@dudousxd/nestjs-durable-dashboard 0.50.0 → 0.51.1

package/dist/server/index.cjs

@@ -245,11 +245,30 @@ var DashboardService = class {
   }
   /**
   * Deliver a `ctx.webhook()` callback: turn an inbound POST (token + body) into the signal the
-  * waiting run is parked on. Returns the run result, or `null` if no run waits on that token (a
-  * stale/duplicate callback) — a safe no-op the controller maps to 404. Control-plane-only.
+  * run is (or will be) parked on. A callback that arrives BEFORE the run reaches `wait()` (the url
+  * was handed out and the run is still busy or sleeping) is buffered, and `wait()` consumes it, so
+  * the result is the run's current status. Returns `null` — mapped to 404 by the controller — for a
+  * token that is not a webhook token, whose run doesn't exist or is terminal, or whose wait already
+  * resolved (a duplicate): nothing is buffered for those, so a public endpoint can't leave junk
+  * rows behind or signal non-webhook tokens. Control-plane-only.
   */
   async deliverWebhook(token, body) {
-    return this.controlPlane().engine.signal(token, body);
+    const { store, engine } = this.controlPlane();
+    const parsed = (0, import_nestjs_durable_core.parseWebhookToken)(token);
+    if (!parsed) return null;
+    const run = await store.getRun(parsed.runId);
+    if (!run || import_nestjs_durable_core.TERMINAL_RUN_STATUSES.includes(run.status)) return null;
+    const resolved = await store.getCheckpoint(parsed.runId, parsed.seq);
+    if (resolved?.status === "completed") return null;
+    const delivered = await engine.signal(token, body);
+    if (delivered) return delivered;
+    const now = await store.getCheckpoint(parsed.runId, parsed.seq);
+    if (now?.status === "completed" && await store.takeBufferedSignal(token)) return null;
+    const fresh = await store.getRun(parsed.runId);
+    return {
+      runId: run.id,
+      status: fresh?.status ?? run.status
+    };
   }
   /** Side-effect-free read of a value a run published via `ctx.setEvent` (a live query). Control-plane-only. */
   async getEvent(runId, key) {
@@ -289,7 +308,7 @@ DashboardService = _ts_decorate([
 
 // src/server/durable-api.controller.ts
 var import_nestjs_filter2 = require("@dudousxd/nestjs-filter");
-var import_common4 = require("@nestjs/common");
+var import_common5 = require("@nestjs/common");
 
 // src/server/durable-run.ts
 var DurableRun = class {
@@ -364,6 +383,129 @@ function runValueAxisFor(field) {
 }
 __name(runValueAxisFor, "runValueAxisFor");
 
+// src/server/not-modified.ts
+var import_common2 = require("@nestjs/common");
+
+// src/server/auth/response.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+__name(isRecord, "isRecord");
+function isRawCookieResponse(value) {
+  return isRecord(value) && typeof value.getHeader === "function" && typeof value.setHeader === "function";
+}
+__name(isRawCookieResponse, "isRawCookieResponse");
+function resolveCookieResponse(response) {
+  if (isRawCookieResponse(response)) return response;
+  if (isRecord(response) && isRawCookieResponse(response.raw)) return response.raw;
+  return null;
+}
+__name(resolveCookieResponse, "resolveCookieResponse");
+function existingSetCookies(response) {
+  const current = response.getHeader("set-cookie");
+  if (Array.isArray(current)) return current;
+  if (typeof current === "string") return [
+    current
+  ];
+  return [];
+}
+__name(existingSetCookies, "existingSetCookies");
+function appendSetCookie(response, cookie) {
+  const raw = resolveCookieResponse(response);
+  if (!raw) return;
+  raw.setHeader("set-cookie", [
+    ...existingSetCookies(raw),
+    cookie
+  ]);
+}
+__name(appendSetCookie, "appendSetCookie");
+function isRawRedirectResponse(value) {
+  return isRecord(value) && typeof value.getHeader === "function" && typeof value.setHeader === "function" && typeof value.end === "function";
+}
+__name(isRawRedirectResponse, "isRawRedirectResponse");
+function resolveRedirectResponse(response) {
+  if (isRawRedirectResponse(response)) return response;
+  if (isRecord(response) && isRawRedirectResponse(response.raw)) return response.raw;
+  return null;
+}
+__name(resolveRedirectResponse, "resolveRedirectResponse");
+function redirectRaw(response, location, status = 302) {
+  const raw = resolveRedirectResponse(response);
+  if (!raw) return;
+  raw.statusCode = status;
+  raw.setHeader("location", location);
+  raw.end();
+}
+__name(redirectRaw, "redirectRaw");
+function responseAlreadyWritten(response) {
+  const raw = resolveRedirectResponse(response);
+  return raw?.headersSent === true;
+}
+__name(responseAlreadyWritten, "responseAlreadyWritten");
+function writeHtmlRaw(response, html, status = 200) {
+  const raw = resolveRedirectResponse(response);
+  if (!raw) return;
+  raw.statusCode = status;
+  raw.setHeader("content-type", "text/html; charset=utf-8");
+  raw.setHeader("cache-control", "no-store, must-revalidate");
+  raw.end(html);
+}
+__name(writeHtmlRaw, "writeHtmlRaw");
+function setRawHeader(response, name, value) {
+  resolveCookieResponse(response)?.setHeader(name, value);
+}
+__name(setRawHeader, "setRawHeader");
+function writeNotModifiedRaw(response, etag) {
+  const raw = resolveRedirectResponse(response);
+  if (!raw) return;
+  raw.statusCode = 304;
+  raw.setHeader("etag", etag);
+  raw.setHeader("cache-control", "private, no-cache");
+  raw.end();
+}
+__name(writeNotModifiedRaw, "writeNotModifiedRaw");
+
+// src/server/not-modified.ts
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate2, "_ts_decorate");
+var NotModifiedException = class extends import_common2.HttpException {
+  static {
+    __name(this, "NotModifiedException");
+  }
+  etag;
+  constructor(etag) {
+    super("Not Modified", 304), this.etag = etag;
+  }
+};
+var NotModifiedFilter = class {
+  static {
+    __name(this, "NotModifiedFilter");
+  }
+  catch(exception, host) {
+    writeNotModifiedRaw(host.switchToHttp().getResponse(), exception.etag);
+  }
+};
+NotModifiedFilter = _ts_decorate2([
+  (0, import_common2.Catch)(NotModifiedException)
+], NotModifiedFilter);
+function setEtag(response, etag) {
+  setRawHeader(response, "etag", etag);
+  setRawHeader(response, "cache-control", "private, no-cache");
+}
+__name(setEtag, "setEtag");
+
 // src/server/run-list-row.ts
 function toRunListRow(run) {
   const { input: _input, output: _output, error: _error, ...row } = run;
@@ -373,7 +515,7 @@ __name(toRunListRow, "toRunListRow");
 
