gemi 0.44.1 → 0.46.0

package/dist/services/rate-limiter/RateLimiterServiceContainer.d.ts

@@ -1,8 +1,24 @@
 import { ServiceContainer } from "../ServiceContainer";
-import { RateLimiterServiceProvider } from "./RateLimiterServiceProvider";
+import type { RateLimiterServiceProvider } from "./RateLimiterServiceProvider";
+import type { RateLimitResult } from "./types";
+export interface ConsumeOptions {
+    /** Requests allowed per window. Defaults to the provider's `limit`. */
+    limit?: number;
+    /** Window length in **seconds**. Defaults to the provider's `window`. */
+    window?: number;
+    /** How much this call costs. Defaults to `1`. */
+    cost?: number;
+}
 export declare class RateLimiterServiceContainer extends ServiceContainer {
     service: RateLimiterServiceProvider;
     static _name: string;
     constructor(service: RateLimiterServiceProvider);
+    /**
+     * Records one hit against `key` and reports whether it fits the budget.
+     *
+     * Windows are given in seconds here — the unit routes, middleware and config
+     * are written in — and converted to the milliseconds drivers work in.
+     */
+    consume(key: string, options?: ConsumeOptions): Promise<RateLimitResult>;
 }
 //# sourceMappingURL=RateLimiterServiceContainer.d.ts.map

package/dist/services/rate-limiter/RateLimiterServiceContainer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RateLimiterServiceContainer.d.ts","sourceRoot":"","sources":["../../../services/rate-limiter/RateLimiterServiceContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E,qBAAa,2BAA4B,SAAQ,gBAAgB;IAG5C,OAAO,EAAE,0BAA0B;IAFtD,MAAM,CAAC,KAAK,SAAiC;gBAE1B,OAAO,EAAE,0BAA0B;CAGvD"}
+{"version":3,"file":"RateLimiterServiceContainer.d.ts","sourceRoot":"","sources":["../../../services/rate-limiter/RateLimiterServiceContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,2BAA4B,SAAQ,gBAAgB;IAG5C,OAAO,EAAE,0BAA0B;IAFtD,MAAM,CAAC,KAAK,SAAiC;gBAE1B,OAAO,EAAE,0BAA0B;IAItD;;;;;OAKG;IACG,OAAO,CACX,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,eAAe,CAAC;CAsB5B"}

package/dist/services/rate-limiter/RateLimiterServiceProvider.d.ts

@@ -1,7 +1,15 @@
 import { ServiceProvider } from "../ServiceProvider";
 import { RateLimiterDriver } from "./drivers/RateLimiterDriver";
 export declare class RateLimiterServiceProvider extends ServiceProvider {
+    /**
+     * Where counters live. In-process by default; swap in `RedisRateLimiter` once
+     * the app runs on more than one instance.
+     */
     driver: RateLimiterDriver;
+    /** Requests allowed per window when the `rate-limit` DSL omits a limit. */
+    limit: number;
+    /** Window length in **seconds** when the `rate-limit` DSL omits one. */
+    window: number;
     boot(): void;
 }
 //# sourceMappingURL=RateLimiterServiceProvider.d.ts.map

package/dist/services/rate-limiter/RateLimiterServiceProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RateLimiterServiceProvider.d.ts","sourceRoot":"","sources":["../../../services/rate-limiter/RateLimiterServiceProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,qBAAa,0BAA2B,SAAQ,eAAe;IAC7D,MAAM,EAAE,iBAAiB,CAA6B;IAEtD,IAAI;CACL"}
+{"version":3,"file":"RateLimiterServiceProvider.d.ts","sourceRoot":"","sources":["../../../services/rate-limiter/RateLimiterServiceProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,qBAAa,0BAA2B,SAAQ,eAAe;IAC7D;;;OAGG;IACH,MAAM,EAAE,iBAAiB,CAA6B;IAEtD,2EAA2E;IAC3E,KAAK,SAAQ;IAEb,wEAAwE;IACxE,MAAM,SAAM;IAEZ,IAAI;CACL"}

