@orieljs/framework 0.1.0-alpha.4 → 0.1.0-alpha.5

package/dist/index.js

@@ -22,7 +22,7 @@ import {
   renderToString,
   styleString,
   view
-} from "./chunk-3DETYZMZ.js";
+} from "./chunk-A5XRLEWM.js";
 import {
   API_ROUTES_STUB,
   Application as Application2,
@@ -60,6 +60,7 @@ import {
   NotificationFake,
   On,
   PERSISTENT_MIDDLEWARE,
+  Pagination,
   PendingEvent,
   PropertyNotUpdatableError,
   ProviderBootError,
@@ -74,6 +75,7 @@ import {
   Vite,
   ViteError,
   ViteHtml,
+  WithPagination,
   abort,
   abortIf,
   abortUnless,
@@ -129,7 +131,7 @@ import {
   vite,
   viteReactRefresh,
   writeResponse
-} from "./chunk-SBZQ6L3Z.js";
+} from "./chunk-WNJP46B7.js";
 import {
   Arr,
   BindingResolutionError,
@@ -147,12 +149,13 @@ import {
   config,
   currentContainer,
   facade,
+  fileType_exports,
   inject,
   now,
   retry,
   tap,
   value
-} from "./chunk-DCI2T7WJ.js";
+} from "./chunk-PM5YTG57.js";
 import {
   Application,
   AuthFactory,
@@ -179,6 +182,7 @@ import {
   LogManager,
   MailManager,
   NotificationDispatcher,
+  PaginationState,
   PasswordBroker,
   PipelineFactory,
   QueueManager,
@@ -193,7 +197,7 @@ import {
   ValidationFactory,
   ViewFactory,
   token
-} from "./chunk-WSGWYXAO.js";
+} from "./chunk-BSQKOLSK.js";
 
 // ../Auth/dist/index.js
 import { createHash } from "crypto";
@@ -1377,6 +1381,39 @@ var AccessGate = class _AccessGate {
     return registered === void 0 ? [cls.name] : [baseName(registered), cls.name];
   }
 };
+var list = (abilities) => typeof abilities === "string" ? [abilities] : [...abilities];
+function Authorizable(Base) {
+  return class AuthorizableUser extends Base {
+    /** Whether the user has the ability (every one, for a list); the arguments go to the policy or ability callback. */
+    async can(abilities, ...args) {
+      const gate = inject(Gate).forUser(this);
+      for (const ability of list(abilities)) if (!await gate.allows(ability, ...args)) return false;
+      return true;
+    }
+    /** Whether the user has any of the abilities. */
+    async canAny(abilities, ...args) {
+      return inject(Gate).forUser(this).any(list(abilities), ...args);
+    }
+    /** Whether the user lacks the ability (any one, for a list). */
+    async cant(abilities, ...args) {
+      return !await this.can(abilities, ...args);
+    }
+    /** The same as cant(). */
+    cannot(abilities, ...args) {
+      return this.cant(abilities, ...args);
+    }
+  };
+}
+var Controller = class {
+  /** Authorizes the ability for the signed-in user (the Gate's authorize()). */
+  async authorize(ability, ...args) {
+    return inject(Gate).authorize(ability, ...args);
+  }
+  /** Authorizes the ability for the given user (Gate.forUser(user).authorize()). */
+  async authorizeForUser(user, ability, ...args) {
+    return inject(Gate).forUser(user).authorize(ability, ...args);
+  }
+};
 var Authorize = class {
   #gate = inject(Gate);
   async handle(request2, next, ability, ...models) {
@@ -1618,7 +1655,7 @@ async function discoverPolicies(directory, gate) {
   return found;
 }
 var Auth = facade(AuthFactory);
-var Gate2 = facade(Gate);
+var Gate4 = facade(Gate);
 var Password = facade(PasswordBroker, {
   broker: (name) => inject(PasswordBrokerManager).broker(name)
 });
@@ -1689,7 +1726,7 @@ var QUEUE_OPTIONS = ["connection", "queue", "delay", "tries", "backoff", "timeou
 function isQueueable(job) {
   if (typeof job !== "object" || job === null) return false;
   const members = job;
-  if (members[SHOULD_QUEUE] === true) return true;
+  if (members.shouldQueue === true || members[SHOULD_QUEUE] === true) return true;
   if (QUEUE_OPTIONS.some((option) => members[option] !== void 0)) return true;
   return typeof members.uniqueId === "function" || typeof members.retryUntil === "function";
 }
@@ -1900,9 +1937,9 @@ var Dispatcher = class {
   }
   #afterResponseList() {
     const owner = currentContainer() ?? this.container;
-    let list3 = this.#afterResponse.get(owner);
-    if (list3 === void 0) this.#afterResponse.set(owner, list3 = []);
-    return list3;
+    let list4 = this.#afterResponse.get(owner);
+    if (list4 === void 0) this.#afterResponse.set(owner, list4 = []);
+    return list4;
   }
   /** Runs the job (like dispatchSync) after the response is sent, or after the current queued job. */
   dispatchAfterResponse(job) {
@@ -2051,6 +2088,10 @@ var Dispatchable = class {
   }
 };
 var Queueable = class extends Dispatchable {
+  /** ShouldQueue's marker, so subclasses may write `implements ShouldQueue` without the field. */
+  get shouldQueue() {
+    return true;
+  }
 };
 Object.defineProperty(Queueable.prototype, SHOULD_QUEUE, { value: true });
 function dispatch(job) {
@@ -2921,8 +2962,8 @@ var RedisRepository = class extends Repository2 {
   redisStore;
   redis;
   tags(names) {
-    const list3 = Array.isArray(names) ? names : [names];
-    const taggedStore = this.redisStore.tags(list3);
+    const list4 = Array.isArray(names) ? names : [names];
+    const taggedStore = this.redisStore.tags(list4);
     const prefix = this.redisStore.getPrefix();
     return new Repository2(taggedStore, (_store, name, seconds, owner) => new RedisLock(this.redis, prefix + name, seconds, owner));
   }
@@ -3765,9 +3806,12 @@ export class {{ class }} extends Dispatchable {
 }
 `;
 var MAIL_STUB = `import { Mailable } from '@orieljs/framework'
-import type { Content, Envelope } from '@orieljs/framework/contracts'
+import type { Content, Envelope, ShouldQueue } from '@orieljs/framework/contracts'
+
+export class {{ class }} extends Mailable implements ShouldQueue {
+  /** Sent by the queue worker (node oriel queue:work): remove this line and \`implements ShouldQueue\` to send it right away. */
+  readonly shouldQueue = true
 
-export class {{ class }} extends Mailable {
   override async envelope(): Promise<Envelope> {
     return { subject: '{{ subject }}' }
   }
@@ -3778,9 +3822,12 @@ export class {{ class }} extends Mailable {
 }
 `;
 var NOTIFICATION_STUB = `import { MailMessage, Notification } from '@orieljs/framework'
-import type { Notifiable } from '@orieljs/framework/contracts'
+import type { Notifiable, ShouldQueue } from '@orieljs/framework/contracts'
+
+export class {{ class }} extends Notification implements ShouldQueue {
+  /** Sent by the queue worker (node oriel queue:work): remove this line and \`implements ShouldQueue\` to send it right away. */
+  readonly shouldQueue = true
 
-export class {{ class }} extends Notification {
   via(_notifiable: Notifiable): string[] {
     return ['mail']
   }
@@ -4527,7 +4574,7 @@ var SHOULD_QUEUE2 = /* @__PURE__ */ Symbol.for("oriel:bus.shouldQueue");
 var QUEUE_OPTIONS2 = ["connection", "queue", "delay", "tries", "backoff", "timeout"];
 function isQueueable2(job) {
   const members = job;
-  if (members[SHOULD_QUEUE2] === true) return true;
+  if (members.shouldQueue === true || members[SHOULD_QUEUE2] === true) return true;
   if (QUEUE_OPTIONS2.some((option) => members[option] !== void 0)) return true;
   return typeof members.uniqueId === "function" || typeof members.retryUntil === "function";
 }
@@ -5623,14 +5670,17 @@ var LengthAwarePaginator = class extends AbstractPaginator {
   nextPageUrl() {
     return this.hasMorePages() ? this.url(this.currentPageValue + 1) : null;
   }
-  /** The page links Laravel renders: previous, the page window with '...' gaps, next. */
+  /**
+   * The page links Laravel renders: previous, the page window with '...' gaps, next. The labels are plain text
+   * ("« Previous", "Next »"), not Laravel's `&laquo;` entities, so a page can print them as text.