 // src/server/run.filter.ts
 var import_nestjs_filter = require("@dudousxd/nestjs-filter");
-var import_common3 = require("@nestjs/common");
+var import_common4 = require("@nestjs/common");
 
 // src/server/attr-filter.ts
 var SCALAR_OPS = /* @__PURE__ */ new Set([
@@ -424,7 +566,7 @@ __name(parseAttrFilters, "parseAttrFilters");
 
 // src/server/run-query.adapter.ts
 var import_nestjs_durable_core2 = require("@dudousxd/nestjs-durable-core");
-var import_common2 = require("@nestjs/common");
+var import_common3 = require("@nestjs/common");
 
 // src/server/run-query-draft.ts
 var RunQueryDraft2 = class {
@@ -454,7 +596,7 @@ var RunQueryDraft2 = class {
 };
 
 // src/server/run-query.adapter.ts
-function _ts_decorate2(decorators, target, key, desc) {
+function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -467,7 +609,7 @@ function _ts_decorate2(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate2, "_ts_decorate");
+__name(_ts_decorate3, "_ts_decorate");
 function _ts_metadata2(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -495,7 +637,7 @@ function operands(clause) {
 }
 __name(operands, "operands");
 function unsupported(clause, supported) {
-  throw new import_common2.BadRequestException(`The durable run list cannot filter \`${clause.field}\` with \`${clause.operator}\`. Supported here: ${supported}.`);
+  throw new import_common3.BadRequestException(`The durable run list cannot filter \`${clause.field}\` with \`${clause.operator}\`. Supported here: ${supported}.`);
 }
 __name(unsupported, "unsupported");
 var RunQueryAdapter = class {
@@ -533,7 +675,7 @@ var RunQueryAdapter = class {
     const draft = this.draft(qb);
     for (const clause of filters) {
       if (clause.AND || clause.OR) {
-        throw new import_common2.BadRequestException("The durable run list cannot filter with nested AND/OR groups: its predicates are a flat conjunction.");
+        throw new import_common3.BadRequestException("The durable run list cannot filter with nested AND/OR groups: its predicates are a flat conjunction.");
       }
       this.applyClause(draft, clause);
     }
@@ -624,7 +766,7 @@ var RunQueryAdapter = class {
   applyAttributeClause(draft, clause) {
     const key = clause.field.slice(ATTRIBUTE_FIELD.length + 1);
     if (!key) {
-      throw new import_common2.BadRequestException("Filtering search attributes needs a key: `attr.<key>`, e.g. `attr.tier`.");
+      throw new import_common3.BadRequestException("Filtering search attributes needs a key: `attr.<key>`, e.g. `attr.tier`.");
     }
     const scalarOps = {
       equals: "eq",
@@ -668,7 +810,7 @@ var RunQueryAdapter = class {
   applySort(_qb, sorts) {
     for (const sort of sorts) {
       if (sort.field !== FIXED_ORDER.field || sort.direction !== FIXED_ORDER.direction) {
-        throw new import_common2.BadRequestException(`The durable run list is always ordered \`${FIXED_ORDER.field} ${FIXED_ORDER.direction}\` and cannot be sorted by \`${sort.field} ${sort.direction}\`.`);
+        throw new import_common3.BadRequestException(`The durable run list is always ordered \`${FIXED_ORDER.field} ${FIXED_ORDER.direction}\` and cannot be sorted by \`${sort.field} ${sort.direction}\`.`);
       }
     }
   }
@@ -709,14 +851,14 @@ var RunQueryAdapter = class {
   async groupByCount(qb, field, entity, opts) {
     this.assertDurableRun(entity);
     if (typeof field !== "string") {
-      throw new import_common2.BadRequestException("The durable run list has no computed fields to group by \u2014 group by one of its own fields.");
+      throw new import_common3.BadRequestException("The durable run list has no computed fields to group by \u2014 group by one of its own fields.");
     }
     if (opts?.bucket !== void 0) {
-      throw new import_common2.BadRequestException("The durable run list cannot bucket a group-by-count: none of its filterable fields is numeric.");
+      throw new import_common3.BadRequestException("The durable run list cannot bucket a group-by-count: none of its filterable fields is numeric.");
     }
     const axis = runValueAxisFor(field);
     if (!axis) {
-      throw new import_common2.BadRequestException(`The durable run list cannot enumerate values of \`${field}\`.`);
+      throw new import_common3.BadRequestException(`The durable run list cannot enumerate values of \`${field}\`.`);
     }
     const rows = await this.gateway.runValueFacets(axis, this.draft(qb).facetQuery(), {
       limit: opts?.limit ?? import_nestjs_durable_core2.RUN_VALUE_FACET_LIMIT,
@@ -747,8 +889,8 @@ var RunQueryAdapter = class {
     }
   }
 };
-RunQueryAdapter = _ts_decorate2([
-  (0, import_common2.Injectable)(),
+RunQueryAdapter = _ts_decorate3([
+  (0, import_common3.Injectable)(),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     typeof import_nestjs_durable_core2.RunGateway === "undefined" ? Object : import_nestjs_durable_core2.RunGateway
@@ -756,7 +898,7 @@ RunQueryAdapter = _ts_decorate2([
 ], RunQueryAdapter);
 
 // src/server/run.filter.ts
-function _ts_decorate3(decorators, target, key, desc) {
+function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -769,7 +911,7 @@ function _ts_decorate3(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate3, "_ts_decorate");
+__name(_ts_decorate4, "_ts_decorate");
 function _ts_metadata3(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -895,7 +1037,7 @@ var RunFilter = class extends import_nestjs_filter.BaseFilter {
     });
   }
 };
-_ts_decorate3([
+_ts_decorate4([
   (0, import_nestjs_filter.FilterFor)("status"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -903,7 +1045,7 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyStatus", null);
-_ts_decorate3([
+_ts_decorate4([
   (0, import_nestjs_filter.FilterFor)("workflow"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -911,7 +1053,7 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyWorkflow", null);
-_ts_decorate3([
+_ts_decorate4([
   (0, import_nestjs_filter.FilterFor)("namespace"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -919,7 +1061,7 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyNamespace", null);
-_ts_decorate3([
+_ts_decorate4([
   (0, import_nestjs_filter.FilterFor)("tag"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -927,19 +1069,19 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyTag", null);
-_ts_decorate3([
+_ts_decorate4([
   (0, import_nestjs_filter.FilterFor)("origin"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", []),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyOrigin", null);
-_ts_decorate3([
+_ts_decorate4([
   (0, import_nestjs_filter.FilterFor)("unattributed"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", []),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyUnattributed", null);
-_ts_decorate3([
+_ts_decorate4([
   (0, import_nestjs_filter.FilterFor)("attr"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -947,7 +1089,7 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyAttributes", null);
-_ts_decorate3([
+_ts_decorate4([
   (0, import_nestjs_filter.FilterFor)("limit"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -955,7 +1097,7 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyLimit", null);
-_ts_decorate3([
+_ts_decorate4([
   (0, import_nestjs_filter.FilterFor)("offset"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -963,8 +1105,8 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyOffset", null);
-RunFilter = _ts_decorate3([
-  (0, import_common3.Injectable)(),
+RunFilter = _ts_decorate4([
+  (0, import_common4.Injectable)(),
   (0, import_nestjs_filter.Filterable)({
     entity: DurableRun,
     adapter: RUN_QUERY_ADAPTER,
@@ -973,7 +1115,7 @@ RunFilter = _ts_decorate3([
 ], RunFilter);
 
