@orieljs/framework 0.1.0-alpha.3 → 0.1.0-alpha.5

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 import { C as ClassRegistry$3, a as Class$j, S as ServiceProvider$u, A as Application$c, b as Abstract$j, c as ConfigRepository$3 } from './index.d-DOlTeG-8.js';
-import { Token as Token$j, ServiceProviderClass as ServiceProviderClass$a } from './contracts.js';
-export { RouteList, RouteName } from './contracts.js';
-import { T as Target, B as BusFake, E as EventFake, M as MailFake, N as NotificationFake, Q as QueueFake, F as FakeDisk } from './testing--F6FODc_.js';
-export { C as Component, a as ComponentResult, b as Computed, c as CorruptComponentPayloadError, d as ErrorBag, I as InvalidLiveRequestError, L as Live, e as LiveComponentManager, f as LiveComponentNotFoundError, g as LiveError, h as LiveProps, i as LiveServiceProvider, j as Locked, k as MethodNotCallableError, O as On, P as PendingEvent, l as PropertyNotUpdatableError, m as Testable, U as UPDATE_URI, n as componentName, o as live } from './testing--F6FODc_.js';
+import { Token as Token$j, ServiceProviderClass as ServiceProviderClass$a, Notification as Notification$4 } from './contracts.js';
+export { InertiaPage, RouteList, RouteName } from './contracts.js';
+import { T as Target, B as BusFake, E as EventFake, M as MailFake, N as NotificationFake, Q as QueueFake, F as FakeDisk } from './testing-BErengYY.js';
+export { C as Component, a as ComponentResult, b as Computed, c as CorruptComponentPayloadError, d as ErrorBag, I as InvalidLiveRequestError, L as Live, e as LiveComponentManager, f as LiveComponentNotFoundError, g as LiveError, h as LiveProps, i as LiveServiceProvider, j as Locked, k as MethodNotCallableError, O as On, P as PERSISTENT_MIDDLEWARE, l as Paginated, m as Pagination, n as PaginationProps, o as PaginationSource, p as PendingEvent, q as PersistentMiddleware, r as PropertyNotUpdatableError, s as TestRequestScope, t as Testable, U as UPDATE_URI, W as WithPagination, u as componentName, v as live, w as persistentMiddleware } from './testing-BErengYY.js';
 import { IncomingMessage, ServerResponse } from 'node:http';
 import { Kysely, RawBuilder, CompiledQuery, QueryResult, SqliteDatabase, SqliteStatement, Dialect } from 'kysely';
 import Redis$1, { Redis } from 'ioredis';
@@ -357,6 +357,13 @@ declare function tap<T>(target: T, callback: (target: T) => void): T;
 /** Calls fn up to `times` times (attempt numbers are 1-based). Rethrows the last error, or the first one `when` rejects. */
 declare function retry<T>(times: number, fn: (attempt: number) => T | Promise<T>, sleepMs?: number | ((attempt: number) => number), when?: (error: unknown) => boolean): Promise<T>;
 
+/**
+ * Laravel's __(): the line for `key` with `:placeholders` filled (`:name`, `:Name` capitalized, `:NAME` upper-cased),
+ * longest placeholder first. A key with no line comes back as is, so a sentence can be its own key:
+ * __('auth.failed'), __('auth.throttle', { seconds: 30 }), __('A reset link will be sent if the account exists.').
+ */
+declare function __(key: string, replace?: Record<string, string | number>): string;
+
 interface ConfigRepository$2 {
     has(key: string): boolean;
     /** Dot notation: get('database.connections.sqlite.database'). */
@@ -417,59 +424,6 @@ interface Container$i {
 }
 declare const Container$i: Token$h<Container$i>;
 
-interface ServiceProvider$s {
-    /** Bind things into the container. Synchronous. Don't resolve other services here. */
-    register?(): void;
-    /** Runs after every provider is registered. May be async (e.g. importing route files). */
-    boot?(): void | Promise<void>;
-}
-type ServiceProviderClass$9 = new (app: Application$b) => ServiceProvider$s;
-interface Application$b extends Container$i {
-    readonly version: string;
-    basePath(path?: string): string;
-    appPath(path?: string): string;
-    bootstrapPath(path?: string): string;
-    configPath(path?: string): string;
-    databasePath(path?: string): string;
-    publicPath(path?: string): string;
-    resourcePath(path?: string): string;
-    storagePath(path?: string): string;
-    /** With no args returns the environment name. With args returns whether it matches any of them. */
-    environment(): string;
-    environment(...environments: string[]): boolean;
-    isProduction(): boolean;
-    isLocal(): boolean;
-    runningInConsole(): boolean;
-    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
-    setRunningInConsole(value?: boolean): void;
-    runningUnitTests(): boolean;
-    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
-    register(provider: ServiceProvider$s | ServiceProviderClass$9): Promise<ServiceProvider$s>;
-    getProviders(): ServiceProvider$s[];
-    boot(): Promise<void>;
-    isBooted(): boolean;
-    booting(callback: (app: Application$b) => void | Promise<void>): void;
-    booted(callback: (app: Application$b) => void | Promise<void>): void;
-    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
-    handle(request: Request): Promise<Response>;
-    /** Register a callback that terminate() runs, in registration order. */
-    terminating(callback: () => void | Promise<void>): void;
-    terminate(): Promise<void>;
-}
-declare const Application$b: Token$j<Application$b>;
-/** The object passed to Application.configure().withExceptions(e => …), like Laravel's Exceptions class. */
-interface ExceptionsConfigurator$1 {
-    /** Custom reporting. Return false to stop the default logging. */
-    report(callback: (error: unknown) => void | boolean | Promise<void | boolean>): this;
-    /** Custom rendering. Return undefined to fall through to the default rendering. */
-    render(callback: (error: unknown, request: unknown) => Response | undefined | Promise<Response | undefined>): this;
-    /** Never report errors of these classes. */
-    dontReport(...classes: Array<abstract new (...args: never[]) => Error>): this;
-}
-interface Htmlable$1 {
-    toHtml(): string;
-}
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session$6 {
     getId(): string;
@@ -532,6 +486,8 @@ interface HttpRequest$6 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -591,6 +547,61 @@ interface HttpKernel$1 {
 }
 declare const HttpKernel$1: Token$j<HttpKernel$1>;
 
+interface ServiceProvider$s {
+    /** Bind things into the container. Synchronous. Don't resolve other services here. */
+    register?(): void;
+    /** Runs after every provider is registered. May be async (e.g. importing route files). */
+    boot?(): void | Promise<void>;
+}
+type ServiceProviderClass$9 = new (app: Application$b) => ServiceProvider$s;
+interface Application$b extends Container$i {
+    readonly version: string;
+    basePath(path?: string): string;
+    appPath(path?: string): string;
+    bootstrapPath(path?: string): string;
+    configPath(path?: string): string;
+    databasePath(path?: string): string;
+    publicPath(path?: string): string;
+    resourcePath(path?: string): string;
+    storagePath(path?: string): string;
+    /** With no args returns the environment name. With args returns whether it matches any of them. */
+    environment(): string;
+    environment(...environments: string[]): boolean;
+    isProduction(): boolean;
+    isLocal(): boolean;
+    runningInConsole(): boolean;
+    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
+    setRunningInConsole(value?: boolean): void;
+    runningUnitTests(): boolean;
+    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
+    register(provider: ServiceProvider$s | ServiceProviderClass$9): Promise<ServiceProvider$s>;
+    getProviders(): ServiceProvider$s[];
+    boot(): Promise<void>;
+    isBooted(): boolean;
+    booting(callback: (app: Application$b) => void | Promise<void>): void;
+    booted(callback: (app: Application$b) => void | Promise<void>): void;
+    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
+    handle(request: Request): Promise<Response>;
+    /** Register a callback that terminate() runs, in registration order. */
+    terminating(callback: () => void | Promise<void>): void;
+    terminate(): Promise<void>;
+}
+declare const Application$b: Token$j<Application$b>;
+/** The object passed to Application.configure().withExceptions(e => …), like Laravel's Exceptions class. */
+interface ExceptionsConfigurator$1 {
+    /** Custom reporting. Return false to stop the default logging. */
+    report(callback: (error: unknown) => void | boolean | Promise<void | boolean>): this;
+    /** Custom rendering. Return undefined to fall through to the default rendering. */
+    render(callback: (error: unknown, request: unknown) => Response | undefined | Promise<Response | undefined>): this;
+    /** Never report errors of these classes. */
+    dontReport(...classes: Array<abstract new (...args: never[]) => Error>): this;
+    /** Render errors as JSON when the callback returns true, whatever the Accept header. */
+    shouldRenderJsonWhen(callback: (request: HttpRequest$6, error: unknown) => boolean): this;
+}
+interface Htmlable$1 {
+    toHtml(): string;
+}
+
 type ErrorKind$j = 'Http' | 'Server' | 'ModelNotFound' | 'Validation' | 'Authentication' | 'Authorization' | 'TokenMismatch' | 'BindingResolution' | 'CircularDependency' | 'ContainerNotAvailable';
 /** Every error thrown by the framework implements this. The exception handler switches on `kind`. */
 interface OrielError$j extends Error {
@@ -640,8 +651,9 @@ declare class Container$h implements Container$k {
 }
 
 interface RoutingOptions {
-    web?: string;
-    api?: string;
+    /** One route file or several, loaded in order: web: ['routes/web.ts', 'routes/settings.ts', 'routes/auth.ts']. */
+    web?: string | string[];
+    api?: string | string[];
     console?: string;
     /** A URI such as '/up', not a file. */
     health?: string;
@@ -667,7 +679,7 @@ declare class ApplicationBuilder {
 type LifecycleCallback = (app: Application$b) => void | Promise<void>;
 declare class Application$a extends Container$h implements Application$b {
     private readonly base;
-    readonly version = "0.1.0-alpha.3";
+    readonly version = "0.1.0-alpha.5";
     private readonly providers;
     private readonly bootingCallbacks;
     private readonly bootedCallbacks;
@@ -865,6 +877,11 @@ interface OrielError$i extends Error {
 
 /** Options a job class may declare as public fields. Their presence (or implementing ShouldQueue) makes things queueable. */
 interface ShouldQueue$5 {
+    /**
+     * Marks the class as queued at run time: `implements ShouldQueue` leaves no trace once compiled, so the interface
+     * asks for `readonly shouldQueue = true`. Jobs, listeners, mailables and notifications carrying it are queued.
+     */
+    readonly shouldQueue: true;
     connection?: string;
     queue?: string;
     /** Seconds. */
@@ -1000,7 +1017,8 @@ declare class MailMessage {
     introLines: string[];
     actionData?: MailMessageAction;
     outroLines: string[];
-    salutationLine: string;
+    /** Unset: "Regards," and config('app.name'), as Laravel's template. */
+    salutationLine?: string;
     toAddresses: MailRecipient$1[];
     ccAddresses: MailRecipient$1[];
     bccAddresses: MailRecipient$1[];
@@ -1042,18 +1060,11 @@ declare class MailNotificationChannel implements NotificationChannel {
 }
 
 declare const NOTIFICATIONS_TABLE = "notifications";
-interface DatabaseNotificationRecord {
-    readonly id: string;
-    readonly type: string;
-    readonly data: Record<string, unknown>;
-    readonly createdAt: Date;
-    readonly updatedAt: Date;
-    readAt: Date | undefined;
-    markAsRead(): Promise<void>;
-    markAsUnread(): Promise<void>;
-}
-/** notifiable_type + notifiable_id together, never id alone. */
-declare function fetchNotifications(notifiableType: string, notifiableId: unknown, filter?: 'all' | 'read' | 'unread'): Promise<DatabaseNotificationRecord[]>;
+/**
+ * Laravel's DatabaseChannel: one row in `notifications` per notifiable, with what toDatabase() (or toArray())
+ * returns as JSON. The row is keyed as `user.notifications()` reads it: `notifiable_type` is the model's morph class
+ * (its morph map alias, else its class name) and it goes to the model's own connection.
+ */
 declare class DatabaseNotificationChannel implements NotificationChannel {
     send(notifiable: Notifiable$2, notification: Notification$3): Promise<void>;
 }
@@ -1129,19 +1140,17 @@ declare class SendQueuedNotifications implements Job$5 {
 
 type NotifiableConstructor = new (...args: any[]) => object;
 /**
- * Mirrors Laravel's Illuminate\Notifications\Notifiable trait: `class User extends Notifiable(Model) {}`. Custom
- * routing per channel follows Laravel's own resolution order: a `routeNotificationFor<Channel>()` method (Studly
- * name) wins if present, else 'mail' reads `email`/`getAttribute('email')`, 'database' returns the instance itself
- * (the database channel derives the table row from it directly), and anything else is unrouted (`undefined`).
+ * Laravel's RoutesNotifications trait: `notify()`, `notifyNow()` and `routeNotificationFor()`. Apps use
+ * `Notifiable` from '@orieljs/framework', which adds the database notifications relations. Custom routing per
+ * channel follows Laravel's order: a `routeNotificationFor<Channel>()` method (Studly name) wins if present, else
+ * 'mail' reads `email`/`getAttribute('email')`, 'database' returns the instance itself (the database channel derives
+ * the row from it), and anything else is unrouted (`undefined`).
  */
-declare function Notifiable$1<TBase extends NotifiableConstructor>(Base: TBase): {
+declare function RoutesNotifications<TBase extends NotifiableConstructor>(Base: TBase): {
     new (...args: any[]): {
         routeNotificationFor(channel: string, notification: Notification$3): unknown;
         notify(notification: Notification$3): Promise<void>;
         notifyNow(notification: Notification$3, channels?: string[]): Promise<void>;
-        notifications(): Promise<DatabaseNotificationRecord[]>;
-        unreadNotifications(): Promise<DatabaseNotificationRecord[]>;
-        readNotifications(): Promise<DatabaseNotificationRecord[]>;
     };
 } & TBase;
 
@@ -1385,47 +1394,6 @@ interface Container$e {
 }
 declare const Container$e: Token$e<Container$e>;
 
-interface ServiceProvider$p {
-    /** Bind things into the container. Synchronous. Don't resolve other services here. */
-    register?(): void;
-    /** Runs after every provider is registered. May be async (e.g. importing route files). */
-    boot?(): void | Promise<void>;
-}
-type ServiceProviderClass$7 = new (app: Application$7) => ServiceProvider$p;
-interface Application$7 extends Container$e {
-    readonly version: string;
-    basePath(path?: string): string;
-    appPath(path?: string): string;
-    bootstrapPath(path?: string): string;
-    configPath(path?: string): string;
-    databasePath(path?: string): string;
-    publicPath(path?: string): string;
-    resourcePath(path?: string): string;
-    storagePath(path?: string): string;
-    /** With no args returns the environment name. With args returns whether it matches any of them. */
-    environment(): string;
-    environment(...environments: string[]): boolean;
-    isProduction(): boolean;
-    isLocal(): boolean;
-    runningInConsole(): boolean;
-    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
-    setRunningInConsole(value?: boolean): void;
-    runningUnitTests(): boolean;
-    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
-    register(provider: ServiceProvider$p | ServiceProviderClass$7): Promise<ServiceProvider$p>;
-    getProviders(): ServiceProvider$p[];
-    boot(): Promise<void>;
-    isBooted(): boolean;
-    booting(callback: (app: Application$7) => void | Promise<void>): void;
-    booted(callback: (app: Application$7) => void | Promise<void>): void;
-    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
-    handle(request: Request): Promise<Response>;
-    /** Register a callback that terminate() runs, in registration order. */
-    terminating(callback: () => void | Promise<void>): void;
-    terminate(): Promise<void>;
-}
-declare const Application$7: Token$j<Application$7>;
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session$5 {
     getId(): string;
@@ -1488,6 +1456,8 @@ interface HttpRequest$5 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -1521,6 +1491,47 @@ interface Middleware$5 {
 }
 type MiddlewareClass$1 = new (...args: any[]) => Middleware$5;
 