+   */
   linkCollection() {
-    const links = [{ url: this.previousPageUrl(), label: "&laquo; Previous", active: false }];
+    const links = [{ url: this.previousPageUrl(), label: "\xAB Previous", active: false }];
     for (const element of this.elements()) {
       if (element === "...") links.push({ url: null, label: "...", active: false });
       else for (const [page, url2] of element) links.push({ url: url2, label: String(page), active: page === this.currentPageValue });
     }
-    links.push({ url: this.nextPageUrl(), label: "Next &raquo;", active: false });
+    links.push({ url: this.nextPageUrl(), label: "Next \xBB", active: false });
     return links;
   }
   /** Laravel's UrlWindow: the first pages, the slider around the current page and the last pages, with '...' between. */
@@ -5752,6 +5802,9 @@ var EMPTY = sql2.raw("");
 var isSqlFragment = (value2) => typeof value2 === "object" && value2 !== null && typeof value2.toOperationNode === "function";
 var join8 = (parts, separator = ", ") => sql2.join(parts, sql2.raw(separator));
 var clauses = (parts) => join8(parts.filter((part) => part !== void 0), " ");
+function likeToGlob(pattern) {
+  return pattern.replaceAll("*", "[*]").replaceAll("?", "[?]").replaceAll("%", "*").replaceAll("_", "?");
+}
 var Grammar = class {
   constructor(driver) {
     this.driver = driver;
@@ -5832,6 +5885,8 @@ var Grammar = class {
       }
       case "null":
         return sql2`${this.wrap(where.column)} ${sql2.raw(where.not ? "is not null" : "is null")}`;
+      case "like":
+        return this.compileWhereLike(where);
       case "between":
         return sql2`${this.wrap(where.column)} ${sql2.raw(where.not ? "not between" : "between")} ${this.parameter(where.values[0])} and ${this.parameter(where.values[1])}`;
       case "column":
@@ -5844,6 +5899,18 @@ var Grammar = class {
         return rawWithBindings(where.sql, where.bindings.map((value2) => this.prepare(value2)));
     }
   }
+  /**
+   * whereLike() per driver, as Laravel 12's grammars: Postgres compares the column as text with ilike (like when
+   * case-sensitive); MySQL uses like (like binary); SQLite uses like, or glob with the pattern translated.
+   */
+  compileWhereLike(where) {
+    const not = where.not ? "not " : "";
+    const column = this.wrap(where.column);
+    if (this.driver === "pgsql") return sql2`${column}::text ${sql2.raw(`${not}${where.caseSensitive ? "like" : "ilike"}`)} ${this.parameter(where.value)}`;
+    if (this.driver === "mysql") return sql2`${column} ${sql2.raw(`${not}${where.caseSensitive ? "like binary" : "like"}`)} ${this.parameter(where.value)}`;
+    if (where.caseSensitive) return sql2`${column} ${sql2.raw(`${not}glob`)} ${this.parameter(likeToGlob(where.value))}`;
+    return sql2`${column} ${sql2.raw(`${not}like`)} ${this.parameter(where.value)}`;
+  }
   compileJoin(joinClause) {
     if (joinClause.joinType === "cross") return sql2`cross join ${this.wrapTable(joinClause.table)}`;
     return sql2`${sql2.raw(joinClause.joinType)} join ${this.wrapTable(joinClause.table)} ${this.compileWheres(joinClause.wheres, "on") ?? EMPTY}`;
@@ -6096,6 +6163,25 @@ var Builder = class _Builder {
     this.wheres.push({ type: "between", column, values, not: true, boolean: "and" });
     return this;
   }
+  /**
+   * Laravel's whereLike(): the value is the pattern, `%` and `_` included (`whereLike('title', `%${term}%`)`).
+   * Case-insensitive unless caseSensitive: ilike on Postgres, like on MySQL and SQLite (their like already ignores
+   * case: MySQL through the column's collation, SQLite for ASCII letters). Case-sensitive is like on Postgres,
+   * like binary on MySQL and glob on SQLite.
+   */
+  whereLike(column, value2, caseSensitive = false, boolean = "and", not = false) {
+    this.wheres.push({ type: "like", column, value: value2, caseSensitive, not, boolean });
+    return this;
+  }
+  orWhereLike(column, value2, caseSensitive = false) {
+    return this.whereLike(column, value2, caseSensitive, "or");
+  }
+  whereNotLike(column, value2, caseSensitive = false, boolean = "and") {
+    return this.whereLike(column, value2, caseSensitive, boolean, true);
+  }
+  orWhereNotLike(column, value2, caseSensitive = false) {
+    return this.whereNotLike(column, value2, caseSensitive, "or");
+  }
   /** Compares two columns: whereColumn('updated_at', '>', 'created_at'). */
   whereColumn(first, operatorOrSecond, second, boolean = "and") {
     const [operator, other] = second === void 0 ? ["=", operatorOrSecond] : [operatorOrSecond, second];
@@ -6219,10 +6305,16 @@ var Builder = class _Builder {
     this.lockMode = "share";
     return this;
   }
-  /** Calls callback(this, value) when value is truthy (or the default callback otherwise). */
   when(value2, callback, otherwise) {
-    if (value2) callback(this, value2);
-    else otherwise?.(this, value2);
+    const resolved = typeof value2 === "function" ? value2(this) : value2;
+    if (resolved) callback(this, resolved);
+    else otherwise?.(this, resolved);
+    return this;
+  }
+  unless(value2, callback, otherwise) {
+    const resolved = typeof value2 === "function" ? value2(this) : value2;
+    if (!resolved) callback(this, resolved);
+    else otherwise?.(this, resolved);
     return this;
   }
   tap(callback) {
@@ -7909,6 +8001,18 @@ var Builder2 = class extends Builder {
   whereBetween(column, values) {
     return super.whereBetween(column, values);
   }
+  whereLike(column, value2, caseSensitive = false, boolean = "and", not = false) {
+    return super.whereLike(column, value2, caseSensitive, boolean, not);
+  }
+  orWhereLike(column, value2, caseSensitive = false) {
+    return super.orWhereLike(column, value2, caseSensitive);
+  }
+  whereNotLike(column, value2, caseSensitive = false, boolean = "and") {
+    return super.whereNotLike(column, value2, caseSensitive, boolean);
+  }
+  orWhereNotLike(column, value2, caseSensitive = false) {
+    return super.orWhereNotLike(column, value2, caseSensitive);
+  }
   orderBy(column, direction = "asc") {
     return super.orderBy(column, direction);
   }
@@ -9472,6 +9576,14 @@ var Model = class _Model {
     const query = this.query();
     return Reflect.apply(query.where, query, args);
   }
+  static when(...args) {
+    const query = this.query();
+    return Reflect.apply(query.when, query, args);
+  }
+  static unless(...args) {
+    const query = this.query();
+    return Reflect.apply(query.unless, query, args);
+  }
   static whereKey(id) {
     return this.query().whereKey(id);
   }
@@ -9490,6 +9602,13 @@ var Model = class _Model {
   static whereBetween(column, values) {
     return this.query().whereBetween(column, values);
   }
+  /** Post.whereLike('title', `%${term}%`): case-insensitive unless caseSensitive (see the query builder's whereLike()). */
+  static whereLike(column, value2, caseSensitive = false) {
+    return this.query().whereLike(column, value2, caseSensitive);
+  }
+  static whereNotLike(column, value2, caseSensitive = false) {
+    return this.query().whereNotLike(column, value2, caseSensitive);
+  }
   static whereColumn(first, operatorOrSecond, second) {
     return this.query().whereColumn(first, operatorOrSecond, second);
   }
@@ -9675,8 +9794,8 @@ var Model = class _Model {
   /** Guarded names match case-insensitively: SQLite and MySQL column names are case-insensitive. */
   isGuarded(key) {
     if (this.guarded.length === 0) return false;
-    const lower = key.toLowerCase();
