gemi 0.51.0-rc.8 → 0.51.0

package/dist/app/index.js

@@ -1,4 +1,4 @@
 // @bun
-import{o as a}from"../chunk-ewgv1j8q.js";import"../chunk-3ykxxj3p.js";export{a as App};
+import{o as a}from"../chunk-ewgv1j8q.js";import"../chunk-zwpx6z5f.js";export{a as App};
 
 //# debugId=3341D7E6EC94F28A64756E2164756E21

package/dist/auth/AuthController.d.ts

@@ -68,7 +68,6 @@ export declare class AuthController extends Controller {
         email: string | null;
         emailVerifiedAt: Date | null;
         globalRole: number;
-        organizationId: number | null;
         accounts: import("./types").Account[];
         extension: Record<string, any>;
     }>;
@@ -79,7 +78,6 @@ export declare class AuthController extends Controller {
         email: string | null;
         emailVerifiedAt: Date | null;
         globalRole: number;
-        organizationId: number | null;
         accounts: import("./types").Account[];
         extension: Record<string, any>;
     }>;

package/dist/auth/AuthController.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthController.d.ts","sourceRoot":"","sources":["../../auth/AuthController.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAMlD,OAAO,KAAK,EAAc,IAAI,EAAE,MAAM,SAAS,CAAC;AAGhD,cAAM,aAAc,SAAQ,WAAW,CACrC;IACE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB,EACD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CACvB;IACC,MAAM;;;;;;;;;MASJ;CACH;AAED,cAAM,qBAAsB,SAAQ,WAAW,CAC7C;IACE,KAAK,EAAE,MAAM,CAAC;CACf,EACD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CACvB;IACC,MAAM;;;;;MAKJ;CACH;AAED,cAAM,oBAAqB,SAAQ,WAAW,CAC5C;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf,EACD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CACvB;IACC,MAAM;;;;;MAKJ;CACH;AAED,qBAAa,cAAe,SAAQ,UAAU;IACtC,EAAE;IAUF,WAAW,CAAC,GAAG;eAA4B,MAAM;6BAAK;;;IAmBtD,mBAAmB,CAAC,GAAG,4DAAoB;;;;;;;IAwC3C,eAAe,CACnB,GAAG;eAA4B,MAAM;aAAO,MAAM;6BAAK;IAoCnD,aAAa,CAAC,GAAG;eAA4B,MAAM;aAAO,MAAM;6BAAK;;;IAmCrE,QAAQ,CAAC,GAAG,gBAAsB;;;;;;;;;;;IAgDlC,MAAM,CAAC,GAAG,gBAAsB;;;;;;;;;;;IAgDhC,MAAM;IAmEN,OAAO,CAAC,GAAG,4DAAoB;IAqB/B,cAAc,CAAC,GAAG,wBAA8B;IA6BhD,aAAa,CAAC,GAAG,uBAA6B;IAsD9C,cAAc,CAClB,GAAG;qBAAkC,MAAM;qBAAe,MAAM;6BAAK;IA+BjE,aAAa,CAAC,GAAG,4DAAoB;;;IAcrC,aAAa,CAAC,GAAG,4DAAoB;;;IAoErC,oBAAoB,CAAC,GAAG;eAA4B,MAAM;6BAAK;;;CAetE"}
+{"version":3,"file":"AuthController.d.ts","sourceRoot":"","sources":["../../auth/AuthController.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAMlD,OAAO,KAAK,EAAc,IAAI,EAAE,MAAM,SAAS,CAAC;AAGhD,cAAM,aAAc,SAAQ,WAAW,CACrC;IACE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB,EACD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CACvB;IACC,MAAM;;;;;;;;;MASJ;CACH;AAED,cAAM,qBAAsB,SAAQ,WAAW,CAC7C;IACE,KAAK,EAAE,MAAM,CAAC;CACf,EACD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CACvB;IACC,MAAM;;;;;MAKJ;CACH;AAED,cAAM,oBAAqB,SAAQ,WAAW,CAC5C;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf,EACD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CACvB;IACC,MAAM;;;;;MAKJ;CACH;AAED,qBAAa,cAAe,SAAQ,UAAU;IACtC,EAAE;IAUF,WAAW,CAAC,GAAG;eAA4B,MAAM;6BAAK;;;IAmBtD,mBAAmB,CAAC,GAAG,4DAAoB;;;;;;;IAwC3C,eAAe,CACnB,GAAG;eAA4B,MAAM;aAAO,MAAM;6BAAK;IAoCnD,aAAa,CAAC,GAAG;eAA4B,MAAM;aAAO,MAAM;6BAAK;;;IAmCrE,QAAQ,CAAC,GAAG,gBAAsB;;;;;;;;;;IAgDlC,MAAM,CAAC,GAAG,gBAAsB;;;;;;;;;;IAgDhC,MAAM;IA6FN,OAAO,CAAC,GAAG,4DAAoB;IAqB/B,cAAc,CAAC,GAAG,wBAA8B;IA6BhD,aAAa,CAAC,GAAG,uBAA6B;IAsD9C,cAAc,CAClB,GAAG;qBAAkC,MAAM;qBAAe,MAAM;6BAAK;IA+BjE,aAAa,CAAC,GAAG,4DAAoB;;;IAcrC,aAAa,CAAC,GAAG,4DAAoB;;;IAgGrC,oBAAoB,CAAC,GAAG;eAA4B,MAAM;6BAAK;;;CAetE"}

