@deslop/stash 0.1.1090 → 0.1.1091

package/dist/server.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env -S node --max-old-space-size=16384 --heapsnapshot-near-heap-limit=3 --report-on-fatalerror
-import { $ as constPong, $a as isPrivate, $c as isNoSuchElementError, $d as combine$1, $i as last$2, $l as DisablePropagation, $n as unwrap$1, $o as makeSpanScoped, $r as toEpochMillis, $s as withFiber, $t as String$1, $u as make$44, A as layer$10, Aa as badArgument, Ac as split, Ad as exists, Af as constUndefined, Ai as mapError$1, Al as TracerTimingEnabled, An as make$41, Ao as flatMap, Ar as FilterGroup, As as serviceOption, At as Boolean$2, Au as headNonEmpty, B as unwrap$4, Ba as nameServerFromInput, Bc as StackTrace, Bd as isNone, Bi as runForEach, Bl as isExit, Bn as toType, Bo as fromResult, Br as null_, Bs as timeoutOption, Bt as Finite, Bu as prepend$2, C as runMain, Ca as await_, Cc as length, Cd as getOrUndefinedUnsafe, Cf as isObject, Ci as groupedWithin, Cl as forkUnsafe$1, Cn as isGreaterThanOrEqualTo, Cr as toArrayBuffer, Cs as retry, Cu as flatMap$2, Da as interruptAllAs, Dc as replace$1, Dd as merge$1, Df as compose$1, Di as mapArray, Dl as CurrentLogAnnotations, Dn as isPattern, Do as fail$1, Dr as ChildProcessSpawner, Ds as runSync, Dt as isHttpClientError, Du as getUnsafe$1, E as layer$11, Ea as interruptAll, Ec as repeat$1, Ed as makeUnsafe$3, Ef as or$1, Ei as mapAccum, El as provide$1, En as isMinLength, Eo as exit, Er as make$40, Es as runForkWith, Et as TransportError, Eu as getSomes, F as String$2, Fa as zero, Fc as max$2, Fd as fromNullishOr, Ff as identity, Fi as orDie$1, Fl as makeUnsafe$4, Fn as tag, Fo as forever$1, Fr as Union$1, Fs as sync, Ft as Defect, Fu as last$1, G as RpcSerialization, Ga as formatUrlUnsafe, Gc as fail$4, Gd as match$1, Gi as succeed$3, Gl as effectIsExit, Gn as omit, Go as interruptible, Gr as string, Gs as uninterruptible, Gt as MutableJson, Gu as take$1, Ha as NetAddressError, Hc as combine, Hd as liftPredicate, Hl as isSuccess$1, Hn as withDecodingDefault, Ho as ignore$1, Hr as replaceChecks, Hs as transposeOption, Ht as Json, Hu as reverse, I as URL$1, Ia as Dns, Ic as parse$10, Id as fromUndefinedOr, If as pipe, Ii as pipeThroughChannel, Il as die, In as toCodecJson, Io as forkChild, Ir as decodeTo$1, Is as tap$1, It as Duration, Iu as lastNonEmpty, J as layerSchemaBinary, Ja as ipFromStringUnsafe, Jc as fromReasons, Jd as orElseSome, Ji as tap$2, Jl as forkUnsafe, Jn as CurrentRedactedNames$1, Jo as logDebug, Jr as transform$1, Js as updateService, Jt as Null, Ju as keys, K as json$1, Ka as inetAddressFromIpString, Kc as filterInterruptors, Kd as none, Ki as suspend$1, Kl as fiberEnterInterruptibleUnsafe, Kn as getReferenceKey, Ko as isEffect, Kr as toEncoded, Ks as uninterruptibleMask, Kt as Never, Ku as takeRight, L as option, La as DnsError, Ld as getOrElse, Lf as pipeArguments, Li as provideService$1, Ll as fail$3, Lo as forkIn, Lr as isNever, Ls as tapCause, Lt as Error$2, Lu as map$3, M as Port, Ma as fromInputUnsafe, Mc as toLowerCase, Md as flatMap$1, Mf as constant, Mi as mkString, Ml as doneUnsafe, Mn as mutable, Mo as fn$1, Mr as Objects, Ms as succeed$1, Mt as Class$1, Mu as isReadonlyArrayEmpty, N as Record, Na as gibibytes, Nc as trim, Nd as flatMapNullishOr, Nf as dual, Ni as mkUint8Array, Nl as into, Nn as optional$1, No as fnUntraced, Nr as PropertySignature, Ns as succeedNone, Nt as DateTimeUtc, Nu as isReadonlyArrayNonEmpty, Oa as interruptAs, Oc as replaceAll, Od as all$1, Of as constFalse, Oi as mapArrayEffect, Ol as CurrentLogSpans, On as isSchema, Oo as failCause, Or as Arrays, Os as scope, Ot as Any, Ou as groupBy, P as Redacted$1, Pa as mebibytes, Pc as trimEnd, Pd as flatten, Pf as flow, Pi as onEnd, Pl as isDeferred, Pn as optionalKey, Po as forEach, Pr as Suspend, Ps as suspend, Pt as DateTimeUtcFromString, Pu as join$1, Qa as isLoopback, Qd as String$3, Qi as unwrap$2, Qn as setAll$1, Qo as logWarning, Qr as now, Qs as whileLoop, Qt as Redacted, Qu as headUnsafe, R as schema, Ra as make$37, Rc as Clock, Rd as getOrNull, Ri as run$3, Rl as failCause$1, Rn as toEncoded$1, Ro as forkScoped, Rr as isOptional, Rs as tapError$1, Rt as Exit$1, S as make$38, Sa as makeUnsafe$5, Sc as isNonEmpty, Sd as getOrUndefined$1, Sf as isNotUndefined, Si as fromReadableStream, Sl as closeUnsafe, Sn as is$4, So as contextWith, Sr as pipeThroughDuplex, Ss as result$1, St as HttpClientError, Ta as interrupt$2, Tc as padStart, Td as make$42, Tf as isUndefined, Ti as map$2, Tl as makeUnsafe$2, Tn as isMaxLength, To as ensuring$1, Tr as fromWritable, Ts as runFork, Tt as StatusCodeError, Tu as get$6, U as withRun, Ua as formatInet, Uc as die$1, Ud as liftThrowable, Ui as runLast, Ul as succeed$4, Un as withDecodingDefaultKey, Ur as resolveDescription, Us as tryPromise, Ut as Literal$1, Uu as some$2, V as withDefault, Va as domainNameFromStringUnsafe, Vc as annotate, Vd as isSome, Vi as runForEachArray, Vl as isFailure$1, Vn as withConstructorDefault, Vo as gen, Vr as optionalKey$1, Vs as timeoutOrElse, Vt as Int, Vu as reduce, Wa as formatIp, Wd as map$4, Wi as scan, Wn as isSchemaError, Wo as interrupt, Wr as resolveIdentifier, Ws as try_, Wt as Literals, Wu as sort, X as ResponseDefectEncoded, Xa as isInetAddressV6, Xc as hasInterrupts, Xd as toArray$1, Xi as toReadableStreamEffect, Xl as onExitUnsafe, Xn as fromInput, Xo as logFatal, Xr as encode, Xs as void_, Xt as Number$2, Xu as toEntries, Y as RequestId, Ya as ipv4ToOctets, Yc as hasDies, Yd as some$1, Yi as toReadableStream, Yl as makeSpanUnsafe, Yn as empty$7, Yr as transformOptional, Ys as useSpan, Yt as NullOr, Yu as map$6, Z as constEof, Za as isLinkLocal, Zc as hasInterruptsOnly, Zd as Number$1, Zl as reportCauseUnsafe, Zn as redactUrl, Zo as logInfo, Zr as formatIso, Zs as when$2, Zt as Record$1, Zu as empty$12, _ as Organization, _c as Random$2, _d as Reference, _f as hash, _l as unwrap$3, _n as encodeEffect, _o as catchReason, _r as fromSetCookie, _s as provideContext, _u as every, a as FxConversation, aa as pipeTo, ac as zipWith, ad as isSuccess, af as contE, ai as catch_$1, al as buildWithMemoMap, an as URL$2, ao as annotateCurrentSpan, ar as empty$8, as as matchCauseEffectEager, at as isStreamSchema, au as random$1, ba as publishUnsafe, bc as includes, bf as isNotNull, bi as fromPubSub, bl as addFinalizerExit, bn as encodeUnknownEffect$1, bo as catch_, br as toSetCookieHeaders, bs as raceFirst, bt as EmptyBodyError, bu as findFirst, c as GitHubIssue, cc as forever, cd as try_$1, cf as getStackTraceLimit, ci as die$3, cl as effectDiscard, cn as Uint8ArrayFromBase64, co as asSome, cr as isRedactedName, cs as onError, ct as Collector, cu as TaggedError, d as ImageType, da as failCause$2, dd as max$1, df as Class, di as fail$2, dl as mergeAll, dn as Unknown, do as callback, dr as set$1, ds as onInterrupt, du as contains$2, ec as withFiberSucceed, ed as fail, ef as flip, ei as defaultFormatter, el as isTimeoutError, en as StringFromUriComponent, eo as isUnicast, er as fromIterable$3, es as map$1, et as ServerClient, eu as ParentSpan, f as Note, fa as make$36, fc as passthrough, fd as millis, ff as NodeInspectSymbol, fi as failCause$3, fl as provide, fn as decodeEffect, fo as catchCause, fr as setAll, fs as option$1, ft as SocketError, fu as dedupe, g as OEmbed, ga as shutdown, gd as zero$1, gf as equals, gi as fromArray, gl as sync$1, gn as decodeUnknownOption, go as catchIf, gr as empty$9, gs as provide$2, gt as fromWebSocket, gu as ensure, h as NotesError, ha as offerUnsafe, hc as catchDone, hd as toMillis, hf as redact, hi as flattenIterable, hl as succeedContext, hn as decodeUnknownEffect, hr as value$2, hs as promise, hu as empty$11, i as FileType, ic as withTracerEnabled, id as isResult, if as contA, ii as catchTags$1, il as CurrentMemoMap, in as Tuple, io as andThen, ir as CurrentRedactedNames, is as matchCauseEffect, it as getStreamSchemas, iu as nativeTracer, ja as fromInput$2, jc as startsWith, jd as filter$5, jf as constVoid, ji as mergeAll$1, jl as _await, jn as makeFilter, jo as flatMapEager, jr as Literal$2, js as sleep, ju as isArrayNonEmpty, ka as runIn, kc as slice$2, kd as contains$1, kf as constTrue, ki as mapEffect, kn as isSchemaError$1, ko as filterOrFail, kr as Filter, ks as scoped, kt as ArraySchema, ku as head, l as GitHubReadme, la as collect, lc as fromStep, ld as format$2, lf as setStackTraceLimit, li as empty$10, ll as launch, ln as UndefinedOr, lo as asVoid, lr as merge$2, ls as onExit, lt as makeCollectorUnsafe, m as NoteJson, ma as offerAll, mc as toStep, md as seconds, mf as format$1, mi as flatMap$3, ml as succeed$2, mn as decodeTo, mo as catchDefect, mr as make$43, ms as orElseSucceed, mt as SocketOpenError, mu as drop, n as Capture, na as map$5, nc as withParentSpan, nd as fromOption$1, nf as Prototype, ni as FileSystem, nl as prettyErrors, nn as TaggedError$1, no as acquireRelease, nr as fromIterable$2, ns as mapError, nt as isWrapper, nu as externalSpan, o as FxStatus, oa as make$34, oc as addDelay, od as match$3, oi as concat, ol as effect, on as URLFromString, oo as annotateLogs, or as fromInput$1, os as matchEffect, ot as spanAttributes, ou as Error$1, p as NoteId, pa as offer, pd as parts, pf as toJson, pi as filter$6, pl as provideMerge, pn as decodeSync, pr as isRedacted, ps as orDie, pu as dedupeAdjacentWith, q as layerJson$1, qa as ipFromString, qd as orElse$2, qi as takeUntil, ql as fiberEnterUninterruptibleUnsafe, qn as encodeUnknownEffect, qo as log, qr as passthrough$1, qs as updateContext, qt as NonEmptyArray, qu as has$3, r as Extraction, rc as withSpan, rd as isFailure, rf as PipeInspectableProto, ri as catchReason$1, rl as squash, ro as all, rr as get$7, rt as ClientAbort$1, ru as make$39, s as GitHubComment, sa as makeUnsafe$6, sd as succeed, sf as assignProperty, si as decodeText, sl as effectContext, sn as Uint8Array$2, so as as$1, sr as fromRecordUnsafe, ss as never, st as spanName, su as TaggedClass, t as RpcContracts, ta as fromTransform, tc as withLogSpan, td as failVoid, tf as mapInput, ti as Path, tl as makeDieReason, tn as Struct, to as unixPathAddress, tr as has$4, ts as mapEager, tt as exitSchema, tu as Tracer, u as GitHubRepo, ua as end$1, uc as isSchedule, ud as fromInputUnsafe$1, uf as BaseProto, ui as ensuring, ul as merge$3, un as Union, uo as cached, ur as remove$3, us as onExitPrimitive, ut as CloseEvent, uu as appendAll, v as Reader, va as take, vc as camelToSnake, vd as Service, vf as hasProperty, vi as fromEffect, vl as Scope, vn as encodeSync, vo as catchTag, vr as isEmpty$1, vs as provideService, vu as filter$4, wa as getCurrent, wc as match$2, wd as getUnsafe, wf as isTagged, wi as limitBytes, wl as make$35, wn as isInt, wo as die$2, wr as toUint8Array$1, wt as InvalidUrlError, wu as fromIterable$1, x as layer$12, xa as unbounded, xc as isEmpty$2, xd as get$5, xf as isNotNullish, xi as fromQueue, xl as close, xn as fromJsonString, xo as context, xr as fromReadable, xs as repeat, xt as EncodeError, xu as findFirstIndex, y as TikTokPage, ya as takeAll, yc as endsWith, yd as add$1, yf as isIterable, yi as fromIterable, yl as addFinalizer, yn as encodeTo, yo as catchTags, yr as parseHeader, ys as provideServiceEffect, yt as DecodeError, yu as filterMap, z as succeed$5, za as makeRecordUnsafe, zd as getOrUndefined, zi as runCollect, zl as interrupt$1, zn as toJsonSchemaDocument, zo as fromOption, zr as mapOrSame, zs as timeout, zu as of } from "./contracts-CdQiWFv_.mjs";
+import { $ as succeed$5, $a as badArgument, $c as split, $d as make$40, $f as isUndefined, $i as mkString, $l as CurrentLogSpans, $n as toJsonSchemaDocument, $o as flatMap, $r as Suspend, $s as serviceOption, $u as groupBy, A as SignInParams, Aa as collect, Ad as isResult, Af as Prototype, Ai as empty$10, Al as buildWithMemoMap, An as decodeUnknownOption, Ao as as$1, Ar as make$45, As as never, At as fromWebSocket, Au as random$1, Ba as takeAll, Bc as Random$2, Bd as minutes, Bf as NodeInspectSymbol, Bi as fromIterable, Bl as succeedContext, Bn as isMinLength, Bo as catchReason, Br as fromReadable, Bs as provideContext, Bt as TransportError, Bu as empty$11, C as AuthError, Ca as map$4, Cc as withFiberSucceed, Cd as headUnsafe, Cf as some$1, Ci as FileSystem, Cn as UndefinedOr, Co as isUnicast, Cr as get$7, Cs as map$1, Ct as makeCollectorUnsafe, D as OAuthTokenError, Da as make$36, Dc as withTracerEnabled, Dd as fromOption$1, Df as combine$1, Di as concat, Dl as prettyErrors, Dn as decodeSync, Do as andThen, Dr as set$3, Ds as matchCauseEffect, Du as externalSpan, E as OAuthFlow, Ea as pipeTo, Ec as withSpan, Ed as failVoid, Ef as String$3, Ei as catch_$1, El as makeDieReason, En as decodeEffect, Eo as all$1, Er as remove$3, Et as SocketError, Eu as Tracer, F as runMain, Fa as offerAll, Fc as passthrough, Fd as days, Ff as assignProperty, Fi as flatMap$3, Fl as merge$3, Fn as fromJsonString, Fo as catchCause, Fr as fromSetCookie, Fs as option$1, Ft as EncodeError, Fu as appendAll, G as Port, Ga as makeUnsafe$6, Gc as isNonEmpty, Gd as Reference, Gf as hash, Gi as limitBytes, Gl as addFinalizerExit, Gn as makeFilter, Go as contextWith, Gr as make$43, Gs as result$1, Gu as findFirst, H as layer$10, Ha as unbounded, Hc as endsWith, Hd as seconds, Hf as format$1, Hi as fromQueue, Hl as unwrap$3, Hn as isSchema, Ho as catchTags, Hr as toArrayBuffer, Hs as provideServiceEffect, Ht as Any, Hu as every, Ia as offerUnsafe, Ic as spaced, Id as format$2, If as getStackTraceLimit, Ii as flattenIterable, Il as mergeAll, In as is$4, Ir as isEmpty$1, Is as orDie, It as HttpClientError, Iu as contains$1, J as String$2, Ja as interrupt$2, Jc as padStart, Jf as isNotNull, Ji as mapArray, Jl as forkUnsafe$1, Jn as optionalKey, Jo as ensuring$1, Jr as Filter, Js as runFork, Jt as DateTimeUtcFromString, Ju as flatMap$2, K as Record, Ka as await_, Kc as length, Kd as Service, Kf as hasProperty, Ki as map$2, Kl as close, Kn as mutable, Kr as ChildProcessSpawner, Ks as retry, Kt as Class$1, Ku as findFirstIndex, La as shutdown, Lc as toStep, Ld as fromInputUnsafe$1, Lf as setStackTraceLimit, Li as fromArray, Ll as provide$1, Ln as isGreaterThanOrEqualTo, Lo as catchDefect, Lr as parseHeader, Ls as orElseSucceed, Lu as dedupe, Ma as failCause$2, Mc as fromStep, Md as match$3, Mf as contA, Mi as fail$2, Ml as effectContext, Mn as encodeSync, Mo as asVoid, Mr as stringOrRedacted, Ms as onExit, Mu as TaggedClass, N as layer$12, Na as make$38, Nc as isSchedule, Nd as succeed, Nf as