@dudousxd/nestjs-durable-dashboard 0.50.0 → 0.51.1

package/dist/server/index.js

@@ -2,7 +2,7 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // src/server/dashboard.service.ts
-import { RunGateway, STATE_STORE_CANONICAL, WorkflowEngine, collectMetrics } from "@dudousxd/nestjs-durable-core";
+import { RunGateway, STATE_STORE_CANONICAL, TERMINAL_RUN_STATUSES, WorkflowEngine, collectMetrics, parseWebhookToken } from "@dudousxd/nestjs-durable-core";
 import { Inject, Injectable, Optional } from "@nestjs/common";
 import { Observable } from "rxjs";
 function _ts_decorate(decorators, target, key, desc) {
@@ -211,11 +211,30 @@ var DashboardService = class {
   }
   /**
   * Deliver a `ctx.webhook()` callback: turn an inbound POST (token + body) into the signal the
-  * waiting run is parked on. Returns the run result, or `null` if no run waits on that token (a
-  * stale/duplicate callback) — a safe no-op the controller maps to 404. Control-plane-only.
+  * run is (or will be) parked on. A callback that arrives BEFORE the run reaches `wait()` (the url
+  * was handed out and the run is still busy or sleeping) is buffered, and `wait()` consumes it, so
+  * the result is the run's current status. Returns `null` — mapped to 404 by the controller — for a
+  * token that is not a webhook token, whose run doesn't exist or is terminal, or whose wait already
+  * resolved (a duplicate): nothing is buffered for those, so a public endpoint can't leave junk
+  * rows behind or signal non-webhook tokens. Control-plane-only.
   */
   async deliverWebhook(token, body) {
-    return this.controlPlane().engine.signal(token, body);
+    const { store, engine } = this.controlPlane();
+    const parsed = parseWebhookToken(token);
+    if (!parsed) return null;
+    const run = await store.getRun(parsed.runId);
+    if (!run || TERMINAL_RUN_STATUSES.includes(run.status)) return null;
+    const resolved = await store.getCheckpoint(parsed.runId, parsed.seq);
+    if (resolved?.status === "completed") return null;
+    const delivered = await engine.signal(token, body);
+    if (delivered) return delivered;
+    const now = await store.getCheckpoint(parsed.runId, parsed.seq);
+    if (now?.status === "completed" && await store.takeBufferedSignal(token)) return null;
+    const fresh = await store.getRun(parsed.runId);
+    return {
+      runId: run.id,
+      status: fresh?.status ?? run.status
+    };
   }
   /** Side-effect-free read of a value a run published via `ctx.setEvent` (a live query). Control-plane-only. */
   async getEvent(runId, key) {
@@ -255,7 +274,7 @@ DashboardService = _ts_decorate([
 
 // src/server/durable-api.controller.ts
 import { ApplyFilter, ApplyFilterInterceptor, FilterRunner } from "@dudousxd/nestjs-filter";
-import { Body, Controller, Get, Header, NotFoundException, Param, Post, Query, Sse, UseInterceptors } from "@nestjs/common";
+import { Body, Controller, Get, Header, Headers, NotFoundException, Param, Post, Query, Res, Sse, UseFilters, UseInterceptors } from "@nestjs/common";
 
 // src/server/durable-run.ts
 var DurableRun = class {
@@ -330,6 +349,129 @@ function runValueAxisFor(field) {
 }
 __name(runValueAxisFor, "runValueAxisFor");
 