package/dist/auth/UserProvider.d.ts

@@ -16,6 +16,24 @@ export declare class UserProvider {
      * server error. One wrapper, applied uniformly, so no method can forget.
      */
     protected run<T>(fn: () => Promise<T>): Promise<T>;
+    /**
+     * Runs `fn` inside a transaction on the connection the `User` model lives on.
+     * Every ORM query in it joins automatically, at any call depth — see
+     * `Model.transaction`.
+     *
+     * Here so that `AuthController` can make a sign-up atomic without importing a
+     * model: the controller has none, and reaching for a bare `Model.transaction`
+     * would open on the ambient connection rather than the one this provider's
+     * models are bound to. Nesting is a savepoint, so an application that already
+     * wrapped its own transaction around a sign-up composes instead of breaking.
+     *
+     * Deliberately **not** wrapped in `run`. `asSystem` is applied per query by
+     * the methods below, which keeps it to this class's own reads and writes;
+     * hoisting it here would silently suspend policies for `config.onUserCreated`
+     * too, and an application's provisioning writes should run under the same
+     * policy resolution as the rest of its code.
+     */
+    transaction<T>(fn: () => Promise<T>): Promise<T>;
     /**
      * Note the password is **removed from the returned object**, matching Prisma's
      * adapter, which uses `omit: { password: true }`.

package/dist/auth/UserProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserProvider.d.ts","sourceRoot":"","sources":["../../auth/UserProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,OAAO,EACP,UAAU,EACV,iBAAiB,EACjB,wBAAwB,EACxB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,4BAA4B,EAC5B,iBAAiB,EACjB,0BAA0B,EAC1B,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,IAAI,EACL,MAAM,SAAS,CAAC;AAqHjB,qBAAa,YAAY;IAMX,SAAS,CAAC,MAAM,EAAE,UAAU;IALxC;;;;OAIG;gBACmB,MAAM,GAAE,UAA6B;IAE3D;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIlD;;;;;;;;;;;;;;;;OAgBG;IACG,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/C,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAa/D,sBAAsB,CAC1B,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC;IAaV,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAMhE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxC,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAMhE,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IASlE,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA8BnE,aAAa,CACjB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAkB5B,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQrD,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpD,wBAAwB,CAC5B,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,MAAM,CAAC;IAWZ,sBAAsB,CAC1B,IAAI,EAAE,0BAA0B,GAC/B,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAS/B,wBAAwB,CAC5B,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,MAAM,CAAC;IAMZ,cAAc,CAClB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,CAAC;IAQhB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAY/D,oBAAoB,CACxB,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAQpC,sBAAsB,CAAC,IAAI,EAAE;QACjC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAgBlB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlD,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,GAAG,CAAC;CAKvE"}
+{"version":3,"file":"UserProvider.d.ts","sourceRoot":"","sources":["../../auth/UserProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,OAAO,EACP,UAAU,EACV,iBAAiB,EACjB,wBAAwB,EACxB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,4BAA4B,EAC5B,iBAAiB,EACjB,0BAA0B,EAC1B,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,IAAI,EACL,MAAM,SAAS,CAAC;AAuIjB,qBAAa,YAAY;IAMX,SAAS,CAAC,MAAM,EAAE,UAAU;IALxC;;;;OAIG;gBACmB,MAAM,GAAE,UAA6B;IAE3D;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIlD;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIhD;;;;;;;;;;;;;;;;OAgBG;IACG,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/C,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAa/D,sBAAsB,CAC1B,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC;IAaV,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAMhE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxC,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAMhE,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IASlE,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA8BnE,aAAa,CACjB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAkB5B,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQrD,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpD,wBAAwB,CAC5B,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,MAAM,CAAC;IAWZ,sBAAsB,CAC1B,IAAI,EAAE,0BAA0B,GAC/B,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAS/B,wBAAwB,CAC5B,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,MAAM,CAAC;IAMZ,cAAc,CAClB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,CAAC;IAQhB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAY/D,oBAAoB,CACxB,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAQpC,sBAAsB,CAAC,IAAI,EAAE;QACjC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAgBlB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlD,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,GAAG,CAAC;CAKvE"}