package/dist/services/rate-limiter/drivers/InMemoryRateLimiterDriver.d.ts

@@ -1,9 +1,35 @@
+import type { ConsumeParams, RateLimitResult } from "../types";
 import { RateLimiterDriver } from "./RateLimiterDriver";
+export interface InMemoryRateLimiterOptions {
+    /**
+     * Hard cap on tracked keys. Reached only by traffic that never repeats a key
+     * (spoofed `x-forwarded-for`, for instance); the map is swept of dead buckets
+     * first and only then evicts live ones, oldest touched first.
+     *
+     * Defaults to 100k keys — a few MB, and far more than a single instance
+     * legitimately sees inside one window.
+     */
+    maxKeys?: number;
+}
+/**
+ * Per-process rate limiter. The default driver, and the right one for a single
+ * instance or for development.
+ *
+ * State lives in this process only: with N instances behind a load balancer the
+ * effective limit is N × the configured limit, and it resets on deploy. Point
+ * the service provider at `RedisRateLimiter` once you run more than one.
+ */
 export declare class InMemoryRateLimiter extends RateLimiterDriver {
-    requests: Map<string, {
-        date: number;
-        count: number;
-    }>;
-    consume(id: string, path: string): number;
+    private buckets;
+    private maxKeys;
+    constructor(options?: InMemoryRateLimiterOptions);
+    consume(params: ConsumeParams): RateLimitResult;
+    /** Drops all counters. Mainly useful in tests. */
+    clear(): void;
+    /** Number of tracked keys. Exposed for tests and diagnostics. */
+    get size(): number;
+    /** Advances a bucket to `windowStart`, creating it when absent or stale. */
+    private roll;
+    private evict;
 }
 //# sourceMappingURL=InMemoryRateLimiterDriver.d.ts.map

package/dist/services/rate-limiter/drivers/InMemoryRateLimiterDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"InMemoryRateLimiterDriver.d.ts","sourceRoot":"","sources":["../../../../services/rate-limiter/drivers/InMemoryRateLimiterDriver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,qBAAa,mBAAoB,SAAQ,iBAAiB;IACxD,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAa;IAEnE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAejC"}
+{"version":3,"file":"InMemoryRateLimiterDriver.d.ts","sourceRoot":"","sources":["../../../../services/rate-limiter/drivers/InMemoryRateLimiterDriver.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAUxD,MAAM,WAAW,0BAA0B;IACzC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,qBAAa,mBAAoB,SAAQ,iBAAiB;IACxD,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,GAAE,0BAA+B;IAKpD,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,eAAe;IAwC/C,kDAAkD;IAClD,KAAK;IAIL,iEAAiE;IACjE,IAAI,IAAI,WAEP;IAED,4EAA4E;IAC5E,OAAO,CAAC,IAAI;IAyBZ,OAAO,CAAC,KAAK;CAgBd"}

package/dist/services/rate-limiter/drivers/RateLimiterDriver.d.ts

@@ -1,4 +1,14 @@
+import type { ConsumeParams, RateLimitResult } from "../types";
 export declare abstract class RateLimiterDriver {
-    abstract consume(userId: string, requestPath: string): number;
+    /**
+     * Records one request against `params.key` and reports whether it fits.
+     *
+     * Implementations must decide *and* record atomically — two concurrent calls
+     * for the same key may never both be told they were the last one that fit.
+     *
+     * May be sync or async: the in-memory driver answers immediately, a network
+     * backed driver returns a promise. Callers always `await` the result.
+     */
+    abstract consume(params: ConsumeParams): Promise<RateLimitResult> | RateLimitResult;
 }
 //# sourceMappingURL=RateLimiterDriver.d.ts.map

package/dist/services/rate-limiter/drivers/RateLimiterDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RateLimiterDriver.d.ts","sourceRoot":"","sources":["../../../../services/rate-limiter/drivers/RateLimiterDriver.ts"],"names":[],"mappings":"AAAA,8BAAsB,iBAAiB;IACrC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM;CAC9D"}
+{"version":3,"file":"RateLimiterDriver.d.ts","sourceRoot":"","sources":["../../../../services/rate-limiter/drivers/RateLimiterDriver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAE/D,8BAAsB,iBAAiB;IACrC;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CACd,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe;CAC9C"}

