gemi 0.116.0 → 0.118.0

package/dist/i18n/dictionaryRuntime.js

@@ -1,4 +1,4 @@
 // @bun
-import{ba as y,ca as p}from"../chunk-785b41h1.js";import{ta as c,ua as d,wa as l}from"../chunk-yer1r3t3.js";import{Gh as e,Hh as i,Jh as t,Kh as r,Lh as o,Mh as n,Nh as a,Oh as s}from"../chunk-aazmrxj9.js";import"../chunk-vw8849ys.js";export{o as setActiveLocale,r as seedDictionaries,t as preloadDictionaries,d as localeStrings,i as loadDictionary,n as getActiveLocale,e as dictionaryRegistrationMark,c as dictionaryLocales,l as dictionaryId,y as defineDictionary,s as createDictionarySink,a as __resetDictionaryRegistry,p as __gemi_dict__};
+import{ca as y,da as p}from"../chunk-j5858bz7.js";import{ua as c,va as d,xa as l}from"../chunk-epvpmakp.js";import{Ai as a,Bi as s,ti as e,ui as i,wi as t,xi as r,yi as o,zi as n}from"../chunk-g9hhdcax.js";import"../chunk-hm9cjxy2.js";export{o as setActiveLocale,r as seedDictionaries,t as preloadDictionaries,d as localeStrings,i as loadDictionary,n as getActiveLocale,e as dictionaryRegistrationMark,c as dictionaryLocales,l as dictionaryId,y as defineDictionary,s as createDictionarySink,a as __resetDictionaryRegistry,p as __gemi_dict__};
 
-//# debugId=35EDA8EC28C8F7D664756E2164756E21
+//# debugId=B329B071C749B20464756E2164756E21

package/dist/i18n/dictionaryRuntime.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "35EDA8EC28C8F7D664756E2164756E21",
+  "debugId": "B329B071C749B20464756E2164756E21",
   "names": []
 }

package/dist/i18n/index.d.ts

@@ -4,7 +4,7 @@ export { defineTranslationConfig, translationConfigDefaults, type TranslationCon
 export { Dictionary } from "./Dictionary";
 export { defineDictionary, type DictionaryHandle, } from "./defineDictionary";
 export { translate } from "./translate";
-export { resolveLocale } from "./resolveLocale";
+export { negotiateLocale, resolveLocale } from "./resolveLocale";
 export type { DictionaryTranslations, LocaleStrings } from "./dictionaryShape";
 export { createFormatter, isValidTimeZone, DEFAULT_TIME_ZONE, type Formatter, type FormatterInit, type DateInput, } from "./formatter";
 //# sourceMappingURL=index.d.ts.map

package/dist/i18n/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../i18n/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAK1C,OAAO,EACL,gBAAgB,EAChB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,YAAY,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,SAAS,GACf,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../i18n/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAK1C,OAAO,EACL,gBAAgB,EAChB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAIxC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjE,YAAY,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,SAAS,GACf,MAAM,aAAa,CAAC"}

package/dist/i18n/index.js

@@ -1,4 +1,4 @@
 // @bun
-import{ba as D}from"../chunk-785b41h1.js";import"../chunk-yer1r3t3.js";import{eb as w}from"../chunk-1q9kd20m.js";import{Jc as S,Kc as b}from"../chunk-v1tfdgy1.js";import"../chunk-n672d4g8.js";import{ud as j}from"../chunk-ms9k0rx6.js";import"../chunk-whtzggn6.js";import"../chunk-hytt9qyj.js";import"../chunk-pn8v6fj2.js";import"../chunk-15c2vgaf.js";import"../chunk-49nyyjfe.js";import"../chunk-tn2bryy2.js";import"../chunk-cbqazg9k.js";import"../chunk-1myhm0g3.js";import"../chunk-kejwjerj.js";import"../chunk-aazmrxj9.js";import{Vh as X,Wh as A,Xh as E,Yh as L,Zh as R}from"../chunk-jmg2zsaf.js";import"../chunk-t4yh4nf9.js";import"../chunk-1vzks22y.js";import"../chunk-zyt2w03d.js";import"../chunk-1hr4xht1.js";import"../chunk-d9mar37g.js";import"../chunk-vw8849ys.js";import{createElement as M,Fragment as N,isValidElement as U}from"react";function $(q,B){let G=Object.values(B).some((z)=>typeof z==="function"&&U(z(""))),Q=/{{([^{}]+?)(?::([^{}\[\]]+?))?(?:\[(.*?)\])?}}/g;if(!G)return q.replace(Q,(W,O,_,Z)=>{let C=O.includes(":")?O.split(":")[0]:O,H=B[C];if(H===void 0)return W;if(typeof H==="function"){let K=H(Z!==void 0?Z:"");if(U(K))throw Error("JSX returned in string context");return String(K)}if(_)switch(_.toLowerCase()){case"number":return Number(H).toString();case"string":return String(H);case"boolean":return Boolean(H).toString();default:return String(H)}return String(H)});else{let z=[],W=0,O=null;while((O=Q.exec(q))!==null){let[_,Z,C,H]=O,F=O.index,K=Z.includes(":")?Z.split(":")[0]:Z;if(F>W)z.push(q.substring(W,F));let Y=B[K];if(Y===void 0)z.push(_);else if(typeof Y==="function"){let J=Y(H!==void 0?H:"");z.push(J)}else if(C)switch(C.toLowerCase()){case"number":z.push(Number(Y).toString());break;case"string":z.push(String(Y));break;case"boolean":z.push(Boolean(Y).toString());break;default:z.push(String(Y))}else z.push(String(Y));W=F+_.length}if(W<q.length)z.push(q.substring(W));return M(N,{},...z)}}class P{name;dictionary;constructor(q,B){this.name=q;this.dictionary=B}reference(q){if(typeof window<"u")throw Error("Cannot use reference in the browser");if(!this.dictionary?.[q])throw Error(`Translation not found for ${String(q)}`);return this.dictionary[q]}render(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B[0]};if(typeof window<"u")throw Error("Cannot use render in the browser");if(!this.dictionary?.[q]?.[G])throw Error(`Translation not found for ${String(q)} in ${String(G)}`);return $(this.dictionary[q][G],Q??{})}static create(q,B){return new P(q,B)}static text(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B?.[0]};if(!q?.[G])throw Error(`Translation not found for ${String(G)}`);return $(q[G],Q??{})}}async function V(q,B,...G){let{locale:Q=j.locale(),params:z}={params:{},...G[0]},O=(await q.load(String(Q)))[B];if(typeof O!=="string")throw Error(`Translation not found for "${B}" in "${String(Q)}" (dictionary ${q.id})`);return $(O,z??{})}export{b as translationConfigDefaults,V as translate,X as resolveLocale,E as isValidTimeZone,S as defineTranslationConfig,D as defineDictionary,L as createFormatter,R as Translator,w as TranslationServiceProvider,P as Dictionary,A as DEFAULT_TIME_ZONE};
+import{ca as T}from"../chunk-j5858bz7.js";import"../chunk-epvpmakp.js";import{fb as D}from"../chunk-3nf95j9e.js";import{Wc as b,Xc as w}from"../chunk-tzdenj0n.js";import"../chunk-30xxc6r7.js";import{Hd as j}from"../chunk-47h12eme.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import"../chunk-3zxfd7pn.js";import"../chunk-1m3hvy3q.js";import"../chunk-490sbcma.js";import"../chunk-k31qfe7a.js";import"../chunk-y09r0wsw.js";import"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import{Ii as V,Ji as X,Ki as E,Li as L,Mi as R,Ni as S}from"../chunk-z759yah5.js";import"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import"../chunk-jf6qqzat.js";import"../chunk-hm9cjxy2.js";import{createElement as J,Fragment as M,isValidElement as U}from"react";function $(q,B){let G=Object.values(B).some((z)=>typeof z==="function"&&U(z(""))),Q=/{{([^{}]+?)(?::([^{}\[\]]+?))?(?:\[(.*?)\])?}}/g;if(!G)return q.replace(Q,(W,O,_,Z)=>{let C=O.includes(":")?O.split(":")[0]:O,H=B[C];if(H===void 0)return W;if(typeof H==="function"){let K=H(Z!==void 0?Z:"");if(U(K))throw Error("JSX returned in string context");return String(K)}if(_)switch(_.toLowerCase()){case"number":return Number(H).toString();case"string":return String(H);case"boolean":return Boolean(H).toString();default:return String(H)}return String(H)});else{let z=[],W=0,O=null;while((O=Q.exec(q))!==null){let[_,Z,C,H]=O,F=O.index,K=Z.includes(":")?Z.split(":")[0]:Z;if(F>W)z.push(q.substring(W,F));let Y=B[K];if(Y===void 0)z.push(_);else if(typeof Y==="function"){let A=Y(H!==void 0?H:"");z.push(A)}else if(C)switch(C.toLowerCase()){case"number":z.push(Number(Y).toString());break;case"string":z.push(String(Y));break;case"boolean":z.push(Boolean(Y).toString());break;default:z.push(String(Y))}else z.push(String(Y));W=F+_.length}if(W<q.length)z.push(q.substring(W));return J(M,{},...z)}}class P{name;dictionary;constructor(q,B){this.name=q;this.dictionary=B}reference(q){if(typeof window<"u")throw Error("Cannot use reference in the browser");if(!this.dictionary?.[q])throw Error(`Translation not found for ${String(q)}`);return this.dictionary[q]}render(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B[0]};if(typeof window<"u")throw Error("Cannot use render in the browser");if(!this.dictionary?.[q]?.[G])throw Error(`Translation not found for ${String(q)} in ${String(G)}`);return $(this.dictionary[q][G],Q??{})}static create(q,B){return new P(q,B)}static text(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B?.[0]};if(!q?.[G])throw Error(`Translation not found for ${String(G)}`);return $(q[G],Q??{})}}async function N(q,B,...G){let{locale:Q=j.locale(),params:z}={params:{},...G[0]},O=(await q.load(String(Q)))[B];if(typeof O!=="string")throw Error(`Translation not found for "${B}" in "${String(Q)}" (dictionary ${q.id})`);return $(O,z??{})}export{w as translationConfigDefaults,N as translate,V as resolveLocale,X as negotiateLocale,L as isValidTimeZone,b as defineTranslationConfig,T as defineDictionary,R as createFormatter,S as Translator,D as TranslationServiceProvider,P as Dictionary,E as DEFAULT_TIME_ZONE};
 
-//# debugId=E46CFD3CEED33FE064756E2164756E21
+//# debugId=2E75C41A3B3A3BC564756E2164756E21

