.annotateCurrentSpan("userId", "123")
+*   yield* Effect.annotateCurrentSpan({
+*     operation: "user-lookup"
+*   })
+*   return "success"
+* })
+*
+* const traced = Effect.withSpan(program, "user-operation")
+* Effect.runSync(traced) // => "success"
+* ```
+*
+* @stability stable
+* @category tracing
+* @since 2.0.0
+*/
+const annotateCurrentSpan = annotateCurrentSpan$1;
+/**
 * Create a new span for tracing, and automatically close it when the effect
 * completes.
 *
@@ -19534,6 +19640,31 @@ const log$1 = /*#__PURE__*/ logWithLevel();
 */
 const logFatal = /*#__PURE__*/ logWithLevel("Fatal");
 /**
+* Logs one or more messages at the WARNING level.
+*
+* **Example** (Logging warnings)
+*
+* ```ts import.meta.vitest
+* import { Effect, Logger } from "effect"
+* const output: Array<unknown> = []
+*
+* const program = Effect.gen(function*() {
+*   yield* Effect.logWarning("API rate limit approaching")
+* })
+*
+* const logger = Logger.make<unknown, void>(({ logLevel, message }) => {
+*   void output.push(`${logLevel}: ${Array.isArray(message) ? message.map(String).join(" ") : String(message)}`)
+* })
+* Effect.runSync(Effect.provide(program, Logger.layer([logger])))
+* output // => ["Warn: API rate limit approaching"]
+* ```
+*
+* @stability stable
+* @category logging
+* @since 2.0.0
+*/
+const logWarning = /*#__PURE__*/ logWithLevel("Warn");
+/**
 * Logs one or more messages at the ERROR level.
 *
 * **Example** (Logging errors)
@@ -27817,7 +27948,7 @@ const compose = /*#__PURE__*/ dual(2, (self, other) => {
 	if (other._tag === "Passthrough") return self;
 	switch (self._tag) {
 		case "Transform": switch (other._tag) {
-			case "Transform": return transform$2((input) => other.transform(self.transform(input)));
+			case "Transform": return transform$3((input) => other.transform(self.transform(input)));
 			case "TransformOptional": return transformOptional((input) => other.transform(map$11(input, self.transform)));
 			case "TransformEffect": return transformEffect$1((input, options) => other.transform(self.transform(input), options));
 			case "TransformOptionalEffect": return composeOptionalEffect(self, other);
@@ -27879,7 +28010,7 @@ function passthrough$1() {
 * @category transforming
 * @since 4.0.0
 */
-function transform$2(f) {
+function transform$3(f) {
 	return makeGetter({
 		_tag: "Transform",
 		transform: f
@@ -28006,7 +28137,7 @@ function transformOptionalEffect(f) {
 * @since 4.0.0
 */
 function String$8() {
-	return transform$2(globalThis.String);
+	return transform$3(globalThis.String);
 }
 /**
 * Coerces any value to a `number` using the global `Number()` constructor.
@@ -28037,7 +28168,7 @@ function String$8() {
 * @since 4.0.0
 */
 function Number$4() {
-	return transform$2(globalThis.Number);
+	return transform$3(globalThis.Number);
 }
 function parseJson(options) {
 	return transformEffect$1((input, parseOptions) => try_({
@@ -28127,7 +28258,7 @@ function splitKeyValue$1(options) {
 	const keyValueSeparator = options?.keyValueSeparator ?? "=";
 	const trim = options?.trim ?? false;
 	const keepEmptyValues = options?.keepEmptyValues ?? false;
-	return transform$2((input) => input.split(separator).reduce((acc, pair) => {
+	return transform$3((input) => input.split(separator).reduce((acc, pair) => {
 		let key;
 		let value;
 		if (keyValueSeparator === "") {
@@ -28181,7 +28312,7 @@ function splitKeyValue$1(options) {
 function joinKeyValue(options) {
 	const separator = options?.separator ?? ",";
 	const keyValueSeparator = options?.keyValueSeparator ?? "=";
-	return transform$2((input) => Object.entries(input).map(([key, value]) => `${key}${keyValueSeparator}${value}`).join(separator));
+	return transform$3((input) => Object.entries(input).map(([key, value]) => `${key}${keyValueSeparator}${value}`).join(separator));
 }
 /**
 * Splits a string into an array of strings by a separator.
@@ -28214,7 +28345,7 @@ function joinKeyValue(options) {
 */
 function split(options) {
 	const separator = options?.separator ?? ",";
-	return transform$2((input) => input === "" ? [] : input.split(separator));
+	return transform$3((input) => input === "" ? [] : input.split(separator));
 }
 /**
 * Encodes a `Uint8Array` or string to a Base64 string.
@@ -28242,7 +28373,7 @@ function split(options) {
 * @since 4.0.0
 */
 function encodeBase64() {
-	return transform$2(encode);
+	return transform$3(encode);
 }
 /**
 * Decodes a Base64 string to a `Uint8Array`.
@@ -28297,7 +28428,7 @@ function decodeBase64() {
 * @since 4.0.0
 */
 function encodeUriComponent() {
-	return transform$2(encodeURIComponent);
+	return transform$3(encodeURIComponent);
 }
 /**
 * Decodes a URI component encoded string using `decodeURIComponent`.