+interface ServiceProvider$p {
+    /** Bind things into the container. Synchronous. Don't resolve other services here. */
+    register?(): void;
+    /** Runs after every provider is registered. May be async (e.g. importing route files). */
+    boot?(): void | Promise<void>;
+}
+type ServiceProviderClass$7 = new (app: Application$7) => ServiceProvider$p;
+interface Application$7 extends Container$e {
+    readonly version: string;
+    basePath(path?: string): string;
+    appPath(path?: string): string;
+    bootstrapPath(path?: string): string;
+    configPath(path?: string): string;
+    databasePath(path?: string): string;
+    publicPath(path?: string): string;
+    resourcePath(path?: string): string;
+    storagePath(path?: string): string;
+    /** With no args returns the environment name. With args returns whether it matches any of them. */
+    environment(): string;
+    environment(...environments: string[]): boolean;
+    isProduction(): boolean;
+    isLocal(): boolean;
+    runningInConsole(): boolean;
+    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
+    setRunningInConsole(value?: boolean): void;
+    runningUnitTests(): boolean;
+    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
+    register(provider: ServiceProvider$p | ServiceProviderClass$7): Promise<ServiceProvider$p>;
+    getProviders(): ServiceProvider$p[];
+    boot(): Promise<void>;
+    isBooted(): boolean;
+    booting(callback: (app: Application$7) => void | Promise<void>): void;
+    booted(callback: (app: Application$7) => void | Promise<void>): void;
+    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
+    handle(request: Request): Promise<Response>;
+    /** Register a callback that terminate() runs, in registration order. */
+    terminating(callback: () => void | Promise<void>): void;
+    terminate(): Promise<void>;
+}
+declare const Application$7: Token$j<Application$7>;
+
 /** Public method names of a controller (excludes non-function members). */
 type ActionMethods$1<C> = {
     [K in keyof C]: C[K] extends (...args: any[]) => unknown ? K : never;
@@ -1538,7 +1549,7 @@ interface Route$2 {
     readonly uri: string;
     getName(): string | undefined;
     name(name: string): this;
-    middleware(...middleware: MiddlewareReference$1[]): this;
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): this;
     withoutMiddleware(...middleware: MiddlewareReference$1[]): this;
     where(parameter: string, pattern: string): this;
     where(patterns: Record<string, string>): this;
@@ -1546,7 +1557,7 @@ interface Route$2 {
 interface RouteRegistrar$1 {
     prefix(prefix: string): RouteRegistrar$1;
     name(prefix: string): RouteRegistrar$1;
-    middleware(...middleware: MiddlewareReference$1[]): RouteRegistrar$1;
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): RouteRegistrar$1;
     controller(controller: Class$e<unknown>): RouteRegistrar$1;
     group(routes: () => void | Promise<void>): Promise<void>;
 }
@@ -1574,7 +1585,7 @@ interface Router$1 {
     fallback(action: RouteAction$1): Route$2;
     prefix(prefix: string): RouteRegistrar$1;
     name(prefix: string): RouteRegistrar$1;
-    middleware(...middleware: MiddlewareReference$1[]): RouteRegistrar$1;
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): RouteRegistrar$1;
     controller(controller: Class$e<unknown>): RouteRegistrar$1;
     /** Explicit model binding: Route.model('author', User). */
     model(parameter: string, model: Class$e<unknown>): void;
@@ -1601,6 +1612,12 @@ interface UrlGenerator$1 {
     current(): string;
     previous(fallback?: string): string;
     hasRoute(name: string): boolean;
+    /** A URL to a named route with a `signature` query (HMAC-SHA256 keyed by APP_KEY); `expiration` adds `expires`. */
+    signedRoute(name: string, parameters?: unknown, expiration?: Date | number, absolute?: boolean): string;
+    /** signedRoute() that expires: a Date, or seconds from now. */
+    temporarySignedRoute(name: string, expiration: Date | number, parameters?: unknown, absolute?: boolean): string;
+    /** Whether the request URL carries a valid, unexpired signature (`absolute: false` signs the path only). */
+    hasValidSignature(request: HttpRequest$5, absolute?: boolean): boolean;
 }
 declare const UrlGenerator$1: Token$j<UrlGenerator$1>;
 
@@ -1670,7 +1687,8 @@ declare class RouteDefinition implements Route$2 {
     getName(): string | undefined;
     /** Appends, like Laravel's $action['as'] .= $name. */
     name(name: string): this;
-    middleware(...middleware: MiddlewareReference$1[]): this;
+    /** middleware('auth', 'verified') or middleware(['auth', 'verified']). */
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): this;
     withoutMiddleware(...middleware: MiddlewareReference$1[]): this;
     where(parameter: string | Record<string, string>, pattern?: string): this;
     gatherMiddleware(): MiddlewareReference$1[];
@@ -1710,7 +1728,7 @@ declare class GroupRegistrar implements RouteRegistrar$1 {
     constructor(router: GroupHost);
     prefix(prefix: string): this;
     name(prefix: string): this;
-    middleware(...middleware: MiddlewareReference$1[]): this;
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): this;
     controller(controller: Class$e<unknown>): this;
     group(routes: () => void | Promise<void>): Promise<void>;
     get<C>(uri: string, action: ControllerAction$1<C> | RouteClosure$1 | InvokableClass$1 | string): RouteDefinition;
@@ -1760,7 +1778,7 @@ declare class BaseRouter implements Router$1 {
     fallback(action: RouteAction$1): RouteDefinition;
     prefix(prefix: string): GroupRegistrar;
     name(prefix: string): GroupRegistrar;
-    middleware(...middleware: MiddlewareReference$1[]): GroupRegistrar;
+    middleware(...middleware: Array<MiddlewareReference$1 | readonly MiddlewareReference$1[]>): GroupRegistrar;
     controller(controller: Class$e<unknown>): GroupRegistrar;
     /**
      * Laravel's Route::group(attributes, callback). A synchronous callback's attributes are popped before this
@@ -1776,6 +1794,12 @@ declare class BaseRouter implements Router$1 {
     getPatternVersion(): number;
     getBinder(parameter: string): RouteBinder | undefined;
     getModel(parameter: string): Class$e<unknown> | undefined;
+    /**
+     * Binds a matched route's raw parameter values as a request to it would: Route.bind() callbacks, Route.model(),
+     * then implicit binding through the RouteModelResolver of `container`. A missing model throws
+     * RouteModelNotFoundError (404). Live uses it to check a page route's `can:` middleware again on each update.
+     */
+    substituteBindings(route: RouteDefinition, values: Readonly<Record<string, string | undefined>>, container: Container$e): Promise<Record<string, unknown>>;
     aliasMiddleware(name: string, middleware: MiddlewareClass$1): this;
     /** The middleware aliases (Laravel's Router::getMiddleware()). */
     getMiddleware(): Record<string, MiddlewareClass$1>;
@@ -1820,6 +1844,20 @@ declare class BaseUrlGenerator implements UrlGenerator$1 {
     /** The Referer header, then the session's previous URL, then `fallback`, then the root (Laravel's order). */
     previous(fallback?: string): string;
     hasRoute(name: string): boolean;
+    /**
+     * Laravel's URL::signedRoute(): the route URL with its parameters sorted by name, then a `signature` query (the
+     * HMAC-SHA256 of that URL, keyed by APP_KEY). `expiration` (a Date, or seconds from now) adds `expires`.
+     * `absolute: false` signs the path only (checked by `signed:relative`).
+     */
+    signedRoute(name: string, parameters?: unknown, expiration?: Date | number, absolute?: boolean): string;
+    /** Laravel's URL::temporarySignedRoute(): a signed URL that expires at `expiration` (a Date, or seconds from now). */
+    temporarySignedRoute(name: string, expiration: Date | number, parameters?: unknown, absolute?: boolean): string;
+    /** The request URL carries a correct signature (current or previous APP_KEY) that hasn't expired. */
+    hasValidSignature(request: HttpRequest$5, absolute?: boolean): boolean;
+    /** The signature matches the URL without its `signature` query, in a constant-time comparison. */
+    hasCorrectSignature(request: HttpRequest$5, absolute?: boolean): boolean;
+    /** No `expires` query, or one that is still in the future. */
+    signatureHasNotExpired(request: HttpRequest$5): boolean;
 }
 
 /** A middleware reference after alias and group expansion: 'throttle:60,1' → { cls: Throttle, parameters: ['60', '1'] }. */
@@ -1934,6 +1972,21 @@ declare class RoutingError extends Error implements OrielError$g {
     readonly status = 500;
     readonly name = "RoutingError";
 }
+/** A signed URL whose signature is missing, wrong or expired (Laravel's InvalidSignatureException). */
+declare class InvalidUrlSignatureError extends Error implements OrielError$g {
+    readonly kind: "Http";
+    readonly status = 403;
+    readonly name = "InvalidUrlSignatureError";
+    constructor();
+}
+/** Too many requests in the window (Laravel's ThrottleRequestsException): 429 with Retry-After and X-RateLimit-*. */
+declare class ThrottleRequestsError extends Error implements OrielError$g {
+    readonly headers: Record<string, string>;
+    readonly kind: "Http";
+    readonly status = 429;
+    readonly name = "ThrottleRequestsError";
+    constructor(headers?: Record<string, string>);
+}
 
 type ResourceMethod = 'index' | 'create' | 'store' | 'show' | 'edit' | 'update' | 'destroy';
 interface ResourceRoute {
@@ -1957,6 +2010,29 @@ declare function toResponse(request: unknown, value: unknown): Promise<Response>
  */
 declare const Route$1: Facade$a<BaseRouter, object>;
 
+/**
+ * Dispatched by the health route (`/up`) on every request (Laravel's DiagnosingHealth event). A listener checks
+ * something the application needs, such as the database or the cache, and throws when it fails: `/up` then answers
+ * 500 with "Application experiencing problems", and the exception is reported.
+ *
+ *   Event.listen(DiagnosingHealth, async () => { await DB.select('select 1') })
+ */
+declare class DiagnosingHealth {
+}
+interface HealthPage {
+    /** False when a check failed: the page says so and the status is 500 (default true). */
+    healthy?: boolean;
+    /** How long the request took, shown when given. */
+    milliseconds?: number;
+    /** The page title (default "Oriel"). */
+    appName?: string;
+}
+/**
+ * The health route's page (Laravel's health-up view): "Application up", or "Application experiencing problems" with
+ * status 500. Self-contained HTML with inline CSS: it loads nothing, so it answers even when the assets don't.
+ */
+declare function healthResponse(page?: HealthPage): Response;
+
 /** A route file may export a function instead of (or as well as) calling the Route facade at the top level. */
 type RouteFileCallback = (router: Router$1) => void | Promise<void>;
 /**
@@ -1965,15 +2041,15 @@ type RouteFileCallback = (router: Router$1) => void | Promise<void>;
  * A default export that is a function is called with the router.
  */
 declare function loadRoutesFrom(app: Application$7, router: Router$1, file: string): Promise<void>;
-/** The health route's page (Laravel's `/up`): 200 as long as the application boots and handles requests. */
-declare function healthResponse(): Response;
 
 /**
- * Binds the Router and the UrlGenerator, and once the app has booted loads the files given to withRouting(): the health URI,
- * then routes/web.ts in the `web` middleware group, then routes/api.ts under the api prefix in the `api` group
- * (Laravel's ApplicationBuilder::withRouting).
+ * Binds the Router and the UrlGenerator, registers the `signed` and `throttle` middleware, and once the app has booted
+ * loads the files given to withRouting(): the health URI (which dispatches DiagnosingHealth), then the web files in the
+ * `web` middleware group, then the api files under the api prefix in the `api` group (Laravel's
+ * ApplicationBuilder::withRouting).
  */
 declare class RoutingServiceProvider extends ServiceProvider$o {
+    #private;
     register(): void;
     /**
      * The files load in a booted() callback, after every provider's boot() (Laravel's withRouting does the same), so
@@ -1983,6 +2059,25 @@ declare class RoutingServiceProvider extends ServiceProvider$o {
     boot(): void;
 }
 
+/**
+ * Laravel's ThrottleRequests (`throttle:<maxAttempts>,<decayMinutes>[,<prefix>]`): counts the client's requests
+ * (the signed-in user, else the IP) in a window and answers 429 once there are too many. Responses carry
+ * X-RateLimit-Limit and X-RateLimit-Remaining; the 429 adds Retry-After and X-RateLimit-Reset.
+ */
+declare class ThrottleRequests implements Middleware$5 {
+    handle(request: HttpRequest$5, next: Next$6, maxAttempts?: string, decayMinutes?: string, prefix?: string): Promise<Response>;
+    /** The signed-in user's identifier, else the client IP, hashed (Laravel's resolveRequestSignature()). */
+    protected resolveRequestSignature(request: HttpRequest$5): string;
+}
+
+/**
+ * Laravel's ValidateSignature (`signed`, `signed:relative`): the request URL must carry a valid, unexpired
+ * signature from URL.signedRoute()/temporarySignedRoute(), else 403. `relative` checks a path-only signature.
+ */
+declare class ValidateSignature implements Middleware$5 {
+    handle(request: HttpRequest$5, next: Next$6, ...parameters: string[]): Promise<Response>;
+}
+
 /** A typed, runtime-unique key for container bindings. */
 interface Token$d<T> {
     readonly id: symbol;
@@ -2019,78 +2114,6 @@ interface Container$d {
 }
 declare const Container$d: Token$d<Container$d>;
 
-interface ServiceProvider$n {
-    /** Bind things into the container. Synchronous. Don't resolve other services here. */
-    register?(): void;
-    /** Runs after every provider is registered. May be async (e.g. importing route files). */
-    boot?(): void | Promise<void>;
-}
-type ServiceProviderClass$6 = new (app: Application$6) => ServiceProvider$n;
-interface Application$6 extends Container$d {
-    readonly version: string;
-    basePath(path?: string): string;
-    appPath(path?: string): string;
-    bootstrapPath(path?: string): string;
-    configPath(path?: string): string;
-    databasePath(path?: string): string;
-    publicPath(path?: string): string;
-    resourcePath(path?: string): string;
-    storagePath(path?: string): string;
-    /** With no args returns the environment name. With args returns whether it matches any of them. */
-    environment(): string;
-    environment(...environments: string[]): boolean;
-    isProduction(): boolean;
-    isLocal(): boolean;
-    runningInConsole(): boolean;
-    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
-    setRunningInConsole(value?: boolean): void;
-    runningUnitTests(): boolean;
-    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
-    register(provider: ServiceProvider$n | ServiceProviderClass$6): Promise<ServiceProvider$n>;
-    getProviders(): ServiceProvider$n[];
-    boot(): Promise<void>;
-    isBooted(): boolean;
-    booting(callback: (app: Application$6) => void | Promise<void>): void;
-    booted(callback: (app: Application$6) => void | Promise<void>): void;
-    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
-    handle(request: Request): Promise<Response>;
-    /** Register a callback that terminate() runs, in registration order. */
-    terminating(callback: () => void | Promise<void>): void;
-    terminate(): Promise<void>;
-}
-declare const Application$6: Token$j<Application$6>;
-interface ExceptionHandler {
-    report(error: unknown): Promise<void>;
-    shouldReport(error: unknown): boolean;
-    /** `request` is the scoped HttpRequest (Contracts/Http) when available, else the raw Request. */
-    render(request: unknown, error: unknown): Promise<Response>;
-}
-declare const ExceptionHandler: Token$j<ExceptionHandler>;
-/** The object passed to Application.configure().withExceptions(e => …), like Laravel's Exceptions class. */
-interface ExceptionsConfigurator {
-    /** Custom reporting. Return false to stop the default logging. */
-    report(callback: (error: unknown) => void | boolean | Promise<void | boolean>): this;
-    /** Custom rendering. Return undefined to fall through to the default rendering. */
-    render(callback: (error: unknown, request: unknown) => Response | undefined | Promise<Response | undefined>): this;
-    /** Never report errors of these classes. */
-    dontReport(...classes: Array<abstract new (...args: never[]) => Error>): this;
-}
-
-interface ConfigRepository$1 {
-    has(key: string): boolean;
-    /** Dot notation: get('database.connections.sqlite.database'). */
-    get<T = unknown>(key: string, defaultValue?: T): T;
-    set(key: string, value: unknown): void;
-    set(values: Record<string, unknown>): void;
-    push(key: string, value: unknown): void;
-    all(): Record<string, unknown>;
-}
-declare const ConfigRepository$1: Token$j<ConfigRepository$1>;
-/** Anything a controller can return that knows how to become a Response. */
-interface Responsable$1 {
-    toResponse(request: unknown): Response | Promise<Response>;
-}
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session$4 {
     getId(): string;
@@ -2157,6 +2180,8 @@ interface HttpRequest$4 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -2224,6 +2249,80 @@ interface ResponseFactory$1 {
 }
 declare const ResponseFactory$1: Token$j<ResponseFactory$1>;
 
