@orieljs/framework 0.1.0-alpha.3 → 0.1.0-alpha.4

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 import { C as ClassRegistry$3, a as Class$j, S as ServiceProvider$u, A as Application$c, b as Abstract$j, c as ConfigRepository$3 } from './index.d-DOlTeG-8.js';
 import { Token as Token$j, ServiceProviderClass as ServiceProviderClass$a } from './contracts.js';
-export { RouteList, RouteName } from './contracts.js';
-import { T as Target, B as BusFake, E as EventFake, M as MailFake, N as NotificationFake, Q as QueueFake, F as FakeDisk } from './testing--F6FODc_.js';
-export { C as Component, a as ComponentResult, b as Computed, c as CorruptComponentPayloadError, d as ErrorBag, I as InvalidLiveRequestError, L as Live, e as LiveComponentManager, f as LiveComponentNotFoundError, g as LiveError, h as LiveProps, i as LiveServiceProvider, j as Locked, k as MethodNotCallableError, O as On, P as PendingEvent, l as PropertyNotUpdatableError, m as Testable, U as UPDATE_URI, n as componentName, o as live } from './testing--F6FODc_.js';
+export { InertiaPage, RouteList, RouteName } from './contracts.js';
+import { T as Target, B as BusFake, E as EventFake, M as MailFake, N as NotificationFake, Q as QueueFake, F as FakeDisk } from './testing-D3dCOkTm.js';
+export { C as Component, a as ComponentResult, b as Computed, c as CorruptComponentPayloadError, d as ErrorBag, I as InvalidLiveRequestError, L as Live, e as LiveComponentManager, f as LiveComponentNotFoundError, g as LiveError, h as LiveProps, i as LiveServiceProvider, j as Locked, k as MethodNotCallableError, O as On, P as PERSISTENT_MIDDLEWARE, l as PendingEvent, m as PersistentMiddleware, n as PropertyNotUpdatableError, o as TestRequestScope, p as Testable, U as UPDATE_URI, q as componentName, r as live, s as persistentMiddleware } from './testing-D3dCOkTm.js';
 import { IncomingMessage, ServerResponse } from 'node:http';
 import { Kysely, RawBuilder, CompiledQuery, QueryResult, SqliteDatabase, SqliteStatement, Dialect } from 'kysely';
 import Redis$1, { Redis } from 'ioredis';
@@ -357,6 +357,13 @@ declare function tap<T>(target: T, callback: (target: T) => void): T;
 /** Calls fn up to `times` times (attempt numbers are 1-based). Rethrows the last error, or the first one `when` rejects. */
 declare function retry<T>(times: number, fn: (attempt: number) => T | Promise<T>, sleepMs?: number | ((attempt: number) => number), when?: (error: unknown) => boolean): Promise<T>;
 
+/**
+ * Laravel's __(): the line for `key` with `:placeholders` filled (`:name`, `:Name` capitalized, `:NAME` upper-cased),
+ * longest placeholder first. A key with no line comes back as is, so a sentence can be its own key:
+ * __('auth.failed'), __('auth.throttle', { seconds: 30 }), __('A reset link will be sent if the account exists.').
+ */
+declare function __(key: string, replace?: Record<string, string | number>): string;
+
 interface ConfigRepository$2 {
     has(key: string): boolean;
     /** Dot notation: get('database.connections.sqlite.database'). */
@@ -417,59 +424,6 @@ interface Container$i {
 }
 declare const Container$i: Token$h<Container$i>;
 
-interface ServiceProvider$s {
-    /** Bind things into the container. Synchronous. Don't resolve other services here. */
-    register?(): void;
-    /** Runs after every provider is registered. May be async (e.g. importing route files). */
-    boot?(): void | Promise<void>;
-}
-type ServiceProviderClass$9 = new (app: Application$b) => ServiceProvider$s;
-interface Application$b extends Container$i {
-    readonly version: string;
-    basePath(path?: string): string;
-    appPath(path?: string): string;
-    bootstrapPath(path?: string): string;
-    configPath(path?: string): string;
-    databasePath(path?: string): string;
-    publicPath(path?: string): string;
-    resourcePath(path?: string): string;
-    storagePath(path?: string): string;
-    /** With no args returns the environment name. With args returns whether it matches any of them. */
-    environment(): string;
-    environment(...environments: string[]): boolean;
-    isProduction(): boolean;
-    isLocal(): boolean;
-    runningInConsole(): boolean;
-    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
-    setRunningInConsole(value?: boolean): void;
-    runningUnitTests(): boolean;
-    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
-    register(provider: ServiceProvider$s | ServiceProviderClass$9): Promise<ServiceProvider$s>;
-    getProviders(): ServiceProvider$s[];
-    boot(): Promise<void>;
-    isBooted(): boolean;
-    booting(callback: (app: Application$b) => void | Promise<void>): void;
-    booted(callback: (app: Application$b) => void | Promise<void>): void;
-    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
-    handle(request: Request): Promise<Response>;
-    /** Register a callback that terminate() runs, in registration order. */
-    terminating(callback: () => void | Promise<void>): void;
-    terminate(): Promise<void>;
-}
-declare const Application$b: Token$j<Application$b>;
-/** The object passed to Application.configure().withExceptions(e => …), like Laravel's Exceptions class. */
-interface ExceptionsConfigurator$1 {
-    /** Custom reporting. Return false to stop the default logging. */
-    report(callback: (error: unknown) => void | boolean | Promise<void | boolean>): this;
-    /** Custom rendering. Return undefined to fall through to the default rendering. */
-    render(callback: (error: unknown, request: unknown) => Response | undefined | Promise<Response | undefined>): this;
-    /** Never report errors of these classes. */
-    dontReport(...classes: Array<abstract new (...args: never[]) => Error>): this;
-}
-interface Htmlable$1 {
-    toHtml(): string;
-}
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session$6 {
     getId(): string;
@@ -532,6 +486,8 @@ interface HttpRequest$6 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -591,6 +547,61 @@ interface HttpKernel$1 {
 }
 declare const HttpKernel$1: Token$j<HttpKernel$1>;
 
+interface ServiceProvider$s {
+    /** Bind things into the container. Synchronous. Don't resolve other services here. */
+    register?(): void;
+    /** Runs after every provider is registered. May be async (e.g. importing route files). */
+    boot?(): void | Promise<void>;
+}
+type ServiceProviderClass$9 = new (app: Application$b) => ServiceProvider$s;
+interface Application$b extends Container$i {
+    readonly version: string;
+    basePath(path?: string): string;
+    appPath(path?: string): string;
+    bootstrapPath(path?: string): string;
+    configPath(path?: string): string;
+    databasePath(path?: string): string;
+    publicPath(path?: string): string;
+    resourcePath(path?: string): string;
+    storagePath(path?: string): string;
+    /** With no args returns the environment name. With args returns whether it matches any of them. */
+    environment(): string;
+    environment(...environments: string[]): boolean;
+    isProduction(): boolean;
+    isLocal(): boolean;
+    runningInConsole(): boolean;
+    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
+    setRunningInConsole(value?: boolean): void;
+    runningUnitTests(): boolean;
+    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
+    register(provider: ServiceProvider$s | ServiceProviderClass$9): Promise<ServiceProvider$s>;
+    getProviders(): ServiceProvider$s[];
+    boot(): Promise<void>;
+    isBooted(): boolean;
+    booting(callback: (app: Application$b) => void | Promise<void>): void;
+    booted(callback: (app: Application$b) => void | Promise<void>): void;
+    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
+    handle(request: Request): Promise<Response>;
+    /** Register a callback that terminate() runs, in registration order. */
+    terminating(callback: () => void | Promise<void>): void;
+    terminate(): Promise<void>;
+}
+declare const Application$b: Token$j<Application$b>;
+/** The object passed to Application.configure().withExceptions(e => …), like Laravel's Exceptions class. */
+interface ExceptionsConfigurator$1 {
+    /** Custom reporting. Return false to stop the default logging. */
+    report(callback: (error: unknown) => void | boolean | Promise<void | boolean>): this;
+    /** Custom rendering. Return undefined to fall through to the default rendering. */
+    render(callback: (error: unknown, request: unknown) => Response | undefined | Promise<Response | undefined>): this;
+    /** Never report errors of these classes. */
+    dontReport(...classes: Array<abstract new (...args: never[]) => Error>): this;
+    /** Render errors as JSON when the callback returns true, whatever the Accept header. */
+    shouldRenderJsonWhen(callback: (request: HttpRequest$6, error: unknown) => boolean): this;
+}
+interface Htmlable$1 {
+    toHtml(): string;
+}
+
 type ErrorKind$j = 'Http' | 'Server' | 'ModelNotFound' | 'Validation' | 'Authentication' | 'Authorization' | 'TokenMismatch' | 'BindingResolution' | 'CircularDependency' | 'ContainerNotAvailable';
 /** Every error thrown by the framework implements this. The exception handler switches on `kind`. */
 interface OrielError$j extends Error {
@@ -640,8 +651,9 @@ declare class Container$h implements Container$k {
 }
 
 interface RoutingOptions {
-    web?: string;
-    api?: string;
+    /** One route file or several, loaded in order: web: ['routes/web.ts', 'routes/settings.ts', 'routes/auth.ts']. */
+    web?: string | string[];
+    api?: string | string[];
     console?: string;
     /** A URI such as '/up', not a file. */
     health?: string;
@@ -667,7 +679,7 @@ declare class ApplicationBuilder {
 type LifecycleCallback = (app: Application$b) => void | Promise<void>;
 declare class Application$a extends Container$h implements Application$b {
     private readonly base;
-    readonly version = "0.1.0-alpha.3";
+    readonly version = "0.1.0-alpha.4";
     private readonly providers;
     private readonly bootingCallbacks;
     private readonly bootedCallbacks;
@@ -1000,7 +1012,8 @@ declare class MailMessage {
     introLines: string[];
     actionData?: MailMessageAction;
     outroLines: string[];
-    salutationLine: string;
+    /** Unset: "Regards," and config('app.name'), as Laravel's template. */
+    salutationLine?: string;
     toAddresses: MailRecipient$1[];
     ccAddresses: MailRecipient$1[];
     bccAddresses: MailRecipient$1[];
@@ -1385,47 +1398,6 @@ interface Container$e {
 }
 declare const Container$e: Token$e<Container$e>;
 
-interface ServiceProvider$p {
-    /** Bind things into the container. Synchronous. Don't resolve other services here. */
-    register?(): void;
-    /** Runs after every provider is registered. May be async (e.g. importing route files). */
-    boot?(): void | Promise<void>;
-}
-type ServiceProviderClass$7 = new (app: Application$7) => ServiceProvider$p;
-interface Application$7 extends Container$e {
-    readonly version: string;
-    basePath(path?: string): string;
-    appPath(path?: string): string;
-    bootstrapPath(path?: string): string;
-    configPath(path?: string): string;
-    databasePath(path?: string): string;
-    publicPath(path?: string): string;
-    resourcePath(path?: string): string;
-    storagePath(path?: string): string;
-    /** With no args returns the environment name. With args returns whether it matches any of them. */
-    environment(): string;
-    environment(...environments: string[]): boolean;
-    isProduction(): boolean;
-    isLocal(): boolean;
-    runningInConsole(): boolean;
-    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
-    setRunningInConsole(value?: boolean): void;
-    runningUnitTests(): boolean;
-    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
-    register(provider: ServiceProvider$p | ServiceProviderClass$7): Promise<ServiceProvider$p>;
-    getProviders(): ServiceProvider$p[];
-    boot(): Promise<void>;
-    isBooted(): boolean;
-    booting(callback: (app: Application$7) => void | Promise<void>): void;
-    booted(callback: (app: Application$7) => void | Promise<void>): void;
-    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
-    handle(request: Request): Promise<Response>;
-    /** Register a callback that terminate() runs, in registration order. */
-    terminating(callback: () => void | Promise<void>): void;
-    terminate(): Promise<void>;
-}
-declare const Application$7: Token$j<Application$7>;
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session$5 {
     getId(): string;
@@ -1488,6 +1460,8 @@ interface HttpRequest$5 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -1521,6 +1495,47 @@ interface Middleware$5 {
 }
 type MiddlewareClass$1 = new (...args: any[]) => Middleware$5;
 