package/dist/i18n/index.js.map

@@ -6,7 +6,7 @@
     "// The module, not the `../facades` barrel. A dictionary is the one server-side\n// artifact a *component* test has to import — `<Page dictionaries={[…]}>` takes\n// the app's real `app/i18n/index.ts` — and the barrel drags the whole facade\n// set in behind it, including `Redis` and its `import { RedisClient } from\n// \"bun\"`. Under a browser-targeted runner (vitest/jsdom) that specifier does\n// not resolve, so importing the app's dictionaries failed to collect before it\n// rendered anything. `Lang` itself only needs the translator and the request\n// context.\nimport { Lang } from \"../facades/Lang\";\nimport { parseTranslation } from \"../utils/parseTranslation\";\nimport type {\n  ParseTranslationParams,\n  ParseTranslationParamsServer,\n  Prettify,\n} from \"../utils/type\";\n\ntype Translations = Record<string, Record<string, string>>;\n\nexport class Dictionary<T extends Translations> {\n  constructor(\n    public name: string,\n    public dictionary: T,\n  ) {}\n\n  reference(key: keyof T) {\n    if (typeof window !== \"undefined\") {\n      throw new Error(\"Cannot use reference in the browser\");\n    }\n    if (!this.dictionary?.[key]) {\n      throw new Error(`Translation not found for ${String(key)}`);\n    }\n    return this.dictionary[key];\n  }\n\n  render<\n    K extends keyof T,\n    U extends keyof T[K],\n    R = Prettify<ParseTranslationParams<T[K][U]>>,\n  >(\n    key: K,\n    ...args: R extends Record<string, never>\n      ? [args?: { locale?: U | (string & {}) }]\n      : [args: { locale?: U | (string & {}); params: R }]\n  ) {\n    const { locale = Lang.locale(), params } = {\n      params: {},\n      ...args[0],\n    };\n\n    if (typeof window !== \"undefined\") {\n      throw new Error(\"Cannot use render in the browser\");\n    }\n\n    if (!this.dictionary?.[key]?.[locale]) {\n      throw new Error(\n        `Translation not found for ${String(key)} in ${String(locale)}`,\n      );\n    }\n    return parseTranslation(this.dictionary[key][locale], params ?? {});\n  }\n\n  /**\n   * @deprecated Use `defineDictionary` from `gemi/client`, declared next to the\n   * component that reads it. A dictionary made here has to be re-exported from\n   * `app/i18n/index.ts` and listed against a route in the `prefetch` config,\n   * and every locale of it stays resident whether a page uses it or not. Still\n   * supported; see `docs/i18n.md`.\n   */\n  static create<const T extends Translations>(name: string, translations: T) {\n    return new Dictionary<T>(name, translations);\n  }\n\n  static text<const T extends Record<string, string>, U extends keyof T>(\n    content: T,\n    ...args: Prettify<ParseTranslationParamsServer<T[U]>> extends Record<\n      string,\n      never\n    >\n      ? [args?: { locale?: U | (string & {}) }]\n      : [\n          args: {\n            locale?: U | (string & {});\n            params: Prettify<ParseTranslationParamsServer<T[U]>>;\n          },\n        ]\n  ): string {\n    const { locale = Lang.locale(), params } = { params: {}, ...args?.[0] };\n\n    if (!content?.[locale]) {\n      throw new Error(`Translation not found for ${String(locale)}`);\n    }\n\n    return parseTranslation(content[locale], params ?? {});\n  }\n}\n",
     "import { Lang } from \"../facades\";\nimport { parseTranslation } from \"../utils/parseTranslation\";\nimport type { ParseTranslationParamsServer, Prettify } from \"../utils/type\";\nimport type { DictionaryHandle } from \"./defineDictionary\";\nimport type { DictionaryTranslations } from \"./dictionaryShape\";\n\n/**\n * Read one string from a `defineDictionary` dictionary outside React — a\n * controller, a job, an email template.\n *\n * Async because a bundled dictionary loads its locale on demand. Server code\n * does not go through the bundler, so in practice this resolves without ever\n * yielding; the `await` is what makes the same call work either way.\n *\n * Kept out of `defineDictionary.ts` on purpose: that module is imported by\n * components and has to stay free of the server facades this one needs.\n */\nexport async function translate<\n  T extends DictionaryTranslations,\n  K extends keyof T & string,\n  U extends keyof T[K],\n  R = Prettify<ParseTranslationParamsServer<T[K][U] & string>>,\n>(\n  dictionary: DictionaryHandle<T>,\n  key: K,\n  ...args: R extends Record<string, never>\n    ? [args?: { locale?: U | (string & {}) }]\n    : [args: { locale?: U | (string & {}); params: R }]\n): Promise<string> {\n  const { locale = Lang.locale(), params } = { params: {}, ...args[0] };\n  const strings = await dictionary.load(String(locale));\n  const template = strings[key];\n\n  if (typeof template !== \"string\") {\n    throw new Error(\n      `Translation not found for \"${key}\" in \"${String(locale)}\" (dictionary ${dictionary.id})`,\n    );\n  }\n\n  return parseTranslation(template, (params ?? {}) as any) as string;\n}\n"
   ],
-  "mappings": ";k3BAAA,mBAAS,SAAe,eAAU,SAO3B,IAAS,JAAgB,JAAC,HAAkB,HAAwB,JAEzE,DAAM,HAAS,EAAO,EAAO,JAAM,HAAE,AACnC,JAAC,DACC,EAAO,DAAU,OACjB,EAAgB,EAAkC,EAAE,CAAC,CACzD,EAMM,EAAQ,kDAEd,GAAI,CAAC,EAqCH,OAnCe,EAAS,QAAQ,EAAO,CAAC,EAAO,EAAM,EAAM,IAAY,CAErE,IAAM,EAAY,EAAK,SAAS,GAAG,EAAI,EAAK,MAAM,GAAG,EAAE,GAAK,EAEtD,EAAQ,EAAO,GACrB,GAAI,IAAU,OACZ,OAAO,EAGT,GAAI,OAAO,IAAU,WAAY,CAG/B,IAAM,EAAiB,EADD,IAAY,OAAY,EAAU,EACd,EAE1C,GAAI,EAAe,CAAc,EAC/B,MAAU,MAAM,gCAAgC,EAElD,OAAO,OAAO,CAAc,EAI9B,GAAI,EACF,OAAQ,EAAK,YAAY,OAClB,SACH,OAAO,OAAO,CAAK,EAAE,SAAS,MAC3B,SACH,OAAO,OAAO,CAAK,MAChB,UACH,OAAO,QAAQ,CAAK,EAAE,SAAS,UAE/B,OAAO,OAAO,CAAK,EAGzB,OAAO,OAAO,CAAK,EACpB,EAEI,KAEL,IAAM,EAAqC,CAAC,EACxC,EAAY,EACZ,EAAgC,KAEpC,OAAQ,EAAQ,EAAM,KAAK,CAAQ,KAAO,KAAM,CAC9C,IAAO,EAAW,EAAM,EAAM,GAAW,EACnC,EAAa,EAAM,MAGnB,EAAY,EAAK,SAAS,GAAG,EAAI,EAAK,MAAM,GAAG,EAAE,GAAK,EAG5D,GAAI,EAAa,EACf,EAAM,KAAK,EAAS,UAAU,EAAW,CAAU,CAAC,EAGtD,IAAM,EAAQ,EAAO,GACrB,GAAI,IAAU,OAEZ,EAAM,KAAK,CAAS,EACf,QAAI,OAAO,IAAU,WAAY,CAGtC,IAAM,EAAiB,EADD,IAAY,OAAY,EAAU,EACd,EAC1C,EAAM,KAAK,CAAc,EACpB,QAAI,EAET,OAAQ,EAAK,YAAY,OAClB,SACH,EAAM,KAAK,OAAO,CAAK,EAAE,SAAS,CAAC,EACnC,UACG,SACH,EAAM,KAAK,OAAO,CAAK,CAAC,EACxB,UACG,UACH,EAAM,KAAK,QAAQ,CAAK,EAAE,SAAS,CAAC,EACpC,cAEA,EAAM,KAAK,OAAO,CAAK,CAAC,EAG5B,OAAM,KAAK,OAAO,CAAK,CAAC,EAG1B,EAAY,EAAa,EAAU,OAIrC,GAAI,EAAY,EAAS,OACvB,EAAM,KAAK,EAAS,UAAU,CAAS,CAAC,EAI1C,OAAO,EAAc,EAAU,CAAC,EAAG,GAAG,CAAK,GChGxC,MAAM,CAAmC,CAErC,KACA,WAFT,WAAW,CACF,EACA,EACP,CAFO,YACA,kBAGT,SAAS,CAAC,EAAc,CACtB,GAAI,OAAO,OAAW,IACpB,MAAU,MAAM,qCAAqC,EAEvD,GAAI,CAAC,KAAK,aAAa,GACrB,MAAU,MAAM,6BAA6B,OAAO,CAAG,GAAG,EAE5D,OAAO,KAAK,WAAW,GAGzB,MAIC,CACC,KACG,EAGH,CACA,IAAQ,SAAS,EAAK,OAAO,EAAG,UAAW,CACzC,OAAQ,CAAC,KACN,EAAK,EACV,EAEA,GAAI,OAAO,OAAW,IACpB,MAAU,MAAM,kCAAkC,EAGpD,GAAI,CAAC,KAAK,aAAa,KAAO,GAC5B,MAAU,MACR,6BAA6B,OAAO,CAAG,QAAQ,OAAO,CAAM,GAC9D,EAEF,OAAO,EAAiB,KAAK,WAAW,GAAK,GAAS,GAAU,CAAC,CAAC,QAU7D,OAAoC,CAAC,EAAc,EAAiB,CACzE,OAAO,IAAI,EAAc,EAAM,CAAY,QAGtC,KAA+D,CACpE,KACG,EAWK,CACR,IAAQ,SAAS,EAAK,OAAO,EAAG,UAAW,CAAE,OAAQ,CAAC,KAAM,IAAO,EAAG,EAEtE,GAAI,CAAC,IAAU,GACb,MAAU,MAAM,6BAA6B,OAAO,CAAM,GAAG,EAG/D,OAAO,EAAiB,EAAQ,GAAS,GAAU,CAAC,CAAC,EAEzD,CC7EA,eAAsB,CAKrB,CACC,EACA,KACG,EAGc,CACjB,IAAQ,SAAS,EAAK,OAAO,EAAG,UAAW,CAAE,OAAQ,CAAC,KAAM,EAAK,EAAG,EAE9D,GADU,MAAM,EAAW,KAAK,OAAO,CAAM,CAAC,GAC3B,GAEzB,GAAI,OAAO,IAAa,SACtB,MAAU,MACR,8BAA8B,UAAY,OAAO,CAAM,kBAAkB,EAAW,KACtF,EAGF,OAAO,EAAiB,EAAW,GAAU,CAAC,CAAS",
-  "debugId": "E46CFD3CEED33FE064756E2164756E21",
+  "mappings": ";g+BAAA,mBAAS,SAAe,eAAU,SAO3B,IAAS,JAAgB,JAAC,HAAkB,HAAwB,JAEzE,DAAM,HAAS,EAAO,EAAO,JAAM,HAAE,AACnC,JAAC,DACC,EAAO,DAAU,OACjB,HAAgB,HAAkC,HAAE,CAAC,CACzD,EAMM,EAAQ,kDAEd,GAAI,CAAC,EAqCH,OAnCe,EAAS,QAAQ,EAAO,CAAC,EAAO,EAAM,EAAM,IAAY,CAErE,IAAM,EAAY,EAAK,SAAS,GAAG,EAAI,EAAK,MAAM,GAAG,EAAE,GAAK,EAEtD,EAAQ,EAAO,GACrB,GAAI,IAAU,OACZ,OAAO,EAGT,GAAI,OAAO,IAAU,WAAY,CAG/B,IAAM,EAAiB,EADD,IAAY,OAAY,EAAU,EACd,EAE1C,GAAI,EAAe,CAAc,EAC/B,MAAU,MAAM,gCAAgC,EAElD,OAAO,OAAO,CAAc,EAI9B,GAAI,EACF,OAAQ,EAAK,YAAY,OAClB,SACH,OAAO,OAAO,CAAK,EAAE,SAAS,MAC3B,SACH,OAAO,OAAO,CAAK,MAChB,UACH,OAAO,QAAQ,CAAK,EAAE,SAAS,UAE/B,OAAO,OAAO,CAAK,EAGzB,OAAO,OAAO,CAAK,EACpB,EAEI,KAEL,IAAM,EAAqC,CAAC,EACxC,EAAY,EACZ,EAAgC,KAEpC,OAAQ,EAAQ,EAAM,KAAK,CAAQ,KAAO,KAAM,CAC9C,IAAO,EAAW,EAAM,EAAM,GAAW,EACnC,EAAa,EAAM,MAGnB,EAAY,EAAK,SAAS,GAAG,EAAI,EAAK,MAAM,GAAG,EAAE,GAAK,EAG5D,GAAI,EAAa,EACf,EAAM,KAAK,EAAS,UAAU,EAAW,CAAU,CAAC,EAGtD,IAAM,EAAQ,EAAO,GACrB,GAAI,IAAU,OAEZ,EAAM,KAAK,CAAS,EACf,QAAI,OAAO,IAAU,WAAY,CAGtC,IAAM,EAAiB,EADD,IAAY,OAAY,EAAU,EACd,EAC1C,EAAM,KAAK,CAAc,EACpB,QAAI,EAET,OAAQ,EAAK,YAAY,OAClB,SACH,EAAM,KAAK,OAAO,CAAK,EAAE,SAAS,CAAC,EACnC,UACG,SACH,EAAM,KAAK,OAAO,CAAK,CAAC,EACxB,UACG,UACH,EAAM,KAAK,QAAQ,CAAK,EAAE,SAAS,CAAC,EACpC,cAEA,EAAM,KAAK,OAAO,CAAK,CAAC,EAG5B,OAAM,KAAK,OAAO,CAAK,CAAC,EAG1B,EAAY,EAAa,EAAU,OAIrC,GAAI,EAAY,EAAS,OACvB,EAAM,KAAK,EAAS,UAAU,CAAS,CAAC,EAI1C,OAAO,EAAc,EAAU,CAAC,EAAG,GAAG,CAAK,GChGxC,MAAM,CAAmC,CAErC,KACA,WAFT,WAAW,CACF,EACA,EACP,CAFO,YACA,kBAGT,SAAS,CAAC,EAAc,CACtB,GAAI,OAAO,OAAW,IACpB,MAAU,MAAM,qCAAqC,EAEvD,GAAI,CAAC,KAAK,aAAa,GACrB,MAAU,MAAM,6BAA6B,OAAO,CAAG,GAAG,EAE5D,OAAO,KAAK,WAAW,GAGzB,MAIC,CACC,KACG,EAGH,CACA,IAAQ,SAAS,EAAK,OAAO,EAAG,UAAW,CACzC,OAAQ,CAAC,KACN,EAAK,EACV,EAEA,GAAI,OAAO,OAAW,IACpB,MAAU,MAAM,kCAAkC,EAGpD,GAAI,CAAC,KAAK,aAAa,KAAO,GAC5B,MAAU,MACR,6BAA6B,OAAO,CAAG,QAAQ,OAAO,CAAM,GAC9D,EAEF,OAAO,EAAiB,KAAK,WAAW,GAAK,GAAS,GAAU,CAAC,CAAC,QAU7D,OAAoC,CAAC,EAAc,EAAiB,CACzE,OAAO,IAAI,EAAc,EAAM,CAAY,QAGtC,KAA+D,CACpE,KACG,EAWK,CACR,IAAQ,SAAS,EAAK,OAAO,EAAG,UAAW,CAAE,OAAQ,CAAC,KAAM,IAAO,EAAG,EAEtE,GAAI,CAAC,IAAU,GACb,MAAU,MAAM,6BAA6B,OAAO,CAAM,GAAG,EAG/D,OAAO,EAAiB,EAAQ,GAAS,GAAU,CAAC,CAAC,EAEzD,CC7EA,eAAsB,CAKrB,CACC,EACA,KACG,EAGc,CACjB,IAAQ,SAAS,EAAK,OAAO,EAAG,UAAW,CAAE,OAAQ,CAAC,KAAM,EAAK,EAAG,EAE9D,GADU,MAAM,EAAW,KAAK,OAAO,CAAM,CAAC,GAC3B,GAEzB,GAAI,OAAO,IAAa,SACtB,MAAU,MACR,8BAA8B,UAAY,OAAO,CAAM,kBAAkB,EAAW,KACtF,EAGF,OAAO,EAAiB,EAAW,GAAU,CAAC,CAAS",
+  "debugId": "2E75C41A3B3A3BC564756E2164756E21",
   "names": []
 }