+interface ServiceProvider$n {
+    /** Bind things into the container. Synchronous. Don't resolve other services here. */
+    register?(): void;
+    /** Runs after every provider is registered. May be async (e.g. importing route files). */
+    boot?(): void | Promise<void>;
+}
+type ServiceProviderClass$6 = new (app: Application$6) => ServiceProvider$n;
+interface Application$6 extends Container$d {
+    readonly version: string;
+    basePath(path?: string): string;
+    appPath(path?: string): string;
+    bootstrapPath(path?: string): string;
+    configPath(path?: string): string;
+    databasePath(path?: string): string;
+    publicPath(path?: string): string;
+    resourcePath(path?: string): string;
+    storagePath(path?: string): string;
+    /** With no args returns the environment name. With args returns whether it matches any of them. */
+    environment(): string;
+    environment(...environments: string[]): boolean;
+    isProduction(): boolean;
+    isLocal(): boolean;
+    runningInConsole(): boolean;
+    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
+    setRunningInConsole(value?: boolean): void;
+    runningUnitTests(): boolean;
+    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
+    register(provider: ServiceProvider$n | ServiceProviderClass$6): Promise<ServiceProvider$n>;
+    getProviders(): ServiceProvider$n[];
+    boot(): Promise<void>;
+    isBooted(): boolean;
+    booting(callback: (app: Application$6) => void | Promise<void>): void;
+    booted(callback: (app: Application$6) => void | Promise<void>): void;
+    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
+    handle(request: Request): Promise<Response>;
+    /** Register a callback that terminate() runs, in registration order. */
+    terminating(callback: () => void | Promise<void>): void;
+    terminate(): Promise<void>;
+}
+declare const Application$6: Token$j<Application$6>;
+interface ExceptionHandler {
+    report(error: unknown): Promise<void>;
+    shouldReport(error: unknown): boolean;
+    /** `request` is the scoped HttpRequest (Contracts/Http) when available, else the raw Request. */
+    render(request: unknown, error: unknown): Promise<Response>;
+}
+declare const ExceptionHandler: Token$j<ExceptionHandler>;
+/** The object passed to Application.configure().withExceptions(e => …), like Laravel's Exceptions class. */
+interface ExceptionsConfigurator {
+    /** Custom reporting. Return false to stop the default logging. */
+    report(callback: (error: unknown) => void | boolean | Promise<void | boolean>): this;
+    /** Custom rendering. Return undefined to fall through to the default rendering. */
+    render(callback: (error: unknown, request: unknown) => Response | undefined | Promise<Response | undefined>): this;
+    /** Never report errors of these classes. */
+    dontReport(...classes: Array<abstract new (...args: never[]) => Error>): this;
+    /** Render errors as JSON when the callback returns true, whatever the Accept header. */
+    shouldRenderJsonWhen(callback: (request: HttpRequest$4, error: unknown) => boolean): this;
+}
+
+interface ConfigRepository$1 {
+    has(key: string): boolean;
+    /** Dot notation: get('database.connections.sqlite.database'). */
+    get<T = unknown>(key: string, defaultValue?: T): T;
+    set(key: string, value: unknown): void;
+    set(values: Record<string, unknown>): void;
+    push(key: string, value: unknown): void;
+    all(): Record<string, unknown>;
+}
+declare const ConfigRepository$1: Token$j<ConfigRepository$1>;
+/** Anything a controller can return that knows how to become a Response. */
+interface Responsable$1 {
+    toResponse(request: unknown): Response | Promise<Response>;
+}
+
 /** Public method names of a controller (excludes non-function members). */
 type ActionMethods<C> = {
     [K in keyof C]: C[K] extends (...args: any[]) => unknown ? K : never;
@@ -2241,7 +2340,7 @@ interface Route {
     readonly uri: string;
     getName(): string | undefined;
     name(name: string): this;
-    middleware(...middleware: MiddlewareReference[]): this;
+    middleware(...middleware: Array<MiddlewareReference | readonly MiddlewareReference[]>): this;
     withoutMiddleware(...middleware: MiddlewareReference[]): this;
     where(parameter: string, pattern: string): this;
     where(patterns: Record<string, string>): this;
@@ -2249,7 +2348,7 @@ interface Route {
 interface RouteRegistrar {
     prefix(prefix: string): RouteRegistrar;
     name(prefix: string): RouteRegistrar;
-    middleware(...middleware: MiddlewareReference[]): RouteRegistrar;
+    middleware(...middleware: Array<MiddlewareReference | readonly MiddlewareReference[]>): RouteRegistrar;
     controller(controller: Class$d<unknown>): RouteRegistrar;
     group(routes: () => void | Promise<void>): Promise<void>;
 }
@@ -2277,7 +2376,7 @@ interface Router {
     fallback(action: RouteAction): Route;
     prefix(prefix: string): RouteRegistrar;
     name(prefix: string): RouteRegistrar;
-    middleware(...middleware: MiddlewareReference[]): RouteRegistrar;
+    middleware(...middleware: Array<MiddlewareReference | readonly MiddlewareReference[]>): RouteRegistrar;
     controller(controller: Class$d<unknown>): RouteRegistrar;
     /** Explicit model binding: Route.model('author', User). */
     model(parameter: string, model: Class$d<unknown>): void;
@@ -2313,6 +2412,12 @@ interface UrlGenerator {
     current(): string;
     previous(fallback?: string): string;
     hasRoute(name: string): boolean;
+    /** A URL to a named route with a `signature` query (HMAC-SHA256 keyed by APP_KEY); `expiration` adds `expires`. */
+    signedRoute(name: string, parameters?: unknown, expiration?: Date | number, absolute?: boolean): string;
+    /** signedRoute() that expires: a Date, or seconds from now. */
+    temporarySignedRoute(name: string, expiration: Date | number, parameters?: unknown, absolute?: boolean): string;
+    /** Whether the request URL carries a valid, unexpired signature (`absolute: false` signs the path only). */
+    hasValidSignature(request: HttpRequest$4, absolute?: boolean): boolean;
 }
 declare const UrlGenerator: Token$j<UrlGenerator>;
 interface RedirectResponse$1 extends Responsable$1 {
@@ -2413,6 +2518,70 @@ declare abstract class ServiceProvider$m implements ServiceProvider$u {
     protected mergeConfigFrom(defaults: Record<string, unknown>, key: string): void;
 }
 
+/**
+ * What a file's bytes show it to be, read from its leading bytes the way PHP's finfo reads them for Laravel (the file
+ * validation rules, and the extension a stored upload gets). The client's file name and MIME type are never consulted.
+ */
+interface DetectedType {
+    /** 'image/png', 'text/plain', …; 'application/octet-stream' when no format matches, 'application/x-empty' for no bytes. */
+    readonly mime: string;
+    /** The extensions that name the type, the usual one first. Empty when the bytes match no format. */
+    readonly extensions: readonly string[];
+}
+declare const JPEG: DetectedType;
+declare const PNG: DetectedType;
+declare const GIF: DetectedType;
+declare const WEBP: DetectedType;
+declare const AVIF: DetectedType;
+declare const BMP: DetectedType;
+declare const SVG: DetectedType;
+declare const PDF: DetectedType;
+declare const HTML: DetectedType;
+declare const XML: DetectedType;
+declare const TEXT: DetectedType;
+declare const UNKNOWN: DetectedType;
+declare const EMPTY: DetectedType;
+/** The raster formats the image rule accepts: Laravel 12's jpg, jpeg, png, gif, bmp and webp, plus AVIF. */
+declare const RASTER_IMAGES: ReadonlySet<string>;
+/** Every format recognised by its bytes other than plain text. */
+declare const BINARY_AND_MARKUP_TYPES: readonly DetectedType[];
+/**
+ * How much of a file is read to tell its type: the window checked for binary bytes (libmagic reads its first megabyte
+ * too). Uploads read this much to be named, so naming and validation see the same bytes.
+ */
+declare const SNIFF_BYTES: number;
+/** The type the bytes show. */
+declare function detectFileType(bytes: Uint8Array): DetectedType;
+
+declare const fileType_AVIF: typeof AVIF;
+declare const fileType_BINARY_AND_MARKUP_TYPES: typeof BINARY_AND_MARKUP_TYPES;
+declare const fileType_BMP: typeof BMP;
+type fileType_DetectedType = DetectedType;
+declare const fileType_EMPTY: typeof EMPTY;
+declare const fileType_GIF: typeof GIF;
+declare const fileType_HTML: typeof HTML;
+declare const fileType_JPEG: typeof JPEG;
+declare const fileType_PDF: typeof PDF;
+declare const fileType_PNG: typeof PNG;
+declare const fileType_RASTER_IMAGES: typeof RASTER_IMAGES;
+declare const fileType_SNIFF_BYTES: typeof SNIFF_BYTES;
+declare const fileType_SVG: typeof SVG;
+declare const fileType_TEXT: typeof TEXT;
+declare const fileType_UNKNOWN: typeof UNKNOWN;
+declare const fileType_WEBP: typeof WEBP;
+declare const fileType_XML: typeof XML;
+declare const fileType_detectFileType: typeof detectFileType;
+declare namespace fileType {
+  export { fileType_AVIF as AVIF, fileType_BINARY_AND_MARKUP_TYPES as BINARY_AND_MARKUP_TYPES, fileType_BMP as BMP, type fileType_DetectedType as DetectedType, fileType_EMPTY as EMPTY, fileType_GIF as GIF, fileType_HTML as HTML, fileType_JPEG as JPEG, fileType_PDF as PDF, fileType_PNG as PNG, fileType_RASTER_IMAGES as RASTER_IMAGES, fileType_SNIFF_BYTES as SNIFF_BYTES, fileType_SVG as SVG, fileType_TEXT as TEXT, fileType_UNKNOWN as UNKNOWN, fileType_WEBP as WEBP, fileType_XML as XML, fileType_detectFileType as detectFileType };
+}
+
+/**
+ * Whether a JSON text nests objects and arrays deeper than `maxDepth`, found by scanning (no parsing, no recursion):
+ * brackets inside strings don't count. The kernel answers 400 for such bodies (http.max_json_depth) before the
+ * recursive input handling (sanitizing, TrimStrings, validation) could overflow the stack.
+ */
+declare function exceedsJsonDepth(text: string, maxDepth: number): boolean;
+
 /** The current container, only when it is a request scope (the kernel binds HttpRequest there). */
 declare function requestScope(): Container$d | undefined;
 declare function currentRequest(): HttpRequest$4 | undefined;
@@ -2454,7 +2623,10 @@ declare class HttpRedirector implements Redirector {
     /** Pulls url.intended from the session (put there by guest()), else goes to `fallback`. */
     intended(fallback?: string, status?: number): HttpRedirectResponse;
     away(url: string, status?: number): HttpRedirectResponse;
-    /** Remembers where a guest was going (a GET page, else the previous URL), then redirects to `path`. */
+    /**
+     * Remembers where a guest was going (a GET page, else the previous URL), then redirects to `path`. Only the path
+     * is stored, so intended() goes back on whichever host serves the app, and never to another site's Referer.
+     */
     guest(path: string, status?: number): HttpRedirectResponse;
     setIntendedUrl(url: string): void;
     refresh(status?: number): HttpRedirectResponse;
@@ -2466,13 +2638,26 @@ declare function clientAddress(request: Request): string | undefined;
 /** An uploaded file from a multipart body. store()/storeAs() go through the FilesystemManager. */
 declare class FormUploadedFile implements UploadedFile$5 {
     private readonly file;
+    private readonly detected?;
     readonly clientName: string;
     readonly mimeType: string;
     readonly size: number;
+    /**
+     * Reads the leading bytes first, so extension(), hashName() and store() name the file by its content. The request
+     * builds its uploads this way.
+     */
+    static fromFile(file: Blob & {
+        readonly name?: string;
+    }): Promise<FormUploadedFile>;
     constructor(file: Blob & {
         readonly name?: string;
-    });
-    /** Guessed from the MIME type, falling back to the client's extension (Laravel's extension()). */
+    }, detected?: fileType.DetectedType | undefined);
+    /**
+     * Laravel's extension(): the type the bytes show (guessExtension()), when they were read and match a known format.
+     * Text and bytes no format matches keep the client's claim (its MIME type, else its file name) when it is a plain
+     * extension, unless it names a format the bytes would have shown or one a browser renders or runs: otherwise 'txt'
+     * for text, '' for the rest. Unread (built directly), the client's claim when it is a plain extension, else ''.
+     */
     extension(): string;
     clientExtension(): string;
     /** A random 40-character name with the guessed extension. */
@@ -2489,6 +2674,8 @@ interface IncomingRequestOptions {
     trustedProxies?: readonly string[];
     /** Largest request body in bytes before a 413 (config http.max_body_size); null is unlimited. Default 8 MB. */
     maxBodySize?: number | null;
+    /** Deepest nesting of objects and arrays in a JSON body before a 400 (config http.max_json_depth); null is unlimited. Default 512. */
+    maxJsonDepth?: number | null;
 }
 /** Exact match, IPv4 CIDR ('10.0.0.0/8') or '*'. */
 declare function ipMatches(ip: string, patterns: readonly string[]): boolean;
@@ -2721,6 +2908,7 @@ declare function applyMiddlewareCallbacks(app: Application$6, kernel: Kernel$1):
 type ReportCallback = (error: unknown) => void | boolean | Promise<void | boolean>;
 type RenderCallback = (error: unknown, request: unknown) => Response | undefined | Promise<Response | undefined>;
 type ErrorClass = abstract new (...args: never[]) => Error;
+type JsonWhenCallback = (request: HttpRequest$4, error: unknown) => boolean;
 /** HTTP status for an error (spec §7). */
 declare function statusFor(error: unknown): number;
 /** "The title field is required. (and 2 more errors)" (Laravel's ValidationException::summarize). */
@@ -2735,6 +2923,10 @@ declare class ErrorHandler implements ExceptionHandler {
     reportUsing(callback: ReportCallback): void;
     renderUsing(callback: RenderCallback): void;
     ignore(...classes: ErrorClass[]): void;
+    /** Laravel's shouldRenderJsonWhen(): the callback decides JSON or HTML instead of the Accept header. */
+    shouldRenderJsonWhen(callback: JsonWhenCallback): void;
+    /** Laravel's shouldReturnJson(): the shouldRenderJsonWhen() callback when set, else request.expectsJson(). */
+    protected shouldReturnJson(request: HttpRequest$4, error: unknown): boolean;
     shouldReport(error: unknown): boolean;
     /** Report callbacks first (returning false stops the default log), then LogManager.error(), else console.error. Once per error. */
     report(error: unknown): Promise<void>;
@@ -2748,6 +2940,8 @@ declare class ExceptionsConfiguration implements ExceptionsConfigurator {
     report(callback: ReportCallback): this;
     render(callback: RenderCallback): this;
     dontReport(...classes: ErrorClass[]): this;
+    /** shouldRenderJsonWhen((request) => request.is('api/*')): JSON errors for those requests, whatever they accept. */
+    shouldRenderJsonWhen(callback: (request: HttpRequest$4, error: unknown) => boolean): this;
 }
 /** Runs the withExceptions() callbacks against a handler (the provider does this when the handler is built). */
 declare function applyExceptionCallbacks(app: Application$6, handler: ErrorHandler): void;
@@ -3001,6 +3195,11 @@ interface OrielError$e extends Error {
 
 /** Options a job class may declare as public fields. Their presence (or implementing ShouldQueue) makes things queueable. */
 interface ShouldQueue$4 {
+    /**
+     * Marks the class as queued at run time: `implements ShouldQueue` leaves no trace once compiled, so the interface
+     * asks for `readonly shouldQueue = true`. Jobs, listeners, mailables and notifications carrying it are queued.
+     */
+    readonly shouldQueue: true;
     connection?: string;
     queue?: string;
     /** Seconds. */
@@ -3856,6 +4055,8 @@ interface ModelInstance$2 {
     getTable(): string;
     getRouteKey(): unknown;
     getRouteKeyName(): string;
+    /** The value stored in a polymorphic `*_type` column for this model: its morph map alias, else its class name. */
+    getMorphClass(): string;
     getAttribute<T = unknown>(key: string): T;
     setAttribute(key: string, value: unknown): this;
     fill(attributes: Row$4): this;
@@ -3908,6 +4109,28 @@ interface ConsoleKernel$3 {
     command(signature: string, handler: (this: CommandContext$3, ...args: unknown[]) => number | void | Promise<number | void>): ClosureCommand$3;
 }
 declare const ConsoleKernel$3: Token$j<ConsoleKernel$3>;
+/**
+ * A stored database notification (Laravel's DatabaseNotification model): one row of the `notifications` table, with
+ * its snake_case columns. `user.notifications()`, `unreadNotifications()` and `readNotifications()` query these,
+ * newest first.
+ */
+interface DatabaseNotification$1 extends ModelInstance$2 {
+    /** A UUID. */
+    readonly id: string;
+    /** The notification's class name. */
+    readonly type: string;
+    /** What the notification's toDatabase() (or toArray()) returned. */
+    readonly data: Record<string, unknown>;
+    read_at: Date | null;
+    readonly created_at: Date | null;
+    readonly updated_at: Date | null;
+    /** Sets read_at to now and saves, unless it is already read. */
+    markAsRead(): Promise<void>;
+    /** Clears read_at and saves, unless it is already unread. */
+    markAsUnread(): Promise<void>;
+    read(): boolean;
+    unread(): boolean;
+}
 
 type Operator$4 = '=' | '==' | '===' | '!=' | '!==' | '<>' | '<' | '<=' | '>' | '>=';
 
