gemi 0.130.0 → 0.132.0

package/dist/{chunk-13agap7z.js.map → chunk-t79n15f8.js.map}

@@ -2,7 +2,7 @@
   "version": 3,
   "sources": ["../server/httpProd.ts", "../server/compression.ts", "../server/staticFile.ts", "../vite/precompressAssets.ts", "../server/generateEtag.ts", "../server/modulePreloads.ts", "../client/chunkLoadRecovery.ts", "../server/staticAssetMiss.ts", "../server/unhandledError.ts", "../server/forwardedFor.ts"],
   "sourcesContent": [
-    "import { createHash } from \"node:crypto\";\nimport type { WebSocketHandler } from \"bun\";\nimport { join, resolve, sep } from \"node:path\";\nimport { compressResponse } from \"./compression\";\nimport { listPublicFiles, staticFileResponse } from \"./staticFile\";\nimport { stat } from \"node:fs/promises\";\nimport { createStyles } from \"./styles\";\nimport {\n  CLIENT_ENTRY_KEY,\n  collectCss,\n  collectModulePreloads,\n  createClientEntry,\n  createIslandResolver,\n} from \"./modulePreloads\";\nimport type { App } from \"../app\";\nimport { Instrumentation } from \"./types\";\nimport { printStartupBanner } from \"./banner\";\nimport { isReservedAssetPath, staticAssetMiss } from \"./staticAssetMiss\";\nimport { assetUrl, readBuiltAssetBase } from \"../config/assetBase\";\nimport { isApiPath } from \"../services/router/apiPath\";\nimport { projectRoot } from \"../support/discover\";\nimport { unhandledErrorResponse } from \"./unhandledError\";\nimport { serverIdleTimeout } from \"./idleTimeout\";\nimport { applyForwardedTrust, parseTrustProxy } from \"./forwardedFor\";\nimport { readStaticAssetsRecord } from \"../vite/precompressAssets\";\nimport type { StaticFileOptions } from \"./staticFile\";\n\n// The rule this file used to spell out itself. It moved to `projectRoot`\n// because discovery needs the same answer during `waitForBoot()`, which is\n// before `ROOT_DIR` below exists — and two spellings of \"where is the project\"\n// is how a job gets looked for in one directory and served from another.\nconst rootDir = projectRoot();\n\nconst appDir = join(rootDir, \"app\");\nconst distDir = join(rootDir, \"dist\");\n\nconst clientDir = join(distDir, \"client\");\n\n// The file in `dist/client` a static-looking pathname names, or `null` when\n// it names nothing there. The pathname is still percent-encoded, and Vite\n// writes files whose names need encoding (a public `my font.woff2`), so it is\n// decoded first. Decoding also turns `%2F` into a separator, which the URL\n// parser's own `..` normalization never saw — so the resolved path is checked\n// to still be inside `dist/client`. A malformed escape is a miss, not a 500.\nfunction clientFilePath(pathname: string): string | null {\n  let decoded: string;\n  try {\n    decoded = decodeURIComponent(pathname);\n  } catch {\n    return null;\n  }\n  const path = resolve(clientDir, \".\" + decoded.replace(\"/assets/assets\", \"/assets\"));\n  return path.startsWith(clientDir + sep) ? path : null;\n}\n\nasync function isFile(path: string) {\n  try {\n    return (await stat(path)).isFile();\n  } catch {\n    return false;\n  }\n}\n\n// `app` is built by `Server.start` (from the kernel) and passed in — same as\n// `httpDev` — so prod and dev share one construction path. What differs here is\n// that views/styles are served from the built `dist/` manifests instead of\n// Vite's dev SSR graph.\nexport async function httpProd(app: App, instrumentation: Instrumentation) {\n  const manifest = await import(`${distDir}/client/.vite/manifest.json`);\n  const serverManifest = await import(`${distDir}/server/.vite/manifest.json`);\n  // What the client build was built with, not `GEMI_ASSET_BASE` as it reads\n  // now — see `readBuiltAssetBase`. Every URL below that names a chunk goes\n  // through it, so the document links exactly what the bundle imports.\n  const assetBase = await readBuiltAssetBase(`${distDir}/client`);\n\n  process.env.ROOT_DIR = rootDir;\n  process.env.APP_DIR = appDir;\n  process.env.DIST_DIR = distDir;\n\n  const viewImportMap = {};\n  const ogMap = {};\n  const viewModules = {};\n  const cssManifest = {};\n  // Which chunks a route's views pull in, so the shell can preload the chain\n  // the client would otherwise discover one round trip at a time (#352).\n  const modulePreloadManifest: Record<string, string[]> = {};\n  const template = (viewName: string, path: string) => `\"${viewName}\": () => import(\"${path}\")`;\n  const templates = [];\n\n  for (const fileName of [\"404\", ...app.getFlatComponentTree.call(app)]) {\n    const serverFile = serverManifest[`app/views/${fileName}.tsx`];\n    if (!serverFile?.file) {\n      console.log(`Server file not found for ${fileName}`);\n      console.log(serverFile);\n      const files = Object.keys(serverManifest);\n      const path = `app/views/${fileName}.tsx`;\n      console.log(`${path} not found in server manifest`);\n      console.log(files);\n    }\n    const mod = await import(`${process.env.DIST_DIR}/server/${serverFile?.file}`);\n    viewImportMap[fileName] = mod.default;\n    ogMap[fileName] = mod.OpenGraph;\n    // The whole module, so a streaming render can put the view's\n    // `Loading`/`Error` exports into the shell it sends.\n    viewModules[fileName] = mod;\n    const clientFile = manifest[`app/views/${fileName}.tsx`];\n\n    if (clientFile?.css && clientFile?.css.length > 0) {\n      cssManifest[fileName] = clientFile?.css;\n    }\n    if (clientFile) {\n      templates.push(template(fileName, assetUrl(clientFile?.file, assetBase)));\n      modulePreloadManifest[fileName] = collectModulePreloads(\n        manifest,\n        `app/views/${fileName}.tsx`,\n        assetBase,\n      );\n    }\n  }\n\n  const loaders = `{${templates.join(\",\")}}`;\n\n  // Booted from the bootstrap script rather than through React's\n  // `bootstrapModules`, which would preload it at `fetchPriority=\"low\"` — see\n  // `clientEntry` in `ViewRouteDispatcher`.\n  const clientEntry = createClientEntry(manifest, assetBase);\n  if (!clientEntry) {\n    // Loudly, but without dying: this is boot, and an incomplete `dist/` must\n    // not cost the API routes and static assets too.\n    console.error(\n      `Client manifest has no \"${CLIENT_ENTRY_KEY}\" entry — dist/client is incomplete, so documents will render but never hydrate.`,\n    );\n  }\n\n  // Vite's manifest `css` field is a `string[]` — a client entry can emit more\n  // than one CSS chunk. Read and concatenate them all instead of interpolating\n  // the array into a single path (which only works for a one-element array).\n  const appCssFiles: string[] = manifest[\"app/client.tsx\"]?.css ?? [];\n  const appCSSContent = (\n    await Promise.all(appCssFiles.map((cssFile) => Bun.file(`${distDir}/client/${cssFile}`).text()))\n  ).join(\"\\n\");\n\n  // The island entries (`<module>?gemi-island`) a static view's document\n  // loads; see `injectIslands`.\n  const resolveIsland = createIslandResolver(manifest, assetBase);\n\n  // Identifies this client build: a static page with `navigation` swaps in\n  // only pages of the same build. The manifest names every content-hashed\n  // file, so it changes whenever any of them does.\n  const buildId = createHash(\"sha256\")\n    .update(await Bun.file(`${distDir}/client/.vite/manifest.json`).text())\n    .digest(\"base64url\")\n    .slice(0, 12);\n\n  // A static view's CSS comes from the whole import closure of its views (and\n  // its own layout's, which then replaces the app stylesheet): there is no\n  // client to fetch a shared chunk's CSS later, as a hydrated page's chunk\n  // loader does. Read once per file: the build does not change under a\n  // running server.\n  const cssFileCache = new Map<string, Promise<string>>();\n  const readCss = (file: string) => {\n    let text = cssFileCache.get(file);\n    if (!text) {\n      text = Bun.file(`${distDir}/client/${file}`).text();\n      cssFileCache.set(file, text);\n    }\n    return text;\n  };\n  const staticStyles = async (views: string[], layout: string | undefined) => {\n    const files = new Set<string>();\n    for (const view of layout ? [layout, ...views] : views) {\n      for (const file of collectCss(manifest, `app/views/${view}.tsx`)) files.add(file);\n    }\n    const styles = await Promise.all(\n      [...files].map(async (file) => ({ id: file, content: await readCss(file) })),\n    );\n    return createStyles(layout ? styles : [{ content: appCSSContent }, ...styles]);\n  };\n\n  // Which requests are answered from `dist/client` rather than the app:\n  //\n  // - `/assets` and everything under it, whatever the extension. Vite writes\n  //   fonts, GIFs, video and `?url` JSON there too, and an allowlist of\n  //   extensions always trailed the build — a `.woff2` went to the router\n  //   and paid for an SSR attempt. The router refuses routes under `/assets`\n  //   at boot, so there is no app answer to lose, and `staticAssetMiss`\n  //   turns a miss into the reload stub or a 404.\n  // - `/.well-known/*`.\n  // - Any other path that names a file the build copied out of `public/`,\n  //   whatever its extension (#583). Any other path may be an app route, so\n  //   it is static only when that exact file exists — read once here, since\n  //   the build output does not change under a running server. A view at\n  //   `/manifest` keeps its data URL (`/manifest.json`) unless the app also\n  //   ships `public/manifest.json`, and then the file wins. View data is\n  //   never a file in `dist/client`, so a client-side navigation pays for no\n  //   filesystem lookup.\n  const publicFiles = await listPublicFiles(clientDir);\n\n  // The build assets `gemi build` emitted or carried over, with the\n  // precompressed siblings it wrote for each (#789). Read once: the build\n  // output does not change under a running server. Without the record (a\n  // build made before it existed) every file is served as identity with the\n  // old cache policy.\n  const staticAssets = new Map<string, StaticFileOptions>();\n  for (const [file, encodings] of Object.entries(\n    (await readStaticAssetsRecord(clientDir))?.files ?? {},\n  )) {\n    const path = resolve(clientDir, file);\n    if (path.startsWith(clientDir + sep)) {\n      staticAssets.set(path, { immutable: true, encodings });\n    }\n  }\n\n  async function requestHandler(req: Request) {\n    const { pathname } = new URL(req.url);\n\n    if (isApiPath(pathname)) {\n      return await handleWithApp(req, pathname);\n    }\n\n    const distPath = clientFilePath(pathname);\n    const isFileRequest =\n      isReservedAssetPath(pathname) ||\n      pathname.startsWith(\"/.well-known\") ||\n      (distPath !== null && publicFiles.has(distPath));\n\n    if (isFileRequest) {\n      // Served from here whatever the asset base is: a CDN in front of the\n      // app uses this origin as the source it fills from. A file, not merely\n      // a path that exists: `/assets` itself is `dist/client/assets`, a\n      // directory, and streaming one would answer 200 and then fail mid-body.\n      //\n      // `Bun.file(path).stream()` is lazy — a missing file only throws ENOENT\n      // once the body is streamed, which is *after* this handler has returned,\n      // with the response already committed as 200. So existence is checked\n      // here, per request, even for a path `publicFiles` lists.\n      if (!distPath || !(await isFile(distPath))) {\n        return staticAssetMiss(pathname) ?? (await handleWithApp(req, pathname));\n      }\n\n      try {\n        return await staticFileResponse(req, distPath, staticAssets.get(distPath));\n      } catch (error) {\n        app.onException?.(error);\n        return new Response(\"Not found\", { status: 404 });\n      }\n    }\n\n    return await handleWithApp(req, pathname);\n  }\n\n  async function handleWithApp(req: Request, pathname: string) {\n    const handler = app.fetch.bind(app);\n\n    try {\n      const result = await handler(req);\n      if (result instanceof Response) {\n        return result;\n      } else {\n        const styles = [];\n\n        styles.push({\n          content: appCSSContent,\n        });\n\n        const getStyles = async (\n          currentViews: string[],\n          options?: { static?: boolean; layout?: string },\n        ) => {\n          if (!currentViews) {\n            return createStyles([]);\n          }\n          if (options?.static) {\n            return staticStyles(currentViews, options.layout);\n          }\n          for (const view of currentViews) {\n            const clientFile = manifest[`app/views/${view}.tsx`];\n            for (const cssFile of clientFile?.css ?? []) {\n              const css = Bun.file(`${process.env.DIST_DIR}/client/${cssFile}`);\n              styles.push({\n                id: cssFile,\n                content: await css.text(),\n              });\n            }\n          }\n          return createStyles(styles);\n        };\n\n        return await result({\n          getStyles,\n          clientEntry,\n          modulePreloadManifest,\n          loaders,\n          viewImportMap,\n          viewModules,\n          ogMap,\n          cssManifest,\n          assetBase,\n          resolveIsland,\n          buildId,\n        });\n      }\n    } catch (err) {\n      return unhandledErrorResponse(err, pathname, app.onException);\n    }\n  }\n\n  // Compression is on unless the deployment opts out — set `GEMI_COMPRESSION=off`\n  // when a layer in front of the origin already compresses HTML and you would\n  // rather not spend origin CPU on it.\n  const compressionEnabled = (process.env.GEMI_COMPRESSION ?? \"auto\").toLowerCase() !== \"off\";\n\n  // Which `X-Forwarded-For` entries to believe — see `forwardedFor.ts`. Parsed\n  // before `Bun.serve` so a bad value fails the boot, not every request.\n  const forwardedTrust = parseTrustProxy(process.env.GEMI_TRUST_PROXY);\n\n  // The broadcast socket endpoint, when the app declares `route.channels`.\n  const sockets = app.sockets();\n  if (sockets && forwardedTrust.kind === \"none\") {\n    console.warn(\n      \"[gemi] Broadcast sockets: GEMI_TRUST_PROXY is not set, so a socket's address is its TCP peer. Behind a proxy or load balancer every client shares the proxy's address, and broadcast.maxConnectionsPerIp caps the whole app per process. Set GEMI_TRUST_PROXY (see forwardedFor) or raise that limit.\",\n    );\n  }\n\n  const server = Bun.serve<any>({\n    maxRequestBodySize: 10 * 1024 * 1024 * 1024, // 10 GB\n    fetch: async (req, server) => {\n      // `requestIP` is null for closed/unix sockets — guard so it never\n      // throws before the request is handled.\n      applyForwardedTrust(req.headers, server.requestIP(req)?.address ?? null, forwardedTrust);\n      // Ahead of the instrumentation: an upgrade is not a response to trace,\n      // and the hub runs the global middleware itself.\n      if (sockets?.matches(req)) {\n        return sockets.upgrade(req, server);\n      }\n      // The app's global middleware goes in front of the static handler as well\n      // as the router, so it can refuse `/assets/*` too.\n      const res = await instrumentation(req, (req) =>\n        app.withGlobalMiddleware(req, requestHandler, (err) =>\n          unhandledErrorResponse(err, new URL(req.url).pathname, app.onException),\n        ),\n      );\n      // Applied at the very edge, after instrumentation, so every HTML response\n      // goes through the same negotiation — including the ones an app's\n      // instrumentation produced itself. Anything that isn't HTML comes back\n      // untouched.\n      return compressionEnabled ? compressResponse(req, res) : res;\n    },\n    idleTimeout: serverIdleTimeout(),\n    port: process.env.PORT || 5173,\n    websocket: sockets?.websocket as WebSocketHandler<any>,\n  });\n  await sockets?.start(server);\n\n  printStartupBanner({ port: server.port, rootDir });\n\n  return server;\n}\n",