package/dist/i18n/resolveLocale.d.ts

@@ -9,4 +9,22 @@ export declare function looksLikeLocale(segment: string): boolean;
  * default locale is preferred, then the first in `supportedLocales`.
  */
 export declare function resolveLocale(requested: string | null | undefined, supportedLocales: string[], defaultLocale?: string): string | null;
+/**
+ * Picks the best of `supportedLocales` for a whole `Accept-Language` header,
+ * or `null` when none fits.
+ *
+ * Entries are tried by `q` weight, highest first (ties keep header order), and
+ * each is matched with {@link resolveLocale}, so `de-AT` falls back to `de`.
+ * An entry with `q=0` rules out every supported locale it covers (`de;q=0`
+ * rules out `de` and `de-DE`). A `*` entry, when nothing more specific fits,
+ * resolves to `defaultLocale` (or the first supported locale) unless that is
+ * ruled out. Malformed entries are skipped.
+ *
+ * ```ts
+ * negotiateLocale("de-AT,de;q=0.9,en;q=0.5", ["en", "de"], "en"); // "de"
+ * negotiateLocale("fr", ["en", "de"], "en"); // null
+ * negotiateLocale("fr,*;q=0.1", ["en", "de"], "en"); // "en"
+ * ```
+ */
+export declare function negotiateLocale(acceptLanguage: string | null | undefined, supportedLocales: string[], defaultLocale?: string): string | null;
 //# sourceMappingURL=resolveLocale.d.ts.map

package/dist/i18n/resolveLocale.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolveLocale.d.ts","sourceRoot":"","sources":["../../i18n/resolveLocale.ts"],"names":[],"mappings":"AAKA,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAExD;AAMD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,gBAAgB,EAAE,MAAM,EAAE,EAC1B,aAAa,CAAC,EAAE,MAAM,GACrB,MAAM,GAAG,IAAI,CAsBf"}
+{"version":3,"file":"resolveLocale.d.ts","sourceRoot":"","sources":["../../i18n/resolveLocale.ts"],"names":[],"mappings":"AAKA,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAExD;AAMD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,gBAAgB,EAAE,MAAM,EAAE,EAC1B,aAAa,CAAC,EAAE,MAAM,GACrB,MAAM,GAAG,IAAI,CAsBf;AAgDD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACzC,gBAAgB,EAAE,MAAM,EAAE,EAC1B,aAAa,CAAC,EAAE,MAAM,GACrB,MAAM,GAAG,IAAI,CAiCf"}

package/dist/kernel/index.js

@@ -1,5 +1,5 @@
 // @bun
-import{Ia as g}from"../chunk-wyw6p3fg.js";import{db as e}from"../chunk-6cx8ncd4.js";import{eb as w}from"../chunk-1q9kd20m.js";import{Ab as S,Bb as h,Db as R,Eb as u,Fb as l,Gb as v,Jb as d,Kb as c,Nb as p,Qb as n,Rb as a,qb as r,rb as T,sb as D,tb as zj,ub as A,vb as y,wb as P}from"../chunk-yf1njzd5.js";import"../chunk-4088szy9.js";import"../chunk-ktr3k768.js";import"../chunk-2z1981d0.js";import{Ec as jj}from"../chunk-7vb4eey2.js";import"../chunk-v1tfdgy1.js";import"../chunk-n672d4g8.js";import{ie as x,md as Gj,nd as Nj,ne as I,oe as E,qd as Oj,rd as Hj,se as K,te as q,ue as t,ve as m,we as C,xe as Q,ye as o,ze as i}from"../chunk-ms9k0rx6.js";import{Ze as s}from"../chunk-whtzggn6.js";import{kf as V,pf as f}from"../chunk-hytt9qyj.js";import{rg as b}from"../chunk-pn8v6fj2.js";import{Qg as B}from"../chunk-15c2vgaf.js";import{Wg as L}from"../chunk-49nyyjfe.js";import"../chunk-tn2bryy2.js";import"../chunk-cbqazg9k.js";import"../chunk-1myhm0g3.js";import"../chunk-kejwjerj.js";import"../chunk-aazmrxj9.js";import"../chunk-qsrcdzan.js";import"../chunk-jmg2zsaf.js";import{_h as _,ai as O,bi as F}from"../chunk-t4yh4nf9.js";import"../chunk-1vzks22y.js";import"../chunk-zyt2w03d.js";import"../chunk-1hr4xht1.js";import{oi as M}from"../chunk-d9mar37g.js";import"../chunk-vw8849ys.js";function Xj(j){let X=j.headers.get("Cache-Control")?.toLowerCase()??"";return/(^|[\s,])(public|s-maxage)\b/.test(X)}var Yj=new Set,Zj={refusal:null,apply:(j)=>j,carried:null};async function k(j){let X=F(x);if(X.config.global.length===0)return Zj;let{pathname:Z}=new URL(j.url),W=M(Z),z=new b(j,{},W?"api":"view","");return await L.run(z,async()=>{let $=L.getStore(),{headers:N,cookies:Wj}=$,Y=(J)=>{if(!Xj(J))return Q(J,N,Wj);let G=new Headers(N);return G.delete("Set-Cookie"),Q(J,G,Yj)};try{return await X.runGlobalMiddleware(),{refusal:null,apply:Y,carried:{user:$.user}}}catch(J){let G=!W&&Z.endsWith(".json");if(J?.kind===B){let H=W?C(J.payload.api):G?q(J.payload.viewData??J.payload.api):K(J.payload.view);return{refusal:Y(H),apply:Y,carried:null}}if(V(J)&&(W||G))return{refusal:Y(m()),apply:Y,carried:null};if(f(J)){console.error(J);let H=W||G?I():K(E());return{refusal:Y(H),apply:Y,carried:null}}throw J}finally{$.destroy()}})}var U=[v,c,g,S,a,y,h,d,u,D,R,n,l,w,p,P,A];class Jj{config={};providers=[];services=[];serviceInstances=[];serviceTokens=new Set;servicesBooted=!1;models=[];app=new O;boot(){if(this.models.length>0)e(...this.models);else $j();this.app.config.merge(this.config),O.setInstance(this.app),this.app.registerMany([...U,...this.providers]),this.registerServices()}registerServices(){let j=this.serviceTokens;this.serviceInstances=[],this.serviceTokens=new Set,this.servicesBooted=!1;let X=new Map;for(let Z of this.services){let W=typeof Z==="function"?new Z:Z,z=W.constructor;if(!z.token)throw Error(`Service [${z.name}] is listed in \`services\` but does not declare a \`static token\`.`);let $=X.get(z.token);if($)throw Error(`Services [${$}] and [${z.name}] both declare the token "${z.token}". Tokens are the container's keys, so they must be unique.`);X.set(z.token,z.name);let N=z;if(!j.has(z.token)&&this.app.bound(N))throw Error(`Service [${z.name}] declares the token "${z.token}", which is already bound in the container by the framework or a provider. Binding it would replace that service everywhere, so pick a token nothing else owns.`);this.app.instance(N,W),this.serviceInstances.push(W),this.serviceTokens.add(z.token)}}async waitForBoot(){await this.app.boot(),await this.bootServices(),zj(this.app)}async bootServices(){if(this.servicesBooted)return;for(let j of this.serviceInstances)await j.boot();this.servicesBooted=!0}shutdown(j){return this.run(()=>this.app.shutdown(j))}run(j){return _.run(this.app,j)}resolve(j){return this.app.make(j)}apiRoutes(){return this.app.make(o)}viewRoutes(){return this.app.make(t)}domains(){return this.app.make(i)}queue(){return this.app.make(jj)}mcpHttp(){return this.app.config.get("route.mcp.remote.enabled")===!0?this.app.make(r):null}globalMiddleware(j){return k(j)}destroy(){if(this.app.resolved(T))this.app.make(T).stop();if(this.app.flush(),O.getInstance()===this.app)O.setInstance(void 0);_.disable()}}function $j(){if(Bun.env.NODE_ENV==="production")return;let j=s();if(j.length===0)return;console.warn(`[gemi] ${j.length} model${j.length===1?" is":"s are"} registered, but Kernel.models is empty.
+import{Ja as g}from"../chunk-xtzn0qfh.js";import{eb as jj}from"../chunk-1z1rj2zq.js";import{fb as w}from"../chunk-3nf95j9e.js";import{Bb as S,Cb as h,Db as R,Fb as u,Gb as l,Hb as v,Ib as d,Lb as c,Mb as p,Pb as n,Sb as a,Tb as s,rb as e,sb as T,tb as D,ub as Jj,vb as A,wb as y,xb as P}from"../chunk-0gtyects.js";import"../chunk-39kyz4k6.js";import"../chunk-r1favzz4.js";import"../chunk-675kzd7z.js";import{Rc as zj}from"../chunk-nang3847.js";import"../chunk-tzdenj0n.js";import"../chunk-30xxc6r7.js";import{Ad as Oj,Ce as I,Dd as Hj,De as q,Ed as Lj,He as K,Ie as E,Je as o,Ke as m,Le as C,Me as Q,Ne as i,Oe as r,xe as x,zd as Nj}from"../chunk-47h12eme.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import{Vf as b}from"../chunk-3zxfd7pn.js";import{Ig as B}from"../chunk-1m3hvy3q.js";import{Og as L}from"../chunk-490sbcma.js";import"../chunk-k31qfe7a.js";import{Zg as t}from"../chunk-y09r0wsw.js";import{rh as V,wh as f}from"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import"../chunk-cvfg88cx.js";import"../chunk-z759yah5.js";import{Oi as _,Qi as O,Ri as F}from"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import{cj as M}from"../chunk-jf6qqzat.js";import"../chunk-hm9cjxy2.js";function Yj(j){let X=j.headers.get("Cache-Control")?.toLowerCase()??"";return/(^|[\s,])(public|s-maxage)\b/.test(X)}var Zj=new Set,$j={refusal:null,apply:(j)=>j,carried:null};async function k(j){let X=F(x);if(X.config.global.length===0)return $j;let{pathname:Z}=new URL(j.url),W=M(Z),z=new b(j,{},W?"api":"view","");return await L.run(z,async()=>{let $=L.getStore(),{headers:N,cookies:Xj}=$,Y=(J)=>{if(!Yj(J))return Q(J,N,Xj);let G=new Headers(N);return G.delete("Set-Cookie"),Q(J,G,Zj)};try{return await X.runGlobalMiddleware(),{refusal:null,apply:Y,carried:{user:$.user}}}catch(J){let G=!W&&Z.endsWith(".json");if(J?.kind===B){let H=W?C(J.payload.api):G?E(J.payload.viewData??J.payload.api):K(J.payload.view);return{refusal:Y(H),apply:Y,carried:null}}if(V(J)&&(W||G))return{refusal:Y(m()),apply:Y,carried:null};if(f(J)){console.error(J);let H=W||G?I():K(q());return{refusal:Y(H),apply:Y,carried:null}}throw J}finally{$.destroy()}})}var U=[d,p,g,R,S,s,y,h,c,l,D,u,a,v,w,n,P,A];class Wj{config={};providers=[];services=[];serviceInstances=[];serviceTokens=new Set;servicesBooted=!1;models=[];app=new O;boot(){if(this.models.length>0)jj(...this.models);else Gj();this.app.config.merge(this.config),O.setInstance(this.app),this.app.registerMany([...U,...this.providers]),this.registerServices()}registerServices(){let j=this.serviceTokens;this.serviceInstances=[],this.serviceTokens=new Set,this.servicesBooted=!1;let X=new Map;for(let Z of this.services){let W=typeof Z==="function"?new Z:Z,z=W.constructor;if(!z.token)throw Error(`Service [${z.name}] is listed in \`services\` but does not declare a \`static token\`.`);let $=X.get(z.token);if($)throw Error(`Services [${$}] and [${z.name}] both declare the token "${z.token}". Tokens are the container's keys, so they must be unique.`);X.set(z.token,z.name);let N=z;if(!j.has(z.token)&&this.app.bound(N))throw Error(`Service [${z.name}] declares the token "${z.token}", which is already bound in the container by the framework or a provider. Binding it would replace that service everywhere, so pick a token nothing else owns.`);this.app.instance(N,W),this.serviceInstances.push(W),this.serviceTokens.add(z.token)}}async waitForBoot(){await this.app.boot(),await this.bootServices(),Jj(this.app)}async bootServices(){if(this.servicesBooted)return;for(let j of this.serviceInstances)await j.boot();this.servicesBooted=!0}shutdown(j){return this.run(()=>this.app.shutdown(j))}run(j){return _.run(this.app,j)}resolve(j){return this.app.make(j)}apiRoutes(){return this.app.make(i)}viewRoutes(){return this.app.make(o)}domains(){return this.app.make(r)}queue(){return this.app.make(zj)}mcpHttp(){return this.app.config.get("route.mcp.remote.enabled")===!0?this.app.make(e):null}globalMiddleware(j){return k(j)}destroy(){if(this.app.resolved(T))this.app.make(T).stop();if(this.app.flush(),O.getInstance()===this.app)O.setInstance(void 0);_.disable()}}function Gj(){if(Bun.env.NODE_ENV==="production")return;let j=t();if(j.length===0)return;console.warn(`[gemi] ${j.length} model${j.length===1?" is":"s are"} registered, but Kernel.models is empty.
         Nested relation reads resolve a model by name, so a policy on a subclass that does not own its
 `+"        name is skipped inside every include \u2014 scoped at the root, "+`unscoped in an include, with nothing
         to notice it. Declaring the modules registers each class under its own name and audits the set:
@@ -11,6 +11,6 @@ import{Ia as g}from"../chunk-wyw6p3fg.js";import{db as e}from"../chunk-6cx8ncd4.
               models = [generated, models]
             }
 