@@ -4673,7 +4896,10 @@ declare class LengthAwarePaginator<T> extends AbstractPaginator<T> {
     hasMorePages(): boolean;
     onLastPage(): boolean;
     nextPageUrl(): string | null;
-    /** The page links Laravel renders: previous, the page window with '...' gaps, next. */
+    /**
+     * The page links Laravel renders: previous, the page window with '...' gaps, next. The labels are plain text
+     * ("« Previous", "Next »"), not Laravel's `&laquo;` entities, so a page can print them as text.
+     */
     linkCollection(): PaginationLink[];
     /** Laravel's UrlWindow: the first pages, the slider around the current page and the last pages, with '...' between. */
     protected elements(): Array<UrlRange | '...'>;
@@ -4720,6 +4946,13 @@ declare class Grammar {
     compileOrders(query: Builder$1<unknown>): Sql | undefined;
     compileWheres(wheres: readonly Where[], keyword?: 'where' | 'on'): Sql | undefined;
     compileWhere(where: Where): Sql;
+    /**
+     * whereLike() per driver, as Laravel 12's grammars: Postgres compares the column as text with ilike (like when
+     * case-sensitive); MySQL uses like (like binary); SQLite uses like, or glob with the pattern translated.
+     */
+    compileWhereLike(where: Extract<Where, {
+        type: 'like';
+    }>): Sql;
     compileJoin(joinClause: JoinClause): Sql;
     compileHavings(havings: readonly Having[]): Sql | undefined;
     compileLimitOffset(limit: number | undefined, offset: number | undefined): Sql | undefined;
@@ -4767,6 +5000,13 @@ type Where = {
     values: readonly [unknown, unknown];
     not: boolean;
     boolean: WhereBoolean;
+} | {
+    type: 'like';
+    column: ColumnRef;
+    value: string;
+    caseSensitive: boolean;
+    not: boolean;
+    boolean: WhereBoolean;
 } | {
     type: 'column';
     first: ColumnRef;
@@ -4809,6 +5049,8 @@ type SelectColumn = ColumnRef | {
     as: string;
 };
 type NestedCallback<Q> = (query: Q) => unknown;
+/** The value when()'s callback receives: the condition's type without its falsy members. */
+type Truthy<V> = Exclude<V, false | 0 | 0n | '' | null | undefined>;
 /** The key a selected column comes back under: 'users.name' → 'name', 'name as n' → 'n'. */
 declare function columnKey(column: string): string;
 /**
@@ -4859,6 +5101,16 @@ declare class Builder$1<T = Row$4> implements QueryBuilder$4<T> {
     whereBetween(column: ColumnRef, values: readonly [unknown, unknown]): this;
     orWhereBetween(column: ColumnRef, values: readonly [unknown, unknown]): this;
     whereNotBetween(column: ColumnRef, values: readonly [unknown, unknown]): this;
+    /**
+     * Laravel's whereLike(): the value is the pattern, `%` and `_` included (`whereLike('title', `%${term}%`)`).
+     * Case-insensitive unless caseSensitive: ilike on Postgres, like on MySQL and SQLite (their like already ignores
+     * case: MySQL through the column's collation, SQLite for ASCII letters). Case-sensitive is like on Postgres,
+     * like binary on MySQL and glob on SQLite.
+     */
+    whereLike(column: ColumnRef, value: string, caseSensitive?: boolean, boolean?: WhereBoolean, not?: boolean): this;
+    orWhereLike(column: ColumnRef, value: string, caseSensitive?: boolean): this;
+    whereNotLike(column: ColumnRef, value: string, caseSensitive?: boolean, boolean?: WhereBoolean): this;
+    orWhereNotLike(column: ColumnRef, value: string, caseSensitive?: boolean): this;
     /** Compares two columns: whereColumn('updated_at', '>', 'created_at'). */
     whereColumn(first: ColumnRef, operatorOrSecond: string, second?: ColumnRef, boolean?: WhereBoolean): this;
     orWhereColumn(first: ColumnRef, operatorOrSecond: string, second?: ColumnRef): this;
@@ -4893,8 +5145,20 @@ declare class Builder$1<T = Row$4> implements QueryBuilder$4<T> {
     forPage(page: number, perPage?: number): this;
     lockForUpdate(): this;
     sharedLock(): this;
-    /** Calls callback(this, value) when value is truthy (or the default callback otherwise). */
-    when<V>(value: V, callback: (query: this, value: V) => unknown, otherwise?: (query: this, value: V) => unknown): this;
+    /**
+     * Laravel's when(): callback(query, value) runs when the value is truthy, otherwise(query, value) when it is falsy.
+     * A function value is called with the query first and its result is the value. Truthiness is JavaScript's, so `'0'`
+     * and `[]` are truthy: a `?active=0` filter applies, where Laravel would skip it. Returns the query; what the
+     * callbacks return is ignored.
+     *
+     * @example
+     * Post.query().when(request.query('q'), (query, q) => query.whereLike('title', `%${q}%`))
+     */
+    when<V>(value: (query: this) => V, callback: (query: this, value: Truthy<V>) => unknown, otherwise?: (query: this, value: V) => unknown): this;
+    when<V>(value: V, callback: (query: this, value: Truthy<V>) => unknown, otherwise?: (query: this, value: V) => unknown): this;
+    /** Laravel's unless(): when() with the condition reversed. callback(query, value) runs when the value is falsy. */
+    unless<V>(value: (query: this) => V, callback: (query: this, value: V) => unknown, otherwise?: (query: this, value: Truthy<V>) => unknown): this;
+    unless<V>(value: V, callback: (query: this, value: V) => unknown, otherwise?: (query: this, value: Truthy<V>) => unknown): this;
     tap(callback: (query: this) => unknown): this;
     get(): Promise<Collection<T>>;
     /** The raw rows, without a Collection around them. */
@@ -5215,6 +5479,10 @@ declare class Builder<M extends Model = Model> extends Builder$1<M> {
     whereNull(columns: Column<M> | Expression | Array<Column<M> | Expression>): this;
     whereNotNull(columns: Column<M> | Expression | Array<Column<M> | Expression>): this;
     whereBetween(column: Column<M> | Expression, values: readonly [unknown, unknown]): this;
+    whereLike(column: Column<M> | Expression, value: string, caseSensitive?: boolean, boolean?: WhereBoolean, not?: boolean): this;
+    orWhereLike(column: Column<M> | Expression, value: string, caseSensitive?: boolean): this;
+    whereNotLike(column: Column<M> | Expression, value: string, caseSensitive?: boolean, boolean?: WhereBoolean): this;
+    orWhereNotLike(column: Column<M> | Expression, value: string, caseSensitive?: boolean): this;
     orderBy(column: Column<M> | Expression, direction?: Direction | Uppercase<Direction>): this;
     /** Newest first by the model's created_at column (or the given one). */
     latest(column?: Column<M> | Expression): this;
@@ -5358,6 +5626,15 @@ interface StateContext {
 }
 type State = Row$4 | ((attributes: Row$4, context: StateContext) => Row$4);
 type AnyFactory = Factory$b<any>;
+/**
+ * A model's factory() typed as its own factory class (Laravel's `@use HasFactory<UserFactory>`): declare it in the
+ * model, `declare static factory: HasFactory<UserFactory>` (with `import type`), and User.factory().unverified()
+ * type-checks. The factory is still found at run time by name (database/factories/UserFactory.ts).
+ */
+type HasFactory<F> = {
+    (): F;
+    (count: number, state?: State): F & Many;
+} & (typeof Model)['factory'];
 interface HasRelationship {
     factory: AnyFactory;
     relationship: string;
@@ -5791,12 +6068,21 @@ declare class Model implements ModelInstance$2 {
     /** A new query of this model, with its global scopes. */
     static query<C extends typeof Model>(this: C): ModelBuilder<C>;
     static where<C extends typeof Model>(this: C, ...args: WhereArgs<Instance<C>, ModelBuilder<C>>): ModelBuilder<C>;
+    /** Post.when(request.query('q'), (query, q) => query.whereLike('title', `%${q}%`)): a new query, then when(). */
+    static when<C extends typeof Model, V>(this: C, value: (query: ModelBuilder<C>) => V, callback: (query: ModelBuilder<C>, value: Truthy<V>) => unknown, otherwise?: (query: ModelBuilder<C>, value: V) => unknown): ModelBuilder<C>;
+    static when<C extends typeof Model, V>(this: C, value: V, callback: (query: ModelBuilder<C>, value: Truthy<V>) => unknown, otherwise?: (query: ModelBuilder<C>, value: V) => unknown): ModelBuilder<C>;
+    /** A new query, then unless(): the callback runs when the value is falsy. */
+    static unless<C extends typeof Model, V>(this: C, value: (query: ModelBuilder<C>) => V, callback: (query: ModelBuilder<C>, value: V) => unknown, otherwise?: (query: ModelBuilder<C>, value: Truthy<V>) => unknown): ModelBuilder<C>;
+    static unless<C extends typeof Model, V>(this: C, value: V, callback: (query: ModelBuilder<C>, value: V) => unknown, otherwise?: (query: ModelBuilder<C>, value: Truthy<V>) => unknown): ModelBuilder<C>;
     static whereKey<C extends typeof Model>(this: C, id: unknown): ModelBuilder<C>;
     static whereIn<C extends typeof Model>(this: C, column: Column<Instance<C>> | Expression, values: readonly unknown[]): ModelBuilder<C>;
     static whereNotIn<C extends typeof Model>(this: C, column: Column<Instance<C>> | Expression, values: readonly unknown[]): ModelBuilder<C>;
     static whereNull<C extends typeof Model>(this: C, column: Column<Instance<C>> | Expression): ModelBuilder<C>;
     static whereNotNull<C extends typeof Model>(this: C, column: Column<Instance<C>> | Expression): ModelBuilder<C>;
     static whereBetween<C extends typeof Model>(this: C, column: Column<Instance<C>> | Expression, values: readonly [unknown, unknown]): ModelBuilder<C>;
+    /** Post.whereLike('title', `%${term}%`): case-insensitive unless caseSensitive (see the query builder's whereLike()). */
+    static whereLike<C extends typeof Model>(this: C, column: Column<Instance<C>> | Expression, value: string, caseSensitive?: boolean): ModelBuilder<C>;
+    static whereNotLike<C extends typeof Model>(this: C, column: Column<Instance<C>> | Expression, value: string, caseSensitive?: boolean): ModelBuilder<C>;
     static whereColumn<C extends typeof Model>(this: C, first: Column<Instance<C>>, operatorOrSecond: string, second?: Column<Instance<C>>): ModelBuilder<C>;
     static whereRaw<C extends typeof Model>(this: C, sql: string, bindings?: readonly unknown[]): ModelBuilder<C>;
     static select<C extends typeof Model>(this: C, ...columns: Array<Column<Instance<C>> | Expression>): ModelBuilder<C>;
@@ -6109,6 +6395,82 @@ declare class Pivot extends Model {
     timestamps: boolean;
 }
 
+/**
+ * Laravel's DatabaseNotification: one row of the `notifications` table, which the database channel writes. A UUID
+ * string key, `data` as an array cast and `read_at` as a datetime. `user.notifications()` returns these, newest first.
+ */
+declare class DatabaseNotification extends Model implements DatabaseNotification$1 {
+    protected table: string | undefined;
+    protected keyType: 'int' | 'string';
+    incrementing: boolean;
+    protected guarded: string[];
+    protected casts: Readonly<Record<string, CastDefinition>>;
+    $attributes?: {
+        id: string;
+        type: string;
+        notifiable_type: string;
+        notifiable_id: number | string;
+        data: Record<string, unknown>;
+        read_at: Date | null;
+        created_at: Date | null;
+        updated_at: Date | null;
+    };
+    readonly id: string;
+    readonly type: string;
+    readonly notifiable_type: string;
+    readonly notifiable_id: number | string;
+    readonly data: Record<string, unknown>;
+    read_at: Date | null;
+    readonly created_at: Date | null;
+    readonly updated_at: Date | null;
+    /** The model the notification was sent to. */
+    notifiable<R extends Model = Model>(): MorphTo<R, this>;
+    /** Sets read_at to now and saves, unless it is already read. */
+    markAsRead(): Promise<void>;
+    /** Clears read_at and saves, unless it is already unread. */
+    markAsUnread(): Promise<void>;
+    read(): boolean;
+    unread(): boolean;
+    /** `query.read()`: only read notifications. */
+    static scopeRead(query: Builder<DatabaseNotification>): Builder<DatabaseNotification>;
+    /** `query.unread()`: only unread notifications. */
+    static scopeUnread(query: Builder<DatabaseNotification>): Builder<DatabaseNotification>;
+}
+/** Laravel's DatabaseNotificationCollection: what `await user.notifications().get()` returns. */
+declare class DatabaseNotificationCollection extends Collection<DatabaseNotification> {
+    /** Marks every notification as read (one save each, as in Laravel). */
+    markAsRead(): Promise<void>;
+    /** Marks every notification as unread. */
+    markAsUnread(): Promise<void>;
+}
+/**
+ * The relation `notifications()`, `readNotifications()` and `unreadNotifications()` return: a morphMany over
+ * DatabaseNotification whose results (get(), the loaded relation, eager loads) are DatabaseNotificationCollections.
+ * Every builder method works on it: paginate(), count(), update({ read_at }), where(), …
+ */
+declare class DatabaseNotificationsRelation<P extends Model = Model> extends MorphMany<DatabaseNotification, P> {
+    get(): Promise<DatabaseNotificationCollection>;
+    getResults(): Promise<DatabaseNotificationCollection>;
+    initRelation(models: P[], relation: string): P[];
+    match(models: P[], results: DatabaseNotification[], relation: string): P[];
+}
+
+type ModelConstructor = new (...args: any[]) => Model;
+/** What HasDatabaseNotifications adds to a model. */
+interface HasDatabaseNotificationsModel extends Model {
+    /** The model's notifications, newest first: morphMany(DatabaseNotification, 'notifiable').latest(). */
+    notifications(): DatabaseNotificationsRelation<this>;
+    /** The read ones (read_at set). */
+    readNotifications(): DatabaseNotificationsRelation<this>;
+    /** The unread ones (read_at null). */
+    unreadNotifications(): DatabaseNotificationsRelation<this>;
+}
+/**
+ * Laravel's HasDatabaseNotifications: the notifications the database channel stored for this model, as queries.
+ * `class User extends HasDatabaseNotifications(Model) {}`; apps get it through `Notifiable`.
+ */
+declare function HasDatabaseNotifications<TBase extends ModelConstructor>(Base: TBase): TBase & (new (...args: any[]) => HasDatabaseNotificationsModel);
+
 /**
  * The morph map: the value stored in `*_type` columns for each model class (Laravel's Relation::morphMap()).
  * Without an entry the class name is stored ('Post'). Returns the current map.
@@ -6426,7 +6788,11 @@ declare class RouteModelResolverImpl implements RouteModelResolver {
 