-    return this.guarded.some((guarded) => guarded === "*" || guarded.toLowerCase() === lower);
+    const lower2 = key.toLowerCase();
+    return this.guarded.some((guarded) => guarded === "*" || guarded.toLowerCase() === lower2);
   }
   totallyGuarded() {
     return !_Model.isUnguarded() && this.fillable.length === 0 && this.guarded.length === 1 && this.guarded[0] === "*";
@@ -10448,6 +10567,90 @@ var Pivot = class extends Model {
   incrementing = false;
   timestamps = false;
 };
+var DatabaseNotification = class extends Model {
+  table = "notifications";
+  keyType = "string";
+  incrementing = false;
+  guarded = [];
+  casts = { data: "array", read_at: "datetime" };
+  /** The model the notification was sent to. */
+  notifiable() {
+    return this.morphTo("notifiable");
+  }
+  /** Sets read_at to now and saves, unless it is already read. */
+  async markAsRead() {
+    if (this.unread()) await this.forceFill({ read_at: this.freshTimestamp() }).save();
+  }
+  /** Clears read_at and saves, unless it is already unread. */
+  async markAsUnread() {
+    if (this.read()) await this.forceFill({ read_at: null }).save();
+  }
+  read() {
+    return this.read_at !== null && this.read_at !== void 0;
+  }
+  unread() {
+    return !this.read();
+  }
+  /** `query.read()`: only read notifications. */
+  static scopeRead(query) {
+    return query.whereNotNull("read_at");
+  }
+  /** `query.unread()`: only unread notifications. */
+  static scopeUnread(query) {
+    return query.whereNull("read_at");
+  }
+};
+var DatabaseNotificationCollection = class extends Collection {
+  /** Marks every notification as read (one save each, as in Laravel). */
+  async markAsRead() {
+    for (const notification of this.all()) await notification.markAsRead();
+  }
+  /** Marks every notification as unread. */
+  async markAsUnread() {
+    for (const notification of this.all()) await notification.markAsUnread();
+  }
+};
+var DatabaseNotificationsRelation = class extends MorphMany {
+  async get() {
+    return new DatabaseNotificationCollection(await this.runSelect());
+  }
+  async getResults() {
+    const key = this.getParentKey();
+    return key === null || key === void 0 ? new DatabaseNotificationCollection() : this.get();
+  }
+  initRelation(models, relation) {
+    for (const model of models) model.setRelation(relation, new DatabaseNotificationCollection());
+    return models;
+  }
+  match(models, results, relation) {
+    const dictionary = this.buildDictionary(results);
+    for (const model of models) {
+      model.setRelation(relation, new DatabaseNotificationCollection(dictionary.get(String(model.getAttribute(this.localKey))) ?? []));
+    }
+    return models;
+  }
+};
+function HasDatabaseNotifications(Base) {
+  class WithDatabaseNotifications extends Base {
+    notifications() {
+      const related = this.newRelatedInstance(DatabaseNotification);
+      return new DatabaseNotificationsRelation(
+        related,
+        this,
+        related.qualifyColumn("notifiable_type"),
+        related.qualifyColumn("notifiable_id"),
+        this.getKeyName()
+      ).latest();
+    }
+    readNotifications() {
+      return this.notifications().whereNotNull("read_at");
+    }
+    unreadNotifications() {
+      return this.notifications().whereNull("read_at");
+    }
+  }
+  return WithDatabaseNotifications;
+}
 var Migration = class {
   /** The connection to run on (default: the default connection). */
   connection = void 0;
@@ -10858,7 +11061,7 @@ var TypeGenerator = class {
   }
 };
 var text = (value2) => typeof value2 === "string" && value2 !== "" ? value2 : void 0;
-var list = (value2) => Array.isArray(value2) ? value2.map(String) : text(value2) ? [String(value2)] : [];
+var list2 = (value2) => Array.isArray(value2) ? value2.map(String) : text(value2) ? [String(value2)] : [];
 var integer = (value2) => {
   const number3 = Number(value2 ?? 0);
   return Number.isInteger(number3) && number3 > 0 ? number3 : 0;
@@ -10874,7 +11077,7 @@ function confirmToProceed(context, command) {
   return false;
 }
 function migrationPaths(context, command) {
-  const paths = list(command.option("path"));
+  const paths = list2(command.option("path"));
   if (!paths.length) return [context.app.databasePath("migrations")];
   return paths.map((path) => isAbsolute(path) ? path : context.app.basePath(path));
 }
@@ -11462,9 +11665,21 @@ function currentRequest2() {
     return void 0;
   }
 }
+function paginationState() {
+  const container = currentContainer();
+  if (!container?.bound(PaginationState)) return void 0;
+  try {
+    return container.make(PaginationState);
+  } catch (error) {
+    if (error instanceof BindingResolutionError) return void 0;
+    throw error;
+  }
+}
 function usePaginationResolvers() {
-  AbstractPaginator.currentPathResolver = () => currentRequest2()?.url() ?? "/";
+  AbstractPaginator.currentPathResolver = () => paginationState()?.currentPath() ?? currentRequest2()?.url() ?? "/";
   AbstractPaginator.currentPageResolver = (pageName) => {
+    const state = paginationState()?.currentPage(pageName);
+    if (state !== void 0) return state;
     const page = Number(currentRequest2()?.input(pageName));
     return Number.isInteger(page) && page >= 1 ? page : 1;
   };
@@ -11713,8 +11928,8 @@ function decrypt(payload, unserialize = true) {
   return inject(Encrypter).decrypt(payload, unserialize);
 }
 function previousKeys(value2) {
-  const list3 = Array.isArray(value2) ? value2 : typeof value2 === "string" ? value2.split(",") : [];
-  return list3.map((key) => String(key).trim()).filter((key) => key !== "");
+  const list4 = Array.isArray(value2) ? value2 : typeof value2 === "string" ? value2.split(",") : [];
+  return list4.map((key) => String(key).trim()).filter((key) => key !== "");
 }
 var EncryptionServiceProvider = class extends ServiceProvider {
   register() {
@@ -11846,8 +12061,8 @@ var SHOULD_QUEUE22 = /* @__PURE__ */ Symbol.for("oriel:bus.shouldQueue");
 var QUEUE_OPTION_KEYS = ["connection", "queue", "delay", "tries", "backoff", "timeout"];
 function isQueueableListener(cls, instance) {
   const members = instance;
-  if (members[SHOULD_QUEUE22] === true) return true;
   const statics = cls;
+  if (members.shouldQueue === true || statics.shouldQueue === true || members[SHOULD_QUEUE22] === true) return true;
   if (QUEUE_OPTION_KEYS.some((key) => members[key] !== void 0 || statics[key] !== void 0)) return true;
   return typeof members.uniqueId === "function" || typeof members.retryUntil === "function" || typeof statics.uniqueId === "function" || typeof statics.retryUntil === "function";
 }
@@ -11892,9 +12107,9 @@ var Dispatcher2 = class {
       throw new InvalidListenerError(label);
     }
     for (const event2 of Array.isArray(events) ? events : [events]) {
-      const list3 = this.listeners.get(event2) ?? [];
-      list3.push(listener);
-      this.listeners.set(event2, list3);
+      const list4 = this.listeners.get(event2) ?? [];
+      list4.push(listener);
+      this.listeners.set(event2, list4);
     }
   }
   hasListeners(event2) {
@@ -11907,7 +12122,7 @@ var Dispatcher2 = class {
   /** Introspection for the event:list command. Not part of the EventDispatcher contract. */
   registeredEvents() {
     const rows = [];
-    for (const [key, list3] of this.listeners) rows.push({ event: nameOf(key), listeners: list3.length });
+    for (const [key, list4] of this.listeners) rows.push({ event: nameOf(key), listeners: list4.length });
     return rows.sort((a, b) => a.event.localeCompare(b.event));
   }