-        See docs/orm.md#your-model-class. Development only; this never prints in production.`)}export{Nj as oneTimeSecretMatches,Gj as hashOneTimeSecret,U as frameworkProviders,Hj as UserProvider,Oj as SESSION_SELECT,Jj as Kernel};
+        See docs/orm.md#your-model-class. Development only; this never prints in production.`)}export{Oj as oneTimeSecretMatches,Nj as hashOneTimeSecret,U as frameworkProviders,Lj as UserProvider,Hj as SESSION_SELECT,Wj as Kernel};
 
-//# debugId=1162040979B46DB064756E2164756E21
+//# debugId=5992B4282A4422BC64756E2164756E21

package/dist/kernel/index.js.map

@@ -3,10 +3,10 @@
   "sources": ["../services/router/globalMiddleware.ts", "../kernel/providers.ts", "../kernel/Kernel.ts"],
   "sourcesContent": [
     "import { app } from \"../../foundation/app\";\nimport { GEMI_REQUEST_BREAKER_ERROR } from \"../../http/Error\";\nimport { HttpRequest } from \"../../http/HttpRequest\";\nimport { type CarriedContext, RequestContext } from \"../../http/requestContext\";\nimport { isPolicyDeniedError, isRecordNotFoundError } from \"../../orm/errors\";\nimport { MiddlewareRegistry } from \"../middleware/MiddlewareRegistry\";\nimport { breakResponse, mergeContextIntoResponse } from \"./ApiRouteDispatcher\";\nimport { isApiPath } from \"./apiPath\";\nimport { notFoundResponse } from \"./notFound\";\nimport { policyDeniedResponse, policyDeniedView } from \"./policyDenied\";\nimport { viewBreakResponse, viewDataBreakResponse } from \"./ViewRouteDispatcher\";\n\nexport interface GlobalMiddlewareOutcome {\n  /** The response that ends the request, when a global middleware refused it. */\n  refusal: Response | null;\n  /**\n   * Puts the headers and cookies the global middleware set on the request\n   * context onto the response the request ends with. The response's own\n   * headers win; the context only fills gaps, as it does for route middleware.\n   * Cookies are left off a response a shared cache may store (see\n   * `sharedCacheable`).\n   */\n  apply(response: Response): Response;\n  /**\n   * The user the list left on its context, for the route's context to start\n   * from. `null` when there is no list, or it refused.\n   */\n  carried: CarriedContext | null;\n}\n\n/**\n * Whether a shared cache may store this response: `public` or `s-maxage` in\n * its Cache-Control, as the static `dist/client` files carry\n * (`public, max-age=31536000`). A per-visitor cookie a global middleware set\n * would otherwise be stored with the asset, and a CDN that caches responses\n * with Set-Cookie would hand it to every visitor who gets that copy.\n */\nfunction sharedCacheable(response: Response) {\n  const cacheControl = response.headers.get(\"Cache-Control\")?.toLowerCase() ?? \"\";\n  return /(^|[\\s,])(public|s-maxage)\\b/.test(cacheControl);\n}\n\nconst noCookies = new Set<string>();\n\nconst passThrough: GlobalMiddlewareOutcome = {\n  refusal: null,\n  apply: (response) => response,\n  carried: null,\n};\n\n/**\n * Runs the `global` middleware list for one incoming request, before anything\n * is routed and before a static file is served. Called from `App`, once per\n * request (see `App.withGlobalMiddleware`), inside the kernel scope.\n *\n * It opens a request scope of its own. The router has not run, so the\n * `HttpRequest` a global middleware gets has no params and an empty\n * `routePath`, and its `kind` is read off the url the way `App.fetch` picks a\n * dispatcher. The scope is not the one the route later runs in: the route's\n * dispatcher opens a fresh one, as it always has. Two things cross over.\n * Headers and cookies reach the response through `apply`, and the user is\n * `carried` into the route's context, so a gate that looked the user up does\n * not make `auth` or `Auth.user()` look them up again. Both trust a user they\n * find on the context without checking it against a session or asking for a\n * token, so whatever a global middleware sets is treated as authenticated by\n * the route — which is what lets one sign a user in by SSO header or API key\n * (#577), and why it must set only a user it has verified. The rest stays\n * behind:\n * the locale, because the dispatchers decide it for the route, from its url,\n * and the feature evaluations, made against a request with no route and maybe\n * before a user was known.\n *\n * A break answers the way the same break from a route middleware would for\n * that url: the api's JSON for `/api`, the `.json` navigation's body for view\n * data, and the page response otherwise, static files included. A policy\n * denial is the same 403 the dispatchers give. Anything else is thrown, and\n * the caller answers it as the server's 500.\n */\nexport async function runGlobalMiddleware(req: Request): Promise<GlobalMiddlewareOutcome> {\n  const registry = app(MiddlewareRegistry);\n  if (registry.config.global.length === 0) {\n    return passThrough;\n  }\n\n  const { pathname } = new URL(req.url);\n  const isApi = isApiPath(pathname);\n  const httpRequest = new HttpRequest(req, {}, isApi ? \"api\" : \"view\", \"\");\n\n  return await RequestContext.run(httpRequest, async () => {\n    const ctx = RequestContext.getStore();\n    // Held past `destroy()` below, which only drops the store's references.\n    const { headers, cookies } = ctx;\n    const apply = (response: Response) => {\n      if (!sharedCacheable(response)) {\n        return mergeContextIntoResponse(response, headers, cookies);\n      }\n      const withoutCookies = new Headers(headers);\n      withoutCookies.delete(\"Set-Cookie\");\n      return mergeContextIntoResponse(response, withoutCookies, noCookies);\n    };\n\n    try {\n      await registry.runGlobalMiddleware();\n      return { refusal: null, apply, carried: { user: ctx.user } };\n    } catch (err) {\n      const isViewData = !isApi && pathname.endsWith(\".json\");\n      if (err?.kind === GEMI_REQUEST_BREAKER_ERROR) {\n        const refusal = isApi\n          ? breakResponse(err.payload.api)\n          : isViewData\n            ? viewDataBreakResponse(err.payload.viewData ?? err.payload.api)\n            : viewBreakResponse(err.payload.view);\n        return { refusal: apply(refusal), apply, carried: null };\n      }\n      // A global middleware that resolves the request's tenant or workspace by\n      // an id from the url asks the same question a route handler does, and a\n      // miss is the same 404. Only for the two json-shaped requests here: a\n      // full page load should render the application's `404` view rather than\n      // a bare body, and that is #614's to do.\n      if (isRecordNotFoundError(err) && (isApi || isViewData)) {\n        return { refusal: apply(notFoundResponse()), apply, carried: null };\n      }\n      if (isPolicyDeniedError(err)) {\n        console.error(err);\n        const refusal =\n          isApi || isViewData ? policyDeniedResponse() : viewBreakResponse(policyDeniedView());\n        return { refusal: apply(refusal), apply, carried: null };\n      }\n      throw err;\n    } finally {\n      ctx.destroy();\n    }\n  });\n}\n",
-    "import type { ServiceProviderConstructor } from \"../foundation/Application\";\nimport { ChangeFeedServiceProvider } from \"../services/change-feed/ChangeFeedServiceProvider\";\nimport { AuthServiceProvider } from \"../auth/AuthServiceProvider\";\nimport { DatabaseServiceProvider } from \"../database/DatabaseServiceProvider\";\nimport { TranslationServiceProvider } from \"../i18n/TranslationServiceProvider\";\nimport { ScheduleServiceProvider } from \"../services/cron/ScheduleServiceProvider\";\nimport { FeaturesServiceProvider } from \"../services/features/FeaturesServiceProvider\";\nimport { MailServiceProvider } from \"../services/email/MailServiceProvider\";\nimport { EventServiceProvider } from \"../services/events/EventServiceProvider\";\nimport { FilesystemServiceProvider } from \"../services/file-storage/FilesystemServiceProvider\";\nimport { ImageServiceProvider } from \"../services/image-optimization/ImageServiceProvider\";\nimport { KernelIdServiceProvider } from \"../services/kernel-id/KernelIdServiceProvider\";\nimport { LogServiceProvider } from \"../services/logging/LogServiceProvider\";\nimport { MiddlewareServiceProvider } from \"../services/middleware/MiddlewareServiceProvider\";\nimport { QueueServiceProvider } from \"../services/queue/QueueServiceProvider\";\nimport { RateLimiterServiceProvider } from \"../services/rate-limiter/RateLimiterServiceProvider\";\nimport { RedisServiceProvider } from \"../services/redis/RedisServiceProvider\";\nimport { RouteServiceProvider } from \"../services/router/RouteServiceProvider\";\n\n/**\n * The providers every gemi app boots with, in registration order. Seventeen\n * providers for eighteen services — `RouteServiceProvider` owns both the api\n * and the view dispatcher, the way Laravel's does.\n *\n * Order only matters for `boot()`; `register()` binds factories and resolves\n * nothing, so no provider here depends on an earlier one having run — with one\n * exception, which is the reason to read this before reordering anything.\n *\n * **`EventServiceProvider` must stay after `QueueServiceProvider`.** A queued\n * listener is registered with the queue as a synthetic job, and\n * `EventServiceProvider.boot()` is what hands those over. `QueueManager.useJobs`\n * — which `QueueServiceProvider.boot()` calls with whatever it discovered under\n * `app/jobs` — *replaces* the registry (`this.jobs = {}`). Move the events\n * provider up and the two boots run in the order that discards: every\n * `listener:*` entry is registered and then thrown away. Nothing errors, boot\n * succeeds, and each queued dispatch afterwards lands on `next()`'s \"Dropped a\n * queued job: nothing is registered under the name listener:SendWelcomeEmail\",\n * long after `dispatch` returned to a caller that cannot hear it.\n */\nexport const frameworkProviders: ServiceProviderConstructor[] = [\n  KernelIdServiceProvider,\n  MiddlewareServiceProvider,\n  DatabaseServiceProvider,\n  // After the database, whose `boot()` its cache warm-up depends on, and before\n  // the route dispatchers, which evaluate flags on every view request.\n  FeaturesServiceProvider,\n  RouteServiceProvider,\n  AuthServiceProvider,\n  MailServiceProvider,\n  LogServiceProvider,\n  FilesystemServiceProvider,\n  QueueServiceProvider,\n  EventServiceProvider,\n  RedisServiceProvider,\n  ImageServiceProvider,\n  TranslationServiceProvider,\n  RateLimiterServiceProvider,\n  ScheduleServiceProvider,\n  ChangeFeedServiceProvider,\n];\n",