 /** Laravel 11's config/database.php defaults (the app's config/database.ts wins, key by key). */
 declare function databaseConfigDefaults(app: Pick<Application$4, 'databasePath'>): DatabaseConfig & Record<string, unknown>;
-/** Points the paginators at the current request: ?page=, ?cursor=, the URL and the query string (Laravel's resolvers). */
+/**
+ * Points the paginators at the current request: ?page=, ?cursor=, the URL and the query string (Laravel's resolvers).
+ * A bound PaginationState is asked first for the page and the path (Livewire's WithPagination replaces Laravel's
+ * resolvers the same way); what it leaves undefined comes from the request.
+ */
 declare function usePaginationResolvers(): void;
 /**
  * Binds the database layer: the DatabaseManager (a root singleton owning the pools) behind the DB facade, the
@@ -6514,6 +6880,16 @@ declare class ValidationErrorImpl extends Error implements ValidationError {
     readonly name = "ValidationError";
     constructor(errors: Record<string, string[]>, errorBag?: string, redirectTo?: string | undefined);
 }
+/**
+ * Laravel's ValidationException, for failing a request by hand:
+ * `throw ValidationException.withMessages({ email: __('auth.failed') })`. Rendered like any validation error: 422 JSON,
+ * or a redirect back with the errors.
+ */
+declare class ValidationException extends ValidationErrorImpl {
+    /** Messages per field, each a string or a list. */
+    static withMessages(messages: Record<string, string | readonly string[]>): ValidationException;
+    constructor(errors: Record<string, string[]>, errorBag?: string, redirectTo?: string);
+}
 declare class AuthorizationErrorImpl extends Error implements OrielError$c {
     readonly kind: "Authorization";
     readonly status = 403;
@@ -6592,6 +6968,8 @@ interface BuiltinRule {
     replacements?(ctx: RuleContext): Record<string, string>;
     /** Used when messageKey() isn't in DEFAULT_MESSAGES (e.g. an extend()ed rule with a custom message). */
     defaultMessage?: string;
+    /** An extend()ed rule's own message: it wins over the default lines, as Laravel's fallback messages do. */
+    message?: string;
     /** Runs even when the value is missing, blank, or null under nullable (the required* family, and accepted); a failure stops the field. */
     implicit?: boolean;
 }
@@ -6626,6 +7004,36 @@ declare function expandWildcardKeys(pattern: string, data: Record<string, unknow
 /** Every built-in rule, merged. Later tasks (database rules) add their own spread here. */
 declare const builtinRules: Record<string, BuiltinRule>;
 
+/**
+ * Laravel's Illuminate\Validation\Rules\Password: a string of at least `min` characters (8 by default), plus the
+ * checks you add: letters(), mixedCase(), numbers(), symbols(), max(). Every failing check adds its own message.
+ * Rule.password() returns the application default (PasswordRule.defaults()). (Laravel's uncompromised() is not
+ * ported: it calls an outside service.)
+ */
+declare class PasswordRule implements ValidationRule$4 {
+    #private;
+    constructor(min?: number);
+    /** A password rule of at least `size` characters: PasswordRule.min(12).mixedCase(). */
+    static min(size: number): PasswordRule;
+    /**
+     * With an argument, sets the default (Laravel's Password::defaults(fn () => ...), in a provider's boot());
+     * `null` resets it. Without one, returns a copy of the default: PasswordRule.min(8) unless set.
+     */
+    static defaults(): PasswordRule;
+    static defaults(rule: PasswordRule | (() => PasswordRule) | null): void;
+    min(size: number): this;
+    max(size: number): this;
+    /** At least one letter. */
+    letters(): this;
+    /** At least one uppercase and one lowercase letter. */
+    mixedCase(): this;
+    /** At least one number. */
+    numbers(): this;
+    /** At least one symbol (punctuation, a symbol or a space). */
+    symbols(): this;
+    validate(attribute: string, value: unknown, fail: (message: string) => void): void;
+}
+
 /**
  * Base for the fluent builders. Each one reports under a built-in rule name (`in`, `unique`, `exists`), so when it
  * runs inside a Validator its failure goes through exactly the same lookup as the string rule: custom messages
@@ -6672,6 +7080,8 @@ declare const Rule: {
     in: (values: readonly unknown[]) => InRule;
     unique: (table: string, column?: string) => UniqueRule;
     exists: (table: string, column?: string) => ExistsRule;
+    /** Laravel's Password::defaults(): the application's password rule (at least 8 characters unless PasswordRule.defaults() changed it). */
+    password: () => PasswordRule;
 };
 
 /** See Task 9's writeup in the plan for exactly what this does and doesn't infer. */
@@ -7167,6 +7577,8 @@ interface HttpRequest$3 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -7370,16 +7782,6 @@ interface Container$9 {
 }
 declare const Container$9: Token$9<Container$9>;
 
-interface Arrayable$3<T = unknown> {
-    toArray(): T;
-}
-/** The minimal collection surface contracts rely on (implemented by @orieljs/collections). */
-interface Enumerable$3<T> extends Iterable<T>, Arrayable$3<unknown[]> {
-    all(): T[];
-    count(): number;
-    isEmpty(): boolean;
-}
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session$2 {
     getId(): string;
@@ -7458,6 +7860,8 @@ interface HttpRequest$2 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -7490,6 +7894,16 @@ interface Middleware$2 {
     terminate?(request: HttpRequest$2, response: Response): Promise<void>;
 }
 
+interface Arrayable$3<T = unknown> {
+    toArray(): T;
+}
+/** The minimal collection surface contracts rely on (implemented by @orieljs/collections). */
+interface Enumerable$3<T> extends Iterable<T>, Arrayable$3<unknown[]> {
+    all(): T[];
+    count(): number;
+    isEmpty(): boolean;
+}
+
 interface Cookie {
     name: string;
     value: string;
@@ -7914,27 +8328,6 @@ interface Container$8 {
 }
 declare const Container$8: Token$8<Container$8>;
 
-interface ConfigRepository {
-    has(key: string): boolean;
-    /** Dot notation: get('database.connections.sqlite.database'). */
-    get<T = unknown>(key: string, defaultValue?: T): T;
-    set(key: string, value: unknown): void;
-    set(values: Record<string, unknown>): void;
-    push(key: string, value: unknown): void;
-    all(): Record<string, unknown>;
-}
-declare const ConfigRepository: Token$j<ConfigRepository>;
-
-interface Arrayable$2<T = unknown> {
-    toArray(): T;
-}
-/** The minimal collection surface contracts rely on (implemented by @orieljs/collections). */
-interface Enumerable$2<T> extends Iterable<T>, Arrayable$2<unknown[]> {
-    all(): T[];
-    count(): number;
-    isEmpty(): boolean;
-}
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session$1 {
     getId(): string;
@@ -7997,6 +8390,8 @@ interface HttpRequest$1 {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -8029,6 +8424,27 @@ interface Middleware$1 {
     terminate?(request: HttpRequest$1, response: Response): Promise<void>;
 }
 
+interface ConfigRepository {
+    has(key: string): boolean;
+    /** Dot notation: get('database.connections.sqlite.database'). */
+    get<T = unknown>(key: string, defaultValue?: T): T;
+    set(key: string, value: unknown): void;
+    set(values: Record<string, unknown>): void;
+    push(key: string, value: unknown): void;
+    all(): Record<string, unknown>;
+}
+declare const ConfigRepository: Token$j<ConfigRepository>;
+
+interface Arrayable$2<T = unknown> {
+    toArray(): T;
+}
+/** The minimal collection surface contracts rely on (implemented by @orieljs/collections). */
+interface Enumerable$2<T> extends Iterable<T>, Arrayable$2<unknown[]> {
+    all(): T[];
+    count(): number;
+    isEmpty(): boolean;
+}
+
 interface Hasher {
     make(value: string): Promise<string>;
     check(value: string, hashed: string): Promise<boolean>;
@@ -8120,6 +8536,8 @@ interface ModelInstance$1 {
     getTable(): string;
     getRouteKey(): unknown;
     getRouteKeyName(): string;
+    /** The value stored in a polymorphic `*_type` column for this model: its morph map alias, else its class name. */
+    getMorphClass(): string;
     getAttribute<T = unknown>(key: string): T;
     setAttribute(key: string, value: unknown): this;
     fill(attributes: Row$2): this;
@@ -8201,18 +8619,18 @@ interface MustVerifyEmail {
     getEmailForVerification(): string;
 }
 
-interface Notifiable {
+interface Notifiable$1 {
     /** e.g. 'mail' → email address, 'database' → the model itself. */
     routeNotificationFor(channel: string, notification: Notification): unknown;
 }
 interface Notification {
     /** Optional id; set by the dispatcher when missing. */
     id?: string;
-    via(notifiable: Notifiable): string[];
+    via(notifiable: Notifiable$1): string[];
     /** Returns a Mailable (Contracts/Mail) or the Notifications MailMessage builder. */
-    toMail?(notifiable: Notifiable): unknown;
-    toDatabase?(notifiable: Notifiable): Record<string, unknown>;
-    toArray?(notifiable: Notifiable): Record<string, unknown>;
+    toMail?(notifiable: Notifiable$1): unknown;
+    toDatabase?(notifiable: Notifiable$1): Record<string, unknown>;
+    toArray?(notifiable: Notifiable$1): Record<string, unknown>;
 }
 
 declare abstract class ServiceProvider$b implements ServiceProvider$u {
@@ -8287,6 +8705,21 @@ declare class PasswordReset {
     readonly user: Authenticatable;
     constructor(user: Authenticatable);
 }
+/** Fired by the registration action after a user signs up; the default listener sends the verification mail. */
+declare class Registered {
+    readonly user: Authenticatable;
+    constructor(user: Authenticatable);
+}
+/** Fired when a user verifies their email address. */
+declare class Verified {
+    readonly user: Authenticatable & MustVerifyEmail;
+    constructor(user: Authenticatable & MustVerifyEmail);
+}
+/** Fired when a login is refused for too many attempts (the starter kits' LoginRequest). */
+declare class Lockout {
+    readonly request: HttpRequest$1;
+    constructor(request: HttpRequest$1);
+}
 
 /** What the default toMail() returns: Laravel's reset mail, as plain data (see the plan's notes). */
 interface ResetPasswordMail {
@@ -8313,6 +8746,54 @@ declare class ResetPassword implements Notification {
     resetUrl(notifiable: CanResetPassword): string;
 }
 
+/** What the default toMail() returns: Laravel's verification mail, as plain data (the mail channel renders it). */
+interface VerifyEmailMail {
+    subject: string;
+    lines: string[];
+    actionText: string;
+    actionUrl: string;
+    outroLines: string[];
+}
+/** The user the notification is for (AuthenticatableModel provides this). */
+type VerifiableUser = MustVerifyEmail & {
+    getKey?(): unknown;
+    getAuthIdentifier?(): unknown;
+};
+/**
+ * Laravel's VerifyEmail notification: a link to the `verification.verify` route signed for
+ * config('auth.verification.expire', 60) minutes, with the user's key as {id} and the sha1 of their email as {hash}.
+ */
+declare class VerifyEmail implements Notification {
+    /** Build the verification URL yourself (e.g. for a SPA front end). */
+    static createUrlUsing(callback: ((notifiable: VerifiableUser) => string) | undefined): void;
+    /** Build the mail yourself (e.g. a MailMessage from the Notifications component). */
+    static toMailUsing(callback: ((notifiable: VerifiableUser, url: string) => unknown) | undefined): void;
+    via(): string[];
+    toMail(notifiable: object): unknown;
+    verificationUrl(notifiable: VerifiableUser): string;
+}
+
+/**
+ * Laravel's SendEmailVerificationNotification, listening for Registered (AuthServiceProvider registers it): a new
+ * user who must verify their email, and hasn't, gets the VerifyEmail mail.
+ */
+declare class SendEmailVerificationNotification {
+    handle(event: Registered): Promise<void>;
+}
+
+/**
+ * Laravel's EmailVerificationRequest, for the verification link's route (`auth` and `signed` middleware): the
+ * signed-in user's key must equal the {id} parameter and the sha1 of their email the {hash} parameter, else 403.
+ * `await EmailVerificationRequest.validate()` in the action, like a FormRequest.
+ */
+declare class EmailVerificationRequest {
+    static validate(): Promise<Record<string, never>>;
+    authorize(): boolean;
+    rules(): Record<string, never>;
+    /** Marks the signed-in user's email as verified and fires Verified, unless it already was. */
+    fulfill(): Promise<void>;
+}
+
 /** The part of a model (Contracts/Database ModelInstance) the mixin needs. */
 interface AuthModelBase {
     getKey(): unknown;
@@ -8322,7 +8803,7 @@ interface AuthModelBase {
     save(): Promise<boolean>;
 }
 type AuthModelConstructor = new (...args: any[]) => AuthModelBase;
-/** Configure how the email verification notification is sent (signed URLs are not in v1's UrlGenerator). */
+/** Send the email verification yourself instead of the VerifyEmail notification (undefined restores the default). */
 declare function sendEmailVerificationUsing(callback: ((user: MustVerifyEmail) => Promise<void>) | undefined): void;
 /** Sends a notification through user.notify() (the Notifications mixin), else the NotificationDispatcher token. */
 declare function sendNotification(user: unknown, notification: Notification): Promise<void>;
@@ -8345,6 +8826,7 @@ declare function AuthenticatableModel<TBase extends AuthModelConstructor>(Base:
         hasVerifiedEmail(): boolean;
         markEmailAsVerified(): Promise<boolean>;
         getEmailForVerification(): string;
+        /** Sends the VerifyEmail notification (a signed link), or what sendEmailVerificationUsing() configured. */
         sendEmailVerificationNotification(): Promise<void>;
         getKey(): unknown;
         getKeyName(): string;
@@ -8630,6 +9112,42 @@ declare class AccessGate implements Gate$1 {
     getPolicyFor(target: unknown): PolicyClass | undefined;
 }
 
+type AuthorizableConstructor = new (...args: any[]) => Authenticatable;
+/**
+ * Laravel's Authorizable trait: `user.can('update', post)` asks the Gate about this user (Gate.forUser), whoever is
+ * signed in. `class User extends Authorizable(AuthenticatableModel(Model)) {}`.
+ */
+declare function Authorizable<TBase extends AuthorizableConstructor>(Base: TBase): {
+    new (...args: any[]): {
+        /** Whether the user has the ability (every one, for a list); the arguments go to the policy or ability callback. */
+        can(abilities: string | readonly string[], ...args: unknown[]): Promise<boolean>;
+        /** Whether the user has any of the abilities. */
+        canAny(abilities: string | readonly string[], ...args: unknown[]): Promise<boolean>;
+        /** Whether the user lacks the ability (any one, for a list). */
+        cant(abilities: string | readonly string[], ...args: unknown[]): Promise<boolean>;
+        /** The same as cant(). */
+        cannot(abilities: string | readonly string[], ...args: unknown[]): Promise<boolean>;
+        getAuthIdentifierName(): string;
+        getAuthIdentifier(): unknown;
+        getAuthPassword(): string;
+        getRememberToken(): string | undefined;
+        setRememberToken(value: string): void;
+        getRememberTokenName(): string;
+    };
+} & TBase;
+
+/**
+ * The framework's base controller, with Laravel's AuthorizesRequests: `await this.authorize('update', post)` throws an
+ * AuthorizationError (403, or the status the policy chose) unless the signed-in user may. The app's
+ * `app/Http/Controllers/Controller.ts` extends it.
+ */
+declare abstract class Controller {
+    /** Authorizes the ability for the signed-in user (the Gate's authorize()). */
+    protected authorize(ability: string, ...args: unknown[]): Promise<void>;
+    /** Authorizes the ability for the given user (Gate.forUser(user).authorize()). */
+    protected authorizeForUser(user: Authenticatable | undefined, ability: string, ...args: unknown[]): Promise<void>;
+}
+
 /**
  * Laravel's Authorize middleware (`can:update,post`). Each extra parameter is a quoted literal ('"draft"'), else the
  * route parameter of that name (the bound model), else the name itself (a model name such as `Post`, which selects
@@ -9056,6 +9574,11 @@ interface OrielError$6 extends Error {
 