+interface ServiceProvider$p {
+    /** Bind things into the container. Synchronous. Don't resolve other services here. */
+    register?(): void;
+    /** Runs after every provider is registered. May be async (e.g. importing route files). */
+    boot?(): void | Promise<void>;
+}
+type ServiceProviderClass$7 = new (app: Application$7) => ServiceProvider$p;
+interface Application$7 extends Container$e {
+    readonly version: string;
+    basePath(path?: string): string;
+    appPath(path?: string): string;
+    bootstrapPath(path?: string): string;
+    configPath(path?: string): string;
+    databasePath(path?: string): string;
+    publicPath(path?: string): string;
+    resourcePath(path?: string): string;
+    storagePath(path?: string): string;
+    /** With no args returns the environment name. With args returns whether it matches any of them. */
+    environment(): string;
+    environment(...environments: string[]): boolean;
+    isProduction(): boolean;
+    isLocal(): boolean;
+    runningInConsole(): boolean;
+    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
+    setRunningInConsole(value?: boolean): void;
+    runningUnitTests(): boolean;
+    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
+    register(provider: ServiceProvider$p | ServiceProviderClass$7): Promise<ServiceProvider$p>;
+    getProviders(): ServiceProvider$p[];
+    boot(): Promise<void>;
+    isBooted(): boolean;
+    booting(callback: (app: Application$7) => void | Promise<void>): void;
+    booted(callback: (app: Application$7) => void | Promise<void>): void;
+    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
+    handle(request: Request): Promise<Response>;
+    /** Register a callback that terminate() runs, in registration order. */
+    terminating(callback: () => void | Promise<void>): void;
+    terminate(): Promise<void>;
+}
+declare const Application$7: Token$j<Application$7>;
+
 /** Public method names of a controller (excludes non-function members). */
 type ActionMethods$1<C> = {
     [K in keyof C]: C[K] extends (...args: any[]) => unknown ? K : never;
@@ -1538,7 +1553,7 @@ interface Route$2 {
     readonly uri: string;
     getName(): string | undefined;
     name(name: string): this;
-    middleware(...middleware: MiddlewareReference$1[]): this;
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): this;
     withoutMiddleware(...middleware: MiddlewareReference$1[]): this;
     where(parameter: string, pattern: string): this;
     where(patterns: Record<string, string>): this;
@@ -1546,7 +1561,7 @@ interface Route$2 {
 interface RouteRegistrar$1 {
     prefix(prefix: string): RouteRegistrar$1;
     name(prefix: string): RouteRegistrar$1;
-    middleware(...middleware: MiddlewareReference$1[]): RouteRegistrar$1;
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): RouteRegistrar$1;
     controller(controller: Class$e<unknown>): RouteRegistrar$1;
     group(routes: () => void | Promise<void>): Promise<void>;
 }
@@ -1574,7 +1589,7 @@ interface Router$1 {
     fallback(action: RouteAction$1): Route$2;
     prefix(prefix: string): RouteRegistrar$1;
     name(prefix: string): RouteRegistrar$1;
-    middleware(...middleware: MiddlewareReference$1[]): RouteRegistrar$1;
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): RouteRegistrar$1;
     controller(controller: Class$e<unknown>): RouteRegistrar$1;
     /** Explicit model binding: Route.model('author', User). */
     model(parameter: string, model: Class$e<unknown>): void;
@@ -1601,6 +1616,12 @@ interface UrlGenerator$1 {
     current(): string;
     previous(fallback?: string): string;
     hasRoute(name: string): boolean;
+    /** A URL to a named route with a `signature` query (HMAC-SHA256 keyed by APP_KEY); `expiration` adds `expires`. */
+    signedRoute(name: string, parameters?: unknown, expiration?: Date | number, absolute?: boolean): string;
+    /** signedRoute() that expires: a Date, or seconds from now. */
+    temporarySignedRoute(name: string, expiration: Date | number, parameters?: unknown, absolute?: boolean): string;
+    /** Whether the request URL carries a valid, unexpired signature (`absolute: false` signs the path only). */
+    hasValidSignature(request: HttpRequest$5, absolute?: boolean): boolean;
 }
 declare const UrlGenerator$1: Token$j<UrlGenerator$1>;
 
@@ -1670,7 +1691,8 @@ declare class RouteDefinition implements Route$2 {
     getName(): string | undefined;
     /** Appends, like Laravel's $action['as'] .= $name. */
     name(name: string): this;
-    middleware(...middleware: MiddlewareReference$1[]): this;
+    /** middleware('auth', 'verified') or middleware(['auth', 'verified']). */
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): this;
     withoutMiddleware(...middleware: MiddlewareReference$1[]): this;
     where(parameter: string | Record<string, string>, pattern?: string): this;
     gatherMiddleware(): MiddlewareReference$1[];
@@ -1710,7 +1732,7 @@ declare class GroupRegistrar implements RouteRegistrar$1 {
     constructor(router: GroupHost);
     prefix(prefix: string): this;
     name(prefix: string): this;
-    middleware(...middleware: MiddlewareReference$1[]): this;
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): this;
     controller(controller: Class$e<unknown>): this;
     group(routes: () => void | Promise<void>): Promise<void>;
     get<C>(uri: string, action: ControllerAction$1<C> | RouteClosure$1 | InvokableClass$1 | string): RouteDefinition;
@@ -1760,7 +1782,7 @@ declare class BaseRouter implements Router$1 {
     fallback(action: RouteAction$1): RouteDefinition;
     prefix(prefix: string): GroupRegistrar;
     name(prefix: string): GroupRegistrar;
-    middleware(...middleware: MiddlewareReference$1[]): GroupRegistrar;
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): GroupRegistrar;
     controller(controller: Class$e<unknown>): GroupRegistrar;
     /**
      * Laravel's Route::group(attributes, callback). A synchronous callback's attributes are popped before this
@@ -1820,6 +1842,20 @@ declare class BaseUrlGenerator implements UrlGenerator$1 {
     /** The Referer header, then the session's previous URL, then `fallback`, then the root (Laravel's order). */
     previous(fallback?: string): string;
     hasRoute(name: string): boolean;
+    /**
+     * Laravel's URL::signedRoute(): the route URL with its parameters sorted by name, then a `signature` query (the
+     * HMAC-SHA256 of that URL, keyed by APP_KEY). `expiration` (a Date, or seconds from now) adds `expires`.
+     * `absolute: false` signs the path only (checked by `signed:relative`).
+     */
+    signedRoute(name: string, parameters?: unknown, expiration?: Date | number, absolute?: boolean): string;
+    /** Laravel's URL::temporarySignedRoute(): a signed URL that expires at `expiration` (a Date, or seconds from now). */
+    temporarySignedRoute(name: string, expiration: Date | number, parameters?: unknown, absolute?: boolean): string;
+    /** The request URL carries a correct signature (current or previous APP_KEY) that hasn't expired. */
+    hasValidSignature(request: HttpRequest$5, absolute?: boolean): boolean;
+    /** The signature matches the URL without its `signature` query, in a constant-time comparison. */
+    hasCorrectSignature(request: HttpRequest$5, absolute?: boolean): boolean;
+    /** No `expires` query, or one that is still in the future. */
+    signatureHasNotExpired(request: HttpRequest$5): boolean;
 }
 
 /** A middleware reference after alias and group expansion: 'throttle:60,1' → { cls: Throttle, parameters: ['60', '1'] }. */
@@ -1934,6 +1970,21 @@ declare class RoutingError extends Error implements OrielError$g {
     readonly status = 500;
     readonly name = "RoutingError";
 }
+/** A signed URL whose signature is missing, wrong or expired (Laravel's InvalidSignatureException). */
+declare class InvalidUrlSignatureError extends Error implements OrielError$g {
+    readonly kind: "Http";
+    readonly status = 403;
+    readonly name = "InvalidUrlSignatureError";
+    constructor();
+}
+/** Too many requests in the window (Laravel's ThrottleRequestsException): 429 with Retry-After and X-RateLimit-*. */
+declare class ThrottleRequestsError extends Error implements OrielError$g {
+    readonly headers: Record<string, string>;
+    readonly kind: "Http";
+    readonly status = 429;
+    readonly name = "ThrottleRequestsError";
+    constructor(headers?: Record<string, string>);
+}
 
 type ResourceMethod = 'index' | 'create' | 'store' | 'show' | 'edit' | 'update' | 'destroy';
 interface ResourceRoute {
@@ -1969,11 +2020,12 @@ declare function loadRoutesFrom(app: Application$7, router: Router$1, file: stri
 declare function healthResponse(): Response;
 
 /**
- * Binds the Router and the UrlGenerator, and once the app has booted loads the files given to withRouting(): the health URI,
- * then routes/web.ts in the `web` middleware group, then routes/api.ts under the api prefix in the `api` group
- * (Laravel's ApplicationBuilder::withRouting).
+ * Binds the Router and the UrlGenerator, registers the `signed` and `throttle` middleware, and once the app has booted
+ * loads the files given to withRouting(): the health URI, then the web files in the `web` middleware group, then the
+ * api files under the api prefix in the `api` group (Laravel's ApplicationBuilder::withRouting).
  */
 declare class RoutingServiceProvider extends ServiceProvider$o {
+    #private;
     register(): void;
     /**
      * The files load in a booted() callback, after every provider's boot() (Laravel's withRouting does the same), so
@@ -1983,6 +2035,25 @@ declare class RoutingServiceProvider extends ServiceProvider$o {
     boot(): void;
 }
 
+/**
+ * Laravel's ThrottleRequests (`throttle:<maxAttempts>,<decayMinutes>[,<prefix>]`): counts the client's requests
+ * (the signed-in user, else the IP) in a window and answers 429 once there are too many. Responses carry
+ * X-RateLimit-Limit and X-RateLimit-Remaining; the 429 adds Retry-After and X-RateLimit-Reset.
+ */
+declare class ThrottleRequests implements Middleware$5 {
+    handle(request: HttpRequest$5, next: Next$6, maxAttempts?: string, decayMinutes?: string, prefix?: string): Promise<Response>;
+    /** The signed-in user's identifier, else the client IP, hashed (Laravel's resolveRequestSignature()). */
+    protected resolveRequestSignature(request: HttpRequest$5): string;
+}
+
+/**
+ * Laravel's ValidateSignature (`signed`, `signed:relative`): the request URL must carry a valid, unexpired
+ * signature from URL.signedRoute()/temporarySignedRoute(), else 403. `relative` checks a path-only signature.
+ */
+declare class ValidateSignature implements Middleware$5 {
+    handle(request: HttpRequest$5, next: Next$6, ...parameters: string[]): Promise<Response>;
+}
+
 /** A typed, runtime-unique key for container bindings. */
 interface Token$d<T> {
     readonly id: symbol;
@@ -2019,78 +2090,6 @@ interface Container$d {
 }
 declare const Container$d: Token$d<Container$d>;
 