 // src/server/durable-api.controller.ts
-function _ts_decorate4(decorators, target, key, desc) {
+function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -986,7 +1128,7 @@ function _ts_decorate4(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate4, "_ts_decorate");
+__name(_ts_decorate5, "_ts_decorate");
 function _ts_metadata4(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -1101,23 +1243,43 @@ var DurableApiController = class {
   /**
   * A run's detail. Fans wider than {@link FAN_INLINE_MAX} come back as one `FanSummary` each, their
   * members paged by `runs/:id/fans/:group`; `?full=true` returns every checkpoint instead.
+  *
+  * When the gateway can version the detail without reading it, the response carries an `ETag`, and
+  * a poll whose `If-None-Match` still names it gets a 304 before the timeline is read. The browser
+  * sends that header itself (the response is `no-cache`), so a console poll needs no code for it.
   */
-  async run(id, full) {
+  async run(id, full, ifNoneMatch, response) {
     const detail = await this.dashboard.getRunDetail(id, full === "true" ? void 0 : {
-      summarizeFansOver: FAN_INLINE_MAX
+      summarizeFansOver: FAN_INLINE_MAX,
+      ...ifNoneMatch && {
+        ifNoneMatch
+      }
     });
-    if (!detail) throw new import_common4.NotFoundException(`run ${id} not found`);
-    return detail;
+    if (!detail) throw new import_common5.NotFoundException(`run ${id} not found`);
+    const { etag, notModified, ...body } = detail;
+    if (etag) {
+      if (notModified) throw new NotModifiedException(etag);
+      setEtag(response, etag);
+    }
+    return body;
   }
-  /** One page of a summarized fan's members, in seq order. */
-  async fanMembers(id, group, offset, limit, failed) {
+  /** One page of a summarized fan's members, in seq order. Versioned like {@link run}. */
+  async fanMembers(id, group, offset, limit, failed, ifNoneMatch, response) {
     const page2 = await this.dashboard.getFanMembers(id, group, {
       offset: offset === void 0 ? void 0 : Number(offset),
       limit: limit === void 0 ? void 0 : Number(limit),
-      failedOnly: failed === "true"
+      failedOnly: failed === "true",
+      ...ifNoneMatch && {
+        ifNoneMatch
+      }
     });
-    if (!page2) throw new import_common4.NotFoundException(`fan ${group} of run ${id} not found`);
-    return page2;
+    if (!page2) throw new import_common5.NotFoundException(`fan ${group} of run ${id} not found`);
+    const { etag, notModified, ...body } = page2;
+    if (etag) {
+      if (notModified) throw new NotModifiedException(etag);
+      setEtag(response, etag);
+    }
+    return body;
   }
   /** Server-Sent Events stream of a run's live lifecycle events — the dashboard tails it instead
   *  of polling. Cross-pod when the transport has a control plane (see DashboardService.streamRun). */
@@ -1146,18 +1308,18 @@ var DurableApiController = class {
     const result = await this.dashboard.cancel(id, {
       compensate: compensate === "true"
     });
-    if (!result) throw new import_common4.NotFoundException(`run ${id} not found`);
+    if (!result) throw new import_common5.NotFoundException(`run ${id} not found`);
     return result;
   }
   async continue(id) {
     const result = await this.dashboard.continue(id);
-    if (!result) throw new import_common4.NotFoundException(`run ${id} is not paused at a breakpoint`);
+    if (!result) throw new import_common5.NotFoundException(`run ${id} is not paused at a breakpoint`);
     return result;
   }
   /** Re-dispatch a run's stuck `pending` remote steps — recovery for a lost step dispatch. */
   async redispatch(id) {
     const result = await this.dashboard.redispatch(id);
-    if (!result) throw new import_common4.NotFoundException(`run ${id} not found`);
+    if (!result) throw new import_common5.NotFoundException(`run ${id} not found`);
     return result;
   }
   /**
@@ -1168,7 +1330,7 @@ var DurableApiController = class {
   */
   async webhook(token, body) {
     const result = await this.dashboard.deliverWebhook(token, body);
-    if (!result) throw new import_common4.NotFoundException(`no run is waiting on webhook ${token}`);
+    if (!result) throw new import_common5.NotFoundException(`no live run is waiting for webhook ${token}`);
     return result;
   }
   /** Live query: the latest value a run published for `key` via `ctx.setEvent` (no side effect). */
@@ -1180,8 +1342,8 @@ var DurableApiController = class {
     return this.dashboard.update(id, name, body);
   }
 };
-_ts_decorate4([
-  (0, import_common4.Get)("runs"),
+_ts_decorate5([
+  (0, import_common5.Get)("runs"),
   _ts_param2(0, (0, import_nestjs_filter2.ApplyFilter)(RunFilter)),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
@@ -1189,8 +1351,8 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "runs", null);
-_ts_decorate4([
-  (0, import_common4.Get)("runs/facets"),
+_ts_decorate5([
+  (0, import_common5.Get)("runs/facets"),
   _ts_param2(0, (0, import_nestjs_filter2.ApplyFilter)(RunFilter)),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
@@ -1198,35 +1360,35 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "facets", null);
-_ts_decorate4([
-  (0, import_common4.Get)("runs/values"),
-  _ts_param2(0, (0, import_common4.Query)()),
+_ts_decorate5([
+  (0, import_common5.Get)("runs/values"),
+  _ts_param2(0, (0, import_common5.Query)()),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     typeof Record === "undefined" ? Object : Record
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "values", null);
-_ts_decorate4([
-  (0, import_common4.Get)("metrics"),
-  (0, import_common4.Header)("Content-Type", "text/plain; version=0.0.4"),
+_ts_decorate5([
+  (0, import_common5.Get)("metrics"),
+  (0, import_common5.Header)("Content-Type", "text/plain; version=0.0.4"),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", []),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "metrics", null);
-_ts_decorate4([
-  (0, import_common4.Get)("workers"),
+_ts_decorate5([
+  (0, import_common5.Get)("workers"),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", []),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "workers", null);
-_ts_decorate4([
-  (0, import_common4.Get)("schedules"),
-  _ts_param2(0, (0, import_common4.Query)("namespace")),
-  _ts_param2(1, (0, import_common4.Query)("workflow")),
-  _ts_param2(2, (0, import_common4.Query)("tag")),
-  _ts_param2(3, (0, import_common4.Query)("paused")),
-  _ts_param2(4, (0, import_common4.Query)("limit")),
+_ts_decorate5([
+  (0, import_common5.Get)("schedules"),
+  _ts_param2(0, (0, import_common5.Query)("namespace")),
+  _ts_param2(1, (0, import_common5.Query)("workflow")),
+  _ts_param2(2, (0, import_common5.Query)("tag")),
+  _ts_param2(3, (0, import_common5.Query)("paused")),
+  _ts_param2(4, (0, import_common5.Query)("limit")),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String,
@@ -1237,89 +1399,101 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "schedules", null);
-_ts_decorate4([
-  (0, import_common4.Post)("schedules/:id/pause"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
+_ts_decorate5([
+  (0, import_common5.Post)("schedules/:id/pause"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "pauseSchedule", null);
-_ts_decorate4([
-  (0, import_common4.Post)("schedules/:id/resume"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