 /** Options a job class may declare as public fields. Their presence (or implementing ShouldQueue) makes things queueable. */
 interface ShouldQueue$3 {
+    /**
+     * Marks the class as queued at run time: `implements ShouldQueue` leaves no trace once compiled, so the interface
+     * asks for `readonly shouldQueue = true`. Jobs, listeners, mailables and notifications carrying it are queued.
+     */
+    readonly shouldQueue: true;
     connection?: string;
     queue?: string;
     /** Seconds. */
@@ -9234,15 +9757,15 @@ declare class Dispatcher$1 implements EventDispatcher {
 declare const QUEUE_OPTION_KEYS: readonly ["connection", "queue", "delay", "tries", "backoff", "timeout"];
 type QueueOptionKey = (typeof QUEUE_OPTION_KEYS)[number];
 /**
- * Whether a listener opts into queueing. `implements ShouldQueue` leaves no runtime trace, so this is structural,
- * like the Queue/Bus protocol's own `isQueueable(job)`: the marker, or an option, or a `uniqueId`/`retryUntil`
- * method. Unlike a job (already an instance by the time Bus sees it), a listener is a *class* registered with
- * `listen()`, so Events must build it first — `this.container.make(cls)` is cheap and side-effect-free for listener
- * classes, which have DI-only constructors — and then applies the protocol rule to that instance: the marker
- * (readable off the instance through the prototype chain), an **instance** option field with a defined value, or an
- * instance `uniqueId`/`retryUntil` method — the same fields Mail's and Notifications' `isQueueableMailable`/
- * equivalent read. A **static** field or method on the class counts too, as an extra on top of the protocol rule
- * (not instead of it), so an existing `static queue = '...'` listener still works.
+ * Whether a listener opts into queueing, like the Queue/Bus protocol's own `isQueueable(job)`: ShouldQueue's
+ * `shouldQueue: true`, the SHOULD_QUEUE symbol, an option, or a `uniqueId`/`retryUntil` method. Unlike a job (already
+ * an instance by the time Bus sees it), a listener is a *class* registered with `listen()`, so Events must build it
+ * first — `this.container.make(cls)` is cheap and side-effect-free for listener classes, which have DI-only
+ * constructors — and then applies the protocol rule to that instance: the marker (readable off the instance through
+ * the prototype chain), an **instance** option field with a defined value, or an instance `uniqueId`/`retryUntil`
+ * method — the same fields Mail's and Notifications' `isQueueableMailable`/equivalent read. A **static** field or
+ * method on the class (`shouldQueue`, an option, `uniqueId`/`retryUntil`) counts too, as an extra on top of the
+ * protocol rule (not instead of it), so an existing `static queue = '...'` listener still works.
  */
 declare function isQueueableListener(cls: Class$6<unknown>, instance: object): boolean;
 /**
@@ -9405,6 +9928,18 @@ interface CacheManager$2 extends CacheRepository$1 {
     extend(driver: string, factory: (config: Record<string, unknown>) => CacheRepository$1): void;
 }
 declare const CacheManager$2: Token$j<CacheManager$2>;
+/** Laravel's RateLimiter: hits per key, kept in the default cache store. */
+interface RateLimiter$1 {
+    tooManyAttempts(key: string, maxAttempts: number): Promise<boolean>;
+    /** Adds a hit; the window starts at the first hit and lasts `decaySeconds` (default 60). Returns the hit count. */
+    hit(key: string, decaySeconds?: number): Promise<number>;
+    attempts(key: string): Promise<number>;
+    remaining(key: string, maxAttempts: number): Promise<number>;
+    /** Seconds until the key's window resets. */
+    availableIn(key: string): Promise<number>;
+    clear(key: string): Promise<void>;
+}
+declare const RateLimiter$1: Token$j<RateLimiter$1>;
 
 declare abstract class ServiceProvider$8 implements ServiceProvider$u {
     protected readonly app: Application$c;
@@ -9771,7 +10306,28 @@ declare class CacheManager$1 implements CacheManager$2 {
     tags(names: string | string[]): CacheRepository$1;
 }
 
+/**
+ * Laravel's Illuminate\Cache\RateLimiter over a cache store: `<key>` holds the hit count and `<key>:timer` the unix
+ * time the window ends, both expiring with the window. The store is resolved on every call, so a store swapped in
+ * a test (or config changed at run time) is the one used.
+ */
+declare class CacheRateLimiter implements RateLimiter$1 {
+    #private;
+    private readonly store;
+    constructor(store: () => CacheRepository$1);
+    tooManyAttempts(key: string, maxAttempts: number): Promise<boolean>;
+    hit(key: string, decaySeconds?: number): Promise<number>;
+    attempts(key: string): Promise<number>;
+    remaining(key: string, maxAttempts: number): Promise<number>;
+    availableIn(key: string): Promise<number>;
+    clear(key: string): Promise<void>;
+    /** Laravel's cleanRateLimiterKey(): accented letters become their plain letter ('zoë' and 'zoe' share a key). */
+    protected cleanKey(key: string): string;
+}
+
 declare const Cache: Facade<CacheManager$2, object>;
+/** The RateLimiter facade: RateLimiter.tooManyAttempts(key, 5), RateLimiter.hit(key), RateLimiter.clear(key). */
+declare const RateLimiter: Facade<RateLimiter$1, object>;
 declare function cache(): CacheManager$2;
 declare function cache(key: string): Promise<unknown>;
 declare function cache(values: Record<string, unknown>, ttlSeconds?: number): Promise<boolean>;
@@ -9815,6 +10371,16 @@ interface Container$4 {
     run<R>(fn: () => R): R;
 }
 declare const Container$4: Token$4<Container$4>;
+interface UploadedFile$1 {
+    readonly clientName: string;
+    readonly mimeType: string;
+    readonly size: number;
+    extension(): string;
+    arrayBuffer(): Promise<ArrayBuffer>;
+    /** Stores on a Filesystem disk. Returns the stored path. */
+    store(directory: string, disk?: string): Promise<string>;
+    storeAs(directory: string, name: string, disk?: string): Promise<string>;
+}
 
 interface ServiceProvider$7 {
     /** Bind things into the container. Synchronous. Don't resolve other services here. */
@@ -9856,16 +10422,6 @@ interface Application$2 extends Container$4 {
     terminate(): Promise<void>;
 }
 declare const Application$2: Token$j<Application$2>;
-interface UploadedFile$1 {
-    readonly clientName: string;
-    readonly mimeType: string;
-    readonly size: number;
-    extension(): string;
-    arrayBuffer(): Promise<ArrayBuffer>;
-    /** Stores on a Filesystem disk. Returns the stored path. */
-    store(directory: string, disk?: string): Promise<string>;
-    storeAs(directory: string, name: string, disk?: string): Promise<string>;
-}
 
 type ErrorKind$4 = 'Http' | 'Server' | 'ModelNotFound' | 'Validation' | 'Authentication' | 'Authorization' | 'TokenMismatch' | 'BindingResolution' | 'CircularDependency' | 'ContainerNotAvailable';
 /** Every error thrown by the framework implements this. The exception handler switches on `kind`. */
@@ -10123,9 +10679,17 @@ declare class S3Filesystem implements Filesystem {
     get(path: string): Promise<string>;
     getBytes(path: string): Promise<Uint8Array>;
     readStream(path: string): Promise<ReadableStream<Uint8Array>>;
+    /** Sends the type of the path when the options name none (Laravel's S3 adapter detects one too). */
     put(path: string, contents: string | Uint8Array | ReadableStream<Uint8Array>, options?: PutOptions): Promise<boolean>;
     putFile(directory: string, file: UploadedFile$1, options?: PutOptions): Promise<string>;
+    /**
+     * Sends the upload's own type: its extension(), which follows what a request upload's bytes show (the client's claim
+     * counts only where extension() keeps it). Never the MIME type the client sent as such, nor the name it is stored
+     * under (an app may name it after the client's file name): S3, or a CDN in front of it, serves the object with this
+     * type. An upload of no known type is sent with none (served as binary).
+     */
     putFileAs(directory: string, file: UploadedFile$1, name: string, options?: PutOptions): Promise<string>;
+    private putObject;
     delete(paths: string | string[]): Promise<boolean>;
     copy(from: string, to: string): Promise<boolean>;
     move(from: string, to: string): Promise<boolean>;
@@ -10322,6 +10886,8 @@ interface ModelInstance {
     getTable(): string;
     getRouteKey(): unknown;
     getRouteKeyName(): string;
+    /** The value stored in a polymorphic `*_type` column for this model: its morph map alias, else its class name. */
+    getMorphClass(): string;
     getAttribute<T = unknown>(key: string): T;
     setAttribute(key: string, value: unknown): this;
     fill(attributes: Row): this;
@@ -10334,6 +10900,11 @@ interface ModelInstance {
 
 /** Options a job class may declare as public fields. Their presence (or implementing ShouldQueue) makes things queueable. */
 interface ShouldQueue$2 {
+    /**
+     * Marks the class as queued at run time: `implements ShouldQueue` leaves no trace once compiled, so the interface
+     * asks for `readonly shouldQueue = true`. Jobs, listeners, mailables and notifications carrying it are queued.
+     */
+    readonly shouldQueue: true;
     connection?: string;
     queue?: string;
     /** Seconds. */
@@ -11167,6 +11738,11 @@ interface OrielError$2 extends Error {
 
 /** Options a job class may declare as public fields. Their presence (or implementing ShouldQueue) makes things queueable. */
 interface ShouldQueue$1 {
+    /**
+     * Marks the class as queued at run time: `implements ShouldQueue` leaves no trace once compiled, so the interface
+     * asks for `readonly shouldQueue = true`. Jobs, listeners, mailables and notifications carrying it are queued.
+     */
+    readonly shouldQueue: true;
     connection?: string;
     queue?: string;
     /** Seconds. */
@@ -11339,8 +11915,9 @@ interface UniqueLockSpec {
     untilProcessing: boolean;
 }
 /**
- * Whether dispatch() queues the job: it carries the ShouldQueue marker (the Queueable base class), has a value for
- * any ShouldQueue option, or defines uniqueId()/retryUntil(). `implements ShouldQueue` alone leaves no runtime trace.
+ * Whether dispatch() queues the job: it carries ShouldQueue's `shouldQueue: true` (a `readonly shouldQueue = true`
+ * field, or the Queueable base class's getter), the SHOULD_QUEUE symbol, a value for any ShouldQueue option, or
+ * defines uniqueId()/retryUntil().
  */
 declare function isQueueable(job: unknown): boolean;
 /** Laravel's ShouldBeUnique: the job defines uniqueId(), uniqueFor, uniqueUntilProcessing or uniqueVia(). */
@@ -11497,7 +12074,9 @@ declare abstract class Dispatchable implements Job$1 {
  * A queued job: Laravel's `implements ShouldQueue` + `use Queueable`. `dispatch()` pushes it onto the queue.
  * The marker lives on the prototype, so it is never serialized.
  */
-declare abstract class Queueable extends Dispatchable {
+declare abstract class Queueable extends Dispatchable implements ShouldQueue$1 {
+    /** ShouldQueue's marker, so subclasses may write `implements ShouldQueue` without the field. */
+    get shouldQueue(): true;
 }
 
 /** Laravel's dispatch() helper: queued when the job is queueable, else run now. Dispatched once, awaited or not. */
@@ -11558,6 +12137,11 @@ interface OrielError$1 extends Error {
 
 /** Options a job class may declare as public fields. Their presence (or implementing ShouldQueue) makes things queueable. */
 interface ShouldQueue {
+    /**
+     * Marks the class as queued at run time: `implements ShouldQueue` leaves no trace once compiled, so the interface
+     * asks for `readonly shouldQueue = true`. Jobs, listeners, mailables and notifications carrying it are queued.
+     */
+    readonly shouldQueue: true;
     connection?: string;
     queue?: string;
     /** Seconds. */
@@ -11879,6 +12463,17 @@ declare class MailServiceProvider extends ServiceProvider$2 {
     register(): void;
 }
 
+/**
+ * Laravel's Notifiable trait: RoutesNotifications (notify(), notifyNow(), routeNotificationFor()) and
+ * HasDatabaseNotifications (notifications(), unreadNotifications(), readNotifications()).
+ * `class User extends Notifiable(AuthenticatableModel(Model)) {}`.
+ */
+declare function Notifiable<TBase extends ModelConstructor>(Base: TBase): (new (...args: any[]) => {
+    routeNotificationFor(channel: string, notification: Notification$4): unknown;
+    notify(notification: Notification$4): Promise<void>;
+    notifyNow(notification: Notification$4, channels?: string[]): Promise<void>;
+}) & TBase & (new (...args: any[]) => HasDatabaseNotificationsModel);
+
 /** A typed, runtime-unique key for container bindings. */
 interface Token<T> {
     readonly id: symbol;
@@ -11915,54 +12510,6 @@ interface Container {
 }
 declare const Container: Token<Container>;
 
-interface ServiceProvider$1 {
-    /** Bind things into the container. Synchronous. Don't resolve other services here. */
-    register?(): void;
-    /** Runs after every provider is registered. May be async (e.g. importing route files). */
-    boot?(): void | Promise<void>;
-}
-type ServiceProviderClass = new (app: Application) => ServiceProvider$1;
-interface Application extends Container {
-    readonly version: string;
-    basePath(path?: string): string;
-    appPath(path?: string): string;
-    bootstrapPath(path?: string): string;
-    configPath(path?: string): string;
-    databasePath(path?: string): string;
-    publicPath(path?: string): string;
-    resourcePath(path?: string): string;
-    storagePath(path?: string): string;
-    /** With no args returns the environment name. With args returns whether it matches any of them. */
-    environment(): string;
-    environment(...environments: string[]): boolean;
-    isProduction(): boolean;
-    isLocal(): boolean;
-    runningInConsole(): boolean;
-    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
-    setRunningInConsole(value?: boolean): void;
-    runningUnitTests(): boolean;
-    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
-    register(provider: ServiceProvider$1 | ServiceProviderClass): Promise<ServiceProvider$1>;
-    getProviders(): ServiceProvider$1[];
-    boot(): Promise<void>;
-    isBooted(): boolean;
-    booting(callback: (app: Application) => void | Promise<void>): void;
-    booted(callback: (app: Application) => void | Promise<void>): void;
-    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
-    handle(request: Request): Promise<Response>;
-    /** Register a callback that terminate() runs, in registration order. */
-    terminating(callback: () => void | Promise<void>): void;
-    terminate(): Promise<void>;
-}
-declare const Application: Token$j<Application>;
-interface Htmlable {
-    toHtml(): string;
-}
-/** Anything a controller can return that knows how to become a Response. */
-interface Responsable {
-    toResponse(request: unknown): Response | Promise<Response>;
-}
-
 /** The session of the current request (scoped). Loaded and saved by the StartSession middleware. */
 interface Session {
     getId(): string;
@@ -12025,6 +12572,8 @@ interface HttpRequest {
     header(name: string, defaultValue: string): string;
     bearerToken(): string | undefined;
     ip(): string | undefined;
+    /** The raw body as text (Laravel's getContent()); '' when there is none. */
+    content(): string;
     expectsJson(): boolean;
     ajax(): boolean;
     query<T = unknown>(key?: string, defaultValue?: T): T;
@@ -12056,6 +12605,54 @@ interface Middleware {
     handle(request: HttpRequest, next: Next, ...parameters: string[]): Promise<Response>;
     terminate?(request: HttpRequest, response: Response): Promise<void>;
 }
+
+interface ServiceProvider$1 {
+    /** Bind things into the container. Synchronous. Don't resolve other services here. */
+    register?(): void;
+    /** Runs after every provider is registered. May be async (e.g. importing route files). */
+    boot?(): void | Promise<void>;
+}
+type ServiceProviderClass = new (app: Application) => ServiceProvider$1;
+interface Application extends Container {
+    readonly version: string;
+    basePath(path?: string): string;
+    appPath(path?: string): string;
+    bootstrapPath(path?: string): string;
+    configPath(path?: string): string;
+    databasePath(path?: string): string;
+    publicPath(path?: string): string;
+    resourcePath(path?: string): string;
+    storagePath(path?: string): string;
+    /** With no args returns the environment name. With args returns whether it matches any of them. */
+    environment(): string;
+    environment(...environments: string[]): boolean;
+    isProduction(): boolean;
+    isLocal(): boolean;
+    runningInConsole(): boolean;
+    /** Mark the app as running in the console (the CLI entry point calls this). Defaults to true. */
+    setRunningInConsole(value?: boolean): void;
+    runningUnitTests(): boolean;
+    /** Registers the provider. If the app is already booted, the provider is booted immediately. */
+    register(provider: ServiceProvider$1 | ServiceProviderClass): Promise<ServiceProvider$1>;
+    getProviders(): ServiceProvider$1[];
+    boot(): Promise<void>;
+    isBooted(): boolean;
+    booting(callback: (app: Application) => void | Promise<void>): void;
+    booted(callback: (app: Application) => void | Promise<void>): void;
+    /** Handle one HTTP request in a fresh request scope via the bound HttpKernel. */
+    handle(request: Request): Promise<Response>;
+    /** Register a callback that terminate() runs, in registration order. */
+    terminating(callback: () => void | Promise<void>): void;
+    terminate(): Promise<void>;
+}
+declare const Application: Token$j<Application>;
+interface Htmlable {
+    toHtml(): string;
+}
+/** Anything a controller can return that knows how to become a Response. */
+interface Responsable {
+    toResponse(request: unknown): Response | Promise<Response>;
+}
 interface RedirectResponse extends Responsable {
     readonly targetUrl: string;
     with(key: string | Record<string, unknown>, value?: unknown): this;
@@ -12663,4 +13260,4 @@ type SharedPropsFrom<M> = M extends {
     share(...args: never[]): infer R;
 } ? SerializedObject<Awaited<R>> : Record<never, never>;
 