+    "import { createHash } from \"node:crypto\";\nimport type { WebSocketHandler } from \"bun\";\nimport { join, resolve, sep } from \"node:path\";\nimport { compressResponse } from \"./compression\";\nimport { listPublicFiles, staticFileResponse } from \"./staticFile\";\nimport { stat } from \"node:fs/promises\";\nimport { createStyles } from \"./styles\";\nimport {\n  CLIENT_ENTRY_KEY,\n  collectCss,\n  collectModulePreloads,\n  createClientEntry,\n  createIslandResolver,\n} from \"./modulePreloads\";\nimport type { App } from \"../app\";\nimport { Instrumentation } from \"./types\";\nimport { printStartupBanner } from \"./banner\";\nimport { isReservedAssetPath, staticAssetMiss } from \"./staticAssetMiss\";\nimport { assetUrl, readBuiltAssetBase } from \"../config/assetBase\";\nimport { isApiPath } from \"../services/router/apiPath\";\nimport { projectRoot } from \"../support/discover\";\nimport { unhandledErrorResponse } from \"./unhandledError\";\nimport { serverIdleTimeout } from \"./idleTimeout\";\nimport { applyForwardedTrust, parseTrustProxy } from \"./forwardedFor\";\nimport { readStaticAssetsRecord } from \"../vite/precompressAssets\";\nimport type { StaticFileOptions } from \"./staticFile\";\n\n// The rule this file used to spell out itself. It moved to `projectRoot`\n// because discovery needs the same answer during `waitForBoot()`, which is\n// before `ROOT_DIR` below exists — and two spellings of \"where is the project\"\n// is how a job gets looked for in one directory and served from another.\nconst rootDir = projectRoot();\n\nconst appDir = join(rootDir, \"app\");\nconst distDir = join(rootDir, \"dist\");\n\nconst clientDir = join(distDir, \"client\");\n\n// The file in `dist/client` a static-looking pathname names, or `null` when\n// it names nothing there. The pathname is still percent-encoded, and Vite\n// writes files whose names need encoding (a public `my font.woff2`), so it is\n// decoded first. Decoding also turns `%2F` into a separator, which the URL\n// parser's own `..` normalization never saw — so the resolved path is checked\n// to still be inside `dist/client`. A malformed escape is a miss, not a 500.\nfunction clientFilePath(pathname: string): string | null {\n  let decoded: string;\n  try {\n    decoded = decodeURIComponent(pathname);\n  } catch {\n    return null;\n  }\n  const path = resolve(clientDir, \".\" + decoded.replace(\"/assets/assets\", \"/assets\"));\n  return path.startsWith(clientDir + sep) ? path : null;\n}\n\nasync function isFile(path: string) {\n  try {\n    return (await stat(path)).isFile();\n  } catch {\n    return false;\n  }\n}\n\n// `app` is built by `Server.start` (from the kernel) and passed in — same as\n// `httpDev` — so prod and dev share one construction path. What differs here is\n// that views/styles are served from the built `dist/` manifests instead of\n// Vite's dev SSR graph.\nexport async function httpProd(app: App, instrumentation: Instrumentation) {\n  const manifest = await import(`${distDir}/client/.vite/manifest.json`);\n  const serverManifest = await import(`${distDir}/server/.vite/manifest.json`);\n  // What the client build was built with, not `GEMI_ASSET_BASE` as it reads\n  // now — see `readBuiltAssetBase`. Every URL below that names a chunk goes\n  // through it, so the document links exactly what the bundle imports.\n  const assetBase = await readBuiltAssetBase(`${distDir}/client`);\n\n  process.env.ROOT_DIR = rootDir;\n  process.env.APP_DIR = appDir;\n  process.env.DIST_DIR = distDir;\n\n  const viewImportMap = {};\n  const ogMap = {};\n  const viewModules = {};\n  const cssManifest = {};\n  // Which chunks a route's views pull in, so the shell can preload the chain\n  // the client would otherwise discover one round trip at a time (#352).\n  const modulePreloadManifest: Record<string, string[]> = {};\n  const template = (viewName: string, path: string) => `\"${viewName}\": () => import(\"${path}\")`;\n  const templates = [];\n\n  for (const fileName of [\"404\", ...app.getFlatComponentTree.call(app)]) {\n    const serverFile = serverManifest[`app/views/${fileName}.tsx`];\n    if (!serverFile?.file) {\n      console.log(`Server file not found for ${fileName}`);\n      console.log(serverFile);\n      const files = Object.keys(serverManifest);\n      const path = `app/views/${fileName}.tsx`;\n      console.log(`${path} not found in server manifest`);\n      console.log(files);\n    }\n    const mod = await import(`${process.env.DIST_DIR}/server/${serverFile?.file}`);\n    viewImportMap[fileName] = mod.default;\n    ogMap[fileName] = mod.OpenGraph;\n    // The whole module, so a streaming render can put the view's\n    // `Loading`/`Error` exports into the shell it sends.\n    viewModules[fileName] = mod;\n    const clientFile = manifest[`app/views/${fileName}.tsx`];\n\n    if (clientFile?.css && clientFile?.css.length > 0) {\n      cssManifest[fileName] = clientFile?.css;\n    }\n    if (clientFile) {\n      templates.push(template(fileName, assetUrl(clientFile?.file, assetBase)));\n      modulePreloadManifest[fileName] = collectModulePreloads(\n        manifest,\n        `app/views/${fileName}.tsx`,\n        assetBase,\n      );\n    }\n  }\n\n  const loaders = `{${templates.join(\",\")}}`;\n\n  // Booted from the bootstrap script rather than through React's\n  // `bootstrapModules`, which would preload it at `fetchPriority=\"low\"` — see\n  // `clientEntry` in `ViewRouteDispatcher`.\n  const clientEntry = createClientEntry(manifest, assetBase);\n  if (!clientEntry) {\n    // Loudly, but without dying: this is boot, and an incomplete `dist/` must\n    // not cost the API routes and static assets too.\n    console.error(\n      `Client manifest has no \"${CLIENT_ENTRY_KEY}\" entry — dist/client is incomplete, so documents will render but never hydrate.`,\n    );\n  }\n\n  // Vite's manifest `css` field is a `string[]` — a client entry can emit more\n  // than one CSS chunk. Read and concatenate them all instead of interpolating\n  // the array into a single path (which only works for a one-element array).\n  const appCssFiles: string[] = manifest[\"app/client.tsx\"]?.css ?? [];\n  const appCSSContent = (\n    await Promise.all(appCssFiles.map((cssFile) => Bun.file(`${distDir}/client/${cssFile}`).text()))\n  ).join(\"\\n\");\n\n  // The island entries (`<module>?gemi-island`) a static view's document\n  // loads; see `injectIslands`.\n  const resolveIsland = createIslandResolver(manifest, assetBase);\n\n  // Identifies this client build: a static page with `navigation` swaps in\n  // only pages of the same build. The manifest names every content-hashed\n  // file, so it changes whenever any of them does.\n  const buildId = createHash(\"sha256\")\n    .update(await Bun.file(`${distDir}/client/.vite/manifest.json`).text())\n    .digest(\"base64url\")\n    .slice(0, 12);\n\n  // A static view's CSS comes from the whole import closure of its views (and\n  // its own layout's, which then replaces the app stylesheet): there is no\n  // client to fetch a shared chunk's CSS later, as a hydrated page's chunk\n  // loader does. Read once per file: the build does not change under a\n  // running server.\n  const cssFileCache = new Map<string, Promise<string>>();\n  const readCss = (file: string) => {\n    let text = cssFileCache.get(file);\n    if (!text) {\n      text = Bun.file(`${distDir}/client/${file}`).text();\n      cssFileCache.set(file, text);\n    }\n    return text;\n  };\n  const staticStyles = async (views: string[], layout: string | undefined) => {\n    const files = new Set<string>();\n    for (const view of layout ? [layout, ...views] : views) {\n      for (const file of collectCss(manifest, `app/views/${view}.tsx`)) files.add(file);\n    }\n    const styles = await Promise.all(\n      [...files].map(async (file) => ({ id: file, content: await readCss(file) })),\n    );\n    return createStyles(layout ? styles : [{ content: appCSSContent }, ...styles]);\n  };\n\n  // Which requests are answered from `dist/client` rather than the app:\n  //\n  // - `/assets` and everything under it, whatever the extension. Vite writes\n  //   fonts, GIFs, video and `?url` JSON there too, and an allowlist of\n  //   extensions always trailed the build — a `.woff2` went to the router\n  //   and paid for an SSR attempt. The router refuses routes under `/assets`\n  //   at boot, so there is no app answer to lose, and `staticAssetMiss`\n  //   turns a miss into the reload stub or a 404.\n  // - `/.well-known/*`.\n  // - Any other path that names a file the build copied out of `public/`,\n  //   whatever its extension (#583). Any other path may be an app route, so\n  //   it is static only when that exact file exists — read once here, since\n  //   the build output does not change under a running server. A view at\n  //   `/manifest` keeps its data URL (`/manifest.json`) unless the app also\n  //   ships `public/manifest.json`, and then the file wins. View data is\n  //   never a file in `dist/client`, so a client-side navigation pays for no\n  //   filesystem lookup.\n  const publicFiles = await listPublicFiles(clientDir);\n\n  // The build assets `gemi build` emitted or carried over, with the\n  // precompressed siblings it wrote for each (#789). Read once: the build\n  // output does not change under a running server. Without the record (a\n  // build made before it existed) every file is served as identity with the\n  // old cache policy.\n  const staticAssets = new Map<string, StaticFileOptions>();\n  for (const [file, encodings] of Object.entries(\n    (await readStaticAssetsRecord(clientDir))?.files ?? {},\n  )) {\n    const path = resolve(clientDir, file);\n    if (path.startsWith(clientDir + sep)) {\n      staticAssets.set(path, { immutable: true, encodings });\n    }\n  }\n\n  async function requestHandler(req: Request) {\n    const { pathname } = new URL(req.url);\n\n    if (isApiPath(pathname)) {\n      return await handleWithApp(req, pathname);\n    }\n\n    const distPath = clientFilePath(pathname);\n    const isFileRequest =\n      isReservedAssetPath(pathname) ||\n      pathname.startsWith(\"/.well-known\") ||\n      (distPath !== null && publicFiles.has(distPath));\n\n    if (isFileRequest) {\n      // Served from here whatever the asset base is: a CDN in front of the\n      // app uses this origin as the source it fills from. A file, not merely\n      // a path that exists: `/assets` itself is `dist/client/assets`, a\n      // directory, and streaming one would answer 200 and then fail mid-body.\n      //\n      // `Bun.file(path).stream()` is lazy — a missing file only throws ENOENT\n      // once the body is streamed, which is *after* this handler has returned,\n      // with the response already committed as 200. So existence is checked\n      // here, per request, even for a path `publicFiles` lists.\n      if (!distPath || !(await isFile(distPath))) {\n        return staticAssetMiss(pathname) ?? (await handleWithApp(req, pathname));\n      }\n\n      try {\n        return await staticFileResponse(req, distPath, staticAssets.get(distPath));\n      } catch (error) {\n        app.onException?.(error);\n        return new Response(\"Not found\", { status: 404 });\n      }\n    }\n\n    return await handleWithApp(req, pathname);\n  }\n\n  async function handleWithApp(req: Request, pathname: string) {\n    const handler = app.fetch.bind(app);\n\n    try {\n      const result = await handler(req);\n      if (result instanceof Response) {\n        return result;\n      } else {\n        const styles = [];\n\n        styles.push({\n          content: appCSSContent,\n        });\n\n        const getStyles = async (\n          currentViews: string[],\n          options?: { static?: boolean; layout?: string },\n        ) => {\n          if (!currentViews) {\n            return createStyles([]);\n          }\n          if (options?.static) {\n            return staticStyles(currentViews, options.layout);\n          }\n          for (const view of currentViews) {\n            const clientFile = manifest[`app/views/${view}.tsx`];\n            for (const cssFile of clientFile?.css ?? []) {\n              const css = Bun.file(`${process.env.DIST_DIR}/client/${cssFile}`);\n              styles.push({\n                id: cssFile,\n                content: await css.text(),\n              });\n            }\n          }\n          return createStyles(styles);\n        };\n\n        return await result({\n          getStyles,\n          clientEntry,\n          modulePreloadManifest,\n          loaders,\n          viewImportMap,\n          viewModules,\n          ogMap,\n          cssManifest,\n          assetBase,\n          resolveIsland,\n          buildId,\n        });\n      }\n    } catch (err) {\n      return unhandledErrorResponse(err, pathname, app.onException);\n    }\n  }\n\n  // Compression is on unless the deployment opts out — set `GEMI_COMPRESSION=off`\n  // when a layer in front of the origin already compresses HTML and you would\n  // rather not spend origin CPU on it.\n  const compressionEnabled = (process.env.GEMI_COMPRESSION ?? \"auto\").toLowerCase() !== \"off\";\n\n  // Which `X-Forwarded-For` entries to believe — see `forwardedFor.ts`. Parsed\n  // before `Bun.serve` so a bad value fails the boot, not every request.\n  const forwardedTrust = parseTrustProxy(process.env.GEMI_TRUST_PROXY);\n\n  // The broadcast socket endpoint, when the app declares `route.channels`.\n  const sockets = app.sockets();\n  if (sockets && forwardedTrust.kind === \"none\") {\n    console.warn(\n      \"[gemi] Broadcast sockets: GEMI_TRUST_PROXY is not set, so a socket's address is its TCP peer. Behind a proxy or load balancer every client shares the proxy's address, and broadcast.maxConnectionsPerIp caps the whole app per process. Set GEMI_TRUST_PROXY (see forwardedFor) or raise that limit.\",\n    );\n  }\n\n  const server = Bun.serve<any>({\n    maxRequestBodySize: 10 * 1024 * 1024 * 1024, // 10 GB\n    fetch: async (req, server) => {\n      // `requestIP` is null for closed/unix sockets — guard so it never\n      // throws before the request is handled.\n      applyForwardedTrust(req.headers, server.requestIP(req)?.address ?? null, forwardedTrust);\n      // A proxy that proves itself with `route.domains.trustProxy.secret` may\n      // name the client in `clientIpHeader`, which then wins.\n      app.applyTrustedClientIp(req);\n      // Ahead of the instrumentation: an upgrade is not a response to trace,\n      // and the hub runs the global middleware itself.\n      if (sockets?.matches(req)) {\n        return sockets.upgrade(req, server);\n      }\n      // The app's global middleware goes in front of the static handler as well\n      // as the router, so it can refuse `/assets/*` too.\n      const res = await instrumentation(req, (req) =>\n        app.withGlobalMiddleware(req, requestHandler, (err) =>\n          unhandledErrorResponse(err, new URL(req.url).pathname, app.onException),\n        ),\n      );\n      // Applied at the very edge, after instrumentation, so every HTML response\n      // goes through the same negotiation — including the ones an app's\n      // instrumentation produced itself. Anything that isn't HTML comes back\n      // untouched.\n      return compressionEnabled ? compressResponse(req, res) : res;\n    },\n    idleTimeout: serverIdleTimeout(),\n    port: process.env.PORT || 5173,\n    websocket: sockets?.websocket as WebSocketHandler<any>,\n  });\n  await sockets?.start(server);\n\n  printStartupBanner({ port: server.port, rootDir });\n\n  return server;\n}\n",
     "/**\n * Transport-level compression for SSR HTML responses.\n *\n * This lives in the runtime rather than in an app, because every gemi app\n * serves the same shape of response: a streamed `text/html` document whose\n * bulk is critical CSS, markup and the `window.__GEMI_DATA__` hydration\n * payload. Compressing it here means the win is portable across deployments —\n * it does not depend on a CDN being configured to compress on the origin's\n * behalf — and it also cuts origin→edge bandwidth, which edge compression\n * cannot.\n *\n * Compression stays strictly at the transport layer: what the client decodes\n * is byte-for-byte the HTML React rendered, so hydration is unaffected.\n *\n * Deliberately dependency-free apart from `node:zlib`/`node:stream` so it can\n * be unit tested without booting a server.\n */\n\nimport { Duplex } from \"node:stream\";\nimport { constants, createBrotliCompress, createGzip } from \"node:zlib\";\n\n/** The content codings we can produce, in the order we prefer them. */\nexport type ContentEncoding = \"br\" | \"gzip\";\n\n/**\n * Server preference, used to break q-value ties. Brotli comes first: at the\n * quality we use it is both smaller *and* no more expensive than gzip on a\n * representative SSR document (~177 kB → 28.0 kB in ~2.0 ms, versus 31.6 kB in\n * ~2.0 ms for gzip).\n */\nconst SERVER_PREFERENCE: ContentEncoding[] = [\"br\", \"gzip\"];\n\n/**\n * Below this, an encoded body plus its framing overhead is not worth the CPU.\n * Only applied when the response declares a `Content-Length` — a streamed SSR\n * response does not, and buffering one just to measure it would defeat the\n * streaming render.\n */\nconst MIN_COMPRESSIBLE_BYTES = 1024;\n\n/**\n * Brotli quality 5 (of 11). The default, 11, is meant for static assets\n * compressed once at build time — on a streamed document it costs ~175 ms,\n * two orders of magnitude more than quality 5 for ~12% more savings. Quality 5\n * is the usual choice for dynamic content.\n *\n * `LGWIN` 19 caps the window at 512 kB rather than the default 16 MB. An SSR\n * document is far smaller than that, so the ratio is unchanged, and the bound\n * matters under concurrency: the window is allocated per in-flight response.\n */\nconst BROTLI_QUALITY = 5;\nconst BROTLI_WINDOW_BITS = 19;\n\n/** zlib's default level. Level 9 costs measurably more for ~1% on HTML. */\nconst GZIP_LEVEL = 6;\n\nfunction parseQValue(raw: string | undefined): number {\n  if (raw === undefined) {\n    return 1;\n  }\n  // `q` is a fixed-point number with at most three decimals (RFC 9110 §12.4.2).\n  // Anything else is malformed; treat it as an unqualified \"acceptable\" rather\n  // than dropping the encoding, matching what tolerant servers do.\n  if (!/^\\d+(\\.\\d{0,3})?$/.test(raw.trim())) {\n    return 1;\n  }\n  const value = Number(raw.trim());\n  return Number.isFinite(value) ? Math.min(value, 1) : 1;\n}\n\n/**\n * Parses a request `Accept-Encoding` into `coding -> qvalue`.\n *\n * Returns `null` when the header is *absent*, which is distinct from an empty\n * one. RFC 9110 §12.5.3 says an absent header means any coding is acceptable,\n * but a client that cannot decode and forgets to say so is a broken page, not\n * a slow one — so we treat \"absent\" as \"identity\" and only encode when a\n * client has explicitly opted in. An empty header (`Accept-Encoding:`) is a\n * deliberate \"identity only\" and parses to an empty map.