+_ts_decorate5([
+  (0, import_common5.Post)("schedules/:id/resume"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "resumeSchedule", null);
-_ts_decorate4([
-  (0, import_common4.Post)("schedules/:id/trigger"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
+_ts_decorate5([
+  (0, import_common5.Post)("schedules/:id/trigger"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "triggerSchedule", null);
-_ts_decorate4([
-  (0, import_common4.Get)("topology"),
+_ts_decorate5([
+  (0, import_common5.Get)("topology"),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", []),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "topology", null);
-_ts_decorate4([
-  (0, import_common4.Get)("runs/:id"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
-  _ts_param2(1, (0, import_common4.Query)("full")),
+_ts_decorate5([
+  (0, import_common5.Get)("runs/:id"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
+  _ts_param2(1, (0, import_common5.Query)("full")),
+  _ts_param2(2, (0, import_common5.Headers)("if-none-match")),
+  _ts_param2(3, (0, import_common5.Res)({
+    passthrough: true
+  })),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String,
-    String
+    String,
+    String,
+    Object
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "run", null);
-_ts_decorate4([
-  (0, import_common4.Get)("runs/:id/fans/:group"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
-  _ts_param2(1, (0, import_common4.Param)("group")),
-  _ts_param2(2, (0, import_common4.Query)("offset")),
-  _ts_param2(3, (0, import_common4.Query)("limit")),
-  _ts_param2(4, (0, import_common4.Query)("failed")),
+_ts_decorate5([
+  (0, import_common5.Get)("runs/:id/fans/:group"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
+  _ts_param2(1, (0, import_common5.Param)("group")),
+  _ts_param2(2, (0, import_common5.Query)("offset")),
+  _ts_param2(3, (0, import_common5.Query)("limit")),
+  _ts_param2(4, (0, import_common5.Query)("failed")),
+  _ts_param2(5, (0, import_common5.Headers)("if-none-match")),
+  _ts_param2(6, (0, import_common5.Res)({
+    passthrough: true
+  })),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String,
     String,
     String,
     String,
-    String
+    String,
+    String,
+    Object
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "fanMembers", null);
-_ts_decorate4([
-  (0, import_common4.Sse)("runs/:id/stream"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
+_ts_decorate5([
+  (0, import_common5.Sse)("runs/:id/stream"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "stream", null);
-_ts_decorate4([
-  (0, import_common4.Post)("runs/:id/retry"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
+_ts_decorate5([
+  (0, import_common5.Post)("runs/:id/retry"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "retry", null);
-_ts_decorate4([
-  (0, import_common4.Post)("runs/:id/retry-with-input"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
-  _ts_param2(1, (0, import_common4.Body)()),
+_ts_decorate5([
+  (0, import_common5.Post)("runs/:id/retry-with-input"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
+  _ts_param2(1, (0, import_common5.Body)()),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String,
@@ -1327,11 +1501,11 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "retryWithInput", null);
-_ts_decorate4([
-  (0, import_common4.Post)("bulk/:action"),
-  _ts_param2(0, (0, import_common4.Param)("action")),
+_ts_decorate5([
+  (0, import_common5.Post)("bulk/:action"),
+  _ts_param2(0, (0, import_common5.Param)("action")),
   _ts_param2(1, (0, import_nestjs_filter2.ApplyFilter)(RunFilter)),
-  _ts_param2(2, (0, import_common4.Query)("compensate")),
+  _ts_param2(2, (0, import_common5.Query)("compensate")),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String,
@@ -1340,10 +1514,10 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "bulk", null);
-_ts_decorate4([
-  (0, import_common4.Post)("runs/:id/cancel"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
-  _ts_param2(1, (0, import_common4.Query)("compensate")),
+_ts_decorate5([
+  (0, import_common5.Post)("runs/:id/cancel"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
+  _ts_param2(1, (0, import_common5.Query)("compensate")),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String,
@@ -1351,28 +1525,28 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "cancel", null);
-_ts_decorate4([
-  (0, import_common4.Post)("runs/:id/continue"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
+_ts_decorate5([
+  (0, import_common5.Post)("runs/:id/continue"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "continue", null);
-_ts_decorate4([
-  (0, import_common4.Post)("runs/:id/redispatch"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
+_ts_decorate5([
+  (0, import_common5.Post)("runs/:id/redispatch"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "redispatch", null);
-_ts_decorate4([
-  (0, import_common4.Post)("webhooks/:token"),
-  _ts_param2(0, (0, import_common4.Param)("token")),
-  _ts_param2(1, (0, import_common4.Body)()),
+_ts_decorate5([
+  (0, import_common5.Post)("webhooks/:token"),
+  _ts_param2(0, (0, import_common5.Param)("token")),
+  _ts_param2(1, (0, import_common5.Body)()),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String,
@@ -1380,10 +1554,10 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "webhook", null);
-_ts_decorate4([
-  (0, import_common4.Get)("runs/:id/events/:key"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
-  _ts_param2(1, (0, import_common4.Param)("key")),
+_ts_decorate5([
+  (0, import_common5.Get)("runs/:id/events/:key"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
+  _ts_param2(1, (0, import_common5.Param)("key")),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String,
@@ -1391,11 +1565,11 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "event", null);
-_ts_decorate4([
-  (0, import_common4.Post)("runs/:id/updates/:name"),
-  _ts_param2(0, (0, import_common4.Param)("id")),
-  _ts_param2(1, (0, import_common4.Param)("name")),
-  _ts_param2(2, (0, import_common4.Body)()),
+_ts_decorate5([
+  (0, import_common5.Post)("runs/:id/updates/:name"),
+  _ts_param2(0, (0, import_common5.Param)("id")),
+  _ts_param2(1, (0, import_common5.Param)("name")),
+  _ts_param2(2, (0, import_common5.Body)()),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String,
@@ -1404,9 +1578,10 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "update", null);
-DurableApiController = _ts_decorate4([
-  (0, import_common4.Controller)(),
-  (0, import_common4.UseInterceptors)(import_nestjs_filter2.ApplyFilterInterceptor),
+DurableApiController = _ts_decorate5([
+  (0, import_common5.Controller)(),
+  (0, import_common5.UseInterceptors)(import_nestjs_filter2.ApplyFilterInterceptor),
+  (0, import_common5.UseFilters)(NotModifiedFilter),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     typeof DashboardService === "undefined" ? Object : DashboardService,
@@ -1415,14 +1590,14 @@ DurableApiController = _ts_decorate4([
 ], DurableApiController);
 function notFound(error) {
   if (error instanceof Error && error.name === "ScheduleNotFoundError") {
-    throw new import_common4.NotFoundException(error.message);
+    throw new import_common5.NotFoundException(error.message);
   }
   throw error;
 }
 __name(notFound, "notFound");
 