contE, Ni as failCause$3, Nl as effectDiscard, Nn as encodeTo, No as cached, Nr as empty$9, Ns as onExitPrimitive, Nt as DecodeError, Nu as TaggedError, O as OAuthTokenResponse, Oa as makeUnsafe$7, Oc as zipWith, Od as getSuccess, Of as flip, Oi as decodeText, Ol as squash, On as decodeTo, Oo as annotateCurrentSpan, Or as setAll, Os as matchCauseEffectEager, Ot as SocketOpenError, Ou as make$42, P as make$41, Pa as offer, Pd as try_$1, Pi as filter$6, Pl as launch, Pn as encodeUnknownEffect$1, Po as callback, Pr as expireCookieUnsafe$1, Ps as onInterrupt, Pt as EmptyBodyError, Q as schema, Qa as runIn, Qc as slice$2, Qd as getUnsafe, Qf as isTagged, Qi as mergeAll$1, Ql as CurrentLogAnnotations, Qn as toEncoded$1, Qo as filterOrFail, Qr as PropertySignature, Qs as scoped, Qt as Exit$1, Qu as getUnsafe$1, R as layer$11, Rc as catchDone, Rd as max$1, Rf as BaseProto, Rl as provideMerge, Rn as isInt, Rr as setUnsafe$2, Rs as promise, Rt as InvalidUrlError, Ru as dedupeAdjacentWith, S as RpcAuth, Sa as fromTransform, Sc as withFiber, Sd as empty$12, Sf as orElseSome, Si as Path, Sl as hasInterruptsOnly, Sn as Uint8ArrayFromBase64, So as isPrivate, Sr as fromRecordUnsafe, Ss as makeSpanScoped, St as Collector, Su as reportCauseUnsafe, T as GitHubUser, Tc as withParentSpan, Td as fail, Tf as Number$1, Ti as catchTags$1, Tl as isTimeoutError, Tn as Unknown, To as acquireRelease, Tr as merge$2, Ts as mapError, Tu as ParentSpan, U as Crypto, Ua as make$35, Uc as includes, Ud as toMillis, Uf as redact, Ui as fromReadableStream, Ul as Scope, Un as isSchemaError$1, Uo as catch_, Ur as toUint8Array$1, Us as raceFirst, Ut as ArraySchema, Uu as filter$5, Va as publishUnsafe, Vc as camelToSnake, Vd as parts, Vf as toJson, Vi as fromPubSub, Vl as sync$1, Vn as isPattern, Vo as catchTag, Vr as pipeThroughDuplex, Vs as provideService, Vt as isHttpClientError, Vu as ensure, W as Array$1, Wa as set$2, Wc as isEmpty$2, Wd as zero$1, Wf as equals, Wi as groupedWithin, Wl as addFinalizer, Wn as make$44, Wo as context, Wr as fromWritable, Ws as repeat, Wt as Boolean$2, Wu as filterMap, X as all, Xa as interruptAllAs, Xc as replace$1, Xd as getOrUndefined$1, Xf as isNotUndefined, Xi as mapEffect, Xl as makeUnsafe$3, Xn as toCodecJson, Xo as fail$1, Xr as Literal$2, Xs as runSync, Xt as Duration, Xu as get$8, Y as URL$1, Ya as interruptAll, Yc as repeat$1, Yd as get$6, Yf as isNotNullish, Yi as mapArrayEffect, Yl as make$37, Yn as tag, Yo as exit, Yr as FilterGroup, Ys as runForkWith, Yt as Defect, Yu as fromIterable$1, Z as option, Za as interruptAs, Zc as replaceAll, Zd as getOrUndefinedUnsafe, Zf as isObject, Zi as mapError$1, Zl as provide$2, Zo as failCause, Zr as Objects, Zs as scope, Zt as Error$2, Zu as getSomes, _ as Organization, _a as toReadableStreamEffect, _c as updateService, _d as takeRight, _f as liftThrowable, _i as encode$1, _l as filterInterruptors, _o as ipFromStringUnsafe, _r as fromIterable$3, _s as logDebug, _t as ClientAbort$1, _u as fiberEnterInterruptibleUnsafe, a as FxConversation, aa as run$3, ac as tap$1, ad as join$1, af as filter$4, ai as null_, al as parse$10, an as MutableJson, ao as Dns, ap as constVoid, ar as omit, as as forkChild, at as RpcSerialization, au as isDeferred, b as AUTH_URL, ba as last$2, bc as when$2, bd as map$6, bf as none, bi as toEpochMillis, bl as hasDies, bn as URLFromString, bo as isLinkLocal, br as empty$8, bs as logInfo, bt as spanAttributes, bu as makeSpanUnsafe, c as GitHubIssue, ca as runForEachArray, cc as timeout, cd as map$3, cf as flatten, ci as resolveDescription, cl as currentTimeMillis, cn as Null, co as makeRecordUnsafe, cp as flow, cr as CurrentRedactedNames$1, cs as fromOption, ct as layerSchemaBinary, cu as fail$3, d as ImageType, da as scan, dc as transposeOption, dd as prepend$2, df as getOrElse, di as toEncoded, dl as StackTrace, dn as Record$1, do as NetAddressError, dp as pipeArguments, dr as redactUrl, ds as ignore$1, dt as constEof, du as isExit, ea as mkUint8Array, ec as sleep, ed as head, ef as makeUnsafe$4, ei as Union$1, el as startsWith, en as Finite, eo as fromInput$2, ep as or$1, er as toType, es as flatMapEager, et as unwrap$4, f as Note, fa as succeed$3, fc as tryPromise, fd as reduce, ff as getOrNull, fi as passthrough$1, fl as annotate, fn as Redacted$1, fo as formatInet, fr as setAll$1, fu as isFailure$1, g as OEmbed, ga as toReadableStream, gc as updateContext, gd as take$1, gf as liftPredicate, gi as encode, gl as fail$4, gn as TaggedError$1, go as ipFromString, gr as has$3, gs as log, gt as isWrapper, gu as effectIsExit, h as NotesError, ha as tap$2, hc as uninterruptibleMask, hd as sort, hf as isSome, hi as decode$3, hn as Struct, ho as inetAddressFromIpString, hr as fromIterable$2, hs as isEffect, ht as exitSchema, i as FileType, ia as provideService$1, ic as sync, id as isReadonlyArrayNonEmpty, if as exists, ii as mapOrSame, il as max$2, in as Literals, io as zero, ip as constUndefined, ir as isSchemaError, is as forever$1, iu as into, j as Verification, ja as end$1, jc as forever, jd as isSuccess, jf as PipeInspectableProto, ji as ensuring, jl as effect, jn as encodeEffect, jo as asSome, jr as value$2, js as onError, ju as Error$1, k as Session, kc as addDelay, kd as isFailure, kf as mapInput, ki as die$3, kl as CurrentMemoMap, kn as decodeUnknownEffect, ko as annotateLogs, kr as isRedacted, ks as matchEffect, ku as nativeTracer, l as GitHubReadme, lc as timeoutOption, lf as fromNullishOr, li as resolveIdentifier, ln as NullOr, lo as nameServerFromInput, lp as identity, lr as empty$7, ls as fromResult, lt as RequestId, lu as failCause$1, m as NoteJson, ma as takeUntil, mc as uninterruptible, md as some$2, mf as isNone, mi as transformOptional, ml as die$1, mn as StringFromUriComponent, mo as formatUrlUnsafe, mr as unwrap$1, ms as interruptible, mt as ServerClient, mu as succeed$4, n as Capture, na as orDie$1, nc as succeedNone, nd as isArrayNonEmpty, nf as all$2, ni as isNever, nl as trim, nn as Json, no as gibibytes, np as constFalse, nr as withDecodingDefault, ns as fnUntraced, nu as _await, o as FxStatus, oa as runCollect, oc as tapCause, od as last$1, of as flatMap$1, oi as optionalKey$1, on as Never, oo as DnsError, op as constant, or as getReferenceKey, os as forkIn, ot as json$1, ou as makeUnsafe$5, p as NoteId, pa as suspend$1, pc as try_, pd as reverse, pf as getOrUndefined, pi as transform$1, pl as combine, pn as String$1, po as formatIp, pr as toString$2, ps as interrupt, pt as constPong, pu as isSuccess$1, q as Redacted, qa as getCurrent, qc as match$2, qd as add$1, qf as isIterable, qi as mapAccum, ql as closeUnsafe, qn as optional$1, qo as die$2, qr as Arrays, qt as DateTimeUtc, r as Extraction, ra as pipeThroughChannel, rc as suspend, rd as isReadonlyArrayEmpty, rf as contains$2, ri as isOptional, rl as trimEnd, rn as Literal$1, ro as mebibytes, rp as constTrue, rr as withDecodingDefaultKey, rs as forEach, rt as withRun, ru as doneUnsafe, s as GitHubComment, sa as runForEach, sc as tapError$1, sd as lastNonEmpty, sf as flatMapNullishOr, si as replaceChecks, sl as Clock, sn as NonEmptyArray, so as make$39, sp as dual, sr as encodeUnknownEffect, ss as forkScoped, st as layerJson$1, su as die, t as RpcContracts, ta as onEnd, tc as succeed$1, td as headNonEmpty, tf as merge$1, ti as decodeTo$1, tl as toLowerCase, tn as Int, to as fromInputUnsafe, tp as compose$1, tr as withConstructorDefault, ts as fn$1, tt as withDefault, tu as TracerTimingEnabled, u as GitHubRepo, ua as runLast, uc as timeoutOrElse, ud as of, uf as fromUndefinedOr, ui as string, ul as IllegalArgumentError, un as Number$2, uo as domainNameFromStringUnsafe, up as pipe, ur as fromInput, us as gen, ut as ResponseDefectEncoded, uu as interrupt$1, v as Reader, vc as useSpan, vd as has$4, vf as map$5, vi as formatIso, vn as Tuple, vo as ipv4ToOctets, vr as get$9, vt as getStreamSchemas, vu as fiberEnterUninterruptibleUnsafe, w as CallbackParams, wc as withLogSpan, wd as make$46, wf as toArray$1, wi as catchReason$1, wl as isNoSuchElementError, wn as Union, wo as unixPathAddress, wr as isRedactedName, ws as mapEager, wt as CloseEvent, wu as DisablePropagation, x as CurrentUser, xc as whileLoop, xd as toEntries, xf as orElse$2, xi as defaultFormatter, xl as hasInterrupts, xn as Uint8Array$2, xo as isLoopback, xr as fromInput$1, xs as logWarning, xt as spanName, xu as onExitUnsafe, y as TikTokPage, ya as unwrap$2, yc as void_, yd as keys, yf as match$1, yi as now, yl as fromReasons, yn as URL$2, yo as isInetAddressV6, yr as CurrentRedactedNames, ys as logFatal, yt as isStreamSchema, yu as forkUnsafe, za as take, zd as millis, zf as Class, zi as fromEffect, zl as succeed$2, zn as isMaxLength, zo as catchIf, zr as toSetCookieHeaders, zs as provide$3, zt as StatusCodeError, zu as drop } from "./contracts-C1Rqhg6U.mjs";
 import { createRequire } from "node:module";
 import { Duplex, Readable, pipeline } from "node:stream";
 import * as Http from "node:http";
@@ -210,7 +210,7 @@ const empty$6 = () => {
 * @category getters
 * @since 2.0.0
 */
-const get$4 = /*#__PURE__*/ dual(2, (self, key) => {
+const get$5 = /*#__PURE__*/ dual(2, (self, key) => {
 	if (self.backing.has(key)) return some$1(self.backing.get(key));
 	else if (isSimpleKey(key)) return none();
 	const hash$2 = hash(key);
@@ -288,7 +288,7 @@ const getFromBucket = (self, bucket, key) => {
 * @category predicates
 * @since 2.0.0
 */
-const has$1 = /*#__PURE__*/ dual(2, (self, key) => isSome(get$4(self, key)));
+const has$1 = /*#__PURE__*/ dual(2, (self, key) => isSome(get$5(self, key)));
 /**
 * Sets a key-value pair in the MutableHashMap, mutating the map in place.
 * If the key already exists, its value is updated.
@@ -329,7 +329,7 @@ const has$1 = /*#__PURE__*/ dual(2, (self, key) => isSome(get$4(self, key)));
 * @category mutations
 * @since 2.0.0
 */
-const set = /*#__PURE__*/ dual(3, (self, key, value) => {
+const set$1 = /*#__PURE__*/ dual(3, (self, key, value) => {
 	if (self.backing.has(key) || isSimpleKey(key)) {
 		self.backing.set(key, value);
 		return self;
@@ -414,6 +414,151 @@ const remove$2 = /*#__PURE__*/ dual(2, (self, key_) => {
 	return self;
 });
 //#endregion
+//#region ../../node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/Ref.js
+/**
+* Stores fiber-safe mutable state inside Effect programs.
+*
+* A `Ref<A>` holds one value and exposes reads, writes, and atomic
+* transformations as effects, so state changes compose with Effect's
+* concurrency model. This module includes constructors, safe and unsafe reads,
+* set and get-and-set helpers, update and modify helpers, and conditional
+* update variants that leave the value unchanged when an `Option.none` result
+* is returned.
+*
+* @stability stable
+* @since 2.0.0
+*/
+const RefProto = {
+	["~effect/Ref"]: { _A: identity },
+	...PipeInspectableProto,
+	toJSON() {
+		return {
+			_id: "Ref",
+			ref: this.ref
+		};
+	}
+};
+/**
+* Creates a new Ref with the specified initial value (unsafe version).
+*
+* **When to use**
+*
+* Use when you need immediate synchronous construction and can guarantee
+* that creating the `Ref` outside of `Effect` is safe.
+*
+* **Gotchas**
+*
+* Prefer `Ref.make` for Effect-wrapped creation in Effect programs.
+*
+* **Example** (Creating a ref unsafely)
+*
+* ```ts import.meta.vitest
+* import { Ref } from "effect"
+*
+* const counter = Ref.makeUnsafe(0)
+* Ref.getUnsafe(counter) // => 0
+* ```
+*
+* @stability stable
+* @category constructors
+* @since 4.0.0
+*/
+const makeUnsafe$2 = (value) => {
+	const self = Object.create(RefProto);
+	self.ref = make$35(value);
+	return self;
+};
+/**
+* Creates a new Ref with the specified initial value.
+*
+* **When to use**
+*
+* Use to create a `Ref` for shared mutable state inside an Effect program.
+*
+* **Example** (Creating a ref)
+*
+* ```ts import.meta.vitest
+* import { Effect, Ref } from "effect"
+*
+* const program = Effect.gen(function*() {
+*   const ref = yield* Ref.make(42)
+*   return yield* Ref.get(ref)
+* })
+*
+* await Effect.runPromise(program) // => 42
+* ```
+*
+* @see {@link makeUnsafe} for synchronous construction outside Effect code
+*
+* @stability stable
+* @category constructors
+* @since 2.0.0
+*/
+const make$34 = (value) => sync(() => makeUnsafe$2(value));
+/**
+* Gets the current value of the Ref.
+*
+* **When to use**
+*
+* Use to read the current `Ref` value without changing it.
+*
+* **Example** (Getting the current value)
+*
+* ```ts import.meta.vitest
+* import { Effect, Ref } from "effect"
+*
+* const program = Effect.gen(function*() {
+*   const ref = yield* Ref.make(42)
+*   return yield* Ref.get(ref)
+* })
+*
+* await Effect.runPromise(program) // => 42
+* ```
+*
+* @see {@link set} for replacing the current value
+*
+* @stability stable
+* @category getters
+* @since 2.0.0
+*/
+const get$4 = (self) => sync(() => self.ref.current);
+/**
+* Sets the value of the Ref to the specified value.
+*
+* **When to use**
+*
+* Use to replace the current `Ref` value with a known value.
+*
+* **Example** (Setting a value)
+*
+* ```ts import.meta.vitest
+* import { Effect, Ref } from "effect"
+*
+* const program = Effect.gen(function*() {
+*   const ref = yield* Ref.make(0)
+*   yield* Ref.set(ref, 42)
+*   return yield* Ref.get(ref)
+* })
+*
+* const program2 = Effect.gen(function*() {
+*   const ref = yield* Ref.make(0)
+*   yield* Ref.set(ref, 100)
+*   return yield* Ref.get(ref)
+* })
+*
+* await Effect.runPromise(program) // => 42
+* await Effect.runPromise(program2) // => 100
+* ```
+*
+* @see {@link getAndSet} for setting while returning the previous value
+* @see {@link setAndGet} for setting while returning the new value
+*
+* @stability stable
+* @category mutations
+* @since 2.0.0
+*/
+const set = /*#__PURE__*/ dual(2, (self, value) => sync(() => set$2(self.ref, value)));
+//#endregion
 //#region ../../node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/http/HttpBody.js
 const TypeId$18 = "~effect/http/HttpBody";
 const HttpBodyErrorTypeId = "~effect/http/HttpBody/HttpBodyError";
@@ -631,6 +776,14 @@ const jsonSchema = (schema, options) => {
 	})), flatMap((body) => json(body, contentType)));
 };
 /**
+* Creates an `application/x-www-form-urlencoded` HTTP body from `UrlParams`.
+*
+* @stability unstable
+* @category constructors
+* @since 4.0.0
+*/
+const urlParams = (urlParams, contentType) => text$3(toString$2(fromInput(urlParams)), contentType ?? "application/x-www-form-urlencoded");
+/**
 * HTTP body variant backed by Web `FormData`.