+// src/server/not-modified.ts
+import { Catch, HttpException } from "@nestjs/common";
+
+// src/server/auth/response.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+__name(isRecord, "isRecord");
+function isRawCookieResponse(value) {
+  return isRecord(value) && typeof value.getHeader === "function" && typeof value.setHeader === "function";
+}
+__name(isRawCookieResponse, "isRawCookieResponse");
+function resolveCookieResponse(response) {
+  if (isRawCookieResponse(response)) return response;
+  if (isRecord(response) && isRawCookieResponse(response.raw)) return response.raw;
+  return null;
+}
+__name(resolveCookieResponse, "resolveCookieResponse");
+function existingSetCookies(response) {
+  const current = response.getHeader("set-cookie");
+  if (Array.isArray(current)) return current;
+  if (typeof current === "string") return [
+    current
+  ];
+  return [];
+}
+__name(existingSetCookies, "existingSetCookies");
+function appendSetCookie(response, cookie) {
+  const raw = resolveCookieResponse(response);
+  if (!raw) return;
+  raw.setHeader("set-cookie", [
+    ...existingSetCookies(raw),
+    cookie
+  ]);
+}
+__name(appendSetCookie, "appendSetCookie");
+function isRawRedirectResponse(value) {
+  return isRecord(value) && typeof value.getHeader === "function" && typeof value.setHeader === "function" && typeof value.end === "function";
+}
+__name(isRawRedirectResponse, "isRawRedirectResponse");
+function resolveRedirectResponse(response) {
+  if (isRawRedirectResponse(response)) return response;
+  if (isRecord(response) && isRawRedirectResponse(response.raw)) return response.raw;
+  return null;
+}
+__name(resolveRedirectResponse, "resolveRedirectResponse");
+function redirectRaw(response, location, status = 302) {
+  const raw = resolveRedirectResponse(response);
+  if (!raw) return;
+  raw.statusCode = status;
+  raw.setHeader("location", location);
+  raw.end();
+}
+__name(redirectRaw, "redirectRaw");
+function responseAlreadyWritten(response) {
+  const raw = resolveRedirectResponse(response);
+  return raw?.headersSent === true;
+}
+__name(responseAlreadyWritten, "responseAlreadyWritten");
+function writeHtmlRaw(response, html, status = 200) {
+  const raw = resolveRedirectResponse(response);
+  if (!raw) return;
+  raw.statusCode = status;
+  raw.setHeader("content-type", "text/html; charset=utf-8");
+  raw.setHeader("cache-control", "no-store, must-revalidate");
+  raw.end(html);
+}
+__name(writeHtmlRaw, "writeHtmlRaw");
+function setRawHeader(response, name, value) {
+  resolveCookieResponse(response)?.setHeader(name, value);
+}
+__name(setRawHeader, "setRawHeader");
+function writeNotModifiedRaw(response, etag) {
+  const raw = resolveRedirectResponse(response);
+  if (!raw) return;
+  raw.statusCode = 304;
+  raw.setHeader("etag", etag);
+  raw.setHeader("cache-control", "private, no-cache");
+  raw.end();
+}
+__name(writeNotModifiedRaw, "writeNotModifiedRaw");
+
+// src/server/not-modified.ts
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate2, "_ts_decorate");
+var NotModifiedException = class extends HttpException {
+  static {
+    __name(this, "NotModifiedException");
+  }
+  etag;
+  constructor(etag) {
+    super("Not Modified", 304), this.etag = etag;
+  }
+};
+var NotModifiedFilter = class {
+  static {
+    __name(this, "NotModifiedFilter");
+  }
+  catch(exception, host) {
+    writeNotModifiedRaw(host.switchToHttp().getResponse(), exception.etag);
+  }
+};
+NotModifiedFilter = _ts_decorate2([
+  Catch(NotModifiedException)
+], NotModifiedFilter);
+function setEtag(response, etag) {
+  setRawHeader(response, "etag", etag);
+  setRawHeader(response, "cache-control", "private, no-cache");
+}
+__name(setEtag, "setEtag");
+
 // src/server/run-list-row.ts
 function toRunListRow(run) {
   const { input: _input, output: _output, error: _error, ...row } = run;
@@ -420,7 +562,7 @@ var RunQueryDraft2 = class {
 };
 
 // src/server/run-query.adapter.ts
-function _ts_decorate2(decorators, target, key, desc) {
+function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -433,7 +575,7 @@ function _ts_decorate2(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate2, "_ts_decorate");
+__name(_ts_decorate3, "_ts_decorate");
 function _ts_metadata2(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -713,7 +855,7 @@ var RunQueryAdapter = class {
     }
   }
 };
-RunQueryAdapter = _ts_decorate2([
+RunQueryAdapter = _ts_decorate3([
   Injectable2(),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
@@ -722,7 +864,7 @@ RunQueryAdapter = _ts_decorate2([
 ], RunQueryAdapter);
 