\n */\nexport function parseAcceptEncoding(header: string | null | undefined): Map<string, number> | null {\n  if (header === null || header === undefined) {\n    return null;\n  }\n\n  const accepted = new Map<string, number>();\n  for (const part of header.split(\",\")) {\n    const [rawCoding, ...params] = part.split(\";\");\n    const coding = rawCoding.trim().toLowerCase();\n    if (coding === \"\") {\n      continue;\n    }\n\n    let q = 1;\n    for (const param of params) {\n      const separator = param.indexOf(\"=\");\n      if (separator === -1) {\n        continue;\n      }\n      if (param.slice(0, separator).trim().toLowerCase() === \"q\") {\n        q = parseQValue(param.slice(separator + 1));\n        break;\n      }\n    }\n\n    accepted.set(coding, q);\n  }\n\n  return accepted;\n}\n\n/**\n * Picks the coding to use, or `null` for identity.\n *\n * A `q=0` is a refusal, `*` covers codings the client did not name, and ties\n * fall back to `available`'s order — so a plain `Accept-Encoding: gzip, br`\n * (equal q of 1) resolves to our preference rather than the client's.\n */\nexport function negotiateEncoding(\n  header: string | null | undefined,\n  available: ContentEncoding[] = SERVER_PREFERENCE,\n): ContentEncoding | null {\n  const accepted = parseAcceptEncoding(header);\n  if (!accepted) {\n    return null;\n  }\n\n  const wildcard = accepted.get(\"*\");\n  let best: ContentEncoding | null = null;\n  let bestQ = 0;\n\n  for (const coding of available) {\n    const q = accepted.get(coding) ?? wildcard ?? 0;\n    if (q > bestQ) {\n      best = coding;\n      bestQ = q;\n    }\n  }\n\n  return best;\n}\n\nfunction hasDirective(headerValue: string | null, directive: string): boolean {\n  if (!headerValue) {\n    return false;\n  }\n  // Token match, not substring: `no-transform` must not be found inside\n  // something like `x-no-transform`.\n  return headerValue\n    .split(\",\")\n    .some((token) => token.trim().toLowerCase().split(\"=\")[0].trim() === directive);\n}\n\n/**\n * Whether this response's representation is one we may encode — and therefore\n * one that varies by `Accept-Encoding`, even on the requests where we end up\n * sending identity.\n *\n * HTML only, on purpose. JSON view-data and API responses are left alone so\n * that this change cannot alter how they are produced, framed or cached;\n * widening the set is a separate decision.\n */\nexport function isCompressible(method: string, res: Response): boolean {\n  // A HEAD response carries no body to encode, and emitting `Content-Encoding`\n  // without one would describe a body the client never receives.\n  if (method === \"HEAD\") {\n    return false;\n  }\n\n  // 204/304 are bodyless; 206 is a byte range of an already-committed\n  // representation and re-encoding it would invalidate its `Content-Range`.\n  if (res.status < 200 || res.status === 204 || res.status === 206 || res.status === 304) {\n    return false;\n  }\n\n  if (res.headers.has(\"Content-Range\")) {\n    return false;\n  }\n\n  const contentType = res.headers.get(\"Content-Type\");\n  if (!contentType || !/^\\s*text\\/html\\s*(;|$)/i.test(contentType)) {\n    return false;\n  }\n\n  // Only once the status and headers have ruled a range out: on Bun 1.3.14 on\n  // Linux, reading `.body` of a Response built on a sliced Blob makes it send\n  // past the slice's end (#725), so `.body` is never touched on a non-HTML\n  // response this function hands back untouched.\n  if (!res.body) {\n    return false;\n  }\n\n  // Already encoded upstream — `identity` is the one value that means \"not\n  // encoded\" and is safe to replace.\n  const contentEncoding = res.headers.get(\"Content-Encoding\");\n  if (contentEncoding && contentEncoding.trim().toLowerCase() !== \"identity\") {\n    return false;\n  }\n\n  // RFC 9110 §5.2.2.6: `no-transform` forbids intermediaries *and* us from\n  // changing the representation's encoding.\n  if (hasDirective(res.headers.get(\"Cache-Control\"), \"no-transform\")) {\n    return false;\n  }\n\n  const contentLength = res.headers.get(\"Content-Length\");\n  if (contentLength !== null && Number(contentLength) < MIN_COMPRESSIBLE_BYTES) {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Builds the encoder as a web `TransformStream`-shaped pair.\n *\n * Both codings are driven through `node:zlib` with an explicit per-write flush.\n * Without it the compressor holds output until its internal buffer fills,\n * which would sit on React's shell flush and turn a streamed render into a\n * buffered one — the compression win would be paid for in time to first byte.\n */\nexport function createEncoderStream(encoding: ContentEncoding) {\n  const compressor =\n    encoding === \"br\"\n      ? createBrotliCompress({\n          params: {\n            [constants.BROTLI_PARAM_QUALITY]: BROTLI_QUALITY,\n            [constants.BROTLI_PARAM_LGWIN]: BROTLI_WINDOW_BITS,\n          },\n          flush: constants.BROTLI_OPERATION_FLUSH,\n        })\n      : createGzip({ level: GZIP_LEVEL, flush: constants.Z_SYNC_FLUSH });\n\n  return Duplex.toWeb(compressor) as unknown as ReadableWritablePair<Uint8Array, Uint8Array>;\n}\n\nfunction withVaryAcceptEncoding(headers: Headers) {\n  const vary = headers.get(\"Vary\");\n  if (!vary) {\n    headers.set(\"Vary\", \"Accept-Encoding\");\n    return;\n  }\n  const tokens = vary.split(\",\").map((token) => token.trim().toLowerCase());\n  // `Vary: *` already means \"never reuse for another request\"; narrowing it\n  // would be a downgrade.\n  if (tokens.includes(\"*\") || tokens.includes(\"accept-encoding\")) {\n    return;\n  }\n  headers.append(\"Vary\", \"Accept-Encoding\");\n}\n\n/**\n * Compresses an SSR HTML response when the client asked for it.\n *\n * Non-HTML responses are returned untouched — same object, same body, so this\n * is safe to apply at the edge of the server for every request.\n *\n * HTML responses always gain `Vary: Accept-Encoding`, whether or not this\n * particular request got an encoded body: without it a shared cache could\n * serve a stored encoded variant to a client that cannot decode it.\n */\nexport function compressResponse(req: Request, res: Response): Response {\n  if (!isCompressible(req.method, res)) {\n    return res;\n  }\n\n  const headers = new Headers(res.headers);\n  withVaryAcceptEncoding(headers);\n\n  const encoding = negotiateEncoding(req.headers.get(\"Accept-Encoding\"));\n  if (!encoding) {\n    return new Response(res.body, {\n      status: res.status,\n      statusText: res.statusText,\n      headers,\n    });\n  }\n\n  let encoder: ReadableWritablePair<Uint8Array, Uint8Array>;\n  try {\n    encoder = createEncoderStream(encoding);\n  } catch {\n    // A compressor we cannot construct is not worth failing a page render\n    // over. Serve identity — with the `Vary` we already added.\n    return new Response(res.body, {\n      status: res.status,\n      statusText: res.statusText,\n      headers,\n    });\n  }\n\n  headers.set(\"Content-Encoding\", encoding);\n  // The length of the identity representation says nothing about the encoded\n  // body, and a stale one would truncate the response.\n  headers.delete(\"Content-Length\");\n\n  return new Response(res.body!.pipeThrough(encoder), {\n    status: res.status,\n    statusText: res.statusText,\n    headers,\n  });\n}\n",
     "import { readdir, stat } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { createUnsatisfiableResponse } from \"../http/createStreamResponse\";\nimport { formatContentRange, parseRangeHeader, resolveRange } from \"../http/range\";\nimport { SIBLING_EXTENSION } from \"../vite/precompressAssets\";\nimport { type ContentEncoding, negotiateEncoding } from \"./compression\";\nimport { generateETag } from \"./generateEtag\";\n\n/**\n * Every file in `dist/client` outside `/assets`, as absolute paths — what\n * Vite copied out of `public/` (#583).\n *\n * A root-level path may be an app route, so the static handler may only take\n * one that names a file the app really ships. This used to be guessed from the\n * extension, and every extension the list missed (`.mp4` on 0.58, `.wasm`,\n * `.csv` …) was answered by the router with a rendered 404 page. The build\n * output is fixed for the life of the process, so the exact set is read once\n * at boot instead.\n *\n * `assets/` is left out because the static handler takes everything under it\n * anyway. A name starting with a dot is left out at any depth: `.vite/` is\n * build metadata (both manifests and the asset base record), and a stray\n * `.DS_Store` or `.env` copied in from `public/` is nothing a request should\n * reach. `/.well-known` is served by its own rule.\n */\nexport async function listPublicFiles(clientDir: string): Promise<Set<string>> {\n  const files = new Set<string>();\n\n  async function walk(dir: string, topLevel: boolean) {\n    let entries;\n    try {\n      entries = await readdir(dir, { withFileTypes: true });\n    } catch {\n      return;\n    }\n    for (const entry of entries) {\n      if (entry.name.startsWith(\".\")) continue;\n      if (topLevel && entry.name === \"assets\") continue;\n      const path = join(dir, entry.name);\n      let isDir = entry.isDirectory();\n      let isFile = entry.isFile();\n      if (entry.isSymbolicLink()) {\n        try {\n          const target = await stat(path);\n          isDir = target.isDirectory();\n          isFile = target.isFile();\n        } catch {\n          continue;\n        }\n      }\n      if (isFile) files.add(path);\n      // A symlinked directory is not followed: a link back up the tree would\n      // never end, and `clientFilePath` only names paths inside `dist/client`.\n      else if (isDir && !entry.isSymbolicLink()) await walk(path, false);\n    }\n  }\n\n  await walk(clientDir, true);\n  return files;\n}\n\nconst LONG_LIVED = \"public, max-age=31536000, must-revalidate\";\n\n/**\n * A content-hashed build asset never changes under its name: a new build\n * writes a new name. So a browser or edge may keep it a year without asking\n * again (#789).\n */\nconst IMMUTABLE = \"public, max-age=31536000, immutable\";\n\nexport interface StaticFileOptions {\n  /**\n   * The file is a content-hashed build asset (it is in the build's\n   * `static-assets.json`), so it is sent as `immutable`.\n   */\n  immutable?: boolean;\n  /**\n   * The precompressed siblings the build wrote for it (`file.br`,\n   * `file.gz`), in preference order. Offering any makes the response vary by\n   * `Accept-Encoding`, so it says so even when it sends identity.\n   */\n  encodings?: ContentEncoding[];\n}\n\nasync function encodedSibling(\n  req: Request,\n  path: string,\n  encodings: ContentEncoding[],\n): Promise<{ encoding: ContentEncoding; path: string; size: number } | null> {\n  // A range is a byte range of the identity representation: an encoded\n  // variant has no stable offsets to slice, so a range request gets identity.\n  if (encodings.length === 0 || req.headers.has(\"Range\")) {\n    return null;\n  }\n  const encoding = negotiateEncoding(req.headers.get(\"Accept-Encoding\"), encodings);\n  if (!encoding) {\n    return null;\n  }\n  const siblingPath = path + SIBLING_EXTENSION[encoding];\n  try {\n    // Checked per request, like the file itself: a sibling deleted under a\n    // running server would otherwise fail mid-body after a committed 200.\n    const info = await stat(siblingPath);\n    return info.isFile() ? { encoding, path: siblingPath, size: info.size } : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The response for a file in `dist/client` that is known to exist.\n *\n * Honours a single byte `Range`, so a `<video>` pointed at a public `.mp4`\n * can seek — Safari will not play one at all from a server that answers its\n * `bytes=0-1` probe with the whole file. Recent Bun releases slice a\n * file-backed 200 themselves; doing it here keeps that from depending on the\n * Bun version a deployment runs, and answers an unsatisfiable range with the\n * same 416 the `stream()` responses use.\n *\n * A build asset with precompressed siblings is sent as the one\n * `Accept-Encoding` prefers (brotli, then gzip, then identity), with the\n * original's `Content-Type`. Nothing is compressed here: a file without a\n * sibling is sent as is.\n *\n * `Bun.file().type` is the mime lookup, and is `application/octet-stream` for\n * an extension it does not know.\n */\nexport async function staticFileResponse(\n  req: Request,\n  path: string,\n  options: StaticFileOptions = {},\n): Promise<Response> {\n  const file = Bun.file(path);\n  const encodings = options.encodings ?? [];\n\n  const headers: Record<string, string> = {\n    \"Content-Type\": file.type || \"application/octet-stream\",\n    \"Cache-Control\": options.immutable ? IMMUTABLE : LONG_LIVED,\n    \"Accept-Ranges\": \"bytes\",\n  };\n  if (encodings.length > 0) {\n    headers.Vary = \"Accept-Encoding\";\n  }\n\n  const sibling = await encodedSibling(req, path, encodings);\n  if (sibling) {\n    const encoded = Bun.file(sibling.path);\n    return new Response(encoded.stream(), {\n      headers: {\n        ...headers,\n        \"Content-Encoding\": sibling.encoding,\n        \"Content-Length\": String(sibling.size),\n        // A different representation, so a different validator.\n        ETag: `${generateETag(encoded.lastModified)}-${sibling.encoding}`,\n      },\n    });\n  }\n\n  const total = file.size;\n  headers.ETag = generateETag(file.lastModified);\n\n  const range = parseRangeHeader(req.headers.get(\"Range\"));\n\n  if (range) {\n    const resolved = resolveRange(range, total);\n    if (!resolved) {\n      return createUnsatisfiableResponse(total);\n    }\n    return new Response(file.slice(resolved.start, resolved.end + 1).stream(), {\n      status: 206,\n      headers: {\n        ...headers,\n        \"Content-Range\": formatContentRange(resolved.start, resolved.end, total),\n        \"Content-Length\": String(resolved.length),\n      },\n    });\n  }\n\n  return new Response(file.stream(), {\n    headers: { ...headers, \"Content-Length\": String(total) },\n  });\n}\n",
     "import { mkdir, readFile, stat, writeFile } from \"node:fs/promises\";\nimport { availableParallelism } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { brotliCompress, constants, gzip } from \"node:zlib\";\n\nimport type { ContentEncoding } from \"../server/compression\";\n\n/**\n * Build-time compression of the client bundle (#789).\n *\n * `gemi start` compresses SSR HTML per request, but a hashed chunk is the same\n * bytes for the life of a release, so compressing it per request would spend\n * origin CPU on every visitor for a result that never changes. `gemi build`\n * writes `file.br` (brotli quality 11) and `file.gz` (gzip level 9) next to\n * every compressible build asset instead, once, and the server picks one by\n * `Accept-Encoding`.\n *\n * What the build emitted (and what it carried over from earlier releases, see\n * `previousAssets.ts`) is recorded in `dist/client/.vite/static-assets.json`,\n * with the encodings each file has. The server reads it at boot: a file in the\n * record is a content-hashed build asset, so it is sent as `immutable`, and\n * only the encodings listed for it are offered. A file not in the record (one\n * copied from `public/assets/`, or anything in a build made before this\n * existed) is served as before.\n */\n\n/** Relative to `dist/client`; beside Vite's own manifest, so never served. */\nexport const STATIC_ASSETS_RECORD = \".vite/static-assets.json\";\n\n/**\n * Below this, the encoded body plus its header is not worth a second request\n * representation: a 600-byte chunk saves a few hundred bytes at most, and\n * every file with siblings adds a `stat` per request.\n */\nexport const PRECOMPRESS_MIN_BYTES = 1024;\n\n/**\n * Text-like formats that compress well. Already-compressed formats (images,\n * `woff`/`woff2`, video) are left out: brotli shaves a percent or two off\n * them at best. Source maps are left out because a page never loads one, and\n * only devtools would gain from the extra build time.\n */\nconst COMPRESSIBLE = /\\.(?:m?js|cjs|css|svg|json|webmanifest|wasm|txt|xml|ttf|otf|eot)$/i;\n\nconst TEXT = /\\.(?:m?js|cjs|css|svg|json|webmanifest|txt|xml)$/i;\nconst FONT = /\\.(?:ttf|otf|eot)$/i;\n\nexport const SIBLING_EXTENSION: Record<ContentEncoding, string> = {\n  br: \".br\",\n  gzip: \".gz\",\n};\n\n/** Server preference: brotli is ~15% smaller than gzip -9 on a JS chunk. */\nconst ENCODINGS: ContentEncoding[] = [\"br\", \"gzip\"];\n\nexport interface StaticAssetsRecord {\n  /**\n   * Path relative to `dist/client` (`assets/client-DJhrQPW5.js`) → the\n   * precompressed siblings it has, in preference order. An empty list is a\n   * build asset that is served as identity only (an image, a small file).\n   */\n  files: Record<string, ContentEncoding[]>;\n}\n\nexport interface PrecompressStats {\n  files: number;\n  identityBytes: number;\n  brBytes: number;\n  gzipBytes: number;\n}\n\nconst brotli = promisify(brotliCompress);\nconst gzipAsync = promisify(gzip);\n\nexport function isPrecompressible(file: string): boolean {\n  return COMPRESSIBLE.test(file);\n}\n\n/** `true` for `x.js.br` / `x.js.gz`: a sibling, not an asset of its own. */\nexport function isEncodedSibling(file: string): boolean {\n  return file.endsWith(\".br\") || file.endsWith(\".gz\");\n}\n\nasync function encode(encoding: ContentEncoding, file: string, input: Buffer): Promise<Buffer> {\n  if (encoding === \"gzip\") {\n    return gzipAsync(input, { level: 9 });\n  }\n  return brotli(input, {\n    params: {\n      [constants.BROTLI_PARAM_QUALITY]: constants.BROTLI_MAX_QUALITY,\n      [constants.BROTLI_PARAM_MODE]: TEXT.test(file)\n        ? constants.BROTLI_MODE_TEXT\n        : FONT.test(file)\n          ? constants.BROTLI_MODE_FONT\n          : constants.BROTLI_MODE_GENERIC,\n      [constants.BROTLI_PARAM_SIZE_HINT]: input.length,\n    },\n  });\n}\n\nasync function fileSize(path: string): Promise<number | null> {\n  try {\n    const info = await stat(path);\n    return info.isFile() ? info.size : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Writes the `.br`/`.gz` siblings of `files` (paths relative to `clientDir`)\n * and returns the encodings each one ended up with.