-export { API_ROUTES_STUB, AboutCommand, AbstractPaginator, AccessGate, AddQueuedCookiesToResponse, type AfterCallback, AllMailersFailedError, AlwaysProp, AnonymousNotifiable, Application$9 as Application, ApplicationBuilder, ArgonHasher, type ArgonOptions, type ArgumentDefinition, Arr, ArraySessionHandler, ArrayTransport, Artisan, Attempting, type Attributes$1 as Attributes, type AttributesResolver, Auth, AuthManager, type AuthModel, type AuthModelBase, type AuthModelConstructor, AuthServiceProvider, AuthenticatableModel, Authenticate, AuthenticationError, AuthorizationError, AuthorizationErrorImpl, Authorize, BaseJob, BaseLogger, BasePipeline, BaseRouter, BaseUrlGenerator, Batch$1 as Batch, type BatchAttributes, BatchingUnavailableError, BcryptHasher, type BcryptOptions, type BeforeCallback, BelongsTo, BelongsToMany, BindingResolutionError, Blueprint, type BlueprintCommand, BufferedConsoleOutput, Builder, type BuiltInCast, type BuiltinRule, BuiltinRuleObject, type BunDatabase, BunSqliteDatabase, type BunStatement, Bus, Dispatcher as BusDispatcherImpl, BusError, BusServiceProvider, CACHE_TABLE_MIGRATION, CHAIN, Cache, CacheManager$1 as CacheManager, Repository as CacheRepositoryImpl, CacheServiceProvider, type Store as CacheStore, CallQueuedHandler, CallQueuedListener, type CanResetPassword, type CanResetPasswordUser, type CastDefinition, type CastsAttributes, type ChainSpec, type CipherName, CircularDependencyError, ClassRegistry$2 as ClassRegistry, ClosureCommand$4 as ClosureCommand, ClosureKernel, Collection$2 as Collection, type Column, type ColumnAttributes, ColumnDefinition, type ColumnInfo, type ColumnRef, type ColumnType, Command$4 as Command, CommandNotFoundError, ComponentNotFoundError, Connection, type ConsoleInput, type ConsoleIo, Kernel as ConsoleKernelImpl, type ConsoleOutput, ConsoleServiceProvider, Container$j as Container, ContainerNotAvailableError, ControllerMethodNotFoundError, ConvertEmptyStringsToNull, Cookie$1 as Cookie, type CookieDefaults, CookieJar$1 as CookieJar, CookieServiceProvider, CookieSessionHandler, CookieValuePrefix, type CreateMigrationOptions, Crypt, Cursor, type CursorPage, CursorPaginator, type CursorPaginatorOptions, DB, DEFAULT_MESSAGES, DailyRotatingStream, DatabaseBatchRepository, type DatabaseCommandContext, type DatabaseConfig, DatabaseConfigError, DatabaseError, DatabaseFailedJobProvider, DatabaseJob, type DatabaseJobRecord, DatabaseLock, DatabaseManagerImpl, DatabaseNotificationChannel, type DatabaseNotificationRecord, DatabaseQueue, type DatabaseQueueOptions, DatabaseServiceProvider, DatabaseSessionHandler, DatabaseStore, DatabaseTokenRepository, DatabaseUnavailableError, DecryptError, DeferProp, type Direction, Dispatchable, type EagerLoadSpec, EloquentUserProvider, type Encoded, EncryptCookies, EncryptError, EncryptHistory, Encrypter$2 as Encrypter, EncryptionServiceProvider, EnsureEmailIsVerified, type EnumLike, type ErrorClass, ErrorHandler, Event, Dispatcher$1 as EventDispatcherImpl, type EventKey, type EventListenMap, EventServiceProvider, EventsNeedBusDispatcherError, EventsNeedClassRegistryError, ExceptionsConfiguration, Expression, type Facade$c as Facade, type FacadeStatics$c as FacadeStatics, Factory$b as Factory, type FactoryResult, Failed, FailoverTransport, Faker, FakerOverflowError, FileNotFoundError, FileSessionHandler, FileStore, FilesystemManager, FilesystemServiceProvider, ForeignIdColumnDefinition, ForeignKeyDefinition, FormRequest, FormUploadedFile, Gate, type GateAbility, GateResponse, GeneratorCommand, GenericLock, type GlobalScope, Grammar, type GroupAttributes, type GroupHost, GroupRegistrar, type GuardFactory, HasApiTokens, HasMany, HasManyThrough, HasOne, HasOneOrMany, Hash, HashAlgorithmError, type HashInfo, HashManager, type HasherFactory, type HashingConfig, HashingServiceProvider, type Having, HelpCommand, type HttpCommandOptions, HttpException, Kernel$1 as HttpKernelImpl, HttpRedirectResponse, HttpRedirector, HttpResponseException, HttpResponseFactory, HttpServerError, HttpServiceProvider, Hub, IncomingRequest, type IncomingRequestOptions, type IndexType, Inertia, InertiaError, InertiaHtml, InertiaMiddleware, Response$1 as InertiaPageResponse, ResponseFactory as InertiaResponseFactory, InertiaServiceProvider, type ValidationErrors as InertiaValidationErrors, type InferRuleType, type InferValidatedType, InvalidCacheConfigError, InvalidCastError, InvalidListenerError, InvalidLogLevelError, InvalidRuleParameterError, InvalidSignatureError, JOBS_TABLE_MIGRATION, JobClassNotFoundError, type JobContext, type JobMiddleware, JobSerializationError, JoinClause, type JoinType, KEY_GENERATE_SIGNATURE, type KernelApp, type KeyGenerateIO, LEVEL_SEVERITY, LazyCollection$1 as LazyCollection, type LengthAwarePage, LengthAwarePaginator, ListCommand, type ListenerTuple, type LocalDiskConfig, LocalFilesystem, type LockFactory, LockTimeoutError, Log, LogChannelCycleError, LogManager, LogServiceProvider, LogTransport, type LoggedQuery, LogicError, Login, Logout, MIGRATION_CREATE_STUB, MIGRATION_STUB, MIGRATION_UPDATE_STUB, MODEL_EVENTS, Mail, MailManager, MailMessage, type MailMessageAction, MailNotificationChannel, MailQueueUnavailableError, MailServiceProvider, type MailTransporter, MailUnavailableError, Mailable, MailerImpl, MakeCastCommand, MakeCommandCommand, MakeControllerCommand, MakeEventCommand, MakeFactoryCommand, MakeJobCommand, MakeListenerCommand, MakeMailCommand, MakeMiddlewareCommand, MakeModelCommand, MakeNotificationCommand, MakeObserverCommand, MakePolicyCommand, MakeProviderCommand, MakeRequestCommand, MakeResourceCommand, MakeRuleCommand, MakeSeederCommand, MakeTestCommand, type Manifest, type ManifestChunk, ManuallyFailedError, type Many, MassAssignmentError, MaxAttemptsExceededError, MemoryStore, MergeProp, MessageBagImpl, MethodNotAllowedHttpError, MiddlewareConfiguration, MiddlewareNotFoundError, Migration, MigrationCreator, type MigrationRecord, MigrationRepository, type MigrationStatus, Migrator, type MigratorOptions, MissingAppKeyError, MissingModelError, MissingRecipientError, Model, type ModelBuilder, type ModelClass, type ModelEvent, type ModelListener, ModelNotFoundError$1 as ModelNotFoundError, ModelRegistry, type MorphConstraint, MorphMany, MorphOne, MorphTo, MySqlSchemaGrammar, NOTIFICATIONS_TABLE, NOTIFICATIONS_TABLE_MIGRATION, type NewAccessToken, NodeConsoleInput, NodeConsoleOutput, NotDatabaseNotifiableError, NotFoundHttpError, Notifiable$1 as Notifiable, type NotifiableConstructor, Notification$1 as Notification, Dispatcher$2 as NotificationDispatcherImpl, NotificationDispatcherUnavailableError, NotificationFacade, NotificationQueueUnavailableError, NotificationsServiceProvider, NullFailedJobProvider, NullLogger, NullQueue, OPERATORS, OnceProp, type OptionDefinition, type OptionValue$4 as OptionValue, OptionalProp, type Order, PERSONAL_ACCESS_TOKENS_MIGRATION, type PagePropsFrom, type PaginationLink, Paginator, type PaginatorOptions, type ParsedInput, type ParsedRule, type ParsedSetCookie, type ParsedSignature, Password, PasswordBroker, PasswordBrokerManager, PasswordReset, PathTraversalError, PendingBatch, PendingChain, PendingDispatch, PersonalAccessToken, PinoLogger, PipelineError, PipelineServiceProvider, Pivot, type PivotIds, type PlainNotificationMail, type PolicyClass, PostgresSchemaGrammar, type PreloadAttributesResolver, PropsResolver, ProviderBootError, ProviderRegisterError, QUEUE_JOB, Builder$1 as QueryBuilder, QueryError, Queue$1 as Queue, QueueBase, type QueueCommandContext, QueueError, type QueueJobPayload, QueueManager, QueueServiceProvider, QueueUnavailableError, Queueable, QueuedConsoleInput, QueuedMailSender, type QueuedMailableFactory, RESTART_CACHE_KEY, type RawResult, type RecipientOverrides, RedirectIfAuthenticated, RedisJob, RedisLock, RedisQueue, type RedisQueueOptions, RedisRepository, type RedisSessionClient, RedisSessionHandler, RedisStore, RedisTaggedStore, type ReferentialAction, type RegisteredModel, Relation, type RelationConstraint, type RelationNames, RelationNotFoundError, RelationNotLoadedError, type RelationValue, type RenderCallback, type RenderedContent, type ReplStarter, type ReportCallback, Repository$1 as Repository, ResetPassword, type ResetPasswordMail, type ResolvedMiddleware, type ResolvedServeOptions, type ResourceMethod, type ResourceRoute, type RollbackOptions, Route$1 as Route, type RouteAttributes, type RouteBinder, RouteDefinition, type RouteFileCallback, type RouteHandler, type RouteListFilters, type RouteListRow, RouteModelNotFoundError, RouteModelResolverImpl, RouteNotDefinedError, type RouteStage, RoutingError, type RoutingOptions, RoutingServiceProvider, Rule, type RuleContext, type RunningServer, type Runtime, type S3ClientLike, type S3DiskConfig, S3Filesystem, SSR_RENDER_FAILED, STORAGE_LINK_SIGNATURE, Schedule, ScheduleImpl, ScheduleListCommand, ScheduleNameRequiredError, ScheduleRunCommand, ScheduleWorkCommand, type ScheduleWorkOptions, ScheduledEventImpl, Schema, SchemaBuilder, SchemaBuilderToken, SchemaGrammar, type Scope, type ScopeCallback, type ScopeStatic, type Scopes, type ScrollMetadata, ScrollProp, Seeder, type SeederClass, type SelectColumn, SendQueuedMailable, SendQueuedNotifications, type Serialized, type SerializedObject, type ServeOptions, ServiceProvider$t as ServiceProvider, SessionFacade as Session, type SessionConfig, SessionGuard, type SessionGuardOptions, type SessionHandlerFactory, SessionManager, SessionMessageBag, SessionServiceProvider, Store$1 as SessionStore, type SharedPropsFrom, type SimplePage, type SmtpConfig, SmtpTransport, SoftDeletingScope, type SpawnResult, type Spawner, SqliteSchemaGrammar, SsrError, type SsrFailure, HttpGateway as SsrHttpGateway, type StackFrame, StackLogger, StartSession, type State, type StateContext, Storage, type StoredBatchOptions, Str, type StringPipeResolver, type SyncChanges, SyncJob, SyncQueue, type TagAttributes, TagsNotSupportedError, TestCommand, TimeoutExceededError, TinkerCommand, type TinkerOptions, type TinkerRepl, TokenGuard, type TokenGuardOptions, TokenMismatchError, TokenRepository, type TransporterFactory, TrimStrings, TypeGenerator, type TypeGeneratorOptions, type TypedRedirector, UNIQUE_LOCK, USERS_TABLE_MIGRATION, UniqueJobsNeedCacheError, UniqueLock, type UniqueLockSpec, UnknownCacheDriverError, UnknownCacheStoreError, UnknownDiskError, UnknownFilesystemDriverError, UnknownLogChannelError, UnknownLogDriverError, UnknownMailTransportError, UnknownMailerError, UnknownNotificationChannelError, UnknownQueueConnectionError, UnknownQueueDriverError, UnknownValidationRuleError, UnrenderableNotificationDataError, UnrenderableNotificationMailError, UnsupportedCipherError, UnsupportedOperationError, type UriParameter, UrlGenerationError, type UrlResolver, type UserProviderFactory, Validated, ValidationErrorImpl, ValidationFactoryImpl, ValidationServiceProvider, Validator, ValidatorImpl, VerifyCsrfToken, ViewFactoryUnavailableError, Vite, ViteError, ViteHtml, WORKER_DISCOVERY_DIRECTORIES, type Where, type WhereArgs, type WhereBoolean, WithoutOverlapping, Worker, type WorkerListener, type WorkerOptions, abort, abortIf, abortUnless, addApiRouting, allowGuests, app, applyExceptionCallbacks, applyMiddlewareCallbacks, applyReplacements, auth, back, bcrypt, builtinRules, bunRuntime, cache, castGet, castSet, classNameOf, clientAddress, collect, columnKey, compareRoutes, config, contentDisposition, cookie, createDailyChannel, createDialect, createPayload, createSingleChannel, createStderrChannel, createToken, csrfToken, currentContainer, currentLogContext, currentRequest, currentVite, databaseConfigDefaults, debugPage, decodePayload, decrypt, defaultAttributeName, defaultLockFactory, defaultProviders, defaultWorkerOptions, delaySeconds, describeError, deserialize, detectRuntime, discoverClasses, discoverFactories, discoverJobs, discoverListeners, discoverPolicies, dispatch, dispatchRoute, dispatchSync, encodePayload, encrypt, enumValues, env, errorBagFrom, errors, escapeHtml, event, expandWildcardKeys, extensionFromMime, facade, fake, fetchNotifications, filterRouteList, formatAddress, formatDate, formatDateTime, formatRouteList, formatTimestamp, fromEntries, generateAppKey, generateModelTypes, getMorphAlias, getMorphedModel, guessTable, hashInfo, healthResponse, inertia, inertiaBody, inertiaHead, inject, ipMatches, isBlank, isBun, isDateCast, isEmptyValue, isEquivalent, isJsonCast, isListenerClass, isListenerTuple, isModel, isQueueable, isQueueableListener, isUnique, isUploadedFileLike, joinDiskPath, keyGenerateHandler, loadRelations, loadRoutesFrom, logger, makeFailedJobProvider, meetsLevel, mergeGroup, mergeLogContext, mergeRecursive, migrationDatePrefix, minimalPage, modelEventName, morphMap, normalizeAddress, normalizeAddresses, normalizeBackoff, normalizeLists, normalizePath, normalizeUri, now, old, openSqlite, optionalCookieJar, optionalSession, orderForBindings, parseArgv, parseBracketKey, parseCookieHeader, parseDateTime, parseKey, parseParameters, parseRuleSpec, parseSignature, passwordVerify, prepareValue, queueConfigDefaults, queueOptionsOf, raw as rawSql, rawWithBindings, redirect, registerHttpCommands, registerKeyGenerateCommand, registerMigrationCommands, registerModelTypesCommand, registerQueueCommands, registerStorageLinkCommand, renderContent, renderError, request, requestScope, resolveArguments, resolveDiskPath, resolveMiddleware, resolveMorphClass, resolveOptions, resourceRoutes, response, restoreJob, restoreValue, retry, roundTrip, route, routeListRows, runConsole, runConsoleAndExit, runMiddleware, runSeeder, sanitize, sendEmailVerificationUsing, sendNotification, serialize, serializeContext, serializeCookie, serializeDate, serializeValue, serve, serveBun, serveNode, servePublicFile, session, setClientAddress, stackFrames, statusFor, statusText, storageLinkHandler, substituteBindings, suggest, summarizeValidation, tap, toNotifiableList, toResponse, toWebRequest, tokenableType, transformLeaves, url, usePaginationResolvers, validateRequiredArguments, value, vite, viteReactRefresh, withHeaders, workerOptionsFrom, writeResponse };