package/dist/services/rate-limiter/drivers/RedisRateLimiterDriver.d.ts

@@ -0,0 +1,59 @@
+import type { ConsumeParams, RateLimitResult } from "../types";
+import { RateLimiterDriver } from "./RateLimiterDriver";
+/**
+ * The slice of Bun's `RedisClient` this driver needs. Narrow on purpose: any
+ * client exposing `send(command, args)` works, which keeps the driver testable
+ * without a live server.
+ */
+export interface RateLimiterRedisClient {
+    send(command: string, args: string[]): Promise<any>;
+}
+export interface RedisRateLimiterOptions {
+    /**
+     * Client to run against. Defaults to the app's shared client from
+     * `RedisServiceProvider`, resolved lazily so constructing the driver never
+     * requires a kernel or a connection.
+     */
+    client?: RateLimiterRedisClient;
+    /** Key namespace. Defaults to `gemi:rl`. */
+    prefix?: string;
+    /**
+     * What to do when Redis is unreachable. `true` (the default) admits the
+     * request — a limiter outage should not take the site down with it. Set
+     * `false` for endpoints where an unmetered request is worse than a rejected
+     * one (payments, sign-up, anything that costs money per call).
+     */
+    failOpen?: boolean;
+    /** Called with every Redis failure. Defaults to `console.error`. */
+    onError?: (error: unknown) => void;
+}
+/**
+ * Rate limiter backed by Redis, so every instance of the app counts against the
+ * same budget. Use it as soon as you run more than one process.
+ *
+ * ```ts
+ * // app/kernel/providers/RateLimiterServiceProvider.ts
+ * export default class extends RateLimiterServiceProvider {
+ *   driver = new RedisRateLimiter();
+ * }
+ * ```
+ *
+ * Window boundaries come from the app server's clock, not Redis's, so keep
+ * instances on NTP. A few seconds of skew only shifts where a window starts; it
+ * cannot double a budget the way an unsynchronised fixed window would.
+ */
+export declare class RedisRateLimiter extends RateLimiterDriver {
+    private injectedClient?;
+    private prefix;
+    private failOpen;
+    private onError;
+    /** Cached `SCRIPT LOAD` result, so the script body is sent at most once. */
+    private scriptSha;
+    constructor(options?: RedisRateLimiterOptions);
+    consume(params: ConsumeParams): Promise<RateLimitResult>;
+    private get client();
+    /** Runs the script by digest, loading it on first use and after a flush. */
+    private run;
+    private load;
+}
+//# sourceMappingURL=RedisRateLimiterDriver.d.ts.map

package/dist/services/rate-limiter/drivers/RedisRateLimiterDriver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RedisRateLimiterDriver.d.ts","sourceRoot":"","sources":["../../../../services/rate-limiter/drivers/RedisRateLimiterDriver.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,oEAAoE;IACpE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpC;AAyCD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,gBAAiB,SAAQ,iBAAiB;IACrD,OAAO,CAAC,cAAc,CAAC,CAAyB;IAChD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAU;IAC1B,OAAO,CAAC,OAAO,CAA2B;IAE1C,4EAA4E;IAC5E,OAAO,CAAC,SAAS,CAAgC;gBAErC,OAAO,GAAE,uBAA4B;IAQ3C,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC;IAwD9D,OAAO,KAAK,MAAM,GAkBjB;IAED,4EAA4E;YAC9D,GAAG;IAejB,OAAO,CAAC,IAAI;CAcb"}