-interface ServiceProvider$n {
-    /** Bind things into the container. Synchronous. Don't resolve other services here. */
-    register?(): void;
-    /** Runs after every provider is registered. May be async (e.g. importing route files). */
-    boot?(): void | Promise<void>;
-}
-type ServiceProviderClass$6 = new (app: Application$6) => ServiceProvider$n;
-interface Application$6 extends Container$d {
-    readonly version: string;
-    basePath(path?: string): string;
-    appPath(path?: string): string;
-    bootstrapPath(path?: string): string;
-    configPath(path?: string): string;
-    databasePath(path?: string): string;
-    publicPath(path?: string): string;
-    resourcePath(path?: string): string;
-    storagePath(path?: string): string;
-    /** With no args returns the environment name. With args returns whether it matches any of them. */
-    environment(): string;
-    environment(...environments: string[]): boolean;
-    isProduction(): boolean;
-    isLocal(): boolean;
-    runningInConsole(): boolean;
-    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
-    setRunningInConsole(value?: boolean): void;
-    runningUnitTests(): boolean;
-    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
-    register(provider: ServiceProvider$n | ServiceProviderClass$6): Promise<ServiceProvider$n>;
-    getProviders(): ServiceProvider$n[];
-    boot(): Promise<void>;
-    isBooted(): boolean;
-    booting(callback: (app: Application$6) => void | Promise<void>): void;
-    booted(callback: (app: Application$6) => void | Promise<void>): void;
-    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
-    handle(request: Request): Promise<Response>;
-    /** Register a callback that terminate() runs, in registration order. */
-    terminating(callback: () => void | Promise<void>): void;
-    terminate(): Promise<void>;
-}
-declare const Application$6: Token$j<Application$6>;
-interface ExceptionHandler {
-    report(error: unknown): Promise<void>;
-    shouldReport(error: unknown): boolean;
-    /** `request` is the scoped HttpRequest (Contracts/Http) when available, else the raw Request. */
-    render(request: unknown, error: unknown): Promise<Response>;
-}
-declare const ExceptionHandler: Token$j<ExceptionHandler>;
-/** The object passed to Application.configure().withExceptions(e => …), like Laravel's Exceptions class. */
-interface ExceptionsConfigurator {
-    /** Custom reporting. Return false to stop the default logging. */
-    report(callback: (error: unknown) => void | boolean | Promise<void | boolean>): this;
-    /** Custom rendering. Return undefined to fall through to the default rendering. */
-    render(callback: (error: unknown, request: unknown) => Response | undefined | Promise<Response | undefined>): this;
-    /** Never report errors of these classes. */
-    dontReport(...classes: Array<abstract new (...args: never[]) => Error>): this;
-}
-
-interface ConfigRepository$1 {
-    has(key: string): boolean;
-    /** Dot notation: get('database.connections.sqlite.database'). */
-    get<T = unknown>(key: string, defaultValue?: T): T;
-    set(key: string, value: unknown): void;
-    set(values: Record<string, unknown>): void;
-    push(key: string, value: unknown): void;
-    all(): Record<string, unknown>;
-}
-declare const ConfigRepository$1: Token$j<ConfigRepository$1>;
-/** Anything a controller can return that knows how to become a Response. */
-interface Responsable$1 {
-    toResponse(request: unknown): Response | Promise<Response>;
-}
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session$4 {
     getId(): string;
@@ -2157,6 +2156,8 @@ interface HttpRequest$4 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -2214,15 +2215,89 @@ interface HttpKernel {
     handle(request: Request): Promise<Response>;
     terminate?(request: Request, response: Response): Promise<void>;
 }
-declare const HttpKernel: Token$j<HttpKernel>;
-interface ResponseFactory$1 {
-    make(content?: BodyInit | null, status?: number, headers?: HeadersInit): Response;
-    json(data: unknown, status?: number, headers?: HeadersInit): Response;
-    noContent(status?: number): Response;
-    download(path: string, name?: string, headers?: HeadersInit): Promise<Response>;
-    stream(body: ReadableStream, status?: number, headers?: HeadersInit): Response;
+declare const HttpKernel: Token$j<HttpKernel>;
+interface ResponseFactory$1 {
+    make(content?: BodyInit | null, status?: number, headers?: HeadersInit): Response;
+    json(data: unknown, status?: number, headers?: HeadersInit): Response;
+    noContent(status?: number): Response;
+    download(path: string, name?: string, headers?: HeadersInit): Promise<Response>;
+    stream(body: ReadableStream, status?: number, headers?: HeadersInit): Response;
+}
+declare const ResponseFactory$1: Token$j<ResponseFactory$1>;
+
+interface ServiceProvider$n {
+    /** Bind things into the container. Synchronous. Don't resolve other services here. */
+    register?(): void;
+    /** Runs after every provider is registered. May be async (e.g. importing route files). */
+    boot?(): void | Promise<void>;
+}
+type ServiceProviderClass$6 = new (app: Application$6) => ServiceProvider$n;
+interface Application$6 extends Container$d {
+    readonly version: string;
+    basePath(path?: string): string;
+    appPath(path?: string): string;
+    bootstrapPath(path?: string): string;
+    configPath(path?: string): string;
+    databasePath(path?: string): string;
+    publicPath(path?: string): string;
+    resourcePath(path?: string): string;
+    storagePath(path?: string): string;
+    /** With no args returns the environment name. With args returns whether it matches any of them. */
+    environment(): string;
+    environment(...environments: string[]): boolean;
+    isProduction(): boolean;
+    isLocal(): boolean;
+    runningInConsole(): boolean;
+    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
+    setRunningInConsole(value?: boolean): void;
+    runningUnitTests(): boolean;
+    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
+    register(provider: ServiceProvider$n | ServiceProviderClass$6): Promise<ServiceProvider$n>;
+    getProviders(): ServiceProvider$n[];
+    boot(): Promise<void>;
+    isBooted(): boolean;
+    booting(callback: (app: Application$6) => void | Promise<void>): void;
+    booted(callback: (app: Application$6) => void | Promise<void>): void;
+    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
+    handle(request: Request): Promise<Response>;
+    /** Register a callback that terminate() runs, in registration order. */
+    terminating(callback: () => void | Promise<void>): void;
+    terminate(): Promise<void>;
+}
+declare const Application$6: Token$j<Application$6>;
+interface ExceptionHandler {
+    report(error: unknown): Promise<void>;
+    shouldReport(error: unknown): boolean;
+    /** `request` is the scoped HttpRequest (Contracts/Http) when available, else the raw Request. */
+    render(request: unknown, error: unknown): Promise<Response>;
+}
+declare const ExceptionHandler: Token$j<ExceptionHandler>;
+/** The object passed to Application.configure().withExceptions(e => …), like Laravel's Exceptions class. */
+interface ExceptionsConfigurator {
+    /** Custom reporting. Return false to stop the default logging. */
+    report(callback: (error: unknown) => void | boolean | Promise<void | boolean>): this;
+    /** Custom rendering. Return undefined to fall through to the default rendering. */
+    render(callback: (error: unknown, request: unknown) => Response | undefined | Promise<Response | undefined>): this;
+    /** Never report errors of these classes. */
+    dontReport(...classes: Array<abstract new (...args: never[]) => Error>): this;
+    /** Render errors as JSON when the callback returns true, whatever the Accept header. */
+    shouldRenderJsonWhen(callback: (request: HttpRequest$4, error: unknown) => boolean): this;
+}
+
+interface ConfigRepository$1 {
+    has(key: string): boolean;
+    /** Dot notation: get('database.connections.sqlite.database'). */
+    get<T = unknown>(key: string, defaultValue?: T): T;
+    set(key: string, value: unknown): void;
+    set(values: Record<string, unknown>): void;
+    push(key: string, value: unknown): void;
+    all(): Record<string, unknown>;
+}
+declare const ConfigRepository$1: Token$j<ConfigRepository$1>;
+/** Anything a controller can return that knows how to become a Response. */
+interface Responsable$1 {
+    toResponse(request: unknown): Response | Promise<Response>;
 }
-declare const ResponseFactory$1: Token$j<ResponseFactory$1>;
 
 /** Public method names of a controller (excludes non-function members). */
 type ActionMethods<C> = {
@@ -2241,7 +2316,7 @@ interface Route {
     readonly uri: string;
     getName(): string | undefined;
     name(name: string): this;
-    middleware(...middleware: MiddlewareReference[]): this;
+    middleware(...middleware: Array<MiddlewareReference | readonly MiddlewareReference[]>): this;
     withoutMiddleware(...middleware: MiddlewareReference[]): this;
     where(parameter: string, pattern: string): this;
     where(patterns: Record<string, string>): this;
@@ -2249,7 +2324,7 @@ interface Route {
 interface RouteRegistrar {
     prefix(prefix: string): RouteRegistrar;
     name(prefix: string): RouteRegistrar;
-    middleware(...middleware: MiddlewareReference[]): RouteRegistrar;
+    middleware(...middleware: Array<MiddlewareReference | readonly MiddlewareReference[]>): RouteRegistrar;
     controller(controller: Class$d<unknown>): RouteRegistrar;
     group(routes: () => void | Promise<void>): Promise<void>;
 }
@@ -2277,7 +2352,7 @@ interface Router {
     fallback(action: RouteAction): Route;
     prefix(prefix: string): RouteRegistrar;
     name(prefix: string): RouteRegistrar;
-    middleware(...middleware: MiddlewareReference[]): RouteRegistrar;
+    middleware(...middleware: Array<MiddlewareReference | readonly MiddlewareReference[]>): RouteRegistrar;
     controller(controller: Class$d<unknown>): RouteRegistrar;
     /** Explicit model binding: Route.model('author', User). */
     model(parameter: string, model: Class$d<unknown>): void;
@@ -2313,6 +2388,12 @@ interface UrlGenerator {
     current(): string;
     previous(fallback?: string): string;
     hasRoute(name: string): boolean;
+    /** A URL to a named route with a `signature` query (HMAC-SHA256 keyed by APP_KEY); `expiration` adds `expires`. */
+    signedRoute(name: string, parameters?: unknown, expiration?: Date | number, absolute?: boolean): string;
+    /** signedRoute() that expires: a Date, or seconds from now. */
+    temporarySignedRoute(name: string, expiration: Date | number, parameters?: unknown, absolute?: boolean): string;
+    /** Whether the request URL carries a valid, unexpired signature (`absolute: false` signs the path only). */
+    hasValidSignature(request: HttpRequest$4, absolute?: boolean): boolean;
 }
 declare const UrlGenerator: Token$j<UrlGenerator>;
 interface RedirectResponse$1 extends Responsable$1 {
@@ -2413,6 +2494,13 @@ declare abstract class ServiceProvider$m implements ServiceProvider$u {
     protected mergeConfigFrom(defaults: Record<string, unknown>, key: string): void;
 }
 
