gemi 0.106.0 → 0.108.0

package/dist/http/safeFetch/errors.d.ts

@@ -0,0 +1,78 @@
+import type { AddressRange } from "./addresses";
+/**
+ * Every refusal and failure `safeFetch` throws is one of these, so an app can
+ * tell the user what went wrong in plain words (`error.code`) without parsing
+ * messages. An abort through the caller's own `signal` rethrows that signal's
+ * reason instead, as `fetch` does.
+ */
+export declare class SafeFetchError extends Error {
+    readonly code: string;
+    /** The URL being fetched when it failed: the redirect hop, not the first URL. */
+    readonly url: string;
+    constructor(message: string, url: string, options?: {
+        cause?: unknown;
+    });
+}
+export type InvalidUrlReason = "malformed" | "scheme" | "credentials" | "port";
+/** Not an absolute http(s) URL, has a username or password, or uses a port not allowed. */
+export declare class InvalidUrlError extends SafeFetchError {
+    readonly reason: InvalidUrlReason;
+    readonly code = "invalid-url";
+    constructor(url: string, reason: InvalidUrlReason, message: string);
+}
+/** The host name is on `deny`, or `allow` is set and the host is not on it. */
+export declare class BlockedHostError extends SafeFetchError {
+    readonly host: string;
+    readonly reason: "denied" | "not-allowed";
+    readonly code = "blocked-host";
+    constructor(url: string, host: string, reason: "denied" | "not-allowed");
+}
+/**
+ * The host is, or resolves to, an address that is not on the public internet
+ * (loopback, private, link-local, cloud metadata, …) or one matching `deny`.
+ */
+export declare class BlockedAddressError extends SafeFetchError {
+    readonly host: string;
+    readonly address: string;
+    readonly range: AddressRange | "denied" | "not-allowed";
+    readonly code = "blocked-address";
+    constructor(url: string, host: string, address: string, range: AddressRange | "denied" | "not-allowed");
+}
+/** The host name did not resolve. */
+export declare class DnsError extends SafeFetchError {
+    readonly host: string;
+    readonly code = "dns";
+    constructor(url: string, host: string, cause?: unknown);
+}
+/** `connectTimeout` (resolving and connecting) or `timeout` (the whole request, body included) ran out. */
+export declare class TimeoutError extends SafeFetchError {
+    readonly phase: "connect" | "total";
+    readonly ms: number;
+    readonly code = "timeout";
+    constructor(url: string, phase: "connect" | "total", ms: number);
+}
+/** The response body is larger than `maxSize` bytes (decoded). */
+export declare class TooLargeError extends SafeFetchError {
+    readonly limit: number;
+    readonly code = "too-large";
+    constructor(url: string, limit: number);
+}
+/** The response's content type is not one of `contentTypes`. */
+export declare class ContentTypeError extends SafeFetchError {
+    readonly contentType: string | null;
+    readonly allowed: readonly string[];
+    readonly code = "content-type";
+    constructor(url: string, contentType: string | null, allowed: readonly string[]);
+}
+/** More than `maxRedirects` redirects. */
+export declare class TooManyRedirectsError extends SafeFetchError {
+    readonly limit: number;
+    readonly code = "too-many-redirects";
+    constructor(url: string, limit: number);
+}
+/** The connection failed or broke (refused, reset, TLS, a malformed response). */
+export declare class NetworkError extends SafeFetchError {
+    readonly code = "network";
+    constructor(url: string, cause: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/http/safeFetch/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../http/safeFetch/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAgB;IACrC,iFAAiF;IACjF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAET,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAKxE;AAED,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,QAAQ,GAAG,aAAa,GAAG,MAAM,CAAC;AAE/E,2FAA2F;AAC3F,qBAAa,eAAgB,SAAQ,cAAc;IAI/C,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAHnC,SAAkB,IAAI,iBAAiB;gBAErC,GAAG,EAAE,MAAM,EACF,MAAM,EAAE,gBAAgB,EACjC,OAAO,EAAE,MAAM;CAIlB;AAED,+EAA+E;AAC/E,qBAAa,gBAAiB,SAAQ,cAAc;IAIhD,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,aAAa;IAJ3C,SAAkB,IAAI,kBAAkB;gBAEtC,GAAG,EAAE,MAAM,EACF,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,QAAQ,GAAG,aAAa;CAS5C;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,cAAc;IAInD,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,QAAQ,GAAG,aAAa;IALzD,SAAkB,IAAI,qBAAqB;gBAEzC,GAAG,EAAE,MAAM,EACF,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,YAAY,GAAG,QAAQ,GAAG,aAAa;CAS1D;AAED,qCAAqC;AACrC,qBAAa,QAAS,SAAQ,cAAc;IAIxC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAHvB,SAAkB,IAAI,SAAS;gBAE7B,GAAG,EAAE,MAAM,EACF,IAAI,EAAE,MAAM,EACrB,KAAK,CAAC,EAAE,OAAO;CAIlB;AAED,2GAA2G;AAC3G,qBAAa,YAAa,SAAQ,cAAc;IAI5C,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM;IAJrB,SAAkB,IAAI,aAAa;gBAEjC,GAAG,EAAE,MAAM,EACF,KAAK,EAAE,SAAS,GAAG,OAAO,EAC1B,EAAE,EAAE,MAAM;CAStB;AAED,kEAAkE;AAClE,qBAAa,aAAc,SAAQ,cAAc;IAI7C,QAAQ,CAAC,KAAK,EAAE,MAAM;IAHxB,SAAkB,IAAI,eAAe;gBAEnC,GAAG,EAAE,MAAM,EACF,KAAK,EAAE,MAAM;CAIzB;AAED,gEAAgE;AAChE,qBAAa,gBAAiB,SAAQ,cAAc;IAIhD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IACnC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE;IAJrC,SAAkB,IAAI,kBAAkB;gBAEtC,GAAG,EAAE,MAAM,EACF,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,OAAO,EAAE,SAAS,MAAM,EAAE;CAOtC;AAED,0CAA0C;AAC1C,qBAAa,qBAAsB,SAAQ,cAAc;IAIrD,QAAQ,CAAC,KAAK,EAAE,MAAM;IAHxB,SAAkB,IAAI,wBAAwB;gBAE5C,GAAG,EAAE,MAAM,EACF,KAAK,EAAE,MAAM;CAIzB;AAED,kFAAkF;AAClF,qBAAa,YAAa,SAAQ,cAAc;IAC9C,SAAkB,IAAI,aAAa;gBACvB,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAOxC"}

package/dist/http/safeFetch/index.d.ts

@@ -0,0 +1,4 @@
+export { safeFetch, SafeResponse, type SafeFetchOptions } from "./safeFetch";
+export { classifyAddress, type AddressRange, type Classification, } from "./addresses";
+export { BlockedAddressError, BlockedHostError, ContentTypeError, DnsError, InvalidUrlError, NetworkError, SafeFetchError, TimeoutError, TooLargeError, TooManyRedirectsError, type InvalidUrlReason, } from "./errors";
+//# sourceMappingURL=index.d.ts.map

package/dist/http/safeFetch/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../http/safeFetch/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EACL,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,cAAc,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,aAAa,EACb,qBAAqB,EACrB,KAAK,gBAAgB,GACtB,MAAM,UAAU,CAAC"}