@@ -28538,8 +28669,8 @@ function transformEffect(options) {
 * @category transforming
 * @since 3.10.0
 */
-function transform$1(options) {
-	return new Transformation(transform$2(options.decode), transform$2(options.encode));
+function transform$2(options) {
+	return new Transformation(transform$3(options.decode), transform$3(options.encode));
 }
 /**
 * Transforms a string into a record of key-value pairs and
@@ -28663,7 +28794,7 @@ const makeEncodeDefect = (options) => {
 };
 const decodeDefect = (input) => isJsonError(input) ? decodeJsonError(input) : input;
 /** @internal */
-const defectFromJson = (options) => transform$1({
+const defectFromJson = (options) => transform$2({
 	decode: decodeDefect,
 	encode: makeEncodeDefect(options)
 });
@@ -29104,7 +29235,7 @@ const Undefined$1 = class extends ASTNodeImpl {
 		return "undefined";
 	}
 };
-const undefinedToNull = /*#__PURE__*/ new Link(null_, /*#__PURE__*/ new Transformation(/*#__PURE__*/ transform$2(() => void 0), /*#__PURE__*/ transform$2(() => null)));
+const undefinedToNull = /*#__PURE__*/ new Link(null_, /*#__PURE__*/ new Transformation(/*#__PURE__*/ transform$3(() => void 0), /*#__PURE__*/ transform$3(() => null)));
 const undefined_ = /*#__PURE__*/ new Undefined$1();
 /**
 * Constructs a {@link Void}.
@@ -29268,7 +29399,7 @@ const Literal$1 = class extends ASTNodeImpl {
 };
 function literalToString(ast) {
 	const literalAsString = globalThis.String(ast.literal);
-	return replaceEncoding(ast, [new Link(new Literal$1(literalAsString), new Transformation(transform$2(() => ast.literal), transform$2(() => literalAsString)))]);
+	return replaceEncoding(ast, [new Link(new Literal$1(literalAsString), new Transformation(transform$3(() => ast.literal), transform$3(() => literalAsString)))]);
 }
 /**
 * Constructs a {@link String}.
@@ -30335,7 +30466,7 @@ function isFinite(annotations) {
 }
 /** @internal */
 const finite = /*#__PURE__*/ appendChecks(number, [/*#__PURE__*/ isFinite()]);
-const numberToJson = /*#__PURE__*/ new Link(/*#__PURE__*/ new Union$1([finite, nonFiniteLiterals]), /*#__PURE__*/ new Transformation(/*#__PURE__*/ Number$4(), /*#__PURE__*/ transform$2((n) => globalThis.Number.isFinite(n) ? n : globalThis.String(n))));
+const numberToJson = /*#__PURE__*/ new Link(/*#__PURE__*/ new Union$1([finite, nonFiniteLiterals]), /*#__PURE__*/ new Transformation(/*#__PURE__*/ Number$4(), /*#__PURE__*/ transform$3((n) => globalThis.Number.isFinite(n) ? n : globalThis.String(n))));
 /**
 * Creates a {@link Filter} that validates strings by running `RegExp.test`.
 *
@@ -31567,9 +31698,9 @@ function toCodecStringTreeASTStep(ast, recur, onMissingAnnotation) {
 	}
 	return ast;
 }
-const nullToString = /*#__PURE__*/ new Link(/*#__PURE__*/ new Literal$1("null"), /*#__PURE__*/ new Transformation(/*#__PURE__*/ transform$2(() => null), /*#__PURE__*/ transform$2(() => "null")));
-const booleanToString = /*#__PURE__*/ new Link(/*#__PURE__*/ new Union$1([/*#__PURE__*/ new Literal$1("true"), /*#__PURE__*/ new Literal$1("false")]), /*#__PURE__*/ new Transformation(/*#__PURE__*/ transform$2((s) => s === "true"), /*#__PURE__*/ String$8()));
-const arrayFromSingleTransformation = /*#__PURE__*/ new Transformation(/*#__PURE__*/ transform$2((input) => typeof input === "string" ? [input] : input), /*#__PURE__*/ passthrough$1());
+const nullToString = /*#__PURE__*/ new Link(/*#__PURE__*/ new Literal$1("null"), /*#__PURE__*/ new Transformation(/*#__PURE__*/ transform$3(() => null), /*#__PURE__*/ transform$3(() => "null")));
+const booleanToString = /*#__PURE__*/ new Link(/*#__PURE__*/ new Union$1([/*#__PURE__*/ new Literal$1("true"), /*#__PURE__*/ new Literal$1("false")]), /*#__PURE__*/ new Transformation(/*#__PURE__*/ transform$3((s) => s === "true"), /*#__PURE__*/ String$8()));
+const arrayFromSingleTransformation = /*#__PURE__*/ new Transformation(/*#__PURE__*/ transform$3((input) => typeof input === "string" ? [input] : input), /*#__PURE__*/ passthrough$1());
 const isCodecArrayFromSingleLink = (link) => link.transformation === arrayFromSingleTransformation;
 const toCodecStringTreeAST = /*#__PURE__*/ makeCodecDerivation((ast, recur) => toCodecStringTreeASTStep(ast, recur, (ast) => {