+/**
+ * Whether a JSON text nests objects and arrays deeper than `maxDepth`, found by scanning (no parsing, no recursion):
+ * brackets inside strings don't count. The kernel answers 400 for such bodies (http.max_json_depth) before the
+ * recursive input handling (sanitizing, TrimStrings, validation) could overflow the stack.
+ */
+declare function exceedsJsonDepth(text: string, maxDepth: number): boolean;
+
 /** The current container, only when it is a request scope (the kernel binds HttpRequest there). */
 declare function requestScope(): Container$d | undefined;
 declare function currentRequest(): HttpRequest$4 | undefined;
@@ -2454,7 +2542,10 @@ declare class HttpRedirector implements Redirector {
     /** Pulls url.intended from the session (put there by guest()), else goes to `fallback`. */
     intended(fallback?: string, status?: number): HttpRedirectResponse;
     away(url: string, status?: number): HttpRedirectResponse;
-    /** Remembers where a guest was going (a GET page, else the previous URL), then redirects to `path`. */
+    /**
+     * Remembers where a guest was going (a GET page, else the previous URL), then redirects to `path`. Only the path
+     * is stored, so intended() goes back on whichever host serves the app, and never to another site's Referer.
+     */
     guest(path: string, status?: number): HttpRedirectResponse;
     setIntendedUrl(url: string): void;
     refresh(status?: number): HttpRedirectResponse;
@@ -2489,6 +2580,8 @@ interface IncomingRequestOptions {
     trustedProxies?: readonly string[];
     /** Largest request body in bytes before a 413 (config http.max_body_size); null is unlimited. Default 8 MB. */
     maxBodySize?: number | null;
+    /** Deepest nesting of objects and arrays in a JSON body before a 400 (config http.max_json_depth); null is unlimited. Default 512. */
+    maxJsonDepth?: number | null;
 }
 /** Exact match, IPv4 CIDR ('10.0.0.0/8') or '*'. */
 declare function ipMatches(ip: string, patterns: readonly string[]): boolean;
@@ -2721,6 +2814,7 @@ declare function applyMiddlewareCallbacks(app: Application$6, kernel: Kernel$1):
 type ReportCallback = (error: unknown) => void | boolean | Promise<void | boolean>;
 type RenderCallback = (error: unknown, request: unknown) => Response | undefined | Promise<Response | undefined>;
 type ErrorClass = abstract new (...args: never[]) => Error;
+type JsonWhenCallback = (request: HttpRequest$4, error: unknown) => boolean;
 /** HTTP status for an error (spec §7). */
 declare function statusFor(error: unknown): number;
 /** "The title field is required. (and 2 more errors)" (Laravel's ValidationException::summarize). */
@@ -2735,6 +2829,10 @@ declare class ErrorHandler implements ExceptionHandler {
     reportUsing(callback: ReportCallback): void;
     renderUsing(callback: RenderCallback): void;
     ignore(...classes: ErrorClass[]): void;
+    /** Laravel's shouldRenderJsonWhen(): the callback decides JSON or HTML instead of the Accept header. */
+    shouldRenderJsonWhen(callback: JsonWhenCallback): void;
+    /** Laravel's shouldReturnJson(): the shouldRenderJsonWhen() callback when set, else request.expectsJson(). */
+    protected shouldReturnJson(request: HttpRequest$4, error: unknown): boolean;
     shouldReport(error: unknown): boolean;
     /** Report callbacks first (returning false stops the default log), then LogManager.error(), else console.error. Once per error. */
     report(error: unknown): Promise<void>;
@@ -2748,6 +2846,8 @@ declare class ExceptionsConfiguration implements ExceptionsConfigurator {
     report(callback: ReportCallback): this;
     render(callback: RenderCallback): this;
     dontReport(...classes: ErrorClass[]): this;
+    /** shouldRenderJsonWhen((request) => request.is('api/*')): JSON errors for those requests, whatever they accept. */
+    shouldRenderJsonWhen(callback: (request: HttpRequest$4, error: unknown) => boolean): this;
 }
 /** Runs the withExceptions() callbacks against a handler (the provider does this when the handler is built). */
 declare function applyExceptionCallbacks(app: Application$6, handler: ErrorHandler): void;
@@ -5358,6 +5458,15 @@ interface StateContext {
 }
 type State = Row$4 | ((attributes: Row$4, context: StateContext) => Row$4);
 type AnyFactory = Factory$b<any>;
+/**
+ * A model's factory() typed as its own factory class (Laravel's `@use HasFactory<UserFactory>`): declare it in the
+ * model, `declare static factory: HasFactory<UserFactory>` (with `import type`), and User.factory().unverified()
+ * type-checks. The factory is still found at run time by name (database/factories/UserFactory.ts).
+ */
+type HasFactory<F> = {
+    (): F;
+    (count: number, state?: State): F & Many;
+} & (typeof Model)['factory'];
 interface HasRelationship {
     factory: AnyFactory;
     relationship: string;
@@ -6514,6 +6623,16 @@ declare class ValidationErrorImpl extends Error implements ValidationError {
     readonly name = "ValidationError";
     constructor(errors: Record<string, string[]>, errorBag?: string, redirectTo?: string | undefined);
 }
+/**
+ * Laravel's ValidationException, for failing a request by hand:
+ * `throw ValidationException.withMessages({ email: __('auth.failed') })`. Rendered like any validation error: 422 JSON,
+ * or a redirect back with the errors.
+ */
+declare class ValidationException extends ValidationErrorImpl {
+    /** Messages per field, each a string or a list. */
+    static withMessages(messages: Record<string, string | readonly string[]>): ValidationException;
+    constructor(errors: Record<string, string[]>, errorBag?: string, redirectTo?: string);
+}
 declare class AuthorizationErrorImpl extends Error implements OrielError$c {
     readonly kind: "Authorization";
     readonly status = 403;
@@ -6592,6 +6711,8 @@ interface BuiltinRule {
     replacements?(ctx: RuleContext): Record<string, string>;
     /** Used when messageKey() isn't in DEFAULT_MESSAGES (e.g. an extend()ed rule with a custom message). */
     defaultMessage?: string;
+    /** An extend()ed rule's own message: it wins over the default lines, as Laravel's fallback messages do. */
+    message?: string;
     /** Runs even when the value is missing, blank, or null under nullable (the required* family, and accepted); a failure stops the field. */
     implicit?: boolean;
 }
@@ -6626,6 +6747,36 @@ declare function expandWildcardKeys(pattern: string, data: Record<string, unknow
 /** Every built-in rule, merged. Later tasks (database rules) add their own spread here. */
 declare const builtinRules: Record<string, BuiltinRule>;
 
+/**
+ * Laravel's Illuminate\Validation\Rules\Password: a string of at least `min` characters (8 by default), plus the
+ * checks you add: letters(), mixedCase(), numbers(), symbols(), max(). Every failing check adds its own message.
+ * Rule.password() returns the application default (PasswordRule.defaults()). (Laravel's uncompromised() is not
+ * ported: it calls an outside service.)
+ */
+declare class PasswordRule implements ValidationRule$4 {
+    #private;
+    constructor(min?: number);
+    /** A password rule of at least `size` characters: PasswordRule.min(12).mixedCase(). */
+    static min(size: number): PasswordRule;
+    /**
+     * With an argument, sets the default (Laravel's Password::defaults(fn () => ...), in a provider's boot());
+     * `null` resets it. Without one, returns a copy of the default: PasswordRule.min(8) unless set.
+     */
+    static defaults(): PasswordRule;
+    static defaults(rule: PasswordRule | (() => PasswordRule) | null): void;
+    min(size: number): this;
+    max(size: number): this;
+    /** At least one letter. */
+    letters(): this;
+    /** At least one uppercase and one lowercase letter. */
+    mixedCase(): this;
+    /** At least one number. */
+    numbers(): this;
+    /** At least one symbol (punctuation, a symbol or a space). */
+    symbols(): this;
+    validate(attribute: string, value: unknown, fail: (message: string) => void): void;
+}
+
 /**
  * Base for the fluent builders. Each one reports under a built-in rule name (`in`, `unique`, `exists`), so when it
  * runs inside a Validator its failure goes through exactly the same lookup as the string rule: custom messages
@@ -6672,6 +6823,8 @@ declare const Rule: {
     in: (values: readonly unknown[]) => InRule;
     unique: (table: string, column?: string) => UniqueRule;
     exists: (table: string, column?: string) => ExistsRule;
+    /** Laravel's Password::defaults(): the application's password rule (at least 8 characters unless PasswordRule.defaults() changed it). */
+    password: () => PasswordRule;
 };
 
 /** See Task 9's writeup in the plan for exactly what this does and doesn't infer. */
@@ -7167,6 +7320,8 @@ interface HttpRequest$3 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -7370,16 +7525,6 @@ interface Container$9 {
 }
 declare const Container$9: Token$9<Container$9>;
 
-interface Arrayable$3<T = unknown> {
-    toArray(): T;
-}
-/** The minimal collection surface contracts rely on (implemented by @orieljs/collections). */
-interface Enumerable$3<T> extends Iterable<T>, Arrayable$3<unknown[]> {
-    all(): T[];
-    count(): number;
-    isEmpty(): boolean;
-}
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session$2 {
     getId(): string;
@@ -7458,6 +7603,8 @@ interface HttpRequest$2 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -7490,6 +7637,16 @@ interface Middleware$2 {
     terminate?(request: HttpRequest$2, response: Response): Promise<void>;
 }
 
+interface Arrayable$3<T = unknown> {
+    toArray(): T;
+}
+/** The minimal collection surface contracts rely on (implemented by @orieljs/collections). */
+interface Enumerable$3<T> extends Iterable<T>, Arrayable$3<unknown[]> {
+    all(): T[];
+    count(): number;
+    isEmpty(): boolean;
+}
+
 interface Cookie {
     name: string;
     value: string;
@@ -7914,27 +8071,6 @@ interface Container$8 {
 }
 declare const Container$8: Token$8<Container$8>;
 
-interface ConfigRepository {
-    has(key: string): boolean;
-    /** Dot notation: get('database.connections.sqlite.database'). */
-    get<T = unknown>(key: string, defaultValue?: T): T;
-    set(key: string, value: unknown): void;
-    set(values: Record<string, unknown>): void;
-    push(key: string, value: unknown): void;
-    all(): Record<string, unknown>;
-}
-declare const ConfigRepository: Token$j<ConfigRepository>;
-
-interface Arrayable$2<T = unknown> {
-    toArray(): T;
-}
-/** The minimal collection surface contracts rely on (implemented by @orieljs/collections). */
-interface Enumerable$2<T> extends Iterable<T>, Arrayable$2<unknown[]> {
-    all(): T[];
-    count(): number;
-    isEmpty(): boolean;
-}
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session$1 {
     getId(): string;
@@ -7997,6 +8133,8 @@ interface HttpRequest$1 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -8029,6 +8167,27 @@ interface Middleware$1 {
     terminate?(request: HttpRequest$1, response: Response): Promise<void>;
 }
 
+interface ConfigRepository {
+    has(key: string): boolean;
+    /** Dot notation: get('database.connections.sqlite.database'). */
+    get<T = unknown>(key: string, defaultValue?: T): T;
+    set(key: string, value: unknown): void;
+    set(values: Record<string, unknown>): void;
+    push(key: string, value: unknown): void;
+    all(): Record<string, unknown>;
+}
+declare const ConfigRepository: Token$j<ConfigRepository>;
+
+interface Arrayable$2<T = unknown> {
+    toArray(): T;
+}
+/** The minimal collection surface contracts rely on (implemented by @orieljs/collections). */
+interface Enumerable$2<T> extends Iterable<T>, Arrayable$2<unknown[]> {
+    all(): T[];
+    count(): number;
+    isEmpty(): boolean;
+}
+
 interface Hasher {
     make(value: string): Promise<string>;
     check(value: string, hashed: string): Promise<boolean>;
@@ -8287,6 +8446,21 @@ declare class PasswordReset {
     readonly user: Authenticatable;
     constructor(user: Authenticatable);
 }
+/** Fired by the registration action after a user signs up; the default listener sends the verification mail. */
+declare class Registered {
+    readonly user: Authenticatable;
+    constructor(user: Authenticatable);
+}
+/** Fired when a user verifies their email address. */
+declare class Verified {
+    readonly user: Authenticatable & MustVerifyEmail;
+    constructor(user: Authenticatable & MustVerifyEmail);
+}
+/** Fired when a login is refused for too many attempts (the starter kits' LoginRequest). */
+declare class Lockout {
+    readonly request: HttpRequest$1;
+    constructor(request: HttpRequest$1);
+}
 