   subscribe(subscriber) {
@@ -11951,8 +12166,8 @@ var Dispatcher2 = class {
     const exact = [...this.listeners.get(key) ?? []];
     const wildcardLists = typeof key === "string" ? this.wildcardPatternsFor(key).map((pattern) => [...this.listeners.get(pattern) ?? []]) : [];
     for (const listener of exact) yield { listener, wildcard: false };
-    for (const list3 of wildcardLists) {
-      for (const listener of list3) yield { listener, wildcard: true };
+    for (const list4 of wildcardLists) {
+      for (const listener of list4) yield { listener, wildcard: true };
     }
   }
   wildcardPatternsFor(event2) {
@@ -12039,6 +12254,7 @@ import { dirname as dirname4, extname as extname2, resolve as resolve2 } from "p
 import { Readable } from "stream";
 import { pipeline } from "stream/promises";
 import { resolve, sep as sep3 } from "path";
+import { posix } from "path";
 import {
   CopyObjectCommand,
   DeleteObjectCommand,
@@ -12109,24 +12325,54 @@ var MIME_TYPES = {
   zip: "application/zip",
   gz: "application/gzip",
   tar: "application/x-tar",
+  "7z": "application/x-7z-compressed",
+  rar: "application/vnd.rar",
+  epub: "application/epub+zip",
+  rtf: "application/rtf",
+  doc: "application/msword",
+  docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+  xls: "application/vnd.ms-excel",
+  xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+  ppt: "application/vnd.ms-powerpoint",
+  pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+  odt: "application/vnd.oasis.opendocument.text",
+  ods: "application/vnd.oasis.opendocument.spreadsheet",
+  odp: "application/vnd.oasis.opendocument.presentation",
   png: "image/png",
   jpg: "image/jpeg",
   jpeg: "image/jpeg",
   gif: "image/gif",
   webp: "image/webp",
+  avif: "image/avif",
   svg: "image/svg+xml",
   ico: "image/x-icon",
   bmp: "image/bmp",
+  tif: "image/tiff",
+  tiff: "image/tiff",
+  heic: "image/heic",
+  heif: "image/heif",
   mp3: "audio/mpeg",
+  m4a: "audio/mp4",
   wav: "audio/wav",
+  ogg: "audio/ogg",
+  oga: "audio/ogg",
+  opus: "audio/ogg",
+  flac: "audio/flac",
+  aac: "audio/aac",
   mp4: "video/mp4",
+  mov: "video/quicktime",
   webm: "video/webm",
+  ogv: "video/ogg",
+  avi: "video/x-msvideo",
   woff: "font/woff",
   woff2: "font/woff2",
-  ttf: "font/ttf"
+  ttf: "font/ttf",
+  otf: "font/otf",
+  wasm: "application/wasm"
 };
 function mimeFromExtension(extension) {
-  return MIME_TYPES[extension.replace(/^\./, "").toLowerCase()];
+  const key = extension.replace(/^\./, "").toLowerCase();
+  return Object.hasOwn(MIME_TYPES, key) ? MIME_TYPES[key] : void 0;
 }
 function resolveDiskPath(root, path) {
   const resolvedRoot = resolve(root);
@@ -12206,7 +12452,7 @@ var LocalFilesystem = class {
   async putFileAs(directory, file, name, options) {
     const path = joinDiskPath(directory, name);
     const bytes = new Uint8Array(await file.arrayBuffer());
-    await this.put(path, bytes, { mimeType: file.mimeType, ...options });
+    await this.put(path, bytes, options);
     return path;
   }
   async delete(paths) {
@@ -12371,27 +12617,37 @@ var S3Filesystem = class {
     const response2 = await this.getObject(path);
     return response2.Body.transformToWebStream();
   }
+  /** Sends the type of the path when the options name none (Laravel's S3 adapter detects one too). */
   async put(path, contents, options) {
     const body = contents instanceof ReadableStream ? await collectStream(contents) : contents;
-    await this.client.send(
-      new PutObjectCommand({
-        Bucket: this.config.bucket,
-        Key: path,
-        Body: body,
-        ContentType: options?.mimeType,
-        ACL: options?.visibility === "public" ? "public-read" : void 0
-      })
-    );
+    await this.putObject(path, body, options?.mimeType ?? mimeFromExtension(posix.extname(path)), options);
     return true;
   }
   async putFile(directory, file, options) {
     return this.putFileAs(directory, file, uniqueFileName(file.extension()), options);
   }
+  /**
+   * Sends the upload's own type: its extension(), which follows what a request upload's bytes show (the client's claim
+   * counts only where extension() keeps it). Never the MIME type the client sent as such, nor the name it is stored
+   * under (an app may name it after the client's file name): S3, or a CDN in front of it, serves the object with this
+   * type. An upload of no known type is sent with none (served as binary).
+   */
   async putFileAs(directory, file, name, options) {
     const path = joinDiskPath(directory, name);
-    await this.put(path, new Uint8Array(await file.arrayBuffer()), { mimeType: file.mimeType, ...options });
+    await this.putObject(path, new Uint8Array(await file.arrayBuffer()), options?.mimeType ?? mimeFromExtension(file.extension()), options);
     return path;
   }
+  async putObject(path, body, contentType, options) {
+    await this.client.send(
+      new PutObjectCommand({
+        Bucket: this.config.bucket,
+        Key: path,
+        Body: body,
+        ContentType: contentType,
+        ACL: options?.visibility === "public" ? "public-read" : void 0
+      })
+    );
+  }
   async delete(paths) {
     for (const path of Array.isArray(paths) ? paths : [paths]) {
       await this.client.send(new DeleteObjectCommand({ Bucket: this.config.bucket, Key: path }));
@@ -13814,8 +14070,8 @@ var InertiaMiddleware = class {
         bag,
         Object.fromEntries(
           Object.entries(fields ?? {}).map(([field, messages]) => {
-            const list3 = Array.isArray(messages) ? messages.map(String) : [String(messages)];
-            return [field, this.withAllErrors ? list3 : list3[0] ?? ""];
+            const list4 = Array.isArray(messages) ? messages.map(String) : [String(messages)];
+            return [field, this.withAllErrors ? list4 : list4[0] ?? ""];
           })
         )
       ])
@@ -14667,8 +14923,8 @@ function normalizeAddress(recipient) {
 }
 function normalizeAddresses(recipients) {
   if (recipients === void 0) return [];
-  const list3 = Array.isArray(recipients) ? recipients : [recipients];
-  return list3.map(normalizeAddress);
+  const list4 = Array.isArray(recipients) ? recipients : [recipients];
+  return list4.map(normalizeAddress);
 }
 function formatAddress(address) {
   return address.name ? `${address.name} <${address.address}>` : address.address;
@@ -14837,7 +15093,7 @@ var Mailable = class {
 var SHOULD_QUEUE4 = /* @__PURE__ */ Symbol.for("oriel:bus.shouldQueue");
 function isQueueableMailable(mailable) {
   const record = mailable;
-  if (record[SHOULD_QUEUE4] === true) return true;
+  if (record.shouldQueue === true || record[SHOULD_QUEUE4] === true) return true;
   return record.connection !== void 0 || record.queue !== void 0 || record.delay !== void 0 || record.tries !== void 0 || record.backoff !== void 0 || record.timeout !== void 0 || typeof record.uniqueId === "function" || typeof record.retryUntil === "function";
 }
 var MailerImpl = class {
@@ -15285,47 +15541,10 @@ var MailNotificationChannel = class {
   }
 };
 var NOTIFICATIONS_TABLE = "notifications";
-var ZONELESS_TIMESTAMP = /^\d{4}-\d{2}-\d{2}[ T]\d{2}:\d{2}(:\d{2}(\.\d+)?)?$/;
-function parseStoredDate2(value2) {
-  if (value2 instanceof Date) return value2;
-  if (typeof value2 === "number") return new Date(value2);
-  const text3 = String(value2);
-  return ZONELESS_TIMESTAMP.test(text3) ? /* @__PURE__ */ new Date(`${text3.replace(" ", "T")}Z`) : new Date(text3);
-}
-function wrapRow(row, db) {
-  const record = {