package/dist/services/rate-limiter/slidingWindow.d.ts

@@ -0,0 +1,55 @@
+import type { RateLimitResult } from "./types";
+/**
+ * The sliding-window-counter algorithm, shared by every driver.
+ *
+ * A fixed window is cheap but lets a client spend its whole budget at the end
+ * of one window and again at the start of the next — twice the limit across a
+ * window's worth of time. A true sliding log fixes that but has to keep a
+ * timestamp per request.
+ *
+ * The counter variant keeps two integers per key (this window and the one
+ * before it) and estimates usage by weighting the previous window by how much
+ * of it still overlaps the trailing window:
+ *
+ *     usage = previous * (window - elapsed) / window + current
+ *
+ * That is a ~0.003% error on real traffic and costs two integers per key, so
+ * it is what the in-memory and Redis drivers both implement.
+ */
+/** Epoch ms of the start of the window `now` falls into. */
+export declare function windowStartFor(now: number, window: number): number;
+/** Weight of the previous window's count, from `1` down to `0`. */
+export declare function previousWeight(elapsed: number, window: number): number;
+/** Estimated usage of the trailing `window` ending at `now`. */
+export declare function estimateUsage(current: number, previous: number, elapsed: number, window: number): number;
+/**
+ * How long until a request costing `cost` would be admitted, in milliseconds.
+ *
+ * Solves the usage equation for `elapsed` instead of guessing: the caller gets
+ * a `Retry-After` that lands the moment capacity actually frees up rather than
+ * at the end of the window, which for a sliding window is usually far too late.
+ */
+export declare function timeUntilAllowed(params: {
+    current: number;
+    previous: number;
+    elapsed: number;
+    window: number;
+    limit: number;
+    cost: number;
+}): number;
+/**
+ * Turns a driver's post-operation counters into the result the caller sees.
+ * `current` and `previous` are the counts *after* an allowed request has been
+ * recorded, so every driver reports the same numbers for the same state.
+ */
+export declare function buildResult(params: {
+    allowed: boolean;
+    current: number;
+    previous: number;
+    now: number;
+    elapsed: number;
+    window: number;
+    limit: number;
+    cost: number;
+}): RateLimitResult;
+//# sourceMappingURL=slidingWindow.d.ts.map

package/dist/services/rate-limiter/slidingWindow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slidingWindow.d.ts","sourceRoot":"","sources":["../../../services/rate-limiter/slidingWindow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C;;;;;;;;;;;;;;;;GAgBG;AAEH,4DAA4D;AAC5D,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAEzD;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAG7D;AAED,gEAAgE;AAChE,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,UAGf;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd,UA2BA;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,eAAe,CA+BlB"}