 *
 * **Details**
@@ -763,12 +916,23 @@ const compressBody$1 = (body, algorithm, options) => {
 */
 const updateHeaders = (headers, body) => {
 	if (body._tag === "Empty" || body._tag === "FormData") return remove$3(remove$3(headers, "content-type"), "content-length");
-	headers = body.contentType === void 0 ? remove$3(headers, "content-type") : set$1(headers, "content-type", body.contentType);
-	return body.contentLength === void 0 ? remove$3(headers, "content-length") : set$1(headers, "content-length", body.contentLength.toString());
+	headers = body.contentType === void 0 ? remove$3(headers, "content-type") : set$3(headers, "content-type", body.contentType);
+	return body.contentLength === void 0 ? remove$3(headers, "content-length") : set$3(headers, "content-length", body.contentLength.toString());
 };
 //#endregion
 //#region ../../node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/http/Url.js
 /**
+* Parses and edits platform `URL` values.
+*
+* The HTTP modules use the standard `URL` object as their URL representation.
+* This module adds safe parsing and helpers that return updated copies when
+* changing credentials, host, path, protocol, query, or hash parts. Query
+* strings can also be read or updated through `UrlParams`.
+*
+* @stability unstable
+* @since 4.0.0
+*/
+/**
 * Error returned when constructing a `URL` fails.
 *
 * @stability unstable
@@ -802,6 +966,51 @@ const make$33 = (url, params, hash) => try_$1({
 const baseUrl = () => {
 	if ("location" in globalThis && globalThis.location !== void 0 && globalThis.location.origin !== void 0 && globalThis.location.pathname !== void 0) return location.origin + location.pathname;
 };
+/**
+* Parses a URL string safely into a `URL` object, returning a `Result` type for
+* error handling.
+*
+* **Details**
+*
+* This function converts a string into a `URL` object, enabling safe URL
+* parsing with built-in error handling. If the string is invalid or fails to
+* parse, this function does not throw an error; instead, it wraps the error in
+* a `IllegalArgumentError` and returns it as the `Failure` value of an
+* `Result`. The `Success` value contains the successfully parsed `URL`.
+*
+* An optional `base` parameter can be provided to resolve relative URLs. If
+* specified, the function interprets the input `url` as relative to this
+* `base`. This is especially useful when dealing with URLs that might not be
+* fully qualified.
+*
+* **Example** (Parsing absolute and relative URLs)
+*
+* ```ts import.meta.vitest
+* import { Result } from "effect"
+* import { Url } from "effect/http"
+*
+* // Parse an absolute URL
+* //
+* //      ┌─── Result<URL, IllegalArgumentError>
+* //      ▼
+* const parsed = Url.fromString("https://example.com/path")
+*
+* Result.map(parsed, (url) => url.toString()) // => Result.succeed("https://example.com/path")
+*
+* // Parse a relative URL with a base
+* const relativeParsed = Url.fromString("/relative-path", "https://example.com")
+*
+* Result.map(relativeParsed, (url) => url.toString()) // => Result.succeed("https://example.com/relative-path")
+* ```
+*
+* @stability unstable
+* @category constructors
+* @since 4.0.0
+*/
+const fromString = (url, base) => try_$1({
+	try: () => new URL(url, base),
+	catch: () => new IllegalArgumentError(`Invalid URL: "${url}"${base !== void 0 ? ` with base "${base}"` : ""}`)
+});
 //#endregion
 //#region ../../node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/http/HttpClientRequest.js
 const TypeId$17 = "~effect/http/HttpClientRequest";
@@ -919,7 +1128,7 @@ const setMethod = /*#__PURE__*/ dual(2, (self, method) => makeWith$1(method, sel
 * @category combinators
 * @since 4.0.0
 */
-const setHeader$1 = /*#__PURE__*/ dual(3, (self, key, value) => makeWith$1(self.method, self.url, self.urlParams, self.hash, set$1(self.headers, key, value), self.body));
+const setHeader$1 = /*#__PURE__*/ dual(3, (self, key, value) => makeWith$1(self.method, self.url, self.urlParams, self.hash, set$3(self.headers, key, value), self.body));
 /**
 * Sets multiple request headers from an input collection, replacing existing values with matching names.
 *
@@ -929,6 +1138,14 @@ const setHeader$1 = /*#__PURE__*/ dual(3, (self, key, value) => makeWith$1(self.
 */
 const setHeaders$1 = /*#__PURE__*/ dual(2, (self, input) => makeWith$1(self.method, self.url, self.urlParams, self.hash, setAll(self.headers, input), self.body));
 /**
+* Sets the `Authorization` header using a bearer token.
+*
+* @stability unstable
+* @category combinators
+* @since 4.0.0
+*/
+const bearerToken = /*#__PURE__*/ dual(2, (self, token) => setHeader$1(self, "Authorization", `Bearer ${stringOrRedacted(token)}`));
+/**
 * Sets the `Accept` header to the specified media type.
 *
 * @stability unstable
@@ -1055,6 +1272,14 @@ const compressBody = /*#__PURE__*/ dual((args) => isHttpClientRequest(args[0]),
 */
 const bodyJsonUnsafe = /*#__PURE__*/ dual(2, (self, body) => setBody$1(self, jsonUnsafe(body)));
 /**
+* Sets an `application/x-www-form-urlencoded` request body from URL parameter input.
+*
+* @stability unstable
+* @category combinators
+* @since 4.0.0
+*/
+const bodyUrlParams = /*#__PURE__*/ dual(2, (self, input) => setBody$1(self, urlParams(fromInput(input))));
+/**
 * Sets a `FormData` request body.
 *
 * @stability unstable
@@ -2719,6 +2944,27 @@ const empty$3 = (options) => makeResponse$1({
 	cookies: options?.cookies
 });
 /**
+* Creates a redirect response with a `Location` header.
+*
+* **Details**
+*
+* The default status is `302`; custom headers are merged with the generated
+* `Location` header.
+*
+* @stability unstable
+* @category constructors
+* @since 4.0.0
+*/
+const redirect = (location, options) => {
+	const headers = fromRecordUnsafe({ location: location.toString() });
+	return makeResponse$1({
+		status: options?.status ?? 302,
+		statusText: options?.statusText,
+		headers: options?.headers ? merge$2(headers, fromInput$1(options.headers)) : headers,
+		cookies: options?.cookies ?? empty$9
+	});
+};
+/**
 * Creates an HTTP response whose body is a `Uint8Array`.
 *
 * @stability unstable
@@ -2834,7 +3080,7 @@ const stream$1 = (body, options) => {
 * @category combinators
 * @since 4.0.0
 */
-const setHeader = /*#__PURE__*/ dual(3, (self, key, value) => makeResponse$1(self, set$1(self.headers, key, value)));
+const setHeader = /*#__PURE__*/ dual(3, (self, key, value) => makeResponse$1(self, set$3(self.headers, key, value)));
 /**
 * Returns a response with the specified header removed.
 *
@@ -2855,6 +3101,40 @@ const removeHeader = /*#__PURE__*/ dual(2, (self, key) => makeResponse$1({
 */
 const setHeaders = /*#__PURE__*/ dual(2, (self, input) => makeResponse$1(self, setAll(self.headers, input)));
 /**
+* Sets a cookie on an `HttpServerResponse`, throwing if the cookie cannot be
+* encoded.
+*
+* **When to use**
+*
+* Use when you need to set one trusted cookie and want encoding failures to
+* throw instead of being represented as `CookiesError` failures.
+*
+* @stability unstable
+* @category combinators
+* @since 4.0.0
+*/
+const setCookieUnsafe = /*#__PURE__*/ dual((args) => isHttpServerResponse(args[0]), (self, name, value, options) => makeResponse$1({
+	...self,
+	cookies: setUnsafe$2(self.cookies, name, value, options)
+}));
+/**
+* Sets an expired cookie on an `HttpServerResponse`, throwing if the expiration cookie
+* cannot be encoded.
+*
+* **When to use**
+*
+* Use when you need to expire one trusted cookie and want encoding failures to
+* throw instead of being represented as `CookiesError` failures.
+*
+* @stability unstable
+* @category combinators
+* @since 4.0.0
+*/
+const expireCookieUnsafe = /*#__PURE__*/ dual((args) => isHttpServerResponse(args[0]), (self, name, options) => makeResponse$1({
+	...self,
+	cookies: expireCookieUnsafe$1(self.cookies, name, options)
+}));
+/**
 * Replaces the body of an `HttpServerResponse`.
 *
 * **Details**
@@ -3521,7 +3801,7 @@ const make$28 = /*#__PURE__*/ fnUntraced(function* (impl) {
 			const limit = bytesToRead === void 0 ? void 0 : offset + contentLength;
 			const start = yield* fileResponseNumber(offset, "offset");
 			const end = limit === void 0 ? void 0 : yield* fileResponseNumber(limit, "end");
-			const headers = set$1(optionHeaders(options), "etag", toString$1(etag));
+			const headers = set$3(optionHeaders(options), "etag", toString$1(etag));
 			if (isSome(info.mtime)) headers["last-modified"] = info.mtime.value.toUTCString();
 			return impl.fileResponse(path, options?.status ?? 200, options?.statusText, headers, start, end, contentLength);
 		}),
@@ -3538,7 +3818,7 @@ const make$28 = /*#__PURE__*/ fnUntraced(function* (impl) {
 });
 const optionHeaders = (options) => {
 	const headers = options?.headers ? fromInput$1(options.headers) : empty$8;
-	return options?.contentType ? set$1(headers, "content-type", options.contentType) : headers;
+	return options?.contentType ? set$3(headers, "content-type", options.contentType) : headers;
 };
 const fileResponseSize = (input, field) => {
 	const size = fromInput$2(input);
@@ -4594,7 +4874,7 @@ const isMultipartError = (u) => hasProperty(u, MultipartErrorTypeId);
 * @since 4.0.0
 */
 const makeConfig = (headers) => withFiber((fiber) => {
-	const mimeTypes = get$5(fiber.context, FieldMimeTypes);
+	const mimeTypes = get$6(fiber.context, FieldMimeTypes);
 	return succeed$1({
 		headers,
 		maxParts: fiber.getRef(MaxParts),
@@ -4782,6 +5062,17 @@ const HttpServerRequest = /*#__PURE__*/ Service("effect/http/HttpServerRequest")
 */
 var ParsedSearchParams = class extends (/*#__PURE__*/ Service()("effect/http/ParsedSearchParams")) {};
 /**
+* Decodes a schema from the parsed search parameters of the current request.
+*
+* @stability unstable
+* @category schemas
+* @since 4.0.0
+*/
+const schemaSearchParams = (schema, options) => {
+	const parse = decodeUnknownEffect(schema);
+	return flatMap(ParsedSearchParams, (params) => parse(params, options));
+};
+/**
 * Reads the current request body as JSON and decodes it with the supplied schema.
 *
 * **Details**
@@ -5082,7 +5373,7 @@ const toHandled = (self, handleResponse, middleware) => {
 	}
 	return withFiber((fiber) => {
 		fiberEnterUninterruptibleUnsafe(fiber);
-		const scope = makeUnsafe$2();
+		const scope = makeUnsafe$3();
 		const frame = new RequestFrame(scope, fiber.context, getUnsafe(fiber.context, HttpServerRequest));
 		fiber.setContext(add$1(frame.prev, Scope, scope));
 		const currentTracer = fiber.cache.tracer;
@@ -5555,7 +5846,7 @@ const makeMiddleware = (middleware, options) => options?.global ? effectDiscard(
 	const router = yield* HttpRouter;
 	const fn = isEffect(middleware) ? yield* middleware : middleware;
 	yield* router.addGlobalMiddleware(fn);
-})) : new MiddlewareImpl(isEffect(middleware) ? effectContext(map$1(middleware, (fn) => makeUnsafe$3(/* @__PURE__ */ new Map([[fnContextKey, fn]])))) : succeedContext(makeUnsafe$3(/* @__PURE__ */ new Map([[fnContextKey, middleware]]))));
+})) : new MiddlewareImpl(isEffect(middleware) ? effectContext(map$1(middleware, (fn) => makeUnsafe$4(/* @__PURE__ */ new Map([[fnContextKey, fn]])))) : succeedContext(makeUnsafe$4(/* @__PURE__ */ new Map([[fnContextKey, middleware]]))));
 let middlewareId = 0;
 const fnContextKey = "effect/http/HttpRouter/MiddlewareFn";
 var MiddlewareImpl = class MiddlewareImpl {
@@ -5571,12 +5862,12 @@ var MiddlewareImpl = class MiddlewareImpl {
 			const stack = [getOrUndefinedUnsafe(context$2, fnContextKey)];
 			if (this.dependencies) {
 				const memoMap = yield* CurrentMemoMap;
-				const scope = get$5(context$2, Scope);
+				const scope = get$6(context$2, Scope);
 				const depsContext = yield* buildWithMemoMap(this.dependencies, memoMap, scope);
 				stack.push(...getMiddleware(depsContext));
 			}
-			return makeUnsafe$3(/* @__PURE__ */ new Map([[contextKey, stack]]));
-		})).pipe(provide(this.layerFn));
+			return makeUnsafe$4(/* @__PURE__ */ new Map([[contextKey, stack]]));
+		})).pipe(provide$1(this.layerFn));
 	}
 	layer;
 	combine(other) {
@@ -5623,12 +5914,12 @@ const getMiddleware = (context) => {
 const serve = (appLayer, options) => {
 	let middleware = options?.middleware;
 	if (options?.disableLogger !== true) middleware = middleware ? compose$1(middleware, logger$1) : logger$1;
-	const layerWithRouter = provideMerge(appLayer, options?.routerConfig ? provide(layer$8, succeed$2(RouterConfig)(options.routerConfig)) : layer$8);
+	const layerWithRouter = provideMerge(appLayer, options?.routerConfig ? provide$1(layer$8, succeed$2(RouterConfig)(options.routerConfig)) : layer$8);
 	return contextWith((context) => {
 		const memoMap = CurrentMemoMap.forkOrCreate(context);
-		return buildWithMemoMap(layerWithRouter, memoMap, get$5(context, Scope));
+		return buildWithMemoMap(layerWithRouter, memoMap, get$6(context, Scope));
 	}).pipe(map$1((context) => {
-		const handler = get$5(context, HttpRouter).asHttpEffect();
+		const handler = get$6(context, HttpRouter).asHttpEffect();
 		return merge$3(middleware ? serve$1(handler, middleware) : serve$1(handler), succeedContext(context));
 	}), unwrap$3, options?.disableListenLog ? identity : withLogAddress);
 };
@@ -5728,7 +6019,7 @@ const makeUnsafe$1 = (backing, deferred) => {
 * @category constructors
 * @since 2.0.0
 */
-const make$20 = () => acquireRelease(sync(() => makeUnsafe$1(/* @__PURE__ */ new Set(), makeUnsafe$4())), (set) => suspend(() => {
+const make$20 = () => acquireRelease(sync(() => makeUnsafe$1(/* @__PURE__ */ new Set(), makeUnsafe$5())), (set) => suspend(() => {
 	const state = set.state;
 	if (state._tag === "Closed") return void_;
 	set.state = { _tag: "Closed" };
@@ -5999,12 +6290,12 @@ const makeNoSerialization = /*#__PURE__*/ fnUntraced(function* (group, options)
 	const concurrency = options.concurrency ?? "unbounded";
 	const disableFatalDefects = options.disableFatalDefects ?? false;
 	const services = yield* context();
-	const scope = get$5(services, Scope);
+	const scope = get$6(services, Scope);
 	const trackFiber = runIn(forkUnsafe$1(scope, "parallel"));
-	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* make$34(concurrency);
+	const concurrencySemaphore = concurrency === "unbounded" ? void 0 : yield* make$36(concurrency);
 	const clients = /* @__PURE__ */ new Map();
 	let isShutdown = false;
-	const shutdownLatch = makeUnsafe$5(false);
+	const shutdownLatch = makeUnsafe$6(false);
 	yield* addFinalizer(scope, withFiber((parent) => {
 		isShutdown = true;
 		for (const client of clients.values()) {
@@ -6106,7 +6397,7 @@ const makeNoSerialization = /*#__PURE__*/ fnUntraced(function* (group, options)
 		}) : streamOrEffect;
 		const withMiddleware = rpc.middlewares.size === 0 ? handler : isStream ? flatMap(exit(applyMiddleware(services, handler, metadata)), (exit) => writeFailure ? failCause(writeFailure) : exit) : applyMiddleware(services, handler, metadata);
 		let responded = false;
-		const scope = makeUnsafe$2();
+		const scope = makeUnsafe$3();
 		let deferred = void 0;
 		let effect = onExit(withMiddleware, (exit) => {
 			responded = true;
@@ -6196,7 +6487,7 @@ const makeNoSerialization = /*#__PURE__*/ fnUntraced(function* (group, options)
 			client.latches ??= /* @__PURE__ */ new Map();
 			latch = client.latches.get(request.id);
 			if (!latch) {
-				latch = makeUnsafe$5(false);
+				latch = makeUnsafe$6(false);
 				client.latches.set(request.id, latch);
 			}
 		}
@@ -6285,7 +6576,7 @@ const make$19 = /*#__PURE__*/ fnUntraced(function* (group, options) {
 	const { codecFor, disconnects, end, run, send, supportsAck, supportsSpanPropagation, supportsTransferables } = yield* Protocol;
 	const { encodeDefectUnsafe, encodeUnknownRequestExit } = defectCodecs(codecFor);
 	const services = yield* context();