-    id: String(row.id),
-    type: String(row.type),
-    data: JSON.parse(String(row.data)),
-    createdAt: parseStoredDate2(row.created_at),
-    updatedAt: parseStoredDate2(row.updated_at),
-    readAt: row.read_at ? parseStoredDate2(row.read_at) : void 0,
-    async markAsRead() {
-      if (record.readAt) return;
-      const now5 = /* @__PURE__ */ new Date();
-      await db.table(NOTIFICATIONS_TABLE).where("id", record.id).update({ read_at: now5, updated_at: now5 });
-      record.readAt = now5;
-    },
-    async markAsUnread() {
-      if (!record.readAt) return;
-      await db.table(NOTIFICATIONS_TABLE).where("id", record.id).update({ read_at: null, updated_at: /* @__PURE__ */ new Date() });
-      record.readAt = void 0;
-    }
-  };
-  return record;
-}
-function requireDatabase() {
+function requireDatabase(connection) {
   const container = currentContainer();
   if (!container?.bound(DatabaseManager)) throw new DatabaseUnavailableError();
-  return container.make(DatabaseManager).connection();
-}
-async function fetchNotifications(notifiableType, notifiableId, filter = "all") {
-  const db = requireDatabase();
-  let query = db.table(NOTIFICATIONS_TABLE).where("notifiable_type", notifiableType).where("notifiable_id", notifiableId).orderBy("created_at", "desc");
-  if (filter === "unread") query = query.whereNull("read_at");
-  if (filter === "read") query = query.whereNotNull("read_at");
-  const rows = await query.get();
-  return rows.all().map((row) => wrapRow(row, db));
+  return container.make(DatabaseManager).connection(connection);
 }
 var DatabaseNotificationChannel = class {
   async send(notifiable, notification) {
@@ -15335,12 +15554,12 @@ var DatabaseNotificationChannel = class {
     const data = notification.toDatabase ? notification.toDatabase(notifiable) : notification.toArray(notifiable);
     const model = notifiable;
     if (typeof model.getKey !== "function") throw new NotDatabaseNotifiableError(notifiable.constructor.name);
-    const db = requireDatabase();
+    const db = requireDatabase(typeof model.getConnectionName === "function" ? model.getConnectionName() : void 0);
     const now5 = /* @__PURE__ */ new Date();
     await db.table(NOTIFICATIONS_TABLE).insert({
       id: notification.id ?? randomUUID4(),
       type: notification.constructor.name,
-      notifiable_type: notifiable.constructor.name,
+      notifiable_type: typeof model.getMorphClass === "function" ? model.getMorphClass() : notifiable.constructor.name,
       notifiable_id: model.getKey(),
       data: JSON.stringify(data),
       read_at: null,
@@ -15374,13 +15593,8 @@ function resolveDispatcher() {
   if (!container?.bound(NotificationDispatcher)) throw new NotificationDispatcherUnavailableError();
   return container.make(NotificationDispatcher);
 }
-function requireKey(instance) {
-  const model = instance;
-  if (typeof model.getKey !== "function") throw new NotDatabaseNotifiableError(instance.constructor.name);
-  return model.getKey();
-}
-function Notifiable(Base) {
-  return class NotifiableMixin extends Base {
+function RoutesNotifications(Base) {
+  return class RoutesNotificationsMixin extends Base {
     routeNotificationFor(channel, notification) {
       const custom = this[`routeNotificationFor${Str.studly(channel)}`];
       if (typeof custom === "function") return custom.call(this, notification);
@@ -15397,15 +15611,6 @@ function Notifiable(Base) {
     async notifyNow(notification, channels) {
       await resolveDispatcher().sendNow(this, notification, channels);
     }
-    notifications() {
-      return fetchNotifications(this.constructor.name, requireKey(this));
-    }
-    unreadNotifications() {
-      return fetchNotifications(this.constructor.name, requireKey(this), "unread");
-    }
-    readNotifications() {
-      return fetchNotifications(this.constructor.name, requireKey(this), "read");
-    }
   };
 }
 var AnonymousNotifiable = class {
@@ -15475,7 +15680,7 @@ var SendQueuedNotifications = class {
 SendQueuedNotifications.prototype[SHOULD_QUEUE5] = true;
 function isQueueableNotification(notification) {
   const record = notification;
-  if (record[SHOULD_QUEUE5] === true) return true;
+  if (record.shouldQueue === true || record[SHOULD_QUEUE5] === true) return true;
   return record.connection !== void 0 || record.queue !== void 0 || record.delay !== void 0 || record.tries !== void 0 || record.backoff !== void 0 || record.timeout !== void 0 || typeof record.uniqueId === "function" || typeof record.retryUntil === "function";
 }
 function forNotifiable(notification) {
@@ -15513,12 +15718,12 @@ var Dispatcher3 = class {
     return channel;
   }
   async send(notifiables, notification) {
-    const list3 = toNotifiableList(notifiables);
-    if (list3.length === 0) return;
+    const list4 = toNotifiableList(notifiables);
+    if (list4.length === 0) return;
     if (isQueueableNotification(notification)) {
       if (!this.container.bound(BusDispatcher)) throw new NotificationQueueUnavailableError();
       const bus = this.container.make(BusDispatcher);
-      for (const notifiable of list3) {
+      for (const notifiable of list4) {
         const own = forNotifiable(notification);
         for (const channel of notification.via(notifiable)) {
           await bus.dispatch(new SendQueuedNotifications([notifiable], own, [channel]));
@@ -15526,11 +15731,11 @@ var Dispatcher3 = class {
       }
       return;
     }
-    await this.sendNow(list3, notification);
+    await this.sendNow(list4, notification);
   }
   async sendNow(notifiables, notification, channels) {
-    const list3 = toNotifiableList(notifiables);
-    for (const notifiable of list3) {
+    const list4 = toNotifiableList(notifiables);
+    for (const notifiable of list4) {
       const own = forNotifiable(notification);
       const names = channels ?? notification.via(notifiable);
       for (const name of names) {
@@ -17305,7 +17510,7 @@ function discoverJobs(directory, registry2) {
   return discoverClasses(directory, registry2, isJobClass);
 }
 var text2 = (value2) => optionalString2(value2) || void 0;
-var list2 = (value2) => Array.isArray(value2) ? value2.map(String) : text2(value2) ? [String(value2)] : [];
+var list3 = (value2) => Array.isArray(value2) ? value2.map(String) : text2(value2) ? [String(value2)] : [];
 var number2 = (value2, fallback) => {
   const parsed = Number(value2);
   return value2 === void 0 || value2 === null || value2 === "" || Number.isNaN(parsed) ? fallback : parsed;
@@ -17393,7 +17598,7 @@ function registerQueueCommands(kernel, context) {
     'queue:retry {id?* : The ID of the failed job or "all" to retry all jobs} {--queue= : Retry all of the failed jobs for the specified queue}',
     "Retry a failed queue job",
     async (out) => {
-      const ids = await retryableIds(list2(out.argument("id")), text2(out.option("queue")));
+      const ids = await retryableIds(list3(out.argument("id")), text2(out.option("queue")));
       if (ids.length === 0) {
         out.info("No retryable jobs found.");
         return 0;
@@ -18215,6 +18420,14 @@ var BaseRouter = class {
   getModel(parameter) {
     return this.#models.get(parameter);
   }
+  /**
+   * Binds a matched route's raw parameter values as a request to it would: Route.bind() callbacks, Route.model(),
+   * then implicit binding through the RouteModelResolver of `container`. A missing model throws
+   * RouteModelNotFoundError (404). Live uses it to check a page route's `can:` middleware again on each update.