package/dist/http/safeFetch/safeFetch.d.ts

@@ -0,0 +1,82 @@
+export type SafeFetchOptions = {
+    method?: string;
+    headers?: HeadersInit;
+    /** Anything `fetch` takes as a body; it is read into memory before sending. */
+    body?: BodyInit | null;
+    /** Aborting it rejects (or errors the body stream) with the signal's reason. */
+    signal?: AbortSignal;
+    /** The whole request in ms: every redirect hop and reading the body. Default 30 000. */
+    timeout?: number;
+    /**
+     * Resolving and connecting (TCP and TLS), per hop, in ms. Default 10 000.
+     * On Bun before 1.4, whose node:http doesn't report the connection, it runs
+     * until the response headers arrive instead.
+     */
+    connectTimeout?: number;
+    /** Largest response body accepted, in bytes after decompression. Default 10 MiB. */
+    maxSize?: number;
+    /** Redirects followed before `TooManyRedirectsError`. Default 5. */
+    maxRedirects?: number;
+    /** `"manual"` returns a redirect response as it is, without following it. Default `"follow"`. */
+    redirect?: "follow" | "manual";
+    /**
+     * Media types the final response may have, e.g. `["text/html", "image/*"]`.
+     * Anything else rejects with `ContentTypeError` before the body is read.
+     */
+    contentTypes?: readonly string[];
+    /** Ports a URL may use. Default `[80, 443]`; `"any"` allows every port. */
+    ports?: readonly number[] | "any";
+    /**
+     * When set, only these may be reached: host names (`"example.com"`, or
+     * `"*.example.com"` for its subdomains) and IP ranges (`"203.0.113.0/24"`),
+     * which every address the host resolves to must be in. An allowed host is
+     * still refused when it resolves to a private address.
+     */
+    allow?: readonly string[];
+    /** Host names and IP ranges never reached, in the same notation as `allow`. Wins over `allow`. */
+    deny?: readonly string[];
+    /**
+     * Lets private, loopback and other non-public addresses through: `true` for
+     * all of them (tests, local development), or a list of ranges
+     * (`["10.20.0.0/16"]`) for an internal service. Never set it from user input.
+     */
+    allowPrivate?: boolean | readonly string[];
+    /**
+     * Resolves a host name to its addresses. Defaults to the system resolver
+     * (`dns.lookup`, so `/etc/hosts` applies). The connection is made to the
+     * addresses returned here, after they are checked; nothing resolves the
+     * name again.
+     */
+    resolve?: (hostname: string) => Promise<readonly string[]>;
+};
+/**
+ * The response of `safeFetch`: a standard `Response`, with `url` and
+ * `redirected` filled in as `fetch` does, and the address it connected to.
+ */
+export declare class SafeResponse extends Response {
+    #private;
+    /**
+     * The IP address the response came from, or `null` when the runtime doesn't
+     * report it (Bun before 1.4).
+     */
+    readonly address: string | null;
+    constructor(body: ReadableStream<Uint8Array> | null, init: ResponseInit, meta: {
+        url: string;
+        redirected: boolean;
+        address: string | null;
+    });
+    get url(): string;
+    get redirected(): boolean;
+}
+/**
+ * `fetch` for URLs that come from users. It refuses anything but http(s) on
+ * the allowed ports, resolves the host itself, refuses non-public addresses,
+ * then connects to the address it checked (the host name is still sent as
+ * `Host` and TLS SNI, and the certificate is verified against it), so a DNS
+ * answer that changes between the check and the connection can't reach
+ * inside. Each redirect is checked the same way.
+ *
+ * Throws `SafeFetchError` subclasses; see `errors.ts`.
+ */
+export declare function safeFetch(input: string | URL, options?: SafeFetchOptions): Promise<SafeResponse>;
+//# sourceMappingURL=safeFetch.d.ts.map

package/dist/http/safeFetch/safeFetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeFetch.d.ts","sourceRoot":"","sources":["../../../http/safeFetch/safeFetch.ts"],"names":[],"mappings":"AA+BA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,gFAAgF;IAChF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iGAAiG;IACjG,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC/B;;;OAGG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,2EAA2E;IAC3E,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,KAAK,CAAC;IAClC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,kGAAkG;IAClG,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAAC;IAC3C;;;;;OAKG;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CAC5D,CAAC;AAEF;;;GAGG;AACH,qBAAa,YAAa,SAAQ,QAAQ;;IAGxC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;gBAG9B,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EACvC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;IAQpE,IAAa,GAAG,WAEf;IAED,IAAa,UAAU,YAEtB;CACF;AAuCD;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAC7B,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,YAAY,CAAC,CAiGvB"}

package/dist/i18n/dictionaryRuntime.js

@@ -1,4 +1,4 @@
 // @bun
-import{aa as y,ba as p}from"../chunk-sedwjgvf.js";import{qa as c,ra as d,ta as l}from"../chunk-9a8qz3s7.js";import{ng as e,og as i,qg as t,rg as r,sg as o,tg as n,ug as a,vg as s}from"../chunk-v4exgqbp.js";import"../chunk-1xzdexbq.js";export{o as setActiveLocale,r as seedDictionaries,t as preloadDictionaries,d as localeStrings,i as loadDictionary,n as getActiveLocale,e as dictionaryRegistrationMark,c as dictionaryLocales,l as dictionaryId,y as defineDictionary,s as createDictionarySink,a as __resetDictionaryRegistry,p as __gemi_dict__};
+import{aa as y,ba as p}from"../chunk-rjernda5.js";import{sa as c,ta as d,va as l}from"../chunk-564zfdd1.js";import{Gg as e,Hg as i,Jg as t,Kg as r,Lg as o,Mg as n,Ng as a,Og as s}from"../chunk-47rgq59q.js";import"../chunk-3s3awh38.js";export{o as setActiveLocale,r as seedDictionaries,t as preloadDictionaries,d as localeStrings,i as loadDictionary,n as getActiveLocale,e as dictionaryRegistrationMark,c as dictionaryLocales,l as dictionaryId,y as defineDictionary,s as createDictionarySink,a as __resetDictionaryRegistry,p as __gemi_dict__};
 
-//# debugId=A01D4EB3CAF77D8864756E2164756E21
+//# debugId=0F997A027EC9F95D64756E2164756E21

package/dist/i18n/dictionaryRuntime.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "A01D4EB3CAF77D8864756E2164756E21",
+  "debugId": "0F997A027EC9F95D64756E2164756E21",
   "names": []
 }