package/dist/auth/config.d.ts

@@ -15,6 +15,59 @@ export interface AuthConfig {
     generateEmailVerificationToken?: (email: string) => Promise<string> | string;
     generateMagicLinkToken?: (email: string) => Promise<string> | string;
     extendSession?: <T extends User>(user: T) => Promise<any> | any;
+    /**
+     * **This one is not a notification, whatever the name suggests.** It runs
+     * *inside* the transaction that creates the user, after the row is written
+     * and before it commits, and a throw rolls the user back. Every other `onXxx`
+     * here fires after its work is committed and can only report; this one
+     * participates in the write.
+     *
+     * The past tense is worth distrusting, then, and it is deliberate that this
+     * paragraph comes first: an application that mistakes this for `onSignUp`
+     * with better timing, and swallows its own errors inside it, gets exactly the
+     * orphaned user the hook exists to prevent.
+     *
+     * That is what it is for: an application that must create rows *alongside*
+     * every user — an organization, a workspace, a default settings row — has
+     * nowhere else to do it atomically. `onSignUp` fires after the commit on both
+     * paths, so provisioning there leaves an orphaned user when the second insert
+     * fails, which is a failure that only turns up in production.
+     *
+     * Fires on all three creation paths — email/password sign-up, invited
+     * sign-up, and first OAuth sign-in — and receives the same password-stripped
+     * user the endpoint returns, so a hook that logs its argument does not log a
+     * credential hash.
+     *
+     * On the invited path the inviting organization's `Account` row is already
+     * written when this runs, so a hook provisioning an own workspace should
+     * check before adding a second one.
+     *
+     * Four constraints come from where this runs:
+     *
+     * - **Writes to a policied model need `Model.asSystem`.** This runs with no
+     *   user in scope — a sign-up has not authenticated anybody yet — so a policy
+     *   whose `scope` or `onCreate` reads `ctx.user` raises `PolicyDeniedError`
+     *   under deny-by-default, and the rollback takes the user with it. That is
+     *   the correct behaviour and the reason this hook is *not* wrapped in
+     *   `UserProvider.run`: suspending policies for application code is a
+     *   sentence somebody types, never something a framework does quietly. Say it
+     *   at the call site:
+     *
+     *       await Model.asSystem(() => Organization.create({ data }))
+     *
+     * - **Errors thrown here reach the client as-is.** A `ValidationError` is a
+     *   400 on `POST /sign-up`; anything else is a 500. On the OAuth path there
+     *   is no form to fail — a throw is a 500 page mid-redirect. Either way no
+     *   user is created.
+     * - **Raw queries do not join the transaction.** ORM calls at any depth do,
+     *   automatically; a hand-written Prisma or `DB` statement runs outside and
+     *   survives the rollback.
+     * - **`Promise.all` over ORM calls is not safe here.** The transaction holds
+     *   one reserved connection, so await them in sequence. Keep network and
+     *   filesystem I/O out entirely — the connection is held for as long as this
+     *   runs.
+     */
+    onUserCreated?: (user: User) => Promise<void>;
     onSignUp?: (user: User, verificationToken: string, search: Record<string, string>) => Promise<void> | void;
     onSignIn?: (session: any, search: Record<string, string>) => Promise<void> | void;
     onSignOut?: (session: any) => Promise<void> | void;