 // src/server/durable-auth.controller.ts
-var import_common8 = require("@nestjs/common");
+var import_common9 = require("@nestjs/common");
 
 // src/server/auth/dashboard-auth-config.ts
 var DASHBOARD_AUTH = Symbol("DASHBOARD_AUTH");
@@ -1662,14 +1837,14 @@ function renderSessionRequiredPage(basePath) {
 __name(renderSessionRequiredPage, "renderSessionRequiredPage");
 
 // src/server/auth/request.ts
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null;
 }
-__name(isRecord, "isRecord");
+__name(isRecord2, "isRecord");
 function readHeaders(request) {
-  if (!isRecord(request)) return {};
+  if (!isRecord2(request)) return {};
   const headers = request.headers;
-  return isRecord(headers) ? headers : {};
+  return isRecord2(headers) ? headers : {};
 }
 __name(readHeaders, "readHeaders");
 function headerToString(value) {
@@ -1685,14 +1860,14 @@ function readCookieHeader(request) {
 }
 __name(readCookieHeader, "readCookieHeader");
 function isHttpsRequest(request) {
-  if (isRecord(request) && request.protocol === "https") return true;
+  if (isRecord2(request) && request.protocol === "https") return true;
   const forwarded = headerToString(readHeaders(request)["x-forwarded-proto"]);
   if (forwarded === void 0) return false;
   return forwarded.split(",").map((proto) => proto.trim().toLowerCase()).includes("https");
 }
 __name(isHttpsRequest, "isHttpsRequest");
 function originalRequestUrl(request) {
-  if (!isRecord(request)) return "/";
+  if (!isRecord2(request)) return "/";
   if (typeof request.originalUrl === "string" && request.originalUrl !== "") {
     return request.originalUrl;
   }
@@ -1709,72 +1884,6 @@ function sanitizeReturnTo(candidate, fallback) {
 }
 __name(sanitizeReturnTo, "sanitizeReturnTo");
 
-// src/server/auth/response.ts
-function isRecord2(value) {
-  return typeof value === "object" && value !== null;
-}
-__name(isRecord2, "isRecord");
-function isRawCookieResponse(value) {
-  return isRecord2(value) && typeof value.getHeader === "function" && typeof value.setHeader === "function";
-}
-__name(isRawCookieResponse, "isRawCookieResponse");
-function resolveCookieResponse(response) {
-  if (isRawCookieResponse(response)) return response;
-  if (isRecord2(response) && isRawCookieResponse(response.raw)) return response.raw;
-  return null;
-}
-__name(resolveCookieResponse, "resolveCookieResponse");
-function existingSetCookies(response) {
-  const current = response.getHeader("set-cookie");
-  if (Array.isArray(current)) return current;
-  if (typeof current === "string") return [
-    current
-  ];
-  return [];
-}
-__name(existingSetCookies, "existingSetCookies");
-function appendSetCookie(response, cookie) {
-  const raw = resolveCookieResponse(response);
-  if (!raw) return;
-  raw.setHeader("set-cookie", [
-    ...existingSetCookies(raw),
-    cookie
-  ]);
-}
-__name(appendSetCookie, "appendSetCookie");
-function isRawRedirectResponse(value) {
-  return isRecord2(value) && typeof value.getHeader === "function" && typeof value.setHeader === "function" && typeof value.end === "function";
-}
-__name(isRawRedirectResponse, "isRawRedirectResponse");
-function resolveRedirectResponse(response) {
-  if (isRawRedirectResponse(response)) return response;
-  if (isRecord2(response) && isRawRedirectResponse(response.raw)) return response.raw;
-  return null;
-}
-__name(resolveRedirectResponse, "resolveRedirectResponse");
-function redirectRaw(response, location, status = 302) {
-  const raw = resolveRedirectResponse(response);
-  if (!raw) return;
-  raw.statusCode = status;
-  raw.setHeader("location", location);
-  raw.end();
-}
-__name(redirectRaw, "redirectRaw");
-function responseAlreadyWritten(response) {
-  const raw = resolveRedirectResponse(response);
-  return raw?.headersSent === true;
-}
-__name(responseAlreadyWritten, "responseAlreadyWritten");
-function writeHtmlRaw(response, html, status = 200) {
-  const raw = resolveRedirectResponse(response);
-  if (!raw) return;
-  raw.statusCode = status;
-  raw.setHeader("content-type", "text/html; charset=utf-8");
-  raw.setHeader("cache-control", "no-store, must-revalidate");
-  raw.end(html);
-}
-__name(writeHtmlRaw, "writeHtmlRaw");
-
 // src/server/auth/cookie-header.ts
 function parseCookieHeader(header) {
   const cookies = {};
@@ -1974,11 +2083,11 @@ __name(maybeRenewSession, "maybeRenewSession");
 var import_node_fs = require("fs");
 var import_node_path = require("path");
 var import_node_url = require("url");
-var import_common7 = require("@nestjs/common");
+var import_common8 = require("@nestjs/common");
 