package/dist/i18n/index.js

@@ -1,4 +1,4 @@
 // @bun
-import{aa as w}from"../chunk-sedwjgvf.js";import"../chunk-9a8qz3s7.js";import{Wa as b}from"../chunk-f2n21fef.js";import{dc as R,ec as S}from"../chunk-zm00crsx.js";import"../chunk-7kedxtbp.js";import{Nc as j}from"../chunk-48wh5mbp.js";import"../chunk-b0jpvp5t.js";import"../chunk-22k4b395.js";import"../chunk-3cxbvrts.js";import"../chunk-j9deswmn.js";import"../chunk-ayss2f8c.js";import"../chunk-5dwtmkk8.js";import"../chunk-xxkk60aw.js";import"../chunk-fcsq613t.js";import"../chunk-v4exgqbp.js";import"../chunk-st0d3ndv.js";import{Eg as X,Fg as E,Gg as V,Hg as L}from"../chunk-4f7n1r02.js";import"../chunk-xnggfm0s.js";import"../chunk-0fney17e.js";import"../chunk-ma5rmcbe.js";import"../chunk-3m93v7bt.js";import"../chunk-1xzdexbq.js";import{createElement as J,Fragment as M,isValidElement as U}from"react";function $(q,B){let G=Object.values(B).some((z)=>typeof z==="function"&&U(z(""))),Q=/{{([^{}]+?)(?::([^{}\[\]]+?))?(?:\[(.*?)\])?}}/g;if(!G)return q.replace(Q,(W,O,_,Z)=>{let C=O.includes(":")?O.split(":")[0]:O,H=B[C];if(H===void 0)return W;if(typeof H==="function"){let K=H(Z!==void 0?Z:"");if(U(K))throw Error("JSX returned in string context");return String(K)}if(_)switch(_.toLowerCase()){case"number":return Number(H).toString();case"string":return String(H);case"boolean":return Boolean(H).toString();default:return String(H)}return String(H)});else{let z=[],W=0,O=null;while((O=Q.exec(q))!==null){let[_,Z,C,H]=O,F=O.index,K=Z.includes(":")?Z.split(":")[0]:Z;if(F>W)z.push(q.substring(W,F));let Y=B[K];if(Y===void 0)z.push(_);else if(typeof Y==="function"){let A=Y(H!==void 0?H:"");z.push(A)}else if(C)switch(C.toLowerCase()){case"number":z.push(Number(Y).toString());break;case"string":z.push(String(Y));break;case"boolean":z.push(Boolean(Y).toString());break;default:z.push(String(Y))}else z.push(String(Y));W=F+_.length}if(W<q.length)z.push(q.substring(W));return J(M,{},...z)}}class P{name;dictionary;constructor(q,B){this.name=q;this.dictionary=B}reference(q){if(typeof window<"u")throw Error("Cannot use reference in the browser");if(!this.dictionary?.[q])throw Error(`Translation not found for ${String(q)}`);return this.dictionary[q]}render(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B[0]};if(typeof window<"u")throw Error("Cannot use render in the browser");if(!this.dictionary?.[q]?.[G])throw Error(`Translation not found for ${String(q)} in ${String(G)}`);return $(this.dictionary[q][G],Q??{})}static create(q,B){return new P(q,B)}static text(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B?.[0]};if(!q?.[G])throw Error(`Translation not found for ${String(G)}`);return $(q[G],Q??{})}}async function N(q,B,...G){let{locale:Q=j.locale(),params:z}={params:{},...G[0]},O=(await q.load(String(Q)))[B];if(typeof O!=="string")throw Error(`Translation not found for "${B}" in "${String(Q)}" (dictionary ${q.id})`);return $(O,z??{})}export{S as translationConfigDefaults,N as translate,E as isValidTimeZone,R as defineTranslationConfig,w as defineDictionary,V as createFormatter,L as Translator,b as TranslationServiceProvider,P as Dictionary,X as DEFAULT_TIME_ZONE};
+import{aa as w}from"../chunk-rjernda5.js";import"../chunk-564zfdd1.js";import{Ya as b}from"../chunk-mrvcaakf.js";import{fc as R,gc as S}from"../chunk-h4x7cba0.js";import"../chunk-9hbwvcxn.js";import{Rc as j}from"../chunk-ncfxmtd5.js";import"../chunk-h7pafjej.js";import"../chunk-1npdp1w2.js";import"../chunk-rh9j8cwv.js";import"../chunk-fwympxqk.js";import"../chunk-njkk498k.js";import"../chunk-gqpge54c.js";import"../chunk-5wt25tyd.js";import"../chunk-k9qmr2wa.js";import"../chunk-4rr9wmh8.js";import"../chunk-47rgq59q.js";import{Wg as X,Xg as E,Yg as V,Zg as L}from"../chunk-2q7m8a16.js";import"../chunk-9mqqr05d.js";import"../chunk-2gmgd05c.js";import"../chunk-kqz8jp6v.js";import"../chunk-82hpq0bq.js";import"../chunk-3s3awh38.js";import{createElement as J,Fragment as M,isValidElement as U}from"react";function $(q,B){let G=Object.values(B).some((z)=>typeof z==="function"&&U(z(""))),Q=/{{([^{}]+?)(?::([^{}\[\]]+?))?(?:\[(.*?)\])?}}/g;if(!G)return q.replace(Q,(W,O,_,Z)=>{let C=O.includes(":")?O.split(":")[0]:O,H=B[C];if(H===void 0)return W;if(typeof H==="function"){let K=H(Z!==void 0?Z:"");if(U(K))throw Error("JSX returned in string context");return String(K)}if(_)switch(_.toLowerCase()){case"number":return Number(H).toString();case"string":return String(H);case"boolean":return Boolean(H).toString();default:return String(H)}return String(H)});else{let z=[],W=0,O=null;while((O=Q.exec(q))!==null){let[_,Z,C,H]=O,F=O.index,K=Z.includes(":")?Z.split(":")[0]:Z;if(F>W)z.push(q.substring(W,F));let Y=B[K];if(Y===void 0)z.push(_);else if(typeof Y==="function"){let A=Y(H!==void 0?H:"");z.push(A)}else if(C)switch(C.toLowerCase()){case"number":z.push(Number(Y).toString());break;case"string":z.push(String(Y));break;case"boolean":z.push(Boolean(Y).toString());break;default:z.push(String(Y))}else z.push(String(Y));W=F+_.length}if(W<q.length)z.push(q.substring(W));return J(M,{},...z)}}class P{name;dictionary;constructor(q,B){this.name=q;this.dictionary=B}reference(q){if(typeof window<"u")throw Error("Cannot use reference in the browser");if(!this.dictionary?.[q])throw Error(`Translation not found for ${String(q)}`);return this.dictionary[q]}render(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B[0]};if(typeof window<"u")throw Error("Cannot use render in the browser");if(!this.dictionary?.[q]?.[G])throw Error(`Translation not found for ${String(q)} in ${String(G)}`);return $(this.dictionary[q][G],Q??{})}static create(q,B){return new P(q,B)}static text(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B?.[0]};if(!q?.[G])throw Error(`Translation not found for ${String(G)}`);return $(q[G],Q??{})}}async function N(q,B,...G){let{locale:Q=j.locale(),params:z}={params:{},...G[0]},O=(await q.load(String(Q)))[B];if(typeof O!=="string")throw Error(`Translation not found for "${B}" in "${String(Q)}" (dictionary ${q.id})`);return $(O,z??{})}export{S as translationConfigDefaults,N as translate,E as isValidTimeZone,R as defineTranslationConfig,w as defineDictionary,V as createFormatter,L as Translator,b as TranslationServiceProvider,P as Dictionary,X as DEFAULT_TIME_ZONE};
 
-//# debugId=6EBD0BD09D520AA564756E2164756E21
+//# debugId=65B0DC47E3658F0F64756E2164756E21