+    "import type { ServiceProviderConstructor } from \"../foundation/Application\";\nimport { ChangeFeedServiceProvider } from \"../services/change-feed/ChangeFeedServiceProvider\";\nimport { AuthServiceProvider } from \"../auth/AuthServiceProvider\";\nimport { DatabaseServiceProvider } from \"../database/DatabaseServiceProvider\";\nimport { TranslationServiceProvider } from \"../i18n/TranslationServiceProvider\";\nimport { ScheduleServiceProvider } from \"../services/cron/ScheduleServiceProvider\";\nimport { FeaturesServiceProvider } from \"../services/features/FeaturesServiceProvider\";\nimport { MailServiceProvider } from \"../services/email/MailServiceProvider\";\nimport { EncryptionServiceProvider } from \"../services/encryption/EncryptionServiceProvider\";\nimport { EventServiceProvider } from \"../services/events/EventServiceProvider\";\nimport { FilesystemServiceProvider } from \"../services/file-storage/FilesystemServiceProvider\";\nimport { ImageServiceProvider } from \"../services/image-optimization/ImageServiceProvider\";\nimport { KernelIdServiceProvider } from \"../services/kernel-id/KernelIdServiceProvider\";\nimport { LogServiceProvider } from \"../services/logging/LogServiceProvider\";\nimport { MiddlewareServiceProvider } from \"../services/middleware/MiddlewareServiceProvider\";\nimport { QueueServiceProvider } from \"../services/queue/QueueServiceProvider\";\nimport { RateLimiterServiceProvider } from \"../services/rate-limiter/RateLimiterServiceProvider\";\nimport { RedisServiceProvider } from \"../services/redis/RedisServiceProvider\";\nimport { RouteServiceProvider } from \"../services/router/RouteServiceProvider\";\n\n/**\n * The providers every gemi app boots with, in registration order. Eighteen\n * providers for nineteen services — `RouteServiceProvider` owns both the api\n * and the view dispatcher, the way Laravel's does.\n *\n * Order only matters for `boot()`; `register()` binds factories and resolves\n * nothing, so no provider here depends on an earlier one having run — with one\n * exception, which is the reason to read this before reordering anything.\n *\n * **`EventServiceProvider` must stay after `QueueServiceProvider`.** A queued\n * listener is registered with the queue as a synthetic job, and\n * `EventServiceProvider.boot()` is what hands those over. `QueueManager.useJobs`\n * — which `QueueServiceProvider.boot()` calls with whatever it discovered under\n * `app/jobs` — *replaces* the registry (`this.jobs = {}`). Move the events\n * provider up and the two boots run in the order that discards: every\n * `listener:*` entry is registered and then thrown away. Nothing errors, boot\n * succeeds, and each queued dispatch afterwards lands on `next()`'s \"Dropped a\n * queued job: nothing is registered under the name listener:SendWelcomeEmail\",\n * long after `dispatch` returned to a caller that cannot hear it.\n */\nexport const frameworkProviders: ServiceProviderConstructor[] = [\n  KernelIdServiceProvider,\n  MiddlewareServiceProvider,\n  DatabaseServiceProvider,\n  // Before anything that reads a model at boot (the features cache warm-up),\n  // so a missing key for an encrypted column fails the boot with its own\n  // message rather than inside someone else's query.\n  EncryptionServiceProvider,\n  // After the database, whose `boot()` its cache warm-up depends on, and before\n  // the route dispatchers, which evaluate flags on every view request.\n  FeaturesServiceProvider,\n  RouteServiceProvider,\n  AuthServiceProvider,\n  MailServiceProvider,\n  LogServiceProvider,\n  FilesystemServiceProvider,\n  QueueServiceProvider,\n  EventServiceProvider,\n  RedisServiceProvider,\n  ImageServiceProvider,\n  TranslationServiceProvider,\n  RateLimiterServiceProvider,\n  ScheduleServiceProvider,\n  ChangeFeedServiceProvider,\n];\n",
     "import { McpHttpServer } from \"../services/mcp/http/McpHttpServer\";\nimport { Application } from \"../foundation/Application\";\nimport type { ServiceProviderConstructor, ShutdownReport } from \"../foundation/Application\";\nimport type { ServiceToken } from \"../container/Container\";\nimport type { ConfigItems } from \"../support/Repository\";\nimport type { Service, ServiceConstructor } from \"../support/Service\";\nimport { registerModels } from \"../orm/registration\";\nimport { registeredNames } from \"../orm/registry\";\nimport { Scheduler } from \"../services/cron/Scheduler\";\nimport { QueueManager } from \"../services/queue/QueueManager\";\nimport { startClaimingIfServing } from \"../services/queue/QueueServiceProvider\";\nimport { ApiRouteDispatcher } from \"../services/router/ApiRouteDispatcher\";\nimport { ViewRouteDispatcher } from \"../services/router/ViewRouteDispatcher\";\nimport { DomainRouter } from \"../services/router/DomainRouter\";\nimport { runGlobalMiddleware } from \"../services/router/globalMiddleware\";\nimport { kernelContext } from \"./context\";\nimport { frameworkProviders } from \"./providers\";\n\n/**\n * The app's entry point into the framework. A Kernel subclass declares what the\n * app adds — its `config` slices and any extra `providers` — and everything\n * else lives in the Application container it owns.\n */\nexport class Kernel {\n  /**\n   * App-level config, merged over the framework defaults. Each key is a config\n   * slice: `{ mail: { ... }, route: { ... } }`, normally the modules under\n   * `app/config`.\n   */\n  protected config: ConfigItems = {};\n\n  /**\n   * App-level providers, registered after the framework's own so they can\n   * rebind anything the framework bound.\n   */\n  protected providers: ServiceProviderConstructor[] = [];\n\n  /**\n   * The app's own singleton services. Each is constructed during the\n   * synchronous boot phase and its `boot()` awaited during the asynchronous\n   * one, in the order listed — so a service whose `boot()` depends on another\n   * goes after it.\n   *\n   * An entry is either the class itself or a configured instance from\n   * `Service.with({ ... })`. Listing is explicit rather than discovered because\n   * the order is load-bearing here, and because a service is always imported by\n   * whatever injects it — there is no file the import graph would miss.\n   */\n  protected services: Array<ServiceConstructor | Service> = [];\n\n  private serviceInstances: Service[] = [];\n  private serviceTokens = new Set<string>();\n  private servicesBooted = false;\n\n  /**\n   * The modules holding the app's model classes — normally\n   * `[generated, models]`, the generated namespace and the barrel of subclasses\n   * written over it. Every model class they export is registered under the name\n   * its schema carries, later modules winning, and the whole set is audited\n   * before anything else boots.\n   *\n   * ### Why this is a Kernel field and not a line in a file somewhere\n   *\n   * Registration used to be `register(\"User\", User)` next to each subclass, and\n   * the failure mode of forgetting it is an authorization hole that nothing\n   * reports: a relation read resolves its target by name, so an unregistered\n   * policied subclass leaves the generated base owning the name and every\n   * nested `include` of that model comes back unscoped. No error at the root\n   * either, because `$exec`'s divergence guard begins `registered !== this` and\n   * the base it is running on *is* the registered one. A model only ever read\n   * through an include — a membership, a pivot, the kind that carries a tenant\n   * scope — never trips anything.\n   *\n   * Listing the modules here says it once, in the same place the app already\n   * declares its config slices and providers, and turns the mistake into a\n   * failure to boot rather than a quiet cross-tenant read.\n   *\n   * It sees the modules it is given, so a model class in a file that no barrel\n   * re-exports is still invisible. That is the residual, and it is a smaller\n   * one: a barrel is a place to notice an omission, and thirteen `register`\n   * lines scattered across thirteen files is not.\n   */\n  protected models: Array<Record<string, unknown>> = [];\n\n  readonly app = new Application();\n\n  /**\n   * Phase one, synchronous: every provider is constructed and its `register()`\n   * runs. Only bindings are recorded here — no service is instantiated, so this\n   * is safe to call from a synchronous constructor (`new App({ kernel })`).\n   * Phase two is `waitForBoot()`.\n   */\n  boot() {\n    // Before the container, deliberately. This throws on a model whose policies\n    // would be skipped, and the useful moment for that is the one where nothing\n    // has been constructed and no request can be in flight.\n    if (this.models.length > 0) registerModels(...this.models);\n    else warnIfModelsAreRegisteredButUndeclared();\n\n    this.app.config.merge(this.config);\n    Application.setInstance(this.app);\n    this.app.registerMany([...frameworkProviders, ...this.providers]);\n    this.registerServices();\n  }\n\n  /**\n   * Constructs every listed service and binds it into the container. Runs after\n   * the providers have registered, so a provider's `boot()` can `inject()` one;\n   * a `Service` constructor does no I/O, so doing this synchronously costs\n   * nothing beyond the field initializers.\n   */\n  private registerServices() {\n    // What a previous pass bound, so re-running this on the same kernel is not\n    // mistaken for a collision with something else.\n    const ours = this.serviceTokens;\n\n    this.serviceInstances = [];\n    this.serviceTokens = new Set();\n    this.servicesBooted = false;\n\n    const owners = new Map<string, string>();\n\n    for (const declaration of this.services) {\n      const instance =\n        typeof declaration === \"function\" ? new declaration() : declaration;\n      const ctor = instance.constructor as ServiceConstructor;\n\n      if (!ctor.token) {\n        throw new Error(\n          `Service [${ctor.name}] is listed in \\`services\\` but does not declare a \\`static token\\`.`,\n        );\n      }\n\n      // Two services under one token is the failure this refuses to have\n      // silently: the second would replace the first in the container, and\n      // every `inject()` written against either would hand back whichever was\n      // listed last.\n      const owner = owners.get(ctor.token);\n      if (owner) {\n        throw new Error(\n          `Services [${owner}] and [${ctor.name}] both declare the token \"${ctor.token}\". Tokens are the container's keys, so they must be unique.`,\n        );\n      }\n      owners.set(ctor.token, ctor.name);\n\n      // The same failure one level out. `Container.instance()` writes into\n      // `instances`, which `make()` consults before `bindings`, so a token that\n      // is already spoken for is not shared with its owner — it replaces it, for\n      // every `app()` and `inject()` in the process. An app service that named\n      // itself \"mail\" would leave `Mail.send()` resolving to an object with no\n      // `send`, and the boot that caused it would report nothing. Providers have\n      // all registered by now, so anything bound here belongs to somebody else.\n      const token = ctor as unknown as ServiceToken<Service>;\n      if (!ours.has(ctor.token) && this.app.bound(token)) {\n        throw new Error(\n          `Service [${ctor.name}] declares the token \"${ctor.token}\", which is already bound in the container by the framework or a provider. Binding it would replace that service everywhere, so pick a token nothing else owns.`,\n        );\n      }\n\n      this.app.instance(token, instance);\n      this.serviceInstances.push(instance);\n      this.serviceTokens.add(ctor.token);\n    }\n  }\n\n  /**\n   * Phase two, asynchronous: every provider's `boot()` runs, in registration\n   * order, after all of them have registered. Idempotent.\n   */\n  async waitForBoot() {\n    await this.app.boot();\n    await this.bootServices();\n    // Last, once every job — queued listeners included — is registered.\n    startClaimingIfServing(this.app);\n  }\n\n  /**\n   * Phase two for services, after every provider's `boot()` — so a service may\n   * use the facades and anything else a provider owns. Idempotent, like the\n   * provider phase it follows.\n   */\n  private async bootServices() {\n    if (this.servicesBooted) {\n      return;\n    }\n    for (const service of this.serviceInstances) {\n      await service.boot();\n    }\n    this.servicesBooted = true;\n  }\n\n  /**\n   * Every provider's `shutdown()`, in reverse registration order, inside the\n   * application context — so a hook may use the facades, as a cron tick or a\n   * request would. See `Application.shutdown` for the deadline and the\n   * report. Idempotent.