\n *\n * A sibling is only kept when it is smaller than the file itself; one that is\n * not would cost bytes on the wire, so the file is served as identity for\n * that encoding. With `reuseExisting`, a sibling already on disk is trusted\n * rather than rebuilt — for files carried from an earlier release, whose\n * siblings were copied with them and match by content hash.\n */\nexport async function precompressAssets(\n  clientDir: string,\n  files: Iterable<string>,\n  options: {\n    reuseExisting?: boolean;\n    minBytes?: number;\n    concurrency?: number;\n  } = {},\n): Promise<{ record: StaticAssetsRecord; stats: PrecompressStats }> {\n  const minBytes = options.minBytes ?? PRECOMPRESS_MIN_BYTES;\n  const record: StaticAssetsRecord = { files: {} };\n  const stats: PrecompressStats = {\n    files: 0,\n    identityBytes: 0,\n    brBytes: 0,\n    gzipBytes: 0,\n  };\n\n  const queue = [...new Set(files)];\n  for (const file of queue) {\n    record.files[file] = [];\n  }\n\n  async function work(file: string) {\n    if (!isPrecompressible(file)) {\n      return;\n    }\n    const path = join(clientDir, file);\n    const size = await fileSize(path);\n    if (size === null || size < minBytes) {\n      return;\n    }\n\n    let input: Buffer | null = null;\n    const available: ContentEncoding[] = [];\n    const sizes: Partial<Record<ContentEncoding, number>> = {};\n    for (const encoding of ENCODINGS) {\n      const siblingPath = path + SIBLING_EXTENSION[encoding];\n      const existing = options.reuseExisting ? await fileSize(siblingPath) : null;\n      if (existing !== null) {\n        if (existing < size) {\n          available.push(encoding);\n          sizes[encoding] = existing;\n        }\n        continue;\n      }\n      input ??= await readFile(path);\n      const output = await encode(encoding, file, input);\n      if (output.length < size) {\n        await writeFile(siblingPath, output);\n        available.push(encoding);\n        sizes[encoding] = output.length;\n      }\n    }\n\n    record.files[file] = available;\n    if (available.length > 0) {\n      stats.files += 1;\n      stats.identityBytes += size;\n      stats.brBytes += sizes.br ?? size;\n      stats.gzipBytes += sizes.gzip ?? size;\n    }\n  }\n\n  // zlib's async calls run on the libuv thread pool; a few files in flight\n  // keep it busy without reading the whole bundle into memory at once.\n  const concurrency = Math.max(1, options.concurrency ?? Math.min(8, availableParallelism()));\n  let next = 0;\n  await Promise.all(\n    Array.from({ length: Math.min(concurrency, queue.length) }, async () => {\n      while (next < queue.length) {\n        await work(queue[next++]);\n      }\n    }),\n  );\n\n  return { record, stats };\n}\n\nexport async function writeStaticAssetsRecord(clientDir: string, record: StaticAssetsRecord) {\n  const path = join(clientDir, STATIC_ASSETS_RECORD);\n  await mkdir(dirname(path), { recursive: true });\n  // Sorted, so two builds of the same tree write the same file.\n  const files = Object.fromEntries(\n    Object.entries(record.files).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0)),\n  );\n  await writeFile(path, `${JSON.stringify({ files }, null, 2)}\\n`);\n}\n\n/**\n * The record a build wrote, or `null` when there is none (a build made before\n * precompression, or an incomplete `dist/`): the server then serves every file\n * as before. A malformed entry is dropped rather than trusted.\n */\nexport async function readStaticAssetsRecord(\n  clientDir: string,\n): Promise<StaticAssetsRecord | null> {\n  let raw: string;\n  try {\n    raw = await readFile(join(clientDir, STATIC_ASSETS_RECORD), \"utf8\");\n  } catch {\n    return null;\n  }\n  let files: unknown;\n  try {\n    files = JSON.parse(raw)?.files;\n  } catch {\n    return null;\n  }\n  if (!files || typeof files !== \"object\") {\n    return null;\n  }\n  const record: StaticAssetsRecord = { files: {} };\n  for (const [file, encodings] of Object.entries(files)) {\n    if (!Array.isArray(encodings)) continue;\n    record.files[file] = ENCODINGS.filter((encoding) => encodings.includes(encoding));\n  }\n  return record;\n}\n",
@@ -13,7 +13,7 @@
     "import { stringEraRefusal } from \"../http/Error\";\nimport { isApiPath } from \"../services/router/apiPath\";\n\n// The production server's last resort: an error nothing on the way here turned\n// into a response. Request breakers (auth, 404s, 416s) are answered by the\n// dispatchers before this, so what arrives is a genuine failure — and its\n// message and stack are for the developer, not for whoever triggered it. They\n// can carry absolute paths, dependency versions, SQL fragments and column\n// names. The dev server renders them on purpose (`httpDev.ts`); this does not.\n\nconst GENERIC_500_HTML = `<!DOCTYPE html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"UTF-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n    <title>Internal Server Error</title>\n    <style>\n      body { font-family: system-ui, sans-serif; margin: 0; min-height: 100vh; display: grid; place-items: center; }\n      main { text-align: center; padding: 16px; }\n      h1 { font-size: 1.5rem; margin: 0 0 0.5rem; }\n      p { margin: 0; opacity: 0.7; }\n    </style>\n  </head>\n  <body>\n    <main>\n      <h1>Something went wrong</h1>\n      <p>Please try again later.</p>\n    </main>\n  </body>\n</html>`;\n\nexport function unhandledErrorResponse(\n  err: unknown,\n  pathname: string,\n  onException?: (error: Error) => void,\n): Response {\n  // `onException` is the report, and the default one `App` installs is a\n  // `console.error`, so logging here as well printed every failure twice\n  // (three times for `/api`, whose dispatcher logs before rethrowing). Only\n  // without a reporter does this log itself.\n  //\n  // Reported for `/api` too: an app's error tracking should see an API failure\n  // that got this far, not only a page one. `onRequestFail` is a different\n  // hook (route config, called by the dispatchers), so this is not a second\n  // report through the same channel.\n  if (!onException) {\n    console.error(err);\n  } else {\n    try {\n      // The hook is typed to receive an `Error`; a thrown string or object is\n      // wrapped so a reporter reading `.stack` or `.name` gets one.\n      onException(err instanceof Error ? err : new Error(String(err), { cause: err }));\n    } catch (reportError) {\n      // A broken reporter must not turn a 500 into a leaked stack either.\n      console.error(err);\n      console.error(reportError);\n    }\n  }\n\n  if (isApiPath(pathname)) {\n    return new Response(\n      JSON.stringify({ error: stringEraRefusal(\"server_error\", \"Internal Server Error\", 500) }),\n      {\n        status: 500,\n        headers: { \"Content-Type\": \"application/json\" },\n      },\n    );\n  }\n\n  return new Response(GENERIC_500_HTML, {\n    status: 500,\n    headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n  });\n}\n",
     "/**\n * Which `X-Forwarded-For` entries the production server believes (#8).\n *\n * `X-Forwarded-For` is written by whoever sends the request. A client talking\n * to the app directly — or through a proxy that appends to the header rather\n * than replacing it — picks any address it likes, and `clientIp` (the rate\n * limiter's default key) used to read the left-most entry, which is exactly\n * the one the client wrote. So the server decides here, once, at the edge,\n * and hands the app a single address it can rely on:\n *\n * - `none` (the default): no proxy is trusted. The header is replaced with the\n *   socket's peer address, and `X-Real-IP` is dropped.\n * - `hops` (`GEMI_TRUST_PROXY=<n>`): the `n` proxies nearest the app are\n *   trusted. Each appends the address it was reached from, so the client is\n *   the `n`-th entry from the right of `X-Forwarded-For`. Anything\n *   further left was written by someone the app does not trust and is dropped.\n * - `all` (`GEMI_TRUST_PROXY=true`): the inbound header is passed through\n *   unchanged, as before 0.88. Only sound behind a proxy that overwrites\n *   `X-Forwarded-For` (and `X-Real-IP`) rather than appending to it.\n */\nexport type ForwardedTrust =\n  | { kind: \"none\" }\n  | { kind: \"all\" }\n  | { kind: \"hops\"; hops: number };\n\nconst NONE: ForwardedTrust = { kind: \"none\" };\n\n/**\n * `GEMI_TRUST_PROXY` as a policy. Unset, empty, `false`, `off` and `0` trust\n * nothing; `true` trusts everything; a positive integer is a hop count.\n * Anything else throws, so a typo fails the boot instead of silently trusting\n * nothing (every client sharing the proxy's address) or everything.\n */\nexport function parseTrustProxy(value: string | undefined): ForwardedTrust {\n  const raw = (value ?? \"\").trim().toLowerCase();\n  if (raw === \"\" || raw === \"false\" || raw === \"off\" || raw === \"0\") {\n    return NONE;\n  }\n  if (raw === \"true\") {\n    return { kind: \"all\" };\n  }\n  if (/^[1-9]\\d*$/.test(raw)) {\n    return { kind: \"hops\", hops: Number(raw) };\n  }\n  throw new Error(\n    `GEMI_TRUST_PROXY must be \"false\", \"true\" or the number of proxies in front of the app (e.g. 1). Got ${JSON.stringify(value)}.`,\n  );\n}\n\n/**\n * Rewrites `headers` so `X-Forwarded-For` holds what `trust` says the client\n * address is. `peer` is the socket's remote address — `null` for a unix\n * socket, where the immediate hop is still counted as one proxy.\n */\nexport function applyForwardedTrust(\n  headers: Headers,\n  peer: string | null,\n  trust: ForwardedTrust,\n): void {\n  if (trust.kind === \"all\") {\n    if (!headers.get(\"x-forwarded-for\") && peer) {\n      headers.set(\"x-forwarded-for\", peer);\n    }\n    return;\n  }\n\n  // Under any other policy `X-Real-IP` is as client-written as the rest; the\n  // address the app should use is the one left in `X-Forwarded-For`.\n  headers.delete(\"x-real-ip\");\n\n  let client: string | null = peer;\n  if (trust.kind === \"hops\") {\n    const entries = (headers.get(\"x-forwarded-for\") ?? \"\")\n      .split(\",\")\n      .map((entry) => entry.trim())\n      .filter(Boolean);\n    // The chain is `entries` + `peer`; the client sits `hops` places left of\n    // its end, i.e. `entries[entries.length - hops]`. A shorter chain than\n    // expected means the request skipped a proxy, so its left-most hop is the\n    // furthest thing seen — never anything further left than that.\n    const index = entries.length - trust.hops;\n    client = index >= 0 ? entries[index]! : (entries[0] ?? peer);\n  }\n\n  if (client) {\n    headers.set(\"x-forwarded-for\", client);\n  } else {\n    headers.delete(\"x-forwarded-for\");\n  }\n}\n"
   ],
-  "mappings": ";0hCAAA,eAAS,UAET,SAAS,OAAM,IAAS,QCgBxB,WAAS,UACT,cAAS,oBAAW,WAAsB,QAW1C,FAAM,HAAuC,LAAC,DAAM,AAAM,JAQpD,HAAyB,DAYzB,HAAiB,JACjB,HAAqB,HAGrB,HAAa,EAEnB,SAAS,EAAW,CAAC,EAAiC,CACpD,GAAI,IAAQ,OACV,MAAO,GAKT,GAAI,CAAC,oBAAoB,KAAK,EAAI,KAAK,CAAC,EACtC,MAAO,GAET,IAAM,EAAQ,OAAO,EAAI,KAAK,CAAC,EAC/B,OAAO,OAAO,SAAS,CAAK,EAAI,KAAK,IAAI,EAAO,CAAC,EAAI,EAahD,SAAS,EAAmB,CAAC,EAA+D,CACjG,GAAI,IAAW,MAAQ,IAAW,OAChC,OAAO,KAGT,IAAM,EAAW,IAAI,IACrB,QAAW,KAAQ,EAAO,MAAM,GAAG,EAAG,CACpC,IAAO,KAAc,GAAU,EAAK,MAAM,GAAG,EACvC,EAAS,EAAU,KAAK,EAAE,YAAY,EAC5C,GAAI,IAAW,GACb,SAGF,IAAI,EAAI,EACR,QAAW,KAAS,EAAQ,CAC1B,IAAM,EAAY,EAAM,QAAQ,GAAG,EACnC,GAAI,IAAc,GAChB,SAEF,GAAI,EAAM,MAAM,EAAG,CAAS,EAAE,KAAK,EAAE,YAAY,IAAM,IAAK,CAC1D,EAAI,GAAY,EAAM,MAAM,EAAY,CAAC,CAAC,EAC1C,OAIJ,EAAS,IAAI,EAAQ,CAAC,EAGxB,OAAO,EAUF,SAAS,CAAiB,CAC/B,EACA,EAA+B,GACP,CACxB,IAAM,EAAW,GAAoB,CAAM,EAC3C,GAAI,CAAC,EACH,OAAO,KAGT,IAAM,EAAW,EAAS,IAAI,GAAG,EAC7B,EAA+B,KAC/B,EAAQ,EAEZ,QAAW,KAAU,EAAW,CAC9B,IAAM,EAAI,EAAS,IAAI,CAAM,GAAK,GAAY,EAC9C,GAAI,EAAI,EACN,EAAO,EACP,EAAQ,EAIZ,OAAO,EAGT,SAAS,EAAY,CAAC,EAA4B,EAA4B,CAC5E,GAAI,CAAC,EACH,MAAO,GAIT,OAAO,EACJ,MAAM,GAAG,EACT,KAAK,CAAC,IAAU,EAAM,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,GAAG,KAAK,IAAM,CAAS,EAY3E,SAAS,EAAc,CAAC,EAAgB,EAAwB,CAGrE,GAAI,IAAW,OACb,MAAO,GAKT,GAAI,EAAI,OAAS,KAAO,EAAI,SAAW,KAAO,EAAI,SAAW,KAAO,EAAI,SAAW,IACjF,MAAO,GAGT,GAAI,EAAI,QAAQ,IAAI,eAAe,EACjC,MAAO,GAGT,IAAM,EAAc,EAAI,QAAQ,IAAI,cAAc,EAClD,GAAI,CAAC,GAAe,CAAC,0BAA0B,KAAK,CAAW,EAC7D,MAAO,GAOT,GAAI,CAAC,EAAI,KACP,MAAO,GAKT,IAAM,EAAkB,EAAI,QAAQ,IAAI,kBAAkB,EAC1D,GAAI,GAAmB,EAAgB,KAAK,EAAE,YAAY,IAAM,WAC9D,MAAO,GAKT,GAAI,GAAa,EAAI,QAAQ,IAAI,eAAe,EAAG,cAAc,EAC/D,MAAO,GAGT,IAAM,EAAgB,EAAI,QAAQ,IAAI,gBAAgB,EACtD,GAAI,IAAkB,MAAQ,OAAO,CAAa,EAAI,GACpD,MAAO,GAGT,MAAO,GAWF,SAAS,EAAmB,CAAC,EAA2B,CAC7D,IAAM,EACJ,IAAa,KACT,GAAqB,CACnB,OAAQ,EACL,EAAU,sBAAuB,IACjC,EAAU,oBAAqB,EAClC,EACA,MAAO,EAAU,sBACnB,CAAC,EACD,GAAW,CAAE,MAAO,GAAY,MAAO,EAAU,YAAa,CAAC,EAErE,OAAO,GAAO,MAAM,CAAU,EAGhC,SAAS,EAAsB,CAAC,EAAkB,CAChD,IAAM,EAAO,EAAQ,IAAI,MAAM,EAC/B,GAAI,CAAC,EAAM,CACT,EAAQ,IAAI,OAAQ,iBAAiB,EACrC,OAEF,IAAM,EAAS,EAAK,MAAM,GAAG,EAAE,IAAI,CAAC,IAAU,EAAM,KAAK,EAAE,YAAY,CAAC,EAGxE,GAAI,EAAO,SAAS,GAAG,GAAK,EAAO,SAAS,iBAAiB,EAC3D,OAEF,EAAQ,OAAO,OAAQ,iBAAiB,EAanC,SAAS,CAAgB,CAAC,EAAc,EAAyB,CACtE,GAAI,CAAC,GAAe,EAAI,OAAQ,CAAG,EACjC,OAAO,EAGT,IAAM,EAAU,IAAI,QAAQ,EAAI,OAAO,EACvC,GAAuB,CAAO,EAE9B,IAAM,EAAW,EAAkB,EAAI,QAAQ,IAAI,iBAAiB,CAAC,EACrE,GAAI,CAAC,EACH,OAAO,IAAI,SAAS,EAAI,KAAM,CAC5B,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EAGH,IAAI,EACJ,GAAI,CACF,EAAU,GAAoB,CAAQ,EACtC,KAAM,CAGN,OAAO,IAAI,SAAS,EAAI,KAAM,CAC5B,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EAQH,OALA,EAAQ,IAAI,mBAAoB,CAAQ,EAGxC,EAAQ,OAAO,gBAAgB,EAExB,IAAI,SAAS,EAAI,KAAM,YAAY,CAAO,EAAG,CAClD,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EC5SH,kBAAS,WAAS,oBAClB,eAAS,cCDT,gBAAS,eAAO,WAAU,gBAAM,qBAEhC,kBAAS,WAAS,cAClB,oBAAS,aACT,yBAAS,gBAAgB,WAAW,cAwB7B,IAAM,GAAuB,2BAoB7B,IAAM,EAAqD,CAChE,GAAI,MACJ,KAAM,KACR,EAGM,GAA+B,CAAC,KAAM,MAAM,EAkB5C,GAAS,EAAU,EAAc,EACjC,GAAY,EAAU,EAAI,EA6IhC,eAAsB,CAAsB,CAC1C,EACoC,CACpC,IAAI,EACJ,GAAI,CACF,EAAM,MAAM,GAAS,GAAK,EAAW,EAAoB,EAAG,MAAM,EAClE,KAAM,CACN,OAAO,KAET,IAAI,EACJ,GAAI,CACF,EAAQ,KAAK,MAAM,CAAG,GAAG,MACzB,KAAM,CACN,OAAO,KAET,GAAI,CAAC,GAAS,OAAO,IAAU,SAC7B,OAAO,KAET,IAAM,EAA6B,CAAE,MAAO,CAAC,CAAE,EAC/C,QAAY,EAAM,KAAc,OAAO,QAAQ,CAAK,EAAG,CACrD,GAAI,CAAC,MAAM,QAAQ,CAAS,EAAG,SAC/B,EAAO,MAAM,GAAQ,GAAU,OAAO,CAAC,IAAa,EAAU,SAAS,CAAQ,CAAC,EAElF,OAAO,EC7OF,SAAS,CAAY,CAAC,EAA8B,CAEzD,IAAM,EAAkB,EAAa,SAAS,EAExC,EAAS,IAAI,IAAI,aAAa,MAAM,EAI1C,OAHA,EAAO,OAAO,CAAe,EAChB,EAAO,OAAO,KAAK,EFmBlC,eAAsB,CAAe,CAAC,EAAyC,CAC7E,IAAM,EAAQ,IAAI,IAElB,eAAe,CAAI,CAAC,EAAa,EAAmB,CAClD,IAAI,EACJ,GAAI,CACF,EAAU,MAAM,GAAQ,EAAK,CAAE,cAAe,EAAK,CAAC,EACpD,KAAM,CACN,OAEF,QAAW,KAAS,EAAS,CAC3B,GAAI,EAAM,KAAK,WAAW,GAAG,EAAG,SAChC,GAAI,GAAY,EAAM,OAAS,SAAU,SACzC,IAAM,EAAO,GAAK,EAAK,EAAM,IAAI,EAC7B,EAAQ,EAAM,YAAY,EAC1B,EAAS,EAAM,OAAO,EAC1B,GAAI,EAAM,eAAe,EACvB,GAAI,CACF,IAAM,EAAS,MAAM,EAAK,CAAI,EAC9B,EAAQ,EAAO,YAAY,EAC3B,EAAS,EAAO,OAAO,EACvB,KAAM,CACN,SAGJ,GAAI,EAAQ,EAAM,IAAI,CAAI,EAGrB,QAAI,GAAS,CAAC,EAAM,eAAe,EAAG,MAAM,EAAK,EAAM,EAAK,GAKrE,OADA,MAAM,EAAK,EAAW,EAAI,EACnB,EAGT,IAAM,GAAa,4CAOb,GAAY,sCAgBlB,eAAe,EAAc,CAC3B,EACA,EACA,EAC2E,CAG3E,GAAI,EAAU,SAAW,GAAK,EAAI,QAAQ,IAAI,OAAO,EACnD,OAAO,KAET,IAAM,EAAW,EAAkB,EAAI,QAAQ,IAAI,iBAAiB,EAAG,CAAS,EAChF,GAAI,CAAC,EACH,OAAO,KAET,IAAM,EAAc,EAAO,EAAkB,GAC7C,GAAI,CAGF,IAAM,EAAO,MAAM,EAAK,CAAW,EACnC,OAAO,EAAK,OAAO,EAAI,CAAE,WAAU,KAAM,EAAa,KAAM,EAAK,IAAK,EAAI,KAC1E,KAAM,CACN,OAAO,MAsBX,eAAsB,EAAkB,CACtC,EACA,EACA,EAA6B,CAAC,EACX,CACnB,IAAM,EAAO,IAAI,KAAK,CAAI,EACpB,EAAY,EAAQ,WAAa,CAAC,EAElC,EAAkC,CACtC,eAAgB,EAAK,MAAQ,2BAC7B,gBAAiB,EAAQ,UAAY,GAAY,GACjD,gBAAiB,OACnB,EACA,GAAI,EAAU,OAAS,EACrB,EAAQ,KAAO,kBAGjB,IAAM,EAAU,MAAM,GAAe,EAAK,EAAM,CAAS,EACzD,GAAI,EAAS,CACX,IAAM,EAAU,IAAI,KAAK,EAAQ,IAAI,EACrC,OAAO,IAAI,SAAS,EAAQ,OAAO,EAAG,CACpC,QAAS,IACJ,EACH,mBAAoB,EAAQ,SAC5B,iBAAkB,OAAO,EAAQ,IAAI,EAErC,KAAM,GAAG,EAAa,EAAQ,YAAY,KAAK,EAAQ,UACzD,CACF,CAAC,EAGH,IAAM,EAAQ,EAAK,KACnB,EAAQ,KAAO,EAAa,EAAK,YAAY,EAE7C,IAAM,EAAQ,EAAiB,EAAI,QAAQ,IAAI,OAAO,CAAC,EAEvD,GAAI,EAAO,CACT,IAAM,EAAW,EAAa,EAAO,CAAK,EAC1C,GAAI,CAAC,EACH,OAAO,EAA4B,CAAK,EAE1C,OAAO,IAAI,SAAS,EAAK,MAAM,EAAS,MAAO,EAAS,IAAM,CAAC,EAAE,OAAO,EAAG,CACzE,OAAQ,IACR,QAAS,IACJ,EACH,gBAAiB,EAAmB,EAAS,MAAO,EAAS,IAAK,CAAK,EACvE,iBAAkB,OAAO,EAAS,MAAM,CAC1C,CACF,CAAC,EAGH,OAAO,IAAI,SAAS,EAAK,OAAO,EAAG,CACjC,QAAS,IAAK,EAAS,iBAAkB,OAAO,CAAK,CAAE,CACzD,CAAC,EF/KH,eAAS,qBKQF,IAAM,EAAmB,iBAgBzB,SAAS,EAAiB,CAC/B,EACA,EAAoB,EAC+B,CACnD,IAAM,EAAO,EAAS,IAAmB,KACzC,GAAI,CAAC,EACH,OAEF,MAAO,CACL,OAAQ,EAAS,EAAM,CAAS,EAChC,QAAS,EAAsB,EAAU,EAAkB,CAAS,CACtE,EAgBK,SAAS,CAAqB,CACnC,EACA,EACA,EAAoB,EACV,CACV,IAAM,EAAiB,CAAC,EAGlB,EAAU,IAAI,IAEd,EAAO,CAAC,IAAgB,CAC5B,GAAI,EAAQ,IAAI,CAAG,EAAG,OACtB,EAAQ,IAAI,CAAG,EACf,IAAM,EAAQ,EAAS,GACvB,GAAI,CAAC,GAAO,KAAM,OAClB,EAAK,KAAK,EAAS,EAAM,KAAM,CAAS,CAAC,EACzC,QAAW,KAAY,EAAM,SAAW,CAAC,EACvC,EAAK,CAAQ,GAMjB,OAFA,EAAK,CAAQ,EAEN,EASF,SAAS,EAAU,CAAC,EAAwB,EAA4B,CAC7E,IAAM,EAAkB,CAAC,EACnB,EAAO,IAAI,IACX,EAAU,IAAI,IAEd,EAAO,CAAC,IAAgB,CAC5B,GAAI,EAAQ,IAAI,CAAG,EAAG,OACtB,EAAQ,IAAI,CAAG,EACf,IAAM,EAAQ,EAAS,GACvB,GAAI,CAAC,EAAO,OACZ,QAAW,KAAY,EAAM,SAAW,CAAC,EACvC,EAAK,CAAQ,EAEf,QAAW,KAAQ,EAAM,KAAO,CAAC,EAC/B,GAAI,CAAC,EAAK,IAAI,CAAI,EAChB,EAAK,IAAI,CAAI,EACb,EAAM,KAAK,CAAI,GAMrB,OADA,EAAK,CAAQ,EACN,EAUF,SAAS,EAAoB,CAClC,EACA,EAAoB,EACmD,CACvE,IAAM,EAAQ,IAAI,IAClB,MAAO,CAAC,IAAc,CACpB,GAAI,CAAC,EAAM,IAAI,CAAS,EAAG,CACzB,IAAM,EAAM,GAAG,IAAY,KACrB,EAAO,EAAS,IAAM,KAC5B,EAAM,IACJ,EACA,EACI,CAAE,IAAK,EAAS,EAAM,CAAS,EAAG,QAAS,EAAsB,EAAU,EAAK,CAAS,CAAE,EAC3F,MACN,EAEF,OAAO,EAAM,IAAI,CAAS,GCoEvB,SAAS,EAAqB,CACnC,EACA,EA3L8C,MA4LtC,CACR,IAAM,EAAM,KAAK,UAhMgB,mBAgMa,EACxC,EAAQ,KAAK,UAAU,gDAAgD,GAAU,EACvF,MACE,mEAAmE,+EAE5B,iBAC1B,kIACyC,eC3M1D,IAAM,GAAc,IAAI,OAAO,IAAI,eAAkC,EAE9D,SAAS,EAAgB,CAAC,EAA2B,CAC1D,OAAO,GAAY,KAAK,CAAQ,EA2C3B,SAAS,EAAe,CAAC,EAAwC,CACtE,GAAI,GAAiB,CAAQ,EAC3B,OAAO,IAAI,SAAS,GAAsB,CAAQ,EAAG,CACnD,QAAS,CACP,eAAgB,yBAChB,gBAAiB,UACnB,CACF,CAAC,EAKH,GAAI,EAAoB,CAAQ,EAC9B,OAAO,IAAI,SAAS,YAAa,CAAE,OAAQ,GAAI,CAAC,EAOlD,OCpEF,IAAM,GAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAqBlB,SAAS,CAAsB,CACpC,EACA,EACA,EACU,CAUV,GAAI,CAAC,EACH,QAAQ,MAAM,CAAG,EAEjB,QAAI,CAGF,EAAY,aAAe,MAAQ,EAAU,MAAM,OAAO,CAAG,EAAG,CAAE,MAAO,CAAI,CAAC,CAAC,EAC/E,MAAO,EAAa,CAEpB,QAAQ,MAAM,CAAG,EACjB,QAAQ,MAAM,CAAW,EAI7B,GAAI,EAAU,CAAQ,EACpB,OAAO,IAAI,SACT,KAAK,UAAU,CAAE,MAAO,GAAiB,eAAgB,wBAAyB,GAAG,CAAE,CAAC,EACxF,CACE,OAAQ,IACR,QAAS,CAAE,eAAgB,kBAAmB,CAChD,CACF,EAGF,OAAO,IAAI,SAAS,GAAkB,CACpC,OAAQ,IACR,QAAS,CAAE,eAAgB,0BAA2B,CACxD,CAAC,EC/CH,IAAM,GAAuB,CAAE,KAAM,MAAO,EAQrC,SAAS,EAAe,CAAC,EAA2C,CACzE,IAAM,GAAO,GAAS,IAAI,KAAK,EAAE,YAAY,EAC7C,GAAI,IAAQ,IAAM,IAAQ,SAAW,IAAQ,OAAS,IAAQ,IAC5D,OAAO,GAET,GAAI,IAAQ,OACV,MAAO,CAAE,KAAM,KAAM,EAEvB,GAAI,aAAa,KAAK,CAAG,EACvB,MAAO,CAAE,KAAM,OAAQ,KAAM,OAAO,CAAG,CAAE,EAE3C,MAAU,MACR,uGAAuG,KAAK,UAAU,CAAK,IAC7H,EAQK,SAAS,EAAmB,CACjC,EACA,EACA,EACM,CACN,GAAI,EAAM,OAAS,MAAO,CACxB,GAAI,CAAC,EAAQ,IAAI,iBAAiB,GAAK,EACrC,EAAQ,IAAI,kBAAmB,CAAI,EAErC,OAKF,EAAQ,OAAO,WAAW,EAE1B,IAAI,EAAwB,EAC5B,GAAI,EAAM,OAAS,OAAQ,CACzB,IAAM,GAAW,EAAQ,IAAI,iBAAiB,GAAK,IAChD,MAAM,GAAG,EACT,IAAI,CAAC,IAAU,EAAM,KAAK,CAAC,EAC3B,OAAO,OAAO,EAKX,EAAQ,EAAQ,OAAS,EAAM,KACrC,EAAS,GAAS,EAAI,EAAQ,GAAW,EAAQ,IAAM,EAGzD,GAAI,EACF,EAAQ,IAAI,kBAAmB,CAAM,EAErC,OAAQ,OAAO,iBAAiB,ETxDpC,IAAM,EAAU,GAAY,EAEtB,GAAS,EAAK,EAAS,KAAK,EAC5B,EAAU,EAAK,EAAS,MAAM,EAE9B,EAAY,EAAK,EAAS,QAAQ,EAQxC,SAAS,EAAc,CAAC,EAAiC,CACvD,IAAI,EACJ,GAAI,CACF,EAAU,mBAAmB,CAAQ,EACrC,KAAM,CACN,OAAO,KAET,IAAM,EAAO,GAAQ,EAAW,IAAM,EAAQ,QAAQ,iBAAkB,SAAS,CAAC,EAClF,OAAO,EAAK,WAAW,EAAY,EAAG,EAAI,EAAO,KAGnD,eAAe,EAAM,CAAC,EAAc,CAClC,GAAI,CACF,OAAQ,MAAM,GAAK,CAAI,GAAG,OAAO,EACjC,KAAM,CACN,MAAO,IAQX,eAAsB,EAAQ,CAAC,EAAU,EAAkC,CACzE,IAAM,EAAW,MAAa,UAAG,gCAC3B,EAAiB,MAAa,UAAG,gCAIjC,EAAY,MAAM,GAAmB,GAAG,UAAgB,EAE9D,QAAQ,IAAI,SAAW,EACvB,QAAQ,IAAI,QAAU,GACtB,QAAQ,IAAI,SAAW,EAEvB,IAAM,EAAgB,CAAC,EACjB,EAAQ,CAAC,EACT,EAAc,CAAC,EACf,EAAc,CAAC,EAGf,EAAkD,CAAC,EACnD,EAAW,CAAC,EAAkB,IAAiB,IAAI,qBAA4B,MAC/E,EAAY,CAAC,EAEnB,QAAW,IAAY,CAAC,MAAO,GAAG,EAAI,qBAAqB,KAAK,CAAG,CAAC,EAAG,CACrE,IAAM,EAAa,EAAe,aAAa,SAC/C,GAAI,CAAC,GAAY,KAAM,CACrB,QAAQ,IAAI,6BAA6B,GAAU,EACnD,QAAQ,IAAI,CAAU,EACtB,IAAM,EAAQ,OAAO,KAAK,CAAc,EAClC,EAAO,aAAa,QAC1B,QAAQ,IAAI,GAAG,gCAAmC,EAClD,QAAQ,IAAI,CAAK,EAEnB,IAAM,EAAM,MAAa,UAAG,QAAQ,IAAI,mBAAmB,GAAY,QACvE,EAAc,GAAY,EAAI,QAC9B,EAAM,GAAY,EAAI,UAGtB,EAAY,GAAY,EACxB,IAAM,EAAa,EAAS,aAAa,SAEzC,GAAI,GAAY,KAAO,GAAY,IAAI,OAAS,EAC9C,EAAY,GAAY,GAAY,IAEtC,GAAI,EACF,EAAU,KAAK,EAAS,EAAU,EAAS,GAAY,KAAM,CAAS,CAAC,CAAC,EACxE,EAAsB,GAAY,EAChC,EACA,aAAa,QACb,CACF,EAIJ,IAAM,GAAU,IAAI,EAAU,KAAK,GAAG,KAKhC,EAAc,GAAkB,EAAU,CAAS,EACzD,GAAI,CAAC,EAGH,QAAQ,MACN,2BAA2B,wFAC7B,EAMF,IAAM,GAAwB,EAAS,mBAAmB,KAAO,CAAC,EAC5D,GACJ,MAAM,QAAQ,IAAI,GAAY,IAAI,CAAC,IAAY,IAAI,KAAK,GAAG,YAAkB,GAAS,EAAE,KAAK,CAAC,CAAC,GAC/F,KAAK;AAAA,CAAI,EAIL,GAAgB,GAAqB,EAAU,CAAS,EAKxD,GAAU,GAAW,QAAQ,EAChC,OAAO,MAAM,IAAI,KAAK,GAAG,8BAAoC,EAAE,KAAK,CAAC,EACrE,OAAO,WAAW,EAClB,MAAM,EAAG,EAAE,EAOR,EAAe,IAAI,IACnB,GAAU,CAAC,IAAiB,CAChC,IAAI,EAAO,EAAa,IAAI,CAAI,EAChC,GAAI,CAAC,EACH,EAAO,IAAI,KAAK,GAAG,YAAkB,GAAM,EAAE,KAAK,EAClD,EAAa,IAAI,EAAM,CAAI,EAE7B,OAAO,GAEH,GAAe,MAAO,EAAiB,IAA+B,CAC1E,IAAM,EAAQ,IAAI,IAClB,QAAW,KAAQ,EAAS,CAAC,EAAQ,GAAG,CAAK,EAAI,EAC/C,QAAW,KAAQ,GAAW,EAAU,aAAa,OAAU,EAAG,EAAM,IAAI,CAAI,EAElF,IAAM,EAAS,MAAM,QAAQ,IAC3B,CAAC,GAAG,CAAK,EAAE,IAAI,MAAO,KAAU,CAAE,GAAI,EAAM,QAAS,MAAM,GAAQ,CAAI,CAAE,EAAE,CAC7E,EACA,OAAO,EAAa,EAAS,EAAS,CAAC,CAAE,QAAS,CAAc,EAAG,GAAG,CAAM,CAAC,GAoBzE,GAAc,MAAM,EAAgB,CAAS,EAO7C,EAAe,IAAI,IACzB,QAAY,EAAM,KAAc,OAAO,SACpC,MAAM,EAAuB,CAAS,IAAI,OAAS,CAAC,CACvD,EAAG,CACD,IAAM,EAAO,GAAQ,EAAW,CAAI,EACpC,GAAI,EAAK,WAAW,EAAY,EAAG,EACjC,EAAa,IAAI,EAAM,CAAE,UAAW,GAAM,WAAU,CAAC,EAIzD,eAAe,EAAc,CAAC,EAAc,CAC1C,IAAQ,YAAa,IAAI,IAAI,EAAI,GAAG,EAEpC,GAAI,EAAU,CAAQ,EACpB,OAAO,MAAM,EAAc,EAAK,CAAQ,EAG1C,IAAM,EAAW,GAAe,CAAQ,EAMxC,GAJE,EAAoB,CAAQ,GAC5B,EAAS,WAAW,cAAc,GACjC,IAAa,MAAQ,GAAY,IAAI,CAAQ,EAE7B,CAUjB,GAAI,CAAC,GAAY,CAAE,MAAM,GAAO,CAAQ,EACtC,OAAO,GAAgB,CAAQ,GAAM,MAAM,EAAc,EAAK,CAAQ,EAGxE,GAAI,CACF,OAAO,MAAM,GAAmB,EAAK,EAAU,EAAa,IAAI,CAAQ,CAAC,EACzE,MAAO,EAAO,CAEd,OADA,EAAI,cAAc,CAAK,EAChB,IAAI,SAAS,YAAa,CAAE,OAAQ,GAAI,CAAC,GAIpD,OAAO,MAAM,EAAc,EAAK,CAAQ,EAG1C,eAAe,CAAa,CAAC,EAAc,EAAkB,CAC3D,IAAM,EAAU,EAAI,MAAM,KAAK,CAAG,EAElC,GAAI,CACF,IAAM,EAAS,MAAM,EAAQ,CAAG,EAChC,GAAI,aAAkB,SACpB,OAAO,EACF,KACL,IAAM,EAAS,CAAC,EA6BhB,OA3BA,EAAO,KAAK,CACV,QAAS,CACX,CAAC,EAyBM,MAAM,EAAO,CAClB,UAxBgB,MAChB,EACA,IACG,CACH,GAAI,CAAC,EACH,OAAO,EAAa,CAAC,CAAC,EAExB,GAAI,GAAS,OACX,OAAO,GAAa,EAAc,EAAQ,MAAM,EAElD,QAAW,MAAQ,EAAc,CAC/B,IAAM,GAAa,EAAS,aAAa,UACzC,QAAW,KAAW,IAAY,KAAO,CAAC,EAAG,CAC3C,IAAM,GAAM,IAAI,KAAK,GAAG,QAAQ,IAAI,mBAAmB,GAAS,EAChE,EAAO,KAAK,CACV,GAAI,EACJ,QAAS,MAAM,GAAI,KAAK,CAC1B,CAAC,GAGL,OAAO,EAAa,CAAM,GAK1B,cACA,wBACA,WACA,gBACA,cACA,QACA,cACA,YACA,iBACA,UACF,CAAC,GAEH,MAAO,EAAK,CACZ,OAAO,EAAuB,EAAK,EAAU,EAAI,WAAW,GAOhE,IAAM,IAAsB,QAAQ,IAAI,kBAAoB,QAAQ,YAAY,IAAM,MAIhF,EAAiB,GAAgB,QAAQ,IAAI,gBAAgB,EAG7D,EAAU,EAAI,QAAQ,EAC5B,GAAI,GAAW,EAAe,OAAS,OACrC,QAAQ,KACN,uSACF,EAGF,IAAM,EAAS,IAAI,MAAW,CAC5B,mBAAoB,YACpB,MAAO,MAAO,EAAK,IAAW,CAM5B,GAHA,GAAoB,EAAI,QAAS,EAAO,UAAU,CAAG,GAAG,SAAW,KAAM,CAAc,EAGnF,GAAS,QAAQ,CAAG,EACtB,OAAO,EAAQ,QAAQ,EAAK,CAAM,EAIpC,IAAM,EAAM,MAAM,EAAgB,EAAK,CAAC,IACtC,EAAI,qBAAqB,EAAK,GAAgB,CAAC,IAC7C,EAAuB,EAAK,IAAI,IAAI,EAAI,GAAG,EAAE,SAAU,EAAI,WAAW,CACxE,CACF,EAKA,OAAO,GAAqB,EAAiB,EAAK,CAAG,EAAI,GAE3D,YAAa,GAAkB,EAC/B,KAAM,QAAQ,IAAI,MAAQ,KAC1B,UAAW,GAAS,SACtB,CAAC,EAKD,OAJA,MAAM,GAAS,MAAM,CAAM,EAE3B,GAAmB,CAAE,KAAM,EAAO,KAAM,SAAQ,CAAC,EAE1C",
-  "debugId": "83FA7ECB38BF81FA64756E2164756E21",
+  "mappings": ";0hCAAA,eAAS,UAET,SAAS,OAAM,IAAS,QCgBxB,WAAS,UACT,cAAS,oBAAW,WAAsB,QAW1C,FAAM,HAAuC,LAAC,DAAM,AAAM,JAQpD,HAAyB,DAYzB,HAAiB,JACjB,HAAqB,HAGrB,HAAa,EAEnB,SAAS,EAAW,CAAC,EAAiC,CACpD,GAAI,IAAQ,OACV,MAAO,GAKT,GAAI,CAAC,oBAAoB,KAAK,EAAI,KAAK,CAAC,EACtC,MAAO,GAET,IAAM,EAAQ,OAAO,EAAI,KAAK,CAAC,EAC/B,OAAO,OAAO,SAAS,CAAK,EAAI,KAAK,IAAI,EAAO,CAAC,EAAI,EAahD,SAAS,EAAmB,CAAC,EAA+D,CACjG,GAAI,IAAW,MAAQ,IAAW,OAChC,OAAO,KAGT,IAAM,EAAW,IAAI,IACrB,QAAW,KAAQ,EAAO,MAAM,GAAG,EAAG,CACpC,IAAO,KAAc,GAAU,EAAK,MAAM,GAAG,EACvC,EAAS,EAAU,KAAK,EAAE,YAAY,EAC5C,GAAI,IAAW,GACb,SAGF,IAAI,EAAI,EACR,QAAW,KAAS,EAAQ,CAC1B,IAAM,EAAY,EAAM,QAAQ,GAAG,EACnC,GAAI,IAAc,GAChB,SAEF,GAAI,EAAM,MAAM,EAAG,CAAS,EAAE,KAAK,EAAE,YAAY,IAAM,IAAK,CAC1D,EAAI,GAAY,EAAM,MAAM,EAAY,CAAC,CAAC,EAC1C,OAIJ,EAAS,IAAI,EAAQ,CAAC,EAGxB,OAAO,EAUF,SAAS,CAAiB,CAC/B,EACA,EAA+B,GACP,CACxB,IAAM,EAAW,GAAoB,CAAM,EAC3C,GAAI,CAAC,EACH,OAAO,KAGT,IAAM,EAAW,EAAS,IAAI,GAAG,EAC7B,EAA+B,KAC/B,EAAQ,EAEZ,QAAW,KAAU,EAAW,CAC9B,IAAM,EAAI,EAAS,IAAI,CAAM,GAAK,GAAY,EAC9C,GAAI,EAAI,EACN,EAAO,EACP,EAAQ,EAIZ,OAAO,EAGT,SAAS,EAAY,CAAC,EAA4B,EAA4B,CAC5E,GAAI,CAAC,EACH,MAAO,GAIT,OAAO,EACJ,MAAM,GAAG,EACT,KAAK,CAAC,IAAU,EAAM,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,GAAG,KAAK,IAAM,CAAS,EAY3E,SAAS,EAAc,CAAC,EAAgB,EAAwB,CAGrE,GAAI,IAAW,OACb,MAAO,GAKT,GAAI,EAAI,OAAS,KAAO,EAAI,SAAW,KAAO,EAAI,SAAW,KAAO,EAAI,SAAW,IACjF,MAAO,GAGT,GAAI,EAAI,QAAQ,IAAI,eAAe,EACjC,MAAO,GAGT,IAAM,EAAc,EAAI,QAAQ,IAAI,cAAc,EAClD,GAAI,CAAC,GAAe,CAAC,0BAA0B,KAAK,CAAW,EAC7D,MAAO,GAOT,GAAI,CAAC,EAAI,KACP,MAAO,GAKT,IAAM,EAAkB,EAAI,QAAQ,IAAI,kBAAkB,EAC1D,GAAI,GAAmB,EAAgB,KAAK,EAAE,YAAY,IAAM,WAC9D,MAAO,GAKT,GAAI,GAAa,EAAI,QAAQ,IAAI,eAAe,EAAG,cAAc,EAC/D,MAAO,GAGT,IAAM,EAAgB,EAAI,QAAQ,IAAI,gBAAgB,EACtD,GAAI,IAAkB,MAAQ,OAAO,CAAa,EAAI,GACpD,MAAO,GAGT,MAAO,GAWF,SAAS,EAAmB,CAAC,EAA2B,CAC7D,IAAM,EACJ,IAAa,KACT,GAAqB,CACnB,OAAQ,EACL,EAAU,sBAAuB,IACjC,EAAU,oBAAqB,EAClC,EACA,MAAO,EAAU,sBACnB,CAAC,EACD,GAAW,CAAE,MAAO,GAAY,MAAO,EAAU,YAAa,CAAC,EAErE,OAAO,GAAO,MAAM,CAAU,EAGhC,SAAS,EAAsB,CAAC,EAAkB,CAChD,IAAM,EAAO,EAAQ,IAAI,MAAM,EAC/B,GAAI,CAAC,EAAM,CACT,EAAQ,IAAI,OAAQ,iBAAiB,EACrC,OAEF,IAAM,EAAS,EAAK,MAAM,GAAG,EAAE,IAAI,CAAC,IAAU,EAAM,KAAK,EAAE,YAAY,CAAC,EAGxE,GAAI,EAAO,SAAS,GAAG,GAAK,EAAO,SAAS,iBAAiB,EAC3D,OAEF,EAAQ,OAAO,OAAQ,iBAAiB,EAanC,SAAS,CAAgB,CAAC,EAAc,EAAyB,CACtE,GAAI,CAAC,GAAe,EAAI,OAAQ,CAAG,EACjC,OAAO,EAGT,IAAM,EAAU,IAAI,QAAQ,EAAI,OAAO,EACvC,GAAuB,CAAO,EAE9B,IAAM,EAAW,EAAkB,EAAI,QAAQ,IAAI,iBAAiB,CAAC,EACrE,GAAI,CAAC,EACH,OAAO,IAAI,SAAS,EAAI,KAAM,CAC5B,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EAGH,IAAI,EACJ,GAAI,CACF,EAAU,GAAoB,CAAQ,EACtC,KAAM,CAGN,OAAO,IAAI,SAAS,EAAI,KAAM,CAC5B,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EAQH,OALA,EAAQ,IAAI,mBAAoB,CAAQ,EAGxC,EAAQ,OAAO,gBAAgB,EAExB,IAAI,SAAS,EAAI,KAAM,YAAY,CAAO,EAAG,CAClD,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EC5SH,kBAAS,WAAS,oBAClB,eAAS,cCDT,gBAAS,eAAO,WAAU,gBAAM,qBAEhC,kBAAS,WAAS,cAClB,oBAAS,aACT,yBAAS,gBAAgB,WAAW,cAwB7B,IAAM,GAAuB,2BAoB7B,IAAM,EAAqD,CAChE,GAAI,MACJ,KAAM,KACR,EAGM,GAA+B,CAAC,KAAM,MAAM,EAkB5C,GAAS,EAAU,EAAc,EACjC,GAAY,EAAU,EAAI,EA6IhC,eAAsB,CAAsB,CAC1C,EACoC,CACpC,IAAI,EACJ,GAAI,CACF,EAAM,MAAM,GAAS,GAAK,EAAW,EAAoB,EAAG,MAAM,EAClE,KAAM,CACN,OAAO,KAET,IAAI,EACJ,GAAI,CACF,EAAQ,KAAK,MAAM,CAAG,GAAG,MACzB,KAAM,CACN,OAAO,KAET,GAAI,CAAC,GAAS,OAAO,IAAU,SAC7B,OAAO,KAET,IAAM,EAA6B,CAAE,MAAO,CAAC,CAAE,EAC/C,QAAY,EAAM,KAAc,OAAO,QAAQ,CAAK,EAAG,CACrD,GAAI,CAAC,MAAM,QAAQ,CAAS,EAAG,SAC/B,EAAO,MAAM,GAAQ,GAAU,OAAO,CAAC,IAAa,EAAU,SAAS,CAAQ,CAAC,EAElF,OAAO,EC7OF,SAAS,CAAY,CAAC,EAA8B,CAEzD,IAAM,EAAkB,EAAa,SAAS,EAExC,EAAS,IAAI,IAAI,aAAa,MAAM,EAI1C,OAHA,EAAO,OAAO,CAAe,EAChB,EAAO,OAAO,KAAK,EFmBlC,eAAsB,CAAe,CAAC,EAAyC,CAC7E,IAAM,EAAQ,IAAI,IAElB,eAAe,CAAI,CAAC,EAAa,EAAmB,CAClD,IAAI,EACJ,GAAI,CACF,EAAU,MAAM,GAAQ,EAAK,CAAE,cAAe,EAAK,CAAC,EACpD,KAAM,CACN,OAEF,QAAW,KAAS,EAAS,CAC3B,GAAI,EAAM,KAAK,WAAW,GAAG,EAAG,SAChC,GAAI,GAAY,EAAM,OAAS,SAAU,SACzC,IAAM,EAAO,GAAK,EAAK,EAAM,IAAI,EAC7B,EAAQ,EAAM,YAAY,EAC1B,EAAS,EAAM,OAAO,EAC1B,GAAI,EAAM,eAAe,EACvB,GAAI,CACF,IAAM,EAAS,MAAM,EAAK,CAAI,EAC9B,EAAQ,EAAO,YAAY,EAC3B,EAAS,EAAO,OAAO,EACvB,KAAM,CACN,SAGJ,GAAI,EAAQ,EAAM,IAAI,CAAI,EAGrB,QAAI,GAAS,CAAC,EAAM,eAAe,EAAG,MAAM,EAAK,EAAM,EAAK,GAKrE,OADA,MAAM,EAAK,EAAW,EAAI,EACnB,EAGT,IAAM,GAAa,4CAOb,GAAY,sCAgBlB,eAAe,EAAc,CAC3B,EACA,EACA,EAC2E,CAG3E,GAAI,EAAU,SAAW,GAAK,EAAI,QAAQ,IAAI,OAAO,EACnD,OAAO,KAET,IAAM,EAAW,EAAkB,EAAI,QAAQ,IAAI,iBAAiB,EAAG,CAAS,EAChF,GAAI,CAAC,EACH,OAAO,KAET,IAAM,EAAc,EAAO,EAAkB,GAC7C,GAAI,CAGF,IAAM,EAAO,MAAM,EAAK,CAAW,EACnC,OAAO,EAAK,OAAO,EAAI,CAAE,WAAU,KAAM,EAAa,KAAM,EAAK,IAAK,EAAI,KAC1E,KAAM,CACN,OAAO,MAsBX,eAAsB,EAAkB,CACtC,EACA,EACA,EAA6B,CAAC,EACX,CACnB,IAAM,EAAO,IAAI,KAAK,CAAI,EACpB,EAAY,EAAQ,WAAa,CAAC,EAElC,EAAkC,CACtC,eAAgB,EAAK,MAAQ,2BAC7B,gBAAiB,EAAQ,UAAY,GAAY,GACjD,gBAAiB,OACnB,EACA,GAAI,EAAU,OAAS,EACrB,EAAQ,KAAO,kBAGjB,IAAM,EAAU,MAAM,GAAe,EAAK,EAAM,CAAS,EACzD,GAAI,EAAS,CACX,IAAM,EAAU,IAAI,KAAK,EAAQ,IAAI,EACrC,OAAO,IAAI,SAAS,EAAQ,OAAO,EAAG,CACpC,QAAS,IACJ,EACH,mBAAoB,EAAQ,SAC5B,iBAAkB,OAAO,EAAQ,IAAI,EAErC,KAAM,GAAG,EAAa,EAAQ,YAAY,KAAK,EAAQ,UACzD,CACF,CAAC,EAGH,IAAM,EAAQ,EAAK,KACnB,EAAQ,KAAO,EAAa,EAAK,YAAY,EAE7C,IAAM,EAAQ,EAAiB,EAAI,QAAQ,IAAI,OAAO,CAAC,EAEvD,GAAI,EAAO,CACT,IAAM,EAAW,EAAa,EAAO,CAAK,EAC1C,GAAI,CAAC,EACH,OAAO,EAA4B,CAAK,EAE1C,OAAO,IAAI,SAAS,EAAK,MAAM,EAAS,MAAO,EAAS,IAAM,CAAC,EAAE,OAAO,EAAG,CACzE,OAAQ,IACR,QAAS,IACJ,EACH,gBAAiB,EAAmB,EAAS,MAAO,EAAS,IAAK,CAAK,EACvE,iBAAkB,OAAO,EAAS,MAAM,CAC1C,CACF,CAAC,EAGH,OAAO,IAAI,SAAS,EAAK,OAAO,EAAG,CACjC,QAAS,IAAK,EAAS,iBAAkB,OAAO,CAAK,CAAE,CACzD,CAAC,EF/KH,eAAS,qBKQF,IAAM,EAAmB,iBAgBzB,SAAS,EAAiB,CAC/B,EACA,EAAoB,EAC+B,CACnD,IAAM,EAAO,EAAS,IAAmB,KACzC,GAAI,CAAC,EACH,OAEF,MAAO,CACL,OAAQ,EAAS,EAAM,CAAS,EAChC,QAAS,EAAsB,EAAU,EAAkB,CAAS,CACtE,EAgBK,SAAS,CAAqB,CACnC,EACA,EACA,EAAoB,EACV,CACV,IAAM,EAAiB,CAAC,EAGlB,EAAU,IAAI,IAEd,EAAO,CAAC,IAAgB,CAC5B,GAAI,EAAQ,IAAI,CAAG,EAAG,OACtB,EAAQ,IAAI,CAAG,EACf,IAAM,EAAQ,EAAS,GACvB,GAAI,CAAC,GAAO,KAAM,OAClB,EAAK,KAAK,EAAS,EAAM,KAAM,CAAS,CAAC,EACzC,QAAW,KAAY,EAAM,SAAW,CAAC,EACvC,EAAK,CAAQ,GAMjB,OAFA,EAAK,CAAQ,EAEN,EASF,SAAS,EAAU,CAAC,EAAwB,EAA4B,CAC7E,IAAM,EAAkB,CAAC,EACnB,EAAO,IAAI,IACX,EAAU,IAAI,IAEd,EAAO,CAAC,IAAgB,CAC5B,GAAI,EAAQ,IAAI,CAAG,EAAG,OACtB,EAAQ,IAAI,CAAG,EACf,IAAM,EAAQ,EAAS,GACvB,GAAI,CAAC,EAAO,OACZ,QAAW,KAAY,EAAM,SAAW,CAAC,EACvC,EAAK,CAAQ,EAEf,QAAW,KAAQ,EAAM,KAAO,CAAC,EAC/B,GAAI,CAAC,EAAK,IAAI,CAAI,EAChB,EAAK,IAAI,CAAI,EACb,EAAM,KAAK,CAAI,GAMrB,OADA,EAAK,CAAQ,EACN,EAUF,SAAS,EAAoB,CAClC,EACA,EAAoB,EACmD,CACvE,IAAM,EAAQ,IAAI,IAClB,MAAO,CAAC,IAAc,CACpB,GAAI,CAAC,EAAM,IAAI,CAAS,EAAG,CACzB,IAAM,EAAM,GAAG,IAAY,KACrB,EAAO,EAAS,IAAM,KAC5B,EAAM,IACJ,EACA,EACI,CAAE,IAAK,EAAS,EAAM,CAAS,EAAG,QAAS,EAAsB,EAAU,EAAK,CAAS,CAAE,EAC3F,MACN,EAEF,OAAO,EAAM,IAAI,CAAS,GCoEvB,SAAS,EAAqB,CACnC,EACA,EA3L8C,MA4LtC,CACR,IAAM,EAAM,KAAK,UAhMgB,mBAgMa,EACxC,EAAQ,KAAK,UAAU,gDAAgD,GAAU,EACvF,MACE,mEAAmE,+EAE5B,iBAC1B,kIACyC,eC3M1D,IAAM,GAAc,IAAI,OAAO,IAAI,eAAkC,EAE9D,SAAS,EAAgB,CAAC,EAA2B,CAC1D,OAAO,GAAY,KAAK,CAAQ,EA2C3B,SAAS,EAAe,CAAC,EAAwC,CACtE,GAAI,GAAiB,CAAQ,EAC3B,OAAO,IAAI,SAAS,GAAsB,CAAQ,EAAG,CACnD,QAAS,CACP,eAAgB,yBAChB,gBAAiB,UACnB,CACF,CAAC,EAKH,GAAI,EAAoB,CAAQ,EAC9B,OAAO,IAAI,SAAS,YAAa,CAAE,OAAQ,GAAI,CAAC,EAOlD,OCpEF,IAAM,GAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAqBlB,SAAS,CAAsB,CACpC,EACA,EACA,EACU,CAUV,GAAI,CAAC,EACH,QAAQ,MAAM,CAAG,EAEjB,QAAI,CAGF,EAAY,aAAe,MAAQ,EAAU,MAAM,OAAO,CAAG,EAAG,CAAE,MAAO,CAAI,CAAC,CAAC,EAC/E,MAAO,EAAa,CAEpB,QAAQ,MAAM,CAAG,EACjB,QAAQ,MAAM,CAAW,EAI7B,GAAI,EAAU,CAAQ,EACpB,OAAO,IAAI,SACT,KAAK,UAAU,CAAE,MAAO,GAAiB,eAAgB,wBAAyB,GAAG,CAAE,CAAC,EACxF,CACE,OAAQ,IACR,QAAS,CAAE,eAAgB,kBAAmB,CAChD,CACF,EAGF,OAAO,IAAI,SAAS,GAAkB,CACpC,OAAQ,IACR,QAAS,CAAE,eAAgB,0BAA2B,CACxD,CAAC,EC/CH,IAAM,GAAuB,CAAE,KAAM,MAAO,EAQrC,SAAS,EAAe,CAAC,EAA2C,CACzE,IAAM,GAAO,GAAS,IAAI,KAAK,EAAE,YAAY,EAC7C,GAAI,IAAQ,IAAM,IAAQ,SAAW,IAAQ,OAAS,IAAQ,IAC5D,OAAO,GAET,GAAI,IAAQ,OACV,MAAO,CAAE,KAAM,KAAM,EAEvB,GAAI,aAAa,KAAK,CAAG,EACvB,MAAO,CAAE,KAAM,OAAQ,KAAM,OAAO,CAAG,CAAE,EAE3C,MAAU,MACR,uGAAuG,KAAK,UAAU,CAAK,IAC7H,EAQK,SAAS,EAAmB,CACjC,EACA,EACA,EACM,CACN,GAAI,EAAM,OAAS,MAAO,CACxB,GAAI,CAAC,EAAQ,IAAI,iBAAiB,GAAK,EACrC,EAAQ,IAAI,kBAAmB,CAAI,EAErC,OAKF,EAAQ,OAAO,WAAW,EAE1B,IAAI,EAAwB,EAC5B,GAAI,EAAM,OAAS,OAAQ,CACzB,IAAM,GAAW,EAAQ,IAAI,iBAAiB,GAAK,IAChD,MAAM,GAAG,EACT,IAAI,CAAC,IAAU,EAAM,KAAK,CAAC,EAC3B,OAAO,OAAO,EAKX,EAAQ,EAAQ,OAAS,EAAM,KACrC,EAAS,GAAS,EAAI,EAAQ,GAAW,EAAQ,IAAM,EAGzD,GAAI,EACF,EAAQ,IAAI,kBAAmB,CAAM,EAErC,OAAQ,OAAO,iBAAiB,ETxDpC,IAAM,EAAU,GAAY,EAEtB,GAAS,EAAK,EAAS,KAAK,EAC5B,EAAU,EAAK,EAAS,MAAM,EAE9B,EAAY,EAAK,EAAS,QAAQ,EAQxC,SAAS,EAAc,CAAC,EAAiC,CACvD,IAAI,EACJ,GAAI,CACF,EAAU,mBAAmB,CAAQ,EACrC,KAAM,CACN,OAAO,KAET,IAAM,EAAO,GAAQ,EAAW,IAAM,EAAQ,QAAQ,iBAAkB,SAAS,CAAC,EAClF,OAAO,EAAK,WAAW,EAAY,EAAG,EAAI,EAAO,KAGnD,eAAe,EAAM,CAAC,EAAc,CAClC,GAAI,CACF,OAAQ,MAAM,GAAK,CAAI,GAAG,OAAO,EACjC,KAAM,CACN,MAAO,IAQX,eAAsB,EAAQ,CAAC,EAAU,EAAkC,CACzE,IAAM,EAAW,MAAa,UAAG,gCAC3B,EAAiB,MAAa,UAAG,gCAIjC,EAAY,MAAM,GAAmB,GAAG,UAAgB,EAE9D,QAAQ,IAAI,SAAW,EACvB,QAAQ,IAAI,QAAU,GACtB,QAAQ,IAAI,SAAW,EAEvB,IAAM,EAAgB,CAAC,EACjB,EAAQ,CAAC,EACT,EAAc,CAAC,EACf,EAAc,CAAC,EAGf,EAAkD,CAAC,EACnD,EAAW,CAAC,EAAkB,IAAiB,IAAI,qBAA4B,MAC/E,EAAY,CAAC,EAEnB,QAAW,IAAY,CAAC,MAAO,GAAG,EAAI,qBAAqB,KAAK,CAAG,CAAC,EAAG,CACrE,IAAM,EAAa,EAAe,aAAa,SAC/C,GAAI,CAAC,GAAY,KAAM,CACrB,QAAQ,IAAI,6BAA6B,GAAU,EACnD,QAAQ,IAAI,CAAU,EACtB,IAAM,EAAQ,OAAO,KAAK,CAAc,EAClC,EAAO,aAAa,QAC1B,QAAQ,IAAI,GAAG,gCAAmC,EAClD,QAAQ,IAAI,CAAK,EAEnB,IAAM,EAAM,MAAa,UAAG,QAAQ,IAAI,mBAAmB,GAAY,QACvE,EAAc,GAAY,EAAI,QAC9B,EAAM,GAAY,EAAI,UAGtB,EAAY,GAAY,EACxB,IAAM,EAAa,EAAS,aAAa,SAEzC,GAAI,GAAY,KAAO,GAAY,IAAI,OAAS,EAC9C,EAAY,GAAY,GAAY,IAEtC,GAAI,EACF,EAAU,KAAK,EAAS,EAAU,EAAS,GAAY,KAAM,CAAS,CAAC,CAAC,EACxE,EAAsB,GAAY,EAChC,EACA,aAAa,QACb,CACF,EAIJ,IAAM,GAAU,IAAI,EAAU,KAAK,GAAG,KAKhC,EAAc,GAAkB,EAAU,CAAS,EACzD,GAAI,CAAC,EAGH,QAAQ,MACN,2BAA2B,wFAC7B,EAMF,IAAM,GAAwB,EAAS,mBAAmB,KAAO,CAAC,EAC5D,GACJ,MAAM,QAAQ,IAAI,GAAY,IAAI,CAAC,IAAY,IAAI,KAAK,GAAG,YAAkB,GAAS,EAAE,KAAK,CAAC,CAAC,GAC/F,KAAK;AAAA,CAAI,EAIL,GAAgB,GAAqB,EAAU,CAAS,EAKxD,GAAU,GAAW,QAAQ,EAChC,OAAO,MAAM,IAAI,KAAK,GAAG,8BAAoC,EAAE,KAAK,CAAC,EACrE,OAAO,WAAW,EAClB,MAAM,EAAG,EAAE,EAOR,EAAe,IAAI,IACnB,GAAU,CAAC,IAAiB,CAChC,IAAI,EAAO,EAAa,IAAI,CAAI,EAChC,GAAI,CAAC,EACH,EAAO,IAAI,KAAK,GAAG,YAAkB,GAAM,EAAE,KAAK,EAClD,EAAa,IAAI,EAAM,CAAI,EAE7B,OAAO,GAEH,GAAe,MAAO,EAAiB,IAA+B,CAC1E,IAAM,EAAQ,IAAI,IAClB,QAAW,KAAQ,EAAS,CAAC,EAAQ,GAAG,CAAK,EAAI,EAC/C,QAAW,KAAQ,GAAW,EAAU,aAAa,OAAU,EAAG,EAAM,IAAI,CAAI,EAElF,IAAM,EAAS,MAAM,QAAQ,IAC3B,CAAC,GAAG,CAAK,EAAE,IAAI,MAAO,KAAU,CAAE,GAAI,EAAM,QAAS,MAAM,GAAQ,CAAI,CAAE,EAAE,CAC7E,EACA,OAAO,EAAa,EAAS,EAAS,CAAC,CAAE,QAAS,CAAc,EAAG,GAAG,CAAM,CAAC,GAoBzE,GAAc,MAAM,EAAgB,CAAS,EAO7C,EAAe,IAAI,IACzB,QAAY,EAAM,KAAc,OAAO,SACpC,MAAM,EAAuB,CAAS,IAAI,OAAS,CAAC,CACvD,EAAG,CACD,IAAM,EAAO,GAAQ,EAAW,CAAI,EACpC,GAAI,EAAK,WAAW,EAAY,EAAG,EACjC,EAAa,IAAI,EAAM,CAAE,UAAW,GAAM,WAAU,CAAC,EAIzD,eAAe,EAAc,CAAC,EAAc,CAC1C,IAAQ,YAAa,IAAI,IAAI,EAAI,GAAG,EAEpC,GAAI,EAAU,CAAQ,EACpB,OAAO,MAAM,EAAc,EAAK,CAAQ,EAG1C,IAAM,EAAW,GAAe,CAAQ,EAMxC,GAJE,EAAoB,CAAQ,GAC5B,EAAS,WAAW,cAAc,GACjC,IAAa,MAAQ,GAAY,IAAI,CAAQ,EAE7B,CAUjB,GAAI,CAAC,GAAY,CAAE,MAAM,GAAO,CAAQ,EACtC,OAAO,GAAgB,CAAQ,GAAM,MAAM,EAAc,EAAK,CAAQ,EAGxE,GAAI,CACF,OAAO,MAAM,GAAmB,EAAK,EAAU,EAAa,IAAI,CAAQ,CAAC,EACzE,MAAO,EAAO,CAEd,OADA,EAAI,cAAc,CAAK,EAChB,IAAI,SAAS,YAAa,CAAE,OAAQ,GAAI,CAAC,GAIpD,OAAO,MAAM,EAAc,EAAK,CAAQ,EAG1C,eAAe,CAAa,CAAC,EAAc,EAAkB,CAC3D,IAAM,EAAU,EAAI,MAAM,KAAK,CAAG,EAElC,GAAI,CACF,IAAM,EAAS,MAAM,EAAQ,CAAG,EAChC,GAAI,aAAkB,SACpB,OAAO,EACF,KACL,IAAM,EAAS,CAAC,EA6BhB,OA3BA,EAAO,KAAK,CACV,QAAS,CACX,CAAC,EAyBM,MAAM,EAAO,CAClB,UAxBgB,MAChB,EACA,IACG,CACH,GAAI,CAAC,EACH,OAAO,EAAa,CAAC,CAAC,EAExB,GAAI,GAAS,OACX,OAAO,GAAa,EAAc,EAAQ,MAAM,EAElD,QAAW,MAAQ,EAAc,CAC/B,IAAM,GAAa,EAAS,aAAa,UACzC,QAAW,KAAW,IAAY,KAAO,CAAC,EAAG,CAC3C,IAAM,GAAM,IAAI,KAAK,GAAG,QAAQ,IAAI,mBAAmB,GAAS,EAChE,EAAO,KAAK,CACV,GAAI,EACJ,QAAS,MAAM,GAAI,KAAK,CAC1B,CAAC,GAGL,OAAO,EAAa,CAAM,GAK1B,cACA,wBACA,WACA,gBACA,cACA,QACA,cACA,YACA,iBACA,UACF,CAAC,GAEH,MAAO,EAAK,CACZ,OAAO,EAAuB,EAAK,EAAU,EAAI,WAAW,GAOhE,IAAM,IAAsB,QAAQ,IAAI,kBAAoB,QAAQ,YAAY,IAAM,MAIhF,EAAiB,GAAgB,QAAQ,IAAI,gBAAgB,EAG7D,EAAU,EAAI,QAAQ,EAC5B,GAAI,GAAW,EAAe,OAAS,OACrC,QAAQ,KACN,uSACF,EAGF,IAAM,EAAS,IAAI,MAAW,CAC5B,mBAAoB,YACpB,MAAO,MAAO,EAAK,IAAW,CAS5B,GANA,GAAoB,EAAI,QAAS,EAAO,UAAU,CAAG,GAAG,SAAW,KAAM,CAAc,EAGvF,EAAI,qBAAqB,CAAG,EAGxB,GAAS,QAAQ,CAAG,EACtB,OAAO,EAAQ,QAAQ,EAAK,CAAM,EAIpC,IAAM,EAAM,MAAM,EAAgB,EAAK,CAAC,IACtC,EAAI,qBAAqB,EAAK,GAAgB,CAAC,IAC7C,EAAuB,EAAK,IAAI,IAAI,EAAI,GAAG,EAAE,SAAU,EAAI,WAAW,CACxE,CACF,EAKA,OAAO,GAAqB,EAAiB,EAAK,CAAG,EAAI,GAE3D,YAAa,GAAkB,EAC/B,KAAM,QAAQ,IAAI,MAAQ,KAC1B,UAAW,GAAS,SACtB,CAAC,EAKD,OAJA,MAAM,GAAS,MAAM,CAAM,EAE3B,GAAmB,CAAE,KAAM,EAAO,KAAM,SAAQ,CAAC,EAE1C",