package/dist/i18n/index.js.map

@@ -7,6 +7,6 @@
     "import { Lang } from \"../facades\";\nimport { parseTranslation } from \"../utils/parseTranslation\";\nimport type { ParseTranslationParamsServer, Prettify } from \"../utils/type\";\nimport type { DictionaryHandle } from \"./defineDictionary\";\nimport type { DictionaryTranslations } from \"./dictionaryShape\";\n\n/**\n * Read one string from a `defineDictionary` dictionary outside React — a\n * controller, a job, an email template.\n *\n * Async because a bundled dictionary loads its locale on demand. Server code\n * does not go through the bundler, so in practice this resolves without ever\n * yielding; the `await` is what makes the same call work either way.\n *\n * Kept out of `defineDictionary.ts` on purpose: that module is imported by\n * components and has to stay free of the server facades this one needs.\n */\nexport async function translate<\n  T extends DictionaryTranslations,\n  K extends keyof T & string,\n  U extends keyof T[K],\n  R = Prettify<ParseTranslationParamsServer<T[K][U] & string>>,\n>(\n  dictionary: DictionaryHandle<T>,\n  key: K,\n  ...args: R extends Record<string, never>\n    ? [args?: { locale?: U | (string & {}) }]\n    : [args: { locale?: U | (string & {}); params: R }]\n): Promise<string> {\n  const { locale = Lang.locale(), params } = { params: {}, ...args[0] };\n  const strings = await dictionary.load(String(locale));\n  const template = strings[key];\n\n  if (typeof template !== \"string\") {\n    throw new Error(\n      `Translation not found for \"${key}\" in \"${String(locale)}\" (dictionary ${dictionary.id})`,\n    );\n  }\n\n  return parseTranslation(template, (params ?? {}) as any) as string;\n}\n"
   ],
   "mappings": ";w0BAAA,mBAAS,SAAe,eAAU,SAO3B,IAAS,JAAgB,JAAC,HAAkB,HAAwB,JAEzE,DAAM,HAAS,EAAO,EAAO,JAAM,HAAE,AACnC,JAAC,DACC,EAAO,DAAU,YACjB,EAAgB,EAAkC,EAAE,CAAC,CACzD,EAMM,EAAQ,kDAEd,GAAI,CAAC,EAqCH,OAnCe,EAAS,QAAQ,EAAO,CAAC,EAAO,EAAM,EAAM,IAAY,CAErE,IAAM,EAAY,EAAK,SAAS,GAAG,EAAI,EAAK,MAAM,GAAG,EAAE,GAAK,EAEtD,EAAQ,EAAO,GACrB,GAAI,IAAU,OACZ,OAAO,EAGT,GAAI,OAAO,IAAU,WAAY,CAG/B,IAAM,EAAiB,EADD,IAAY,OAAY,EAAU,EACd,EAE1C,GAAI,EAAe,CAAc,EAC/B,MAAU,MAAM,gCAAgC,EAElD,OAAO,OAAO,CAAc,EAI9B,GAAI,EACF,OAAQ,EAAK,YAAY,OAClB,SACH,OAAO,OAAO,CAAK,EAAE,SAAS,MAC3B,SACH,OAAO,OAAO,CAAK,MAChB,UACH,OAAO,QAAQ,CAAK,EAAE,SAAS,UAE/B,OAAO,OAAO,CAAK,EAGzB,OAAO,OAAO,CAAK,EACpB,EAEI,KAEL,IAAM,EAAqC,CAAC,EACxC,EAAY,EACZ,EAAgC,KAEpC,OAAQ,EAAQ,EAAM,KAAK,CAAQ,KAAO,KAAM,CAC9C,IAAO,EAAW,EAAM,EAAM,GAAW,EACnC,EAAa,EAAM,MAGnB,EAAY,EAAK,SAAS,GAAG,EAAI,EAAK,MAAM,GAAG,EAAE,GAAK,EAG5D,GAAI,EAAa,EACf,EAAM,KAAK,EAAS,UAAU,EAAW,CAAU,CAAC,EAGtD,IAAM,EAAQ,EAAO,GACrB,GAAI,IAAU,OAEZ,EAAM,KAAK,CAAS,EACf,QAAI,OAAO,IAAU,WAAY,CAGtC,IAAM,EAAiB,EADD,IAAY,OAAY,EAAU,EACd,EAC1C,EAAM,KAAK,CAAc,EACpB,QAAI,EAET,OAAQ,EAAK,YAAY,OAClB,SACH,EAAM,KAAK,OAAO,CAAK,EAAE,SAAS,CAAC,EACnC,UACG,SACH,EAAM,KAAK,OAAO,CAAK,CAAC,EACxB,UACG,UACH,EAAM,KAAK,QAAQ,CAAK,EAAE,SAAS,CAAC,EACpC,cAEA,EAAM,KAAK,OAAO,CAAK,CAAC,EAG5B,OAAM,KAAK,OAAO,CAAK,CAAC,EAG1B,EAAY,EAAa,EAAU,OAIrC,GAAI,EAAY,EAAS,OACvB,EAAM,KAAK,EAAS,UAAU,CAAS,CAAC,EAI1C,OAAO,EAAc,EAAU,CAAC,EAAG,GAAG,CAAK,GChGxC,MAAM,CAAmC,CAErC,KACA,WAFT,WAAW,CACF,EACA,EACP,CAFO,YACA,kBAGT,SAAS,CAAC,EAAc,CACtB,GAAI,OAAO,OAAW,IACpB,MAAU,MAAM,qCAAqC,EAEvD,GAAI,CAAC,KAAK,aAAa,GACrB,MAAU,MAAM,6BAA6B,OAAO,CAAG,GAAG,EAE5D,OAAO,KAAK,WAAW,GAGzB,MAIC,CACC,KACG,EAGH,CACA,IAAQ,SAAS,EAAK,OAAO,EAAG,UAAW,CACzC,OAAQ,CAAC,KACN,EAAK,EACV,EAEA,GAAI,OAAO,OAAW,IACpB,MAAU,MAAM,kCAAkC,EAGpD,GAAI,CAAC,KAAK,aAAa,KAAO,GAC5B,MAAU,MACR,6BAA6B,OAAO,CAAG,QAAQ,OAAO,CAAM,GAC9D,EAEF,OAAO,EAAiB,KAAK,WAAW,GAAK,GAAS,GAAU,CAAC,CAAC,QAU7D,OAAoC,CAAC,EAAc,EAAiB,CACzE,OAAO,IAAI,EAAc,EAAM,CAAY,QAGtC,KAA+D,CACpE,KACG,EAWK,CACR,IAAQ,SAAS,EAAK,OAAO,EAAG,UAAW,CAAE,OAAQ,CAAC,KAAM,IAAO,EAAG,EAEtE,GAAI,CAAC,IAAU,GACb,MAAU,MAAM,6BAA6B,OAAO,CAAM,GAAG,EAG/D,OAAO,EAAiB,EAAQ,GAAS,GAAU,CAAC,CAAC,EAEzD,CC7EA,eAAsB,CAKrB,CACC,EACA,KACG,EAGc,CACjB,IAAQ,SAAS,EAAK,OAAO,EAAG,UAAW,CAAE,OAAQ,CAAC,KAAM,EAAK,EAAG,EAE9D,GADU,MAAM,EAAW,KAAK,OAAO,CAAM,CAAC,GAC3B,GAEzB,GAAI,OAAO,IAAa,SACtB,MAAU,MACR,8BAA8B,UAAY,OAAO,CAAM,kBAAkB,EAAW,KACtF,EAGF,OAAO,EAAiB,EAAW,GAAU,CAAC,CAAS",
-  "debugId": "6EBD0BD09D520AA564756E2164756E21",
+  "debugId": "65B0DC47E3658F0F64756E2164756E21",
   "names": []
 }