-	const scope = yield* make$35();
+	const scope = yield* make$37();
 	const server = yield* makeNoSerialization(group, {
 		...options,
 		disableClientAcks: !supportsAck,
@@ -6311,7 +6602,7 @@ const make$19 = /*#__PURE__*/ fnUntraced(function* (group, options) {
 					return end(response.clientId);
 			}
 		}
-	}).pipe(provide$1(scope));
+	}).pipe(provide$2(scope));
 	yield* forkChild(whileLoop({
 		while: constTrue,
 		body: constant(flatMap(take(disconnects), (clientId) => {
@@ -6441,7 +6732,7 @@ const layer$7 = (group, options) => effectDiscard(forkScoped(make$19(group, opti
 * @category layers
 * @since 4.0.0
 */
-const layerHttp = (options) => layer$7(options.group, options).pipe(provide(options.protocol === "http" ? layerProtocolHttp(options) : layerProtocolWebsocket(options)));
+const layerHttp = (options) => layer$7(options.group, options).pipe(provide$1(options.protocol === "http" ? layerProtocolHttp(options) : layerProtocolWebsocket(options)));
 /**
 * Defines the service interface for an RPC server transport, responsible for receiving
 * encoded client messages, sending encoded responses, tracking clients, and
@@ -6522,7 +6813,7 @@ const makeProtocolWithHttpEffect = /*#__PURE__*/ fnUntraced(function* (options =
 	const { encodeDefectUnsafe } = defectCodecs(serialization.codecFor);
 	const includesFraming = serialization.includesFraming;
 	const isBinary = !serialization.contentType.includes("json");
-	const disconnects = yield* make$36();
+	const disconnects = yield* make$38();
 	let writeRequest;
 	let clientId = 0;
 	const clients = /* @__PURE__ */ new Map();
@@ -6535,7 +6826,7 @@ const makeProtocolWithHttpEffect = /*#__PURE__*/ fnUntraced(function* (options =
 		const requestHeaders = Object.entries(request.headers);
 		const data = yield* orDie(isBinary ? map$1(request.arrayBuffer, (buf) => new Uint8Array(buf)) : request.text);
 		const id = clientId++;
-		const queue = yield* make$36({ capacity: includesFraming && options.streamBufferSize !== "unbounded" ? options.streamBufferSize ?? 16 : void 0 });
+		const queue = yield* make$38({ capacity: includesFraming && options.streamBufferSize !== "unbounded" ? options.streamBufferSize ?? 16 : void 0 });
 		const parser = serialization.makeUnsafe();
 		const requestIds = [];
 		const offer$1 = (data) => typeof data === "string" ? offer(queue, encoder.encode(data)) : offer(queue, data);
@@ -6652,7 +6943,7 @@ const layerProtocolHttp = (options) => {
 const makeSocketProtocol = /*#__PURE__*/ gen(function* () {
 	const serialization = yield* RpcSerialization;
 	const { encodeDefectUnsafe } = defectCodecs(serialization.codecFor);
-	const disconnects = yield* make$36();
+	const disconnects = yield* make$38();
 	let clientId = 0;
 	const clients = /* @__PURE__ */ new Map();
 	const clientIds = /* @__PURE__ */ new Set();
@@ -6831,7 +7122,7 @@ const makeUnsafe = (backing, deferred) => {
 * @category constructors
 * @since 2.0.0
 */
-const make$18 = () => acquireRelease(sync(() => makeUnsafe(empty$6(), makeUnsafe$4())), (map) => suspend(() => {
+const make$18 = () => acquireRelease(sync(() => makeUnsafe(empty$6(), makeUnsafe$5())), (map) => suspend(() => {
 	const state = map.state;
 	if (state._tag === "Closed") return void_;
 	map.state = { _tag: "Closed" };
@@ -6887,7 +7178,7 @@ const setUnsafe$1 = /*#__PURE__*/ dual((args) => isFiberMap(args[0]), (self, key
 		fiber.interruptUnsafe(internalFiberId);
 		return;
 	}
-	const previous = get$4(self.state.backing, key);
+	const previous = get$5(self.state.backing, key);
 	if (previous._tag === "Some") {
 		if (previous.value === fiber) return;
 		else if (options?.onlyIfMissing === true) {
@@ -6895,11 +7186,11 @@ const setUnsafe$1 = /*#__PURE__*/ dual((args) => isFiberMap(args[0]), (self, key
 			return;
 		}
 	}
-	set(self.state.backing, key, fiber);
+	set$1(self.state.backing, key, fiber);
 	if (previous._tag === "Some") previous.value.interruptUnsafe(internalFiberId);
 	fiber.addObserver((exit) => {
 		if (self.state._tag === "Closed") return;
-		const current = get$4(self.state.backing, key);
+		const current = get$5(self.state.backing, key);
 		if (isSome(current) && fiber === current.value) remove$2(self.state.backing, key);
 		if (isFailure$1(exit) && (options?.propagateInterruption === true ? !isInternalInterruption(exit.cause) : !hasInterruptsOnly(exit.cause))) doneUnsafe(self.deferred, exit);
 	});
@@ -6964,7 +7255,7 @@ const hasUnsafe = /*#__PURE__*/ dual(2, (self, key) => self.state._tag === "Clos
 */
 const remove$1 = /*#__PURE__*/ dual(2, (self, key) => suspend(() => {
 	if (self.state._tag === "Closed") return void_;
-	const fiber = get$4(self.state.backing, key);
+	const fiber = get$5(self.state.backing, key);
 	if (fiber._tag === "None") return void_;
 	return interruptAs(fiber.value, internalFiberId);
 }));
@@ -11211,7 +11502,7 @@ const make$16 = /*#__PURE__*/ make$28({
 * @category layers
 * @since 4.0.0
 */
-const layer$5 = /*#__PURE__*/ pipe(/*#__PURE__*/ effect(HttpPlatform)(make$16), /*#__PURE__*/ provide(layer$10), /*#__PURE__*/ provide(layer$9));
+const layer$5 = /*#__PURE__*/ pipe(/*#__PURE__*/ effect(HttpPlatform)(make$16), /*#__PURE__*/ provide$1(layer$10), /*#__PURE__*/ provide$1(layer$9));
 //#endregion
 //#region ../../node_modules/.pnpm/@effect+platform-node@4.0.5_effect@4.0.5_redis@6.3.0_@opentelemetry+api@1.9.1_/node_modules/@effect/platform-node/dist/NodeMultipartParser.js
 /**
@@ -11487,7 +11778,7 @@ const make$14 = /*#__PURE__*/ fnUntraced(function* (evaluate, options) {
 		noServer: true
 	})), (wss) => callback((resume) => {
 		wss.close(() => resume(void_));
-	})).pipe(provide$1(scope$2), cached);
+	})).pipe(provide$2(scope$2), cached);
 	return make$22({
 		address: boundAddress,
 		serve: fnUntraced(function* (httpApp, middleware) {
@@ -11747,7 +12038,7 @@ const handleResponse = (request, response) => {
 		});
 		case "Stream": {
 			nodeResponse.writeHead(response.status, response.statusText, headers);
-			const drainLatch = makeUnsafe$5();
+			const drainLatch = makeUnsafe$6();
 			nodeResponse.on("drain", () => drainLatch.openUnsafe());
 			return body.stream.pipe(orDie$1, runForEachArray((array) => {
 				const chunk = array.length > 1 ? Buffer.concat(array) : array[0];
@@ -12096,7 +12387,7 @@ const utf8Strings = (record) => {
 */
 const layer$4 = /*#__PURE__*/ effect(Dns, /*#__PURE__*/ orDie(/*#__PURE__*/ (/* @__PURE__ */ fnUntraced(function* (options) {
 	const resolve = yield* resolver(options);
-	return make$37({
+	return make$39({
 		lookup,
 		resolve: (name, type) => map$1(resolve(name, type), map$3(utf8Strings))
 	});
@@ -12540,7 +12831,7 @@ const Proto$3 = {
 */
 const make$12 = (value) => map$1(unbounded({ replay: 1 }), (pubsub) => {
 	const self = Object.create(Proto$3);
-	self.semaphore = makeUnsafe$6(1);
+	self.semaphore = makeUnsafe$7(1);
 	self.value = value;
 	self.pubsub = pubsub;
 	publishUnsafe(self.pubsub, value);
@@ -12977,6 +13268,491 @@ const evaluateConditionalRequest = (request, response) => {
 	if (ifModifiedSince !== void 0 && isNotModifiedSince(ifModifiedSince, response.headers["last-modified"])) return notModifiedResponse(response);
 };
 //#endregion
+//#region ../../node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/encoding/Sse.js
+const SseErrorTypeId = "~effect/encoding/Sse/SseError";
+/**
+* Error reason raised when pending Server-Sent Events state exceeds the
+* configured maximum size.
+*
+* @stability unstable
+* @category errors
+* @since 4.0.0
+*/
+var EventTooLarge = class extends (/*#__PURE__*/ TaggedError("EventTooLarge")) {
+	get message() {
+		return `Pending SSE event exceeded the maximum size of ${this.maxEventSize}`;
+	}
+};
+/**
+* Error raised when decoding a Server-Sent Events stream fails.
+*
+* @stability unstable
+* @category errors
+* @since 4.0.0
+*/
+var SseError = class extends (/*#__PURE__*/ TaggedError("SseError")) {
+	/**
+	* Marks this value as an SSE decoding error.
+	*
+	* @stability unstable
+	* @since 4.0.0
+	*/
+	[SseErrorTypeId] = SseErrorTypeId;
+	/**
+	* Delegates the public message to the underlying SSE error reason.
+	*
+	* @stability unstable
+	* @since 4.0.0
+	*/
+	get message() {
+		return this.reason.message;
+	}
+};
+const defaultMaxEventSize = 10485760;
+/**
+* Creates a channel that parses Server-Sent Events text chunks into `Event` values.
+*
+* **Details**
+*
+* SSE `retry` directives are emitted as `Retry` failures so callers can
+* reconnect with the requested delay.
+*
+* @stability unstable
+* @category decoding
+* @since 4.0.0
+*/
+const decode$1 = (options) => fromTransform((upstream, _scope) => sync(() => {
+	let buffer = [];
+	let retry;
+	const parser = makeParser((event) => {
+		if (event._tag === "Retry") retry = event;
+		else buffer.push(event);
+	}, options);
+	const pump = flatMap(upstream, (arr) => {
+		for (let i = 0; i < arr.length; i++) {
+			const error = parser.feed(arr[i]);
+			if (error !== void 0) return fail$1(error);
+		}
+		return void_;
+	});
+	return suspend(function loop() {
+		if (isArrayNonEmpty(buffer)) {
+			const out = buffer;
+			buffer = [];
+			return succeed$1(out);
+		} else if (retry) return fail$1(retry);
+		return flatMap(pump, loop);
+	});
+}));
+/**
+* Creates an SSE decoder channel that decodes each parsed event with a schema.
+*
+* **Details**
+*
+* The schema receives `{ event, data, id? }`, with string `data`. Absent IDs are
+* omitted, even with default options: use `Schema.optional(Schema.String)`, not
+* `Schema.UndefinedOr(Schema.String)`, to accept events without an ID.
+*
+* With `onExcessProperty: "error"`, declare `event` (default: `"message"`) and
+* `id` if the stream carries IDs, including inherited IDs.
+*
+* @stability unstable
+* @category decoding
+* @since 4.0.0
+*/
+const decodeSchema = (schema, options, parseOptions) => pipeTo(decode$1(options), decode$2(Event$1.pipe(decodeTo(schema, transformEvent)), parseOptions)());
+/**
+* Creates an SSE decoder channel that JSON-decodes each event `data` field with a schema.
+*
+* **Details**
+*
+* The output preserves the SSE `event` name and optional `id` while replacing
+* `data` with the decoded value.
+*
+* @stability unstable
+* @category decoding
+* @since 4.0.0
+*/
+const decodeDataSchema = (schema, options) => {
+	const eventSchema = Struct({
+		...EventEncoded.fields,
+		data: fromJsonString(schema)
+	});
+	return pipeTo(decode$1(options), map$4(decode$2(eventSchema)(), map$3((event) => ({
+		...event,
+		id: event.id
+	}))));
+};
+/**
+* Creates a stateful Server-Sent Events parser.
+*
+* **Details**
+*
+* Call `feed` with text chunks to parse `Event` and `Retry` values through the
+* callback, and call `reset` to clear any buffered event state. `feed` returns
+* an `SseError` if the pending event exceeds `maxEventSize`.
+*
+* @stability unstable
+* @category decoding
+* @since 4.0.0
+*/
+function makeParser(onParse, options) {
+	const maxEventSize = options?.maxEventSize ?? defaultMaxEventSize;
+	const dispatchEmptyNamedEvents = options?.dispatchEmptyNamedEvents === true;
+	let isFirstChunk;
+	let pending;
+	let pendingLength;
+	let discardTrailingNewline;
+	let generation = 0;
+	let lastEventId;
+	let eventName;
+	let data;
+	reset();
+	return {
+		feed,
+		reset
+	};
+	function reset() {
+		generation++;
+		isFirstChunk = true;
+		pending = [];
+		pendingLength = 0;
+		discardTrailingNewline = false;
+		lastEventId = void 0;
+		eventName = void 0;
+		data = "";
+	}
+	function feed(chunk) {
+		if (isFirstChunk && chunk.startsWith(BOM)) chunk = chunk.slice(BOM.length);
+		isFirstChunk = false;
+		const length = chunk.length;
+		const currentGeneration = generation;
+		let position = 0;
+		while (position < length) {
+			if (discardTrailingNewline) {
+				discardTrailingNewline = false;
+				if (chunk.charCodeAt(position) === LF) {
+					++position;
+					continue;
+				}
+			}
+			let lineEnd = position;
+			while (lineEnd < length) {
+				const code = chunk.charCodeAt(lineEnd);
+				if (code === CR || code === LF) break;
+				++lineEnd;
+			}
+			if (lineEnd === length) {
+				pending.push(chunk.slice(position));
+				pendingLength += length - position;
+				break;
+			}
+			discardTrailingNewline = chunk.charCodeAt(lineEnd) === CR;
+			let line = chunk.slice(position, lineEnd);
+			if (pending.length > 0) {
+				pending.push(line);
+				line = pending.join("");
+				pending = [];
+				pendingLength = 0;
+			}
+			parseLine(line);
+			if (generation !== currentGeneration) return;
+			position = lineEnd + 1;
+		}
+		if (pendingLength + data.length > maxEventSize) {
+			const error = new SseError({ reason: new EventTooLarge({ maxEventSize }) });
+			reset();
+			return error;
+		}
+	}
+	function parseLine(line) {
+		if (line.length === 0) {
+			const named = eventName !== void 0 && eventName !== "";
+			const event = eventName || "message";
+			const eventData = data;
+			eventName = void 0;
+			data = "";
+			if (eventData.length > 0 || dispatchEmptyNamedEvents && named) onParse({
+				_tag: "Event",
+				id: lastEventId,
+				event,
+				data: eventData.slice(0, -1)
+			});
+			return;
+		}
+		const colon = line.indexOf(":");
+		let field = line;
+		let value = "";
+		if (colon >= 0) {
+			field = line.slice(0, colon);
+			value = line.slice(line.charCodeAt(colon + 1) === SPACE ? colon + 2 : colon + 1);
+		}
+		if (field === "data") data += value + "\n";
+		else if (field === "event") eventName = value;
+		else if (field === "id" && !value.includes("\0")) lastEventId = value;
+		else if (field === "retry" && /^\d+$/.test(value)) onParse(new Retry({
+			duration: millis(parseInt(value, 10)),
+			lastEventId
+		}));
+	}
+}
+const BOM = "";
+const LF = 10;
+const CR = 13;
+const SPACE = 32;
+/**
+* Schema for the untagged Server-Sent Events payload shape containing an optional `id`, `event`, and string `data` fields.
+*
+* @stability unstable
+* @category models
+* @since 4.0.0
+*/
+const EventEncoded = /*#__PURE__*/ Struct({
+	id: /*#__PURE__*/ optional$1(String$1),
+	event: String$1,
+	data: String$1
+});
+/**
+* Schema for the tagged Server-Sent Events message model that adds `_tag: "Event"` to the event name, optional event ID, and string data payload.
+*
+* @stability unstable
+* @category models
+* @since 4.0.0
+*/
+const Event$1 = /*#__PURE__*/ Struct({
+	_tag: /*#__PURE__*/ tag("Event"),
+	id: /*#__PURE__*/ UndefinedOr(String$1),
+	event: String$1,
+	data: String$1
+});
+/**
+* Schema for transforming untagged SSE event payloads into tagged `Event`
+* models.
+*
+* @stability unstable
+* @category models
+* @since 4.0.0
+*/
+const transformEvent = /*#__PURE__*/ transform$1({
+	decode: (event) => event.id === void 0 ? {
+		event: event.event,
+		data: event.data
+	} : {
+		id: event.id,
+		event: event.event,
+		data: event.data
+	},
+	encode: (event) => ({
+		_tag: "Event",
+		id: event.id,
+		event: event.event ?? "message",
+		data: event.data
+	})
+});
+const RetryTypeId = "~effect/encoding/Sse/Retry";
+/**
+* Represents a Server-Sent Events retry directive.
+*
+* **Details**
+*
+* Decoders surface this value as a failure to request reconnection after
+* `duration`; encoders serialize an upstream `Retry` failure as a `retry:` line.
+*
+* @stability unstable
+* @category models
+* @since 4.0.0
+*/
+var Retry = class Retry extends (/*#__PURE__*/ TaggedClass("Retry")) {
+	/**
+	* Marks this value as an SSE retry directive for runtime guards.
+	*
+	* @stability unstable
+	* @since 4.0.0
+	*/
+	[RetryTypeId] = RetryTypeId;
+	/**
+	* Returns `true` when the value is an SSE retry directive.
+	*
+	* @stability unstable
+	* @since 4.0.0
+	*/
+	static is(u) {
+		return hasProperty(u, RetryTypeId);
+	}
+	/**
+	* Separates SSE retry directives from regular event values.