\n   */\n  shutdown(options?: { timeoutMs?: number }): Promise<ShutdownReport> {\n    return this.run(() => this.app.shutdown(options));\n  }\n\n  run<T>(cb: () => T) {\n    return kernelContext.run(this.app, cb);\n  }\n\n  /**\n   * Resolve a service by token. Callers outside this module should prefer the\n   * named accessors below or `app()`; this exists for tooling that holds a\n   * Kernel but no ambient context.\n   */\n  resolve<T>(token: ServiceToken<T>): T {\n    return this.app.make(token);\n  }\n\n  // Named accessors. `app/App.ts` goes through these rather than importing the\n  // service classes itself — see the note in that file about the two copies of\n  // gemi that coexist at build time.\n  apiRoutes(): ApiRouteDispatcher {\n    return this.app.make(ApiRouteDispatcher);\n  }\n\n  viewRoutes(): ViewRouteDispatcher {\n    return this.app.make(ViewRouteDispatcher);\n  }\n\n  domains(): DomainRouter {\n    return this.app.make(DomainRouter);\n  }\n\n  queue(): QueueManager {\n    return this.app.make(QueueManager);\n  }\n\n  /** The MCP endpoint, or `null` when `route.mcp.remote` is not enabled. */\n  mcpHttp(): McpHttpServer | null {\n    return this.app.config.get(\"route.mcp.remote.enabled\") === true\n      ? this.app.make(McpHttpServer)\n      : null;\n  }\n\n  /** The `global` middleware list for one request. Call it inside `run`. */\n  globalMiddleware(req: Request) {\n    return runGlobalMiddleware(req);\n  }\n\n  destroy() {\n    // Only touch services that were actually resolved — resolving one here\n    // would construct it purely to tear it down.\n    if (this.app.resolved(Scheduler)) {\n      this.app.make(Scheduler).stop();\n    }\n\n    this.app.flush();\n\n    if (Application.getInstance() === this.app) {\n      Application.setInstance(undefined);\n    }\n\n    kernelContext.disable();\n  }\n}\n\n/**\n * Says something to an application that has models and has not declared them.\n *\n * Without this the fix for #316 defaults to off. `models` is `[]`, `boot()`\n * no-ops, and an app upgrading from 0.48 is in exactly the state the issue\n * describes until somebody edits their Kernel by hand — while the only place\n * that says to is the **Setup** section of `docs/orm.md`, which an existing app\n * read once and will not read again. #316 was filed by an app mid-migration\n * with a 79-model schema, which is precisely the reader who never sees it.\n *\n * The condition is what makes this worth printing. A populated registry with an\n * empty `models` means the generated `index.ts` was imported and its bases are\n * what every nested read resolves to — so if any policy lives on a subclass, it\n * is being skipped inside includes right now. A Kernel with no ORM at all has\n * an empty registry and hears nothing.\n *\n * Development only, and a warning rather than a throw: an app in this state is\n * running today, and turning a working deploy into a failure to start over an\n * arrangement that *might* be fine is not a patch-level thing to do. The\n * failure it points at is silent, so the fix for it has to be noisy somewhere,\n * and the terminal an author is already looking at is the cheapest somewhere\n * there is.\n */\nfunction warnIfModelsAreRegisteredButUndeclared(): void {\n  if (process.env.NODE_ENV === \"production\") return;\n\n  const registered = registeredNames();\n  if (registered.length === 0) return;\n\n  console.warn(\n    `[gemi] ${registered.length} model${registered.length === 1 ? \" is\" : \"s are\"} ` +\n      `registered, but Kernel.models is empty.\\n` +\n      `        Nested relation reads resolve a model by name, so a policy on a ` +\n      `subclass that does not own its\\n` +\n      `        name is skipped inside every include — scoped at the root, ` +\n      `unscoped in an include, with nothing\\n` +\n      `        to notice it. Declaring the modules registers each class under ` +\n      `its own name and audits the set:\\n\\n` +\n      `            import * as generated from \"../models/generated\"\\n` +\n      `            import * as models from \"../models\"\\n\\n` +\n      `            export default class extends Kernel {\\n` +\n      `              models = [generated, models]\\n` +\n      `            }\\n\\n` +\n      `        See docs/orm.md#your-model-class. Development only; this never ` +\n      `prints in production.`,\n  );\n}\n"
   ],
-  "mappings": ";o5CAqCA,IAAS,HAAe,JAAC,HAAoB,JAC3C,DAAM,HAAe,HAAS,GAAQ,DAAI,UAAe,FAAG,OAAY,FAAK,FAC7E,CAAO,0BAA+B,AAAK,JAAY,HAGzD,DAAM,FAAY,DAAI,DAEhB,FAAuC,JAC3C,GAAS,AACT,MAAO,CAAC,IAAa,EACrB,QAAS,IACX,EA8BA,eAAsB,CAAmB,CAAC,EAAgD,CACxF,IAAM,EAAW,EAAI,CAAkB,EACvC,GAAI,EAAS,OAAO,OAAO,SAAW,EACpC,OAAO,GAGT,IAAQ,YAAa,IAAI,IAAI,EAAI,GAAG,EAC9B,EAAQ,EAAU,CAAQ,EAC1B,EAAc,IAAI,EAAY,EAAK,CAAC,EAAG,EAAQ,MAAQ,OAAQ,EAAE,EAEvE,OAAO,MAAM,EAAe,IAAI,EAAa,SAAY,CACvD,IAAM,EAAM,EAAe,SAAS,GAE5B,UAAS,YAAY,EACvB,EAAQ,CAAC,IAAuB,CACpC,GAAI,CAAC,GAAgB,CAAQ,EAC3B,OAAO,EAAyB,EAAU,EAAS,EAAO,EAE5D,IAAM,EAAiB,IAAI,QAAQ,CAAO,EAE1C,OADA,EAAe,OAAO,YAAY,EAC3B,EAAyB,EAAU,EAAgB,EAAS,GAGrE,GAAI,CAEF,OADA,MAAM,EAAS,oBAAoB,EAC5B,CAAE,QAAS,KAAM,QAAO,QAAS,CAAE,KAAM,EAAI,IAAK,CAAE,EAC3D,MAAO,EAAK,CACZ,IAAM,EAAa,CAAC,GAAS,EAAS,SAAS,OAAO,EACtD,GAAI,GAAK,OAAS,EAA4B,CAC5C,IAAM,EAAU,EACZ,EAAc,EAAI,QAAQ,GAAG,EAC7B,EACE,EAAsB,EAAI,QAAQ,UAAY,EAAI,QAAQ,GAAG,EAC7D,EAAkB,EAAI,QAAQ,IAAI,EACxC,MAAO,CAAE,QAAS,EAAM,CAAO,EAAG,QAAO,QAAS,IAAK,EAOzD,GAAI,EAAsB,CAAG,IAAM,GAAS,GAC1C,MAAO,CAAE,QAAS,EAAM,EAAiB,CAAC,EAAG,QAAO,QAAS,IAAK,EAEpE,GAAI,EAAoB,CAAG,EAAG,CAC5B,QAAQ,MAAM,CAAG,EACjB,IAAM,EACJ,GAAS,EAAa,EAAqB,EAAI,EAAkB,EAAiB,CAAC,EACrF,MAAO,CAAE,QAAS,EAAM,CAAO,EAAG,QAAO,QAAS,IAAK,EAEzD,MAAM,SACN,CACA,EAAI,QAAQ,GAEf,EC7FI,IAAM,EAAmD,CAC9D,EACA,EACA,EAGA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,CACF,ECpCO,MAAM,EAAO,CAMR,OAAsB,CAAC,EAMvB,UAA0C,CAAC,EAa3C,SAAgD,CAAC,EAEnD,iBAA8B,CAAC,EAC/B,cAAgB,IAAI,IACpB,eAAiB,GA8Bf,OAAyC,CAAC,EAE3C,IAAM,IAAI,EAQnB,IAAI,EAAG,CAIL,GAAI,KAAK,OAAO,OAAS,EAAG,EAAe,GAAG,KAAK,MAAM,EACpD,QAAuC,EAE5C,KAAK,IAAI,OAAO,MAAM,KAAK,MAAM,EACjC,EAAY,YAAY,KAAK,GAAG,EAChC,KAAK,IAAI,aAAa,CAAC,GAAG,EAAoB,GAAG,KAAK,SAAS,CAAC,EAChE,KAAK,iBAAiB,EAShB,gBAAgB,EAAG,CAGzB,IAAM,EAAO,KAAK,cAElB,KAAK,iBAAmB,CAAC,EACzB,KAAK,cAAgB,IAAI,IACzB,KAAK,eAAiB,GAEtB,IAAM,EAAS,IAAI,IAEnB,QAAW,KAAe,KAAK,SAAU,CACvC,IAAM,EACJ,OAAO,IAAgB,WAAa,IAAI,EAAgB,EACpD,EAAO,EAAS,YAEtB,GAAI,CAAC,EAAK,MACR,MAAU,MACR,YAAY,EAAK,0EACnB,EAOF,IAAM,EAAQ,EAAO,IAAI,EAAK,KAAK,EACnC,GAAI,EACF,MAAU,MACR,aAAa,WAAe,EAAK,iCAAiC,EAAK,kEACzE,EAEF,EAAO,IAAI,EAAK,MAAO,EAAK,IAAI,EAShC,IAAM,EAAQ,EACd,GAAI,CAAC,EAAK,IAAI,EAAK,KAAK,GAAK,KAAK,IAAI,MAAM,CAAK,EAC/C,MAAU,MACR,YAAY,EAAK,6BAA6B,EAAK,sKACrD,EAGF,KAAK,IAAI,SAAS,EAAO,CAAQ,EACjC,KAAK,iBAAiB,KAAK,CAAQ,EACnC,KAAK,cAAc,IAAI,EAAK,KAAK,QAQ/B,YAAW,EAAG,CAClB,MAAM,KAAK,IAAI,KAAK,EACpB,MAAM,KAAK,aAAa,EAExB,GAAuB,KAAK,GAAG,OAQnB,aAAY,EAAG,CAC3B,GAAI,KAAK,eACP,OAEF,QAAW,KAAW,KAAK,iBACzB,MAAM,EAAQ,KAAK,EAErB,KAAK,eAAiB,GASxB,QAAQ,CAAC,EAA2D,CAClE,OAAO,KAAK,IAAI,IAAM,KAAK,IAAI,SAAS,CAAO,CAAC,EAGlD,GAAM,CAAC,EAAa,CAClB,OAAO,EAAc,IAAI,KAAK,IAAK,CAAE,EAQvC,OAAU,CAAC,EAA2B,CACpC,OAAO,KAAK,IAAI,KAAK,CAAK,EAM5B,SAAS,EAAuB,CAC9B,OAAO,KAAK,IAAI,KAAK,CAAkB,EAGzC,UAAU,EAAwB,CAChC,OAAO,KAAK,IAAI,KAAK,CAAmB,EAG1C,OAAO,EAAiB,CACtB,OAAO,KAAK,IAAI,KAAK,CAAY,EAGnC,KAAK,EAAiB,CACpB,OAAO,KAAK,IAAI,KAAK,EAAY,EAInC,OAAO,EAAyB,CAC9B,OAAO,KAAK,IAAI,OAAO,IAAI,0BAA0B,IAAM,GACvD,KAAK,IAAI,KAAK,CAAa,EAC3B,KAIN,gBAAgB,CAAC,EAAc,CAC7B,OAAO,EAAoB,CAAG,EAGhC,OAAO,EAAG,CAGR,GAAI,KAAK,IAAI,SAAS,CAAS,EAC7B,KAAK,IAAI,KAAK,CAAS,EAAE,KAAK,EAKhC,GAFA,KAAK,IAAI,MAAM,EAEX,EAAY,YAAY,IAAM,KAAK,IACrC,EAAY,YAAY,MAAS,EAGnC,EAAc,QAAQ,EAE1B,CAyBA,SAAS,EAAsC,EAAS,CACtD,GAAI,mBAAyB,aAAc,OAE3C,IAAM,EAAa,EAAgB,EACnC,GAAI,EAAW,SAAW,EAAG,OAE7B,QAAQ,KACN,UAAU,EAAW,eAAe,EAAW,SAAW,EAAI,MAAQ;AAAA;AAAA,EAIpE,2EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6FAUJ",
-  "debugId": "1162040979B46DB064756E2164756E21",
+  "mappings": ";mgDAqCA,IAAS,HAAe,JAAC,HAAoB,JAC3C,DAAM,HAAe,HAAS,GAAQ,DAAI,UAAe,FAAG,OAAY,FAAK,FAC7E,CAAO,0BAA+B,AAAK,JAAY,HAGzD,DAAM,FAAY,DAAI,DAEhB,FAAuC,JAC3C,GAAS,AACT,CAAO,JAAC,DAAa,EACrB,QAAS,IACX,EA8BA,eAAsB,CAAmB,CAAC,EAAgD,CACxF,IAAM,EAAW,EAAI,CAAkB,EACvC,GAAI,EAAS,OAAO,OAAO,SAAW,EACpC,OAAO,GAGT,IAAQ,YAAa,IAAI,IAAI,EAAI,GAAG,EAC9B,EAAQ,EAAU,CAAQ,EAC1B,EAAc,IAAI,EAAY,EAAK,CAAC,EAAG,EAAQ,MAAQ,OAAQ,EAAE,EAEvE,OAAO,MAAM,EAAe,IAAI,EAAa,SAAY,CACvD,IAAM,EAAM,EAAe,SAAS,GAE5B,UAAS,YAAY,EACvB,EAAQ,CAAC,IAAuB,CACpC,GAAI,CAAC,GAAgB,CAAQ,EAC3B,OAAO,EAAyB,EAAU,EAAS,EAAO,EAE5D,IAAM,EAAiB,IAAI,QAAQ,CAAO,EAE1C,OADA,EAAe,OAAO,YAAY,EAC3B,EAAyB,EAAU,EAAgB,EAAS,GAGrE,GAAI,CAEF,OADA,MAAM,EAAS,oBAAoB,EAC5B,CAAE,QAAS,KAAM,QAAO,QAAS,CAAE,KAAM,EAAI,IAAK,CAAE,EAC3D,MAAO,EAAK,CACZ,IAAM,EAAa,CAAC,GAAS,EAAS,SAAS,OAAO,EACtD,GAAI,GAAK,OAAS,EAA4B,CAC5C,IAAM,EAAU,EACZ,EAAc,EAAI,QAAQ,GAAG,EAC7B,EACE,EAAsB,EAAI,QAAQ,UAAY,EAAI,QAAQ,GAAG,EAC7D,EAAkB,EAAI,QAAQ,IAAI,EACxC,MAAO,CAAE,QAAS,EAAM,CAAO,EAAG,QAAO,QAAS,IAAK,EAOzD,GAAI,EAAsB,CAAG,IAAM,GAAS,GAC1C,MAAO,CAAE,QAAS,EAAM,EAAiB,CAAC,EAAG,QAAO,QAAS,IAAK,EAEpE,GAAI,EAAoB,CAAG,EAAG,CAC5B,QAAQ,MAAM,CAAG,EACjB,IAAM,EACJ,GAAS,EAAa,EAAqB,EAAI,EAAkB,EAAiB,CAAC,EACrF,MAAO,CAAE,QAAS,EAAM,CAAO,EAAG,QAAO,QAAS,IAAK,EAEzD,MAAM,SACN,CACA,EAAI,QAAQ,GAEf,EC5FI,IAAM,EAAmD,CAC9D,EACA,EACA,EAIA,EAGA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,CACF,ECzCO,MAAM,EAAO,CAMR,OAAsB,CAAC,EAMvB,UAA0C,CAAC,EAa3C,SAAgD,CAAC,EAEnD,iBAA8B,CAAC,EAC/B,cAAgB,IAAI,IACpB,eAAiB,GA8Bf,OAAyC,CAAC,EAE3C,IAAM,IAAI,EAQnB,IAAI,EAAG,CAIL,GAAI,KAAK,OAAO,OAAS,EAAG,GAAe,GAAG,KAAK,MAAM,EACpD,QAAuC,EAE5C,KAAK,IAAI,OAAO,MAAM,KAAK,MAAM,EACjC,EAAY,YAAY,KAAK,GAAG,EAChC,KAAK,IAAI,aAAa,CAAC,GAAG,EAAoB,GAAG,KAAK,SAAS,CAAC,EAChE,KAAK,iBAAiB,EAShB,gBAAgB,EAAG,CAGzB,IAAM,EAAO,KAAK,cAElB,KAAK,iBAAmB,CAAC,EACzB,KAAK,cAAgB,IAAI,IACzB,KAAK,eAAiB,GAEtB,IAAM,EAAS,IAAI,IAEnB,QAAW,KAAe,KAAK,SAAU,CACvC,IAAM,EACJ,OAAO,IAAgB,WAAa,IAAI,EAAgB,EACpD,EAAO,EAAS,YAEtB,GAAI,CAAC,EAAK,MACR,MAAU,MACR,YAAY,EAAK,0EACnB,EAOF,IAAM,EAAQ,EAAO,IAAI,EAAK,KAAK,EACnC,GAAI,EACF,MAAU,MACR,aAAa,WAAe,EAAK,iCAAiC,EAAK,kEACzE,EAEF,EAAO,IAAI,EAAK,MAAO,EAAK,IAAI,EAShC,IAAM,EAAQ,EACd,GAAI,CAAC,EAAK,IAAI,EAAK,KAAK,GAAK,KAAK,IAAI,MAAM,CAAK,EAC/C,MAAU,MACR,YAAY,EAAK,6BAA6B,EAAK,sKACrD,EAGF,KAAK,IAAI,SAAS,EAAO,CAAQ,EACjC,KAAK,iBAAiB,KAAK,CAAQ,EACnC,KAAK,cAAc,IAAI,EAAK,KAAK,QAQ/B,YAAW,EAAG,CAClB,MAAM,KAAK,IAAI,KAAK,EACpB,MAAM,KAAK,aAAa,EAExB,GAAuB,KAAK,GAAG,OAQnB,aAAY,EAAG,CAC3B,GAAI,KAAK,eACP,OAEF,QAAW,KAAW,KAAK,iBACzB,MAAM,EAAQ,KAAK,EAErB,KAAK,eAAiB,GASxB,QAAQ,CAAC,EAA2D,CAClE,OAAO,KAAK,IAAI,IAAM,KAAK,IAAI,SAAS,CAAO,CAAC,EAGlD,GAAM,CAAC,EAAa,CAClB,OAAO,EAAc,IAAI,KAAK,IAAK,CAAE,EAQvC,OAAU,CAAC,EAA2B,CACpC,OAAO,KAAK,IAAI,KAAK,CAAK,EAM5B,SAAS,EAAuB,CAC9B,OAAO,KAAK,IAAI,KAAK,CAAkB,EAGzC,UAAU,EAAwB,CAChC,OAAO,KAAK,IAAI,KAAK,CAAmB,EAG1C,OAAO,EAAiB,CACtB,OAAO,KAAK,IAAI,KAAK,CAAY,EAGnC,KAAK,EAAiB,CACpB,OAAO,KAAK,IAAI,KAAK,EAAY,EAInC,OAAO,EAAyB,CAC9B,OAAO,KAAK,IAAI,OAAO,IAAI,0BAA0B,IAAM,GACvD,KAAK,IAAI,KAAK,CAAa,EAC3B,KAIN,gBAAgB,CAAC,EAAc,CAC7B,OAAO,EAAoB,CAAG,EAGhC,OAAO,EAAG,CAGR,GAAI,KAAK,IAAI,SAAS,CAAS,EAC7B,KAAK,IAAI,KAAK,CAAS,EAAE,KAAK,EAKhC,GAFA,KAAK,IAAI,MAAM,EAEX,EAAY,YAAY,IAAM,KAAK,IACrC,EAAY,YAAY,MAAS,EAGnC,EAAc,QAAQ,EAE1B,CAyBA,SAAS,EAAsC,EAAS,CACtD,GAAI,mBAAyB,aAAc,OAE3C,IAAM,EAAa,EAAgB,EACnC,GAAI,EAAW,SAAW,EAAG,OAE7B,QAAQ,KACN,UAAU,EAAW,eAAe,EAAW,SAAW,EAAI,MAAQ;AAAA;AAAA,EAIpE,2EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6FAUJ",
+  "debugId": "5992B4282A4422BC64756E2164756E21",
   "names": []
 }