 // src/server/run.filter.ts
-function _ts_decorate3(decorators, target, key, desc) {
+function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -735,7 +877,7 @@ function _ts_decorate3(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate3, "_ts_decorate");
+__name(_ts_decorate4, "_ts_decorate");
 function _ts_metadata3(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -861,7 +1003,7 @@ var RunFilter = class extends BaseFilter {
     });
   }
 };
-_ts_decorate3([
+_ts_decorate4([
   FilterFor("status"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -869,7 +1011,7 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyStatus", null);
-_ts_decorate3([
+_ts_decorate4([
   FilterFor("workflow"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -877,7 +1019,7 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyWorkflow", null);
-_ts_decorate3([
+_ts_decorate4([
   FilterFor("namespace"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -885,7 +1027,7 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyNamespace", null);
-_ts_decorate3([
+_ts_decorate4([
   FilterFor("tag"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -893,19 +1035,19 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyTag", null);
-_ts_decorate3([
+_ts_decorate4([
   FilterFor("origin"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", []),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyOrigin", null);
-_ts_decorate3([
+_ts_decorate4([
   FilterFor("unattributed"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", []),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyUnattributed", null);
-_ts_decorate3([
+_ts_decorate4([
   FilterFor("attr"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -913,7 +1055,7 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyAttributes", null);
-_ts_decorate3([
+_ts_decorate4([
   FilterFor("limit"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -921,7 +1063,7 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyLimit", null);
-_ts_decorate3([
+_ts_decorate4([
   FilterFor("offset"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -929,7 +1071,7 @@ _ts_decorate3([
   ]),
   _ts_metadata3("design:returntype", void 0)
 ], RunFilter.prototype, "applyOffset", null);
-RunFilter = _ts_decorate3([
+RunFilter = _ts_decorate4([
   Injectable3(),
   Filterable({
     entity: DurableRun,
@@ -939,7 +1081,7 @@ RunFilter = _ts_decorate3([
 ], RunFilter);
 