 /** What the default toMail() returns: Laravel's reset mail, as plain data (see the plan's notes). */
 interface ResetPasswordMail {
@@ -8313,6 +8487,54 @@ declare class ResetPassword implements Notification {
     resetUrl(notifiable: CanResetPassword): string;
 }
 
+/** What the default toMail() returns: Laravel's verification mail, as plain data (the mail channel renders it). */
+interface VerifyEmailMail {
+    subject: string;
+    lines: string[];
+    actionText: string;
+    actionUrl: string;
+    outroLines: string[];
+}
+/** The user the notification is for (AuthenticatableModel provides this). */
+type VerifiableUser = MustVerifyEmail & {
+    getKey?(): unknown;
+    getAuthIdentifier?(): unknown;
+};
+/**
+ * Laravel's VerifyEmail notification: a link to the `verification.verify` route signed for
+ * config('auth.verification.expire', 60) minutes, with the user's key as {id} and the sha1 of their email as {hash}.
+ */
+declare class VerifyEmail implements Notification {
+    /** Build the verification URL yourself (e.g. for a SPA front end). */
+    static createUrlUsing(callback: ((notifiable: VerifiableUser) => string) | undefined): void;
+    /** Build the mail yourself (e.g. a MailMessage from the Notifications component). */
+    static toMailUsing(callback: ((notifiable: VerifiableUser, url: string) => unknown) | undefined): void;
+    via(): string[];
+    toMail(notifiable: object): unknown;
+    verificationUrl(notifiable: VerifiableUser): string;
+}
+
+/**
+ * Laravel's SendEmailVerificationNotification, listening for Registered (AuthServiceProvider registers it): a new
+ * user who must verify their email, and hasn't, gets the VerifyEmail mail.
+ */
+declare class SendEmailVerificationNotification {
+    handle(event: Registered): Promise<void>;
+}
+
+/**
+ * Laravel's EmailVerificationRequest, for the verification link's route (`auth` and `signed` middleware): the
+ * signed-in user's key must equal the {id} parameter and the sha1 of their email the {hash} parameter, else 403.
+ * `await EmailVerificationRequest.validate()` in the action, like a FormRequest.
+ */
+declare class EmailVerificationRequest {
+    static validate(): Promise<Record<string, never>>;
+    authorize(): boolean;
+    rules(): Record<string, never>;
+    /** Marks the signed-in user's email as verified and fires Verified, unless it already was. */
+    fulfill(): Promise<void>;
+}
+
 /** The part of a model (Contracts/Database ModelInstance) the mixin needs. */
 interface AuthModelBase {
     getKey(): unknown;
@@ -8322,7 +8544,7 @@ interface AuthModelBase {
     save(): Promise<boolean>;
 }
 type AuthModelConstructor = new (...args: any[]) => AuthModelBase;
-/** Configure how the email verification notification is sent (signed URLs are not in v1's UrlGenerator). */
+/** Send the email verification yourself instead of the VerifyEmail notification (undefined restores the default). */
 declare function sendEmailVerificationUsing(callback: ((user: MustVerifyEmail) => Promise<void>) | undefined): void;
 /** Sends a notification through user.notify() (the Notifications mixin), else the NotificationDispatcher token. */
 declare function sendNotification(user: unknown, notification: Notification): Promise<void>;
@@ -8345,6 +8567,7 @@ declare function AuthenticatableModel<TBase extends AuthModelConstructor>(Base:
         hasVerifiedEmail(): boolean;
         markEmailAsVerified(): Promise<boolean>;
         getEmailForVerification(): string;
+        /** Sends the VerifyEmail notification (a signed link), or what sendEmailVerificationUsing() configured. */
         sendEmailVerificationNotification(): Promise<void>;
         getKey(): unknown;
         getKeyName(): string;
@@ -9405,6 +9628,18 @@ interface CacheManager$2 extends CacheRepository$1 {
     extend(driver: string, factory: (config: Record<string, unknown>) => CacheRepository$1): void;
 }
 declare const CacheManager$2: Token$j<CacheManager$2>;
+/** Laravel's RateLimiter: hits per key, kept in the default cache store. */
+interface RateLimiter$1 {
+    tooManyAttempts(key: string, maxAttempts: number): Promise<boolean>;
+    /** Adds a hit; the window starts at the first hit and lasts `decaySeconds` (default 60). Returns the hit count. */
+    hit(key: string, decaySeconds?: number): Promise<number>;
+    attempts(key: string): Promise<number>;
+    remaining(key: string, maxAttempts: number): Promise<number>;
+    /** Seconds until the key's window resets. */
+    availableIn(key: string): Promise<number>;
+    clear(key: string): Promise<void>;
+}
+declare const RateLimiter$1: Token$j<RateLimiter$1>;
 
 declare abstract class ServiceProvider$8 implements ServiceProvider$u {
     protected readonly app: Application$c;
@@ -9771,7 +10006,28 @@ declare class CacheManager$1 implements CacheManager$2 {
     tags(names: string | string[]): CacheRepository$1;
 }
 
+/**
+ * Laravel's Illuminate\Cache\RateLimiter over a cache store: `<key>` holds the hit count and `<key>:timer` the unix
+ * time the window ends, both expiring with the window. The store is resolved on every call, so a store swapped in
+ * a test (or config changed at run time) is the one used.
+ */
+declare class CacheRateLimiter implements RateLimiter$1 {
+    #private;
+    private readonly store;
+    constructor(store: () => CacheRepository$1);
+    tooManyAttempts(key: string, maxAttempts: number): Promise<boolean>;
+    hit(key: string, decaySeconds?: number): Promise<number>;
+    attempts(key: string): Promise<number>;
+    remaining(key: string, maxAttempts: number): Promise<number>;
+    availableIn(key: string): Promise<number>;
+    clear(key: string): Promise<void>;
+    /** Laravel's cleanRateLimiterKey(): accented letters become their plain letter ('zoë' and 'zoe' share a key). */
+    protected cleanKey(key: string): string;
+}
+
 declare const Cache: Facade<CacheManager$2, object>;
+/** The RateLimiter facade: RateLimiter.tooManyAttempts(key, 5), RateLimiter.hit(key), RateLimiter.clear(key). */
+declare const RateLimiter: Facade<RateLimiter$1, object>;
 declare function cache(): CacheManager$2;
 declare function cache(key: string): Promise<unknown>;
 declare function cache(values: Record<string, unknown>, ttlSeconds?: number): Promise<boolean>;
@@ -9815,6 +10071,16 @@ interface Container$4 {
     run<R>(fn: () => R): R;
 }
 declare const Container$4: Token$4<Container$4>;
+interface UploadedFile$1 {
+    readonly clientName: string;
+    readonly mimeType: string;
+    readonly size: number;
+    extension(): string;
+    arrayBuffer(): Promise<ArrayBuffer>;
+    /** Stores on a Filesystem disk. Returns the stored path. */
+    store(directory: string, disk?: string): Promise<string>;
+    storeAs(directory: string, name: string, disk?: string): Promise<string>;
+}
 
 interface ServiceProvider$7 {
     /** Bind things into the container. Synchronous. Don't resolve other services here. */
@@ -9856,16 +10122,6 @@ interface Application$2 extends Container$4 {
     terminate(): Promise<void>;
 }
 declare const Application$2: Token$j<Application$2>;
-interface UploadedFile$1 {
-    readonly clientName: string;
-    readonly mimeType: string;
-    readonly size: number;
-    extension(): string;
-    arrayBuffer(): Promise<ArrayBuffer>;
-    /** Stores on a Filesystem disk. Returns the stored path. */
-    store(directory: string, disk?: string): Promise<string>;
-    storeAs(directory: string, name: string, disk?: string): Promise<string>;
-}
 
 type ErrorKind$4 = 'Http' | 'Server' | 'ModelNotFound' | 'Validation' | 'Authentication' | 'Authorization' | 'TokenMismatch' | 'BindingResolution' | 'CircularDependency' | 'ContainerNotAvailable';
 /** Every error thrown by the framework implements this. The exception handler switches on `kind`. */
@@ -11915,54 +12171,6 @@ interface Container {
 }
 declare const Container: Token<Container>;
 
-interface ServiceProvider$1 {
-    /** Bind things into the container. Synchronous. Don't resolve other services here. */
-    register?(): void;
-    /** Runs after every provider is registered. May be async (e.g. importing route files). */
-    boot?(): void | Promise<void>;
-}
-type ServiceProviderClass = new (app: Application) => ServiceProvider$1;
-interface Application extends Container {
-    readonly version: string;
-    basePath(path?: string): string;
-    appPath(path?: string): string;
-    bootstrapPath(path?: string): string;
-    configPath(path?: string): string;
-    databasePath(path?: string): string;
-    publicPath(path?: string): string;
-    resourcePath(path?: string): string;
-    storagePath(path?: string): string;
-    /** With no args returns the environment name. With args returns whether it matches any of them. */
-    environment(): string;
-    environment(...environments: string[]): boolean;
-    isProduction(): boolean;
-    isLocal(): boolean;
-    runningInConsole(): boolean;
-    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
-    setRunningInConsole(value?: boolean): void;
-    runningUnitTests(): boolean;
-    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
-    register(provider: ServiceProvider$1 | ServiceProviderClass): Promise<ServiceProvider$1>;
-    getProviders(): ServiceProvider$1[];
-    boot(): Promise<void>;
-    isBooted(): boolean;
-    booting(callback: (app: Application) => void | Promise<void>): void;
-    booted(callback: (app: Application) => void | Promise<void>): void;
-    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
-    handle(request: Request): Promise<Response>;
-    /** Register a callback that terminate() runs, in registration order. */
-    terminating(callback: () => void | Promise<void>): void;
-    terminate(): Promise<void>;
-}
-declare const Application: Token$j<Application>;
-interface Htmlable {
-    toHtml(): string;
-}
-/** Anything a controller can return that knows how to become a Response. */
-interface Responsable {
-    toResponse(request: unknown): Response | Promise<Response>;
-}
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session {
     getId(): string;
@@ -12025,6 +12233,8 @@ interface HttpRequest {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -12056,6 +12266,54 @@ interface Middleware {
     handle(request: HttpRequest, next: Next, ...parameters: string[]): Promise<Response>;
     terminate?(request: HttpRequest, response: Response): Promise<void>;
 }
+
+interface ServiceProvider$1 {
+    /** Bind things into the container. Synchronous. Don't resolve other services here. */
+    register?(): void;
+    /** Runs after every provider is registered. May be async (e.g. importing route files). */
+    boot?(): void | Promise<void>;
+}
+type ServiceProviderClass = new (app: Application) => ServiceProvider$1;
+interface Application extends Container {
+    readonly version: string;
+    basePath(path?: string): string;
+    appPath(path?: string): string;
+    bootstrapPath(path?: string): string;
+    configPath(path?: string): string;
+    databasePath(path?: string): string;
+    publicPath(path?: string): string;
+    resourcePath(path?: string): string;
+    storagePath(path?: string): string;
+    /** With no args returns the environment name. With args returns whether it matches any of them. */
+    environment(): string;
+    environment(...environments: string[]): boolean;
+    isProduction(): boolean;
+    isLocal(): boolean;
+    runningInConsole(): boolean;
+    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
+    setRunningInConsole(value?: boolean): void;
+    runningUnitTests(): boolean;
+    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
+    register(provider: ServiceProvider$1 | ServiceProviderClass): Promise<ServiceProvider$1>;
+    getProviders(): ServiceProvider$1[];
+    boot(): Promise<void>;
+    isBooted(): boolean;
+    booting(callback: (app: Application) => void | Promise<void>): void;
+    booted(callback: (app: Application) => void | Promise<void>): void;
+    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
+    handle(request: Request): Promise<Response>;
+    /** Register a callback that terminate() runs, in registration order. */
+    terminating(callback: () => void | Promise<void>): void;
+    terminate(): Promise<void>;
+}
+declare const Application: Token$j<Application>;
+interface Htmlable {
+    toHtml(): string;
+}
+/** Anything a controller can return that knows how to become a Response. */
+interface Responsable {
+    toResponse(request: unknown): Response | Promise<Response>;
+}
 interface RedirectResponse extends Responsable {
     readonly targetUrl: string;
     with(key: string | Record<string, unknown>, value?: unknown): this;
@@ -12663,4 +12921,4 @@ type SharedPropsFrom<M> = M extends {
     share(...args: never[]): infer R;
 } ? SerializedObject<Awaited<R>> : Record<never, never>;
 