+  "debugId": "F74C100B78F93E4C64756E2164756E21",
   "names": []
 }

package/dist/{chunk-mc8mxx2a.js → chunk-vnw91fe1.js}

@@ -45,6 +45,6 @@ Say which, and registerModels will leave it alone:
     register("${j}", ${z[0]})
 
 A class that is only a typed view over the same rows belongs in a module you do not hand to registerModels.`);this.model=j;this.candidates=z;this.name="AmbiguousModelRegistrationError"}}class C extends Error{model;operation;required;limit;dialect;constructor(j,z,B,G,H,I){super(`${j}.${z} would bind ${B} parameters, and the '${H}' driver accepts at most ${G} in one statement. ${I}`+(z==="createMany"?" A createMany over the ceiling is normally split across statements inside one transaction, so reaching this means splitting cannot help: a single row binds more than the driver accepts.":" Splitting is not something this operation can do for you \u2014 one "+"statement has to carry one answer. Narrow the query."));this.model=j;this.operation=z;this.required=B;this.limit=G;this.dialect=H;this.name="ParameterLimitError"}}class D extends Error{model;operation;field;constructor(j,z,B){super(`${j}.${z} is missing a value for '${B}', which is required and has no default.`);this.model=j;this.operation=z;this.field=B;this.name="MissingRequiredValueError"}}class F extends Error{relation;model;constructor(j,z,B){super(`'${j}' is not a relation on model ${z}. `+(B.length>0?`Known relations: ${B.join(", ")}.`:`${z} declares no relations.`));this.relation=j;this.model=z;this.name="UnknownRelationError"}}class b extends Error{model;limit;constructor(j,z){super(`The include tree nests more than ${z} relations deep (at model ${j}). Deeply nested includes are legal, so this is a guard against a generated or malformed argument tree rather than a limit on `+"modelling \u2014 every level costs at least one query.");this.model=j;this.limit=z;this.name="RelationDepthExceededError"}}class P extends Error{model;relation;target;constructor(j,z,B,G){super(`${j}.${z} points at model '${B}', which nothing has registered. The generated artifact and the registry disagree: re-run \`prisma generate\`, and check that app/models/generated/index.ts is imported. `+(G.length>0?`Registered models: ${G.join(", ")}.`:"Nothing is registered at all."));this.model=j;this.relation=z;this.target=B;this.name="UnregisteredRelationTargetError"}}class R extends Error{model;relation;constructor(j,z,B){super(`Cannot resolve how ${j}.${z} joins: ${B} This means `+"app/models/generated is stale or hand-edited \u2014 re-run "+"`prisma generate`.");this.model=j;this.relation=z;this.name="MalformedRelationError"}}class v extends Error{constructor(j,z){super(`No model is registered under the name '${j}'. `+(z.length>0?`Registered models: ${z.join(", ")}.`:"Nothing is registered \u2014 is app/models/generated/index.ts imported?"));this.name="ModelNotRegisteredError"}}class N extends Error{constructor(j){super(`${j} has no $schema. Model subclasses must extend a generated base class from app/models/generated/models.ts.`);this.name="MissingModelSchemaError"}}class Q extends Error{model;operation;constructor(j,z){super(`${j}.${z} was given 'lock' outside a transaction. A row lock lasts until the transaction that took it ends, so outside one it is released as soon as the row is read and protects nothing. Run the read and the writes it guards inside Model.transaction(async () => { ... }).`);this.model=j;this.operation=z;this.name="LockOutsideTransactionError"}}
-export{K as Yi,Z as Zi,_ as _i,$ as $i,L as aj,M as bj,U as cj,V as dj,y as ej,O as fj,W as gj,E as hj,S as ij,T as jj,x as kj,A as lj,C as mj,D as nj,F as oj,b as pj,P as qj,R as rj,v as sj,N as tj,Q as uj};
+export{K as _i,Z as $i,_ as aj,$ as bj,L as cj,M as dj,U as ej,V as fj,y as gj,O as hj,W as ij,E as jj,S as kj,T as lj,x as mj,A as nj,C as oj,D as pj,F as qj,b as rj,P as sj,R as tj,v as uj,N as vj,Q as wj};
 
-//# debugId=0C1E3CF5E22874BD64756E2164756E21
+//# debugId=02F9E26370CF4E2364756E2164756E21

package/dist/{chunk-mc8mxx2a.js.map → chunk-vnw91fe1.js.map}

@@ -5,6 +5,6 @@
     "/**\n * Thrown when the compiler is handed an argument it does not implement yet.\n *\n * Every public operation accepts the full Prisma argument type from iteration 1\n * — signatures are final, capability grows underneath them. The price of that is\n * that anything unimplemented has to fail loudly: silently dropping a `take: 10`\n * and returning the whole table is the worst failure mode this ORM has.\n */\nexport class UnsupportedQueryError extends Error {\n  constructor(\n    public readonly argument: string,\n    public readonly model: string,\n    public readonly operation: string,\n    /**\n     * What cannot work, and what to do instead.\n     *\n     * **Required**, which is the second half of #61 — the first being the\n     * `UnsupportedByDesignError` split beside this. It was optional, and the\n     * refusals that omitted it were the highest-traffic ones: an argument the\n     * operation does not accept, on the path a typo takes. Those said only\n     * *that* something was refused, to the reader least likely to know why.\n     *\n     * Required rather than conventionally-supplied for the reason five other\n     * parameters here are — `render`'s `origin`, `changedFields`' `schema`,\n     * `RelationExecutor.exec`'s `preScoped`, `resolveLink`'s `operation`,\n     * `assertPageArgument`'s reported name: where omitting an argument produces\n     * a *worse* result rather than an error, `tsc` is the only thing that keeps\n     * a convention. Ninety-five of a hundred call sites already passed one; the\n     * five that did not are exactly the ones nobody revisited.\n     *\n     * `UnknownFieldError` and `UnknownRelationError` set the standard this\n     * meets: both enumerate the valid names rather than only rejecting the\n     * invalid one.\n     */\n    detail: string,\n  ) {\n    super(\n      `gemi ORM does not support '${argument}' yet (${model}.${operation}). ` +\n        detail,\n    );\n    this.name = \"UnsupportedQueryError\";\n  }\n}\n\n/**\n * An argument the ORM has **decided not to implement**, as opposed to one it has\n * not implemented yet.\n *\n * The distinction is the whole point, and it is a distinction a caller can act\n * on: \"yet\" means wait for a release, \"will not\" means change the code. Sharing\n * one error for both meant `docs/orm.md` could list `omit` under *Not in scope*\n * while the runtime said \"yet\" — a contradiction a reader has no way to\n * resolve, and the one #68 exists to end.\n *\n * A subclass rather than a sibling, so `catch (e) { if (e instanceof\n * UnsupportedQueryError) … }` keeps working for callers that do not care which\n * kind it is.\n */\n/**\n * An argument the ORM **does** implement, given a value it cannot mean.\n *\n * The third category, and the one that made \"yet\" wrong four separate times —\n * #82, #88, #100 and #101 each corrected it at their own call site before #61\n * was found to own the problem. The taxonomy the three classes now draw:\n *\n *   not implemented yet     UnsupportedQueryError      wait for a release\n *   decided against         UnsupportedByDesignError   change the call  (#78)\n *   implemented, bad value  InvalidArgumentError       fix the value\n *\n * `take: \"-2\"` is the clearest case. `take` is implemented; `\"-2\"` is not a\n * take. Telling that caller the ORM \"does not support 'take' yet\" is wrong on\n * both halves — it does, and there is nothing to wait for — and it sends them\n * to a changelog when the fix is one character in their own code.\n *\n * **Extends `UnsupportedQueryError`**, so every existing `catch` and every test\n * asserting the base class keeps working. That is the same choice\n * `UnsupportedByDesignError` made, and it is what lets a taxonomy be added to a\n * shipped ORM without a breaking change: the specific classes are for the\n * reader, the base class is for the handler.\n *\n * **Where the taxonomy stops, and why it stops there.** An argument that is not\n * in the grammar at all keeps the base class and its \"yet\" — `{ nope: 1 }`\n * reports \"does not support 'nope' yet\". That is right for half of what reaches\n * that path and wrong for the other half: the same check refuses a typo and a\n * real Prisma argument this ORM has genuinely not implemented, and nothing at\n * that point can tell them apart. Splitting it would mean carrying Prisma's\n * full argument grammar per operation, which is a large amount of duplicated\n * schema for a small gain.\n *\n * What makes it tolerable is the sentence after it. Since #61's other half made\n * `detail` mandatory, that refusal always continues *\"findMany takes include,\n * omit, orderBy, select, skip, take, where\"* — so a caller who typed `nope`\n * learns it is not coming from the very next clause, without the class having\n * to know. Recorded here rather than left to be re-derived, because \"the third\n * class did not cover this one\" is the obvious first reading and it is not the\n * interesting part.\n */\nexport class InvalidArgumentError extends UnsupportedQueryError {\n  constructor(\n    argument: string,\n    model: string,\n    operation: string,\n    /** What is wrong with the value, and what a good one looks like. */\n    reason: string,\n  ) {\n    super(argument, model, operation, reason);\n    this.name = \"InvalidArgumentError\";\n    this.message = `Invalid '${argument}' (${model}.${operation}). ${reason}`;\n  }\n}\n\nexport class UnsupportedByDesignError extends UnsupportedQueryError {\n  constructor(\n    argument: string,\n    model: string,\n    operation: string,\n    /** What to use instead. Required — see #61: a refusal owes the caller a next step. */\n    reason: string,\n  ) {\n    super(argument, model, operation, reason);\n    this.name = \"UnsupportedByDesignError\";\n    this.message =\n      `gemi ORM does not implement '${argument}' (${model}.${operation}), ` +\n      `and this is a decision rather than a gap. ${reason}`;\n  }\n}\n\n/**\n * Thrown when an argument names something that is not a field on the model. A\n * `where` key with no matching field is an error, never a passthrough — that is\n * the rule that keeps user input out of the identifier positions in the SQL.\n */\nexport class UnknownFieldError extends Error {\n  constructor(\n    public readonly field: string,\n    public readonly model: string,\n    known: string[],\n  ) {\n    super(\n      `'${field}' is not a field on model ${model}. ` +\n        `Known fields: ${known.join(\", \")}.`,\n    );\n    this.name = \"UnknownFieldError\";\n  }\n}\n\n/**\n * Thrown when a column holds something the generated schema says it cannot —\n * an unparseable timestamp, a fractional value in a `BigInt` column, malformed\n * JSON. Every dialect needs it, which is why it lives here rather than beside\n * one of them.\n *\n * It exists so those cases fail rather than decode into a plausible wrong\n * value: `new Date(\"nonsense\")` is an `Invalid Date`, not an error, and it\n * would travel a long way before anyone noticed.\n */\nexport class DecodeError extends Error {\n  constructor(\n    public readonly field: { column: string; type: string },\n    public readonly value: unknown,\n  ) {\n    super(\n      `Could not decode the value ${JSON.stringify(String(value))} from column ` +\n        `'${field.column}' as ${field.type}. The column's contents do not match ` +\n        `the Prisma schema — was it written by something other than Prisma or ` +\n        `the gemi ORM?`,\n    );\n    this.name = \"DecodeError\";\n  }\n}\n\n/**\n * Thrown by the `*OrThrow` operations when the query matched nothing. Prisma\n * raises `NotFoundError` / `P2025` for the same case; the differential harness\n * compares the fact of throwing, not the error type.\n */\nexport class RecordNotFoundError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly operation: string,\n  ) {\n    super(`No ${model} found (${model}.${operation}).`);\n    this.name = \"RecordNotFoundError\";\n  }\n}\n\n/**\n * The dispatchers' test for a lookup that matched nothing and should be\n * answered with a 404.\n *\n * Matches the name as well as the class for the reason `isPolicyDeniedError`\n * and `isUniqueConstraintError` do: `instanceof` compares against *this*\n * module instance's class object, so a second copy of `gemi/orm` — two\n * versions in one dependency tree, a linked package beside a bundled one —\n * throws an error this would not recognise, and the request would go back to\n * being a 500 carrying the model's name in its body.\n *\n * The name is the identity here, so an application error that calls itself\n * `RecordNotFoundError` is deliberately matched too. That is the same bargain\n * the other two predicates make, and the failure it trades against — a 500\n * where a 404 was meant — is the worse one.\n */\nexport function isRecordNotFoundError(error: unknown): error is RecordNotFoundError {\n  if (error instanceof RecordNotFoundError) return true;\n\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    (error as { name?: unknown }).name === \"RecordNotFoundError\"\n  );\n}\n\n/**\n * Thrown when a write violates a unique constraint.\n *\n * DECISION — gemi defines its own error rather than mirroring Prisma's codes.\n *\n * Prisma raises `PrismaClientKnownRequestError` with code `P2002` and\n * `meta.target` holding the field names. Mirroring that would ease a migration\n * for code already branching on `P2002`.\n *\n * **The premise this note used to rest on was wrong, and the conclusion is\n * unchanged.** It said \"nothing in this repository does (checked)\", which was\n * true of *this* repository and was never the question — the code that branches\n * on `P2002` lives in the applications the ORM is for. The first real port\n * measured four such guards, every one of them in concurrency-recovery code\n * (catch the collision, re-read, retry), and every one of them silently dead the\n * moment the write moved onto gemi: the `catch` still ran, the condition was\n * false, the recovery did not happen. Nor was the repository itself clean —\n * `templates/saas-starter/app/models/differential.ts:621` branches on `P2002`\n * today, and did when this was written.\n *\n * What the premise was doing was answering \"would anyone notice?\", and the\n * answer is that four people noticed at once. The decision never depended on it.\n * Carrying a `P` code implies the rest of the taxonomy is implemented too:\n * `P2003`, `P2025`, and the fifty others an application might reasonably then\n * expect to catch. Claiming a compatibility surface we have not built is worse\n * than asking the call sites that need it to catch a gemi error instead —\n * *especially* when the code in question is a retry loop, because a\n * compatibility surface that covers `P2002` and not `P2034` fails in exactly\n * the same silent way, one layer further in.\n *\n * A porter reaches for `isUniqueConstraintError` below. `UPGRADE.md` carries\n * the temporary `|| error.code === \"P2002\"` bridge, for a codebase halfway\n * through the move, with the marker that says when to delete it; it is\n * deliberately not exported, because a Prisma code in gemi's permanent surface\n * is the thing this note declined.\n *\n * What the contract does promise is the part that matters: the error is typed,\n * catchable, and names the fields — as *field* names, the way Prisma's\n * `meta.target` does, not as the database columns the driver reported.\n */\nexport class UniqueConstraintError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly operation: string,\n    /** Field names, mapped back through the schema from the driver's columns. */\n    public readonly fields: string[],\n    /** The constraint's own name, when the dialect reports one. */\n    public readonly constraint?: string,\n    options?: { cause?: unknown },\n  ) {\n    super(\n      `Unique constraint violated on ${model}.${operation}` +\n        (fields.length > 0 ? ` for ${fields.join(\", \")}` : \"\") +\n        (constraint ? ` (constraint '${constraint}')` : \"\") +\n        `. A ${model} with those values already exists.