+	*
+	* @stability unstable
+	* @since 4.0.0
+	*/
+	static filter(u) {
+		return Retry.is(u) ? succeed(u) : fail(u);
+	}
+};
+//#endregion
+//#region ../../packages/auth/src/service.ts
+const SESSION_COOKIE = "__Secure-session";
+const OAUTH_COOKIE = "__Host-oauth";
+const COOKIE = {
+	httpOnly: true,
+	path: "/",
+	sameSite: "lax",
+	secure: true
+};
+const SESSION_DURATION = days(365);
+const OAUTH_DURATION = minutes(10);
+Uint8Array.from([
+	48,
+	46,
+	2,
+	1,
+	0,
+	48,
+	5,
+	6,
+	3,
+	43,
+	101,
+	112,
+	4,
+	34,
+	4,
+	32
+]);
+all({
+	clientId: String$2("GITHUB_CLIENT_ID"),
+	clientSecret: Redacted("GITHUB_CLIENT_SECRET"),
+	users: Array$1(Int, "GITHUB_USERS")
+});
+function bytes(text) {
+	return new TextEncoder().encode(text);
+}
+function rejected(message) {
+	return mapError((cause) => AuthError.make({
+		cause,
+		message
+	}));
+}
+function respond(message, handler) {
+	return catch_(handler, (cause) => as$1(logWarning(message, cause), text$2(message, { status: match(is$4(AuthError)(cause), {
+		onFalse: () => 500,
+		onTrue: () => 401
+	}) })));
+}
+function userFrom(auth, headers) {
+	return pipe(get$7(headers, "authorization"), filter$4(startsWith("Bearer ")), map$5(replace$1("Bearer ", "")), orElse$2(() => pipe(get$7(headers, "cookie"), flatMapNullishOr((cookie) => parseHeader(cookie)[SESSION_COOKIE]))), fromOption, rejected("Sign in first"), flatMap((token) => auth.verify(token)));
+}
+function provide(auth) {
+	return pipe(make$40(Auth, auth), add$1(RpcAuth, RpcAuth.of((effect, request) => flatMap(userFrom(auth, request.headers), (user) => provideService(effect, CurrentUser, user)))));
+}
+function verifyWith(current) {
+	return fn$1("Auth.verify")(function* (token) {
+		const { publicKey, users } = yield* current;
+		const parts = split(token, ".");
+		const signature = yield* pipe(get$8(parts, 1), flatMap$1((part) => getSuccess(decode$3(part))), fromOption);
+		if (!(yield* tryPromise(() => crypto.subtle.verify("Ed25519", publicKey, new Uint8Array(signature), bytes(headNonEmpty(parts)))))) return yield* AuthError.make({ message: "The session signature is invalid" });
+		const session = yield* decodeEffect(Session)(headNonEmpty(parts));
+		if (session.expiresAt <= (yield* currentTimeMillis)) return yield* AuthError.make({ message: "The session expired" });
+		if (!has$3(users, session.user.id)) return yield* AuthError.make({ message: `${session.user.id} is not on the allow list` });
+		return session.user;
+	}, rejected("Sign in first"));
+}
+const SameOrigin = middleware((httpEffect) => gen(function* () {
+	const request = yield* HttpServerRequest;
+	if (exists(get$7(request.headers, "origin"), (origin) => !exists(toURL(request), (url) => url.origin === origin))) return text$2("The request comes from another origin", { status: 403 });
+	return yield* httpEffect;
+}), { global: true });
+function parentDomain(request) {
+	return pipe(toURL(request), map$5((url) => pipe(url.hostname, split("."), drop(1), join$1("."))), filter$4(isNonEmpty));
+}
+function callbackUrl(request) {
+	return pipe(toURL(request), map$5((url) => new URL("/auth/github/callback", url).href), fromOption);
+}
+fnUntraced(function* (issuer, config, redirects) {
+	const router = yield* HttpRouter;
+	const random = yield* Crypto;
+	const client = filterStatusOk(yield* HttpClient);
+	yield* router.add("GET", "/auth/github", respond("Cannot start the GitHub sign-in", gen(function* () {
+		const request = yield* HttpServerRequest;
+		const query = yield* pipe(schemaSearchParams(SignInParams), rejected("The redirect is invalid"));
+		const domain = parentDomain(request);
+		if (exists(fromUndefinedOr(query.redirect), (redirect) => !contains$1(redirects, redirect) && !exists(getSuccess(fromString(redirect)), (url) => url.protocol === "https:" && exists(domain, (parent) => endsWith(`.${parent}`)(`.${url.hostname}`))))) return yield* AuthError.make({ message: "The redirect is not allowed" });
+		const state = encode(yield* random.randomBytes(32));
+		const verifier = encode(yield* random.randomBytes(32));
+		const authorize = toString$2(fromInput({
+			client_id: config.clientId,
+			code_challenge: encode(yield* random.digest("SHA-256", bytes(verifier))),
+			code_challenge_method: "S256",
+			redirect_uri: yield* callbackUrl(request),
+			response_type: "code",
+			state
+		}));
+		return setCookieUnsafe(redirect(`https://github.com/login/oauth/authorize?${authorize}`), OAUTH_COOKIE, yield* encodeEffect(OAuthFlow)({
+			...query,
+			state,
+			verifier
+		}), {
+			...COOKIE,
+			maxAge: OAUTH_DURATION
+		});
+	})));
+	yield* router.add("GET", "/auth/github/callback", respond("The GitHub sign-in failed", gen(function* () {
+		const request = yield* HttpServerRequest;
+		const params = yield* pipe(schemaSearchParams(CallbackParams), rejected("GitHub sent no code"));
+		const flow = yield* pipe(decodeUnknownEffect(OAuthFlow)(request.cookies[OAUTH_COOKIE]), rejected("The sign-in expired"));
+		if (flow.state !== params.state) return yield* AuthError.make({ message: "The sign-in state does not match" });
+		const token = yield* pipe(post("https://github.com/login/oauth/access_token"), acceptJson, bodyUrlParams({
+			client_id: config.clientId,
+			client_secret: value$2(config.clientSecret),
+			code: params.code,
+			code_verifier: flow.verifier,
+			grant_type: "authorization_code",
+			redirect_uri: yield* callbackUrl(request)
+		}), (exchange) => client.execute(exchange), flatMap(schemaBodyJson$1(OAuthTokenResponse)));
+		if (is$4(OAuthTokenError)(token)) return yield* AuthError.make({ message: `GitHub rejected the code: ${token.error}` });
+		const githubUser = yield* pipe(get$3("https://api.github.com/user"), bearerToken(token.access_token), setHeaders$1({
+			accept: "application/vnd.github+json",
+			"user-agent": "@deslop/auth"
+		}), (lookup) => client.execute(lookup), flatMap(schemaBodyJson$1(GitHubUser)));
+		const session = yield* issuer.issue({
+			id: `github:${githubUser.id}`,
+			name: githubUser.login
+		});
+		const redirect$1 = flow.redirect ?? "/";
+		if (contains$1(redirects, redirect$1)) return expireCookieUnsafe(redirect(`${redirect$1}?${toString$2(fromInput({ token: session }))}`), OAUTH_COOKIE, COOKIE);
+		return setCookieUnsafe(expireCookieUnsafe(redirect(redirect$1), OAUTH_COOKIE, COOKIE), SESSION_COOKIE, session, {
+			...COOKIE,
+			domain: getOrUndefined(parentDomain(request)),
+			maxAge: SESSION_DURATION
+		});
+	})));
+});
+var Auth = class Auth extends Service()("@deslop/auth/service/Auth") {
+	static layer = merge$3(SameOrigin, effectContext(gen(function* () {
+		const client = filterStatusOk(yield* HttpClient);
+		const url = yield* pipe(String$2("AUTH_URL"), withDefault(AUTH_URL));
+		const read = pipe(client.get(`${url}/auth/keys`), flatMap(schemaBodyJson$1(Verification)), flatMap((verification) => map$1(pipe(fromResult(decode$3(verification.key)), flatMap((key) => tryPromise(() => crypto.subtle.importKey("raw", new Uint8Array(key), { name: "Ed25519" }, false, ["verify"])))), (publicKey) => ({
+			publicKey,
+			users: fromIterable$2(verification.users)
+		}))), timeout("10 seconds"));
+		const current = yield* make$34(yield* pipe(read, tapError$1((cause) => logWarning(`Cannot read the auth keys from ${url}`, cause)), retry(spaced("5 seconds"))));
+		yield* pipe(read, flatMap((verification) => set(current, verification)), ignore$1({
+			log: "Warn",
+			message: `Cannot refresh the auth keys from ${url}`
+		}), repeat(spaced("1 minute")), forkScoped);
+		return provide(Auth.of({ verify: verifyWith(get$4(current)) }));
+	})));
+};
+Service()("@deslop/auth/service/Issuer");
+const HttpAuth = middleware()(gen(function* () {
+	const auth = yield* Auth;
+	return (httpEffect) => gen(function* () {
+		const user = yield* result$1(userFrom(auth, (yield* HttpServerRequest).headers));
+		if (isFailure(user)) return yield* as$1(logWarning("Sign in first", user.failure), text$2("Sign in first", { status: 401 }));
+		return yield* provideService(httpEffect, CurrentUser, user.success);
+	});
+}));
+//#endregion
 //#region ../../node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/observability/OtlpExporter.js
 /**
 * Shared batch exporter for OTLP/HTTP observability modules.
@@ -13078,18 +13854,18 @@ const layerFlusher = /*#__PURE__*/ sync$1(Flusher, () => {
 */
 const make$10 = /*#__PURE__*/ fnUntraced(function* (options) {
 	const services = yield* context();
-	const clock = get$5(services, Clock);
-	const scope = get$5(services, Scope);
+	const clock = get$6(services, Clock);
+	const scope = get$6(services, Scope);
 	const exportInterval = max$1(fromInputUnsafe$1(options.exportInterval), zero$1);
 	let disabledUntil = void 0;
-	const client = get$5(services, HttpClient).pipe(tap((response) => ignore$1(response.arrayBuffer)), tapError((error) => error.response ? ignore$1(error.response.arrayBuffer) : void_), filterStatusOk, transformResponse(provideService(TracerPropagationEnabled, false)), retryTransient({
+	const client = get$6(services, HttpClient).pipe(tap((response) => ignore$1(response.arrayBuffer)), tapError((error) => error.response ? ignore$1(error.response.arrayBuffer) : void_), filterStatusOk, transformResponse(provideService(TracerPropagationEnabled, false)), retryTransient({
 		schedule: policy,
 		times: 3
 	}));
 	const exporterUserAgent = `OTel-OTLP-Exporter-JavaScript-Effect-${options.label}/${getCurrentVersion()}`;
 	const userHeaders = fromInput$1(options.headers);
 	const userAgent = userHeaders["user-agent"];
-	const headers = set$1(userHeaders, "user-agent", userAgent ? `${userAgent} ${exporterUserAgent}` : exporterUserAgent);
+	const headers = set$3(userHeaders, "user-agent", userAgent ? `${userAgent} ${exporterUserAgent}` : exporterUserAgent);
 	const request = post(options.url, { headers });
 	let buffer = [];
 	const runExport = suspend(() => {
@@ -13325,7 +14101,7 @@ const make$8 = /*#__PURE__*/ fnUntraced(function* (options) {
 		excludeLogSpans: options.excludeLogSpans ?? false,
 		clock: yield* Clock
 	};
-	return make$38((options) => {
+	return make$41((options) => {
 		exporter.push(makeLogRecord(options, opts));
 	});
 });
@@ -13450,7 +14226,7 @@ const layer$1 = /*#__PURE__*/ flow(/* @__PURE__ */ fnUntraced(function* (options
 		if (!span.sampled) return;
 		exporter.push(makeOtlpSpan(span));
 	}
-	return make$39({
+	return make$42({
 		span(options) {
 			return new SpanImpl(options, exportFn);
 		},
@@ -13619,7 +14395,7 @@ function layerOtlp(serviceName, url) {
 	}), layer$2({
 		resource,
 		url: new URL("/v1/logs", url).href
-	})), provide([layerJson, layer$6]));
+	})), provide$1([layerJson, layer$6]));
 }
 //#endregion
 //#region ../../packages/runtime/src/server.ts
@@ -43302,7 +44078,7 @@ function clock(seconds$1) {
 function captionTranscript(input) {
 	const cues = pipe(input.vtt, replaceAll(/\r\n?/gu, "\n"), split("\n\n"), flatMap$2((block) => {
 		const lines = split(block, "\n");
-		return pipe(findFirstIndex(lines, includes("-->")), map$4((index) => {
+		return pipe(findFirstIndex(lines, includes("-->")), map$5((index) => {
 			const times = map$3(pipe(getUnsafe$1(lines, index), split(" --> ")), (time) => reduce(pipe(time, split(" "), headNonEmpty, split(":"), map$3(parse$10), getSomes), 0, (total, part) => total * 60 + part));
 			return map$3(drop(lines, index + 1), (line) => ({
 				end: lastNonEmpty(times),
@@ -43310,25 +44086,25 @@ function captionTranscript(input) {
 				text: pipe(line, replaceAll(/<[^>]+>/gu, ""), replaceAll("&nbsp;", " "), replaceAll("&lt;", "<"), replaceAll("&gt;", ">"), replaceAll("&amp;", "&"), trim)
 			}));
 		}), getOrElse(empty$11));
-	}), filter$4((cue) => isNonEmpty(cue.text)));
-	return join$1(map$3(filter$4(cues, (cue, index) => pipe(get$6(cues, index - 1), match$1({
+	}), filter$5((cue) => isNonEmpty(cue.text)));
+	return join$1(map$3(filter$5(cues, (cue, index) => pipe(get$8(cues, index - 1), match$1({
 		onNone: () => true,
 		onSome: (previous) => input.authored || previous.text !== cue.text || previous.end < cue.start
 	}))), (cue) => `[${clock(cue.start)}] ${cue.text}\n`), "");
 }
 const spoken = replace$1(/^\[[^\]]+\] /u, "");
 function speechOnly(transcript) {
-	const lines = pipe(split(transcript, "\n"), filter$4(isNonEmpty), dedupeAdjacentWith((left, right) => spoken(left) === spoken(right)), filter$4((line) => {
+	const lines = pipe(split(transcript, "\n"), filter$5(isNonEmpty), dedupeAdjacentWith((left, right) => spoken(left) === spoken(right)), filter$5((line) => {
 		const words = wordsOf(spoken(line));
 		return isReadonlyArrayNonEmpty(words) && dedupe(words).length * 3 > words.length;
 	}));
 	const words = flatMap$2(lines, (line) => wordsOf(spoken(line)));
-	const seconds = pipe(last$1(lines), flatMap$1(match$2(/^\[(\d+):(\d+)\]/u)), map$4((match) => [match[1] ?? "0", match[2] ?? "0"]), map$4((parts) => reduce(getSomes(map$3(parts, parse$10)), 0, (total, part) => total * 60 + part)), getOrElse(() => 0));
+	const seconds = pipe(last$1(lines), flatMap$1(match$2(/^\[(\d+):(\d+)\]/u)), map$5((match) => [match[1] ?? "0", match[2] ?? "0"]), map$5((parts) => reduce(getSomes(map$3(parts, parse$10)), 0, (total, part) => total * 60 + part)), getOrElse(() => 0));
 	if (words.length < 8 || words.length * 60 < 40 * max$2(seconds, 15)) return none();
 	return some$1(join$1(map$3(lines, (line) => `${line}\n`), ""));
 }
 function wordsOf(text) {
-	return pipe(text, toLowerCase, split(/[^\p{L}\p{N}']+/u), filter$4(isNonEmpty));
+	return pipe(text, toLowerCase, split(/[^\p{L}\p{N}']+/u), filter$5(isNonEmpty));
 }
 //#endregion
 //#region src/services/media/schema.ts
@@ -43360,11 +44136,11 @@ const Transcription = Struct({ chunks: ArraySchema(Struct({
 const MAX_WHISPER_SECONDS = 7200;
 const BLOCKED_ANSWER = /not a bot|requir(?:es|ing) login|login required|CONNECT tunnel failed|ProxyError|HTTP Error (?:403|429|5\d\d)|Requested format is not available|timed out/iu;
 const run = fnUntraced(function* (command, args) {
-	const handle = yield* make$40(command, args, {
+	const handle = yield* make$43(command, args, {
 		stderr: "pipe",
 		stdout: "pipe"
 	});
-	return yield* all({
+	return yield* all$1({
 		exitCode: handle.exitCode,
 		stderr: mkString(decodeText(handle.stderr)),
 		stdout: mkUint8Array(handle.stdout)
@@ -43376,7 +44152,7 @@ var Media = class Media extends Service()("@deslop/stash/services/media/service/
 		const path = yield* Path;
 		const spawner = yield* ChildProcessSpawner;
 		const cache = path.join(yield* pipe(String$2("XDG_CACHE_HOME"), withDefault(path.join(yield* String$2("HOME"), ".cache"))), "deslop", "media");
-		const whisper = yield* make$34(1);
+		const whisper = yield* make$36(1);
 		const ytDlpArgs = [
 			"--js-runtimes",
 			"node",
@@ -43436,8 +44212,8 @@ var Media = class Media extends Service()("@deslop/stash/services/media/service/
 			}
 			if (samples.length < 16e3) return none();
 			env.cacheDir = path.join(cache, "models");
-			const spoken = map$4(input.language, (language) => pipe(language, split("-"), headNonEmpty));
-			const english = contains$1(spoken, "en");
+			const spoken = map$5(input.language, (language) => pipe(language, split("-"), headNonEmpty));
+			const english = contains$2(spoken, "en");
 			const model = match(english, {
 				onFalse: () => "onnx-community/whisper-small",
 				onTrue: () => "onnx-community/whisper-small.en"
@@ -43462,7 +44238,7 @@ var Media = class Media extends Service()("@deslop/stash/services/media/service/
 		});
 		const transcribe = fnUntraced(function* (link, media) {
 			const work = yield* fs.makeTempDirectoryScoped({ prefix: "deslop-media-" });
-			const language = pipe(fromNullishOr(media.automatic_captions), flatMap$1((captions) => findFirst(keys(captions), endsWith("-orig"))), map$4(replace$1(/-orig$/u, "")), orElse$2(() => fromNullishOr(media.language)), getOrElse(() => "en"));