package/dist/auth/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../auth/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,6BAA6B,CAAC,EAAE,MAAM,CAAC;IAEvC,aAAa,CAAC,EAAE,UAAU,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAE/C,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,2BAA2B,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,8BAA8B,CAAC,EAAE,CAC/B,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAGrE,aAAa,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAEhE,QAAQ,CAAC,EAAE,CACT,IAAI,EAAE,IAAI,EACV,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,CACT,OAAO,EAAE,GAAG,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnD,gBAAgB,CAAC,EAAE,CACjB,IAAI,EAAE,GAAG,EACT,iBAAiB,EAAE,MAAM,KACtB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzD,kBAAkB,CAAC,EAAE,CACnB,OAAO,EAAE,GAAG,EACZ,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,KAChD,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CAE/D;AAID,wBAAgB,kBAAkB,CAChC,MAAM,GAAE,UAAe,GACtB,QAAQ,CAAC,UAAU,CAAC,CA2CtB"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../auth/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,6BAA6B,CAAC,EAAE,MAAM,CAAC;IAEvC,aAAa,CAAC,EAAE,UAAU,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAE/C,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,2BAA2B,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,8BAA8B,CAAC,EAAE,CAC/B,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAGrE,aAAa,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmDG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9C,QAAQ,CAAC,EAAE,CACT,IAAI,EAAE,IAAI,EACV,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,CACT,OAAO,EAAE,GAAG,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnD,gBAAgB,CAAC,EAAE,CACjB,IAAI,EAAE,GAAG,EACT,iBAAiB,EAAE,MAAM,KACtB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzD,kBAAkB,CAAC,EAAE,CACnB,OAAO,EAAE,GAAG,EACZ,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,KAChD,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CAE/D;AAID,wBAAgB,kBAAkB,CAChC,MAAM,GAAE,UAAe,GACtB,QAAQ,CAAC,UAAU,CAAC,CA8CtB"}

package/dist/auth/routes.d.ts

@@ -37,7 +37,6 @@ export declare class AuthApiRouter extends ApiRouter {
             email: string | null;
             emailVerifiedAt: Date | null;
             globalRole: number;
-            organizationId: number | null;
             accounts: import("./types").Account[];
             extension: Record<string, any>;
         }>, Record<string, string>>;
@@ -51,7 +50,6 @@ export declare class AuthApiRouter extends ApiRouter {
             email: string | null;
             emailVerifiedAt: Date | null;
             globalRole: number;
-            organizationId: number | null;
             accounts: import("./types").Account[];
             extension: Record<string, any>;
         }>, Record<string, string>>;

package/dist/auth/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../auth/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD,cAAM,eAAgB,SAAQ,UAAU;IACtC,WAAW,WAAqB;IAChC,MAAM;;;;;;;MAMJ;CACH;AAED,qBAAa,cAAe,SAAQ,UAAU;IAC5C,WAAW,WAAqB;IAChC,MAAM;;;;;;;;;MAMJ;CACH;AAED,qBAAa,aAAc,SAAQ,SAAS;IAC1C,WAAW,WAAqB;IAChC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAaJ;CACH"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../auth/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD,cAAM,eAAgB,SAAQ,UAAU;IACtC,WAAW,WAAqB;IAChC,MAAM;;;;;;;MAMJ;CACH;AAED,qBAAa,cAAe,SAAQ,UAAU;IAC5C,WAAW,WAAqB;IAChC,MAAM;;;;;;;;;MAMJ;CACH;AAED,qBAAa,aAAc,SAAQ,SAAS;IAC1C,WAAW,WAAqB;IAChC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAaJ;CACH"}