package/dist/services/rate-limiter/types.d.ts

@@ -1,2 +1,36 @@
-export {};
+/**
+ * A single request for capacity from the rate limiter.
+ *
+ * `key` identifies the bucket — everything the caller wants counted together.
+ * The limiter never invents part of the key on its own, so callers stay in
+ * control of what is limited (an IP, an IP plus a route, a user id, ...).
+ */
+export interface ConsumeParams {
+    key: string;
+    /** Maximum cost allowed inside one window. */
+    limit: number;
+    /** Window length in **milliseconds**. */
+    window: number;
+    /** How much this request costs. Defaults to `1`. */
+    cost?: number;
+}
+export interface RateLimitResult {
+    /** `false` means the caller is over budget and should be rejected. */
+    allowed: boolean;
+    /** The limit this decision was made against. */
+    limit: number;
+    /**
+     * Capacity left in the window, floored to a whole request. `0` when the
+     * request was denied.
+     */
+    remaining: number;
+    /**
+     * Epoch milliseconds. When allowed, the end of the current window — the
+     * point where the oldest counted requests have fully decayed away. When
+     * denied, the earliest moment a retry of the same cost can succeed.
+     */
+    resetAt: number;
+    /** Milliseconds to wait before retrying. `0` when the request was allowed. */
+    retryAfter: number;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/services/rate-limiter/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../services/rate-limiter/types.ts"],"names":[],"mappings":""}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../services/rate-limiter/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/services/router/ViewRouterServiceContainer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ViewRouterServiceContainer.d.ts","sourceRoot":"","sources":["../../../services/router/ViewRouterServiceContainer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAIzC,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAO7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAKvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA4CxD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,YAAY,CAAC;AAE/C,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,EAAE,QAc9D;AAED,qBAAa,0BAA2B,SAAQ,gBAAgB;IAW3C,OAAO,EAAE,yBAAyB;IAVrD,MAAM,CAAC,KAAK,SAAgC;IAE5C,cAAc,EAAE,cAAc,CAAM;IACpC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAM;IAC7C,0FAA0F;IAC1F,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAM;IACnD,aAAa,EAAE,aAAa,CAAM;IAClC,iBAAiB,EAAE,MAAM,EAAE,CAAM;IACjC,IAAI,EAAE,GAAG,CAAQ;gBAEE,OAAO,EAAE,yBAAyB;IAiBrD,IAAI;IAEE,YAAY,CAAC,GAAG,EAAE,WAAW;YAarB,MAAM;IAuKd,iBAAiB,CAAC,GAAG,EAAE,OAAO,gCArGZ;QACpB,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3C,aAAa,EAAE,GAAG,CAAC;QACnB,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAC5B;CA+VJ"}
+{"version":3,"file":"ViewRouterServiceContainer.d.ts","sourceRoot":"","sources":["../../../services/router/ViewRouterServiceContainer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAIzC,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,wBAAwB,CAAC;AAIhC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAK7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAKvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA4CxD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,YAAY,CAAC;AAE/C,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,EAAE,QAc9D;AAED,qBAAa,0BAA2B,SAAQ,gBAAgB;IAW3C,OAAO,EAAE,yBAAyB;IAVrD,MAAM,CAAC,KAAK,SAAgC;IAE5C,cAAc,EAAE,cAAc,CAAM;IACpC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAM;IAC7C,0FAA0F;IAC1F,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAM;IACnD,aAAa,EAAE,aAAa,CAAM;IAClC,iBAAiB,EAAE,MAAM,EAAE,CAAM;IACjC,IAAI,EAAE,GAAG,CAAQ;gBAEE,OAAO,EAAE,yBAAyB;IAiBrD,IAAI;IAEE,YAAY,CAAC,GAAG,EAAE,WAAW;YAarB,MAAM;IAuKd,iBAAiB,CAAC,GAAG,EAAE,OAAO,gCArGZ;QACpB,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3C,aAAa,EAAE,GAAG,CAAC;QACnB,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAC5B;CAyXJ"}

package/dist/services/router/ViewRouterServiceProvider.d.ts

@@ -5,6 +5,16 @@ import { ServiceProvider } from "../ServiceProvider";
 export declare class ViewRouterServiceProvider extends ServiceProvider {
     root: (props: any) => JSX.Element;
     rootRouter: new () => ViewRouter;
+    /**
+     * Whether a client-side navigation may skip the handlers of the layout
+     * segments the client already has mounted, rather than re-running the whole
+     * chain for every route below a layout.
+     *
+     * Set to `false` to run every handler on every navigation. Prefer
+     * `alwaysRun()` on the one layout that needs it — this switch is for when an
+     * app cannot audit them all at once.
+     */
+    partialRendering: boolean;
     boot(): void;
     onRequestStart(_req: HttpRequest): void | Promise<void>;
     onRequestEnd(_req: HttpRequest): void | Promise<void>;

package/dist/services/router/ViewRouterServiceProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ViewRouterServiceProvider.d.ts","sourceRoot":"","sources":["../../../services/router/ViewRouterServiceProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,qBAAa,yBAA0B,SAAQ,eAAe;IAC5D,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,OAAO,CAAC;IAClC,UAAU,EAAE,UAAU,UAAU,CAAC;IAEjC,IAAI;IAEJ,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IACvD,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IACrD,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CACpE"}
+{"version":3,"file":"ViewRouterServiceProvider.d.ts","sourceRoot":"","sources":["../../../services/router/ViewRouterServiceProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,qBAAa,yBAA0B,SAAQ,eAAe;IAC5D,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,OAAO,CAAC;IAClC,UAAU,EAAE,UAAU,UAAU,CAAC;IAEjC;;;;;;;;OAQG;IACH,gBAAgB,UAAQ;IAExB,IAAI;IAEJ,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IACvD,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IACrD,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CACpE"}