 	throw new globalThis.Error("Missing structural codec for StringTree", { cause: ast });
@@ -32894,8 +33025,8 @@ function Literal(literal) {
 		literal,
 		transform(to) {
 			return out.pipe(decodeTo(Literal(to), {
-				decode: transform$2(() => to),
-				encode: transform$2(() => literal)
+				decode: transform$3(() => to),
+				encode: transform$3(() => literal)
 			}));
 		}
 	});
@@ -33278,7 +33409,7 @@ const FalseLiterals = /*#__PURE__*/ Literals([
 	"n"
 ]);
 /** @internal */
-const BooleanLiterals = /*#__PURE__*/ Literals([...TrueLiterals.literals, ...FalseLiterals.literals]).pipe(/*#__PURE__*/ decodeTo(Boolean$5, /*#__PURE__*/ transform$1({
+const BooleanLiterals = /*#__PURE__*/ Literals([...TrueLiterals.literals, ...FalseLiterals.literals]).pipe(/*#__PURE__*/ decodeTo(Boolean$5, /*#__PURE__*/ transform$2({
 	decode: (value) => value === "true" || value === "yes" || value === "on" || value === "1" || value === "y",
 	encode: (value) => value ? "true" : "false"
 })));
@@ -34111,7 +34242,7 @@ function CauseReason(error, defect) {
 				_tag: Literal("Interrupt"),
 				fiberId: UndefinedOr(Finite)
 			})
-		]), transform$1({
+		]), transform$2({
 			decode: (e) => {
 				switch (e._tag) {
 					case "Fail": return makeFailReason(e.error);
@@ -34185,7 +34316,7 @@ function Cause(error, defect) {
 			importDeclarations: [`import * as Cause from "effect/Cause"`]
 		}),
 		expected: "Cause",
-		toCodec: ([error, defect]) => link$1()(ArraySchema(CauseReason(error, defect)), transform$1({
+		toCodec: ([error, defect]) => link$1()(ArraySchema(CauseReason(error, defect)), transform$2({
 			decode: fromReasons,
 			encode: ({ reasons: failures }) => failures
 		}))
@@ -34245,7 +34376,7 @@ function Exit(value, error, defect) {
 		}), Struct({
 			_tag: Literal("Failure"),
 			cause: Cause(error, defect)
-		})]), transform$1({
+		})]), transform$2({
 			decode: (e) => e._tag === "Success" ? succeed$8(e.value) : failCause$4(e.cause),
 			encode: (exit) => isSuccess(exit) ? {
 				_tag: "Success",
@@ -34345,7 +34476,7 @@ function makeClassTrusted(self, fields) {
 	} });
 }
 function getClassTransformation(self) {
-	return new Transformation(transform$2((input) => makeClassTrusted(self, input)), passthrough$1());
+	return new Transformation(transform$3((input) => makeClassTrusted(self, input)), passthrough$1());
 }
 function getClassTypeId(identifier) {
 	return `~effect/Schema/Class/${identifier}`;
@@ -41224,7 +41355,7 @@ function Array$1(value, pathOrOptions, options) {
 	const separator = resolvedOptions?.separator ?? ",";
 	return schema$1(Union([String$6.pipe(decodeTo(toCodecStringTree(array), {
 		decode: split(resolvedOptions),
-		encode: compose(passthrough$1({ strict: false }), transform$2((input) => input.join(separator)))
+		encode: compose(passthrough$1({ strict: false }), transform$3((input) => input.join(separator)))
 	})), array]), hasPath ? pathOrOptions : void 0);
 }
 function Record(key, value, pathOrOptions, options) {
@@ -45584,6 +45715,18 @@ const TypeId$13 = "~effect/http/HttpClient";
 */
 const HttpClient = /*#__PURE__*/ Service$1("effect/HttpClient");
 /**
+* Transforms a client by wrapping the response effect for each request.
+*
+* **Details**
+*
+* The transformation receives both the response effect and the original request, allowing it to change success, error, and environment behavior.
+*
+* @stability unstable
+* @category mapping
+* @since 4.0.0
+*/
+const transform$1 = /*#__PURE__*/ dual(2, (self, f) => makeWith(flatMap$2((request) => f(self.postprocess(succeed$5(request)), request)), self.preprocess));
+/**
 * Transforms a client by applying an effectful transformation to each response effect.
 *
 * @stability unstable
@@ -45737,6 +45880,77 @@ const retryTransient = /*#__PURE__*/ dual(2, (self, options) => {
 		times
 	})));
 });
+/**
+* Fails requests that do not receive a response within the given duration.
+*
+* **When to use**
+*
+* Use to configure a timeout once on the client, for example when providing
+* the `HttpClient` service, while keeping the standard `HttpClientError` error
+* model.
+*
+* **Details**
+*
+* A timed out request is interrupted and fails with an `HttpClientError` whose
+* reason is a `TransportError` with a `Cause.TimeoutError` cause.