package/dist/auth/types.d.ts

@@ -64,6 +64,13 @@ export type Account = {
     organizationRole: number;
     organization: Organization;
 };
+/**
+ * A user's organizations are reached through `accounts`, each of which carries
+ * the organization it is a membership in. There is deliberately no
+ * `organizationId` here: a user may be in more than one organization, so a
+ * single column could not answer the question, and `SESSION_USER` no longer
+ * selects one — see the note there.
+ */
 export interface User {
     id: number;
     publicId: string;
@@ -72,7 +79,6 @@ export interface User {
     emailVerifiedAt: Date | null;
     globalRole: number;
     password: string | null;
-    organizationId: number | null;
     accounts: Account[];
     extension: Record<string, any>;
 }

package/dist/auth/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../auth/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,GAAG,CAAC;IACV,OAAO,EAAE,GAAG,CAAC;IACb,OAAO,EAAE,GAAG,CAAC;IACb,kBAAkB,EAAE,GAAG,CAAC;IACxB,cAAc,EAAE,GAAG,CAAC;IACpB,sBAAsB,EAAE,GAAG,CAAC;IAC5B,aAAa,EAAE,GAAG,CAAC;CACpB;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;CAC5B,CAAC;AAEF,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,OAAO,EAAE,CAAC;IAEpB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,iBAAiB,EAAE,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,iBAAiB,EAAE,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,IAAI,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../auth/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,GAAG,CAAC;IACV,OAAO,EAAE,GAAG,CAAC;IACb,OAAO,EAAE,GAAG,CAAC;IACb,kBAAkB,EAAE,GAAG,CAAC;IACxB,cAAc,EAAE,GAAG,CAAC;IACpB,sBAAsB,EAAE,GAAG,CAAC;IAC5B,aAAa,EAAE,GAAG,CAAC;CACpB;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;CAC5B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,EAAE,CAAC;IAEpB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,iBAAiB,EAAE,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,iBAAiB,EAAE,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,IAAI,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb"}

package/dist/bin/gemi.js

@@ -36732,6 +36732,174 @@ var EXTRACTION_TARGETS = {
 };
 var TODO = "// TODO(gemi-migrate):";
 