+			const language = pipe(fromNullishOr(media.automatic_captions), flatMap$1((captions) => findFirst(keys(captions), endsWith("-orig"))), map$5(replace$1(/-orig$/u, "")), orElse$2(() => fromNullishOr(media.language)), getOrElse(() => "en"));
 			yield* fetch([
 				...ytDlpArgs,
 				"--skip-download",
@@ -43479,8 +44255,8 @@ var Media = class Media extends Service()("@deslop/stash/services/media/service/
 				link
 			]);
 			const captions = `captions.${language}.vtt`;
-			if (contains$2(yield* fs.readDirectory(work), captions)) return some$1(captionTranscript({
-				authored: exists(fromNullishOr(media.subtitles), (subtitles) => has$3(subtitles, language)),
+			if (contains$1(yield* fs.readDirectory(work), captions)) return some$1(captionTranscript({
+				authored: exists(fromNullishOr(media.subtitles), (subtitles) => has$4(subtitles, language)),
 				vtt: yield* fs.readFileString(path.join(work, captions))
 			}));
 			if (!exists(fromNullishOr(media.duration), (seconds) => seconds <= MAX_WHISPER_SECONDS)) {
@@ -43516,7 +44292,7 @@ var Media = class Media extends Service()("@deslop/stash/services/media/service/
 				"csv=p=0",
 				video
 			]);
-			const seconds = pipe(trim(new TextDecoder().decode(probe.stdout)), parse$10, filter$5((value) => value > 0), getOrElse(() => 6));
+			const seconds = pipe(trim(new TextDecoder().decode(probe.stdout)), parse$10, filter$4((value) => value > 0), getOrElse(() => 6));
 			const sampled = yield* run("ffmpeg", [
 				"-v",
 				"error",
@@ -43531,7 +44307,7 @@ var Media = class Media extends Service()("@deslop/stash/services/media/service/
 				path.join(work, "frame-%02d.jpg")
 			]);
 			if (sampled.exitCode !== 0) return yield* MediaError.make({ message: `ffmpeg cannot sample the video: ${sampled.stderr}` });
-			return yield* forEach(sort(filter$4(yield* fs.readDirectory(work), startsWith("frame-")), String$3), (file) => fs.readFile(path.join(work, file)), { concurrency: "unbounded" });
+			return yield* forEach(sort(filter$5(yield* fs.readDirectory(work), startsWith("frame-")), String$3), (file) => fs.readFile(path.join(work, file)), { concurrency: "unbounded" });
 		});
 		return Media.of({
 			fileFrames: fn$1("Media.fileFrames")(function* (file) {
@@ -43576,14 +44352,14 @@ var Media = class Media extends Service()("@deslop/stash/services/media/service/
 				if (media._type === "playlist") return yield* MediaError.make({ message: "The link holds several videos." });
 				const details = pipe([
 					fromNullishOr(media.uploader),
-					map$4(fromNullishOr(media.upload_date), replace$1(/^(\d{4})(\d{2})(\d{2})$/u, "$1-$2-$3")),
-					map$4(fromNullishOr(media.duration), clock)
-				], getSomes, filter$4(isNonEmpty));
+					map$5(fromNullishOr(media.upload_date), replace$1(/^(\d{4})(\d{2})(\d{2})$/u, "$1-$2-$3")),
+					map$5(fromNullishOr(media.duration), clock)
+				], getSomes, filter$5(isNonEmpty));
 				return {
 					info: join$1(getSomes([
 						some$1(`# ${media.title}\n\n${join$1(details, ", ")}\n${link}`),
-						pipe(fromNullishOr(media.description), filter$5(isNonEmpty), map$4((description) => `## Description\n\n${description}`)),
-						map$4(fromNullishOr(media.chapters), (chapters) => `## Chapters\n\n${join$1(map$3(chapters, (chapter) => `- [${clock(chapter.start_time)}] ${chapter.title}`), "\n")}`)
+						pipe(fromNullishOr(media.description), filter$4(isNonEmpty), map$5((description) => `## Description\n\n${description}`)),
+						map$5(fromNullishOr(media.chapters), (chapters) => `## Chapters\n\n${join$1(map$3(chapters, (chapter) => `- [${clock(chapter.start_time)}] ${chapter.title}`), "\n")}`)
 					]), "\n\n"),
 					transcript: withProcesses(scoped(transcribe(link, media)))
 				};
@@ -90112,18 +90888,18 @@ function withoutTrailingPunctuation(link) {
 }
 function canonicalUrl(link) {
 	const url = new URL(link);
-	if (contains$2(X_HOSTS, url.hostname)) url.hostname = "x.com";
+	if (contains$1(X_HOSTS, url.hostname)) url.hostname = "x.com";
 	if (sourceFor(url.href) === "Website") for (const key of TRACKING_PARAMETERS) url.searchParams.delete(key);
 	else url.search = "";
 	url.hash = "";
 	return url.href;
 }
 function captureUrl(text) {
-	return pipe(match$2(URL_PATTERN)(text), flatMap$1(head), map$4(withoutTrailingPunctuation), flatMap$1(liftThrowable(canonicalUrl)), getOrUndefined);
+	return pipe(match$2(URL_PATTERN)(text), flatMap$1(head), map$5(withoutTrailingPunctuation), flatMap$1(liftThrowable(canonicalUrl)), getOrUndefined);
 }
 function sourceFor(url) {
 	const host = new URL(url).hostname;
-	if (contains$2(X_HOSTS, host) || host === "t.co") return "X";
+	if (contains$1(X_HOSTS, host) || host === "t.co") return "X";
 	if (host === "tiktok.com" || endsWith(".tiktok.com")(host)) return "TikTok";
 	return "Website";
 }
@@ -90142,7 +90918,7 @@ function plainText(text) {
 	return pipe(text, replaceAll(/\s+/gu, " "), trim);
 }
 function normalizeTags(tags) {
-	return pipe(tags, map$3((tag) => pipe(tag, toLowerCase, plainText, replace$1(/^#+/u, ""), replaceAll(" ", "-"))), filter$4(isNonEmpty), dedupe);
+	return pipe(tags, map$3((tag) => pipe(tag, toLowerCase, plainText, replace$1(/^#+/u, ""), replaceAll(" ", "-"))), filter$5(isNonEmpty), dedupe);
 }
 function tagCounts(notes) {
 	return pipe(flatMap$2(notes, (note) => note.tags), groupBy((tag) => tag), toEntries, map$3((entry) => ({
@@ -90151,20 +90927,20 @@ function tagCounts(notes) {
 	})), sort(combine$1(mapInput(flip(Number$1), (entry) => entry.count), mapInput(String$3, (entry) => entry.tag))));
 }
 function diff(previous, next) {
-	const before = fromIterable$2(map$3(previous, (note) => [note.id, note]));
-	const ids = fromIterable$3(map$3(next, (note) => note.id));
+	const before = fromIterable$3(map$3(previous, (note) => [note.id, note]));
+	const ids = fromIterable$2(map$3(next, (note) => note.id));
 	return {
-		removed: filter$4(map$3(previous, (note) => note.id), (id) => !has$4(ids, id)),
-		upserted: filter$4(next, (note) => !exists(get$7(before, note.id), (old) => old === note))
+		removed: filter$5(map$3(previous, (note) => note.id), (id) => !has$3(ids, id)),
+		upserted: filter$5(next, (note) => !exists(get$9(before, note.id), (old) => old === note))
 	};
 }
 function findNotes(notes, query) {
-	const words = pipe(query, toLowerCase, split(/\s+/u), filter$4(isNonEmpty));
-	const tags = pipe(words, filter$4(startsWith("#")), map$3(slice$2(1)), filter$4(isNonEmpty));
-	const terms = filter$4(words, (word) => !startsWith("#")(word));
+	const words = pipe(query, toLowerCase, split(/\s+/u), filter$5(isNonEmpty));
+	const tags = pipe(words, filter$5(startsWith("#")), map$3(slice$2(1)), filter$5(isNonEmpty));
+	const terms = filter$5(words, (word) => !startsWith("#")(word));
 	if (isReadonlyArrayEmpty(words)) return notes;
-	return filter$4(notes, (note) => {
-		if (!every(tags, (tag) => contains$2(note.tags, tag))) return false;
+	return filter$5(notes, (note) => {
+		if (!every(tags, (tag) => contains$1(note.tags, tag))) return false;
 		const haystack = pipe([
 			note.title,
 			note.summary,
@@ -90177,7 +90953,7 @@ function findNotes(notes, query) {
 			note.transcript,
 			note.url,
 			...note.tags
-		], filter$4(isNotUndefined), join$1(" "), toLowerCase);
+		], filter$5(isNotUndefined), join$1(" "), toLowerCase);
 		return every(terms, (term) => includes(term)(haystack));
 	});
 }
@@ -90231,7 +91007,7 @@ const load = fnUntraced(function* (url, read) {
 	if (!every(addresses, isPublic)) return yield* NotesError.make({ message: "The link points to a private network." });
 	const address = formatIp(headNonEmpty(addresses));
 	const session = `${yield* nextIntBetween(1e7, 99999999)}`;
-	const proxy = map$4(yield* Exit, (exit) => sticky(exit, session));
+	const proxy = map$5(yield* Exit, (exit) => sticky(exit, session));
 	return yield* pipe(get$2(url, { headers: {
 		accept: "text/html,application/json,image/*",
 		"accept-language": "en-US,en;q=0.9",
@@ -90241,7 +91017,7 @@ const load = fnUntraced(function* (url, read) {
 		location: response.headers["location"],
 		status: response.status,
 		type: response.headers["content-type"] ?? ""
-	}))), scoped, provide$2(pipe(layerNodeHttpNoAgent, provide(match$1(proxy, {
+	}))), scoped, provide$3(pipe(layerNodeHttpNoAgent, provide$1(match$1(proxy, {
 		onNone: () => layerAgentOptions({
 			autoSelectFamily: false,
 			lookup: (_hostname, _options, callback) => callback(null, address, 4)
@@ -90258,7 +91034,7 @@ const load = fnUntraced(function* (url, read) {
 });
 const follow = fnUntraced(function* (url, read, hops) {
 	const proxied = isSome(yield* Exit);
-	const answer = yield* pipe(load(url, read), filterOrFail((found) => !proxied || !contains$2([
+	const answer = yield* pipe(load(url, read), filterOrFail((found) => !proxied || !contains$1([
 		403,
 		429,
 		500,
@@ -90284,14 +91060,14 @@ const follow = fnUntraced(function* (url, read, hops) {
 		})
 	});
 });
-const decode$1 = fnUntraced(function* (schema, url) {
+const decode = fnUntraced(function* (schema, url) {
 	return yield* pipe(decodeEffect(fromJsonString(schema))((yield* follow(url, api, 0)).body), mapError((cause) => NotesError.make({
 		cause,
 		message: "The source answered in an unknown format."
 	})));
 });
 const resolve = fnUntraced(function* (url, hops) {
-	if (!contains$2([
+	if (!contains$1([
 		"vm.tiktok.com",
 		"vt.tiktok.com",
 		"t.co"
@@ -90304,7 +91080,7 @@ function canonical(url) {
 	return captureUrl(url.href) ?? url.href;
 }
 const fromOEmbed = fnUntraced(function* (endpoint, url, title) {
-	const embed = yield* decode$1(OEmbed, new URL(`${endpoint}${encodeURIComponent(url.href)}`));
+	const embed = yield* decode(OEmbed, new URL(`${endpoint}${encodeURIComponent(url.href)}`));
 	return Extraction.make({
 		author: fromUndefinedOr(embed.author_name),
 		image: fromNullishOr(embed.thumbnail_url),
@@ -90314,7 +91090,7 @@ const fromOEmbed = fnUntraced(function* (endpoint, url, title) {
 	});
 });
 const xOEmbed = fnUntraced(function* (url) {
-	const embed = yield* decode$1(OEmbed, new URL(`https://publish.x.com/oembed?omit_script=true&dnt=true&url=${encodeURIComponent(url.href)}`));
+	const embed = yield* decode(OEmbed, new URL(`https://publish.x.com/oembed?omit_script=true&dnt=true&url=${encodeURIComponent(url.href)}`));
 	return Extraction.make({
 		author: fromUndefinedOr(embed.author_name),
 		image: none(),
@@ -90326,7 +91102,7 @@ const xOEmbed = fnUntraced(function* (url) {
 function articleText(article) {
 	const lines = filterMap(article.content.blocks, (block) => {
 		const attached = pipe(block.entityRanges, filterMap((range) => fromOption$1(pipe(findFirst(article.content.entityMap, (entity) => entity.key === `${range.key}`), flatMapNullishOr((entity) => entity.value.data.markdown ?? entity.value.data.url)), () => void 0)));
-		const text = pipe([trim(block.text), ...attached], filter$4(isNonEmpty), join$1(" "));
+		const text = pipe([trim(block.text), ...attached], filter$5(isNonEmpty), join$1(" "));
 		if (isEmpty$2(text)) return failVoid;
 		return succeed(pipe(value(block.type), when("header-one", () => `# ${text}`), when("header-two", () => `## ${text}`), when("header-three", () => `### ${text}`), when("unordered-list-item", () => `- ${text}`), when("ordered-list-item", () => `1. ${text}`), when("blockquote", () => `> ${text}`), orElse(() => text)));
 	});
@@ -90337,27 +91113,27 @@ function said(post) {
 	return pipe([`**${post.author.name} (@${post.author.screen_name})**: ${plainText(post.text)}`, match$1(fromNullishOr(post.article), {
 		onNone: () => "",
 		onSome: articleText
-	})], filter$4(isNonEmpty), join$1("\n\n"));
+	})], filter$5(isNonEmpty), join$1("\n\n"));
 }
 function section(title, posts) {
 	if (isReadonlyArrayEmpty(posts)) return "";
 	return `## ${title}\n\n${join$1(map$3(posts, said), "\n\n")}`;
 }
 const xThread = fnUntraced(function* (url) {
-	const id = yield* pipe(match$2(/\/status\/(\d+)/u)(url.pathname), flatMap$1((match) => get$6(match, 1)), fromOption, mapError(() => NotesError.make({ message: "The link names no post." })));
-	const conversation = yield* decode$1(FxConversation, new URL(`https://api.fxtwitter.com/2/conversation/${id}`));
+	const id = yield* pipe(match$2(/\/status\/(\d+)/u)(url.pathname), flatMap$1((match) => get$8(match, 1)), fromOption, mapError(() => NotesError.make({ message: "The link names no post." })));
+	const conversation = yield* decode(FxConversation, new URL(`https://api.fxtwitter.com/2/conversation/${id}`));
 	const status = conversation.status;
 	const quote = fromNullishOr(status.quote);
 	const media = flatMap$2([status, ...toArray$1(quote)], (post) => post.media?.all ?? []);
 	const replies = conversation.replies ?? [];
-	const linked = yield* forEach(pipe(status.raw_text?.facets ?? [], filterMap((facet) => fromOption$1(pipe(fromNullishOr(facet.replacement), flatMap$1(match$2(/(?:x|twitter)\.com\/[^/]+\/status\/(\d+)/u)), flatMap$1((match) => get$6(match, 1))), () => void 0)), filter$4((linkedId) => linkedId !== status.id && !exists(quote, (post) => post.id === linkedId)), dedupe, take$1(5)), (linkedId) => option$1(map$1(decode$1(FxStatus, new URL(`https://api.fxtwitter.com/2/status/${linkedId}`)), (found) => found.status)), { concurrency: "unbounded" });
+	const linked = yield* forEach(pipe(status.raw_text?.facets ?? [], filterMap((facet) => fromOption$1(pipe(fromNullishOr(facet.replacement), flatMap$1(match$2(/(?:x|twitter)\.com\/[^/]+\/status\/(\d+)/u)), flatMap$1((match) => get$8(match, 1))), () => void 0)), filter$5((linkedId) => linkedId !== status.id && !exists(quote, (post) => post.id === linkedId)), dedupe, take$1(5)), (linkedId) => option$1(map$1(decode(FxStatus, new URL(`https://api.fxtwitter.com/2/status/${linkedId}`)), (found) => found.status)), { concurrency: "unbounded" });
 	return Extraction.make({
 		author: some$1(status.author.name),
-		image: map$4(head(media), (item) => item.thumbnail_url ?? item.url),
+		image: map$5(head(media), (item) => item.thumbnail_url ?? item.url),
 		text: pipe([
-			section("Earlier in the conversation", sort(filter$4(conversation.thread ?? [], (post) => post.id !== status.id), byTime)),
+			section("Earlier in the conversation", sort(filter$5(conversation.thread ?? [], (post) => post.id !== status.id), byTime)),
 			plainText(status.text),
-			...pipe(filter$4(replies, (post) => post.author.id === status.author.id), sort(byTime), map$3((post) => plainText(post.text))),
+			...pipe(filter$5(replies, (post) => post.author.id === status.author.id), sort(byTime), map$3((post) => plainText(post.text))),
 			match$1(quote, {
 				onNone: () => "",
 				onSome: (post) => `Quoting ${said(post)}`
@@ -90367,8 +91143,8 @@ const xThread = fnUntraced(function* (url) {
 				onSome: articleText
 			}),
 			section("Linked posts", getSomes(linked)),
-			section("Replies", take$1(filter$4(replies, (post) => post.author.id !== status.author.id), 30))
-		], filter$4(isNonEmpty), join$1("\n\n")),
+			section("Replies", take$1(filter$5(replies, (post) => post.author.id !== status.author.id), 30))
+		], filter$5(isNonEmpty), join$1("\n\n")),
 		title: `${status.author.name} on X`,
 		url: canonical(url),
 		...pipe(findFirst(media, (item) => item.type === "video" || item.type === "gif"), match$1({
@@ -90388,43 +91164,43 @@ const tikTokPhotos = fnUntraced(function* (url) {
 		author: some$1(item.author.nickname),
 		image: head(images),
 		slides: drop(images, 1),
-		text: pipe([item.imagePost.title, item.desc], filter$4(isNotUndefined), map$3(plainText), filter$4(isNonEmpty), join$1("\n")),
+		text: pipe([item.imagePost.title, item.desc], filter$5(isNotUndefined), map$3(plainText), filter$5(isNonEmpty), join$1("\n")),
 		title: `${item.author.nickname} on TikTok`,
 		url: canonical(url)
 	});