+* `retryTransient` treats it as transient. Interrupting a request aborts the
+* underlying transport, unless the request is attached to a scope with
+* `withScope`, in which case it stays open until the scope closes.
+*
+* The timer starts after request preprocessing and covers everything the
+* wrapped client does to produce a response. For a plain client this ends when
+* the response headers arrive, but response middleware applied before
+* `timeout`, such as `tap` or `retryTransient`, runs inside the budget,
+* including any body reads it performs. Composition order therefore decides
+* how it interacts with retries: applying `timeout` before `retryTransient`
+* gives each attempt its own budget, while applying it after bounds the whole
+* retry loop.
+*
+* **Gotchas**
+*
+* Body reads outside the timed client are not covered, including those made
+* by response middleware applied after `timeout` and by consumers of the
+* `HttpClient` service. Apply a separate timeout to body reads such as
+* `response.json` or `response.stream` when needed.
+*
+* **Example** (Timing out each attempt)
+*
+* ```ts
+* import { Effect, Layer } from "effect"
+* import { FetchHttpClient, HttpClient } from "effect/http"
+*
+* const TimedHttpClient = Layer.effect(
+*   HttpClient.HttpClient,
+*   Effect.map(
+*     HttpClient.HttpClient,
+*     HttpClient.timeout("5 seconds")
+*   )
+* ).pipe(Layer.provide(FetchHttpClient.layer))
+*
+* const program = Effect.gen(function*() {
+*   const client = (yield* HttpClient.HttpClient).pipe(
+*     HttpClient.retryTransient({ times: 3 })
+*   )
+*   return yield* client.get("https://example.com")
+* }).pipe(Effect.provide(TimedHttpClient))
+* ```
+*
+* @stability unstable
+* @category error handling
+* @since 4.1.0
+*/
+const timeout = /*#__PURE__*/ dual(2, (self, duration) => {
+	const decoded = fromInputUnsafe$1(duration);
+	const description = `timed out after ${format$1(decoded)}`;
+	return transform$1(self, (effect, request) => timeoutOrElse(effect, {
+		duration: decoded,
+		orElse: () => fail$7(new HttpClientError({ reason: new TransportError({
+			request,
+			cause: new TimeoutError(`Operation ${description}`),
+			description
+		}) }))
+	}));
+});
 const parseRetryAfter = (nowMillis, value) => {
 	if (value === void 0) return;
 	const retryAfter = parseRetryAfter$1(value);
@@ -54589,7 +54803,7 @@ function withCycleGuard(target) {
 	return decodeTo(declareConstructor()([type], ([type]) => (input, ast, options) => {
 		if (isObjectOrArray(input) && decoded.delete(input)) return succeed$5(input);
 		return isCyclic(input) ? fail$7(new InvalidType(ast, input, options)) : decodeUnknownEffect$1(type)(input, options);
-	}, { identifier: "acyclic value" }), transform$1({
+	}, { identifier: "acyclic value" }), transform$2({
 		decode: (value) => {
 			if (isObjectOrArray(value)) decoded.add(value);
 			return value;
@@ -69706,7 +69920,7 @@ const Port = String$6.check(isPattern(/^\d{1,5}$/u), makeFilter((value) => exist
 const AppVersion = String$6.check(isPattern(/^0\.1\.\d+$/u));
 const RUNTIME_PATH = "/api/runtime";
 const RuntimeConfig = Struct({
-	auth: optionalKey(String$6),
+	auth: optionalKey(Origin),
 	name: String$6,
 	traces: String$6,
 	version: AppVersion
@@ -69772,20 +69986,6 @@ const Service = () => (id, options) => {
 	ServiceClass_.requiredForClient = options?.requiredForClient ?? false;
 	return ServiceClass;
 };
-/**
-* Provides the client-side implementation for an RPC middleware service,
-* capturing the layer's environment and merging it into each middleware
-* invocation.
-*
-* @stability unstable
-* @category layers
-* @since 4.0.0
-*/
-const layerClient = (tag, service) => effectContext(gen(function* () {
-	const services = (yield* context()).pipe(omit$1(Scope));
-	const middleware = isEffect(service) ? yield* service : service;
-	return makeUnsafe$9(/* @__PURE__ */ new Map([[`${tag.key}/Client`, (options) => updateContext(middleware(options), (requestContext) => merge$4(services, requestContext))]]));
-}));
 // ../../node_modules/.pnpm/effect@4.1.2/node_modules/effect/dist/observability/OtlpExporter.js
 /**
 * Shared batch exporter for OTLP/HTTP observability modules.