package/dist/kernel/index.js

@@ -1,5 +1,5 @@
 // @bun
-import{ya as y}from"../chunk-jfnhzza6.js";import{Va as i}from"../chunk-bsq80942.js";import{Wa as g}from"../chunk-f2n21fef.js";import{$a as e,Za as T,_a as D,ab as A,bb as w,fb as P,gb as S,ib as h,jb as R,kb as u,lb as l,ob as v,pb as d,sb as c,vb as p,yb as n}from"../chunk-k6rd1nd4.js";import"../chunk-wc46df4w.js";import"../chunk-b1dqx3b9.js";import{_b as r}from"../chunk-18aqqrev.js";import"../chunk-zm00crsx.js";import"../chunk-7kedxtbp.js";import{Ad as C,Bd as m,Cd as Q,Dd as t,Ed as o,Gc as Zj,Hc as $j,Kc as Gj,Lc as Hj,od as x,td as I,ud as E,xd as K,yd as M,zd as s}from"../chunk-48wh5mbp.js";import{Pd as a}from"../chunk-b0jpvp5t.js";import{ae as V,fe as f}from"../chunk-22k4b395.js";import{gf as F}from"../chunk-3cxbvrts.js";import{zf as B}from"../chunk-j9deswmn.js";import{Ff as L}from"../chunk-ayss2f8c.js";import"../chunk-5dwtmkk8.js";import"../chunk-xxkk60aw.js";import"../chunk-fcsq613t.js";import"../chunk-v4exgqbp.js";import"../chunk-st0d3ndv.js";import"../chunk-zhk3z9zk.js";import"../chunk-4f7n1r02.js";import{Ig as _,Kg as N,Lg as b}from"../chunk-xnggfm0s.js";import"../chunk-0fney17e.js";import"../chunk-yxh4xs3k.js";import"../chunk-ma5rmcbe.js";import{Yg as q}from"../chunk-3m93v7bt.js";import"../chunk-1xzdexbq.js";function Jj(j){let X=j.headers.get("Cache-Control")?.toLowerCase()??"";return/(^|[\s,])(public|s-maxage)\b/.test(X)}var Wj=new Set,Xj={refusal:null,apply:(j)=>j,carried:null};async function k(j){let X=b(x);if(X.config.global.length===0)return Xj;let{pathname:Z}=new URL(j.url),W=q(Z),z=new F(j,{},W?"api":"view","");return await L.run(z,async()=>{let $=L.getStore(),{headers:H,cookies:zj}=$,Y=(J)=>{if(!Jj(J))return Q(J,H,zj);let G=new Headers(H);return G.delete("Set-Cookie"),Q(J,G,Wj)};try{return await X.runGlobalMiddleware(),{refusal:null,apply:Y,carried:{user:$.user}}}catch(J){let G=!W&&Z.endsWith(".json");if(J?.kind===B){let O=W?m(J.payload.api):G?M(J.payload.viewData??J.payload.api):K(J.payload.view);return{refusal:Y(O),apply:Y,carried:null}}if(V(J)&&(W||G))return{refusal:Y(C()),apply:Y,carried:null};if(f(J)){console.error(J);let O=W||G?I():K(E());return{refusal:Y(O),apply:Y,carried:null}}throw J}finally{$.destroy()}})}var U=[l,d,y,P,n,A,S,v,R,D,h,p,u,g,c,w];class jj{config={};providers=[];services=[];serviceInstances=[];serviceTokens=new Set;servicesBooted=!1;models=[];app=new N;boot(){if(this.models.length>0)i(...this.models);else Yj();this.app.config.merge(this.config),N.setInstance(this.app),this.app.registerMany([...U,...this.providers]),this.registerServices()}registerServices(){let j=this.serviceTokens;this.serviceInstances=[],this.serviceTokens=new Set,this.servicesBooted=!1;let X=new Map;for(let Z of this.services){let W=typeof Z==="function"?new Z:Z,z=W.constructor;if(!z.token)throw Error(`Service [${z.name}] is listed in \`services\` but does not declare a \`static token\`.`);let $=X.get(z.token);if($)throw Error(`Services [${$}] and [${z.name}] both declare the token "${z.token}". Tokens are the container's keys, so they must be unique.`);X.set(z.token,z.name);let H=z;if(!j.has(z.token)&&this.app.bound(H))throw Error(`Service [${z.name}] declares the token "${z.token}", which is already bound in the container by the framework or a provider. Binding it would replace that service everywhere, so pick a token nothing else owns.`);this.app.instance(H,W),this.serviceInstances.push(W),this.serviceTokens.add(z.token)}}async waitForBoot(){await this.app.boot(),await this.bootServices(),e(this.app)}async bootServices(){if(this.servicesBooted)return;for(let j of this.serviceInstances)await j.boot();this.servicesBooted=!0}shutdown(j){return this.run(()=>this.app.shutdown(j))}run(j){return _.run(this.app,j)}resolve(j){return this.app.make(j)}apiRoutes(){return this.app.make(t)}viewRoutes(){return this.app.make(s)}domains(){return this.app.make(o)}queue(){return this.app.make(r)}globalMiddleware(j){return k(j)}destroy(){if(this.app.resolved(T))this.app.make(T).stop();if(this.app.flush(),N.getInstance()===this.app)N.setInstance(void 0);_.disable()}}function Yj(){if(Bun.env.NODE_ENV==="production")return;let j=a();if(j.length===0)return;console.warn(`[gemi] ${j.length} model${j.length===1?" is":"s are"} registered, but Kernel.models is empty.
+import{Aa as y}from"../chunk-yebaheh7.js";import{Xa as i}from"../chunk-k17prwhx.js";import{Ya as g}from"../chunk-mrvcaakf.js";import{$a as T,Ab as n,ab as D,bb as e,cb as A,db as w,hb as P,ib as S,kb as h,lb as R,mb as u,nb as l,qb as v,rb as d,ub as c,xb as p}from"../chunk-2mhx4e4g.js";import"../chunk-t26n9vzw.js";import"../chunk-ftgd68se.js";import{ac as r}from"../chunk-6wrhc9bq.js";import"../chunk-h4x7cba0.js";import"../chunk-9hbwvcxn.js";import{Cd as K,Dd as M,Ed as s,Fd as C,Gd as m,Hd as Q,Id as t,Jd as o,Kc as Zj,Lc as $j,Oc as Gj,Pc as Hj,td as x,yd as I,zd as E}from"../chunk-ncfxmtd5.js";import{fe as a}from"../chunk-h7pafjej.js";import{se as V,xe as f}from"../chunk-1npdp1w2.js";import{yf as F}from"../chunk-rh9j8cwv.js";import{Rf as B}from"../chunk-fwympxqk.js";import{Xf as L}from"../chunk-njkk498k.js";import"../chunk-gqpge54c.js";import"../chunk-5wt25tyd.js";import"../chunk-k9qmr2wa.js";import"../chunk-4rr9wmh8.js";import"../chunk-47rgq59q.js";import"../chunk-tyhrrnp5.js";import"../chunk-2q7m8a16.js";import{_g as _,ah as N,bh as b}from"../chunk-9mqqr05d.js";import"../chunk-2gmgd05c.js";import"../chunk-6rz8kyqb.js";import"../chunk-kqz8jp6v.js";import{oh as q}from"../chunk-82hpq0bq.js";import"../chunk-3s3awh38.js";function Jj(j){let X=j.headers.get("Cache-Control")?.toLowerCase()??"";return/(^|[\s,])(public|s-maxage)\b/.test(X)}var Wj=new Set,Xj={refusal:null,apply:(j)=>j,carried:null};async function k(j){let X=b(x);if(X.config.global.length===0)return Xj;let{pathname:Z}=new URL(j.url),W=q(Z),z=new F(j,{},W?"api":"view","");return await L.run(z,async()=>{let $=L.getStore(),{headers:H,cookies:zj}=$,Y=(J)=>{if(!Jj(J))return Q(J,H,zj);let G=new Headers(H);return G.delete("Set-Cookie"),Q(J,G,Wj)};try{return await X.runGlobalMiddleware(),{refusal:null,apply:Y,carried:{user:$.user}}}catch(J){let G=!W&&Z.endsWith(".json");if(J?.kind===B){let O=W?m(J.payload.api):G?M(J.payload.viewData??J.payload.api):K(J.payload.view);return{refusal:Y(O),apply:Y,carried:null}}if(V(J)&&(W||G))return{refusal:Y(C()),apply:Y,carried:null};if(f(J)){console.error(J);let O=W||G?I():K(E());return{refusal:Y(O),apply:Y,carried:null}}throw J}finally{$.destroy()}})}var U=[l,d,y,P,n,A,S,v,R,D,h,p,u,g,c,w];class jj{config={};providers=[];services=[];serviceInstances=[];serviceTokens=new Set;servicesBooted=!1;models=[];app=new N;boot(){if(this.models.length>0)i(...this.models);else Yj();this.app.config.merge(this.config),N.setInstance(this.app),this.app.registerMany([...U,...this.providers]),this.registerServices()}registerServices(){let j=this.serviceTokens;this.serviceInstances=[],this.serviceTokens=new Set,this.servicesBooted=!1;let X=new Map;for(let Z of this.services){let W=typeof Z==="function"?new Z:Z,z=W.constructor;if(!z.token)throw Error(`Service [${z.name}] is listed in \`services\` but does not declare a \`static token\`.`);let $=X.get(z.token);if($)throw Error(`Services [${$}] and [${z.name}] both declare the token "${z.token}". Tokens are the container's keys, so they must be unique.`);X.set(z.token,z.name);let H=z;if(!j.has(z.token)&&this.app.bound(H))throw Error(`Service [${z.name}] declares the token "${z.token}", which is already bound in the container by the framework or a provider. Binding it would replace that service everywhere, so pick a token nothing else owns.`);this.app.instance(H,W),this.serviceInstances.push(W),this.serviceTokens.add(z.token)}}async waitForBoot(){await this.app.boot(),await this.bootServices(),e(this.app)}async bootServices(){if(this.servicesBooted)return;for(let j of this.serviceInstances)await j.boot();this.servicesBooted=!0}shutdown(j){return this.run(()=>this.app.shutdown(j))}run(j){return _.run(this.app,j)}resolve(j){return this.app.make(j)}apiRoutes(){return this.app.make(t)}viewRoutes(){return this.app.make(s)}domains(){return this.app.make(o)}queue(){return this.app.make(r)}globalMiddleware(j){return k(j)}destroy(){if(this.app.resolved(T))this.app.make(T).stop();if(this.app.flush(),N.getInstance()===this.app)N.setInstance(void 0);_.disable()}}function Yj(){if(Bun.env.NODE_ENV==="production")return;let j=a();if(j.length===0)return;console.warn(`[gemi] ${j.length} model${j.length===1?" is":"s are"} registered, but Kernel.models is empty.
         Nested relation reads resolve a model by name, so a policy on a subclass that does not own its
 `+"        name is skipped inside every include \u2014 scoped at the root, "+`unscoped in an include, with nothing
         to notice it. Declaring the modules registers each class under its own name and audits the set:
@@ -13,4 +13,4 @@ import{ya as y}from"../chunk-jfnhzza6.js";import{Va as i}from"../chunk-bsq80942.
 