-export { API_ROUTES_STUB, AboutCommand, AbstractPaginator, AccessGate, AddQueuedCookiesToResponse, type AfterCallback, AllMailersFailedError, AlwaysProp, AnonymousNotifiable, Application$9 as Application, ApplicationBuilder, ArgonHasher, type ArgonOptions, type ArgumentDefinition, Arr, ArraySessionHandler, ArrayTransport, Artisan, Attempting, type Attributes$1 as Attributes, type AttributesResolver, Auth, AuthManager, type AuthModel, type AuthModelBase, type AuthModelConstructor, AuthServiceProvider, AuthenticatableModel, Authenticate, AuthenticationError, AuthorizationError, AuthorizationErrorImpl, Authorize, BaseJob, BaseLogger, BasePipeline, BaseRouter, BaseUrlGenerator, Batch$1 as Batch, type BatchAttributes, BatchingUnavailableError, BcryptHasher, type BcryptOptions, type BeforeCallback, BelongsTo, BelongsToMany, BindingResolutionError, Blueprint, type BlueprintCommand, BufferedConsoleOutput, Builder, type BuiltInCast, type BuiltinRule, BuiltinRuleObject, type BunDatabase, BunSqliteDatabase, type BunStatement, Bus, Dispatcher as BusDispatcherImpl, BusError, BusServiceProvider, CACHE_TABLE_MIGRATION, CHAIN, Cache, CacheManager$1 as CacheManager, Repository as CacheRepositoryImpl, CacheServiceProvider, type Store as CacheStore, CallQueuedHandler, CallQueuedListener, type CanResetPassword, type CanResetPasswordUser, type CastDefinition, type CastsAttributes, type ChainSpec, type CipherName, CircularDependencyError, ClassRegistry$2 as ClassRegistry, ClosureCommand$4 as ClosureCommand, ClosureKernel, Collection$2 as Collection, type Column, type ColumnAttributes, ColumnDefinition, type ColumnInfo, type ColumnRef, type ColumnType, Command$4 as Command, CommandNotFoundError, ComponentNotFoundError, Connection, type ConsoleInput, type ConsoleIo, Kernel as ConsoleKernelImpl, type ConsoleOutput, ConsoleServiceProvider, Container$j as Container, ContainerNotAvailableError, ControllerMethodNotFoundError, ConvertEmptyStringsToNull, Cookie$1 as Cookie, type CookieDefaults, CookieJar$1 as CookieJar, CookieServiceProvider, CookieSessionHandler, CookieValuePrefix, type CreateMigrationOptions, Crypt, Cursor, type CursorPage, CursorPaginator, type CursorPaginatorOptions, DB, DEFAULT_MESSAGES, DailyRotatingStream, DatabaseBatchRepository, type DatabaseCommandContext, type DatabaseConfig, DatabaseConfigError, DatabaseError, DatabaseFailedJobProvider, DatabaseJob, type DatabaseJobRecord, DatabaseLock, DatabaseManagerImpl, DatabaseNotificationChannel, type DatabaseNotificationRecord, DatabaseQueue, type DatabaseQueueOptions, DatabaseServiceProvider, DatabaseSessionHandler, DatabaseStore, DatabaseTokenRepository, DatabaseUnavailableError, DecryptError, DeferProp, type Direction, Dispatchable, type EagerLoadSpec, EloquentUserProvider, type Encoded, EncryptCookies, EncryptError, EncryptHistory, Encrypter$2 as Encrypter, EncryptionServiceProvider, EnsureEmailIsVerified, type EnumLike, type ErrorClass, ErrorHandler, Event, Dispatcher$1 as EventDispatcherImpl, type EventKey, type EventListenMap, EventServiceProvider, EventsNeedBusDispatcherError, EventsNeedClassRegistryError, ExceptionsConfiguration, Expression, type Facade$c as Facade, type FacadeStatics$c as FacadeStatics, Factory$b as Factory, type FactoryResult, Failed, FailoverTransport, Faker, FakerOverflowError, FileNotFoundError, FileSessionHandler, FileStore, FilesystemManager, FilesystemServiceProvider, ForeignIdColumnDefinition, ForeignKeyDefinition, FormRequest, FormUploadedFile, Gate, type GateAbility, GateResponse, GeneratorCommand, GenericLock, type GlobalScope, Grammar, type GroupAttributes, type GroupHost, GroupRegistrar, type GuardFactory, HasApiTokens, HasMany, HasManyThrough, HasOne, HasOneOrMany, Hash, HashAlgorithmError, type HashInfo, HashManager, type HasherFactory, type HashingConfig, HashingServiceProvider, type Having, HelpCommand, type HttpCommandOptions, HttpException, Kernel$1 as HttpKernelImpl, HttpRedirectResponse, HttpRedirector, HttpResponseException, HttpResponseFactory, HttpServerError, HttpServiceProvider, Hub, IncomingRequest, type IncomingRequestOptions, type IndexType, Inertia, InertiaError, InertiaHtml, InertiaMiddleware, Response$1 as InertiaPageResponse, ResponseFactory as InertiaResponseFactory, InertiaServiceProvider, type ValidationErrors as InertiaValidationErrors, type InferRuleType, type InferValidatedType, InvalidCacheConfigError, InvalidCastError, InvalidListenerError, InvalidLogLevelError, InvalidRuleParameterError, InvalidSignatureError, JOBS_TABLE_MIGRATION, JobClassNotFoundError, type JobContext, type JobMiddleware, JobSerializationError, JoinClause, type JoinType, KEY_GENERATE_SIGNATURE, type KernelApp, type KeyGenerateIO, LEVEL_SEVERITY, LazyCollection$1 as LazyCollection, type LengthAwarePage, LengthAwarePaginator, ListCommand, type ListenerTuple, type LocalDiskConfig, LocalFilesystem, type LockFactory, LockTimeoutError, Log, LogChannelCycleError, LogManager, LogServiceProvider, LogTransport, type LoggedQuery, LogicError, Login, Logout, MIGRATION_CREATE_STUB, MIGRATION_STUB, MIGRATION_UPDATE_STUB, MODEL_EVENTS, Mail, MailManager, MailMessage, type MailMessageAction, MailNotificationChannel, MailQueueUnavailableError, MailServiceProvider, type MailTransporter, MailUnavailableError, Mailable, MailerImpl, MakeCastCommand, MakeCommandCommand, MakeControllerCommand, MakeEventCommand, MakeFactoryCommand, MakeJobCommand, MakeListenerCommand, MakeMailCommand, MakeMiddlewareCommand, MakeModelCommand, MakeNotificationCommand, MakeObserverCommand, MakePolicyCommand, MakeProviderCommand, MakeRequestCommand, MakeResourceCommand, MakeRuleCommand, MakeSeederCommand, MakeTestCommand, type Manifest, type ManifestChunk, ManuallyFailedError, type Many, MassAssignmentError, MaxAttemptsExceededError, MemoryStore, MergeProp, MessageBagImpl, MethodNotAllowedHttpError, MiddlewareConfiguration, MiddlewareNotFoundError, Migration, MigrationCreator, type MigrationRecord, MigrationRepository, type MigrationStatus, Migrator, type MigratorOptions, MissingAppKeyError, MissingModelError, MissingRecipientError, Model, type ModelBuilder, type ModelClass, type ModelEvent, type ModelListener, ModelNotFoundError$1 as ModelNotFoundError, ModelRegistry, type MorphConstraint, MorphMany, MorphOne, MorphTo, MySqlSchemaGrammar, NOTIFICATIONS_TABLE, NOTIFICATIONS_TABLE_MIGRATION, type NewAccessToken, NodeConsoleInput, NodeConsoleOutput, NotDatabaseNotifiableError, NotFoundHttpError, Notifiable$1 as Notifiable, type NotifiableConstructor, Notification$1 as Notification, Dispatcher$2 as NotificationDispatcherImpl, NotificationDispatcherUnavailableError, NotificationFacade, NotificationQueueUnavailableError, NotificationsServiceProvider, NullFailedJobProvider, NullLogger, NullQueue, OPERATORS, OnceProp, type OptionDefinition, type OptionValue$4 as OptionValue, OptionalProp, type Order, PERSONAL_ACCESS_TOKENS_MIGRATION, type PagePropsFrom, type PaginationLink, Paginator, type PaginatorOptions, type ParsedInput, type ParsedRule, type ParsedSetCookie, type ParsedSignature, Password, PasswordBroker, PasswordBrokerManager, PasswordReset, PathTraversalError, PendingBatch, PendingChain, PendingDispatch, PersonalAccessToken, PinoLogger, PipelineError, PipelineServiceProvider, Pivot, type PivotIds, type PlainNotificationMail, type PolicyClass, PostgresSchemaGrammar, type PreloadAttributesResolver, PropsResolver, ProviderBootError, ProviderRegisterError, QUEUE_JOB, Builder$1 as QueryBuilder, QueryError, Queue$1 as Queue, QueueBase, type QueueCommandContext, QueueError, type QueueJobPayload, QueueManager, QueueServiceProvider, QueueUnavailableError, Queueable, QueuedConsoleInput, QueuedMailSender, type QueuedMailableFactory, RESTART_CACHE_KEY, type RawResult, type RecipientOverrides, RedirectIfAuthenticated, RedisJob, RedisLock, RedisQueue, type RedisQueueOptions, RedisRepository, type RedisSessionClient, RedisSessionHandler, RedisStore, RedisTaggedStore, type ReferentialAction, type RegisteredModel, Relation, type RelationConstraint, type RelationNames, RelationNotFoundError, RelationNotLoadedError, type RelationValue, type RenderCallback, type RenderedContent, type ReplStarter, type ReportCallback, Repository$1 as Repository, ResetPassword, type ResetPasswordMail, type ResolvedMiddleware, type ResolvedServeOptions, type ResourceMethod, type ResourceRoute, type RollbackOptions, Route$1 as Route, type RouteAttributes, type RouteBinder, RouteDefinition, type RouteFileCallback, type RouteHandler, type RouteListFilters, type RouteListRow, RouteModelNotFoundError, RouteModelResolverImpl, RouteNotDefinedError, type RouteStage, RoutingError, type RoutingOptions, RoutingServiceProvider, Rule, type RuleContext, type RunningServer, type Runtime, type S3ClientLike, type S3DiskConfig, S3Filesystem, SSR_RENDER_FAILED, STORAGE_LINK_SIGNATURE, Schedule, ScheduleImpl, ScheduleListCommand, ScheduleNameRequiredError, ScheduleRunCommand, ScheduleWorkCommand, type ScheduleWorkOptions, ScheduledEventImpl, Schema, SchemaBuilder, SchemaBuilderToken, SchemaGrammar, type Scope, type ScopeCallback, type ScopeStatic, type Scopes, type ScrollMetadata, ScrollProp, Seeder, type SeederClass, type SelectColumn, SendQueuedMailable, SendQueuedNotifications, type Serialized, type SerializedObject, type ServeOptions, ServiceProvider$t as ServiceProvider, SessionFacade as Session, type SessionConfig, SessionGuard, type SessionGuardOptions, type SessionHandlerFactory, SessionManager, SessionMessageBag, SessionServiceProvider, Store$1 as SessionStore, type SharedPropsFrom, type