@@ -70470,8 +70670,9 @@ const SpanKind = {
 };
 // ../../packages/runtime/src/telemetry.ts
 function layerOtlp(serviceName, url, runtime, version) {
-	return unwrap$7(gen(function* () {
+	return pipe(unwrap$7(gen(function* () {
 		const start = `${yield* currentTimeNanos}`;
+		const redacted = yield* CurrentRedactedNames;
 		const resource = {
 			attributes: {
 				"scope.run.started_unix_nano": start,
@@ -70482,14 +70683,28 @@ function layerOtlp(serviceName, url, runtime, version) {
 			serviceVersion: getOrUndefined$1(liftPredicate(version, (current) => current !== "0.1.0"))
 		};
 		return pipe(mergeAll$1(layer({
-			exportInterval: "250 millis",
 			resource,
 			url: new URL("/v1/traces", url).href
 		}), layer$1({
-			exportInterval: "250 millis",
 			resource,
 			url: new URL("/v1/logs", url).href
-		})), provide$2([layerJson, layer$12]));
+		}), succeed$6(CurrentRedactedNames)([
+			...redacted,
+			"code",
+			"state",
+			"request",
+			"access_token",
+			"refresh_token",
+			"id_token",
+			"client_secret",
+			"client_assertion",
+			"code_verifier",
+			"session",
+			"token"
+		])), provide$2([layerJson, layer$12]));
+	})), catchCause$2((cause) => {
+		if (hasInterrupts(cause)) return effectDiscard(interrupt$1);
+		return effectDiscard(logWarning("Telemetry is unavailable"));
 	}));
 }
 // ../../packages/runtime/src/auth/lib/utils.ts
@@ -70506,15 +70721,15 @@ gen(function* () {
 	if (yield* localAuth) return yield* withDefault$2(listed, ["0"]);
 	return yield* listed;
 });
+function failureOptions(error, status) {
+	if (is(AuthError)(error) && error.error === "temporarily_unavailable") return {
+		headers: { "retry-after": "5" },
+		status: 503
+	};
+	return { status };
+}
 var CurrentUser = class extends Service$1()("@deslop/runtime/auth/lib/utils/CurrentUser") {};
-var RpcAuth = class RpcAuth extends Service()("@deslop/runtime/auth/lib/utils/RpcAuth", { error: AuthError }) {
-	static layerClient = (token) => layerClient(RpcAuth, (options) => gen(function* () {
-		return yield* options.next({
-			...options.request,
-			headers: set$1(options.request.headers, "authorization", `Bearer ${yield* token}`)
-		});
-	}));
-};
+var RpcAuth = class extends Service()("@deslop/runtime/auth/lib/utils/RpcAuth", { error: AuthError }) {};
 // ../../packages/runtime/src/auth/service.ts
 function rejected(message) {
 	return mapError$2((cause) => {
@@ -70538,7 +70753,10 @@ const unavailable = text("The authorization service is temporarily unavailable;
 	status: 503
 });
 var Auth = class Auth extends Service$1()("@deslop/runtime/auth/service/Auth") {
-	static makeContext = (auth) => pipe(make$70(Auth, auth), add$1(RpcAuth, RpcAuth.of((effect, request) => pipe(auth.user(request.headers), flatMap$2((user) => raceFirst(provideService(effect, CurrentUser, user), pipe(delay(auth.user(request.headers), "5 minutes"), retry({ while: (error) => error.error === "temporarily_unavailable" }), forever)))))));
+	static makeContext = (auth) => pipe(make$70(Auth, auth), add$1(RpcAuth, RpcAuth.of((effect, request) => pipe(auth.user(request.headers), tap$1(() => {
+		if (isStreamSchema(request.rpc.successSchema)) return annotateCurrentSpan("rpc.stream", true);
+		return void_$1;
+	}), flatMap$2((user) => raceFirst(provideService(effect, CurrentUser, user), pipe(delay(auth.user(request.headers), "5 minutes"), retry({ while: (error) => error.error === "temporarily_unavailable" }), forever)))))));
 	static layer = effectContext(gen(function* () {
 		if (yield* localAuth) return Auth.makeContext(Auth.of({
 			access: developer,
@@ -70551,13 +70769,13 @@ var Auth = class Auth extends Service$1()("@deslop/runtime/auth/service/Auth") {
 			return yield* pipe(client.get(new URL(VERIFY_PATH, issuer).href, {
 				headers: { authorization: headers["authorization"] ?? "" },
 				urlParams: { resource: audience }
-			}), flatMap$2(schemaBodyJson(User)), timeout("10 seconds"));
+			}), flatMap$2(schemaBodyJson(User)), timeout$1("10 seconds"));
 		}, rejected("Sign in first"));
 		return Auth.makeContext(Auth.of({
 			access,
 			user: fn("Auth.user")(function* (headers) {
 				if (isSome(get$3(headers, "authorization"))) return yield* access(headers, canonical);
-				return yield* pipe(client.get(new URL(SESSION_PATH, issuer).href, { headers: { cookie: headers["cookie"] ?? "" } }), flatMap$2(schemaBodyJson(User)), timeout("10 seconds"));