 // src/server/durable-api.controller.ts
-function _ts_decorate4(decorators, target, key, desc) {
+function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -952,7 +1094,7 @@ function _ts_decorate4(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate4, "_ts_decorate");
+__name(_ts_decorate5, "_ts_decorate");
 function _ts_metadata4(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -1067,23 +1209,43 @@ var DurableApiController = class {
   /**
   * A run's detail. Fans wider than {@link FAN_INLINE_MAX} come back as one `FanSummary` each, their
   * members paged by `runs/:id/fans/:group`; `?full=true` returns every checkpoint instead.
+  *
+  * When the gateway can version the detail without reading it, the response carries an `ETag`, and
+  * a poll whose `If-None-Match` still names it gets a 304 before the timeline is read. The browser
+  * sends that header itself (the response is `no-cache`), so a console poll needs no code for it.
   */
-  async run(id, full) {
+  async run(id, full, ifNoneMatch, response) {
     const detail = await this.dashboard.getRunDetail(id, full === "true" ? void 0 : {
-      summarizeFansOver: FAN_INLINE_MAX
+      summarizeFansOver: FAN_INLINE_MAX,
+      ...ifNoneMatch && {
+        ifNoneMatch
+      }
     });
     if (!detail) throw new NotFoundException(`run ${id} not found`);
-    return detail;
+    const { etag, notModified, ...body } = detail;
+    if (etag) {
+      if (notModified) throw new NotModifiedException(etag);
+      setEtag(response, etag);
+    }
+    return body;
   }
-  /** One page of a summarized fan's members, in seq order. */
-  async fanMembers(id, group, offset, limit, failed) {
+  /** One page of a summarized fan's members, in seq order. Versioned like {@link run}. */
+  async fanMembers(id, group, offset, limit, failed, ifNoneMatch, response) {
     const page2 = await this.dashboard.getFanMembers(id, group, {
       offset: offset === void 0 ? void 0 : Number(offset),
       limit: limit === void 0 ? void 0 : Number(limit),
-      failedOnly: failed === "true"
+      failedOnly: failed === "true",
+      ...ifNoneMatch && {
+        ifNoneMatch
+      }
     });
     if (!page2) throw new NotFoundException(`fan ${group} of run ${id} not found`);
-    return page2;
+    const { etag, notModified, ...body } = page2;
+    if (etag) {
+      if (notModified) throw new NotModifiedException(etag);
+      setEtag(response, etag);
+    }
+    return body;
   }
   /** Server-Sent Events stream of a run's live lifecycle events — the dashboard tails it instead
   *  of polling. Cross-pod when the transport has a control plane (see DashboardService.streamRun). */
@@ -1134,7 +1296,7 @@ var DurableApiController = class {
   */
   async webhook(token, body) {
     const result = await this.dashboard.deliverWebhook(token, body);
-    if (!result) throw new NotFoundException(`no run is waiting on webhook ${token}`);
+    if (!result) throw new NotFoundException(`no live run is waiting for webhook ${token}`);
     return result;
   }
   /** Live query: the latest value a run published for `key` via `ctx.setEvent` (no side effect). */
@@ -1146,7 +1308,7 @@ var DurableApiController = class {
     return this.dashboard.update(id, name, body);
   }
 };
-_ts_decorate4([
+_ts_decorate5([
   Get("runs"),
   _ts_param2(0, ApplyFilter(RunFilter)),
   _ts_metadata4("design:type", Function),
@@ -1155,7 +1317,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "runs", null);
-_ts_decorate4([
+_ts_decorate5([
   Get("runs/facets"),
   _ts_param2(0, ApplyFilter(RunFilter)),
   _ts_metadata4("design:type", Function),
@@ -1164,7 +1326,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "facets", null);
-_ts_decorate4([
+_ts_decorate5([
   Get("runs/values"),
   _ts_param2(0, Query()),
   _ts_metadata4("design:type", Function),
@@ -1173,20 +1335,20 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "values", null);
-_ts_decorate4([
+_ts_decorate5([
   Get("metrics"),
   Header("Content-Type", "text/plain; version=0.0.4"),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", []),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "metrics", null);
-_ts_decorate4([
+_ts_decorate5([
   Get("workers"),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", []),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "workers", null);
-_ts_decorate4([
+_ts_decorate5([
   Get("schedules"),
   _ts_param2(0, Query("namespace")),
   _ts_param2(1, Query("workflow")),
@@ -1203,7 +1365,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "schedules", null);
-_ts_decorate4([
+_ts_decorate5([
   Post("schedules/:id/pause"),
   _ts_param2(0, Param("id")),
   _ts_metadata4("design:type", Function),
@@ -1212,7 +1374,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "pauseSchedule", null);
-_ts_decorate4([
+_ts_decorate5([
   Post("schedules/:id/resume"),
   _ts_param2(0, Param("id")),
   _ts_metadata4("design:type", Function),
@@ -1221,7 +1383,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "resumeSchedule", null);
-_ts_decorate4([
+_ts_decorate5([
   Post("schedules/:id/trigger"),
   _ts_param2(0, Param("id")),
   _ts_metadata4("design:type", Function),
@@ -1230,41 +1392,53 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "triggerSchedule", null);
-_ts_decorate4([
+_ts_decorate5([
   Get("topology"),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", []),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "topology", null);
-_ts_decorate4([
+_ts_decorate5([
   Get("runs/:id"),
   _ts_param2(0, Param("id")),
   _ts_param2(1, Query("full")),
+  _ts_param2(2, Headers("if-none-match")),
+  _ts_param2(3, Res({
+    passthrough: true
+  })),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String,
-    String
+    String,
+    String,
+    Object
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "run", null);
-_ts_decorate4([
+_ts_decorate5([
   Get("runs/:id/fans/:group"),
   _ts_param2(0, Param("id")),
   _ts_param2(1, Param("group")),
   _ts_param2(2, Query("offset")),
   _ts_param2(3, Query("limit")),
   _ts_param2(4, Query("failed")),
+  _ts_param2(5, Headers("if-none-match")),
+  _ts_param2(6, Res({
+    passthrough: true
+  })),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     String,
     String,
     String,
     String,
-    String
+    String,
+    String,
+    Object
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "fanMembers", null);
-_ts_decorate4([
+_ts_decorate5([
   Sse("runs/:id/stream"),
   _ts_param2(0, Param("id")),
   _ts_metadata4("design:type", Function),
@@ -1273,7 +1447,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "stream", null);
-_ts_decorate4([
+_ts_decorate5([
   Post("runs/:id/retry"),
   _ts_param2(0, Param("id")),
   _ts_metadata4("design:type", Function),
@@ -1282,7 +1456,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "retry", null);
-_ts_decorate4([
+_ts_decorate5([
   Post("runs/:id/retry-with-input"),
   _ts_param2(0, Param("id")),
   _ts_param2(1, Body()),
@@ -1293,7 +1467,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "retryWithInput", null);
-_ts_decorate4([
+_ts_decorate5([
   Post("bulk/:action"),
   _ts_param2(0, Param("action")),
   _ts_param2(1, ApplyFilter(RunFilter)),
@@ -1306,7 +1480,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "bulk", null);
-_ts_decorate4([
+_ts_decorate5([
   Post("runs/:id/cancel"),
   _ts_param2(0, Param("id")),
   _ts_param2(1, Query("compensate")),
@@ -1317,7 +1491,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "cancel", null);
-_ts_decorate4([
+_ts_decorate5([
   Post("runs/:id/continue"),
   _ts_param2(0, Param("id")),
   _ts_metadata4("design:type", Function),
@@ -1326,7 +1500,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "continue", null);
-_ts_decorate4([
+_ts_decorate5([
   Post("runs/:id/redispatch"),
   _ts_param2(0, Param("id")),
   _ts_metadata4("design:type", Function),
@@ -1335,7 +1509,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "redispatch", null);
-_ts_decorate4([
+_ts_decorate5([
   Post("webhooks/:token"),
   _ts_param2(0, Param("token")),
   _ts_param2(1, Body()),
@@ -1346,7 +1520,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", Promise)
 ], DurableApiController.prototype, "webhook", null);
-_ts_decorate4([
+_ts_decorate5([
   Get("runs/:id/events/:key"),
   _ts_param2(0, Param("id")),
   _ts_param2(1, Param("key")),
@@ -1357,7 +1531,7 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "event", null);
-_ts_decorate4([
+_ts_decorate5([
   Post("runs/:id/updates/:name"),
   _ts_param2(0, Param("id")),
   _ts_param2(1, Param("name")),
@@ -1370,9 +1544,10 @@ _ts_decorate4([
   ]),
   _ts_metadata4("design:returntype", void 0)
 ], DurableApiController.prototype, "update", null);
-DurableApiController = _ts_decorate4([
+DurableApiController = _ts_decorate5([
   Controller(),
   UseInterceptors(ApplyFilterInterceptor),
+  UseFilters(NotModifiedFilter),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     typeof DashboardService === "undefined" ? Object : DashboardService,
@@ -1388,7 +1563,7 @@ function notFound(error) {
 __name(notFound, "notFound");
 