         See docs/orm.md#your-model-class. Development only; this never prints in production.`)}export{$j as oneTimeSecretMatches,Zj as hashOneTimeSecret,U as frameworkProviders,Hj as UserProvider,Gj as SESSION_SELECT,jj as Kernel};
 
-//# debugId=6D1A9BD62F3E579364756E2164756E21
+//# debugId=876FC2903CB5D03C64756E2164756E21

package/dist/kernel/index.js.map

@@ -7,6 +7,6 @@
     "import { Application } from \"../foundation/Application\";\nimport type { ServiceProviderConstructor, ShutdownReport } from \"../foundation/Application\";\nimport type { ServiceToken } from \"../container/Container\";\nimport type { ConfigItems } from \"../support/Repository\";\nimport type { Service, ServiceConstructor } from \"../support/Service\";\nimport { registerModels } from \"../orm/registration\";\nimport { registeredNames } from \"../orm/registry\";\nimport { Scheduler } from \"../services/cron/Scheduler\";\nimport { QueueManager } from \"../services/queue/QueueManager\";\nimport { startClaimingIfServing } from \"../services/queue/QueueServiceProvider\";\nimport { ApiRouteDispatcher } from \"../services/router/ApiRouteDispatcher\";\nimport { ViewRouteDispatcher } from \"../services/router/ViewRouteDispatcher\";\nimport { DomainRouter } from \"../services/router/DomainRouter\";\nimport { runGlobalMiddleware } from \"../services/router/globalMiddleware\";\nimport { kernelContext } from \"./context\";\nimport { frameworkProviders } from \"./providers\";\n\n/**\n * The app's entry point into the framework. A Kernel subclass declares what the\n * app adds — its `config` slices and any extra `providers` — and everything\n * else lives in the Application container it owns.\n */\nexport class Kernel {\n  /**\n   * App-level config, merged over the framework defaults. Each key is a config\n   * slice: `{ mail: { ... }, route: { ... } }`, normally the modules under\n   * `app/config`.\n   */\n  protected config: ConfigItems = {};\n\n  /**\n   * App-level providers, registered after the framework's own so they can\n   * rebind anything the framework bound.\n   */\n  protected providers: ServiceProviderConstructor[] = [];\n\n  /**\n   * The app's own singleton services. Each is constructed during the\n   * synchronous boot phase and its `boot()` awaited during the asynchronous\n   * one, in the order listed — so a service whose `boot()` depends on another\n   * goes after it.\n   *\n   * An entry is either the class itself or a configured instance from\n   * `Service.with({ ... })`. Listing is explicit rather than discovered because\n   * the order is load-bearing here, and because a service is always imported by\n   * whatever injects it — there is no file the import graph would miss.\n   */\n  protected services: Array<ServiceConstructor | Service> = [];\n\n  private serviceInstances: Service[] = [];\n  private serviceTokens = new Set<string>();\n  private servicesBooted = false;\n\n  /**\n   * The modules holding the app's model classes — normally\n   * `[generated, models]`, the generated namespace and the barrel of subclasses\n   * written over it. Every model class they export is registered under the name\n   * its schema carries, later modules winning, and the whole set is audited\n   * before anything else boots.\n   *\n   * ### Why this is a Kernel field and not a line in a file somewhere\n   *\n   * Registration used to be `register(\"User\", User)` next to each subclass, and\n   * the failure mode of forgetting it is an authorization hole that nothing\n   * reports: a relation read resolves its target by name, so an unregistered\n   * policied subclass leaves the generated base owning the name and every\n   * nested `include` of that model comes back unscoped. No error at the root\n   * either, because `$exec`'s divergence guard begins `registered !== this` and\n   * the base it is running on *is* the registered one. A model only ever read\n   * through an include — a membership, a pivot, the kind that carries a tenant\n   * scope — never trips anything.\n   *\n   * Listing the modules here says it once, in the same place the app already\n   * declares its config slices and providers, and turns the mistake into a\n   * failure to boot rather than a quiet cross-tenant read.\n   *\n   * It sees the modules it is given, so a model class in a file that no barrel\n   * re-exports is still invisible. That is the residual, and it is a smaller\n   * one: a barrel is a place to notice an omission, and thirteen `register`\n   * lines scattered across thirteen files is not.\n   */\n  protected models: Array<Record<string, unknown>> = [];\n\n  readonly app = new Application();\n\n  /**\n   * Phase one, synchronous: every provider is constructed and its `register()`\n   * runs. Only bindings are recorded here — no service is instantiated, so this\n   * is safe to call from a synchronous constructor (`new App({ kernel })`).\n   * Phase two is `waitForBoot()`.\n   */\n  boot() {\n    // Before the container, deliberately. This throws on a model whose policies\n    // would be skipped, and the useful moment for that is the one where nothing\n    // has been constructed and no request can be in flight.\n    if (this.models.length > 0) registerModels(...this.models);\n    else warnIfModelsAreRegisteredButUndeclared();\n\n    this.app.config.merge(this.config);\n    Application.setInstance(this.app);\n    this.app.registerMany([...frameworkProviders, ...this.providers]);\n    this.registerServices();\n  }\n\n  /**\n   * Constructs every listed service and binds it into the container. Runs after\n   * the providers have registered, so a provider's `boot()` can `inject()` one;\n   * a `Service` constructor does no I/O, so doing this synchronously costs\n   * nothing beyond the field initializers.