+				return yield* pipe(client.get(new URL(SESSION_PATH, issuer).href, { headers: { cookie: headers["cookie"] ?? "" } }), flatMap$2(schemaBodyJson(User)), timeout$1("10 seconds"));
 			}, rejected("Sign in first"))
 		}));
 	}));
@@ -70604,7 +70822,7 @@ const dataDirectory = gen(function* () {
 	});
 	return directory;
 });
-fnUntraced(function* (name) {
+const tool = fnUntraced(function* (name) {
 	const fs = yield* FileSystem;
 	const path = yield* Path$1;
 	const version = (yield* packageMetadata).version;
@@ -70621,6 +70839,9 @@ fnUntraced(function* (name) {
 	yield* forEach$1(filter$2(yield* fs.readDirectory(tools), (entry) => entry !== version), (entry) => fs.remove(path.join(tools, entry), { recursive: true }), { concurrency: 1 });
 	return target;
 });
+var ToolPath = class extends Service$1()("@deslop/runtime/server/ToolPath") {
+	static layer = succeed$6(this, tool);
+};
 const guard = make$19((app) => gen(function* () {
 	const request = yield* HttpServerRequest;
 	const host = request.headers["host"] ?? "";
@@ -70654,7 +70875,7 @@ function layerKeyValueStore(directory) {
 				return pipe(gen(function* () {
 					if (isString$2(value)) yield* fs.writeFileString(`${target}.tmp`, value, { mode: 384 });
 					else yield* fs.writeFile(`${target}.tmp`, value, { mode: 384 });
-				}), andThen(fs.rename(`${target}.tmp`, target)), withPermit(writes), uninterruptible, mapError$2((cause) => new KeyValueStoreError({
+				}), andThen(fs.rename(`${target}.tmp`, target)), uninterruptible, withPermit(writes), mapError$2((cause) => new KeyValueStoreError({
 					cause,
 					key,
 					message: "Cannot save the value",
@@ -70665,7 +70886,15 @@ function layerKeyValueStore(directory) {
 	})), provide$2(layerFileSystem(directory)));
 }
 unwrap$7(map$5(dataDirectory, layerKeyValueStore));
-const layerProtocol = mergeAll$1(layerSchemaBinary(), succeed$6(MaxBodySize)(mebibytes(10)));
+const layerProtocol = mergeAll$1(layerSchemaBinary(), succeed$6(MaxBodySize)(mebibytes(10)), effect(TracerDisabledWhen, map$5(TracerDisabledWhen, (previous) => (request) => {
+	const path = headNonEmpty(split$1(request.url, "?"));
+	return previous(request) || path === "/api/rpc" && toLowerCase(request.headers["upgrade"] ?? "") === "websocket" || startsWith("/assets/")(path) || contains([
+		"/icon",
+		"/favicon.ico",
+		"/apple-touch-icon.png",
+		"/manifest.webmanifest"
+	], path);
+})));
 const layerTelemetry = unwrap$7(gen(function* () {
 	const metadata = yield* packageMetadata;
 	return match$7(yield* option(String$5("OTEL_URL")), {
@@ -70678,6 +70907,7 @@ const layerRoutes = use((router) => gen(function* () {
 	const canonical = new URL(yield* String$5("APP_URL")).origin;
 	const issuer = yield* option(String$5("AUTH_URL"));
 	const traces = yield* pipe(String$5("OTEL_URL"), withDefault$2(""));
+	const metadata = yield* cached(packageMetadata);
 	const toIssuer = fnUntraced(function* (search) {
 		const request = yield* HttpServerRequest;
 		const next = filter$3(liftThrowable(() => new URL(new URL(request.url, canonical).searchParams.get("next") ?? canonical, canonical))(), (url) => url.origin === canonical);
@@ -70693,21 +70923,22 @@ const layerRoutes = use((router) => gen(function* () {
 		});
 	});
 	yield* router.add("GET", RUNTIME_PATH, gen(function* () {
+		const release = yield* metadata;
 		return yield* schemaJson(RuntimeConfig)({
 			...match$7(issuer, {
 				onNone: () => ({}),
 				onSome: (origin) => ({ auth: origin })
 			}),
-			name: yield* appName,
+			name: replace("@deslop/", "")(release.name),
 			traces,
-			version: (yield* packageMetadata).version
+			version: release.version
 		});
 	}));
 	yield* router.add("GET", "/auth/sign-in", toIssuer({}));
 	yield* router.add("GET", "/auth/sign-out", toIssuer({ "sign-out": "" }));
 	yield* router.add("GET", "/auth/user", gen(function* () {
 		const user = yield* result(auth.user((yield* HttpServerRequest).headers));
-		if (isFailure$1(user)) return empty({ status: 401 });
+		if (isFailure$1(user)) return empty(failureOptions(user.failure, 401));
 		return yield* schemaJson(Account)({
 			...user.success,
 			signOut: isSome(issuer)
@@ -70716,14 +70947,14 @@ const layerRoutes = use((router) => gen(function* () {
 }));
 const layerAnnounce = effectDiscard(gen(function* () {
 	const origin = new URL(yield* String$5("APP_URL")).origin;
-	const client = filterStatusOk(yield* HttpClient);
+	const client = pipe(yield* HttpClient, filterStatusOk, timeout("10 seconds"), retryTransient({
+		schedule: spaced("1 minute"),
+		times: 60
+	}));