package/dist/services/router/createFlatViewRoutes.d.ts

@@ -1,16 +1,32 @@
 import type { HttpRequest } from "../../http";
 import type { ViewRoutes } from "../../http/ViewRouter";
 export type ViewRouteExec = (req: HttpRequest<any, any>) => any;
+/**
+ * One entry per segment of a route, parallel to `exec` — `segments[i]` is what
+ * `exec[i]` renders. `path` is the segment's own route pattern, prefixed by
+ * every ancestor, so the last segment's `path` is always the flat route key.
+ *
+ * Partial rendering compares these pairwise between the route the client is on
+ * and the one it is navigating to, to find the segments it can skip.
+ */
+export type ViewRouteSegment = {
+    path: string;
+    viewPath: string;
+    /** Layout opted out of being skipped, via `alwaysRun()`. */
+    alwaysRun?: boolean;
+};
 export type FlatViewRoutes = Record<string, {
     exec: ViewRouteExec[];
     middleware: (string | any)[];
     viewPath: string;
+    segments: ViewRouteSegment[];
 }>;
 export declare function createFlatViewRoutes(routes: ViewRoutes): {
     [k: string]: {
         exec: ViewRouteExec[];
         middleware: (string | any)[];
         viewPath: string;
+        segments: ViewRouteSegment[];
     };
 };
 //# sourceMappingURL=createFlatViewRoutes.d.ts.map

package/dist/services/router/createFlatViewRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createFlatViewRoutes.d.ts","sourceRoot":"","sources":["../../../services/router/createFlatViewRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC;AAEhE,MAAM,MAAM,cAAc,GAAG,MAAM,CACjC,MAAM,EACN;IAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAAC,UAAU,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAC1E,CAAC;AAWF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,UAAU;;cAZ7C,aAAa,EAAE;oBAAc,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE;kBAAY,MAAM;;EAoExE"}
+{"version":3,"file":"createFlatViewRoutes.d.ts","sourceRoot":"","sources":["../../../services/router/createFlatViewRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,MAAM,CACjC,MAAM,EACN;IACE,IAAI,EAAE,aAAa,EAAE,CAAC;IACtB,UAAU,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B,CACF,CAAC;AAmCF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,UAAU;;cAxC7C,aAAa,EAAE;oBACT,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE;kBAClB,MAAM;kBACN,gBAAgB,EAAE;;EAwG/B"}

package/dist/services/router/matchViewRoute.d.ts

@@ -0,0 +1,12 @@
+import type { FlatViewRoutes } from "./createFlatViewRoutes";
+export interface ViewRouteMatch {
+    routePath: string;
+    params: Record<string, string>;
+    route: FlatViewRoutes[string];
+}
+/**
+ * First route whose pattern matches `pathname`. `flatViewRoutes` is ordered
+ * least-specific-first, so this is insertion order, not a best match.
+ */
+export declare function matchViewRoute(flatViewRoutes: FlatViewRoutes, pathname: string): ViewRouteMatch | null;
+//# sourceMappingURL=matchViewRoute.d.ts.map

package/dist/services/router/matchViewRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matchViewRoute.d.ts","sourceRoot":"","sources":["../../../services/router/matchViewRoute.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,MAAM,GACf,cAAc,GAAG,IAAI,CAavB"}