SimplePage, type SmtpConfig, SmtpTransport, SoftDeletingScope, type SpawnResult, type Spawner, SqliteSchemaGrammar, SsrError, type SsrFailure, HttpGateway as SsrHttpGateway, type StackFrame, StackLogger, StartSession, type State, type StateContext, Storage, type StoredBatchOptions, Str, type StringPipeResolver, type SyncChanges, SyncJob, SyncQueue, type TagAttributes, TagsNotSupportedError, TestCommand, TimeoutExceededError, TinkerCommand, type TinkerOptions, type TinkerRepl, TokenGuard, type TokenGuardOptions, TokenMismatchError, TokenRepository, type TransporterFactory, TrimStrings, TypeGenerator, type TypeGeneratorOptions, type TypedRedirector, UNIQUE_LOCK, USERS_TABLE_MIGRATION, UniqueJobsNeedCacheError, UniqueLock, type UniqueLockSpec, UnknownCacheDriverError, UnknownCacheStoreError, UnknownDiskError, UnknownFilesystemDriverError, UnknownLogChannelError, UnknownLogDriverError, UnknownMailTransportError, UnknownMailerError, UnknownNotificationChannelError, UnknownQueueConnectionError, UnknownQueueDriverError, UnknownValidationRuleError, UnrenderableNotificationDataError, UnrenderableNotificationMailError, UnsupportedCipherError, UnsupportedOperationError, type UriParameter, UrlGenerationError, type UrlResolver, type UserProviderFactory, Validated, ValidationErrorImpl, ValidationFactoryImpl, ValidationServiceProvider, Validator, ValidatorImpl, VerifyCsrfToken, ViewFactoryUnavailableError, Vite, ViteError, ViteHtml, WORKER_DISCOVERY_DIRECTORIES, type Where, type WhereArgs, type WhereBoolean, WithoutOverlapping, Worker, type WorkerListener, type WorkerOptions, abort, abortIf, abortUnless, addApiRouting, allowGuests, app, applyExceptionCallbacks, applyMiddlewareCallbacks, applyReplacements, auth, back, bcrypt, builtinRules, bunRuntime, cache, castGet, castSet, classNameOf, clientAddress, collect, columnKey, compareRoutes, config, contentDisposition, cookie, createDailyChannel, createDialect, createPayload, createSingleChannel, createStderrChannel, createToken, csrfToken, currentContainer, currentLogContext, currentRequest, currentVite, databaseConfigDefaults, debugPage, decodePayload, decrypt, defaultAttributeName, defaultLockFactory, defaultProviders, defaultWorkerOptions, delaySeconds, describeError, deserialize, detectRuntime, discoverClasses, discoverFactories, discoverJobs, discoverListeners, discoverPolicies, dispatch, dispatchRoute, dispatchSync, encodePayload, encrypt, enumValues, env, errorBagFrom, errors, escapeHtml, event, expandWildcardKeys, extensionFromMime, facade, fake, fetchNotifications, filterRouteList, formatAddress, formatDate, formatDateTime, formatRouteList, formatTimestamp, fromEntries, generateAppKey, generateModelTypes, getMorphAlias, getMorphedModel, guessTable, hashInfo, healthResponse, inertia, inertiaBody, inertiaHead, inject, ipMatches, isBlank, isBun, isDateCast, isEmptyValue, isEquivalent, isJsonCast, isListenerClass, isListenerTuple, isModel, isQueueable, isQueueableListener, isUnique, isUploadedFileLike, joinDiskPath, keyGenerateHandler, loadRelations, loadRoutesFrom, logger, makeFailedJobProvider, meetsLevel, mergeGroup, mergeLogContext, mergeRecursive, migrationDatePrefix, minimalPage, modelEventName, morphMap, normalizeAddress, normalizeAddresses, normalizeBackoff, normalizeLists, normalizePath, normalizeUri, now, old, openSqlite, optionalCookieJar, optionalSession, orderForBindings, parseArgv, parseBracketKey, parseCookieHeader, parseDateTime, parseKey, parseParameters, parseRuleSpec, parseSignature, passwordVerify, prepareValue, queueConfigDefaults, queueOptionsOf, raw as rawSql, rawWithBindings, redirect, registerHttpCommands, registerKeyGenerateCommand, registerMigrationCommands, registerModelTypesCommand, registerQueueCommands, registerStorageLinkCommand, renderContent, renderError, request, requestScope, resolveArguments, resolveDiskPath, resolveMiddleware, resolveMorphClass, resolveOptions, resourceRoutes, response, restoreJob, restoreValue, retry, roundTrip, route, routeListRows, runConsole, runConsoleAndExit, runMiddleware, runSeeder, sanitize, sendEmailVerificationUsing, sendNotification, serialize, serializeContext, serializeCookie, serializeDate, serializeValue, serve, serveBun, serveNode, servePublicFile, session, setClientAddress, stackFrames, statusFor, statusText, storageLinkHandler, substituteBindings, suggest, summarizeValidation, tap, toNotifiableList, toResponse, toWebRequest, tokenableType, transformLeaves, url, usePaginationResolvers, validateRequiredArguments, value, vite, viteReactRefresh, withHeaders, workerOptionsFrom, writeResponse };
+export { API_ROUTES_STUB, AboutCommand, AbstractPaginator, AccessGate, AddQueuedCookiesToResponse, type AfterCallback, AllMailersFailedError, AlwaysProp, AnonymousNotifiable, Application$9 as Application, ApplicationBuilder, ArgonHasher, type ArgonOptions, type ArgumentDefinition, Arr, ArraySessionHandler, ArrayTransport, Artisan, Attempting, type Attributes$1 as Attributes, type AttributesResolver, Auth, AuthManager, type AuthModel, type AuthModelBase, type AuthModelConstructor, AuthServiceProvider, AuthenticatableModel, Authenticate, AuthenticationError, AuthorizationError, AuthorizationErrorImpl, Authorize, BaseJob, BaseLogger, BasePipeline, BaseRouter, BaseUrlGenerator, Batch$1 as Batch, type BatchAttributes, BatchingUnavailableError, BcryptHasher, type BcryptOptions, type BeforeCallback, BelongsTo, BelongsToMany, BindingResolutionError, Blueprint, type BlueprintCommand, BufferedConsoleOutput, Builder, type BuiltInCast, type BuiltinRule, BuiltinRuleObject, type BunDatabase, BunSqliteDatabase, type BunStatement, Bus, Dispatcher as BusDispatcherImpl, BusError, BusServiceProvider, CACHE_TABLE_MIGRATION, CHAIN, Cache, CacheManager$1 as CacheManager, CacheRateLimiter, Repository as CacheRepositoryImpl, CacheServiceProvider, type Store as CacheStore, CallQueuedHandler, CallQueuedListener, type CanResetPassword, type CanResetPasswordUser, type CastDefinition, type CastsAttributes, type ChainSpec, type CipherName, CircularDependencyError, ClassRegistry$2 as ClassRegistry, ClosureCommand$4 as ClosureCommand, ClosureKernel, Collection$2 as Collection, type Column, type ColumnAttributes, ColumnDefinition, type ColumnInfo, type ColumnRef, type ColumnType, Command$4 as Command, CommandNotFoundError, ComponentNotFoundError, Connection, type ConsoleInput, type ConsoleIo, Kernel as ConsoleKernelImpl, type ConsoleOutput, ConsoleServiceProvider, Container$j as Container, ContainerNotAvailableError, ControllerMethodNotFoundError, ConvertEmptyStringsToNull, Cookie$1 as Cookie, type CookieDefaults, CookieJar$1 as CookieJar, CookieServiceProvider, CookieSessionHandler, CookieValuePrefix, type CreateMigrationOptions, Crypt, Cursor, type CursorPage, CursorPaginator, type CursorPaginatorOptions, DB, DEFAULT_MESSAGES, DailyRotatingStream, DatabaseBatchRepository, type DatabaseCommandContext, type DatabaseConfig, DatabaseConfigError, DatabaseError, DatabaseFailedJobProvider, DatabaseJob, type DatabaseJobRecord, DatabaseLock, DatabaseManagerImpl, DatabaseNotificationChannel, type DatabaseNotificationRecord, DatabaseQueue, type DatabaseQueueOptions, DatabaseServiceProvider, DatabaseSessionHandler, DatabaseStore, DatabaseTokenRepository, DatabaseUnavailableError, DecryptError, DeferProp, type Direction, Dispatchable, type EagerLoadSpec, EloquentUserProvider, EmailVerificationRequest, type Encoded, EncryptCookies, EncryptError, EncryptHistory, Encrypter$2 as Encrypter, EncryptionServiceProvider, EnsureEmailIsVerified, type EnumLike, type ErrorClass, ErrorHandler, Event, Dispatcher$1 as EventDispatcherImpl, type EventKey, type EventListenMap, EventServiceProvider, EventsNeedBusDispatcherError, EventsNeedClassRegistryError, ExceptionsConfiguration, Expression, type Facade$c as Facade, type FacadeStatics$c as FacadeStatics, Factory$b as Factory, type FactoryResult, Failed, FailoverTransport, Faker, FakerOverflowError, FileNotFoundError, FileSessionHandler, FileStore, FilesystemManager, FilesystemServiceProvider, ForeignIdColumnDefinition, ForeignKeyDefinition, FormRequest, FormUploadedFile, Gate, type GateAbility, GateResponse, GeneratorCommand, GenericLock, type GlobalScope, Grammar, type GroupAttributes, type GroupHost, GroupRegistrar, type GuardFactory, HasApiTokens, type HasFactory, HasMany, HasManyThrough, HasOne, HasOneOrMany, Hash, HashAlgorithmError, type HashInfo, HashManager, type HasherFactory, type HashingConfig, HashingServiceProvider, type Having, HelpCommand, type HttpCommandOptions, HttpException, Kernel$1 as HttpKernelImpl, HttpRedirectResponse, HttpRedirector, HttpResponseException, HttpResponseFactory, HttpServerError, HttpServiceProvider, Hub, IncomingRequest, type IncomingRequestOptions, type IndexType, Inertia, InertiaError, InertiaHtml, InertiaMiddleware, Response$1 as InertiaPageResponse, ResponseFactory as InertiaResponseFactory, InertiaServiceProvider, type ValidationErrors as InertiaValidationErrors, type InferRuleType, type InferValidatedType, InvalidCacheConfigError, InvalidCastError, InvalidListenerError, InvalidLogLevelError, InvalidRuleParameterError, InvalidSignatureError, InvalidUrlSignatureError, JOBS_TABLE_MIGRATION, JobClassNotFoundError, type JobContext, type JobMiddleware, JobSerializationError, JoinClause, type JoinType, type JsonWhenCallback, KEY_GENERATE_SIGNATURE, type KernelApp, type KeyGenerateIO, LEVEL_SEVERITY, LazyCollection$1 as LazyCollection, type LengthAwarePage, LengthAwarePaginator, ListCommand, type ListenerTuple, type