 	yield* match$7(yield* option(String$5("AUTH_URL")), {
 		onNone: () => void_$1,
 		onSome: fnUntraced(function* (issuer) {
-			yield* pipe(post(new URL(APPS_PATH, issuer).href), bodyJsonUnsafe({ origin }), client.execute, delay("2 seconds"), retry({
-				schedule: spaced("1 minute"),
-				times: 60
-			}), ignore$1({
+			yield* pipe(post(new URL(APPS_PATH, issuer).href), bodyJsonUnsafe({ origin }), client.execute, delay("2 seconds"), ignore$1({
 				log: "Warn",
 				message: "Auth did not list this app"
 			}), forkScoped);
@@ -70742,11 +70973,10 @@ const layerWeb = unwrap$7(gen(function* () {
 	if (!(yield* (yield* FileSystem).exists((yield* Path$1).join(client, "index.html")))) return empty$8;
 	const name = capitalize(yield* appName);
 	return mergeAll$1(add("GET", MANIFEST_PATH, succeed$5(jsonUnsafe({
-		background_color: "#0a0a0a",
+		background_color: "#0d0c0c",
 		display: "standalone",
 		icons: [{
 			purpose: "any",
-			sizes: "512x512",
 			src: "/apple-touch-icon.png",
 			type: "image/png"
 		}],
@@ -70755,7 +70985,7 @@ const layerWeb = unwrap$7(gen(function* () {
 		scope: "/",
 		short_name: name,
 		start_url: "/",
-		theme_color: "#0a0a0a"
+		theme_color: "#0d0c0c"
 	}, {
 		contentType: "application/manifest+json",
 		headers: { "cache-control": "no-cache" }
@@ -70804,7 +71034,7 @@ const execute = fnUntraced(function* (command, args) {
 	}, { concurrency: "unbounded" });
 	if (result.code !== 0) return yield* AppError.make({ message: `${command} failed: ${result.stderr}` });
 	return result.stdout;
-});
+}, scoped);
 function systemctl(...args) {
 	return execute("systemctl", ["--user", ...args]);
 }
@@ -70854,7 +71084,7 @@ function status(name) {
 	return systemctl("show", `deslop-${name}.service`, "--property=LoadState,ActiveState,SubState,MainPID");
 }
 function restart(name) {
-	return pipe(systemctl("restart", `deslop-${name}.service`), timeout("30 seconds"));
+	return pipe(systemctl("restart", `deslop-${name}.service`), timeout$1("30 seconds"));
 }
 // ../../packages/runtime/src/cli/update.ts
 const serviceDirectory = fnUntraced(function* (name) {
@@ -70878,7 +71108,7 @@ const update$1 = fnUntraced(function* (name) {
 	const path = yield* Path$1;
 	const root = yield* serviceDirectory(name);
 	const running = (yield* decodeEffect(fromJsonString(Struct({ version: AppVersion })))(yield* fs.readFileString(path.join(root, "current", "package.json")))).version;
-	const latest = (yield* pipe(filterStatusOk(yield* HttpClient).get(`https://registry.npmjs.org/@deslop%2f${name}/latest`), flatMap$2(schemaBodyJson(Struct({ version: AppVersion }))), timeout("15 seconds"))).version;
+	const latest = (yield* pipe(filterStatusOk(yield* HttpClient).get(`https://registry.npmjs.org/@deslop%2f${name}/latest`), flatMap$2(schemaBodyJson(Struct({ version: AppVersion }))), timeout$1("15 seconds"))).version;
 	if (latest === running) return `${name} ${running} is current\n`;
 	const npm = path.resolve(path.dirname(execPath), "../lib/node_modules/npm/bin/npm-cli.js");
 	if (!(yield* fs.exists(npm))) return yield* AppError.make({ message: "This Node runtime does not include npm; install Node with Vite+" });
@@ -70895,7 +71125,7 @@ const update$1 = fnUntraced(function* (name) {
 		"--prefer-online",
 		"--registry=https://registry.npmjs.org",
 		`@deslop/${name}@${latest}`
-	]), timeout("5 minutes"));
+	]), timeout$1("5 minutes"));
 	const previous = yield* option$1(fs.readLink(path.join(root, "current")));
 	yield* activate(name, path.join(directory, "node_modules", "@deslop", name));
 	yield* restart(name);
@@ -70904,6 +71134,7 @@ const update$1 = fnUntraced(function* (name) {
 	return `Updated ${name} from ${running} to ${latest}\n`;
 });
 // ../../packages/runtime/src/cli.ts
+const DEFAULT_HOST = "127.0.0.1";
 const SETTINGS = {
 	APP_URL: {
 		description: "Canonical origin, such as the HTTPS name a proxy serves",
@@ -70916,7 +71147,7 @@ const SETTINGS = {
 		schema: SecureOrigin
 	},
 	HOST: {
-		description: "Listen address; defaults to 127.0.0.1",
+		description: `Listen address; defaults to ${DEFAULT_HOST}`,
 		flag: "host",
 		schema: NonEmptyString
 	},
@@ -70924,23 +71155,18 @@ const SETTINGS = {
 		description: "Scope origin to export traces and logs to",
 		flag: "traces",
 		schema: Origin
-	},
-	PORT: {
-		description: "Listen port; defaults to the package's config.port",
-		flag: "port",
-		schema: Port
 	}
 };
 String$6.check(isPattern(/^\d+(?:,\d+)*$/u));
 function flagsOf(settings) {