package/dist/kernel/providers.d.ts

@@ -1,7 +1,7 @@
 import type { ServiceProviderConstructor } from "../foundation/Application";
 /**
- * The providers every gemi app boots with, in registration order. Seventeen
- * providers for eighteen services — `RouteServiceProvider` owns both the api
+ * The providers every gemi app boots with, in registration order. Eighteen
+ * providers for nineteen services — `RouteServiceProvider` owns both the api
  * and the view dispatcher, the way Laravel's does.
  *
  * Order only matters for `boot()`; `register()` binds factories and resolves

package/dist/kernel/providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../kernel/providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAmB5E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,kBAAkB,EAAE,0BAA0B,EAoB1D,CAAC"}
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../kernel/providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAoB5E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,kBAAkB,EAAE,0BAA0B,EAwB1D,CAAC"}

package/dist/orm/Model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Model.d.ts","sourceRoot":"","sources":["../../orm/Model.ts"],"names":[],"mappings":"AAKA,OAAO,EAOL,KAAK,WAAW,EAIjB,MAAM,WAAW,CAAC;AAuBnB,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,SAAS,EACf,MAAM,QAAQ,CAAC;AAChB,OAAO,EAcL,KAAK,WAAW,EAEjB,MAAM,UAAU,CAAC;AASlB,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAuE5C,8BAAsB,KAAK;IACzB;;;;;;;;;;;;;OAaG;IACH,SAAS;IAET,gFAAgF;IAChF,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC;IAE5B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAe,UAAU,CAAC,EAAE,IAAI,CAAC;IAEjC;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAE1C;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAElC;;;;;;;;OAQG;IACH,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,OAAO,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC;IA6BjE;;;;;;;;;;OAUG;IACH,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIpD;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIjE;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAEzC;;;OAGG;IACH,OAAe,QAAQ,CAAC,EAAE,WAAW,CAAC;IAEtC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,OAAO,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC;IACtD,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAKvD,+EAA+E;IAC/E,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,OAAO,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC;IACtD,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAKvD;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,OAAO,KAAK,GAAG;QAAE,MAAM,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;KAAE,EACzE,IAAI,EAAE,CAAC,EACP,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAC/B,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAW1B,iFAAiF;IACjF,MAAM,CAAC,WAAW,CAChB,CAAC,SAAS,OAAO,KAAK,GAAG;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;KAAE,EAEjE,IAAI,EAAE,CAAC,EACP,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GACpC,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAY7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;WACU,IAAI,CAAC,CAAC,SAAS,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAkG7D;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG;IA0B7B;;;OAGG;IACH,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IAIxB,MAAM,CAAC,YAAY,IAAI,WAAW;IAMlC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4DG;WAMU,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAY7D;;;;;;;;;;;;;;;;;;;;;;OAsBG;WACU,KAAK,CAChB,EAAE,EAAE,SAAS,EACb,IAAI,GAAE,GAAQ,EACd,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,OAAO,CAAC;mBAME,QAAQ;IAmuB7B;;;;;OAKG;IACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO;CAGzD"}
+{"version":3,"file":"Model.d.ts","sourceRoot":"","sources":["../../orm/Model.ts"],"names":[],"mappings":"AAKA,OAAO,EAOL,KAAK,WAAW,EAIjB,MAAM,WAAW,CAAC;AA8BnB,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,SAAS,EACf,MAAM,QAAQ,CAAC;AAChB,OAAO,EAcL,KAAK,WAAW,EAEjB,MAAM,UAAU,CAAC;AASlB,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAuF5C,8BAAsB,KAAK;IACzB;;;;;;;;;;;;;OAaG;IACH,SAAS;IAET,gFAAgF;IAChF,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC;IAE5B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAe,UAAU,CAAC,EAAE,IAAI,CAAC;IAEjC;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAE1C;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAElC;;;;;;;;OAQG;IACH,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,OAAO,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC;IA6BjE;;;;;;;;;;OAUG;IACH,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIpD;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIjE;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAEzC;;;OAGG;IACH,OAAe,QAAQ,CAAC,EAAE,WAAW,CAAC;IAEtC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,OAAO,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC;IACtD,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAKvD,+EAA+E;IAC/E,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,OAAO,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC;IACtD,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAKvD;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,OAAO,KAAK,GAAG;QAAE,MAAM,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;KAAE,EACzE,IAAI,EAAE,CAAC,EACP,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAC/B,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAW1B,iFAAiF;IACjF,MAAM,CAAC,WAAW,CAChB,CAAC,SAAS,OAAO,KAAK,GAAG;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;KAAE,EAEjE,IAAI,EAAE,CAAC,EACP,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GACpC,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAY7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;WACU,IAAI,CAAC,CAAC,SAAS,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAkG7D;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG;IA0B7B;;;OAGG;IACH,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IAIxB,MAAM,CAAC,YAAY,IAAI,WAAW;IAMlC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4DG;WAMU,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAY7D;;;;;;;;;;;;;;;;;;;;;;OAsBG;WACU,KAAK,CAChB,EAAE,EAAE,SAAS,EACb,IAAI,GAAE,GAAQ,EACd,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,OAAO,CAAC;mBAME,QAAQ;IAkwB7B;;;;;OAKG;IACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO;CAGzD"}