 // src/server/auth/login-redirect.exception.ts
-var import_common5 = require("@nestjs/common");
-function _ts_decorate5(decorators, target, key, desc) {
+var import_common6 = require("@nestjs/common");
+function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1991,8 +2100,8 @@ function _ts_decorate5(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate5, "_ts_decorate");
-var DashboardLoginRedirectException = class extends import_common5.HttpException {
+__name(_ts_decorate6, "_ts_decorate");
+var DashboardLoginRedirectException = class extends import_common6.HttpException {
   static {
     __name(this, "DashboardLoginRedirectException");
   }
@@ -2000,7 +2109,7 @@ var DashboardLoginRedirectException = class extends import_common5.HttpException
   constructor(location) {
     super({
       location
-    }, import_common5.HttpStatus.FOUND), this.location = location;
+    }, import_common6.HttpStatus.FOUND), this.location = location;
   }
 };
 var DashboardLoginRedirectFilter = class {
@@ -2012,13 +2121,13 @@ var DashboardLoginRedirectFilter = class {
     redirectRaw(response, exception.location);
   }
 };
-DashboardLoginRedirectFilter = _ts_decorate5([
-  (0, import_common5.Catch)(DashboardLoginRedirectException)
+DashboardLoginRedirectFilter = _ts_decorate6([
+  (0, import_common6.Catch)(DashboardLoginRedirectException)
 ], DashboardLoginRedirectFilter);
 
 // src/server/auth/session-required.exception.ts
-var import_common6 = require("@nestjs/common");
-function _ts_decorate6(decorators, target, key, desc) {
+var import_common7 = require("@nestjs/common");
+function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2031,7 +2140,7 @@ function _ts_decorate6(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
+__name(_ts_decorate7, "_ts_decorate");
 function _ts_metadata5(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -2044,7 +2153,7 @@ function _ts_param3(paramIndex, decorator) {
   };
 }
 __name(_ts_param3, "_ts_param");
-var DashboardSessionRequiredException = class extends import_common6.HttpException {
+var DashboardSessionRequiredException = class extends import_common7.HttpException {
   static {
     __name(this, "DashboardSessionRequiredException");
   }
@@ -2052,7 +2161,7 @@ var DashboardSessionRequiredException = class extends import_common6.HttpExcepti
   constructor(basePath) {
     super({
       basePath
-    }, import_common6.HttpStatus.UNAUTHORIZED), this.basePath = basePath;
+    }, import_common7.HttpStatus.UNAUTHORIZED), this.basePath = basePath;
   }
 };
 var DashboardSessionRequiredFilter = class _DashboardSessionRequiredFilter {
@@ -2060,7 +2169,7 @@ var DashboardSessionRequiredFilter = class _DashboardSessionRequiredFilter {
     __name(this, "DashboardSessionRequiredFilter");
   }
   auth;
-  logger = new import_common6.Logger(_DashboardSessionRequiredFilter.name);
+  logger = new import_common7.Logger(_DashboardSessionRequiredFilter.name);
   warned = false;
   constructor(auth = null) {
     this.auth = auth;
@@ -2083,7 +2192,7 @@ var DashboardSessionRequiredFilter = class _DashboardSessionRequiredFilter {
         if (responseAlreadyWritten(response)) return;
       }
     }
-    writeHtmlRaw(response, renderSessionRequiredPage(exception.basePath), import_common6.HttpStatus.UNAUTHORIZED);
+    writeHtmlRaw(response, renderSessionRequiredPage(exception.basePath), import_common7.HttpStatus.UNAUTHORIZED);
   }
   /** Once per process, not once per request: a broken hook fires on every denied navigation. */
   warnOnce(message) {
@@ -2092,10 +2201,10 @@ var DashboardSessionRequiredFilter = class _DashboardSessionRequiredFilter {
     this.logger.warn(message);
   }
 };
-DashboardSessionRequiredFilter = _ts_decorate6([
-  (0, import_common6.Catch)(DashboardSessionRequiredException),
-  _ts_param3(0, (0, import_common6.Optional)()),
-  _ts_param3(0, (0, import_common6.Inject)(DASHBOARD_AUTH)),
+DashboardSessionRequiredFilter = _ts_decorate7([
+  (0, import_common7.Catch)(DashboardSessionRequiredException),
+  _ts_param3(0, (0, import_common7.Optional)()),
+  _ts_param3(0, (0, import_common7.Inject)(DASHBOARD_AUTH)),
   _ts_metadata5("design:type", Function),
   _ts_metadata5("design:paramtypes", [
     Object
@@ -2103,7 +2212,7 @@ DashboardSessionRequiredFilter = _ts_decorate6([
 ], DashboardSessionRequiredFilter);
 