\n   */\n  private registerServices() {\n    // What a previous pass bound, so re-running this on the same kernel is not\n    // mistaken for a collision with something else.\n    const ours = this.serviceTokens;\n\n    this.serviceInstances = [];\n    this.serviceTokens = new Set();\n    this.servicesBooted = false;\n\n    const owners = new Map<string, string>();\n\n    for (const declaration of this.services) {\n      const instance =\n        typeof declaration === \"function\" ? new declaration() : declaration;\n      const ctor = instance.constructor as ServiceConstructor;\n\n      if (!ctor.token) {\n        throw new Error(\n          `Service [${ctor.name}] is listed in \\`services\\` but does not declare a \\`static token\\`.`,\n        );\n      }\n\n      // Two services under one token is the failure this refuses to have\n      // silently: the second would replace the first in the container, and\n      // every `inject()` written against either would hand back whichever was\n      // listed last.\n      const owner = owners.get(ctor.token);\n      if (owner) {\n        throw new Error(\n          `Services [${owner}] and [${ctor.name}] both declare the token \"${ctor.token}\". Tokens are the container's keys, so they must be unique.`,\n        );\n      }\n      owners.set(ctor.token, ctor.name);\n\n      // The same failure one level out. `Container.instance()` writes into\n      // `instances`, which `make()` consults before `bindings`, so a token that\n      // is already spoken for is not shared with its owner — it replaces it, for\n      // every `app()` and `inject()` in the process. An app service that named\n      // itself \"mail\" would leave `Mail.send()` resolving to an object with no\n      // `send`, and the boot that caused it would report nothing. Providers have\n      // all registered by now, so anything bound here belongs to somebody else.\n      const token = ctor as unknown as ServiceToken<Service>;\n      if (!ours.has(ctor.token) && this.app.bound(token)) {\n        throw new Error(\n          `Service [${ctor.name}] declares the token \"${ctor.token}\", which is already bound in the container by the framework or a provider. Binding it would replace that service everywhere, so pick a token nothing else owns.`,\n        );\n      }\n\n      this.app.instance(token, instance);\n      this.serviceInstances.push(instance);\n      this.serviceTokens.add(ctor.token);\n    }\n  }\n\n  /**\n   * Phase two, asynchronous: every provider's `boot()` runs, in registration\n   * order, after all of them have registered. Idempotent.\n   */\n  async waitForBoot() {\n    await this.app.boot();\n    await this.bootServices();\n    // Last, once every job — queued listeners included — is registered.\n    startClaimingIfServing(this.app);\n  }\n\n  /**\n   * Phase two for services, after every provider's `boot()` — so a service may\n   * use the facades and anything else a provider owns. Idempotent, like the\n   * provider phase it follows.\n   */\n  private async bootServices() {\n    if (this.servicesBooted) {\n      return;\n    }\n    for (const service of this.serviceInstances) {\n      await service.boot();\n    }\n    this.servicesBooted = true;\n  }\n\n  /**\n   * Every provider's `shutdown()`, in reverse registration order, inside the\n   * application context — so a hook may use the facades, as a cron tick or a\n   * request would. See `Application.shutdown` for the deadline and the\n   * report. Idempotent.\n   */\n  shutdown(options?: { timeoutMs?: number }): Promise<ShutdownReport> {\n    return this.run(() => this.app.shutdown(options));\n  }\n\n  run<T>(cb: () => T) {\n    return kernelContext.run(this.app, cb);\n  }\n\n  /**\n   * Resolve a service by token. Callers outside this module should prefer the\n   * named accessors below or `app()`; this exists for tooling that holds a\n   * Kernel but no ambient context.\n   */\n  resolve<T>(token: ServiceToken<T>): T {\n    return this.app.make(token);\n  }\n\n  // Named accessors. `app/App.ts` goes through these rather than importing the\n  // service classes itself — see the note in that file about the two copies of\n  // gemi that coexist at build time.\n  apiRoutes(): ApiRouteDispatcher {\n    return this.app.make(ApiRouteDispatcher);\n  }\n\n  viewRoutes(): ViewRouteDispatcher {\n    return this.app.make(ViewRouteDispatcher);\n  }\n\n  domains(): DomainRouter {\n    return this.app.make(DomainRouter);\n  }\n\n  queue(): QueueManager {\n    return this.app.make(QueueManager);\n  }\n\n  /** The `global` middleware list for one request. Call it inside `run`. */\n  globalMiddleware(req: Request) {\n    return runGlobalMiddleware(req);\n  }\n\n  destroy() {\n    // Only touch services that were actually resolved — resolving one here\n    // would construct it purely to tear it down.\n    if (this.app.resolved(Scheduler)) {\n      this.app.make(Scheduler).stop();\n    }\n\n    this.app.flush();\n\n    if (Application.getInstance() === this.app) {\n      Application.setInstance(undefined);\n    }\n\n    kernelContext.disable();\n  }\n}\n\n/**\n * Says something to an application that has models and has not declared them.\n *\n * Without this the fix for #316 defaults to off. `models` is `[]`, `boot()`\n * no-ops, and an app upgrading from 0.48 is in exactly the state the issue\n * describes until somebody edits their Kernel by hand — while the only place\n * that says to is the **Setup** section of `docs/orm.md`, which an existing app\n * read once and will not read again. #316 was filed by an app mid-migration\n * with a 79-model schema, which is precisely the reader who never sees it.