+export { API_ROUTES_STUB, AboutCommand, AbstractPaginator, AccessGate, AddQueuedCookiesToResponse, type AfterCallback, AllMailersFailedError, AlwaysProp, AnonymousNotifiable, Application$9 as Application, ApplicationBuilder, ArgonHasher, type ArgonOptions, type ArgumentDefinition, Arr, ArraySessionHandler, ArrayTransport, Artisan, Attempting, type Attributes$1 as Attributes, type AttributesResolver, Auth, AuthManager, type AuthModel, type AuthModelBase, type AuthModelConstructor, AuthServiceProvider, AuthenticatableModel, Authenticate, AuthenticationError, Authorizable, type AuthorizableConstructor, AuthorizationError, AuthorizationErrorImpl, Authorize, BaseJob, BaseLogger, BasePipeline, BaseRouter, BaseUrlGenerator, Batch$1 as Batch, type BatchAttributes, BatchingUnavailableError, BcryptHasher, type BcryptOptions, type BeforeCallback, BelongsTo, BelongsToMany, BindingResolutionError, Blueprint, type BlueprintCommand, BufferedConsoleOutput, Builder, type BuiltInCast, type BuiltinRule, BuiltinRuleObject, type BunDatabase, BunSqliteDatabase, type BunStatement, Bus, Dispatcher as BusDispatcherImpl, BusError, BusServiceProvider, CACHE_TABLE_MIGRATION, CHAIN, Cache, CacheManager$1 as CacheManager, CacheRateLimiter, Repository as CacheRepositoryImpl, CacheServiceProvider, type Store as CacheStore, CallQueuedHandler, CallQueuedListener, type CanResetPassword, type CanResetPasswordUser, type CastDefinition, type CastsAttributes, type ChainSpec, type CipherName, CircularDependencyError, ClassRegistry$2 as ClassRegistry, ClosureCommand$4 as ClosureCommand, ClosureKernel, Collection$2 as Collection, type Column, type ColumnAttributes, ColumnDefinition, type ColumnInfo, type ColumnRef, type ColumnType, Command$4 as Command, CommandNotFoundError, ComponentNotFoundError, Connection, type ConsoleInput, type ConsoleIo, Kernel as ConsoleKernelImpl, type ConsoleOutput, ConsoleServiceProvider, Container$j as Container, ContainerNotAvailableError, Controller, ControllerMethodNotFoundError, ConvertEmptyStringsToNull, Cookie$1 as Cookie, type CookieDefaults, CookieJar$1 as CookieJar, CookieServiceProvider, CookieSessionHandler, CookieValuePrefix, type CreateMigrationOptions, Crypt, Cursor, type CursorPage, CursorPaginator, type CursorPaginatorOptions, DB, DEFAULT_MESSAGES, DailyRotatingStream, DatabaseBatchRepository, type DatabaseCommandContext, type DatabaseConfig, DatabaseConfigError, DatabaseError, DatabaseFailedJobProvider, DatabaseJob, type DatabaseJobRecord, DatabaseLock, DatabaseManagerImpl, DatabaseNotification, DatabaseNotificationChannel, DatabaseNotificationCollection, DatabaseNotificationsRelation, DatabaseQueue, type DatabaseQueueOptions, DatabaseServiceProvider, DatabaseSessionHandler, DatabaseStore, DatabaseTokenRepository, DatabaseUnavailableError, DecryptError, DeferProp, DiagnosingHealth, type Direction, Dispatchable, type EagerLoadSpec, EloquentUserProvider, EmailVerificationRequest, type Encoded, EncryptCookies, EncryptError, EncryptHistory, Encrypter$2 as Encrypter, EncryptionServiceProvider, EnsureEmailIsVerified, type EnumLike, type ErrorClass, ErrorHandler, Event, Dispatcher$1 as EventDispatcherImpl, type EventKey, type EventListenMap, EventServiceProvider, EventsNeedBusDispatcherError, EventsNeedClassRegistryError, ExceptionsConfiguration, Expression, type Facade$c as Facade, type FacadeStatics$c as FacadeStatics, Factory$b as Factory, type FactoryResult, Failed, FailoverTransport, Faker, FakerOverflowError, FileNotFoundError, FileSessionHandler, FileStore, FilesystemManager, FilesystemServiceProvider, ForeignIdColumnDefinition, ForeignKeyDefinition, FormRequest, FormUploadedFile, Gate, type GateAbility, GateResponse, GeneratorCommand, GenericLock, type GlobalScope, Grammar, type GroupAttributes, type GroupHost, GroupRegistrar, type GuardFactory, HasApiTokens, HasDatabaseNotifications, type HasDatabaseNotificationsModel, type HasFactory, HasMany, HasManyThrough, HasOne, HasOneOrMany, Hash, HashAlgorithmError, type HashInfo, HashManager, type HasherFactory, type HashingConfig, HashingServiceProvider, type Having, type HealthPage, HelpCommand, type HttpCommandOptions, HttpException, Kernel$1 as HttpKernelImpl, HttpRedirectResponse, HttpRedirector, HttpResponseException, HttpResponseFactory, HttpServerError, HttpServiceProvider, Hub, IncomingRequest, type IncomingRequestOptions, type IndexType, Inertia, InertiaError, InertiaHtml, InertiaMiddleware, Response$1 as InertiaPageResponse, ResponseFactory as InertiaResponseFactory, InertiaServiceProvider, type ValidationErrors as InertiaValidationErrors, type InferRuleType, type InferValidatedType, InvalidCacheConfigError, InvalidCastError, InvalidListenerError, InvalidLogLevelError, InvalidRuleParameterError, InvalidSignatureError, InvalidUrlSignatureError, JOBS_TABLE_MIGRATION, JobClassNotFoundError, type JobContext, type JobMiddleware, JobSerializationError, JoinClause, type JoinType, type JsonWhenCallback, KEY_GENERATE_SIGNATURE, type KernelApp, type KeyGenerateIO, LEVEL_SEVERITY, LazyCollection$1 as LazyCollection, type LengthAwarePage, LengthAwarePaginator, ListCommand, type ListenerTuple, type LocalDiskConfig, LocalFilesystem, type LockFactory, LockTimeoutError, Lockout, Log, LogChannelCycleError, LogManager, LogServiceProvider, LogTransport, type LoggedQuery, LogicError, Login, Logout, MIGRATION_CREATE_STUB, MIGRATION_STUB, MIGRATION_UPDATE_STUB, MODEL_EVENTS, Mail, MailManager, MailMessage, type MailMessageAction, MailNotificationChannel, MailQueueUnavailableError, MailServiceProvider, type MailTransporter, MailUnavailableError, Mailable, MailerImpl, MakeCastCommand, MakeCommandCommand, MakeControllerCommand, MakeEventCommand, MakeFactoryCommand, MakeJobCommand, MakeListenerCommand, MakeMailCommand, MakeMiddlewareCommand, MakeModelCommand, MakeNotificationCommand, MakeObserverCommand, MakePolicyCommand, MakeProviderCommand, MakeRequestCommand, MakeResourceCommand, MakeRuleCommand, MakeSeederCommand, MakeTestCommand, type Manifest, type ManifestChunk, ManuallyFailedError, type Many, MassAssignmentError, MaxAttemptsExceededError, MemoryStore, MergeProp, MessageBagImpl, MethodNotAllowedHttpError, MiddlewareConfiguration, MiddlewareNotFoundError, Migration, MigrationCreator, type MigrationRecord, MigrationRepository, type MigrationStatus, Migrator, type MigratorOptions, MissingAppKeyError, MissingModelError, MissingRecipientError, Model, type ModelBuilder, type ModelClass, type ModelConstructor, type ModelEvent, type ModelListener, ModelNotFoundError$1 as ModelNotFoundError, ModelRegistry, type MorphConstraint, MorphMany, MorphOne, MorphTo, MySqlSchemaGrammar, NOTIFICATIONS_TABLE, NOTIFICATIONS_TABLE_MIGRATION, type NewAccessToken, NodeConsoleInput, NodeConsoleOutput, NotDatabaseNotifiableError, NotFoundHttpError, Notifiable, type NotifiableConstructor, Notification$1 as Notification, Dispatcher$2 as NotificationDispatcherImpl, NotificationDispatcherUnavailableError, NotificationFacade, NotificationQueueUnavailableError, NotificationsServiceProvider, NullFailedJobProvider, NullLogger, NullQueue, OPERATORS, OnceProp, type OptionDefinition, type OptionValue$4 as OptionValue, OptionalProp, type Order, PERSONAL_ACCESS_TOKENS_MIGRATION, type PagePropsFrom, type PaginationLink, Paginator, type PaginatorOptions, type ParsedInput, type ParsedRule, type ParsedSetCookie, type ParsedSignature, Password, PasswordBroker, PasswordBrokerManager, PasswordReset, PasswordRule, PathTraversalError, PendingBatch, PendingChain, PendingDispatch, PersonalAccessToken, PinoLogger, PipelineError, PipelineServiceProvider, Pivot, type PivotIds, type PlainNotificationMail, type PolicyClass, PostgresSchemaGrammar, type PreloadAttributesResolver, PropsResolver, ProviderBootError, ProviderRegisterError, QUEUE_JOB, Builder$1 as QueryBuilder, QueryError, Queue$1 as Queue, QueueBase, type QueueCommandContext, QueueError, type QueueJobPayload, QueueManager, QueueServiceProvider, QueueUnavailableError, Queueable, QueuedConsoleInput, QueuedMailSender, type QueuedMailableFactory, RESTART_CACHE_KEY, RateLimiter, type RawResult, type RecipientOverrides, RedirectIfAuthenticated, RedisJob, RedisLock, RedisQueue, type RedisQueueOptions, RedisRepository, type RedisSessionClient, RedisSessionHandler, RedisStore, RedisTaggedStore, type ReferentialAction, Registered, type RegisteredModel, Relation, type RelationConstraint, type RelationNames, RelationNotFoundError, RelationNotLoadedError, type RelationValue, type RenderCallback, type RenderedContent, type ReplStarter, type ReportCallback, Repository$1 as Repository, ResetPassword, type ResetPasswordMail, type ResolvedMiddleware, type ResolvedServeOptions, type ResourceMethod, type ResourceRoute, type RollbackOptions, Route$1 as Route, type RouteAttributes, type RouteBinder, RouteDefinition, type RouteFileCallback, type RouteHandler, type RouteListFilters, type RouteListRow, RouteModelNotFoundError, RouteModelResolverImpl, RouteNotDefinedError, type RouteStage, RoutesNotifications, RoutingError, type RoutingOptions, RoutingServiceProvider, Rule, type RuleContext, type RunningServer, type Runtime, type S3ClientLike, type S3DiskConfig, S3Filesystem, SSR_RENDER_FAILED, STORAGE_LINK_SIGNATURE, Schedule, ScheduleImpl, ScheduleListCommand, ScheduleNameRequiredError, ScheduleRunCommand, ScheduleWorkCommand, type ScheduleWorkOptions, ScheduledEventImpl, Schema, SchemaBuilder, SchemaBuilderToken, SchemaGrammar, type Scope, type ScopeCallback, type ScopeStatic, type Scopes, type ScrollMetadata, ScrollProp, Seeder, type SeederClass, type SelectColumn, SendEmailVerificationNotification, SendQueuedMailable, SendQueuedNotifications, type Serialized, type SerializedObject, type ServeOptions, ServiceProvider$t as ServiceProvider, SessionFacade as Session, type SessionConfig, SessionGuard, type SessionGuardOptions, type SessionHandlerFactory, SessionManager, SessionMessageBag, SessionServiceProvider, Store$1 as SessionStore, type SharedPropsFrom, type SimplePage, type SmtpConfig, SmtpTransport, SoftDeletingScope, type SpawnResult, type Spawner, SqliteSchemaGrammar, SsrError, type SsrFailure, HttpGateway as SsrHttpGateway, type StackFrame, StackLogger, StartSession, type State, type StateContext, Storage, type StoredBatchOptions, Str, type StringPipeResolver, type SyncChanges, SyncJob, SyncQueue, type TagAttributes, TagsNotSupportedError, TestCommand, ThrottleRequests, ThrottleRequestsError, TimeoutExceededError, TinkerCommand, type TinkerOptions, type TinkerRepl, TokenGuard, type TokenGuardOptions, TokenMismatchError, TokenRepository, type TransporterFactory, TrimStrings, TypeGenerator, type TypeGeneratorOptions, type TypedRedirector, UNIQUE_LOCK, USERS_TABLE_MIGRATION, UniqueJobsNeedCacheError, UniqueLock, type UniqueLockSpec, UnknownCacheDriverError, UnknownCacheStoreError, UnknownDiskError, UnknownFilesystemDriverError, UnknownLogChannelError, UnknownLogDriverError, UnknownMailTransportError, UnknownMailerError, UnknownNotificationChannelError, UnknownQueueConnectionError, UnknownQueueDriverError, UnknownValidationRuleError, UnrenderableNotificationDataError, UnrenderableNotificationMailError, UnsupportedCipherError, UnsupportedOperationError, type UriParameter, UrlGenerationError, type UrlResolver, type UserProviderFactory, ValidateSignature, Validated, ValidationErrorImpl, ValidationException, ValidationFactoryImpl, ValidationServiceProvider, Validator, ValidatorImpl, type VerifiableUser, Verified, VerifyCsrfToken, VerifyEmail, type VerifyEmailMail, ViewFactoryUnavailableError, Vite, ViteError, ViteHtml, WORKER_DISCOVERY_DIRECTORIES, type Where, type WhereArgs, type WhereBoolean, WithoutOverlapping, Worker, type WorkerListener, type WorkerOptions, __, abort, abortIf, abortUnless, addApiRouting, allowGuests, app, applyExceptionCallbacks, applyMiddlewareCallbacks, applyReplacements, auth, back, bcrypt, builtinRules, bunRuntime, cache, castGet, castSet, classNameOf, clientAddress, collect, columnKey, compareRoutes, config, contentDisposition, cookie, createDailyChannel, createDialect, createPayload, createSingleChannel, createStderrChannel, createToken, csrfToken, currentContainer, currentLogContext, currentRequest, currentVite, databaseConfigDefaults, debugPage, decodePayload, decrypt, defaultAttributeName, defaultLockFactory, defaultProviders, defaultWorkerOptions, delaySeconds, describeError, deserialize, detectRuntime, discoverClasses, discoverFactories, discoverJobs, discoverListeners, discoverPolicies, dispatch, dispatchRoute, dispatchSync, encodePayload, encrypt, enumValues, env, errorBagFrom, errors, escapeHtml, event, exceedsJsonDepth, expandWildcardKeys, extensionFromMime, facade, fake, filterRouteList, formatAddress, formatDate, formatDateTime, formatRouteList, formatTimestamp, fromEntries, generateAppKey, generateModelTypes, getMorphAlias, getMorphedModel, guessTable, hashInfo, healthResponse, inertia, inertiaBody, inertiaHead, inject, ipMatches, isBlank, isBun, isDateCast, isEmptyValue, isEquivalent, isJsonCast, isListenerClass, isListenerTuple, isModel, isQueueable, isQueueableListener, isUnique, isUploadedFileLike, joinDiskPath, keyGenerateHandler, loadRelations, loadRoutesFrom, logger, makeFailedJobProvider, meetsLevel, mergeGroup, mergeLogContext, mergeRecursive, migrationDatePrefix, minimalPage, modelEventName, morphMap, normalizeAddress, normalizeAddresses, normalizeBackoff, normalizeLists, normalizePath, normalizeUri, now, old, openSqlite, optionalCookieJar, optionalSession, orderForBindings, parseArgv, parseBracketKey, parseCookieHeader, parseDateTime, parseKey, parseParameters, parseRuleSpec, parseSignature, passwordVerify, prepareValue, queueConfigDefaults, queueOptionsOf, raw as rawSql, rawWithBindings, redirect, registerHttpCommands, registerKeyGenerateCommand, registerMigrationCommands, registerModelTypesCommand, registerQueueCommands, registerStorageLinkCommand, renderContent, renderError, request, requestScope, resolveArguments, resolveDiskPath, resolveMiddleware, resolveMorphClass, resolveOptions, resourceRoutes, response, restoreJob, restoreValue, retry, roundTrip, route, routeListRows, runConsole, runConsoleAndExit, runMiddleware, runSeeder, sanitize, sendEmailVerificationUsing, sendNotification, serialize, serializeContext, serializeCookie, serializeDate, serializeValue, serve, serveBun, serveNode, servePublicFile, session, setClientAddress, stackFrames, statusFor, statusText, storageLinkHandler, substituteBindings, suggest, summarizeValidation, tap, toNotifiableList, toResponse, toWebRequest, tokenableType, transformLeaves, url, usePaginationResolvers, validateRequiredArguments, value, vite, viteReactRefresh, withHeaders, workerOptionsFrom, writeResponse };