package/dist/orm/encryption-rotate.d.ts

@@ -0,0 +1,44 @@
+import type { Model } from "./Model";
+export interface RotateEncryptionOptions {
+    /** Rows read and rewritten per round trip. Default 500. */
+    batchSize?: number;
+    /** Count what would be re-encrypted, and write nothing. */
+    dryRun?: boolean;
+    /**
+     * Also encrypt values that are not encrypted at all — the rows a column held
+     * before it was marked `@gemi.encrypted`. Off by default, so a value that is
+     * not an envelope is reported rather than silently treated as plaintext.
+     */
+    encryptPlaintext?: boolean;
+    /** Called after each batch, for progress output. */
+    onBatch?: (report: RotateEncryptionReport) => void;
+}
+export interface RotateEncryptionReport {
+    model: string;
+    fields: string[];
+    /** Rows read. */
+    scanned: number;
+    /** Rows rewritten (or, on a dry run, that would be). */
+    rotated: number;
+    /** Rows a concurrent write changed between the read and the rewrite; already current. */
+    skipped: number;
+    /** Values that are not envelopes, left alone because `encryptPlaintext` is off. */
+    plaintext: number;
+}
+/**
+ * Re-encrypts `model`'s encrypted columns under the current key: every value
+ * still under an older key and, with `encryptPlaintext`, every value not
+ * encrypted yet. What `gemi run encryption:rotate` runs.
+ *
+ * Walks the table in primary-key order in batches, so it can run against a
+ * live database and be re-run safely: each row is rewritten with a
+ * compare-and-swap on the values it read, so a row written concurrently (and
+ * therefore already under the current key) is skipped rather than
+ * overwritten. Runs as the system (no policies) and includes soft-deleted
+ * rows — they are still encrypted with the old key.
+ *
+ * Remove the old key from `encryption.keys` only after this reports nothing
+ * left to rotate.
+ */
+export declare function rotateEncryptedColumns(model: string | typeof Model, options?: RotateEncryptionOptions): Promise<RotateEncryptionReport>;
+//# sourceMappingURL=encryption-rotate.d.ts.map

package/dist/orm/encryption-rotate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption-rotate.d.ts","sourceRoot":"","sources":["../../orm/encryption-rotate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAIrC,MAAM,WAAW,uBAAuB;IACtC,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,oDAAoD;IACpD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iBAAiB;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,yFAAyF;IACzF,OAAO,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,GAAG,OAAO,KAAK,EAC5B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CA4FjC"}

package/dist/orm/encryption.d.ts

@@ -0,0 +1,54 @@
+import { Encrypter } from "../services/encryption/Encrypter";
+import type { ModelSchema } from "./schema";
+/** The schema's encrypted fields, in declaration order. Empty for most models. */
+export declare function encryptedFields(schema: ModelSchema): readonly string[];
+/** `Model.field` for every encrypted column of every registered model. */
+export declare function encryptedColumnsInRegistry(): string[];
+/**
+ * The application's `Encrypter`. An application booted without the
+ * framework's providers (a test harness that binds only the database) gets a
+ * typed error naming the fix rather than a container error.
+ */
+export declare function currentEncrypter(): Encrypter;
+export declare function markEncryptionRaw<T extends object>(options: T): T;
+export declare function isEncryptionRaw(options: unknown): boolean;
+/**
+ * Refuses any argument that would make the database compare, sort or group an
+ * encrypted column: `where` (including relation filters into other models),
+ * `orderBy`, `distinct`, `cursor`, `groupBy`'s `by` and `having`, the
+ * `_min` / `_max` aggregates, and the same arguments nested inside an
+ * `include` or `select`.
+ *
+ * Walked whether or not this model has encrypted columns, because a relation
+ * filter or an include reaches other models'.
+ */
+export declare function assertNoEncryptedFilters(schema: ModelSchema, op: string, args: unknown): void;
+/**
+ * `args` with this model's encrypted columns encrypted, or `args` itself when
+ * there is nothing to encrypt. Never mutates the caller's objects: the same
+ * `data` may be reused for a second call.
+ *
+ * Only `data` (and an upsert's `create` / `update`) at this level. Nested
+ * relation writes are left as they are; see the note at the top of the file.
+ */
+export declare function encryptWriteArgs(schema: ModelSchema, op: string, args: any): any;
+/**
+ * Decrypts this model's encrypted columns on `rows`, in place. A value that
+ * does not decrypt raises `DecryptionError` naming the column — a ciphertext
+ * is never handed back as if it were the value.
+ */
+export declare function decryptRows(schema: ModelSchema, rows: readonly unknown[]): void;
+/**
+ * Decrypts the rows a strategy folded into the parent's statement, which never
+ * passed through their own model's `$exec`. Recursive, because the fold is.
+ */
+export declare function decryptFolded(relation: {
+    as: string;
+    model: string;
+    folded?: readonly {
+        as: string;
+        model: string;
+        folded?: readonly unknown[];
+    }[];
+}, parents: readonly unknown[]): void;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/orm/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../orm/encryption.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,SAAS,EAEV,MAAM,kCAAkC,CAAC;AAG1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAmC5C,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,MAAM,EAAE,CAStE;AAED,0EAA0E;AAC1E,wBAAgB,0BAA0B,IAAI,MAAM,EAAE,CAUrD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,SAAS,CAW5C;AAaD,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAEjE;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAMzD;AASD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAQ7F;AA+JD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,GAAG,CAmChF;AAoDD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,CAsB/E;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;KAAE,EAAE,CAAA;CAAE,EACvH,OAAO,EAAE,SAAS,OAAO,EAAE,GAC1B,IAAI,CAcN"}

package/dist/orm/index.d.ts

@@ -8,6 +8,8 @@ export { createCuid, createNanoid, createUlid, createUuid, clientSideValue, hasC
 export { canonicalShape, clearPlanCache, getOrCompile, planCacheStats, planKey, type ExecOptions, type Operation, type QueryPlan, } from "./plan";
 export { afterCommit, currentActor, currentTransaction, isSystemScope, ormContext, runAsSystem, runAsUser, transactionDepth, TransactionDependencyError, withTransaction, type OrmScope, } from "./context";
 export { CrossConnectionTransactionError, UnknownConnectionError, } from "../database/Connection";
+export { DecryptionError, EncryptionKeyError, } from "../services/encryption/Encrypter";
+export { rotateEncryptedColumns, type RotateEncryptionOptions, type RotateEncryptionReport, } from "./encryption-rotate";
 export { empty, join, renderFragment, sql, unsafeSql, type SqlFragment, } from "./sql";
 export { assertPoliciesRegistered, auditModelRegistrations, registerModels, } from "./registration";
 export { softDelete, softDeleteMany, softDeletes, type SoftDeleteOptions, type SoftDeletesSetting, } from "./soft-deletes";

package/dist/orm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../orm/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,GAChB,MAAM,UAAU,CAAC;AAMlB,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,UAAU,EACV,WAAW,EACX,cAAc,EACd,UAAU,EACV,cAAc,EACd,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,YAAY,EACZ,cAAc,EACd,qBAAqB,EACrB,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,SAAS,EACT,SAAS,EACT,aAAa,EACb,UAAU,EACV,SAAS,EACT,YAAY,EACZ,OAAO,EACP,YAAY,EACZ,GAAG,EACH,OAAO,EACP,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,cAAc,EACd,MAAM,EACN,UAAU,EACV,WAAW,EACX,cAAc,EACd,UAAU,EACV,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAWjB,OAAO,EACL,OAAO,EACP,MAAM,EACN,QAAQ,EACR,YAAY,EACZ,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AAYrB,OAAO,EACL,+BAA+B,EAC/B,WAAW,EACX,uBAAuB,EACvB,2BAA2B,EAC3B,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,EAC5B,+BAA+B,EAC/B,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,OAAO,EACP,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,SAAS,GACf,MAAM,QAAQ,CAAC;AAMhB,OAAO,EACL,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,WAAW,EACX,SAAS,EACT,gBAAgB,EAChB,0BAA0B,EAC1B,eAAe,EACf,KAAK,QAAQ,GACd,MAAM,WAAW,CAAC;AAQnB,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAIhC,OAAO,EACL,KAAK,EACL,IAAI,EACJ,cAAc,EACd,GAAG,EACH,SAAS,EACT,KAAK,WAAW,GACjB,MAAM,OAAO,CAAC;AAEf,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAM7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EACL,MAAM,EACN,YAAY,EACZ,aAAa,EACb,cAAc,EACd,WAAW,EACX,WAAW,EACX,aAAa,EACb,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,WAAW,GACjB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,aAAa,EACb,SAAS,EACT,YAAY,EACZ,UAAU,EACV,KAAK,EACL,KAAK,UAAU,GAChB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,SAAS,EACd,KAAK,cAAc,GACpB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,MAAM,GACZ,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,aAAa,EACb,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,EACL,eAAe,EACf,aAAa,EACb,uBAAuB,EACvB,UAAU,EACV,YAAY,EACZ,WAAW,EACX,KAAK,mBAAmB,EACxB,KAAK,UAAU,GAChB,MAAM,WAAW,CAAC;AAKnB,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../orm/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,GAChB,MAAM,UAAU,CAAC;AAMlB,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,UAAU,EACV,WAAW,EACX,cAAc,EACd,UAAU,EACV,cAAc,EACd,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,YAAY,EACZ,cAAc,EACd,qBAAqB,EACrB,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,SAAS,EACT,SAAS,EACT,aAAa,EACb,UAAU,EACV,SAAS,EACT,YAAY,EACZ,OAAO,EACP,YAAY,EACZ,GAAG,EACH,OAAO,EACP,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,cAAc,EACd,MAAM,EACN,UAAU,EACV,WAAW,EACX,cAAc,EACd,UAAU,EACV,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAWjB,OAAO,EACL,OAAO,EACP,MAAM,EACN,QAAQ,EACR,YAAY,EACZ,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AAYrB,OAAO,EACL,+BAA+B,EAC/B,WAAW,EACX,uBAAuB,EACvB,2BAA2B,EAC3B,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,EAC5B,+BAA+B,EAC/B,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,OAAO,EACP,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,SAAS,GACf,MAAM,QAAQ,CAAC;AAMhB,OAAO,EACL,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,WAAW,EACX,SAAS,EACT,gBAAgB,EAChB,0BAA0B,EAC1B,eAAe,EACf,KAAK,QAAQ,GACd,MAAM,WAAW,CAAC;AAQnB,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EACL,eAAe,EACf,kBAAkB,GACnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,sBAAsB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EACL,KAAK,EACL,IAAI,EACJ,cAAc,EACd,GAAG,EACH,SAAS,EACT,KAAK,WAAW,GACjB,MAAM,OAAO,CAAC;AAEf,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAM7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EACL,MAAM,EACN,YAAY,EACZ,aAAa,EACb,cAAc,EACd,WAAW,EACX,WAAW,EACX,aAAa,EACb,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,WAAW,GACjB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,aAAa,EACb,SAAS,EACT,YAAY,EACZ,UAAU,EACV,KAAK,EACL,KAAK,UAAU,GAChB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,SAAS,EACd,KAAK,cAAc,GACpB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,MAAM,GACZ,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,aAAa,EACb,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,EACL,eAAe,EACf,aAAa,EACb,uBAAuB,EACvB,UAAU,EACV,YAAY,EACZ,WAAW,EACX,KAAK,mBAAmB,EACxB,KAAK,UAAU,GAChB,MAAM,WAAW,CAAC;AAKnB,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}