+   */
+  substituteBindings(route2, values, container) {
+    return substituteBindings(this, route2, values, container);
+  }
   aliasMiddleware(name, middleware) {
     this.#aliases[name] = middleware;
     return this;
@@ -18228,20 +18441,20 @@ var BaseRouter = class {
     return this;
   }
   pushMiddlewareToGroup(group, middleware) {
-    const list3 = this.#groups[group] ??= [];
-    if (!list3.includes(middleware)) list3.push(middleware);
+    const list4 = this.#groups[group] ??= [];
+    if (!list4.includes(middleware)) list4.push(middleware);
     return this;
   }
   prependMiddlewareToGroup(group, middleware) {
-    const list3 = this.#groups[group] ??= [];
-    if (!list3.includes(middleware)) list3.unshift(middleware);
+    const list4 = this.#groups[group] ??= [];
+    if (!list4.includes(middleware)) list4.unshift(middleware);
     return this;
   }
   hasMiddlewareGroup(name) {
     return Object.hasOwn(this.#groups, name);
   }
   getMiddlewareGroups() {
-    return Object.fromEntries(Object.entries(this.#groups).map(([name, list3]) => [name, [...list3]]));
+    return Object.fromEntries(Object.entries(this.#groups).map(([name, list4]) => [name, [...list4]]));
   }
   /** Every route, in registration order. */
   getRoutes() {
@@ -18483,6 +18696,48 @@ var BaseUrlGenerator = class {
   }
 };
 var Route = facade(Router);
+var DiagnosingHealth = class {
+};
+var escapeHtml3 = (value2) => value2.replace(/[&<>"']/g, (char) => `&#${char.charCodeAt(0)};`);
+var STYLE = ':root{color-scheme:dark}*{box-sizing:border-box;margin:0}html{background:#05050b}body{min-height:100vh;display:grid;place-items:center;padding:20px;background:#1a1a1a;color:#fff;font:400 16px/1.7 system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif}main{display:flex;align-items:center;gap:20px;width:100%;max-width:640px;padding:20px 32px;border-radius:18px;background:#212121}.dot{flex:none;width:12px;height:12px;border-radius:50%;background:#74ec5a}.dot.down{background:#ff3543}h1{font-size:21px;line-height:1.4;font-weight:600}p{color:#a3a3a3}.time{color:#ba94ff}';
+function healthResponse(page = {}) {
+  const healthy = page.healthy ?? true;
+  const time = page.milliseconds === void 0 ? "" : ` Response rendered in <span class="time">${Math.round(page.milliseconds)} ms</span>.`;
+  const html2 = `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${escapeHtml3(page.appName ?? "Oriel")}</title>
+<style>${STYLE}</style>
+</head>
+<body>
+<main>
+<span class="${healthy ? "dot" : "dot down"}" aria-hidden="true"></span>
+<div>
+<h1>Application ${healthy ? "up" : "experiencing problems"}</h1>
+<p>HTTP request received.${time}</p>
+</div>
+</main>
+</body>
+</html>
+`;
+  return new Response(html2, { status: healthy ? 200 : 500, headers: { "content-type": "text/html; charset=utf-8" } });
+}
+async function diagnoseHealth(app2) {
+  const started = performance.now();
+  const config2 = app2.bound(ConfigRepository) ? app2.make(ConfigRepository) : void 0;
+  let healthy = true;
+  try {
+    if (app2.bound(EventDispatcher)) await app2.make(EventDispatcher).dispatch(new DiagnosingHealth());
+  } catch (error) {
+    if (config2?.get("app.debug", false) === true) throw error;
+    if (app2.bound(ExceptionHandler)) await app2.make(ExceptionHandler).report(error);
+    healthy = false;
+  }
+  const appName2 = String(config2?.get("app.name", "Oriel") ?? "Oriel");
+  return healthResponse({ healthy, appName: appName2, milliseconds: performance.now() - started });
+}
 var generation2 = 0;
 async function loadRoutesFrom(app2, router, file) {
   const url2 = `${pathToFileURL7(file).href}?oriel-routes=${++generation2}`;
@@ -18492,10 +18747,6 @@ async function loadRoutesFrom(app2, router, file) {
   ));
   if (typeof module.default === "function") await app2.run(() => module.default(router));
 }
-function healthResponse() {
-  const html2 = '<!DOCTYPE html>\n<html lang="en">\n<head>\n<meta charset="utf-8">\n<title>Application up</title>\n</head>\n<body><h1>Application up</h1></body>\n</html>';
-  return new Response(html2, { status: 200, headers: { "content-type": "text/html; charset=utf-8" } });
-}
 var sha12 = (value2) => createHash8("sha1").update(value2).digest("hex");
 function withHeaders2(response2, headers) {
   try {
@@ -18572,7 +18823,7 @@ var RoutingServiceProvider = class extends ServiceProvider {
       if (!this.app.bound(RoutingPaths)) return;
       const { web, api, health, apiPrefix } = this.app.make(RoutingPaths);
       const router = this.app.make(Router);
-      if (health !== void 0) router.get(health, () => healthResponse());
+      if (health !== void 0) router.get(health, () => diagnoseHealth(this.app));
       if (web !== void 0) await router.middleware("web").group(() => this.#load(router, web));
       if (api !== void 0) await router.prefix(apiPrefix).middleware("api").group(() => this.#load(router, api));
     });
@@ -18656,8 +18907,8 @@ var Store = class {
     for (const [name, item] of Object.entries(values)) Arr.set(this.#attributes, name, item);
   }
   push(key, value2) {
-    const list3 = this.get(key, []);
-    this.put(key, [...Array.isArray(list3) ? list3 : [list3], value2]);
+    const list4 = this.get(key, []);
+    this.put(key, [...Array.isArray(list4) ? list4 : [list4], value2]);
   }
   increment(key, amount = 1) {
     const value2 = Number(this.get(key, 0)) + amount;
@@ -19323,7 +19574,7 @@ var ValidationErrorImpl = class extends Error {
 var ValidationException = class _ValidationException extends ValidationErrorImpl {
   /** Messages per field, each a string or a list. */
   static withMessages(messages) {
-    const errors2 = Object.fromEntries(Object.entries(messages).map(([field, list3]) => [field, typeof list3 === "string" ? [list3] : [...list3]]));
+    const errors2 = Object.fromEntries(Object.entries(messages).map(([field, list4]) => [field, typeof list4 === "string" ? [list4] : [...list4]]));
     return new _ValidationException(errors2);
   }
   constructor(errors2, errorBag = "default", redirectTo2) {
@@ -19434,6 +19685,9 @@ var DEFAULT_MESSAGES = {
   file: "The :attribute field must be a file.",
   image: "The :attribute field must be an image.",
   mimes: "The :attribute field must be a file of type: :values.",
+  mimetypes: "The :attribute field must be a file of type: :values.",
+  extensions: "The :attribute field must have one of the following extensions: :values.",
+  dimensions: "The :attribute field has invalid image dimensions.",
   "max.string": "The :attribute field must not be greater than :max characters.",
   "max.numeric": "The :attribute field must not be greater than :max.",
   "max.array": "The :attribute field must not have more than :max items.",
@@ -19524,6 +19778,90 @@ var databaseRules = {
     messageKey: () => "exists"