 // src/server/durable-auth.controller.ts
-import { BadRequestException as BadRequestException2, Body as Body2, Controller as Controller3, Get as Get3, Header as Header3, HttpCode, Inject as Inject4, Logger as Logger2, NotFoundException as NotFoundException3, Optional as Optional3, Post as Post2, Req, Res, UnauthorizedException } from "@nestjs/common";
+import { BadRequestException as BadRequestException2, Body as Body2, Controller as Controller3, Get as Get3, Header as Header3, HttpCode, Inject as Inject4, Logger as Logger2, NotFoundException as NotFoundException3, Optional as Optional3, Post as Post2, Req, Res as Res2, UnauthorizedException } from "@nestjs/common";
 
 // src/server/auth/dashboard-auth-config.ts
 var DASHBOARD_AUTH = Symbol("DASHBOARD_AUTH");
@@ -1628,14 +1803,14 @@ function renderSessionRequiredPage(basePath) {
 __name(renderSessionRequiredPage, "renderSessionRequiredPage");
 
 // src/server/auth/request.ts
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null;
 }
-__name(isRecord, "isRecord");
+__name(isRecord2, "isRecord");
 function readHeaders(request) {
-  if (!isRecord(request)) return {};
+  if (!isRecord2(request)) return {};
   const headers = request.headers;
-  return isRecord(headers) ? headers : {};
+  return isRecord2(headers) ? headers : {};
 }
 __name(readHeaders, "readHeaders");
 function headerToString(value) {
@@ -1651,14 +1826,14 @@ function readCookieHeader(request) {
 }
 __name(readCookieHeader, "readCookieHeader");
 function isHttpsRequest(request) {
-  if (isRecord(request) && request.protocol === "https") return true;
+  if (isRecord2(request) && request.protocol === "https") return true;
   const forwarded = headerToString(readHeaders(request)["x-forwarded-proto"]);
   if (forwarded === void 0) return false;
   return forwarded.split(",").map((proto) => proto.trim().toLowerCase()).includes("https");
 }
 __name(isHttpsRequest, "isHttpsRequest");
 function originalRequestUrl(request) {
-  if (!isRecord(request)) return "/";
+  if (!isRecord2(request)) return "/";
   if (typeof request.originalUrl === "string" && request.originalUrl !== "") {
     return request.originalUrl;
   }
@@ -1675,72 +1850,6 @@ function sanitizeReturnTo(candidate, fallback) {
 }
 __name(sanitizeReturnTo, "sanitizeReturnTo");
 