`,\n      options,\n    );\n    this.name = \"UniqueConstraintError\";\n  }\n}\n\n/**\n * The guard to write in a retry-on-collision `catch`, which is where a\n * `code === \"P2002\"` test almost always was:\n *\n *     try {\n *       return await Invite.create({ data: { token } })\n *     } catch (error) {\n *       if (!isUniqueConstraintError(error)) throw error\n *       return await Invite.findUniqueOrThrow({ where: { token } })\n *     }\n *\n * **Why this is worth shipping rather than telling people to write\n * `instanceof`**, which is the obvious objection and the reason it nearly was\n * not shipped. The second half of the test is the whole of it:\n *\n *     error instanceof UniqueConstraintError   ||   error.name === \"UniqueConstraintError\"\n *\n * `instanceof` compares against *this module instance's* class object, so it is\n * false across a duplicate copy of `gemi/orm` — two versions in one dependency\n * tree, a bundled build alongside a linked one, a monorepo package resolving\n * its own. The error is the right error, thrown by the right code, and the\n * guard silently does not fire. That is not a hypothetical: duck-typing rather\n * than importing the class is precisely what the ported application had already\n * done for Prisma's error, for precisely this reason, and shipping a predicate\n * that only does `instanceof` would hand it back the same trap under a new\n * name.\n *\n * So the name is load-bearing rather than a convenience: it is the identity\n * that survives module duplication, which is why every error in this file sets\n * `this.name` explicitly instead of relying on the class name surviving\n * minification.\n *\n * **The narrowing is a claim, and this is what it rests on.** The name branch\n * asserts `UniqueConstraintError` on the strength of a string — a second copy\n * of this module really does carry `model`, `operation` and `fields`, so the\n * claim holds for the case it exists for. An unrelated object named\n * `\"UniqueConstraintError\"` would defeat it, and that is not something that\n * happens by accident.\n *\n * **It deliberately does not match `code === \"P2002\"`.** See the DECISION\n * above: the temporary bridge for a half-ported codebase is in `UPGRADE.md`,\n * where it can carry a delete-me marker, rather than in gemi's permanent\n * surface, where it would have neither.\n */\nexport function isUniqueConstraintError(\n  error: unknown,\n): error is UniqueConstraintError {\n  if (error instanceof UniqueConstraintError) return true;\n\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    (error as { name?: unknown }).name === \"UniqueConstraintError\"\n  );\n}\n\n/**\n * Thrown when a write needs `RETURNING` and the dialect has none.\n *\n * Unreachable on SQLite and Postgres, which both support it. It exists so that\n * the MySQL / MariaDB path is a named gap rather than a wrong answer: the\n * fallback there is `lastInsertRowid` plus a re-select, which is a different\n * statement shape and is not implemented.\n */\nexport class ReturningUnsupportedError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly operation: string,\n    public readonly dialect: string,\n  ) {\n    super(\n      `${model}.${operation} needs RETURNING to report its result, and the ` +\n        `'${dialect}' dialect does not support it. The fallback — ` +\n        `lastInsertRowid plus a re-select — is not implemented.`,\n    );\n    this.name = \"ReturningUnsupportedError\";\n  }\n}\n\n/**\n * Thrown when a policy denies an operation.\n *\n * Two ways to get here, and the message distinguishes them because the fixes\n * are different: a policy's `before` returned false, or the model is policied\n * and there is no user in scope at all.\n *\n * The second is the deny-by-default rule, and it is the reason this error is\n * loud. A cron tick or a queue worker reading a policied model has no user, and\n * the alternative — treating \"no user\" as \"no policy\" — means the dangerous\n * case is the silent one: a request whose auth middleware was misconfigured\n * would read every tenant's rows rather than failing. So unscoped access is\n * always a decision written at the call site, through `Model.asSystem`.\n */\nexport class PolicyDeniedError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly operation: string,\n    public readonly reason: \"denied\" | \"no-user\" = \"denied\",\n  ) {\n    super(\n      reason === \"no-user\"\n        ? `${model}.${operation} is governed by a policy and there is no user ` +\n            `in scope. If this is a cron tick, a queue worker or a script, say ` +\n            `so at the call site: Model.asSystem(() => ...). Policies are ` +\n            `never skipped just because a user failed to turn up.`\n        : `${model}.${operation} was denied by ${model}'s policy.`,\n    );\n    this.name = \"PolicyDeniedError\";\n  }\n}\n\n/**\n * The api dispatcher's test for a denial it should answer with a 403. It\n * matches the name as well as the class for the reason\n * `isUniqueConstraintError` does: a second copy of `gemi/orm` throws an error\n * that is not `instanceof` this class, and a denial that failed the test would\n * go back to being a 500 that carries the policy's message.\n */\nexport function isPolicyDeniedError(error: unknown): error is PolicyDeniedError {\n  if (error instanceof PolicyDeniedError) return true;\n\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    (error as { name?: unknown }).name === \"PolicyDeniedError\"\n  );\n}\n\n/**\n * Thrown when an `update` writes to a column its own policy's `scope` selects on,\n * and the policy has no `onUpdate` saying what that should mean.\n *\n * The shape it catches:\n *\n *     scope: (ctx) => ({ organizationId: ctx.user.organizationId })\n *     // ...and then\n *     User.update({ where: { id }, data: { organizationId: 999 } })\n *\n * The scope did its job — only rows in the caller's own tenant could be selected\n * — and the statement still hands one of them to another tenant. Afterwards the\n * row is outside the scope, so it cannot be read back and cannot be put right by\n * the same caller: a one-way door rather than a visible failure. The usual way in\n * is not malice but mass assignment, a handler forwarding request fields into\n * `data`.\n *\n * This is `assertCreateCovered`'s question asked of the other write. There it is\n * \"you scoped reads but never said what an insert means\"; here it is \"you scoped\n * reads but never said whether an update may move a row out\". Both are answered\n * by writing the hook, including when the answer is \"allow it\" —\n * `onUpdate: (_ctx, data) => data` is a complete and legitimate answer, and\n * saying it out loud is the point.\n *\n * **What it cannot see.** The scope-owned columns are read off the top level of\n * the fragment the policy returned, so `{ organizationId: 7 }` is understood and\n * `{ OR: [...] }` is not — a scope built from combinators is not attributed to\n * any column and an update through it is not checked. Narrowing that would mean\n * either interpreting arbitrary `where` grammar or refusing every update on such\n * a model, and neither is worth it: the guard is a rail on the common shape, not\n * a proof.\n */\nexport class ScopeEscapeError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly operation: string,\n    public readonly fields: readonly string[],\n  ) {\n    const named = fields.map((field) => `'${field}'`).join(\", \");\n    super(\n      `${model}.${operation} writes ${named}, which ${model}'s policy also ` +\n        `scopes on — so this update can move a row outside the scope that ` +\n        `selected it, where the caller can no longer read or repair it.\\n\\n` +\n        `Add an onUpdate to that policy. It may reassert the column ` +\n        `(data => ({ ...data, ${fields[0]}: ctx.user.${fields[0]} })), reject ` +\n        `the write, or allow it explicitly with (_ctx, data) => data — all ` +\n        `three are fine, and the point is that the policy says which.`,\n    );\n    this.name = \"ScopeEscapeError\";\n  }\n}\n\n/**\n * Thrown when a model class carries policies but is not the class the registry\n * resolves its name to.\n *\n * This exists because of a cross-tenant leak that shipped past review. The\n * generated `index.ts` registers the *generated* base — `register(\"Account\",\n * AccountModel)` — while an application authors its policy on a subclass:\n *\n *     export class Account extends AccountModel {\n *       static $policies = [{ scope: (ctx) => ({ organizationId: … }) }]\n *     }\n *\n * A root query goes through `Account`, so `policiesFor(this)` finds the policy\n * and the scope applies. A **nested** relation read resolves through the\n * registry, gets `AccountModel`, and walks a prototype chain the policy is not\n * on — so `User.findMany({ include: { accounts: true } })` returned every\n * tenant's accounts. Root queries scoped, nested reads unscoped: exactly the\n * Prisma behaviour policies exist to fix, and silent.\n *\n * Raised at the first query through the unregistered class, naming the one-line\n * fix, because the alternative is data crossing a tenant boundary with nothing\n * to notice it.\n *\n * It fires on a divergence in the resolved policy *chain*, not merely on the two\n * classes differing. A plain subclass that adds no policy of its own inherits\n * the same policy objects in the same order, so a nested read resolving to its\n * parent applies exactly what the root query applied — no divergence, nothing\n * to refuse. An earlier version compared class identity and rejected\n * `class AdminUser extends User {}` for policies it had not written.\n */\nexport class UnregisteredPolicyClassError extends Error {\n  constructor(\n    public readonly model: string,\n    /**\n     * Under `carries: \"narrowing\"` this is the *ancestor* — the class the model\n     * belongs to — rather than whatever the registry currently holds. The two\n     * classes are on one prototype chain there, and which of them is registered\n     * is the thing in question, so naming them by their relationship is what\n     * makes the message readable.\n     */\n    public readonly registered: string,\n    /** Under `carries: \"narrowing\"`, the descendant: the view that narrows. */\n    public readonly queried: string,\n    /**\n     * Which side carries the policies that would be skipped, and therefore what\n     * the author should do about it. Three, because they need three different\n     * answers: a missing registration, a query through the wrong class, and a\n     * view that should not be competing for the name at all.\n     */\n    public readonly carries: \"queried\" | \"registered\" | \"narrowing\" = \"queried\",\n  ) {\n    super(\n      carries === \"narrowing\"\n        ? `${queried} extends ${registered}, which owns the model '${model}', ` +\n            `and carries policies of its own on top of it. A class that ` +\n            `narrows an existing model is a view, and the registry holds one ` +\n            `class per name — so registering ${queried} would apply its ` +\n            `narrowing to every nested read of ${model}, and leaving ` +\n            `${registered} registered would skip ${queried}'s policies ` +\n            `entirely. Neither is a thing to choose for you.\\n\\n` +\n            `Keep the view out of the modules you hand to Kernel.models, and ` +\n            `query it directly where you want it:\\n\\n` +\n            `    ${queried}.findMany(…)   // narrowed, at the call site\\n\\n` +\n            `If it is not a view but the model itself, move the policies onto ` +\n            `${registered} — the class the model's name resolves to — and ` +\n            `${queried} inherits them everywhere.\\n`\n        : carries === \"queried\"\n          ? `${queried} carries policies but the registry resolves '${model}' to ` +\n            `${registered}. Nested relation reads go through the registry, so ` +\n            `they would run on ${registered} and skip every policy on ` +\n            `${queried} — scoped at the root, unscoped inside an include. ` +\n            `Register the class that carries the policy:\\n\\n` +\n            `    import { register } from \"gemi/orm\"\\n` +\n            `    export class ${queried} extends ${registered} { … }\\n` +\n            `    register(\"${model}\", ${queried})\\n`\n          : `This query goes through ${queried}, but the registry resolves ` +\n            `'${model}' to ${registered}, which carries policies ${queried} ` +\n            `does not. Nested relation reads would be scoped and this query is ` +\n            `not — the same policy applying to some queries and not others. ` +\n            `Query ${registered} instead:\\n\\n` +\n            `    ${registered}.findMany(…)\\n\\n` +\n            `If skipping policies is intended, say so at the call site — that ` +\n            `is what Model.asSystem() is for, and it is the only way to do it ` +\n            `that a reader can see.\\n`,\n    );\n    this.name = \"UnregisteredPolicyClassError\";\n  }\n}\n\n/**\n * Thrown when a `$policies` array holds something that is not a usable policy.\n *\n * Every case it covers is refused today — by `tsc`, at the class declaration,\n * with `TS2417`, because `Model` declares `static $policies?: readonly\n * PolicyEntry[]` and `ModelPolicy`'s members are all optional, so a typo'd key\n * trips weak-type detection. This is therefore a guard on the paths that import\n * user code *without* having type-checked it: `registerModels` at boot, and\n * `gemi check models`, whose whole job is to find mistakes in a file somebody is\n * still writing.\n *\n * Two failures, and the second is the one that matters.\n *\n * **A function the ORM cannot get a policy out of.** `resolveEntry` instantiates\n * every function entry with no arguments, and there are two ways that goes\n * wrong. A factory nobody called — `softDeletes` rather than\n * `softDeletes({ field })` — is not constructable at all and reached `new entry`\n * to produce `TypeError: function is not a constructor`. A class that *is*\n * constructable and whose constructor wants an argument gets through that check\n * and dies inside its own body instead, with\n * `TypeError: undefined is not an object (evaluating 'opts.field')`. Both are\n * loud and neither named the model, the index or the file, which on a 79-model\n * app leaves the first question unanswered; the second is the case that survived\n * a first pass at this error, because \"constructable\" is a fact about\n * `[[Construct]]` and says nothing about what the constructor then does.\n *\n * **An entry with no recognised hook.** `{ scopes: … }` and\n * `{ default: { scope: … } }` were accepted in silence: `applyPolicies`\n * dispatches on `before` / `scope` / `onCreate` / `onUpdate` and\n * `applyRedaction` on `redact`, so an entry spelling none of them contributes\n * nothing. The model then carries a visible `$policies` array, passes\n * `gemi check models` as correctly registered, and **reads unscoped** — the same\n * written-believed-not-in-effect shape `UnregisteredPolicyClassError` exists\n * for, arriving through a typo instead of through the registry.\n *\n * The line between *empty but valid* and *malformed* is drawn at \"would this\n * ever run\": an entry with at least one recognised hook that is callable is\n * accepted whatever else it carries, because a factory's return value and a\n * policy class routinely hold configuration and helpers beside the hooks, and\n * refusing unknown *extra* keys would reject code that works. An entry with no\n * callable hook at all is refused, `{}` included — it is indistinguishable from\n * a policy that was meant to do something, and a conditional policy belongs in\n * the array rather than in the entry.\n */\nexport class InvalidPolicyEntryError extends Error {\n  constructor(\n    /**\n     * The class whose **own** `$policies` array holds the entry — the class the\n     * author wrote the array on, which is not necessarily the model being\n     * queried when the array is on a base.\n     */\n    public readonly model: string,\n    /** The entry's index in that array. */\n    public readonly index: number,\n    public readonly reason:\n      | \"not-a-policy\"\n      | \"not-constructable\"\n      | \"constructor-threw\"\n      | \"no-hooks\"\n      | \"hook-not-callable\",\n    /** What was found in the entry's place, rendered for a human. */\n    public readonly found: string,\n    /**\n     * The hook names the runtime dispatches on, supplied by `policy.ts` so the\n     * list lives beside the code that reads it rather than being restated here.\n     */\n    hooks: readonly string[],\n    /**\n     * A key the entry actually spells and the hook it is within one edit of.\n     *\n     * **The pair, not the hook alone.** An unattributed \"Did you mean `scope`?\"\n     * after a list of five keys does not say which of them was read as a\n     * misspelling, so a reader who can see that none of them are has no way to\n     * dismiss it — and this error is about an authorization rule that is not in\n     * effect, where a suggestion followed wrongly costs a rename of something\n     * that was never the problem.\n     */\n    public readonly suggestion?: { key: string; hook: string },\n    options?: { cause?: unknown },\n  ) {\n    const where = `${model}.