 // src/server/durable-ui.controller.ts
-function _ts_decorate7(decorators, target, key, desc) {
+function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2116,7 +2225,7 @@ function _ts_decorate7(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate7, "_ts_decorate");
+__name(_ts_decorate8, "_ts_decorate");
 function _ts_metadata6(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -2161,7 +2270,7 @@ var DurableUiController = class {
   index() {
     const indexPath = (0, import_node_path.join)(this.dir, "index.html");
     if (!(0, import_node_fs.existsSync)(indexPath)) {
-      throw new import_common7.NotFoundException("Dashboard is not built. Run the package build.");
+      throw new import_common8.NotFoundException("Dashboard is not built. Run the package build.");
     }
     const html = (0, import_node_fs.readFileSync)(indexPath, "utf8").replaceAll(`="${BUILD_BASE}/`, `="${this.basePath}/`);
     const inject = `<script>window.__DURABLE_BASE__='${this.basePath}';window.__DURABLE_API__='${this.apiBasePath}';</script>`;
@@ -2169,41 +2278,41 @@ var DurableUiController = class {
   }
   asset(file) {
     const safe = (0, import_node_path.basename)(file);
-    if (safe !== file) throw new import_common7.NotFoundException();
+    if (safe !== file) throw new import_common8.NotFoundException();
     const root = (0, import_node_path.resolve)(this.dir, "assets");
     const assetPath = (0, import_node_path.resolve)(root, safe);
     if (!assetPath.startsWith(root + import_node_path.sep) || !(0, import_node_fs.existsSync)(assetPath)) {
-      throw new import_common7.NotFoundException();
+      throw new import_common8.NotFoundException();
     }
     const type = CONTENT_TYPES[(0, import_node_path.extname)(safe)] ?? "application/octet-stream";
-    return new import_common7.StreamableFile((0, import_node_fs.readFileSync)(assetPath), {
+    return new import_common8.StreamableFile((0, import_node_fs.readFileSync)(assetPath), {
       type
     });
   }
 };
-_ts_decorate7([
-  (0, import_common7.Get)(),
-  (0, import_common7.Header)("Content-Type", "text/html; charset=utf-8"),
-  (0, import_common7.Header)("Cache-Control", "no-store, must-revalidate"),
+_ts_decorate8([
+  (0, import_common8.Get)(),
+  (0, import_common8.Header)("Content-Type", "text/html; charset=utf-8"),
+  (0, import_common8.Header)("Cache-Control", "no-store, must-revalidate"),
   _ts_metadata6("design:type", Function),
   _ts_metadata6("design:paramtypes", []),
   _ts_metadata6("design:returntype", String)
 ], DurableUiController.prototype, "index", null);
-_ts_decorate7([
-  (0, import_common7.Get)("assets/:file"),
-  (0, import_common7.Header)("Cache-Control", "public, max-age=31536000, immutable"),
-  _ts_param4(0, (0, import_common7.Param)("file")),
+_ts_decorate8([
+  (0, import_common8.Get)("assets/:file"),
+  (0, import_common8.Header)("Cache-Control", "public, max-age=31536000, immutable"),
+  _ts_param4(0, (0, import_common8.Param)("file")),
   _ts_metadata6("design:type", Function),
   _ts_metadata6("design:paramtypes", [
     String
   ]),
-  _ts_metadata6("design:returntype", typeof import_common7.StreamableFile === "undefined" ? Object : import_common7.StreamableFile)
+  _ts_metadata6("design:returntype", typeof import_common8.StreamableFile === "undefined" ? Object : import_common8.StreamableFile)
 ], DurableUiController.prototype, "asset", null);
-DurableUiController = _ts_decorate7([
-  (0, import_common7.UseFilters)(DashboardLoginRedirectFilter, DashboardSessionRequiredFilter),
-  (0, import_common7.Controller)(),
-  _ts_param4(0, (0, import_common7.Inject)(DASHBOARD_BASE_PATH)),
-  _ts_param4(1, (0, import_common7.Inject)(DASHBOARD_API_PATH)),
+DurableUiController = _ts_decorate8([
+  (0, import_common8.UseFilters)(DashboardLoginRedirectFilter, DashboardSessionRequiredFilter),
+  (0, import_common8.Controller)(),
+  _ts_param4(0, (0, import_common8.Inject)(DASHBOARD_BASE_PATH)),
+  _ts_param4(1, (0, import_common8.Inject)(DASHBOARD_API_PATH)),
   _ts_metadata6("design:type", Function),
   _ts_metadata6("design:paramtypes", [
     String,
@@ -2212,7 +2321,7 @@ DurableUiController = _ts_decorate7([
 ], DurableUiController);
 
 // src/server/durable-auth.controller.ts
-function _ts_decorate8(decorators, target, key, desc) {
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2225,7 +2334,7 @@ function _ts_decorate8(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
+__name(_ts_decorate9, "_ts_decorate");
 function _ts_metadata7(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -2248,7 +2357,7 @@ var DurableAuthController = class _DurableAuthController {
   }
   auth;
   basePath;
-  logger = new import_common8.Logger(_DurableAuthController.name);
+  logger = new import_common9.Logger(_DurableAuthController.name);
   /** Warn once per hook kind so a throwing hook doesn't spam logs on every failed attempt. */
   warnedHooks = /* @__PURE__ */ new Set();
   constructor(auth, basePath) {
@@ -2260,7 +2369,7 @@ var DurableAuthController = class _DurableAuthController {
   // the developer-controlled `basePath`.
   loginPage() {
     const auth = this.requireAuth();
-    if (!auth.modes.includes("login")) throw new import_common8.NotFoundException();
+    if (!auth.modes.includes("login")) throw new import_common9.NotFoundException();
     return renderLoginPage(this.basePath);
   }
   // Called by the login page's own fetch (JSON, not a classic form POST — see `login-page.ts` for
@@ -2269,13 +2378,13 @@ var DurableAuthController = class _DurableAuthController {
   // (unknown user, wrong password, throwing hook) — no user-enumeration.
   async login(body, request, response) {
     const auth = this.requireAuth();
-    if (!auth.modes.includes("login")) throw new import_common8.NotFoundException();
+    if (!auth.modes.includes("login")) throw new import_common9.NotFoundException();
     if (!isString(body?.username) || !isString(body?.password)) {
-      throw new import_common8.BadRequestException("Body must include string `username` and `password`.");
+      throw new import_common9.BadRequestException("Body must include string `username` and `password`.");
     }
     const { username, password } = body;
     const user = await this.runHook("login", () => auth.login?.(username, password) ?? null);
-    if (!user) throw new import_common8.UnauthorizedException({
+    if (!user) throw new import_common9.UnauthorizedException({
       message: "Invalid username or password."
     });
     issueSessionCookie(user, {
@@ -2292,9 +2401,9 @@ var DurableAuthController = class _DurableAuthController {
   // guard decides, and no credential ever reaches this library.
   async session(request, response) {
     const auth = this.requireAuth();
-    if (!auth.modes.includes("session")) throw new import_common8.NotFoundException();
+    if (!auth.modes.includes("session")) throw new import_common9.NotFoundException();
     const user = await this.runHook("session", () => auth.session?.(request) ?? null);
-    if (!user) throw new import_common8.UnauthorizedException();
+    if (!user) throw new import_common9.UnauthorizedException();
     issueSessionCookie(user, {
       auth,
       request,
@@ -2313,7 +2422,7 @@ var DurableAuthController = class _DurableAuthController {
     redirectRaw(response, this.auth?.modes.includes("login") ? `${this.basePath}/login` : this.basePath);
   }
   requireAuth() {
-    if (!this.auth) throw new import_common8.NotFoundException();
+    if (!this.auth) throw new import_common9.NotFoundException();
     return this.auth;
   }
   /**
@@ -2333,20 +2442,20 @@ var DurableAuthController = class _DurableAuthController {
     }
   }
 };
-_ts_decorate8([
-  (0, import_common8.Get)("login"),
-  (0, import_common8.Header)("Content-Type", "text/html; charset=utf-8"),
-  (0, import_common8.Header)("Cache-Control", "no-store, must-revalidate"),
+_ts_decorate9([
+  (0, import_common9.Get)("login"),
+  (0, import_common9.Header)("Content-Type", "text/html; charset=utf-8"),
+  (0, import_common9.Header)("Cache-Control", "no-store, must-revalidate"),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", []),
   _ts_metadata7("design:returntype", String)
 ], DurableAuthController.prototype, "loginPage", null);
-_ts_decorate8([
-  (0, import_common8.Post)("login"),
-  (0, import_common8.HttpCode)(200),
-  _ts_param5(0, (0, import_common8.Body)()),
-  _ts_param5(1, (0, import_common8.Req)()),
-  _ts_param5(2, (0, import_common8.Res)({
+_ts_decorate9([
+  (0, import_common9.Post)("login"),
+  (0, import_common9.HttpCode)(200),
+  _ts_param5(0, (0, import_common9.Body)()),
+  _ts_param5(1, (0, import_common9.Req)()),
+  _ts_param5(2, (0, import_common9.Res)({
     passthrough: true
   })),
   _ts_metadata7("design:type", Function),
@@ -2357,11 +2466,11 @@ _ts_decorate8([
   ]),
   _ts_metadata7("design:returntype", Promise)
 ], DurableAuthController.prototype, "login", null);
-_ts_decorate8([
-  (0, import_common8.Post)("session"),
-  (0, import_common8.HttpCode)(204),
-  _ts_param5(0, (0, import_common8.Req)()),
-  _ts_param5(1, (0, import_common8.Res)({
+_ts_decorate9([
+  (0, import_common9.Post)("session"),
+  (0, import_common9.HttpCode)(204),
+  _ts_param5(0, (0, import_common9.Req)()),
+  _ts_param5(1, (0, import_common9.Res)({
     passthrough: true
   })),
   _ts_metadata7("design:type", Function),
@@ -2371,10 +2480,10 @@ _ts_decorate8([
   ]),
   _ts_metadata7("design:returntype", Promise)
 ], DurableAuthController.prototype, "session", null);
-_ts_decorate8([
-  (0, import_common8.Get)("logout"),
-  _ts_param5(0, (0, import_common8.Req)()),
-  _ts_param5(1, (0, import_common8.Res)()),
+_ts_decorate9([
+  (0, import_common9.Get)("logout"),
+  _ts_param5(0, (0, import_common9.Req)()),
+  _ts_param5(1, (0, import_common9.Res)()),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [
     Object,
@@ -2382,11 +2491,11 @@ _ts_decorate8([
   ]),
   _ts_metadata7("design:returntype", void 0)
 ], DurableAuthController.prototype, "logout", null);
-DurableAuthController = _ts_decorate8([
-  (0, import_common8.Controller)(),
-  _ts_param5(0, (0, import_common8.Optional)()),
-  _ts_param5(0, (0, import_common8.Inject)(DASHBOARD_AUTH)),
-  _ts_param5(1, (0, import_common8.Inject)(DASHBOARD_BASE_PATH)),
+DurableAuthController = _ts_decorate9([
+  (0, import_common9.Controller)(),
+  _ts_param5(0, (0, import_common9.Optional)()),
+  _ts_param5(0, (0, import_common9.Inject)(DASHBOARD_AUTH)),
+  _ts_param5(1, (0, import_common9.Inject)(DASHBOARD_BASE_PATH)),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [
     Object,
@@ -2397,12 +2506,12 @@ DurableAuthController = _ts_decorate8([
 // src/server/durable-dashboard.module.ts
 var import_reflect_metadata = require("reflect-metadata");
 var import_nestjs_filter3 = require("@dudousxd/nestjs-filter");
-var import_common10 = require("@nestjs/common");
+var import_common11 = require("@nestjs/common");
 var import_core = require("@nestjs/core");
 