-// src/server/auth/response.ts
-function isRecord2(value) {
-  return typeof value === "object" && value !== null;
-}
-__name(isRecord2, "isRecord");
-function isRawCookieResponse(value) {
-  return isRecord2(value) && typeof value.getHeader === "function" && typeof value.setHeader === "function";
-}
-__name(isRawCookieResponse, "isRawCookieResponse");
-function resolveCookieResponse(response) {
-  if (isRawCookieResponse(response)) return response;
-  if (isRecord2(response) && isRawCookieResponse(response.raw)) return response.raw;
-  return null;
-}
-__name(resolveCookieResponse, "resolveCookieResponse");
-function existingSetCookies(response) {
-  const current = response.getHeader("set-cookie");
-  if (Array.isArray(current)) return current;
-  if (typeof current === "string") return [
-    current
-  ];
-  return [];
-}
-__name(existingSetCookies, "existingSetCookies");
-function appendSetCookie(response, cookie) {
-  const raw = resolveCookieResponse(response);
-  if (!raw) return;
-  raw.setHeader("set-cookie", [
-    ...existingSetCookies(raw),
-    cookie
-  ]);
-}
-__name(appendSetCookie, "appendSetCookie");
-function isRawRedirectResponse(value) {
-  return isRecord2(value) && typeof value.getHeader === "function" && typeof value.setHeader === "function" && typeof value.end === "function";
-}
-__name(isRawRedirectResponse, "isRawRedirectResponse");
-function resolveRedirectResponse(response) {
-  if (isRawRedirectResponse(response)) return response;
-  if (isRecord2(response) && isRawRedirectResponse(response.raw)) return response.raw;
-  return null;
-}
-__name(resolveRedirectResponse, "resolveRedirectResponse");
-function redirectRaw(response, location, status = 302) {
-  const raw = resolveRedirectResponse(response);
-  if (!raw) return;
-  raw.statusCode = status;
-  raw.setHeader("location", location);
-  raw.end();
-}
-__name(redirectRaw, "redirectRaw");
-function responseAlreadyWritten(response) {
-  const raw = resolveRedirectResponse(response);
-  return raw?.headersSent === true;
-}
-__name(responseAlreadyWritten, "responseAlreadyWritten");
-function writeHtmlRaw(response, html, status = 200) {
-  const raw = resolveRedirectResponse(response);
-  if (!raw) return;
-  raw.statusCode = status;
-  raw.setHeader("content-type", "text/html; charset=utf-8");
-  raw.setHeader("cache-control", "no-store, must-revalidate");
-  raw.end(html);
-}
-__name(writeHtmlRaw, "writeHtmlRaw");
-
 // src/server/auth/cookie-header.ts
 function parseCookieHeader(header) {
   const cookies = {};
@@ -1940,11 +2049,11 @@ __name(maybeRenewSession, "maybeRenewSession");
 import { existsSync, readFileSync } from "node:fs";
 import { basename, extname, join, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { Controller as Controller2, Get as Get2, Header as Header2, Inject as Inject3, NotFoundException as NotFoundException2, Param as Param2, StreamableFile, UseFilters } from "@nestjs/common";
+import { Controller as Controller2, Get as Get2, Header as Header2, Inject as Inject3, NotFoundException as NotFoundException2, Param as Param2, StreamableFile, UseFilters as UseFilters2 } from "@nestjs/common";
 
 // src/server/auth/login-redirect.exception.ts
-import { Catch, HttpException, HttpStatus } from "@nestjs/common";
-function _ts_decorate5(decorators, target, key, desc) {
+import { Catch as Catch2, HttpException as HttpException2, HttpStatus } from "@nestjs/common";
+function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1957,8 +2066,8 @@ function _ts_decorate5(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate5, "_ts_decorate");
-var DashboardLoginRedirectException = class extends HttpException {
+__name(_ts_decorate6, "_ts_decorate");
+var DashboardLoginRedirectException = class extends HttpException2 {
   static {
     __name(this, "DashboardLoginRedirectException");
   }
@@ -1978,13 +2087,13 @@ var DashboardLoginRedirectFilter = class {
     redirectRaw(response, exception.location);
   }
 };
-DashboardLoginRedirectFilter = _ts_decorate5([
-  Catch(DashboardLoginRedirectException)
+DashboardLoginRedirectFilter = _ts_decorate6([
+  Catch2(DashboardLoginRedirectException)
 ], DashboardLoginRedirectFilter);
 