\n *\n * The condition is what makes this worth printing. A populated registry with an\n * empty `models` means the generated `index.ts` was imported and its bases are\n * what every nested read resolves to — so if any policy lives on a subclass, it\n * is being skipped inside includes right now. A Kernel with no ORM at all has\n * an empty registry and hears nothing.\n *\n * Development only, and a warning rather than a throw: an app in this state is\n * running today, and turning a working deploy into a failure to start over an\n * arrangement that *might* be fine is not a patch-level thing to do. The\n * failure it points at is silent, so the fix for it has to be noisy somewhere,\n * and the terminal an author is already looking at is the cheapest somewhere\n * there is.\n */\nfunction warnIfModelsAreRegisteredButUndeclared(): void {\n  if (process.env.NODE_ENV === \"production\") return;\n\n  const registered = registeredNames();\n  if (registered.length === 0) return;\n\n  console.warn(\n    `[gemi] ${registered.length} model${registered.length === 1 ? \" is\" : \"s are\"} ` +\n      `registered, but Kernel.models is empty.\\n` +\n      `        Nested relation reads resolve a model by name, so a policy on a ` +\n      `subclass that does not own its\\n` +\n      `        name is skipped inside every include — scoped at the root, ` +\n      `unscoped in an include, with nothing\\n` +\n      `        to notice it. Declaring the modules registers each class under ` +\n      `its own name and audits the set:\\n\\n` +\n      `            import * as generated from \"../models/generated\"\\n` +\n      `            import * as models from \"../models\"\\n\\n` +\n      `            export default class extends Kernel {\\n` +\n      `              models = [generated, models]\\n` +\n      `            }\\n\\n` +\n      `        See docs/orm.md#your-model-class. Development only; this never ` +\n      `prints in production.`,\n  );\n}\n"
   ],
   "mappings": ";g2CAqCA,IAAS,HAAe,JAAC,HAAoB,JAC3C,DAAM,HAAe,HAAS,GAAQ,DAAI,UAAe,FAAG,OAAY,FAAK,FAC7E,CAAO,0BAA+B,AAAK,JAAY,HAGzD,DAAM,FAAY,DAAI,DAEhB,FAAuC,JAC3C,GAAS,KACT,MAAO,CAAC,IAAa,EACrB,QAAS,IACX,EA8BA,eAAsB,CAAmB,CAAC,EAAgD,CACxF,IAAM,EAAW,EAAI,CAAkB,EACvC,GAAI,EAAS,OAAO,OAAO,SAAW,EACpC,OAAO,GAGT,IAAQ,YAAa,IAAI,IAAI,EAAI,GAAG,EAC9B,EAAQ,EAAU,CAAQ,EAC1B,EAAc,IAAI,EAAY,EAAK,CAAC,EAAG,EAAQ,MAAQ,OAAQ,EAAE,EAEvE,OAAO,MAAM,EAAe,IAAI,EAAa,SAAY,CACvD,IAAM,EAAM,EAAe,SAAS,GAE5B,UAAS,YAAY,EACvB,EAAQ,CAAC,IAAuB,CACpC,GAAI,CAAC,GAAgB,CAAQ,EAC3B,OAAO,EAAyB,EAAU,EAAS,EAAO,EAE5D,IAAM,EAAiB,IAAI,QAAQ,CAAO,EAE1C,OADA,EAAe,OAAO,YAAY,EAC3B,EAAyB,EAAU,EAAgB,EAAS,GAGrE,GAAI,CAEF,OADA,MAAM,EAAS,oBAAoB,EAC5B,CAAE,QAAS,KAAM,QAAO,QAAS,CAAE,KAAM,EAAI,IAAK,CAAE,EAC3D,MAAO,EAAK,CACZ,IAAM,EAAa,CAAC,GAAS,EAAS,SAAS,OAAO,EACtD,GAAI,GAAK,OAAS,EAA4B,CAC5C,IAAM,EAAU,EACZ,EAAc,EAAI,QAAQ,GAAG,EAC7B,EACE,EAAsB,EAAI,QAAQ,UAAY,EAAI,QAAQ,GAAG,EAC7D,EAAkB,EAAI,QAAQ,IAAI,EACxC,MAAO,CAAE,QAAS,EAAM,CAAO,EAAG,QAAO,QAAS,IAAK,EAOzD,GAAI,EAAsB,CAAG,IAAM,GAAS,GAC1C,MAAO,CAAE,QAAS,EAAM,EAAiB,CAAC,EAAG,QAAO,QAAS,IAAK,EAEpE,GAAI,EAAoB,CAAG,EAAG,CAC5B,QAAQ,MAAM,CAAG,EACjB,IAAM,EACJ,GAAS,EAAa,EAAqB,EAAI,EAAkB,EAAiB,CAAC,EACrF,MAAO,CAAE,QAAS,EAAM,CAAO,EAAG,QAAO,QAAS,IAAK,EAEzD,MAAM,SACN,CACA,EAAI,QAAQ,GAEf,EC9FI,IAAM,EAAmD,CAC9D,EACA,EACA,EAGA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,CACF,ECnCO,MAAM,EAAO,CAMR,OAAsB,CAAC,EAMvB,UAA0C,CAAC,EAa3C,SAAgD,CAAC,EAEnD,iBAA8B,CAAC,EAC/B,cAAgB,IAAI,IACpB,eAAiB,GA8Bf,OAAyC,CAAC,EAE3C,IAAM,IAAI,EAQnB,IAAI,EAAG,CAIL,GAAI,KAAK,OAAO,OAAS,EAAG,EAAe,GAAG,KAAK,MAAM,EACpD,QAAuC,EAE5C,KAAK,IAAI,OAAO,MAAM,KAAK,MAAM,EACjC,EAAY,YAAY,KAAK,GAAG,EAChC,KAAK,IAAI,aAAa,CAAC,GAAG,EAAoB,GAAG,KAAK,SAAS,CAAC,EAChE,KAAK,iBAAiB,EAShB,gBAAgB,EAAG,CAGzB,IAAM,EAAO,KAAK,cAElB,KAAK,iBAAmB,CAAC,EACzB,KAAK,cAAgB,IAAI,IACzB,KAAK,eAAiB,GAEtB,IAAM,EAAS,IAAI,IAEnB,QAAW,KAAe,KAAK,SAAU,CACvC,IAAM,EACJ,OAAO,IAAgB,WAAa,IAAI,EAAgB,EACpD,EAAO,EAAS,YAEtB,GAAI,CAAC,EAAK,MACR,MAAU,MACR,YAAY,EAAK,0EACnB,EAOF,IAAM,EAAQ,EAAO,IAAI,EAAK,KAAK,EACnC,GAAI,EACF,MAAU,MACR,aAAa,WAAe,EAAK,iCAAiC,EAAK,kEACzE,EAEF,EAAO,IAAI,EAAK,MAAO,EAAK,IAAI,EAShC,IAAM,EAAQ,EACd,GAAI,CAAC,EAAK,IAAI,EAAK,KAAK,GAAK,KAAK,IAAI,MAAM,CAAK,EAC/C,MAAU,MACR,YAAY,EAAK,6BAA6B,EAAK,sKACrD,EAGF,KAAK,IAAI,SAAS,EAAO,CAAQ,EACjC,KAAK,iBAAiB,KAAK,CAAQ,EACnC,KAAK,cAAc,IAAI,EAAK,KAAK,QAQ/B,YAAW,EAAG,CAClB,MAAM,KAAK,IAAI,KAAK,EACpB,MAAM,KAAK,aAAa,EAExB,EAAuB,KAAK,GAAG,OAQnB,aAAY,EAAG,CAC3B,GAAI,KAAK,eACP,OAEF,QAAW,KAAW,KAAK,iBACzB,MAAM,EAAQ,KAAK,EAErB,KAAK,eAAiB,GASxB,QAAQ,CAAC,EAA2D,CAClE,OAAO,KAAK,IAAI,IAAM,KAAK,IAAI,SAAS,CAAO,CAAC,EAGlD,GAAM,CAAC,EAAa,CAClB,OAAO,EAAc,IAAI,KAAK,IAAK,CAAE,EAQvC,OAAU,CAAC,EAA2B,CACpC,OAAO,KAAK,IAAI,KAAK,CAAK,EAM5B,SAAS,EAAuB,CAC9B,OAAO,KAAK,IAAI,KAAK,CAAkB,EAGzC,UAAU,EAAwB,CAChC,OAAO,KAAK,IAAI,KAAK,CAAmB,EAG1C,OAAO,EAAiB,CACtB,OAAO,KAAK,IAAI,KAAK,CAAY,EAGnC,KAAK,EAAiB,CACpB,OAAO,KAAK,IAAI,KAAK,CAAY,EAInC,gBAAgB,CAAC,EAAc,CAC7B,OAAO,EAAoB,CAAG,EAGhC,OAAO,EAAG,CAGR,GAAI,KAAK,IAAI,SAAS,CAAS,EAC7B,KAAK,IAAI,KAAK,CAAS,EAAE,KAAK,EAKhC,GAFA,KAAK,IAAI,MAAM,EAEX,EAAY,YAAY,IAAM,KAAK,IACrC,EAAY,YAAY,MAAS,EAGnC,EAAc,QAAQ,EAE1B,CAyBA,SAAS,EAAsC,EAAS,CACtD,GAAI,mBAAyB,aAAc,OAE3C,IAAM,EAAa,EAAgB,EACnC,GAAI,EAAW,SAAW,EAAG,OAE7B,QAAQ,KACN,UAAU,EAAW,eAAe,EAAW,SAAW,EAAI,MAAQ;AAAA;AAAA,EAIpE,2EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6FAUJ",
-  "debugId": "6D1A9BD62F3E579364756E2164756E21",
+  "debugId": "876FC2903CB5D03C64756E2164756E21",
   "names": []
 }