 });
 const issue = fnUntraced(function* (url, repository, number) {
-	const found = yield* decode$1(GitHubIssue, new URL(`https://api.github.com/repos/${repository}/issues/${number}`));
-	const comments = yield* decode$1(ArraySchema(GitHubComment), new URL(`https://api.github.com/repos/${repository}/issues/${number}/comments?per_page=100`));
+	const found = yield* decode(GitHubIssue, new URL(`https://api.github.com/repos/${repository}/issues/${number}`));
+	const comments = yield* decode(ArraySchema(GitHubComment), new URL(`https://api.github.com/repos/${repository}/issues/${number}/comments?per_page=100`));
 	return Extraction.make({
 		author: some$1(found.user.login),
 		image: some$1(`https://opengraph.githubassets.com/1/${repository}/issues/${number}`),
-		text: pipe([found, ...comments], map$3((post) => map$4(fromNullishOr(post.body), (body) => `**${post.user.login}**: ${body}`)), getSomes, prepend$2(`# ${found.title} (${found.state})`), join$1("\n\n")),
+		text: pipe([found, ...comments], map$3((post) => map$5(fromNullishOr(post.body), (body) => `**${post.user.login}**: ${body}`)), getSomes, prepend$2(`# ${found.title} (${found.state})`), join$1("\n\n")),
 		title: found.title,
 		url: canonical(url)
 	});
 });
 const repository = fnUntraced(function* (url, name) {
-	const found = yield* decode$1(GitHubRepo, new URL(`https://api.github.com/repos/${name}`));
-	const readme = yield* pipe(decode$1(GitHubReadme, new URL(`https://api.github.com/repos/${name}/readme`)), flatMap((file) => follow(new URL(file.download_url), api, 0)), map$1((file) => file.body), option$1);
+	const found = yield* decode(GitHubRepo, new URL(`https://api.github.com/repos/${name}`));
+	const readme = yield* pipe(decode(GitHubReadme, new URL(`https://api.github.com/repos/${name}/readme`)), flatMap((file) => follow(new URL(file.download_url), api, 0)), map$1((file) => file.body), option$1);
 	return Extraction.make({
 		author: some$1(found.owner.login),
 		image: some$1(`https://opengraph.githubassets.com/1/${name}`),
 		text: pipe([
 			fromNullishOr(found.description),
-			pipe(fromNullishOr(found.topics), filter$5(isReadonlyArrayNonEmpty), map$4((topics) => `Topics: ${join$1(topics, ", ")}`)),
+			pipe(fromNullishOr(found.topics), filter$4(isReadonlyArrayNonEmpty), map$5((topics) => `Topics: ${join$1(topics, ", ")}`)),
 			fromNullishOr(found.homepage),
 			readme
-		], getSomes, filter$4(isNonEmpty), join$1("\n\n")),
+		], getSomes, filter$5(isNonEmpty), join$1("\n\n")),
 		title: found.full_name,
 		url: canonical(url)
 	});
 });
 const gitHub = fnUntraced(function* (url) {
-	const path = filter$4(split(url.pathname, "/"), isNonEmpty);
+	const path = filter$5(split(url.pathname, "/"), isNonEmpty);
 	const name = join$1(take$1(path, 2), "/");
 	if (path.length === 2) return yield* repository(url, name);
-	return yield* pipe(all$1([get$6(path, 2), get$6(path, 3)]), filter$5((parts) => parts[0] === "issues" || parts[0] === "pull"), match$1({
+	return yield* pipe(all$2([get$8(path, 2), get$8(path, 3)]), filter$4((parts) => parts[0] === "issues" || parts[0] === "pull"), match$1({
 		onNone: () => fail$1(NotesError.make({ message: "The GitHub page is neither a repository nor an issue." })),
 		onSome: (parts) => issue(url, name, parts[1])
 	}));
@@ -90440,7 +91216,7 @@ function markdown($, node, base) {
 		"h4",
 		"h5",
 		"h6"
-	], (heading) => heading === node.tagName), map$4((index) => `\n\n${repeat$1(index + 1)("#")} ${trim(inner)}\n\n`), getOrElse(() => element($, {
+	], (heading) => heading === node.tagName), map$5((index) => `\n\n${repeat$1(index + 1)("#")} ${trim(inner)}\n\n`), getOrElse(() => element($, {
 		base,
 		inner,
 		node,
@@ -90455,10 +91231,10 @@ function element($, input) {
 			onTrue: () => `${$(input.node).index() + 1}.`
 		});
 		return `\n${repeat$1($(input.node).parents("ul, ol").length - 1)("  ")}${marker} ${text}`;
-	}), when("pre", () => `\n\n\`\`\`\n${$(input.node).text()}\n\`\`\`\n\n`), when("code", () => `\`${text}\``), when("br", () => "\n"), when("tr", () => `\n${text}`), when((name) => name === "td" || name === "th", () => `${text} | `), when("a", () => pipe(fromNullishOr($(input.node).attr("href")), flatMap$1(liftThrowable((href) => new URL(href, input.base))), filter$5((link) => (link.protocol === "https:" || link.protocol === "http:") && isNonEmpty(text)), match$1({
+	}), when("pre", () => `\n\n\`\`\`\n${$(input.node).text()}\n\`\`\`\n\n`), when("code", () => `\`${text}\``), when("br", () => "\n"), when("tr", () => `\n${text}`), when((name) => name === "td" || name === "th", () => `${text} | `), when("a", () => pipe(fromNullishOr($(input.node).attr("href")), flatMap$1(liftThrowable((href) => new URL(href, input.base))), filter$4((link) => (link.protocol === "https:" || link.protocol === "http:") && isNonEmpty(text)), match$1({
 		onNone: () => input.inner,
 		onSome: (link) => `[${text}](${link.href})`
-	}))), when((name) => contains$2(BLOCK_TAGS, name), () => `\n\n${text}\n\n`), orElse(() => input.inner));
+	}))), when((name) => contains$1(BLOCK_TAGS, name), () => `\n\n${text}\n\n`), orElse(() => input.inner));
 }
 function pageText(html, url) {
 	const $ = load$1(html);
@@ -90474,15 +91250,15 @@ function pageText(html, url) {
 		onTrue: () => part
 	})), join$1("```"), trim);
 	return Extraction.make({
-		author: pipe(fromUndefinedOr($("meta[property=\"og:site_name\"]").attr("content")), map$4(plainText), filter$5(isNonEmpty), orElseSome(() => url.hostname)),
+		author: pipe(fromUndefinedOr($("meta[property=\"og:site_name\"]").attr("content")), map$5(plainText), filter$4(isNonEmpty), orElseSome(() => url.hostname)),
 		image: pipe(fromNullishOr($("meta[property=\"og:image\"]").attr("content") ?? $("meta[name=\"twitter:image\"]").attr("content")), flatMap$1(liftThrowable((image) => new URL(image, url).href))),
-		text: pipe([map$4(fromUndefinedOr(description), plainText), some$1(body)], getSomes, filter$4(isNonEmpty), join$1("\n\n")),
+		text: pipe([map$5(fromUndefinedOr(description), plainText), some$1(body)], getSomes, filter$5(isNonEmpty), join$1("\n\n")),
 		title: plainText($("meta[property=\"og:title\"]").attr("content") ?? $("title").first().text()),
 		url: canonical(url)
 	});
 }
 const reader = fnUntraced(function* (url) {
-	const answer = yield* pipe(decode$1(Reader, new URL(`https://r.jina.ai/${url.href}`)), timeLimit("30 seconds", "The reader took too long."));
+	const answer = yield* pipe(decode(Reader, new URL(`https://r.jina.ai/${url.href}`)), timeLimit("30 seconds", "The reader took too long."));
 	if (CHALLENGE.test(answer.data.content) || isEmpty$2(trim(answer.data.content))) return yield* NotesError.make({ message: "The site blocks automated reading." });
 	return Extraction.make({
 		author: some$1(url.hostname),
@@ -90535,7 +91311,7 @@ var Sources = class Sources extends Service()("@deslop/stash/services/notes/lib/
 					try: () => new URL(link)
 				});
 				const image = yield* follow(url, readBytes, 0);
-				const type = yield* pipe(image.type, split(";"), head, map$4(trim), filter$5(is$4(ImageType)), fromOption, mapError(() => NotesError.make({ message: "The preview is not a JPEG, PNG, WebP or GIF image." })));
+				const type = yield* pipe(image.type, split(";"), head, map$5(trim), filter$4(is$4(ImageType)), fromOption, mapError(() => NotesError.make({ message: "The preview is not a JPEG, PNG, WebP or GIF image." })));
 				return {
 					bytes: image.body,
 					type
@@ -90548,328 +91324,6 @@ var Sources = class Sources extends Service()("@deslop/stash/services/notes/lib/
 	}));
 };
 //#endregion
-//#region ../../node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/encoding/Sse.js
-const SseErrorTypeId = "~effect/encoding/Sse/SseError";
-/**
-* Error reason raised when pending Server-Sent Events state exceeds the
-* configured maximum size.
-*
-* @stability unstable
-* @category errors
-* @since 4.0.0
-*/
-var EventTooLarge = class extends (/*#__PURE__*/ TaggedError("EventTooLarge")) {
-	get message() {
-		return `Pending SSE event exceeded the maximum size of ${this.maxEventSize}`;
-	}
-};
-/**
-* Error raised when decoding a Server-Sent Events stream fails.
-*
-* @stability unstable
-* @category errors
-* @since 4.0.0
-*/
-var SseError = class extends (/*#__PURE__*/ TaggedError("SseError")) {
-	/**
-	* Marks this value as an SSE decoding error.
-	*
-	* @stability unstable
-	* @since 4.0.0
-	*/
-	[SseErrorTypeId] = SseErrorTypeId;
-	/**
-	* Delegates the public message to the underlying SSE error reason.
-	*
-	* @stability unstable
-	* @since 4.0.0
-	*/
-	get message() {
-		return this.reason.message;
-	}
-};
-const defaultMaxEventSize = 10485760;
-/**
-* Creates a channel that parses Server-Sent Events text chunks into `Event` values.
-*
-* **Details**
-*
-* SSE `retry` directives are emitted as `Retry` failures so callers can
-* reconnect with the requested delay.
-*
-* @stability unstable
-* @category decoding
-* @since 4.0.0
-*/
-const decode = (options) => fromTransform((upstream, _scope) => sync(() => {
-	let buffer = [];
-	let retry;
-	const parser = makeParser((event) => {
-		if (event._tag === "Retry") retry = event;
-		else buffer.push(event);
-	}, options);
-	const pump = flatMap(upstream, (arr) => {
-		for (let i = 0; i < arr.length; i++) {
-			const error = parser.feed(arr[i]);
-			if (error !== void 0) return fail$1(error);
-		}
-		return void_;
-	});
-	return suspend(function loop() {
-		if (isArrayNonEmpty(buffer)) {
-			const out = buffer;
-			buffer = [];
-			return succeed$1(out);
-		} else if (retry) return fail$1(retry);
-		return flatMap(pump, loop);
-	});
-}));
-/**
-* Creates an SSE decoder channel that decodes each parsed event with a schema.
-*
-* **Details**
-*
-* The schema receives `{ event, data, id? }`, with string `data`. Absent IDs are
-* omitted, even with default options: use `Schema.optional(Schema.String)`, not
-* `Schema.UndefinedOr(Schema.String)`, to accept events without an ID.
-*
-* With `onExcessProperty: "error"`, declare `event` (default: `"message"`) and
-* `id` if the stream carries IDs, including inherited IDs.
-*
-* @stability unstable
-* @category decoding
-* @since 4.0.0
-*/
-const decodeSchema = (schema, options, parseOptions) => pipeTo(decode(options), decode$2(Event$1.pipe(decodeTo(schema, transformEvent)), parseOptions)());
-/**
-* Creates an SSE decoder channel that JSON-decodes each event `data` field with a schema.
-*
-* **Details**
-*
-* The output preserves the SSE `event` name and optional `id` while replacing
-* `data` with the decoded value.
-*
-* @stability unstable
-* @category decoding
-* @since 4.0.0
-*/
-const decodeDataSchema = (schema, options) => {
-	const eventSchema = Struct({
-		...EventEncoded.fields,
-		data: fromJsonString(schema)
-	});
-	return pipeTo(decode(options), map$5(decode$2(eventSchema)(), map$3((event) => ({
-		...event,
-		id: event.id
-	}))));
-};
-/**
-* Creates a stateful Server-Sent Events parser.
-*
-* **Details**
-*
-* Call `feed` with text chunks to parse `Event` and `Retry` values through the
-* callback, and call `reset` to clear any buffered event state. `feed` returns
-* an `SseError` if the pending event exceeds `maxEventSize`.
-*
-* @stability unstable
-* @category decoding
-* @since 4.0.0
-*/
-function makeParser(onParse, options) {
-	const maxEventSize = options?.maxEventSize ?? defaultMaxEventSize;
-	const dispatchEmptyNamedEvents = options?.dispatchEmptyNamedEvents === true;
-	let isFirstChunk;
-	let pending;
-	let pendingLength;
-	let discardTrailingNewline;
-	let generation = 0;
-	let lastEventId;
-	let eventName;
-	let data;
-	reset();
-	return {
-		feed,
-		reset
-	};
-	function reset() {
-		generation++;
-		isFirstChunk = true;
-		pending = [];
-		pendingLength = 0;
-		discardTrailingNewline = false;
-		lastEventId = void 0;
-		eventName = void 0;
-		data = "";
-	}
-	function feed(chunk) {
-		if (isFirstChunk && chunk.startsWith(BOM)) chunk = chunk.slice(BOM.length);
-		isFirstChunk = false;
-		const length = chunk.length;
-		const currentGeneration = generation;
-		let position = 0;
-		while (position < length) {
-			if (discardTrailingNewline) {
-				discardTrailingNewline = false;
-				if (chunk.charCodeAt(position) === LF) {
-					++position;
-					continue;
-				}
-			}
-			let lineEnd = position;
-			while (lineEnd < length) {
-				const code = chunk.charCodeAt(lineEnd);
-				if (code === CR || code === LF) break;
-				++lineEnd;
-			}
-			if (lineEnd === length) {
-				pending.push(chunk.slice(position));
-				pendingLength += length - position;
-				break;
-			}
-			discardTrailingNewline = chunk.charCodeAt(lineEnd) === CR;
-			let line = chunk.slice(position, lineEnd);
-			if (pending.length > 0) {
-				pending.push(line);
-				line = pending.join("");
-				pending = [];
-				pendingLength = 0;
-			}
-			parseLine(line);
-			if (generation !== currentGeneration) return;
-			position = lineEnd + 1;
-		}
-		if (pendingLength + data.length > maxEventSize) {
-			const error = new SseError({ reason: new EventTooLarge({ maxEventSize }) });
-			reset();
-			return error;
-		}
-	}
-	function parseLine(line) {
-		if (line.length === 0) {
-			const named = eventName !== void 0 && eventName !== "";
-			const event = eventName || "message";
-			const eventData = data;
-			eventName = void 0;
-			data = "";
-			if (eventData.length > 0 || dispatchEmptyNamedEvents && named) onParse({
-				_tag: "Event",
-				id: lastEventId,
-				event,
-				data: eventData.slice(0, -1)
-			});
-			return;
-		}
-		const colon = line.indexOf(":");
-		let field = line;
-		let value = "";
-		if (colon >= 0) {
-			field = line.slice(0, colon);
-			value = line.slice(line.charCodeAt(colon + 1) === SPACE ? colon + 2 : colon + 1);
-		}
-		if (field === "data") data += value + "\n";
-		else if (field === "event") eventName = value;
-		else if (field === "id" && !value.includes("\0")) lastEventId = value;
-		else if (field === "retry" && /^\d+$/.test(value)) onParse(new Retry({
-			duration: millis(parseInt(value, 10)),
-			lastEventId
-		}));
-	}
-}
-const BOM = "";
-const LF = 10;
-const CR = 13;
-const SPACE = 32;
-/**
-* Schema for the untagged Server-Sent Events payload shape containing an optional `id`, `event`, and string `data` fields.
-*
-* @stability unstable
-* @category models
-* @since 4.0.0
-*/
-const EventEncoded = /*#__PURE__*/ Struct({
-	id: /*#__PURE__*/ optional$1(String$1),
-	event: String$1,
-	data: String$1
-});
-/**
-* Schema for the tagged Server-Sent Events message model that adds `_tag: "Event"` to the event name, optional event ID, and string data payload.
-*
-* @stability unstable
-* @category models
-* @since 4.0.0
-*/
-const Event$1 = /*#__PURE__*/ Struct({
-	_tag: /*#__PURE__*/ tag("Event"),
-	id: /*#__PURE__*/ UndefinedOr(String$1),
-	event: String$1,
-	data: String$1
-});
-/**
-* Schema for transforming untagged SSE event payloads into tagged `Event`
-* models.
-*
-* @stability unstable
-* @category models
-* @since 4.0.0
-*/
-const transformEvent = /*#__PURE__*/ transform$1({
-	decode: (event) => event.id === void 0 ? {
-		event: event.event,
-		data: event.data
-	} : {
-		id: event.id,
-		event: event.event,
-		data: event.data
-	},
-	encode: (event) => ({
-		_tag: "Event",
-		id: event.id,
-		event: event.event ?? "message",
-		data: event.data
-	})
-});
-const RetryTypeId = "~effect/encoding/Sse/Retry";
-/**
-* Represents a Server-Sent Events retry directive.
-*
-* **Details**
-*
-* Decoders surface this value as a failure to request reconnection after
-* `duration`; encoders serialize an upstream `Retry` failure as a `retry:` line.
-*
-* @stability unstable
-* @category models
-* @since 4.0.0
-*/
-var Retry = class Retry extends (/*#__PURE__*/ TaggedClass("Retry")) {
-	/**
-	* Marks this value as an SSE retry directive for runtime guards.