 // src/server/auth/session-required.exception.ts
-import { Catch as Catch2, HttpException as HttpException2, HttpStatus as HttpStatus2, Inject as Inject2, Logger, Optional as Optional2 } from "@nestjs/common";
-function _ts_decorate6(decorators, target, key, desc) {
+import { Catch as Catch3, HttpException as HttpException3, HttpStatus as HttpStatus2, Inject as Inject2, Logger, Optional as Optional2 } from "@nestjs/common";
+function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1997,7 +2106,7 @@ function _ts_decorate6(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
+__name(_ts_decorate7, "_ts_decorate");
 function _ts_metadata5(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -2010,7 +2119,7 @@ function _ts_param3(paramIndex, decorator) {
   };
 }
 __name(_ts_param3, "_ts_param");
-var DashboardSessionRequiredException = class extends HttpException2 {
+var DashboardSessionRequiredException = class extends HttpException3 {
   static {
     __name(this, "DashboardSessionRequiredException");
   }
@@ -2058,8 +2167,8 @@ var DashboardSessionRequiredFilter = class _DashboardSessionRequiredFilter {
     this.logger.warn(message);
   }
 };
-DashboardSessionRequiredFilter = _ts_decorate6([
-  Catch2(DashboardSessionRequiredException),
+DashboardSessionRequiredFilter = _ts_decorate7([
+  Catch3(DashboardSessionRequiredException),
   _ts_param3(0, Optional2()),
   _ts_param3(0, Inject2(DASHBOARD_AUTH)),
   _ts_metadata5("design:type", Function),
@@ -2069,7 +2178,7 @@ DashboardSessionRequiredFilter = _ts_decorate6([
 ], DashboardSessionRequiredFilter);
 
 // src/server/durable-ui.controller.ts
-function _ts_decorate7(decorators, target, key, desc) {
+function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2082,7 +2191,7 @@ function _ts_decorate7(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate7, "_ts_decorate");
+__name(_ts_decorate8, "_ts_decorate");
 function _ts_metadata6(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -2147,7 +2256,7 @@ var DurableUiController = class {
     });
   }
 };
-_ts_decorate7([
+_ts_decorate8([
   Get2(),
   Header2("Content-Type", "text/html; charset=utf-8"),
   Header2("Cache-Control", "no-store, must-revalidate"),
@@ -2155,7 +2264,7 @@ _ts_decorate7([
   _ts_metadata6("design:paramtypes", []),
   _ts_metadata6("design:returntype", String)
 ], DurableUiController.prototype, "index", null);
-_ts_decorate7([
+_ts_decorate8([
   Get2("assets/:file"),
   Header2("Cache-Control", "public, max-age=31536000, immutable"),
   _ts_param4(0, Param2("file")),
@@ -2165,8 +2274,8 @@ _ts_decorate7([
   ]),
   _ts_metadata6("design:returntype", typeof StreamableFile === "undefined" ? Object : StreamableFile)
 ], DurableUiController.prototype, "asset", null);
-DurableUiController = _ts_decorate7([
-  UseFilters(DashboardLoginRedirectFilter, DashboardSessionRequiredFilter),
+DurableUiController = _ts_decorate8([
+  UseFilters2(DashboardLoginRedirectFilter, DashboardSessionRequiredFilter),
   Controller2(),
   _ts_param4(0, Inject3(DASHBOARD_BASE_PATH)),
   _ts_param4(1, Inject3(DASHBOARD_API_PATH)),
@@ -2178,7 +2287,7 @@ DurableUiController = _ts_decorate7([
 ], DurableUiController);
 