-	return map$9(settings, (setting, key) => pipe(String$1(setting.flag), withSchema(setting.schema), withFallbackConfig(schema$1(setting.schema, key)), withDescription(setting.description), optional));
+	return map$9(settings, (setting, key) => pipe(String$1(setting.flag), withSchema(setting.schema), withFallbackConfig(schema$1(setting.schema, key)), withDescription(`${setting.description} [${key}]`), optional));
 }
-const provider = fnUntraced(function* (given) {
-	const port = given["PORT"] ?? `${(yield* packageMetadata).config.port}`;
+const provider = fnUntraced(function* (given, defaultPort) {
+	const port = given["PORT"] ?? `${defaultPort}`;
 	const url = given["APP_URL"] ?? `http://localhost:${port}`;
 	if (given["AUTH_URL"] !== void 0 && new URL(url).protocol !== "https:") return yield* AppError.make({ message: "With --auth, set --url to the app's HTTPS origin" });
 	return orElse(fromUnknown({
-		HOST: "127.0.0.1",
+		HOST: DEFAULT_HOST,
 		...given,
 		APP_URL: url,
 		PORT: port
@@ -70948,9 +71174,12 @@ const provider = fnUntraced(function* (given) {
 });
 const layerPlatform = mergeAll$1(layer$4, layer$12, layer$15);
 function server(app) {
-	return pipe(serve(pipe(mergeAll$1(app.routes, layerRoutes, layerIcon(app.icon), layerWeb, layerAnnounce), provide$2(Auth.layer)), {
+	return pipe(serve(pipe(mergeAll$1(app.routes, layerRoutes, layerIcon(app.icon), layerWeb, layerAnnounce), provide$2(match$7(fromUndefinedOr(app.middleware), {
+		onNone: () => empty$8,
+		onSome: (middleware$1) => middleware()(middleware$1).layer
+	})), provide$2(Auth.layer)), {
 		disableLogger: true,
-		middleware: (http) => guard(app.middleware?.(http) ?? http)
+		middleware: guard
 	}), provide$2(mergeAll$1(layerProtocol, match(app.telemetry === false, {
 		onFalse: () => layerTelemetry,
 		onTrue: () => empty$8
@@ -70960,21 +71189,26 @@ function output(text) {
 	return flatMap$2(Stdio, (stdio) => run$4(make$44(text), stdio.stdout()));
 }
 function runApp(app) {
-	const settings = {
-		...SETTINGS,
-		...app.settings
-	};
 	const program = gen(function* () {
 		const metadata = yield* packageMetadata;
 		const name = yield* appName;
+		const settings = {
+			...SETTINGS,
+			PORT: {
+				description: `Listen port; defaults to ${metadata.config.port}`,
+				flag: "port",
+				schema: Port
+			},
+			...app.settings
+		};
 		const root = pipe(make$8(name), withSharedFlags(flagsOf(settings)));
 		const given = map$5(root, (input) => getSomes(input));
-		return yield* pipe(root, withHandler((input) => flatMap$2(provider(getSomes(input)), (values) => provideService(server(app), ConfigProvider, values))), withSubcommands([pipe(make$8("service"), withSubcommands([
+		return yield* pipe(root, withHandler((input) => flatMap$2(provider(getSomes(input), metadata.config.port), (values) => provideService(server(app), ConfigProvider, values))), withSubcommands([pipe(make$8("service"), withSubcommands([
 			make$8("install", {}, fnUntraced(function* () {
 				const fs = yield* FileSystem;
 				const path = yield* Path$1;
 				const flags = yield* given;
-				yield* provider(flags);
+				yield* provider(flags, metadata.config.port);
 				const entry = path.join(yield* activate(name, yield* fs.realPath(packageRoot)), "dist", "server.js");
 				const args = flatten$3(collect$1(flags, (key, value) => [`--${settings[key]?.flag ?? key}`, value]));
 				yield* output(yield* install(name, [
@@ -71022,15 +71256,19 @@ const PortfolioVisitor = Struct({
 });
 const PortfolioVisitors = ArraySchema(PortfolioVisitor);
 // src/rpcs/contracts.ts
+const Guest = PortfolioVisitor.mapFields((fields) => ({
+	...fields,
+	id: fields.id.check(isPattern(/^(?!server-)/u))
+}));
 var RpcContracts = class extends make$14(make$16("portfolio.join", {
-	payload: Struct(pipe(PortfolioVisitor.fields, pick([
+	payload: Struct(pipe(Guest.fields, pick([
 		"color",
 		"id",
 		"name"
 	]))),
 	stream: true,
 	success: PortfolioVisitors
-}), make$16("portfolio.move", { payload: Struct(pipe(PortfolioVisitor.fields, pick([
+}), make$16("portfolio.move", { payload: Struct(pipe(Guest.fields, pick([
 	"color",
 	"id",
 	"x",
@@ -78442,7 +78680,7 @@ runApp({
 		handlers: RpcContracts.toLayer(gen(function* () {
 			const presence = yield* Presence;
 			return RpcContracts.of({
-				"portfolio.join": presence.join,
+				"portfolio.join": (input) => onStart(presence.join(input), annotateCurrentSpan("rpc.stream", true)),
 				"portfolio.move": presence.move
 			});
 		}))