+// bin/migrate/orm.ts
+var P2002_HAZARD = '`"P2002"` stops matching the moment the write it guards moves onto the ORM. ' + "gemi raises `UniqueConstraintError`, which carries `model`, `operation`, " + "`fields` and `constraint` and no `code` anywhere on its prototype chain \u2014 so " + "the check returns false, the recovery branch it exists to run never runs, and " + "nothing reports it: it compiles, it runs, and a test that mocks " + '`{ code: "P2002" }` still passes while the branch it certifies is dead. Use ' + "`isUniqueConstraintError` from `gemi/orm`. While some writes in this app are " + "still on Prisma, keep the old check as a second arm \u2014 " + '`isUniqueConstraintError(e) || (isRecord(e) && e.code === "P2002")` \u2014 and ' + "delete that arm when the last Prisma writer goes. See UPGRADE.md.";
+var PAGE_ARGUMENT_HAZARD = "`take` and `skip` must be integers \u2014 gemi refuses a fractional one with " + "`InvalidArgumentError` where Prisma truncated it, because SQLite answers " + "`limit 1.5` with an opaque driver error and Postgres rounds it up to 2 rows. " + "This value is not an integer literal, which is usually fine: confirm it is " + "truncated where it enters the app rather than reading this as a bug. " + '`Number(req.search.get("limit"))` is the shape that breaks, and a fractional ' + "`page` is the one to look hardest for \u2014 it never reaches the ORM itself, it " + "reaches it multiplied, as a fractional `skip`. `paginate({ page, perPage })` " + "from `gemi/orm` truncates and clamps in one place and cannot produce a value " + "the ORM refuses.";
+function annotateOrmPortHazards(source, label, notes) {
+  const spliceable = !JSX_FILE.test(label);
+  let result = source;
+  if (importsModelSurface(result)) {
+    result = runPass(result, prismaErrorCodeLiterals(result), '`"P2002"`', P2002_HAZARD, label, notes, spliceable);
+  }
+  result = runPass(result, nonIntegerPageArguments(result), "`take` / `skip`", PAGE_ARGUMENT_HAZARD, label, notes, spliceable);
+  return result;
+}
+var JSX_FILE = /\.[jt]sx$/i;
+function runPass(src, hits, what, message, label, notes, spliceable) {
+  if (!hits.length)
+    return src;
+  if (!spliceable) {
+    notes.push({
+      file: label,
+      message: `${what} on ${lineList(src, hits)} \u2014 reported rather than annotated: ` + `a \`//\` line inside JSX children is page text, not a comment, so ` + `writing one here would stop the file parsing. ${message}`
+    });
+    return src;
+  }
+  const marked = annotateLines(src, hits, message);
+  if (marked.annotated > 0) {
+    notes.push({
+      file: label,
+      message: `${what} (${occurrences(hits.length)}) \u2014 ${message}`
+    });
+  }
+  return marked.text;
+}
+var occurrences = (count) => count === 1 ? "1 occurrence" : `${count} occurrences`;
+function lineList(src, offsets) {
+  const numbers = [];
+  for (const offset of offsets) {
+    let line = 1;
+    for (let i = 0;i < offset && i < src.length; i++) {
+      if (src[i] === `
+`)
+        line++;
+    }
+    if (numbers[numbers.length - 1] !== line)
+      numbers.push(line);
+  }
+  return numbers.length === 1 ? `line ${numbers[0]}` : `lines ${numbers.join(", ")}`;
+}
+function prismaErrorCodeLiterals(src) {
+  const hits = [];
+  let i = 0;
+  while (i < src.length) {
+    const end = skipAtomic(src, i);
+    if (end === null || end <= i) {
+      i++;
+      continue;
+    }
+    const span = src.slice(i, end);
+    if (/^["'`]/.test(span) && span.slice(1, -1) === "P2002")
+      hits.push(i);
+    i = end;
+  }
+  return hits;
+}
+var MODEL_SURFACE = /(^|\/)models(\/|$)/;
+function importsModelSurface(src) {
+  return parseImports(src).some((decl) => decl.module === "gemi/orm" || MODEL_SURFACE.test(decl.module));
+}
+var PAGE_KEYS = ["take", "skip"];
+function nonIntegerPageArguments(src) {
+  const hits = [];
+  let i = 0;
+  while (i < src.length) {
+    const skipped = skipAtomic(src, i);
+    if (skipped !== null && skipped > i) {
+      i = skipped;
+      continue;
+    }
+    const key = PAGE_KEYS.find((candidate) => src.startsWith(candidate, i));
+    if (!key || /[\w$.]/.test(src[i - 1] ?? "")) {
+      i++;
+      continue;
+    }
+    let after = skipTrivia(src, i + key.length);
+    if (src[after] === "?")
+      after = skipTrivia(src, after + 1);
+    if (src[after] !== ":") {
+      i += key.length;
+      continue;
+    }
+    const valueStart = skipTrivia(src, after + 1);
+    const valueEnd = endOfValue(src, valueStart);
+    if (!isIntegerArgument(src.slice(valueStart, valueEnd).trim())) {
+      hits.push(i);
+    }
+    i = Math.max(valueEnd, i + key.length);
+  }
+  return hits;
+}
+var CLOSERS = { "(": ")", "[": "]", "{": "}" };
+function endOfValue(src, from) {
+  let i = from;
+  while (i < src.length) {
+    const skipped = skipAtomic(src, i);