package/dist/services/router/planPartialRender.d.ts

@@ -0,0 +1,43 @@
+import type { FlatViewRoutes, ViewRouteSegment } from "./createFlatViewRoutes";
+/** A route, as matched for one request, in the terms partial rendering needs. */
+export interface PartialRenderRoute {
+    segments: ViewRouteSegment[];
+    params: Record<string, string>;
+    search: string;
+}
+export interface PartialRenderPlan {
+    /** Index of the first segment whose handler has to run. */
+    startIndex: number;
+    /** View paths of the segments that were skipped, in order. */
+    carriedViews: string[];
+}
+/**
+ * Works out which of the target route's segments the client already has
+ * rendered, and so which of its handlers this request can skip.
+ *
+ * A segment is carried forward only when it is *the same segment on the same
+ * resolved path*: `/app/A/chat` → `/app/A/lists` reuses the layout, but
+ * `/app/A/chat` → `/app/B/chat` re-runs it even though the view is the same.
+ *
+ * The target's own leaf always runs — navigating to the URL you are already on
+ * is a reload, not a no-op.
+ */
+export declare function planPartialRender(from: PartialRenderRoute | null, to: PartialRenderRoute): PartialRenderPlan;
+/**
+ * Turns the `x-gemi-from` header into a plan for the request being served.
+ *
+ * Every way of not knowing what the client has — no header, an unparseable
+ * one, a path this server does not route — ends in the same place: render
+ * everything. The client is telling the server what to skip, so the failure
+ * mode has to be doing the work, never trusting a value that did not check out.
+ */
+export declare function resolvePartialRender(options: {
+    flatViewRoutes: FlatViewRoutes;
+    supportedLocales: string[];
+    /** Raw `x-gemi-from` value. */
+    from: string | null;
+    /** Origin to resolve the header value against. */
+    origin: string;
+    to: PartialRenderRoute;
+}): PartialRenderPlan;
+//# sourceMappingURL=planPartialRender.d.ts.map

package/dist/services/router/planPartialRender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planPartialRender.d.ts","sourceRoot":"","sources":["../../../services/router/planPartialRender.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/E,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAWD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,kBAAkB,GAAG,IAAI,EAC/B,EAAE,EAAE,kBAAkB,GACrB,iBAAiB,CAsCnB;AAWD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAC5C,cAAc,EAAE,cAAc,CAAC;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,kBAAkB,CAAC;CACxB,GAAG,iBAAiB,CA6BpB"}

package/dist/utils/partialRender.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Route the client is currently rendering, sent on `.json` navigations so the
+ * server can skip the handlers of the segments that route already has mounted.
+ * Value is a locale-less pathname plus search, e.g. `/app/A/chat?tab=2`.
+ */
+export declare const PARTIAL_RENDER_HEADER = "x-gemi-from";
+/** What the server reports back about the skip it performed, if any. */
+export interface PartialRenderInfo {
+    /** The `x-gemi-from` value the plan was computed against. */
+    from: string;
+    /** View paths of the skipped segments, in order. Their data is carried forward. */
+    carriedViews: string[];
+}
+/**
+ * The `x-gemi-from` value for the route the client starts on.
+ *
+ * On the first render the router's `pathname` is still the route *pattern* the
+ * server matched — it only becomes a resolved path once the history listener
+ * has run — so this has to apply the params. Sending `/app/:orgId/chat` names
+ * no route the server can resolve, and the first navigation after every full
+ * page load would skip nothing.
+ */
+export declare function initialRenderedRoute(route: {
+    pathname?: string;
+    params?: Record<string, string>;
+    search?: string;
+}): string;
+//# sourceMappingURL=partialRender.d.ts.map

package/dist/utils/partialRender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"partialRender.d.ts","sourceRoot":"","sources":["../../utils/partialRender.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD,wEAAwE;AACxE,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,UAKA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gemi",
-  "version": "0.44.1",
+  "version": "0.46.0",
   "private": false,
   "license": "MIT",
   "author": "Enes Tufekci <enes@gemijs.dev>",

package/dist/chunk-drbqadx7.js

@@ -1,4 +0,0 @@
-// @bun
-import{Na as a,Oa as b,Pa as c,Qa as d,Ra as e,Sa as f,Ta as g}from"./chunk-knrx23te.js";import"./chunk-nx8t65g3.js";import"./chunk-sdj112nj.js";import"./chunk-6gtmkbh0.js";export{g as fromEnv,c as ENV_SESSION,b as ENV_SECRET,a as ENV_KEY,d as ENV_EXPIRATION,e as ENV_CREDENTIAL_SCOPE,f as ENV_ACCOUNT_ID};
-
-//# debugId=1329E74B99E0D77464756E2164756E21