-	*
-	* @stability unstable
-	* @since 4.0.0
-	*/
-	[RetryTypeId] = RetryTypeId;
-	/**
-	* Returns `true` when the value is an SSE retry directive.
-	*
-	* @stability unstable
-	* @since 4.0.0
-	*/
-	static is(u) {
-		return hasProperty(u, RetryTypeId);
-	}
-	/**
-	* Separates SSE retry directives from regular event values.
-	*
-	* @stability unstable
-	* @since 4.0.0
-	*/
-	static filter(u) {
-		return Retry.is(u) ? succeed(u) : fail(u);
-	}
-};
-//#endregion
 //#region ../../node_modules/.pnpm/@effect+ai-anthropic@4.0.5_effect@4.0.5/node_modules/@effect/ai-anthropic/dist/AnthropicConfig.js
 /**
 * The `AnthropicConfig` module lets a workflow temporarily customize the HTTP
@@ -94399,9 +94853,9 @@ const HttpRequestDetails$1 = /*#__PURE__*/ Struct({
 		"QUERY"
 	]),
 	url: String$1,
-	urlParams: ArraySchema(Tuple([String$1, Union([String$1, Redacted(String$1)])])),
+	urlParams: ArraySchema(Tuple([String$1, Union([String$1, Redacted$1(String$1)])])),
 	hash: optional$1(String$1),
-	headers: Record$1(String$1, Union([String$1, Redacted(String$1)]))
+	headers: Record$1(String$1, Union([String$1, Redacted$1(String$1)]))
 }).annotate({ identifier: "HttpRequestDetails" });
 /**
 * Schema for HTTP responses from an AI provider.
@@ -94427,7 +94881,7 @@ const HttpRequestDetails$1 = /*#__PURE__*/ Struct({
 */
 const HttpResponseDetails$1 = /*#__PURE__*/ Struct({
 	status: Int,
-	headers: Record$1(String$1, Union([String$1, Redacted(String$1)]))
+	headers: Record$1(String$1, Union([String$1, Redacted$1(String$1)]))
 }).annotate({ identifier: "HttpResponseDetails" });
 const ReasonTypeId = "~effect/ai/AiError/Reason";
 const providerMetadataWithDefaults = () => ProviderMetadata$1.pipe(withConstructorDefault(succeed$1({})), withDecodingDefault(succeed$1({})));
@@ -96473,7 +96927,7 @@ const Strict = /*#__PURE__*/ Reference("effect/ai/Tool/Strict", { defaultValue:
 * @category getters
 * @since 4.0.0
 */
-const getStrictMode = (tool) => get$5(tool.annotations, Strict);
+const getStrictMode = (tool) => get$6(tool.annotations, Strict);
 const suspectProtoRx = /"__proto__"\s*:/;
 const suspectConstructorRx = /"constructor"\s*:/;
 function _parse(text) {
@@ -96593,7 +97047,7 @@ function toCodec(schema) {
 	const encoded = toEncoded(jsonCodec.ast);
 	const from = transform(encoded);
 	if (from === encoded) return jsonCodec.ast === schema.ast ? schema : jsonCodec;
-	return make$41(decodeTo$1(from, jsonCodec.ast, passthrough$1()));
+	return make$44(decodeTo$1(from, jsonCodec.ast, passthrough$1()));
 }
 function transform(root) {
 	let cache;
@@ -96723,7 +97177,7 @@ function compilerAnnotations(annotations) {
 }
 function optionalToNullable(type) {
 	return decodeTo$1(new Union$1([type, null_]), optionalKey$1(type), transformOptional({
-		decode: filter$5(isNotNull),
+		decode: filter$4(isNotNull),
 		encode: orElseSome(() => null)
 	}));
 }
@@ -97530,7 +97984,7 @@ const fromResponseParts = (parts) => {
 			break;
 		case "file":
 			assistantParts.push(makePart$1("file", {
-				data: encode(part.data),
+				data: encode$1(part.data),
 				mediaType: part.mediaType,
 				options: part.metadata
 			}));
@@ -98341,7 +98795,7 @@ const TypeId$1 = "~effect/ai/Toolkit";
 * @since 4.0.0
 */
 const FailureOrigin = /*#__PURE__*/ Reference("effect/ai/Toolkit/FailureOrigin", { defaultValue: () => "result" });
-const failureCause = (error, origin) => annotate(fail$4(error), make$42(FailureOrigin, origin));
+const failureCause = (error, origin) => annotate(fail$4(error), make$40(FailureOrigin, origin));
 const Proto = {
 	.../*#__PURE__*/ Prototype({
 		label: "Toolkit",
@@ -98413,7 +98867,7 @@ const Proto = {
 						})));
 					}
 					const decodedParams = decodedParamsResult.success;
-					const queue = yield* make$36();
+					const queue = yield* make$38();
 					const context = {
 						toolCallId,
 						preliminary: (result) => asVoid(offer(queue, {
@@ -98479,7 +98933,7 @@ const Proto = {
 					context: services
 				});
 			}
-			return makeUnsafe$3(context$1);
+			return makeUnsafe$4(context$1);
 		});
 	},
 	toLayer(build) {
@@ -99090,11 +99544,11 @@ const make$1 = /*#__PURE__*/ fnUntraced(function* (params) {
 				return void_;
 			}) : identity)));
 		}
-		const queue = yield* make$36();
+		const queue = yield* make$38();
 		const deferredFinishParts = [];
 		if (preResolvedStreamParts.length > 0) yield* offerAll(queue, preResolvedStreamParts);
 		const toolCallFibers = yield* make$20();
-		const toolCallSemaphore = concurrency === "unbounded" ? void 0 : yield* make$34(concurrency);
+		const toolCallSemaphore = concurrency === "unbounded" ? void 0 : yield* make$36(concurrency);
 		const pendingToolCalls = /* @__PURE__ */ new Map();
 		const bufferedToolCalls = [];
 		const handleToolCall = fnUntraced(function* (part) {
@@ -99703,7 +100157,7 @@ const prepareMessages = /*#__PURE__*/ fnUntraced(function* ({ betas, capabilitie
 									} : {
 										type: "base64",
 										media_type: mediaType,
-										data: typeof part.data === "string" ? part.data.replace(/^data:[^;]+;base64,/, "") : encode(part.data)
+										data: typeof part.data === "string" ? part.data.replace(/^data:[^;]+;base64,/, "") : encode$1(part.data)
 									};
 									content.push({
 										type: "image",
@@ -99720,7 +100174,7 @@ const prepareMessages = /*#__PURE__*/ fnUntraced(function* ({ betas, capabilitie
 									} : part.mediaType === "application/pdf" ? {
 										type: "base64",
 										media_type: "application/pdf",
-										data: typeof part.data === "string" ? part.data : encode(part.data)
+										data: typeof part.data === "string" ? part.data : encode$1(part.data)
 									} : {
 										type: "text",
 										media_type: "text/plain",
@@ -101203,7 +101657,7 @@ const INSTRUCTIONS = pipe([
 ], join$1(" "));
 var Organizer = class Organizer extends Service()("@deslop/stash/services/notes/lib/organization/Organizer") {
 	static layer = effect(this, gen(function* () {
-		const key = yield* option(Redacted$1("ANTHROPIC_API_KEY"));
+		const key = yield* option(Redacted("ANTHROPIC_API_KEY"));
 		const model = yield* pipe(make({
 			config: {
 				max_tokens: 32e3,
@@ -101222,7 +101676,7 @@ var Organizer = class Organizer extends Service()("@deslop/stash/services/notes/
 				`Link title: ${input.note.title}`,
 				`Saved text: ${input.note.text}`,
 				`Link content: ${slice$2(0, 15e4)(input.note.content)}`,
-				`Video transcript: ${pipe(fromUndefinedOr(input.note.transcript), map$4(slice$2(0, 15e4)), getOrElse(() => "none"))}`
+				`Video transcript: ${pipe(fromUndefinedOr(input.note.transcript), map$5(slice$2(0, 15e4)), getOrElse(() => "none"))}`
 			], "\n");
 			const response = yield* model.generateObject({
 				prompt: [{
@@ -101246,7 +101700,7 @@ var Organizer = class Organizer extends Service()("@deslop/stash/services/notes/
 				tags: normalizeTags(response.value.tags)
 			};
 		}, timeout("5 minutes"), mapError((cause) => pipe(liftPredicate(cause, is$4(NotesError)), getOrElse(() => NotesError.make({
-			cause: make$43(cause),
+			cause: make$45(cause),
 			message: "AI tagging failed; the note is saved as it is."
 		}))))) });
 	}));
@@ -101291,7 +101745,7 @@ const openStore = fnUntraced(function* (path) {
 //#region src/services/notes/service.ts
 function withWords(note, text) {
 	const known = pipe(note.text, toLowerCase, split(/\s+/u));
-	const added = pipe(commentFor(text), split(" "), filter$4((word) => isNonEmpty(word) && !contains$2(known, toLowerCase(word))));
+	const added = pipe(commentFor(text), split(" "), filter$5((word) => isNonEmpty(word) && !contains$1(known, toLowerCase(word))));
 	if (isReadonlyArrayEmpty(added)) return note;
 	return {
 		...note,
@@ -101324,7 +101778,7 @@ var Notes = class Notes extends Service()("@deslop/stash/services/notes/service/
 		const directory = yield* pipe(String$2("STASH_DATA_DIR"), withDefault(path.join(yield* String$2("HOME"), ".deslop", "stash")));
 		const images = path.join(directory, "images");
 		const files = path.join(directory, "files");
-		const reading = yield* make$34(2);
+		const reading = yield* make$36(2);
 		const runs = yield* make$18();
 		const storageFailed = mapError((cause) => NotesError.make({
 			cause,
@@ -101348,7 +101802,7 @@ var Notes = class Notes extends Service()("@deslop/stash/services/notes/service/
 			}));
 		}
 		function updateNote(id, change) {
-			return transact((current) => make$44(void 0, changeNote(current, id, change)));
+			return transact((current) => make$46(void 0, changeNote(current, id, change)));
 		}
 		function findNote(id) {
 			return map$1(get$1(state), (notes) => findFirst(notes, (note) => note.id === id));
@@ -101395,7 +101849,7 @@ var Notes = class Notes extends Service()("@deslop/stash/services/notes/service/
 			}));
 		}
 		const keepImages = fnUntraced(function* (note, page) {
-			yield* pipe(forEach(toArray$1(filter$5(page.image, () => note.image === void 0)), (image) => flatMap(sources.image(image), (bytes) => storeImage(note.id, bytes)), {
+			yield* pipe(forEach(toArray$1(filter$4(page.image, () => note.image === void 0)), (image) => flatMap(sources.image(image), (bytes) => storeImage(note.id, bytes)), {
 				concurrency: "unbounded",
 				discard: true
 			}), ignore$1({
@@ -101417,7 +101871,7 @@ var Notes = class Notes extends Service()("@deslop/stash/services/notes/service/
 				}),
 				onSuccess: (page) => ({
 					...omit(item, ["issue"]),
-					...match$1(filter$5(page.author, isNonEmpty), {
+					...match$1(filter$4(page.author, isNonEmpty), {
 						onNone: () => ({}),
 						onSome: (author) => ({ author })
 					}),
@@ -101442,9 +101896,9 @@ var Notes = class Notes extends Service()("@deslop/stash/services/notes/service/
 				onSuccess: (page) => page.video ?? page.url
 			});
 			const read = yield* pipe(media.read(video), asSome, optional("The video could not be read", none));
-			const transcript = yield* pipe(filter$5(read, () => note.transcript === void 0), map$4((details) => pipe(details.transcript, optional("No transcript", none))), transposeOption, map$1(flatten));
+			const transcript = yield* pipe(filter$4(read, () => note.transcript === void 0), map$5((details) => pipe(details.transcript, optional("No transcript", none))), transposeOption, map$1(flatten));
 			yield* updateNote(note.id, (item) => ({
-				...match$1(filter$5(read, () => sourceFor(url) !== "X" || isFailure(extraction)), {
+				...match$1(filter$4(read, () => sourceFor(url) !== "X" || isFailure(extraction)), {
 					onNone: () => item,
 					onSome: (details) => ({
 						...omit(item, ["issue"]),
@@ -101500,7 +101954,7 @@ var Notes = class Notes extends Service()("@deslop/stash/services/notes/service/
 				onTrue: () => void_
 			})), (effect) => run$1(runs, note.id, effect), asVoid);
 		}
-		yield* forEach(filter$4(yield* get$1(state), (note) => note.status === "organizing"), start, {
+		yield* forEach(filter$5(yield* get$1(state), (note) => note.status === "organizing"), start, {
 			concurrency: 1,
 			discard: true
 		});
@@ -101541,8 +101995,8 @@ var Notes = class Notes extends Service()("@deslop/stash/services/notes/service/
 				text: ""
 			});
 			const earlier = yield* transact((current) => match$1(findFirst(current, (item) => item.id === input.id), {
-				onNone: () => make$44(none(), prepend$2(current, note)),
-				onSome: (item) => make$44(some$1(item), current)
+				onNone: () => make$46(none(), prepend$2(current, note)),
+				onSome: (item) => make$46(some$1(item), current)
 			}));
 			return yield* match$1(earlier, {
 				onNone: () => as$1(start(note), note),
@@ -101553,7 +102007,7 @@ var Notes = class Notes extends Service()("@deslop/stash/services/notes/service/
 			capture: fn$1("Notes.capture")(function* (input) {
 				const text = trim(input.text);
 				if (isEmpty$2(text)) return yield* NotesError.make({ message: "Paste a link or write a note." });
-				const url = yield* pipe(fromUndefinedOr(captureUrl(text)), map$4((link) => orElseSucceed(sources.resolve(link), () => link)), transposeOption);
+				const url = yield* pipe(fromUndefinedOr(captureUrl(text)), map$5((link) => orElseSucceed(sources.resolve(link), () => link)), transposeOption);
 				const createdAt = toEpochMillis(yield* now);
 				const saved = yield* transact((current) => match$1(findFirst(current, (note) => note.id === input.id || exists(url, (link) => note.url === link)), {
 					onNone: () => {
@@ -101575,18 +102029,18 @@ var Notes = class Notes extends Service()("@deslop/stash/services/notes/service/
 								onSome: (link) => ({ url: link })
 							})
 						});
-						return make$44({
+						return make$46({
 							fresh: true,
 							note
 						}, prepend$2(current, note));
 					},
 					onSome: (note) => {
 						const merged = withWords(note, text);
-						if (note.id === input.id || merged === note) return make$44({
+						if (note.id === input.id || merged === note) return make$46({
 							fresh: false,
 							note
 						}, current);
-						return make$44({
+						return make$46({
 							fresh: false,
 							note: merged
 						}, changeNote(current, note.id, () => merged));
@@ -101630,22 +102084,22 @@ var Notes = class Notes extends Service()("@deslop/stash/services/notes/service/
 			regenerate: fn$1("Notes.regenerate")(function* (input) {
 				yield* remove$1(runs, input.id);
 				const reset = yield* transact((current) => match$1(findFirst(current, (note) => note.id === input.id), {
-					onNone: () => make$44(none(), current),
+					onNone: () => make$46(none(), current),
 					onSome: (found) => {
 						const next = {
 							...omit(found, ["issue", "transcript"]),
 							status: "organizing"
 						};
-						return make$44(some$1(next), changeNote(current, input.id, () => next));
+						return make$46(some$1(next), changeNote(current, input.id, () => next));
 					}
 				}));
 				yield* pipe(fromOption(reset), missing, flatMap(start));
 			}),
 			remove: fn$1("Notes.remove")(function* (input) {
 				yield* remove$1(runs, input.id);
-				yield* transact((current) => make$44(void 0, match(some$2(current, (note) => note.id === input.id), {
+				yield* transact((current) => make$46(void 0, match(some$2(current, (note) => note.id === input.id), {
 					onFalse: () => current,
-					onTrue: () => filter$4(current, (note) => note.id !== input.id)
+					onTrue: () => filter$5(current, (note) => note.id !== input.id)
 				})));
 				yield* pipe(fs.remove(path.join(images, input.id), { force: true }), storageFailed);
 				yield* pipe(fs.remove(path.join(files, input.id), { force: true }), storageFailed);
@@ -101672,7 +102126,7 @@ const RpcHandlers = RpcContracts.toLayer(gen(function* () {
 //#endregion
 //#region src/main.server.ts
 const noteIdParam = schemaPathParams(Struct({ id: NoteId }));
-const routes = use((router) => gen(function* () {
+const routes = pipe(use((router) => gen(function* () {
 	const notes = yield* Notes;
 	yield* router.add("POST", "/api/capture", gen(function* () {
 		return yield* schemaJson(Note)(yield* notes.capture(yield* schemaBodyJson(Capture)));
@@ -101693,12 +102147,12 @@ const routes = use((router) => gen(function* () {
 			headers: { "cache-control": "private, max-age=31536000, immutable" }
 		});
 	}));
-}));
+})), provide$1(HttpAuth.layer));
 const rpc = pipe(layerHttp({
 	group: RpcContracts,
 	path: "/api/rpc",
 	protocol: "websocket"
-}), provide(RpcHandlers), provide(layerJson$1));
-runMain(pipe(serve(merge$3(rpc, routes), { disableLogger: true }), provide(Notes.layer), provide(mergeAll(Sources.layer, Media.layer, Organizer.layer)), provide(mergeAll(layer$4, layer$6, layer$11)), provide(layer("@deslop/stash")), provide(layerNodeHttpServer), launch));
+}), provide$1(RpcHandlers), provide$1(layerJson$1));
+runMain(pipe(serve(pipe(merge$3(rpc, routes), provide$1(Auth.layer)), { disableLogger: true }), provide$1(Notes.layer), provide$1(mergeAll(Sources.layer, Media.layer, Organizer.layer)), provide$1(mergeAll(layer$4, layer$6, layer$11)), provide$1(layer("@deslop/stash")), provide$1(layerNodeHttpServer), launch));
 //#endregion
 export {};