   }
 };
+var FRAME_MARKERS = /* @__PURE__ */ new Set([192, 193, 194, 195, 197, 198, 199, 201, 202, 203, 205, 206, 207]);
+var MAX_JPEG_STEPS = 1024;
+var MAX_BOXES = 1024;
+var fourcc = (view2, offset) => String.fromCharCode(view2.getUint8(offset), view2.getUint8(offset + 1), view2.getUint8(offset + 2), view2.getUint8(offset + 3));
+var u24le = (view2, offset) => view2.getUint8(offset) | view2.getUint8(offset + 1) << 8 | view2.getUint8(offset + 2) << 16;
+var READERS = {
+  "image/png": (view2) => fourcc(view2, 12) === "IHDR" ? { width: view2.getUint32(16), height: view2.getUint32(20) } : void 0,
+  "image/gif": (view2) => ({ width: view2.getUint16(6, true), height: view2.getUint16(8, true) }),
+  "image/bmp": (view2) => view2.getUint32(14, true) === 12 ? { width: view2.getUint16(18, true), height: view2.getUint16(20, true) } : { width: Math.abs(view2.getInt32(18, true)), height: Math.abs(view2.getInt32(22, true)) },
+  "image/jpeg": jpeg,
+  "image/webp": webp,
+  "image/avif": avif
+};
+function imageDimensions(bytes, mime) {
+  const reader = READERS[mime];
+  if (!reader) return void 0;
+  try {
+    const size = reader(new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength));
+    return size && size.width > 0 && size.height > 0 ? size : void 0;
+  } catch (error) {
+    if (error instanceof RangeError) return void 0;
+    throw error;
+  }
+}
+function jpeg(view2) {
+  let offset = 2;
+  for (let step = 0; step < MAX_JPEG_STEPS && offset + 4 <= view2.byteLength; step++) {
+    if (view2.getUint8(offset) !== 255) return void 0;
+    const marker = view2.getUint8(offset + 1);
+    if (marker === 255) offset += 1;
+    else if (marker === 216 || marker === 1 || marker >= 208 && marker <= 215) offset += 2;
+    else if (marker === 217 || marker === 218) return void 0;
+    else if (FRAME_MARKERS.has(marker)) return { height: view2.getUint16(offset + 5), width: view2.getUint16(offset + 7) };
+    else offset += 2 + view2.getUint16(offset + 2);
+  }
+  return void 0;
+}
+function webp(view2) {
+  const chunk = fourcc(view2, 12);
+  if (chunk === "VP8 ") {
+    if (view2.getUint8(23) !== 157 || view2.getUint8(24) !== 1 || view2.getUint8(25) !== 42) return void 0;
+    return { width: view2.getUint16(26, true) & 16383, height: view2.getUint16(28, true) & 16383 };
+  }
+  if (chunk === "VP8L") {
+    if (view2.getUint8(20) !== 47) return void 0;
+    const bits = view2.getUint32(21, true);
+    return { width: (bits & 16383) + 1, height: (bits >>> 14 & 16383) + 1 };
+  }
+  if (chunk === "VP8X") return { width: u24le(view2, 24) + 1, height: u24le(view2, 27) + 1 };
+  return void 0;
+}
+function* boxes(view2, start2, end) {
+  let offset = start2;
+  for (let count = 0; count < MAX_BOXES && offset + 8 <= end; count++) {
+    let size = view2.getUint32(offset);
+    let header = 8;
+    if (size === 1) {
+      size = Number(view2.getBigUint64(offset + 8));
+      header = 16;
+    } else if (size === 0) {
+      size = end - offset;
+    }
+    if (size < header || offset + size > end) return;
+    yield { type: fourcc(view2, offset + 4), start: offset + header, end: offset + size };
+    offset += size;
+  }
+}
+var findBox = (view2, start2, end, type) => {
+  for (const box of boxes(view2, start2, end)) if (box.type === type) return box;
+  return void 0;
+};
+function avif(view2) {
+  const meta = findBox(view2, 0, view2.byteLength, "meta");
+  const iprp = meta && findBox(view2, meta.start + 4, meta.end, "iprp");
+  const ipco = iprp && findBox(view2, iprp.start, iprp.end, "ipco");
+  if (!ipco) return void 0;
+  let largest;
+  for (const box of boxes(view2, ipco.start, ipco.end)) {
+    if (box.type !== "ispe") continue;
+    const size = { width: view2.getUint32(box.start + 4), height: view2.getUint32(box.start + 8) };
+    if (!largest || size.width * size.height > largest.width * largest.height) largest = size;
+  }
+  return largest;
+}
 function splitParameters(name, raw3) {
   return name === "regex" || name === "not_regex" ? [raw3] : raw3.split(",");
 }
@@ -19571,25 +19909,139 @@ function expandWildcardKeys(pattern, data) {
   }
   return paths;
 }
-var IMAGE_EXTENSIONS = /* @__PURE__ */ new Set(["jpg", "jpeg", "png", "bmp", "gif", "svg", "webp"]);
+var { BINARY_AND_MARKUP_TYPES, detectFileType, EMPTY: EMPTY2, RASTER_IMAGES, SVG, TEXT } = fileType_exports;
+var inspections = /* @__PURE__ */ new WeakMap();
+function inspect(file) {
+  let inspection = inspections.get(file);
+  if (!inspection) {
+    inspection = file.arrayBuffer().then((buffer) => {
+      const bytes = new Uint8Array(buffer);
+      const type = detectFileType(bytes);
+      return { type, dimensions: RASTER_IMAGES.has(type.mime) ? imageDimensions(bytes, type.mime) : void 0 };
+    });
+    inspections.set(file, inspection);
+  }
+  return inspection;
+}
+function clientExtension(file) {
+  const name = file.clientName.slice(Math.max(file.clientName.lastIndexOf("/"), file.clientName.lastIndexOf("\\")) + 1);
+  const dot = name.lastIndexOf(".");
+  return dot === -1 ? "" : name.slice(dot + 1).trim().toLowerCase();
+}
+var PHP_EXTENSIONS = /* @__PURE__ */ new Set(["php", "php3", "php4", "php5", "php7", "php8", "phtml", "phar"]);
+var blocksPhp = (file, allowed) => !allowed.includes("php") && PHP_EXTENSIONS.has(clientExtension(file));
+var TEXT_FORMATS = /* @__PURE__ */ new Set(["txt", "text", "csv", "tsv", "json", "md"]);
+var RECOGNISED_EXTENSIONS = new Set(BINARY_AND_MARKUP_TYPES.flatMap(({ extensions }) => extensions));
+var lower = (values) => values.map((value2) => value2.trim().toLowerCase());
+function meetsMimes(type, extension, allowed) {
+  if (type === EMPTY2) return false;
+  if (type === TEXT && allowed.has("txt")) return true;
+  if (type !== TEXT && type.extensions.length > 0) return type.extensions.some((name) => allowed.has(name));
+  if (!allowed.has(extension) || RECOGNISED_EXTENSIONS.has(extension)) return false;
+  return type === TEXT || !TEXT_FORMATS.has(extension);
+}
+function allowedExtensions(ctx) {
+  const allowed = new Set(lower(ctx.parameters));
+  if (allowed.has("jpg") || allowed.has("jpeg")) allowed.add("jpg").add("jpeg");
+  return allowed;
+}
+var listed = (ctx) => ({ values: ctx.parameters.join(", ") });
+var DIMENSION_KEYS = ["width", "height", "min_width", "min_height", "max_width", "max_height", "ratio"];
+function namedParameter(parameter) {
+  const at = parameter.indexOf("=");
+  return at === -1 ? [parameter, ""] : [parameter.slice(0, at), parameter.slice(at + 1)];
+}
+function parseRatio(value2) {
+  const match = /^(\d+(?:\.\d+)?|\.\d+)(?:\/(\d+))?$/.exec(value2.trim());
+  if (!match) return void 0;
+  const ratio = Number(match[1]) / Number(match[2] ?? 1);
+  return Number.isFinite(ratio) && ratio > 0 ? ratio : void 0;