 // src/server/durable-auth.controller.ts
-function _ts_decorate8(decorators, target, key, desc) {
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2191,7 +2300,7 @@ function _ts_decorate8(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
+__name(_ts_decorate9, "_ts_decorate");
 function _ts_metadata7(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -2299,7 +2408,7 @@ var DurableAuthController = class _DurableAuthController {
     }
   }
 };
-_ts_decorate8([
+_ts_decorate9([
   Get3("login"),
   Header3("Content-Type", "text/html; charset=utf-8"),
   Header3("Cache-Control", "no-store, must-revalidate"),
@@ -2307,12 +2416,12 @@ _ts_decorate8([
   _ts_metadata7("design:paramtypes", []),
   _ts_metadata7("design:returntype", String)
 ], DurableAuthController.prototype, "loginPage", null);
-_ts_decorate8([
+_ts_decorate9([
   Post2("login"),
   HttpCode(200),
   _ts_param5(0, Body2()),
   _ts_param5(1, Req()),
-  _ts_param5(2, Res({
+  _ts_param5(2, Res2({
     passthrough: true
   })),
   _ts_metadata7("design:type", Function),
@@ -2323,11 +2432,11 @@ _ts_decorate8([
   ]),
   _ts_metadata7("design:returntype", Promise)
 ], DurableAuthController.prototype, "login", null);
-_ts_decorate8([
+_ts_decorate9([
   Post2("session"),
   HttpCode(204),
   _ts_param5(0, Req()),
-  _ts_param5(1, Res({
+  _ts_param5(1, Res2({
     passthrough: true
   })),
   _ts_metadata7("design:type", Function),
@@ -2337,10 +2446,10 @@ _ts_decorate8([
   ]),
   _ts_metadata7("design:returntype", Promise)
 ], DurableAuthController.prototype, "session", null);
-_ts_decorate8([
+_ts_decorate9([
   Get3("logout"),
   _ts_param5(0, Req()),
-  _ts_param5(1, Res()),
+  _ts_param5(1, Res2()),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [
     Object,
@@ -2348,7 +2457,7 @@ _ts_decorate8([
   ]),
   _ts_metadata7("design:returntype", void 0)
 ], DurableAuthController.prototype, "logout", null);
-DurableAuthController = _ts_decorate8([
+DurableAuthController = _ts_decorate9([
   Controller3(),
   _ts_param5(0, Optional3()),
   _ts_param5(0, Inject4(DASHBOARD_AUTH)),
@@ -2368,7 +2477,7 @@ import { ModuleRef, RouterModule } from "@nestjs/core";
 
 // src/server/durable-session.guard.ts
 import { Inject as Inject5, Injectable as Injectable4, UnauthorizedException as UnauthorizedException2 } from "@nestjs/common";
-function _ts_decorate9(decorators, target, key, desc) {
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2381,7 +2490,7 @@ function _ts_decorate9(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
+__name(_ts_decorate10, "_ts_decorate");
 function _ts_metadata8(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
@@ -2434,7 +2543,7 @@ var DurableUiSessionGuard = class {
     throw new DashboardLoginRedirectException(`${this.basePath}/login?returnTo=${returnTo}`);
   }
 };
-DurableUiSessionGuard = _ts_decorate9([
+DurableUiSessionGuard = _ts_decorate10([
   Injectable4(),
   _ts_param6(0, Inject5(DASHBOARD_AUTH)),
   _ts_param6(1, Inject5(DASHBOARD_BASE_PATH)),
@@ -2478,7 +2587,7 @@ var DurableApiSessionGuard = class {
     });
   }
 };
-DurableApiSessionGuard = _ts_decorate9([
+DurableApiSessionGuard = _ts_decorate10([
   Injectable4(),
   _ts_param6(0, Inject5(DASHBOARD_AUTH)),
   _ts_metadata8("design:type", Function),
@@ -2488,7 +2597,7 @@ DurableApiSessionGuard = _ts_decorate9([
 ], DurableApiSessionGuard);
 
 // src/server/durable-dashboard.module.ts
-function _ts_decorate10(decorators, target, key, desc) {
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2501,7 +2610,7 @@ function _ts_decorate10(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
+__name(_ts_decorate11, "_ts_decorate");
 var GUARDS_METADATA = "__guards__";
 function normalize(path) {
   return `/${path.replace(/^\/+|\/+$/g, "")}`;
@@ -2574,7 +2683,7 @@ var DurableApiModule = class _DurableApiModule {
     };
   }
 };
-DurableApiModule = _ts_decorate10([
+DurableApiModule = _ts_decorate11([
   Module({})
 ], DurableApiModule);
 var DurableDashboardModule = class _DurableDashboardModule {
@@ -2660,7 +2769,7 @@ var DurableDashboardModule = class _DurableDashboardModule {
     };
   }
 };
-DurableDashboardModule = _ts_decorate10([
+DurableDashboardModule = _ts_decorate11([
   Module({})
 ], DurableDashboardModule);
 export {