LocalDiskConfig, LocalFilesystem, type LockFactory, LockTimeoutError, Lockout, Log, LogChannelCycleError, LogManager, LogServiceProvider, LogTransport, type LoggedQuery, LogicError, Login, Logout, MIGRATION_CREATE_STUB, MIGRATION_STUB, MIGRATION_UPDATE_STUB, MODEL_EVENTS, Mail, MailManager, MailMessage, type MailMessageAction, MailNotificationChannel, MailQueueUnavailableError, MailServiceProvider, type MailTransporter, MailUnavailableError, Mailable, MailerImpl, MakeCastCommand, MakeCommandCommand, MakeControllerCommand, MakeEventCommand, MakeFactoryCommand, MakeJobCommand, MakeListenerCommand, MakeMailCommand, MakeMiddlewareCommand, MakeModelCommand, MakeNotificationCommand, MakeObserverCommand, MakePolicyCommand, MakeProviderCommand, MakeRequestCommand, MakeResourceCommand, MakeRuleCommand, MakeSeederCommand, MakeTestCommand, type Manifest, type ManifestChunk, ManuallyFailedError, type Many, MassAssignmentError, MaxAttemptsExceededError, MemoryStore, MergeProp, MessageBagImpl, MethodNotAllowedHttpError, MiddlewareConfiguration, MiddlewareNotFoundError, Migration, MigrationCreator, type MigrationRecord, MigrationRepository, type MigrationStatus, Migrator, type MigratorOptions, MissingAppKeyError, MissingModelError, MissingRecipientError, Model, type ModelBuilder, type ModelClass, type ModelEvent, type ModelListener, ModelNotFoundError$1 as ModelNotFoundError, ModelRegistry, type MorphConstraint, MorphMany, MorphOne, MorphTo, MySqlSchemaGrammar, NOTIFICATIONS_TABLE, NOTIFICATIONS_TABLE_MIGRATION, type NewAccessToken, NodeConsoleInput, NodeConsoleOutput, NotDatabaseNotifiableError, NotFoundHttpError, Notifiable$1 as Notifiable, type NotifiableConstructor, Notification$1 as Notification, Dispatcher$2 as NotificationDispatcherImpl, NotificationDispatcherUnavailableError, NotificationFacade, NotificationQueueUnavailableError, NotificationsServiceProvider, NullFailedJobProvider, NullLogger, NullQueue, OPERATORS, OnceProp, type OptionDefinition, type OptionValue$4 as OptionValue, OptionalProp, type Order, PERSONAL_ACCESS_TOKENS_MIGRATION, type PagePropsFrom, type PaginationLink, Paginator, type PaginatorOptions, type ParsedInput, type ParsedRule, type ParsedSetCookie, type ParsedSignature, Password, PasswordBroker, PasswordBrokerManager, PasswordReset, PasswordRule, PathTraversalError, PendingBatch, PendingChain, PendingDispatch, PersonalAccessToken, PinoLogger, PipelineError, PipelineServiceProvider, Pivot, type PivotIds, type PlainNotificationMail, type PolicyClass, PostgresSchemaGrammar, type PreloadAttributesResolver, PropsResolver, ProviderBootError, ProviderRegisterError, QUEUE_JOB, Builder$1 as QueryBuilder, QueryError, Queue$1 as Queue, QueueBase, type QueueCommandContext, QueueError, type QueueJobPayload, QueueManager, QueueServiceProvider, QueueUnavailableError, Queueable, QueuedConsoleInput, QueuedMailSender, type QueuedMailableFactory, RESTART_CACHE_KEY, RateLimiter, type RawResult, type RecipientOverrides, RedirectIfAuthenticated, RedisJob, RedisLock, RedisQueue, type RedisQueueOptions, RedisRepository, type RedisSessionClient, RedisSessionHandler, RedisStore, RedisTaggedStore, type ReferentialAction, Registered, type RegisteredModel, Relation, type RelationConstraint, type RelationNames, RelationNotFoundError, RelationNotLoadedError, type RelationValue, type RenderCallback, type RenderedContent, type ReplStarter, type ReportCallback, Repository$1 as Repository, ResetPassword, type ResetPasswordMail, type ResolvedMiddleware, type ResolvedServeOptions, type ResourceMethod, type ResourceRoute, type RollbackOptions, Route$1 as Route, type RouteAttributes, type RouteBinder, RouteDefinition, type RouteFileCallback, type RouteHandler, type RouteListFilters, type RouteListRow, RouteModelNotFoundError, RouteModelResolverImpl, RouteNotDefinedError, type RouteStage, RoutingError, type RoutingOptions, RoutingServiceProvider, Rule, type RuleContext, type RunningServer, type Runtime, type S3ClientLike, type S3DiskConfig, S3Filesystem, SSR_RENDER_FAILED, STORAGE_LINK_SIGNATURE, Schedule, ScheduleImpl, ScheduleListCommand, ScheduleNameRequiredError, ScheduleRunCommand, ScheduleWorkCommand, type ScheduleWorkOptions, ScheduledEventImpl, Schema, SchemaBuilder, SchemaBuilderToken, SchemaGrammar, type Scope, type ScopeCallback, type ScopeStatic, type Scopes, type ScrollMetadata, ScrollProp, Seeder, type SeederClass, type SelectColumn, SendEmailVerificationNotification, SendQueuedMailable, SendQueuedNotifications, type Serialized, type SerializedObject, type ServeOptions, ServiceProvider$t as ServiceProvider, SessionFacade as Session, type SessionConfig, SessionGuard, type SessionGuardOptions, type SessionHandlerFactory, SessionManager, SessionMessageBag, SessionServiceProvider, Store$1 as SessionStore, type SharedPropsFrom, type SimplePage, type SmtpConfig, SmtpTransport, SoftDeletingScope, type SpawnResult, type Spawner, SqliteSchemaGrammar, SsrError, type SsrFailure, HttpGateway as SsrHttpGateway, type StackFrame, StackLogger, StartSession, type State, type StateContext, Storage, type StoredBatchOptions, Str, type StringPipeResolver, type SyncChanges, SyncJob, SyncQueue, type TagAttributes, TagsNotSupportedError, TestCommand, ThrottleRequests, ThrottleRequestsError, TimeoutExceededError, TinkerCommand, type TinkerOptions, type TinkerRepl, TokenGuard, type TokenGuardOptions, TokenMismatchError, TokenRepository, type TransporterFactory, TrimStrings, TypeGenerator, type TypeGeneratorOptions, type TypedRedirector, UNIQUE_LOCK, USERS_TABLE_MIGRATION, UniqueJobsNeedCacheError, UniqueLock, type UniqueLockSpec, UnknownCacheDriverError, UnknownCacheStoreError, UnknownDiskError, UnknownFilesystemDriverError, UnknownLogChannelError, UnknownLogDriverError, UnknownMailTransportError, UnknownMailerError, UnknownNotificationChannelError, UnknownQueueConnectionError, UnknownQueueDriverError, UnknownValidationRuleError, UnrenderableNotificationDataError, UnrenderableNotificationMailError, UnsupportedCipherError, UnsupportedOperationError, type UriParameter, UrlGenerationError, type UrlResolver, type UserProviderFactory, ValidateSignature, Validated, ValidationErrorImpl, ValidationException, ValidationFactoryImpl, ValidationServiceProvider, Validator, ValidatorImpl, type VerifiableUser, Verified, VerifyCsrfToken, VerifyEmail, type VerifyEmailMail, ViewFactoryUnavailableError, Vite, ViteError, ViteHtml, WORKER_DISCOVERY_DIRECTORIES, type Where, type WhereArgs, type WhereBoolean, WithoutOverlapping, Worker, type WorkerListener, type WorkerOptions, __, abort, abortIf, abortUnless, addApiRouting, allowGuests, app, applyExceptionCallbacks, applyMiddlewareCallbacks, applyReplacements, auth, back, bcrypt, builtinRules, bunRuntime, cache, castGet, castSet, classNameOf, clientAddress, collect, columnKey, compareRoutes, config, contentDisposition, cookie, createDailyChannel, createDialect, createPayload, createSingleChannel, createStderrChannel, createToken, csrfToken, currentContainer, currentLogContext, currentRequest, currentVite, databaseConfigDefaults, debugPage, decodePayload, decrypt, defaultAttributeName, defaultLockFactory, defaultProviders, defaultWorkerOptions, delaySeconds, describeError, deserialize, detectRuntime, discoverClasses, discoverFactories, discoverJobs, discoverListeners, discoverPolicies, dispatch, dispatchRoute, dispatchSync, encodePayload, encrypt, enumValues, env, errorBagFrom, errors, escapeHtml, event, exceedsJsonDepth, expandWildcardKeys, extensionFromMime, facade, fake, fetchNotifications, filterRouteList, formatAddress, formatDate, formatDateTime, formatRouteList, formatTimestamp, fromEntries, generateAppKey, generateModelTypes, getMorphAlias, getMorphedModel, guessTable, hashInfo, healthResponse, inertia, inertiaBody, inertiaHead, inject, ipMatches, isBlank, isBun, isDateCast, isEmptyValue, isEquivalent, isJsonCast, isListenerClass, isListenerTuple, isModel, isQueueable, isQueueableListener, isUnique, isUploadedFileLike, joinDiskPath, keyGenerateHandler, loadRelations, loadRoutesFrom, logger, makeFailedJobProvider, meetsLevel, mergeGroup, mergeLogContext, mergeRecursive, migrationDatePrefix, minimalPage, modelEventName, morphMap, normalizeAddress, normalizeAddresses, normalizeBackoff, normalizeLists, normalizePath, normalizeUri, now, old, openSqlite, optionalCookieJar, optionalSession, orderForBindings, parseArgv, parseBracketKey, parseCookieHeader, parseDateTime, parseKey, parseParameters, parseRuleSpec, parseSignature, passwordVerify, prepareValue, queueConfigDefaults, queueOptionsOf, raw as rawSql, rawWithBindings, redirect, registerHttpCommands, registerKeyGenerateCommand, registerMigrationCommands, registerModelTypesCommand, registerQueueCommands, registerStorageLinkCommand, renderContent, renderError, request, requestScope, resolveArguments, resolveDiskPath, resolveMiddleware, resolveMorphClass, resolveOptions, resourceRoutes, response, restoreJob, restoreValue, retry, roundTrip, route, routeListRows, runConsole, runConsoleAndExit, runMiddleware, runSeeder, sanitize, sendEmailVerificationUsing, sendNotification, serialize, serializeContext, serializeCookie, serializeDate, serializeValue, serve, serveBun, serveNode, servePublicFile, session, setClientAddress, stackFrames, statusFor, statusText, storageLinkHandler, substituteBindings, suggest, summarizeValidation, tap, toNotifiableList, toResponse, toWebRequest, tokenableType, transformLeaves, url, usePaginationResolvers, validateRequiredArguments, value, vite, viteReactRefresh, withHeaders, workerOptionsFrom, writeResponse };