+}
+function dimensionConstraints(parameters) {
+  if (parameters.length === 0) throw new InvalidRuleParameterError("dimensions", "", `expected one or more of ${DIMENSION_KEYS.join(", ")}`);
+  const constraints = {};
+  for (const parameter of parameters) {
+    const [key, value2] = namedParameter(parameter);
+    if (!DIMENSION_KEYS.includes(key)) {
+      throw new InvalidRuleParameterError("dimensions", parameter, `expected one of ${DIMENSION_KEYS.join(", ")}`);
+    }
+    const number3 = key === "ratio" ? parseRatio(value2) : /^\d+$/.test(value2) ? Number(value2) : void 0;
+    if (number3 === void 0) {
+      throw new InvalidRuleParameterError("dimensions", parameter, key === "ratio" ? "expected a ratio such as 3/2 or 1.5" : "expected a whole number of pixels");
+    }
+    constraints[key] = number3;
+  }
+  return constraints;
+}
+function meetsDimensions(constraints, { width, height }) {
+  const { width: exactWidth, height: exactHeight, min_width, max_width, min_height, max_height, ratio } = constraints;
+  if (exactWidth !== void 0 && width !== exactWidth) return false;
+  if (exactHeight !== void 0 && height !== exactHeight) return false;
+  if (min_width !== void 0 && width < min_width) return false;
+  if (max_width !== void 0 && width > max_width) return false;
+  if (min_height !== void 0 && height < min_height) return false;
+  if (max_height !== void 0 && height > max_height) return false;
+  return ratio === void 0 || Math.abs(ratio - width / height) <= 1 / (Math.max((width + height) / 2, height) + 1);
+}
 var fileRules = {
   file: { validate: (ctx) => isUploadedFileLike(ctx.value), messageKey: () => "file" },
+  /** A JPEG, PNG, GIF, WebP, AVIF or BMP by its bytes; SVG only as `image:allow_svg` (Laravel 12). */
   image: {
-    validate: (ctx) => {
-      if (!isUploadedFileLike(ctx.value)) return false;
-      if (ctx.value.mimeType.startsWith("image/")) return true;
-      return IMAGE_EXTENSIONS.has(ctx.value.extension().toLowerCase());
+    validate: async (ctx) => {
+      if (!isUploadedFileLike(ctx.value) || blocksPhp(ctx.value, [])) return false;
+      const { type } = await inspect(ctx.value);
+      return RASTER_IMAGES.has(type.mime) || type === SVG && ctx.parameters.includes("allow_svg");
     },
     messageKey: () => "image"
   },
   mimes: {
-    validate: (ctx) => {
+    validate: async (ctx) => {
       if (!isUploadedFileLike(ctx.value)) return false;
-      const allowed = ctx.parameters.map((p) => p.toLowerCase());
-      return allowed.includes(ctx.value.extension().toLowerCase());
+      const allowed = allowedExtensions(ctx);
+      if (blocksPhp(ctx.value, [...allowed])) return false;
+      return meetsMimes((await inspect(ctx.value)).type, clientExtension(ctx.value), allowed);
     },
     messageKey: () => "mimes",
-    replacements: (ctx) => ({ values: ctx.parameters.join(", ") })
+    replacements: listed
+  },
+  /**
+   * The detected MIME type is listed, or its `type/*` wildcard is. `image/*` includes SVG (`image/svg+xml`), as in
+   * Laravel: the rule for photos is `image`.
+   */
+  mimetypes: {
+    validate: async (ctx) => {
+      if (!isUploadedFileLike(ctx.value)) return false;
+      const allowed = lower(ctx.parameters);
+      if (blocksPhp(ctx.value, allowed)) return false;
+      const { mime } = (await inspect(ctx.value)).type;
+      return allowed.includes(mime) || allowed.includes(`${mime.split("/")[0]}/*`);
+    },
+    messageKey: () => "mimetypes",
+    replacements: listed
+  },
+  /**
+   * The pixel size read from the image's header meets every constraint: width, height, min_width, max_width,
+   * min_height, max_height, ratio. SVG and images whose header can't be read fail.
+   */
+  dimensions: {
+    validate: async (ctx) => {
+      const constraints = dimensionConstraints(ctx.parameters);
+      if (!isUploadedFileLike(ctx.value)) return false;
+      const { dimensions } = await inspect(ctx.value);
+      return dimensions !== void 0 && meetsDimensions(constraints, dimensions);
+    },
+    messageKey: () => "dimensions",
+    replacements: (ctx) => Object.fromEntries(ctx.parameters.map(namedParameter))
+  },
+  /** The client file name's extension is listed (Laravel 11). It checks the name only: pair it with mimes or image. */
+  extensions: {
+    validate: (ctx) => {
+      if (!isUploadedFileLike(ctx.value)) return false;
+      const allowed = lower(ctx.parameters);
+      return !blocksPhp(ctx.value, allowed) && allowed.includes(clientExtension(ctx.value));
+    },
+    messageKey: () => "extensions",
+    replacements: listed
   }
 };
 var EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
@@ -20276,6 +20728,11 @@ var Notification2 = class extends Notification {
     return NotificationFake.fake(...args);
   }
 };
+
+// notifiable.ts
+function Notifiable(Base) {
+  return RoutesNotifications(HasDatabaseNotifications(Base));
+}
 export {
   API_ROUTES_STUB,
   AboutCommand,
@@ -20299,6 +20756,7 @@ export {
   AuthenticatableModel,
   Authenticate,
   AuthenticationError,
+  Authorizable,
   AuthorizationError,
   AuthorizationErrorImpl,
   Authorize,
@@ -20347,6 +20805,7 @@ export {
   ConsoleServiceProvider,
   Container2 as Container,
   ContainerNotAvailableError,
+  Controller,
   ControllerMethodNotFoundError,
   ConvertEmptyStringsToNull,
   Cookie,
@@ -20368,7 +20827,10 @@ export {
   DatabaseJob,
   DatabaseLock,
   DatabaseManagerImpl,
+  DatabaseNotification,
   DatabaseNotificationChannel,
+  DatabaseNotificationCollection,
+  DatabaseNotificationsRelation,
   DatabaseQueue,
   DatabaseServiceProvider,
   DatabaseSessionHandler,
@@ -20377,6 +20839,7 @@ export {
   DatabaseUnavailableError,
   DecryptError,
   DeferProp,
+  DiagnosingHealth,
   Dispatchable,
   ELEMENT,
   EloquentUserProvider,
@@ -20412,13 +20875,14 @@ export {
   FormRequest,
   FormUploadedFile,
   Fragment,
-  Gate2 as Gate,
+  Gate4 as Gate,
   GateResponse,
   GeneratorCommand,
   GenericLock,
   Grammar,
   GroupRegistrar,
   HasApiTokens,
+  HasDatabaseNotifications,
   HasMany,
   HasManyThrough,
   HasOne,
@@ -20559,6 +21023,7 @@ export {
   OptionalProp,
   PERSISTENT_MIDDLEWARE,
   PERSONAL_ACCESS_TOKENS_MIGRATION,
+  Pagination,
   Paginator,
   Password,
   PasswordBroker2 as PasswordBroker,
@@ -20613,6 +21078,7 @@ export {
   RouteModelNotFoundError,
   RouteModelResolverImpl,
   RouteNotDefinedError,
+  RoutesNotifications,
   RoutingError,
   RoutingServiceProvider,
   Rule,
@@ -20710,6 +21176,7 @@ export {
   ViteError,
   ViteHtml,
   WORKER_DISCOVERY_DIRECTORIES,
+  WithPagination,
   WithoutOverlapping,
   Worker,
   __,
@@ -20787,7 +21254,6 @@ export {
   extensionFromMime,
   facade,
   fake,
-  fetchNotifications,
   filterRouteList,
   formatAddress,
   formatDate,