$policies[${index}]`;\n    const named =\n      hooks.length > 1\n        ? `${hooks.slice(0, -1).join(\", \")} or ${hooks[hooks.length - 1]}`\n        : (hooks[0] ?? \"\");\n\n    super(\n      reason === \"not-a-policy\"\n        ? `${where} is ${found}, which is not a policy. An entry is either a ` +\n            `policy object — { scope, onCreate, … } — or a class the ORM ` +\n            `constructs with no arguments.\\n\\n` +\n            `A policy that only sometimes applies belongs in the array rather ` +\n            `than in the entry:\\n\\n` +\n            `    static $policies = [...(multiTenant ? [tenantScope] : [])]\\n`\n        : reason === \"not-constructable\"\n          ? `${where} is ${found}, and a function entry is instantiated with ` +\n            `no arguments — so an arrow function, a plain function, or a ` +\n            `factory that was never called cannot be one.\\n\\n` +\n            `If it is a factory, call it:\\n\\n` +\n            `    static $policies = [softDeletes({ field: \"deletedAt\" })]\\n`\n          : reason === \"constructor-threw\"\n            ? `${where} is ${found}\\n\\n` +\n              `A class entry is constructed with no arguments. If this one ` +\n              `needs some, construct it yourself and put the instance in the ` +\n              `array:\\n\\n` +\n              `    static $policies = [new TenantPolicy({ field: \"orgId\" })]\\n\\n` +\n              `If the constructor reaches for something that is not ready yet, ` +\n              `note that it runs on the first query through this model, not at ` +\n              `boot.\\n`\n            : reason === \"hook-not-callable\"\n              ? `${where} has a ${found}, and every hook is called — so this ` +\n                `would throw on the first query that reached it rather than ` +\n                `doing whatever it was meant to do. Give it a function, or ` +\n                `leave the key out.\\n`\n              : `${where} has none of ${named}, so it would never run. The ` +\n                `model carries a visible $policies array and nothing in it ` +\n                `applies to any query — which for a scope means the model ` +\n                `reads unscoped. ${found}` +\n                (suggestion\n                  ? ` Is '${suggestion.key}' meant to be \\`${suggestion.hook}\\`?`\n                  : \"\") +\n                `\\n`,\n      options,\n    );\n    this.name = \"InvalidPolicyEntryError\";\n  }\n}\n\n/**\n * Thrown when `registerModels` finds two unrelated classes in one module both\n * claiming the same model name.\n *\n * Deriving registration from a module namespace works because the candidates\n * are normally a chain — a generated base, the application's subclass, perhaps\n * a typed view over it — and a chain has a least element to elect. Two classes\n * that extend the same base without extending each other do not: both were\n * written for this model, and only the author knows which one nested reads\n * should run.\n *\n * Refused rather than guessed at, because both guesses are silent. Picking\n * either would scope every `include` of the model by one class's policies while\n * the other's code keeps reading as though its own applied.\n *\n * **\"In one module\" is the exact scope, and the asymmetry is deliberate.**\n * Election happens per module, so two unrelated claims split across *different*\n * modules never meet inside one — the later import simply wins. What catches\n * that is the audit at the end of `registerModels` rather than this error, and\n * only when the two diverge in policies. Two unrelated *unpolicied* claims on\n * one name resolve by import order and nothing reports it, which is tolerable\n * for the same reason it is invisible: with no policies on either, the choice\n * changes no query's scope.\n */\nexport class AmbiguousModelRegistrationError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly candidates: readonly string[],\n  ) {\n    const named = candidates.map((candidate) => `'${candidate}'`).join(\", \");\n    super(\n      `Two classes in one module claim the model '${model}' — ${named} — and ` +\n        `neither extends the other, so there is no way to tell which one ` +\n        `nested relation reads should run.\\n\\n` +\n        `Say which, and registerModels will leave it alone:\\n\\n` +\n        `    import { register } from \"gemi/orm\"\\n` +\n        `    register(\"${model}\", ${candidates[0]})\\n\\n` +\n        `A class that is only a typed view over the same rows belongs in a ` +\n        `module you do not hand to registerModels.`,\n    );\n    this.name = \"AmbiguousModelRegistrationError\";\n  }\n}\n\n/**\n * Thrown when a statement would bind more parameters than the driver's wire\n * protocol can carry.\n *\n * Three shapes reach it, all of them scaling with the caller's *data* rather\n * than with the query's shape: `createMany` at `rows × columns`, an `in` list on\n * SQLite (one placeholder per element, and such a list is routinely\n * request-derived), and a to-many `include` on SQLite, which batches an `in`\n * over the parent keys. Both limits are hard and low enough to hit with an\n * ordinary import — Postgres counts parameters in an int16 (65535), SQLite\n * defaults `SQLITE_MAX_VARIABLE_NUMBER` to 32766. Postgres escapes the last two\n * either way: `= any($1)` is one parameter however long the array.\n *\n * Prisma chunks the insert automatically. Doing that here means several\n * statements, which without a transaction is a partially-applied `createMany`\n * on failure — so it waits for iteration 5, and until then this is a named gap\n * rather than a driver error naming neither the model nor the cause. Same\n * treatment as `ReturningUnsupportedError`, for the same reason.\n */\nexport class ParameterLimitError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly operation: string,\n    public readonly required: number,\n    public readonly limit: number,\n    public readonly dialect: string,\n    detail: string,\n  ) {\n    super(\n      `${model}.${operation} would bind ${required} parameters, and the ` +\n        `'${dialect}' driver accepts at most ${limit} in one statement. ` +\n        `${detail}` +\n        (operation === \"createMany\"\n          ? ` A createMany over the ceiling is normally split across statements ` +\n            `inside one transaction, so reaching this means splitting cannot ` +\n            `help: a single row binds more than the driver accepts.`\n          : ` Splitting is not something this operation can do for you — one ` +\n            `statement has to carry one answer. Narrow the query.`),\n    );\n    this.name = \"ParameterLimitError\";\n  }\n}\n\n/**\n * Thrown when a write omits a column that has no value to fall back on: not\n * supplied, no client-side default, no database default, and not nullable.\n *\n * Raised in the compiler rather than left to the database so the message names\n * the field and the model, instead of surfacing as `NOT NULL constraint failed`\n * with a column name and no context.\n */\nexport class MissingRequiredValueError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly operation: string,\n    public readonly field: string,\n  ) {\n    super(\n      `${model}.${operation} is missing a value for '${field}', which is ` +\n        `required and has no default.`,\n    );\n    this.name = \"MissingRequiredValueError\";\n  }\n}\n\n/**\n * Thrown when an `include` — or a relation-shaped key inside a `select` — names\n * something the model does not declare as a relation.\n */\nexport class UnknownRelationError extends Error {\n  constructor(\n    public readonly relation: string,\n    public readonly model: string,\n    known: string[],\n  ) {\n    super(\n      `'${relation}' is not a relation on model ${model}. ` +\n        (known.length > 0\n          ? `Known relations: ${known.join(\", \")}.`\n          : `${model} declares no relations.`),\n    );\n    this.name = \"UnknownRelationError\";\n  }\n}\n\n/**\n * Thrown when an include tree nests deeper than the guard allows.\n *\n * A cyclic include is legal and finite — `user -> accounts -> user` terminates\n * because the caller wrote a finite tree. What this catches is an *unbounded*\n * one: an argument tree built by a loop, or forwarded from a request body, that\n * describes a thousand levels. Under the batched planner every level is at least\n * one query, so the guard is what stops a malformed argument from becoming a\n * self-inflicted denial of service.\n */\nexport class RelationDepthExceededError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly limit: number,\n  ) {\n    super(\n      `The include tree nests more than ${limit} relations deep (at model ` +\n        `${model}). Deeply nested includes are legal, so this is a guard ` +\n        `against a generated or malformed argument tree rather than a limit on ` +\n        `modelling — every level costs at least one query.`,\n    );\n    this.name = \"RelationDepthExceededError\";\n  }\n}\n\n/**\n * Thrown when a relation names a model the registry does not hold. Every\n * relation in a generated artifact was emitted from a model in the same\n * `schema.prisma`, so this can only mean the artifact and the registry disagree.\n */\nexport class UnregisteredRelationTargetError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly relation: string,\n    public readonly target: string,\n    known: string[],\n  ) {\n    super(\n      `${model}.${relation} points at model '${target}', which nothing has ` +\n        `registered. The generated artifact and the registry disagree: re-run ` +\n        `\\`prisma generate\\`, and check that app/models/generated/index.ts is ` +\n        `imported. ` +\n        (known.length > 0\n          ? `Registered models: ${known.join(\", \")}.`\n          : `Nothing is registered at all.`),\n    );\n    this.name = \"UnregisteredRelationTargetError\";\n  }\n}\n\n/**\n * Thrown when a relation is registered on both sides but the two sides do not\n * describe a link the planner can follow: no matching `relationName` on the\n * other model, or a `from` / `to` naming a field that is not there. Like\n * `UnregisteredRelationTargetError`, it means a stale generated artifact — a\n * consistent one cannot produce it.\n */\nexport class MalformedRelationError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly relation: string,\n    detail: string,\n  ) {\n    super(\n      `Cannot resolve how ${model}.${relation} joins: ${detail} This means ` +\n        `app/models/generated is stale or hand-edited — re-run ` +\n        `\\`prisma generate\\`.`,\n    );\n    this.name = \"MalformedRelationError\";\n  }\n}\n\n/** Thrown when a relation resolves to a model name nothing registered. */\nexport class ModelNotRegisteredError extends Error {\n  constructor(name: string, known: string[]) {\n    super(\n      `No model is registered under the name '${name}'. ` +\n        (known.length > 0\n          ? `Registered models: ${known.join(\", \")}.`\n          : `Nothing is registered — is app/models/generated/index.ts imported?`),\n    );\n    this.name = \"ModelNotRegisteredError\";\n  }\n}\n\n/** Thrown when a model class is used before the generator has given it a schema. */\nexport class MissingModelSchemaError extends Error {\n  constructor(className: string) {\n    super(\n      `${className} has no $schema. Model subclasses must extend a generated ` +\n        `base class from app/models/generated/models.ts.`,\n    );\n    this.name = \"MissingModelSchemaError\";\n  }\n}\n\n/**\n * A `lock` asked for outside a transaction.\n *\n * A row lock is held until the transaction that took it ends. Outside one, the\n * statement is its own transaction, so the lock is released the moment the row\n * comes back — before the write it was meant to guard has even been issued. The\n * read would succeed and protect nothing, which is the failure this refuses: the\n * race the lock was written to close stays open, silently.\n *\n * Raised on SQLite too, where the lock itself compiles to nothing, so code that\n * forgot its transaction fails in development rather than first on Postgres.\n */\nexport class LockOutsideTransactionError extends Error {\n  constructor(\n    public readonly model: string,\n    public readonly operation: string,\n  ) {\n    super(\n      `${model}.${operation} was given 'lock' outside a transaction. A row ` +\n        `lock lasts until the transaction that took it ends, so outside one it ` +\n        `is released as soon as the row is read and protects nothing. Run the ` +\n        `read and the writes it guards inside Model.transaction(async () => { ` +\n        `... }).`,\n    );\n    this.name = \"LockOutsideTransactionError\";\n  }\n}\n"
   ],
   "mappings": ";AAQO,MAAM,UAA8B,KAAM,CAE7B,SACA,MACA,UAHlB,WAAW,CACO,EACA,EACA,EAsBhB,EACA,CACA,MACE,8BAA8B,WAAkB,KAAS,OACvD,CACJ,EA7BgB,gBACA,aACA,iBA4BhB,KAAK,KAAO,wBAEhB,CAuDO,MAAM,UAA6B,CAAsB,CAC9D,WAAW,CACT,EACA,EACA,EAEA,EACA,CACA,MAAM,EAAU,EAAO,EAAW,CAAM,EACxC,KAAK,KAAO,uBACZ,KAAK,QAAU,YAAY,OAAc,KAAS,OAAe,IAErE,CAEO,MAAM,UAAiC,CAAsB,CAClE,WAAW,CACT,EACA,EACA,EAEA,EACA,CACA,MAAM,EAAU,EAAO,EAAW,CAAM,EACxC,KAAK,KAAO,2BACZ,KAAK,QACH,gCAAgC,OAAc,KAAS,iDACV,IAEnD,CAOO,MAAM,UAA0B,KAAM,CAEzB,MACA,MAFlB,WAAW,CACO,EACA,EAChB,EACA,CACA,MACE,IAAI,8BAAkC,oBACnB,EAAM,KAAK,IAAI,IACpC,EAPgB,aACA,aAOhB,KAAK,KAAO,oBAEhB,CAYO,MAAM,UAAoB,KAAM,CAEnB,MACA,MAFlB,WAAW,CACO,EACA,EAChB,CACA,MACE,8BAA8B,KAAK,UAAU,OAAO,CAAK,CAAC,kBACpD,EAAM,cAAc,EAAM,4CAC9B,6EACA,eACJ,EARgB,aACA,aAQhB,KAAK,KAAO,cAEhB,CAOO,MAAM,UAA4B,KAAM,CAE3B,MACA,UAFlB,WAAW,CACO,EACA,EAChB,CACA,MAAM,MAAM,YAAgB,KAAS,KAAa,EAHlC,aACA,iBAGhB,KAAK,KAAO,sBAEhB,CAkBO,SAAS,CAAqB,CAAC,EAA8C,CAClF,GAAI,aAAiB,EAAqB,MAAO,GAEjD,OACE,OAAO,IAAU,UACjB,IAAU,MACT,EAA6B,OAAS,sBA4CpC,MAAM,UAA8B,KAAM,CAE7B,MACA,UAEA,OAEA,WANlB,WAAW,CACO,EACA,EAEA,EAEA,EAChB,EACA,CACA,MACE,iCAAiC,KAAS,KACvC,EAAO,OAAS,EAAI,QAAQ,EAAO,KAAK,IAAI,IAAM,KAClD,EAAa,iBAAiB,MAAiB,IAChD,OAAO,sCACT,CACF,EAdgB,aACA,iBAEA,cAEA,kBAUhB,KAAK,KAAO,wBAEhB,CA8CO,SAAS,CAAuB,CACrC,EACgC,CAChC,GAAI,aAAiB,EAAuB,MAAO,GAEnD,OACE,OAAO,IAAU,UACjB,IAAU,MACT,EAA6B,OAAS,wBAYpC,MAAM,UAAkC,KAAM,CAEjC,MACA,UACA,QAHlB,WAAW,CACO,EACA,EACA,EAChB,CACA,MACE,GAAG,KAAS,oDACN,uDACJ,6DACJ,EARgB,aACA,iBACA,eAOhB,KAAK,KAAO,4BAEhB,CAgBO,MAAM,UAA0B,KAAM,CAEzB,MACA,UACA,OAHlB,WAAW,CACO,EACA,EACA,EAA+B,SAC/C,CACA,MACE,IAAW,UACP,GAAG,KAAS,qOAIZ,GAAG,KAAS,mBAA2B,aAC7C,EAXgB,aACA,iBACA,cAUhB,KAAK,KAAO,oBAEhB,CASO,SAAS,CAAmB,CAAC,EAA4C,CAC9E,GAAI,aAAiB,EAAmB,MAAO,GAE/C,OACE,OAAO,IAAU,UACjB,IAAU,MACT,EAA6B,OAAS,oBAoCpC,MAAM,UAAyB,KAAM,CAExB,MACA,UACA,OAHlB,WAAW,CACO,EACA,EACA,EAChB,CACA,IAAM,EAAQ,EAAO,IAAI,CAAC,IAAU,IAAI,IAAQ,EAAE,KAAK,IAAI,EAC3D,MACE,GAAG,KAAS,YAAoB,YAAgB,mBAC9C,yEACA;AAAA;AAAA,kFAEwB,EAAO,gBAAgB,EAAO,kBACtD,0EACA,8DACJ,EAbgB,aACA,iBACA,cAYhB,KAAK,KAAO,mBAEhB,CAgCO,MAAM,UAAqC,KAAM,CAEpC,MAQA,WAEA,QAOA,QAlBlB,WAAW,CACO,EAQA,EAEA,EAOA,EAAkD,UAClE,CACA,MACE,IAAY,YACR,GAAG,aAAmB,4BAAqC,kIAGzD,wCAAkC,uDACG,kBAClC,2BAAoC;AAAA;AAAA;AAAA;AAAA,MAIhC;AAAA;AAAA,EACP,oEACG,8DACH,GAAG;AAAA,EACL,IAAY,UACV,GAAG,iDAAuD,SACvD,0EACkB,8BAClB,4DACH;AAAA;AAAA;AAAA,mBAEoB,aAAmB;AAAA,EACvC,iBAAiB,OAAW;AAAA,EAC5B,2BAA2B,iCACvB,SAAa,6BAAsC,uEAEvD,uEACA,SAAS;AAAA;AAAA,MACF;AAAA;AAAA,EACP,yEACA;AAAA,CAER,EApDgB,aAQA,kBAEA,eAOA,eAoChB,KAAK,KAAO,+BAEhB,CA8CO,MAAM,UAAgC,KAAM,CAO/B,MAEA,MACA,OAOA,MAgBA,WAhClB,WAAW,CAMO,EAEA,EACA,EAOA,EAKhB,EAWgB,EAChB,EACA,CACA,IAAM,EAAQ,GAAG,eAAmB,KAC9B,EACJ,EAAM,OAAS,EACX,GAAG,EAAM,MAAM,EAAG,EAAE,EAAE,KAAK,IAAI,QAAQ,EAAM,EAAM,OAAS,KAC3D,EAAM,IAAM,GAEnB,MACE,IAAW,eACP,GAAG,QAAY,kDACb,8EACA;AAAA;AAAA;AAAA;AAAA;AAAA,EAIF,IAAW,oBACT,GAAG,QAAY,gDACf,oEACA;AAAA;AAAA;AAAA;AAAA;AAAA,EAGA,IAAW,oBACT,GAAG,QAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQf,IAAW,oBACT,GAAG,WAAe,8CAClB;AAAA,EAGA,GAAG,iBAAqB,2FAExB,iEACA,mBAAmB,KAClB,EACG,QAAQ,EAAW,sBAAsB,EAAW,UACpD,IACJ;AAAA,EACV,CACF,EAxEgB,aAEA,aACA,cAOA,aAgBA,kBA+ChB,KAAK,KAAO,0BAEhB,CA0BO,MAAM,UAAwC,KAAM,CAEvC,MACA,WAFlB,WAAW,CACO,EACA,EAChB,CACA,IAAM,EAAQ,EAAW,IAAI,CAAC,IAAc,IAAI,IAAY,EAAE,KAAK,IAAI,EACvE,MACE,8CAA8C,aAAW,gBACvD;AAAA;AAAA;AAAA;AAAA;AAAA,gBAIiB,OAAW,EAAW;AAAA;AAAA,4GAG3C,EAbgB,aACA,kBAahB,KAAK,KAAO,kCAEhB,CAqBO,MAAM,UAA4B,KAAM,CAE3B,MACA,UACA,SACA,MACA,QALlB,WAAW,CACO,EACA,EACA,EACA,EACA,EAChB,EACA,CACA,MACE,GAAG,KAAS,gBAAwB,0BAC9B,6BAAmC,uBACpC,KACF,IAAc,aACX,4LAGA,wEACA,uDACR,EAjBgB,aACA,iBACA,gBACA,aACA,eAchB,KAAK,KAAO,sBAEhB,CAUO,MAAM,UAAkC,KAAM,CAEjC,MACA,UACA,MAHlB,WAAW,CACO,EACA,EACA,EAChB,CACA,MACE,GAAG,KAAS,6BAAqC,2CAEnD,EAPgB,aACA,iBACA,aAMhB,KAAK,KAAO,4BAEhB,CAMO,MAAM,UAA6B,KAAM,CAE5B,SACA,MAFlB,WAAW,CACO,EACA,EAChB,EACA,CACA,MACE,IAAI,iCAAwC,OACzC,EAAM,OAAS,EACZ,oBAAoB,EAAM,KAAK,IAAI,KACnC,GAAG,2BACX,EATgB,gBACA,aAShB,KAAK,KAAO,uBAEhB,CAYO,MAAM,UAAmC,KAAM,CAElC,MACA,MAFlB,WAAW,CACO,EACA,EAChB,CACA,MACE,oCAAoC,8BAC/B,kIAEH,wDACJ,EARgB,aACA,aAQhB,KAAK,KAAO,6BAEhB,CAOO,MAAM,UAAwC,KAAM,CAEvC,MACA,SACA,OAHlB,WAAW,CACO,EACA,EACA,EAChB,EACA,CACA,MACE,GAAG,KAAS,sBAA6B,8KAItC,EAAM,OAAS,EACZ,sBAAsB,EAAM,KAAK,IAAI,KACrC,gCACR,EAbgB,aACA,gBACA,cAYhB,KAAK,KAAO,kCAEhB,CASO,MAAM,UAA+B,KAAM,CAE9B,MACA,SAFlB,WAAW,CACO,EACA,EAChB,EACA,CACA,MACE,sBAAsB,KAAS,YAAmB,gBAChD,8DACA,oBACJ,EARgB,aACA,gBAQhB,KAAK,KAAO,yBAEhB,CAGO,MAAM,UAAgC,KAAM,CACjD,WAAW,CAAC,EAAc,EAAiB,CACzC,MACE,0CAA0C,QACvC,EAAM,OAAS,EACZ,sBAAsB,EAAM,KAAK,IAAI,KACrC,0EACR,EACA,KAAK,KAAO,0BAEhB,CAGO,MAAM,UAAgC,KAAM,CACjD,WAAW,CAAC,EAAmB,CAC7B,MACE,GAAG,4GAEL,EACA,KAAK,KAAO,0BAEhB,CAcO,MAAM,UAAoC,KAAM,CAEnC,MACA,UAFlB,WAAW,CACO,EACA,EAChB,CACA,MACE,GAAG,KAAS,yQAKd,EATgB,aACA,iBAShB,KAAK,KAAO,8BAEhB",
-  "debugId": "0C1E3CF5E22874BD64756E2164756E21",
+  "debugId": "02F9E26370CF4E2364756E2164756E21",
   "names": []
 }