+    if (skipped !== null && skipped > i) {
+      i = skipped;
+      continue;
+    }
+    const c = src[i];
+    const closer = CLOSERS[c];
+    if (closer) {
+      i = matchDelims(src, i, c, closer);
+      continue;
+    }
+    if (c === "," || c === ")" || c === "]" || c === "}" || c === ";" || c === `
+`) {
+      return i;
+    }
+    i++;
+  }
+  return src.length;
+}
+var INTEGER_LITERAL = /^-?\d+(?:_\d+)*$/;
+var TRUNCATING_CALL = /^(?:Math\.(?:trunc|floor|ceil|round)|(?:Number\.)?parseInt)\s*(?=\()/;
+var TYPE_POSITION = /^number(?:\s*\|\s*undefined)?$/;
+function isIntegerArgument(value) {
+  if (INTEGER_LITERAL.test(value))
+    return true;
+  if (TYPE_POSITION.test(value))
+    return true;
+  const call = TRUNCATING_CALL.exec(value);
+  if (!call)
+    return false;
+  const open = call[0].length;
+  return value[open] === "(" && matchDelims(value, open, "(", ")") === value.length;
+}
+function annotateLines(src, offsets, message) {
+  if (!offsets.length)
+    return { text: src, annotated: 0 };
+  const lines = src.split(`
+`);
+  const targets = new Set;
+  let cursor = 0;
+  let next = 0;
+  for (let index = 0;index < lines.length && next < offsets.length; index++) {
+    const end = cursor + lines[index].length;
+    while (next < offsets.length && offsets[next] <= end) {
+      targets.add(index);
+      next++;
+    }
+    cursor = end + 1;
+  }
+  const out = [];
+  let annotated = 0;
+  for (let index = 0;index < lines.length; index++) {
+    const line = lines[index];
+    if (targets.has(index)) {
+      const previous = out[out.length - 1] ?? "";
+      if (!previous.includes(message)) {
+        out.push(`${/^[ \t]*/.exec(line)[0]}${TODO} ${message}`);
+        annotated++;
+      }
+    }
+    out.push(line);
+  }
+  return { text: out.join(`
+`), annotated };
+}
+
 // bin/migrate/index.ts
 var GEMI_MODULES = [
   "gemi/services",
@@ -36835,6 +37003,34 @@ async function runMigrate(options) {
     if (rewritten !== source)
       changes.push({ file, contents: rewritten });
   }
+  const pending = new Map;
+  const removed = new Set;
+  changes.forEach((change, index) => {
+    if (change.contents === null)
+      removed.add(change.file);
+    else
+      pending.set(change.file, index);
+  });
+  const swept = new Set;
+  for (const file of walk(appDir)) {
+    if (removed.has(file))
+      continue;
+    swept.add(file);
+    const index = pending.get(file);
+    const before = index === undefined ? readFileSync(file, "utf8") : changes[index].contents;
+    const after = annotateOrmPortHazards(before, rel(rootDir, file), notes);
+    if (after === before)
+      continue;
+    if (index === undefined)
+      changes.push({ file, contents: after });
+    else
+      changes[index].contents = after;
+  }
+  for (const change of changes) {
+    if (change.contents === null || swept.has(change.file))
+      continue;
+    change.contents = annotateOrmPortHazards(change.contents, rel(rootDir, change.file), notes);
+  }
   for (const change of changes) {
     const label = rel(rootDir, change.file);
     if (change.contents === null) {
@@ -37686,22 +37882,43 @@ function auditModules(orm, files, baseline) {
       orm.registry.register(name, model);
   };
   const findings = [];
-  for (const file of files) {
-    restore();
-    for (const problem of orm.auditModelRegistrations(file.module)) {
-      if (problem.carries !== "queried")
-        continue;
-      findings.push({
-        file: file.label,
-        specifier: file.specifier,
-        className: problem.queried,
-        message: problem.message
-      });
+  const unreadable = [];
+  try {
+    for (const file of files) {
+      restore();
+      const problems = auditOne(orm, file, unreadable);
+      for (const problem of problems) {
+        if (problem.carries !== "queried")
+          continue;
+        findings.push({
+          file: file.label,
+          specifier: file.specifier,
+          className: problem.queried,
+          message: problem.message
+        });
+      }
     }
+  } finally {
+    restore();
+  }
+  if (unreadable.length > 0) {
+    throw new CheckModelsError(`${unreadable.length === 1 ? "A file" : `${unreadable.length} files`} ` + `could not be checked:
+
+${unreadable.join(`
+
+`)}`);
   }
-  restore();
   return findings;
 }
+function auditOne(orm, file, unreadable) {
+  try {
+    return orm.auditModelRegistrations(file.module);
+  } catch (error) {
+    unreadable.push(`${file.label}:
+    ${error.message}`);
+    return [];
+  }
+}
 
 class CheckModelsError extends Error {
 }
@@ -38241,5 +38458,5 @@ program.command("app:route-manifest").action(async () => {
 });
 program.parse();
 
-//# debugId=463261AABB9AC4E664756E2164756E21
+//# debugId=55F098D9978D9B5064756E2164756E21
 //# sourceMappingURL=gemi.js.map