 // src/server/durable-session.guard.ts
-var import_common9 = require("@nestjs/common");
-function _ts_decorate9(decorators, target, key, desc) {
+var import_common10 = require("@nestjs/common");
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2415,7 +2524,7 @@ function _ts_decorate9(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
+__name(_ts_decorate10, "_ts_decorate");
 function _ts_metadata8(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -2468,10 +2577,10 @@ var DurableUiSessionGuard = class {
     throw new DashboardLoginRedirectException(`${this.basePath}/login?returnTo=${returnTo}`);
   }
 };
-DurableUiSessionGuard = _ts_decorate9([
-  (0, import_common9.Injectable)(),
-  _ts_param6(0, (0, import_common9.Inject)(DASHBOARD_AUTH)),
-  _ts_param6(1, (0, import_common9.Inject)(DASHBOARD_BASE_PATH)),
+DurableUiSessionGuard = _ts_decorate10([
+  (0, import_common10.Injectable)(),
+  _ts_param6(0, (0, import_common10.Inject)(DASHBOARD_AUTH)),
+  _ts_param6(1, (0, import_common10.Inject)(DASHBOARD_BASE_PATH)),
   _ts_metadata8("design:type", Function),
   _ts_metadata8("design:paramtypes", [
     Object,
@@ -2505,16 +2614,16 @@ var DurableApiSessionGuard = class {
   * 401; `DurableUiSessionGuard`'s redirect/session-required exceptions above don't reach it.
   */
   unauthorized(auth) {
-    return new import_common9.UnauthorizedException({
+    return new import_common10.UnauthorizedException({
       auth: {
         modes: auth.modes
       }
     });
   }
 };
-DurableApiSessionGuard = _ts_decorate9([
-  (0, import_common9.Injectable)(),
-  _ts_param6(0, (0, import_common9.Inject)(DASHBOARD_AUTH)),
+DurableApiSessionGuard = _ts_decorate10([
+  (0, import_common10.Injectable)(),
+  _ts_param6(0, (0, import_common10.Inject)(DASHBOARD_AUTH)),
   _ts_metadata8("design:type", Function),
   _ts_metadata8("design:paramtypes", [
     Object
@@ -2522,7 +2631,7 @@ DurableApiSessionGuard = _ts_decorate9([
 ], DurableApiSessionGuard);
 
 // src/server/durable-dashboard.module.ts
-function _ts_decorate10(decorators, target, key, desc) {
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2535,7 +2644,7 @@ function _ts_decorate10(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
+__name(_ts_decorate11, "_ts_decorate");
 var GUARDS_METADATA = "__guards__";
 function normalize(path) {
   return `/${path.replace(/^\/+|\/+$/g, "")}`;
@@ -2608,8 +2717,8 @@ var DurableApiModule = class _DurableApiModule {
     };
   }
 };
-DurableApiModule = _ts_decorate10([
-  (0, import_common10.Module)({})
+DurableApiModule = _ts_decorate11([
+  (0, import_common11.Module)({})
 ], DurableApiModule);
 var DurableDashboardModule = class _DurableDashboardModule {
   static {
@@ -2694,8 +2803,8 @@ var DurableDashboardModule = class _DurableDashboardModule {
     };
   }
 };
-DurableDashboardModule = _ts_decorate10([
-  (0, import_common10.Module)({})
+DurableDashboardModule = _ts_decorate11([
+  (0, import_common11.Module)({})
 ], DurableDashboardModule);
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {